last executing test programs: 2m41.471773429s ago: executing program 2 (id=1812): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPCTNL_MSG_EXP_GET(r0, &(0x7f00000001c0)={&(0x7f0000000100)={0x10, 0x0, 0x0, 0x8}, 0xc, &(0x7f0000000180)={&(0x7f0000000140)={0x34, 0x1, 0x2, 0x101, 0x0, 0x0, {0x7, 0x0, 0x6}, [@CTA_EXPECT_HELP_NAME={0xe, 0x6, 'snmp_trap\x00'}, @CTA_EXPECT_ID={0x8, 0x5, 0x1, 0x0, 0x3}, @CTA_EXPECT_FLAGS={0x8, 0x8, 0x1, 0x0, 0x3}]}, 0x34}, 0x1, 0x0, 0x0, 0x400c801}, 0x880) r1 = socket$inet6_mptcp(0xa, 0x1, 0x106) r2 = bpf$ITER_CREATE(0xb, &(0x7f0000000100), 0x0) close(r2) r3 = openat$nci(0xffffffffffffff9c, &(0x7f0000000080), 0x2, 0x0) r4 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r5 = syz_genetlink_get_family_id$nfc(&(0x7f0000000100), r4) ioctl$IOCTL_GET_NCIDEV_IDX(r3, 0x0, &(0x7f00000000c0)=0x0) ioctl$sock_SIOCGIFINDEX_802154(0xffffffffffffffff, 0x8933, &(0x7f00000001c0)={'wpan0\x00', 0x0}) sendmsg$NL802154_CMD_NEW_SEC_KEY(0xffffffffffffffff, &(0x7f00000003c0)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f0000000000)=ANY=[@ANYBLOB='|\x00\x00\x00', @ANYRES16, @ANYBLOB="3f9d00000000000000001700000008000300", @ANYRES32=r7], 0x7c}, 0x1, 0x0, 0x0, 0x4004}, 0x0) sendmsg$NL802154_CMD_SET_BACKOFF_EXPONENT(r4, &(0x7f00000006c0)={&(0x7f0000000380)={0x10, 0x0, 0x0, 0x800000}, 0xc, &(0x7f0000000680)={&(0x7f0000000600)={0x64, 0x0, 0x100, 0x70bd25, 0x25dfdbfe, {}, [@NL802154_ATTR_MIN_BE={0x5, 0x11, 0x7}, @NL802154_ATTR_IFINDEX={0x8}, @NL802154_ATTR_MIN_BE={0x5, 0x11, 0x9e}, @NL802154_ATTR_MIN_BE={0x5, 0x11, 0x5b}, @NL802154_ATTR_WPAN_DEV={0xc, 0x6, 0x100000001}, @NL802154_ATTR_WPAN_DEV={0xc}, @NL802154_ATTR_IFINDEX={0x8}, @NL802154_ATTR_MIN_BE={0x5, 0x11, 0xe}, @NL802154_ATTR_IFINDEX={0x8, 0x3, r7}]}, 0x64}, 0x1, 0x0, 0x0, 0x20000011}, 0xc808) sendmsg$NFC_CMD_DEV_UP(r4, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000180)={&(0x7f00000002c0)=ANY=[@ANYBLOB="1c000000", @ANYRES16=r5, @ANYBLOB="010026bd7000fcdbdf250200000008000100", @ANYRES32=r6], 0x1c}}, 0x840) write$nci(r2, &(0x7f0000000980)=@NCI_OP_RF_INTF_ACTIVATED_NTF={0x1, 0x1, 0x3, 0x5, 0xff, @b={0x4, 0x2, 0x3, 0x1, 0xf7, 0x40, 0xfa, {}, 0xff, 0x27, 0x0, 0x1, 0xf4, "21ab1b8d84a30efbce011a787d6ee11ef687d4f83965ed88e583a3b1bb44d89020f63418a0446c05032e44637dc63db21812c695de47a411f9c516656f1b469c2744dc80200cbe72b90da02ae78b6321c923a4ea587516e80bf4e715d8f44d3aaa1efb387d7b37f3a212181f4128da2520643e63b026616eb8be4793998061e431a7f85322017c25b3e11cc905fd2b358e394eb8faf4cebac6b4975d2b8e94a3f4776b1b3b8c7126b28707880a30936b189c4cdf1b24e606b69a8339c8b6c91c8d0255a9ee4869d900e8d0ac7565b97880a9306d161413d47cfbbc7f1ab97b4e4b5bf6af5d733a9b2c3089a7747509e8ea561e96"}}, 0x104) getsockopt$inet6_mptcp_buf(r1, 0x11c, 0x1, &(0x7f0000000000)=""/152, &(0x7f00000000c0)=0x98) r8 = socket$nl_generic(0x10, 0x3, 0x10) r9 = openat$tun(0xffffffffffffff9c, &(0x7f0000000100), 0x0, 0x0) ioctl$TUNSETIFF(r9, 0x400454ca, &(0x7f0000000000)={'\x00', 0x5}) ioctl$TUNSETPERSIST(r9, 0x400454cb, 0x1) ioctl$TUNSETPERSIST(r9, 0x400454cb, 0xffffdffffffffffd) r10 = socket$nl_generic(0x10, 0x3, 0x10) r11 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000000), 0xffffffffffffffff) sendmsg$NL80211_CMD_SET_CQM(r10, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000280)={&(0x7f00000003c0)=ANY=[@ANYBLOB=',\x00\x00\x00', @ANYRES16=r11, @ANYBLOB="010000000000000000003f00000008000300", @ANYRES32, @ANYBLOB="10005e01"], 0x2c}}, 0x800) sendmsg$NL80211_CMD_NOTIFY_RADAR(r8, &(0x7f0000000300)={&(0x7f0000000240)={0x10, 0x0, 0x0, 0x1000}, 0xc, &(0x7f00000002c0)={&(0x7f0000000280)={0x34, r11, 0x100, 0x70bd26, 0x25dfdbfe, {{}, {@void, @void}}, [@NL80211_ATTR_WIPHY_FREQ={0x8, 0x26, @random=0x994}, @NL80211_ATTR_WIPHY_CHANNEL_TYPE={0x8, 0x27, 0x2}, @NL80211_ATTR_CENTER_FREQ2={0x8, 0xa1, 0x6}, @NL80211_ATTR_CENTER_FREQ1={0x8, 0xa0, 0x8}]}, 0x34}, 0x1, 0x0, 0x0, 0x1}, 0x20000080) sendmsg$IPCTNL_MSG_CT_DELETE(r1, &(0x7f0000000540)={&(0x7f0000000340)={0x10, 0x0, 0x0, 0x4000000}, 0xc, &(0x7f0000000500)={&(0x7f0000000400)={0xf8, 0x2, 0x1, 0x5, 0x0, 0x0, {0x7, 0x0, 0x4}, [@CTA_NAT_SRC={0x10, 0x6, 0x0, 0x1, [@CTA_NAT_PROTO={0xc, 0x3, 0x0, 0x1, [@CTA_PROTONAT_PORT_MIN={0x6, 0x1, 0x4e22}]}]}, @CTA_NAT_SRC={0x4c, 0x6, 0x0, 0x1, [@CTA_NAT_PROTO={0x24, 0x3, 0x0, 0x1, [@CTA_PROTONAT_PORT_MIN={0x6, 0x1, 0x4e22}, @CTA_PROTONAT_PORT_MIN={0x6, 0x1, 0x4e23}, @CTA_PROTONAT_PORT_MIN={0x6, 0x1, 0x4e22}, @CTA_PROTONAT_PORT_MIN={0x6, 0x1, 0x4e22}]}, @CTA_NAT_PROTO={0x1c, 0x3, 0x0, 0x1, [@CTA_PROTONAT_PORT_MIN={0x6, 0x1, 0x4e21}, @CTA_PROTONAT_PORT_MAX={0x6, 0x2, 0x4e22}, @CTA_PROTONAT_PORT_MAX={0x6, 0x2, 0x4e22}]}, @CTA_NAT_V4_MAXIP={0x8, 0x2, @initdev={0xac, 0x1e, 0x1, 0x0}}]}, @CTA_TUPLE_ORIG={0x18, 0x1, 0x0, 0x1, [@CTA_TUPLE_ZONE={0x6, 0x3, 0x1, 0x0, 0x4}, @CTA_TUPLE_PROTO={0xc, 0x2, 0x0, 0x1, {0x5, 0x1, 0x21}}]}, @CTA_LABELS={0x14, 0x16, 0x1, 0x0, [0x5, 0x6d, 0x1, 0x0]}, @CTA_SYNPROXY={0xc, 0x18, 0x0, 0x1, [@CTA_SYNPROXY_ISN={0x8, 0x1, 0x1, 0x0, 0x4}]}, @CTA_TUPLE_ORIG={0x50, 0x1, 0x0, 0x1, [@CTA_TUPLE_IP={0x14, 0x1, 0x0, 0x1, @ipv4={{0x8, 0x1, @initdev={0xac, 0x1e, 0x0, 0x0}}, {0x8, 0x2, @multicast1}}}, @CTA_TUPLE_PROTO={0xc, 0x2, 0x0, 0x1, {0x5, 0x1, 0x6}}, @CTA_TUPLE_PROTO={0xc, 0x2, 0x0, 0x1, {0x5, 0x1, 0x11}}, @CTA_TUPLE_PROTO={0xc, 0x2, 0x0, 0x1, {0x5, 0x1, 0x8e}}, @CTA_TUPLE_PROTO={0xc, 0x2, 0x0, 0x1, {0x5, 0x1, 0x88}}, @CTA_TUPLE_ZONE={0x6, 0x3, 0x1, 0x0, 0x1}]}]}, 0xf8}, 0x1, 0x0, 0x0, 0x4040080}, 0x80) r12 = socket$nl_generic(0x10, 0x3, 0x10) r13 = syz_genetlink_get_family_id$mptcp(&(0x7f00000000c0), 0xffffffffffffffff) sendmsg$MPTCP_PM_CMD_ANNOUNCE(r12, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000280)={&(0x7f00000001c0)={0x18, r13, 0x1, 0x70bd2d, 0x25dfdbfe, {}, [@MPTCP_PM_ATTR_ADDR={0x4}]}, 0x18}, 0x1, 0x0, 0x0, 0x4001}, 0x40000) r14 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r14, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000080)={0x18, 0x25, 0x101, 0x70bd27, 0x25dfdbfc, {0x1a}, [@typed={0x4, 0x162, 0x0, 0x0, @binary}]}, 0x18}, 0x1, 0x0, 0x0, 0x40008840}, 0x0) 2m40.453373602s ago: executing program 2 (id=1820): r0 = socket$packet(0x11, 0x3, 0x300) r1 = socket$nl_generic(0x10, 0x3, 0x10) r2 = syz_genetlink_get_family_id$batadv(&(0x7f0000000040), 0xffffffffffffffff) ioctl$ifreq_SIOCGIFINDEX_batadv_mesh(r1, 0x8933, &(0x7f0000000000)={'batadv0\x00', 0x0}) sendmsg$BATADV_CMD_GET_BLA_BACKBONE(r1, &(0x7f0000000400)={0x0, 0x0, &(0x7f00000003c0)={&(0x7f00000001c0)=ANY=[@ANYBLOB="1c000000", @ANYRES16=r2, @ANYBLOB="030328bd7000000000000a00000008000300", @ANYRES32=r3], 0x1c}}, 0x0) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000140)={'syz_tun\x00'}) syz_emit_ethernet(0x2a, &(0x7f0000000040)=ANY=[@ANYBLOB="bbbbbbbbbbbbaaaaaaaa8a3e08004500001c006700000001907864010300ac1414aa0d009078fffe0009"], 0x0) r4 = bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000780)={0x6, 0x4, &(0x7f0000000040)=ANY=[@ANYBLOB="18020000000000000000000000000000850000001700000095"], &(0x7f00000005c0)='GPL\x00'}, 0x94) bpf$BPF_LINK_CREATE_XDP(0x1c, &(0x7f0000000080)={r4, r3, 0x25, 0x2, @void}, 0x10) syz_emit_ethernet(0x86, &(0x7f0000000300)=ANY=[], 0x0) 2m40.253957637s ago: executing program 2 (id=1823): r0 = socket$inet6(0xa, 0x2, 0x0) r1 = socket(0x10, 0x803, 0x0) r2 = bpf$PROG_LOAD(0x5, &(0x7f00000002c0)={0x6, 0x3, &(0x7f0000000480)=ANY=[@ANYBLOB="1800000002000000000000000000000095"], &(0x7f0000000500)='GPL\x00', 0x0, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, @xdp, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) (async, rerun: 64) r3 = socket$nl_generic(0x10, 0x3, 0x10) (rerun: 64) ioctl$sock_SIOCGIFINDEX(r3, 0x8933, &(0x7f0000000580)={'veth1_to_bond\x00', 0x0}) r5 = bpf$BPF_LINK_CREATE_XDP(0x1c, &(0x7f0000000140)={r2, r4, 0x25, 0x0, @val=@netfilter={0xa, 0x1, 0xd91, 0x1}}, 0x20) (async) r6 = bpf$PROG_LOAD(0x5, &(0x7f00000003c0)={0x15, 0x3, &(0x7f0000000480)=ANY=[], &(0x7f0000000040)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_LINK_UPDATE(0x1d, &(0x7f0000000000)={r5, r6, 0x4, r6}, 0x5) (async) syz_genetlink_get_family_id$nl80211(&(0x7f0000000240), r1) (async, rerun: 32) getsockname$packet(r1, &(0x7f0000000180)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f00000000c0)=0x14) (rerun: 32) sendmsg$nl_route(r1, &(0x7f0000000440)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f00000001c0)=@newlink={0x44, 0x10, 0x437, 0x0, 0x0, {0x0, 0x0, 0x0, r7, 0x30011}, [@IFLA_LINKINFO={0x24, 0x12, 0x0, 0x1, @ipip={{0x9}, {0x14, 0x2, 0x0, 0x1, [@IFLA_IPTUN_LOCAL={0x8, 0x2, @rand_addr=0x64010102}, @IFLA_IPTUN_PROTO={0x5, 0x9, 0x89}]}}}]}, 0x44}, 0x1, 0x0, 0x0, 0x40000}, 0x4000000) (async) sendmmsg$inet(r0, &(0x7f0000000880)=[{{&(0x7f0000000040)={0x2, 0x4e1c, @multicast1}, 0x10, 0x0, 0x0, &(0x7f0000000000)=[@ip_pktinfo={{0x1c, 0x0, 0x8, {r7, @empty, @multicast1}}}], 0x20}}], 0x1, 0x4880) 2m39.977133735s ago: executing program 2 (id=1828): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) close(r0) (async) r1 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r1, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000240)=ANY=[@ANYBLOB="140000001000010000000000000000000500000a28000000000a030000000000000000000a00000708000240000000020900010073797a31000000002c000000030a010100000000000000000a0000070900010073797a31000000000900030073797a320000000014000000110001"], 0x7c}, 0x1, 0x0, 0x0, 0x4000}, 0x0) (async) sendmsg$NFT_BATCH(r1, &(0x7f0000009b40)={0x0, 0x0, &(0x7f0000009b00)={&(0x7f0000000340)=ANY=[@ANYBLOB="140000001000010000000000000000000500000a4c000000090a010400000000000000000a0000040900010073797a310000000008000540000000020900020073797a310000000008000a40ffffff07000000400000001408000c4000000e45400000000c0a010100000000000000000a0000060900020073797a31000000000900010073797a310000000014000380100000800c00018006000100d103000014000000110001"], 0xb4}, 0x1, 0x0, 0x0, 0x40090}, 0x20008040) (async) sendmsg$NFT_BATCH(r0, &(0x7f0000009b40)={0x0, 0x0, &(0x7f0000009b00)={&(0x7f00000002c0)=ANY=[@ANYBLOB="140000001000010000000000000000000500000a400000000c0a01010000000000f9ff000a0000090900020073797a31000000200900010073797a310000000014000380100000800c00018006000100582e000014000000110001"], 0x68}, 0x1, 0x0, 0x0, 0x4004850}, 0x40) (async) r2 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_CREATE(r2, &(0x7f0000000040)={0x0, 0x0, &(0x7f00000044c0)={&(0x7f0000000080)={0x5c, 0x2, 0x6, 0x801, 0x0, 0x0, {0x0, 0x0, 0x9}, [@IPSET_ATTR_DATA={0xc, 0x7, 0x0, 0x1, [@IPSET_ATTR_BUCKETSIZE={0x5, 0x15, 0x9}]}, @IPSET_ATTR_FAMILY={0x5, 0x5, 0xa}, @IPSET_ATTR_PROTOCOL={0x5}, @IPSET_ATTR_REVISION={0x5}, @IPSET_ATTR_SETNAME={0x9, 0x2, 'syz2\x00'}, @IPSET_ATTR_TYPENAME={0x15, 0x3, 'hash:ip,port,net\x00'}]}, 0x5c}}, 0x0) (async) r3 = socket$nl_netfilter(0x10, 0x3, 0xc) (async) r4 = socket$netlink(0x10, 0x3, 0x0) setsockopt$netlink_NETLINK_DROP_MEMBERSHIP(r4, 0x10e, 0xc, &(0x7f0000000640)=0x4, 0x4) bpf$PROG_LOAD(0x5, &(0x7f000000e000)={0x0, 0x3, &(0x7f0000000040)=ANY=[@ANYBLOB="b4050000000000007100000000000000000008"], 0x0}, 0x90) (async) sendmsg$netlink(r4, &(0x7f0000000480)={0x0, 0x0, &(0x7f00000000c0)=[{&(0x7f0000000040)=ANY=[@ANYBLOB="1c00000022004106"], 0x1c}], 0x1}, 0x0) sendmsg$NFT_MSG_GETSETELEM(r3, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000400)=ANY=[@ANYBLOB="40000000210a018800000000000000000a0000010900020073797a31000000000900010073797a310000000014000380100000800c000180060001"], 0x40}, 0x1, 0x0, 0x0, 0x4000805}, 0x8000) (async) syz_80211_inject_frame(&(0x7f0000000600), &(0x7f0000000000)=@data_frame={@a_msdu=@type11={{0x0, 0x2, 0xe, 0x1, 0x1, 0x1, 0x1, 0x0, 0x0, 0x0, 0x1}, {0x40}, @broadcast, @device_a, @random="b7f62bee8f36", {0x0, 0x549}, @device_a, @value={0x3, 0x1, 0x1, 0x1, 0x8}, @value=@ver_80211n={0x0, 0x3, 0x0, 0x1, 0x0, 0x1, 0x0, 0x0, 0x0, 0x1}}}, 0x24) 2m39.79992013s ago: executing program 2 (id=1831): r0 = socket$netlink(0x10, 0x3, 0x0) r1 = socket$nl_generic(0x10, 0x3, 0x10) r2 = syz_genetlink_get_family_id$tipc2(&(0x7f0000000040), 0xffffffffffffffff) sendmsg$TIPC_NL_KEY_SET(r1, &(0x7f0000000540)={0x0, 0x0, &(0x7f0000000500)={&(0x7f0000000080)={0x54, r2, 0x1, 0x70bd28, 0x25dfdbfc, {}, [@TIPC_NLA_NODE={0x40, 0x6, 0x0, 0x1, [@TIPC_NLA_NODE_KEY={0x3c, 0x4, {'gcm(aes)\x00', 0x14, "9ea2d328893918792a5ca222a6ad614b6f3aa3a6"}}]}]}, 0x54}, 0x1, 0x0, 0x0, 0x4000001}, 0x0) r3 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r3, &(0x7f0000000100)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000000)=ANY=[@ANYBLOB="b8000000190001000000000000000000dc020078000000000000000000000000ff02000000000000e26ea7250000000100000000000000000a"], 0xb8}, 0x1, 0x0, 0x0, 0x20000080}, 0x2000004) sendmsg$nl_xfrm(r3, &(0x7f0000000480)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000000)=ANY=[@ANYBLOB="650100001b"], 0x188}}, 0x48090) sendmsg$TIPC_NL_BEARER_GET(0xffffffffffffffff, &(0x7f0000000480)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x2000000}, 0xc, &(0x7f0000000440)={&(0x7f0000000280)=ANY=[@ANYBLOB="f0484001", @ANYRES16=r2, @ANYBLOB="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"], 0x1ac}, 0x1, 0x0, 0x0, 0x4}, 0x4) sendmsg$nl_route(r0, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000080)=@newlink={0x44, 0x10, 0xffffff1f, 0x0, 0x0, {0x0, 0x0, 0x0, 0x0, 0xfffff689}, [@IFLA_LINKINFO={0x24, 0x12, 0x0, 0x1, @bridge={{0xb}, {0x14, 0x2, 0x0, 0x1, [@IFLA_BR_STP_STATE={0x8, 0x32, 0x1}, @IFLA_BR_STP_STATE={0x8, 0x5, 0x1}]}}}]}, 0x44}}, 0x0) 2m39.516177095s ago: executing program 2 (id=1835): r0 = socket$vsock_stream(0x28, 0x1, 0x0) connect$vsock_stream(r0, &(0x7f0000000100)={0x28, 0x0, 0x0, @local}, 0x10) (async) r1 = socket$nl_generic(0x10, 0x3, 0x10) (async) syz_genetlink_get_family_id$tipc2(&(0x7f0000000040), 0xffffffffffffffff) r2 = syz_genetlink_get_family_id$tipc2(&(0x7f0000000000), r1) r3 = socket$inet6_sctp(0xa, 0x1, 0x84) setsockopt(r3, 0x84, 0x81, &(0x7f0000000280)="1a00000002000000", 0x8) (async) setsockopt$inet_sctp6_SCTP_AUTH_KEY(r3, 0x84, 0x17, &(0x7f0000000140)={0x0, 0x6, 0x4, "d631f9fe"}, 0xc) r4 = syz_genetlink_get_family_id$nl80211(&(0x7f00000000c0), r1) sendmsg$NL80211_CMD_SET_MCAST_RATE(r1, &(0x7f0000000380)={&(0x7f0000000080)={0x10, 0x0, 0x0, 0x800000}, 0xc, &(0x7f0000000340)={&(0x7f00000002c0)={0x60, r4, 0x300, 0x70bd2c, 0x8, {{}, {@void, @val={0xc, 0x99, {0x4, 0x13}}}}, [@NL80211_ATTR_MCAST_RATE={0x8, 0x6b, 0x3c}, @NL80211_ATTR_MCAST_RATE={0x8, 0x6b, 0x5a}, @NL80211_ATTR_MCAST_RATE={0x8, 0x6b, 0x6e}, @NL80211_ATTR_MCAST_RATE={0x8, 0x6b, 0xfa}, @NL80211_ATTR_MCAST_RATE={0x8, 0x6b, 0xf0}, @NL80211_ATTR_MCAST_RATE={0x8, 0x6b, 0x1e0}, @NL80211_ATTR_MCAST_RATE={0x8, 0x6b, 0x168}, @NL80211_ATTR_MCAST_RATE={0x8, 0x6b, 0x12c}]}, 0x60}, 0x1, 0x0, 0x0, 0x40}, 0x81) (async) setsockopt$inet_sctp6_SCTP_AUTH_DEACTIVATE_KEY(r3, 0x84, 0x23, &(0x7f0000000000)={0x0, 0x6}, 0x8) (async, rerun: 32) setsockopt$inet_sctp6_SCTP_AUTH_ACTIVE_KEY(r3, 0x84, 0x18, &(0x7f0000000240)={0x0, 0x6}, 0x8) (async, rerun: 32) sendmsg$TIPC_NL_PUBL_GET(r1, &(0x7f00000009c0)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000100)={0x14, r2, 0x430, 0x70bd2b, 0x0, {0x2}}, 0x14}}, 0x0) (async, rerun: 32) r5 = syz_init_net_socket$nl_rdma(0x10, 0x3, 0x10) (rerun: 32) sendmsg$netlink(r5, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000002580)=[{&(0x7f0000000180)=ANY=[@ANYBLOB="1400000026000100000000000000000006"], 0x14}], 0x1}, 0x0) 2m27.435317787s ago: executing program 3 (id=1964): r0 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r0, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000140)={&(0x7f00000001c0)={0x14, 0x3a, 0x301, 0x70bd25, 0xfffffffc, {0x6}}, 0x14}, 0x1, 0x0, 0x0, 0x402464506e8b64b6}, 0x0) r1 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r2 = syz_genetlink_get_family_id$nfc(&(0x7f0000000780), r1) sendmsg$NFC_CMD_DEACTIVATE_TARGET(r1, &(0x7f0000000880)={0x0, 0x0, &(0x7f0000000840)={&(0x7f0000000800)={0x24, r2, 0x1, 0x70bd2d, 0x25dfdbfe, {}, [@NFC_ATTR_TARGET_INDEX={0x8, 0x4, 0x1}, @NFC_ATTR_DEVICE_INDEX={0x8}]}, 0x24}, 0x1, 0x0, 0x0, 0x4004}, 0x4044084) r3 = syz_init_net_socket$x25(0x9, 0x5, 0x0) ioctl$sock_SIOCGSKNS(r3, 0x894c, 0x0) r4 = bpf$PROG_LOAD(0x5, &(0x7f0000000240)={0x16, 0xb, &(0x7f0000000580)=ANY=[@ANYBLOB="18000000000000000000000000000000180000002020702500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000000000000b703000000000000850000007000000095"], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x41100, 0x0, '\x00', 0x0, @flow_dissector, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8}, 0x94) bpf$BPF_PROG_TEST_RUN(0x1c, &(0x7f00000004c0)={r4, 0x3, 0x11, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8}, 0x44) syz_genetlink_get_family_id$nl80211(&(0x7f0000000240), r0) ioctl$sock_SIOCGIFVLAN_GET_VLAN_INGRESS_PRIORITY_CMD(r0, 0x8982, &(0x7f0000000000)) syz_genetlink_get_family_id$nl802154(&(0x7f0000000040), r1) 2m27.067391543s ago: executing program 3 (id=1966): r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$ethtool(&(0x7f0000000580), 0xffffffffffffffff) sendmsg$ETHTOOL_MSG_COALESCE_SET(r0, &(0x7f0000000540)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000440)=ANY=[@ANYBLOB='T\x00\x00\x00', @ANYRES16=r1, @ANYBLOB="010000000000000000001400000018000180140002006e657464657673696d300000000000000800040000000000080012000300000008001100ff070000080010000000020008000f"], 0x54}}, 0x0) r2 = socket$key(0xf, 0x3, 0x2) sendmsg$key(r2, &(0x7f0000000040)={0x3, 0x0, &(0x7f0000000340)={&(0x7f0000000540)={0x2, 0x4, 0x0, 0x5, 0xe, 0x0, 0x0, 0x2000000, [@sadb_address={0x5, 0x6, 0x0, 0x0, 0x0, @in6={0xa, 0x0, 0x0, @private2}}, @sadb_sa={0x2, 0x1, 0x0, 0x0, 0x0, 0x2}, @sadb_address={0x5, 0x5, 0x0, 0x0, 0x0, @in6={0xa, 0x4e22, 0x0, @remote, 0x5}}]}, 0x70}, 0x1, 0x7}, 0x0) r3 = bpf$PROG_LOAD(0x5, &(0x7f0000000600)={0x20, 0x3, &(0x7f0000000580)=ANY=[@ANYBLOB="1800000000000000000000000000000095"], &(0x7f0000000000)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @netfilter=0x2d, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x99ee}, 0x94) bpf$BPF_LINK_CREATE_XDP(0x1c, &(0x7f0000002380)={r3, 0x0, 0x2d, 0x0, @val=@netfilter={0x2, 0x4, 0x600, 0x1}}, 0x20) r4 = bpf$PROG_LOAD(0x5, &(0x7f0000000080)={0x3, 0x8, &(0x7f0000002340)=ANY=[@ANYBLOB="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"], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @sched_cls}, 0x48) bpf$BPF_PROG_DETACH(0x1c, &(0x7f0000000380)=ANY=[@ANYRES32=r4, @ANYRES32=r4, @ANYBLOB="2f0000001220f50004"], 0x20) r5 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r5, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000180)={&(0x7f00000001c0)=ANY=[@ANYBLOB="340000003e000701feffffff00000000047c0000040042800c0001"], 0x34}, 0x1, 0x0, 0x0, 0x4000895}, 0xc000) 2m27.039274757s ago: executing program 3 (id=1968): r0 = socket$nl_rdma(0x10, 0x3, 0x14) r1 = socket$inet_udp(0x2, 0x2, 0x0) ioctl$XFS_IOC_ATTRLIST_BY_HANDLE(r0, 0x4058587a, &(0x7f0000000300)={{r0, &(0x7f0000000000)='\'}\x00', 0x40000, &(0x7f0000000100)={@_ha_fsid={[0x7]}, {0x2, 0x1, 0x7, 0x7}}, 0x7ff, &(0x7f0000000140)={@_ha_fsid}, &(0x7f0000000200)}, {[0x3, 0x40, 0x7fffffff, 0x5]}, 0x5, 0xa8, &(0x7f0000000240)=""/168}) getsockopt$inet_sctp_SCTP_RTOINFO(r2, 0x84, 0x0, &(0x7f0000000380)={0x0, 0x73934cb7, 0x0, 0xfa}, &(0x7f00000003c0)=0x10) (async) getsockopt$inet_sctp_SCTP_RTOINFO(r2, 0x84, 0x0, &(0x7f0000000380)={0x0, 0x73934cb7, 0x0, 0xfa}, &(0x7f00000003c0)=0x10) bpf$MAP_UPDATE_ELEM(0x2, &(0x7f00000001c0)={0xffffffffffffffff, &(0x7f0000000640)="b4", &(0x7f0000000180)=@udp=r1}, 0x20) close(r1) sendmsg$RDMA_NLDEV_CMD_NEWLINK(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000040)={0x38, 0x1403, 0x1, 0x70bd2a, 0x25dfdbfe, "", [{{0x9, 0x2, 'syz1\x00'}, {0x8, 0x41, 'siw\x00'}, {0x14, 0x33, 'bond0\x00'}}]}, 0x38}, 0x1, 0x0, 0x0, 0x800}, 0x20000800) sendmsg$RDMA_NLDEV_CMD_STAT_SET(r0, 0x0, 0x24004080) (async) sendmsg$RDMA_NLDEV_CMD_STAT_SET(r0, 0x0, 0x24004080) 2m26.621394166s ago: executing program 3 (id=1973): syz_genetlink_get_family_id$ipvs(&(0x7f0000000040), 0xffffffffffffffff) (async) r0 = syz_genetlink_get_family_id$ipvs(&(0x7f0000000040), 0xffffffffffffffff) r1 = socket$nl_generic(0x10, 0x3, 0x10) getsockopt$inet6_IPV6_FLOWLABEL_MGR(0xffffffffffffffff, 0x29, 0x20, &(0x7f0000000100)={@local, 0x9, 0x1, 0x3, 0x8, 0x4}, 0x0) (async) getsockopt$inet6_IPV6_FLOWLABEL_MGR(0xffffffffffffffff, 0x29, 0x20, &(0x7f0000000100)={@local, 0x9, 0x1, 0x3, 0x8, 0x4}, 0x0) syz_init_net_socket$bt_l2cap(0x1f, 0x3, 0x3) (async) r2 = syz_init_net_socket$bt_l2cap(0x1f, 0x3, 0x3) sendmsg$ETHTOOL_MSG_STRSET_GET(0xffffffffffffffff, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000100)={0x14, 0x0, 0x3141e0b2751b0f9b, 0x70bd2a, 0x25dfdbff}, 0x14}, 0x1, 0x0, 0x0, 0x60c5}, 0x8090) ioctl$FS_IOC_GETFSLABEL(r2, 0x400452c8, &(0x7f0000000100)) sendmsg$IPVS_CMD_NEW_SERVICE(r1, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000080)={0x4c, r0, 0x1, 0x0, 0x0, {}, [@IPVS_CMD_ATTR_SERVICE={0x38, 0x1, 0x0, 0x1, [@IPVS_SVC_ATTR_AF={0x6, 0x1, 0x2}, @IPVS_SVC_ATTR_FWMARK={0x8}, @IPVS_SVC_ATTR_FLAGS={0xc}, @IPVS_SVC_ATTR_NETMASK={0x8}, @IPVS_SVC_ATTR_TIMEOUT={0x8}, @IPVS_SVC_ATTR_PE_NAME={0x8, 0x6}]}]}, 0x4c}}, 0x0) r3 = socket$inet6_tcp(0xa, 0x1, 0x0) r4 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r4, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000140)={&(0x7f00000000c0)={0x14, 0x35, 0x301, 0x70bd26, 0xfffffffc, {0x6}}, 0x14}, 0x1, 0x0, 0x0, 0x1882}, 0x0) getsockopt$IP_VS_SO_GET_SERVICES(r3, 0x0, 0x482, &(0x7f0000001640)=""/139, &(0x7f0000000100)=0x8) 2m26.445211186s ago: executing program 3 (id=1975): socket$inet6_tcp(0xa, 0x1, 0x0) (async) r0 = socket$inet6_tcp(0xa, 0x1, 0x0) r1 = socket(0x1d, 0x2, 0x6) ioctl$ifreq_SIOCGIFINDEX_vcan(r1, 0x8933, &(0x7f0000000200)={'vxcan0\x00', 0x0}) bind$can_j1939(r1, &(0x7f00000001c0)={0x1d, r2, 0x2, {0x0, 0x1, 0x1}, 0xff}, 0x18) sendmsg$MPTCP_PM_CMD_GET_ADDR(r1, &(0x7f00000006c0)={&(0x7f0000000340)={0x10, 0x0, 0x0, 0x4}, 0xc, &(0x7f0000000680)={&(0x7f00000005c0)={0x14, 0x0, 0x100, 0x70bd25, 0x25dfdbff}, 0x14}, 0x1, 0x0, 0x0, 0x80}, 0x80c0) socket$kcm(0x10, 0x2, 0x0) (async) r3 = socket$kcm(0x10, 0x2, 0x0) sendmsg$kcm(r3, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000080)=[{&(0x7f0000000300)="2e00000011008108090f9becdb4cb92e0a4831371400000069bd6efb2502eaf60d000300020400bf050005001206", 0x2e}], 0x1}, 0x0) ioctl$sock_ifreq(0xffffffffffffffff, 0x8932, 0x0) (async) ioctl$sock_ifreq(0xffffffffffffffff, 0x8932, 0x0) ppoll(&(0x7f00000000c0)=[{}, {}], 0x20000000000000dc, 0x0, 0x0, 0x0) getsockopt$inet6_tcp_int(r0, 0x6, 0x19, 0x0, &(0x7f0000000080)) (async) getsockopt$inet6_tcp_int(r0, 0x6, 0x19, 0x0, &(0x7f0000000080)) ioctl$BTRFS_IOC_START_SYNC(r0, 0x80089418, &(0x7f0000000000)) (async) ioctl$BTRFS_IOC_START_SYNC(r0, 0x80089418, &(0x7f0000000000)=0x0) bpf$MAP_CREATE(0x0, &(0x7f00000003c0)=@base={0x1a, 0x0, 0x0, 0x0, 0x3866, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x5}, 0x48) ioctl$BTRFS_IOC_DEV_INFO(0xffffffffffffffff, 0xd000941e, &(0x7f0000000280)={0x0, "a1756becc7ccb1ca301fdc7766b69d8d"}) ioctl$BTRFS_IOC_SUBVOL_CREATE_V2(r0, 0x50009418, &(0x7f0000001280)={{r0}, r4, 0x6, @inherit={0x68, &(0x7f0000000200)={0x1, 0x4, 0x4, 0xf, {0x0, 0x1, 0xbe96, 0x4, 0x8}, [0x9, 0x9, 0x7, 0xffff]}}, @devid=r5}) r6 = socket(0x2000000015, 0x80005, 0x40) connect$inet6(r6, &(0x7f00000001c0)={0xa, 0x0, 0x1, @dev={0xfe, 0x80, '\x00', 0x1f}, 0x6}, 0x1c) recvfrom$inet6(r0, &(0x7f00000000c0)=""/167, 0xa7, 0x10000, &(0x7f0000000180)={0xa, 0x4e22, 0xd, @dev={0xfe, 0x80, '\x00', 0x1d}, 0x1}, 0x1c) 2m26.267089293s ago: executing program 3 (id=1978): r0 = socket$nl_generic(0x10, 0x3, 0x10) bpf$PROG_LOAD(0x5, &(0x7f0000000700)={0x5, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41000, 0x10, '\x00', 0x0, @fallback=0x5, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x10, 0x5}, 0x94) r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000100)={0x20, 0x3, &(0x7f0000000340)=ANY=[@ANYBLOB="1800000000000000000000000000000095"], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x41100, 0x0, '\x00', 0x0, @netfilter=0x2d, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000040)={r1, 0x0, 0x22, 0x0, &(0x7f0000000380)="f6f4e9a1d78ad62ceef1884386dd78bb3fb7dbfc8180ca8395ccfda2e499b3dcf581", 0x0, 0xa1b, 0x0, 0x2f, 0x0, &(0x7f0000000700)="010a", 0x0}, 0x50) sendmsg$nl_generic(r0, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000001ac0)={&(0x7f0000000000)=ANY=[@ANYBLOB="140000002600010026bff000fddbdf2505000000"], 0x14}, 0x1, 0x0, 0x0, 0x4000d}, 0x20000000) 2m24.485615537s ago: executing program 32 (id=1835): r0 = socket$vsock_stream(0x28, 0x1, 0x0) connect$vsock_stream(r0, &(0x7f0000000100)={0x28, 0x0, 0x0, @local}, 0x10) (async) r1 = socket$nl_generic(0x10, 0x3, 0x10) (async) syz_genetlink_get_family_id$tipc2(&(0x7f0000000040), 0xffffffffffffffff) r2 = syz_genetlink_get_family_id$tipc2(&(0x7f0000000000), r1) r3 = socket$inet6_sctp(0xa, 0x1, 0x84) setsockopt(r3, 0x84, 0x81, &(0x7f0000000280)="1a00000002000000", 0x8) (async) setsockopt$inet_sctp6_SCTP_AUTH_KEY(r3, 0x84, 0x17, &(0x7f0000000140)={0x0, 0x6, 0x4, "d631f9fe"}, 0xc) r4 = syz_genetlink_get_family_id$nl80211(&(0x7f00000000c0), r1) sendmsg$NL80211_CMD_SET_MCAST_RATE(r1, &(0x7f0000000380)={&(0x7f0000000080)={0x10, 0x0, 0x0, 0x800000}, 0xc, &(0x7f0000000340)={&(0x7f00000002c0)={0x60, r4, 0x300, 0x70bd2c, 0x8, {{}, {@void, @val={0xc, 0x99, {0x4, 0x13}}}}, [@NL80211_ATTR_MCAST_RATE={0x8, 0x6b, 0x3c}, @NL80211_ATTR_MCAST_RATE={0x8, 0x6b, 0x5a}, @NL80211_ATTR_MCAST_RATE={0x8, 0x6b, 0x6e}, @NL80211_ATTR_MCAST_RATE={0x8, 0x6b, 0xfa}, @NL80211_ATTR_MCAST_RATE={0x8, 0x6b, 0xf0}, @NL80211_ATTR_MCAST_RATE={0x8, 0x6b, 0x1e0}, @NL80211_ATTR_MCAST_RATE={0x8, 0x6b, 0x168}, @NL80211_ATTR_MCAST_RATE={0x8, 0x6b, 0x12c}]}, 0x60}, 0x1, 0x0, 0x0, 0x40}, 0x81) (async) setsockopt$inet_sctp6_SCTP_AUTH_DEACTIVATE_KEY(r3, 0x84, 0x23, &(0x7f0000000000)={0x0, 0x6}, 0x8) (async, rerun: 32) setsockopt$inet_sctp6_SCTP_AUTH_ACTIVE_KEY(r3, 0x84, 0x18, &(0x7f0000000240)={0x0, 0x6}, 0x8) (async, rerun: 32) sendmsg$TIPC_NL_PUBL_GET(r1, &(0x7f00000009c0)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000100)={0x14, r2, 0x430, 0x70bd2b, 0x0, {0x2}}, 0x14}}, 0x0) (async, rerun: 32) r5 = syz_init_net_socket$nl_rdma(0x10, 0x3, 0x10) (rerun: 32) sendmsg$netlink(r5, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000002580)=[{&(0x7f0000000180)=ANY=[@ANYBLOB="1400000026000100000000000000000006"], 0x14}], 0x1}, 0x0) 2m11.121119775s ago: executing program 33 (id=1978): r0 = socket$nl_generic(0x10, 0x3, 0x10) bpf$PROG_LOAD(0x5, &(0x7f0000000700)={0x5, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41000, 0x10, '\x00', 0x0, @fallback=0x5, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x10, 0x5}, 0x94) r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000100)={0x20, 0x3, &(0x7f0000000340)=ANY=[@ANYBLOB="1800000000000000000000000000000095"], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x41100, 0x0, '\x00', 0x0, @netfilter=0x2d, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000040)={r1, 0x0, 0x22, 0x0, &(0x7f0000000380)="f6f4e9a1d78ad62ceef1884386dd78bb3fb7dbfc8180ca8395ccfda2e499b3dcf581", 0x0, 0xa1b, 0x0, 0x2f, 0x0, &(0x7f0000000700)="010a", 0x0}, 0x50) sendmsg$nl_generic(r0, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000001ac0)={&(0x7f0000000000)=ANY=[@ANYBLOB="140000002600010026bff000fddbdf2505000000"], 0x14}, 0x1, 0x0, 0x0, 0x4000d}, 0x20000000) 2m10.218767011s ago: executing program 4 (id=2121): r0 = socket$packet(0x11, 0x2, 0x300) r1 = socket$alg(0x26, 0x5, 0x0) bind$alg(r1, &(0x7f00000004c0)={0x26, 'hash\x00', 0x0, 0x0, 'sha3-256\x00'}, 0x58) r2 = accept4(r1, 0x0, 0x0, 0x800) sendmmsg$inet_sctp(r2, &(0x7f0000000ec0)=[{0x0, 0x0, &(0x7f0000000540)=[{&(0x7f00000004c0)="a7", 0x1}], 0x1, 0x0, 0x0, 0x14}], 0x1, 0xc804) sendmsg$NL80211_CMD_SET_CHANNEL(r2, &(0x7f0000001f40)={0x0, 0x0, &(0x7f0000001f00)={&(0x7f0000001e80)=ANY=[@ANYBLOB="00800000", @ANYRES16=0x0, @ANYBLOB="00082dbd7000ffdbdf25410000000c0099000400000042000000"], 0x20}, 0x1, 0x0, 0x0, 0x40008000}, 0x0) setsockopt$packet_rx_ring(r0, 0x107, 0x5, &(0x7f0000000140)=@req3={0x1000, 0x3a, 0x1000, 0x3a, 0x7ff, 0xf83, 0x3}, 0x1c) getsockopt$inet_pktinfo(0xffffffffffffffff, 0x0, 0x8, &(0x7f0000000040)={0x0, @multicast2, @local}, &(0x7f0000000080)=0xc) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000180)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x800000}, 0xc, &(0x7f0000000100)={&(0x7f00000000c0)=@ipv4_getnetconf={0x2c, 0x52, 0x10, 0x70bd27, 0x25dfdbfb, {}, [@NETCONFA_IFINDEX={0x8, 0x1, r3}, @NETCONFA_IFINDEX={0x8}, @NETCONFA_PROXY_NEIGH={0x8, 0x5, 0x4}]}, 0x2c}, 0x1, 0x0, 0x0, 0x20000000}, 0x8800) close(r0) socket$packet(0x11, 0x2, 0x300) (async) socket$alg(0x26, 0x5, 0x0) (async) bind$alg(r1, &(0x7f00000004c0)={0x26, 'hash\x00', 0x0, 0x0, 'sha3-256\x00'}, 0x58) (async) accept4(r1, 0x0, 0x0, 0x800) (async) sendmmsg$inet_sctp(r2, &(0x7f0000000ec0)=[{0x0, 0x0, &(0x7f0000000540)=[{&(0x7f00000004c0)="a7", 0x1}], 0x1, 0x0, 0x0, 0x14}], 0x1, 0xc804) (async) sendmsg$NL80211_CMD_SET_CHANNEL(r2, &(0x7f0000001f40)={0x0, 0x0, &(0x7f0000001f00)={&(0x7f0000001e80)=ANY=[@ANYBLOB="00800000", @ANYRES16=0x0, @ANYBLOB="00082dbd7000ffdbdf25410000000c0099000400000042000000"], 0x20}, 0x1, 0x0, 0x0, 0x40008000}, 0x0) (async) setsockopt$packet_rx_ring(r0, 0x107, 0x5, &(0x7f0000000140)=@req3={0x1000, 0x3a, 0x1000, 0x3a, 0x7ff, 0xf83, 0x3}, 0x1c) (async) getsockopt$inet_pktinfo(0xffffffffffffffff, 0x0, 0x8, &(0x7f0000000040)={0x0, @multicast2, @local}, &(0x7f0000000080)=0xc) (async) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000180)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x800000}, 0xc, &(0x7f0000000100)={&(0x7f00000000c0)=@ipv4_getnetconf={0x2c, 0x52, 0x10, 0x70bd27, 0x25dfdbfb, {}, [@NETCONFA_IFINDEX={0x8, 0x1, r3}, @NETCONFA_IFINDEX={0x8}, @NETCONFA_PROXY_NEIGH={0x8, 0x5, 0x4}]}, 0x2c}, 0x1, 0x0, 0x0, 0x20000000}, 0x8800) (async) close(r0) (async) 2m9.93681093s ago: executing program 4 (id=2123): r0 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000380)=ANY=[@ANYBLOB="2400000020000100aabd7000000000000a000040009442000300000008000d0009000000f93f95d902d8de91d0e9c902c7a3ad6e417523a8c6468b660d684cc8ad4ce35457efefcdb78c718c23f2bc9d544e977cf9d0b6698a65755d9b506a78b62164dd47954e31ee38c0debdaa24af41a4161c50090018f866dfafec8366f812a88c36cfd133933d064efec71321840ff865f959efb1f544fd99203ca0c3a4d8e025b037083ab4440a"], 0x24}, 0x1, 0x0, 0x0, 0x24048084}, 0x4008000) r1 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r1, &(0x7f00000008c0)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000900)=ANY=[@ANYBLOB="5c0800002c0007012bbd700000000000077c00000c00018006000600843b000009000280040071008c0000000800e400", @ANYRES32, @ANYBLOB="2d0529800c00f800030000000000000004006080fa003b800400df00c1becb03dbe55b6c782cebd6a7bc78a21d1bc9f3c1bd441ada5266780599eaf18965bbfcc07c2037129672275c399e1e03f8a0664d807385cc4d566f230400db800400498096d9641e8b1887b25501b11ecd71313a47df368b078d7b825bff33b9eab3964d7b2394b1950c7aeaba6014fe2cd33c89fd070ce0f1f306494a44adf6609d8ad55a5080b36b05cb0b9a57833b14fcd62c0aba0ac67f03b20e87ba6f3610a5bd1d3369ae014c8036c1e596b800991698810ff706e98871c17ad581b0695476273ac6c33a7a51d4a44a5b95684befe95ef49b03458bce89d87355f35b766b242b9f98b661269bb9255d836fb4e30d0000c72ec5561adf6112ca278273b4af42597e7bfa1f5c228f13161b34517c92bc352c017afac22d14047e6fbdc61536f9e51738ea935cb2a577ec2b788433bc13a9e976cfee267f36d988b766a29632c84c94d4cf31d780ef683293d7eacfc93f248d137affcae7cffa699237ea9c74919850dc164f1483f3f352bf7dd787191705b26936e1d090526b6ac5765df318f160cc84b15b94c662cf92611c9eb0b92bfbd3512bffed96a4150d653e130625b6ae5a78da2c4b9c70c736a224b18d89222095fbc4c61bcad1eb73be9c6efaaae48f871223694999b2a925a37138be8220008180cc20e57a92076b2308003200", @ANYRES32, @ANYBLOB="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"], 0x85c}, 0x1, 0x0, 0x0, 0x24048011}, 0xc000) sendmsg$nl_route(r0, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000300)=ANY=[@ANYBLOB='\\\x00\x00\x00!'], 0x5c}}, 0x40400c4) socket$xdp(0x2c, 0x3, 0x0) r2 = socket$netlink(0x10, 0x3, 0x400000000000004) sendmsg$NL802154_CMD_NEW_INTERFACE(0xffffffffffffffff, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000340)=ANY=[@ANYBLOB='@\x00\x00\x00', @ANYRES16, @ANYBLOB="01002bbd7000fedbdf25070000000a0004007770616e3000000008000100010000000800050000000000080003"], 0x40}}, 0x8084) r3 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_tcp_int(r3, 0x6, 0x13, &(0x7f0000000040)=0x100000001, 0x76dc) setsockopt$inet6_tcp_TCP_REPAIR_WINDOW(r3, 0x6, 0x1d, &(0x7f0000000280)={0x800000, 0x3, 0x0, 0xfffffffe}, 0x14) r4 = syz_init_net_socket$nl_rdma(0x10, 0x3, 0x10) sendmsg$netlink(r4, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000000)=[{&(0x7f0000000340)=ANY=[@ANYBLOB="18b8b156df250600"/17], 0x118}], 0x1, 0x0, 0x0, 0x20008001}, 0x4000004) writev(r2, &(0x7f0000019440), 0x0) pipe(&(0x7f00000002c0)={0xffffffffffffffff, 0xffffffffffffffff}) r6 = socket$inet_tcp(0x2, 0x1, 0x0) setsockopt$inet_tcp_int(r6, 0x6, 0x10000000013, &(0x7f0000000180)=0x1, 0x4) setsockopt$inet_tcp_int(r6, 0x6, 0x14, &(0x7f00000000c0)=0x100000001, 0x4) connect$inet(r6, &(0x7f00000001c0)={0x2, 0x200, @local}, 0x10) r7 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r7, &(0x7f00000004c0)={0x0, 0x0, &(0x7f0000000440)={&(0x7f0000000240)=ANY=[@ANYBLOB="380000001800010000000000000000000200000000000006000000000c00090008000000", @ANYRES32, @ANYBLOB="08000400", @ANYRES32, @ANYBLOB="080005"], 0x38}}, 0x0) sendto$inet(r6, &(0x7f0000000200)="e1", 0xfea8, 0x0, 0x0, 0x0) splice(r6, 0x0, r5, 0x0, 0x1000000000fea8, 0xc) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000140)={0x9, 