last executing test programs: 3m52.024887594s ago: executing program 3 (id=3470): r0 = socket$unix(0x1, 0x5, 0x0) getsockopt$IP_SET_OP_GET_FNAME(r0, 0x1, 0x53, 0x0, &(0x7f0000001340)) (async) r1 = socket$key(0xf, 0x3, 0x2) sendmsg$key(r1, &(0x7f00005f5000)={0x0, 0x0, &(0x7f0000000280)={&(0x7f00000004c0)=ANY=[@ANYBLOB="0261000004000000000000000000000002000100000000000001000000000000"], 0x20}}, 0x0) (async) r2 = socket$packet(0x11, 0x3, 0x300) setsockopt$packet_int(r2, 0x107, 0xf, &(0x7f0000006ffc)=0x4000000000000200, 0xe50fb6c50bc849c9) r3 = socket$nl_route(0x10, 0x3, 0x0) (async) r4 = socket(0x10, 0x803, 0x0) sendmsg$nl_route_sched(r4, &(0x7f00000004c0)={0x0, 0x0, &(0x7f00000003c0)={0x0, 0x24}}, 0x0) (async) getsockname$packet(r4, &(0x7f00000000c0)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000180)=0x14) sendmsg$nl_route(r3, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000040)=ANY=[@ANYBLOB="3c0000001000010400eeffffffff00f687000000", @ANYRES32=r5, @ANYBLOB="01000000010000001c0012000c000100627269646765"], 0x3c}}, 0x0) sendmsg$nl_route_sched(r3, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000300)=@newqdisc={0x58, 0x24, 0xe0b, 0x0, 0xfffffffc, {0x0, 0x0, 0x0, r5, {0x0, 0xffff}, {0xffff, 0xffff}, {0x1}}, [@qdisc_kind_options=@q_netem={{0xa}, {0x28, 0x2, {{0x1, 0x6, 0xa00, 0x3, 0xffffffff, 0x20102}, [@TCA_NETEM_CORRUPT={0xc, 0x4, {0x7fffffff, 0x155}}]}}}]}, 0x58}}, 0x4000080) (async) bind$packet(r2, &(0x7f0000000040)={0x11, 0x0, r5, 0x1, 0x0, 0x6, @remote}, 0x14) (async) sendto$inet6(r2, &(0x7f0000000800)="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", 0xfc13, 0x880, 0x0, 0xfffffffffffffef0) (async) r6 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) (async) r7 = syz_genetlink_get_family_id$nl802154(&(0x7f0000000180), 0xffffffffffffffff) r8 = socket(0x29, 0x6, 0x7fc) getsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX3(r8, 0x84, 0x6f, &(0x7f0000000000)={0x0, 0x10, &(0x7f0000000380)=[@in={0x2, 0x0, @initdev={0xac, 0x1e, 0x0, 0x0}}]}, &(0x7f0000000180)=0x10) (async) getsockopt$bt_hci(r8, 0x84, 0x80, &(0x7f0000000000)=""/4102, &(0x7f0000001080)=0x1006) (async) r9 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX_802154(r9, 0x8933, &(0x7f0000000000)={'wpan0\x00', 0x0}) sendmsg$NL802154_CMD_SET_ACKREQ_DEFAULT(r6, &(0x7f0000000ac0)={0x0, 0x0, &(0x7f0000000a00)={&(0x7f0000000b00)=ANY=[@ANYBLOB='L\x00\x00\x00', @ANYRES16=r7, @ANYBLOB="01002abd7000fddbdf251300000005001a000100000005001a000000000005001a000100000008000300", @ANYRES32, @ANYBLOB="05001a000100000005001a000100000008000300", @ANYRES32=r10], 0x4c}, 0x1, 0x0, 0x0, 0x4000804}, 0x10) 3m51.436745638s ago: executing program 3 (id=3476): r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = socket(0x200000000000011, 0x2, 0x0) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000000)={'bridge0\x00', 0x0}) sendmsg$nl_route(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000240)=@RTM_NEWMDB={0x18, 0x54, 0x1e5, 0x0, 0x0, {0x7, r2}}, 0x18}}, 0x20044050) r3 = socket$nl_generic(0x10, 0x3, 0x10) r4 = syz_init_net_socket$llc(0x1a, 0x1, 0x0) setsockopt$sock_int(r4, 0x1, 0x3e, 0x0, 0x0) r5 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000080), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(0xffffffffffffffff, 0x8933, &(0x7f00000002c0)={'wlan0\x00'}) ioctl$sock_SIOCGIFINDEX_80211(r3, 0x8933, &(0x7f0000000100)={'wlan0\x00', 0x0}) sendmsg$NL80211_CMD_SET_TX_BITRATE_MASK(r3, &(0x7f0000000700)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000280)=ANY=[@ANYBLOB='H\x00\x00\x00', @ANYRES16=r5, @ANYBLOB="010029bd7200fbdbdf253900000008000300", @ANYRES32=r6, @ANYBLOB="2c005a8028000380240008"], 0x48}, 0x1, 0x0, 0x0, 0x4001}, 0x0) r7 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_route(r7, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000300)=@ipv6_newrule={0x2c, 0x20, 0x1, 0x70bd29, 0x0, {0xa, 0x0, 0x0, 0x64, 0x0, 0x0, 0x0, 0x7}, [@FIB_RULE_POLICY=@FRA_IP_PROTO={0x5, 0x16, 0x4f}, @FIB_RULE_POLICY=@FRA_PROTOCOL={0x5, 0x15, 0x2}]}, 0x2c}, 0x1, 0x0, 0x0, 0x24040804}, 0x0) sendmsg$nl_route(r7, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000700)={&(0x7f0000000300)=ANY=[@ANYBLOB='\\\x00\x00\x00!'], 0x5c}}, 0x0) 3m50.942513817s ago: executing program 3 (id=3481): r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000640)=ANY=[@ANYBLOB="170000000000000001000000ff"], 0x48) r1 = bpf$MAP_CREATE(0x0, &(0x7f0000000040)=@base={0xd, 0x4, 0x4, 0x101, 0x0, r0}, 0x50) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000180)=ANY=[@ANYBLOB="1800000000000100000000000000fe0018100000", @ANYRES32=r1, @ANYBLOB="0000000000000000b708000000000e007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000020850000000100000095"], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$MAP_CREATE(0x0, &(0x7f0000000640)=ANY=[@ANYBLOB="170000000000000001000000ff"], 0x48) (async) bpf$MAP_CREATE(0x0, &(0x7f0000000040)=@base={0xd, 0x4, 0x4, 0x101, 0x0, r0}, 0x50) (async) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000180)=ANY=[@ANYBLOB="1800000000000100000000000000fe0018100000", @ANYRES32=r1, @ANYBLOB="0000000000000000b708000000000e007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000020850000000100000095"], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) (async) 3m50.788302032s ago: executing program 3 (id=3484): r0 = socket$nl_route(0x10, 0x3, 0x0) ioctl$ifreq_SIOCGIFINDEX_batadv_hard(r0, 0x8933, &(0x7f0000000c80)={'batadv_slave_1\x00', 0x0}) sendmsg$nl_route(r0, &(0x7f0000000400)={0x0, 0x0, &(0x7f0000000d40)={&(0x7f0000000080)=@ipv4_newaddr={0x28, 0x14, 0x509, 0x70bd27, 0x25dfdbfc, {0x2, 0x1f, 0x0, 0xff, r1}, [@IFA_RT_PRIORITY={0x8, 0x9, 0x3}, @IFA_LOCAL={0x8, 0x2, @dev={0xac, 0x14, 0x14, 0x3d}}]}, 0x28}, 0x1, 0x0, 0x0, 0x4040014}, 0x0) r2 = socket$unix(0x1, 0x5, 0x0) ioctl$sock_SIOCETHTOOL(r2, 0x89f0, &(0x7f0000000080)={'bridge0\x00', &(0x7f00000001c0)=@ethtool_regs}) mmap(&(0x7f0000000000/0x95c000)=nil, 0x95c000, 0x200000b, 0x8c4b815a5465c2b2, 0xffffffffffffffff, 0x0) mmap(&(0x7f0000000000/0xc00000)=nil, 0xc00000, 0x2000002, 0x42073, 0xffffffffffffffff, 0xaba00000) 3m50.585341545s ago: executing program 3 (id=3487): r0 = socket$nl_route(0x10, 0x3, 0x0) socket$can_bcm(0x1d, 0x2, 0x2) sendmsg$TIPC_NL_LINK_GET(0xffffffffffffffff, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000180)=ANY=[@ANYBLOB="58bc0d25", @ANYRES16, @ANYBLOB="080029bd7000fddbdf2708000000440003800800030003000000080003000b00000008000300165d0000080003000000000008000100"], 0x58}, 0x1, 0x0, 0x0, 0x4008010}, 0x10) (async) sendmsg$TIPC_NL_LINK_GET(0xffffffffffffffff, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000180)=ANY=[@ANYBLOB="58bc0d25", @ANYRES16, @ANYBLOB="080029bd7000fddbdf2708000000440003800800030003000000080003000b00000008000300165d0000080003000000000008000100"], 0x58}, 0x1, 0x0, 0x0, 0x4008010}, 0x10) r1 = socket(0x10, 0x3, 0x0) r2 = socket$kcm(0x15, 0x5, 0x0) sendmsg$inet(r2, &(0x7f0000000cc0)={&(0x7f00000004c0)={0xa, 0x0, @multicast2}, 0x10, 0x0}, 0x4000000) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000380)={'bridge_slave_0\x00', 0x0}) r4 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) r5 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet_sctp_SCTP_SOCKOPT_CONNECTX(r1, 0x84, 0x6e, &(0x7f00000003c0)=[@in6={0xa, 0x4e22, 0x52a, @rand_addr=' \x01\x00', 0xfffffffc}, @in={0x2, 0x4e23, @multicast1}, @in6={0xa, 0x4e20, 0x0, @ipv4={'\x00', '\xff\xff', @empty}, 0x4f}, @in={0x2, 0x4e22, @local}, @in6={0xa, 0x4e22, 0x8, @local, 0x7f}, @in6={0xa, 0x4e24, 0xc, @remote, 0x2}], 0x90) ioctl$sock_SIOCETHTOOL(r5, 0x8946, &(0x7f0000000040)={'wlan0\x00', &(0x7f0000000680)=@ethtool_gstrings={0x1b, 0x8}}) sendmsg$inet(0xffffffffffffffff, 0x0, 0x0) (async) sendmsg$inet(0xffffffffffffffff, 0x0, 0x0) setsockopt$bt_hci_HCI_DATA_DIR(r4, 0x0, 0x1, 0x0, 0x0) (async) setsockopt$bt_hci_HCI_DATA_DIR(r4, 0x0, 0x1, 0x0, 0x0) socket$nl_route(0x10, 0x3, 0x0) (async) r6 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r6, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000006c0)=@deltclass={0x488, 0x29, 0x4, 0x70bd2b, 0x25dfdbfe, {0x0, 0x0, 0x0, r3, {0xfff3, 0x8}, {0xd, 0xffe8}, {0xe}}, [@tclass_kind_options=@c_netem={0xa}, @TCA_RATE={0x6, 0x5, {0xec, 0x9e}}, @tclass_kind_options=@c_sfq={0x8}, @tclass_kind_options=@c_fq_codel={0xd}, @tclass_kind_options=@c_htb={{0x8}, {0x420, 0x2, [@TCA_HTB_CEIL64={0xc, 0x7, 0x7}, @TCA_HTB_CEIL64={0xc, 0x7, 0xfffffffffffffffc}, @TCA_HTB_RTAB={0x404, 0x4, [0xffffffff, 0xd, 0xff, 0x2, 0x3, 0x2, 0x0, 0xd0, 0x10004, 0x2000000, 0x9, 0x6b, 0x6, 0x3, 0x2, 0x3, 0x3, 0x1, 0x0, 0x9, 0xc53, 0x401, 0xb, 0x5000000, 0x3, 0x0, 0x4, 0x10001, 0xa74a, 0x8, 0xfffffffb, 0x9, 0x4, 0x800, 0xd1, 0x0, 0x200, 0x6, 0x60000000, 0xb7f, 0x4, 0x6, 0x0, 0x5, 0x81, 0x3, 0x3, 0x369, 0x37c, 0x7fffffff, 0x7, 0x42f, 0x5ef03c94, 0xff, 0x7, 0xfffffff8, 0x2, 0x5d, 0x8, 0x9, 0xffff, 0xb824, 0xfffffffd, 0xfffffff9, 0x200, 0x7, 0x9, 0x80000001, 0x10, 0x81, 0x401, 0x9, 0x3, 0x5, 0x400, 0x1, 0x1000, 0xee1e, 0x2, 0xfffffff8, 0xb1, 0xd0df, 0x5, 0x3, 0x91, 0x5, 0x3, 0x8, 0x927, 0xfa, 0xa34, 0x1000, 0xc0, 0x4, 0x9, 0xffffffff, 0x877, 0x8, 0x2388, 0x162f1479, 0x1, 0x4, 0x1000, 0x8, 0x3a5, 0x2, 0x80000001, 0x9c0, 0x8, 0x99, 0x2, 0xfffff61c, 0x0, 0x1, 0x9, 0x4, 0x3, 0x8000, 0x10001, 0x6, 0x6, 0x3, 0x800, 0x2, 0xff, 0x2, 0xe, 0x7, 0x9, 0x8, 0x9, 0x3, 0xfffffffc, 0xff, 0x2, 0xff800000, 0x0, 0x4, 0xf, 0xff, 0x5, 0xfff, 0xf, 0x4, 0x8b54, 0x2, 0x7, 0x101, 0x4e, 0x1ff, 0x23, 0xfffffff3, 0x9, 0x3, 0x5, 0x5, 0x3, 0xb, 0x8, 0x31d3, 0x4800000, 0x0, 0x5, 0x498, 0x2, 0x4, 0x5, 0x7fffffff, 0x5, 0x4, 0x5, 0x6f4, 0x2, 0x401, 0x2, 0x1, 0x0, 0x6, 0x7fffffff, 0x5, 0x8, 0x6, 0x2, 0xc8ac, 0x0, 0x8, 0xfff, 0x100, 0x6, 0xfffffff8, 0x3, 0x1000, 0x1, 0x286, 0x800, 0x80000000, 0x10000, 0x4, 0x2b, 0x8, 0x6, 0x10, 0x5, 0x5, 0x7fff, 0x0, 0x8000, 0x0, 0xffffa281, 0x6, 0xa01, 0x3ff, 0x0, 0x8, 0x7, 0x51, 0x2, 0x81, 0x8, 0x1, 0x4, 0xfffffff7, 0x9, 0xa4, 0x8, 0x2, 0x2, 0x400, 0x81, 0x1, 0x4, 0x2, 0x6, 0x7fff, 0x4, 0x5, 0x1, 0x9, 0x7, 0x5a9b9220, 0x7, 0x4, 0x8, 0x2, 0x9, 0x3, 0xfffffffe, 0x4, 0x3, 0x7, 0x3, 0xfffffffd, 0x2, 0x0, 0x40, 0x9]}]}}, @tclass_kind_options=@c_fq_codel={0xd}]}, 0x488}}, 0x0) (async) sendmsg$nl_route_sched(r6, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000006c0)=@deltclass={0x488, 0x29, 0x4, 0x70bd2b, 0x25dfdbfe, {0x0, 0x0, 0x0, r3, {0xfff3, 0x8}, {0xd, 0xffe8}, {0xe}}, [@tclass_kind_options=@c_netem={0xa}, @TCA_RATE={0x6, 0x5, {0xec, 0x9e}}, @tclass_kind_options=@c_sfq={0x8}, @tclass_kind_options=@c_fq_codel={0xd}, @tclass_kind_options=@c_htb={{0x8}, {0x420, 0x2, [@TCA_HTB_CEIL64={0xc, 0x7, 0x7}, @TCA_HTB_CEIL64={0xc, 0x7, 0xfffffffffffffffc}, @TCA_HTB_RTAB={0x404, 0x4, [0xffffffff, 0xd, 0xff, 0x2, 0x3, 0x2, 0x0, 0xd0, 0x10004, 0x2000000, 0x9, 0x6b, 0x6, 0x3, 0x2, 0x3, 0x3, 0x1, 0x0, 0x9, 0xc53, 0x401, 0xb, 0x5000000, 0x3, 0x0, 0x4, 0x10001, 0xa74a, 0x8, 0xfffffffb, 0x9, 0x4, 0x800, 0xd1, 0x0, 0x200, 0x6, 0x60000000, 0xb7f, 0x4, 0x6, 0x0, 0x5, 0x81, 0x3, 0x3, 0x369, 0x37c, 0x7fffffff, 0x7, 0x42f, 0x5ef03c94, 0xff, 0x7, 0xfffffff8, 0x2, 0x5d, 0x8, 0x9, 0xffff, 0xb824, 0xfffffffd, 0xfffffff9, 0x200, 0x7, 0x9, 0x80000001, 0x10, 0x81, 0x401, 0x9, 0x3, 0x5, 0x400, 0x1, 0x1000, 0xee1e, 0x2, 0xfffffff8, 0xb1, 0xd0df, 0x5, 0x3, 0x91, 0x5, 0x3, 0x8, 0x927, 0xfa, 0xa34, 0x1000, 0xc0, 0x4, 0x9, 0xffffffff, 0x877, 0x8, 0x2388, 0x162f1479, 0x1, 0x4, 0x1000, 0x8, 0x3a5, 0x2, 0x80000001, 0x9c0, 0x8, 0x99, 0x2, 0xfffff61c, 0x0, 0x1, 0x9, 0x4, 0x3, 0x8000, 0x10001, 0x6, 0x6, 0x3, 0x800, 0x2, 0xff, 0x2, 0xe, 0x7, 0x9, 0x8, 0x9, 0x3, 0xfffffffc, 0xff, 0x2, 0xff800000, 0x0, 0x4, 0xf, 0xff, 0x5, 0xfff, 0xf, 0x4, 0x8b54, 0x2, 0x7, 0x101, 0x4e, 0x1ff, 0x23, 0xfffffff3, 0x9, 0x3, 0x5, 0x5, 0x3, 0xb, 0x8, 0x31d3, 0x4800000, 0x0, 0x5, 0x498, 0x2, 0x4, 0x5, 0x7fffffff, 0x5, 0x4, 0x5, 0x6f4, 0x2, 0x401, 0x2, 0x1, 0x0, 0x6, 0x7fffffff, 0x5, 0x8, 0x6, 0x2, 0xc8ac, 0x0, 0x8, 0xfff, 0x100, 0x6, 0xfffffff8, 0x3, 0x1000, 0x1, 0x286, 0x800, 0x80000000, 0x10000, 0x4, 0x2b, 0x8, 0x6, 0x10, 0x5, 0x5, 0x7fff, 0x0, 0x8000, 0x0, 0xffffa281, 0x6, 0xa01, 0x3ff, 0x0, 0x8, 0x7, 0x51, 0x2, 0x81, 0x8, 0x1, 0x4, 0xfffffff7, 0x9, 0xa4, 0x8, 0x2, 0x2, 0x400, 0x81, 0x1, 0x4, 0x2, 0x6, 0x7fff, 0x4, 0x5, 0x1, 0x9, 0x7, 0x5a9b9220, 0x7, 0x4, 0x8, 0x2, 0x9, 0x3, 0xfffffffe, 0x4, 0x3, 0x7, 0x3, 0xfffffffd, 0x2, 0x0, 0x40, 0x9]}]}}, @tclass_kind_options=@c_fq_codel={0xd}]}, 0x488}}, 0x0) sendmsg$nl_route(r1, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000080)=ANY=[@ANYBLOB="700200001300290a000000000000000007000000", @ANYRES32=r3, @ANYBLOB="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"], 0x270}, 0x1, 0x0, 0x0, 0x4000}, 0x4) sendmsg$nl_route(r0, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000380)=@newlink={0x40, 0x10, 0x403, 0x0, 0x25dfdbfe, {0x0, 0x0, 0x74, 0x0, 0x800, 0x55007}, [@IFLA_LINKINFO={0x20, 0x12, 0x0, 0x1, @bridge={{0xb}, {0x10, 0x2, 0x0, 0x1, [@IFLA_BR_MCAST_STARTUP_QUERY_INTVL={0xc, 0x23, 0x406}]}}}]}, 0x40}, 0x1, 0x0, 0x0, 0x800}, 0x80) 3m50.325553443s ago: executing program 3 (id=3491): r0 = socket$inet_tcp(0x2, 0x1, 0x0) setsockopt$IPT_SO_SET_REPLACE(r0, 0x0, 0x40, &(0x7f0000000000)=@mangle={'mangle\x00', 0x1f, 0x6, 0x390, 0x0, 0x98, 0x130, 0x1c8, 0x2f8, 0x0, 0x98, 0x130, 0x260, 0x2f8, 0x6, 0x0, {[{{@uncond, 0x0, 0x70, 0x98}, @common=@unspec=@STANDARD={0x28, '\x00', 0x0, 0xfffffffe}}, {{@uncond, 0x0, 0x70, 0x98}, @common=@unspec=@STANDARD={0x28, '\x00', 0x0, 0xfffffffe}}, {{@uncond, 0x0, 0x70, 0x98}, @common=@unspec=@STANDARD={0x28, '\x00', 0x0, 0xfffffffe}}, {{@ip={@empty, @empty, 0x0, 0x0, '\x00', '\x00', {}, {}, 0x6}, 0x0, 0x70, 0x98}, @ECN={0x28, 'ECN\x00', 0x0, {0x30, 0x0, 0x3}}}, {{@uncond, 0x0, 0x70, 0x98}, @common=@unspec=@STANDARD={0x28, '\x00', 0x0, 0xfffffffe}}], {{'\x00', 0x0, 0x70, 0x98}, {0x28}}}}, 0x3f0) r1 = syz_init_net_socket$bt_l2cap(0x1f, 0x1, 0x3) r2 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=@base={0xe, 0x4, 0x8, 0x7}, 0x48) r3 = bpf$PROG_LOAD(0x5, &(0x7f0000000340)={0x3, 0xc, &(0x7f0000000580)=@framed={{0x18, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xa000000}, [@ringbuf_output={{0x18, 0x5, 0x1, 0x0, r2}, {0x7, 0x0, 0xb, 0x8, 0x0, 0x0, 0x800000}, {0x3, 0x3, 0x3, 0xa, 0x5}, {}, {}, {}, {0x7, 0x0, 0xb, 0x4, 0x0, 0x0, 0x2}, {0x85, 0x0, 0x0, 0x14}}]}, &(0x7f0000000840)='GPL\x00', 0x0, 0x0, 0x0, 0x41100, 0x0, '\x00', 0x0, @fallback=0x2, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000d80)={r3, 0x18000000000002a0, 0xe, 0x0, &(0x7f0000000040)="76ea090000000000009ba56a88ca", 0x0, 0xfffffe01, 0x60000000, 0x0, 0x0, 0x0, 0x0}, 0x50) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, 0x0) r4 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r4, &(0x7f0000000180)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000300)=ANY=[@ANYBLOB="b80000001900010026bd700000000000ff02000000000000000000000000000100000000000000000000000000000000000000004e2200000a00000087000000", @ANYRES32=0x0, @ANYRES32=0x0, @ANYBLOB="0000000000000000000000000000000000000000000000000000000000000000020000000000000000000000000000000700000000020000fbffffffffffffff00000000000000000000000000000000e3ff000000000000feffdfffffffffff00"/112], 0xb8}}, 0x10) r5 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r6 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) sendmsg$NL802154_CMD_SET_SHORT_ADDR(r6, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000540)=ANY=[@ANYBLOB="14000000", @ANYRES16=0x0, @ANYBLOB="04"], 0x14}}, 0x0) syz_genetlink_get_family_id$nfc(&(0x7f0000000000), r6) r7 = syz_genetlink_get_family_id$netlbl_unlabel(&(0x7f0000000200), r6) sendmsg$NLBL_UNLABEL_C_STATICREMOVE(r5, &(0x7f0000000700)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000180)={0x30, r7, 0xb6c91f939c8321d, 0x0, 0x0, {0x10}, [@NLBL_UNLABEL_A_IPV6MASK={0x14, 0xf, @remote}, @NLBL_UNLABEL_A_ACPTFLG={0x8}]}, 0x30}}, 0x0) r8 = syz_genetlink_get_family_id$nbd(&(0x7f0000000440), 0xffffffffffffffff) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000000)={0x0}}, 0x0) r9 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000280)=ANY=[@ANYBLOB="4400000010000104a5270b7357000000925e", @ANYRES32, @ANYBLOB="0dfa130016000000240012000c"], 0x44}}, 0x0) ioctl$F2FS_IOC_MOVE_RANGE(0xffffffffffffffff, 0xc020f509, &(0x7f0000000280)={r9, 0x7, 0x104, 0xfffffffe}) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000280)=ANY=[@ANYBLOB='H'], 0x48}, 0x1, 0x0, 0x0, 0x20004810}, 0x0) sendmmsg(r9, &(0x7f00000002c0), 0x40000000000009f, 0x0) sendmsg$NBD_CMD_RECONFIGURE(r5, &(0x7f0000000540)={&(0x7f0000000400)={0x10, 0x0, 0x0, 0x80000200}, 0xc, &(0x7f0000000500)={&(0x7f0000000480)={0x68, r8, 0x300, 0x70bd28, 0x25dfdbfc, {}, [@NBD_ATTR_CLIENT_FLAGS={0xc, 0x6, 0x2}, @NBD_ATTR_CLIENT_FLAGS={0xc, 0x6, 0x2}, @NBD_ATTR_INDEX={0x8, 0x1, 0x0}, @NBD_ATTR_SIZE_BYTES={0xc, 0x2, 0x2}, @NBD_ATTR_BACKEND_IDENTIFIER={0x8, 0xa, 'GPL\x00'}, @NBD_ATTR_BLOCK_SIZE_BYTES={0xc, 0x3, 0x4}, @NBD_ATTR_TIMEOUT={0xc, 0x4, 0x7}, @NBD_ATTR_BACKEND_IDENTIFIER={0x8, 0xa, 'GPL\x00'}]}, 0x68}, 0x1, 0x0, 0x0, 0x10}, 0x6400c001) sendmsg$nl_xfrm(r4, &(0x7f0000000180)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000000)=ANY=[@ANYBLOB="b80000001500010000000000feffffffe00000020000000000000000000026e4297b00000000000000000000000000004e200000000000000a"], 0xb8}}, 0x24000080) bpf$PROG_LOAD(0x5, &(0x7f00000017c0)={0x1, 0xe, &(0x7f0000001880)=ANY=[@ANYBLOB="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"], &(0x7f00000001c0)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0x0, 0x10, &(0x7f0000000000), 0xfffffffffffffd00, 0x0, 0xffffffffffffffff, 0xffffffffffffff20}, 0x48) r10 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r10, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000000)={0x14, 0x27, 0x1, 0x70bd29, 0x0, {0x6, 0x1}}, 0x14}}, 0xc000) r11 = syz_genetlink_get_family_id$nl802154(&(0x7f0000000640), r5) sendmsg$NL802154_CMD_SET_BACKOFF_EXPONENT(r10, &(0x7f0000000740)={&(0x7f0000000600)={0x10, 0x0, 0x0, 0x200}, 0xc, &(0x7f00000006c0)={&(0x7f0000000680)={0x1c, r11, 0x200, 0x70bd27, 0x25dfdbff, {}, [@NL802154_ATTR_MAX_BE={0x5, 0x10, 0x1}]}, 0x1c}, 0x1, 0x0, 0x0, 0x60000c0}, 0x40) socket$nl_xfrm(0x10, 0x3, 0x6) 3m35.104214468s ago: executing program 32 (id=3491): r0 = socket$inet_tcp(0x2, 0x1, 0x0) setsockopt$IPT_SO_SET_REPLACE(r0, 0x0, 0x40, &(0x7f0000000000)=@mangle={'mangle\x00', 0x1f, 0x6, 0x390, 0x0, 0x98, 0x130, 0x1c8, 0x2f8, 0x0, 0x98, 0x130, 0x260, 0x2f8, 0x6, 0x0, {[{{@uncond, 0x0, 0x70, 0x98}, @common=@unspec=@STANDARD={0x28, '\x00', 0x0, 0xfffffffe}}, {{@uncond, 0x0, 0x70, 0x98}, @common=@unspec=@STANDARD={0x28, '\x00', 0x0, 0xfffffffe}}, {{@uncond, 0x0, 0x70, 0x98}, @common=@unspec=@STANDARD={0x28, '\x00', 0x0, 0xfffffffe}}, {{@ip={@empty, @empty, 0x0, 0x0, '\x00', '\x00', {}, {}, 0x6}, 0x0, 0x70, 0x98}, @ECN={0x28, 'ECN\x00', 0x0, {0x30, 0x0, 0x3}}}, {{@uncond, 0x0, 0x70, 0x98}, @common=@unspec=@STANDARD={0x28, '\x00', 0x0, 0xfffffffe}}], {{'\x00', 0x0, 0x70, 0x98}, {0x28}}}}, 0x3f0) r1 = syz_init_net_socket$bt_l2cap(0x1f, 0x1, 0x3) r2 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=@base={0xe, 0x4, 0x8, 0x7}, 0x48) r3 = bpf$PROG_LOAD(0x5, &(0x7f0000000340)={0x3, 0xc, &(0x7f0000000580)=@framed={{0x18, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xa000000}, [@ringbuf_output={{0x18, 0x5, 0x1, 0x0, r2}, {0x7, 0x0, 0xb, 0x8, 0x0, 0x0, 0x800000}, {0x3, 0x3, 0x3, 0xa, 0x5}, {}, {}, {}, {0x7, 0x0, 0xb, 0x4, 0x0, 0x0, 0x2}, {0x85, 0x0, 0x0, 0x14}}]}, &(0x7f0000000840)='GPL\x00', 0x0, 0x0, 0x0, 0x41100, 0x0, '\x00', 0x0, @fallback=0x2, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000d80)={r3, 0x18000000000002a0, 0xe, 0x0, &(0x7f0000000040)="76ea090000000000009ba56a88ca", 0x0, 0xfffffe01, 0x60000000, 0x0, 0x0, 0x0, 0x0}, 0x50) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, 0x0) r4 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r4, &(0x7f0000000180)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000300)=ANY=[@ANYBLOB="b80000001900010026bd700000000000ff02000000000000000000000000000100000000000000000000000000000000000000004e2200000a00000087000000", @ANYRES32=0x0, @ANYRES32=0x0, @ANYBLOB="0000000000000000000000000000000000000000000000000000000000000000020000000000000000000000000000000700000000020000fbffffffffffffff00000000000000000000000000000000e3ff000000000000feffdfffffffffff00"/112], 0xb8}}, 0x10) r5 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r6 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) sendmsg$NL802154_CMD_SET_SHORT_ADDR(r6, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000540)=ANY=[@ANYBLOB="14000000", @ANYRES16=0x0, @ANYBLOB="04"], 0x14}}, 0x0) syz_genetlink_get_family_id$nfc(&(0x7f0000000000), r6) r7 = syz_genetlink_get_family_id$netlbl_unlabel(&(0x7f0000000200), r6) sendmsg$NLBL_UNLABEL_C_STATICREMOVE(r5, &(0x7f0000000700)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000180)={0x30, r7, 0xb6c91f939c8321d, 0x0, 0x0, {0x10}, [@NLBL_UNLABEL_A_IPV6MASK={0x14, 0xf, @remote}, @NLBL_UNLABEL_A_ACPTFLG={0x8}]}, 0x30}}, 0x0) r8 = syz_genetlink_get_family_id$nbd(&(0x7f0000000440), 0xffffffffffffffff) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000000)={0x0}}, 0x0) r9 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000280)=ANY=[@ANYBLOB="4400000010000104a5270b7357000000925e", @ANYRES32, @ANYBLOB="0dfa130016000000240012000c"], 0x44}}, 0x0) ioctl$F2FS_IOC_MOVE_RANGE(0xffffffffffffffff, 0xc020f509, &(0x7f0000000280)={r9, 0x7, 0x104, 0xfffffffe}) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000280)=ANY=[@ANYBLOB='H'], 0x48}, 0x1, 0x0, 0x0, 0x20004810}, 0x0) sendmmsg(r9, &(0x7f00000002c0), 0x40000000000009f, 0x0) sendmsg$NBD_CMD_RECONFIGURE(r5, &(0x7f0000000540)={&(0x7f0000000400)={0x10, 0x0, 0x0, 0x80000200}, 0xc, &(0x7f0000000500)={&(0x7f0000000480)={0x68, r8, 0x300, 0x70bd28, 0x25dfdbfc, {}, [@NBD_ATTR_CLIENT_FLAGS={0xc, 0x6, 0x2}, @NBD_ATTR_CLIENT_FLAGS={0xc, 0x6, 0x2}, @NBD_ATTR_INDEX={0x8, 0x1, 0x0}, @NBD_ATTR_SIZE_BYTES={0xc, 0x2, 0x2}, @NBD_ATTR_BACKEND_IDENTIFIER={0x8, 0xa, 'GPL\x00'}, @NBD_ATTR_BLOCK_SIZE_BYTES={0xc, 0x3, 0x4}, @NBD_ATTR_TIMEOUT={0xc, 0x4, 0x7}, @NBD_ATTR_BACKEND_IDENTIFIER={0x8, 0xa, 'GPL\x00'}]}, 0x68}, 0x1, 0x0, 0x0, 0x10}, 0x6400c001) sendmsg$nl_xfrm(r4, &(0x7f0000000180)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000000)=ANY=[@ANYBLOB="b80000001500010000000000feffffffe00000020000000000000000000026e4297b00000000000000000000000000004e200000000000000a"], 0xb8}}, 0x24000080) bpf$PROG_LOAD(0x5, &(0x7f00000017c0)={0x1, 0xe, &(0x7f0000001880)=ANY=[@ANYBLOB="b700000081000000bfa300000000000007030000074e0000720a00fef8ffffff71a4f1ff0000000071302000000000001d400500000000004704000001ed000007030000022800001d44000000000000620a00ff040400007203020100200000b500f7ff000000009500000000000000023bc065b58111c6dfa041b63af4a3912435f1a864a710aad58db6a693002e7f3be361917adef6ee1c8a2a4f8ef1e50becb19bc461e91a7168c50000000190f32050e436fe275daf51efd601b6bf01c8e8b1b526375ec4dd6fcd82e4fe51bef7af9aa0d7d600c095199fe3380d28e599b0eaebbdbd732c9cc00eec363e4a8f6456e2cc21557c0afc646cb7798b3e6440c2fbdb00a3e35208b0bb0d2cd829e654400e2438ec649dc74a28610643a98d9ec21ead2ed51bf900000000000000d8a7925c3109b151b8b9f75dd08d123deda88c658d42ecbf28bf7076c15b463bebc72f526d8e8afcb913466aaa7f6df70252e79166d858fcd0e06dd31af9612f2460d0b11008e59a5923906f88b53987ad1714e72ba7a54f0c33d39000d06a59ff616236fd9aa58f2477184b6a89adaf17b0a6041bdef728d236619074d6ebdfd1f5089048ddff6da40f9411fe722631cb467600ade70063e5291569b33d21dae356e1c51f03a801be8189679a16da18ec0ae564162a27afea62d84f3a10746443d6438e959532e0617d419c6bc6ea9f2bca4464f56e24e6d2105bd901204a1deeed4155617572652d950ad31928b0b0c3dc2869f478341d02d0f5ad94b081fcd507acb4b9c65fee9d5a17f48a7382f13d000000225d85ae49cee383dc5049076b989b40000000000000da60d2ae20cfb91d6a49964757cdf538f9ce2bdb1ab062cd54e67011d355d84ce97bb0c6b4a595e487efbb2d71cde2c140952f9a0f0bc6980fe78683ac5c0c31032599ddd71063be9261b2e1aab1675b34a22048ef8c126aeef5f510a8f1aded94a129e4aec6f8d9ab06faffc3a15d96c2ea3e2e04cfe031b2875353193f82ade69d0540059fe6c7fe7cd8697502c7596566d674e425da5e87e59602a9f6590521d31d3804b3e0a1053abdc31282dfb15eb6841bb64a1b304502dda787343ce3c953992e4a982f3c48153baae244e7bf37548c7f1a4cad2422ee965a38f7defbd2160242b104e20dc2d9b0c35608d402ccdd9069bd50b994fda7a9de44028d6112a0c2d21b2dc98816106dec28eaeb883418f562ae00003ea96d10f172c0374d6eed826416050000000bfe9b4a9c5a90ff59d54d1f92ecc4e95dd2d18383117c039862198899b212c55318294270a1ad10c80fef7c24d47afce829ba0f85da6d888f18ea40ab959f6074ab2a40d85d15017ab513cdc6c0e57fb1c1ca571380d7b4ead35a385e0b4a26b702396df7e0c1e02b6e4114f244a9bf93020000000000000080e69db384ac7eeedcf2ba3a9508f9d6aba582a896a9f1e096df6ecea75caf822a7a63ba34015ea5aacb1188883ad2a3b1832371fe5bc621426d1ed0a4a99702cc1b6912a1e717d29135753208165b9cdbae2ed9dc7358f0ebadde0b727f27feeb744ddcc536cbae315c7d1fe1399562ba6824840bd2951680f6f2f9a6a8346962a350845ffa0d829e4f79adc287906943408e6df3c391e97ba48db0a5adbfd03aac93df8866fb010aec0e92bed1fe39af169d2a466f0db6f3d9436a7d55fc30511d00e10000c95265b2bd83d64a532869d701723fedcbada1ee7baa5b6a686b50f0937f778af083e055f6138a757ebd0ed91124a6b244f9acf41ac5d73a008364e0606a594817031fc2f52c8785fe0721719b3d654026c6ea08b83b123145ab5703dad844ceb201ddeb6dc5f6a903792283c42efc54fa84323afc4c10eff462c8843187f1dd48ef3fa293774d582956ff0f40b10ca94f6feeb2893c17888e1cdba94a6ea80c33ead5722c3293a493f1479531dd88261458f40d31fe8df15efaaeea831555877f9538d6ee6ba65893ff1f908ba7554ba583fef3ec7932f5954f31a878e2fae6691d1aee1da02ba516467df3e7d1daac43738012e4fee18a22da19fcdb4c2890cda1f96b952511e3a69d694d625e0b2f808890205f3a6da2819d2f9e77c7c64affa54fec0136cbafa5f6f096753b639a924599c1f69219927ea5301fff0a6063d427f0688430754c02180d61542c2571f983e9673560000000000000000005a7b57f03ca91a01ba2e30ca99e8ebc15ecb4d91675767999d146aef7799738b292fd640dfef6b04d086f737a159d7e0c6e4d81ad64a8bbca48568325b2969e2b15f36b788bce5ccdbaf75c94cb93499f6947a967a7bce14c6de4e7c0660d80010f5c653d22d490cba8c2a4ab595bf4238f18ca428dafc7ac96d404607a0000000051a2104f22e6db5a62b5089c1b45282d38864daa3ae81d6b0968d1d2867b91b7d120617d12d91db2633d6864da40b54783a17aaeb6737c323f9f98e354cc98dcfe23ad01bd1c61563e69ffe1c2c73e16e1461173f359e93d2c5e424c17998809ec8f0232b3955e052a4cecd89008f70314a0bdd491ec86a4555d89fe0120f64c62e8e3ed8bcb45202c3d4bbec8d722824c0ebca8db1ea4a003d2fbdc1f9be78537756ab5bbe4fe9af5d785d0128171c90d9900ce2532b0f9d01c4b45294fbba468df3e1b583cb4e62e754598e47df6bd06431c94bc5d047899fd219f448bf9189c65c9d91eda6b52a373803a9efe44f86909bc90addb7b9aee813df534aac4b3093c91b8068cd84990453f006694d461b76a58d88cf0f520310a1e80dc18cde98d662eee077515d0a8811922929e085392ab3d1311b8243266d87047f601fa88a0da36b9f302e8262395174328f2482d14008de83070744f143fdec90ba5a82668d5fac114c13955ad6dca5db2231d8ba14c54c47ed04a4b4ace17e357e1d6032399f87a7a14245bbd796a09313b247b95d37ff40a404bdad74bd20000000000000000000099fef7cd7af3ce64a92f95d89d125b1e641240d7e5e27a3d1f7684448c3e3822d617e205061298b939a191be4b48e169bde2cae3accc5bd40a2968b59c93d35f8e42366fdef9a2abae1cf01ce68abff28861aac8302d268569dd42e194e330c7aaa54ebbcefd23f21ce8153b9926e12e925cb56119df72c7533a48d028ad0c74e2a9478fa3be18a1a2b65079cc1c00000000000000f59dd19e8d525206c0a728cfd42193abe8130bc01a2d69841f3d7799ac04bdc590bb1c89b9c695f163e57343c9bfb59909433c9001c5f8b23e38534a538fc933cac6c2a92d038df638a0f226df9fb857bd414c2cd69985e8053e3dfa41614d7c74d04d8c2471041d17c730fad28395f8d4688898cd58b9d600c851626529bb58aa364b55e73f053450665e7b94ed1012fd7a8139166fd5e59c84f4ab279b1b99c028db4cb9680c8035f967db18de738844da7e260a830c1ffa49f5af3c15423a0e315acb82a3e89218cb314e68fda4d94aa1d815babc13b9fd336d205c5913ef67cf0216e2d81e6127bd9d7fab28800eaab2355992f8ce4cd38add4b272c0bee4076ca4847ffa691cf78fb7ec212bad3bef29f577ea7159b7f3025b3d977ff7c91024cf71126233cb8791c3c"], &(0x7f00000001c0)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0x0, 0x10, &(0x7f0000000000), 0xfffffffffffffd00, 0x0, 0xffffffffffffffff, 0xffffffffffffff20}, 0x48) r10 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r10, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000000)={0x14, 0x27, 0x1, 0x70bd29, 0x0, {0x6, 0x1}}, 0x14}}, 0xc000) r11 = syz_genetlink_get_family_id$nl802154(&(0x7f0000000640), r5) sendmsg$NL802154_CMD_SET_BACKOFF_EXPONENT(r10, &(0x7f0000000740)={&(0x7f0000000600)={0x10, 0x0, 0x0, 0x200}, 0xc, &(0x7f00000006c0)={&(0x7f0000000680)={0x1c, r11, 0x200, 0x70bd27, 0x25dfdbff, {}, [@NL802154_ATTR_MAX_BE={0x5, 0x10, 0x1}]}, 0x1c}, 0x1, 0x0, 0x0, 0x60000c0}, 0x40) socket$nl_xfrm(0x10, 0x3, 0x6) 2m37.327260719s ago: executing program 2 (id=4379): socket$packet(0x11, 0x2, 0x300) mmap(&(0x7f0000000000/0xa000)=nil, 0xa000, 0x1000006, 0x4132, 0xffffffffffffffff, 0x0) r0 = socket$vsock_stream(0x28, 0x1, 0x0) mmap(&(0x7f0000001000/0x2000)=nil, 0x2000, 0x0, 0x12, r0, 0x0) pipe(&(0x7f0000002740)) r1 = socket$netlink(0x10, 0x3, 0x0) r2 = socket(0x10, 0x803, 0x0) sendmsg$NL80211_CMD_CRIT_PROTOCOL_START(r2, &(0x7f0000000580)={0x0, 0x0, &(0x7f0000000540)={0x0, 0x1c}}, 0x0) getsockname$packet(r2, &(0x7f0000000600)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000080)=0x14) sendmsg$nl_route(r1, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000640)=ANY=[@ANYBLOB="3c0000001000850600000000ff6122314a000800", @ANYRES32=r3, @ANYBLOB="f5ff0f00252155b21c0012000c000100626f6e64000000000c0002000800010001"], 0x3c}}, 0x40000) r4 = socket$nl_route(0x10, 0x3, 0x0) r5 = socket(0x10, 0x803, 0x2) syz_genetlink_get_family_id$mptcp(&(0x7f00000000c0), r5) getsockname$packet(r5, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f00000003c0)=0x14) r6 = socket(0x1, 0x803, 0x0) getsockname$packet(r6, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f00000001c0)=0x14) sendmsg$nl_route(r4, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000200)=@newlink={0x68, 0x10, 0x400, 0x78bd28, 0x25dfdbfc, {0x0, 0x0, 0x0, 0x0, 0x90646}, [@IFLA_LINK={0x8, 0x5, r7}, @IFLA_LINKINFO={0x40, 0x12, 0x0, 0x1, @hsr={{0x8}, {0x34, 0x2, 0x0, 0x1, [@IFLA_HSR_PROTOCOL={0x5, 0x7, 0x1}, @IFLA_HSR_MULTICAST_SPEC={0x5, 0x3, 0x5}, @IFLA_HSR_SUPERVISION_ADDR={0xa, 0x4, @multicast}, @IFLA_HSR_SUPERVISION_ADDR={0xa, 0x4, @link_local}, @IFLA_HSR_MULTICAST_SPEC={0x5, 0x3, 0x26}]}}}]}, 0x68}, 0x1, 0x0, 0x0, 0x600}, 0x0) sendmsg$nl_route(r2, &(0x7f0000000280)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000680)=ANY=[@ANYBLOB="3c00000010000305000000000007000000000000", @ANYRES32=0x0, @ANYBLOB="0000000006100000140012800b00010062726964676500000400028008000a00", @ANYRES32=r3], 0x3c}, 0x1, 0x0, 0x0, 0x800}, 0x440b0) 2m37.101884769s ago: executing program 2 (id=4383): r0 = socket$key(0xf, 0x3, 0x2) sendmsg$key(r0, &(0x7f0000000000)={0x400000000000000, 0x0, &(0x7f0000000080)={&(0x7f0000000140)={0x2, 0x3, 0x0, 0x9, 0xa, 0x0, 0x0, 0x0, [@sadb_address={0x3, 0x6, 0x0, 0x0, 0x0, @in={0x2, 0x0, @multicast1=0xe0000009}}, @sadb_sa={0x2, 0x1, 0x0, 0x0, 0x0, 0x0, 0x1}, @sadb_address={0x3, 0x5, 0x0, 0x0, 0x0, @in={0x2, 0x0, @empty}}]}, 0x50}}, 0x0) r1 = socket$kcm(0x10, 0x400000002, 0x0) sendmsg$kcm(0xffffffffffffffff, &(0x7f0000000000)={0x0, 0x0, &(0x7f00000000c0)=[{&(0x7f0000000040)="1400000016000b63", 0x8}], 0x1}, 0x0) write$cgroup_subtree(r1, &(0x7f0000000040)=ANY=[@ANYBLOB="110000006a"], 0xfe33) socket$key(0xf, 0x3, 0x2) (async) sendmsg$key(r0, &(0x7f0000000000)={0x400000000000000, 0x0, &(0x7f0000000080)={&(0x7f0000000140)={0x2, 0x3, 0x0, 0x9, 0xa, 0x0, 0x0, 0x0, [@sadb_address={0x3, 0x6, 0x0, 0x0, 0x0, @in={0x2, 0x0, @multicast1=0xe0000009}}, @sadb_sa={0x2, 0x1, 0x0, 0x0, 0x0, 0x0, 0x1}, @sadb_address={0x3, 0x5, 0x0, 0x0, 0x0, @in={0x2, 0x0, @empty}}]}, 0x50}}, 0x0) (async) socket$kcm(0x10, 0x400000002, 0x0) (async) sendmsg$kcm(0xffffffffffffffff, &(0x7f0000000000)={0x0, 0x0, &(0x7f00000000c0)=[{&(0x7f0000000040)="1400000016000b63", 0x8}], 0x1}, 0x0) (async) write$cgroup_subtree(r1, &(0x7f0000000040)=ANY=[@ANYBLOB="110000006a"], 0xfe33) (async) 2m36.935519397s ago: executing program 2 (id=4386): r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$tipc(&(0x7f0000000080), r0) sendmsg$TIPC_CMD_SHOW_NAME_TABLE(r0, &(0x7f0000000200)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000040)={0x30, r1, 0x1, 0x0, 0x0, {{}, {}, {0x14, 0x19, {0x0, 0x0, 0x0, 0x5}}}}, 0x30}}, 0x0) r2 = socket$nl_route(0x10, 0x3, 0x0) socket$inet_mptcp(0x2, 0x1, 0x106) (async) r3 = socket$inet_mptcp(0x2, 0x1, 0x106) getsockopt$kcm_KCM_RECV_DISABLE(r3, 0x6, 0x1a, 0x0, 0x20000000) setsockopt$inet_tcp_int(r3, 0x6, 0x5, &(0x7f00000000c0)=0x3ff, 0x4) openat$tun(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) (async) r4 = openat$tun(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) ioctl$TUNSETIFF(r4, 0x400454ca, &(0x7f0000000200)={'syzkaller1\x00', 0xc201}) ioctl$sock_SIOCETHTOOL(r2, 0x8946, &(0x7f0000000000)={'syzkaller1\x00', &(0x7f0000000140)=@ethtool_cmd={0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x800feea, [0x1]}}) (async) ioctl$sock_SIOCETHTOOL(r2, 0x8946, &(0x7f0000000000)={'syzkaller1\x00', &(0x7f0000000140)=@ethtool_cmd={0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x800feea, [0x1]}}) 2m36.627422225s ago: executing program 2 (id=4393): r0 = bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000800)={&(0x7f0000000780)={{0xeb9f, 0x1, 0x0, 0x18, 0x0, 0x4c, 0x4c, 0x7, [@func_proto, @array={0x0, 0x0, 0x0, 0x3, 0x0, {0x4, 0x4}}, @var={0x5, 0x0, 0x0, 0x11}, @union={0x0, 0x1, 0x0, 0x5, 0x0, 0x0, [{0x0, 0x3}]}]}, {0x0, [0x0, 0x0, 0x0, 0x0, 0x61]}}, 0x0, 0x6b, 0x0, 0x1}, 0x28) ioctl$F2FS_IOC_MOVE_RANGE(r0, 0xc020f509, &(0x7f0000000000)={r0, 0xffffffffffffffff, 0x7ff, 0x40}) r2 = socket$inet(0xa, 0x801, 0x84) connect$inet(r2, &(0x7f0000004cc0)={0x2, 0x0, @remote={0xac, 0x14, 0xffffffffffffffff}}, 0x10) (async) connect$inet(r2, &(0x7f0000004cc0)={0x2, 0x0, @remote={0xac, 0x14, 0xffffffffffffffff}}, 0x10) listen(r2, 0x8) r3 = accept4(r2, 0x0, 0x0, 0x0) r4 = socket$inet_sctp(0x2, 0x5, 0x84) getsockopt$inet_sctp_SCTP_MAX_BURST(r4, 0x84, 0xc, &(0x7f0000000240)=@assoc_value, &(0x7f0000000300)=0x8) (async) getsockopt$inet_sctp_SCTP_MAX_BURST(r4, 0x84, 0xc, &(0x7f0000000240)=@assoc_value={0x0}, &(0x7f0000000300)=0x8) getsockopt$inet_sctp6_SCTP_GET_LOCAL_ADDRS(r3, 0x84, 0x6d, &(0x7f0000000700)={r5}, &(0x7f0000000740)=0x8) (async) getsockopt$inet_sctp6_SCTP_GET_LOCAL_ADDRS(r3, 0x84, 0x6d, &(0x7f0000000700)={r5}, &(0x7f0000000740)=0x8) getsockopt$inet_sctp_SCTP_DEFAULT_SNDINFO(r1, 0x84, 0x22, &(0x7f0000000040)={0xde4, 0x8000, 0x9, 0x7e3d, r5}, &(0x7f0000000080)=0x10) 2m36.493997527s ago: executing program 2 (id=4395): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) setsockopt$netlink_NETLINK_ADD_MEMBERSHIP(r0, 0x10e, 0x1, &(0x7f00000006c0)=0x13, 0x4) setsockopt$netlink_NETLINK_DROP_MEMBERSHIP(r0, 0x10e, 0x2, &(0x7f0000000040)=0x13, 0x4) r1 = socket(0x80000000000000a, 0x2, 0x0) r2 = bpf$MAP_CREATE(0x0, &(0x7f0000000000)=@base={0xe, 0x4, 0x4, 0x2, 0x0, 0x1, 0xfffffffe}, 0x50) bpf$MAP_GET_NEXT_KEY(0x2, &(0x7f0000000180)={r2, &(0x7f00000000c0), &(0x7f0000000000)=""/10, 0x2}, 0x20) bpf$MAP_GET_NEXT_KEY(0x3, &(0x7f00000001c0)={r2, &(0x7f0000000240), 0x0}, 0x20) r3 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) getsockopt$PNPIPE_IFINDEX(r1, 0x113, 0x2, &(0x7f0000000340)=0x0, &(0x7f0000000380)=0x4) sendmsg$nl_route_sched(r1, &(0x7f0000002f40)={&(0x7f00000000c0)={0x10, 0x0, 0x0, 0x8000000}, 0xc, &(0x7f0000002f00)={&(0x7f0000001d80)=@delchain={0x1158, 0x65, 0x1, 0x70bd2a, 0x25dfdbff, {0x0, 0x0, 0x0, r4, {0x8, 0xfff3}, {0x10, 0xffea}, {0x0, 0xffff}}, [@TCA_CHAIN={0x8, 0xb, 0x8}, @TCA_CHAIN={0x8, 0xb, 0x1}, @filter_kind_options=@f_cgroup={{0xb}, {0x5c, 0x2, [@TCA_CGROUP_POLICE={0x58, 0x2, [@TCA_POLICE_RATE64={0xc, 0x8, 0x9}, @TCA_POLICE_TBF={0x3c, 0x1, {0x5, 0x0, 0xa, 0x2, 0x4, {0xf, 0x0, 0x1, 0x6, 0x1, 0x4}, {0x9, 0x1, 0xa, 0x200, 0x4, 0x4}, 0x0, 0x8, 0xd}}, @TCA_POLICE_RATE64={0xc, 0x8, 0x3}]}]}}, @TCA_RATE={0x6, 0x5, {0x3, 0x3}}, @filter_kind_options=@f_flow={{0x9}, {0x10a0, 0x2, [@TCA_FLOW_PERTURB={0x8, 0xc, 0x9}, @TCA_FLOW_MASK={0x8, 0x6, 0x4}, @TCA_FLOW_RSHIFT={0x8, 0x4, 0x1}, @TCA_FLOW_RSHIFT={0x8, 0x4, 0x2}, @TCA_FLOW_RSHIFT={0x8, 0x4, 0x7}, @TCA_FLOW_POLICE={0x1064, 0xa, 0x0, 0x1, [@TCA_POLICE_AVRATE={0x8, 0x4, 0x9}, @TCA_POLICE_PEAKRATE={0x404, 0x3, [0x101, 0x6, 0xeaec, 0x1, 0x2, 0x8408, 0x3ff, 0x81, 0x6, 0x7fffffff, 0xb1, 0x27, 0x6, 0x7, 0x6c2, 0x9, 0xc, 0x3ff, 0x1, 0xfffffffa, 0xa, 0xd, 0x7, 0x6, 0x3, 0x3, 0x8, 0x7f, 0x6, 0xa, 0x4, 0x8, 0x101, 0x1, 0x8, 0xc99, 0x1, 0xc, 0x8, 0x0, 0xc7, 0x1, 0x8ce, 0x3, 0x1000, 0xe, 0x5, 0x7, 0x3, 0x4, 0x0, 0x1, 0x1427, 0x7, 0x0, 0x0, 0x0, 0x1, 0x1, 0xe5ca, 0x7ff, 0x4, 0x6, 0x40, 0x8, 0x4, 0x43, 0x7, 0x6, 0x4, 0x1a2f569a, 0x900000, 0x5, 0x5, 0x6, 0xbaa, 0x9, 0x6, 0x14db, 0x0, 0x0, 0xdefa, 0x7fffffff, 0x1, 0x4, 0x6, 0x5, 0x1, 0x0, 0xb, 0x1, 0x7, 0x0, 0x101, 0x6, 0x8, 0x9, 0x1, 0xc, 0x6, 0x3, 0xef94, 0xffffffff, 0xd6, 0x7, 0x3170, 0x1ff, 0x2d, 0x2, 0xfffffff0, 0x8000, 0x4, 0x1, 0xf, 0x7fffffff, 0x5, 0x6b, 0xffffff58, 0x3ff, 0x800, 0x9, 0x916d, 0x7, 0x4, 0xfffffffa, 0x4, 0x800, 0x7, 0x9, 0x3, 0x4, 0x1, 0x5ab5, 0xfffff1c7, 0x3, 0xa95, 0x9, 0xef, 0xa, 0x1, 0xa250, 0xa09, 0x1, 0x8d3e, 0x9, 0x4e91952b, 0x80000000, 0x929, 0x8, 0xfffffffe, 0x5, 0x0, 0x7, 0xfffffffe, 0x8001, 0x8, 0x8, 0x6, 0x24e6, 0x5, 0xffffffff, 0x3, 0x5, 0xe00, 0x1, 0x9, 0x3, 0x9, 0x5, 0x8000, 0x7198, 0xe, 0x1ff, 0x20, 0x80000000, 0x2ba0, 0x68a, 0x5, 0xa32, 0x6, 0x3, 0xfffffffc, 0xc9e, 0xc5, 0x2, 0x3, 0x5, 0x0, 0xa, 0xa, 0x6, 0x1, 0x0, 0x4, 0x10, 0x4, 0x1, 0x3, 0x4, 0xf0, 0x5, 0x1, 0x200, 0x0, 0x3ff, 0x5, 0x6, 0xffffffff, 0x4c732d9e, 0x6, 0x9, 0x2, 0x8, 0x6, 0xcf, 0x1, 0x2, 0x1, 0x6, 0xc0, 0x3, 0x8, 0x6, 0x400, 0x7, 0x2, 0x0, 0x9, 0x7, 0x0, 0x1, 0x9, 0x2, 0xb, 0xfffffffb, 0x5, 0x401, 0x3, 0x0, 0x3, 0x8, 0x5, 0x5, 0x200, 0x80000000, 0xe37, 0x8, 0x8, 0x2, 0x9, 0x5, 0x2, 0x4, 0x930, 0x4, 0x200]}, @TCA_POLICE_RATE={0x404, 0x2, [0x1, 0x9, 0x0, 0x0, 0xfffffff5, 0x7fff, 0x7, 0x8, 0x3ff, 0x2, 0x3, 0x5, 0x4, 0x3, 0x21, 0x1, 0x2, 0xfff, 0x0, 0x84, 0x0, 0xffff1489, 0xf0, 0x8, 0x4, 0x9, 0x7f, 0xfffeffff, 0x5, 0x0, 0x4b, 0x2, 0x4, 0x4, 0xffffffff, 0x10001, 0xff, 0x8, 0x4, 0x3, 0xff000000, 0x9, 0x0, 0x4, 0xffe00000, 0x401, 0x1000, 0x7, 0xda, 0x5, 0xfffffff8, 0xb7e, 0x7, 0x4, 0x9, 0xac, 0x2, 0x10001, 0x7f, 0x0, 0x8, 0x10000, 0xffff, 0x4, 0x2, 0x5, 0x5, 0x1, 0xff, 0xd, 0xff, 0x0, 0x47e9, 0x8, 0x6, 0x4, 0xafd5, 0x0, 0x4, 0x7fffffff, 0x0, 0x1c, 0x3, 0x2, 0xffff032f, 0x4, 0xa35c, 0x9, 0xd3, 0x3, 0x4e, 0x5, 0xfffffffb, 0x5271, 0x7, 0x741, 0x5, 0x10000, 0x454f, 0x6, 0x3, 0x4, 0x134, 0x5, 0x6, 0x8000, 0x6, 0xfff, 0x1, 0x200, 0x2, 0x101, 0x7, 0x3, 0x627, 0x2, 0x7fff, 0x6, 0x80000001, 0x6, 0x800, 0xffff, 0x6, 0x3, 0x39, 0x5, 0x0, 0xf, 0x3, 0x0, 0x7f, 0x7, 0x6, 0x8, 0xfffffff7, 0xf, 0x5, 0x80, 0x80000000, 0x0, 0x861a3d4b, 0x6, 0x9, 0x8, 0x4, 0x8, 0x79d1, 0x3, 0xf, 0x1, 0x2, 0xff11, 0x74c4, 0x3, 0x7db, 0x8001, 0x0, 0x7, 0x6, 0x3, 0x81, 0x0, 0x9, 0x6, 0xc1e, 0xe9b, 0x100, 0x4, 0x0, 0x400, 0x8, 0x2c, 0x8, 0x7, 0x3ff, 0xfffffffa, 0x2, 0x0, 0x25, 0xa, 0xe, 0xe, 0x8, 0x400, 0x7, 0x0, 0x1, 0xf, 0x5, 0x1, 0x6, 0x6, 0x70000000, 0x8, 0x9, 0xf, 0x1, 0xfffffffa, 0x1ff, 0x4, 0x10, 0x4, 0xfff, 0x1, 0x7, 0xffff, 0xec8f, 0x4, 0x8001, 0x8, 0x8, 0x7, 0x2, 0x40, 0x2, 0x9, 0x2, 0x6, 0x6, 0xffff, 0x9, 0x6, 0x7, 0x8, 0x5, 0x5d8507d0, 0x2, 0x3, 0x3, 0x40, 0x7, 0x2a, 0x7bce, 0xb5, 0x2, 0xf8, 0x9, 0x9, 0x1, 0x7, 0x8, 0x53, 0x5, 0x5, 0x8bd, 0xc3, 0x2, 0xe, 0x5, 0x0, 0xfff, 0x0, 0x1, 0xde, 0x0, 0x70]}, @TCA_POLICE_TBF={0x3c, 0x1, {0xffff, 0x10000000, 0xfffeffff, 0x3, 0xffff, {0x8, 0x1, 0x0, 0x6, 0x4, 0x10000}, {0x1, 0x2, 0x40, 0x3, 0x8, 0xa}, 0x7, 0x401, 0x1ff}}, @TCA_POLICE_PEAKRATE={0x404, 0x3, [0x5, 0x1837, 0x0, 0x83a, 0x0, 0x6, 0x7, 0x2, 0x200, 0x8, 0xb, 0x7fffffff, 0x800, 0x63c3cb42, 0x2c, 0x1, 0x3, 0x0, 0x2, 0x5, 0x9, 0xff, 0x1, 0x2, 0x1, 0x4, 0x57, 0xc4, 0x0, 0x4, 0x8, 0x7, 0x401, 0x4, 0x7ff, 0xfffffffd, 0x0, 0x1800, 0x0, 0xea5, 0x6, 0xc, 0x57c4, 0x2576, 0x10, 0xd5ef, 0x8, 0x9, 0x1, 0x9, 0x0, 0xee16, 0x6, 0x400, 0x9, 0x8, 0x711145e3, 0x10000, 0x8, 0x400, 0x5, 0x9, 0x4848, 0x8, 0x80, 0xa2f, 0x401, 0x0, 0x6, 0x2, 0x6, 0x10000, 0xe, 0xa0, 0x1, 0x2, 0x3, 0x2, 0x8, 0x4, 0x200, 0xff, 0x7, 0x0, 0x4, 0x1, 0x0, 0xfffffffe, 0x6, 0x2, 0x4, 0x5, 0x4, 0x8, 0xf, 0x200, 0x6, 0x5, 0x1, 0x8, 0x1, 0xfffeffff, 0x5, 0x4, 0x6, 0x5, 0xd558, 0x3, 0x1, 0x2, 0x2, 0xc04f, 0x7fff, 0x200, 0xe78d, 0x3, 0x3, 0xbc5, 0x6, 0x8000, 0x3, 0x800, 0x7, 0x7, 0x0, 0x2, 0x1, 0x7fffffff, 0x1, 0xfff, 0x40, 0x80, 0x3, 0x5, 0x8, 0x8, 0x630e, 0x4, 0x101, 0x80000000, 0x2, 0x7fff, 0xff, 0x1ff, 0x0, 0x5, 0x3, 0xf7b9, 0x2, 0x401, 0xa, 0x9, 0x8001, 0x7, 0x40, 0xffffffff, 0x0, 0x24, 0x4, 0x80, 0x9, 0x5, 0x5, 0xfff, 0x1, 0x5, 0x4, 0x5, 0x0, 0x8b, 0x8, 0x84, 0x800, 0x8, 0x1ff, 0x7, 0x0, 0x1, 0x6, 0x10001, 0x400, 0x3, 0xffffff96, 0x1000, 0xfff, 0x5, 0x3, 0x2, 0x10000, 0x4, 0x7, 0xe1, 0x0, 0x80000000, 0x3, 0x2, 0x1, 0x1a95, 0x6, 0xb21, 0x1, 0x0, 0xfffffff8, 0x6, 0x1, 0x20, 0xffffffff, 0x80000000, 0x6, 0x23, 0x800, 0x80, 0x800, 0x1800, 0x4, 0x4, 0x4, 0x1, 0x6, 0xffffffff, 0x4, 0x5, 0x1, 0x1, 0x1, 0x80, 0xe0, 0x8000, 0x6, 0x4, 0x400000, 0x1, 0x4, 0x2, 0x3, 0x7, 0x6, 0x496, 0x184, 0x8, 0xbe2, 0x0, 0x57, 0x4, 0xc33, 0x2, 0x8000, 0xfffffffb, 0x1, 0x4, 0x1000, 0x2, 0x4, 0x7, 0x9, 0x3ff]}, @TCA_POLICE_RATE={0x404, 0x2, [0x0, 0x400, 0x3, 0xf, 0x5, 0x6, 0x80000001, 0x4, 0x2, 0x101, 0x10, 0x1, 0x5, 0x5, 0x8, 0x9, 0x12b, 0x2, 0x101, 0x100, 0x8, 0x3ff, 0x101, 0x6, 0x2, 0x4, 0x8, 0x5, 0x10000, 0x5, 0x6, 0x6, 0x2, 0x5, 0x5075, 0x9, 0x8, 0xfffffff8, 0x2, 0x0, 0x9, 0x0, 0x1, 0x401, 0x81, 0x3ff, 0x9, 0x7, 0x8, 0x9, 0x77, 0x4, 0x6, 0x1, 0x1540, 0x92, 0x1, 0x5, 0x6, 0x4, 0xc, 0x7, 0x1, 0xe1, 0x0, 0xffff, 0xec37, 0x10, 0x5, 0x10000, 0x80, 0xffffff2f, 0xffffffff, 0xb73e, 0x6, 0x7ff, 0x9, 0x7, 0x303dfe15, 0x6, 0x0, 0x401, 0x3, 0x0, 0x64, 0x3892, 0x7, 0xe, 0xff, 0x80000001, 0x3, 0x5, 0x0, 0x400, 0x6, 0x1, 0x401, 0xfffffffc, 0x101, 0x4, 0xffff, 0x5, 0xfffffffb, 0x9, 0x4, 0x24dd, 0x8, 0x10001, 0x1ff, 0x0, 0x90, 0x4, 0xaa, 0x7, 0x10000, 0xb, 0xa, 0x8000, 0x154, 0x5, 0x0, 0x4, 0x8, 0xfffffffc, 0x9, 0x1, 0x500000, 0x8, 0xb, 0xfff, 0x3, 0x6, 0x9b9d, 0xfffffffc, 0x200, 0x4, 0xfffeffff, 0x200, 0xaa, 0x38, 0x6, 0x219, 0x5, 0x4, 0x8, 0x42, 0x80000000, 0x0, 0x1, 0x6, 0xfffffffb, 0x7, 0x0, 0xa, 0x6, 0x6, 0x6, 0xd, 0x8, 0x1, 0x84, 0xfffffffc, 0x927c, 0x4, 0xe93, 0x8001, 0x95ac, 0xfffffe52, 0x1, 0x1, 0xe, 0xc, 0x9c, 0x7, 0x17d260, 0x10, 0x0, 0x0, 0x40, 0x3, 0x1, 0x1, 0x7d2, 0x7, 0xd7f, 0x9, 0x6, 0x4, 0x0, 0x8, 0xf8000000, 0x886, 0x2, 0x86, 0xd, 0x842d, 0x5, 0x3b1, 0x80, 0x8, 0x0, 0x1, 0x3, 0x74d0, 0x81, 0x5, 0x2ca1fa3f, 0x4, 0x7, 0x8, 0x54f96c32, 0x8, 0x100, 0x7, 0x80, 0x8, 0x8001, 0x68b, 0x10000, 0x9, 0x2, 0x5, 0x7, 0x15, 0x7, 0x3, 0x0, 0x7, 0x4, 0xffffffff, 0x80, 0x4, 0x0, 0x9, 0x5, 0xc3, 0x7, 0x6, 0x6, 0x8, 0x7f, 0x9, 0x101, 0x0, 0x8, 0x8, 0x0, 0x7, 0x3, 0x9, 0x5, 0x0, 0x74e, 0x3ff, 0x9, 0x3ff]}, @TCA_POLICE_PEAKRATE64={0xc, 0x9, 0x8000000000000000}]}, @TCA_FLOW_MODE={0x8}, @TCA_FLOW_ADDEND={0x8, 0x5, 0x8001}]}}, @TCA_CHAIN={0x8, 0xb, 0x3ff}]}, 0x1158}, 0x1, 0x0, 0x0, 0x60000}, 0x4000000) r5 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r6 = syz_genetlink_get_family_id$ieee802154(&(0x7f0000000180), r5) r7 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$IP6T_SO_SET_REPLACE(r7, 0x29, 0x40, &(0x7f0000000980)=@filter={'filter\x00', 0x4, 0x4, 0x340, 0xffffffff, 0x0, 0x0, 0xd0, 0xfeffffff, 0xffffffff, 0x270, 0x270, 0x270, 0xffffffff, 0x4, 0x0, {[{{@uncond, 0x2f2, 0xa8, 0xd0}, @REJECT={0x28, 'REJECT\x00', 0x0, {0x5}}}, {{@uncond, 0x0, 0xa8, 0xd0}, @common=@unspec=@STANDARD={0x28, '\x00', 