last executing test programs: 5m12.304213154s ago: executing program 4 (id=1710): r0 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$DEVLINK_CMD_PORT_UNSPLIT(r0, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000480)={0x38, 0x0, 0x731, 0x0, 0x20, {0x38}, [{{@pci={{0x8}, {0x11}}, {0x8, 0x73, 0x2}}}]}, 0x38}, 0x1, 0x2}, 0x0) 5m12.160452892s ago: executing program 4 (id=1712): r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000200), 0xffffffffffffffff) sendmsg$NL80211_CMD_GET_WIPHY(r0, &(0x7f00000005c0)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000500)={0x24, r1, 0xf81, 0x0, 0x0, {{}, {@val={0x8, 0x1, 0x1000000}, @val={0x8}, @void}}}, 0x24}}, 0x0) r2 = socket$nl_route(0x10, 0x3, 0x0) r3 = socket$unix(0x1, 0x4, 0x0) ioctl$sock_SIOCGIFINDEX(r3, 0x8933, &(0x7f0000000440)={'ip6_vti0\x00'}) getpeername$unix(r3, &(0x7f0000000040), &(0x7f00000000c0)=0x6e) r4 = socket$nl_audit(0x10, 0x3, 0x9) sendmsg$AUDIT_MAKE_EQUIV(r4, &(0x7f00000002c0)={&(0x7f0000000100)={0x10, 0x0, 0x0, 0x4}, 0xc, &(0x7f0000000240)={&(0x7f00000001c0)={0x28, 0x3f7, 0x400, 0x70bd2a, 0x25dfdbfd, {0x7, 0x7, './file0', './file0'}, ["", "", "", "", "", "", "", "", "", ""]}, 0x28}, 0x1, 0x0, 0x0, 0x4001}, 0x0) r5 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX_80211(r5, 0x8933, &(0x7f0000000080)={'wlan1\x00', 0x0}) ioctl$XFS_IOC_PATH_TO_HANDLE(r4, 0xc0385869, &(0x7f0000000580)={r2, &(0x7f0000000480)='wlan1\x00', 0x280, &(0x7f00000004c0)={@_ha_fsid={[0xab, 0x10000]}, {0x5, 0x9, 0xf39, 0x1}}, 0x5bbdf686, &(0x7f0000000500), &(0x7f0000000540)=0x3}) r8 = socket$inet6(0xa, 0x5, 0x0) r9 = socket(0x2, 0x80805, 0x0) getsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX3(r9, 0x84, 0x6f, &(0x7f00000000c0)={0x0, 0x10, &(0x7f0000000080)=[@in={0x2, 0x0, @private=0xa010101}]}, &(0x7f0000000100)=0x10) getsockopt$inet_sctp_SCTP_GET_ASSOC_ID_LIST(r9, 0x84, 0x1d, &(0x7f0000000000)={0x1, [0x0]}, &(0x7f0000000040)=0x8) getsockopt$inet_sctp6_SCTP_STREAM_SCHEDULER(r8, 0x84, 0x7b, &(0x7f0000000140)={r10, 0x9}, &(0x7f00000001c0)=0x8) sendmsg$inet_sctp(r7, &(0x7f0000000800)={&(0x7f00000005c0)=@in6={0xa, 0x4e23, 0x1, @empty, 0x2000000}, 0x1c, &(0x7f0000000740)=[{&(0x7f0000000600)="508a7dadf92d966ef84fac8f008c5772044515ceaf04ee778ea723a6efc654151677ad95695e134522c6aa7d5a208a2b5f31fd23b9e0ec6e7d551a3da9e6e8479c4768c126df0ee952d790c9ceaf9058ff5e2bad5fea70a887d38a6bee08b8c34c0bc8e0456039b418f35ea04e7a8d312fa1c7fc636db190052435df68b15bb0dd74dd74962924f03775dda4d6c244790278ec3e96a50488e8682288ef56b5ebdc1f84b950472f6df675e5f59fab9f3bd81a62ff74c72adda424a4b59f095b04a3429dff1fb615713803815b8df26c9bb116e69433b48e88345446f7087a458b452d76d279", 0xe5}], 0x1, &(0x7f0000000780)=[@dstaddrv4={0x18, 0x84, 0x7, @rand_addr=0x64010100}, @dstaddrv6={0x20, 0x84, 0x8, @dev={0xfe, 0x80, '\x00', 0x14}}, @sndrcv={0x30, 0x84, 0x1, {0x9, 0xfffa, 0x0, 0xa, 0x400, 0x0, 0x5, 0x2, r10}}, @prinfo={0x18, 0x84, 0x5, {0x10, 0x2}}], 0x80, 0x8000}, 0x8814) r11 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000000), 0xffffffffffffffff) r12 = socket$alg(0x26, 0x5, 0x0) bind$alg(r12, &(0x7f00000003c0)={0x26, 'skcipher\x00', 0x0, 0x0, 'xts(serpent)\x00'}, 0x58) setsockopt$ALG_SET_KEY(r12, 0x117, 0x1, 0x0, 0x0) r13 = accept4(r12, 0x0, 0x0, 0x80000) syz_genetlink_get_family_id$fou(&(0x7f0000000040), r13) sendmsg$alg(r13, &(0x7f0000000380)={0x0, 