0x4, &(0x7f0000000780)=ANY=[@ANYBLOB="18000000000000000000000000000000711247000000000095000028000000003697659ad9372e13d121bea8bf0148f0b044280bec125d419b6ce3ce3834eebf71affb0c057a5e3f191f4af4ecedc7970f3a29af13adf5d6a9608b918d3c8edc445ea8803899ee2bfb9fb66d85878be04546a314eb5dfde934b96d2361dbb2327a8af3203ceb844f23016554f28011329ce87f9fb3cfd031cfe386fa8dc761b77985af70389c2c41bf724d5211b6630f910887d27d78a0485a83eefe7a62211150189e82773010ea8b642f113da8639be5635131aba81327071a6507dae5511f62ef1e263bc3cc60a273c9b04b773492c6d927bddf562bfd76f21e783009e143bd40c689a891f67532eeee0013"], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x22}, 0x80) r8 = bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000600)=ANY=[@ANYBLOB="02000000040000000800000001"], 0x48) mmap(&(0x7f0000001000/0xa000)=nil, 0xa000, 0x1000000, 0x13, r8, 0x0) sendmsg$NL80211_CMD_START_AP(0xffffffffffffffff, &(0x7f0000000040)={0x0, 0x0, 0x0}, 0x0) r9 = syz_init_net_socket$nfc_llcp(0x27, 0x2, 0x1) bind$bt_hci(r9, &(0x7f0000000000)={0x27}, 0x74) sendmmsg$unix(r9, &(0x7f0000000b00)=[{{&(0x7f00000000c0)=@file={0x0, './file0\x00'}, 0x6e, 0x0}}, {{&(0x7f0000000e80)=@file={0x0, './file0\x00'}, 0x6e, &(0x7f0000000740)=[{&(0x7f0000001dc0)="bb", 0x1}], 0x1}}], 0x2, 0x0) 2m9.589123597s ago: executing program 4 (id=2127): r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0x149e42, 0x0) r1 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r1, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000040)=ANY=[@ANYBLOB="340000001000010400100000000000010000000081538ae81a52b90d888898c4000000005440626f7f9c71b24bece01a42eceb14c524dfc54f880c374c47a332a5b2e92738389d9d", @ANYRES32=0x0, @ANYBLOB="b36000000000000014001280090001007663616e0000000004000280"], 0x34}}, 0x4000000) setsockopt$inet6_tcp_int(0xffffffffffffffff, 0x6, 0x13, 0x0, 0x0) r2 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) bpf$BPF_GET_BTF_INFO(0xf, &(0x7f00000002c0)={0xffffffffffffffff, 0x20, &(0x7f0000000280)={&(0x7f0000000100)=""/139, 0x8b, 0x0, &(0x7f00000001c0)=""/128, 0x80}}, 0x10) r3 = socket(0x2, 0x80805, 0x0) connect$vsock_stream(r3, &(0x7f0000000080)={0x28, 0x0, 0x2710}, 0x10) r4 = syz_genetlink_get_family_id$netlbl_unlabel(&(0x7f0000000440), r2) sendmsg$NLBL_UNLABEL_C_STATICLISTDEF(r2, &(0x7f0000000500)={0x0, 0x0, &(0x7f00000004c0)={&(0x7f0000000080)={0x14, r4, 0xc8036ab6d6cbef07, 0x70bd28, 0x25dfdbfb}, 0x14}, 0x1, 0x0, 0x0, 0x1}, 0x45080) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f00000000c0)={'syzkaller0\x00', 0x800}) ioctl$TUNSETLINK(r0, 0x400454cd, 0x305) 2m9.304111117s ago: executing program 4 (id=2131): r0 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000380), 0xffffffffffffffff) (async) r1 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$NL80211_CMD_VENDOR(r1, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000080)={0xac, r0, 0x2, 0x0, 0x0, {{}, {@void, @void, @val={0xc}}}, [@NL80211_ATTR_VENDOR_DATA={0x8a, 0xc5, "80823d44c29d9a2bf4fe1a523f060b035e0d5a2c2d11cf9e89f1a87edef94a9b71cadf8bee5754edef4aae108ce31f9e3dafff662d1a631ce180a1148bc5271d72c248dc9db6df24695fa61f5dfb6e7b007a8751cc33c8fde17d51a0232b615a618337849eee52ffe6df92f904f44c90922b27de74f452a552af83910fa3c0ef80a0b749f86a"}]}, 0xac}, 0x1, 0x0, 0x0, 0x85}, 0x0) 2m9.068319054s ago: executing program 4 (id=2133): r0 = socket$inet(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000300)={'bond0\x00', 0x0}) r2 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r2, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000780)={&(0x7f00000001c0)=@newqdisc={0x8c, 0x24, 0xf0b, 0x70bd2b, 0x0, {0x0, 0x0, 0x12, r1, {}, {0xffff, 0xffff}, {0x2}}, [@qdisc_kind_options=@q_taprio={{0xb}, {0x5c, 0x2, [@TCA_TAPRIO_ATTR_PRIOMAP={0x56, 0x1, {0x2, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfc, 0x6, 0x0, 0x1, 0xf], 0x0, [0x8, 0x4, 0x2, 0x0, 0x8, 0xfffe, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3], [0x0, 0x8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8]}}]}}]}, 0x8c}}, 0x0) 2m8.772248746s ago: executing program 4 (id=2136): r0 = socket$rds(0x15, 0x5, 0x0) r1 = socket$nl_netfilter(0x10, 0x3, 0xc) syz_emit_ethernet(0x4e, &(0x7f0000000540)=ANY=[@ANYBLOB="aaaaaaaaaaaaaaaaaaaaaa3986dd6c370c8900182b01fe80", @ANYRESDEC=r0, @ANYRESOCT=r1, @ANYRESDEC=r1, @ANYRES16=r1, @ANYRESOCT=r0, @ANYRES64=r1], 0x0) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000180)={0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x44045}, 0x4004011) r2 = socket$inet6_mptcp(0xa, 0x1, 0x106) sendmmsg$alg(0xffffffffffffffff, &(0x7f0000007e40)=[{0x0, 0x0, &(0x7f0000000880)=[{&(0x7f00000000c0)="4789d3aefc1a4d03345aed327be33c", 0xf}, {&(0x7f0000000300)="7977886cbd22f847861635fd7ac5fc", 0xf}, {&(0x7f00000004c0)="33d4ead41fd7e702c131f294c9ca7f23af417d1fc42c60f425c6f5285b917d1b966de50005d7ac4a1f222f6f300cb278e89e50c1d421cb2dbd95155d93f45668f431dcc2f968fb0c5cab3d2ddf0803fec2e9647c2f43f33bfb1e0eb1a083f5f1b00d44c854629f97e307f2a7c810b3f29f", 0x71}], 0x3, 0x0, 0x0, 0x20000000}], 0x1, 0x200408d4) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000001680)={0x0}}, 0x0) bind$inet6(r2, &(0x7f00000006c0)={0xa, 0x4e22, 0x10000, @local, 0xb}, 0x1c) listen(r2, 0x402) r3 = socket$alg(0x26, 0x5, 0x0) r4 = bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000140)={&(0x7f0000000700)=ANY=[@ANYBLOB="9feb01001800000000000000340000003400000a64000000040000000000000e0400000000000000000000000000000d00000000000000000080001002000000000000000000000903000000000000006100c66518356857c40e6fc091cae991a66eae464e6212df096ddb06bfffe8ee5d64d572f898f2e31efdffeb299de8ae308c180c7556"], 0x0, 0x52}, 0x20) bpf$MAP_CREATE_TAIL_CALL(0x0, &(0x7f0000000080)={0x3, 0x4, 0x4, 0xa, 0x0, 0x1, 0x0, '\x00', 0x0, r4, 0x1, 0x3}, 0x5f) r5 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r5, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000000c0)=ANY=[@ANYBLOB="1400000026000103000010000000000001"], 0x14}}, 0x0) bind$alg(r3, &(0x7f0000000940)={0x26, 'skcipher\x00', 0x0, 0x0, 'cbc(blowfish)\x00'}, 0x58) setsockopt$ALG_SET_KEY(r3, 0x117, 0x1, &(0x7f0000000280)="ad56b6c5", 0x4) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000600)={0xb, 0x3, &(0x7f0000000140)=ANY=[], 0x0}, 0x94) r6 = accept4(r3, 0x0, 0x0, 0x800) sendmmsg$alg(r6, &(0x7f0000000040)=[{0x0, 0x0, &(0x7f0000000000)=[{&(0x7f0000000080)="f78d9ca38fff48f3be52163448412ba8", 0xfffffe3f}, {&(0x7f0000000140)="ebe3a0e9796cfd1647e299f4e376fdba128280b372219d205e81f4a7f71c1926aae1efd7e0054a863f3d5cfe6cb55b5bb9fa6935849e6098ed884e7cb51726b360fbb37b4fe035bbb095873048"}, {&(0x7f00000003c0)="e8700e444d50a969ff67347cff6127e6ef12ee3819271482a4975a52c1ab9b8b4db3945d1032005eabe97b4dc33a47d3a158da988456d30026b433186f53cdcdb93a4722bf306a10470d50f5cb1ece9ead3459bab1cf1538cd0b157653c5e892962c80f158c443e9c6ad7d2a8103ef2f4b93766b9a21501f94c1568b13756b66f74f46cf801704d2da8b96c34070b233af0afcc436712e58ed25e721193af05a045ad3fdc928f02f3dbad19d3e66eebda2e63f3f46ef4511cee26d7b48241847bf9e343ef4674c45e2a085060f11"}], 0x1, &(0x7f0000000380)=[@op={0x18, 0x117, 0x3, 0x1}], 0x18}], 0x1, 0x40800) recvmsg(r6, &(0x7f00000005c0)={0x0, 0x0, &(0x7f00000001c0)=[{&(0x7f00000000c0)=""/81, 0x51}, {&(0x7f0000000200)=""/83, 0x53}], 0x2}, 0xc2) syz_emit_ethernet(0x4e, &(0x7f0000000600)=ANY=[@ANYBLOB="aaaaaaaaaaaaffffffffffff86dd60000000001806fffe8000000000000000000000000000aafe8000000000000000000000000000aa00004e22", @ANYRES32=0x41424344, @ANYRES32=0x41424344, @ANYBLOB="60c20000907800003e030000"], 0x0) socket$nl_rdma(0x10, 0x3, 0x14) socket(0x10, 0x80002, 0x0) sendmsg$nl_route(0xffffffffffffffff, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000180)={0x0, 0x48}}, 0x400400c0) openat$tun(0xffffffffffffff9c, &(0x7f0000000200), 0x0, 0x0) write$cgroup_int(r6, &(0x7f0000000340)=0x8, 0x12) r7 = socket(0xf, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r7, 0x8933, &(0x7f0000000380)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r7, &(0x7f00000012c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000005c0)=@newqdisc={0x38, 0x24, 0x4ee4e6a52ff56541, 0x70bd2a, 0xffffffff, {0x0, 0x0, 0x0, r8, {0xfff2, 0xfff1}, {0xffff, 0xffff}, {0xc}}, [@qdisc_kind_options=@q_multiq={{0xb}, {0x8}}]}, 0x38}, 0x1, 0x0, 0x0, 0x8000}, 0x0) sendmsg$nl_route_sched(r7, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000180)={&(0x7f00000002c0)=@getqdisc={0x24, 0x26, 0x100, 0x70bd26, 0x65dfdbfe, {0x0, 0x0, 0x0, r8, {0x5, 0xffe0}, {0xfff2, 0x1f}, {0xc, 0x10}}}, 0x24}, 0x1, 0x0, 0x0, 0xc080}, 0x4000) 1m3.602170073s ago: executing program 34 (id=2136): r0 = socket$rds(0x15, 0x5, 0x0) r1 = socket$nl_netfilter(0x10, 0x3, 0xc) syz_emit_ethernet(0x4e, &(0x7f0000000540)=ANY=[@ANYBLOB="aaaaaaaaaaaaaaaaaaaaaa3986dd6c370c8900182b01fe80", @ANYRESDEC=r0, @ANYRESOCT=r1, @ANYRESDEC=r1, @ANYRES16=r1, @ANYRESOCT=r0, @ANYRES64=r1], 0x0) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000180)={0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x44045}, 0x4004011) r2 = socket$inet6_mptcp(0xa, 0x1, 0x106) sendmmsg$alg(0xffffffffffffffff, &(0x7f0000007e40)=[{0x0, 0x0, &(0x7f0000000880)=[{&(0x7f00000000c0)="4789d3aefc1a4d03345aed327be33c", 0xf}, {&(0x7f0000000300)="7977886cbd22f847861635fd7ac5fc", 0xf}, {&(0x7f00000004c0)="33d4ead41fd7e702c131f294c9ca7f23af417d1fc42c60f425c6f5285b917d1b966de50005d7ac4a1f222f6f300cb278e89e50c1d421cb2dbd95155d93f45668f431dcc2f968fb0c5cab3d2ddf0803fec2e9647c2f43f33bfb1e0eb1a083f5f1b00d44c854629f97e307f2a7c810b3f29f", 0x71}], 0x3, 0x0, 0x0, 0x20000000}], 0x1, 0x200408d4) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000001680)={0x0}}, 0x0) bind$inet6(r2, &(0x7f00000006c0)={0xa, 0x4e22, 0x10000, @local, 0xb}, 0x1c) listen(r2, 0x402) r3 = socket$alg(0x26, 0x5, 0x0) r4 = bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000140)={&(0x7f0000000700)=ANY=[@ANYBLOB="9feb01001800000000000000340000003400000a64000000040000000000000e0400000000000000000000000000000d00000000000000000080001002000000000000000000000903000000000000006100c66518356857c40e6fc091cae991a66eae464e6212df096ddb06bfffe8ee5d64d572f898f2e31efdffeb299de8ae308c180c7556"], 0x0, 0x52}, 0x20) bpf$MAP_CREATE_TAIL_CALL(0x0, &(0x7f0000000080)={0x3, 0x4, 0x4, 0xa, 0x0, 0x1, 0x0, '\x00', 0x0, r4, 0x1, 0x3}, 0x5f) r5 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r5, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000000c0)=ANY=[@ANYBLOB="1400000026000103000010000000000001"], 0x14}}, 0x0) bind$alg(r3, &(0x7f0000000940)={0x26, 'skcipher\x00', 0x0, 0x0, 'cbc(blowfish)\x00'}, 0x58) setsockopt$ALG_SET_KEY(r3, 0x117, 0x1, &(0x7f0000000280)="ad56b6c5", 0x4) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000600)={0xb, 0x3, &(0x7f0000000140)=ANY=[], 0x0}, 0x94) r6 = accept4(r3, 0x0, 0x0, 0x800) sendmmsg$alg(r6, &(0x7f0000000040)=[{0x0, 0x0, &(0x7f0000000000)=[{&(0x7f0000000080)="f78d9ca38fff48f3be52163448412ba8", 0xfffffe3f}, {&(0x7f0000000140)="ebe3a0e9796cfd1647e299f4e376fdba128280b372219d205e81f4a7f71c1926aae1efd7e0054a863f3d5cfe6cb55b5bb9fa6935849e6098ed884e7cb51726b360fbb37b4fe035bbb095873048"}, {&(0x7f00000003c0)="e8700e444d50a969ff67347cff6127e6ef12ee3819271482a4975a52c1ab9b8b4db3945d1032005eabe97b4dc33a47d3a158da988456d30026b433186f53cdcdb93a4722bf306a10470d50f5cb1ece9ead3459bab1cf1538cd0b157653c5e892962c80f158c443e9c6ad7d2a8103ef2f4b93766b9a21501f94c1568b13756b66f74f46cf801704d2da8b96c34070b233af0afcc436712e58ed25e721193af05a045ad3fdc928f02f3dbad19d3e66eebda2e63f3f46ef4511cee26d7b48241847bf9e343ef4674c45e2a085060f11"}], 0x1, &(0x7f0000000380)=[@op={0x18, 0x117, 0x3, 0x1}], 0x18}], 0x1, 0x40800) recvmsg(r6, &(0x7f00000005c0)={0x0, 0x0, &(0x7f00000001c0)=[{&(0x7f00000000c0)=""/81, 0x51}, {&(0x7f0000000200)=""/83, 0x53}], 0x2}, 0xc2) syz_emit_ethernet(0x4e, &(0x7f0000000600)=ANY=[@ANYBLOB="aaaaaaaaaaaaffffffffffff86dd60000000001806fffe8000000000000000000000000000aafe8000000000000000000000000000aa00004e22", @ANYRES32=0x41424344, @ANYRES32=0x41424344, @ANYBLOB="60c20000907800003e030000"], 0x0) socket$nl_rdma(0x10, 0x3, 0x14) socket(0x10, 0x80002, 0x0) sendmsg$nl_route(0xffffffffffffffff, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000180)={0x0, 0x48}}, 0x400400c0) openat$tun(0xffffffffffffff9c, &(0x7f0000000200), 0x0, 0x0) write$cgroup_int(r6, &(0x7f0000000340)=0x8, 0x12) r7 = socket(0xf, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r7, 0x8933, &(0x7f0000000380)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r7, &(0x7f00000012c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000005c0)=@newqdisc={0x38, 0x24, 0x4ee4e6a52ff56541, 0x70bd2a, 0xffffffff, {0x0, 0x0, 0x0, r8, {0xfff2, 0xfff1}, {0xffff, 0xffff}, {0xc}}, [@qdisc_kind_options=@q_multiq={{0xb}, {0x8}}]}, 0x38}, 0x1, 0x0, 0x0, 0x8000}, 0x0) sendmsg$nl_route_sched(r7, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000180)={&(0x7f00000002c0)=@getqdisc={0x24, 0x26, 0x100, 0x70bd26, 0x65dfdbfe, {0x0, 0x0, 0x0, r8, {0x5, 0xffe0}, {0xfff2, 0x1f}, {0xc, 0x10}}}, 0x24}, 0x1, 0x0, 0x0, 0xc080}, 0x4000) 13.356739514s ago: executing program 0 (id=2693): r0 = socket$kcm(0x10, 0x2, 0x0) r1 = socket(0x10, 0x3, 0x0) setsockopt$netlink_NETLINK_TX_RING(r1, 0x10e, 0xc, &(0x7f0000000040)={0x802}, 0x10) sendmsg$nl_generic(r1, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000480)={0x14, 0x52, 0x1, 0x0, 0x0, {0x1c}}, 0x14}}, 0x0) r2 = bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f00000000c0)={0x1b, 0x0, 0x0, 0xbb, 0x0, 0x1, 0x4, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x4}, 0x50) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f00000002c0)={{0xffffffffffffffff, 0xffffffffffffffff}, &(0x7f0000000140), &(0x7f0000000180)}, 0x20) r4 = bpf$MAP_CREATE(0x0, &(0x7f0000000200)=@bloom_filter={0x1e, 0x0, 0x7, 0x6a, 0x0, 0x1}, 0x50) bpf$MAP_LOOKUP_ELEM(0x2, &(0x7f0000000440)={r4, 0x0, &(0x7f0000000400)=""/55}, 0x20) r5 = bpf$MAP_CREATE(0x0, &(0x7f0000000000)=@base={0x10, 0x4, 0x4, 0x2, 0x0, 0x1}, 0x48) bpf$MAP_GET_NEXT_KEY(0x3, &(0x7f00000001c0)={r5, &(0x7f0000000240), 0x0}, 0x20) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000380)={{0x1, 0xffffffffffffffff}, &(0x7f0000000300), &(0x7f0000000340)}, 0x20) r7 = socket$can_j1939(0x1d, 0x2, 0x7) ioctl$ifreq_SIOCGIFINDEX_vcan(r7, 0x8933, &(0x7f00000000c0)={'vcan0\x00', 0x0}) bind$can_j1939(r7, &(0x7f0000000340)={0x1d, r8, 0x0, {0x2, 0x0, 0x6}, 0xfe}, 0x18) ioctl$XFS_IOC_INUMBERS(r7, 0x80405880, &(0x7f0000001040)={{0x2, 0x0, 0x8000, 0x9, 0x8}, [{0xe769, 0x8, 0x1, 0x1}]}) sendmsg$can_j1939(r7, &(0x7f00000005c0)={&(0x7f0000000080)={0x1d, r8, 0x0, {0x0, 0x0, 0x2}, 0xff}, 0x18, &(0x7f0000000580)={0x0}, 0x1, 0x0, 0x0, 0x8010}, 0x20040000) ioctl$XFS_IOC_FD_TO_HANDLE(r0, 0xc038586a, &(0x7f0000000800)={r0, &(0x7f0000000700)='#,+}]%\x00', 0xc2081, &(0x7f0000000740)={@align=0x8000000000000001, {0xc, 0x9}}, 0xd, &(0x7f0000000780), &(0x7f00000007c0)=0x7}) bpf$BPF_BTF_GET_NEXT_ID(0x17, &(0x7f0000000880)={0x6, 0x0}, 0x8) r11 = bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000cc0)={0x6, 0x24, &(0x7f00000008c0)=@framed={{0x18, 0x0, 0x0, 0x0, 0x9, 0x0, 0x0, 0x0, 0x4}, [@alu={0x4, 0x0, 0x0, 0x2, 0x5, 0x6}, @map_val={0x18, 0x5, 0x2, 0x0, 0x1, 0x0, 0x0, 0x0, 0x80000000}, @printk={@p, {}, {}, {}, {}, {0x7, 0x0, 0xb, 0x3, 0x0, 0x0, 0x5}}, @tail_call={{0x18, 0x2, 0x1, 0x0, 0x1}}, @ringbuf_output={{0x18, 0x1, 0x1, 0x0, 0x1}, {0x7, 0x0, 0xb, 0x8, 0x0, 0x0, 0x2}, {}, {}, {}, {}, {0x7, 0x0, 0xb, 0x4, 0x0, 0x0, 0x1}}, @map_idx_val={0x18, 0x2, 0x6, 0x0, 0x8, 0x0, 0x0, 0x0, 0x8}, @initr0={0x18, 0x0, 0x0, 0x0, 0xca9b, 0x0, 0x0, 0x0, 0xf}, @map_fd={0x18, 0x1}, @map_idx={0x18, 0x6, 0x5, 0x0, 0x4}]}, &(0x7f0000000a00)='syzkaller\x00', 0x0, 0xc7, &(0x7f0000000a40)=""/199, 0x40f00, 0x8, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, &(0x7f0000000b40)={0x0, 0x4}, 0x8, 0x10, &(0x7f0000000b80)={0x1, 0x9, 0x4, 0x2}, 0x10, 0x0, 0x0, 0xa, &(0x7f0000000bc0)=[0xffffffffffffffff, 0x1, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, r0, 0x1, 0x1, 0xffffffffffffffff, 0x1], &(0x7f0000000c00)=[{0x3, 0x4, 0x8, 0xa}, {0x1, 0x4, 0x2, 0x3}, {0x0, 0x3, 0xc, 0x7}, {0x5, 0x4, 0x7}, {0x5, 0x4}, {0x5, 0x1, 0xe, 0x8}, {0x5, 0x3, 0x10, 0x5}, {0x4, 0x5, 0x2, 0x4}, {0x4, 0x2, 0x9, 0x4}, {0x2, 0x5, 0xb, 0x3}], 0x10, 0x8}, 0x94) r12 = bpf$MAP_CREATE(0x0, &(0x7f0000000d80)=@base={0x0, 0x2d2, 0x3b, 0xf, 0x2, 0xffffffffffffffff, 0x5, '\x00', 0x0, 0xffffffffffffffff, 0x3, 0x5, 0x5}, 0x50) r13 = bpf$BPF_MAP_GET_FD_BY_ID(0xe, &(0x7f0000000e00)={0xffffffffffffffff, 0x4, 0x8}, 0xc) r14 = bpf$MAP_CREATE_TAIL_CALL(0x0, &(0x7f0000000e40)={0x3, 0x4, 0x4, 0xa, 0x0, 0xffffffffffffffff, 0xfffffffa, '\x00', 0x0, 0xffffffffffffffff, 0x1, 0x3}, 0x50) r15 = bpf$MAP_CREATE(0x0, &(0x7f0000000ec0)=@bloom_filter={0x1e, 0x3, 0x2, 0x9, 0x4302, 0x1, 0x5, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x2, 0x3, 0x1}, 0x50) bpf$PROG_LOAD(0x5, &(0x7f0000000f80)={0x7, 0x34, &(0x7f00000004c0)=@ringbuf={{0x18, 0x0, 0x0, 0x0, 0xfffffffd, 0x0, 0x0, 0x0, 0x4}, {{0x18, 0x1, 0x1, 0x0, r2}}, {}, [@ringbuf_query={{0x18, 0x1, 0x1, 0x0, r3}}, @btf_id={0x18, 0x7, 0x3, 0x0, 0x1}, @kfunc={0x85, 0x0, 0x2, 0x0, 0x2}, @ringbuf_output={{0x18, 0x1, 0x1, 0x0, r5}, {0x7, 0x0, 0xb, 0x8, 0x0, 0x0, 0xfffffffd}, {}, {}, {}, {}, {0x7, 0x0, 0xb, 0x4, 0x0, 0x0, 0x1}}, @printk={@x, {}, {}, {}, {}, {0x7, 0x0, 0xb, 0x3, 0x0, 0x0, 0x2}}, @kfunc={0x85, 0x0, 0x2, 0x0, 0x2}, @map_val={0x18, 0x6, 0x2, 0x0, 0x1, 0x0, 0x0, 0x0, 0xffffffff}, @exit, @ringbuf_output={{0x18, 0x1, 0x1, 0x0, r6}, {0x7, 0x0, 0xb, 0x8, 0x0, 0x0, 0xc}}], {{}, {0x7, 0x0, 0xb, 0x2, 0x0, 0x0, 0x2}, {0x85, 0x0, 0x0, 0x84}}}, &(0x7f0000000680)='syzkaller\x00', 0x0, 0x34, &(0x7f00000006c0)=""/52, 0x41000, 0x3, '\x00', r8, @fallback=0x4, r9, 0x8, &(0x7f0000000840)={0x4, 0x3}, 0x8, 0x10, 0x0, 0x0, r10, r11, 0x0, &(0x7f0000000f40)=[r12, r13, r14, r15], 0x0, 0x10, 0x1}, 0x94) sendmsg$kcm(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000040)=[{&(0x7f00000001c0)="d8000000150081044e81f782db44b9040a78080206000000040000a118000300ff05000006000e1208000f0100810401a80016eaa400010000005f54c92011148ed08734843cb12b00000803600cfab94dcf5c0461c1d67f6f94007134cf6ee08000a0e408e8d8ef075c0100000000000000cb090000001fb791643a5e835913b06218a07445d6d930dfe1d9d322fe7c9fd68775730d16a4683f52eb4edbb57a5025ccca9e00360d8bcc00400040fad95667e00600000000d5e1cace81b341139fe3cd4032e8edb12d1d2eb0c0ed0bfffdccf85df947e5e0", 0xd8}], 0x1, 0x0, 0x0, 0x7400}, 0x0) 12.611889323s ago: executing program 0 (id=2701): r0 = socket(0x1e, 0xa, 0x7) ioctl$sock_SIOCGIFINDEX_80211(0xffffffffffffffff, 0x8933, &(0x7f0000000040)={'wlan0\x00', 0x0}) sendmsg$NL80211_CMD_SET_WIPHY_NETNS(r0, &(0x7f0000000140)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x80021}, 0xc, &(0x7f0000000100)={&(0x7f0000000080)={0x44, 0x0, 0x2, 0x70bd2a, 0x25dfdbfb, {{}, {@val={0x8, 0x1, 0x55}, @val={0x8, 0x3, r1}, @val={0xc, 0x99, {0x401, 0x34}}}}, [@NL80211_ATTR_WDEV={0xc, 0x99, {0xa, 0x2f}}, @NL80211_ATTR_WIPHY={0x8, 0x1, 0x3c}]}, 0x44}, 0x1, 0x0, 0x0, 0x4080}, 0x8090) recvfrom$x25(r0, &(0x7f0000000180)=""/5, 0x5, 0x140, &(0x7f00000001c0), 0x12) ioctl$FAT_IOCTL_SET_ATTRIBUTES(0xffffffffffffffff, 0x40047211, &(0x7f0000000200)=0x20) ioctl$BTRFS_IOC_BALANCE(r0, 0x5000940c, 0x0) recvfrom$llc(r0, &(0x7f0000000240), 0x0, 0x10000, &(0x7f0000000280)={0x1a, 0x3, 0x5, 0x81, 0x6, 0xa, @remote}, 0x10) recvfrom$rxrpc(r0, &(0x7f00000002c0)=""/42, 0x2a, 0x102, &(0x7f0000000300)=@in6={0x21, 0x0, 0x2, 0x1c, {0xa, 0x4e21, 0x4, @initdev={0xfe, 0x88, '\x00', 0x1, 0x0}}}, 0x24) ioctl$NILFS_IOCTL_SET_ALLOC_RANGE(r0, 0x40106e8c, &(0x7f0000000340)=[0x80, 0x5]) setsockopt$ARPT_SO_SET_REPLACE(r0, 0x0, 0x60, &(0x7f00000003c0)={'filter\x00', 0x7, 0x4, 0x418, 0x220, 0x110, 0x220, 0x330, 0x330, 0x330, 0x4, &(0x7f0000000380), {[{{@uncond, 0xc0, 0x110}, @mangle={0x50, 'mangle\x00', 0x0, {@empty, @mac=@multicast, @empty, @broadcast, 0x1}}}, {{@arp={@initdev={0xac, 0x1e, 0x0, 0x0}, @empty, 0xff0000ff, 0xffffff00, 0x3, 0x2, {@mac=@remote, {[0xff, 0x0, 0x0, 0x0, 0xff]}}, {@empty, {[0xff, 0xff, 0x0, 0x0, 0xff, 0xff]}}, 0x4, 0x1, 0xa5, 0x0, 0x2, 0x3, '\x00', 'dummy0\x00', {}, {}, 0x0, 0x2cc}, 0xc0, 0x110}, @mangle={0x50, 'mangle\x00', 0x0, {@empty, @mac=@dev={'\xaa\xaa\xaa\xaa\xaa', 0x3f}, @multicast2, @loopback, 0x8}}}, {{@uncond, 0xc0, 0x110}, @mangle={0x50, 'mangle\x00', 0x0, {@empty, @mac=@random="bc89effc8cf1", @dev={0xac, 0x14, 0x14, 0x3c}, @multicast1, 0x1}}}], {{'\x00', 0xc0, 0xe8}, {0x28}}}}, 0x468) r2 = accept4$inet6(r0, &(0x7f0000000840)={0xa, 0x0, 0x0, @ipv4={""/10, ""/2, @loopback}}, &(0x7f0000000880)=0x1c, 0x80800) ioctl$INCFS_IOC_PERMIT_FILL(r0, 0x40046721, &(0x7f00000008c0)={r2}) r3 = syz_genetlink_get_family_id$nbd(&(0x7f0000000940), 0xffffffffffffffff) socketpair$nbd(0x1, 0x1, 0x0, &(0x7f0000000980)={0xffffffffffffffff}) sendmsg$NBD_CMD_RECONFIGURE(0xffffffffffffffff, &(0x7f0000000ac0)={&(0x7f0000000900)={0x10, 0x0, 0x0, 0x40000000}, 0xc, &(0x7f0000000a80)={&(0x7f00000009c0)={0xa4, r3, 0x8, 0x70bd26, 0x25dfdbfd, {}, [@NBD_ATTR_BACKEND_IDENTIFIER={0x5, 0xa, '\x00'}, @NBD_ATTR_DEAD_CONN_TIMEOUT={0xc, 0x8, 0x9}, @NBD_ATTR_SIZE_BYTES={0xc, 0x2, 0x1}, @NBD_ATTR_SOCKETS={0x70, 0x7, 0x0, 0x1, [{0xc, 0x1, 0x0, 0x1, {0x8, 0x1, r0}}, {0xc, 0x1, 0x0, 0x1, {0x8, 0x1, r2}}, {0xc, 0x1, 0x0, 0x1, {0x8, 0x1, r0}}, {0xc, 0x1, 0x0, 0x1, {0x8, 0x1, r0}}, {0xc, 0x1, 0x0, 0x1, {0x8, 0x1, r0}}, {0xc, 0x1, 0x0, 0x1, {0x8, 0x1, r4}}, {0xc, 0x1, 0x0, 0x1, {0x8, 0x1, r0}}, {0xc, 0x1, 0x0, 0x1, {0x8, 0x1, r0}}, {0xc, 0x1, 0x0, 0x1, {0x8, 0x1, r0}}]}]}, 0xa4}, 0x1, 0x0, 0x0, 0x4}, 0x0) r5 = socket$l2tp6(0xa, 0x2, 0x73) setsockopt$sock_int(r5, 0x1, 0x28, &(0x7f0000000b00)=0x7ff, 0x4) r6 = socket$unix(0x1, 0x1, 0x0) connect$pppl2tp(r0, &(0x7f0000000b40)=@pppol2tpv3in6={0x18, 0x1, {0x0, r6, 0x1, 0x2, 0x0, 0x1, {0xa, 0x4e23, 0x2, @dev={0xfe, 0x80, '\x00', 0x2c}, 0x8}}}, 0x3a) r7 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000bc0), r0) ioctl$sock_SIOCGIFINDEX_80211(r6, 0x8933, &(0x7f0000000c00)={'wlan0\x00', 0x0}) r9 = ioctl$TUNGETDEVNETNS(0xffffffffffffffff, 0x54e3, 0x0) r10 = ioctl$NS_GET_PARENT(0xffffffffffffffff, 0xb702, 0x0) sendmsg$NL80211_CMD_SET_WIPHY_NETNS(r0, &(0x7f0000000cc0)={&(0x7f0000000b80)={0x10, 0x0, 0x0, 0x4000}, 0xc, &(0x7f0000000c80)={&(0x7f0000000c40)={0x34, r7, 0x20, 0x70bd27, 0x25dfdbff, {{}, {@val={0x8, 0x1, 0x7b}, @void, @void}}, [@NL80211_ATTR_IFINDEX={0x8, 0x3, r8}, @NL80211_ATTR_NETNS_FD={0x8, 0xdb, r9}, @NL80211_ATTR_NETNS_FD={0x8, 0xdb, r10}]}, 0x34}, 0x1, 0x0, 0x0, 0x24000044}, 0x0) ioctl$FS_IOC_READ_VERITY_METADATA(r9, 0xc0286687, &(0x7f0000000dc0)={0x2, 0x5, 0xb9, &(0x7f0000000d00)=""/185}) r11 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r12 = syz_genetlink_get_family_id$netlbl_unlabel(&(0x7f0000000e40), 0xffffffffffffffff) sendmsg$NLBL_UNLABEL_C_STATICLIST(r11, &(0x7f0000000f80)={&(0x7f0000000e00)={0x10, 0x0, 0x0, 0x100000}, 0xc, &(0x7f0000000f40)={&(0x7f0000000e80)={0x94, r12, 0x300, 0x70bd27, 0x25dfdbfd, {}, [@NLBL_UNLABEL_A_SECCTX={0x29, 0x7, 'system_u:object_r:usbmon_device_t:s0\x00'}, @NLBL_UNLABEL_A_IPV4MASK={0x8, 0x5, @initdev={0xac, 0x1e, 0x0, 0x0}}, @NLBL_UNLABEL_A_SECCTX={0x26, 0x7, 'system_u:object_r:login_exec_t:s0\x00'}, @NLBL_UNLABEL_A_ACPTFLG={0x5}, @NLBL_UNLABEL_A_IPV4ADDR={0x8, 0x4, @empty}, @NLBL_UNLABEL_A_IPV6MASK={0x14, 0x3, @empty}]}, 0x94}, 0x1, 0x0, 0x0, 0x80}, 0x40) setsockopt$inet_sctp_SCTP_AUTH_CHUNK(r0, 0x84, 0x15, &(0x7f0000000fc0)={0xc1}, 0x1) ioctl$TUNSETGROUP(0xffffffffffffffff, 0x400454ce, 0x0) 12.351246925s ago: executing program 0 (id=2705): r0 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r0, &(0x7f00000006c0)={0x0, 0x0, &(0x7f0000000680)={&(0x7f0000000300)=@updsa={0xf0, 0x1a, 0x1, 0x0, 0x0, {{@in6=@ipv4={'\x00', '\xff\xff', @remote}, @in=@initdev={0xac, 0x1e, 0x20, 0x0}, 0x0, 0x0, 0x0, 0x0, 0xa, 0x0, 0xb0}, {@in6=@empty}, @in6=@private2, {}, {}, {}, 0x0, 0x0, 0x2}}, 0xf0}}, 0x0) r1 = socket$alg(0x26, 0x5, 0x0) bind$alg(r1, &(0x7f0000000100)={0x26, 'aead\x00', 0x0, 0x0, 'aegis128-generic\x00'}, 0x58) r2 = accept4(r1, 0x0, 0x0, 0x0) syz_genetlink_get_family_id$nl80211(&(0x7f0000000080), r2) socket$kcm(0x29, 0x0, 0x0) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000100)={'macvtap0\x00', 0x0}) getsockopt$sock_cred(r1, 0x1, 0x11, &(0x7f00000001c0)={0x0, 0x0}, &(0x7f0000000200)=0xc) sendmsg$nl_xfrm(0xffffffffffffffff, &(0x7f0000000740)={&(0x7f0000000180)={0x10, 0x0, 0x0, 0x200}, 0xc, &(0x7f0000000700)={&(0x7f0000000400)=@allocspi={0x274, 0x16, 0x400, 0x70bd25, 0x25dfdbff, {{{@in=@multicast1, @in6=@local, 0x4e20, 0x8, 0x4e23, 0x2b20, 0x2, 0x20, 0x80, 0x79, 0x0, r4}, {@in6=@rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x01', 0x4d4, 0xff}, @in6=@remote, {0x6, 0x80000000, 0x6, 0xad, 0x5, 0x3, 0x100000000, 0xc11}, {0x1000, 0x1, 0x7, 0x10000}, {0x7fffffff, 0x8, 0xa}, 0x70bd27, 0x0, 0xa, 0x1, 0x81, 0x4a}, 0x7cf, 0x7}, [@algo_comp={0xe7, 0x3, {{'lzs\x00'}, 0x4f8, "20b840b2a113393c51b4e91294bcc9275097eb41c6042b8846b61308c461a0ecbb249bec6550218d214b781b8c883dc468ada6088cb57939213642afa1cea2f2081256db23aea30ccba638c3f86ef23ea34a16e1fdffcfa9022a85d3c82055175f57c3bd7b884174ec17e7353bde8b2da4817659b7dcdc3c24e443479e1a9d48b9044c091f61b22017e8894c83a983a33d8426c636f63ed2b180538c8082e1"}}, @XFRMA_SET_MARK={0x8, 0x1d, 0xfffffffa}, @replay_thresh={0x8, 0xb, 0x9}, @algo_auth={0x79, 0x1, {{'tgr192-generic\x00'}, 0x188, "ca1f3f906071f6355020795e9cd13eef4f7998c755e200f7d5909eda3661991363ce4a7b37f9f819fb42994f1c8db227f1"}}, @XFRMA_SET_MARK={0x8, 0x1d, 0x54}]}, 0x274}}, 0x0) sendto$packet(r2, &(0x7f0000000000)="71e5e1bdb579c8fe648033dc8a234eef4fd483f6e954a56ed62abe31ca1c6d6f76314d8520a0ede94ee03165020ecc507d7e056a0b3076e55bce8562c76c4559990ca88fa59f83246bb7c869507b428e3186bee1be13f533a6bef65aaf8b8e303e8c018f54232010ef0629470b1bb3dab03d46cd1e78077f9dd948de2b64312ed328d8f7a445f4109d23c6fd04b8696e30f9a37ced83370bc49409398f9851adfeda67aca0ede9e05b9bded5816b7769ffec4ea370df04e280822b2d42f3311e975c438b", 0xc4, 0x20000000, &(0x7f0000000140)={0x11, 0x2, r3, 0x1, 0x7a}, 0x14) 12.072170079s ago: executing program 0 (id=2710): socket$nl_route(0x10, 0x3, 0x0) (async) r0 = socket$nl_route(0x10, 0x3, 0x0) socket(0x2a, 0x2, 0x0) (async) r1 = socket(0x2a, 0x2, 0x0) getsockname$packet(r1, &(0x7f00000015c0)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000080)=0x14) sendmsg$nl_route(r0, &(0x7f0000000300)={0x0, 0x6558, &(0x7f0000000040)={&(0x7f00000000c0)=ANY=[@ANYBLOB="3800000054000147880000000000000007008209", @ANYRES32=r2, @ANYBLOB="20000100", @ANYRES32, @ANYBLOB="00001000e000030000010001000000000000000008"], 0x38}}, 0x0) r3 = socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$batadv(&(0x7f0000000180), 0xffffffffffffffff) (async) r4 = syz_genetlink_get_family_id$batadv(&(0x7f0000000180), 0xffffffffffffffff) sendmsg$BATADV_CMD_GET_BLA_BACKBONE(r3, &(0x7f0000000400)={0x0, 0x0, &(0x7f00000003c0)={&(0x7f0000000440)={0x14, r4, 0x303, 0x70bd29, 0x25dfdbff, {0xa}}, 0x14}, 0x1, 0x0, 0x0, 0x48890}, 0x20000804) sendmsg$ETHTOOL_MSG_COALESCE_SET(r1, &(0x7f00000001c0)={&(0x7f0000000100)={0x10, 0x0, 0x0, 0x4000040}, 0xffffffa8, &(0x7f0000000180)={&(0x7f0000000140)={0x14, 0x0, 0x800, 0x70bd2b, 0x25dfdbfb}, 0x14}, 0x1, 0x0, 0x0, 0x4004000}, 0x20040804) socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_route(r1, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000100)=ANY=[], 0x44}, 0x1, 0x0, 0x0, 0x44044015}, 0x0) 11.929912077s ago: executing program 0 (id=2712): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r0, &(0x7f000000c2c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f00000007c0)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a28000000000a0101000000005e1affd5020000000900010073797a300000000008000240000000032c000000030a01030000e6ff00000000020000000900010073797a30000000000900030073797a320000000014000000110001"], 0x7c}, 0x1, 0x0, 0x0, 0x40}, 0x0) sendmsg$NFT_BATCH(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000900)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a2c000000060a0b040000000000000000020000000900010073797a30000000000900020073797a320000000014000000110001"], 0x54}}, 0x0) (async) sendmsg$NFT_BATCH(r0, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000400)={&(0x7f0000000580)={{0x14, 0x10, 0x1, 0x0, 0x0, {0xa}}, [@NFT_MSG_DELRULE={0x38, 0x6, 0xa, 0x5, 0x0, 0x0, {0x2}, [@NFTA_RULE_CHAIN={0x9, 0x2, 'syz2\x00'}, @NFTA_RULE_TABLE={0x9, 0x1, 'syz0\x00'}, @NFTA_RULE_HANDLE={0xc, 0x3, 0x1, 0x0, 0x2}]}], {0x14, 0x11, 0x1, 0x0, 0x0, {0x5}}}, 0x60}, 0x1, 0x0, 0x0, 0x20040804}, 0x800) (async) r1 = socket(0x40000000015, 0x5, 0x0) setsockopt$RDS_CONG_MONITOR(r1, 0x114, 0x6, &(0x7f0000000080)=0x1, 0x4) (async) r2 = socket$nl_generic(0x10, 0x3, 0x10) r3 = syz_genetlink_get_family_id$wireguard(&(0x7f0000000900), 0xffffffffffffffff) (async) r4 = socket$kcm(0x11, 0x2, 0x0) getsockopt$sock_timeval(r4, 0x1, 0x42, 0x0, &(0x7f00000001c0)) r5 = syz_genetlink_get_family_id$tipc2(&(0x7f0000000140), r2) (async) r6 = socket$nl_rdma(0x10, 0x3, 0x14) sendmsg$RDMA_NLDEV_CMD_STAT_GET(r6, &(0x7f0000000100)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000040)={0x18, 0x1411, 0x828949ab3fe143d7, 0x0, 0x0, "", [@RDMA_NLDEV_ATTR_STAT_RES={0x8}]}, 0x18}}, 0x0) (async) sendmsg$TIPC_NL_PEER_REMOVE(r2, &(0x7f0000000540)={&(0x7f0000000500)={0x10, 0x0, 0x0, 0x8000000}, 0xc, &(0x7f0000000640)={&(0x7f0000000980)={0x17c, r5, 0x300, 0x70bd2d, 0x25dfdbfb, {}, [@TIPC_NLA_NET={0x34, 0x7, 0x0, 0x1, [@TIPC_NLA_NET_NODEID={0xc, 0x3, 0x5}, @TIPC_NLA_NET_NODEID_W1={0xc, 0x4, 0x3}, @TIPC_NLA_NET_NODEID={0xc, 0x3, 0x2}, @TIPC_NLA_NET_NODEID_W1={0xc, 0x4, 0x1}]}, @TIPC_NLA_PUBL={0x4c, 0x3, 0x0, 0x1, [@TIPC_NLA_PUBL_LOWER={0x8, 0x2, 0x5}, @TIPC_NLA_PUBL_LOWER={0x8, 0x2, 0x7}, @TIPC_NLA_PUBL_LOWER={0x8, 0x2, 0x9}, @TIPC_NLA_PUBL_LOWER={0x8, 0x2, 0xc}, @TIPC_NLA_PUBL_LOWER={0x8, 0x2, 0x1}, @TIPC_NLA_PUBL_UPPER={0x8, 0x3, 0x8}, @TIPC_NLA_PUBL_UPPER={0x8, 0x3, 0x7}, @TIPC_NLA_PUBL_UPPER={0x8, 0x3, 0xffffb6a1}, @TIPC_NLA_PUBL_TYPE={0x8, 0x1, 0x100000}]}, @TIPC_NLA_MON={0x34, 0x9, 0x0, 0x1, [@TIPC_NLA_MON_REF={0x8, 0x2, 0x6}, @TIPC_NLA_MON_ACTIVATION_THRESHOLD={0x8, 0x1, 0x80000000}, @TIPC_NLA_MON_ACTIVATION_THRESHOLD={0x8, 0x1, 0x5}, @TIPC_NLA_MON_REF={0x8, 0x2, 0xffff}, @TIPC_NLA_MON_REF={0x8, 0x2, 0x8}, @TIPC_NLA_MON_REF={0x8, 0x2, 0x1}]}, @TIPC_NLA_MON={0x14, 0x9, 0x0, 0x1, [@TIPC_NLA_MON_ACTIVATION_THRESHOLD={0x8, 0x1, 0xfffffffd}, @TIPC_NLA_MON_ACTIVATION_THRESHOLD={0x8, 0x1, 0xe04}]}, @TIPC_NLA_SOCK={0xa0, 0x2, 0x0, 0x1, [@TIPC_NLA_SOCK_REF={0x8, 0x2, 0x4}, @TIPC_NLA_SOCK_HAS_PUBL={0x4}, @TIPC_NLA_SOCK_ADDR={0x8, 0x1, 0x9}, @TIPC_NLA_SOCK_CON={0x2c, 0x3, 0x0, 0x1, [@TIPC_NLA_CON_NODE={0x8, 0x2, 0x1}, @TIPC_NLA_CON_FLAG={0x8, 0x1, 0xc3}, @TIPC_NLA_CON_FLAG={0x8, 0x1, 0xe2}, @TIPC_NLA_CON_NODE={0x8, 0x2, 0x10}, @TIPC_NLA_CON_FLAG={0x8, 0x1, 0x101}]}, @TIPC_NLA_SOCK_ADDR={0x8, 0x1, 0x2}, @TIPC_NLA_SOCK_CON={0x54, 0x3, 0x0, 0x1, [@TIPC_NLA_CON_NODE={0x8, 0x2, 0x2}, @TIPC_NLA_CON_NODE={0x8, 0x2, 0x6}, @TIPC_NLA_CON_NODE={0x8, 0x2, 0x2}, @TIPC_NLA_CON_FLAG={0x8, 0x1, 0x7fffffff}, @TIPC_NLA_CON_FLAG={0x8, 0x1, 0x5}, @TIPC_NLA_CON_FLAG={0x8, 0x1, 0x81}, @TIPC_NLA_CON_FLAG={0x8, 0x1, 0x4}, @TIPC_NLA_CON_NODE={0x8, 0x2, 0x880}, @TIPC_NLA_CON_FLAG={0x8, 0x1, 0x1}, @TIPC_NLA_CON_FLAG={0x8, 0x1, 0xb}]}]}]}, 0x17c}, 0x1, 0x0, 0x0, 0xe4c5dccd91524939}, 0x4) sendmsg$WG_CMD_SET_DEVICE(r2, &(0x7f0000001000)={0x0, 0x0, &(0x7f0000000fc0)={&(0x7f0000000400)=ANY=[@ANYBLOB="1c0000006918a318f370424eaebfc117ffe901fce039137cfaccc67304eb64e799abac87222623251c3c44d8509dd84bf2246a1821653283dc8c5aa1539c43c002d3f29e970d5a4c0eb868deb0de32ad3c095d941180258657890b987172765cdfa52b57955002d091a3dc0ab62746820e4b1eb936e53bd6397988c5da1fe434ea65626cbcb263d46b7bf5fe956744739eb96ba2c87ec5153f107adf5636de3c447f94eb609100c345b3eed5c1fbdc70002760d363562fd3aa465d723e6c2dc663ea0717", @ANYRES16=r3, @ANYBLOB="010029bd7000ffdbdf250100000008000100", @ANYRES32=0x0, @ANYBLOB], 0x1c}, 0x1, 0x0, 0x0, 0x4}, 0x0) (async) r7 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r7, &(0x7f0000000040)={0x0, 0x0, &(0x7f00000005c0)={&(0x7f0000000180)=ANY=[@ANYBLOB="2800000056000100000000000000000007000000", @ANYRES32=0x0, @ANYBLOB="100001"], 0x28}}, 0x0) r9 = socket$inet6_sctp(0xa, 0x5, 0x84) getsockopt$inet_sctp6_SCTP_RECVNXTINFO(r9, 0x84, 0x21, &(0x7f0000000200), &(0x7f0000000280)=0x4) ppoll(&(0x7f0000000180)=[{r1}], 0x1, &(0x7f00000000c0)={0x0, 0x3938700}, 0x0, 0x0) (async) socket$nl_generic(0x10, 0x3, 0x10) (async) r10 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$SEG6_CMD_GET_TUNSRC(r10, 0x0, 0x20000005) r11 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000180), r10) ioctl$sock_SIOCGIFINDEX_80211(r10, 0x8933, &(0x7f00000001c0)={'wlan1\x00', 0x0}) sendmsg$NL80211_CMD_SET_BSS(r10, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000200)={0x54, r11, 0x1, 0x70bd29, 0x25dfdbfc, {{}, {@val={0x8, 0x3, r12}, @void}}, [@NL80211_ATTR_P2P_CTWINDOW={0x5, 0xa2, 0x40}, @NL80211_ATTR_AP_ISOLATE={0x5, 0x60, 0xfe}, @NL80211_ATTR_AP_ISOLATE={0x5, 0x60, 0x5}, @NL80211_ATTR_BSS_HT_OPMODE={0x6, 0x6d, 0x4}, @NL80211_ATTR_P2P_OPPPS={0x5}, @NL80211_ATTR_BSS_CTS_PROT={0x5, 0x1c, 0x10}, @NL80211_ATTR_BSS_HT_OPMODE={0x6, 0x6d, 0x1}]}, 0x54}, 0x1, 0x0, 0x0, 0x4000}, 0x4000) (async) sendmsg$nl_generic(0xffffffffffffffff, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000180)={&(0x7f00000006c0)=ANY=[@ANYRES8=r12, @ANYRESOCT=r2, @ANYRESDEC=r8, @ANYRES32=r7, @ANYBLOB="b5b6346f3843123f343f0e89e678aafe5d0a00a7c3ba1c0196932e1503f3bf7e15abb5c46c46b7a4b7aadf8a6f047d7ce80b292d33fd1e3d2ea5a315f3728a48b3001a24fe30b533172c5d611be830a100773c2b25523d33abeae71de879a4dcb4564e981dbdc515c8fa4e749b18c23ee4443c180b78c61e07f52016d2c2841124491319b41dd9fee249ed53c731204d52e2dabe9453ac1c18c65be3bd02b19b5c34e41cd385aac29ff82d64f44256a1e110"], 0xf8}, 0x1, 0x0, 0x0, 0x4048011}, 0x0) (async) r13 = socket(0x10, 0x3, 0x0) ioctl$sock_ipv4_tunnel_SIOCGETTUNNEL(r13, 0x89f0, &(0x7f00000005c0)={'ip_vti0\x00', &(0x7f0000000440)={'gretap0\x00', 