last executing test programs: 3m0.121153025s ago: executing program 1 (id=5829): bpf$BPF_PROG_DETACH(0x1c, &(0x7f0000000000)=ANY=[@ANYRESHEX, @ANYRES32, @ANYBLOB="2f000000007dd9ee3c81591e965e5e090000", @ANYRES16, @ANYRES64], 0x20) r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) (async) r1 = syz_genetlink_get_family_id$nl802154(&(0x7f00000002c0), 0xffffffffffffffff) sendmsg$NL802154_CMD_GET_SEC_LEVEL(r0, &(0x7f00000003c0)={0x0, 0xfffffffffffffd90, &(0x7f0000000380)={&(0x7f0000000240)=ANY=[@ANYBLOB="14000000", @ANYRES16=r1, @ANYBLOB="01072bbd74000000000001000000"], 0x14}, 0x1, 0x0, 0x0, 0x20004074}, 0x0) (async) syz_genetlink_get_family_id$nbd(&(0x7f0000001100), r0) (async) sendmmsg(0xffffffffffffffff, 0x0, 0x0, 0x0) (async) r2 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPCTNL_MSG_TIMEOUT_DEFAULT_SET(r2, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000440)=ANY=[@ANYBLOB="300000000308010100000000000000000a00000a05000300840000001400048008000640000000090800054000000004206cc1b690becd51156447a9e0ec0d8c08b0e8f477bfc4b4b00b1ffcd73c1fb0f370292e3130d7c83e986ae4679472f38f382cfe5827968648aab5f7a2e7109a5520c122d134fd4ee2f86ce1f00e17ce0c70e1f84dcc9bbe641babffee149983d4e606817ae31f3cec1230b9a6923caad178dffb5790eac4278a3fabb874f4645718511851795cc25aa84021a254ea8d01386cc318834334f7dae81ca9071f"], 0x30}}, 0x4000050) r3 = socket(0x10, 0x3, 0x0) (async) r4 = bpf$MAP_CREATE(0x0, &(0x7f0000000000)=@base={0x10, 0x4, 0x4, 0x2, 0x0, 0x1}, 0x48) bpf$MAP_GET_NEXT_KEY(0x3, &(0x7f00000001c0)={r4, &(0x7f0000000240), 0x0}, 0x20) (async) sendmsg$NL802154_CMD_NEW_SEC_DEVKEY(0xffffffffffffffff, &(0x7f0000000580)={0x0, 0x0, &(0x7f0000000540)={&(0x7f00000000c0)={0x2c, 0x0, 0x1, 0xfffffffd, 0x0, {}, [@NL802154_ATTR_IFINDEX={0x8}, @NL802154_ATTR_SEC_DEVKEY={0x10, 0x2f, 0x0, 0x1, [@NL802154_DEVKEY_ATTR_EXTENDED_ADDR={0xc}]}]}, 0x2c}}, 0x0) (async) sendmsg$nl_route(r3, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000000c0)=ANY=[@ANYBLOB="240000006800019f00000000000000000200000000000000080001000100000004"], 0x24}, 0x1, 0x0, 0x0, 0x4005}, 0x20000800) r5 = socket$inet6_udp(0xa, 0x2, 0x0) sendmsg$inet6(r5, &(0x7f0000000400)={&(0x7f0000000040)={0xa, 0x4e20, 0x7fffffff, @mcast2, 0x9}, 0x1c, 0x0, 0x0, &(0x7f0000000180)=ANY=[@ANYBLOB="300000000000000029000000040000008402000400000000030200030401"], 0x30}, 0x40) (async) sendmsg$nl_route(0xffffffffffffffff, 0x0, 0x40) 2m57.512561365s ago: executing program 1 (id=5835): setsockopt$IPT_SO_SET_REPLACE(0xffffffffffffffff, 0x0, 0x40, &(0x7f0000000440)=@raw={'raw\x00', 0x8, 0x3, 0x378, 0x0, 0x1000000, 0xffffffff, 0x288, 0xffffffff, 0x338, 0xffffffff, 0xffffffff, 0x338, 0xffffffff, 0x3, 0x0, {[{{@uncond, 0x0, 0x1c8, 0x230, 0x0, {0x0, 0x1c8}, [@common=@inet=@hashlimit3={{0x158}, {'veth0_to_batadv\x00', {0x6, 0x2ba810b9, 0x39, 0x0, 0x0, 0x80000000, 0x3, 0x7}, {0x3}}}]}, @unspec=@CT1={0x68, 'CT\x00', 0x1, {0x10, 0x1, 0x5, 0xfffffffa, 'syz1\x00', 'syz0\x00'}}}, {{@uncond, 0x0, 0x70, 0xb0}, @common=@inet=@TCPOPTSTRIP={0x40, 'TCPOPTSTRIP\x00', 0x0, {[0x6, 0x3, 0x4, 0x2c7, 0x80000001, 0x1, 0x2, 0x100]}}}], {{'\x00', 0x0, 0x70, 0x98}, {0x28, '\x00', 0x64}}}}, 0x3d8) r0 = bpf$BPF_MAP_GET_FD_BY_ID(0xe, &(0x7f0000000000)={0x0, 0x6}, 0xc) bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="10000000040000000800000008"], 0x48) (async) r1 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="10000000040000000800000008"], 0x48) r2 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x6, 0x14, &(0x7f00000001c0)=ANY=[@ANYBLOB="18000000000000000000000000000000180100002020752500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000007100000018110000", @ANYRES32=r1, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bca2000000000000a6020000f8ffffffb703000000000000b704000000000000850000003300000095"], &(0x7f0000000180)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @xdp, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f00000003c0)={r2, 0x8100, 0xe, 0x0, &(0x7f00000002c0)="c8e8a1aee95e10e19e00399da26f", 0x0, 0xadf0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2}, 0x50) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000e40)={{r0}, &(0x7f0000000e00), &(0x7f0000000080)=r2}, 0x20) (async) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000e40)={{r0, 0xffffffffffffffff}, &(0x7f0000000e00), &(0x7f0000000080)=r2}, 0x20) getsockopt$inet_mreqn(0xffffffffffffffff, 0x0, 0x24, &(0x7f00000002c0)={@local, @rand_addr, 0x0}, &(0x7f0000000300)=0xc) openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='memory.events\x00', 0x275a, 0x0) (async) r5 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='memory.events\x00', 0x275a, 0x0) write$cgroup_subtree(r5, &(0x7f0000000100)=ANY=[], 0x32600) mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x2000001, 0x12, r5, 0x0) syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) (async) r6 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r7 = syz_genetlink_get_family_id$netlbl_mgmt(&(0x7f0000000000), r6) sendmsg$NLBL_MGMT_C_ADDDEF(r6, &(0x7f0000002a40)={0x0, 0x0, &(0x7f0000002a00)={&(0x7f0000002980)=ANY=[@ANYBLOB, @ANYRES16=r7, @ANYBLOB="01002cbd700003dcdf2504000000"], 0x14}, 0x1, 0x0, 0x0, 0x40}, 0x0) ioctl$XFS_IOC_ATTRLIST_BY_HANDLE(0xffffffffffffffff, 0x4058587a, &(0x7f0000000980)={{0xffffffffffffffff, &(0x7f0000000380)='raw\x00', 0x408001, &(0x7f00000003c0)={@align=0xc514, {0x3, 0x200, 0x3, 0xffffffffffff62fd}}, 0xe, &(0x7f0000000840)={@_ha_fsid}, &(0x7f0000000880)=0x5}, {[0x8, 0x8000, 0x9, 0x2]}, 0x2, 0x9d, &(0x7f00000008c0)=""/157}) r9 = bpf$MAP_CREATE_TAIL_CALL(0x0, &(0x7f0000000a00)={0x3, 0x4, 0x4, 0xa, 0x0, 0xffffffffffffffff, 0x80000000, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x80000001, 0x1}, 0x50) bpf$MAP_UPDATE_CONST_STR(0x2, &(0x7f0000000b00)={{0xffffffffffffffff, 0xffffffffffffffff}, &(0x7f0000000a80), &(0x7f0000000ac0)='%pI4 \x00'}, 0x20) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000bc0)={{0x1}, &(0x7f0000000b40), &(0x7f0000000b80)}, 0x20) (async) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000bc0)={{0x1, 0xffffffffffffffff}, &(0x7f0000000b40), &(0x7f0000000b80)}, 0x20) r12 = bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f0000000c00)={0x1b, 0x0, 0x0, 0x32c, 0x0, 0xffffffffffffffff, 0xa80000, '\x00', 0x0, 0xffffffffffffffff, 0x3, 0x1, 0x3}, 0x50) syz_init_net_socket$bt_sco(0x1f, 0x5, 0x2) (async) r13 = syz_init_net_socket$bt_sco(0x1f, 0x5, 0x2) bind$bt_sco(r13, &(0x7f00000001c0), 0x37) (async) bind$bt_sco(r13, &(0x7f00000001c0), 0x37) setsockopt$bt_BT_DEFER_SETUP(r13, 0x112, 0x7, &(0x7f0000000580)=0x5, 0x4) socket$vsock_stream(0x28, 0x1, 0x0) (async) r14 = socket$vsock_stream(0x28, 0x1, 0x0) bind$vsock_stream(r14, &(0x7f0000000040)={0x28, 0x0, 0x2710, @local}, 0x10) (async) bind$vsock_stream(r14, &(0x7f0000000040)={0x28, 0x0, 0x2710, @local}, 0x10) listen(r14, 0x0) ioctl$int_in(r14, 0x5421, &(0x7f0000000240)=0xfffffffffffffe01) accept(r14, 0x0, 0x0) ioctl$XFS_IOC_START_COMMIT(0xffffffffffffffff, 0x80585882, &(0x7f0000000c80)={0xffffffffffffffff}) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000d40)={0x6, 0x21, &(0x7f0000000140)=@ringbuf={{0x18, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x80000001}, {{0x18, 0x1, 0x1, 0x0, r0}}, {}, [@kfunc={0x85, 0x0, 0x2, 0x0, 0x3}, @btf_id={0x18, 0x3, 0x3, 0x0, 0x3}, @exit, @btf_id={0x18, 0x3, 0x3, 0x0, 0x2}, @call={0x85, 0x0, 0x0, 0xba}, @initr0={0x18, 0x0, 0x0, 0x0, 0x5, 0x0, 0x0, 0x0, 0xfff}, @ringbuf_output={{0x18, 0x1, 0x1, 0x0, r3}, {0x7, 0x0, 0xb, 0x8, 0x0, 0x0, 0x6}, {}, {}, {}, {}, {0x7, 0x0, 0xb, 0x4, 0x0, 0x0, 0x2}}], {{}, {}, {0x85, 0x0, 0x0, 0x85}}}, &(0x7f0000000280)='GPL\x00', 0x3, 0x0, 0x0, 0x41000, 0x9, '\x00', r4, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, &(0x7f0000000340)={0x2, 0x4, 0xffffffff, 0x7}, 0x10, 0x0, 0x0, 0x0, &(0x7f0000000d00)=[r5, r8, r9, r10, r11, r12, r15], 0x0, 0x10, 0x8}, 0x94) (async) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000d40)={0x6, 0x21, &(0x7f0000000140)=@ringbuf={{0x18, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x80000001}, {{0x18, 0x1, 0x1, 0x0, r0}}, {}, [@kfunc={0x85, 0x0, 0x2, 0x0, 0x3}, @btf_id={0x18, 0x3, 0x3, 0x0, 0x3}, @exit, @btf_id={0x18, 0x3, 0x3, 0x0, 0x2}, @call={0x85, 0x0, 0x0, 0xba}, @initr0={0x18, 0x0, 0x0, 0x0, 0x5, 0x0, 0x0, 0x0, 0xfff}, @ringbuf_output={{0x18, 0x1, 0x1, 0x0, r3}, {0x7, 0x0, 0xb, 0x8, 0x0, 0x0, 0x6}, {}, {}, {}, {}, {0x7, 0x0, 0xb, 0x4, 0x0, 0x0, 0x2}}], {{}, {}, {0x85, 0x0, 0x0, 0x85}}}, &(0x7f0000000280)='GPL\x00', 0x3, 0x0, 0x0, 0x41000, 0x9, '\x00', r4, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, &(0x7f0000000340)={0x2, 0x4, 0xffffffff, 0x7}, 0x10, 0x0, 0x0, 0x0, &(0x7f0000000d00)=[r5, r8, r9, r10, r11, r12, r15], 0x0, 0x10, 0x8}, 0x94) r16 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r16, &(0x7f0000000400)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000680)=ANY=[@ANYBLOB="441000002f00090025bd7000000000000400000008000c0002000000261016"], 0x1044}, 0x1, 0x0, 0x0, 0x42014}, 0x4080040) 2m56.799297077s ago: executing program 1 (id=5838): r0 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r0, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000003c0)=ANY=[@ANYBLOB="fc010000190001000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000a00000000000000", @ANYRES32=0x0, @ANYRES32=0x0, @ANYBLOB="0900000000008000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000010000000000000000000000000000000000000000000000000000000000001000000000000000000000000000000020000000044010500ac1414bb000000000000000000000000000000006c00000000000000ac1414aa000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000001ffffffff3c00000002000000e00000020000000000000000000000000000000001000000000000000000000008000000fc020000000000000000000000000000000000003300000002"], 0x1fc}}, 0x20000000) 2m56.605631612s ago: executing program 1 (id=5840): pipe(&(0x7f0000000480)={0xffffffffffffffff, 0xffffffffffffffff}) r2 = socket$inet(0x2, 0xa, 0x265) ioctl$sock_inet_SIOCSARP(r2, 0x8955, &(0x7f0000000000)={{0x2, 0x20, @dev}, {0x1, @local}, 0x4a, {0x2, 0x0, @rand_addr=0x64010101}}) r3 = socket$kcm(0x2, 0x3, 0x2) sendmsg$inet(r3, &(0x7f0000001640)={&(0x7f0000000300)={0x2, 0x0, @multicast2=0xe0000001}, 0x10, 0x0, 0x0, &(0x7f0000000600)=[@ip_pktinfo={{0x1c, 0x0, 0x8, {0x0, @dev={0xac, 0x14, 0x14, 0x10}, @local}}}, @ip_retopts={{0x14, 0x0, 0x7, {[@ra={0x94, 0x4}]}}}], 0x38}, 0x0) vmsplice(r1, &(0x7f00000000c0)=[{&(0x7f0000000180)="77690addcfbe1fbb66ec", 0xff3b}], 0x1, 0x1) sendmsg$IPCTNL_MSG_CT_NEW(0xffffffffffffffff, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000180)=ANY=[@ANYBLOB="80000000"], 0x80}}, 0x0) r4 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r5 = openat$tun(0xffffffffffffff9c, &(0x7f0000000000), 0x40241, 0x0) ioctl$TUNSETIFF(r5, 0x400454ca, &(0x7f0000000200)={'syzkaller1\x00', 0xc201}) r6 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r6, 0x8933, &(0x7f00000000c0)={'veth0_to_team\x00', 0x0}) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000001140)={&(0x7f0000000040)=ANY=[@ANYBLOB="68000000100003050000000000000000", @ANYBLOB="0000000000000000400012800c0001006d6163766c616e003000028008000100100000001000", @ANYRES32=r6], 0x68}, 0x1, 0x0, 0x0, 0x4004014}, 0x1) sendmsg$nl_route_sched(r6, &(0x7f00000003c0)={0x0, 0x0, &(0x7f0000000700)={&(0x7f0000000180)=@getchain={0x24, 0x11, 0x839, 0x70bd28, 0x25dfdbfd, {0x0, 0x0, 0x0, r7, {0x1, 0x2}, {0xd, 0x10}, {0x1, 0xfff1}}}, 0x24}, 0x1, 0x0, 0x0, 0x84}, 0x0) r8 = socket$kcm(0x2, 0x3, 0x2) ioctl$SIOCSIFHWADDR(r8, 0x8914, &(0x7f0000000040)={'syzkaller1\x00', @broadcast}) write$tun(r5, &(0x7f0000002ec0)={@val={0x8, 0x800}, @val={0x3, 0x0, 0x4, 0xfffd, 0x14}, @ipv4=@generic={{0x5, 0x4, 0x1, 0x22, 0x1c, 0x69, 0x0, 0x60, 0x2, 0x0, @empty, @broadcast}, "14f3305280f125e6"}}, 0xfdef) r9 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r10 = syz_genetlink_get_family_id$netlbl_calipso(&(0x7f0000000ac0), r9) sendmsg$NLBL_CALIPSO_C_REMOVE(r9, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000080)={0x1c, r10, 0x1, 0x70bd25, 0x25dfdbff, {}, [@NLBL_CALIPSO_A_DOI={0x8, 0x1, 0x3}]}, 0x1c}, 0x1, 0x0, 0x0, 0x40005}, 0x8000) sendmsg$NLBL_CALIPSO_C_ADD(r4, &(0x7f00000001c0)={&(0x7f0000000080)={0x10, 0x0, 0x0, 0x200000}, 0xc, &(0x7f0000000140)={&(0x7f0000000100)={0x1c, r10, 0x20, 0x70bd2b, 0x25dfdbfe, {}, [@NLBL_CALIPSO_A_DOI={0x8}]}, 0x1c}, 0x1, 0x0, 0x0, 0x4040}, 0x4000010) r11 = socket$netlink(0x10, 0x3, 0xc) splice(r0, 0x0, r11, 0x0, 0x800000000082, 0xf) close(0x4) r12 = socket$nl_netfilter(0x10, 0x3, 0xc) bpf$MAP_CREATE(0x0, &(0x7f0000001000)=ANY=[@ANYBLOB="170000628df1dbf7eb6816000000000000100000", @ANYRES32=0x1, @ANYBLOB="0500"/20, @ANYRES32=0x0, @ANYRES32, @ANYBLOB="020000000200"/28], 0x50) sendmsg$NFT_BATCH(r12, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000200)={&(0x7f00000003c0)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a28000000000a0101000000005e1affd5020000000900010073797a300000000008000240000000032c000000030a01030000e6ff00000000020000000900010073797a30000000000900030073797a320000000014000000110001"], 0x7c}, 0x1, 0x0, 0x0, 0x4805}, 0x20000050) sendmsg$NFT_BATCH(r12, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000100)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a40000000160a03020000000000000000020000000900020073797a30000000000900010073797a3000000000140003800800014000000000080002400000000014000000110001"], 0x68}}, 0x0) socket$nl_route(0x10, 0x3, 0x0) socket$nl_netfilter(0x10, 0x3, 0xc) 2m55.904572902s ago: executing program 1 (id=5848): r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000400)=@base={0x6, 0x4, 0x8, 0x8, 0x0, 0x1, 0x1}, 0x50) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000004c0)={0x11, 0x14, &(0x7f0000000200)=ANY=[@ANYBLOB="1802000000000000000000000000000018010000786c6c3a00000000070000007b1af8ff00000000bfa100000000000007010000f8ffffffb702000000000000b70300000008ff90850000002d00000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000000000000b70400000000000085000000c300000095"], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x11, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000040)={r1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x50) r2 = socket$inet(0x2, 0x3, 0x6) ioctl$sock_inet_SIOCSARP(r2, 0x8955, &(0x7f0000000000)={{0x2, 0x0, @multicast1}, {0x1, @local}, 0x4a, {0x2, 0x0, @multicast1}}) recvmmsg(0xffffffffffffffff, 0x0, 0x0, 0x40002123, 0x0) r3 = socket$netlink(0x10, 0x3, 0x0) writev(r3, &(0x7f00000000c0)=[{&(0x7f0000000080)="290000001e00190f00003fffffffda060200000000e80001dd0008040d000900250000000005000000", 0x29}], 0x1) r4 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) r5 = bpf$MAP_CREATE(0x0, &(0x7f0000000740)=@base={0x9, 0x3, 0x4, 0x100, 0x0, 0x0, 0x1, '\x00', 0x0, 0x0}, 0x50) bpf$MAP_CREATE(0x0, &(0x7f0000000140)=@base={0x1, 0x4, 0x4, 0x100, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0}, 0x48) r6 = bpf$PROG_LOAD(0x5, &(0x7f00000001c0)={0x1, 0x17, &(0x7f0000000340)=@framed={{}, [@generic={0x61, 0x8, 0x1}, @map_fd={0x18, 0x1, 0x1, 0x0, r5}, @generic={0x15, 0x8, 0x0, 0x2}, @snprintf={{}, {}, {0x7, 0x0, 0xb, 0x8, 0x0, 0x0, 0x2}, {}, {}, {}, {}, {}, {}, {0x18, 0x3, 0x2, 0x0, r0}}, @generic={0xbf, 0x2, 0xa}, @generic={0x7, 0x2, 0x0, 0x0, 0xfffffff8}, @generic={0x85, 0x0, 0x0, 0x0, 0x1}]}, &(0x7f0000000300)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000040)={r6, 0x0, 0xe, 0x0, &(0x7f0000000000)='\x00'/14, 0x0, 0xfffffffe, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x50) ioctl$sock_SIOCBRADDBR(r4, 0x89a0, &(0x7f0000000000)='wg2\x00') 2m55.671031838s ago: executing program 1 (id=5852): r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$batadv(&(0x7f0000000180), 0xffffffffffffffff) r2 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r2, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000080)=ANY=[@ANYBLOB="2c0000003f00070100000000fddbdf25027c00001800378013000100717472283414d6bb", @ANYRES8=r2], 0x2c}, 0x1, 0x0, 0x0, 0xc880}, 0x0) r3 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) syz_emit_ethernet(0x83, &(0x7f0000000a40)=ANY=[@ANYBLOB="aaaaaaaa0500aaaaaaaaaaaa000404f88c55e63dda19e1d519e59bafca34db47ef4a01425c0e823b0fd10636d990b929927f20df110e047bcdf464ea46ba3f9ea8bb70b4c29d5f1d9c89148c6c1c3dae42906551314faf7684e432cfc005c9f2f21e246be88224d896c8b348943988dff2c3d51fa70af8174e64785d859387e30000000000000007042405f564f3d930b3b83c325e54c80ec18768850f26babd2b391289b1f6349c51c838512d80a563a46fdeb9a6127eaea42c673b50e3b6855a5be5e2d6eea8ce131d51e6008ed6bc1b4f0f1efc273f653b479c3c0d1eda2afafc61a0527d663da46c69f28470394c915c9a4042eb764b2c"], 0x0) sendmsg$nl_generic(r3, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000200)={&(0x7f00000008c0)=ANY=[@ANYBLOB="140000002700010029bd700000000000060100007e61ef1cd7a21599c08803f371"], 0x14}}, 0xc000) r4 = socket$key(0xf, 0x3, 0x2) sendmsg$key(r4, &(0x7f0000000180)={0x3, 0x0, &(0x7f0000000340)={&(0x7f0000000100)=ANY=[@ANYBLOB="020300090c0000002cbd7000fb00002502000000080000001c00000000000000030006006c00000002004e22ac1414bb000000000000000002000100000000000000070001000000030005000000000002004e21ac1e01010000000000000000"], 0x60}, 0x1, 0x7}, 0x0) r5 = socket$packet(0x11, 0x3, 0x300) setsockopt$packet_int(r5, 0x107, 0xf, &(0x7f0000000100)=0x207, 0x4) r6 = socket$packet(0x11, 0x2, 0x300) ioctl$sock_SIOCGIFINDEX(r5, 0x8933, &(0x7f0000000300)={'ip6gre0\x00', 0x0}) sendto$packet(r5, &(0x7f00000002c0)="05031600d3fc140000004788031c09103c28", 0x12, 0x4, &(0x7f0000000140)={0x11, 0xf8, r7, 0x1, 0x0, 0x6, @multicast}, 0x14) recvmmsg(r6, &(0x7f0000000780)=[{{0x0, 0x0, &(0x7f0000000680)=[{&(0x7f00000005c0)=""/174, 0xae}], 0x1}, 0xffffffff}], 0x1, 0x22, 0x0) r8 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r8, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000240)=ANY=[@ANYBLOB="140000001000010000000000000000000500000a28000000000a030000000000000000000a00000708000240000000020900010073797a31000000002c000000030a010100000000000000000a0000070900010073797a31000000000900030073797a320000000014000000110001"], 0x7c}, 0x1, 0x0, 0x0, 0x4000}, 0x0) sendmsg$NFT_BATCH(r8, &(0x7f0000009b40)={0x0, 0x0, &(0x7f0000009b00)={&(0x7f0000000900)={{0x14, 0x10, 0x1, 0x0, 0x0, {0x5}}, [@NFT_MSG_NEWSET={0x44, 0x9, 0xa, 0x401, 0x0, 0x0, {0xa, 0x0, 0x4}, [@NFTA_SET_TABLE={0x9, 0x1, 'syz1\x00'}, @NFTA_SET_KEY_LEN={0x8, 0x5, 0x1, 0x0, 0x2}, @NFTA_SET_NAME={0x9, 0x2, 'syz1\x00'}, @NFTA_SET_ID={0x8, 0xa, 0x1, 0x0, 0xfffffffc}, @NFTA_SET_FLAGS={0x8, 0x3, 0x1, 0x0, 0x14}]}, @NFT_MSG_DELTABLE={0xc8, 0x2, 0xa, 0x5, 0x0, 0x0, {0x2, 0x0, 0x2}, [@NFTA_TABLE_USERDATA={0x68, 0x6, "812b8a97d8d6887058efc3a3aafce35fc3fdc818145313c811d9bdde5c45113c85d6b183edb52d0f42751a2e19d51bad6b0b9fc7d592cdd459e17660fa9d61f586aefbe1686c53b32ea130b89a44982f217e3b5123d902f177c933c0e0f28c67e65bb3b0"}, @NFTA_TABLE_HANDLE={0xc, 0x4, 0x1, 0x0, 0x3}, @NFTA_TABLE_HANDLE={0xc, 0x4, 0x1, 0x0, 0x2}, @NFTA_TABLE_FLAGS={0x8}, @NFTA_TABLE_FLAGS={0x8, 0x2, 0x1, 0x0, 0x6}, @NFTA_TABLE_HANDLE={0xc, 0x4, 0x1, 0x0, 0x1}, @NFTA_TABLE_HANDLE={0xc, 0x4, 0x1, 0x0, 0x4}, @NFTA_TABLE_HANDLE={0xc, 0x4, 0x1, 0x0, 0x3}]}], {0x14, 0x11, 0x1, 0x0, 0x0, {0x1}}}, 0x134}, 0x1, 0x0, 0x0, 0x4000850}, 0x40) r9 = socket(0x10, 0x803, 0x2) syz_genetlink_get_family_id$mptcp(&(0x7f00000000c0), r9) getsockname$packet(r6, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0xff18) getsockopt$inet_sctp_SCTP_LOCAL_AUTH_CHUNKS(0xffffffffffffffff, 0x84, 0x1b, &(0x7f0000000340)={0x0, 0xc4, "218fd0c175cd6ccf346d0d8255c028e21c7a2b8c2afdf643f22c8131768756ed06a77a28d44e6fe58f9fea79553543aedbfedb170e00ce618b78ea4d636816eb4c8a2173858767522f4113784753765e83f5eb8f73ceb1203b8c1906ef8191f872b6601cccd7fabf3d0036662f0c74a5a0ff00d27f46b6c94023d77b7272119ba993d4380bcf2edbb683124327e73ba5b1653df92d4791629836d814ca67088461c68b61917aa610c8a65ab48dd66fd38606a3199c21e109e9cb5af7d0c8a72b704cf4bc"}, &(0x7f0000000440)=0xcc) setsockopt$inet_sctp_SCTP_RTOINFO(r9, 0x84, 0x0, &(0x7f0000000480)={r10, 0x4, 0xff, 0x951}, 0x10) r11 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000500), r2) sendmsg$NL80211_CMD_REGISTER_BEACONS(r9, &(0x7f00000005c0)={&(0x7f00000004c0)={0x10, 0x0, 0x0, 0x20}, 0xc, &(0x7f0000000580)={&(0x7f00000006c0)={0x1c, r11, 0x2, 0x70bd2c, 0x25dfdbff, {{}, {@void, @val={0x8}, @void}}, ["", ""]}, 0x1c}, 0x1, 0x0, 0x0, 0x10}, 0x44) ioctl$ifreq_SIOCGIFINDEX_batadv_mesh(r0, 0x8933, &(0x7f0000000180)={'batadv0\x00', 0x0}) sendmsg$BATADV_CMD_SET_MESH(r0, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000000)={0x2c, r1, 0x1, 0x70bd2a, 0x25dfdbf9, {}, [@BATADV_ATTR_MESH_IFINDEX={0x8, 0x3, r12}, @BATADV_ATTR_GW_BANDWIDTH_DOWN={0x8, 0x31, 0x4}, @BATADV_ATTR_FRAGMENTATION_ENABLED={0x5}]}, 0x2c}, 0x1, 0x0, 0x0, 0x20008040}, 0x0) clock_gettime(0x0, &(0x7f0000000240)={0x0, 0x0}) nanosleep(&(0x7f0000000280)={r13, r14+60000000}, &(0x7f00000002c0)) ioctl$ifreq_SIOCGIFINDEX_vcan(r2, 0x8933, &(0x7f00000001c0)={'vxcan0\x00'}) 2m40.59451358s ago: executing program 32 (id=5852): r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$batadv(&(0x7f0000000180), 0xffffffffffffffff) r2 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r2, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000080)=ANY=[@ANYBLOB="2c0000003f00070100000000fddbdf25027c00001800378013000100717472283414d6bb", @ANYRES8=r2], 0x2c}, 0x1, 0x0, 0x0, 0xc880}, 0x0) r3 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) syz_emit_ethernet(0x83, &(0x7f0000000a40)=ANY=[@ANYBLOB="aaaaaaaa0500aaaaaaaaaaaa000404f88c55e63dda19e1d519e59bafca34db47ef4a01425c0e823b0fd10636d990b929927f20df110e047bcdf464ea46ba3f9ea8bb70b4c29d5f1d9c89148c6c1c3dae42906551314faf7684e432cfc005c9f2f21e246be88224d896c8b348943988dff2c3d51fa70af8174e64785d859387e30000000000000007042405f564f3d930b3b83c325e54c80ec18768850f26babd2b391289b1f6349c51c838512d80a563a46fdeb9a6127eaea42c673b50e3b6855a5be5e2d6eea8ce131d51e6008ed6bc1b4f0f1efc273f653b479c3c0d1eda2afafc61a0527d663da46c69f28470394c915c9a4042eb764b2c"], 0x0) sendmsg$nl_generic(r3, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000200)={&(0x7f00000008c0)=ANY=[@ANYBLOB="140000002700010029bd700000000000060100007e61ef1cd7a21599c08803f371"], 0x14}}, 0xc000) r4 = socket$key(0xf, 0x3, 0x2) sendmsg$key(r4, &(0x7f0000000180)={0x3, 0x0, &(0x7f0000000340)={&(0x7f0000000100)=ANY=[@ANYBLOB="020300090c0000002cbd7000fb00002502000000080000001c00000000000000030006006c00000002004e22ac1414bb000000000000000002000100000000000000070001000000030005000000000002004e21ac1e01010000000000000000"], 0x60}, 0x1, 0x7}, 0x0) r5 = socket$packet(0x11, 0x3, 0x300) setsockopt$packet_int(r5, 0x107, 0xf, &(0x7f0000000100)=0x207, 0x4) r6 = socket$packet(0x11, 0x2, 0x300) ioctl$sock_SIOCGIFINDEX(r5, 0x8933, &(0x7f0000000300)={'ip6gre0\x00', 0x0}) sendto$packet(r5, &(0x7f00000002c0)="05031600d3fc140000004788031c09103c28", 0x12, 0x4, &(0x7f0000000140)={0x11, 0xf8, r7, 0x1, 0x0, 0x6, @multicast}, 0x14) recvmmsg(r6, &(0x7f0000000780)=[{{0x0, 0x0, &(0x7f0000000680)=[{&(0x7f00000005c0)=""/174, 0xae}], 0x1}, 0xffffffff}], 0x1, 0x22, 0x0) r8 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r8, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000240)=ANY=[@ANYBLOB="140000001000010000000000000000000500000a28000000000a030000000000000000000a00000708000240000000020900010073797a31000000002c000000030a010100000000000000000a0000070900010073797a31000000000900030073797a320000000014000000110001"], 0x7c}, 0x1, 0x0, 0x0, 0x4000}, 0x0) sendmsg$NFT_BATCH(r8, &(0x7f0000009b40)={0x0, 0x0, &(0x7f0000009b00)={&(0x7f0000000900)={{0x14, 0x10, 0x1, 0x0, 0x0, {0x5}}, [@NFT_MSG_NEWSET={0x44, 0x9, 0xa, 0x401, 0x0, 0x0, {0xa, 0x0, 0x4}, [@NFTA_SET_TABLE={0x9, 0x1, 'syz1\x00'}, @NFTA_SET_KEY_LEN={0x8, 0x5, 0x1, 0x0, 0x2}, @NFTA_SET_NAME={0x9, 0x2, 'syz1\x00'}, @NFTA_SET_ID={0x8, 0xa, 0x1, 0x0, 0xfffffffc}, @NFTA_SET_FLAGS={0x8, 0x3, 0x1, 0x0, 0x14}]}, @NFT_MSG_DELTABLE={0xc8, 0x2, 0xa, 0x5, 0x0, 0x0, {0x2, 0x0, 0x2}, [@NFTA_TABLE_USERDATA={0x68, 0x6, "812b8a97d8d6887058efc3a3aafce35fc3fdc818145313c811d9bdde5c45113c85d6b183edb52d0f42751a2e19d51bad6b0b9fc7d592cdd459e17660fa9d61f586aefbe1686c53b32ea130b89a44982f217e3b5123d902f177c933c0e0f28c67e65bb3b0"}, @NFTA_TABLE_HANDLE={0xc, 0x4, 0x1, 0x0, 0x3}, @NFTA_TABLE_HANDLE={0xc, 0x4, 0x1, 0x0, 0x2}, @NFTA_TABLE_FLAGS={0x8}, @NFTA_TABLE_FLAGS={0x8, 0x2, 0x1, 0x0, 0x6}, @NFTA_TABLE_HANDLE={0xc, 0x4, 0x1, 0x0, 0x1}, @NFTA_TABLE_HANDLE={0xc, 0x4, 0x1, 0x0, 0x4}, @NFTA_TABLE_HANDLE={0xc, 0x4, 0x1, 0x0, 0x3}]}], {0x14, 0x11, 0x1, 0x0, 0x0, {0x1}}}, 0x134}, 0x1, 0x0, 0x0, 0x4000850}, 0x40) r9 = socket(0x10, 0x803, 0x2) syz_genetlink_get_family_id$mptcp(&(0x7f00000000c0), r9) getsockname$packet(r6, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0xff18) getsockopt$inet_sctp_SCTP_LOCAL_AUTH_CHUNKS(0xffffffffffffffff, 0x84, 0x1b, &(0x7f0000000340)={0x0, 0xc4, "218fd0c175cd6ccf346d0d8255c028e21c7a2b8c2afdf643f22c8131768756ed06a77a28d44e6fe58f9fea79553543aedbfedb170e00ce618b78ea4d636816eb4c8a2173858767522f4113784753765e83f5eb8f73ceb1203b8c1906ef8191f872b6601cccd7fabf3d0036662f0c74a5a0ff00d27f46b6c94023d77b7272119ba993d4380bcf2edbb683124327e73ba5b1653df92d4791629836d814ca67088461c68b61917aa610c8a65ab48dd66fd38606a3199c21e109e9cb5af7d0c8a72b704cf4bc"}, &(0x7f0000000440)=0xcc) setsockopt$inet_sctp_SCTP_RTOINFO(r9, 0x84, 0x0, &(0x7f0000000480)={r10, 0x4, 0xff, 0x951}, 0x10) r11 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000500), r2) sendmsg$NL80211_CMD_REGISTER_BEACONS(r9, &(0x7f00000005c0)={&(0x7f00000004c0)={0x10, 0x0, 0x0, 0x20}, 0xc, &(0x7f0000000580)={&(0x7f00000006c0)={0x1c, r11, 0x2, 0x70bd2c, 0x25dfdbff, {{}, {@void, @val={0x8}, @void}}, ["", ""]}, 0x1c}, 0x1, 0x0, 0x0, 0x10}, 0x44) ioctl$ifreq_SIOCGIFINDEX_batadv_mesh(r0, 0x8933, &(0x7f0000000180)={'batadv0\x00', 0x0}) sendmsg$BATADV_CMD_SET_MESH(r0, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000000)={0x2c, r1, 0x1, 0x70bd2a, 0x25dfdbf9, {}, [@BATADV_ATTR_MESH_IFINDEX={0x8, 0x3, r12}, @BATADV_ATTR_GW_BANDWIDTH_DOWN={0x8, 0x31, 0x4}, @BATADV_ATTR_FRAGMENTATION_ENABLED={0x5}]}, 0x2c}, 0x1, 0x0, 0x0, 0x20008040}, 0x0) clock_gettime(0x0, &(0x7f0000000240)={0x0, 0x0}) nanosleep(&(0x7f0000000280)={r13, r14+60000000}, &(0x7f00000002c0)) ioctl$ifreq_SIOCGIFINDEX_vcan(r2, 0x8933, &(0x7f00000001c0)={'vxcan0\x00'}) 2m32.420856521s ago: executing program 0 (id=6041): r0 = socket$nl_generic(0x10, 0x3, 0x10) (async) r1 = socket$inet(0xa, 0x801, 0x84) connect$inet(r1, &(0x7f0000004cc0)={0x2, 0x4e21, @remote={0xac, 0x14, 0xffffffffffffffff}}, 0x10) (async) listen(r1, 0x8) (async) r2 = accept4(r1, 0x0, 0x0, 0x0) write(r2, &(0x7f0000000000)="ea", 0x1) setsockopt$inet_sctp6_SCTP_DEFAULT_SNDINFO(r2, 0x84, 0x22, &(0x7f0000000580)={0x5, 0x201, 0xffffffff, 0x2}, 0x10) (async) write(r2, &(0x7f00000002c0)="04", 0x1) (async) sendmsg$nl_route(r2, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000240)=ANY=[], 0x48}, 0x1, 0x0, 0x0, 0x20004810}, 0x0) (async) setsockopt$inet_sctp6_SCTP_DEFAULT_SNDINFO(r2, 0x84, 0x22, &(0x7f0000000100)={0x3, 0x0, 0x2}, 0x10) (async) writev(r2, &(0x7f0000000140)=[{&(0x7f0000000040)='w', 0x1}], 0x1) (async) sendto$inet6(r2, &(0x7f0000000200)='x', 0x1, 0x0, 0x0, 0x0) (async) setsockopt$inet_sctp6_SCTP_STREAM_SCHEDULER(r2, 0x84, 0x7b, &(0x7f0000000080)={0x0, 0x4}, 0x8) (async) close(r2) (async) sendto(r0, &(0x7f0000000600)="a800000042000100030000000000000003010000102700003200010000112233445566778899aabb080045000020000140004011b778c0a80101c0a8010204d2162e000c00007465737400004c00020008000300010000001000040066778899aabb001122334455060006000800000010000700c0a80101c0a801021100400008000a0004d2162e08001600010000000600170000000000100003000c000c000600020000000000", 0xa8, 0x0, 0x0, 0x0) 2m32.129534333s ago: executing program 0 (id=6042): r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r2 = syz_genetlink_get_family_id$ieee802154(&(0x7f0000001f80), r1) r3 = socket$pppl2tp(0x18, 0x1, 0x1) r4 = socket$nl_rdma(0x10, 0x3, 0x14) sendmsg$RDMA_NLDEV_CMD_DELLINK(r4, &(0x7f00000003c0)={0x0, 0x0, &(0x7f0000000380)={&(0x7f0000000480)=ANY=[@ANYBLOB="400000000414210828bd7000ffdbdf250800018000"], 0x40}, 0x1, 0x0, 0x0, 0x8}, 0x20040804) r5 = socket$l2tp6(0xa, 0x2, 0x73) connect$pppl2tp(r3, &(0x7f0000000080)=@pppol2tpin6={0x18, 0x1, {0x0, r5, 0x3, 0x0, 0x3, 0x0, {0xa, 0x4e24, 0x4, @mcast1, 0xfff}}}, 0x32) sendmsg$IEEE802154_LLSEC_ADD_SECLEVEL(r0, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000140)={0x14, r2, 0x43d, 0x70bd29, 0x25dfdbfe}, 0x14}, 0x1, 0x0, 0x0, 0x8000}, 0x4) 2m31.880503911s ago: executing program 0 (id=6044): r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000840)=ANY=[@ANYBLOB="0a000000050000000300000004"], 0x48) r1 = bpf$MAP_CREATE(0x0, &(0x7f00000000c0)=ANY=[@ANYBLOB="1b00000000000000000000000080"], 0x48) r2 = bpf$PROG_LOAD(0x5, &(0x7f0000000580)={0x11, 0x10, &(0x7f0000000180)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r1, @ANYBLOB="0000000000000000b702000003000000850000008600000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000300000095"], &(0x7f0000000340)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffff}, 0x94) bpf$PROG_BIND_MAP(0xa, &(0x7f0000000cc0)={r2}, 0xc) r3 = bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f0000000680)={0x1b, 0x0, 0x0, 0x40000, 0x0, 0x0}, 0x50) r4 = socket$inet6_icmp(0xa, 0x2, 0x3a) setsockopt$IP6T_SO_SET_REPLACE(r4, 0x29, 0x40, &(0x7f0000000c80)=@raw={'raw\x00', 0x3c1, 0x1a6cc7, 0x2a8, 0x0, 0x5802, 0x294, 0x0, 0x294, 0x340, 0x378, 0x378, 0x340, 0x378, 0x3, 0x0, {[{{@ipv6={@ipv4={'\x00', '\xff\xff', @multicast2}, @private0, [0xff000000, 0xff000000, 0x0, 0xffffff00], [0xff000000, 0xffffff00, 0xffffff00], 'batadv0\x00', 'pimreg1\x00', {}, {}, 0x2, 0x3, 0xa}, 0x0, 0xa8, 0x110, 0x52020000}, @unspec=@CT2={0x68, 'CT\x00', 0x2, {0x10, 0x3, 0xe621, 0x8, 'netbios-ns\x00', 'syz0\x00', {0xc3}}}}, {{@ipv6={@private1, @loopback, [0xffffff00, 0xffffffff, 0x0, 0x1ff000100], [0xffffff00, 0xff000000, 0xffffff00, 0xff000000], 'gre0\x00', 'tunl0\x00', {}, {0xff}, 0x5c, 0x5, 0x4, 0x4b}, 0x0, 0xa8, 0xc8}, @unspec=@NOTRACK={0x20}}], {{'\x00', 0x0, 0xa8, 0xd0}, {0x28}}}}, 0x308) r5 = socket$nl_netfilter(0x10, 0x3, 0xc) r6 = socket$inet(0x2, 0x4000000000000001, 0x0) setsockopt$inet_tcp_int(r6, 0x6, 0x80000000000002, &(0x7f00000000c0)=0x6a, 0x4) bind$inet(r6, &(0x7f0000001c00)={0x2, 0x4e23, @multicast2}, 0x10) setsockopt$inet_mtu(r6, 0x0, 0xa, &(0x7f0000000200)=0x5, 0x4) setsockopt$SO_TIMESTAMPING(r6, 0x1, 0x41, &(0x7f0000000180)=0xb27, 0x4) connect$inet(r6, &(0x7f0000001bc0)={0x2, 0x4e23, @loopback}, 0x10) sendmmsg(r6, &(0x7f0000000f40)=[{{0x0, 0x0, &(0x7f00000004c0)=[{&(0x7f0000000280)='\"', 0x1}], 0x1}}, {{0x0, 0x0, &(0x7f0000000340)=[{&(0x7f0000000380)="d2", 0x1}], 0x1}}, {{0x0, 0x0, &(0x7f0000002c40)=[{&(0x7f0000000c80)="eff38aa2e3f2c417a4d0bb308e1c69bfccb5c880f7298574b9b1319ae8337cb785c530e8807e76ff2c9afaa0c4c5eddc4bf88f600a0ae333b712235bc8b9b11fe545834b4c1b93c72090fb55ae34e9ab74837f7fb8db37a7c2366a2b", 0x5c}, {&(0x7f0000001c40)="cda7b763b6cbce69af5b70216fd29e6b94276a35563ee04193f623cd6a319055e973e80242e059f0c190632317de7abf81fc258302242d3bb519c57b0c5b7790b412ceb4d1226f3c9afbcdcf66d9734141db0d3ecb36b4925d1b2bb665b53d27fd", 0x61}], 0x2}}], 0x3, 0x4080) sendmsg$NFT_BATCH(r5, &(0x7f0000000000)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000240)=ANY=[@ANYBLOB="140000001000010000000000000000000500000a28000000000a030000000000000000000a00000708000240000000020900010073797a31000000002c000000030a010100000000000000000a0000070900010073797a31000000000900030073797a320000000014000000110001"], 0x7c}, 0x1, 0x0, 0x0, 0x4800}, 0x0) bpf$PROG_LOAD(0x5, &(0x7f0000000040)={0x4, 0x4, &(0x7f0000000580)=ANY=[], 0x0, 0x0, 0x0, 0x0, 0x0, 0x16, '\x00', 0x0, @fallback=0x17, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10000}, 0x94) sendmsg$TIPC_NL_MON_GET(0xffffffffffffffff, &(0x7f0000000240)={&(0x7f0000000040), 0xc, 0x0}, 0x0) r7 = socket$inet_mptcp(0x2, 0x1, 0x106) bind$inet(r7, 0x0, 0x0) getsockopt$inet_mptcp_buf(r7, 0x11c, 0x2, &(0x7f0000000040)=""/185, &(0x7f0000000280)=0xb9) sendmsg$NFT_BATCH(r5, &(0x7f0000009b40)={0x0, 0x0, &(0x7f0000009b00)={&(0x7f0000000100)=ANY=[@ANYBLOB="140000001000010000000000000000000500000a4c000000090a010400000000000000000a0000040900010073797a310000000008000540000000020900020073797a310000000008000a40fffffffc080003400000001408000c4000000e45400000000c0a010100000000000000000a0000060900020073797a31000000000900010073797a310000000014000380100000800c00018006000100d103000014000000110001"], 0xb4}, 0x1, 0x0, 0x0, 0x4000850}, 0x40) sendmsg$NFT_BATCH(r5, &(0x7f0000009b40)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000002c0)=ANY=[@ANYBLOB="140000001000010000000000000000000300000a840000000c0a010100002100000000000a0000060900020073797a31000000000900010073797a310000000058000380540000800c00018006000100d1ab020044000b802c000180090001006c61737400"], 0xac}, 0x1, 0x0, 0x0, 0x4000851}, 0x40) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000001080)={0x11, 0x10, &(0x7f0000000580)=ANY=[@ANYBLOB="18000000cf000000000000000400000018110000", @ANYRES32=r3, @ANYBLOB="0000000000000000b702000014000000b7030000000700008500000086000000bf09000000000000550901000020000095000000000000006d90fcff00000000bf95000000000000b702000001000000850000002a000000b70000000000000095"], &(0x7f0000000080)='GPL\x00', 0x1, 0x0, 0x0, 0x41000, 0x2c}, 0x94) socket$kcm(0x29, 0x0, 0x0) 2m30.259509731s ago: executing program 0 (id=6051): r0 = socket$inet6_tcp(0xa, 0x1, 0x0) getsockopt$IP_VS_SO_GET_SERVICES(r0, 0x0, 0x482, &(0x7f00000001c0)=""/30, &(0x7f00000002c0)=0x1e) r1 = socket$nl_generic(0x10, 0x3, 0x10) r2 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000040), r1) sendmsg$NL80211_CMD_CANCEL_REMAIN_ON_CHANNEL(r1, &(0x7f0000000100)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x80000000}, 0xc, &(0x7f00000000c0)={&(0x7f0000000080)={0x38, r2, 0x400, 0x70bd26, 0x25dfdbfe, {{}, {@void, @void}}, [@NL80211_ATTR_COOKIE={0xc, 0x58, 0x1c}, @NL80211_ATTR_COOKIE={0xc, 0x58, 0x2d}, @NL80211_ATTR_COOKIE={0xc, 0x58, 0x7e}]}, 0x38}, 0x1, 0x0, 0x0, 0x2000000c}, 0x20000800) r3 = socket$netlink(0x10, 0x3, 0x0) r4 = socket(0x10, 0x803, 0x0) sendmsg$NL80211_CMD_CRIT_PROTOCOL_START(r4, &(0x7f0000000580)={0x0, 0x0, &(0x7f0000000540)={0x0, 0x1c}}, 0x0) getsockname$packet(r4, &(0x7f0000000600)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000080)=0x14) sendmsg$nl_route(r3, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000640)=ANY=[@ANYBLOB="3c0000001000850600000000ff6122314a000800", @ANYRES32=r5, @ANYBLOB="f5ff0f00252155b21c0012000c000100626f6e64000000000c0002000800010001"], 0x3c}}, 0x40000) r6 = bpf$PROG_LOAD(0x5, &(0x7f0000000700)={0x6, 0x4, &(0x7f0000000100)=@framed={{0x18, 0x2, 0x0, 0x0, 0x800, 0x0, 0x0, 0x0, 0x4}, [@call={0x85, 0x0, 0x0, 0xbc}]}, &(0x7f0000000000)='syzkaller\x00', 0x0, 0x0, 0x0, 0x40f00, 0x1, '\x00', 0x0, @xdp, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_LINK_CREATE_XDP(0x1c, &(0x7f0000000380)={r6, r5, 0x25, 0x4, @void}, 0x10) sendmsg$nl_route(r4, &(0x7f0000000280)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000140)=@newlink={0x4c, 0x10, 0x503, 0xfffffffc, 0x700, {0x0, 0x0, 0x0, 0x0, 0x0, 0x1006}, [@IFLA_LINKINFO={0x24, 0x12, 0x0, 0x1, @xfrm={{0x9}, {0x14, 0x2, 0x0, 0x1, [@IFLA_XFRM_IF_ID={0x8, 0x2, 0x2}, @IFLA_XFRM_LINK={0x8, 0x1, 0x2}]}}}, @IFLA_MASTER={0x8, 0xa, r5}]}, 0x4c}, 0x1, 0x0, 0x0, 0x800}, 0x440b0) r7 = socket$nl_route(0x10, 0x3, 0x0) r8 = socket$tipc(0x1e, 0x5, 0x0) getsockopt$TIPC_NODE_RECVQ_DEPTH(r8, 0x10f, 0x83, &(0x7f0000000e80), &(0x7f0000000ec0)=0x4) r9 = openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0x2, 0x0) ioctl$TUNSETIFF(r9, 0x400454ca, &(0x7f0000000040)={'syzkaller1\x00', 0x1}) r10 = socket$unix(0x1, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r10, 0x8933, &(0x7f0000000100)={'syzkaller1\x00', 0x0}) ioctl$sock_inet_SIOCSIFFLAGS(r10, 0x8914, &(0x7f0000000200)={'syzkaller1\x00', 0x1}) sendmsg$nl_route_sched(r7, &(0x7f00000012c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000000c0)=@newqdisc={0x30, 0x24, 0x601, 0x0, 0x0, {0x0, 0x0, 0x0, r11, {}, {0xfff1, 0xffff}}, [@qdisc_kind_options=@q_ingress={0xc}]}, 0x30}}, 0x0) sendmsg$nl_route_sched(r7, &(0x7f0000000580)={0x0, 0x0, &(0x7f0000000300)={&(0x7f00000005c0)=@newtfilter={0x30, 0x2c, 0x601, 0x0, 0x0, {0x0, 0x0, 0x0, r11, {0xffff}, {0xfff1, 0xffff}, {0x300}}, [@filter_kind_options=@f_fw={{0x7}, {0x4}}]}, 0x30}}, 0x0) write(r9, &(0x7f0000000400)="00008847", 0x4) sendto(r1, &(0x7f0000000200)="340000003f000500010000000000000001020000000000000c0001006f76732d6470300008000200000000000800090010270000", 0x34, 0x0, 0x0, 0x0) 2m28.021399139s ago: executing program 0 (id=6062): r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000680)={0x3, 0xc, &(0x7f00000003c0)=ANY=[@ANYBLOB="1802000009000000000000000400000085000000500000001801000020786c2500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000003000000850000009b00000095"], &(0x7f0000000040)='GPL\x00'}, 0x94) (async) r1 = bpf$MAP_CREATE(0x0, &(0x7f0000000080)=@base={0x1b, 0x1, 0x10, 0x223, 0x8408, 0xffffffffffffffff, 0x7fffffff, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x5, 0x1}, 0x50) ioctl$sock_ipv4_tunnel_SIOCDELTUNNEL(0xffffffffffffffff, 0x89f2, &(0x7f0000000200)={'sit0\x00', &(0x7f0000000140)={'gre0\x00', 0x0, 0x1, 0x700, 0x3a9, 0x4, {{0x1a, 0x4, 0x0, 0x1, 0x68, 0x64, 0x0, 0x8, 0x4, 0x0, @empty, @initdev={0xac, 0x1e, 0x0, 0x0}, {[@generic={0x0, 0xc, "d341839cc18a2c3fd60a"}, @timestamp_addr={0x44, 0x2c, 0xa5, 0x1, 0x8, [{@empty, 0x6}, {@initdev={0xac, 0x1e, 0x0, 0x0}, 0x3ff}, {@private=0xa010101, 0x7}, {@local, 0x8}, {@remote, 0xa683}]}, @timestamp_prespec={0x44, 0x1c, 0xc1, 0x3, 0xa, [{@remote, 0x40}, {@loopback}, {@multicast1, 0x602b}]}]}}}}}) (async) r3 = bpf$BPF_BTF_LOAD(0x12, &(0x7f00000001c0)={&(0x7f0000000100)=ANY=[@ANYBLOB="9feb010018000000000000004c0000004c0000002a0000000100000000000001040000002000000105000000010000040400000013000000010000000000000017000000020000040800000021000000010000000000000025000000020000002000000000696e74006270665f7370696e5f6c6f636b0076616c006d61705f76616c756500636e74006c"], 0x0, 0x8e, 0x0, 0x2}, 0x28) bpf$MAP_CREATE(0x0, &(0x7f0000000200)=@base={0x2, 0x4, 0x8, 0x1, 0x0, 0x0, 0x0, '\x00', 0x0, r3, 0x1, 0x3}, 0x48) (async) bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000240)={0x2, 0x4, 0x8, 0x1, 0x80, r1, 0x6, '\x00', r2, r3, 0x4, 0x5, 0x5}, 0x50) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f00000002c0)={r0, 0x0, 0xe, 0x0, &(0x7f0000000100)="e0b9547ed387dbe9abc89b6f5bec", 0x0, 0x2000, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x50) (async, rerun: 32) r4 = socket$nl_generic(0x10, 0x3, 0x10) (async, rerun: 32) r5 = openat$nci(0xffffffffffffff9c, &(0x7f0000000080), 0x2, 0x0) ioctl$IOCTL_GET_NCIDEV_IDX(r5, 0x0, &(0x7f00000000c0)) (async) writev(r5, 0x0, 0x0) (async) r6 = socket$nl_generic(0x10, 0x3, 0x10) (async) r7 = syz_genetlink_get_family_id$ethtool(&(0x7f0000000040), 0xffffffffffffffff) sendmsg$ETHTOOL_MSG_CHANNELS_SET(r6, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000540)=ANY=[@ANYBLOB='<\x00\x00\x00', @ANYRES16=r7, @ANYBLOB="010000000000ffdbdf25120000001800018014000200626f6e645f736c6176655f310000000008000900ff030000080007000b000000857ee76e41bde95a41d25c6f66db8f67ad45f929fbe4ca91cfe3075a9c6d7d3bcbd460fc4c852db63acfb4f6c846ccf24744b00765e2399823f16a4a59cd7e91e172f61530727de5c7b0513498228cd7449ba226ebf26f8a94b01a1290b4a8", @ANYRES16=r5], 0x3c}, 0x1, 0x0, 0x0, 0x800}, 0x4) (async) sendmsg$ETHTOOL_MSG_STATS_GET(r4, &(0x7f0000000c00)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x40}, 0xc, &(0x7f0000000bc0)={&(0x7f0000000740)={0x44c, r7, 0x300, 0x70bd2a, 0x25dfdbfd, {}, [@ETHTOOL_A_STATS_HEADER={0x3c, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x2}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'veth1_to_bridge\x00'}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'ipvlan0\x00'}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r2}]}, @ETHTOOL_A_STATS_GROUPS={0xe0, 0x2, 0x0, 0x1, [@ETHTOOL_A_BITSET_MASK={0xc1, 0x5, "ee73036e17c2aa6941942cc296ccf2df31d037e1672a46d5fc41d9ce0a9f05d75c49395b37f1735116b67916e6ae720ee9fa7e7ff8c4c1b902e5996a7e64fadbb34eba6c68432f7f74c7202f46d2947ff45eeb845af6a766c2bc9bcc7788afd52e97e6b6d9530d5bc445197ae2da54e4b6a3afcac25f9402c691085d30fcf5a0cd1060ad25581feccdef834638570f8c4fd64a4d798a97d48d807bfdae350b43b6d69f871a3ed97973570d68513767be9d3fd1d5f5c4fb3a672e3ef9a2"}, @ETHTOOL_A_BITSET_NOMASK={0x4}, @ETHTOOL_A_BITSET_MASK={0x11, 0x5, "8ce26012610879ccf6809d53c0"}]}, @ETHTOOL_A_STATS_HEADER={0x1c, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r2}, @ETHTOOL_A_HEADER_FLAGS={0x8}, @ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x2}]}, @ETHTOOL_A_STATS_SRC={0x8, 0x3, 0x1}, @ETHTOOL_A_STATS_SRC={0x8, 0x3, 0x1}, @ETHTOOL_A_STATS_HEADER={0x3c, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x2}, @ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x1}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'vlan0\x00'}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'vlan1\x00'}]}, @ETHTOOL_A_STATS_GROUPS={0x2b4, 0x2, 0x0, 0x1, [@ETHTOOL_A_BITSET_BITS={0x98, 0x3, 0x0, 0x1, [{0x28, 0x1, 0x0, 0x1, [@ETHTOOL_A_BITSET_BIT_INDEX={0x8, 0x1, 0x147}, @ETHTOOL_A_BITSET_BIT_NAME={0x14, 0x2, '-\\!