0x0, 0x0, 0x0, &(0x7f0000000700)=[@op={0x18, 0x117, 0x3, 0x1}], 0x18, 0x80}, 0x4004080) r14 = syz_genetlink_get_family_id$tipc(0x0, 0xffffffffffffffff) sendmsg$TIPC_CMD_SET_LINK_WINDOW(r13, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000140)={0x34, r14, 0x2, 0x70bd26, 0x25dfdbfd, {{}, {}, {0x18, 0x18, {0x6fd9, @bearer=@l2={'ib', 0x3a, 'veth1_vlan\x00'}}}}}, 0x34}, 0x1, 0x0, 0x0, 0x40000}, 0x44004) sendmsg$NL80211_CMD_SET_CQM(r5, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000140)={0x48, r11, 0x1, 0x0, 0x0, {{}, {@val={0x8, 0x3, r6}, @val={0xc, 0x99, {0x7, 0x38}}}}, [@NL80211_ATTR_CQM={0x20, 0x5e, 0x0, 0x1, [@NL80211_ATTR_CQM_RSSI_LEVEL={0x8, 0x9, 0x5}, @NL80211_ATTR_CQM_RSSI_THOLD={0x4}, @NL80211_ATTR_CQM_RSSI_THRESHOLD_EVENT={0x8}, @NL80211_ATTR_CQM_TXE_PKTS={0x8, 0x6, 0x5}]}]}, 0x48}, 0x1, 0x0, 0x0, 0x4000000}, 0x0) sendmsg$nl_route(r2, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000340)=@newlink={0x44, 0x10, 0x44b, 0x0, 0x0, {0x7a}, [@IFLA_LINKINFO={0x24, 0x12, 0x0, 0x1, @bridge={{0xb}, {0x14, 0x2, 0x0, 0x1, [@IFLA_BR_MCAST_ROUTER={0x5, 0x16, 0x3}, @IFLA_BR_AGEING_TIME={0x8}]}}}]}, 0x44}, 0x1, 0x0, 0x0, 0x40000000}, 0x0) 5m11.274090119s ago: executing program 4 (id=1727): socket$nl_netfilter(0x10, 0x3, 0xc) bpf$MAP_CREATE(0x0, &(0x7f0000000300)=ANY=[@ANYBLOB="1b00000000000000000000000080"], 0x50) r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000140)={&(0x7f00000010c0)=@newlink={0x3c, 0x10, 0x403, 0x0, 0x0, {}, [@IFLA_LINKINFO={0x14, 0x12, 0x0, 0x1, @vlan={{0x9}, {0x4}}}, @IFLA_AF_SPEC={0x8, 0x1a, 0x0, 0x1, [@AF_MPLS={0x4}]}]}, 0x3c}}, 0x0) socket$igmp(0x2, 0x3, 0x2) socket$nl_generic(0x10, 0x3, 0x10) socket$nl_generic(0x10, 0x3, 0x10) socket$inet_udplite(0x2, 0x2, 0x88) socket$key(0xf, 0x3, 0x2) socket$key(0xf, 0x3, 0x2) socket$inet(0x10, 0x3, 0x0) r1 = socket$igmp(0x2, 0x3, 0x2) r2 = socket$nl_generic(0x10, 0x3, 0x10) r3 = socket(0xa, 0x3, 0x3a) setsockopt$MRT6_ADD_MFC_PROXY(r3, 0x29, 0xd2, &(0x7f0000000000)={{0xa, 0x4e24, 0x100, @local, 0x4}, {0xa, 0x4e23, 0x7, @empty, 0xd473}, 0x0, {[0x4, 0x7, 0x3, 0x8001, 0xe10, 0xe, 0x3]}}, 0x5c) socket$inet6(0xa, 0x80002, 0x0) r4 = socket$nl_generic(0x10, 0x3, 0x10) r5 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000040), 0xffffffffffffffff) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000500)={0x3, 0x4, &(0x7f0000000380)=@framed={{}, [@ldst={0x0, 0x0, 0x1, 0x0, 0x7}]}, &(0x7f0000000480)='GPL\x00'}, 0x90) ioctl$sock_SIOCGIFINDEX_80211(r1, 0x8933, &(0x7f0000000000)={'wlan0\x00', 0x0}) sendmsg$NL80211_CMD_FRAME(r2, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000400)=ANY=[@ANYBLOB='<\x00\x00\x00', @ANYRES16=r5, @ANYBLOB="010000000000000000003b00000008000300", @ANYRES32=r6, @ANYBLOB="1f003300d000000008021100000108021100000050505050505000001502", @ANYRES8=r4], 0x3c}, 0x1, 0x0, 0x0, 0x4008840}, 0x10) bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000880)={&(0x7f00000012c0)={{0xeb9f, 0x1, 0x0, 0x18, 0x0, 0x14, 0x14, 0x2, [@enum={0x0, 0x1, 0x0, 0x6, 0x4, [{0xfffffe}]}]}}, 0x0, 0x2e, 0x0, 0x1}, 0x28) 5m11.069054593s ago: executing program 4 (id=1732): r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000600)=ANY=[@ANYBLOB="4c00000010004b0422000000000000007a000000", @ANYRES32=0x0, @ANYBLOB="00000000000000002c0012800b00010062726964676500001c00028008000400000000000800150000000000050016"], 