0x0, 0x80, 0x7800, 0x81, 0x7, {{0x5, 0x4, 0x1, 0x8, 0x14, 0x65, 0x0, 0x7, 0x4, 0x0, @rand_addr=0x64010102, @rand_addr=0x64010101}}}}) (async) sendmsg$kcm(0xffffffffffffffff, &(0x7f00000003c0)={&(0x7f0000000080)=@sco={0x1f, @fixed={'\xaa\xaa\xaa\xaa\xaa', 0x11}}, 0x80, &(0x7f0000000380)=[{&(0x7f00000001c0)="bb0beef2dd5af3aafd8ca44ebee756fcd2ef7f540b549551d3e7f9032a0b6e057dca8d6c1d4719fbf335878d33fc599faf6e61167be45979576023a675bbf1bad335065b0120ded3c9fe2ef59d4a6ca8f85a315bcb3a8bba6f5f17a7d0cfa248235f6d25c43b2f10150f488837d1c3e22f233f3a0a6115d72400d30e39717598ea0283c2f3d958355589f8fbf950cd24c74925f71ec57d79d10ef1ea8946781907baca03acb9ac1c5471814484435a0e7c04ffe43c6a504f8a09493381ed3eb62fb75d76b18f5e1292828c75dc9fde8d54544841", 0xd4}, {&(0x7f00000002c0)="d1aad5f8d1bde795c5a0f4ada81eaf97a3354dbf6cd79e750f31ee13be15491f815320567ec2f5ca229eaabe57a9520aedb3c76f5a4270284dbea59d4e743db131572485c2b716fd460f1f6f8b4d79032ab6b045c2d0f3a9d08c4d9c40a1725c5648f744fb51b4f08d94b083b02af80ec4520ace0a615a189f576a94e47882c9d645b958d935f106189327de397ccebe5332ef738b9f54ce352bfcc0684624c16a55c23a46d77976067e4cd6bea1ab06c644e050c63d859e287d7f", 0xbb}], 0x2}, 0x0) 11.807856143s ago: executing program 0 (id=2715): r0 = socket$netlink(0x10, 0x3, 0x8000000004) r1 = openat$tun(0xffffffffffffff9c, &(0x7f0000000000), 0x40241, 0x0) ioctl$TUNSETIFF(r1, 0x400454ca, &(0x7f0000000200)={'syzkaller1\x00', 0xc201}) r2 = socket$kcm(0x2, 0x3, 0x2) ioctl$SIOCSIFHWADDR(r2, 0x8914, &(0x7f0000000040)={'syzkaller1\x00', @broadcast}) r3 = socket$alg(0x26, 0x5, 0x0) r4 = socket$netlink(0x10, 0x3, 0x0) r5 = socket(0x10, 0x803, 0x0) sendmsg$NL80211_CMD_CRIT_PROTOCOL_START(r5, &(0x7f0000000580)={0x0, 0x0, &(0x7f0000000540)={0x0, 0x1c}}, 0x0) getsockname$packet(r5, &(0x7f0000000600)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000080)=0x14) sendmsg$nl_route(r4, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000640)=ANY=[@ANYBLOB="3c0000001000850600000000ff6122314a000800", @ANYRES32=r6, @ANYBLOB="f5ff0f00252155b21c0012000c000100626f6e64000000000c0002000800010001"], 0x3c}}, 0x40000) r7 = bpf$PROG_LOAD_XDP(0x5, &(0x7f00000008c0)={0x6, 0x3, &(0x7f0000000240)=@framed={{0x18, 0x0, 0x0, 0x0, 0x1}}, &(0x7f00000001c0)='syzkaller\x00', 0x4, 0x0, 0x0, 0x40f00, 0x0, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x4}, 0x94) bpf$BPF_LINK_CREATE_XDP(0x1c, &(0x7f00000000c0)={r7, r6}, 0x14) sendmsg$nl_route(r5, &(0x7f0000000280)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000300)=@newlink={0x3c, 0x10, 0x503, 0x0, 0x700, {0x0, 0x0, 0x0, 0x0, 0x0, 0x1006}, [@IFLA_LINKINFO={0x14, 0x12, 0x0, 0x1, @bridge={{0xb}, {0x4}}}, @IFLA_MASTER={0x8, 0xa, r6}]}, 0x3c}, 0x1, 0x0, 0x0, 0x800}, 0x440b0) r8 = syz_genetlink_get_family_id$ipvs(&(0x7f0000000300), r0) sendmsg$IPVS_CMD_DEL_SERVICE(r5, &(0x7f0000000680)={&(0x7f00000002c0)={0x10, 0x0, 0x0, 0x2000000}, 0xc, &(0x7f0000000640)={&(0x7f0000000740)=ANY=[@ANYBLOB="482c82000000", @ANYRES16=r8, @ANYBLOB="040026bd7000fddbdf250300000020000180090006006c626c6300000000060001000a00000008000600776c63000c0002800800060000000000080004008f340000"], 0x48}, 0x1, 0x0, 0x0, 0x20000054}, 0x8000) bind$alg(r3, &(0x7f00000004c0)={0x26, 'skcipher\x00', 0x0, 0x0, 'ecb-camellia-aesni-avx2\x00'}, 0x58) setsockopt$ALG_SET_KEY(r3, 0x117, 0x1, &(0x7f0000000280)="ad56b6c5820fae9d6dcd3292ea54c7beef915d564c90c200", 0x18) r9 = accept4(r5, 0x0, 0x0, 0x81000) sendmmsg$alg(r9, &(0x7f0000000040)=[{0x0, 0x0, &(0x7f0000000000)=[{&(0x7f0000000080)="f78d9ca38fff48f3be52163448412ba8", 0xfffffe3f}, {&(0x7f0000000140)="ebe3a0e9796cfd1647e299f4e376fdba128280b372219d205e81f4a7f71c1926aae1efd7e0054a863f3d5cfe6cb55b5bb9fa6935849e6098ed884e7cb51726b360fbb37b4fe035bbb095873048"}, {&(0x7f00000003c0)="e8700e444d50a969ff67347cff6127e6ef12ee3819271482a4975a52c1ab9b8b4db3945d1032005eabe97b4dc33a47d3a158da988456d30026b433186f53cdcdb93a4722bf306a10470d50f5cb1ece9ead3459bab1cf1538cd0b157653c5e892962c80f158c443e9c6ad7d2a8103ef2f4b93766b9a21501f94c1568b13756b66f74f46cf801704d2da8b96c34070b233af0afcc436712e58ed25e721193af05a045ad3fdc928f02f3dbad19d3e66eebda2e63f3f46ef4511cee26d7b48241847bf9e343ef4674c45e2a085060f11"}], 0x1, &(0x7f0000000380)=[@op={0x18, 0x117, 0x3, 0x1}], 0x18}], 0x1, 0x40800) recvmsg(r9, &(0x7f00000005c0)={0x0, 0x0, &(0x7f00000001c0)=[{&(0x7f00000000c0)=""/81, 0xff40}, {&(0x7f0000000200)=""/83, 0x20000253}], 0x2}, 0x0) ioctl$sock_inet_SIOCADDRT(0xffffffffffffffff, 0x890b, &(0x7f00000003c0)={0x0, {0x2, 0x4e20, @private=0xa010100}, {0x2, 0x4e21, @dev={0xac, 0x14, 0x14, 0x12}}, {0x2, 0x4e21, @empty}, 0x4, 0x0, 0x0, 0x0, 0x2008, 0x0, 0x200001, 0x1ff, 0x9}) write$tun(r1, &(0x7f00000003c0)=ANY=[@ANYBLOB="080000fa"], 0xdc) socket$kcm(0x2, 0x200000000000001, 0x106) r10 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_RENAME(r10, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000140)={&(0x7f00000006c0)=ANY=[@ANYBLOB="280000000506050000000000000000000000000005000100070000000900020073797a32000000004c7c482e5613bfaf5b04f20679cbd279a554e6b1572be44c28ade7c2d2d579e3ba0d41be008bbf8843"], 0x28}}, 0x0) r11 = socket$inet6_sctp(0xa, 0x801, 0x84) sendmmsg$inet6(r11, &(0x7f00000000c0)=[{{&(0x7f0000000000)={0xa, 0x0, 0x0, @private1}, 0x1c, &(0x7f0000000300)=[{&(0x7f0000000040)="18", 0x1}], 0x1}}], 0x1, 0x0) shutdown(r11, 0x1) setsockopt(r11, 0x84, 0x71, &(0x7f00000002c0)="1a00000002000000", 0x8) 7.108134445s ago: executing program 7 (id=2756): r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$tipc2(&(0x7f0000000040), 0xffffffffffffffff) sendmsg$TIPC_NL_LINK_GET(r0, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000080)={0x14, r1, 0x401}, 0x14}}, 0x0) r2 = socket$inet(0x2, 0x1, 0x0) r3 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_CREATE(r3, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000100)=ANY=[@ANYBLOB="64000000020605000a0000000000000000000000100003006269746d61703a706f72740005000400000000000900020073797a3000000000050005000000000005000100060000001c00078008000840000000200600044000000000060005"], 0x64}}, 0x0) setsockopt$sock_int(r2, 0x1, 0x8, &(0x7f0000000100), 0x4) setsockopt$sock_int(r2, 0x1, 0x12, &(0x7f0000000080)=0x7ff, 0x4) r4 = socket$inet_tcp(0x2, 0x1, 0x0) getsockopt$IPT_SO_GET_ENTRIES(r4, 0x0, 0x41, 0x0, &(0x7f0000000080)) r5 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r5, &(0x7f0000000400)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000080)=@ipv4_newrule={0x24, 0x20, 0xf4db158ec847dc81, 0x70bd26, 0x3, {0x2, 0x0, 0x0, 0x0, 0x6, 0x0, 0x0, 0x4, 0x1f}, [@FRA_GENERIC_POLICY=@FRA_DPORT_RANGE={0x8, 0x18, {0x4e21, 0x4e23}}]}, 0x24}, 0x1, 0x0, 0x0, 0x81}, 0x44004) sendmsg$nl_route(r5, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000180)=@newlink={0x3c, 0x10, 0x439, 0xffffffff, 0x0, {0x0, 0x0, 0x0, 0x0, 0x9801, 0x1313}, [@IFLA_LINKINFO={0x1c, 0x12, 0x0, 0x1, @ipip={{0x9}, {0xc, 0x2, 0x0, 0x1, [@IFLA_IPTUN_REMOTE={0x8, 0x3, @initdev={0xac, 0x1e, 0x0, 0x0}}]}}}]}, 0x3c}, 0x1, 0x0, 0x0, 0x1}, 0x40008c0) 6.640074111s ago: executing program 5 (id=2759): r0 = bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000480)={0x6, 0x3, &(0x7f00000000c0)=ANY=[@ANYBLOB="1800000002000000000000000000082295"], &(0x7f0000000040)='syzkaller\x00'}, 0x90) (async) r1 = syz_init_net_socket$802154_dgram(0x24, 0x2, 0x0) (async, rerun: 32) r2 = socket(0x1d, 0x2, 0x6) (rerun: 32) setsockopt$RDS_CANCEL_SENT_TO(r2, 0x6a, 0x1, 0x0, 0x0) (async) r3 = socket$rxrpc(0x21, 0x2, 0xa) connect$rxrpc(r3, &(0x7f0000000040)=@in4={0x21, 0x0, 0x2, 0xd, {0x2, 0x0, @empty}}, 0x24) bind$802154_dgram(r1, &(0x7f0000000040)={0x24, @short={0x2, 0xffff}}, 0x14) (async) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000600)={r0, 0x1f4, 0xe, 0x0, &(0x7f00000002c0)="ff412f66b083dcc1010b3efc8864", 0x0, 0x300, 0x300, 0x0, 0x0, 0x0, 0x0, 0x2, 0xffff80fe, 0x4}, 0x50) (async) ioctl$sock_ipv6_tunnel_SIOCDELTUNNEL(r2, 0x89f2, &(0x7f0000000180)={'syztnl2\x00', &(0x7f0000000100)={'ip6gre0\x00', 0x0, 0x4, 0x7, 0x5, 0x9a6, 0x8, @empty, @remote, 0x700, 0x10, 0x5, 0x1}}) (async) r5 = openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0) ioctl$TUNSETIFF(r5, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0xca02}) socket$netlink(0x10, 0x3, 0x0) preadv(r5, &(0x7f0000000b80)=[{&(0x7f00000000c0)=""/10, 0xa}], 0x1, 0x7, 0x8000) (async) r6 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000040)='cpuset.effective_cpus\x00', 0x275a, 0x0) ioctl$FS_IOC_SETFLAGS(r6, 0x40086602, &(0x7f0000000080)=0x20) (async) setsockopt$SO_BINDTODEVICE_wg(r6, 0x1, 0x19, &(0x7f0000000540)='wg0\x00', 0x4) mmap(&(0x7f0000000000/0x400000)=nil, 0x400000, 0x1, 0x41071, 0xffffffffffffffff, 0x0) (async) r7 = socket$nl_route(0x10, 0x3, 0x0) setsockopt$netlink_NETLINK_TX_RING(r7, 0x10e, 0xc, &(0x7f0000000040)={0x80}, 0x10) sendmsg$nl_route(r7, &(0x7f0000000300)={0x0, 0x0, &(0x7f00000007c0)={&(0x7f0000000080)=@ipv4_newroute={0x2c, 0x1a, 0x1, 0x70bd2e, 0x25dfdbfb, {0xa, 0x80, 0x80}, [@RTA_SPORT={0x6, 0x1c, 0x4e21}, @RTA_IP_PROTO={0x5, 0x1b, 0x11}]}, 0x2c}}, 0x0) (async) r8 = socket$alg(0x26, 0x5, 0x0) bind$alg(r8, &(0x7f0000000080)={0x26, 'hash\x00', 0x0, 0x0, 'sha512-avx\x00'}, 0x58) (async) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000380)={0x11, 0x4, &(0x7f0000000000)=@framed={{0x18, 0x0, 0x0, 0x0, 0x1000, 0x0, 0x0, 0x0, 0x10}, [@alu={0x4, 0x1, 0x2, 0x0, 0x2, 0x2, 0xfffffffffffffff0}]}, &(0x7f0000000080)='GPL\x00', 0x400, 0x0, 0x0, 0x41100, 0x2, '\x00', r4, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x6, &(0x7f0000000200)=[r6], &(0x7f0000000300)=[{0x2, 0x2, 0x2, 0x2}, {0x4, 0x3, 0x0, 0xa}, {0x2, 0x2, 0x9, 0xa}, {0x2, 0x1, 0x4, 0x8}, {0x0, 0x5, 0x5, 0x7}, {0x0, 0x3, 0xe, 0x1}], 0x10, 0x98}, 0x94) (async) openat$tun(0xffffffffffffff9c, &(0x7f0000000280), 0x10003, 0x0) openat$tun(0xffffffffffffff9c, &(0x7f0000000440), 0x686200, 0x0) (async, rerun: 64) r9 = openat$tun(0xffffffffffffff9c, &(0x7f00000004c0), 0x0, 0x0) (rerun: 64) close(r9) ioctl$SIOCSIFHWADDR(r9, 0x8914, &(0x7f0000002280)={'syzkaller0\x00', @link_local={0x1, 0x80, 0xc2, 0x0, 0x0, 0x1}}) ioctl$SIOCSIFHWADDR(r9, 0x8914, &(0x7f0000002280)={'lo\x00', @link_local={0x1, 0x80, 0xc2, 0x0, 0x0, 0x3}}) (async, rerun: 64) bpf$BPF_LINK_CREATE_XDP(0x1c, &(0x7f00000001c0)={r0, r4, 0x25, 0x1, @void}, 0x10) (rerun: 64) 6.603964967s ago: executing program 7 (id=2760): r0 = bpf$BPF_BTF_LOAD(0x12, &(0x7f00000007c0)={&(0x7f0000000640)={{0xeb9f, 0x1, 0x0, 0x18, 0x0, 0x63, 0x63, 0x8, [@datasec={0x4, 0x7, 0x0, 0xf, 0x3, [{0x2, 0x4, 0x100}, {0x3, 0x401, 0xffffffff}, {0x1, 0x94a, 0x7fff}, {0x2, 0x1, 0x4dd}, {0x2, 0x5, 0x6}, {0x3, 0xfffffff8, 0xfffffff8}, {0x3, 0x1, 0x10001}], "de162a"}]}, {0x0, [0x2e, 0x5f, 0x5f, 0x61, 0x61, 0x0]}}, &(0x7f0000000700)=""/138, 0x84, 0x8a, 0x0, 0x5, 0x10000}, 0x28) r1 = bpf$MAP_CREATE(0x0, &(0x7f0000000800)=@base={0x1d, 0x0, 0x0, 0x8000, 0x0, 0xffffffffffffffff, 0xffff, '\x00', 0x0, r0, 0x0, 0x0, 0x1}, 0x50) r2 = bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000340)={&(0x7f0000000340)=ANY=[], 0x0, 0x34, 0x0, 0x0, 0x2}, 0x28) r3 = openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0) ioctl$TUNSETIFF(r3, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x7101}) r4 = socket$nl_route(0x10, 0x3, 0x0) r5 = socket$unix(0x1, 0x1, 0x0) ioctl$sock_SIOCGIFINDEX(r5, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r4, &(0x7f00000012c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000002c0)=@getchain={0x44, 0x66, 0x200, 0x70bd2c, 0x25dfdbff, {0x0, 0x0, 0x0, r6, {0xffff, 0xe}, {0xd, 0x3}, {0xfff2}}, [{0x8, 0xb, 0x8}, {0x8, 0xb, 0xffff2816}, {0x8, 0xb, 0x9}, {0x8, 0xb, 0x7fff}]}, 0x44}}, 0x20040084) r7 = openat$tun(0xffffffffffffff9c, &(0x7f0000000400), 0x40000, 0x0) r8 = socket(0x400000000010, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r8, 0x8933, &(0x7f0000000380)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r8, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000480)=@newtfilter={0x94, 0x2c, 0xd27, 0x170bd2c, 0x2, {0x0, 0x0, 0x0, r9, {0x0, 0x10}, {}, {0x8, 0xffe0}}, [@filter_kind_options=@f_flow={{0x9}, {0x64, 0x2, [@TCA_FLOW_MODE={0x8, 0x2, 0x1}, @TCA_FLOW_KEYS={0x8, 0x1, 0x1a29d}, @TCA_FLOW_ACT={0x50, 0x9, 0x0, 0x1, [@m_csum={0x4c, 0x1, 0x0, 0x0, {{0x9}, {0x20, 0x2, 0x0, 0x1, [@TCA_CSUM_PARMS={0x1c, 0x1, {{0x0, 0x0, 0x8, 0x80000001, 0x7}, 0x1d}}]}, {0x4}, {0xc, 0x7, {0x0, 0x1}}, {0xc, 0x8, {0x1, 0x1}}}}]}]}}]}, 0x94}, 0x1, 0x0, 0x0, 0x4894}, 0x2) close(r7) socket(0x10, 0x3, 0x0) ioctl$SIOCSIFHWADDR(r7, 0x8914, &(0x7f0000002280)={'syzkaller0\x00', @multicast}) r10 = socket$kcm(0x11, 0x3, 0x0) setsockopt$sock_attach_bpf(r10, 0x107, 0xf, &(0x7f0000000600), 0x56) r11 = socket$inet_udp(0x2, 0x2, 0x0) bind$inet(r11, &(0x7f00000001c0)={0x2, 0x0, @local}, 0x10) connect$inet(r11, &(0x7f0000000480)={0x2, 0x0, @multicast2}, 0x10) sendmmsg(r11, &(0x7f0000007fc0), 0x800001d, 0x0) setsockopt$IP_VS_SO_SET_ADD(r11, 0x0, 0x482, &(0x7f0000000100)={0x100000011, @multicast2, 0x0, 0x0, 'fo\x00', 0x15, 0xff, 0xf}, 0x2c) sendmsg$kcm(r10, &(0x7f0000000280)={&(0x7f0000000540)=@xdp={0x2c, 0x0, r9, 0x42}, 0x80, &(0x7f0000000440)=[{&(0x7f00000001c0)="27030200dc0f14000e0000000024c1020000ff1107c2fb7fe0406e52534b4f6b3d327db412f40000000000000000", 0x2e}], 0x1}, 0x4005) r12 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x11, 0x3, &(0x7f0000000100)=ANY=[@ANYBLOB="180000000100000000000000801800009500000000000000"], &(0x7f0000000000)='GPL\x00', 0xc, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, r2, 0x8, &(0x7f00000000c0)={0x0, 0x1}, 0x1}, 0x94) bpf$BPF_PROG_WITH_BTFID_LOAD(0x5, &(0x7f0000000500)=@bpf_ext={0x1a, 0xf, &(0x7f00000005c0)=ANY=[@ANYBLOB="1800000092870000000000000000000018110000", @ANYRES32=r1, @ANYRES32=r1], &(0x7f0000000080)='syzkaller\x00', 0x7, 0x0, 0x0, 0x40f00, 0x20, '\x00', 0x0, 0x3a, r2, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x1, r12, 0x0, 0x0, 0x0, 0x10, 0x4a6}, 0x94) r13 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='memory.events\x00', 0x275a, 0x0) write$cgroup_subtree(r13, &(0x7f0000000000)=ANY=[], 0x10448) mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x2000001, 0x12, r13, 0x0) bpf$BPF_PROG_WITH_BTFID_LOAD(0x5, &(0x7f0000000500)=@bpf_ext={0x1a, 0x0, 0x0, 0x0, 0x7, 0x0, 0x0, 0x40f00, 0x20, '\x00', 0x0, 0x3a, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x1, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x10, 0x4a6}, 0x94) 6.463787551s ago: executing program 6 (id=2761): socket$igmp6(0xa, 0x3, 0x2) r0 = socket$inet6_sctp(0xa, 0x5, 0x84) shutdown(r0, 0x0) r1 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_LIST(r1, &(0x7f0000000380)={0x0, 0x0, &(0x7f0000000340)={&(0x7f00000002c0)={0x28, 0x7, 0x6, 0x5, 0x0, 0x0, {0x0, 0x0, 0xa}, [@IPSET_ATTR_SETNAME={0x9, 0x2, 'syz2\x00'}, @IPSET_ATTR_PROTOCOL={0x5}]}, 0x28}, 0x1, 0x0, 0x0, 0x1800}, 0x4000080) getsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX3(r0, 0x84, 0x6f, &(0x7f0000000000)={0x0, 0x1c, &(0x7f00000001c0)=[@in6={0xa, 0x4e21, 0x7ff, @private2, 0xeb2}]}, &(0x7f0000000180)=0x10) setsockopt$inet_sctp6_SCTP_MAXSEG(r0, 0x84, 0xd, &(0x7f0000000100)=@assoc_value={r2, 0xd1a}, 0x8) setsockopt$IP6T_SO_SET_REPLACE(r0, 0x29, 0x40, &(0x7f0000000000)=@raw={'raw\x00', 0x8, 0x3, 0x350, 0x0, 0xffffffff, 0xffffffff, 0x0, 0xffffffff, 0x280, 0xffffffff, 0xffffffff, 0x280, 0xffffffff, 0x3, 0x0, {[{{@ipv6={@private0, @mcast2, [], [], 'veth0_macvtap\x00', 'dvmrp1\x00', {}, {}, 0x4}, 0x0, 0x128, 0x150, 0x0, {}, [@inet=@rpfilter={{0x28}}, @common=@inet=@hashlimit1={{0x58}, {'veth1_to_bond\x00', {0x41, 0x1ff, 0x2000006, 0xb0e2, 0x10001, 0x84e, 0xfffffffb, 0x18, 0x8}, {0x1}}}]}, @common=@unspec=@STANDARD={0x28, '\x00', 0x0, 0xfffffffffffffffd}}, {{@ipv6={@remote, @ipv4={'\x00', '\xff\xff', @dev}, [], [0x0, 0xffffff00, 0x0, 0xff], 'wg1\x00', 'gre0\x00'}, 0x0, 0x100, 0x130, 0x0, {}, [@common=@srh={{0x30}, {0x3a, 0xd, 0x0, 0x0, 0x5, 0x2db0, 0x1080}}, @inet=@rpfilter={{0x28}, {0xe}}]}, @common=@unspec=@CONNMARK={0x30}}], {{'\x00', 0x0, 0xa8, 0xd0}, {0x28, '\x00', 0x7}}}}, 0x3b0) 6.192621753s ago: executing program 5 (id=2763): r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000040)='memory.events\x00', 0x275a, 0x0) (async) r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000140)='memory.events\x00', 0x7a05, 0x1700) write$cgroup_int(r1, &(0x7f0000000200)=0xffffffffffffffff, 0x12) (async, rerun: 32) sendfile(r1, r0, 0x0, 0xbdc4) (async, rerun: 32) getsockopt$inet_mreqsrc(r1, 0x0, 0x28, &(0x7f0000000100)={@loopback, @initdev, @empty}, &(0x7f0000000140)=0xc) r2 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000840)='blkio.bfq.dequeue\x00', 0x275a, 0x0) write$cgroup_subtree(r2, &(0x7f0000000080)=ANY=[], 0x10448) mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x2000001, 0x12, r2, 0x0) (async, rerun: 64) r3 = socket$inet6_sctp(0xa, 0x1, 0x84) (rerun: 64) setsockopt(r3, 0x84, 0x81, &(0x7f0000000280)="1a00000002000000", 0x8) r4 = socket$nl_audit(0x10, 0x3, 0x9) sendmsg$AUDIT_MAKE_EQUIV(r4, &(0x7f00000000c0)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x20000}, 0xc, &(0x7f0000000080)={&(0x7f0000000040)={0x28, 0x3f7, 0x200, 0x70bd29, 0x25dfdbff, {0x7, 0x7, './file0', './file0'}, ["", "", "", "", ""]}, 0x28}, 0x1, 0x0, 0x0, 0x40000}, 0x885) r5 = socket$igmp6(0xa, 0x3, 0x2) setsockopt$IP6T_SO_SET_REPLACE(r5, 0x29, 0x40, &(0x7f0000000ec0)=@mangle={'mangle\x00', 0x64, 0x6, 0x668, 0x2e0, 0x440, 0x440, 0x2e0, 0x2e0, 0x598, 0x598, 0x598, 0x598, 0x598, 0x6, 0x0, {[{{@ipv6={@empty, @local, [0xffffff00, 0xffffff00, 0xffffff00, 0xffffff00], [0xffffffff, 0xff000000, 0xff, 0xff000000], 'bridge_slave_0\x00', 'dummy0\x00', {0xff}, {}, 0x84, 0x5, 0x6, 0x4c}, 0x0, 0xa8, 0xd0}, @common=@unspec=@NFQUEUE2={0x28, 'NFQUEUE\x00', 0x2, {0x0, 0x5}}}, {{@uncond, 0x0, 0xa8, 0xe8}, @inet=@TPROXY1={0x40, 'TPROXY\x00', 0x1, {0x0, 0x0, @ipv4=@broadcast}}}, {{@ipv6={@mcast2, @loopback, [], [], 'veth0_to_team\x00', 'syzkaller0\x00'}, 0x0, 0x100, 0x128, 0x0, {}, [@common=@unspec=@connmark={{0x30}}, @common=@inet=@socket1={{0x28}, 0x1}]}, @common=@unspec=@MARK={0x28}}, {{@ipv6={@rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x02', @dev={0xfe, 0x80, '\x00', 0x3a}, [0x0, 0xffffff00, 0x0, 0xff000000], [0xffffff00, 0x0, 0xff, 0xffffffff], 'rose0\x00', 'batadv_slave_0\x00', {}, {}, 0x0, 0xc1, 0x5}, 0x0, 0x120, 0x160, 0x0, {}, [@common=@frag={{0x30}}, @common=@hbh={{0x48}, {0x0, 0x3, 0x0, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x6, 0x0, 0x0, 0x0, 0x0, 0x4]}}]}, @inet=@TPROXY1={0x40, 'TPROXY\x00', 0x1, {0x10, 0x10001, @ipv6=@private1={0xfc, 0x1, '\x00', 0x1}, 0x4e21}}}, {{@ipv6={@dev={0xfe, 0x80, '\x00', 0x2b}, @initdev={0xfe, 0x88, '\x00', 0x0, 0x0}, [0xffffff00, 0xee5f356c6f495b18, 0x100fffe00, 0xff], [0x0, 0xff, 0xffffff00, 0xffffff00], 'veth1_macvtap\x00', 'dummy0\x00', {}, {}, 0x1d, 0x6, 0x4, 0x19}, 0x0, 0x118, 0x158, 0x0, {}, [@common=@dst={{0x48}, {0x0, 0x0, 0x0, [0x0, 0x0, 0x0, 0x0, 0x0, 0x6]}}, @common=@ipv6header={{0x28}, {0x22, 0x2, 0x1}}]}, @inet=@TPROXY1={0x40, 'TPROXY\x00', 0x1, {0x9, 0x0, @ipv4=@dev}}}], {{'\x00', 0x0, 0xa8, 0xd0}, {0x28}}}}, 0x6c8) (async, rerun: 64) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000007c0)={0x7, 0x4, &(0x7f0000000480)=ANY=[@ANYBLOB="190000000000000021000000000000009c0001000000deff9500000100000000"], &(0x7f00000005c0)='syzkaller\x00', 0x2}, 0x94) (rerun: 64) 6.190130117s ago: executing program 6 (id=2764): r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0xa8442, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x7101}) r1 = openat$tun(0xffffffffffffff9c, &(0x7f0000000400), 0x0, 0x0) r2 = socket(0x400000000010, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f0000000380)={'syzkaller0\x00', 0x0}) r4 = socket$inet6_tcp(0xa, 0x1, 0x0) listen(r4, 0x4000000) setsockopt$inet6_tcp_TCP_MD5SIG(r4, 0x6, 0xe, &(0x7f0000000d80)={@in={{0x2, 0x4e21, @dev={0xac, 0x14, 0x14, 0x27}}}, 0x0, 0x0, 0x3d, 0x0, "a1c1dd75a6803e10951cd4b347113e55ebfc9519becf7542da0bc21470e441225642855b5f2f4bb561dc9363aed4a18d67efd5f2fdf98328de9441031348589b763d46d14810acc5f700"}, 0xd8) r5 = socket$netlink(0x10, 0x3, 0x8000000004) r6 = socket$nl_generic(0x10, 0x3, 0x10) r7 = syz_genetlink_get_family_id$ethtool(&(0x7f0000002c40), 0xffffffffffffffff) sendmsg$ETHTOOL_MSG_TSINFO_GET(r6, &(0x7f0000003900)={0x0, 0x0, &(0x7f00000038c0)={&(0x7f0000000bc0)=ANY=[@ANYBLOB="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", @ANYRES16=r7, @ANYBLOB="1b0507000000ffdbdf25190000002000018008000300040000001400020076657468305f746f5f62726964676500"], 0x34}, 0x1, 0x0, 0x0, 0x20048004}, 0x4000000) writev(r5, &(0x7f0000000140)=[{&(0x7f0000000080)="580000001400192340834b80040d8c560a067f0200ff000000000000000058000b4824ca945f64009400ff0325010ebc000000000000008000f0fffeffe809005300fff5dd00000010000100080c10000000000000000000", 0x58}], 0x1) sendmsg$nl_route_sched(r2, &(0x7f00000012c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000005c0)=@newqdisc={0x2c, 0x24, 0x4ee4e6a52ff56541, 0x70bd2a, 0xffffffff, {0x0, 0x0, 0x0, r3, {0x0, 0x7ffe}, {0xffff, 0xffff}}, [@qdisc_kind_options=@q_drr={0x8}]}, 0x2c}}, 0x0) sendmsg$nl_route_sched(r2, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000280)=@newtfilter={0x94, 0x2c, 0xd27, 0x170bd2b, 0x2, {0x0, 0x0, 0x0, r3, {0x0, 0x10}, {}, {0x8, 0xffe0}}, [@filter_kind_options=@f_flow={{0x9}, {0x64, 0x2, [@TCA_FLOW_MODE={0x8, 0x2, 0x1}, @TCA_FLOW_KEYS={0x8, 0x1, 0x1a29d}, @TCA_FLOW_ACT={0x50, 0x9, 0x0, 0x1, [@m_csum={0x4c, 0x1, 0x0, 0x0, {{0x9}, {0x20, 0x2, 0x0, 0x1, [@TCA_CSUM_PARMS={0x1c, 0x1, {{0x80000001, 0x9, 0x50ef69bc24b609d0, 0x4, 0x8}, 0x4c}}]}, {0x4}, {0xc, 0x7, {0x1, 0x1}}, {0xc, 0x8, {0x1, 0x1}}}}]}]}}]}, 0x94}, 0x1, 0x0, 0x0, 0x884}, 0x2) r8 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPCTNL_MSG_CT_NEW(r8, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000006c0)=ANY=[@ANYBLOB="800000000001010400000000141a000002000000240001801400018008000100e000000108000200e00000010c00028005000100000000002400028014000180080001000000000008000200ac1e00010c000280050001000000000008000740000000011c00108008000140000000000800024000000000080003"], 0x80}}, 0xc800) r9 = socket$nl_netfilter(0x10, 0x3, 0xc) recvmmsg(r9, &(0x7f00000002c0)=[{{0x0, 0x0, 0x0}, 0x29c}], 0x1, 0x2, 0x0) r10 = socket$key(0xf, 0x3, 0x2) sendmsg$key(r10, &(0x7f0000000240)={0x7, 0x0, &(0x7f0000000200)={&(0x7f0000000100)=ANY=[@ANYBLOB="020100090a000000007fffffff0000000200100020e9000000e9000000000000030005000000000002000000ac1414000000000000000000030006000000000002"], 0x50}}, 0x0) sendmsg$IPCTNL_MSG_CT_NEW(r9, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000200)=ANY=[@ANYBLOB="380000000301019e"], 0x38}}, 0x0) close(r1) r11 = socket(0x10, 0x3, 0x0) ioctl$SIOCSIFHWADDR(r1, 0x8914, &(0x7f0000002280)={'syzkaller0\x00', @multicast}) r12 = socket$kcm(0x11, 0x3, 0x0) setsockopt$sock_attach_bpf(r12, 0x107, 0xf, &(0x7f0000000600), 0x56) sendmsg$kcm(r12, &(0x7f00000000c0)={&(0x7f00000004c0)=@xdp={0x2c, 0x0, r3, 0x18}, 0x80, &(0x7f00000008c0)=[{&(0x7f00000001c0)="27030200dc0f14000e00000000acc1020000ff88125ce882cbf400930bf4533f00429c65112a093bbf60b85bcb06", 0x2e}], 0x1}, 0x4005) recvmsg$kcm(r11, &(0x7f0000000b80)={&(0x7f0000000440)=@qipcrtr, 0x80, &(0x7f0000000a80)=[{&(0x7f0000000800)=""/165, 0xa5}, {&(0x7f0000000900)=""/135, 0x87}, {&(0x7f00000009c0)=""/167, 0xa7}], 0x3, &(0x7f0000000ac0)=""/175, 0xaf}, 0x40000000) socket$kcm(0x2, 0x3, 0x2) 5.615797852s ago: executing program 5 (id=2767): r0 = socket$xdp(0x2c, 0x3, 0x0) setsockopt$XDP_UMEM_REG(r0, 0x11b, 0x4, &(0x7f00000000c0)={&(0x7f0000000000)=""/5, 0x200000, 0x1000}, 0x20) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) recvmsg(0xffffffffffffffff, 0x0, 0x0) r3 = socket$netlink(0x10, 0x3, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000180)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$sock_SIOCGIFINDEX(r4, 0x8933, &(0x7f0000000080)={'lo\x00', 0x0}) sendmsg$nl_route_sched(r3, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000000)=@newqdisc={0x3c, 0x24, 0xd0f, 0x70bd2a, 0x0, {0x60, 0x0, 0x0, r5, {0x0, 0x8}, {0xffff, 0xffff}, {0x9, 0x5}}, [@qdisc_kind_options=@q_plug={{0x9}, {0xc, 0x2, {0x0, 0xfffffff7}}}]}, 0x3c}, 0x1, 0x0, 0x0, 0x80d1}, 0x34008098) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000000)={'sit0\x00', 0x0}) setsockopt$XDP_TX_RING(r0, 0x11b, 0x3, &(0x7f00000002c0)=0x200000, 0x4) r7 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_inet_SIOCSIFPFLAGS(r7, 0x8934, &(0x7f0000000040)={'wlan0\x00', 0xfffffffc}) ioctl(r7, 0x8b22, &(0x7f0000000040)) r8 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r8, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000040)=ANY=[@ANYBLOB="5000000010003b1500"/20, @ANYRES32=0x0, @ANYBLOB="0000000005001600020000000500170000000000080018000000001200"/42], 0x50}}, 0x0) setsockopt$XDP_UMEM_COMPLETION_RING(r0, 0x11b, 0x6, &(0x7f0000000180)=0x20, 0x4) setsockopt$XDP_UMEM_FILL_RING(r0, 0x11b, 0x5, &(0x7f0000000140)=0x4000, 0x4) bind$xdp(r0, &(0x7f0000000100)={0x2c, 0x0, r6}, 0x10) bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f0000000340)=ANY=[@ANYBLOB="1b0000000000000000000000000004"], 0x50) r9 = bpf$MAP_CREATE(0x0, &(0x7f0000000040)=ANY=[@ANYRESOCT=r1, @ANYRESDEC=0x0], 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r9, @ANYBLOB="0000000000000000b70800000d0000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000100000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x20, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r10 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='memory.events\x00', 0x275a, 0x0) r11 = bpf$MAP_CREATE(0x100000000000000, &(0x7f0000000140)=@base={0xa, 0x16, 0xb3, 0x7f}, 0x50) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000440)={0x11, 0x12, &(0x7f0000000080)=ANY=[@ANYBLOB="18050000000000000000000000000000851000000600000018100000", @ANYRES32=r11, @ANYBLOB="00000000000000006600000000007000180000000000000000000000000000009500000000000000180000002020782500000000002020207b0af85fd65b98cbff00000000cf510000000000000701000000feffffb702000008000000b703000000000000850000002d000000950000"], &(0x7f0000000000)='GPL\x00'}, 0x90) write$cgroup_subtree(r10, &(0x7f0000000100)=ANY=[], 0x32600) mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x2000001, 0x12, r10, 0x0) setsockopt$XDP_UMEM_FILL_RING(r10, 0x11b, 0x5, &(0x7f00000001c0)=0x201140, 0x4) r12 = bpf$PROG_LOAD(0x5, &(0x7f00000004c0)={0x6, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @xdp, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) recvmsg(r2, &(0x7f00000019c0)={0x0, 0x0, &(0x7f0000001940)=[{&(0x7f00000003c0)=""/92, 0x5c}, {&(0x7f0000000580)=""/188, 0xbc}, {&(0x7f0000000640)=""/134, 0x86}, {&(0x7f0000000700)=""/96, 0x60}, {&(0x7f0000000780)=""/163, 0xa3}, {&(0x7f0000000840)=""/4096, 0x1000}, {&(0x7f0000001840)=""/234, 0xea}], 0x7}, 0x0) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000340)={r12, 0x2000002, 0xe, 0x0, &(0x7f0000000200)="df33c9f7b9a60000000000000020", 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2}, 0x50) 5.491727104s ago: executing program 1 (id=2768): socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000000), 0xffffffffffffffff) r2 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$NL80211_CMD_SET_KEY(r2, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000200)=ANY=[@ANYBLOB='<\x00\x00\x00', @ANYRES16=r1, @ANYBLOB="090000000000feffffff0a00000008000300", @ANYRES32, @ANYBLOB="140050800500092002000000050002"], 0x3c}}, 0x0) getsockopt$sock_timeval(r0, 0x1, 0x4c, 0x0, &(0x7f0000000300)) r3 = socket$nl_generic(0x10, 0x3, 0x10) r4 = syz_genetlink_get_family_id$SEG6(&(0x7f0000000040), 0xffffffffffffffff) sendmsg$SEG6_CMD_SETHMAC(r3, &(0x7f0000000100)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000080)={0x24, r4, 0x1, 0x0, 0x0, {}, [@SEG6_ATTR_SECRETLEN={0x5}, @SEG6_ATTR_HMACKEYID={0x8}]}, 0x24}}, 0x0) sendmsg$SEG6_CMD_SET_TUNSRC(r2, &(0x7f0000000340)={&(0x7f0000000080)={0x10, 0x0, 0x0, 0x8000000}, 0xc, &(0x7f00000002c0)={&(0x7f0000000240)={0x78, r4, 0x400, 0x70bd29, 0x25dfdbfe, {}, [@SEG6_ATTR_DSTLEN={0x8, 0x2, 0x1}, @SEG6_ATTR_ALGID={0x5}, @SEG6_ATTR_DST={0x14, 0x1, @initdev={0xfe, 0x88, '\x00', 0x1, 0x0}}, @SEG6_ATTR_HMACKEYID={0x8, 0x3, 0x4}, @SEG6_ATTR_DST={0x14, 0x1, @loopback}, @SEG6_ATTR_SECRET={0x14, 0x4, [0xffff, 0x9, 0x328, 0x6]}, @SEG6_ATTR_SECRET={0x10, 0x4, [0xe60, 0x8, 0xad8]}]}, 0x78}, 0x1, 0x0, 0x0, 0x4000000}, 0x4004000) r5 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) bind$bt_hci(r5, &(0x7f0000000040)={0x1f, 0x0, 0x1}, 0x6) bind$bt_hci(0xffffffffffffffff, &(0x7f0000000040)={0x1f, 0xffffffffffffffff}, 0x67) r6 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) ioctl$TUNATTACHFILTER(0xffffffffffffffff, 0x401054d5, &(0x7f0000000040)={0x36, &(0x7f00000000c0)=[{0x7}, {0x3, 0x5, 0x2c, 0x4}, {0xfac3, 0x2, 0x4, 0x2}, {0x77cf, 0x7f, 0x1, 0x80000001}, {0x7, 0x11, 0xcf, 0x7}]}) bind$bt_hci(r6, &(0x7f0000000000)={0x1f, 0xffffffffffffffff, 0x3}, 0x6) r7 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r7, &(0x7f000000c2c0)={0x0, 0xfffffffffffffe01, &(0x7f0000000200)={&(0x7f0000000340)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a28000000000a0101000000005e1affd5020000000900010073797a300000000008000240000000032c000000030a01030000e6ff00000000020000000900010073797a30000000000900030073797a320000000014000000110001"], 0x7c}}, 0x0) sendmsg$NFT_BATCH(r7, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000240)={{0x14}, [@NFT_MSG_NEWRULE={0x70, 0x6, 0xa, 0x40b, 0x0, 0x0, {0x2}, [@NFTA_RULE_EXPRESSIONS={0x38, 0x4, 0x0, 0x1, [{0x34, 0x1, 0x0, 0x1, @target={{0xb}, @val={0x24, 0x2, 0x0, 0x1, [@NFTA_TARGET_NAME={0x10, 0x1, 'CONNSECMARK\x00'}, @NFTA_TARGET_INFO={0x5, 0x3, "ef"}, @NFTA_TARGET_REV={0x8}]}}}]}, @NFTA_RULE_TABLE={0x9, 0x1, 'syz0\x00'}, @NFTA_RULE_CHAIN={0x9, 0x2, 'syz2\x00'}, @NFTA_RULE_COMPAT={0xc, 0x5, 0x0, 0x1, [@NFTA_RULE_COMPAT_PROTO_BRIDGE={0x8, 0x1, 0x1, 0x0, 0x6006}]}]}], {0x14}}, 0x98}}, 0x0) write$bt_hci(r6, &(0x7f0000000040)=ANY=[], 0x6) 3.461353662s ago: executing program 1 (id=2769): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) r1 = socket$kcm(0x10, 0x2, 0x10) sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000001c0)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a20000000000a03000000000000000000070000040900010073797a30000000009c000000090a010400000000000000000700000308000a40000000000900020073797a30000000000900010073797a3000000000080005400000000d58001280200001800e000100636f6e6e6c696d69740000000c0002800800014000000008200001800e000100636f6e6e6c696d69740000000c00028008000140000000001400017b090001006cdbf80789f3f947dd000280080003"], 0xe4}, 0x1, 0x0, 0x0, 0x8001}, 0x20050840) r2 = socket$nl_generic(0x10, 0x3, 0x10) r3 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000200), 0xffffffffffffffff) r4 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX_80211(r4, 0x8933, &(0x7f00000013c0)={'wlan1\x00', 0x0}) sendmsg$NL80211_CMD_DISCONNECT(r2, &(0x7f0000000200)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000140)={0x1c, r3, 0x209, 0x70bd2a, 0x25dfdbfd, {{}, {@val={0x8, 0x3, r5}, @void}}}, 0x1c}, 0x1, 0x0, 0x0, 0x40000}, 0x40) sendmsg$kcm(r1, &(0x7f0000000000)={0x0, 0xd18c9b25, &(0x7f0000000080)=[{&(0x7f0000000040)="e03f030041000b05d25a806c8c6394f90324fc60100000000a000200053582c137153e3704020180fc5409000c00", 0x33fe0}], 0x1}, 0x0) r6 = socket$nl_generic(0x10, 0x3, 0x10) r7 = syz_genetlink_get_family_id$tipc(&(0x7f0000000800), 0xffffffffffffffff) sendmsg$TIPC_CMD_SET_LINK_TOL(r6, &(0x7f0000000280)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f00000001c0)=ANY=[@ANYBLOB='0\x00\x00\x00', @ANYRES16=r7, @ANYBLOB="01002bbd700000000000010000000000000007410000001400180000000069623a6e6963766630def4fd"], 0x30}}, 0x0) sendmsg$NFT_BATCH(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000240)=ANY=[@ANYBLOB="140000001000010000000000000000000500000a28000000000a030000000000000000000a00000708000240000000020900010073797a31000000002c000000030a010100000000000000000a0000070900010073797a31000000000900030073797a320000000014000000110001"], 0x7c}, 0x1, 0x0, 0x0, 0x4000}, 0x4000000) sendmsg$NFT_BATCH(r0, &(0x7f0000009b40)={0x0, 0x0, &(0x7f0000009b00)={&(0x7f00000002c0)=ANY=[@ANYBLOB="14000000100000000a80000000060a010400000000000000000a0000010900010073797a310000000054000480500001800b00010074617267657400004000028008000240000000012c0003007339d09dffff000000000000a0c70000000000000000000000000000000008000100544545000900020073797a3200"/133], 0xa8}, 0x1, 0x0, 0x0, 0x4000850}, 0x24000840) 3.403773459s ago: executing program 6 (id=2770): socket$inet6_icmp_raw(0xa, 0x3, 0x3a) r0 = bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000380)={&(0x7f0000000080)=ANY=[@ANYBLOB="9feb010018000000000000001c0000001c00000003000000010000000000000e0200000000000000000000000000001304000000002e"], 0x0, 0x37}, 0x20) r1 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r1, &(0x7f000000c2c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000300)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a20000000000a01010000000000000000020000000900010073797a300000000048000000030a01010000000000000000020000000900010073797a30000000000900030073797a3200000000080007006e61740014000480080001400000000008000240f0"], 0x90}}, 0x0) r2 = bpf$ITER_CREATE(0x21, &(0x7f0000000140), 0x8) r3 = socket$nl_generic(0x10, 0x3, 0x10) r4 = socket$nl_generic(0x10, 0x3, 0x10) r5 = syz_genetlink_get_family_id$batadv(&(0x7f0000000040), r4) ioctl$ifreq_SIOCGIFINDEX_batadv_mesh(r3, 0x8933, &(0x7f0000000000)={'batadv0\x00', 0x0}) sendmsg$BATADV_CMD_GET_DAT_CACHE(r4, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000240)={&(0x7f00000000c0)={0x1c, r5, 0x83625fc5352ba305, 0x0, 0x0, {}, [@BATADV_ATTR_MESH_IFINDEX={0x8, 0x3, r6}]}, 0x1c}}, 0x20008000) ioctl$ifreq_SIOCGIFINDEX_batadv_mesh(r1, 