last executing test programs: 4m40.056286983s ago: executing program 2 (id=717): r0 = socket$alg(0x26, 0x5, 0x0) bind$alg(r0, &(0x7f0000000100)={0x26, 'aead\x00', 0x0, 0x0, 'aegis128-generic\x00'}, 0x58) (async) r1 = socket$inet6_mptcp(0xa, 0x1, 0x106) bind$inet6(r1, &(0x7f00000000c0)={0xa, 0x4e22, 0x0, @local, 0xb}, 0x1c) (async) listen(r1, 0x0) (async) syz_emit_ethernet(0x4a, &(0x7f0000000440)=ANY=[@ANYBLOB="aaaaaaaaaaaa00000000000086dd600a843500140600fe8000000000000000000000000000bbfe8000000000000000000000000000aa4e244e22", @ANYRES32=0x41424344, @ANYRES32=0x41424344, @ANYBLOB="cb4c343de290a41f"], 0x0) (async) syz_emit_ethernet(0x4a, &(0x7f0000000340)=ANY=[@ANYBLOB="aaaaaaaaaaaaffffffffffff86dd600a8435001406fffe80000000000000000000a7e3ed846307a29c3c0c00000000bb8adf8d272f486eb4e3ba2aef1efe800000000000", @ANYRES32=0x41424344, @ANYRES32=0x41424344, @ANYBLOB="50c20000907803ff"], 0x0) (async) r2 = accept4(r0, 0x0, 0x0, 0x80000) (async) r3 = socket$kcm(0x10, 0x2, 0x4) sendmsg$kcm(r3, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000140)=[{&(0x7f0000000280)="89000000120081ae08061cdc030ec080000000060000400100e2ffca1b1f0000000004c00e72f750375ed08a56331dbf9ed7815e381ad6e747033a0093b837dc6cc01e32efaec8c7a6ec08120800030006010000bdad446b9bbc7a46e3988285dcdf12f2130809d78f0a947ee2b49e33538afa8af92347514f0b56a20ff27fff000000000000000000", 0x89}], 0x1}, 0x0) (async) recvmmsg(r2, &(0x7f0000002440), 0x3ffffffffffff67, 0x0, 0x0) (async) setsockopt$inet_tcp_int(r2, 0x6, 0xc, &(0x7f0000000000)=0x9, 0x4) (async) socket$nl_xfrm(0x10, 0x3, 0x6) getsockopt$inet_sctp_SCTP_PARTIAL_DELIVERY_POINT(r2, 0x84, 0x13, &(0x7f0000000040)={0x0, 0x5}, &(0x7f0000000080)=0x8) (async) bpf$PROG_LOAD(0x5, &(0x7f0000000180)={0x1, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x34, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x1000}, 0x94) (async) bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f00000000c0)=ANY=[@ANYBLOB='\x00\x00\x00\x00\x00\x00\x00\x00\x00', @ANYRES32, @ANYBLOB='\t\x00'/20, @ANYRES32=0x0, @ANYRES32, @ANYBLOB="05000000000000000400"/28], 0x50) (async) bpf$ITER_CREATE(0x21, &(0x7f0000000240), 0x8) (async) r4 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r4, 0x8933, &(0x7f0000000180)={'lo\x00', 0x0}) sendmsg$nl_route(r4, &(0x7f00000001c0)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f0000000100)=ANY=[@ANYBLOB="680000001000030500000000fcdbdf2500000000", @ANYRES32=0x0, @ANYBLOB="00000000008000004800128008000100687372003c000280060005000180000008000100", @ANYRES32=r5, @ANYBLOB="0500060001000000050007000000000005000300df00000008000200", @ANYRES64=r4], 0x68}}, 0x0) (async) bpf$MAP_CREATE(0x0, 0x0, 0x48) bpf$MAP_UPDATE_BATCH(0x1a, 0x0, 0x0) (async) openat$cgroup_ro(0xffffffffffffff9c, 0x0, 0x26e1, 0x0) (async) setsockopt$sock_int(0xffffffffffffffff, 0x1, 0xf, 0x0, 0x0) (async) mmap(&(0x7f0000001000/0xc00000)=nil, 0xc00000, 0x4000002, 0x3032, 0xffffffffffffffff, 0x2a1cf000) (async) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, 0x0, 0x0) (async) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x18, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x60d1}, 0x94) mmap(&(0x7f0000568000/0x2000)=nil, 0x1000000, 0x0, 0x11, 0xffffffffffffffff, 0x0) (async) socket$nl_generic(0x10, 0x3, 0x10) (async) openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='cgroup.controllers\x00', 0x275a, 0x0) 4m39.822100869s ago: executing program 2 (id=722): r0 = socket$kcm(0x29, 0x5, 0x0) r1 = accept4(0xffffffffffffffff, &(0x7f0000000000)=@rc, &(0x7f0000000080)=0x80, 0xc0800) r2 = bpf$OBJ_GET_PROG(0x7, &(0x7f0000000100)=@generic={&(0x7f00000000c0)='./file0\x00', 0x0, 0x18}, 0x18) ioctl$sock_kcm_SIOCKCMATTACH(r0, 0x89e0, &(0x7f0000000140)={r1, r2}) ioctl$sock_x25_SIOCDELRT(r1, 0x890c, &(0x7f0000000180)={@null, 0xf, 'nicvf0\x00'}) ioctl$XFS_IOC_START_COMMIT(r2, 0x80585882, &(0x7f0000000280)={0xffffffffffffffff}) ioctl$PPPIOCGCHAN(r3, 0x80047437, &(0x7f0000000300)) bind$x25(r1, &(0x7f0000000340)={0x9, @remote={'\xcc\xcc\xcc\xcc\xcc\xcc\xcc\xcc\xcc\xcc\xcc\xcc\xcc\xcc', 0x3}}, 0x12) setsockopt$inet_tcp_TCP_REPAIR_WINDOW(r3, 0x6, 0x1d, &(0x7f0000000380)={0x4, 0x6, 0xee19, 0x3ac7}, 0x14) r4 = bpf$TOKEN_CREATE(0x24, &(0x7f0000000540)={0x0, r3}, 0x8) r5 = bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000500)={&(0x7f00000003c0)={{0xeb9f, 0x1, 0x0, 0x18, 0x0, 0x30, 0x30, 0x3, [@volatile={0x7, 0x0, 0x0, 0x9, 0x1}, @restrict={0xb, 0x0, 0x0, 0xb, 0x2}, @restrict={0xa, 0x0, 0x0, 0xb, 0x4}, @typedef={0xc, 0x0, 0x0, 0x8, 0x1}]}, {0x0, [0x41]}}, &(0x7f0000000440)=""/153, 0x4b, 0x99, 0x1, 0x7, 0x10000, @value=r4}, 0x28) setsockopt$inet6_tcp_TCP_CONGESTION(r1, 0x6, 0xd, &(0x7f0000000580)='highspeed', 0x9) ioctl$XFS_IOC_FSBULKSTAT(r1, 0xc0205865, &(0x7f0000000ac0)={&(0x7f00000005c0)=0x121fc4fc, 0x100, &(0x7f0000000600)=[{}, {}, {}, {}, {}, {}], &(0x7f0000000a80)}) ppoll(&(0x7f0000000b00)=[{r0, 0x6}, {r3, 0x2}, {r3, 0x4000}], 0x3, &(0x7f0000000b40)={0x77359400}, &(0x7f0000000b80)={[0x1]}, 0x8) getsockopt$inet_tcp_buf(r3, 0x6, 0x1c, &(0x7f0000000bc0)=""/153, &(0x7f0000000c80)=0x99) ioctl$BTRFS_IOC_SUBVOL_GETFLAGS(r5, 0x80089419, &(0x7f0000000cc0)) bind$unix(r1, &(0x7f0000000d00)=@abs={0x0, 0x0, 0x4e20}, 0x6e) sendto$inet(r3, &(0x7f0000000d80)="1a8dde9d8b4564fd35747a4768430cc6f2f0cd0f8daa3decdb5b73244e6102e66e2adbdcdf88616737d795e5880f6354018274a5d78a7ef8cae922fea7e654ef2b4217d1b984dac987b15d68", 0x4c, 0x80, &(0x7f0000000e00)={0x2, 0x4e22, @empty}, 0x10) ioctl$BTRFS_IOC_WAIT_SYNC(r5, 0x40089416, &(0x7f0000000e40)) getsockopt$inet_sctp_SCTP_GET_ASSOC_ID_LIST(0xffffffffffffffff, 0x84, 0x1d, &(0x7f0000000e80)={0x1, [0x0]}, &(0x7f0000000ec0)=0x8) getsockopt$inet_sctp6_SCTP_PRIMARY_ADDR(r3, 0x84, 0x6, &(0x7f0000000f00)={r6, @in6={{0xa, 0x4e21, 0x3, @ipv4={'\x00', '\xff\xff', @dev={0xac, 0x14, 0x14, 0x39}}, 0xfff}}}, &(0x7f0000000fc0)=0x84) getsockopt$inet_sctp6_SCTP_PR_SUPPORTED(r3, 0x84, 0x71, &(0x7f0000001000)={r6, 0x5}, &(0x7f0000001040)=0x8) ioctl$XFS_IOC_GOINGDOWN(r1, 0x8004587d, &(0x7f0000001080)=0x3) setsockopt$inet6_tcp_TCP_MD5SIG(r3, 0x6, 0xe, &(0x7f00000010c0)={@in={{0x2, 0x4e23, @local}}, 0x0, 0x0, 0x3, 0x0, "a5b17c0ef6fe166ab65b15dddaab31238847f62c8b6094ab2b11530b3d6b1400df037778f80f664bf328ec03a5ff13457c2c9c5736a9e49eaa391c1d125d5af66ca5efaa76c7183975c5e7b9c5d64f9c"}, 0xd8) setsockopt$inet_tcp_TCP_REPAIR(r1, 0x6, 0x13, &(0x7f00000011c0), 0x4) setsockopt$XDP_UMEM_REG(r3, 0x11b, 0x4, &(0x7f0000001280)={&(0x7f0000001200)=""/102, 0x922000, 0x1c00, 0x6, 0x2}, 0x20) r7 = socket$kcm(0x29, 0x7, 0x0) setsockopt$kcm_KCM_RECV_DISABLE(r7, 0x119, 0x1, &(0x7f00000012c0)=0x3, 0x4) sendmsg$SEG6_CMD_GET_TUNSRC(r3, &(0x7f00000013c0)={&(0x7f0000001300)={0x10, 0x0, 0x0, 0x2000}, 0xc, &(0x7f0000001380)={&(0x7f0000001340)={0x1c, 0x0, 0x1, 0x70bd2b, 0x25dfdbff, {}, [@SEG6_ATTR_SECRETLEN={0x5, 0x5, 0x5}]}, 0x1c}, 0x1, 0x0, 0x0, 0x8040001}, 0x24004010) socket$nl_generic(0x10, 0x3, 0x10) 4m39.754574136s ago: executing program 2 (id=724): r0 = getpid() r1 = socket$inet_tcp(0x2, 0x1, 0x0) ioctl$sock_inet_SIOCADDRT(r1, 0x890b, &(0x7f0000000000)={0x4000000, {0x2, 0x4e22}, {0x2, 0x200, @local}, {0x2, 0x0, @broadcast}, 0x2, 0x0, 0x0, 0x0, 0xfff8, 0x0, 0x0, 0x3}) mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000)='./cgroup/syz0\x00', 0x1ff) r2 = openat$cgroup_root(0xffffffffffffff9c, 0x0, 0x200002, 0x0) r3 = openat$cgroup_int(r2, &(0x7f00000001c0)='cgroup.max.descendants\x00', 0x2, 0x0) write$cgroup_subtree(r3, &(0x7f0000000340)=ANY=[@ANYRESDEC=0x0], 0x9) r4 = socket$inet_tcp(0x2, 0x1, 0x0) ioctl$sock_SIOCSIFBR(r4, 0x890c, &(0x7f0000000000)=@generic={0x0, 0x11b5}) r5 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r5, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000040)=ANY=[@ANYBLOB="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"], 0x154}}, 0x404c004) r6 = socket$inet_udp(0x2, 0x2, 0x0) bind$inet(r6, &(0x7f0000000040)={0x2, 0x4e20, @local}, 0x10) r7 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) ioctl$HCIINQUIRY(r7, 0x400448ca, 0x0) recvmmsg$unix(0xffffffffffffffff, &(0x7f0000001bc0)=[{{0x0, 0x0, 0x0}}], 0x1, 0x0, 0x0) sendmsg$nl_crypto(0xffffffffffffffff, &(0x7f0000000800)={&(0x7f0000000380)={0x10, 0x0, 0x0, 0x80000}, 0xc, &(0x7f00000007c0)={&(0x7f0000000680)=@get={0x110, 0x13, 0x300, 0x70bd26, 0x25dfdbfc, {{'cts(xts(xts-serpent-avx))\x00'}, '\x00', '\x00', 0x2400, 0x400}, [{0x8, 0x1, 0x4}, {0x8, 0x1, 0x80000000}, {0x8, 0x1, 0x6}, {0x8, 0x1, 0x6}, {0x8, 0x1, 0x3}, {0x8, 0x1, 0xf654}]}, 0x110}}, 0xcb3b0285ac92d23c) bind$bt_hci(r7, &(0x7f0000000040)={0x1f, 0xffff, 0x2}, 0x6) r8 = socket$inet_udp(0x2, 0x2, 0x0) bind$inet(r8, &(0x7f0000001a00)={0x2, 0x4e20, @dev={0xac, 0x14, 0x14, 0x40}}, 0x10) r9 = socket$nl_generic(0x10, 0x3, 0x10) r10 = socket$kcm(0x1e, 0x5, 0x0) sendmsg$kcm(r10, &(0x7f0000000540)={&(0x7f0000000280)=@tipc=@name={0x1e, 0x2, 0x0, {{0x1, 0x1}}}, 0x80, &(0x7f00000004c0)=[{&(0x7f0000000300)="80", 0xfdef}], 0x1}, 0x0) recvmsg$unix(r10, &(0x7f0000000500)={0x0, 0x0, &(0x7f0000000440)=[{&(0x7f0000000080)=""/11, 0xb}], 0x1, &(0x7f0000000640)=[@rights={{0x10}}], 0x10}, 0x120) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000140)={0xffffffffffffffff, 0xffffffffffffffff}) bind$bt_hci(r7, &(0x7f0000000240)={0x1f, 0x1, 0x1}, 0x6) ioctl$sock_SIOCETHTOOL(r11, 0x89f6, &(0x7f0000000080)={'bridge0\x00', &(0x7f00000000c0)=@ethtool_regs={0x4, 0x0, 0x32, "2a161d2d71db37f20a8f1597f02515fcead4e1f5cad54790db5c4e09db1ac8225b997fc21693c0942f0686928c388bc6f631"}}) sendmsg$DEVLINK_CMD_RELOAD(r9, &(0x7f0000000100)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000080)={0x3c, 0x0, 0x1, 0x70bd27, 0x25dfdbfb, {}, [{@nsim={{0xe}, {0xf, 0x2, {'netdevsim', 0x0}}}, @DEVLINK_ATTR_NETNS_PID={0x8, 0x8b, r0}}]}, 0x3c}, 0x1, 0x0, 0x0, 0x4040010}, 0x30) r12 = bpf$BPF_BTF_LOAD(0x12, &(0x7f0000001340)={&(0x7f0000000080)={{0xeb9f, 0x1, 0x0, 0x18, 0x0, 0x1c, 0x1c, 0x2, [@int={0xffffffff}, @restrict={0x0, 0x0, 0x0, 0xb, 0x2}]}}, 0x0, 0x36}, 0x28) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000400)={0x11, 0xa, &(0x7f0000000280)=@framed={{}, [@cb_func={0x18, 0x0, 0x4, 0x0, 0x4}, @exit, @exit, @exit, @cb_func={0x18, 0x0, 0x4, 0x0, 0xfffffffffffffffe, 0x48}]}, &(0x7f0000000040)='GPL\x00', 0x3, 0x1b, &(0x7f00000004c0)=""/214, 0x0, 0x0, '\x00', 0x0, 0x0, r12, 0x9, 0x0, 0x13, 0x10, &(0x7f0000000200), 0x10}, 0x80) 4m39.115857506s ago: executing program 2 (id=728): sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000580)={&(0x7f0000000600)=@newqdisc={0x24, 0x24, 0x4ee4e6a52ff56541, 0x1, 0x25dfdbfd, {0x0, 0x0, 0x0, 0x0, {0x0, 0xb}, {0xffff, 0xffff}, {0xfff2}}}, 0x24}, 0x1, 0x0, 0x0, 0x40088c1}, 0x0) bpf$PROG_BIND_MAP(0xa, &(0x7f0000000080)={0xffffffffffffffff, 0x1, 0xffff0000}, 0xc) r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000180)=ANY=[@ANYBLOB="0100000004000000080000003d00000041000000", @ANYRES32, @ANYBLOB='\x00'/20, @ANYRES32=0x0, @ANYRES32, @ANYBLOB='\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00k\x00'/28], 0x50) bpf$MAP_UPDATE_BATCH(0x1a, &(0x7f0000000200)={0x0, 0x0, &(0x7f00000002c0), &(0x7f0000000180), 0x1003, r0}, 0x38) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000180)=@getqdisc={0x24, 0x26, 0x52e, 0x70bd27, 0x25dfdbfb, {0x0, 0x0, 0x0, 0x0, {0x3, 0x10}, {0x8, 0xf}, {0xf, 0xa}}}, 0x24}}, 0x10) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000000080)={0x0, 0x48}, 0x1, 0x0, 0x0, 0x10}, 0x0) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000100)=@newqdisc={0x44, 0x24, 0x10c, 0xc0000001, 0x0, {0x0, 0x0, 0x0, 0x0, {0xfff3, 0x8}, {0x2, 0xf}, {0x8, 0x9}}, [@qdisc_kind_options=@q_fq_pie={{0xb}, {0x14, 0x8002, [@TCA_FQ_PIE_TARGET={0x8, 0x3, 0x2}, @TCA_FQ_PIE_TUPDATE={0x8, 0x4, 0x400}]}}]}, 0x44}, 0x1, 0x0, 0x0, 0x20000001}, 0x20004015) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000100)=ANY=[@ANYBLOB="500000001000010425bbe5ad600027842cf52300", @ANYRES32=0x0, @ANYBLOB="0300000000000000280012800a00010076786c616e00"], 0x50}, 0x1, 0x0, 0x0, 0x13d33d22cca65c15}, 0x4008840) r1 = socket$netlink(0x10, 0x3, 0x0) unshare(0x400) r2 = bpf$MAP_CREATE(0x0, &(0x7f0000000640)=@base={0x17, 0x0, 0x4, 0xff, 0x0, 0xffffffffffffffff, 0x87}, 0x48) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000080)={{r2, 0xffffffffffffffff}, 0x0}, 0x20) bpf$MAP_LOOKUP_ELEM(0x15, &(0x7f0000000200)={r3, 0x0, &(0x7f0000001780)=""/4096}, 0x20) sendmmsg(r1, &(0x7f00000002c0), 0x40000000000009f, 0x0) bpf$MAP_GET_NEXT_KEY(0x4, &(0x7f0000000140)={r0, &(0x7f0000000080), 0x0}, 0x20) r4 = socket$nl_netfilter(0x10, 0x3, 0xc) r5 = socket$inet6_sctp(0xa, 0x5, 0x84) shutdown(r5, 0x0) getsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX3(r5, 0x84, 0x6f, &(0x7f00000001c0)={0x0, 0x20, &(0x7f0000000080)=[@in={0x2, 0x4e22, @initdev={0xac, 0x1e, 0x0, 0x0}}, @in={0x2, 0x4e22, @remote}]}, &(0x7f0000000180)=0x10) r7 = socket$kcm(0x21, 0x2, 0xa) sendmsg$kcm(r7, &(0x7f0000000080)={0x0, 0x0, 0x0, 0x0, &(0x7f0000000000)=ANY=[@ANYBLOB="100000000000000012010000010000001c000054d4863a8c69148100"/40], 0x28}, 0x0) setsockopt$inet_sctp6_SCTP_PEER_ADDR_PARAMS(r5, 0x84, 0x9, &(0x7f0000000400)={r6, @in6={{0xa, 0x4e21, 0x4, @empty, 0x9}}, 0x4, 0x4, 0x624e, 0xa, 0x55, 0x7f}, 0x9c) sendmsg$NFT_BATCH(r4, &(0x7f0000009b40)={0x0, 0x0, &(0x7f0000009b00)={&(0x7f0000000100)=ANY=[@ANYBLOB="140000001000010000000000000000000a00000a54000000090a010400000000000000000a0000040900010073797a310000000008000540000000020900020073797a320000000008000a40ffffff780800084016"], 0x7c}, 0x1, 0x0, 0x0, 0x4000850}, 0x24000000) bpf$MAP_UPDATE_BATCH(0x1a, &(0x7f0000000400)={&(0x7f0000000240)="da4b480b97dba098942d25a6999d4b03c91f6231722a294b1621f3e0b38b250aa2ad064dc42bfbe24aa3e255b0cf708029dd6addd93cd28784a2570794bebc1ba062ac912dcf472ab89a93061972d95746cc425b9c2668e2c94723489a8de4602fa4909f389a7d7da8b529768ccf55cd3b71b7c1639aaa1530dbe17b7313d8e9b64c9ee14ec7a0009d7e7ac777f9b565811aa6539c6ab77740512b17b6aaa97602ff82cad385f7141dc612aff19f8a4c1bc2b033992e2d3d98b4ac49c076961ac1617bcde752613c0709e0df239204af3edc92d88b64195794f6c35b8631", &(0x7f0000000340)=""/56, &(0x7f0000000380)="0b026b", &(0x7f00000003c0)="dc57fe12f4e2f85402cc4191354654b4f6838f119150f25374885ed59f36d0", 0x5, r0, 0x4}, 0x38) r8 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFQNL_MSG_CONFIG(r8, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000040)={0x1c, 0x2, 0x3, 0x101, 0x0, 0x0, {0x3, 0x0, 0x2}, [@NFQA_CFG_FLAGS={0x8, 0x5, 0x1, 0x0, 0x4}]}, 0x1c}, 0x1, 0x0, 0x0, 0x4800}, 0x20000000) ioctl$NILFS_IOCTL_GET_SUSTAT(0xffffffffffffffff, 0x80306e85, &(0x7f00000004c0)) socket(0x10, 0x3, 0x0) r9 = socket$packet(0x11, 0x2, 0x300) ioctl$sock_SIOCGIFINDEX(r9, 0x8933, &(0x7f0000000080)={'ip6erspan0\x00'}) 4m38.726645784s ago: executing program 2 (id=731): sendmsg$kcm(0xffffffffffffffff, &(0x7f0000000140)={&(0x7f0000000440)=@rxrpc=@in4={0x21, 0x0, 0x2, 0x10, {0x2, 0x0, @loopback}}, 0x80, &(0x7f00000004c0)=[{&(0x7f0000000100)="a6", 0xfffffcf4}, {0x0}], 0x2, &(0x7f0000001a00)=ANY=[@ANYBLOB="180000000000000010010000010000007d95df16a39b1a6c900000000000000001000005040500002b24ec10064b6f2f000000fb718aef932f3889d1fdda5b00000009860f5878c37ffe36e1165814d435be5b317c6c8189767d2f97879f07a515bb7c169f46933d9338f4ab04834e6f618988c5944741afe403461323110f62055394412158e7a3adb164d641aa40d4ab077fe34232aa8b319d7666d0998a61d7da0c86d70000001010"], 0x10b8}, 0x106) openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='memory.events\x00', 0x275a, 0x0) recvmmsg(0xffffffffffffffff, &(0x7f0000005180)=[{{0x0, 0x0, &(0x7f0000000080)=[{&(0x7f0000000000)=""/61, 0x3d}, {&(0x7f0000000040)=""/37, 0x25}], 0x2, &(0x7f0000000180)=""/193, 0xc1}, 0xfffffffd}, {{&(0x7f0000000280)=@in={0x2, 0x0, @broadcast}, 0x80, &(0x7f0000006740)=[{&(0x7f0000000300)=""/22, 0x16}, {&(0x7f0000000340)=""/122, 0x7a}, {&(0x7f0000000500)=""/4096, 0x1000}, {&(0x7f0000001500)=""/238, 0xee}, {&(0x7f0000001600)=""/17, 0x11}, {&(0x7f0000001640)=""/242, 0xf2}, {&(0x7f0000001740)=""/171, 0xab}, {&(0x7f0000001800)=""/153, 0x99}, {&(0x7f00000018c0)=""/225, 0xe1}, {&(0x7f00000019c0)=""/44, 0x2c}, {&(0x7f0000005680)=""/4096, 0x1000}, {&(0x7f0000006680)=""/147, 0x93}], 0xc}, 0x8}, {{&(0x7f0000001b80)=@rc={0x1f, @fixed}, 0x80, &(0x7f0000001e00)=[{&(0x7f0000001c00)=""/66, 0x42}, {&(0x7f0000001c80)=""/184, 0xb8}, {&(0x7f0000001d40)=""/116, 0x74}, {&(0x7f0000001dc0)=""/8, 0x8}], 0x4, &(0x7f0000001e40)=""/84, 0x54}, 0x6}, {{&(0x7f0000002380)=@in6={0xa, 0x0, 0x0, @private0}, 0x80, &(0x7f0000005480), 0x0, &(0x7f0000002140)=""/59, 0x3b}, 0x401}, {{&(0x7f0000002180)=@tipc, 0x80, &(0x7f0000002300)=[{&(0x7f0000002200)=""/1, 0x1}, {&(0x7f0000002240)=""/172, 0xac}], 0x2, &(0x7f0000002340)=""/53, 0x35}, 0x7fd}, {{&(0x7f0000005600)=@pptp={0x18, 0x2, {0x0, @initdev}}, 0x80, &(0x7f0000003880)=[{&(0x7f0000002400)=""/68, 0x44}, {&(0x7f0000002480)=""/246, 0xf6}, {&(0x7f0000002580)=""/225, 0xe1}, {&(0x7f0000002680)=""/4096, 0x1000}, {&(0x7f0000003680)=""/102, 0x66}, {&(0x7f0000005540)=""/161, 0xa1}, {&(0x7f00000037c0)=""/135, 0x87}], 0x7, &(0x7f0000003900)=""/239, 0xef}, 0x3}, {{&(0x7f0000003a00)=@ll={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @multicast}, 0x80, &(0x7f0000005000)=[{&(0x7f0000003a80)=""/32, 0x20}, {&(0x7f0000003ac0)=""/246, 0xf6}, {&(0x7f0000003bc0)=""/253, 0xfd}, {&(0x7f0000003cc0)=""/212, 0xd4}, {&(0x7f0000003dc0)=""/127, 0x7f}, {&(0x7f0000003e40)=""/190, 0xbe}, {&(0x7f0000003f00)=""/161, 0xa1}, {&(0x7f0000003fc0)=""/4096, 0x1000}, {&(0x7f0000004fc0)=""/42, 0x2a}], 0x9, &(0x7f00000050c0)=""/173, 0xad}, 0x1}], 0x7, 0x40002002, 0x0) 4m38.616178775s ago: executing program 2 (id=734): r0 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r0, &(0x7f0000000640)={0x0, 0x0, &(0x7f0000001ac0)={&(0x7f0000000340)={0x14, 0x27, 0x1, 0x70bd28, 0x25dfdbfe, {0x6}}, 0x14}}, 0x4004804) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000100), 0xffffffffffffffff) sendmsg$NL80211_CMD_REQ_SET_REG(r0, &(0x7f00000004c0)={&(0x7f0000000400)={0x10, 0x0, 0x0, 0x20000}, 0xc, &(0x7f0000000480)={&(0x7f0000000440)={0x2c, r1, 0x100, 0x70bd27, 0x25dfdbfe, {}, [@NL80211_ATTR_WIPHY={0x8, 0x1, 0x56}, @NL80211_ATTR_REG_ALPHA2={0x6, 0x21, 'a\x00'}, @NL80211_ATTR_WIPHY={0x8, 0x1, 0x32}]}, 0x2c}, 0x1, 0x0, 0x0, 0x8fead029d972ed59}, 0x8040040) (async) sendmsg$NL80211_CMD_JOIN_OCB(r0, &(0x7f00000001c0)={&(0x7f0000000080)={0x10, 0x0, 0x0, 0x8000000}, 0xc, &(0x7f0000000180)={&(0x7f0000000140)={0x20, r1, 0x200, 0x70bd26, 0x25dfdbff, {{}, {@void, @val={0xc, 0x99, {0x1b7}}}}}, 0x20}, 0x1, 0x0, 0x0, 0x4000}, 0x40011) (async) syz_emit_ethernet(0x56, &(0x7f0000000800)={@local, @broadcast, @void, {@ipv6={0x86dd, @tcp={0x0, 0x6, "4dd318", 0x20, 0x6, 0x0, @private1={0xfc, 0x1, '\x00', 0x1}, @local, {[], {{0x0, 0x4001, 0x41424344, 0x41424344, 0x0, 0x0, 0x8, 0x2, 0x0, 0x0, 0x0, {[@generic={0xfe, 0x9, "25268d4d182bdd"}]}}}}}}}}, 0x0) bpf$PROG_LOAD(0x5, &(0x7f0000000500)={0x7, 0x4, &(0x7f0000000700)=@framed={{0x18, 0x0, 0x0, 0x0, 0x8, 0x0, 0x0, 0x0, 0x8}, [@generic={0x81, 0x1, 0x1, 0xac}]}, &(0x7f0000000c40)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x35, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffd}, 0x94) close(0x3) bpf$PROG_LOAD(0x5, &(0x7f00000001c0)={0x10, 0x0, &(0x7f0000000000)=ANY=[@ANYBLOB="b4000000000000007910480000000000610400000000000095"], 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @sk_msg}, 0x94) (async) r2 = bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f00000000c0)=ANY=[@ANYBLOB="02000000040000000800000001"], 0x48) bpf$MAP_LOOKUP_ELEM(0x5, &(0x7f00000000c0)={r2, &(0x7f0000000000), &(0x7f0000000280)=""/73}, 0x20) (async) ioctl$FS_IOC_RESVSP(0xffffffffffffffff, 0x40305828, &(0x7f0000000040)={0x0, 0x1, 0xfd, 0x1ff}) r3 = syz_genetlink_get_family_id$devlink(&(0x7f0000000240), r0) sendmsg$DEVLINK_CMD_RATE_SET(r0, &(0x7f00000003c0)={&(0x7f0000000200)={0x10, 0x0, 0x0, 0x40000000}, 0xc, &(0x7f0000000380)={&(0x7f0000000280)={0xa4, r3, 0x208, 0x70bd28, 0x25dfdbff, {}, [@handle=@pci={{0x8}, {0x11}}, @DEVLINK_ATTR_RATE_NODE_NAME={0x4a, 0xa8, @random="64efe37801f65cec2799e174c04303a39dd091c54cf6db0368fc24fc8b1699bae44f12ebc28348e491702f37d042691c05ccb92970ee4edbda42efdf7ee559a34bf22eecbd4b"}, @DEVLINK_ATTR_RATE_NODE_NAME={0xf, 0xa8, @name2}, @DEVLINK_ATTR_RATE_PARENT_NODE_NAME={0xe}, @DEVLINK_ATTR_PORT_INDEX={0x8, 0x3, 0x2}]}, 0xa4}, 0x1, 0x0, 0x0, 0x20004010}, 0x2008c081) (async) r4 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r4, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000002e00)={{0x14}, [@NFT_MSG_NEWTABLE={0x20, 0x0, 0xa, 0x401, 0x0, 0x0, {0x1, 0x0, 0x3}, [@NFTA_TABLE_NAME={0x9, 0x1, 'syz0\x00'}]}, @NFT_MSG_NEWCHAIN={0x2c, 0x3, 0xa, 0x101, 0x0, 0x0, {0x1}, [@NFTA_CHAIN_TABLE={0x9, 0x1, 'syz0\x00'}, @NFTA_CHAIN_NAME={0x9, 0x3, 'syz2\x00'}]}, @NFT_MSG_NEWRULE={0x94, 0x6, 0xa, 0x401, 0x0, 0x0, {0x1, 0x0, 0x2}, [@NFTA_RULE_CHAIN_ID={0x8}, @NFTA_RULE_EXPRESSIONS={0x6c, 0x4, 0x0, 0x1, [{0x34, 0x1, 0x0, 0x1, @exthdr={{0xb}, @val={0x24, 0x2, 0x0, 0x1, [@NFTA_EXTHDR_DREG={0x8, 0x1, 0x1, 0x0, 0xc}, @NFTA_EXTHDR_OFFSET={0x8, 0x3, 0x1, 0x0, 0x2}, @NFTA_EXTHDR_LEN={0x8, 0x4, 0x1, 0x0, 0x22}, @NFTA_EXTHDR_TYPE={0x5, 0x2, 0x7}]}}}, {0x34, 0x1, 0x0, 0x1, @bitwise={{0xc}, @val={0x24, 0x2, 0x0, 0x1, [@NFTA_BITWISE_LEN={0x8, 0x3, 0x1, 0x0, 0x2}, @NFTA_BITWISE_SREG={0x8, 0x1, 0x1, 0x0, 0x14}, @NFTA_BITWISE_DREG={0x8, 0x2, 0x1, 0x0, 0xd}, @NFTA_BITWISE_OP={0x8, 0x6, 0x1, 0x0, 0x2}]}}}]}, @NFTA_RULE_TABLE={0x9, 0x1, 'syz0\x00'}]}], {0x14, 0x11, 0x1, 0x0, 0x0, {0x7}}}, 0x108}}, 0x0) 4m23.539403382s ago: executing program 32 (id=734): r0 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r0, &(0x7f0000000640)={0x0, 0x0, &(0x7f0000001ac0)={&(0x7f0000000340)={0x14, 0x27, 0x1, 0x70bd28, 0x25dfdbfe, {0x6}}, 0x14}}, 0x4004804) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000100), 0xffffffffffffffff) sendmsg$NL80211_CMD_REQ_SET_REG(r0, &(0x7f00000004c0)={&(0x7f0000000400)={0x10, 0x0, 0x0, 0x20000}, 0xc, &(0x7f0000000480)={&(0x7f0000000440)={0x2c, r1, 0x100, 0x70bd27, 0x25dfdbfe, {}, [@NL80211_ATTR_WIPHY={0x8, 0x1, 0x56}, @NL80211_ATTR_REG_ALPHA2={0x6, 0x21, 'a\x00'}, @NL80211_ATTR_WIPHY={0x8, 0x1, 0x32}]}, 0x2c}, 0x1, 0x0, 0x0, 0x8fead029d972ed59}, 0x8040040) (async) sendmsg$NL80211_CMD_JOIN_OCB(r0, &(0x7f00000001c0)={&(0x7f0000000080)={0x10, 0x0, 0x0, 0x8000000}, 0xc, &(0x7f0000000180)={&(0x7f0000000140)={0x20, r1, 0x200, 0x70bd26, 0x25dfdbff, {{}, {@void, @val={0xc, 0x99, {0x1b7}}}}}, 0x20}, 0x1, 0x0, 0x0, 0x4000}, 0x40011) (async) syz_emit_ethernet(0x56, &(0x7f0000000800)={@local, @broadcast, @void, {@ipv6={0x86dd, @tcp={0x0, 0x6, "4dd318", 0x20, 0x6, 0x0, @private1={0xfc, 0x1, '\x00', 0x1}, @local, {[], {{0x0, 0x4001, 0x41424344, 0x41424344, 0x0, 0x0, 0x8, 0x2, 0x0, 0x0, 0x0, {[@generic={0xfe, 0x9, "25268d4d182bdd"}]}}}}}}}}, 0x0) bpf$PROG_LOAD(0x5, &(0x7f0000000500)={0x7, 0x4, &(0x7f0000000700)=@framed={{0x18, 0x0, 0x0, 0x0, 0x8, 0x0, 0x0, 0x0, 0x8}, [@generic={0x81, 0x1, 0x1, 0xac}]}, &(0x7f0000000c40)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x35, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffd}, 0x94) close(0x3) bpf$PROG_LOAD(0x5, &(0x7f00000001c0)={0x10, 0x0, &(0x7f0000000000)=ANY=[@ANYBLOB="b4000000000000007910480000000000610400000000000095"], 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @sk_msg}, 0x94) (async) r2 = bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f00000000c0)=ANY=[@ANYBLOB="02000000040000000800000001"], 0x48) bpf$MAP_LOOKUP_ELEM(0x5, &(0x7f00000000c0)={r2, &(0x7f0000000000), &(0x7f0000000280)=""/73}, 0x20) (async) ioctl$FS_IOC_RESVSP(0xffffffffffffffff, 0x40305828, &(0x7f0000000040)={0x0, 0x1, 0xfd, 0x1ff}) r3 = syz_genetlink_get_family_id$devlink(&(0x7f0000000240), r0) sendmsg$DEVLINK_CMD_RATE_SET(r0, &(0x7f00000003c0)={&(0x7f0000000200)={0x10, 0x0, 0x0, 0x40000000}, 0xc, &(0x7f0000000380)={&(0x7f0000000280)={0xa4, r3, 0x208, 0x70bd28, 0x25dfdbff, {}, [@handle=@pci={{0x8}, {0x11}}, @DEVLINK_ATTR_RATE_NODE_NAME={0x4a, 0xa8, @random="64efe37801f65cec2799e174c04303a39dd091c54cf6db0368fc24fc8b1699bae44f12ebc28348e491702f37d042691c05ccb92970ee4edbda42efdf7ee559a34bf22eecbd4b"}, @DEVLINK_ATTR_RATE_NODE_NAME={0xf, 0xa8, @name2}, @DEVLINK_ATTR_RATE_PARENT_NODE_NAME={0xe}, @DEVLINK_ATTR_PORT_INDEX={0x8, 0x3, 0x2}]}, 0xa4}, 0x1, 0x0, 0x0, 0x20004010}, 0x2008c081) (async) r4 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r4, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000002e00)={{0x14}, [@NFT_MSG_NEWTABLE={0x20, 0x0, 0xa, 0x401, 0x0, 0x0, {0x1, 0x0, 0x3}, [@NFTA_TABLE_NAME={0x9, 0x1, 'syz0\x00'}]}, @NFT_MSG_NEWCHAIN={0x2c, 0x3, 0xa, 0x101, 0x0, 0x0, {0x1}, [@NFTA_CHAIN_TABLE={0x9, 0x1, 'syz0\x00'}, @NFTA_CHAIN_NAME={0x9, 0x3, 'syz2\x00'}]}, @NFT_MSG_NEWRULE={0x94, 0x6, 0xa, 0x401, 0x0, 0x0, {0x1, 0x0, 0x2}, [@NFTA_RULE_CHAIN_ID={0x8}, @NFTA_RULE_EXPRESSIONS={0x6c, 0x4, 0x0, 0x1, [{0x34, 0x1, 0x0, 0x1, @exthdr={{0xb}, @val={0x24, 0x2, 0x0, 0x1, [@NFTA_EXTHDR_DREG={0x8, 0x1, 0x1, 0x0, 0xc}, @NFTA_EXTHDR_OFFSET={0x8, 0x3, 0x1, 0x0, 0x2}, @NFTA_EXTHDR_LEN={0x8, 0x4, 0x1, 0x0, 0x22}, @NFTA_EXTHDR_TYPE={0x5, 0x2, 0x7}]}}}, {0x34, 0x1, 0x0, 0x1, @bitwise={{0xc}, @val={0x24, 0x2, 0x0, 0x1, [@NFTA_BITWISE_LEN={0x8, 0x3, 0x1, 0x0, 0x2}, @NFTA_BITWISE_SREG={0x8, 0x1, 0x1, 0x0, 0x14}, @NFTA_BITWISE_DREG={0x8, 0x2, 0x1, 0x0, 0xd}, @NFTA_BITWISE_OP={0x8, 0x6, 0x1, 0x0, 0x2}]}}}]}, @NFTA_RULE_TABLE={0x9, 0x1, 'syz0\x00'}]}], {0x14, 0x11, 0x1, 0x0, 0x0, {0x7}}}, 0x108}}, 0x0) 2m25.160281251s ago: executing program 4 (id=1468): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000080)={0x1, 0x5, &(0x7f0000001000)=ANY=[@ANYBLOB="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"], &(0x7f0000000280)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x11}, 0x94) setsockopt$sock_attach_bpf(r0, 0x1, 0x32, &(0x7f0000000000)=r1, 0x4) syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) r2 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r2, &(0x7f0000001600)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000d40)=ANY=[@ANYRES16=r1], 0x6c}, 0x1, 0x0, 0x0, 0x8804}, 0x8001) sendmsg$NFT_BATCH(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000001680)=ANY=[@ANYRES32=r2], 0x7c}}, 0x4040850) r3 = socket(0x10, 0x3, 0x0) r4 = bpf$MAP_CREATE(0x0, &(0x7f0000000780)=ANY=[@ANYBLOB="19000000040000000800000008"], 0x50) r5 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$netlink(r5, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)=[{&(0x7f0000000480)=ANY=[@ANYBLOB="2c00000019001500fcffffffffffffff0a0000000000000000000000100009800c001b800800e18004001580"], 0x2c}], 0x1, 0x0, 0x0, 0x4000041}, 0x0) setsockopt$IP_VS_SO_SET_DELDEST(r3, 0x0, 0x488, &(0x7f00000003c0)={{0x2b, @empty, 0x4e20, 0x3, 'ovf\x00', 0x22, 0x4, 0x7b}, {@multicast2, 0x4e21, 0x0, 0x8, 0x68cca2f9, 0x7}}, 0x44) r6 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x6, 0xd, &(0x7f0000000200)=ANY=[@ANYBLOB="1800000000000000000000000000000085000000bc00000018110000", @ANYRES32=r4, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bca2000000000000a6020000f8ffffffb703000008000000b704000000000400850000003300000095"], &(0x7f0000000180)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @xdp, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000340)={{r4, 0xffffffffffffffff}, &(0x7f00000001c0), &(0x7f0000000300)=r6}, 0x20) bpf$MAP_UPDATE_ELEM(0x2, &(0x7f0000000040)={r7, &(0x7f0000000380)="0099d885", &(0x7f0000000480)=@tcp6=r3, 0x2}, 0x20) r8 = socket(0x400000000010, 0x3, 0x0) r9 = socket$unix(0x1, 0x1, 0x0) ioctl$sock_SIOCGIFINDEX(r9, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r8, &(0x7f00000012c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000180)=@newqdisc={0x44, 0x24, 0x4ee4e6a52ff56541, 0x70bd29, 0xffffffff, {0x0, 0x0, 0x0, r10, {0x0, 0xfff1}, {0xffff, 0xffff}, {0xc, 0xf}}, [@qdisc_kind_options=@q_hfsc={{0x9}, {0x14, 0x2, @TCA_HFSC_RSC={0x10, 0x1, {0x0, 0xfffffffe, 0x4}}}}]}, 0x44}, 0x1, 0x0, 0x0, 0x8801}, 0x20008850) sendmsg$BATADV_CMD_GET_ROUTING_ALGOS(r8, &(0x7f0000000240)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x1}, 0xc, &(0x7f0000000200)={&(0x7f00000001c0)={0x2c, 0x0, 0x200, 0x70bd26, 0x25dfdbff, {}, [@BATADV_ATTR_MESH_IFINDEX={0x8, 0x3, r10}, @BATADV_ATTR_GW_SEL_CLASS={0x8, 0x34, 0x7330}, @BATADV_ATTR_MULTICAST_FORCEFLOOD_ENABLED={0x5}]}, 0x2c}, 0x1, 0x0, 0x0, 0x4040}, 0x40000) sendmsg$NFT_BATCH(r0, &(0x7f0000009b40)={0x0, 0x0, &(0x7f0000009b00)={&(0x7f00000002c0)=ANY=[@ANYBLOB="140000001000010000000000000000000500000a64000000030a0fdb00000000000000000a0000050900030073797a30000000000900010073797a31000000001400048008000240a04b3d02080001400000000308000540000000001c0008800c00014000000000000000090c000240000000000018ab6e14000000110001"], 0x8c}, 0x1, 0x0, 0x0, 0x4000850}, 0x24000840) 2m24.659664182s ago: executing program 4 (id=1473): socket$inet_sctp(0x2, 0x1, 0x84) socket$nl_generic(0x10, 0x3, 0x10) (async) socket$nl_generic(0x10, 0x3, 0x10) socket$nl_route(0x10, 0x3, 0x0) (async) socket$nl_route(0x10, 0x3, 0x0) syz_init_net_socket$bt_l2cap(0x1f, 0x3, 0x0) (async) r0 = syz_init_net_socket$bt_l2cap(0x1f, 0x3, 0x0) ioctl$F2FS_IOC_DEFRAGMENT(r0, 0xc010f508, 0x0) connect$bt_l2cap(r0, &(0x7f0000000040)={0x1f, 0x0, @fixed={'\xaa\xaa\xaa\xaa\xaa', 0x10}, 0xb}, 0xe) sendmmsg$sock(r0, &(0x7f0000004100)=[{{0x0, 0x0, 0x0}}], 0xffffff80, 0x0) shutdown(r0, 0x1) socket$unix(0x1, 0x1, 0x0) socket$unix(0x1, 0x1, 0x0) socket$l2tp(0x2, 0x2, 0x73) socket$nl_rdma(0x10, 0x3, 0x14) r1 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r1, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000680)=ANY=[@ANYBLOB="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"], 0x19c}}, 0x0) socket$nl_route(0x10, 0x3, 0x0) (async) socket$nl_route(0x10, 0x3, 0x0) socket$igmp(0x2, 0x3, 0x2) socket$nl_route(0x10, 0x3, 0x0) socket$netlink(0x10, 0x3, 0x0) (async) socket$netlink(0x10, 0x3, 0x0) socket(0x1, 0x803, 0x0) sendmsg$NFT_MSG_GETSETELEM(0xffffffffffffffff, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000200)={0x14, 0xd, 0xa, 0x301, 0x0, 0x0, {0xa, 0x0, 0x1}}, 0x14}, 0x1, 0x0, 0x0, 0x24004805}, 0x8) (async) sendmsg$NFT_MSG_GETSETELEM(0xffffffffffffffff, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000200)={0x14, 0xd, 0xa, 0x301, 0x0, 0x0, {0xa, 0x0, 0x1}}, 0x14}, 0x1, 0x0, 0x0, 0x24004805}, 0x8) socketpair(0x1, 0x1, 0x0, &(0x7f0000000000)) (async) socketpair(0x1, 0x1, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) r3 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r3, &(0x7f0000000080)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f0000000a00)=@newtaction={0x64, 0x30, 0xb, 0x5, 0x25dfdbfc, {}, [{0x50, 0x1, [@m_ct={0x4c, 0x1, 0x0, 0x0, {{0x7}, {0x24, 0x2, 0x0, 0x1, [@TCA_CT_PARMS={0x18, 0x1, {0x80000001, 0x0, 0x0, 0x0, 0x400}}, @TCA_CT_ACTION={0x6, 0x3, 0x19}]}, {0x4}, {0xc, 0x7, {0x0, 0x1}}, {0xc}}}]}]}, 0x64}, 0x1, 0x0, 0x0, 0x8890}, 0x40) r4 = bpf$MAP_CREATE(0x0, &(0x7f0000000280)=@base={0x12, 0x7, 0x8, 0xfffffffe}, 0x50) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000180)={{r4}, &(0x7f0000000040), &(0x7f0000000140)=r2}, 0x20) (async) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000180)={{r4, 0xffffffffffffffff}, &(0x7f0000000040), &(0x7f0000000140)=r2}, 0x20) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x1e, 0xc, &(0x7f0000000440)=@framed={{}, [@ringbuf_output={{0x18, 0x1, 0x1, 0x0, r5}, {}, {}, {}, {}, {}, {}, {0x85, 0x0, 0x0, 0x3}}]}, 0x0, 0x0, 0x0, 0x0, 0x41100, 0x0, '\x00', 0x0, @fallback=0x16, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) (async) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x1e, 0xc, &(0x7f0000000440)=@framed={{}, [@ringbuf_output={{0x18, 0x1, 0x1, 0x0, r5}, {}, {}, {}, {}, {}, {}, {0x85, 0x0, 0x0, 0x3}}]}, 0x0, 0x0, 0x0, 0x0, 0x41100, 0x0, '\x00', 0x0, @fallback=0x16, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r6 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x3, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000080)='syzkaller\x00', 0x0, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, @fallback=0x4, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffff7a, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000000)={r6, 0x2000000, 0xe, 0x0, &(0x7f0000000200)="63eced8e46dc3f0adf33c9f7b986", 0x0, 0x8001, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x50) (async) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000000)={r6, 0x2000000, 0xe, 0x0, &(0x7f0000000200)="63eced8e46dc3f0adf33c9f7b986", 0x0, 0x8001, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x50) socket$can_bcm(0x1d, 0x2, 0x2) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000100)) 2m24.231822494s ago: executing program 4 (id=1476): r0 = syz_init_net_socket$bt_l2cap(0x1f, 0x1, 0x0) r1 = accept4$packet(0xffffffffffffffff, &(0x7f0000000000), &(0x7f0000000040)=0x14, 0x0) bpf$BPF_GET_PROG_INFO(0xf, &(0x7f0000000400)={0xffffffffffffffff, 0xe0, &(0x7f0000000300)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, &(0x7f0000000080)=[0x0, 0x0], ""/16, 0x0, 0x0, 0x0, 0x0, 0xa, 0x8, &(0x7f0000000140)=[0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0], &(0x7f00000001c0)=[0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0], 0x0, 0xf0, &(0x7f0000000200)=[{}, {}], 0x10, 0x10, &(0x7f0000000240), &(0x7f0000000280), 0x8, 0xc8, 0x8, 0x8, &(0x7f00000002c0)}}, 0x10) connect$packet(r1, &(0x7f0000000440)={0x11, 0x11, r2, 0x1, 0x5, 0x6, @dev={'\xaa\xaa\xaa\xaa\xaa', 0x31}}, 0x14) syz_init_net_socket$bt_l2cap(0x1f, 0x1, 0x0) bind$bt_l2cap(r0, &(0x7f0000000100)={0x1f, 0x3, @any, 0x0, 0x1}, 0xe) 2m23.998958329s ago: executing program 4 (id=1477): r0 = socket$netlink(0x10, 0x3, 0x0) sendmsg$netlink(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000040)=[{&(0x7f0000000100)={0x8c, 0x24, 0x601, 0x2, 0x2000300, "", [@generic="0fb9246aee6ce487b1e58fca7e1e399517247a40624e75a82a0c61dcd23e7a87c7aa99a21ee6b8a862db74d18fdec786a89008ac44af20a9e0470d2285cfb9c0f5f1158b8a8dd3c66fde4d313fa5d977acf35174964888203466abfefe9ec4e348550168bcc653d4d0e57b27b9c45ce17175cc7e1a7de98187"]}, 0x8c}], 0x1}, 0x0) 2m23.657916222s ago: executing program 4 (id=1479): r0 = socket$netlink(0x10, 0x3, 0x0) r1 = socket(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r1, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000100)={0x0, 0x14}}, 0x0) getsockname$packet(r1, &(0x7f00000002c0)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000080)=0x7) sendmsg$nl_route(r0, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000008c0)=ANY=[], 0x48}, 0x1, 0x0, 0x0, 0x20040849}, 0x80) pwritev(0xffffffffffffffff, &(0x7f0000000480)=[{&(0x7f0000000400)="cff56d11e5d7c1e41086c0f4bb52487982930a56bf94849d160f4514e70889b74ed0ff7ccfb7058e60fdfe83c74291df616d0cc79434cb55d1f4ace35f29b11187a8864f1537ed", 0x47}], 0x1, 0x5, 0x5) ioctl$XFS_IOC_OPEN_BY_HANDLE(r1, 0xc038586b, &(0x7f0000000300)={r1, &(0x7f00000000c0)='ingress\x00', 0x2400, &(0x7f0000000180)={@align=0x2f38, {0x8, 0x0, 0xfffffff9}}, 0x4, &(0x7f0000000240), &(0x7f0000000280)=0xc8}) sendmsg$nl_route_sched(r0, &(0x7f00000003c0)={0x0, 0x0, &(0x7f0000000380)={&(0x7f0000000200)=@gettclass={0x24, 0x29, 0x1, 0x70bd28, 0x25dfdbff, {0x0, 0x0, 0x0, r2, {0x9, 0xffff}, {0x7}, {0xfff2}}}, 0x24}, 0x1, 0x0, 0x0, 0x20000801}, 0x0) 2m23.451129164s ago: executing program 4 (id=1482): r0 = socket$packet(0x11, 0x3, 0x300) r1 = socket$inet6_sctp(0xa, 0x1, 0x84) r2 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r2, &(0x7f000000c2c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000400)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a28000000000a0101000000005e1affd5020000000900010073797a300000000008000240000000032c000000030a01030000e6ff000000000200"], 0x7c}}, 0x0) sendmsg$NFT_BATCH(r2, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000100)=ANY=[@ANYBLOB="140000001000010000000000000000000004000a98000000060a0b040000000000000000020000006c00048018000180080001006f7366000c000280080001400000000424000180090001006d6574610000000014000280080002400000000c08000340000000042c0001800a0001006c696d69740000001c0002800c00014000000000000000230c00024000000000000000010900010073797a3000000000090002"], 0xc0}}, 0x0) write$cgroup_subtree(0xffffffffffffffff, &(0x7f0000000000)=ANY=[@ANYBLOB="8fedcb7907001175f37538e486dd637f4b22667f2f00db5b686158bbcfe8875a65969ff57b00000000000000000000000000ac1414"], 0xfdef) socketpair$tipc(0x1e, 0x2, 0x0, &(0x7f0000000280)={0xffffffffffffffff}) setsockopt$TIPC_GROUP_JOIN(r3, 0x10f, 0x87, &(0x7f00000002c0)={0x40, 0x0, 0x1}, 0x10) r4 = socket(0x10, 0x2, 0x0) r5 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_MSG_GETCHAIN(r5, &(0x7f0000000740)={0x0, 0x0, &(0x7f0000000700)={&(0x7f0000000600)={0x14, 0x4, 0xa, 0x201, 0x0, 0x0, {0x0, 0x0, 0xa}}, 0x14}, 0x1, 0x0, 0x0, 0x40}, 0x20000004) setsockopt$netlink_NETLINK_TX_RING(r4, 0x10e, 