last executing test programs: 1m7.22827098s ago: executing program 1 (id=6114): r0 = socket$inet_smc(0x2b, 0x1, 0x0) ioctl$sock_inet_tcp_SIOCINQ(r0, 0x541b, &(0x7f0000000000)) r1 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) sendmsg$IEEE802154_LLSEC_ADD_DEV(r1, &(0x7f0000000100)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x80000}, 0xc, &(0x7f00000000c0)={&(0x7f0000000080)={0x2c, 0x0, 0x4, 0x70bd27, 0x25dfdbfb, {}, [@IEEE802154_ATTR_LLSEC_DEV_KEY_MODE={0x5, 0x37, 0x2}, @IEEE802154_ATTR_DEV_INDEX={0x8}, @IEEE802154_ATTR_LLSEC_DEV_OVERRIDE={0x5, 0x36, 0x1}]}, 0x2c}, 0x1, 0x0, 0x0, 0x40010}, 0xbdc38b03f3011cac) setsockopt$inet_tcp_TCP_REPAIR_WINDOW(r0, 0x6, 0x1d, &(0x7f0000000140)={0xb, 0x7f, 0xd, 0x1, 0x401}, 0x14) ioctl$XFS_IOC_FD_TO_HANDLE(r0, 0xc038586a, &(0x7f0000000280)={r0, &(0x7f0000000180)='c\xd6\x00', 0x41, &(0x7f00000001c0)={@_ha_fsid={[0x1, 0x7]}, {0x1, 0x675, 0x2, 0x6}}, 0x5, &(0x7f0000000200)={@_ha_fsid}, &(0x7f0000000240)=0x180000}) sendmsg$DCCPDIAG_GETSOCK(r2, &(0x7f00000004c0)={&(0x7f00000002c0)={0x10, 0x0, 0x0, 0x2000000}, 0xc, &(0x7f0000000480)={&(0x7f0000000300)={0x15c, 0x13, 0x300, 0x70bd25, 0x25dfdbff, {0x8, 0x4, 0x6, 0x4, {0x4e24, 0x4e24, [0xfffffff8, 0x7, 0x81, 0x1ff], [0x2, 0x7, 0x8, 0x60], 0x0, [0x1]}, 0xb, 0xb}, [@INET_DIAG_REQ_BYTECODE={0xbd, 0x1, "80f6cbb5ccd4af96444935dae2a2a19b87b815e534a666f6a2c2a27d9ef5c2a2eb06e5cb8855cfb2a1ddd64fc10b039b90530ee174a04409ed26efad50df7213566a66decb3b75c4cb7dee5e3b1fb24083b89c84f34bb556dfa1e67bb31b7680b4d2b8c97cbb1853b1daabedb643101e8ffc6699ee050055d86abfa2eae45ffa113f47e437beca6e25d8530720e5da04a3cb2fda6b848837c071a43dae3030099222966abe921db1ab52c8a77b510fdf1b6096888ee75aa59b"}, @INET_DIAG_REQ_BYTECODE={0x4f, 0x1, "049fd64fef5aec323080b96c8605ad797787ff4af837c67d0531be117634cf3596b07bfd17d7494a7083fb366d7db63f1bda704e095645d3c059a4da2ec3b6699f83937e910cd501b98458"}]}, 0x15c}, 0x1, 0x0, 0x0, 0x48010}, 0x24000054) r3 = syz_genetlink_get_family_id$netlbl_unlabel(&(0x7f0000000540), r1) sendmsg$NLBL_UNLABEL_C_STATICADDDEF(r1, &(0x7f0000000600)={&(0x7f0000000500)={0x10, 0x0, 0x0, 0x20000}, 0xc, &(0x7f00000005c0)={&(0x7f0000000580)={0x1c, r3, 0x4, 0x70bd25, 0x25dfdbfd, {}, [@NLBL_UNLABEL_A_IPV4ADDR={0x8, 0x4, @local}]}, 0x1c}, 0x1, 0x0, 0x0, 0x8000}, 0xc040884) r4 = socket$nl_crypto(0x10, 0x3, 0x15) sendmsg$nl_crypto(r4, &(0x7f00000007c0)={&(0x7f0000000640)={0x10, 0x0, 0x0, 0x10}, 0xc, &(0x7f0000000780)={&(0x7f0000000680)=@get={0xf0, 0x13, 0x200, 0x70bd2a, 0x25dfdbff, {{'poly1305\x00'}, '\x00', '\x00', 0x2400, 0x400}, [{0x8, 0x1, 0x3}, {0x8, 0x1, 0x5}]}, 0xf0}, 0x1, 0x0, 0x0, 0x10}, 0x0) r5 = syz_genetlink_get_family_id$nl802154(&(0x7f0000000840), r1) ioctl$sock_SIOCGIFINDEX_802154(r1, 0x8933, &(0x7f0000000880)={'wpan0\x00', 0x0}) ioctl$sock_SIOCGIFINDEX_802154(r1, 0x8933, &(0x7f00000008c0)={'wpan0\x00', 0x0}) sendmsg$NL802154_CMD_GET_SEC_DEVKEY(r1, &(0x7f00000009c0)={&(0x7f0000000800)={0x10, 0x0, 0x0, 0x200}, 0xc, &(0x7f0000000980)={&(0x7f0000000900)={0x48, r5, 0x200, 0x70bd2b, 0x25dfdbfc, {}, [@NL802154_ATTR_IFINDEX={0x8, 0x3, r6}, @NL802154_ATTR_WPAN_DEV={0xc, 0x6, 0x100000001}, @NL802154_ATTR_WPAN_DEV={0xc, 0x6, 0x100000001}, @NL802154_ATTR_WPAN_DEV={0xc, 0x6, 0x200000002}, @NL802154_ATTR_IFINDEX={0x8, 0x3, r7}]}, 0x48}, 0x1, 0x0, 0x0, 0x8001}, 0x4) r8 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX_802154(r1, 0x8933, &(0x7f0000000a40)={'wpan0\x00', 0x0}) sendmsg$NL802154_CMD_DEL_SEC_DEVKEY(r8, &(0x7f0000000bc0)={&(0x7f0000000a00)={0x10, 0x0, 0x0, 0x2}, 0xc, &(0x7f0000000b80)={&(0x7f0000000a80)={0xc8, r5, 0x20, 0x70bd2b, 0x25dfdbfe, {}, [@NL802154_ATTR_SEC_DEVKEY={0x18, 0x2f, 0x0, 0x1, [@NL802154_DEVKEY_ATTR_EXTENDED_ADDR={0xc, 0x2, {0xaaaaaaaaaaaa0302}}, @NL802154_DEVKEY_ATTR_FRAME_COUNTER={0x8, 0x1, 0x8}]}, @NL802154_ATTR_WPAN_DEV={0xc, 0x6, 0x200000002}, @NL802154_ATTR_IFINDEX={0x8, 0x3, r9}, @NL802154_ATTR_IFINDEX={0x8, 0x3, r6}, @NL802154_ATTR_IFINDEX={0x8, 0x3, r7}, @NL802154_ATTR_SEC_DEVKEY={0x78, 0x2f, 0x0, 0x1, [@NL802154_DEVKEY_ATTR_ID={0x14, 0x3, 0x0, 0x1, [@NL802154_KEY_ID_ATTR_INDEX={0x5, 0x2, 0x3}, @NL802154_KEY_ID_ATTR_SOURCE_SHORT={0x8, 0x4, 0x98f0}]}, @NL802154_DEVKEY_ATTR_ID={0x60, 0x3, 0x0, 0x1, [@NL802154_KEY_ID_ATTR_SOURCE_EXTENDED={0xc, 0x5, 0x5}, @NL802154_KEY_ID_ATTR_MODE={0x8}, @NL802154_KEY_ID_ATTR_IMPLICIT={0x34, 0x3, 0x0, 0x1, [@NL802154_DEV_ADDR_ATTR_PAN_ID={0x6, 0x1, 0x1}, @NL802154_DEV_ADDR_ATTR_SHORT={0x6, 0x3, 0xaaa0}, @NL802154_DEV_ADDR_ATTR_MODE={0x8, 0x2, 0x1}, @NL802154_DEV_ADDR_ATTR_PAN_ID={0x6, 0x1, 0x2}, @NL802154_DEV_ADDR_ATTR_SHORT={0x6, 0x3, 0xfffe}, @NL802154_DEV_ADDR_ATTR_PAN_ID={0x6}]}, @NL802154_KEY_ID_ATTR_SOURCE_EXTENDED={0xc, 0x5, 0x80000001}, @NL802154_KEY_ID_ATTR_SOURCE_SHORT={0x8, 0x4, 0x1}]}]}]}, 0xc8}, 0x1, 0x0, 0x0, 0x4}, 0x4000080) write$tun(r2, &(0x7f0000000c00)={@val={0x0, 0x86dd}, @val={0x3, 0x4, 0xfff, 0x4, 0x2, 0x5}, @x25={0x0, 0x80, 0x1b, "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"}}, 0x1011) sendmsg$NL80211_CMD_ABORT_SCAN(r2, &(0x7f0000001d00)={&(0x7f0000001c40)={0x10, 0x0, 0x0, 0x800}, 0xc, &(0x7f0000001cc0)={&(0x7f0000001c80)={0x20, 0x0, 0x8, 0x70bd2c, 0x25dfdbfb, {{}, {@void, @val={0xc, 0x99, {0x7, 0x7f}}}}, ["", "", "", "", "", "", "", ""]}, 0x20}, 0x1, 0x0, 0x0, 0x4800}, 0x44000) sendmsg$DEVLINK_CMD_RATE_SET(r2, &(0x7f0000001e00)={&(0x7f0000001d40)={0x10, 0x0, 0x0, 0x800}, 0xc, &(0x7f0000001dc0)={&(0x7f0000001d80)={0x20, 0x0, 0x400, 0x70bd2b, 0x25dfdbfd, {}, [@DEVLINK_ATTR_RATE_TX_SHARE={0xc, 0xa6, 0xff}]}, 0x20}, 0x1, 0x0, 0x0, 0x48000}, 0x0) r10 = syz_genetlink_get_family_id$nl802154(&(0x7f0000001e80), r1) sendmsg$NL802154_CMD_SET_TX_POWER(r8, &(0x7f0000001f80)={&(0x7f0000001e40)={0x10, 0x0, 0x0, 0x2}, 0xc, &(0x7f0000001f40)={&(0x7f0000001ec0)={0x44, r10, 0x1, 0x70bd25, 0x25dfdbfe, {}, [@NL802154_ATTR_WPAN_PHY={0x8}, @NL802154_ATTR_WPAN_DEV={0xc}, @NL802154_ATTR_IFINDEX={0x8, 0x3, r7}, @NL802154_ATTR_IFINDEX={0x8, 0x3, r6}, @NL802154_ATTR_WPAN_DEV={0xc, 0x6, 0x2}]}, 0x44}, 0x1, 0x0, 0x0, 0x24044000}, 0x41) ioctl$IOCTL_GET_NCIDEV_IDX(r2, 0x0, &(0x7f0000002000)=0x0) sendmsg$NFC_CMD_DEP_LINK_UP(r8, &(0x7f00000020c0)={&(0x7f0000001fc0)={0x10, 0x0, 0x0, 0x40000000}, 0xc, &(0x7f0000002080)={&(0x7f0000002040)={0x1c, 0x0, 0x800, 0x70bd2c, 0x25dfdbfc, {}, [@NFC_ATTR_DEVICE_INDEX={0x8, 0x1, r11}]}, 0x1c}, 0x1, 0x0, 0x0, 0x40010}, 0x4008001) bind$bt_sco(r2, &(0x7f0000002100)={0x1f, @fixed={'\xaa\xaa\xaa\xaa\xaa', 0x10}}, 0x8) sendmsg$NFC_CMD_DEP_LINK_UP(r8, &(0x7f0000002200)={&(0x7f0000002140)={0x10, 0x0, 0x0, 0x1000}, 0xc, &(0x7f00000021c0)={&(0x7f0000002180)={0x2c, 0x0, 0x300, 0x70bd29, 0x25dfdbff, {}, [@NFC_ATTR_TARGET_INDEX={0x8, 0x4, 0xffffffffffffffff}, @NFC_ATTR_COMM_MODE={0x5, 0xa, 0x1}, @NFC_ATTR_TARGET_INDEX={0x8, 0x4, 0xffffffffffffffff}]}, 0x2c}, 0x1, 0x0, 0x0, 0x40080}, 0x10010) getsockopt$MRT(r0, 0x0, 0x0, &(0x7f0000002240), &(0x7f0000002280)=0x4) r12 = openat$cgroup_ro(0xffffffffffffffff, &(0x7f00000022c0)='cgroup.events\x00', 0x0, 0x0) sendmsg$TIPC_NL_BEARER_SET(r12, &(0x7f0000002440)={&(0x7f0000002300)={0x10, 0x0, 0x0, 0x4}, 0xc, &(0x7f0000002400)={&(0x7f0000002380)={0x48, 0x0, 0x100, 0x70bd2d, 0x25dfdbfb, {}, [@TIPC_NLA_MON={0x34, 0x9, 0x0, 0x1, [@TIPC_NLA_MON_ACTIVATION_THRESHOLD={0x8, 0x1, 0x4}, @TIPC_NLA_MON_ACTIVATION_THRESHOLD={0x8, 0x1, 0x5}, @TIPC_NLA_MON_REF={0x8, 0x2, 0x3}, @TIPC_NLA_MON_ACTIVATION_THRESHOLD={0x8, 0x1, 0x9}, @TIPC_NLA_MON_REF={0x8, 0x2, 0x9}, @TIPC_NLA_MON_REF={0x8, 0x2, 0x1}]}]}, 0x48}, 0x1, 0x0, 0x0, 0x40081}, 0x40010) 1m6.680517763s ago: executing program 1 (id=6118): r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = socket(0x10, 0x803, 0x0) syz_genetlink_get_family_id$nl80211(&(0x7f00000001c0), r1) getsockname$packet(r1, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route(r1, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000004c0)=ANY=[@ANYBLOB="3c0000001000850600"/20, @ANYRES32=r2, @ANYBLOB="01000000200000001c0012000c000100626f6e64000000000c0002000800010006"], 0x3c}}, 0x0) r3 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r3, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000480)=ANY=[@ANYBLOB="3c0000001000030400"/20, @ANYRES32=0x0, @ANYBLOB="a4280400000000001400350076657468305f746f5f626f6e6400000008000a00", @ANYRES32=r2], 0x3c}, 0x1, 0x0, 0x0, 0x4008800}, 0x8000) sendmsg$nl_route(r0, &(0x7f0000000c80)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f00000002c0)=ANY=[], 0x2c}, 0x1, 0x0, 0x0, 0x40000}, 0x42) 1m5.430914692s ago: executing program 1 (id=6126): r0 = bpf$PROG_LOAD_XDP(0x5, &(0x7f00000003c0)={0x6, 0x3d, &(0x7f0000000000)=@ringbuf={{0x18, 0x0, 0x0, 0x0, 0x8, 0x0, 0x0, 0x0, 0x1}, {{0x18, 0x1, 0x1, 0x0, 0x1}}, {}, [@tail_call, @map_idx_val={0x18, 0x7, 0x6, 0x0, 0x9, 0x0, 0x0, 0x0, 0x8}, @jmp={0x5, 0x0, 0x9, 0x3, 0x0, 0xc, 0x8}, @map_fd={0x18, 0x8}, @snprintf={{}, {}, {0x7, 0x0, 0xb, 0x8, 0x0, 0x0, 0xff}}, @map_val={0x18, 0x3, 0x2, 0x0, 0x1, 0x0, 0x0, 0x0, 0x7fc00000}, @ringbuf_query={{0x18, 0x1, 0x1, 0x0, 0x1}}, @map_idx_val={0x18, 0x4, 0x6, 0x0, 0x9, 0x0, 0x0, 0x0, 0x3f348b51}, @map_fd={0x18, 0x1, 0x1, 0x0, 0x1}, @snprintf={{}, {}, {0x7, 0x0, 0xb, 0x8, 0x0, 0x0, 0x4}, {}, {}, {}, {}, {}, {}, {0x18, 0x3, 0x2, 0x0, 0x1}}], {{}, {}, {0x85, 0x0, 0x0, 0x85}}}, &(0x7f0000000200)='syzkaller\x00', 0x2, 0xa0, &(0x7f0000000240)=""/160, 0x41100, 0x2b, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, &(0x7f0000000300)={0x1, 0x4}, 0x8, 0x10, &(0x7f0000000340)={0x3, 0x9, 0x7ff, 0x4}, 0x10, 0x0, 0x0, 0x0, &(0x7f0000000380)=[0x1, 0xffffffffffffffff, 0xffffffffffffffff], 0x0, 0x10, 0x5}, 0x94) (async) ioctl$sock_ipv6_tunnel_SIOCGETTUNNEL(0xffffffffffffffff, 0x89f0, &(0x7f0000000500)={'syztnl1\x00', &(0x7f0000000480)={'syztnl1\x00', 0x0, 0x4, 0x0, 0x4f, 0x3, 0x31, @initdev={0xfe, 0x88, '\x00', 0x0, 0x0}, @mcast2, 0x7800, 0x8000, 0x9}}) r2 = bpf$BPF_LINK_CREATE_XDP(0x1c, &(0x7f0000000540)={r0, r1, 0x25, 0x9, @void}, 0x10) (async) r3 = socket$nl_rdma(0x10, 0x3, 0x14) (async) r4 = ioctl$TUNGETDEVNETNS(0xffffffffffffffff, 0x54e3, 0x0) sendmsg$RDMA_NLDEV_CMD_SYS_SET(r3, &(0x7f0000000640)={&(0x7f0000000580)={0x10, 0x0, 0x0, 0x800}, 0xc, &(0x7f0000000600)={&(0x7f00000005c0)={0x38, 0x1407, 0x4, 0x70bd26, 0x25dfdbff, "", [@RDMA_NLDEV_ATTR_DEV_NAME={0x9, 0x2, 'syz0\x00'}, @RDMA_NLDEV_ATTR_DEV_NAME={0x9, 0x2, 'syz2\x00'}, @RDMA_NLDEV_ATTR_DEV_DIM={0x5, 0x54, 0x1}, @RDMA_NLDEV_NET_NS_FD={0x8, 0x44, r4}]}, 0x38}, 0x1, 0x0, 0x0, 0x4008001}, 0x4880) (async) r5 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r6 = syz_genetlink_get_family_id$nl802154(&(0x7f0000000680), r5) (async) ioctl$XFS_IOC_PATH_TO_HANDLE(r0, 0xc0385869, &(0x7f00000007c0)={r0, &(0x7f00000006c0)='\x00', 0x0, &(0x7f0000000700)={@align=0x7, {0x400, 0x3, 0x7fffffff, 0x40}}, 0xfffffff9, &(0x7f0000000740), &(0x7f0000000780)=0x3}) sendmsg$TIPC_NL_BEARER_ADD(r7, &(0x7f0000000ac0)={&(0x7f0000000800)={0x10, 0x0, 0x0, 0x100}, 0xc, &(0x7f0000000a80)={&(0x7f0000000840)={0x204, 0x0, 0x4, 0x70bd26, 0x25dfdbfb, {}, [@TIPC_NLA_NET={0x2c, 0x7, 0x0, 0x1, [@TIPC_NLA_NET_ADDR={0x8, 0x2, 0x8}, @TIPC_NLA_NET_NODEID_W1={0xc, 0x4, 0x1}, @TIPC_NLA_NET_ID={0x8, 0x1, 0x1}, @TIPC_NLA_NET_NODEID={0xc, 0x3, 0x6}]}, @TIPC_NLA_NET={0x1c, 0x7, 0x0, 0x1, [@TIPC_NLA_NET_NODEID={0xc, 0x3, 0x3f}, @TIPC_NLA_NET_NODEID={0xc, 0x3, 0x4}]}, @TIPC_NLA_MON={0xc, 0x9, 0x0, 0x1, [@TIPC_NLA_MON_REF={0x8}]}, @TIPC_NLA_MEDIA={0x110, 0x5, 0x0, 0x1, [@TIPC_NLA_MEDIA_PROP={0x2c, 0x2, 0x0, 0x1, [@TIPC_NLA_PROP_WIN={0x8, 0x3, 0x101}, @TIPC_NLA_PROP_WIN={0x8, 0x3, 0x11}, @TIPC_NLA_PROP_MTU={0x8, 0x4, 0xffff0000}, @TIPC_NLA_PROP_MTU={0x8, 0x4, 0x3}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x20}]}, @TIPC_NLA_MEDIA_PROP={0x4c, 0x2, 0x0, 0x1, [@TIPC_NLA_PROP_WIN={0x8, 0x3, 0x9}, @TIPC_NLA_PROP_TOL={0x8, 0x2, 0x1000000}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0xc}, @TIPC_NLA_PROP_TOL={0x8, 0x2, 0xbda}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x12}, @TIPC_NLA_PROP_TOL={0x8, 0x2, 0x2}, @TIPC_NLA_PROP_WIN={0x8, 0x3, 0x9}, @TIPC_NLA_PROP_WIN={0x8, 0x3, 0xffff}, @TIPC_NLA_PROP_TOL={0x8, 0x2, 0xffffffff}]}, @TIPC_NLA_MEDIA_PROP={0x34, 0x2, 0x0, 0x1, [@TIPC_NLA_PROP_TOL={0x8, 0x2, 0x9}, @TIPC_NLA_PROP_WIN={0x8, 0x3, 0x2}, @TIPC_NLA_PROP_MTU={0x8, 0x4, 0x4a5}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x16}, @TIPC_NLA_PROP_WIN={0x8}, @TIPC_NLA_PROP_WIN={0x8, 0x3, 0x6}]}, @TIPC_NLA_MEDIA_PROP={0x44, 0x2, 0x0, 0x1, [@TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x10}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x1a}, @TIPC_NLA_PROP_WIN={0x8, 0x3, 0x80000000}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x6}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x19}, @TIPC_NLA_PROP_TOL={0x8, 0x2, 0x2}, @TIPC_NLA_PROP_MTU={0x8, 0x4, 0x6}, @TIPC_NLA_PROP_TOL={0x8, 0x2, 0x4}]}, @TIPC_NLA_MEDIA_PROP={0x1c, 0x2, 0x0, 0x1, [@TIPC_NLA_PROP_TOL={0x8, 0x2, 0x7}, @TIPC_NLA_PROP_WIN={0x8, 0x3, 0x8}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x5}]}]}, @TIPC_NLA_LINK={0x8c, 0x4, 0x0, 0x1, [@TIPC_NLA_LINK_NAME={0x9, 0x1, 'syz0\x00'}, @TIPC_NLA_LINK_NAME={0x9, 0x1, 'syz0\x00'}, @TIPC_NLA_LINK_PROP={0x14, 0x7, 0x0, 0x1, [@TIPC_NLA_PROP_TOL={0x8, 0x2, 0x81}, @TIPC_NLA_PROP_MTU={0x8, 0x4, 0x43a}]}, @TIPC_NLA_LINK_PROP={0x24, 0x7, 0x0, 0x1, [@TIPC_NLA_PROP_WIN={0x8, 0x3, 0x3432b62a}, @TIPC_NLA_PROP_WIN={0x8, 0x3, 0xf5cf}, @TIPC_NLA_PROP_WIN={0x8, 0x3, 0x400}, @TIPC_NLA_PROP_MTU={0x8, 0x4, 0x9}]}, @TIPC_NLA_LINK_PROP={0xc, 0x7, 0x0, 0x1, [@TIPC_NLA_PROP_WIN={0x8, 0x3, 0xccc}]}, @TIPC_NLA_LINK_PROP={0x2c, 0x7, 0x0, 0x1, [@TIPC_NLA_PROP_PRIO={0x8, 0x1, 0xa}, @TIPC_NLA_PROP_TOL={0x8, 0x2, 0xffff638b}, @TIPC_NLA_PROP_MTU={0x8, 0x4, 0x5}, @TIPC_NLA_PROP_TOL={0x8, 0x2, 0xff}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x20}]}]}]}, 0x204}, 0x1, 0x0, 0x0, 0x40}, 0xc000) r8 = accept4$inet6(r7, &(0x7f0000000b00)={0xa, 0x0, 0x0, @initdev}, &(0x7f0000000b40)=0x1c, 0x80000) r9 = syz_genetlink_get_family_id$devlink(&(0x7f0000000bc0), r7) sendmsg$DEVLINK_CMD_SB_PORT_POOL_GET(r7, &(0x7f0000000e40)={&(0x7f0000000b80)={0x10, 0x0, 0x0, 0x20000000}, 0xc, &(0x7f0000000e00)={&(0x7f0000000c00)={0x1fc, r9, 0x100, 0x70bd2b, 0x25dfdbff, {}, [{{@nsim={{0xe}, {0xf, 0x2, {'netdevsim', 0x0}}}, {0x8, 0x3, 0x2}}, {0x8, 0xb, 0x4}, {0x6, 0x11, 0x8}}, {{@nsim={{0xe}, {0xf, 0x2, {'netdevsim', 0x0}}}, {0x8, 0x3, 0x1}}, {0x8, 0xb, 0x7}, {0x6, 0x11, 0x8}}, {{@pci={{0x8}, {0x11}}, {0x8}}, {0x8, 0xb, 0xb8}, {0x6, 0x11, 0xff14}}, {{@pci={{0x8}, {0x11}}, {0x8, 0x3, 0x3}}, {0x8, 0xb, 0x4}, {0x6, 0x11, 0x5}}, {{@nsim={{0xe}, {0xf, 0x2, {'netdevsim', 0x0}}}, {0x8}}, {0x8, 0xb, 0x10001}, {0x6, 0x11, 0x6}}, {{@nsim={{0xe}, {0xf, 0x2, {'netdevsim', 0x0}}}, {0x8}}, {0x8, 0xb, 0x8}, {0x6, 0x11, 0x1716}}, {{@nsim={{0xe}, {0xf, 0x2, {'netdevsim', 0x0}}}, {0x8, 0x3, 0x3}}, {0x8, 0xb, 0x5}, {0x6, 0x11, 0x1}}, {{@pci={{0x8}, {0x11}}, {0x8}}, {0x8, 0xb, 0xc}, {0x6, 0x11, 0x1}}, {{@pci={{0x8}, {0x11}}, {0x8, 0x3, 0x2}}, {0x8, 0xb, 0x7}, {0x6, 0x11, 0x1}}]}, 0x1fc}, 0x1, 0x0, 0x0, 0x4}, 0xc800) (async) ioctl$sock_SIOCGIFINDEX_802154(0xffffffffffffffff, 0x8933, &(0x7f0000000e80)={'wpan3\x00', 0x0}) r11 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000f00), r7) ioctl$sock_SIOCGIFINDEX_80211(r7, 0x8933, &(0x7f0000000f40)={'wlan1\x00', 0x0}) sendmsg$NL80211_CMD_GET_WIPHY(r7, &(0x7f0000001000)={&(0x7f0000000ec0), 0xc, &(0x7f0000000fc0)={&(0x7f0000000f80)={0x30, r11, 0x300, 0x70bd2a, 0x25dfdbff, {{}, {@val={0x8, 0x1, 0x5f}, @val={0x8, 0x3, r12}, @val={0xc, 0x99, {0x3, 0x68}}}}, ["", "", "", "", ""]}, 0x30}, 0x1, 0x0, 0x0, 0x4000001}, 0x8001) (async) ioctl$XFS_IOC_FSGEOMETRY_V4(r0, 0x8070587c, &(0x7f0000001040)) (async) sendmsg$NL80211_CMD_UNEXPECTED_FRAME(r7, &(0x7f0000001180)={&(0x7f00000010c0)={0x10, 0x0, 0x0, 0x100}, 0xc, &(0x7f0000001140)={&(0x7f0000001100)={0x1c, r11, 0x400, 0x70bd26, 0x25dfdbff, {{}, {@val={0x8, 0x3, r12}, @void}}}, 0x1c}, 0x1, 0x0, 0x0, 0x4008804}, 0x4800) (async) ioctl$sock_SIOCGIFINDEX_80211(r8, 0x8933, &(0x7f00000011c0)={'wlan0\x00'}) sendmsg$L2TP_CMD_NOOP(r7, &(0x7f0000001300)={&(0x7f0000001200)={0x10, 0x0, 0x0, 0x400000}, 0xc, &(0x7f00000012c0)={&(0x7f0000001240)={0x58, 0x0, 0x200, 0x70bd2a, 0x25dfdbff, {}, [@L2TP_ATTR_RECV_TIMEOUT={0xc, 0x16, 0x62}, @L2TP_ATTR_RECV_TIMEOUT={0xc, 0x16, 0x9d}, @L2TP_ATTR_DATA_SEQ={0x5, 0x4, 0x3}, @L2TP_ATTR_UDP_SPORT={0x6, 0x1a, 0x4e22}, @L2TP_ATTR_UDP_DPORT={0x6, 0x1b, 0x4e20}, @L2TP_ATTR_RECV_TIMEOUT={0xc}, @L2TP_ATTR_PW_TYPE={0x6, 0x1, 0x7}]}, 0x58}, 0x1, 0x0, 0x0, 0x4080}, 0x8040) r13 = syz_genetlink_get_family_id$tipc2(&(0x7f0000001380), r7) sendmsg$TIPC_NL_MEDIA_GET(r4, &(0x7f0000001540)={&(0x7f0000001340), 0xc, &(0x7f0000001500)={&(0x7f00000013c0)={0x12c, r13, 0x400, 0x70bd29, 0x25dfdbfc, {}, [@TIPC_NLA_NODE={0x2c, 0x6, 0x0, 0x1, [@TIPC_NLA_NODE_KEY_MASTER={0x4}, @TIPC_NLA_NODE_REKEYING={0x8, 0x6, 0x2}, @TIPC_NLA_NODE_ADDR={0x8, 0x1, 0x7}, @TIPC_NLA_NODE_ADDR={0x8, 0x1, 0x7f}, @TIPC_NLA_NODE_UP={0x4}, @TIPC_NLA_NODE_ADDR={0x8, 0x1, 0x7}]}, @TIPC_NLA_BEARER={0x9c, 0x1, 0x0, 0x1, [@TIPC_NLA_BEARER_DOMAIN={0x8, 0x3, 0x7}, @TIPC_NLA_BEARER_DOMAIN={0x8, 0x3, 0x8}, @TIPC_NLA_BEARER_UDP_OPTS={0x44, 0x4, {{0x20, 0x1, @in6={0xa, 0x4e20, 0x9, @mcast1, 0x400}}, {0x20, 0x2, @in6={0xa, 0x4e21, 0x7fffffff, @mcast1, 0x4}}}}, @TIPC_NLA_BEARER_NAME={0x10, 0x1, @l2={'ib', 0x3a, 'macvlan0\x00'}}, @TIPC_NLA_BEARER_UDP_OPTS={0x2c, 0x4, {{0x14, 0x1, @in={0x2, 0x4e20, @initdev={0xac, 0x1e, 0x0, 0x0}}}, {0x14, 0x2, @in={0x2, 0x4e23, @dev={0xac, 0x14, 0x14, 0x16}}}}}, @TIPC_NLA_BEARER_DOMAIN={0x8, 0x3, 0x5}]}, @TIPC_NLA_NET={0x50, 0x7, 0x0, 0x1, [@TIPC_NLA_NET_NODEID_W1={0xc, 0x4, 0x4}, @TIPC_NLA_NET_ID={0x8, 0x1, 0xffff}, @TIPC_NLA_NET_NODEID={0xc, 0x3, 0x2}, @TIPC_NLA_NET_ID={0x8, 0x1, 0x5}, @TIPC_NLA_NET_ADDR={0x8, 0x2, 0x9}, @TIPC_NLA_NET_ID={0x8, 0x1, 0x2d}, @TIPC_NLA_NET_ID={0x8, 0x1, 0x1ff}, @TIPC_NLA_NET_NODEID={0xc, 0x3, 0x8}]}]}, 0x12c}, 0x1, 0x0, 0x0, 0x10}, 0x2000000) sendmsg$NL802154_CMD_DEL_SEC_LEVEL(r5, &(0x7f0000001680)={&(0x7f0000001580)={0x10, 0x0, 0x0, 0x400}, 0xc, &(0x7f0000001640)={&(0x7f00000015c0)={0x60, r6, 0x8, 0x70bd2a, 0x25dfdbfd, {}, [@NL802154_ATTR_WPAN_DEV={0xc, 0x6, 0x200000002}, @NL802154_ATTR_WPAN_DEV={0xc}, @NL802154_ATTR_WPAN_DEV={0xc, 0x6, 0x300000003}, @NL802154_ATTR_SEC_LEVEL={0xc, 0x2d, 0x0, 0x1, [@NL802154_SECLEVEL_ATTR_FRAME={0x8}]}, @NL802154_ATTR_IFINDEX={0x8, 0x3, r10}, @NL802154_ATTR_SEC_LEVEL={0x14, 0x2d, 0x0, 0x1, [@NL802154_SECLEVEL_ATTR_CMD_FRAME={0x8, 0x3, 0x3}, @NL802154_SECLEVEL_ATTR_LEVELS={0x5, 0x1, 0x4}]}]}, 0x60}}, 0x8000) sendmsg$NL80211_CMD_SET_WIPHY(r7, &(0x7f0000001780)={&(0x7f00000016c0)={0x10, 0x0, 0x0, 0x40000000}, 0xc, &(0x7f0000001740)={&(0x7f0000001700)={0x1c, r11, 0x100, 0x70bd2c, 0x25dfdbff, {}, [@NL80211_ATTR_WIPHY_FRAG_THRESHOLD={0x8, 0x3f, 0xf06}]}, 0x1c}, 0x1, 0x0, 0x0, 0x40408a1}, 0xe0) (async) write(r2, &(0x7f00000017c0)="b9d75126af4a41b3906e06633a65a167c0b43c02690da380348ad837a5477360a27b0823861fff87ac84eec98aee7b434d08066edd", 0x35) (async) sendmsg$NL80211_CMD_SET_WDS_PEER(r7, &(0x7f0000001940)={&(0x7f0000001800)={0x10, 0x0, 0x0, 0x4000000}, 0xc, &(0x7f0000001900)={&(0x7f0000001840)={0xa0, 0x0, 0x400, 0x70bd2d, 0x25dfdbfb, {{}, {@val={0x8, 0x3, r12}, @val={0xc, 0x99, {0x400, 0x6f}}}}, [@NL80211_ATTR_MAC={0xa, 0x6, @random="cbbc8b28ea4c"}, @NL80211_ATTR_MAC={0xa}, @NL80211_ATTR_MAC={0xa, 0x6, @from_mac=@broadcast}, @NL80211_ATTR_MAC={0xa, 0x6, @random="9c99685292ca"}, @NL80211_ATTR_MAC={0xa, 0x6, @random="60c263be5357"}, @NL80211_ATTR_MAC={0xa}, @NL80211_ATTR_MAC={0xa, 0x6, @from_mac=@broadcast}, @NL80211_ATTR_MAC={0xa}, @NL80211_ATTR_MAC={0xa, 0x6, @random="326d3ddcac15"}, @NL80211_ATTR_MAC={0xa}]}, 0xa0}, 0x1, 0x0, 0x0, 0x8800}, 0x40090) (async) r14 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$NL80211_CMD_NEW_INTERFACE(r14, &(0x7f0000001b00)={&(0x7f0000001980)={0x10, 0x0, 0x0, 0x400000}, 0xc, &(0x7f0000001ac0)={&(0x7f00000019c0)={0xf0, r11, 0x200, 0x70bd27, 0x25dfdbff, {{}, {@val={0x8, 0x1, 0x4c}, @val={0x8, 0x3, r12}, @void}}, [@mon_options=[@NL80211_ATTR_MU_MIMO_GROUP_DATA={0x1c, 0xe7, "a85c6053918ab6496a9696bd6df9a3647a08e701a72144ae"}], @NL80211_ATTR_4ADDR={0x5}, @NL80211_ATTR_IFNAME={0x14, 0x4, 'veth1_to_batadv\x00'}, @NL80211_ATTR_4ADDR={0x5, 0x53, 0x1}, @mon_options=[@NL80211_ATTR_MNTR_FLAGS={0x24, 0x17, 0x0, 0x1, [@NL80211_MNTR_FLAG_CONTROL={0x4}, @NL80211_MNTR_FLAG_COOK_FRAMES={0x4}, @NL80211_MNTR_FLAG_CONTROL={0x4}, @NL80211_MNTR_FLAG_ACTIVE={0x4}, @NL80211_MNTR_FLAG_COOK_FRAMES={0x4}, @NL80211_MNTR_FLAG_COOK_FRAMES={0x4}, @NL80211_MNTR_FLAG_OTHER_BSS={0x4}, @NL80211_MNTR_FLAG_FCSFAIL={0x4}]}, @NL80211_ATTR_MU_MIMO_FOLLOW_MAC_ADDR={0xa, 0xe8, @broadcast}, @NL80211_ATTR_MNTR_FLAGS={0x28, 0x17, 0x0, 0x1, [@NL80211_MNTR_FLAG_CONTROL={0x4}, @NL80211_MNTR_FLAG_OTHER_BSS={0x4}, @NL80211_MNTR_FLAG_COOK_FRAMES={0x4}, @NL80211_MNTR_FLAG_OTHER_BSS={0x4}, @NL80211_MNTR_FLAG_COOK_FRAMES={0x4}, @NL80211_MNTR_FLAG_CONTROL={0x4}, @NL80211_MNTR_FLAG_OTHER_BSS={0x4}, @NL80211_MNTR_FLAG_ACTIVE={0x4}, @NL80211_MNTR_FLAG_CONTROL={0x4}]}, @NL80211_ATTR_MU_MIMO_FOLLOW_MAC_ADDR={0xa, 0xe8, @device_b}, @NL80211_ATTR_MU_MIMO_FOLLOW_MAC_ADDR={0xa, 0xe8, @broadcast}], @NL80211_ATTR_IFNAME={0x14, 0x4, 'veth1_to_bridge\x00'}, @NL80211_ATTR_SOCKET_OWNER={0x4}, @NL80211_ATTR_SOCKET_OWNER={0x4}]}, 0xf0}, 0x1, 0x0, 0x0, 0x40}, 0x40) setsockopt$PNPIPE_ENCAP(r7, 0x113, 0x1, &(0x7f0000001b40), 0x4) 1m4.588097983s ago: executing program 1 (id=6128): ioctl$XFS_IOC_ATTRLIST_BY_HANDLE(0xffffffffffffffff, 0x4058587a, &(0x7f0000000140)={{0xffffffffffffffff, &(0x7f0000000000)='\x00', 0x82000, &(0x7f0000000040)={@align=0x10000, {0x5, 0x100, 0xfffffff9, 0xffffffffffff7fff}}, 0x1, &(0x7f0000000080), &(0x7f00000000c0)=0x8}, {[0xc, 0x3, 0x6, 0x6]}, 0x301abd16, 0x2e, &(0x7f0000000100)=""/46}) ioctl$sock_inet_udp_SIOCINQ(r0, 0x541b, &(0x7f00000001c0)) r1 = syz_genetlink_get_family_id$batadv(&(0x7f0000000240), r0) sendmsg$BATADV_CMD_GET_VLAN(r0, &(0x7f0000000340)={&(0x7f0000000200)={0x10, 0x0, 0x0, 0x8}, 0xc, &(0x7f0000000300)={&(0x7f0000000280)={0x44, r1, 0x4, 0x70bd2d, 0x25dfdbfe, {}, [@BATADV_ATTR_HOP_PENALTY={0x5, 0x35, 0x6}, @BATADV_ATTR_GW_SEL_CLASS={0x8, 0x34, 0x7}, @BATADV_ATTR_MULTICAST_FORCEFLOOD_ENABLED={0x5}, @BATADV_ATTR_GW_BANDWIDTH_DOWN={0x8, 0x31, 0x7}, @BATADV_ATTR_VLANID={0x6}, @BATADV_ATTR_DISTRIBUTED_ARP_TABLE_ENABLED={0x5}]}, 0x44}, 0x1, 0x0, 0x0, 0x4000}, 0x1) ioctl$HCIINQUIRY(r0, 0x800448f0, &(0x7f0000000380)={0x0, 0x8, "4595b6", 0x3, 0x2}) bpf$BPF_GET_PROG_INFO(0xf, &(0x7f0000000840)={r0, 0xe0, &(0x7f0000000740)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7, &(0x7f0000000580)=[0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0], ""/16, 0x0, 0x0, 0x0, 0x0, 0x6, 0x5, &(0x7f00000005c0)=[0x0, 0x0, 0x0, 0x0, 0x0, 0x0], &(0x7f0000000600)=[0x0, 0x0, 0x0, 0x0, 0x0], 0x0, 0x55, &(0x7f0000000640)=[{}, {}, {}, {}, {}, {}], 0x30, 0x10, &(0x7f0000000680), &(0x7f00000006c0), 0x8, 0x1f, 0x8, 0x8, &(0x7f0000000700)}}, 0x10) bpf$MAP_UPDATE_CONST_STR(0x2, &(0x7f0000000900)={{r0, 0xffffffffffffffff}, &(0x7f0000000880), &(0x7f00000008c0)='%pi6 \x00'}, 0x20) r4 = bpf$PROG_LOAD(0x5, &(0x7f0000000a00)={0x10, 0x3, &(0x7f00000003c0)=@raw=[@call={0x85, 0x0, 0x0, 0x7b}, @alu={0x0, 0x0, 0xc, 0x9, 0x3, 0xfffffffffffffffc, 0x1}, @alu={0x7, 0x1, 0xc, 0x1, 0x2, 0xffffffffffffffa0}], &(0x7f0000000400)='syzkaller\x00', 0x1ff, 0xb4, &(0x7f0000000440)=""/180, 0x41100, 0x76, '\x00', 0x0, @fallback=0x3, 0xffffffffffffffff, 0x8, &(0x7f0000000500)={0x3, 0x3}, 0x8, 0x10, &(0x7f0000000540)={0x3, 0xf, 0x0, 0x3c}, 0x10, r2, r0, 0x5, &(0x7f0000000940)=[r0, r0, r3], &(0x7f0000000980)=[{0x4, 0x3, 0x1, 0x4}, {0x0, 0x4, 0xd, 0x9}, {0x4, 0x5, 0x6, 0xb}, {0x2, 0x2, 0x4, 0x2}, {0x2, 0x5, 0x6, 0xc}], 0x10, 0xfffffffc}, 0x94) r5 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000b00), r0) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f0000000b40)={'wlan1\x00', 0x0}) sendmsg$NL80211_CMD_FRAME(r0, &(0x7f00000010c0)={&(0x7f0000000ac0)={0x10, 0x0, 0x0, 0x200}, 0xc, &(0x7f0000001080)={&(0x7f0000000b80)={0x4d4, r5, 0x200, 0x70bd2c, 0x25dfdbff, {{}, {@val={0x8, 0x3, r6}, @val={0xc, 0x99, {0xcc7c, 0x3}}}}, [@NL80211_ATTR_DONT_WAIT_FOR_ACK={0x4}, @chandef_params=[@NL80211_ATTR_CHANNEL_WIDTH={0x8, 0x9f, 0x5}], @chandef_params=[@NL80211_ATTR_WIPHY_FREQ={0x8, 0x26, @random}, @NL80211_ATTR_CENTER_FREQ2={0x8, 0xa1, 0x3}, @NL80211_ATTR_WIPHY_FREQ_OFFSET={0x8, 0x122, 0x1b6}, @NL80211_ATTR_WIPHY_EDMG_BW_CONFIG={0x5, 0x119, 0xd}], @NL80211_ATTR_DURATION={0x8, 0x57, 0x886}, @NL80211_ATTR_FRAME={0x466, 0x33, @assoc_req={{{0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x1, 0x1}, {0xb}, @broadcast, @broadcast, @random="586b3f56e33e", {0x3}}, 0x2200, 0x9, {0x0, 0x13, @random="ede8b59cd5374e9a27aebc8854395493d63635"}, @void, @void, [{0xdd, 0x5f, "f4b0c412555fa469c31de70ecda705091883ed8f4510a324522107e5e2fab2d34d1493684250350a9fbef6d6bd311c857ae20749b469912563a8dda3ca3eb8b99083efb4be9f35348005555ac2a0dc62f59f90590f5da280248c294fc5fce6"}, {0xdd, 0x40, "359949622a2f468470ec85d9d465195250036553c0e45d4ad2e5fb75283afc34a60afb891fa423efe2e56948888af830bdbf77fa5b0e28ddca12db8ea557d2e1"}, {0xdd, 0xb7, "ea18b9d0ef4417386568676915b5a22bf3d6e92adccdc74a8d74bc6e2ddd5972b5aec79c68c6b8b4329587030b4128805b5a51e1055c5e3778b9b0b29917f0112d1169b805018726c56c42fbcea84d1985c5b25171cba2bdc40f418eb0b51d917b05bdbcc14496e88b5321efda1631c86bf62c010ecc67cc9750c8950e55487f13f0e8621254325f4e0c78ba68270d0c2ee1460a17402b31d07e76972df8157a7c8db0f9e30fa6ce1e981af939a9695205ae07b16dbb4b"}, {0xdd, 0x60, "e7d309552b93ac9f1bb11fe72c6254388eae2c688c558d5f88fab9059a76d132b5753dd31e1945997af1712674b6abc3c52da712a85dd7c2f403f9808dc6db61f524e6b44d76d6023af9474295e467ed91b4c873b31f2ccf840cf712dda001de"}, {0xdd, 0xf7, "ce419b9c7153cfa95e62fde961d3e8c6b086101cd5dea5eacb4a9335a12c658b69ccb91296c1ca524de59b2a5b8e376d1466d9725b959eb585417e020a3e110232f96f5b4b4508fdb73851ebfd389c599d84a3a3ff44a3fa21613e4ae4bf6146be543dc916c5b5a7750972e5a45b2e643b9a03f9652dd9a036fa140a402a66a31ec3e3437c7c6eb8d4c8806b25124cce625c7f1f89ecfa5d37fe2a94318ccbbd4bfec8f66f7225997c88f2b234ea6bc1999a3c37d1f13cb904c927152786a34194aadd8a97ff47f08fc3cc9257ac987c868787aa6bfc22cf15f0b26e6553491d5bd147920c42fa5853422da23e5794b43fc4aa195627c7"}, {0xdd, 0x2f, "91cb38971be962bc16495c16097de398b67466f7ad2a1534955c81cf9da28f59d725245d078ed1ab0f30c1f8cd88d0"}, {0xdd, 0x5b, "bf9a5c234ae1c61521bf9f9565287441812e70dea3bc50f22b2c84e2cdbda7e76a7353c6a55dec46457522d5c402c6c6a76c6579b3103a516b9cac69b2d594d3d2e7caa36e3eb0971af7cb1106ad822b9557f545554cc815631d33"}, {0xdd, 0xea, "bf804c3cf80ef03749a8f6ceee395a918d8facb3c302ecf4d885dd46ae3ff4208a7db62066e1ef1469be237181f100481f437acaf8c00919ae2c1f340491eb6418338de2eeca4fa1d9bfd1a216871cc0944a08eed991920103155a65e03175e30e4a885e8df286aed6f699beb0b6a3016dff891260eae0d27149340846ae4ff95bca5ae7c38376b84a75d156cf0e185a6ae92adb3581492e792ed67340c41645059aeb510419372e83d225c4f14e169611f411e3801170c0b8c94f1a06e12b4a9062d236f7e391c2e82076382397bf6dbf85424585220841fa5d99141f8038c1ec289990321500c42c10"}]}}, @NL80211_ATTR_TX_NO_CCK_RATE={0x4}, @NL80211_ATTR_OFFCHANNEL_TX_OK={0x4}, @NL80211_ATTR_DURATION={0x8, 0x57, 0x120e}]}, 0x4d4}, 0x1, 0x0, 0x0, 0x11}, 0x20008010) r7 = socket$can_raw(0x1d, 0x3, 0x1) setsockopt$SO_TIMESTAMP(r7, 0x1, 0x1d, &(0x7f0000001100)=0x44d, 0x4) ioctl$FS_IOC_GETVERSION(r7, 0x80087601, &(0x7f0000001140)) ioctl$XFS_IOC_FSGETXATTRA(r4, 0x801c582d, &(0x7f0000001180)) ioctl$XFS_IOC_ATTRLIST_BY_HANDLE(r0, 0x4058587a, &(0x7f0000001340)={{r4, &(0x7f00000011c0)=']&$\\-.*!\x00', 0xb01, &(0x7f0000001200)={@_ha_fsid={[0xce2, 0x7]}, {0x5, 0xb, 0x4, 0x2}}, 0x1000, &(0x7f0000001240), &(0x7f0000001280)}, {[0x8, 0x401, 0x8, 0x3]}, 0x101, 0x59, &(0x7f00000012c0)=""/89}) r9 = syz_genetlink_get_family_id$tipc(&(0x7f0000001400), r0) sendmsg$TIPC_CMD_SET_LINK_WINDOW(r8, &(0x7f0000001500)={&(0x7f00000013c0)={0x10, 0x0, 0x0, 0x400}, 0xc, &(0x7f00000014c0)={&(0x7f0000001440)={0x68, r9, 0x400, 0x70bd2c, 0x25dfdbfc, {{}, {}, {0x4c, 0x18, {0xd, @link='syz0\x00'}}}, [""]}, 0x68}, 0x1, 0x0, 0x0, 0x10}, 0x20000005) sendmsg$IPVS_CMD_SET_DEST(r0, &(0x7f00000016c0)={&(0x7f0000001540)={0x10, 0x0, 0x0, 0x10000000}, 0xc, &(0x7f0000001680)={&(0x7f0000001580)={0xe0, 0x0, 0x400, 0x70bd27, 0x25dfdbfe, {}, [@IPVS_CMD_ATTR_TIMEOUT_TCP={0x8, 0x4, 0xff}, @IPVS_CMD_ATTR_SERVICE={0x20, 0x1, 0x0, 0x1, [@IPVS_SVC_ATTR_PROTOCOL={0x6, 0x2, 0x1}, @IPVS_SVC_ATTR_ADDR={0x14, 0x3, @ipv4=@local}]}, @IPVS_CMD_ATTR_TIMEOUT_TCP_FIN={0x8, 0x5, 0x7f}, @IPVS_CMD_ATTR_DEST={0xc, 0x2, 0x0, 0x1, [@IPVS_DEST_ATTR_FWD_METHOD={0x8, 0x3, 0x1}]}, @IPVS_CMD_ATTR_TIMEOUT_UDP={0x8, 0x6, 0x3}, @IPVS_CMD_ATTR_TIMEOUT_TCP={0x8, 0x4, 0x80000000}, @IPVS_CMD_ATTR_SERVICE={0x3c, 0x1, 0x0, 0x1, [@IPVS_SVC_ATTR_AF={0x6, 0x1, 0x2}, @IPVS_SVC_ATTR_PORT={0x6, 0x4, 0x4e21}, @IPVS_SVC_ATTR_FLAGS={0xc, 0x7, {0x18, 0x4}}, @IPVS_SVC_ATTR_TIMEOUT={0x8, 0x8, 0x3}, @IPVS_SVC_ATTR_ADDR={0x14, 0x3, @ipv4=@remote}]}, @IPVS_CMD_ATTR_TIMEOUT_UDP={0x8, 0x6, 0xf}, @IPVS_CMD_ATTR_DEST={0x34, 0x2, 0x0, 0x1, [@IPVS_DEST_ATTR_L_THRESH={0x8, 0x6, 0x4105}, @IPVS_DEST_ATTR_WEIGHT={0x8, 0x4, 0xfffffff5}, @IPVS_DEST_ATTR_ACTIVE_CONNS={0x8, 0x7, 0x7}, @IPVS_DEST_ATTR_WEIGHT={0x8, 0x4, 0x1}, @IPVS_DEST_ATTR_L_THRESH={0x8, 0x6, 0x1}, @IPVS_DEST_ATTR_U_THRESH={0x8, 0x5, 0x6c03}]}, @IPVS_CMD_ATTR_TIMEOUT_TCP={0x8}]}, 0xe0}, 0x1, 0x0, 0x0, 0x40}, 0x20000800) getsockopt$SO_TIMESTAMP(0xffffffffffffffff, 0x1, 0x23, &(0x7f0000001700), &(0x7f0000001740)=0x4) r10 = syz_genetlink_get_family_id$batadv(&(0x7f00000017c0), r4) sendmsg$BATADV_CMD_GET_ROUTING_ALGOS(r0, &(0x7f0000001880)={&(0x7f0000001780)={0x10, 0x0, 0x0, 0x2000000}, 0xc, &(0x7f0000001840)={&(0x7f0000001800)={0x3c, r10, 0x0, 0x70bd2a, 0x25dfdbfe, {}, [@BATADV_ATTR_FRAGMENTATION_ENABLED={0x5}, @BATADV_ATTR_BRIDGE_LOOP_AVOIDANCE_ENABLED={0x5}, @BATADV_ATTR_HOP_PENALTY={0x5, 0x35, 0x3}, @BATADV_ATTR_MULTICAST_FANOUT={0x8, 0x3c, 0x2}, @BATADV_ATTR_NETWORK_CODING_ENABLED={0x5}]}, 0x3c}, 0x1, 0x0, 0x0, 0x8000}, 0x40000840) r11 = socket$nl_generic(0x10, 0x3, 0x10) r12 = syz_genetlink_get_family_id$smc(&(0x7f0000001900), r8) sendmsg$SMC_PNETID_DEL(r11, &(0x7f00000019c0)={&(0x7f00000018c0)={0x10, 0x0, 0x0, 0x400000}, 0xc, &(0x7f0000001980)={&(0x7f0000001940)={0x40, r12, 0x20, 0x70bd2b, 0x25dfdbfc, {}, [@SMC_PNETID_ETHNAME={0x14}, @SMC_PNETID_IBNAME={0x9, 0x3, 'syz2\x00'}, @SMC_PNETID_IBNAME={0x9, 0x3, 'syz1\x00'}]}, 0x40}}, 0x50) r13 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$BATADV_CMD_GET_TRANSTABLE_GLOBAL(r13, &(0x7f0000001ac0)={&(0x7f0000001a00)={0x10, 0x0, 0x0, 0x4}, 0xc, &(0x7f0000001a80)={&(0x7f0000001a40)={0x34, r1, 0x900, 0x70bd29, 0x25dfdbfc, {}, [@BATADV_ATTR_NETWORK_CODING_ENABLED={0x5}, @BATADV_ATTR_GW_BANDWIDTH_DOWN={0x8, 0x31, 0x7}, @BATADV_ATTR_BONDING_ENABLED={0x5}, @BATADV_ATTR_GW_BANDWIDTH_UP={0x8, 0x32, 0x18}]}, 0x34}, 0x1, 0x0, 0x0, 0x800}, 0x0) setsockopt$MRT_ADD_VIF(r8, 0x0, 0xca, &(0x7f0000001b00)={0x0, 0x8, 0x9, 0x7, @vifc_lcl_ifindex, @loopback}, 0x10) ioctl$FS_IOC_GETFSUUID(r7, 0x80111500, &(0x7f0000001b40)) sendmsg$NL80211_CMD_START_AP(0xffffffffffffffff, &(0x7f0000001cc0)={&(0x7f0000001b80)={0x10, 0x0, 0x0, 0x100000}, 0xc, &(0x7f0000001c80)={&(0x7f0000001bc0)={0x94, r5, 0x50c, 0x70bd28, 0x25dfdbff, {{}, {@val={0x8, 0x3, r6}, @val={0xc, 0x99, {0x9, 0x1}}}}, [@NL80211_ATTR_P2P_CTWINDOW={0x5, 0xa2, 0x5}, @NL80211_ATTR_INACTIVITY_TIMEOUT={0x6, 0x96, 0x9}, @beacon=[@NL80211_ATTR_IE_PROBE_RESP={0x28, 0x7f, [@chsw_timing={0x68, 0x4, {0x1, 0x1ff}}, @cf={0x4, 0x6, {0x3, 0x0, 0xd44, 0x7}}, @peer_mgmt={0x75, 0x14, {0x1, 0x4162, @void, @void, @val="00d216896bdf8c4fbd9ca26abed20d87"}}]}], @NL80211_ATTR_HE_BSS_COLOR={0x34, 0x11b, 0x0, 0x1, [@NL80211_HE_BSS_COLOR_ATTR_DISABLED={0x4}, @NL80211_HE_BSS_COLOR_ATTR_COLOR={0x5, 0x1, 0x29}, @NL80211_HE_BSS_COLOR_ATTR_PARTIAL={0x4}, @NL80211_HE_BSS_COLOR_ATTR_DISABLED={0x4}, @NL80211_HE_BSS_COLOR_ATTR_PARTIAL={0x4}, @NL80211_HE_BSS_COLOR_ATTR_COLOR={0x5, 0x1, 0x39}, @NL80211_HE_BSS_COLOR_ATTR_COLOR={0x5, 0x1, 0x10}, @NL80211_HE_BSS_COLOR_ATTR_PARTIAL={0x4}, @NL80211_HE_BSS_COLOR_ATTR_PARTIAL={0x4}]}]}, 0x94}, 0x1, 0x0, 0x0, 0x4000000}, 0x4) 1m4.164457679s ago: executing program 1 (id=6130): r0 = socket$packet(0x11, 0x3, 0x300) setsockopt$packet_int(r0, 0x107, 0xf, &(0x7f0000006ffc)=0x4000000000000200, 0xe50fb6c50bc849c9) r1 = socket$nl_route(0x10, 0x3, 0x0) r2 = socket(0x10, 0x803, 0x0) sendmsg$nl_route_sched(r2, &(0x7f00000004c0)={0x0, 0x0, &(0x7f00000003c0)={0x0, 0x24}}, 0x0) getsockname$packet(r2, &(0x7f0000000380)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000180)=0x14) sendmsg$nl_route(r1, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000040)=ANY=[@ANYBLOB="3c0000001000010400eeffffffff00f687000000", @ANYRES32=r3, @ANYBLOB="01000000010000001c0012000c000100627269646765"], 0x3c}}, 0x0) sendmsg$nl_route_sched(r1, &(0x7f0000002300)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f0000002340)=@newqdisc={0x44, 0x24, 0xe0b, 0x70bd28, 0x0, {0x0, 0x0, 0x0, r3, {}, {0xffff, 0xffff}, {0xffe0, 0xd064db0e491fa98f}}, [@qdisc_kind_options=@q_cake={{0x9}, {0x14, 0x2, [@TCA_CAKE_INGRESS={0x8, 0xf, 0x1}, @TCA_CAKE_MEMORY={0x8, 0xa, 0x2}]}}]}, 0x44}, 0x1, 0x0, 0x0, 0x40}, 0x4000080) bind$packet(r0, &(0x7f0000000040)={0x11, 0x0, r3, 0x1, 0x0, 0x6, @remote}, 0x14) sendto$inet6(r0, &(0x7f0000000800)="4103082c1116480401020200c52cf7c25975e005b02f000006892f000300897c6b118777faffffff3066090cb600c5471d130a66321a54e7df305fbe258161b6fd8f2428652265d94c6fdbaefc57376a57c2feffff188be9427c323ef024a37016d2a7f9ab6e7941a6fc4f95aa73c1dfff4941f6503b5bd8c91db22cd33795481c94085fa12cdc679ac2a5d7b5d99b93fb07acb0da680e78b74c74aae8d7690d5986a9af81622a0ac210bc7b5ca5fed11cb54d046642670041e846bb184ff5d39fe8516d2d2a8d84e6e7dfcb2b8a8023444db513a3d7a124b59f0a5cd36489dbbb75cce3145d0ea3c3aa21af7cbcbc7a7575db782e757ca543109f5ddcec4930aa91f4119ea3d1f56140cb86cfe0724b23904ef5d05c725ee23918a502b1afe09fb0757d", 