0x0, 0xd0}}, {{@ipv6={@private0, @loopback, [0xff, 0x0, 0xff000000], [0x0, 0xff, 0xff000000, 0xffffff00], 'team0\x00', 'batadv_slave_0\x00', {0xff}, {}, 0xff, 0xe7, 0x4, 0x44}, 0x0, 0xa8, 0xd0}, @common=@unspec=@NFQUEUE3={0x28, 'NFQUEUE\x00', 0x3, {0x9, 0x8, 0x1}}}], {{'\x00', 0x0, 0xa8, 0xd0}, {0x28}}}}, 0x3a0) getsockopt$inet6_buf(r1, 0x29, 0x23, &(0x7f0000000d40)=""/4096, &(0x7f0000001d40)=0x1000) r8 = socket$kcm(0x29, 0x5, 0x0) mmap(&(0x7f000008b000/0x2000)=nil, 0x2000, 0x2000009, 0x13, r8, 0x0) sendmsg$IPCTNL_MSG_TIMEOUT_GET(r0, &(0x7f0000000300)={&(0x7f0000000080)={0x10, 0x0, 0x0, 0x60}, 0xc, &(0x7f00000002c0)={&(0x7f0000000240)={0x60, 0x1, 0x8, 0x0, 0x0, 0x0, {0x2, 0x0, 0x6}, [@CTA_TIMEOUT_NAME={0x9, 0x1, 'syz1\x00'}, @CTA_TIMEOUT_NAME={0x9, 0x1, 'syz0\x00'}, @CTA_TIMEOUT_DATA={0x2c, 0x4, 0x0, 0x1, @sctp=[@CTA_TIMEOUT_SCTP_COOKIE_ECHOED={0x8, 0x3, 0x1, 0x0, 0x8}, @CTA_TIMEOUT_SCTP_SHUTDOWN_SENT={0x8, 0x5, 0x1, 0x0, 0x5}, @CTA_TIMEOUT_SCTP_CLOSED={0x8, 0x1, 0x1, 0x0, 0x4}, @CTA_TIMEOUT_SCTP_COOKIE_WAIT={0x8, 0x2, 0x1, 0x0, 0x4}, @CTA_TIMEOUT_SCTP_COOKIE_ECHOED={0x8, 0x3, 0x1, 0x0, 0x7}]}, @CTA_TIMEOUT_L3PROTO={0x6, 0x2, 0x1, 0x0, 0x8884}]}, 0x60}}, 0x20004c90) write$cgroup_pressure(r8, &(0x7f0000000140)={'full'}, 0xfffffdef) sendmsg$IEEE802154_START_REQ(r3, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000200)=ANY=[@ANYBLOB="1c000000", @ANYRES16=r6, @ANYBLOB="010026bd7040fddbdf250300305206000e"], 0x1c}, 0x1, 0x0, 0x0, 0x20004090}, 0x8040) setsockopt$inet6_group_source_req(r1, 0x88, 0x2b, 0x0, 0x0) bpf$PROG_LOAD(0x5, &(0x7f000000e000)={0x16, 0x4, &(0x7f0000000040)=ANY=[@ANYBLOB="b400000000000000791090000000000007000000002000009500000000000000"], &(0x7f0000003ff6)='GPL\x00', 0x5, 0xfd90, &(0x7f000000cf3d)=""/195, 0x0, 0x0, '\x00', 0x0, @flow_dissector, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x3f}, 0x48) 2m36.21919586s ago: executing program 2 (id=4399): sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000200)={&(0x7f00000000c0)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a28000000000a0101000000005e1affd5020000000900010073797a300000000008000240000000032c000000030a01030000e6ff00000000020000000900010073797a30000001000900"], 0x7c}, 0x1, 0x0, 0x0, 0x20000000}, 0x0) r0 = socket$inet_mptcp(0x2, 0x1, 0x106) setsockopt$inet_int(r0, 0x0, 0x7, 0x0, 0x0) r1 = socket$nl_route(0x10, 0x3, 0x0) setsockopt$netlink_NETLINK_NO_ENOBUFS(r1, 0x10e, 0xc, &(0x7f0000000040)=0x7f, 0x4) sendmsg$netlink(r1, &(0x7f0000000080)={0x0, 0x0, &(0x7f00000000c0)=[{&(0x7f0000000100)={0x28, 0x5a, 0x30d, 0x0, 0x0, "", [@nested={0x18, 0x0, 0x0, 0x1, [@typed={0x14, 0x5, 0x0, 0x0, @ipv6=@initdev={0xfe, 0x88, '\x00', 0x0, 0x0}}]}]}, 0x28}], 0x1}, 0x0) r2 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r2, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000340)={{0x14, 0x10, 0x1, 0x0, 0x0, {0xa}}, [@NFT_MSG_NEWTABLE={0x20, 0x0, 0xa, 0x401, 0x0, 0x0, {0xa, 0x0, 0xa}, [@NFTA_TABLE_NAME={0x9, 0x1, 'syz0\x00'}]}, @NFT_MSG_NEWCHAIN={0x40, 0x3, 0xa, 0x401, 0x0, 0x0, {0xa, 0x0, 0xa}, [@NFTA_CHAIN_TABLE={0x9, 0x1, 'syz0\x00'}, @NFTA_CHAIN_NAME={0x9, 0x3, 'syz0\x00'}, @NFTA_CHAIN_HOOK={0x14, 0x4, 0x0, 0x1, [@NFTA_HOOK_HOOKNUM={0x8}, @NFTA_HOOK_PRIORITY={0x8}]}]}, @NFT_MSG_NEWRULE={0x34, 0x6, 0xa, 0x401, 0x0, 0x0, {0xa, 0x0, 0xa}, [@NFTA_RULE_TABLE={0x9, 0x1, 'syz0\x00'}, @NFTA_RULE_CHAIN={0x9, 0x2, 'syz0\x00'}, @NFTA_RULE_POSITION_ID={0x8}]}], {0x14, 0x11, 0x1, 0x0, 0x0, {0xa}}}, 0xbc}}, 0x0) r3 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$XFS_IOC_START_COMMIT(r3, 0x80585882, &(0x7f0000000140)={0xffffffffffffffff}) ioctl$PPPIOCSNPMODE(r4, 0x4008744b, &(0x7f00000001c0)={0x281, 0x1}) sendmsg$nl_generic(r3, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000100)=ANY=[@ANYBLOB="240000002700010000000000000000000e000000100001800b0002"], 0x24}, 0x1, 0x0, 0x0, 0x24000004}, 0x0) 2m28.197622869s ago: executing program 1 (id=4525): r0 = socket$kcm(0x2, 0xa, 0x2) ioctl$sock_SIOCETHTOOL(r0, 0x8946, &(0x7f0000000000)={'bond0\x00', &(0x7f0000000040)=@ethtool_sfeatures={0x1c}}) r1 = socket$can_bcm(0x1d, 0x2, 0x2) ioctl$ifreq_SIOCGIFINDEX_vcan(r1, 0x8933, &(0x7f0000000000)={'vcan0\x00', 0x0}) connect$can_bcm(r1, &(0x7f0000000100)={0x1d, r2}, 0x10) sendmmsg$sock(r1, &(0x7f0000001000)=[{{0x0, 0x0, &(0x7f0000000140)=[{&(0x7f0000003000)="0100000003000000640000000000000000000000000000000000000000000000000000000000000002000000000000000100000001000000010000000100"/72, 0x48}], 0x1}}, {{0x0, 0x0, &(0x7f0000002200)=[{&(0x7f0000003200)="0100000003000000640000000000000000000000000000000000000000000000000000000000000000000000000000000200000001000000", 0x38}], 0x1}}], 0x2, 0x0) r3 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r3, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000200)=@ipv4_newrule={0x24, 0x20, 0x301, 0x0, 0x0, {0x2, 0x0, 0x0, 0x4, 0x0, 0x0, 0x0, 0x0, 0x2}, [@FRA_FLOW={0x8, 0xb, 0xe}]}, 0x24}, 0x1, 0x0, 0x0, 0x240480d4}, 0x0) r4 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r4, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000200)=ANY=[@ANYBLOB="2800000021000100"], 0x28}}, 0x0) 2m27.929248139s ago: executing program 1 (id=4529): r0 = syz_init_net_socket$bt_l2cap(0x1f, 0x1, 0x0) connect$bt_l2cap(r0, &(0x7f0000000000)={0x1f, 0x0, @fixed={'\xaa\xaa\xaa\xaa\xaa', 0x90}}, 0xe) 2m27.838948129s ago: executing program 1 (id=4530): setsockopt$X25_QBITINCL(0xffffffffffffffff, 0x106, 0x1, &(0x7f0000000000)=0x1, 0x4) r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$devlink(&(0x7f0000000080), 0xffffffffffffffff) sendmsg$DEVLINK_CMD_TRAP_GROUP_GET(r0, &(0x7f00000002c0)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x800}, 0xc, &(0x7f0000000280)={&(0x7f00000000c0)={0x18c, r1, 0x200, 0x70bd2c, 0x25dfdbfe, {}, [{@nsim={{0xe}, {0xf, 0x2, {'netdevsim', 0x0}}}, {0xd}}, {@pci={{0x8}, {0x11}}, {0xd}}, {@nsim={{0xe}, {0xf, 0x2, {'netdevsim', 0x0}}}, {0xd}}, {@nsim={{0xe}, {0xf, 0x2, {'netdevsim', 0x0}}}, {0xd}}, {@nsim={{0xe}, {0xf, 0x2, {'netdevsim', 0x0}}}, {0xd}}, {@nsim={{0xe}, {0xf, 0x2, {'netdevsim', 0x0}}}, {0xd}}, {@pci={{0x8}, {0x11}}, {0xd}}, {@nsim={{0xe}, {0xf, 0x2, {'netdevsim', 0x0}}}, {0xd}}]}, 0x18c}, 0x1, 0x0, 0x0, 0x4}, 0x84) r2 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000340), r0) sendmsg$NL80211_CMD_GET_PROTOCOL_FEATURES(r0, &(0x7f0000000400)={&(0x7f0000000300)={0x10, 0x0, 0x0, 0x2000000}, 0xc, &(0x7f00000003c0)={&(0x7f0000000380)={0x14, r2, 0x10c, 0x70bd26, 0x25dfdbff, {}, ["", "", "", "", "", "", "", ""]}, 0x14}, 0x1, 0x0, 0x0, 0x1000c040}, 0x4000000) r3 = syz_genetlink_get_family_id$batadv(&(0x7f0000000480), r0) sendmsg$BATADV_CMD_SET_MESH(r0, &(0x7f0000000540)={&(0x7f0000000440)={0x10, 0x0, 0x0, 0x10010004}, 0xc, &(0x7f0000000500)={&(0x7f00000004c0)={0x24, r3, 0x100, 0x70bd25, 0x25dfdbfc, {}, [@BATADV_ATTR_MULTICAST_FANOUT={0x8, 0x3c, 0x1}, @BATADV_ATTR_GW_BANDWIDTH_DOWN={0x8, 0x31, 0x10}]}, 0x24}, 0x1, 0x0, 0x0, 0x8804}, 0x40) ioctl$ifreq_SIOCGIFINDEX_batadv_mesh(r0, 0x8933, &(0x7f0000000580)) r4 = syz_genetlink_get_family_id$tipc(&(0x7f0000000600), r0) sendmsg$TIPC_CMD_ENABLE_BEARER(r0, &(0x7f00000006c0)={&(0x7f00000005c0)={0x10, 0x0, 0x0, 0x2000000}, 0xc, &(0x7f0000000680)={&(0x7f0000000640)={0x34, r4, 0x2, 0x70bd29, 0x25dfdbfe, {{}, {}, {0x18, 0x17, {0x1d, 0x22, @udp='udp:syz1\x00'}}}, ["", ""]}, 0x34}, 0x1, 0x0, 0x0, 0x20004084}, 0x11) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f0000000740)={'wlan0\x00', 0x0}) sendmsg$NL80211_CMD_SET_MCAST_RATE(r0, &(0x7f0000000840)={&(0x7f0000000700)={0x10, 0x0, 0x0, 0x80000000}, 0xc, &(0x7f0000000800)={&(0x7f0000000780)={0x58, r2, 0x4, 0x70bd27, 0x25dfdbfd, {{}, {@val={0x8, 0x3, r5}, @val={0xc, 0x99, {0x6, 0x11}}}}, [@NL80211_ATTR_MCAST_RATE={0x8, 0x6b, 0x5a}, @NL80211_ATTR_MCAST_RATE={0x8, 0x6b, 0x78}, @NL80211_ATTR_MCAST_RATE={0x8, 0x6b, 0xb4}, @NL80211_ATTR_MCAST_RATE={0x8, 0x6b, 0x78}, @NL80211_ATTR_MCAST_RATE={0x8, 0x6b, 0x1e0}, @NL80211_ATTR_MCAST_RATE={0x8, 0x6b, 0xf0}]}, 0x58}, 0x1, 0x0, 0x0, 0x400a004}, 0x4000) r6 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a) ioctl$sock_TIOCINQ(r6, 0x541b, &(0x7f0000000880)) sendmsg$NL80211_CMD_SET_CQM(r0, &(0x7f00000009c0)={&(0x7f00000008c0)={0x10, 0x0, 0x0, 0x30070200}, 0xc, &(0x7f0000000980)={&(0x7f0000000900)={0x50, r2, 0x100, 0x70bd29, 0x25dfdbfe, {{}, {@void, @val={0xc, 0x99, {0x6, 0x5e}}}}, [@NL80211_ATTR_CQM={0xc, 0x5e, 0x0, 0x1, [@NL80211_ATTR_CQM_RSSI_THRESHOLD_EVENT={0x8, 0x3, 0x10000}]}, @NL80211_ATTR_CQM={0x24, 0x5e, 0x0, 0x1, [@NL80211_ATTR_CQM_TXE_PKTS={0x8, 0x6, 0xfffffa35}, @NL80211_ATTR_CQM_RSSI_THRESHOLD_EVENT={0x8, 0x3, 0x400}, @NL80211_ATTR_CQM_TXE_RATE={0x8, 0x5, 0x24}, @NL80211_ATTR_CQM_RSSI_THRESHOLD_EVENT={0x8}]}]}, 0x50}, 0x1, 0x0, 0x0, 0x20000001}, 0x4004100) r7 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_GET_BYINDEX(r7, &(0x7f0000000ac0)={&(0x7f0000000a00)={0x10, 0x0, 0x0, 0x1}, 0xc, &(0x7f0000000a80)={&(0x7f0000000a40)={0x2c, 0xf, 0x6, 0x801, 0x0, 0x0, {0x0, 0x0, 0xa}, [@IPSET_ATTR_INDEX={0x6, 0xb, 0x2}, @IPSET_ATTR_INDEX={0x6, 0xb, 0x4}, @IPSET_ATTR_INDEX={0x6, 0xb, 0xffffffffffffffff}]}, 0x2c}, 0x1, 0x0, 0x0, 0x20000000}, 0x14) r8 = syz_genetlink_get_family_id$tipc2(&(0x7f0000000b40), r0) sendmsg$TIPC_NL_KEY_FLUSH(r0, &(0x7f0000000e00)={&(0x7f0000000b00)={0x10, 0x0, 0x0, 0x100}, 0xc, &(0x7f0000000dc0)={&(0x7f0000000b80)={0x220, r8, 0x400, 0x70bd29, 0x3, {}, [@TIPC_NLA_BEARER={0x110, 0x1, 0x0, 0x1, [@TIPC_NLA_BEARER_UDP_OPTS={0x44, 0x4, {{0x20, 0x1, @in6={0xa, 0x4e20, 0xd76, @remote, 0x800}}, {0x20, 0x2, @in6={0xa, 0x4e24, 0xf, @mcast2, 0x3ff}}}}, @TIPC_NLA_BEARER_UDP_OPTS={0x38, 0x4, {{0x20, 0x1, @in6={0xa, 0x4e20, 0x7ff, @local, 0x401}}, {0x14, 0x2, @in={0x2, 0x4e22, @rand_addr=0x64010101}}}}, @TIPC_NLA_BEARER_DOMAIN={0x8, 0x3, 0x8}, @TIPC_NLA_BEARER_UDP_OPTS={0x38, 0x4, {{0x14, 0x1, @in={0x2, 0x4e23, @multicast2}}, {0x20, 0x2, @in6={0xa, 0x4e22, 0x4, @local}}}}, @TIPC_NLA_BEARER_UDP_OPTS={0x2c, 0x4, {{0x14, 0x1, @in={0x2, 0x4e23, @local}}, {0x14, 0x2, @in={0x2, 0x4e23, @multicast2}}}}, @TIPC_NLA_BEARER_PROP={0xc, 0x2, 0x0, 0x1, [@TIPC_NLA_PROP_PRIO={0x8, 0x1, 0xe}]}, @TIPC_NLA_BEARER_DOMAIN={0x8, 0x3, 0x1ff}, @TIPC_NLA_BEARER_NAME={0xf, 0x1, @l2={'eth', 0x3a, 'nicvf0\x00'}}]}, @TIPC_NLA_LINK={0xfc, 0x4, 0x0, 0x1, [@TIPC_NLA_LINK_PROP={0xc, 0x7, 0x0, 0x1, [@TIPC_NLA_PROP_MTU={0x8}]}, @TIPC_NLA_LINK_PROP={0x2c, 0x7, 0x0, 0x1, [@TIPC_NLA_PROP_WIN={0x8, 0x3, 0x8}, @TIPC_NLA_PROP_WIN={0x8, 0x3, 0x4}, @TIPC_NLA_PROP_MTU={0x8, 0x4, 0x4c}, @TIPC_NLA_PROP_TOL={0x8}, @TIPC_NLA_PROP_TOL={0x8, 0x2, 0x7fffffff}]}, @TIPC_NLA_LINK_PROP={0x2c, 0x7, 0x0, 0x1, [@TIPC_NLA_PROP_WIN={0x8, 0x3, 0x365f}, @TIPC_NLA_PROP_TOL={0x8, 0x2, 0x25d8}, @TIPC_NLA_PROP_TOL={0x8, 0x2, 0x61b}, @TIPC_NLA_PROP_MTU={0x8, 0x4, 0xc0}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x4}]}, @TIPC_NLA_LINK_PROP={0x2c, 0x7, 0x0, 0x1, [@TIPC_NLA_PROP_WIN={0x8, 0x3, 0x9}, @TIPC_NLA_PROP_TOL={0x8, 0x2, 0x2}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0xc}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x4}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0xb}]}, @TIPC_NLA_LINK_NAME={0x9, 0x1, 'syz1\x00'}, @TIPC_NLA_LINK_PROP={0xc, 0x7, 0x0, 0x1, [@TIPC_NLA_PROP_TOL={0x8, 0x2, 0x2}]}, @TIPC_NLA_LINK_NAME={0x9, 0x1, 'syz0\x00'}, @TIPC_NLA_LINK_PROP={0x2c, 0x7, 0x0, 0x1, [@TIPC_NLA_PROP_WIN={0x8, 0x3, 0x4}, @TIPC_NLA_PROP_WIN={0x8, 0x3, 0x2}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x17}, @TIPC_NLA_PROP_WIN={0x8, 0x3, 0x24}, @TIPC_NLA_PROP_TOL={0x8, 0x2, 0x7f}]}, @TIPC_NLA_LINK_PROP={0x4}, @TIPC_NLA_LINK_PROP={0x14, 0x7, 0x0, 0x1, [@TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x1d}, @TIPC_NLA_PROP_MTU={0x8, 0x4, 0x37f3d6d}]}]}]}, 0x220}, 0x1, 0x0, 0x0, 0x2000}, 0x20008810) sendmsg$IPSET_CMD_DEL(r7, &(0x7f0000000fc0)={&(0x7f0000000e40)={0x10, 0x0, 0x0, 0x4}, 0xc, &(0x7f0000000f80)={&(0x7f0000000e80)={0xd0, 0xa, 0x6, 0x5, 0x0, 0x0, {0x3, 0x0, 0xa}, [@IPSET_ATTR_ADT={0x38, 0x8, 0x0, 0x1, [{0x10, 0x7, 0x0, 0x1, @IPSET_ATTR_PACKETS={0xc, 0x19, 0x1, 0x0, 0x67e8ab0d}}, {0x18, 0x7, 0x0, 0x1, @IPSET_ATTR_IFACE={0x14, 0x17, 'tunl0\x00'}}, {0xc, 0x7, 0x0, 0x1, @IPSET_ATTR_MARKMASK={0x8, 0xb, 0x1, 0x0, 0x4}}]}, @IPSET_ATTR_ADT={0x38, 0x8, 0x0, 0x1, [{0x1c, 0x7, 0x0, 0x1, @IPSET_ATTR_IP2_TO={0x18, 0x16, 0x0, 0x1, @IPSET_ATTR_IPADDR_IPV6={0x14, 0x2, 0x1, 0x0, @empty}}}, {0xc, 0x7, 0x0, 0x1, @IPSET_ATTR_MARK={0x8, 0xa, 0x1, 0x0, 0x8}}, {0xc, 0x7, 0x0, 0x1, @IPSET_ATTR_PROTO={0x5}}]}, @IPSET_ATTR_DATA={0x38, 0x7, 0x0, 0x1, [@IPSET_ATTR_MARKMASK={0x8, 0xb, 0x1, 0x0, 0x4}, @IPSET_ATTR_PROTO={0x5, 0x7, 0x8}, @IPSET_ATTR_PORT_TO={0x6, 0x5, 0x1, 0x0, 0x4e24}, @IPSET_ATTR_PORT={0x6, 0x4, 0x1, 0x0, 0x4e22}, @IPSET_ATTR_IFACE={0x14, 0x17, 'ip_vti0\x00'}]}, @IPSET_ATTR_PROTOCOL={0x5}, @IPSET_ATTR_SETNAME={0x9, 0x2, 'syz1\x00'}]}, 0xd0}, 0x1, 0x0, 0x0, 0x4004044}, 0xd0) sendmsg$NL80211_CMD_SET_TX_BITRATE_MASK(r0, &(0x7f0000001440)={&(0x7f0000001000)={0x10, 0x0, 0x0, 0x200}, 0xc, &(0x7f0000001400)={&(0x7f0000001040)={0x3b8, r2, 0x800, 0x70bd2c, 0x25dfdbff, {{}, {@void, @void}}, [@NL80211_ATTR_TX_RATES={0x22c, 0x5a, 0x0, 0x1, [@NL80211_BAND_60GHZ={0x20, 0x2, 0x0, 0x1, [@NL80211_TXRATE_HT={0x8, 0x2, [{0x3, 0x4}, {0x0, 0x3}, {0x1, 0xa}, {0x2}]}, @NL80211_TXRATE_HE={0x14, 0x5, {[0xffde, 0x401, 0x8, 0x4, 0x3ff, 0x9, 0x0, 0xfff9]}}]}, @NL80211_BAND_2GHZ={0x64, 0x0, 0x0, 0x1, [@NL80211_TXRATE_HE_LTF={0x5}, @NL80211_TXRATE_VHT={0x14, 0x3, {[0x7ff, 0x2b6, 0x0, 0x7, 0x4, 0xe, 0x214, 0x7]}}, @NL80211_TXRATE_HE={0x14, 0x5, {[0x6, 0x0, 0x7, 0x3, 0x8, 0x8b4e, 0x3, 0x80]}}, @NL80211_TXRATE_HE_GI={0x5, 0x6, 0x1}, @NL80211_TXRATE_GI={0x5, 0x4, 0x1}, @NL80211_TXRATE_GI={0x5, 0x4, 0x2}, @NL80211_TXRATE_LEGACY={0xf, 0x1, [0x2, 0xc, 0xc, 0x9, 0x6c, 0x16, 0x16, 0x52576319c8fc639c, 0x6, 0x16, 0x6c]}, @NL80211_TXRATE_HE_GI={0x5, 0x6, 0x1}]}, @NL80211_BAND_60GHZ={0xb4, 0x2, 0x0, 0x1, [@NL80211_TXRATE_HE_GI={0x5, 0x6, 0x2}, @NL80211_TXRATE_HE_LTF={0x5}, @NL80211_TXRATE_HE_GI={0x5, 0x6, 0x2}, @NL80211_TXRATE_HE={0x14, 0x5, {[0x73b9, 0x3, 0xfffb, 0x1, 0x8000, 0x3400, 0xffff, 0xffff]}}, @NL80211_TXRATE_HE={0x14, 0x5, {[0x40, 0x5, 0x53c, 0xee6, 0x3, 0x8, 0x3, 0x6]}}, @NL80211_TXRATE_HE={0x14, 0x5, {[0x6, 0x100, 0x3, 0xfff9, 0x8, 0x7fff, 0x1, 0x6]}}, @NL80211_TXRATE_HT={0x3f, 0x2, [{0x1, 0x6}, {0x0, 0x7}, {0x3, 0xa}, {0x1, 0x1}, {0x1, 0x7}, {0x2, 0x6}, {0x3, 0x1}, {0x4, 0x1}, {0x0, 0xa}, {0x0, 0x1}, {0x1, 0xa}, {0x1, 0x6}, {0x2, 0x9}, {0x5, 0x6}, {0x2, 0x8}, {0x5, 0x7}, {0x6, 0x5}, {0x1, 0xa}, {0x3, 0x4}, {0x1, 0x3}, {0x3, 0x9}, {0x6, 0x3}, {0x0, 0x4}, {0x2, 0x6}, {0x2, 0x2}, {0x2, 0xa}, {0x6, 0x8}, {0x1, 0x9}, {0x0, 0x9}, {0x5, 0x6}, {0x4, 0x9}, {0x6, 0x8}, {0x4, 0x1}, {0x2, 0xa}, {0x0, 0x1}, {0x7, 0x3}, {0x3, 0x9}, {0x5}, {0x3, 0x1}, {0x6, 0x2}, {0x4, 0x2}, {0x1, 0x9}, {0x3, 0x5}, {0x1, 0x4}, {0x3, 0x4}, {0x2, 0x2}, {0x1}, {0x0, 0x8}, {0x1, 0x5}, {0x7, 0x9}, {0x6}, {0x5, 0x7}, {0x7, 0x9}, {0x2, 0x2}, {0x7, 0x7}, {0x1, 0x8}, {}, {0x5, 0x5}, {0x5}]}, @NL80211_TXRATE_GI={0x5, 0x4, 0x1}, @NL80211_TXRATE_VHT={0x14, 0x3, {[0x4129, 0xe2, 0x7, 0x8000, 0xe5, 0xa, 0xfb, 0x5]}}]}, @NL80211_BAND_60GHZ={0xf0, 0x2, 0x0, 0x1, [@NL80211_TXRATE_HT={0x4f, 0x2, [{0x0, 0x3}, {0x5, 0x9}, {0x1}, {0x3, 0x8}, {0x3, 0x8}, {0x3, 0x3}, {0x0, 0x1}, {0x0, 0x9}, {0x7, 0x6}, {0x1, 0x1}, {0x3, 0x6}, {}, {0x1, 0xa}, {0x7, 0x6}, {0x5, 0x1}, {0x2, 0x7}, {0x7}, {0x1, 0x8}, {0x0, 0x7}, {0x2, 0xa}, {0x1, 0x1}, {0x4}, {0x7, 0x6}, {0x2, 0xa}, {0x6, 0xa}, {0x0, 0x9}, {0x1, 0x2}, {0x1, 0x6}, {0x0, 0x5}, {0x1}, {0x2, 0x5}, {0x7, 0x4}, {0x5, 0x2}, {0x5, 0x2}, {0x1, 0xa}, {0x2, 0x9}, {0x2, 0x9}, {0x1, 0x3}, {0x6, 0x9}, {0x7, 0x8}, {0x2}, {0x1}, {0x0, 0x9}, {0x4, 0x4}, {0x7, 0x9}, {0x0, 0x2}, {0x4, 0x8}, {0x4, 0x7}, {0x6, 0x3}, {0x3, 0x8}, {0x7, 0x4}, {0x7, 0x7}, {0x4, 0x1}, {0x0, 0x1}, {0x1, 0x5}, {0x1}, {0x4, 0xa}, {0x0, 0xa}, {0x7, 0x5}, {0x6, 0x7}, {0x2, 0x1c}, {0x7, 0x2}, {0x1, 0x6}, {0x7, 0x5}, {0x3, 0x8}, {0x5, 0x6}, {0x4, 0x6}, {0x5, 0x1}, {0x4}, {0x4, 0x1a}, {0x6, 0x5}, {0x6, 0x6}, {0x0, 0x4}, {0x4, 0x9}, {0x0, 0x8}]}, @NL80211_TXRATE_LEGACY={0x4}, @NL80211_TXRATE_GI={0x5}, @NL80211_TXRATE_VHT={0x14, 0x3, {[0x6, 0x3, 0x4000, 0x8000, 0x3ff, 0xf, 0x1000, 0x2]}}, @NL80211_TXRATE_HE={0x14, 0x5, {[0xe98b, 0x57, 0x5, 0x6, 0xffa7, 0x89, 0x10, 0x8]}}, @NL80211_TXRATE_HT={0x31, 0x2, [{0x1, 0x4}, {0x5, 0x5}, {0x2, 0x5}, {0x6, 0x6}, {0x0, 0x4}, {0x5, 0x7}, {0x1, 0x5}, {0x7, 0x1}, {0x7, 0x9}, {0x4}, {0x5, 0xb}, {0x2, 0x6}, {0x5, 0x7}, {0x6, 0x3}, {0x4, 0x7}, {0x1, 0x7}, {0x0, 0xa}, {0x0, 0x2}, {0x1, 0x1}, {0x5, 0x6}, {0x2, 0x7}, {0x7, 0x5}, {0x3}, {0x0, 0x6}, {0x6, 0x1}, {0x4, 0x9}, {0x0, 0x9}, {0x7, 0x9}, {0x6, 0x2}, {0x0, 0x7}, {0x1, 0x2}, {0x7, 0x5}, {0x1}, {0x1, 0x9}, {0x5}, {0x6, 0x3}, {0x6, 0x4}, {0x0, 0x3}, {0x2, 0x3}, {0x4, 0x1}, {0x7, 0x2}, {0x1, 0x1}, {0x0, 0x3}, {0x2}, {0x7, 0x4}]}, @NL80211_TXRATE_HT={0x32, 0x2, [{0x7, 0x5}, {0x0, 0x9}, {0x7, 0x3}, {0x6, 0x9}, {0x3, 0x8}, {0x4, 0x1}, {0x3, 0x2}, {0x7}, {0x2, 0x8}, {0x7, 0x2}, {0x2, 0x7}, {0x0, 0x8}, {0x2, 0x1}, {0x6, 0x6}, {0x3, 0x4}, {0x3, 0x2}, {0x1, 0x4}, {0x2, 0xa}, {0x7, 0x2}, {0x5, 0x2}, {0x6, 0xa}, {0x1, 0xa}, {0x0, 0x8}, {0x4, 0x8}, {0x1, 0x4}, {0x2, 0x5}, {0x1, 0x6}, {0x6, 0xa}, {0x4, 0x2}, {0x2, 0x3}, {0x2, 0x2}, {0x7, 0x5}, {0x5, 0x8}, {0x3, 0xa}, {0x2, 0xa}, {0x1}, {0x0, 0x2}, {0x0, 0x8}, {0x5, 0xa}, {0x4, 0x7}, {0x2, 0x3}, {0x0, 0x6}, {0x1, 0x2}, {0x6, 0x9}, {0x1, 0x7}, {0x5, 0x3}]}]}]}, @NL80211_ATTR_TX_RATES={0x178, 0x5a, 0x0, 0x1, [@NL80211_BAND_2GHZ={0x60, 0x0, 0x0, 0x1, [@NL80211_TXRATE_VHT={0x14, 0x3, {[0x7f, 0x4, 0x7, 0x9, 0xe85, 0xfac, 0x7fff, 0xfff7]}}, @NL80211_TXRATE_LEGACY={0x24, 0x1, [0x24, 0x60, 0x60, 0x9, 0x9, 0x12, 0x0, 0x5, 0x1b, 0x18, 0x60, 0x3, 0x36, 0x9, 0x6c, 0x1b, 0x1, 0x30, 0x36, 0xc, 0x36, 0x6c, 0x48, 0x0, 0x1, 0x16, 0x2b, 0xb, 0x18, 0x48, 0xb, 0x0]}, @NL80211_TXRATE_VHT={0x14, 0x3, {[0x3, 0x7, 0x3, 0x5, 0x42, 0xbb2, 0x800, 0x8]}}, @NL80211_TXRATE_HE_LTF={0x5, 0x7, 0x2}, @NL80211_TXRATE_GI={0x5, 0x4, 0x1}]}, @NL80211_BAND_60GHZ={0x40, 0x2, 0x0, 0x1, [@NL80211_TXRATE_HT={0x26, 0x2, [{0x0, 0x8}, {0x7, 0x6}, {0x3, 0x6}, {0x4, 0x2}, {0x2, 0x2}, {0x1, 0x3}, {0x2, 0x1}, {0x1}, {0x6, 0x3}, {0x4, 0x1}, {0x1, 0x9}, {0x5, 0x5}, {0x6, 0x8}, {0x5, 0xa}, {0x0, 0x1}, {0x5, 0x2}, {0x5, 0x6}, {0x1, 0x9}, {0x3, 0x9}, {0x5}, {0x4, 0x6}, {0x6}, {}, {0x5, 0x7}, {0x0, 0x5}, {0x0, 0x2}, {0x6, 0x5}, {0x4, 0x2}, {0x7, 0x4}, {0x5}, {0x3, 0x5}, {0x6, 0x2}, {0x3, 0x6}, {0x5, 0x6}]}, @NL80211_TXRATE_HE={0x14, 0x5, {[0xcba, 0xa8a, 0x4330, 0x51, 0xff, 0x0, 0x1, 0x4]}}]}, @NL80211_BAND_60GHZ={0x60, 0x2, 0x0, 0x1, [@NL80211_TXRATE_HT={0x13, 0x2, [{0x4, 0x5}, {0x7, 0x3}, {0x3, 0x2}, {0x6, 0x7}, {0x4, 0x5}, {0x0, 0x6}, {0x7, 0x7}, {}, {0x1, 0x8}, {}, {0x0, 0x1}, {0x3, 0x1}, {0x3, 0x3}, {0x0, 0x8}, {0x6, 0x8}]}, @NL80211_TXRATE_HE_GI={0x5, 0x6, 0x2}, @NL80211_TXRATE_VHT={0x14, 0x3, {[0x44, 0x1, 0x3, 0x4, 0x4, 0x8001, 0x1, 0x1]}}, @NL80211_TXRATE_VHT={0x14, 0x3, {[0x100, 0x5, 0xffc0, 0x4, 0xf800, 0xfffa, 0x5, 0x72]}}, @NL80211_TXRATE_GI={0x5, 0x4, 0x1}, @NL80211_TXRATE_HE_LTF={0x5}, @NL80211_TXRATE_HE_LTF={0x5}]}, @NL80211_BAND_2GHZ={0x5c, 0x0, 0x0, 0x1, [@NL80211_TXRATE_GI={0x5, 0x4, 0x1}, @NL80211_TXRATE_GI={0x5}, @NL80211_TXRATE_HE={0x14, 0x5, {[0xffff, 0xd, 0x0, 0xb3, 0x101, 0x1, 0x40, 0x28e]}}, @NL80211_TXRATE_HE_GI={0x5}, @NL80211_TXRATE_HE_GI={0x5, 0x6, 0x2}, @NL80211_TXRATE_GI={0x5, 0x4, 0x2}, @NL80211_TXRATE_VHT={0x14, 0x3, {[0x0, 0x200, 0xffff, 0x7, 0x2, 0x49ff, 0x2, 0xb]}}, @NL80211_TXRATE_GI={0x5}]}, @NL80211_BAND_60GHZ={0x18, 0x2, 0x0, 0x1, [@NL80211_TXRATE_LEGACY={0x14, 0x1, [0x16, 0x60, 0x9, 0x4, 0x3, 0x24, 0x48, 0xb, 0x60, 0x5, 0x37, 0x6c, 0x60, 0x60, 0xc, 0x60]}]}]}]}, 0x3b8}, 0x1, 0x0, 0x0, 0x814}, 0x2000c104) ioctl$XFS_IOC_PATH_TO_FSHANDLE(r7, 0xc0385868, &(0x7f0000001580)={r6, &(0x7f0000001480)='eth', 0x400040, &(0x7f00000014c0)={@_ha_fsid={[0x6, 0xd]}, {0x5, 0x8, 0x8, 0x200}}, 0x9, &(0x7f0000001500), &(0x7f0000001540)=0x400}) getsockopt$inet_sctp_SCTP_GET_LOCAL_ADDRS(0xffffffffffffffff, 0x84, 0x6d, &(0x7f00000015c0)={0x0, 0x8e, "43ce9b3335ed36420e5cc59708fd7fc79d7874b35dccb8de88172d733bc27dc2077ac18cf679bb3fa425c3f57e489432ce55d6d6a39f7d6962267993d7b4250924bbae6b1a9ab113954c25a52177afeefc71d3b95e54eaf5b31a2d639589304716f023787c6795402324d92664a896d3eac232eedee219bb0230664088a6c16b4e3fa6bea07f4bc0f7c8bad52347"}, &(0x7f0000001680)=0x96) getsockopt$inet_sctp6_SCTP_GET_PEER_ADDR_INFO(r9, 0x84, 0xf, &(0x7f00000016c0)={r10, @in={{0x2, 0x4e22, @multicast2}}, 0x1, 0x9, 0x0, 0x7, 0x6}, &(0x7f0000001780)=0x98) sendmsg$NL80211_CMD_TDLS_CHANNEL_SWITCH(r9, &(0x7f00000018c0)={&(0x7f00000017c0)={0x10, 0x0, 0x0, 0x1000000}, 0xc, &(0x7f0000001880)={&(0x7f0000001800)={0x60, r2, 0x800, 0x70bd2d, 0x25dfdbff, {{}, {@val={0x8, 0x3, r5}, @void}}, [@NL80211_ATTR_MAC={0xa, 0x6, @broadcast}, @NL80211_ATTR_MAC={0xa}, @NL80211_ATTR_MAC={0xa, 0x6, @broadcast}, @NL80211_ATTR_OPER_CLASS={0x5}, @NL80211_ATTR_OPER_CLASS={0x5, 0xd6, 0x18}, @NL80211_ATTR_OPER_CLASS={0x5, 0xd6, 0x6}, @NL80211_ATTR_OPER_CLASS={0x5, 0xd6, 0xfb}]}, 0x60}}, 0x80) r11 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r12 = syz_genetlink_get_family_id$ieee802154(&(0x7f0000001940), 0xffffffffffffffff) sendmsg$IEEE802154_LLSEC_SETPARAMS(r11, &(0x7f0000001a00)={&(0x7f0000001900)={0x10, 0x0, 0x0, 0x8000}, 0xc, &(0x7f00000019c0)={&(0x7f0000001980)={0x24, r12, 0x1, 0x70bd25, 0x25dfdbfc, {}, [@IEEE802154_ATTR_SHORT_ADDR={0x6, 0x4, 0xffff}, @IEEE802154_ATTR_LLSEC_KEY_MODE={0x5, 0x2b, 0x2}]}, 0x24}, 0x1, 0x0, 0x0, 0x8044}, 0x4000800) setsockopt$IP_VS_SO_SET_ZERO(r9, 0x0, 0x48f, &(0x7f0000001a40)={0x0, @loopback, 0x4e24, 0x3, 'rr\x00', 0x20, 0x7, 0x5f}, 0x2c) 2m27.781797325s ago: executing program 1 (id=4532): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000240)=ANY=[@ANYBLOB="140000001000010000000000000000000500000a28000000000a030000000000000000000a00000708000240000000020900010073797a31000000002c000000030a010100000000000000000a0000070900010073797a31000000000900030073797a320000000014000000110001"], 0x7c}, 0x1, 0x0, 0x0, 0x4000}, 0x0) r1 = socket$inet_sctp(0x2, 0x5, 0x84) setsockopt$IP_VS_SO_SET_STARTDAEMON(r1, 0x0, 0x31, &(0x7f0000000140)={0x0, 'bridge_slave_0\x00'}, 0x3) sendmsg$NFT_BATCH(r0, &(0x7f0000009b40)={0x0, 0x0, &(0x7f0000009b00)={&(0x7f00000002c0)={{0x14, 0x10, 0x1, 0x0, 0x0, {0x3}}, [@NFT_MSG_NEWRULE={0x64, 0x6, 0xa, 0x401, 0x0, 0x0, {0xa, 0x0, 0x4}, [@NFTA_RULE_TABLE={0x9, 0x1, 'syz1\x00'}, @NFTA_RULE_EXPRESSIONS={0x38, 0x4, 0x0, 0x1, [{0x34, 0x1, 0x0, 0x1, @numgen={{0xb}, @val={0x24, 0x2, 0x0, 0x1, [@NFTA_NG_DREG={0x8, 0x1, 0x1, 0x0, 0x12}, @NFTA_NG_TYPE={0x8, 0x3, 0x1, 0x0, 0x1}, @NFTA_NG_OFFSET={0x8, 0x4, 0x1, 0x0, 0xfffffffa}, @NFTA_NG_MODULUS={0x8, 0x2, 0x1, 0x0, 0x8296}]}}}]}, @NFTA_RULE_CHAIN={0x9, 0x2, 'syz2\x00'}]}], {0x14, 0x11, 0x1, 0x0, 0x0, {0xa}}}, 0x8c}, 0x1, 0x0, 0x0, 0x4008091}, 0x24000000) 2m27.659381026s ago: executing program 1 (id=4533): r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = bpf$MAP_CREATE(0x0, &(0x7f0000000280)=@base={0x2, 0x4, 0x4, 0x1, 0x114}, 0x48) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x0, 0x6, &(0x7f00000001c0)=ANY=[], &(0x7f0000000100)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2}, 0x94) sendmsg$nl_route(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000140)=ANY=[@ANYBLOB="4000000010000304000000000000000000000300", @ANYRES32=0x0, @ANYBLOB="000000000439df48200012800b000100409392adcc02a4001567656e65766500001000028005000a000000000004000e00"], 0x40}}, 0x0) r2 = socket(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f0000000100)={'wlan0\x00', 0x0}) sendmsg$nl_route(r2, &(0x7f0000000080)={0xffffffffffffffff, 0x0, &(0x7f00000000c0)={&(0x7f0000000000)=@ipv6_newnexthop={0x30, 0x68, 0x1, 0x0, 0x0, {}, [@NHA_OIF={0x8, 0x5, r3}, @NHA_ENCAP={0x10, 0x8, 0x0, 0x1, @MPLS_IPTUNNEL_DST={0xc, 0x1, [{0x7f, 0x0, 0x1}, {0x200}]}}]}, 0x30}, 0x1, 0x0, 0x0, 0x4804}, 0x0) r4 = bpf$BPF_BTF_GET_FD_BY_ID(0x13, &(0x7f0000000080)=0xffffffffffffffff, 0x4) bpf$MAP_CREATE(0x0, &(0x7f0000000300)=@bloom_filter={0x1e, 0x9, 0xb24, 0x7, 0x20000, r1, 0x3, '\x00', r3, r4, 0x1, 0x2, 0x3, 0xe}, 0x50) 2m27.345962666s ago: executing program 1 (id=4538): socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) r1 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r1, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000300)={0x14, 0x27, 0x9, 0x78bd25, 0x25dfdbfd, {0xf}}, 0x14}}, 0x4000880) r2 = bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000340)={0x2, 0x4, 0x8, 0x1, 0x80, 0x0, 0x0, '\x00', 0x0, 0x0}, 0x48) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000340)={0x6, 0x3, &(0x7f0000000d80)=ANY=[@ANYBLOB="1800000003000000000000000000000095"], &(0x7f0000000000)='syzkaller\x00'}, 0x90) ioctl$ifreq_SIOCGIFINDEX_batadv_mesh(r0, 0x8933, &(0x7f0000000400)={'batadv0\x00', 0x0}) pipe(&(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) write$cgroup_int(r4, &(0x7f0000000140)=0xffffffffffffffff, 0x12) write$cgroup_subtree(r4, 0x0, 0x12) bpf$MAP_CREATE(0x0, &(0x7f0000000440)=@bloom_filter={0x1e, 0x7, 0x28ac, 0xa1, 0x8100, r2, 0x1, '\x00', r3, 0xffffffffffffffff, 0x4, 0x2, 0x1, 0x2, @value=r4}, 0x50) r5 = bpf$MAP_CREATE(0x0, &(0x7f00000004c0)=ANY=[@ANYBLOB="1000000004000000080000000200000000000000", @ANYRES32=0x1, @ANYBLOB="00000000000000000000000000000000000000005ce55ee512b39e", @ANYRES32=0x0, @ANYRES32, @ANYBLOB='\x00'/28], 0x48) bpf$MAP_GET_NEXT_KEY(0x2, &(0x7f00000000c0)={r5, &(0x7f0000000300), &(0x7f0000000000)=""/10, 0x2}, 0x20) r6 = socket$inet6_udp(0xa, 0x2, 0x0) ioctl$sock_ipv6_tunnel_SIOCADDTUNNEL(r6, 0x89f1, &(0x7f0000000080)={'ip6tnl0\x00', &(0x7f00000001c0)={'ip6_vti0\x00', 0x0, 0x2f, 0x5, 0x1, 0xfff, 0x5, @dev={0xfe, 0x80, '\x00', 0xf}, @empty, 0x40, 0x0, 0x19, 0x801}}) r7 = socket(0x400000000010, 0x2, 0x0) sendmsg$IPSET_CMD_PROTOCOL(r7, &(0x7f0000000280)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x800}, 0xc, &(0x7f0000000240)={&(0x7f0000000200)={0x34, 0x1, 0x6, 0x801, 0x0, 0x0, {0x1, 0x0, 0x5}, [@IPSET_ATTR_PROTOCOL={0x5}, @IPSET_ATTR_PROTOCOL={0x5}, @IPSET_ATTR_PROTOCOL={0x5}, @IPSET_ATTR_PROTOCOL={0x5}]}, 0x34}, 0x1, 0x0, 0x0, 0x51}, 0x804) sendmsg(r7, &(0x7f0000000380)={&(0x7f0000000080)=@ieee802154, 0x80, &(0x7f00000001c0)=[{&(0x7f0000000100)="1e1568a148f03d795e287a5fbb972e5369cd8682b19af8ff958c72543ca4624c200e2970bf7ff71c3699ee009b6beec5b3cae13ffaae58f35c62dcb683ab29acac0c13275d1292ea81303688a060648c9aa0550ef1f67176637a35db6c57e99c7280957b47b12a454d81fa65980bc6a273cd8aad9002885f3d09650b4e769c4fd0416b531c139248bcf5a481e182c294c1089e515d9e618eabc7b4000a8280fb9e6ab091c038552ba14f5b9bdbbacf95592e6de346a4f65211959e", 0xbb}], 0x1, &(0x7f00000002c0)=[{0x58, 0x10e, 0x101, "f83fea5ed658cc6b43a32eb72568681c32265f67b64bdd1c5990b2ee3d72f8cd92bbca4951274316c08bf6bf83f5525e61e1f4d8b1905fe173439e13c7d612eb14fc40"}, {0x30, 0x117, 0x0, "c078251e4208ecc63af25d7303705d922b478c2e093c9cb497501b82"}], 0x88}, 0x8014) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000040)) (async) socket$nl_generic(0x10, 0x3, 0x10) (async) sendmsg$nl_generic(r1, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000300)={0x14, 0x27, 0x9, 0x78bd25, 0x25dfdbfd, {0xf}}, 0x14}}, 0x4000880) (async) bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000340)={0x2, 0x4, 0x8, 0x1, 0x80, 0x0, 0x0, '\x00', 0x0, 0x0}, 0x48) (async) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000340)={0x6, 0x3, &(0x7f0000000d80)=ANY=[@ANYBLOB="1800000003000000000000000000000095"], &(0x7f0000000000)='syzkaller\x00'}, 0x90) (async) ioctl$ifreq_SIOCGIFINDEX_batadv_mesh(r0, 0x8933, &(0x7f0000000400)) (async) pipe(&(0x7f0000000000)) (async) write$cgroup_int(r4, &(0x7f0000000140)=0xffffffffffffffff, 0x12) (async) write$cgroup_subtree(r4, 0x0, 0x12) (async) bpf$MAP_CREATE(0x0, &(0x7f0000000440)=@bloom_filter={0x1e, 0x7, 0x28ac, 0xa1, 0x8100, r2, 0x1, '\x00', r3, 0xffffffffffffffff, 0x4, 0x2, 0x1, 0x2, @value=r4}, 0x50) (async) bpf$MAP_CREATE(0x0, &(0x7f00000004c0)=ANY=[@ANYBLOB="1000000004000000080000000200000000000000", @ANYRES32=0x1, @ANYBLOB="00000000000000000000000000000000000000005ce55ee512b39e", @ANYRES32=0x0, @ANYRES32, @ANYBLOB='\x00'/28], 0x48) (async) bpf$MAP_GET_NEXT_KEY(0x2, &(0x7f00000000c0)={r5, &(0x7f0000000300), &(0x7f0000000000)=""/10, 0x2}, 0x20) (async) socket$inet6_udp(0xa, 0x2, 0x0) (async) ioctl$sock_ipv6_tunnel_SIOCADDTUNNEL(r6, 0x89f1, &(0x7f0000000080)={'ip6tnl0\x00', &(0x7f00000001c0)={'ip6_vti0\x00', 0x0, 0x2f, 0x5, 0x1, 0xfff, 0x5, @dev={0xfe, 0x80, '\x00', 0xf}, @empty, 0x40, 0x0, 0x19, 0x801}}) (async) socket(0x400000000010, 0x2, 0x0) (async) sendmsg$IPSET_CMD_PROTOCOL(r7, &(0x7f0000000280)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x800}, 0xc, &(0x7f0000000240)={&(0x7f0000000200)={0x34, 0x1, 0x6, 0x801, 0x0, 0x0, {0x1, 0x0, 0x5}, [@IPSET_ATTR_PROTOCOL={0x5}, @IPSET_ATTR_PROTOCOL={0x5}, @IPSET_ATTR_PROTOCOL={0x5}, @IPSET_ATTR_PROTOCOL={0x5}]}, 0x34}, 0x1, 0x0, 0x0, 0x51}, 0x804) (async) sendmsg(r7, &(0x7f0000000380)={&(0x7f0000000080)=@ieee802154, 0x80, &(0x7f00000001c0)=[{&(0x7f0000000100)="1e1568a148f03d795e287a5fbb972e5369cd8682b19af8ff958c72543ca4624c200e2970bf7ff71c3699ee009b6beec5b3cae13ffaae58f35c62dcb683ab29acac0c13275d1292ea81303688a060648c9aa0550ef1f67176637a35db6c57e99c7280957b47b12a454d81fa65980bc6a273cd8aad9002885f3d09650b4e769c4fd0416b531c139248bcf5a481e182c294c1089e515d9e618eabc7b4000a8280fb9e6ab091c038552ba14f5b9bdbbacf95592e6de346a4f65211959e", 0xbb}], 0x1, &(0x7f00000002c0)=[{0x58, 0x10e, 0x101, "f83fea5ed658cc6b43a32eb72568681c32265f67b64bdd1c5990b2ee3d72f8cd92bbca4951274316c08bf6bf83f5525e61e1f4d8b1905fe173439e13c7d612eb14fc40"}, {0x30, 0x117, 0x0, "c078251e4208ecc63af25d7303705d922b478c2e093c9cb497501b82"}], 0x88}, 0x8014) (async) 2m21.068182314s ago: executing program 33 (id=4399): sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000200)={&(0x7f00000000c0)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a28000000000a0101000000005e1affd5020000000900010073797a300000000008000240000000032c000000030a01030000e6ff00000000020000000900010073797a30000001000900"], 0x7c}, 0x1, 0x0, 0x0, 0x20000000}, 0x0) r0 = socket$inet_mptcp(0x2, 0x1, 0x106) setsockopt$inet_int(r0, 0x0, 0x7, 0x0, 0x0) r1 = socket$nl_route(0x10, 0x3, 0x0) setsockopt$netlink_NETLINK_NO_ENOBUFS(r1, 0x10e, 0xc, &(0x7f0000000040)=0x7f, 0x4) sendmsg$netlink(r1, &(0x7f0000000080)={0x0, 0x0, &(0x7f00000000c0)=[{&(0x7f0000000100)={0x28, 0x5a, 0x30d, 0x0, 0x0, "", [@nested={0x18, 0x0, 0x0, 0x1, [@typed={0x14, 0x5, 0x0, 0x0, @ipv6=@initdev={0xfe, 0x88, '\x00', 0x0, 0x0}}]}]}, 0x28}], 0x1}, 0x0) r2 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r2, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000340)={{0x14, 0x10, 0x1, 0x0, 0x0, {0xa}}, [@NFT_MSG_NEWTABLE={0x20, 0x0, 0xa, 0x401, 0x0, 0x0, {0xa, 0x0, 0xa}, [@NFTA_TABLE_NAME={0x9, 0x1, 'syz0\x00'}]}, @NFT_MSG_NEWCHAIN={0x40, 0x3, 0xa, 0x401, 0x0, 0x0, {0xa, 0x0, 0xa}, [@NFTA_CHAIN_TABLE={0x9, 0x1, 'syz0\x00'}, @NFTA_CHAIN_NAME={0x9, 0x3, 'syz0\x00'}, @NFTA_CHAIN_HOOK={0x14, 0x4, 0x0, 0x1, [@NFTA_HOOK_HOOKNUM={0x8}, @NFTA_HOOK_PRIORITY={0x8}]}]}, @NFT_MSG_NEWRULE={0x34, 0x6, 0xa, 0x401, 0x0, 0x0, {0xa, 0x0, 0xa}, [@NFTA_RULE_TABLE={0x9, 0x1, 'syz0\x00'}, @NFTA_RULE_CHAIN={0x9, 0x2, 'syz0\x00'}, @NFTA_RULE_POSITION_ID={0x8}]}], {0x14, 0x11, 0x1, 0x0, 0x0, {0xa}}}, 0xbc}}, 0x0) r3 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$XFS_IOC_START_COMMIT(r3, 0x80585882, &(0x7f0000000140)={0xffffffffffffffff}) ioctl$PPPIOCSNPMODE(r4, 0x4008744b, &(0x7f00000001c0)={0x281, 0x1}) sendmsg$nl_generic(r3, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000100)=ANY=[@ANYBLOB="240000002700010000000000000000000e000000100001800b0002"], 0x24}, 0x1, 0x0, 0x0, 0x24000004}, 0x0) 1m48.529118029s ago: executing program 34 (id=4538): socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) r1 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r1, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000300)={0x14, 0x27, 0x9, 0x78bd25, 0x25dfdbfd, {0xf}}, 0x14}}, 0x4000880) r2 = bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000340)={0x2, 0x4, 0x8, 0x1, 0x80, 0x0, 0x0, '\x00', 0x0, 0x0}, 0x48) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000340)={0x6, 0x3, &(0x7f0000000d80)=ANY=[@ANYBLOB="1800000003000000000000000000000095"], &(0x7f0000000000)='syzkaller\x00'}, 0x90) ioctl$ifreq_SIOCGIFINDEX_batadv_mesh(r0, 0x8933, &(0x7f0000000400)={'batadv0\x00', 0x0}) pipe(&(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) write$cgroup_int(r4, &(0x7f0000000140)=0xffffffffffffffff, 0x12) write$cgroup_subtree(r4, 0x0, 0x12) bpf$MAP_CREATE(0x0, &(0x7f0000000440)=@bloom_filter={0x1e, 0x7, 0x28ac, 0xa1, 0x8100, r2, 0x1, '\x00', r3, 0xffffffffffffffff, 0x4, 0x2, 0x1, 0x2, @value=r4}, 0x50) r5 = bpf$MAP_CREATE(0x0, &(0x7f00000004c0)=ANY=[@ANYBLOB="1000000004000000080000000200000000000000", @ANYRES32=0x1, @ANYBLOB="00000000000000000000000000000000000000005ce55ee512b39e", @ANYRES32=0x0, @ANYRES32, @ANYBLOB='\x00'/28], 0x48) bpf$MAP_GET_NEXT_KEY(0x2, &(0x7f00000000c0)={r5, &(0x7f0000000300), &(0x7f0000000000)=""/10, 0x2}, 0x20) r6 = socket$inet6_udp(0xa, 0x2, 0x0) ioctl$sock_ipv6_tunnel_SIOCADDTUNNEL(r6, 0x89f1, &(0x7f0000000080)={'ip6tnl0\x00', &(0x7f00000001c0)={'ip6_vti0\x00', 0x0, 0x2f, 0x5, 0x1, 0xfff, 0x5, @dev={0xfe, 0x80, '\x00', 0xf}, @empty, 0x40, 0x0, 0x19, 0x801}}) r7 = socket(0x400000000010, 0x2, 0x0) sendmsg$IPSET_CMD_PROTOCOL(r7, &(0x7f0000000280)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x800}, 0xc, &(0x7f0000000240)={&(0x7f0000000200)={0x34, 0x1, 0x6, 0x801, 0x0, 0x0, {0x1, 0x0, 0x5}, [@IPSET_ATTR_PROTOCOL={0x5}, @IPSET_ATTR_PROTOCOL={0x5}, @IPSET_ATTR_PROTOCOL={0x5}, @IPSET_ATTR_PROTOCOL={0x5}]}, 0x34}, 0x1, 0x0, 0x0, 0x51}, 0x804) sendmsg(r7, &(0x7f0000000380)={&(0x7f0000000080)=@ieee802154, 0x80, &(0x7f00000001c0)=[{&(0x7f0000000100)="1e1568a148f03d795e287a5fbb972e5369cd8682b19af8ff958c72543ca4624c200e2970bf7ff71c3699ee009b6beec5b3cae13ffaae58f35c62dcb683ab29acac0c13275d1292ea81303688a060648c9aa0550ef1f67176637a35db6c57e99c7280957b47b12a454d81fa65980bc6a273cd8aad9002885f3d09650b4e769c4fd0416b531c139248bcf5a481e182c294c1089e515d9e618eabc7b4000a8280fb9e6ab091c038552ba14f5b9bdbbacf95592e6de346a4f65211959e", 0xbb}], 0x1, &(0x7f00000002c0)=[{0x58, 0x10e, 0x101, "f83fea5ed658cc6b43a32eb72568681c32265f67b64bdd1c5990b2ee3d72f8cd92bbca4951274316c08bf6bf83f5525e61e1f4d8b1905fe173439e13c7d612eb14fc40"}, {0x30, 0x117, 0x0, "c078251e4208ecc63af25d7303705d922b478c2e093c9cb497501b82"}], 0x88}, 0x8014) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000040)) (async) socket$nl_generic(0x10, 0x3, 0x10) (async) sendmsg$nl_generic(r1, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000300)={0x14, 0x27, 0x9, 0x78bd25, 0x25dfdbfd, {0xf}}, 0x14}}, 0x4000880) (async) bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000340)={0x2, 0x4, 0x8, 0x1, 0x80, 0x0, 0x0, '\x00', 0x0, 0x0}, 0x48) (async) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000340)={0x6, 0x3, &(0x7f0000000d80)=ANY=[@ANYBLOB="1800000003000000000000000000000095"], &(0x7f0000000000)='syzkaller\x00'}, 0x90) (async) ioctl$ifreq_SIOCGIFINDEX_batadv_mesh(r0, 0x8933, &(0x7f0000000400)) (async) pipe(&(0x7f0000000000)) (async) write$cgroup_int(r4, &(0x7f0000000140)=0xffffffffffffffff, 0x12) (async) write$cgroup_subtree(r4, 0x0, 0x12) (async) bpf$MAP_CREATE(0x0, &(0x7f0000000440)=@bloom_filter={0x1e, 0x7, 0x28ac, 0xa1, 0x8100, r2, 0x1, '\x00', r3, 0xffffffffffffffff, 0x4, 0x2, 0x1, 0x2, @value=r4}, 0x50) (async) bpf$MAP_CREATE(0x0, &(0x7f00000004c0)=ANY=[@ANYBLOB="1000000004000000080000000200000000000000", @ANYRES32=0x1, @ANYBLOB="00000000000000000000000000000000000000005ce55ee512b39e", @ANYRES32=0x0, @ANYRES32, @ANYBLOB='\x00'/28], 0x48) (async) bpf$MAP_GET_NEXT_KEY(0x2, &(0x7f00000000c0)={r5, &(0x7f0000000300), &(0x7f0000000000)=""/10, 0x2}, 0x20) (async) socket$inet6_udp(0xa, 0x2, 0x0) (async) ioctl$sock_ipv6_tunnel_SIOCADDTUNNEL(r6, 0x89f1, &(0x7f0000000080)={'ip6tnl0\x00', &(0x7f00000001c0)={'ip6_vti0\x00', 0x0, 0x2f, 0x5, 0x1, 0xfff, 0x5, @dev={0xfe, 0x80, '\x00', 0xf}, @empty, 0x40, 0x0, 0x19, 0x801}}) (async) socket(0x400000000010, 0x2, 0x0) (async) sendmsg$IPSET_CMD_PROTOCOL(r7, &(0x7f0000000280)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x800}, 0xc, &(0x7f0000000240)={&(0x7f0000000200)={0x34, 0x1, 0x6, 0x801, 0x0, 0x0, {0x1, 0x0, 0x5}, [@IPSET_ATTR_PROTOCOL={0x5}, @IPSET_ATTR_PROTOCOL={0x5}, @IPSET_ATTR_PROTOCOL={0x5}, @IPSET_ATTR_PROTOCOL={0x5}]}, 0x34}, 0x1, 0x0, 0x0, 0x51}, 0x804) (async) sendmsg(r7, &(0x7f0000000380)={&(0x7f0000000080)=@ieee802154, 0x80, &(0x7f00000001c0)=[{&(0x7f0000000100)="1e1568a148f03d795e287a5fbb972e5369cd8682b19af8ff958c72543ca4624c200e2970bf7ff71c3699ee009b6beec5b3cae13ffaae58f35c62dcb683ab29acac0c13275d1292ea81303688a060648c9aa0550ef1f67176637a35db6c57e99c7280957b47b12a454d81fa65980bc6a273cd8aad9002885f3d09650b4e769c4fd0416b531c139248bcf5a481e182c294c1089e515d9e618eabc7b4000a8280fb9e6ab091c038552ba14f5b9bdbbacf95592e6de346a4f65211959e", 0xbb}], 0x1, &(0x7f00000002c0)=[{0x58, 0x10e, 0x101, "f83fea5ed658cc6b43a32eb72568681c32265f67b64bdd1c5990b2ee3d72f8cd92bbca4951274316c08bf6bf83f5525e61e1f4d8b1905fe173439e13c7d612eb14fc40"}, {0x30, 0x117, 0x0, "c078251e4208ecc63af25d7303705d922b478c2e093c9cb497501b82"}], 0x88}, 0x8014) (async) 1m1.216519951s ago: executing program 5 (id=5212): r0 = syz_init_net_socket$nl_rdma(0x10, 0x3, 0x10) r1 = socket$inet_udp(0x2, 0x2, 0x0) bind$inet(r1, &(0x7f0000000000)={0x2, 0x0, @local}, 0x10) (async, rerun: 32) r2 = socket$inet6_mptcp(0xa, 0x1, 0x106) (rerun: 32) setsockopt$inet6_int(r2, 0x29, 0x1a, 0x0, 0x0) setsockopt$sock_int(r1, 0x1, 0x3c, &(0x7f00000000c0)=0x1, 0x4) sendmmsg$inet(r1, &(0x7f00000011c0)=[{{&(0x7f0000000280)={0x2, 0x4e23, @multicast1}, 0x10, 0x0}}, {{0x0, 0x0, &(0x7f0000000580)=[{&(0x7f0000000100)="1b", 0x1}], 0x1}}, {{0x0, 0x0, &(0x7f0000000300)=[{&(0x7f0000000200)=' ', 0x1}], 0x1}}, {{0x0, 0x0, &(0x7f0000002180)=[{&(0x7f0000000a80)="3532e45a2a47b082daed2070cfb7486d610cbf2c61047b598bfe9cd45d4f49e6dc94c3258897ce5d1c79245647804c273df7b1f3a090a6db8597d29d858b3192fe623f600cb431634f4182a8b945a95d3c65a8a15745fac45de5b1988172b0e1e7b06a4f3127d260c9dd68402b1c9fbc5f8f1642170dbad52b1c5c43c486a4a957b356916878cd74336ee8f570470acfc47c4fecf1dc4fa15e34231cd2416c365555ac8d16494170df8159af76b077cdea7582961b8b53c94f63f69b2cd2ddd0e70342cb024c085d413f58279cd1f023f6a70bba2764028cd6bd76b24c0cf74de2deb2d78ba54e70e6510c9829ad154fe7b664167f69328b471490a5c0d2b89e1db10f4037369650b57d71894ac4b336cf720de94040d1099bf5a7fdaf560345372f0d896c786fbd34f0257f18b6c8106d21acd12ab2db03dd15fef1d25da97788cd180c6b6d58b33822bf9839ff2ada5f6e2c8a2d1038292cc05b4a5e63fcbde50a915cd851d1c370b3c9be47ce4dc6e5fed05781c3c921c840738783256f861d1ccb710dc593a98a3e416c89abf2cc2eb19c99d5c3ae3341f7c8c14de7c7e997f008ac48eba6d94c828938685ca421ae4e90a9b45a4e5f1b4ace27816746826627b1829208efdd2c46f82b8259a8a3dbf412e5006cff9cf9778c337a0aab9f215edbfb6d1d0b1f9bac9c995a199074abd14f44fd9039983c703335e2451a8d0662655529ccdbf9b0773868c7686817ef845d611704feec78f492b8e55b4d5a2f58629a0a414d91592a68b9e976e563e390a3abada2a39d882059c4d81b67389561a98cf15eceb764642d42a64bfbda38c336ce45d0c2250c5f0c43c956d1dd9313174d312b02a6d15ecaa436f26153ab5dc10c88270e91b4295aa92458ee4f21e59aed97bb07d04cad7ecf0f6c02b3a118415ddcc7f7bb3df02f6e12a94e0626fd75c3a08206f745034f409260f14340d6a89bba185d56ba", 0x2b9}], 0x1}}], 0x4, 0x2400c0a2) (async) writev(r1, &(0x7f0000000080)=[{&(0x7f0000000a40)="b0", 0x306}], 0x1) (async) r3 = socket$inet6_sctp(0xa, 0x1, 0x84) setsockopt$inet_sctp6_SCTP_PEER_ADDR_THLDS(r3, 0x84, 0x84, &(0x7f0000000040)={0x0, @in={{0xa, 0x804, @multicast1}}, 0x5, 0x6d0}, 0x90) sendto$inet6(r3, &(0x7f0000000280)='0', 0xfffd, 0x4000854, &(0x7f0000000300)={0xa, 0x4e21, 0xbe7, @loopback, 0x800000c0}, 0x1c) r4 = socket(0x10, 0x2, 0x0) ioctl$sock_ipv6_tunnel_SIOCADDTUNNEL(r4, 0x89f1, &(0x7f00000000c0)={'ip6gre0\x00', &(0x7f0000000000)={'syztnl1\x00', 0x0, 0x29, 0x0, 0x0, 0xfffffffd, 0x30, @private2={0xfc, 0x2, '\x00', 0x1}, @dev={0xfe, 0x80, '\x00', 0x4}, 0x0, 0x0, 0x9}}) ioctl$sock_ipv6_tunnel_SIOCCHGTUNNEL(r4, 0x89f3, &(0x7f0000000080)={'syztnl1\x00', &(0x7f0000000180)={'ip6_vti0\x00', 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @empty, @empty, 0x0, 0x0, 0x1000002}}) sendmsg$netlink(r0, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000000)=[{&(0x7f0000000340)={0x104, 0x102f, 0x1, 0x0, 0x25dfdbfc, "", [@generic="6f48281ce5584d1392cdeff6eb1ee9303eb747b4a8bb2e88c97e400b54ec4fe6f0a1a82e14cf85ed16affd1f634cf2cb0ba3eac218b023d3d345a3c0a2292ca10e6d35cfc29546943a962322484fcd3d239f5be2da6d1afd936e557f77a48a5520f83ba4cb7486facbfb0c6fd69af3d2fb5bcec5336fc21f7d4d14a720832a6ee3158f98e4bf52fa0c95dc0ae3dccea2ab014db78486ec6fbdb37e0877ab657d7fe1d5f191ff6cb054161109b246710cca92837517dc5cbf22b99477523da9168868792e96161e7bcc8fe0bddaf00ea9896cc4af3d7e4160ea42a1a337282b5c778287f0b0445d6318eeaf555f63e3373592e4"]}, 0x104}], 0x1, 0x0, 0x0, 0x1}, 0x0) 1m1.011540987s ago: executing program 5 (id=5214): ioctl$F2FS_IOC_MOVE_RANGE(0xffffffffffffffff, 0xc020f509, &(0x7f0000000000)={0xffffffffffffffff, 0x5, 0x4, 0x1}) r1 = syz_genetlink_get_family_id$devlink(&(0x7f0000000080), 0xffffffffffffffff) r2 = socket$kcm(0xa, 0x5, 0x0) sendmsg$kcm(r2, &(0x7f0000002dc0)={&(0x7f0000001640)=@l2tp6={0xa, 0x0, 0x7fff, @private2={0xfc, 0x2, '\x00', 0x1}, 0x8}, 0x80, &(0x7f0000000340)=[{&(0x7f00000003c0)='`', 0x1}], 0x1}, 0x41) setsockopt$sock_attach_bpf(r2, 0x84, 0x1e, &(0x7f0000000000), 0x4) close(0x3) sendmsg$DEVLINK_CMD_TRAP_GET(r0, &(0x7f0000000200)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x40}, 0xc, &(0x7f00000001c0)={&(0x7f0000000140)={0x50, r1, 0x400, 0x70bd2a, 0x25dfdbfb, {}, [{@nsim={{0xe}, {0xf, 0x2, {'netdevsim', 0x0}}}, {0x1c}}]}, 0x50}, 0x1, 0x0, 0x0, 0x8000}, 0x40000) r3 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_route(r3, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000001140)={&(0x7f0000000100)=@ipv6_deladdrlabel={0x30, 0x49, 0xc05, 0x70bd27, 0x25dfdbfd, {0xa, 0x0, 0x1, 0x0, 0x0, 0x3b}, [@IFAL_ADDRESS={0x14, 0x1, @rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x02'}]}, 0x30}, 0x1, 0x0, 0x0, 0x800}, 0x0) 1m0.848168643s ago: executing program 5 (id=5218): bpf$PROG_LOAD(0x5, &(0x7f000000e000)={0x4, 0x4, &(0x7f0000000040)=ANY=[@ANYBLOB="b40000d430cd4571360000000000dd0a00000000000063013000000000009500"], &(0x7f0000003ff6)='GPL\x00', 0x5, 0xfd90, &(0x7f000000cf3d)=""/195, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x19, &(0x7f0000000000), 0xb5, 0x10, &(0x7f0000000000), 0x7}, 0x48) 1m0.803512585s ago: executing program 5 (id=5219): r0 = socket$kcm(0x10, 0x5, 0x0) ioctl$XFS_IOC_START_COMMIT(r0, 0x80585882, &(0x7f0000000100)={0xffffffffffffffff}) sendmsg$NFNL_MSG_ACCT_GET_CTRZERO(r1, &(0x7f0000000600)={&(0x7f0000000280)={0x10, 0x0, 0x0, 0x80000}, 0xc, &(0x7f00000005c0)={&(0x7f0000000540)={0x68, 0x2, 0x7, 0x101, 0x0, 0x0, {0x5, 0x0, 0x2}, [@NFACCT_BYTES={0xc, 0x3, 0x1, 0x0, 0x7}, @NFACCT_NAME={0x9, 0x1, 'syz0\x00'}, @NFACCT_QUOTA={0xc, 0x6, 0x1, 0x0, 0x3}, @NFACCT_FILTER={0xc, 0x7, 0x0, 0x1, [@NFACCT_FILTER_VALUE={0x8, 0x2, 0x1, 0x0, 0x5}]}, @NFACCT_QUOTA={0xc, 0x6, 0x1, 0x0, 0x3ff}, @NFACCT_NAME={0x9, 0x1, 'syz0\x00'}, @NFACCT_QUOTA={0xc, 0x6, 0x1, 0x0, 0x4}]}, 0x68}, 0x1, 0x0, 0x0, 0x4000}, 0x20000) ioctl$VFAT_IOCTL_READDIR_SHORT(r0, 0x82307202, &(0x7f0000000300)=[{0x0, 0x0, 0x100}, {0x0, 0x0, 