0xc, &(0x7f0000000080)={0x8, 0x6, 0x2}, 0x10) write(r4, &(0x7f0000000480)="1c0000001a009b8a140000003b00"/28, 0x1c) recvmmsg(r4, &(0x7f0000002ec0), 0x400000000000ec0, 0x2, &(0x7f00000001c0)={0x77359400}) r6 = bpf$PROG_LOAD(0x5, &(0x7f0000000740)={0xc, 0x8, &(0x7f0000000d80)=ANY=[@ANYBLOB="1800000000000000000000000000000018020000", @ANYRES32=r1, @ANYBLOB="0000000000000000b703000000000000850000000d000000b70000000000000095"], &(0x7f00000000c0)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x1b, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2}, 0x94) sendmsg$RDMA_NLDEV_CMD_RES_CM_ID_GET(r4, &(0x7f0000000500)={&(0x7f0000000300)={0x10, 0x0, 0x0, 0x800}, 0xc, &(0x7f00000004c0)={&(0x7f0000000340)={0x50, 0x140b, 0x100, 0x70bd28, 0x25dfdbff, "", [@RDMA_NLDEV_ATTR_RES_CM_IDN={0x8, 0x3f, 0x3}, @RDMA_NLDEV_ATTR_RES_CM_IDN={0x8, 0x3f, 0x4}, @RDMA_NLDEV_ATTR_DEV_INDEX={0x8, 0x1, 0x2}, @RDMA_NLDEV_ATTR_RES_CM_IDN={0x8, 0x3f, 0x5}, @RDMA_NLDEV_ATTR_RES_CM_IDN={0x8}, @RDMA_NLDEV_ATTR_PORT_INDEX={0x8}, @RDMA_NLDEV_ATTR_PORT_INDEX={0x8, 0x3, 0x4}, @RDMA_NLDEV_ATTR_RES_CM_IDN={0x8, 0x3f, 0x4}]}, 0x50}, 0x1, 0x0, 0x0, 0x800}, 0x4000080) sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f0000000000)={0x0, 0x0, 0x0}, 0x0) r7 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r7, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000280)={0x14, 0x27, 0x301, 0x2270bd24, 0x25dfdbff, {0xd}}, 0x14}, 0x1, 0x0, 0x0, 0x4008}, 0x4044810) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f00000003c0)={r6, 0x3e8, 0xe80, 0x0, &(0x7f0000000000)="c1df07000000d30a298ee68886dd87", 0x0, 0x3ff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4}, 0x50) setsockopt$SO_ATTACH_FILTER(r0, 0x1, 0x1a, &(0x7f0000000240)={0x3, &(0x7f0000000140)=[{0x20, 0x2, 0x81, 0xfffff034}, {0x20, 0x0, 0x8, 0xfffff010}, {0x6, 0xba, 0x2, 0xefff}]}, 0x10) syz_emit_ethernet(0x32, &(0x7f0000000240)=ANY=[@ANYBLOB="aaaaaaaaaaaabbbb8b5cbbbb0800450000a70000000200119078000000000000000000000000010000000000060080000000"], 0x0) ioctl$sock_SIOCGIFINDEX(0xffffffffffffffff, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000001f00)=@newtfilter={0x4c, 0x2c, 0xd27, 0x70bd24, 0x25dfdbfd, {0x0, 0x0, 0x0, r8, {0xfff1, 0xa}, {}, {0x7, 0x2}}, [@filter_kind_options=@f_bpf={{0x8}, {0x20, 0x2, [@TCA_BPF_OPS={{0x6, 0x4, 0x1}, {0xc, 0x5, [{0x6, 0xd, 0x5, 0x4}]}}, @TCA_BPF_CLASSID={0x8, 0x3, {0xd, 0xa}}]}}]}, 0x4c}, 0x1, 0x0, 0x0, 0x8848}, 0x20004804) r9 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r9, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) r11 = socket$packet(0x11, 0x3, 0x300) sendto$packet(r11, &(0x7f00000005c0)="bad330fbc9b55400040000ea0756", 0xe, 0x40, &(0x7f00000001c0)={0x11, 0x8100, r10, 0x1, 0xd8, 0x6, @multicast}, 0x14) ioctl$sock_ipv6_tunnel_SIOCGETTUNNEL(r4, 0x89f0, &(0x7f0000000b00)={'ip6_vti0\x00', &(0x7f0000000a80)={'syztnl0\x00', 0x0, 0x2f, 0x3, 0x40, 0xdd, 0x20, @private2={0xfc, 0x2, '\x00', 0x1}, @empty, 0x7800, 0x7800, 0xbf, 0x9}}) sendmsg$ETHTOOL_MSG_CHANNELS_GET(0xffffffffffffffff, &(0x7f0000000d00)={&(0x7f0000000540)={0x10, 0x0, 0x0, 0x8}, 0xc, &(0x7f0000000cc0)={&(0x7f0000000b40)={0x140, 0x0, 0x400, 0x70bd2b, 0x25dfdbfe, {}, [@HEADER={0x20, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'veth1\x00'}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8}]}, @HEADER={0x18, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'vxcan1\x00'}]}, @HEADER={0x1c, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_INDEX={0x8}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8}]}, @HEADER={0x28, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x2}, @ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x2}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'ip6tnl0\x00'}]}, @HEADER={0x84, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x1}, @ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x2}, @ETHTOOL_A_HEADER_FLAGS={0x8}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'caif0\x00'}, @ETHTOOL_A_HEADER_FLAGS={0x8}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'netpci0\x00'}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'veth0_to_hsr\x00'}, @ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x2}, @ETHTOOL_A_HEADER_FLAGS={0x8}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'pim6reg0\x00'}]}, @HEADER={0xc, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_FLAGS={0x8}]}, @HEADER={0xc, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_INDEX={0x8}]}, @HEADER={0x14, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r10}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r12}]}]}, 0x140}, 0x1, 0x0, 0x0, 0x404c000}, 0x20000000) 2m8.278899735s ago: executing program 33 (id=1482): r0 = socket$packet(0x11, 0x3, 0x300) r1 = socket$inet6_sctp(0xa, 0x1, 0x84) r2 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r2, &(0x7f000000c2c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000400)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a28000000000a0101000000005e1affd5020000000900010073797a300000000008000240000000032c000000030a01030000e6ff000000000200"], 0x7c}}, 0x0) sendmsg$NFT_BATCH(r2, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000100)=ANY=[@ANYBLOB="140000001000010000000000000000000004000a98000000060a0b040000000000000000020000006c00048018000180080001006f7366000c000280080001400000000424000180090001006d6574610000000014000280080002400000000c08000340000000042c0001800a0001006c696d69740000001c0002800c00014000000000000000230c00024000000000000000010900010073797a3000000000090002"], 0xc0}}, 0x0) write$cgroup_subtree(0xffffffffffffffff, &(0x7f0000000000)=ANY=[@ANYBLOB="8fedcb7907001175f37538e486dd637f4b22667f2f00db5b686158bbcfe8875a65969ff57b00000000000000000000000000ac1414"], 0xfdef) socketpair$tipc(0x1e, 0x2, 0x0, &(0x7f0000000280)={0xffffffffffffffff}) setsockopt$TIPC_GROUP_JOIN(r3, 0x10f, 0x87, &(0x7f00000002c0)={0x40, 0x0, 0x1}, 0x10) r4 = socket(0x10, 0x2, 0x0) r5 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_MSG_GETCHAIN(r5, &(0x7f0000000740)={0x0, 0x0, &(0x7f0000000700)={&(0x7f0000000600)={0x14, 0x4, 0xa, 0x201, 0x0, 0x0, {0x0, 0x0, 0xa}}, 0x14}, 0x1, 0x0, 0x0, 0x40}, 0x20000004) setsockopt$netlink_NETLINK_TX_RING(r4, 0x10e, 0xc, &(0x7f0000000080)={0x8, 0x6, 0x2}, 0x10) write(r4, &(0x7f0000000480)="1c0000001a009b8a140000003b00"/28, 0x1c) recvmmsg(r4, &(0x7f0000002ec0), 0x400000000000ec0, 0x2, &(0x7f00000001c0)={0x77359400}) r6 = bpf$PROG_LOAD(0x5, &(0x7f0000000740)={0xc, 0x8, &(0x7f0000000d80)=ANY=[@ANYBLOB="1800000000000000000000000000000018020000", @ANYRES32=r1, @ANYBLOB="0000000000000000b703000000000000850000000d000000b70000000000000095"], &(0x7f00000000c0)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x1b, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2}, 0x94) sendmsg$RDMA_NLDEV_CMD_RES_CM_ID_GET(r4, &(0x7f0000000500)={&(0x7f0000000300)={0x10, 0x0, 0x0, 0x800}, 0xc, &(0x7f00000004c0)={&(0x7f0000000340)={0x50, 0x140b, 0x100, 0x70bd28, 0x25dfdbff, "", [@RDMA_NLDEV_ATTR_RES_CM_IDN={0x8, 0x3f, 0x3}, @RDMA_NLDEV_ATTR_RES_CM_IDN={0x8, 0x3f, 0x4}, @RDMA_NLDEV_ATTR_DEV_INDEX={0x8, 0x1, 0x2}, @RDMA_NLDEV_ATTR_RES_CM_IDN={0x8, 0x3f, 0x5}, @RDMA_NLDEV_ATTR_RES_CM_IDN={0x8}, @RDMA_NLDEV_ATTR_PORT_INDEX={0x8}, @RDMA_NLDEV_ATTR_PORT_INDEX={0x8, 0x3, 0x4}, @RDMA_NLDEV_ATTR_RES_CM_IDN={0x8, 0x3f, 0x4}]}, 0x50}, 0x1, 0x0, 0x0, 0x800}, 0x4000080) sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f0000000000)={0x0, 0x0, 0x0}, 0x0) r7 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r7, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000280)={0x14, 0x27, 0x301, 0x2270bd24, 0x25dfdbff, {0xd}}, 0x14}, 0x1, 0x0, 0x0, 0x4008}, 0x4044810) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f00000003c0)={r6, 0x3e8, 0xe80, 0x0, &(0x7f0000000000)="c1df07000000d30a298ee68886dd87", 0x0, 0x3ff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4}, 0x50) setsockopt$SO_ATTACH_FILTER(r0, 0x1, 0x1a, &(0x7f0000000240)={0x3, &(0x7f0000000140)=[{0x20, 0x2, 0x81, 0xfffff034}, {0x20, 0x0, 0x8, 0xfffff010}, {0x6, 0xba, 0x2, 0xefff}]}, 0x10) syz_emit_ethernet(0x32, &(0x7f0000000240)=ANY=[@ANYBLOB="aaaaaaaaaaaabbbb8b5cbbbb0800450000a70000000200119078000000000000000000000000010000000000060080000000"], 0x0) ioctl$sock_SIOCGIFINDEX(0xffffffffffffffff, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000001f00)=@newtfilter={0x4c, 0x2c, 0xd27, 0x70bd24, 0x25dfdbfd, {0x0, 0x0, 0x0, r8, {0xfff1, 0xa}, {}, {0x7, 0x2}}, [@filter_kind_options=@f_bpf={{0x8}, {0x20, 0x2, [@TCA_BPF_OPS={{0x6, 0x4, 0x1}, {0xc, 0x5, [{0x6, 0xd, 0x5, 0x4}]}}, @TCA_BPF_CLASSID={0x8, 0x3, {0xd, 0xa}}]}}]}, 0x4c}, 0x1, 0x0, 0x0, 0x8848}, 0x20004804) r9 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r9, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) r11 = socket$packet(0x11, 0x3, 0x300) sendto$packet(r11, &(0x7f00000005c0)="bad330fbc9b55400040000ea0756", 0xe, 0x40, &(0x7f00000001c0)={0x11, 0x8100, r10, 0x1, 0xd8, 0x6, @multicast}, 0x14) ioctl$sock_ipv6_tunnel_SIOCGETTUNNEL(r4, 0x89f0, &(0x7f0000000b00)={'ip6_vti0\x00', &(0x7f0000000a80)={'syztnl0\x00', 0x0, 0x2f, 0x3, 0x40, 0xdd, 0x20, @private2={0xfc, 0x2, '\x00', 0x1}, @empty, 0x7800, 0x7800, 0xbf, 0x9}}) sendmsg$ETHTOOL_MSG_CHANNELS_GET(0xffffffffffffffff, &(0x7f0000000d00)={&(0x7f0000000540)={0x10, 0x0, 0x0, 0x8}, 0xc, &(0x7f0000000cc0)={&(0x7f0000000b40)={0x140, 0x0, 0x400, 0x70bd2b, 0x25dfdbfe, {}, [@HEADER={0x20, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'veth1\x00'}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8}]}, @HEADER={0x18, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'vxcan1\x00'}]}, @HEADER={0x1c, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_INDEX={0x8}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8}]}, @HEADER={0x28, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x2}, @ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x2}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'ip6tnl0\x00'}]}, @HEADER={0x84, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x1}, @ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x2}, @ETHTOOL_A_HEADER_FLAGS={0x8}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'caif0\x00'}, @ETHTOOL_A_HEADER_FLAGS={0x8}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'netpci0\x00'}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'veth0_to_hsr\x00'}, @ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x2}, @ETHTOOL_A_HEADER_FLAGS={0x8}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'pim6reg0\x00'}]}, @HEADER={0xc, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_FLAGS={0x8}]}, @HEADER={0xc, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_INDEX={0x8}]}, @HEADER={0x14, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r10}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r12}]}]}, 0x140}, 0x1, 0x0, 0x0, 0x404c000}, 0x20000000) 1m53.161258571s ago: executing program 6 (id=1690): r0 = bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f00000004c0)={0x1b, 0x0, 0x0, 0x40000, 0x0, 0x0}, 0x50) r1 = socket$inet6_sctp(0xa, 0x1, 0x84) getsockopt$inet_sctp6_SCTP_GET_ASSOC_ID_LIST(r1, 0x84, 0x1d, &(0x7f0000000040)={0x2, [0x0, 0x0]}, &(0x7f00000000c0)=0xc) ppoll(&(0x7f0000000080)=[{r0, 0x1a0}], 0x1, &(0x7f0000000480), 0x0, 0x0) bpf$PROG_LOAD(0x5, &(0x7f0000000440)={0xd, 0x4, &(0x7f0000000100)=ANY=[@ANYBLOB="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"], &(0x7f0000000080)='GPL\x00', 0x4, 0x3e0, &(0x7f000000cf3d)=""/195, 0x0, 0x0, '\x00', 0x0, @sock_ops, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0x0, 0x10, &(0x7f0000000000), 0x76}, 0x48) 1m52.893130191s ago: executing program 6 (id=1693): r0 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000140), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(0xffffffffffffffff, 0x8933, &(0x7f0000000180)={'wlan1\x00', 0x0}) sendmsg$NL80211_CMD_GET_SCAN(0xffffffffffffffff, &(0x7f00000002c0)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x8000}, 0xc, &(0x7f0000000280)={&(0x7f0000000200)={0x1c, r0, 0x1, 0x70bd2a, 0x25dfdbfd, {{}, {@val={0x8, 0x3, r1}, @void}}, ["", "", ""]}, 0x1c}}, 0x8004) r2 = openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0x92880, 0x0) ioctl$XFS_IOC_ATTRMULTI_BY_HANDLE(r2, 0x4048587b, &(0x7f0000000500)={{r2, &(0x7f0000000300)='wlan1\x00', 0x10000, &(0x7f0000000380)={@align=0x309, {0x1000, 0x9, 0x80000001, 0xfffffffffffffffd}}, 0x0, &(0x7f00000003c0), &(0x7f0000000400)=0x4cb568ef}, 0x1, &(0x7f00000004c0)=[{0x1, 0x7ff, &(0x7f0000000440)='wlan1\x00', &(0x7f0000000480)="78c1", 0x2, 0x32}]}) sendmsg$NL80211_CMD_STOP_SCHED_SCAN(r3, &(0x7f0000000680)={&(0x7f0000000580)={0x10, 0x0, 0x0, 0xc1000000}, 0xc, &(0x7f0000000640)={&(0x7f00000005c0)={0x58, r0, 0x2, 0x70bd2c, 0x25dfdbfc, {{}, {@val={0x8, 0x3, r1}, @val={0xc, 0x99, {0x1, 0x58}}}}, [@NL80211_ATTR_COOKIE={0xc, 0x58, 0x76}, @NL80211_ATTR_COOKIE={0xc, 0x58, 0x15}, @NL80211_ATTR_COOKIE={0xc, 0x58, 0x4d}, @NL80211_ATTR_COOKIE={0xc, 0x58, 0x9}]}, 0x58}, 0x1, 0x0, 0x0, 0x40}, 0x40805) ioctl$TUNSETIFF(r2, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0xca02}) r4 = socket$netlink(0x10, 0x3, 0x14) preadv(r2, &(0x7f00000001c0)=[{&(0x7f0000000340)=""/4, 0x4}, {&(0x7f0000000080)=""/166, 0xa6}], 0x2, 0x0, 0x0) ioctl$SIOCSIFHWADDR(r4, 0x8914, &(0x7f0000002280)={'syzkaller0\x00', @link_local}) 1m52.408684571s ago: executing program 6 (id=1697): r0 = socket$kcm(0x2b, 0x1, 0x0) close(r0) r1 = socket$inet_udp(0x2, 0x2, 0x0) setsockopt$inet_MCAST_JOIN_GROUP(r1, 0x0, 0x2a, &(0x7f0000000180)={0x2, {{0x2, 0x0, @multicast2}}}, 0x88) setsockopt$inet_group_source_req(r1, 0x0, 0x2f, &(0x7f0000000700)={0x2, {{0x2, 0x0, @multicast2}}, {{0x2, 0x4e20, @broadcast}}}, 0x108) close(r0) r2 = socket$netlink(0x10, 0x3, 0x0) r3 = bpf$BPF_PROG_GET_FD_BY_ID(0xd, &(0x7f0000000140), 0x4) ioctl$XFS_IOC_START_COMMIT(r2, 0x80585882, &(0x7f0000000280)={0xffffffffffffffff}) bpf$BPF_PROG_ATTACH(0x8, &(0x7f0000000180)=ANY=[@ANYRES32=0x1, @ANYRES32=r3, @ANYBLOB='\x00\x00\x00\x00\x00\x00\x00\x00', @ANYRES32, @ANYBLOB, @ANYRES32=r4, @ANYBLOB, @ANYRES64=0x0], 0x20) mmap(&(0x7f0000001000/0xc00000)=nil, 0xc00000, 0x0, 0x3032, 0xffffffffffffffff, 0x0) r5 = bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000340)=ANY=[@ANYBLOB="02000000040000000800000001"], 0x48) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000001c0)={0x11, 0x10, &(0x7f0000000080)=ANY=[@ANYBLOB="18000000000000000000000000000000b7080000000000007b8af8ff00000000b7080000000000007b8af0ff00000000bf8100000000000007080000f8ffffffbfa400000000000007040000f0ffffffb70200000800000018210000", @ANYRES32=r5, @ANYBLOB="0000000002000000b705000008000000850000005d00000095"], &(0x7f0000000300)='GPL\x00', 0x8, 0x1002, &(0x7f00000014c0)=""/4098, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x1}, 0x94) r6 = socket$packet(0x11, 0x2, 0x300) setsockopt$packet_int(r6, 0x107, 0x8, &(0x7f0000000100)=0x40049, 0x4) recvmmsg(r6, &(0x7f0000000480)=[{{0x0, 0x0, 0x0, 0x0, &(0x7f00000003c0)=""/1, 0x1}, 0x5}], 0x1, 0x10022, 0x0) r7 = socket$inet6(0xa, 0x3, 0x1) setsockopt$IP6T_SO_SET_REPLACE(r7, 0x29, 0x40, &(0x7f0000000580)=@raw={'raw\x00', 0x8, 0x3, 0x560, 0x0, 0xffffffff, 0xffffffff, 0xf0, 0xffffffff, 0x490, 0xffffffff, 0xffffffff, 0x490, 0xffffffff, 0x3, 0x0, {[{{@ipv6={@private0, @mcast2, [], [], 'veth0_macvtap\x00', 'dvmrp1\x00'}, 0x0, 0xa8, 0xf0}, @common=@inet=@TEE={0x48, 'TEE\x00', 0x1, {@ipv6=@mcast2, 'vxcan1\x00', {0x8}}}}, {{@ipv6={@empty, @ipv4={'\x00', '\xff\xff', @dev={0xac, 0x14, 0x14, 0xfd}}, [], [0x0, 0xffffffff], 'pim6reg\x00', 'gre0\x00', {}, {}, 0x62}, 0x0, 0x358, 0x3a0, 0x0, {}, [@common=@inet=@hashlimit3={{0x158}, {'veth0_virt_wifi\x00', {0x4, 0x8, 0x20, 0x5e1b2d47, 0xf91, 0x5, 0x4, 0x9f7, 0x18}, {0x8}}}, @common=@inet=@hashlimit3={{0x158}, {'wg1\x00', {0x3, 0x0, 0x41, 0x0, 0x0, 0x1000, 0x6, 0x5}}}]}, @common=@inet=@TEE={0x48, 'TEE\x00', 0x1, {@ipv6=@mcast2, 'bridge_slave_0\x00', {0x53}}}}], {{'\x00', 0x0, 0xa8, 0xd0}, {0x28, '\x00', 0x7}}}}, 0x5c0) sendmsg$NFNL_MSG_ACCT_DEL(r2, &(0x7f0000000100)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x8}, 0xc, &(0x7f00000000c0)={&(0x7f0000000040)={0x64, 0x3, 0x7, 0x401, 0x0, 0x0, {0x3, 0x0, 0xa}, [@NFACCT_QUOTA={0xc, 0x6, 0x1, 0x0, 0x4}, @NFACCT_QUOTA={0xc, 0x6, 0x1, 0x0, 0x1}, @NFACCT_FILTER={0xc, 0x7, 0x0, 0x1, [@NFACCT_FILTER_MASK={0x8, 0x1, 0x1, 0x0, 0x2}]}, @NFACCT_QUOTA={0xc, 0x6, 0x1, 0x0, 0x4}, @NFACCT_FLAGS={0x8}, @NFACCT_NAME={0x9, 0x1, 'syz1\x00'}, @NFACCT_PKTS={0xc}]}, 0x64}, 0x1, 0x0, 0x0, 0x4000}, 0x41) sendmsg$nl_route(r2, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000540)={&(0x7f0000000240)=@newlink={0x40, 0x10, 0xff05, 0x8000000, 0x0, {0x0, 0x0, 0x4a00, 0x0, 0xbc2a4219f6b34c13}, [@IFLA_LINKINFO={0x14, 0x12, 0x0, 0x1, @batadv={{0xb}, {0x4}}}, @IFLA_ADDRESS={0xa, 0x1, @multicast}]}, 0x40}}, 0x20000840) 1m51.58492626s ago: executing program 6 (id=1706): r0 = bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000340)={0x2, 0x4, 0x8, 0x1, 0x80, 0x0}, 0x48) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000003c0)={0x4, 0x10, &(0x7f00000008c0)=ANY=[@ANYBLOB="18050000000000000000000000000000b7080000000000007b8af8ff00000000b7080000000000007b8af0ff00000000bfa100000000000007010000f8ffffffbfa400000000000007040000f0ffffffb70200000000000018230000", @ANYRES32=r0, @ANYBLOB="0000000000000000b704000006000000850000001c00000095"], &(0x7f0000000000)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000001bc0)={r1, 0x2f000000, 0x138, 0x4c, &(0x7f0000001cc0)="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", &(0x7f0000001c40)=""/76, 0x4000, 0x0, 0x47, 0x50, &(0x7f0000001ac0)="9c01bd6f9a6028c80d7364240fd78867d9d62eca43c565f2c5ac65dd4a0fadceb6c65dcb07f2421e69087e0f17b4eb709e4805f2722709c46bef17c4cb9aed9fb1c342179ea349", &(0x7f0000001a40)="408fd0050dc7945b483103067eca9bd26ffbe35abf0f88a103f6893dc2b1d1cdc2195d4ae89abc04ff5fe5d2466892c81015df835a7d47be4f852161bc4015e7564b08584290fe1762f943a653008ac5", 0x1, 0x8000000, 0x13}, 0x22) r2 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_route(r2, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000200)=ANY=[@ANYBLOB="380000004800010029bd7000fcdbdf250a"], 0x38}}, 0x24044805) 1m51.341413034s ago: executing program 6 (id=1709): sendmmsg$inet(0xffffffffffffffff, &(0x7f0000000a00)=[{{0x0, 0x0, &(0x7f0000000100)=[{&(0x7f0000000000)="a905a6f2", 0x4}], 0x1}}], 0x1, 0xc044) (async) r0 = socket(0x2, 0x2, 0x1) bind$unix(r0, &(0x7f0000000000)=@abs, 0x6e) connect$unix(r0, &(0x7f0000000100)=@abs={0x0, 0x0, 0x4e24}, 0x6e) (async) r1 = syz_open_procfs$namespace(0xffffffffffffffff, &(0x7f0000000080)='ns/user\x00') syz_open_procfs$namespace(0x0, &(0x7f0000000000)='ns/cgroup\x00') (async) r2 = ioctl$NS_GET_PARENT(r1, 0xb702, 0x0) ioctl$NS_GET_PARENT(r2, 0x8004b708, 0x0) 1m51.171080989s ago: executing program 6 (id=1711): r0 = bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000040)={&(0x7f00000004c0)=ANY=[@ANYBLOB="9feb010018000000000000005000000050000000020000000b0000000000001104000000070000000a0000000000000203000000000000000500000d00404500020000000100000000000000000000000d000000feffffff100000000000000001000000030010"], 0x0, 0x6a, 0x0, 0x0, 0x1}, 0x28) socket$inet_tcp(0x2, 0x1, 0x0) (async) r1 = socket$inet_tcp(0x2, 0x1, 0x0) setsockopt$ARPT_SO_SET_REPLACE(r1, 0x0, 0x60, &(0x7f0000000640)={'filter\x00', 0x5, 0x4, 0x3f0, 0x110, 0x110, 0x110, 0x308, 0x308, 0x308, 0x4, 0x0, {[{{@arp={@broadcast, @initdev={0xac, 0x1e, 0x0, 0x0}, 0xffffff00, 0x0, 0x4, 0x4, {@mac=@remote, {[0xff, 0xff, 0x0, 0x0, 0x0, 0xff]}}, {@empty, {[0xff, 0x0, 0x0, 0x0, 0xff, 0xff]}}, 0x3, 0x8, 0x7, 0x9, 0x6, 0x4, 'veth0_to_batadv\x00', 'ipvlan0\x00', {0xff}, {0xff}, 0x0, 0x2}, 0xc0, 0x110}, @mangle={0x50, 'mangle\x00', 0x0, {@empty, @empty, @private, @empty, 0xa}}}, {{@uncond, 0xc0, 0x110}, @mangle={0x50, 'mangle\x00', 0x0, {@empty, @empty, @local, @private=0x1000, 0x0, 0xffffffff}}}, {{@uncond, 0xc0, 0xe8}, @unspec=@STANDARD={0x28, '\x00', 0x0, 0xffffffffffffffff}}], {{'\x00', 0xc0, 0xe8}, {0x28}}}}, 0x440) socket$nl_route(0x10, 0x3, 0x0) (async) r2 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f0000000040)={'tunl0\x00'}) (async) ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f0000000040)={'tunl0\x00', 0x0}) sendmsg$nl_route_sched(r2, &(0x7f0000001200)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000005c0)=@newqdisc={0x48, 0x24, 0x4ee4e6a52ff56541, 0x0, 0x0, {0x0, 0x0, 0x0, r3, {}, {0xffff, 0xffff}}, [@TCA_STAB={0x24, 0x8, 0x0, 0x1, [{{0x1c, 0x1, {0x0, 0x0, 0x0, 0x0, 0x2, 0x1}}, {0x4}}]}]}, 0x48}, 0x1, 0x0, 0x0, 0x20000}, 0x4000058) openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000940)='hugetlb.2MB.usage_in_bytes\x00', 0x26e1, 0x0) (async) r4 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000940)='hugetlb.2MB.usage_in_bytes\x00', 0x26e1, 0x0) socket$inet6_udp(0xa, 0x2, 0x0) r5 = socket$inet6_mptcp(0xa, 0x1, 0x106) setsockopt$IP6T_SO_SET_REPLACE(r5, 0x29, 0x40, &(0x7f00000006c0)=@security={'security\x00', 0x44, 0x4, 0x568, 0xffffffff, 0x240, 0x240, 0x240, 0xffffffff, 0xffffffff, 0x498, 0x498, 0x498, 0xffffffff, 0x4, 0x0, {[{{@uncond, 0x203, 0x1f8, 0x240, 0x8502, {}, [@common=@inet=@hashlimit2={{0x150}, {'ip6erspan0\x00', {0x3ff, 0x7fffffff, 0x0, 0x2, 0x2fff, 0x849a, 0x1, 0x18, 0x18}, {0x8}}}]}, @common=@unspec=@IDLETIMER={0x48, 'IDLETIMER\x00', 0x0, {0x9, 'syz1\x00', {0x2}}}}, {{@uncond, 0x0, 0x118, 0x140, 0x0, {0x0, 0x11}, [@common=@eui64={{0x28}}, @common=@dst={{0x48}, {0x5, 0x6, 0x0, [0xdd2, 0xd35, 0x8, 0x7, 0x1, 0x1ff, 0x3, 0xfff, 0x800, 0x1, 0x0, 0x44, 0x2, 0x9, 0x9, 0x3], 0x1}}]}, @common=@unspec=@STANDARD={0x28, '\x00', 0x0, 0xffffffffffffffff}}, {{@uncond, 0x0, 0xa8, 0x118}, @common=@unspec=@NFLOG={0x70, 'NFLOG\x00', 0x0, {0x1, 0x7, 0x81, 0x0, 0x0, "d13aea835ab25d2af06d2a594bd55044f3f8f4a6ee1c3d886408088b5319e5294d4192982093b0f1e78cdb4585b98822e00d4b509e74d3ebb43b153f2481c6e3"}}}], {{'\x00', 0x0, 0xa8, 0xd0}, {0x28}}}}, 0x5c8) close(r4) socket$nl_sock_diag(0x10, 0x3, 0x4) socket$igmp(0x2, 0x3, 0x2) (async) r6 = socket$igmp(0x2, 0x3, 0x2) r7 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r7, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000c40)=ANY=[@ANYBLOB="14000000270001031dbd5002fadbdf2501"], 0x14}}, 0x0) sendmsg$IPSET_CMD_CREATE(0xffffffffffffffff, &(0x7f00000002c0)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000000)=ANY=[], 0x5c}}, 0x0) (async) sendmsg$IPSET_CMD_CREATE(0xffffffffffffffff, &(0x7f00000002c0)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000000)=ANY=[], 0x5c}}, 0x0) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000100)=@gettaction={0x50, 0x32, 0x20, 0x70bd25, 0x25dfdbfe, {}, [@action_gd=@TCA_ACT_TAB={0x1c, 0x1, [{0xc, 0x1c, 0x0, 0x0, @TCA_ACT_KIND={0x8, 0x1, 'bpf\x00'}}, {0xc, 0x20, 0x0, 0x0, @TCA_ACT_KIND={0x8, 0x1, 'ife\x00'}}]}, @action_gd=@TCA_ACT_TAB={0x20, 0x1, [{0x10, 0x7, 0x0, 0x0, @TCA_ACT_KIND={0xb, 0x1, 'mirred\x00'}}, {0xc, 0x17, 0x0, 0x0, @TCA_ACT_INDEX={0x8, 0x3, 0x40}}]}]}, 0x50}, 0x1, 0x0, 0x0, 0x40000}, 0x4048840) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000100)=@gettaction={0x44, 0x32, 0x20, 0x70bd25, 0x25dfdbfe, {}, [@action_gd=@TCA_ACT_TAB={0x1c, 0x1, [{0xc, 0x1c, 0x0, 0x0, @TCA_ACT_KIND={0x8, 0x1, 'bpf\x00'}}, {0xc, 0x8, 0x0, 0x0, @TCA_ACT_KIND={0x8, 0x1, 'ife\x00'}}]}, @action_gd=@TCA_ACT_TAB={0x14, 0x1, [{0x10, 0x8, 0x0, 0x0, @TCA_ACT_KIND={0xb, 0x1, 'mirred\x00'}}]}]}, 0x44}, 0x1, 0x0, 0x0, 0x40000}, 0x4048840) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000100)=ANY=[@ANYBLOB="4800000010000d0428bd7000fcdbff2500008000", @ANYRES32=0x0, @ANYBLOB="1000000000000000280012800b0001006272696467650000180002"], 0x48}, 0x1, 0x0, 0x0, 0x10}, 0x0) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000100)=ANY=[@ANYBLOB="500000001000010425bbe5ad600027842cf52300", @ANYRES32=0x0, @ANYBLOB="0300000000000000280012800a00010076786c616e00"], 0x50}, 0x1, 0x0, 0x0, 0x13d33d22cca65c15}, 0x4008840) r8 = socket$netlink(0x10, 0x3, 0x0) sendmmsg(r8, &(0x7f00000002c0), 0x40000000000009f, 0x0) setsockopt$MRT_TABLE(r6, 0x0, 0xcf, 0x0, 0x0) (async) setsockopt$MRT_TABLE(r6, 0x0, 0xcf, 0x0, 0x0) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000340)={0x6, 0x0, 0x0, &(0x7f0000000280)='syzkaller\x00', 0x800, 0x0, 0x0, 0x41000, 0x20, '\x00', 0x0, 0x25, r0, 0x8, &(0x7f00000002c0)={0x8, 0x4}, 0x8, 0x10, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, &(0x7f0000000300)=[{0x2, 0x1, 0x7}], 0x10, 0x80000000}, 0x94) (async) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000340)={0x6, 0x0, 0x0, &(0x7f0000000280)='syzkaller\x00', 0x800, 0x0, 0x0, 0x41000, 0x20, '\x00', 0x0, 0x25, r0, 0x8, &(0x7f00000002c0)={0x8, 0x4}, 0x8, 0x10, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, &(0x7f0000000300)=[{0x2, 0x1, 0x7}], 0x10, 0x80000000}, 0x94) bpf$MAP_CREATE(0x0, 0x0, 0x48) ioctl$SIOCSIFHWADDR(r4, 0x8b34, &(0x7f0000000000)={'wlan1\x00', @random="000500000020"}) 1m35.968128197s ago: executing program 34 (id=1711): r0 = bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000040)={&(0x7f00000004c0)=ANY=[@ANYBLOB="9feb010018000000000000005000000050000000020000000b0000000000001104000000070000000a0000000000000203000000000000000500000d00404500020000000100000000000000000000000d000000feffffff100000000000000001000000030010"], 0x0, 0x6a, 0x0, 0x0, 0x1}, 0x28) socket$inet_tcp(0x2, 0x1, 0x0) (async) r1 = socket$inet_tcp(0x2, 0x1, 0x0) setsockopt$ARPT_SO_SET_REPLACE(r1, 0x0, 0x60, &(0x7f0000000640)={'filter\x00', 0x5, 0x4, 0x3f0, 0x110, 0x110, 0x110, 0x308, 0x308, 0x308, 0x4, 0x0, {[{{@arp={@broadcast, @initdev={0xac, 0x1e, 0x0, 0x0}, 0xffffff00, 0x0, 0x4, 0x4, {@mac=@remote, {[0xff, 0xff, 0x0, 0x0, 0x0, 0xff]}}, {@empty, {[0xff, 0x0, 0x0, 0x0, 0xff, 0xff]}}, 0x3, 0x8, 0x7, 0x9, 0x6, 0x4, 'veth0_to_batadv\x00', 'ipvlan0\x00', {0xff}, {0xff}, 0x0, 0x2}, 0xc0, 0x110}, @mangle={0x50, 'mangle\x00', 0x0, {@empty, @empty, @private, @empty, 0xa}}}, {{@uncond, 0xc0, 0x110}, @mangle={0x50, 'mangle\x00', 0x0, {@empty, @empty, @local, @private=0x1000, 0x0, 0xffffffff}}}, {{@uncond, 0xc0, 0xe8}, @unspec=@STANDARD={0x28, '\x00', 0x0, 0xffffffffffffffff}}], {{'\x00', 0xc0, 0xe8}, {0x28}}}}, 0x440) socket$nl_route(0x10, 0x3, 0x0) (async) r2 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f0000000040)={'tunl0\x00'}) (async) ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f0000000040)={'tunl0\x00', 0x0}) sendmsg$nl_route_sched(r2, &(0x7f0000001200)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000005c0)=@newqdisc={0x48, 0x24, 0x4ee4e6a52ff56541, 0x0, 0x0, {0x0, 0x0, 0x0, r3, {}, {0xffff, 0xffff}}, [@TCA_STAB={0x24, 0x8, 0x0, 0x1, [{{0x1c, 0x1, {0x0, 0x0, 0x0, 0x0, 0x2, 0x1}}, {0x4}}]}]}, 0x48}, 0x1, 0x0, 0x0, 0x20000}, 0x4000058) openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000940)='hugetlb.2MB.usage_in_bytes\x00', 0x26e1, 0x0) (async) r4 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000940)='hugetlb.2MB.usage_in_bytes\x00', 0x26e1, 0x0) socket$inet6_udp(0xa, 0x2, 0x0) r5 = socket$inet6_mptcp(0xa, 0x1, 0x106) setsockopt$IP6T_SO_SET_REPLACE(r5, 0x29, 0x40, &(0x7f00000006c0)=@security={'security\x00', 0x44, 0x4, 0x568, 0xffffffff, 0x240, 0x240, 0x240, 0xffffffff, 0xffffffff, 0x498, 0x498, 0x498, 0xffffffff, 0x4, 0x0, {[{{@uncond, 0x203, 0x1f8, 0x240, 0x8502, {}, [@common=@inet=@hashlimit2={{0x150}, {'ip6erspan0\x00', {0x3ff, 0x7fffffff, 0x0, 0x2, 0x2fff, 0x849a, 0x1, 0x18, 0x18}, {0x8}}}]}, @common=@unspec=@IDLETIMER={0x48, 'IDLETIMER\x00', 0x0, {0x9, 'syz1\x00', {0x2}}}}, {{@uncond, 0x0, 0x118, 0x140, 0x0, {0x0, 0x11}, [@common=@eui64={{0x28}}, @common=@dst={{0x48}, {0x5, 0x6, 0x0, [0xdd2, 0xd35, 0x8, 0x7, 0x1, 0x1ff, 0x3, 0xfff, 0x800, 0x1, 0x0, 0x44, 0x2, 0x9, 0x9, 0x3], 0x1}}]}, @common=@unspec=@STANDARD={0x28, '\x00', 0x0, 0xffffffffffffffff}}, {{@uncond, 0x0, 0xa8, 0x118}, @common=@unspec=@NFLOG={0x70, 'NFLOG\x00', 0x0, {0x1, 0x7, 0x81, 0x0, 0x0, "d13aea835ab25d2af06d2a594bd55044f3f8f4a6ee1c3d886408088b5319e5294d4192982093b0f1e78cdb4585b98822e00d4b509e74d3ebb43b153f2481c6e3"}}}], {{'\x00', 0x0, 0xa8, 0xd0}, {0x28}}}}, 0x5c8) close(r4) socket$nl_sock_diag(0x10, 0x3, 0x4) socket$igmp(0x2, 0x3, 0x2) (async) r6 = socket$igmp(0x2, 0x3, 0x2) r7 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r7, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000c40)=ANY=[@ANYBLOB="14000000270001031dbd5002fadbdf2501"], 0x14}}, 0x0) sendmsg$IPSET_CMD_CREATE(0xffffffffffffffff, &(0x7f00000002c0)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000000)=ANY=[], 0x5c}}, 0x0) (async) sendmsg$IPSET_CMD_CREATE(0xffffffffffffffff, &(0x7f00000002c0)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000000)=ANY=[], 0x5c}}, 0x0) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000100)=@gettaction={0x50, 0x32, 0x20, 0x70bd25, 0x25dfdbfe, {}, [@action_gd=@TCA_ACT_TAB={0x1c, 0x1, [{0xc, 0x1c, 0x0, 0x0, @TCA_ACT_KIND={0x8, 0x1, 'bpf\x00'}}, {0xc, 0x20, 0x0, 0x0, @TCA_ACT_KIND={0x8, 0x1, 'ife\x00'}}]}, @action_gd=@TCA_ACT_TAB={0x20, 0x1, [{0x10, 0x7, 0x0, 0x0, @TCA_ACT_KIND={0xb, 0x1, 'mirred\x00'}}, {0xc, 0x17, 0x0, 0x0, @TCA_ACT_INDEX={0x8, 0x3, 0x40}}]}]}, 0x50}, 0x1, 0x0, 0x0, 0x40000}, 0x4048840) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000100)=@gettaction={0x44, 0x32, 0x20, 0x70bd25, 0x25dfdbfe, {}, [@action_gd=@TCA_ACT_TAB={0x1c, 0x1, [{0xc, 0x1c, 0x0, 0x0, @TCA_ACT_KIND={0x8, 0x1, 'bpf\x00'}}, {0xc, 0x8, 0x0, 0x0, @TCA_ACT_KIND={0x8, 0x1, 'ife\x00'}}]}, @action_gd=@TCA_ACT_TAB={0x14, 0x1, [{0x10, 0x8, 0x0, 0x0, @TCA_ACT_KIND={0xb, 0x1, 'mirred\x00'}}]}]}, 0x44}, 0x1, 0x0, 0x0, 0x40000}, 0x4048840) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000100)=ANY=[@ANYBLOB="4800000010000d0428bd7000fcdbff2500008000", @ANYRES32=0x0, @ANYBLOB="1000000000000000280012800b0001006272696467650000180002"], 0x48}, 0x1, 0x0, 0x0, 0x10}, 0x0) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000100)=ANY=[@ANYBLOB="500000001000010425bbe5ad600027842cf52300", @ANYRES32=0x0, @ANYBLOB="0300000000000000280012800a00010076786c616e00"], 0x50}, 0x1, 0x0, 0x0, 0x13d33d22cca65c15}, 0x4008840) r8 = socket$netlink(0x10, 0x3, 0x0) sendmmsg(r8, &(0x7f00000002c0), 0x40000000000009f, 0x0) setsockopt$MRT_TABLE(r6, 0x0, 0xcf, 0x0, 0x0) (async) setsockopt$MRT_TABLE(r6, 0x0, 0xcf, 0x0, 0x0) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000340)={0x6, 0x0, 0x0, &(0x7f0000000280)='syzkaller\x00', 0x800, 0x0, 0x0, 0x41000, 0x20, '\x00', 0x0, 0x25, r0, 0x8, &(0x7f00000002c0)={0x8, 0x4}, 0x8, 0x10, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, &(0x7f0000000300)=[{0x2, 0x1, 0x7}], 0x10, 0x80000000}, 0x94) (async) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000340)={0x6, 0x0, 0x0, &(0x7f0000000280)='syzkaller\x00', 0x800, 0x0, 0x0, 0x41000, 0x20, '\x00', 0x0, 0x25, r0, 0x8, &(0x7f00000002c0)={0x8, 0x4}, 0x8, 0x10, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, &(0x7f0000000300)=[{0x2, 0x1, 0x7}], 0x10, 0x80000000}, 0x94) bpf$MAP_CREATE(0x0, 0x0, 0x48) ioctl$SIOCSIFHWADDR(r4, 0x8b34, &(0x7f0000000000)={'wlan1\x00', @random="000500000020"}) 3.538372617s ago: executing program 3 (id=2414): sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000200)=@newtclass={0x24, 0x28, 0x0, 0x70bd26, 0x25dfdbfb, {0x0, 0x0, 0x0, 0x0, {0x9, 0x4}, {0x7, 0xfffc}, {0xb, 0xf}}}, 0x24}}, 0x80800) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000000c0)={0x11, 0x19, &(0x7f0000000380)=@ringbuf={{0x18, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x9}, {{}, {}, {}, {0x85, 0x0, 0x0, 0xd3}}, {}, [@cb_func={0x18, 0x4, 0x4, 0x0, 0x3}, @printk={@li, {}, {}, {}, {}, {0x7, 0x0, 0xb, 0x3, 0x0, 0x0, 0xfffffffd}}], {{}, {0x7, 0x0, 0xb, 0x2, 0x0, 0x0, 0x1}, {0x85, 0x0, 0x0, 0x84}}}, 0x0, 0xf, 0x0, 0x0, 0x40f00, 0x4d}, 0x94) r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$ethtool(&(0x7f00000001c0), 0xffffffffffffffff) sendmsg$ETHTOOL_MSG_RINGS_SET(r0, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000400)=ANY=[@ANYBLOB='<\x00\x00\x00', @ANYRES16=r1, @ANYBLOB="010001000000fcffffff100000001800018014000200776c616e3000000800000000000000000800090000000000080008"], 0x3c}, 0x1, 0x0, 0x0, 0x80}, 0x240008c0) r2 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_route(r2, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000040)=@newlink={0x54, 0x10, 0x401, 0x70bd26, 0x0, {0x0, 0x0, 0x0, 0x0, 0x15442, 0x10028}, [@IFLA_LINKINFO={0x20, 0x12, 0x0, 0x1, @erspan={{0xb}, {0x10, 0x2, 0x0, 0x1, [@IFLA_GRE_COLLECT_METADATA={0x4}, @IFLA_GRE_ERSPAN_INDEX={0x8, 0x15, 0x1491a}]}}}, @IFLA_IFNAME={0x14, 0x3, 'nicvf0\x00'}]}, 0x54}, 0x1, 0x0, 0x0, 0x8c1}, 0x810) sendmmsg(r2, &(0x7f00000002c0), 0x40000000000009f, 0x0) 3.339363908s ago: executing program 3 (id=2417): r0 = socket$inet6(0xa, 0x2, 0x0) r1 = socket$netlink(0x10, 0x3, 0x8000000004) writev(r1, &(0x7f0000000040)=[{&(0x7f0000000280)="580000001400192340834b80040d8c560a0677bc45ff810500000000000058000b480400945f64009400050028925a01000000000000008000f0fffeffe809000000fff5dd0000001000010000081000418e00000004fcff", 0x58}], 0x1) r2 = socket(0x10, 0x2, 0x0) ioctl$sock_ipv6_tunnel_SIOCADDTUNNEL(r2, 0x89f1, 0x0) unshare(0x6010100) r3 = socket$unix(0x1, 0x1, 0x0) bind$unix(r3, &(0x7f0000000180)=@file={0x1}, 0x6e) shutdown(r3, 0x0) listen(r3, 0x0) socket$unix(0x1, 0x1, 0x0) sendmsg$802154_dgram(0xffffffffffffffff, 0x0, 0x0) socket$igmp(0x2, 0x3, 0x2) r4 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r4, 0x0, 0x0) bpf$MAP_CREATE(0x0, 0x0, 0x50) bpf$BPF_PROG_TEST_RUN(0xa, 0x0, 0x0) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000fc0)={0xffffffffffffffff}) sendmsg$inet(r5, 0x0, 0x0) unshare(0x400) pselect6(0x40, &(0x7f00000001c0)={0x0, 0x0, 0x3, 0xfffffffffffffffd}, 0x0, &(0x7f0000000040)={0x3ff, 0x1, 0x0, 0x9, 0x0, 0x0, 0x7fffffff}, 0x0, 0x0) setsockopt$sock_int(r0, 0x1, 0x2a, &(0x7f0000000040)=0x26d, 0x4) syz_emit_ethernet(0x34e, &(0x7f0000000780)=ANY=[@ANYBLOB="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"], 0x0) 2.908590272s ago: executing program 0 (id=2423): socketpair(0x1, 0x1, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$sock_ipv4_tunnel_SIOCCHGTUNNEL(r1, 0x89f3, &(0x7f0000000280)={'gre0\x00', &(0x7f00000001c0)={'sit0\x00', 0x0, 0x20, 0x8, 0xc, 0x0, {{0x17, 0x4, 0x0, 0x30, 0x5c, 0x65, 0x0, 0x6, 0x2, 0x0, @loopback, @private=0xa010102, {[@lsrr={0x83, 0x23, 0xed, [@multicast1, @loopback, @local, @dev={0xac, 0x14, 0x14, 0x1e}, @rand_addr=0x64010102, @initdev={0xac, 0x1e, 0x1, 0x0}, @remote, @dev={0xac, 0x14, 0x14, 0x1c}]}, @ssrr={0x89, 0x23, 0xec, [@multicast2, @remote, @private=0xa010100, @dev={0xac, 0x14, 0x14, 0x26}, @empty, @rand_addr=0x64010101, @rand_addr=0x64010101, @remote]}]}}}}}) r3 = bpf$MAP_CREATE(0x0, &(0x7f0000000300)=@base={0x12, 0x3, 0x4, 0x2, 0x0, 0xffffffffffffffff, 0x0, '\x00', r2}, 0x50) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000180)={{r3, 0xffffffffffffffff}, &(0x7f0000000040), &(0x7f0000000140)=r1}, 0x20) sendmsg$802154_dgram(r0, &(0x7f00000003c0)={&(0x7f0000000080)={0x24, @none={0x0, 0xffff}}, 0x14, &(0x7f0000000380)={&(0x7f00000002c0)="3b37562ba0b5ecad16c9177c84000279b2d8b4303486bfdb5aa2f1735617bb250efd3fffea", 0x25}, 0x1, 0x0, 0x0, 0x4040080}, 0x40) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x1e, 0xc, &(0x7f0000000440)=@framed={{}, [@ringbuf_output={{0x18, 0x1, 0x1, 0x0, r4}, {0x7, 0x0, 0xb, 0x8, 0x0, 0x0, 0x8}, {}, {}, {}, {}, {0x7, 0x0, 0xb, 0x4, 0x0, 0x0, 0x2}, {0x85, 0x0, 0x0, 0x3}}]}, 0x0, 0x0, 0x0, 0x0, 0x41100, 0x0, '\x00', 0x0, @fallback=0x16, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffd}, 0x94) r5 = bpf$PROG_LOAD(0x5, &(0x7f00000004c0)={0x16, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x19, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r6 = socket$can_bcm(0x1d, 0x2, 0x2) ioctl$ifreq_SIOCGIFINDEX_vcan(r6, 0x8933, &(0x7f0000000100)={'vcan0\x00', 0x0}) connect$can_bcm(r6, &(0x7f00000000c0)={0x1d, r7}, 0x10) sendmsg$can_bcm(r6, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000580)=ANY=[@ANYBLOB="0100000003ece1e40ad8871461ab0800", @ANYRES64=0x0, @ANYRES64=0x0, @ANYRES64=0x0, @ANYRES64=0x0, @ANYBLOB="3bf81bb9f9"], 0x20000600}, 0x1, 0x0, 0x0, 0x40090}, 0x4c081) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000300)={r5, 0x2000000, 0xe, 0x0, &(0x7f0000000600)="c9f7b98600"/14, 0x0, 0x7ffd, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x50) 2.539098912s ago: executing program 0 (id=2427): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000240)=ANY=[@ANYBLOB="140000001000010000000000000000000500000a28000000000a030000000000000000000a00000708000240000000020900010073797a31000000002c000000030a010100000000000000000a0000070900010073797a31000000000900030073797a320000000014000000110001"], 0x7c}, 0x1, 0x0, 0x0, 0x4000}, 0x0) r1 = socket$xdp(0x2c, 0x3, 0x0) setsockopt$XDP_UMEM_REG(r1, 0x11b, 