0xfc13, 0x880, 0x0, 0xfffffffffffffef0) socket(0x1a, 0x80000, 0xd) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000180)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$sock_SIOCGIFINDEX(r4, 0x8933, &(0x7f00000002c0)={'macvlan0\x00', 0x0}) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000000)={0x0, 0x0, &(0x7f00000010c0)={&(0x7f0000000080)=ANY=[@ANYBLOB="440000001000010400"/20, @ANYRES32=r5, @ANYBLOB="00001700000000001c003780"], 0x44}, 0x1, 0x0, 0x0, 0x4008010}, 0x0) r6 = socket(0x10, 0x3, 0x0) sendmmsg(r6, &(0x7f0000000000), 0x4000000000001f2, 0x0) 1m3.332211457s ago: executing program 1 (id=6132): socket$netlink(0x10, 0x3, 0x0) syz_init_net_socket$bt_hci(0x1f, 0x3, 0x5) close(0x4) syz_open_procfs$namespace(0x0, &(0x7f0000000000)='ns/cgroup\x00') mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f07ebbeef, 0x8031, 0xffffffffffffffff, 0x215eb000) syz_emit_ethernet(0x0, 0x0, 0x0) r0 = socket(0x2, 0x3, 0xff) setsockopt$SO_TIMESTAMPING(r0, 0x1, 0x41, &(0x7f0000000180)=0x255f, 0x4) sendto$inet(r0, &(0x7f0000000040)="0f83b07ef75b4ff0f2d163c7c8a0d8fb8ab88f5b134df9055ab57dcbb68052fc319ac66954faccf67679a82789438adf3664351d952cd72c0dd8e9e7", 0x3c, 0x0, &(0x7f0000000200)={0x2, 0x4e21, @remote}, 0x10) bpf$MAP_CREATE(0x0, &(0x7f0000003940)=@base={0x21, 0x0, 0x0, 0x7, 0x400}, 0x50) bpf$PROG_LOAD_XDP(0x5, &(0x7f00000001c0)={0xe, 0x4, &(0x7f0000001300)=@framed={{}, [@ldst={0x1, 0x2, 0x3, 0x0, 0x1, 0x36}]}, &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x1e}, 0x90) 48.047393951s ago: executing program 32 (id=6132): socket$netlink(0x10, 0x3, 0x0) syz_init_net_socket$bt_hci(0x1f, 0x3, 0x5) close(0x4) syz_open_procfs$namespace(0x0, &(0x7f0000000000)='ns/cgroup\x00') mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f07ebbeef, 0x8031, 0xffffffffffffffff, 0x215eb000) syz_emit_ethernet(0x0, 0x0, 0x0) r0 = socket(0x2, 0x3, 0xff) setsockopt$SO_TIMESTAMPING(r0, 0x1, 0x41, &(0x7f0000000180)=0x255f, 0x4) sendto$inet(r0, &(0x7f0000000040)="0f83b07ef75b4ff0f2d163c7c8a0d8fb8ab88f5b134df9055ab57dcbb68052fc319ac66954faccf67679a82789438adf3664351d952cd72c0dd8e9e7", 0x3c, 0x0, &(0x7f0000000200)={0x2, 0x4e21, @remote}, 0x10) bpf$MAP_CREATE(0x0, &(0x7f0000003940)=@base={0x21, 0x0, 0x0, 0x7, 0x400}, 0x50) bpf$PROG_LOAD_XDP(0x5, &(0x7f00000001c0)={0xe, 0x4, &(0x7f0000001300)=@framed={{}, [@ldst={0x1, 0x2, 0x3, 0x0, 0x1, 0x36}]}, &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x1e}, 0x90) 47.813208876s ago: executing program 2 (id=6220): r0 = openat$ppp(0xffffffffffffff9c, &(0x7f0000000040), 0x0, 0x0) ioctl$PPPIOCNEWUNIT(r0, 0xc004743e, &(0x7f0000000140)) ioctl$PPPIOCSPASS(r0, 0x40107447, &(0x7f0000000180)={0x1, &(0x7f0000000000)=[{0x6}]}) close(r0) r1 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r1, &(0x7f0000000640)={0x0, 0x0, &(0x7f0000000600)={&(0x7f0000000000)=@newtaction={0x68, 0x30, 0xb, 0x0, 0x10, {}, [{0x54, 0x1, [@m_skbedit={0x50, 0x1, 0x0, 0x0, {{0xc}, {0x24, 0x2, 0x0, 0x1, [@TCA_SKBEDIT_PRIORITY={0x8, 0x3, {0x9, 0xffec}}, @TCA_SKBEDIT_PARMS={0xfffffffffffffe2c}]}, {0x4}, {0xc, 0x7, {0x1, 0x1}}, {0xc, 0x9}}}]}]}, 0x68}}, 0x0) r2 = socket$nl_route(0x10, 0x3, 0x0) ioctl$FS_IOC_SETVERSION(r0, 0x40087602, &(0x7f0000000080)=0x8) r3 = socket$nl_route(0x10, 0x3, 0x0) r4 = socket$inet6_mptcp(0xa, 0x1, 0x106) connect$inet6(r4, &(0x7f0000000040)={0xa, 0x4001, 0x4, @ipv4={'\x00', '\xff\xff', @remote}}, 0x1c) listen(r4, 0xfffffff5) unshare(0x2020000) openat$ppp(0xffffffffffffff9c, &(0x7f0000000000), 0x22d00, 0x0) syz_init_net_socket$bt_hci(0x1f, 0x3, 0x5) close(0x4) syz_open_procfs$namespace(0x0, &(0x7f0000000080)='ns/cgroup\x00') r5 = socket$packet(0x11, 0x3, 0x300) sendmsg$RDMA_NLDEV_CMD_NEWLINK(0xffffffffffffffff, &(0x7f0000000300)={0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x854}, 0x0) r6 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r6, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000400)={&(0x7f0000000300)=ANY=[@ANYBLOB="2400000047000701feffffffffffffff017c0000080001"], 0x24}, 0x1, 0x0, 0x0, 0x4048011}, 0xc000) setsockopt$packet_int(r5, 0x107, 0xa, &(0x7f0000000000)=0x2, 0x4) writev(r3, &(0x7f0000000680)=[{&(0x7f00000000c0)="f3cb8349edf5b6935c7131fe96ff7ad61ab402b17ad4f9d3db46f45db0bc35dadc295a6184f9646764635f24bd5d97eb6836cabd430b", 0x36}, {&(0x7f00000001c0)="622fde9029428a00a95c7acad70b4585f4d249b1b066c40101831180be419ef749ce4f53d91c1ce78d152fc17fe49dc66bbb557c98c6eb6199d2fd67df015a5965acdf968b13a5bd47ab0858737c4bcfab43958ec3b1cf9919038efff66ac61bb94cda22581ac68660a6791c311fc07f1c50728a2261b8bf5c57d458ef48b8551c8e5890b8", 0x85}, {&(0x7f00000003c0)="f4485ec48cb90f08aa02f71a0e586032903e33ebb7fba347b060b246a65f3f2fc9fff5d00f43e344cf29006e560bd14ff48d304bbbd9266740981372786560347b256be14d3b6acf9d70ba2981becd645756c6cc8fbaebd07f7ad16abbbbe6f61b899bc2c27f9ff183dc39dd57bce7ac08a5cee536", 0x75}, {&(0x7f0000000440)="ae4ded168df693fed3a5e0677c2b34f6e685dad06d01dbb97520855d6c5abaa484e82e8b971763089f261c55fb64b6a08386a23b647a7501b47437dec9cbd8af99a4a505b7819eea4cdf44fa8360c3aaf4ec97fa1e08a01ab490f40f8d64b24f051b50483edcf0170f5900dbfa", 0x6d}, {&(0x7f00000004c0)="ecacc9b4811db86c4f8cb3bfe8ce8cbd1f3dcbe8871ca929875b7efd4740ada5c6d8e3c59cb0606c48c36ded7584a83ab3bec73089b15c9195c1a6d16e2b45b47018c7d5f7248981a4eeabc97a82fd626a994cde4db5ae0c067634c0e55556476c9e8d8ac2c26e0c653a1878fb77c5", 0x6f}, {&(0x7f0000000540)="f0c3cf217cd93fc42280c32b1aebf52b2268328606b5225b148c14064256f20d329c025d19d0b4e968857ad812b17364e051933c96058dcf3467724672ddf85c17e801a3f5a73dbe0e7a14ffb62bd6837e2d056d31180a51a0f04ecf40fc95e0375e713e569f5c15f93043302f3b0fbe61029da2e9d5b40a2350760ce6", 0x7d}], 0x6) setsockopt$packet_tx_ring(r5, 0x107, 0xd, &(0x7f0000000040)=@req3={0x10000, 0x100000001, 0x10000, 0x1}, 0x1c) r7 = socket$packet(0x11, 0x3, 0x300) ioctl$ifreq_SIOCGIFINDEX_batadv_mesh(r7, 0x8933, &(0x7f0000000180)={'batadv0\x00', 0x0}) sendto$packet(r7, &(0x7f0000000100)="114353012008ba00000037510800059128120bfacf8a50701cfc862aed9d853ac1e8f8", 0x23, 0x4008015, &(0x7f00000000c0)={0x11, 0xe5, r8, 0x1, 0x7}, 0x14) poll(&(0x7f0000000300)=[{r5, 0x1040}], 0x1, 0x81) bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=@base={0x10, 0x4, 0x4, 0x5, 0x1018, 0xffffffffffffffff, 0xe}, 0x48) sendmsg$nl_route(r2, &(0x7f0000000380)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f0000000640)=@newlink={0x40, 0x10, 0x437, 0x0, 0x0, {0x0, 0x0, 0x0, 0x0, 0x4048b}, [@IFLA_LINKINFO={0x20, 0x12, 0x0, 0x1, @sit={{0x8}, {0x14, 0x2, 0x0, 0x1, [@IFLA_IPTUN_REMOTE={0x8, 0x3, @remote}, @IFLA_IPTUN_LOCAL={0x8, 0x2, @private=0xa010101}]}}}]}, 0x40}}, 0x0) 47.483751686s ago: executing program 3 (id=6223): r0 = socket(0x40000000015, 0x805, 0x0) syz_genetlink_get_family_id$tipc2(&(0x7f0000000000), r0) 47.402455431s ago: executing program 0 (id=6224): r0 = socket$can_raw(0x1d, 0x3, 0x1) r1 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f00000000c0)={'bond_slave_1\x00', 0x0}) bind$can_raw(r0, &(0x7f0000000000)={0x1d, r2}, 0x10) socket$nl_route(0x10, 0x3, 0x0) r3 = socket(0x10, 0x3, 0x0) r4 = openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0) ioctl$TUNSETIFF(r4, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x7101}) r5 = socket$unix(0x1, 0x1, 0x0) r6 = socket$kcm(0x11, 0x3, 0x0) r7 = openat$tun(0xffffffffffffff9c, &(0x7f0000000400), 0x0, 0x0) close(r7) r8 = socket$nl_route(0x10, 0x3, 0x0) r9 = socket$unix(0x1, 0x1, 0x0) ioctl$sock_SIOCGIFINDEX(r9, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r8, &(0x7f00000012c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000140)=@newqdisc={0x44, 0x24, 0x4ee4e6a52ff56541, 0x70bd2a, 0xffdfffff, {0x0, 0x0, 0x0, r10, {0x0, 0xfff1}, {0xffff, 0xffff}, {0x0, 0x9}}, [@qdisc_kind_options=@q_hfsc={{0x9}, {0x14, 0x2, @TCA_HFSC_RSC={0x10, 0x1, {0x81, 0xfffffffb, 0xb}}}}]}, 0x44}, 0x1, 0x0, 0x0, 0x28000000}, 0x20040084) sendmsg$nl_route_sched(r8, &(0x7f0000001200)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000700)=@newqdisc={0x838, 0x28, 0x4ee4e6a52ff56541, 0x4001, 0xfffffdf8, {0x0, 0x0, 0x0, r10, {0x10}, {}, {0xa, 0xa}}, [@qdisc_kind_options=@q_tbf={{0x8}, {0x80c, 0x2, [@TCA_TBF_RTAB={0x404, 0x2, [0x200000, 0x1, 0x2, 0x9, 0x3, 0x5, 0x5, 0xb762, 0x4, 0x100007, 0x8, 0x10, 0x2, 0x2, 0x8001, 0x1007fc, 0xffff8000, 0x6, 0x403, 0x9, 0x8, 0xfffffff8, 0xd6, 0x4, 0xfffb, 0x40000007, 0x0, 0xfffff4f0, 0x9, 0x1, 0xfffffffc, 0x4, 0x1, 0x6f2151b1, 0x9, 0xc, 0x20001000, 0x4, 0xfffffffe, 0x7, 0x4, 0x99, 0x9, 0x5, 0x6, 0x7, 0xfffffff7, 0x1, 0x2, 0x9, 0x9, 0x1000044, 0x8, 0x8, 0x39e1, 0x4, 0x7ff, 0x8, 0x7, 0x7fbffffe, 0x400, 0x8, 0xfffffa72, 0xcd, 0x4, 0x80000000, 0xc, 0x6, 0x65, 0x91, 0x659, 0x9, 0xf, 0x9, 0xc28, 0x9, 0x2, 0x3, 0x401, 0x3, 0x2, 0xfffffffa, 0x1, 0x10001, 0x3, 0x1, 0x4, 0x7, 0x8, 0x7, 0x1, 0x1, 0x1, 0x5, 0x3c, 0x7, 0x12, 0x3, 0x1, 0x4dc, 0x80, 0xffffff80, 0x7fffffff, 0xff, 0x9, 0xa7, 0xf, 0x1, 0x0, 0x3, 0x1001, 0x4, 0x401, 0x7, 0x80000000, 0xffff, 0x6, 0x5, 0x4f, 0xffffffff, 0x80000000, 0x1966f9ad, 0x200, 0x20200, 0xed5, 0xfffffc00, 0x6, 0x4, 0x8, 0x485e, 0xa85, 0x80000040, 0x2, 0x7, 0x7, 0x102, 0x2d5421e8, 0x7, 0x10000, 0x2, 0x6, 0x1, 0x40000f04, 0x0, 0x2, 0x5, 0xfffffc00, 0x5, 0x8d, 0x4, 0x401, 0x4, 0x9, 0x50200523, 0xfffffffb, 0x1, 0x0, 0x3, 0x8, 0x5, 0x8, 0x3, 0x0, 0x800, 0x2, 0x8, 0x7ff, 0x1, 0x9, 0x6, 0x4, 0x400001, 0xd, 0x1ff, 0xfffff068, 0x3, 0x429, 0x3, 0x0, 0x200, 0x10000005, 0x7, 0x2, 0x8, 0x42ba, 0x4, 0x800009, 0x3, 0x8, 0x8, 0x53, 0x6, 0x4, 0x400, 0x8000, 0x0, 0x2c310b1a, 0x9, 0x0, 0x3, 0xcd34, 0x9, 0x81, 0xdf3, 0x2, 0x7, 0x8, 0x40fff, 0x1ff, 0x8000, 0x3, 0x8, 0x80, 0x6, 0x9a6, 0xe4cb, 0x402, 0x9, 0x1ff, 0x5, 0x9b4, 0x4, 0x6, 0x0, 0x9, 0x0, 0x9, 0x0, 0x4, 0x10, 0x901, 0x5, 0x2, 0x7d, 0x7420, 0x6, 0x6, 0xc, 0x1000, 0x9, 0x9, 0xe6, 0xab, 0x400, 0x7fffffff, 0xed, 0x7ff, 0xd83, 0x68, 0x80000001, 0x6, 0x9fd, 0x10000006, 0x200, 0x4, 0x2]}, @TCA_TBF_PTAB={0x404, 0x3, [0x800, 0x1, 0x1, 0x0, 0x7, 0x196, 0x2, 0x6, 0x0, 0x0, 0x8, 0xc9cd, 0x7f, 0x9, 0x0, 0x200, 0x3, 0x9, 0xd, 0x2, 0x7, 0x4, 0x6, 0x9, 0x8000000a, 0xc4, 0x60, 0x8000, 0x7, 0x2000db3a, 0x800, 0x3, 0x9, 0x3, 0x9, 0x0, 0x401, 0x3, 0x6, 0x33, 0x6, 0xfffffffc, 0x8001, 0x6, 0x6, 0x4, 0x5, 0xd, 0x2, 0x2, 0x1, 0x0, 0x3, 0x81, 0x3, 0x1ff, 0xfffffff5, 0xc9, 0x5, 0x65e1, 0x10001, 0xc, 0x7fff, 0xffffb5ca, 0xe, 0x3, 0x97, 0x7, 0xb, 0x0, 0x1, 0x7ff, 0xb4, 0xf, 0x1, 0x3, 0xff, 0xfff, 0x0, 0xee3, 0x400, 0x9, 0x1, 0x3, 0x1, 0x3796, 0x8, 0x6, 0xbe, 0x3, 0x45, 0xdd1, 0x5, 0x7, 0x7de, 0x0, 0x3, 0x345, 0x4, 0x9da, 0x4, 0x6, 0xea6, 0x3, 0x5, 0x3, 0x3, 0xffffffff, 0x3ff, 0x96, 0x7, 0x2, 0xf, 0x9, 0xffffffff, 0x5, 0x3, 0x1417, 0x82, 0x7f, 0x9, 0x1, 0xb8, 0x6, 0x4, 0x6, 0x3f0a, 0x4, 0x9, 0x5, 0x1ff, 0x4, 0x4, 0x1, 0x7, 0x2, 0xfffffffe, 0x3, 0xb, 0xfffffff7, 0x8, 0xf, 0xc57, 0x5, 0x2, 0x5, 0x8, 0xfffffffc, 0xf, 0x1982, 0x1, 0x80000000, 0x5, 0x9, 0x6, 0x8000, 0x40000002, 0x1, 0xffffffff, 0x2, 0x5, 0x4, 0x2, 0x5, 0x5, 0x7, 0x692, 0x92, 0x4, 0x0, 0x2, 0x43d, 0x1b8c, 0x14, 0x62, 0xc00, 0xa, 0x9, 0x3, 0x8, 0x10001, 0x295, 0x6, 0x9, 0x1, 0xb7e, 0x10001, 0x2, 0x7, 0x4, 0x1, 0x2, 0x103ff, 0xfb5, 0x8, 0xa, 0x0, 0x9, 0xc, 0xc3d5, 0x2, 0x8000, 0xec, 0xd, 0x5, 0x84d3, 0xfffffeff, 0x2, 0x7ff, 0x7fffffff, 0x80, 0x2, 0x4, 0x2, 0x6, 0x3, 0x270, 0x2, 0x0, 0x400, 0x8, 0x10000, 0x9, 0x101, 0xefba, 0x7, 0x3, 0xbe4, 0xa4a, 0x7, 0x400, 0xc, 0xfffffff9, 0x80000000, 0xd, 0x1, 0x9, 0xffe, 0x421, 0x3ff, 0x2, 0x2d, 0x7, 0x5, 0xfffffffc, 0xac, 0x7fff, 0xa, 0x0, 0x6, 0x7f, 0x2dd, 0x7, 0x4, 0x7, 0x1]}]}}]}, 0x838}, 0x1, 0x0, 0x0, 0x40098}, 0x0) ioctl$SIOCSIFHWADDR(r7, 0x8914, &(0x7f0000002280)={'syzkaller0\x00', @multicast}) ioctl$sock_SIOCGIFINDEX(r5, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$kcm(r6, &(0x7f00000000c0)={&(0x7f0000000380)=@xdp={0x2c, 0xdd86, r11, 0x3e}, 0x80, &(0x7f0000000080)=[{&(0x7f0000000180)="80", 0x1}], 0x1}, 0x4) socket$unix(0x1, 0x1, 0x0) syz_emit_ethernet(0x56, &(0x7f0000000640)={@multicast, @broadcast, @void, {@ipv6={0x86dd, @icmpv6={0x0, 0x6, "f4adf7", 0x20, 0x2c, 0xff, @rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x01', @mcast2, {[@hopopts={0x3a}], @ndisc_na={0x88, 0x0, 0x0, 0x6, '\x00', @ipv4={'\x00', '\xff\xff', @initdev={0xac, 0x1e, 0x1, 0x0}}}}}}}}, 0x0) r12 = socket$packet(0x11, 0x2, 0x300) getsockopt$inet_sctp_SCTP_AUTOCLOSE(r3, 0x84, 0x4, &(0x7f0000000040), &(0x7f0000000100)=0x4) ioctl$sock_SIOCGIFINDEX(r12, 0x8933, &(0x7f0000000080)={'ip6tnl0\x00', 0x0}) sendmsg$nl_route_sched(r3, &(0x7f00000007c0)={0x0, 0x0, &(0x7f0000004640)={&(0x7f00000000c0)=@newqdisc={0x30, 0x24, 0xf0b, 0x0, 0x0, {0x0, 0x0, 0x0, r13, {}, {0xffff, 0xffff}}, [@qdisc_kind_options=@q_tbf={{0x8}, {0x4}}]}, 0x30}}, 0x0) 47.276084611s ago: executing program 3 (id=6225): getsockopt$TIPC_IMPORTANCE(0xffffffffffffffff, 0x10f, 0x7f, &(0x7f0000000000), &(0x7f0000000040)=0x4) r0 = socket$can_raw(0x1d, 0x3, 0x1) ioctl$sock_SIOCSIFVLAN_SET_VLAN_EGRESS_PRIORITY_CMD(r0, 0x8983, &(0x7f0000000080)={0x3, 'veth0_to_batadv\x00', {0x80000001}, 0x7ff}) getsockopt$inet6_buf(0xffffffffffffffff, 0x29, 0x6, &(0x7f00000000c0)=""/63, 0xfffffffffffffffd) close(0xffffffffffffffff) ioctl$XFS_IOC_START_COMMIT(r0, 0x80585882, &(0x7f0000000100)={0xffffffffffffffff}) r2 = syz_genetlink_get_family_id$nl80211(&(0x7f00000001c0), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f0000000200)={'wlan1\x00', 0x0}) sendmsg$NL80211_CMD_JOIN_MESH(r1, &(0x7f0000000540)={&(0x7f0000000180), 0xc, &(0x7f0000000500)={&(0x7f0000000240)={0x2ac, r2, 0x10, 0x70bd25, 0x25dfdbff, {{}, {@val={0x8, 0x3, r3}, @val={0xc, 0x99, {0x3, 0x5d}}}}, [@NL80211_ATTR_MESH_CONFIG={0x34, 0x23, 0x0, 0x1, [@NL80211_MESHCONF_MIN_DISCOVERY_TIMEOUT={0x6, 0xa, 0x3}, @NL80211_MESHCONF_FORWARDING={0x5, 0x13, 0x8}, @NL80211_MESHCONF_HWMP_NET_DIAM_TRVS_TIME={0x6, 0xd, 0xe000}, @NL80211_MESHCONF_HWMP_MAX_PREQ_RETRIES={0x5, 0x8, 0x7}, @NL80211_MESHCONF_HWMP_NET_DIAM_TRVS_TIME={0x6, 0xd, 0x6}, @NL80211_MESHCONF_HWMP_ROOTMODE={0x5, 0xe, 0x2}]}, @NL80211_ATTR_MESH_CONFIG={0x24, 0x23, 0x0, 0x1, [@NL80211_MESHCONF_SYNC_OFFSET_MAX_NEIGHBOR={0x8, 0x15, 0xa7}, @NL80211_MESHCONF_MAX_PEER_LINKS={0x6, 0x4, 0xff}, @NL80211_MESHCONF_CONNECTED_TO_GATE={0x5, 0x1d, 0x1}, @NL80211_MESHCONF_HOLDING_TIMEOUT={0x6, 0x3, 0xbe}]}, @NL80211_ATTR_TX_RATES={0x228, 0x5a, 0x0, 0x1, [@NL80211_BAND_60GHZ={0x48, 0x2, 0x0, 0x1, [@NL80211_TXRATE_VHT={0x14, 0x3, {[0x8, 0xff, 0x5, 0x4, 0x400, 0x400, 0x9265, 0xf801]}}, @NL80211_TXRATE_VHT={0x14, 0x3, {[0x1, 0x9, 0xe, 0x7, 0x7, 0x2, 0x6, 0x6]}}, @NL80211_TXRATE_GI={0x5}, @NL80211_TXRATE_HE={0x14, 0x5, {[0x4, 0x1000, 0x4, 0x5, 0x7ff, 0x0, 0x8, 0x2]}}]}, @NL80211_BAND_2GHZ={0x98, 0x0, 0x0, 0x1, [@NL80211_TXRATE_GI={0x5}, @NL80211_TXRATE_LEGACY={0x24, 0x1, [0x60, 0x1b, 0x6c, 0x1, 0x16, 0xb, 0x12, 0x18, 0x2, 0x24, 0x4, 0xc, 0x6c, 0xc, 0x48, 0x36, 0x4, 0x48, 0x1, 0x1, 0x4, 0x5, 0x30, 0x35, 0x1, 0xb846b2873e7e8dd1, 0x1b, 0x36, 0x24, 0x30, 0x68, 0x2]}, @NL80211_TXRATE_LEGACY={0x20, 0x1, [0x18, 0x6, 0x30, 0xb, 0x30, 0x6c, 0x60, 0x18, 0x3, 0x36, 0x24, 0x24, 0x18, 0x18, 0x18, 0x30, 0x1b, 0x48, 0x4, 0x36, 0x17, 0xb, 0x6, 0x48, 0x3, 0x6c, 0x4, 0x1]}, @NL80211_TXRATE_HE_GI={0x5, 0x6, 0x2}, @NL80211_TXRATE_HE={0x14, 0x5, {[0x6, 0x4, 0x8, 0x0, 0x9552, 0x9, 0xf4, 0x6]}}, @NL80211_TXRATE_LEGACY={0x16, 0x1, [0x6, 0x4, 0x36, 0x6, 0x48, 0xc, 0x0, 0x48, 0x4, 0x1, 0x36, 0x57, 0x36, 0x3, 0x48, 0x6c, 0x2, 0xb]}, @NL80211_TXRATE_VHT={0x14, 0x3, {[0x8, 0x5559, 0x9, 0x2, 0xc, 0x7, 0x6, 0x5]}}]}, @NL80211_BAND_60GHZ={0x80, 0x2, 0x0, 0x1, [@NL80211_TXRATE_HE_GI={0x5}, @NL80211_TXRATE_LEGACY={0x17, 0x1, [0x4, 0x12, 0x6, 0x30, 0x5, 0x16, 0xbc, 0x36, 0x18, 0x3, 0x24, 0x6, 0x5, 0x6c, 0x2, 0x30, 0x36, 0x30, 0x60]}, @NL80211_TXRATE_LEGACY={0x18, 0x1, [0x9, 0x2, 0x6c, 0x6c, 0x6c, 0x6c, 0x6c, 0x10, 0x24, 0x2, 0xc, 0x48, 0x48, 0x16, 0x6, 0x12, 0x2, 0x2, 0x5e, 0x9]}, @NL80211_TXRATE_HE={0x14, 0x5, {[0xc526, 0x20, 0x4, 0x7fff, 0xc, 0x2, 0x8, 0x2]}}, @NL80211_TXRATE_HT={0x13, 0x2, [{0x7, 0x2}, {0x7, 0x2}, {0x7, 0x6}, {0x0, 0x6}, {0x1, 0x2}, {0x2}, {0x4, 0x1}, {0x6, 0x2}, {0x4, 0x1}, {0x2, 0x2}, {0x3}, {0x5, 0x6}, {0x0, 0x8}, {0x1, 0x7}, {0x1}]}, @NL80211_TXRATE_HE={0x14, 0x5, {[0x1, 0x0, 0x165, 0x3b26, 0x3c, 0x7, 0xb892, 0x7]}}, @NL80211_TXRATE_GI={0x5}]}, @NL80211_BAND_60GHZ={0x94, 0x2, 0x0, 0x1, [@NL80211_TXRATE_HE={0x14, 0x5, {[0x9, 0x9, 0x1, 0x1, 0x8, 0x4, 0x3, 0x8]}}, @NL80211_TXRATE_LEGACY={0xa, 0x1, [0x3, 0xb, 0x5, 0x18, 0x5, 0x4]}, @NL80211_TXRATE_LEGACY={0x16, 0x1, [0x9, 0x60, 0x7d, 0x18, 0xb, 0x6, 0x60, 0x1b, 0x36, 0x1b, 0x16, 0x1, 0x5, 0x5, 0x60, 0x30, 0x60, 0xc]}, @NL80211_TXRATE_GI={0x5, 0x4, 0x1}, @NL80211_TXRATE_HT={0x4e, 0x2, [{0x4, 0x4}, {0x4, 0x3}, {0x1}, {0x2, 0x7}, {0x5, 0x5}, {0x4, 0x2}, {0x0, 0xa}, {0x6, 0x6}, {0x0, 0x9}, {0x7, 0x8}, {0x6, 0x6}, {0x6, 0x5}, {0x4, 0x8}, {0x0, 0x7}, {0x6, 0x3}, {0x6}, {0x3, 0x3}, {0x4, 0x1}, {0x0, 0xa}, {0x5, 0x8}, {0x1, 0x8}, {0x1, 0x9}, {0x4, 0x6}, {0x7, 0x7}, {0x1, 0x5}, {0x5, 0x4}, {0x1, 0x9}, {0x3, 0x2}, {0x1}, {0x5, 0x9}, {0x6, 0x7}, {0x1, 0x9}, {0x7, 0xa}, {0x3, 0x9}, {}, {0x0, 0x9}, {0x5, 0x4}, {0x2, 0x7}, {0x6}, {0x4, 0x5}, {0x0, 0x5}, {0x2, 0x3}, {0x2, 0x4}, {0x0, 0x2}, {0x4, 0x6}, {0x6}, {0x4, 0x2}, {0x6}, {0x1, 0x1}, {0x1, 0x2}, {0x2, 0x6}, {0x7, 0x3}, {0x0, 0x7}, {0x4, 0x4}, {0x4, 0x2}, {0x5, 0x4}, {0x2, 0x3}, {0x1, 0x6}, {0x0, 0x7}, {0x0, 0x5}, {0x2, 0x7}, {0x1, 0x3}, {0x5, 0x7}, {0x6, 0x1}, {0x5}, {0x0, 0x9}, {0x7, 0x2}, {0x6, 0x6}, {0x7, 0xa}, {0x0, 0x6}, {0x6, 0x5}, {0x4, 0x4}, {0x6, 0x5}, {0x5, 0x3}]}]}, @NL80211_BAND_2GHZ={0x30, 0x0, 0x0, 0x1, [@NL80211_TXRATE_HE_GI={0x5}, @NL80211_TXRATE_HE_GI={0x5}, @NL80211_TXRATE_HE_LTF={0x5, 0x7, 0x2}, @NL80211_TXRATE_HE={0x14, 0x5, {[0x909, 0x5, 0x8, 0x101, 0x6, 0x8, 0xc, 0x7]}}]}]}, @NL80211_ATTR_CONTROL_PORT_OVER_NL80211={0x4}]}, 0x2ac}, 0x1, 0x0, 0x0, 0x4004018}, 0x40001) r4 = epoll_create1(0x80000) epoll_ctl$EPOLL_CTL_MOD(r4, 0x3, r1, &(0x7f0000000580)={0x30000002}) setsockopt$inet_tcp_TLS_TX(r1, 0x11a, 0x1, &(0x7f00000005c0)=@gcm_256={{0x303}, "ca4fd68df062cab5", "0d646a45f6055a6f2e6ff1c815050bf347c42abe3380cbff2c8eeec93974ca00", "88a9a186", "6d0116e6de65f5d1"}, 0x38) r5 = socket$nl_generic(0x10, 0x3, 0x10) r6 = syz_genetlink_get_family_id$ethtool(&(0x7f0000000640), r1) getsockname$packet(r1, &(0x7f0000000680)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @remote}, &(0x7f00000006c0)=0x14) ioctl$ifreq_SIOCGIFINDEX_batadv_mesh(r0, 0x8933, &(0x7f0000000700)={'batadv0\x00', 0x0}) ioctl$sock_ipv6_tunnel_SIOCGET6RD(r1, 0x89f8, &(0x7f00000007c0)={'syztnl2\x00', &(0x7f0000000740)={'gre0\x00', 0x0, 0x80, 0x8000, 0xfffffffa, 0x9d2b, {{0x15, 0x4, 0x3, 0x0, 0x54, 0x68, 0x0, 0xf, 0x29, 0x0, @local, @remote, {[@end, @ssrr={0x89, 0x17, 0x39, [@private=0xa010100, @local, @empty, @empty, @local]}, @timestamp={0x44, 0x8, 0x12, 0x0, 0xb, [0x4]}, @end, @ssrr={0x89, 0x1f, 0x94, [@local, @loopback, @empty, @local, @multicast1, @initdev={0xac, 0x1e, 0x0, 0x0}, @loopback]}]}}}}}) ioctl$sock_ipv6_tunnel_SIOCGETTUNNEL(r1, 0x89f0, &(0x7f0000000880)={'syztnl1\x00', &(0x7f0000000800)={'syztnl0\x00', 0x0, 0x4, 0xc, 0x52, 0x1, 0xa, @private0={0xfc, 0x0, '\x00', 0x1}, @private1, 0x20, 0x20, 0x5, 0xfffffff9}}) ioctl$ifreq_SIOCGIFINDEX_team(r1, 0x8933, &(0x7f00000008c0)={'team0\x00', 0x0}) bpf$BPF_GET_PROG_INFO(0xf, &(0x7f0000000c00)={r1, 0xe0, &(0x7f0000000b00)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, &(0x7f0000000900)=[0x0], ""/16, 0x0, 0x0, 0x0, 0x0, 0xa, 0x8, &(0x7f0000000940)=[0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0], &(0x7f00000009c0)=[0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0], 0x0, 0xb0, &(0x7f0000000a00)=[{}], 0x8, 0x10, &(0x7f0000000a40), &(0x7f0000000a80), 0x8, 0x63, 0x8, 0x8, &(0x7f0000000ac0)}}, 0x10) bpf$BPF_GET_PROG_INFO(0xf, &(0x7f0000000f00)={r1, 0xe0, &(0x7f0000000e00)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, &(0x7f0000000c40)=[0x0, 0x0, 0x0, 0x0], ""/16, 0x0, 0x0, 0x0, 0x0, 0x5, 0x7, &(0x7f0000000c80)=[0x0, 0x0, 0x0, 0x0, 0x0], &(0x7f0000000cc0)=[0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0], 0x0, 0x9f, &(0x7f0000000d00)=[{}, {}], 0x10, 0x10, &(0x7f0000000d40), &(0x7f0000000d80), 0x8, 0x5a, 0x8, 0x8, &(0x7f0000000dc0)}}, 0x10) bpf$BPF_GET_MAP_INFO(0xf, &(0x7f0000000fc0)={r1, 0x58, &(0x7f0000000f40)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, ""/16, 0x0}}, 0x10) getpeername$packet(0xffffffffffffffff, &(0x7f0000001000)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000001040)=0x14) ioctl$sock_ipv6_tunnel_SIOCCHGTUNNEL(r1, 0x89f3, &(0x7f0000001100)={'ip6_vti0\x00', &(0x7f0000001080)={'ip6gre0\x00', 0x0, 0x4, 0x1, 0x7f, 0x0, 0x41, @mcast2, @remote, 0x20, 0x7, 0x5, 0x7}}) bpf$BPF_GET_PROG_INFO(0xf, &(0x7f0000001400)={r1, 0xe0, &(0x7f0000001300)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, &(0x7f0000001140)=[0x0, 0x0, 0x0], ""/16, 0x0, 0x0, 0x0, 0x0, 0x4, 0x7, &(0x7f0000001180)=[0x0, 0x0, 0x0, 0x0], &(0x7f00000011c0)=[0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0], 0x0, 0xf9, &(0x7f0000001200)=[{}, {}, {}, {}], 0x20, 0x10, &(0x7f0000001240), &(0x7f0000001280), 0x8, 0x61, 0x8, 0x8, &(0x7f00000012c0)}}, 0x10) sendmsg$ETHTOOL_MSG_FEATURES_GET(r5, &(0x7f0000001640)={&(0x7f0000000600)={0x10, 0x0, 0x0, 0x800}, 0xc, &(0x7f0000001600)={&(0x7f0000001440)={0x1bc, r6, 0x8, 0x70bd25, 0x25dfdbfb, {}, [@HEADER={0x80, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'bridge_slave_1\x00'}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r7}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'vlan0\x00'}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'ip6gre0\x00'}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'nr0\x00'}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r8}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'vlan1\x00'}]}, @HEADER={0x5c, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r9}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'bond_slave_1\x00'}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'veth1_macvtap\x00'}, @ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x3}, @ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x2}, @ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x1}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r10}, @ETHTOOL_A_HEADER_FLAGS={0x8}]}, @HEADER={0x44, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'virt_wifi0\x00'}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r11}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'veth0_to_bridge\x00'}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r12}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r13}]}, @HEADER={0x44, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'virt_wifi0\x00'}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r14}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r15}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'bond_slave_0\x00'}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r16}]}, @HEADER={0x44, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'wg2\x00'}, @ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x3}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r17}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'veth1\x00'}, @ETHTOOL_A_HEADER_FLAGS={0x8}]}]}, 0x1bc}, 0x1, 0x0, 0x0, 0x4}, 0x4000880) r18 = bpf$MAP_CREATE(0x0, &(0x7f00000017c0)=@base={0x16, 0x5, 0x6cf6d5d9, 0xb2, 0x135b0, r1, 0xfffffff9, '\x00', 0x0, r1, 0x3, 0x0, 0x4, 0x0, @void, @value, @value=r1}, 0x50) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000001900)={0x6, 0x8, &(0x7f0000001680)=@raw=[@kfunc={0x85, 0x0, 0x2, 0x0, 0x5}, @map_val={0x18, 0x4, 0x2, 0x0, r1, 0x0, 0x0, 0x0, 0x1ff}, @map_idx_val={0x18, 0x0, 0x6, 0x0, 0x4, 0x0, 0x0, 0x0, 0x8}, @exit, @cb_func={0x18, 0x5, 0x4, 0x0, 0x7}], &(0x7f00000016c0)='GPL\x00', 0x7, 0x4d, &(0x7f0000001700)=""/77, 0x41100, 0x1, '\x00', r11, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, &(0x7f0000001780)={0x2, 0x10, 0xfffffc01, 0x6}, 0x10, 0x0, 0x0, 0x7, &(0x7f0000001840)=[r18, r1, r1, r1], &(0x7f0000001880)=[{0x3, 0x3, 0x4, 0xb}, {0x3, 0x1, 0xd, 0xb}, {0x2, 0x1, 0x1, 0x5}, {0x1, 0x2, 0xb, 0xc}, {0x4, 0x1, 0x1, 0x6}, {0x5, 0x4, 0x3}, {0x1, 0x2, 0x10, 0x7}], 0x10, 0xcb}, 0x94) getsockopt$SO_J1939_ERRQUEUE(r1, 0x6b, 0x4, &(0x7f00000019c0), &(0x7f0000001a00)=0x4) bpf$MAP_CREATE(0x0, &(0x7f0000001a40)=@base={0x1, 0x8001, 0x2, 0x3, 0x1483, r18, 0x80000000, '\x00', r12, 0xffffffffffffffff, 0x3, 0x3, 0x2}, 0x50) 46.592339224s ago: executing program 4 (id=6227): r0 = syz_init_net_socket$bt_hci(0x1f, 0x5, 0x8) bind(r0, &(0x7f0000000300)=@l2tp={0x1f, 0x0, @initdev={0xac, 0x1e, 0x0, 0x0}, 0x4}, 0x80) r1 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r1, &(0x7f0000000ac0)={0x0, 0x0, &(0x7f0000000a80)={&(0x7f00000080c0)=@newtaction={0x58, 0x31, 0x901, 0x0, 0x0, {}, [{0x44, 0x1, [@m_nat={0x40, 0x1, 0x0, 0x0, {{0x8}, {0x4}, {0x15, 0x6, "02122a1364ca4168600ce2c275478c859e"}, {0xc}, {0xc}}}]}]}, 0x58}}, 0x0) r2 = socket$nl_generic(0x10, 0x3, 0x10) r3 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000200), r2) ioctl$sock_SIOCGIFINDEX_80211(r2, 0x8933, &(0x7f0000000700)={'wlan0\x00', 0x0}) sendmsg$NL80211_CMD_SET_INTERFACE(r2, &(0x7f0000000500)={0x0, 0x16, &(0x7f0000000600)={&(0x7f00000000c0)=ANY=[@ANYBLOB='$\x00\x00\x00', @ANYRES16=r3, @ANYBLOB="05000000e5c86615f168a9b73a000000a700000008000300", @ANYRES32=r4, @ANYBLOB="080005000b000000"], 0x24}}, 0x0) r5 = bpf$MAP_CREATE(0x0, &(0x7f0000000000)=ANY=[@ANYBLOB="06000033a6cdde2915b868f64260a4ad6000000200000000000000032134d7494c", @ANYRES32, @ANYBLOB='\x00'/20, @ANYRES32=0x0, @ANYRES32=r2, @ANYBLOB='\x00'/28], 0x50) ioctl$ifreq_SIOCGIFINDEX_batadv_mesh(r2, 0x8933, &(0x7f0000000080)) bpf$PROG_LOAD(0x5, &(0x7f0000000980)={0x11, 0x14, &(0x7f0000000200)=ANY=[@ANYBLOB="1802000000000000000000000000000018010000786c6c2500000000070000007b1af8ff00000000bfa100000000000007010000f8ffffffb700000000000000b703000000000000850000007300000018110000", @ANYRES32=r5, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b70400000000000085000000c300000095"], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x40, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) 46.509282365s ago: executing program 2 (id=6228): r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = syz_genetlink_get_family_id$wireguard(&(0x7f0000000600), 0xffffffffffffffff) sendmsg$WG_CMD_GET_DEVICE(0xffffffffffffffff, &(0x7f0000000380)={0x0, 0x0, &(0x7f0000000340)={&(0x7f00000002c0)=ANY=[@ANYBLOB='(\x00\x00\x00', @ANYRES16=r1, @ANYBLOB="01032cbd7000fedbdf25000000001400020077673100000000000010000000000000"], 0x28}, 0x1, 0x0, 0x0, 0xc0}, 0x20040000) r2 = socket$nl_generic(0x10, 0x3, 0x10) r3 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000040), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f0000000240)={'wlan1\x00', 0x0}) sendmsg$NL80211_CMD_JOIN_OCB(r2, &(0x7f0000000480)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x2000}, 0xc, &(0x7f0000000440)={&(0x7f00000003c0)={0x5c, r3, 0x4, 0x70bd2d, 0x25dfdbfe, {{}, {@val={0x8, 0x3, r4}, @void}}, [@NL80211_ATTR_WIPHY_FREQ_OFFSET={0x8, 0x122, 0x6f}, @NL80211_ATTR_WIPHY_FREQ_OFFSET={0x8, 0x122, 0x196}, @NL80211_ATTR_WIPHY_FREQ_OFFSET={0x8, 0x122, 0x9f}, @NL80211_ATTR_CENTER_FREQ2={0x8, 0xa1, 0x9}, @NL80211_ATTR_WIPHY_EDMG_BW_CONFIG={0x5, 0x119, 0x9}, @NL80211_ATTR_WIPHY_FREQ={0x8}, @NL80211_ATTR_WIPHY_EDMG_CHANNELS={0x5, 0x118, 0x2f}, @NL80211_ATTR_WIPHY_FREQ={0x8, 0x26, @random=0x16d5}]}, 0x5c}, 0x1, 0x0, 0x0, 0x4000000}, 0x11) r5 = openat$rfkill(0xffffffffffffff9c, &(0x7f0000000040), 0x801, 0x0) write$rfkill(r5, &(0x7f0000000080)={0x0, 0x1, 0x3, 0x3, 0xfd}, 0x8) socket$kcm(0x29, 0xa, 0x0) getsockopt$PNPIPE_IFINDEX(0xffffffffffffffff, 0x113, 0x2, &(0x7f0000000080)=0x0, &(0x7f00000000c0)=0x4) sendmsg$nl_route(r0, &(0x7f00000007c0)={0x0, 0x0, &(0x7f0000000780)={&(0x7f0000000100)=@bridge_getlink={0x30, 0x12, 0x100, 0x70bd2a, 0x25dfdbfd, {0x7, 0x0, 0x0, r6, 0x4100, 0x4c00}, [@IFLA_VFINFO_LIST={0x4}, @IFLA_IFALIASn={0x4}, @IFLA_WEIGHT={0x8, 0xf, 0xa}]}, 0x30}}, 0x44890) 46.205306808s ago: executing program 3 (id=6229): r0 = socket(0x10, 0x3, 0x0) socket(0x10, 0x803, 0x0) (async) r1 = socket(0x10, 0x803, 0x0) sendmsg$nl_route(r1, &(0x7f0000000380)={0x0, 0x0, &(0x7f0000000500)={&(0x7f0000000100)=@newlink={0x40, 0x10, 0x437, 0x0, 0x0, {0x0, 0x0, 0x0, 0x0, 0x51483}, [@IFLA_LINKINFO={0x20, 0x12, 0x0, 0x1, @gtp={{0x8}, {0x14, 0x2, 0x0, 0x1, [@IFLA_GTP_CREATE_SOCKETS={0x5, 0x5, 0x1}, @IFLA_GTP_LOCAL={0x8, 0x7, @rand_addr=0x64010101}]}}}]}, 0x40}}, 0x8040) r2 = socket$xdp(0x2c, 0x3, 0x0) socket$inet6(0xa, 0x2, 0x3a) (async) r3 = socket$inet6(0xa, 0x2, 0x3a) sendmmsg$inet6(r3, &(0x7f0000000640)=[{{&(0x7f0000000180)={0xa, 0x0, 0x0, @mcast1}, 0x2, &(0x7f00000002c0)=[{&(0x7f0000000140)="a0002883591ecc0e", 0x8}], 0x1}}], 0x1, 0x0) (async) sendmmsg$inet6(r3, &(0x7f0000000640)=[{{&(0x7f0000000180)={0xa, 0x0, 0x0, @mcast1}, 0x2, &(0x7f00000002c0)=[{&(0x7f0000000140)="a0002883591ecc0e", 0x8}], 0x1}}], 0x1, 0x0) mmap$xdp(&(0x7f0000ffd000/0x2000)=nil, 0x2000, 0x1, 0x10, r2, 0x180000000) sendmsg$nl_generic(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000001240)={&(0x7f00000004c0)=ANY=[@ANYBLOB="840100001900010000000000000000001d0109004d00108025b57e35619bf20cb7f2934efacde0a223b473fe77f3e5ba76fb70fa1f414813a2a20005006f88d6e1db9b2b0000000000000000000000001e010080dd000000fe88000000000000e6"], 0x184}}, 0x0) r4 = socket$kcm(0x10, 0x400000002, 0x0) sendmsg$inet(r4, &(0x7f0000000300)={0x0, 0x0, &(0x7f00000011c0)=[{&(0x7f0000001440)="5c00000013006bcc9e3be35c6e17aa31076b876c1c0000007ea60864160af36514001a40080002003f00020006a101c00364683b9dad7aa21240d69a6a818cf6c551ae60fc91b169edb1b175732b9f597f0600000000000000307de2", 0x5c}], 0x1, 0x0, 0x0, 0x1f00c00e}, 0x4044) (async) sendmsg$inet(r4, &(0x7f0000000300)={0x0, 0x0, &(0x7f00000011c0)=[{&(0x7f0000001440)="5c00000013006bcc9e3be35c6e17aa31076b876c1c0000007ea60864160af36514001a40080002003f00020006a101c00364683b9dad7aa21240d69a6a818cf6c551ae60fc91b169edb1b175732b9f597f0600000000000000307de2", 0x5c}], 0x1, 0x0, 0x0, 0x1f00c00e}, 0x4044) setsockopt$SO_ATTACH_FILTER(r0, 0x1, 0x1a, &(0x7f0000000100)={0x6, &(0x7f0000000000)=[{0xe, 0x5f, 0xf, 0x8}, {0x3, 0xf, 0x1, 0x1000}, {0x1, 0x9, 0x9, 0x3}, {0x922a, 0x2, 0x9, 0xd59b}, {0x2c5f, 0x2, 0x2, 0x5}, {0x10, 0x7, 0x5, 0x1}]}, 0x10) pipe(&(0x7f0000000080)) 46.133160797s ago: executing program 0 (id=6230): r0 = socket$inet_udp(0x2, 0x2, 0x0) bind$inet(r0, &(0x7f0000000100)={0x2, 0x0, @dev={0xac, 0x14, 0x14, 0x35}}, 0x10) r1 = socket$nl_generic(0x10, 0x3, 0x10) r2 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000080), 0xffffffffffffffff) sendmsg$NL80211_CMD_DEAUTHENTICATE(r1, &(0x7f00000002c0)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x2}, 0xc, &(0x7f0000000240)={&(0x7f0000000180)={0x88, r2, 0x600, 0x70bd28, 0x25dfdbfb, {{}, {@void, @void}}, [@NL80211_ATTR_LOCAL_STATE_CHANGE={0x4}, @NL80211_ATTR_MAC={0xa, 0x6, @from_mac=@broadcast}, @NL80211_ATTR_LOCAL_STATE_CHANGE={0x4}, @NL80211_ATTR_IE={0x55, 0x2a, [@link_id={0x65, 0x12, {@initial, @device_b}}, @erp={0x2a, 0x1, {0x1, 0x1}}, @supported_rates={0x1, 0x2, [{0x4, 0x1}, {0x4}]}, @ssid={0x0, 0x15, @random="914cc3d9e0d9deb938afbcf5d693fc540c06abb7c0"}, @ht={0x2d, 0x1a, {0x1, 0x1, 0x4, 0x0, {0x8, 0x1, 0x0, 0x275, 0x0, 0x0, 0x1, 0x2}, 0x400, 0x9, 0x40}}, @sec_chan_ofs={0x3e, 0x1}]}, @NL80211_ATTR_REASON_CODE={0x6, 0x36, 0x2}]}, 0x88}, 0x1, 0x0, 0x0, 0x40}, 0x0) setsockopt$sock_int(r0, 0x1, 0x6, &(0x7f0000000000)=0x4, 0x4) sendmmsg$inet(0xffffffffffffffff, &(0x7f0000005a00)=[{{0x0, 0x0, 0x0, 0x0, &(0x7f0000000140)=ANY=[@ANYBLOB="18000000000000000000000007000000890704e0180001001c000000000000000000000008"], 0x38}}], 0x1, 0xc050) connect$inet(r0, &(0x7f0000000280)={0x2, 0x0, @broadcast}, 0x10) sendmmsg$inet(r0, &(0x7f0000004d00)=[{{0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x30000}}], 0x1, 0x20000f01) 46.044656517s ago: executing program 4 (id=6231): bpf$TOKEN_CREATE(0x24, &(0x7f0000000140), 0x8) r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000240)='cpuacct.usage_percpu\x00', 0x275a, 0x0) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x0, 0x28011, r0, 0x0) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000600)={0x1, 0x2, &(0x7f0000000180)=ANY=[@ANYRESOCT], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, r0, 0x8, 0x0, 0xfd52}, 0x94) bpf$PROG_LOAD(0x5, &(0x7f000000e000)={0x1, 0x4, &(0x7f00000000c0)=ANY=[@ANYBLOB="b405006cbbf56d1d7ca9d4000000000004000000000017c19b414af90c152459a77e1caef317"], &(0x7f0000003ff6)='GPL\x00', 0x5, 0xfd90, &(0x7f000000cf3d)=""/195, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0x22e, 0x10, &(0x7f0000000000), 0x1dd}, 0x48) r1 = socket(0x28, 0x5, 0x0) connect$vsock_stream(r1, &(0x7f0000000080), 0x10) sendmmsg(r1, &(0x7f0000000100)=[{{0x0, 0x0, 0x0}}], 0x1, 0x24008094) ioctl$sock_ipv6_tunnel_SIOCGET6RD(0xffffffffffffffff, 0x89f8, &(0x7f0000000500)={'tunl0\x00', &(0x7f0000000440)={'erspan0\x00', 0x0, 0x10, 0x80, 0x4, 0x5, {{0x1d, 0x4, 0x0, 0x8, 0x74, 0x64, 0x0, 0x7f, 0x4, 0x0, @private=0xa010102, @broadcast, {[@timestamp={0x44, 0x8, 0x71, 0x0, 0x6, [0x4f310937]}, @generic={0x44, 0xd, "4a753254a121db33816eac"}, @ra={0x94, 0x4, 0x1}, @ssrr={0x89, 0x7, 0x6, [@dev={0xac, 0x14, 0x14, 0x20}]}, @lsrr={0x83, 0x7, 0x40, [@empty]}, @lsrr={0x83, 0xb, 0xb2, [@empty, @loopback]}, @cipso={0x86, 0x1f, 0xffffffffffffffff, [{0x1, 0x3, 'l'}, {0x5, 0x6, "28ad84d8"}, {0x0, 0x8, "697650424faf"}, {0x6, 0x8, "eaf798f9a968"}]}, @end, @rr={0x7, 0xb, 0x5c, [@remote, @initdev={0xac, 0x1e, 0x0, 0x0}]}]}}}}}) ioctl$sock_ipv6_tunnel_SIOCCHGTUNNEL(r1, 