0x8933, &(0x7f00000001c0)) sendmsg$BATADV_CMD_GET_HARDIF(r2, &(0x7f00000003c0)={&(0x7f0000000180)={0x10, 0x0, 0x0, 0x100000}, 0xc, &(0x7f00000002c0)={&(0x7f0000000540)=ANY=[@ANYBLOB='\\\x00\x00\x00', @ANYRES16=r5, @ANYBLOB="008329c32d7c42b311ce8f77a5bd7000fcd2", @ANYRESOCT=r3, @ANYBLOB="08000b005b0000000600280000000000080034000b000000080031000300000008003b000700000008003c0009000000060028000300000005002e0001000000"], 0x5c}, 0x1, 0x0, 0x0, 0x20000080}, 0x80) r7 = socket$inet_tcp(0x2, 0x1, 0x0) bind$inet(r7, &(0x7f0000000240)={0x2, 0x4e20, @multicast1}, 0x10) connect$inet(r7, &(0x7f0000ccb000)={0x2, 0x4e20, @local}, 0x10) r8 = bpf$PROG_LOAD(0x5, &(0x7f0000000100)={0x19, 0x3, &(0x7f0000001a00)=ANY=[@ANYBLOB="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"], &(0x7f00002bf000)='GPL\x00', 0x4, 0xb7, &(0x7f0000000040)=""/183, 0x41100, 0x50, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0x8}, 0x94) r9 = socket$kcm(0x29, 0x2, 0x0) ioctl$sock_kcm_SIOCKCMATTACH(r9, 0x89e0, &(0x7f0000000180)={r7, r8}) sendmmsg$inet(r9, &(0x7f00000028c0)=[{{0x0, 0x0, &(0x7f0000000200)=[{&(0x7f0000000400)="03362a247861461b950d", 0xa}], 0x1}}], 0x1, 0x40) close(r9) socket$inet6_sctp(0xa, 0x1, 0x84) ioctl$TUNSETIFF(0xffffffffffffffff, 0x400454da, 0x0) r10 = socket$inet(0x2, 0x4000000000000001, 0x0) setsockopt$inet_tcp_int(r10, 0x6, 0x80000000000002, 0x0, 0x0) bind$inet(r10, &(0x7f0000000080)={0x2, 0x4e23, @multicast1}, 0x10) sendto$inet(r10, 0x0, 0x0, 0x200007fd, &(0x7f0000000000)={0x2, 0x4e23, @dev={0xac, 0x14, 0x14, 0x32}}, 0x10) socket$rds(0x15, 0x5, 0x0) bpf$MAP_CREATE(0xe4ffffff00000000, &(0x7f0000004440)=@base={0x14, 0x4, 0x4, 0x7, 0x0, 0xffffffffffffffff, 0x0, '\x00', 0x0, r0, 0x0, 0x1}, 0x48) r11 = socket$nl_rdma(0x10, 0x3, 0x14) sendmsg$RDMA_NLDEV_CMD_STAT_SET(r11, &(0x7f0000000100)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000440)=ANY=[@ANYBLOB="280000001014010300bd7000fcdbdf2508004a000000000008000300010000000800010000000000c20cd5ae039fe3c403f9c91deedefe45eb00fa1fbf089321d2647558117aefc3844185ccf203008929aa08b101c1bf894a14edaa1832f9e8ec9fe0c1fb6e8a1238d1240c4f371503a3d49a8ee910c99157e95b4b1186f0e875b68db1a7ca96ddabe67028255a9d42af3d3fb50725edc77f92b0990fcf9061a489440360b687ecfbe0ae1bfdb75101bc2ec561fb426a87e94e78615988028eb1ab69ecfed49916b328da9ad73863d8aa36e60dbe4334cfdbc059da00"/232], 0x28}, 0x1, 0x0, 0x0, 0x800}, 0x20000000) 3.4031614s ago: executing program 7 (id=2771): r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000580)={&(0x7f0000000180)=@newlink={0x3c, 0x10, 0x403, 0x4, 0x0, {0x0, 0x0, 0x0, 0x0, 0x20101, 0x382}, [@IFLA_LINKINFO={0x1c, 0x12, 0x0, 0x1, @geneve={{0xb}, {0xc, 0x2, 0x0, 0x1, [@IFLA_GENEVE_UDP_ZERO_CSUM6_TX={0x5}]}}}]}, 0x3c}, 0x1, 0xba01}, 0x810) r1 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r1, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000001140)={&(0x7f0000000000)=@newlink={0x4c, 0x10, 0x503, 0x70bd29, 0x0, {0x0, 0x0, 0x0, 0x0, 0x0, 0x6230}, [@IFLA_LINKINFO={0x20, 0x12, 0x0, 0x1, @gtp={{0x8}, {0x14, 0x2, 0x0, 0x1, [@IFLA_GTP_CREATE_SOCKETS={0x5, 0x5, 0x1}, @IFLA_GTP_RESTART_COUNT={0x5, 0x6, 0x4}]}}}, @IFLA_ADDRESS={0xa, 0x3, @random="3a712f0756b8"}]}, 0x4c}}, 0x0) 3.045594118s ago: executing program 7 (id=2772): socket$alg(0x26, 0x5, 0x0) (async) r0 = socket$alg(0x26, 0x5, 0x0) bind$alg(r0, &(0x7f0000000000)={0x26, 'skcipher\x00', 0x0, 0x0, 'ecb(des3_ede)\x00'}, 0x58) r1 = socket(0x10, 0x803, 0x0) ioctl$sock_SIOCETHTOOL(r1, 0x8932, &(0x7f0000000040)={'ip6gre0\x00', 0x0}) (async) ioctl$sock_SIOCETHTOOL(r1, 0x8932, &(0x7f0000000040)={'ip6gre0\x00', 0x0}) setsockopt$ALG_SET_KEY(r0, 0x117, 0x1, &(0x7f0000c18000)="ad56b6c5820fae9d6dcd3292ea54c7beef915d564c90c200", 0x18) r2 = accept4(r0, 0x0, 0x0, 0x0) sendmmsg$alg(r2, &(0x7f0000000400)=[{0x0, 0x0, 0x0, 0x0, &(0x7f0000000380)=[@op={0x18, 0x117, 0x3, 0x1}], 0x18}], 0x1, 0x0) syz_genetlink_get_family_id$nl80211(&(0x7f0000000640), r2) setsockopt$inet_MCAST_JOIN_GROUP(r2, 0x0, 0x2a, &(0x7f0000000080)={0x4, {{0x2, 0x4e21, @broadcast}}}, 0x88) (async) setsockopt$inet_MCAST_JOIN_GROUP(r2, 0x0, 0x2a, &(0x7f0000000080)={0x4, {{0x2, 0x4e21, @broadcast}}}, 0x88) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000240)={{0x1, 0xffffffffffffffff}, &(0x7f0000000180), &(0x7f00000001c0)}, 0x20) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000a00)={0x6, 0x11, &(0x7f0000000440)=@framed={{}, [@exit, @tail_call={{0x18, 0x2, 0x1, 0x0, r3}}, @cb_func={0x18, 0x0, 0x4, 0x0, 0xffffffffffffffff, 0x38}, @map_fd, @map_idx, @cb_func={0x18, 0x0, 0x4, 0x0, 0xfffffffffffffff8}]}, &(0x7f0000000740)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x2}, 0x94) (async) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000a00)={0x6, 0x11, &(0x7f0000000440)=@framed={{}, [@exit, @tail_call={{0x18, 0x2, 0x1, 0x0, r3}}, @cb_func={0x18, 0x0, 0x4, 0x0, 0xffffffffffffffff, 0x38}, @map_fd, @map_idx, @cb_func={0x18, 0x0, 0x4, 0x0, 0xfffffffffffffff8}]}, &(0x7f0000000740)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x2}, 0x94) r4 = syz_init_net_socket$nl_rdma(0x10, 0x3, 0x10) r5 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000580)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000600)=@newtfilter={0x24, 0x2c, 0xd27, 0x70bd2d, 0x25dfdbfc, {0x0, 0x0, 0x0, 0x0, {0x0, 0x2}, {}, {0xfff1, 0x9}}}, 0x24}, 0x1, 0x0, 0x0, 0x24000810}, 0x20084084) (async) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000580)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000600)=@newtfilter={0x24, 0x2c, 0xd27, 0x70bd2d, 0x25dfdbfc, {0x0, 0x0, 0x0, 0x0, {0x0, 0x2}, {}, {0xfff1, 0x9}}}, 0x24}, 0x1, 0x0, 0x0, 0x24000810}, 0x20084084) sendmsg$nl_route(r5, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000140)={&(0x7f00000005c0)=ANY=[@ANYBLOB="740000001000210400000000fcdbdf2500000000", @ANYRES32=0x0, @ANYBLOB="adffa8886004000024001280090001007866726d000000001400028008000100010000000800020011000000050021000000000008000a00", @ANYRES32, @ANYBLOB='\n\x00:'], 0x74}}, 0x0) sendmsg$netlink(r4, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)=[{&(0x7f0000000340)={0x18, 0x2e, 0x1, 0x0, 0x0, "", [@nested={0x4, 0x119}, @nested={0x4, 0x12}]}, 0x18}], 0x1, 0x0, 0x0, 0x84}, 0x300) 2.906013844s ago: executing program 1 (id=2773): r0 = socket$l2tp6(0xa, 0x2, 0x73) r1 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$IP6T_SO_SET_REPLACE(r1, 0x29, 0x40, &(0x7f0000000000)=@mangle={'mangle\x00', 0x64, 0x6, 0x670, 0x0, 0x0, 0x2e0, 0xd0, 0xd0, 0x5a0, 0x5a0, 0x5a0, 0x5a0, 0x5a0, 0x6, 0x0, {[{{@uncond, 0x0, 0xa8, 0xd0}, @common=@unspec=@NFQUEUE2={0x28, 'NFQUEUE\x00', 0x2, {0x0, 0x5}}}, {{@ipv6={@mcast1, @local, [], [], 'macvtap0\x00', 'ip6tnl0\x00', {}, {}, 0x11}, 0x0, 0xa8, 0xe8}, @inet=@TPROXY1={0x40, 'TPROXY\x00', 0x1, {0x0, 0x0, @ipv4=@broadcast}}}, {{@ipv6={@empty, @loopback, [], [], 'veth0_to_team\x00', 'syzkaller0\x00'}, 0x0, 0x100, 0x128, 0x0, {}, [@common=@unspec=@connmark={{0x30}}, @common=@inet=@socket1={{0x28}}]}, @common=@unspec=@MARK={0x28}}, {{@uncond, 0x0, 0x120, 0x148, 0x0, {}, [@common=@frag={{0x30}}, @common=@hbh={{0x48}}]}, @inet=@DSCP={0x28, 'DSCP\x00', 0x0, {0xfd}}}, {{@uncond, 0x0, 0x138, 0x178, 0x0, {}, [@common=@dst={{0x48}, {0x0, 0x0, 0x0, [0x0, 0x0, 0xa]}}, @common=@dst={{0x48}, {0x0, 0x0, 0x0, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7]}}]}, @inet=@TPROXY1={0x40, 'TPROXY\x00', 0x1, {0x0, 0x0, @ipv4=@dev}}}], {{'\x00', 0x0, 0xa8, 0xd0}, {0x28}}}}, 0x6d0) r2 = socket$inet6_sctp(0xa, 0x1, 0x84) r3 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000700)={&(0x7f00000007c0)={{0x14}, [@NFT_MSG_NEWTABLE={0x20, 0x0, 0xa, 0x301, 0x0, 0x0, {0x1}, [@NFTA_TABLE_NAME={0x9, 0x1, 'syz0\x00'}]}, @NFT_MSG_NEWCHAIN={0x40, 0x3, 0xa, 0x201, 0x0, 0x0, {0x1}, [@NFTA_CHAIN_NAME={0x9, 0x3, 'syz2\x00'}, @NFTA_CHAIN_HOOK={0x14, 0x4, 0x0, 0x1, [@NFTA_HOOK_HOOKNUM={0x8, 0x1, 0x1, 0x0, 0x3}, @NFTA_HOOK_PRIORITY={0x8, 0x2, 0x1, 0x0, 0x378b5ec3}]}, @NFTA_CHAIN_TABLE={0x9, 0x1, 'syz0\x00'}]}, @NFT_MSG_NEWRULE={0x44, 0x6, 0xa, 0x401, 0x0, 0x0, {0x1}, [@NFTA_RULE_CHAIN={0x9, 0x2, 'syz1\x00'}, @NFTA_RULE_TABLE={0x9, 0x1, 'syz0\x00'}, @NFTA_RULE_EXPRESSIONS={0x18, 0x4, 0x0, 0x1, [{0x14, 0x1, 0x0, 0x1, @queue={{0xa}, @val={0x4}}}]}]}], {0x14}}, 0xcc}}, 0x0) r4 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000780), 0xffffffffffffffff) sendmsg$NL80211_CMD_SET_INTERFACE(r3, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000180)=ANY=[@ANYBLOB='$\x00\x00\x00', @ANYRES16=r4, @ANYBLOB="050000000000000000000600000008000300", @ANYRES32, @ANYBLOB="08004e01"], 0x24}, 0x1, 0x0, 0x0, 0x90}, 0x4) setsockopt$inet6_tcp_TLS_TX(0xffffffffffffffff, 0x11a, 0x2, &(0x7f0000000200)=@ccm_128={{0x303}, "76131e58a256d4af", "4448076cc60af592e807e038c4797041", "8013f80e", "f79d6b3be7fc00"}, 0x28) setsockopt$inet_sctp6_SCTP_RESET_STREAMS(r2, 0x84, 0x77, &(0x7f0000000200)=ANY=[], 0x14) sendmsg$inet6(r0, &(0x7f0000000040)={&(0x7f0000000000)={0xa, 0x0, 0x0, @empty}, 0x1c, 0x0, 0x0, &(0x7f0000002200)=ANY=[@ANYBLOB="280000000000000006000000390000000002020100000000ff0100000000000000000000000000011800000000000000290000003700"/64], 0x40}, 0x0) 2.651971537s ago: executing program 5 (id=2774): socket$kcm(0xa, 0x2, 0x0) r0 = socket$inet6_tcp(0xa, 0x1, 0x0) close(0x4) r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000180)='cgroup.controllers\x00', 0x275a, 0x0) close(r1) r2 = socket$inet6_tcp(0xa, 0x1, 0x0) listen(r2, 0x0) r3 = bpf$MAP_CREATE(0x0, &(0x7f0000000200)=@base={0xf, 0x4, 0x4, 0x12}, 0x48) bpf$MAP_UPDATE_ELEM(0x2, &(0x7f0000000a80)={r3, &(0x7f0000000940), &(0x7f0000000a40)=@tcp6=r2}, 0x20) connect$unix(r1, &(0x7f0000000940)=@file={0x0, './file0\x00'}, 0x6e) setsockopt$inet6_tcp_int(r0, 0x6, 0x13, &(0x7f0000000040)=0x100000001, 0x76dc) r4 = socket$nl_generic(0x10, 0x3, 0x10) r5 = syz_genetlink_get_family_id$gtp(&(0x7f0000000000), r4) r6 = socket(0x10, 0x803, 0x0) syz_genetlink_get_family_id$nl80211(&(0x7f0000000100), r6) getsockname$packet(r6, &(0x7f0000000180)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f00000000c0)=0x14) sendmsg$nl_route(r6, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000340)=@newlink={0x38, 0x10, 0x437, 0x800000, 0x0, {0x0, 0x0, 0x0, r7, 0x504c3}, [@IFLA_LINKINFO={0x18, 0x12, 0x0, 0x1, @gtp={{0x8}, {0xc, 0x2, 0x0, 0x1, [@IFLA_GTP_FD0={0x8, 0x1, @udp6}]}}}]}, 0x38}, 0x1, 0x0, 0x0, 0x2000c014}, 0x0) sendmsg$GTP_CMD_DELPDP(r4, &(0x7f0000000300)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f0000000080)={0x24, r5, 0x1, 0x70bd2d, 0xe, {}, [@GTPA_LINK={0x8, 0x1, r7}, @GTPA_VERSION={0x8, 0x2, 0x1}]}, 0x24}, 0x1, 0x0, 0x0, 0x1f371693c3ceafd2}, 0x20000000) sendmsg$GTP_CMD_DELPDP(r1, &(0x7f00000003c0)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x10}, 0xc, &(0x7f0000000380)={&(0x7f0000000300)={0x54, r5, 0x800, 0x70bd26, 0x25dfdbff, {}, [@GTPA_I_TEI={0x8}, @GTPA_O_TEI={0x8, 0x9, 0x1}, @GTPA_FAMILY={0x5, 0xd, 0x1d}, @GTPA_NET_NS_FD={0x8, 0x7, r1}, @GTPA_PEER_ADDR6={0x14, 0xb, @mcast1}, @GTPA_TID={0xc, 0x3, 0x2}]}, 0x54}, 0x1, 0x0, 0x0, 0x20000}, 0x0) connect$inet6(r0, &(0x7f0000000100)={0xa, 0x0, 0x7, @ipv4={'\x00', '\xff\xff', @local}, 0x1}, 0x1c) setsockopt$inet6_tcp_TCP_ULP(r0, 0x6, 0x1f, &(0x7f00000002c0), 0x4) setsockopt$inet6_tcp_TCP_REPAIR_QUEUE(r0, 0x6, 0x14, &(0x7f0000000400)=0x1, 0x4) setsockopt$inet6_tcp_TLS_TX(r0, 0x11a, 0x1, &(0x7f0000000080)=@gcm_128={{0x303}, "b7a41f5d937e5523", "4705a7b6113b967d7314f7201eb2babf", "1d1cbe23", "ecba06893bcdc493"}, 0x28) syz_genetlink_get_family_id$ethtool(&(0x7f0000000200), r0) 2.533124597s ago: executing program 6 (id=2775): r0 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="0e000000040000000800000005"], 0x48) unshare(0x20000400) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x6, 0xc, &(0x7f00000001c0)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000005b7080000000000007b8af8ff00000000bc82000000000000a6020000f8ffffffb703000008000000b703000000000000850000003300000095"], &(0x7f0000000180)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @xdp, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) 2.362501291s ago: executing program 6 (id=2776): r0 = socket$inet6(0xa, 0x1, 0x0) mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000)='./cgroup.cpu/syz1\x00', 0x1ff) r1 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000), 0x200002, 0x0) r2 = openat$cgroup_ro(r1, &(0x7f0000000100)='hugetlb.2MB.usage_in_bytes\x00', 0x275a, 0x0) preadv(r2, &(0x7f0000001700)=[{&(0x7f0000000180)=""/210, 0xd2}], 0x1, 0x2, 0x1) (async) r3 = openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0) ioctl$TUNSETIFF(r3, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x7101}) (async, rerun: 32) r4 = socket(0x400000000010, 0x3, 0x0) (async, rerun: 32) r5 = socket$unix(0x1, 0x1, 0x0) ioctl$sock_SIOCGIFINDEX(r5, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r4, &(0x7f00000012c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000000c0)=@newqdisc={0x38, 0x24, 0x4ee4e6a52ff56541, 0x70bd2a, 0xfffffffd, {0x0, 0x0, 0x0, r6, {0x0, 0x1}, {0xffff, 0xffff}, {0xffe0, 0x9}}, [@qdisc_kind_options=@q_multiq={{0xb}, {0x8}}]}, 0x38}}, 0x0) sendmsg$nl_route_sched(r4, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000340)=@newtfilter={0x38, 0x2c, 0xd3f, 0x30bd29, 0x25dfdbfd, {0x0, 0x0, 0x0, r6, {0xb, 0xfff3}, {}, {0xc, 0x300}}, [@filter_kind_options=@f_basic={{0xa}, {0x8, 0x2, [@TCA_BASIC_EMATCHES={0x4}]}}]}, 0x38}, 0x1, 0x0, 0x0, 0x10}, 0x0) (async) read$alg(r2, &(0x7f0000000040)=""/136, 0x88) (async) setsockopt$inet6_IPV6_FLOWLABEL_MGR(r0, 0x29, 0x20, &(0x7f00000000c0)={@private2, 0x0, 0x0, 0x103, 0x1}, 0x20) (async, rerun: 32) r7 = socket(0x10, 0x80002, 0x0) (rerun: 32) sendmmsg$alg(r7, &(0x7f00000000c0), 0x492492492492627, 0x0) (async) ioctl$sock_kcm_SIOCKCMCLONE(r7, 0x89e2, &(0x7f0000000000)={r0}) (async) close(r0) 924.081713ms ago: executing program 7 (id=2777): bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000280)={0xe, 0x4, &(0x7f0000000000)=@framed={{}, [@ldst={0x3, 0x0, 0x3, 0x1, 0x0, 0x2d}]}, &(0x7f0000000040)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0xb}, 0x90) bpf$PROG_LOAD(0x5, &(0x7f000000e000)={0x10, 0x4, &(0x7f0000000040)=ANY=[@ANYBLOB="b4000000000014007910480000000000690036000000000095000000"], &(0x7f0000003ff6)='GPL\x00', 0x8, 0xfd90, &(0x7f000000cf3d)=""/195, 0x0, 0x0, '\x00', 0x0, @sk_msg, 0xffffffffffffffff, 0x8, 0x0, 0xa3}, 0x21) 922.83052ms ago: executing program 1 (id=2778): r0 = syz_init_net_socket$nl_rdma(0x10, 0x3, 0x10) sendmsg$netlink(r0, &(0x7f00000001c0)={0x0, 0x27, &(0x7f0000000000)=[{&(0x7f0000000200)=ANY=[@ANYBLOB="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"], 0x114}], 0x1}, 0x0) 752.658672ms ago: executing program 5 (id=2779): r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = socket(0x10, 0x3, 0x0) ioctl$ifreq_SIOCGIFINDEX_team(r1, 0x8933, &(0x7f0000000040)={'team0\x00', 0x0}) sendmsg$nl_route_sched(r1, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000300)=@newqdisc={0x88, 0x24, 0xf0b, 0x70bd26, 0x0, {0x0, 0x0, 0x0, r2, {0x0, 0xffff}, {0xffff, 0xffff}}, [@qdisc_kind_options=@q_mqprio={{0xb}, {0x58, 0x2, {{0x2, [0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2], 0x1, [0x4, 0x2, 0xfffe, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5c4, 0x0, 0x0, 0x0, 0x3dc], [0x0, 0x4, 0x4, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1000]}}}}]}, 0x88}}, 0x20000000) sendmsg$nl_route(r0, &(0x7f00000018c0)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000001900)=@bridge_delneigh={0x28, 0x1e, 0x1, 0x0, 0xfffffffe, {0x7}, [@NDA_LLADDR={0xa, 0x7}]}, 0x28}, 0x1, 0x0, 0x0, 0x4}, 0xc980) 560.384721ms ago: executing program 7 (id=2780): setsockopt$ALG_SET_KEY(0xffffffffffffffff, 0x117, 0x1, &(0x7f0000000280)="ad56b6c5820fae9d6dcd3292ea54c7be", 0x10) r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000040)='memory.events\x00', 0x275a, 0x0) writev(r0, &(0x7f00000024c0)=[{&(0x7f0000000240)="0d850ecd33a42b86f08a86e396e0af7133653b85edbd976c2a338c922a667eae1c94c629c93d8fda25f9670238c3ed769485a3df4c091e882367ad5d9caedcd48a", 0x41}], 0x1) mmap(&(0x7f0000000000/0x4000)=nil, 0x4000, 0x1, 0x10012, r0, 0x0) r1 = syz_init_net_socket$llc(0x1a, 0x1, 0x0) setsockopt$llc_int(r1, 0x10c, 0x3, &(0x7f0000000040), 0x4) r2 = accept4(0xffffffffffffffff, 0x0, 0x0, 0x800) sendmmsg$alg(r2, &(0x7f0000000880)=[{0x0, 0x0, 0x0, 0x0, &(0x7f0000000540)=[@op={0x18, 0x117, 0x3, 0x1}], 0x18, 0x20000000}, {0x0, 0x0, &(0x7f00000000c0)=[{&(0x7f0000000000)="c8cd2833fd1adc81ff4d291963aa1830491142d6818f68ade0d4dddae1f0daafa31074e68757c95d189d83f635dab049d1e972871e8a3c1fe9660734adcef01278bb59e23234a41b8d60c6db37d0ddffab3a71f960653469f4fddd5ecc8948e54b64b731ca8e8bbf87fb134f9e9718ea48a1b3669a2ef5d5c6cc44424c2321e2620c7d33b695d6d1fb51ec14245e6f92ab2b6bf21f05a88118b1d6b77b257048fe9c21f3d00513c065d78a8902d2c49153e3a7c1eb229b9ca2eca64da0f89f", 0xbf}], 0x1, &(0x7f0000000580)=[@op={0x18, 0x117, 0x3, 0x1}, @iv={0xe8, 0x117, 0x2, 0xd1, "43126ca08e1b15d65951f7c43a4238ee63dcd317ec25727e670f94d3d1f98055ceb098db0301b4e6b33be51fc8f326c958be0a43555f9e8524db4e8633d802e364bc0b38df1cd667d987c7a80f4489a7adf2605b12b3578d1447c90cbd37930b16f7b5df5b86b3ec30b2dad78ec18c776148be3468e87a355092fea6cf0e34e6bd6bd0fc3df47ceb2335d8561906a872f4e5dc0eecee6b1dd773948a6afd0f01e0846adcd4dfa449e90ae32ad108f170512e2f7d25456b3d10f23c604d2e6bd63628516641bdebce8d56f0eee4115245a0"}, @assoc={0x18, 0x117, 0x4, 0xfffffff0}, @assoc={0x18, 0x117, 0x4, 0xe}, @op={0x18}, @op={0x18, 0x117, 0x3, 0x1}, @iv={0x60, 0x117, 0x2, 0x46, "014bde82582b771cf1833c42ec18c868fd36a4b38dca34729be5c8e8d308c7e3fa13b0352877231f3c25cbc891d1495806e4a11e4ce4b14f2a70063a8090a0918d33e799f0d5"}, @assoc={0x18, 0x117, 0x4, 0x4918}, @iv={0xd8, 0x117, 0x2, 0xbd, "a66696db61795cef96f47fc346e7e1302383b6ea00549588060fab857031dd4e958507264d29f64137c6f16550b122c095f9c29be791b8842e0e4d806c107e0a4e3c708fcb3ebb06c1a51f214fb5d71954d28b588ff43e3500adf35803fd384bd2ecdbc274448c77f0182f7062ac87eaa674678709e0c7f72fddc42e7d787f3794730ae3f74279b97844b0bf8b950a71711920d83bbe8b5ba5abbb0babcd79fcb0605ae6b1fdbdf37c10fe2006e252d2e214aec25165cf96c97d1669e0"}, @op={0x18, 0x117, 0x3, 0x1}], 0x2c8, 0x8000}], 0x2, 0x20044881) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f05ebbee1, 0x8031, 0xffffffffffffffff, 0x0) syz_genetlink_get_family_id$nl80211(&(0x7f00000001c0), r2) connect$phonet_pipe(r0, &(0x7f0000000100)={0x23, 0x4, 0x4, 0x2}, 0x10) 404.733837ms ago: executing program 1 (id=2781): setsockopt$ALG_SET_KEY(0xffffffffffffffff, 0x117, 0x1, 0x0, 0x0) setsockopt$SO_TIMESTAMPING(0xffffffffffffffff, 0x1, 0x25, 0x0, 0x0) sendmsg$inet(0xffffffffffffffff, 0x0, 0x24008004) r0 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=@base={0x6, 0x4, 0xa5, 0x8}, 0x50) bpf$MAP_LOOKUP_BATCH(0x18, &(0x7f0000000200)={0x0, 0xfffffffffffffffc, 0x0, 0x0, 0xd9, r0}, 0x38) r1 = socket(0x10, 0x803, 0x0) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000400)={'veth0_to_hsr\x00', 0x0}) sendmsg$nl_route_sched(r1, &(0x7f00000012c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000180)=@newqdisc={0x48, 0x24, 0x4ee4e6a52ff56541, 0x70bd25, 0x25dfdbfe, {0x0, 0x0, 0x0, r2, {0x0, 0xffe1}, {0xffff, 0xffff}, {0xffe0}}, [@qdisc_kind_options=@q_htb={{0x8}, {0x1c, 0x2, [@TCA_HTB_INIT={0x18, 0x2, {0x3, 0x4, 0x9}}]}}]}, 0x48}}, 0xc840) sendmsg$nl_route_sched(r1, &(0x7f0000006040)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000800)=@newtfilter={0x54, 0x2c, 0xd2b, 0x70bd2b, 0x25dfdbfb, {0x0, 0x0, 0x0, r2, {0x6}, {}, {0x7, 0xfff1}}, [@filter_kind_options=@f_u32={{0x8}, {0x28, 0x2, [@TCA_U32_SEL={0x24, 0x5, {0xd, 0x7, 0x1, 0x3d3f, 0x0, 0xfff, 0xb709, 0x58f, [{0x0, 0x20008000, 0x4, 0x1}]}}]}}]}, 0x54}, 0x1, 0x0, 0x0, 0x4084}, 0x24040084) recvmmsg$unix(r1, &(0x7f0000000580)=[{{0x0, 0x0, &(0x7f0000000040)=[{&(0x7f00000002c0)=""/219, 0xdb}], 0x1}}], 0x1, 0x60, 0x0) sendmsg$GTP_CMD_NEWPDP(0xffffffffffffffff, &(0x7f0000000180)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000100)=ANY=[@ANYBLOB="ff07056b", @ANYRES16=0x0, @ANYRES8=r1, @ANYRES32=0x0, @ANYRES16, @ANYRES32=r2], 0x2c}, 0x1, 0x0, 0x0, 0x4004054}, 0x4000004) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000140)={0x0}}, 0x0) ioctl$sock_inet_tcp_SIOCOUTQ(r1, 0x5411, &(0x7f0000000200)) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000140)={&(0x7f00000002c0)=ANY=[], 0xc3}, 0x1, 0x100000000000000, 0x0, 0x2000}, 0x40400c0) r3 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r3, &(0x7f00000003c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000180)=ANY=[@ANYBLOB="2c0000002100010000000000fcdbdf2502000000000000000000000006001d"], 0x2c}}, 0x0) r4 = socket(0x10, 0x3, 0x0) sendmmsg(r4, &(0x7f0000000000), 0x4000000000001f2, 0x0) 337.706979ms ago: executing program 6 (id=2782): bpf$ENABLE_STATS(0x20, 0x0, 0x0) r0 = bpf$PROG_LOAD(0x5, &(0x7f0000000200)={0x3, 0xe, &(0x7f0000000c00)=ANY=[@ANYBLOB="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"/1111], &(0x7f0000000340)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @sched_cls, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0x0, 0x10, &(0x7f0000000000), 0x36}, 0x48) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f00000001c0)={r0, 0x40000f0, 0xe40, 0xffffffff, &(0x7f0000000280)="7b5515ccc8bca12641e65d58fd1a12f639", 0x0, 0x71e}, 0x28) r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000040)='cpuset.effective_cpus\x00', 0x275a, 0x0) ioctl$FS_IOC_SETFLAGS(r1, 0x40086602, &(0x7f0000000000)=0x20) r2 = socket$nl_xfrm(0x10, 0x3, 0x6) ioctl$BTRFS_IOC_DEFRAG(r1, 0x50009402, 0x0) r3 = socket$inet(0x2, 0x4000000000000001, 0x0) setsockopt$inet_tcp_int(r3, 0x6, 0x80000000000002, &(0x7f00000004c0)=0x79, 0x4) bind$inet(r3, &(0x7f0000000080)={0x2, 0x4e23, @multicast1}, 0x10) sendto$inet(r3, 0x0, 0x0, 0x200007fd, &(0x7f0000e68000)={0x2, 0x4e23, @local}, 0x10) sendto$inet(r3, &(0x7f0000000580)="17", 0xfdef, 0x10008095, 0x0, 0x0) r4 = socket(0x10, 0x2, 0x0) sendmsg$nl_route(r4, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000540)={&(0x7f0000000100)=ANY=[@ANYBLOB="50000000100005ff0000e000000000000000004a", @ANYRES32=0x0, @ANYBLOB="000000000122040028001280090001007665746800000000180002801400010000000000", @ANYRES32=0x0, @ANYBLOB="deba0b1d0420000008002900bb310600"], 0x50}, 0x1, 0x0, 0x0, 0x4040040}, 0x8000) sendmsg$nl_xfrm(r2, &(0x7f0000000540)={0x0, 0x0, &(0x7f0000000340)={&(0x7f0000000800)=ANY=[@ANYBLOB="f800000016000100a73845dae06745158eb7d2164ec1b50000000000000000ac14140d000000000000000000000000fc000000000000000000000000000001fffe00"/79, @ANYRES32=0x0, @ANYRES32, @ANYBLOB="fe8800000000000000000000000000010000000032000000ffffffff0000000000000000000000000000000000000000fcffffffffffffff000000000000000000000000000000000800000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000008000000000000000000000000000000000000000a00000200"/176], 0xf8}}, 0x0) r5 = socket$can_bcm(0x1d, 0x2, 0x2) ioctl$ifreq_SIOCGIFINDEX_vcan(r5, 0x8933, &(0x7f0000000100)={'vcan0\x00', 0x0}) connect$can_bcm(r5, &(0x7f00000000c0)={0x1d, r6}, 0x10) ioctl$XFS_IOC_FSGEOMETRY_V1(r4, 0x80705864, &(0x7f0000000940)) bpf$PROG_LOAD(0x5, &(0x7f000000e000)={0xf, 0x4, &(0x7f0000000180)=ANY=[@ANYBLOB="b40000000000000079100000000000006200000000000000950074000000000002bf7ac06b0bba6dae5599772183b0be1ce6508a4bcdfe52782f28f91e7fdaa8e2e6dbedd2309cbbdb7835c610f677b40089f20c1250843791e0e134073a88cfcabe01ba5e03ab30"], &(0x7f0000003ff6)='GPL\x00', 0x2, 0xc3, &(0x7f000000cf3d)=""/195, 0x0, 0x0, '\x00', r6, @fallback=0x26}, 0x94) sendmsg$nl_xfrm(r2, &(0x7f0000000500)={0x0, 0x0, &(0x7f0000000340)={&(0x7f0000000040)=@allocspi={0xf8, 0x16, 0x10, 0x0, 0x0, {{{@in=@loopback, @in6=@mcast1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff}, {@in6=@initdev={0xfe, 0x88, '\x00', 0x0, 0x0}, 0x0, 0xff}, @in6=@ipv4={'\x00', '\xff\xff', @dev={0xac, 0x14, 0x14, 0xa}}, {0x0, 0x0, 0x0, 0x1000000000000, 0x0, 0x100000}, {0x0, 0x0, 0x20000000000}, {0x0, 0xff}, 0x0, 0x0, 0xa}}}, 0xf8}}, 0x0) ioctl$EXT4_IOC_MOVE_EXT(r1, 0x40305829, &(0x7f00000000c0)={0x0, 0xffffffffffffffff, 0x0, 0x4}) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000240)={0x11, 0xc, &(0x7f0000000380)=ANY=[@ANYBLOB="180000000002dfffffff00000000000056010000696c6c253f5822e820e664277b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000600000085000000c90000000300d9901f54001500000000000000000000000015b8"], &(0x7f0000000040)='GPL\x00', 0x4}, 0x90) r7 = bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000640)={&(0x7f0000000580)={{0xeb9f, 0x1, 0x0, 0x18, 0x0, 0x34, 0x34, 0x8, [@array={0x0, 0x0, 0x0, 0x3, 0x0, {0x4, 0x2, 0x7ff}}, @const={0x10, 0x0, 0x0, 0xa, 0x2}, @var={0x2, 0x0, 0x0, 0xe, 0x4, 0x1}]}, {0x0, [0x5f, 0x2e, 0x61, 0x0, 0x2e, 0x0]}}, &(0x7f0000000600)=""/43, 0x54, 0x2b, 0x0, 0x1e49d42c, 0x10000, @value=r1}, 0x28) bpf$BPF_MAP_CONST_STR_FREEZE(0x16, &(0x7f0000000680)={r1, 0xffffffffffffffff}, 0x4) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000740)={0x18, 0x5, &(0x7f0000000300)=@framed={{0x18, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xcef}, [@kfunc={0x85, 0x0, 0x2, 0x0, 0x1}, @func={0x85, 0x0, 0x1, 0x0, 0x7}]}, &(0x7f0000000400)='syzkaller\x00', 0x8, 0x87, &(0x7f0000000440)=""/135, 0x41000, 0x4, '\x00', 0x0, 0x0, r7, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x2, &(0x7f00000006c0)=[r8], &(0x7f0000000700)=[{0x1, 0x5, 0x4, 0x8}, {0x0, 0x101, 0x7, 0x5}], 0x10, 0x3}, 0x94) r9 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_route(r9, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000240)=ANY=[@ANYBLOB="4800000010001fff000000000100000000000000", @ANYRES32=0x0, @ANYBLOB="0000000008440000200012800b00010067656e657665000010000280040010"], 0x48}, 0x1, 0x0, 0x0, 0x40000}, 0x0) bpf$PROG_LOAD(0x5, &(0x7f00000017c0)={0x10, 0xe, &(0x7f0000001880)=ANY=[@ANYBLOB="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"], &(0x7f00000001c0)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @sk_msg, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0xffffffffffffff97, 0x10, &(0x7f00000000c0), 0xffffffffffffffc2}, 0x48) 89.891483ms ago: executing program 5 (id=2783): r0 = socket$alg(0x26, 0x5, 0x0) bind$alg(r0, &(0x7f0000000100)={0x26, 'rng\x00', 0x0, 0x0, 'drbg_nopr_sha256\x00'}, 0x58) setsockopt$ALG_SET_KEY(r0, 0x117, 0x1, 0x0, 0x0) r1 = accept4(r0, 0x0, 0x0, 0x0) r2 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000040)='cpuacct.usage_percpu_user\x00', 0x275a, 0x0) mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x0, 0x13, r2, 0x0) r3 = socket$nl_netfilter(0x10, 0x3, 0xc) ioctl$sock_SIOCGIFCONF(r3, 0x8912, 0x0) syz_genetlink_get_family_id$devlink(&(0x7f0000000680), r1) sendmmsg$alg(r1, &(0x7f0000007dc0)=[{0x0, 0x0, 0x0, 0x0, &(0x7f0000001fc0)=[@op={0x18, 0x117, 0x3, 0x1}], 0x18, 0x40000}], 0x1, 0x24000000) sendto$inet(r1, &(0x7f0000000240)='F', 0x1, 0x840, 0x0, 0x0) r4 = socket$netlink(0x10, 0x3, 0xf) r5 = socket(0x10, 0x803, 0x0) sendmsg$IPVS_CMD_SET_INFO(r5, &(0x7f0000000b00)={0x0, 0x0, &(0x7f0000000ac0)={0x0, 0x14}}, 0x0) getsockname$packet(r5, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) socket$inet6(0xa, 0x3, 0x2) sendmsg$kcm(0xffffffffffffffff, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000080)=[{&(0x7f0000000040)="e03f030041000b05d2", 0x9}], 0x1}, 0x0) r7 = openat$nci(0xffffffffffffff9c, &(0x7f0000000080), 0x2, 0x0) r8 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r9 = syz_genetlink_get_family_id$nfc(&(0x7f0000000300), r8) ioctl$IOCTL_GET_NCIDEV_IDX(r7, 0x0, &(0x7f00000000c0)=0x0) sendmsg$NFC_CMD_DEV_UP(r8, &(0x7f0000000200)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000d80)=ANY=[@ANYBLOB="1c000000", @ANYRES16=r9, @ANYBLOB="010426bd7000f8dbdf250200000008000100", @ANYRES32=r10], 0x1c}}, 0x4008054) write$nci(r7, &(0x7f0000000040)=ANY=[@ANYBLOB='P'], 0x14) socket$netlink(0x10, 0x3, 0x5) sendmsg$nl_route(r4, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000380)=ANY=[@ANYBLOB="3c0000001000850600"/20, @ANYRES32=r6, @ANYBLOB="01000000000000001c0012000c000100626f6e64000000000c0002000800010006"], 0x3c}}, 0x0) sendmsg$nl_route(r4, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000280)=@newlink={0x44, 0x10, 0xffffff1f, 0x0, 0x1, {0x0, 0x0, 0x0, 0x0, 0x0, 0x4408}, [@IFLA_LINKINFO={0x1c, 0x12, 0x0, 0x1, @geneve={{0xb}, {0xc, 0x2, 0x0, 0x1, [@IFLA_GENEVE_TTL_INHERIT={0x5, 0xc, 0x1}]}}}, @IFLA_MASTER={0x8, 0xa, r6}]}, 0x44}, 0x1, 0x0, 0x0, 0x40010}, 0x0) 0s ago: executing program 1 (id=2784): r0 = socket$inet_udp(0x2, 0x2, 0x0) bind$inet(r0, &(0x7f0000000140)={0x2, 0x4e20, @empty}, 0x10) syz_emit_ethernet(0x2a, &(0x7f0000000240)={@local, @empty, @void, {@ipv4={0x800, @udp={{0x5, 0x4, 0x0, 0x0, 0x1c, 0x0, 0x0, 0x0, 0x11, 0x0, @empty, @empty}, {0x0, 0x4e20, 0x8}}}}}, 0x0) syz_emit_ethernet(0x32, &(0x7f00000001c0)={@random="5bb65d3f2511", @empty, @void, {@ipv4={0x800, @udp={{0x5, 0x4, 0x0, 0xe, 0x24, 0x66, 0x0, 0x3, 0x11, 0x0, @multicast2, @empty=0xe0000001}, {0x4e20, 0x4e20, 0x10, 0x0, @gue={{0x2, 0x0, 0x0, 0xba, 0x100}}}}}}}, 0x0) r1 = socket$nl_netfilter(0x10, 0x3, 0xc) r2 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r2, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000180)=@newtaction={0x4c, 0x30, 0x1, 0x0, 0x0, {}, [{0x38, 0x1, [@m_ife={0x34, 0x1, 0x0, 0x0, {{0x8}, {0xfde4, 0x2, 0x0, 0x1, [@TCA_IFE_TYPE={0x6, 0x5, 0xefff}]}, {0x4}, {0xc}, {0xc, 0x8, {0x0, 0x1}}}}]}]}, 0x4c}, 0x1, 0x0, 0x0, 0x480c4}, 0x0) sendmsg$IPSET_CMD_CREATE(r1, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000200)=ANY=[@ANYBLOB="580000000206010200000000000000000000000005000100070000000c0007800800120000f5ff00050004000000000005000500020000220900020073797a310000000011000300686173683a6e65742c6e6574"], 0x58}}, 0x0) r3 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r3, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000580)=ANY=[@ANYBLOB="440000001000010400"/20, @ANYRES32=0x0, @ANYBLOB="00000000000000002400128009000100626f6e64000000001400028005000e0040"], 0x44}}, 0x0) bpf$PROG_LOAD(0x5, &(0x7f00000002c0)={0xe, 0x4, &(0x7f0000000700)=@framed={{0x18, 0x0, 0x0, 0x0, 0x8, 0x0, 0x0, 0x0, 0x8}, [@generic={0x91, 0x1, 0x1, 0x81}]}, &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x4, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2}, 0x94) kernel console output (not intermixed with test programs): ][ T6839] netdevsim netdevsim1 netdevsim0: set [0, 0] type 1 family 0 port 8472 - 0 [ 170.434248][ T6839] netdevsim netdevsim1 netdevsim1: set [0, 0] type 1 family 0 port 8472 - 0 [ 170.449594][ T6839] netdevsim netdevsim1 netdevsim2: set [0, 0] type 1 family 0 port 8472 - 0 [ 170.466243][ T6839] netdevsim netdevsim1 netdevsim3: set [0, 0] type 1 family 0 port 8472 - 0 [ 170.919094][ T9286] syzkaller1: entered promiscuous mode [ 170.925372][ T9286] syzkaller1: entered allmulticast mode [ 170.938083][ T9294] tipc: Started in network mode [ 170.945187][ T9294] tipc: Node identity ac14140f, cluster identity 4711 [ 170.955074][ T9294] tipc: New replicast peer: 255.255.255.255 [ 170.966943][ T9294] tipc: Enabled bearer , priority 10 [ 171.082179][ T9297] pim6reg1: entered promiscuous mode [ 171.098219][ T9297] pim6reg1: entered allmulticast mode [ 171.157560][ T9303] syzkaller1: entered promiscuous mode [ 171.180126][ T9303] syzkaller1: entered allmulticast mode [ 171.368545][ T9317] team0: Caught tx_queue_len zero misconfig [ 171.491047][ T9320] netlink: 'syz.0.947': attribute type 1 has an invalid length. [ 171.498771][ T9320] __nla_validate_parse: 23 callbacks suppressed [ 171.498788][ T9320] netlink: 224 bytes leftover after parsing attributes in process `syz.0.947'. [ 171.536511][ T9320] NCSI netlink: No device for ifindex 0 [ 171.552682][ T9322] openvswitch: netlink: Duplicate or invalid key (type 0). [ 171.577247][ T9322] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 171.663227][ T9322] dvmrp0: entered allmulticast mode [ 171.923486][ T9346] netlink: 56 bytes leftover after parsing attributes in process `syz.4.955'. [ 171.986573][ T9350] netlink: 404 bytes leftover after parsing attributes in process `syz.3.956'. [ 172.022740][ T9350] netlink: 28 bytes leftover after parsing attributes in process `syz.3.956'. [ 172.057661][ T9350] netlink: 28 bytes leftover after parsing attributes in process `syz.3.956'. [ 172.099343][ T9350] netlink: 20 bytes leftover after parsing attributes in process `syz.3.956'. [ 172.124557][ T9355] SET target dimension over the limit! [ 172.137424][ T9354] xt_CT: You must specify a L4 protocol and not use inversions on it [ 172.149651][ T8935] tipc: Node number set to 2886997007 [ 172.157821][ T9355] netlink: 24 bytes leftover after parsing attributes in process `syz.4.959'. [ 172.172080][ T9350] netlink: 404 bytes leftover after parsing attributes in process `syz.3.956'. [ 172.198906][ T9350] netlink: 28 bytes leftover after parsing attributes in process `syz.3.956'. [ 172.236459][ T9350] netlink: 28 bytes leftover after parsing attributes in process `syz.3.956'. [ 172.336954][ T9359] bond0: entered promiscuous mode [ 172.346033][ T9359] batadv0: entered promiscuous mode [ 172.357219][ T9359] 8021q: adding VLAN 0 to HW filter on device hsr1 [ 172.367817][ T9359] bond0: left promiscuous mode [ 172.378828][ T9359] batadv0: left promiscuous mode [ 172.394899][ T9363] netlink: 'syz.4.962': attribute type 21 has an invalid length. [ 172.430272][ T9365] netlink: 'syz.1.960': attribute type 10 has an invalid length. [ 172.763041][ T9377] bond9: option tlb_dynamic_lb: mode dependency failed, not supported in mode balance-xor(2) [ 172.786632][ T9377] bond9 (unregistering): Released all slaves [ 172.884177][ T9390] mac80211_hwsim hwsim3 syzkaller0: entered promiscuous mode [ 172.903043][ T9390] mac80211_hwsim hwsim3 syzkaller0: entered allmulticast mode [ 173.007641][ T9394] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 173.423424][ T6825] tipc: Subscription