0x4, &(0x7f00000000c0)={0x0, 0x328000, 0x1000, 0x8af270d}, 0x20) (async) sendmsg$NFT_BATCH(r0, &(0x7f0000009b40)={0x0, 0x0, &(0x7f0000009b00)={&(0x7f0000000100)=ANY=[@ANYBLOB="140000001000010000000000000000000500000a58000000060a010400000000000000000a0000010900010073797a31000000002c00048028000180080001006e6174001c00028008000140000000010800034014000010080002400000000a0900020073797a32"], 0x80}, 0x1, 0x0, 0x0, 0x4008091}, 0x24000000) (async) socket$nl_netfilter(0x10, 0x3, 0xc) 2.507733961s ago: executing program 0 (id=2428): mmap(&(0x7f0000001000/0xc00000)=nil, 0xc00000, 0x0, 0x3032, 0xffffffffffffffff, 0x0) bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000100)={&(0x7f00000009c0)=ANY=[@ANYBLOB="9feb01001800000000000000240000002400000002000000000000000000000d0a0000000000000001000005d8"], &(0x7f0000000f40)=""/4089, 0x3e, 0xff9, 0xa, 0xfffffffa}, 0x28) r0 = bpf$TOKEN_CREATE(0x24, &(0x7f0000000040), 0x8) socket$inet_udp(0x2, 0x2, 0x0) (async) r1 = socket$inet_udp(0x2, 0x2, 0x0) getsockopt$EBT_SO_GET_ENTRIES(r1, 0x0, 0x81, &(0x7f0000000440)={'nat\x00', 0x0, 0x4, 0xcb, [0x100000001, 0x1, 0xdc, 0xa, 0x4, 0x4], 0x1, &(0x7f0000000080)=[{}], &(0x7f0000000340)=""/203}, &(0x7f00000004c0)=0x78) (async) getsockopt$EBT_SO_GET_ENTRIES(r1, 0x0, 0x81, &(0x7f0000000440)={'nat\x00', 0x0, 0x4, 0xcb, [0x100000001, 0x1, 0xdc, 0xa, 0x4, 0x4], 0x1, &(0x7f0000000080)=[{}], &(0x7f0000000340)=""/203}, &(0x7f00000004c0)=0x78) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f00000002c0)={0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1000003f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x20}, 0x15) ioctl$XFS_IOC_PATH_TO_FSHANDLE(r1, 0xc0385868, &(0x7f0000000280)={r0, &(0x7f00000000c0)='\xdb\xe2\x00', 0x408800, &(0x7f0000000100)={@align=0x5, {0xc, 0x5, 0x5}}, 0x2, &(0x7f0000000200), &(0x7f0000000240)=0x5}) socket$nl_route(0x10, 0x3, 0x0) (async) r3 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCETHTOOL(r3, 0x8946, &(0x7f0000000000)={'veth1_to_hsr\x00', &(0x7f0000002fc0)=@ethtool_coalesce={0xf}}) syz_init_net_socket$bt_l2cap(0x1f, 0x1, 0x0) (async) r4 = syz_init_net_socket$bt_l2cap(0x1f, 0x1, 0x0) r5 = bpf$MAP_CREATE(0x0, &(0x7f0000000640)=@base={0x12, 0x7, 0x4, 0x2, 0x0, 0x1, 0xfffffffe}, 0x50) socket$key(0xf, 0x3, 0x2) socketpair(0x1, 0x2, 0x0, &(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) bpf$MAP_UPDATE_ELEM(0x2, &(0x7f0000000180)={r5, &(0x7f0000000640), &(0x7f0000000580)=@tcp=r7}, 0x20) bpf$MAP_UPDATE_ELEM(0x2, &(0x7f0000000440)={r5, &(0x7f00000003c0), &(0x7f0000000300)=@tcp=r6, 0x1}, 0x20) getsockopt$bt_BT_DEFER_SETUP(r4, 0x112, 0x7, 0x0, &(0x7f0000000080)) getsockopt$TIPC_IMPORTANCE(r2, 0x10f, 0x7f, &(0x7f0000000000), &(0x7f0000000140)=0x4) (async) getsockopt$TIPC_IMPORTANCE(r2, 0x10f, 0x7f, &(0x7f0000000000), &(0x7f0000000140)=0x4) r8 = syz_genetlink_get_family_id$fou(&(0x7f0000000540), 0xffffffffffffffff) sendmsg$FOU_CMD_GET(r2, &(0x7f0000000600)={&(0x7f0000000500)={0x10, 0x0, 0x0, 0x4000000}, 0xc, &(0x7f00000005c0)={&(0x7f0000000580)={0x34, r8, 0x300, 0x70bd29, 0x25dfdbfb, {}, [@FOU_ATTR_REMCSUM_NOPARTIAL={0x4}, @FOU_ATTR_LOCAL_V6={0x14, 0x7, @private1}, @FOU_ATTR_PORT={0x6, 0x1, 0x4e24}]}, 0x34}, 0x1, 0x0, 0x0, 0x4000000}, 0x0) (async) sendmsg$FOU_CMD_GET(r2, &(0x7f0000000600)={&(0x7f0000000500)={0x10, 0x0, 0x0, 0x4000000}, 0xc, &(0x7f00000005c0)={&(0x7f0000000580)={0x34, r8, 0x300, 0x70bd29, 0x25dfdbfb, {}, [@FOU_ATTR_REMCSUM_NOPARTIAL={0x4}, @FOU_ATTR_LOCAL_V6={0x14, 0x7, @private1}, @FOU_ATTR_PORT={0x6, 0x1, 0x4e24}]}, 0x34}, 0x1, 0x0, 0x0, 0x4000000}, 0x0) 2.455202951s ago: executing program 5 (id=2429): r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$batadv(0x0, r1) r2 = syz_genetlink_get_family_id$tipc2(&(0x7f0000000340), 0xffffffffffffffff) sendmsg$TIPC_NL_LINK_GET(r1, &(0x7f0000000400)={0x0, 0x0, &(0x7f00000003c0)={&(0x7f0000000700)=ANY=[@ANYBLOB=',\x00\x00\x00', @ANYRES16=r2, @ANYBLOB="0100000000000000a7"], 0x2c}}, 0x0) sendmsg$TIPC_NL_NODE_GET(r0, &(0x7f0000000440)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x100}, 0xc, &(0x7f0000000400)={&(0x7f0000000740)=ANY=[@ANYBLOB="009cf9f651a09b02003355613d43f95118aed30c156e14689ec2b43dac01000000b47f8530cd447b390230c86f11213963652c07cac82f79860cce9f6071ee6deae358c2ba4f5a908877a581bcc3c23aed4f31360246972841319199b871ddc4f692726d3a8687939116af7ec6c6b329593f4ce97c9fc91a7402bea742f4a32bce00c6ef0309c30008bce048", @ANYRES16=r2, @ANYBLOB="000628bd7000fddbdf250d000000500101801c0002800800010009000000080004000100000008000400020000002c000280080001001d00000008000300080000000800020001800000080003000400000008000200020000001200010069623a766972745f776966693000000038000400200001000a004e2400000000ff010000000000000000000000000001040000001400020002004e22ac1414aa000000000000000038000400200001000a004e210000000100000000000000000000000000000001270000001400020002004e2200000000000000000000000044000400200001000a004e2200000006fe8000000000000000000000000000bb06000000200002000a004e2100000001000000000000000000000000000000000000000008000300010000803400028008000200d50000000800010014000000080001001b000000080003000000000008000200080000000800030000020000240004801300010062726f6164636173742d6c696e6b00000900010073797a3000000000b0000680040002004500040067636d28616573290000000000000000000000000000000000000000000000001d00000062dcab9303b6cd1430bae3373b0aeb1d703c03476fe561a778f4a663580000004900040067636d2861657329000000000000000000000000000000000000000000000000210000000ffa9f047ac338a4e02ada6b863b0386aaa3bd6c94fe921b3d0fd94d2a2ba048950000000400050008000100020000000800010006000000"], 0x238}}, 0x8010) r3 = syz_genetlink_get_family_id$l2tp(&(0x7f0000000040), 0xffffffffffffffff) sendmsg$L2TP_CMD_SESSION_DELETE(r0, &(0x7f0000000140)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000180)={0x14, r3, 0x1, 0x70bd28, 0x40, {0x5}}, 0x14}, 0x1, 0x0, 0x0, 0x4800}, 0x4) 2.382674556s ago: executing program 3 (id=2430): r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = socket$nl_route(0x10, 0x3, 0x0) r2 = socket$netlink(0x10, 0x3, 0x0) r3 = socket(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r3, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000100)={0x0, 0x14}}, 0x0) getsockname$packet(r3, &(0x7f00000002c0)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000080)=0x7) sendmsg$nl_route(r2, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000008c0)=ANY=[@ANYBLOB="480000001000050700000086d7c0d6c878f064eb", @ANYRES32=r4, @ANYBLOB="0000000000000000280012000c00010076657468"], 0x48}}, 0x0) sendmsg$nl_route_sched(r2, &(0x7f00000001c0)={0x0, 0x0, &(0x7f00000004c0)={&(0x7f0000000900)=@newqdisc={0x30, 0x24, 0xf1d, 0x0, 0x0, {0x0, 0x0, 0x0, r4, {0x0, 0x8}, {0xfff1, 0xffff}, {0x6}}, [@qdisc_kind_options=@q_clsact={0xb}]}, 0x30}}, 0x4000800) sendmsg$nl_route_sched(r1, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000980)=@delchain={0x34, 0x64, 0xf31, 0xfffffffb, 0x0, {0x0, 0x0, 0x0, r4, {0x0, 0x9}, {0xfff3, 0xffff}, {0x0, 0x1b}}, [@filter_kind_options=@f_flower={{0x9}, {0x4}}]}, 0x34}, 0x1, 0x0, 0x0, 0x10}, 0x0) r5 = socket$inet_sctp(0x2, 0x1, 0x84) getsockopt$inet_sctp_SCTP_GET_ASSOC_ID_LIST(r5, 0x84, 0x1d, &(0x7f0000000440)={0xa, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0]}, 0x0) setsockopt$inet_sctp_SCTP_RECONFIG_SUPPORTED(r5, 0x84, 0x75, &(0x7f0000000400)={r6, 0x4}, 0x8) setsockopt$inet_sctp6_SCTP_MAXSEG(r3, 0x84, 0xd, &(0x7f00000000c0)=@assoc_value={r6, 0x1}, 0x8) sendmsg$nl_route_sched(r0, &(0x7f0000000280)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000000)=@delchain={0x24, 0x11, 0x1, 0x1f, 0x0, {0x0, 0x0, 0x0, r4, {0xf}}}, 0x24}, 0x1, 0x0, 0x0, 0x4008000}, 0x0) 2.241820866s ago: executing program 5 (id=2433): bpf$PROG_LOAD(0x5, &(0x7f0000000080)={0x10, 0x4, &(0x7f0000000700)=@framed={{}, [@call={0x85, 0x0, 0x0, 0x3f}]}, &(0x7f0000000000)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @sk_msg=0x7, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffff9}, 0x94) 2.224112641s ago: executing program 0 (id=2434): r0 = socket(0x2a, 0x2, 0x0) getsockname$packet(r0, &(0x7f0000000200)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000001480)=0x14) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000380)=@newqdisc={0x38, 0x24, 0xf0b, 0x0, 0x0, {0x0, 0x0, 0x0, r1, {}, {0xffff, 0xffff}, {0x0, 0xfff1}}, [@qdisc_kind_options=@q_fq_codel={{0xd}, {0x4}}]}, 0x38}}, 0x0) (async) sendmsg$IPCTNL_MSG_CT_NEW(0xffffffffffffffff, &(0x7f0000000300)={0x0, 0x0, &(0x7f00000000c0)={0x0}}, 0x0) (async) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000340)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000000)=@newtfilter={0x44, 0x2c, 0xd27, 0x70bd2d, 0x0, {0x0, 0x0, 0x0, r1, {}, {}, {0x8, 0xffe0}}, [@filter_kind_options=@f_bpf={{0x8}, {0x18, 0x2, [@TCA_BPF_OPS={{0x6, 0x4, 0x1}, {0xc, 0x5, [{0x9, 0x0, 0x61, 0x9}]}}]}}]}, 0x44}}, 0x2004c850) (async) r2 = socket$netlink(0x10, 0x3, 0x0) sendmmsg(r2, &(0x7f00000002c0), 0x40000000000009f, 0x0) syz_emit_ethernet(0x206, &(0x7f0000000740)={@broadcast, @local, @void, {@ipv6={0x86dd, @icmpv6={0x0, 0x6, "f4e300", 0x1d0, 0x3a, 0x1, @remote, @mcast2, {[], @param_prob={0x4, 0x0, 0x0, 0x6, {0xc, 0x6, '\x00', 0xffff, 0x3c, 0x1, @dev={0xfe, 0x80, '\x00', 0x35}, @local, [@dstopts={0x2f, 0x2f, '\x00', [@enc_lim={0x4, 0x1, 0x7}, @generic={0x93, 0x88, "89ec4afa478ad0b7a478d3c5765617eb94e241c0be93a364306368766ac4e63b19f6380ab7f59cde1c2de5ce7aa84d3e1275283471524f3d4c4edd969018f1941d7bfd22d5a1f6a4a5305bb80a679194e827f42241975f256148d83959be4365c465faa536918152325c5ae2fda82da79353824e5f1ade833bffe11de7c888acaf2f19607c1f218f"}, @pad1, @generic={0x45, 0xe8, "a169413d435a2602faa489b9889d98272195c6bfec4de059f78268fc492fee2e4599c3e5ea186af99ab9405986d4b89e9bd3e3f52f2b1d316669dfbeade9eb5813e4831f05e7fa8f2bebb8187dd242addb6ecc0ce6cc250c6a848ceea3f4768fb309904d9b3f80b6f6de3c7b9e9a2361da63a8fdfa5d0a9a95fc24ca534828f9b7cde097a977d6c8ab7adb29cd7d229b56f1515734c650be8e6bb668d02f8b02a039961c238848966187284ace121e0c8232a442a71bb3f52eb3c8fd2e2e6b87710e1b8eefe804b3662b840e75a36e622d731cc025411092a08453313426e56cc8339c3d57498856"}]}], "5f4665d563ff4bc8af67874d13d79427157504b9d157a1d9"}}}}}}}, 0x0) 2.071076991s ago: executing program 5 (id=2437): r0 = syz_genetlink_get_family_id$wireguard(&(0x7f00000001c0), 0xffffffffffffffff) sendmsg$WG_CMD_SET_DEVICE(0xffffffffffffffff, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000001d80)=ANY=[@ANYBLOB="4c060000", @ANYRES16=r0, @ANYBLOB="01002dbd7000fedbdf250100000014000200776732000000000000000000000000002400030000000000000000000000000000000000000000000000000000000000000000000006088030000080080003000700000024000100dbffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffff48000080200004000a004e220000000120010000000000000000000000000001fa14000024000100f44da367a88ee6564f020211456727082f5cebee8b1bf5eb7337341b459b39222c01008024000100975c9d81c983c8209ee781254b899f8ed925ae9f0923c23c62f53c57cdbf691c1400040002004e22ac1414aa00000000000000000800030004000000200004000a004e2300000005fe88000000000000000000000000010100100000060005000121000098000980940000800600010002000000080002007f0000010500030000000000060001000a00000014000200200100000000000000000000000000000500030002000000060001000a00000014000200ff0100000000000000000000000000010500030000000000060001000200000008000200e000000205000300030000000600010002000000080002007f0000010500030003000000200004000a004e220000000dff020000000000000000000000000001020000000800030002000000c4000080240002007dc2e1ed365e02e2513ddefadb5de99be4d95fbf6f0b98b29ab06005070592c8200004000a004e2300010001ff0200000000000000000000000000010000000024000200a38ae58757ed082bbaf191266cd5eb3c1344d5c85f7027ed57243ad50f65917924000100000000000000000000000000000000000000000000000000000000000000000024000200d480776c593a9340566d58a953561005070bd09967d97ee699d5643ffb8edcd2080009800400008008000a"], 0x64c}, 0x1, 0x0, 0x0, 0xc004}, 0x40001) r1 = socket$nl_generic(0x10, 0x3, 0x10) writev(r1, &(0x7f0000000200), 0x20) r2 = socket$inet(0x2, 0x1, 0x0) setsockopt$IPT_SO_SET_REPLACE(r2, 0x0, 0x40, &(0x7f0000000000)=@raw={'raw\x00', 0x8, 0x3, 0x290, 0x0, 0xb, 0xd0e0011, 0x120, 0xc6, 0x1f8, 0x1d8, 0x190, 0x1f8, 0x1d8, 0x3, 0x0, {[{{@ip={@rand_addr, @broadcast, 0x0, 0x0, 'nr0\x00', '\x00', {}, {}, 0x1}, 0x0, 0xd8, 0x120, 0x7000000, {}, [@common=@icmp={{0x28}, {0xd, "0010"}}, @common=@unspec=@connlimit={{0x40}}]}, @unspec=@CT0={0x48, 'CT\x00', 0x0, {0x0, 0x0, 0x33f}}}, {{@ip={@remote, @multicast1, 0x0, 0x0, 'bridge_slave_1\x00', 'virt_wifi0\x00'}, 0x0, 0x70, 0xd8}, @unspec=@CT2={0x68, 'CT\x00', 0x2, {0x9, 0x0, 0x0, 0x20000, 'syz1\x00', 'syz1\x00'}}}], {{'\x00', 0x0, 0x70, 0x98}, {0x28}}}}, 0x2f0) openat$nci(0xffffffffffffff9c, &(0x7f0000000240), 0x2, 0x0) r3 = socket$inet_udp(0x2, 0x2, 0x0) setsockopt$IPT_SO_SET_REPLACE(r3, 0x4000000000000, 0x40, &(0x7f0000000440)=@raw={'raw\x00', 0x4001, 0x3, 0x228, 0x0, 0xb, 0x148, 0x0, 0x148, 0x208, 0x240, 0x240, 0x208, 0x215, 0x3, 0x0, {[{{@ip={@local, @multicast1, 0x0, 0xffffff00, 'ip6erspan0\x00', 'nr0\x00', {}, {0xff}, 0x21, 0x0, 0x10}, 0x2e8, 0x70, 0xb8, 0x0, {0xff0f000000000000}}, @unspec=@CT0={0x48, 'CT\x00', 0x0, {0x0, 0x7, 0xab, 0x6, 'syz1\x00', {0x4}}}}, {{@ip={@broadcast, @remote, 0x0, 0x0, 'team0\x00', 'netpci0\x00', {}, {}, 0x0, 0x1}, 0xec010000, 0x70, 0xd8}, @unspec=@CT1={0x68, 'CT\x00', 0x1, {0x4, 0x5, 0x22000000, 0xfffffffa, '\x00', 'syz1\x00', {0x3}}}}], {{'\x00', 0x0, 0x70, 0x98}, {0x28}}}}, 0x288) syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r4 = socket(0x10, 0x3, 0x0) sendmsg$nl_generic(r4, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000000)={0x1c, 0x52, 0x1, 0x70bd2a, 0x0, {0x2}, [@nested={0x8, 0x1, 0x0, 0x1, [@generic="feffffff"]}]}, 0x1c}, 0x1, 0x0, 0x0, 0x40091}, 0x0) socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_ipv4_tunnel_SIOCGETTUNNEL(r3, 0x89f0, &(0x7f0000000380)={'sit0\x00', &(0x7f0000000300)={'ip_vti0\x00', 0x0, 0x7800, 0x40, 0x5, 0x0, {{0xe, 0x4, 0x1, 0x2c, 0x38, 0x68, 0x0, 0x5b, 0x4, 0x0, @broadcast, @rand_addr=0x64010101, {[@timestamp_prespec={0x44, 0x24, 0x38, 0x3, 0xa, [{@multicast2, 0x2000000}, {@multicast2, 0x800}, {@empty, 0x2}, {@remote, 0x9}]}]}}}}}) bind$can_j1939(r2, &(0x7f00000003c0)={0x1d, r5, 0x0, {0x1, 0xff}, 0xfe}, 0x18) r6 = socket$alg(0x26, 0x5, 0x0) bind$alg(r6, &(0x7f0000000700)={0x26, 'hash\x00', 0x0, 0x0, 'hmac(sha1)\x00'}, 0x58) syz_genetlink_get_family_id$devlink(0x0, 0xffffffffffffffff) sendmsg$L2TP_CMD_SESSION_GET(0xffffffffffffffff, 0x0, 0x48050) socket$inet6_mptcp(0xa, 0x1, 0x106) syz_init_net_socket$bt_l2cap(0x1f, 0x1, 0x0) socket$alg(0x26, 0x5, 0x0) sendmsg$inet(0xffffffffffffffff, 0x0, 0x24004004) r7 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) ioctl$HCIINQUIRY(r7, 0x400448ca, 0x0) bind$bt_hci(r7, &(0x7f0000000040)={0x1f, 0x0, 0x1}, 0x6) write$bt_hci(r7, &(0x7f0000000440)=ANY=[], 0xa) 1.998254523s ago: executing program 0 (id=2438): r0 = socket$nl_generic(0x10, 0x3, 0x10) (async) r1 = syz_genetlink_get_family_id$tipc(&(0x7f0000000040), 0xffffffffffffffff) sendmsg$TIPC_CMD_SHOW_LINK_STATS(r0, &(0x7f0000000100)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000080)=ANY=[@ANYBLOB='(\x00\x00\x00', @ANYRES16=r1, @ANYBLOB="0180000000000000000001000000000000000b00000000030014"], 0x28}}, 0x40000) (async) r2 = bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000340)=ANY=[@ANYBLOB="02000000040000000800000001"], 0x48) (async) r3 = socket$nl_route(0x10, 0x3, 0x0) (async) socketpair$unix(0x1, 0x2, 0x0, &(0x7f000001a000)={0xffffffffffffffff, 0xffffffffffffffff}) setsockopt$SO_ATTACH_FILTER(r4, 0x1, 0x33, &(0x7f000002eff0)={0x3, &(0x7f0000000040)=[{}, {0x7f, 0xf, 0xb, 0x3}, {0xa121, 0x3, 0x81, 0x1}]}, 0x10) (async) ioctl$sock_SIOCGIFINDEX(r3, 0x8933, &(0x7f0000000100)={'dummy0\x00', 0x0}) sendmsg$nl_route_sched(r3, &(0x7f00000012c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000140)=@newqdisc={0x44, 0x24, 0x4ee4e6a52ff56541, 0x70bd2a, 0xffffffff, {0x0, 0x0, 0x0, r5, {0x0, 0xfff1}, {0xffff, 0xffff}}, [@qdisc_kind_options=@q_hfsc={{0x9}, {0x14, 0x2, @TCA_HFSC_FSC={0x10, 0x2, {0xd, 0xfffffffb, 0x7fffbfff}}}}]}, 0x44}, 0x1, 0x0, 0x0, 0x4000000}, 0x0) r6 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r6, &(0x7f0000000480)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f00000008c0)=ANY=[@ANYBLOB="480000001300310327bd7000fbdbdf2500000000", @ANYRES32=0x0, @ANYBLOB="04460200016004001400030064756d6d79300000000000000000000005002700260000000c001a"], 0x48}, 0x1, 0x0, 0x0, 0x20008810}, 0x20000850) r7 = socket$nl_generic(0x10, 0x3, 0x10) r8 = syz_genetlink_get_family_id$tipc2(&(0x7f0000000400), 0xffffffffffffffff) sendmsg$TIPC_NL_KEY_SET(r7, &(0x7f0000000100)={0x0, 0x2800, &(0x7f0000000080)={&(0x7f0000000700)=ANY=[@ANYBLOB="5400009701000000bbef07000000814300", @ANYRES16=r8, @ANYBLOB="0100000000000000000003000000400001802c0004001400010002000000ac14140f00000000000000001400020002000000ffffffff00000000000000000d0001007564703a73797a3200000000"], 0x54}}, 0x0) sendmsg$TIPC_NL_BEARER_SET(r7, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000140)={0x3c, r8, 0x1, 0x70bd26, 0x25dfdbfb, {}, [@TIPC_NLA_BEARER={0x28, 0x1, 0x0, 0x1, [@TIPC_NLA_BEARER_NAME={0xd, 0x1, @udp='udp:syz2\x00'}, @TIPC_NLA_BEARER_PROP={0x14, 0x2, 0x0, 0x1, [@TIPC_NLA_PROP_TOL={0x8, 0x2, 0x5}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x19}]}]}]}, 0x3c}, 0x1, 0x0, 0x0, 0x48c05}, 0x4040194) (async) r9 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_ifreq(r9, 0x8993, &(0x7f0000000300)={'bond0\x00', @ifru_settings={0x200, 0xe7a, @fr_pvc=0x0}}) (async) r10 = socket(0x10, 0x3, 0x0) sendmsg$nl_route(r10, &(0x7f0000000400)={0x0, 0x0, &(0x7f00000003c0)={&(0x7f0000000140)=ANY=[@ANYBLOB="d800000025"], 0xd8}, 0x1, 0x0, 0x0, 0x4004041}, 0x20004440) (async) r11 = socket$pppl2tp(0x18, 0x1, 0x1) r12 = socket$inet6_udp(0xa, 0x2, 0x0) connect$pppl2tp(r11, &(0x7f0000000040)=@pppol2tpv3={0x18, 0x1, {0x3, r12, {0x2, 0x0, @multicast2}, 0x2}}, 0x2e) ioctl$SIOCSIFMTU(r11, 0x8922, &(0x7f0000000300)={'team_slave_0\x00', 0x6}) r13 = socket$inet_smc(0x2b, 0x1, 0x0) ioctl$XFS_IOC_ATTRLIST_BY_HANDLE(r13, 0x4058587a, &(0x7f0000000180)={{r2, &(0x7f0000000000)='wlan0\x00', 0x404000, &(0x7f0000000080)={@align=0x2, {0x0, 0x0, 0x6, 0x5}}, 0x7ff, &(0x7f00000000c0), &(0x7f0000000100)=0xa06}, {[0x80000001, 0xfffffff8, 0xdce, 0x9]}, 0x0, 0x30, &(0x7f0000000140)=""/48}) setsockopt$IPT_SO_SET_REPLACE(r14, 0x0, 0x40, &(0x7f0000000900)=@mangle={'mangle\x00', 0x44, 0x6, 0x420, 0x2e8, 0xe8, 0x2e8, 0x180, 0x0, 0x388, 0x388, 0x388, 0x388, 0x388, 0x8000000, 0x0, {[{{@uncond, 0x0, 0xc0, 0xe8, 0x0, {}, [@inet=@rpfilter={{0x28}, {0x3}}, @inet=@rpfilter={{0x28}, {0x1}}]}, @ECN={0x28, 'ECN\x00', 0x0, {0x30, 0xff, 0x2}}}, {{@ip={@local, @multicast2, 0x0, 0xffffff00, 'vcan0\x00', 'veth0_virt_wifi\x00', {0xff}, {0xff}, 0x11}, 0x0, 0x70, 0x98}, @unspec=@CHECKSUM={0x28}}, {{@ip={@empty, @empty, 0x5607d1016e8ee1dd, 0xffffff00, 'wlan0\x00', 'syz_tun\x00', {}, {}, 0xff, 0x1, 0x1a}, 0x0, 0x70, 0xd0}, @common=@SET={0x60, 'SET\x00', 0x0, {{0x3, [0x2, 0x6, 0x7, 0x6, 0x2, 0x1], 0x6, 0x5}, {0x1, [0x3, 0x4, 0x3, 0x4, 0x7], 0x4, 0x6}}}}, {{@uncond, 0x0, 0x70, 0x98}, @unspec=@CHECKSUM={0x28}}, {{@uncond, 0x0, 0x70, 0xa0}, @TPROXY={0x30, 'TPROXY\x00', 0x0, {0x3, 0x400, @remote, 0x4e24}}}], {{'\x00', 0x0, 0x70, 0x98}, {0x28}}}}, 0xffffffffffffffd6) (async) bpf$BPF_PROG_WITH_BTFID_LOAD(0x5, &(0x7f0000000200)=@bpf_lsm={0x6, 0x6, &(0x7f0000000040)=ANY=[@ANYBLOB="1800000000000010000000000000060018200000", @ANYRES32=r2, @ANYBLOB="0000000007000000c30009400000000095"], &(0x7f00000002c0)='syzkaller\x00', 0xc, 0xe1, &(0x7f00000004c0)=""/225}, 0x94) (async) r15 = syz_genetlink_get_family_id$wireguard(&(0x7f0000000440), r10) ioctl$ifreq_SIOCGIFINDEX_wireguard(r3, 0x8933, &(0x7f00000005c0)={'wg2\x00', 0x0}) sendmsg$WG_CMD_GET_DEVICE(r7, &(0x7f00000006c0)={&(0x7f0000000380)={0x10, 0x0, 0x0, 0x4000000}, 0xc, &(0x7f0000000680)={&(0x7f0000000600)={0x70, r15, 0x400, 0x70bd29, 0x25dfdbfd, {}, [@WGDEVICE_A_PRIVATE_KEY={0x24, 0x3, @b}, @WGDEVICE_A_FLAGS={0x8}, @WGDEVICE_A_FWMARK={0x8, 0x7, 0x6}, @WGDEVICE_A_LISTEN_PORT={0x6, 0x6, 0x4e21}, @WGDEVICE_A_LISTEN_PORT={0x6, 0x6, 0x4e24}, @WGDEVICE_A_LISTEN_PORT={0x6, 0x6, 0x4e21}, @WGDEVICE_A_IFINDEX={0x8, 0x1, r16}, @WGDEVICE_A_LISTEN_PORT={0x6, 0x6, 0x4e24}]}, 0x70}, 0x1, 0x0, 0x0, 0x80}, 0x0) 1.85635428s ago: executing program 3 (id=2440): socket$nl_netfilter(0x10, 0x3, 0xc) r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_CREATE(r0, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000440)={&(0x7f0000000040)={0x50, 0x2, 0x6, 0x801, 0xe4340000, 0x0, {0x0, 0x0, 0x8}, [@IPSET_ATTR_REVISION={0x5}, @IPSET_ATTR_SETNAME={0x9, 0x2, 'syz1\x00'}, @IPSET_ATTR_FAMILY={0x5, 0x5, 0x2}, @IPSET_ATTR_TYPENAME={0x16, 0x3, 'hash:net,port,net\x00'}, @IPSET_ATTR_PROTOCOL={0x5}]}, 0x50}, 0x1, 0x0, 0x0, 0x20044000}, 0xc042) (async) sendmsg$IPSET_CMD_CREATE(r0, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000440)={&(0x7f0000000040)={0x50, 0x2, 0x6, 0x801, 0xe4340000, 0x0, {0x0, 0x0, 0x8}, [@IPSET_ATTR_REVISION={0x5}, @IPSET_ATTR_SETNAME={0x9, 0x2, 'syz1\x00'}, @IPSET_ATTR_FAMILY={0x5, 0x5, 0x2}, @IPSET_ATTR_TYPENAME={0x16, 0x3, 'hash:net,port,net\x00'}, @IPSET_ATTR_PROTOCOL={0x5}]}, 0x50}, 0x1, 0x0, 0x0, 0x20044000}, 0xc042) socket$nl_netfilter(0x10, 0x3, 0xc) (async) r1 = socket$nl_netfilter(0x10, 0x3, 0xc) r2 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r2, 0x8933, 0x0) sendmsg$nl_route(r2, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000180)=@newlink={0x3c, 0x10, 0x401, 0xfffffffc, 0x25dfdbff, {0x0, 0x0, 0x0, 0x0, 0x31943}, [@IFLA_LINKINFO={0x14, 0x12, 0x0, 0x1, @macsec={{0xb}, {0x4}}}, @IFLA_LINK={0x8}]}, 0x3c}, 0x1, 0x0, 0x0, 0x2004d808}, 0x0) sendmsg$IPSET_CMD_ADD(r1, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000300)={0x60, 0x9, 0x6, 0x3, 0x0, 0x0, {0x5}, [@IPSET_ATTR_SETNAME={0x9, 0x2, 'syz1\x00'}, @IPSET_ATTR_PROTOCOL={0x5}, @IPSET_ATTR_DATA={0x38, 0x7, 0x0, 0x1, [@IPSET_ATTR_PORT={0x6, 0x4, 0x1, 0x0, 0x4e21}, @IPSET_ATTR_PROTO={0x5, 0x7, 0xff}, @IPSET_ATTR_IP={0xc, 0x1, 0x0, 0x1, @IPSET_ATTR_IPADDR_IPV4={0x8, 0x1, 0x1, 0x0, @private=0xa010101}}, @IPSET_ATTR_IP_TO={0xc, 0x2, 0x0, 0x1, @IPSET_ATTR_IPADDR_IPV4={0x8, 0x1, 0x1, 0x0, @multicast2}}, @IPSET_ATTR_IP2={0xc, 0x14, 0x0, 0x1, @IPSET_ATTR_IPADDR_IPV4={0x8, 0x1, 0x1, 0x0, @broadcast}}]}]}, 0x60}, 0x1, 0x0, 0x0, 0x10004893}, 0x80) socket(0x2, 0x80805, 0x0) (async) r3 = socket(0x2, 0x80805, 0x0) r4 = socket$inet6_sctp(0xa, 0x5, 0x84) shutdown(r4, 0x0) (async) shutdown(r4, 0x0) getsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX3(r4, 0x84, 0x6f, &(0x7f0000000200)={0x0, 0x10, &(0x7f00000001c0)=[@in={0x2, 0x4e23, @rand_addr=0x64010101}]}, &(0x7f0000000140)=0x10) getsockopt$inet_sctp6_SCTP_PRIMARY_ADDR(r4, 0x84, 0x7a, &(0x7f0000000340)={r5, @in6={{0xa, 0x3, 0x4, @mcast1}}}, &(0x7f0000000040)=0x84) getsockopt$inet_sctp_SCTP_DELAYED_SACK(r3, 0x84, 0x10, &(0x7f0000000080)=@assoc_value={r6, 0x8}, &(0x7f00000000c0)=0x8) socketpair$unix(0x1, 0x3, 0x0, 0x0) sendmmsg$unix(0xffffffffffffffff, 0x0, 0x0, 0x0) (async) sendmmsg$unix(0xffffffffffffffff, 0x0, 0x0, 0x0) ppoll(&(0x7f0000000000)=[{0xffffffffffffffff, 0x8463}], 0x1, 0x0, 0x0, 0x0) close(0xffffffffffffffff) (async) close(0xffffffffffffffff) sendmsg$IPSET_CMD_HEADER(r1, 0x0, 0x880) 1.834681727s ago: executing program 0 (id=2442): sendmsg$NL80211_CMD_RELOAD_REGDB(0xffffffffffffffff, &(0x7f0000000100)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000080)={0x14, 0x0, 0x100, 0x70bd2d, 0x25dfdbfc}, 0x14}, 0x1, 0x0, 0x0, 0x20008001}, 0x64058010) socket$inet6_icmp_raw(0xa, 0x3, 0x3a) (async) r0 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8b1a, &(0x7f0000000100)={'wlan0\x00'}) unshare(0x6a040000) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x3, 0x8031, 0xffffffffffffffff, 0x0) (async) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x3, 0x8031, 0xffffffffffffffff, 0x0) socket$inet6(0xa, 0x1, 0x8010000000000084) socket$nl_netfilter(0x10, 0x3, 0xc) (async) r1 = socket$nl_netfilter(0x10, 0x3, 0xc) r2 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r2, &(0x7f00000029c0)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000000)={0x24, 0x10, 0x701, 0x0, 0x0, {0xa}, [@typed={0x6, 0x1, 0x0, 0x0, @str='5\x00'}, @typed={0x8, 0xa, 0x0, 0x0, @fd=r2}]}, 0x24}}, 0x0) unshare(0x40000000) sendmsg$NFT_BATCH(r1, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000100)={{0x14}, [@NFT_MSG_NEWTABLE={0x20, 0x0, 0xa, 0x3, 0x0, 0x0, {0x7}, [@NFTA_TABLE_NAME={0x9, 0x1, 'syz0\x00'}]}, @NFT_MSG_NEWSET={0x58, 0x9, 0xa, 0x401, 0x0, 0x0, {0x7}, [@NFTA_SET_ID={0x8, 0xa, 0x1, 0x0, 0xffffffff}, @NFTA_SET_NAME={0x9, 0x2, 'syz1\x00'}, @NFTA_SET_TABLE={0x9, 0x1, 'syz0\x00'}, @NFTA_SET_KEY_LEN={0xfffffffffffffcd5, 0x5, 0x1, 0x0, 0x21}, @NFTA_SET_EXPR={0x10, 0x11, 0x0, 0x1, @tunnel={{0xb}, @void}}, @NFTA_SET_NAME={0x9, 0x2, 'syz1\x00'}]}, @NFT_MSG_NEWSETELEM={0x3c, 0xc, 0xa, 0x101, 0x0, 0x0, {0x7}, [@NFTA_SET_ELEM_LIST_SET={0x9, 0x2, 'syz1\x00'}, @NFTA_SET_ELEM_LIST_TABLE={0x9, 0x1, 'syz0\x00'}, @NFTA_SET_ELEM_LIST_ELEMENTS={0x10, 0x3, 0x0, 0x1, [{0xc, 0x0, 0x0, 0x1, [@NFTA_SET_ELEM_FLAGS={0x8, 0x3, 0x1, 0x0, 0x2}]}]}]}], {0x14, 0x10, 0x1, 0x0, 0x0, {0x0, 0x84}}}, 0xdc}}, 0x0) 1.761173422s ago: executing program 5 (id=2443): r0 = socket$inet6_tcp(0xa, 0x1, 0x0) r1 = socket$l2tp6(0xa, 0x2, 0x73) bind$inet6(r1, &(0x7f0000000100)={0xa, 0x4e22, 0x0, @loopback}, 0x1c) (async) listen(r0, 0x10040) setsockopt$SO_BINDTODEVICE(r0, 0x1, 0x19, &(0x7f0000000040)='syz_tun\x00', 0x10) (async) socket$nl_netfilter(0x10, 0x3, 0xc) socket$nl_xfrm(0x10, 0x3, 0x6) (async) socketpair$unix(0x1, 0x7, 0x0, &(0x7f0000000100)) (async) socket$alg(0x26, 0x5, 0x0) (async) bpf$PROG_LOAD(0x5, &(0x7f0000001b40)={0x1c, 0x20000000000000bb, &(0x7f0000000440)=ANY=[@ANYBLOB="18090000000000000000000000000000850000006d0000001801000020696c2500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000007000000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x22, '\x00', 0x0, @fallback=0x26, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2}, 0x94) (async) bpf$PROG_LOAD(0x5, &(0x7f0000000680)={0x1f, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x12, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) socket(0x1, 0x803, 0x0) (async) syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) (async) socket$inet6_tcp(0xa, 0x1, 0x0) socket$nl_netfilter(0x10, 0x3, 0xc) (async, rerun: 64) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000200)) (async, rerun: 64) socketpair$tipc(0x1e, 0x2, 0x0, &(0x7f0000000600)) mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000)='./cgroup.net/syz1\x00', 0x1ff) r2 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000), 0x200002, 0x0) r3 = openat$cgroup_int(r2, &(0x7f00000001c0)='cgroup.clone_children\x00', 0x2, 0x0) write$cgroup_subtree(r3, &(0x7f00000000c0)=ANY=[@ANYRESOCT, @ANYRESDEC=r3], 0x31) (async) syz_emit_ethernet(0x42, &(0x7f00000002c0)=ANY=[@ANYBLOB="aaaaaaaaaaaaaaaaaaaaaa1b080045000034006900000206907864010101ac1414aa00004e22", @ANYRES32=0x41424344, @ANYRES32=0x41424344, @ANYBLOB="8c0090780000080a00000014ffffff8700000000"], 0x0) (async, rerun: 32) syz_emit_ethernet(0x4e, &(0x7f00000001c0)={@local, @broadcast, @void, {@ipv4={0x800, @tcp={{0x5, 0x4, 0x0, 0x0, 0x40, 0xfffe, 0x0, 0x95, 0x6, 0x0, @rand_addr=0x64010101, @local}, {{0x0, 0x4e22, 0x41424344, 0x41424344, 0x0, 0x6, 0xb, 0x20, 0x8, 0x0, 0x1000, {[@window={0x3, 0x3, 0x2}, @eol, @md5sig={0x13, 0x12, "40196b3d1fd2b88d632e84333ac9c95a"}]}}}}}}}, 0x0) (async, rerun: 32) bpf$PROG_LOAD(0x5, &(0x7f00000054c0)={0xe, 0x16, &(0x7f0000001900)=ANY=[@ANYBLOB="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"], &(0x7f0000000100)='GPL\x00', 0xb, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @sk_skb}, 0x48) 1.704686685s ago: executing program 7 (id=2444): r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0) (async) unshare(0x20000400) (async) r1 = bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f00000007c0)=ANY=[@ANYBLOB="1b0000000000000000000000000004"], 0x50) bpf$BPF_GET_MAP_INFO(0xf, &(0x7f0000000580)={r1, 0x64, 0xfffffffffffffffd}, 0x33) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x7101}) (async) r2 = socket$unix(0x1, 0x1, 0x0) (async, rerun: 64) r3 = socket$kcm(0x10, 0x2, 0x0) (rerun: 64) sendmsg$kcm(r3, &(0x7f0000000000)={0x0, 0x4, &(0x7f0000000080)=[{&(0x7f0000000200)="2e0400001c008102e00f80ecdb4cb9f207c804a00d00000088081afb200002000a0ada1b40d80800c500c50083b8", 0xfec9}], 0x1, 0x0, 0x0, 0x5865}, 0x0) (async) socket$nl_route(0x10, 0x3, 0x0) (async) r4 = socket$nl_generic(0x10, 0x3, 0x10) (async) r5 = syz_genetlink_get_family_id$tipc(&(0x7f00000003c0), 0xffffffffffffffff) sendmsg$TIPC_CMD_SHOW_NAME_TABLE(r4, &(0x7f0000000480)={0x0, 0x0, &(0x7f00000004c0)={&(0x7f0000000180)={0x30, r5, 0x1, 0x70bd27, 0x25dfdbfd, {{}, {0x0, 0x4107}, {0x14, 0x19, {0x5, 0x1000, 0x0, 0x7000000}}}}, 0x30}, 0x1, 0x0, 0x0, 0x4004018}, 0x44040) r6 = openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0) (async) socketpair$nbd(0x1, 0x1, 0x0, &(0x7f0000000240)={0xffffffffffffffff, 0xffffffffffffffff}) sendmsg$IPVS_CMD_GET_DEST(r8, 0x0, 0x800) (async, rerun: 32) ioctl$SIOCSIFHWADDR(r7, 0x8b26, &(0x7f0000000280)={'wlan1\x00', @remote}) (async, rerun: 32) ioctl$TUNSETIFF(r6, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x7101}) (async, rerun: 64) r9 = socket(0x400000000010, 0x3, 0x0) (async, rerun: 64) r10 = socket$unix(0x1, 0x1, 0x0) ioctl$sock_SIOCGIFINDEX(r10, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r9, &(0x7f00000012c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000440)=@newqdisc={0x38, 0x24, 0x4ee4e6a52ff56541, 0x70bd29, 0xffffffff, {0x0, 0x0, 0x0, r11, {}, {0xffff, 0xffff}, {0xd, 0xf}}, [@qdisc_kind_options=@q_hhf={{0x8}, {0xc, 0x2, [@TCA_HHF_BACKLOG_LIMIT={0x8}]}}]}, 0x38}, 0x1, 0x0, 0x0, 0x8801}, 0x20008850) (async) r12 = socket$unix(0x1, 0x1, 0x0) r13 = socket$kcm(0x11, 0x3, 0x0) (async) r14 = openat$tun(0xffffffffffffff9c, &(0x7f0000000400), 0x0, 0x0) close(r14) (async) socket$nl_generic(0x10, 0x3, 0x10) ioctl$SIOCSIFHWADDR(r14, 0x8914, &(0x7f0000002280)={'syzkaller0\x00', @multicast}) (async) ioctl$sock_SIOCGIFINDEX(r12, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$kcm(r13, &(0x7f00000000c0)={&(0x7f0000000380)=@xdp={0x2c, 0x7, r15, 0x3e}, 0x80, &(0x7f0000000080)=[{&(0x7f0000000180)='\'', 0x1}], 0x1}, 0x4) (async) ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f0000000100)={'syzkaller0\x00'}) 1.652600145s ago: executing program 1 (id=2445): r0 = socket$netlink(0x10, 0x3, 0x0) (async) r1 = socket(0x10, 0x803, 0x0) sendmsg$IPVS_CMD_SET_INFO(r1, &(0x7f0000000b00)={0x0, 0x0, &(0x7f0000000ac0)={0x0, 0x14}}, 0x0) (async) getsockname$packet(r1, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) (async) r3 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r3, 0x8933, &(0x7f0000000080)={'bond0\x00', 0x0}) sendmsg$nl_route(r3, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000580)={&(0x7f00000000c0)=@newlink={0x3c, 0x10, 0x403, 0x0, 0x0, {0x0, 0x0, 0x0, 0x0, 0x215, 0x100000}, [@IFLA_LINKINFO={0x14, 0x12, 0x0, 0x1, @ipoib={{0xa}, {0x4}}}, @IFLA_LINK={0x8, 0x5, r4}]}, 0x3c}, 0x1, 0xba01}, 0x0) (async) sendmsg$nl_route(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000380)=ANY=[@ANYBLOB="3c0000001000850600"/20, @ANYRES32=r2, @ANYBLOB="01000000000000001c0012000c000100626f6e64000000000c0002000800010006"], 0x3c}}, 0x0) r5 = socket$nl_route(0x10, 0x3, 0x0) getsockname$packet(r1, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000180)=0x14) (async) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000680)={0xffffffffffffffff, 0xffffffffffffffff}) (async) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) sendmsg$inet(r10, &(0x7f0000001b00)={0x0, 0x0, 0x0, 0x0, &(0x7f0000001d80)=ANY=[@ANYRES32=r6], 0x128}, 0x0) (async) recvmsg$unix(r9, &(0x7f0000000000)={0x0, 0x0, 0x0, 0x0, &(0x7f0000000080), 0x100}, 0x0) (async) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000100)={0xffffffffffffffff, 0xffffffffffffffff}) sendmsg$inet(r12, &(0x7f0000001b00)={0x0, 0x0, 0x0, 0x0, &(0x7f0000001d80)=ANY=[], 0x128}, 0x0) (async) recvmsg$unix(r11, &(0x7f0000000000)={0x0, 0x0, 0x0, 0x0, &(0x7f0000000080), 0x100}, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000240)={0xffffffffffffffff, 0xffffffffffffffff}) sendmsg$inet(r14, &(0x7f0000001b00)={0x0, 0x0, 0x0, 0x0, &(0x7f0000001d80)=ANY=[], 0x128}, 0x24004000) (async, rerun: 64) recvmsg$unix(r13, &(0x7f0000000000)={0x0, 0x0, 0x0, 0x0, &(0x7f0000000900), 0x100}, 0x0) (async, rerun: 64) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) sendmsg$inet(r16, &(0x7f0000001b00)={0x0, 0x0, 0x0, 0x0, &(0x7f0000001d80)=ANY=[], 0x128}, 0x4804) (async) recvmsg(r15, &(0x7f0000000340)={0x0, 0x0, 0x0, 0x0, &(0x7f0000001dc0)=""/4096, 0x1000}, 0x40000002) setsockopt$sock_attach_bpf(r8, 0x1, 0x4c, &(0x7f0000000000), 0x4) (async) sendmsg$inet(r7, &(0x7f0000000140)={0x0, 0x0, 0x0}, 0x4000000) ioctl$sock_SIOCGSKNS(r9, 0x894c, &(0x7f00000001c0)=0x6) recvmsg$unix(r8, &(0x7f0000000080)={0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0xffffffffffffff64}, 0x40000040) sendmsg$nl_route(r5, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000140)={&(0x7f00000002c0)=@newlink={0x4c, 0x10, 0x403, 0x78bd28, 0x0, {}, [@IFLA_LINKINFO={0x24, 0x12, 0x0, 0x1, @vlan={{0x9}, {0x14, 0x2, 0x0, 0x1, [@IFLA_VLAN_ID={0x6, 0x1, 0x2}, @IFLA_VLAN_PROTOCOL={0x6, 0x5, 0x88a8}]}}}, @IFLA_LINK={0x8, 0x5, r6}]}, 0x4c}, 0x1, 0x0, 0x0, 0x20008080}, 0x0) (async) sendmsg$nl_route(r0, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000580)=ANY=[@ANYBLOB="5800000010001fff000000000100000000000000", @ANYRES32=0x0, @ANYBLOB="0000000008440000300012800b00010067656e6576650000200002801400074100000000000000000000000000000001050004000100000008000a00", @ANYRES32=r2], 0x58}, 0x1, 0x0, 0x0, 0x40000}, 0x0) ioctl$FS_IOC_GETFSSYSFSPATH(r5, 0x80811501, &(0x7f00000003c0)={0x80}) 1.548718233s ago: executing program 5 (id=2446): r0 = syz_genetlink_get_family_id$nl80211(&(0x7f000000b500), 0xffffffffffffffff) r1 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX_80211(r1, 0x8933, &(0x7f0000000040)={'wlan0\x00', 0x0}) sendmsg$NL80211_CMD_SET_TID_CONFIG(r1, &(0x7f000000d040)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000100)={0x20, r0, 0x8de13c6b70ae92c3, 0x41003, 0x0, {{}, {@val={0x8, 0x3, r2}, @void}}, [@NL80211_ATTR_TID_CONFIG={0x4}]}, 0x20}, 0x1, 0x0, 0x0, 0x800}, 0x4050) r3 = socket$inet6_tcp(0xa, 0x1, 0x0) ioctl$XFS_IOC_ATTRMULTI_BY_HANDLE(r3, 0x4048587b, &(0x7f0000001600)={{r3, &(0x7f0000000040)='\x00', 0x6440c0, &(0x7f0000000080)={@align=0x5, {0x6, 0x3, 0xc1, 0x10000}}, 0x0, &(0x7f00000000c0)={@_ha_fsid}, &(0x7f0000000100)=0xb}, 0x4, &(0x7f0000001580)=[{0x2, 0x1, &(0x7f0000000140)='\x00', &(0x7f0000000180)="39b2a85300c45edb57235c92eed27feebc861e98a2cc4d3bef484bc2951233d15024ca6d8a4f641f86182f75b14f911078534c441b76d2dbcd61abf2273f72a265e933e6505c1d8b9c56", 0x4a, 0x22}, {0x3, 