0x100}]) sendmsg$kcm(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f00000002c0)=[{&(0x7f0000001a80)="d8000000180081064e81f782db4cb904021d080006007c09e8fe55a10a0015000500142603600e1208000f0000000401a80016002000014006000000035c0461c1d60008000000000000fb8000a0e408e8d8ef52a98516277ce06bbace8017cbec4c2ee5a7cef4090000001fb791643a5ee4ce1b14d6d930dfe1d9d322fe7c9f8775730d16a4683f5aeb4edbb57a5025ccca9e00360db70100000040fad95667e006dcdf63951f0f49e119c849ea6e5a0fc55e4cde205a214d6102d6dcbf33fb5ce3bb9ad809d5e1cace81ed0bffece0b42a1a83d5f59e3d", 0xd8}], 0x1}, 0x4040800) r2 = socket$phonet_pipe(0x23, 0x5, 0x2) ioctl$sock_SIOCETHTOOL(r2, 0x8946, &(0x7f0000000040)={'batadv0\x00', &(0x7f0000000180)=@ethtool_drvinfo={0x3, "85f32f0a887130ebcad580f09d2604bb988cab295c5c7527d853d26cd74e83dd", "1cdde36751077a0258c5398b1f749e8f84542562f9023beb958bbe8fd36ccfb9", "28dd038b866b5ce68575f1eafc63bf169b1959a0718b9254945e6539a6af90e3", "b1148921ee9dd79fb881abd54c7e275e6c5b0273215b6ca5887aa46c91cbd211", "52b289bfc4d317e1e36be35d98d657ccbce94bf4f44b9aa90640146c0542331d", "0993d43fc40f59b0f334108b", 0x2, 0x1, 0x0, 0x9, 0x6}}) getpeername(r0, &(0x7f0000000040)=@ieee802154={0x24, @short}, &(0x7f00000000c0)=0x80) 1m0.70374175s ago: executing program 5 (id=5220): r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000001c0)={0x3, 0xc, &(0x7f0000000140)=ANY=[@ANYBLOB="180200000000000000000000000000008500000028000000180100002020732500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000007b00000095"], &(0x7f0000000040)='syzkaller\x00'}, 0x90) r1 = openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0x1c1842, 0x0) ioctl$TUNSETIFF(r1, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x7101}) r2 = openat$tun(0xffffffffffffff9c, &(0x7f00000000c0), 0x1c1842, 0x0) ioctl$SIOCGSKNS(0xffffffffffffffff, 0x894c, &(0x7f0000000000)={'xfrm0\x00', 0x200}) r3 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPCTNL_MSG_CT_GET(r3, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000000c0)={0x1c, 0x1, 0x1, 0x101, 0x0, 0x0, {0x0, 0x0, 0x1}, [@CTA_MARK={0x8, 0x8, 0x1, 0x0, 0xde8}]}, 0x1c}, 0x1, 0x0, 0x0, 0x20004011}, 0x40) ioctl$TUNSETIFF(r2, 0x400454ca, &(0x7f0000000180)={'syzkaller0\x00', 0x7101}) r4 = openat$tun(0xffffffffffffff9c, &(0x7f0000000280), 0xa0800, 0x0) close(r4) socketpair$unix(0x1, 0x1, 0x0, &(0x7f00000007c0)) ioctl$SIOCSIFHWADDR(r4, 0x8943, &(0x7f0000002280)={'syzkaller0\x00', @random="110000000002"}) r5 = socket$nl_route(0x10, 0x3, 0x0) r6 = socket$netlink(0x10, 0x3, 0x0) r7 = socket(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r7, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000100)={0x0, 0x14}}, 0x0) getsockname$packet(r7, &(0x7f00000002c0)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000100)=0x14) sendmsg$nl_route(r6, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000008c0)=ANY=[@ANYBLOB="480000001000050700000086d7c0d6c878f064eb", @ANYRES32=r8, @ANYBLOB="0000000000000000280012000c00010076657468"], 0x48}}, 0x0) sendmsg$nl_route_sched(r6, &(0x7f00000001c0)={0x0, 0x0, &(0x7f00000004c0)={&(0x7f0000000900)=@newqdisc={0x30, 0x24, 0xf1d, 0x0, 0x0, {0x0, 0x0, 0x0, r8, {}, {0xfff1, 0xffff}}, [@qdisc_kind_options=@q_clsact={0xb}]}, 0x30}}, 0x4000800) sendmsg$nl_route_sched(r5, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000300)=@delchain={0x34, 0x64, 0xf31, 0xfffffffb, 0x0, {0x0, 0x0, 0x0, r8, {0x0, 0xfff3}, {0xfff3, 0xffff}, {0x0, 0xfff4}}, [@filter_kind_options=@f_route={{0xa}, {0x4}}]}, 0x34}, 0x1, 0x0, 0x0, 0x10}, 0x0) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f00000012c0)={r0, 0x0, 0xe, 0x0, &(0x7f0000000100)="0000000000000000000051229dc9", 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4}, 0x50) 1m0.363259501s ago: executing program 5 (id=5226): r0 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000700)=ANY=[@ANYBLOB="1400000027000103a5bd7002fadbdf2501000000aeac21ccaa8285f97705e17dccee5197637318c5f45917fdd0b2615977a9e9b3b858dc8cfc9ae259eb3cc8313a6d9f212e85639c1e70ec2feac525c29de485c0cfcca3f69b061676ccdd060aca492c04bd3c5f4ac55cffb6e2757db9866fab9e35c1aa656beb1e881e1c03d9fff8e3c98d8b325882716c8e155ecb113b15d8446031357f1a8d3f7b41b11c35ec5c34b61d8adb37740cb729088f95d17c412457ed21"], 0x14}}, 0x80) (async, rerun: 32) r1 = socket$nl_generic(0x10, 0x3, 0x10) (rerun: 32) r2 = syz_genetlink_get_family_id$tipc2(&(0x7f00000002c0), r1) (async, rerun: 64) r3 = syz_genetlink_get_family_id$ipvs(&(0x7f0000000500), r1) (rerun: 64) sendmsg$IPVS_CMD_SET_CONFIG(r0, &(0x7f00000006c0)={&(0x7f0000000480)={0x10, 0x0, 0x0, 0x8000000}, 0xc, &(0x7f0000000680)={&(0x7f0000000540)={0x134, r3, 0x1, 0x70bd2c, 0x25dfdbfe, {}, [@IPVS_CMD_ATTR_TIMEOUT_TCP={0x8}, @IPVS_CMD_ATTR_TIMEOUT_TCP={0x8, 0x4, 0xf0c}, @IPVS_CMD_ATTR_DEST={0x40, 0x2, 0x0, 0x1, [@IPVS_DEST_ATTR_WEIGHT={0x8}, @IPVS_DEST_ATTR_ADDR_FAMILY={0x6, 0xb, 0xa}, @IPVS_DEST_ATTR_ADDR={0x14, 0x1, @ipv4=@multicast2}, @IPVS_DEST_ATTR_ADDR_FAMILY={0x6, 0xb, 0x8}, @IPVS_DEST_ATTR_INACT_CONNS={0x8, 0x8, 0x1d61}, @IPVS_DEST_ATTR_TUN_PORT={0x6, 0xe, 0x4e20}]}, @IPVS_CMD_ATTR_DAEMON={0x4c, 0x3, 0x0, 0x1, [@IPVS_DAEMON_ATTR_MCAST_GROUP={0x8, 0x5, @remote}, @IPVS_DAEMON_ATTR_STATE={0x8}, @IPVS_DAEMON_ATTR_STATE={0x8, 0x1, 0x2}, @IPVS_DAEMON_ATTR_MCAST_TTL={0x5, 0x8, 0x7}, @IPVS_DAEMON_ATTR_SYNC_ID={0x8}, @IPVS_DAEMON_ATTR_STATE={0x8, 0x1, 0x1}, @IPVS_DAEMON_ATTR_MCAST_GROUP={0x8, 0x5, @local}, @IPVS_DAEMON_ATTR_SYNC_ID={0x8, 0x3, 0x4}, @IPVS_DAEMON_ATTR_MCAST_GROUP={0x8, 0x5, @dev={0xac, 0x14, 0x14, 0x29}}]}, @IPVS_CMD_ATTR_SERVICE={0x2c, 0x1, 0x0, 0x1, [@IPVS_SVC_ATTR_PE_NAME={0x8}, @IPVS_SVC_ATTR_FWMARK={0x8, 0x5, 0x4}, @IPVS_SVC_ATTR_PE_NAME={0x8}, @IPVS_SVC_ATTR_NETMASK={0x8, 0x9, 0x60}, @IPVS_SVC_ATTR_NETMASK={0x8, 0x9, 0x2a}]}, @IPVS_CMD_ATTR_SERVICE={0x50, 0x1, 0x0, 0x1, [@IPVS_SVC_ATTR_SCHED_NAME={0x7, 0x6, 'dh\x00'}, @IPVS_SVC_ATTR_PROTOCOL={0x6, 0x2, 0x6}, @IPVS_SVC_ATTR_PE_NAME={0x8}, @IPVS_SVC_ATTR_TIMEOUT={0x8, 0x8, 0xff}, @IPVS_SVC_ATTR_PORT={0x6, 0x4, 0x4e24}, @IPVS_SVC_ATTR_ADDR={0x14, 0x3, @ipv4=@remote}, @IPVS_SVC_ATTR_AF={0x6, 0x1, 0x2}, @IPVS_SVC_ATTR_AF={0x6, 0x1, 0xa}]}, @IPVS_CMD_ATTR_TIMEOUT_TCP={0x8, 0x4, 0x6}]}, 0x134}, 0x1, 0x0, 0x0, 0x8001}, 0x40000) (async) sendmsg$TIPC_NL_BEARER_SET(r1, &(0x7f0000000440)={0x0, 0x0, &(0x7f0000000400)={&(0x7f0000000300)={0x14, r2, 0x1}, 0x14}}, 0x0) (async) sendmsg$TIPC_NL_BEARER_ADD(r0, &(0x7f0000000400)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x8}, 0xc, &(0x7f00000003c0)={&(0x7f0000000200)={0x1ac, r2, 0x8, 0x70bd2a, 0x25dfdbff, {}, [@TIPC_NLA_NET={0x10, 0x7, 0x0, 0x1, [@TIPC_NLA_NET_NODEID_W1={0xc, 0x4, 0xd4}]}, @TIPC_NLA_MON={0xc, 0x9, 0x0, 0x1, [@TIPC_NLA_MON_ACTIVATION_THRESHOLD={0x8, 0x1, 0x3}]}, @TIPC_NLA_LINK={0x140, 0x4, 0x0, 0x1, [@TIPC_NLA_LINK_PROP={0x34, 0x7, 0x0, 0x1, [@TIPC_NLA_PROP_MTU={0x8, 0x4, 0x8}, @TIPC_NLA_PROP_MTU={0x8, 0x4, 0x5}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x14}, @TIPC_NLA_PROP_TOL={0x8, 0x2, 0x5}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x4}, @TIPC_NLA_PROP_MTU={0x8, 0x4, 0x80}]}, @TIPC_NLA_LINK_PROP={0x3c, 0x7, 0x0, 0x1, [@TIPC_NLA_PROP_WIN={0x8, 0x3, 0x8}, @TIPC_NLA_PROP_MTU={0x8, 0x4, 0x8000}, @TIPC_NLA_PROP_TOL={0x8, 0x2, 0x40000000}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x1e}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x8}, @TIPC_NLA_PROP_MTU={0x8, 0x4, 0x1}, @TIPC_NLA_PROP_TOL={0x8, 0x2, 0x4}]}, @TIPC_NLA_LINK_PROP={0x44, 0x7, 0x0, 0x1, [@TIPC_NLA_PROP_TOL={0x8, 0x2, 0x829c}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0xf}, @TIPC_NLA_PROP_WIN={0x8, 0x3, 0x5}, @TIPC_NLA_PROP_MTU={0x8, 0x4, 0x4}, @TIPC_NLA_PROP_TOL={0x8, 0x2, 0x5}, @TIPC_NLA_PROP_MTU={0x8, 0x4, 0x101}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x19}, @TIPC_NLA_PROP_MTU={0x8, 0x4, 0x1}]}, @TIPC_NLA_LINK_NAME={0x9, 0x1, 'syz1\x00'}, @TIPC_NLA_LINK_NAME={0x13, 0x1, 'broadcast-link\x00'}, @TIPC_NLA_LINK_PROP={0x4}, @TIPC_NLA_LINK_PROP={0x1c, 0x7, 0x0, 0x1, [@TIPC_NLA_PROP_WIN={0x8}, @TIPC_NLA_PROP_MTU={0x8, 0x4, 0x3}, @TIPC_NLA_PROP_MTU={0x8, 0x4, 0x8}]}, @TIPC_NLA_LINK_PROP={0x3c, 0x7, 0x0, 0x1, [@TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x9}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x17}, @TIPC_NLA_PROP_WIN={0x8}, @TIPC_NLA_PROP_MTU={0x8, 0x4, 0x2}, @TIPC_NLA_PROP_WIN={0x8, 0x3, 0x6}, @TIPC_NLA_PROP_WIN={0x8, 0x3, 0xf}, @TIPC_NLA_PROP_WIN={0x8, 0x3, 0x8}]}, @TIPC_NLA_LINK_NAME={0x9, 0x1, 'syz1\x00'}]}, @TIPC_NLA_MON={0x3c, 0x9, 0x0, 0x1, [@TIPC_NLA_MON_ACTIVATION_THRESHOLD={0x8, 0x1, 0x5f}, @TIPC_NLA_MON_REF={0x8, 0x2, 0x2}, @TIPC_NLA_MON_ACTIVATION_THRESHOLD={0x8, 0x1, 0x3}, @TIPC_NLA_MON_ACTIVATION_THRESHOLD={0x8}, @TIPC_NLA_MON_REF={0x8, 0x2, 0x8000}, @TIPC_NLA_MON_ACTIVATION_THRESHOLD={0x8, 0x1, 0x6}, @TIPC_NLA_MON_ACTIVATION_THRESHOLD={0x8, 0x1, 0x6}]}]}, 0x1ac}, 0x1, 0x0, 0x0, 0x4004450}, 0x40004) (async, rerun: 32) r4 = socket$l2tp6(0xa, 0x2, 0x73) (rerun: 32) bind$l2tp6(r4, &(0x7f0000000000)={0xa, 0x0, 0x1, @empty, 0x0, 0x3}, 0x20) (async, rerun: 32) r5 = socket$alg(0x26, 0x5, 0x0) (rerun: 32) bind$alg(r5, &(0x7f0000000000)={0x26, 'hash\x00', 0x0, 0x0, 'sha512\x00'}, 0x58) r6 = accept4(r5, 0x0, 0x0, 0x800) (async) r7 = socket(0x10, 0x3, 0x0) setsockopt$netlink_NETLINK_TX_RING(r7, 0x10e, 0xc, &(0x7f0000000000)={0x8}, 0x10) (async) write(r7, &(0x7f0000000500)="240000001e005f02141f00fffffffff801000000080000000000000008000902009ea5b1", 0x24) (async) sendmsg$xdp(r6, &(0x7f00000005c0)={0x0, 0x0, &(0x7f0000000580)=[{0x0}, {0x0}, {&(0x7f0000000440)="5f68affb0e", 0x5}], 0x3, 0x0, 0x0, 0x10}, 0x200040c0) (async) connect$l2tp6(r4, &(0x7f0000000f40)={0xa, 0x0, 0x0, @empty}, 0x20) (async, rerun: 32) sendmmsg$inet6(r4, &(0x7f0000004d00)=[{{0x0, 0x0, 0x0}}], 0x1, 0xff00) (async, rerun: 32) r8 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r8, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000180)={0x5c, 0x2f, 0x9, 0x70bd2a, 0x0, {0x4}, [@nested={0x45, 0x11, 0x0, 0x1, [@generic="e796bd6dd42541affac6ff415af85ab494e09d498fc605baa5fe20e0f8a725f9f47392b70f555def59af", @generic="68eb7e22475186e591e23ad38a08862df02baf33ef122e"]}]}, 0x5c}, 0x1, 0x0, 0x0, 0x42804}, 0x84) (async, rerun: 32) r9 = socket$nl_netfilter(0x10, 0x3, 0xc) (rerun: 32) sendmsg$IPSET_CMD_CREATE(r9, &(0x7f0000000000)={0x0, 0x0, &(0x7f00000004c0)={&(0x7f0000000d40)={0x5c, 0x2, 0x6, 0x5, 0x0, 0x0, {}, [@IPSET_ATTR_TYPENAME={0x12, 0x3, 'bitmap:ip,mac\x00'}, @IPSET_ATTR_REVISION={0x5}, @IPSET_ATTR_SETNAME={0x9, 0x2, 'syz1\x00'}, @IPSET_ATTR_DATA={0x10, 0x7, 0x0, 0x1, [@IPSET_ATTR_IP={0xc, 0x1, 0x0, 0x1, @IPSET_ATTR_IPADDR_IPV4={0x8, 0x1, 0x1, 0x0, @private}}]}, @IPSET_ATTR_FAMILY={0x5, 0x5, 0x2}, @IPSET_ATTR_PROTOCOL={0x5, 0x1, 0x6}]}, 0x5c}}, 0x0) 45.298680664s ago: executing program 35 (id=5226): r0 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000700)=ANY=[@ANYBLOB="1400000027000103a5bd7002fadbdf2501000000aeac21ccaa8285f97705e17dccee5197637318c5f45917fdd0b2615977a9e9b3b858dc8cfc9ae259eb3cc8313a6d9f212e85639c1e70ec2feac525c29de485c0cfcca3f69b061676ccdd060aca492c04bd3c5f4ac55cffb6e2757db9866fab9e35c1aa656beb1e881e1c03d9fff8e3c98d8b325882716c8e155ecb113b15d8446031357f1a8d3f7b41b11c35ec5c34b61d8adb37740cb729088f95d17c412457ed21"], 0x14}}, 0x80) (async, rerun: 32) r1 = socket$nl_generic(0x10, 0x3, 0x10) (rerun: 32) r2 = syz_genetlink_get_family_id$tipc2(&(0x7f00000002c0), r1) (async, rerun: 64) r3 = syz_genetlink_get_family_id$ipvs(&(0x7f0000000500), r1) (rerun: 64) sendmsg$IPVS_CMD_SET_CONFIG(r0, &(0x7f00000006c0)={&(0x7f0000000480)={0x10, 0x0, 0x0, 0x8000000}, 0xc, &(0x7f0000000680)={&(0x7f0000000540)={0x134, r3, 0x1, 0x70bd2c, 0x25dfdbfe, {}, [@IPVS_CMD_ATTR_TIMEOUT_TCP={0x8}, @IPVS_CMD_ATTR_TIMEOUT_TCP={0x8, 0x4, 0xf0c}, @IPVS_CMD_ATTR_DEST={0x40, 0x2, 0x0, 0x1, [@IPVS_DEST_ATTR_WEIGHT={0x8}, @IPVS_DEST_ATTR_ADDR_FAMILY={0x6, 0xb, 0xa}, @IPVS_DEST_ATTR_ADDR={0x14, 0x1, @ipv4=@multicast2}, @IPVS_DEST_ATTR_ADDR_FAMILY={0x6, 0xb, 0x8}, @IPVS_DEST_ATTR_INACT_CONNS={0x8, 0x8, 0x1d61}, @IPVS_DEST_ATTR_TUN_PORT={0x6, 0xe, 0x4e20}]}, @IPVS_CMD_ATTR_DAEMON={0x4c, 0x3, 0x0, 0x1, [@IPVS_DAEMON_ATTR_MCAST_GROUP={0x8, 0x5, @remote}, @IPVS_DAEMON_ATTR_STATE={0x8}, @IPVS_DAEMON_ATTR_STATE={0x8, 0x1, 0x2}, @IPVS_DAEMON_ATTR_MCAST_TTL={0x5, 0x8, 0x7}, @IPVS_DAEMON_ATTR_SYNC_ID={0x8}, @IPVS_DAEMON_ATTR_STATE={0x8, 0x1, 0x1}, @IPVS_DAEMON_ATTR_MCAST_GROUP={0x8, 0x5, @local}, @IPVS_DAEMON_ATTR_SYNC_ID={0x8, 0x3, 0x4}, @IPVS_DAEMON_ATTR_MCAST_GROUP={0x8, 0x5, @dev={0xac, 0x14, 0x14, 0x29}}]}, @IPVS_CMD_ATTR_SERVICE={0x2c, 0x1, 0x0, 0x1, [@IPVS_SVC_ATTR_PE_NAME={0x8}, @IPVS_SVC_ATTR_FWMARK={0x8, 0x5, 0x4}, @IPVS_SVC_ATTR_PE_NAME={0x8}, @IPVS_SVC_ATTR_NETMASK={0x8, 0x9, 0x60}, @IPVS_SVC_ATTR_NETMASK={0x8, 0x9, 0x2a}]}, @IPVS_CMD_ATTR_SERVICE={0x50, 0x1, 0x0, 0x1, [@IPVS_SVC_ATTR_SCHED_NAME={0x7, 0x6, 'dh\x00'}, @IPVS_SVC_ATTR_PROTOCOL={0x6, 0x2, 0x6}, @IPVS_SVC_ATTR_PE_NAME={0x8}, @IPVS_SVC_ATTR_TIMEOUT={0x8, 0x8, 0xff}, @IPVS_SVC_ATTR_PORT={0x6, 0x4, 0x4e24}, @IPVS_SVC_ATTR_ADDR={0x14, 0x3, @ipv4=@remote}, @IPVS_SVC_ATTR_AF={0x6, 0x1, 0x2}, @IPVS_SVC_ATTR_AF={0x6, 0x1, 0xa}]}, @IPVS_CMD_ATTR_TIMEOUT_TCP={0x8, 0x4, 0x6}]}, 0x134}, 0x1, 0x0, 0x0, 0x8001}, 0x40000) (async) sendmsg$TIPC_NL_BEARER_SET(r1, &(0x7f0000000440)={0x0, 0x0, &(0x7f0000000400)={&(0x7f0000000300)={0x14, r2, 0x1}, 0x14}}, 0x0) (async) sendmsg$TIPC_NL_BEARER_ADD(r0, &(0x7f0000000400)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x8}, 0xc, &(0x7f00000003c0)={&(0x7f0000000200)={0x1ac, r2, 0x8, 0x70bd2a, 0x25dfdbff, {}, [@TIPC_NLA_NET={0x10, 0x7, 0x0, 0x1, [@TIPC_NLA_NET_NODEID_W1={0xc, 0x4, 0xd4}]}, @TIPC_NLA_MON={0xc, 0x9, 0x0, 0x1, [@TIPC_NLA_MON_ACTIVATION_THRESHOLD={0x8, 0x1, 0x3}]}, @TIPC_NLA_LINK={0x140, 0x4, 0x0, 0x1, [@TIPC_NLA_LINK_PROP={0x34, 0x7, 0x0, 0x1, [@TIPC_NLA_PROP_MTU={0x8, 0x4, 0x8}, @TIPC_NLA_PROP_MTU={0x8, 0x4, 0x5}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x14}, @TIPC_NLA_PROP_TOL={0x8, 0x2, 0x5}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x4}, @TIPC_NLA_PROP_MTU={0x8, 0x4, 0x80}]}, @TIPC_NLA_LINK_PROP={0x3c, 0x7, 0x0, 0x1, [@TIPC_NLA_PROP_WIN={0x8, 0x3, 0x8}, @TIPC_NLA_PROP_MTU={0x8, 0x4, 0x8000}, @TIPC_NLA_PROP_TOL={0x8, 0x2, 0x40000000}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x1e}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x8}, @TIPC_NLA_PROP_MTU={0x8, 0x4, 0x1}, @TIPC_NLA_PROP_TOL={0x8, 0x2, 0x4}]}, @TIPC_NLA_LINK_PROP={0x44, 0x7, 0x0, 0x1, [@TIPC_NLA_PROP_TOL={0x8, 0x2, 0x829c}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0xf}, @TIPC_NLA_PROP_WIN={0x8, 0x3, 0x5}, @TIPC_NLA_PROP_MTU={0x8, 0x4, 0x4}, @TIPC_NLA_PROP_TOL={0x8, 0x2, 0x5}, @TIPC_NLA_PROP_MTU={0x8, 0x4, 0x101}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x19}, @TIPC_NLA_PROP_MTU={0x8, 0x4, 0x1}]}, @TIPC_NLA_LINK_NAME={0x9, 0x1, 'syz1\x00'}, @TIPC_NLA_LINK_NAME={0x13, 0x1, 'broadcast-link\x00'}, @TIPC_NLA_LINK_PROP={0x4}, @TIPC_NLA_LINK_PROP={0x1c, 0x7, 0x0, 0x1, [@TIPC_NLA_PROP_WIN={0x8}, @TIPC_NLA_PROP_MTU={0x8, 0x4, 0x3}, @TIPC_NLA_PROP_MTU={0x8, 0x4, 0x8}]}, @TIPC_NLA_LINK_PROP={0x3c, 0x7, 0x0, 0x1, [@TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x9}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x17}, @TIPC_NLA_PROP_WIN={0x8}, @TIPC_NLA_PROP_MTU={0x8, 0x4, 0x2}, @TIPC_NLA_PROP_WIN={0x8, 0x3, 0x6}, @TIPC_NLA_PROP_WIN={0x8, 0x3, 0xf}, @TIPC_NLA_PROP_WIN={0x8, 0x3, 0x8}]}, @TIPC_NLA_LINK_NAME={0x9, 0x1, 'syz1\x00'}]}, @TIPC_NLA_MON={0x3c, 0x9, 0x0, 0x1, [@TIPC_NLA_MON_ACTIVATION_THRESHOLD={0x8, 0x1, 0x5f}, @TIPC_NLA_MON_REF={0x8, 0x2, 0x2}, @TIPC_NLA_MON_ACTIVATION_THRESHOLD={0x8, 0x1, 0x3}, @TIPC_NLA_MON_ACTIVATION_THRESHOLD={0x8}, @TIPC_NLA_MON_REF={0x8, 0x2, 0x8000}, @TIPC_NLA_MON_ACTIVATION_THRESHOLD={0x8, 0x1, 0x6}, @TIPC_NLA_MON_ACTIVATION_THRESHOLD={0x8, 0x1, 0x6}]}]}, 0x1ac}, 0x1, 0x0, 0x0, 0x4004450}, 0x40004) (async, rerun: 32) r4 = socket$l2tp6(0xa, 0x2, 0x73) (rerun: 32) bind$l2tp6(r4, &(0x7f0000000000)={0xa, 0x0, 0x1, @empty, 0x0, 0x3}, 0x20) (async, rerun: 32) r5 = socket$alg(0x26, 0x5, 0x0) (rerun: 32) bind$alg(r5, &(0x7f0000000000)={0x26, 'hash\x00', 0x0, 0x0, 'sha512\x00'}, 0x58) r6 = accept4(r5, 0x0, 0x0, 0x800) (async) r7 = socket(0x10, 0x3, 0x0) setsockopt$netlink_NETLINK_TX_RING(r7, 0x10e, 0xc, &(0x7f0000000000)={0x8}, 0x10) (async) write(r7, &(0x7f0000000500)="240000001e005f02141f00fffffffff801000000080000000000000008000902009ea5b1", 0x24) (async) sendmsg$xdp(r6, &(0x7f00000005c0)={0x0, 0x0, &(0x7f0000000580)=[{0x0}, {0x0}, {&(0x7f0000000440)="5f68affb0e", 0x5}], 0x3, 0x0, 0x0, 0x10}, 0x200040c0) (async) connect$l2tp6(r4, &(0x7f0000000f40)={0xa, 0x0, 0x0, @empty}, 0x20) (async, rerun: 32) sendmmsg$inet6(r4, &(0x7f0000004d00)=[{{0x0, 0x0, 0x0}}], 0x1, 0xff00) (async, rerun: 32) r8 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r8, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000180)={0x5c, 0x2f, 0x9, 0x70bd2a, 0x0, {0x4}, [@nested={0x45, 0x11, 0x0, 0x1, [@generic="e796bd6dd42541affac6ff415af85ab494e09d498fc605baa5fe20e0f8a725f9f47392b70f555def59af", @generic="68eb7e22475186e591e23ad38a08862df02baf33ef122e"]}]}, 0x5c}, 0x1, 0x0, 0x0, 0x42804}, 0x84) (async, rerun: 32) r9 = socket$nl_netfilter(0x10, 0x3, 0xc) (rerun: 32) sendmsg$IPSET_CMD_CREATE(r9, &(0x7f0000000000)={0x0, 0x0, &(0x7f00000004c0)={&(0x7f0000000d40)={0x5c, 0x2, 0x6, 0x5, 0x0, 0x0, {}, [@IPSET_ATTR_TYPENAME={0x12, 0x3, 'bitmap:ip,mac\x00'}, @IPSET_ATTR_REVISION={0x5}, @IPSET_ATTR_SETNAME={0x9, 0x2, 'syz1\x00'}, @IPSET_ATTR_DATA={0x10, 0x7, 0x0, 0x1, [@IPSET_ATTR_IP={0xc, 0x1, 0x0, 0x1, @IPSET_ATTR_IPADDR_IPV4={0x8, 0x1, 0x1, 0x0, @private}}]}, @IPSET_ATTR_FAMILY={0x5, 0x5, 0x2}, @IPSET_ATTR_PROTOCOL={0x5, 0x1, 0x6}]}, 0x5c}}, 0x0) 16.798815144s ago: executing program 8 (id=5657): r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$tipc2(&(0x7f00000005c0), 0xffffffffffffffff) sendmsg$TIPC_NL_LINK_SET(r0, &(0x7f0000000540)={0x0, 0x0, &(0x7f0000000340)={&(0x7f0000000880)=ANY=[@ANYBLOB='8\x00\x00\x00', @ANYRES16=r1, @ANYBLOB="0106000000000000000009000000240004801300010062726f6164636173742d6c696e6b00000c000780080005000100000047768a"], 0x38}}, 0x4000) bpf$PROG_LOAD(0x5, &(0x7f0000000440)={0x4, 0x6, &(0x7f0000000000)=@framed={{0xffffffb4, 0x8, 0x0, 0x0, 0x0, 0x73, 0x11, 0x32}, [@func={0x85, 0x0, 0x1, 0x0, 0x2}, @call={0xb7}, @exit={0x95, 0x0, 0xc2}], {0x95, 0x0, 0x1200}}, &(0x7f0000000080)='GPL\x00', 0x4, 0xc3, &(0x7f000000cf3d)=""/195}, 0x70) r2 = socket$nl_generic(0x10, 0x3, 0x10) r3 = syz_genetlink_get_family_id$gtp(&(0x7f00000000c0), 0xffffffffffffffff) sendmsg$GTP_CMD_DELPDP(r2, &(0x7f0000000000)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f00000001c0)=ANY=[@ANYRESOCT=r3, @ANYRES16=r3, @ANYBLOB="01000000000000000006a241a8000000661c0000000008160100", @ANYRES32=0x0, @ANYBLOB], 0x24}}, 0x0) r4 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r4, &(0x7f000000c2c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f00000008c0)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a28000000000a0101000000005e1affd5020000000900010073797a300000000008000240000000032c000000030a01030000e6ff00000000020000000900010073797a30000000000900030073797a320000000014000000110001"], 0x7c}}, 0x0) sendmsg$NFT_BATCH(r4, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000bc0)=ANY=[@ANYBLOB="1400000010000100000000000000000000000e536c000a60000000060a0b040000000000000000020000003400048030000180080001006e61740024000280080006400000000b080005400000000f080001400000000008000240000000020900010073797a30000000000900020073797a32000000001400000011000100"/136], 0x88}}, 0x0) ioctl$XFS_IOC_ATTRMULTI_BY_HANDLE(r0, 0x4048587b, &(0x7f0000000b40)={{r2, &(0x7f00000003c0)='^\xb8{\xa5', 0x400080, &(0x7f0000000400)={@_ha_fsid={[0xffffffff, 0x800]}, {0x1e, 0x3, 0x8001, 0x80}}, 0x9c53, &(0x7f0000000500), &(0x7f0000000580)=0x8}, 0x5, &(0x7f0000000a80)=[{0x1, 0x6, &(0x7f0000000600)='\x00', &(0x7f0000000640)="4250ea3fd25193267810ac2f85dcb36092", 0x11}, {0x1, 0x35ff, &(0x7f0000000680)='GPL\x00', &(0x7f00000006c0)="da487e182c07ba0d2d04ae90f3f6ff8ee1d98dc77248b5ee33534f5458a383c20758774c72d9b13a38a909c547e65eedfa54af2547ac623e19b244eaf58fb39f1075f7fc54ce86d3d72245798dbb54", 0x4f, 0x30}, {0x2, 0x4, &(0x7f0000000740)='\x00', &(0x7f0000000780)="e7fc6eca334ec9168f9645749c52d848b162af22cc5204f926703cfec0f955cc82611e1d2d2c04535a5d107141e368bea3667ee129cf5d7664befaae7a6d8e965fb18be5433c81c6bfdfdfc33c9985beb151dc50add18c944be61bfba4c1d051226e0c40512a730eca8cbe5364882d9a1d6faa8741ae00c919b17296136f3f2158575d2a819749f56c9550404cf2a11730fdf246beb1ffdc0076e3a3181fe027e1656530a349d66ef606e01d996b0da67f43321e89bf61552ad43306d73a04", 0xbf, 0x24}, {0x3, 0x0, &(0x7f0000000840)='!%-*\x00', &(0x7f0000000940)="ae821653e734b9683949bfed945a3faf3448e7a959ee2da7dd60f41306c6a389c73c8cd4c5c7db6035e1a77cf04c910de7a88da665bef44da715dad3fc17deb39262d3882cc5f83fc9659aa63f5624ad6d9227bdda9428f0b897c874ffdc664b9197aa2bd6b131bfd7636526a0c91db85f9c4b17a329e24a6954761387e9794be1d504b331f5c9ec072d", 0x8a}, {0x2, 0x9, &(0x7f0000000a00)='[.,/-%*\'!#\xc2\x00', &(0x7f0000000a40), 0x0, 0x2a}]}) r5 = syz_genetlink_get_family_id$ethtool(&(0x7f0000000200), r2) sendmsg$ETHTOOL_MSG_LINKMODES_GET(r0, &(0x7f0000000300)={&(0x7f0000000180)={0x10, 0x0, 0x0, 0x800000}, 0xc, &(0x7f0000000280)={&(0x7f0000000240)={0x2c, r5, 0x2, 0x70bd29, 0x25dfdbfb, {}, [@HEADER={0x18, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'rose0\x00'}]}]}, 0x2c}, 0x1, 0x0, 0x0, 0x8000}, 0x810) sendmsg$GTP_CMD_ECHOREQ(r0, &(0x7f0000000140)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x40}, 0xc, &(0x7f0000000100)={&(0x7f00000000c0)={0x40, r3, 0x200, 0x70bd2b, 0x25dfdbfc, {}, [@GTPA_VERSION={0x8, 0x2, 0x1}, @GTPA_VERSION={0x8, 0x2, 0x1}, @GTPA_PEER_ADDRESS={0x8, 0x4, @initdev={0xac, 0x1e, 0x1, 0x0}}, @GTPA_TID={0xc, 0x3, 0x2}, @GTPA_MS_ADDRESS={0x8, 0x5, @local}]}, 0x40}}, 0x4040) 16.565602396s ago: executing program 8 (id=5662): bpf$PROG_LOAD(0x5, &(0x7f0000000440)={0xa, 0x6, &(0x7f0000000340)=ANY=[@ANYBLOB="050000000000000071119e00000000008510000002000000850000007d00000095000000000000009500a5050000000082380a6c16cb23efcad64db91e674db95df8d0896824cb2691d06528024707d13584c797578afdc601c7f4a6f818b7f25410420f86e4b78db803197e79375fd430e64a4ed0ec3494217ffe488acb70e2fc2a3ed88e4e93d3"], &(0x7f0000000080)='GPL\x00', 0x5, 0x29e, &(0x7f000000cf3d)=""/195, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x6}, 0x70) r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = socket$can_j1939(0x1d, 0x2, 0x7) ioctl$ifreq_SIOCGIFINDEX_vcan(r1, 0x8933, &(0x7f0000000080)={'vcan0\x00', 0x0}) bind$can_j1939(r1, &(0x7f0000000340)={0x1d, r2, 0x0, {0x2, 0xf0, 0x4}, 0xfe}, 0x18) r3 = openat$tun(0xffffffffffffff9c, &(0x7f0000000000), 0x40241, 0x0) ioctl$TUNSETIFF(r3, 0x400454ca, &(0x7f0000000200)={'syzkaller1\x00', 0xc201}) r4 = socket$nl_route(0x10, 0x3, 0x0) r5 = socket$unix(0x1, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r5, 0x8933, &(0x7f0000000100)={'syzkaller1\x00', 0x0}) sendmsg$nl_route_sched(r4, &(0x7f00000012c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000000c0)=@newqdisc={0x30, 0x24, 0x601, 0x0, 0x0, {0x0, 0x0, 0x0, r6, {}, {0xfff1, 0xffff}}, [@qdisc_kind_options=@q_ingress={0xc}]}, 0x30}}, 0x0) r7 = socket$kcm(0x2, 0xa, 0x2) ioctl$SIOCSIFHWADDR(r7, 0x8914, &(0x7f0000000180)={'syzkaller1\x00', @link_local}) write$tun(r3, &(0x7f0000000080)={@val={0x8, 0x800}, @val={0x0, 0x1, 0x6, 0x3, 0x2f, 0x40}, @ipv4=@udp={{0x8, 0x4, 0x3, 0x28, 0x31, 0x63, 0x0, 0x40, 0x11, 0x0, @private=0xa010104, @broadcast, {[@rr={0x7, 0xb, 0x81, [@private=0xa010101, @multicast1]}]}}, {0x4e23, 0x4e20, 0x11, 0x0, @gue={{0x2, 0x1, 0x3, 0x9}, "97"}}}}, 0x3f) setsockopt$sock_int(r1, 0x1, 0x6, &(0x7f0000000040)=0x1, 0x4) sendmmsg(r1, &(0x7f00000002c0)=[{{0x0, 0xfffffffffffffd0f, &(0x7f0000000700)=[{&(0x7f0000000540)="050000eb3a49a8d125", 0x9}], 0x1}}], 0xfffffffffffffd9e, 0x4000041) r8 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r8, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000140)={&(0x7f00000005c0)=@newlink={0x3c, 0x10, 0x403, 0x0, 0x25dfdbfe, {0x0, 0x0, 0x74, 0x0, 0x800, 0x55007}, [@IFLA_LINKINFO={0x1c, 0x12, 0x0, 0x1, @bridge={{0xb}, {0xc, 0x2, 0x0, 0x1, [@IFLA_BR_MCAST_QUERIER={0x5, 0x19, 0x2}]}}}]}, 0x3c}, 0x1, 0x0, 0x0, 0x800}, 0x0) setsockopt$SO_J1939_FILTER(r1, 0x6b, 0x1, &(0x7f0000000600)=[{0x1, 0x2, {0x2, 0xfe, 0x1}, {0x1}, 0xfe, 0x2}, {0x0, 0x1, {0x1, 0x0, 0x3}, {0x1, 0xf0}, 0xfd, 0x2}], 0x40) sendmsg$nl_route_sched(r0, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000000)=@newtfilter={0x24, 0x11, 0x1, 0x70bd2c, 0x25dfdbfc, {0x0, 0x0, 0x74, r2, {0xffff, 0xfff2}, {0xfff1, 0xffff}, {0xfff2}}}, 0x24}, 0x1, 0xf0ffffffffffff, 0x0, 0xc096}, 0x20000050) 13.731035255s ago: executing program 8 (id=5671): r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000000), 0x2, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000100)={'\x00', 0x1001}) r1 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r1, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000400)=ANY=[@ANYBLOB="1d0000001400010000000000000000002d00000002000000050002000a000000"], 0x1d}}, 0x0) r2 = socket$inet6_mptcp(0xa, 0x1, 0x106) socket$netlink(0x10, 0x3, 0x7) setsockopt$inet6_tcp_TCP_ULP(r2, 0x6, 0x1f, &(0x7f0000000040), 0x3) sendmsg$nl_route(r1, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000400)=ANY=[@ANYBLOB="380000001800010000000000000000002d0000000000000001000000050001000a0000000c000f8008000200f40100000800040002000000"], 0x38}}, 0x0) r3 = bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000240)={0x2, 0x4, 0x8, 0x1, 0x80, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0x0}, 0x50) bpf$PROG_LOAD(0x5, &(0x7f0000000840)={0x18, 0x1c, &(0x7f0000000d80)=@ringbuf={{0x18, 0x8}, {{}, {}, {}, {0x85, 0x0, 0x0, 0x5}}, {}, [@snprintf={{0x7, 0x0, 0xb, 0x2}, {0x3, 0x3, 0x3, 0xa, 0x9, 0xfe00}, {0x6, 0x0, 0xb, 0x9, 0x0, 0x8, 0x40}, {0x3, 0x3, 0x3, 0xa, 0x9}, {0x7, 0x1, 0xb, 0x6, 0x8, 0x10}, {0x7, 0x0, 0x0, 0x8}, {}, {}, {}, {0x18, 0x8, 0x2, 0x0, r3}, {}, {0x15, 0x0, 0x0, 0x76}}], {{0x7, 0x1, 0xb, 0x8}, {0x6, 0x0, 0x5, 0x8}, {0x85, 0x0, 0x0, 0x7}}}, &(0x7f0000000980)='GPL\x00', 0x2, 0x0, 0x0, 0x0, 0x9, '\x00', 0x0, @fallback=0xd, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) sendmsg$nl_route(r1, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000400)=ANY=[@ANYBLOB="140000001a00010300000000000000002d000000"], 0x14}}, 0x0) 13.316241298s ago: executing program 8 (id=5679): ioctl$sock_ipv6_tunnel_SIOCCHGTUNNEL(0xffffffffffffffff, 0x89f3, &(0x7f0000000240)={'ip6_vti0\x00', &(0x7f0000000100)={'ip6gre0\x00', 0x0, 0x2b, 0x7f, 0x5, 0x7fff, 0x5, @initdev={0xfe, 0x88, '\x00', 0x0, 0x0}, @ipv4={'\x00', '\xff\xff', @initdev={0xac, 0x1e, 0x0, 0x0}}, 0x1, 0x40, 0x400, 0x7}}) r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000040)={0x9, 0x4, &(0x7f0000000200)=ANY=[], &(0x7f0000000000)='GPL\x00', 0x0, 0x0, 0x0, 0x100, 0x70, '\x00', r0, @fallback=0x30, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r2 = socket$can_j1939(0x1d, 0x2, 0x7) ioctl$ifreq_SIOCGIFINDEX_vcan(r2, 0x8933, &(0x7f0000000000)={'vcan0\x00', 0x0}) bind$can_j1939(r2, &(0x7f00000000c0)={0x1d, r3, 0x2, {0x0, 0x0, 0x4}, 0x1}, 0x18) bpf$BPF_LINK_CREATE_XDP(0x1c, &(0x7f0000000180)={r1, 0x0, 0x30, 0x0, @val=@uprobe_multi={&(0x7f00000002c0)='./cgroup/cgroup.procs\x00', &(0x7f0000000300)=[0x0], 0x0, 0x0, 0x1}}, 0x40) r4 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='memory.events\x00', 0x275a, 0x0) r5 = socket$kcm(0x21, 0x2, 0xa) sendmsg$kcm(r5, &(0x7f0000000080)={&(0x7f0000000000)=@rxrpc=@in6={0x21, 0xfffc, 0x2, 0x1c, {0xa, 0x0, 0x4, @dev}}, 0x24, 0x0, 0x0, &(0x7f00000000c0)=[{0x18, 0x110, 0x1, "dc"}], 0x18}, 0x404f444) r6 = socket$kcm(0x21, 0x2, 0xa) sendmsg$kcm(r6, &(0x7f0000000080)={&(0x7f0000000000)=@rxrpc=@in6={0x21, 0x1, 0x2, 0x1c, {0xa, 0x0, 0x4, @dev, 0x8000000}}, 0x80, 0x0, 0x0, &(0x7f00000002c0)=ANY=[@ANYBLOB="1800000000000000100100000100000000000000000000001000000000000000100100000b"], 0x28}, 0xfc40) mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x2000001, 0x12, r4, 0x0) 13.096207108s ago: executing program 8 (id=5682): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_CREATE(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f00000044c0)={&(0x7f0000000080)=ANY=[@ANYBLOB="58000000020605000000000000000000000000000c000780080008000000000005000100060000000900020073797a32000000000500040000000000050005000a00000014000300686173683a69702c706f72742c69700064f45bc70e9a3b6ae880c5dda4f0ca10438467761d6124542b3304eef08c8175b8bc2563e4cb2e980397cf5881941a296de85b5afc6d5f658b15f9c66b58d440d1a36cf939696f42817565340bc2fad84f2bd36675134adc7bdaefde8083e1a054baffe9616dbd87cbacfb889fdee6a740d440cbcb9c3334ffd6ab040000000000000051ba58333c41d0106e69b0f3"], 0x58}}, 0x0) r1 = socket$nl_generic(0x10, 0x3, 0x10) r2 = syz_genetlink_get_family_id$tipc(&(0x7f00000000c0), r1) sendmsg$TIPC_CMD_ENABLE_BEARER(r1, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000340)={&(0x7f0000000680)=ANY=[@ANYBLOB='8\x00\x00\x00', @ANYRES16=r2, @ANYBLOB="010000000d0000000000010000000000000001410000001c001700000000000000006574683a73797a6b616c6c657230"], 0x38}, 0x1, 0x0, 0x0, 0x44081}, 0x40000) sendmsg$IPSET_CMD_CREATE(r0, &(0x7f0000000500)={&(0x7f0000000400)={0x10, 0x0, 0x0, 0x40}, 0xc, &(0x7f00000004c0)={&(0x7f0000000440)=ANY=[@ANYBLOB="58000000020600030000000000000000000000090c000300686173683a69700005000400030000000900020073797a320000000005000500000000000900020073797a310000000005000100070000000500040001000000"], 0x58}, 0x1, 0x0, 0x0, 0x40005}, 0x800) r3 = syz_genetlink_get_family_id$devlink(&(0x7f0000000180), 0xffffffffffffffff) sendmsg$DEVLINK_CMD_TRAP_SET(r1, &(0x7f00000003c0)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x1000000}, 0xc, &(0x7f0000000380)={&(0x7f00000001c0)={0x198, r3, 0x100, 0x70bd27, 0x25dfdbff, {}, [{@pci={{0x8}, {0x11}}, {0x1c}, {0x5, 0x83, 0x1}}, {@pci={{0x8}, {0x11}}, {0x1c}, {0x5}}, {@pci={{0x8}, {0x11}}, {0x1c}, {0x5}}, {@pci={{0x8}, {0x11}}, {0x1c}, {0x5}}, {@pci={{0x8}, {0x11}}, {0x1c}, {0x5}}, {@nsim={{0xe}, {0xf, 0x2, {'netdevsim', 0x0}}}, {0x1c}, {0x5, 0x83, 0x1}}]}, 0x198}, 0x1, 0x0, 0x0, 0x44055}, 0x800) 12.924925827s ago: executing program 8 (id=5683): r0 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) bind$bt_hci(r0, &(0x7f0000000000)={0x1f, 0xffff, 0x3}, 0x6) write$bt_hci(r0, &(0x7f0000000100)=ANY=[@ANYBLOB="4a00ffff11003ee0b4fdddd685986a49e00588f1ba6f01"], 0x17) nanosleep(&(0x7f0000000200)={0x0, 0x10000000}, 0x0) r1 = syz_init_net_socket$bt_hci(0x1f, 0x5, 0x8) sendmsg$BATADV_CMD_GET_GATEWAYS(0xffffffffffffffff, &(0x7f0000000300)={0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x4044815}, 0x4000800) r2 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r2, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000300)=ANY=[@ANYBLOB="1c0000002700090025bd5cb881f28a200fd40000080001"], 0x1c}, 0x1, 0x0, 0x0, 0x4000002}, 0x4000080) bind(r1, &(0x7f0000000300)=@generic={0x1f, "0000000000000100"}, 0xa) listen(r1, 0x1) 5.230716269s ago: executing program 7 (id=5783): bpf$MAP_CREATE(0x0, &(0x7f0000000180)=ANY=[@ANYBLOB="1e0000000000efbe10acf88cea9ab80600004300", @ANYRES32, @ANYBLOB='\x00'/20, @ANYRES32=0x0, @ANYRES32, @ANYBLOB='\x00'/28], 0x48) r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = socket$netlink(0x10, 0x3, 0x10) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000000)={0x0}, 0x1, 0x0, 0x0, 0x4000811}, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000000)={0xffffffffffffffff}) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000001140)={&(0x7f00000002c0)=@newlink={0x4c, 0x10, 0x503, 0x0, 0x0, {}, [@IFLA_LINKINFO={0x2c, 0x12, 0x0, 0x1, @bridge={{0xb}, {0x1c, 0x2, 0x0, 0x1, [@IFLA_BR_MCAST_MEMBERSHIP_INTVL={0xc}, @IFLA_BR_MCAST_LAST_MEMBER_INTVL={0xc}]}}}]}, 0x4c}}, 0x0) r3 = bpf$MAP_CREATE(0x0, &(0x7f00000001c0)=@base={0x12, 0x9, 0x8, 0x2, 0x0, 0x1}, 0x50) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000140)={{r3}, &(0x7f0000000180), &(0x7f0000000100)=r2}, 0x20) bpf$MAP_LOOKUP_ELEM(0x1, &(0x7f0000000080)={r3, &(0x7f0000000300), 0x0}, 0x20) r4 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000040)=@newtaction={0x6c, 0x30, 0x1, 0x70bd28, 0x0, {}, [{0x58, 0x1, [@m_skbmod={0x54, 0x1, 0x0, 0x0, {{0xb}, {0x28, 0x2, 0x0, 0x1, [@TCA_SKBMOD_PARMS={0x24, 0x2, {{0xffffffff, 0x10001, 0xffffffffffffffff, 0x3c, 0x3}, 0x400000000a}}]}, {0x4}, {0xc}, {0xc}}}]}]}, 0x6c}, 0x1, 0x0, 0x0, 0x4}, 0x0) sendmmsg(r4, &(0x7f00000002c0), 0x40000000000009f, 0x0) bind$netlink(r1, &(0x7f0000514ff4)={0x10, 0x0, 0x0, 0x2ffffffff}, 0xc) setsockopt$SO_ATTACH_FILTER(r1, 0x1, 0x1a, &(0x7f0000000000)={0x2, &(0x7f00000000c0)=[{0x28, 0x7, 0x0, 0xa56e}, {0x6, 0x0, 0x0, 0xa1a}]}, 0x10) sendmsg$NL80211_CMD_SET_MULTICAST_TO_UNICAST(r0, &(0x7f0000000100)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x8}, 0xc, &(0x7f00000000c0)={&(0x7f0000000080)={0x20, 0x0, 0x400, 0x70bd29, 0x25dfdbfc, {{}, {@void, @val={0xc, 0x99, {0x0, 0x32}}}}}, 0x20}, 0x1, 0x0, 0x0, 0x40000}, 0x8000) r5 = socket$nl_generic(0x10, 0x3, 0x10) r6 = syz_genetlink_get_family_id$nl80211(0x0, 0xffffffffffffffff) sendmsg$RDMA_NLDEV_CMD_PORT_GET(r4, &(0x7f0000000400)={&(0x7f0000000340)={0x10, 0x0, 0x0, 0x8}, 0xc, &(0x7f00000003c0)={&(0x7f0000000380)={0x20, 0x1405, 0x2, 0x70bd29, 0x25dfdbfb, "", [{{0x8}, {0x8, 0x3, 0x3}}]}, 0x20}, 0x1, 0x0, 0x0, 0x8080}, 0x48000) ioctl$sock_SIOCGIFINDEX_80211(r5, 0x8933, &(0x7f00000000c0)={'wlan0\x00', 0x0}) sendmsg$NL80211_CMD_SET_INTERFACE(r5, &(0x7f0000000100)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000300)={0x38, r6, 0x400, 0x0, 0xfffffffd, {{}, {@val={0x8, 0x3, r7}, @val={0xc, 0x99, {0x4, 0x68}}}}, [@mon_options=[@NL80211_ATTR_MNTR_FLAGS={0x10, 0x17, 0x0, 0x1, [@NL80211_MNTR_FLAG_ACTIVE={0x4}, @NL80211_MNTR_FLAG_PLCPFAIL={0x4}, @NL80211_MNTR_FLAG_ACTIVE={0x4}]}]]}, 0x38}}, 0x4000855) r8 = openat$tun(0xffffffffffffff9c, &(0x7f0000000000), 0x48241, 0x0) r9 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000380), 0xffffffffffffffff) r10 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$NL80211_CMD_VENDOR(r10, &(0x7f0000000300)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f0000000000)=ANY=[@ANYBLOB='(\x00\x00\x00', @ANYRES16=r9, @ANYBLOB="01070000000000000000670000f4070001"], 0x28}, 0x1, 0x0, 0x0, 0x85}, 0x0) ioctl$TUNSETIFF(r8, 0x400454ca, &(0x7f00000000c0)={'syzkaller1\x00', 0x6bf1c2d5adba8c32}) r11 = socket$kcm(0x2, 0xa, 0x2) ioctl$TUNSETLINK(r8, 0x400454cd, 0x306) ioctl$SIOCSIFHWADDR(r11, 0x8914, &(0x7f0000000180)={'syzkaller1\x00', @link_local}) write$tun(r8, &(0x7f0000000040)={@val={0x2000}, @void, @eth={@broadcast, @remote, @void, {@arp={0x806, @ether_ipv4={0x1, 0x800, 0x6, 0x4, 0x2, @multicast, @empty, @remote, @initdev={0xac, 0x1e, 0x1, 0x0}}}}}}, 0x2e) sendmsg$NL80211_CMD_LEAVE_IBSS(r1, &(0x7f0000000280)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x210c000}, 0xc, &(0x7f0000000240)={&(0x7f0000000200)={0x14, r6, 0x200, 0x70bd25, 0x25dfdbfe, {{}, {@void, @void}}, ["", "", "", "", "", "", ""]}, 0x14}, 0x1, 0x0, 0x0, 0x800}, 0x820) 5.182581499s ago: executing program 6 (id=5784): r0 = socket$tipc(0x1e, 0x2, 0x0) (async) r1 = socket$nl_netfilter(0x10, 0x3, 0xc) ioctl$sock_SIOCOUTQNSD(r1, 0x894b, 0x0) getsockopt$bt_hci(0xffffffffffffffff, 0x84, 0x6d, 0x0, 0x0) (async) r2 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$MPTCP_PM_CMD_ADD_ADDR(0xffffffffffffffff, 0x0, 0x8000) (async) ioctl$sock_netdev_private(r2, 0x89f0, 0x0) sendmsg$nl_generic(r2, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000140)={&(0x7f00000004c0)=ANY=[@ANYBLOB="18000000260001031dbd7002fadbdf25010000000400ae"], 0x18}}, 0x0) (async) recvmmsg(r2, &(0x7f0000005000)=[{{0x0, 0x0, &(0x7f0000004ac0)=[{&(0x7f0000000a00)=""/109, 0x6d}, {&(0x7f0000001a80)=""/4111, 0x100f}, {&(0x7f0000000040)=""/17, 0x11}, {&(0x7f0000003740)=""/195, 0xc3}, {&(0x7f0000000080)=""/172, 0xac}, {&(0x7f00000001c0)=""/151, 0x97}, {&(0x7f0000003ac0)=""/4093, 0xffd}], 0x7}, 0x9}, {{0x0, 0x0, 0x0}, 0x5}, {{0x0, 0x0, 0x0}}, {{0x0, 0x0, 0x0}, 0x79}], 0x4, 0x0, 0x0) (async) r3 = socket(0x10, 0x80002, 0x0) sendmsg$nl_route(r3, &(0x7f0000000000)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000240)=ANY=[@ANYBLOB="440000001100a7cc4a372eaf541d002007000000", @ANYRES32, @ANYBLOB="00000000100000001c001a80080002802d00ff0008000200", @ANYRES16=r3, @ANYRES32=r3], 0x44}, 0x1, 0x0, 0x0, 0x4000041}, 0x2000800) r4 = socket$igmp(0x2, 0x3, 0x2) ioctl$sock_SIOCGIFINDEX(r4, 0x8933, &(0x7f0000000180)={'bond0\x00', 0x0}) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000380)={0x6, 0x3, &(0x7f0000000080)=@framed, &(0x7f0000000300)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x40, '\x00', r5}, 0x90) bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000240)={0x2, 0x4, 0x8, 0x1, 0x80, 0x1, 0x0, '\x00', r5}, 0x48) r6 = bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000300)={0x6, 0x3, &(0x7f0000000240)=@framed={{0x18, 0x0, 0x0, 0x0, 0x3}}, &(0x7f00000001c0)='syzkaller\x00'}, 0x80) (async) r7 = socket$packet(0x11, 0x3, 0x300) ioctl$sock_SIOCGIFINDEX(r7, 0x8933, &(0x7f0000000080)={'syz_tun\x00', 0x0}) bpf$BPF_LINK_CREATE_XDP(0x1c, &(0x7f00000000c0)={r6, r8}, 0x10) (async) ioctl$ifreq_SIOCGIFINDEX_batadv_hard(r1, 0x8933, &(0x7f0000000880)={'batadv_slave_0\x00', 0x0}) (async) getsockopt$inet_mreqn(0xffffffffffffffff, 0x0, 0x20, &(0x7f00000008c0)={@broadcast, @broadcast, 0x0}, &(0x7f0000000900)=0xc) ioctl$ifreq_SIOCGIFINDEX_team(r2, 0x8933, &(0x7f0000000940)={'team0\x00', 0x0}) (async) r12 = socket$nl_route(0x10, 0x3, 0x0) (async) r13 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a) ioctl$sock_SIOCGIFINDEX(r13, 0x8933, &(0x7f0000000000)={'macvlan0\x00', 0x0}) sendmsg$nl_route(r12, &(0x7f0000000280)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000040)=@newlink={0x68, 0x10, 0x503, 0x0, 0x0, {0x0, 0x0, 0x0, 0x0, 0x0, 0x52895}, [@IFLA_LINKINFO={0x40, 0x12, 0x0, 0x1, @macvlan={{0xc}, {0x30, 0x2, 0x0, 0x1, [@IFLA_MACVLAN_MODE={0x8, 0x1, 0x10}, @IFLA_MACVLAN_MACADDR_DATA={0x1c, 0x5, 0x0, 0x1, [{0xfffffffffffffeff, 0x4, @dev={'\xaa\xaa\xaa\xaa\xaa', 0x3b}}, {0xa, 0x4, @remote}]}, @IFLA_MACVLAN_MACADDR_MODE={0x8, 0x3, 0x3}]}}}, @IFLA_LINK={0x8, 0x5, r14}]}, 0x68}}, 0x0) (async) getsockopt$inet6_mreq(0xffffffffffffffff, 0x29, 0x14, &(0x7f0000000980)={@remote, 0x0}, &(0x7f00000009c0)=0x14) getsockopt$PNPIPE_IFINDEX(0xffffffffffffffff, 0x113, 0x2, &(0x7f0000000a80)=0x0, &(0x7f0000000ac0)=0x4) ioctl$ifreq_SIOCGIFINDEX_team(r0, 0x8933, &(0x7f0000000b00)={'team0\x00', 0x0}) sendmsg$TEAM_CMD_PORT_LIST_GET(r2, &(0x7f0000001400)={&(0x7f0000000180)={0x10, 0x0, 0x0, 0x580012}, 0xc, &(0x7f00000013c0)={&(0x7f0000000b40)={0x854, 0x0, 0x8, 0x70bd26, 0x25dfdbfc, {}, [{{0x8}, {0x180, 0x2, 0x0, 0x1, [{0x40, 0x1, @queue_id={{{0x24}, {0x5}, {0x8, 0x4, 0x9}}, {0x8}}}, {0x40, 0x1, @priority={{{0x24}, {0x5}, {0x8, 0x4, 0xff}}, {0x8}}}, {0x40, 0x1, @lb_hash_stats={{{0x24}, {0x5}, {0x8, 0x4, 0x7}}, {0x8}}}, {0x40, 0x1, @lb_port_stats={{{0x24}, {0x5}, {0x8, 0x4, 0x1}}, {0x8}}}, {0x40, 0x1, @queue_id={{{0x24}, {0x5}, {0x8, 0x4, 0x7}}, {0x8}}}, {0x3c, 0x1, @user_linkup={{{0x24}, {0x5}, {0x4}}, {0x8}}}]}}, {{0x8}, {0x74, 0x2, 0x0, 0x1, [{0x38, 0x1, @activeport={{0x24}, {0x5}, {0x8}}}, {0x38, 0x1, @activeport={{0x24}, {0x5}, {0x8}}}]}}, {{0x8}, {0x124, 0x2, 0x0, 0x1, [{0x38, 0x1, @activeport={{0x24}, {0x5}, {0x8}}}, {0x38, 0x1, @notify_peers_count={{0x24}, {0x5}, {0x8, 0x4, 0x4}}}, {0x38, 0x1, @notify_peers_count={{0x24}, {0x5}, {0x8, 0x4, 0x101}}}, {0x38, 0x1, @notify_peers_interval={{0x24}, {0x5}, {0x8, 0x4, 0xf59dd88}}}, {0x40, 0x1, @queue_id={{{0x24}, {0x5}, {0x8, 0x4, 0x4}}, {0x8}}}]}}, {{0x8}, {0x100, 0x2, 0x0, 0x1, [{0x40, 0x1, @lb_hash_stats={{{0x24}, {0x5}, {0x8, 0x4, 0x1}}, {0x8}}}, {0x40, 0x1, @priority={{{0x24}, {0x5}, {0x8, 0x4, 0xfffffffe}}, {0x8}}}, {0x44, 0x1, @name={{0x24}, {0x5}, {0x11, 0x4, 'activebackup\x00'}}}, {0x38, 0x1, @notify_peers_count={{0x24}, {0x5}, {0x8, 0x4, 0x8}}}]}}, {{0x8}, {0x40, 0x2, 0x0, 0x1, [{0x3c, 0x1, @lb_tx_method={{0x24}, {0x5}, {0x9, 0x4, 'hash\x00'}}}]}}, {{0x8}, {0x44, 0x2, 0x0, 0x1, [{0x40, 0x1, @lb_hash_stats={{{0x24}, {0x5}, {0x8, 0x4, 0x8}}, {0x8}}}]}}, {{0x8}, {0xb4, 0x2, 0x0, 0x1, [{0x74, 0x1, @bpf_hash_func={{0x24}, {0x5}, {0x44, 0x4, [{0xb9d, 0x8, 0x8, 0x8}, {0x1, 0x10, 0x3, 0x5}, {0x800, 0x2b, 0x6, 0x400}, {0x6, 0xd, 0x3, 0x80000001}, {0x8001, 0xd, 0x9, 0x2}, {0x1, 0x8, 0xa, 0x7}, {0x401, 0xff, 0x6}, {0xe, 0x9, 0xda, 0x8}]}}}, {0x3c, 0x1, @enabled={{{0x24}, {0x5}, {0x4}}, {0x8}}}]}}, {{0x8, 0x1, r5}, {0x4}}, {{0x8, 0x1, r8}, {0x130, 0x2, 0x0, 0x1, [{0x38, 0x1, @activeport={{0x24}, {0x5}, {0x8}}}, {0x3c, 0x1, @lb_tx_method={{0x24}, {0x5}, {0x9, 0x4, 'hash\x00'}}}, {0x38, 0x1, @lb_stats_refresh_interval={{0x24}, {0x5}, {0x8, 0x4, 0xffff84eb}}}, {0x40, 0x1, @priority={{{0x24}, {0x5}, {0x8, 0x4, 0x6}}, {0x8, 0x6, r9}}}, {0x40, 0x1, @queue_id={{{0x24}, {0x5}, {0x8, 0x4, 0x401}}, {0x8, 0x6, r10}}}]}}, {{0x8, 0x1, r11}, {0x16c, 0x2, 0x0, 0x1, [{0x40, 0x1, @priority={{{0x24}, {0x5}, {0x8, 0x4, 0x7}}, {0x8, 0x6, r14}}}, {0x38, 0x1, @lb_stats_refresh_interval={{0x24}, {0x5}, {0x8, 0x4, 0x218}}}, {0x38, 0x1, @mcast_rejoin_interval={{0x24}, {0x5}, {0x8, 0x4, 0x1}}}, {0x40, 0x1, @lb_tx_hash_to_port_mapping={{{0x24}, {0x5}, {0x8, 0x4, r15}}, {0x8}}}, {0x38, 0x1, @activeport={{0x24}, {0x5}, {0x8, 0x4, r16}}}, {0x40, 0x1, @priority={{{0x24}, {0x5}, {0x8, 0x4, 0x6}}, {0x8, 0x6, r17}}}]}}]}, 0x854}, 0x1, 0x0, 0x0, 0x8000}, 0x0) 5.105327165s ago: executing program 0 (id=5785): r0 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCETHTOOL(r0, 0x89f1, &(0x7f0000000380)={'sit0\x00', &(0x7f0000000140)=@ethtool_cmd={0x11, 0x2, 0xfffffffd, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfe, 0x0, 0x0, 0x0, 0x7, 0x0, 0x0, 0x4, [0x0, 0x4000]}}) r1 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r1, &(0x7f0000000180)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f00000004c0)=ANY=[@ANYBLOB="3c010000190001000000000000000000e0000001000000000000000000000000fe8000000000000000000000000000aa4e220000000000000a00000000000000", @ANYRES32=0x0, @ANYRES32=0x0, @ANYBLOB="00000000000000000104000000000000feffffffffffffff030000000000000000000000000000000000000000000000000000000000000001000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000001000000000000008400050020010000000000000000000000000000000000002b00000000000000000000000000000000000000000500000000000002000700000000000000000000000000e00000020000000000000000000000004000000033"], 0x13c}, 0x1, 0x0, 0x0, 0x20000000}, 0x20040880) r2 = socket$kcm(0xa, 0x2, 0x73) sendmsg$kcm(r2, &(0x7f0000001280)={&(0x7f00000010c0)=@in6={0xa, 0x4e1b, 0x1, @dev={0xfe, 0x80, '\x00', 0x3d}, 0x9}, 0x80, 0x0}, 0x4c810) 4.930411349s ago: executing program 0 (id=5786): r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = openat$tun(0xffffffffffffff9c, &(0x7f0000000000), 0x2, 0x0) ioctl$TUNSETIFF(r1, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x1002}) r2 = socket$nl_route(0x10, 0x3, 0x0) r3 = socket$inet_tcp(0x2, 0x1, 0x0) ioctl$sock_SIOCGIFINDEX(r3, 0x8933, &(0x7f0000000200)={'batadv0\x00', 0x0}) sendmsg$nl_route(r2, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000000340)={&(0x7f0000000380)=@newlink={0x3c, 0x10, 0x5, 0x0, 0x0, {0x0, 0x0, 0x0, 0x0, 0x1, 0x1}, [@IFLA_IFNAME={0x14, 0x3, 'syzkaller0\x00'}, @IFLA_MASTER={0x8, 0xa, r4}]}, 0x3c}}, 0x0) write(r1, &(0x7f0000000480)="ffffffffeefc3f19a9935e894305000f32ffffff070200112233445500112233445500ff0000", 0x26) r5 = syz_genetlink_get_family_id$devlink(&(0x7f0000000080), r0) sendmsg$DEVLINK_CMD_TRAP_POLICER_GET(r0, &(0x7f00000001c0)={&(0x7f0000000000), 