rejected, illegal request [ 173.988107][ T30] audit: type=1804 audit(1780800608.233:2): pid=9448 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=invalid_pcr cause=open_writers comm="syz.2.985" name="/newroot/184/cgroup.controllers" dev="tmpfs" ino=956 res=1 errno=0 [ 174.047805][ T9448] syzkaller1: entered promiscuous mode [ 174.059574][ T30] audit: type=1800 audit(1780800608.273:3): pid=9448 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.2.985" name="cgroup.controllers" dev="tmpfs" ino=956 res=0 errno=0 [ 174.086881][ T9448] syzkaller1: entered allmulticast mode [ 174.593708][ T9478] lo: Caught tx_queue_len zero misconfig [ 174.861783][ T9490] netlink: 'syz.0.1000': attribute type 29 has an invalid length. [ 175.101771][ T9506] netlink: 'syz.1.1003': attribute type 1 has an invalid length. [ 175.520333][ T9516] ip6gretap1: entered promiscuous mode [ 175.528933][ T9516] ip6gretap1: entered allmulticast mode [ 175.711373][ T9539] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 175.775865][ T9541] netlink: 'syz.2.1010': attribute type 10 has an invalid length. [ 175.837294][ T9541] dummy0 (unregistering): left allmulticast mode [ 176.152508][ T9554] netlink: 'syz.0.1016': attribute type 39 has an invalid length. [ 176.313366][ T9565] netlink: 'syz.2.1018': attribute type 5 has an invalid length. [ 176.355827][ T9566] xt_SECMARK: mode already set to 1 cannot mix with rules for mode 9 [ 176.733878][ T9585] __nla_validate_parse: 137 callbacks suppressed [ 176.733900][ T9585] netlink: 8 bytes leftover after parsing attributes in process `syz.3.1025'. [ 176.840404][ T9599] netlink: 'syz.2.1028': attribute type 5 has an invalid length. [ 177.159678][ T9607] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check. [ 177.264760][ T9624] x_tables: duplicate underflow at hook 2 [ 177.286211][ T9624] netlink: 'syz.4.1034': attribute type 1 has an invalid length. [ 177.379107][ T9655] netlink: 12 bytes leftover after parsing attributes in process `syz.4.1034'. [ 177.538301][ T9655] netlink: 12 bytes leftover after parsing attributes in process `syz.4.1034'. [ 178.559009][ T9710] netlink: 'syz.1.1035': attribute type 1 has an invalid length. [ 178.652789][ T9716] netlink: 8 bytes leftover after parsing attributes in process `syz.0.1037'. [ 178.721430][ T9717] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 180.284013][ T9624] workqueue: Failed to create a rescuer kthread for wq "bond9": -EINTR [ 180.352765][ T9710] bond6: Unable to set down delay as MII monitoring is disabled [ 180.370473][ T9710] bond6 (unregistering): Released all slaves [ 180.648440][ T9734] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 181.172784][ T9759] netlink: 52 bytes leftover after parsing attributes in process `syz.0.1048'. [ 182.235363][ T9775] batman_adv: Cannot find parent device. Skipping batadv-on-batadv check for gretap1 [ 182.246146][ T9775] gretap1: default qdisc (pfifo_fast) fail, fallback to noqueue [ 182.254024][ T9775] gretap1: entered promiscuous mode [ 182.259255][ T9775] gretap1: entered allmulticast mode [ 182.312909][ T9777] netlink: 8 bytes leftover after parsing attributes in process `syz.0.1055'. [ 183.538133][ T9722] nci: __nci_request: wait_for_completion_interruptible_timeout failed -512 [ 183.850076][ T9796] netlink: 8 bytes leftover after parsing attributes in process `syz.0.1058'. [ 183.916510][ T9796] netlink: 20 bytes leftover after parsing attributes in process `syz.0.1058'. [ 184.593676][ T9838] tipc: New replicast peer: 172.20.20.187 [ 184.618393][ T9838] tipc: Enabled bearer , priority 10 [ 184.637570][ T9796] Bluetooth: hci0: Opcode 0x0c03 failed: -4 [ 184.657809][ T9837] tipc: Enabling of bearer rejected, already enabled [ 184.802820][ T9846] netlink: 'syz.4.1074': attribute type 4 has an invalid length. [ 184.822865][ T9846] netlink: 17 bytes leftover after parsing attributes in process `syz.4.1074'. [ 184.960408][ T9851] veth7: entered allmulticast mode [ 185.234163][ T9866] openvswitch: netlink: EtherType 50a is less than min 600 [ 185.579724][ T9883] netlink: 40 bytes leftover after parsing attributes in process `syz.1.1084'. [ 185.619549][ T9883] netlink: 16 bytes leftover after parsing attributes in process `syz.1.1084'. [ 185.763101][ T9886] netlink: 96 bytes leftover after parsing attributes in process `syz.0.1085'. [ 185.777425][ T9888] netlink: 212368 bytes leftover after parsing attributes in process `syz.3.1088'. [ 185.802178][ T9886] netlink: 4 bytes leftover after parsing attributes in process `syz.0.1085'. [ 186.290982][ T9912] bond6: Removing last ns target with arp_interval on [ 186.448169][ T9932] netlink: 'syz.4.1100': attribute type 2 has an invalid length. [ 186.542195][ T9935] netlink: 20 bytes leftover after parsing attributes in process `syz.0.1102'. [ 186.633006][ T9937] A link change request failed with some changes committed already. Interface wg2 may have been left with an inconsistent configuration, please check. [ 187.458577][ T9984] netlink: 4 bytes leftover after parsing attributes in process `syz.4.1111'. [ 187.648091][ T9984] team0 (unregistering): Port device team_slave_0 removed [ 187.668532][ T9984] team0 (unregistering): Port device team_slave_1 removed [ 187.690301][ T9984] dummy0: left allmulticast mode [ 187.704834][ T9984] team0 (unregistering): Port device macvlan4 removed [ 187.724550][ T9989] netlink: 'syz.2.1114': attribute type 1 has an invalid length. [ 187.732727][ T9989] netlink: 'syz.2.1114': attribute type 2 has an invalid length. [ 187.747857][ T9989] netlink: 'syz.2.1114': attribute type 1 has an invalid length. [ 187.778204][ T9989] netlink: 'syz.2.1114': attribute type 2 has an invalid length. [ 187.790197][ T9960] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 187.976164][ T9996] netlink: 48 bytes leftover after parsing attributes in process `syz.2.1116'. [ 188.478422][T10017] netlink: 24 bytes leftover after parsing attributes in process `syz.2.1124'. [ 188.627872][T10026] netlink: 8 bytes leftover after parsing attributes in process `syz.2.1127'. [ 188.697000][T10032] netlink: 24 bytes leftover after parsing attributes in process `syz.4.1129'. [ 189.003432][T10045] smbdirect: ib_dev[syz1] renamed to [syz2] [ 189.575164][T10076] netlink: 32 bytes leftover after parsing attributes in process `syz.2.1143'. [ 189.595373][T10075] netlink: 32 bytes leftover after parsing attributes in process `syz.0.1141'. [ 189.617125][T10079] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 189.623124][T10076] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 189.626975][T10075] netlink: 32 bytes leftover after parsing attributes in process `syz.0.1141'. [ 189.654376][T10070] netlink: 4 bytes leftover after parsing attributes in process `syz.0.1141'. [ 189.742267][T10070] bond4: Invalid ad_actor_system MAC address. [ 189.748982][T10070] bond4: option ad_actor_system: invalid value (1) [ 189.762541][T10070] bond4 (unregistering): Released all slaves [ 190.177272][T10108] netlink: 208240 bytes leftover after parsing attributes in process `syz.1.1153'. [ 190.248482][T10110] lo speed is unknown, defaulting to 1000 [ 190.259530][T10110] lo speed is unknown, defaulting to 1000 [ 190.267293][T10110] lo speed is unknown, defaulting to 1000 [ 190.676860][T10127] xt_NFQUEUE: number of total queues is 0 [ 190.758188][T10130] netlink: 'syz.2.1160': attribute type 1 has an invalid length. [ 190.796972][T10130] netlink: 'syz.2.1160': attribute type 4 has an invalid length. [ 190.849540][T10133] netlink: 'syz.2.1160': attribute type 4 has an invalid length. [ 190.883580][T10110] infiniband sz1: set active [ 190.895363][T10110] infiniband sz1: added lo [ 190.915418][ T6458] lo speed is unknown, defaulting to 1000 [ 191.028179][T10110] smbdirect: ib_dev[sz1]: added: IB_CA max_fast_reg_page_list_len=512 device_cap_flags=0x1c001223c76 kernel_cap_flags=0x14 page_size_cap=0xfffff000 [ 191.043480][T10110] smbdirect: ib_dev[sz1]: num_ports=1 max_qp_rd_atom=128 max_qp_init_rd_atom=128 max_sgl_rd=0 max_sge_rd=32 max_cqe=32767 max_qp_wr=1048576 max_send_sge=32 max_recv_sge=32 [ 191.061816][T10110] smbdirect: ib_dev[sz1]PORT[1]: iwarp=0 ib=0 roce=1 v1=0 v2=1 core_cap_flags=0x803005 [ 191.145042][T10110] RDS/IB: sz1: added [ 191.179989][T10110] smc: adding ib device sz1 with port count 1 [ 191.219687][T10110] smc: ib device sz1 port 1 has no pnetid [ 191.252138][ T8935] lo speed is unknown, defaulting to 1000 [ 191.306737][T10110] lo speed is unknown, defaulting to 1000 [ 191.328458][T10152] netlink: 'syz.4.1165': attribute type 30 has an invalid length. [ 191.735477][T10170] netlink: 'syz.3.1172': attribute type 29 has an invalid length. [ 191.767666][T10170] netlink: 'syz.3.1172': attribute type 29 has an invalid length. [ 192.074407][T10110] lo speed is unknown, defaulting to 1000 [ 192.383382][T10194] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check. [ 192.706754][T10207] sch_tbf: burst 46 is lower than device syzkaller0 mtu (1514) ! [ 192.790670][T10110] lo speed is unknown, defaulting to 1000 [ 193.041904][T10220] __nla_validate_parse: 4 callbacks suppressed [ 193.041925][T10220] netlink: 40 bytes leftover after parsing attributes in process `syz.3.1188'. [ 193.263157][T10231] netlink: 108 bytes leftover after parsing attributes in process `syz.1.1193'. [ 193.288654][T10231] netlink: 108 bytes leftover after parsing attributes in process `syz.1.1193'. [ 193.299876][T10231] netlink: 84 bytes leftover after parsing attributes in process `syz.1.1193'. [ 193.309670][T10233] netlink: 80 bytes leftover after parsing attributes in process `syz.2.1194'. [ 193.322305][T10233] netlink: 80 bytes leftover after parsing attributes in process `syz.2.1194'. [ 193.371531][T10238] pimreg: entered allmulticast mode [ 193.435320][T10110] lo speed is unknown, defaulting to 1000 [ 193.609797][T10110] lo speed is unknown, defaulting to 1000 [ 193.832600][T10244] netlink: 'syz.0.1196': attribute type 1 has an invalid length. [ 193.843740][T10244] workqueue: Failed to create a rescuer kthread for wq "bond4": -EINTR [ 195.865672][T10216] nci: __nci_request: wait_for_completion_interruptible_timeout failed -512 [ 195.895961][T10249] netlink: 4 bytes leftover after parsing attributes in process `syz.0.1197'. [ 196.090192][T10257] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 196.118806][T10257] tipc: Failed to remove unknown binding: 66,1,1/2886997007:2807685500/2807685502 [ 196.147792][T10257] tipc: Failed to remove unknown binding: 66,1,1/2886997007:2807685500/2807685502 [ 196.353662][T10268] netlink: 'syz.1.1204': attribute type 1 has an invalid length. [ 196.452751][T10268] bond7: entered promiscuous mode [ 196.470279][T10268] 8021q: adding VLAN 0 to HW filter on device bond7 [ 196.557457][T10268] 8021q: adding VLAN 0 to HW filter on device bond7 [ 196.570002][T10268] bond7: (slave vti0): The slave device specified does not support setting the MAC address [ 196.584109][T10268] bond7: (slave vti0): Setting fail_over_mac to active for active-backup mode [ 196.597349][T10268] bond7: (slave vti0): making interface the new active one [ 196.610679][T10268] vti0: entered promiscuous mode [ 196.643272][T10268] bond7: (slave vti0): Enslaving as an active interface with an up link [ 196.764157][T10293] h: entered promiscuous mode [ 196.962329][T10302] batadv0: default FDB implementation only supports local addresses [ 196.973146][T10306] Cannot find set identified by id 65534 to match [ 197.166892][T10314] netlink: 8 bytes leftover after parsing attributes in process `syz.2.1219'. [ 197.371689][T10329] netlink: 8 bytes leftover after parsing attributes in process `syz.2.1222'. [ 197.422557][T10329] xt_hashlimit: size too large, truncated to 1048576 [ 197.821135][T10349] netlink: 12 bytes leftover after parsing attributes in process `syz.4.1227'. [ 197.837588][T10350] netlink: 'syz.4.1227': attribute type 11 has an invalid length. [ 197.852666][T10350] netlink: 'syz.4.1227': attribute type 5 has an invalid length. [ 198.109742][T10359] __nla_validate_parse: 2 callbacks suppressed [ 198.117064][T10359] netlink: 16 bytes leftover after parsing attributes in process `syz.4.1230'. [ 198.246456][T10363] netlink: 8 bytes leftover after parsing attributes in process `syz.4.1232'. [ 198.326964][T10367] netlink: 132 bytes leftover after parsing attributes in process `syz.1.1234'. [ 198.576738][T10376] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 198.804846][T10391] netlink: 8 bytes leftover after parsing attributes in process `syz.4.1240'. [ 198.835155][T10391] IPVS: Schedule: port zero only supported in persistent services, check your ipvs configuration [ 199.397172][T10419] nbd: socks must be embedded in a SOCK_ITEM attr [ 199.870413][T10437] netlink: 28 bytes leftover after parsing attributes in process `syz.0.1251'. [ 200.078777][T10450] netlink: 224 bytes leftover after parsing attributes in process `syz.0.1256'. [ 200.138995][T10450] netlink: 8 bytes leftover after parsing attributes in process `syz.0.1256'. [ 200.583746][T10485] bond0: entered promiscuous mode [ 200.608858][T10485] bond_slave_0: entered promiscuous mode [ 200.659025][T10485] bond_slave_1: entered promiscuous mode [ 200.899757][T10503] netlink: 'syz.0.1270': attribute type 2 has an invalid length. [ 200.991982][T10504] IPv6: sit1: Disabled Multicast RS [ 201.304199][T10520] bond6: entered promiscuous mode [ 201.309443][T10520] bond6: entered allmulticast mode [ 201.316589][T10520] 8021q: adding VLAN 0 to HW filter on device bond6 [ 201.500479][T10538] netlink: 28 bytes leftover after parsing attributes in process `syz.4.1279'. [ 201.517192][T10540] ksmbd: Daemon and kernel module version mismatch. ksmbd: 124, kernel module: 1. User-space ksmbd should terminate. [ 201.706904][T10528] nci: __nci_request: wait_for_completion_interruptible_timeout failed -512 [ 201.722345][T10529] nci: __nci_request: wait_for_completion_interruptible_timeout failed -512 [ 201.736187][T10559] openvswitch: netlink: Either Ethernet header or EtherType is required. [ 201.763129][T10549] netlink: 256 bytes leftover after parsing attributes in process `syz.4.1282'. [ 201.807058][T10561] bridge: RTM_NEWNEIGH bridge0 without NUD_PERMANENT [ 202.083940][T10569] bridge2: trying to set multicast startup query interval above maximum, setting to 8640000 (86400000ms) [ 202.610123][T10604] netlink: 'syz.1.1294': attribute type 1 has an invalid length. [ 202.696766][T10604] 8021q: adding VLAN 0 to HW filter on device bond8 [ 202.896248][T10627] netlink: 'syz.1.1301': attribute type 2 has an invalid length. [ 205.370221][T10593] nci: __nci_request: wait_for_completion_interruptible_timeout failed -512 [ 205.678670][T10653] netlink: 12 bytes leftover after parsing attributes in process `syz.3.1307'. [ 205.781712][T10641] dvmrp1: entered allmulticast mode [ 205.998111][T10666] xt_TCPMSS: Only works on TCP SYN packets [ 206.028880][T10672] netlink: 'syz.1.1313': attribute type 11 has an invalid length. [ 206.316371][T10685] xt_TCPMSS: Only works on TCP SYN packets [ 206.408866][T10695] netlink: 'syz.2.1318': attribute type 1 has an invalid length. [ 206.459713][T10695] netlink: 'syz.2.1318': attribute type 3 has an invalid length. [ 206.509418][T10695] netlink: 224 bytes leftover after parsing attributes in process `syz.2.1318'. [ 206.710022][T10704] netlink: 24 bytes leftover after parsing attributes in process `syz.1.1320'. [ 206.806806][T10702] bond9: (slave lo): enslaved VLAN challenged slave. Adding VLANs will be blocked as long as it is part of bond. [ 206.829766][T10709] netlink: 'syz.2.1322': attribute type 2 has an invalid length. [ 206.845666][T10702] bond9: (slave lo): Enslaving as an active interface with an up link [ 206.873692][T10702] A link change request failed with some changes committed already. Interface tunl0 may have been left with an inconsistent configuration, please check. [ 206.988189][T10714] netlink: 4 bytes leftover after parsing attributes in process `syz.2.1324'. [ 207.076469][T10719] netlink: 24 bytes leftover after parsing attributes in process `syz.0.1325'. [ 207.161688][T10722] netlink: 24 bytes leftover after parsing attributes in process `syz.0.1325'. [ 207.172412][T10721] syzkaller0: entered promiscuous mode [ 207.191775][T10721] syzkaller0: entered allmulticast mode [ 207.308900][T10733] netlink: 24 bytes leftover after parsing attributes in process `syz.1.1329'. [ 207.401251][T10729] netlink: 24 bytes leftover after parsing attributes in process `syz.1.1329'. [ 207.416432][T10737] ipt_REJECT: ECHOREPLY no longer supported. [ 207.734213][T10748] tipc: Started in network mode [ 207.748955][T10748] tipc: Node identity , cluster identity 4711 [ 207.767190][T10748] tipc: Failed to set node id, please configure manually [ 207.780839][T10748] tipc: Enabling of bearer rejected, failed to enable media [ 207.928453][T10757] xt_nat: multiple ranges no longer supported [ 208.484957][T10777] netlink: 'syz.4.1344': attribute type 11 has an invalid length. [ 208.574226][T10788] netlink: 8 bytes leftover after parsing attributes in process `syz.2.1347'. [ 208.608740][T10788] netlink: 8 bytes leftover after parsing attributes in process `syz.2.1347'. [ 208.688996][T10788] gtp1: entered allmulticast mode [ 208.873910][T10804] can: request_module (can-proto-0) failed. [ 209.220296][T10814] bond7: Unable to set peer notification delay as MII monitoring is disabled [ 209.246647][T10814] bond7 (unregistering): Released all slaves [ 209.327290][T10818] batman_adv: Cannot find parent device. Skipping batadv-on-batadv check for gretap1 [ 209.350161][T10811] xt_CT: No such helper "pptp" [ 209.619946][T10839] openvswitch: netlink: Flow get message rejected, Key attribute missing. [ 209.898063][ T30] audit: type=1804 audit(1780800644.143:4): pid=10857 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=invalid_pcr cause=open_writers comm="syz.0.1366" name="/newroot/273/cgroup.controllers" dev="tmpfs" ino=1405 res=1 errno=0 [ 209.995580][ T30] audit: type=1800 audit(1780800644.143:5): pid=10857 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.0.1366" name="cgroup.controllers" dev="tmpfs" ino=1405 res=0 errno=0 [ 210.464139][T10891] netlink: 'syz.1.1375': attribute type 1 has an invalid length. [ 210.718757][T10901] syzkaller1: entered promiscuous mode [ 210.739867][T10901] syzkaller1: entered allmulticast mode [ 210.781159][T10894] xt_l2tp: unknown flags: 10 [ 211.398454][T10934] __nla_validate_parse: 5 callbacks suppressed [ 211.398502][T10934] netlink: 8 bytes leftover after parsing attributes in process `syz.4.1387'. [ 211.741384][T10961] netlink: 52 bytes leftover after parsing attributes in process `syz.0.1394'. [ 212.062754][T10968] netlink: 'syz.0.1397': attribute type 12 has an invalid length. [ 212.077163][T10968] netlink: 'syz.0.1397': attribute type 29 has an invalid length. [ 212.085635][T10968] netlink: 148 bytes leftover after parsing attributes in process `syz.0.1397'. [ 212.096065][T10968] netlink: 'syz.0.1397': attribute type 3 has an invalid length. [ 212.104207][T10968] netlink: 'syz.0.1397': attribute type 2 has an invalid length. [ 212.113223][T10968] netlink: 35 bytes leftover after parsing attributes in process `syz.0.1397'. [ 212.416800][T10988] netlink: 28 bytes leftover after parsing attributes in process `syz.0.1401'. [ 212.455170][T10988] netlink: 'syz.0.1401': attribute type 7 has an invalid length. [ 212.479858][T10988] netlink: 16 bytes leftover after parsing attributes in process `syz.0.1401'. [ 212.543455][T10988] erspan0: entered promiscuous mode [ 212.566001][T10988] gretap0: entered promiscuous mode [ 212.655927][T10997] xt_socket: unknown flags 0x8 [ 213.037260][T11021] netlink: 'syz.1.1411': attribute type 9 has an invalid length. [ 213.044997][T11018] netlink: 28 bytes leftover after parsing attributes in process `syz.2.1410'. [ 213.060941][T11018] netlink: 28 bytes leftover after parsing attributes in process `syz.2.1410'. [ 213.169971][T11026] set match dimension is over the limit! [ 213.178215][T11027] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 213.349020][T11037] sit0: Caught tx_queue_len zero misconfig [ 213.845723][T11075] netlink: 16 bytes leftover after parsing attributes in process `syz.1.1427'. [ 213.996450][T11080] netlink: 8 bytes leftover after parsing attributes in process `syz.1.1429'. [ 214.157031][T11080] 8021q: adding VLAN 0 to HW filter on device bond10 [ 214.278200][T11091] netlink: 'syz.4.1432': attribute type 1 has an invalid length. [ 214.614200][T11112] bridge0: port 2(bridge_slave_1) entered disabled state [ 214.622567][T11112] bridge0: port 1(bridge_slave_0) entered disabled state [ 214.943091][T11122] A link change request failed with some changes committed already. Interface ipvlan0 may have been left with an inconsistent configuration, please check. [ 215.137598][T11126] openvswitch: netlink: Flow key attr not present in new flow. [ 215.358001][T11140] SET target dimension over the limit! [ 215.870611][T11170] netlink: 'syz.0.1455': attribute type 13 has an invalid length. [ 215.879105][T11170] veth1_macvtap: left promiscuous mode [ 215.885171][T11170] macsec0: entered allmulticast mode [ 215.984994][T11174] veth0_macvtap: Caught tx_queue_len zero misconfig [ 216.372868][T11190] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 216.447901][T11192] tipc: Enabled bearer , priority 0 [ 216.529529][T11192] syzkaller0: entered promiscuous mode [ 216.536754][T11192] syzkaller0: entered allmulticast mode [ 216.543238][T11192] tipc: Resetting bearer [ 216.549330][T11197] __nla_validate_parse: 9 callbacks suppressed [ 216.549345][T11197] netlink: 100 bytes leftover after parsing attributes in process `syz.4.1462'. [ 216.573286][T11191] tipc: Resetting bearer [ 216.775162][T11207] netlink: 13 bytes leftover after parsing attributes in process `syz.1.1465'. [ 218.242503][T11191] tipc: Disabling bearer [ 218.277557][T11197] syzkaller0: entered promiscuous mode [ 218.283152][T11197] syzkaller0: entered allmulticast mode [ 218.409626][T11210] netlink: 8 bytes leftover after parsing attributes in process `syz.1.1466'. [ 218.601999][T11228] netlink: 20 bytes leftover after parsing attributes in process `syz.1.1471'. [ 218.632760][T11231] netlink: 'syz.2.1472': attribute type 1 has an invalid length. [ 219.992078][ T6464] tipc: Node number set to 158494914 [ 220.010121][T11227] tipc: Enabled bearer , priority 24 [ 220.044052][T11231] 8021q: adding VLAN 0 to HW filter on device bond7 [ 220.089550][T11233] bond7: (slave geneve3): making interface the new active one [ 220.118365][T11233] bond7: (slave geneve3): Enslaving as an active interface with an up link [ 220.303892][T11243] netlink: 'syz.2.1476': attribute type 2 has an invalid length. [ 220.478830][T11251] netlink: 48 bytes leftover after parsing attributes in process `syz.3.1479'. [ 220.936894][T11283] netlink: 'syz.3.1489': attribute type 32 has an invalid length. [ 220.939730][T11281] netlink: 4 bytes leftover after parsing attributes in process `syz.2.1488'. [ 221.210055][T11289] netlink: 64 bytes leftover after parsing attributes in process `syz.1.1490'. [ 221.683196][T11311] bond4 (unregistering): Released all slaves [ 221.954684][T11325] netlink: 'syz.3.1497': attribute type 8 has an invalid length. [ 221.980822][T11325] netlink: 8 bytes leftover after parsing attributes in process `syz.3.1497'. [ 222.065334][T11333] netlink: 212344 bytes leftover after parsing attributes in process `syz.0.1498'. [ 222.215418][T11339] 8021q: VLANs not supported on lo [ 222.247859][T11338] 8021q: VLANs not supported on lo [ 222.278881][T11343] xt_hashlimit: invalid interval [ 222.291891][T11338] netlink: 4 bytes leftover after parsing attributes in process `syz.3.1500'. [ 222.710967][T11359] bridge: RTM_NEWNEIGH bridge0 without NUD_PERMANENT [ 222.969705][T11380] netlink: 'syz.1.1510': attribute type 5 has an invalid length. [ 223.138098][T11389] openvswitch: netlink: IP tunnel dst address not specified [ 223.158537][T11388] netlink: 4 bytes leftover after parsing attributes in process `syz.0.1513'. [ 223.209270][T11394] netlink: 112 bytes leftover after parsing attributes in process `syz.1.1515'. [ 223.626833][T11426] xt_hashlimit: size too large, truncated to 1048576 [ 223.922673][T11384] nci: __nci_request: wait_for_completion_interruptible_timeout failed -512 [ 223.968322][T11431] netlink: 'syz.1.1518': attribute type 1 has an invalid length. [ 224.355785][T11452] netlink: 12 bytes leftover after parsing attributes in process `syz.1.1523'. [ 224.909663][T11478] netlink: 8 bytes leftover after parsing attributes in process `syz.4.1528'. [ 224.953198][T11483] netlink: 6040 bytes leftover after parsing attributes in process `syz.1.1530'. [ 224.968107][T11478] gtp0: entered promiscuous mode [ 224.974212][T11478] gtp0: entered allmulticast mode [ 225.606897][T11510] syzkaller0: entered promiscuous mode [ 225.612729][T11519] netlink: 12 bytes leftover after parsing attributes in process `syz.1.1539'. [ 225.627899][T11510] syzkaller0: entered allmulticast mode [ 225.826245][T11528] netlink: 212368 bytes leftover after parsing attributes in process `syz.1.1541'. [ 225.833374][T11478] A link change request failed with some changes committed already. Interface teql0 may have been left with an inconsistent configuration, please check. [ 225.851973][T11517] netlink: 'syz.0.1538': attribute type 8 has an invalid length. [ 225.861107][T11513] syzkaller0: entered promiscuous mode [ 225.866765][T11513] syzkaller0: entered allmulticast mode [ 225.923414][T11491] A link change request failed with some changes committed already. Interface teql0 may have been left with an inconsistent configuration, please check. [ 226.796544][T11571] syzkaller0: entered promiscuous mode [ 226.819184][T11571] syzkaller0: entered allmulticast mode [ 227.025486][T11585] sctp: [Deprecated]: syz.1.1552 (pid 11585) Use of int in maxseg socket option. [ 227.025486][T11585] Use struct sctp_assoc_value instead [ 227.061840][T11585] __nla_validate_parse: 6 callbacks suppressed [ 227.061859][T11585] netlink: 324 bytes leftover after parsing attributes in process `syz.1.1552'. [ 227.097598][T11588] x_tables: arp_tables: NFQUEUE target: not valid for this family [ 227.196938][T11591] netlink: 8 bytes leftover after parsing attributes in process `syz.4.1556'. [ 227.216483][T11591] netlink: 'syz.4.1556': attribute type 29 has an invalid length. [ 227.234625][T11591] netlink: 8 bytes leftover after parsing attributes in process `syz.4.1556'. [ 227.303579][T11592] netlink: 8 bytes leftover after parsing attributes in process `syz.4.1556'. [ 227.322839][T11592] netlink: 'syz.4.1556': attribute type 29 has an invalid length. [ 227.333534][T11592] netlink: 8 bytes leftover after parsing attributes in process `syz.4.1556'. [ 227.339721][T11594] sch_tbf: burst 19872 is lower than device lo mtu (65550) ! [ 227.392063][T11591] syzkaller0: entered promiscuous mode [ 227.410474][T11591] syzkaller0: entered allmulticast mode [ 227.434984][T11596] netlink: 16 bytes leftover after parsing attributes in process `syz.0.1558'. [ 227.638133][T11603] netlink: 104 bytes leftover after parsing attributes in process `syz.3.1560'. [ 227.714362][T11576] Bluetooth: hci0: Opcode 0x0c1a failed: -4 [ 227.785526][T11610] netlink: 20 bytes leftover after parsing attributes in process `syz.0.1562'. [ 228.128827][T11629] sctp: [Deprecated]: syz.3.1567 (pid 11629) Use of int in max_burst socket option deprecated. [ 228.128827][T11629] Use struct sctp_assoc_value instead [ 228.266359][T11631] lo: left promiscuous mode [ 228.274302][T11635] IPv6: NLM_F_CREATE should be specified when creating new route [ 228.309241][T11635] netlink: 'syz.0.1571': attribute type 1 has an invalid length. [ 228.368071][T11631] bridge3: left promiscuous mode [ 228.393070][T11631] bond3: left promiscuous mode [ 228.408514][T11631] h: left promiscuous mode [ 228.737520][T11662] netlink: 7064 bytes leftover after parsing attributes in process `syz.0.1579'. [ 228.749187][T11664] netlink: 8 bytes leftover after parsing attributes in process `syz.4.1576'. [ 228.780209][T11662] openvswitch: netlink: Missing key (keys=40, expected=2000) [ 229.192749][T11687] syzkaller1: entered promiscuous mode [ 229.220744][T11687] syzkaller1: entered allmulticast mode [ 229.357755][T11691] bond7: (slave lo): enslaved VLAN challenged slave. Adding VLANs will be blocked as long as it is part of bond. [ 229.393121][T11691] bond7: (slave lo): Enslaving as an active interface with an up link [ 229.403697][T11691] A link change request failed with some changes committed already. Interface tunl0 may have been left with an inconsistent configuration, please check. [ 229.745790][ T5771] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 229.755552][ C1] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 229.776564][T11709] bond4 (unregistering): Released all slaves [ 230.025081][T11728] Bluetooth: MGMT ver 1.23 [ 230.053848][ C0] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 230.599116][T11766] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 230.643199][ C1] vxcan0: j1939_tp_rxtimer: 0xffff88802be73800: rx timeout, send abort [ 230.795057][ T5771] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 230.803535][ C1] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 230.857061][T11782] netlink: 'syz.1.1611': attribute type 1 has an invalid length. [ 231.005434][T11797] netlink: 'syz.1.1611': attribute type 62 has an invalid length. [ 231.143401][ C1] vxcan0: j1939_tp_rxtimer: 0xffff88802be70c00: rx timeout, send abort [ 231.151908][ C1] vxcan0: j1939_tp_rxtimer: 0xffff88802be73800: abort rx timeout. Force session deactivation [ 231.186046][T11785] bond11: (slave bridge5): making interface the new active one [ 231.222884][T11785] bond11: (slave bridge5): Enslaving as an active interface with an up link [ 231.316352][T11809] ip6tnl0: Caught tx_queue_len zero misconfig [ 231.323134][T11809] sch_fq: defrate 0 ignored. [ 231.334055][ T9656] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 231.343664][ C1] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 231.567181][T11819] tc action pedit 'at' offset 1 out of bounds [ 231.651827][ C1] vxcan0: j1939_tp_rxtimer: 0xffff88802be70c00: abort rx timeout. Force session deactivation [ 231.828522][ T6464] lo speed is unknown, defaulting to 1000 [ 231.990718][ T9656] nci: nci_rsp_packet: unknown rsp opcode 0x3f [ 232.052426][T11842] nci: __nci_request: wait_for_completion_interruptible_timeout failed -512 [ 232.375481][T11868] __nla_validate_parse: 9 callbacks suppressed [ 232.375500][T11868] netlink: 12 bytes leftover after parsing attributes in process `syz.0.1629'. [ 232.418082][T11878] IPVS: set_ctl: invalid protocol: 27758 50.49.49.0:21 [ 232.676653][T11893] netlink: 12 bytes leftover after parsing attributes in process `syz.1.1635'. [ 232.886250][T11905] netlink: 'syz.0.1638': attribute type 2 has an invalid length. [ 232.930340][T11905] netlink: 8 bytes leftover after parsing attributes in process `syz.0.1638'. [ 232.982596][T11914] netlink: 36 bytes leftover after parsing attributes in process `syz.4.1641'. [ 233.591936][T11942] batman_adv: Cannot find parent device. Skipping batadv-on-batadv check for gretap3 [ 233.642705][T11942] gretap3: default qdisc (pfifo_fast) fail, fallback to noqueue [ 233.673489][T11942] gretap3: entered promiscuous mode [ 233.684639][T11942] gretap3: entered allmulticast mode [ 233.763394][T11952] syzkaller0: entered promiscuous mode [ 233.778990][T11952] syzkaller0: entered allmulticast mode [ 233.917182][ T8935] net_ratelimit: 7 callbacks suppressed [ 233.917201][ T8935] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 233.932234][ C1] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 234.372745][ T6464] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 234.381746][ C0] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 234.512330][T11995] netlink: 8 bytes leftover after parsing attributes in process `syz.0.1663'. [ 234.780937][ C0] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 234.789795][ C0] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 234.799714][ C0] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 234.863646][T12002] tipc: Started in network mode [ 234.877793][T12002] tipc: Node identity ac14140f, cluster identity 4711 [ 234.901535][T12002] tipc: New replicast peer: 255.255.255.255 [ 234.923446][T12002] tipc: Enabled bearer , priority 10 [ 234.948142][T12005] netlink: 12 bytes leftover after parsing attributes in process `syz.3.1666'. [ 234.959275][ T8935] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 234.968915][ C1] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 235.328999][T12010] netlink: 'syz.0.1668': attribute type 1 has an invalid length. [ 235.430484][T12020] netlink: 'syz.0.1668': attribute type 9 has an invalid length. [ 235.946770][T12035] netlink: 'syz.1.1676': attribute type 61 has an invalid length. [ 235.991566][ T8935] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 236.014186][T12035] netlink: 16 bytes leftover after parsing attributes in process `syz.1.1676'. [ 236.040814][ T997] tipc: Node number set to 2886997007 [ 236.929690][T12073] netlink: 8 bytes leftover after parsing attributes in process `syz.1.1685'. [ 237.248843][T12081] netlink: 79 bytes leftover after parsing attributes in process `syz.2.1688'. [ 237.276783][T12081] syzkaller1: entered promiscuous mode [ 237.306719][T12081] syzkaller1: entered allmulticast mode [ 237.509464][T12095] netlink: 100 bytes leftover