0x8000, &(0x7f0000000200)='\x00', &(0x7f0000000380)="bc370e5b80dbd1b4b9e5e7ea8245473e92a497c88d69728e7a286ce3d6e651c7200f63947f50ed950903fdad3dae506540db4b92712c7b5e2ea7f6b1dcd9b296e94c75c576c9fa16399b224ecc1c6aa46cfb203a4d13d52cd2987c7d2676f89c32e892cc61a878a62d7ae83cd319e0095efe552fcbc79a251bca558ce15182ac82666d6dbead38735c7a3b6245615f2086c52c618ffbf4d7703d9a64dcc999a16d147848ea5021a573c4f08916f2c16a6eaf95376830609fc2ec465a50e4ecf1465ef4d56f219f2a32390d181793ab7e3a1b42e612742d7452eef3e9e2c57f092f09b7dd03d2cc1fa606bc03e46e71619eff5f5afff056a6e0d851574b4eb75b224af42f7fe79cbaef75e2101406daa8068958091399d13f282bd5aa4fe7285906c813234c8c229123fa7fd12d14342105f16ad0c91d478852e526dd17ed00190b7a4f628cf80c6bd32bb35b0a09937484fea88439d40155b616bc33f527ea3f49a352022516080e07d5b028674b17c0c98e7333f9df4fb9ec3f0ef26362315e32b6930bdbe0368fb53163407e0aeb00e213c0fba6b7ba3778c3e02d90ec9fd50292b50d476409710e43c0af04e2413306b2e7077c14d8f272adfd8401e26fc05b8477b16b1ecaa0fd3ba327fd6deb43564b97fa75040c642b1b7450c54eff6c16338f1dd8865ff998292108529c64b5874a9529dd643967edcaae1b4d1d2119b59ec3be355714b239cfabd04608d5d5f4c417426a6f30e87c858815e2642aa41590d9bd2899b200b4d97a66bbc73b749e223fe5fe1aeece834b3af27393fd6707554e885c657470120e7174ed84f723f4992a4da021eb1996a119a6460d4650ab935a29600b89ba3b9e003e783c667ce4e06cdf6c97a4823674b9860fb91237cf2c22f383e67558bde9ec4ca0b4c7723a7e480438573f6536ace33f1a31a0d44c58d836c4a1cef3d39b11ac49fb900cd123cd02211d90db098ac0e725fc7e741b987e48aff4bb066d5ae9d09ee2ebcdbeb1b343780543e66b53c8847980196eaac3b856a8ad7868de677eb9b2246e853243941f19cd5ed037338efdd1ec3ed1caff937f79ff0aad2bdd53c40d0f8890c94ad62cee96f6d69f7f29fbb532f91b33e89986630a996221899e9fa88ee364c05777eb31560d04eea7c35d2b3ad16a7e560043b8ca3995d4404f1e61e5f59c6667b04d78b20b54496466bdc3a4df196ee8c8aa343ddbda8f78b22dac21b54cda049c6dc2314ab1e510484f26a1956c45f703b96c8f29c87cb645e79b43da17293afceb10ca6fc83ee4c7043aa1cdd3ed8ae1d5fd44c31391e908ee49ada625d2f5dc120bc5f7850a8fcf07d3333bdab02426f219292b98b1bab328323dbc47028fcc7828feaea7467c4c4d33cf411e8351bc8f24af95f918ce93478e6480fc816abf5f0d62e5f12cbf940ea552fa7018e751dc83223e6c13f7e292e0131f4484b1070f9452f27c5a286255a77dd0e31441fb424ab937f41242a62769a0764f67cbe30f8b706fc57e95da63eda8fbfa984f754f72914fa62e10b015f98ff059b5137fdda8f231265f825c9d3c82ffaa3a2a25e6a48c654423f434acc5987ad4de852b331965255860178e9592d7c5caddb4c1c5077531ff8a607703176116338f85dd01d35b5dad13b7a8b97b99abe26d77c25950853b82d6af59b48831c5c16d17d781f6e85e59b4aa904efb8ffe52b92c1e3c1e948032230bce484339b01fba1c03928abdac620d6b40c2e144748c7424824f5f9d576c9033c8ed01fb417b9ccc56f5e66314cba5fb0ead792f39cc545aa08400dc56b88d3e6bdd0a365ecc94e5ea73fa14fe48f7d4de088f5e873bdd03f9b70450585fd743f90037924a8e94c88574488e9fa347dac720a7820e201320218bbc04d94e2cfc4e8c885b2e2e3e2c6f8e1dd06286dabc0e82013861ba584893f8dcb39f5d04b3476aacc412c8f41157147c9b6205c44defe9dfbfb4aebd780b8e3eb3c747e2feb63724763b8622549ff31b15791fa64ebda23ee8cc94898fc995cb0cf032ed63d5099f703512491dc53b0b5bd984e63d6d1c59684b33a936c20cbfd1c2edd167d83c70b0dcd856569ae16d684565436c5bf4e9d9a6f617bdd57021b38629185352dc06bc5c9ec6710f931acf6695505737028ecece2f057da15439a976a5b5adea585b1f550cc1316cab4af86161485d453e1145100ff0bad8049d26adb003aafc10454ba689caa97b22b6b2f79fdc23912dcf78b1cee05157a923dd87b772db225684287f908ad27f2feea1f6060dc10bf4de83cc47158f09f3b15c3d767ebd4fee95217ce56b6057284acf30fa866608eee77ca7260af054a1cdb48f75476a75588a550e1b79a18797ffad7845ddbc62a4df1f70d4d697a412856bbca7305763b7322e4281a8096c7188fd334fb44a00118b9e1a703d6f036ac770a0fd781be933b5d43c29b8d469db71e52a230460fc6b14367bb98c181ba2569f67d0c6ba6f7255ff0d357bf4bfa9cb7f609ae0c00dce75b19fc91588ca5f1855513d45aa0cbf3453903c47dcff973c98022b5045fce5e75a710e39e06d8a40ca2a856c16a58878c265ca2cf44d62c24988ba1b436dde54bad71aad4df9dac00d1f87d2a410922911f44d9a37463e0d38a92db380899c85bef5d4ea2a57800b455a8444789f152a3d4f612c00030307b0a4344a5cc6de4d1d5c59e865175c78a32f073d80664081320b3bef8f659c306d57d7500f8a1ddb9975223b9a2c439bd9fba5422c48eb000e4dae004526c2e3e7f297643ed965ef93e89bc93c014925285a3702fbb4add59e670f81948380052a76644b6805c9f26982faa1c463a88f392c0c21bb9721e150bc9d0e2c0b37b7cfbf0e1e845cad5b219497c5458a8ab5bbb14efdb5caac3eaac4e8e7dbc3d5bbf2da387ab2c766277f873a7209e9be69ff85d49328826c96c332c865d3c1dbf386306ef1c70a8e611fb87c8801646f164872a10e6e20739bb0589d8bbde013a926a270df09a79f61f841f9ca3b8b80e784de5eda9dd9e5bbdbcab70557d6a1786da6a2e189b7b05b3b4c3f1c0404a02ab560a7de476d0b2af4a726036488cd0f70420b2acead36b93200ec8d4639897ab724c9b272650f455b29fff5baca1be591df08674d20276ecc55633e0a39d71e205e7054b42d6f866c7954fb21654b195522e19d0bea9b2a7dc57100d536503495a0bdcfc1c1901e0184fb9b295b6355087e0ac8845f774052249235b33f91a37477ef66823c8fdc9da33da031b71288e90b6699fdc6564a591a0157ea458b465cf0535464e67c3a64a83f0edce55aa393228a34909496a2117dbfe08075177a5b56f6286139608d6e55347047ab2fef77e253611b3c95253a7a6e26551cf969fb64e81aecc9dbf3f13488d6cad3c818eaaf2ea4d783c03f2dea039773e2176ca3f213b986123072c00678346967c6e9b2707beb4b25c2c6020f5573fc3f48da2ef715b03b61d648ad7f9b24d38446c123e4d84a3c0eeacd3a2f142a4c3bd5614015238006624b64be2e8264410d4187c354a8cd1a937a8ce2c661ba127edeef485c6061044b6bce36b9b401657266bd8c6cf0cd5ade9d299423bf96c86df73c51adc036116f60858e0125d85b752278950bdc2d3fe72b22c5386d79a17bdc3ae3200e624daa9cf4b2699c96da6b4bb6bcc03cbb592dd8e5bc5e4a0472847493d0a04446cbb175e65eaf8cececb82de73a6a757b850f958221051a79fbd260eba0c6df082cc77a40e923614ae92bd8ec4333de9be152f05a7a2ba691bf883dc79ebf43562743198472f64fd6584ed69d9c12e3dac414744f2b3d8e7a98d97d0f5c537ee90cbfc0731f9f9b125410e86e7d9fd71f58dbc2ce89a74ad7af536cca9f82bf762321cac597f2356c01eeb44307e2f6ad38b7be87b1fe4a8769e137f6e86b33ef3a26bd6f3409cac642e08d4e3153872f0f3a059dce2246fa3aeeec1ee2551e63326924f85394187a60e453891b59150e5738dd2cdbf23f2f11329343d6065f915baf6e989b1a338fdfed94315dc4be1a4ce9d519b9236972cc2b9fe0567a90fd7de94cd96ab8fa7360d5da7c12da68c8a543f2c80af1e4402b7d5ba25e29d0f8b714eb32265ea54b300d5a4af7075fddcf8212d45beb7a4c8f757234dc968743815e8c5503ba3a82761a2cd1e928f4d3eabde62b0131d6d04c6fc931f4933a451424a1e3a45faed625c8c8f5f1afb59926a1e5fbed8dc6f12e4e79e4d365b9c3e834ceb303117d14aa776c577acd2696fae460f8af9a89a84f185a57351a9b7dbf682a7f8d2932b4ef2fcbea6663567f15fcecc07e897dc6058bbabb464704c390e682b21c69461a7f80b00f03bba05a711c375e2868be64b53645939e3eda1b70a39c9b5b5e56813c52ba57987fd37a24d63b505efdd4460dbddcdc8ebd26c266b8b70bd26d24cfe533e92b4c4647eadb1a13e0fd294ec2e157122b2ad311793706c880c930ca3fb64ef6f1ae3b570fe0e337b06a93d847c70d483e6a0669ad886b76c43df88155b7da2c2ef51852e170594348b34dbeac06ebaefd712d6ec08460a445da8e1ec3887a56039b6a0ec054a9a7c3e8bed9a9a886b469bbd1b8e161a0e2cf1e4ed7b01c073abc18b1019b15d98f48dfa9a23d9de83f0a17bd244dda1368d2eeff71e1f725b5f66919f55f9133b755bc1ca4ca8e6d3e283ee44d633fd66f0b601a9bd2d7eef9385b1d665c9e53b50b596741f66eec4b4f91c232c37c3ce2cf515dd4c05269794d7695ec13d22f2a4d99a5e5bf637448a2c2cc6f0ea0e245705929c317269a0c0e3016ed35fc6b55862e19675fbed151cc816ba97954ff13667415a4afa734e02d853fe168b11433a473085fdb724a92cdf70eccb2be4e7bd3cb9e22b7345c3fa6022920b6975d852fe8a76a4e8157ba82a98516d0cbbd33ae01aec11e82e167c0d7d9f514037628af36bfce4a41e41db52d6c62c6d540dbcd228e0a0ab703d0ab701bae876474753dba989b67258e3b17539ff582f9a22e9203192b1957c9b928330b900f0bc03e6a04c5cfbe51c157a98aa45e098433175cb56bf2c993566230d7f37e730524d15d99260bca2050d2cd9e14e14e906d07b81dd77beb6eda43c61db8592ca7dc34926ada0524d8adc1af671112ab7bfcaeb777cc5ad4ef2e5faf06194b850a8da2c4f9d7efc9a2e156525535d97d1c7f1e72f07533e7e06ee1548721c61b968b5e3ccf337a5ae5ecc77f6c605b520b4eb08e02c98a9b2e2da12b4dca88f188fa9fdad19fe42f751139ce6328eb866e4e69579d0c774f816a8307c9f06ff1ebde9d30d84f70a276950c9293e8532d1accf7f2df01ff849937d5cbf1847c42a90df14661fad6d21700413bb2dac836f3da38b3353bee524151bd3030a68166dc3debe2e0c1c6320406c62a56a2cb1470b00619f823885739a8c5f3139864b3b22cf6ff1b8e149b5047c01d018fd5e014e7f3efac70d628d15a0dea7f9fb0f7281fb6e661c01519d4aee55a83410634400faf2391dbbcfd498ea32bc95d71a4df33526ad41b96e8422e569d94547c8b5b7a9802de94a9c6b79c19b170bb9278d1d28b77d9316ca1d32bbe7217b9e54258795baf99a3f3cdc35f393d1559732d81369b4a34e889ed1077d063f7bcd928d4ce6bf90395b70bc9812069e4505ee8f2c3d59770056c3521d2360572736ac4f1fe4512467cfe17d656c392d2755104424d716afb3edc71ce2b04cdd9be373b9125e0bce583b20b2e57a64364d3905f94780a215ba08a", 0x1000, 0x12}, {0x2, 0x8, &(0x7f0000001380)='!\\\x00', &(0x7f00000013c0)="3dd9c76dc93c565ef25f765e3af38efa188e2698cb9e21f33039b0173a548a24ae8847d8fcb70d72618a7422aa9956b2b9008dd96de28dd71866135112f47e7ab4e8619a0ebea0372dcf2866f6d7f69007d6c6e5293fa45f2e9112c881af2dd8", 0x60, 0x38}, {0x3, 0x0, &(0x7f0000001440)='ip6_vti0\x00', &(0x7f0000001480)="db2b70e68c1f8d0cc58a9fc8cb7a850fa14f2704ef2a2fed13168ebd791b6f26d67c4342e3b6769264d0f35e5aec20d4759fbece7b681036c60ca4ec4ca40227be26398f0050503b1445c0d6e4049ed630f22dc75c52f2dc733485da0a9e7056529761b0c0363000b25ccab3281c67250a6c4f59ffaefdd0a82ed2f00bda2d039d572537612cc140c33c014457de20fe5a875779d19b828b403ed84b060111215077dbb90847e4d55b1365f8b0ccdf5ca50b01e70a158d3d5aea779a194e743da2070cdafee78539927bc6c0de73a9b82dbb3228c1c2fb9872d771b8d3b683934bc634db1922cef6ab95ea613671ffc260", 0xf1, 0x4}]}) ioctl$SIOCSIFHWADDR(r4, 0x8924, &(0x7f0000001680)={'batadv_slave_1\x00', @remote}) ioctl$sock_SIOCETHTOOL(r3, 0x89f1, &(0x7f0000000340)={'ip6_vti0\x00', &(0x7f0000000000)=@ethtool_cmd={0x0, 0x8, 0x0, 0x9, 0xf, 0x3, 0x3, 0xfc, 0x0, 0x9, 0x0, 0x1, 0x6, 0xff, 0x0, 0xfffffeff}}) 1.364746815s ago: executing program 1 (id=2447): r0 = bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000340)={0x2, 0x4, 0x8, 0x1, 0x80, 0x0, 0x20000000, '\x00', 0x0, 0x0}, 0x50) bpf$MAP_UPDATE_CONST_STR(0x2, &(0x7f00000002c0)={{r0, 0xffffffffffffffff}, &(0x7f0000000200), &(0x7f00000003c0)='%-010d \x00'}, 0x20) bpf$BPF_MAP_CONST_STR_FREEZE(0x16, &(0x7f0000000040)={r1}, 0x4) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000380)={0x1f, 0x18, &(0x7f0000000700)=@framed={{0x18, 0x0, 0x0, 0x0, 0xfffffffe}, [@snprintf={{}, {}, {0x7, 0x0, 0xb, 0x8, 0x0, 0x0, 0x80000001}, {}, {}, {}, {}, {}, {}, {0x18, 0x3, 0x2, 0x0, r1}}, @printk={@d, {}, {}, {}, {}, {0x7, 0x0, 0xb, 0x3, 0x0, 0x0, 0x7fff}, {0x85, 0x0, 0x0, 0xb0}}]}, &(0x7f0000000180)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x11, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x2}, 0x94) 1.364420378s ago: executing program 7 (id=2448): syz_emit_ethernet(0x6e, &(0x7f0000000100)=ANY=[@ANYBLOB="ffffffffffffffffffffffff86dd6708100000003aff00034000000000000000ffffac1414aaff020000000000000000000000000001"], 0x0) (async) syz_emit_ethernet(0x6e, &(0x7f0000000100)=ANY=[@ANYBLOB="ffffffffffffffffffffffff86dd6708100000003aff00034000000000000000ffffac1414aaff020000000000000000000000000001"], 0x0) r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$netlbl_unlabel(&(0x7f0000000040), 0xffffffffffffffff) sendmsg$NLBL_UNLABEL_C_LIST(r0, &(0x7f0000000180)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x4000000}, 0xc, &(0x7f0000000140)={&(0x7f0000000080)={0x74, r1, 0x2, 0x70bd27, 0x25dfdbfe, {}, [@NLBL_UNLABEL_A_IFACE={0x14, 0x6, 'gretap0\x00'}, @NLBL_UNLABEL_A_IPV4ADDR={0x8, 0x4, @loopback}, @NLBL_UNLABEL_A_SECCTX={0x28, 0x7, 'system_u:object_r:hald_var_lib_t:s0\x00'}, @NLBL_UNLABEL_A_IPV6ADDR={0x14, 0x2, @rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x02'}, @NLBL_UNLABEL_A_IPV4ADDR={0x8, 0x4, @loopback}]}, 0x74}, 0x1, 0x0, 0x0, 0x48040}, 0x4004010) 1.235602221s ago: executing program 5 (id=2449): r0 = socket$inet_icmp_raw(0x2, 0x3, 0x1) syz_init_net_socket$bt_hci(0x1f, 0x3, 0x5) close(0x4) syz_open_procfs$namespace(0x0, &(0x7f0000000200)='ns/pid_for_children\x00') unshare(0x6a040000) (async) unshare(0x6a040000) socket$inet6(0xa, 0x3, 0x5) ioctl$sock_inet_SIOCSIFBRDADDR(r0, 0x891a, &(0x7f0000000000)={'veth0_to_bond\x00', {0x2, 0x4e23, @multicast1}}) socket$kcm(0x10, 0x100000000002, 0x4) (async) r1 = socket$kcm(0x10, 0x100000000002, 0x4) bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000100)={&(0x7f0000000640)={{0xeb9f, 0x1, 0x0, 0x18, 0x0, 0x1c, 0x64, 0x2, [@int={0x0, 0x0, 0x0, 0x1, 0x5, 0x10}, @union={0x0, 0x0, 0x0, 0x5, 0x1, 0x2}]}}, &(0x7f0000000340)=""/142, 0x36, 0x8e, 0x1}, 0x28) sendmsg$IEEE802154_START_REQ(0xffffffffffffffff, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000080)={0x34, 0x0, 0x1, 0x0, 0x0, {}, [@IEEE802154_ATTR_CHANNEL={0x5, 0x7, 0x12}, @IEEE802154_ATTR_SF_ORD={0x5, 0x18, 0x1}, @IEEE802154_ATTR_COORD_SHORT_ADDR={0x6}, @IEEE802154_ATTR_COORD_PAN_ID={0x6, 0xa, 0x2}]}, 0x34}, 0x1, 0x0, 0x0, 0x18000}, 0x0) socket$nl_generic(0x10, 0x3, 0x10) (async) r2 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r2, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000080)=ANY=[@ANYBLOB="3800000041000701fefffffffeffffff017c0000040042800c00018006000600800a000014000280100014"], 0x38}, 0x1, 0x0, 0x0, 0x4048011}, 0xc000) sendmsg$kcm(r1, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000300)=[{&(0x7f0000000340)="39000000140081ae00002c000500015601618575e285af0180007a1b31d569d9ae527048ffffffffffffffff56fabcb3b2aa9be3da9212d744", 0x39}], 0x1, 0x0, 0x0, 0xc00e}, 0x0) (async) sendmsg$kcm(r1, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000300)=[{&(0x7f0000000340)="39000000140081ae00002c000500015601618575e285af0180007a1b31d569d9ae527048ffffffffffffffff56fabcb3b2aa9be3da9212d744", 0x39}], 0x1, 0x0, 0x0, 0xc00e}, 0x0) 1.22101385s ago: executing program 7 (id=2450): mmap(&(0x7f0000001000/0xc00000)=nil, 0xc00000, 0x0, 0x3032, 0xffffffffffffffff, 0x1000) pipe(&(0x7f00000007c0)={0xffffffffffffffff}) syz_emit_ethernet(0x32, &(0x7f0000000a00)={@link_local, @dev={'\xaa\xaa\xaa\xaa\xaa', 0x3e}, @void, {@ipv4={0x800, @udp={{0x5, 0x4, 0x0, 0x0, 0x24, 0x0, 0x0, 0x0, 0x11, 0x0, @private, @multicast1}, {0x4000, 0x17c1, 0x3, 0x0, @gue={{0x2, 0x1, 0x2, 0x5, 0x100}}}}}}}, 0x0) getsockopt$packet_int(r0, 0x107, 0x3, 0x0, &(0x7f00000002c0)) r1 = bpf$MAP_CREATE(0x0, &(0x7f00000003c0)=@base={0x9, 0xb, 0x42, 0x3e, 0x42}, 0x50) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000300)={{r1, 0xffffffffffffffff}, &(0x7f0000000100), &(0x7f0000000180)}, 0x20) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f00000002c0)={{r2, 0xffffffffffffffff}, &(0x7f0000000140), &(0x7f0000000280)}, 0x20) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000000)={0x11, 0xc, &(0x7f00000001c0)=ANY=[@ANYBLOB="1800000700000000c35b00000000000018110000", @ANYRES32=r3, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b70400000000000085000000190000009500000000000000"], &(0x7f0000000240)='GPL\x00', 0x8, 0x1005, &(0x7f00000014c0)=""/4101, 0x0, 0xc}, 0x94) 1.153234553s ago: executing program 1 (id=2451): r0 = socket$kcm(0x21, 0x0, 0x2) sendmsg$kcm(r0, &(0x7f0000000140)={&(0x7f0000000440)=@rxrpc=@in4={0x21, 0x0, 0x2, 0x10, {0x2, 0x0, @loopback}}, 0x80, &(0x7f00000004c0)=[{0x0, 0xfdce}], 0x1, &(0x7f0000001a00)=ANY=[@ANYBLOB="180000000000000010010000010000007d95df16a39b1a6c900000000000000001000005040500002b24ec10064b6f2f000000fb718aef932f3889d1fdda5b00000009860f5878c37ffe36e1165814d435be5b317c6c8189767d2f97879f07a515bb7c169f46933d9338f4ab04834e6f618988c5944741afe403461323110f62055394412158e7a3adb164d641aa40d4ab077fe34232aa8b319d7666d0998a61d7da0c86d70000001010"], 0x10b8}, 0x106) 1.109690721s ago: executing program 7 (id=2452): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPCTNL_MSG_TIMEOUT_DEFAULT_SET(r0, 0x0, 0x4000800) r1 = socket$nl_route(0x10, 0x3, 0x0) bpf$PROG_LOAD(0x5, &(0x7f0000000680)={0x11, 0xc, &(0x7f0000000940)=ANY=[@ANYBLOB="180000000000000000000000000000008500000050000000180100002020702500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000005000000b703000000000000850000007300000095"], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r2 = socket$inet6(0xa, 0x2, 0x0) socket$nl_xfrm(0x10, 0x3, 0x6) socket$nl_route(0x10, 0x3, 0x0) socket$nl_route(0x10, 0x3, 0x0) r3 = socket$nl_generic(0x10, 0x3, 0x10) r4 = syz_genetlink_get_family_id$ethtool(&(0x7f0000000740), r3) sendmsg$ETHTOOL_MSG_FEATURES_GET(r3, &(0x7f0000000900)={0x0, 0x0, &(0x7f00000008c0)={&(0x7f0000000340)=ANY=[@ANYBLOB=',\x00\x00\x00', @ANYRES16=r4, @ANYBLOB="010028bd7000fcdbdf250b000000180001801400020064756d6d7930000000000000000000005ad9c6f3f7966581a32a7f8624e552b7b4ed0b9f8166ff7e29d14dc96e671072d9ded69453d2c05cdc09a988be7999a024e2e36f4fb69055def8e74a58e5b500b2d2d663a1fb78d73924c15c880df6fdf6e62c5fe9911a9e749597943b033d3fd7e455f356fa13137fbd45da1d4f51b44c4a25098492895571651cff77721c290de760b9767390d23d0ab58e63b0755fe147a1ae935ed705"], 0x2c}, 0x1, 0x0, 0x0, 0x200040c4}, 0x7a712bfc07b8374c) bind$netlink(r0, &(0x7f0000000140)={0x10, 0x0, 0x25dfdbfe, 0xea97abfd5d41cbe1}, 0xc) socket$kcm(0x10, 0x2, 0x0) syz_emit_ethernet(0x86, &(0x7f0000000c00)={@multicast, @remote, @void, {@ipv6={0x86dd, @icmpv6={0x0, 0x6, "000210", 0x50, 0x3a, 0xff, @remote, @mcast2, {[], @param_prob={0x4, 0x0, 0x0, 0x0, {0x0, 0x6, "0d0802", 0x0, 0x11, 0x0, @private1={0xfc, 0x1, '\x00', 0x1}, @ipv4={'\x00', '\xff\xff', @dev={0xac, 0x14, 0x14, 0x33}}, [@hopopts={0x2b, 0x1, '\x00', [@enc_lim, @padn={0x1, 0x1, [0x0]}, @pad1]}, @dstopts={0x84}]}}}}}}}, 0x0) ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f0000000300)={'ip6gretap0\x00', 0x0}) socket$packet(0x11, 0x2, 0x300) r6 = bpf$PROG_LOAD(0x5, &(0x7f0000000080)={0x3, 0x8, &(0x7f00000012c0)=ANY=[@ANYBLOB="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"], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @sched_cls}, 0x48) r7 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='memory.events\x00', 0x275a, 0x0) write$cgroup_subtree(r7, &(0x7f0000000100)=ANY=[], 0x32600) mmap(&(0x7f0000001000/0x4000)=nil, 0x4000, 0x2000001, 0x12, r7, 0x0) bind$bt_hci(r7, &(0x7f0000000000)={0x1f, 0x3, 0x4}, 0x6) bpf$BPF_PROG_DETACH(0x1c, &(0x7f0000000180)={@cgroup=r7, r6, 0x2f}, 0x20) sendmsg$nl_route_sched(r1, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000040)=@newtfilter={0x24, 0x11, 0x1, 0x70bd26, 0x2000, {0x0, 0x0, 0x74, r5, {0xd, 0x10}, {0xfff8, 0xb}, {0xfff2, 0x10}}}, 0x24}, 0x1, 0xf0ffffffffffff, 0x0, 0x14004804}, 0x840) 1.068087078s ago: executing program 1 (id=2453): r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$netlbl_cipso(&(0x7f0000000140), r0) sendmsg$NLBL_CIPSOV4_C_ADD(r0, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000240)={&(0x7f00000004c0)=ANY=[@ANYBLOB='P\x00\x00\x00', @ANYRES16=r1, @ANYBLOB="010000000000000000000100000008000100030000002c0004800500030080ff00000500030080ff00000500030080ff0000050003ff8000000005000300800000000800020003"], 0x50}, 0x1, 0x0, 0x0, 0x40}, 0x0) (async) bpf$PROG_LOAD(0x5, &(0x7f0000000700)={0x6, 0x4, &(0x7f0000000100)=@framed={{0x18, 0x2, 0x0, 0x0, 0x800, 0x0, 0x0, 0x0, 0x4}, [@call={0x85, 0x0, 0x0, 0xbc}]}, &(0x7f0000000000)='syzkaller\x00', 0x2, 0x0, 0x0, 0x40f00, 0x1, '\x00', 0x0, @xdp, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) 936.538222ms ago: executing program 3 (id=2454): r0 = socket$inet_udp(0x2, 0x2, 0x0) bind$inet(r0, &(0x7f0000000040)={0x2, 0x4e20, @empty}, 0x10) syz_emit_ethernet(0xfa5, &(0x7f0000001c00)={@local, @empty, @void, {@ipv4={0x800, @udp={{0x5, 0x4, 0x0, 0x0, 0xf97, 0x2, 0x0, 0x0, 0x11, 0x0, @empty, @empty}, {0x0, 0x4e20, 0xf83, 0x0, @wg=@data={0x4, 0x7407, 0xfffffffffffffffd, "9c67524ed6ed152d4f775bbc411126513b67aa2818e6f3aeb55bee6ae1049f195705bc8bd9b1085cd41af77353267df8a1d4cecdb01908186ea04e641c89a2ee0432e9c0894a8d7aff0c865e96548d507f048f907320b0f8b1e83b5f1425b63ad9c6adfd09578bbda92c9bd8f57d6efd752a6f20487ebea241d612212e3ccb077a5150c08f56aed6ee45acd4439043886b78cc5562b00bc57cf509d90b02a7bc86919f1b882f556e6aac5e9b93ee545b2b68bd014e2a49c332432ef4adeb61ac418aa4e20ee299f1a8b7a72e985223996b11a8913f3b1c23b10f88c3de28660457a37126fd3b6394536da0cd962f532ff22c496e1df4ffe049b193514c02571399d3618383a287068f4f15d51d1781cc0bc2af66ddc68135bfd33634e1a75be80630ce76ef79c86c9abb2fdc6d84367ea10fd8a6ee3c99eaec83c66bf5ffce6eb5ccc2546b6df905ff1aea223029ba2f7eb2469c5b8637b79347361f8cf0fa9d58a039e7811f343961b22c23d68b2c04eb8b5aeee7c6f71ce95cab886bf2694e0643d18761043e2d1dcb8ce0bdd15817a75f591b05146424797f729689e2a7bd53cb6c02fd15c339057c714794b407b342d12e69ec383b6ea6c99f845d04fd5128203c78a388fb0a1caf1f725f7636eb41e415951f8284a9c475760eb9312f7d6307037d472fbda509d56a0cf8e36d44f3f0b67fabdd2842ab4241cbfc7d309188d3a634129a13bfcac3b39b75d46bed585550ff7b41746dfd7e0f0c8a25e9f39deb7e2a4f0e068b86c6593b3b37838d2809eef3eb2f3120fde2fe3e9fef4e4bea1ddf3d17c40f753b37baaa110a8b4ad805d500e0235e9371b828993da25c5697d1001c8971b3862eef047730b242350403c851cd74cdea94501c0e2875a5830aa71733a0f022cb37e1cfffaee8eb0a23d51181a0691dadcd6b30a86a5fbf5c499120e265938f6430ffde09eb173327c2e25bdf22ae0d742141db856c4beee07af0ce37c078f6e59b41a29502cc01737c984185f6622a3ce02ed04daf2a7eb03c92a5a5ecce5973ef704aba9efcb99bf52f5c662d52f4399a13af760f9f9ff3d5930c3fae014b92ee0aded4ba51d95cf946d5f55f5b5d4603f8b76087d681ad77fc385fe114331c24a4ada85eaebf5405467dbe656b31b79a0f893864a13bda309a2fec2f4fc4858d9daf946df31f4077338bfc3116a45827ce8907ad691d241d3a8859a3672aeee3878e45b0be6f68194638dee30ba6735a6424e51f8b9a4965d37ab7ca96e167a5c32c8a935ff34693e24d067039db0f4ffe4dc5fe7c56a0d6e52a7cef9a6f1cc8b88d61d2258e3e0e8f2d7b699d4a22ab661f6afae5b48cc8fbc9ddfe57e76f274e65b210994fd96cd4deb6fdb795df4147ca0d876b1b08b64d20a28a358f48086c0f8d1f0741260f95adabba51f2d3f36107d49d46ba0c666232597bf08bfab60b5a432a1652e2c503fcf977ea6ff15c8e8f3bd9b7a3017c36be787d5a6579f5236b17d7bdc2c3918d9257e266bdf7929bb366d98d2b225c08c3c5ed22113b8c051c811bd1e52ecbe619dbc9579270c7cf69ac129e84a7141e689d9745d56e1cda6affdc1856757a6e39039b17d5286cf393186b99b20c54987087ece9972c39b4a05f1ca218c35254c666e7fcb7df4aa401cc79e1aade63732064ca80af164709a85fcf8ac72fa5ace60aa04d2ee0d5f051cb032f7c25100facb7ec1c247812b0de4f1c3c1ab98f904d9752cc427bc0445d8e27b51d5a8084087ea61f82ccc1114679f673753eddc7cfc00ba7e25db3391579ecdf638ab73078133e49b522d3d16bf2ebd06e7cefc24154088965ad3c9291c68f19f7cdd2943abc716ecf0b33fe249108da2b1f9abdbcb4dba89746a8c5711a41556efe5537327e253bd9ac68dc56516392292152b86ef118e25cac4e3c7c2b20bbc5bbc2d825c8dc14e9807aa6a423fdebfa7deee913c8f9f58bd967d43af1d65dc5ce72b2cd1a17ce34facd199bf2c62beeb752d156d6f31ea0323bc3ec0500587c485d8141f5b5ac81457df9396fbf98222212ef70527b6ed8d6e4d11156c8ecaee4692e068a72cb3b12686436028a7297956c48ee8fc393907edd3695fddbb786808c0a48182e3334e73fedcef0ee1bfbb13dce8a79b8822fd1ca0ed645f64d134c240844be5a7ac3aa15419ae79e7b1d721ae5abe1b0896c6189f23b65d79f5c3677b89f40aceff98dfca244a160dff264a2b14a3774064e1152fe0cabfc23e3e16dba5f46ea6af09fb3b8529022837c7e9303e3ecd0170fcc0e6fb0f3981d9f8f838412eae1a3dd13b7a980a642739e8abebed29db34c06460f09e27ddba1ed76b4ac6290235f6f81fcd3eb12af9821575b050aaf80d5c6c695807f7480f24e4bc0159744f9045a2d37574508d7e687482f775d0a4c471c4914e6a64b0d444037407b8d079751ddf4b14ed0ee6f1e622952a331a1a147f3a805fb7ca29c3c7feb2dddd0db795ac0ca327d95b19ff37bd8d553703014e5137f8c41b947d199f95f245d3354f9679876db736da5cfbd7cb9f80a12e50c895b999b670c9e161aa12e82c79d98fed5017e11674158a2f258ecc7c550f10dee6bb9d159316c567e3973e8aa30f157f6d30f239877021e7161c0a93c7b6bedccc7a3d8c9313f6f860d33ae0c162236853ae29d7a619bc306998e51c5d91a73475119a648700fbf3a41701ef87b440b83573a44339aea5806c0883470613e38baa518466dee2c671d96768f8d842feb5a812ea3ecd1e307a913a1032f06af2656b0a969b38366c39ca149205540391f36c897efb80aa43707c12e21544386fc232a45c9eb40a64c35edd4db20bd4970d642c0c2a0ee43ce8bf4d1bd84b3c3fa198cfc8d1f83960a1c3cd85a164926dc962a9078c5b079e0f4bb0b4e94b0aec3d13e7c47edc936927da2e6e7fe9485b0489bc4fdd1699611aeb00d767057602b8e53dfb4a6651c0f2873e5f60fdd7e2542d6aba79f491f87522f77427323e87386c89e1df9dd6e4f32be85c9eefbd6e6b177dde573b0d0bb8df828185aedc7aba2e6c3d4d9df393b203c1147f005860a6dd44dbcebead0eeb29fe3216930ef4a5994a93851df960d3be82d4294b64ba8295a59d099fd10afe39c2a79727a5447fa27909d53df6a00a63897261619e853036a6852e95ac6da62276007f2f3f386267cd8a0d136e645247e76db84e466e56ba42618b4fdef3e6d8c48dae5d03e1e369cd74042146e361cd6b4e654c8adc75446c454d3275a7d91646c4fb721966df9df3f761f10bebd212bfc87db9c48ffa0c6efcb17db3955f4a6f58919a036cda4f0a0c07a7306d2909adeeb474bd0bbec58865c4a5804108a014838673ff26438c162ec61e71bb880b154d475c71d500bfda3128b9fac2bccecb790dbd3075f424b1244f111c7eb5cbb7af0b6f3ec9cac20f82b1631822b940c03d697e213747627a5a7ed57414f2826888e515b88e61e69b742b053fe086ffc916abe00a41870cd332201d96c96bd174b369094b0da81ddc50affefa3709a358a5c00308d30a41d10b1c3f91a011bd246588336ff76dd60c10c3bbc8eec06adb3e73cc21d218b83eb9306e0650dd4e41bd65e15bb99a0653fc312251c174abed9e3ed04ef0378feaf78d839ebf61fda85c290f140cd3690cff881c348c57f504c50ca61986b29e58fdb0cbe276e42c982154762110c0f65b240aebe4291c66157629f0a45ea48e8e6a5dfe062214d635c5f828d1c888ec83a279ddac80f748c00e984248bef8e884590dcc1322aceb2d3b525618450fa0649e4ae8722769c6a32eb47161f7bf08bd59f903240ab9f790313b41607554b21ce45f10cde937f9f68fbb23ace0eaebd86b1201ea230c7f4c57f6594e655904db2a6d3d294f98fe630a524573f52c145b19eea382bc3adac7c7b62863bfa04f2d9fb9b93e7cda0fff4af897281580b879912ebd2c9c9d433ef479e886a477ce4538590179049aaff5e8e51b25db6c0300393a37c25c350e1e4effdd657f26de15199d39e134d1e7fe278b68377674a0e31a12e67096d44f62bd0353147041050fe44d9fbfc95fa8aa368e5868148a9e7a6f5551cf55f677b48ac2b4cd29a300d3cb9cd3a5ef486b9b3138018fb1568ce3f59385b98e93b7113dc85cd242bb57e545d6c151727d1c33ced565b2e29419bc6c458b45ab2107a55793618d20bd476e81ff79543cbace7b26a53a67a3f17ad0e2f2c0cc55f45d374ddc3cf8ada0c52cf1251cc4a6e1c7e84a1536cf328a0a392a3b79bbef1b40ad6e69811f3ec73b971c7cf6d64bfd0b183135d76fbb121aa99c753dce310f3288d460a1158a0c1c2ca4a66eadb38c6669dae4742a1da14b007555ffdae4e60f535ee23018dde93863b028346edc0f8da3ee5208b06fb107e921492ed9f2f2064d865afb5f955c80b1a6c5dbc540f1af7dd68925353d288fce304243f09d1791661027ea11f21ade9abb81a71343f1d405f35b01a504a99e08514f3b8307dce0b7c4305c0e531a538c6c11d8021183a87c2de3e1e384d114559601b948359f153d9845067683d8ef3dc75829a46211368ddf4837c021bf3ba1cc8005ab6902e094635f86f2f090851d5ac0af51c3aec46bdf9024ebe196351e2acd483f71821f033aa02d7bdee2fe987412bda115a5ce7f51dfdb78ce378485801fa10180339d3c5372a65cc46d2f0ef8ad3317062af5c243f81d920075e4874ea69081ba22d8be502422e973128c657da28f4f63d34919b5a4663544e244524263bae0a9a6c7455a16b5b860aedea7a2ea87abb402e151461d8310d05dd611e063e278628420a3f7bf0fd9acfb6dc82741cb588b4d1d8a5b2b5db58e052b07c4e354034842102305c0b070dbe2cea7a59b306054ffcb08432c67d272f40d6d9f42826ed660e6558f80f8522499e0f89335c18297ee395bcbf0ad1af122434e9319177f9ad9c5c140841551733282f74ea025e4e3c4ae11dc64df48497d747ab0d08a2de58abff2242c6267a7498b7ae4fc1ebabc8dc5ede8a053000fe8af5ade0f6868c22d4b2602c36cfc3605a616850973edcc5ebec3e18dea4a4e3f4e11f1c979991b636233ae70f0cb42d592e5bc5b7b3773820b22c386f365738d4ba6a0e76e6e5ab480a77336b394fc807950df4939f6dda4cf088b318660da8b487b1cd0b8b8aaf69bc5c1f7330d1cfc7a7ab84f01a5f4d8ee0b887bd91d8af80be32e171ca03e9a906c6c8b342baec668db3ff9522002d5f60e751e712031d3cbeff0d47523625b3d41633e7c0d3ef3b5b4336b17c36075debcdea4b6357ab468114ae7265eaa39545973a602af35dfbd0ed03a3c6b717eefb92c52291a0b014ae4467a233db1d48c625228733262acf9d08c98e2aba18df6dde6160fe748bbaf217cae345449c1cb5e22ef26e6e8ef2666a307a3ca7a08ab2a7e3a938eab61b772a69aa4dce0ace312136870dadad35c98d2911b4d37dfcf31c3c36cd26177e3cda3049aecc9928545c2e102d2586225cfc96e9884042923e2874ebf71dc81060970705aba2a7ad1127b218e4ade098a41285ff7b"}}}}}}, 0x0) mmap(&(0x7f0000001000/0xc00000)=nil, 0xc00000, 0x0, 0x3032, 0xffffffffffffffff, 0x0) readv(r0, &(0x7f00000005c0)=[{&(0x7f0000000180)=""/53, 0xf7b}], 0x1) 936.369116ms ago: executing program 1 (id=2455): r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000000), 0x40241, 0x0) syz_emit_ethernet(0x2e, &(0x7f0000000080)={@local, @link_local, @void, {@ipv4={0x800, @generic={{0x8, 0x4, 0x0, 0x30, 0x20, 0x0, 0x0, 0x0, 0x73, 0x0, @remote, @dev={0xac, 0x14, 0x14, 0x2c}, {[@ssrr={0x89, 0x3, 0xef}, @cipso={0x86, 0x6}]}}}}}}, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f00000000c0)={'syzkaller1\x00', 0x6bf1c2d5adba8c32}) r1 = socket$kcm(0x2, 0xa, 0x2) ioctl$SIOCSIFHWADDR(r1, 0x8914, &(0x7f0000000180)={'syzkaller1\x00', @link_local={0x1, 0x80, 0xc2, 0x0, 0x0, 0x1}}) writev(r0, &(0x7f00000004c0)=[{&(0x7f0000000240)="2e9b3d0007e03dd65193dfb6c575963f86ddf06712e960272f8db0049d90490fe0e38f1cead7c1de316ef4ee4d751716ebfd26d4eef232480000", 0x3a}], 0x1) 695.21038ms ago: executing program 7 (id=2456): r0 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r0, &(0x7f0000014800)={0x0, 0x0, &(0x7f00000147c0)={&(0x7f0000000000)=@allocspi={0x104, 0x16, 0x1, 0x70bd25, 0x25dfdbff, {{{@in6=@ipv4={'\x00', '\xff\xff', @rand_addr=0x64010100}, @in6=@mcast2, 0x4e23, 0x0, 0x4e20, 0x3, 0x2, 0x20, 0x10, 0x3a}, {@in6=@remote, 0x4d5, 0x33}, @in=@local, {0x1, 0x10, 0x4, 0x8001, 0x8, 0x7f7, 0xaaf0, 0x1}, {0x500000, 0x4, 0x4, 0x2}, {0xc908, 0x2127268a, 0x8}, 0x70bd2b, 0x3503, 0xa, 0x1, 0x0, 0x10}, 0xff, 0x80000002}, [@offload={0xc, 0x20}]}, 0x104}, 0x1, 0x0, 0x0, 0x880}, 0x48000) socket$inet_udp(0x2, 0x2, 0x0) r1 = syz_genetlink_get_family_id$mptcp(&(0x7f0000000200), 0xffffffffffffffff) r2 = socket$nl_generic(0x10, 0x3, 0x10) r3 = socket$netlink(0x10, 0x3, 0x6) r4 = syz_init_net_socket$bt_l2cap(0x1f, 0x5, 0x0) setsockopt$bt_l2cap_L2CAP_CONNINFO(r4, 0x6, 0x2, 0x0, 0x0) bind$netlink(r3, &(0x7f0000514ff4)={0x10, 0x0, 0x0, 0x2ffffffff}, 0xc) r5 = socket$inet_udp(0x2, 0x2, 0x0) bind$inet(r5, &(0x7f00000001c0)={0x2, 0x0, @local}, 0x16) connect$inet(r5, &(0x7f0000000480)={0x2, 0x4e23, @multicast2}, 0x10) setsockopt$inet_IP_XFRM_POLICY(r5, 0x0, 0x11, &(0x7f00000002c0)={{{@in6=@dev={0xfe, 0x80, '\x00', 0x13}, @in6=@rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x01', 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0xee01}, {0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x101, 0xffeffffffffffffe}, {0x0, 0x2000000000000}, 0x0, 0x0, 0x1, 0x0, 0x2}, {{@in6=@ipv4={'\x00', '\xff\xff', @multicast1}, 0x0, 0x32}, 0x0, @in=@broadcast, 0x10000, 0x0, 0x2, 0xb7, 0xc4, 0xfffffffe}}, 0xe8) sendmmsg(r5, &(0x7f0000007fc0), 0x800001d, 0x1c) setsockopt$netlink_NETLINK_PKTINFO(r2, 0x10e, 0x3, &(0x7f0000000380)=0xfffffffe, 0x4) syz_genetlink_get_family_id$l2tp(&(0x7f0000000640), r2) r6 = syz_genetlink_get_family_id$team(&(0x7f0000000240), r2) r7 = socket$unix(0x1, 0x5, 0x0) ioctl$sock_SIOCGIFINDEX(r7, 0x8933, &(0x7f00000000c0)={'veth0_macvtap\x00', 0x0}) r9 = socket(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r9, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000300)=@newqdisc={0x88, 0x24, 0xf0b, 0x70bd26, 0x0, {0x0, 0x0, 0x0, r8, {0x0, 0xffff}, {0xffff, 0xffff}}, [@qdisc_kind_options=@q_mqprio={{0xb}, {0x58, 0x2, {{0x1, [], 0x0, [0x1, 0x2, 0xfffe, 0x0, 0x0, 0x0, 0x0, 0x8, 0x0, 0x5c4, 0x8000, 0x0, 0x0, 0x3dc], [0x0, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1000]}}}}]}, 0x88}}, 0x20000000) r10 = socket(0x400000000010, 0x3, 0x0) sendmsg$nl_route_sched(r10, &(0x7f00000012c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000003c0)=@newqdisc={0x4c, 0x24, 0x4ee4e6a52ff56541, 0x70bd29, 0xfffbffff, {0x0, 0x0, 0x0, r8, {0x0, 0x8}, {0xffff, 0xffff}, {0xc, 0xfff3}}, [@qdisc_kind_options=@q_taprio={{0xb}, {0x1c, 0x2, [@TCA_TAPRIO_ATTR_SCHED_ENTRY_LIST={0x10, 0x2, 0x0, 0x1, [{0xc, 0x1, 0x0, 0x1, [@TCA_TAPRIO_SCHED_ENTRY_INTERVAL={0x8, 0x4, 0x8001}]}]}, @TCA_TAPRIO_ATTR_SCHED_CLOCKID={0x8}]}}]}, 0x4c}, 0x1, 0x0, 0x0, 0x40001}, 0x10) r11 = syz_genetlink_get_family_id$netlbl_cipso(&(0x7f00000004c0), 0xffffffffffffffff) bpf$MAP_CREATE(0x0, &(0x7f0000000680)=ANY=[@ANYBLOB="0c000000040000000400", @ANYBLOB="355971487ebf5d07834c488a32231e3fc77b88f34442cc0ba9e0c9929ae7e62bfa1c68db3f6c2bf3cc85b5914fe71489906d1e9a759fb1718174462b56123bf57a2b7add1cdf1f88ce8721c7d95f10d6072c26e27cdea92f4d629bacbd20b1b8548cd0f554948f4d7bb950261340a6788e9f338c4560ba8a3c09ca2401530b5f8d", @ANYBLOB="00000000000000000000000000000000000000009e492a626a68033b16732db03e94f9f5692794296197ee5ec6be3d2562e271f31fb0ee0d81d0e9dc24df7108a001171c4415dc8f9a11436a9005da29fcd7a09602c78415b5864bf8051b9625d013cafc6935fe3c08e10ba15f9685f02e6f05ae883f15a0a3b02a26149dd50a52ffd6591c966bf7a8ed19c1ae2be066fa553a00a4c7607e12c2e1b8352d44302f346a10cc67cf3316ad8dfd7568130eb02f9d1a1941d13dbf491347112b2fe8275c95a7b6bc75a7deb2f3b23d1305f4f651ea9de1324ce9d84caffd3bbda96062716bbdd595d1", @ANYRESDEC=r8, @ANYRES32=r11, @ANYRESHEX=r6], 0x50) sendmsg$MPTCP_PM_CMD_DEL_ADDR(0xffffffffffffffff, &(0x7f00000003c0)={&(0x7f0000000180)={0x10, 0x0, 0x0, 0x40000000}, 0xc, &(0x7f0000000380)={&(0x7f0000000300)={0x58, r1, 0x8, 0x70bd25, 0x25dfdbfd, {}, [@MPTCP_PM_ATTR_TOKEN={0x8}, @MPTCP_PM_ATTR_ADDR={0x2c, 0x1, 0x0, 0x1, [@MPTCP_PM_ADDR_ATTR_IF_IDX={0x8, 0x7, r8}, @MPTCP_PM_ADDR_ATTR_ID={0x5, 0x2, 0x10}, @MPTCP_PM_ADDR_ATTR_PORT={0x6, 0x5, 0x4e24}, @MPTCP_PM_ADDR_ATTR_FLAGS={0x8, 0x6, 0x7}, @MPTCP_PM_ADDR_ATTR_ADDR4={0x8, 0x3, @multicast1}]}, @MPTCP_PM_ATTR_TOKEN={0x8, 0x4, 0x5000000}, @MPTCP_PM_ATTR_SUBFLOWS={0x8}]}, 0x58}, 0x1, 0x0, 0x0, 0x4000841}, 0x1) bpf$MAP_LOOKUP_ELEM(0x1, &(0x7f00000001c0)={0xffffffffffffffff, 0x0, 0x0}, 0x20) r12 = openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0) ioctl$TUNSETIFF(r12, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x7101}) socket(0x400000000010, 0x3, 0x0) 419.416006ms ago: executing program 1 (id=2457): r0 = socket(0x6, 0x800, 0x1) setsockopt$packet_tx_ring(r0, 0x10f, 0x87, &(0x7f0000000040)=@req3={0x80000000}, 0xfeda) listen(r0, 0x0) r1 = socket(0x1e, 0x805, 0x0) sendmsg$tipc(r1, &(0x7f0000000080)={&(0x7f0000000100)=@name, 0x10, 0x0}, 0x0) mmap(&(0x7f0000001000/0xc00000)=nil, 0xc00000, 0x2000004, 0x3b071, 0xffffffffffffffff, 0x0) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000640)={0x1c, 0xb, &(0x7f0000000380)=ANY=[@ANYBLOB="180500000000000000000000000000001800000020696c2500000000002020207b0af8ff00000000bd510000000000000701000000feffffb702000008000000b70300000000000085000000b300000095"], &(0x7f0000000180)='GPL\x00', 0x4, 0xde, &(0x7f0000003e40)=""/222, 0x41100, 0x73}, 0x94) setsockopt$packet_tx_ring(r1, 0x10f, 0x87, &(0x7f00000000c0)=@req3={0x80000000, 0x0, 0x2}, 0x1c) accept4$bt_l2cap(r0, &(0x7f00000001c0)={0x1f, 0x0, @fixed}, &(0x7f0000000200)=0xe, 0x800) accept4$nfc_llcp(r0, 0x0, 0x0, 0x0) sendmsg$tipc(r1, &(0x7f0000000500)={&(0x7f0000000000)=@nameseq={0x1e, 0x1, 0x2, {0x41, 0x0, 0x1}}, 0x10, 0x0, 0x0, 0x0, 0x0, 0x810}, 0x40801) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000440)={0x11, 0x13, 0x0, &(0x7f0000000000)='GPL\x00', 0xf}, 0x94) 171.832828ms ago: executing program 7 (id=2458): sendmmsg$inet(0xffffffffffffffff, 0x0, 0x0, 0x0) r0 = socket$nl_netfilter(0x10, 0x3, 0xc) unshare(0x400) r1 = socket$packet(0x11, 0x3, 0x300) bpf$MAP_CREATE(0x0, &(0x7f0000000340)=@base={0x11, 0x4, 0x4, 0x40000c}, 0x50) ioctl$TUNSETQUEUE(0xffffffffffffffff, 0x400454d9, &(0x7f0000000d80)={'veth1_to_batadv\x00'}) r2 = socket$inet_udp(0x2, 0x2, 0x0) setsockopt$SO_TIMESTAMPING(r2, 0x1, 0x25, &(0x7f0000000200)=0x474c, 0x4) bind$inet(r2, &(0x7f00000001c0)={0x2, 0x0, @local}, 0x10) connect$inet(r2, &(0x7f0000000480)={0x2, 0x0, @multicast1}, 0x10) sendmmsg(r2, &(0x7f0000007fc0), 0x800001d, 0x0) setsockopt$inet_int(r2, 0x0, 0xc, &(0x7f0000000040)=0xfffffffc, 0x4) setsockopt$inet_int(r2, 0x0, 0x12, &(0x7f0000000180)=0x101, 0x4) recvmmsg(r2, &(0x7f0000000340)=[{{0x0, 0x0, 0x0, 0x0, &(0x7f00000002c0)=""/19, 0x13}, 0x9}], 0x1, 0x45833af92e4b38be, 0x0) ioctl$ifreq_SIOCGIFINDEX_batadv_mesh(r1, 0x8933, &(0x7f0000000080)={'batadv0\x00', 0x0}) syz_emit_ethernet(0x2a, &(0x7f0000000100)={@link_local={0x1, 0x80, 0xc2, 0x0, 0x0, 0xe}, @random="72b400000059", @void, {@arp={0x806, @ether_ipv4={0x1, 0x800, 0x6, 0x4, 0x2, @dev={'\xaa\xaa\xaa\xaa\xaa', 0x13}, @remote, @dev={'\xaa\xaa\xaa\xaa\xaa', 0x14}, @remote}}}}, 0x0) syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) sendto$packet(r1, &(0x7f0000000100)="f257a8ea7bc273dfaeab96850806", 0x2a, 0x0, &(0x7f0000000200)={0x11, 0x0, r3, 0x1, 0x0, 0x6, @link_local}, 0x14) r4 = socket$inet6(0xa, 0x2, 0x0) bind$inet6(r4, 0x0, 0x0) r5 = syz_init_net_socket$802154_dgram(0x24, 0x2, 0x0) bind$802154_dgram(r5, &(0x7f0000000040)={0x24, @long={0x3, 0x0, {0xaaaaaaaaaaaa0102}}}, 0x14) connect$802154_dgram(r5, &(0x7f0000000240)={0x24, @short={0x2, 0x2}}, 0x14) sendmsg$NFT_BATCH(r0, &(0x7f0000000b00)={&(0x7f00000002c0)={0x10, 0x0, 0x0, 0x8}, 0xc, &(0x7f0000000ac0)={&(0x7f0000000380)={{0x14, 0x10, 0x1, 0x0, 0x0, {0x3}}, [@NFT_MSG_DELSET={0x1ac, 0xb, 0xa, 0x3, 0x0, 0x0, {0x0, 0x0, 0x7}, [@NFTA_SET_DESC={0x154, 0x9, 0x0, 0x1, [@NFTA_SET_DESC_CONCAT={0x60, 0x2, 0x0, 0x1, [{0x24, 0x1, 0x0, 0x1, [@NFTA_SET_FIELD_LEN={0x8, 0x1, 0x1, 0x0, 0x2}, @NFTA_SET_FIELD_LEN={0x8, 0x1, 0x1, 0x0, 0xe}, @NFTA_SET_FIELD_LEN={0x8, 0x1, 0x1, 0x0, 0x667}, @NFTA_SET_FIELD_LEN={0x8, 0x1, 0x1, 0x0, 0xfff}]}, {0x2c, 0x1, 0x0, 0x1, [@NFTA_SET_FIELD_LEN={0x8, 0x1, 0x1, 0x0, 0x81}, @NFTA_SET_FIELD_LEN={0x8, 0x1, 0x1, 0x0, 0x56}, @NFTA_SET_FIELD_LEN={0x8}, @NFTA_SET_FIELD_LEN={0x8, 0x1, 0x1, 0x0, 0xb3}, @NFTA_SET_FIELD_LEN={0x8, 0x1, 0x1, 0x0, 0xe}]}, {0xc, 0x1, 0x0, 0x1, [@NFTA_SET_FIELD_LEN={0x8, 0x1, 0x1, 0x0, 0x3}]}]}, @NFTA_SET_DESC_CONCAT={0xb4, 0x2, 0x0, 0x1, [{0x24, 0x1, 0x0, 0x1, [@NFTA_SET_FIELD_LEN={0x8, 0x1, 0x1, 0x0, 0x3}, @NFTA_SET_FIELD_LEN={0x8, 0x1, 0x1, 0x0, 0x4}, @NFTA_SET_FIELD_LEN={0x8, 0x1, 0x1, 0x0, 0x10}, @NFTA_SET_FIELD_LEN={0x8, 0x1, 0x1, 0x0, 0x7fffffff}]}, {0x2c, 0x1, 0x0, 0x1, [@NFTA_SET_FIELD_LEN={0x8, 0x1, 0x1, 0x0, 0x8}, @NFTA_SET_FIELD_LEN={0x8, 0x1, 0x1, 0x0, 0x9}, @NFTA_SET_FIELD_LEN={0x8, 0x1, 0x1, 0x0, 0x9}, @NFTA_SET_FIELD_LEN={0x8, 0x1, 0x1, 0x0, 0x8}, @NFTA_SET_FIELD_LEN={0x8, 0x1, 0x1, 0x0, 0x5}]}, {0x4}, {0x2c, 0x1, 0x0, 0x1, [@NFTA_SET_FIELD_LEN={0x8, 0x1, 0x1, 0x0, 0x9}, @NFTA_SET_FIELD_LEN={0x8, 0x1, 0x1, 0x0, 0x9}, @NFTA_SET_FIELD_LEN={0x8, 0x1, 0x1, 0x0, 0x20000000}, @NFTA_SET_FIELD_LEN={0x8, 0x1, 0x1, 0x0, 0xf}, @NFTA_SET_FIELD_LEN={0x8, 0x1, 0x1, 0x0, 0xe5e}]}, {0x24, 0x1, 0x0, 0x1, [@NFTA_SET_FIELD_LEN={0x8, 0x1, 0x1, 0x0, 0x262}, @NFTA_SET_FIELD_LEN={0x8, 0x1, 0x1, 0x0, 0x401}, @NFTA_SET_FIELD_LEN={0x8, 0x1, 0x1, 0x0, 0x3}, @NFTA_SET_FIELD_LEN={0x8, 0x1, 0x1, 0x0, 0x6}]}, {0xc, 0x1, 0x0, 0x1, [@NFTA_SET_FIELD_LEN={0x8, 0x1, 0x1, 0x0, 0x1}]}]}, @NFTA_SET_DESC_CONCAT={0x34, 0x2, 0x0, 0x1, [{0x1c, 0x1, 0x0, 0x1, [@NFTA_SET_FIELD_LEN={0x8, 0x1, 0x1, 0x0, 0xc904}, @NFTA_SET_FIELD_LEN={0x8, 0x1, 0x1, 0x0, 0x1}, @NFTA_SET_FIELD_LEN={0x8, 0x1, 0x1, 0x0, 0x2}]}, {0x14, 0x1, 0x0, 0x1, [@NFTA_SET_FIELD_LEN={0x8, 0x1, 0x1, 0x0, 0xa2}, @NFTA_SET_FIELD_LEN={0x8, 0x1, 0x1, 0x0, 0x5}]}]}, @NFTA_SET_DESC_SIZE={0x8, 0x1, 0x1, 0x0, 0x1}]}, @NFTA_SET_KEY_LEN={0x8, 0x5, 0x1, 0x0, 0x39}, @NFTA_SET_POLICY={0x8, 0x8, 0x1, 0x0, 0x1}, @NFTA_SET_NAME={0x9, 0x2, 'syz2\x00'}, @NFTA_SET_EXPR={0x28, 0x11, 