0x89f3, &(0x7f00000005c0)={'syztnl2\x00', &(0x7f0000000540)={'ip6tnl0\x00', r2, 0x29, 0x6, 0x3, 0x7fff, 0x20, @loopback, @mcast1, 0x8000, 0x80, 0xffffffff, 0x80}}) r3 = bpf$PROG_LOAD(0x5, &(0x7f0000000200)={0xc, 0xe, &(0x7f0000001ec0)=ANY=[@ANYBLOB="b702000024000080bfa30000000000000703000000feffff7a0af0fff8bffffd79a4f0ff00000000b7060000ffffffff2d640500000000006502040001001f000404000001007d60b7030000000000006a0a00fefdff00008500000026000000b7000000000000009500000000000000c743a0c8e3ebbadcb74220e5a7efcc9ac1467fb2ea80dbcf8df265e1b40e4c8afd5c0c000000008da68076774bbcdb2c769937000090af27db5b56024db96bcbbbd2cb2000ce03000000000000007e357754508535766c80114604a86fe569b05614eab9297eb290a248a120c9c6e39f403ff065fd3052aae80675eeba68562eaeaea5fecf298ca20f274233106eab63ecf772de7b265040b6c50b7420b48a93fe94c756108afcd0b2eb78040000005f02a5a6474ae549070004000000ed5020e6474ac921fee1f6d8ad6a80d0947cd6d4a561ced21a0b4a902be6af7ec2d1ba002e57f301000000000000000000000000100000aaf25343063e6581f9e6de14ad72e5ad84309f47f96a576cd20cef7ed951a73ea73d7c7f14e306f1f1d1377e57abb19700f0077e9d0000b93eb0f2c6f8141e350dc68147e5958128d22d58625cf9dba211bfff9c3709c9b134625d3d2369f516a49eeeb1a662c8dfb875bdf5c6ba73cccdfacb202994c40d322717faff03323dce8a34ee0ca2cf61efb4b30000642735d6d482ba98d252f36c54333a8b1aa736369392b9067665339820f5f1557b0bf7cc06a5a13c714e0b1a1f000000ff3283076cda3d0b1a2905cfc3d04f1db264b530abcbe44bc405f600807909727fb819afa1907228fa9e83433eedb4ac88d0285594ffb0d14c09d5c77f33702822b02488ea570204c8441ced81cacf945dcb2486d658eec8bcaffbe800a041a378b40dc9e3600e916ae6307bd8325a442095bc9a8b0c95905979f34adddbb26f0d24425c8ab9d937d84b521914f92eed3d3e9de82942a952e86b567aff5bc2e3d1fcc00f618363df5d0d181ee8f4b8fd356c9eb365adc037e443820c05c5db16ff07a9cb471e2ebf91ab00a05f88c1cd55f8c81f5eb1f8d615ca27efb2193bb61665a1ce37f30c2efc9c3b5a4a5d95479fac471ba60fbd0e50225563cd37343d09da72472efc2b2877fbab12a891513e5f0763ae06c0610a2869747c143d7500760600f3ffb2310e19ac58bf29d7f178d09a9f634a3ae492f54649589e3692768a0f3a082c5242c8fa7ff40007ff275df45508ad85950d8e08465fa1067ea8f383b3e7a7ddf5977d46f4bc38f914b4a496426d8468f9ba618b6b2218b50c8fc9efbce3ba799cf70de7e13be871aa7eb402e2b11f440361e18d4e334bfc6ae54e62e67a0338c756c544189e4519a029674e2a2bbbc7f6600000000000800000e5e30b70b198246d3a62660600000030a0af132e680510811d3ab71af5d98e2d3d928a749e8b9402d14655612bd58fb40b4625cb69bf6cea97b447f2d970d99100000000086000001b881afb2cc500003a73562af4878f75b4c98274eeb666aa1f5fcf91990cf0dcfef9540057b8a3fff2bc02c5941626d2015f414546e87835ba18e9101734a9e9c6955fc6b9a25fe2a3dd8bab7f21beccba5493a164c663eceed401737c12c65804712236a9a29a43b1e27e9b6816f2328ea8423121f12b7b35aa721fef26934ccafde573bee5c33ef15309f43cbd5d61aa679a9c402d337ebf57a5eacb569401c1df7b9c45b09743c61d1db37f0000000000020000000061d7d6818db785d8ba13dc577fe61a68eb365de5661f43d4c789bb117a3d208ae44a381b718b3157e218959156ff8e92b7e92bc275d2c9114547351a0d0f2a70d13be0194b6cb68b03000000000000004f153bbc7f52861e4e5df0d19e4e40ac44cfda6f87807e5b5ed7072c04da88afd3d4b79f060e004a0e2f00b9e726ac75d2ac0691314c627e9a8a07bdd607919fd48f01ad6d2f7621d9a75b134f1bc25ed7c33d411a5baa4daa3add16afc502b2b7629541d722e91d631e5ffb9d4beb5aa5a2c4e490a5bd5cf4538ba310b8cbc221af38ea842d4cb908bcd574f794459fd54b58c6a791e6df620047bade4ba41ee014184395a479544619f749ff70088b0fd115077f7eff7c5a3315ca604d110df1c54407f191a78d8362e4dc6e1138391c2a65246779bb76c9f1daea4f085f38810edef6dd047937c231cba791a4e7713c5b3b0a0b6ba37db5016e02d114d714459d065a79609fea4efebad04edac11aac0e53dd094827453144fa419ee81823d00a90a9058ba740d2f41253a8d01a8c1a7265a084e30ad10d412aee8170a7111d62473e7bd8f3d64fb7ebdd32aada331900000000000000000000000084ef49dd02000000bf48ea48e0e1f463d9dcb285038ec38d5f4969ed0e98a71ac7bf8159a234833a5241722b2d24aa2fa4965d4eb7966fb27d118b6ef3308627e67d42f1041d5e92da28e0a7724ce715854775cbe06c5166f1dac0745f1373156a536cb6394c2c4473e2050cacf693fdf8e305080000001a901ecd90a5f53b8327a485557bc2a147b036477915e600000000034258ebbb6099b597d17ee2fc97ca850b8580b1337016a40566814594c13052b9d2b0741326825f19a244609ac04a0c29691a7c8f7a78c1a7590a293c561f304533c638ae635f5ce026f7fa034d8cfe0e11831d4829692beab26891ef583cfcb713a4d3a2d8b958c0875d7e4bdcf98802db086ebcbb9d82fa569a18f06facc2ffe1ea9ae4231e1e7a5dd7503faa2de7f898c97788c4b9c61c70ff92abdf7476cc351156d11c0ada7614f315f4c6cca119d16827d4e864f5a7a9b690272a510c451dc07f391309d02e31e53b2bf0b5f86e776b1bcfe6c85ccd7ddf8a9559d58bb5603895f265685fdd11263c946f8ef3ccec1b0d45a47a89b8237cbbdab14e4ca6dc76b2c41e071b93a065c0f5aa718e1cfab29beea78a6bd9a3114f0fb92be9a5862627b4bd99db2c08e4636e43f05f33535d5d1f9bb40e1fd8e5125a3d29b31dd94a6744bbc21722222b976089f073a4d3fcafc6d06518cf0c4fc6c8e3da0000000000000000000000007d3b60775243f2143d9f54804b11102cf0e4c641db1ba8bf75e46ab3a8fdece6562e7ebb3e407f3c7504dfa3da3aecbd49af3d1edeea11cc970416fadeedc8423bfdc85041ac4d8243a1130e6f4cb5bbfed9d095e18c98c7d690e4c491a7ddcd5635bc61dbed719ca28e8ca3f1fbbe588913ed057f1d6e34a79f4dc10df54d1993a5bc5f9ef6dbd339ee4b0b5764169f305e284ef82cc23e9366d4bc7eb45c7230b13433e5240657cb8eba33260147be8620b6d98cc48b000000000000000000000000c1ce872b18984f080100000000000000bd3fded92547d41809b398f36749083a147eb09ff1ed601bd36b873d3947fb223da647052528e0466cb917db7800f7c7000b593fca1903991cca1343882e3a1f60044f11c081dae4fc5bcf20efacdd2c577f4bcda2eea6f75a31dc90eebb6135b6fb824052181b0ad8a49ebf03ccf61d7e39bf6b0762d24d19796016301d1415b5110ba9df7f204aedb2a2e4e621c0553d312b309db67192f98ef7800000d629c04e216afc8fc66616bbf304e452373aa927c2ad6f5417f1b9bc322b802c1c42112a92a331cdc113b9ace3ff52ede7a853f9a89002ba070bac2f635a03db3375e5564f1a798bf9c0f8c72725d2eca9b0ec7e453d78ea20eca61530fe574299b393ca144adcb06108dfbb934065a87972739150a8752ac111c4d9062ccb95c54034fbdee131d94dfbaab1854d55665746fb7b47d25e54070b0d14c0a29c57bc4930075e1761913b036d43852c6df9f10e15105b2a18668298a3577943514db0dce953dcec62139ff3f16066efec5d8cbc0600000000007289be5883aab951ea67cf2ff691d05c1ea91dd569ed9897fe8d88a0a6977dc8955be17e8026aff11c61fa5cc76196c1423cd597345253baa1537eb6962a3ce1fe5d5ab46938e8fb23fa7047bc59c4345e912585a9adb5fe2ff51b64a326321b594e3f2d339f4090bdae6b30b62064bacbc155d3c930576f506b093ca7c60957bdfdd6536baaa871cf6a603c736b78761e6463b8ac503e219cc3d98f649602ad24d5667368290ee926fba76ee482a201a03efece3b236f4ee2ffcd5d90d92a2f0c5cfa48c87f27c2f1e92988a6508c12f6b7755cc48eb10edafca92cb0260c72295a27a24846d3a2334bd60e94c0fd07e5db0a4964a7fc4e89f11a300510776934e87bb3c21394f46954a012b2a3b0760f1bad1dbd6b466ed7153bd18ee2c0b2353c38df9e0782eb000000000000000000000000001b58cadcc5aaf65e05663985a177aa1d1ea2ad1b8151c7d58f5b92827f550269b3585d98e1394e816a477e52ce2f6de2bd7192f46cf965e774968d151d2bda084b10ec4c8d2c6ab582b1e5e3ed874235ff128c661298ed75879d8a4025ad1c3d9ef6355dc7284c6e648a61da026a777fcc7ae2c60ce64a2f2b0000000000000000000000000000003022110d1230e998429a6fd8f35939a8ae5acc89125539d84b98df6f8ee2ad0b238759bf400ac14c591aefe9660076a494f73b0ea8f3cb4a9c2e4f745a2afb593fabb9481600b2f44e64dcb0d0d57d5aeae626d2700608bb283800000000008a4c26b16213f0d9d7c3c57413b1e5895c9c12259519274ca8fd3bce804c8176a297f28add10956f3aaa3db687abcc17d326fd3674b7680206e875332b82c1de5ff793f6971d98c787c6daef28f66b542f08eeb6c82fbe03a3dc625bddf98d2a200c94065db5d5414361a785ff39392d9b1c870d8a2287af0ee98231100efa30652f2dd84da00970b5d209c623b26770258fcf63690f17cce7a78aeba7f6cbc4c143f48b1d0a10afdc93eaaff72e6622fd4da72ca7b30cd30b568599a6b44a2dee51985d802ed8088391a6717c4d97"], &(0x7f0000000340)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0x0, 0x10, &(0x7f0000000000), 0xfe37}, 0x48) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f00000003c0)={r3, 0x18000000000002a0, 0xe, 0x0, &(0x7f0000000040)="b907ef19edfff007049e0ff0888e", 0x0, 0x6000, 0x18000000, 0x0, 0x0, 0x0, 0x0}, 0x50) 45.88378582s ago: executing program 0 (id=6232): socket$inet6(0x10, 0x3, 0x0) r0 = bpf$PROG_LOAD(0x5, &(0x7f00000005c0)={0x6, 0x3, &(0x7f0000000480)=ANY=[@ANYBLOB="1800000002000000000000000000000095"], &(0x7f0000000500)='GPL\x00', 0x0, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, @xdp, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r1 = socket$nl_route(0x10, 0x3, 0x0) r2 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000000c0)='memory.events\x00', 0x275a, 0x0) mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x1, 0x12, r2, 0x0) r3 = socket$igmp(0x2, 0x3, 0x2) setsockopt$MRT_TABLE(r3, 0x0, 0xcf, &(0x7f0000000040)=0xfe, 0x4) r4 = syz_init_net_socket$nl_rdma(0x10, 0x3, 0x10) sendmsg$RDMA_NLDEV_CMD_RES_PD_GET(r4, &(0x7f00000002c0)={&(0x7f0000000100)={0x10, 0x0, 0x0, 0x40000000}, 0xc, &(0x7f0000000240)={&(0x7f0000000200)={0x18, 0x140e, 0x400, 0x70bd29, 0x25dfdbfc, "", [@RDMA_NLDEV_ATTR_PORT_INDEX={0x8, 0x3, 0x2}]}, 0x18}, 0x1, 0x0, 0x0, 0x811}, 0x4048841) r5 = socket$inet6_udp(0xa, 0x2, 0x0) ioctl$sock_SIOCGIFINDEX(r5, 0x8933, &(0x7f0000000c80)={'lo\x00', 0x0}) sendmsg$nl_route_sched(r1, &(0x7f0000001200)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000016c0)=@newqdisc={0x45c, 0x24, 0x4ee4e6a52ff56541, 0x0, 0x0, {0x0, 0x0, 0x0, r6, {}, {0xffff, 0xffff}}, [@qdisc_kind_options=@q_tbf={{0x8}, {0x430, 0x2, [@TCA_TBF_PARMS={0x28}, @TCA_TBF_PTAB={0x404, 0x3, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xd, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4d9]}]}}]}, 0x45c}}, 0x0) bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000280)={&(0x7f0000000080)=ANY=[@ANYBLOB="9feb010018000000000000003000000030000000050000000000000001000004080000000000000003000000100000000000000000000002000000000300000000000011"], 0x0, 0x4d}, 0x20) r7 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX(r7, 0x8933, &(0x7f0000000080)={'veth0_to_hsr\x00', 0x0}) r9 = bpf$BPF_LINK_CREATE_XDP(0x1c, &(0x7f00000001c0)={r0, r8, 0x25, 0x0, @void}, 0x10) r10 = bpf$PROG_LOAD(0x5, &(0x7f00000003c0)={0x6, 0x3, &(0x7f0000000480)=ANY=[], &(0x7f00000000c0)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x4, '\x00', 0x0, @xdp, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r11 = openat$tun(0xffffffffffffff9c, &(0x7f0000000200), 0x0, 0x0) ioctl$TUNSETIFF(r11, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x2}) r12 = openat$tun(0xffffffffffffff9c, &(0x7f0000000400), 0x6484c2, 0x0) close(r12) socket$nl_generic(0x10, 0x3, 0x10) ioctl$SIOCSIFHWADDR(r12, 0x8914, &(0x7f0000002280)={'syzkaller0\x00', @multicast}) r13 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r13, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r13, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000580)={&(0x7f0000000340)=@newqdisc={0x4c, 0x24, 0x4ee4e6a52ff56541, 0x70bd25, 0x25dfdbfd, {0x0, 0x0, 0x0, r14, {0x0, 0xb}, {0xffff, 0xffff}, {0xfff2}}, [@qdisc_kind_options=@q_netem={{0xa}, {0x1c, 0x2, {{0x3, 0x3, 0x4361, 0x7, 0xffffffff, 0x3}}}}]}, 0x4c}, 0x1, 0x0, 0x0, 0x8000}, 0x0) sendmsg$nl_route_sched(r13, &(0x7f00000003c0)={0x0, 0x0, &(0x7f0000000300)={&(0x7f00000005c0)=@newqdisc={0x3c, 0x24, 0x4ee4e6a52ff56541, 0x70b926, 0x25dfdbfc, {0x0, 0x0, 0x0, r14, {0x0, 0xd}, {0x6, 0xb}, {0xffff, 0x2}}, [@qdisc_kind_options=@q_cake={{0x9}, {0xc, 0x2, [@TCA_CAKE_ACK_FILTER={0x8, 0x10, 0x2}]}}]}, 0x3c}, 0x1, 0x0, 0x0, 0x240040e0}, 0x4890) r15 = socket$packet(0x11, 0x3, 0x300) sendto$packet(r15, &(0x7f0000000240)="800000800000210ee7decd7a0003", 0xe, 0x40, &(0x7f00000001c0)={0x11, 0x8100, r14, 0x1, 0xd8, 0x6, @broadcast}, 0x14) bpf$BPF_LINK_UPDATE(0x1d, &(0x7f0000000000)={r9, r10, 0x4, r10}, 0x5) 45.640240757s ago: executing program 3 (id=6233): syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r0 = socket$inet_tcp(0x2, 0x1, 0x0) socket$l2tp(0x2, 0x2, 0x73) (async) r1 = socket$l2tp(0x2, 0x2, 0x73) setsockopt$IPT_SO_SET_REPLACE(r1, 0x0, 0x40, &(0x7f0000000100)=@mangle={'mangle\x00', 0x44, 0x6, 0x3f8, 0x2c8, 0x98, 0x168, 0x98, 0x98, 0x360, 0x360, 0x360, 0x360, 0x360, 0x6, 0x0, {[{{@ip={@multicast1, @dev={0xac, 0x14, 0x14, 0x13}, 0xff, 0xff000000, 'pim6reg1\x00', 'veth1_vlan\x00', {}, {0xff}, 0x5c, 0x3}, 0x0, 0x70, 0x98}, @TTL={0x28, 'TTL\x00', 0x0, {0x81, 0x9}}}, {{@ip={@private=0xa010100, @local, 0xff000000, 0x0, 'vcan0\x00', 'pim6reg1\x00', {}, {0xff}, 0x6}, 0x0, 0x70, 0xd0}, @common=@SET={0x60, 'SET\x00', 0x0, {{0x0, [0x0, 0x6, 0x3]}, {0x0, [0x5, 0x0, 0x0, 0x2, 0x4, 0x4]}}}}, {{@uncond, 0x0, 0xa0, 0xc8, 0x0, {}, [@common=@ah={{0x30}, {[0x8, 0x3], 0x1}}]}, @inet=@TOS={0x28, 'TOS\x00', 0x0, {0x0, 0x3}}}, {{@ip={@private=0xa010102, @multicast1, 0x0, 0xffffff00, 'syzkaller0\x00', 'bond0\x00'}, 0x0, 0x70, 0x98}, @unspec=@CHECKSUM={0x28}}, {{@uncond, 0x0, 0x70, 0x98}, @ECN={0x28, 'ECN\x00', 0x0, {0x0, 0xfc}}}], {{'\x00', 0x0, 0x70, 0x98}, {0x28}}}}, 0x458) bind$inet(r0, &(0x7f0000000200)={0x2, 0x4e20, @multicast2}, 0x10) setsockopt$inet_tcp_TCP_MD5SIG(r0, 0x6, 0xe, &(0x7f0000000280)={@in={{0x2, 0x4e21, @remote}}, 0x0, 0x0, 0x23, 0x0, "e83ae75240c2d6d8ec87bb53fab0910000000000000007a5922406b64cddaeb9d339ba3c35dc0a08df8e61740b7cf2d4e499d58654a4cf0fa0ce1f830c3079cffcfd00"}, 0xd8) setsockopt$inet_tcp_TCP_CONGESTION(r0, 0x6, 0xd, &(0x7f0000000080)='bbr', 0x3) (async) setsockopt$inet_tcp_TCP_CONGESTION(r0, 0x6, 0xd, &(0x7f0000000080)='bbr', 0x3) connect$inet(r0, &(0x7f00000001c0)={0x2, 0x4e20, @loopback}, 0x10) 45.576822241s ago: executing program 4 (id=6234): r0 = socket$inet6_udp(0xa, 0x2, 0x0) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000040)={'lo\x00'}) (async) r1 = socket$key(0xf, 0x3, 0x2) sendmsg$key(r1, &(0x7f0000000040)={0x3, 0x0, &(0x7f0000000340)={&(0x7f0000000540)={0x2, 0x4, 0x0, 0x5, 0xe, 0x0, 0x0, 0x2000000, [@sadb_address={0x5, 0x6, 0x0, 0x0, 0x0, @in6={0xa, 0x0, 0x0, @private2}}, @sadb_sa={0x2, 0x1, 0x0, 0x0, 0x0, 0x2}, @sadb_address={0x5, 0x5, 0x0, 0x0, 0x0, @in6={0xa, 0x4e22, 0x0, @remote, 0x5}}]}, 0x70}, 0x1, 0x7}, 0x0) (async) r2 = bpf$PROG_LOAD(0x5, &(0x7f0000000200)={0x4, 0xe, &(0x7f00000014c0)=ANY=[@ANYBLOB="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"], &(0x7f0000000340)='syzkaller\x00'}, 0x48) (async) setsockopt$IP6T_SO_SET_REPLACE(r0, 0x29, 0x40, &(0x7f0000000840)=@raw={'raw\x00', 0x9, 0x3, 0x2f0, 0xf0, 0xffffffff, 0xffffffff, 0xf0, 0xffffffff, 0x220, 0xffffffff, 0xffffffff, 0x220, 0xffffffff, 0x3, &(0x7f0000000000), {[{{@uncond, 0x0, 0xd0, 0xf0, 0x0, {}, [@inet=@rpfilter={{0x28}, {0x6}}]}, @unspec=@TRACE={0x20}}, {{@ipv6={@mcast2, @private2, [0xff, 0xffffffff, 0xff], [0xffffff00, 0xff000000, 0xffffff00, 0xff], 'vcan0\x00', 'macvlan1\x00', {}, {}, 0x2c, 0x4, 0x1, 0x48}, 0x0, 0xf8, 0x130, 0x0, {}, [@inet=@rpfilter={{0x28}, {0xe}}, @common=@eui64={{0x28}}]}, @common=@inet=@SET3={0x38, 'SET\x00', 0x3, {{0x1, 0x2, 0x2}, {0x3, 0x6, 0x4}, {0xffffffffffffffff, 0x6, 0x2}, 0x0, 0x5}}}], {{'\x00', 0x0, 0xa8, 0xd0}, {0x28}}}}, 0x350) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000280)={r2, 0xfeffff, 0xe80, 0x3f000002, &(0x7f0000000700)="c45c57ce395de5b289f07d637a223920f181c2e57d71483cfb2d075a3ff07258e080a194805cdb0c26d3f7ffb1e0d9cf4fa36dcb2168b72de48ac8f93e6804f1c4d70898d0810e044d7e1778eaac5dfdcc9f1208905522025bcfdf1b6f969b094d5c022c2b7ffefde71e0627b9a2069cc1e0175c4b8860aad4b0a103c589f676b6c4e85eb3950c533b6e62c39ccf9ae9bfe54ee5887358d44f46337fbe090d7c7e55847edee8130ffd3d1e719e01a68b0e691c0d35b0b56e0b514036342fd56f08ac0083f3c2fe41a1295a3d23cf3d160d4fd90f66beba68860456ed41272e1e68d16c2564c85f5556e18784113c493d13253e14d6eb891707fba3c30d07d5ee8619e4426cafec4cf6a3723c455d09b586b248", 0x0, 0xf0, 0x0, 0xf0, 0xffffff0c}, 0x40) 45.576341136s ago: executing program 2 (id=6235): bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000007c0)={0x7, 0x4, &(0x7f0000000000)=ANY=[@ANYBLOB="1800000000fcff7279877c4a5f02f0710c9fcb3233ff0000000003f0ffff9b100100000000009500000000000000"], &(0x7f00000005c0)='syzkaller\x00', 0x2}, 0x94) 44.38199983s ago: executing program 2 (id=6236): r0 = bpf$PROG_LOAD(0x5, &(0x7f0000000080)={0x3, 0x8, &(0x7f0000005580)=ANY=[@ANYBLOB="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"], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @sched_cls}, 0x48) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000019800)={0xffffffffffffffff, 0xffffffffffffffff}) sendmsg$inet(r2, &(0x7f0000001b00)={0x0, 0x0, 0x0, 0x0, &(0x7f0000001d80)=ANY=[@ANYBLOB="28010000000000000100000001"], 0x128}, 0x0) recvmsg$unix(r1, &(0x7f0000000000)={0x0, 0x0, 0x0, 0x0, &(0x7f0000000080), 0x100}, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000100)={0xffffffffffffffff, 0xffffffffffffffff}) sendmsg$inet(r4, &(0x7f0000001b00)={0x0, 0x0, 0x0, 0x0, &(0x7f0000001d80)=ANY=[], 0x128}, 0x0) recvmsg$unix(r3, &(0x7f0000000000)={0x0, 0x0, 0x0, 0x0, &(0x7f0000000080), 0x100}, 0x0) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) sendmsg$inet(r6, &(0x7f0000001b00)={0x0, 0x0, 0x0, 0x0, &(0x7f0000001d80)=ANY=[], 0x128}, 0x0) recvmsg$unix(r5, &(0x7f0000000000)={0x0, 0x0, 0x0, 0x0, &(0x7f0000000900), 0x100}, 0x0) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) sendmsg$inet(r8, &(0x7f0000001b00)={0x0, 0x0, 0x0, 0x0, &(0x7f0000001d80)=ANY=[], 0x128}, 0x0) recvmsg(r7, &(0x7f00000005c0)={0x0, 0x0, 0x0, 0x0, &(0x7f0000001dc0)=""/4096, 0x1000}, 0x0) bpf$BPF_PROG_DETACH(0x1c, &(0x7f0000000000)={@cgroup=r0, r0, 0x2f, 0x558}, 0x20) bpf$PROG_LOAD(0x5, &(0x7f00000054c0)={0xe, 0x16, &(0x7f0000000500)=ANY=[@ANYBLOB="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"], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @sk_skb, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0xffffffffffffffd2}, 0x48) 43.991415827s ago: executing program 0 (id=6237): r0 = openat$rfkill(0xffffffffffffff9c, &(0x7f0000000040), 0x30000, 0x0) mmap(&(0x7f0000fff000/0x1000)=nil, 0x1000, 0xb, 0x4000010, r0, 0x15739000) r1 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r1, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000140)={&(0x7f00000001c0)=@newlink={0x40, 0x10, 0x403, 0x0, 0x0, {0x0, 0x0, 0x74}, [@IFLA_LINKINFO={0x20, 0x12, 0x0, 0x1, @gtp={{0x8}, {0x14, 0x2, 0x0, 0x1, [@IFLA_GTP_ROLE={0x8, 0x4, 0xe63}, @IFLA_GTP_PDP_HASHSIZE={0x8}]}}}]}, 0x40}}, 0x0) ioctl$F2FS_IOC_GET_COMPRESS_OPTION(0xffffffffffffffff, 0x8002f515, &(0x7f0000000000)) 43.883360087s ago: executing program 3 (id=6238): r0 = socket(0x28, 0x5, 0x0) bind$vsock_stream(r0, &(0x7f0000000040), 0x10) r1 = socket$inet6_sctp(0xa, 0x801, 0x84) sendmmsg$inet6(r1, &(0x7f0000000940)=[{{&(0x7f0000000140)={0xa, 0x4e20, 0x9, @remote, 0x5}, 0x1c, &(0x7f0000000100)=[{&(0x7f0000000300)="e2", 0x1}], 0x1}}], 0x1, 0x14) shutdown(r1, 0x1) getsockopt$bt_hci(r1, 0x84, 0x85, &(0x7f0000002380)=""/4107, &(0x7f00000000c0)=0x1012) setsockopt$inet6_group_source_req(0xffffffffffffffff, 0x29, 0x2e, &(0x7f0000000080)={0x0, {{0xa, 0x4, 0x0, @mcast1={0xff, 0x7}, 0x8a4}}, {{0xa, 0x4e20, 0xfe, @remote}}}, 0x108) socket$nl_generic(0x10, 0x3, 0x10) (async) r2 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$NL80211_CMD_REGISTER_FRAME(r2, &(0x7f00000005c0)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000080)=ANY=[@ANYBLOB='$\x00\x00\x00', @ANYRES16, @ANYBLOB="010000000000000000003a00000008000300", @ANYRES32, @ANYBLOB="05005b"], 0x24}}, 0x0) (async) sendmsg$NL80211_CMD_REGISTER_FRAME(r2, &(0x7f00000005c0)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000080)=ANY=[@ANYBLOB='$\x00\x00\x00', @ANYRES16, @ANYBLOB="010000000000000000003a00000008000300", @ANYRES32, @ANYBLOB="05005b"], 0x24}}, 0x0) listen(r0, 0x0) (async) listen(r0, 0x0) bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000380)={&(0x7f00000001c0)=ANY=[], &(0x7f00000002c0)=""/185, 0x32, 0xb9, 0x1}, 0x1f) bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000200)=ANY=[@ANYBLOB="02000000040000000800000001"], 0x50) (async) r3 = bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000200)=ANY=[@ANYBLOB="02000000040000000800000001"], 0x50) write$cgroup_subtree(0xffffffffffffffff, &(0x7f00000001c0)={[{0x2b, 'net_cls'}, {0x2b, 'io'}, {0x2d, 'rdma'}, {0x2d, 'devices'}, {0x2d, 'cpuacct'}]}, 0x25) bpf$MAP_CREATE(0x0, &(0x7f0000000200)=ANY=[@ANYBLOB="220000000400000010"], 0x48) (async) bpf$MAP_CREATE(0x0, &(0x7f0000000200)=ANY=[@ANYBLOB="220000000400000010"], 0x48) r4 = bpf$MAP_CREATE(0x0, &(0x7f0000000200)=ANY=[], 0x48) bpf$BPF_MAP_CONST_STR_FREEZE(0x16, &(0x7f00000000c0)={r4}, 0x4) bpf$PROG_LOAD(0x5, &(0x7f0000000340)={0x7, 0x1c, &(0x7f0000000400)=ANY=[@ANYBLOB="18080000cbb60000000000000000000018110000", @ANYRES32=r4, @ANYBLOB="0000000000000000b702000014000000b7030000000000008500000008000000bf0920000000000035090100000000009500000000000000b7080000000000007b8af8ff00000000b7080000020000007b8af0ff00000000bfa100000000000007010000f8ffffffbfa400000000000007040000f0ffffffb70200000800000018230000", @ANYRES32=r3, @ANYBLOB="0000000001000000b7050000080000001c00000000000000bf9800000000000056080000000000008500000005000000b70000000200000095"], &(0x7f0000000000)='GPL\x00', 0x5, 0x0, 0x0, 0x40f00, 0x8, '\x00', 0x0, @fallback=0xc, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x80000000}, 0x94) r5 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r6 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r7 = syz_genetlink_get_family_id$ieee802154(&(0x7f00000001c0), r6) sendmsg$IEEE802154_SCAN_REQ(r5, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000140)={&(0x7f00000000c0)={0x24, r7, 0x101, 0x70bd28, 0x25dfdbfc, {}, [@IEEE802154_ATTR_CHANNELS={0x8, 0x14, 0x1a}, @IEEE802154_ATTR_SCAN_TYPE={0x5, 0x13, 0x47}]}, 0x24}, 0x1, 0x0, 0x0, 0x48890}, 0x20000070) (async) sendmsg$IEEE802154_SCAN_REQ(r5, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000140)={&(0x7f00000000c0)={0x24, r7, 0x101, 0x70bd28, 0x25dfdbfc, {}, [@IEEE802154_ATTR_CHANNELS={0x8, 0x14, 0x1a}, @IEEE802154_ATTR_SCAN_TYPE={0x5, 0x13, 0x47}]}, 0x24}, 0x1, 0x0, 0x0, 0x48890}, 0x20000070) r8 = socket(0x28, 0x5, 0x0) connect$vsock_stream(r8, &(0x7f0000000080), 0x10) sendmmsg(r8, &(0x7f0000000100)=[{{0x0, 0x0, &(0x7f0000000200)=[{&(0x7f0000000000)="1b", 0x40000}], 0x1}}], 0x1, 0x24008094) (async) sendmmsg(r8, &(0x7f0000000100)=[{{0x0, 0x0, &(0x7f0000000200)=[{&(0x7f0000000000)="1b", 0x40000}], 0x1}}], 0x1, 0x24008094) r9 = epoll_create(0x7) epoll_ctl$EPOLL_CTL_ADD(r9, 0x1, r8, &(0x7f00000000c0)={0x20000000}) (async) epoll_ctl$EPOLL_CTL_ADD(r9, 0x1, r8, &(0x7f00000000c0)={0x20000000}) 43.697917449s ago: executing program 4 (id=6239): connect$pppoe(0xffffffffffffffff, &(0x7f0000000300)={0x18, 0x0, {0x4, @empty, 'erspan0\x00'}}, 0x1e) r0 = socket$nl_crypto(0x10, 0x3, 0x15) sendmsg$nl_crypto(0xffffffffffffffff, &(0x7f00000003c0)={0x0, 0x0, &(0x7f0000000380)={&(0x7f0000000280)=ANY=[@ANYBLOB="e000000015000000000000000000000061656769733132382d67656e65726963"], 0xe0}}, 0x0) sendmsg$nl_crypto(r0, &(0x7f0000000200)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000240)=ANY=[@ANYBLOB="e8000000100001"], 0xe8}}, 0x0) r1 = syz_init_net_socket$bt_l2cap(0x1f, 0x1, 0x3) bind$bt_l2cap(r1, &(0x7f0000000040)={0x1f, 0x0, @fixed}, 0xe) listen(r1, 0x0) close(0x4) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x3, 0x6, &(0x7f0000000200)=ANY=[@ANYBLOB="b700000000000000bf160000000000007961a80000000000150101000000000085000000560000009500000000000000"], &(0x7f0000000180)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @sched_cls, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0xa0) 42.914750039s ago: executing program 0 (id=6240): r0 = socket$nl_generic(0x10, 0x3, 0x10) (async) r1 = syz_genetlink_get_family_id$ipvs(&(0x7f0000000040), 0xffffffffffffffff) sendmsg$IPVS_CMD_SET_DEST(r0, &(0x7f0000000180)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x80000000}, 0xc, &(0x7f0000000140)={&(0x7f0000000080)={0xb0, r1, 0x800, 0x70bd29, 0x25dfdbfb, {}, [@IPVS_CMD_ATTR_DAEMON={0x2c, 0x3, 0x0, 0x1, [@IPVS_DAEMON_ATTR_STATE={0x8, 0x1, 0x2}, @IPVS_DAEMON_ATTR_SYNC_ID={0x8, 0x3, 0x4}, @IPVS_DAEMON_ATTR_SYNC_ID={0x8, 0x3, 0x4}, @IPVS_DAEMON_ATTR_MCAST_PORT={0x6, 0x7, 0x4e22}, @IPVS_DAEMON_ATTR_MCAST_TTL={0x5, 0x8, 0x8}]}, @IPVS_CMD_ATTR_TIMEOUT_TCP={0x8, 0x4, 0x401}, @IPVS_CMD_ATTR_TIMEOUT_UDP={0x8, 0x6, 0xa55}, @IPVS_CMD_ATTR_TIMEOUT_TCP_FIN={0x8, 0x5, 0x7}, @IPVS_CMD_ATTR_DEST={0x44, 0x2, 0x0, 0x1, [@IPVS_DEST_ATTR_ACTIVE_CONNS={0x8, 0x7, 0x1}, @IPVS_DEST_ATTR_TUN_TYPE={0x5, 0xd, 0x1}, @IPVS_DEST_ATTR_ADDR_FAMILY={0x6, 0xb, 0x2}, @IPVS_DEST_ATTR_TUN_FLAGS={0x6, 0xf, 0x8}, @IPVS_DEST_ATTR_U_THRESH={0x8, 0x5, 0xfffffffc}, @IPVS_DEST_ATTR_PORT={0x6, 0x2, 0x4e22}, @IPVS_DEST_ATTR_U_THRESH={0x8, 0x5, 0xde7}, @IPVS_DEST_ATTR_TUN_TYPE={0x5}]}, @IPVS_CMD_ATTR_TIMEOUT_TCP_FIN={0x8, 0x5, 0x1}, @IPVS_CMD_ATTR_DAEMON={0xc, 0x3, 0x0, 0x1, [@IPVS_DAEMON_ATTR_MCAST_GROUP={0x8, 0x5, @loopback}]}]}, 0xb0}, 0x1, 0x0, 0x0, 0x4080}, 0x8001) (async) r2 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$XFS_IOC_ATTRMULTI_BY_HANDLE(r0, 0x4048587b, &(0x7f0000001980)={{r2, &(0x7f00000001c0)='@]\x00', 0x8040, &(0x7f0000000200)={@align=0x1, {0x8000, 0xe, 0x1, 0x5e}}, 0x10, &(0x7f0000000240)={@_ha_fsid}, &(0x7f0000000280)=0xb}, 0x7, &(0x7f0000001880)=[{0x1, 0xfffffff9, &(0x7f00000002c0)=':g\x00', &(0x7f0000000300)="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", 0x1000, 0x20}, {0x3, 0x1, &(0x7f0000001300)='IPVS\x00', &(0x7f0000001340)="b181ecfad0cd7d4b7934d8d9714bfebe72c04f8112e07d61f9ab058186b336f24dccd5fa5f67d52b090f37b525de4657d4524f71f719b639e7e522cb580cf6377bac863d3155c3167c966803ddc427a3d40b3ec05203e6fb21021aa8c8971230d348a6e5421ec84573c41f57942ddb83928fc79ec36e8394b49eedb6eaf551a8862ce1b757ee200ac3a40346605d1cef", 0x90, 0x20}, {0x3, 0x8, &(0x7f0000001400)='IPVS\x00', &(0x7f0000001440)="03ed0033dfdd187e682acc5c74fd6a9811d033eefcf42249cc15dcee8cf67aa98739bd318180a7c876170ccf27acc40198cb7cf90e590cbbeba28d97aa6cbcb42148b28da181961bcb587cda8cee88744ecddc388665dab70d0def6a38a98c", 0x5f, 0x12}, {0x1, 0x7ff, &(0x7f00000014c0)='IPVS\x00', &(0x7f0000001500)="a9ed79a6c930cb72d17ba3bf85b217c36f9eb9b77dadcb82b077ff5a724374e8bd768c2ece6b59fd41b1aa506941c38464829fcc5bef0cf67f707e2fe9c9a26f1a23360cb0d3bca0fe1cf62c9b1481248bccf2fbb3e775223f31dbc208e1ab499e0d14e8348a599c2f06d95ed0a2526f9584df3cf8cabd2771", 0x79, 0x8}, {0x1, 0x6, &(0x7f0000001580)='@}*\x00', &(0x7f00000015c0)="60f21d57700bfaee7207cb19b960f83847a228c1e7ae70cc732140a8ace087e87df37d7a845e9fadef0a931bfb051d1cc3c089a259ec29857f0f821b6d5dc441ba29c5903b661fb83cde9f4f5a49b2d386e3384adc4ed3a8e9d58cccab325237ff606d9ee035a959812839dc697fa29b9ac22a686e7c0b0605267c1d0e29de67e50f394e2e713370079f11933d1b0431b286a5f4fb76bdcc3393f5fa9ef3ed287a70da84f5e89c9e3616bee3", 0xac, 0x3a}, {0x2, 0x400, &(0x7f0000001680)='][-\x00', &(0x7f00000016c0)="14206c9ba2f40f0a37a40264c6180a32184838b1b44c25b0bce914bb9f85fcb0b1d4ef7f86098b139c8501a48ff608439c6a6a35749f43cf5063387eb48dfb504c8ec2b695ca9564b3882244033e5e81602ddea71a0b66da89327d3f0eb1a5b42f3fb69e1d7f62d34ceea794025cda29b85eed9a9ad688919d2e2730294c3652a739d3c198275f8fc212dab2f4638791d96a55339521", 0x96, 0x38}, {0x1, 0xd7a7, &(0x7f0000001780)='IPVS\x00', &(0x7f00000017c0)="8e04ec4a4a28f39bea2f3251bd2f9dae86af995841561cb875c86813137cbaf140cea03dce846d5e882909060e7e9abcb6c201e0daa3a1bf08c7039bc998e0be0b0a5d0e990cb643cc00f0ff5dcbc10bfcdde327d1c27b6334e5b30e17814bf69dacbb5180a714bcb369853ace6fc65320ef13b692b95ed03c841d9abb921cc5c0f6362770532b4472a26a5a7796ddfc952dcfca7eff20bd4fb7281d620f00d4d0c2638657043097b1", 0xa9}]}) setsockopt$inet_tcp_TCP_MD5SIG(r3, 0x6, 0xe, &(0x7f0000001a00)={@in6={{0xa, 0x4e21, 0x80, @dev={0xfe, 0x80, '\x00', 0x37}, 0x7fffffff}}, 0x0, 0x0, 0x1a, 0x0, "229160a632ebd4c1616430fab2191202141c0ac75284a0918f3e26f030e6ac7e4bb571e6efbce788d3451444cd16c21570fd1b3c8307013928e2357cee48dd5f36fc1eafd7d4350b81246618733a535a"}, 0xd8) (async) ioctl$sock_SIOCSIFVLAN_GET_VLAN_INGRESS_PRIORITY_CMD(r0, 0x8983, &(0x7f0000001b00)) (async) sendmsg$GTP_CMD_ECHOREQ(r0, &(0x7f0000001c00)={&(0x7f0000001b40)={0x10, 0x0, 0x0, 0x40050}, 0xc, &(0x7f0000001bc0)={&(0x7f0000001b80)={0x3c, 0x0, 0x20, 0x70bd2c, 0x25dfdbfd, {}, [@GTPA_MS_ADDR6={0x14, 0xc, @private1={0xfc, 0x1, '\x00', 0x1}}, @GTPA_MS_ADDR6={0x14, 0xc, @dev={0xfe, 0x80, '\x00', 0x32}}]}, 0x3c}, 0x1, 0x0, 0x0, 0x24000000}, 0x20000190) (async) recvmsg(r0, &(0x7f0000001d40)={0x0, 0x0, &(0x7f0000001d00)=[{&(0x7f0000001c40)=""/170, 0xaa}], 0x1}, 0x10100) ioctl$BTRFS_IOC_START_SYNC(r2, 0x80089418, &(0x7f0000001d80)=0x0) (async) ioctl$BTRFS_IOC_GET_SUBVOL_INFO(r3, 0x81f8943c, &(0x7f0000001dc0)={0x0, ""/256, 0x0, 0x0, 0x0, 0x0, ""/16, ""/16, ""/16, 0x0, 0x0, 0x0, 0x0}) ioctl$BTRFS_IOC_SET_RECEIVED_SUBVOL(r0, 0xc0c89425, &(0x7f0000001fc0)={"afab07c11aac6c43acb5dc8488f56bdc", r4, r5, {0x80000000, 0x5}, {0x4, 0x2}, 0xab, [0x1a0, 0x8000, 0x5, 0x8001, 0x8000, 0x9, 0x8441, 0x9, 0x10001, 0x6, 0x6, 0x558a675, 0xfffffffffffffffd, 0x553, 0xffffffff, 0x400]}) (async) r6 = syz_genetlink_get_family_id$gtp(&(0x7f0000002100), r0) sendmsg$GTP_CMD_DELPDP(r3, &(0x7f0000002200)={&(0x7f00000020c0), 0xc, &(0x7f00000021c0)={&(0x7f0000002140)={0x4c, r6, 0x100, 0x70bd26, 0x25dfdbfb, {}, [@GTPA_O_TEI={0x8, 0x9, 0x4}, @GTPA_FLOW={0x6, 0x6, 0x3}, @GTPA_VERSION={0x8, 0x2, 0x1}, @GTPA_MS_ADDRESS={0x8, 0x5, @private=0xa010102}, @GTPA_PEER_ADDRESS={0x8, 0x4, @empty}, @GTPA_FAMILY={0x5, 0xd, 0x2}, @GTPA_NET_NS_FD={0x8, 0x7, r3}]}, 0x4c}, 0x1, 0x0, 0x0, 0x10}, 0x64800) (async) setsockopt$CAN_RAW_FD_FRAMES(r3, 0x65, 0x5, &(0x7f0000002240), 0x4) (async) ioctl$ifreq_SIOCGIFINDEX_wireguard(r0, 0x8933, &(0x7f0000002300)={'wg2\x00', 0x0}) (async) bpf$BPF_GET_PROG_INFO(0xf, &(0x7f00000026c0)={r3, 0xe0, &(0x7f00000025c0)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7, &(0x7f00000023c0)=[0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0], ""/16, 0x0, 0x0, 0x0, 0x0, 0x2, 0x1, &(0x7f0000002400)=[0x0, 0x0], &(0x7f0000002440)=[0x0], 0x0, 0xd5, &(0x7f0000002480)=[{}, {}, {}, {}, {}, {}, {}, {}, {}, {}], 0x50, 0x10, &(0x7f0000002500), &(0x7f0000002540), 0x8, 0xd, 0x8, 0x8, &(0x7f0000002580)}}, 0x10) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000002780)={{r3, 0xffffffffffffffff}, &(0x7f0000002700), &(0x7f0000002740)=r3}, 0x20) (async) bpf$BPF_MAP_CONST_STR_FREEZE(0x16, &(0x7f00000027c0)={r3, 0xffffffffffffffff}, 0x4) bpf$PROG_LOAD(0x5, &(0x7f00000028c0)={0x7, 0x1, &(0x7f0000002280)=@raw=[@jmp={0x5, 0x0, 0xb, 0xa, 0x1, 0x100, 0xb}], &(0x7f00000022c0)='syzkaller\x00', 0x400, 0x0, 0x0, 0x41000, 0x10, '\x00', r7, @fallback=0x9, r3, 0x8, &(0x7f0000002340)={0x4, 0x1}, 0x8, 0x10, &(0x7f0000002380)={0x4, 0xe, 0xc9b, 0x5}, 0x10, r9, r3, 0x5, &(0x7f0000002800)=[r3, 0xffffffffffffffff, r3, r10, r11, 0x1, r3, r3], &(0x7f0000002840)=[{0x4, 0x4, 0xe, 0x5}, {0x5, 0x4, 0x0, 0x6}, {0x5, 0x4, 0x4, 0x6}, {0x4, 0x1, 0xa, 0xb}, {0x5, 0x3, 0x4, 0x1}], 0x10, 0x5}, 0x94) (async) r12 = syz_genetlink_get_family_id$nl80211(&(0x7f00000029c0), r3) sendmsg$NL80211_CMD_SET_MESH_CONFIG(r0, &(0x7f0000002a80)={&(0x7f0000002980)={0x10, 0x0, 0x0, 0x400}, 0xc, &(0x7f0000002a40)={&(0x7f0000002a00)={0x30, r12, 0x400, 0x70bd2b, 0x25dfdbfe, {{}, {@void, @val={0xc, 0x99, {0x9, 0x28}}}}, [@NL80211_ATTR_IFINDEX={0x8}, @NL80211_ATTR_IFINDEX={0x8}]}, 0x30}, 0x1, 0x0, 0x0, 0x40c0}, 0x800) (async) ioctl$sock_SIOCGIFINDEX_80211(r3, 0x8933, &(0x7f0000002ac0)={'wlan0\x00'}) write(r0, &(0x7f0000002b00)="2243a57606dede462045495d149d805a7af0de7d040e6ebb7ff44fd997aaf2468935752e48c0d5ece0618a53c4315ca802a99685a955b7c86305c6625c62bc1856196bc77282c2de930238f5e1acaa64fef3ed62e954535853d14ce22adb4d0d0ddac42db44fa1a192a2544e4e1edf1905cc74505958", 0x76) getsockopt$packet_buf(r3, 0x107, 0x6, &(0x7f0000002b80)=""/96, &(0x7f0000002c00)=0x60) (async) bpf$BPF_PROG_GET_FD_BY_ID(0xd, &(0x7f0000002c40)={r8}, 0x4) sendmsg$NL80211_CMD_GET_STATION(r2, &(0x7f0000002d80)={&(0x7f0000002c80)={0x10, 0x0, 0x0, 0x10}, 0xc, &(0x7f0000002d40)={&(0x7f0000002cc0)={0x50, r12, 0x100, 0x70bd28, 0x25dfdbfe, {{}, {@void, @void}}, [@NL80211_ATTR_STA_PLINK_ACTION={0x5, 0x19, 0x1}, @NL80211_ATTR_STA_FLAGS={0x8, 0x11, 0x0, 0x1, [@NL80211_STA_FLAG_SHORT_PREAMBLE={0x4}]}, @NL80211_ATTR_STA_FLAGS={0xc, 0x11, 0x0, 0x1, [@NL80211_STA_FLAG_ASSOCIATED={0x4}, @NL80211_STA_FLAG_AUTHENTICATED={0x4}]}, @NL80211_ATTR_MAC={0xa, 0x6, @device_b}, @NL80211_ATTR_STA_SUPPORTED_CHANNELS={0x14, 0xbd, [0x4, 0x1, 0x0, 0x185, 0x5b, 0x2, 0x4, 0x2]}]}, 0x50}}, 0x20004014) pipe(&(0x7f0000002dc0)={0xffffffffffffffff, 0xffffffffffffffff}) write$cgroup_subtree(r13, &(0x7f0000002e00)={[{0x2d, 'perf_event'}, {0x7905cc220030f0d0, 'io'}]}, 0x10) close(r14) 42.337561312s ago: executing program 2 (id=6241): r0 = socket$unix(0x1, 0x5, 0x0) ioctl$sock_SIOCETHTOOL(r0, 0x89f0, &(0x7f0000000080)={'vxcan1\x00', &(0x7f00000000c0)=@ethtool_link_settings={0x0, 0x0, 0xcc, 0xff, 0x8, 0x8, 0x4, 0x2a, 0x8, 0x5, [0x7, 0xa3, 0xfffffffa, 0x80, 0x49, 0x8000, 0x6, 0x5], [0x9e9, 0xffffffff, 0x1, 0x7fff, 0x80000000]}}) 41.480309085s ago: executing program 4 (id=6242): r0 = socket$nl_route(0x10, 0x3, 0x0) ioctl$ifreq_SIOCGIFINDEX_team(r0, 0x8933, &(0x7f0000000000)={'team0\x00', 0x0}) sendmsg$nl_route(r0, &(0x7f0000000440)={0x0, 0x0, &(0x7f0000000580)={&(0x7f0000000100)=ANY=[@ANYBLOB="5400000010000304000000000000000000000420", @ANYBLOB="83ed98e3b998ce0a335bb84715e3ce3d1c315ef4885b3c1c12784669bf7683464e0613ea1ccea18c", @ANYBLOB="00000000000000002c0012800b00010001000000050025000100000020441dfa9b6ecb5bd8020029000000000008000a00"/65, @ANYRES32=r1], 0x54}, 0x1, 0x0, 0x0, 0x4}, 0x8044) r2 = socket$nl_generic(0x10, 0x3, 0x10) r3 = socket$l2tp6(0xa, 0x2, 0x73) r4 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) bind$bt_hci(r4, &(0x7f0000000040)={0x1f, 0xffffffffffffffff, 0x3}, 0x6) write(r4, &(0x7f0000000080)="5b20bc9cc46a", 0x6) setsockopt$inet6_IPV6_FLOWLABEL_MGR(r3, 0x29, 0x20, &(0x7f0000000000)={@dev={0xfe, 0x80, '\x00', 0x16}, 0x0, 0x2, 0x3, 0x4, 0x8, 0xf}, 0x20) r5 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r5, 0x8933, &(0x7f00000002c0)={'bridge_slave_0\x00', 0x0}) r7 = socket(0x10, 0x80002, 