0xc, &(0x7f0000000180)={&(0x7f0000000100)={0x64, r5, 0x11, 0x70bd2a, 0x25dfdbfe, {}, [{@nsim={{0xe}, {0xf, 0x2, {'netdevsim', 0x0}}}, {0x8, 0x8e, 0x1}}, {@nsim={{0xe}, {0xf, 0x2, {'netdevsim', 0x0}}}, {0x8, 0x8e, 0x3}}]}, 0x64}, 0x1, 0x0, 0x0, 0x80}, 0x44000000) sendmsg$nl_generic(r0, &(0x7f0000000400)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000000c0)=ANY=[@ANYBLOB="200000002f00098027bd7000fbdbdf25040000000c00170001"], 0x20}, 0x1, 0x0, 0x0, 0x42014}, 0x80000) 4.887035903s ago: executing program 7 (id=5787): r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000140), 0x0, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000080)={'pimreg0\x00', 0x7c2}) ioctl$TUNATTACHFILTER(r0, 0x401054d5, &(0x7f0000000040)={0x0, &(0x7f00000000c0)}) (async) ioctl$TUNATTACHFILTER(r0, 0x401054d5, &(0x7f0000000040)={0x0, &(0x7f00000000c0)}) pipe(&(0x7f0000000000)={0xffffffffffffffff}) r2 = syz_init_net_socket$nl_rdma(0x10, 0x3, 0x10) bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f00000007c0)=ANY=[@ANYBLOB="1b00000000000000000000000000040000000000", @ANYRES32=0x0, @ANYBLOB="00dfffffff"], 0x48) (async) r3 = bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f00000007c0)=ANY=[@ANYBLOB="1b00000000000000000000000000040000000000", @ANYRES32=0x0, @ANYBLOB="00dfffffff"], 0x48) bpf$PROG_LOAD(0x5, &(0x7f0000000840)={0xd, 0xf, &(0x7f00000004c0)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r3, @ANYBLOB="0000000000000000b702000014000000b7030000000000008500000060000000bf0900000000000055090100000000009500000000000000bf91000000000000b5020000000000008500000000000000b70000000000000095"], &(0x7f0000000340)='syzkaller\x00', 0x2, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @sock_ops=0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x800009}, 0x94) (async) bpf$PROG_LOAD(0x5, &(0x7f0000000840)={0xd, 0xf, &(0x7f00000004c0)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r3, @ANYBLOB="0000000000000000b702000014000000b7030000000000008500000060000000bf0900000000000055090100000000009500000000000000bf91000000000000b5020000000000008500000000000000b70000000000000095"], &(0x7f0000000340)='syzkaller\x00', 0x2, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @sock_ops=0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x800009}, 0x94) splice(r1, 0x0, r2, 0x0, 0xfffffffffffffff1, 0x8) r4 = bpf$MAP_CREATE(0x0, &(0x7f0000000000)=ANY=[@ANYBLOB="12000000040000000800000008"], 0x48) r5 = socket(0x1, 0x2, 0x0) bpf$MAP_UPDATE_ELEM(0x2, &(0x7f0000000300)={r4, &(0x7f0000000240), &(0x7f00000000c0)=@tcp=r5}, 0x20) (async) bpf$MAP_UPDATE_ELEM(0x2, &(0x7f0000000300)={r4, &(0x7f0000000240), &(0x7f00000000c0)=@tcp=r5}, 0x20) bpf$MAP_UPDATE_ELEM(0x2, &(0x7f0000000180)={r4, &(0x7f0000000140), &(0x7f0000000480)=@tcp=r5, 0x2}, 0x20) (async) bpf$MAP_UPDATE_ELEM(0x2, &(0x7f0000000180)={r4, &(0x7f0000000140), &(0x7f0000000480)=@tcp=r5, 0x2}, 0x20) ioctl$sock_ipv4_tunnel_SIOCCHGTUNNEL(0xffffffffffffffff, 0x89f3, &(0x7f0000000400)={'gretap0\x00', &(0x7f0000000380)={'erspan0\x00', 0x0, 0x7f00, 0x8, 0x8, 0x9, {{0xa, 0x4, 0x1, 0x3, 0x28, 0x67, 0x0, 0x7, 0x2f, 0x0, @empty, @rand_addr=0x64010101, {[@timestamp_addr={0x44, 0x14, 0x46, 0x1, 0x8, [{@initdev={0xac, 0x1e, 0x0, 0x0}, 0x9}, {@initdev={0xac, 0x1e, 0x0, 0x0}, 0x3}]}]}}}}}) r7 = bpf$BPF_BTF_GET_FD_BY_ID(0x13, &(0x7f0000000440), 0x4) openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000000c0)='blkio.bfq.group_wait_time\x00', 0x275a, 0x0) (async) r8 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000000c0)='blkio.bfq.group_wait_time\x00', 0x275a, 0x0) mmap(&(0x7f0000001000/0x1000)=nil, 0x1000, 0x800001, 0x10012, r8, 0x0) r9 = bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f0000000900)={0x1b, 0x0, 0x0, 0x100, 0x0, 0xffffffffffffffff, 0x3, '\x00', 0x0, 0xffffffffffffffff, 0x2, 0x1, 0x3}, 0x50) bpf$MAP_CREATE(0x0, &(0x7f0000000280)=@base={0x7, 0x4, 0x100, 0x1, 0x28}, 0x50) (async) r10 = bpf$MAP_CREATE(0x0, &(0x7f0000000280)=@base={0x7, 0x4, 0x100, 0x1, 0x28}, 0x50) bpf$PROG_LOAD(0x5, &(0x7f0000000680)={0x11, 0x8, &(0x7f0000000080)=ANY=[@ANYBLOB="1800000000000000000000000000000018120000", @ANYRES32=r10, @ANYBLOB="0000000000000000b703000002000000850000001b000000b70000000000000095"], &(0x7f0000000780)='GPL\x00', 0x0, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, @fallback=0x2d, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000600)={{0xffffffffffffffff, 0xffffffffffffffff}, &(0x7f0000000580), &(0x7f00000005c0)}, 0x20) bpf$MAP_CREATE(0x0, &(0x7f00000000c0)=@base={0x1f, 0x0, 0x0, 0x1000, 0x0, 0x1}, 0x48) (async) r12 = bpf$MAP_CREATE(0x0, &(0x7f00000000c0)=@base={0x1f, 0x0, 0x0, 0x1000, 0x0, 0x1}, 0x48) mmap(&(0x7f0000b02000/0x3000)=nil, 0x3000, 0x1000002, 0x28011, r12, 0x3000) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f00000006c0)={{0xffffffffffffffff, 0xffffffffffffffff}, &(0x7f0000000640), &(0x7f0000000680)}, 0x20) bpf$MAP_CREATE(0x0, &(0x7f0000000980)=ANY=[@ANYBLOB="060000000400000004000000004901000000000000", @ANYRES32=0x0, @ANYBLOB='\x00'/20, @ANYRES32=0x0, @ANYRES32=0x0, @ANYBLOB='\x00'/28], 0x50) (async) r14 = bpf$MAP_CREATE(0x0, &(0x7f0000000980)=ANY=[@ANYBLOB="060000000400000004000000004901000000000000", @ANYRES32=0x0, @ANYBLOB='\x00'/20, @ANYRES32=0x0, @ANYRES32=0x0, @ANYBLOB='\x00'/28], 0x50) r15 = bpf$MAP_CREATE(0x0, &(0x7f0000000140)=@base={0x1, 0x4, 0x4, 0x100, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0}, 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000001c0)={0x1, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="2e000000000000000000000000000000611800000000000018110000", @ANYRES32=r14, @ANYBLOB="00000000000000001d0802000000000018110000", @ANYRES32=r15, @ANYBLOB="0000000000000000bfa200000000000007020000f8ffffff850000000100000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x6, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r16 = bpf$BPF_MAP_GET_FD_BY_ID(0xe, &(0x7f0000000700)={0xffffffffffffffff, 0x21bf, 0x18}, 0xc) bpf$PROG_LOAD(0x5, &(0x7f00000007c0)={0xe, 0x13, &(0x7f0000000180)=@ringbuf={{0x18, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x6}, {{0x18, 0x1, 0x1, 0x0, r1}}, {}, [@alu={0x4, 0x1, 0x4, 0x9, 0x0, 0x2, 0x10}, @alu={0x4, 0x1, 0x8, 0x3, 0x2, 0x2, 0x1f}, @map_fd={0x18, 0xd, 0x1, 0x0, r4}], {{}, {}, {0x85, 0x0, 0x0, 0x18e}}}, &(0x7f0000000240)='syzkaller\x00', 0x5, 0xf0, &(0x7f0000000280)=""/240, 0x854cbefd521072e5, 0x55, '\x00', r6, @sk_skb=0x5, r7, 0x8, &(0x7f0000000480)={0x0, 0x2}, 0x8, 0x10, &(0x7f00000004c0)={0x2, 0x7, 0x6, 0x10001}, 0x10, 0x0, r0, 0x2, &(0x7f0000000740)=[r8, r9, r10, r11, r12, r13, r15, 0xffffffffffffffff, r16], &(0x7f0000000780)=[{0x1, 0x5, 0xb, 0x9}, {0x1, 0x3, 0xa, 0x4}]}, 0x94) 4.684750832s ago: executing program 0 (id=5788): r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000080), 0xffffffffffffffff) r2 = socket$inet(0x2, 0x2, 0x0) setsockopt$inet_mreqn(r2, 0x0, 0x23, &(0x7f0000000740)={@multicast2, @loopback}, 0xc) r3 = socket$netlink(0x10, 0x3, 0x0) writev(r3, &(0x7f00000003c0)=[{&(0x7f0000000180)="390000001300034700bb65e1c3e4ffff01000000010000005600000025000000190004000400000007fd17e5ffff0800040000000000000000", 0x39}], 0x1) writev(r3, &(0x7f0000000300)=[{&(0x7f00000001c0)="390000001300034700bb5be1c3e4feff06000000010000004500000025000000190004000400ad000d00000000000006040000000000f93132", 0x39}], 0x1) setsockopt$inet_msfilter(r2, 0x0, 0x29, &(0x7f0000000000)=ANY=[@ANYBLOB="e00000027fa80a010100000004"], 0x57) r4 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX_80211(r4, 0x8933, &(0x7f0000000180)={'wlan1\x00', 0x0}) r6 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r6, &(0x7f00000007c0)={0x0, 0x0, &(0x7f0000000540)={&(0x7f0000000880)=@newtaction={0x14, 0x68, 0x1}, 0x14}}, 0x0) sendmsg$NL80211_CMD_CONNECT(r4, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000240)=ANY=[@ANYRES16=r1, @ANYRES8=r0, @ANYBLOB="e507b0d4daa8ad053361e304157f8d2e114cbe827dcd4c5e4db54bdd903ad1b2d5d5b6692a449b2fee36830303d3339346c369f3ed20a106acdb13925c2f8d082d439b11b8d8dc09204494653488466b5a4620176c4081f7e292c124ecc5964fb6171ff9907925393c5cd06ccf97b0ccc46c2757412c43e9f4c15a1610285adace22985d7d9fc672104f455aaa689852d64a5c0f8e50c71ad665123caa4a087ebb8c806ee0c352e19617046fb8d3f0211bc02c"], 0x58}, 0x1, 0x0, 0x0, 0x4001}, 0x24040004) sendmsg$NL80211_CMD_CRIT_PROTOCOL_START(r0, &(0x7f0000000140)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x1}, 0xc, &(0x7f0000000100)={&(0x7f00000000c0)={0x2c, r1, 0x1, 0x70bd2c, 0x25dfdbff, {{}, {@val={0x8, 0x3, r5}, @void}}, [@NL80211_ATTR_CRIT_PROT_ID={0x6, 0xb3, 0x1}, @NL80211_ATTR_MAX_CRIT_PROT_DURATION={0x6, 0xb4, 0x126f}]}, 0x2c}, 0x1, 0x0, 0x0, 0x80}, 0x4c814) ioctl$sock_ipv6_tunnel_SIOCDELTUNNEL(0xffffffffffffffff, 0x89f2, &(0x7f0000000400)={'ip6tnl0\x00', &(0x7f0000000340)={'ip6gre0\x00', 0x0, 0x4, 0xc, 0x7, 0x4, 0x0, @dev={0xfe, 0x80, '\x00', 0x44}, @private0, 0x8, 0x8000, 0x817, 0x7fff}}) setsockopt$inet_mreqn(r2, 0x0, 0x20, &(0x7f0000000440)={@initdev={0xac, 0x1e, 0x1, 0x0}, @multicast2, r7}, 0xc) 4.534938735s ago: executing program 6 (id=5789): r0 = socket$nl_rdma(0x10, 0x3, 0x14) bpf$BPF_MAP_CONST_STR_FREEZE(0x16, &(0x7f0000000280)={0x1, 0xffffffffffffffff}, 0x4) bpf$BPF_PROG_WITH_BTFID_LOAD(0x5, &(0x7f0000000180)=@bpf_lsm={0xd, 0x11, &(0x7f00000002c0)=@raw=[@snprintf={{}, {}, {0x7, 0x0, 0xb, 0x8, 0x0, 0x0, 0x4}, {}, {}, {}, {}, {}, {}, {0x18, 0x3, 0x2, 0x0, r1}}, @kfunc={0x85, 0x0, 0x2, 0x0, 0x2}, @call={0x85, 0x0, 0x0, 0xaf}, @cb_func={0x18, 0x7, 0x4, 0x0, 0xfffffffffffffffe}], &(0x7f0000000140)='syzkaller\x00'}, 0x94) ioctl$AUTOFS_IOC_FAIL(r1, 0x9361, 0x9) r2 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f0000000080)={'batadv0\x00', 0x0}) sendmsg$nl_route(r2, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000000)=@newlink={0x44, 0x10, 0x401, 0xfffffffc, 0x80080, {0x0, 0x0, 0x0, 0x0, 0x1503}, [@IFLA_LINKINFO={0x14, 0x12, 0x0, 0x1, @macsec={{0xb}, {0x4}}}, @IFLA_LINK={0x8, 0x5, r3}, @IFLA_MASTER={0x8, 0xa, r3}]}, 0x44}, 0x1, 0x0, 0x0, 0x2004d808}, 0x0) r4 = socket$inet_mptcp(0x2, 0x1, 0x106) setsockopt$inet_int(r4, 0x0, 0x14, 0x0, 0x0) sendmsg$RDMA_NLDEV_CMD_RES_CM_ID_GET(r0, &(0x7f0000001280)={0x0, 0x0, &(0x7f0000001240)={&(0x7f00000011c0)=ANY=[@ANYBLOB="280000000b14010000e0ffffffffffff070001"], 0x28}}, 0x0) r5 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_CREATE(r5, &(0x7f0000000040)={0x0, 0x0, &(0x7f00000044c0)={&(0x7f0000000080)={0x50, 0x2, 0x6, 0x801, 0x0, 0x0, {}, [@IPSET_ATTR_DATA={0xc, 0x7, 0x0, 0x1, [@IPSET_ATTR_BUCKETSIZE={0x5, 0x15, 0xfc}]}, @IPSET_ATTR_FAMILY={0x5, 0x5, 0xa}, @IPSET_ATTR_PROTOCOL={0x5}, @IPSET_ATTR_REVISION={0x5}, @IPSET_ATTR_SETNAME={0x9, 0x2, 'syz0\x00'}, @IPSET_ATTR_TYPENAME={0xc, 0x3, 'hash:ip\x00'}]}, 0x50}}, 0x0) 4.471946002s ago: executing program 0 (id=5790): r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$mptcp(&(0x7f0000005c40), 0xffffffffffffffff) sendmsg$MPTCP_PM_CMD_GET_ADDR(r0, &(0x7f0000000b00)={0x0, 0x0, &(0x7f0000000ac0)={&(0x7f00000007c0)=ANY=[@ANYBLOB="a4000000", @ANYRES16=r1, @ANYBLOB="010026bd7000fddbdf250300000008000400fffbffff3800018014000400fe880000000000000000000000000101080006"], 0xa4}, 0x1, 0x0, 0x0, 0x890}, 0x0) unshare(0x400) r2 = bpf$MAP_CREATE(0x0, &(0x7f0000000840)=ANY=[@ANYBLOB="05000000050000000100000004"], 0x48) r3 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a) recvmsg(r3, &(0x7f0000000500)={0x0, 0x0, 0x0}, 0x40000120) bpf$BPF_BTF_LOAD(0x12, &(0x7f00000000c0)={&(0x7f0000000700)=ANY=[@ANYBLOB="9feb0100180000000000000040000000400000000200000000000000000000090400000000000000000000010500000008000000000000000000000300000000020000000200000012000000000000000000000b"], 0x0, 0x5a}, 0x20) bpf$PROG_LOAD(0x5, &(0x7f0000000280)={0x16, 0xc, 0x0, &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @flow_dissector, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000200)={0x6, 0xe, &(0x7f0000000000)=ANY=[@ANYBLOB="0082010105000000852000000400000000000000000300000000000000000000184100000004000000000000000000009500000000000000950000000000000014583000ffffffff18160000", @ANYRES32=r2, @ANYBLOB="000000000000000045abffff00000000183800000400"/32], &(0x7f0000000580)='syzkaller\x00', 0xa, 0x5, &(0x7f0000000140)=""/5, 0x40f00, 0x20, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, &(0x7f0000000180)={0x7, 0x3}, 0x8, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, &(0x7f00000001c0)=[r2, r2, r2, r2, 0xffffffffffffffff, r2], 0x0, 0x10, 0xfffffffe}, 0xc3) r4 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r4, &(0x7f0000000300)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f000000cbc0)=@newtaction={0xe68, 0x30, 0x871a15abc695fa3d, 0x0, 0x0, {}, [{0xe54, 0x1, [@m_pedit={0xe50, 0x1, 0x0, 0x0, {{0xa}, {0xe24, 0x2, 0x0, 0x1, [@TCA_PEDIT_PARMS={0xe20, 0x2, {{{}, 0x97}, [{}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {0xffffffff}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {0x0, 0x0, 0x0, 0x2}, {}, {}, {}, {0xfffffffd}, {}, {}, {}, {}, {}, {}, {}, {0x0, 0x0, 0x0, 0x1}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {0x0, 0xfffffff7}]}}]}, {0x4}, {0xc}, {0xc}}}]}]}, 0xe68}}, 0x0) 4.409112056s ago: executing program 6 (id=5791): r0 = socket$inet6(0xa, 0x2, 0x0) setsockopt$inet6_IPV6_XFRM_POLICY(r0, 0x29, 0x23, &(0x7f0000000340)={{{@in=@broadcast, @in6=@loopback, 0x4e24, 0x0, 0x0, 0x0, 0xa, 0x0, 0x20}, {0x0, 0x0, 0x1}, {}, 0x0, 0x0, 0x1}, {{@in6=@loopback, 0x1236, 0x32}, 0xa, @in=@broadcast}}, 0xe8) sendto$inet6(r0, &(0x7f0000000200), 0x0, 0x0, &(0x7f0000000000)={0xa, 0x4e20, 0x0, @loopback}, 0x1c) (async) r1 = socket$inet6_sctp(0xa, 0x1, 0x84) sendto$inet6(r1, &(0x7f0000000180)="e7", 0x1, 0x0, &(0x7f0000000200)={0xa, 0x4e24, 0x0, @private2={0xfc, 0x2, '\x00', 0x1}}, 0x1c) getsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX3(r1, 0x84, 0x6f, &(0x7f0000000340)={0x0, 0x2c, &(0x7f0000000240)=[@in={0x2, 0x4e24, @remote}, @in6={0xa, 0x4e24, 0x0, @private2={0xfc, 0x2, '\x00', 0x1}}]}, &(0x7f0000000380)=0x10) (async) syz_emit_ethernet(0x22, &(0x7f0000000080)={@random="52ac540f955b", @remote, @val={@void, {0x8100, 0x1, 0x1}}, {@can={0xc, {{0x3}, 0x3, 0x1, 0x0, 0x0, "f51b732ad91c3752"}}}}, &(0x7f00000000c0)={0x1, 0x1, [0xab1, 0xd7b, 0x395, 0x39e]}) (async) ioctl$sock_SIOCSIFVLAN_GET_VLAN_VID_CMD(r0, 0x8983, &(0x7f0000000040)) 3.523218535s ago: executing program 0 (id=5796): r0 = socket$nl_route(0x10, 0x3, 0x0) openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0) ioctl$BTRFS_IOC_START_SYNC(r0, 0x80089418, &(0x7f0000000040)=0x0) ioctl$BTRFS_IOC_WAIT_SYNC(r0, 0x40089416, &(0x7f0000000140)=r1) r2 = socket$inet6(0xa, 0x2, 0x11) connect$inet6(r2, &(0x7f0000000400)={0xa, 0x1234, 0x0, @loopback}, 0x1c) r3 = openat$nci(0xffffffffffffff9c, &(0x7f0000000080), 0x2, 0x0) r4 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r5 = syz_genetlink_get_family_id$nfc(&(0x7f0000000100), r4) sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000b00)={&(0x7f0000000280)=ANY=[@ANYBLOB="1400000010000100000014000000110001"], 0x28}}, 0x4) ioctl$IOCTL_GET_NCIDEV_IDX(r3, 0x0, &(0x7f00000000c0)=0x0) unshare(0x8000400) sendmsg$NFC_CMD_DEV_UP(r4, &(0x7f0000000200)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000d80)=ANY=[@ANYBLOB="1c000000", @ANYRES16=r5, @ANYBLOB="010426bd7000f8dbdf250200000008000100", @ANYRES32=r6], 0x1c}}, 0x4008054) write$nci(r3, &(0x7f0000000240)=ANY=[@ANYBLOB='p\x00\t'], 0xc) write$nci(r3, &(0x7f0000000280)=ANY=[@ANYBLOB="400109"], 0x87) sendmsg$nl_route(r0, &(0x7f00000006c0)={0x0, 0x0, &(0x7f0000000280)={&(0x7f00000002c0)=ANY=[@ANYBLOB="3c00000010000d042abd70000000003a00000000", @ANYRES32=0x0, @ANYBLOB="01000000000000006e64000000000c00028005001b0000000000f72a91dbb827c86acfe16e2d96147fd5adcf97b2e8b1bb1f696cc267629d5a0ebfc54cf7c8e56809220d2a912940fcd4de654e4298c03cae23ca4232d498b7c8f6b66678bce2433abef7b04a22241e0d11493871173fe148ef38bdcd081db81e6e950e2fa68bf294aac994498718460a41804007dc1d2a6920149539570b4180330334ac75f139d34285"], 0x3c}}, 0x0) r7 = socket$nl_generic(0x10, 0x3, 0x10) r8 = socket$nl_generic(0x10, 0x3, 0x10) r9 = syz_genetlink_get_family_id$gtp(&(0x7f00000000c0), 0xffffffffffffffff) r10 = socket(0x10, 0x803, 0x0) syz_genetlink_get_family_id$batadv(&(0x7f0000000200), r10) getsockname$packet(r10, &(0x7f0000000440)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f00000000c0)=0x14) sendmsg$nl_route(r10, &(0x7f0000000140)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f0000000180)=ANY=[@ANYBLOB="700000001000370427bd70000000000000000000", @ANYRES32=r11, @ANYBLOB="c30803000b2ebe2650001280080001006774700044000280080007000a010101080004000100000008000700ac1414330500", @ANYRES32=r10], 0x70}, 0x1, 0x0, 0x0, 0x4000000}, 0x0) sendmsg$GTP_CMD_NEWPDP(r8, &(0x7f0000000300)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f0000000480)={0x40, r9, 0x1, 0x70bd27, 0x25dfdbfe, {}, [@GTPA_LINK={0x8, 0x1, r11}, @GTPA_TID={0xc, 0x3, 0x3}, @GTPA_VERSION={0x8}, @GTPA_FLOW={0x6}, @GTPA_FAMILY={0x5, 0xd, 0x15}]}, 0x40}, 0x1, 0x0, 0x0, 0x40000}, 0x4004800) sendmsg$GTP_CMD_DELPDP(r7, &(0x7f0000000440)={&(0x7f0000000180)={0x10, 0x0, 0x0, 0x80000}, 0xc, &(0x7f00000003c0)={&(0x7f0000000380)={0x28, r9, 0x5fd088f562ac16f9, 0x70bd26, 0x25dfdbfe, {}, [@GTPA_MS_ADDR6={0x14, 0xc, @remote}]}, 0x28}, 0x1, 0x0, 0x0, 0x220040c0}, 0x800) 3.514211951s ago: executing program 4 (id=5797): r0 = socket$inet6_sctp(0xa, 0x5, 0x84) setsockopt$inet_sctp6_SCTP_AUTOCLOSE(r0, 0x84, 0x4, &(0x7f0000005c00)=0x9, 0x4) (async) r1 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) (async) r2 = syz_genetlink_get_family_id$nbd(&(0x7f0000000000), 0xffffffffffffffff) sendmsg$NBD_CMD_CONNECT(r1, &(0x7f0000001ac0)={0x0, 0x0, &(0x7f0000001a80)={&(0x7f0000000140)=ANY=[@ANYBLOB='0\x00\x00\x00', @ANYRES16=r2, @ANYBLOB="0100ffffffff0000000001000000100007800c00018008000100", @ANYRES32, @ANYBLOB='\x00'], 0x30}}, 0x200000e4) syz_open_procfs$namespace(0xffffffffffffffff, &(0x7f0000000000)='ns/user\x00') r3 = socket$kcm(0x11, 0x3, 0x0) (async) r4 = socket$inet6(0xa, 0x802, 0x0) bind$inet6(r4, &(0x7f0000000640)={0xa, 0x0, 0x1, @local, 0x9}, 0x1c) (async) setsockopt$inet6_buf(r4, 0x29, 0x32, &(0x7f00000000c0)="ff02040004fffffffff40f936e83775a710cb663", 0x14) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000440)={0x11, 0x8, &(0x7f00000002c0)=ANY=[@ANYBLOB="18080000000000000000000008000000851000000300000018000200000000000000002183cef6009500"/64], &(0x7f0000000000)='GPL\x00', 0x5, 0x0, 0x0, 0x0, 0x48}, 0x94) setsockopt$sock_attach_bpf(r3, 0x107, 0xf, &(0x7f00000005c0), 0x4) (async) getsockopt$inet_sctp6_SCTP_PEER_ADDR_PARAMS(r0, 0x84, 0x9, &(0x7f0000000680)={0x0, @in6={{0xa, 0x4e22, 0x6f8, @mcast2, 0x1}}, 0x2, 0xffff, 0x2, 0x7f, 0x14, 0x9, 0x48}, &(0x7f0000000740)=0x9c) getsockopt$inet_sctp6_SCTP_ENABLE_STREAM_RESET(r0, 0x84, 0x76, &(0x7f0000000780)={r5, 0x2}, &(0x7f00000007c0)=0x8) bpf$PROG_LOAD(0x5, &(0x7f0000000200)={0x6, 0x0, 0x0, 0x0, 0x4, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @xdp, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0}, 0x94) r6 = syz_open_procfs$namespace(0xffffffffffffffff, &(0x7f0000000140)='ns/mnt\x00') (async) r7 = socket$nl_generic(0x10, 0x3, 0x10) (async) r8 = socket$netlink(0x10, 0x3, 0x14) sendmsg$TIPC_CMD_GET_NODES(r8, 0x0, 0x4000000) r9 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000080), 0xffffffffffffffff) (async) r10 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r10, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000040)=ANY=[@ANYBLOB="38000000410005000200000000000000030100002a000000140001801000040000"], 0x38}}, 0x20040000) ioctl$sock_SIOCGIFINDEX_80211(r4, 0x8933, &(0x7f0000000300)={'wlan1\x00', 0x0}) sendmsg$NL80211_CMD_DEL_STATION(r7, &(0x7f0000000440)={0x0, 0x0, &(0x7f0000000480)={&(0x7f00000004c0)={0x28, r9, 0x1, 0x0, 0xfffffffd, {{}, {@val={0x8, 0x3, r11}, @void}}, [@NL80211_ATTR_MAC={0xa, 0x6, @device_b}]}, 0x28}, 0x1, 0x0, 0x0, 0x80}, 0x0) ioctl$BTRFS_IOC_ADD_DEV(r6, 0x5000940a, &(0x7f0000000f80)={{}, "3120198113f981905e6a957c5e42c5ff0966ee1f006516b23feff38d0ea48150de2c56e5f771314e52730bbd73c5aa43c7fc4a0bdfb78ea7e210a3ec4a370452489b20e5d7a7cc06422b1fed15a85682868064d4112d3e98353eebb74c8f729501a4e87cca237a62446b0dfdc8f0b74b5a8d1f7f4f8b428bd490d3586a49788fd23a50c3c60636aa5030dd987d3a422ddee7aa2b0efecec05c7e1f9ce0a12f91c57ec3d56e04668b98dee6c9ff76166c4cf500d39e4c2b7f6f826f2893d11b02c20e278a99b686f46b02f9479448797e48bb88ee24c5192ac979d79f44ee2fc60f38aa574c3aa4ffed9de07bdefe312a6a4f55670c46a5f2e9347435063601e7c2071229d4dcae5859578d457bbe12ecb90d92e5f0775958d2fdfbbb99d2fd99e63d77743a2f8a9833381b613d89594dd32b1e950c3191185b8a0c19d09f9b58c0ad1e17f8c7add939e831fe2f1bd9970623d8c2992cc6a84fea31024683d591416497856f775eaf5674c6e45750ec44c8e694abffbfeca50c9ac0f84721a909e0a4551c2db47407f219e7b455b49900d35642899b7f6dbdf765143002b921c3054bce12115ebe62d91ff62429016d64eccab6c7d3d1d6c4927233a0b3d9a7c1af895d12adc0b7d27c408333e0af540e2406fab3b5250366b76d7275adff4b33cd963de95457a89f8cd82b1ea3484e2fc384143e446031cf481a50deb266e374f28e506390ea3305f01838ba279da0d8be800aca6e7384db253be28f043a58ff12a22da02eab0b5907c6dd192924b8a374cac1e9c76b7bacbe2b546bf0b2170674464b08775d30346ef1a6cbb6ca6b781c940d8e2d5bcf8c6889149d820cd00bb820a5ebbc1abd2412e46790450c83dff72f8497eb85299e9f4901d589d9a1cb701fcc8b1c300e3f18175834bdf16571052ab035d4bb5b5718950632ec5a07e19bf43c19306886afe817532ad9583ca8446920df4050f7f3a1c4d643b49c976f09d44780ea4e341a2f9f6ffb916b24024ecf09ac9def4c8b625099ee7c583f274875c9c0baebcf54969505f0aff02d291b78c24be82218041dac750bc0d2d913ad86598243aaeccaae2ee45054c8d22f69f362efafbc69a3875f40cc8b429f62e6e60ba381f567efdd1e8376d87eb8a1ba9a90516547d6d5d3de66220758ebc7db1e210e236c6a684a9ea7326922dd8155c9ad574e1d501a68e326ad02b7b22d802fbee16bdcb329e4f5ce905b95f889184a069563157390210d9f006243a56a1c6fa4bec7751e5cd6baab3e5ee22674f68eb5d8bdae4969ca243128d3584a251e2441a8fd8195943f4994364dc5f20e0574b6d646f610d59a191999adafe97d0ddcef8f569f004e6867a82e93a1e060569d7f4640d7f341b5f097b61d3b7404a7a4ec366012f73ea54a05efa31559137d8bfe654027a9c7b9abc507a9d1b43274ea8bd4aaa685f12413d19e0d2d37c5de634e2d541a6e7e3ce2cf9729fc8982b9c7050fb0678ee6e40b92207ce051c368e099c1c8855b1f5c5093307523b18637f784e5a80ee763adfefc0a6a5687ae4bef5d666e553cb2839a7c59994d96d010a62c3e4182224032a19d4e4aa29070ae8af92d55efb7d865c685d3cbb4940a2b45eb34406e6e7a57fe26c8251ae61a34dd596c294222dd872a259cf176e89abb42972d36eee2b85a71f0e8f33ed167b92bb26f04cd0efd1e54e617421dd1ab2eaa5f72f1041a23b901a95fa5318ee1ad9174da15803d9f986a3d3107346c517f22299c774f170c580d2454a882ac7a2f57dac0f1bc6a10d4ab7cf149abf7f407baa52fcdc6d791df0dd59f60e579f99c95cacb24a29a26b5fb56853aa49d409a25e4397b89349d1eabdd60024effd752c273a3fffcf2f1367dfa0f78bb079a3932a153ad98d9f2b462414321a34ccdfffa436c08c013050f220abddd446a3534a572a1105b1feae067ead1216b7d00c37395dcfaab25aaa0726e2991e9047657b92d7b22bcde95f7e83c5d5184554fa5bc97517c17434258bd212e2110e1c23856eb7cd894ab6c7b2e5d8fbecff83e646899e64a86084b9b811ef29fa56c5196770d1d4bb7f7f3f3ede542ac3aa7e9f5353fc38864953c3059020ba24b9baa5151503c5034dc135a44a99b132ea963e035fae64ac1b8e1318a36f8adf3a7ca9e70ffd7428750a95a68e2c9b73cb9fc69bd90eb26de9c71aaf8a7834e496387d58b24206a25f0028e5e2aea271b04f3dd1a6c25106fcaea8db662fb9b7653a67c3ef8d4b6f63a973b3c6c9d24d2ce85253897e27a5660939d7a6aea14d5d6c1b78aceed128db23719e0c117eb140a499882d2c6bb7eda5bcdb0fe14ceaaee36c8c9834543899109b63393ea09e2ad6d57f07bf6017edb3be68a19b280030b8d4729a13f5f647af14055c88c85a8bf2db196bc5ad115462e07f888f6dd559f08e490a7da686dc63bec39cf699430161bdc90a4620d02905db978c0b0f64145d32fe16a7f31f7deec3b572228268966d088aabd7a7e7311643e80e09b11fcc864a5776230d42d79135222722a377f5b60f651df03a550846ffe417f24e788e7e8a6c83081f04001567354584db4dc2b10184a663aa1a8c5886ccb90311f936c841506b6e374277b23f8b20a0b7d48f082fd56feea9020070e43b82db6481bc7d63fca6765a951e73fa17319cad08ece72568155f38fadb468337066fcbb8854a46e7dbb4d4ff01cf807ab100163cd8240f83b6d8242357ac887b0420ca6117de7a0f843288fdb71909d27cd3a56cdd00a878a96a900726989144a12a5d0efdef3d32337cdb6f1002795f2caa9625a55637c796ca2868e1766ae5b62615399a66dd50a0cc71feb988745f6d512354c91ea8fc632e797753937a95c864338084b9f267327960e2adf8d939b109e6a093a2ccd3e5dacb7dc781494711412cfa3d1f1d8036f2bbb9c43775ce3832c5f8e71dd1de58bb8e5857c32af7660fa9950877c616986b76e7ebc1fcc1667a35fc9f74db910ec00a42d09adad2eaab8ff24128ff3fd2d4172e1ca61772581e4f302173094cfb68d4445c3923849f768133315a4fe7ba2c01880af42c65d5a8e17c07b32bedba2ccbd1adaaaae6aa6ac78b773fe7ff11023797dcdb604f44d66de7596a21f38dbbe7ef06e0e0a0712e2102c8e88945578a937b3aa836ad562febada387776a5eaf24b904ccdd79406985451901d2cffbfb02b1798cd9a41456b430007fd5d50000d46fb267e115fa9561540d9d8143106914b1167798d71e80becf835fc35e3cef8ab5558e7861b92edf30a121ebd7419c6197d17654d64daa942e6bead827d667c2d4cf9fdf01d947a6ea461a1be8765bdafc471b789d19e8683ff200f261fe3052a80e2faa0acb179a0282d9cc41b41c02e1e405bcf1f58e1385a8508e0d301d291f651c9a2f74a696cdbeabdf8c451a7ce469b37e69096ac443e442eef65b54369dd081c0e578f7a218444913875be17f4383dd25db97623f4693971557edca143808c116e32aa9682a54bd56d869e84106630108224d1e271df9fe409ea480856eb1bddf3d1d21d860f7fa7f432f339e268895478e8966a65d6928859998102e5a6e01f7edc4dec7dc1e7a8f6a17890e8b78bc4a5df9aff23e64a6062aadb0703b59a7bc4a017b8facaec08206db084eaab7ceed950c5f447496d8f982a16a05431e4c5c0b0c52d42e85493b78e458667c5d33ff4c52fc9c6008ff167f16efc33e9fc1b140f15d78ece9e47834db6f12f0a0d7696b14b1b83da55fbdb22c8f89da633d4cce3322885094c5e0c4ffebd6fd56eaeac2624a9f8deb808a2847d372c4b784bad478b30fcccbba697751c24c125fdd53275fbef4318d1fea225766344fde6ea010772754807f82d6e82bf4e830ee20337f0179e9899d5dfa52314e2cad3f86959798ce51687839d5facaa6188052ee23b4e5fe9de02413d8297ffb053bd1238bf1e940e21d9d5117a6abdfb7fb35ce413cb422c61136307e0d15ff78057c695ccb8c2aa2cb16edfb6db5313baad380551269ed192334163ae0a5ffc1537795483e0e81946d867998e58da42b7ecff7e07061c092e4ae6b1e3b89b8b818e44e59e9d1c45099fd8a3236e82ba0d9b63898dfc1b01cfc4cbd42a5146624688f19491299f3e2596f91370f5e8e276b50c8139a78c740e43b6cedc73cb2c0968d35ecb41a0924d597f778f08422dfb9e03021d4ccd0e2f1cdbe1c57b7b47a4a41f9d81e3ee9b1871b59519e3e6a4818459b50a5ae9aad0ce10d90070555145d4d784fa815984798257cea4f6cbe229660bdffaef26d1245ab6720214ef133e90223c39cbc8816d23947ab341aef3e9918f6ff2354289775b4a2a90560c017b0bc4cb17be62c4d1ade9d18d7e566f5db16749b99d9a3389cb9578c9ffe3a9ffd68b2bd6234424e112da3695a24342649e8bf13c194a4eefd860c033105ac0e9980b7d5b54f399ca15f2dc535c4884430c52e9c5399d3f2b54003b4dfe75866fa8162729a5b515ccbbcdeb41dbd6310ec376cbe4561de7889325913d87953c135b7bcd31fed4cf5d62d76e5c21f933f2dca7c724fb0a6793dc4be768fe047616f8b9171132235cddce635e2f7c6cab52b21ab64fccff71756d6c91b8e2dc844bb45926993c826eb31c2c1d29ff2dc426b48384ab1f2a5162318bf953212df72ea1b2b8268520229ddf004ee81f38b1393b6555b234ba0b993f2136a029a5f3f1cf7b917764ab8a907088b9ad4fa48f0f5d0efbbb2e5cfa5ea78d8ef5a2612143561ac0c34683b1bb0d69f52474606baf2db8c779350d2227234f5dcd945397ff77d64a0fd1286c27c5eadb2bf00bd973467c1f499d8055ac2e1cd2aeb253c9db0aa21ea187e3c9f19a33b616a1113034a8ad684ec87748490d1e7bf5a1d8eb688717faabcd7064bfef2db4e918ca4d2812da82d44d0702194314bb26f8ad7ac136c24664414114076b806e56ebb81111798147142c34f320a8a38eb076deb3334446acdfee0b25076f81dd87a0c45239573592cd26b091b26aea0890f52b362df9124ec54cb177abe2a91a01964f299531a3cf04f4944f3f78c1c6c96466dd5658d9e739a1cfd27d4fd43b1a86cd27774b8586eb610e7b59a04a892902a0ea64e7e2097d15b2d57db5753185c0858a884e3514b0e917a70b71806c0a13889ffbd26af19242b67a46bb9d039f7c883c288fe7c880525aa0c772ef7a3137f187e4381194ddab62520296ffaa510522b17b42535cbc3cbb6d958712fcb6fa4a1006bfd4838c92ed585a2343b41e39e33d8af3785414f61c5f3c20b060c444d8b3e5349035d7c7e6d2180b2068176f7cf1871420877f02806d6808a7cd6ccc7228b928a1abecc94200aeee93e46a86a7ec77aa0f2b03fdd593b82d00bf641cdcd7adb5256790a1f50ef48ad8472a8a281d13d5c1374acfb34454f6ca1219060d65214f48b5022850721ea2d7f142360fb88f710f29b438134540eae18d1df60b18dcd1721ec26ecfc29785bd738956c7c79ee76b8e28a766150708afc953b3b7b32c3a075c9ad00bb4870cbf698b43c5c1db61271d264d4e50ba67f23e2c446f7a0ca4205f2d2bddeb11502b9cc9d6c701e5f334ccc339a6c1f98f25f44cb3276507950316a23fee777bfe7c36701665fa3ebe864eb999b5147baa81114971d1e3b4603e88253c62432426fbdb51d01d4cf96253d9d3581c930035decf1a6b3958fb2933c20f63cc72079bbfbe6f7efca6d16791ef7463128b0ecd69898542720f748fa4ba"}) (async) r12 = bpf$MAP_CREATE(0x0, &(0x7f0000000540)=ANY=[@ANYBLOB="0b00000000010000000100000900000001"], 0x48) bpf$MAP_UPDATE_BATCH(0x1a, &(0x7f0000000640)={0x0, 0x0, &(0x7f0000000000), &(0x7f00000002c0), 0x8, r12}, 0x38) (async) sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f000000c2c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000340)=ANY=[], 0x7c}}, 0x0) (async) bpf$MAP_LOOKUP_BATCH(0x1b, &(0x7f0000000440)={0x0, 0x0, &(0x7f0000000100), 0x0, 0x3, r12}, 0x38) (async) sendmsg$kcm(r3, &(0x7f00000000c0)={&(0x7f0000000180)=@hci={0x1f, 0x0, 0x4}, 0x80, &(0x7f00000009c0)=[{&(0x7f0000000580)="02044a00ea0e0000000000001eafbcea06e105000000000000001104ee1606d4b8bf4a8207f0ffff74c43824cee8440000", 0x31}, {&(0x7f0000000340)="126873159fca3fa38fb198e9a6b363ceb3e6d803ab766b7a38e451d14e0b3457474fe6a51671e4124fcea96a873b10996816e100ed8a93b0a9053db57d60973369f525c24533658551c3091cb88d3b", 0x4f}, {&(0x7f0000000200)="088d85d1f409000a3164ae439862807a158983661a6d2341f7", 0x19}, {&(0x7f0000000040)="df3b46a13300000000", 0x9}, {&(0x7f0000001480)="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", 0xeb5}], 0x5}, 0x40000) 3.474251167s ago: executing program 6 (id=5798): r0 = bpf$MAP_CREATE(0x0, &(0x7f0000003940)=@base={0x21, 0x0, 0x0, 0x40000000, 0x400, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x18}, 0x48) socket$nl_route(0x10, 0x3, 0x0) r1 = socket$nl_route(0x10, 0x3, 0x0) bpf$BPF_PROG_TEST_RUN(0xe, &(0x7f0000000080)={0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x508b, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xff}, 0x50) r2 = socket$nl_generic(0x10, 0x3, 0x10) r3 = syz_genetlink_get_family_id$team(&(0x7f00000044c0), 0xffffffffffffffff) ioctl$ifreq_SIOCGIFINDEX_team(r2, 0x8933, &(0x7f0000000240)={'team0\x00', 0x0}) sendmsg$TEAM_CMD_OPTIONS_SET(r2, &(0x7f0000004bc0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000002c0)=ANY=[@ANYBLOB='`\x00\x00\x00', @ANYRES16=r3, @ANYBLOB="050427bd7000ffdbdf250100000008000100", @ANYRES32=r4, @ANYBLOB="4400028040000100240001006d6f64650000000000000000000000000000000000000000000000000000000005000300050000000e000400629884616463617374000000a1d62e300ff6c7e1fdb5da61e4b353a601af3a4fcbf9f58b2a9bfa09afb5433bf8994395148c0c653cb15aa488b9a2b9e46ca948dc0bf89f659ebc8ba366fcb6ae91688bf413123cf36d0c3e55484be8bfbf7247becc0a50bcd2613ef11f4a88a3c82844e79fac2f771bb462ad38ad8e"], 0x60}, 0x1, 0x0, 0x0, 0x4000401}, 0x4c004) sendmsg$nl_route_sched(r1, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000040)=@newtaction={0x7c, 0x30, 0x9, 0x0, 0x0, {}, [{0x68, 0x1, [@m_mpls={0x64, 0x1, 0x0, 0x0, {{0x9}, {0x38, 0x2, 0x0, 0x1, [@TCA_MPLS_PARMS={0x1c, 0x2, {{}, 0x2}}, @TCA_MPLS_TTL={0x5, 0x7, 0x40}, @TCA_MPLS_LABEL={0x8}, @TCA_MPLS_TC={0x5}]}, {0x4, 0x4}, {0xc}, {0xc}}}]}]}, 0x7c}}, 0x0) r5 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000), 0x200002, 0x0) r6 = openat$cgroup_ro(r5, &(0x7f0000000600)='blkio.bfq.io_wait_time\x00', 0x275a, 0x0) read(r6, &(0x7f00000003c0)=""/132, 0x84) r7 = bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000300)={&(0x7f0000000380)={{0xeb9f, 0x1, 0x0, 0x18, 0x0, 0xc, 0xc, 0x2, [@struct]}}, 0x0, 0x26, 0x0, 0x1}, 0x28) bpf$BPF_GET_BTF_INFO(0xf, &(0x7f0000000340)={r7, 0x20, &(0x7f0000000100)={0x0, 0x0, 0x0, 0x0}}, 0x10) bpf$BPF_BTF_GET_FD_BY_ID(0x13, &(0x7f0000001840)=r8, 0x4) bpf$MAP_CREATE_TAIL_CALL(0x0, &(0x7f0000000180)={0x3, 0x4, 0x4, 0xa, 0x0, r0, 0xc, '\x00', 0x0, 0xffffffffffffffff, 0x5, 0x5, 0x3}, 0x50) socket$unix(0x1, 0x1, 0x0) r9 = openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0) ioctl$TUNSETIFF(r9, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x7101}) socket(0x10, 0x2, 0x0) sendto$packet(0xffffffffffffffff, &(0x7f0000000600), 0x0, 0x8c1, 0x0, 0x0) socket$kcm(0x11, 0x3, 0x0) r10 = openat$tun(0xffffffffffffff9c, &(0x7f0000000400), 0x0, 0x0) close(r10) r11 = socket$nl_route(0x10, 0x3, 0x0) r12 = socket$unix(0x1, 0x1, 0x0) ioctl$sock_SIOCGIFINDEX(r12, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r11, &(0x7f00000012c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000480)=@getchain={0x74, 0x66, 0x400, 0x70bd2b, 0x25dfdbfc, {0x0, 0x0, 0x0, r13, {0x9, 0x9}, {0x5, 0xfff2}, {0x4, 0x9}}, [{0x8, 0xb, 0x55}, {0x8, 0xb, 0x2}, {0xffffffffffffffe0, 0xb, 0x8}, {0x8, 0xb, 0x3ff}, {0x8, 0xb, 0x1}, {0x8, 0xb, 0x43}, {0x8, 0xb, 0x8}, {0x8, 0xb, 0x6}, {0x8, 0xb, 0x5}, {0x8, 0xb, 0x7}]}, 0x74}, 0x1, 0x0, 0x0, 0x4000000}, 0x20040084) sendmsg$nl_route_sched(r11, &(0x7f0000001200)={0x0, 0x0, &(0x7f0000000280)={&(0x7f00000022c0)=@newqdisc={0x58, 0x28, 0x4ee4e6a52ff56541, 0x70bd2d, 0xfffffdf8, {0x0, 0x0, 0x0, r13, {0x10}, {}, {0xd, 0xd}}, [@qdisc_kind_options=@q_tbf={{0x8}, {0x2c, 0x2, [@TCA_TBF_PARMS={0x28, 0x1, {{0x1, 0x0, 0x0, 0xfffe, 0x7ff, 0x1}, {0x6, 0x0, 0x8, 0x6, 0x8, 0x401}, 0x8000040, 0xd, 0x8ef}}]}}]}, 0x58}, 0x1, 0x0, 0x0, 0x40098}, 0x40000) ioctl$SIOCSIFHWADDR(r10, 0x8914, &(0x7f0000002280)={'syzkaller0\x00', @multicast}) 3.051674041s ago: executing program 7 (id=5799): r0 = socket$netlink(0x10, 0x3, 0x0) getsockopt$sock_cred(0xffffffffffffffff, 0x1, 0x11, &(0x7f0000000180)={0x0}, &(0x7f00000001c0)=0xc) syz_open_procfs$namespace(r1, &(0x7f0000000280)='ns/pid\x00') r2 = socket(0x10, 0x803, 0x0) sendmsg$IPVS_CMD_SET_INFO(r2, &(0x7f0000000b00)={0x0, 0x0, &(0x7f0000000ac0)={&(0x7f0000000a80)={0x14}, 0x14}}, 0x0) r3 = socket$inet_sctp(0x2, 0x5, 0x84) r4 = socket$inet6_sctp(0xa, 0x1, 0x84) socket$inet6(0xa, 0x2, 0x0) socket(0x10, 0x3, 0x0) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f07ebbeef, 0x8031, 0xffffffffffffffff, 0x215eb000) syz_emit_ethernet(0x2a, &(0x7f0000000000)=ANY=[@ANYBLOB="bbbbbbbbbbbb00000000000008060001080006040004bbbbbbbbbb02ac1414bb0180c2000000ac14140e"], 0x0) r5 = bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000540)={0x6, 0x3, &(0x7f0000000080)=ANY=[@ANYBLOB="1800000002000000000000000008082295"], &(0x7f00000003c0)='GPL\x00', 0x5, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x3}, 0x94) r6 = bpf$MAP_CREATE(0x0, &(0x7f0000000a00)=ANY=[@ANYBLOB="1e0000000800000009000000cd08000000100000", @ANYRES32, @ANYBLOB="020d0000000000000012ea000000000000000000", @ANYRES32=0x0, @ANYRES32=r2, @ANYBLOB="0000000008000000050000000300"/28], 0x50) r7 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r7, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000000)=@newlink={0x38, 0x10, 0x401, 0x0, 0x0, {0x0, 0x0, 0x0, 0x0, 0x32b}, [@IFLA_LINKINFO={0x18, 0x12, 0x0, 0x1, @gtp={{0x8}, {0xc, 0x2, 0x0, 0x1, [@IFLA_GTP_FD0={0x8}]}}}]}, 0x38}}, 0x0) r8 = bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000c00)={0x6, 0x24, &(0x7f0000001000)=@ringbuf={{0x18, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8}, {}, {}, [@ringbuf_output={{0x18, 0x1, 0x1, 0x0, r6}, {}, {}, {}, {}, {}, {0x7, 0x0, 0xb, 0x4, 0x0, 0x0, 0x2}}, @ringbuf_output={{}, {0x7, 0x0, 0xb, 0x8, 0x0, 0x0, 0xfffffffa}, {}, {}, {}, {}, {0x7, 0x0, 0xb, 0x4, 0x0, 0x0, 0x1}}, @call={0x85, 0x0, 0x0, 0x17}, @map_idx_val={0x18, 0x8, 0x6, 0x0, 0xe, 0x0, 0x0, 0x0, 0x7ff}], {{}, {0x7, 0x0, 0xb, 0x2, 0x0, 0x0, 0x1}, {0x85, 0x0, 0x0, 0x85}}}, &(0x7f00000008c0)='GPL\x00', 0x0, 0x6b, &(0x7f0000000900)=""/107, 0x41100, 0x4d, '\x00', 0x0, 0x25, r3, 0x8, &(0x7f0000000980)={0x4, 0x1}, 0x8, 0x10, &(0x7f00000009c0)={0x1, 0xd, 0x245d, 0x140000}, 0x10, 0x0, 0x0, 0xa, 0x0, &(0x7f0000000b40)=[{0x2, 0x1, 0x5, 0xb}, {0x4, 0x2, 0xc, 0x4}, {0x0, 0x3, 0x0, 0xc}, {0x3, 0x5, 0x5, 0x4}, {0x1, 0x1, 0xf, 0x4}, {0x3, 0x3, 0x6, 0x9}, {0x5, 0x2, 0x6, 0x9}, {0x4, 0x2, 0x9, 0xb}, {0x1, 0x5, 0x10, 0x8}, {0x2, 0x4, 0x4, 0x2}], 0x10, 0x10001}, 0xffffffffffffff1d) bpf$BPF_GET_BTF_INFO(0xf, &(0x7f0000000e00)={0xffffffffffffffff, 0x20, &(0x7f0000000dc0)={&(0x7f0000000cc0)=""/70, 0x46, 0x0, &(0x7f0000000d40)=""/113, 0x71}}, 0x10) bpf$BPF_LINK_CREATE_XDP(0x1c, &(0x7f0000000e40)={r8, 0x0, 0x25, 0x6, @val=@tracing={r9, 0xd}}, 0x20) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000600)={r5, 0x5, 0x50, 0x0, &(0x7f0000000000)="ff", 0x0, 0x36, 0x503, 0x0, 0x0, 0x0, 0x0, 0x2, 0xffff80fe}, 0x50) getsockopt$inet_sctp6_SCTP_MAX_BURST(r4, 0x84, 0x83, &(0x7f0000000000)=@assoc_value={0x0}, &(0x7f0000000240)=0x8) getsockopt$inet_sctp_SCTP_PR_ASSOC_STATUS(r3, 0x84, 0x73, &(0x7f00000003c0)={r10, 0x0, 0x10, 0x0, 0x9}, &(0x7f0000000380)=0x18) getsockopt$inet_sctp6_SCTP_ENABLE_STREAM_RESET(r2, 0x84, 0x76, &(0x7f0000000040)={r10, 0xadd}, &(0x7f0000000140)=0x8) getsockname$packet(r2, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000340)=0x14) r12 = socket$nl_route(0x10, 0x3, 0x0) r13 = bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000400)=ANY=[@ANYBLOB="0200000004000000080000000100000080000000", @ANYRES32, @ANYBLOB="24e600"/20, @ANYRES32=r11, @ANYRES32, @ANYBLOB="03000000040000000300dfff00"/28], 0x50) ioctl$EXT4_IOC_GET_ES_CACHE(r13, 0xc020662a, &(0x7f0000000480)={0x4, 0xb04e, 0x3, 0x2, 0x1, 0x0, [{0x4, 0x5, 0x3, '\x00', 0xa80}]}) sendmsg$nl_route(r12, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000380)=ANY=[@ANYBLOB="3c0000001000850600"/20, @ANYRES32=r11, @ANYBLOB="01000000020000001c0012000c000100626f6e64000000000c0002000800010005"], 0x3c}}, 0x0) sendmsg$nl_route(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000740)=@newlink={0x4c, 0x10, 0xffffff1f, 0x0, 0x80, {0x0, 0x0, 0x0, 0x0, 0x0, 0x3f00}, [@IFLA_LINKINFO={0x24, 0x12, 0x0, 0x1, @bridge={{0xb}, {0x14, 0x2, 0x0, 0x1, [@IFLA_BR_VLAN_FILTERING={0x5, 0x7, 0x6}, @IFLA_BR_VLAN_STATS_ENABLED={0x5, 0x29, 0x1}]}}}, @IFLA_MASTER={0x8, 0xa, r11}]}, 0x4c}, 0x1, 0x0, 0x0, 0x2000c0c1}, 0x40000) bpf$BPF_GET_MAP_INFO(0xf, &(0x7f0000000700)={r13, 0x58, &(0x7f0000000680)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, ""/16, 0x0}}, 0x10) sendmsg$nl_route(r0, &(0x7f0000000fc0)={&(0x7f00000002c0)={0x10, 0x0, 0x0, 0x90409210}, 0xc, &(0x7f0000000f80)={&(0x7f0000000e80)=@RTM_DELMDB={0xf8, 0x55, 0x0, 0x70bd28, 0x25dfdbfe, {0x7, r11}, [@MDBA_SET_ENTRY={0x20, 0x1, {r14, 0x1, 0x5, 0x1, {@ip4=@dev={0xac, 0x14, 0x14, 0x41}, 0x800}}}, @MDBA_SET_ENTRY={0x20, 0x1, {r11, 0x0, 0x3, 0x0, {@ip4=@multicast2}}}, @MDBA_SET_ENTRY={0x20, 0x1, {r11, 0x0, 0x1, 0x1, {@ip4=@empty, 0x86dd}}}, @MDBA_SET_ENTRY={0x20, 0x1, {r11, 0x1, 0xe09fec568dad93e4, 0x3, {@ip4=@loopback, 0x800}}}, @MDBA_SET_ENTRY={0x20, 0x1, {r11, 0x0, 0x1, 0x1, {@ip4=@private=0xa010100, 0x86dd}}}, @MDBA_SET_ENTRY={0x20, 0x1, {r11, 0x1, 0x1, 0x2, {@in6_addr=@local}}}, @MDBA_SET_ENTRY={0x20, 0x1, {r11, 0x1, 0x1, 0x4, {@ip4=@initdev={0xac, 0x1e, 0x0, 0x0}, 0x86dd}}}]}, 0xf8}, 0x1, 0x0, 0x0, 0x80}, 0x5) 2.507984644s ago: executing program 4 (id=5800): socket$netlink(0x10, 0x3, 0x0) syz_init_net_socket$bt_hci(0x1f, 0x3, 0x5) (async) close(0x4) r0 = socket$inet_mptcp(0x2, 0x1, 0x106) connect$inet(r0, &(0x7f0000003580)={0x2, 0x0, @dev}, 0x10) setsockopt$sock_int(r0, 0x1, 0x8, &(0x7f0000000100), 0x4) (async) mmap(&(0x7f0000002000/0x3000)=nil, 0x3000, 0x0, 0x30, 0xffffffffffffffff, 0xe674c000) (async) r1 = accept4$inet(r0, &(0x7f0000000480)={0x2, 0x0, @multicast1}, &(0x7f00000004c0)=0x10, 0x800) connect$inet(r1, &(0x7f0000000140)={0x2, 0x4e20, @initdev={0xac, 0x1e, 0x0, 0x0}}, 0x10) (async) syz_open_procfs$namespace(0x0, &(0x7f0000000400)='ns/cgroup\x00') mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f07ebbeef, 0x8031, 0xffffffffffffffff, 0x215eb000) (async) r2 = socket(0x1d, 0xa, 0x1000) (async) r3 = socket(0x10, 0x3, 0x0) ioctl$XFS_IOC_ATTRLIST_BY_HANDLE(r0, 0x4058587a, &(0x7f0000000300)={{r3, &(0x7f0000000080)='\x00', 0x30000, &(0x7f00000000c0)={@align=0x3, {0xfff0, 0x0, 0x2, 0x80000000}}, 0x80, &(0x7f0000000180)={@_ha_fsid}, &(0x7f0000000240)=0xe87e}, {[0x9, 0x9, 0x7, 0x5]}, 0x5, 0x33, &(0x7f0000000000)=""/51}) openat$cgroup_pressure(r4, &(0x7f0000000380)='io.pressure\x00', 0x2, 0x0) ioctl$sock_ipv4_tunnel_SIOCGETTUNNEL(r3, 0x891d, &(0x7f00000001c0)={'gre0\x00', 0x0}) (async) socket$nl_route(0x10, 0x3, 0x0) r5 = socket$nl_route(0x10, 0x3, 0x0) r6 = socket$nl_route(0x10, 0x3, 0x0) (async) r7 = openat$tun(0xffffffffffffff9c, &(0x7f0000000100), 0x8080, 0x0) ioctl$TUNSETIFF(r7, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x2}) (async) ioctl$sock_SIOCGIFINDEX(r6, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r6, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000180)=@newqdisc={0x44, 0x24, 0x605, 0x0, 0x0, {0x0, 0x0, 0x0, r8, {0x0, 0x1}, {0xffff, 0xffff}}, [@qdisc_kind_options=@q_gred={{0x9}, {0x14, 0x2, [@TCA_GRED_DPS={0x10, 0x3, {0x2, 0x0, 0x1}}]}}]}, 0x44}}, 0x0) sendmsg$nl_route_sched(r2, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000002c0)=@newqdisc={0x2c, 0x24, 0x200, 0xfffffffe, 0x25dfdbfc, {0x0, 0x0, 0x0, r8, {0x0, 0x1}, {0xffff, 0x1}, {0x1}}, [@TCA_EGRESS_BLOCK={0x8, 0xe, 0x7}]}, 0xfffffffffffffd57}}, 0x48000) (async) ioctl$sock_SIOCGIFINDEX(r5, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r5, &(0x7f0000000600)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000700)=@newqdisc={0x70, 0x24, 0x41f, 0x70bd28, 0x0, {0x0, 0x0, 0x0, r9, {0x0, 0x1}, {0xffff, 0xffff}}, [@TCA_STAB={0x4c, 0x8, 0x0, 0x1, [{{0x1c, 0x1, {0xb, 0x0, 0x1, 0x5, 0x1, 0x400, 0x1, 0x1}}, {0x6, 0x2, [0x7ff]}}, {{0x1c, 0x1, {0x3, 0x7, 0xb3c, 0xfa0, 0x2, 0x800, 0x0, 0x2}}, {0x8, 0x2, [0x7, 0x3]}}]}]}, 0x70}}, 0x0) r10 = socket$unix(0x1, 0x1, 0x0) ioctl$sock_inet_SIOCSIFFLAGS(r10, 0x8914, &(0x7f0000000100)={'syzkaller0\x00', 0x1}) (async) socket$inet(0x2, 0x2, 0x0) 2.37657638s ago: executing program 4 (id=5801): r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = socket$inet(0x2, 0xa, 0x0) ioctl$sock_inet_SIOCSIFADDR(r1, 0x891b, &(0x7f0000000000)={'lo\x00', {0x2, 0xffff, @loopback}}) pipe(&(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) write$cgroup_subtree(r2, &(0x7f0000000700)=ANY=[], 0xfe33) sendmsg$nl_route(r2, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000100)={&(0x7f00000002c0)=ANY=[@ANYBLOB="240000001400050000000000000000002d000000010000000500010008000000"], 0x24}}, 0x44) r3 = socket$nl_generic(0x10, 0x3, 0x10) r4 = syz_genetlink_get_family_id$tipc2(&(0x7f00000041c0), 0xffffffffffffffff) sendmsg$TIPC_NL_BEARER_GET(r3, &(0x7f0000000180)={0x0, 0x0, &(0x7f00000005c0)={&(0x7f00000007c0)={0x28, r4, 0x1, 0x70bd28, 0x25dfdbfc, {}, [@TIPC_NLA_BEARER={0x14, 0x1, 0x0, 0x1, [@TIPC_NLA_BEARER_NAME={0xd, 0x1, @udp='udp:syz0\x00'}]}]}, 0x28}}, 0x24000880) sendmsg$nl_route(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000200)=ANY=[@ANYBLOB="2c0000001800050000000000000000002d000000000000000101000005000100080000000800040001000000"], 0x2c}}, 0x0) socket$netlink(0x10, 0x3, 0x0) r5 = socket(0x2d, 0x2, 0x0) ioctl(r5, 0x89e2, &(0x7f0000000300)="0100000008000000") sendmsg(r5, &(0x7f0000000400)={&(0x7f0000000500)=@generic={0x2d, "00000100000008011800"}, 0x10, &(0x7f0000000600)=[{&(0x7f0000000700)='\x00', 0x1}], 0x1}, 0x0) r6 = socket$nl_generic(0x10, 0x3, 0x10) r7 = syz_genetlink_get_family_id$ipvs(&(0x7f0000000080), r3) sendmsg$IPVS_CMD_SET_CONFIG(r6, &(0x7f0000000940)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x80}, 0xc, &(0x7f0000000900)={&(0x7f0000000800)={0xdc, r7, 0x1, 0x70bd2b, 0x25dfdbfd, {}, [@IPVS_CMD_ATTR_DEST={0x48, 0x2, 0x0, 0x1, [@IPVS_DEST_ATTR_TUN_TYPE={0x5, 0xd, 0x1}, @IPVS_DEST_ATTR_TUN_PORT={0x6, 0xe, 0x4e21}, @IPVS_DEST_ATTR_INACT_CONNS={0x8, 0x8, 