0x4c}}, 0x0) sendmmsg$inet(r0, &(0x7f0000005200)=[{{0x0, 0x4b, &(0x7f0000000000), 0x1}}], 0x1, 0x0) bind$tipc(0xffffffffffffffff, 0x0, 0x0) socket$nl_route(0x10, 0x3, 0x0) (async) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000600)=ANY=[@ANYBLOB="4c00000010004b0422000000000000007a000000", @ANYRES32=0x0, @ANYBLOB="00000000000000002c0012800b00010062726964676500001c00028008000400000000000800150000000000050016"], 0x4c}}, 0x0) (async) sendmmsg$inet(r0, &(0x7f0000005200)=[{{0x0, 0x4b, &(0x7f0000000000), 0x1}}], 0x1, 0x0) (async) bind$tipc(0xffffffffffffffff, 0x0, 0x0) (async) 5m10.909116155s ago: executing program 4 (id=1735): r0 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000), 0x200002, 0x0) r1 = socket(0x10, 0x3, 0x0) getsockopt$sock_linger(r1, 0x1, 0x4b, 0x0, &(0x7f0000000240)) unshare(0x4000400) r2 = syz_init_net_socket$nfc_raw(0x27, 0x3, 0x0) bind$rds(r2, 0x0, 0x0) r3 = openat$cgroup_ro(r0, &(0x7f0000000240)='freezer.parent_freezing\x00', 0x0, 0x0) preadv(r3, &(0x7f0000000180)=[{&(0x7f0000000340)=""/134, 0x86}], 0x1, 0x2, 0x0) r4 = socket$inet6_sctp(0xa, 0x5, 0x84) shutdown(r4, 0x0) setsockopt$inet_sctp6_SCTP_EVENTS(r4, 0x84, 0xb, &(0x7f0000000040)={0x8, 0x2, 0x4, 0xe, 0x5, 0x5, 0x0, 0xb7, 0x4, 0x2, 0x8, 0x4, 0xf4}, 0xe) getsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX3(r4, 0x84, 0x6f, &(0x7f0000000000)={0x0, 0x10, &(0x7f00000002c0)=[@in={0x2, 0x0, @local}]}, &(0x7f0000000440)=0x10) getsockopt$inet_sctp6_SCTP_RTOINFO(r4, 0x84, 0x0, &(0x7f0000000080)={r5, 0x9, 0x200, 0x5}, &(0x7f0000000100)=0x10) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000000)={0x10, 0x1a, &(0x7f0000000200)=@ringbuf={{0x18, 0x0, 0x0, 0x0, 0x80000000, 0x0, 0x0, 0x0, 0xe}, {}, {}, [@ringbuf_output={{0x18, 0x1, 0x1, 0x0, r3}, {0x7, 0x0, 0xb, 0x8, 0x0, 0x0, 0x6}, {}, {}, {}, {}, {0x7, 0x0, 0xb, 0x4, 0x0, 0x0, 0x7e59ad35abc919ba}}, @alu={0x4, 0x0, 0x4, 0x6, 0xb, 0x10, 0x8}, @call={0x85, 0x0, 0x0, 0x5e}], {{}, {0x7, 0x0, 0xb, 0x2, 0x0, 0x0, 0x1}}}, &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0xd, r3, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x4}, 0x94) 5m10.671969119s ago: executing program 4 (id=1739): r0 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000001ac0)={&(0x7f0000000240)={0x14, 0x26, 0x1, 0xf0bd26, 0x25dfdbfc, {0x6}}, 0x14}, 0x1, 0x0, 0x0, 0x4000d}, 0x20048000) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000080), r0) sendmsg$NL80211_CMD_GET_SURVEY(r0, &(0x7f0000000140)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x10}, 0xc, &(0x7f0000000100)={&(0x7f00000000c0)={0x1c, r1, 0x400, 0x70bd25, 0x25dfdbfd, {{}, {@val={0x8}, @void}}, ["", "", "", "", "", ""]}, 0x1c}, 0x1, 0x0, 0x0, 0x4050}, 0x9040) r2 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$DEVLINK_CMD_PORT_SET(r2, &(0x7f00000002c0)={&(0x7f0000000180)={0x10, 0x0, 0x0, 0x1}, 0xc, &(0x7f0000000280)={&(0x7f00000001c0)={0x70, 0x0, 0x100, 0x70bd2c, 0x25dfdbfc, {}, [{{@pci={{0x8}, {0x11}}, {0x8}}, {0x6, 0x4, 0x1}}, {{@nsim={{0xe}, {0xf, 0x2, {'netdevsim', 0x0}}}, {0x8, 0x3, 0x2}}, {0x6}}]}, 0x70}, 0x1, 0x0, 0x0, 0x44000}, 0x4010) 4m55.587998244s ago: executing program 32 (id=1739): r0 