0x0) sendmsg$nl_route(r7, &(0x7f0000000000)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000240)=ANY=[@ANYBLOB="440000001100a7cc4a372eaf541d002007000000", @ANYRES32=r6, @ANYBLOB="00000000100000001c001a80080002802d00ff0008000200", @ANYRES16=r7, @ANYRES32=r7], 0x44}, 0x1, 0x0, 0x0, 0x4000041}, 0x2000800) ioctl$sock_SIOCBRDELBR(r2, 0x89a2, &(0x7f0000000200)='bridge0\x00') mmap(&(0x7f0000000000/0x400000)=nil, 0x1400000, 0x0, 0xc3072, 0xffffffffffffffff, 0x0) 37.829733551s ago: executing program 2 (id=6243): r0 = socket(0x10, 0x803, 0x0) sendmsg$nl_route(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f00000000c0)=@newlink={0x54, 0x10, 0x437, 0xffffffff, 0x25dfdbfd, {0x0, 0x0, 0x0, 0x0, 0x60000, 0x10000}, [@IFLA_LINKINFO={0x34, 0x12, 0x0, 0x1, @gretap={{0xb}, {0x24, 0x2, 0x0, 0x1, [@IFLA_GRE_IKEY={0x8, 0x4, 0x8}, @IFLA_GRE_OFLAGS={0x6, 0x3, 0x81}, @IFLA_GRE_ENCAP_TYPE={0x6, 0xe, 0x2}, @IFLA_GRE_IFLAGS={0x6, 0x2, 0x2}]}}}]}, 0x54}}, 0x0) 37.709057195s ago: executing program 3 (id=6244): r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000040), 0x1c1341, 0x0) bpf$BPF_PROG_TEST_RUN(0xa, 0x0, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f00000000c0)={'syzkaller0\x00', 0x84aebfbd6349b7f2}) r1 = openat$tun(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) close(r1) (async) ioctl$TUNSETQUEUE(r0, 0x400454d9, &(0x7f0000000000)={'vxcan1\x00', 0x400}) (async, rerun: 64) socketpair$unix(0x1, 0x5, 0x0, &(0x7f00000029c0)) (rerun: 64) ioctl$SIOCSIFHWADDR(r1, 0x8914, &(0x7f0000002280)={'syzkaller0\x00', @multicast}) (async) write$cgroup_subtree(r0, &(0x7f0000000440)=ANY=[], 0xfdef) (async) r2 = socket$inet_tcp(0x2, 0x1, 0x0) bind$inet(r2, &(0x7f0000000080)={0x2, 0x4e20, @broadcast}, 0x10) (async) sendto$inet(r2, &(0x7f0000000140), 0xffffffffffffff58, 0x20008005, &(0x7f0000000100)={0x2, 0x4e20}, 0x10) (async, rerun: 64) recvmmsg(r2, &(0x7f00000020c0)=[{{0x0, 0x0, 0x0}, 0xc85f}], 0x1, 0x10041, 0x0) (rerun: 64) bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000080)={&(0x7f0000000240)={{0xeb9f, 0x1, 0x0, 0x18, 0x0, 0x24, 0x24, 0x4, [@fwd={0x2}, @array={0x0, 0x0, 0x0, 0x3, 0x0, {0x1, 0x1, 0x7}}]}, {0x0, [0x30, 0x61]}}, 0x0, 0x40, 0x0, 0x1, 0x7fffffff}, 0x20) 37.305546714s ago: executing program 0 (id=6245): r0 = socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$tipc2(&(0x7f0000000000), r0) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000080), r0) sendmsg$NL80211_CMD_SET_MAC_ACL(r0, &(0x7f00000001c0)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x2}, 0xc, &(0x7f0000000180)={&(0x7f00000000c0)={0xbc, r1, 0x8, 0x70bd2d, 0x25dfdbff, {{}, {@void, @void}}, [@NL80211_ATTR_ACL_POLICY={0x8}, @NL80211_ATTR_MAC_ADDRS={0x28, 0xa6, 0x0, 0x1, [{0xa, 0x6, @broadcast}, {0xa, 0x6, @device_b}, {0xa, 0x6, @device_b}]}, @NL80211_ATTR_ACL_POLICY={0x8}, @NL80211_ATTR_MAC_ADDRS={0x70, 0xa6, 0x0, 0x1, [{0xa, 0x6, @device_b}, {0xa, 0x6, @broadcast}, {0xa}, {0xa, 0x6, @broadcast}, {0xa}, {0xa, 0x6, @device_b}, {0xa}, {0xa, 0x6, @broadcast}, {0xa, 0x6, @device_b}]}]}, 0xbc}, 0x1, 0x0, 0x0, 0x40080}, 0x4010) r2 = socket$can_bcm(0x1d, 0x2, 0x2) getsockname$packet(0xffffffffffffffff, &(0x7f0000000200)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @multicast}, &(0x7f0000000240)=0x14) connect$can_bcm(r2, &(0x7f0000000280)={0x1d, r3}, 0x10) sendmsg$DEVLINK_CMD_SB_PORT_POOL_SET(0xffffffffffffffff, &(0x7f0000000580)={&(0x7f00000002c0)={0x10, 0x0, 0x0, 0x200000}, 0xc, &(0x7f0000000540)={&(0x7f0000000300)={0x238, 0x0, 0x800, 0x70bd27, 0x25dfdbfd, {}, [{{@pci={{0x8}, {0x11}}, {0x8}}, {0x8, 0xb, 0x1}, {0x6, 0x11, 0x3ff}, {0x8, 0x15, 0x8}}, {{@nsim={{0xe}, {0xf, 0x2, {'netdevsim', 0x0}}}, {0x8}}, {0x8, 0xb, 0x2}, {0x6, 0x11, 0x9}, {0x8, 0x15, 0x40}}, {{@pci={{0x8}, {0x11}}, {0x8, 0x3, 0x2}}, {0x8, 0xb, 0x81}, {0x6, 0x11, 0xdd}, {0x8, 0x15, 0x74}}, {{@pci={{0x8}, {0x11}}, {0x8}}, {0x8, 0xb, 0xfb42}, {0x6, 0x11, 0x7fff}, {0x8, 0x15, 0x6}}, {{@pci={{0x8}, {0x11}}, {0x8, 0x3, 0x2}}, {0x8, 0xb, 0x7ff}, {0x6, 0x11, 0x400}, {0x8, 0x15, 0x7}}, {{@pci={{0x8}, {0x11}}, {0x8, 0x3, 0x2}}, {0x8, 0xb, 0xffff8001}, {0x6, 0x11, 0x6}, {0x8}}, {{@pci={{0x8}, {0x11}}, {0x8, 0x3, 0x1}}, {0x8, 0xb, 0x7}, {0x6, 0x11, 0x5}, {0x8, 0x15, 0x8}}, {{@nsim={{0xe}, {0xf, 0x2, {'netdevsim', 0x0}}}, {0x8}}, {0x8, 0xb, 0x4}, {0x6, 0x11, 0x38}, {0x8, 0x15, 0x5}}, {{@pci={{0x8}, {0x11}}, {0x8, 0x3, 0x1}}, {0x8, 0xb, 0x1}, {0x6, 0x11, 0xc}, {0x8, 0x15, 0x4e3b}}]}, 0x238}, 0x1, 0x0, 0x0, 0x8000}, 0x4004015) r4 = openat$cgroup_ro(0xffffffffffffffff, &(0x7f00000005c0)='pids.current\x00', 0x0, 0x0) sendmsg$NL80211_CMD_STOP_AP(r4, &(0x7f00000006c0)={&(0x7f0000000600)={0x10, 0x0, 0x0, 0x40000}, 0xc, &(0x7f0000000680)={&(0x7f0000000640)={0x14, r1, 0x200, 0x70bd2b, 0x25dfdbfb, {{}, {@void, @void}}, ["", "", "", "", "", "", "", "", ""]}, 0x14}}, 0x8855) r5 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000740), r4) sendmsg$NL80211_CMD_SET_TX_BITRATE_MASK(r4, &(0x7f0000000b00)={&(0x7f0000000700)={0x10, 0x0, 0x0, 0x4000}, 0xc, &(0x7f0000000ac0)={&(0x7f0000000780)={0x320, r5, 0xe08, 0x70bd2d, 0x25dfdbff, {{}, {@void, @void}}, [@NL80211_ATTR_TX_RATES={0x2c, 0x5a, 0x0, 0x1, [@NL80211_BAND_6GHZ={0x28, 0x3, 0x0, 0x1, [@NL80211_TXRATE_HE_LTF={0x5}, @NL80211_TXRATE_VHT={0x14, 0x3, {[0x19da, 0x7, 0x2, 0x2, 0xffff, 0x7d7, 0x97, 0x3]}}, @NL80211_TXRATE_GI={0x5, 0x4, 0x1}]}]}, @NL80211_ATTR_TX_RATES={0x44, 0x5a, 0x0, 0x1, [@NL80211_BAND_5GHZ={0x20, 0x1, 0x0, 0x1, [@NL80211_TXRATE_GI={0x5, 0x4, 0x2}, @NL80211_TXRATE_HE={0x14, 0x5, {[0x4, 0x882, 0xf7, 0x9, 0x4, 0x4, 0x1, 0xd]}}]}, @NL80211_BAND_5GHZ={0x20, 0x1, 0x0, 0x1, [@NL80211_TXRATE_HE_LTF={0x5}, @NL80211_TXRATE_HT={0xb, 0x2, [{0x4, 0x5}, {0x1, 0x6}, {0x0, 0x6}, {0x3, 0x8}, {0x7, 0x2}, {0x1, 0x8}, {0x3, 0x2}]}, @NL80211_TXRATE_HE_LTF={0x5, 0x7, 0x2}]}]}, @NL80211_ATTR_TX_RATES={0x1b8, 0x5a, 0x0, 0x1, [@NL80211_BAND_60GHZ={0x70, 0x2, 0x0, 0x1, [@NL80211_TXRATE_LEGACY={0xe, 0x1, [0x18, 0x0, 0xc, 0x0, 0x4, 0xb, 0x6c, 0x18, 0x1b, 0x27]}, @NL80211_TXRATE_HE_GI={0x5, 0x6, 0x1}, @NL80211_TXRATE_VHT={0x14, 0x3, {[0x7, 0x1, 0x8, 0x1ff, 0xfff9, 0x1ff, 0x200, 0x1]}}, @NL80211_TXRATE_HT={0x12, 0x2, [{0x0, 0x4}, {0x0, 0x7}, {0x0, 0x4}, {0x0, 0x2}, {0x1, 0x4}, {0x3, 0x2}, {0x5, 0xa}, {0x1, 0x7}, {0x5, 0x1}, {0x6, 0x7}, {0x4, 0x8}, {0x3, 0x8}, {0x2, 0x2}, {0x1, 0x4}]}, @NL80211_TXRATE_HE_GI={0x5, 0x6, 0x2}, @NL80211_TXRATE_GI={0x5, 0x4, 0x3}, @NL80211_TXRATE_VHT={0x14, 0x3, {[0x200, 0x40, 0x9, 0x9, 0x8, 0x7, 0x2]}}, @NL80211_TXRATE_GI={0x5, 0x4, 0x1}]}, @NL80211_BAND_60GHZ={0x20, 0x2, 0x0, 0x1, [@NL80211_TXRATE_LEGACY={0x5, 0x1, [0x16]}, @NL80211_TXRATE_HE={0x14, 0x5, {[0x0, 0x0, 0x0, 0x9, 0xfffd, 0x6, 0xfffd, 0x2]}}]}, @NL80211_BAND_2GHZ={0x94, 0x0, 0x0, 0x1, [@NL80211_TXRATE_LEGACY={0xc, 0x1, [0x18, 0x60, 0xb, 0x5, 0x33, 0x2, 0x55aa575dfe3ac162, 0x60]}, @NL80211_TXRATE_HE_LTF={0x5, 0x7, 0x1}, @NL80211_TXRATE_HE_LTF={0x5, 0x7, 0x2}, @NL80211_TXRATE_VHT={0x14, 0x3, {[0x8, 0x6, 0x6, 0x4, 0x18, 0x20, 0x6, 0x6]}}, @NL80211_TXRATE_HT={0x50, 0x2, [{0x1, 0x8}, {0x1, 0x6}, {0x1, 0x9}, {0x3, 0x1}, {0x7}, {0x4, 0x7}, {0x1}, {0x0, 0x7}, {0x1, 0xa}, {0x3, 0x1}, {0x6, 0xa}, {0x2, 0x7}, {0x3, 0x3}, {0x1, 0x5}, {0x7, 0x7}, {0x4, 0x9}, {0x6, 0x7}, {0x6, 0x3}, {}, {0x3, 0x5}, {0x4, 0x3}, {0x0, 0x6}, {0x2, 0x2}, {0x7, 0x9}, {0x5, 0x4}, {0x7, 0x2}, {0x3, 0x4}, {0x3, 0x4}, {0x2, 0x6}, {0x4, 0x4}, {0x0, 0xa}, {0x1, 0x6}, {0x3, 0x1}, {0x5, 0x2}, {0x6, 0x1}, {0x7, 0x8}, {0x5, 0xa}, {0x3, 0x1}, {0x1}, {0x2, 0x5}, {0x4}, {0x0, 0x3}, {0x5, 0x3}, {0x3, 0x1}, {0x5}, {0x7, 0x5}, {0x3, 0xa}, {0x3, 0x7}, {0x4, 0x4}, {0x0, 0x6}, {0x7, 0x8}, {0x0, 0x1}, {0x7, 0x8}, {0x1, 0x3}, {0x0, 0x9}, {0x6, 0x9}, {0x5, 0x3}, {0x1, 0x9}, {0x6, 0x3}, {0x2, 0x9}, {0x1, 0x1}, {0x7, 0x5}, {0x7, 0x3}, {0x3}, {0x6, 0x9}, {0x7, 0x1}, {0x1, 0x5}, {0x7, 0x5}, {0x0, 0x7}, {0x6, 0x7}, {0x6, 0x9}, {0x1}, {0x0, 0x2}, {0x6}, {0x6, 0x8}, {0x6, 0x9}]}, @NL80211_TXRATE_HE_LTF={0x5, 0x7, 0x2}, @NL80211_TXRATE_GI={0x5, 0x4, 0x2}]}, @NL80211_BAND_6GHZ={0x64, 0x3, 0x0, 0x1, [@NL80211_TXRATE_HE={0x14, 0x5, {[0x5, 0x7, 0x8, 0x6, 0x1000, 0x4, 0x4, 0x8]}}, @NL80211_TXRATE_HE_GI={0x5}, @NL80211_TXRATE_LEGACY={0x19, 0x1, [0x48, 0x12, 0xf, 0x36, 0xb, 0x60, 0x48, 0x9, 0x1b, 0x9, 0x18, 0xb, 0x6c, 0x6, 0x0, 0xc, 0x3, 0x60, 0x5, 0x2, 0x3]}, @NL80211_TXRATE_VHT={0x14, 0x3, {[0x0, 0x3, 0x8, 0x4e4, 0x7, 0x7ff, 0x0, 0x10]}}, @NL80211_TXRATE_HE={0x14, 0x5, {[0x3, 0x6, 0xffff, 0x9, 0x3, 0x1, 0x2, 0x101]}}]}, @NL80211_BAND_60GHZ={0x2c, 0x2, 0x0, 0x1, [@NL80211_TXRATE_VHT={0x14, 0x3, {[0x4bd, 0x7ff, 0xbef6, 0xba25, 0x10, 0xc, 0x2020, 0x4]}}, @NL80211_TXRATE_VHT={0x14, 0x3, {[0x5, 0xfb30, 0xbb9, 0x2, 0x7, 0xa, 0x9f72]}}]}]}, @NL80211_ATTR_TX_RATES={0x4c, 0x5a, 0x0, 0x1, [@NL80211_BAND_2GHZ={0x20, 0x0, 0x0, 0x1, [@NL80211_TXRATE_LEGACY={0x19, 0x1, [0x7, 0x60, 0x2, 0x5, 0x6, 0x36, 0xb, 0x2, 0x3, 0x6, 0x58, 0x3, 0xb, 0x18, 0x3, 0x6c, 0x6c, 0xc, 0x16, 0x9, 0x30]}]}, @NL80211_BAND_5GHZ={0x28, 0x1, 0x0, 0x1, [@NL80211_TXRATE_GI={0x5, 0x4, 0x2}, @NL80211_TXRATE_LEGACY={0x13, 0x1, [0x18, 0x2, 0x6, 0x36, 0x12, 0x18, 0x6, 0x16, 0x38, 0x1e, 0x60, 0x30, 0x2, 0x5, 0x3]}, @NL80211_TXRATE_HE_LTF={0x5, 0x7, 0x2}]}]}, @NL80211_ATTR_TX_RATES={0x98, 0x5a, 0x0, 0x1, [@NL80211_BAND_2GHZ={0x48, 0x0, 0x0, 0x1, [@NL80211_TXRATE_VHT={0x14, 0x3, {[0x7f, 0xfffb, 0x9, 0x3, 0x3, 0x4a, 0xf000, 0x1]}}, @NL80211_TXRATE_HE={0x14, 0x5, {[0x4, 0x400, 0x2, 0x4, 0x1, 0x0, 0x7f, 0x401]}}, @NL80211_TXRATE_HE_LTF={0x5, 0x7, 0x2}, @NL80211_TXRATE_GI={0x5}, @NL80211_TXRATE_LEGACY={0xb, 0x1, [0x2, 0x60, 0x5, 0xc, 0x18, 0x36, 0x12]}]}, @NL80211_BAND_2GHZ={0x4c, 0x0, 0x0, 0x1, [@NL80211_TXRATE_LEGACY={0xc, 0x1, [0x16, 0x1b, 0x36, 0x3, 0x30, 0xb, 0x6, 0x4]}, @NL80211_TXRATE_VHT={0x14, 0x3, {[0xff7f, 0x3, 0x46, 0x8001, 0xfe01, 0x6, 0x8000, 0x400]}}, @NL80211_TXRATE_GI={0x5}, @NL80211_TXRATE_GI={0x5}, @NL80211_TXRATE_HE_GI={0x5, 0x6, 0x1}, @NL80211_TXRATE_HE_GI={0x5, 0x6, 0x1}, @NL80211_TXRATE_HE_GI={0x5, 0x6, 0x2}]}]}]}, 0x320}, 0x1, 0x0, 0x0, 0x8080}, 0xc1) sendmsg$nl_route(r4, &(0x7f0000000c00)={&(0x7f0000000b40)={0x10, 0x0, 0x0, 0x100}, 0xc, &(0x7f0000000bc0)={&(0x7f0000000b80)=@ipv6_getnetconf={0x24, 0x52, 0x100, 0x70bd2d, 0x25dfdbfb, {}, [@NETCONFA_FORWARDING={0x8, 0x2, 0x7fff}, @NETCONFA_RP_FILTER={0x8, 0x3, 0x1}]}, 0x24}, 0x1, 0x0, 0x0, 0x2800}, 0x40010) ioctl$sock_SIOCGIFINDEX_80211(r2, 0x8933, &(0x7f0000000c80)={'wlan1\x00', 0x0}) sendmsg$NL80211_CMD_TESTMODE(r4, &(0x7f0000001f80)={&(0x7f0000000c40)={0x10, 0x0, 0x0, 0x100}, 0xc, &(0x7f0000001f40)={&(0x7f0000000cc0)={0x125c, r5, 0x1, 0x70bd26, 0x25dfdbfb, {{}, {@val={0x8, 0x3, r6}, @val={0xc, 0x99, {0x0, 0x3a}}}}, [@NL80211_ATTR_TESTDATA={0x16, 0x45, "4ddcca0815f669f9f2091e548dd57749a280"}, @NL80211_ATTR_TESTDATA={0x32, 0x45, "b539b3c1c933f17b51722d6d6ca9527d485e6aea6e7ffb48606c75a566951ceaaca5826720069716502d9fe27b35"}, @NL80211_ATTR_TESTDATA={0xcb, 0x45, "d84f5664bc6bddea81a49d720f93d14562bc6ba3b049e1429201099b386339f95be32ad4797a6f156d2f8a0b64ed1f8fb0b383b5bf3a24a5d2cfa4f0e15f7ed8a4a6acfb6dc68b936520c2808dc514c4c8e87dda535d798cb364d88c2a3b32a3a6dff7765a98404c685826494bac3b40ce490064d72ce853aa8d798933b84ab8cd9a96968f4b0590de349a0da517f2b36006e578a9cd2b52a27239be5ee8a046f59a7ee6b1e9194dc835991e504d13aeb1d45f1deba5da0aa1a454f60446abea62dd3d22c0cc16"}, @NL80211_ATTR_TESTDATA={0x45, 0x45, "1611bbca4c7f0cff1520df69f25b762b1428c65e000c930d4fcd198cca5e063c9600aec563fa0c7ac010224dac177209fbf88fa8e4f8fb8f268182302000f6a608"}, @NL80211_ATTR_TESTDATA={0x3b, 0x45, "3b9f1f39371a21e87b71787ff2ab3dafac27dfc2a343e5b5af322ee0e508d227e34adaaeec8e4ad974cf6d6a414e32fdc6782625144339"}, @NL80211_ATTR_TESTDATA={0xe, 0x45, "f314e6be088ca720f7d5"}, @NL80211_ATTR_TESTDATA={0x3b, 0x45, "628161a91f9bf616e22f14ba1edc2623462844afc37737b3914f6fc0cd2492f0684a230c4a900dd9a437df253908d479a5e829e5445f39"}, @NL80211_ATTR_TESTDATA={0x48, 0x45, "d3a445b2a54c9246557ce9323e40a925ad513cf9d8638f3fbd39d2316ecbebc254b70e26b4c293b27488d154883167e592256d70f6ec65e5be98b7b20994b9c50ea2dfb1"}, @NL80211_ATTR_TESTDATA={0x1004, 0x45, "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"}]}, 0x125c}, 0x1, 0x0, 0x0, 0x10}, 0x4000000) bind$unix(r4, &(0x7f0000001fc0)=@abs={0x1, 0x0, 0x3}, 0x6e) sendmsg$nl_generic(r4, &(0x7f0000002140)={&(0x7f0000002040)={0x10, 0x0, 0x0, 0x8000}, 0xc, &(0x7f0000002100)={&(0x7f0000002080)={0x50, 0x2f, 0x20, 0x70bd27, 0x25dfdbfd, {0x1e}, [@generic="d5bfbe412f3e26ed94821c6254bce55e2ec085c3d1e6ba2d46a23b3cfd5bdf15c79ae5186ea0", @typed={0x14, 0x148, 0x0, 0x0, @ipv6=@dev={0xfe, 0x80, '\x00', 0x1e}}]}, 0x50}, 0x1, 0x0, 0x0, 0x44080}, 0x48800) r7 = socket$igmp(0x2, 0x3, 0x2) getsockopt$MRT(r7, 0x0, 0xd0, &(0x7f0000002180), &(0x7f00000021c0)=0x4) setsockopt$inet_tcp_TCP_CONGESTION(r4, 0x6, 0xd, &(0x7f0000002200)='nv', 0x2) sendmsg$NFNL_MSG_ACCT_GET_CTRZERO(r4, &(0x7f0000002340)={&(0x7f0000002240)={0x10, 0x0, 0x0, 0x2}, 0xc, &(0x7f0000002300)={&(0x7f0000002280)={0x4c, 0x2, 0x7, 0x3, 0x0, 0x0, {0x5}, [@NFACCT_FILTER={0x14, 0x7, 0x0, 0x1, [@NFACCT_FILTER_MASK={0x8}, @NFACCT_FILTER_MASK={0x8, 0x1, 0x1, 0x0, 0x2}]}, @NFACCT_NAME={0x9, 0x1, 'syz0\x00'}, @NFACCT_QUOTA={0xc, 0x6, 0x1, 0x0, 0x2}, @NFACCT_BYTES={0xc, 0x3, 0x1, 0x0, 0x2ec}]}, 0x4c}, 0x1, 0x0, 0x0, 0x4}, 0x4000000) r8 = socket$inet6_udp(0xa, 0x2, 0x0) ioctl$sock_ipv6_tunnel_SIOCCHGTUNNEL(r8, 0x89f3, &(0x7f0000002400)={'ip6_vti0\x00', &(0x7f0000002380)={'syztnl2\x00', r3, 0x29, 0x2, 0x6, 0x7, 0xc, @empty, @local, 0x0, 0x1, 0x1000, 0x80}}) ioctl$sock_SIOCETHTOOL(r4, 0x8946, &(0x7f0000002500)={'veth1_macvtap\x00', &(0x7f0000002440)=@ethtool_dump={0x40, 0x4, 0x4, 0x8e, "2ef14a1366dcd5a8459111b6c7864888c7a17f23ad1f11dc46a44f549103fdada3b71c9dbd88282692337bc9cf30ea19d3efd599925f5a98f5a30d2d39e7b70cd8821ba1fbc8271889596ff08f2e14a8319eb5225c370d4135340a67d2fc562e5225841865f8e3884f5fab706476fcc69aaaedfb92fc214b9c84278b489803015ee4e06161e0b14cd43665246601"}}) ioctl$sock_ipv4_tunnel_SIOCGETTUNNEL(r4, 0x89f0, &(0x7f00000025c0)={'sit0\x00', &(0x7f0000002540)={'gretap0\x00', 0x0, 0x700, 0x10, 0x8, 0x9, {{0xe, 0x4, 0x3, 0x18, 0x38, 0x66, 0x0, 0x3, 0x29, 0x0, @broadcast, @local, {[@timestamp_prespec={0x44, 0x24, 0x6b, 0x3, 0x9, [{@initdev={0xac, 0x1e, 0x0, 0x0}, 0x3}, {@remote, 0x400}, {@loopback, 0x100}, {@remote, 0x1}]}]}}}}}) r10 = syz_genetlink_get_family_id$l2tp(&(0x7f0000002640), r0) sendmsg$L2TP_CMD_SESSION_DELETE(r0, &(0x7f0000002700)={&(0x7f0000002600)={0x10, 0x0, 0x0, 0x40000000}, 0xc, &(0x7f00000026c0)={&(0x7f0000002680)={0x1c, r10, 0x10, 0x70bd25, 0x25dfdbff, {}, [@L2TP_ATTR_IP_SADDR={0x8, 0x18, @local}]}, 0x1c}, 0x1, 0x0, 0x0, 0x4000}, 0x200c0000) r11 = syz_genetlink_get_family_id$tipc(&(0x7f0000002780), r4) sendmsg$TIPC_CMD_GET_MEDIA_NAMES(r0, &(0x7f0000002840)={&(0x7f0000002740)={0x10, 0x0, 0x0, 0x800}, 0xc, &(0x7f0000002800)={&(0x7f00000027c0)={0x1c, r11, 0x1, 0x70bd2b, 0x25dfdbfe, {}, ["", "", "", "", "", ""]}, 0x1c}}, 0x81) sendmsg$nl_route(r4, &(0x7f0000002980)={&(0x7f0000002880)={0x10, 0x0, 0x0, 0x80000000}, 0xc, &(0x7f0000002940)={&(0x7f00000028c0)=@ipv6_deladdrlabel={0x4c, 0x49, 0x200, 0x70bd2b, 0x25dfdbfb, {0xa, 0x0, 0x8, 0x0, r9, 0x8d}, [@IFAL_ADDRESS={0x14, 0x1, @initdev={0xfe, 0x88, '\x00', 0x0, 0x0}}, @IFAL_ADDRESS={0x14, 0x1, @rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x01'}, @IFAL_LABEL={0x8, 0x2, 0xc}]}, 0x4c}, 0x1, 0x0, 0x0, 0x800}, 0x95) 34.385923875s ago: executing program 4 (id=6246): unshare(0x40880) bpf$TOKEN_CREATE(0x24, &(0x7f0000000900), 0x8) bpf$PROG_LOAD(0x5, &(0x7f0000000940)={0x11, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000085000000080000001801000020646c2500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffff"], 0x0, 0x0, 0x0, 0x0, 0x40f00, 0xf, '\x00', 0x0, @fallback=0x1b, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$PROG_LOAD(0x5, &(0x7f0000000600)={0x14, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018000000", @ANYRES32=0x0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa2"], 0x0, 0x0, 0x0, 0x0, 0x40f00, 0xae, '\x00', 0x0, @fallback=0x35, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7fff}, 0x94) getsockopt$inet_pktinfo(0xffffffffffffffff, 0x0, 0x8, &(0x7f0000000a00)={0x0, @multicast1, @initdev}, &(0x7f0000000a40)=0xc) r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000200)={0x12, 0x4, &(0x7f0000000480)=ANY=[@ANYBLOB="18000000000000000000000000000000791838000000000095"], 0x0, 0x0, 0x0, 0x0, 0x40f00, 0x0, '\x00', r0, @fallback=0x20, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0xffff}, 0x94) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x1f, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x41100, 0x12, '\x00', 0x0, @fallback=0x1, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r2 = syz_init_net_socket$bt_l2cap(0x1f, 0x1, 0x3) getsockopt$IP6T_SO_GET_REVISION_MATCH(0xffffffffffffffff, 0x29, 0x44, &(0x7f0000000400)={'icmp6\x00'}, &(0x7f0000000880)=0x1e) r3 = socket$kcm(0x10, 0x2, 0x0) sendmsg$kcm(r3, &(0x7f0000000000)={0x0, 0x4c000000, &(0x7f0000000080)=[{&(0x7f0000000300)="d8000000180081034e81f783db4cb9040a1d020006007c09e8fc55a10a0015000400142603600e120800060000000401a800080008000a400400000004000461c1d67f6f94007134cf6efb8000a007a290457f0189b316277ce06bbace8017cbec4c2ee5a7cef4090000001fb71b14d6d930dfe1d9d322fe7c9f8775730d16a4683f5aeb4edbb57a5025ccca9e00360db798262f3d40fad9e3bb9ad809d5e1cace81ed0bffece0b42a9ecbee5de6ccd4e1ffffffffc1c9b6278754ca397c388b0dd6e4edef3d9300"/216, 0xd8}], 0x1}, 0x0) r4 = socket$rxrpc(0x21, 0x2, 0xa) connect$rxrpc(r4, &(0x7f00000008c0)=@in4={0x21, 0x1, 0x2, 0x10, {0x2, 0x4e20, @broadcast}}, 0x24) r5 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r6 = syz_genetlink_get_family_id$nl802154(&(0x7f0000000040), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_802154(0xffffffffffffffff, 0x8933, &(0x7f0000000080)={'wpan4\x00', 0x0}) r8 = socket$inet6(0xa, 0x3, 0xff) setsockopt$IP6T_SO_SET_REPLACE(r8, 0x29, 0x40, &(0x7f0000000100)=@filter={'filter\x00', 0xe, 0x4, 0x370, 0xffffffff, 0x0, 0xd0, 0x1a0, 0xffffffff, 0xffffffff, 0x0, 0xd0, 0x2a0, 0xffffffff, 0x4, 0x0, {[{{@uncond, 0x0, 0xa8, 0xd0}, @common=@unspec=@STANDARD={0x28, '\x00', 0x0, 0xfffffffe}}, {{@uncond, 0x0, 0xa8, 0xd0}, @common=@unspec=@STANDARD={0x28, '\x00', 0x0, 0xfffffffe}}, {{@ipv6={@empty, @empty, [], [0x0, 0x700]}, 0x0, 0xd8, 0x100, 0x0, {}, [@common=@ah={{0x30}}]}, @common=@unspec=@STANDARD={0x28, '\x00', 0x0, 0xfffffffe}}], {{'\x00', 0x0, 0xa8, 0xd0}, {0x28}}}}, 0x3d0) sendto$inet6(r8, &(0x7f0000000000)="6000000400143340000000000000ea0000c0000000000000000000a52af834000000000000000000", 0x28, 0x8000, &(0x7f0000000200)={0xa, 0x0, 0x0, @local}, 0x1c) r9 = socket$inet6_sctp(0xa, 0x5, 0x84) getsockopt$inet_sctp6_SCTP_RTOINFO(r9, 0x84, 0x0, &(0x7f0000000300)={0x0, 0x6, 0x40000, 0x6}, &(0x7f0000000380)=0x10) sendmsg$NL802154_CMD_SET_SHORT_ADDR(r5, &(0x7f0000000380)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x10}, 0xc, &(0x7f0000000340)={&(0x7f00000002c0)=ANY=[@ANYBLOB='`\x00\x00\x00', @ANYRES16=r6, @ANYBLOB="20002abd7000fbdbdf250b00000008000300", @ANYRES32=0x0, @ANYBLOB="0c000600000000000000000006000a00a3aa000008000300", @ANYRES32=r7, @ANYBLOB="06000a200c000600030000000300000006000a00feff00000000cca100"/40], 0x60}, 0x1, 0x0, 0x0, 0x44000}, 0x80) setsockopt$bt_l2cap_L2CAP_OPTIONS(r2, 0x6, 0x1, 0x0, 0x0) bpf$BPF_GET_PROG_INFO(0xf, &(0x7f0000000840)={r1, 0xe0, &(0x7f0000000740)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8, &(0x7f00000003c0)=[0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0], ""/16, 0x0, 0x0, 0x0, 0x0, 0x9, 0x8, &(0x7f00000004c0)=[0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0], &(0x7f0000000540)=[0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0], 0x0, 0x31, &(0x7f0000000580)=[{}], 0x8, 0x10, &(0x7f00000005c0), &(0x7f00000006c0), 0x8, 0x87, 0x8, 0x8, &(0x7f0000000700)}}, 0x10) 0s ago: executing program 33 (id=6245): r0 = socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$tipc2(&(0x7f0000000000), r0) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000080), r0) sendmsg$NL80211_CMD_SET_MAC_ACL(r0, &(0x7f00000001c0)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x2}, 0xc, &(0x7f0000000180)={&(0x7f00000000c0)={0xbc, r1, 0x8, 0x70bd2d, 0x25dfdbff, {{}, {@void, @void}}, [@NL80211_ATTR_ACL_POLICY={0x8}, @NL80211_ATTR_MAC_ADDRS={0x28, 0xa6, 0x0, 0x1, [{0xa, 0x6, @broadcast}, {0xa, 0x6, @device_b}, {0xa, 0x6, @device_b}]}, @NL80211_ATTR_ACL_POLICY={0x8}, @NL80211_ATTR_MAC_ADDRS={0x70, 0xa6, 0x0, 0x1, [{0xa, 0x6, @device_b}, {0xa, 0x6, @broadcast}, {0xa}, {0xa, 0x6, @broadcast}, {0xa}, {0xa, 0x6, @device_b}, {0xa}, {0xa, 0x6, @broadcast}, {0xa, 0x6, @device_b}]}]}, 0xbc}, 0x1, 0x0, 0x0, 0x40080}, 0x4010) r2 = socket$can_bcm(0x1d, 0x2, 0x2) getsockname$packet(0xffffffffffffffff, &(0x7f0000000200)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @multicast}, &(0x7f0000000240)=0x14) connect$can_bcm(r2, &(0x7f0000000280)={0x1d, r3}, 0x10) sendmsg$DEVLINK_CMD_SB_PORT_POOL_SET(0xffffffffffffffff, &(0x7f0000000580)={&(0x7f00000002c0)={0x10, 0x0, 0x0, 0x200000}, 0xc, &(0x7f0000000540)={&(0x7f0000000300)={0x238, 0x0, 0x800, 0x70bd27, 0x25dfdbfd, {}, [{{@pci={{0x8}, {0x11}}, {0x8}}, {0x8, 0xb, 0x1}, {0x6, 0x11, 0x3ff}, {0x8, 0x15, 0x8}}, {{@nsim={{0xe}, {0xf, 0x2, {'netdevsim', 0x0}}}, {0x8}}, {0x8, 0xb, 0x2}, {0x6, 0x11, 0x9}, {0x8, 0x15, 0x40}}, {{@pci={{0x8}, {0x11}}, {0x8, 0x3, 0x2}}, {0x8, 0xb, 0x81}, {0x6, 0x11, 0xdd}, {0x8, 0x15, 0x74}}, {{@pci={{0x8}, {0x11}}, {0x8}}, {0x8, 0xb, 0xfb42}, {0x6, 0x11, 0x7fff}, {0x8, 0x15, 0x6}}, {{@pci={{0x8}, {0x11}}, {0x8, 0x3, 0x2}}, {0x8, 0xb, 0x7ff}, {0x6, 0x11, 0x400}, {0x8, 0x15, 0x7}}, {{@pci={{0x8}, {0x11}}, {0x8, 0x3, 0x2}}, {0x8, 0xb, 0xffff8001}, {0x6, 0x11, 0x6}, {0x8}}, {{@pci={{0x8}, {0x11}}, {0x8, 0x3, 0x1}}, {0x8, 0xb, 0x7}, {0x6, 0x11, 0x5}, {0x8, 0x15, 0x8}}, {{@nsim={{0xe}, {0xf, 0x2, {'netdevsim', 0x0}}}, {0x8}}, {0x8, 0xb, 0x4}, {0x6, 0x11, 0x38}, {0x8, 0x15, 0x5}}, {{@pci={{0x8}, {0x11}}, {0x8, 0x3, 0x1}}, {0x8, 0xb, 0x1}, {0x6, 0x11, 0xc}, {0x8, 0x15, 0x4e3b}}]}, 0x238}, 0x1, 0x0, 0x0, 0x8000}, 0x4004015) r4 = openat$cgroup_ro(0xffffffffffffffff, &(0x7f00000005c0)='pids.current\x00', 0x0, 0x0) sendmsg$NL80211_CMD_STOP_AP(r4, &(0x7f00000006c0)={&(0x7f0000000600)={0x10, 0x0, 0x0, 0x40000}, 0xc, &(0x7f0000000680)={&(0x7f0000000640)={0x14, r1, 0x200, 0x70bd2b, 0x25dfdbfb, {{}, {@void, @void}}, ["", "", "", "", "", "", "", "", ""]}, 0x14}}, 0x8855) r5 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000740), r4) sendmsg$NL80211_CMD_SET_TX_BITRATE_MASK(r4, &(0x7f0000000b00)={&(0x7f0000000700)={0x10, 0x0, 0x0, 0x4000}, 0xc, &(0x7f0000000ac0)={&(0x7f0000000780)={0x320, r5, 0xe08, 0x70bd2d, 0x25dfdbff, {{}, {@void, @void}}, [@NL80211_ATTR_TX_RATES={0x2c, 0x5a, 0x0, 0x1, [@NL80211_BAND_6GHZ={0x28, 0x3, 0x0, 0x1, [@NL80211_TXRATE_HE_LTF={0x5}, @NL80211_TXRATE_VHT={0x14, 0x3, {[0x19da, 0x7, 0x2, 0x2, 0xffff, 0x7d7, 0x97, 0x3]}}, @NL80211_TXRATE_GI={0x5, 0x4, 0x1}]}]}, @NL80211_ATTR_TX_RATES={0x44, 0x5a, 0x0, 0x1, [@NL80211_BAND_5GHZ={0x20, 0x1, 0x0, 0x1, [@NL80211_TXRATE_GI={0x5, 0x4, 0x2}, @NL80211_TXRATE_HE={0x14, 0x5, {[0x4, 0x882, 0xf7, 0x9, 0x4, 0x4, 0x1, 0xd]}}]}, @NL80211_BAND_5GHZ={0x20, 0x1, 0x0, 0x1, [@NL80211_TXRATE_HE_LTF={0x5}, @NL80211_TXRATE_HT={0xb, 0x2, [{0x4, 0x5}, {0x1, 0x6}, {0x0, 0x6}, {0x3, 0x8}, {0x7, 0x2}, {0x1, 0x8}, {0x3, 0x2}]}, @NL80211_TXRATE_HE_LTF={0x5, 0x7, 0x2}]}]}, @NL80211_ATTR_TX_RATES={0x1b8, 0x5a, 0x0, 0x1, [@NL80211_BAND_60GHZ={0x70, 0x2, 0x0, 0x1, [@NL80211_TXRATE_LEGACY={0xe, 0x1, [0x18, 0x0, 0xc, 0x0, 0x4, 0xb, 0x6c, 0x18, 0x1b, 0x27]}, @NL80211_TXRATE_HE_GI={0x5, 0x6, 0x1}, @NL80211_TXRATE_VHT={0x14, 0x3, {[0x7, 0x1, 0x8, 0x1ff, 0xfff9, 0x1ff, 0x200, 0x1]}}, @NL80211_TXRATE_HT={0x12, 0x2, [{0x0, 0x4}, {0x0, 0x7}, {0x0, 0x4}, {0x0, 0x2}, {0x1, 0x4}, {0x3, 0x2}, {0x5, 0xa}, {0x1, 0x7}, {0x5, 0x1}, {0x6, 0x7}, {0x4, 0x8}, {0x3, 0x8}, {0x2, 0x2}, {0x1, 0x4}]}, @NL80211_TXRATE_HE_GI={0x5, 0x6, 0x2}, @NL80211_TXRATE_GI={0x5, 0x4, 0x3}, @NL80211_TXRATE_VHT={0x14, 0x3, {[0x200, 0x40, 0x9, 0x9, 0x8, 0x7, 0x2]}}, @NL80211_TXRATE_GI={0x5, 0x4, 0x1}]}, @NL80211_BAND_60GHZ={0x20, 0x2, 0x0, 0x1, [@NL80211_TXRATE_LEGACY={0x5, 0x1, [0x16]}, @NL80211_TXRATE_HE={0x14, 0x5, {[0x0, 0x0, 0x0, 0x9, 0xfffd, 0x6, 0xfffd, 0x2]}}]}, @NL80211_BAND_2GHZ={0x94, 0x0, 0x0, 0x1, [@NL80211_TXRATE_LEGACY={0xc, 0x1, [0x18, 0x60, 0xb, 0x5, 0x33, 0x2, 0x55aa575dfe3ac162, 0x60]}, @NL80211_TXRATE_HE_LTF={0x5, 0x7, 0x1}, @NL80211_TXRATE_HE_LTF={0x5, 0x7, 0x2}, @NL80211_TXRATE_VHT={0x14, 0x3, {[0x8, 0x6, 0x6, 0x4, 0x18, 0x20, 0x6, 0x6]}}, @NL80211_TXRATE_HT={0x50, 0x2, [{0x1, 0x8}, {0x1, 0x6}, {0x1, 0x9}, {0x3, 0x1}, {0x7}, {0x4, 0x7}, {0x1}, {0x0, 0x7}, {0x1, 0xa}, {0x3, 0x1}, {0x6, 0xa}, {0x2, 0x7}, {0x3, 0x3}, {0x1, 0x5}, {0x7, 0x7}, {0x4, 0x9}, {0x6, 0x7}, {0x6, 0x3}, {}, {0x3, 0x5}, {0x4, 0x3}, {0x0, 0x6}, {0x2, 0x2}, {0x7, 0x9}, {0x5, 0x4}, {0x7, 0x2}, {0x3, 0x4}, {0x3, 0x4}, {0x2, 0x6}, {0x4, 0x4}, {0x0, 0xa}, {0x1, 0x6}, {0x3, 0x1}, {0x5, 0x2}, {0x6, 0x1}, {0x7, 0x8}, {0x5, 0xa}, {0x3, 0x1}, {0x1}, {0x2, 0x5}, {0x4}, {0x0, 0x3}, {0x5, 0x3}, {0x3, 0x1}, {0x5}, {0x7, 0x5}, {0x3, 0xa}, {0x3, 0x7}, {0x4, 0x4}, {0x0, 0x6}, {0x7, 0x8}, {0x0, 0x1}, {0x7, 0x8}, {0x1, 0x3}, {0x0, 0x9}, {0x6, 0x9}, {0x5, 0x3}, {0x1, 0x9}, {0x6, 0x3}, {0x2, 0x9}, {0x1, 0x1}, {0x7, 0x5}, {0x7, 0x3}, {0x3}, {0x6, 0x9}, {0x7, 0x1}, {0x1, 0x5}, {0x7, 0x5}, {0x0, 0x7}, {0x6, 0x7}, {0x6, 0x9}, {0x1}, {0x0, 0x2}, {0x6}, {0x6, 0x8}, {0x6, 0x9}]}, @NL80211_TXRATE_HE_LTF={0x5, 0x7, 0x2}, @NL80211_TXRATE_GI={0x5, 0x4, 0x2}]}, @NL80211_BAND_6GHZ={0x64, 0x3, 0x0, 0x1, [@NL80211_TXRATE_HE={0x14, 0x5, {[0x5, 0x7, 0x8, 0x6, 0x1000, 0x4, 0x4, 0x8]}}, @NL80211_TXRATE_HE_GI={0x5}, @NL80211_TXRATE_LEGACY={0x19, 0x1, [0x48, 0x12, 0xf, 0x36, 0xb, 0x60, 0x48, 0x9, 0x1b, 0x9, 0x18, 0xb, 0x6c, 0x6, 0x0, 0xc, 0x3, 0x60, 0x5, 0x2, 0x3]}, @NL80211_TXRATE_VHT={0x14, 0x3, {[0x0, 0x3, 0x8, 0x4e4, 0x7, 0x7ff, 0x0, 0x10]}}, @NL80211_TXRATE_HE={0x14, 0x5, {[0x3, 0x6, 0xffff, 0x9, 0x3, 0x1, 0x2, 0x101]}}]}, @NL80211_BAND_60GHZ={0x2c, 0x2, 0x0, 0x1, [@NL80211_TXRATE_VHT={0x14, 0x3, {[0x4bd, 0x7ff, 0xbef6, 0xba25, 0x10, 0xc, 0x2020, 0x4]}}, @NL80211_TXRATE_VHT={0x14, 0x3, {[0x5, 0xfb30, 0xbb9, 0x2, 0x7, 0xa, 0x9f72]}}]}]}, @NL80211_ATTR_TX_RATES={0x4c, 0x5a, 0x0, 0x1, [@NL80211_BAND_2GHZ={0x20, 0x0, 0x0, 0x1, [@NL80211_TXRATE_LEGACY={0x19, 0x1, [0x7, 0x60, 0x2, 0x5, 0x6, 0x36, 0xb, 0x2, 0x3, 0x6, 0x58, 0x3, 0xb, 0x18, 0x3, 0x6c, 0x6c, 0xc, 0x16, 0x9, 0x30]}]}, @NL80211_BAND_5GHZ={0x28, 0x1, 0x0, 0x1, [@NL80211_TXRATE_GI={0x5, 0x4, 0x2}, @NL80211_TXRATE_LEGACY={0x13, 0x1, [0x18, 0x2, 0x6, 0x36, 0x12, 0x18, 0x6, 0x16, 0x38, 0x1e, 0x60, 0x30, 0x2, 0x5, 0x3]}, @NL80211_TXRATE_HE_LTF={0x5, 0x7, 0x2}]}]}, @NL80211_ATTR_TX_RATES={0x98, 0x5a, 0x0, 0x1, [@NL80211_BAND_2GHZ={0x48, 0x0, 0x0, 0x1, [@NL80211_TXRATE_VHT={0x14, 0x3, {[0x7f, 0xfffb, 0x9, 0x3, 0x3, 0x4a, 0xf000, 0x1]}}, @NL80211_TXRATE_HE={0x14, 0x5, {[0x4, 0x400, 0x2, 0x4, 0x1, 0x0, 0x7f, 0x401]}}, @NL80211_TXRATE_HE_LTF={0x5, 0x7, 0x2}, @NL80211_TXRATE_GI={0x5}, @NL80211_TXRATE_LEGACY={0xb, 0x1, [0x2, 0x60, 0x5, 0xc, 0x18, 0x36, 0x12]}]}, @NL80211_BAND_2GHZ={0x4c, 0x0, 0x0, 0x1, [@NL80211_TXRATE_LEGACY={0xc, 0x1, [0x16, 0x1b, 0x36, 0x3, 0x30, 0xb, 0x6, 0x4]}, @NL80211_TXRATE_VHT={0x14, 0x3, {[0xff7f, 0x3, 0x46, 0x8001, 0xfe01, 0x6, 0x8000, 0x400]}}, @NL80211_TXRATE_GI={0x5}, @NL80211_TXRATE_GI={0x5}, @NL80211_TXRATE_HE_GI={0x5, 0x6, 0x1}, @NL80211_TXRATE_HE_GI={0x5, 0x6, 0x1}, @NL80211_TXRATE_HE_GI={0x5, 0x6, 0x2}]}]}]}, 0x320}, 0x1, 0x0, 0x0, 0x8080}, 0xc1) sendmsg$nl_route(r4, &(0x7f0000000c00)={&(0x7f0000000b40)={0x10, 0x0, 0x0, 0x100}, 0xc, &(0x7f0000000bc0)={&(0x7f0000000b80)=@ipv6_getnetconf={0x24, 0x52, 0x100, 0x70bd2d, 0x25dfdbfb, {}, [@NETCONFA_FORWARDING={0x8, 0x2, 0x7fff}, @NETCONFA_RP_FILTER={0x8, 0x3, 0x1}]}, 0x24}, 0x1, 0x0, 0x0, 0x2800}, 0x40010) ioctl$sock_SIOCGIFINDEX_80211(r2, 0x8933, &(0x7f0000000c80)={'wlan1\x00', 0x0}) sendmsg$NL80211_CMD_TESTMODE(r4, &(0x7f0000001f80)={&(0x7f0000000c40)={0x10, 0x0, 0x0, 0x100}, 0xc, &(0x7f0000001f40)={&(0x7f0000000cc0)={0x125c, r5, 0x1, 0x70bd26, 0x25dfdbfb, {{}, {@val={0x8, 0x3, r6}, @val={0xc, 0x99, {0x0, 0x3a}}}}, [@NL80211_ATTR_TESTDATA={0x16, 0x45, "4ddcca0815f669f9f2091e548dd57749a280"}, @NL80211_ATTR_TESTDATA={0x32, 0x45, "b539b3c1c933f17b51722d6d6ca9527d485e6aea6e7ffb48606c75a566951ceaaca5826720069716502d9fe27b35"}, @NL80211_ATTR_TESTDATA={0xcb, 0x45, "d84f5664bc6bddea81a49d720f93d14562bc6ba3b049e1429201099b386339f95be32ad4797a6f156d2f8a0b64ed1f8fb0b383b5bf3a24a5d2cfa4f0e15f7ed8a4a6acfb6dc68b936520c2808dc514c4c8e87dda535d798cb364d88c2a3b32a3a6dff7765a98404c685826494bac3b40ce490064d72ce853aa8d798933b84ab8cd9a96968f4b0590de349a0da517f2b36006e578a9cd2b52a27239be5ee8a046f59a7ee6b1e9194dc835991e504d13aeb1d45f1deba5da0aa1a454f60446abea62dd3d22c0cc16"}, @NL80211_ATTR_TESTDATA={0x45, 0x45, "1611bbca4c7f0cff1520df69f25b762b1428c65e000c930d4fcd198cca5e063c9600aec563fa0c7ac010224dac177209fbf88fa8e4f8fb8f268182302000f6a608"}, @NL80211_ATTR_TESTDATA={0x3b, 0x45, "3b9f1f39371a21e87b71787ff2ab3dafac27dfc2a343e5b5af322ee0e508d227e34adaaeec8e4ad974cf6d6a414e32fdc6782625144339"}, @NL80211_ATTR_TESTDATA={0xe, 0x45, "f314e6be088ca720f7d5"}, @NL80211_ATTR_TESTDATA={0x3b, 0x45, "628161a91f9bf616e22f14ba1edc2623462844afc37737b3914f6fc0cd2492f0684a230c4a900dd9a437df253908d479a5e829e5445f39"}, @NL80211_ATTR_TESTDATA={0x48, 0x45, "d3a445b2a54c9246557ce9323e40a925ad513cf9d8638f3fbd39d2316ecbebc254b70e26b4c293b27488d154883167e592256d70f6ec65e5be98b7b20994b9c50ea2dfb1"}, @NL80211_ATTR_TESTDATA={0x1004, 0x45, "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"}]}, 0x125c}, 0x1, 0x0, 0x0, 0x10}, 0x4000000) bind$unix(r4, &(0x7f0000001fc0)=@abs={0x1, 0x0, 0x3}, 0x6e) sendmsg$nl_generic(r4, &(0x7f0000002140)={&(0x7f0000002040)={0x10, 0x0, 0x0, 0x8000}, 0xc, &(0x7f0000002100)={&(0x7f0000002080)={0x50, 0x2f, 0x20, 0x70bd27, 0x25dfdbfd, {0x1e}, [@generic="d5bfbe412f3e26ed94821c6254bce55e2ec085c3d1e6ba2d46a23b3cfd5bdf15c79ae5186ea0", @typed={0x14, 0x148, 0x0, 0x0, @ipv6=@dev={0xfe, 0x80, '\x00', 0x1e}}]}, 0x50}, 0x1, 0x0, 0x0, 0x44080}, 0x48800) r7 = socket$igmp(0x2, 0x3, 0x2) getsockopt$MRT(r7, 0x0, 0xd0, &(0x7f0000002180), &(0x7f00000021c0)=0x4) setsockopt$inet_tcp_TCP_CONGESTION(r4, 0x6, 0xd, &(0x7f0000002200)='nv', 0x2) sendmsg$NFNL_MSG_ACCT_GET_CTRZERO(r4, &(0x7f0000002340)={&(0x7f0000002240)={0x10, 0x0, 0x0, 0x2}, 0xc, &(0x7f0000002300)={&(0x7f0000002280)={0x4c, 0x2, 0x7, 0x3, 0x0, 0x0, {0x5}, [@NFACCT_FILTER={0x14, 0x7, 0x0, 0x1, [@NFACCT_FILTER_MASK={0x8}, @NFACCT_FILTER_MASK={0x8, 0x1, 0x1, 0x0, 0x2}]}, @NFACCT_NAME={0x9, 0x1, 'syz0\x00'}, @NFACCT_QUOTA={0xc, 0x6, 0x1, 0x0, 0x2}, @NFACCT_BYTES={0xc, 0x3, 0x1, 0x0, 0x2ec}]}, 0x4c}, 0x1, 0x0, 0x0, 0x4}, 0x4000000) r8 = socket$inet6_udp(0xa, 0x2, 0x0) ioctl$sock_ipv6_tunnel_SIOCCHGTUNNEL(r8, 0x89f3, &(0x7f0000002400)={'ip6_vti0\x00', &(0x7f0000002380)={'syztnl2\x00', r3, 0x29, 0x2, 0x6, 0x7, 0xc, @empty, @local, 0x0, 0x1, 0x1000, 0x80}}) ioctl$sock_SIOCETHTOOL(r4, 0x8946, &(0x7f0000002500)={'veth1_macvtap\x00', &(0x7f0000002440)=@ethtool_dump={0x40, 0x4, 0x4, 0x8e, "2ef14a1366dcd5a8459111b6c7864888c7a17f23ad1f11dc46a44f549103fdada3b71c9dbd88282692337bc9cf30ea19d3efd599925f5a98f5a30d2d39e7b70cd8821ba1fbc8271889596ff08f2e14a8319eb5225c370d4135340a67d2fc562e5225841865f8e3884f5fab706476fcc69aaaedfb92fc214b9c84278b489803015ee4e06161e0b14cd43665246601"}}) ioctl$sock_ipv4_tunnel_SIOCGETTUNNEL(r4, 0x89f0, &(0x7f00000025c0)={'sit0\x00', &(0x7f0000002540)={'gretap0\x00', 0x0, 0x700, 0x10, 0x8, 0x9, {{0xe, 0x4, 0x3, 0x18, 0x38, 0x66, 0x0, 0x3, 0x29, 0x0, @broadcast, @local, {[@timestamp_prespec={0x44, 0x24, 0x6b, 0x3, 0x9, [{@initdev={0xac, 0x1e, 0x0, 0x0}, 0x3}, {@remote, 0x400}, {@loopback, 0x100}, {@remote, 0x1}]}]}}}}}) r10 = syz_genetlink_get_family_id$l2tp(&(0x7f0000002640), r0) sendmsg$L2TP_CMD_SESSION_DELETE(r0, &(0x7f0000002700)={&(0x7f0000002600)={0x10, 0x0, 0x0, 0x40000000}, 0xc, &(0x7f00000026c0)={&(0x7f0000002680)={0x1c, r10, 0x10, 0x70bd25, 0x25dfdbff, {}, [@L2TP_ATTR_IP_SADDR={0x8, 0x18, @local}]}, 0x1c}, 0x1, 0x0, 0x0, 0x4000}, 0x200c0000) r11 = syz_genetlink_get_family_id$tipc(&(0x7f0000002780), r4) sendmsg$TIPC_CMD_GET_MEDIA_NAMES(r0, &(0x7f0000002840)={&(0x7f0000002740)={0x10, 0x0, 0x0, 0x800}, 0xc, &(0x7f0000002800)={&(0x7f00000027c0)={0x1c, r11, 0x1, 0x70bd2b, 0x25dfdbfe, {}, ["", "", "", "", "", ""]}, 0x1c}}, 0x81) sendmsg$nl_route(r4, &(0x7f0000002980)={&(0x7f0000002880)={0x10, 0x0, 0x0, 0x80000000}, 0xc, &(0x7f0000002940)={&(0x7f00000028c0)=@ipv6_deladdrlabel={0x4c, 0x49, 0x200, 0x70bd2b, 0x25dfdbfb, {0xa, 0x0, 0x8, 0x0, r9, 0x8d}, [@IFAL_ADDRESS={0x14, 0x1, @initdev={0xfe, 0x88, '\x00', 0x0, 0x0}}, @IFAL_ADDRESS={0x14, 0x1, @rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x01'}, @IFAL_LABEL={0x8, 0x2, 0xc}]}, 0x4c}, 0x1, 0x0, 0x0, 0x800}, 0x95) kernel console output (not intermixed with test programs): after parsing attributes in process `syz.0.4970'. [ 797.846266][T25446] netlink: 8 bytes leftover after parsing attributes in process `syz.2.4971'. [ 798.442522][ C1] ip6_tunnel: ip6tnl1 xmit: Local address not yet configured! [ 798.492259][T25458] bond7: option ad_actor_sys_prio: mode dependency failed, not supported in mode balance-rr(0) [ 798.686252][T25458] bond7 (unregistering): Released all slaves [ 798.804642][T25473] netlink: 88 bytes leftover after parsing attributes in process `syz.0.4978'. [ 798.818436][T25473] netlink: 40 bytes leftover after parsing attributes in process `syz.0.4978'. [ 798.820597][T25473] netlink: 8 bytes leftover after parsing attributes in process `syz.0.4978'. [ 798.823023][T25473] netlink: 12 bytes leftover after parsing attributes in process `syz.0.4978'. [ 799.321305][ C0] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 799.321598][ C0] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 799.321865][ C0] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 800.045419][ T7368] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 800.769974][T25531] netlink: 'syz.0.4997': attribute type 9 has an invalid length. [ 801.001917][ T7365] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 801.049902][T25542] netlink: 'syz.3.5001': attribute type 1 has an invalid length. [ 801.452268][T25542] 8021q: adding VLAN 0 to HW filter on device bond6 [ 801.471893][T25551] veth0_to_bond: left promiscuous mode [ 801.540977][T25551] bond6: (slave veth0_to_bond): Enslaving as an active interface with a down link [ 801.550657][T25554] bond6: entered promiscuous mode [ 801.622631][T25556] bridge0: port 1(bridge_slave_0) entered disabled state [ 801.623034][T25556] bridge0: port 1(bridge_slave_0) entered blocking state [ 801.623190][T25556] bridge0: port 1(bridge_slave_0) entered forwarding state [ 801.705327][T25569] __nla_validate_parse: 4 callbacks suppressed [ 801.705351][T25569] netlink: 4 bytes leftover after parsing attributes in process `syz.0.5008'. [ 801.711413][T25569] netlink: 44 bytes leftover after parsing attributes in process `syz.0.5008'. [ 802.694659][T25599] ip_tables: iptables: counters copy to user failed while replacing table [ 802.700962][T25606] netlink: 256 bytes leftover after parsing attributes in process `syz.1.5013'. [ 802.710916][T25588] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 802.744974][T25599] netlink: 20 bytes leftover after parsing attributes in process `syz.1.5013'. [ 802.760768][T25605] netlink: 96 bytes leftover after parsing attributes in process `syz.0.5015'. [ 802.761275][ C0] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 802.761497][ C0] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 802.761711][ C0] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 802.795472][T25599] netlink: 8 bytes leftover after parsing attributes in process `syz.1.5013'. [ 802.922747][ T5868] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 802.965684][T25611] netlink: 'syz.4.5016': attribute type 1 has an invalid length. [ 803.081980][ T7368] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 803.563670][ C0] bridge0: received packet on geneve0 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:1) [ 803.697697][T25637] netlink: 236 bytes leftover after parsing attributes in process `syz.3.5026'. [ 803.697730][T25637] netlink: 236 bytes leftover after parsing attributes in process `syz.3.5026'. [ 803.800166][T25648] netlink: 8 bytes leftover after parsing attributes in process `syz.2.5029'. [ 803.889098][T25650] mac80211_hwsim hwsim28 syzkaller0: entered promiscuous mode [ 803.889342][T25650] mac80211_hwsim hwsim28 syzkaller0: entered allmulticast mode [ 804.008771][T25653] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 804.099113][T25660] x_tables: ip6_tables: NETMAP.0 target: invalid size 40 (kernel) != (user) 0 [ 804.311352][T25664] netlink: 120 bytes leftover after parsing attributes in process `syz.3.5031'. [ 804.444460][T25673] gretap0: entered promiscuous mode [ 805.568571][T25678] infiniband syz1: set active [ 805.568649][T25678] infiniband syz1: added team_slave_0 [ 805.590790][T25678] workqueue: Failed to create a rescuer kthread for wq "ib_mad1": -EINTR [ 805.596915][T25678] infiniband syz1: Couldn't open port 1 [ 805.597217][T25678] smbdirect: ib_dev[syz1]: added: IB_CA max_fast_reg_page_list_len=512 device_cap_flags=0x1c001223c76 kernel_cap_flags=0x14 page_size_cap=0xfffff000 [ 805.597252][T25678] smbdirect: ib_dev[syz1]: num_ports=1 max_qp_rd_atom=128 max_qp_init_rd_atom=128 max_sgl_rd=0 max_sge_rd=32 max_cqe=32767 max_qp_wr=1048576 max_send_sge=32 max_recv_sge=32 [ 805.597297][T25678] smbdirect: ib_dev[syz1]PORT[1]: iwarp=0 ib=0 roce=1 v1=0 v2=1 core_cap_flags=0x803005 [ 805.726335][T25678] RDS/IB: syz1: added [ 805.726395][T25678] smc: adding ib device syz1 with port count 1 [ 805.726418][T25678] smc: ib device syz1 port 1 has no pnetid [ 805.730136][T25719] bond7: option all_slaves_active: invalid value (179) [ 805.812584][T25719] bond7 (unregistering): Released all slaves [ 806.041673][ C1] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 806.041980][ C1] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 806.042261][ C1] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 806.122991][ T7368] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 806.255591][T25729] ip6t_rt: too many addresses specified [ 807.446532][T25758] netlink: 'syz.0.5059': attribute type 2 has an invalid length. [ 807.446555][T25758] __nla_validate_parse: 4 callbacks suppressed [ 807.446568][T25758] netlink: 244 bytes leftover after parsing attributes in process `syz.0.5059'. [ 807.448108][T25758] netlink: 'syz.0.5059': attribute type 21 has an invalid length. [ 807.485327][T25757] A link change request failed with some changes committed already. Interface wg2 may have been left with an inconsistent configuration, please check. [ 807.917495][T25773] netlink: 'syz.0.5064': attribute type 10 has an invalid length. [ 807.918995][T25773] bridge0: port 2(bridge_slave_1) entered disabled state [ 807.919662][T25773] bridge0: port 1(bridge_slave_0) entered disabled state [ 808.053013][T25777] netlink: 4 bytes leftover after parsing attributes in process `syz.0.5064'. [ 808.087165][T25773] bridge0: port 2(bridge_slave_1) entered blocking state [ 808.087336][T25773] bridge0: port 2(bridge_slave_1) entered forwarding state [ 808.087677][T25773] bridge0: port 1(bridge_slave_0) entered blocking state [ 808.087852][T25773] bridge0: port 1(bridge_slave_0) entered forwarding state [ 808.132336][T25773] .`: (slave bridge0): Enslaving as an active interface with an up link [ 808.138813][T25777] bridge_slave_1: left allmulticast mode [ 808.138837][T25777] bridge_slave_1: left promiscuous mode [ 808.139033][T25777] bridge0: port 2(bridge_slave_1) entered disabled state [ 808.185874][T25777] bridge_slave_0: left allmulticast mode [ 808.188109][T25777] bridge_slave_0: left promiscuous mode [ 808.189113][T25777] bridge0: port 1(bridge_slave_0) entered disabled state [ 808.254310][T25777] .`: (slave bridge0): Releasing backup interface [ 808.644203][T25788] netlink: 'syz.1.5067': attribute type 58 has an invalid length. [ 808.644227][T25788] netlink: 20 bytes leftover after parsing attributes in process `syz.1.5067'. [ 808.709926][T17126] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 809.163341][ T7368] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 809.224831][T25807] netlink: 'syz.0.5072': attribute type 1 has an invalid length. [ 809.420483][T25807] netlink: 4 bytes leftover after parsing attributes in process `syz.0.5072'. [ 809.481343][ C1] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 809.481681][ C1] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 809.481995][ C1] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 809.576336][T25807] bond6: (slave bridge0): making interface the new active one [ 809.577626][T25807] bond6: (slave bridge0): Enslaving as an active interface with an up link [ 810.462281][T25846] netlink: 72 bytes leftover after parsing attributes in process `syz.0.5079'. [ 810.677147][T25852] netlink: 24 bytes leftover after parsing attributes in process `syz.0.5079'. [ 811.461254][T25870] netlink: 72 bytes leftover after parsing attributes in process `syz.0.5083'. [ 811.948945][T25883] netlink: 8 bytes leftover after parsing attributes in process `syz.1.5087'. [ 811.948982][T25883] netlink: 12 bytes leftover after parsing attributes in process `syz.1.5087'. [ 811.981433][T25884] netlink: 8 bytes leftover after parsing attributes in process `syz.1.5087'. [ 812.211950][ T7366] net_ratelimit: 4 callbacks suppressed [ 812.211969][ T7366] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 812.317076][T25898] Can not set IPV6_FL_F_REFLECT if flowlabel_consistency sysctl is enable [ 812.411733][T25898] syzkaller0: entered promiscuous mode [ 812.411937][T25898] syzkaller0: entered allmulticast mode [ 812.554655][T25905] __nla_validate_parse: 1 callbacks suppressed [ 812.554678][T25905] netlink: 165 bytes leftover after parsing attributes in process `syz.4.5090'. [ 812.611670][T25909] netlink: 20 bytes leftover after parsing attributes in process `syz.3.5096'. [ 812.615253][T25910] netlink: 32 bytes leftover after parsing attributes in process `syz.3.5096'. [ 812.841488][ C1] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 812.841944][ C1] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 812.842321][ C1] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 813.275252][T25931] netlink: 60 bytes leftover after parsing attributes in process `syz.1.5100'. [ 813.402437][T25936] netlink: 60 bytes leftover after parsing attributes in process `syz.1.5100'. [ 813.776574][T25958] netlink: 24 bytes leftover after parsing attributes in process `syz.2.5104'. [ 813.810362][T25961] syzkaller0: left promiscuous mode [ 813.810386][T25961] syzkaller0: left allmulticast mode [ 813.836696][T17126] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 813.864435][T25967] netlink: 24 bytes leftover after parsing attributes in process `syz.2.5104'. [ 813.871707][ T50] netdevsim netdevsim4 netdevsim3: unset [0, 0] type 1 family 0 port 8472 - 0 [ 813.879359][T17116] netdevsim netdevsim4 netdevsim2: unset [0, 0] type 1 family 0 port 8472 - 0 [ 813.928793][T17116] netdevsim netdevsim4 netdevsim1: unset [0, 0] type 1 family 0 port 8472 - 0 [ 813.928845][T17116] netdevsim netdevsim4 netdevsim0: unset [0, 0] type 1 family 0 port 8472 - 0 [ 814.016778][T25976] IPv6: NLM_F_CREATE should be specified when creating new route [ 814.242640][T25980] batadv_slave_1: entered promiscuous mode [ 814.280929][T25980] netlink: 4 bytes leftover after parsing attributes in process `syz.1.5110'. [ 814.450406][T25982] netlink: 9 bytes leftover after parsing attributes in process `syz.4.5111'. [ 814.472945][T25982] netlink: 9 bytes leftover after parsing attributes in process `syz.4.5111'. [ 814.491872][T25980] batadv_slave_1 (unregistering): left promiscuous mode [ 814.827201][T26000] sctp: [Deprecated]: syz.2.5116 (pid 26000) Use of struct sctp_assoc_value in delayed_ack socket option. [ 814.827201][T26000] Use struct sctp_sack_info instead [ 814.942073][T26005] sctp: [Deprecated]: syz.2.5116 (pid 26005) Use of struct sctp_assoc_value in delayed_ack socket option. [ 814.942073][T26005] Use struct sctp_sack_info instead [ 815.242893][ T7366] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 815.403642][T26019] netdevsim netdevsim4: Direct firmware load for .. failed with error -2 [ 815.403674][T26019] netdevsim netdevsim4: Falling back to sysfs fallback for: .. [ 816.201342][ C0] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 816.201658][ C0] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 816.201939][ C0] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 816.611494][T26047] sctp: [Deprecated]: syz.3.5132 (pid 26047) Use of struct sctp_assoc_value in delayed_ack socket option. [ 816.611494][T26047] Use struct sctp_sack_info instead [ 818.292027][ T7368] net_ratelimit: 2 callbacks suppressed [ 818.292047][ T7368] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 818.394331][T26107] __nla_validate_parse: 6 callbacks suppressed [ 818.394354][T26107] netlink: 8 bytes leftover after parsing attributes in process `syz.4.5149'. [ 818.586025][T26116] netlink: 'syz.4.5153': attribute type 64 has an invalid length. [ 818.587971][T26116] bridge0: port 1(geneve0) entered disabled state [ 818.632353][T26113] netlink: 'syz.4.5153': attribute type 64 has an invalid length. [ 818.710745][T26116] netlink: 'syz.4.5153': attribute type 64 has an invalid length. [ 818.710944][T26122] netlink: 'syz.4.5153': attribute type 64 has an invalid length. [ 818.740578][T26113] bond5: option tlb_dynamic_lb: mode dependency failed, not supported in mode balance-rr(0) [ 818.755355][T26113] bond5 (unregistering): Released all slaves [ 818.874696][T26120] bond5: option tlb_dynamic_lb: mode dependency failed, not supported in mode balance-rr(0) [ 818.878837][T26120] bond5 (unregistering): Released all slaves [ 818.926550][ T5868] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 819.016594][T26123] netlink: 8 bytes leftover after parsing attributes in process `syz.1.5154'. [ 819.411288][T26140] netlink: 4 bytes leftover after parsing attributes in process `syz.2.5157'. [ 819.426520][T26144] netlink: 8 bytes leftover after parsing attributes in process `syz.1.5158'. [ 819.500729][T26144] netlink: 8 bytes leftover after parsing attributes in process `syz.1.5158'. [ 819.641349][ C0] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 819.641600][ C0] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 819.641807][ C0] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 819.792136][T26159] 8021q: VLANs not supported on sit0 [ 819.792333][T26159] 8021q: VLANs not supported on sit0 [ 819.792424][T26159] 8021q: VLANs not supported on sit0 [ 819.792514][T26159] 8021q: VLANs not supported on sit0 [ 819.792600][T26159] 8021q: VLANs not supported on sit0 [ 819.792715][T26159] 8021q: VLANs not supported on sit0 [ 819.792801][T26159] 8021q: VLANs not supported on sit0 [ 819.792885][T26159] 8021q: VLANs not supported on sit0 [ 819.792971][T26159] 8021q: VLANs not supported on sit0 [ 819.793086][T26159] 8021q: VLANs not supported on sit0 [ 819.793173][T26159] 8021q: VLANs not supported on sit0 [ 819.793258][T26159] 8021q: VLANs not supported on sit0 [ 819.793354][T26159] 8021q: VLANs not supported on sit0 [ 819.793467][T26159] 8021q: VLANs not supported on sit0 [ 819.793552][T26159] 8021q: VLANs not supported on sit0 [ 819.793638][T26159] 8021q: VLANs not supported on sit0 [ 819.793723][T26159] 8021q: VLANs not supported on sit0 [ 819.912611][T26159] 8021q: VLANs not supported on sit0 [ 819.912712][T26159] 8021q: VLANs not supported on sit0 [ 819.912780][T26159] 8021q: VLANs not supported on sit0 [ 819.912874][T26159] 8021q: VLANs not supported on sit0 [ 819.913566][T26159] 8021q: VLANs not supported on sit0 [ 819.913665][T26159] 8021q: VLANs not supported on sit0 [ 819.913735][T26159] 8021q: VLANs not supported on sit0 [ 819.913806][T26159] 8021q: VLANs not supported on sit0 [ 819.913884][T26159] 8021q: VLANs not supported on sit0 [ 819.913957][T26159] 8021q: VLANs not supported on sit0 [ 819.914026][T26159] 8021q: VLANs not supported on sit0 [ 819.914100][T26159] 8021q: VLANs not supported on sit0 [ 819.914384][T26159] 8021q: VLANs not supported on sit0 [ 819.914467][T26159] 8021q: VLANs not supported on sit0 [ 819.914540][T26159] 8021q: VLANs not supported on sit0 [ 819.914616][T26159] 8021q: VLANs not supported on sit0 [ 820.253742][ T7368] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 821.044227][T26191] netlink: 'syz.0.5164': attribute type 10 has an invalid length. [ 821.224566][T26201] ip6_tables: ip6tables: counters copy to user failed while replacing table [ 821.286318][T26198] IPVS: persistence engine module ip_vs_pe_À not found [ 821.322220][ T7365] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 821.467098][T26207] openvswitch: netlink: IPv4 frag type 228 is out of range max 2 [ 821.673838][T26215] netlink: 224 bytes leftover after parsing attributes in process `syz.1.5174'. [ 821.830734][T26216] bridge2: entered promiscuous mode [ 821.833042][T26216] bridge2: entered allmulticast mode [ 822.087730][T26224] batadv_slave_0: Caught tx_queue_len zero misconfig [ 822.215765][T26229] netlink: 'syz.4.5177': attribute type 1 has an invalid length. [ 822.215788][T26229] netlink: 224 bytes leftover after parsing attributes in process `syz.4.5177'. [ 822.535842][T26238] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 822.978216][T26246] netlink: 24 bytes leftover after parsing attributes in process `syz.2.5184'. [ 823.100860][T26248] netlink: 56 bytes leftover after parsing attributes in process `syz.1.5185'. [ 823.288973][T26256] xt_hl: Unknown Hop Limit match mode: 206 [ 823.353159][T26260] netlink: 8 bytes leftover after parsing attributes in process `syz.3.5186'. [ 823.370482][T26248] bond7 (unregistering): Released all slaves [ 823.964141][ T9900] net_ratelimit: 3 callbacks suppressed [ 823.964164][ T9900] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 824.328281][T26294] netlink: 8 bytes leftover after parsing attributes in process `syz.4.5196'. [ 824.365696][ T7368] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 824.840954][T26305] netlink: 16 bytes leftover after parsing attributes in process `syz.2.5201'. [ 824.975150][T26301] netlink: 28 bytes leftover after parsing attributes in process `syz.4.5198'. [ 824.975187][T26301] netlink: 'syz.4.5198': attribute type 7 has an invalid length. [ 824.975201][T26301] netlink: 'syz.4.5198': attribute type 8 has an invalid length. [ 824.975215][T26301] netlink: 4 bytes leftover after parsing attributes in process `syz.4.5198'. [ 825.028904][T26311] Bluetooth: hci0: unsupported parameter 5135 [ 825.028926][T26311] Bluetooth: hci0: unsupported parameter 8192 [ 825.028941][T26311] Bluetooth: hci0: unsupported parameter 5135 [ 825.028955][T26311] Bluetooth: hci0: unsupported parameter 8192 [ 825.286939][T26322] netlink: 'syz.2.5203': attribute type 5 has an invalid length. [ 825.364754][T26321] bond7: option ad_actor_sys_prio: mode dependency failed, not supported in mode balance-alb(6) [ 825.390243][T26321] bond7 (unregistering): Released all slaves [ 825.464721][T26329] ip6_tables: ip6tables: counters copy to user failed while replacing table [ 825.546420][T26321] bond7: option ad_actor_sys_prio: mode dependency failed, not supported in mode balance-alb(6) [ 825.709898][T26321] bond7 (unregistering): Released all slaves [ 826.065505][T26328] bond0: mtu less than device minimum [ 826.110668][T26347] netlink: 4 bytes leftover after parsing attributes in process `syz.2.5210'. [ 826.156926][T26345] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 826.215941][T26347] veth1_vlan: left promiscuous mode [ 826.356702][T26351] netlink: 104 bytes leftover after parsing attributes in process `syz.4.5211'. [ 826.356971][T26354] netlink: 104 bytes leftover after parsing attributes in process `syz.4.5211'. [ 826.361340][ C1] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 826.361650][ C1] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 826.361908][ C1] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 826.512388][T26362] ip6_tables: ip6tables: counters copy to user failed while replacing table [ 826.658173][T26362] netlink: 20 bytes leftover after parsing attributes in process `syz.0.5213'. [ 826.685549][T26362] netlink: 'syz.0.5213': attribute type 83 has an invalid length. [ 826.818048][T26368] netlink: 'syz.2.5215': attribute type 5 has an invalid length. [ 827.094805][T26380] netlink: 60 bytes leftover after parsing attributes in process `syz.0.5220'. [ 827.100683][T26381] netlink: 12 bytes leftover after parsing attributes in process `syz.0.5220'. [ 827.493023][ T7366] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 828.155867][T26413] netlink: 'syz.0.5231': attribute type 83 has an invalid length. [ 828.467824][T26421] x_tables: unsorted underflow at hook 1 [ 829.002572][ T9891] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 829.812160][ T7366] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 829.891355][ C0] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 829.891538][ C0] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 829.891696][ C0] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 830.531555][ T7368] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 831.751604][T26459] __nla_validate_parse: 22 callbacks suppressed [ 831.751626][T26459] netlink: 4 bytes leftover after parsing attributes in process `syz.2.5242'. [ 831.816900][T26458] netlink: 4 bytes leftover after parsing attributes in process `syz.2.5242'. [ 832.995602][T26502] x_tables: ip_tables: osf match: only valid for protocol 6 [ 833.241270][ C1] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 833.241552][ C1] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 833.241800][ C1] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 833.297297][T26486] mac80211_hwsim hwsim28 syzkaller0: left promiscuous mode [ 833.420692][T26489] netlink: 'syz.0.5248': attribute type 1 has an invalid length. [ 833.463393][ T9900] netdevsim netdevsim4 netdevsim3: set [0, 0] type 1 family 0 port 8472 - 0 [ 833.467459][ T5868] netdevsim netdevsim4 netdevsim2: set [0, 0] type 1 family 0 port 8472 - 0 [ 833.467505][ T5868] netdevsim netdevsim4 netdevsim1: set [0, 0] type 1 family 0 port 8472 - 0 [ 833.467545][ T5868] netdevsim netdevsim4 netdevsim0: set [0, 0] type 1 family 0 port 8472 - 0 [ 833.526399][T26510] netlink: 24 bytes leftover after parsing attributes in process `syz.4.5254'. [ 833.528506][T26510] netlink: 24 bytes leftover after parsing attributes in process `syz.4.5254'. [ 833.564797][ T7366] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 833.929669][T26522] netlink: 'syz.2.5258': attribute type 3 has an invalid length. [ 833.985881][T26524] x_tables: duplicate underflow at hook 2 [ 834.279676][T26535] syzkaller0: entered promiscuous mode [ 834.279700][T26535] syzkaller0: entered allmulticast mode [ 834.289829][ T9900] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 834.315346][T26537] netlink: 'syz.3.5264': attribute type 10 has an invalid length. [ 835.093326][T26567] netlink: 36 bytes leftover after parsing attributes in process `syz.2.5270'. [ 835.277970][T26529] infiniband syz0: set active [ 835.277994][T26529] infiniband syz0: added bond_slave_1 [ 835.298439][T26529] workqueue: Failed to create a rescuer kthread for wq "ib_mad1": -EINTR [ 835.309513][T26529] infiniband syz0: Couldn't open port 1 [ 835.335765][T26529] smbdirect: ib_dev[syz0]: added: IB_CA max_fast_reg_page_list_len=512 device_cap_flags=0x1c001223c76 kernel_cap_flags=0x14 page_size_cap=0xfffff000 [ 835.335802][T26529] smbdirect: ib_dev[syz0]: num_ports=1 max_qp_rd_atom=128 max_qp_init_rd_atom=128 max_sgl_rd=0 max_sge_rd=32 max_cqe=32767 max_qp_wr=1048576 max_send_sge=32 max_recv_sge=32 [ 835.335842][T26529] smbdirect: ib_dev[syz0]PORT[1]: iwarp=0 ib=0 roce=1 v1=0 v2=1 core_cap_flags=0x803005 [ 835.542057][T26529] RDS/IB: syz0: added [ 835.542132][T26529] smc: adding ib device syz0 with port count 1 [ 835.542161][T26529] smc: ib device syz0 port 1 has no pnetid [ 836.020288][T26591] netlink: 36 bytes leftover after parsing attributes in process `syz.4.5275'. [ 836.467284][T26601] netlink: 'syz.3.5281': attribute type 15 has an invalid length. [ 836.467310][T26601] netlink: 24 bytes leftover after parsing attributes in process `syz.3.5281'. [ 836.569419][T26606] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 836.593096][T26607] netlink: 4 bytes leftover after parsing attributes in process `syz.4.5282'. [ 836.611832][ C0] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 836.612232][ C0] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 836.612998][ C0] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 836.625310][ T7368] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 837.121751][T26621] netlink: 40 bytes leftover after parsing attributes in process `syz.2.5286'. [ 837.689836][T26637] netlink: 'syz.4.5293': attribute type 1 has an invalid length. [ 837.694560][T26637] netlink: 'syz.4.5293': attribute type 1 has an invalid length. [ 837.823574][T26638] sit0: left promiscuous mode [ 838.522022][T26648] tipc: Enabling of bearer rejected, failed to enable media [ 839.303126][T26679] Bluetooth: hci2: Opcode 0x0401 failed: -22 [ 839.321574][T17125] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 839.411109][ T7368] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 839.565764][T26685] ip6gre1: entered promiscuous mode [ 839.565788][T26685] ip6gre1: entered allmulticast mode [ 839.598676][ T5868] ip6_tunnel: ip6gre1 xmit: Local address not yet configured! [ 839.622855][ T7366] ip6_tunnel: ip6gre1 xmit: Local address not yet configured! [ 839.642683][ T7366] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 839.646695][ T5868] ip6_tunnel: ip6gre1 xmit: Local address not yet configured! [ 839.784275][T26693] netlink: get zone limit has 8 unknown bytes [ 839.790627][T26693] ip_tables: iptables: counters copy to user failed while replacing table [ 839.806308][T26693] netlink: 'syz.2.5306': attribute type 7 has an invalid length. [ 839.815105][ T7368] ip6_tunnel: ip6gre1 xmit: Local address not yet configured! [ 839.972065][ C0] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 839.972360][ C0] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 839.972648][ C0] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 840.162757][ T7368] ip6_tunnel: ip6gre1 xmit: Local address not yet configured! [ 841.867927][T26755] netlink: 232 bytes leftover after parsing attributes in process `syz.2.5323'. [ 842.692739][ T7368] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 842.737454][T26771] netlink: 8 bytes leftover after parsing attributes in process `syz.2.5330'. [ 842.963086][T26780] Cannot find map_set index 135 as target [ 842.967374][T26780] bridge_slave_1: entered promiscuous mode [ 842.968314][T26780] netlink: 12 bytes leftover after parsing attributes in process `syz.1.5333'. [ 843.096369][T26782] netlink: 52 bytes leftover after parsing attributes in process `syz.3.5334'. [ 843.294284][T26795] netlink: 'syz.0.5337': attribute type 1 has an invalid length. [ 843.320238][T26780] bridge_slave_1 (unregistering): left promiscuous mode [ 843.331152][ C0] ip6_tunnel: ip6gre1 xmit: Local address not yet configured! [ 843.401307][ C1] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 843.487546][T26795] 8021q: adding VLAN 0 to HW filter on device bond8 [ 843.535935][T26795] syz_tun: entered allmulticast mode [ 843.589243][T26795] dvmrp8: entered allmulticast mode [ 843.621648][T26794] syz_tun: left allmulticast mode [ 843.676759][T26802] netlink: 'syz.4.5339': attribute type 11 has an invalid length. [ 843.941607][T26811] bond5: option mode: invalid value (10) [ 843.968782][T26811] bond5 (unregistering): Released all slaves [ 844.156071][T26824] netlink: 16 bytes leftover after parsing attributes in process `syz.1.5344'. [ 844.268016][T26827] netlink: 4 bytes leftover after parsing attributes in process `syz.3.5345'. [ 844.330624][T26829] netlink: 64 bytes leftover after parsing attributes in process `syz.3.5346'. [ 844.549700][T17125] net_ratelimit: 2 callbacks suppressed [ 844.549721][T17125] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 845.067095][T26851] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 845.240181][T26851] A link change request failed with some changes committed already. Interface virt_wifi0 may have been left with an inconsistent configuration, please check. [ 845.269804][T17125] ip6_tunnel: ip6gre2 xmit: Local address not yet configured! [ 845.282459][T17125] ip6_tunnel: ip6gre2 xmit: Local address not yet configured! [ 845.302778][ T7365] ip6_tunnel: ip6gre2 xmit: Local address not yet configured! [ 845.387634][T26861] RDS: rds_bind could not find a transport for fe80::, load rds_tcp or rds_rdma? [ 845.526219][T26864] openvswitch: netlink: Flow key attr not present in new flow. [ 845.722266][ T7368] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 845.803076][ T7366] ip6_tunnel: ip6gre2 xmit: Local address not yet configured! [ 845.823111][ T7366] ip6_tunnel: ip6gre2 xmit: Local address not yet configured! [ 846.028900][T26887] netdevsim netdevsim0 netdevsim3: unset [1, 0] type 2 family 0 port 6081 - 0 [ 846.191243][T17125] netdevsim netdevsim0 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 846.303106][T26882] xt_cluster: node mask cannot exceed total number of nodes [ 846.771239][ C0] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 846.771476][ C0] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 846.771682][ C0] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 846.885374][T26908] netlink: 4 bytes leftover after parsing attributes in process `syz.4.5366'. [ 847.188344][T26917] netlink: 5 bytes leftover after parsing attributes in process `syz.0.5369'. [ 847.188370][T26917] netlink: 12 bytes leftover after parsing attributes in process `syz.0.5369'. [ 847.319728][T26919] xt_ecn: cannot match TCP bits for non-tcp packets [ 847.356628][T26920] ip6_tables: ip6tables: counters copy to user failed while replacing table [ 848.221590][T26966] x_tables: duplicate underflow at hook 2 [ 848.519148][T26976] netlink: 8 bytes leftover after parsing attributes in process `syz.3.5382'. [ 848.519181][T26976] netlink: 12 bytes leftover after parsing attributes in process `syz.3.5382'. [ 848.778271][T26989] netlink: 8 bytes leftover after parsing attributes in process `syz.3.5382'. [ 848.778296][T26989] netlink: 12 bytes leftover after parsing attributes in process `syz.3.5382'. [ 848.881866][ T7368] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 849.001903][ T7366] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 849.183026][ T5280] 8021q: adding VLAN 0 to HW filter on device netdevsim3 [ 849.401529][ C0] ip6_tunnel: ip6gre2 xmit: Local address not yet configured! [ 850.018921][T27025] netlink: 164 bytes leftover after parsing attributes in process `syz.1.5395'. [ 850.098700][T27027] netlink: 'syz.1.5395': attribute type 3 has an invalid length. [ 850.098724][T27027] netlink: 32 bytes leftover after parsing attributes in process `syz.1.5395'. [ 850.121818][ C1] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 850.122118][ C1] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 850.122433][ C1] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 850.281645][T17127] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 850.668269][T27037] netlink: 12 bytes leftover after parsing attributes in process `syz.3.5397'. [ 850.921264][ C0] ip6_tunnel: ip6gre1 xmit: Local address not yet configured! [ 851.032928][T27045] netlink: 104 bytes leftover after parsing attributes in process `syz.2.5400'. [ 851.057791][ T31] audit: type=1107 audit(1790557782.386:5): pid=27043 uid=0 auid=4294967295 ses=4294967295 subj=unconfined msg='Ù‹5ž÷Œ•%èÍUýAÊÃËÙ ë0ä™l…t¿Ý•/Öÿ Ž6òŠ¨Šç›' [ 851.093349][T27049] netlink: 4 bytes leftover after parsing attributes in process `syz.0.5401'. [ 851.093374][T27049] netlink: 2 bytes leftover after parsing attributes in process `syz.0.5401'. [ 851.387771][T27060] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check. [ 851.553721][T27066] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 852.202385][ T7365] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 852.953638][T27096] dvmrp0: entered allmulticast mode [ 853.401326][ C1] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 853.401588][ C1] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 853.401846][ C1] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 853.942739][T27143] __nla_validate_parse: 6 callbacks suppressed [ 853.942763][T27143] netlink: 8 bytes leftover after parsing attributes in process `syz.1.5420'. [ 853.942794][T27143] netlink: 4 bytes leftover after parsing attributes in process `syz.1.5420'. [ 854.360929][T27160] netlink: 'syz.0.5424': attribute type 1 has an invalid length. [ 854.372154][T27162] netlink: 'syz.0.5424': attribute type 1 has an invalid length. [ 854.497017][T27160] bond9: entered promiscuous mode [ 854.497483][T27160] 8021q: adding VLAN 0 to HW filter on device bond9 [ 854.520390][T27169] netlink: 'syz.3.5425': attribute type 4 has an invalid length. [ 854.684296][T27170] 8021q: adding VLAN 0 to HW filter on device bond9 [ 854.685480][T27170] bond9: (slave ip6gre2): The slave device specified does not support setting the MAC address [ 854.685502][T27170] bond9: (slave ip6gre2): Setting fail_over_mac to active for active-backup mode [ 854.717203][T27170] bond9: (slave ip6gre2): making interface the new active one [ 854.717227][T27170] ip6gre2: entered promiscuous mode [ 854.730913][T27170] bond9: (slave ip6gre2): Enslaving as an active interface with an up link [ 854.735389][T27169] netlink: 'syz.3.5425': attribute type 4 has an invalid length. [ 854.929052][T27180] netlink: 60 bytes leftover after parsing attributes in process `syz.4.5427'. [ 854.929080][T27180] netlink: 60 bytes leftover after parsing attributes in process `syz.4.5427'. [ 855.151691][T27194] netlink: 'syz.0.5430': attribute type 1 has an invalid length. [ 855.243312][ T7365] net_ratelimit: 1 callbacks suppressed [ 855.243333][ T7365] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 855.322514][T27194] 8021q: adding VLAN 0 to HW filter on device bond10 [ 856.065736][ T7427] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 856.548570][T27232] netlink: 24 bytes leftover after parsing attributes in process `syz.4.5439'. [ 856.563006][ T5624] block nbd3: Receive control failed (result -32) [ 856.564178][T17260] block nbd2: Receive control failed (result -32) [ 856.725150][T27246] netlink: 8 bytes leftover after parsing attributes in process `syz.1.5441'. [ 856.725175][T27246] netlink: 4 bytes leftover after parsing attributes in process `syz.1.5441'. [ 856.835665][T27244] netlink: 8 bytes leftover after parsing attributes in process `syz.1.5441'. [ 856.835689][T27244] netlink: 4 bytes leftover after parsing attributes in process `syz.1.5441'. [ 856.841393][ C1] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 856.841745][ C1] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 856.842062][ C1] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 856.987605][T27250] can: request_module (can-proto-0) failed. [ 857.113038][T27256] netlink: 20 bytes leftover after parsing attributes in process `syz.3.5443'. [ 857.504076][T27265] block nbd4: Unsupported socket: should be TCP or UNIX. [ 857.568682][T27268] netlink: 'syz.0.5447': attribute type 2 has an invalid length. [ 857.972304][ C0] ip6_tunnel: ip6gre2 xmit: Local address not yet configured! [ 858.099067][T27278] netlink: 'syz.0.5450': attribute type 1 has an invalid length. [ 858.283401][ T7366] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 858.531668][T27302] bridge0: port 3(dummy0) entered blocking state [ 858.533860][T27302] bridge0: port 3(dummy0) entered disabled state [ 858.534240][T27302] dummy0: entered allmulticast mode [ 858.551491][T27302] dummy0: entered promiscuous mode [ 858.619736][ T7366] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 858.986188][T27315] netlink: 'syz.2.5462': attribute type 2 has an invalid length. [ 859.278821][T27326] __nla_validate_parse: 7 callbacks suppressed [ 859.278843][T27326] netlink: 20 bytes leftover after parsing attributes in process `syz.3.5463'. [ 859.278871][T27326] netlink: 120 bytes leftover after parsing attributes in process `syz.3.5463'. [ 859.278923][T27326] netlink: 8 bytes leftover after parsing attributes in process `syz.3.5463'. [ 859.542482][T27335] netlink: 4 bytes leftover after parsing attributes in process `syz.2.5467'. [ 859.542695][T27335] netlink: 4 bytes leftover after parsing attributes in process `syz.2.5467'. [ 859.542900][T27335] netlink: 4 bytes leftover after parsing attributes in process `syz.2.5467'. [ 859.543083][T27335] netlink: 4 bytes leftover after parsing attributes in process `syz.2.5467'. [ 859.543268][T27335] netlink: 4 bytes leftover after parsing attributes in process `syz.2.5467'. [ 859.543459][T27335] netlink: 4 bytes leftover after parsing attributes in process `syz.2.5467'. [ 859.543650][T27335] netlink: 4 bytes leftover after parsing attributes in process `syz.2.5467'. [ 860.096103][ T9887] dvmrp0: left allmulticast mode [ 860.101514][ T9887] tipc: Resetting bearer [ 860.130729][T27357] ip6t_srh: unknown srh invflags 4000 [ 861.780755][ T9887] bond3 (unregistering): (slave erspan1): Releasing active interface [ 861.780787][ T9887] erspan1 (unregistering): left promiscuous mode [ 862.032518][ T9887] tipc: Disabling bearer [ 862.138041][ T9887] bond0 (unregistering): Released all slaves [ 862.150470][ T9887] bond1 (unregistering): Released all slaves [ 862.184041][ T9887] bond2 (unregistering): Released all slaves [ 862.209354][ T9887] bond3 (unregistering): Released all slaves [ 862.230550][ T9887] bond4 (unregistering): Released all slaves [ 862.260138][ T9887] bond5 (unregistering): Released all slaves [ 862.284753][ T9887] bond6 (unregistering): Released all slaves [ 862.309573][ T9887] bond7 (unregistering): Released all slaves [ 862.338635][ T9887] bond8 (unregistering): Released all slaves [ 862.363454][ T9887] bond9 (unregistering): Released all slaves [ 862.387755][ T9887] bond10 (unregistering): Released all slaves [ 862.419519][ T9887] bond11 (unregistering): Released all slaves [ 862.446200][ T9887] bond12 (unregistering): Released all slaves [ 862.474712][ T9887] bond13 (unregistering): Released all slaves [ 862.496707][ T9887] bond14 (unregistering): Released all slaves [ 862.910806][T27384] netlink: 'syz.4.5481': attribute type 32 has an invalid length. [ 863.322261][ T9887] tipc: Disabling bearer [ 863.322402][ T9887] tipc: Left network mode [ 864.917469][T27440] Cannot find del_set index 0 as target [ 865.296287][T27449] netlink: 'syz.4.5499': attribute type 11 has an invalid length. [ 865.337884][T27455] __nla_validate_parse: 63 callbacks suppressed [ 865.340774][T27455] netlink: 1047 bytes leftover after parsing attributes in process `syz.0.5501'. [ 865.340796][T27455] veth0_to_bond: default FDB implementation only supports local addresses [ 865.507452][T27454] netdevsim netdevsim1 netdevsim0: left promiscuous mode [ 865.507671][T27454] netdevsim netdevsim1 netdevsim0: entered allmulticast mode [ 865.591966][ T9887] hsr_slave_0: left promiscuous mode [ 865.600407][ T9887] hsr_slave_1: left promiscuous mode [ 865.607111][ T9887] batman_adv: batadv0: Removing interface: ipvlan2 [ 865.624126][ T9887] batman_adv: batadv0: Removing interface: ipvlan3 [ 865.686969][ T9887] veth1_macvtap: left promiscuous mode [ 865.687006][ T9887] veth0_macvtap: left promiscuous mode [ 865.687290][ T9887] veth1_vlan: left promiscuous mode [ 865.733716][T27462] netlink: 8 bytes leftover after parsing attributes in process `syz.0.5501'. [ 865.733743][T27462] netlink: 12 bytes leftover after parsing attributes in process `syz.0.5501'. [ 866.499742][T27476] netlink: 12 bytes leftover after parsing attributes in process `syz.2.5505'. [ 866.921182][ C0] ip6_tunnel: ip6gre1 xmit: Local address not yet configured! [ 867.058092][T27488] ip_tables: iptables: counters copy to user failed while replacing table [ 867.115289][T27491] netlink: 8 bytes leftover after parsing attributes in process `syz.3.5509'. [ 867.115325][T27491] netlink: 8 bytes leftover after parsing attributes in process `syz.3.5509'. [ 868.399728][T27503] veth0: entered promiscuous mode [ 868.410743][T27502] xt_CT: You must specify a L4 protocol and not use inversions on it [ 868.413672][T27503] veth0: left promiscuous mode [ 868.595944][T27512] netlink: 12 bytes leftover after parsing attributes in process `syz.3.5518'. [ 868.724972][T27517] netlink: 24 bytes leftover after parsing attributes in process `syz.2.5521'. [ 868.866475][T27517] netlink: 24 bytes leftover after parsing attributes in process `syz.2.5521'. [ 869.005591][T27524] netlink: 4 bytes leftover after parsing attributes in process `syz.1.5520'. [ 869.329109][ T9887] IPVS: stop unused estimator thread 0... [ 870.215599][T27557] dvmrp8: entered allmulticast mode [ 870.445498][T27564] xt_socket: unknown flags 0xc [ 870.875394][T27577] SET target dimension over the limit! [ 870.894864][T27581] __nla_validate_parse: 1 callbacks suppressed [ 870.894900][T27581] netlink: 12 bytes leftover after parsing attributes in process `syz.1.5536'. [ 871.036059][T27588] veth0: Caught tx_queue_len zero misconfig [ 871.181642][T27595] netlink: 24 bytes leftover after parsing attributes in process `syz.1.5536'. [ 871.293488][T27598] openvswitch: netlink: Flow key attribute not present in set flow. [ 871.300587][T27598] netlink: 24 bytes leftover after parsing attributes in process `syz.0.5542'. [ 871.518072][T27581] batadv_slave_0: entered promiscuous mode [ 871.703887][T27579] batadv_slave_0: left promiscuous mode [ 871.854532][T27620] netlink: 28 bytes leftover after parsing attributes in process `syz.0.5545'. [ 871.939800][T27618] bond12 (unregistering): Released all slaves [ 872.389984][T27633] bridge0: port 1(geneve0) entered blocking state [ 872.390119][T27633] bridge0: port 1(geneve0) entered forwarding state [ 872.442318][ C1] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 872.443008][ C1] bridge0: received packet on geneve0 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:1) [ 872.444338][ T7392] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 872.448204][T27633] bridge0: port 3(dummy0) entered blocking state [ 872.448423][T27633] bridge0: port 3(dummy0) entered forwarding state [ 872.523242][T27633] A link change request failed with some changes committed already. Interface virt_wifi0 may have been left with an inconsistent configuration, please check. [ 872.553792][T16611] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 872.553996][ C1] bridge0: received packet on geneve0 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:1) [ 872.589272][T27641] netlink: 12 bytes leftover after parsing attributes in process `syz.1.5551'. [ 872.604658][T17260] block nbd4: Receive control failed (result -107) [ 872.653112][ T7368] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 872.653292][ C0] bridge0: received packet on geneve0 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:1) [ 872.755973][T27637] A link change request failed with some changes committed already. Interface virt_wifi0 may have been left with an inconsistent configuration, please check. [ 872.793952][T27650] netlink: 232 bytes leftover after parsing attributes in process `syz.2.5553'. [ 872.870940][T27646] netlink: 4552 bytes leftover after parsing attributes in process `syz.3.5554'. [ 872.883435][ T7368] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 873.722012][T27678] netlink: 'syz.4.5562': attribute type 5 has an invalid length. [ 873.723403][T27679] netlink: 4 bytes leftover after parsing attributes in process `syz.2.5561'. [ 873.767530][T27678] netlink: 'syz.4.5562': attribute type 5 has an invalid length. [ 873.789302][T27680] sctp: [Deprecated]: syz.3.5563 (pid 27680) Use of struct sctp_assoc_value in delayed_ack socket option. [ 873.789302][T27680] Use struct sctp_sack_info instead [ 873.833189][T27686] netlink: 12 bytes leftover after parsing attributes in process `syz.0.5565'. [ 873.833215][T27686] netlink: 12 bytes leftover after parsing attributes in process `syz.0.5565'. [ 874.304168][T27696] mac80211_hwsim hwsim28 syzkaller0: left allmulticast mode [ 874.343906][T27696] FAULT_INJECTION: forcing a failure. [ 874.343906][T27696] name fail_usercopy, interval 1, probability 0, space 0, times 1 [ 874.343949][T27696] CPU: 1 UID: 0 PID: 27696 Comm: syz.0.5567 Not tainted syzkaller #0 PREEMPT(full) [ 874.343976][T27696] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 09/16/2026 [ 874.343999][T27696] Call Trace: [ 874.344014][T27696] [ 874.344024][T27696] dump_stack_lvl+0xe8/0x150 [ 874.344064][T27696] should_fail_ex+0x410/0x560 [ 874.344097][T27696] _copy_to_user+0x31/0xb0 [ 874.344131][T27696] simple_read_from_buffer+0xe1/0x170 [ 874.344172][T27696] proc_fail_nth_read+0x1bb/0x230 [ 874.344194][T27696] ? common_file_perm+0x20e/0x2b0 [ 874.344236][T27696] ? __pfx_proc_fail_nth_read+0x10/0x10 [ 874.344264][T27696] ? rw_verify_area+0x24a/0x4c0 [ 874.344300][T27696] ? __pfx_proc_fail_nth_read+0x10/0x10 [ 874.344323][T27696] vfs_read+0x213/0xa80 [ 874.344378][T27696] ? __pfx___mutex_lock+0x10/0x10 [ 874.344410][T27696] ? __pfx_vfs_read+0x10/0x10 [ 874.344445][T27696] ? __fget_files+0x2a/0x420 [ 874.344482][T27696] ? __fget_files+0x3a2/0x420 [ 874.344511][T27696] ? __fget_files+0x2a/0x420 [ 874.344552][T27696] ksys_read+0x150/0x270 [ 874.344590][T27696] ? __pfx_ksys_read+0x10/0x10 [ 874.344636][T27696] do_syscall_64+0x166/0x520 [ 874.344665][T27696] ? trace_irq_disable+0x3b/0x140 [ 874.344687][T27696] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 874.344710][T27696] ? clear_bhb_loop+0x70/0xc0 [ 874.344737][T27696] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 874.344760][T27696] RIP: 0033:0x7f8c5775e98e [ 874.344781][T27696] Code: 08 0f 85 a5 a8 ff ff 49 89 fb 48 89 f0 48 89 d7 48 89 ce 4c 89 c2 4d 89 ca 4c 8b 44 24 08 4c 8b 4c 24 10 4c 89 5c 24 08 0f 05 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 80 00 00 00 00 48 83 ec 08 [ 874.344800][T27696] RSP: 002b:00007f8c585d0fe8 EFLAGS: 00000246 ORIG_RAX: 0000000000000000 [ 874.344825][T27696] RAX: ffffffffffffffda RBX: 00007f8c585d16c0 RCX: 00007f8c5775e98e [ 874.344843][T27696] RDX: 000000000000000f RSI: 00007f8c585d10a0 RDI: 000000000000000a [ 874.344858][T27696] RBP: 00007f8c585d1090 R08: 0000000000000000 R09: 0000000000000000 [ 874.344873][T27696] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 874.344887][T27696] R13: 00007f8c57a26038 R14: 00007f8c57a25fa0 R15: 00007fff8ba47688 [ 874.344923][T27696] [ 874.350099][T27697] Bluetooth: hci0: unsupported parameter 5134 [ 874.350119][T27697] Bluetooth: hci0: unsupported parameter 8192 [ 874.350134][T27697] Bluetooth: hci0: unsupported parameter 5134 [ 874.350148][T27697] Bluetooth: hci0: unsupported parameter 8192 [ 874.611576][ C0] ip6_tunnel: ip6gre2 xmit: Local address not yet configured! [ 875.063966][T27704] netlink: 'syz.1.5570': attribute type 1 has an invalid length. [ 875.063995][T27704] netlink: 'syz.1.5570': attribute type 1 has an invalid length. [ 875.510300][T27717] syzkaller0: entered promiscuous mode [ 875.510325][T27717] syzkaller0: entered allmulticast mode [ 875.579551][T27717] tipc: Enabled bearer , priority 0 [ 875.704115][T27716] tipc: Resetting bearer [ 875.731827][T27715] tipc: Resetting bearer [ 875.846936][T27715] tipc: Disabling bearer [ 875.875207][T27735] netlink: 'syz.4.5578': attribute type 8 has an invalid length. [ 875.966139][T27735] bridge0: port 3(dummy0) entered disabled state [ 875.966472][T27735] bridge0: port 1(geneve0) entered disabled state [ 876.251988][T27748] netlink: 'syz.3.5582': attribute type 1 has an invalid length. [ 876.363491][T27756] __nla_validate_parse: 4 callbacks suppressed [ 876.363512][T27756] netlink: 28 bytes leftover after parsing attributes in process `syz.2.5585'. [ 876.363540][T27756] netlink: 'syz.2.5585': attribute type 7 has an invalid length. [ 876.365160][T27756] netlink: 'syz.2.5585': attribute type 8 has an invalid length. [ 876.365178][T27756] netlink: 4 bytes leftover after parsing attributes in process `syz.2.5585'. [ 876.427287][T27757] netlink: 45 bytes leftover after parsing attributes in process `syz.2.5585'. [ 876.479473][T27758] No such timeout policy "s" [ 876.489315][T27748] 8021q: adding VLAN 0 to HW filter on device bond7 [ 876.505315][T27759] No such timeout policy "s" [ 876.552938][T27756] ip6gretap0: entered promiscuous mode [ 876.580474][T27756] ip6gretap0: left promiscuous mode [ 876.604685][T27764] netlink: 'syz.1.5586': attribute type 3 has an invalid length. [ 876.604709][T27764] netlink: 8 bytes leftover after parsing attributes in process `syz.1.5586'. [ 876.706441][T27748] bond7: (slave geneve3): making interface the new active one [ 876.710790][T27748] bond7: (slave geneve3): Enslaving as an active interface with an up link [ 876.821207][T17112] netdevsim netdevsim3 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 876.902874][ T9900] netdevsim netdevsim3 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 876.902927][ T9900] netdevsim netdevsim3 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 877.437118][T27794] netlink: 'syz.2.5595': attribute type 3 has an invalid length. [ 877.542903][T27804] 8021q: adding VLAN 0 to HW filter on device bond0 [ 877.766968][T16611] net_ratelimit: 30 callbacks suppressed [ 877.766990][T16611] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 877.822203][T27804] A link change request failed with some changes committed already. Interface hsr_slave_0 may have been left with an inconsistent configuration, please check. [ 878.049586][T27818] netlink: 8 bytes leftover after parsing attributes in process `syz.4.5602'. [ 878.080103][T27809] syzkaller1: entered promiscuous mode [ 878.080126][T27809] syzkaller1: entered allmulticast mode [ 878.201376][ C1] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 878.201961][ C1] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 878.310977][T27822] sctp: [Deprecated]: syz.2.5603 (pid 27822) Use of struct sctp_assoc_value in delayed_ack socket option. [ 878.310977][T27822] Use struct sctp_sack_info instead [ 878.759497][T27840] validate_nla: 4 callbacks suppressed [ 878.759519][T27840] netlink: 'syz.4.5608': attribute type 1 has an invalid length. [ 878.759533][T27840] netlink: 'syz.4.5608': attribute type 2 has an invalid length. [ 878.759547][T27840] netlink: 'syz.4.5608': attribute type 3 has an invalid length. [ 878.759560][T27840] netlink: 4 bytes leftover after parsing attributes in process `syz.4.5608'. [ 878.771934][T27840] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 878.772805][ C0] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 878.776273][T27840] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 878.776743][ C0] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 878.787654][T17112] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 878.849906][T16616] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 878.956402][T27837] syzkaller0: entered promiscuous mode [ 878.956635][T27837] syzkaller0: entered allmulticast mode [ 879.089792][T27837] syzkaller1: entered allmulticast mode [ 879.113619][T27837] netlink: 'syz.1.5606': attribute type 4 has an invalid length. [ 880.197959][T27867] netlink: 'syz.3.5616': attribute type 3 has an invalid length. [ 880.265978][T27870] netlink: 8 bytes leftover after parsing attributes in process `syz.1.5617'. [ 880.592792][T27878] vlan4: entered allmulticast mode [ 880.592817][T27878] bond0: entered allmulticast mode [ 880.927292][T27887] netlink: 12 bytes leftover after parsing attributes in process `syz.0.5621'. [ 881.194047][T27892] netdevsim netdevsim4: Firmware load for '..' refused, path contains '..' component [ 881.198024][T27893] netlink: 52 bytes leftover after parsing attributes in process `syz.4.5622'. [ 881.226027][T27894] netlink: 28 bytes leftover after parsing attributes in process `syz.3.5623'. [ 881.501189][T27899] netlink: 'syz.0.5624': attribute type 2 has an invalid length. [ 881.559265][T27906] netlink: 60 bytes leftover after parsing attributes in process `syz.0.5624'. [ 881.607333][T27906] netlink: 56 bytes leftover after parsing attributes in process `syz.0.5624'. [ 882.794807][T27947] netlink: 'syz.3.5635': attribute type 2 has an invalid length. [ 882.818633][T27947] netlink: 8 bytes leftover after parsing attributes in process `syz.3.5635'. [ 882.818658][T27947] netlink: 12 bytes leftover after parsing attributes in process `syz.3.5635'. [ 883.002996][T16611] net_ratelimit: 15 callbacks suppressed [ 883.003017][T16611] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 883.401255][ C1] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 883.402018][ C1] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 883.592024][T27973] netlink: 'syz.0.5640': attribute type 83 has an invalid length. [ 883.593204][T27976] netlink: 36 bytes leftover after parsing attributes in process `syz.2.5643'. [ 883.600357][T27973] xt_HMARK: proto mask must be zero with L3 mode [ 883.831021][T27988] netlink: 4 bytes leftover after parsing attributes in process `syz.3.5645'. [ 884.041331][T16611] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 884.230506][T28003] netlink: 'syz.1.5652': attribute type 2 has an invalid length. [ 884.441137][ C1] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 884.441568][ C1] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 885.083392][T16628] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 885.168249][T28031] netlink: 12 bytes leftover after parsing attributes in process `syz.0.5661'. [ 885.485094][ C1] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 885.486539][ C1] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 886.090415][T28066] netlink: 4 bytes leftover after parsing attributes in process `syz.1.5670'. [ 886.090462][T28066] netlink: 'syz.1.5670': attribute type 3 has an invalid length. [ 886.123192][T16616] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 886.240668][T28066] netlink: 80 bytes leftover after parsing attributes in process `syz.1.5670'. [ 886.345560][T28057] 8021q: adding VLAN 0 to HW filter on device bond12 [ 886.945031][T28086] netlink: 'syz.1.5675': attribute type 83 has an invalid length. [ 887.468372][T28105] lo speed is unknown, defaulting to 1000 [ 887.626973][T28111] netlink: 'syz.2.5680': attribute type 97 has an invalid length. [ 887.626998][T28111] netlink: 8 bytes leftover after parsing attributes in process `syz.2.5680'. [ 887.627015][T28111] netlink: 'syz.2.5680': attribute type 97 has an invalid length. [ 887.627030][T28111] netlink: 8 bytes leftover after parsing attributes in process `syz.2.5680'. [ 888.020243][T28115] netlink: 256 bytes leftover after parsing attributes in process `syz.0.5681'. [ 888.077038][ T9887] net_ratelimit: 6 callbacks suppressed [ 888.077058][ T9887] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 888.203973][T16628] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 888.433986][T28119] netlink: 'syz.0.5683': attribute type 1 has an invalid length. [ 888.434010][T28119] netlink: 228 bytes leftover after parsing attributes in process `syz.0.5683'. [ 888.599852][T28122] netlink: 8 bytes leftover after parsing attributes in process `syz.2.5684'. [ 888.601166][ C1] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 888.603533][ C1] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 888.916779][T28132] xt_HMARK: spi-set and port-set can't be combined [ 889.245947][T16628] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 889.282268][T28150] xt_MASQUERADE: bad MAP_IPS. [ 889.453211][T28153] netlink: 4 bytes leftover after parsing attributes in process `syz.1.5688'. [ 889.641123][ C1] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 889.642395][ C1] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 889.773489][T28160] netlink: 20 bytes leftover after parsing attributes in process `syz.0.5695'. [ 889.868563][T28164] netlink: 12 bytes leftover after parsing attributes in process `syz.0.5696'. [ 889.935433][T21334] block nbd3: NBD_DISCONNECT [ 889.935848][T21334] block nbd3: Send disconnect failed -32 [ 889.935871][T21334] block nbd3: shutting down sockets [ 890.297961][T16628] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 890.382065][T28183] netlink: 184 bytes leftover after parsing attributes in process `syz.2.5698'. [ 890.681175][ C1] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 890.682416][ C1] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 890.988419][T21334] udevd[21334]: inotify_add_watch(7, /dev/nbd3, 10) failed: No such file or directory [ 891.232407][T28206] netlink: 12 bytes leftover after parsing attributes in process `syz.1.5701'. [ 891.711309][T28225] bridge10: entered promiscuous mode [ 891.711388][T28225] bridge10: entered allmulticast mode [ 892.046996][T28240] mapping of prio or/and queue is allowed only from OUTPUT/FORWARD/POSTROUTING chains [ 892.106062][T28243] IPVS: ip_vs_edit_dest(): server weight less than zero [ 892.144462][T28246] x_tables: ip_tables: rpfilter match: used from hooks FORWARD, but only valid from PREROUTING [ 892.332007][T28252] x_tables: ip_tables: rpfilter match: used from hooks FORWARD, but only valid from PREROUTING [ 892.605994][T28268] netlink: 'syz.0.5719': attribute type 9 has an invalid length. [ 892.606018][T28268] netlink: 'syz.0.5719': attribute type 4 has an invalid length. [ 892.738018][T28269] netlink: 'syz.0.5719': attribute type 13 has an invalid length. [ 892.928016][T28283] __nla_validate_parse: 8 callbacks suppressed [ 892.928038][T28283] netlink: 64 bytes leftover after parsing attributes in process `syz.4.5721'. [ 893.305551][T28293] netlink: 16186 bytes leftover after parsing attributes in process `syz.3.5724'. [ 893.411305][T16628] net_ratelimit: 7 callbacks suppressed [ 893.411326][T16628] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 893.649807][T28301] tipc: Started in network mode [ 893.649841][T28301] tipc: Node identity fe80000000000000000000000000001, cluster identity 4711 [ 893.649896][T28301] tipc: Enabling of bearer rejected, failed to enable media [ 893.804376][ C1] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 893.805656][ C1] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 893.812595][ T9900] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 894.441570][T16628] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 894.531812][T28335] netlink: 8 bytes leftover after parsing attributes in process `syz.4.5736'. [ 894.841179][ C1] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 894.841675][ C1] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 895.022318][T28345] netlink: 'syz.1.5737': attribute type 4 has an invalid length. [ 895.134454][T28347] xt_MASQUERADE: bad MAP_IPS. [ 895.481595][T16611] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 895.614303][T28323] netlink: 12 bytes leftover after parsing attributes in process `syz.0.5734'. [ 895.625612][T28329] netlink: 12 bytes leftover after parsing attributes in process `syz.0.5734'. [ 895.679710][T28367] bond6: (slave veth0_to_bond): Releasing active interface [ 895.749221][T28367] A link change request failed with some changes committed already. Interface hsr_slave_0 may have been left with an inconsistent configuration, please check. [ 895.881113][ C1] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 896.066711][T28382] netlink: 'syz.3.5747': attribute type 1 has an invalid length. [ 896.066735][T28382] netlink: 240 bytes leftover after parsing attributes in process `syz.3.5747'. [ 896.066752][T28382] netlink: 'syz.3.5747': attribute type 1 has an invalid length. [ 896.066928][T28382] netlink: 'syz.3.5747': attribute type 1 has an invalid length. [ 896.066944][T28382] netlink: 240 bytes leftover after parsing attributes in process `syz.3.5747'. [ 896.066960][T28382] netlink: 'syz.3.5747': attribute type 1 has an invalid length. [ 896.067129][T28382] netlink: 'syz.3.5747': attribute type 1 has an invalid length. [ 896.067145][T28382] netlink: 240 bytes leftover after parsing attributes in process `syz.3.5747'. [ 896.067160][T28382] netlink: 'syz.3.5747': attribute type 1 has an invalid length. [ 896.067323][T28382] netlink: 240 bytes leftover after parsing attributes in process `syz.3.5747'. [ 896.067474][T28382] netlink: 240 bytes leftover after parsing attributes in process `syz.3.5747'. [ 897.268540][T28428] nbd: must specify an index to disconnect [ 897.269578][T28421] bond5: option primary: mode dependency failed, not supported in mode balance-rr(0) [ 897.324734][T28421] bond5 (unregistering): Released all slaves [ 897.596800][T28437] macvtap1: entered promiscuous mode [ 897.597036][T28437] macvtap1: entered allmulticast mode [ 897.597053][T28437] veth1_vlan: entered allmulticast mode [ 897.651149][ C0] ip6_tunnel: ip6gre1 xmit: Local address not yet configured! [ 897.742295][T28445] IPVS: set_ctl: invalid protocol: 29 127.0.0.1:20001 [ 898.149122][T28459] __nla_validate_parse: 67 callbacks suppressed [ 898.149142][T28459] netlink: 12 bytes leftover after parsing attributes in process `syz.3.5765'. [ 898.502820][T28483] netlink: 28 bytes leftover after parsing attributes in process `syz.1.5769'. [ 898.502860][T28483] validate_nla: 125 callbacks suppressed [ 898.502873][T28483] netlink: 'syz.1.5769': attribute type 7 has an invalid length. [ 898.502888][T28483] netlink: 'syz.1.5769': attribute type 8 has an invalid length. [ 898.502902][T28483] netlink: 4 bytes leftover after parsing attributes in process `syz.1.5769'. [ 898.601373][T16611] net_ratelimit: 10 callbacks suppressed [ 898.601403][T16611] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 898.652666][T28480] netlink: 24 bytes leftover after parsing attributes in process `syz.0.5773'. [ 899.001191][ C1] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 899.001782][ C1] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 899.008606][T28492] netlink: 8 bytes leftover after parsing attributes in process `syz.2.5774'. [ 899.008627][T28492] netlink: 4 bytes leftover after parsing attributes in process `syz.2.5774'. [ 899.066756][T28494] netlink: 'syz.2.5774': attribute type 4 has an invalid length. [ 899.066779][T28494] netlink: 152 bytes leftover after parsing attributes in process `syz.2.5774'. [ 899.120084][T28492] bond0: left promiscuous mode [ 899.120110][T28492] erspan2: left promiscuous mode [ 899.120298][T28492] bond0: left allmulticast mode [ 899.168507][T28495] netlink: 'syz.1.5776': attribute type 12 has an invalid length. [ 899.562083][T17091] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 899.610248][T28505] netlink: 16 bytes leftover after parsing attributes in process `syz.3.5779'. [ 899.648629][T16611] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 899.929915][T28513] 0: reclassify loop, rule prio 0, protocol 03 [ 900.002615][T28513] 0: reclassify loop, rule prio 0, protocol 03 [ 900.041281][ C1] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 900.042175][ C1] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 900.153387][T28540] netlink: 'syz.2.5786': attribute type 46 has an invalid length. [ 900.209687][T28518] netlink: 28 bytes leftover after parsing attributes in process `syz.1.5781'. [ 900.209713][T28518] netlink: 54 bytes leftover after parsing attributes in process `syz.1.5781'. [ 900.681406][T16611] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 900.995958][ T5624] Bluetooth: hci4: unexpected cc 0x0c03 length: 249 > 1 [ 901.021818][ T5624] Bluetooth: hci4: unexpected cc 0x1003 length: 249 > 9 [ 901.023659][ T5624] Bluetooth: hci4: unexpected cc 0x1001 length: 249 > 9 [ 901.026376][ T5624] Bluetooth: hci4: unexpected cc 0x0c23 length: 249 > 4 [ 901.028188][ T5624] Bluetooth: hci4: unexpected cc 0x0c38 length: 249 > 2 [ 901.224254][T17260] Bluetooth: hci4: unexpected cc 0x0c03 length: 249 > 1 [ 901.226224][T17260] Bluetooth: hci4: unexpected cc 0x1003 length: 249 > 9 [ 901.227903][T17260] Bluetooth: hci4: unexpected cc 0x1001 length: 249 > 9 [ 901.230127][T17260] Bluetooth: hci4: unexpected cc 0x0c23 length: 249 > 4 [ 901.257820][T17260] Bluetooth: hci4: unexpected cc 0x0c38 length: 249 > 2 [ 902.263943][T28605] netlink: 'syz.2.5802': attribute type 1 has an invalid length. [ 902.310273][T28599] bond13: Invalid ad_actor_system MAC address. [ 902.310296][T28599] bond13: option ad_actor_system: invalid value (1) [ 902.327163][T28599] bond13 (unregistering): Released all slaves [ 902.418963][T28605] 8021q: adding VLAN 0 to HW filter on device bond9 [ 902.430333][T28607] dummy0: left allmulticast mode [ 902.430483][T28607] dummy0: left promiscuous mode [ 902.430758][T28607] bridge0: port 3(dummy0) entered disabled state [ 902.488190][T28607] bond0: (slave veth0_to_bond): Releasing backup interface [ 902.488220][T28607] bond0: (slave veth0_to_bond): the permanent HWaddr of slave - aa:aa:aa:aa:aa:1d - is still in use by bond - set the HWaddr of slave to a different address to avoid conflicts [ 902.639096][T28608] bond9: (slave geneve4): making interface the new active one [ 902.656351][T28608] bond9: (slave geneve4): Enslaving as an active interface with an up link [ 903.118724][T28563] lo speed is unknown, defaulting to 1000 [ 903.321306][T17260] Bluetooth: hci4: command tx timeout [ 903.801854][T16628] net_ratelimit: 10 callbacks suppressed [ 903.801876][T16628] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 903.838767][T28651] __nla_validate_parse: 5 callbacks suppressed [ 903.838789][T28651] netlink: 8 bytes leftover after parsing attributes in process `syz.0.5811'. [ 903.838806][T28651] netlink: 12 bytes leftover after parsing attributes in process `syz.0.5811'. [ 904.028702][T28651] netlink: 36 bytes leftover after parsing attributes in process `syz.0.5811'. [ 904.199729][T28658] netlink: 'syz.1.5814': attribute type 1 has an invalid length. [ 904.203016][ C1] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 904.204928][ C1] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 904.380120][T28667] netlink: 8 bytes leftover after parsing attributes in process `syz.1.5814'. [ 904.473737][T28658] bond7: entered promiscuous mode [ 904.474652][T28658] 8021q: adding VLAN 0 to HW filter on device bond7 [ 904.588482][T28660] bond7: (slave bridge9): making interface the new active one [ 904.588505][T28660] bridge9: entered promiscuous mode [ 904.613004][T28660] bond7: (slave bridge9): Enslaving as an active interface with an up link [ 904.846464][T16616] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 905.111152][T28672] lo speed is unknown, defaulting to 1000 [ 905.241131][ C1] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 905.245657][ C1] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 905.322323][ T9900] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 905.403539][T17260] Bluetooth: hci4: command tx timeout [ 905.700534][T28685] syzkaller1: entered promiscuous mode [ 905.706814][T28685] syzkaller1: entered allmulticast mode [ 905.722234][T28688] syzkaller1: entered promiscuous mode [ 905.722258][T28688] syzkaller1: entered allmulticast mode [ 905.919641][T16616] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 906.281886][ C1] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 906.282479][ C1] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 906.829277][T28700] veth7: entered allmulticast mode [ 907.196505][T21497] block nbd0: NBD_DISCONNECT [ 907.196565][T21497] block nbd0: Send disconnect failed -32 [ 907.196585][T21497] block nbd0: shutting down sockets [ 907.268225][T28720] netlink: 12 bytes leftover after parsing attributes in process `syz.2.5826'. [ 907.485162][T17260] Bluetooth: hci4: command tx timeout [ 907.653320][T21334] udevd[21334]: inotify_add_watch(7, /dev/nbd0, 10) failed: No such file or directory [ 908.517527][T28747] tipc: Started in network mode [ 908.517789][T28747] tipc: Node identity e0000001, cluster identity 4711 [ 908.517838][T28747] tipc: Enabling of bearer rejected, failed to enable media [ 908.521195][ C0] ip6_tunnel: ip6gre2 xmit: Local address not yet configured! [ 908.610781][T28753] netlink: 4 bytes leftover after parsing attributes in process `syz.2.5835'. [ 908.610808][T28753] netlink: 4 bytes leftover after parsing attributes in process `syz.2.5835'. [ 908.610828][T28753] netlink: 4 bytes leftover after parsing attributes in process `syz.2.5835'. [ 908.752450][T28563] bridge0: port 1(bridge_slave_0) entered blocking state [ 908.752952][T28563] bridge0: port 1(bridge_slave_0) entered disabled state [ 908.753113][T28563] bridge_slave_0: entered allmulticast mode [ 908.755113][T28563] bridge_slave_0: entered promiscuous mode [ 908.790885][T28563] bridge0: port 2(bridge_slave_1) entered blocking state [ 908.800648][T28563] bridge0: port 2(bridge_slave_1) entered disabled state [ 908.800824][T28563] bridge_slave_1: entered allmulticast mode [ 908.818246][T28563] bridge_slave_1: entered promiscuous mode [ 909.004183][T16628] net_ratelimit: 8 callbacks suppressed [ 909.004204][T16628] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 909.083551][T28759] xt_hashlimit: size too large, truncated to 1048576 [ 909.263366][T28772] xt_hashlimit: size too large, truncated to 1048576 [ 909.285554][T28563] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 909.364914][T28563] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 909.401193][ C1] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 909.401898][ C1] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 909.405879][T28775] nbd: couldn't find a device at index 0 [ 909.561451][T17260] Bluetooth: hci4: command tx timeout [ 909.731171][T28761] lo speed is unknown, defaulting to 1000 [ 909.734483][T28563] team0: Port device team_slave_0 added [ 909.740283][T28563] team0: Port device team_slave_1 added [ 909.986996][T28563] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 909.987025][T28563] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 909.987054][T28563] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 909.990889][T28563] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 909.990905][T28563] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 909.990934][T28563] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 910.070624][T16628] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 910.105958][T28765] lo speed is unknown, defaulting to 1000 [ 910.254901][T28785] x_tables: duplicate underflow at hook 1 [ 910.273455][T28563] hsr_slave_0: entered promiscuous mode [ 910.293276][T28563] hsr_slave_1: entered promiscuous mode [ 910.300889][T28563] debugfs: 'hsr0' already exists in 'hsr' [ 910.300912][T28563] Cannot create hsr debugfs directory [ 910.441809][ C1] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 910.442139][ C1] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 911.088428][T16628] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 911.101628][ T9900] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 911.481095][ C1] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 911.482152][ C1] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 911.648665][T28563] netdevsim netdevsim3 netdevsim3 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 911.648708][T28563] netdevsim netdevsim3 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 911.808711][T28813] netlink: 20 bytes leftover after parsing attributes in process `syz.1.5845'. [ 911.932749][T28563] netdevsim netdevsim3 netdevsim2 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 911.932792][T28563] netdevsim netdevsim3 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 912.177350][T28820] netlink: 72 bytes leftover after parsing attributes in process `syz.0.5846'. [ 912.177375][T28820] netlink: 8 bytes leftover after parsing attributes in process `syz.0.5846'. [ 912.320508][T28563] netdevsim netdevsim3 netdevsim1 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 912.320549][T28563] netdevsim netdevsim3 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 913.972769][T28861] netlink: 24 bytes leftover after parsing attributes in process `syz.4.5857'. [ 914.202378][T16616] net_ratelimit: 257 callbacks suppressed [ 914.202404][T16616] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 914.282123][ T1103] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 914.601516][ C1] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 914.602061][ C1] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 914.733455][T28872] bond9: entered allmulticast mode [ 914.733481][T28872] ip6gre2: entered allmulticast mode [ 915.241586][T16616] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 915.315494][T28563] netdevsim netdevsim3 netdevsim0: renamed from eth0 [ 915.641980][ C1] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 915.643712][ C1] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 915.929565][T28563] 8021q: adding VLAN 0 to HW filter on device netdevsim0 [ 915.951254][T28563] netdevsim netdevsim3 netdevsim1: renamed from eth1 [ 915.989262][T28563] 8021q: adding VLAN 0 to HW filter on device netdevsim1 [ 916.019128][T28563] netdevsim netdevsim3 netdevsim2: renamed from eth2 [ 916.041927][T28563] 8021q: adding VLAN 0 to HW filter on device netdevsim2 [ 916.045061][T28563] netdevsim netdevsim3 netdevsim3: renamed from eth3 [ 916.100622][T28563] 8021q: adding VLAN 0 to HW filter on device netdevsim3 [ 916.230131][ T5868] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 916.290816][T16628] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 916.681139][ C1] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 916.813100][T28563] 8021q: adding VLAN 0 to HW filter on device bond0 [ 916.890896][T28563] 8021q: adding VLAN 0 to HW filter on device team0 [ 916.931321][T17127] bridge0: port 1(bridge_slave_0) entered blocking state [ 916.931458][T17127] bridge0: port 1(bridge_slave_0) entered forwarding state [ 916.987433][T17112] bridge0: port 2(bridge_slave_1) entered blocking state [ 916.987577][T17112] bridge0: port 2(bridge_slave_1) entered forwarding state [ 918.064024][T28563] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 918.156151][T28563] veth0_vlan: entered promiscuous mode [ 918.172087][T28563] veth1_vlan: entered promiscuous mode [ 918.237335][T28563] veth0_macvtap: entered promiscuous mode [ 918.250612][T28563] veth1_macvtap: entered promiscuous mode [ 918.284763][T28563] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 918.305602][T28563] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 918.364051][ T5868] netdevsim netdevsim3 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 918.401817][ T1103] netdevsim netdevsim3 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 918.421825][T17112] netdevsim netdevsim3 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 918.422264][ T9900] netdevsim netdevsim3 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 919.201105][T28899] nci: __nci_request: wait_for_completion_interruptible_timeout failed -512 [ 919.331291][ T1103] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 919.331317][ T1103] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 919.402496][ T9900] net_ratelimit: 7 callbacks suppressed [ 919.402516][ T9900] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 919.402938][T16616] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 919.534289][ T9900] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 919.534314][ T9900] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 919.801145][ C1] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 919.802393][ C1] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 919.938306][T28954] v: renamed from veth0_vlan (while UP) [ 920.187821][T28959] ip6_tables: ip6tables: counters copy to user failed while replacing table [ 920.442500][T16611] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 920.554705][T28976] IPVS: set_ctl: invalid protocol: 29 172.20.20.187:20003 [ 920.629349][T28959] netlink: 'syz.2.5877': attribute type 5 has an invalid length. [ 920.631808][T28959] netlink: 32 bytes leftover after parsing attributes in process `syz.2.5877'. [ 920.676874][T28968] batman_adv: batadv0: Adding interface: syzkaller0 [ 920.676895][T28968] batman_adv: batadv0: The MTU of interface syzkaller0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 920.722003][T28968] batman_adv: batadv0: Interface activated: syzkaller0 [ 920.841253][ C1] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 920.842145][ C1] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 920.975979][T28964] batman_adv: batadv0: Interface deactivated: syzkaller0 [ 921.080433][T28964] batman_adv: batadv0: Removing interface: syzkaller0 [ 921.338071][ T1103] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 921.482130][ T7392] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 921.728330][T17112] nci: nci_extract_activation_params_iso_dep: unsupported activation_rf_tech_and_mode 0x6 [ 922.739248][T29047] IPVS: set_ctl: invalid protocol: 255 10.1.1.1:20000 [ 922.755318][T29046] netlink: 16 bytes leftover after parsing attributes in process `syz.4.5898'. [ 922.907606][T29052] can: request_module (can-proto-4) failed. [ 924.186256][ T5624] Bluetooth: hci0: unexpected cc 0x0c03 length: 249 > 1 [ 924.190766][ T5624] Bluetooth: hci0: unexpected cc 0x1003 length: 249 > 9 [ 924.215894][ T5624] Bluetooth: hci0: unexpected cc 0x1001 length: 249 > 9 [ 924.243861][ T5624] Bluetooth: hci0: unexpected cc 0x0c23 length: 249 > 4 [ 924.246478][ T5624] Bluetooth: hci0: unexpected cc 0x0c38 length: 249 > 2 [ 924.631170][ T7392] net_ratelimit: 14 callbacks suppressed [ 924.631193][ T7392] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 925.009053][ C1] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 925.011277][ C1] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 925.398766][T29121] x_tables: duplicate underflow at hook 1 [ 925.422509][T29122] x_tables: duplicate underflow at hook 1 [ 925.536177][T29122] netlink: 24 bytes leftover after parsing attributes in process `syz.4.5920'. [ 925.649730][ T7392] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 925.668337][T29121] x_tables: ip_tables: REDIRECT target: used from hooks POSTROUTING, but only usable from PREROUTING/OUTPUT [ 925.720141][T29124] netlink: 'syz.4.5920': attribute type 1 has an invalid length. [ 925.813468][ T9900] netdevsim netdevsim0 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 926.041245][ C1] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 926.041683][ C1] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 926.336937][T29145] netlink: 156 bytes leftover after parsing attributes in process `syz.2.5925'. [ 926.337096][T29145] netlink: 156 bytes leftover after parsing attributes in process `syz.2.5925'. [ 926.371075][T17260] Bluetooth: hci0: command tx timeout [ 926.385709][T29144] netlink: 156 bytes leftover after parsing attributes in process `syz.2.5925'. [ 926.385873][T29144] netlink: 156 bytes leftover after parsing attributes in process `syz.2.5925'. [ 926.526813][ T9900] netdevsim netdevsim0 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 926.683720][ T9900] netdevsim netdevsim0 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 926.717403][T16611] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 926.751550][T29082] lo speed is unknown, defaulting to 1000 [ 927.081540][ C1] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 927.081986][ C1] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 927.122339][ T5868] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 927.582468][T29171] netlink: 8 bytes leftover after parsing attributes in process `syz.4.5929'. [ 927.670171][T29176] netlink: 36 bytes leftover after parsing attributes in process `syz.3.5930'. [ 927.826247][ T9900] netdevsim netdevsim0  (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 928.042110][T29185] tipc: Enabling of bearer rejected, failed to enable media [ 928.421433][T17112] netdevsim netdevsim0 eth1: set [1, 0] type 2 family 0 port 6081 - 0 [ 928.442179][T17260] Bluetooth: hci0: command tx timeout [ 928.505996][T29194] netlink: 'syz.2.5933': attribute type 83 has an invalid length. [ 928.716244][ T9900] bond9: left allmulticast mode [ 928.716269][ T9900] ip6gre2: left allmulticast mode [ 928.745638][ T9900] dvmrp8: left allmulticast mode [ 928.769553][ T9900] batman_adv: batadv0: Interface deactivated: gretap1 [ 929.028734][ T9900] bond9 (unregistering): (slave ip6gre2): Releasing backup interface [ 929.028766][ T9900] ip6gre2 (unregistering): left promiscuous mode [ 929.406590][ T9900] batman_adv: batadv0: Removing interface: gretap1 [ 929.586998][ T9900] bond6 (unregistering): (slave bridge0): Releasing backup interface [ 929.657672][ T9900] .` (unregistering): (slave bond_slave_1): Releasing backup interface [ 929.677526][ T9900] .` (unregistering): Released all slaves [ 929.705056][ T9900] bond0 (unregistering): Released all slaves [ 929.734176][ T9900] bond1 (unregistering): Released all slaves [ 929.759200][ T9900] bond2 (unregistering): Released all slaves [ 929.790543][ T9900] bond3 (unregistering): Released all slaves [ 929.809057][T16628] net_ratelimit: 17 callbacks suppressed [ 929.809074][T16628] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 929.850580][ T9900] bond4 (unregistering): Released all slaves [ 929.875190][ T9900] bond5 (unregistering): Released all slaves [ 929.900155][ T9900] bond6 (unregistering): Released all slaves [ 929.927546][ T9900] bond7 (unregistering): Released all slaves [ 929.954453][ T9900] bond8 (unregistering): Released all slaves [ 929.980866][ T9900] bond9 (unregistering): Released all slaves [ 930.024511][ T9900] bond10 (unregistering): Released all slaves [ 930.047109][ T9900] bond11 (unregistering): Released all slaves [ 930.070338][ T9900] bond12 (unregistering): Released all slaves [ 930.183025][ T7427] netdevsim netdevsim0 eth4: set [1, 0] type 2 family 0 port 6081 - 0 [ 930.183173][ T7427] netdevsim netdevsim0 eth3: set [1, 0] type 2 family 0 port 6081 - 0 [ 930.183312][ T7427] netdevsim netdevsim0 eth2: set [1, 0] type 2 family 0 port 6081 - 0 [ 930.207650][ C1] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 930.208378][ C1] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 930.531503][T17260] Bluetooth: hci0: command tx timeout [ 930.575150][ T7392] syz0: Port: 1 Link DOWN [ 930.575228][ T9900] : left promiscuous mode [ 930.634719][T29215] netlink: 44 bytes leftover after parsing attributes in process `syz.2.5938'. [ 930.746625][T29219] netlink: 8 bytes leftover after parsing attributes in process `syz.2.5942'. [ 930.746663][T29219] netlink: 'syz.2.5942': attribute type 1 has an invalid length. [ 930.746681][T29219] netlink: 'syz.2.5942': attribute type 2 has an invalid length. [ 930.847486][T16616] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 930.878447][ T9900] IPVS: stopping master sync thread 17721 ... [ 930.971633][T29231] Bluetooth: MGMT ver 1.23 [ 931.025964][T29232] netlink: 'syz.4.5941': attribute type 2 has an invalid length. [ 931.241384][ C1] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 931.241801][ C1] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 931.889877][T16611] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 932.204044][ T1103] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 932.283153][ C1] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 932.284638][ C1] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 932.494176][T29257] netlink: 72 bytes leftover after parsing attributes in process `syz.3.5946'. [ 932.601835][T17260] Bluetooth: hci0: command tx timeout [ 932.717084][ T5280] 8021q: adding VLAN 0 to HW filter on device eth1 [ 932.959326][T29269] netlink: 68 bytes leftover after parsing attributes in process `syz.2.5948'. [ 933.866053][T29299] netlink: 32 bytes leftover after parsing attributes in process `syz.1.5955'. [ 933.933106][T29299] nbd: couldn't find device at index 15663104 [ 934.067424][T29313] netlink: 32 bytes leftover after parsing attributes in process `syz.1.5955'. [ 934.884500][T29082] bridge0: port 1(bridge_slave_0) entered blocking state [ 934.884624][T29082] bridge0: port 1(bridge_slave_0) entered disabled state [ 934.884801][T29082] bridge_slave_0: entered allmulticast mode [ 934.945920][T29082] bridge_slave_0: entered promiscuous mode [ 935.000270][T29082] bridge0: port 2(bridge_slave_1) entered blocking state [ 935.004722][T29082] bridge0: port 2(bridge_slave_1) entered disabled state [ 935.006671][T29082] bridge_slave_1: entered allmulticast mode [ 935.081961][T16616] net_ratelimit: 7 callbacks suppressed [ 935.081983][T16616] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 935.123770][T29082] bridge_slave_1: entered promiscuous mode [ 935.402058][ C1] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 935.402639][ C1] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 935.892589][T29082] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 936.019784][ T9900] hsr_slave_0: left promiscuous mode [ 936.044382][ T9900] hsr_slave_1: left promiscuous mode [ 936.045375][ T9900] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 936.045398][ T9900] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 936.080500][ T9900] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 936.080526][ T9900] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 936.098892][T29364] netlink: 8 bytes leftover after parsing attributes in process `syz.2.5961'. [ 936.161831][T16616] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 936.219052][ T9900] veth1_macvtap: left promiscuous mode [ 936.219094][ T9900] veth0_macvtap: left promiscuous mode [ 936.441106][ C1] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 936.441656][ C1] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 936.774398][T29375] x_tables: ip_tables: rpfilter match: used from hooks FORWARD, but only valid from PREROUTING [ 936.815316][T29376] x_tables: ip_tables: rpfilter match: used from hooks FORWARD, but only valid from PREROUTING [ 937.038048][T29380] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 937.051778][T29380] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 937.242713][T16611] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 937.349769][ T7427] smc: removing ib device syz0 [ 937.373108][T29380] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 937.678876][ T5868] smbdirect: ib_dev[syz_device_name_32_chars_1234567] removed [ 937.940078][T29082] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 938.105203][T29384] netlink: 'syz.1.5964': attribute type 1 has an invalid length. [ 938.146592][ T5280] 8021q: adding VLAN 0 to HW filter on device eth2 [ 938.150333][T16616] infiniband syz_device_name_32_chars_1234567: ib_query_port failed (-19) [ 938.232999][ T7427] smbdirect: ib_dev[syz0] removed [ 938.320357][T29392] netlink: 36 bytes leftover after parsing attributes in process `syz.1.5964'. [ 938.433680][T29384] 8021q: adding VLAN 0 to HW filter on device bond8 [ 938.469237][T29082] team0: Port device team_slave_0 added [ 938.517934][T29398] netlink: 4 bytes leftover after parsing attributes in process `syz.4.5966'. [ 938.520423][T29082] team0: Port device team_slave_1 added [ 938.715321][T29398] netlink: 4 bytes leftover after parsing attributes in process `syz.4.5966'. [ 939.177709][T29082] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 939.177730][T29082] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 939.177762][T29082] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 939.180663][T29398] netlink: 4 bytes leftover after parsing attributes in process `syz.4.5966'. [ 939.258528][T29398] netlink: 4 bytes leftover after parsing attributes in process `syz.4.5966'. [ 939.298856][T29082] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 939.298876][T29082] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 939.298905][T29082] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 939.655392][T29413] netlink: 8 bytes leftover after parsing attributes in process `syz.3.5972'. [ 940.250172][T29082] hsr_slave_0: entered promiscuous mode [ 940.269916][T29082] hsr_slave_1: entered promiscuous mode [ 940.449031][T16611] net_ratelimit: 15 callbacks suppressed [ 940.449053][T16611] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 940.601183][ C1] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 940.602255][ C1] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 941.484240][T16611] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 941.641160][ C1] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 941.642055][ C1] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 941.726373][T29469] netlink: 36 bytes leftover after parsing attributes in process `syz.1.5981'. [ 942.469364][ T5280] 8021q: adding VLAN 0 to HW filter on device eth3 [ 942.521285][T16616] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 942.779083][T29082] netdevsim netdevsim0 eth4 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 943.572218][T16628] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 943.671877][T29082] netdevsim netdevsim0 eth3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 943.725801][T17127] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 943.890085][T29523] netlink: 'syz.4.5997': attribute type 1 has an invalid length. [ 943.890111][T29523] netlink: 193500 bytes leftover after parsing attributes in process `syz.4.5997'. [ 943.890129][T29523] netlink: 'syz.4.5997': attribute type 1 has an invalid length. [ 943.890145][T29523] netlink: 2016 bytes leftover after parsing attributes in process `syz.4.5997'. [ 944.260742][T29082] netdevsim netdevsim0 eth2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 944.342283][T29522] macvlan0: entered promiscuous mode [ 944.607037][T16628] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 944.835908][T29082] netdevsim netdevsim0 eth1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 944.918683][T29550] netlink: 32 bytes leftover after parsing attributes in process `syz.3.6004'. [ 944.994471][T29556] sctp: [Deprecated]: syz.3.6004 (pid 29556) Use of int in maxseg socket option. [ 944.994471][T29556] Use struct sctp_assoc_value instead [ 944.994862][T29557] netlink: 12 bytes leftover after parsing attributes in process `syz.2.6003'. [ 945.654249][T16616] net_ratelimit: 3 callbacks suppressed [ 945.654273][T16616] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 946.709551][T16611] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 947.398150][ T9900] IPVS: stop unused estimator thread 0... [ 947.625956][T29631] netlink: 4 bytes leftover after parsing attributes in process `syz.3.6012'. [ 947.861037][T16611] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 947.972811][T29617] syzkaller1: entered promiscuous mode [ 948.005041][T29617] syzkaller1: entered allmulticast mode [ 948.471755][T29642] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 948.471963][T29642] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 948.472116][T29642] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 948.473700][T29642] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 948.473967][T29642] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 948.474100][T29642] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 948.476156][T29642] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 948.658232][T29082] netdevsim netdevsim0 netdevsim0: renamed from eth0 [ 948.688918][T29645] netlink: 12 bytes leftover after parsing attributes in process `syz.2.6015'. [ 948.723050][T29082] 8021q: adding VLAN 0 to HW filter on device netdevsim0 [ 948.725895][T29082] netdevsim netdevsim0 netdevsim1: renamed from eth1 [ 948.750893][T29646] tls_set_device_offload_rx: netdev not found [ 948.791786][T29082] 8021q: adding VLAN 0 to HW filter on device netdevsim1 [ 948.809794][T29082] netdevsim netdevsim0 netdevsim2: renamed from eth2 [ 948.876925][T29082] 8021q: adding VLAN 0 to HW filter on device netdevsim2 [ 948.897692][T29082] netdevsim netdevsim0 netdevsim3: renamed from eth3 [ 948.963969][T29082] 8021q: adding VLAN 0 to HW filter on device netdevsim3 [ 949.103228][T29658] netlink: 'syz.4.6017': attribute type 2 has an invalid length. [ 949.846635][T29675] netlink: 'syz.2.6021': attribute type 1 has an invalid length. [ 949.846659][T29675] netlink: 5120 bytes leftover after parsing attributes in process `syz.2.6021'. [ 949.848979][T29082] 8021q: adding VLAN 0 to HW filter on device bond0 [ 949.926699][T29678] netlink: 'syz.2.6021': attribute type 1 has an invalid length. [ 949.926720][T29678] netlink: 5120 bytes leftover after parsing attributes in process `syz.2.6021'. [ 950.106491][T29082] 8021q: adding VLAN 0 to HW filter on device team0 [ 950.169539][T17125] bridge0: port 1(bridge_slave_0) entered blocking state [ 950.169671][T17125] bridge0: port 1(bridge_slave_0) entered forwarding state [ 950.229953][ T7427] bridge0: port 2(bridge_slave_1) entered blocking state [ 950.230078][ T7427] bridge0: port 2(bridge_slave_1) entered forwarding state [ 950.670324][T29684] netlink: 48 bytes leftover after parsing attributes in process `syz.2.6022'. [ 951.083179][T16611] net_ratelimit: 3 callbacks suppressed [ 951.083202][T16611] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 951.426173][T29696] xt_limit: Overflow, try lower: 536871034/0 [ 951.459335][T29696] netlink: 100 bytes leftover after parsing attributes in process `syz.2.6025'. [ 951.631746][T16611] syzkaller1: tun_net_xmit 90 [ 951.815881][T29706] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 951.895306][T29706] netlink: 'syz.1.6029': attribute type 1 has an invalid length. [ 952.125406][T16628] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 952.264774][T29718] bond10: (slave gretap4): making interface the new active one [ 952.265698][T29718] bond10: (slave gretap4): Enslaving as an active interface with an up link [ 952.903646][T29748] TCP: TCP_TX_DELAY enabled [ 952.928251][T29740] team0: entered promiscuous mode [ 952.928275][T29740] team_slave_0: entered promiscuous mode [ 952.928511][T29740] team_slave_1: entered promiscuous mode [ 953.175259][ T7392] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 953.599675][T29764] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 953.609109][T29767] openvswitch: netlink: Mixed IPv4 and IPv6 tunnel attributes [ 953.619052][T29764] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 953.664646][T29764] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 953.670423][T29764] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 953.704603][T29764] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 953.729557][T29764] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 953.753251][T29764] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 953.754556][T29763] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 953.782305][T29764] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 953.800021][T29764] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 953.818194][T29764] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 953.854875][T29764] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 953.872043][T29764] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 953.874018][T29764] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 953.876038][T29764] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 953.880699][T29764] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 953.948955][T29764] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 953.969425][T29764] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 953.989983][T29764] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 954.016649][T29764] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 954.043541][T29764] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 954.078347][T29764] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 954.115483][T29764] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 954.152961][T29764] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 954.185117][T29764] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 954.227773][T16628] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 954.244954][T29764] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 954.281418][T29764] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 954.335083][T29754] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 954.416623][T29754] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 954.512684][T29764] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 954.546830][T29082] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 954.570364][T29764] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 954.604332][ T9887] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 954.666226][T29764] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 954.707670][T29082] veth0_vlan: entered promiscuous mode [ 954.713648][T29764] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 954.737187][T29082] veth1_vlan: entered promiscuous mode [ 954.790881][T29764] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 954.814653][T29082] veth0_macvtap: entered promiscuous mode [ 954.864952][T29082] veth1_macvtap: entered promiscuous mode [ 954.935534][T29082] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 955.005691][T29082] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 955.272608][T17125] netdevsim netdevsim0 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 955.277650][T16611] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 955.361500][ T7427] netdevsim netdevsim0 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 955.383988][T17127] netdevsim netdevsim0 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 955.385539][ T7427] netdevsim netdevsim0 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 955.433364][T29788] netlink: 'syz.4.6042': attribute type 1 has an invalid length. [ 955.434812][T29789] netlink: 'syz.4.6042': attribute type 1 has an invalid length. [ 955.521353][T29788] 8021q: adding VLAN 0 to HW filter on device bond6 [ 955.560211][T29788] netlink: 8 bytes leftover after parsing attributes in process `syz.4.6042'. [ 955.978765][T29789] bond6: (slave bridge11): making interface the new active one [ 956.009271][T29789] bond6: (slave bridge11): Enslaving as an active interface with an up link [ 956.067418][T29801] netlink: 27 bytes leftover after parsing attributes in process `syz.2.6045'. [ 956.205116][T29792] bond6: (slave bridge12): Enslaving as an active interface with a down link [ 956.282304][T16611] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 956.407931][T29805] syzkaller1: entered promiscuous mode [ 956.407988][T29805] syzkaller1: entered allmulticast mode [ 956.429068][T17127] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 956.429090][T17127] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 956.676489][T29824] netlink: 'syz.4.6049': attribute type 1 has an invalid length. [ 957.161992][ C0] ip6_tunnel: ip6gre1 xmit: Local address not yet configured! [ 957.203976][T17125] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 957.204002][T17125] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 957.336640][T29833] Cannot find map_set index 2 as target [ 957.392453][T16616] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 958.464878][ T7392] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 958.572486][T29889] netlink: 60 bytes leftover after parsing attributes in process `syz.1.6061'. [ 958.954369][T29899] tipc: Failed to remove unknown binding: 66,0,0/0:3484161108/3484161109 [ 958.954615][T29897] tipc: Failed to remove unknown binding: 66,0,0/0:3484161108/3484161109 [ 959.056118][T29902] pim6reg: entered allmulticast mode [ 959.085095][T29905] netlink: 8 bytes leftover after parsing attributes in process `syz.2.6065'. [ 959.085132][T29905] netlink: 'syz.2.6065': attribute type 5 has an invalid length. [ 959.085150][T29905] netlink: 20 bytes leftover after parsing attributes in process `syz.2.6065'. [ 959.182733][T29902] openvswitch: netlink: Missing key (keys=40, expected=10000000) [ 959.186315][ T5624] Bluetooth: hci5: unexpected cc 0x0c03 length: 249 > 1 [ 959.220219][ T5624] Bluetooth: hci5: unexpected cc 0x1003 length: 249 > 9 [ 959.230013][ T5624] Bluetooth: hci5: unexpected cc 0x1001 length: 249 > 9 [ 959.247915][ T5624] Bluetooth: hci5: unexpected cc 0x0c23 length: 249 > 4 [ 959.258474][ T5624] Bluetooth: hci5: unexpected cc 0x0c38 length: 249 > 2 [ 959.270088][T29902] xt_addrtype: ipv6 does not support BROADCAST matching [ 959.509601][ T7392] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 959.521493][T29912] netlink: 8 bytes leftover after parsing attributes in process `syz.3.6066'. [ 960.364004][ T9887] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 960.434726][T29938] IPv6: Can't replace route, no match found [ 960.469781][T29940] IPv6: Can't replace route, no match found [ 960.526863][T16616] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 960.794213][T29946] netlink: 'syz.3.6072': attribute type 10 has an invalid length. [ 960.915519][T29946] team0: Device veth0_macvtap failed to register rx_handler [ 961.016033][T29955] netlink: 'syz.1.6074': attribute type 1 has an invalid length. [ 961.405276][T17260] Bluetooth: hci5: command tx timeout [ 961.459976][T29967] netlink: 76 bytes leftover after parsing attributes in process `syz.2.6076'. [ 961.460003][T29967] nbd: illegal input index -8454144 [ 961.575853][T16616] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 962.402363][T29992] openvswitch: netlink: IP tunnel dst address not