0x9}, @IPVS_DEST_ATTR_TUN_TYPE={0x5, 0xd, 0x1}, @IPVS_DEST_ATTR_ADDR={0x14, 0x1, @ipv6=@remote}, @IPVS_DEST_ATTR_ACTIVE_CONNS={0x8, 0x7, 0x1}, @IPVS_DEST_ATTR_PORT={0x6, 0x2, 0x4e20}]}, @IPVS_CMD_ATTR_TIMEOUT_UDP={0x8, 0x6, 0x80000000}, @IPVS_CMD_ATTR_DEST={0x1c, 0x2, 0x0, 0x1, [@IPVS_DEST_ATTR_ACTIVE_CONNS={0x8, 0x7, 0x5}, @IPVS_DEST_ATTR_WEIGHT={0x8, 0x4, 0x5}, @IPVS_DEST_ATTR_U_THRESH={0x8, 0x5, 0x9}]}, @IPVS_CMD_ATTR_TIMEOUT_TCP={0x8, 0x4, 0x4}, @IPVS_CMD_ATTR_TIMEOUT_TCP={0x8, 0x4, 0x80000000}, @IPVS_CMD_ATTR_TIMEOUT_TCP={0x8, 0x4, 0x45}, @IPVS_CMD_ATTR_SERVICE={0x20, 0x1, 0x0, 0x1, [@IPVS_SVC_ATTR_ADDR={0x14, 0x3, @ipv6=@private2={0xfc, 0x2, '\x00', 0x1}}, @IPVS_SVC_ATTR_PROTOCOL={0x6, 0x2, 0x2f}]}, @IPVS_CMD_ATTR_TIMEOUT_TCP={0x8, 0x4, 0x400}, @IPVS_CMD_ATTR_DAEMON={0x1c, 0x3, 0x0, 0x1, [@IPVS_DAEMON_ATTR_MCAST_PORT={0x6, 0x7, 0x4e21}, @IPVS_DAEMON_ATTR_SYNC_MAXLEN={0x6, 0x4, 0x1}, @IPVS_DAEMON_ATTR_MCAST_GROUP={0x8, 0x5, @remote}]}]}, 0xdc}, 0x1, 0x0, 0x0, 0x408c2}, 0x1080) r8 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000040), 0xffffffffffffffff) r9 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX_80211(r9, 0x8933, &(0x7f00000003c0)={'wlan0\x00', 0x0}) sendmsg$NL80211_CMD_JOIN_MESH(r9, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000480)={0x34, r8, 0x1, 0x70bd29, 0x25dfdbfc, {{}, {@val={0x8, 0x3, r10}, @void}}, [@NL80211_ATTR_MCAST_RATE={0x8, 0x6b, 0xb3e}, @NL80211_ATTR_MESH_CONFIG={0xc, 0x23, 0x0, 0x1, [@NL80211_MESHCONF_HWMP_PATH_TO_ROOT_TIMEOUT={0x8, 0x17, 0x10}]}, @NL80211_ATTR_MESH_SETUP={0x4}]}, 0x34}, 0x1, 0x0, 0x0, 0x20040000}, 0x4004) r11 = syz_genetlink_get_family_id$ethtool(&(0x7f0000000140), r3) sendmsg$ETHTOOL_MSG_STRSET_GET(r9, &(0x7f0000000280)={&(0x7f00000000c0)={0x10, 0x0, 0x0, 0x80000}, 0xc, &(0x7f0000000240)={&(0x7f00000001c0)={0x18, r11, 0x100, 0x70bd29, 0x25dfdbfe, {}, [@ETHTOOL_A_STRSET_COUNTS_ONLY={0x4}]}, 0x18}, 0x1, 0x0, 0x0, 0x894}, 0x800) 515.324535ms ago: executing program 0 (id=5802): r0 = openat$nci(0xffffffffffffff9c, &(0x7f0000000080), 0x2, 0x0) r1 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) ioctl$XFS_IOC_PATH_TO_HANDLE(r0, 0xc0385869, 0x0) r2 = syz_genetlink_get_family_id$nfc(&(0x7f0000000100), r1) ioctl$IOCTL_GET_NCIDEV_IDX(r0, 0x0, &(0x7f00000000c0)=0x0) sendmsg$NFC_CMD_DEV_UP(r1, &(0x7f0000000200)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000d80)=ANY=[@ANYBLOB="1c000000", @ANYRES16=r2, @ANYBLOB="010426bd7000f8dbdf250200000008000100", @ANYRES32=r3], 0x1c}}, 0x4008054) r4 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r5 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r6 = syz_genetlink_get_family_id$nfc(&(0x7f0000000fc0), r4) sendmsg$NFC_CMD_SE_IO(r5, &(0x7f0000001180)={0x0, 0x0, &(0x7f0000001140)={&(0x7f0000000280)=ANY=[@ANYBLOB='$\x00\x00\x00', @ANYRES16=r6, @ANYBLOB="01002cbd7000fddbdf251b000000080015000200000008000100", @ANYRES32=0x0, @ANYBLOB="4b5002279595c53e34b68d392fbd8f904238c79fc1ebad0d7baa5f351845bcf213037d249c9150b252ec5b10e7095bed5e4fb6932de1f6bbe0cd26b62a318c8497b811efb4f17e87a9082206d3d444206cedce7313abfdef3c7581ba2098d50886d87c5b5432646aa8ab9cce2eb7192117d50884023a532e13d63d36cc12bada00"/139], 0x24}, 0x1, 0x0, 0x0, 0x44040}, 0x2400cc84) ioctl$IOCTL_GET_NCIDEV_IDX(0xffffffffffffffff, 0x0, &(0x7f0000000080)=0x0) ioctl$IOCTL_GET_NCIDEV_IDX(0xffffffffffffffff, 0x0, &(0x7f00000000c0)=0x0) r9 = openat$nci(0xffffffffffffff9c, &(0x7f0000000240), 0x2, 0x0) r10 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r11 = syz_genetlink_get_family_id$nfc(&(0x7f0000000100), r10) ioctl$IOCTL_GET_NCIDEV_IDX(r9, 0x0, &(0x7f00000000c0)=0x0) sendmsg$NFC_CMD_DEV_UP(r10, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000080)=ANY=[@ANYBLOB="1c000000", @ANYRES16=r11, @ANYBLOB="010026bd7000fcdbdf250200000008000100", @ANYRES32=r12], 0x1c}}, 0x840) ioctl$IOCTL_GET_NCIDEV_IDX(0xffffffffffffffff, 0x0, &(0x7f0000000100)=0x0) r14 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r14, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000003c0)=@updpolicy={0xc0, 0x19, 0x1, 0x0, 0x0, {{@in6=@private2, @in=@local, 0x0, 0x3, 0x0, 0x0, 0xa, 0x0, 0x0, 0x5e}, {0x0, 0x800, 0x0, 0x7, 0x0, 0x0, 0x6}, {0x0, 0x0, 0x3}, 0x0, 0x6e6bb1, 0x0, 0x1}, [@XFRMA_IF_ID={0x8, 0x1f, 0x4}]}, 0xc0}}, 0x0) sendmsg$NFC_CMD_DEV_DOWN(r1, &(0x7f00000001c0)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x20000000}, 0xc, &(0x7f0000000180)={&(0x7f0000000140)={0x3c, r6, 0x10, 0x70bd29, 0x25dfdbfb, {}, [@NFC_ATTR_DEVICE_INDEX={0x8, 0x1, r7}, @NFC_ATTR_DEVICE_INDEX={0x8, 0x1, r8}, @NFC_ATTR_DEVICE_INDEX={0x8}, @NFC_ATTR_DEVICE_INDEX={0x8, 0x1, r12}, @NFC_ATTR_DEVICE_INDEX={0x8, 0x1, r13}]}, 0x3c}, 0x1, 0x0, 0x0, 0x1}, 0x8850) r15 = socket(0x10, 0x803, 0x0) ioctl$SIOCSIFMTU(r15, 0x8922, &(0x7f0000000040)={'veth0_vlan\x00', 0x7e}) 513.829131ms ago: executing program 4 (id=5803): r0 = socket(0x10, 0x2, 0x0) r1 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r1, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000001680)=ANY=[@ANYBLOB="140000001000010000000000000000000500000a28000000000a030000000000000000000a00000708000240000000020900010073797a31000000002c000000030a010100000000000000000a0000070900010073797a31000000000900030073797a320000000014000000110001"], 0x7c}, 0x1, 0x0, 0x0, 0x40001}, 0x4040850) sendmsg$NFT_BATCH(r1, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000cc0)={&(0x7f0000000140)={{0x14, 0x10, 0x1, 0x0, 0x0, {0x3}}, [@NFT_MSG_NEWCHAIN={0x30, 0x3, 0xa, 0x801, 0x0, 0x0, {0xa, 0x0, 0x7}, [@NFTA_CHAIN_TABLE={0x9, 0x1, 'syz1\x00'}, @NFTA_CHAIN_NAME={0x9, 0x3, 'syz2\x00'}, @NFTA_CHAIN_COUNTERS={0x4}]}], {0x14, 0x11, 0x1, 0x0, 0x0, {0x7}}}, 0x58}, 0x1, 0x0, 0x0, 0x4000000}, 0x20008894) r2 = syz_genetlink_get_family_id$ethtool(&(0x7f0000000040), 0xffffffffffffffff) sendmsg$ETHTOOL_MSG_WOL_SET(r0, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000080)={0x14, r2, 0x1}, 0x14}}, 0x0) 462.813914ms ago: executing program 6 (id=5804): r0 = socket$netlink(0x10, 0x3, 0x4) write(r0, &(0x7f0000001600)="2700000014000707030e0000120f0a000000008a151f7508003900000000000000000000000200", 0x27) (async) sendmsg$RDMA_NLDEV_CMD_PORT_GET(r0, &(0x7f0000000140)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x1000000}, 0xc, &(0x7f0000000100)={&(0x7f0000000040)={0xa0, 0x1405, 0x4, 0x70bd28, 0x25dfdbfc, "", [{{0x8, 0x1, 0x2}, {0x8, 0x3, 0x3}}, {{0x8}, {0x8}}, {{0x8}, {0x8, 0x3, 0x2}}, {{0x8, 0x1, 0x1}, {0x8}}, {{0x8}, {0x8}}, {{0x8, 0x1, 0x2}, {0x8, 0x3, 0x1}}, {{0x8}, {0x8, 0x3, 0x2}}, {{0x8, 0x1, 0x2}, {0x8, 0x3, 0x1}}, {{0x8, 0x1, 0x80}, {0x8}}]}, 0xa0}, 0x1, 0x0, 0x0, 0x4000000}, 0x4000000) recvmmsg(0xffffffffffffffff, &(0x7f0000001240)=[{{0x0, 0x0, &(0x7f0000000980)=[{0x0}, {&(0x7f00000006c0)=""/227, 0xe3}], 0x2}, 0x2a45}], 0x1, 0x40000041, 0x0) r1 = socket$inet_tcp(0x2, 0x1, 0x0) setsockopt$inet_tcp_TCP_REPAIR(r1, 0x6, 0x13, &(0x7f0000000080)=0x1, 0x4) setsockopt$inet_tcp_TCP_REPAIR_QUEUE(r1, 0x6, 0x14, &(0x7f0000000100)=0x2, 0x4) connect$inet(r1, &(0x7f0000000040)={0x2, 0x4e20, @dev={0xac, 0x14, 0x14, 0x58}}, 0x10) (async, rerun: 64) sendto(r1, &(0x7f0000000140)='A', 0xfffff, 0x40008c1, 0x0, 0x0) (async, rerun: 64) recvmmsg(r1, &(0x7f0000000d00)=[{{0x0, 0x0, &(0x7f0000000000)=[{&(0x7f0000001d40)=""/4096, 0x1000}], 0x1}, 0x1}], 0x256, 0x10022, 0x0) mmap(&(0x7f0000ffa000/0x4000)=nil, 0x4000, 0x1000000, 0x40132, 0xffffffffffffffff, 0x32e64000) 402.699805ms ago: executing program 4 (id=5805): r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000100)=ANY=[@ANYBLOB="400000001e000100d14a0000fcdbdf250700", @ANYRES32, @ANYRES32=r0], 0x40}, 0x1, 0x0, 0x0, 0x8044044}, 0x20000080) r1 = socket(0x1d, 0x2, 0x6) ioctl$ifreq_SIOCGIFINDEX_vcan(r0, 0x8933, &(0x7f0000000000)={'vxcan0\x00', 0x0}) bind$can_j1939(r1, &(0x7f0000000040)={0x1d, r2, 0x8000000000000003}, 0x18) setsockopt$SO_J1939_PROMISC(r1, 0x6b, 0x2, &(0x7f0000000040)=0x1, 0x4) 279.537899ms ago: executing program 7 (id=5806): bpf$MAP_CREATE(0x0, &(0x7f0000004440)=@bloom_filter={0x1e, 0x0, 0x1f, 0x0, 0x1005}, 0x48) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000500)={&(0x7f00000000c0)=@newlink={0x38, 0x10, 0x439, 0x70bd23, 0x25dfdbfb, {0x0, 0x0, 0x0, 0x0, 0xb881}, [@IFLA_LINKINFO={0x18, 0x12, 0x0, 0x1, @ip6gre={{0xb}, {0x8, 0x2, 0x0, 0x1, [@IFLA_GRE_COLLECT_METADATA={0x4}]}}}]}, 0x38}, 0x1, 0x0, 0x0, 0x24048007}, 0x4040844) r0 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000180)={&(0x7f00000000c0)=ANY=[@ANYBLOB="3800000041000701fefffffffeffffff017c0000040042800c00018006000600655800000a0002"], 0x38}, 0x1, 0x0, 0x0, 0x4048011}, 0xc000) 279.007569ms ago: executing program 6 (id=5807): r0 = bpf$MAP_CREATE(0x0, &(0x7f00000000c0)=ANY=[@ANYBLOB="1b00000000000000000000000080000000000000", @ANYRES32, @ANYBLOB="00000000000000000000000000000d00b95a9f9f", @ANYRES32=0x0, @ANYRES32, @ANYBLOB='\x00'/28], 0x48) r1 = socket$nl_generic(0x10, 0x3, 0x10) r2 = syz_genetlink_get_family_id$batadv(&(0x7f0000000100), 0xffffffffffffffff) syz_genetlink_get_family_id$tipc2(0xfffffffffffffffe, 0xffffffffffffffff) sendmsg$BATADV_CMD_GET_DAT_CACHE(r1, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000200)={&(0x7f00000002c0)={0x1c, r2, 0x305, 0x0, 0x0, {}, [@BATADV_ATTR_MULTICAST_FANOUT={0x8, 0x3c, 0xffff}]}, 0x1c}}, 0x14) r3 = socket$nl_audit(0x10, 0x3, 0x9) ioctl$sock_SIOCADDRT(r3, 0x890b, &(0x7f00000001c0)={0x0, @hci={0x1f, 0x2, 0x2}, @generic={0xf, "e4de0ba4b3a4c08408a0b086c1e5"}, @l2={0x1f, 0x7, @any, 0x4, 0x1}, 0x3, 0x0, 0x0, 0x0, 0xd1c, 0x0, 0x1, 0xd, 0x3c7e}) socket(0x2b, 0x3, 0xffff) bpf$BPF_GET_BTF_INFO(0xf, &(0x7f0000000180)={0xffffffffffffffff, 0xfffffffffffffff3, &(0x7f0000000140)={&(0x7f0000000040)=""/16, 0x10, 0x0, &(0x7f0000000280)=""/61, 0x35}}, 0x10) write(r0, &(0x7f00000005c0)="96bbff4179274f28397ef587d898255de1a2914b8f38e64b1d4e8a4e8edf91669b868934ec6dc6e85121491e82cae4fccf00f2eb30bdaf5ba331cb236719f88d14619b82ab04e266a6017b6f8aefc7ea5b94f282c91686b97b9fc4646d3085c4dbafdbc34c17d6719ce14454ca991f875d34da57fa44897862bce058d8c8160c80206d86ac4bebbb00d8a5a39da1402ccc642f476ea3c0c8262bab7f05c81970ced5fc1b946a63f1212ee90a5931c187c23066d963fe33d442094e280f2e22357001a8537a0d339e2b1526b8a50140a142531a6822058cda426e74963318c3380dcfbb2e614251899935ef6ce1fffce040d96c53dced4f1f417fcf4793d32b859100ab51c666e9064ddf7c4defcd74b5a31ad9f8eedde51e5861de71d00c5aca85e5018a7091d3e56225ad1a73a039698f0ea5597aa834b582d06d0d563a46ed8a6fa133d319c91737348bc6900b3e0b84202e3da6a1804c49acf76e8cfd6f0c6ec804e83ef56e7f8e070a82e0819c2cdfdb998382dfb8a47afc512fbbb6790a785ff653c5cbe0339ef88aac6390b094645faa53dd63f464a407055f5c45cf21b93f7ff0b88d7d4bed7409fe2cfd474ef7535ea890e56dc38cac96d84e4ee849e848cb5b83a147d17a3bc865b8248e37f4162348b6432f18aa9eb035339593d3560e3cc9770be81d53f9bf6e589e26560c000adc07badb24026bea7a83b3fbcd7ce30e067e1f30baca3dc9205420482856920efad0f1e7f3941b93389a441bb8f02394bb437efa2d3bb69b1f26f592202bfb241df647fdead1c558d671849fe8f53ec20d183402f2c31d5849766ae53d9657456fa804d06b769fc9108faaa2d4c68461a764f5cabaca3e33d006b25a51af0014942025418bcd1955996172e738b2690f86f149c70ac5c31ad4faa0b3480b6b4b2711742684646a1cf1c55c1dc5f600e25657c0c99a6620768f4f232f2bb5acc149063f47f8ebb2d8772eb1c123fdd217aabf67560aa5d10060716dd6457dc3a0c59f0d19aa8d5a93a02dce300e57629cd094a2fe2ff050414dd674c160378555ab6d38d40f49fe78c537720ff42c091c9e466aacfc52ec7544ab443abefde3bc7104b2f373c31866d94f7655b829ffe5890804901209bbd3393adbe55d0b0a8cb6c0cf583d9bb04dce37ea2e9fefe629856047d09720c1323ad56e65e0c261929efa685444719265eb1ca1ef773e42a90bd5910b1d4bf2edb8de046045efa07d50854a14231ba8af04dc607ce036b18a8425f40aa3b07a33c93a9adc774658c28a2e25ff4ada32d1700e408d3eb8ac9f1f41da8b5eb8ef30acfc0467a2e6243d88f8d80c13475e8e038cbe309ef4ba94ff3e74bed600f634b9f8cbdda1ff97569a8a780bd106f600bb17eb784fa5741665917f40b7a31807f731de62956e02b579348907a337f5b09d93a6957b9fb7750e39ea84c28352fda4c27ec006488ab1ac84b42d38a8e8c4c392948d2206c93e40124c836dae8b7d1efeddad4ace4d479ccc371c3bb0b9f107cecdae3b6c48d304c2a9ecab365a1ea66d5e403b9ffac230403b6bd2020a3bb5edd13be2c3d06711bd2b221e823bb2ba0c64ca46094d3c79fdbd85a038df2b87fcf9bc5069845bc0ce7f774fd9b7c8d6f96e81a8db5ace80cb22dedc680951a54ed983d1b50865dbbe3117c268327b47dbf47e2495fd1b4723114602fd82ffbf579fd92e2647cba17dc292d6517b2e95b5e70fe09e094eb5247fff8cef558f952cdf03900a0f1d47e45283d19421cafa5bca3483baf19b28d9b804a421bf09cc534ea4599550580d39fe246ec4ad85ffc1c3d24b2861007c4e80e26f755cca2b5584a2bed960357114dabed20aa949363169da0be5a68fde4d2bf711c8422cabed2eec05ac6b1edb3fcb670c8bf207c77b902ee5c1c1f4403c97b836aaaf2055187c536d44bc99099aec38bebe774ee7f9278f39c580426cc3b19ee636e8150230621df445efd7457d8dd08e5b0c186562e256c85af53a1c9027bd13ff278600c0280e708e05e02fc89bb9ff9d9b432713b3b9453348a75f4312758955cd1e98e9ca6bbd663e08f1d92e2f92f5ea3bddc4b7e4c9cea39851ec91e5ae7f017f0bf631c74691288d74aa2f23b007231fca3008564ae8cd994c6ce39c5d036592d93be809ed2f5910dc026516bc94526c06d1bbf18a7dd2d850e645116bcc53b011bef262c705bc603ef00c57e265a916c2f73325a1552ffbbfea20abc4c90b656022a9b87f7ffc0c205e8ee39a29cf395d8950c45a0762e45264466f9e023c8f9b6e110cce9c37d02d2bc0593c89a753e2d4d9829cf7f6691dbdc825e1a6833ae17b874a960203c054b9461f4d72b40713dfdeadec428d8ba47c9ac881484c14e733101ec3112ef9fdc57dd2f36d1ecdf35e0163ae6b5136206b346ebb0ad95031f94f957d159a59658b6631f7c408882bfdb411750aa3b806ae5ecf6771207238d781074e4d2a6466d063e1bf6647d7797a77d9a3a160a95996890b8cb958c96da3b3da0c534ea8587d83a604907fad6dcdba0c9eea4ba034ee4868143f9412c3a5abe918d249745612781c62e6fbe865f9ced200d0547285bef0984738f53f43a2fac42fb07277e0116df140e59406c02b562c72711b24e5d96232055a339c8dac2da95aab5f701e5088b4334b873b515e415c342f9db31eae0d30ce9953d3a96677975cfd2d687df87b9a2f8bf0ba6b4a5592303d91e10e80b057e7909e5ff442cbe45a576069cb6fe3a654734f148f7862f6e085056f36947db37da28d74e66fb26ea76a055ad00da3f22c3259c14a5989885bfd57071c162a4c67e0d90ab98d1ba85764e2e835937fed2a748a86d41b2e4962438746f48d8d76e1e6ec4798a188e868a9818f71f55088a927fd80dc205df80d54fbaeec6bf20cfcd2af179738397773dcf33d79631dda5dff7a72d67a8a74b8bb6a9a60e7f8279c646606df97c11464295ec81db4e1a09f6a57bf6f4cf945acfd4abfe3c4aecbf5a6776d42a934445ccc81f8274bef1ec757c6396e489db7272d83b0566461f48186fc99fa43c00862f190dba42b05f09678b015cadd8c18ed8cf8ec539ea43f643bf051dc1503d5122c49b23f9d644b81b7cafce8450626ebbc3cb3ce12df82a99003ea83a18430931755329af7eeba3c24f67048c0f24f669ed3231799328599b06d3a3dd2a31f8b5fbeacc0633578bf1be7ecea973a07ebe4f08664cf5c0035778872b9e539f15b913d840b716081e4ffb4dfa699053653b9dfa2faa6630b9282772e792bb6db0ea8ae6039539cead1045ada154b49ae821694faecd832854c7e71b2495782d8c1e320d16bc4c9b78de33be081567165b5c4d2b85ea6c06e5af833c46323260598faa5a23c676ab35c7454e53bfcb6d32fa86db5e66fb3045d5b698adf1932b58970a2dac3cf80c4db7c6f6292c815c1d9b664169a94c44d298cb8f3b7c5a1bcc96003d9fec18fe525f841b17d334275472e512f8ba2d069a5b45357a816ef60d14b2d5a0456c712cd31cc5449c5feb86030cb74e1a827bd548ff8a0d7bf574e4c9306511b92346210896ad9859365d35c1d41cd2c71bb1d085d7adc2fb57c955f4c4dbbf54876b073858c18ea1bdb1a76600173198924dd2472749b4e5908aca05914b0af9e98903eeb44c28802b412d866afcb7763a003caab0f136830f4a01264ffca8d6bc55cf9d60446cd77a1e51c4929155ef93baa9e792bd482093fd90e375444adaf2e6995587810e5c11c335a94a8920d2e7467850b8ceb1d747329b023e5e618044a1103d8ce40056a8deb71f40a02c2bbf71c2842834ef954dd7aea387e81ca7c3564b8804b283fb00b4eb9131fe79dad8c848b9d65835ab2779e42c826787b7bc097c16ceec1a046cd168d55fb83be664b4899cacac7980ace60aaf00b6f9fe799bd3504a4c27d63d845da45805aefc0d2989e01da47ee89687700a6cf816a91bc3cd4d25a632135dc67519bff1bcdd4ca2041776f0fb96e4c6e32cc939c6a074461021be3bc5b41a96e4b747c2b49e2243141ac2681942b223f719612702eaddb5f1fb198f9aba338df8503ea649aea6bfad48248be2b0769fc7659cd3586bf7a1faa5259d26d87409393edd94eea10bac1ec0d87f23c9c9c2adb09f4e2e5aa18466ce0e6a1366722f540451dd1bf4a89968f748b179787434ece91c575c78b738400642205a56bb9933ebdf0dd278bea8f5cec45af4b66b6a4495fb55b4f0860e8f9df82a1801185a647af7e0de82e7f1ef32bf6cedad3fb57862f2fbf523f2a26c5092c5d8faecba7160e06a6046334c249eef85c881f1fa1a5de1e7e1b7ea6f890e0b2577a30ffafa651d55b233afa62f1282a02791096adb27ff5047294e798510eccb9d4b727ad9efd40744491c598f0fbbbba7cb38ff50152c598be7d4534bbab85ac14f9ff7e5cb2643fe1eacae4bd998dc7af2738972bd3bee0ac119adf7f609a33da0722df5c78cce7bfab9d9f921eeea82c7533e0eca79e89ed83a1f9ad30cf0ff4f1ae75918bd46b4686ade3f17bf44ed22a0835593f0faa3c84a7836d94ba588f386d5f97f8a6246e033611fe2c38a40ee545c8ca93029d8c56f480e7d5fc2b7167991038f2f1c38ac46fe6f485ca9f15f33b35c92c969611334082f7c16bfc3868bf6d4b9132f17a495c5368495826b26d28b6e0948fd1223ac7ec429516380d936dd8b4c4c6bc2ba7033195f6630d09f2cf4178ccca50d7e4d2bbcfdfe9cb4947272402ae02b46abedd81621cd564c3a218d19daa6ddf5bde4ffb9d95be391e54f86a3b81acb4589115e43695f273357c71ff252c33ced09e269fb617fdaffc8b8f8a322bef8cb47731dc56ef7054a1267654abf01436ef040ca0ba75db49e9d5e47f5468d3e76c11b5e2a5d3b1643a1630200ba3fb031921e5cd948975a0f20a0a8d3844a4aa94a87f7b05b652e660f835e3b8652e2de3e922e16458fea62b4e78d8b5a3e1edae4718e08d6fc739c80d9274192cd4d76da30adbc6db27010638e97b7be6fe55e19bcad0f782d902837bb68dff1107fa7cedce5cb88b4efe916b006774d071b75c0dc924d88845619ec337b6386a2015c48c90fc111897e41e8f9816f0f6d9b27f5702c5e6c6adc49e449fad53316d55f494e4a28a8f7a65128f4a2edfa451724390a099e995f146583ef59d495a00c733fe89a6c4e8ed6da4342c1751fa885609cb0117c7e01977c092394209282f62209c0f83ea22a9450cc9d31452ec6458c8b49dfc9b763057fc79cbe5d11a009165b246708e2b7fc55d39958dd270e3ddede305a267225024c72aa23661f62450bb2f87ffdc9fe92ced82d8925c854ceed98189b50052002b1c5f2f6480542dcf705040c5105d7ebc2a76822400ee981a5d1b86fb57bb29fa2c0f6d43bb8b913bda891e3764b1da683bf0da4e86a53575fdb3ffcd88f02f5de3d633cafa776efe0e518db1fad5b3b6c937d46fa8292eaad933728581dcb7add859c46243868debe6bfdaf98652c2e52c5db2eb3e8623e89f50e84debe2b52cd23b462ac36f7673ac0b7de32fffcdfed9c617aa620f162c6f36301f9c27f6f65f7375a5e31b4b603adb87d0f7b0ac62bee7b63bf00cdd9a20fe1d729fbf876ce8249b71bfbfccc03618af3a9259b04eacf5e307677dce59227b967c05809eb542ce39bbba063eb47c1482bcb964d24db056b4d5625083d9c8ec0bdeef4cf48b5364d6848270bb3cf3e521442bdb9ce90000de84cd543b9ae02532e699c1c1b8d35b978ec7", 0x1000) r5 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='blkio.bfq.io_service_bytes_recursive\x00', 0x275a, 0x0) mmap(&(0x7f0000ae0000/0x3000)=nil, 0x3000, 0x0, 0x12, r5, 0x0) bpf$PROG_LOAD(0x5, &(0x7f0000000500)={0xc, 0x1c, &(0x7f0000000400)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b702000014000000b7030000000000008500000083000000bf090000000000001509010000000000b500f8ffffff000018110000", @ANYRES32=r0, @ANYRESDEC=r0, @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b7040000000000008500000082000000bf91000000000000b7020000000000008500000084000000b70000000000000095"], &(0x7f0000000000)='syzkaller\x00', 0x1, 0x0, 0x0, 0x0, 0x8, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, r4, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) 246.459692ms ago: executing program 7 (id=5808): bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000d40)={&(0x7f0000000b80)={{0xeb9f, 0x1, 0x0, 0x18, 0x0, 0x10, 0x10, 0x7, [@int={0x6, 0x0, 0x0, 0x1, 0x0, 0x27, 0x0, 0x10, 0x2}]}, {0x0, [0x6f, 0x5f, 0x5f, 0x0, 0x30]}}, 0x0, 0x2f, 0x0, 0x1, 0xd6f}, 0x28) (async) bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000d40)={&(0x7f0000000b80)={{0xeb9f, 0x1, 0x0, 0x18, 0x0, 0x10, 0x10, 0x7, [@int={0x6, 0x0, 0x0, 0x1, 0x0, 0x27, 0x0, 0x10, 0x2}]}, {0x0, [0x6f, 0x5f, 0x5f, 0x0, 0x30]}}, 0x0, 0x2f, 0x0, 0x1, 0xd6f}, 0x28) r0 = socket$nl_route(0x10, 0x3, 0x0) pipe(&(0x7f0000000280)) (async) pipe(&(0x7f0000000280)={0xffffffffffffffff, 0xffffffffffffffff}) socket$nl_route(0x10, 0x3, 0x0) (async) r2 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f0000000c80)={'veth0_to_bridge\x00', 0x0}) sendmsg$nl_route_sched(r2, &(0x7f0000001200)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000840)=@newqdisc={0x38, 0x24, 0x4ee4e6a52ff56541, 0x0, 0x0, {0x0, 0x0, 0x0, r3, {}, {0xffff, 0xffff}, {0x1, 0x2}}, [@qdisc_kind_options=@q_fq={{0x7}, {0xc, 0x2, [@TCA_FQ_FLOW_MAX_RATE={0x8, 0x12}]}}]}, 0x38}, 0x1, 0x0, 0x0, 0x44010}, 0x40000) socket$netlink(0x10, 0x3, 0x0) (async) r4 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r4, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000200)=@newqdisc={0x30, 0x24, 0x405, 0x0, 0x0, {0x0, 0x0, 0x0, 0x1, {0x0, 0xffff}, {0xfff1, 0xffff}}, [@qdisc_kind_options=@q_ingress={0xc}]}, 0x30}}, 0x0) sendmsg$nl_route_sched(r4, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000000400)={&(0x7f0000000280)=@newtfilter={0x38, 0x2c, 0x405, 0x0, 0x0, {0x0, 0x0, 0x0, 0x1, {0x1}, {0xfff1, 0xffff}, {0x3, 0x1}}, [@filter_kind_options=@f_fw={{0x7}, {0xc, 0x2, [@TCA_FW_CLASSID={0x8, 0x1, {0x7}}]}}]}, 0x38}}, 0x0) sendmsg$nl_route_sched(r4, &(0x7f0000000600)={0x0, 0x0, &(0x7f0000000700)={&(0x7f0000000800)=@delqdisc={0x24, 0x25, 0x5, 0x0, 0x0, {0x0, 0x0, 0x0, 0x1, {0x0, 0xffff}, {0xfff1, 0xffff}}}, 0x24}}, 0x0) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x1f, 0x13, &(0x7f00000009c0)=ANY=[@ANYBLOB="1800000001000000000000000000000018010000786c6c250000000000202020630af8ff00000000bda100000000000026010000f8ffffffb702000008000000b703000000000000850000000800000018010000202070250000000000202020dd00f5ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000000600000095"], &(0x7f0000000340)='syzkaller\x00', 0x0, 0x0, 0x0, 0x41000, 0x59d9b979e03a5f0, '\x00', 0x0, @fallback=0x9, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @value=r1}, 0x94) syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) (async) r5 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r6 = openat$tun(0xffffffffffffff9c, &(0x7f0000000000), 0x2, 0x0) ioctl$TUNSETIFF(r6, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x101}) socket$nl_route(0x10, 0x3, 0x0) (async) r7 = socket$nl_route(0x10, 0x3, 0x0) r8 = socket$unix(0x1, 0x1, 0x0) ioctl$sock_SIOCGIFINDEX(r8, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) r10 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r10, 0x8933, &(0x7f0000000000)={'vxcan1\x00'}) (async) ioctl$sock_SIOCGIFINDEX(r10, 0x8933, &(0x7f0000000000)={'vxcan1\x00', 0x0}) r12 = socket$nl_route(0x10, 0x3, 0x0) r13 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r13, 0x8933, &(0x7f00000000c0)={'bridge0\x00', 0x0}) socket$nl_generic(0x10, 0x3, 0x10) (async) r15 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX_80211(r4, 0x8933, &(0x7f00000003c0)={'wlan1\x00', 0x0}) sendmsg$NL80211_CMD_DISASSOCIATE(r15, &(0x7f0000000500)={&(0x7f0000000380)={0x10, 0x0, 0x0, 0x2}, 0xc, &(0x7f00000004c0)={&(0x7f0000000440)={0x54, 0x0, 0x800, 0x70bd2c, 0x25dfdbfd, {{}, {@val={0x8, 0x3, r16}, @val={0xc, 0x99, {0x9, 0x5f}}}}, [@NL80211_ATTR_REASON_CODE={0x6, 0x36, 0x5}, @NL80211_ATTR_SSID={0xa, 0x34, @default_ibss_ssid}, @NL80211_ATTR_REASON_CODE={0x6, 0x36, 0x4}, @NL80211_ATTR_REASON_CODE={0x6, 0x36, 0x8}, @NL80211_ATTR_REASON_CODE={0x6, 0x36, 0xfffe}]}, 0x54}, 0x1, 0x0, 0x0, 0x44884}, 0x20008841) (async) sendmsg$NL80211_CMD_DISASSOCIATE(r15, &(0x7f0000000500)={&(0x7f0000000380)={0x10, 0x0, 0x0, 0x2}, 0xc, &(0x7f00000004c0)={&(0x7f0000000440)={0x54, 0x0, 0x800, 0x70bd2c, 0x25dfdbfd, {{}, {@val={0x8, 0x3, r16}, @val={0xc, 0x99, {0x9, 0x5f}}}}, [@NL80211_ATTR_REASON_CODE={0x6, 0x36, 0x5}, @NL80211_ATTR_SSID={0xa, 0x34, @default_ibss_ssid}, @NL80211_ATTR_REASON_CODE={0x6, 0x36, 0x4}, @NL80211_ATTR_REASON_CODE={0x6, 0x36, 0x8}, @NL80211_ATTR_REASON_CODE={0x6, 0x36, 0xfffe}]}, 0x54}, 0x1, 0x0, 0x0, 0x44884}, 0x20008841) sendmsg$nl_route(r12, &(0x7f0000003880)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000000)=@newlink={0x34, 0x10, 0x801, 0xfffffffd, 0x0, {0x0, 0x0, 0x0, r14, 0x0, 0x8010}, [@IFLA_AF_SPEC={0x14, 0x1a, 0x0, 0x1, [@AF_INET={0x10, 0x2, 0x0, 0x1, {0xc, 0x1, 0x0, 0x1, [{0x8, 0x1a, 0x0, 0x0, 0x1}]}}]}]}, 0x34}, 0x1, 0x0, 0x0, 0x4000010}, 0x0) sendmsg$nl_route(r10, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000180)=@newlink={0x3c, 0x10, 0x401, 0x70bd28, 0x100, {0x0, 0x0, 0x0, 0x0, 0x8603}, [@IFLA_LINKINFO={0x14, 0x12, 0x0, 0x1, @ipvlan={{0xb}, {0x4}}}, @IFLA_LINK={0x8, 0x5, r11}]}, 0x3c}, 0x1, 0x0, 0x0, 0x240008c4}, 0x20008004) sendmsg$nl_route(r7, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000400)=ANY=[@ANYBLOB="3c0000002400050600"/20, @ANYRES32=r9, @ANYBLOB="00000000ffffffff000000000c00010063616b655f6d71000c00020008000900e8"], 0x3c}}, 0x0) sendmsg$IEEE802154_LLSEC_SETPARAMS(r5, &(0x7f0000000f00)={0x0, 0x0, &(0x7f0000000600)={&(0x7f0000000040)={0x30, 0x0, 0x1, 0x70bdb1, 0x25dfdbfb, {}, [@IEEE802154_ATTR_DEV_NAME={0xa, 0x1, 'wpan0\x00'}, @IEEE802154_ATTR_LLSEC_KEY_MODE={0x5, 0x2b, 0x3}, @IEEE802154_ATTR_LLSEC_SECLEVEL={0x5, 0x2a, 0x3}]}, 0x30}, 0x1, 0x0, 0x0, 0x20044801}, 0x20000014) (async) sendmsg$IEEE802154_LLSEC_SETPARAMS(r5, &(0x7f0000000f00)={0x0, 0x0, &(0x7f0000000600)={&(0x7f0000000040)={0x30, 0x0, 0x1, 0x70bdb1, 0x25dfdbfb, {}, [@IEEE802154_ATTR_DEV_NAME={0xa, 0x1, 'wpan0\x00'}, @IEEE802154_ATTR_LLSEC_KEY_MODE={0x5, 0x2b, 0x3}, @IEEE802154_ATTR_LLSEC_SECLEVEL={0x5, 0x2a, 0x3}]}, 0x30}, 0x1, 0x0, 0x0, 0x20044801}, 0x20000014) sendmsg$nl_route(r0, &(0x7f0000000240)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000080)=ANY=[@ANYBLOB="fff13e56ee619e180a15ef", @ANYRES64=r12], 0x58}, 0x1, 0x0, 0x0, 0x44804}, 0x0) 110.376016ms ago: executing program 7 (id=5809): r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = socket$kcm(0x2, 0x3, 0x106) socket$inet_tcp(0x2, 0x1, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000680)={0xffffffffffffffff, 0xffffffffffffffff}) r4 = socket$vsock_stream(0x28, 0x1, 0x0) setsockopt$sock_int(r4, 0x28, 0x7, 0x0, 0x0) r5 = socket$inet_sctp(0x2, 0x1, 0x84) setsockopt$IPT_SO_SET_REPLACE(r5, 0x0, 0x40, &(0x7f0000000b80)=@mangle={'mangle\x00', 0x1f, 0x6, 0x430, 0x180, 0x220, 0xe8, 0x0, 0x220, 0x398, 0x398, 0x398, 0x398, 0x398, 0x6, 0x0, {[{{@uncond, 0x0, 0xb8, 0xe8, 0x0, {}, [@common=@socket0={{0x20}}, @common=@ttl={{0x28}, {0x2, 0xad}}]}, @TPROXY={0x30, 'TPROXY\x00', 0x0, {0x3, 0x7, @multicast1, 0x4e22}}}, {{@uncond, 0x0, 0x70, 0x98}, @ECN={0x28, 'ECN\x00', 0x0, {0x20, 0xf2, 0x2}}}, {{@ip={@dev={0xac, 0x14, 0x14, 0x36}, @loopback, 0x1fffffffe, 0xff, 'pimreg1\x00', 'dummy0\x00', {}, {}, 0x2, 0x1, 0x40}, 0x0, 0x70, 0xa0}, @TPROXY={0x30, 'TPROXY\x00', 0x0, {0x0, 0x4, @remote, 0x4e21}}}, {{@ip={@remote, @multicast1, 0xff, 0x0, 'virt_wifi0\x00', 'team_slave_0\x00', {0xff}, {0xff}, 0x6c, 0x2, 0x59}, 0x0, 0x70, 0x98}, @common=@inet=@SET1={0x28, 'SET\x00', 0x1, {{0x1, 0x3, 0x2}, {0x3, 0x0, 0x4}}}}, {{@ip={@local, @remote, 0xffffff00, 0xff, 'gretap0\x00', 'batadv0\x00', {}, {}, 0x84, 0x1, 0x5}, 0x0, 0x70, 0xe0}, @common=@unspec=@NFLOG={0x70, 'NFLOG\x00', 0x0, {0x1, 0x0, 0x46c5, 0x0, 0x0, "2b4e84400af0c61fe4b77d62d90d10d33fce7dc73625d4209d84f286ee827a4b064c417320a5f57e2dcc64d51dd574bd8c47cabfe9f21364d0c1a47f3240e300"}}}], {{'\x00', 0x0, 0x70, 0x98}, {0x28}}}}, 0x490) setsockopt$sock_attach_bpf(r3, 0x1, 0x4c, &(0x7f0000000000), 0x4) sendmsg$inet(r2, &(0x7f0000000140)={0x0, 0x0, 0x0}, 0x0) recvmsg$unix(r4, &(0x7f0000000080)={0x0, 0x0, 0x0, 0x0, &(0x7f0000000480)=[@rights={{0x14, 0x1, 0x1, [0xffffffffffffffff]}}], 0x18}, 0x100) syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r7 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r8 = syz_genetlink_get_family_id$netlbl_unlabel(&(0x7f0000000540), 0xffffffffffffffff) sendmsg$NLBL_UNLABEL_C_STATICADDDEF(r7, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000280)={&(0x7f00000004c0)=ANY=[@ANYBLOB="7a0000d2", @ANYRES16=r8, @ANYBLOB="010026bd7000fddbdf25060000001400020000000000000000000000ffff0000000014000300fe88000000000000000000000000010108000400ac1414bb2b00070073797374656d5f753a6f626a6563745f723a7373685f6b657967656e5f657865635f743a73300000"], 0x70}, 0x1, 0x0, 0x0, 0x4}, 0xc8a0) socket$tipc(0x1e, 0x5, 0x0) bind$tipc(0xffffffffffffffff, &(0x7f0000000580)=@nameseq={0x1e, 0x1, 0x3, {0x43, 0x0, 0x9}}, 0x10) ioctl$SIOCSIFHWADDR(0xffffffffffffffff, 0x80087601, 0x0) r9 = socket$inet6_sctp(0xa, 0x5, 0x84) setsockopt(r9, 0x84, 0x6, &(0x7f0000000000)='\x00\x00\x00\x00\t\x00\x00\x00', 0x8) r10 = socket$inet6_sctp(0xa, 0x5, 0x84) getsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX3(r10, 0x84, 0x6f, &(0x7f0000000040)={0x0, 0x1c, &(0x7f0000000100)=[@in6={0xa, 0x4e22, 0x8, @private1={0xfc, 0x1, '\x00', 0x1}, 0xfffffffe}]}, &(0x7f0000000080)=0x10) getsockopt$inet_sctp6_SCTP_GET_ASSOC_ID_LIST(r6, 0x84, 0x1d, &(0x7f0000000180)={0x2, [0x0, 0x0]}, &(0x7f0000000240)=0xc) setsockopt$inet_sctp6_SCTP_SET_PEER_PRIMARY_ADDR(r9, 0x84, 0x5, &(0x7f00000001c0)={0x0, @in6={{0xa, 0x4e24, 0x5, @rand_addr=' \x01\x00', 0x82e}}}, 0x84) setsockopt$IPT_SO_SET_REPLACE(r6, 0x0, 0x40, &(0x7f00000006c0)=@mangle={'mangle\x00', 0x1f, 0x6, 0x390, 0x0, 0x98, 0x130, 0x1c8, 0x2f8, 0x0, 0x98, 0x130, 0x260, 0x2f8, 0x6, 0x0, {[{{@uncond, 0x0, 0x70, 0x98}, @common=@unspec=@STANDARD={0x28, '\x00', 0x0, 0xfffffffe}}, {{@uncond, 0x0, 0x70, 0x98}, @common=@unspec=@STANDARD={0x28, '\x00', 0x0, 0xfffffffe}}, {{@uncond, 0x0, 0x70, 0x98}, @common=@unspec=@STANDARD={0x28, '\x00', 0x0, 0xfffffffe}}, {{@ip={@empty, @empty, 0x0, 0x0, '\x00', '\x00', {}, {}, 0x6}, 0x0, 0x70, 0x98}, @ECN={0x28, 'ECN\x00', 0x0, {0x30, 0x0, 0x3}}}, {{@uncond, 0x0, 0x70, 0x98}, @common=@unspec=@STANDARD={0x28, '\x00', 0x0, 0xfffffffe}}], {{'\x00', 0x0, 0x70, 0x98}, {0x28}}}}, 0x3f0) setsockopt$sock_linger(r1, 0x1, 0xd, &(0x7f0000000440)={0x0, 0x1}, 0x8) sendmsg$inet(r1, &(0x7f0000000040)={&(0x7f0000000380)={0x2, 0x0, @remote}, 0x10, 0x0}, 0x0) r11 = gettid() syz_open_procfs$namespace(r11, &(0x7f0000000400)='ns/time_for_children\x00') sendmsg$nl_route(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000140)=ANY=[@ANYBLOB="1c0000002992bfaf31b914", @ANYRES32=0x0, @ANYBLOB="00000000120000001c0012800b00010062726964676500000c000280080003001b000000"], 0x3c}, 0x1, 0x0, 0x0, 0x300040c1}, 0x0) 0s ago: executing program 4 (id=5810): r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$devlink(&(0x7f00000000c0), r0) r2 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_tcp_int(r2, 0x6, 0x13, &(0x7f0000000040)=0x100000001, 0x76dc) connect$inet6(r2, &(0x7f0000000100)={0xa, 0x0, 0x6, @ipv4={'\x00', '\xff\xff', @local}, 0x1}, 0x1c) setsockopt$inet6_tcp_TCP_ULP(r2, 0x6, 0x1f, &(0x7f00000002c0), 0x4) setsockopt$inet6_tcp_TLS_TX(r2, 0x11a, 0x2, &(0x7f00000003c0)=@gcm_128={{0x303}, "77b40400", "bb6710bc8150e4a1a117d7b07caf00", "8c76287d", "3d8efa05fdffffff"}, 0x28) setsockopt$inet6_tcp_TLS_TX(r2, 0x11a, 0x1, &(0x7f0000000080)=@gcm_128={{0x303}, "b7a41f2300", "d21b0e8a0e000000000000000600", "1d1cbe23", "ecba06893bcdc493"}, 0x28) recvfrom(r2, &(0x7f0000002800)=""/4071, 0xfffffffffffffdab, 0x17, 0x0, 0x0) socket$inet_sctp(0x2, 0x5, 0x84) writev(r2, &(0x7f0000001540)=[{&(0x7f0000000440)='c', 0x1}], 0x1) syz_genetlink_get_family_id$ethtool(&(0x7f0000000200), r2) setsockopt$inet6_tcp_TCP_REPAIR_QUEUE(r2, 0x6, 0x14, &(0x7f0000000240)=0x2, 0x4) close(0x3) sendmsg$DEVLINK_CMD_PORT_GET(r0, &(0x7f0000000480)={0x0, 0x0, &(0x7f0000000440)={&(0x7f0000000180)={0x3c, r1, 0x1, 0xffffffff, 0x0, {0x39}, [{{@nsim={{0xe}, {0xf, 0x2, {'netdevsim', 0x0}}}, {0x8, 0x73}}}]}, 0x3c}}, 0x0) kernel console output (not intermixed with test programs): attributes in process `syz.0.4528'. [ 433.210277][T23362] netlink: 8 bytes leftover after parsing attributes in process `syz.0.4534'. [ 433.225768][T23361] netlink: 16 bytes leftover after parsing attributes in process `syz.1.4533'. [ 433.236079][T23362] netlink: 'syz.0.4534': attribute type 16 has an invalid length. [ 433.236096][T23362] netlink: 'syz.0.4534': attribute type 17 has an invalid length. [ 433.296956][ T9] syz_tun: tun_net_xmit 110 [ 433.320595][T23368] netlink: 12 bytes leftover after parsing attributes in process `syz.5.4531'. [ 433.320641][T23368] netlink: 12 bytes leftover after parsing attributes in process `syz.5.4531'. [ 433.382247][T23370] netlink: 288 bytes leftover after parsing attributes in process `syz.4.4536'. [ 433.396615][ T3103] syz_tun: tun_net_xmit 110 [ 433.465117][T23372] syzkaller0: entered promiscuous mode [ 433.465137][T23372] syzkaller0: entered allmulticast mode [ 433.501505][T23374] netlink: 100 bytes leftover after parsing attributes in process `syz.0.4537'. [ 433.512622][ C0] vcan0: j1939_tp_rxtimer: 0xffff888071ee2800: rx timeout, send abort [ 433.653802][T23391] xt_REDIRECT: bad rangesize 26624. [ 433.701485][T23393] netlink: 20 bytes leftover after parsing attributes in process `syz.4.4541'. [ 434.007395][ C0] vcan0: j1939_tp_rxtimer: 0xffff888056b22400: rx timeout, send abort [ 434.012665][ C0] vcan0: j1939_tp_rxtimer: 0xffff888071ee2800: abort rx timeout. Force session deactivation [ 434.367375][T23425] vcan0: tx drop: invalid sa for name 0x0000000000000001 [ 434.507446][ C0] vcan0: j1939_tp_rxtimer: 0xffff888056b22400: abort rx timeout. Force session deactivation [ 434.748896][T23432] netlink: 'syz.0.4554': attribute type 1 has an invalid length. [ 434.782367][T23432] 8021q: adding VLAN 0 to HW filter on device bond9 [ 434.815094][T23432] 8021q: adding VLAN 0 to HW filter on device batadv1 [ 434.823355][T23432] bond9: (slave batadv1): making interface the new active one [ 434.832753][T23432] bond9: (slave batadv1): Enslaving as an active interface with an up link [ 435.198117][T23442] netlink: 'syz.4.4558': attribute type 1 has an invalid length. [ 435.467162][T23458] netlink: 'syz.0.4563': attribute type 2 has an invalid length. [ 435.469389][T23458] syz_tun: tun_net_xmit 42 [ 435.496162][T23460] netlink: 'syz.4.4565': attribute type 25 has an invalid length. [ 435.531285][T23461] gtp3: entered promiscuous mode [ 435.531302][T23461] gtp3: entered allmulticast mode [ 435.546885][T23461] syz_tun: tun_net_xmit 42 [ 435.547043][T23464] netlink: 'syz.0.4563': attribute type 2 has an invalid length. [ 435.587018][ T5734] net_ratelimit: 11 callbacks suppressed [ 435.587036][ T5734] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 435.654825][T23474] bridge3: trying to set multicast startup query interval above maximum, setting to 8640000 (86400000ms) [ 435.978441][T12207] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 436.330209][T23487] hsr_slave_0: left promiscuous mode [ 436.331148][T23487] hsr_slave_1: left promiscuous mode [ 436.374101][T23488] netlink: NAT attributes may be specified only when CT COMMIT flag is also specified. [ 436.374130][T23488] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 436.629532][ T5734] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 436.711515][T23514] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check. [ 436.981602][T23517] xt_TPROXY: Can be used only with -p tcp or -p udp [ 437.014576][T23522] netlink: 'syz.4.4584': attribute type 1 has an invalid length. [ 437.048769][T23522] bond5: (slave gretap2): making interface the new active one [ 437.049477][T23522] bond5: (slave gretap2): Enslaving as an active interface with an up link [ 437.110118][T12195] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 437.354158][ T4946] block nbd1: Possible stuck request ffff8880271b5080: control (read@0,1024B). Runtime 240 seconds [ 437.354198][ T4946] block nbd1: Possible stuck request ffff8880271b5240: control (read@1024,1024B). Runtime 240 seconds [ 437.354223][ T4946] block nbd1: Possible stuck request ffff8880271b5400: control (read@2048,1024B). Runtime 240 seconds [ 437.354256][ T4946] block nbd1: Possible stuck request ffff8880271b55c0: control (read@3072,1024B). Runtime 240 seconds [ 437.668796][ T5751] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 437.867312][T23558] __nla_validate_parse: 14 callbacks suppressed [ 437.867330][T23558] netlink: 20 bytes leftover after parsing attributes in process `syz.4.4597'. [ 437.867375][T23558] netlink: 20 bytes leftover after parsing attributes in process `syz.4.4597'. [ 437.923190][T23562] netlink: 12 bytes leftover after parsing attributes in process `syz.4.4598'. [ 437.952301][T23562] netlink: 12 bytes leftover after parsing attributes in process `syz.4.4598'. [ 437.990978][T23562] netlink: 12 bytes leftover after parsing attributes in process `syz.4.4598'. [ 438.014047][T23562] netlink: 12 bytes leftover after parsing attributes in process `syz.4.4598'. [ 438.032140][T23562] netlink: 12 bytes leftover after parsing attributes in process `syz.4.4598'. [ 438.054035][T23562] netlink: 12 bytes leftover after parsing attributes in process `syz.4.4598'. [ 438.071998][T23562] netlink: 12 bytes leftover after parsing attributes in process `syz.4.4598'. [ 438.095970][T23562] netlink: 12 bytes leftover after parsing attributes in process `syz.4.4598'. [ 438.216860][T12205] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 438.308251][ T5713] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 438.651240][T23617] netlink: 'syz.5.4602': attribute type 1 has an invalid length. [ 438.760036][T23624] netlink: 'syz.0.4605': attribute type 10 has an invalid length. [ 438.763653][T23624] hsr0: A HSR master's MTU cannot be greater than the smallest MTU of its slaves minus the HSR Tag length (6 octets). [ 439.257443][T23651] netlink: 'syz.0.4614': attribute type 1 has an invalid length. [ 439.507044][T23670] netlink: 'syz.0.4620': attribute type 30 has an invalid length. [ 439.570490][T23670] bond10: option arp_missed_max: invalid value (0) [ 439.570513][T23670] bond10: option arp_missed_max: allowed values 1 - 255 [ 439.660689][T23670] bond10 (unregistering): Released all slaves [ 439.913160][ T1311] ieee802154 phy1 wpan1: encryption failed: -22 [ 439.935379][ T5622] Bluetooth: hci6: unexpected cc 0x0c03 length: 249 > 1 [ 439.946169][ T5622] Bluetooth: hci6: unexpected cc 0x1003 length: 249 > 9 [ 439.956100][ T5622] Bluetooth: hci6: unexpected cc 0x1001 length: 249 > 9 [ 439.966931][ T5622] Bluetooth: hci6: unexpected cc 0x0c23 length: 249 > 4 [ 439.974767][ T5622] Bluetooth: hci6: unexpected cc 0x0c38 length: 249 > 2 [ 440.040893][ T4934] Bluetooth: hci6: unexpected cc 0x0c03 length: 249 > 1 [ 440.041212][ T4934] Bluetooth: hci6: unexpected cc 0x1003 length: 249 > 9 [ 440.041505][ T4934] Bluetooth: hci6: unexpected cc 0x1001 length: 249 > 9 [ 440.045982][ T4934] Bluetooth: hci6: unexpected cc 0x0c23 length: 249 > 4 [ 440.047512][ T4934] Bluetooth: hci6: unexpected cc 0x0c38 length: 249 > 2 [ 440.787357][ T5751] net_ratelimit: 7 callbacks suppressed [ 440.787374][ T5751] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 440.829613][T23721] netlink: 'syz.0.4634': attribute type 4 has an invalid length. [ 440.978584][T23728] nftables ruleset with unbound chain [ 441.167183][ T5751] syz_tun: tun_net_xmit 90 [ 441.168670][T23736] netlink: 'syz.0.4641': attribute type 16 has an invalid length. [ 441.171315][T23681] wg0 speed is unknown, defaulting to 1000 [ 441.174477][T23681] hsr0 speed is unknown, defaulting to 1000 [ 441.177942][T23740] IPVS: sync thread started: state = BACKUP, mcast_ifn = vcan0, syncid = 0, id = 0 [ 441.214627][T23681] lo speed is unknown, defaulting to 1000 [ 441.347592][ T5720] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 441.449120][T23755] netlink: 'syz.0.4647': attribute type 62 has an invalid length. [ 441.545443][T23760] syzkaller0: entered promiscuous mode [ 441.545464][T23760] syzkaller0: entered allmulticast mode [ 441.558432][T12193] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 441.634950][T23762] mac80211_hwsim hwsim44 wlan0: entered promiscuous mode [ 441.634974][T23762] mac80211_hwsim hwsim44 wlan0: entered allmulticast mode [ 441.695251][T23681] bridge0: port 1(bridge_slave_0) entered blocking state [ 441.695356][T23681] bridge0: port 1(bridge_slave_0) entered disabled state [ 441.695574][T23681] bridge_slave_0: entered allmulticast mode [ 441.696973][T23681] bridge_slave_0: entered promiscuous mode [ 441.699881][T23681] bridge0: port 2(bridge_slave_1) entered blocking state [ 441.700003][T23681] bridge0: port 2(bridge_slave_1) entered disabled state [ 441.700122][T23681] bridge_slave_1: entered allmulticast mode [ 441.701913][T23681] bridge_slave_1: entered promiscuous mode [ 441.733455][T23681] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 441.736625][ T5734] syz_tun: tun_net_xmit 90 [ 441.737050][T23681] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 441.774303][T23681] team0: Port device team_slave_0 added [ 441.780337][T23681] team0: Port device team_slave_1 added [ 441.821386][T23681] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 441.821401][T23681] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 441.821423][T23681] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 441.824823][T23681] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 441.824836][T23681] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 441.824858][T23681] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 441.831064][ T5734] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 441.969055][T23681] hsr_slave_0: entered promiscuous mode [ 441.970032][T23681] hsr_slave_1: entered promiscuous mode [ 441.970972][T23681] debugfs: 'hsr0' already exists in 'hsr' [ 441.970990][T23681] Cannot create hsr debugfs directory [ 442.066921][ T5622] Bluetooth: hci6: command tx timeout [ 442.119145][ T30] audit: type=1804 audit(1789931557.697:12): pid=23776 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=invalid_pcr cause=open_writers comm="syz.5.4652" name="/newroot/189/cgroup.controllers" dev="tmpfs" ino=987 res=1 errno=0 [ 442.119509][ T30] audit: type=1800 audit(1789931557.697:13): pid=23776 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.5.4652" name="cgroup.controllers" dev="tmpfs" ino=987 res=0 errno=0 [ 442.127645][ T30] audit: type=1800 audit(1789931557.707:14): pid=23776 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.5.4652" name="cgroup.controllers" dev="tmpfs" ino=987 res=0 errno=0 [ 442.329665][T23681] netdevsim netdevsim6 netdevsim0: renamed from eth0 [ 442.349672][T23681] 8021q: adding VLAN 0 to HW filter on device netdevsim0 [ 442.350532][T23681] netdevsim netdevsim6 netdevsim1: renamed from eth1 [ 442.377250][T23681] 8021q: adding VLAN 0 to HW filter on device netdevsim1 [ 442.379617][T23681] netdevsim netdevsim6 netdevsim2: renamed from eth2 [ 442.406543][T23681] 8021q: adding VLAN 0 to HW filter on device netdevsim2 [ 442.407361][T23681] netdevsim netdevsim6 netdevsim3: renamed from eth3 [ 442.435522][T23681] 8021q: adding VLAN 0 to HW filter on device netdevsim3 [ 442.489579][T23783] xt_addrtype: ipv6 PROHIBIT (THROW, NAT ..) matching not supported [ 442.495327][T23794] syz_tun: entered allmulticast mode [ 442.516696][ C0] syz_tun: tun_net_xmit 54 [ 442.557675][ C0] syz_tun: tun_net_xmit 54 [ 442.602979][T23681] 8021q: adding VLAN 0 to HW filter on device bond0 [ 442.639659][T23681] 8021q: adding VLAN 0 to HW filter on device team0 [ 442.653052][T12205] bridge0: port 1(bridge_slave_0) entered blocking state [ 442.653146][T12205] bridge0: port 1(bridge_slave_0) entered forwarding state [ 442.688456][ T3318] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 442.691104][T12207] bridge0: port 2(bridge_slave_1) entered blocking state [ 442.691201][T12207] bridge0: port 2(bridge_slave_1) entered forwarding state [ 442.868673][ T5751] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 443.045003][T23820] __nla_validate_parse: 39 callbacks suppressed [ 443.045022][T23820] netlink: 8 bytes leftover after parsing attributes in process `syz.0.4660'. [ 443.436679][ C0] syz_tun: tun_net_xmit 54 [ 443.479915][T23848] netlink: 28 bytes leftover after parsing