after parsing attributes in process `syz.0.1692'. [ 237.689893][T12105] syzkaller0: entered promiscuous mode [ 237.696237][T12105] syzkaller0: entered allmulticast mode [ 237.816325][T12110] netlink: 52 bytes leftover after parsing attributes in process `syz.3.1696'. [ 238.665192][T12137] netlink: 72 bytes leftover after parsing attributes in process `syz.4.1705'. [ 238.675253][T12138] netlink: 72 bytes leftover after parsing attributes in process `syz.4.1705'. [ 239.094667][ T808] net_ratelimit: 10 callbacks suppressed [ 239.094682][ T808] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 239.109206][ C1] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 239.146764][T12147] netlink: 'syz.3.1708': attribute type 21 has an invalid length. [ 239.155514][T12147] netlink: 152 bytes leftover after parsing attributes in process `syz.3.1708'. [ 239.213499][T12152] rdma_op ffff8880549ff9f0 conn xmit_rdma 0000000000000000 [ 239.228447][T12152] netlink: 8 bytes leftover after parsing attributes in process `syz.3.1709'. [ 239.239174][T12152] netlink: 'syz.3.1709': attribute type 1 has an invalid length. [ 239.247679][T12152] netlink: 'syz.3.1709': attribute type 2 has an invalid length. [ 239.309539][T12154] x_tables: duplicate entry at hook 2 [ 239.837271][T12170] netlink: 28 bytes leftover after parsing attributes in process `syz.3.1716'. [ 239.847016][T12170] netlink: 28 bytes leftover after parsing attributes in process `syz.3.1716'. [ 239.990097][T12176] netlink: 'syz.3.1718': attribute type 1 has an invalid length. [ 240.018171][T12176] bond8: entered promiscuous mode [ 240.024322][T12176] 8021q: adding VLAN 0 to HW filter on device bond8 [ 240.041338][T12176] 8021q: adding VLAN 0 to HW filter on device bond8 [ 240.048300][T12176] bond8: (slave vti0): The slave device specified does not support setting the MAC address [ 240.058952][T12176] bond8: (slave vti0): Setting fail_over_mac to active for active-backup mode [ 240.071722][T12176] bond8: (slave vti0): making interface the new active one [ 240.078971][T12176] vti0: entered promiscuous mode [ 240.086436][T12176] bond8: (slave vti0): Enslaving as an active interface with an up link [ 240.132703][ T997] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 240.141713][ T8935] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 240.149889][ T8935] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 240.158358][ C1] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 240.205335][T12081] nci: __nci_request: wait_for_completion_interruptible_timeout failed -512 [ 240.493067][T12194] syzkaller0: entered promiscuous mode [ 240.522638][T12194] syzkaller0: entered allmulticast mode [ 240.647074][T12206] netlink: 28 bytes leftover after parsing attributes in process `syz.0.1726'. [ 240.657720][T12206] netlink: 'syz.0.1726': attribute type 7 has an invalid length. [ 240.667811][T12206] netlink: 16 bytes leftover after parsing attributes in process `syz.0.1726'. [ 240.749407][T12210] tunl0: entered promiscuous mode [ 240.763436][T12210] netlink: 'syz.2.1727': attribute type 4 has an invalid length. [ 240.979639][T12222] bond0: entered promiscuous mode [ 240.992384][T12222] bond_slave_0: entered promiscuous mode [ 241.005667][T12222] bond_slave_1: entered promiscuous mode [ 241.139704][T12231] tunl0: entered promiscuous mode [ 241.149968][T12231] netlink: 'syz.0.1732': attribute type 4 has an invalid length. [ 241.238543][ T808] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 241.247378][ C1] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 241.502175][T12250] netlink: 'syz.2.1738': attribute type 1 has an invalid length. [ 242.215784][ T9686] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 242.224329][ C1] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 242.834721][T12290] bond6 (unregistering): Released all slaves [ 242.962534][T12323] sctp: [Deprecated]: syz.2.1752 (pid 12323) Use of struct sctp_assoc_value in delayed_ack socket option. [ 242.962534][T12323] Use struct sctp_sack_info instead [ 243.026942][T12296] __nla_validate_parse: 7 callbacks suppressed [ 243.026960][T12296] netlink: 4 bytes leftover after parsing attributes in process `syz.3.1750'. [ 243.084198][T12325] netlink: 72 bytes leftover after parsing attributes in process `syz.2.1753'. [ 243.308763][T12335] netlink: 'syz.4.1757': attribute type 1 has an invalid length. [ 243.325771][T12335] netlink: 96 bytes leftover after parsing attributes in process `syz.4.1757'. [ 243.368914][T12335] netlink: 1 bytes leftover after parsing attributes in process `syz.4.1757'. [ 243.402114][T12341] netlink: 'syz.1.1758': attribute type 4 has an invalid length. [ 243.691868][T12359] netlink: 8 bytes leftover after parsing attributes in process `syz.2.1765'. [ 243.722875][T12359] netlink: 24 bytes leftover after parsing attributes in process `syz.2.1765'. [ 243.736683][T12359] netlink: 8 bytes leftover after parsing attributes in process `syz.2.1765'. [ 243.767600][T12359] netlink: 24 bytes leftover after parsing attributes in process `syz.2.1765'. [ 244.137380][T12383] net_ratelimit: 6 callbacks suppressed [ 244.137400][T12383] netlink: zone id is out of range [ 244.169747][T12385] IPVS: wlc: TCP 172.20.20.170:0 - no destination available [ 244.188150][T12383] netlink: zone id is out of range [ 244.204606][T12383] netlink: zone id is out of range [ 244.215880][T12383] netlink: zone id is out of range [ 244.224611][T12383] netlink: zone id is out of range [ 244.238481][T12383] netlink: zone id is out of range [ 244.246157][T12383] netlink: zone id is out of range [ 244.251965][T12383] netlink: zone id is out of range [ 244.257354][T12383] netlink: zone id is out of range [ 244.407218][T12396] x_tables: duplicate underflow at hook 1 [ 244.571668][T12404] netlink: 44 bytes leftover after parsing attributes in process `syz.2.1781'. [ 245.029491][T12430] IPv6: sit2: Disabled Multicast RS [ 245.697661][T12472] netlink: 8 bytes leftover after parsing attributes in process `syz.2.1800'. [ 246.350718][T12501] vet: renamed from veth0_vlan [ 246.469765][T12506] tunl0: Caught tx_queue_len zero misconfig [ 246.781433][T12517] validate_nla: 2 callbacks suppressed [ 246.781481][T12517] netlink: 'syz.2.1812': attribute type 354 has an invalid length. [ 247.394844][T12511] nci: __nci_request: wait_for_completion_interruptible_timeout failed -512 [ 248.014862][T12564] mac80211_hwsim hwsim3 syzkaller0: left promiscuous mode [ 248.059111][T12564] mac80211_hwsim hwsim3 syzkaller0: left allmulticast mode [ 248.094313][T12568] __nla_validate_parse: 1 callbacks suppressed [ 248.094331][T12568] netlink: 16 bytes leftover after parsing attributes in process `syz.2.1828'. [ 248.328654][T12581] netlink: 165 bytes leftover after parsing attributes in process `syz.2.1831'. [ 248.375954][T12581] bridge5: entered allmulticast mode [ 248.479485][T12586] netlink: 8 bytes leftover after parsing attributes in process `syz.0.1833'. [ 248.797135][T12607] netlink: 8 bytes leftover after parsing attributes in process `syz.1.1838'. [ 248.822590][T12609] netlink: 8 bytes leftover after parsing attributes in process `syz.1.1838'. [ 249.026159][T12619] netlink: 6024 bytes leftover after parsing attributes in process `syz.3.1841'. [ 249.123935][T12629] netlink: 212368 bytes leftover after parsing attributes in process `syz.4.1843'. [ 249.254272][ T9656] net_ratelimit: 20 callbacks suppressed [ 249.254291][ T9656] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 249.270214][ C0] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 249.576183][ T8935] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 249.584706][ C1] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 250.615207][ T808] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 250.623799][ C1] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 251.011402][ T6464] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 251.019835][ C0] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 251.656076][ T808] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 251.664819][ C1] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 251.994707][T12618] nci: __nci_request: wait_for_completion_interruptible_timeout failed -512 [ 252.204288][T12673] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 252.217829][T12673] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 252.230453][T12673] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 252.244681][T12673] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 252.339452][T12676] netlink: 8 bytes leftover after parsing attributes in process `syz.3.1858'. [ 252.434977][T12686] netlink: 'syz.3.1860': attribute type 1 has an invalid length. [ 252.445029][T12686] workqueue: Failed to create a rescuer kthread for wq "bond9": -EINTR [ 252.504388][T12690] netlink: 'syz.0.1861': attribute type 1 has an invalid length. [ 252.607282][T12696] netlink: 8 bytes leftover after parsing attributes in process `syz.3.1862'. [ 252.632039][T12696] netlink: 60 bytes leftover after parsing attributes in process `syz.3.1862'. [ 252.943181][T12714] netlink: 'syz.1.1868': attribute type 1 has an invalid length. [ 252.988786][T12714] 8021q: adding VLAN 0 to HW filter on device bond12 [ 253.508910][T12742] netlink: 'syz.0.1878': attribute type 1 has an invalid length. [ 253.578713][T12743] bond7: (slave bridge4): making interface the new active one [ 253.590046][T12743] bond7: (slave bridge4): Enslaving as an active interface with an up link [ 253.692756][T12752] bond8 (unregistering): Released all slaves [ 253.841088][T12759] __nla_validate_parse: 11 callbacks suppressed [ 253.841109][T12759] netlink: 12 bytes leftover after parsing attributes in process `syz.0.1883'. [ 254.204519][T12775] netlink: 'syz.0.1887': attribute type 1 has an invalid length. [ 254.247910][T12775] 8021q: adding VLAN 0 to HW filter on device bond8 [ 254.265837][T12781] netlink: 8 bytes leftover after parsing attributes in process `syz.1.1888'. [ 254.282176][T12781] netlink: 4 bytes leftover after parsing attributes in process `syz.1.1888'. [ 254.293477][T12781] netlink: 8 bytes leftover after parsing attributes in process `syz.1.1888'. [ 254.304139][T12781] netlink: 4 bytes leftover after parsing attributes in process `syz.1.1888'. [ 254.424733][T12789] netlink: 28 bytes leftover after parsing attributes in process `syz.1.1890'. [ 254.639946][T12794] : entered promiscuous mode [ 254.704307][T12796] netlink: 24 bytes leftover after parsing attributes in process `syz.3.1893'. [ 254.719541][T12796] netlink: 212368 bytes leftover after parsing attributes in process `syz.3.1893'. [ 254.740263][T12799] net_ratelimit: 12 callbacks suppressed [ 254.740285][T12799] openvswitch: netlink: IPv4 tun info is not correct [ 254.767061][T12800] netlink: 190972 bytes leftover after parsing attributes in process `syz.0.1892'. [ 254.783491][ T8935] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 254.792036][ C1] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 254.880270][T12804] syzkaller0: entered promiscuous mode [ 254.886538][T12804] syzkaller0: entered allmulticast mode [ 254.924720][T12806] netlink: 20 bytes leftover after parsing attributes in process `syz.3.1897'. [ 255.011843][ T9692] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 255.020333][ C1] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 255.236488][T12818] x_tables: duplicate underflow at hook 1 [ 255.389745][T12825] netlink: 'syz.3.1904': attribute type 1 has an invalid length. [ 255.610892][T12834] vlan2: entered allmulticast mode [ 255.616193][T12834] bridge_slave_0: entered allmulticast mode [ 255.666038][T12836] IPVS: persistence engine module ip_vs_pe_À not found [ 255.837183][ T8935] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 255.845736][ C1] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 256.252140][T12848] 8021q: VLANs not supported on syzkaller1 [ 256.470657][T12855] netlink: 'syz.3.1913': attribute type 1 has an invalid length. [ 256.785573][ T6464] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 256.794557][ C0] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 256.868255][ T808] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 256.973950][T12866] batman_adv: Cannot find parent device. Skipping batadv-on-batadv check for gretap4 [ 257.003253][T12866] gretap4: default qdisc (pfifo_fast) fail, fallback to noqueue [ 257.016111][T12866] gretap4: entered promiscuous mode [ 257.029583][T12870] xt_hashlimit: size too large, truncated to 1048576 [ 257.030638][T12866] gretap4: entered allmulticast mode [ 257.052943][T12871] RDS: rds_bind could not find a transport for ::ffff:172.30.0.1, load rds_tcp or rds_rdma? [ 257.066055][ T9686] netdevsim netdevsim3 netdevsim0: unset [0, 0] type 1 family 0 port 8472 - 0 [ 257.079687][ T9686] netdevsim netdevsim3 netdevsim0: unset [1, 0] type 2 family 0 port 6081 - 0 [ 257.102878][ T9686] netdevsim netdevsim3 netdevsim1: unset [0, 0] type 1 family 0 port 8472 - 0 [ 257.114039][ T9686] netdevsim netdevsim3 netdevsim1: unset [1, 0] type 2 family 0 port 6081 - 0 [ 257.124388][ T9686] netdevsim netdevsim3 netdevsim2: unset [0, 0] type 1 family 0 port 8472 - 0 [ 257.137049][ T9686] netdevsim netdevsim3 netdevsim2: unset [1, 0] type 2 family 0 port 6081 - 0 [ 257.148841][ T9686] netdevsim netdevsim3 netdevsim3: unset [0, 0] type 1 family 0 port 8472 - 0 [ 257.169279][ T9686] netdevsim netdevsim3 netdevsim3: unset [1, 0] type 2 family 0 port 6081 - 0 [ 257.275612][T12876] x_tables: duplicate underflow at hook 2 [ 257.298607][T12875] ip6gre0: Master is either lo or non-ether device [ 257.638058][T12888] SET target dimension over the limit! [ 257.701854][T12890] netlink: 'syz.4.1927': attribute type 1 has an invalid length. [ 257.726218][T12890] bond9: entered promiscuous mode [ 257.734488][T12890] 8021q: adding VLAN 0 to HW filter on device bond9 [ 257.799109][T12896] sctp: [Deprecated]: syz.0.1929 (pid 12896) Use of int in maxseg socket option. [ 257.799109][T12896] Use struct sctp_assoc_value instead [ 257.828799][T12890] bond9: (slave bridge3): making interface the new active one [ 257.837269][T12890] bridge3: entered promiscuous mode [ 257.846298][T12890] bridge3: left promiscuous mode [ 258.329504][T12912] bridge3: entered promiscuous mode [ 258.344936][T12912] bridge3: entered allmulticast mode [ 258.417520][T12916] netlink: 'syz.3.1935': attribute type 1 has an invalid length. [ 258.513512][T12918] bond9: (slave bridge5): Enslaving as a backup interface with an up link [ 258.626241][T12916] macvlan2: entered promiscuous mode [ 258.632695][T12916] macvlan2: entered allmulticast mode [ 258.638963][T12916] bond9: entered promiscuous mode [ 258.649489][T12916] bridge5: entered promiscuous mode [ 258.663377][T12916] 8021q: adding VLAN 0 to HW filter on device macvlan2 [ 258.673654][T12916] bond9: left promiscuous mode [ 258.679362][T12916] bridge5: left promiscuous mode [ 258.899414][T12934] netlink: 'syz.3.1941': attribute type 1 has an invalid length. [ 258.995028][T12934] bond10: entered promiscuous mode [ 259.001196][T12934] 8021q: adding VLAN 0 to HW filter on device bond10 [ 259.009926][T12933] pimreg: left allmulticast mode [ 259.134043][T12940] bond10: (slave bridge6): making interface the new active one [ 259.166045][T12940] bridge6: entered promiscuous mode [ 259.188448][T12940] bond10: (slave bridge6): Enslaving as an active interface with an up link [ 259.393613][T12955] xt_hashlimit: size too large, truncated to 1048576 [ 259.444999][T12959] __nla_validate_parse: 8 callbacks suppressed [ 259.445019][T12959] netlink: 8 bytes leftover after parsing attributes in process `syz.0.1950'. [ 259.466201][T12962] netlink: 8 bytes leftover after parsing attributes in process `syz.1.1947'. [ 259.515081][T12964] netlink: 'syz.0.1950': attribute type 1 has an invalid length. [ 259.542404][T12959] netlink: 'syz.0.1950': attribute type 1 has an invalid length. [ 259.713923][T12971] netlink: 24 bytes leftover after parsing attributes in process `syz.3.1953'. [ 259.844376][T12976] netlink: 16178 bytes leftover after parsing attributes in process `syz.3.1954'. [ 259.884590][T12976] netlink: 4 bytes leftover after parsing attributes in process `syz.3.1954'. [ 259.978051][ T8935] net_ratelimit: 9 callbacks suppressed [ 259.978071][ T8935] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 259.992286][ C1] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 260.071416][ C0] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 260.223429][T12990] netlink: 96 bytes leftover after parsing attributes in process `syz.3.1958'. [ 260.476642][T13001] netlink: 4 bytes leftover after parsing attributes in process `syz.3.1963'. [ 260.499795][T13004] netlink: 'syz.0.1962': attribute type 4 has an invalid length. [ 260.773120][ T6821] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 260.781903][ C1] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 260.917062][T13021] netlink: 16 bytes leftover after parsing attributes in process `syz.3.1966'. [ 261.026324][T13025] smbdirect: ib_dev[syz1]: added: RNIC max_fast_reg_page_list_len=256 device_cap_flags=0x200000 kernel_cap_flags=0x10 page_size_cap=0x1000 [ 261.041963][T13025] smbdirect: ib_dev[syz1]: num_ports=1 max_qp_rd_atom=128 max_qp_init_rd_atom=128 max_sgl_rd=0 max_sge_rd=1 max_cqe=3276800 max_qp_wr=32768 max_send_sge=6 max_recv_sge=6 [ 261.043677][ T8935] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 261.067563][ C1] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 261.087041][T13025] smbdirect: ib_dev[syz1]PORT[1]: iwarp=1 ib=0 roce=0 v1=0 v2=0 core_cap_flags=0x400008 [ 261.168344][T13025] infiniband syz1: RDMA CMA: cma_listen_on_dev, error -98 [ 261.198166][T13029] netlink: 12 bytes leftover after parsing attributes in process `syz.4.1969'. [ 261.317116][T13033] netlink: 212368 bytes leftover after parsing attributes in process `syz.4.1969'. [ 261.526431][T13040] IPVS: Scheduler module ip_vs_sip not found [ 261.884130][ C0] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 262.065578][ T8935] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 262.074144][ C1] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 262.237178][T13072] netlink: 'syz.4.1983': attribute type 1 has an invalid length. [ 262.245424][T13072] netlink: 'syz.4.1983': attribute type 2 has an invalid length. [ 262.664951][T13084] netlink: 'syz.1.1990': attribute type 10 has an invalid length. [ 263.010435][T13098] netlink: 'syz.0.1991': attribute type 1 has an invalid length. [ 263.257809][T13098] 8021q: adding VLAN 0 to HW filter on device bond9 [ 263.869614][T13132] IPv6: sit2: Disabled Multicast RS [ 263.909754][T13132] sit2: entered allmulticast mode [ 263.975047][ T5643] Bluetooth: hci5: unexpected cc 0x0c03 length: 249 > 1 [ 263.988692][ T5643] Bluetooth: hci5: unexpected cc 0x1003 length: 249 > 9 [ 263.997965][ T5643] Bluetooth: hci5: unexpected cc 0x1001 length: 249 > 9 [ 264.007766][ T5643] Bluetooth: hci5: unexpected cc 0x0c23 length: 249 > 4 [ 264.018411][ T5643] Bluetooth: hci5: unexpected cc 0x0c38 length: 249 > 2 [ 264.756577][T13166] tipc: Enabled bearer , priority 24 [ 264.941569][T13138] lo speed is unknown, defaulting to 1000 [ 264.994980][T13179] IPVS: set_ctl: invalid protocol: 0 224.0.0.2:20000 [ 265.062909][T13182] net_ratelimit: 7 callbacks suppressed [ 265.062928][T13182] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 265.078356][ C1] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 265.153892][T13182] __nla_validate_parse: 6 callbacks suppressed [ 265.153912][T13182] netlink: 104 bytes leftover after parsing attributes in process `syz.0.2015'. [ 265.195158][ T5771] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 265.203621][ C1] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 265.251591][ T9662] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 265.260001][ C0] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 265.392019][T13189] netlink: 212368 bytes leftover after parsing attributes in process `syz.1.2017'. [ 265.598801][T13195] bond10: (slave lo): enslaved VLAN challenged slave. Adding VLANs will be blocked as long as it is part of bond. [ 265.607680][T13199] netlink: 40 bytes leftover after parsing attributes in process `syz.1.2020'. [ 265.634837][T13195] bond10: (slave lo): Enslaving as an active interface with an up link [ 265.651634][T13195] A link change request failed with some changes committed already. Interface tunl0 may have been left with an inconsistent configuration, please check. [ 265.661223][ C1] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 265.677622][ T5771] lo speed is unknown, defaulting to 1000 [ 265.685688][T13192] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 265.703678][ T808] lo speed is unknown, defaulting to 1000 [ 265.709773][T13199] netlink: 8 bytes leftover after parsing attributes in process `syz.1.2020'. [ 265.709808][T13199] netlink: 12 bytes leftover after parsing attributes in process `syz.1.2020'. [ 265.715397][T13199] netlink: 8 bytes leftover after parsing attributes in process `syz.1.2020'. [ 265.749318][ T5771] lo speed is unknown, defaulting to 1000 [ 265.765685][T13199] netlink: 12 bytes leftover after parsing attributes in process `syz.1.2020'. [ 265.786533][T13200] netlink: 'syz.1.2020': attribute type 11 has an invalid length. [ 265.794563][T13200] netlink: 224 bytes leftover after parsing attributes in process `syz.1.2020'. [ 266.010736][ C1] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 266.050714][ T5643] Bluetooth: hci5: command tx timeout [ 266.089127][T13207] netlink: 52 bytes leftover after parsing attributes in process `syz.0.2023'. [ 266.102700][T13210] netlink: 'syz.1.2024': attribute type 22 has an invalid length. [ 266.119004][T13210] netlink: 4 bytes leftover after parsing attributes in process `syz.1.2024'. [ 266.140412][T13210] netlink: 'syz.1.2024': attribute type 22 has an invalid length. [ 266.194156][ T6821] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 266.206721][ T6821] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 266.274368][T13214] netlink: 'syz.0.2025': attribute type 15 has an invalid length. [ 266.338646][T13138] bridge0: port 1(bridge_slave_0) entered blocking state [ 266.346037][T13138] bridge0: port 1(bridge_slave_0) entered disabled state [ 266.353682][T13138] bridge_slave_0: entered allmulticast mode [ 266.361687][T13138] bridge_slave_0: entered promiscuous mode [ 266.381288][T13138] bridge0: port 2(bridge_slave_1) entered blocking state [ 266.400093][T13138] bridge0: port 2(bridge_slave_1) entered disabled state [ 266.408400][T13138] bridge_slave_1: entered allmulticast mode [ 266.417290][T13138] bridge_slave_1: entered promiscuous mode [ 266.477534][T13220] openvswitch: netlink: Either Ethernet header or EtherType is required. [ 266.555473][T13138] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 266.623926][T13138] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 266.730069][T13138] team0: Port device team_slave_0 added [ 266.766421][T13138] team0: Port device team_slave_1 added [ 266.829116][T13138] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 266.842513][T13138] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 266.906435][T13138] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 266.942513][T13138] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 266.962793][T13138] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 267.039229][T13138] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 267.065848][T13244] netlink: 'syz.1.2031': attribute type 1 has an invalid length. [ 267.179366][T13244] 8021q: adding VLAN 0 to HW filter on device bond13 [ 267.368772][T13249] bond13: (slave geneve3): making interface the new active one [ 267.385943][T13249] bond13: (slave geneve3): Enslaving as an active interface with an up link [ 267.456010][T13138] hsr_slave_0: entered promiscuous mode [ 267.472965][T13138] hsr_slave_1: entered promiscuous mode [ 267.487366][T13138] debugfs: 'hsr0' already exists in 'hsr' [ 267.501285][T13138] Cannot create hsr debugfs directory [ 267.865563][T13262] netlink: 'syz.0.2034': attribute type 21 has an invalid length. [ 267.947934][T13262] bond11: option lacp_rate: mode dependency failed, not supported in mode broadcast(3) [ 267.975740][T13262] bond11 (unregistering): Released all slaves [ 268.130863][ T5643] Bluetooth: hci5: command tx timeout [ 268.388323][T13271] bond0: entered allmulticast mode [ 268.519105][T13275] IPVS: Schedule: port zero only supported in persistent services, check your ipvs configuration [ 268.579273][T13138] netdevsim netdevsim5 netdevsim0: renamed from eth0 [ 268.660347][T13138] 8021q: adding VLAN 0 to HW filter on device netdevsim0 [ 268.688075][T13138] netdevsim netdevsim5 netdevsim1: renamed from eth1 [ 268.725367][T13138] 8021q: adding VLAN 0 to HW filter on device netdevsim1 [ 268.735699][T13138] netdevsim netdevsim5 netdevsim2: renamed from eth2 [ 268.763344][T13138] 8021q: adding VLAN 0 to HW filter on device netdevsim2 [ 268.776438][T13138] netdevsim netdevsim5 netdevsim3: renamed from eth3 [ 268.802718][T13138] 8021q: adding VLAN 0 to HW filter on device netdevsim3 [ 269.051848][T13138] 8021q: adding VLAN 0 to HW filter on device bond0 [ 269.119654][T13138] 8021q: adding VLAN 0 to HW filter on device team0 [ 269.164730][ T9656] bridge0: port 1(bridge_slave_0) entered blocking state [ 269.173541][ T9656] bridge0: port 1(bridge_slave_0) entered forwarding state [ 269.196971][ T9656] bridge0: port 2(bridge_slave_1) entered blocking state [ 269.204235][ T9656] bridge0: port 2(bridge_slave_1) entered forwarding state [ 270.176209][T13312] __nla_validate_parse: 9 callbacks suppressed [ 270.176230][T13312] netlink: 32 bytes leftover after parsing attributes in process `syz.0.2049'. [ 270.211620][ T5643] Bluetooth: hci5: command tx timeout [ 270.408243][T13318] netlink: 100 bytes leftover after parsing attributes in process `syz.4.2050'. [ 270.487053][T13322] IPv6: RTM_NEWROUTE with no NLM_F_CREATE or NLM_F_REPLACE [ 270.489162][T13321] netlink: 52 bytes leftover after parsing attributes in process `syz.1.2051'. [ 270.497248][T13322] IPv6: NLM_F_CREATE should be set when creating new route [ 270.511100][T13322] IPv6: NLM_F_CREATE should be set when creating new route [ 270.518371][T13322] IPv6: NLM_F_CREATE should be set when creating new route [ 270.608693][T13327] IPv6: RTM_NEWROUTE with no NLM_F_CREATE or NLM_F_REPLACE [ 270.663904][T13328] netlink: 4 bytes leftover after parsing attributes in process `syz.4.2053'. [ 270.710300][T13328] netlink: 4 bytes leftover after parsing attributes in process `syz.4.2053'. [ 271.004734][T13138] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 271.258859][T13341] bridge8: trying to set multicast query interval above maximum, setting to 8640000 (86400000ms) [ 271.569929][T13349] net_ratelimit: 8 callbacks suppressed [ 271.569948][T13349] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 271.586419][ C0] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 271.661709][ T9686] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 271.670180][ C0] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 271.712684][T13347] syz_tun: left promiscuous mode [ 271.838894][T13347] bond1: left promiscuous mode [ 271.916396][T13347] bond4: left promiscuous mode [ 271.978496][T13347] ip6gretap1: left promiscuous mode [ 271.998907][T13347] bond7: left promiscuous mode [ 272.010420][T13347] vti0: left promiscuous mode [ 272.183271][T13138] veth0_vlan: entered promiscuous mode [ 272.247163][T13138] veth1_vlan: entered promiscuous mode [ 272.293834][ T5643] Bluetooth: hci5: command tx timeout [ 272.431658][T13138] veth0_macvtap: entered promiscuous mode [ 272.479830][T13138] veth1_macvtap: entered promiscuous mode [ 272.548412][T13138] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 272.578944][T13138] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 272.653166][ T9686] netdevsim netdevsim5 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 272.689414][ T9686] netdevsim netdevsim5 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 272.733185][ T9686] netdevsim netdevsim5 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 272.763336][ T9686] netdevsim netdevsim5 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 272.895737][T13372] nbd: socks must be embedded in a SOCK_ITEM attr [ 273.121242][ T9682] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 273.204020][ T9682] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 273.302375][T13399] netlink: 'syz.0.2066': attribute type 4 has an invalid length. [ 273.405352][T13399] netlink: 17 bytes leftover after parsing attributes in process `syz.0.2066'. [ 273.712244][ T9688] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 273.732702][ T9688] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 274.388597][T13433] netlink: 8 bytes leftover after parsing attributes in process `syz.4.2074'. [ 274.651373][T13442] netlink: 12 bytes leftover after parsing attributes in process `syz.1.2077'. [ 275.072335][T13457] netlink: 28 bytes leftover after parsing attributes in process `syz.5.2083'. [ 275.108102][T13456] netlink: 28 bytes leftover after parsing attributes in process `syz.5.2083'. [ 275.197986][T13463] __nla_validate_parse: 1 callbacks suppressed [ 275.198004][T13463] netlink: 8 bytes leftover after parsing attributes in process `syz.0.2080'. [ 275.215058][T13470] netlink: 28 bytes leftover after parsing attributes in process `syz.5.2085'. [ 275.224799][T13470] netlink: 28 bytes leftover after parsing attributes in process `syz.5.2085'. [ 275.453888][T13477] hsr0: mtu greater than device maximum [ 275.639862][T13490] openvswitch: netlink: Tunnel attr 78 out of range max 16 [ 275.669158][T13490] xt_cgroup: path and classid specified [ 275.900371][T13499] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 275.911324][ C1] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 276.010068][T13503] syzkaller1: entered promiscuous mode [ 276.026967][T13503] syzkaller1: entered allmulticast mode [ 276.239214][T13512] netlink: 4 bytes leftover after parsing attributes in process `syz.1.2098'. [ 276.629160][T13530] netlink: 12 bytes leftover after parsing attributes in process `syz.4.2104'. [ 276.640695][T13530] netlink: 12 bytes leftover after parsing attributes in process `syz.4.2104'. [ 276.661440][T13528] mapping of prio or/and queue is allowed only from OUTPUT/FORWARD/POSTROUTING chains [ 276.818927][ T9686] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 276.828143][ C0] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 276.885333][T13540] netlink: 'syz.0.2107': attribute type 11 has an invalid length. [ 276.951198][T13540] netlink: 12 bytes leftover after parsing attributes in process `syz.0.2107'. [ 277.034705][T13545] netlink: 'syz.5.2109': attribute type 1 has an invalid length. [ 277.056995][T13541] af_packet: tpacket_rcv: packet too big, clamped from 1 to 4294967272. macoff=96 [ 277.355767][ T50] Bluetooth: hci6: unexpected cc 0x0c03 length: 249 > 1 [ 277.371659][ T50] Bluetooth: hci6: unexpected cc 0x1003 length: 249 > 9 [ 277.383650][ T50] Bluetooth: hci6: unexpected cc 0x1001 length: 249 > 9 [ 277.387355][T13561] netlink: 44 bytes leftover after parsing attributes in process `syz.5.2114'. [ 277.403216][ T50] Bluetooth: hci6: unexpected cc 0x0c23 length: 249 > 4 [ 277.435741][ T50] Bluetooth: hci6: unexpected cc 0x0c38 length: 249 > 2 [ 277.565020][T13566] netlink: 24 bytes leftover after parsing attributes in process `syz.1.2115'. [ 278.212001][T13596] netlink: 'syz.4.2123': attribute type 1 has an invalid length. [ 278.253245][T13596] netlink: 96 bytes leftover after parsing attributes in process `syz.4.2123'. [ 278.618381][T13556] lo speed is unknown, defaulting to 1000 [ 278.676679][T13611] netlink: 'syz.1.2128': attribute type 21 has an invalid length. [ 278.711374][T13611] IPv6: NLM_F_CREATE should be specified when creating new route [ 279.226533][T13631] netlink: 'syz.1.2135': attribute type 4 has an invalid length. [ 279.501691][ T5643] Bluetooth: hci6: command tx timeout [ 279.821715][T13652] netlink: 'syz.5.2141': attribute type 5 has an invalid length. [ 279.946729][ T9688] netdevsim netdevsim5 netdevsim0: set [0, 0] type 1 family 0 port 8472 - 0 [ 279.966759][ T9688] netdevsim netdevsim5 netdevsim1: set [0, 0] type 1 family 0 port 8472 - 0 [ 280.078390][ T9688] netdevsim netdevsim5 netdevsim2: set [0, 0] type 1 family 0 port 8472 - 0 [ 280.097582][ T9688] netdevsim netdevsim5 netdevsim3: set [0, 0] type 1 family 0 port 8472 - 0 [ 280.133275][T13661] openvswitch: netlink: nsh attr 0 has unexpected len 1 expected 0 [ 280.308197][T13556] bridge0: port 1(bridge_slave_0) entered blocking state [ 280.317009][T13556] bridge0: port 1(bridge_slave_0) entered disabled state [ 280.325087][T13556] bridge_slave_0: entered allmulticast mode [ 280.333901][T13556] bridge_slave_0: entered promiscuous mode [ 280.344886][T13556] bridge0: port 2(bridge_slave_1) entered blocking state [ 280.352965][T13556] bridge0: port 2(bridge_slave_1) entered disabled state [ 280.360307][T13556] bridge_slave_1: entered allmulticast mode [ 280.369530][T13556] bridge_slave_1: entered promiscuous mode [ 280.388373][T13665] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 280.467069][T13556] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 280.508165][T13556] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 280.609390][T13670] netlink: 'syz.0.2145': attribute type 11 has an