0x0, 0x1, @nat={{0x8}, @val={0x1c, 0x2, 0x0, 0x1, [@NFTA_NAT_FLAGS={0x8, 0x7, 0x1, 0x0, 0x4}, @NFTA_NAT_FLAGS={0x8, 0x7, 0x1, 0x0, 0x16}, @NFTA_NAT_REG_ADDR_MIN={0x8, 0x3, 0x1, 0x0, 0x3}]}}}]}, @NFT_MSG_NEWRULE={0x128, 0x6, 0xa, 0x301, 0x0, 0x0, {0xa, 0x0, 0x2}, [@NFTA_RULE_EXPRESSIONS={0x114, 0x4, 0x0, 0x1, [{0xc, 0x1, 0x0, 0x1, @ct={{0x7}, @void}}, {0x28, 0x1, 0x0, 0x1, @flow_offload={{0x11}, @val={0x10, 0x2, 0x0, 0x1, [@NFTA_FLOW_TABLE_NAME={0x9, 0x1, 'syz0\x00'}]}}}, {0x10, 0x1, 0x0, 0x1, @tunnel={{0xb}, @void}}, {0x2c, 0x1, 0x0, 0x1, @reject={{0xb}, @val={0x1c, 0x2, 0x0, 0x1, [@NFTA_REJECT_TYPE={0x8, 0x1, 0x1, 0x0, 0x2}, @NFTA_REJECT_TYPE={0x8}, @NFTA_REJECT_TYPE={0x8}]}}}, {0x38, 0x1, 0x0, 0x1, @dup_ipv4={{0x8}, @val={0x2c, 0x2, 0x0, 0x1, [@NFTA_DUP_SREG_DEV={0x8, 0x2, 0x1, 0x0, 0xe}, @NFTA_DUP_SREG_ADDR={0x8, 0x1, 0x1, 0x0, 0x13}, @NFTA_DUP_SREG_ADDR={0x8}, @NFTA_DUP_SREG_ADDR={0x8}, @NFTA_DUP_SREG_ADDR={0x8, 0x1, 0x1, 0x0, 0x11}]}}}, {0xc, 0x1, 0x0, 0x1, @dup_ipv4={{0x8}, @void}}, {0x10, 0x1, 0x0, 0x1, @bitwise={{0xc}, @void}}, {0x20, 0x1, 0x0, 0x1, @dup_ipv4={{0x8}, @val={0x14, 0x2, 0x0, 0x1, [@NFTA_DUP_SREG_DEV={0x8, 0x2, 0x1, 0x0, 0x9}, @NFTA_DUP_SREG_DEV={0x8, 0x2, 0x1, 0x0, 0xb}]}}}, {0x2c, 0x1, 0x0, 0x1, @lookup={{0xb}, @val={0x1c, 0x2, 0x0, 0x1, [@NFTA_LOOKUP_SET_ID={0x8}, @NFTA_LOOKUP_DREG={0x8, 0x3, 0x1, 0x0, 0x10}, @NFTA_LOOKUP_SREG={0x8, 0x2, 0x1, 0x0, 0xa}]}}}]}]}, @NFT_MSG_NEWOBJ={0x20, 0x12, 0xa, 0x201, 0x0, 0x0, {0x0, 0x0, 0x9}, @NFT_OBJECT_CT_TIMEOUT=@NFTA_OBJ_NAME={0x9, 0x2, 'syz0\x00'}}, @NFT_MSG_NEWRULE={0x154, 0x6, 0xa, 0x801, 0x0, 0x0, {0x3}, [@NFTA_RULE_HANDLE={0xc, 0x3, 0x1, 0x0, 0x3}, @NFTA_RULE_CHAIN_ID={0x8, 0xb, 0x1, 0x0, 0x3}, @NFTA_RULE_CHAIN_ID={0x8, 0xb, 0x1, 0x0, 0x4}, @NFTA_RULE_HANDLE={0xc, 0x3, 0x1, 0x0, 0x5}, @NFTA_RULE_EXPRESSIONS={0x110, 0x4, 0x0, 0x1, [{0x2c, 0x1, 0x0, 0x1, @numgen={{0xb}, @val={0x1c, 0x2, 0x0, 0x1, [@NFTA_NG_OFFSET={0x8, 0x4, 0x1, 0x0, 0x1}, @NFTA_NG_DREG={0x8, 0x1, 0x1, 0x0, 0xb}, @NFTA_NG_DREG={0x8, 0x1, 0x1, 0x0, 0x17}]}}}, {0x24, 0x1, 0x0, 0x1, @tproxy={{0xb}, @val={0x14, 0x2, 0x0, 0x1, [@NFTA_TPROXY_REG_ADDR={0x8, 0x2, 0x1, 0x0, 0x9}, @NFTA_TPROXY_REG_PORT={0x8, 0x3, 0x1, 0x0, 0x17}]}}}, {0x10, 0x1, 0x0, 0x1, @objref={{0xb}, @void}}, {0x10, 0x1, 0x0, 0x1, @quota={{0xa}, @void}}, {0x40, 0x1, 0x0, 0x1, @inner={{0xa}, @val={0x30, 0x2, 0x0, 0x1, [@NFTA_INNER_HDRSIZE={0x8, 0x4, 0x1, 0x0, 0x34}, @NFTA_INNER_EXPR={0x14, 0x5, 0x0, 0x1, @immediate={{0xe}, @void}}, @NFTA_INNER_HDRSIZE={0x8, 0x4, 0x1, 0x0, 0x17}, @NFTA_INNER_NUM={0x8}]}}}, {0x40, 0x1, 0x0, 0x1, @nat={{0x8}, @val={0x34, 0x2, 0x0, 0x1, [@NFTA_NAT_REG_ADDR_MIN={0x8}, @NFTA_NAT_REG_ADDR_MAX={0x8, 0x4, 0x1, 0x0, 0x8}, @NFTA_NAT_TYPE={0x8, 0x1, 0x1, 0x0, 0x1}, @NFTA_NAT_TYPE={0x8}, @NFTA_NAT_REG_ADDR_MIN={0x8, 0x3, 0x1, 0x0, 0x15}, @NFTA_NAT_TYPE={0x8}]}}}, {0xc, 0x1, 0x0, 0x1, @fwd={{0x8}, @void}}, {0x10, 0x1, 0x0, 0x1, @objref={{0xb}, @void}}]}, @NFTA_RULE_ID={0x8, 0x9, 0x1, 0x0, 0x3}]}, @NFT_MSG_DELFLOWTABLE={0x2c, 0x18, 0xa, 0x201, 0x0, 0x0, {0xa, 0x0, 0x4}, [@NFTA_FLOWTABLE_HANDLE={0xc, 0x5, 0x1, 0x0, 0x3}, @NFTA_FLOWTABLE_NAME={0x9, 0x2, 'syz2\x00'}]}, @NFT_MSG_NEWTABLE={0xf0, 0x0, 0xa, 0x301, 0x0, 0x0, {0x3, 0x0, 0x1}, [@NFTA_TABLE_USERDATA={0x5e, 0x6, "22c9db574757b5c1e0da8bb9e9e2a288b2a16fb74af0ce35769b21dc8d48a7d474efdd00594fccdf611d81e73444b1b1d3786384e16107ba7ae69be678cb7c0a65fdcffc29affa9c4d303a16808dce62a3e9aa79b2c241e0f32c"}, @NFTA_TABLE_FLAGS={0x8}, @NFTA_TABLE_NAME={0x9, 0x1, 'syz1\x00'}, @NFTA_TABLE_USERDATA={0x4e, 0x6, "f66c490ee119820f7f0eba1e74784fe7719a4155d5a9e9d50cb4b7c505884e2669b8ea247a6090744122c9ee7270a4204443e90ad66db804a7248544372b21d13e821545334e2e4e2224"}, @NFTA_TABLE_FLAGS={0x8, 0x2, 0x1, 0x0, 0x2}, @NFTA_TABLE_FLAGS={0x8, 0x2, 0x1, 0x0, 0x3}, @NFTA_TABLE_FLAGS={0x8, 0x2, 0x1, 0x0, 0x1}]}, @NFT_MSG_NEWCHAIN={0xa8, 0x3, 0xa, 0x3, 0x0, 0x0, {0x0, 0x0, 0x8}, [@NFTA_CHAIN_TYPE={0xa, 0x7, 'route\x00'}, @NFTA_CHAIN_ID={0x8, 0xb, 0x1, 0x0, 0x3}, @NFTA_CHAIN_HANDLE={0xc, 0x2, 0x1, 0x0, 0x3}, @NFTA_CHAIN_POLICY={0x8, 0x5, 0x1, 0x0, 0xfffffffffffffffb}, @NFTA_CHAIN_HOOK={0x6c, 0x4, 0x0, 0x1, [@NFTA_HOOK_HOOKNUM={0x8, 0x1, 0x1, 0x0, 0x3}, @NFTA_HOOK_HOOKNUM={0x8}, @NFTA_HOOK_DEV={0x14, 0x3, 'pimreg\x00'}, @NFTA_HOOK_DEV={0x14, 0x3, 'veth1_vlan\x00'}, @NFTA_HOOK_DEV={0x14, 0x3, 'vlan0\x00'}, @NFTA_HOOK_PRIORITY={0x8, 0x2, 0x1, 0x0, 0x560590a0}, @NFTA_HOOK_DEV={0x14, 0x3, 'veth0_to_bond\x00'}]}]}], {0x14, 0x11, 0x1, 0x0, 0x0, {0x2}}}, 0x634}, 0x1, 0x0, 0x0, 0x20064041}, 0x4002000) r6 = socket$nl_generic(0x10, 0x3, 0x10) r7 = syz_genetlink_get_family_id$nl80211(&(0x7f00000000c0), r6) r8 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r8, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000dc0)=ANY=[@ANYBLOB="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"], 0xb4}}, 0x850) sendmsg$IPSET_CMD_SWAP(r8, &(0x7f0000000d40)={&(0x7f0000000c40)={0x10, 0x0, 0x0, 0x8000000}, 0xc, &(0x7f0000000d00)={&(0x7f0000000c80)={0x3c, 0x6, 0x6, 0x301, 0x0, 0x0, {0xa, 0x0, 0x6}, [@IPSET_ATTR_PROTOCOL={0x5}, @IPSET_ATTR_SETNAME={0x9, 0x2, 'syz1\x00'}, @IPSET_ATTR_PROTOCOL={0x5}, @IPSET_ATTR_SETNAME={0x9, 0x2, 'syz0\x00'}]}, 0x3c}, 0x1, 0x0, 0x0, 0x4000000}, 0x4000000) sendmsg$NL80211_CMD_SET_PMK(r6, &(0x7f0000000240)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x10000}, 0xc, &(0x7f0000000200)={&(0x7f0000000140)=ANY=[@ANYBLOB="b8000000", @ANYRES16=r7, @ANYBLOB="00022abd7000fedb55257b0000000a00060008021100000000001400fe009366e6eac675742267140bcddd96de0214000201d25425da6082c95cfc570119b4d7dbd11400fe009a451ced3afa7117bb8d150351dae8991400fe00ff70e65181979a0f37053ea04894a5701400fe0013fa63950f5e33b3e95a3c36e06a99600a000600ffffffffffff0000147bdc20acd1858e1457233c702a72e498"], 0xb8}, 0x1, 0x0, 0x0, 0x80}, 0x20008880) 0s ago: executing program 3 (id=2459): r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000640)=ANY=[@ANYBLOB="0600000004000000fd0f00004200000000000000", @ANYRES32, @ANYBLOB='\x00'/20, @ANYRES32=0x0, @ANYRES32, @ANYBLOB='\x00'/28], 0x50) bpf$MAP_LOOKUP_ELEM(0x1, &(0x7f0000000600)={r0, &(0x7f0000000ac0)="c876f1c31ef0831156adb791103284ee9082639d20fe5145d5fcefcc79fd468e59053a5fd62c846579af10d9cdc9e540f622eb8ac161d95dca82368b8c06caae9015a30655971c7f0df6b1c67125fb668bb8b47a915183e21633cbe147f276fe29d5c033958ea62e64230816", &(0x7f00000009c0)=""/191}, 0x20) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f00000003c0)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000140)=@gettaction={0x14, 0x32, 0x200, 0x70bd25, 0x25dfdbfe}, 0x14}, 0x1, 0x0, 0x0, 0x40000}, 0x2004c8d8) r1 = socket(0x40000000015, 0x5, 0x0) sendmsg$NL80211_CMD_NEW_MPATH(r1, &(0x7f00000005c0)={&(0x7f0000000340)={0x10, 0x0, 0x0, 0x80000020}, 0xc, &(0x7f0000000580)={0x0}, 0x1, 0x0, 0x0, 0x20000000}, 0x4000000) sendmsg$nl_route_sched(r1, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000180)=@newqdisc={0x24, 0x24, 0x1, 0x70bd2a, 0x25dfdbfe, {0x0, 0x0, 0x0, 0x0, {}, {0xffff, 0xffff}, {0x5}}}, 0x24}, 0x1, 0x0, 0x0, 0x40}, 0x0) r2 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r2, &(0x7f000000c2c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000340)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a28000000000a0101000000005e1affd5020000000900010073797a300000000008000240000000032c000000030a01030000e6ff00000000020000000900010073797a30000000000900030073797a320000000014000000110001"], 0x7c}}, 0x0) sendmsg$NFT_BATCH(r2, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000003c0)=ANY=[@ANYBLOB="1400000010000100000000000000ff000000000a64000000060a0b0400000000000000000200000038000480340001800c0001007061796c6f6164002400028008000340000000000800024000000000080001400000001508000440000000020900010073797a30000000000900020073797a3200000000140000001100010000000000000000000000000a"], 0x8c}}, 0x0) ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f00000001c0)={'nr0\x00', 0x0}) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000100)=@getchain={0x2c, 0x66, 0x300, 0x70bd2b, 0x25dfdbfd, {0x0, 0x0, 0x0, r3, {0xc}, {0xc, 0xd}, {0xfff2, 0x3}}, [{0x8, 0xb, 0x7}]}, 0x2c}}, 0x20004055) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000000080)={0x0, 0x48}, 0x1, 0x0, 0x0, 0x10}, 0x0) r4 = socket(0x10, 0x3, 0x0) ioctl$sock_SIOCETHTOOL(r4, 0x89f0, &(0x7f0000000000)={'pimreg1\x00', &(0x7f0000000100)=@ethtool_ringparam={0x12, 0x0, 0x20040001, 0x4, 0x2, 0x8, 0x2000000, 0x0, 0x4}}) r5 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r5, &(0x7f0000000000)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f00000018c0)={0x28, 0x41, 0x107, 0xfffffefe, 0x0, {0x1, 0x7c}, [@nested={0x4, 0x142}, @nested={0xc, 0x1, 0x0, 0x1, [@typed={0x8, 0x3, 0x0, 0x0, @fd=r5}]}, @nested={0x4, 0x2}]}, 0x28}, 0x1, 0x0, 0x0, 0x48815}, 0xc000) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000100)=ANY=[@ANYBLOB="500000001000010425bbe5ad600027842cf52300", @ANYRES32=0x0, @ANYBLOB="0300000000000000280012800a00010076786c616e00"], 0x50}, 0x1, 0x0, 0x0, 0x13d33d22e8a65c15}, 0x4008840) r6 = socket$netlink(0x10, 0x3, 0x0) sendmmsg(r6, &(0x7f00000002c0), 0x40000000000009f, 0x0) kernel console output (not intermixed with test programs): T47] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 304.244335][ T8029] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 304.585027][ T9271] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 305.354390][ T8027] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 305.464723][ T8027] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 305.704862][ T9271] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 306.455320][ T8029] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 306.745939][ C0] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 306.804277][ T8027] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 308.654516][ T47] net_ratelimit: 2 callbacks suppressed [ 308.654535][ T47] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 308.669173][ T8027] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 309.024767][ T47] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 309.764297][ T1155] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 310.124309][ T47] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 310.864301][ T47] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 311.225523][ T1155] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 311.233717][ T47] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 311.964514][ T1155] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 312.334357][ T8029] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 314.164311][ T1155] net_ratelimit: 2 callbacks suppressed [ 314.164330][ T1155] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 314.425557][ T1155] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 314.534332][ T8029] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 315.274503][ T47] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 315.634476][ T47] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 316.375323][ T47] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 316.734476][ T47] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 316.986384][ T9271] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 316.988657][ T1319] ieee802154 phy0 wpan0: encryption failed: -22 [ 317.474471][ T47] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 317.625549][ T9809] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 319.674334][ T1155] net_ratelimit: 3 callbacks suppressed [ 319.674352][ T1155] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 320.034362][ T8020] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 320.185366][ T8020] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 320.784310][ T8027] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 321.134366][ T8027] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 321.464388][ C1] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 321.884360][ T8020] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 322.105782][ C1] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 322.116837][ T47] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 322.234449][ T8020] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 325.184362][ T8027] net_ratelimit: 4 callbacks suppressed [ 325.184381][ T8027] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 325.545081][ T9271] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 325.944930][ T8027] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 326.294400][ T8027] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 326.644511][ T47] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 327.394365][ T9271] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 327.744479][ T47] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 327.864881][ T8029] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 328.494294][ T9271] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 328.844428][ T8020] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 329.784371][ C0] ip6_tunnel: ip6gre2 xmit: Local address not yet configured! [ 330.132437][T10344] sctp: [Deprecated]: syz.3.1171 (pid 10344) Use of int in max_burst socket option deprecated. [ 330.132437][T10344] Use struct sctp_assoc_value instead [ 330.598944][T10363] netlink: 12 bytes leftover after parsing attributes in process `syz.4.1173'. [ 330.647984][T10363] netlink: 4 bytes leftover after parsing attributes in process `syz.4.1173'. [ 330.714393][ T47] net_ratelimit: 2 callbacks suppressed [ 330.714412][ T47] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 331.077378][ T8027] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 331.091496][ T8020] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 331.130283][T10383] netlink: 52 bytes leftover after parsing attributes in process `syz.0.1179'. [ 331.146686][T10379] netlink: 8 bytes leftover after parsing attributes in process `syz.4.1177'. [ 331.176616][T10383] netlink: 4 bytes leftover after parsing attributes in process `syz.0.1179'. [ 331.196667][T10383] netlink: 52 bytes leftover after parsing attributes in process `syz.0.1179'. [ 331.207069][T10383] netlink: 4 bytes leftover after parsing attributes in process `syz.0.1179'. [ 331.217665][T10383] netlink: 52 bytes leftover after parsing attributes in process `syz.0.1179'. [ 331.219501][T10392] xt_CONNSECMARK: invalid mode: 0 [ 331.635995][T10410] netlink: 'syz.0.1187': attribute type 3 has an invalid length. [ 331.663142][T10410] netlink: 'syz.0.1187': attribute type 3 has an invalid length. [ 331.672069][T10410] netlink: 8 bytes leftover after parsing attributes in process `syz.0.1187'. [ 331.887932][ T8020] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 331.891759][T10419] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 331.915855][T10419] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 331.937742][T10416] syzkaller0: entered promiscuous mode [ 331.945273][T10416] syzkaller0: entered allmulticast mode [ 331.955762][T10423] netlink: 'syz.4.1192': attribute type 3 has an invalid length. [ 332.234892][ T8020] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 332.259757][T10433] netlink: 3 bytes leftover after parsing attributes in process `syz.5.1196'. [ 332.984556][ T8027] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 333.009029][ T8027] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 333.365025][ T8020] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 333.829600][T10502] batadv_slave_1: entered promiscuous mode [ 333.903117][T10502] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 333.921652][T10502] batadv_slave_1 (unregistering): left promiscuous mode [ 333.929048][T10502] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 334.000638][T10505] syzkaller0: entered promiscuous mode [ 334.007359][T10505] syzkaller0: entered allmulticast mode [ 334.165785][ T47] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 334.298049][T10517] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 334.615431][ T5636] block nbd1: Receive control failed (result -32) [ 334.623552][ T50] block nbd1: Receive control failed (result -32) [ 335.015474][T10548] hsr_slave_1 (unregistering): left promiscuous mode [ 335.036269][T10560] netlink: 'syz.5.1229': attribute type 20 has an invalid length. [ 335.060685][T10560] netlink: 'syz.5.1229': attribute type 21 has an invalid length. [ 335.103398][T10554] netdevsim netdevsim0 netdevsim0: entered promiscuous mode [ 335.111751][T10554] netdevsim netdevsim0 netdevsim0: left promiscuous mode [ 335.291535][T10571] netlink: 'syz.1.1231': attribute type 5 has an invalid length. [ 335.470272][T10571] ip6erspan0: entered allmulticast mode [ 335.513749][T10589] dvmrp1: tun_chr_ioctl cmd 1074025677 [ 335.530582][T10589] dvmrp1: linktype set to 776 [ 335.549546][T10593] dvmrp1: tun_chr_ioctl cmd 1074025677 [ 335.566219][T10593] dvmrp1: linktype set to 776 [ 335.609319][T10581] lo speed is unknown, defaulting to 1000 [ 335.620171][T10581] lo speed is unknown, defaulting to 1000 [ 335.628899][T10581] lo speed is unknown, defaulting to 1000 [ 335.982087][ T9807] lo speed is unknown, defaulting to 1000 [ 335.989156][T10581] infiniband syz2: set down [ 335.997760][T10581] infiniband syz2: added lo [ 336.017151][T10581] smbdirect: ib_dev[syz2]: added: IB_CA max_fast_reg_page_list_len=512 device_cap_flags=0x1c001223c76 kernel_cap_flags=0x14 page_size_cap=0xfffff000 [ 336.033338][T10581] smbdirect: ib_dev[syz2]: num_ports=1 max_qp_rd_atom=128 max_qp_init_rd_atom=128 max_sgl_rd=0 max_sge_rd=32 max_cqe=32767 max_qp_wr=1048576 max_send_sge=32 max_recv_sge=32 [ 336.053732][T10581] smbdirect: ib_dev[syz2]PORT[1]: iwarp=0 ib=0 roce=1 v1=0 v2=1 core_cap_flags=0x803005 [ 336.133918][T10581] RDS/IB: syz2: added [ 336.139595][T10581] smc: adding ib device syz2 with port count 1 [ 336.148266][T10581] smc: ib device syz2 port 1 has no pnetid [ 336.161836][T10616] __nla_validate_parse: 15 callbacks suppressed [ 336.161851][T10616] netlink: 8 bytes leftover after parsing attributes in process `syz.5.1242'. [ 336.163757][ T9807] lo speed is unknown, defaulting to 1000 [ 336.187218][ T47] net_ratelimit: 3 callbacks suppressed [ 336.187236][ T47] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 336.222758][T10581] lo speed is unknown, defaulting to 1000 [ 336.425388][ T8020] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 336.677214][T10581] lo speed is unknown, defaulting to 1000 [ 336.689511][T10635] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 336.699322][ C0] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 336.711625][T10635] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 336.720830][ T8020] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 336.734175][ C1] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 336.744500][ T9270] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 336.824811][ T9807] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 336.851387][T10581] lo speed is unknown, defaulting to 1000 [ 336.981167][T10581] lo speed is unknown, defaulting to 1000 [ 337.111193][T10581] lo speed is unknown, defaulting to 1000 [ 337.239266][T10581] lo speed is unknown, defaulting to 1000 [ 337.463694][T10629] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 338.043714][T10575] nci: __nci_request: wait_for_completion_interruptible_timeout failed -512 [ 338.225262][T10649] netlink: 8 bytes leftover after parsing attributes in process `syz.5.1250'. [ 338.268308][T10649] netlink: 24 bytes leftover after parsing attributes in process `syz.5.1250'. [ 338.332997][T10651] syz_tun: entered allmulticast mode [ 338.361788][T10651] netlink: 4 bytes leftover after parsing attributes in process `syz.4.1252'. [ 338.439650][T10651] netlink: 'syz.4.1252': attribute type 9 has an invalid length. [ 338.452828][T10651] netlink: 'syz.4.1252': attribute type 6 has an invalid length. [ 338.466148][T10650] syz_tun: left allmulticast mode [ 338.980089][T10689] syzkaller1: entered promiscuous mode [ 338.983832][T10691] netlink: 8 bytes leftover after parsing attributes in process `syz.4.1264'. [ 338.999133][T10689] syzkaller1: entered allmulticast mode [ 338.999224][T10693] netlink: 8 bytes leftover after parsing attributes in process `syz.4.1264'. [ 339.110955][T10691] netlink: 'syz.4.1264': attribute type 4 has an invalid length. [ 339.126231][T10693] netlink: 'syz.4.1264': attribute type 4 has an invalid length. [ 339.137004][T10697] dvmrp0: entered allmulticast mode [ 339.339245][T10700] netlink: 28 bytes leftover after parsing attributes in process `syz.0.1267'. [ 339.522184][T10715] syzkaller0: entered promiscuous mode [ 339.529497][T10715] syzkaller0: entered allmulticast mode [ 339.565950][T10715] x_tables: ip6_tables: mh match: only valid for protocol 135 [ 339.888668][T10738] gre0: left promiscuous mode [ 339.900743][T10738] syz_tun: left promiscuous mode [ 340.002741][T10738] macvlan2: left promiscuous mode [ 340.021652][T10738] bond1: left promiscuous mode [ 340.057888][T10738] bridge4: left promiscuous mode [ 340.065624][T10738] bond2: left promiscuous mode [ 340.372452][T10755] netlink: 4 bytes leftover after parsing attributes in process `syz.3.1285'. [ 340.437158][T10756] netlink: 24 bytes leftover after parsing attributes in process `syz.4.1284'. [ 340.838558][T10772] netlink: 28 bytes leftover after parsing attributes in process `syz.4.1287'. [ 340.848847][T10776] syzkaller0: entered promiscuous mode [ 340.875060][T10776] syzkaller0: entered allmulticast mode [ 340.954956][T10772] PF_CAN: dropped non conform CAN XL skbuff: dev type 280, len 40 [ 341.218808][ T1155] net_ratelimit: 15 callbacks suppressed [ 341.218826][ T1155] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 341.267061][ T29] audit: type=1800 audit(1784094042.318:8): pid=10788 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.3.1293" name="r" dev="tmpfs" ino=1243 res=0 errno=0 [ 341.304507][ T8029] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 341.414620][T10795] __nla_validate_parse: 2 callbacks suppressed [ 341.414637][T10795] netlink: 20 bytes leftover after parsing attributes in process `syz.0.1295'. [ 341.743158][T10818] netlink: 8 bytes leftover after parsing attributes in process `syz.4.1302'. [ 341.880800][T10826] netlink: 8 bytes leftover after parsing attributes in process `syz.1.1305'. [ 341.985913][ T35] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 342.052808][T10836] netlink: 67 bytes leftover after parsing attributes in process `syz.3.1307'. [ 342.347668][ T1155] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 342.449077][T10861] netlink: 16 bytes leftover after parsing attributes in process `syz.5.1314'. [ 342.871750][T10878] netlink: 'syz.3.1319': attribute type 28 has an invalid length. [ 342.898615][T10878] netlink: 'syz.3.1319': attribute type 3 has an invalid length. [ 342.931084][T10878] netlink: 132 bytes leftover after parsing attributes in process `syz.3.1319'. [ 343.027397][T10883] x_tables: unsorted underflow at hook 2 [ 343.039758][T10883] x_tables: unsorted underflow at hook 2 [ 343.105307][ T8029] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 343.291280][T10900] syz_tun: entered promiscuous mode [ 343.316996][T10900] vlan2: entered promiscuous mode [ 343.333117][T10907] IPVS: Schedule: port zero only supported in persistent services, check your ipvs configuration [ 343.346409][T10907] IPVS: Schedule: port zero only supported in persistent services, check your ipvs configuration [ 343.358446][T10907] IPVS: Schedule: port zero only supported in persistent services, check your ipvs configuration [ 343.369776][T10907] IPVS: Schedule: port zero only supported in persistent services, check your ipvs configuration [ 343.383768][T10907] IPVS: Schedule: port zero only supported in persistent services, check your ipvs configuration [ 343.395659][T10907] IPVS: Schedule: port zero only supported in persistent services, check your ipvs configuration [ 343.410451][T10907] IPVS: Schedule: port zero only supported in persistent services, check your ipvs configuration [ 343.450405][T10907] IPVS: Schedule: port zero only supported in persistent services, check your ipvs configuration [ 343.474626][ T8027] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 343.510793][T10907] IPVS: Schedule: port zero only supported in persistent services, check your ipvs configuration [ 343.518040][T10914] netlink: 4 bytes leftover after parsing attributes in process `syz.5.1329'. [ 343.522049][T10907] IPVS: Schedule: port zero only supported in persistent services, check your ipvs configuration [ 343.543004][T10907] IPVS: Schedule: port zero only supported in persistent services, check your ipvs configuration [ 343.566826][T10907] IPVS: Schedule: port zero only supported in persistent services, check your ipvs configuration [ 343.580263][T10907] IPVS: Schedule: port zero only supported in persistent services, check your ipvs configuration [ 343.594358][T10907] IPVS: Schedule: port zero only supported in persistent services, check your ipvs configuration [ 343.606392][T10907] IPVS: Schedule: port zero only supported in persistent services, check your ipvs configuration [ 343.620549][T10907] IPVS: Schedule: port zero only supported in persistent services, check your ipvs configuration [ 343.632050][T10907] IPVS: Schedule: port zero only supported in persistent services, check your ipvs configuration [ 343.672986][T10907] IPVS: Schedule: port zero only supported in persistent services, check your ipvs configuration [ 343.699796][T10907] IPVS: Schedule: port zero only supported in persistent services, check your ipvs configuration [ 343.732023][T10907] IPVS: Schedule: port zero only supported in persistent services, check your ipvs configuration [ 343.749991][T10907] IPVS: Schedule: port zero only supported in persistent services, check your ipvs configuration [ 343.762854][T10907] IPVS: Schedule: port zero only supported in persistent services, check your ipvs configuration [ 343.813672][T10907] IPVS: Schedule: port zero only supported in persistent services, check your ipvs configuration [ 343.846539][T10907] IPVS: Schedule: port zero only supported in persistent services, check your ipvs configuration [ 343.858988][T10907] IPVS: Schedule: port zero only supported in persistent services, check your ipvs configuration [ 343.870793][ T8029] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 343.891020][T10907] IPVS: Schedule: port zero only supported in persistent services, check your ipvs configuration [ 343.923336][T10907] IPVS: Schedule: port zero only supported in persistent services, check your ipvs configuration [ 343.945899][T10907] IPVS: Schedule: port zero only supported in persistent services, check your ipvs configuration [ 343.964798][T10907] IPVS: Schedule: port zero only supported in persistent services, check your ipvs configuration [ 343.983786][T10907] IPVS: Schedule: port zero only supported in persistent services, check your ipvs configuration [ 344.006459][T10907] IPVS: Schedule: port zero only supported in persistent services, check your ipvs configuration [ 344.026597][T10907] IPVS: Schedule: port zero only supported in persistent services, check your ipvs configuration [ 344.056098][T10907] IPVS: Schedule: port zero only supported in persistent services, check your ipvs configuration [ 344.067633][T10907] IPVS: Schedule: port zero only supported in persistent services, check your ipvs configuration [ 344.079026][T10907] IPVS: Schedule: port zero only supported in persistent services, check your ipvs configuration [ 344.100447][T10907] IPVS: Schedule: port zero only supported in persistent services, check your ipvs configuration [ 344.112167][T10907] IPVS: Schedule: port zero only supported in persistent services, check your ipvs configuration [ 344.139404][T10907] IPVS: Schedule: port zero only supported in persistent services, check your ipvs configuration [ 344.154457][T10907] IPVS: Schedule: port zero only supported in persistent services, check your ipvs configuration [ 344.258177][ T1155] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 344.474474][T10943] 8021q: VLANs not supported on ip6tnl0 [ 344.512377][T10943] openvswitch: netlink: IP tunnel attribute has 8 unknown bytes. [ 344.541215][T10943] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 344.993194][T10965] 0ªî{X¹¦: left allmulticast mode [ 345.081758][T10977] SET target dimension over the limit! [ 345.257369][T10965] team_slave_0: left promiscuous mode [ 345.269363][T10965] team_slave_1: left promiscuous mode [ 345.486478][T10965] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 345.513634][T10965] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 345.574646][T10965] veth1_vlan: left allmulticast mode [ 345.668361][T10965] mac80211_hwsim hwsim6 wlan0: left promiscuous mode [ 345.677189][T10965] mac80211_hwsim hwsim6 wlan0: left allmulticast mode [ 345.775676][T10965] ipvlan2: left promiscuous mode [ 345.868180][T10997] workqueue: Failed to create a rescuer kthread for wq "bond1": -EINTR [ 345.869266][T10998] workqueue: Failed to create a rescuer kthread for wq "bond1": -EINTR [ 345.908020][ T35] netdevsim netdevsim3 eth0: unset [0, 0] type 1 family 0 port 8472 - 0 [ 345.977763][ T35] netdevsim netdevsim3 eth0: unset [1, 0] type 2 family 0 port 6081 - 0 [ 346.013534][ T35] netdevsim netdevsim3 eth1: unset [0, 0] type 1 family 0 port 8472 - 0 [ 346.055930][ T35] netdevsim netdevsim3 eth1: unset [1, 0] type 2 family 0 port 6081 - 0 [ 346.072074][ T35] netdevsim netdevsim3 eth2: unset [0, 0] type 1 family 0 port 8472 - 0 [ 346.101584][ T35] netdevsim netdevsim3 eth2: unset [1, 0] type 2 family 0 port 6081 - 0 [ 346.131473][ T35] netdevsim netdevsim3 eth3: unset [0, 0] type 1 family 0 port 8472 - 0 [ 346.174723][ T35] netdevsim netdevsim3 eth3: unset [1, 0] type 2 family 0 port 6081 - 0 [ 346.477306][ T35] net_ratelimit: 6 callbacks suppressed [ 346.477325][ T35] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 346.834705][ T8020] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 347.065768][ T35] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 347.189482][T11046] netlink: 4 bytes leftover after parsing attributes in process `syz.0.1363'. [ 347.550807][T11059] tipc: Bearer : already 2 bearers with priority 10 [ 347.571172][T11059] tipc: Bearer : trying with adjusted priority [ 347.585903][T11059] tipc: Enabling of bearer rejected, failed to enable media [ 347.604865][ T8020] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 347.707702][ C0] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 347.915099][T11067] ieee802154 phy0 wpan0: encryption failed: -22 [ 347.964640][ T9270] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 348.535933][T11096] netlink: 12 bytes leftover after parsing attributes in process `syz.1.1377'. [ 348.724293][ T8029] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 348.987891][ T9270] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 349.084528][ T8029] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 349.176326][T11112] IPVS: set_ctl: invalid protocol: 47 172.20.20.187:20003 [ 349.834681][ T8029] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 350.314485][T11087] gretap0: left allmulticast mode [ 350.651497][ T8029] netdevsim netdevsim4 netdevsim0: unset [0, 0] type 1 family 0 port 8472 - 0 [ 350.709267][ T8029] netdevsim netdevsim4 netdevsim0: unset [1, 0] type 2 family 0 port 6081 - 0 [ 350.740963][ T8029] netdevsim netdevsim4 netdevsim1: unset [0, 0] type 1 family 0 port 8472 - 0 [ 350.788791][ T8029] netdevsim netdevsim4 netdevsim1: unset [1, 0] type 2 family 0 port 6081 - 0 [ 350.878221][ T47] netdevsim netdevsim4 netdevsim2: unset [0, 0] type 1 family 0 port 8472 - 0 [ 350.909268][T11129] netlink: 'syz.1.1385': attribute type 21 has an invalid length. [ 350.927010][ T47] netdevsim netdevsim4 netdevsim2: unset [1, 0] type 2 family 0 port 6081 - 0 [ 350.951679][T11135] netlink: 12 bytes leftover after parsing attributes in process `syz.0.1386'. [ 350.962890][T11129] netlink: 132 bytes leftover after parsing attributes in process `syz.1.1385'. [ 350.975199][T11129] netlink: 'syz.1.1385': attribute type 1 has an invalid length. [ 350.989073][ T47] netdevsim netdevsim4 netdevsim3: unset [0, 0] type 1 family 0 port 8472 - 0 [ 351.006873][ T47] netdevsim netdevsim4 netdevsim3: unset [1, 0] type 2 family 0 port 6081 - 0 [ 351.021778][T11137] veth0: entered promiscuous mode [ 351.191117][T11135] 8021q: adding VLAN 0 to HW filter on device bond10 [ 351.213072][T11153] 8021q: adding VLAN 0 to HW filter on device bond10 [ 351.220372][T11153] bond10: (slave vti0): The slave device specified does not support setting the MAC address [ 351.232162][T11153] bond10: (slave vti0): Error -95 calling set_mac_address [ 351.246469][T11136] veth0: left promiscuous mode [ 351.434992][T11169] netlink: 136 bytes leftover after parsing attributes in process `syz.5.1395'. [ 351.459374][T11169] netlink: 485 bytes leftover after parsing attributes in process `syz.5.1395'. [ 351.481218][T11169] netlink: 10092 bytes leftover after parsing attributes in process `syz.5.1395'. [ 351.636826][T11180] netlink: 8 bytes leftover after parsing attributes in process `syz.5.1399'. [ 351.647775][T11178] batadv1: entered promiscuous mode [ 351.655525][T11178] batadv1: entered allmulticast mode [ 351.664442][T11178] 8021q: adding VLAN 0 to HW filter on device batadv1 [ 351.698949][T11183] netlink: 28 bytes leftover after parsing attributes in process `syz.1.1400'. [ 351.720666][T11183] netlink: 28 bytes leftover after parsing attributes in process `syz.1.1400'. [ 352.044627][ T1155] net_ratelimit: 3 callbacks suppressed [ 352.044728][ T1155] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 352.414393][ T1155] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 352.828635][ T8020] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 353.174465][ T8020] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 353.514634][ T35] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 353.860051][T11133] nci: __nci_request: wait_for_completion_interruptible_timeout failed -512 [ 354.031733][T11204] netlink: 8 bytes leftover after parsing attributes in process `syz.5.1406'. [ 354.126579][T11204] netlink: 8 bytes leftover after parsing attributes in process `syz.5.1406'. [ 354.284430][ T1155] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 354.535199][T11240] sctp: [Deprecated]: syz.1.1417 (pid 11240) Use of struct sctp_assoc_value in delayed_ack socket option. [ 354.535199][T11240] Use struct sctp_sack_info instead [ 354.638929][ T8029] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 354.745495][ T8020] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 355.020160][T11265] bond6 (unregistering): Released all slaves [ 355.079502][T11253] syzkaller0: entered promiscuous mode [ 355.094067][T11253] syzkaller0: entered allmulticast mode [ 355.393873][T11281] netlink: 52 bytes leftover after parsing attributes in process `syz.0.1430'. [ 355.409816][T11281] netlink: 4 bytes leftover after parsing attributes in process `syz.0.1430'. [ 355.419175][ T35] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 355.541973][T11290] netlink: 92 bytes leftover after parsing attributes in process `syz.0.1432'. [ 355.559509][T11290] bond0: Error: CAN devices cannot be enslaved [ 355.607089][T11292] openvswitch: netlink: Either Ethernet header or EtherType is required. [ 355.750903][T11302] netlink: 52 bytes leftover after parsing attributes in process `syz.0.1436'. [ 355.760565][T11302] netlink: 4 bytes leftover after parsing attributes in process `syz.0.1436'. [ 355.770030][T11302] netlink: 52 bytes leftover after parsing attributes in process `syz.0.1436'. [ 355.782374][T11302] netlink: 4 bytes leftover after parsing attributes in process `syz.0.1436'. [ 355.791840][T11302] netlink: 52 bytes leftover after parsing attributes in process `syz.0.1436'. [ 356.237037][T11315] bridge0: port 1(macvlan3) entered disabled state [ 356.243819][T11315] bridge0: port 5(veth0_virt_wifi) entered disabled state [ 356.402125][T11315] batman_adv: batadv0: Interface deactivated: netdevsim0 [ 356.419930][T11315] vlan2: left allmulticast mode [ 356.426265][T11315] bond0: left allmulticast mode [ 356.438314][T11315] bridge1: left allmulticast mode [ 356.448421][T11315] dummy0: left allmulticast mode [ 356.453415][T11315] macsec1: left allmulticast mode [ 356.463455][T11315] bond2: left allmulticast mode [ 356.479230][T11315] bond7: left allmulticast mode [ 356.486390][T11315] ip6gre1: left promiscuous mode [ 356.491366][T11315] ip6gre1: left allmulticast mode [ 356.498247][T11315] gretap2: left promiscuous mode [ 356.507445][T11315] gretap0: left allmulticast mode [ 356.512628][T11315] macvlan2: left allmulticast mode [ 356.527146][T11315] bond9: left allmulticast mode [ 356.532864][T11315] ip6gre2: left promiscuous mode [ 356.538439][T11315] ip6gre2: left allmulticast mode [ 356.560083][T11327] bridge0: entered allmulticast mode [ 356.567945][ T47] netdevsim netdevsim0 netdevsim0: unset [1, 0] type 2 family 0 port 6081 - 0 [ 356.584539][ T47] netdevsim netdevsim0 netdevsim0: unset [1, 1] type 2 family 0 port 20004 - 0 [ 356.611383][ T47] netdevsim netdevsim0 netdevsim1: unset [1, 0] type 2 family 0 port 6081 - 0 [ 356.643421][ T47] netdevsim netdevsim0 netdevsim1: unset [1, 1] type 2 family 0 port 20004 - 0 [ 356.677925][ T47] netdevsim netdevsim0 netdevsim2: unset [1, 0] type 2 family 0 port 6081 - 0 [ 356.710414][ T47] netdevsim netdevsim0 netdevsim2: unset [1, 1] type 2 family 0 port 20004 - 0 [ 356.732553][ T47] netdevsim netdevsim0 netdevsim3: unset [1, 0] type 2 family 0 port 6081 - 0 [ 356.760280][ T47] netdevsim netdevsim0 netdevsim3: unset [1, 1] type 2 family 0 port 20004 - 0 [ 357.148698][T11361] netlink: 'syz.4.1451': attribute type 21 has an invalid length. [ 357.180696][T11361] netlink: 'syz.4.1451': attribute type 5 has an invalid length. [ 357.206519][T11361] netlink: 'syz.4.1451': attribute type 6 has an invalid length. [ 357.541426][T11375] tipc: Enabling of bearer rejected, already enabled [ 357.780722][T11381] vxcan2: entered allmulticast mode [ 358.340177][T11409] mac80211_hwsim hwsim9 syzkaller0: entered promiscuous mode [ 358.369502][T11409] mac80211_hwsim hwsim9 syzkaller0: entered allmulticast mode [ 358.592117][T11417] veth0: entered promiscuous mode [ 358.635765][T11417] netlink: 'syz.5.1467': attribute type 1 has an invalid length. [ 359.075774][ T5636] Bluetooth: hci5: link tx timeout [ 359.086352][ T5636] Bluetooth: hci5: killing stalled connection 11:aa:aa:aa:aa:aa [ 359.109808][ T50] Bluetooth: hci5: link tx timeout [ 359.118674][ T50] Bluetooth: hci5: killing stalled connection 11:aa:aa:aa:aa:aa [ 359.320558][T11453] lo speed is unknown, defaulting to 1000 [ 359.403022][T11463] __nla_validate_parse: 29 callbacks suppressed [ 359.403069][T11463] netlink: 12 bytes leftover after parsing attributes in process `syz.3.1475'. [ 359.825648][T11481] netlink: 104 bytes leftover after parsing attributes in process `syz.4.1477'. [ 360.148321][T11492] netlink: 52 bytes leftover after parsing attributes in process `syz.5.1480'. [ 360.164992][T11492] netlink: 4 bytes leftover after parsing attributes in process `syz.5.1480'. [ 360.176570][T11492] netlink: 52 bytes leftover after parsing attributes in process `syz.5.1480'. [ 360.213100][T11498] netlink: 24 bytes leftover after parsing attributes in process `syz.4.1482'. [ 360.232528][T11492] netlink: 4 bytes leftover after parsing attributes in process `syz.5.1480'. [ 360.263447][T11492] netlink: 52 bytes leftover after parsing attributes in process `syz.5.1480'. [ 360.329410][T11460] lo speed is unknown, defaulting to 1000 [ 360.977656][T11518] netlink: 'syz.5.1485': attribute type 1 has an invalid length. [ 361.145751][ T50] Bluetooth: hci5: command 0x0405 tx timeout [ 361.494546][T11528] netlink: 8 bytes leftover after parsing attributes in process `syz.5.1488'. [ 361.496294][T11529] netlink: 198796 bytes leftover after parsing attributes in process `syz.5.1488'. [ 361.513801][T11529] netlink: 'syz.5.1488': attribute type 2 has an invalid length. [ 361.524802][T11528] netlink: 'syz.5.1488': attribute type 26 has an invalid length. [ 362.809478][T11564] tipc: Resetting bearer [ 362.831851][T11564] bond5: (slave dummy0): Releasing backup interface [ 362.901182][T11564] net_ratelimit: 2 callbacks suppressed [ 362.901196][T11564] A link change request failed with some changes committed already. Interface hsr_slave_0 may have been left with an inconsistent configuration, please check. [ 363.019279][T11586] netlink: 'syz.3.1503': attribute type 1 has an invalid length. [ 363.524818][T11610] netlink: 'syz.0.1510': attribute type 13 has an invalid length. [ 363.747364][T11620] IPVS: set_ctl: invalid protocol: 115 172.20.20.56:20002 [ 363.867349][T11625] RDS: rds_bind could not find a transport for ::ffff:10.1.1.1, load rds_tcp or rds_rdma? [ 364.970263][T11635] __nla_validate_parse: 14 callbacks suppressed [ 364.970277][T11635] netlink: 52 bytes leftover after parsing attributes in process `syz.1.1518'. [ 364.986421][T11635] netlink: 10 bytes leftover after parsing attributes in process `syz.1.1518'. [ 364.996465][T11635] netlink: 52 bytes leftover after parsing attributes in process `syz.1.1518'. [ 365.006346][T11635] netlink: 10 bytes leftover after parsing attributes in process `syz.1.1518'. [ 365.016274][T11635] netlink: 52 bytes leftover after parsing attributes in process `syz.1.1518'. [ 365.066367][T11639] netlink: 240 bytes leftover after parsing attributes in process `syz.1.1519'. [ 365.078671][T11639] netlink: 52 bytes leftover after parsing attributes in process `syz.1.1519'. [ 365.095592][T11639] netlink: 76 bytes leftover after parsing attributes in process `syz.1.1519'. [ 365.108298][T11639] netlink: 52 bytes leftover after parsing attributes in process `syz.1.1519'. [ 365.170103][T11641] xt_hashlimit: size too large, truncated to 1048576 [ 365.323004][T11647] mac80211_hwsim hwsim9 syzkaller0: left promiscuous mode [ 365.331052][T11647] mac80211_hwsim hwsim9 syzkaller0: left allmulticast mode [ 366.395442][T11604] nci: __nci_request: wait_for_completion_interruptible_timeout failed -512 [ 366.581953][T11664] lo speed is unknown, defaulting to 1000 [ 366.594759][T11659] netlink: 8 bytes leftover after parsing attributes in process `syz.3.1525'. [ 366.629848][T11664] lo speed is unknown, defaulting to 1000 [ 366.637108][T11664] lo speed is unknown, defaulting to 1000 [ 366.649081][T11666] netlink: 'syz.5.1528': attribute type 1 has an invalid length. [ 366.875517][T11667] bond6: option primary: mode dependency failed, not supported in mode balance-rr(0) [ 366.906401][T11667] bond6 (unregistering): Released all slaves [ 366.993806][T11662] mac80211_hwsim hwsim2 wlan0: entered promiscuous mode [ 367.009995][T11662] mac80211_hwsim hwsim2 wlan0: entered allmulticast mode [ 367.028910][T11662] A link change request failed with some changes committed already. Interface wlan0 may have been left with an inconsistent configuration, please check. [ 367.202481][T11686] lo speed is unknown, defaulting to 1000 [ 367.417846][T11695] tipc: Can't bind to reserved service type 2 [ 367.977456][T11664] infiniband syz1: set active [ 367.991141][T11664] infiniband syz1: added lo [ 368.019698][T10989] lo speed is unknown, defaulting to 1000 [ 368.033217][T11664] smbdirect: ib_dev[syz1]: added: IB_CA max_fast_reg_page_list_len=512 device_cap_flags=0x1c001223c76 kernel_cap_flags=0x14 page_size_cap=0xfffff000 [ 368.055145][T11664] smbdirect: ib_dev[syz1]: num_ports=1 max_qp_rd_atom=128 max_qp_init_rd_atom=128 max_sgl_rd=0 max_sge_rd=32 max_cqe=32767 max_qp_wr=1048576 max_send_sge=32 max_recv_sge=32 [ 368.084167][T11664] smbdirect: ib_dev[syz1]PORT[1]: iwarp=0 ib=0 roce=1 v1=0 v2=1 core_cap_flags=0x803005 [ 368.129204][T11664] RDS/IB: syz1: added [ 368.135505][T11664] smc: adding ib device syz1 with port count 1 [ 368.144809][T11664] smc: ib device syz1 port 1 has no pnetid [ 368.287664][T11000] lo speed is unknown, defaulting to 1000 [ 368.312613][T11664] lo speed is unknown, defaulting to 1000 [ 368.421312][T11726] veth1_virt_wifi: entered allmulticast mode [ 368.606910][T11735] xt_TCPMSS: Only works on TCP SYN packets [ 368.620254][T11735] bridge0: adding interface bridge0 with same address as a received packet (addr:aa:aa:aa:aa:aa:1b, vlan:0) [ 368.665835][T11735] bridge0: left promiscuous mode [ 368.799139][T11664] lo speed is unknown, defaulting to 1000 [ 368.935664][T11745] netlink: 'syz.0.1543': attribute type 9 has an invalid length. [ 369.245267][T11664] lo speed is unknown, defaulting to 1000 [ 369.477674][T11763] netlink: 'syz.3.1546': attribute type 10 has an invalid length. [ 369.487280][T11763] geneve1: entered promiscuous mode [ 369.498309][T11763] bond0: (slave geneve1): Enslaving as an active interface with an up link [ 369.509943][ T8027] netdevsim netdevsim3 eth0: set [1, 0] type 2 family 0 port 6081 - 0 [ 369.531766][ T8029] netdevsim netdevsim3 eth1: set [1, 0] type 2 family 0 port 6081 - 0 [ 369.542219][ T8029] netdevsim netdevsim3 eth2: set [1, 0] type 2 family 0 port 6081 - 0 [ 369.554714][ T8029] netdevsim netdevsim3 eth3: set [1, 0] type 2 family 0 port 6081 - 0 [ 369.573713][T11664] lo speed is unknown, defaulting to 1000 [ 369.716739][T11767] can: request_module (can-proto-0) failed. [ 369.867343][T11664] lo speed is unknown, defaulting to 1000 [ 370.092590][T11779] sctp: [Deprecated]: syz.3.1549 (pid 11779) Use of int in max_burst socket option. [ 370.092590][T11779] Use struct sctp_assoc_value instead [ 370.116314][T11779] syzkaller1: entered promiscuous mode [ 370.136167][T11779] syzkaller1: entered allmulticast mode [ 370.207635][T11664] lo speed is unknown, defaulting to 1000 [ 370.229510][T11781] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 370.298205][T11781] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 370.460404][T11788] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 370.566036][T11790] __nla_validate_parse: 14 callbacks suppressed [ 370.566055][T11790] netlink: 8 bytes leftover after parsing attributes in process `syz.3.1553'. [ 370.572655][T11664] lo speed is unknown, defaulting to 1000 [ 370.573814][T11790] netlink: 4 bytes leftover after parsing attributes in process `syz.3.1553'. [ 370.604856][T11790] netlink: 'syz.3.1553': attribute type 12 has an invalid length. [ 370.615347][T11790] netlink: 'syz.3.1553': attribute type 13 has an invalid length. [ 370.758957][T11794] syzkaller1: entered promiscuous mode [ 370.766873][T11794] syzkaller1: entered allmulticast mode [ 371.741228][T11819] netlink: 52 bytes leftover after parsing attributes in process `syz.0.1559'. [ 371.772438][T11819] netlink: 4 bytes leftover after parsing attributes in process `syz.0.1559'. [ 371.775258][T11821] netlink: 8 bytes leftover after parsing attributes in process `syz.5.1558'. [ 371.796928][T11819] netlink: 52 bytes leftover after parsing attributes in process `syz.0.1559'. [ 371.821730][T11823] netlink: 52 bytes leftover after parsing attributes in process `syz.3.1560'. [ 371.827780][T11819] netlink: 4 bytes leftover after parsing attributes in process `syz.0.1559'. [ 371.842613][T11821] netlink: 8 bytes leftover after parsing attributes in process `syz.5.1558'. [ 371.855706][T11823] netlink: 4 bytes leftover after parsing attributes in process `syz.3.1560'. [ 372.223743][T11842] netlink: 'syz.3.1564': attribute type 30 has an invalid length. [ 372.396891][T11845] batadv1: left promiscuous mode [ 372.545142][T11854] bond1: option ad_actor_sys_prio: mode dependency failed, not supported in mode balance-rr(0) [ 372.595124][T11854] bond1 (unregistering): Released all slaves [ 372.607035][T11860] FAULT_INJECTION: forcing a failure. [ 372.607035][T11860] name fail_usercopy, interval 1, probability 0, space 0, times 1 [ 372.627940][T11860] CPU: 0 UID: 0 PID: 11860 Comm: syz.1.1568 Not tainted syzkaller #0 PREEMPT(full) [ 372.627968][T11860] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 06/25/2026 [ 372.627990][T11860] Call Trace: [ 372.628078][T11860] [ 372.628153][T11860] dump_stack_lvl+0xe8/0x150 [ 372.628435][T11860] should_fail_ex+0x40c/0x560 [ 372.628598][T11860] _copy_to_user+0x31/0xb0 [ 372.628679][T11860] simple_read_from_buffer+0xe1/0x170 [ 372.628732][T11860] proc_fail_nth_read+0x1bb/0x230 [ 372.628767][T11860] ? __pfx_proc_fail_nth_read+0x10/0x10 [ 372.628831][T11860] ? rw_verify_area+0x24a/0x4c0 [ 372.628871][T11860] ? __pfx_proc_fail_nth_read+0x10/0x10 [ 372.628899][T11860] vfs_read+0x213/0xa80 [ 372.628934][T11860] ? __pfx___mutex_lock+0x10/0x10 [ 372.629057][T11860] ? __pfx_vfs_read+0x10/0x10 [ 372.629086][T11860] ? __fget_files+0x2a/0x420 [ 372.629122][T11860] ? __fget_files+0x3a2/0x420 [ 372.629145][T11860] ? __fget_files+0x2a/0x420 [ 372.629178][T11860] ksys_read+0x150/0x270 [ 372.629209][T11860] ? __pfx_ksys_read+0x10/0x10 [ 372.629244][T11860] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 372.629284][T11860] do_syscall_64+0x174/0x580 [ 372.629337][T11860] ? trace_irq_disable+0x3b/0x140 [ 372.629379][T11860] ? clear_bhb_loop+0x40/0x90 [ 372.629412][T11860] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 372.629431][T11860] RIP: 0033:0x7f610ab5e68e [ 372.629463][T11860] Code: 08 0f 85 a5 a8 ff ff 49 89 fb 48 89 f0 48 89 d7 48 89 ce 4c 89 c2 4d 89 ca 4c 8b 44 24 08 4c 8b 4c 24 10 4c 89 5c 24 08 0f 05 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 80 00 00 00 00 48 83 ec 08 [ 372.629478][T11860] RSP: 002b:00007f610bb08fe8 EFLAGS: 00000246 ORIG_RAX: 0000000000000000 [ 372.629536][T11860] RAX: ffffffffffffffda RBX: 00007f610bb096c0 RCX: 00007f610ab5e68e [ 372.629551][T11860] RDX: 000000000000000f RSI: 00007f610bb090a0 RDI: 0000000000000006 [ 372.629563][T11860] RBP: 00007f610bb09090 R08: 0000000000000000 R09: 0000000000000000 [ 372.629574][T11860] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 372.629586][T11860] R13: 00007f610ae26038 R14: 00007f610ae25fa0 R15: 00007fffbbba3228 [ 372.629617][T11860] [ 372.966916][ T1155] netdevsim netdevsim5 netdevsim0: set [0, 0] type 1 family 0 port 8472 - 0 [ 372.998848][T11865] syzkaller0: entered promiscuous mode [ 373.036513][T11865] syzkaller0: entered allmulticast mode [ 373.073315][ T1155] netdevsim netdevsim5 netdevsim1: set [0, 0] type 1 family 0 port 8472 - 0 [ 373.102404][T11867] tipc: Enabled bearer , priority 0 [ 373.120020][ T1155] netdevsim netdevsim5 netdevsim2: set [0, 0] type 1 family 0 port 8472 - 0 [ 373.196212][T11864] tipc: Resetting bearer [ 373.332366][T11864] tipc: Disabling bearer [ 373.394587][ T1155] netdevsim netdevsim5 netdevsim3: set [0, 0] type 1 family 0 port 8472 - 0 [ 373.631787][T11882] syzkaller1: entered promiscuous mode [ 373.644180][T11882] syzkaller1: entered allmulticast mode [ 373.667914][T11884] syzkaller0: entered promiscuous mode [ 373.685742][T11884] syzkaller0: entered allmulticast mode [ 373.848069][T11887] tipc: Enabled bearer , priority 0 [ 373.907274][T11888] tipc: Resetting bearer [ 373.952645][T11883] tipc: Resetting bearer [ 374.056934][T11883] tipc: Disabling bearer [ 374.332112][T11907] ksmbd: Daemon and kernel module version mismatch. ksmbd: 124, kernel module: 1. User-space ksmbd should terminate. [ 374.591244][T11919] vlan0: entered allmulticast mode [ 374.604376][T11919] bridge_slave_0: entered allmulticast mode [ 374.617913][T11919] bridge0: port 1(vlan0) entered blocking state [ 374.625037][T11919] bridge0: port 1(vlan0) entered disabled state [ 374.633873][T11919] vlan0: entered promiscuous mode [ 374.640109][T11919] bridge_slave_0: entered promiscuous mode [ 375.792991][ T50] Bluetooth: hci6: unexpected cc 0x0c03 length: 249 > 1 [ 375.811064][ T50] Bluetooth: hci6: unexpected cc 0x1003 length: 249 > 9 [ 375.828048][ T50] Bluetooth: hci6: unexpected cc 0x1001 length: 249 > 9 [ 375.847868][ T50] Bluetooth: hci6: unexpected cc 0x0c23 length: 249 > 4 [ 375.856480][ T50] Bluetooth: hci6: unexpected cc 0x0c38 length: 249 > 2 [ 376.433884][T11988] mac80211_hwsim hwsim9 syzkaller0: entered promiscuous mode [ 376.472977][T11988] mac80211_hwsim hwsim9 syzkaller0: entered allmulticast mode [ 376.572435][T11978] tipc: Enabled bearer , priority 0 [ 376.617604][T11978] tipc: Resetting bearer [ 376.662503][T11992] lo speed is unknown, defaulting to 1000 [ 377.375210][T12017] __nla_validate_parse: 16 callbacks suppressed [ 377.375229][T12017] netlink: 52 bytes leftover after parsing attributes in process `syz.5.1606'. [ 377.427980][T12017] netlink: 4 bytes leftover after parsing attributes in process `syz.5.1606'. [ 377.439745][T12017] netlink: 52 bytes leftover after parsing attributes in process `syz.5.1606'. [ 377.470818][T12017] netlink: 4 bytes leftover after parsing attributes in process `syz.5.1606'. [ 377.495703][T12017] netlink: 52 bytes leftover after parsing attributes in process `syz.5.1606'. [ 377.577487][T11992] lo speed is unknown, defaulting to 1000 [ 377.578818][T11958] lo speed is unknown, defaulting to 1000 [ 377.947342][ T50] Bluetooth: hci6: command tx timeout [ 377.979349][T12036] netlink: 'syz.0.1611': attribute type 58 has an invalid length. [ 377.988743][T12036] netlink: 20 bytes leftover after parsing attributes in process `syz.0.1611'. [ 378.033668][T12041] netlink: 'syz.0.1611': attribute type 1 has an invalid length. [ 378.138426][T12041] bond11: entered promiscuous mode [ 378.145427][T12041] bond11: entered allmulticast mode [ 378.152233][T12041] 8021q: adding VLAN 0 to HW filter on device bond11 [ 378.257277][T12047] netlink: 44 bytes leftover after parsing attributes in process `syz.0.1612'. [ 378.272620][T12047] netlink: 44 bytes leftover after parsing attributes in process `syz.0.1612'. [ 378.379717][T11958] lo speed is unknown, defaulting to 1000 [ 378.427434][ T1319] ieee802154 phy0 wpan0: encryption failed: -22 [ 378.734246][T12062] netlink: 'syz.0.1613': attribute type 1 has an invalid length. [ 378.809621][T12062] bond12: entered promiscuous mode [ 378.849673][T12062] 8021q: adding VLAN 0 to HW filter on device bond12 [ 379.060205][T12065] lo speed is unknown, defaulting to 1000 [ 379.591460][T12065] lo speed is unknown, defaulting to 1000 [ 379.745353][T11958] bridge0: port 1(bridge_slave_0) entered blocking state [ 379.756522][T11958] bridge0: port 1(bridge_slave_0) entered disabled state [ 379.766742][T11958] bridge_slave_0: entered allmulticast mode [ 379.776990][T11958] bridge_slave_0: entered promiscuous mode [ 379.790436][T11958] bridge0: port 2(bridge_slave_1) entered blocking state [ 379.801956][T11958] bridge0: port 2(bridge_slave_1) entered disabled state [ 379.810908][T11958] bridge_slave_1: entered allmulticast mode [ 379.820590][T11958] bridge_slave_1: entered promiscuous mode [ 379.896652][T11958] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 379.911113][T11958] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 379.982772][T11958] team0: Port device team_slave_0 added [ 379.992203][T11958] team0: Port device team_slave_1 added [ 380.026242][T11958] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 380.035813][ T50] Bluetooth: hci6: command tx timeout [ 380.043632][T11958] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 380.081900][T11958] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 380.105657][T11958] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 380.124114][T11958] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 380.194355][T11958] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 380.402034][T11958] hsr_slave_0: entered promiscuous mode [ 380.415870][T11958] hsr_slave_1: entered promiscuous mode [ 380.423056][T11958] debugfs: 'hsr0' already exists in 'hsr' [ 380.429769][T11958] Cannot create hsr debugfs directory [ 380.925777][T12035] nci: __nci_request: wait_for_completion_interruptible_timeout failed -512 [ 380.943842][T12059] netlink: 199784 bytes leftover after parsing attributes in process `syz.0.1613'. [ 380.958202][T12059] netlink: 'syz.0.1613': attribute type 1 has an invalid length. [ 381.009347][T11958] netdevsim netdevsim6 netdevsim0: renamed from eth0 [ 381.075382][T11958] 8021q: adding VLAN 0 to HW filter on device netdevsim0 [ 381.128235][T11958] netdevsim netdevsim6 netdevsim1: renamed from eth1 [ 381.176113][T11958] 8021q: adding VLAN 0 to HW filter on device netdevsim1 [ 381.196973][T11958] netdevsim netdevsim6 netdevsim2: renamed from eth2 [ 381.198391][T12091] netlink: 8 bytes leftover after parsing attributes in process `syz.0.1619'. [ 381.239340][T11958] 8021q: adding VLAN 0 to HW filter on device netdevsim2 [ 381.267706][T11958] netdevsim netdevsim6 netdevsim3: renamed from eth3 [ 381.306896][T11958] 8021q: adding VLAN 0 to HW filter on device netdevsim3 [ 381.722656][T11958] 8021q: adding VLAN 0 to HW filter on device bond0 [ 381.809872][T11958] 8021q: adding VLAN 0 to HW filter on device team0 [ 381.861995][ T9271] bridge0: port 1(bridge_slave_0) entered blocking state [ 381.869321][ T9271] bridge0: port 1(bridge_slave_0) entered forwarding state [ 381.882007][T12131] IPVS: set_ctl: invalid protocol: 135 10.1.1.2:20004 [ 381.911143][ T1155] bridge0: port 2(bridge_slave_1) entered blocking state [ 381.919172][ T1155] bridge0: port 2(bridge_slave_1) entered forwarding state [ 382.105889][ T50] Bluetooth: hci6: command tx timeout [ 382.361852][T12153] lo: Caught tx_queue_len zero misconfig [ 382.498031][T12157] __nla_validate_parse: 1 callbacks suppressed [ 382.498050][T12157] netlink: 12 bytes leftover after parsing attributes in process `syz.1.1633'. [ 382.743249][T12173] netlink: 28 bytes leftover after parsing attributes in process `syz.0.1638'. [ 383.008688][T12188] netlink: 8 bytes leftover after parsing attributes in process `syz.5.1640'. [ 383.410835][T11958] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 383.913830][T12248] netlink: 4 bytes leftover after parsing attributes in process `syz.0.1648'. [ 384.184151][ T50] Bluetooth: hci6: command tx timeout [ 384.332872][T12269] bond0: entered promiscuous mode [ 384.380765][T12269] batadv0: entered promiscuous mode [ 384.428451][T12269] hsr1: Slave A (bond0) is not up; please bring it up to get a fully working HSR network [ 384.439060][T12269] hsr1: Slave B (batadv0) is not up; please bring it up to get a fully working HSR network [ 384.449073][T12276] netlink: 52 bytes leftover after parsing attributes in process `syz.5.1653'. [ 384.454070][T12269] 8021q: adding VLAN 0 to HW filter on device hsr1 [ 384.465714][T12276] netlink: 4 bytes leftover after parsing attributes in process `syz.5.1653'. [ 384.479200][T12276] netlink: 52 bytes leftover after parsing attributes in process `syz.5.1653'. [ 384.497298][T12276] netlink: 4 bytes leftover after parsing attributes in process `syz.5.1653'. [ 384.508773][T12269] bond0: left promiscuous mode [ 384.521183][T12269] batadv0: left promiscuous mode [ 384.531147][T12276] netlink: 52 bytes leftover after parsing attributes in process `syz.5.1653'. [ 384.547729][T12281] netlink: 332 bytes leftover after parsing attributes in process `syz.1.1655'. [ 384.557738][T12281] netlink: 'syz.1.1655': attribute type 9 has an invalid length. [ 384.587054][T12270] bond0: entered promiscuous mode [ 384.592939][T12270] batadv0: entered promiscuous mode [ 384.601237][T12270] hsr1: Slave A (bond0) is not up; please bring it up to get a fully working HSR network [ 384.612448][T12270] hsr1: Slave B (batadv0) is not up; please bring it up to get a fully working HSR network [ 384.626029][T12270] 8021q: adding VLAN 0 to HW filter on device hsr1 [ 384.637495][T12270] bond0: left promiscuous mode [ 384.643431][T12270] batadv0: left promiscuous mode [ 384.776398][T11958] veth0_vlan: entered promiscuous mode [ 384.800527][T12284] sch_tbf: peakrate 7 is lower than or equals to rate 7 ! [ 384.865563][T11958] veth1_vlan: entered promiscuous mode [ 384.995315][T12289] 8021q: adding VLAN 0 to HW filter on device bond0 [ 385.006924][T12289] 8021q: adding VLAN 0 to HW filter on device team0 [ 385.019597][T12289] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 385.366806][T12289] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 385.407079][T12289] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 385.433093][T12289] hsr0: Slave A (hsr_slave_0) is not up; please bring it up to get a fully working HSR network [ 385.444829][T12289] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 385.458516][T12289] hsr0: left promiscuous mode [ 385.471296][T12289] veth1_vlan: left promiscuous mode [ 385.481402][T12289] veth0_vlan: left promiscuous mode [ 385.494848][T12289] veth0_vlan: entered promiscuous mode [ 385.507658][T12289] veth1_vlan: entered promiscuous mode [ 385.521494][T12289] veth1_macvtap: left promiscuous mode [ 385.529197][T12289] veth0_macvtap: left promiscuous mode [ 385.537576][T12289] veth0_macvtap: entered promiscuous mode [ 385.546845][T12289] veth1_macvtap: entered promiscuous mode [ 385.561441][T12289] 8021q: adding VLAN 0 to HW filter on device bond1 [ 385.578491][T12289] 8021q: adding VLAN 0 to HW filter on device batadv1 [ 385.586301][T12289] A link change request failed with some changes committed already. Interface batadv2 may have been left with an inconsistent configuration, please check. [ 385.603262][T10988] lo speed is unknown, defaulting to 1000 [ 385.613068][T10988] syz2: Port: 1 Link ACTIVE [ 385.623859][ T5732] bridge0: entered promiscuous mode [ 385.642487][ T8012] bridge0: port 1(bridge_slave_0) entered blocking state [ 385.649941][ T8012] bridge0: port 1(bridge_slave_0) entered forwarding state [ 385.662050][ T8012] bridge0: port 2(bridge_slave_1) entered blocking state [ 385.669514][ T8012] bridge0: port 2(bridge_slave_1) entered forwarding state [ 386.102938][ T5732] lo speed is unknown, defaulting to 1000 [ 386.131870][T11958] veth0_macvtap: entered promiscuous mode [ 386.156740][T12306] Bluetooth: MGMT ver 1.23 [ 386.168432][ T47] ip6_tunnel: syztnl0 xmit: Local address not yet configured! [ 386.200330][ T10] ip6_tunnel: syztnl0 xmit: Local address not yet configured! [ 386.211813][ T47] ip6_tunnel: syztnl0 xmit: Local address not yet configured! [ 386.272665][T11958] veth1_macvtap: entered promiscuous mode [ 386.337557][T11958] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 386.363069][ C0] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:1b, vlan:0) [ 386.414582][T11958] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 386.481562][ T8012] netdevsim netdevsim6 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 386.508150][ T8012] netdevsim netdevsim6 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 386.529764][ T8012] netdevsim netdevsim6 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 386.568138][ T8012] netdevsim netdevsim6 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 386.785407][ C1] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:1b, vlan:0) [ 386.799872][ C1] IPv6: bridge0: IPv6 duplicate address fe80::a8aa:aaff:feaa:aa1b used by aa:aa:aa:aa:aa:1b detected! [ 386.844346][ T5761] ip6_tunnel: syztnl0 xmit: Local address not yet configured! [ 386.906810][ T5761] ip6_tunnel: syztnl0 xmit: Local address not yet configured! [ 387.117139][ T12] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 387.157506][ T12] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 387.239126][ C0] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:1b, vlan:0) [ 387.265158][ T8012] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 387.309923][ T8012] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 387.398761][T12345] ip_vti0: Master is either lo or non-ether device [ 387.435296][T12344] ip_vti0: Master is either lo or non-ether device [ 387.883369][ C1] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:1b, vlan:0) [ 387.908240][ C1] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:1b, vlan:0) [ 388.183179][T12368] syzkaller0: entered promiscuous mode [ 388.213590][T12368] syzkaller0: entered allmulticast mode [ 388.585486][ C1] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:1b, vlan:0) [ 389.036547][T12381] openvswitch: netlink: Unexpected mask (mask=240, allowed=10048) [ 389.815353][T12409] __nla_validate_parse: 12 callbacks suppressed [ 389.815389][T12409] netlink: 16 bytes leftover after parsing attributes in process `syz.1.1682'. [ 389.870876][T12405] netlink: 41 bytes leftover after parsing attributes in process `syz.1.1682'. [ 389.902524][T12405] netlink: 140 bytes leftover after parsing attributes in process `syz.1.1682'. [ 389.927691][T12405] netlink: 41 bytes leftover after parsing attributes in process `syz.1.1682'. [ 390.264472][ C0] ip6_tunnel: syztnl0 xmit: Local address not yet configured! [ 390.508434][T12436] netlink: 14 bytes leftover after parsing attributes in process `syz.0.1689'. [ 391.313040][T12477] netlink: 4 bytes leftover after parsing attributes in process `syz.5.1696'. [ 391.388803][T12479] xt_hashlimit: size too large, truncated to 1048576 [ 391.773338][T12506] ip6t_REJECT: TCP_RESET illegal for non-tcp [ 391.806373][T12508] xt_ecn: cannot match TCP bits for non-tcp packets [ 391.882326][T12510] netlink: 60 bytes leftover after parsing attributes in process `syz.5.1703'. [ 391.897888][T12510] netlink: 60 bytes leftover after parsing attributes in process `syz.5.1703'. [ 392.025267][ C1] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:1b, vlan:0) [ 392.149636][T12517] netlink: 136 bytes leftover after parsing attributes in process `syz.5.1705'. [ 392.466400][T12532] x_tables: duplicate underflow at hook 2 [ 392.530926][T12532] netlink: 'syz.6.1711': attribute type 8 has an invalid length. [ 392.565016][T12532] netlink: 4 bytes leftover after parsing attributes in process `syz.6.1711'. [ 392.616274][ T8027] netdevsim netdevsim6 netdevsim0: set [0, 0] type 1 family 0 port 8472 - 0 [ 392.628977][T12532] netlink: 'syz.6.1711': attribute type 8 has an invalid length. [ 392.647107][ T8027] netdevsim netdevsim6 netdevsim1: set [0, 0] type 1 family 0 port 8472 - 0 [ 392.675852][ T8027] netdevsim netdevsim6 netdevsim2: set [0, 0] type 1 family 0 port 8472 - 0 [ 392.695799][ T8027] netdevsim netdevsim6 netdevsim3: set [0, 0] type 1 family 0 port 8472 - 0 [ 392.782579][T12539] netlink: 'syz.5.1712': attribute type 10 has an invalid length. [ 392.802166][T12546] netlink: 'syz.1.1714': attribute type 1 has an invalid length. [ 392.809850][T12539] bridge0: port 2(bridge_slave_1) entered disabled state [ 392.818644][T12539] bridge0: port 1(bridge_slave_0) entered disabled state [ 392.854636][T12539] bridge0: port 2(bridge_slave_1) entered blocking state [ 392.862534][T12539] bridge0: port 2(bridge_slave_1) entered forwarding state [ 392.870459][T12539] bridge0: port 1(bridge_slave_0) entered blocking state [ 392.878505][T12539] bridge0: port 1(bridge_slave_0) entered forwarding state [ 392.901288][T12539] team0: Port device bridge0 added [ 392.989855][T12555] netlink: 'syz.5.1717': attribute type 32 has an invalid length. [ 392.998243][T12549] gretap2: entered allmulticast mode [ 393.015209][T12549] bond6: (slave gretap2): making interface the new active one [ 393.025001][T12549] bond6: (slave gretap2): Enslaving as an active interface with an up link [ 393.111039][T12555] bond2: Setting coupled_control to off (0) [ 393.531063][T12581] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 393.567691][T12581] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 393.838190][ C1] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:1b, vlan:0) [ 393.888294][ T42] ip6_tunnel: syztnl0 xmit: Local address not yet configured! [ 393.955286][T12595] tipc: Resetting bearer [ 393.955482][ C1] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:1b, vlan:0) [ 394.038064][T12600] netlink: 'syz.5.1727': attribute type 1 has an invalid length. [ 394.103248][T12595] A link change request failed with some changes committed already. Interface wlan1 may have been left with an inconsistent configuration, please check. [ 394.154566][ T9807] lo speed is unknown, defaulting to 1000 [ 394.226568][T12600] 8021q: adding VLAN 0 to HW filter on device bond3 [ 394.365553][T10989] ip6_tunnel: syztnl0 xmit: Local address not yet configured! [ 394.482984][T12612] bond3: (slave gretap1): making interface the new active one [ 394.524837][T12612] bond3: (slave gretap1): Enslaving as an active interface with an up link [ 394.892627][T12637] __nla_validate_parse: 17 callbacks suppressed [ 394.892647][T12637] netlink: 224 bytes leftover after parsing attributes in process `syz.0.1734'. [ 394.945558][T12641] openvswitch: netlink: Tunnel attr 3 has unexpected len 0 expected 1 [ 395.032316][T12637] lo speed is unknown, defaulting to 1000 [ 395.417958][T12652] batman_adv: batadv0: Adding interface: dummy0 [ 395.445806][T12652] batman_adv: batadv0: The MTU of interface dummy0 is too small (1280) to handle the transport of batman-adv packets. If you experience problems getting traffic through try increasing the MTU to 1312. [ 395.532776][T12652] batman_adv: batadv0: Interface activated: dummy0 [ 395.621650][T12653] batadv0: mtu less than device minimum [ 395.647965][T12653] batman_adv: batadv0: Forced to purge local tt entries to fit new maximum fragment MTU (0) [ 395.665492][T12653] batman_adv: batadv0: Forced to purge local tt entries to fit new maximum fragment MTU (0) [ 395.681859][T12653] batman_adv: batadv0: Forced to purge local tt entries to fit new maximum fragment MTU (0) [ 395.696847][T12653] batman_adv: batadv0: Forced to purge local tt entries to fit new maximum fragment MTU (0) [ 395.769565][T12637] lo speed is unknown, defaulting to 1000 [ 395.969822][T12667] netlink: 4 bytes leftover after parsing attributes in process `syz.1.1741'. [ 396.378250][T12678] netlink: 12 bytes leftover after parsing attributes in process `syz.5.1745'. [ 396.429016][T12684] netlink: 8 bytes leftover after parsing attributes in process `syz.1.1746'. [ 396.455312][T12684] netlink: 48 bytes leftover after parsing attributes in process `syz.1.1746'. [ 396.819824][T12699] netlink: 52 bytes leftover after parsing attributes in process `syz.5.1750'. [ 396.844175][T12699] netlink: 4 bytes leftover after parsing attributes in process `syz.5.1750'. [ 396.853118][T12699] netlink: 52 bytes leftover after parsing attributes in process `syz.5.1750'. [ 396.871519][T12699] netlink: 4 bytes leftover after parsing attributes in process `syz.5.1750'. [ 396.871905][T12694] lo speed is unknown, defaulting to 1000 [ 396.882419][T12699] netlink: 52 bytes leftover after parsing attributes in process `syz.5.1750'. [ 397.011881][T12705] syz_tun: entered allmulticast mode [ 397.068149][T12702] syz_tun: left allmulticast mode [ 397.141240][T12709] syzkaller0: entered promiscuous mode [ 397.156590][T12709] syzkaller0: entered allmulticast mode [ 397.646307][T12694] lo speed is unknown, defaulting to 1000 [ 398.267567][ T50] Bluetooth: hci0: Opcode 0x0c03 failed: -110 [ 398.599971][T12746] batadv_slave_0: Caught tx_queue_len zero misconfig [ 398.779012][T12736] can: request_module (can-proto-5) failed. [ 398.905776][ C0] ip6_tunnel: syztnl0 xmit: Local address not yet configured! [ 398.968083][T12759] bond4: option active_slave: mode dependency failed, not supported in mode balance-rr(0) [ 398.995689][T12759] bond4 (unregistering): Released all slaves [ 399.300957][T12769] netlink: 'syz.1.1769': attribute type 2 has an invalid length. [ 399.319936][T12769] netlink: 'syz.1.1769': attribute type 8 has an invalid length. [ 399.589938][T12787] syzkaller0: entered promiscuous mode [ 399.615655][T12787] syzkaller0: entered allmulticast mode [ 399.705149][T12787] tipc: Enabled bearer , priority 0 [ 399.920198][T12796] __nla_validate_parse: 11 callbacks suppressed [ 399.920217][T12796] netlink: 52 bytes leftover after parsing attributes in process `syz.1.1775'. [ 399.936533][T12796] netlink: 4 bytes leftover after parsing attributes in process `syz.1.1775'. [ 399.946201][T12796] netlink: 52 bytes leftover after parsing attributes in process `syz.1.1775'. [ 399.955537][T12796] netlink: 4 bytes leftover after parsing attributes in process `syz.1.1775'. [ 399.964720][T12796] netlink: 52 bytes leftover after parsing attributes in process `syz.1.1775'. [ 400.020468][T12779] syzkaller0: entered promiscuous mode [ 400.030999][T12779] syzkaller0: entered allmulticast mode [ 400.040731][T12784] tipc: Resetting bearer [ 400.071141][T12784] tipc: Disabling bearer [ 400.082997][T12799] netlink: 20 bytes leftover after parsing attributes in process `syz.5.1776'. [ 400.186783][ C1] net_ratelimit: 15 callbacks suppressed [ 400.186804][ C1] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:1b, vlan:0) [ 400.188033][T12803] netlink: 4 bytes leftover after parsing attributes in process `syz.1.1777'. [ 401.111856][T12812] netlink: 4 bytes leftover after parsing attributes in process `syz.0.1778'. [ 403.167978][T12824] netlink: 8 bytes leftover after parsing attributes in process `syz.3.1782'. [ 