attributes in process `syz.5.4665'. [ 443.520885][T23681] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 443.799623][T12207] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 443.878269][T23681] veth0_vlan: entered promiscuous mode [ 443.893967][T23681] veth1_vlan: entered promiscuous mode [ 443.907770][ T5734] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 443.967466][T23681] veth0_macvtap: entered promiscuous mode [ 443.981276][T23681] veth1_macvtap: entered promiscuous mode [ 444.023757][T23681] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 444.041195][T23681] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 444.068071][T12210] netdevsim netdevsim6 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 444.068529][T12210] netdevsim netdevsim6 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 444.087659][ T3318] netdevsim netdevsim6 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 444.089545][ T3318] netdevsim netdevsim6 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 444.148609][ T5622] Bluetooth: hci6: command tx timeout [ 444.243058][T23867] netlink: 'syz.5.4669': attribute type 11 has an invalid length. [ 444.243111][T23867] netlink: 'syz.5.4669': attribute type 11 has an invalid length. [ 444.243125][T23867] netlink: 228 bytes leftover after parsing attributes in process `syz.5.4669'. [ 444.261827][T12200] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 444.261844][T12200] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 444.375962][T12200] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 444.375982][T12200] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 444.392315][ T44] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 444.534255][T23880] netlink: 8 bytes leftover after parsing attributes in process `syz.6.4621'. [ 444.534286][T23880] netlink: 'syz.6.4621': attribute type 30 has an invalid length. [ 444.534300][T23880] netlink: 4 bytes leftover after parsing attributes in process `syz.6.4621'. [ 444.653760][T23876] netlink: 8 bytes leftover after parsing attributes in process `syz.0.4670'. [ 444.653816][T23876] netlink: 28 bytes leftover after parsing attributes in process `syz.0.4670'. [ 444.699283][T23876] geneve3: entered promiscuous mode [ 444.699304][T23876] geneve3: entered allmulticast mode [ 444.759965][T23887] netlink: 8 bytes leftover after parsing attributes in process `syz.5.4674'. [ 444.819266][T23889] netlink: 32 bytes leftover after parsing attributes in process `syz.4.4676'. [ 444.820415][T23889] netlink: 12 bytes leftover after parsing attributes in process `syz.4.4676'. [ 444.918563][T12210] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 445.074136][T23895] netlink: 'syz.5.4679': attribute type 30 has an invalid length. [ 445.109840][T12207] netdevsim netdevsim5 netdevsim3: set [0, 0] type 1 family 0 port 8472 - 0 [ 445.110064][T12207] netdevsim netdevsim5 netdevsim2: set [0, 0] type 1 family 0 port 8472 - 0 [ 445.137149][T12210] netdevsim netdevsim5 netdevsim0: set [0, 0] type 1 family 0 port 8472 - 0 [ 445.139208][T12193] netdevsim netdevsim5 netdevsim1: set [0, 0] type 1 family 0 port 8472 - 0 [ 445.453444][T23917] tipc: Started in network mode [ 445.453472][T23917] tipc: Node identity e0000001, cluster identity 4711 [ 445.453521][T23917] tipc: Enabling of bearer rejected, failed to enable media [ 445.504520][T23884] llcp: nfc_llcp_send_ui_frame: Could not allocate PDU (error=-512) [ 445.504656][T23884] llcp: nfc_llcp_send_ui_frame: Could not allocate PDU (error=-512) [ 445.750170][T23936] --map-set only usable from mangle table [ 446.001909][ T5741] net_ratelimit: 2 callbacks suppressed [ 446.001927][ T5741] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 446.038158][T12210] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 446.232427][ T5622] Bluetooth: hci6: command tx timeout [ 446.520569][T23965] netlink: 'syz.0.4694': attribute type 1 has an invalid length. [ 446.546205][T23965] bond10: entered promiscuous mode [ 446.546955][T23965] 8021q: adding VLAN 0 to HW filter on device bond10 [ 447.027538][ T3103] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 447.136865][T12210] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 447.426778][ T44] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 448.068560][ T5741] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 448.247019][T12210] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 448.307332][ T5622] Bluetooth: hci6: command tx timeout [ 449.108713][ T5741] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 449.366738][T12210] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 450.162669][ T3103] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 450.620909][ T4985] udevd[4985]: worker [5623] /devices/virtual/block/nbd1 timeout; kill it [ 450.620991][ T4985] udevd[4985]: seq 16466 '/devices/virtual/block/nbd1' killed [ 451.196965][ T3103] net_ratelimit: 2 callbacks suppressed [ 451.196987][ T3103] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 451.606735][T12205] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 452.228483][ T5741] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 452.726827][T12205] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 453.280345][ T3103] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 453.507183][ T44] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 453.837376][T12200] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 454.317195][T23868] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 454.956868][T12207] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 455.347165][ T3103] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 456.388706][ T3103] net_ratelimit: 1 callbacks suppressed [ 456.388728][ T3103] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 456.549215][ T44] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 457.206754][T12210] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 457.437240][T23868] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 458.307171][T12210] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 458.479781][T23868] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 459.438592][T12200] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 459.517275][ T3103] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 459.586898][ T5720] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 460.547262][ T3103] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 461.589210][ T3103] net_ratelimit: 1 callbacks suppressed [ 461.589230][ T3103] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 461.676908][T12210] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 462.626853][ T3103] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 462.626948][ T5720] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 462.787152][T11069] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 463.677046][T23868] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 463.926706][T12210] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 464.717090][ T5741] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 465.036925][T12207] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 465.668237][ T5720] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 466.797303][ T3103] net_ratelimit: 2 callbacks suppressed [ 466.797324][ T3103] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 467.276804][T12205] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 467.430525][ T4946] block nbd1: Possible stuck request ffff8880271b5080: control (read@0,1024B). Runtime 270 seconds [ 467.430566][ T4946] block nbd1: Possible stuck request ffff8880271b5240: control (read@1024,1024B). Runtime 270 seconds [ 467.430591][ T4946] block nbd1: Possible stuck request ffff8880271b5400: control (read@2048,1024B). Runtime 270 seconds [ 467.430614][ T4946] block nbd1: Possible stuck request ffff8880271b55c0: control (read@3072,1024B). Runtime 270 seconds [ 467.827277][ T3103] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 468.387992][T12210] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 468.707479][ T5742] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 468.867000][ T5741] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 469.507317][T12210] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 469.908604][ T3103] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 470.641076][T12197] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 470.947264][ T5741] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 471.996857][ T3103] net_ratelimit: 2 callbacks suppressed [ 471.996876][ T3103] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 472.310743][T23994] __nla_validate_parse: 5 callbacks suppressed [ 472.310785][T23994] netlink: 52 bytes leftover after parsing attributes in process `syz.4.4707'. [ 472.365591][T23997] netlink: 8 bytes leftover after parsing attributes in process `syz.5.4706'. [ 472.490297][ T4934] Bluetooth: hci7: unexpected cc 0x0c03 length: 249 > 1 [ 472.505955][ T4934] Bluetooth: hci7: unexpected cc 0x1003 length: 249 > 9 [ 472.515848][ T4934] Bluetooth: hci7: unexpected cc 0x1001 length: 249 > 9 [ 472.524662][ T4934] Bluetooth: hci7: unexpected cc 0x0c23 length: 249 > 4 [ 472.533606][ T4934] Bluetooth: hci7: unexpected cc 0x0c38 length: 249 > 2 [ 472.823014][T24017] syzkaller0: entered promiscuous mode [ 472.823037][T24017] syzkaller0: entered allmulticast mode [ 472.849890][T12205] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 473.027143][ T3103] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 473.283905][T24056] netlink: 'syz.5.4718': attribute type 2 has an invalid length. [ 473.742130][T24077] netlink: 'syz.0.4723': attribute type 5 has an invalid length. [ 473.755594][T24077] IPv6: RTM_NEWROUTE with no NLM_F_CREATE or NLM_F_REPLACE [ 473.755608][T24077] IPv6: NLM_F_CREATE should be set when creating new route [ 473.816506][T24079] netlink: 8 bytes leftover after parsing attributes in process `syz.5.4725'. [ 473.946157][T24088] netlink: 40 bytes leftover after parsing attributes in process `syz.5.4728'. [ 473.962170][T12200] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 474.021625][T24092] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check. [ 474.069236][ T3103] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 474.221103][T24005] wg0 speed is unknown, defaulting to 1000 [ 474.224173][T24005] hsr0 speed is unknown, defaulting to 1000 [ 474.235475][T24005] lo speed is unknown, defaulting to 1000 [ 474.349282][T24104] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 474.377333][T12209] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 474.377351][T12209] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 474.452750][T24110] xt_ecn: cannot match TCP bits for non-tcp packets [ 474.495940][T24110] team0: Cannot enslave team device to itself [ 474.597685][T24102] netlink: 'syz.5.4732': attribute type 4 has an invalid length. [ 474.600115][T24104] netlink: 'syz.5.4732': attribute type 7 has an invalid length. [ 474.600133][T24104] netlink: 140 bytes leftover after parsing attributes in process `syz.5.4732'. [ 474.632710][ T5622] Bluetooth: hci7: command tx timeout [ 474.644003][T24102] netlink: 16 bytes leftover after parsing attributes in process `syz.5.4732'. [ 474.670338][T24121] netlink: 16 bytes leftover after parsing attributes in process `syz.4.4739'. [ 474.790633][ T44] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 474.849748][T24124] tipc: Enabled bearer , priority 0 [ 474.950462][T24132] tc_dump_action: action bad kind [ 474.984998][T24140] syzkaller1: entered allmulticast mode [ 474.992906][T24005] bridge0: port 1(bridge_slave_0) entered blocking state [ 474.993323][T24005] bridge0: port 1(bridge_slave_0) entered disabled state [ 474.995230][T24005] bridge_slave_0: entered allmulticast mode [ 474.996269][T24005] bridge_slave_0: entered promiscuous mode [ 475.001844][T24005] bridge0: port 2(bridge_slave_1) entered blocking state [ 475.001936][T24005] bridge0: port 2(bridge_slave_1) entered disabled state [ 475.002060][T24005] bridge_slave_1: entered allmulticast mode [ 475.007448][T24005] bridge_slave_1: entered promiscuous mode [ 475.069495][T12205] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 475.110325][ T5741] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 475.118041][T24005] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 475.125947][T24005] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 475.214461][T24005] team0: Port device team_slave_0 added [ 475.224637][T24005] team0: Port device team_slave_1 added [ 475.321313][T24005] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 475.321329][T24005] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 475.321377][T24005] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 475.324133][T24005] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 475.324145][T24005] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 475.324167][T24005] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 475.483732][T24005] hsr_slave_0: entered promiscuous mode [ 475.488427][T24005] hsr_slave_1: entered promiscuous mode [ 475.489102][T24005] debugfs: 'hsr0' already exists in 'hsr' [ 475.489119][T24005] Cannot create hsr debugfs directory [ 475.498861][T24159] veth0: entered promiscuous mode [ 475.560863][T24158] veth0: left promiscuous mode [ 475.633549][T24165] pim6reg: entered allmulticast mode [ 475.676506][T24170] netlink: 'syz.0.4752': attribute type 10 has an invalid length. [ 475.717290][T24171] netlink: 12 bytes leftover after parsing attributes in process `syz.0.4752'. [ 475.724641][T24170] team0: Device v failed to register rx_handler [ 475.745943][T24170] netlink: 12 bytes leftover after parsing attributes in process `syz.0.4752'. [ 475.911448][T24173] netlink: 40 bytes leftover after parsing attributes in process `syz.0.4752'. [ 476.083050][T24188] bridge0: port 1(bridge_slave_0) entered forwarding state [ 476.147679][T23868] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 476.242190][T24005] netdevsim netdevsim7 netdevsim0: renamed from eth0 [ 476.294340][T24005] 8021q: adding VLAN 0 to HW filter on device netdevsim0 [ 476.295197][T24005] netdevsim netdevsim7 netdevsim1: renamed from eth1 [ 476.319822][T24005] 8021q: adding VLAN 0 to HW filter on device netdevsim1 [ 476.324097][T24005] netdevsim netdevsim7 netdevsim2: renamed from eth2 [ 476.344355][T24005] 8021q: adding VLAN 0 to HW filter on device netdevsim2 [ 476.346075][T24005] netdevsim netdevsim7 netdevsim3: renamed from eth3 [ 476.382236][T24005] 8021q: adding VLAN 0 to HW filter on device netdevsim3 [ 476.511887][T24005] 8021q: adding VLAN 0 to HW filter on device bond0 [ 476.554804][T24005] 8021q: adding VLAN 0 to HW filter on device team0 [ 476.575689][T12200] bridge0: port 1(bridge_slave_0) entered blocking state [ 476.575789][T12200] bridge0: port 1(bridge_slave_0) entered forwarding state [ 476.602610][T12200] bridge0: port 2(bridge_slave_1) entered blocking state [ 476.602694][T12200] bridge0: port 2(bridge_slave_1) entered forwarding state [ 476.709572][ T5622] Bluetooth: hci7: command tx timeout [ 476.785056][T24222] syz_tun: tun_net_xmit 42 [ 476.785264][T24223] syz_tun: tun_net_xmit 42 [ 477.042930][T24244] bridge_slave_0: left allmulticast mode [ 477.042956][T24244] bridge_slave_0: left promiscuous mode [ 477.043167][T24244] bridge0: port 1(bridge_slave_0) entered disabled state [ 477.087819][T24244] bridge_slave_1: left allmulticast mode [ 477.087842][T24244] bridge_slave_1: left promiscuous mode [ 477.088045][T24244] bridge0: port 2(bridge_slave_1) entered disabled state [ 477.124029][T24244] bond0: (slave bond_slave_0): Releasing backup interface [ 477.158298][T24244] bond0: (slave bond_slave_1): Releasing backup interface [ 477.187277][ T3103] net_ratelimit: 1 callbacks suppressed [ 477.187292][ T3103] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 477.226911][T24244] team0: Port device team_slave_0 removed [ 477.271304][T12197] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 477.290744][T24244] team0: Port device team_slave_1 removed [ 477.293247][T24244] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 477.293267][T24244] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 477.325718][T24244] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 477.325737][T24244] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 477.354158][T24244] A link change request failed with some changes committed already. Interface hsr_slave_0 may have been left with an inconsistent configuration, please check. [ 477.728896][T24262] openvswitch: netlink: Flow actions attr not present in new flow. [ 477.827407][ T44] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 477.954730][T24277] __nla_validate_parse: 4 callbacks suppressed [ 477.954748][T24277] netlink: 44 bytes leftover after parsing attributes in process `syz.6.4774'. [ 477.960322][T24005] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 478.003246][T24279] netlink: 12 bytes leftover after parsing attributes in process `syz.0.4773'. [ 478.014692][T24279] netlink: 'syz.0.4773': attribute type 4 has an invalid length. [ 478.083441][T24284] netlink: 28 bytes leftover after parsing attributes in process `syz.4.4776'. [ 478.130977][T24284] netlink: 12 bytes leftover after parsing attributes in process `syz.4.4776'. [ 478.241601][T23868] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 478.397250][T12207] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 478.584069][T24005] veth0_vlan: entered promiscuous mode [ 478.619993][T24005] veth1_vlan: entered promiscuous mode [ 478.643165][T24305] netlink: 8 bytes leftover after parsing attributes in process `syz.6.4781'. [ 478.672720][T24312] IPv6: sit3: Disabled Multicast RS [ 478.796886][ T5622] Bluetooth: hci7: command tx timeout [ 478.817419][T24005] veth0_macvtap: entered promiscuous mode [ 478.891902][T24005] veth1_macvtap: entered promiscuous mode [ 478.939639][T24323] syz_tun: tun_net_xmit 42 [ 479.000742][T24005] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 479.034322][T24005] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 479.127467][T12210] netdevsim netdevsim7 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 479.129046][T12209] netdevsim netdevsim7 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 479.129087][T12209] netdevsim netdevsim7 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 479.129122][T12209] netdevsim netdevsim7 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 479.281074][T23868] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 479.498882][T11069] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 479.595783][T12200] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 479.595802][T12200] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 479.704667][T24347] netlink: 48 bytes leftover after parsing attributes in process `syz.5.4793'. [ 479.841799][T12200] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 479.841819][T12200] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 479.897560][T24353] netlink: 4 bytes leftover after parsing attributes in process `syz.5.4796'. [ 479.897573][T24353] netlink: 12 bytes leftover after parsing attributes in process `syz.5.4796'. [ 479.968540][T24359] netlink: 4 bytes leftover after parsing attributes in process `syz.5.4796'. [ 479.968560][T24359] netlink: 12 bytes leftover after parsing attributes in process `syz.5.4796'. [ 480.101383][T24351] syzkaller0: entered promiscuous mode [ 480.101397][T24351] syzkaller0: entered allmulticast mode [ 480.115044][T24367] netlink: 'syz.0.4798': attribute type 1 has an invalid length. [ 480.115077][T24367] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 480.118817][T24367] netlink: 'syz.0.4798': attribute type 1 has an invalid length. [ 480.265540][T24367] 8021q: adding VLAN 0 to HW filter on device bond11 [ 480.289900][T24369] bond11: (slave geneve4): making interface the new active one [ 480.291462][T24369] bond11: (slave geneve4): Enslaving as an active interface with an up link [ 480.512887][T24381] netlink: 'syz.7.4803': attribute type 2 has an invalid length. [ 480.534379][T24381] : entered promiscuous mode [ 480.606153][T24385] ipvlan3: entered allmulticast mode [ 480.663419][T24387] bridge0: port 1(veth0) entered blocking state [ 480.664005][T24387] bridge0: port 1(veth0) entered disabled state [ 480.664144][T24387] veth0: entered allmulticast mode [ 480.667674][T24387] veth0: entered promiscuous mode [ 480.668659][T24387] bridge0: port 1(veth0) entered blocking state [ 480.668759][T24387] bridge0: port 1(veth0) entered forwarding state [ 480.711195][T12210] wlan1: Trigger new scan to find an IBSS to join [ 480.887093][ T4934] Bluetooth: hci7: command tx timeout [ 481.306136][T24423] syzkaller0: left promiscuous mode [ 481.306157][T24423] syzkaller0: left allmulticast mode [ 481.592424][T24448] netlink: 'syz.4.4825': attribute type 1 has an invalid length. [ 481.603610][T24443] sch_tbf: burst 0 is lower than device gre0 mtu (1500) ! [ 481.605324][T24440] netlink: 'syz.0.4824': attribute type 11 has an invalid length. [ 481.638430][T24448] 8021q: adding VLAN 0 to HW filter on device bond39 [ 481.659770][T24448] bond39: (slave geneve3): making interface the new active one [ 481.660887][T24448] bond39: (slave geneve3): Enslaving as an active interface with an up link [ 482.069903][T24478] netlink: 'syz.6.4831': attribute type 1 has an invalid length. [ 482.087010][T24479] netlink: 'syz.4.4833': attribute type 1 has an invalid length. [ 482.098714][T24478] bond1: entered promiscuous mode [ 482.099088][T24478] 8021q: adding VLAN 0 to HW filter on device bond1 [ 482.114253][T24478] macvtap1: entered allmulticast mode [ 482.145972][T24479] bond40: entered promiscuous mode [ 482.146225][T24479] 8021q: adding VLAN 0 to HW filter on device bond40 [ 482.177223][T24478] bond1: (slave bridge1): making interface the new active one [ 482.177243][T24478] bridge1: entered promiscuous mode [ 482.178727][T24478] bond1: (slave bridge1): Enslaving as an active interface with an up link [ 482.269988][T24482] 8021q: adding VLAN 0 to HW filter on device bond40 [ 482.270326][T24482] bond40: (slave ip6gre2): The slave device specified does not support setting the MAC address [ 482.270344][T24482] bond40: (slave ip6gre2): Setting fail_over_mac to active for active-backup mode [ 482.311740][T24482] bond40: (slave ip6gre2): making interface the new active one [ 482.311761][T24482] ip6gre2: entered promiscuous mode [ 482.312579][T24482] bond40: (slave ip6gre2): Enslaving as an active interface with an up link [ 482.387246][ T5741] net_ratelimit: 5 callbacks suppressed [ 482.387262][ T5741] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 482.432553][T24485] netlink: 'syz.6.4834': attribute type 1 has an invalid length. [ 482.542499][T24485] 8021q: adding VLAN 0 to HW filter on device bond2 [ 482.819036][T11069] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 483.272600][T24544] __nla_validate_parse: 11 callbacks suppressed [ 483.272617][T24544] netlink: 8 bytes leftover after parsing attributes in process `syz.7.4848'. [ 483.272640][T24544] netlink: 'syz.7.4848': attribute type 30 has an invalid length. [ 483.278196][T24545] netlink: 8 bytes leftover after parsing attributes in process `syz.7.4848'. [ 483.278223][T24545] netlink: 'syz.7.4848': attribute type 30 has an invalid length. [ 483.334292][T24547] netdevsim netdevsim4 netdevsim0: entered promiscuous mode [ 483.445197][ T5741] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 483.489601][T24556] netlink: 'syz.0.4853': attribute type 16 has an invalid length. [ 483.552019][ T5720] syz_tun: tun_net_xmit 110 [ 483.650323][T24556] 8021q: adding VLAN 0 to HW filter on device netdevsim0 [ 483.652581][T24556] mac80211_hwsim hwsim44 wlan0: left promiscuous mode [ 483.652596][T24556] mac80211_hwsim hwsim44 wlan0: left allmulticast mode [ 483.667963][ T5720] syz_tun: tun_net_xmit 110 [ 483.693899][T24556] 8021q: adding VLAN 0 to HW filter on device bond1 [ 483.720874][T24556] bond5: left allmulticast mode [ 483.724177][T24556] bond6: left promiscuous mode [ 483.724190][T24556] bond6: left allmulticast mode [ 483.741279][T24556] vlan2: left promiscuous mode [ 483.741296][T24556] bond8: left promiscuous mode [ 483.741468][T24556] vlan2: left allmulticast mode [ 483.741480][T24556] bond8: left allmulticast mode [ 483.748742][T12210] wlan1: Trigger new scan to find an IBSS to join [ 483.755840][T24556] macvtap1: left promiscuous mode [ 483.755856][T24556] vlan0: left promiscuous mode [ 483.756183][T24556] macvtap1: left allmulticast mode [ 483.756194][T24556] vlan0: left allmulticast mode [ 483.756204][T24556] v: left allmulticast mode [ 483.773557][T24556] syzkaller0: left promiscuous mode [ 483.773574][T24556] syzkaller0: left allmulticast mode [ 483.775155][T24556] A link change request failed with some changes committed already. Interface t may have been left with an inconsistent configuration, please check. [ 483.787473][T12210] netdevsim netdevsim7 netdevsim0: set [0, 0] type 1 family 0 port 8472 - 0 [ 483.788550][T12210] bond2: (slave veth3): link status definitely up, 10000 Mbps full duplex [ 483.788605][T12210] bond2: Warning: No 802.3ad response from the link partner for any adapters in the bond [ 483.882969][T12210] bond2: active interface up! [ 483.907455][ T5713] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 483.931081][T12209] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 484.076031][T11069] ip6_tunnel:  xmit: Local address not yet configured! [ 484.076262][T11069] ip6_tunnel:  xmit: Local address not yet configured! [ 484.098413][ T5741] ip6_tunnel:  xmit: Local address not yet configured! [ 484.117077][ T5734] ip6_tunnel:  xmit: Local address not yet configured! [ 484.117214][T11069] netdevsim netdevsim7 netdevsim3: set [0, 0] type 1 family 0 port 8472 - 0 [ 484.158381][T12207] netdevsim netdevsim7 netdevsim2: set [0, 0] type 1 family 0 port 8472 - 0 [ 484.159956][T12205] netdevsim netdevsim7 netdevsim1: set [0, 0] type 1 family 0 port 8472 - 0 [ 484.341459][T24585] openvswitch: netlink: Message has 4 unknown bytes. [ 484.470142][ T5741] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 484.533394][T24588] netlink: 12 bytes leftover after parsing attributes in process `syz.4.4862'. [ 484.587509][ T5741] ip6_tunnel:  xmit: Local address not yet configured! [ 484.613613][T24592] netlink: 8 bytes leftover after parsing attributes in process `syz.5.4861'. [ 484.614094][T24595] netlink: 8 bytes leftover after parsing attributes in process `syz.5.4861'. [ 484.651784][T24592] netlink: 16 bytes leftover after parsing attributes in process `syz.5.4861'. [ 484.671016][T24594] team0: Port device vlan0 added [ 484.673045][T24597] batman_adv: batadv0: Adding interface: wlan1 [ 484.673057][T24597] batman_adv: batadv0: The MTU of interface wlan1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 484.673223][T24597] batman_adv: batadv0: Interface activated: wlan1 [ 484.727637][T24597] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 484.732097][T24597] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 484.786743][T24601] netdevsim netdevsim0 netdevsim0: entered promiscuous mode [ 484.942345][T24611] syz_tun: tun_net_xmit 42 [ 485.027477][T24616] netlink: 28 bytes leftover after parsing attributes in process `syz.5.4870'. [ 485.034677][T24621] netlink: 28 bytes leftover after parsing attributes in process `syz.5.4870'. [ 485.060228][T12207] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 485.162031][T24624] validate_nla: 3 callbacks suppressed [ 485.162047][T24624] netlink: 'syz.0.4871': attribute type 1 has an invalid length. [ 485.223285][T24624] 8021q: adding VLAN 0 to HW filter on device bond12 [ 485.233911][T24631] netlink: 'syz.5.4873': attribute type 1 has an invalid length. [ 485.253278][T24628] tls_set_device_offload: netdev not found [ 485.270706][T24629] bond12: (slave geneve5): making interface the new active one [ 485.271833][T24629] bond12: (slave geneve5): Enslaving as an active interface with an up link [ 485.381520][T24631] 8021q: adding VLAN 0 to HW filter on device bond3 [ 485.538084][T24635] netlink: 44 bytes leftover after parsing attributes in process `syz.7.4874'. [ 485.539772][T24636] bond3: (slave geneve3): making interface the new active one [ 485.541428][T24636] bond3: (slave geneve3): Enslaving as an active interface with an up link [ 485.774831][T24653] netlink: 64 bytes leftover after parsing attributes in process `syz.6.4880'. [ 485.917570][T24614] batman_adv: batadv0: Interface deactivated: wlan1 [ 485.988209][ C1] syz_tun: tun_net_xmit 42 [ 486.039228][T24667] netlink: 'syz.5.4884': attribute type 6 has an invalid length. [ 486.373230][T24685] syzkaller0: entered promiscuous mode [ 486.373250][T24685] syzkaller0: entered allmulticast mode [ 486.632653][T24702] sctp: [Deprecated]: syz.5.4895 (pid 24702) Use of int in max_burst socket option. [ 486.632653][T24702] Use struct sctp_assoc_value instead [ 486.704134][T24702] bond4: option arp_validate: mode dependency failed, not supported in mode balance-tlb(5) [ 486.704334][T24710] IPVS: set_ctl: invalid protocol: 51 172.20.20.170:20003 [ 486.705911][T24702] bond4 (unregistering): Released all slaves [ 486.812261][T24703] bond4: option arp_validate: mode dependency failed, not supported in mode balance-tlb(5) [ 486.814561][T24703] bond4 (unregistering): Released all slaves [ 486.854325][T12197] nci: nci_rsp_packet: unsupported rsp opcode 0xf00 [ 486.854531][T12197] nci: nci_rsp_packet: unsupported rsp opcode 0xf00 [ 487.026466][ C1] syz_tun: tun_net_xmit 42 [ 487.057908][T24730] syzkaller1: entered promiscuous mode [ 487.057927][T24730] syzkaller1: entered allmulticast mode [ 487.586873][ T5741] net_ratelimit: 7 callbacks suppressed [ 487.586893][ T5741] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 487.986775][ C0] ip6_tunnel:  xmit: Local address not yet configured! [ 488.418198][T12210] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 488.627008][ T10] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 489.518153][T12200] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 489.625821][T24711] nci: __nci_request: wait_for_completion_interruptible_timeout failed -512 [ 489.681595][ T10] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 489.893579][T24763] __nla_validate_parse: 41 callbacks suppressed [ 489.893599][T24763] netlink: 116 bytes leftover after parsing attributes in process `syz.0.4908'. [ 489.905414][T24768] netlink: 'syz.7.4911': attribute type 39 has an invalid length. [ 489.985329][T24774] syz_tun: tun_net_xmit 42 [ 489.988288][ T5742] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 490.004706][T24774] netlink: 'syz.0.4915': attribute type 4 has an invalid length. [ 490.005895][T24775] netlink: 8 bytes leftover after parsing attributes in process `syz.5.4914'. [ 490.005974][T24775] netdevsim netdevsim5 netdevsim0: entered promiscuous mode [ 490.011521][T24776] netlink: 8 bytes leftover after parsing attributes in process `syz.5.4914'. [ 490.037329][T24775] netlink: 152 bytes leftover after parsing attributes in process `syz.5.4914'. [ 490.038181][T24776] netlink: 152 bytes leftover after parsing attributes in process `syz.5.4914'. [ 490.052072][T24770] netlink: 12 bytes leftover after parsing attributes in process `syz.4.4913'. [ 490.411674][T24784] macvlan0: entered promiscuous mode [ 490.448724][T24787] bond0: entered promiscuous mode [ 490.452450][T24787] batadv0: entered promiscuous mode [ 490.455546][T24787] hsr1: Slave A (bond0) is not up; please bring it up to get a fully working HSR network [ 490.482813][T24787] 8021q: adding VLAN 0 to HW filter on device hsr1 [ 490.502594][T24794] x_tables: ip_tables: CLASSIFY target: used from hooks PREROUTING, but only usable from FORWARD/OUTPUT/POSTROUTING [ 490.602728][T24795] netlink: 1363 bytes leftover after parsing attributes in process `syz.7.4920'. [ 490.636291][T12205] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 490.709965][ T5734] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 490.765546][T24813] netlink: 'syz.4.4925': attribute type 4 has an invalid length. [ 490.979599][T24828] IPVS: set_ctl: invalid protocol: 2 127.0.0.1:20001 [ 490.979830][T24828] IPVS: set_ctl: invalid protocol: 51 10.1.1.1:20001 [ 491.015371][T24826] netlink: 8 bytes leftover after parsing attributes in process `syz.0.4928'. [ 491.019629][T24830] netlink: 16 bytes leftover after parsing attributes in process `syz.5.4930'. [ 491.033872][ C1] syz_tun: tun_net_xmit 42 [ 491.108502][ C0] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 491.165015][T24835] gtp3: entered promiscuous mode [ 491.165036][T24835] gtp3: entered allmulticast mode [ 491.306194][T24838] openvswitch: netlink: Message has 1 unknown bytes. [ 491.891576][T24872] netlink: 'syz.7.4941': attribute type 1 has an invalid length. [ 492.066536][ C1] syz_tun: tun_net_xmit 42 [ 492.786773][ T10] net_ratelimit: 3 callbacks suppressed [ 492.786793][ T10] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 492.878647][T24872] workqueue: Failed to create a rescuer kthread for wq "bond1": -EINTR [ 492.888596][T12209] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 492.951267][T24877] netlink: 68 bytes leftover after parsing attributes in process `syz.5.4942'. [ 493.031790][ T5742] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 493.405589][T24900] xt_hashlimit: size too large, truncated to 1048576 [ 493.519979][T24908] xt_hashlimit: size too large, truncated to 1048576 [ 493.828018][ T5741] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 494.007334][ T3318] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 494.183049][T24938] nbd0: detected capacity change from 0 to 63 [ 494.184844][ T5622] block nbd0: Receive control failed (result -32) [ 494.191816][ T4946] block nbd0: Dead connection, failed to find a fallback [ 494.191841][ T4946] block nbd0: shutting down sockets [ 494.191854][ T4946] blk_print_req_error: 60 callbacks suppressed [ 494.191866][ T4946] I/O error, dev nbd0, sector 0 op 0x0:(READ) flags 0x800000 phys_seg 1 prio class 2 [ 494.191901][ T4946] buffer_io_error: 138 callbacks suppressed [ 494.191910][ T4946] Buffer I/O error on dev nbd0, logical block 0, async page read [ 494.192982][ T4946] I/O error, dev nbd0, sector 2 op 0x0:(READ) flags 0x800000 phys_seg 3 prio class 2 [ 494.193007][ T4946] Buffer I/O error on dev nbd0, logical block 1, async page read [ 494.193021][ T4946] Buffer I/O error on dev nbd0, logical block 2, async page read [ 494.193034][ T4946] Buffer I/O error on dev nbd0, logical block 3, async page read [ 494.193152][ T4946] I/O error, dev nbd0, sector 0 op 0x0:(READ) flags 0x800000 phys_seg 1 prio class 2 [ 494.193174][ T4946] Buffer I/O error on dev nbd0, logical block 0, async page read [ 494.193289][ T4946] I/O error, dev nbd0, sector 2 op 0x0:(READ) flags 0x800000 phys_seg 1 prio class 2 [ 494.193310][ T4946] Buffer I/O error on dev nbd0, logical block 1, async page read [ 494.193435][ T4946] I/O error, dev nbd0, sector 4 op 0x0:(READ) flags 0x800000 phys_seg 1 prio class 2 [ 494.193456][ T4946] Buffer I/O error on dev nbd0, logical block 2, async page read [ 494.193544][ T4946] I/O error, dev nbd0, sector 6 op 0x0:(READ) flags 0x800000 phys_seg 1 prio class 2 [ 494.193565][ T4946] Buffer I/O error on dev nbd0, logical block 3, async page read [ 494.193839][ T4946] I/O error, dev nbd0, sector 0 op 0x0:(READ) flags 0x800000 phys_seg 1 prio class 2 [ 494.193933][ T4946] Buffer I/O error on dev nbd0, logical block 0, async page read [ 494.194035][ T4946] I/O error, dev nbd0, sector 2 op 0x0:(READ) flags 0x800000 phys_seg 1 prio class 2 [ 494.194057][ T4946] Buffer I/O error on dev nbd0, logical block 1, async page read [ 494.195108][ T4946] I/O error, dev nbd0, sector 4 op 0x0:(READ) flags 0x800000 phys_seg 1 prio class 2 [ 494.195273][ T4946] I/O error, dev nbd0, sector 6 op 0x0:(READ) flags 0x800000 phys_seg 1 prio class 2 [ 494.197987][T21080] ldm_validate_partition_table(): Disk read failed. [ 494.202344][T21080] Dev nbd0: unable to read RDB block 0 [ 494.205044][T21080] nbd0: unable to read partition table [ 494.225510][T24940] netlink: 'syz.4.4958': attribute type 1 has an invalid length. [ 494.245534][T21080] ldm_validate_partition_table(): Disk read failed. [ 494.247308][T21080] Dev nbd0: unable to read RDB block 0 [ 494.248574][T21080] nbd0: unable to read partition table [ 494.290778][T24940] 8021q: adding VLAN 0 to HW filter on device bond41 [ 494.305799][T24940] netlink: 'syz.4.4958': attribute type 1 has an invalid length. [ 494.650992][T24957] 0: reclassify loop, rule prio 0, protocol 03 [ 494.869067][ T5741] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 495.051833][T24985] __nla_validate_parse: 10 callbacks suppressed [ 495.051852][T24985] netlink: 16 bytes leftover after parsing attributes in process `syz.5.4970'. [ 495.052974][T24984] netlink: 16 bytes leftover after parsing attributes in process `syz.5.4970'. [ 495.057851][T24982] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 495.114517][T24963] wg0 speed is unknown, defaulting to 1000 [ 495.124195][T24963] hsr0 speed is unknown, defaulting to 1000 [ 495.130816][T12197] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 495.141817][T24963] lo speed is unknown, defaulting to 1000 [ 495.407690][T24999] netlink: 60 bytes leftover after parsing attributes in process `syz.5.4977'. [ 495.514586][T25005] netlink: 12 bytes leftover after parsing attributes in process `syz.4.4974'. [ 495.626054][T25010] netlink: 8 bytes leftover after parsing attributes in process `syz.6.4978'. [ 495.838379][T25019] netlink: 4 bytes leftover after parsing attributes in process `syz.4.4980'. [ 495.907323][ T5734] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 495.934505][T25010] 8021q: adding VLAN 0 to HW filter on device bond3 [ 496.013123][T25026] IPVS: sync thread started: state = MASTER, mcast_ifn = veth0_to_hsr, syncid = 1, id = 0 [ 496.013734][T25025] netlink: 76 bytes leftover after parsing attributes in process `syz.7.4981'. [ 496.059583][T25029] netlink: 8 bytes leftover after parsing attributes in process `syz.4.4982'. [ 496.059614][T25029] netlink: 20 bytes leftover after parsing attributes in process `syz.4.4982'. [ 496.075778][ T44] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 496.180889][T25029] netlink: 8 bytes leftover after parsing attributes in process `syz.4.4982'. [ 496.229928][ C0] ip6_tunnel:  xmit: Local address not yet configured! [ 496.268689][ T3318] netdevsim netdevsim4 netdevsim3: set [0, 0] type 1 family 0 port 8472 - 0 [ 496.271197][T12209] netdevsim netdevsim4 netdevsim0: set [0, 0] type 1 family 0 port 8472 - 0 [ 496.271289][T12209] netdevsim netdevsim4 netdevsim2: set [0, 0] type 1 family 0 port 8472 - 0 [ 496.271356][T12209] netdevsim netdevsim4 netdevsim1: set [0, 0] type 1 family 0 port 8472 - 0 [ 496.432616][T25039] bond0: (slave bond_slave_0): Releasing backup interface [ 496.499795][T25039] bond_slave_0: entered promiscuous mode [ 496.499817][T25039] bond_slave_0: entered allmulticast mode [ 497.513249][ T4946] block nbd1: Possible stuck request ffff8880271b5080: control (read@0,1024B). Runtime 300 seconds [ 497.513289][ T4946] block nbd1: Possible stuck request ffff8880271b5240: control (read@1024,1024B). Runtime 300 seconds [ 497.513314][ T4946] block nbd1: Possible stuck request ffff8880271b5400: control (read@2048,1024B). Runtime 300 seconds [ 497.513338][ T4946] block nbd1: Possible stuck request ffff8880271b55c0: control (read@3072,1024B). Runtime 300 seconds [ 497.900150][T25108] net_ratelimit: 6 callbacks suppressed [ 497.900169][T25108] netlink: zone id is out of range [ 497.900177][T25108] netlink: zone id is out of range [ 497.900183][T25108] netlink: zone id is out of range [ 497.900190][T25108] netlink: zone id is out of range [ 497.900196][T25108] netlink: zone id is out of range [ 497.900202][T25108] netlink: zone id is out of range [ 497.900211][T25108] netlink: zone id is out of range [ 497.900216][T25108] netlink: zone id is out of range [ 497.900223][T25108] netlink: zone id is out of range [ 497.987577][ T3103] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 498.513893][T25131] syzkaller0: entered promiscuous mode [ 498.513914][T25131] syzkaller0: entered allmulticast mode [ 498.596583][T25139] xt_hashlimit: size too large, truncated to 1048576 [ 500.720908][T25094] nci: __nci_request: wait_for_completion_interruptible_timeout failed -512 [ 500.763753][T25156] netlink: 'syz.6.5015': attribute type 1 has an invalid length. [ 500.763772][T25156] __nla_validate_parse: 12 callbacks suppressed [ 500.763782][T25156] netlink: 220 bytes leftover after parsing attributes in process `syz.6.5015'. [ 501.023393][T25160] IPVS: length: 118 != 8 [ 501.221488][T25168] ipvlan2: entered allmulticast mode [ 501.221509][T25168] virt_wifi0: entered allmulticast mode [ 501.226056][T25168] batman_adv: batadv0: Adding interface: ipvlan2 [ 501.226070][T25168] batman_adv: batadv0: The MTU of interface ipvlan2 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 501.226094][T25168] batman_adv: batadv0: Interface activated: ipvlan2 [ 501.283308][T25168] ipvlan3: entered allmulticast mode [ 501.351837][ T1311] ieee802154 phy1 wpan1: encryption failed: -22 [ 501.410419][T25185] tipc: Enabling of bearer rejected, already enabled [ 501.415154][T25186] tipc: Enabling of bearer rejected, already enabled [ 501.425937][T25186] netlink: 32 bytes leftover after parsing attributes in process `syz.0.5023'. [ 501.426167][T25185] netlink: 32 bytes leftover after parsing attributes in process `syz.0.5023'. [ 501.502849][T25185] erspan0: entered promiscuous mode [ 501.652111][T25196] netlink: 'syz.6.5025': attribute type 1 has an invalid length. [ 502.075606][T25218] netlink: 'syz.0.5031': attribute type 10 has an invalid length. [ 502.075638][T25218] netlink: 40 bytes leftover after parsing attributes in process `syz.0.5031'. [ 502.075663][T25218] batadv0: entered promiscuous mode [ 502.075677][T25218] batadv0: entered allmulticast mode [ 502.110664][T25218] bridge0: port 2(batadv0) entered blocking state [ 502.110834][T25218] bridge0: port 2(batadv0) entered disabled state [ 502.127974][T25218] bridge0: port 2(batadv0) entered blocking state [ 502.128073][T25218] bridge0: port 2(batadv0) entered forwarding state [ 502.268137][T11069] batman_adv: batadv0: No IGMP Querier present - multicast optimizations disabled [ 502.268154][T11069] batman_adv: batadv0: No MLD Querier present - multicast optimizations disabled [ 502.340907][T25235] netlink: 4 bytes leftover after parsing attributes in process `syz.7.5034'. [ 502.368594][T25237] x_tables: duplicate underflow at hook 1 [ 502.368862][T25237] netlink: 8 bytes leftover after parsing attributes in process `syz.0.5036'. [ 502.371941][T25237] syzkaller0: entered promiscuous mode [ 502.371960][T25237] syzkaller0: entered allmulticast mode [ 502.373867][T25237] tipc: Enabling of bearer rejected, already enabled [ 502.869931][T25275] netlink: 