%*@^$#@\\^Q@]\x00'}, @ETHTOOL_A_BITSET_BIT_VALUE={0x4}, @ETHTOOL_A_BITSET_BIT_VALUE={0x4}]}, {0x2c, 0x1, 0x0, 0x1, [@ETHTOOL_A_BITSET_BIT_VALUE={0x4}, @ETHTOOL_A_BITSET_BIT_NAME={0x11, 0x2, '-)_@(#*\x8b{[q%\x00'}, @ETHTOOL_A_BITSET_BIT_NAME={0x8, 0x2, 'GPL\x00'}, @ETHTOOL_A_BITSET_BIT_INDEX={0x8, 0x1, 0x7}]}, {0x2c, 0x1, 0x0, 0x1, [@ETHTOOL_A_BITSET_BIT_INDEX={0x8, 0x1, 0xc0}, @ETHTOOL_A_BITSET_BIT_VALUE={0x4}, @ETHTOOL_A_BITSET_BIT_NAME={0x9, 0x2, 'gre0\x00'}, @ETHTOOL_A_BITSET_BIT_VALUE={0x4}, @ETHTOOL_A_BITSET_BIT_NAME={0x9, 0x2, 'gre0\x00'}]}, {0x14, 0x1, 0x0, 0x1, [@ETHTOOL_A_BITSET_BIT_NAME={0x5, 0x2, '\x00'}, @ETHTOOL_A_BITSET_BIT_VALUE={0x4}, @ETHTOOL_A_BITSET_BIT_VALUE={0x4}]}]}, @ETHTOOL_A_BITSET_BITS={0xb8, 0x3, 0x0, 0x1, [{0x14, 0x1, 0x0, 0x1, [@ETHTOOL_A_BITSET_BIT_INDEX={0x8, 0x1, 0x3}, @ETHTOOL_A_BITSET_BIT_INDEX={0x8, 0x1, 0x9}]}, {0x3c, 0x1, 0x0, 0x1, [@ETHTOOL_A_BITSET_BIT_NAME={0x9, 0x2, 'sit0\x00'}, @ETHTOOL_A_BITSET_BIT_NAME={0x9, 0x2, 'gre0\x00'}, @ETHTOOL_A_BITSET_BIT_INDEX={0x8}, @ETHTOOL_A_BITSET_BIT_NAME={0x9, 0x2, 'gre0\x00'}, @ETHTOOL_A_BITSET_BIT_VALUE={0x4}, @ETHTOOL_A_BITSET_BIT_INDEX={0x8, 0x1, 0x615}]}, {0x28, 0x1, 0x0, 0x1, [@ETHTOOL_A_BITSET_BIT_INDEX={0x8}, @ETHTOOL_A_BITSET_BIT_INDEX={0x8}, @ETHTOOL_A_BITSET_BIT_VALUE={0x4}, @ETHTOOL_A_BITSET_BIT_INDEX={0x8, 0x1, 0x5}, @ETHTOOL_A_BITSET_BIT_NAME={0x5, 0x2, '\x00'}]}, {0x4}, {0x38, 0x1, 0x0, 0x1, [@ETHTOOL_A_BITSET_BIT_NAME={0x6, 0x2, '@\x00'}, @ETHTOOL_A_BITSET_BIT_VALUE={0x4}, @ETHTOOL_A_BITSET_BIT_NAME={0x8, 0x2, 'GPL\x00'}, @ETHTOOL_A_BITSET_BIT_NAME={0x9, 0x2, 'gre0\x00'}, @ETHTOOL_A_BITSET_BIT_INDEX={0x8, 0x1, 0x3}, @ETHTOOL_A_BITSET_BIT_INDEX={0x8, 0x1, 0x2e}, @ETHTOOL_A_BITSET_BIT_VALUE={0x4}]}]}, @ETHTOOL_A_BITSET_MASK={0xca, 0x5, "713359c76b1fdac7862ea6328ba06121ca074d0863ac4f388d2683309305be358c985173d0af75ab0c404f35abeede791af6dcb61f52314695e568787a9260b765e83e990aa3604d0535b65a62d8fb43664e7c294e36f7ce7349ee65040dc99c109748778a2caeaebc98d91cc98ea19dd5a8e3730b2eda163c691750b7f4e7e4c3f9c334239e4d12bb0548cddb756ae7db2958c0e4a71d07c068f000e85fc7256aaf48e81a6738dc42fce6bc8fd6ddc9497937d9637bcaf97fce5716bdf05b9be73a1d255cbd"}, @ETHTOOL_A_BITSET_MASK={0x89, 0x5, "7a7dff485d19eda13e57d6ef06373dc567df4cd8e4804a61302c0c03b1dd70c94d56c9883380718e1828e9c5a1bcf0b930b762213b8eb9e8f9120cb56a02ae9bf34cd509594ba1d03a05680f3901f3326a7f768ad0ff13a32110f4f36b1f94e2603ae4bdafb433176930d60e8d78363c3ebdcf1f3e89f7bf42e01e44031357a97fec1edd6d"}, @ETHTOOL_A_BITSET_NOMASK={0x4}, @ETHTOOL_A_BITSET_NOMASK={0x4}]}]}, 0x44c}, 0x1, 0x0, 0x0, 0x4000840}, 0x20004851) 2m27.585841651s ago: executing program 0 (id=6064): r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = socket$nl_generic(0x10, 0x3, 0x10) socket$nl_generic(0x10, 0x3, 0x10) (async) r2 = socket$nl_generic(0x10, 0x3, 0x10) r3 = syz_genetlink_get_family_id$tipc(&(0x7f0000000080), r1) sendmsg$TIPC_CMD_SET_NETID(r2, &(0x7f00000003c0)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x1000000}, 0xc, &(0x7f00000001c0)={&(0x7f0000000400)={0x24, r3, 0x800, 0x70bd30, 0x25dfdbff, {{}, {}, {0x8, 0x2, 0x4}}, ["", "", "", "", "", "", "", ""]}, 0x24}, 0x1, 0x0, 0x0, 0x20000000}, 0x48884) r4 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000240), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r1, 0x8933, &(0x7f0000000100)={'wlan1\x00'}) (async) ioctl$sock_SIOCGIFINDEX_80211(r1, 0x8933, &(0x7f0000000100)={'wlan1\x00', 0x0}) ioctl$sock_inet6_SIOCSIFADDR(0xffffffffffffffff, 0x8916, &(0x7f0000000100)={@initdev={0xfe, 0x88, '\x00', 0x0, 0x0}, 0xfffffffe}) socket$inet6_mptcp(0xa, 0x1, 0x106) (async) r6 = socket$inet6_mptcp(0xa, 0x1, 0x106) getsockopt$inet6_mptcp_buf(r6, 0x11c, 0x3, &(0x7f0000000100)=""/222, &(0x7f0000000000)=0x61637876) (async) getsockopt$inet6_mptcp_buf(r6, 0x11c, 0x3, &(0x7f0000000100)=""/222, &(0x7f0000000000)=0x61637876) r7 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$NL80211_CMD_REGISTER_FRAME(r7, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000580)={&(0x7f0000000440)={0xac, r4, 0x1, 0x70bd2b, 0x0, {{}, {@val={0x8, 0x3, r5}, @void}}, [@NL80211_ATTR_FRAME_MATCH={0x85, 0x5b, "00dbaab63c1d728d6a8e15672506000000000000008f4a9f498ca8573c3e9716a176b548949838d8277bcd8e5dc69ef82a2c5242fa39590861c4684ab3b25ab6363762033bb43bc9d41522bf313450011c5d16bd96cc790662756b7c214c270d943ba93c44000b34210dbdf1474bc3159dc6bb75e719797b0840bc55faba394b9c"}, @NL80211_ATTR_FRAME_TYPE={0x6, 0x65, 0x40}]}, 0xac}}, 0x0) getpeername$packet(0xffffffffffffffff, &(0x7f00000008c0)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @random}, &(0x7f0000000900)=0x14) (async) getpeername$packet(0xffffffffffffffff, &(0x7f00000008c0)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @random}, &(0x7f0000000900)=0x14) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000940)={'sit0\x00', 0x0}) r10 = socket(0x10, 0x803, 0x0) socket(0xa, 0x3, 0x87) socket(0xa, 0x3, 0x87) ioctl$sock_inet6_SIOCSIFADDR(r6, 0x8916, &(0x7f0000001a00)={@local, 0x20}) (async) ioctl$sock_inet6_SIOCSIFADDR(r6, 0x8916, &(0x7f0000001a00)={@local, 0x20}) sendmsg$nl_route(r10, &(0x7f0000000140)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000001800)=ANY=[@ANYBLOB="340000001400b59527bd7000fddbdf250a3f00fe", @ANYBLOB="080008000806000014000200fe8000000000000000000000000000aafb"], 0x34}, 0x1, 0x0, 0x0, 0x2004c040}, 0x8000) (async) sendmsg$nl_route(r10, &(0x7f0000000140)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000001800)=ANY=[@ANYBLOB="340000001400b59527bd7000fddbdf250a3f00fe", @ANYBLOB="080008000806000014000200fe8000000000000000000000000000aafb"], 0x34}, 0x1, 0x0, 0x0, 0x2004c040}, 0x8000) sendmsg$ETHTOOL_MSG_WOL_GET(0xffffffffffffffff, &(0x7f0000000b80)={&(0x7f0000000380)={0x10, 0x0, 0x0, 0x800000}, 0xc, &(0x7f0000000b40)={&(0x7f0000000980)={0x1a0, 0x0, 0x10, 0x70bd2b, 0x25dfdbfc, {}, [@HEADER={0xc, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x3}]}, @HEADER={0xc, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_INDEX={0x8}]}, @HEADER={0x28, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x3}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'dummy0\x00'}]}, @HEADER={0x50, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'veth0_to_batadv\x00'}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8}, @ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x1}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'netpci0\x00'}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'sit0\x00'}]}, @HEADER={0x78, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_FLAGS={0x8}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'wg0\x00'}, @ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x2}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'veth0_to_hsr\x00'}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r8}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'veth0_vlan\x00'}, @ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x2}, @ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x1}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r9}]}, @HEADER={0xc, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x2}]}, @HEADER={0x78, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x1}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'wlan1\x00'}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'gre0\x00'}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'veth0_to_batadv\x00'}, @ETHTOOL_A_HEADER_DEV_NAME={0x14}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'team0\x00'}]}]}, 0x1a0}, 0x1, 0x0, 0x0, 0x810}, 0xd407acd77e336d7c) socket$nl_generic(0x10, 0x3, 0x10) (async) r11 = socket$nl_generic(0x10, 0x3, 0x10) r12 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000280), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r11, 0x8933, &(0x7f00000002c0)={'wlan0\x00', 0x0}) sendmsg$NL80211_CMD_FRAME(r11, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000640)={&(0x7f0000000300)=ANY=[@ANYBLOB='D\x00\x00\x00', @ANYRES16=r12, @ANYBLOB="010000000000000000003b00000008000300", @ANYRES32=r13, @ANYBLOB="1d003300d0000900080211000001080211000000505050505050"], 0x44}}, 0x0) socket$nl_generic(0x10, 0x3, 0x10) (async) r14 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r14, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000ec0)=ANY=[@ANYBLOB="8801000041000701feffffff00000000017c0000040042806c01018010000400cab1893a20b8d2a93521800a58011c80530101006ac2da53a678c41355f8188e0813b0eb27a6c1a87d1c3dfc5d8438201f6377875dce685fcc7ed7ccd74a03d64a776d4cfe25324c31c8d4b6fff0f5915ed9cef37cfe63240a01c260dcef0d710621b0507500f7ca4fb8ec7393a5e665401529a30bdc6cd989c62840f8968874bad3867cead8d32063f98459fd95688665c893b8b25b58f8d7d3c9ee01a787c3838ca31b63328d7d0941b38175636e85e589896aadea306c85bafbffd02a2ef8984e8c69cab545c38477eb0fc850d43bd512deccd888e1f53889f9f382f87160ea2653086b5067a18057d3da533302d383735dc7573d12a1de647805ed76f1bd8725f749c6f11de6c446f8e6ff6a20b1b3210a6f2e8dcb48e8290b08feef9b7c003110082f0ac6a74ca6951e810a7fc67349b70463f8272dc7d43ccc535569c53c1b9759a54a72773b685ce1710a7db96e1ef7819c4495275c02395306614c5971c1aa0004000280"], 0x188}, 0x1, 0x0, 0x0, 0x40815}, 0xc000) (async) sendmsg$nl_generic(r14, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000ec0)=ANY=[@ANYBLOB="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"], 0x188}, 0x1, 0x0, 0x0, 0x40815}, 0xc000) r15 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r15, &(0x7f0000000340)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000140)=@newlink={0x4c, 0x10, 0x1, 0x70bd2b, 0x25dfdbfb, {0x0, 0x0, 0x0, 0x0, 0x1438a}, [@IFLA_VFINFO_LIST={0x18, 0x16, 0x0, 0x1, [{0x14, 0x1, 0x0, 0x1, [@IFLA_VF_VLAN={0x10, 0x2, {0x4, 0xf44}}]}]}, @IFLA_IFNAME={0x14, 0x3, 'bond_slave_0\x00'}]}, 0x4c}, 0x1, 0x0, 0x0, 0x4000880}, 0x4) sendmsg$nl_generic(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000100)={0x1c, 0x27, 0x9, 0x70bd25, 0x25dfdbfd, {0x12}, [@typed={0x5, 0x1, 0x0, 0x0, @str='\x00'}]}, 0x1c}, 0x1, 0x0, 0x0, 0x1}, 0x4000880) socket$inet6_udp(0xa, 0x2, 0x0) 2m17.665591422s ago: executing program 3 (id=6102): r0 = syz_genetlink_get_family_id$ethtool(&(0x7f0000000380), 0xffffffffffffffff) r1 = socket$nl_generic(0x10, 0x3, 0x10) r2 = socket$packet(0x11, 0x2, 0x300) ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f0000000040)={'netdevsim0\x00', 0x0}) r4 = syz_init_net_socket$nfc_llcp(0x27, 0x1, 0x1) unshare(0x6a040000) r5 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r6 = syz_genetlink_get_family_id$ieee802154(&(0x7f0000000080), r5) sendmsg$IEEE802154_LIST_PHY(r5, &(0x7f0000000640)={0x0, 0x0, &(0x7f0000000600)={&(0x7f0000000300)={0x14, r6, 0x30b, 0x0, 0x25dfdbfc}, 0x14}, 0x1, 0x0, 0x0, 0x404c857}, 0x20060000) r7 = socket$inet6_sctp(0xa, 0x1, 0x84) bpf$MAP_CREATE_TAIL_CALL(0x0, &(0x7f00000001c0)=ANY=[@ANYBLOB="0300000004000000040000000a00000000000000", @ANYRES32=0x0, @ANYBLOB="00000000800000000008a116edfe", @ANYRES32=0x0, @ANYBLOB="eb4d9d5ff594e2687f4c1ca901eb72e286916bb898fe86217b528e51dca2aa6c4947e5beeff7b31fb7a767366cf68c73cbbf25e4195743d6f41bdca840d835599a1fd8031076d97fbbf3675cf385ba886bce"], 0x50) bpf$PROG_LOAD(0x5, &(0x7f0000000500)={0x9, 0x4, &(0x7f0000000140)=ANY=[@ANYBLOB="1806000001000000000000000000000085100000f8ffffff9535ead33b90cb11ec4477b1a2b2d2000000ff0f0000"], &(0x7f00000002c0)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x62, '\x00', 0x0, @fallback=0x1c, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bind$inet6(r7, &(0x7f0000000240)={0xa, 0x4e23, 0x6, @rand_addr=' \x01\x00', 0x3}, 0x1c) r8 = socket$inet6(0xa, 0x80001, 0x0) setsockopt$inet6_MCAST_JOIN_GROUP(r8, 0x29, 0x2a, &(0x7f0000fca000)={0x100000001, {{0xa, 0xffff, 0x0, @mcast1}}}, 0x88) setsockopt$inet6_group_source_req(r8, 0x29, 0x2c, &(0x7f00000005c0)={0x1, {{0xa, 0x0, 0xfffffffc, @mcast2, 0x3}}, {{0xa, 0x0, 0x0, @empty, 0x8000}}}, 0x108) setsockopt$inet_sctp6_SCTP_RTOINFO(r7, 0x84, 0x0, &(0x7f0000000000)={0x0, 0xfffffffe, 0x8001, 0x6}, 0x10) sendto$inet6(r7, &(0x7f0000847fff)='X', 0x34000, 0xe0, &(0x7f000005ffe4)={0xa, 0x4e23, 0x0, @loopback}, 0x1c) syz_genetlink_get_family_id$nbd(&(0x7f0000000600), r5) socket$nl_generic(0x10, 0x3, 0x10) r9 = socket$inet_tcp(0x2, 0x1, 0x0) recvfrom$llc(0xffffffffffffffff, 0x0, 0x0, 0xa7a028f7425b35c2, 0x0, 0x0) connect$inet(r9, &(0x7f0000000180)={0x2, 0x4e21, @multicast1}, 0x10) sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={0x0}, 0x1, 0x0, 0x0, 0x4001}, 0x7f8fd8ce9467eae8) sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f0000009b40)={0x0, 0x0, &(0x7f0000009b00)={&(0x7f0000002100)=ANY=[], 0x84}, 0x1, 0x0, 0x0, 0x4000850}, 0x40) recvfrom$inet(r9, &(0x7f0000000080)=""/8, 0xfffffffffffffd0b, 0xc9100120, 0x0, 0xfffffffffffffd25) accept4(r4, 0x0, 0x0, 0x80000) sendmsg$ETHTOOL_MSG_PAUSE_SET(r1, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000cc0)={&(0x7f0000000280)=ANY=[@ANYBLOB='(\x00\x00\x00', @ANYRES16=r0, @ANYBLOB="010000000000000000001e0000000c00018008000100", @ANYRES32=r3, @ANYBLOB="050003"], 0x28}, 0x1, 0x0, 0x0, 0x841}, 0x0) r10 = socket(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r10, 0x8933, &(0x7f0000000100)={'lo\x00'}) 2m16.739876237s ago: executing program 3 (id=6112): r0 = socket$netlink(0x10, 0x3, 0x6) setsockopt$netlink_NETLINK_ADD_MEMBERSHIP(r0, 0x10e, 0x1, 0x0, 0x0) mmap(&(0x7f0000000000/0x200000)=nil, 0x200000, 0x300000b, 0x204031, 0xffffffffffffffff, 0xec776000) getsockopt$netlink(r0, 0x10e, 0x9, &(0x7f0000002500)=""/4096, &(0x7f0000000080)=0x1000) r1 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000140)={'lo\x00'}) sendmsg$nl_route(r1, &(0x7f00000015c0)={0x0, 0x0, &(0x7f0000001580)={&(0x7f0000001540)=ANY=[@ANYBLOB="140000006a0019052abd7000fddbdf25000000000000000008000a0001000000"], 0x20}, 0x1, 0x0, 0x0, 0x40000}, 0x0) r2 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000280)='devices.list\x00', 0x26e1, 0x0) ioctl$EXT4_IOC_GET_ES_CACHE(r2, 0xc020662a, &(0x7f0000000c40)={0x9, 0x401, 0x4, 0x8, 0xa, 0x0, [{0xe5d, 0x2, 0x4, '\x00', 0x4}, {0x2, 0x6, 0x2, '\x00', 0x188}, {0xfffffffffffffffc, 0xe63e, 0xb, '\x00', 0x1086}, {0x55, 0x7f, 0x8, '\x00', 0x400}, {0x7, 0x3, 0x4, '\x00', 0x1}, {0x7, 0x58d1, 0x39d, '\x00', 0x30a}, {0x3, 0x1, 0x9, '\x00', 0x900}, {0x2, 0x40, 0x9, '\x00', 0x3009}, {0x7, 0x40, 0xfffffffffffffffc, '\x00', 0x200}, {0x4, 0xff, 0x0, '\x00', 0x2300}]}) mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000)='./cgroup.cpu/syz1\x00', 0x1ff) r3 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000), 0x200002, 0x0) r4 = openat$cgroup_procs(r3, &(0x7f0000000080)='cgroup.procs\x00', 0x2, 0x0) write$cgroup_subtree(r4, &(0x7f00000002c0)=ANY=[@ANYBLOB='-4'], 0xc) openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000400)='blkio.bfq.sectors_recursive\x00', 0x275a, 0x0) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000f40)) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000000)) socketpair$nbd(0x1, 0x1, 0x0, &(0x7f00000002c0)) socketpair$unix(0x1, 0x1, 0x0, &(0x7f00000029c0)) socketpair(0x1, 0x2, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) socketpair$nbd(0x1, 0x1, 0x0, &(0x7f0000000080)) r6 = bpf$MAP_CREATE(0x0, &(0x7f00000002c0)=@base={0x1b, 0x0, 0x0, 0x8000}, 0x48) r7 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000340)={0x1f, 0x10, &(0x7f0000000040)=ANY=[@ANYBLOB="1800000005000000000000008000000018110000", @ANYRES32=r6, @ANYBLOB="0000000000000000b702000003f80000850000008600000018010000", @ANYRES32=r6, @ANYBLOB="0000000000000000b7080000050000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b70400000200000085000000a600000095"], &(0x7f0000000000)='GPL\x00', 0x0, 0x0, 0x0, 0x41100, 0x11}, 0x94) setsockopt$IP6T_SO_SET_REPLACE(r5, 0x29, 0x40, &(0x7f0000000580)=@mangle={'mangle\x00', 0x1f, 0x6, 0x648, 0x348, 0x230, 0xd0, 0x230, 0x348, 0x578, 0x578, 0x578, 0x578, 0x578, 0x6, &(0x7f00000000c0), {[{{@ipv6={@private0={0xfc, 0x0, '\x00', 0x1}, @dev={0xfe, 0x80, '\x00', 0x2c}, [0xff000000, 0x0, 0x0, 0xffffffff], [0xff000000, 0xff, 0x0, 0xffffff00], 'hsr0\x00', 'veth0_vlan\x00', {}, {0xff}, 0x88, 0xff, 0x0, 0x20}, 0x0, 0xa8, 0xd0}, @HL={0x28, 'HL\x00', 0x0, {0x1, 0xf3}}}, {{@ipv6={@private2, @ipv4={'\x00', '\xff\xff', @loopback}, [0x0, 0xffffffff, 0xff, 0xff000000], [0xffffff00, 0xffffff00, 0xff000000, 0xff000000], 'lo\x00', 'macvlan0\x00', {}, {0xff}, 0x2c, 0x40, 0x2, 0x1}, 0x0, 0x118, 0x160, 0x0, {}, [@common=@hbh={{0x48}, {0x0, 0x6, 0x1, [0x0, 0x3ff, 0x8000, 0x0, 0x7, 0x7f, 0x1000, 0x3e9c, 0x0, 0xab9, 0x9, 0x6, 0x400, 0x9, 0xf7, 0x8], 0xf}}, @inet=@rpfilter={{0x28}, {0x2}}]}, @SNPT={0x48, 'SNPT\x00', 0x0, {@ipv4=@multicast2, @ipv6=@ipv4={'\x00', '\xff\xff', @dev={0xac, 0x14, 0x14, 0x20}}, 0x1c, 0x13, 0x6}}}, {{@ipv6={@remote, @local, [0xffffff00, 0xff, 0xff], [0x0, 0xff000000, 0xffffff00, 0xffffff00], 'bond0\x00', 'team_slave_1\x00', {0xff}, {0xff}, 0x2e, 0x2, 0x3, 0x30}, 0x0, 0xd0, 0x118, 0x0, {}, [@inet=@rpfilter={{0x28}, {0xa}}]}, @SNPT={0x48, 'SNPT\x00', 0x0, {@ipv4=@initdev={0xac, 0x1e, 0x0, 0x0}, @ipv6=@private0, 0x27, 0x6, 0x9}}}, {{@uncond, 0x0, 0xf8, 0x138, 0x0, {}, [@common=@eui64={{0x28}}, @inet=@rpfilter={{0x28}, {0xa}}]}, @inet=@TPROXY1={0x40, 'TPROXY\x00', 0x1, {0x5, 0x9, @ipv6=@dev={0xfe, 0x80, '\x00', 0x44}, 0x4e21}}}, {{@ipv6={@local, @rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x02', [0xffffffff, 0x0, 0xff000000, 0xffffff00], [0xffffff00, 0xffffffff, 0xff000000, 0xff000000], 'macvlan0\x00', 'netpci0\x00', {0xff}, {}, 0x87, 0x8, 0x3, 0x13}, 0x0, 0xd0, 0xf8, 0x0, {}, [@inet=@rpfilter={{0x28}, {0x2}}]}, @common=@inet=@SYNPROXY={0x28, 'SYNPROXY\x00', 0x0, {0x10, 0x5}}}], {{'\x00', 0x0, 0xa8, 0xd0}, {0x28}}}}, 0x6a8) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000500)={r7, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x48) r8 = socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$batadv(&(0x7f0000000080), r8) r9 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_route(r9, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000001600)=ANY=[@ANYBLOB="38000000120005ff00000000000000000000004a", @ANYBLOB="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", @ANYRES64=r1, @ANYRESDEC=r9], 0x38}}, 0x0) 2m16.36977578s ago: executing program 3 (id=6116): bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000340)={0x18, 0x2, &(0x7f0000000000)=ANY=[@ANYBLOB="d38193bcf100000095"], &(0x7f0000000040)='syzkaller\x00', 0xa, 0x0, 0x0, 0x40f00, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x829}, 0x94) r0 = socket(0x400000000010, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000100)={'wg2\x00', 0x0}) sendmsg$nl_route_sched(r0, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000180)=@getchain={0x54, 0x66, 0x4, 0x70bd2d, 0x25dfdbff, {0x0, 0x0, 0x0, r1, {0x2, 0xfbae5090a86a7f44}, {0xd, 0xa}, {0x10, 0x5}}, [{0x8, 0xb, 0x6}, {0x8, 0xb, 0x1}, {0xfc9d}, {0x8, 0xb, 0x4}, {0x8, 0xb, 0x5f7a}, {0x8, 0xb, 0x40}]}, 0x54}, 0x1, 0x0, 0x0, 0x44000}, 0x4c840) sendmsg$nl_route_sched(r0, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000004c0)=@newtfilter={0x44, 0x2c, 0xf3f, 0x30bd29, 0x25dfdbfd, {0x0, 0x0, 0x0, r1, {0x5, 0xfff1}, {0x0, 0xfff3}, {0x9, 0xb}}, [@filter_kind_options=@f_flower={{0xb}, {0x14, 0x2, [@TCA_FLOWER_KEY_ETH_TYPE={0x6, 0x8, 0x86dd}, @TCA_FLOWER_KEY_IP_PROTO={0x5, 0x9, 0x73}]}}]}, 0x44}, 0x1, 0x0, 0x0, 0x20041891}, 0x24000010) sendto$packet(r0, &(0x7f0000000080)="edc3f5e0b653c1028883a916e946bd6de675c0439443d103f27ad63cbe3cb361ab8c7982cae15e1229420df0a26e5447b990c59f56aa08c18d5b054295dda02bafa7ee992e4a8c52f275bffd64ecee2fd57e89566193de7eea141081f62d", 0x5e, 0x40040c1, 0x0, 0x0) socket$inet(0x2, 0x2, 0x81) 2m15.905455685s ago: executing program 3 (id=6119): r0 = socket$netlink(0x10, 0x3, 0x0) r1 = socket$inet6(0xa, 0x2, 0x0) setsockopt$inet6_IPV6_FLOWLABEL_MGR(r1, 0x29, 0x20, &(0x7f0000000280)={@private2={0xfc, 0x2, '\x00', 0xfe}, 0x800, 0x0, 0x103, 0xd}, 0x20) (async) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000100)=@newtclass={0x24, 0x28, 0x400, 0x70bd26, 0x25dfdbfd, {0x0, 0x0, 0x0, 0x0, {0x9, 0x2}, {0x7, 0xb}, {0xb, 0xf}}}, 0x24}}, 0x80000) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000300)={0x0, 0x0, &(0x7f00000003c0)={&(0x7f0000000440)=ANY=[], 0x38}}, 0x10) (async) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000040)={0x0, 0x4c}, 0x1, 0x0, 0x0, 0x400c880}, 0x4008002) (async) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000180)=ANY=[@ANYBLOB="4c00000010001fff00"/20, @ANYRES32=0x0, @ANYBLOB="00000000000000002c00128009000100626f6e64000000001c00028005000100040000000600180000100000060019"], 0x4c}}, 0x0) (async) r2 = socket$netlink(0x10, 0x3, 0x0) sendmmsg(r2, &(0x7f00000002c0), 0x40000000000009f, 0x0) (async, rerun: 32) sendmsg$nl_route(r0, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000040)=@newlink={0x3c, 0x10, 0x503, 0x0, 0x0, {}, [@IFLA_LINKINFO={0x1c, 0x12, 0x0, 0x1, @macsec={{0xb}, {0xc, 0x2, 0x0, 0x1, [@IFLA_MACSEC_REPLAY_PROTECT={0x5, 0xc, 0x1}]}}}]}, 0x3c}, 0x1, 0x0, 0x0, 0x4000801}, 0x0) (rerun: 32) 2m15.813356939s ago: executing program 3 (id=6122): socket(0x10, 0x3, 0x0) mmap(&(0x7f0000000000/0xfff000)=nil, 0xfff002, 0x0, 0x2000000000032, 0xffffffffffffffff, 0x0) sendmsg$NFT_BATCH(0xffffffffffffffff, 0x0, 0x0) r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$tipc2(&(0x7f0000000400), 0xffffffffffffffff) sendmsg$TIPC_NL_KEY_SET(r0, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000001c0)=ANY=[@ANYBLOB='T\x00\x00\x00', @ANYRES16=r1], 0x54}}, 0x0) sendmsg$TIPC_NL_BEARER_SET(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000140)=ANY=[@ANYBLOB, @ANYRES16=r1, @ANYBLOB="0100280000000000000004000000200001800d00010075"], 0x34}}, 0x4040) r2 = socket$netlink(0x10, 0x3, 0x0) r3 = socket(0x10, 0x803, 0x0) sendmsg$NL80211_CMD_CRIT_PROTOCOL_START(r3, &(0x7f0000000580)={0x0, 0x0, &(0x7f0000000540)={0x0, 0x1c}}, 0x0) getsockname$packet(r3, &(0x7f0000000600)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000080)=0x14) sendmsg$nl_route(r2, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000640)=ANY=[@ANYBLOB="3c0000001000850600000000ff6122314a000800", @ANYRES32=r4, @ANYBLOB="f5ff0f00252155b21c0012000c000100626f6e64000000000c0002000800010001"], 0x3c}}, 0x40000) bpf$PROG_LOAD(0x5, &(0x7f0000000080)={0x13, 0xe, &(0x7f0000000c00)=ANY=[@ANYBLOB="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"/1423], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0x0, 0x10, &(0x7f0000000340)}, 0x42) r5 = socket(0x10, 0x803, 0x0) r6 = socket(0x10, 0x803, 0x2) r7 = syz_genetlink_get_family_id$mptcp(&(0x7f00000000c0), r6) getsockname$packet(r6, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) r9 = bpf$MAP_CREATE(0x0, &(0x7f00000004c0)=ANY=[@ANYBLOB="1e000000000000000500000006"], 0x48) bpf$MAP_LOOKUP_ELEM(0x2, &(0x7f0000001740)={r9, 0x0, &(0x7f0000001700)=""/53}, 0x20) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000300)={0x3, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r9, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000005900000095"], 0x0, 0x0, 0x0, 0x0, 0x41100, 0x27, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x3}, 0x94) r10 = bpf$PROG_LOAD(0x5, &(0x7f0000000280)={0x6, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f00000003c0)='GPL\x00', 0x0, 0x0, 0x0, 0x41000, 0x6, '\x00', 0x0, @fallback=0x35, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000000)={r10, 0x2000000, 0xe, 0x0, &(0x7f00000004c0)="630b008646dc3f0adf33c9f7b986", 0x0, 0x1ff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x2}, 0x50) r11 = bpf$BPF_BTF_LOAD(0x12, &(0x7f00000002c0)={&(0x7f0000000080)=ANY=[@ANYBLOB="9feb010018000000000000001c0000001c00000003000000010000000000000e020000000000000000000000000000050400000000"], 0x0, 0x37}, 0x28) r12 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r12, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000002100)=ANY=[@ANYBLOB="3c000000420001000000001a0000000003010000ffff00001200010000112233b8445566778899aabb86dd0000040002800c00038008dac45611532e"], 0x3c}}, 0x4000000) r13 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r13, &(0x7f0000000040)={0x0, 0x0, &(0x7f00000003c0)={&(0x7f00000000c0)=@newtaction={0x68, 0x30, 0x871a15abc695fa3d, 0x0, 0x0, {}, [{0x54, 0x1, [@m_ctinfo={0x50, 0x1, 0x0, 0x0, {{0xb}, {0x24, 0x2, 0x0, 0x1, [@TCA_CTINFO_ACT={0x18, 0x3, {0xfa, 0x1, 0xffffffffffffffff, 0x100}}, @TCA_CTINFO_PARMS_DSCP_STATEMASK={0x8, 0x6, 0x710}]}, {0x4}, {0xc}, {0xc}}}]}]}, 0x68}, 0x1, 0x0, 0x0, 0x200488c0}, 0x0) bpf$MAP_CREATE(0x0, &(0x7f0000004440)=ANY=[@ANYBLOB="0f00000004000000040000000700000000000000", @ANYRES32, @ANYBLOB='\x00'/15, @ANYRES32=0x0, @ANYRES32=r11, @ANYBLOB="0200000001"], 0x48) sendmsg$nl_route(r5, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000240)=ANY=[@ANYBLOB="3c0000001000010400eeffff11feffffff000000", @ANYRES32=r8, @ANYRES16=r7], 0x3c}, 0x1, 0x0, 0x0, 0x40020c1}, 0x0) socket$inet6_tcp(0xa, 0x1, 0x0) 2m15.499743438s ago: executing program 3 (id=6127): r0 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_tcp_int(r0, 0x6, 0x13, &(0x7f0000000040)=0x100000001, 0x4) (async) r1 = socket$inet6_tcp(0xa, 0x1, 0x0) shutdown(r1, 0x0) listen(r1, 0x0) r2 = bpf$PROG_LOAD(0x5, &(0x7f000000e000)={0xe, 0x4, &(0x7f00000000c0)=ANY=[@ANYBLOB="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"], &(0x7f0000003ff6)='GPL\x00', 0x4, 0xfd90, &(0x7f000000cf3d)=""/195, 0x0, 0x0, '\x00', 0x0, @sk_skb, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0x366, 0x10, &(0x7f0000000000), 0x1dd}, 0x48) (async) r3 = bpf$MAP_CREATE(0x0, &(0x7f0000000200)=ANY=[@ANYBLOB="12000000040000000400000012"], 0x50) bpf$BPF_PROG_DETACH(0x8, &(0x7f0000000500)=ANY=[@ANYRES32=r3, @ANYRES32=r2, @ANYBLOB='&'], 0x10) (async) bpf$MAP_UPDATE_ELEM(0x2, &(0x7f0000000a80)={r3, &(0x7f0000000940), &(0x7f0000000a40)=@tcp6=r1}, 0x20) (async) recvfrom(r1, &(0x7f00000024c0)=""/4061, 0xfdd, 0x23, 0x0, 0xfffffffffffffe84) (async) connect$inet6(r0, &(0x7f0000000100)={0xa, 0x0, 0x7, @ipv4={'\x00', '\xff\xff', @local}, 0x8001}, 0x1c) (async) setsockopt$inet6_tcp_TCP_ULP(r0, 0x6, 0x1f, &(0x7f00000002c0), 0x4) setsockopt$inet6_tcp_TCP_REPAIR_QUEUE(r0, 0x6, 0x14, &(0x7f0000000400)=0x1, 0x4) (async) sendmsg$kcm(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, 0x0, 0x0, &(0x7f0000000180)=ANY=[@ANYBLOB="18000000000000001001000001"], 0x18, 0x68000000}, 0x0) (async) r4 = socket$netlink(0x10, 0x3, 0x15) writev(r4, &(0x7f0000000140)=[{&(0x7f0000000000)="3900000013000b4700bb65e1c3e4ffff0100000035390000560000022500000019000a00100000ad07fd17e5ffff080c38000000000000000a", 0x39}], 0xc) setsockopt$inet6_tcp_TLS_TX(r0, 0x11a, 0x2, &(0x7f00000003c0)=@ccm_128={{0x303}, "63a7d38a4937c1fc", "5f90d5f023d7bd5bd799356c95abffc8", "09fe0891", "0aa3b9dd5fe7a771"}, 0x28) (async) r5 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000001480)='blkio.bfq.io_service_bytes\x00', 0x275a, 0x0) write$tun(r5, &(0x7f0000000340)=ANY=[], 0x141) (async) mmap(&(0x7f0000000000/0x4000)=nil, 0x4000, 0x1, 0x10012, r5, 0x0) (async) setsockopt$inet6_tcp_TLS_TX(r0, 0x11a, 0x1, &(0x7f0000000080)=@ccm_128={{0x303}, "b421eba833d4b156", "56df2295bfda5c4f9fecff61beaa8bb4", "808065e3", "7f1f1c2ab4421d27"}, 0x28) r6 = bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000480)={0x6, 0x3, &(0x7f0000000680)=ANY=[@ANYBLOB="1800000002000000000000000036000295"], &(0x7f00000002c0)='syzkaller\x00'}, 0x80) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000600)={r6, 0x5, 0xe, 0x0, &(0x7f0000000080)="04000000df000000428b4c6588f5", 0x0, 0x0, 0x2a0, 0x0, 0x0, 0x0, 0x0, 0x2}, 0x50) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x3, 0x8031, 0xffffffffffffffff, 0x0) (async) r7 = socket$nl_generic(0x10, 0x3, 0x10) write(r7, &(0x7f0000000000)="2c00000027000100010000000000000004010000180001800800010004000000080002000200000004000300", 0x2c) (async) recvmmsg(r0, &(0x7f0000004600)=[{{0x0, 0x0, &(0x7f00000032c0)=[{&(0x7f00000022c0)=""/4096, 0x1000}], 0x1}, 0xfff}], 0x1, 0x0, 0x0) (async) writev(r0, &(0x7f0000001400)=[{&(0x7f0000000140)="58ddb007a47a8b1f458ab677d557ca50def8e5bc61dbc50bca64f7e76268cd64007095adfef77465b69ec03139854d6f03d5f9bd019fe046035ef7049f48fcc7321c34faca94ff08f59edaf2ab55eedcc278df823564618627217a527b971bdfa0afd948a6cdb9e05ccaef35c22047246a7b97a8e1b645e51c47b296c759c8dfd56beb8fa15c800ad060ab378a269557bc053d9be903", 0x96}, {&(0x7f0000000300)="2ea63d218bc1023b2e6eceeb92d548803a43d4dddc2433c76650030c188f490311ff86da69fab1539139f6dda31739c2bb4412dd471137e2a53496c5f7707e01ccfb826f2eb96895230862e11d56c19af139de912ac5e68a99080e428443fcfba8b0460290c6275affe9953a97260b0304fd7ef159c9cd30cae1bcc75d568d353575ec3b5293fb80de85c7562804230489274831b2c17dccccc523ada66a46", 0x9f}, {&(0x7f0000000580)="63e73686513c53aec098be4b2dfc27b5be1f5f85f54c24efb8fc94ccaac29f1378e04daa49f8dcbda8b0faff57761a0ce8a311802e5dd07a159721cac7d2250f4359e04727386cc7d1a3e8bf93339f3df1340041f71046f2b1d9a80af70fb8246258d09c310af3bef017fde1fd8ce505cd4858549192a95e512257b6c676a7ebb41230e4e4fb23e9666bfdc8bc2ca77bbd11810836df4a6f3dbe3ee75c34b07c64e1af6d62d54fccb9f281eac16eca7129aa4355fd53", 0xb6}, {&(0x7f0000000500)="de21cff472aa580c2ee9f8", 0xb}, {&(0x7f00000014c0)="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", 0xdee}], 0x5) setsockopt$sock_int(r0, 0x1, 0x7, &(0x7f00000000c0)=0xffff1884, 0x4) 2m12.497200287s ago: executing program 33 (id=6064): r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = socket$nl_generic(0x10, 0x3, 0x10) socket$nl_generic(0x10, 0x3, 0x10) (async) r2 = socket$nl_generic(0x10, 0x3, 0x10) r3 = syz_genetlink_get_family_id$tipc(&(0x7f0000000080), r1) sendmsg$TIPC_CMD_SET_NETID(r2, &(0x7f00000003c0)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x1000000}, 0xc, &(0x7f00000001c0)={&(0x7f0000000400)={0x24, r3, 0x800, 0x70bd30, 0x25dfdbff, {{}, {}, {0x8, 0x2, 0x4}}, ["", "", "", "", "", "", "", ""]}, 0x24}, 0x1, 0x0, 0x0, 0x20000000}, 0x48884) r4 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000240), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r1, 0x8933, &(0x7f0000000100)={'wlan1\x00'}) (async) ioctl$sock_SIOCGIFINDEX_80211(r1, 0x8933, &(0x7f0000000100)={'wlan1\x00', 0x0}) ioctl$sock_inet6_SIOCSIFADDR(0xffffffffffffffff, 0x8916, &(0x7f0000000100)={@initdev={0xfe, 0x88, '\x00', 0x0, 0x0}, 0xfffffffe}) socket$inet6_mptcp(0xa, 0x1, 0x106) (async) r6 = socket$inet6_mptcp(0xa, 0x1, 0x106) getsockopt$inet6_mptcp_buf(r6, 0x11c, 0x3, &(0x7f0000000100)=""/222, &(0x7f0000000000)=0x61637876) (async) getsockopt$inet6_mptcp_buf(r6, 0x11c, 0x3, &(0x7f0000000100)=""/222, &(0x7f0000000000)=0x61637876) r7 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$NL80211_CMD_REGISTER_FRAME(r7, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000580)={&(0x7f0000000440)={0xac, r4, 0x1, 0x70bd2b, 0x0, {{}, {@val={0x8, 0x3, r5}, @void}}, [@NL80211_ATTR_FRAME_MATCH={0x85, 0x5b, "00dbaab63c1d728d6a8e15672506000000000000008f4a9f498ca8573c3e9716a176b548949838d8277bcd8e5dc69ef82a2c5242fa39590861c4684ab3b25ab6363762033bb43bc9d41522bf313450011c5d16bd96cc790662756b7c214c270d943ba93c44000b34210dbdf1474bc3159dc6bb75e719797b0840bc55faba394b9c"}, @NL80211_ATTR_FRAME_TYPE={0x6, 0x65, 0x40}]}, 0xac}}, 0x0) getpeername$packet(0xffffffffffffffff, &(0x7f00000008c0)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @random}, &(0x7f0000000900)=0x14) (async) getpeername$packet(0xffffffffffffffff, &(0x7f00000008c0)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @random}, &(0x7f0000000900)=0x14) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000940)={'sit0\x00', 0x0}) r10 = socket(0x10, 0x803, 0x0) socket(0xa, 0x3, 0x87) socket(0xa, 0x3, 0x87) ioctl$sock_inet6_SIOCSIFADDR(r6, 0x8916, &(0x7f0000001a00)={@local, 0x20}) (async) ioctl$sock_inet6_SIOCSIFADDR(r6, 0x8916, &(0x7f0000001a00)={@local, 0x20}) sendmsg$nl_route(r10, &(0x7f0000000140)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000001800)=ANY=[@ANYBLOB="340000001400b59527bd7000fddbdf250a3f00fe", @ANYBLOB="080008000806000014000200fe8000000000000000000000000000aafb"], 0x34}, 0x1, 0x0, 0x0, 0x2004c040}, 0x8000) (async) sendmsg$nl_route(r10, &(0x7f0000000140)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000001800)=ANY=[@ANYBLOB="340000001400b59527bd7000fddbdf250a3f00fe", @ANYBLOB="080008000806000014000200fe8000000000000000000000000000aafb"], 