403.183535][T12825] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 403.430179][T12839] netdevsim netdevsim1 netdevsim0: entered promiscuous mode [ 403.433324][T12842] netlink: 52 bytes leftover after parsing attributes in process `syz.3.1787'. [ 403.453368][T12839] A link change request failed with some changes committed already. Interface netdevsim0 may have been left with an inconsistent configuration, please check. [ 404.418012][T12903] syzkaller0: entered promiscuous mode [ 404.435309][T12903] syzkaller0: entered allmulticast mode [ 404.459654][T12907] tipc: Enabled bearer , priority 0 [ 404.470364][T12907] syzkaller0: entered promiscuous mode [ 404.479813][T12907] syzkaller0: entered allmulticast mode [ 404.526468][T12907] sctp: [Deprecated]: syz.0.1803 (pid 12907) Use of int in max_burst socket option. [ 404.526468][T12907] Use struct sctp_assoc_value instead [ 404.882558][T12915] tipc: Resetting bearer [ 404.901327][T12906] tipc: Resetting bearer [ 404.940421][T12906] tipc: Disabling bearer [ 405.088898][T12928] netlink: 'syz.0.1806': attribute type 3 has an invalid length. [ 405.450203][T12935] netlink: 'syz.0.1809': attribute type 8 has an invalid length. [ 405.472071][T12937] netlink: 'syz.1.1810': attribute type 1 has an invalid length. [ 405.475368][T12935] __nla_validate_parse: 5 callbacks suppressed [ 405.475383][T12935] netlink: 4 bytes leftover after parsing attributes in process `syz.0.1809'. [ 405.481695][T12937] netlink: 20 bytes leftover after parsing attributes in process `syz.1.1810'. [ 405.535828][T12935] bond0: entered promiscuous mode [ 405.558269][T12935] bond0: left promiscuous mode [ 406.091183][T12959] netlink: 28 bytes leftover after parsing attributes in process `syz.1.1817'. [ 406.295200][T12965] syzkaller0: entered promiscuous mode [ 406.308265][T12965] syzkaller0: entered allmulticast mode [ 406.766483][T12984] vlan5: entered promiscuous mode [ 407.363876][T13007] netlink: 8 bytes leftover after parsing attributes in process `syz.3.1828'. [ 407.397331][T13007] netlink: 4 bytes leftover after parsing attributes in process `syz.3.1828'. [ 407.443292][ T47] netdevsim netdevsim3 eth0: set [0, 0] type 1 family 0 port 8472 - 0 [ 407.443467][T13007] netlink: 8 bytes leftover after parsing attributes in process `syz.3.1828'. [ 407.471288][T13007] netlink: 4 bytes leftover after parsing attributes in process `syz.3.1828'. [ 407.471649][ T47] netdevsim netdevsim3 eth1: set [0, 0] type 1 family 0 port 8472 - 0 [ 407.629804][ T47] netdevsim netdevsim3 eth2: set [0, 0] type 1 family 0 port 8472 - 0 [ 407.648124][ T47] netdevsim netdevsim3 eth3: set [0, 0] type 1 family 0 port 8472 - 0 [ 407.953088][T13012] netdevsim netdevsim1 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 50467 - 0 [ 407.978620][T13012] netdevsim netdevsim1 netdevsim3 (unregistering): unset [1, 1] type 2 family 0 port 6081 - 0 [ 408.011967][T13012] netdevsim netdevsim1 netdevsim3 (unregistering): unset [1, 2] type 2 family 0 port 20004 - 0 [ 408.046003][ T5636] Bluetooth: hci7: unexpected cc 0x0c03 length: 249 > 1 [ 408.064946][ T5636] Bluetooth: hci7: unexpected cc 0x1003 length: 249 > 9 [ 408.076648][ T5636] Bluetooth: hci7: unexpected cc 0x1001 length: 249 > 9 [ 408.089859][ T5636] Bluetooth: hci7: unexpected cc 0x0c23 length: 249 > 4 [ 408.102179][ T5636] Bluetooth: hci7: unexpected cc 0x0c38 length: 249 > 2 [ 408.166480][T13020] netlink: 28 bytes leftover after parsing attributes in process `syz.0.1833'. [ 408.181924][T13020] netlink: 28 bytes leftover after parsing attributes in process `syz.0.1833'. [ 408.209028][T13020] netlink: 32 bytes leftover after parsing attributes in process `syz.0.1833'. [ 408.346310][T13012] netdevsim netdevsim1 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 50467 - 0 [ 408.377119][T13012] netdevsim netdevsim1 netdevsim2 (unregistering): unset [1, 1] type 2 family 0 port 6081 - 0 [ 408.408481][T13012] netdevsim netdevsim1 netdevsim2 (unregistering): unset [1, 2] type 2 family 0 port 20004 - 0 [ 408.608595][T13012] netdevsim netdevsim1 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 50467 - 0 [ 408.625022][T13012] netdevsim netdevsim1 netdevsim1 (unregistering): unset [1, 1] type 2 family 0 port 6081 - 0 [ 408.637000][T13012] netdevsim netdevsim1 netdevsim1 (unregistering): unset [1, 2] type 2 family 0 port 20004 - 0 [ 408.813110][T13012] netdevsim netdevsim1 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 50467 - 0 [ 408.835002][T13012] netdevsim netdevsim1 netdevsim0 (unregistering): unset [1, 1] type 2 family 0 port 6081 - 0 [ 408.848541][T13012] netdevsim netdevsim1 netdevsim0 (unregistering): unset [1, 2] type 2 family 0 port 20004 - 0 [ 408.969856][T13065] syzkaller0: entered promiscuous mode [ 408.977325][T13065] syzkaller0: entered allmulticast mode [ 408.994533][T13030] lo speed is unknown, defaulting to 1000 [ 409.239616][ T13] netdevsim netdevsim1 eth0: set [1, 0] type 2 family 0 port 6081 - 0 [ 409.275063][ T13] netdevsim netdevsim1 eth0: set [1, 1] type 2 family 0 port 20004 - 0 [ 409.296998][ T13] netdevsim netdevsim1 eth0: set [1, 2] type 2 family 0 port 50467 - 0 [ 409.324407][ T13] netdevsim netdevsim1 eth1: set [1, 0] type 2 family 0 port 6081 - 0 [ 409.348354][ T13] netdevsim netdevsim1 eth1: set [1, 1] type 2 family 0 port 20004 - 0 [ 409.371534][ T13] netdevsim netdevsim1 eth1: set [1, 2] type 2 family 0 port 50467 - 0 [ 409.589576][T13030] lo speed is unknown, defaulting to 1000 [ 409.589832][ T8020] netdevsim netdevsim1 eth2: set [1, 0] type 2 family 0 port 6081 - 0 [ 409.610511][ T8020] netdevsim netdevsim1 eth2: set [1, 1] type 2 family 0 port 20004 - 0 [ 409.628257][ T8020] netdevsim netdevsim1 eth2: set [1, 2] type 2 family 0 port 50467 - 0 [ 409.779652][T13086] bridge0: port 2(bridge_slave_1) entered disabled state [ 409.787353][T13086] bridge0: port 1(bridge_slave_0) entered disabled state [ 409.915993][ T10] lo speed is unknown, defaulting to 1000 [ 409.926403][ T10] syz2: Port: 1 Link DOWN [ 409.997499][ T8012] netdevsim netdevsim1 eth3: set [1, 0] type 2 family 0 port 6081 - 0 [ 410.006061][T13096] x_tables: unsorted underflow at hook 3 [ 410.015454][ T8012] netdevsim netdevsim1 eth3: set [1, 1] type 2 family 0 port 20004 - 0 [ 410.030214][ T8012] netdevsim netdevsim1 eth3: set [1, 2] type 2 family 0 port 50467 - 0 [ 410.048903][ T10] lo speed is unknown, defaulting to 1000 [ 410.187190][ T50] Bluetooth: hci7: command tx timeout [ 410.561017][T13120] __nla_validate_parse: 44 callbacks suppressed [ 410.561036][T13120] netlink: 24 bytes leftover after parsing attributes in process `syz.0.1858'. [ 410.628567][T13125] netlink: 8 bytes leftover after parsing attributes in process `syz.3.1859'. [ 410.693359][T13130] netlink: 28 bytes leftover after parsing attributes in process `syz.1.1861'. [ 410.724971][T13130] netlink: 28 bytes leftover after parsing attributes in process `syz.1.1861'. [ 410.762323][T13130] netlink: 28 bytes leftover after parsing attributes in process `syz.1.1861'. [ 410.789280][T13130] netlink: 28 bytes leftover after parsing attributes in process `syz.1.1861'. [ 410.842474][T13139] netlink: 'syz.0.1863': attribute type 62 has an invalid length. [ 410.846840][T13130] netlink: 28 bytes leftover after parsing attributes in process `syz.1.1861'. [ 410.921539][T13130] netlink: 28 bytes leftover after parsing attributes in process `syz.1.1861'. [ 411.006674][T13160] netlink: 12 bytes leftover after parsing attributes in process `syz.0.1863'. [ 411.031365][T13130] netlink: 28 bytes leftover after parsing attributes in process `syz.1.1861'. [ 411.429043][T13174] netlink: 'syz.1.1867': attribute type 1 has an invalid length. [ 411.480152][T13174] workqueue: Failed to create a rescuer kthread for wq "bond7": -EINTR [ 411.505184][T13030] bridge0: port 1(bridge_slave_0) entered blocking state [ 411.556485][T13030] bridge0: port 1(bridge_slave_0) entered disabled state [ 411.576090][T13030] bridge_slave_0: entered allmulticast mode [ 411.605873][T13030] bridge_slave_0: entered promiscuous mode [ 411.631898][T13030] bridge0: port 2(bridge_slave_1) entered blocking state [ 411.646521][T13182] x_tables: duplicate underflow at hook 1 [ 411.652937][T13030] bridge0: port 2(bridge_slave_1) entered disabled state [ 411.690708][T13030] bridge_slave_1: entered allmulticast mode [ 411.699270][T13030] bridge_slave_1: entered promiscuous mode [ 411.723389][T13182] gre2: entered promiscuous mode [ 411.846802][T13030] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 411.861572][T13030] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 411.991506][T13203] bridge2: entered promiscuous mode [ 412.014755][T13203] bridge2: entered allmulticast mode [ 412.076342][T13030] team0: Port device team_slave_0 added [ 412.111472][T13030] team0: Port device team_slave_1 added [ 412.192440][T13199] bridge2: entered promiscuous mode [ 412.209933][T13199] bridge2: entered allmulticast mode [ 412.236554][T13199] team0: Port device bridge2 added [ 412.266790][ T50] Bluetooth: hci7: command tx timeout [ 412.295068][T13030] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 412.302177][T13030] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 412.329848][T13030] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 412.345592][T13212] syzkaller0: tun_chr_ioctl cmd 1074812118 [ 412.370378][ T35] tipc: Resetting bearer [ 412.381761][T13030] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 412.390434][T13030] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 412.417322][T13030] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 412.649251][T13030] hsr_slave_0: entered promiscuous mode [ 412.669037][T13030] hsr_slave_1: entered promiscuous mode [ 412.676058][T13030] debugfs: 'hsr0' already exists in 'hsr' [ 412.681943][T13030] Cannot create hsr debugfs directory [ 413.136122][T13244] kthread_run failed with err -4 [ 413.437357][T13266] netlink: 'syz.1.1890': attribute type 7 has an invalid length. [ 413.456285][T13030] netdevsim netdevsim7 netdevsim0: renamed from eth0 [ 414.057134][T13030] 8021q: adding VLAN 0 to HW filter on device netdevsim0 [ 414.097152][T13266] netlink: 'syz.1.1890': attribute type 7 has an invalid length. [ 414.125687][T13030] netdevsim netdevsim7 netdevsim1: renamed from eth1 [ 414.141971][T13030] 8021q: adding VLAN 0 to HW filter on device netdevsim1 [ 414.150386][ T35] netdevsim netdevsim1 eth0: set [0, 0] type 1 family 0 port 8472 - 0 [ 414.162711][ T35] netdevsim netdevsim1 eth1: set [0, 0] type 1 family 0 port 8472 - 0 [ 414.172008][ T35] netdevsim netdevsim1 eth2: set [0, 0] type 1 family 0 port 8472 - 0 [ 414.206873][T13030] netdevsim netdevsim7 netdevsim2: renamed from eth2 [ 414.259006][T13030] 8021q: adding VLAN 0 to HW filter on device netdevsim2 [ 414.269919][ T35] netdevsim netdevsim1 eth3: set [0, 0] type 1 family 0 port 8472 - 0 [ 414.290283][T13030] netdevsim netdevsim7 netdevsim3: renamed from eth3 [ 414.340605][T13030] 8021q: adding VLAN 0 to HW filter on device netdevsim3 [ 414.348522][ T50] Bluetooth: hci7: command tx timeout [ 414.610776][T13030] 8021q: adding VLAN 0 to HW filter on device bond0 [ 414.638075][T13303] netlink: 'syz.5.1900': attribute type 1 has an invalid length. [ 414.757780][T13030] 8021q: adding VLAN 0 to HW filter on device team0 [ 414.830300][T13309] bond4: (slave veth1): Enslaving as an active interface with a down link [ 414.877339][T13303] bond4: (slave veth3): Enslaving as an active interface with a down link [ 414.904296][ C0] ip6_tunnel: syztnl0 xmit: Local address not yet configured! [ 415.007730][T13311] 8021q: adding VLAN 0 to HW filter on device bond4 [ 415.029080][ T8025] bridge0: port 1(bridge_slave_0) entered blocking state [ 415.036449][ T8025] bridge0: port 1(bridge_slave_0) entered forwarding state [ 415.081618][ T8020] bridge0: port 2(bridge_slave_1) entered blocking state [ 415.089463][ T8020] bridge0: port 2(bridge_slave_1) entered forwarding state [ 415.648210][T13355] netlink: 'syz.5.1913': attribute type 1 has an invalid length. [ 415.758630][T13355] bond5: entered promiscuous mode [ 415.764849][T13355] 8021q: adding VLAN 0 to HW filter on device bond5 [ 415.809251][T13358] vlan3: entered allmulticast mode [ 415.814620][T13358] bond5: entered allmulticast mode [ 415.858239][T13359] bond5: (slave bridge1): making interface the new active one [ 415.892466][T13359] bridge1: entered promiscuous mode [ 415.915008][T13359] bridge1: entered allmulticast mode [ 415.936537][T13359] bond5: (slave bridge1): Enslaving as an active interface with an up link [ 416.424306][ T50] Bluetooth: hci7: command tx timeout [ 418.435447][T13337] workqueue: Failed to create a rescuer kthread for wq "bond15": -EINTR [ 418.592811][T13372] netlink: 'syz.0.1916': attribute type 13 has an invalid length. [ 418.667371][T13372] netlink: 'syz.0.1916': attribute type 17 has an invalid length. [ 418.733428][T13372] lo: entered promiscuous mode [ 418.743827][T13372] lo: entered allmulticast mode [ 418.763771][T13372] tunl0: entered promiscuous mode [ 418.773511][T13372] tunl0: entered allmulticast mode [ 418.786894][T13372] gre0: entered promiscuous mode [ 418.792001][T13372] gre0: entered allmulticast mode [ 418.795482][T13387] ieee802154 phy0 wpan0: encryption failed: -22 [ 418.798999][T13372] gretap0: entered allmulticast mode [ 418.820714][T13372] erspan0: entered promiscuous mode [ 418.836407][T13372] erspan0: entered allmulticast mode [ 418.857747][T13372] ip_vti0: entered promiscuous mode [ 418.877370][T13372] ip_vti0: entered allmulticast mode [ 418.885486][T13372] ip6_vti0: entered promiscuous mode [ 418.891196][T13372] ip6_vti0: entered allmulticast mode [ 418.901979][T13372] sit0: entered promiscuous mode [ 418.908346][T13372] sit0: entered allmulticast mode [ 418.913843][T13372] ip6tnl0: entered promiscuous mode [ 418.921238][T13372] ip6tnl0: entered allmulticast mode [ 418.934719][T13372] ip6gre0: entered promiscuous mode [ 418.945630][T13372] ip6gre0: entered allmulticast mode [ 418.957566][T13372] syz_tun: entered promiscuous mode [ 418.968373][T13372] syz_tun: entered allmulticast mode [ 418.991486][T13372] ip6gretap0: entered promiscuous mode [ 419.006239][T13384] __nla_validate_parse: 76 callbacks suppressed [ 419.006259][T13384] netlink: 28 bytes leftover after parsing attributes in process `syz.3.1917'. [ 419.014747][T13372] bridge0: entered allmulticast mode [ 419.040298][T13372] bond0: entered promiscuous mode [ 419.051523][T13372] bond0: entered allmulticast mode [ 419.064531][T13372] team0: entered promiscuous mode [ 419.070688][T13372] bridge1: entered promiscuous mode [ 419.084275][T13372] team0: entered allmulticast mode [ 419.091337][T13372] bridge1: entered allmulticast mode [ 419.100765][T13372] nlmon0: entered promiscuous mode [ 419.114544][T13372] nlmon0: entered allmulticast mode [ 419.122035][T13372] batadv0: entered promiscuous mode [ 419.149361][T13372] batadv0: entered allmulticast mode [ 419.159404][T13372] veth0: entered promiscuous mode [ 419.186337][T13372] veth0: entered allmulticast mode [ 419.192279][T13372] veth1: entered promiscuous mode [ 419.198506][T13372] veth1: entered allmulticast mode [ 419.206913][T13372] wg0: entered promiscuous mode [ 419.213494][T13372] wg0: entered allmulticast mode [ 419.220037][T13372] wg1: entered promiscuous mode [ 419.228265][T13372] wg1: entered allmulticast mode [ 419.234405][T13372] wg2: entered promiscuous mode [ 419.239658][T13372] wg2: entered allmulticast mode [ 419.246897][T13372] veth0_to_bridge: entered promiscuous mode [ 419.253526][T13372] veth0_to_bridge: entered allmulticast mode [ 419.262083][T13372] bridge_slave_0: entered promiscuous mode [ 419.281939][T13372] bridge_slave_0: entered allmulticast mode [ 419.296297][T13372] veth1_to_bridge: entered promiscuous mode [ 419.311772][T13372] veth1_to_bridge: entered allmulticast mode [ 419.337368][T13372] bridge_slave_1: entered promiscuous mode [ 419.352969][T13372] bridge_slave_1: entered allmulticast mode [ 419.361722][T13372] veth0_to_bond: entered promiscuous mode [ 419.368908][T13372] veth0_to_bond: entered allmulticast mode [ 419.398121][T13372] bond_slave_0: entered promiscuous mode [ 419.407636][T13372] bond_slave_0: entered allmulticast mode [ 419.415154][T13372] veth1_to_bond: entered promiscuous mode [ 419.421242][T13372] veth1_to_bond: entered allmulticast mode [ 419.434739][T13372] bond_slave_1: entered promiscuous mode [ 419.444169][T13372] bond_slave_1: entered allmulticast mode [ 419.454831][T13372] veth0_to_team: entered promiscuous mode [ 419.460793][T13372] veth0_to_team: entered allmulticast mode [ 419.469939][T13372] team_slave_0: entered promiscuous mode [ 419.476526][T13372] team_slave_0: entered allmulticast mode [ 419.483941][T13372] veth1_to_team: entered promiscuous mode [ 419.492904][T13372] veth1_to_team: entered allmulticast mode [ 419.501562][T13372] team_slave_1: entered promiscuous mode [ 419.509853][T13372] team_slave_1: entered allmulticast mode [ 419.520570][T13372] veth0_to_batadv: entered promiscuous mode [ 419.526578][T13372] veth0_to_batadv: entered allmulticast mode [ 419.533602][T13372] batadv_slave_0: entered promiscuous mode [ 419.542202][T13372] batadv_slave_0: entered allmulticast mode [ 419.550824][T13372] veth1_to_batadv: entered promiscuous mode [ 419.559175][T13372] veth1_to_batadv: entered allmulticast mode [ 419.567210][T13372] batadv_slave_1: entered promiscuous mode [ 419.573071][T13372] batadv_slave_1: entered allmulticast mode [ 419.580304][T13372] xfrm0: entered promiscuous mode [ 419.585815][T13372] xfrm0: entered allmulticast mode [ 419.593452][T13372] veth0_to_hsr: entered promiscuous mode [ 419.599866][T13372] veth0_to_hsr: entered allmulticast mode [ 419.606910][T13372] hsr_slave_0: entered allmulticast mode [ 419.614548][T13372] hsr0: entered promiscuous mode [ 419.619962][T13372] hsr0: entered allmulticast mode [ 419.626961][T13372] veth1_virt_wifi: entered promiscuous mode [ 419.633096][T13372] veth1_virt_wifi: entered allmulticast mode [ 419.642170][T13372] virt_wifi0: entered promiscuous mode [ 419.648258][T13372] virt_wifi0: entered allmulticast mode [ 419.661935][T13372] veth1_vlan: entered allmulticast mode [ 419.669874][T13372] veth0_vlan: entered allmulticast mode [ 419.675985][T13372] vlan0: entered promiscuous mode [ 419.681273][T13372] vlan0: entered allmulticast mode [ 419.687714][T13372] vlan1: entered promiscuous mode [ 419.693120][T13372] vlan1: entered allmulticast mode [ 419.699381][T13372] macvlan0: entered promiscuous mode [ 419.705219][T13372] macvlan0: entered allmulticast mode [ 419.710939][T13372] macvlan1: entered promiscuous mode [ 419.716581][T13372] macvlan1: entered allmulticast mode [ 419.722554][T13372] ipvlan0: entered promiscuous mode [ 419.727948][T13372] ipvlan0: entered allmulticast mode [ 419.733534][T13372] ipvlan1: entered promiscuous mode [ 419.739043][T13372] ipvlan1: entered allmulticast mode [ 419.744928][T13372] geneve0: entered promiscuous mode [ 419.750725][T13372] geneve0: entered allmulticast mode [ 419.760384][T13372] geneve1: entered promiscuous mode [ 419.767449][T13372] geneve1: entered allmulticast mode [ 419.773747][T13372] netdevsim netdevsim0 netdevsim0: entered promiscuous mode [ 419.783374][T13372] netdevsim netdevsim0 netdevsim0: entered allmulticast mode [ 419.796956][T13372] netdevsim netdevsim0 netdevsim1: entered promiscuous mode [ 419.805645][T13372] netdevsim netdevsim0 netdevsim1: entered allmulticast mode [ 419.818247][T13372] netdevsim netdevsim0 netdevsim2: entered promiscuous mode [ 419.825791][T13372] netdevsim netdevsim0 netdevsim2: entered allmulticast mode [ 419.836493][T13372] netdevsim netdevsim0 netdevsim3: entered promiscuous mode [ 419.843810][T13372] netdevsim netdevsim0 netdevsim3: entered allmulticast mode [ 419.856453][T13372] mac80211_hwsim hwsim3 wlan1: entered promiscuous mode [ 419.863778][T13372] mac80211_hwsim hwsim3 wlan1: entered allmulticast mode [ 419.872361][T13372] vlan2: entered promiscuous mode [ 419.877701][T13372] vlan2: entered allmulticast mode [ 419.883449][T13372] vlan3: entered promiscuous mode [ 419.888755][T13372] vlan3: entered allmulticast mode [ 419.894435][T13372] mac80211_hwsim hwsim12 wlan2: entered promiscuous mode [ 419.901655][T13372] mac80211_hwsim hwsim12 wlan2: entered allmulticast mode [ 419.909740][T13372] veth2: entered promiscuous mode [ 419.916394][T13372] veth2: entered allmulticast mode [ 419.922486][T13372] veth3: entered promiscuous mode [ 419.929441][T13372] veth3: entered allmulticast mode [ 419.935644][T13372] macvtap1: entered promiscuous mode [ 419.941374][T13372] macvtap1: entered allmulticast mode [ 419.953215][T13372] bond1: entered promiscuous mode [ 419.959421][T13372] gretap1: entered promiscuous mode [ 419.967218][T13372] bond1: entered allmulticast mode [ 419.973362][T13372] gretap1: entered allmulticast mode [ 419.982735][T13372] : entered promiscuous mode [ 419.987857][T13372] : entered allmulticast mode [ 419.993174][T13372] bond2: entered promiscuous mode [ 419.998442][T13372] bond2: entered allmulticast mode [ 420.004871][T13372] bond3: entered promiscuous mode [ 420.013395][T13372] bond3: entered allmulticast mode [ 420.020459][T13372] bond4: entered promiscuous mode [ 420.027981][T13372] bond4: entered allmulticast mode [ 420.034153][T13372] bond5: entered promiscuous mode [ 420.039720][T13372] bridge2: entered promiscuous mode [ 420.045454][T13372] bond5: entered allmulticast mode [ 420.051306][T13372] bridge2: entered allmulticast mode [ 420.057293][T13372] vti60: entered promiscuous mode [ 420.062519][T13372] vti60: entered allmulticast mode [ 420.068491][T13372] bond6: entered promiscuous mode [ 420.075112][T13372] geneve2: entered promiscuous mode [ 420.081053][T13372] bond6: entered allmulticast mode [ 420.086278][T13372] geneve2: entered allmulticast mode [ 420.092569][T13372] bond7: entered promiscuous mode [ 420.097856][T13372] bond7: entered allmulticast mode [ 420.103528][T13372] ip6gre1: entered promiscuous mode [ 420.109092][T13372] ip6gre1: entered allmulticast mode [ 420.114732][T13372] gretap2: entered promiscuous mode [ 420.119928][T13372] gretap2: entered allmulticast mode [ 420.128203][T13372] macvlan2: entered promiscuous mode [ 420.133532][T13372] macvlan2: entered allmulticast mode [ 420.139648][T13372] veth0_to_hsr.2: entered promiscuous mode [ 420.145821][T13372] veth0_to_hsr.2: entered allmulticast mode [ 420.152325][T13372] bond8: entered promiscuous mode [ 420.157624][T13372] bond8: entered allmulticast mode [ 420.163094][T13372] mac80211_hwsim hwsim17 wlan3: entered promiscuous mode [ 420.170725][T13372] mac80211_hwsim hwsim17 wlan3: entered allmulticast mode [ 420.178947][T13372] veth4: entered promiscuous mode [ 420.184835][T13372] veth4: entered allmulticast mode [ 420.191369][T13372] veth5: entered promiscuous mode [ 420.198963][T13372] veth5: entered allmulticast mode [ 420.205950][T13372] : entered allmulticast mode [ 420.211879][T13372] bond9: entered promiscuous mode [ 420.217999][T13372] bond9: entered allmulticast mode [ 420.223750][T13372] syztnl0: entered promiscuous mode [ 420.232302][T13372] syztnl0: entered allmulticast mode [ 420.238399][T13372] ip6gre2: entered promiscuous mode [ 420.243962][T13372] ip6gre2: entered allmulticast mode [ 420.249687][T13372] syztnl1: entered promiscuous mode [ 420.255083][T13372] syztnl1: entered allmulticast mode [ 420.260595][T13372] bridge3: entered promiscuous mode [ 420.265976][T13372] bridge3: entered allmulticast mode [ 420.271528][T13372] macvlan4: entered promiscuous mode [ 420.277316][T13372] macvlan4: entered allmulticast mode [ 420.283572][T13372] bond10: entered promiscuous mode [ 420.290255][T13372] bond10: entered allmulticast mode [ 420.301251][T13372] bridge4: entered promiscuous mode [ 420.308763][T13372] bridge4: entered allmulticast mode [ 420.317563][T13372] gre1: entered promiscuous mode [ 420.323250][T13372] gre1: entered allmulticast mode [ 420.330122][T13372] bond12: entered allmulticast mode [ 420.336765][T13372] ip6gre3: entered promiscuous mode [ 420.342024][T13372] ip6gre3: entered allmulticast mode [ 420.539679][T13407] netlink: 'syz.0.1920': attribute type 1 has an invalid length. [ 420.571395][T13407] netlink: 236 bytes leftover after parsing attributes in process `syz.0.1920'. [ 420.600781][T13407] netlink: 4 bytes leftover after parsing attributes in process `syz.0.1920'. [ 420.739732][T13030] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 420.873704][T13420] tipc: Enabled bearer , priority 0 [ 420.901354][T13422] netlink: 4 bytes leftover after parsing attributes in process `syz.5.1925'. [ 420.907163][T13420] syzkaller0: entered promiscuous mode [ 420.928446][T13420] syzkaller0: entered allmulticast mode [ 420.953235][T13420] syz_tun: entered allmulticast mode [ 421.055288][T13418] syz_tun: left allmulticast mode [ 421.105322][T13418] tipc: Resetting bearer [ 421.162864][T13418] tipc: Disabling bearer [ 421.189084][T13433] xt_hashlimit: size too large, truncated to 1048576 [ 421.250298][T13030] veth0_vlan: entered promiscuous mode [ 421.268475][T13030] veth1_vlan: entered promiscuous mode [ 421.423072][T13442] netlink: 36 bytes leftover after parsing attributes in process `syz.5.1929'. [ 421.423072][T13439] netlink: 36 bytes leftover after parsing attributes in process `syz.5.1929'. [ 421.464253][T13030] veth0_macvtap: entered promiscuous mode [ 421.470829][T13439] netlink: 'syz.5.1929': attribute type 2 has an invalid length. [ 421.508226][T13030] veth1_macvtap: entered promiscuous mode [ 421.553540][T13439] : entered promiscuous mode [ 421.589111][T13030] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 421.636187][T13030] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 421.707879][ T35] netdevsim netdevsim7 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 421.741196][ T8027] netdevsim netdevsim7 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 421.768088][ T8027] netdevsim netdevsim7 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 421.804126][ T8027] netdevsim netdevsim7 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 421.897338][T13458] syzkaller0: entered promiscuous mode [ 421.932270][T13458] syzkaller0: entered allmulticast mode [ 421.969939][T13458] tipc: Started in network mode [ 422.003642][T13458] tipc: Node identity , cluster identity 4711 [ 422.028860][T13458] tipc: Failed to obtain node identity [ 422.036656][T13458] tipc: Enabling of bearer rejected, failed to enable media [ 422.233131][ T8027] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 422.277762][ T8027] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 422.468176][ T8027] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 422.483212][ T8027] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 422.497685][T13491] netlink: 'syz.1.1944': attribute type 1 has an invalid length. [ 422.592233][T13491] 8021q: adding VLAN 0 to HW filter on device bond15 [ 422.658407][T13489] syzkaller0: entered promiscuous mode [ 422.673572][T13489] syzkaller0: entered allmulticast mode [ 422.818858][T13504] netlink: 24 bytes leftover after parsing attributes in process `syz.7.1831'. [ 422.973920][T13510] netlink: 'syz.1.1950': attribute type 2 has an invalid length. [ 423.003834][T13510] netlink: 244 bytes leftover after parsing attributes in process `syz.1.1950'. [ 423.115753][T13520] netlink: 71 bytes leftover after parsing attributes in process `syz.5.1951'. [ 423.167881][T13522] netlink: 176 bytes leftover after parsing attributes in process `syz.0.1953'. [ 423.229727][T13522] openvswitch: netlink: Flow key attr not present in new flow. [ 423.348900][T13522] block nbd2: server does not support multiple connections per device. [ 423.382525][T13522] block nbd2: shutting down sockets [ 423.741779][T13522] tipc: Resetting bearer [ 423.961232][T13522] Bluetooth: hci5: Opcode 0x0c1a failed: -4 [ 423.976393][T13522] Bluetooth: hci5: Error when powering off device on rfkill (-4) [ 424.187218][T13522] Bluetooth: hci6: Opcode 0x0c1a failed: -4 [ 424.214383][T13522] Bluetooth: hci6: Error when powering off device on rfkill (-4) [ 424.380809][T13522] Bluetooth: hci7: Opcode 0x0c1a failed: -4 [ 424.392878][T13522] Bluetooth: hci7: Error when powering off device on rfkill (-4) [ 424.771626][T13592] xt_NFQUEUE: number of total queues is 0 [ 424.892502][T13599] __nla_validate_parse: 2 callbacks suppressed [ 424.892527][T13599] netlink: 40 bytes leftover after parsing attributes in process `syz.5.1970'. [ 424.950979][T13609] syzkaller0: entered promiscuous mode [ 425.005747][T13609] syzkaller0: entered allmulticast mode [ 425.148781][T13616] nbd: nbd0 already in use [ 425.157991][T13618] netlink: 12 bytes leftover after parsing attributes in process `syz.3.1974'. [ 425.167369][T13616] nbd: must specify an index to disconnect [ 425.311675][T13623] netlink: 8 bytes leftover after parsing attributes in process `syz.0.1973'. [ 425.470799][T13616] netlink: 12 bytes leftover after parsing attributes in process `syz.0.1973'. [ 425.758483][T13607] tipc: Enabling of bearer rejected, already enabled [ 425.983741][T13644] netlink: 'syz.0.1977': attribute type 8 has an invalid length. [ 426.735554][T13682] netlink: 8 bytes leftover after parsing attributes in process `syz.7.1988'. [ 428.116732][T13736] xt_hashlimit: size too large, truncated to 1048576 [ 428.140765][T13736] xt_hashlimit: invalid interval [ 428.668555][ T29] audit: type=1800 audit(1784094129.718:9): pid=13752 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.7.2001" name=3A202E31323334352E2E2E2E2028313829207238203D2030783363333130303030300A202020202020323A202E31323334352E2E382E20283835292063616C6C2070632B360A202020202020333A202E2E2E2E2E2E2E2E382E2028313829207230203D203078313130303030303066666666666666660A202020202020353A202E2E2E2E2E2E2E2E382E202836362920696620773820733E2030783020676F746F2070632B300A202020202020363A202E2E2E2E2E2E2E2E2E2E20283138292072 dev="tmpfs" ino=60 res=0 errno=0 [ 428.851254][T13765] 8021q: adding VLAN 0 to HW filter on device bond6 [ 428.928329][T13767] bond6: (slave dummy0): Enslaving as an active interface with an up link [ 428.982819][T13765] bond6: entered promiscuous mode [ 428.996259][T13765] dummy0: entered promiscuous mode [ 429.012013][T13765] bond6: entered allmulticast mode [ 429.025943][T13765] dummy0: entered allmulticast mode [ 429.068681][T13771] lo speed is unknown, defaulting to 1000 [ 429.451324][T13795] netlink: 'syz.3.2009': attribute type 3 has an invalid length. [ 429.493247][T13795] netlink: 'syz.3.2009': attribute type 1 has an invalid length. [ 429.555158][T13795] netlink: 'syz.3.2009': attribute type 2 has an invalid length. [ 430.020587][T13771] lo speed is unknown, defaulting to 1000 [ 430.075381][T13819] netlink: 4 bytes leftover after parsing attributes in process `syz.3.2013'. [ 430.519036][T13837] bridge_slave_0: left allmulticast mode [ 430.552522][T13837] bridge_slave_0: left promiscuous mode [ 430.561199][T13837] bridge0: port 1(bridge_slave_0) entered disabled state [ 430.597356][T13837] bridge_slave_1: left allmulticast mode [ 430.613497][T13837] bridge_slave_1: left promiscuous mode [ 430.621492][T13837] bridge0: port 2(bridge_slave_1) entered disabled state [ 430.659085][T13837] bond0: (slave bond_slave_0): Releasing backup interface [ 430.694899][T13837] bond0: (slave bond_slave_1): Releasing backup interface [ 430.846760][T13837] team0: Port device team_slave_0 removed [ 430.870715][T13837] team0: Port device team_slave_1 removed [ 430.878202][T13837] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 430.888269][T13837] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 430.898882][T13837] A link change request failed with some changes committed already. Interface hsr_slave_0 may have been left with an inconsistent configuration, please check. [ 431.180888][T13865] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 431.240938][T13869] netlink: 24 bytes leftover after parsing attributes in process `syz.1.2024'. [ 431.665341][T13886] netlink: 276 bytes leftover after parsing attributes in process `syz.5.2028'. [ 432.408203][T13918] netlink: 12 bytes leftover after parsing attributes in process `syz.3.2038'. [ 432.481351][T13922] netlink: 44 bytes leftover after parsing attributes in process `syz.5.2037'. [ 432.511276][T13922] netlink: 43 bytes leftover after parsing attributes in process `syz.5.2037'. [ 432.511721][T13923] netlink: 12 bytes leftover after parsing attributes in process `syz.7.2039'. [ 432.535507][T13922] netlink: 'syz.5.2037': attribute type 6 has an invalid length. [ 432.583778][T13922] netlink: 'syz.5.2037': attribute type 5 has an invalid length. [ 432.601758][T13922] netlink: 43 bytes leftover after parsing attributes in process `syz.5.2037'. [ 432.727209][T13935] netlink: 24 bytes leftover after parsing attributes in process `syz.3.2042'. [ 432.742610][T13919] netdevsim netdevsim5 netdevsim3 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 432.756029][T13919] netdevsim netdevsim5 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 432.796743][T13937] sch_tbf: burst 19872 is lower than device lo mtu (65550) ! [ 432.860802][T13937] netlink: 28 bytes leftover after parsing attributes in process `syz.0.2041'. [ 433.010716][T13919] netdevsim netdevsim5 netdevsim2 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 433.039070][T13919] netdevsim netdevsim5 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 433.233135][T13919] netdevsim netdevsim5 netdevsim1 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 433.244913][T13919] netdevsim netdevsim5 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 433.508946][T13919] netdevsim netdevsim5 netdevsim0 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 433.538489][T13919] netdevsim netdevsim5 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 433.846415][T13980] A link change request failed with some changes committed already. Interface virt_wifi0 may have been left with an inconsistent configuration, please check. [ 433.987299][T13980] A link change request failed with some changes committed already. Interface virt_wifi0 may have been left with an inconsistent configuration, please check. [ 434.023377][ T35] netdevsim netdevsim5 eth0: set [0, 0] type 1 family 0 port 8472 - 0 [ 434.042107][ T35] netdevsim netdevsim5 eth0: set [1, 0] type 2 family 0 port 6081 - 0 [ 434.151334][ T47] netdevsim netdevsim5 eth1: set [0, 0] type 1 family 0 port 8472 - 0 [ 434.176087][ T47] netdevsim netdevsim5 eth1: set [1, 0] type 2 family 0 port 6081 - 0 [ 434.317834][T13994] 8021q: adding VLAN 0 to HW filter on device ipvlan2 [ 434.375352][ T9271] netdevsim netdevsim5 eth2: set [0, 0] type 1 family 0 port 8472 - 0 [ 434.386921][ T9271] netdevsim netdevsim5 eth2: set [1, 0] type 2 family 0 port 6081 - 0 [ 434.413408][T13994] tipc: Started in network mode [ 434.434629][T13994] tipc: Node identity feaa48382afe, cluster identity 4711 [ 434.448552][T13994] tipc: Enabled bearer , priority 0 [ 434.504565][T13994] syzkaller0: entered promiscuous mode [ 434.516871][T13994] syzkaller0: entered allmulticast mode [ 434.525467][ T13] netdevsim netdevsim5 eth3: set [0, 0] type 1 family 0 port 8472 - 0 [ 434.533732][ T13] netdevsim netdevsim5 eth3: set [1, 0] type 2 family 0 port 6081 - 0 [ 434.563930][T14004] vlan2: entered promiscuous mode [ 434.573509][T14004] gretap0: entered promiscuous mode [ 434.597820][T13994] tipc: Resetting bearer [ 434.666823][T13993] tipc: Resetting bearer [ 434.715942][T13993] tipc: Disabling bearer [ 434.865890][T14021] openvswitch: netlink: VXLAN extension message has 4 unknown bytes. [ 434.995855][T14021] block nbd2: server does not support multiple connections per device. [ 435.016921][T14021] block nbd2: shutting down sockets [ 435.109151][T14041] netlink: 'syz.5.2066': attribute type 4 has an invalid length. [ 435.177905][T14028] __nla_validate_parse: 4 callbacks suppressed [ 435.177923][T14028] netlink: 56 bytes leftover after parsing attributes in process `syz.5.2066'. [ 435.207860][T14042] bridge3: entered promiscuous mode [ 435.222313][T14042] bridge3: entered allmulticast mode [ 435.546025][T14054] netlink: 8 bytes leftover after parsing attributes in process `syz.5.2070'. [ 435.978498][T14083] netlink: 20 bytes leftover after parsing attributes in process `syz.3.2077'. [ 436.008039][T14085] netlink: 20 bytes leftover after parsing attributes in process `syz.1.2073'. [ 436.100787][T14063] netlink: 28 bytes leftover after parsing attributes