invalid length. [ 280.620897][ C0] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 280.643640][T13670] netlink: 'syz.0.2145': attribute type 5 has an invalid length. [ 280.652174][T13670] __nla_validate_parse: 5 callbacks suppressed [ 280.652191][T13670] netlink: 6548 bytes leftover after parsing attributes in process `syz.0.2145'. [ 280.708870][T13556] team0: Port device team_slave_0 added [ 280.730891][T13676] netlink: 'syz.5.2146': attribute type 1 has an invalid length. [ 280.739739][T13556] team0: Port device team_slave_1 added [ 280.748531][T13676] netlink: 'syz.5.2146': attribute type 7 has an invalid length. [ 280.798522][T13676] netlink: 'syz.5.2146': attribute type 8 has an invalid length. [ 280.849797][T13676] netlink: 208 bytes leftover after parsing attributes in process `syz.5.2146'. [ 280.866456][T13676] NCSI netlink: No device for ifindex 65584 [ 280.964740][T13556] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 280.973308][T13556] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 281.004029][T13556] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 281.034355][T13556] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 281.051177][T13556] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 281.088026][T13556] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 281.373315][T13556] hsr_slave_0: entered promiscuous mode [ 281.398143][T13556] hsr_slave_1: entered promiscuous mode [ 281.444792][T13556] debugfs: 'hsr0' already exists in 'hsr' [ 281.447371][T13699] netlink: 8 bytes leftover after parsing attributes in process `syz.0.2152'. [ 281.464817][T13556] Cannot create hsr debugfs directory [ 281.570701][ T50] Bluetooth: hci6: command tx timeout [ 281.946545][T13724] IPVS: set_ctl: invalid protocol: 0 172.30.1.1:20001 [ 282.139019][T13731] netlink: 'syz.1.2161': attribute type 1 has an invalid length. [ 282.233536][T13739] netlink: 'syz.0.2162': attribute type 1 has an invalid length. [ 282.242756][T13739] netlink: 224 bytes leftover after parsing attributes in process `syz.0.2162'. [ 282.274891][T13731] bond14: entered promiscuous mode [ 282.281840][T13731] 8021q: adding VLAN 0 to HW filter on device bond14 [ 282.345958][T13741] netlink: 16 bytes leftover after parsing attributes in process `syz.0.2163'. [ 282.413662][T13743] netlink: 12 bytes leftover after parsing attributes in process `syz.5.2164'. [ 282.474111][T13744] netlink: 12 bytes leftover after parsing attributes in process `syz.5.2164'. [ 282.497083][T13731] bond14: (slave bridge9): making interface the new active one [ 282.524373][T13731] bridge9: entered promiscuous mode [ 282.533420][ T9684] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 282.542539][ C0] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 282.552243][T13731] bond14: (slave bridge9): Enslaving as an active interface with an up link [ 282.592116][T13743] xfrm1: entered promiscuous mode [ 282.611298][T13743] xfrm1: entered allmulticast mode [ 282.635087][T13748] pimreg: entered allmulticast mode [ 282.668450][T13747] netlink: 'syz.0.2165': attribute type 1 has an invalid length. [ 282.712864][T13747] netlink: 16179 bytes leftover after parsing attributes in process `syz.0.2165'. [ 282.808631][T13748] netlink: 112 bytes leftover after parsing attributes in process `syz.0.2165'. [ 282.844696][T13748] openvswitch: netlink: Flow actions attr not present in new flow. [ 282.878002][T13747] veth9: entered allmulticast mode [ 282.893079][T13556] netdevsim netdevsim6 netdevsim0: renamed from eth0 [ 282.956551][T13556] 8021q: adding VLAN 0 to HW filter on device netdevsim0 [ 282.985666][T13556] netdevsim netdevsim6 netdevsim1: renamed from eth1 [ 283.034825][T13556] 8021q: adding VLAN 0 to HW filter on device netdevsim1 [ 283.065902][T13556] netdevsim netdevsim6 netdevsim2: renamed from eth2 [ 283.136265][T13556] 8021q: adding VLAN 0 to HW filter on device netdevsim2 [ 283.190295][T13765] can: request_module (can-proto-4) failed. [ 283.214599][T13769] 8021q: adding VLAN 0 to HW filter on device bond15 [ 283.224876][T13556] netdevsim netdevsim6 netdevsim3: renamed from eth3 [ 283.241211][T13556] 8021q: adding VLAN 0 to HW filter on device netdevsim3 [ 283.337252][T13760] bond15: (slave geneve4): making interface the new active one [ 283.350300][T13760] bond15: (slave geneve4): Enslaving as an active interface with an up link [ 283.644454][T13790] netlink: 36 bytes leftover after parsing attributes in process `syz.1.2175'. [ 283.653620][ T50] Bluetooth: hci6: command 0x040f tx timeout [ 283.695926][T13556] 8021q: adding VLAN 0 to HW filter on device bond0 [ 283.777554][T13556] 8021q: adding VLAN 0 to HW filter on device team0 [ 283.825304][ T9684] bridge0: port 1(bridge_slave_0) entered blocking state [ 283.832528][ T9684] bridge0: port 1(bridge_slave_0) entered forwarding state [ 283.934623][ T9684] bridge0: port 2(bridge_slave_1) entered blocking state [ 283.941876][ T9684] bridge0: port 2(bridge_slave_1) entered forwarding state [ 284.019111][T13799] syzkaller0: entered promiscuous mode [ 284.046866][T13799] syzkaller0: entered allmulticast mode [ 284.196531][T13813] validate_nla: 1 callbacks suppressed [ 284.196549][T13813] netlink: 'syz.5.2182': attribute type 1 has an invalid length. [ 284.559511][T13802] netlink: 'syz.1.2180': attribute type 27 has an invalid length. [ 284.596483][T13802] netlink: 'syz.1.2180': attribute type 4 has an invalid length. [ 284.677657][T13831] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 285.563323][T13556] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 285.731546][ T5643] Bluetooth: hci6: command 0x040f tx timeout [ 285.751443][T13875] netlink: 'syz.1.2198': attribute type 4 has an invalid length. [ 285.774086][T13873] __nla_validate_parse: 2 callbacks suppressed [ 285.774105][T13873] netlink: 14601 bytes leftover after parsing attributes in process `syz.1.2198'. [ 285.793221][T13875] netlink: 17 bytes leftover after parsing attributes in process `syz.1.2198'. [ 285.920302][T13884] netlink: 48 bytes leftover after parsing attributes in process `syz.0.2200'. [ 286.299844][T13894] netlink: 'syz.1.2202': attribute type 1 has an invalid length. [ 286.322208][T13894] netlink: 4 bytes leftover after parsing attributes in process `syz.1.2202'. [ 286.354270][T13894] netlink: 4 bytes leftover after parsing attributes in process `syz.1.2202'. [ 286.400177][T13895] netlink: 24 bytes leftover after parsing attributes in process `syz.1.2202'. [ 286.458798][T13556] veth0_vlan: entered promiscuous mode [ 286.522678][T13556] veth1_vlan: entered promiscuous mode [ 286.590351][T13556] veth0_macvtap: entered promiscuous mode [ 286.619130][T13556] veth1_macvtap: entered promiscuous mode [ 286.835480][T13556] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 286.869483][T13556] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 286.914242][ T9686] netdevsim netdevsim6 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 286.955071][ T9686] netdevsim netdevsim6 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 287.002435][ T9686] netdevsim netdevsim6 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 287.036919][ T9686] netdevsim netdevsim6 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 287.237552][T13921] netlink: 'syz.0.2210': attribute type 1 has an invalid length. [ 287.279806][ T151] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 287.292889][ T151] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 287.475983][ T9688] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 287.507935][ T9688] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 287.821253][ T5643] Bluetooth: hci6: command 0x040f tx timeout [ 288.049049][T13948] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 288.093003][T13928] netlink: 'syz.5.2212': attribute type 1 has an invalid length. [ 288.269794][T13956] netlink: 256 bytes leftover after parsing attributes in process `syz.1.2219'. [ 288.292135][ T9662] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 288.301966][ C1] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 288.338520][T13959] openvswitch: netlink: IP tunnel dst address not specified [ 288.409409][T13961] netlink: 16 bytes leftover after parsing attributes in process `syz.0.2221'. [ 288.770802][T13978] netlink: 'syz.5.2224': attribute type 1 has an invalid length. [ 288.816360][T13979] netlink: 36 bytes leftover after parsing attributes in process `syz.0.2223'. [ 288.916067][T13978] 8021q: adding VLAN 0 to HW filter on device bond1 [ 288.925848][T13988] veth1_macvtap: left promiscuous mode [ 289.004538][T13991] netlink: 8 bytes leftover after parsing attributes in process `syz.6.2226'. [ 289.135793][T13994] netlink: 'syz.5.2228': attribute type 1 has an invalid length. [ 289.203678][T13999] netlink: 'syz.6.2230': attribute type 11 has an invalid length. [ 289.269237][T13998] bond2: (slave veth3): Enslaving as an active interface with a down link [ 289.292159][T14006] 8021q: adding VLAN 0 to HW filter on device bond2 [ 289.310177][T14005] syzkaller0: entered promiscuous mode [ 289.316788][T14005] syzkaller0: entered allmulticast mode [ 289.366295][T14005] xt_l2tp: invalid flags combination: 0 [ 292.168997][T13996] nci: __nci_request: wait_for_completion_interruptible_timeout failed -512 [ 294.051171][ T9682] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 294.059491][ C1] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 299.814922][ T151] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 299.823904][ C0] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 304.931831][ T151] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 304.940578][ C0] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 310.052180][ T6845] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 310.060583][ C1] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 315.812572][ T9686] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 315.821685][ C0] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 320.852146][ T9682] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 320.860650][ C0] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 326.693063][ T9684] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 326.701923][ C0] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 332.466271][ T9662] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 332.475018][ C0] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 342.693665][ T6845] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 342.702143][ C1] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 344.466403][T14020] netlink: 28 bytes leftover after parsing attributes in process `syz.1.2233'. [ 344.546611][T14021] A link change request failed with some changes committed already. Interface syzkaller0 may have been left with an inconsistent configuration, please check. [ 344.639068][T14016] netlink: 44 bytes leftover after parsing attributes in process `syz.0.2232'. [ 344.735090][T14028] sch_tbf: burst 19872 is lower than device lo mtu (65550) ! [ 344.773867][ T50] Bluetooth: hci7: unexpected cc 0x0c03 length: 249 > 1 [ 344.789412][ T50] Bluetooth: hci7: unexpected cc 0x1003 length: 249 > 9 [ 344.799210][ T50] Bluetooth: hci7: unexpected cc 0x1001 length: 249 > 9 [ 344.810598][ T50] Bluetooth: hci7: unexpected cc 0x0c23 length: 249 > 4 [ 344.823245][ T50] Bluetooth: hci7: unexpected cc 0x0c38 length: 249 > 2 [ 345.505548][T14059] netlink: 1363 bytes leftover after parsing attributes in process `syz.5.2243'. [ 345.539595][T14059] netlink: 'syz.5.2243': attribute type 4 has an invalid length. [ 345.575931][T14063] netlink: 'syz.0.2244': attribute type 1 has an invalid length. [ 345.622657][T14063] netlink: 12 bytes leftover after parsing attributes in process `syz.0.2244'. [ 345.753668][ T8935] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 345.810979][ C0] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 345.819617][ C0] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 345.851643][T14029] lo speed is unknown, defaulting to 1000 [ 345.873969][T14068] netlink: 16 bytes leftover after parsing attributes in process `syz.5.2246'. [ 345.882561][ T8935] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 346.084583][T14078] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 346.243135][T14087] netlink: 28 bytes leftover after parsing attributes in process `syz.5.2249'. [ 346.758894][T14105] netlink: 8 bytes leftover after parsing attributes in process `syz.6.2255'. [ 346.767580][T14109] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 346.768087][ C1] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 346.861880][ T5643] Bluetooth: hci7: command tx timeout [ 347.183644][T14125] netlink: 36 bytes leftover after parsing attributes in process `syz.0.2258'. [ 347.610276][T14141] mac80211_hwsim hwsim19 syzkaller0: entered promiscuous mode [ 347.638417][T14141] mac80211_hwsim hwsim19 syzkaller0: entered allmulticast mode [ 347.856871][T14150] netlink: 8 bytes leftover after parsing attributes in process `syz.0.2265'. [ 348.135944][T14159] netlink: 'syz.0.2267': attribute type 1 has an invalid length. [ 348.308396][T14159] 8021q: adding VLAN 0 to HW filter on device bond11 [ 348.350114][T14170] netlink: 44 bytes leftover after parsing attributes in process `syz.0.2267'. [ 348.393931][T14029] bridge0: port 1(bridge_slave_0) entered blocking state [ 348.410224][T14029] bridge0: port 1(bridge_slave_0) entered disabled state [ 348.430241][T14029] bridge_slave_0: entered allmulticast mode [ 348.452848][ T151] net_ratelimit: 3 callbacks suppressed [ 348.452877][ T151] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 348.455857][T14029] bridge_slave_0: entered promiscuous mode [ 348.462932][ C1] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 348.496875][T14029] bridge0: port 2(bridge_slave_1) entered blocking state [ 348.517054][T14029] bridge0: port 2(bridge_slave_1) entered disabled state [ 348.537278][T14029] bridge_slave_1: entered allmulticast mode [ 348.556651][T14029] bridge_slave_1: entered promiscuous mode [ 348.610425][T14029] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 348.664905][T14029] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 348.801644][T14183] netlink: 'syz.0.2273': attribute type 11 has an invalid length. [ 348.819145][T14029] team0: Port device team_slave_0 added [ 348.880732][T14029] team0: Port device team_slave_1 added [ 348.931882][ T5643] Bluetooth: hci7: command tx timeout [ 348.992325][T14029] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 349.000312][T14029] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 349.027345][T14029] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 349.067504][T14029] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 349.089586][T14029] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 349.116676][ C1] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 349.169778][T14029] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 349.304193][T14195] netlink: 'syz.5.2277': attribute type 5 has an invalid length. [ 349.403198][T14029] hsr_slave_0: entered promiscuous mode [ 349.412306][T14029] hsr_slave_1: entered promiscuous mode [ 349.421276][T14029] debugfs: 'hsr0' already exists in 'hsr' [ 349.427146][T14029] Cannot create hsr debugfs directory [ 349.657596][T14214] IPv6: sit1: Disabled Multicast RS [ 349.680107][T14214] sit1: entered allmulticast mode [ 349.847333][T14218] __nla_validate_parse: 4 callbacks suppressed [ 349.847355][T14218] netlink: 8 bytes leftover after parsing attributes in process `syz.6.2283'. [ 350.309248][T14238] netlink: 'syz.0.2289': attribute type 1 has an invalid length. [ 350.336704][T14238] netlink: 'syz.0.2289': attribute type 2 has an invalid length. [ 350.654255][ T8935] IPVS: starting estimator thread 0... [ 350.676185][T14250] IPVS: fo: UDP 224.0.0.2:0 - no destination available [ 350.771066][T14255] IPVS: using max 34 ests per chain, 81600 per kthread [ 350.814245][T14264] netlink: 'syz.5.2294': attribute type 24 has an invalid length. [ 350.833836][T14251] bridge7: the hash_elasticity option has been deprecated and is always 16 [ 351.014253][ T5643] Bluetooth: hci7: command tx timeout [ 351.075639][T14029] netdevsim netdevsim7 netdevsim0: renamed from eth0 [ 351.124499][T14029] 8021q: adding VLAN 0 to HW filter on device netdevsim0 [ 351.206429][T14029] netdevsim netdevsim7 netdevsim1: renamed from eth1 [ 351.241517][T14277] netlink: 44 bytes leftover after parsing attributes in process `syz.5.2298'. [ 351.252417][T14029] 8021q: adding VLAN 0 to HW filter on device netdevsim1 [ 351.264688][T14277] netlink: 43 bytes leftover after parsing attributes in process `syz.5.2298'. [ 351.274855][T14029] netdevsim netdevsim7 netdevsim2: renamed from eth2 [ 351.293331][T14277] netlink: 'syz.5.2298': attribute type 6 has an invalid length. [ 351.317626][T14277] netlink: 'syz.5.2298': attribute type 5 has an invalid length. [ 351.350559][T14277] netlink: 43 bytes leftover after parsing attributes in process `syz.5.2298'. [ 351.397032][T14029] 8021q: adding VLAN 0 to HW filter on device netdevsim2 [ 351.435714][T14029] netdevsim netdevsim7 netdevsim3: renamed from eth3 [ 351.478026][T14029] 8021q: adding VLAN 0 to HW filter on device netdevsim3 [ 351.623659][T14299] netlink: 'syz.0.2303': attribute type 5 has an invalid length. [ 351.668181][T14287] syzkaller0: entered promiscuous mode [ 351.674343][T14287] syzkaller0: entered allmulticast mode [ 351.726757][T14299] netlink: 4 bytes leftover after parsing attributes in process `syz.0.2303'. [ 351.763446][T14306] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 351.783799][T14306] netlink: 'syz.5.2304': attribute type 10 has an invalid length. [ 352.721647][T14338] RDS: rds_bind could not find a transport for 400:0:1200:0:1030:0:ffff:ffff, load rds_tcp or rds_rdma? [ 353.104869][ T5643] Bluetooth: hci7: command tx timeout [ 353.988694][T14299] hsr_slave_1 (unregistering): left promiscuous mode [ 354.027651][T14306] bond0: (slave dummy0): Enslaving as an active interface with an up link [ 354.215860][ T9682] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 354.224331][ C0] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 354.438188][T14392] tipc: Enabling of bearer rejected, failed to enable media [ 354.467570][T14393] netdevsim netdevsim0: Firmware load for './file0/file0/../file0' refused, path contains '..' component [ 354.504215][T14029] 8021q: adding VLAN 0 to HW filter on device bond0 [ 354.537884][T14390] xt_hashlimit: invalid rate [ 354.563053][T14029] 8021q: adding VLAN 0 to HW filter on device team0 [ 354.641400][ T6829] bridge0: port 1(bridge_slave_0) entered blocking state [ 354.648669][ T6829] bridge0: port 1(bridge_slave_0) entered forwarding state [ 354.694941][T14390] syzkaller0: entered promiscuous mode [ 354.711382][T14390] syzkaller0: entered allmulticast mode [ 354.796337][ T9656] bridge0: port 2(bridge_slave_1) entered blocking state [ 354.803573][ T9656] bridge0: port 2(bridge_slave_1) entered forwarding state [ 354.868564][T14411] xt_socket: unknown flags 0xe4 [ 354.927911][T14411] batadv0: entered promiscuous mode [ 354.955068][T14411] macsec1: entered promiscuous mode [ 354.962252][T14411] 8021q: adding VLAN 0 to HW filter on device macsec1 [ 354.970886][T14411] batadv0: left promiscuous mode [ 355.139580][T14417] tipc: Started in network mode [ 355.146586][T14417] tipc: Node identity ac14140f, cluster identity 4711 [ 355.158326][T14417] tipc: New replicast peer: 255.255.255.255 [ 355.168275][T14417] tipc: Enabled bearer , priority 10 [ 355.441516][T14433] netlink: 8 bytes leftover after parsing attributes in process `syz.0.2326'. [ 355.455214][T14432] netlink: 12 bytes leftover after parsing attributes in process `syz.6.2327'. [ 355.587509][T14426] netlink: 1168 bytes leftover after parsing attributes in process `syz.1.2325'. [ 355.735745][T14444] netlink: 'syz.0.2329': attribute type 8 has an invalid length. [ 355.785874][T14444] netlink: 4 bytes leftover after parsing attributes in process `syz.0.2329'. [ 355.868200][T14444] veth1_to_team: entered promiscuous mode [ 355.912436][T14444] veth1_to_team: left promiscuous mode [ 355.927187][T14452] netlink: 212344 bytes leftover after parsing attributes in process `syz.1.2331'. [ 356.335860][T14466] netlink: 'syz.6.2334': attribute type 1 has an invalid length. [ 356.360414][T14464] ipvlan2: entered promiscuous mode [ 356.398023][T14466] netlink: 'syz.6.2334': attribute type 21 has an invalid length. [ 356.426170][T14372] tipc: Node number set to 2886997007 [ 356.446553][T14466] netlink: 'syz.6.2334': attribute type 22 has an invalid length. [ 356.491129][T14466] netlink: 'syz.6.2334': attribute type 23 has an invalid length. [ 356.495055][T14464] netlink: 16 bytes leftover after parsing attributes in process `syz.1.2333'. [ 356.517210][T14466] netlink: 'syz.6.2334': attribute type 25 has an invalid length. [ 356.538195][T14466] netlink: 96 bytes leftover after parsing attributes in process `syz.6.2334'. [ 356.551178][T14464] netlink: 16 bytes leftover after parsing attributes in process `syz.1.2333'. [ 356.606266][T14464] netlink: 32 bytes leftover after parsing attributes in process `syz.1.2333'. [ 357.082265][T14029] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 357.555558][T14520] openvswitch: netlink: IP tunnel dst address not specified [ 357.699320][T14520] bridge1: entered allmulticast mode [ 358.124425][T14029] veth0_vlan: entered promiscuous mode [ 358.184442][T14029] veth1_vlan: entered promiscuous mode [ 358.313000][T14029] veth0_macvtap: entered promiscuous mode [ 358.344675][T14029] veth1_macvtap: entered promiscuous mode [ 358.386332][T14029] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 358.514527][T14029] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 358.585655][ T6845] netdevsim netdevsim7 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 358.639703][ T6845] netdevsim netdevsim7 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 358.670863][ T6845] netdevsim netdevsim7 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 358.707952][ T6845] netdevsim netdevsim7 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 359.009479][T14565] netlink: 'syz.1.2357': attribute type 1 has an invalid length. [ 359.106726][ T9656] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 359.131681][ T9656] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 359.335222][T14581] netlink: 52 bytes leftover after parsing attributes in process `syz.0.2362'. [ 359.396928][ T9656] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 359.433705][ T9656] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 359.971474][ T9662] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 359.979899][ C1] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 360.884241][T14632] __nla_validate_parse: 1 callbacks suppressed [ 360.884261][T14632] netlink: 4 bytes leftover after parsing attributes in process `syz.6.2375'. [ 361.031607][T14640] netlink: 28 bytes leftover after parsing attributes in process `syz.7.2377'. [ 361.049981][T14640] netlink: 28 bytes leftover after parsing attributes in process `syz.7.2377'. [ 361.450754][T14658] netlink: 12 bytes leftover after parsing attributes in process `syz.5.2382'. [ 361.523229][T14662] netlink: 4 bytes leftover after parsing attributes in process `syz.7.2384'. [ 361.560984][T14662] netlink: 12 bytes leftover after parsing attributes in process `syz.7.2384'. [ 361.586647][T14662] netlink: 'syz.7.2384': attribute type 4 has an invalid length. [ 361.622071][T14642] nci: __nci_request: wait_for_completion_interruptible_timeout failed -512 [ 361.642524][T14666] netlink: 'syz.7.2384': attribute type 4 has an invalid length. [ 361.740865][T14670] x_tables: ip6_tables: TPROXY target: used from hooks FORWARD, but only usable from PREROUTING [ 361.826253][T14667] netlink: 8 bytes leftover after parsing attributes in process `syz.5.2386'. [ 361.848171][T14672] netlink: 'syz.1.2388': attribute type 4 has an invalid length. [ 361.880190][T14672] netlink: 224 bytes leftover after parsing attributes in process `syz.1.2388'. [ 361.983098][T14676] IPv6: sit2: Disabled Multicast RS [ 362.188249][T14687] netlink: 44 bytes leftover after parsing attributes in process `syz.6.2392'. [ 362.211158][T14690] netlink: 'syz.1.2395': attribute type 11 has an invalid length. [ 362.251716][T14683] bond3: option all_slaves_active: invalid value (5) [ 362.369883][T14683] bond3 (unregistering): Released all slaves [ 362.541547][T14694] veth1_macvtap: entered promiscuous mode [ 362.602839][T14694] 8021q: adding VLAN 0 to HW filter on device bond5 [ 362.619837][T14694] 8021q: adding VLAN 0 to HW filter on device bond6 [ 362.658600][T14694] 8021q: adding VLAN 0 to HW filter on device bond9 [ 362.678619][T14694] 8021q: adding VLAN 0 to HW filter on device bond11 [ 362.756900][T14701] netlink: 20 bytes leftover after parsing attributes in process `syz.5.2393'. [ 362.776505][T14711] netlink: 'syz.6.2399': attribute type 1 has an invalid length. [ 362.799320][ T9680] ip6_tunnel: ip6tnl2 xmit: Local address not yet configured! [ 363.108344][ T9680] ip6_tunnel:  xmit: Local address not yet configured! [ 363.171666][ C0] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 364.208839][T14773] xt_hashlimit: size too large, truncated to 1048576 [ 364.328737][T14777] netlink: 'syz.5.2420': attribute type 1 has an invalid length. [ 364.996453][T14801] syzkaller0: entered promiscuous mode [ 365.021763][T14801] syzkaller0: entered allmulticast mode [ 365.169093][T14818] vxcan0: tx address claim with dest, not broadcast [ 365.298567][T14814] tipc: Enabled bearer , priority 0 [ 365.354098][T14800] tipc: Resetting bearer [ 365.479763][T14800] tipc: Disabling bearer [ 365.731789][ T6829] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 365.740261][ C0] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 365.836201][T14844] bridge: RTM_NEWNEIGH with invalid ether address [ 365.914005][T14848] __nla_validate_parse: 7 callbacks suppressed [ 365.914027][T14848] netlink: 12 bytes leftover after parsing attributes in process `syz.0.2438'. [ 366.045596][T14841] netlink: 28 bytes leftover after parsing attributes in process `syz.0.2438'. [ 366.319018][T14860] netlink: 216 bytes leftover after parsing attributes in process `syz.5.2442'. [ 366.354446][T14836] syz.7.2434 (14836) used greatest stack depth: 17984 bytes left [ 366.366222][T14860] netlink: 'syz.5.2442': attribute type 2 has an invalid length. [ 366.770721][ C1] ip6_tunnel: ip6tnl2 xmit: Local address not yet configured! [ 366.946334][T14892] netlink: 'syz.1.2448': attribute type 1 has an invalid length. [ 366.978685][T14895] netlink: 'syz.1.2448': attribute type 1 has an invalid length. [ 367.490785][ C1] ip6_tunnel:  xmit: Local address not yet configured! [ 367.625116][T14934] Cannot find del_set index 0 as target [ 367.639626][T14935] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 367.648729][ C1] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 368.074572][T14957] netlink: 'syz.7.2467': attribute type 1 has an invalid length. [ 368.233977][T14963] netlink: 28 bytes leftover after parsing attributes in process `syz.0.2468'. [ 368.278019][T14961] erspan0: entered promiscuous mode [ 368.318189][T14961] netlink: 8 bytes leftover after parsing attributes in process `syz.7.2469'. [ 368.329757][T14965] x_tables: duplicate underflow at hook 1 [ 368.337956][T14967] netlink: 8 bytes leftover after parsing attributes in process `syz.7.2469'. [ 368.359667][T14961] sctp: [Deprecated]: syz.7.2469 (pid 14961) Use of int in maxseg socket option. [ 368.359667][T14961] Use struct sctp_assoc_value instead [ 368.836671][T14981] syzkaller0: entered promiscuous mode [ 368.860621][T14981] syzkaller0: entered allmulticast mode [ 368.884341][T14973] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 369.092793][T14323] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 369.164640][T15005] netlink: 12 bytes leftover after parsing attributes in process `syz.7.2482'. [ 369.234854][T15007] netlink: 8 bytes leftover after parsing attributes in process `syz.0.2483'. [ 369.252797][ T808] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 369.517946][T15016] netlink: 16 bytes leftover after parsing attributes in process `syz.7.2486'. [ 369.678769][T15018] netlink: 40 bytes leftover after parsing attributes in process `syz.7.2487'. [ 369.692596][T15018] lo speed is unknown, defaulting to 1000 [ 369.698458][T15018] lo speed is unknown, defaulting to 1000 [ 369.705472][T15018] lo speed is unknown, defaulting to 1000 [ 369.712542][T15018] smbdirect: ib_dev[syú2]: added: RNIC max_fast_reg_page_list_len=256 device_cap_flags=0x200000 kernel_cap_flags=0x10 page_size_cap=0x1000 [ 369.733094][T15018] smbdirect: ib_dev[syú2]: num_ports=1 max_qp_rd_atom=128 max_qp_init_rd_atom=128 max_sgl_rd=0 max_sge_rd=1 max_cqe=3276800 max_qp_wr=32768 max_send_sge=6 max_recv_sge=6 [ 369.753022][T15018] smbdirect: ib_dev[syú2]PORT[1]: iwarp=1 ib=0 roce=0 v1=0 v2=0 core_cap_flags=0x400008 [ 369.784200][T15018] infiniband syú2: RDMA CMA: cma_listen_on_dev, error -98 [ 369.928058][T15018] lo speed is unknown, defaulting to 1000 [ 369.955382][T15018] lo speed is unknown, defaulting to 1000 [ 369.984582][T15018] lo speed is unknown, defaulting to 1000 [ 370.039732][T15018] lo speed is unknown, defaulting to 1000 [ 370.074009][T15018] lo speed is unknown, defaulting to 1000 [ 370.125277][T15018] lo speed is unknown, defaulting to 1000 [ 370.211640][T14323] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 370.292564][ T808] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 370.382442][T15018] lo speed is unknown, defaulting to 1000 [ 370.402541][T15018] lo speed is unknown, defaulting to 1000 [ 370.852700][T14372] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 371.331064][ T8929] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 371.491438][T14323] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 371.493750][ T9684] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 371.508158][ C1] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 372.373230][ T6455] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 372.758750][T15045] __nla_validate_parse: 2 callbacks suppressed [ 372.758772][T15045] netlink: 16 bytes leftover after parsing attributes in process `syz.0.2496'. [ 372.778421][T15047] Cannot find set identified by id 65534 to match [ 372.819346][T15045] netlink: 20 bytes leftover after parsing attributes in process `syz.0.2496'. [ 372.835946][T15054] bridge0: port 2(bridge_slave_1) entered disabled state [ 372.843707][T15054] bridge0: port 1(bridge_slave_0) entered disabled state [ 372.876271][T15059] netlink: 8 bytes leftover after parsing attributes in process `syz.0.2496'. [ 373.150842][T15045] syzkaller0: entered promiscuous mode [ 373.163742][T15045] syzkaller0: entered allmulticast mode [ 373.415136][ C0] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 373.425975][ T808] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 373.435509][ T6455] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 373.515734][T15090] netlink: 8 bytes leftover after parsing attributes in process `syz.1.2505'. [ 373.765052][T15094] netlink: 4 bytes leftover after parsing attributes in process `syz.0.2507'. [ 373.766863][T15095] netlink: 4 bytes leftover after parsing attributes in process `syz.0.2507'. [ 374.059917][T15083] bridge0: port 2(bridge_slave_1) entered disabled state [ 374.067716][T15083] bridge0: port 1(bridge_slave_0) entered disabled state [ 374.474153][ T8929] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 374.618892][T15083] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 374.656155][T15083] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 374.690775][ C1] ip6_tunnel: ip6tnl2 xmit: Local address not yet configured! [ 375.333639][T15094] netlink: 4 bytes leftover after parsing attributes in process `syz.0.2507'. [ 375.338807][T15095] netlink: 4 bytes leftover after parsing attributes in process `syz.0.2507'. [ 375.602185][T15111] x_tables: duplicate underflow at hook 1 [ 375.970931][ C1] ip6_tunnel:  xmit: Local address not yet configured! [ 376.091486][T15133] xt_TCPMSS: path-MTU clamping only supported in FORWARD, OUTPUT and POSTROUTING hooks [ 376.104958][T15133] xt_hashlimit: size too large, truncated to 1048576 [ 376.192216][T15135] netlink: 8 bytes leftover after parsing attributes in process `syz.5.2515'. [ 376.266615][T15136] netlink: 212348 bytes leftover after parsing attributes in process `syz.5.2515'. [ 376.457132][T14372] net_ratelimit: 1 callbacks suppressed [ 376.457152][T14372] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 376.543331][ T6455] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 377.261835][ T9680] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 377.270297][ C1] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 377.580818][ T6455] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 377.879298][ T1029] netdevsim netdevsim6 netdevsim0: unset [1, 0] type 2 family 0 port 6081 - 0 [ 377.973727][T15128] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check. [ 378.022930][ T1029] netdevsim netdevsim6 netdevsim1: unset [1, 0] type 2 family 0 port 6081 - 0 [ 378.066621][ T1029] netdevsim netdevsim6 netdevsim2: unset [1, 0] type 2 family 0 port 6081 - 0 [ 378.092746][T15140] netlink: 8 bytes leftover after parsing attributes in process `syz.1.2516'. [ 378.109661][T14323] lo speed is