0x34}, 0x1, 0x0, 0x0, 0x2004c040}, 0x8000) sendmsg$ETHTOOL_MSG_WOL_GET(0xffffffffffffffff, &(0x7f0000000b80)={&(0x7f0000000380)={0x10, 0x0, 0x0, 0x800000}, 0xc, &(0x7f0000000b40)={&(0x7f0000000980)={0x1a0, 0x0, 0x10, 0x70bd2b, 0x25dfdbfc, {}, [@HEADER={0xc, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x3}]}, @HEADER={0xc, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_INDEX={0x8}]}, @HEADER={0x28, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x3}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'dummy0\x00'}]}, @HEADER={0x50, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'veth0_to_batadv\x00'}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8}, @ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x1}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'netpci0\x00'}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'sit0\x00'}]}, @HEADER={0x78, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_FLAGS={0x8}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'wg0\x00'}, @ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x2}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'veth0_to_hsr\x00'}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r8}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'veth0_vlan\x00'}, @ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x2}, @ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x1}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r9}]}, @HEADER={0xc, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x2}]}, @HEADER={0x78, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x1}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'wlan1\x00'}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'gre0\x00'}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'veth0_to_batadv\x00'}, @ETHTOOL_A_HEADER_DEV_NAME={0x14}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'team0\x00'}]}]}, 0x1a0}, 0x1, 0x0, 0x0, 0x810}, 0xd407acd77e336d7c) socket$nl_generic(0x10, 0x3, 0x10) (async) r11 = socket$nl_generic(0x10, 0x3, 0x10) r12 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000280), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r11, 0x8933, &(0x7f00000002c0)={'wlan0\x00', 0x0}) sendmsg$NL80211_CMD_FRAME(r11, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000640)={&(0x7f0000000300)=ANY=[@ANYBLOB='D\x00\x00\x00', @ANYRES16=r12, @ANYBLOB="010000000000000000003b00000008000300", @ANYRES32=r13, @ANYBLOB="1d003300d0000900080211000001080211000000505050505050"], 0x44}}, 0x0) socket$nl_generic(0x10, 0x3, 0x10) (async) r14 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r14, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000ec0)=ANY=[@ANYBLOB="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"], 0x188}, 0x1, 0x0, 0x0, 0x40815}, 0xc000) (async) sendmsg$nl_generic(r14, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000ec0)=ANY=[@ANYBLOB="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"], 0x188}, 0x1, 0x0, 0x0, 0x40815}, 0xc000) r15 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r15, &(0x7f0000000340)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000140)=@newlink={0x4c, 0x10, 0x1, 0x70bd2b, 0x25dfdbfb, {0x0, 0x0, 0x0, 0x0, 0x1438a}, [@IFLA_VFINFO_LIST={0x18, 0x16, 0x0, 0x1, [{0x14, 0x1, 0x0, 0x1, [@IFLA_VF_VLAN={0x10, 0x2, {0x4, 0xf44}}]}]}, @IFLA_IFNAME={0x14, 0x3, 'bond_slave_0\x00'}]}, 0x4c}, 0x1, 0x0, 0x0, 0x4000880}, 0x4) sendmsg$nl_generic(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000100)={0x1c, 0x27, 0x9, 0x70bd25, 0x25dfdbfd, {0x12}, [@typed={0x5, 0x1, 0x0, 0x0, @str='\x00'}]}, 0x1c}, 0x1, 0x0, 0x0, 0x1}, 0x4000880) socket$inet6_udp(0xa, 0x2, 0x0) 2m0.392099619s ago: executing program 34 (id=6127): r0 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_tcp_int(r0, 0x6, 0x13, &(0x7f0000000040)=0x100000001, 0x4) (async) r1 = socket$inet6_tcp(0xa, 0x1, 0x0) shutdown(r1, 0x0) listen(r1, 0x0) r2 = bpf$PROG_LOAD(0x5, &(0x7f000000e000)={0xe, 0x4, &(0x7f00000000c0)=ANY=[@ANYBLOB="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"], &(0x7f0000003ff6)='GPL\x00', 0x4, 0xfd90, &(0x7f000000cf3d)=""/195, 0x0, 0x0, '\x00', 0x0, @sk_skb, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0x366, 0x10, &(0x7f0000000000), 0x1dd}, 0x48) (async) r3 = bpf$MAP_CREATE(0x0, &(0x7f0000000200)=ANY=[@ANYBLOB="12000000040000000400000012"], 0x50) bpf$BPF_PROG_DETACH(0x8, &(0x7f0000000500)=ANY=[@ANYRES32=r3, @ANYRES32=r2, @ANYBLOB='&'], 0x10) (async) bpf$MAP_UPDATE_ELEM(0x2, &(0x7f0000000a80)={r3, &(0x7f0000000940), &(0x7f0000000a40)=@tcp6=r1}, 0x20) (async) recvfrom(r1, &(0x7f00000024c0)=""/4061, 0xfdd, 0x23, 0x0, 0xfffffffffffffe84) (async) connect$inet6(r0, &(0x7f0000000100)={0xa, 0x0, 0x7, @ipv4={'\x00', '\xff\xff', @local}, 0x8001}, 0x1c) (async) setsockopt$inet6_tcp_TCP_ULP(r0, 0x6, 0x1f, &(0x7f00000002c0), 0x4) setsockopt$inet6_tcp_TCP_REPAIR_QUEUE(r0, 0x6, 0x14, &(0x7f0000000400)=0x1, 0x4) (async) sendmsg$kcm(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, 0x0, 0x0, &(0x7f0000000180)=ANY=[@ANYBLOB="18000000000000001001000001"], 0x18, 0x68000000}, 0x0) (async) r4 = socket$netlink(0x10, 0x3, 0x15) writev(r4, &(0x7f0000000140)=[{&(0x7f0000000000)="3900000013000b4700bb65e1c3e4ffff0100000035390000560000022500000019000a00100000ad07fd17e5ffff080c38000000000000000a", 0x39}], 0xc) setsockopt$inet6_tcp_TLS_TX(r0, 0x11a, 0x2, &(0x7f00000003c0)=@ccm_128={{0x303}, "63a7d38a4937c1fc", "5f90d5f023d7bd5bd799356c95abffc8", "09fe0891", "0aa3b9dd5fe7a771"}, 0x28) (async) r5 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000001480)='blkio.bfq.io_service_bytes\x00', 0x275a, 0x0) write$tun(r5, &(0x7f0000000340)=ANY=[], 0x141) (async) mmap(&(0x7f0000000000/0x4000)=nil, 0x4000, 0x1, 0x10012, r5, 0x0) (async) setsockopt$inet6_tcp_TLS_TX(r0, 0x11a, 0x1, &(0x7f0000000080)=@ccm_128={{0x303}, "b421eba833d4b156", "56df2295bfda5c4f9fecff61beaa8bb4", "808065e3", "7f1f1c2ab4421d27"}, 0x28) r6 = bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000480)={0x6, 0x3, &(0x7f0000000680)=ANY=[@ANYBLOB="1800000002000000000000000036000295"], &(0x7f00000002c0)='syzkaller\x00'}, 0x80) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000600)={r6, 0x5, 0xe, 0x0, &(0x7f0000000080)="04000000df000000428b4c6588f5", 0x0, 0x0, 0x2a0, 0x0, 0x0, 0x0, 0x0, 0x2}, 0x50) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x3, 0x8031, 0xffffffffffffffff, 0x0) (async) r7 = socket$nl_generic(0x10, 0x3, 0x10) write(r7, &(0x7f0000000000)="2c00000027000100010000000000000004010000180001800800010004000000080002000200000004000300", 0x2c) (async) recvmmsg(r0, &(0x7f0000004600)=[{{0x0, 0x0, &(0x7f00000032c0)=[{&(0x7f00000022c0)=""/4096, 0x1000}], 0x1}, 0xfff}], 0x1, 0x0, 0x0) (async) writev(r0, &(0x7f0000001400)=[{&(0x7f0000000140)="58ddb007a47a8b1f458ab677d557ca50def8e5bc61dbc50bca64f7e76268cd64007095adfef77465b69ec03139854d6f03d5f9bd019fe046035ef7049f48fcc7321c34faca94ff08f59edaf2ab55eedcc278df823564618627217a527b971bdfa0afd948a6cdb9e05ccaef35c22047246a7b97a8e1b645e51c47b296c759c8dfd56beb8fa15c800ad060ab378a269557bc053d9be903", 0x96}, {&(0x7f0000000300)="2ea63d218bc1023b2e6eceeb92d548803a43d4dddc2433c76650030c188f490311ff86da69fab1539139f6dda31739c2bb4412dd471137e2a53496c5f7707e01ccfb826f2eb96895230862e11d56c19af139de912ac5e68a99080e428443fcfba8b0460290c6275affe9953a97260b0304fd7ef159c9cd30cae1bcc75d568d353575ec3b5293fb80de85c7562804230489274831b2c17dccccc523ada66a46", 0x9f}, {&(0x7f0000000580)="63e73686513c53aec098be4b2dfc27b5be1f5f85f54c24efb8fc94ccaac29f1378e04daa49f8dcbda8b0faff57761a0ce8a311802e5dd07a159721cac7d2250f4359e04727386cc7d1a3e8bf93339f3df1340041f71046f2b1d9a80af70fb8246258d09c310af3bef017fde1fd8ce505cd4858549192a95e512257b6c676a7ebb41230e4e4fb23e9666bfdc8bc2ca77bbd11810836df4a6f3dbe3ee75c34b07c64e1af6d62d54fccb9f281eac16eca7129aa4355fd53", 0xb6}, {&(0x7f0000000500)="de21cff472aa580c2ee9f8", 0xb}, {&(0x7f00000014c0)="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", 0xdee}], 0x5) setsockopt$sock_int(r0, 0x1, 0x7, &(0x7f00000000c0)=0xffff1884, 0x4) 3.773273643s ago: executing program 6 (id=7028): r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000000), 0x40241, 0x0) r1 = socket$inet6_icmp(0xa, 0x2, 0x3a) setsockopt$IP6T_SO_SET_REPLACE(r1, 0x29, 0x40, &(0x7f00000002c0)=@security={'security\x00', 0xe, 0x4, 0x378, 0xffffffff, 0x0, 0x210, 0x210, 0xffffffff, 0xffffffff, 0x370, 0x370, 0x370, 0xffffffff, 0x4, 0x0, {[{{@ipv6={@empty, @remote, [0xffffffff, 0xff000000, 0xff, 0xffffffff], [0xffffff00, 0xff, 0xff000000], 'bridge_slave_0\x00', 'caif0\x00', {0xff}, {0xff}, 0x4, 0x5, 0x1, 0x60}, 0x0, 0xd0, 0xf8, 0x0, {}, [@common=@ipv6header={{0x28}, {0x5, 0x40, 0x1}}]}, @common=@unspec=@STANDARD={0x28, '\x00', 0x0, 0xfffffffffffffffc}}, {{@ipv6={@private1={0xfc, 0x1, '\x00', 0x1}, @mcast1, [0xff000000, 0xff, 0xffffffff, 0xff], [0xffffffff, 0xffffffff, 0xffffffff, 0xffffff00], 'bridge_slave_0\x00', 'veth0_to_bridge\x00', {}, {}, 0x0, 0x1, 0x6, 0xa}, 0x0, 0xa8, 0xd0}, @common=@unspec=@CONNSECMARK={0x28, 'CONNSECMARK\x00', 0x0, {0x2}}}, {{@uncond, 0x0, 0xa8, 0xe0}, @common=@inet=@SET3={0x38, 'SET\x00', 0x3, {{0x3, 0x2, 0x2}, {0x4, 0x3, 0x1}, {0x3, 0x1}, 0x4, 0xfb}}}], {{'\x00', 0x0, 0xa8, 0xd0}, {0x28}}}}, 0x3d8) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000200)={'syzkaller1\x00', 0xc201}) r2 = socket$kcm(0x2, 0x3, 0x2) ioctl$SIOCSIFHWADDR(r2, 0x8914, &(0x7f0000000040)={'syzkaller1\x00', @broadcast}) r3 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r3, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000280)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a20000000000a01020000000000000000010000000900010073797a300000000058000000160a03000000000000000000010000000900010073797a30000000000900020073797a30000000002c0003800800014000000000180003801400020000007468305f746f5f68737200000000080002"], 0xe8}}, 0x0) write$tun(r0, &(0x7f00000003c0)={@val={0x8, 0x800}, @val={0x6, 0x0, 0x6, 0x8, 0x14}, @ipv4=@generic={{0x5, 0x4, 0x2, 0x2, 0x14, 0x66, 0x0, 0xb, 0x4, 0x0, @rand_addr=0x64010101, @broadcast}}}, 0xfdef) bpf$MAP_CREATE(0x0, &(0x7f0000000200)=@base={0x23, 0x4, 0x4, 0xffffffff, 0x1, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x2, 0x1}, 0x50) r4 = socket$inet_tcp(0x2, 0x1, 0x0) close(r4) socket$inet_udp(0x2, 0x2, 0x0) setsockopt$sock_int(r4, 0x1, 0x8, 0x0, 0x0) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000440)={0x11, 0xa, &(0x7f0000000040)=ANY=[@ANYBLOB="18080000d0ff00000000000000000000851000000600000018000000", @ANYRES32=0x0, @ANYBLOB="00000000000000005f08000000000000180000000000000000000000000100009500000000000000950000"], &(0x7f0000000000)='GPL\x00', 0x2, 0x0, 0x0, 0x41000, 0x8, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x10000000}, 0x94) 3.538630386s ago: executing program 5 (id=7031): r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$mptcp(&(0x7f0000000080), 0xffffffffffffffff) r2 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$ifreq_SIOCGIFINDEX_batadv_mesh(r2, 0x8933, &(0x7f0000000140)={'batadv0\x00', 0x0}) r4 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r4, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000300)=@newtfilter={0x24, 0x11, 0x1, 0x691522eb, 0x0, {0x0, 0x0, 0x74, r3, {0x10, 0x7}, {}, {0x5}}}, 0x24}, 0x1, 0xf0ffffffffffff, 0x0, 0x80}, 0x0) r5 = socket$inet_tcp(0x2, 0x1, 0x0) ioctl$sock_SIOCGIFINDEX(r5, 0x8933, &(0x7f0000000180)={'syz_tun\x00', 0x0}) r7 = bpf$PROG_LOAD(0x5, &(0x7f0000000240)={0x6, 0x6, &(0x7f0000000300)=@raw=[@generic={0xbf, 0x2, 0xa}, @generic={0x7, 0x2, 0x0, 0x0, 0xffffffc0}, @func={0x85, 0x0, 0x1, 0x0, 0xfffffffffffffffd}, @generic={0xb7, 0x4}, @generic={0x85, 0x0, 0x0, 0x0, 0x45}, @generic={0x95}], &(0x7f0000000380)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @xdp, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r8 = syz_init_net_socket$x25(0x9, 0x5, 0x0) ioctl(r8, 0x8912, &(0x7f0000000000)="13c70b4435779630379a2693a6256d") bpf$BPF_GET_PROG_INFO(0xf, &(0x7f0000000680)={r7, 0xe0, &(0x7f0000000540)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8, &(0x7f0000000340)=[0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0], ""/16, 0x0, 0x0, 0x0, 0x0, 0x3, 0x1, &(0x7f00000003c0)=[0x0, 0x0, 0x0], &(0x7f0000000400)=[0x0], 0x0, 0xac, &(0x7f0000000440)=[{}, {}, {}, {}, {}], 0x28, 0x10, &(0x7f0000000480), &(0x7f00000004c0), 0x8, 0x5f, 0x8, 0x8, &(0x7f0000000500)}}, 0x10) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000200)={0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1000, 0x0, 0x0, 0x2, 0x0, &(0x7f0000000280)="bf70", 0x2, 0x8000}, 0x50) bpf$BPF_LINK_CREATE_XDP(0x1c, &(0x7f00000006c0)={r7, r6, 0x25, 0x8, @val=@tracing={r9, 0x6}}, 0x20) sendmsg$MPTCP_PM_CMD_GET_ADDR(r0, &(0x7f00000002c0)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x2000000}, 0xc, &(0x7f0000000240)={&(0x7f0000000100)={0x38, r1, 0x200, 0x70bd28, 0x25dfdbfe, {}, [@MPTCP_PM_ATTR_ADDR={0x24, 0x1, 0x0, 0x1, [@MPTCP_PM_ADDR_ATTR_ADDR4={0x8, 0x3, @dev={0xac, 0x14, 0x14, 0x2d}}, @MPTCP_PM_ADDR_ATTR_IF_IDX={0x8, 0x7, r3}, @MPTCP_PM_ADDR_ATTR_IF_IDX={0x8, 0x7, r6}, @MPTCP_PM_ADDR_ATTR_FLAGS={0x8, 0x6, 0x3}]}]}, 0x38}, 0x1, 0x0, 0x0, 0x80}, 0x0) r10 = socket$inet_sctp(0x2, 0x5, 0x84) ioctl$sock_SIOCETHTOOL(r10, 0x8946, &(0x7f0000000100)={'netdevsim0\x00', &(0x7f0000000000)=@ethtool_ringparam={0x33, 0xffff5257, 0x2e2e, 0x100, 0x7, 0x0, 0x400, 0x3, 0xffff7fff}}) r11 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_tcp_TCP_CONGESTION(r11, 0x6, 0xd, &(0x7f0000000280)='dctcp', 0x5) setsockopt$inet6_tcp_int(r11, 0x6, 0x2000000000000022, &(0x7f0000000000)=0x1, 0x4) r12 = socket$inet6_sctp(0xa, 0x5, 0x84) setsockopt$inet_sctp6_SCTP_INITMSG(r12, 0x84, 0x2, &(0x7f00000000c0)={0xfffc, 0xc}, 0x8) getsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX3(r12, 0x84, 0x6f, &(0x7f0000000200)={0x0, 0x1e, &(0x7f00000001c0)=[@in6={0xa, 0x0, 0x0, @rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x02', 0x8}]}, &(0x7f0000000640)=0x10) r13 = socket$packet(0x11, 0x2, 0x300) setsockopt$packet_tx_ring(r13, 0x107, 0x5, &(0x7f00000000c0)=@req3={0x8000, 0x6, 0x8000, 0x6}, 0x1c) mmap(&(0x7f0000000000/0x2000)=nil, 0x30000, 0x2, 0x11, r13, 0x0) mmap(&(0x7f0000000000/0xb36000)=nil, 0x7000, 0x3, 0x8031, 0xffffffffffffffff, 0x0) recvmmsg(0xffffffffffffffff, &(0x7f0000008b00)=[{{0x0, 0x0, &(0x7f00000076c0)=[{0x0}], 0x1}, 0xffffffff}], 0x1, 0x100, 0x0) mmap(&(0x7f0000001000/0xc00000)=nil, 0xc00000, 0x0, 0x3032, 0xffffffffffffffff, 0x0) setsockopt$SO_ATTACH_FILTER(r12, 0x1, 0x1a, &(0x7f00000000c0)={0x0, 0x0}, 0x10) 3.46162836s ago: executing program 7 (id=7032): r0 = socket$netlink(0x10, 0x3, 0xa) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000080), 0xffffffffffffffff) r2 = socket$inet_udp(0x2, 0x2, 0x0) setsockopt$SO_ATTACH_FILTER(r2, 0x1, 0x1a, &(0x7f0000000040)={0x3, &(0x7f0000000000)=[{0x45, 0x0, 0x1, 0x9}, {0x35, 0x0, 0x0, 0xffffffff}, {0x6, 0xff}]}, 0x10) r3 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000080), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(0xffffffffffffffff, 0x8933, &(0x7f00000000c0)={'wlan0\x00', 0x0}) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000500)=@newqdisc={0x24, 0x24, 0x400, 0x70bd29, 0x25dfdbfd, {0x0, 0x0, 0x0, 0x0, {0x10, 0xc}, {0x2, 0xe}, {0xfff2, 0x4}}}, 0x24}}, 0x0) sendmsg$IPCTNL_MSG_CT_NEW(0xffffffffffffffff, &(0x7f0000000300)={0x0, 0x0, &(0x7f00000000c0)={0x0}}, 0x0) r5 = socket$netlink(0x10, 0x3, 0x0) r6 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a) ioctl$sock_SIOCGIFINDEX(r6, 0x8933, &(0x7f0000000000)={'bridge0\x00', 0x0}) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000100)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000080)=ANY=[@ANYBLOB="280000007000010010ab4be68e8da23507000000", @ANYRES32=r7, @ANYBLOB="1000018004"], 0x28}}, 0x0) sendmmsg(r5, &(0x7f00000002c0), 0x40000000000009f, 0x0) sendmsg$NL80211_CMD_SET_INTERFACE(0xffffffffffffffff, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000180)=ANY=[@ANYBLOB=',\x00\x00\x00', @ANYRES16=r3, @ANYBLOB="65de9d00004000800000ffdbdf0000000000", @ANYRES32=r4, @ANYBLOB="08000500040000000500530001000000"], 0x2c}, 0x1, 0x0, 0x0, 0x80}, 0x0) sendmsg$NL80211_CMD_TRIGGER_SCAN(r0, &(0x7f0000000240)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x200000}, 0xc, &(0x7f0000000200)={&(0x7f0000000100)={0x100, r1, 0x1, 0x70bd29, 0x25dfdbfd, {{}, {@val={0x8, 0x3, r4}, @val={0xc, 0x99, {0x6, 0x5}}}}, [@NL80211_ATTR_SCAN_FLAGS={0x8, 0x9e, 0x200}, @NL80211_ATTR_SCHED_SCAN_MULTI={0x4}, @NL80211_ATTR_IE={0xb0, 0x2a, [@channel_switch={0x25, 0x3, {0x0, 0x24, 0x3}}, @chsw_timing={0x68, 0x4, {0x3, 0x8}}, @random={0x4, 0x68, "e105804f143bc91268351c5c2e35529214248aa6f95b56c4899c9930646ddafdc5e85a5a919fd6285ec9136c551bd7ffdef5b8802fc59873384a5fb9e84fb03c008160211c3947c1afa430654d1eb6f447ff9e2fe1a054a157d4d367019abb00ffa5800d0a870d82"}, @prep={0x83, 0x25, {{0x0, 0x1}, 0xe8, 0x5, @broadcast, 0x0, @value=@broadcast, 0xfffffff8, 0x1f, @broadcast, 0x6}}, @mesh_chsw={0x76, 0x6, {0x8, 0x3, 0x1b, 0x5}}, @cf={0x4, 0x6, {0x77, 0x8, 0x200, 0xfffc}}]}, @NL80211_ATTR_SCAN_FLAGS={0x8, 0x9e, 0x3000}, @NL80211_ATTR_SCHED_SCAN_INTERVAL={0x8, 0x77, 0x4}, @NL80211_ATTR_SCHED_SCAN_INTERVAL={0x8, 0x77, 0x3}, @NL80211_ATTR_MEASUREMENT_DURATION_MANDATORY={0x4}]}, 0x100}, 0x1, 0x0, 0x0, 0x8000}, 0x0) r8 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_generic(r8, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000005c0)={0x14, 0x56, 0x1, 0x0, 0x0, {0x7}}, 0x14}, 0x1, 0x0, 0x0, 0x84}, 0x0) 3.042753577s ago: executing program 6 (id=7034): r0 = socket(0xa, 0x3, 0x87) sendto(r0, &(0x7f00000003c0)="e1118ce4769b", 0xfdef, 0x800, &(0x7f0000000600)=@l2tp6={0xa, 0x0, 0x7, @local, 0x5}, 0x80) poll(&(0x7f0000000000)=[{r0}], 0x1, 0x0) r1 = epoll_create1(0x0) mmap(&(0x7f0000000000/0xff5000)=nil, 0xff5000, 0x2000009, 0x200000005c832, 0xffffffffffffffff, 0x0) unshare(0x20000400) r2 = socket$pppl2tp(0x18, 0x1, 0x1) connect$pppl2tp(r2, &(0x7f0000000080)=@pppol2tpv3in6={0x18, 0x1, {0x0, 0xffffffffffffffff, 0x0, 0x3, 0x1, 0x4, {0xa, 0x4e23, 0x8, @initdev={0xfe, 0x88, '\x00', 0x1, 0x0}, 0x4}}}, 0x3a) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000580)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r3, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r4, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r3, &(0x7f00000000c0), 0x10106, 0x2, 0x0) r5 = epoll_create1(0x0) epoll_ctl$EPOLL_CTL_ADD(r1, 0x1, r4, &(0x7f0000000100)={0x20000014}) epoll_ctl$EPOLL_CTL_ADD(r5, 0x1, r1, &(0x7f0000000000)={0xa0000001}) epoll_wait(r5, &(0x7f00000003c0)=[{}], 0x1, 0xffffffff) syz_emit_ethernet(0x52, &(0x7f0000000280)={@local, @remote, @void, {@ipv4={0x800, @tcp={{0xc, 0x4, 0x0, 0x0, 0x44, 0x64, 0x0, 0x0, 0x5, 0x0, @dev={0xac, 0x14, 0x14, 0x14}, @initdev={0xac, 0x1e, 0x0, 0x0}, {[@timestamp_addr={0x44, 0x14, 0x1, 0x3, 0x8, [{@multicast2}, {@rand_addr=0x64010101}]}, @ssrr={0x89, 0x3, 0xce}, @lsrr={0x83, 0x3, 0x5d}]}}, {{0x4e1c, 0x1000, 0x41424344, 0x41424344, 0x0, 0x6, 0x5, 0x0, 0x3}}}}}}, 0x0) r6 = socket$packet(0x11, 0x2, 0x300) setsockopt$SO_TIMESTAMPING(r6, 0x1, 0x25, &(0x7f0000000540)=0x189d, 0x1a) recvmmsg(r6, &(0x7f0000000280)=[{{0x0, 0x0, 0x0, 0x0, &(0x7f0000000240)=""/59, 0x3b}, 0x9}], 0x1, 0x0, 0x0) getsockname$packet(r0, &(0x7f0000000040)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f00000000c0)=0x14) bind$packet(r6, &(0x7f0000000140)={0x11, 0x15, r7, 0x1, 0x10, 0x6, @local}, 0x14) 3.041738205s ago: executing program 5 (id=7035): socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) r1 = socket$l2tp6(0xa, 0x2, 0x73) (async) r2 = socket$l2tp6(0xa, 0x2, 0x73) unshare(0x400) (async, rerun: 64) socket$inet_icmp(0x2, 0x2, 0x1) (async, rerun: 64) bpf$MAP_CREATE_CONST_STR(0x0, 0x0, 0x48) (async) r3 = socket$nl_generic(0x10, 0x3, 0x10) (async, rerun: 64) pipe(&(0x7f0000000300)={0xffffffffffffffff, 0xffffffffffffffff}) (rerun: 64) setsockopt$sock_attach_bpf(r3, 0x1, 0x32, &(0x7f0000000200)=r4, 0x4) (async) bind$l2tp6(r2, &(0x7f0000000040)={0xa, 0x0, 0xfffffffe, @empty}, 0x20) bind$l2tp6(r1, &(0x7f0000000000)={0xa, 0x0, 0x1, @empty, 0x0, 0x6}, 0x20) r5 = socket$nl_generic(0x10, 0x3, 0x10) (async, rerun: 64) r6 = syz_genetlink_get_family_id$l2tp(&(0x7f0000000140), 0xffffffffffffffff) (rerun: 64) sendmsg$L2TP_CMD_TUNNEL_CREATE(r5, &(0x7f0000000380)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000003c0)=ANY=[@ANYBLOB='\\\x00\x00\x00', @ANYRES16=r6, @ANYBLOB="0100000000000000000001000500050007000000000008000900030000001400200000000000000000000000e1ffe000000108000a0000000000060002000100000014001f"], 0x5c}, 0x1, 0x6c}, 0x0) r7 = socket$nl_route(0x10, 0x3, 0x0) (async) r8 = bpf$OBJ_GET_MAP(0x7, &(0x7f00000000c0)=@generic={&(0x7f0000000080)='./file0\x00'}, 0x18) (async) r9 = socket(0x10, 0x803, 0x0) ioctl$sock_SIOCGIFINDEX(r9, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r9, &(0x7f00000012c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000a40)=@newqdisc={0x2c, 0x24, 0x4ee4e6a52ff5653f, 0x70bd2d, 0x25dfdbfc, {0x0, 0x0, 0x0, r10, {0x0, 0x9}, {0xffff, 0xffff}}, [@TCA_RATE={0x6, 0x5, {0x0, 0x6}}]}, 0x2c}, 0x1, 0x0, 0x0, 0x81}, 0x0) (async) sendmsg$NL80211_CMD_REQ_SET_REG(r5, &(0x7f0000000700)={&(0x7f0000000640)={0x10, 0x0, 0x0, 0x2}, 0xc, &(0x7f00000006c0)={&(0x7f0000000680)={0x1c, 0x0, 0x2, 0x70bd26, 0x25dfdbfe, {}, [@NL80211_ATTR_DFS_REGION={0x5, 0x92, 0xfa}]}, 0x1c}}, 0x440c0) sendmsg$nl_route_sched(r9, &(0x7f0000006040)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000340)=@newtfilter={0x44, 0x2c, 0xd3f, 0x70bd2d, 0x25dfdbfb, {0x0, 0x0, 0x0, r10, {0xc, 0x4}, {0x0, 0x9}, {0x10, 0x9}}, [@filter_kind_options=@f_flower={{0xb}, {0x14, 0x2, [@TCA_FLOWER_KEY_ETH_TYPE={0x6, 0x8, 0x8848}, @TCA_FLOWER_KEY_MPLS_OPTS={0x8, 0x63, 0x0, 0x1, @TCA_FLOWER_KEY_MPLS_OPTS_LSE={0x4, 0x20}}]}}]}, 0x44}, 0x1, 0x0, 0x0, 0x1}, 0x0) (async) ioctl$XFS_IOC_ATTRLIST_BY_HANDLE(r7, 0x4058587a, &(0x7f00000002c0)={{r7, &(0x7f0000000100)='#\x00', 0x101000, &(0x7f0000000180)={@align, {0xf8a, 0x2, 0xffffa8e7, 0x6}}, 0x10, &(0x7f00000001c0), &(0x7f0000000200)=0x33}, {[0x2, 0x7, 0x10000, 0xb7]}, 0x4, 0x1b, &(0x7f0000000240)=""/27}) (async) r12 = bpf$ITER_CREATE(0xb, &(0x7f0000000100), 0x0) close(r12) (async, rerun: 64) mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x2000001, 0x12, 0xffffffffffffffff, 0x0) (rerun: 64) openat$cgroup_ro(0xffffffffffffffff, &(0x7f0000000740)='cpuacct.usage_percpu_user\x00', 0x0, 0x0) (async) r13 = syz_genetlink_get_family_id$ethtool(&(0x7f0000000500), r5) sendmsg$ETHTOOL_MSG_RINGS_SET(r12, &(0x7f0000000600)={&(0x7f00000004c0)={0x10, 0x0, 0x0, 0x2000}, 0xc, &(0x7f00000005c0)={&(0x7f0000000540)={0x4c, r13, 0x100, 0x70bd29, 0x25dfdbfb, {}, [@ETHTOOL_A_RINGS_RX_MINI={0x8, 0x7, 0x597}, @ETHTOOL_A_RINGS_RX={0x8, 0x6, 0x80}, @ETHTOOL_A_RINGS_RX_JUMBO={0x8, 0x8, 0x4}, @ETHTOOL_A_RINGS_RX_MINI={0x8, 0x7, 0x1200}, @ETHTOOL_A_RINGS_RX_MINI={0x8, 0x7, 0xee95}, @ETHTOOL_A_RINGS_TX={0x8, 0x9, 0x5}, @ETHTOOL_A_RINGS_TX={0x8, 0x9, 0x6}]}, 0x4c}, 0x1, 0x0, 0x0, 0x10}, 0x24000844) (async, rerun: 32) bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f0000000440)={0x1b, 0x0, 0x0, 0x4, 0x0, r8, 0x8, '\x00', r10, r11, 0x3, 0x1}, 0x50) (async, rerun: 32) sendmsg$nl_route(r7, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000940)={&(0x7f00000013c0)=ANY=[@ANYBLOB="640000001000030400"/20, @ANYRES32=0x0, @ANYBLOB="e5fda988000000002800128009000100766c616e00000000180002800c0003001c0000001f000000060001000700000008000500", @ANYRES32=r0], 0x64}, 0x1, 0x0, 0x0, 0x8811}, 0x0) 2.961806107s ago: executing program 2 (id=7036): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_CREATE(r0, &(0x7f0000000100)={0x0, 0x0, &(0x7f00000003c0)={&(0x7f0000000240)={0x60, 0x2, 0x6, 0x801, 0x0, 0x0, {0x0, 0x0, 0x1}, [@IPSET_ATTR_REVISION={0x5, 0x4, 0x1}, @IPSET_ATTR_PROTOCOL={0x5}, @IPSET_ATTR_DATA={0x14, 0x7, 0x0, 0x1, [@IPSET_ATTR_TIMEOUT={0x8, 0x6, 0x0, 0x0, 0x5}, @IPSET_ATTR_MAXELEM={0x8, 0x13, 0x1, 0x0, 0x6}]}, @IPSET_ATTR_FAMILY={0x5, 0x5, 0x2}, @IPSET_ATTR_TYPENAME={0x12, 0x3, 'hash:net,port\x00'}, @IPSET_ATTR_SETNAME={0x9, 0x2, 'syz0\x00'}]}, 0x60}, 0x1, 0x0, 0x0, 0x40002}, 0x8000) 2.923262217s ago: executing program 7 (id=7038): r0 = socket$inet_udp(0x2, 0x2, 0x0) bind$inet(r0, &(0x7f0000000100)={0x2, 0x0, @dev={0xac, 0x14, 0x14, 0x13}}, 0x10) r1 = socket$inet_mptcp(0x2, 0x1, 0x106) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000740)={0xe, 0x3, &(0x7f0000000540)=ANY=[@ANYRESHEX=r0, @ANYRESDEC=0x0, @ANYRESHEX=r1, @ANYRES8=r1, @ANYRES32=r0], &(0x7f00000004c0)='syzkaller\x00', 0x0, 0x0, 0x0, 0x41100}, 0x94) pipe(&(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) unshare(0x22020600) r3 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r4 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r5 = syz_genetlink_get_family_id$nl802154(&(0x7f0000000080), r3) ioctl$sock_SIOCGIFINDEX_802154(r3, 0x8933, &(0x7f0000000100)={'wpan0\x00', 0x0}) r7 = syz_open_procfs$namespace(0x0, &(0x7f0000000280)='ns/mnt\x00') sendmsg$NL802154_CMD_SET_WPAN_PHY_NETNS(r4, &(0x7f0000000380)={0x0, 0x0, &(0x7f0000000340)={&(0x7f00000002c0)={0x24, r5, 0x411, 0x70bd2a, 0x25dfdbfd, {}, [@NL802154_ATTR_IFINDEX={0x8, 0x3, r6}, @NL802154_ATTR_NETNS_FD={0x8, 0x1d, r7}]}, 0x24}, 0x1, 0x0, 0x0, 0x14}, 0x40000) r8 = bpf$PROG_LOAD(0x5, &(0x7f0000000680)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="18090000000000000000000000000000850000006d0000001801000020696c2500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000007100000095"], 0x0, 0x0, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0x5, &(0x7f0000000440)=ANY=[@ANYBLOB="1809000000ffffff0000000000000000851000000200000085000000070000009500000000000000"], 0x0, 0xfffffdff, 0x0, 0x0, 0x727c45cd4283345, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0}, 0x94) r9 = bpf$PROG_LOAD(0x5, &(0x7f0000000380)={0x1, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000000)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x2, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r10 = bpf$MAP_CREATE_TAIL_CALL(0x0, &(0x7f0000000180)=ANY=[@ANYRESDEC=r8, @ANYRES32=0x0, @ANYRES32=0x0, @ANYRES16=r8], 0x48) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000040)={{r10}, &(0x7f0000000280), &(0x7f0000000240)=r9}, 0x20) r11 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r11, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000020)={&(0x7f0000000200)=ANY=[@ANYBLOB="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"], 0xe1c}}, 0x0) r12 = bpf$PROG_LOAD(0x5, &(0x7f0000000880)={0x1, 0x10, &(0x7f0000000bc0)=ANY=[@ANYBLOB="1808000000000000000000000000000018120000", @ANYRES32=r10, @ANYBLOB="0000000000000000b703000000000000850000000c000000b7000000000000001801000000082c2500000000002120207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000000700000095"], &(0x7f0000000500)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x2, '\x00', 0x0, @fallback=0x2, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) setsockopt$sock_attach_bpf(0xffffffffffffffff, 0x1, 0x32, &(0x7f00000000c0)=r12, 0x4) sendmsg$inet(r2, &(0x7f0000000580)={0x0, 0x0, 0x0}, 0x24040080) bpf$PROG_LOAD(0x5, &(0x7f0000000680)={0x3, 0x8, &(0x7f0000000d80)=ANY=[@ANYBLOB="18000000000000000000000000000000180200", @ANYBLOB], &(0x7f00000000c0)='GPL\x00', 0x0, 0x0, 0x0, 0x40f00, 0x0, '\x00', 0x0, @sched_cls, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_PROG_TEST_RUN(0xa, 0x0, 0x0) socketpair(0x11, 0x2, 0x300, 0x0) shutdown(r1, 0x0) splice(r1, 0x0, r2, 0x0, 0x6, 0xb) socket$packet(0x11, 0x2, 0x300) setsockopt$SO_ATTACH_FILTER(r11, 0x1, 0x1a, &(0x7f0000000080)={0x0, &(0x7f00000001c0)}, 0x10) socket$inet(0x2, 0x2, 0x10) 2.745915635s ago: executing program 2 (id=7039): r0 = socket$nl_generic(0x10, 0x3, 0x10) (async) r1 = syz_genetlink_get_family_id$tipc(&(0x7f0000000100), 0xffffffffffffffff) sendmsg$TIPC_CMD_SHOW_LINK_STATS(r0, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000140)=ANY=[@ANYBLOB="1c000000", @ANYRES16=r1, @ANYBLOB="010025bd7000fcdbdf2501000000000000000b"], 0x28}, 0x1, 0x0, 0x0, 0x1080}, 0x0) (async, rerun: 64) pipe(&(0x7f0000000000)={0xffffffffffffffff}) (rerun: 64) write$tcp_congestion(r2, &(0x7f0000000040)='lp\x00', 0x3) 2.474083642s ago: executing program 4 (id=7041): socket$netlink(0x10, 0x3, 0x9) socket$pptp(0x18, 0x1, 0x2) bpf$MAP_CREATE(0x0, &(0x7f0000000180)=@base={0x14, 0x4, 0x8, 0xa, 0x804}, 0x50) r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000000440)={0x0, 0x0, &(0x7f0000000580)={&(0x7f00000001c0)=@newlink={0x3c, 0x10, 0x403, 0x70bd26, 0x25dfdbfc, {0x0, 0x0, 0x3}, [@IFLA_LINKINFO={0x14, 0x12, 0x0, 0x1, @vcan={{0x9}, {0x4}}}, @IFLA_MASTER={0x8, 0x4040}]}, 0x3c}}, 0x0) socket$inet6(0xa, 0x400000000001, 0x0) socket$nl_route(0x10, 0x3, 0x0) r1 = socket(0x10, 0x3, 0x0) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000400)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f0000000040)={'bridge_slave_1\x00', 0x0}) sendmsg$nl_route(r1, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000001c0)=ANY=[@ANYBLOB="7c0000001000010400"/20, @ANYRES32=r3, @ANYBLOB="00000000000000005c001280110001006272696467655f736c617665000000004400058005000500070000000500", @ANYRES8=r1], 0x7c}}, 0x0) 2.30605087s ago: executing program 2 (id=7042): bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f00000002c0)={0xffffffffffffffff, 0x2f00020b, 0xd, 0x0, &(0x7f0000000200)="63eced8e46dc3f0adf33c9f7b9", 0x0, 0x7515, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x50) r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$tipc(&(0x7f00000007c0), r0) sendmsg$TIPC_CMD_SET_LINK_PRI(r0, &(0x7f00000008c0)={0x0, 0x0, &(0x7f0000000880)={&(0x7f0000000800)={0x68, r1, 0x1, 0x70bd26, 0x25dfdbfb, {{}, {}, {0x4c, 0x18, {0x800, @media='ib\x00'}}}}, 0x68}, 0x1, 0x0, 0x0, 0x20}, 0x4000) r2 = socket$inet(0x2, 0x2, 0xc) ioctl$sock_inet_SIOCSIFFLAGS(r2, 0x8914, &(0x7f0000000200)={'ip_vti0\x00'}) r3 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r3, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000780)=ANY=[@ANYBLOB="38010000100001000000000000000000ac1414aa000000000000000000000000ac1414aa00000000000000000000000000000000000000000200000000000000", @ANYRES32=0x0, @ANYRES32=0x0, @ANYBLOB="ac1414aa000000000000000000000000000004d26c000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000020000000000000000000000480003006465666c617465000000000000000000000000000000000000000000000000009174f9ab4e45171bc75f0e043534670100"/240], 0x138}}, 0x0) r4 = openat$cgroup_ro(0xffffffffffffffff, &(0x7f0000000080)='cpuset.effective_mems\x00', 0x0, 0x0) setsockopt$MRT_INIT(r4, 0x0, 0xc8, &(0x7f0000000340), 0x4) bpf$BPF_GET_MAP_INFO(0xf, &(0x7f0000000300)={r4, 0x58, &(0x7f0000000280)}, 0x10) ioctl$ifreq_SIOCGIFINDEX_vcan(r3, 0x8933, &(0x7f00000000c0)={'vxcan1\x00', 0x0}) sendmsg$nl_route_sched(r4, &(0x7f0000000240)={&(0x7f0000000080)={0x10, 0x0, 0x0, 0x5dd5ba3ad09d83ff}, 0xc, &(0x7f0000000140)={&(0x7f0000000100)=@newchain={0x34, 0x64, 0x400, 0x70bd2a, 0x25dfdbfe, {0x0, 0x0, 0x0, r5, {0x6, 0x8}, {0xe, 0x3}, {0x10, 0x5}}, [@TCA_RATE={0x6, 0x5, {0x3, 0xf}}, @TCA_RATE={0x6, 0x5, {0x7, 0x9}}]}, 0x34}, 0x1, 0x0, 0x0, 0x8000}, 0x20000015) syz_emit_ethernet(0x56, &(0x7f0000000180)={@local, @dev, @void, {@ipv4={0x800, @icmp={{0x5, 0x4, 0x0, 0x0, 0x48, 0x0, 0x0, 0x40, 0x1, 0x0, @remote, @local}, @dest_unreach={0x3, 0x4, 0x0, 0x0, 0x0, 0x500, {0x5, 0x4, 0x0, 0x0, 0x1c, 0x0, 0x0, 0x40, 0x6c, 0x0, @remote, @local}, "000004d200000000"}}}}}, 0x0) bpf$MAP_CREATE(0x0, &(0x7f0000000200)=ANY=[@ANYBLOB="220000000400000010000000"], 0x48) r6 = bpf$MAP_CREATE(0x0, &(0x7f0000000200)=ANY=[], 0x48) bpf$BPF_MAP_CONST_STR_FREEZE(0x16, &(0x7f00000000c0)={r6}, 0x4) bpf$BPF_PROG_WITH_BTFID_LOAD(0x5, &(0x7f0000000100)=@bpf_lsm={0x6, 0x6, &(0x7f00000001c0)=ANY=[@ANYBLOB="1800000000000000000000000000000018200000", @ANYRES32=r6, @ANYBLOB="0000000000000000c30100000001000095"], &(0x7f0000000040)='syzkaller\x00', 0x8, 0x0, 0x0, 0x0, 0x24}, 0x94) 2.302361673s ago: executing program 4 (id=7043): bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000002c0)={0x12, 0x3, &(0x7f00000000c0)=@framed={{0x18, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4}}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x40000000}, 0x94) bpf$PROG_LOAD(0x5, &(0x7f000000e000)={0x10, 0x4, &(0x7f0000000040)=ANY=[@ANYBLOB="b400000000000000791048000000000071001e000000000095000300"], &(0x7f0000003ff6)='GPL\x00', 0x2, 0xfd90, &(0x7f000000cf3d)=""/195, 0x0, 0x0, '\x00', 0x0, @sk_msg}, 0x48) 2.109631833s ago: executing program 7 (id=7044): r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000200), r0) (async) r2 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) r3 = socket$inet_udp(0x2, 0x2, 0x0) (async) r4 = socket$key(0xf, 0x3, 0x2) sendmsg$key(r4, &(0x7f00000014c0)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000180)=ANY=[@ANYBLOB="020d0000100000000000000000000000080012000200020000000000000000001000330023000000000000000000000010006c00000000000000000000000000fc0200000000000000e1004000000000030005000000000002000000ac1414aa0000000000000000030006000000000002"], 0x80}}, 0x0) setsockopt$inet_MCAST_JOIN_GROUP(r3, 0x0, 0x2a, &(0x7f0000000180)={0x2, {{0x2, 0x0, @multicast2}}}, 0x88) setsockopt$inet_MCAST_MSFILTER(r3, 0x0, 0x30, &(0x7f0000000600)=ANY=[@ANYBLOB="020000000000000002000000e0000002000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000a00000002000000ffffffff00000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000002004e20e0000001e6ff0000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000002004e20e000000200000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000002004e210a0101000000000000c300000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000002004e21e000000200000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000002004e22ac14142000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000002004e24e000000100000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000002004e220000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000002004e1f0000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000002"], 0x590) (async) close(r3) (async) bind$bt_hci(r2, &(0x7f0000000080)={0x1f, 0xffff, 0x3}, 0x6) (async) write(r2, &(0x7f0000000340)="180000", 0x3) r5 = socket$netlink(0x10, 0x3, 0x0) (async) r6 = socket(0x10, 0x803, 0x0) sendmsg$BATADV_CMD_GET_MESH(r6, &(0x7f00000004c0)={0x0, 0x0, &(0x7f0000000480)={0x0, 0x32}}, 0x0) (async) getsockname$packet(r6, &(0x7f0000000580)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000140)=0x14) sendmsg$nl_route(r5, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000000)=ANY=[@ANYBLOB="3800000010000507000000000004000000000000", @ANYRES32=r7, @ANYBLOB="00000016010000001800120008000100736974000c0002000800030036"], 0x38}}, 0x0) (async) sendmsg$nl_route(r6, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000500)={&(0x7f00000000c0)=ANY=[@ANYBLOB="480000001000390426bd7000eaffffff000003e4", @ANYRES32=r7, @ANYBLOB="83000400000000002800128008000100736974001c00028006000d00ff07000008000300e00000010800010058aa7b"], 0x48}, 0x1, 0x0, 0x0, 0x20008004}, 0x4040) (async) socket$nl_xfrm(0x10, 0x3, 0x6) (async) sendmsg$NL80211_CMD_NEW_INTERFACE(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f00000003c0)={&(0x7f0000000140)=ANY=[@ANYBLOB='X\x00\x00\x00', @ANYRES16=r1, @ANYBLOB="090d2000000000f0ff000700000008000300", @ANYRES32=r1], 0x58}}, 0x0) 2.109020966s ago: executing program 4 (id=7045): socket(0x10, 0x80000, 0x401) socket$nl_generic(0x10, 0x3, 0x10) r0 = socket(0x40000000015, 0x5, 0x0) connect$inet(r0, &(0x7f0000000040)={0x2, 0x4e21, @loopback}, 0x10) r1 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r1, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000080)=ANY=[@ANYBLOB="4c0000001000010400"/20, @ANYRES32=0x0, @ANYBLOB="00000000000000002c00128009000100626f6e64000000001c00028005001d00000000000500010004000000050015"], 0x4c}}, 0x0) socket$packet(0x11, 0x2, 0x300) r2 = openat$tun(0xffffffffffffff9c, &(0x7f0000000000), 0x2, 0x0) ioctl$TUNSETIFF(r2, 0x400454ca, &(0x7f0000000200)={'syzkaller1\x00', 0x5001}) r3 = socket$inet_udp(0x2, 0x2, 0x0) ioctl$sock_inet_SIOCSIFFLAGS(r3, 0x8914, &(0x7f0000000200)={'syzkaller1\x00', 0x1}) write$tun(r2, &(0x7f0000001240)=ANY=[@ANYBLOB="02031b003000140606006332c5ab11c811ff00000000000000000000000000000001"], 0x11fa) socket$nl_route(0x10, 0x3, 0x0) bind$inet(r0, &(0x7f0000000340)={0x2, 0x4e20, @loopback}, 0x57) sendmsg$xdp(r0, &(0x7f0000000080)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x14}, 0x0) setsockopt$RDS_CONG_MONITOR(r0, 0x114, 0x6, &(0x7f0000000680)=0x1, 0x4) socket$rds(0x15, 0x5, 0x0) r4 = syz_genetlink_get_family_id$nl80211(&(0x7f00000000c0), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(0xffffffffffffffff, 