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000001ac0)={&(0x7f0000000240)={0x14, 0x26, 0x1, 0xf0bd26, 0x25dfdbfc, {0x6}}, 0x14}, 0x1, 0x0, 0x0, 0x4000d}, 0x20048000) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000080), r0) sendmsg$NL80211_CMD_GET_SURVEY(r0, &(0x7f0000000140)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x10}, 0xc, &(0x7f0000000100)={&(0x7f00000000c0)={0x1c, r1, 0x400, 0x70bd25, 0x25dfdbfd, {{}, {@val={0x8}, @void}}, ["", "", "", "", "", ""]}, 0x1c}, 0x1, 0x0, 0x0, 0x4050}, 0x9040) r2 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$DEVLINK_CMD_PORT_SET(r2, &(0x7f00000002c0)={&(0x7f0000000180)={0x10, 0x0, 0x0, 0x1}, 0xc, &(0x7f0000000280)={&(0x7f00000001c0)={0x70, 0x0, 0x100, 0x70bd2c, 0x25dfdbfc, {}, [{{@pci={{0x8}, {0x11}}, {0x8}}, {0x6, 0x4, 0x1}}, {{@nsim={{0xe}, {0xf, 0x2, {'netdevsim', 0x0}}}, {0x8, 0x3, 0x2}}, {0x6}}]}, 0x70}, 0x1, 0x0, 0x0, 0x44000}, 0x4010) 4m39.020883301s ago: executing program 3 (id=2151): socket$nl_generic(0x10, 0x3, 0x10) (async) r0 = socket$nl_generic(0x10, 0x3, 0x10) bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000300)={&(0x7f0000000380)=ANY=[@ANYBLOB="9fa8892f4a4fa1669d0000000000000000000000020000000000"], 0x0, 0x1a, 0x0, 0x1}, 0x28) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000240)={0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffd}, 0x50) r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='cpuacct.stat\x00', 0x275a, 0x0) write$cgroup_subtree(r1, &(0x7f0000000080)=ANY=[], 0x10448) mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x2000001, 0x12, r1, 0x0) r2 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='memory.events\x00', 0x275a, 0x0) write$cgroup_subtree(r2, &(0x7f0000000100)=ANY=[], 0x32600) (async) write$cgroup_subtree(r2, &(0x7f0000000100)=ANY=[], 0x32600) socket$nl_route(0x10, 0x3, 0x0) (async) r3 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r3, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000180)=ANY=[@ANYBLOB="280000006d000100"/20, @ANYRES32=0x0, @ANYBLOB="27000000000008000800049ab557ce7baad39bcd20b98df401f7bc2f", @ANYRES32=0x0, @ANYBLOB], 0x28}}, 0x0) (async) sendmsg$nl_route(r3, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000180)=ANY=[@ANYBLOB="280000006d000100"/20, @ANYRES32=0x0, @ANYBLOB="27000000000008000800049ab557ce7baad39bcd20b98df401f7bc2f", @ANYRES32=0x0, @ANYBLOB], 0x28}}, 0x0) mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x2000001, 0x12, r2, 0x70e3d000) r4 = socket$inet6_sctp(0xa, 0x5, 0x84) getsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX3(r4, 0x84, 0x6f, &(0x7f0000003a80)={0x0, 0x10, &(0x7f0000003980)=[@in={0x2, 0x4e21, @loopback}]}, &(0x7f0000003ac0)=0x10) getsockopt$inet_sctp6_SCTP_PR_ASSOC_STATUS(r4, 0x84, 0x6d, &(0x7f0000000080)={0x0, 0xffff}, &(0x7f0000000200)=0x18) mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000)='./cgroup.cpu/syz0\x00', 0x1ff) r5 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000), 0x200002, 0x0) r6 = openat$cgroup_int(r5, &(0x7f00000000c0)='hugetlb.1GB.failcnt\x00', 0x2, 0x0) sendfile(r6, r6, 0x0, 0x1) (async) sendfile(r6, r6, 0x0, 0x1) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f0000000480)={'wlan0\x00', 0x0}) r8 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000200), r0) r9 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_CREATE(r9, &(0x7f0000000040)={0x0, 