8 bytes leftover after parsing attributes in process `syz.6.5045'. [ 502.926851][T11069] net_ratelimit: 13 callbacks suppressed [ 502.926868][T11069] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 503.019480][T25281] batman_adv: batadv0: Adding interface: syzkaller0 [ 503.019496][T25281] batman_adv: batadv0: The MTU of interface syzkaller0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 503.019522][T25281] batman_adv: batadv0: Interface activated: syzkaller0 [ 503.115944][T25290] netlink: 32 bytes leftover after parsing attributes in process `syz.6.5050'. [ 503.164258][T25279] batman_adv: batadv0: Interface deactivated: syzkaller0 [ 503.217515][T25295] netlink: 32 bytes leftover after parsing attributes in process `syz.5.5052'. [ 503.231515][ T5734] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 503.249643][T25279] batman_adv: batadv0: Removing interface: syzkaller0 [ 503.295936][T25290] netlink: 252 bytes leftover after parsing attributes in process `syz.6.5050'. [ 503.311026][T25298] Bluetooth: hci0: unsupported parameter 5134 [ 503.311045][T25298] Bluetooth: hci0: unsupported parameter 8192 [ 503.311058][T25298] Bluetooth: hci0: unsupported parameter 5134 [ 503.311068][T25298] Bluetooth: hci0: unsupported parameter 8192 [ 503.729543][T25323] ip_tables: iptables: counters copy to user failed while replacing table [ 503.889428][T25323] team0: Port device team_slave_0 removed [ 503.974087][T25337] bridge2: trying to set multicast query interval above maximum, setting to 8640000 (86400000ms) [ 504.108399][T11069] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 504.112421][T25343] bridge3: trying to set multicast query interval above maximum, setting to 8640000 (86400000ms) [ 504.307424][ T5734] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 504.321577][T25354] ip6_tables: ip6tables: counters copy to user failed while replacing table [ 504.427027][T25354] tc action pedit 'at' offset 5 out of bounds [ 504.427047][T25354] tc action pedit 'at' offset 5 out of bounds [ 504.427058][T25354] tc action pedit 'at' offset 5 out of bounds [ 504.427067][T25354] tc action pedit 'at' offset 5 out of bounds [ 504.427077][T25354] tc action pedit 'at' offset 5 out of bounds [ 504.427087][T25354] tc action pedit 'at' offset 5 out of bounds [ 504.427097][T25354] tc action pedit 'at' offset 5 out of bounds [ 504.427107][T25354] tc action pedit 'at' offset 5 out of bounds [ 504.427115][T25354] tc action pedit 'at' offset 5 out of bounds [ 504.427123][T25354] tc action pedit 'at' offset 5 out of bounds [ 504.427141][T25354] 0: reclassify loop, rule prio 0, protocol 800 [ 504.469022][ C1] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 504.520547][T25366] netlink: 'syz.4.5072': attribute type 1 has an invalid length. [ 504.730755][T25372] netlink: 'syz.0.5073': attribute type 1 has an invalid length. [ 504.797285][T25372] 8021q: adding VLAN 0 to HW filter on device bond14 [ 504.915828][T25372] bond14: (slave ip6gretap1): making interface the new active one [ 504.930188][T25372] bond14: (slave ip6gretap1): Enslaving as an active interface with an up link [ 505.063192][T25400] netlink: 'syz.4.5079': attribute type 1 has an invalid length. [ 505.125432][T25400] 8021q: adding VLAN 0 to HW filter on device bond42 [ 505.196615][ T5713] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 505.238952][ T3318] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 505.293413][T25409] netlink: 'syz.4.5080': attribute type 3 has an invalid length. [ 505.296188][T25409] netlink: 'syz.4.5080': attribute type 3 has an invalid length. [ 505.753234][T25430] netlink: 'syz.7.5087': attribute type 11 has an invalid length. [ 505.863013][T25434] sctp: [Deprecated]: syz.5.5089 (pid 25434) Use of int in max_burst socket option. [ 505.863013][T25434] Use struct sctp_assoc_value instead [ 506.117737][T25452] netlink: 'syz.0.5093': attribute type 1 has an invalid length. [ 506.237561][T25452] 8021q: adding VLAN 0 to HW filter on device bond15 [ 506.264559][T25453] bond15: (slave syz_tun): Enslaving as a backup interface with an up link [ 506.444540][T25477] __nla_validate_parse: 43 callbacks suppressed [ 506.444559][T25477] netlink: 4 bytes leftover after parsing attributes in process `syz.4.5097'. [ 506.448277][T25477] netlink: 4 bytes leftover after parsing attributes in process `syz.4.5097'. [ 506.828076][ T3103] syz_tun: tun_net_xmit 90 [ 506.987857][T12210] syz_tun: tun_net_xmit 86 [ 508.068969][T12205] syz_tun: tun_net_xmit 90 [ 508.069361][T12205] syz_tun: tun_net_xmit 70 [ 508.226905][ T5720] net_ratelimit: 9 callbacks suppressed [ 508.226924][ T5720] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 508.297090][ T44] syz_tun: tun_net_xmit 90 [ 508.466895][ T3103] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 508.586674][T12205] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 509.034977][T25447] nci: __nci_request: wait_for_completion_interruptible_timeout failed -512 [ 509.235424][T25498] xt_esp: unknown flags DD [ 509.275172][T25502] bridge0: port 1(bridge_slave_0) entered disabled state [ 509.344201][T25504] sysfs: cannot create duplicate filename '/class/ieee80211/1ůŕ^!' [ 509.344220][T25504] CPU: 1 UID: 0 PID: 25504 Comm: syz.7.5101 Not tainted syzkaller #0 PREEMPT(full) [ 509.344241][T25504] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/24/2026 [ 509.344252][T25504] Call Trace: [ 509.344260][T25504] [ 509.344269][T25504] dump_stack_lvl+0xe8/0x150 [ 509.344304][T25504] sysfs_warn_dup+0x8e/0xa0 [ 509.344374][T25504] sysfs_do_create_link_sd+0xc0/0x110 [ 509.344402][T25504] device_add_class_symlinks+0x1cf/0x240 [ 509.344510][T25504] device_add+0x467/0xb80 [ 509.344531][T25504] wiphy_register+0x1fc8/0x2ff0 [ 509.344613][T25504] ? __pfx_wiphy_register+0x10/0x10 [ 509.344630][T25504] ? __pfx_netdev_run_todo+0x10/0x10 [ 509.344736][T25504] ? minstrel_ht_alloc+0x6e0/0x7e0 [ 509.344809][T25504] ? ieee80211_init_rate_ctrl_alg+0x55d/0x5d0 [ 509.344876][T25504] ieee80211_register_hw+0x3dbb/0x4b00 [ 509.344956][T25504] ? ieee80211_register_hw+0x1941/0x4b00 [ 509.345001][T25504] ? __pfx_ieee80211_register_hw+0x10/0x10 [ 509.345024][T25504] ? __asan_memset+0x22/0x50 [ 509.345060][T25504] ? __hrtimer_setup+0x1b7/0x260 [ 509.345083][T25504] ? __pfx_mac80211_hwsim_beacon+0x10/0x10 [ 509.345185][T25504] mac80211_hwsim_new_radio+0x3258/0x56b0 [ 509.345240][T25504] ? __pfx_mac80211_hwsim_new_radio+0x10/0x10 [ 509.345260][T25504] ? kstrndup+0xbd/0x160 [ 509.345292][T25504] ? kstrndup+0xbd/0x160 [ 509.345313][T25504] hwsim_new_radio_nl+0xd8b/0xf90 [ 509.345350][T25504] genl_family_rcv_msg_doit+0x233/0x340 [ 509.345423][T25504] ? __pfx_genl_family_rcv_msg_doit+0x10/0x10 [ 509.345462][T25504] ? bpf_lsm_capable+0x9/0x20 [ 509.345493][T25504] ? security_capable+0x7e/0x2c0 [ 509.345563][T25504] genl_rcv_msg+0x614/0x7a0 [ 509.345591][T25504] ? __pfx_genl_rcv_msg+0x10/0x10 [ 509.345613][T25504] ? __pfx_hwsim_new_radio_nl+0x10/0x10 [ 509.345651][T25504] netlink_rcv_skb+0x226/0x4a0 [ 509.345704][T25504] ? __pfx_genl_rcv_msg+0x10/0x10 [ 509.345727][T25504] ? __pfx_netlink_rcv_skb+0x10/0x10 [ 509.345769][T25504] ? down_read+0x2be/0x330 [ 509.345826][T25504] genl_rcv+0x28/0x40 [ 509.345846][T25504] netlink_unicast+0x7bd/0x940 [ 509.345898][T25504] netlink_sendmsg+0x813/0xb40 [ 509.345935][T25504] ? __pfx_netlink_sendmsg+0x10/0x10 [ 509.345971][T25504] ? apparmor_socket_sendmsg+0x98/0x360 [ 509.346030][T25504] ? __pfx_netlink_sendmsg+0x10/0x10 [ 509.346054][T25504] sock_sendmsg_nosec+0x13a/0x180 [ 509.346105][T25504] ____sys_sendmsg+0x54e/0x850 [ 509.346161][T25504] ? __pfx_____sys_sendmsg+0x10/0x10 [ 509.346207][T25504] ? import_iovec+0x73/0xa0 [ 509.346236][T25504] ___sys_sendmsg+0x2a5/0x360 [ 509.346259][T25504] ? __lock_acquire+0x747/0x2de0 [ 509.346285][T25504] ? __pfx____sys_sendmsg+0x10/0x10 [ 509.346314][T25504] ? futex_wait+0x2a2/0x390 [ 509.346369][T25504] ? __fget_files+0x2a/0x420 [ 509.346402][T25504] ? __fget_files+0x3a2/0x420 [ 509.346438][T25504] __x64_sys_sendmsg+0x1b1/0x290 [ 509.346466][T25504] ? __pfx___x64_sys_sendmsg+0x10/0x10 [ 509.346513][T25504] do_syscall_64+0x166/0x520 [ 509.346534][T25504] ? trace_irq_disable+0x3b/0x140 [ 509.346552][T25504] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 509.346572][T25504] ? clear_bhb_loop+0x70/0xc0 [ 509.346595][T25504] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 509.346612][T25504] RIP: 0033:0x7f570439e159 [ 509.346630][T25504] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 509.346644][T25504] RSP: 002b:00007f570522c028 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 509.346664][T25504] RAX: ffffffffffffffda RBX: 00007f5704626090 RCX: 00007f570439e159 [ 509.346676][T25504] RDX: 0000000000000084 RSI: 0000200000000100 RDI: 0000000000000003 [ 509.346687][T25504] RBP: 00007f570443506b R08: 0000000000000000 R09: 0000000000000000 [ 509.346697][T25504] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 509.346707][T25504] R13: 00007f5704626128 R14: 00007f5704626090 R15: 00007ffd5dbf1cb8 [ 509.346739][T25504] [ 509.522995][ T3103] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 509.730011][T12205] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 510.077779][T25535] netlink: 56 bytes leftover after parsing attributes in process `syz.7.5109'. [ 510.215625][T25542] ieee802154 phy1 wpan1: encryption failed: -22 [ 510.409772][T25541] netlink: 48 bytes leftover after parsing attributes in process `syz.0.5113'. [ 510.409797][T25541] netlink: 48 bytes leftover after parsing attributes in process `syz.0.5113'. [ 510.549941][ T3103] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 510.665465][T25557] netlink: 'syz.6.5119': attribute type 2 has an invalid length. [ 510.665486][T25557] netlink: 40 bytes leftover after parsing attributes in process `syz.6.5119'. [ 510.704514][T25564] xt_hashlimit: overflow, try lower: 3/0 [ 510.721044][T25557] : entered promiscuous mode [ 510.729485][T25560] netlink: 'syz.6.5119': attribute type 21 has an invalid length. [ 510.729556][T25560] netlink: 132 bytes leftover after parsing attributes in process `syz.6.5119'. [ 510.733586][T25564] ŞŞŞŞŞť: renamed from bond_slave_0 [ 510.771000][T25572] xt_hashlimit: overflow, try lower: 3/0 [ 510.843395][T25575] veth0_to_bridge: entered promiscuous mode [ 510.920902][T25574] veth0_to_bridge: left promiscuous mode [ 510.952256][T12209] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 510.965111][T25579] syzkaller0: entered promiscuous mode [ 510.965129][T25579] syzkaller0: entered allmulticast mode [ 511.021046][T25578] 0: reclassify loop, rule prio 0, protocol 800 [ 511.022480][T25578] netlink: 16 bytes leftover after parsing attributes in process `syz.4.5125'. [ 511.266633][ T44] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 511.296780][T25602] netlink: 32 bytes leftover after parsing attributes in process `syz.5.5128'. [ 511.298311][T25602] netlink: 165 bytes leftover after parsing attributes in process `syz.5.5128'. [ 511.359360][T25606] netlink: 'syz.7.5130': attribute type 20 has an invalid length. [ 511.359382][T25606] IPv6: NLM_F_CREATE should be specified when creating new route [ 511.450866][T25611] netlink: NAT attribute type 0 has unexpected length (4 != 0) [ 511.483048][T25609] bridge0: port 2(bridge_slave_1) entered disabled state [ 512.061211][T25642] netlink: 4 bytes leftover after parsing attributes in process `syz.6.5140'. [ 512.177334][T25647] netlink: 8 bytes leftover after parsing attributes in process `syz.5.5143'. [ 512.227269][ C0] ip6_tunnel:  xmit: Local address not yet configured! [ 512.227557][ C1] syz_tun: tun_net_xmit 70 [ 512.370269][T25658] netlink: 32 bytes leftover after parsing attributes in process `syz.6.5147'. [ 512.374299][T25658] netlink: 32 bytes leftover after parsing attributes in process `syz.6.5147'. [ 512.415722][T25658] xt_hashlimit: size too large, truncated to 1048576 [ 512.466002][T25663] netlink: 32 bytes leftover after parsing attributes in process `syz.6.5147'. [ 512.529499][T25658] netlink: 32 bytes leftover after parsing attributes in process `syz.6.5147'. [ 512.530132][T25663] xt_hashlimit: size too large, truncated to 1048576 [ 513.183464][T25707] ip6tnl2: entered promiscuous mode [ 513.183489][T25707] ip6tnl2: entered allmulticast mode [ 513.405834][T25712] netlink: 8 bytes leftover after parsing attributes in process `syz.7.5153'. [ 513.416091][T25718] netlink: 8 bytes leftover after parsing attributes in process `syz.7.5153'. [ 513.612915][T25725] debugfs: '1ůŕ^!' already exists in 'ieee80211' [ 513.668011][ T5741] net_ratelimit: 5 callbacks suppressed [ 513.668029][ T5741] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 513.910953][T25748] netlink: 8 bytes leftover after parsing attributes in process `syz.7.5159'. [ 514.260761][T12210] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 514.308944][ T44] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 514.610452][T25789] bridge: RTM_NEWNEIGH bridge0 without NUD_PERMANENT [ 514.671824][T25797] bridge: RTM_NEWNEIGH bridge0 without NUD_PERMANENT [ 514.692135][T25745] netlink: 176 bytes leftover after parsing attributes in process `syz.0.5160'. [ 514.719603][ T3103] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 514.933725][T25812] netlink: 'syz.0.5172': attribute type 1 has an invalid length. [ 514.973686][T25812] bond16: entered promiscuous mode [ 514.974220][T25812] 8021q: adding VLAN 0 to HW filter on device bond16 [ 515.367460][T12210] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 515.758112][ T10] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 516.487680][T12209] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 516.788074][ T5741] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 517.347850][ T5720] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 517.445553][T25778] nci: __nci_request: wait_for_completion_interruptible_timeout failed -512 [ 517.628081][T12199] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 517.660006][T25847] __nla_validate_parse: 7 callbacks suppressed [ 517.660024][T25847] netlink: 20 bytes leftover after parsing attributes in process `syz.0.5184'. [ 517.684432][T25849] netlink: 'syz.6.5183': attribute type 3 has an invalid length. [ 517.692227][T25852] netlink: 12 bytes leftover after parsing attributes in process `syz.4.5185'. [ 517.717392][T25850] netlink: 88 bytes leftover after parsing attributes in process `syz.7.5181'. [ 517.722035][T25854] netlink: 64 bytes leftover after parsing attributes in process `syz.4.5185'. [ 517.739658][T25854] netlink: 64 bytes leftover after parsing attributes in process `syz.4.5185'. [ 517.739857][T25854] netlink: 64 bytes leftover after parsing attributes in process `syz.4.5185'. [ 517.740034][T25854] netlink: 64 bytes leftover after parsing attributes in process `syz.4.5185'. [ 517.740194][T25854] netlink: 64 bytes leftover after parsing attributes in process `syz.4.5185'. [ 517.740355][T25854] netlink: 64 bytes leftover after parsing attributes in process `syz.4.5185'. [ 517.753921][T25854] netlink: 64 bytes leftover after parsing attributes in process `syz.4.5185'. [ 518.018821][T25872] syzkaller0: left promiscuous mode [ 518.018843][T25872] syzkaller0: left allmulticast mode [ 518.272053][T25882] netlink: 'syz.6.5191': attribute type 19 has an invalid length. [ 518.508567][T25891] netlink: 'syz.7.5194': attribute type 1 has an invalid length. [ 518.728343][T12207] net_ratelimit: 3 callbacks suppressed [ 518.728361][T12207] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 518.871342][ T3103] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 519.213737][T25926] netlink: 'syz.7.5204': attribute type 9 has an invalid length. [ 519.519410][T25937] netlink: 'syz.0.5208': attribute type 4 has an invalid length. [ 519.832492][T12205] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 519.909460][ T5734] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 520.398665][ T5713] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 520.555156][T25994] netlink: 'syz.6.5225': attribute type 29 has an invalid length. [ 520.568814][T25994] netlink: 'syz.6.5225': attribute type 29 has an invalid length. [ 520.730663][T26004] veth0: entered promiscuous mode [ 520.845303][T26003] veth0: left promiscuous mode [ 520.950468][T12199] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 520.950870][ T3103] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 521.186682][ C1] syz_tun: tun_net_xmit 70 [ 522.000275][ T5734] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 522.079452][T12197] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 522.324494][T26088] netlink: 'syz.4.5248': attribute type 2 has an invalid length. [ 523.027493][ T5734] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 523.068313][T26142] rdma_rxe: rxe_newlink: failed to add team_slave_0 [ 523.435297][T26150] netlink: 'syz.6.5259': attribute type 2 has an invalid length. [ 523.485623][T26130] netlink: 'syz.7.5256': attribute type 3 has an invalid length. [ 523.549079][T26155] __nla_validate_parse: 71 callbacks suppressed [ 523.549097][T26155] netlink: 4 bytes leftover after parsing attributes in process `syz.6.5261'. [ 523.727149][T26163] netlink: 12 bytes leftover after parsing attributes in process `syz.7.5263'. [ 524.046994][T26177] tipc: Started in network mode [ 524.047023][T26177] tipc: Node identity 78563412785634122143658721436587, cluster identity 4711 [ 524.071730][ T5734] net_ratelimit: 2 callbacks suppressed [ 524.071767][ T5734] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 524.150682][T26186] syzkaller0: entered promiscuous mode [ 524.150703][T26186] syzkaller0: entered allmulticast mode [ 524.247318][T26191] netlink: 8 bytes leftover after parsing attributes in process `syz.0.5273'. [ 524.247337][T26191] netlink: 24 bytes leftover after parsing attributes in process `syz.0.5273'. [ 524.298473][ T3318] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 524.483814][T26203] netlink: 8 bytes leftover after parsing attributes in process `syz.6.5277'. [ 524.638692][T26212] netlink: 'syz.4.5281': attribute type 12 has an invalid length. [ 524.638713][T26212] netlink: 132 bytes leftover after parsing attributes in process `syz.4.5281'. [ 524.932821][T26233] netlink: 20 bytes leftover after parsing attributes in process `syz.6.5286'. [ 525.035523][T26239] Dead loop on virtual device ip6_vti0 (net 151), fix it urgently! [ 525.108876][ T3103] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 525.208088][T26249] syzkaller0: entered promiscuous mode [ 525.208266][T26249] syzkaller0: entered allmulticast mode [ 525.210248][T26251] netlink: 9 bytes leftover after parsing attributes in process `syz.0.5291'. [ 525.211639][T26251] gretap0: entered promiscuous mode [ 525.408808][T12200] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 525.788372][T26269] netlink: 8 bytes leftover after parsing attributes in process `syz.4.5296'. [ 526.147093][ T5734] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 526.467346][ T44] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 526.509206][T12214] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 526.662890][T26283] netlink: 'syz.4.5301': attribute type 2 has an invalid length. [ 526.685876][T26283] netlink: 'syz.4.5301': attribute type 1 has an invalid length. [ 526.685894][T26283] netlink: 228 bytes leftover after parsing attributes in process `syz.4.5301'. [ 527.187319][ T5734] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 527.192257][T26314] openvswitch: netlink: Missing key (keys=c0, expected=20100) [ 527.588449][ T4946] block nbd1: Possible stuck request ffff8880271b5080: control (read@0,1024B). Runtime 330 seconds [ 527.588488][ T4946] block nbd1: Possible stuck request ffff8880271b5240: control (read@1024,1024B). Runtime 330 seconds [ 527.588512][ T4946] block nbd1: Possible stuck request ffff8880271b5400: control (read@2048,1024B). Runtime 330 seconds [ 527.588536][ T4946] block nbd1: Possible stuck request ffff8880271b55c0: control (read@3072,1024B). Runtime 330 seconds [ 528.015355][ T30] audit: type=1804 audit(1789931643.587:15): pid=26364 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=invalid_pcr cause=open_writers comm="syz.0.5324" name="/newroot/473/cgroup.controllers" dev="tmpfs" ino=2440 res=1 errno=0 [ 528.015404][ T30] audit: type=1800 audit(1789931643.587:16): pid=26364 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.0.5324" name="cgroup.controllers" dev="tmpfs" ino=2440 res=0 errno=0 [ 528.065685][ T30] audit: type=1800 audit(1789931643.637:17): pid=26368 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.0.5324" name="cgroup.controllers" dev="tmpfs" ino=2440 res=0 errno=0 [ 528.130702][T26371] netlink: 'syz.4.5325': attribute type 1 has an invalid length. [ 528.372330][T26387] netlink: 'syz.6.5329': attribute type 10 has an invalid length. [ 528.605640][T26399] __nla_validate_parse: 15 callbacks suppressed [ 528.605658][T26399] netlink: 24 bytes leftover after parsing attributes in process `syz.4.5335'. [ 528.605684][T26399] netlink: 16 bytes leftover after parsing attributes in process `syz.4.5335'. [ 528.741046][T26409] netlink: 8 bytes leftover after parsing attributes in process `syz.6.5336'. [ 528.741078][T26409] netlink: 20 bytes leftover after parsing attributes in process `syz.6.5336'. [ 528.779039][T26407] ieee802154 phy1 wpan1: encryption failed: -22 [ 528.782415][T26407] netlink: 8 bytes leftover after parsing attributes in process `syz.7.5337'. [ 528.783221][T26410] netlink: 8 bytes leftover after parsing attributes in process `syz.7.5337'. [ 528.906065][T26416] xt_hashlimit: size too large, truncated to 1048576 [ 528.940595][T26420] netlink: 12 bytes leftover after parsing attributes in process `syz.6.5339'. [ 528.942516][T26420] mac80211_hwsim hwsim60 wlan0: entered promiscuous mode [ 528.987417][T26422] netlink: 20 bytes leftover after parsing attributes in process `syz.0.5341'. [ 529.119099][T26426] sctp: [Deprecated]: syz.0.5344 (pid 26426) Use of int in maxseg socket option. [ 529.119099][T26426] Use struct sctp_assoc_value instead [ 529.269967][ T5734] net_ratelimit: 4 callbacks suppressed [ 529.269985][ T5734] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 529.275536][T26430] block nbd0: Unsupported socket: should be TCP or UNIX. [ 529.297685][T26434] netlink: 6024 bytes leftover after parsing attributes in process `syz.4.5347'. [ 529.404097][T26438] netlink: 12 bytes leftover after parsing attributes in process `syz.4.5349'. [ 529.490659][T26448] netlink: 'syz.0.5350': attribute type 83 has an invalid length. [ 529.508374][ T44] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 529.829118][T12200] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 530.058090][T26469] skbuff: bad partial csum: csum=65535/2 headroom=178 headlen=65543 [ 530.151225][ T3318] bond0: (slave bond_slave_0): link status definitely down, disabling slave [ 530.209696][T26476] bond1: entered promiscuous mode [ 530.209781][T26476] bond1: entered allmulticast mode [ 530.210217][T26476] 8021q: adding VLAN 0 to HW filter on device bond1 [ 530.214952][T26484] x_tables: ip_tables: CLASSIFY target: used from hooks PREROUTING, but only usable from FORWARD/OUTPUT/POSTROUTING [ 530.307968][ T5734] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 530.355633][T26488] ip6t_srh: unknown srh match flags 5F28 [ 530.938453][T12200] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 531.047959][T26568] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 531.330079][T26596] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 531.358354][ T5734] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 531.554786][T26626] ip_tables: iptables: counters copy to user failed while replacing table [ 531.761040][T26641] netlink: 'syz.4.5383': attribute type 1 has an invalid length. [ 531.846704][T26641] bond43: entered promiscuous mode [ 531.848368][T26641] bond43: entered allmulticast mode [ 531.848779][T26641] 8021q: adding VLAN 0 to HW filter on device bond43 [ 531.859771][T26650] erspan2: entered allmulticast mode [ 531.863411][T26650] bond43: (slave erspan2): making interface the new active one [ 531.863430][T26650] erspan2: entered promiscuous mode [ 531.872910][T26650] bond43: (slave erspan2): Enslaving as an active interface with an up link [ 531.943137][T26660] bridge1: trying to set multicast startup query interval below minimum, setting to 100 (1000ms) [ 532.163079][ T3318] bridge_slave_1: left allmulticast mode [ 532.163103][ T3318] bridge_slave_1: left promiscuous mode [ 532.163297][ T3318] bridge0: port 2(bridge_slave_1) entered disabled state [ 532.203132][ T3318] bridge_slave_0: left allmulticast mode [ 532.203155][ T3318] bridge_slave_0: left promiscuous mode [ 532.203344][ T3318] bridge0: port 1(bridge_slave_0) entered disabled state [ 532.323175][ T3318] dvmrp0: left allmulticast mode [ 532.958515][T26687] netlink: 'syz.6.5388': attribute type 10 has an invalid length. [ 533.407786][ T3318] bond1 (unregistering): (slave geneve3): Releasing active interface [ 533.519018][ T3318] bond2 (unregistering): (slave bridge1): Releasing active interface [ 533.608925][ T3318] bond4 (unregistering): (slave bridge3): Releasing active interface [ 533.721997][ T3318] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 533.774416][ T3318] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 533.791041][ T3318] bond0 (unregistering): Released all slaves [ 533.801765][ T3318] bond1 (unregistering): Released all slaves [ 533.814826][ T3318] bond2 (unregistering): Released all slaves [ 533.832491][ T3318] bond3 (unregistering): Released all slaves [ 533.846702][ T3318] bond4 (unregistering): Released all slaves [ 533.854218][ T3318] bond5 (unregistering): Released all slaves [ 533.875891][ T3318] bond6 (unregistering): Released all slaves [ 534.000348][T26682] __nla_validate_parse: 15 callbacks suppressed [ 534.000368][T26682] netlink: 28 bytes leftover after parsing attributes in process `syz.6.5388'. [ 534.000384][T26682] netlink: 28 bytes leftover after parsing attributes in process `syz.6.5388'. [ 534.001860][T26684] netlink: 28 bytes leftover after parsing attributes in process `syz.6.5388'. [ 534.001880][T26684] netlink: 28 bytes leftover after parsing attributes in process `syz.6.5388'. [ 534.060512][ T3318] tipc: Disabling bearer [ 534.060623][ T3318] tipc: Disabling bearer [ 534.073774][ T3318] tipc: Disabling bearer [ 534.097023][ T3318] tipc: Left network mode [ 534.383122][T12195] net_ratelimit: 5 callbacks suppressed [ 534.383140][T12195] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 534.478251][ T3103] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 534.667793][T26719] netlink: 'syz.7.5395': attribute type 10 has an invalid length. [ 534.667958][T26719] bond0: (slave virt_wifi0): The slave device specified does not support setting the MAC address [ 534.668145][T26719] bond0: (slave virt_wifi0): Error -95 calling set_mac_address [ 534.670175][ T3318] IPVS: stopping master sync thread 9107 ... [ 535.034433][T26742] netlink: 20 bytes leftover after parsing attributes in process `syz.7.5401'. [ 535.055057][T26743] netlink: 8 bytes leftover after parsing attributes in process `syz.7.5401'. [ 535.378642][T26748] netlink: 28 bytes leftover after parsing attributes in process `syz.7.5403'. [ 535.492994][T26750] netlink: 12 bytes leftover after parsing attributes in process `syz.7.5403'. [ 535.522485][ T5734] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 535.529221][T12193] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 535.577829][T26751] netlink: 'syz.6.5404': attribute type 9 has an invalid length. [ 535.586832][ T5720] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 535.603764][T26757] netlink: 28 bytes leftover after parsing attributes in process `syz.7.5403'. [ 535.612498][T26754] netlink: 12 bytes leftover after parsing attributes in process `syz.7.5403'. [ 535.647878][T26750] ipvlan2: entered allmulticast mode [ 535.647905][T26750] syz_tun: entered allmulticast mode [ 535.656066][T26764] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 535.734909][T26754] ipvlan2: entered allmulticast mode [ 535.849348][ T4934] Bluetooth: hci8: unexpected cc 0x0c03 length: 249 > 1 [ 535.853007][ T4934] Bluetooth: hci8: unexpected cc 0x1003 length: 249 > 9 [ 535.853761][ T4934] Bluetooth: hci8: unexpected cc 0x1001 length: 249 > 9 [ 535.855369][ T4934] Bluetooth: hci8: unexpected cc 0x0c23 length: 249 > 4 [ 535.862718][ T4934] Bluetooth: hci8: unexpected cc 0x0c38 length: 249 > 2 [ 536.549402][ T5734] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 536.671047][T12214] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 536.796676][ T3318] hsr_slave_0: left promiscuous mode [ 536.798459][ T3318] hsr_slave_1: left promiscuous mode [ 536.800188][ T3318] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 537.031212][T26826] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 537.279996][T26803] batman_adv: batadv0: Adding interface: dummy0 [ 537.280012][T26803] batman_adv: batadv0: The MTU of interface dummy0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 537.280048][T26803] batman_adv: batadv0: Interface activated: dummy0 [ 537.525857][T26829] netlink: 'syz.4.5420': attribute type 1 has an invalid length. [ 537.551021][T26831] ip_tables: iptables: counters copy to user failed while replacing table [ 537.587991][ T5734] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 537.893553][ T3318] IPVS: stop unused estimator thread 0... [ 537.907766][ T4934] Bluetooth: hci8: command tx timeout [ 538.050245][T26849] x_tables: duplicate entry at hook 1 [ 538.191076][T26768] wg0 speed is unknown, defaulting to 1000 [ 538.193262][T26768] hsr0 speed is unknown, defaulting to 1000 [ 538.195100][T26768] lo speed is unknown, defaulting to 1000 [ 538.951405][T26768] bridge0: port 1(bridge_slave_0) entered blocking state [ 538.951577][T26768] bridge0: port 1(bridge_slave_0) entered disabled state [ 538.951704][T26768] bridge_slave_0: entered allmulticast mode [ 538.953673][T26768] bridge_slave_0: entered promiscuous mode [ 538.989690][T26768] bridge0: port 2(bridge_slave_1) entered blocking state [ 538.990662][T26768] bridge0: port 2(bridge_slave_1) entered disabled state [ 538.990807][T26768] bridge_slave_1: entered allmulticast mode [ 538.993669][T26768] bridge_slave_1: entered promiscuous mode [ 539.106627][ C1] syz_tun: tun_net_xmit 70 [ 539.120717][T26768] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 539.125638][T26768] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 539.205288][T26768] team0: Port device team_slave_0 added [ 539.220424][T26768] team0: Port device team_slave_1 added [ 539.281638][T26768] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 539.281654][T26768] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 539.281676][T26768] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 539.284879][T26768] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 539.284892][T26768] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 539.284914][T26768] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 539.381175][T26768] hsr_slave_0: entered promiscuous mode [ 539.381901][T26768] hsr_slave_1: entered promiscuous mode [ 539.382351][T26768] debugfs: 'hsr0' already exists in 'hsr' [ 539.382368][T26768] Cannot create hsr debugfs directory [ 539.429482][T26911] __nla_validate_parse: 7 callbacks suppressed [ 539.429498][T26911] netlink: 8 bytes leftover after parsing attributes in process `syz.7.5441'. [ 539.429700][T26911] netlink: 8 bytes leftover after parsing attributes in process `syz.7.5441'. [ 539.677717][ T5734] net_ratelimit: 4 callbacks suppressed [ 539.677760][ T5734] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 539.986465][ T4934] Bluetooth: hci8: command tx timeout [ 540.017161][T26124] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 540.707273][ T5734] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 541.018236][T26917] netlink: 12 bytes leftover after parsing attributes in process `syz.6.5443'. [ 541.043252][T26917] netlink: 12 bytes leftover after parsing attributes in process `syz.6.5443'. [ 541.060254][T26917] netlink: 12 bytes leftover after parsing attributes in process `syz.6.5443'. [ 541.076217][T26917] netlink: 12 bytes leftover after parsing attributes in process `syz.6.5443'. [ 541.093561][T26917] netlink: 12 bytes leftover after parsing attributes in process `syz.6.5443'. [ 541.111104][T26917] netlink: 12 bytes leftover after parsing attributes in process `syz.6.5443'. [ 541.131286][T26917] netlink: 12 bytes leftover after parsing attributes in process `syz.6.5443'. [ 541.137506][ T3318] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 541.152950][T26917] netlink: 12 bytes leftover after parsing attributes in process `syz.6.5443'. [ 541.668423][ T5720] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 541.669762][ T3318] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 541.671142][ T3103] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 541.673732][ T5713] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 541.747454][ T5734] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 541.766823][T26887] nci: __nci_request: wait_for_completion_interruptible_timeout failed -512 [ 541.789494][T26768] netdevsim netdevsim8 netdevsim0: renamed from eth0 [ 541.803577][T26768] 8021q: adding VLAN 0 to HW filter on device netdevsim0 [ 541.811896][T26768] netdevsim netdevsim8 netdevsim1: renamed from eth1 [ 541.860072][T26768] 8021q: adding VLAN 0 to HW filter on device netdevsim1 [ 541.862714][T26768] netdevsim netdevsim8 netdevsim2: renamed from eth2 [ 541.915559][T26937] netlink: 'syz.0.5450': attribute type 8 has an invalid length. [ 541.919095][T26768] 8021q: adding VLAN 0 to HW filter on device netdevsim2 [ 541.938988][T26768] netdevsim netdevsim8 netdevsim3: renamed from eth3 [ 541.953367][T26768] 8021q: adding VLAN 0 to HW filter on device netdevsim3 [ 541.954925][T26931] erspan0: entered promiscuous mode [ 542.068188][ T4934] Bluetooth: hci8: command tx timeout [ 542.258929][T12193] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 542.278988][T26768] 8021q: adding VLAN 0 to HW filter on device bond0 [ 542.325913][T26768] 8021q: adding VLAN 0 to HW filter on device team0 [ 542.355648][T12194] bridge0: port 1(bridge_slave_0) entered blocking state [ 542.355745][T12194] bridge0: port 1(bridge_slave_0) entered forwarding state [ 542.381845][T12195] bridge0: port 2(bridge_slave_1) entered blocking state [ 542.381940][T12195] bridge0: port 2(bridge_slave_1) entered forwarding state [ 542.946590][ C0] ip6_tunnel:  xmit: Local address not yet configured! [ 543.042178][T26990] ip6t_REJECT: TCP_RESET illegal for non-tcp [ 544.146960][ T4934] Bluetooth: hci8: command tx timeout [ 544.203854][T27019] veth3: entered allmulticast mode [ 544.391564][T26768] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 544.493171][T27034] __nla_validate_parse: 34 callbacks suppressed [ 544.493189][T27034] netlink: 28 bytes leftover after parsing attributes in process `syz.6.5474'. [ 544.647014][T27041] netlink: 'syz.4.5475': attribute type 1 has an invalid length. [ 544.707612][ T25] net_ratelimit: 61 callbacks suppressed [ 544.707630][ T25] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 544.749547][T27041] bond44: entered promiscuous mode [ 544.750362][T27041] 8021q: adding VLAN 0 to HW filter on device bond44 [ 544.862352][T27054] netlink: 8 bytes leftover after parsing attributes in process `syz.7.5479'. [ 544.880229][ T5741] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 544.944229][T27041] bond44: (slave bridge9): making interface the new active one [ 544.944252][T27041] bridge9: entered promiscuous mode [ 544.945391][T27041] bond44: (slave bridge9): Enslaving as an active interface with an up link [ 544.957704][T27056] netlink: 'syz.7.5479': attribute type 3 has an invalid length. [ 544.957748][T27056] netlink: 8 bytes leftover after parsing attributes in process `syz.7.5479'. [ 545.173598][T27065] vlan2: entered promiscuous mode [ 545.173619][T27065] bridge0: entered promiscuous mode [ 545.242123][T26768] veth0_vlan: entered promiscuous mode [ 545.275140][T26768] veth1_vlan: entered promiscuous mode [ 545.391757][T26768] veth0_macvtap: entered promiscuous mode [ 545.398927][T26768] veth1_macvtap: entered promiscuous mode [ 545.425295][T26768] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 545.451281][T26768] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 545.497591][ T3376] netdevsim netdevsim8 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 545.498745][ T3376] netdevsim netdevsim8 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 545.498778][ T3376] netdevsim netdevsim8 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 545.498806][ T3376] netdevsim netdevsim8 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 545.599649][T12225] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 545.770418][T12206] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 545.770438][T12206] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 545.830822][ T40] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 545.830841][ T40] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 545.907805][ T5741] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 546.273781][T27093] veth0_to_bond: entered allmulticast mode [ 546.464894][T27110] netlink: 60 bytes leftover after parsing attributes in process `syz.7.5493'. [ 546.465587][T27110] netlink: 8 bytes leftover after parsing attributes in process `syz.7.5493'. [ 546.545225][T27113] sctp: [Deprecated]: syz.4.5494 (pid 27113) Use of struct sctp_assoc_value in delayed_ack socket option. [ 546.545225][T27113] Use struct sctp_sack_info instead [ 546.626857][T27093] netdevsim netdevsim8 netdevsim3: unset [1, 0] type 2 family 0 port 6081 - 0 [ 546.719043][T12225] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 546.950215][ T5741] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 547.091349][T27136] tipc: Resetting bearer [ 547.396246][T27158] netlink: 16 bytes leftover after parsing attributes in process `syz.8.5504'. [ 547.747112][ T44] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 547.749863][T27174] netlink: 'syz.4.5507': attribute type 16 has an invalid length. [ 547.749880][T27174] netlink: 'syz.4.5507': attribute type 17 has an invalid length. [ 547.841296][ T40] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 547.870254][T27174] bridge0: port 1(bridge_slave_0) entered blocking state [ 547.870378][T27174] bridge0: port 1(bridge_slave_0) entered forwarding state [ 547.932783][T27168] netlink: 14 bytes leftover after parsing attributes in process `syz.4.5507'. [ 547.992784][T27174] veth0_macvtap: left allmulticast mode [ 547.997391][ T5627] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 548.014386][T27174] netdevsim netdevsim4 netdevsim0: left promiscuous mode [ 548.014747][T27174] 8021q: adding VLAN 0 to HW filter on device netdevsim0 [ 548.051483][T27174] ip6gre1: left allmulticast mode [ 548.064605][T27174] veth3: left promiscuous mode [ 548.064623][T27174] veth3: left allmulticast mode [ 548.066131][T27174] vlan3: left promiscuous mode [ 548.066147][T27174] geneve1: left promiscuous mode [ 548.095894][T27174] vlan3: left allmulticast mode [ 548.095911][T27174] geneve1: left allmulticast mode [ 548.111540][T27174] gretap1: left promiscuous mode [ 548.111556][T27174] gretap1: left allmulticast mode [ 548.121450][T27174] bond3: left promiscuous mode [ 548.129427][T27174] 8021q: adding VLAN 0 to HW filter on device bond4 [ 548.133706][T27174] 8021q: adding VLAN 0 to HW filter on device bond5 [ 548.138792][T27174] 8021q: adding VLAN 0 to HW filter on device bond6 [ 548.140892][T27174] 8021q: adding VLAN 0 to HW filter on device bond7 [ 548.142984][T27174] 8021q: adding VLAN 0 to HW filter on device bond8 [ 548.148278][T27174] 8021q: adding VLAN 0 to HW filter on device bond9 [ 548.150570][T27174] 8021q: adding VLAN 0 to HW filter on device bond10 [ 548.153515][T27174] 8021q: adding VLAN 0 to HW filter on device bond11 [ 548.155592][T27174] 8021q: adding VLAN 0 to HW filter on device bond12 [ 548.158574][T27174] 8021q: adding VLAN 0 to HW filter on device bond13 [ 548.160684][T27174] 8021q: adding VLAN 0 to HW filter on device bond14 [ 548.162766][T27174] 8021q: adding VLAN 0 to HW filter on device bond15 [ 548.164609][T27174] 8021q: adding VLAN 0 to HW filter on device bond16 [ 548.166725][T27174] 8021q: adding VLAN 0 to HW filter on device bond17 [ 548.168851][T27174] 8021q: adding VLAN 0 to HW filter on device bond18 [ 548.170976][T27174] 8021q: adding VLAN 0 to HW filter on device bond19 [ 548.173015][T27174] 8021q: adding VLAN 0 to HW filter on device bond20 [ 548.175097][T27174] 8021q: adding VLAN 0 to HW filter on device bond21 [ 548.178030][T27174] 8021q: adding VLAN 0 to HW filter on device bond22 [ 548.180135][T27174] 8021q: adding VLAN 0 to HW filter on device bond23 [ 548.182250][T27174] 8021q: adding VLAN 0 to HW filter on device bond24 [ 548.184318][T27174] 8021q: adding VLAN 0 to HW filter on device bond25 [ 548.186518][T27174] 8021q: adding VLAN 0 to HW filter on device bond26 [ 548.190654][T27174] 8021q: adding VLAN 0 to HW filter on device bond27 [ 548.196254][T27174] 8021q: adding VLAN 0 to HW filter on device bond28 [ 548.220094][T27174] 8021q: adding VLAN 0 to HW filter on device bond29 [ 548.245211][T27174] 8021q: adding VLAN 0 to HW filter on device bond30 [ 548.261380][T27174] 8021q: adding VLAN 0 to HW filter on device bond31 [ 548.273597][T27174] 8021q: adding VLAN 0 to HW filter on device bond32 [ 548.282793][T27174] 8021q: adding VLAN 0 to HW filter on device bond33 [ 548.315622][T27174] 8021q: adding VLAN 0 to HW filter on device bond34 [ 548.324543][T27194] netlink: 'syz.7.5512': attribute type 16 has an invalid length. [ 548.324558][T27194] netlink: 48 bytes leftover after parsing attributes in process `syz.7.5512'. [ 548.372786][T27174] 8021q: adding VLAN 0 to HW filter on device bond35 [ 548.397522][T27174] 8021q: adding VLAN 0 to HW filter on device bond36 [ 548.399980][T27174] 8021q: adding VLAN 0 to HW filter on device bond37 [ 548.402207][T27174] 8021q: adding VLAN 0 to HW filter on device bond38 [ 548.443523][T27174] bond40: left promiscuous mode [ 548.443542][T27174] ip6gre2: left promiscuous mode [ 548.462500][T27174] gtp3: left promiscuous mode [ 548.462518][T27174] gtp3: left allmulticast mode [ 548.481795][T27174] ipvlan2: left allmulticast mode [ 548.508843][T27174] bond43: left promiscuous mode [ 548.508862][T27174] erspan2: left promiscuous mode [ 548.509002][T27174] bond43: left allmulticast mode [ 548.510017][T27174] erspan2: left allmulticast mode [ 548.513350][T27174] bond44: left promiscuous mode [ 548.513367][T27174] bridge9: left promiscuous mode [ 548.554035][T12206] bridge0: port 2(bridge_slave_1) entered blocking state [ 548.554134][T12206] bridge0: port 2(bridge_slave_1) entered forwarding state [ 548.585173][T27168] batman_adv: batadv0: Interface deactivated: dummy0 [ 