0x8933, &(0x7f0000000100)={'wlan0\x00', 0x0}) sendmsg$NL80211_CMD_NEW_INTERFACE(0xffffffffffffffff, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000002c0)={0x48, r4, 0x1, 0x70bd28, 0x25dfdbfd, {{}, {@void, @val={0x8, 0x3, r5}, @val={0xc, 0x99, {0x10001, 0x70}}}}, [@NL80211_ATTR_IFNAME={0x14, 0x4, 'dvmrp1\x00'}, @NL80211_ATTR_IFTYPE={0x8, 0x5, 0x8}, @NL80211_ATTR_SOCKET_OWNER={0x4}]}, 0x48}, 0x1, 0x0, 0x0, 0x4090}, 0x24044804) sendmsg$NL80211_CMD_SET_NOACK_MAP(r0, &(0x7f0000000280)={&(0x7f0000000100)={0x10, 0x0, 0x0, 0x2000}, 0xc, &(0x7f0000000240)={&(0x7f0000000140)={0x40, r4, 0x203, 0x70bd27, 0x25dfdbfe, {{}, {@void, @val={0xc, 0x99, {0xc, 0x4b}}}}, [@NL80211_ATTR_NOACK_MAP={0x6, 0x95, 0xe6f}, @NL80211_ATTR_NOACK_MAP={0x6, 0x95, 0x1}, @NL80211_ATTR_NOACK_MAP={0x6, 0x95, 0x2}, @NL80211_ATTR_NOACK_MAP={0x6, 0x95, 0x2}]}, 0x40}, 0x1, 0x0, 0x0, 0x8011}, 0x40041) socket$inet6_mptcp(0xa, 0x1, 0x106) pselect6(0x40, &(0x7f0000000380)={0x0, 0x0, 0x1, 0xfffffffffffffffd, 0x3, 0x0, 0x1, 0x4}, 0x0, &(0x7f00000002c0)={0x3ff, 0x0, 0x0, 0x9, 0x0, 0x0, 0x7fffffff}, 0x0, 0x0) syz_init_net_socket$bt_rfcomm(0x1f, 0x0, 0x3) r6 = socket$can_raw(0x1d, 0x3, 0x1) bind$can_raw(r6, &(0x7f0000000040), 0x10) r7 = socket$inet(0x2, 0x2, 0x1) connect$inet(r7, &(0x7f0000000180)={0x2, 0x4e24, @dev={0xac, 0x14, 0x14, 0xf}}, 0x10) sendmmsg$inet(r7, &(0x7f0000000540)=[{{0x0, 0x2, &(0x7f0000000000)=[{&(0x7f00000000c0)="08001497733f5d3e", 0x6c6d}], 0x5}}, {{0x0, 0x0, &(0x7f0000000440), 0x56}}], 0x2, 0x2004000) setsockopt$CAN_RAW_ERR_FILTER(r6, 0x65, 0x2, &(0x7f0000000a40), 0x4) 2.09029319s ago: executing program 5 (id=7046): r0 = syz_init_net_socket$bt_l2cap(0x1f, 0x5, 0x0) ioctl$sock_ifreq(r0, 0x89a3, &(0x7f0000000200)={'dummy0\x00', @ifru_mtu=0xf4}) 2.054510851s ago: executing program 6 (id=7047): r0 = bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f00000002c0)=ANY=[@ANYBLOB="0200000004000000080000000100000080000000", @ANYRES32=0x0, @ANYBLOB="265b5deaeb07bbaa0000000000ff000000000000", @ANYRES32=0x0, @ANYRES32=0x0, @ANYBLOB="003e6bb70010000000000020470000020000003ccf71d882000000000000000000000000a1df932662801b3e674e7d998807f37b2be6ecc17cc5752a72e621c2"], 0x50) bpf$BPF_MAP_CONST_STR_FREEZE(0x16, &(0x7f0000000000)={r0}, 0x4) bpf$PROG_LOAD(0x5, &(0x7f0000001000)={0x6, 0xa, &(0x7f0000000500)=ANY=[@ANYBLOB="bfa200000000000007020000f0ffffffb70300000c00e5ffb604000000000000b705000000000000850000006300000015000200000000008101180000000000850000005600000095000000000000002b2f8f73316ac57a9b007f26e038082aadc5903560e1cf54b1fdd698c409c0237fdc68cb992d144da2a8577803a6a95999831e245d415b0fad2fba72fb57d3a051d951205e43cb38ea51246c8f"], &(0x7f00000011c0)='GPL\x00', 0x1, 0x0, 0x0, 0x0, 0xe1, '\x00', 0x0, @xdp, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffe}, 0x94) r1 = socket$nl_generic(0x10, 0x3, 0x10) r2 = accept4$inet(0xffffffffffffffff, 0x0, &(0x7f0000000040), 0x80800) r3 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) bind$bt_hci(r3, &(0x7f0000000040)={0x1f, 0xffff, 0x3}, 0x6) write(r3, &(0x7f0000000100), 0x0) read(r3, &(0x7f0000000740)=""/144, 0xfffffffffffffea4) write(r3, &(0x7f0000000140)="0d000000010001", 0x7) ioctl$XFS_IOC_FSCOUNTS(r1, 0x80205871, &(0x7f00000001c0)) read(r3, &(0x7f0000000400)=""/128, 0x80) write(r3, &(0x7f0000000180)="3300000008000102030405060101", 0xa) read(r3, &(0x7f0000000400)=""/128, 0x80) read(r3, &(0x7f0000000400)=""/128, 0x80) write(r3, &(0x7f0000000280)="3400f400070000000000000000", 0xd) read(r3, &(0x7f0000000400)=""/128, 0x80) close(r3) getsockopt$IPT_SO_GET_REVISION_MATCH(r2, 0x0, 0x42, &(0x7f00000000c0)={'NETMAP\x00'}, &(0x7f0000000100)=0x1e) sendmsg$nl_generic(r1, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000140)={&(0x7f00000004c0)=ANY=[@ANYBLOB="18000000260001031dbd7002fadbdf25010000000400ae"], 0x18}}, 0x0) ioctl$ifreq_SIOCGIFINDEX_team(0xffffffffffffffff, 0x8933, 0x0) ioctl$sock_ipv4_tunnel_SIOCGETTUNNEL(0xffffffffffffffff, 0x89f0, 0x0) r4 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r4, &(0x7f000000c2c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000340)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a28000000000a0101000000005e1affd5020000000900010073797a300000000008000240000000032c000000030a01030000e6ff00000000020000000900010073797a30000000000900030073797a320000000014000000110001"], 0x7c}, 0x1, 0x0, 0x0, 0x20000004}, 0x0) sendmsg$NFT_BATCH(r4, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000080)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a80000000060a0b0400000000000000000200fffe540004802800018007000100637400001c0002800800014000000002080002400000000905000300010000002800018007000100637400001c0002800800024000000011080004400000000c05000300010000000900010073797a30000000000900020073797a32"], 0xa8}, 0x1, 0x0, 0x0, 0x840}, 0x0) syz_genetlink_get_family_id$team(&(0x7f0000000080), r1) syz_genetlink_get_family_id$team(&(0x7f0000000640), r1) r5 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r5, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000240)=ANY=[@ANYBLOB="300000007000010227bd7000fcdbdf2507000000", @ANYRES32=0x0, @ANYBLOB="f90001804305608005002300"/25], 0x30}, 0x1, 0x0, 0x0, 0x40801}, 0x4000000) syz_genetlink_get_family_id$batadv(&(0x7f0000000180), r1) 1.88443543s ago: executing program 2 (id=7048): r0 = socket$nl_generic(0x10, 0x3, 0x10) setsockopt$inet6_tcp_int(0xffffffffffffffff, 0x6, 0x13, &(0x7f0000000040)=0x100000001, 0x4) sendmsg$NFT_BATCH(0xffffffffffffffff, 0x0, 0x4000) socket$kcm(0x23, 0x2, 0x0) r1 = socket$packet(0x11, 0x2, 0x300) r2 = bpf$PROG_LOAD(0x5, &(0x7f0000000000)={0x1, 0x8, &(0x7f0000002fc0)=ANY=[@ANYBLOB="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"], &(0x7f0000000100)='GPL\x00'}, 0x48) setsockopt$sock_attach_bpf(r1, 0x1, 0x32, &(0x7f0000002900)=r2, 0x4) recvmsg(0xffffffffffffffff, &(0x7f0000000500)={&(0x7f0000000040)=@hci, 0x80, &(0x7f0000000100)}, 0x1f00) r3 = socket$inet6(0xa, 0x2, 0x0) bind$inet6(r3, &(0x7f0000000040)={0xa, 0xe22}, 0x1c) r4 = socket$inet6(0xa, 0x2, 0x0) setsockopt$sock_int(r3, 0x1, 0x2, &(0x7f00000002c0)=0xffff, 0x4) bind$inet6(r4, &(0x7f0000000040)={0xa, 0xe22, 0x8000, @empty}, 0x1c) sendmsg$tipc(0xffffffffffffffff, &(0x7f0000000240)={0x0, 0x0, 0x0}, 0x0) recvmmsg(0xffffffffffffffff, 0x0, 0x0, 0x102, 0x0) r5 = socket$kcm(0x10, 0x2, 0x4) sendmsg$kcm(r5, 0x0, 0x20004000) sendmsg$nl_generic(r0, &(0x7f0000000100)={0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x42804}, 0x4000000) ioctl$sock_kcm_SIOCKCMCLONE(r5, 0x89e2, 0x0) r6 = socket$inet6(0xa, 0x1, 0x8010000000000084) r7 = socket(0x26, 0x5, 0x8) connect$inet6(r7, 0x0, 0x0) sendmmsg$inet6(r6, &(0x7f0000000400)=[{{&(0x7f0000000000)={0xa, 0x4e21, 0x1, @dev={0xfe, 0x80, '\x00', 0x24}, 0x5}, 0x1c, &(0x7f0000000240)=[{&(0x7f00000000c0)="687df617ac1affc7693864a82c17c8ecb998383ea5324fa05a77f0de93765349faa7020cad91f6c82ccbb8c9e7394b00144eac42ae5fc4543f1530ce36088b", 0x3f}], 0x1, &(0x7f0000000440)=ANY=[@ANYBLOB="480000000000000029000000370000002b05000000000000c910fe800000000000000000000000000011c204000000f8c910ff020000000000000000000000000001000000000000240000000000000029000000320000", @ANYRES32, @ANYBLOB='\x00\x00\x00'], 0x70}}], 0x1, 0x40) ioctl$sock_ipv6_tunnel_SIOCGETTUNNEL(r6, 0x89f0, &(0x7f00000001c0)={'ip6tnl0\x00', &(0x7f0000000140)={'syztnl0\x00', 0x0, 0x29, 0x2, 0x80, 0x2, 0x16, @mcast1, @loopback, 0x80, 0x80, 0x9181, 0x6}}) bind$xdp(r7, &(0x7f0000000200)={0x2c, 0x8, r8, 0x39, r7}, 0x10) shutdown(r6, 0x1) r9 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r9, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000040)=ANY=[@ANYBLOB="1c0000001d00010000000000000000000a00100018"], 0x1c}}, 0x0) 1.881817382s ago: executing program 5 (id=7049): mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000)='./cgroup.cpu/syz0\x00', 0x1ff) r0 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000), 0x200002, 0x0) r1 = openat$cgroup_int(r0, &(0x7f0000000140)='cgroup.clone_children\x00', 0x2, 0x0) r2 = openat$cgroup_procs(r0, &(0x7f0000000080)='cgroup.procs\x00', 0x2, 0x0) r3 = socket$nl_generic(0x10, 0x3, 0x10) r4 = syz_genetlink_get_family_id$devlink(&(0x7f0000000140), 0xffffffffffffffff) socketpair$unix(0x1, 0x2, 0x0, 0x0) connect$unix(0xffffffffffffffff, 0x0, 0x0) r5 = openat$tun(0xffffffffffffff9c, &(0x7f0000000000), 0x40241, 0x0) ioctl$TUNSETIFF(0xffffffffffffffff, 0x400454ca, &(0x7f0000000200)={'erspan0\x00', 0xc201}) r6 = socket$inet_udp(0x2, 0x2, 0x0) r7 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r7, &(0x7f0000000040)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000240)=ANY=[@ANYBLOB="7800000010000304000000000000000000007400", @ANYRES32=0x0, @ANYBLOB="00000000600000005800128008000100677470004c00028008000100", @ANYRES32=r6], 0x78}, 0x1, 0x0, 0x0, 0x24008040}, 0x0) bind$inet(r6, &(0x7f0000000040)={0x2, 0x4e20, @empty}, 0x10) r8 = socket$kcm(0x2, 0x3, 0x2) ioctl$SIOCSIFHWADDR(r8, 0x8914, &(0x7f0000000040)={'syzkaller1\x00', @broadcast}) write$tun(r5, &(0x7f0000000140)={@val={0x8, 0x800}, @val={0x7, 0x0, 0x2, 0x3, 0x2b}, @ipv4=@udp={{0x5, 0x4, 0x3, 0x1f, 0x30, 0x66, 0x0, 0x40, 0x11, 0x0, @private=0xa010102, @dev={0xac, 0x14, 0x14, 0x16}}, {0x4e20, 0x4e20, 0x1c, 0x0, @gue={{0x2, 0x0, 0x3, 0xff, 0x100}, "b68ed34f131c03e57e518e4d"}}}}, 0x3e) recvmmsg(0xffffffffffffffff, 0x0, 0x0, 0x2, 0x0) getsockopt$IP6T_SO_GET_INFO(0xffffffffffffffff, 0x29, 0x40, &(0x7f00000000c0)={'raw\x00', 0x0, [0x8, 0x4, 0x9, 0x6, 0xfffffff8]}, &(0x7f0000000180)=0x54) sendmsg$DEVLINK_CMD_TRAP_POLICER_SET(r3, &(0x7f0000000440)={0x0, 0x0, &(0x7f0000000400)={&(0x7f00000002c0)=ANY=[@ANYBLOB="860a0acc", @ANYRES16=r4, @ANYBLOB="040027bd7000ecdbdf25460000000e0001006e657464657673696d0000000f0002006e657464657673696d30000008008e00030000000c008f000b000000000000000c0090003805000000000000"], 0x54}, 0x1, 0x0, 0x0, 0x20000010}, 0x80) sendfile(r2, r1, 0x0, 0x4) 1.769482198s ago: executing program 7 (id=7050): r0 = bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000240)=ANY=[@ANYBLOB="02000000040000000800000001"], 0x48) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000140)={0x1e, 0x4, &(0x7f0000000040)=@framed={{}, [@call={0x85, 0x0, 0x0, 0x89}]}, &(0x7f0000000000)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x24}, 0x94) getsockopt$inet_udp_int(0xffffffffffffffff, 0x11, 0xb, 0x0, &(0x7f0000000100)) bpf$PROG_LOAD(0x5, &(0x7f0000000100)={0xa, 0xf, &(0x7f00000006c0)=@ringbuf={{0x18, 0x8}, {{0x18, 0x1, 0x1, 0x0, r0}, {}, {}, {0x85, 0x0, 0x0, 0x5}}, {{0x5, 0x0, 0x3}}, [], {{0x6, 0x1, 0xd, 0x8}, {0x6, 0x0, 0x5, 0x8, 0x0, 0x0, 0xfc}, {0x85, 0x0, 0x0, 0x5}}}, &(0x7f0000000980)='GPL\x00', 0x0, 0x0, 0x0, 0x40f00, 0x0, '\x00', 0x0, @fallback=0xb, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1}, 0x94) 1.653602948s ago: executing program 7 (id=7051): sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f0000009b40)={0x0, 0x0, &(0x7f0000009b00)={&(0x7f0000000100)=ANY=[@ANYBLOB="140000001000010000000000000000000500000a4c000000090a010400000000000000000a0000040900010073797a310000000008000540000000020900020073797a310000000008000a40ff"], 0xb4}, 0x1, 0x0, 0x0, 0x4000850}, 0x40) r0 = socket(0x10, 0x3, 0x0) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000100)=ANY=[@ANYBLOB="4800e80010000d0428bd7000fcdbff2500008000", @ANYRES32=r0, @ANYBLOB="1000000000000000280012800b0001006272696467650000180002800500190084"], 0x48}}, 0x4084) sendmsg$nl_route(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000100)=ANY=[@ANYBLOB="500000001000010425bbe5ad600027842cf52300", @ANYRES32=0x0, @ANYBLOB="0300000000000000280012800a00010076786c616e00"], 0x50}, 0x1, 0x0, 0x0, 0x13d33d22cca65c15}, 0x4008840) sendmmsg(r0, &(0x7f0000000000), 0x4000000000001f2, 0x0) r1 = openat$tun(0xffffffffffffff9c, &(0x7f0000000140), 0x40841, 0x0) ioctl$TUNSETIFF(r1, 0x400454ca, &(0x7f00000000c0)={'syzkaller1\x00', 0x6bf1c2d5adba8c32}) r2 = socket$nl_route(0x10, 0x3, 0x0) r3 = socket$unix(0x1, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r3, 0x8933, &(0x7f0000000100)={'syzkaller1\x00', 0x0}) sendmsg$nl_route_sched(r2, &(0x7f00000012c0)={0x0, 0x0, &(0x7f0000000380)={&(0x7f00000003c0)=@gettaction={0x20, 0x32, 0x400, 0x70bd26, 0x25dfdbff, {}, [@action_dump_flags=@TCA_ROOT_FLAGS={0xc}]}, 0x20}, 0x1, 0x0, 0x0, 0x44004}, 0x0) sendmsg$nl_route_sched(r2, &(0x7f0000000580)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000240)=@newtfilter={0x3c, 0x2c, 0x601, 0x0, 0x0, {0x0, 0x0, 0x0, r4, {0xfff3}, {0xc, 0xffff}, {0x300, 0xf}}, [@filter_kind_options=@f_flower={{0xb}, {0xfffffffffffffe1b, 0x2, [@TCA_FLOWER_KEY_CT_MARK={0x8, 0x5f, 0x1}]}}]}, 0x3c}, 0x1, 0x0, 0x0, 0x4001}, 0x0) r5 = socket$nl_route(0x10, 0x3, 0x0) r6 = openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0x2, 0x0) ioctl$TUNSETIFF(r6, 0x400454ca, &(0x7f0000000040)={'syzkaller1\x00', 0x1}) r7 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPCTNL_MSG_CT_NEW(r7, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000240)=ANY=[@ANYBLOB="9000000000010104000000000000000002000000240001801400018008000100ac14140b08000200000400000c0002800500010000000000240002800c00028005000100000000001400018008000100e000000208000200ac1e000108000740000000002c000e8006000340000000021400018008000100e000000208000000e00000010c0002800500010021000000"], 0x90}}, 0x0) r8 = socket$unix(0x1, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r8, 0x8933, &(0x7f0000000100)={'syzkaller1\x00', 0x0}) r10 = socket$inet6(0xa, 0x800000000000002, 0x0) setsockopt$inet6_udp_int(r10, 0x11, 0x67, &(0x7f0000000180)=0x27b, 0x4) connect$inet6(r10, &(0x7f0000000080)={0xa, 0x4e20, 0x0, @mcast2, 0x7}, 0x1c) write(r10, 0x0, 0x0) sendmsg$IPVS_CMD_NEW_DAEMON(r10, &(0x7f0000000280)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000340)=ANY=[@ANYBLOB="1400000068ef4eb0b19775b07cfd8fec4345c20d9cd0ce228cf2b739ad24299ec0fd", @ANYRES16=0x0, @ANYBLOB="0100040010080100000009000000"], 0x14}, 0x1, 0x0, 0x0, 0x48c1}, 0x0) sendmsg$nl_route_sched(r5, &(0x7f00000012c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000000c0)=@newqdisc={0x30, 0x24, 0x601, 0x0, 0x0, {0x0, 0x0, 0x0, r9, {}, {0xfff1, 0xffff}}, [@qdisc_kind_options=@q_ingress={0xc}]}, 0x30}}, 0x0) sendmsg$nl_route_sched(r2, &(0x7f0000000580)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000440)=@gettclass={0x24, 0x2a, 0x0, 0x70bd25, 0xa5dfdbff, {0x0, 0x0, 0x0, r4, {0x6, 0xf}, {0x1, 0x929f65d90b28e60b}, {0x8, 0xa}}, ["", "", "", "", ""]}, 0x24}, 0x1, 0x0, 0x0, 0x4000}, 0x0) r11 = socket$phonet_pipe(0x23, 0x5, 0x2) socket$nl_route(0x10, 0x3, 0x0) write(r11, &(0x7f0000000040)="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", 0x2b9) setsockopt$PNPIPE_ENCAP(r11, 0x113, 0x1, &(0x7f0000000000)=0x1, 0x4) 1.590837126s ago: executing program 5 (id=7052): openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000d00)='memory.events\x00', 0x275a, 0x0) (async) r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000d00)='memory.events\x00', 0x275a, 0x0) ioctl$FS_IOC_FSSETXATTR(r0, 0x401c5820, &(0x7f0000000000)={0x98, 0x0, 0xfffffffe, 0x2, 0x200080}) syz_init_net_socket$llc(0x1a, 0x2, 0x0) (async) r1 = syz_init_net_socket$llc(0x1a, 0x2, 0x0) bind$llc(r1, &(0x7f0000000140)={0x1a, 0x0, 0x0, 0x0, 0x2, 0x9}, 0x10) (async) bind$llc(r1, &(0x7f0000000140)={0x1a, 0x0, 0x0, 0x0, 0x2, 0x9}, 0x10) r2 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_ADD(r2, &(0x7f0000000540)={0x0, 0x0, &(0x7f0000000440)={&(0x7f0000000180)=ANY=[@ANYBLOB="54000000090601020000000000000000010000050900020073797a3000000000050001"], 0x54}, 0x1, 0x0, 0x0, 0x8000}, 0x44000) r3 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000002c0)='blkio.bfq.io_queued\x00', 0x275a, 0x0) r4 = socket$nl_generic(0x10, 0x3, 0x10) r5 = syz_genetlink_get_family_id$devlink(&(0x7f0000000280), 0xffffffffffffffff) sendmsg$DEVLINK_CMD_TRAP_SET(r4, &(0x7f0000000400)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000000)={0x58, r5, 0x1, 0x70bd29, 0x25dfdbfc, {}, [{@nsim={{0xe}, {0xf, 0x2, {'netdevsim', 0x0}}}, {0xfffffffffffffe8b}, {0x2, 0x83, 0x1}}]}, 0x58}, 0x1, 0x0, 0x0, 0x4000}, 0x4c0d0) (async) sendmsg$DEVLINK_CMD_TRAP_SET(r4, &(0x7f0000000400)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000000)={0x58, r5, 0x1, 0x70bd29, 0x25dfdbfc, {}, [{@nsim={{0xe}, {0xf, 0x2, {'netdevsim', 0x0}}}, {0xfffffffffffffe8b}, {0x2, 0x83, 0x1}}]}, 0x58}, 0x1, 0x0, 0x0, 0x4000}, 0x4c0d0) sendmsg$DEVLINK_CMD_TRAP_SET(r3, &(0x7f0000000580)={&(0x7f0000000080)={0x10, 0x0, 0x0, 0x20}, 0xc, &(0x7f0000000540)={&(0x7f00000005c0)=ANY=[@ANYBLOB="20020000e4d391836affbc986a383867b9c88f660816fe3815f87a9bea30130f617a56dc614d8288d0818bd6e2935704064df8fc1f0cb6baba43d2cccc0ae10b996f2bced355a6661d86530c873fb053", @ANYRES16=r5, @ANYBLOB="000127bd7000ffdbdf253e0000000e0001006e657464657673696d0000000f0002006e657464657673696d3000001c008200736f757263655f6d61635f69735f6d756c7469636173740005008300010000000e0001006e657464657673696d0000000f0002006e657464657673696d3000001c008200736f757263655f6d61635f69735f6d756c746963617374000500830001000000080001007063690011000200303030303a30303a31302e30000000001c008200736f757263655f6d61635f69735f6d756c7469636173740005008300010000000e0001006e657464657673696d0000000f0002006e657464657673696d3000001c008200736f757263655f6d61635f69735f6d756c746963617374000500830000000000080001007063690011000200303030303a30303a31302e30000000001c008200736f757263655f6d61635f69735f6d756c7469636173740005008300010000000e0001006e657464657673696d0000000f0002006e657464657673696d3000001c008200736f757263655f6d61635f69735f6d756c746963617374000500830000000000080001007063690011000200303030303a30303a31302e30000000001c008200736f757263655f6d61635f69735f6d756c746963617374000500830000000000080001007063690011000200303030303a30303a31302e30000000001c008200736f757263655f6d61635f69735f6d756c746963617374000500830000000000"], 0x224}, 0x1, 0x0, 0x0, 0x4000000}, 0x0) (async) sendmsg$DEVLINK_CMD_TRAP_SET(r3, &(0x7f0000000580)={&(0x7f0000000080)={0x10, 0x0, 0x0, 0x20}, 0xc, &(0x7f0000000540)={&(0x7f00000005c0)=ANY=[@ANYBLOB="20020000e4d391836affbc986a383867b9c88f660816fe3815f87a9bea30130f617a56dc614d8288d0818bd6e2935704064df8fc1f0cb6baba43d2cccc0ae10b996f2bced355a6661d86530c873fb053", @ANYRES16=r5, @ANYBLOB="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"], 0x224}, 0x1, 0x0, 0x0, 0x4000000}, 0x0) write$cgroup_int(r3, &(0x7f0000000000), 0xffffff6a) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000001070000000000000000260018110000", @ANYRES32, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000100000095"], 0x0, 0x0, 0x0, 0x0, 0x41100, 0x21, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$MAP_CREATE(0x0, &(0x7f0000000640)=ANY=[@ANYBLOB="16000000000000000400000001"], 0x48) (async) r6 = bpf$MAP_CREATE(0x0, &(0x7f0000000640)=ANY=[@ANYBLOB="16000000000000000400000001"], 0x48) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000a40)={0x3, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000008000000000000000000018110000", @ANYRES32=r6, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b7040000000000008500000058"], 0x0}, 0x90) r7 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x6, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @xdp, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2}, 0x94) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000280)={r7, 0x2000300, 0xe, 0x0, &(0x7f0000000000)="e86364e0a3991ae0faffb982", 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x6}, 0x33) sendfile(r1, r3, 0x0, 0xffffffff000) recvmmsg(r1, &(0x7f0000000640), 0x3fffffffffffce3, 0x0, 0x0) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000180)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000001500)=@newtaction={0x1c, 0x30, 0xb, 0x0, 0x25dfdbfc, {0x0, 0x0, 0x6a00}, [{0x4}, {0x4}]}, 0x1c}}, 0x2000a804) ioctl$AUTOFS_IOC_SETTIMEOUT(r0, 0x80049367, &(0x7f0000000040)=0x2) (async) ioctl$AUTOFS_IOC_SETTIMEOUT(r0, 0x80049367, &(0x7f0000000040)=0x2) 1.585844594s ago: executing program 2 (id=7053): r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000000), 0x48241, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f00000000c0)={'syzkaller1\x00', 0x6bf1c2d5adba8c32}) ioctl$TUNSETLINK(r0, 0x400454cd, 0x313) socket$kcm(0x2, 0xa, 0x2) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000800)={0x1f, 0xc, &(0x7f00000001c0)=ANY=[@ANYBLOB="18000000000000000000000000000000850000002a000000180100002020642500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000003000000095"], &(0x7f0000000000)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x11}, 0x94) ioctl$SIOCSIFHWADDR(r0, 0x8914, &(0x7f0000000180)={'wg2\x00', @link_local}) close(0x3) r1 = bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f00000007c0)={0x1b, 0x0, 0x0, 0x40000, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0}, 0x48) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000140)={0x11, 0x10, &(0x7f00000000c0)=@ringbuf={{0x18, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x1}, {{0x18, 0x1, 0x1, 0x0, r1}}, {}, [@alu={0x7, 0x0, 0x4, 0x9, 0x0, 0x0, 0xfffffffffffffffc}], {{}, {0x7, 0x0, 0xb, 0x2, 0x0, 0x0, 0x1}, {0x85, 0x0, 0x0, 0xc6}}}, &(0x7f0000000000)='syzkaller\x00', 0x8, 0x0, 0x0, 0x41100, 0x5, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x1}, 0x94) ioctl$sock_ipv6_tunnel_SIOCDELTUNNEL(0xffffffffffffffff, 0x89f2, &(0x7f0000000100)={'ip6gre0\x00', &(0x7f0000000300)={'ip6_vti0\x00', 0x0, 0x4, 0x8, 0xdf, 0xc, 0x68, @remote, @mcast1, 0x5f28368efc5a82ce, 0x7, 0x0, 0x7}}) sendmsg$NL80211_CMD_REGISTER_FRAME(0xffffffffffffffff, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000240)=ANY=[@ANYBLOB="1c000000", @ANYRES16=0x0, @ANYBLOB="100027bd7000fbdbdf253a00000008000300", @ANYRES32=0x0, @ANYBLOB="ab7b09db409c9a5e"], 0x1c}, 0x1, 0x0, 0x0, 0x800}, 0x5b05383a345356d) r3 = socket(0x1, 0x2, 0x0) r4 = bpf$MAP_CREATE(0x0, &(0x7f0000000200)=ANY=[@ANYBLOB="0f000000040000000400000012"], 0x48) r5 = bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000480)={0x6, 0x3, &(0x7f0000000680)=ANY=[@ANYBLOB="1800000002000000000000000000000095"], &(0x7f00000002c0)='syzkaller\x00'}, 0x80) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000600)={r5, 0x5, 0xb68, 0x560b0000, &(0x7f0000000000)="259a53f271a76d2688a24c6588a8", 0x0, 0xd01, 0x2a0, 0x0, 0x0, 0x0, 0x0, 0x2}, 0x48) bpf$MAP_UPDATE_ELEM(0x2, &(0x7f0000000140)={r4, &(0x7f0000000180), &(0x7f00000000c0)=@tcp6=r3}, 0x20) ioctl$TUNSETIFINDEX(r0, 0x400454da, &(0x7f0000000140)=r2) 1.065563626s ago: executing program 6 (id=7054): r0 = bpf$MAP_CREATE(0x0, &(0x7f00000000c0)=@base={0x1f, 0x0, 0x0, 0x8000}, 0x48) r1 = socket$packet(0x11, 0x3, 0x300) setsockopt$packet_int(r1, 0x107, 0xf, &(0x7f0000000040)=0x80000001, 0x4) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000100)={'bridge0\x00', 0x0}) sendto$packet(r1, &(0x7f0000000180)="280320000a001400000000f506be00000000000000000000000000143baa2b1f1f858ce632f47042195eb3cf545a41b6d78839980700e67b1678895e16f37fe839017be0e6dd0b388dd93fbeb0", 0x4d, 0x400c010, &(0x7f0000000080)={0x11, 0x3, r2, 0x1, 0x6, 0x6, @multicast}, 0x14) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000001c0)={0x1f, 0xf, &(0x7f0000000940)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b702000014000000b7030000000000088500000083000000bf0900000000000055090100000000009500000000000000bf91000000000000b7020000000000008500000085000000b70000000000000095"], &(0x7f0000000a00)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x11}, 0x90) 871.641865ms ago: executing program 6 (id=7055): r0 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r0, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000440)=ANY=[@ANYBLOB="200000002f00090027bd7000000000000400001b0800180004ac0f0004001e"], 0x20}, 0x1, 0x0, 0x0, 0x42804}, 0x4) bpf$PROG_LOAD(0x5, &(0x7f00000054c0)={0x10, 0x16, &(0x7f0000000780)=ANY=[@ANYBLOB="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"], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @sk_msg}, 0x48) 856.199316ms ago: executing program 2 (id=7056): r0 = socket$inet_udp(0x2, 0x2, 0x0) (async, rerun: 32) r1 = socket(0x2, 0xa, 0x300) (rerun: 32) setsockopt$SO_ATTACH_FILTER(r1, 0x1, 0x1a, &(0x7f0000000000)={0x2, &(0x7f0000000080)=[{0x30, 0x5, 0x1, 0xfffff034}, {0x6, 0x1, 0x6, 0x6}]}, 0x10) (async) getsockopt$inet_sctp_SCTP_RECVNXTINFO(r1, 0x84, 0x21, &(0x7f0000000040), &(0x7f0000000100)=0x4) r2 = bpf$PROG_LOAD_XDP(0x5, &(0x7f00000001c0)={0x6, 0x3, &(0x7f0000000680)=ANY=[@ANYBLOB="18000000020000000000000000ee000095"], &(0x7f00000002c0)='GPL\x00', 0x3, 0x0, 0x0, 0x40f00}, 0x94) getsockopt$inet6_int(r1, 0x29, 0x1d, &(0x7f0000000140), &(0x7f0000000180)=0x4) r3 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r3, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000180)=ANY=[@ANYBLOB="140000001000010000000000000000000500000a28000000000a030000000000000000000a00000708000240000000020900010073797a31000000002c000000030a010100000000000000000a0000070900010073797a31000000000900030073797a320000000014000000110001"], 0x7c}, 0x1, 0x0, 0x0, 0x40001}, 0x24040850) sendmsg$NFT_BATCH(r3, &(0x7f0000009b40)={0x0, 0x0, &(0x7f0000009b00)={&(0x7f0000000240)=ANY=[@ANYBLOB="140000001000010000000000000000000500000a48000000030a0fdb00000000000000000a0000050900030073797a30000000000900010073797a310000000014000480080002403cb140bb0800014000000003080005400000000014000000110001"], 0x70}, 0x1, 0x0, 0x0, 0x4000850}, 0x24000840) (async) sendmsg$NFT_BATCH(r3, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000cc0)={&(0x7f0000000100)=ANY=[@ANYBLOB="140000001000010000000000007d00000300000a80000000050a010100000000000000000a00000a0900010073797a31000021000c0002400000000000000002"], 0xc8}, 0x1, 0x0, 0x0, 0xb0}, 0x20008890) (async, rerun: 64) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000600)={r2, 0x5, 0x36, 0x0, &(0x7f00000000c0)="259a53f271a76d2686dd4c6588a81626730d0f208854766aefcf8d304d6bb519c5c1cc2a652e00fe212124c0c4dd0770cfce979a0cb7", 0x0, 0xd01, 0x2a0, 0x0, 0x0, 0x0, 0x0, 0x2}, 0x50) (rerun: 64) r4 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r4, &(0x7f0000000680)={0x0, 0x0, &(0x7f0000000640)={&(0x7f0000000400)=@getspdinfo={0x14, 0x25, 0x1, 0x70bd2a, 0x25dfdbfe}, 0x14}, 0x1, 0x0, 0x0, 0x90}, 0x4000000) ioctl$sock_inet_SIOCGARP(r0, 0x8954, &(0x7f0000000300)={{0x2, 0x4e23, @rand_addr=0x64010101}, {0x1}, 0x12, {0x2, 0x4e20, @dev={0xac, 0x14, 0x14, 0x25}}, 'pimreg\x00'}) r5 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r5, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000100)=ANY=[@ANYBLOB="380000003f000500010000000000000001010000000000000f0001006f76732d73797374656d0000080002000000000008000900e8030000"], 0x38}}, 0x0) sendmsg$nl_generic(r5, &(0x7f0000000500)={0x0, 0x0, &(0x7f0000000480)={&(0x7f0000000300)=ANY=[@ANYBLOB="2c00000041000500020000000000000003010000e8030000140009000102030405060708090a0b0c0d0e0f10"], 0x2c}}, 0x0) 721.771957ms ago: executing program 4 (id=7057): r0 = socket$can_raw(0x1d, 0x3, 0x1) ioctl$sock_SIOCETHTOOL(r0, 0x8946, &(0x7f0000001b80)={'veth0_vlan\x00', &(0x7f0000000000)=@ethtool_sfeatures={0x3b, 0x3, [{0x178f705e, 0x1}, {0xb, 0x1203}, {0x4}]}}) 698.128867ms ago: executing program 7 (id=7058): r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000000), 0x40241, 0x0) r1 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFQNL_MSG_CONFIG(r1, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000180)=ANY=[@ANYBLOB="1c000000020303000000000000000000000100000800010001"], 0x1c}}, 0x0) sendmsg$IPSET_CMD_CREATE(r1, &(0x7f0000000280)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x100002}, 0xc, &(0x7f00000001c0)={&(0x7f00000000c0)={0xd0, 0x2, 0x6, 0x401, 0x0, 0x0, {0x2, 0x0, 0x9}, [@IPSET_ATTR_REVISION={0x5, 0x4, 0x1}, @IPSET_ATTR_PROTOCOL={0x5}, @IPSET_ATTR_PROTOCOL={0x5}, @IPSET_ATTR_PROTOCOL={0x5}, @IPSET_ATTR_DATA={0x2c, 0x7, 0x0, 0x1, [@IPSET_ATTR_CIDR={0x5, 0x3, 0xb}, @IPSET_ATTR_CIDR={0x5, 0x3, 0x77}, @IPSET_ATTR_IP={0x18, 0x1, 0x0, 0x1, @IPSET_ATTR_IPADDR_IPV6={0x14, 0x2, 0x1, 0x0, @remote}}]}, @IPSET_ATTR_PROTOCOL={0x5}, @IPSET_ATTR_SETNAME={0x9, 0x2, 'syz1\x00'}, @IPSET_ATTR_DATA={0x5c, 0x7, 0x0, 0x1, [@IPSET_ATTR_PORT_TO={0x6, 0x5, 0x1, 0x0, 0x4e23}, @IPSET_ATTR_HASHSIZE={0x8, 0x12, 0x1, 0x0, 0xfff}, @IPSET_ATTR_BUCKETSIZE={0x5, 0x15, 0x1}, @IPSET_ATTR_IP={0x18, 0x1, 0x0, 0x1, @IPSET_ATTR_IPADDR_IPV6={0x14, 0x2, 0x1, 0x0, @ipv4={'\x00', '\xff\xff', @multicast1}}}, @IPSET_ATTR_SIZE={0x8, 0x17, 0x1, 0x0, 0x3ff}, @IPSET_ATTR_PORT_TO={0x6, 0x5, 0x1, 0x0, 0x4e21}, @IPSET_ATTR_CIDR={0x5, 0x3, 0x9}, @IPSET_ATTR_MARK={0x8, 0xa, 0x1, 0x0, 0xfffffff7}, @IPSET_ATTR_HASHSIZE={0x8, 0x12, 0x1, 0x0, 0x5}]}]}, 0xd0}, 0x1, 0x0, 0x0, 0x1080}, 0x94) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000200)={'syzkaller1\x00', 0x4002}) sendmsg$IPCTNL_MSG_EXP_NEW(0xffffffffffffffff, &(0x7f0000000540)={0x0, 0x0, &(0x7f0000000480)={&(0x7f0000000a00)={0xf8, 0x0, 0x2, 0x301, 0x0, 0x0, {0x7, 0x0, 0x10}, [@CTA_EXPECT_NAT={0x9c, 0xa, 0x0, 0x1, [@CTA_EXPECT_NAT_TUPLE={0x48, 0x2, 0x0, 0x1, [@CTA_TUPLE_PROTO={0xc, 0x2, 0x0, 0x1, {0x5, 0x1, 0x3a}}, @CTA_TUPLE_PROTO={0xc, 0x2, 0x0, 0x1, {0x5, 0x1, 0x88}}, @CTA_TUPLE_IP={0x2c, 0x1, 0x0, 0x1, @ipv6={{0x14, 0x3, @rand_addr=' \x01\x00'}, {0x14, 0x4, @empty}}}]}, @CTA_EXPECT_NAT_DIR={0x8, 0x1, 0x1, 0x0, 0x1}, @CTA_EXPECT_NAT_TUPLE={0x48, 0x2, 0x0, 0x1, [@CTA_TUPLE_ZONE={0x6, 0x3, 0x1, 0x0, 0x1}, @CTA_TUPLE_PROTO={0xc, 0x2, 0x0, 0x1, {0x5, 0x1, 0x11}}, @CTA_TUPLE_ZONE={0x6}, @CTA_TUPLE_ZONE={0x6, 0x3, 0x1, 0x0, 0x2}, @CTA_TUPLE_PROTO={0xc, 0x2, 0x0, 0x1, {0x5, 0x1, 0x84}}, @CTA_TUPLE_ZONE={0x6, 0x3, 0x1, 0x0, 0x46}, @CTA_TUPLE_PROTO={0xc, 0x2, 0x0, 0x1, {0x5, 0x1, 0x10}}]}]}, @CTA_EXPECT_NAT={0x48, 0xa, 0x0, 0x1, [@CTA_EXPECT_NAT_DIR={0x8}, @CTA_EXPECT_NAT_TUPLE={0x3c, 0x2, 0x0, 0x1, [@CTA_TUPLE_PROTO={0xc, 0x2, 0x0, 0x1, {0x5, 0x1, 0x2f}}, @CTA_TUPLE_IP={0x2c, 0x1, 0x0, 0x1, @ipv6={{0x14, 0x3, @private2}, {0x14, 0x4, @mcast2}}}]}]}]}, 0xf8}, 0x1, 0x0, 0x0, 0x40010}, 0x4008080) r2 = socket(0x10, 0x803, 0x0) sendto(r2, &(0x7f0000000c40)="120000001200e7ef007b0000000000faffa0", 0x12, 0x8800, 0x0, 0x0) recvmmsg(r2, &(0x7f00000037c0)=[{{&(0x7f00000004c0)=@ethernet={0x0, @random}, 0xfdf4, &(0x7f0000000380)=[{&(0x7f0000000140)=""/100, 0x321}, {&(0x7f0000000280)=""/85, 0x21}, {&(0x7f0000000fc0)=""/4096, 0x197}, {&(0x7f0000000580)=""/106, 0x659}, {&(0x7f0000000980)=""/73, 0xd}, {&(0x7f0000000200)=""/77, 0x69}, {&(0x7f00000007c0)=""/141, 0xc4}, {&(0x7f00000001c0)=""/17, 0x1d8}], 0x21, &(0x7f0000000600)=""/191, 0x41}, 0x5}], 0x4000000000003b4, 0x2000, &(0x7f0000003700)={0x77359400}) writev(r0, &(0x7f00000002c0)=[{&(0x7f0000000080)="0b68f3", 0x3}, {&(0x7f0000000340)='\x00\x00\x00', 0x3}, {&(0x7f0000000240)='\x00\x00\x00\x00\x00\x00\x00\x00\x00', 0x9}], 0x3) 660.751392ms ago: executing program 5 (id=7059): r0 = syz_genetlink_get_family_id$batadv(&(0x7f0000000580), 0xffffffffffffffff) (async) r1 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r1, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000240)=ANY=[@ANYBLOB="140000001000010000000000000000000500000a28000000000a030000000000000000000a00000708000240000000020900010073797a31000000002c000000030a010100000000000000000a0000070900010073797a31000000000900030073797a320000000014000000110001"], 0x7c}, 0x1, 0x0, 0x0, 0x4000}, 0x0) (async) sendmsg$NFT_BATCH(r1, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000009b00)={&(0x7f00000006c0)=ANY=[@ANYBLOB="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"], 0xc0}, 0x1, 0x0, 0x0, 0x8890}, 0x24008000) r2 = socket$nl_generic(0x10, 0x3, 0x10) r3 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='memory.events\x00', 0x275a, 0x0) (async) r4 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r4, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000100)=ANY=[@ANYBLOB="140000001000010000000000000000000100000a20000000000a01080000000000000000020000000900010073797a30000000002c000000030a01040000000000000200020000000900010073797a30000000000900030073797a300000000090000000060a01240000000000000000020000000900010073797a30000000000900020073797a300000000064000480600001800b0001007461726765740000500002800e00010049444c4554494d455200000008000240000000013400030064000000746573745f6c6162656c0000000000000500000000000000000000000001"], 0x104}}, 0x0) (async, rerun: 32) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000100)={0x13, 0xc, &(0x7f0000000840)=ANY=[@ANYBLOB="18080000d2ff000000000000000000006608fdff00000000180100002020782500000000002020207b1a0000f8ffffffb702000008000000b50a000000000000850000000600000095000000000000000000000000000000000000000067d6000000"], &(0x7f00000001c0)='syzkaller\x00', 0x2, 0xe5, &(0x7f00000005c0)=""/229, 0x41000, 0x8}, 0x94) (async, rerun: 32) r5 = syz_init_net_socket$bt_rfcomm(0x1f, 0x1, 0x3) bind$bt_rfcomm(r5, &(0x7f0000000000)={0x1f, @fixed={'\xaa\xaa\xaa\xaa\xaa', 0x12}, 0xdf}, 0xa) (async, rerun: 64) connect$bt_rfcomm(r5, &(0x7f0000000080)={0x1f, @none, 0x4}, 0xa) (rerun: 64) sendmsg$BATADV_CMD_GET_DAT_CACHE(r2, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000140)=ANY=[@ANYBLOB="1c000000", @ANYRES16=r0, @ANYBLOB="040300000000000000000700000008000300", @ANYRES32=0x0, @ANYBLOB], 0x1c}, 0x1, 0x0, 0x0, 0x10}, 0x24044080) r6 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r6, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000cc0)=ANY=[@ANYBLOB="300000004a000b0000000000000000000a008000", @ANYRES32=0x0, @ANYBLOB="0000000014000100feff"], 0x30}}, 0x844) socket$nl_generic(0x10, 0x3, 0x10) (async) r7 = socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$tipc(&(0x7f00000000c0), r7) sendmsg$TIPC_CMD_ENABLE_BEARER(r7, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000680)=ANY=[@ANYBLOB='8\x00\x00\x00', @ANYRES16, @ANYBLOB="010000000d0000000000010000000000000001410000001c001700000000000000006574683a73797a6b616c6c657230"], 0x38}}, 0x0) r8 = accept$phonet_pipe(r3, 0x0, &(0x7f00000004c0)) ioctl$sock_SIOCSIFVLAN_SET_VLAN_NAME_TYPE_CMD(r8, 0x8983, &(0x7f0000000540)={0x6, 'batadv0\x00', {0x3}, 0x3}) (async) r9 = socket$inet6_sctp(0xa, 0x5, 0x84) ioctl$sock_SIOCETHTOOL(0xffffffffffffffff, 0x8946, &(0x7f0000000500)={'veth1\x00', &(0x7f0000000200)=@ethtool_per_queue_op={0x4b, 0xf, [0x6, 0x1, 0x7fff, 0x1, 0x4, 0x5, 0xcc26, 0xffb, 0x5, 0xb69, 0xc1, 0x81, 0x1, 0x3, 0x80000003, 0xa1, 0xffc, 0x9, 0x701, 0x3, 0x40001, 0xfffffffa, 0x8000004, 0x6, 0x9, 0x12000004, 0x7, 0x5, 0x5, 0x762, 0x3, 0xd, 0xe, 0x2b12, 0xb6, 0x6, 0x1c00, 0xb, 0x8, 0xbed4, 0x2000008, 0x8000103, 0x3, 0x0, 0x8, 0x8, 0x5, 0x79b, 0x2, 0x1, 0x7, 0x4, 0x7, 0x7, 0x10, 0x57df5d62, 0xdb, 0x1fa0860a, 0x7, 0x2a, 0x81, 0x2, 0x180001, 0x4007, 0x80002, 0x2, 0x2af, 0xf7, 0x5, 0x2, 0x6, 0x6, 0x4, 0x7, 0x4009, 0x2, 0x4, 0x0, 0x401, 0x752, 0x3, 0x3, 0x0, 0x10001, 0x2, 0x0, 0x7, 0x6, 0x3, 0x80000000, 0xfe000000, 0x5a3, 0x2, 0x84, 0x100, 0x5, 0x253, 0x81, 0xb, 0x5, 0x20006, 0x4005, 0x2, 0xb, 0x2, 0xd9a, 0xa, 0x1, 0xfffffffd, 0x6, 0x2, 0x5, 0x8, 0x7, 0x4, 0x2, 0x40, 0x8, 0x4, 0x4, 0x401, 0x66cd, 0x8, 0x8000, 0x2008d9f, 0x1fc, 0xffffffff, 0x4]}}) (async, rerun: 32) poll(&(0x7f0000000000), 0x20000000000000b5, 0x9) (async, rerun: 32) ioctl$sock_SIOCGPGRP(r9, 0x8904, &(0x7f0000000440)=0x0) syz_open_procfs$namespace(r10, &(0x7f0000000480)='ns/time_for_children\x00') r11 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='cgroup.stat\x00', 0x275a, 0x0) write$cgroup_subtree(r11, &(0x7f0000000200)=ANY=[], 0x10448) (async) mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x2000001, 0x12, r11, 0x0) getsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX3(r9, 0x84, 0x6f, &(0x7f0000000000)={0x0, 0x0, 0x0}, &(0x7f0000000180)=0x10) 349.848611ms ago: executing program 4 (id=7060): r0 = socket$kcm(0x29, 0x2, 0x0) mmap(&(0x7f0000000000/0x2000)=nil, 0x2000, 0x1000001, 0x32, 0xffffffffffffffff, 0x0) r1 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPCTNL_MSG_CT_DELETE(r1, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000000c0)={0x14, 0x2, 0x1, 0x201, 0x0, 0x0, {0x2, 0x0, 0x6}}, 0x14}, 0x1, 0x0, 0x0, 0x4000}, 0x4048890) ioctl$sock_kcm_SIOCKCMATTACH(r0, 0x89e0, &(0x7f0000000180)) r2 = socket$inet(0x2, 0x4000000000000001, 0x0) setsockopt$inet_tcp_int(r2, 0x6, 0x80000000000002, 0x0, 0x0) bind$inet(r2, &(0x7f0000000080)={0x2, 0x4e23, @multicast1}, 0x10) setsockopt$SO_ATTACH_FILTER(r2, 0x1, 0x1a, 0x0, 0x0) sendto$inet(r2, 0x0, 0x0, 0x200007fd, &(0x7f0000e68000)={0x2, 0x4e23, @local}, 0x10) setsockopt$inet_tcp_TCP_CONGESTION(r2, 0x6, 0xd, &(0x7f00000000c0)='veno', 0x4) close(0x3) r3 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCETHTOOL(r3, 0x8946, &(0x7f0000000040)={'pimreg\x00', &(0x7f0000000340)=@ethtool_drvinfo={0x3, "bf1b4087edfe5c4e7dbc31ec412ad7e146e549d45ef8ffffffffffffff00", "0b427558163b547e4025a26d22b39efd15a79bf13a99cfb77cc869a43447e49f", "87a906824296668daf4ebd4e96f95ec6d39d32a7238872c45dc65a18f8bf52af", "d8f28fdc3ec20b8facef9aa9d6f53dd7527511d9bb717ba90adf6ac47453a1f1", "53b30ad0a21007c3cb8fe4f81000946b00", "6ef390e675e608f371455a4e", 