0x0, &(0x7f00000044c0)={&(0x7f0000000080)=ANY=[@ANYBLOB="500000100206010800000000000000000000000005000100060000000500050000000000050004092dfda4757914300000000015000300686173683a69702c706f72172c6e657400000000"], 0x50}}, 0x0) (async) sendmsg$IPSET_CMD_CREATE(r9, &(0x7f0000000040)={0x0, 0x0, &(0x7f00000044c0)={&(0x7f0000000080)=ANY=[@ANYBLOB="500000100206010800000000000000000000000005000100060000000500050000000000050004092dfda4757914300000000015000300686173683a69702c706f72172c6e657400000000"], 0x50}}, 0x0) socket$inet_sctp(0x2, 0x5, 0x84) (async) r10 = socket$inet_sctp(0x2, 0x5, 0x84) setsockopt$IP6T_SO_SET_ADD_COUNTERS(0xffffffffffffffff, 0x29, 0x41, &(0x7f0000000240)=ANY=[@ANYBLOB="72617700000100000000000000000000000000000000000000000000000000000200000000000000000000000000000000000000000000f41f7e10d55aedef3515c770039ee77c00"], 0x48) (async) setsockopt$IP6T_SO_SET_ADD_COUNTERS(0xffffffffffffffff, 0x29, 0x41, &(0x7f0000000240)=ANY=[@ANYBLOB="72617700000100000000000000000000000000000000000000000000000000000200000000000000000000000000000000000000000000f41f7e10d55aedef3515c770039ee77c00"], 0x48) socketpair$nbd(0x1, 0x1, 0x0, &(0x7f00000001c0)) (async) socketpair$nbd(0x1, 0x1, 0x0, &(0x7f00000001c0)) setsockopt$inet_sctp_SCTP_PARTIAL_DELIVERY_POINT(r10, 0x84, 0x13, &(0x7f0000000300)=0x80000001, 0x4) sendmsg$NL80211_CMD_REMAIN_ON_CHANNEL(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000000)=ANY=[@ANYBLOB='\x00\x00\x00\x00', @ANYRES16=r8, @ANYBLOB="01004c58000000000000000000000000df000000a92464ef05dc1c2b507926f9395173a58365a08edc5d6d48b0a115", @ANYRES32=r7, @ANYRES8=r7], 0x2c}}, 0x4004000) sendmsg$NL80211_CMD_SET_TX_BITRATE_MASK(r0, &(0x7f0000000140)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x200000}, 0xc, &(0x7f00000000c0)={&(0x7f00000004c0)=ANY=[@ANYBLOB="0900000060c10fc21b0c32df76100c8366f44413702331b0494eee6894b497d6857187d73f4100254a5a5f6c23a6febfc150cae74b7fe037f96a457336de295eaa", @ANYRES16=r8, @ANYBLOB="00012cbd7000fbdbdf253900000008000300", @ANYRES32=r7, @ANYBLOB="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"], 0x21c}, 0x1, 0x0, 0x0, 0x2}, 0x220c88c0) r11 = openat$tun(0xffffffffffffff9c, &(0x7f0000000100), 0x0, 0x0) ioctl$TUNSETIFF(r11, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x2}) (async) ioctl$TUNSETIFF(r11, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x2}) 4m37.925310964s ago: executing program 3 (id=2160): bpf$PROG_LOAD(0x5, &(0x7f0000000340)={0x4, 0x5, &(0x7f0000000240)=ANY=[@ANYBLOB="18020000000000000000000000020000850000008c000000850000000700000095"], &(0x7f0000000000)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x2c, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r0 = socket$inet6_sctp(0xa, 0x1, 0x84) setsockopt$inet_sctp6_SCTP_PEER_ADDR_PARAMS(r0, 0x84, 0x9, &(0x7f0000000580)={0x0, @in={{0x2, 0x0, @empty}}, 0x0, 0x0, 0x3fc, 0x0, 0xd2}, 0x9c) bind$inet6(r0, &(0x7f0000000300)={0xa, 0x4e23, 0x0, @loopback, 0x3}, 0x7e) r1 = socket$inet_sctp(0x2, 0x1, 0x84) sendto$inet(r1, &(0x7f0000000100)="ab", 0x34000, 0x4004815, &(0x7f00000000c0)={0x2, 0x4e22, @local}, 0x10) bpf$PROG_LOAD(0x5, &(0x7f0000000800)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32, @ANYBLOB="0000000000000000b70800000d0000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000100000095"], 