in process `syz.1.2073'. [ 436.141698][T14063] netlink: 28 bytes leftover after parsing attributes in process `syz.1.2073'. [ 436.257250][T14090] x_tables: ip6_tables: icmp6 match: only valid for protocol 58 [ 436.431084][T14096] netlink: 36 bytes leftover after parsing attributes in process `syz.3.2081'. [ 436.737037][T14106] netlink: 'syz.1.2086': attribute type 1 has an invalid length. [ 436.749085][T14103] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 436.761854][T14106] netlink: 'syz.1.2086': attribute type 4 has an invalid length. [ 436.771034][T14106] netlink: 9462 bytes leftover after parsing attributes in process `syz.1.2086'. [ 437.198160][T14135] netlink: 20 bytes leftover after parsing attributes in process `syz.5.2084'. [ 437.328561][T14130] tipc: Enabled bearer , priority 30 [ 437.884833][T14148] veth7: entered promiscuous mode [ 438.143199][T14162] netlink: 52 bytes leftover after parsing attributes in process `syz.1.2103'. [ 438.333078][T14173] dvmrp0: entered allmulticast mode [ 438.718208][T14196] netlink: 'syz.5.2113': attribute type 1 has an invalid length. [ 438.882016][T14196] bond7: option mode: invalid value (8) [ 438.991294][T14207] netlink: 'syz.1.2116': attribute type 5 has an invalid length. [ 439.099760][T14196] bond7 (unregistering): Released all slaves [ 439.137896][T14209] netlink: 'syz.7.2111': attribute type 1 has an invalid length. [ 439.207526][T14210] netlink: zone id is out of range [ 439.227603][T14210] netlink: del zone limit has 4 unknown bytes [ 439.254107][T14198] bond6: (slave dummy0): Releasing backup interface [ 439.292906][T14198] dummy0: left promiscuous mode [ 439.320511][T14198] dummy0: left allmulticast mode [ 439.358474][T14201] : renamed from dummy0 [ 439.476513][T14209] bond2: entered promiscuous mode [ 439.507607][T14209] 8021q: adding VLAN 0 to HW filter on device bond2 [ 439.518059][T14218] netlink: 'syz.3.2118': attribute type 9 has an invalid length. [ 439.606028][T14212] bond2: (slave bridge1): making interface the new active one [ 439.627460][T14212] bridge1: entered promiscuous mode [ 439.638956][T14212] bond2: (slave bridge1): Enslaving as an active interface with an up link [ 439.869236][ T1319] ieee802154 phy0 wpan0: encryption failed: -22 [ 440.398098][T14254] netlink: 'syz.1.2127': attribute type 12 has an invalid length. [ 440.950610][T14279] netlink: 'syz.3.2133': attribute type 62 has an invalid length. [ 440.963747][T14276] __nla_validate_parse: 7 callbacks suppressed [ 440.963767][T14276] netlink: 28 bytes leftover after parsing attributes in process `syz.7.2132'. [ 440.988946][T14276] netlink: 28 bytes leftover after parsing attributes in process `syz.7.2132'. [ 441.034697][T14284] netlink: 4 bytes leftover after parsing attributes in process `syz.5.2131'. [ 441.219403][T14297] sch_tbf: burst 255 is lower than device syzkaller0 mtu (1514) ! [ 441.584975][T14314] netlink: 8 bytes leftover after parsing attributes in process `syz.0.2142'. [ 442.038994][T14333] netlink: 28 bytes leftover after parsing attributes in process `syz.7.2148'. [ 442.276462][T14345] netlink: 'syz.7.2151': attribute type 2 has an invalid length. [ 442.301893][T14345] netlink: 'syz.7.2151': attribute type 1 has an invalid length. [ 442.313306][T14348] netlink: 20 bytes leftover after parsing attributes in process `syz.3.2152'. [ 442.323635][T14345] netlink: 152 bytes leftover after parsing attributes in process `syz.7.2151'. [ 442.481844][T14351] syzkaller0: entered promiscuous mode [ 442.501754][T14351] syzkaller0: entered allmulticast mode [ 442.618752][T14354] lo speed is unknown, defaulting to 1000 [ 442.648502][T14356] syzkaller0: entered promiscuous mode [ 442.667225][T14356] syzkaller0: entered allmulticast mode [ 442.751751][T14360] netlink: 4 bytes leftover after parsing attributes in process `syz.1.2156'. [ 443.373933][T14379] netlink: 8 bytes leftover after parsing attributes in process `syz.3.2160'. [ 443.400342][T14372] bridge0: port 1(bridge_slave_0) entered disabled state [ 443.584926][T14372] bridge0: port 2(bridge_slave_1) entered disabled state [ 443.616666][T14372] team0: Port device bridge0 removed [ 443.641360][T14372] bridge_slave_0: left allmulticast mode [ 443.660981][T14372] bridge_slave_0: left promiscuous mode [ 443.674411][T14372] bridge0: port 1(bridge_slave_0) entered disabled state [ 443.722864][T14372] bridge_slave_1: left allmulticast mode [ 443.741289][T14372] bridge_slave_1: left promiscuous mode [ 443.750496][T14372] bridge0: port 2(bridge_slave_1) entered disabled state [ 443.774891][T14372] bond0: (slave bond_slave_0): Releasing backup interface [ 443.802319][T14372] bond0: (slave bond_slave_1): Releasing backup interface [ 443.830789][T14372] team0: Port device team_slave_0 removed [ 443.846858][T14372] team0: Port device team_slave_1 removed [ 443.865753][T14372] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 443.873540][T14372] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 443.883109][T14372] A link change request failed with some changes committed already. Interface hsr_slave_0 may have been left with an inconsistent configuration, please check. [ 443.972860][T14354] lo speed is unknown, defaulting to 1000 [ 444.279544][T14410] netlink: 20 bytes leftover after parsing attributes in process `syz.5.2166'. [ 444.375277][T14410] geneve2: entered promiscuous mode [ 444.461109][T14418] netlink: 'syz.3.2170': attribute type 13 has an invalid length. [ 444.487118][T14418] netlink: 'syz.3.2170': attribute type 17 has an invalid length. [ 444.608226][T14418] erspan0: entered promiscuous mode [ 444.737812][T14418] 8021q: adding VLAN 0 to HW filter on device bond0 [ 444.748449][T14418] 8021q: adding VLAN 0 to HW filter on device team0 [ 444.828418][T14418] veth1_virt_wifi: left allmulticast mode [ 444.837480][T14418] A link change request failed with some changes committed already. Interface virt_wifi0 may have been left with an inconsistent configuration, please check. [ 444.857874][T10989] lo speed is unknown, defaulting to 1000 [ 444.886401][T10989] syz2: Port: 1 Link ACTIVE [ 444.968384][T10989] lo speed is unknown, defaulting to 1000 [ 445.141633][T14433] bond16: Unable to set up delay as MII monitoring is disabled [ 445.153198][T14433] bond16 (unregistering): Released all slaves [ 445.202132][T14449] tipc: Started in network mode [ 445.207944][T14449] tipc: Node identity ac14140f, cluster identity 4711 [ 445.233506][T14449] tipc: Enabled bearer , priority 10 [ 446.060451][T14490] sctp: [Deprecated]: syz.1.2188 (pid 14490) Use of int in max_burst socket option. [ 446.060451][T14490] Use struct sctp_assoc_value instead [ 446.089829][T14490] tipc: Enabling of bearer rejected, already enabled [ 446.210166][T14497] bridge0: port 1(syz_tun) entered blocking state [ 446.241420][T14497] bridge0: port 1(syz_tun) entered disabled state [ 446.264816][ C0] ip6_tunnel: syztnl0 xmit: Local address not yet configured! [ 446.296041][T14497] syz_tun: entered allmulticast mode [ 446.364586][T14497] syz_tun: entered promiscuous mode [ 446.385263][T14497] bridge0: port 1(syz_tun) entered blocking state [ 446.396137][T14497] bridge0: port 1(syz_tun) entered forwarding state [ 446.481301][ T5761] tipc: Node number set to 2886997007 [ 447.381811][T14539] ieee802154 phy0 wpan0: encryption failed: -126 [ 447.858312][T14553] x_tables: unsorted entry at hook 2 [ 448.406881][T14531] batadv1: left allmulticast mode [ 448.532177][T14531] bond5: left promiscuous mode [ 448.537597][T14531] bridge1: left promiscuous mode [ 448.582171][T14531] vlan3: left allmulticast mode [ 448.593205][T14531] bond5: left allmulticast mode [ 448.598399][T14531] bridge1: left allmulticast mode [ 448.612214][T14531] bond6: left promiscuous mode [ 448.622831][T14531] bond6: left allmulticast mode [ 448.635964][T14531] geneve2: left promiscuous mode [ 448.650175][ T8027] netdevsim netdevsim5 eth0: unset [0, 0] type 1 family 0 port 8472 - 0 [ 448.682634][ T8027] netdevsim netdevsim5 eth0: unset [1, 0] type 2 family 0 port 6081 - 0 [ 448.714508][ T8027] netdevsim netdevsim5 eth1: unset [0, 0] type 1 family 0 port 8472 - 0 [ 448.731230][ T8027] netdevsim netdevsim5 eth1: unset [1, 0] type 2 family 0 port 6081 - 0 [ 448.764534][ T8027] netdevsim netdevsim5 eth2: unset [0, 0] type 1 family 0 port 8472 - 0 [ 448.782238][ T8027] netdevsim netdevsim5 eth2: unset [1, 0] type 2 family 0 port 6081 - 0 [ 448.809534][ T8027] netdevsim netdevsim5 eth3: unset [0, 0] type 1 family 0 port 8472 - 0 [ 448.838416][ T8027] netdevsim netdevsim5 eth3: unset [1, 0] type 2 family 0 port 6081 - 0 [ 448.887822][T14564] __nla_validate_parse: 7 callbacks suppressed [ 448.887842][T14564] netlink: 204 bytes leftover after parsing attributes in process `syz.7.2205'. [ 448.931292][T14571] netlink: 12 bytes leftover after parsing attributes in process `syz.0.2206'. [ 448.941690][T14572] netlink: 232 bytes leftover after parsing attributes in process `syz.7.2205'. [ 448.977535][T14571] netlink: 8 bytes leftover after parsing attributes in process `syz.0.2206'. [ 449.163734][T14576] netlink: 8 bytes leftover after parsing attributes in process `syz.0.2207'. [ 449.203552][T14576] netlink: 4 bytes leftover after parsing attributes in process `syz.0.2207'. [ 449.211889][T14580] netlink: 20 bytes leftover after parsing attributes in process `syz.3.2209'. [ 449.234247][T14576] netlink: 'syz.0.2207': attribute type 15 has an invalid length. [ 449.579116][T14595] netlink: 12 bytes leftover after parsing attributes in process `syz.5.2214'. [ 449.656623][T14572] Bluetooth: hci0: Opcode 0x0401 failed: -4 [ 449.880682][T14602] netlink: 'syz.7.2216': attribute type 13 has an invalid length. [ 449.889039][T14602] netlink: 152 bytes leftover after parsing attributes in process `syz.7.2216'. [ 452.493456][T14595] workqueue: Failed to create a rescuer kthread for wq "bond7": -EINTR [ 452.495236][T14602] syz_tun: refused to change device tx_queue_len [ 452.537967][T14602] A link change request failed with some changes committed already. Interface syz_tun may have been left with an inconsistent configuration, please check. [ 453.049030][T14628] syzkaller0: entered promiscuous mode [ 453.058513][T14628] syzkaller0: entered allmulticast mode [ 453.267533][T14645] netlink: 20 bytes leftover after parsing attributes in process `syz.3.2226'. [ 454.316984][T14660] netlink: 20 bytes leftover after parsing attributes in process `syz.5.2230'. [ 454.327191][T14660] netlink: 20 bytes leftover after parsing attributes in process `syz.5.2230'. [ 454.379521][T14663] ipt_ECN: cannot use operation on non-tcp rule [ 454.389456][T14663] netlink: 36 bytes leftover after parsing attributes in process `syz.0.2231'. [ 456.454239][T14659] netlink: 'syz.5.2230': attribute type 6 has an invalid length. [ 456.470818][T14660] geneve3: entered promiscuous mode [ 456.645885][T14671] netlink: 8 bytes leftover after parsing attributes in process `syz.5.2233'. [ 456.846488][T14672] IPVS: set_ctl: invalid protocol: 255 172.20.20.40:20002 [ 456.889948][ T50] block nbd2: Receive control failed (result -32) [ 457.902243][T14705] netlink: 'syz.3.2244': attribute type 1 has an invalid length. [ 458.076878][T14705] 8021q: adding VLAN 0 to HW filter on device bond4 [ 458.156504][T14721] atomic_op ffff88804d75c198 conn xmit_atomic 0000000000000000 [ 458.164701][T14707] bond4: (slave veth0_to_bond): making interface the new active one [ 458.210981][T14707] bond4: (slave veth0_to_bond): Enslaving as an active interface with an up link [ 458.263222][T14718] geneve3: entered promiscuous mode [ 458.281616][ T35] netdevsim netdevsim0 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 458.311086][ T35] netdevsim netdevsim0 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 458.381285][ T35] netdevsim netdevsim0 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 458.408483][ T35] netdevsim netdevsim0 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 458.715262][T14742] netlink: 52 bytes leftover after parsing attributes in process `syz.0.2254'. [ 458.738183][T14742] netlink: 4 bytes leftover after parsing attributes in process `syz.0.2254'. [ 458.758949][T14742] netlink: 52 bytes leftover after parsing attributes in process `syz.0.2254'. [ 458.781117][T14742] netlink: 4 bytes leftover after parsing attributes in process `syz.0.2254'. [ 458.807307][T14742] netlink: 52 bytes leftover after parsing attributes in process `syz.0.2254'. [ 458.867872][T14749] openvswitch: netlink: Message has 4 unknown bytes. [ 459.280651][T14769] netlink: 'syz.5.2264': attribute type 1 has an invalid length. [ 459.306651][T14769] netlink: 224 bytes leftover after parsing attributes in process `syz.5.2264'. [ 459.375012][T14777] netlink: 4 bytes leftover after parsing attributes in process `syz.1.2266'. [ 459.395453][T14777] xt_TCPMSS: Only works on TCP SYN packets [ 459.459258][T14783] netlink: 24 bytes leftover after parsing attributes in process `syz.7.2261'. [ 459.706341][T14789] batadv0: entered promiscuous mode [ 459.711525][T14790] netlink: 'syz.0.2268': attribute type 19 has an invalid length. [ 459.722651][T14791] netlink: 52 bytes leftover after parsing attributes in process `syz.3.2269'. [ 459.750698][T14786] batadv0: left promiscuous mode [ 459.752310][T14791] netlink: 4 bytes leftover after parsing attributes in process `syz.3.2269'. [ 459.768061][T14792] netlink: 'syz.0.2268': attribute type 19 has an invalid length. [ 459.785552][T14790] netlink: 4 bytes leftover after parsing attributes in process `syz.0.2268'. [ 459.794646][T14792] netlink: 4 bytes leftover after parsing attributes in process `syz.0.2268'. [ 459.797507][T14794] hsr0: entered allmulticast mode [ 459.805255][T14791] netlink: 52 bytes leftover after parsing attributes in process `syz.3.2269'. [ 459.820366][T14791] netlink: 4 bytes leftover after parsing attributes in process `syz.3.2269'. [ 459.824446][T14794] hsr_slave_0: entered allmulticast mode [ 459.829388][T14791] netlink: 52 bytes leftover after parsing attributes in process `syz.3.2269'. [ 459.845677][T14794] hsr_slave_1: entered allmulticast mode [ 459.859323][T14790] netlink: 'syz.0.2268': attribute type 19 has an invalid length. [ 459.863874][T14793] hsr0: left allmulticast mode [ 459.872792][T14790] netlink: 4 bytes leftover after parsing attributes in process `syz.0.2268'. [ 459.886707][T14793] hsr_slave_0: left allmulticast mode [ 459.904220][T14793] hsr_slave_1: left allmulticast mode [ 459.913894][T14792] netlink: 'syz.0.2268': attribute type 19 has an invalid length. [ 460.022036][T14796] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 463.069224][T14827] mac80211_hwsim hwsim9 syzkaller0: left promiscuous mode [ 463.096326][T14827] mac80211_hwsim hwsim9 syzkaller0: left allmulticast mode [ 463.239608][T14839] syzkaller0: entered promiscuous mode [ 463.286715][T14839] syzkaller0: entered allmulticast mode [ 463.468391][T14846] xt_hashlimit: size too large, truncated to 1048576 [ 463.820755][T14871] bridge4: entered promiscuous mode [ 463.839710][T14871] bridge4: entered allmulticast mode [ 463.879897][T14871] team0: Port device bridge4 added [ 463.932031][ T8027] tipc: Resetting bearer [ 463.956376][T14871] bridge0: port 2(team0) entered blocking state [ 463.982198][T14871] bridge0: port 2(team0) entered disabled state [ 464.004483][T14871] team0: entered allmulticast mode [ 464.032851][T14871] team0: entered promiscuous mode [ 464.134235][T14880] veth1_vlan: entered allmulticast mode [ 464.348487][T14892] netlink: 'syz.7.2295': attribute type 2 has an invalid length. [ 464.411131][T14896] __nla_validate_parse: 16 callbacks suppressed [ 464.411151][T14896] netlink: 44 bytes leftover after parsing attributes in process `syz.3.2298'. [ 464.446818][T14898] netlink: 20 bytes leftover after parsing attributes in process `syz.0.2297'. [ 464.934557][T14922] geneve1: entered promiscuous mode [ 464.960037][T14922] geneve1: entered allmulticast mode [ 464.977192][T14923] netlink: 24 bytes leftover after parsing attributes in process `syz.7.2304'. [ 464.994751][T14926] netlink: 'syz.3.2305': attribute type 2 has an invalid length. [ 465.010597][T14926] IPVS: ip_vs_edit_dest(): lower threshold is higher than upper threshold [ 465.322304][T14941] netlink: 12 bytes leftover after parsing attributes in process `syz.5.2307'. [ 465.378661][T14947] netlink: 'syz.1.2311': attribute type 13 has an invalid length. [ 465.638767][T14954] netlink: 52 bytes leftover after parsing attributes in process `syz.5.2314'. [ 465.649040][T14954] netlink: 4 bytes leftover after parsing attributes in process `syz.5.2314'. [ 465.669843][T14954] netlink: 52 bytes leftover after parsing attributes in process `syz.5.2314'. [ 465.684332][T14954] netlink: 4 bytes leftover after parsing attributes in process `syz.5.2314'. [ 465.704067][T14954] netlink: 52 bytes leftover after parsing attributes in process `syz.5.2314'. [ 485.894369][T14966] bridge0: trying to set multicast startup query interval below minimum, setting to 100 (1000ms) [ 486.080247][T14979] netlink: 16 bytes leftover after parsing attributes in process `syz.7.2322'. [ 486.151400][T14979] IPv6: sit1: Disabled Multicast RS [ 486.203758][T14987] netlink: 52 bytes leftover after parsing attributes in process `syz.1.2325'. [ 486.225645][T14989] netlink: 'syz.0.2324': attribute type 9 has an invalid length. [ 486.235088][T14987] netlink: 4 bytes leftover after parsing attributes in process `syz.1.2325'. [ 486.275128][T14987] netlink: 52 bytes leftover after parsing attributes in process `syz.1.2325'. [ 486.323798][T14987] netlink: 4 bytes leftover after parsing attributes in process `syz.1.2325'. [ 486.349968][T14987] netlink: 52 bytes leftover after parsing attributes in process `syz.1.2325'. [ 486.617464][T15002] netlink: 'syz.0.2330': attribute type 7 has an invalid length. [ 486.812357][T15016] vlan0: entered promiscuous mode [ 486.818386][T15016] vlan0: entered allmulticast mode [ 486.963036][T15024] sctp: [Deprecated]: syz.3.2335 (pid 15024) Use of struct sctp_assoc_value in delayed_ack socket option. [ 486.963036][T15024] Use struct sctp_sack_info instead [ 487.224814][T15038] vcan0: tx drop: invalid sa for name 0x0000000000000001 [ 487.389973][T15037] lo speed is unknown, defaulting to 1000 [ 487.439224][T15039] nbd: nbd0 already in use [ 487.490859][T15048] netlink: 'syz.5.2340': attribute type 1 has an invalid length. [ 487.731351][T15057] xt_HMARK: proto mask must be zero with L3 mode [ 487.756983][T15057] netlink: 12 bytes leftover after parsing attributes in process `syz.7.2343'. [ 487.787198][T15057] netlink: 40 bytes leftover after parsing attributes in process `syz.7.2343'. [ 487.977978][T15064] sctp: [Deprecated]: syz.1.2345 (pid 15064) Use of int in max_burst socket option. [ 487.977978][T15064] Use struct sctp_assoc_value instead [ 488.000393][T15068] netlink: 40 bytes leftover after parsing attributes in process `syz.7.2347'. [ 488.012811][T15068] openvswitch: netlink: Flow key attr not present in new flow. [ 488.333209][T15040] IPv6: NLM_F_CREATE should be specified when creating new route [ 488.365777][T15040] IPv6: RTM_NEWROUTE with no NLM_F_CREATE or NLM_F_REPLACE [ 488.373069][T15040] IPv6: NLM_F_CREATE should be set when creating new route [ 488.469490][T15040] netlink: 12 bytes leftover after parsing attributes in process `syz.3.2339'. [ 488.560044][T15095] xt_hashlimit: size too large, truncated to 1048576 [ 488.603101][T15097] Unknown options in mask 6 [ 488.879178][T15093] syzkaller0: entered promiscuous mode [ 488.890605][T15093] syzkaller0: entered allmulticast mode [ 489.023267][T15037] lo speed is unknown, defaulting to 1000 [ 489.025176][T15068] lo speed is unknown, defaulting to 1000 [ 491.880599][T15068] lo speed is unknown, defaulting to 1000 [ 492.159285][T15119] __nla_validate_parse: 3 callbacks suppressed [ 492.159306][T15119] netlink: 60 bytes leftover after parsing attributes in process `syz.5.2361'. [ 492.220431][T15121] netlink: 8 bytes leftover after parsing attributes in process `syz.1.2360'. [ 492.342277][T15128] netlink: 8 bytes leftover after parsing attributes in process `syz.1.2363'. [ 492.353960][T15128] netlink: 4 bytes leftover after parsing attributes in process `syz.1.2363'. [ 492.364926][T15129] netlink: 'syz.0.2362': attribute type 9 has an invalid length. [ 492.497621][T15128] netlink: 8 bytes leftover after parsing attributes in process `syz.1.2363'. [ 492.507238][T15128] netlink: 4 bytes leftover after parsing attributes in process `syz.1.2363'. [ 493.126589][T15138] bond16: option ad_user_port_key: mode dependency failed, not supported in mode balance-rr(0) [ 493.211090][T15138] bond16 (unregistering): Released all slaves [ 493.657047][T15166] netlink: 40 bytes leftover after parsing attributes in process `syz.0.2371'. [ 493.789910][T15168] netlink: 12 bytes leftover after parsing attributes in process `syz.0.2372'. [ 493.872456][T15168] netlink: 'syz.0.2372': attribute type 1 has an invalid length. [ 493.879197][T15171] netlink: 24 bytes leftover after parsing attributes in process `syz.7.2374'. [ 493.918287][T15168] netlink: 756 bytes leftover after parsing attributes in process `syz.0.2372'. [ 494.117590][T15181] syzkaller0: entered promiscuous mode [ 494.148524][T15181] syzkaller0: entered allmulticast mode [ 494.424693][T15198] veth0: entered promiscuous mode [ 494.999025][T15202] bridge8: trying to set multicast query interval below minimum, setting to 100 (1000ms) [ 495.521128][T15232] netlink: 'syz.1.2391': attribute type 1 has an invalid length. [ 495.671380][T15238] netlink: 'syz.7.2393': attribute type 3 has an invalid length. [ 500.015622][T15314] syzkaller1: entered promiscuous mode [ 500.029900][T15314] syzkaller1: entered allmulticast mode [ 500.198088][T15324] __nla_validate_parse: 8 callbacks suppressed [ 500.198106][T15324] netlink: 16 bytes leftover after parsing attributes in process `syz.0.2415'. [ 500.358567][T15331] netlink: 4 bytes leftover after parsing attributes in process `syz.1.2420'. [ 500.380845][T15333] netlink: 'syz.5.2419': attribute type 1 has an invalid length. [ 500.436988][T15338] netlink: 'syz.5.2419': attribute type 5 has an invalid length. [ 500.447463][T15338] netlink: 4 bytes leftover after parsing attributes in process `syz.5.2419'. [ 500.509349][T15333] bond7: entered promiscuous mode [ 500.518208][T15333] 8021q: adding VLAN 0 to HW filter on device bond7 [ 500.555548][T15333] netlink: 4 bytes leftover after parsing attributes in process `syz.5.2419'. [ 500.681553][T15338] bond7: (slave bridge5): making interface the new active one [ 500.710158][T15338] bridge5: entered promiscuous mode [ 500.719018][T15338] bond7: (slave bridge5): Enslaving as an active interface with an up link [ 500.860509][T15360] netlink: 'syz.1.2424': attribute type 10 has an invalid length. [ 500.899668][T15360] netlink: 'syz.1.2424': attribute type 1 has an invalid length. [ 501.009723][T15351] netlink: 44 bytes leftover after parsing attributes in process `syz.1.2424'. [ 501.273772][T15380] netlink: 24 bytes leftover after parsing attributes in process `syz.3.2430'. [ 501.309681][ T1319] ieee802154 phy0 wpan0: encryption failed: -22 [ 501.433206][T15386] netlink: 4 bytes leftover after parsing attributes in process `syz.3.2430'. [ 501.728588][T15410] sctp: [Deprecated]: syz.3.2440 (pid 15410) Use of struct sctp_assoc_value in delayed_ack socket option. [ 501.728588][T15410] Use struct sctp_sack_info instead [ 501.879659][T15418] lo speed is unknown, defaulting to 1000 [ 501.970833][T15431] netlink: 'syz.1.2445': attribute type 1 has an invalid length. [ 502.047461][T15431] 8021q: adding VLAN 0 to HW filter on device bond17 [ 502.572441][T15450] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 502.636205][T15457] netlink: 4 bytes leftover after parsing attributes in process `syz.7.2452'. [ 502.809743][T15455] lo speed is unknown, defaulting to 1000 [ 502.826823][T15418] lo speed is unknown, defaulting to 1000 [ 502.953660][T15470] netlink: 'syz.7.2456': attribute type 32 has an invalid length. [ 503.835671][T15485] openvswitch: netlink: Either Ethernet header or EtherType is required. [ 503.838983][T15454] lo speed is unknown, defaulting to 1000 [ 503.870700][ T30] INFO: task syz.4.1482:11501 blocked for more than 143 seconds. [ 503.908029][ T30] Not tainted syzkaller #0 [ 503.915880][T15485] netlink: 8 bytes leftover after parsing attributes in process `syz.3.2459'. [ 503.937305][ T30] "echo 0 > /proc/sys/kernel/hung_task_timeout_secs" disables this message. [ 503.968739][T15485] netlink: 24 bytes leftover after parsing attributes in process `syz.3.2459'. [ 503.987993][ T30] task:syz.4.1482 state:D stack:25680 pid:11501 tgid:11495 ppid:5624 task_flags:0x400140 flags:0x00080002 [ 504.011711][T15455] lo speed is unknown, defaulting to 1000 [ 504.037457][ T30] Call Trace: [ 504.051387][ T30] [ 504.062873][ T30] __schedule+0x17d9/0x56c0 [ 504.078469][ T30] ? __lock_acquire+0x683/0x2cf0 [ 504.093575][ T30] ? __lock_acquire+0x683/0x2cf0 [ 504.112131][ T30] ? __pfx___schedule+0x10/0x10 [ 504.130876][ T30] ? schedule+0x90/0x2b0 [ 504.152800][ T30] schedule+0x164/0x2b0 [ 504.171657][ T30] schedule_preempt_disabled+0x13/0x30 [ 504.197447][ T30] __mutex_lock+0x7bf/0x1550 [ 504.217549][ T30] ? __mutex_lock+0x5d4/0x1550 [ 504.240721][ T30] ? nfsd_nl_expkey_get_reqs_dumpit+0xfd/0xd40 [ 504.267147][ T30] ? __pfx___mutex_lock+0x10/0x10 [ 504.286376][ T30] ? net_generic+0x1e/0x240 [ 504.295909][ T30] ? net_generic+0x1e/0x240 [ 504.312665][ T30] nfsd_nl_expkey_get_reqs_dumpit+0xfd/0xd40 [ 504.326401][ T30] ? rcu_is_watching+0x15/0xb0 [ 504.335929][ T30] ? trace_kmalloc+0x2a/0xf0 [ 504.346140][ T30] ? __pfx_nfsd_nl_expkey_get_reqs_dumpit+0x10/0x10 [ 504.366683][ T30] ? __kmalloc_node_track_caller_noprof+0x4e1/0x730 [ 504.387159][ T30] ? kmem_cache_alloc_node_noprof+0x1f5/0x610 [ 504.398274][ T30] ? __kmalloc_node_track_caller_noprof+0x2fd/0x730 [ 504.414453][ T30] ? netlink_dump+0x1e7/0xee0 [ 504.424406][ T30] ? netlink_dump+0x1e7/0xee0 [ 504.434545][ T30] genl_dumpit+0x10b/0x1b0 [ 504.444393][ T30] netlink_dump+0x711/0xee0 [ 504.455972][ T30] ? __pfx_netlink_dump+0x10/0x10 [ 504.471417][ T30] ? genl_start+0x497/0x6d0 [ 504.478464][ T30] __netlink_dump_start+0x589/0x7b0 [ 504.494552][ T30] genl_family_rcv_msg_dumpit+0x213/0x310 [ 504.502425][ T30] ? __pfx_genl_family_rcv_msg_dumpit+0x10/0x10 [ 504.517349][ T30] ? __pfx_genl_start+0x10/0x10 [ 504.528098][ T30] ? __pfx_genl_dumpit+0x10/0x10 [ 504.533923][ T30] ? __pfx_genl_done+0x10/0x10 [ 504.545746][ T30] ? bpf_lsm_capable+0x9/0x20 [ 504.552802][ T30] ? security_capable+0x7e/0x2c0 [ 504.562107][ T30] genl_rcv_msg+0x5e1/0x7a0 [ 504.572697][ T30] ? __pfx_genl_rcv_msg+0x10/0x10 [ 504.581275][ T30] ? __pfx_nfsd_nl_expkey_get_reqs_dumpit+0x10/0x10 [ 504.592286][ T30] netlink_rcv_skb+0x226/0x4a0 [ 504.600877][ T30] ? __pfx_genl_rcv_msg+0x10/0x10 [ 504.609547][ T30] ? __pfx_netlink_rcv_skb+0x10/0x10 [ 504.618521][ T30] ? down_read+0x2be/0x330 [ 504.627008][ T30] genl_rcv+0x28/0x40 [ 504.637163][ T30] netlink_unicast+0x7bb/0x940 [ 504.649347][ T30] netlink_sendmsg+0x813/0xb40 [ 504.660054][ T30] ? __pfx_netlink_sendmsg+0x10/0x10 [ 504.671368][ T30] ? aa_sock_msg_perm+0xf1/0x1b0 [ 504.682646][ T30] ? __pfx_netlink_sendmsg+0x10/0x10 [ 504.694047][ T30] sock_sendmsg_nosec+0x13a/0x180 [ 504.705554][ T30] ____sys_sendmsg+0x54e/0x850 [ 504.713814][ T30] ? __pfx_____sys_sendmsg+0x10/0x10 [ 504.725748][ T30] ? import_iovec+0x73/0xa0 [ 504.736010][ T30] ___sys_sendmsg+0x2a5/0x360 [ 504.747667][ T30] ? __lock_acquire+0x683/0x2cf0 [ 504.754980][ T30] ? __pfx____sys_sendmsg+0x10/0x10 [ 504.760882][ T30] ? futex_wake+0x51b/0x5f0 [ 504.767133][ T30] ? __fget_files+0x2a/0x420 [ 504.772370][ T30] ? __fget_files+0x3a2/0x420 [ 504.778166][ T30] __x64_sys_sendmsg+0x1b1/0x290 [ 504.783790][ T30] ? __pfx___x64_sys_sendmsg+0x10/0x10 [ 504.796859][ T30] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 504.803867][ T30] do_syscall_64+0x174/0x580 [ 504.809571][ T30] ? trace_irq_disable+0x3b/0x140 [ 504.818224][ T30] ? clear_bhb_loop+0x40/0x90 [ 504.823535][ T30] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 504.831095][ T30] RIP: 0033:0x7f0bc299de59 [ 504.838109][ T30] RSP: 002b:00007f0bc3887028 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 504.848558][ T30] RAX: ffffffffffffffda RBX: 00007f0bc2c26090 RCX: 00007f0bc299de59 [ 504.858295][ T30] RDX: 0000000004044810 RSI: 0000200000000180 RDI: 000000000000000b [ 504.868358][ T30] RBP: 00007f0bc2a33e6f R08: 0000000000000000 R09: 0000000000000000 [ 504.877726][ T30] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 504.888632][ T30] R13: 00007f0bc2c26128 R14: 00007f0bc2c26090 R15: 00007ffc24ab4f68 [ 504.898511][ T30] [ 504.921704][ T30] [ 504.921704][ T30] Showing all locks held in the system: [ 504.930820][ T30] 1 lock held by khungtaskd/30: [ 504.973048][ T30] #0: ffffffff8eb59c60 (rcu_read_lock){....}-{1:3}, at: debug_show_all_locks+0x2e/0x180 [ 505.019779][ T30] 3 locks held by udevd/4989: [ 505.041151][ T30] #0: ffff8880b873b160 (&rq->__lock){-.-.}-{2:2}, at: raw_spin_rq_lock_nested+0x2d/0x160 [ 505.074279][ T30] #1: ffff8880b8724440 (psi_seq){-.-.}-{0:0}, at: psi_task_switch+0x57/0x7d0 [ 505.094170][ T30] #2: ffff88807f25f180 (&____s->seqcount#9){....}-{0:0}, at: ep_try_send_events+0xb97/0xd50 [ 505.116480][ T30] 2 locks held by getty/5381: [ 505.126273][ T30] #0: ffff8880325c90a0 (&tty->ldisc_sem){++++}-{0:0}, at: tty_ldisc_ref_wait+0x25/0x70 [ 505.152977][ T30] #1: ffffc900032332e8 (&ldata->atomic_read_lock){+.+.}-{4:4}, at: n_tty_read+0x45a/0x1360 [ 505.182191][ T30] 2 locks held by kworker/u8:14/8020: [ 505.187957][ T30] 2 locks held by syz.2.734/8724: [ 505.193098][ T30] #0: ffffffff9009cae8 (cb_lock){++++}-{4:4}, at: genl_rcv+0x19/0x40 [ 505.201814][ T30] #1: ffffffff8ee8e620 (nfsd_mutex){+.+.}-{4:4}, at: nfsd_nl_listener_set_doit+0x135/0x1750 [ 505.217181][ T30] 5 locks held by kworker/u8:22/9271: [ 505.222681][ T30] #0: ffff8880b863b160 (&rq->__lock){-.-.}-{2:2}, at: raw_spin_rq_lock_nested+0x2d/0x160 [ 505.233005][ T30] #1: ffff8880b8624440 (psi_seq){-.-.}-{0:0}, at: psi_task_switch+0x57/0x7d0 [ 505.242207][ T30] #2: ffff8880b8626058 (&base->lock){-.-.}-{2:2}, at: __mod_timer+0x1a9/0xed0 [ 505.251786][ T30] #3: ffffffff9aa327a8 (&obj_hash[i].lock){-.-.}-{2:2}, at: debug_object_activate+0xb7/0x420 [ 505.262796][ T30] #4: ffffffff8eb59c60 (rcu_read_lock){....}-{1:3}, at: unwind_next_frame+0x8f/0x2550 [ 505.275011][ T30] 3 locks held by syz.4.1482/11501: [ 505.281239][ T30] #0: ffffffff9009cae8 (cb_lock){++++}-{4:4}, at: genl_rcv+0x19/0x40 [ 505.290041][ T30] #1: ffff8880546bf6e8 (nlk_cb_mutex-GENERIC){+.+.}-{4:4}, at: __netlink_dump_start+0xf4/0x7b0 [ 505.301257][ T30] #2: ffffffff8ee8e620 (nfsd_mutex){+.+.}-{4:4}, at: nfsd_nl_expkey_get_reqs_dumpit+0xfd/0xd40 [ 505.313221][ T30] 3 locks held by syz.6.1711/12533: [ 505.319909][ T30] #0: ffffffff9009cae8 (cb_lock){++++}-{4:4}, at: genl_rcv+0x19/0x40 [ 505.330233][ T30] #1: ffff888055c986e8 (nlk_cb_mutex-GENERIC){+.+.}-{4:4}, at: __netlink_dump_start+0xf4/0x7b0 [ 505.341097][ T30] #2: ffffffff8ee8e620 (nfsd_mutex){+.+.}-{4:4}, at: nfsd_nl_rpc_status_get_dumpit+0xdc/0x13b0 [ 505.351742][ T30] 3 locks held by syz.0.2442/15418: [ 505.357310][ T30] #0: ffffffff9001d6a8 (pernet_ops_rwsem){++++}-{4:4}, at: copy_net_ns+0x4e2/0x720 [ 505.367227][ T30] #1: ffffffff9002c240 (rtnl_mutex){+.+.}-{4:4}, at: ops_undo_list+0x28e/0x8d0 [ 505.376507][ T30] #2: ffffffff8eb5ff68 (rcu_state.exp_mutex){+.+.}-{4:4}, at: synchronize_rcu_expedited+0x2d0/0x770 [ 505.387529][ T30] 6 locks held by syz.5.2449/15454: [ 505.392737][ T30] #0: ffffffff9001d6a8 (pernet_ops_rwsem){++++}-{4:4}, at: copy_net_ns+0x4e2/0x720 [ 505.402380][ T30] #1: ffffffff8fd7c308 (devices_rwsem){++++}-{4:4}, at: rdma_dev_init_net+0x200/0x2f0 [ 505.412329][ T30] #2: ffffffff8fd7c4c8 (rdma_nets_rwsem){++++}-{4:4}, at: rdma_dev_init_net+0x238/0x2f0 [ 505.422303][ T30] #3: ffff88807c508fe0 (&device->compat_devs_mutex){+.+.}-{4:4}, at: add_one_compat_dev+0xf0/0x650 [ 505.433289][ T30] #4: ffff88807c5092d0 (&rxe->usdev_lock){+.+.}-{4:4}, at: rxe_query_port+0x7e/0x3d0 [ 505.443346][ T30] #5: ffffffff9002c240 (rtnl_mutex){+.+.}-{4:4}, at: ib_get_eth_speed+0x173/0x7f0 [ 505.452910][ T30] 2 locks held by syz.5.2449/15455: [ 505.458349][ T30] #0: ffffffff9001d6a8 (pernet_ops_rwsem){++++}-{4:4}, at: copy_net_ns+0x4e2/0x720 [ 505.468300][ T30] #1: ffffffff9002c240 (rtnl_mutex){+.+.}-{4:4}, at: ip_tunnel_init_net+0x2d5/0x820 [ 505.478300][ T30] [ 505.484255][ T30] ============================================= [ 505.484255][ T30] [ 505.504242][ T30] NMI backtrace for cpu 0 [ 505.504266][ T30] CPU: 0 UID: 0 PID: 30 Comm: khungtaskd Not tainted syzkaller #0 PREEMPT(full) [ 505.504309][ T30] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 06/25/2026 [ 505.504331][ T30] Call Trace: [ 505.504346][ T30] [ 505.504363][ T30] dump_stack_lvl+0xe8/0x150 [ 505.504394][ T30] nmi_cpu_backtrace+0x274/0x2d0 [ 505.504513][ T30] ? __pfx_nmi_raise_cpu_backtrace+0x10/0x10 [ 505.504543][ T30] nmi_trigger_cpumask_backtrace+0x17a/0x380 [ 505.504568][ T30] sys_info+0x135/0x170 [ 505.504585][ T30] watchdog+0xfd7/0x1030 [ 505.504618][ T30] ? watchdog+0x1c7/0x1030 [ 505.504644][ T30] kthread+0x388/0x470 [ 505.504668][ T30] ? __pfx_watchdog+0x10/0x10 [ 505.504688][ T30] ? __pfx_kthread+0x10/0x10 [ 505.504713][ T30] ret_from_fork+0x514/0xb70 [ 505.504756][ T30] ? __pfx_ret_from_fork+0x10/0x10 [ 505.504782][ T30] ? __switch_to+0xc89/0x1420 [ 505.504805][ T30] ? __pfx_kthread+0x10/0x10 [ 505.504832][ T30] ret_from_fork_asm+0x1a/0x30 [ 505.504858][ T30] [ 505.504955][ T30] Sending NMI from CPU 0 to CPUs 1: [ 505.626514][ C1] NMI backtrace for cpu 1 [ 505.626541][ C1] CPU: 1 UID: 0 PID: 0 Comm: swapper/1 Not tainted syzkaller #0 PREEMPT(full) [ 505.626561][ C1] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 06/25/2026 [ 505.626572][ C1] RIP: 0010:pv_native_safe_halt+0xf/0x20 [ 505.626603][ C1] Code: ac 80 02 e9 13 05 03 00 cc cc cc 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 f3 0f 1e fa 66 90 0f 00 2d 53 7a 1a 00 fb f4 cc cc cc cc cc cc cc cc cc cc cc cc cc cc cc cc 90 90 90 90 90 [ 505.626619][ C1] RSP: 0018:ffffc90000197e40 EFLAGS: 00000242 [ 505.626635][ C1] RAX: 000000000016ef57 RBX: ffffffff819ab450 RCX: 0000000080000001 [ 505.626648][ C1] RDX: 0000000000000001 RSI: ffffffff8e22ba3a RDI: ffffffff8c4bd380 [ 505.626661][ C1] RBP: ffffc90000197f10 R08: ffff8880b87338db R09: 1ffff110170e671b [ 505.626674][ C1] R10: dffffc0000000000 R11: ffffed10170e671c R12: 0000000000000000 [ 505.626686][ C1] R13: 1ffff11003c52000 R14: 1ffff92000032fd0 R15: dffffc0000000000 [ 505.626699][ C1] FS: 0000000000000000(0000) GS:ffff88812505e000(0000) knlGS:0000000000000000 [ 505.626714][ C1] CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033 [ 505.626726][ C1] CR2: 00005555681284e8 CR3: 00000000750fc000 CR4: 00000000003526f0 [ 505.626748][ C1] Call Trace: [ 505.626756][ C1] [ 505.626762][ C1] default_idle+0x9/0x20 [ 505.626779][ C1] default_idle_call+0x72/0xb0 [ 505.626797][ C1] do_idle+0x2e0/0x540 [ 505.626822][ C1] ? __pfx_do_idle+0x10/0x10 [ 505.626846][ C1] ? do_idle+0x4d1/0x540 [ 505.626868][ C1] cpu_startup_entry+0x43/0x60 [ 505.626891][ C1] start_secondary+0x101/0x110 [ 505.626915][ C1] common_startup_64+0x13e/0x157 [ 505.626943][ C1] [ 505.807426][ T30] Kernel panic - not syncing: hung_task: blocked tasks [ 505.814307][ T30] CPU: 0 UID: 0 PID: 30 Comm: khungtaskd Not tainted syzkaller #0 PREEMPT(full) [ 505.823410][ T30] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 06/25/2026 [ 505.833463][ T30] Call Trace: [ 505.836823][ T30] [ 505.839753][ T30] vpanic+0x56c/0xa60 [ 505.843751][ T30] ? __pfx___schedule+0x10/0x10 [ 505.848625][ T30] ? __pfx_vpanic+0x10/0x10 [ 505.853137][ T30] ? irqentry_exit+0x218/0x8f0 [ 505.857906][ T30] panic+0xc5/0xd0 [ 505.861633][ T30] ? __pfx_panic+0x10/0x10 [ 505.866498][ T30] watchdog+0x1030/0x1030 [ 505.870844][ T30] ? watchdog+0x1c7/0x1030 [ 505.875256][ T30] kthread+0x388/0x470 [ 505.879334][ T30] ? __pfx_watchdog+0x10/0x10 [ 505.884004][ T30] ? __pfx_kthread+0x10/0x10 [ 505.888595][ T30] ret_from_fork+0x514/0xb70 [ 505.893190][ T30] ? __pfx_ret_from_fork+0x10/0x10 [ 505.898306][ T30] ? __switch_to+0xc89/0x1420 [ 505.902980][ T30] ? __pfx_kthread+0x10/0x10 [ 505.907572][ T30] ret_from_fork_asm+0x1a/0x30 [ 505.912346][ T30] [ 505.915513][ T30] Kernel Offset: disabled [ 505.919922][ T30] Rebooting in 86400 seconds..