0x400003, 0x2aca, 0x7e0, 0x87d42, 0x9e}}) r4 = openat$tun(0xffffffffffffff9c, &(0x7f0000000000), 0x2241, 0x0) ioctl$TUNSETIFF(r4, 0x400454ca, &(0x7f0000000380)={'pimreg\x00', 0x5005}) unshare(0x20000400) r5 = bpf$MAP_CREATE(0x0, &(0x7f0000000640)=@base={0x17, 0x0, 0x4, 0xff, 0x0, 0xffffffffffffffff, 0x87}, 0x48) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000080)={{r5, 0xffffffffffffffff}, 0x0}, 0x20) ioctl$F2FS_IOC_WRITE_CHECKPOINT(r6, 0xf507, 0x0) mmap(&(0x7f0000000000/0x2000)=nil, 0x2000, 0x1000001, 0x32, 0xffffffffffffffff, 0x10ef8000) r7 = socket$inet6_icmp(0xa, 0x2, 0x3a) r8 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_route(r8, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000280)=@newlink={0x20, 0x10, 0xffffff1f, 0x0, 0x1, {0x0, 0x0, 0x0, 0x0, 0x801c, 0x4408}}, 0x20}, 0x1, 0x0, 0x0, 0x20048841}, 0x2c020004) bind$inet6(r7, &(0x7f0000000000)={0xa, 0x4e23, 0x5, @dev={0xfe, 0x80, '\x00', 0x41}, 0x80000000}, 0x1c) 348.947835ms ago: executing program 6 (id=7061): r0 = socket$igmp(0x2, 0x3, 0x2) r1 = openat$ppp(0xffffffffffffff9c, &(0x7f0000000000), 0xc8002, 0x0) ioctl$PPPIOCNEWUNIT(r1, 0xc004743e, &(0x7f00000000c0)) ioctl$PPPIOCSMAXCID(r1, 0x40047451, &(0x7f0000000200)=0x8) ioctl$PPPIOCSFLAGS1(r1, 0x40047459, &(0x7f0000000100)=0x4) r2 = openat$tun(0xffffffffffffff9c, &(0x7f00000001c0), 0x8001, 0x0) ioctl$TUNSETOFFLOAD(r2, 0x400454d0, 0x8) preadv(r1, &(0x7f0000000480)=[{&(0x7f0000000240)=""/95, 0x5f}, {&(0x7f0000000340)=""/98, 0x62}, {&(0x7f00000003c0)=""/169, 0xa9}], 0x3, 0x5, 0x9) pwritev(r1, &(0x7f0000000180)=[{&(0x7f0000000300)="00214500002c00000000400600000a0000010a000002005000500000000100000001601003090000000001010101", 0x2e}], 0x1, 0x0, 0x0) r3 = bpf$ITER_CREATE(0xb, &(0x7f0000000100), 0x0) r4 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000140)='blkio.bfq.io_service_time_recursive\x00', 0x275a, 0x0) write$cgroup_int(r4, &(0x7f0000000000), 0xffffff6a) mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000)='./cgroup/syz0\x00', 0x1ff) r5 = socket$inet6_udp(0xa, 0x2, 0x0) setsockopt$inet6_udp_encap(r5, 0x11, 0x64, &(0x7f0000000040)=0x2, 0x4) bind$inet6(r5, &(0x7f0000000000)={0xa, 0xe22, 0x0, @empty}, 0x1c) syz_emit_ethernet(0x3e, &(0x7f0000000080)={@random='\tE\x00', @local, @void, {@ipv6={0x86dd, @udp={0x0, 0x6, "010700", 0x8, 0x11, 0x0, @private1, @mcast2, {[], {0x4e24, 0xe22, 0x8}}}}}}, 0x0) r6 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000), 0x200002, 0x0) r7 = openat$cgroup_pressure(r6, &(0x7f0000001040)='memory.pressure\x00', 0x2, 0x0) write$cgroup_pressure(r7, &(0x7f0000000080)={'some', 0x20, 0x2000000008, 0x20, 0x10000000fffff}, 0x2f) write$cgroup_pressure(r7, &(0x7f0000001000)={'full', 0x20, 0x1, 0x20, 0xffffffffffffffff}, 0x2f) sendfile(r3, r4, 0x0, 0xffffffff000) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000440)={0x1f, 0x13, &(0x7f0000000640)=ANY=[@ANYBLOB="1800000000000000000000000400000018010000756c6c2500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b70300000000000085000000bc000000180100002020692500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000f8ffff850000000400000095"], &(0x7f0000000040)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x11}, 0x94) pwritev(r1, &(0x7f0000000080)=[{&(0x7f0000000140)="00214500080000000000000000000a0000010a00000200ff601003e8000000020101010100"/46, 0x2e}], 0x1, 0x0, 0x0) setsockopt$EBT_SO_SET_ENTRIES(r0, 0x0, 0x80, &(0x7f0000000000)=@broute={'broute\x00', 0x70, 0x0, 0x90, [0x0, 0x0, 0x0, 0x0, 0x200000001300, 0x200000001330], 0x0, 0x0, &(0x7f0000001300)=ANY=[@ANYBLOB="0000000000000000000000000000000000000000000000000000000000000000e3fffffffffffffffeffffff0000000000000000000000000000000000000000000000000000000000008c006d0c00000000000000000000ffffffff00000000000000000000000000000000000000000000000000e00000000000000000000000000000f9ffff00fcffffff00000000"]}, 0x108) 0s ago: executing program 4 (id=7062): r0 = bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000480)={0x6, 0x3, &(0x7f0000000680)=ANY=[@ANYBLOB="18000000020000000000000000ee000095"], &(0x7f00000002c0)='GPL\x00'}, 0x90) bpf$BPF_LINK_CREATE(0x1c, &(0x7f00000000c0)={r0, 0xffffffffffffffff, 0x2b, 0x0, @void}, 0x10) r1 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r1, &(0x7f0000000300)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f00000003c0)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a28000000000a0101000000005e1affd5020000000900010073797a300000000008000240000000032c000000030a01030000e6ff00000000020000000900010073797a30000000000900030073797a320000000014000000110001"], 0x7c}}, 0x20004810) sendmsg$NFT_BATCH(r1, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000240)={&(0x7f00000002c0)=ANY=[], 0x68}}, 0x40000) sendmsg$NFT_BATCH(r1, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000340)=ANY=[@ANYBLOB="140000001000010000000000000040000000000a40000000160a01080000000000000000020000000900020073797a30000000000900010073797a3000000000140003800800024000000000080001400000000014000000110001"], 0x68}}, 0x0) r2 = socket$nl_netfilter(0x10, 0x3, 0xc) r3 = socket(0x11, 0x2, 0x0) r4 = openat$tun(0xffffffffffffff9c, &(0x7f00000001c0), 0xa2f01, 0x0) ioctl$TUNSETIFF(r4, 0x400454ca, &(0x7f00000000c0)={'syzkaller1\x00', 0x6bf1c2d5adba8c32}) r5 = socket$kcm(0x2, 0xa, 0x2) ioctl$SIOCSIFHWADDR(r5, 0x8914, &(0x7f0000000180)={'syzkaller1\x00', @local}) r6 = socket$nl_netfilter(0x10, 0x3, 0xc) syz_emit_ethernet(0x0, 0x0, 0x0) bind$xdp(0xffffffffffffffff, &(0x7f0000000100)={0x2c, 0x2, 0x0, 0x40}, 0x10) sendmsg$NFT_BATCH(r6, &(0x7f0000000200)={0x0, 0xfffffed3, &(0x7f0000000380)={&(0x7f0000000040)=ANY=[@ANYBLOB="140000001000040000000000000000000000000a20000000000a01020000000000000000010000000900010073797a300000000058000000160a01000000000000000000010000000900010073797a30000000000900020073797a30000000002c0003800800014000000000080002400000000010000380140001007465616d3000000000000000000000005c000000160a0101000b000000000000010000000900020073797a30000000000900010073797a3000000000300003802c00038014"], 0xfc}}, 0x840) writev(r6, 0x0, 0x0) write$tun(r4, &(0x7f0000000280)={@val={0xa, 0x7}, @void, @eth={@empty, @dev={'\xaa\xaa\xaa\xaa\xaa', 0x29}, @val={@void, {0x8100, 0x5, 0x1, 0x6}}, {@ipv6={0x86dd, @generic={0x7, 0x6, "dfcfdc", 0x0, 0x29, 0xff, @remote, @initdev={0xfe, 0x88, '\x00', 0x0, 0x0}}}}}}, 0x3e) setsockopt(r3, 0x107, 0x1, &(0x7f0000000000)="110000000000060000071a80010061cc", 0x10) getsockopt$inet6_IPV6_IPSEC_POLICY(r3, 0x29, 0x22, &(0x7f0000000540)={{{@in=@loopback, @in6=@initdev}}, {{@in=@multicast2}, 0x0, @in6}}, &(0x7f0000000640)=0xe8) recvmsg(r2, &(0x7f0000000280)={0x0, 0x0, 0x0}, 0x0) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000b00)={0x3, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="18020000c1001000000000001c000000850000000e00000018010000786c6c2500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000007000000850000001700000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x2}, 0x94) r7 = bpf$PROG_LOAD(0x5, &(0x7f0000000780)={0x6, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, @fallback=0x4, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000000)={r7, 0x2000000, 0xe, 0x0, &(0x7f0000000bc0)="630b008646dc3f0adf33c9f7b986", 0x0, 0x1ff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x2}, 0x50) sendmsg$NFT_MSG_GETFLOWTABLE(r2, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000180)=ANY=[@ANYBLOB="1400000000000000000102000008000000000000"], 0x14}, 0x1, 0x0, 0x0, 0x44000}, 0x8094) kernel console output (not intermixed with test programs): 5] Bluetooth: hci4: command tx timeout [ 798.237088][T30983] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 798.321351][T31180] __nla_validate_parse: 5 callbacks suppressed [ 798.321376][T31180] netlink: 16 bytes leftover after parsing attributes in process `syz.0.5986'. [ 798.519460][T31184] netlink: 4 bytes leftover after parsing attributes in process `syz.0.5987'. [ 798.762328][T31198] netlink: 8 bytes leftover after parsing attributes in process `syz.2.5990'. [ 798.763071][T31197] gretap1: entered allmulticast mode [ 799.201626][T31148] lo speed is unknown, defaulting to 1000 [ 799.283738][T30983] veth0_vlan: entered promiscuous mode [ 799.310583][T30983] veth1_vlan: entered promiscuous mode [ 799.395878][T30983] veth0_macvtap: entered promiscuous mode [ 799.415888][T30983] veth1_macvtap: entered promiscuous mode [ 799.438355][T30983] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 799.469384][T30983] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 799.503906][T31219] syzkaller0: entered promiscuous mode [ 799.503932][T31219] syzkaller0: entered allmulticast mode [ 799.569107][T31219] xt_MASQUERADE: bad rangesize 20224 [ 799.592618][ T6229] netdevsim netdevsim4 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 799.604570][T21253] netdevsim netdevsim4 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 799.605990][T21257] netdevsim netdevsim4 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 799.690890][ T6227] netdevsim netdevsim4 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 799.761973][ T5635] Bluetooth: hci5: command tx timeout [ 799.901120][T31224] netlink: 4 bytes leftover after parsing attributes in process `syz.0.5996'. [ 799.918763][ T6229] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 799.918786][ T6229] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 800.089516][ T5635] Bluetooth: hci4: command tx timeout [ 800.195570][ T79] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 800.195593][ T79] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 800.198010][T31232] netlink: 120 bytes leftover after parsing attributes in process `syz.2.5997'. [ 800.375953][T31239] netlink: 12 bytes leftover after parsing attributes in process `syz.3.5998'. [ 800.887259][T31273] ksmbd: Unknown IPC event: 1, ignore. [ 800.931517][T31148] bridge0: port 1(bridge_slave_0) entered blocking state [ 800.932969][T31148] bridge0: port 1(bridge_slave_0) entered disabled state [ 800.933119][T31148] bridge_slave_0: entered allmulticast mode [ 800.935107][T31148] bridge_slave_0: entered promiscuous mode [ 800.950109][T31148] bridge0: port 2(bridge_slave_1) entered blocking state [ 800.950419][T31148] bridge0: port 2(bridge_slave_1) entered disabled state [ 800.952860][T31148] bridge_slave_1: entered allmulticast mode [ 800.962598][T31148] bridge_slave_1: entered promiscuous mode [ 801.081326][T31148] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 801.104126][T31148] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 801.178496][T31148] team0: Port device team_slave_0 added [ 801.194148][T31148] team0: Port device team_slave_1 added [ 801.277877][T31148] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 801.277896][T31148] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 801.313051][T31148] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 801.317089][T31148] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 801.317106][T31148] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 801.317132][T31148] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 801.454663][T31276] netlink: 48 bytes leftover after parsing attributes in process `syz.3.6005'. [ 801.484667][T31148] hsr_slave_0: entered promiscuous mode [ 801.487454][T31148] hsr_slave_1: entered promiscuous mode [ 801.502691][T31148] debugfs: 'hsr0' already exists in 'hsr' [ 801.502716][T31148] Cannot create hsr debugfs directory [ 801.506617][T31276] syz_tun: left promiscuous mode [ 801.508514][T31276] bridge0: left promiscuous mode [ 801.508538][T31276] bridge0: left allmulticast mode [ 801.550658][T31276] vlan0: left promiscuous mode [ 801.554954][T31276] geneve2: left promiscuous mode [ 801.557883][T31276] bond2: left promiscuous mode [ 801.557941][T31276] veth0_to_bond: left promiscuous mode [ 801.558258][T31276] bond2: left allmulticast mode [ 801.558276][T31276] veth0_to_bond: left allmulticast mode [ 801.558728][T31276] vxlan0: left promiscuous mode [ 801.558748][T31276] vxlan0: left allmulticast mode [ 801.564648][T31276] vxlan1: left promiscuous mode [ 801.564720][T31276] vxlan1: left allmulticast mode [ 801.571388][T31276] vxlan2: left promiscuous mode [ 801.571452][T31276] vxlan2: left allmulticast mode [ 801.571883][T31276] vxlan3: left promiscuous mode [ 801.571933][T31276] vxlan3: left allmulticast mode [ 801.572256][T31276] vxlan4: left promiscuous mode [ 801.572300][T31276] vxlan4: left allmulticast mode [ 801.583899][T31276] vxlan5: left promiscuous mode [ 801.583970][T31276] vxlan5: left allmulticast mode [ 801.584585][T31276] vxlan6: left promiscuous mode [ 801.584637][T31276] vxlan6: left allmulticast mode [ 801.584997][T31276] vxlan7: left promiscuous mode [ 801.585038][T31276] vxlan7: left allmulticast mode [ 801.596602][T31276] vxlan8: left promiscuous mode [ 801.596772][T31276] vxlan8: left allmulticast mode [ 801.597162][T31276] vxlan9: left promiscuous mode [ 801.597200][T31276] vxlan9: left allmulticast mode [ 801.597618][T31276] vxlan10: left promiscuous mode [ 801.597661][T31276] vxlan10: left allmulticast mode [ 801.617606][T31276] vxlan11: left promiscuous mode [ 801.617689][T31276] vxlan11: left allmulticast mode [ 801.618117][T31276] vxlan12: left promiscuous mode [ 801.618159][T31276] vxlan12: left allmulticast mode [ 801.621717][T31276] vxlan13: left promiscuous mode [ 801.621772][T31276] vxlan13: left allmulticast mode [ 801.634343][T31276] vxlan14: left promiscuous mode [ 801.634407][T31276] vxlan14: left allmulticast mode [ 801.634917][T31276] vxlan15: left promiscuous mode [ 801.634960][T31276] vxlan15: left allmulticast mode [ 801.651554][T31276] vlan3: left promiscuous mode [ 801.651579][T31276] gretap0: left promiscuous mode [ 801.677699][T31276] bond3: left promiscuous mode [ 801.677740][T31276] bridge3: left promiscuous mode [ 801.678035][T31276] bond3: left allmulticast mode [ 801.678097][T31276] bridge3: left allmulticast mode [ 801.720708][T31276] r0: left promiscuous mode [ 801.725627][T31276] bond0: left promiscuous mode [ 801.748994][T31276] gre2: left promiscuous mode [ 801.754735][T31276] bond8: left promiscuous mode [ 801.754806][T31276] bridge8: left promiscuous mode [ 801.811633][T31276] macvlan3: left promiscuous mode [ 801.811660][T31276] macvlan3: left allmulticast mode [ 801.839758][ T5635] Bluetooth: hci5: command tx timeout [ 801.855868][T31276] ipip0: left promiscuous mode [ 802.663508][T31296] vlan5: entered promiscuous mode [ 802.663547][T31296] bridge0: entered promiscuous mode [ 802.955573][T31284] netlink: 20 bytes leftover after parsing attributes in process `syz.4.6007'. [ 803.074323][T31148] netdevsim netdevsim5 netdevsim0: renamed from eth0 [ 803.098595][T31148] 8021q: adding VLAN 0 to HW filter on device netdevsim0 [ 803.175863][T31148] netdevsim netdevsim5 netdevsim1: renamed from eth1 [ 803.195494][T31148] 8021q: adding VLAN 0 to HW filter on device netdevsim1 [ 803.211083][T31317] netlink: 'syz.3.6013': attribute type 11 has an invalid length. [ 803.211106][T31317] netlink: 'syz.3.6013': attribute type 4 has an invalid length. [ 803.211121][T31317] netlink: 224 bytes leftover after parsing attributes in process `syz.3.6013'. [ 803.243191][T31148] netdevsim netdevsim5 netdevsim2: renamed from eth2 [ 803.286717][T31320] netlink: 'syz.3.6013': attribute type 11 has an invalid length. [ 803.286744][T31320] netlink: 'syz.3.6013': attribute type 4 has an invalid length. [ 803.286760][T31320] netlink: 224 bytes leftover after parsing attributes in process `syz.3.6013'. [ 803.291982][T31148] 8021q: adding VLAN 0 to HW filter on device netdevsim2 [ 803.316012][T31148] netdevsim netdevsim5 netdevsim3: renamed from eth3 [ 803.353559][T31148] 8021q: adding VLAN 0 to HW filter on device netdevsim3 [ 803.489128][T31330] netlink: 8 bytes leftover after parsing attributes in process `syz.2.6015'. [ 803.576654][T31333] netlink: 16 bytes leftover after parsing attributes in process `syz.0.6014'. [ 803.647752][T31330] netlink: 8 bytes leftover after parsing attributes in process `syz.2.6015'. [ 803.661730][T31333] bond1: option ad_actor_sys_prio: mode dependency failed, not supported in mode balance-rr(0) [ 803.663431][T31333] bond1 (unregistering): Released all slaves [ 803.725949][T31335] batman_adv: batadv0: Adding interface: macvtap1 [ 803.725972][T31335] batman_adv: batadv0: The MTU of interface macvtap1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 803.726003][T31335] batman_adv: batadv0: Not using interface macvtap1 (retrying later): interface not active [ 803.912666][T31345] netlink: 'syz.3.6018': attribute type 1 has an invalid length. [ 803.919889][ T5635] Bluetooth: hci5: command tx timeout [ 803.928817][T31341] batman_adv: batadv0: Removing interface: macvtap1 [ 803.968675][T31351] netlink: 36 bytes leftover after parsing attributes in process `syz.4.6016'. [ 804.095493][T31345] 8021q: adding VLAN 0 to HW filter on device bond11 [ 804.166390][ T1739] block nbd4: Possible stuck request ffff888027dd7000: control (read@0,1024B). Runtime 90 seconds [ 804.166439][ T1739] block nbd4: Possible stuck request ffff888027dd71c0: control (read@1024,1024B). Runtime 90 seconds [ 804.166513][ T1739] block nbd4: Possible stuck request ffff888027dd7380: control (read@2048,1024B). Runtime 90 seconds [ 804.166545][ T1739] block nbd4: Possible stuck request ffff888027dd7540: control (read@3072,1024B). Runtime 90 seconds [ 804.254681][ T31] audit: type=1804 audit(1790880312.581:30): pid=31359 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=invalid_pcr cause=open_writers comm="syz.2.6021" name="/newroot/551/cgroup.controllers" dev="tmpfs" ino=2843 res=1 errno=0 [ 804.254745][ T31] audit: type=1800 audit(1790880312.581:31): pid=31359 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.2.6021" name="cgroup.controllers" dev="tmpfs" ino=2843 res=0 errno=0 [ 804.443572][T31371] netlink: 32 bytes leftover after parsing attributes in process `syz.3.6025'. [ 804.608091][T31148] 8021q: adding VLAN 0 to HW filter on device bond0 [ 804.762074][T31148] 8021q: adding VLAN 0 to HW filter on device team0 [ 804.816129][ T6237] bridge0: port 1(bridge_slave_0) entered blocking state [ 804.816244][ T6237] bridge0: port 1(bridge_slave_0) entered forwarding state [ 804.870762][ T6227] bridge0: port 2(bridge_slave_1) entered blocking state [ 804.870939][ T6227] bridge0: port 2(bridge_slave_1) entered forwarding state [ 804.918825][T31384] netlink: 40 bytes leftover after parsing attributes in process `syz.0.6032'. [ 804.929211][T31384] RDS: rds_bind could not find a transport for ::ffff:172.30.0.1, load rds_tcp or rds_rdma? [ 804.952061][T31384] sctp: [Deprecated]: syz.0.6032 (pid 31384) Use of int in max_burst socket option. [ 804.952061][T31384] Use struct sctp_assoc_value instead [ 805.044075][T31385] netlink: 12 bytes leftover after parsing attributes in process `syz.4.6030'. [ 805.045671][T31389] netlink: 4 bytes leftover after parsing attributes in process `syz.0.6033'. [ 805.126677][T31391] netlink: 32 bytes leftover after parsing attributes in process `syz.0.6034'. [ 805.644421][T31409] netlink: 4 bytes leftover after parsing attributes in process `syz.2.6038'. [ 805.999835][ T5635] Bluetooth: hci5: command tx timeout [ 806.353663][T31148] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 807.179000][T31148] veth0_vlan: entered promiscuous mode [ 807.208089][T31148] veth1_vlan: entered promiscuous mode [ 807.336907][T31148] veth0_macvtap: entered promiscuous mode [ 807.366005][T31148] veth1_macvtap: entered promiscuous mode [ 807.435175][T31148] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 807.504602][T31148] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 807.581851][T31425] netdevsim netdevsim5 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 807.582772][ T6237] netdevsim netdevsim5 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 807.583718][ T6237] netdevsim netdevsim5 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 807.583764][ T6237] netdevsim netdevsim5 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 807.801251][T31480] netlink: 'syz.4.6050': attribute type 1 has an invalid length. [ 807.865938][T31485] IPVS: length: 30 != 8 [ 807.875540][T31485] netlink: 'syz.0.6051': attribute type 1 has an invalid length. [ 807.909179][T31480] netlink: 'syz.4.6050': attribute type 1 has an invalid length. [ 807.978298][T31485] bond1: entered promiscuous mode [ 807.978859][T31485] 8021q: adding VLAN 0 to HW filter on device bond1 [ 808.014533][T31481] veth1_to_batadv: entered promiscuous mode [ 808.014561][T31481] veth1_to_batadv: entered allmulticast mode [ 808.099164][T31485] 8021q: adding VLAN 0 to HW filter on device bond1 [ 808.108012][T31485] bond1: (slave xfrm1): The slave device specified does not support setting the MAC address [ 808.108041][T31485] bond1: (slave xfrm1): Setting fail_over_mac to active for active-backup mode [ 808.134597][T31485] bond1: (slave xfrm1): making interface the new active one [ 808.134627][T31485] xfrm1: entered promiscuous mode [ 808.179502][T31485] xfrm1: left promiscuous mode [ 808.233029][T31426] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 808.233071][T31426] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 808.534334][T31488] ovs-dp0: entered promiscuous mode [ 808.553908][T31425] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 808.553933][T31425] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 808.758904][T31511] __nla_validate_parse: 9 callbacks suppressed [ 808.758928][T31511] netlink: 40 bytes leftover after parsing attributes in process `syz.2.6055'. [ 808.785873][T21252] pim6reg: left allmulticast mode [ 808.957040][T31514] netlink: 16 bytes leftover after parsing attributes in process `syz.4.6057'. [ 809.445633][T21252] bond6 (unregistering): (slave bridge4): Releasing backup interface [ 809.445666][T21252] bridge4 (unregistering): left promiscuous mode [ 809.536372][T21252] bond0 (unregistering): Released all slaves [ 809.559218][T21252] bond1 (unregistering): Released all slaves [ 809.578218][T21252] bond2 (unregistering): (slave veth4): Releasing backup interface [ 809.579218][T21252] bond2 (unregistering): Released all slaves [ 809.616331][T21252] bond3 (unregistering): Released all slaves [ 809.636262][T21252] bond4 (unregistering): (slave bond5): Releasing backup interface [ 809.636293][T21252] bond5 (unregistering): left promiscuous mode [ 809.637163][T21252] bond4 (unregistering): Released all slaves [ 809.680551][T21252] bond5 (unregistering): Released all slaves [ 809.698703][T21252] bond6 (unregistering): Released all slaves [ 809.718089][T21252] bond7 (unregistering): Released all slaves [ 809.736290][T21252] bond8 (unregistering): Released all slaves [ 809.767788][T31512] gre3: entered promiscuous mode [ 809.767811][T31512] gre3: entered allmulticast mode [ 810.107923][T21252] ovs-s!!: left promiscuous mode [ 810.165077][T21252] ovs-dp0: left promiscuous mode [ 810.325270][T31527] syzkaller0: entered promiscuous mode [ 810.325298][T31527] syzkaller0: entered allmulticast mode [ 810.389769][T21252] tipc: Left network mode [ 810.825119][T31556] netlink: 28 bytes leftover after parsing attributes in process `syz.0.6064'. [ 810.874848][T31558] netlink: 28 bytes leftover after parsing attributes in process `syz.0.6064'. [ 811.008526][T31562] openvswitch: netlink: nsh attr 1 has unexpected len 335 expected 8 [ 811.214626][T31564] netlink: zone id is out of range [ 811.214645][T31564] netlink: zone id is out of range [ 811.214656][T31564] netlink: zone id is out of range [ 811.214665][T31564] netlink: zone id is out of range [ 811.214675][T31564] netlink: zone id is out of range [ 811.214685][T31564] netlink: zone id is out of range [ 811.214697][T31564] netlink: zone id is out of range [ 811.214707][T31564] netlink: zone id is out of range [ 811.214717][T31564] netlink: zone id is out of range [ 815.981480][T31557] tipc: Started in network mode [ 815.981517][T31557] tipc: Node identity ac14140f, cluster identity 4711 [ 815.981785][T31557] tipc: New replicast peer: 255.255.255.255 [ 815.982400][T31557] tipc: Enabled bearer , priority 10 [ 815.983290][T31556] bond_slave_0: entered promiscuous mode [ 815.983311][T31556] bond_slave_0: entered allmulticast mode [ 816.415950][T31594] netlink: 'syz.5.6074': attribute type 5 has an invalid length. [ 816.470885][T31604] netlink: 'syz.5.6074': attribute type 5 has an invalid length. [ 817.057866][T31614] netlink: 'syz.5.6079': attribute type 70 has an invalid length. [ 817.106885][T19263] tipc: Node number set to 2886997007 [ 817.237704][T31618] netlink: 12 bytes leftover after parsing attributes in process `syz.4.6081'. [ 817.255984][T31620] netlink: 4 bytes leftover after parsing attributes in process `syz.5.6079'. [ 817.375554][T31624] netlink: 8 bytes leftover after parsing attributes in process `syz.5.6079'. [ 817.789559][T21252] hsr_slave_0: left promiscuous mode [ 818.208794][T31638] netlink: 8 bytes leftover after parsing attributes in process `syz.5.6086'. [ 818.208836][T31638] netlink: 'syz.5.6086': attribute type 30 has an invalid length. [ 818.274949][T31645] netlink: 8 bytes leftover after parsing attributes in process `syz.5.6086'. [ 818.274988][T31645] netlink: 'syz.5.6086': attribute type 30 has an invalid length. [ 818.588471][T31425] smbdirect: ib_dev[syz2] removed [ 818.635451][T12847] infiniband syz2: ib_query_port failed (-19) [ 818.694634][T31638] vxlan0: entered promiscuous mode [ 818.694662][T31638] vxlan0: entered allmulticast mode [ 818.714106][T21155] netdevsim netdevsim5 netdevsim3: set [0, 0] type 1 family 0 port 8472 - 0 [ 818.718602][T31431] netdevsim netdevsim5 netdevsim2: set [0, 0] type 1 family 0 port 8472 - 0 [ 818.718785][T31431] netdevsim netdevsim5 netdevsim1: set [0, 0] type 1 family 0 port 8472 - 0 [ 818.718896][T31431] netdevsim netdevsim5 netdevsim0: set [0, 0] type 1 family 0 port 8472 - 0 [ 818.751377][T31644] syzkaller0: entered promiscuous mode [ 818.751403][T31644] syzkaller0: entered allmulticast mode [ 818.813391][T31648] tipc: Enabled bearer , priority 0 [ 818.851395][T31656] netlink: 12 bytes leftover after parsing attributes in process `syz.4.6088'. [ 819.087642][T21252] IPVS: stop unused estimator thread 0... [ 819.151009][T31666] sctp: [Deprecated]: syz.4.6090 (pid 31666) Use of struct sctp_assoc_value in delayed_ack socket option. [ 819.151009][T31666] Use struct sctp_sack_info instead [ 819.196802][T31669] ±ÿ: renamed from lo (while UP) [ 819.504105][T31679] syz.2.6097: vmalloc error: size 8589938688, exceeds total pages, mode:0x400dc0(GFP_KERNEL_ACCOUNT|__GFP_ZERO), nodemask=(null),cpuset=/,mems_allowed=0-1 [ 819.504202][T31679] CPU: 1 UID: 0 PID: 31679 Comm: syz.2.6097 Not tainted syzkaller #0 PREEMPT(full) [ 819.504229][T31679] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 09/16/2026 [ 819.504245][T31679] Call Trace: [ 819.504255][T31679] [ 819.504265][T31679] dump_stack_lvl+0xe8/0x150 [ 819.504317][T31679] warn_alloc+0x24d/0x270 [ 819.504343][T31679] ? kasan_save_track+0x4f/0x80 [ 819.504368][T31679] ? kasan_save_track+0x3e/0x80 [ 819.504396][T31679] ? __pfx_warn_alloc+0x10/0x10 [ 819.504418][T31679] ? __x64_sys_setsockopt+0x13d/0x1b0 [ 819.504450][T31679] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 819.504497][T31679] __vmalloc_node_range_noprof+0x127/0x1540 [ 819.504565][T31679] ? rcu_is_watching+0x16/0xb0 [ 819.504601][T31679] ? __pfx___vmalloc_node_range_noprof+0x10/0x10 [ 819.504638][T31679] ? __kmalloc_cache_noprof+0x321/0x600 [ 819.504664][T31679] ? __kmalloc_cache_noprof+0x14d/0x600 [ 819.504689][T31679] ? xskq_create+0x56/0x220 [ 819.504724][T31679] xskq_create+0x148/0x220 [ 819.504754][T31679] ? xsk_init_queue+0x8a/0xe0 [ 819.504786][T31679] xsk_init_queue+0x8a/0xe0 [ 819.504818][T31679] xsk_setsockopt+0x52a/0x960 [ 819.504849][T31679] ? __pfx_xsk_setsockopt+0x10/0x10 [ 819.504878][T31679] ? __pfx_aa_sk_perm+0x10/0x10 [ 819.504919][T31679] ? bpf_lsm_socket_setsockopt+0x9/0x20 [ 819.504951][T31679] ? __pfx_xsk_setsockopt+0x10/0x10 [ 819.504981][T31679] do_sock_setsockopt+0x17c/0x1b0 [ 819.505018][T31679] __x64_sys_setsockopt+0x13d/0x1b0 [ 819.505057][T31679] do_syscall_64+0x166/0x520 [ 819.505090][T31679] ? trace_irq_disable+0x3b/0x140 [ 819.505114][T31679] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 819.505138][T31679] ? clear_bhb_loop+0x70/0xc0 [ 819.505169][T31679] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 819.505193][T31679] RIP: 0033:0x7ff96339e159 [ 819.505215][T31679] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 819.505235][T31679] RSP: 002b:00007ff964203028 EFLAGS: 00000246 ORIG_RAX: 0000000000000036 [ 819.505259][T31679] RAX: ffffffffffffffda RBX: 00007ff963625fa0 RCX: 00007ff96339e159 [ 819.505277][T31679] RDX: 0000000000000006 RSI: 000000000000011b RDI: 0000000000000007 [ 819.505293][T31679] RBP: 00007ff96343506b R08: 0000000000000004 R09: 0000000000000000 [ 819.505309][T31679] R10: 0000200000000000 R11: 0000000000000246 R12: 0000000000000000 [ 819.505325][T31679] R13: 00007ff963626038 R14: 00007ff963625fa0 R15: 00007ffda3103478 [ 819.505364][T31679] [ 819.505469][T31679] Mem-Info: [ 819.505482][T31679] active_anon:15949 inactive_anon:0 isolated_anon:0 [ 819.505482][T31679] active_file:18 inactive_file:43742 isolated_file:0 [ 819.505482][T31679] unevictable:0 dirty:219 writeback:0 [ 819.505482][T31679] slab_reclaimable:12519 slab_unreclaimable:121189 [ 819.505482][T31679] mapped:35885 shmem:535 pagetables:1592 [ 819.505482][T31679] sec_pagetables:0 bounce:0 [ 819.505482][T31679] kernel_misc_reclaimable:0 [ 819.505482][T31679] free:1274900 free_pcp:12737 free_cma:0 [ 819.505567][T31679] Node 0 active_anon:63796kB inactive_anon:0kB active_file:72kB inactive_file:174760kB unevictable:0kB isolated(anon):0kB isolated(file):0kB mapped:143540kB dirty:876kB writeback:0kB shmem:2140kB shmem_thp:0kB shmem_pmdmapped:0kB anon_thp:0kB kernel_stack:16928kB pagetables:6236kB sec_pagetables:0kB all_unreclaimable? no Balloon:0kB gpu_active:0kB gpu_reclaim:0kB [ 819.505632][T31679] Node 1 active_anon:0kB inactive_anon:0kB active_file:0kB inactive_file:208kB unevictable:0kB isolated(anon):0kB isolated(file):0kB mapped:0kB dirty:0kB writeback:0kB shmem:0kB shmem_thp:0kB shmem_pmdmapped:0kB anon_thp:0kB kernel_stack:64kB pagetables:132kB sec_pagetables:0kB all_unreclaimable? no Balloon:0kB gpu_active:0kB gpu_reclaim:0kB [ 819.505696][T31679] Node 0 DMA free:15360kB boost:0kB min:208kB low:260kB high:312kB reserved_highatomic:0kB free_highatomic:0kB active_anon:0kB inactive_anon:0kB active_file:0kB inactive_file:0kB unevictable:0kB writepending:0kB zspages:0kB present:15992kB managed:15360kB mlocked:0kB bounce:0kB free_pcp:0kB local_pcp:0kB free_cma:0kB [ 819.505762][T31679] lowmem_reserve[]: 0 2487 2487 2487 2487 [ 819.505808][T31679] Node 0 DMA32 free:1141620kB boost:0kB min:34140kB low:42672kB high:51204kB reserved_highatomic:0kB free_highatomic:0kB active_anon:63796kB inactive_anon:0kB active_file:72kB inactive_file:174760kB unevictable:0kB writepending:876kB zspages:0kB present:3129332kB managed:2546796kB mlocked:0kB bounce:0kB free_pcp:50940kB local_pcp:20452kB free_cma:0kB [ 819.505879][T31679] lowmem_reserve[]: 0 0 0 0 0 [ 819.505919][T31679] Node 0 Normal free:0kB boost:0kB min:0kB low:0kB high:0kB reserved_highatomic:0kB free_highatomic:0kB active_anon:0kB inactive_anon:0kB active_file:0kB inactive_file:0kB unevictable:0kB writepending:0kB zspages:0kB present:1048580kB managed:0kB mlocked:0kB bounce:0kB free_pcp:0kB local_pcp:0kB free_cma:0kB [ 819.505979][T31679] lowmem_reserve[]: 0 0 0 0 0 [ 819.506018][T31679] Node 1 Normal free:3942620kB boost:0kB min:55760kB low:69700kB high:83640kB reserved_highatomic:0kB free_highatomic:0kB active_anon:0kB inactive_anon:0kB active_file:0kB inactive_file:208kB unevictable:0kB writepending:0kB zspages:0kB present:4194300kB managed:4111104kB mlocked:0kB bounce:0kB free_pcp:0kB local_pcp:0kB free_cma:0kB [ 819.506083][T31679] lowmem_reserve[]: 0 0 0 0 0 [ 819.506126][T31679] Node 0 DMA: 0*4kB 0*8kB 0*16kB 0*32kB 0*64kB 0*128kB 0*256kB 0*512kB 1*1024kB (U) 1*2048kB (M) 3*4096kB (M) = 15360kB [ 819.506260][T31679] Node 0 DMA32: 1661*4kB (UM) 474*8kB (UME) 239*16kB (UM) 614*32kB (UM) 315*64kB (UME) 57*128kB (UME) 26*256kB (U) 27*512kB (U) 7*1024kB (UME) 4*2048kB (UM) 255*4096kB (UM) = 1141684kB [ 819.506449][T31679] Node 0 Normal: 0*4kB 0*8kB 0*16kB 0*32kB 0*64kB 0*128kB 0*256kB 0*512kB 0*1024kB 0*2048kB 0*4096kB = 0kB [ 819.506577][T31679] Node 1 Normal: 3*4kB (UM) 2*8kB (UM) 6*16kB (UM) 9*32kB (UM) 7*64kB (UM) 5*128kB (UM) 3*256kB (UM) 2*512kB (M) 1*1024kB (M) 1*2048kB (U) 961*4096kB (M) = 3942620kB [ 819.506768][T31679] Node 0 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=1048576kB [ 819.506787][T31679] Node 0 hugepages_total=2 hugepages_free=2 hugepages_surp=0 hugepages_size=2048kB [ 819.506814][T31679] Node 1 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=1048576kB [ 819.506834][T31679] Node 1 hugepages_total=2 hugepages_free=2 hugepages_surp=0 hugepages_size=2048kB [ 819.506853][T31679] 44291 total pagecache pages [ 819.507725][T31679] 0 pages in swap cache [ 819.507739][T31679] Free swap = 124996kB [ 819.507749][T31679] Total swap = 124996kB [ 819.507759][T31679] 2097051 pages RAM [ 819.507769][T31679] 0 pages HighMem/MovableOnly [ 819.507778][T31679] 428736 pages reserved [ 819.507787][T31679] 0 pages cma reserved [ 820.313088][T31679] Bluetooth: hci0: Opcode 0x0c03 failed: -4 [ 820.313561][T31683] Bluetooth: hci0: Opcode 0x0c03 failed: -4 [ 820.748137][T31716] net_ratelimit: 3 callbacks suppressed [ 820.748159][T31716] ip_tables: iptables: counters copy to user failed while replacing table [ 821.016457][T31723] sctp: [Deprecated]: syz.5.6108 (pid 31723) Use of int in maxseg socket option. [ 821.016457][T31723] Use struct sctp_assoc_value instead [ 821.154679][T31727] netlink: 8 bytes leftover after parsing attributes in process `syz.4.6110'. [ 821.183115][T31727] ip_tables: iptables: counters copy to user failed while replacing table [ 821.200877][T31727] netlink: 48 bytes leftover after parsing attributes in process `syz.4.6110'. [ 821.442111][T31743] IPVS: sync thread started: state = BACKUP, mcast_ifn = vcan0, syncid = 0, id = 0 [ 821.563270][T31742] netlink: 24 bytes leftover after parsing attributes in process `syz.3.6112'. [ 821.686647][T31753] netlink: 4 bytes leftover after parsing attributes in process `syz.5.6115'. [ 821.726783][T31751] netlink: 'syz.5.6115': attribute type 62 has an invalid length. [ 822.044254][T31763] vlan4: entered allmulticast mode [ 822.167716][T31768] Can not set IPV6_FL_F_REFLECT if flowlabel_consistency sysctl is enable [ 822.315963][T31775] netlink: 8 bytes leftover after parsing attributes in process `syz.5.6123'. [ 822.600769][T31793] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 823.232526][ T31] audit: type=1804 audit(1790880331.551:32): pid=31804 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=invalid_pcr cause=open_writers comm="syz.5.6129" name="/newroot/21/cgroup.controllers" dev="tmpfs" ino=128 res=1 errno=0 [ 823.232801][ T31] audit: type=1800 audit(1790880331.561:33): pid=31804 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.5.6129" name="cgroup.controllers" dev="tmpfs" ino=128 res=0 errno=0 [ 823.547236][T31814] netlink: 12 bytes leftover after parsing attributes in process `syz.2.6131'. [ 823.728930][T31819] netdevsim netdevsim4 netdevsim0: entered promiscuous mode [ 823.770941][T31821] xt_SECMARK: mode already set to 1 cannot mix with rules for mode 9 [ 823.771733][T31822] xt_SECMARK: mode already set to 1 cannot mix with rules for mode 9 [ 824.147577][T31830] netlink: 'syz.2.6137': attribute type 5 has an invalid length. [ 824.335770][T31840] netlink: 16 bytes leftover after parsing attributes in process `syz.2.6139'. [ 824.343983][T31840] netlink: 12 bytes leftover after parsing attributes in process `syz.2.6139'. [ 824.604186][T31846] ipvlan0: entered promiscuous mode [ 824.711539][T31851] netlink: 68 bytes leftover after parsing attributes in process `syz.5.6138'. [ 824.751889][T31858] netlink: 'syz.2.6142': attribute type 1 has an invalid length. [ 824.825589][T31858] 8021q: adding VLAN 0 to HW filter on device bond10 [ 824.874241][T31858] bond10: (slave gretap1): making interface the new active one [ 824.898927][T31858] bond10: (slave gretap1): Enslaving as an active interface with