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x37, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x80000000}, 0x94) r2 = bpf$MAP_CREATE(0x0, &(0x7f0000000740)=ANY=[@ANYBLOB="0b00000005000000000400000900000001"], 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000005c0)={0xa, 0x4, &(0x7f0000000480)=ANY=[@ANYBLOB="18000000000000000000000000000000850000006d"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r3 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r3, &(0x7f00000007c0)={0x0, 0x0, &(0x7f0000000780)={&(0x7f0000000740)=@bridge_getvlan={0x18, 0x68, 0x1}, 0x18}}, 0x0) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000d80)={0x18, 0x5, &(0x7f0000000480)=ANY=[@ANYBLOB="1801000021"], 0x0, 0x40, 0x0, 0x0, 0x0, 0xb4a02fe0ce239f93, '\x00', 0x0, 0x2}, 0x94) bpf$PROG_LOAD(0x5, &(0x7f0000000500)={0xe, 0x0, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000800000000000000000000018110000", @ANYRES32=r2], 0x0, 0x0, 0x0, 0x0, 0x0, 0x59, '\x00', 0x0, @fallback=0x13, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r4 = bpf$PROG_LOAD(0x5, &(0x7f0000000300)={0x6, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, @fallback=0x4, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000000)={r4, 0x2000000, 0xe, 0x0, &(0x7f00000004c0)="630b008646dc3f0adf33c9f7b986", 0x0, 0x1ff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x20}, 0x50) socket$inet6_sctp(0xa, 0x5, 0x84) socket$inet6_sctp(0xa, 0x5, 0x84) sendto$inet6(r0, &(0x7f0000847fff)='X', 0x1, 0xe0, &(0x7f000005ffe4)={0xa, 0x4e23, 0x9, @loopback}, 0x1c) setsockopt$inet_sctp6_SCTP_PEER_ADDR_PARAMS(r0, 0x84, 0x9, &(0x7f0000000a00)={0x0, @in6={{0xa, 0x4e23, 0x2, @loopback, 0xfffffffd}}, 0x0, 0x0, 0x300, 0x0, 0x54, 0x6}, 0x9c) bpf$PROG_LOAD(0x5, &(0x7f0000000340)={0x4, 0x5, &(0x7f0000000240)=ANY=[@ANYBLOB="18020000000000000000000000020000850000008c000000850000000700000095"], &(0x7f0000000000)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x2c, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) (async) socket$inet6_sctp(0xa, 0x1, 0x84) (async) setsockopt$inet_sctp6_SCTP_PEER_ADDR_PARAMS(r0, 0x84, 0x9, &(0x7f0000000580)={0x0, @in={{0x2, 0x0, @empty}}, 0x0, 0x0, 0x3fc, 0x0, 0xd2}, 0x9c) (async) bind$inet6(r0, &(0x7f0000000300)={0xa, 0x4e23, 0x0, @loopback, 0x3}, 0x7e) (async) socket$inet_sctp(0x2, 0x1, 0x84) (async) sendto$inet(r1, &(0x7f0000000100)="ab", 0x34000, 0x4004815, &(0x7f00000000c0)={0x2, 0x4e22, @local}, 0x10) (async) bpf$PROG_LOAD(0x5, &(0x7f0000000800)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32, @ANYBLOB="0000000000000000b70800000d0000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000100000095"], 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x37, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x80000000}, 0x94) (async) bpf$MAP_CREATE(0x0, &(0x7f0000000740)=ANY=[@ANYBLOB="0b00000005000000000400000900000001"], 0x48) (async) bpf$PROG_LOAD(0x5, &(0x7f00000005c0)={0xa, 0x4, &(0x7f0000000480)=ANY=[@ANYBLOB="18000000000000000000000000000000850000006d"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) (async) socket$nl_route(0x10, 0x3, 0x0) (async) sendmsg$nl_route(r3, &(0x7f00000007c0)={0x0, 0x0, &(0x7f0000000780)={&(0x7f0000000740)=@bridge_getvlan={0x18, 0x68, 0x1}, 0x18}}, 