unknown, defaulting to 1000 [ 378.118477][ T1029] netdevsim netdevsim6 netdevsim3: unset [1, 0] type 2 family 0 port 6081 - 0 [ 378.148069][ T1029] netdevsim netdevsim0 netdevsim0: set [0, 0] type 1 family 0 port 8472 - 0 [ 378.165636][ T1029] netdevsim netdevsim0 netdevsim1: set [0, 0] type 1 family 0 port 8472 - 0 [ 378.199198][ T1029] netdevsim netdevsim0 netdevsim2: set [0, 0] type 1 family 0 port 8472 - 0 [ 378.731068][T15176] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 378.782562][T15176] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 378.842498][T15176] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 378.937173][T15176] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 379.046934][T15189] vet: renamed from veth0_vlan (while UP) [ 379.545146][T15209] netlink: 24 bytes leftover after parsing attributes in process `syz.0.2533'. [ 379.939604][T15222] netlink: 183120 bytes leftover after parsing attributes in process `syz.7.2535'. [ 380.037342][T15228] netlink: 12 bytes leftover after parsing attributes in process `syz.6.2537'. [ 380.527796][T15238] netlink: 12 bytes leftover after parsing attributes in process `syz.7.2541'. [ 380.600629][T15238] ipvlan2: entered allmulticast mode [ 380.627242][T15238] syz_tun: entered allmulticast mode [ 380.641755][T15244] netlink: 8 bytes leftover after parsing attributes in process `syz.1.2543'. [ 380.660761][T15244] netlink: 'syz.1.2543': attribute type 30 has an invalid length. [ 380.709284][T15244] netlink: 4 bytes leftover after parsing attributes in process `syz.1.2543'. [ 380.769238][T15245] netlink: 'syz.7.2541': attribute type 12 has an invalid length. [ 380.802165][T15245] netlink: 'syz.7.2541': attribute type 29 has an invalid length. [ 380.816458][T15245] netlink: 148 bytes leftover after parsing attributes in process `syz.7.2541'. [ 380.826051][T15245] netlink: 'syz.7.2541': attribute type 1 has an invalid length. [ 380.834013][T15245] netlink: 'syz.7.2541': attribute type 1 has an invalid length. [ 380.842317][T15245] netlink: 'syz.7.2541': attribute type 2 has an invalid length. [ 380.873193][T15250] netlink: 8 bytes leftover after parsing attributes in process `syz.0.2545'. [ 381.039930][T15254] netlink: 'syz.7.2547': attribute type 6 has an invalid length. [ 381.184706][T15260] syzkaller0: entered promiscuous mode [ 381.205967][T15260] syzkaller0: entered allmulticast mode [ 381.576970][T15279] net_ratelimit: 3 callbacks suppressed [ 381.576989][T15279] openvswitch: netlink: Invalid VLAN frame [ 381.765299][T15282] netlink: 8 bytes leftover after parsing attributes in process `syz.5.2555'. [ 381.922343][T15295] veth3: entered allmulticast mode [ 382.147503][T15306] x_tables: unsorted entry at hook 2 [ 382.182004][T15306] netlink: 'syz.0.2562': attribute type 61 has an invalid length. [ 382.373571][ T9662] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 382.382316][ C1] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 382.953814][T15340] tipc: Can't bind to reserved service type 2 [ 382.965850][T15340] sctp: [Deprecated]: syz.0.2570 (pid 15340) Use of struct sctp_assoc_value in delayed_ack socket option. [ 382.965850][T15340] Use struct sctp_sack_info instead [ 383.181180][T15353] netlink: 'syz.5.2575': attribute type 1 has an invalid length. [ 383.182312][T15357] netlink: 'syz.6.2574': attribute type 1 has an invalid length. [ 383.209366][T15353] __nla_validate_parse: 4 callbacks suppressed [ 383.209415][T15353] netlink: 244 bytes leftover after parsing attributes in process `syz.5.2575'. [ 383.980305][T15388] netlink: 'syz.5.2579': attribute type 11 has an invalid length. [ 385.961608][T15402] validate_nla: 47 callbacks suppressed [ 385.961630][T15402] netlink: 'syz.5.2584': attribute type 21 has an invalid length. [ 386.336594][T15425] netlink: 8 bytes leftover after parsing attributes in process `syz.0.2590'. [ 386.359763][T15425] netlink: 12 bytes leftover after parsing attributes in process `syz.0.2590'. [ 386.458105][T15431] netlink: 28 bytes leftover after parsing attributes in process `syz.1.2592'. [ 386.703597][T15444] netlink: 8 bytes leftover after parsing attributes in process `syz.0.2594'. [ 386.721915][T15444] netlink: 12 bytes leftover after parsing attributes in process `syz.0.2594'. [ 386.735824][T15445] netlink: 8 bytes leftover after parsing attributes in process `syz.1.2597'. [ 386.784217][T15445] netlink: 24 bytes leftover after parsing attributes in process `syz.1.2597'. [ 386.834171][T15445] netlink: 'syz.1.2597': attribute type 1 has an invalid length. [ 386.855478][T15449] bond1 (unregistering): Released all slaves [ 387.027619][T15457] netlink: 96 bytes leftover after parsing attributes in process `syz.5.2598'. [ 387.057031][T15457] netlink: 8 bytes leftover after parsing attributes in process `syz.5.2598'. [ 387.467060][T15436] Bluetooth: hci0: Opcode 0x0c03 failed: -4 [ 388.042915][T15465] Bluetooth: hci0: Opcode 0x0c03 failed: -4 [ 388.077834][T15508] netdevsim netdevsim5 : renamed from netdevsim0 (while UP) [ 388.131880][ T9684] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 388.140305][ C0] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 388.166157][T15515] netlink: 'syz.5.2615': attribute type 1 has an invalid length. [ 388.200356][T15515] netlink: 'syz.5.2615': attribute type 1 has an invalid length. [ 388.224495][T15515] netlink: 'syz.5.2615': attribute type 8 has an invalid length. [ 388.233426][T15515] __nla_validate_parse: 6 callbacks suppressed [ 388.233456][T15515] netlink: 586 bytes leftover after parsing attributes in process `syz.5.2615'. [ 388.252021][T15515] netlink: 1 bytes leftover after parsing attributes in process `syz.5.2615'. [ 388.311073][T15515] netlink: 28 bytes leftover after parsing attributes in process `syz.5.2615'. [ 388.672636][T15533] A link change request failed with some changes committed already. Interface geneve0 may have been left with an inconsistent configuration, please check. [ 388.915124][T15539] netlink: 'syz.1.2624': attribute type 2 has an invalid length. [ 388.923866][T15539] netlink: 'syz.1.2624': attribute type 8 has an invalid length. [ 388.959594][T15539] netlink: 132 bytes leftover after parsing attributes in process `syz.1.2624'. [ 389.277137][T15557] netlink: 20 bytes leftover after parsing attributes in process `syz.0.2629'. [ 389.365410][T15561] netlink: 'syz.6.2630': attribute type 10 has an invalid length. [ 389.389842][T15561] netlink: 228 bytes leftover after parsing attributes in process `syz.6.2630'. [ 389.692303][T15570] erspan0: entered promiscuous mode [ 389.709126][T15570] netlink: 8 bytes leftover after parsing attributes in process `syz.1.2633'. [ 389.927588][T15587] ±ÿª¨úrBº“: renamed from lo (while UP) [ 389.938559][T15588] netlink: 'syz.1.2640': attribute type 1 has an invalid length. [ 389.951182][T15588] netlink: 224 bytes leftover after parsing attributes in process `syz.1.2640'. [ 390.050643][ C1] ip6_tunnel: ip6tnl2 xmit: Local address not yet configured! [ 390.341843][T15609] netlink: 4 bytes leftover after parsing attributes in process `syz.1.2644'. [ 390.442207][T15611] netlink: 4 bytes leftover after parsing attributes in process `syz.0.2645'. [ 390.593420][T15611] : entered promiscuous mode [ 390.614030][T15628] ip6gre0: entered promiscuous mode [ 390.642616][T15628] ip6gre0: entered allmulticast mode [ 390.852750][ T5643] Bluetooth: hci5: command 0x0406 tx timeout [ 391.026009][T15647] IPv6: sit2: Disabled Multicast RS [ 391.443133][T15631] nci: __nci_request: wait_for_completion_interruptible_timeout failed -512 [ 391.935927][T15679] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 392.200916][T15697] vlan1: entered promiscuous mode [ 392.243452][T15697] bridge0: entered promiscuous mode [ 392.396084][T15713] openvswitch: netlink: Missing key (keys=40, expected=10000000) [ 392.640119][T15727] netlink: 'syz.7.2667': attribute type 3 has an invalid length. [ 393.253438][ C1] ip6_tunnel:  xmit: Local address not yet configured! [ 393.746056][T15773] SET target dimension over the limit! [ 393.778706][T15773] x_tables: ip6_tables: icmp6 match: only valid for protocol 58 [ 393.871510][T15773] vlan4: entered allmulticast mode [ 393.893283][ T9686] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 393.904827][ C1] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 393.915930][T15779] ip6t_rpfilter: unknown options [ 393.939568][T15780] __nla_validate_parse: 5 callbacks suppressed [ 393.939588][T15780] netlink: 16 bytes leftover after parsing attributes in process `syz.7.2683'. [ 394.030804][T15780] netlink: 32 bytes leftover after parsing attributes in process `syz.7.2683'. [ 394.191605][T15780] gretap1: entered promiscuous mode [ 394.240801][T15780] gretap1: entered allmulticast mode [ 394.493900][T15801] netlink: 8 bytes leftover after parsing attributes in process `syz.1.2690'. [ 394.656221][T15809] netlink: 'syz.5.2692': attribute type 1 has an invalid length. [ 394.684274][T15809] netlink: 224 bytes leftover after parsing attributes in process `syz.5.2692'. [ 395.243794][T15830] netlink: 12 bytes leftover after parsing attributes in process `syz.1.2698'. [ 395.302910][T15830] netlink: 4 bytes leftover after parsing attributes in process `syz.1.2698'. [ 395.344835][T15835] netlink: 56 bytes leftover after parsing attributes in process `syz.1.2698'. [ 395.395427][T15835] netlink: 12 bytes leftover after parsing attributes in process `syz.1.2698'. [ 395.472858][T15835] netlink: 31 bytes leftover after parsing attributes in process `syz.1.2698'. [ 395.510766][T15835] netlink: 'syz.1.2698': attribute type 2 has an invalid length. [ 395.535967][T15835] netlink: 31 bytes leftover after parsing attributes in process `syz.1.2698'. [ 395.816528][T15861] netlink: 'syz.1.2706': attribute type 2 has an invalid length. [ 395.907114][ C1] vcan0: j1939_tp_rxtimer: 0xffff888059354000: rx timeout, send abort [ 396.232869][T15874] bond16: option primary: mode dependency failed, not supported in mode balance-rr(0) [ 396.268820][T15874] bond16 (unregistering): Released all slaves [ 396.290903][ C0] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 396.300758][ C1] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 396.309170][ C1] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 396.317643][ C1] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 396.391357][T15884] netlink: 'syz.0.2715': attribute type 1 has an invalid length. [ 396.407263][ C1] vcan0: j1939_tp_rxtimer: 0xffff888059357000: rx timeout, send abort [ 396.415827][ C1] vcan0: j1939_tp_rxtimer: 0xffff888059354000: abort rx timeout. Force session deactivation [ 396.589772][T15884] bond12: entered promiscuous mode [ 396.595683][T15884] 8021q: adding VLAN 0 to HW filter on device bond12 [ 396.727110][T15900] bond12: (slave bridge10): making interface the new active one [ 396.758198][T15906] netlink: 'syz.5.2719': attribute type 178 has an invalid length. [ 396.761638][T15900] bridge10: entered promiscuous mode [ 396.832355][T15900] bridge10: left promiscuous mode [ 396.915568][ C1] vcan0: j1939_tp_rxtimer: 0xffff888059357000: abort rx timeout. Force session deactivation [ 396.936450][T15890] syzkaller1: entered promiscuous mode [ 396.943528][T15890] syzkaller1: entered allmulticast mode [ 396.954638][T15918] netlink: 'syz.7.2722': attribute type 1 has an invalid length. [ 397.222438][T15928] veth0_macvtap: entered allmulticast mode [ 397.245855][T15928] A link change request failed with some changes committed already. Interface veth0_macvtap may have been left with an inconsistent configuration, please check. [ 397.356708][ T9680] netdevsim netdevsim6 netdevsim0: set [0, 0] type 1 family 0 port 8472 - 0 [ 397.384767][ T9680] netdevsim netdevsim6 netdevsim1: set [0, 0] type 1 family 0 port 8472 - 0 [ 397.397687][ T9680] netdevsim netdevsim6 netdevsim2: set [0, 0] type 1 family 0 port 8472 - 0 [ 397.407116][ T9680] netdevsim netdevsim6 netdevsim3: set [0, 0] type 1 family 0 port 8472 - 0 [ 397.812623][T15943] vlan2: entered promiscuous mode [ 397.847577][T15943] gretap0: entered promiscuous mode [ 397.990036][T15948] bond0: (slave bond_slave_0): Releasing backup interface [ 397.998422][ T5643] Bluetooth: hci8: unexpected cc 0x0c03 length: 249 > 1 [ 398.013428][ T5643] Bluetooth: hci8: unexpected cc 0x1003 length: 249 > 9 [ 398.023159][ T5643] Bluetooth: hci8: unexpected cc 0x1001 length: 249 > 9 [ 398.039760][ T5643] Bluetooth: hci8: unexpected cc 0x0c23 length: 249 > 4 [ 398.049613][ T5643] Bluetooth: hci8: unexpected cc 0x0c38 length: 249 > 2 [ 398.319243][T15952] bond16: option lacp_active: mode dependency failed, not supported in mode balance-rr(0) [ 398.342822][T15952] bond16 (unregistering): Released all slaves [ 399.157915][T15991] __nla_validate_parse: 12 callbacks suppressed [ 399.157937][T15991] netlink: 4 bytes leftover after parsing attributes in process `syz.6.2740'. [ 399.194252][T15991] netlink: 4 bytes leftover after parsing attributes in process `syz.6.2740'. [ 399.342791][T15995] netlink: 24 bytes leftover after parsing attributes in process `syz.7.2742'. [ 399.421124][T15997] netlink: 'syz.6.2743': attribute type 3 has an invalid length. [ 399.429109][T15997] netlink: 224 bytes leftover after parsing attributes in process `syz.6.2743'. [ 399.465171][T15949] lo speed is unknown, defaulting to 1000 [ 399.476605][T15999] netlink: 256 bytes leftover after parsing attributes in process `syz.5.2741'. [ 399.652352][ T9662] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 399.660928][ C0] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 399.704390][T16007] netlink: 4 bytes leftover after parsing attributes in process `syz.7.2745'. [ 399.715137][T16007] openvswitch: netlink: EtherType 50a is less than min 600 [ 399.810976][ C0] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 399.959597][T16015] bridge1: entered promiscuous mode [ 399.971933][T16016] xt_time: invalid argument - start or stop time greater than 23:59:59 [ 399.980566][T16015] bridge1: entered allmulticast mode [ 400.131249][ T5641] Bluetooth: hci8: command tx timeout [ 400.280375][T16022] netlink: 76 bytes leftover after parsing attributes in process `syz.6.2749'. [ 400.462827][ T9686] netdevsim netdevsim0 netdevsim2 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 400.477089][ T9686] netdevsim netdevsim0 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 400.567234][T16032] macvlan0: entered promiscuous mode [ 400.584456][T15949] ±ÿª¨úrBº“ speed is unknown, defaulting to 1000 [ 400.592746][T16036] netlink: 'syz.1.2753': attribute type 1 has an invalid length. [ 400.739584][ T9686] netdevsim netdevsim0 netdevsim1 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 400.784196][ T9686] netdevsim netdevsim0 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 400.833219][T16046] netlink: 4 bytes leftover after parsing attributes in process `syz.6.2755'. [ 401.090859][ T5641] Bluetooth: hci6: command 0x040f tx timeout [ 401.123158][ T9686] netdevsim netdevsim0 netdevsim0 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 401.164681][ T9686] netdevsim netdevsim0 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 401.254360][T16054] netlink: 8 bytes leftover after parsing attributes in process `syz.6.2757'. [ 401.627557][T16065] syzkaller0: entered promiscuous mode [ 401.633891][T16065] syzkaller0: entered allmulticast mode [ 401.712059][T16071] IPVS: fo: UDP 224.0.0.2:0 - no destination available [ 401.721152][ T8935] IPVS: starting estimator thread 0... [ 401.841312][T16074] IPVS: using max 27 ests per chain, 64800 per kthread [ 402.211424][ T5643] Bluetooth: hci8: command tx timeout [ 402.264579][T16086] netlink: 36 bytes leftover after parsing attributes in process `syz.6.2764'. [ 404.300590][ T5643] Bluetooth: hci8: command tx timeout [ 404.694348][ T151] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 404.702770][ C1] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 404.797940][T16115] __nla_validate_parse: 2 callbacks suppressed [ 404.797961][T16115] netlink: 212368 bytes leftover after parsing attributes in process `syz.1.2769'. [ 405.081702][ T9686] bridge_slave_1: left allmulticast mode [ 405.118686][ T9686] bridge_slave_1: left promiscuous mode [ 405.152691][ T9686] bridge0: port 2(bridge_slave_1) entered disabled state [ 405.206783][ T9686] bridge_slave_0: left allmulticast mode [ 405.212659][ T9686] bridge_slave_0: left promiscuous mode [ 405.220964][ T9686] bridge0: port 1(bridge_slave_0) entered disabled state [ 405.396110][ T9686] pimreg: left allmulticast mode [ 405.450633][ C1] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 405.540764][ C1] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 405.926362][ T9686] erspan0 (unregistering): left promiscuous mode [ 406.021627][ T9686] gretap0 (unregistering): left promiscuous mode [ 406.327920][ T9686] bond7 (unregistering): (slave bridge4): Releasing active interface [ 406.370658][ T5643] Bluetooth: hci8: command tx timeout [ 406.607190][ T9686] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 406.617490][ T9686] bond_slave_0: left promiscuous mode [ 406.649210][ T9656] smbdirect: ib_dev[syz2] removed [ 406.656133][ T9686] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 406.666585][ T9686] bond_slave_1: left promiscuous mode [ 406.675317][ T9686] bond0 (unregistering): Released all slaves [ 406.707120][ T9686] bond1 (unregistering): (slave veth3): Releasing active interface [ 406.736632][ T9686] bond1 (unregistering): Released all slaves [ 406.755486][ T9686] bond2 (unregistering): Released all slaves [ 406.775941][ T9686] bond3 (unregistering): Released all slaves [ 406.794331][ T9686] bond4 (unregistering): Released all slaves [ 406.809620][ T9686] bond5 (unregistering): Released all slaves [ 406.829693][ T9686] bond6 (unregistering): Released all slaves [ 406.847227][ T9686] bond7 (unregistering): Released all slaves [ 406.865814][ T9686] bond8 (unregistering): Released all slaves [ 406.893984][ T9686] bond9 (unregistering): Released all slaves [ 406.911862][ T9686] bond10 (unregistering): (slave lo): Releasing backup interface [ 406.921585][ T9686] bond10 (unregistering): (slave lo): last VLAN challenged slave left bond - VLAN blocking is removed [ 406.936986][ T9686] bond10 (unregistering): Released all slaves [ 406.953887][ T9686] bond11 (unregistering): Released all slaves [ 406.971385][ T9686] bond12 (unregistering): Released all slaves [ 407.138080][ T5294] 8021q: adding VLAN 0 to HW filter on device eth1 [ 407.194816][ T808] lo speed is unknown, defaulting to 1000 [ 407.225005][ T808] sz1: Port: 1 Link DOWN [ 407.287386][T16159] netlink: 'syz.1.2778': attribute type 1 has an invalid length. [ 407.313115][T16159] netlink: 224 bytes leftover after parsing attributes in process `syz.1.2778'. [ 407.339350][ T808] lo speed is unknown, defaulting to 1000 [ 407.634301][ T9686] : left promiscuous mode [ 407.736516][T16170] netlink: 8 bytes leftover after parsing attributes in process `syz.1.2781'. [ 407.817585][T16166] netlink: 'syz.5.2779': attribute type 7 has an invalid length. [ 407.888035][ T9686] : left promiscuous mode [ 407.974984][ T31] INFO: task syz.3.1978:13057 blocked for more than 143 seconds. [ 407.984697][T15949] bridge0: port 1(bridge_slave_0) entered blocking state [ 408.005960][T16175] netlink: 8 bytes leftover after parsing attributes in process `syz.6.2782'. [ 408.014403][T15949] bridge0: port 1(bridge_slave_0) entered disabled state [ 408.025485][ T31] Not tainted syzkaller #0 [ 408.046483][ T31] "echo 0 > /proc/sys/kernel/hung_task_timeout_secs" disables this message. [ 408.061604][T15949] bridge_slave_0: entered allmulticast mode [ 408.068057][T16175] netlink: 8 bytes leftover after parsing attributes in process `syz.6.2782'. [ 408.093965][ T31] task:syz.3.1978 state:D stack:26880 pid:13057 tgid:13056 ppid:5632 task_flags:0x400140 flags:0x00080002 [ 408.111555][T15949] bridge_slave_0: entered promiscuous mode [ 408.134038][T15949] bridge0: port 2(bridge_slave_1) entered blocking state [ 408.144547][ T31] Call Trace: [ 408.152878][ T31] [ 408.157549][T15949] bridge0: port 2(bridge_slave_1) entered disabled state [ 408.166776][ T31] __schedule+0x1821/0x5740 [ 408.179894][ T31] ? __lock_acquire+0x6b5/0x2cf0 [ 408.188190][T16184] netlink: 8 bytes leftover after parsing attributes in process `syz.1.2784'. [ 408.201000][T15949] bridge_slave_1: entered allmulticast mode [ 408.224184][ T31] ? __pfx___schedule+0x10/0x10 [ 408.236758][T15949] bridge_slave_1: entered promiscuous mode [ 408.246057][ T31] ? schedule+0x90/0x360 [ 408.259066][ T31] schedule+0x164/0x360 [ 408.275023][ T31] schedule_preempt_disabled+0x13/0x30 [ 408.292997][ T31] __mutex_lock+0x7f7/0x1550 [ 408.305974][ T31] ? __mutex_lock+0x608/0x1550 [ 408.321686][ T31] ? nfsd_nl_version_get_doit+0x17c/0xc40 [ 408.344795][ T31] ? __pfx___mutex_lock+0x10/0x10 [ 408.364671][ T31] ? __nlmsg_put+0xef/0x1b0 [ 408.384464][ T31] ? genlmsg_put+0x137/0x2e0 [ 408.411821][ T31] nfsd_nl_version_get_doit+0x17c/0xc40 [ 408.431187][ T31] ? __nla_parse+0x40/0x60 [ 408.446416][ T31] ? __pfx_nfsd_nl_version_get_doit+0x10/0x10 [ 408.466230][ T31] ? genl_family_rcv_msg_attrs_parse+0x20b/0x2f0 [ 408.478454][ T31] ? genl_family_rcv_msg_attrs_parse+0x265/0x2f0 [ 408.499401][ T31] genl_family_rcv_msg_doit+0x22a/0x330 [ 408.516653][ T31] ? __asan_memcpy+0x40/0x70 [ 408.531777][ T31] ? __pfx_genl_family_rcv_msg_doit+0x10/0x10 [ 408.541447][ T31] ? __lock_acquire+0x6b5/0x2cf0 [ 408.546635][ T31] genl_rcv_msg+0x61c/0x7a0 [ 408.551688][ T31] ? __pfx_genl_rcv_msg+0x10/0x10 [ 408.556927][ T31] ? __pfx_nfsd_nl_version_get_doit+0x10/0x10 [ 408.563655][ T31] netlink_rcv_skb+0x232/0x4b0 [ 408.568676][ T31] ? __pfx_genl_rcv_msg+0x10/0x10 [ 408.589348][ T31] ? __pfx_netlink_rcv_skb+0x10/0x10 [ 408.612833][ T31] ? down_read+0x270/0x2e0 [ 408.636550][ T31] ? genl_rcv+0xd/0x40 [ 408.646623][ T31] genl_rcv+0x28/0x40 [ 408.660057][ T31] netlink_unicast+0x75c/0x8e0 [ 408.665614][ T31] netlink_sendmsg+0x813/0xb40 [ 408.671722][ T31] ? __pfx_netlink_sendmsg+0x10/0x10 [ 408.677194][ T31] ? aa_sock_msg_perm+0xf1/0x1b0 [ 408.683113][ T31] ? bpf_lsm_socket_sendmsg+0x9/0x20 [ 408.688610][ T31] ____sys_sendmsg+0x972/0x9f0 [ 408.695467][ T31] ? __might_fault+0xaf/0x130 [ 408.701674][ T31] ? __pfx_____sys_sendmsg+0x10/0x10 [ 408.707044][ T31] ? import_iovec+0x73/0xa0 [ 408.722103][ T31] ___sys_sendmsg+0x2a5/0x360 [ 408.739369][ T31] ? __lock_acquire+0x6b5/0x2cf0 [ 408.750807][ T31] ? __pfx____sys_sendmsg+0x10/0x10 [ 408.757088][ T31] ? futex_wake+0x4ac/0x580 [ 408.764624][ T31] ? __fget_files+0x2a/0x420 [ 408.769411][ T31] ? __fget_files+0x3a0/0x420 [ 408.789628][ T31] __x64_sys_sendmsg+0x1bd/0x2a0 [ 408.796370][ T31] ? __pfx___x64_sys_sendmsg+0x10/0x10 [ 408.804922][ T31] ? rcu_is_watching+0x15/0xb0 [ 408.809887][ T31] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 408.816642][ T31] do_syscall_64+0x174/0x580 [ 408.821902][ T31] ? trace_irq_disable+0x3b/0x140 [ 408.827014][ T31] ? clear_bhb_loop+0x40/0x90 [ 408.832396][ T31] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 408.838362][ T31] RIP: 0033:0x7f1225f9ce59 [ 408.843345][ T31] RSP: 002b:00007f1226e54028 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 408.855572][ T31] RAX: ffffffffffffffda RBX: 00007f1226215fa0 RCX: 00007f1225f9ce59 [ 408.865041][ T31] RDX: 0000000020000000 RSI: 0000200000000140 RDI: 0000000000000003 [ 408.873567][ T31] RBP: 00007f1226032d6f R08: 0000000000000000 R09: 0000000000000000 [ 408.881989][ T31] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 408.890027][ T31] R13: 00007f1226216038 R14: 00007f1226215fa0 R15: 00007ffeec13af68 [ 408.899764][ T31] [ 408.907517][ T31] [ 408.907517][ T31] Showing all locks held in the system: [ 408.921152][T16180] netlink: 40 bytes leftover after parsing attributes in process `syz.1.2784'. [ 408.930351][ T31] 3 locks held by kworker/1:1/29: [ 408.946929][T16180] netlink: 40 bytes leftover after parsing attributes in process `syz.1.2784'. [ 408.959920][ T31] #0: ffff88813fe43140 ((wq_completion)events){+.+.}-{0:0}, at: process_scheduled_works+0xa35/0x1860 [ 408.988111][ T31] #1: ffff8880b8724588 (psi_seq){-.-.}-{0:0}, at: psi_task_switch+0x53/0x880 [ 408.997587][T16184] workqueue: Failed to create a rescuer kthread for wq "bond16": -EINTR [ 409.057502][ T31] #2: ffffffff8e95cc80 (rcu_read_lock_bh){....}-{1:3}, at: wg_packet_tx_worker+0x24a/0x7c0 [ 409.106175][ T31] 1 lock held by khungtaskd/31: [ 409.112525][ T31] #0: ffffffff8e95cc20 (rcu_read_lock){....}-{1:3}, at: debug_show_all_locks+0x2e/0x180 [ 409.140740][ T31] 1 lock held by udevd/4999: [ 409.151058][ T31] 2 locks held by getty/5387: [ 409.160844][ T31] #0: ffff8880364c10a0 (&tty->ldisc_sem){++++}-{0:0}, at: tty_ldisc_ref_wait+0x25/0x70 [ 409.190824][ T31] #1: ffffc900032332e8 (&ldata->atomic_read_lock){+.+.}-{4:4}, at: n_tty_read+0x45c/0x13a0 [ 409.220607][ T31] 2 locks held by syz-executor/5630: [ 409.245641][ T31] #0: ffff8880b873b0e0 (&rq->__lock){-.-.}-{2:2}, at: raw_spin_rq_lock_nested+0x31/0x150 [ 409.266005][ T31] #1: ffff8880b8724588 (psi_seq){-.-.}-{0:0}, at: psi_task_switch+0x53/0x880 [ 409.275262][T15949] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 409.286975][ T31] 3 locks held by kworker/u8:22/9656: [ 409.305184][ T31] #0: ffff8880320de940 ((wq_completion)ipv6_addrconf){+.+.}-{0:0}, at: process_scheduled_works+0xa35/0x1860 [ 409.333101][T15949] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 409.353376][ T31] #1: ffff8880b8624588 (psi_seq){-.-.}-{0:0}, at: psi_task_switch+0x53/0x880 [ 409.376725][ T31] #2: ffff8880b8626118 (&base->lock){-.-.}-{2:2}, at: __mod_timer+0x1ae/0xf30 [ 409.391901][ T31] 4 locks held by kworker/u8:33/9686: [ 409.397435][ T31] #0: ffff88801be86140 ((wq_completion)netns){+.+.}-{0:0}, at: process_scheduled_works+0xa35/0x1860 [ 409.409536][T15949] team0: Port device team_slave_0 added [ 409.418033][ T31] #1: ffffc9001b94fc40 (net_cleanup_work){+.+.}-{0:0}, at: process_scheduled_works+0xa70/0x1860 [ 409.434047][T15949] team0: Port device team_slave_1 added [ 409.441884][ T31] #2: ffffffff8fdb9f28 (pernet_ops_rwsem){++++}-{4:4}, at: cleanup_net+0xf4/0x800 [ 409.462553][ T31] #3: ffffffff8e962f28 (rcu_state.exp_mutex){+.+.}-{4:4}, at: synchronize_rcu_expedited+0x2d0/0x770 [ 409.486280][ T31] 2 locks held by syz.2.1835/12590: [ 409.497536][ T31] #0: ffffffff8fe38628 (cb_lock){++++}-{4:4}, at: genl_rcv+0x19/0x40 [ 409.519132][ T31] #1: ffffffff8ec8b280 (nfsd_mutex){+.+.}-{4:4}, at: nfsd_nl_listener_set_doit+0x141/0x1670 [ 409.537595][ T31] 2 locks held by syz.3.1978/13057: [ 409.549620][ T31] #0: ffffffff8fe38628 (cb_lock){++++}-{4:4}, at: genl_rcv+0x19/0x40 [ 409.564123][T15949] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 409.566893][ T31] #1: [ 409.571149][T15949] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 409.571184][T15949] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 409.587498][T15949] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 409.623450][T15949] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 409.640298][ T31] ffffffff8ec8b280 (nfsd_mutex){+.+.}-{4:4}, at: nfsd_nl_version_get_doit+0x17c/0xc40 [ 409.693697][T15949] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 409.704519][ T31] 3 locks held by syz.4.2136/13633: [ 409.709783][ T31] #0: ffffffff8fe38628 (cb_lock){++++}-{4:4}, at: genl_rcv+0x19/0x40 [ 409.730056][ T31] #1: ffff888011e3a6e8 (nlk_cb_mutex-GENERIC){+.+.}-{4:4}, at: __netlink_dump_start+0xfe/0x7e0 [ 409.748707][ T31] #2: ffffffff8ec8b280 (nfsd_mutex){+.+.}-{4:4}, at: nfsd_nl_rpc_status_get_dumpit+0xdc/0x1410 [ 409.770761][ T31] 1 lock held by syz-executor/15949: [ 409.783981][ T31] 1 lock held by rm/16203: [ 409.795498][ T31] [ 409.797960][ T31] ============================================= [ 409.797960][ T31] [ 409.865446][ T31] NMI backtrace for cpu 1 [ 409.865471][ T31] CPU: 1 UID: 0 PID: 31 Comm: khungtaskd Not tainted syzkaller #0 PREEMPT(full) [ 409.865495][ T31] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 04/18/2026 [ 409.865508][ T31] Call Trace: [ 409.865517][ T31] [ 409.865527][ T31] dump_stack_lvl+0xe8/0x150 [ 409.865558][ T31] nmi_cpu_backtrace+0x274/0x2d0 [ 409.865588][ T31] ? __pfx_nmi_raise_cpu_backtrace+0x10/0x10 [ 409.865613][ T31] nmi_trigger_cpumask_backtrace+0x17a/0x300 [ 409.865646][ T31] sys_info+0x135/0x170 [ 409.865677][ T31] watchdog+0xfd3/0x1030 [ 409.865717][ T31] ? watchdog+0x1c9/0x1030 [ 409.865755][ T31] kthread+0x389/0x470 [ 409.865784][ T31] ? __pfx_watchdog+0x10/0x10 [ 409.865812][ T31] ? __pfx_kthread+0x10/0x10 [ 409.865842][ T31] ret_from_fork+0x514/0xb70 [ 409.865868][ T31] ? __pfx_ret_from_fork+0x10/0x10 [ 409.865891][ T31] ? __switch_to+0xc79/0x1410 [ 409.865926][ T31] ? __pfx_kthread+0x10/0x10 [ 409.865956][ T31] ret_from_fork_asm+0x1a/0x30 [ 409.865999][ T31] [ 409.866007][ T31] Sending NMI from CPU 1 to CPUs 0: [ 409.898525][ T9686] tipc: Left network mode [ 409.903444][ C0] NMI backtrace for cpu 0 [ 409.903460][ C0] CPU: 0 UID: 0 PID: 9686 Comm: kworker/u8:33 Not tainted syzkaller #0 PREEMPT(full) [ 409.903480][ C0] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 04/18/2026 [ 409.903493][ C0] Workqueue: netns cleanup_net [ 409.903524][ C0] RIP: 0010:io_serial_in+0x77/0xc0 [ 409.903554][ C0] Code: e8 be e3 80 fc 44 89 f9 d3 e3 49 83 c6 40 4c 89 f0 48 c1 e8 03 42 80 3c 20 00 74 08 4c 89 f7 e8 1f 3c ec fc 41 03 1e 89 da ec <0f> b6 c0 5b 41 5c 41 5e 41 5f c3 cc cc cc cc cc 44 89 f9 80 e1 07 [ 409.903571][ C0] RSP: 0018:ffffc9001b94f3b8 EFLAGS: 00000006 [ 409.903585][ C0] RAX: 1ffffffff34f1905 RBX: 00000000000003f9 RCX: 0000000000000000 [ 409.903597][ C0] RDX: 00000000000003f9 RSI: 0000000000000000 RDI: 0000000000000020 [ 409.903608][ C0] RBP: ffffc9001b94f550 R08: 0000000000000003 R09: 0000000000000004 [ 409.903620][ C0] R10: dffffc0000000000 R11: ffffffff8544d2a0 R12: dffffc0000000000 [ 409.903634][ C0] R13: dffffc0000000000 R14: ffffffff9a78cac0 R15: 0000000000000000 [ 409.903646][ C0] FS: 0000000000000000(0000) GS:ffff8881252a0000(0000) knlGS:0000000000000000 [ 409.903662][ C0] CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033 [ 409.903675][ C0] CR2: 00007f5688a4de9c CR3: 0000000032282000 CR4: 00000000003526f0 [ 409.903692][ C0] Call Trace: [ 409.903699][ C0] [ 409.903707][ C0] serial8250_console_write+0x540/0x1ba0 [ 409.903744][ C0] ? __pfx_serial8250_console_write+0x10/0x10 [ 409.903770][ C0] ? console_flush_all+0x123/0xb20 [ 409.903799][ C0] ? do_raw_spin_unlock+0xf5/0x210 [ 409.903825][ C0] ? console_flush_all+0x123/0xb20 [ 409.903850][ C0] console_flush_all+0x718/0xb20 [ 409.903877][ C0] ? console_flush_all+0x123/0xb20 [ 409.903904][ C0] ? __pfx_console_flush_all+0x10/0x10 [ 409.903932][ C0] ? is_printk_cpu_sync_owner+0x32/0x40 [ 409.903962][ C0] console_unlock+0xd1/0x1c0 [ 409.903984][ C0] ? vprintk_emit+0x2cf/0x560 [ 409.904006][ C0] ? __pfx_console_unlock+0x10/0x10 [ 409.904027][ C0] ? vprintk_emit+0x240/0x560 [ 409.904049][ C0] ? vprintk_emit+0x455/0x560 [ 409.904071][ C0] ? vprintk_emit+0x2cf/0x560 [ 409.904092][ C0] ? vprintk_emit+0x2cf/0x560 [ 409.904115][ C0] vprintk_emit+0x485/0x560 [ 409.904138][ C0] ? __pfx_vprintk_emit+0x10/0x10 [ 409.904173][ C0] ? __rtnl_unlock+0xc8/0xf0 [ 409.904194][ C0] _printk+0xdd/0x130 [ 409.904217][ C0] ? __pfx_netdev_run_todo+0x10/0x10 [ 409.904238][ C0] ? __pfx__printk+0x10/0x10 [ 409.904268][ C0] tipc_exit_net+0x3d/0x140 [ 409.904289][ C0] ops_undo_list+0x49f/0x940 [ 409.904317][ C0] ? __pfx_ops_undo_list+0x10/0x10 [ 409.904344][ C0] ? idr_destroy+0x227/0x290 [ 409.904373][ C0] cleanup_net+0x56b/0x800 [ 409.904399][ C0] ? __pfx_cleanup_net+0x10/0x10 [ 409.904428][ C0] ? process_scheduled_works+0xa70/0x1860 [ 409.904446][ C0] ? process_scheduled_works+0xa70/0x1860 [ 409.904465][ C0] process_scheduled_works+0xb5d/0x1860 [ 409.904500][ C0] ? __pfx_process_scheduled_works+0x10/0x10 [ 409.904521][ C0] ? assign_work+0x3d5/0x5e0 [ 409.904540][ C0] worker_thread+0xa53/0xfc0 [ 409.904573][ C0] kthread+0x389/0x470 [ 409.904595][ C0] ? __pfx_worker_thread+0x10/0x10 [ 409.904612][ C0] ? __pfx_kthread+0x10/0x10 [ 409.904636][ C0] ret_from_fork+0x514/0xb70 [ 409.904656][ C0] ? __pfx_ret_from_fork+0x10/0x10 [ 409.904675][ C0] ? __switch_to+0xc79/0x1410 [ 409.904701][ C0] ? __pfx_kthread+0x10/0x10 [ 409.904725][ C0] ret_from_fork_asm+0x1a/0x30 [ 409.904755][ C0] [ 410.042241][ T31] Kernel panic - not syncing: hung_task: blocked tasks [ 410.042325][ T31] CPU: 1 UID: 0 PID: 31 Comm: khungtaskd Not tainted syzkaller #0 PREEMPT(full) [ 410.042393][ T31] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 04/18/2026 [ 410.042422][ T31] Call Trace: [ 410.042431][ T31] [ 410.042442][ T31] vpanic+0x56c/0xa60 [ 410.042472][ T31] ? __pfx___schedule+0x10/0x10 [ 410.042505][ T31] ? __pfx_vpanic+0x10/0x10 [ 410.042539][ T31] panic+0xc5/0xd0 [ 410.042562][ T31] ? __pfx_panic+0x10/0x10 [ 410.042588][ T31] ? preempt_schedule_thunk+0x16/0x30 [ 410.042624][ T31] ? nmi_trigger_cpumask_backtrace+0x2bb/0x300 [ 410.042664][ T31] watchdog+0x102c/0x1030 [ 410.042703][ T31] ? watchdog+0x1c9/0x1030 [ 410.042741][ T31] kthread+0x389/0x470 [ 410.042769][ T31] ? __pfx_watchdog+0x10/0x10 [ 410.042798][ T31] ? __pfx_kthread+0x10/0x10 [ 410.042827][ T31] ret_from_fork+0x514/0xb70 [ 410.042853][ T31] ? __pfx_ret_from_fork+0x10/0x10 [ 410.425746][ T31] ? __switch_to+0xc79/0x1410 [ 410.430468][ T31] ? __pfx_kthread+0x10/0x10 [ 410.435204][ T31] ret_from_fork_asm+0x1a/0x30 [ 410.440016][ T31] [ 410.443746][ T31] Kernel Offset: disabled [ 410.448105][ T31] Rebooting in 86400 seconds..