specified [ 962.614597][T16616] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 962.808450][T30003] netlink: 24 bytes leftover after parsing attributes in process `syz.1.6087'. [ 962.995064][T30014] netlink: 60 bytes leftover after parsing attributes in process `syz.1.6087'. [ 963.482234][T17260] Bluetooth: hci5: command tx timeout [ 963.529701][T30028] netlink: 56 bytes leftover after parsing attributes in process `syz.2.6089'. [ 963.674194][T16616] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 964.504186][T30072] netlink: 20 bytes leftover after parsing attributes in process `syz.1.6100'. [ 964.565048][T30069] openvswitch: netlink: Key 14 has unexpected len 2 expected 28 [ 964.595017][T30072] veth8: entered promiscuous mode [ 964.597152][T30072] veth8: entered allmulticast mode [ 964.681500][T16611] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 964.746586][T29906] bridge0: port 1(bridge_slave_0) entered blocking state [ 964.746705][T29906] bridge0: port 1(bridge_slave_0) entered disabled state [ 964.747821][T29906] bridge_slave_0: entered allmulticast mode [ 964.788628][T29906] bridge_slave_0: entered promiscuous mode [ 964.809827][T29906] bridge0: port 2(bridge_slave_1) entered blocking state [ 964.812755][T29906] bridge0: port 2(bridge_slave_1) entered disabled state [ 964.812911][T29906] bridge_slave_1: entered allmulticast mode [ 964.850230][T29906] bridge_slave_1: entered promiscuous mode [ 965.056892][T30076] vlan2: entered promiscuous mode [ 965.056919][T30076] bridge0: entered promiscuous mode [ 965.057176][T30076] vlan2: entered allmulticast mode [ 965.057192][T30076] bridge0: entered allmulticast mode [ 965.266310][T30084] ip6_tables: ip6tables: counters copy to user failed while replacing table [ 965.366545][T29906] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 965.423935][T29906] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 965.484173][ T7427] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 965.500829][T29906] team0: Port device team_slave_0 added [ 965.510440][T29906] team0: Port device team_slave_1 added [ 965.553836][T29906] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 965.553856][T29906] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 965.553885][T29906] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 965.558547][T29906] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 965.558566][T29906] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 965.558595][T29906] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 965.561612][T17260] Bluetooth: hci5: command tx timeout [ 965.755801][ T7392] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 965.829130][T30090] netlink: 4 bytes leftover after parsing attributes in process `syz.0.6105'. [ 965.904278][T30094] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 966.068907][T29906] hsr_slave_0: entered promiscuous mode [ 966.078928][T29906] hsr_slave_1: entered promiscuous mode [ 966.090863][T29906] debugfs: 'hsr0' already exists in 'hsr' [ 966.090887][T29906] Cannot create hsr debugfs directory [ 966.427510][T30111] netdevsim netdevsim1 netdevsim0: entered promiscuous mode [ 966.427540][T30111] netdevsim netdevsim1 netdevsim0: left allmulticast mode [ 966.578988][T30116] netlink: 4 bytes leftover after parsing attributes in process `syz.0.6108'. [ 966.664504][T30119] netlink: 12 bytes leftover after parsing attributes in process `syz.0.6108'. [ 966.733069][T30124] netlink: 'syz.3.6110': attribute type 3 has an invalid length. [ 966.733092][T30124] netlink: 666 bytes leftover after parsing attributes in process `syz.3.6110'. [ 966.779609][T16611] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 967.642036][T17260] Bluetooth: hci5: command tx timeout [ 967.844505][ T7392] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 967.975180][T29906] netdevsim netdevsim4 netdevsim3 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 967.975227][T29906] netdevsim netdevsim4 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 968.027645][T30159] netlink: 'syz.1.6118': attribute type 1 has an invalid length. [ 968.684249][T30165] bond11: (slave veth0_to_bond): making interface the new active one [ 968.718954][T30165] bond11: (slave veth0_to_bond): Enslaving as an active interface with an up link [ 969.016199][T29906] netdevsim netdevsim4 netdevsim2 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 969.016242][T29906] netdevsim netdevsim4 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 969.081721][T16616] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 969.529151][T29906] bond0: (slave netdevsim1): Releasing backup interface [ 969.640091][T29906] netdevsim netdevsim4 netdevsim1 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 969.640132][T29906] netdevsim netdevsim4 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 970.037404][T29906] netdevsim netdevsim4 netdevsim0 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 970.037445][T29906] netdevsim netdevsim4 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 970.121707][ T7392] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 970.540761][T30206] netlink: 12 bytes leftover after parsing attributes in process `syz.1.6130'. [ 970.707953][T30206] netlink: 8 bytes leftover after parsing attributes in process `syz.1.6130'. [ 970.893577][T30206] netlink: 24 bytes leftover after parsing attributes in process `syz.1.6130'. [ 971.161563][T16616] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 971.244066][ T9891] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 971.309160][T29906] netdevsim netdevsim4 netdevsim0: renamed from eth0 [ 971.333124][T29906] 8021q: adding VLAN 0 to HW filter on device netdevsim0 [ 971.336168][T29906] netdevsim netdevsim4 netdevsim1: renamed from eth1 [ 971.372923][T29906] 8021q: adding VLAN 0 to HW filter on device netdevsim1 [ 971.374252][T29906] netdevsim netdevsim4 netdevsim2: renamed from eth2 [ 971.440359][T29906] 8021q: adding VLAN 0 to HW filter on device netdevsim2 [ 971.454673][T29906] netdevsim netdevsim4 netdevsim3: renamed from eth3 [ 971.552983][T29906] 8021q: adding VLAN 0 to HW filter on device netdevsim3 [ 971.783289][T30236] xt_TCPMSS: Only works on TCP SYN packets [ 972.025199][T29906] 8021q: adding VLAN 0 to HW filter on device bond0 [ 972.080390][T29906] 8021q: adding VLAN 0 to HW filter on device team0 [ 972.144932][T30252] netlink: 17 bytes leftover after parsing attributes in process `syz.2.6135'. [ 972.157303][T30252] netlink: 17 bytes leftover after parsing attributes in process `syz.2.6135'. [ 972.169575][T30250] netlink: 8 bytes leftover after parsing attributes in process `syz.2.6135'. [ 972.185448][ T9891] bridge0: port 1(bridge_slave_0) entered blocking state [ 972.185577][ T9891] bridge0: port 1(bridge_slave_0) entered forwarding state [ 972.207209][ T7392] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 972.264867][ T9891] bridge0: port 2(bridge_slave_1) entered blocking state [ 972.264981][ T9891] bridge0: port 2(bridge_slave_1) entered forwarding state [ 972.497792][T30258] netlink: 4 bytes leftover after parsing attributes in process `syz.0.6138'. [ 972.497821][T30258] netlink: 176 bytes leftover after parsing attributes in process `syz.0.6138'. [ 972.497872][T30258] netlink: 'syz.0.6138': attribute type 5 has an invalid length. [ 973.143179][T17260] Bluetooth: hci0: ACL packet for unknown connection handle 3484 [ 973.242865][ T7392] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 973.837373][T30283] netlink: 32 bytes leftover after parsing attributes in process `syz.2.6145'. [ 973.896327][T30287] netlink: 176 bytes leftover after parsing attributes in process `syz.3.6146'. [ 973.896353][T30287] netlink: 32 bytes leftover after parsing attributes in process `syz.3.6146'. [ 974.282940][T16616] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 974.500145][T29906] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 974.665243][T30306] openvswitch: netlink: Duplicate key (type 6). [ 975.215428][T30317] netlink: 16 bytes leftover after parsing attributes in process `syz.3.6153'. [ 975.215468][T30317] netlink: 16 bytes leftover after parsing attributes in process `syz.3.6153'. [ 975.322312][T16611] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 976.209480][T30338] dvmrp1: entered allmulticast mode [ 976.283242][T17127] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 976.362581][T16611] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 976.392500][T29906] veth0_vlan: entered promiscuous mode [ 976.430152][T29906] veth1_vlan: entered promiscuous mode [ 976.599011][T29906] veth0_macvtap: entered promiscuous mode [ 976.633526][T29906] veth1_macvtap: entered promiscuous mode [ 976.696869][T30345] Freezing with imperfect legacy cgroup freezer. See cgroup.freeze of cgroup v2 [ 976.729328][T29906] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 976.777417][T29906] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 976.822314][T17112] netdevsim netdevsim4 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 976.823069][T17112] netdevsim netdevsim4 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 976.823113][T17112] netdevsim netdevsim4 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 976.823153][T17112] netdevsim netdevsim4 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 977.361504][T30351] geneve2: entered promiscuous mode [ 977.404585][T16611] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 977.538389][T30365] netlink: 8 bytes leftover after parsing attributes in process `syz.3.6163'. [ 977.651182][ C0] ip6_tunnel: ip6gre2 xmit: Local address not yet configured! [ 977.840320][T30365] team0: Device ipvlan0 failed to register rx_handler [ 977.990532][ T7427] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 977.990556][ T7427] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 978.270563][ T5868] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 978.270588][ T5868] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 978.442093][T16628] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 978.573743][T30377] Bluetooth: hci0: unsupported parameter 5135 [ 978.573770][T30377] Bluetooth: hci0: unsupported parameter 8192 [ 978.573785][T30377] Bluetooth: hci0: unsupported parameter 5135 [ 978.573800][T30377] Bluetooth: hci0: unsupported parameter 8192 [ 978.638095][T30380] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 979.132827][T30392] ip_tables: iptables: counters copy to user failed while replacing table [ 979.195683][T30392] netlink: 28 bytes leftover after parsing attributes in process `syz.0.6170'. [ 979.195724][T30392] netlink: 28 bytes leftover after parsing attributes in process `syz.0.6170'. [ 979.482568][T16628] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 979.676575][T30400] netlink: 8 bytes leftover after parsing attributes in process `syz.0.6170'. [ 980.312814][T30419] bridge0: port 1(bridge_slave_0) entered disabled state [ 980.522860][T16628] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 980.815391][T30436] netlink: 12 bytes leftover after parsing attributes in process `syz.0.6179'. [ 981.116796][T30444] netlink: 45 bytes leftover after parsing attributes in process `syz.0.6180'. [ 981.249828][T30444] netlink: 8 bytes leftover after parsing attributes in process `syz.0.6180'. [ 981.493549][ T5869] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 981.585076][T16628] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 982.078446][T30453] netlink: 8 bytes leftover after parsing attributes in process `syz.4.6183'. [ 982.078484][T30453] netlink: 'syz.4.6183': attribute type 19 has an invalid length. [ 982.132064][T30453] netlink: 8 bytes leftover after parsing attributes in process `syz.4.6183'. [ 982.132110][T30453] netlink: 'syz.4.6183': attribute type 19 has an invalid length. [ 982.139243][T17119] netdevsim netdevsim4 netdevsim0: set [0, 0] type 1 family 0 port 8472 - 0 [ 982.140260][T17119] netdevsim netdevsim4 netdevsim1: set [0, 0] type 1 family 0 port 8472 - 0 [ 982.140327][T17119] netdevsim netdevsim4 netdevsim2: set [0, 0] type 1 family 0 port 8472 - 0 [ 982.140365][T17119] netdevsim netdevsim4 netdevsim3: set [0, 0] type 1 family 0 port 8472 - 0 [ 982.554050][T30486] netlink: 4 bytes leftover after parsing attributes in process `syz.2.6189'. [ 982.626254][T16628] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 983.565617][T30509] netlink: 28 bytes leftover after parsing attributes in process `syz.4.6194'. [ 983.662939][T30513] netlink: 8 bytes leftover after parsing attributes in process `syz.3.6196'. [ 983.685808][T16611] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 983.738882][T30513] bridge0: port 2(bridge_slave_1) entered disabled state [ 983.740875][T30513] bridge0: port 1(bridge_slave_0) entered disabled state [ 984.115638][T30529] netlink: 8 bytes leftover after parsing attributes in process `syz.0.6201'. [ 984.301170][T30533] netlink: 8 bytes leftover after parsing attributes in process `syz.4.6203'. [ 984.754430][T30545] netlink: 16402 bytes leftover after parsing attributes in process `syz.0.6208'. [ 984.773152][T16611] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 984.775951][T30544] netlink: 16402 bytes leftover after parsing attributes in process `syz.0.6208'. [ 984.802159][T30544] netlink: 40 bytes leftover after parsing attributes in process `syz.0.6208'. [ 985.115742][T30553] netlink: 8 bytes leftover after parsing attributes in process `syz.2.6210'. [ 985.783029][T30568] netlink: 'syz.3.6215': attribute type 1 has an invalid length. [ 985.783064][T30568] netlink: 224 bytes leftover after parsing attributes in process `syz.3.6215'. [ 985.903610][T16617] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 986.446234][T30580] rdma_rxe: rxe_newlink: rxe creation allowed on top of a real device only [ 986.777203][T30584] netlink: 'syz.3.6219': attribute type 2 has an invalid length. [ 986.921713][T16611] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 987.106701][T30595] netlink: 'syz.4.6222': attribute type 2 has an invalid length. [ 987.254604][T17119] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 987.378110][ T5624] Bluetooth: hci3: unexpected cc 0x0c03 length: 249 > 1 [ 987.394882][ T5624] Bluetooth: hci3: unexpected cc 0x1003 length: 249 > 9 [ 987.396874][ T5624] Bluetooth: hci3: unexpected cc 0x1001 length: 249 > 9 [ 987.398012][ T5624] Bluetooth: hci3: unexpected cc 0x0c23 length: 249 > 4 [ 987.425441][ T5624] Bluetooth: hci3: unexpected cc 0x0c38 length: 249 > 2 [ 987.516508][T30599] syzkaller0: entered promiscuous mode [ 987.516950][T30599] syzkaller0: entered allmulticast mode [ 987.587937][T30599] ICMPv6: Received fragmented ndisc packet. Carefully consider disabling suppress_frag_ndisc. [ 987.982083][T16628] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 988.473047][T30620] __nla_validate_parse: 4 callbacks suppressed [ 988.473070][T30620] netlink: 288 bytes leftover after parsing attributes in process `syz.3.6229'. [ 989.002241][T16611] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 989.022408][T30642] x_tables: duplicate underflow at hook 3 [ 989.579423][T17260] Bluetooth: hci3: command tx timeout [ 990.428726][T16611] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 991.525140][T16617] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 991.641428][T17260] Bluetooth: hci3: command tx timeout [ 991.791897][T30655] netlink: 8 bytes leftover after parsing attributes in process `syz.4.6239'. [ 993.222852][ T1103] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 993.554457][T16617] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 993.731064][T17260] Bluetooth: hci3: command tx timeout [ 995.549997][T16616] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 995.819099][T17260] Bluetooth: hci3: command tx timeout [ 996.532104][T30673] netlink: 52 bytes leftover after parsing attributes in process `syz.4.6242'. [ 996.716249][T16616] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 998.860752][ T7423] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 999.517851][ T7392] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1000.539451][T16611] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1001.241705][ C1] sched: DL replenish lagged too much [ 1010.036419][ T9887] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1013.376380][T16626] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1013.578574][T16611] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1016.944799][ T9900] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1021.491133][T17126] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1022.985290][T16626] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1027.293882][T17943] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1029.111322][T27242] Bluetooth: hci4: command 0x0406 tx timeout [ 1029.381718][T17942] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1032.716812][T17130] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1039.239475][T17096] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1040.139173][ T9891] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1046.126934][ T143] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1047.581572][T17111] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1053.447812][ T9887] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1059.567005][ C0] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1059.925238][T17116] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1060.639840][ T1171] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1066.782448][T17111] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1069.242168][T17130] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1070.465061][T17096] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1073.288500][T16626] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1074.925448][ C0] ip6_tunnel: ip6gre1 xmit: Local address not yet configured! [ 1077.077116][T16626] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1080.054312][ T5624] Bluetooth: hci0: command tx timeout [ 1082.255114][T16626] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1093.751221][T17130] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1104.045893][ T7421] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1114.877496][T17127] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1115.883111][ C0] ip6_tunnel: ip6gre2 xmit: Local address not yet configured! [ 1116.748854][T30693] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1121.854817][ T102] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1122.853425][T17141] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1127.370868][ C0] rcu: INFO: rcu_preempt detected stalls on CPUs/tasks: [ 1127.377874][ C0] rcu: Tasks blocked on level-0 rcu_node (CPUs 0-1): P28563/1:b..l [ 1127.385912][ C0] rcu: (detected by 0, t=10503 jiffies, g=172905, q=3104 ncpus=2) [ 1127.393844][ C0] task:syz-executor state:R running task stack:22440 pid:28563 tgid:28563 ppid:28552 task_flags:0x400140 flags:0x00080000 [ 1127.407381][ C0] Call Trace: [ 1127.410696][ C0] [ 1127.413662][ C0] __schedule+0x17db/0x58f0 [ 1127.418228][ C0] ? __lock_acquire+0x747/0x2de0 [ 1127.423221][ C0] ? __pfx___schedule+0x10/0x10 [ 1127.428110][ C0] ? __lock_acquire+0x747/0x2de0 [ 1127.433102][ C0] preempt_schedule_irq+0x4b/0x90 [ 1127.438165][ C0] irqentry_exit+0x14f/0x910 [ 1127.442799][ C0] ? trace_irq_disable+0x3b/0x140 [ 1127.447895][ C0] asm_sysvec_apic_timer_interrupt+0x1a/0x20 [ 1127.453916][ C0] RIP: 0010:lock_release+0x44/0x3c0 [ 1127.459154][ C0] Code: 8b 05 88 f7 f1 11 48 89 44 24 28 0f 1f 44 00 00 65 8b 05 87 f7 f1 11 83 f8 08 0f 83 60 02 00 00 89 c0 48 0f a3 05 b4 f6 d6 0e <73> 0d e8 25 03 09 00 84 c0 0f 84 9e 02 00 00 83 3d a6 27 d7 0e 00 [ 1127.478802][ C0] RSP: 0018:ffffc9000563f118 EFLAGS: 00000293 [ 1127.484906][ C0] RAX: 0000000000000000 RBX: ffffc9000563f238 RCX: 8000000000000001 [ 1127.492915][ C0] RDX: ffffc9000563f201 RSI: ffffffff8177f1df RDI: ffffffff8ed5c920 [ 1127.500940][ C0] RBP: 1ffffffff2243e01 R08: ffffc9000563fa88 R09: 0000000000000000 [ 1127.508948][ C0] R10: ffffc9000563f278 R11: fffff52000ac7e51 R12: ffffc90005638000 [ 1127.517037][ C0] R13: ffffffff8177f1df R14: ffffffff8ed5c920 R15: ffffc9000563fa98 [ 1127.525049][ C0] ? unwind_next_frame+0x8f/0x2550 [ 1127.530214][ C0] ? unwind_next_frame+0x8f/0x2550 [ 1127.535370][ C0] ? deref_stack_reg+0x18e/0x220 [ 1127.540353][ C0] ? unwind_next_frame+0x8f/0x2550 [ 1127.545518][ C0] unwind_next_frame+0x1baa/0x2550 [ 1127.550688][ C0] ? do_dentry_open+0x4a0/0x1380 [ 1127.555668][ C0] ? unwind_next_frame+0x8f/0x2550 [ 1127.560826][ C0] ? __pfx_stack_trace_consume_entry+0x10/0x10 [ 1127.567021][ C0] arch_stack_walk+0x11b/0x150 [ 1127.571831][ C0] ? vfs_open+0x3b/0x340 [ 1127.576137][ C0] stack_trace_save+0xa9/0x100 [ 1127.580939][ C0] ? __pfx_stack_trace_save+0x10/0x10 [ 1127.586354][ C0] ? __lock_acquire+0x747/0x2de0 [ 1127.591346][ C0] save_stack+0x122/0x230 [ 1127.595732][ C0] ? __pfx_save_stack+0x10/0x10 [ 1127.600638][ C0] ? __free_frozen_pages+0xc93/0xd90 [ 1127.605988][ C0] ? __slab_free+0x274/0x2c0 [ 1127.610613][ C0] ? qlist_free_all+0x99/0x100 [ 1127.615422][ C0] ? kasan_quarantine_reduce+0x148/0x160 [ 1127.621120][ C0] ? __kasan_slab_alloc+0x22/0x80 [ 1127.626176][ C0] ? __kmalloc_noprof+0x307/0x720 [ 1127.631231][ C0] ? tomoyo_realpath_from_path+0xef/0x640 [ 1127.636992][ C0] ? tomoyo_check_open_permission+0x229/0x470 [ 1127.643096][ C0] ? security_file_open+0xa9/0x240 [ 1127.648241][ C0] ? do_dentry_open+0x4a0/0x1380 [ 1127.653255][ C0] ? page_ext_put+0x97/0xc0 [ 1127.657806][ C0] __reset_page_owner+0x71/0x1f0 [ 1127.662788][ C0] __free_frozen_pages+0xc93/0xd90 [ 1127.667959][ C0] __slab_free+0x274/0x2c0 [ 1127.672431][ C0] ? lock_acquire+0x115/0x350 [ 1127.677251][ C0] ? qlist_free_all+0x8e/0x100 [ 1127.682091][ C0] qlist_free_all+0x99/0x100 [ 1127.686733][ C0] kasan_quarantine_reduce+0x148/0x160 [ 1127.692261][ C0] __kasan_slab_alloc+0x22/0x80 [ 1127.697166][ C0] __kmalloc_noprof+0x307/0x720 [ 1127.702067][ C0] ? rcu_is_watching+0x16/0xb0 [ 1127.706906][ C0] ? __kmalloc_noprof+0x1ab/0x720 [ 1127.711966][ C0] ? tomoyo_realpath_from_path+0xef/0x640 [ 1127.717739][ C0] ? tomoyo_realpath_from_path+0xef/0x640 [ 1127.723517][ C0] tomoyo_realpath_from_path+0xef/0x640 [ 1127.729132][ C0] tomoyo_check_open_permission+0x229/0x470 [ 1127.735169][ C0] ? tomoyo_check_open_permission+0x1d3/0x470 [ 1127.741278][ C0] ? __pfx_tomoyo_check_open_permission+0x10/0x10 [ 1127.747733][ C0] ? __asan_memset+0x22/0x50 [ 1127.752400][ C0] ? tomoyo_file_open+0x163/0x220 [ 1127.757491][ C0] security_file_open+0xa9/0x240 [ 1127.762471][ C0] do_dentry_open+0x4a0/0x1380 [ 1127.767377][ C0] vfs_open+0x3b/0x340 [ 1127.771494][ C0] ? path_openat+0x1428/0x1d60 [ 1127.776309][ C0] path_openat+0x1443/0x1d60 [ 1127.780957][ C0] do_file_open+0x23e/0x4a0 [ 1127.785509][ C0] ? __pfx_do_file_open+0x10/0x10 [ 1127.790606][ C0] ? _raw_spin_unlock+0x28/0x50 [ 1127.795493][ C0] ? alloc_fd+0x651/0x6c0 [ 1127.799885][ C0] do_sys_openat2+0x115/0x200 [ 1127.804617][ C0] ? __pfx_do_sys_openat2+0x10/0x10 [ 1127.809867][ C0] ? rcu_is_watching+0x16/0xb0 [ 1127.814680][ C0] __x64_sys_openat+0x138/0x170 [ 1127.819606][ C0] do_syscall_64+0x166/0x520 [ 1127.824263][ C0] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1127.830403][ C0] ? clear_bhb_loop+0x70/0xc0 [ 1127.835121][ C0] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1127.841056][ C0] RIP: 0033:0x7f56a9f9d47c [ 1127.845503][ C0] RSP: 002b:00007ffd51070d40 EFLAGS: 00000206 ORIG_RAX: 0000000000000101 [ 1127.853954][ C0] RAX: ffffffffffffffda RBX: 0000000000000123 RCX: 00007f56a9f9d47c [ 1127.861972][ C0] RDX: 0000000000090800 RSI: 00007f56aa0349ad RDI: 00000000ffffff9c [ 1127.869976][ C0] RBP: 00007ffd51070dec R08: 0000000000000000 R09: 0000000000000000 [ 1127.877979][ C0] R10: 0000000000000000 R11: 0000000000000206 R12: 0000000000000058 [ 1127.885986][ C0] R13: 0000000000000000 R14: 00000000000f44e4 R15: 00007ffd51070e40 [ 1127.894009][ C0] [ 1127.897061][ C0] rcu: rcu_preempt kthread starved for 389 jiffies! g172905 f0x0 RCU_GP_WAIT_FQS(5) ->state=R ->cpu=0 [ 1127.908026][ C0] rcu: Unless rcu_preempt kthread gets sufficient CPU time, OOM is now expected behavior. [ 1127.918041][ C0] rcu: RCU grace-period kthread stack dump: [ 1127.923964][ C0] task:rcu_preempt state:R running task stack:27496 pid:17 tgid:17 ppid:2 task_flags:0x208040 flags:0x00080000 [ 1127.937514][ C0] Call Trace: [ 1127.940833][ C0] [ 1127.943800][ C0] __schedule+0x17db/0x58f0 [ 1127.948352][ C0] ? __lock_acquire+0x747/0x2de0 [ 1127.953349][ C0] ? do_raw_spin_unlock+0xf5/0x200 [ 1127.958514][ C0] ? __pfx___schedule+0x10/0x10 [ 1127.963410][ C0] ? lock_acquire+0x115/0x350 [ 1127.968219][ C0] ? schedule+0x90/0x2b0 [ 1127.972508][ C0] schedule+0x164/0x2b0 [ 1127.976719][ C0] schedule_timeout+0x152/0x2c0 [ 1127.981602][ C0] ? __pfx_schedule_timeout+0x10/0x10 [ 1127.987008][ C0] ? __pfx_process_timeout+0x10/0x10 [ 1127.992348][ C0] ? _raw_spin_unlock_irqrestore+0x4c/0x80 [ 1127.998195][ C0] ? prepare_to_swait_event+0x322/0x350 [ 1128.003811][ C0] rcu_gp_fqs_loop+0x30c/0x11f0 [ 1128.008738][ C0] ? __pfx_rcu_watching_snap_recheck+0x10/0x10 [ 1128.014933][ C0] ? __pfx_rcu_gp_fqs_loop+0x10/0x10 [ 1128.020273][ C0] ? _raw_spin_unlock_irq+0x2e/0x50 [ 1128.025560][ C0] ? _raw_spin_unlock_irqrestore+0x30/0x80 [ 1128.031407][ C0] rcu_gp_kthread+0x9e/0x2b0 [ 1128.036039][ C0] ? __pfx_rcu_gp_kthread+0x10/0x10 [ 1128.041272][ C0] ? __kthread_parkme+0x71/0x1f0 [ 1128.046268][ C0] ? __kthread_parkme+0x199/0x1f0 [ 1128.051348][ C0] kthread+0x38b/0x480 [ 1128.055457][ C0] ? __pfx_rcu_gp_kthread+0x10/0x10 [ 1128.060699][ C0] ? __pfx_kthread+0x10/0x10 [ 1128.065335][ C0] ret_from_fork+0x514/0xb70 [ 1128.069964][ C0] ? __pfx_ret_from_fork+0x10/0x10 [ 1128.075114][ C0] ? __switch_to+0xc89/0x1420 [ 1128.079869][ C0] ? __pfx_kthread+0x10/0x10 [ 1128.084495][ C0] ret_from_fork_asm+0x1a/0x30 [ 1128.089345][ C0] [ 1128.092421][ C0] rcu: Stack dump where RCU GP kthread last ran: [ 1128.098772][ C0] CPU: 0 UID: 0 PID: 1103 Comm: kworker/u8:8 Not tainted syzkaller #0 PREEMPT(full) [ 1128.108299][ C0] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 09/16/2026 [ 1128.118389][ C0] Workqueue: wg-kex-wg1 wg_packet_handshake_send_worker [ 1128.125384][ C0] RIP: 0010:lock_acquire+0x232/0x350 [ 1128.130703][ C0] Code: ff ff ff e8 40 2c 43 0a f7 44 24 10 00 02 00 00 0f 84 38 ff ff ff 65 48 8b 05 62 27 f2 11 48 3b 44 24 50 75 33 fb 48 83 c4 58 <5b> 41 5c 41 5d 41 5e 41 5f 5d e9 7f 30 46 0a cc 48 8d 3d 87 60 da [ 1128.150350][ C0] RSP: 0018:ffffc90000006da0 EFLAGS: 00000296 [ 1128.156633][ C0] RAX: 8afe83fbbe805a00 RBX: 0000000000000000 RCX: 8000000000000101 [ 1128.164640][ C0] RDX: 00000000071bee9f RSI: ffffffff8e69efee RDI: ffffffff8c6dac80 [ 1128.172653][ C0] RBP: ffff888028388000 R08: ffffffff8177f1df R09: 0000000000000000 [ 1128.180665][ C0] R10: ffffc90000006ed8 R11: ffffffff81b293f0 R12: ffffffff8ed5c920 [ 1128.188692][ C0] R13: 0000000000000002 R14: 0000000000000000 R15: 0000000000000246 [ 1128.196692][ C0] FS: 0000000000000000(0000) GS:ffff888124cca000(0000) knlGS:0000000000000000 [ 1128.205676][ C0] CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033 [ 1128.212292][ C0] CR2: 00007f994577be80 CR3: 000000000eb48000 CR4: 00000000003526f0 [ 1128.220307][ C0] Call Trace: [ 1128.223613][ C0] [ 1128.226482][ C0] ? nf_hook_slow+0xc5/0x220 [ 1128.231114][ C0] ? unwind_next_frame+0x8f/0x2550 [ 1128.236293][ C0] unwind_next_frame+0xac/0x2550 [ 1128.241283][ C0] ? unwind_next_frame+0x8f/0x2550 [ 1128.246438][ C0] ? nft_do_chain_inet+0x360/0x4b0 [ 1128.251616][ C0] ? unwind_next_frame+0x8f/0x2550 [ 1128.256773][ C0] ? __pfx_stack_trace_consume_entry+0x10/0x10 [ 1128.262958][ C0] arch_stack_walk+0x11b/0x150 [ 1128.267772][ C0] ? nf_hook_slow+0xc5/0x220 [ 1128.272410][ C0] stack_trace_save+0xa9/0x100 [ 1128.277206][ C0] ? __pfx_stack_trace_save+0x10/0x10 [ 1128.282653][ C0] ? stack_depot_save_flags+0x33/0x7f0 [ 1128.288157][ C0] kasan_save_track+0x3e/0x80 [ 1128.292873][ C0] ? kasan_save_track+0x3e/0x80 [ 1128.297763][ C0] ? __kasan_slab_alloc+0x6c/0x80 [ 1128.302837][ C0] ? kmem_cache_alloc_node_noprof+0x354/0x610 [ 1128.309133][ C0] ? __alloc_skb+0x27a/0x7a0 [ 1128.313765][ C0] ? synproxy_send_client_synack+0x175/0xde0 [ 1128.319790][ C0] ? nft_synproxy_eval_v4+0x362/0x4e0 [ 1128.325222][ C0] ? nft_synproxy_do_eval+0x389/0x5d0 [ 1128.330634][ C0] ? nft_do_chain+0x48d/0x1b10 [ 1128.335441][ C0] ? nft_do_chain_inet+0x360/0x4b0 [ 1128.340627][ C0] ? nf_hook_slow+0xc5/0x220 [ 1128.345309][ C0] __kasan_slab_alloc+0x6c/0x80 [ 1128.350228][ C0] kmem_cache_alloc_node_noprof+0x354/0x610 [ 1128.356180][ C0] ? kmem_cache_alloc_node_noprof+0x1f9/0x610 [ 1128.362308][ C0] ? __alloc_skb+0x27a/0x7a0 [ 1128.366942][ C0] ? __alloc_skb+0x27a/0x7a0 [ 1128.371585][ C0] __alloc_skb+0x27a/0x7a0 [ 1128.376044][ C0] synproxy_send_client_synack+0x175/0xde0 [ 1128.381948][ C0] ? lock_acquire+0x115/0x350 [ 1128.386661][ C0] ? synproxy_pernet+0x45/0x270 [ 1128.391554][ C0] ? __pfx_synproxy_send_client_synack+0x10/0x10 [ 1128.397924][ C0] ? nft_osf_eval+0x360/0x880 [ 1128.402645][ C0] ? synproxy_pernet+0x45/0x270 [ 1128.407554][ C0] nft_synproxy_eval_v4+0x362/0x4e0 [ 1128.412806][ C0] ? __pfx_nft_synproxy_eval_v4+0x10/0x10 [ 1128.418570][ C0] ? lock_acquire+0x115/0x350 [ 1128.423289][ C0] ? nf_ip_checksum+0x13c/0x510 [ 1128.428191][ C0] nft_synproxy_do_eval+0x389/0x5d0 [ 1128.433442][ C0] ? __pfx_nft_synproxy_do_eval+0x10/0x10 [ 1128.439210][ C0] ? clockevents_program_event+0x491/0x630 [ 1128.445074][ C0] nft_do_chain+0x48d/0x1b10 [ 1128.449755][ C0] ? __pfx_nft_do_chain+0x10/0x10 [ 1128.454834][ C0] ? ipt_do_table+0x2b9/0x15d0 [ 1128.459685][ C0] nft_do_chain_inet+0x360/0x4b0 [ 1128.464677][ C0] ? __pfx_nft_do_chain_inet+0x10/0x10 [ 1128.470182][ C0] ? ipt_do_table+0x2b9/0x15d0 [ 1128.474990][ C0] ? nf_nat_ipv4_local_in+0x21f/0x720 [ 1128.480407][ C0] ? __pfx_nft_do_chain_inet+0x10/0x10 [ 1128.485917][ C0] nf_hook_slow+0xc5/0x220 [ 1128.490380][ C0] NF_HOOK+0x21f/0x3c0 [ 1128.494523][ C0] ? __pfx_ip_local_deliver_finish+0x10/0x10 [ 1128.500570][ C0] ? NF_HOOK+0x9e/0x3c0 [ 1128.504767][ C0] ? __pfx_NF_HOOK+0x10/0x10 [ 1128.509404][ C0] ? __pfx_ip_local_deliver_finish+0x10/0x10 [ 1128.515437][ C0] ? ip_local_deliver+0x113/0x190 [ 1128.520577][ C0] NF_HOOK+0x336/0x3c0 [ 1128.524692][ C0] ? __pfx_ip_rcv_finish+0x10/0x10 [ 1128.529856][ C0] ? NF_HOOK+0x9e/0x3c0 [ 1128.534056][ C0] ? __pfx_NF_HOOK+0x10/0x10 [ 1128.538697][ C0] ? __pfx_ip_rcv_finish+0x10/0x10 [ 1128.543881][ C0] ? ip_rcv_core+0x88d/0xd50 [ 1128.548527][ C0] ? __pfx_ip_rcv+0x10/0x10 [ 1128.553084][ C0] ? __pfx_ip_rcv+0x10/0x10 [ 1128.557638][ C0] process_backlog+0xa6b/0x18b0 [ 1128.562538][ C0] ? process_backlog+0x3de/0x18b0 [ 1128.567608][ C0] ? pfifo_fast_peek+0x19e/0x2d0 [ 1128.572598][ C0] ? taprio_dequeue_from_txq+0x439/0xb90 [ 1128.578274][ C0] __napi_poll+0xaa/0x330 [ 1128.582651][ C0] net_rx_action+0x61d/0xf50 [ 1128.587315][ C0] ? __pfx_net_rx_action+0x10/0x10 [ 1128.592466][ C0] ? xfrm_dev_backlog+0x24b/0x3c0 [ 1128.597592][ C0] handle_softirqs+0x226/0x860 [ 1128.602403][ C0] ? do_softirq+0x77/0xd0 [ 1128.606777][ C0] ? kernel_fpu_end+0x62/0x80 [ 1128.611529][ C0] do_softirq+0x77/0xd0 [ 1128.615729][ C0] [ 1128.618694][ C0] [ 1128.621650][ C0] __local_bh_enable_ip+0x100/0x140 [ 1128.626897][ C0] blake2s_compress+0xfa/0x1c00 [ 1128.631805][ C0] ? __asan_memset+0x22/0x50 [ 1128.636431][ C0] ? encode_point+0x8346/0x84b0 [ 1128.641360][ C0] ? __pfx_encode_point+0x10/0x10 [ 1128.646416][ C0] ? kernel_fpu_begin_mask+0x2bb/0x380 [ 1128.651954][ C0] ? __pfx_blake2s_compress+0x10/0x10 [ 1128.657391][ C0] ? lockdep_hardirqs_on+0x7b/0x110 [ 1128.662632][ C0] ? kernel_fpu_end+0x62/0x80 [ 1128.667379][ C0] blake2s_final+0x10f/0x270 [ 1128.672025][ C0] hmac+0x204/0x3b0 [ 1128.675884][ C0] ? __pfx_hmac+0x10/0x10 [ 1128.680300][ C0] kdf+0xff/0x290 [ 1128.684004][ C0] ? __pfx_kdf+0x10/0x10 [ 1128.688322][ C0] wg_noise_handshake_create_initiation+0x29e/0x810 [ 1128.694978][ C0] ? __pfx_wg_noise_handshake_create_initiation+0x10/0x10 [ 1128.702154][ C0] ? __lock_acquire+0x747/0x2de0 [ 1128.707130][ C0] ? __lock_acquire+0x747/0x2de0 [ 1128.712108][ C0] ? trace_pelt_se_tp+0x3b/0x150 [ 1128.717090][ C0] ? lock_acquire+0x115/0x350 [ 1128.721832][ C0] ? ktime_get_coarse_with_offset+0x8a/0x150 [ 1128.727856][ C0] ? lockdep_hardirqs_on+0x7b/0x110 [ 1128.733099][ C0] ? ktime_get_coarse_with_offset+0x8a/0x150 [ 1128.739116][ C0] ? ktime_get_coarse_with_offset+0x102/0x150 [ 1128.745222][ C0] wg_packet_handshake_send_worker+0x18c/0x370 [ 1128.751427][ C0] ? __pfx_wg_packet_handshake_send_worker+0x10/0x10 [ 1128.758174][ C0] ? rcu_is_watching+0x16/0xb0 [ 1128.762986][ C0] ? process_scheduled_works+0x97a/0x1630 [ 1128.768832][ C0] process_scheduled_works+0xc3d/0x1630 [ 1128.774454][ C0] ? __pfx_process_scheduled_works+0x10/0x10 [ 1128.780540][ C0] ? assign_work+0x3cf/0x5d0 [ 1128.785182][ C0] worker_thread+0xa47/0xfb0 [ 1128.789871][ C0] kthread+0x38b/0x480 [ 1128.793976][ C0] ? __pfx_worker_thread+0x10/0x10 [ 1128.799132][ C0] ? __pfx_kthread+0x10/0x10 [ 1128.803797][ C0] ret_from_fork+0x514/0xb70 [ 1128.808475][ C0] ? __pfx_ret_from_fork+0x10/0x10 [ 1128.813626][ C0] ? __switch_to+0xc89/0x1420 [ 1128.818347][ C0] ? __pfx_kthread+0x10/0x10 [ 1128.823007][ C0] ret_from_fork_asm+0x1a/0x30 [ 1128.827841][ C0]