0x0) (async) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000d80)={0x18, 0x5, &(0x7f0000000480)=ANY=[@ANYBLOB="1801000021"], 0x0, 0x40, 0x0, 0x0, 0x0, 0xb4a02fe0ce239f93, '\x00', 0x0, 0x2}, 0x94) (async) bpf$PROG_LOAD(0x5, &(0x7f0000000500)={0xe, 0x0, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000800000000000000000000018110000", @ANYRES32=r2], 0x0, 0x0, 0x0, 0x0, 0x0, 0x59, '\x00', 0x0, @fallback=0x13, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) (async) bpf$PROG_LOAD(0x5, &(0x7f0000000300)={0x6, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, @fallback=0x4, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) (async) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000000)={r4, 0x2000000, 0xe, 0x0, &(0x7f00000004c0)="630b008646dc3f0adf33c9f7b986", 0x0, 0x1ff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x20}, 0x50) (async) socket$inet6_sctp(0xa, 0x5, 0x84) (async) socket$inet6_sctp(0xa, 0x5, 0x84) (async) sendto$inet6(r0, &(0x7f0000847fff)='X', 0x1, 0xe0, &(0x7f000005ffe4)={0xa, 0x4e23, 0x9, @loopback}, 0x1c) (async) setsockopt$inet_sctp6_SCTP_PEER_ADDR_PARAMS(r0, 0x84, 0x9, &(0x7f0000000a00)={0x0, @in6={{0xa, 0x4e23, 0x2, @loopback, 0xfffffffd}}, 0x0, 0x0, 0x300, 0x0, 0x54, 0x6}, 0x9c) (async) 4m37.66919522s ago: executing program 3 (id=2162): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) (async) r1 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r1, &(0x7f000000c2c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f00000002c0)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a28000000000a0101000000005e1affd5021900000900010073797a300000000008000240000000032c000000030a01030000e6ff00000000020000000900010073797a30000000000900030073797a320000000014000000110001"], 0x7c}}, 0x0) (async, rerun: 64) sendmsg$NFT_BATCH(r1, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000340)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a6c000000060a09040000000000000000020000000900020073797a32000000000900010073797a3000000000400004803c0001800b00010065787468647200002c00028008000740000000000500020000000000080003400000004a08000640000000010800044000000002140000001100010000000000000000000000000a72dcd551611c08c6cd48a0bc2492e5f2de"], 0x94}}, 0x0) (async, rerun: 64) sendmsg$NFT_BATCH(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000180)={{0x14}, [@NFT_MSG_NEWTABLE={0x20, 0x0, 0xa, 0x5, 0x0, 0x0, {0x1}, [@NFTA_TABLE_NAME={0x9, 0x1, 'syz0\x00'}]}, @NFT_MSG_NEWCHAIN={0x2c, 0x3, 0xa, 0x201, 0x0, 0x0, {0x1}, [@NFTA_CHAIN_TABLE={0x9, 0x1, 'syz0\x00'}, @NFTA_CHAIN_NAME={0x9, 0x3, 'syz0\x00'}]}, @NFT_MSG_NEWRULE={0x60, 0x6, 0xa, 0x401, 0x0, 0x0, {0x1}, [@NFTA_RULE_CHAIN_ID={0x8}, @NFTA_RULE_EXPRESSIONS={0x38, 0x4, 0x0, 0x1, [{0x34, 0x1, 0x0, 0x1, @match={{0xa}, @val={0x24, 0x2, 0x0, 0x1, [@NFTA_MATCH_INFO={0x8, 0x3, "e4edf2b7"}, @NFTA_MATCH_REV={0x8}, @NFTA_MATCH_NAME={0xe, 0x1, 'connlabel\x00'}]}}}]}, @NFTA_RULE_TABLE={0x9, 0x1, 'syz0\x00'}]}], {0x14}}, 0xd4}}, 0x0) 4m37.389850624s ago: executing program 3 (id=2167): r0 = openat$nci(0xffffffffffffff9c, &(0x7f0000000240), 0x2, 0x0) r1 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r2 = syz_genetlink_get_family_id$nfc(&(0x7f0000000100), r1) ioctl$IOCTL_GET_NCIDEV_IDX(r0, 