an up link [ 825.154552][T31879] netlink: 68 bytes leftover after parsing attributes in process `syz.2.6148'. [ 825.842092][ T5618] Bluetooth: hci6: unexpected cc 0x0c03 length: 249 > 1 [ 825.856934][ T5618] Bluetooth: hci6: unexpected cc 0x1003 length: 249 > 9 [ 825.870796][ T5618] Bluetooth: hci6: unexpected cc 0x1001 length: 249 > 9 [ 825.873657][ T5618] Bluetooth: hci6: unexpected cc 0x0c23 length: 249 > 4 [ 825.875011][ T5618] Bluetooth: hci6: unexpected cc 0x0c38 length: 249 > 2 [ 828.004446][ T5618] Bluetooth: hci6: command tx timeout [ 829.386798][T31924] netlink: 'syz.2.6157': attribute type 4 has an invalid length. [ 829.386822][T31924] netlink: 9 bytes leftover after parsing attributes in process `syz.2.6157'. [ 829.474062][T31927] mac80211_hwsim hwsim74 wlan0: entered promiscuous mode [ 829.938972][T31947] netlink: 28 bytes leftover after parsing attributes in process `syz.2.6166'. [ 829.974634][T31948] TC_ACT_REPEAT abuse ? [ 830.081895][ T5618] Bluetooth: hci6: command tx timeout [ 830.218225][T31957] unsupported nlmsg_type 40 [ 830.295966][T31959] ip6_tables: ip6tables: counters copy to user failed while replacing table [ 830.426383][T31965] netlink: 4 bytes leftover after parsing attributes in process `syz.4.6174'. [ 830.943571][T31898] bridge0: port 1(bridge_slave_0) entered blocking state [ 830.943833][T31898] bridge0: port 1(bridge_slave_0) entered disabled state [ 830.944003][T31898] bridge_slave_0: entered allmulticast mode [ 830.973684][T31898] bridge_slave_0: entered promiscuous mode [ 830.998173][T31898] bridge0: port 2(bridge_slave_1) entered blocking state [ 830.998573][T31898] bridge0: port 2(bridge_slave_1) entered disabled state [ 830.998743][T31898] bridge_slave_1: entered allmulticast mode [ 831.028411][T31898] bridge_slave_1: entered promiscuous mode [ 831.106223][T31898] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 831.124846][T31898] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 831.166863][T31898] team0: Port device team_slave_0 added [ 831.176131][T31898] team0: Port device team_slave_1 added [ 831.215350][T31898] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 831.215370][T31898] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 831.215399][T31898] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 831.217771][T31898] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 831.217788][T31898] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 831.217816][T31898] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 831.432956][T31898] hsr_slave_0: entered promiscuous mode [ 831.434237][T31898] hsr_slave_1: entered promiscuous mode [ 831.438239][T31898] debugfs: 'hsr0' already exists in 'hsr' [ 831.438261][T31898] Cannot create hsr debugfs directory [ 831.496129][T31994] netlink: 8 bytes leftover after parsing attributes in process `syz.5.6182'. [ 831.508999][T31994] netlink: 12 bytes leftover after parsing attributes in process `syz.5.6182'. [ 831.653557][T31996] openvswitch: netlink: IPv4 tunnel dst address is zero [ 832.057482][T32013] xt_nat: multiple ranges no longer supported [ 832.159872][ T5618] Bluetooth: hci6: command tx timeout [ 832.503275][T32027] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 832.685013][T31898] netdevsim netdevsim6 netdevsim0: renamed from eth0 [ 832.705635][T31898] 8021q: adding VLAN 0 to HW filter on device netdevsim0 [ 832.708525][T31898] netdevsim netdevsim6 netdevsim1: renamed from eth1 [ 832.735777][T31898] 8021q: adding VLAN 0 to HW filter on device netdevsim1 [ 832.737226][T31898] netdevsim netdevsim6 netdevsim2: renamed from eth2 [ 832.766177][T31898] 8021q: adding VLAN 0 to HW filter on device netdevsim2 [ 832.769148][T31898] netdevsim netdevsim6 netdevsim3: renamed from eth3 [ 832.822249][T31898] 8021q: adding VLAN 0 to HW filter on device netdevsim3 [ 832.886763][T32048] netlink: 60 bytes leftover after parsing attributes in process `syz.4.6189'. [ 832.887147][T32048] netlink: 60 bytes leftover after parsing attributes in process `syz.4.6189'. [ 832.906306][T32048] netlink: 60 bytes leftover after parsing attributes in process `syz.4.6189'. [ 832.918216][T32048] netlink: 60 bytes leftover after parsing attributes in process `syz.4.6189'. [ 832.918578][T32048] netlink: 60 bytes leftover after parsing attributes in process `syz.4.6189'. [ 833.181829][T31898] 8021q: adding VLAN 0 to HW filter on device bond0 [ 833.218907][T31898] 8021q: adding VLAN 0 to HW filter on device team0 [ 833.233562][T21155] bridge0: port 1(bridge_slave_0) entered blocking state [ 833.233682][T21155] bridge0: port 1(bridge_slave_0) entered forwarding state [ 833.261114][T21155] bridge0: port 2(bridge_slave_1) entered blocking state [ 833.261228][T21155] bridge0: port 2(bridge_slave_1) entered forwarding state [ 833.405415][T32057] syzkaller0: entered promiscuous mode [ 833.405441][T32057] syzkaller0: entered allmulticast mode [ 833.883882][T32074] A link change request failed with some changes committed already. Interface @ may have been left with an inconsistent configuration, please check. [ 833.884607][T32074] A link change request failed with some changes committed already. Interface @ may have been left with an inconsistent configuration, please check. [ 833.885367][T32074] A link change request failed with some changes committed already. Interface @ may have been left with an inconsistent configuration, please check. [ 834.053871][T32083] netlink: 'syz.2.6199': attribute type 1 has an invalid length. [ 834.112648][T32083] 8021q: adding VLAN 0 to HW filter on device bond11 [ 834.232238][T32083] gretap2: entered promiscuous mode [ 834.245885][ T1739] block nbd4: Possible stuck request ffff888027dd7000: control (read@0,1024B). Runtime 120 seconds [ 834.245943][ T1739] block nbd4: Possible stuck request ffff888027dd71c0: control (read@1024,1024B). Runtime 120 seconds [ 834.246669][ T1739] block nbd4: Possible stuck request ffff888027dd7380: control (read@2048,1024B). Runtime 120 seconds [ 834.246708][ T1739] block nbd4: Possible stuck request ffff888027dd7540: control (read@3072,1024B). Runtime 120 seconds [ 834.418271][T32083] bond12 (unregistering): Released all slaves [ 834.565554][T31898] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 834.566057][T32099] syzkaller0: entered promiscuous mode [ 834.566080][T32099] syzkaller0: entered allmulticast mode [ 834.864396][T32118] __nla_validate_parse: 20 callbacks suppressed [ 834.864421][T32118] netlink: 12 bytes leftover after parsing attributes in process `syz.2.6204'. [ 835.095237][T31428] IPVS: starting estimator thread 0... [ 835.096778][T32131] IPVS: wrr: FWM 3 0x00000003 - no destination available [ 835.096886][ C1] IPVS: wrr: FWM 3 0x00000003 - no destination available [ 835.180524][T32132] IPVS: using max 25 ests per chain, 60000 per kthread [ 835.232262][T31898] veth0_vlan: entered promiscuous mode [ 835.264879][T31898] veth1_vlan: entered promiscuous mode [ 835.321965][T31898] veth0_macvtap: entered promiscuous mode [ 835.340481][T31898] veth1_macvtap: entered promiscuous mode [ 835.372678][T31898] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 835.392640][T31898] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 835.405295][T32139] netlink: 12 bytes leftover after parsing attributes in process `syz.5.6211'. [ 835.425470][T32137] vlan2: entered promiscuous mode [ 835.425489][T32137] bridge0: entered promiscuous mode [ 835.590256][T31426] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 835.590281][T31426] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 835.640625][T21252] netdevsim netdevsim6 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 835.640989][T21252] netdevsim netdevsim6 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 835.641300][T21252] netdevsim netdevsim6 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 835.641339][T21252] netdevsim netdevsim6 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 835.704470][T31429] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 835.704493][T31429] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 836.315269][ T5635] Bluetooth: hci7: unexpected cc 0x0c03 length: 249 > 1 [ 836.318771][ T5635] Bluetooth: hci7: unexpected cc 0x1003 length: 249 > 9 [ 836.341707][ T5635] Bluetooth: hci7: unexpected cc 0x1001 length: 249 > 9 [ 836.361131][ T5635] Bluetooth: hci7: unexpected cc 0x0c23 length: 249 > 4 [ 836.363428][ T5635] Bluetooth: hci7: unexpected cc 0x0c38 length: 249 > 2 [ 836.962794][T19507] : (slave syz_tun): Releasing backup interface [ 836.983311][T31429] smbdirect: ib_dev[s`z1] removed [ 837.005604][T32180] netlink: 28 bytes leftover after parsing attributes in process `syz.5.6221'. [ 837.005634][T32180] netlink: 28 bytes leftover after parsing attributes in process `syz.5.6221'. [ 837.005845][T10118] infiniband s`z1: ib_query_port failed (-19) [ 837.050271][T32183] netlink: 12 bytes leftover after parsing attributes in process `syz.6.6222'. [ 837.598062][T32201] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 837.731214][T32207] netlink: 12 bytes leftover after parsing attributes in process `syz.6.6233'. [ 837.796795][T32208] netlink: 'syz.5.6232': attribute type 13 has an invalid length. [ 837.884709][T31431] IPVS: starting estimator thread 0... [ 837.970745][T32215] IPVS: using max 24 ests per chain, 57600 per kthread [ 838.078401][T32213] IPVS: sh: FWM 3 0x00000003 - no destination available [ 838.166806][T32228] input: Bluetooth HID Boot Protocol Device as /devices/virtual/bluetooth/hci7/hci7:200/input8 [ 838.342986][ T5635] Bluetooth: hci1: unexpected cc 0x0c03 length: 249 > 1 [ 838.361569][ T5635] Bluetooth: hci1: unexpected cc 0x1003 length: 249 > 9 [ 838.366713][ T5635] Bluetooth: hci1: unexpected cc 0x1001 length: 249 > 9 [ 838.390759][ T5635] Bluetooth: hci1: unexpected cc 0x0c23 length: 249 > 4 [ 838.403678][ T5635] Bluetooth: hci1: unexpected cc 0x0c38 length: 249 > 2 [ 838.489978][T32234] netlink: 4 bytes leftover after parsing attributes in process `syz.6.6239'. [ 838.490390][ T5618] Bluetooth: hci7: command tx timeout [ 838.495986][T32234] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 838.496012][T32234] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 838.678226][T32234] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 838.678255][T32234] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 839.258570][T32249] netlink: 8 bytes leftover after parsing attributes in process `syz.4.6241'. [ 839.272797][T32250] netlink: 12 bytes leftover after parsing attributes in process `syz.5.6242'. [ 839.586567][T32260] sctp: [Deprecated]: syz.5.6244 (pid 32260) Use of int in max_burst socket option. [ 839.586567][T32260] Use struct sctp_assoc_value instead [ 839.653225][T32269] x_tables: unsorted entry at hook 1 [ 839.672264][T32269] netlink: 16 bytes leftover after parsing attributes in process `syz.4.6245'. [ 839.674645][T32269] netlink: 'syz.4.6245': attribute type 2 has an invalid length. [ 839.674672][T32269] netlink: 'syz.4.6245': attribute type 2 has an invalid length. [ 839.944884][T32156] bridge0: port 1(bridge_slave_0) entered blocking state [ 839.945789][T32156] bridge0: port 1(bridge_slave_0) entered disabled state [ 839.946060][T32156] bridge_slave_0: entered allmulticast mode [ 839.975179][T32156] bridge_slave_0: entered promiscuous mode [ 840.012569][T32156] bridge0: port 2(bridge_slave_1) entered blocking state [ 840.013650][T32156] bridge0: port 2(bridge_slave_1) entered disabled state [ 840.013864][T32156] bridge_slave_1: entered allmulticast mode [ 840.033691][T32156] bridge_slave_1: entered promiscuous mode [ 840.126390][T32156] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 840.148164][T32156] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 840.260205][T32156] team0: Port device team_slave_0 added [ 840.268872][T32156] team0: Port device team_slave_1 added [ 840.363096][T32156] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 840.363117][T32156] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 840.363146][T32156] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 840.369262][T32156] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 840.405453][T32156] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 840.405491][T32156] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 840.479856][ T5618] Bluetooth: hci1: command tx timeout [ 840.569361][ T5618] Bluetooth: hci7: command tx timeout [ 840.575630][T32156] hsr_slave_0: entered promiscuous mode [ 840.576740][T32156] hsr_slave_1: entered promiscuous mode [ 840.577497][T32156] debugfs: 'hsr0' already exists in 'hsr' [ 840.577518][T32156] Cannot create hsr debugfs directory [ 840.814041][T32280] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 840.849702][T32280] siw: device registration error -23 [ 841.271991][T32293] syzkaller0: create flow: hash 429996932 index 1 [ 841.294096][T32301] xt_cgroup: no path or classid specified [ 841.450296][T32304] netlink: 'syz.6.6255': attribute type 34 has an invalid length. [ 841.450322][T32304] __nla_validate_parse: 1 callbacks suppressed [ 841.450336][T32304] netlink: 8 bytes leftover after parsing attributes in process `syz.6.6255'. [ 841.455860][T32287] syzkaller0: delete flow: hash 429996932 index 1 [ 842.570041][ T5618] Bluetooth: hci1: command tx timeout [ 842.646166][ T5618] Bluetooth: hci7: command tx timeout [ 844.659463][ T5618] Bluetooth: hci1: command tx timeout [ 844.724372][ T5618] Bluetooth: hci7: command tx timeout [ 845.156555][T32304] bond1: option lacp_strict: invalid value (16) [ 845.157850][T32304] bond1 (unregistering): Released all slaves [ 845.212750][T32310] syzkaller0: entered promiscuous mode [ 845.212778][T32310] syzkaller0: entered allmulticast mode [ 845.258105][T32319] netlink: 964 bytes leftover after parsing attributes in process `syz.4.6256'. [ 845.772574][T32338] geneve2: entered promiscuous mode [ 845.864579][T32342] syzkaller1: tun_chr_ioctl cmd 1074025677 [ 845.864684][T32342] syzkaller1: linktype set to 773 [ 846.106363][T32347] netlink: 16178 bytes leftover after parsing attributes in process `syz.4.6265'. [ 846.145837][T32230] bridge0: port 1(bridge_slave_0) entered blocking state [ 846.146042][T32230] bridge0: port 1(bridge_slave_0) entered disabled state [ 846.146499][T32230] bridge_slave_0: entered allmulticast mode [ 846.172111][T32230] bridge_slave_0: entered promiscuous mode [ 846.188234][T32230] bridge0: port 2(bridge_slave_1) entered blocking state [ 846.188424][T32230] bridge0: port 2(bridge_slave_1) entered disabled state [ 846.188868][T32230] bridge_slave_1: entered allmulticast mode [ 846.219871][T32230] bridge_slave_1: entered promiscuous mode [ 846.365106][T32230] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 846.409907][T32230] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 846.518410][T32359] netlink: 9 bytes leftover after parsing attributes in process `syz.5.6268'. [ 846.551179][T32359] 0·: renamed from hsr0 (while UP) [ 846.555944][T32359] 0·: entered allmulticast mode [ 846.555971][T32359] hsr_slave_0: entered allmulticast mode [ 846.555991][T32359] hsr_slave_1: entered allmulticast mode [ 846.556735][T32359] A link change request failed with some changes committed already. Interface c0· may have been left with an inconsistent configuration, please check. [ 846.593675][T32230] team0: Port device team_slave_0 added [ 846.658639][T32230] team0: Port device team_slave_1 added [ 846.719484][ T5618] Bluetooth: hci1: command tx timeout [ 846.735804][T32156] netdevsim netdevsim2 netdevsim0: renamed from eth0 [ 846.750006][T32156] 8021q: adding VLAN 0 to HW filter on device netdevsim0 [ 846.751060][T32156] netdevsim netdevsim2 netdevsim1: renamed from eth1 [ 846.754759][T32156] 8021q: adding VLAN 0 to HW filter on device netdevsim1 [ 846.784209][T32230] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 846.784228][T32230] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 846.784256][T32230] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 846.787853][T32156] netdevsim netdevsim2 netdevsim2: renamed from eth2 [ 846.846076][T32156] 8021q: adding VLAN 0 to HW filter on device netdevsim2 [ 846.847147][T32156] netdevsim netdevsim2 netdevsim3: renamed from eth3 [ 846.872060][T32156] 8021q: adding VLAN 0 to HW filter on device netdevsim3 [ 846.873259][T32230] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 846.873364][T32230] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 846.873404][T32230] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 846.946180][T32366] syz_tun: entered allmulticast mode [ 847.073333][T32230] hsr_slave_0: entered promiscuous mode [ 847.076568][T32230] hsr_slave_1: entered promiscuous mode [ 847.078521][T32230] debugfs: 'hsr0' already exists in 'hsr' [ 847.078644][T32230] Cannot create hsr debugfs directory [ 847.114605][T32374] batadv_slave_1: entered promiscuous mode [ 847.118788][T32364] syz_tun: left allmulticast mode [ 848.151281][T32388] ip6_tables: ip6tables: counters copy to user failed while replacing table [ 848.409195][T32388] netlink: 'syz.6.6274': attribute type 1 has an invalid length. [ 848.435786][T32156] 8021q: adding VLAN 0 to HW filter on device bond0 [ 848.464346][T32156] 8021q: adding VLAN 0 to HW filter on device team0 [ 848.481942][T21155] bridge0: port 1(bridge_slave_0) entered blocking state [ 848.482020][T21155] bridge0: port 1(bridge_slave_0) entered forwarding state [ 848.513562][T21155] bridge0: port 2(bridge_slave_1) entered blocking state [ 848.513672][T21155] bridge0: port 2(bridge_slave_1) entered forwarding state [ 848.588900][T32402] netlink: 100 bytes leftover after parsing attributes in process `syz.6.6279'. [ 848.696739][T32406] netlink: 16 bytes leftover after parsing attributes in process `syz.6.6280'. [ 848.718413][T32398] veth3: entered allmulticast mode [ 848.947476][T32230] netdevsim netdevsim7 netdevsim0: renamed from eth0 [ 849.067544][T32416] netlink: 'syz.5.6283': attribute type 1 has an invalid length. [ 849.148330][T32230] 8021q: adding VLAN 0 to HW filter on device netdevsim0 [ 849.172148][T32230] netdevsim netdevsim7 netdevsim1: renamed from eth1 [ 849.207970][T32230] 8021q: adding VLAN 0 to HW filter on device netdevsim1 [ 849.236291][T32230] netdevsim netdevsim7 netdevsim2: renamed from eth2 [ 849.262441][T32230] 8021q: adding VLAN 0 to HW filter on device netdevsim2 [ 849.265863][T32230] netdevsim netdevsim7 netdevsim3: renamed from eth3 [ 849.291725][T32230] 8021q: adding VLAN 0 to HW filter on device netdevsim3 [ 849.435800][T32418] syzkaller0: entered promiscuous mode [ 849.435824][T32418] syzkaller0: entered allmulticast mode [ 849.650298][T32432] x_tables: duplicate underflow at hook 3 [ 849.686040][T32432] netlink: 24 bytes leftover after parsing attributes in process `syz.4.6286'. [ 849.888104][T32230] 8021q: adding VLAN 0 to HW filter on device bond0 [ 849.961557][T32230] 8021q: adding VLAN 0 to HW filter on device team0 [ 850.022530][T31431] bridge0: port 1(bridge_slave_0) entered blocking state [ 850.022610][T31431] bridge0: port 1(bridge_slave_0) entered forwarding state [ 850.082620][T12847] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 850.102004][T31431] bridge0: port 2(bridge_slave_1) entered blocking state [ 850.102117][T31431] bridge0: port 2(bridge_slave_1) entered forwarding state [ 850.112485][T32445] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 850.112617][T32445] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 850.113605][ C1] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 850.341826][T32448] ip6gretap0: entered promiscuous mode [ 850.785213][T32474] netlink: 24 bytes leftover after parsing attributes in process `syz.4.6292'. [ 850.785423][T32474] netlink: 24 bytes leftover after parsing attributes in process `syz.4.6292'. [ 850.787311][T32475] netlink: 24 bytes leftover after parsing attributes in process `syz.4.6292'. [ 850.787516][T32475] netlink: 24 bytes leftover after parsing attributes in process `syz.4.6292'. [ 851.122191][T12892] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 851.218561][T32156] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 851.518681][T32156] veth0_vlan: entered promiscuous mode [ 851.666917][T32156] veth1_vlan: entered promiscuous mode [ 851.812273][T32156] veth0_macvtap: entered promiscuous mode [ 851.845353][T32156] veth1_macvtap: entered promiscuous mode [ 851.913554][T32230] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 851.948179][T32156] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 851.992733][T32156] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 852.160837][T12892] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 852.311096][ T13] netdevsim netdevsim2 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 852.441484][T31429] netdevsim netdevsim2 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 852.443525][T31425] netdevsim netdevsim2 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 852.443569][T31425] netdevsim netdevsim2 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 852.502209][ T6237] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 852.502236][ T6237] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 852.640371][ T5747] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 852.702800][T31431] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 852.702825][T31431] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 852.813806][T32517] netlink: 24 bytes leftover after parsing attributes in process `syz.6.6298'. [ 852.881581][T32520] netlink: 20 bytes leftover after parsing attributes in process `syz.6.6300'. [ 852.881617][T32520] openvswitch: netlink: Missing key (keys=c0, expected=100) [ 853.017723][T32523] netlink: 12 bytes leftover after parsing attributes in process `syz.6.6301'. [ 853.040121][T32524] netlink: 8 bytes leftover after parsing attributes in process `syz.5.6299'. [ 853.045026][T32523] netlink: 'syz.6.6301': attribute type 1 has an invalid length. [ 853.115893][T32527] netlink: 52 bytes leftover after parsing attributes in process `syz.2.6216'. [ 853.116572][T32527] netlink: 52 bytes leftover after parsing attributes in process `syz.2.6216'. [ 853.200320][T10125] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 853.203774][T32527] bridge_slave_0: left allmulticast mode [ 853.203802][T32527] bridge_slave_0: left promiscuous mode [ 853.204035][T32527] bridge0: port 1(bridge_slave_0) entered disabled state [ 853.251294][T32527] bridge_slave_1: left allmulticast mode [ 853.251324][T32527] bridge_slave_1: left promiscuous mode [ 853.251576][T32527] bridge0: port 2(bridge_slave_1) entered disabled state [ 853.295909][T32527] bond0: (slave bond_slave_0): Releasing backup interface [ 853.336811][T32527] bond0: (slave bond_slave_1): Releasing backup interface [ 853.425499][T32527] team0: Port device team_slave_0 removed [ 853.478656][T32527] team0: Port device team_slave_1 removed [ 853.504647][T32527] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 853.504675][T32527] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 853.541529][T32527] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 853.541554][T32527] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 853.590680][T32527] A link change request failed with some changes committed already. Interface hsr_slave_0 may have been left with an inconsistent configuration, please check. [ 853.667697][T32547] netlink: 4 bytes leftover after parsing attributes in process `syz.5.6299'. [ 853.953585][T32550] xt_MASQUERADE: bad rangesize 20224 [ 854.130418][T32230] veth0_vlan: entered promiscuous mode [ 854.172318][T32230] veth1_vlan: entered promiscuous mode [ 854.241336][ T25] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 854.308506][T32230] veth0_macvtap: entered promiscuous mode [ 854.323427][T32230] veth1_macvtap: entered promiscuous mode [ 854.348257][T32230] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 854.361422][T32571] ip_tables: iptables: counters copy to user failed while replacing table [ 854.365760][T32572] netlink: 'syz.4.6307': attribute type 2 has an invalid length. [ 854.365787][T32572] netlink: 'syz.4.6307': attribute type 2 has an invalid length. [ 854.443957][T32230] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 854.464584][ T6237] netdevsim netdevsim7 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 854.464804][ T6237] netdevsim netdevsim7 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 854.612714][ T6237] netdevsim netdevsim7 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 854.613620][ T6237] netdevsim netdevsim7 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 855.012849][ T6237] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 855.012874][ T6237] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 855.124128][T31426] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 855.124151][T31426] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 855.282753][T10125] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 855.384799][ T5618] Bluetooth: hci0: Opcode 0x0c03 failed: -110 [ 855.464004][T32600] bridge0: port 3(erspan0) entered blocking state [ 855.464186][T32600] bridge0: port 3(erspan0) entered disabled state [ 855.464354][T32600] erspan0: entered allmulticast mode [ 855.467628][T32600] erspan0: entered promiscuous mode [ 855.472353][T32600] bridge0: port 3(erspan0) entered blocking state [ 855.472620][T32600] bridge0: port 3(erspan0) entered forwarding state [ 855.485887][T32605] Bluetooth: MGMT ver 1.23 [ 855.561508][T32607] netlink: 72 bytes leftover after parsing attributes in process `syz.4.6317'. [ 855.561535][T32607] netlink: 72 bytes leftover after parsing attributes in process `syz.4.6317'. [ 855.589705][T32610] ip6tnl1: entered promiscuous mode [ 855.589729][T32610] ip6tnl1: entered allmulticast mode [ 855.653680][T32610] bond2 (unregistering): Released all slaves [ 855.681985][T10118] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 855.745339][T32611] netlink: 8 bytes leftover after parsing attributes in process `syz.2.6316'. [ 856.192937][T32645] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 856.269559][T32648] netlink: 'syz.6.6324': attribute type 1 has an invalid length. [ 857.169125][T32647] sch_tbf: burst 0 is lower than device ip6gre0 mtu (1448) ! [ 857.215914][T32655] bridge2: entered promiscuous mode [ 857.231348][T32655] bond1: (slave bridge2): making interface the new active one [ 857.232132][T32655] bond1: (slave bridge2): Enslaving as an active interface with an up link [ 857.282251][T10118] net_ratelimit: 236 callbacks suppressed [ 857.282274][T10118] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 857.363248][ T25] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 857.474967][T32666] ipvlan2: entered promiscuous mode [ 857.486399][T32666] team0: Device ipvlan2 failed to register rx_handler [ 857.694870][T32692] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 857.695067][ C0] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 858.106363][T32703] netlink: 'syz.6.6332': attribute type 1 has an invalid length. [ 858.106389][T32703] netlink: 'syz.6.6332': attribute type 2 has an invalid length. [ 858.106404][T32703] __nla_validate_parse: 1 callbacks suppressed [ 858.106418][T32703] netlink: 4 bytes leftover after parsing attributes in process `syz.6.6332'. [ 858.144922][T32703] netlink: 100 bytes leftover after parsing attributes in process `syz.6.6332'. [ 858.403363][ T25] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 858.525036][T32725] x_tables: duplicate entry at hook 1 [ 858.719830][T31268] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 858.760533][T32704] netlink: 28 bytes leftover after parsing attributes in process `syz.4.6334'. [ 858.760566][T32704] netlink: 28 bytes leftover after parsing attributes in process `syz.4.6334'. [ 858.760590][T32704] netlink: 8 bytes leftover after parsing attributes in process `syz.4.6334'. [ 858.763589][T32738] netlink: 72 bytes leftover after parsing attributes in process `syz.6.6339'. [ 859.173772][T32750] netlink: 'syz.2.6342': attribute type 12 has an invalid length. [ 859.433565][T32758] netlink: 8 bytes leftover after parsing attributes in process `syz.6.6346'. [ 859.441047][T12892] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 859.460019][T32761] netlink: 'syz.2.6347': attribute type 1 has an invalid length. [ 859.496459][T32765] netlink: 92 bytes leftover after parsing attributes in process `syz.7.6348'. [ 859.522626][T32761] bond1: entered promiscuous mode [ 859.522692][T32761] bond1: entered allmulticast mode [ 859.523055][T32761] 8021q: adding VLAN 0 to HW filter on device bond1 [ 859.697270][T32754] 8021q: adding VLAN 0 to HW filter on device bond2 [ 859.715252][T32754] bridge0: port 3(bond2) entered blocking state [ 859.717303][T32754] bridge0: port 3(bond2) entered disabled state [ 859.717488][T32754] bond2: entered allmulticast mode [ 859.751187][ T312] netlink: 8 bytes leftover after parsing attributes in process `syz.4.6349'. [ 859.758773][T32754] bond2: entered promiscuous mode [ 859.775651][T32754] bridge0: port 3(bond2) entered blocking state [ 859.775967][T32754] bridge0: port 3(bond2) entered forwarding state [ 859.863826][ T312] netlink: 4 bytes leftover after parsing attributes in process `syz.4.6349'. [ 859.896725][ T312] openvswitch: netlink: Port 856954028 exceeds max allowable 65535 [ 859.948490][T32757] 8021q: adding VLAN 0 to HW filter on device bond3 [ 859.949262][T32757] bridge0: port 4(bond3) entered blocking state [ 859.963995][T32757] bridge0: port 4(bond3) entered disabled state [ 859.964173][T32757] bond3: entered allmulticast mode [ 859.981793][T32757] bond3: entered promiscuous mode [ 859.994622][T32757] bridge0: port 4(bond3) entered blocking state [ 859.994746][T32757] bridge0: port 4(bond3) entered forwarding state [ 860.026153][T32767] erspan1: entered allmulticast mode [ 860.180317][ T325] hsr_slave_0: hsr_addr_subst_dest: Unknown node [ 860.180552][ T325] hsr_slave_1: hsr_addr_subst_dest: Unknown node [ 860.213118][T31429] bridge0: port 3(bond2) entered disabled state [ 860.232006][T31429] bridge0: port 4(bond3) entered disabled state [ 860.668646][ T346] tipc: Invalid UDP bearer configuration [ 860.668696][ T346] tipc: Enabling of bearer rejected, failed to enable media [ 861.461680][ T378] netlink: 'syz.4.6364': attribute type 3 has an invalid length. [ 861.464511][ T375] tipc: Enabled bearer , priority 0 [ 861.468019][ T376] tipc: Enabling of bearer rejected, already enabled [ 861.471150][ T375] syzkaller0: entered promiscuous mode [ 861.471213][ T375] syzkaller0: entered allmulticast mode [ 861.560634][ T375] tipc: Resetting bearer [ 861.585545][ T374] tipc: Resetting bearer [ 861.663237][ T374] tipc: Disabling bearer [ 862.122422][ T401] netlink: 'syz.6.6369': attribute type 6 has an invalid length. [ 862.402449][ T5618] Bluetooth: hci0: Opcode 0x0c03 failed: -110 [ 862.570358][T12892] net_ratelimit: 335 callbacks suppressed [ 862.570383][T12892] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 863.044763][T10118] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 863.600169][T10125] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 863.693484][T10114] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 864.327246][ T1739] block nbd4: Possible stuck request ffff888027dd7000: control (read@0,1024B). Runtime 150 seconds [ 864.327294][ T1739] block nbd4: Possible stuck request ffff888027dd71c0: control (read@1024,1024B). Runtime 150 seconds [ 864.327324][ T1739] block nbd4: Possible stuck request ffff888027dd7380: control (read@2048,1024B). Runtime 150 seconds [ 864.327354][ T1739] block nbd4: Possible stuck request ffff888027dd7540: control (read@3072,1024B). Runtime 150 seconds [ 864.640191][ T25] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 864.799784][T10118] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 865.680371][T10125] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 865.967257][ T443] netlink: 'syz.6.6378': attribute type 1 has an invalid length. [ 866.195639][ T443] 8021q: adding VLAN 0 to HW filter on device bond3 [ 866.213195][ T456] __nla_validate_parse: 10 callbacks suppressed [ 866.213230][ T456] netlink: 28 bytes leftover after parsing attributes in process `syz.5.6380'. [ 866.242009][ C1] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 866.268403][ T448] bond3: (slave veth0_to_bond): making interface the new active one [ 866.278877][ T448] bond3: (slave veth0_to_bond): Enslaving as an active interface with an up link [ 866.295189][ T454] bond3: entered promiscuous mode [ 866.295224][ T454] veth0_to_bond: entered promiscuous mode [ 866.295424][ T454] bond3: entered allmulticast mode [ 866.295441][ T454] veth0_to_bond: entered allmulticast mode [ 866.316771][ T447] 8021q: VLANs not supported on ip6tnl0 [ 866.318603][ T438] syzkaller1: entered promiscuous mode [ 866.318658][ T438] syzkaller1: entered allmulticast mode [ 866.432456][ T460] macvlan2: entered promiscuous mode [ 866.432482][ T460] macvlan2: entered allmulticast mode [ 866.434189][ T460] 8021q: adding VLAN 0 to HW filter on device macvlan2 [ 866.464452][ T460] bond3: (slave macvlan2): the slave hw address is in use by the bond; giving it the hw address of veth0_to_bond [ 866.720619][T10125] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 866.824103][ T476] netlink: 'syz.6.6384': attribute type 21 has an invalid length. [ 866.824134][ T476] netlink: 128 bytes leftover after parsing attributes in process `syz.6.6384'. [ 866.824213][ T476] netlink: 'syz.6.6384': attribute type 4 has an invalid length. [ 866.824230][ T476] netlink: 3 bytes leftover after parsing attributes in process `syz.6.6384'. [ 866.984020][ T483] netlink: 12 bytes leftover after parsing attributes in process `syz.5.6387'. [ 867.069084][ T479] bond2 (unregistering): Released all slaves [ 867.092188][ T487] netlink: 4 bytes leftover after parsing attributes in process `syz.6.6388'. [ 867.162217][ T488] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 867.176578][ T488] netlink: 'syz.6.6388': attribute type 12 has an invalid length. [ 867.179514][T31431] netdevsim netdevsim6 netdevsim1: set [0, 0] type 1 family 0 port 8472 - 0 [ 867.186401][T31429] netdevsim netdevsim6 netdevsim0: set [0, 0] type 1 family 0 port 8472 - 0 [ 867.190057][T31426] netdevsim netdevsim6 netdevsim3: set [0, 0] type 1 family 0 port 8472 - 0 [ 867.192052][T31425] netdevsim netdevsim6 netdevsim2: set [0, 0] type 1 family 0 port 8472 - 0 [ 867.469178][ T502] netlink: 'syz.7.6393': attribute type 2 has an invalid length. [ 867.762657][T12892] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 867.839777][T10118] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 867.979131][ T520] netlink: 12 bytes leftover after parsing attributes in process `syz.2.6398'. [ 868.624941][ T545] netlink: 4 bytes leftover after parsing attributes in process `syz.7.6405'. [ 868.647803][ T543] netlink: 20 bytes leftover after parsing attributes in process `syz.6.6404'. [ 868.753623][ T549] netlink: 4 bytes leftover after parsing attributes in process `syz.7.6405'. [ 868.769852][ T549] netlink: 32 bytes leftover after parsing attributes in process `syz.7.6405'. [ 868.772161][ T549] IPVS: set_ctl: invalid protocol: 43 172.20.20.187:20001 [ 868.802915][T10125] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 869.021357][ T552] tc_dump_action: action bad kind [ 869.021630][ T553] tc_dump_action: action bad kind [ 869.116979][ T560] netlink: 'syz.6.6406': attribute type 2 has an invalid length. [ 869.139755][ T564] netlink: 'syz.7.6409': attribute type 3 has an invalid length. [ 869.140877][ T564] netlink: 'syz.7.6409': attribute type 2 has an invalid length. [ 869.140900][ T564] netlink: 'syz.7.6409': attribute type 2 has an invalid length. [ 869.212818][ T553] ip_tables: iptables: counters copy to user failed while replacing table [ 869.609355][ T580] bridge0: port 2(bridge_slave_1) entered disabled state [ 869.612227][ T580] bridge0: port 1(bridge_slave_0) entered disabled state [ 869.843930][T10125] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 870.880179][T31268] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 870.881552][T10125] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 871.196012][ T635] netlink: 'syz.7.6431': attribute type 30 has an invalid length. [ 871.239089][ T628] xt_CT: No such helper "snmp" [ 871.407861][ T643] SET target dimension over