548.680534][T27168] batman_adv: batadv0: Removing interface: dummy0 [ 548.773401][T27196] netlink: 'syz.6.5513': attribute type 4 has an invalid length. [ 548.774005][T27194] veth0_macvtap: entered allmulticast mode [ 548.962792][T12206] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 549.015228][ T5280] 8021q: adding VLAN 0 to HW filter on device netdevsim3 [ 549.035046][T27211] netlink: 28 bytes leftover after parsing attributes in process `syz.7.5516'. [ 549.046280][T27211] netlink: 12 bytes leftover after parsing attributes in process `syz.7.5516'. [ 549.063873][T27211] ipvlan2: entered allmulticast mode [ 549.185351][T27213] tunl0: entered promiscuous mode [ 549.202730][T27213] netlink: 'syz.4.5517': attribute type 3 has an invalid length. [ 549.555411][T27240] bridge0: port 3(vlan3) entered blocking state [ 549.555585][T27240] bridge0: port 3(vlan3) entered disabled state [ 549.555774][T27240] vlan3: entered allmulticast mode [ 549.555788][T27240] geneve0: entered allmulticast mode [ 549.594463][T27240] vlan3: entered promiscuous mode [ 549.594483][T27240] geneve0: entered promiscuous mode [ 549.598965][T27241] xt_NETMAP: bad rangesize 37. [ 549.852290][T27245] netlink: 'syz.7.5523': attribute type 21 has an invalid length. [ 549.872826][T27245] netlink: 'syz.7.5523': attribute type 21 has an invalid length. [ 550.069880][T12221] net_ratelimit: 1 callbacks suppressed [ 550.069898][T12221] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 550.087855][ T30] audit: type=1804 audit(1789931665.667:18): pid=27256 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=invalid_pcr cause=open_writers comm="syz.7.5527" name="/newroot/150/cgroup.controllers" dev="tmpfs" ino=785 res=1 errno=0 [ 550.088066][ T30] audit: type=1800 audit(1789931665.667:19): pid=27256 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.7.5527" name="cgroup.controllers" dev="tmpfs" ino=785 res=0 errno=0 [ 550.144317][ T10] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 550.324608][T27263] netlink: 'syz.6.5528': attribute type 2 has an invalid length. [ 550.324629][T27263] __nla_validate_parse: 1 callbacks suppressed [ 550.324640][T27263] netlink: 244 bytes leftover after parsing attributes in process `syz.6.5528'. [ 550.363254][T27261] netlink: 144 bytes leftover after parsing attributes in process `syz.7.5529'. [ 550.657482][T27277] netlink: 8 bytes leftover after parsing attributes in process `syz.0.5530'. [ 550.657504][T27277] netlink: 4 bytes leftover after parsing attributes in process `syz.0.5530'. [ 550.705436][T27279] netlink: 'syz.4.5534': attribute type 64 has an invalid length. [ 550.762952][T27280] netlink: 'syz.4.5534': attribute type 64 has an invalid length. [ 550.787365][ T5713] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 550.921792][T27282] netlink: 244 bytes leftover after parsing attributes in process `syz.7.5535'. [ 551.194143][T11069] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 551.195048][ T5627] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 551.248948][T27277] netlink: 8 bytes leftover after parsing attributes in process `syz.0.5530'. [ 551.248968][T27277] netlink: 4 bytes leftover after parsing attributes in process `syz.0.5530'. [ 551.251452][T27279] bridge0: port 2(bridge_slave_1) entered disabled state [ 551.251769][T27279] bridge0: port 1(bridge_slave_0) entered disabled state [ 551.442404][T27292] netlink: 20 bytes leftover after parsing attributes in process `syz.7.5541'. [ 551.889903][T27329] netlink: 10 bytes leftover after parsing attributes in process `syz.8.5548'. [ 551.890134][T27329] netlink: 10 bytes leftover after parsing attributes in process `syz.8.5548'. [ 552.108742][ T4934] block nbd3: Receive control failed (result -32) [ 552.119577][ T5622] block nbd4: Receive control failed (result -32) [ 552.175959][T27339] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 552.233479][ T10] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 552.327694][T12225] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 552.474125][T27346] bond3: entered promiscuous mode [ 552.481878][T27346] 8021q: adding VLAN 0 to HW filter on device bond3 [ 552.617163][T27351] syzkaller0: entered promiscuous mode [ 552.617184][T27351] syzkaller0: entered allmulticast mode [ 553.062943][T27370] syzkaller0: entered promiscuous mode [ 553.062965][T27370] syzkaller0: entered allmulticast mode [ 553.165314][T27376] xt_hashlimit: size too large, truncated to 1048576 [ 553.286692][ T5627] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 553.463714][ T3376] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 555.352875][ T5741] net_ratelimit: 3 callbacks suppressed [ 555.352889][ T5741] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 555.706872][T12221] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 555.775475][T27356] nci: __nci_request: wait_for_completion_interruptible_timeout failed -512 [ 556.033036][T27412] __nla_validate_parse: 67 callbacks suppressed [ 556.033054][T27412] netlink: 164 bytes leftover after parsing attributes in process `syz.6.5570'. [ 556.045023][T27425] netlink: 8 bytes leftover after parsing attributes in process `syz.7.5568'. [ 556.151477][T27430] netlink: 24 bytes leftover after parsing attributes in process `syz.4.5572'. [ 556.155041][T27430] netlink: 28 bytes leftover after parsing attributes in process `syz.4.5572'. [ 556.333356][T27435] netlink: 28 bytes leftover after parsing attributes in process `syz.0.5574'. [ 556.333381][T27435] netlink: 28 bytes leftover after parsing attributes in process `syz.0.5574'. [ 556.333395][T27435] netlink: 8 bytes leftover after parsing attributes in process `syz.0.5574'. [ 556.393381][ T5741] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 556.519129][T27447] netlink: 24 bytes leftover after parsing attributes in process `syz.0.5577'. [ 556.809249][T12207] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 556.867530][ T25] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 556.935894][T27461] netlink: 24 bytes leftover after parsing attributes in process `syz.0.5584'. [ 556.974225][T27463] netlink: 16 bytes leftover after parsing attributes in process `syz.6.5583'. [ 557.446215][ T5741] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 557.488309][T27492] validate_nla: 1 callbacks suppressed [ 557.488324][T27492] netlink: 'syz.4.5592': attribute type 1 has an invalid length. [ 557.617206][T27504] netlink: 'syz.7.5595': attribute type 7 has an invalid length. [ 557.617219][T27504] netlink: 'syz.7.5595': attribute type 8 has an invalid length. [ 557.653580][T27505] 8021q: adding VLAN 0 to HW filter on device ipvlan3 [ 557.654029][T27505] team0: Device ipvlan3 is already an upper device of the team interface [ 557.679274][ T4946] block nbd1: Possible stuck request ffff8880271b5080: control (read@0,1024B). Runtime 360 seconds [ 557.679308][ T4946] block nbd1: Possible stuck request ffff8880271b5240: control (read@1024,1024B). Runtime 360 seconds [ 557.679332][ T4946] block nbd1: Possible stuck request ffff8880271b5400: control (read@2048,1024B). Runtime 360 seconds [ 557.679355][ T4946] block nbd1: Possible stuck request ffff8880271b55c0: control (read@3072,1024B). Runtime 360 seconds [ 557.768632][T27507] 8021q: adding VLAN 0 to HW filter on device ipvlan3 [ 557.769122][T27507] team0: Device ipvlan3 is already an upper device of the team interface [ 557.929084][T11069] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 557.934886][T27512] A link change request failed with some changes committed already. Interface hsr_slave_0 may have been left with an inconsistent configuration, please check. [ 558.190137][T27526] netlink: NAT attribute has 4 unknown bytes [ 558.190168][T27526] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 558.193366][T27526] xt_TPROXY: Can be used only with -p tcp or -p udp [ 558.193696][T27527] netlink: 'syz.6.5602': attribute type 11 has an invalid length. [ 558.193784][T27526] netlink: 'syz.6.5602': attribute type 11 has an invalid length. [ 558.270020][T27529] netlink: 'syz.4.5604': attribute type 1 has an invalid length. [ 558.425589][T27529] 8021q: adding VLAN 0 to HW filter on device bond45 [ 558.520950][T27529] bond45: (slave gretap3): making interface the new active one [ 558.536109][T27529] bond45: (slave gretap3): Enslaving as an active interface with an up link [ 558.693791][T27551] sock: sock_timestamping_bind_phc: sock not bind to device [ 559.305597][T27559] syzkaller1: entered promiscuous mode [ 559.305619][T27559] syzkaller1: entered allmulticast mode [ 559.580242][T27584] netlink: 'syz.6.5621': attribute type 1 has an invalid length. [ 559.727360][T27581] bond4: (slave gretap1): making interface the new active one [ 559.732656][T27581] bond4: (slave gretap1): Enslaving as an active interface with an up link [ 559.794349][T27590] vlan4: entered allmulticast mode [ 559.794373][T27590] bridge4: entered allmulticast mode [ 559.796180][T27590] bridge4: port 1(erspan0) entered blocking state [ 559.818383][T27590] bridge4: port 1(erspan0) entered disabled state [ 559.818523][T27590] erspan0: entered allmulticast mode [ 559.820647][T27590] erspan0: entered promiscuous mode [ 559.821572][T27590] bridge4: port 1(erspan0) entered blocking state [ 559.821677][T27590] bridge4: port 1(erspan0) entered forwarding state [ 560.058982][T27606] xt_CONNSECMARK: invalid mode: 0 [ 560.295333][T27623] netlink: 'syz.0.5632': attribute type 3 has an invalid length. [ 560.575809][ T5627] net_ratelimit: 7 callbacks suppressed [ 560.575828][ T5627] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 560.961307][T27650] gre1: entered promiscuous mode [ 561.135537][T27667] xt_l2tp: missing protocol rule (udp|l2tpip) [ 561.228868][T27671] __nla_validate_parse: 19 callbacks suppressed [ 561.228887][T27671] netlink: 8 bytes leftover after parsing attributes in process `syz.6.5643'. [ 561.229295][T27671] xt_cgroup: path and classid specified [ 561.259093][T12221] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 561.382910][T27679] netlink: 5 bytes leftover after parsing attributes in process `syz.8.5649'. [ 561.596265][ T10] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 561.781455][T27696] netlink: 40 bytes leftover after parsing attributes in process `syz.8.5653'. [ 562.366956][T12225] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 562.494576][T27711] netlink: 'syz.8.5656': attribute type 1 has an invalid length. [ 562.630080][ T10] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 562.799709][ T1311] ieee802154 phy1 wpan1: encryption failed: -22 [ 562.946769][ T5720] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 563.487418][T12225] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 563.671504][ T10] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 563.916783][T27651] nci: __nci_request: wait_for_completion_interruptible_timeout failed -512 [ 564.153462][T27717] bond5: option primary: mode dependency failed, not supported in mode balance-rr(0) [ 564.181131][T27717] bond5 (unregistering): Released all slaves [ 564.236498][T12225] bond0: (slave bond_slave_0): link status definitely up, 10000 Mbps full duplex [ 564.403613][T27735] netlink: 4 bytes leftover after parsing attributes in process `syz.8.5662'. [ 564.434061][T27739] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 564.617828][ T40] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 564.879411][ T5622] Bluetooth: hci6: command 0x0406 tx timeout [ 565.173573][T27755] netdevsim netdevsim7: Direct firmware load for ˙ failed with error -2 [ 565.173608][T27755] netdevsim netdevsim7: Falling back to sysfs fallback for: ˙ [ 565.739473][T12207] net_ratelimit: 1 callbacks suppressed [ 565.739486][T12207] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 565.767071][ T10] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 565.990248][ T25] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 566.799563][ T10] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 566.858068][ T3376] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 567.100307][T27759] netlink: 8 bytes leftover after parsing attributes in process `syz.7.5670'. [ 567.102112][T27764] netlink: 8 bytes leftover after parsing attributes in process `syz.7.5670'. [ 567.252715][T27772] netlink: 12 bytes leftover after parsing attributes in process `syz.0.5674'. [ 567.312284][T27779] openvswitch: netlink: VXLAN extension 1 has unexpected len 16 expected 4 [ 567.386178][T27772] netlink: 'syz.0.5674': attribute type 1 has an invalid length. [ 567.386197][T27772] netlink: 224 bytes leftover after parsing attributes in process `syz.0.5674'. [ 567.595799][T27792] netlink: 72 bytes leftover after parsing attributes in process `syz.6.5678'. [ 567.691826][T27800] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 567.802911][T27807] tipc: Enabling of bearer rejected, failed to enable media [ 567.837376][ T5741] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 567.957016][T12207] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 567.989681][T27812] netlink: 8 bytes leftover after parsing attributes in process `syz.4.5684'. [ 567.989700][T27812] netlink: 36 bytes leftover after parsing attributes in process `syz.4.5684'. [ 568.127037][T27819] netlink: 'syz.7.5685': attribute type 83 has an invalid length. [ 568.203929][T27830] netlink: 36 bytes leftover after parsing attributes in process `syz.7.5689'. [ 568.263567][T27830] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check. [ 568.576948][T27841] netlink: 'syz.7.5692': attribute type 1 has an invalid length. [ 568.658251][T27841] 8021q: adding VLAN 0 to HW filter on device bond4 [ 568.711361][T27841] bond4: (slave geneve2): making interface the new active one [ 568.715522][T27841] bond4: (slave geneve2): Enslaving as an active interface with an up link [ 569.059519][T27862] netlink: 'syz.0.5699': attribute type 2 has an invalid length. [ 569.059540][T27862] netlink: 12 bytes leftover after parsing attributes in process `syz.0.5699'. [ 569.096219][T27862] netlink: 68 bytes leftover after parsing attributes in process `syz.0.5699'. [ 569.358903][T27881] bridge0: port 1(vlan0) entered blocking state [ 569.359984][T27881] bridge0: port 1(vlan0) entered disabled state [ 569.360132][T27881] vlan0: entered allmulticast mode [ 569.360146][T27881] geneve0: entered allmulticast mode [ 569.524987][T27890] netlink: 'syz.6.5708': attribute type 15 has an invalid length. [ 569.551898][T27890] netlink: 'syz.6.5708': attribute type 15 has an invalid length. [ 569.566849][T12212] netdevsim netdevsim6 netdevsim3: set [0, 0] type 1 family 0 port 2816 - 0 [ 569.567280][T12212] netdevsim netdevsim6 netdevsim2: set [0, 0] type 1 family 0 port 2816 - 0 [ 569.567325][T12212] netdevsim netdevsim6 netdevsim1: set [0, 0] type 1 family 0 port 2816 - 0 [ 569.567355][T12212] netdevsim netdevsim6 netdevsim0: set [0, 0] type 1 family 0 port 2816 - 0 [ 569.576152][T27890] netlink: 'syz.6.5708': attribute type 15 has an invalid length. [ 569.582372][T27890] netlink: 'syz.6.5708': attribute type 15 has an invalid length. [ 570.098544][T27928] xt_hashlimit: max too large, truncated to 1048576 [ 570.200612][T27928] xt_CT: No such helper "snmp" [ 570.810316][T27954] netlink: 'syz.0.5724': attribute type 1 has an invalid length. [ 570.867971][T27954] 8021q: adding VLAN 0 to HW filter on device bond18 [ 570.964266][ T5627] net_ratelimit: 6 callbacks suppressed [ 570.964285][ T5627] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 570.991084][T27954] bond15: (slave syz_tun): Removing an active aggregator [ 571.005863][T27954] bond15: (slave syz_tun): Releasing backup interface [ 571.037983][T27954] bond18: (slave syz_tun): Enslaving as a backup interface with an up link [ 571.077842][T12212] bond18: Warning: No 802.3ad response from the link partner for any adapters in the bond [ 571.260209][T27975] netlink: 'syz.6.5726': attribute type 2 has an invalid length. [ 571.267803][T12221] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 571.280580][T12221] bond18: Warning: No 802.3ad response from the link partner for any adapters in the bond [ 571.311110][T27973] openvswitch: netlink: Tunnel attr 68 out of range max 16 [ 571.504150][T27985] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 571.578826][T27985] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 571.622556][T27987] ip6_vti0: entered promiscuous mode [ 571.630910][ T44] syz_tun: tun_net_xmit 90 [ 571.632096][T27989] sch_fq: defrate 0 ignored. [ 572.006976][ T5627] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 572.070898][ T44] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 572.234425][T12225] syz_tun: tun_net_xmit 90 [ 572.257473][T12225] syz_tun: tun_net_xmit 70 [ 572.360850][ T25] syz_tun: tun_net_xmit 90 [ 572.371288][T12219] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 572.415012][T28025] __nla_validate_parse: 12 callbacks suppressed [ 572.415024][T28025] netlink: 60 bytes leftover after parsing attributes in process `syz.6.5740'. [ 572.620856][T28036] openvswitch: netlink: IP tunnel attribute has 5413 unknown bytes. [ 573.079579][ T5627] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 573.145666][T28058] validate_nla: 2 callbacks suppressed [ 573.145680][T28058] netlink: 'syz.4.5749': attribute type 2 has an invalid length. [ 573.432554][T28081] netlink: 28 bytes leftover after parsing attributes in process `syz.6.5755'. [ 573.432576][T28081] netlink: 4 bytes leftover after parsing attributes in process `syz.6.5755'. [ 573.432588][T28081] netlink: 8 bytes leftover after parsing attributes in process `syz.6.5755'. [ 573.433147][T28081] netlink: 596 bytes leftover after parsing attributes in process `syz.6.5755'. [ 573.485982][T28080] tc action pedit offset must be on 32 bit boundaries [ 573.592514][T28088] IPVS: ip_vs_add_dest(): lower threshold is higher than upper threshold [ 573.732315][T28093] ipt_ECN: cannot use operation on non-tcp rule [ 573.957123][T28097] wireguard0: entered promiscuous mode [ 573.977685][T28109] netlink: 'syz.4.5762': attribute type 4 has an invalid length. [ 573.977703][T28109] netlink: 240 bytes leftover after parsing attributes in process `syz.4.5762'. [ 574.026521][T28107] wireguard0: entered promiscuous mode [ 574.318541][T12219] IPVS: starting estimator thread 0... [ 574.416586][T28117] IPVS: using max 29 ests per chain, 69600 per kthread [ 574.433771][T28124] netlink: 8 bytes leftover after parsing attributes in process `syz.7.5768'. [ 574.433805][T28124] netlink: 'syz.7.5768': attribute type 1 has an invalid length. [ 574.433818][T28124] netlink: 'syz.7.5768': attribute type 2 has an invalid length. [ 574.434819][ T30] audit: type=1800 audit(1789931690.007:20): pid=28124 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.7.5768" name="memory.events" dev="tmpfs" ino=1050 res=0 errno=0 [ 574.885016][T28114] netlink: 8 bytes leftover after parsing attributes in process `syz.6.5765'. [ 574.890460][T28137] netlink: 'syz.4.5772': attribute type 11 has an invalid length. [ 575.639214][T28182] netlink: 'syz.7.5783': attribute type 1 has an invalid length. [ 575.652760][T28183] netlink: 4 bytes leftover after parsing attributes in process `syz.4.5782'. [ 575.752074][T28183] netlink: 24 bytes leftover after parsing attributes in process `syz.4.5782'. [ 575.955420][T28200] batman_adv: batadv0: Adding interface: syzkaller0 [ 575.955436][T28200] batman_adv: batadv0: The MTU of interface syzkaller0 is too small (299) to handle the transport of batman-adv packets. If you experience problems getting traffic through try increasing the MTU to 1532. [ 575.993260][T28200] batman_adv: batadv0: Interface activated: syzkaller0 [ 576.041013][T28200] netlink: 'syz.0.5786': attribute type 23 has an invalid length. [ 576.151900][T28209] netlink: 'syz.0.5788': attribute type 4 has an invalid length. [ 576.154975][T28209] netlink: 'syz.0.5788': attribute type 4 has an invalid length. [ 576.244404][ T5627] net_ratelimit: 6 callbacks suppressed [ 576.244423][ T5627] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 576.330322][T28211] netlink: 'syz.6.5789': attribute type 1 has an invalid length. [ 576.592228][T12219] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 576.592248][T12219] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 576.663537][T28227] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check. [ 576.850026][ T3376] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 577.273989][ T5627] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 577.415617][T28235] team0: Mode "b˜„adcast" not found [ 577.425243][T28239] __nla_validate_parse: 3 callbacks suppressed [ 577.425259][T28239] netlink: 12 bytes leftover after parsing attributes in process `syz.4.5797'. [ 577.425273][T28239] nbd: must specify a size in bytes for the device [ 577.457572][T28241] netlink: 12 bytes leftover after parsing attributes in process `syz.4.5797'. [ 577.480200][T28246] netlink: 28 bytes leftover after parsing attributes in process `syz.0.5796'. [ 577.544565][T28235] syzkaller0: entered promiscuous mode [ 577.544589][T28235] syzkaller0: entered allmulticast mode [ 577.551143][T28247] netlink: 32 bytes leftover after parsing attributes in process `syz.0.5796'. [ 577.947939][T12219] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 578.151158][ C0] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 578.160600][ T44] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 578.173528][T28233] nci: __nci_request: wait_for_completion_interruptible_timeout failed -512 [ 578.226925][ C0] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 578.227152][ C0] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 578.227349][ C0] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 580.198611][T28249] gtp0: entered promiscuous mode [ 580.198624][T28249] gtp0: entered allmulticast mode [ 580.199991][T28250] workqueue: Failed to create a rescuer kthread for wq "bond5": -EINTR [ 580.598207][T28291] vxcan1: Master is either lo or non-ether device [ 580.770113][T28299] x_tables: duplicate underflow at hook 1 [ 581.352122][T12219] net_ratelimit: 7 callbacks suppressed [ 581.352165][T12219] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 581.440802][ T10] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 582.472598][ T5741] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 582.473175][T12221] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 582.473650][ T5720] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 582.474215][ T5741] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 582.487806][T11069] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 583.274810][ T31] INFO: task syz.2.4399:22902 blocked for more than 143 seconds. [ 583.274835][ T31] Not tainted syzkaller #0 [ 583.274845][ T31] "echo 0 > /proc/sys/kernel/hung_task_timeout_secs" disables this message. [ 583.274853][ T31] task:syz.2.4399 state:D stack:27088 pid:22902 tgid:22897 ppid:16791 task_flags:0x400140 flags:0x00080002 [ 583.274904][ ** replaying previous printk message ** [ 583.274904][ T31] Call Trace: [ 583.274911][ T31] [ 583.274924][ T31] __schedule+0x17db/0x58f0 [ 583.274985][ T31] ? __pfx___schedule+0x10/0x10 [ 583.275017][ T31] ? schedule+0x90/0x2b0 [ 583.275042][ T31] schedule+0x164/0x2b0 [ 583.275066][ T31] schedule_preempt_disabled+0x13/0x30 [ 583.275087][ T31] __mutex_lock+0x7c1/0x1550 [ 583.275116][ T31] ? __mutex_lock+0x5d4/0x1550 [ 583.275144][ T31] ? nfsd_nl_expkey_set_reqs_doit+0xfe/0xaf0 [ 583.275247][ T31] ? __pfx___mutex_lock+0x10/0x10 [ 583.275279][ T31] ? net_generic+0x1e/0x240 [ 583.275299][ T31] ? net_generic+0x1e/0x240 [ 583.275327][ T31] nfsd_nl_expkey_set_reqs_doit+0xfe/0xaf0 [ 583.275365][ T31] ? __pfx_nfsd_nl_expkey_set_reqs_doit+0x10/0x10 [ 583.275392][ T31] ? rcu_is_watching+0x16/0xb0 [ 583.275425][ T31] ? trace_kmalloc+0x2a/0xf0 [ 583.275452][ T31] ? __kmalloc_noprof+0x38c/0x720 [ 583.275472][ T31] ? __nla_parse+0x40/0x60 [ 583.275547][ T31] ? genl_family_rcv_msg_attrs_parse+0x20b/0x2f0 [ 583.275572][ T31] ? genl_family_rcv_msg_attrs_parse+0x265/0x2f0 [ 583.275603][ T31] genl_family_rcv_msg_doit+0x233/0x340 [ 583.275633][ T31] ? __pfx_genl_family_rcv_msg_doit+0x10/0x10 [ 583.275669][ T31] ? bpf_lsm_capable+0x9/0x20 [ 583.275686][ T31] ? security_capable+0x7e/0x2c0 [ 583.275739][ T31] genl_rcv_msg+0x614/0x7a0 [ 583.275769][ T31] ? __pfx_genl_rcv_msg+0x10/0x10 [ 583.275790][ T31] ? __pfx_nfsd_nl_expkey_set_reqs_doit+0x10/0x10 [ 583.275829][ T31] netlink_rcv_skb+0x226/0x4a0 [ 583.275856][ T31] ? __pfx_genl_rcv_msg+0x10/0x10 [ 583.275880][ T31] ? __pfx_netlink_rcv_skb+0x10/0x10 [ 583.275922][ T31] ? down_read+0x2be/0x330 [ 583.275950][ T31] genl_rcv+0x28/0x40 [ 583.275970][ T31] netlink_unicast+0x7bd/0x940 [ 583.276008][ T31] netlink_sendmsg+0x813/0xb40 [ 583.276045][ T31] ? __pfx_netlink_sendmsg+0x10/0x10 [ 583.276081][ T31] ? apparmor_socket_sendmsg+0x98/0x360 [ 583.276105][ T31] ? __pfx_netlink_sendmsg+0x10/0x10 [ 583.276131][ T31] sock_sendmsg_nosec+0x13a/0x180 [ 583.276153][ T31] ____sys_sendmsg+0x54e/0x850 [ 583.276185][ T31] ? __pfx_____sys_sendmsg+0x10/0x10 [ 583.283163][ T31] ? import_iovec+0x73/0xa0 [ 583.283203][ T31] ___sys_sendmsg+0x2a5/0x360 [ 583.283228][ T31] ? __lock_acquire+0x747/0x2de0 [ 583.283252][ T31] ? __pfx____sys_sendmsg+0x10/0x10 [ 583.283280][ T31] ? futex_wait+0x2a2/0x390 [ 583.283336][ T31] ? __fget_files+0x2a/0x420 [ 583.283361][ T31] ? __fget_files+0x3a2/0x420 [ 583.283395][ T31] __x64_sys_sendmsg+0x1b1/0x290 [ 583.283422][ T31] ? __pfx___x64_sys_sendmsg+0x10/0x10 [ 583.283467][ T31] do_syscall_64+0x166/0x520 [ 583.283489][ T31] ? trace_irq_disable+0x3b/0x140 [ 583.283508][ T31] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 583.283528][ T31] ? clear_bhb_loop+0x70/0xc0 [ 583.283550][ T31] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 583.283568][ T31] RIP: 0033:0x7f728ad9e159 [ 583.283586][ T31] RSP: 002b:00007f728bc03028 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 583.283606][ T31] RAX: ffffffffffffffda RBX: 00007f728b026090 RCX: 00007f728ad9e159 [ 583.283619][ T31] RDX: 0000000000000000 RSI: 0000200000000000 RDI: 0000000000000006 [ 583.283630][ T31] RBP: 00007f728ae3506b R08: 0000000000000000 R09: 0000000000000000 [ 583.283642][ T31] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 583.283652][ T31] R13: 00007f728b026128 R14: 00007f728b026090 R15: 00007fff7bef63a8 [ 583.283682][ T31] [ 583.283693][ T31] INFO: task syz.1.4538:23378 blocked for more than 143 seconds. [ 583.283706][ T31] Not tainted syzkaller #0 [ 583.283716][ T31] "echo 0 > /proc/sys/kernel/hung_task_timeout_secs" disables this message. [ 583.283723][ T31] task:syz.1.4538 state:D stack:27200 pid:23378 tgid:23375 ppid:17687 task_flags:0x400140 flags:0x00080002 [ 583.283770][ T31] Call Trace: [ 583.283776][ T31] [ 583.283810][ T31] __schedule+0x17db/0x58f0 [ 583.283852][ T31] ? kasan_save_track+0x3e/0x80 [ 583.283882][ T31] ? __pfx___schedule+0x10/0x10 [ 583.283911][ T31] ? schedule+0x90/0x2b0 [ 583.283934][ T31] schedule+0x164/0x2b0 [ 583.283955][ T31] schedule_preempt_disabled+0x13/0x30 [ 583.283975][ T31] __mutex_lock+0x7c1/0x1550 [ 583.284001][ T31] ? __mutex_lock+0x5d4/0x1550 [ 583.284026][ T31] ? nfsd_nl_cache_flush_doit+0xe2/0x1b0 [ 583.284104][ T31] ? __pfx___mutex_lock+0x10/0x10 [ 583.284125][ T31] ? net_generic+0x1e/0x240 [ 583.284151][ T31] ? net_generic+0x1e/0x240 [ 583.284171][ T31] ? net_generic+0x1e/0x240 [ 583.284189][ T31] ? net_generic+0x1e/0x240 [ 583.284214][ T31] nfsd_nl_cache_flush_doit+0xe2/0x1b0 [ 583.284239][ T31] genl_family_rcv_msg_doit+0x233/0x340 [ 583.284268][ T31] ? __pfx_genl_family_rcv_msg_doit+0x10/0x10 [ 583.284303][ T31] ? bpf_lsm_capable+0x9/0x20 [ 583.284320][ T31] ? security_capable+0x7e/0x2c0 [ 583.284347][ T31] genl_rcv_msg+0x614/0x7a0 [ 583.284374][ T31] ? __pfx_genl_rcv_msg+0x10/0x10 [ 583.284395][ T31] ? __pfx_nfsd_nl_cache_flush_doit+0x10/0x10 [ 583.284432][ T31] netlink_rcv_skb+0x226/0x4a0 [ 583.284464][ T31] ? __pfx_genl_rcv_msg+0x10/0x10 [ 583.284487][ T31] ? __pfx_netlink_rcv_skb+0x10/0x10 [ 583.284528][ T31] ? down_read+0x2be/0x330 [ 583.284555][ T31] genl_rcv+0x28/0x40 [ 583.284675][ T31] netlink_unicast+0x7bd/0x940 [ 583.284711][ T31] netlink_sendmsg+0x813/0xb40 [ 583.284747][ T31] ? __pfx_netlink_sendmsg+0x10/0x10 [ 583.284781][ T31] ? apparmor_socket_sendmsg+0x98/0x360 [ 583.284803][ T31] ? __pfx_netlink_sendmsg+0x10/0x10 [ 583.284828][ T31] sock_sendmsg_nosec+0x13a/0x180 [ 583.284962][ T31] ____sys_sendmsg+0x54e/0x850 [ 583.284992][ T31] ? __pfx_____sys_sendmsg+0x10/0x10 [ 583.285026][ T31] ? import_iovec+0x73/0xa0 [ 583.285052][ T31] ___sys_sendmsg+0x2a5/0x360 [ 583.285075][ T31] ? __lock_acquire+0x747/0x2de0 [ 583.285098][ T31] ? __pfx____sys_sendmsg+0x10/0x10 [ 583.285126][ T31] ? futex_wait+0x2a2/0x390 [ 583.285180][ T31] ? __fget_files+0x2a/0x420 [ 583.285203][ T31] ? __fget_files+0x3a2/0x420 [ 583.285237][ T31] __x64_sys_sendmsg+0x1b1/0x290 [ 583.285264][ T31] ? __pfx___x64_sys_sendmsg+0x10/0x10 [ 583.285308][ T31] do_syscall_64+0x166/0x520 [ 583.285369][ T31] ? trace_irq_disable+0x3b/0x140 [ 583.285387][ T31] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 583.285405][ T31] ? clear_bhb_loop+0x70/0xc0 [ 583.285427][ T31] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 583.285446][ T31] RIP: 0033:0x7f9ee4d9e159 [ 583.285462][ T31] RSP: 002b:00007f9ee5b97028 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 583.285482][ T31] RAX: ffffffffffffffda RBX: 00007f9ee5025fa0 RCX: 00007f9ee4d9e159 [ 583.285496][ T31] RDX: 0000000004000880 RSI: 0000200000000100 RDI: 0000000000000005 [ 583.285508][ T31] RBP: 00007f9ee4e3506b R08: 0000000000000000 R09: 0000000000000000 [ 583.285518][ T31] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 583.285529][ T31] R13: 00007f9ee5026038 R14: 00007f9ee5025fa0 R15: 00007ffdf9ee7938 [ 583.285560][ T31] [ 583.285568][ T31] INFO: task syz.1.4538:23381 blocked for more than 143 seconds. [ 583.285582][ T31] Not tainted syzkaller #0 [ 583.285591][ T31] "echo 0 > /proc/sys/kernel/hung_task_timeout_secs" disables this message. [ 583.285599][ T31] task:syz.1.4538 state:D stack:26784 pid:23381 tgid:23375 ppid:17687 task_flags:0x400140 flags:0x00080002 [ 583.285644][ T31] Call Trace: [ 583.285651][ T31] [ 583.285663][ T31] __schedule+0x17db/0x58f0 [ 583.285698][ T31] ? kasan_save_track+0x3e/0x80 [ 583.285726][ T31] ? __pfx___schedule+0x10/0x10 [ 583.285755][ T31] ? schedule+0x90/0x2b0 [ 583.285777][ T31] schedule+0x164/0x2b0 [ 583.285799][ T31] schedule_preempt_disabled+0x13/0x30 [ 583.285817][ T31] __mutex_lock+0x7c1/0x1550 [ 583.285843][ T31] ? __mutex_lock+0x5d4/0x1550 [ 583.285867][ T31] ? nfsd_nl_cache_flush_doit+0xe2/0x1b0 [ 583.285892][ T31] ? __pfx___mutex_lock+0x10/0x10 [ 583.285911][ T31] ? net_generic+0x1e/0x240 [ 583.285938][ T31] ? net_generic+0x1e/0x240 [ 583.285957][ T31] ? net_generic+0x1e/0x240 [ 583.285974][ T31] ? net_generic+0x1e/0x240 [ 583.286000][ T31] nfsd_nl_cache_flush_doit+0xe2/0x1b0 [ 583.286024][ T31] genl_family_rcv_msg_doit+0x233/0x340 [ 583.286053][ T31] ? __pfx_genl_family_rcv_msg_doit+0x10/0x10 [ 583.286088][ T31] ? bpf_lsm_capable+0x9/0x20 [ 583.286104][ T31] ? security_capable+0x7e/0x2c0 [ 583.286131][ T31] genl_rcv_msg+0x614/0x7a0 [ 583.286158][ T31] ? __pfx_genl_rcv_msg+0x10/0x10 [ 583.286178][ T31] ? __pfx_nfsd_nl_cache_flush_doit+0x10/0x10 [ 583.286215][ T31] netlink_rcv_skb+0x226/0x4a0 [ 583.286242][ T31] ? __pfx_genl_rcv_msg+0x10/0x10 [ 583.286265][ T31] ? __pfx_netlink_rcv_skb+0x10/0x10 [ 583.289614][ T31] ? down_read+0x2be/0x330 [ 583.289647][ T31] genl_rcv+0x28/0x40 [ 583.289668][ T31] netlink_unicast+0x7bd/0x940 [ 583.289703][ T31] netlink_sendmsg+0x813/0xb40 [ 583.289737][ T31] ? __pfx_netlink_sendmsg+0x10/0x10 [ 583.289772][ T31] ? apparmor_socket_sendmsg+0x98/0x360 [ 583.289795][ T31] ? __pfx_netlink_sendmsg+0x10/0x10 [ 583.289819][ T31] sock_sendmsg_nosec+0x13a/0x180 [ 583.289840][ T31] ____sys_sendmsg+0x54e/0x850 [ 583.289869][ T31] ? __pfx_____sys_sendmsg+0x10/0x10 [ 583.289903][ T31] ? import_iovec+0x73/0xa0 [ 583.289928][ T31] ___sys_sendmsg+0x2a5/0x360 [ 583.289951][ T31] ? __lock_acquire+0x747/0x2de0 [ 583.289974][ T31] ? __pfx____sys_sendmsg+0x10/0x10 [ 583.290430][ T31] ? futex_wait+0x2a2/0x390 [ 583.290493][ T31] ? __fget_files+0x2a/0x420 [ 583.290517][ T31] ? __fget_files+0x3a2/0x420 [ 583.290554][ T31] __x64_sys_sendmsg+0x1b1/0x290 [ 583.290583][ T31] ? __pfx___x64_sys_sendmsg+0x10/0x10 [ 583.290631][ T31] do_syscall_64+0x166/0x520 [ 583.290653][ T31] ? trace_irq_disable+0x3b/0x140 [ 583.290673][ T31] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 583.290692][ T31] ? clear_bhb_loop+0x70/0xc0 [ 583.290714][ T31] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 583.290732][ T31] RIP: 0033:0x7f9ee4d9e159 [ 583.290749][ T31] RSP: 002b:00007f9ee2ff6028 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 583.290769][ T31] RAX: ffffffffffffffda RBX: 00007f9ee5026090 RCX: 00007f9ee4d9e159 [ 583.290783][ T31] RDX: 0000000004000880 RSI: 0000200000000100 RDI: 0000000000000005 [ 583.290796][ T31] RBP: 00007f9ee4e3506b R08: 0000000000000000 R09: 0000000000000000 [ 583.290807][ T31] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 583.290818][ T31] R13: 00007f9ee5026128 R14: 00007f9ee5026090 R15: 00007ffdf9ee7938 [ 583.290851][ T31] [ 583.290923][ T31] [ 583.290923][ T31] Showing all locks held in the system: [ 583.290946][ T31] locks held by pr/ttyS0/16: 1, last CPU#0: [ 583.291063][ T31] #0: ffffffff8ec364f8 (console_srcu){....}-{0:0}, at: console_srcu_read_lock+0x30/0x60 [ 583.291180][ T31] locks held by khungtaskd/31: 1, last CPU#1: [ 583.291194][ T31] #0: ffffffff8ed5c8e0 (rcu_read_lock){....}-{1:3}, at: debug_show_all_locks+0x2e/0x180 [ 583.291274][ T31] locks held by getty/5375: 2, on CPU#0: [ 583.291287][ T31] #0: ffff888035dbe0a0 (&tty->ldisc_sem){++++}-{0:0}, at: tty_ldisc_ref_wait+0x25/0x70 [ 583.291421][ T31] #1: ffffc900032332e8 (&ldata->atomic_read_lock){+.+.}-{4:4}, at: n_tty_read+0x45a/0x1360 [ 583.291472][ T31] locks held by udevd/5623: 1, on CPU#1: [ 583.291485][ T31] #0: ffff88802716b350 (&disk->open_mutex){+.+.}-{4:4}, at: bdev_open+0xde/0xd70 [ 583.293415][ T31] locks held by kworker/u8:31/12207: 3, last CPU#0: [ 583.293428][ T31] #0: ffff88802ba29140 ((wq_completion)krds_cp_wq#1/0){+.+.}-{0:0}, at: process_scheduled_works+0x97a/0x1630 [ 583.293493][ T31] #1: ffffc900070b7c40 ((work_completion)(&(&cp->cp_conn_w)->work)){+.+.}-{0:0}, at: process_scheduled_works+0x97a/0x1630 [ 583.293541][ T31] #2: ffff88805464a780 (&tc->t_conn_path_lock){+.+.}-{4:4}, at: rds_tcp_conn_path_connect+0x1cc/0x920 [ 583.293636][ T31] locks held by syz.3.3491/19542: 2, on CPU#1: [ 583.293649][ T31] #0: ffffffff902c42e8 (cb_lock){++++}-{4:4}, at: genl_rcv+0x19/0x40 [ 583.293694][ T31] #1: ffffffff8f09f580 (nfsd_mutex){+.+.}-{4:4}, at: nfsd_nl_listener_set_doit+0x53d/0x1ab0 [ 583.293745][ T31] locks held by syz.2.4399/22902: 2, on CPU#0: [ 583.293757][ T31] #0: ffffffff902c42e8 (cb_lock){++++}-{4:4}, at: genl_rcv+0x19/0x40 [ 583.293800][ T31] #1: ffffffff8f09f580 (nfsd_mutex){+.+.}-{4:4}, at: nfsd_nl_expkey_set_reqs_doit+0xfe/0xaf0 [ 583.293854][ T31] locks held by syz.1.4538/23378: 2, on CPU#1: [ 583.293866][ T31] #0: ffffffff902c42e8 (cb_lock){++++}-{4:4}, at: genl_rcv+0x19/0x40 [ 583.293909][ T31] #1: ffffffff8f09f580 (nfsd_mutex){+.+.}-{4:4}, at: nfsd_nl_cache_flush_doit+0xe2/0x1b0 [ 583.303586][ T31] locks held by syz.1.4538/23381: 2, on CPU#1: [ 583.303600][ T31] #0: ffffffff902c42e8 (cb_lock){++++}-{4:4}, at: genl_rcv+0x19/0x40 [ 583.303645][ T31] #1: ffffffff8f09f580 (nfsd_mutex){+.+.}-{4:4}, at: nfsd_nl_cache_flush_doit+0xe2/0x1b0 [ 583.303716][ T31] locks held by syz.5.5226/25988: 3, on CPU#1: [ 583.303730][ T31] #0: ffffffff902c42e8 (cb_lock){++++}-{4:4}, at: genl_rcv+0x19/0x40 [ 583.303776][ T31] #1: ffff88804fd3f6e8 (nlk_cb_mutex-GENERIC){+.+.}-{4:4}, at: __netlink_dump_start+0xf4/0x7b0 [ 583.303826][ T31] #2: ffffffff8f09f580 (nfsd_mutex){+.+.}-{4:4}, at: nfsd_nl_rpc_status_get_dumpit+0xf0/0x1560 [ 583.303879][ T31] locks held by syz.8.5683/27814: 2, on CPU#1: [ 583.303891][ T31] #0: ffffffff902c42e8 (cb_lock){++++}-{4:4}, at: genl_rcv+0x19/0x40 [ 583.303934][ T31] #1: ffffffff8f09f580 (nfsd_mutex){+.+.}-{4:4}, at: nfsd_nl_cache_flush_doit+0xb5/0x1b0 [ 583.303982][ T31] locks held by syz.0.5802/28268: 1, on CPU#0: [ 583.303994][ T31] #0: ffff888050a39140 (&dev->mutex){....}-{4:4}, at: nfc_unregister_rfkill+0x63/0x280 [ 583.304132][ T31] locks held by syz.0.5802/28269: 4, on CPU#0: [ 583.304144][ T31] #0: ffffffff902c42e8 (cb_lock){++++}-{4:4}, at: genl_rcv+0x19/0x40 [ 583.304188][ T31] #1: ffffffff902c4120 (genl_mutex){+.+.}-{4:4}, at: genl_rcv_msg+0x10b/0x7a0 [ 583.310796][ T31] #2: ffff888050a39140 (&dev->mutex){....}-{4:4}, at: nfc_dev_up+0x3c/0x350 [ 583.310847][ T31] #3: ffff8880318e2348 (&ndev->req_lock){+.+.}-{4:4}, at: nci_dev_up+0xa3/0xdc0 [ 583.310944][ T31] locks held by syz.0.5802/28279: 2, on CPU#0: [ 583.310958][ T31] #0: ffffffff902c42e8 (cb_lock){++++}-{4:4}, at: genl_rcv+0x19/0x40 [ 583.311001][ T31] #1: ffffffff902c4120 (genl_mutex){+.+.}-{4:4}, at: genl_rcv_msg+0x10b/0x7a0 [ 583.311046][ T31] locks held by syz.0.5802/28283: 2, on CPU#0: [ 583.311058][ T31] #0: ffffffff902c42e8 (cb_lock){++++}-{4:4}, at: genl_rcv+0x19/0x40 [ 583.311101][ T31] #1: ffffffff902c4120 (genl_mutex){+.+.}-{4:4}, at: genl_rcv_msg+0x10b/0x7a0 [ 583.311160][ T31] locks held by syz.6.5807/28289: 2, on CPU#0: [ 583.311172][ T31] #0: ffffffff902c42e8 (cb_lock){++++}-{4:4}, at: genl_rcv+0x19/0x40 [ 583.311215][ T31] #1: ffffffff902c4120 (genl_mutex){+.+.}-{4:4}, at: genl_rcv_msg+0x10b/0x7a0 [ 583.311259][ T31] locks held by syz.7.5809/28299: 2, on CPU#1: [ 583.311271][ T31] #0: ffffffff902c42e8 (cb_lock){++++}-{4:4}, at: genl_rcv+0x19/0x40 [ 583.311320][ T31] #1: ffffffff902c4120 (genl_mutex){+.+.}-{4:4}, at: genl_rcv_msg+0x10b/0x7a0 [ 583.311365][ T31] locks held by syz.4.5810/28301: 2, on CPU#1: [ 583.311377][ T31] #0: ffffffff902c42e8 (cb_lock){++++}-{4:4}, at: genl_rcv+0x19/0x40 [ 583.311420][ T31] #1: ffffffff902c4120 (genl_mutex){+.+.}-{4:4}, at: genl_rcv_msg+0x10b/0x7a0 [ 583.311465][ T31] [ 583.311470][ T31] ============================================= [ 583.311470][ T31] [ 583.311484][ T31] NMI backtrace for cpu 1 [ 583.311497][ T31] CPU: 1 UID: 0 PID: 31 Comm: khungtaskd Not tainted syzkaller #0 PREEMPT(full) [ 583.311516][ T31] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/24/2026 [ 583.311526][ T31] Call Trace: [ 583.311533][ T31] [ 583.311540][ T31] dump_stack_lvl+0xe8/0x150 [ 583.311567][ T31] nmi_cpu_backtrace+0x274/0x2d0 [ 583.311649][ T31] ? __pfx_nmi_raise_cpu_backtrace+0x10/0x10 [ 583.311689][ T31] nmi_trigger_cpumask_backtrace+0x17d/0x390 [ 583.311719][ T31] sys_info+0x135/0x170 [ 583.311742][ T31] watchdog+0xfd7/0x1030 [ 583.311767][ T31] ? watchdog+0x1c7/0x1030 [ 583.311790][ T31] kthread+0x38b/0x480 [ 583.311813][ T31] ? __pfx_watchdog+0x10/0x10 [ 583.311829][ T31] ? __pfx_kthread+0x10/0x10 [ 583.311847][ T31] ret_from_fork+0x514/0xb70 [ 583.311866][ T31] ? __pfx_ret_from_fork+0x10/0x10 [ 583.311883][ T31] ? __switch_to+0xc89/0x1420 [ 583.311922][ T31] ? __pfx_kthread+0x10/0x10 [ 583.311941][ T31] ret_from_fork_asm+0x1a/0x30 [ 583.311981][ T31] [ 583.311987][ T31] Sending NMI from CPU 1 to CPUs 0: [ 583.312018][ C0] NMI backtrace for cpu 0 [ 583.312031][ C0] CPU: 0 UID: 0 PID: 16 Comm: pr/ttyS0 Not tainted syzkaller #0 PREEMPT(full) [ 583.312051][ C0] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/24/2026 [ 583.312061][ C0] RIP: 0010:io_serial_in+0x77/0xc0 [ 583.312152][ C0] Code: e8 2e de 54 fc 44 89 f9 d3 e3 49 83 c6 40 4c 89 f0 48 c1 e8 03 42 80 3c 20 00 74 08 4c 89 f7 e8 ef e5 c4 fc 41 03 1e 89 da ec <0f> b6 c0 5b 41 5c 41 5e 41 5f e9 da c4 75 06 cc 44 89 f9 80 e1 07 [ 583.312168][ C0] RSP: 0018:ffffc900001578b8 EFLAGS: 00000002 [ 583.312184][ C0] RAX: 1ffffffff35a7a00 RBX: 00000000000003fd RCX: 0000000000000000 [ 583.312197][ C0] RDX: 00000000000003fd RSI: 0000000000000000 RDI: 0000000000000020 [ 583.312208][ C0] RBP: dffffc0000000000 R08: 0000000000000003 R09: 0000000000000004 [ 583.312219][ C0] R10: dffffc0000000000 R11: ffffffff8572f400 R12: dffffc0000000000 [ 583.312233][ C0] R13: 0000000000000000 R14: ffffffff9ad3d0c0 R15: 0000000000000000 [ 583.312245][ C0] FS: 0000000000000000(0000) GS:ffff888124cce000(0000) knlGS:0000000000000000 [ 583.312259][ C0] CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033 [ 583.312272][ C0] CR2: 00005653c0a00660 CR3: 0000000059f7c000 CR4: 00000000003526f0 [ 583.312288][ C0] Call Trace: [ 583.312295][ C0] [ 583.312303][ C0] wait_for_lsr+0x184/0x2f0 [ 583.312325][ C0] __serial8250_console_fifo_write+0xcd/0x3e0 [ 583.312355][ C0] serial8250_console_write+0xaa1/0x1200 [ 583.312374][ C0] ? lockdep_hardirqs_on+0x7b/0x110 [ 583.312400][ C0] ? __pfx_serial8250_console_write+0x10/0x10 [ 583.312418][ C0] ? __schedule+0x17f1/0x58f0 [ 583.312445][ C0] nbcon_emit_next_record+0xef5/0x1a90 [ 583.312474][ C0] ? __pfx_nbcon_emit_next_record+0x10/0x10 [ 583.312497][ C0] ? nbcon_context_try_acquire+0x819/0xbd0 [ 583.312525][ C0] ? _raw_spin_lock_irqsave+0x4c/0x60 [ 583.312572][ C0] nbcon_kthread_func+0x679/0x880 [ 583.312594][ C0] ? nbcon_kthread_func+0x163/0x880 [ 583.312613][ C0] ? __pfx_nbcon_kthread_func+0x10/0x10 [ 583.312635][ C0] ? __kthread_parkme+0x71/0x1f0 [ 583.312662][ C0] ? __kthread_parkme+0x199/0x1f0 [ 583.312690][ C0] kthread+0x38b/0x480 [ 583.312707][ C0] ? __pfx_nbcon_kthread_func+0x10/0x10 [ 583.312724][ C0] ? __pfx_kthread+0x10/0x10 [ 583.312742][ C0] ret_from_fork+0x514/0xb70 [ 583.312760][ C0] ? __pfx_ret_from_fork+0x10/0x10 [ 583.312776][ C0] ? __switch_to+0xc89/0x1420 [ 583.312802][ C0] ? __pfx_kthread+0x10/0x10 [ 583.312826][ C0] ret_from_fork_asm+0x1a/0x30 [ 583.312862][ C0] [ 583.315607][ T31] Kernel panic - not syncing: hung_task: blocked tasks [ 585.137220][ T31] CPU: 1 UID: 0 PID: 31 Comm: khungtaskd Not tainted syzkaller #0 PREEMPT(full) [ 585.146312][ T31] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/24/2026 [ 585.156353][ T31] Call Trace: [ 585.159617][ T31] [ 585.162532][ T31] vpanic+0x56d/0xa60 [ 585.166507][ T31] ? __pfx___schedule+0x10/0x10 [ 585.171358][ T31] ? __pfx_vpanic+0x10/0x10 [ 585.175850][ T31] panic+0xc5/0xd0 [ 585.179552][ T31] ? __pfx_panic+0x10/0x10 [ 585.183945][ T31] ? preempt_schedule_common+0x7f/0xd0 [ 585.189383][ T31] ? preempt_schedule_thunk+0x16/0x40 [ 585.194738][ T31] ? nmi_trigger_cpumask_backtrace+0x31a/0x390 [ 585.200875][ T31] ? nmi_trigger_cpumask_backtrace+0x31f/0x390 [ 585.207012][ T31] watchdog+0x1030/0x1030 [ 585.211328][ T31] ? watchdog+0x1c7/0x1030 [ 585.215733][ T31] kthread+0x38b/0x480 [ 585.219802][ T31] ? __pfx_watchdog+0x10/0x10 [ 585.224459][ T31] ? __pfx_kthread+0x10/0x10 [ 585.229044][ T31] ret_from_fork+0x514/0xb70 [ 585.233614][ T31] ? __pfx_ret_from_fork+0x10/0x10 [ 585.238709][ T31] ? __switch_to+0xc89/0x1420 [ 585.243385][ T31] ? __pfx_kthread+0x10/0x10 [ 585.247957][ T31] ret_from_fork_asm+0x1a/0x30 [ 585.252722][ T31] [ 585.256010][ T31] Kernel Offset: disabled [ 585.260325][ T31] Rebooting in 86400 seconds..