the limit! [ 871.567271][ T641] 8021q: adding VLAN 0 to HW filter on device netdevsim0 [ 871.921983][T10125] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 872.007585][T12892] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 872.068425][ T669] __nla_validate_parse: 14 callbacks suppressed [ 872.068450][ T669] netlink: 8 bytes leftover after parsing attributes in process `syz.5.6437'. [ 872.136945][ T672] netlink: 16402 bytes leftover after parsing attributes in process `syz.6.6438'. [ 872.163008][ T674] netlink: 'syz.7.6440': attribute type 4 has an invalid length. [ 872.357967][ T669] 8021q: adding VLAN 0 to HW filter on device bond1 [ 872.360475][ T669] A link change request failed with some changes committed already. Interface @ may have been left with an inconsistent configuration, please check. [ 872.369060][T31425] IPVS: starting estimator thread 0... [ 872.419754][ T686] IPVS: set_ctl: invalid protocol: 0 0.0.0.0:0 [ 872.470815][ T687] IPVS: using max 25 ests per chain, 60000 per kthread [ 872.546226][ T685] netlink: 40 bytes leftover after parsing attributes in process `syz.4.6442'. [ 872.718561][ T685] vxcan2: entered allmulticast mode [ 872.961516][ T25] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 873.285121][T10118] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 873.722335][ T716] netlink: 'syz.6.6451': attribute type 4 has an invalid length. [ 873.722364][ T716] netlink: 152 bytes leftover after parsing attributes in process `syz.6.6451'. [ 873.727897][ T716] A link change request failed with some changes committed already. Interface bond0 may have been left with an inconsistent configuration, please check. [ 873.865821][ T720] syzkaller0: entered promiscuous mode [ 873.865856][ T720] syzkaller0: entered allmulticast mode [ 873.932428][ T720] tc action pedit 'at' offset 5 out of bounds [ 874.015070][ T732] ip_tables: iptables: counters copy to user failed while replacing table [ 874.038663][T10125] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 874.233989][ T737] netlink: 'syz.6.6460': attribute type 11 has an invalid length. [ 874.234015][ T737] netlink: 8 bytes leftover after parsing attributes in process `syz.6.6460'. [ 874.312931][ T743] netlink: 100 bytes leftover after parsing attributes in process `syz.7.6459'. [ 874.314371][ T743] netlink: 100 bytes leftover after parsing attributes in process `syz.7.6459'. [ 874.987329][ T761] netlink: 'syz.7.6465': attribute type 1 has an invalid length. [ 875.041129][T12892] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 875.053306][T31268] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 875.164287][ T766] nbd: must specify an index to disconnect [ 875.165306][ T764] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 875.165438][ T764] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 875.165558][ T764] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 875.395950][ T775] ±ÿ: entered allmulticast mode [ 875.688042][ T792] netlink: 12 bytes leftover after parsing attributes in process `syz.7.6474'. [ 875.913577][ T798] netlink: 8 bytes leftover after parsing attributes in process `syz.7.6479'. [ 875.954891][ T798] bond1: up delay (10) is not a multiple of miimon (7), value rounded to 7 ms [ 875.988384][ T798] bond1 (unregistering): Released all slaves [ 877.031961][ T832] Bluetooth: hci0: unsupported parameter 5134 [ 877.031999][ T832] Bluetooth: hci0: unsupported parameter 8192 [ 877.032013][ T832] Bluetooth: hci0: unsupported parameter 5134 [ 877.032025][ T832] Bluetooth: hci0: unsupported parameter 8192 [ 877.108447][ T827] netlink: 8 bytes leftover after parsing attributes in process `syz.7.6484'. [ 877.234806][ T842] netlink: 'syz.7.6488': attribute type 11 has an invalid length. [ 877.234830][ T842] netlink: 8 bytes leftover after parsing attributes in process `syz.7.6488'. [ 877.401709][T31429] IPVS: starting estimator thread 0... [ 877.491009][ T860] IPVS: using max 30 ests per chain, 72000 per kthread [ 877.748592][ T870] bridge0: port 4(gretap0) entered blocking state [ 877.748831][ T870] bridge0: port 4(gretap0) entered disabled state [ 877.749000][ T870] gretap0: entered allmulticast mode [ 877.781264][ T870] gretap0: entered promiscuous mode [ 877.788384][ T870] bridge0: port 4(gretap0) entered blocking state [ 877.788482][ T870] bridge0: port 4(gretap0) entered forwarding state [ 878.014730][ T877] net_ratelimit: 50 callbacks suppressed [ 878.014755][ T877] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check. [ 878.081008][T10114] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 878.160446][T10125] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 878.488338][ T895] Cannot find set identified by id 0 to match [ 878.837440][ T920] netlink: 'syz.7.6502': attribute type 2 has an invalid length. [ 878.999952][ T929] netlink: 16 bytes leftover after parsing attributes in process `syz.6.6503'. [ 878.999994][ T929] netlink: 8 bytes leftover after parsing attributes in process `syz.6.6503'. [ 879.202025][T12892] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 880.269983][T12892] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 880.442155][ T971] netlink: 8 bytes leftover after parsing attributes in process `syz.6.6510'. [ 880.444919][ T972] netlink: 8 bytes leftover after parsing attributes in process `syz.6.6510'. [ 880.497435][ T974] netlink: 8 bytes leftover after parsing attributes in process `syz.6.6510'. [ 880.498565][ T975] netlink: 8 bytes leftover after parsing attributes in process `syz.6.6510'. [ 880.536768][ T977] netlink: 4 bytes leftover after parsing attributes in process `syz.4.6513'. [ 880.932475][T31431] netdevsim netdevsim4 netdevsim3: set [0, 0] type 1 family 0 port 8472 - 0 [ 880.932515][T31431] netdevsim netdevsim4 netdevsim2: set [0, 0] type 1 family 0 port 8472 - 0 [ 880.932542][T31431] netdevsim netdevsim4 netdevsim1: set [0, 0] type 1 family 0 port 8472 - 0 [ 880.932568][T31431] netdevsim netdevsim4 netdevsim0: set [0, 0] type 1 family 0 port 8472 - 0 [ 881.032414][ T993] x_tables: duplicate underflow at hook 2 [ 881.122262][T10118] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 881.280489][T10125] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 881.301626][ T1005] netlink: 2 bytes leftover after parsing attributes in process `syz.7.6520'. [ 881.779185][ T1032] gretap0: left allmulticast mode [ 881.779213][ T1032] gretap0: left promiscuous mode [ 881.784856][ T1032] bridge0: port 4(gretap0) entered disabled state [ 881.800470][ T1032] erspan0: left allmulticast mode [ 881.800499][ T1032] erspan0: left promiscuous mode [ 881.800749][ T1032] bridge0: port 3(erspan0) entered disabled state [ 881.803444][ T1032] bridge_slave_1: left allmulticast mode [ 881.803469][ T1032] bridge_slave_1: left promiscuous mode [ 881.803672][ T1032] bridge0: port 2(bridge_slave_1) entered disabled state [ 881.861241][ T1032] bridge_slave_0: left allmulticast mode [ 881.861275][ T1032] bridge_slave_0: left promiscuous mode [ 881.861510][ T1032] bridge0: port 1(bridge_slave_0) entered disabled state [ 882.098514][ T1042] openvswitch: netlink: Message has 8 unknown bytes. [ 882.286184][ T1063] netlink: 'syz.7.6529': attribute type 10 has an invalid length. [ 882.322717][T12892] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 882.881284][T10118] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 883.037414][ T1039] bond1: left promiscuous mode [ 883.091675][ T1063] team0 (unregistering): Port device team_slave_0 removed [ 883.118814][ T1063] team0 (unregistering): Port device team_slave_1 removed [ 883.160586][ T1055] pim6reg1: entered promiscuous mode [ 883.160614][ T1055] pim6reg1: entered allmulticast mode [ 883.363112][ T25] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 883.583097][ T1089] syzkaller0: entered promiscuous mode [ 883.583124][ T1089] syzkaller0: entered allmulticast mode [ 883.590354][ T6237] netdevsim netdevsim2 netdevsim0: set [0, 0] type 1 family 0 port 8472 - 0 [ 883.590406][ T6237] netdevsim netdevsim2 netdevsim3: set [0, 0] type 1 family 0 port 8472 - 0 [ 883.590444][ T6237] netdevsim netdevsim2 netdevsim1: set [0, 0] type 1 family 0 port 8472 - 0 [ 883.590486][ T6237] netdevsim netdevsim2 netdevsim2: set [0, 0] type 1 family 0 port 8472 - 0 [ 883.741162][ T1089] ovs-dp0: entered promiscuous mode [ 883.838414][ T1099] __nla_validate_parse: 7 callbacks suppressed [ 883.838438][ T1099] netlink: 20 bytes leftover after parsing attributes in process `syz.6.6539'. [ 883.925616][ T1104] netlink: 4912 bytes leftover after parsing attributes in process `syz.7.6540'. [ 884.009444][ T1106] netlink: 32 bytes leftover after parsing attributes in process `syz.7.6541'. [ 884.163335][T10118] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 884.273396][ T1119] netlink: 24 bytes leftover after parsing attributes in process `syz.2.6547'. [ 884.411079][ T25] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 884.459535][ T1134] x_tables: duplicate underflow at hook 2 [ 885.533529][T12892] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 885.620309][ T1171] netlink: 'syz.4.6555': attribute type 4 has an invalid length. [ 885.667881][ T1174] netlink: 'syz.4.6555': attribute type 4 has an invalid length. [ 886.123710][ T1184] atomic_op ffff888046f041e0 conn xmit_atomic 0000000000000000 [ 886.183679][ T1192] atomic_op ffff8880683fb1e0 conn xmit_atomic 0000000000000000 [ 886.207774][ T1188] batman_adv: batadv0: Adding interface: syzkaller0 [ 886.207797][ T1188] batman_adv: batadv0: The MTU of interface syzkaller0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 886.208020][ T1188] batman_adv: batadv0: Interface activated: syzkaller0 [ 886.448775][ T1186] batman_adv: batadv0: Interface deactivated: syzkaller0 [ 886.486224][ T1210] openvswitch: netlink: Flow actions attr not present in new flow. [ 886.557399][ T1212] netlink: 20 bytes leftover after parsing attributes in process `syz.5.6565'. [ 886.591145][T12892] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 886.611777][ T1218] netlink: 20 bytes leftover after parsing attributes in process `syz.5.6565'. [ 886.921938][ T1186] batman_adv: batadv0: Removing interface: syzkaller0 [ 887.199995][T10118] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 887.387041][ T1239] netlink: 260 bytes leftover after parsing attributes in process `syz.6.6574'. [ 887.444465][ T1239] netlink: 13439 bytes leftover after parsing attributes in process `syz.6.6574'. [ 887.549055][ T1245] netlink: 4 bytes leftover after parsing attributes in process `syz.7.6575'. [ 887.599647][ T25] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 887.665379][ T1247] bond1: entered promiscuous mode [ 887.665406][ T1247] bond1: entered allmulticast mode [ 887.940604][ T1261] netlink: 8 bytes leftover after parsing attributes in process `syz.6.6581'. [ 888.139128][ T1261] bond4 (unregistering): Released all slaves [ 888.234632][ T1269] netlink: 'syz.2.6583': attribute type 1 has an invalid length. [ 888.327476][ T1269] bond2: entered promiscuous mode [ 888.327971][ T1269] 8021q: adding VLAN 0 to HW filter on device bond2 [ 888.438715][ T1269] 8021q: adding VLAN 0 to HW filter on device bond2 [ 888.441024][ T1269] bond2: (slave gre1): The slave device specified does not support setting the MAC address [ 888.441083][ T1269] bond2: (slave gre1): Setting fail_over_mac to active for active-backup mode [ 888.474055][ T1269] bond2: (slave gre1): making interface the new active one [ 888.474084][ T1269] gre1: entered promiscuous mode [ 888.477653][ T1269] bond2: (slave gre1): Enslaving as an active interface with an up link [ 888.597707][ T1286] netlink: 'syz.4.6586': attribute type 5 has an invalid length. [ 888.650999][ T25] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 888.804376][ T1286] tipc: Started in network mode [ 888.804413][ T1286] tipc: Node identity aaaaaaaaaa1a, cluster identity 4711 [ 888.804569][ T1286] tipc: Enabled bearer , priority 0 [ 889.048226][ T1294] __nla_validate_parse: 2 callbacks suppressed [ 889.048250][ T1294] netlink: 48 bytes leftover after parsing attributes in process `syz.7.6587'. [ 889.074015][ T1296] netlink: 48 bytes leftover after parsing attributes in process `syz.7.6587'. [ 889.193775][ T1306] netlink: 44 bytes leftover after parsing attributes in process `syz.4.6590'. [ 889.690412][T12892] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 889.899583][ T25] tipc: Node number set to 11578026 [ 890.241236][T10114] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 890.720297][ T25] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 891.116099][ T1366] netlink: 12 bytes leftover after parsing attributes in process `syz.5.6602'. [ 891.201294][T31268] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 891.625988][ T1380] syzkaller0: entered promiscuous mode [ 891.626016][ T1380] syzkaller0: entered allmulticast mode [ 891.714617][ T1388] netlink: 8 bytes leftover after parsing attributes in process `syz.5.6608'. [ 891.764647][T10125] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 891.793116][ T1386] IPVS: length: 197 != 8 [ 891.805427][ T1394] IPVS: length: 197 != 8 [ 891.846713][ T1396] netlink: 9 bytes leftover after parsing attributes in process `syz.5.6608'. [ 891.867322][ T1396] netlink: 9 bytes leftover after parsing attributes in process `syz.5.6608'. [ 891.934172][ T1397] syzkaller0: Caught tx_queue_len zero misconfig [ 892.481455][T31268] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 892.799849][T12892] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 892.914343][ T1415] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 892.914653][ C0] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 893.012550][ T1435] netlink: 4 bytes leftover after parsing attributes in process `syz.5.6616'. [ 893.012689][ T1435] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 893.117533][ T1435] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 893.343022][ T1411] netlink: 8 bytes leftover after parsing attributes in process `syz.2.6611'. [ 893.343058][ T1411] netlink: 16 bytes leftover after parsing attributes in process `syz.2.6611'. [ 893.413806][ T1411] bridge1: entered promiscuous mode [ 893.413832][ T1411] bridge1: entered allmulticast mode [ 893.843247][T12892] net_ratelimit: 1 callbacks suppressed [ 893.843269][T12892] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 894.144952][ T1470] __nla_validate_parse: 1 callbacks suppressed [ 894.144974][ T1470] netlink: 32 bytes leftover after parsing attributes in process `syz.7.6623'. [ 894.213442][ T1463] ip_tables: iptables: counters copy to user failed while replacing table [ 894.239683][T10114] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 894.403910][ T1739] block nbd4: Possible stuck request ffff888027dd7000: control (read@0,1024B). Runtime 180 seconds [ 894.403957][ T1739] block nbd4: Possible stuck request ffff888027dd71c0: control (read@1024,1024B). Runtime 180 seconds [ 894.403985][ T1739] block nbd4: Possible stuck request ffff888027dd7380: control (read@2048,1024B). Runtime 180 seconds [ 894.404008][ T1739] block nbd4: Possible stuck request ffff888027dd7540: control (read@3072,1024B). Runtime 180 seconds [ 894.863472][ T1477] bond4: entered allmulticast mode [ 894.880065][T10125] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 895.215528][ T1490] xfrm2: entered allmulticast mode [ 895.238169][ T1493] ip6_tables: ip6tables: counters copy to user failed while replacing table [ 895.238621][ T5618] Bluetooth: hci7: unexpected event 0x04 length: 19 > 10 [ 895.238650][ T5618] Bluetooth: unknown link type 128 [ 895.277336][ T1490] netlink: 20 bytes leftover after parsing attributes in process `syz.4.6629'. [ 895.331609][ T1495] ip6_tables: ip6tables: counters copy to user failed while replacing table [ 895.921461][T10125] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 896.015178][ T1525] netlink: 12 bytes leftover after parsing attributes in process `syz.4.6636'. [ 896.055999][ T1527] netlink: 'syz.6.6637': attribute type 11 has an invalid length. [ 896.153968][ T1531] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 896.253809][ T1534] ip6_tables: ip6tables: counters copy to user failed while replacing table [ 896.254581][ T1534] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 896.446116][ T1543] netlink: 68 bytes leftover after parsing attributes in process `syz.5.6639'. [ 896.536862][ T4985] udevd[4985]: worker [28446] /devices/virtual/block/nbd4 timeout; kill it [ 896.536961][ T4985] udevd[4985]: seq 29911 '/devices/virtual/block/nbd4' killed [ 896.561795][ T1548] IPVS: set_ctl: invalid protocol: 0 127.0.0.1:21 [ 896.650499][ T1547] netlink: 116 bytes leftover after parsing attributes in process `syz.2.6643'. [ 896.697985][ T1547] netlink: 36 bytes leftover after parsing attributes in process `syz.2.6643'. [ 897.280783][ T5618] Bluetooth: hci7: command tx timeout [ 897.655111][ T1581] netlink: 8 bytes leftover after parsing attributes in process `syz.7.6650'. [ 897.759658][ T5618] Bluetooth: hci3: command 0x0406 tx timeout [ 897.931654][ T1598] netlink: 'syz.4.6654': attribute type 9 has an invalid length. [ 897.938692][ T1599] netlink: 76 bytes leftover after parsing attributes in process `syz.4.6654'. [ 898.405699][ T1605] netlink: 'syz.4.6656': attribute type 1 has an invalid length. [ 898.405725][ T1605] netlink: 'syz.4.6656': attribute type 2 has an invalid length. [ 898.575138][ T1614] ±ÿ: entered promiscuous mode [ 898.595450][ T1614] tunl0: entered promiscuous mode [ 898.597466][ T1614] gre0: entered promiscuous mode [ 898.643383][ T1614] gretap0: entered promiscuous mode [ 898.661650][ T1614] erspan0: entered promiscuous mode [ 898.682465][ T1614] ip_vti0: entered promiscuous mode [ 898.685723][ T1614] ip6_vti0: entered promiscuous mode [ 898.711534][ T1614] sit0: entered promiscuous mode [ 898.763868][ T1614] ip6tnl0: entered promiscuous mode [ 898.787631][ T1614] ip6gre0: entered promiscuous mode [ 898.789067][ T1628] netlink: 4 bytes leftover after parsing attributes in process `syz.7.6660'. [ 898.825538][ T1614] syz_tun: entered promiscuous mode [ 898.902906][ T1614] ip6gretap0: entered promiscuous mode [ 898.934820][ T1614] bridge0: port 2(bridge_slave_1) entered disabled state [ 898.935494][ T1614] bridge0: port 1(bridge_slave_0) entered disabled state [ 898.966398][ T1614] bridge0: entered promiscuous mode [ 899.004099][ T1614] vcan0: entered promiscuous mode [ 899.030027][ T1643] netlink: 8 bytes leftover after parsing attributes in process `syz.7.6660'. [ 899.079118][ T1614] bond0: entered promiscuous mode [ 899.079149][ T1614] bond_slave_0: entered promiscuous mode [ 899.079520][ T1614] bond_slave_1: entered promiscuous mode [ 899.143266][ T1614] team0: entered promiscuous mode [ 899.143291][ T1614] team_slave_0: entered promiscuous mode [ 899.143491][ T1614] team_slave_1: entered promiscuous mode [ 899.176297][ T1614] dummy0: entered promiscuous mode [ 899.196396][T10123] net_ratelimit: 4 callbacks suppressed [ 899.196419][T10123] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 899.200298][ C1] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 899.220979][ T1614] nlmon0: entered promiscuous mode [ 899.226484][ T1614] batadv0: entered promiscuous mode [ 899.302807][ T1614] vxcan0: entered promiscuous mode [ 899.303680][ T1614] vxcan1: entered promiscuous mode [ 899.309025][ T1614] veth0: entered promiscuous mode [ 899.340880][ T1614] veth1: entered promiscuous mode [ 899.342160][ T1649] netlink: 8 bytes leftover after parsing attributes in process `syz.2.6663'. [ 899.343673][ T1649] netlink: 'syz.2.6663': attribute type 39 has an invalid length. [ 899.381238][ T1614] wg0: entered promiscuous mode [ 899.387873][ T1614] wg1: entered promiscuous mode [ 899.400035][ T1614] wg2: entered promiscuous mode [ 899.406331][ T1614] veth0_to_bridge: entered promiscuous mode [ 899.440297][ T1614] veth1_to_bridge: entered promiscuous mode [ 899.464135][ T1614] veth0_to_bond: entered promiscuous mode [ 899.482496][ T1614] veth1_to_bond: entered promiscuous mode [ 899.502015][ T1614] veth0_to_team: entered promiscuous mode [ 899.525667][ T1614] veth1_to_team: entered promiscuous mode [ 899.559161][ T1614] veth0_to_batadv: entered promiscuous mode [ 899.580343][ T1614] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 899.580406][ T1614] batadv_slave_0: entered promiscuous mode [ 899.583469][ T1614] xfrm0: entered promiscuous mode [ 899.585684][ T1614] veth0_to_hsr: entered promiscuous mode [ 899.624396][ T1614] veth1_to_hsr: entered promiscuous mode [ 899.659776][ T1614] 0·: entered promiscuous mode [ 899.663966][ T1614] veth1_virt_wifi: entered promiscuous mode [ 899.683445][ T1614] veth0_virt_wifi: entered promiscuous mode [ 899.701460][ T1614] virt_wifi0: entered promiscuous mode [ 899.752281][ T1614] vlan1: entered promiscuous mode [ 899.765977][ T1614] macvlan0: entered promiscuous mode [ 899.779659][ T1614] macvlan1: entered promiscuous mode [ 899.784014][ T1614] ipvlan0: entered promiscuous mode [ 899.810964][ T1614] ipvlan1: entered promiscuous mode [ 899.857815][ T1614] macvtap0: entered promiscuous mode [ 899.865033][ T1614] macsec0: entered promiscuous mode [ 899.874149][ T1614] geneve0: entered promiscuous mode [ 899.877973][ T1614] geneve1: entered promiscuous mode [ 899.891790][ T1614] netdevsim netdevsim5 netdevsim0: entered promiscuous mode [ 899.896828][ T1614] netdevsim netdevsim5 netdevsim1: entered promiscuous mode [ 899.935306][ T1614] netdevsim netdevsim5 netdevsim2: entered promiscuous mode [ 899.939738][ T1614] netdevsim netdevsim5 netdevsim3: entered promiscuous mode [ 900.018431][ T1614] mac80211_hwsim hwsim75 wlan1: entered promiscuous mode [ 900.030866][ T1614] ip6erspan0: entered promiscuous mode [ 900.046779][ T1614] bond1: entered promiscuous mode [ 900.059037][ T1614] @: entered promiscuous mode [ 900.059150][ T1614] vx0: entered promiscuous mode [ 900.061290][ T1614] syztnl0: entered promiscuous mode [ 900.061736][ T1614] veth2: entered promiscuous mode [ 900.062230][ T1614] veth3: entered promiscuous mode [ 900.108894][ T1614] erspan1: entered promiscuous mode [ 900.108999][ T1614] bond4: entered promiscuous mode [ 900.109089][ T1614] syzkaller0: entered promiscuous mode [ 900.109842][T31436] netdevsim netdevsim5 netdevsim2: unset [0, 0] type 1 family 0 port 8472 - 0 [ 900.109954][T31436] netdevsim netdevsim5 netdevsim2: unset [1, 0] type 2 family 0 port 6081 - 0 [ 900.110071][T31436] netdevsim netdevsim5 netdevsim3: unset [0, 0] type 1 family 0 port 8472 - 0 [ 900.110145][T31436] netdevsim netdevsim5 netdevsim3: unset [1, 0] type 2 family 0 port 6081 - 0 [ 900.135670][ T1615] netlink: 'syz.7.6660': attribute type 1 has an invalid length. [ 900.135740][ T1615] netlink: 'syz.7.6660': attribute type 2 has an invalid length. [ 900.278738][ T1619] syzkaller0: entered allmulticast mode [ 900.286603][ T1622] netlink: 68 bytes leftover after parsing attributes in process `syz.4.6661'. [ 900.286631][ T1622] netlink: 68 bytes leftover after parsing attributes in process `syz.4.6661'. [ 900.320422][T10119] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 900.433558][T10124] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 900.736121][ T1658] nbd: must specify at least one socket [ 900.822646][ C1] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 901.443162][ T5732] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 901.515812][ T59] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 901.548126][ T5716] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 901.561373][ T1647] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 902.642010][ T1647] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 904.210842][T21257] netdevsim netdevsim5 netdevsim1: unset [0, 0] type 1 family 0 port 8472 - 0 [ 904.210881][T21257] netdevsim netdevsim5 netdevsim1: unset [1, 0] type 2 family 0 port 6081 - 0 [ 904.219837][ T6236] netdevsim netdevsim5 netdevsim0: unset [0, 0] type 1 family 0 port 8472 - 0 [ 904.219876][ T6236] netdevsim netdevsim5 netdevsim0: unset [1, 0] type 2 family 0 port 6081 - 0 [ 904.452559][ T1666] netlink: 8 bytes leftover after parsing attributes in process `syz.2.6670'. [ 904.518252][ T1667] netlink: 312 bytes leftover after parsing attributes in process `syz.6.6666'. [ 904.598617][ T1680] netlink: 8 bytes leftover after parsing attributes in process `syz.5.6668'. [ 904.603083][ T1683] netlink: 8 bytes leftover after parsing attributes in process `syz.5.6668'. [ 904.720515][T10127] net_ratelimit: 3 callbacks suppressed [ 904.720539][T10127] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 904.757408][ T1686] veth1_to_batadv: left promiscuous mode [ 904.785317][ T1686] netdevsim netdevsim4 netdevsim0: left promiscuous mode [ 904.787881][ T1686] vlan2: left promiscuous mode [ 904.787902][ T1686] bridge0: left promiscuous mode [ 904.788717][ T1686] geneve2: left promiscuous mode [ 904.823171][ T1686] bond1: left promiscuous mode [ 904.823524][ T1686] 8021q: adding VLAN 0 to HW filter on device bond1 [ 905.135219][ T1697] bridge2: entered promiscuous mode [ 905.135246][ T1697] bridge2: entered allmulticast mode [ 905.678964][ T1699] IPv6: NLM_F_CREATE should be specified when creating new route [ 905.765006][T10127] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 905.802812][ T1696] netlink: 36 bytes leftover after parsing attributes in process `syz.4.6675'. [ 906.400567][ T5716] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 906.564039][T21157] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 906.735748][ T1750] netlink: 'syz.2.6687': attribute type 4 has an invalid length. [ 906.743882][ T1752] netlink: 16 bytes leftover after parsing attributes in process `syz.7.6688'. [ 906.743924][ T1752] netlink: 8 bytes leftover after parsing attributes in process `syz.7.6688'. [ 906.757792][ T1752] x_tables: duplicate underflow at hook 2 [ 906.802975][T10127] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 906.804103][ T1753] netlink: 'syz.2.6687': attribute type 4 has an invalid length. [ 906.898698][ T1756] netlink: 8 bytes leftover after parsing attributes in process `syz.4.6689'. [ 907.115376][ T1761] netlink: 20 bytes leftover after parsing attributes in process `syz.2.6692'. [ 907.115409][ T1761] openvswitch: netlink: Invalid VLAN frame [ 907.220513][ T1765] netlink: 'syz.7.6693': attribute type 1 has an invalid length. [ 907.310896][ T1771] netlink: 36 bytes leftover after parsing attributes in process `syz.6.6694'. [ 907.340224][ T1765] 8021q: adding VLAN 0 to HW filter on device bond2 [ 907.343326][ T1765] bond1: (slave bond2): making interface the new active one [ 907.343831][ T1765] bond1: (slave bond2): Enslaving as an active interface with an up link [ 907.435910][ T1765] 8021q: adding VLAN 0 to HW filter on device bond1 [ 907.636393][ T1788] ip_tables: iptables: counters copy to user failed while replacing table [ 907.638121][ T1784] 8021q: adding VLAN 0 to HW filter on device ipvlan2 [ 907.727846][ T6236] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 907.727871][ T6236] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 907.845274][T10127] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 907.987386][ T1796] A link change request failed with some changes committed already. Interface 26±ÿ may have been left with an inconsistent configuration, please check. [ 907.988366][ T1796] nbd: socks must be embedded in a SOCK_ITEM attr [ 907.988605][ T1796] block nbd0: shutting down sockets [ 908.304718][ T1820] A link change request failed with some changes committed already. Interface veth0_macvtap may have been left with an inconsistent configuration, please check. [ 908.604148][ T1824] xt_nfacct: accounting object `' does not exist [ 908.647081][ T1836] Bluetooth: MGMT ver 1.23 [ 908.647118][ T1836] Bluetooth: hci5: unsupported parameter 5135 [ 908.647144][ T1836] Bluetooth: hci5: unsupported parameter 8192 [ 908.647158][ T1836] Bluetooth: hci5: unsupported parameter 5135 [ 908.647172][ T1836] Bluetooth: hci5: unsupported parameter 8192 [ 908.710205][T10124] ip6_tunnel: ip6gretap1 xmit: Local address not yet configured! [ 908.865090][ T6234] ip6_tunnel: ip6gretap1 xmit: Local address not yet configured! [ 908.950008][ T1848] netlink: 'syz.7.6714': attribute type 7 has an invalid length. [ 909.612245][T10124] ip6_tunnel: ip6gretap1 xmit: Local address not yet configured! [ 909.711557][ T1874] sit0: entered promiscuous mode [ 909.728589][ T1874] __nla_validate_parse: 12 callbacks suppressed [ 909.728612][ T1874] netlink: 21 bytes leftover after parsing attributes in process `syz.7.6723'. [ 909.756989][ T1869] netlink: 48 bytes leftover after parsing attributes in process `syz.4.6719'. [ 909.926196][ T6236] ip6_tunnel: ip6gretap1 xmit: Local address not yet configured! [ 909.941452][ T6236] ip6_tunnel: ip6gretap1 xmit: Local address not yet configured! [ 910.123223][ T1889] netlink: 8 bytes leftover after parsing attributes in process `syz.6.6726'. [ 910.123253][ T1889] netlink: 4 bytes leftover after parsing attributes in process `syz.6.6726'. [ 910.242721][T10124] ip6_tunnel: ip6gretap1 xmit: Local address not yet configured! [ 910.411628][ T1898] netlink: 156 bytes leftover after parsing attributes in process `syz.4.6727'. [ 910.492529][ T1904] netlink: 'syz.2.6728': attribute type 2 has an invalid length. [ 910.561959][T10124] net_ratelimit: 526 callbacks suppressed [ 910.561981][T10124] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 911.184413][ T1929] netlink: 20 bytes leftover after parsing attributes in process `syz.6.6734'. [ 911.184440][ T1929] openvswitch: netlink: Key type 9749 is out of range max 32 [ 911.245630][ T1931] ip6_tables: ip6tables: counters copy to user failed while replacing table [ 911.301178][ T1939] netlink: 'syz.5.6735': attribute type 1 has an invalid length. [ 911.387711][ T1940] netlink: 4 bytes leftover after parsing attributes in process `syz.5.6735'. [ 911.483709][ T1931] netlink: 4 bytes leftover after parsing attributes in process `syz.5.6735'. [ 911.591257][ T1947] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 911.591441][ C0] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 911.629668][T10124] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 911.688578][T21257] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 912.001592][ T1957] netlink: 32 bytes leftover after parsing attributes in process `syz.2.6742'. [ 912.232407][ T1959] ip6_tables: ip6tables: counters copy to user failed while replacing table [ 912.393003][ T1967] netlink: 'syz.7.6746': attribute type 2 has an invalid length. [ 912.469889][ T1970] netlink: 'syz.5.6747': attribute type 49 has an invalid length. [ 912.518299][ T1965] netlink: 12 bytes leftover after parsing attributes in process `syz.4.6745'. [ 912.642820][T10127] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 912.897302][ T1985] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 912.915609][ T1986] tc_dump_action: action bad kind [ 914.096927][ T2006] syz_tun: entered allmulticast mode [ 914.128828][ T2006] pimreg: entered allmulticast mode [ 914.132147][ T2006] syz_tun: left allmulticast mode [ 914.132430][ T2006] pimreg: left allmulticast mode [ 914.187809][ T2010] netlink: 'syz.2.6760': attribute type 12 has an invalid length. [ 914.187833][ T2010] netlink: 'syz.2.6760': attribute type 11 has an invalid length. [ 914.317481][ T2017] syz_tun: entered allmulticast mode [ 914.354509][ T2021] pimreg: entered allmulticast mode [ 914.355397][ T2006] syz_tun: left allmulticast mode [ 914.355515][ T2006] pimreg: left allmulticast mode [ 914.398766][ T2019] x_tables: duplicate underflow at hook 3 [ 914.481507][ T2019] nbd0: detected capacity change from 0 to 63 [ 914.579479][ T5635] block nbd0: Receive control failed (result -104) [ 914.700434][ T31] audit: type=1804 audit(1790880423.031:34): pid=2038 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=invalid_pcr cause=open_writers comm="syz.2.6766" name="/newroot/90/cgroup.controllers" dev="tmpfs" ino=479 res=1 errno=0 [ 914.700588][ T31] audit: type=1800 audit(1790880423.031:35): pid=2038 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.2.6766" name="cgroup.controllers" dev="tmpfs" ino=479 res=0 errno=0 [ 915.031821][ T2054] __nla_validate_parse: 5 callbacks suppressed [ 915.031842][ T2054] netlink: 20 bytes leftover after parsing attributes in process `syz.5.6771'. [ 915.309075][ T2065] netlink: 4 bytes leftover after parsing attributes in process `syz.2.6774'. [ 915.309126][ T2066] netlink: 'syz.5.6775': attribute type 10 has an invalid length. [ 915.356202][ T2066] veth0_to_bond: left promiscuous mode [ 915.367587][ T2067] netlink: 4 bytes leftover after parsing attributes in process `syz.2.6774'. [ 915.406425][ T2066] veth0_to_bond: entered promiscuous mode [ 915.836295][ T2072] net_ratelimit: 23 callbacks suppressed [ 915.836318][ T2072] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 915.968054][ T2080] batman_adv: batadv0: Adding interface: veth0 [ 915.968075][ T2080] batman_adv: batadv0: The MTU of interface veth0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 915.972956][ T2080] batman_adv: batadv0: Interface activated: veth0 [ 916.016334][ T2085] xt_NETMAP: bad rangesize 37. [ 916.218039][T21249] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 916.225788][T21249] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 916.560138][T10124] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 916.650071][ T5716] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 916.732880][ T2114] netlink: 12 bytes leftover after parsing attributes in process `syz.4.6788'. [ 917.107994][ T2121] netlink: 132 bytes leftover after parsing attributes in process `syz.5.6791'. [ 917.441594][ T6234] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 917.607881][T10127] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 917.791079][ T2134] netlink: 'syz.6.6794': attribute type 61 has an invalid length. [ 917.791107][ T2134] netlink: 'syz.6.6794': attribute type 62 has an invalid length. [ 917.792249][ T2134] netlink: 'syz.6.6794': attribute type 1 has an invalid length. [ 917.837350][ T2147] netlink: 9580 bytes leftover after parsing attributes in process `syz.7.6798'. [ 918.241749][T32158] Bluetooth: hci4: command 0x0406 tx timeout [ 918.644558][T10127] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 918.854215][ T2179] netlink: 14975 bytes leftover after parsing attributes in process `syz.6.6802'. [ 919.691672][T10124] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 920.006879][T21157] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 921.766573][T10127] net_ratelimit: 3 callbacks suppressed [ 921.766598][T10127] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 922.548999][ T2192] sch_tbf: burst 19872 is lower than device lo mtu (11337746) ! [ 922.563085][T10124] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 922.676775][ T2194] sch_tbf: burst 19872 is lower than device lo mtu (11337746) ! [ 922.677256][ T2199] sch_tbf: burst 6281 is lower than device lo mtu (11337746) ! [ 922.722851][ T2192] netlink: 24 bytes leftover after parsing attributes in process `syz.2.6808'. [ 923.100736][ T2223] netlink: 8 bytes leftover after parsing attributes in process `syz.6.6814'. [ 923.100764][ T2223] netlink: 24 bytes leftover after parsing attributes in process `syz.6.6814'. [ 923.101036][ T2223] netlink: 8 bytes leftover after parsing attributes in process `syz.6.6814'. [ 923.101057][ T2223] netlink: 24 bytes leftover after parsing attributes in process `syz.6.6814'. [ 923.201013][T21157] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 923.348810][ T2233] netlink: 27 bytes leftover after parsing attributes in process `syz.6.6817'. [ 923.530748][ T2241] netlink: 4 bytes leftover after parsing attributes in process `syz.4.6822'. [ 923.599805][T10124] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 923.603162][ T2246] netlink: 56 bytes leftover after parsing attributes in process `syz.6.6823'. [ 923.646519][ T2243] netlink: 4 bytes leftover after parsing attributes in process `syz.2.6821'. [ 923.849665][ T2249] netlink: 12 bytes leftover after parsing attributes in process `syz.6.6823'. [ 924.104960][ T2253] bond3: entered allmulticast mode [ 924.107845][ T2253] 8021q: adding VLAN 0 to HW filter on device bond3 [ 924.305467][ T2266] netlink: 'syz.7.6828': attribute type 1 has an invalid length. [ 924.415422][ T2266] 8021q: adding VLAN 0 to HW filter on device bond4 [ 924.484960][ T1739] block nbd4: Possible stuck request ffff888027dd7000: control (read@0,1024B). Runtime 210 seconds [ 924.485007][ T1739] block nbd4: Possible stuck request ffff888027dd71c0: control (read@1024,1024B). Runtime 210 seconds [ 924.485038][ T1739] block nbd4: Possible stuck request ffff888027dd7380: control (read@2048,1024B). Runtime 210 seconds [ 924.485068][ T1739] block nbd4: Possible stuck request ffff888027dd7540: control (read@3072,1024B). Runtime 210 seconds [ 924.638647][ T2278] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 924.638867][ T2278] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 924.649400][T10124] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 924.657361][ T2278] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 924.723191][ T2278] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 924.723421][ T2278] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 924.870983][ T2286] IPVS: set_ctl: invalid protocol: 576 0.32.0.0:8192 [ 924.904801][ T2289] ip6t_rt: `--rt-type 0' required before `--rt-0-*' [ 925.198985][ T2296] bond2: left promiscuous mode [ 925.199011][ T2296] gre1: left promiscuous mode [ 925.217798][ T2296] bridge1: left promiscuous mode [ 925.533269][ T2317] ipvlan0: entered promiscuous mode [ 925.533398][ T2317] bond0: (slave ipvlan0): enslaved VLAN challenged slave. Adding VLANs will be blocked as long as it is part of bond. [ 925.533413][ T2317] bond0: (slave ipvlan0): The slave device specified does not support setting the MAC address [ 925.533510][ T2317] bond0: (slave ipvlan0): Error -95 calling set_mac_address [ 925.730643][ T2289] nci: __nci_request: wait_for_completion_interruptible_timeout failed -512 [ 926.071190][ T2332] nbd: socks must be embedded in a SOCK_ITEM attr [ 926.698327][ T2357] netlink: 'syz.6.6855': attribute type 1 has an invalid length. [ 926.702009][ T2353] netlink: 'syz.6.6855': attribute type 1 has an invalid length. [ 926.841317][ T2357] 8021q: adding VLAN 0 to HW filter on device bond4 [ 926.945476][ T2360] 8021q: adding VLAN 0 to HW filter on device bond4 [ 926.945933][ T2360] bond4: (slave gre1): The slave device specified does not support setting the MAC address [ 926.957353][ T2360] bond4: (slave gre1): Error -95 calling set_mac_address [ 927.109879][ T2361] bond4: (slave gre1): The slave device specified does not support setting the MAC address [ 927.110492][ T2361] bond4: (slave gre1): Error -95 calling set_mac_address [ 927.612259][ T2339] geneve1oup.kill: entered promiscuous mode [ 927.614748][ T2360] workqueue: Failed to create a rescuer kthread for wq "bond5": -EINTR [ 927.627254][ T2383] workqueue: Failed to create a rescuer kthread for wq "bond5": -EINTR [ 927.653018][ T2388] bond4 (unregistering): Released all slaves [ 927.771243][T10126] net_ratelimit: 23 callbacks suppressed [ 927.771266][T10126] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 927.921544][ T2375] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 928.319817][ C0] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 928.325345][T21253] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 928.562078][ T2438] __nla_validate_parse: 9 callbacks suppressed [ 928.562103][ T2438] netlink: 12 bytes leftover after parsing attributes in process `syz.6.6867'. [ 928.812067][T10124] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 928.842065][ T2438] 8021q: adding VLAN 0 to HW filter on device bond4 [ 928.975231][ T2446] bond4: (slave geneve4): Enslaving as an active interface with an up link [ 929.023709][ T2459] pim6reg1: entered promiscuous mode [ 929.023736][ T2459] pim6reg1: entered allmulticast mode [ 929.051007][T10124] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 929.308148][ T2488] ip_tables: iptables: counters copy to user failed while replacing table [ 929.371761][ T59] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 929.601565][T10124] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 929.722505][T21249] netdevsim netdevsim3 eth1: set [1, 0] type 2 family 0 port 6081 - 0 [ 929.730057][T31436] netdevsim netdevsim3 eth4: set [1, 0] type 2 family 0 port 6081 - 0 [ 929.735777][ T59] netdevsim netdevsim3 eth3: set [1, 0] type 2 family 0 port 6081 - 0 [ 929.735903][ T59] netdevsim netdevsim3 eth2: set [1, 0] type 2 family 0 port 6081 - 0 [ 929.774809][T10126] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 930.258176][T31426] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 930.460902][ T2532] netlink: 'syz.5.6883': attribute type 1 has an invalid length. [ 932.203378][ T2590] netlink: 'syz.4.6890': attribute type 23 has an invalid length. [ 932.303659][ T2598] xt_CT: You must specify a L4 protocol and not use inversions on it [ 932.596275][ T2612] netlink: 48 bytes leftover after parsing attributes in process `syz.2.6892'. [ 932.784519][ T2612] netlink: 596 bytes leftover after parsing attributes in process `syz.2.6892'. [ 932.785021][ T2612] netlink: 12 bytes leftover after parsing attributes in process `syz.2.6892'. [ 933.118180][ T2626] netlink: 12 bytes leftover after parsing attributes in process `syz.2.6894'. [ 933.345325][ T2633] ip6gretap0: entered promiscuous mode [ 933.345734][ T2633] vlan2: entered promiscuous mode [ 933.761004][T10127] net_ratelimit: 379 callbacks suppressed [ 933.761026][T10127] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 933.955248][ T2651] netlink: 12 bytes leftover after parsing attributes in process `syz.4.6899'. [ 934.083273][T21157] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 934.317127][ T2667] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 934.392268][ T2677] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 934.466815][ T2667] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 934.558341][ T2692] netlink: 8 bytes leftover after parsing attributes in process `syz.4.6908'. [ 934.810507][ C1] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 934.815737][T10127] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 934.935812][ T2701] netlink: 8 bytes leftover after parsing attributes in process `syz.2.6909'. [ 935.815316][ T2712] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 935.850034][T10127] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 936.008629][T21157] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 936.081928][ T2725] netlink: 28 bytes leftover after parsing attributes in process `syz.4.6914'. [ 936.081993][ T2725] netlink: 28 bytes leftover after parsing attributes in process `syz.4.6914'. [ 936.134147][ T2725] netlink: 36 bytes leftover after parsing attributes in process `syz.4.6914'. [ 936.640190][ C1] ip6_tunnel: ip6tnl3 xmit: Local address not yet configured! [ 936.653261][T10126] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 937.041849][T31426] netdevsim netdevsim3 eth1: set [0, 0] type 1 family 0 port 8472 - 0 [ 937.042227][T21253] netdevsim netdevsim3 eth2: set [0, 0] type 1 family 0 port 8472 - 0 [ 937.042271][T21253] netdevsim netdevsim3 eth3: set [0, 0] type 1 family 0 port 8472 - 0 [ 937.042308][T21253] netdevsim netdevsim3 eth4: set [0, 0] type 1 family 0 port 8472 - 0 [ 937.119869][T10119] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 937.238223][ T2729] macvlan0: entered promiscuous mode [ 937.662903][ T2791] xt_hashlimit: size too large, truncated to 1048576 [ 937.681262][T10127] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 938.088499][ T2805] netlink: 4 bytes leftover after parsing attributes in process `syz.7.6925'. [ 938.192942][ T2808] tipc: Enabled bearer , priority 0 [ 938.197765][ T2808] +: renamed from syzkaller0 [ 938.217729][ T2808] tipc: Disabling bearer [ 938.320580][ T2804] netlink: 165 bytes leftover after parsing attributes in process `syz.4.6926'. [ 938.407948][ T2818] netlink: 332 bytes leftover after parsing attributes in process `syz.6.6928'. [ 938.408008][ T2818] netlink: 'syz.6.6928': attribute type 9 has an invalid length. [ 938.408024][ T2818] netlink: 'syz.6.6928': attribute type 1 has an invalid length. [ 938.857698][ T2854] net_ratelimit: 1 callbacks suppressed [ 938.857723][ T2854] openvswitch: netlink: nsh attribute has unmatched MD type 0. [ 939.056887][ T2862] netlink: 8 bytes leftover after parsing attributes in process `syz.7.6935'. [ 939.133625][ T2875] netlink: 8 bytes leftover after parsing attributes in process `syz.7.6935'. [ 939.766998][T10124] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 939.844462][T21148] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 939.949483][ T2917] netlink: 'syz.2.6939': attribute type 30 has an invalid length. [ 940.138271][ T5280] eql: remember to turn off Van-Jacobson compression on your slave devices [ 940.831276][T10124] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 941.093966][ T2943] tap0: tun_chr_ioctl cmd 1074025680 [ 941.122840][T31434] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 941.299014][ T2951] ip_tables: iptables: counters copy to user failed while replacing table [ 941.310329][ T2951] ip_tables: iptables: counters copy to user failed while replacing table [ 941.310692][ T2951] ip_tables: iptables: counters copy to user failed while replacing table [ 941.311372][ T2951] ip_tables: iptables: counters copy to user failed while replacing table [ 941.311699][ T2951] ip_tables: iptables: counters copy to user failed while replacing table [ 941.415408][ T2951] IPVS: Error connecting to the multicast addr [ 941.567440][ T2961] netlink: 52 bytes leftover after parsing attributes in process `syz.6.6946'. [ 941.567474][ T2961] netlink: 8 bytes leftover after parsing attributes in process `syz.6.6946'. [ 942.036006][ T2867] nci: __nci_request: wait_for_completion_interruptible_timeout failed -512 [ 942.611210][ T2998] sch_fq: defrate 8 ignored. [ 942.715582][ T2995] x_tables: ip6_tables: rpfilter match: used from hooks OUTPUT, but only valid from PREROUTING [ 942.859906][ T2994] can: request_module (can-proto-4) failed. [ 943.115449][ T2987] netlink: 48 bytes leftover after parsing attributes in process `syz.5.6951'. [ 943.166425][ T3023] bridge1: entered promiscuous mode [ 943.166453][ T3023] bridge1: entered allmulticast mode [ 943.186195][ T3023] team0: Port device bridge1 added [ 943.468700][ T3035] netlink: 'syz.4.6964': attribute type 1 has an invalid length. [ 943.652578][ T3035] veth7: entered allmulticast mode [ 943.656593][ T3048] syzkaller0: left promiscuous mode [ 943.656618][ T3048] syzkaller0: left allmulticast mode [ 943.711901][ T3042] macvlan2: entered promiscuous mode [ 943.711929][ T3042] macvlan2: entered allmulticast mode [ 943.715557][ T3042] bond2: entered promiscuous mode [ 943.738705][ T3042] 8021q: adding VLAN 0 to HW filter on device macvlan2 [ 943.748858][ T3042] bond2: left promiscuous mode [ 943.845884][T32158] Bluetooth: hci5: command 0x0406 tx timeout [ 943.910852][ T3058] net_ratelimit: 71 callbacks suppressed [ 943.910876][ T3058] ip_tables: iptables: counters copy to user failed while replacing table [ 943.937852][ T3058] netlink: 'syz.5.6969': attribute type 11 has an invalid length. [ 944.320158][ C0] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 944.552716][ T3064] netlink: 12 bytes leftover after parsing attributes in process `syz.5.6971'. [ 944.552837][ T3064] openvswitch: netlink: Missing valid actions attribute. [ 944.620903][ T3060] bond5: option lacp_active: mode dependency failed, not supported in mode balance-rr(0) [ 944.638086][ T3060] bond5 (unregistering): Released all slaves [ 944.654986][ T3071] netlink: 8 bytes leftover after parsing attributes in process `syz.4.6972'. [ 944.683188][ T3061] tc_dump_action: action bad kind [ 944.727350][T10127] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 944.821262][ T3073] bond4: entered allmulticast mode [ 944.855726][ T3075] macvlan2: entered promiscuous mode [ 944.855752][ T3075] macvlan2: entered allmulticast mode [ 944.856918][ T3075] bond4: (slave macvlan2): Opening slave failed [ 944.904174][ T3083] IPVS: set_ctl: invalid protocol: 58 10.1.1.1:20003 [ 944.960173][ T1709] block nbd0: Possible stuck request ffff888027c41880: control (read@3072,1024B). Runtime 30 seconds [ 944.960225][ T1709] block nbd0: Possible stuck request ffff888027c41340: control (read@0,1024B). Runtime 30 seconds [ 944.960258][ T1709] block nbd0: Possible stuck request ffff888027c41500: control (read@1024,1024B). Runtime 30 seconds [ 944.960290][ T1709] block nbd0: Possible stuck request ffff888027c416c0: control (read@2048,1024B). Runtime 30 seconds [ 945.332310][ T3064] nci: __nci_request: wait_for_completion_interruptible_timeout failed -512 [ 945.603269][T21253] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 945.707517][ T3108] sit0: entered promiscuous mode [ 945.746984][ T3108] netlink: 'syz.6.6980': attribute type 1 has an invalid length. [ 945.747004][ T3108] netlink: 1 bytes leftover after parsing attributes in process `syz.6.6980'. [ 945.984397][T10127] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 945.993930][ T3126] netlink: 12 bytes leftover after parsing attributes in process `syz.2.6981'. [ 945.998091][ T3126] netlink: 'syz.2.6981': attribute type 16 has an invalid length. [ 946.240408][T21257] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 946.518393][ T3149] dvmrp1: entered allmulticast mode [ 946.518551][ T3148] dvmrp1: left allmulticast mode [ 947.059673][T10126] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 947.267005][ T3165] netlink: 4 bytes leftover after parsing attributes in process `syz.5.6986'. [ 947.396026][ T3167] netlink: 4 bytes leftover after parsing attributes in process `syz.5.6986'. [ 947.449614][T31436] netdevsim netdevsim5 netdevsim1: set [0, 0] type 1 family 0 port 8472 - 0 [ 947.459664][T21257] netdevsim netdevsim5 netdevsim3: set [0, 0] type 1 family 0 port 8472 - 0 [ 947.459855][T21257] netdevsim netdevsim5 netdevsim0: set [0, 0] type 1 family 0 port 8472 - 0 [ 947.459966][T21257] netdevsim netdevsim5 netdevsim2: set [0, 0] type 1 family 0 port 8472 - 0 [ 948.083357][ T1647] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 948.125952][ T3179] netlink: 12 bytes leftover after parsing attributes in process `syz.7.6988'. [ 948.639854][ T5716] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 948.865564][ T3144] nci: __nci_request: wait_for_completion_interruptible_timeout failed -512 [ 948.959550][ C0] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 948.960046][ C0] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 948.966640][T32158] Bluetooth: hci6: command 0x0405 tx timeout [ 949.120592][ T1647] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 949.218139][ T3193] netlink: 12 bytes leftover after parsing attributes in process `syz.5.6991'. [ 949.406626][ T3203] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 949.407473][ C0] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 949.408128][ T3193] syzkaller0: entered promiscuous mode [ 949.408149][ T3193] syzkaller0: entered allmulticast mode [ 949.450745][ T3204] netlink: 8 bytes leftover after parsing attributes in process `syz.7.6992'. [ 949.450764][ T3204] netlink: 4 bytes leftover after parsing attributes in process `syz.7.6992'. [ 949.677165][ T3219] netlink: 20 bytes leftover after parsing attributes in process `syz.4.6995'. [ 949.736160][ T3223] netlink: 24 bytes leftover after parsing attributes in process `syz.6.6998'. [ 949.736205][ T3223] netlink: 16 bytes leftover after parsing attributes in process `syz.6.6998'. [ 949.738878][ T3223] netlink: 16 bytes leftover after parsing attributes in process `syz.6.6998'. [ 949.969957][ T3233] netlink: 8 bytes leftover after parsing attributes in process `syz.4.7001'. [ 949.972624][ T3233] xt_TCPMSS: Only works on TCP SYN packets [ 950.033038][ T3235] netlink: 8 bytes leftover after parsing attributes in process `syz.7.7002'. [ 950.076149][T21148] IPVS: starting estimator thread 0... [ 950.161335][ T1647] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 950.161349][ T3237] IPVS: using max 28 ests per chain, 67200 per kthread [ 950.236370][ T3243] IPv6: addrconf: prefix option has invalid lifetime [ 950.504700][ T3248] sctp: [Deprecated]: syz.5.7005 (pid 3248) Use of int in max_burst socket option. [ 950.504700][ T3248] Use struct sctp_assoc_value instead [ 950.723490][ T1647] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 950.724493][T31434] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 950.965185][ T3254] netlink: 712 bytes leftover after parsing attributes in process `syz.6.7006'. [ 950.984212][ T3254] netlink: 5504 bytes leftover after parsing attributes in process `syz.6.7006'. [ 950.984239][ T3254] netlink: 24 bytes leftover after parsing attributes in process `syz.6.7006'. [ 951.039598][ T5635] Bluetooth: hci6: command 0x0405 tx timeout [ 951.184115][ T3259] IPVS: set_ctl: invalid protocol: 576 0.32.0.0:8192 [ 951.266055][ T3261] syzkaller0: entered promiscuous mode [ 951.266080][ T3261] syzkaller0: entered allmulticast mode [ 951.362008][T31434] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 951.479893][ T3263] netlink: 16402 bytes leftover after parsing attributes in process `syz.4.7010'. [ 952.723705][ T3300] syzkaller0: entered promiscuous mode [ 952.723724][ T3300] syzkaller0: entered allmulticast mode [ 953.457764][ T3248] nci: __nci_request: wait_for_completion_interruptible_timeout failed -512 [ 953.819712][ T3332] netlink: 'syz.5.7020': attribute type 4 has an invalid length. [ 953.820637][ T3332] netlink: 'syz.5.7020': attribute type 4 has an invalid length. [ 954.057583][ T3348] netlink: 'syz.7.7024': attribute type 4 has an invalid length. [ 954.131226][ T3352] net_ratelimit: 10 callbacks suppressed [ 954.131248][ T3352] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 954.285827][ T3357] syzkaller1: entered promiscuous mode [ 954.285856][ T3357] syzkaller1: entered allmulticast mode [ 954.398254][ T3367] syzkaller1: entered promiscuous mode [ 954.398293][ T3367] syzkaller1: entered allmulticast mode [ 954.513698][ T3373] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 954.571056][ T1739] block nbd4: Possible stuck request ffff888027dd7000: control (read@0,1024B). Runtime 240 seconds [ 954.571102][ T1739] block nbd4: Possible stuck request ffff888027dd71c0: control (read@1024,1024B). Runtime 240 seconds [ 954.571132][ T1739] block nbd4: Possible stuck request ffff888027dd7380: control (read@2048,1024B). Runtime 240 seconds [ 954.571162][ T1739] block nbd4: Possible stuck request ffff888027dd7540: control (read@3072,1024B). Runtime 240 seconds [ 954.606378][ T3376] netdevsim netdevsim5: Firmware load for '..' refused, path contains '..' component [ 954.881080][T10126] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 954.883929][ T3383] __nla_validate_parse: 6 callbacks suppressed [ 954.883948][ T3383] netlink: 4 bytes leftover after parsing attributes in process `syz.2.7033'. [ 954.885774][ T3383] netlink: 4 bytes leftover after parsing attributes in process `syz.2.7033'. [ 955.039938][ T5716] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 955.237718][ T3400] netlink: 48 bytes leftover after parsing attributes in process `syz.4.7037'. [ 955.302254][ T3394] 8021q: adding VLAN 0 to HW filter on device bond2 [ 955.355655][ T3402] netlink: 20 bytes leftover after parsing attributes in process `syz.5.7035'. [ 955.355693][ T3402] netlink: 8 bytes leftover after parsing attributes in process `syz.5.7035'. [ 955.411390][ T3402] vlan0: entered promiscuous mode [ 955.634304][ T3413] netlink: 48 bytes leftover after parsing attributes in process `syz.4.7041'. [ 955.922150][ T1647] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 956.072999][ T3437] netlink: 60 bytes leftover after parsing attributes in process `syz.7.7044'. [ 956.155435][ T3440] netlink: 64 bytes leftover after parsing attributes in process `syz.5.7049'. [ 956.283639][ T3441] netlink: 24 bytes leftover after parsing attributes in process `syz.6.7047'. [ 956.458297][ T3455] netlink: 44 bytes leftover after parsing attributes in process `syz.5.7052'. [ 956.485222][T21249] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 956.961936][ T1647] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 957.132111][T31436] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 957.777600][T10126] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 958.159949][ C1] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 958.160185][ C1] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 958.400097][ T32] INFO: task syz.0.6064:31558 blocked for more than 143 seconds. [ 958.400126][ T32] Not tainted syzkaller #0 [ 958.400139][ T32] "echo 0 > /proc/sys/kernel/hung_task_timeout_secs" disables this message. [ 958.400151][ T32] task:syz.0.6064 state:D stack:26912 pid:31558 tgid:31547 ppid:30318 task_flags:0x400140 flags:0x00080002 [ 958.400252][ T32] Call Trace: [ 958.400262][ T32] [ 958.400285][ T32] __schedule+0x17db/0x58f0 [ 958.400352][ T32] ? __pfx___schedule+0x10/0x10 [ 958.400393][ T32] ? schedule+0x90/0x2b0 [ 958.400427][ T32] schedule+0x164/0x2b0 [ 958.400460][ T32] schedule_preempt_disabled+0x13/0x30 [ 958.400489][ T32] __mutex_lock+0x7c1/0x1550 [ 958.400533][ T32] ? __mutex_lock+0x5d4/0x1550 [ 958.400570][ T32] ? nfsd_nl_unlock_export_doit+0x2ef/0x580 [ 958.400606][ T32] ? __pfx___mutex_lock+0x10/0x10 [ 958.400637][ T32] ? lockdep_hardirqs_on+0x7b/0x110 [ 958.400686][ T32] ? kern_path+0xd1/0x150 [ 958.400723][ T32] nfsd_nl_unlock_export_doit+0x2ef/0x580 [ 958.400755][ T32] ? __nla_parse+0x40/0x60 [ 958.400787][ T32] ? __pfx_nfsd_nl_unlock_export_doit+0x10/0x10 [ 958.400820][ T32] ? genl_family_rcv_msg_attrs_parse+0x20b/0x2f0 [ 958.400853][ T32] ? genl_family_rcv_msg_attrs_parse+0x265/0x2f0 [ 958.400894][ T32] genl_family_rcv_msg_doit+0x233/0x340 [ 958.400933][ T32] ? __pfx_genl_family_rcv_msg_doit+0x10/0x10 [ 958.400995][ T32] ? bpf_lsm_capable+0x9/0x20 [ 958.401018][ T32] ? security_capable+0x7e/0x2c0 [ 958.401055][ T32] genl_rcv_msg+0x614/0x7a0 [ 958.401093][ T32] ? __pfx_genl_rcv_msg+0x10/0x10 [ 958.401122][ T32] ? __pfx_nfsd_nl_unlock_export_doit+0x10/0x10 [ 958.401172][ T32] netlink_rcv_skb+0x226/0x4a0 [ 958.401198][ T32] ? __pfx_genl_rcv_msg+0x10/0x10 [ 958.401230][ T32] ? __pfx_netlink_rcv_skb+0x10/0x10 [ 958.401291][ T32] ? down_read+0x2be/0x330 [ 958.401331][ T32] genl_rcv+0x28/0x40 [ 958.402986][ T32] netlink_unicast+0x7bd/0x940 [ 958.403041][ T32] netlink_sendmsg+0x813/0x ** replaying previous printk message ** [ 958.403041][ T32] netlink_sendmsg+0x813/0xb40 [ 958.403078][ T32] ? __pfx_netlink_sendmsg+0x10/0x10 [ 958.403113][ T32] ? apparmor_socket_sendmsg+0x98/0x360 [ 958.403144][ T32] ? __pfx_netlink_sendmsg+0x10/0x10 [ 958.403168][ T32] sock_sendmsg_nosec+0x14e/0x190 [ 958.403197][ T32] ____sys_sendmsg+0x54e/0x850 [ 958.403237][ T32] ? __pfx_____sys_sendmsg+0x10/0x10 [ 958.403288][ T32] ? import_iovec+0x73/0xa0 [ 958.403323][ T32] ___sys_sendmsg+0x2a5/0x360 [ 958.403354][ T32] ? __lock_acquire+0x747/0x2de0 [ 958.403384][ T32] ? __pfx____sys_sendmsg+0x10/0x10 [ 958.403422][ T32] ? futex_wait+0x2a2/0x390 [ 958.403493][ T32] ? __fget_files+0x2a/0x420 [ 958.403525][ T32] ? __fget_files+0x3a2/0x420 [ 958.403570][ T32] __x64_sys_sendmsg+0x1b1/0x290 [ 958.403607][ T32] ? __pfx___x64_sys_sendmsg+0x10/0x10 [ 958.404131][ T32] do_syscall_64+0x166/0x520 [ 958.404165][ T32] ? trace_irq_disable+0x3b/0x140 [ 958.404190][ T32] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 958.404216][ T32] ? clear_bhb_loop+0x70/0xc0 [ 958.404246][ T32] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 958.404270][ T32] RIP: 0033:0x7fd68759e159 [ 958.404299][ T32] RSP: 002b:00007fd685793028 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 958.404325][ T32] RAX: ffffffffffffffda RBX: 00007fd687826450 RCX: 00007fd68759e159 [ 958.404343][ T32] RDX: 0000000004000880 RSI: 00002000000000c0 RDI: 0000000000000003 [ 958.404360][ T32] RBP: 00007fd68763506b R08: 0000000000000000 R09: 0000000000000000 [ 958.404375][ T32] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 958.404390][ T32] R13: 00007fd6878264e8 R14: 00007fd687826450 R15: 00007ffdb5e4f258 [ 958.405928][ T32] [ 958.406118][ T32] [ 958.406118][ T32] Showing all locks held in the system: [ 958.406133][ T32] locks held by khungtaskd/32: 1, last CPU#1: [ 958.406152][ T32] #0: ffffffff8ed5c920 (rcu_read_lock){....}-{1:3}, at: debug_show_all_locks+0x2e/0x180 [ 958.406238][ T32] locks held by getty/5378: 2, on CPU#1: [ 958.406256][ T32] #0: ffff888035d630a0 (&tty->ldisc_sem){++++}-{0:0}, at: tty_ldisc_ref_wait+0x25/0x70 [ 958.406374][ T32] #1: ffffc900032332e8 (&ldata->atomic_read_lock){+.+.}-{4:4}, at: n_tty_read+0x45a/0x1360 [ 958.407786][ T32] locks held by kworker/u8:17/6230: 3, on CPU#0: [ 958.407804][ T32] #0: ffff88801b0ac140 ((wq_completion)events_unbound){+.+.}-{0:0}, at: process_scheduled_works+0x97a/0x1630 [ 958.407872][ T32] #1: ffffc900058d7c40 ((linkwatch_work).work){+.+.}-{0:0}, at: process_scheduled_works+0x97a/0x1630 [ 958.407936][ T32] #2: ffffffff902549e0 (rtnl_mutex){+.+.}-{4:4}, at: linkwatch_event+0xe/0x60 [ 958.408010][ T32] locks held by udevd/28446: 1, on CPU#1: [ 958.408027][ T32] #0: ffff888027ca7350 (&disk->open_mutex){+.+.}-{4:4}, at: bdev_open+0xde/0xd70 [ 958.408163][ T32] locks held by udevd/30332: 1, on CPU#0: [ 958.408180][ T32] #0: ffff888027b2f350 (&disk->open_mutex){+.+.}-{4:4}, at: bdev_open+0xde/0xd70 [ 958.408240][ T32] locks held by syz.1.5852/30637: 2, on CPU#0: [ 958.408258][ T32] #0: ffffffff902c5d68 (cb_lock){++++}-{4:4}, at: genl_rcv+0x19/0x40 [ 958.408324][ T32] #1: ffffffff8f09f900 (nfsd_mutex){+.+.}-{4:4}, at: nfsd_nl_listener_set_doit+0x53d/0x1ab0 [ 958.408393][ T32] locks held by kworker/u8:19/31434: 2, on CPU#1: [ 958.408410][ T32] #0: ffff88801b0ac140 ((wq_completion)events_unbound){+.+.}-{0:0}, at: process_scheduled_works+0x97a/0x1630 [ 958.408474][ T32] #1: ffffc9000368fc40 ((work_completion)(&sub_info->work)){+.+.}-{0:0}, at: process_scheduled_works+0x97a/0x1630 [ 958.408540][ T32] locks held by syz.0.6064/31558: 2, on CPU#1: [ 958.408557][ T32] #0: ffffffff902c5d68 (cb_lock){++++}-{4:4}, at: genl_rcv+0x19/0x40 [ 958.408617][ T32] #1: ffffffff8f09f900 (nfsd_mutex){+.+.}-{4:4}, at: nfsd_nl_unlock_export_doit+0x2ef/0x580 [ 958.408681][ T32] locks held by syz.3.6127/31791: 2, on CPU#0: [ 958.408698][ T32] #0: ffffffff902c5d68 (cb_lock){++++}-{4:4}, at: genl_rcv+0x19/0x40 [ 958.408758][ T32] #1: ffffffff8f09f900 (nfsd_mutex){+.+.}-{4:4}, at: nfsd_nl_version_set_doit+0xcd/0x7a0 [ 958.408827][ T32] locks held by syz.2.7056/3464: 1, on CPU#1: [ 958.408843][ T32] #0: ffff888076151380 (&sb->s_type->i_mutex_key#13){+.+.}-{4:4}, at: __sock_release+0x7a/0x1f0 [ 958.408907][ T32] locks held by syz.2.7056/3466: 4, on CPU#1: [ 958.408923][ T32] #0: ffffffff902c5d68 (cb_lock){++++}-{4:4}, at: genl_rcv+0x19/0x40 [ 958.408983][ T32] #1: ffffffff905c5ce0 (ovs_mutex){+.+.}-{4:4}, at: ovs_dp_cmd_new+0x65c/0xb00 [ 958.409043][ T32] #2: ffffffff902549e0 (rtnl_mutex){+.+.}-{4:4}, at: internal_dev_create+0x278/0x480 [ 958.409109][ T32] #3: ffff888060e70ce0 (&nft_net->commit_mutex){+.+.}-{4:4}, at: nf_tables_netdev_event+0xad/0x160 [ 958.531755][ T32] locks held by syz.2.7056/3467: 2, on CPU#0: [ 958.531841][ T32] #0: ffffffff902c5d68 (cb_lock){++++}-{4:4}, at: genl_rcv+0x19/0x40 [ 958.532016][ T32] #1: ffffffff905c5ce0 (ovs_mutex){+.+.}-{4:4}, at: ovs_flow_cmd_get+0x337/0x620 [ 958.532181][ T32] locks held by syz.2.7056/3469: 2, on CPU#1: [ 958.532222][ T32] #0: ffff888060e70ce0 (&nft_net->commit_mutex){+.+.}-{4:4}, at: nf_tables_valid_genid+0x3e/0x100 [ 958.532458][ T32] #1: ffffffff8ed62ce8 (rcu_state.exp_mutex){+.+.}-{4:4}, at: synchronize_rcu_expedited+0x38d/0x770 [ 958.532686][ T32] locks held by syz.2.7056/3471: 1, last CPU#0: [ 958.532728][ T32] #0: ffffffff8ed5c920 (rcu_read_lock){....}-{1:3}, at: bpf_test_timer_enter+0xf9/0x260 [ 958.532873][ T32] locks held by syz.7.7058/3474: 1, on CPU#0: [ 958.532914][ T32] #0: ffffffff902549e0 (rtnl_mutex){+.+.}-{4:4}, at: __tun_chr_ioctl+0x3da/0x1e70 [ 958.533069][ T32] locks held by syz.7.7058/3475: 2, on CPU#0: [ 958.533111][ T32] #0: ffff88805675c6e8 (nlk_cb_mutex-ROUTE){+.+.}-{4:4}, at: __netlink_dump_start+0xf4/0x7b0 [ 958.533320][ T32] #1: ffffffff902549e0 (rtnl_mutex){+.+.}-{4:4}, at: rtnl_dump_ifinfo+0xa18/0x1420 [ 958.549687][ T32] locks held by syz.5.7059/3479: 3, on CPU#0: [ 958.549739][ T32] #0: ffff888056384d00 (&sb->s_type->i_mutex_key#13){+.+.}-{4:4}, at: __sock_release+0x7a/0x1f0 [ 958.549965][ T32] #1: ffffffff902c3d88 ((netlink_chain).rwsem){++++}-{4:4}, at: blocking_notifier_call_chain+0x54/0x90 [ 958.550176][ T32] #2: ffff8880520840e0 (&nft_net->commit_mutex){+.+.}-{4:4}, at: nft_rcv_nl_event+0x14b/0xe60 [ 958.550339][ T32] locks held by syz.5.7059/3481: 2, on CPU#1: [ 958.550380][ T32] #0: ffffffff9aef68c0 (nfnl_subsys_nftables){+.+.}-{4:4}, at: nfnetlink_rcv+0x64b/0x28c0 [ 958.550548][ T32] #1: ffff8880520840e0 (&nft_net->commit_mutex){+.+.}-{4:4}, at: nf_tables_valid_genid+0x3e/0x100 [ 958.550743][ T32] locks held by syz.5.7059/3483: 2, on CPU#1: [ 958.550788][ T32] #0: ffff8880520840e0 (&nft_net->commit_mutex){+.+.}-{4:4}, at: nf_tables_valid_genid+0x3e/0x100 [ 958.580678][ T32] #1: ffffffff8ed62ce8 (rcu_state.exp_mutex){+.+.}-{4:4}, at: synchronize_rcu_expedited+0x38d/0x770 [ 958.580907][ T32] locks held by syz.6.7061/3486: 2, on CPU#1: [ 958.580966][ T32] #0: ffffffff8fa0cb00 (ppp_mutex){+.+.}-{4:4}, at: ppp_ioctl+0xdf/0x1c00 [ 958.581142][ T32] #1: ffffffff902549e0 (rtnl_mutex){+.+.}-{4:4}, at: ppp_ioctl+0xaef/0x1c00 [ 958.581308][ T32] locks held by syz.6.7061/3488: 1, on CPU#0: [ 958.581350][ T32] #0: ffffffff8fa0cb00 (ppp_mutex){+.+.}-{4:4}, at: ppp_ioctl+0xdf/0x1c00 [ 958.581515][ T32] locks held by syz.6.7061/3491: 1, on CPU#1: [ 958.581624][ T32] #0: ffffffff8fa0cb00 (ppp_mutex){+.+.}-{4:4}, at: ppp_ioctl+0xdf/0x1c00 [ 958.581808][ T32] locks held by syz.6.7061/3493: 1, on CPU#0: [ 958.581849][ T32] #0: ffffffff902549e0 (rtnl_mutex){+.+.}-{4:4}, at: __tun_chr_ioctl+0x3da/0x1e70 [ 958.581995][ T32] locks held by syz.6.7061/3496: 4, last CPU#0: [ 958.582036][ T32] #0: ffff88807f646d30 (&f->f_pos_lock){+.+.}-{4:4}, at: fdget_pos+0x246/0x320 [ 958.591702][ T32] #1: ffff888067e56460 (sb_writers#5){.+.+}-{0:0}, at: vfs_write+0x22b/0xba0 [ 958.591897][ T32] #2: ffff88807fb9b8d0 (&sb->s_type->i_mutex_key#15){+.+.}-{4:4}, at: shmem_file_write_iter+0x7f/0x120 [ 958.592085][ T32] #3: ffff8880b863bb20 (&rq->__lock){-.-.}-{2:2}, at: raw_spin_rq_lock_nested+0x2d/0x160 [ 958.592271][ T32] locks held by syz.4.7062/3494: 2, last CPU#0: [ 958.592314][ T32] #0: ffff8880333c36b8 (&mm->mmap_lock){++++}-{4:4}, at: vm_mmap_pgoff+0x1dd/0x4e0 [ 958.592535][ T32] #1: ffffffff8ed5c920 (rcu_read_lock){....}-{1:3}, at: __pte_offset_map+0x29/0x240 [ 958.592699][ T32] locks held by syz.4.7062/3495: 1, on CPU#1: [ 958.592741][ T32] #0: ffffffff9aef68c0 (nfnl_subsys_nftables){+.+.}-{4:4}, at: nfnetlink_rcv+0x64b/0x28c0 [ 958.592921][ T32] locks held by syz.4.7062/3497: 1, on CPU#0: [ 958.592970][ T32] #0: ffffffff902549e0 (rtnl_mutex){+.+.}-{4:4}, at: __tun_chr_ioctl+0x3da/0x1e70 [ 958.601019][ T32] locks held by syz.4.7062/3499: 1, on CPU#0: [ 958.601139][ T32] #0: ffffffff9aef68c0 (nfnl_subsys_nftables){+.+.}-{4:4}, at: nfnetlink_rcv+0x64b/0x28c0 [ 958.602099][ T32] locks held by modprobe/3501: 1, last CPU#0: [ 958.602160][ T32] #0: ffff88802f2f1d38 (&mm->mmap_lock){++++}-{4:4}, at: exit_mmap+0x2d8/0x9f0 [ 958.602357][ T32] [ 958.602376][ T32] ============================================= [ 958.602376][ T32] [ 958.602418][ T32] NMI backtrace for cpu 0 [ 958.602461][ T32] CPU: 0 UID: 0 PID: 32 Comm: khungtaskd Not tainted syzkaller #0 PREEMPT(full) [ 958.602530][ T32] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 09/16/2026 [ 958.602562][ T32] Call Trace: [ 958.602585][ T32] [ 958.602615][ T32] dump_stack_lvl+0xe8/0x150 [ 958.602707][ T32] nmi_cpu_backtrace+0x274/0x2d0 [ 958.602782][ T32] ? __pfx_nmi_raise_cpu_backtrace+0x10/0x10 [ 958.602886][ T32] nmi_trigger_cpumask_backtrace+0x17d/0x390 [ 958.602964][ T32] sys_info+0x135/0x170 [ 958.603027][ T32] watchdog+0xfd7/0x1030 [ 958.603099][ T32] ? watchdog+0x1c7/0x1030 [ 958.603184][ T32] kthread+0x38b/0x480 [ 958.603248][ T32] ? __pfx_watchdog+0x10/0x10 [ 958.603288][ T32] ? __pfx_kthread+0x10/0x10 [ 958.603353][ T32] ret_from_fork+0x514/0xb70 [ 958.603424][ T32] ? __pfx_ret_from_fork+0x10/0x10 [ 958.603493][ T32] ? __switch_to+0xc89/0x1420 [ 958.603606][ T32] ? __pfx_kthread+0x10/0x10 [ 958.603668][ T32] ret_from_fork_asm+0x1a/0x30 [ 958.603807][ T32] [ 958.603900][ T32] Sending NMI from CPU 0 to CPUs 1: [ 958.604028][ C1] NMI backtrace for cpu 1 [ 958.604042][ C1] CPU: 1 UID: 0 PID: 16 Comm: pr/ttyS0 Not tainted syzkaller #0 PREEMPT(full) [ 958.604064][ C1] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 09/16/2026 [ 958.604076][ C1] RIP: 0010:io_serial_in+0x77/0xc0 [ 958.604103][ C1] Code: e8 be 9a 54 fc 44 89 f9 d3 e3 49 83 c6 40 4c 89 f0 48 c1 e8 03 42 80 3c 20 00 74 08 4c 89 f7 e8 ff 9e c4 fc 41 03 1e 89 da ec <0f> b6 c0 5b 41 5c 41 5e 41 5f c3 cc cc cc cc cc 44 89 f9 80 e1 07 [ 958.604120][ C1] RSP: 0018:ffffc900001578b8 EFLAGS: 00000002 [ 958.604137][ C1] RAX: 1ffffffff35a8e00 RBX: 00000000000003fd RCX: 0000000000000000 [ 958.604151][ C1] RDX: 00000000000003fd RSI: 0000000000000000 RDI: 0000000000000020 [ 958.604163][ C1] RBP: dffffc0000000000 R08: 0000000000000003 R09: 0000000000000004 [ 958.604177][ C1] R10: dffffc0000000000 R11: ffffffff857340f0 R12: dffffc0000000000 [ 958.604191][ C1] R13: 0000000000000000 R14: ffffffff9ad47300 R15: 0000000000000000 [ 958.604205][ C1] FS: 0000000000000000(0000) GS:ffff888124dc4000(0000) knlGS:0000000000000000 [ 958.604222][ C1] CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033 [ 958.604235][ C1] CR2: 0000200000900000 CR3: 000000007fe24000 CR4: 00000000003526f0 [ 958.604259][ C1] Call Trace: [ 958.604266][ C1] [ 958.604276][ C1] wait_for_lsr+0x184/0x2f0 [ 958.604301][ C1] __serial8250_console_fifo_write+0xcd/0x3e0 [ 958.604334][ C1] serial8250_console_write+0xaa1/0x1200 [ 958.604356][ C1] ? lockdep_hardirqs_on+0x7b/0x110 [ 958.604386][ C1] ? __pfx_serial8250_console_write+0x10/0x10 [ 958.604408][ C1] ? __schedule+0x17f1/0x58f0 [ 958.604440][ C1] nbcon_emit_next_record+0xef5/0x1a90 [ 958.604471][ C1] ? __pfx_nbcon_emit_next_record+0x10/0x10 [ 958.604496][ C1] ? nbcon_context_try_acquire+0x819/0xbd0 [ 958.604526][ C1] ? _raw_spin_lock_irqsave+0x4c/0x60 [ 958.604551][ C1] nbcon_kthread_func+0x679/0x880 [ 958.604575][ C1] ? nbcon_kthread_func+0x163/0x880 [ 958.604595][ C1] ? __pfx_nbcon_kthread_func+0x10/0x10 [ 958.604619][ C1] ? __kthread_parkme+0x71/0x1f0 [ 958.604647][ C1] ? __kthread_parkme+0x199/0x1f0 [ 958.604677][ C1] kthread+0x38b/0x480 [ 958.604696][ C1] ? __pfx_nbcon_kthread_func+0x10/0x10 [ 958.604715][ C1] ? __pfx_kthread+0x10/0x10 [ 958.604734][ C1] ret_from_fork+0x514/0xb70 [ 958.604754][ C1] ? __pfx_ret_from_fork+0x10/0x10 [ 958.604772][ C1] ? __switch_to+0xc89/0x1420 [ 958.604799][ C1] ? __pfx_kthread+0x10/0x10 [ 958.604818][ C1] ret_from_fork_asm+0x1a/0x30 [ 958.604856][ C1] [ 958.617981][ T32] Kernel panic - not syncing: hung_task: blocked tasks [ 959.838725][ T32] CPU: 0 UID: 0 PID: 32 Comm: khungtaskd Not tainted syzkaller #0 PREEMPT(full) [ 959.847859][ T32] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 09/16/2026 [ 959.857947][ T32] Call Trace: [ 959.861302][ T32] [ 959.864270][ T32] vpanic+0x56d/0xa60 [ 959.868308][ T32] ? __pfx___schedule+0x10/0x10 [ 959.873247][ T32] ? __pfx_vpanic+0x10/0x10 [ 959.877815][ T32] panic+0xc5/0xd0 [ 959.881593][ T32] ? __pfx_panic+0x10/0x10 [ 959.886087][ T32] ? preempt_schedule_common+0x7f/0xd0 [ 959.891594][ T32] ? preempt_schedule_thunk+0x16/0x40 [ 959.897039][ T32] ? nmi_trigger_cpumask_backtrace+0x31a/0x390 [ 959.903235][ T32] ? nmi_trigger_cpumask_backtrace+0x31f/0x390 [ 959.909432][ T32] watchdog+0x1030/0x1030 [ 959.913836][ T32] ? watchdog+0x1c7/0x1030 [ 959.918305][ T32] kthread+0x38b/0x480 [ 959.922416][ T32] ? __pfx_watchdog+0x10/0x10 [ 959.927149][ T32] ? __pfx_kthread+0x10/0x10 [ 959.931779][ T32] ret_from_fork+0x514/0xb70 [ 959.936439][ T32] ? __pfx_ret_from_fork+0x10/0x10 [ 959.941578][ T32] ? __switch_to+0xc89/0x1420 [ 959.946307][ T32] ? __pfx_kthread+0x10/0x10 [ 959.950929][ T32] ret_from_fork_asm+0x1a/0x30 [ 959.955753][ T32] [ 959.959408][ T32] Kernel Offset: disabled [ 959.963759][ T32] Rebooting in 86400 seconds..