0x0, &(0x7f00000000c0)=0x0) sendmsg$NFC_CMD_DEV_UP(r1, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000180)={&(0x7f00000002c0)=ANY=[@ANYBLOB="1c000000", @ANYRES16=r2, @ANYBLOB="010026bd7000fcdbdf250200000008000100", @ANYRES32=r3], 0x1c}}, 0x840) sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f00000003c0)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000340)=ANY=[@ANYBLOB="934c79239b1ca111e9b20887430c42a8100b573402b970985b", @ANYRES64=r3, @ANYRESHEX=r3, @ANYRESDEC, @ANYRES8=r2, @ANYRESOCT=r2], 0x7c}, 0x1, 0x0, 0x0, 0x4000}, 0x1) write$nci(r0, &(0x7f0000000280)=ANY=[@ANYBLOB="4005"], 0x7) r4 = socket$nl_generic(0x10, 0x3, 0x10) r5 = syz_genetlink_get_family_id$tipc2(&(0x7f0000000040), 0xffffffffffffffff) r6 = socket$nl_netfilter(0x10, 0x3, 0xc) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000600)={0x6, 0x7, &(0x7f0000000000)=@framed={{}, [@jmp={0x6, 0x0, 0xc, 0x0, 0x0, 0x1, 0x25}, @func={0x85, 0x0, 0x1, 0x0, 0x1}, @exit, @call={0x85, 0x0, 0x0, 0xaa}]}, &(0x7f0000000100)='GPL\x00', 0x5}, 0x90) sendmsg$IPSET_CMD_CREATE(r6, &(0x7f0000001080)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000000)={0x60, 0x2, 0x6, 0x1, 0x6000000, 0x0, {}, [@IPSET_ATTR_TYPENAME={0xe, 0x3, 'bitmap:ip\x00'}, @IPSET_ATTR_REVISION={0x5}, @IPSET_ATTR_SETNAME={0x9, 0x2, 'syz0\x00'}, @IPSET_ATTR_DATA={0x18, 0x7, 0x0, 0x1, [@IPSET_ATTR_CADT_FLAGS={0x8}, @IPSET_ATTR_IP={0xc, 0x1, 0x0, 0x1, @IPSET_ATTR_IPADDR_IPV4={0x8, 0x1, 0x1, 0x0, @empty=0xe0000000}}]}, @IPSET_ATTR_FAMILY={0x5, 0x5, 0x2}, @IPSET_ATTR_PROTOCOL={0x5, 0x1, 0x6}]}, 0x60}}, 0x0) sendmsg$TIPC_NL_MON_SET(r4, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000140)={&(0x7f00000001c0)=ANY=[@ANYBLOB="03000000df4455bce549000000000000000200005e48a14828130aa40984864e9b", @ANYRES16=r5, @ANYBLOB="010028bd7000000000001100000004000980"], 0x18}, 0x1, 0x0, 0x0, 0x240280d0}, 0x2000c890) 4m34.248918451s ago: executing program 3 (id=2188): r0 = socket(0x1, 0x3, 0x0) bind$unix(r0, &(0x7f00000001c0)=@file={0x1, './file0\x00'}, 0x6e) sendmmsg$unix(r0, &(0x7f0000002100)=[{{&(0x7f0000000280)=@file={0x1, './file0\x00'}, 0x6e, 0x0, 0x0, 0x0, 0x0, 0x20000000}}], 0x1, 0x0) setsockopt$MRT_ADD_MFC_PROXY(0xffffffffffffffff, 0x0, 0xd2, &(0x7f0000000000)={@remote, @multicast1, 0x4, "d30f388c52647612d91de4353d68b0fa00", 0x0, 0x0, 0x4000000, 0x8}, 0x3c) r1 = bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000140)={0x6, 0x3, &(0x7f0000000680)=ANY=[@ANYBLOB="1800000002000000000000000000000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x1007f}, 0x94) write$cgroup_subtree(0xffffffffffffffff, &(0x7f0000000000)=ANY=[@ANYBLOB="8fedcb7907001175f37538e486dd63"], 0xfdef) ioctl$XFS_IOC_FSGEOMETRY_V4(r0, 0x8070587c, &(0x7f0000000480)) sendmsg$nl_generic(0xffffffffffffffff, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000180)={0x0, 0x38}, 0x1, 0x0, 0x0, 0x400c801}, 0x4008094) ioctl$F2FS_IOC_MOVE_RANGE(r1, 0xc020f509, &(0x7f0000000080)={r0, 0x5, 0xffffffffffffffff, 0x2}) socket$kcm(0x29, 0x0, 0x0) r2 = socket(0x400000000010, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f0000000380)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r2, &(0x7f00000012c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000005c0)=@newqdisc={0x38, 0x24, 0x200, 0x70bd2a, 0xffffffff, {0x0, 0x0, 0x0, r3, {0x0, 0xfff1}, {0xffff, 0xffff}}, [@qdisc_kind_options=@q_multiq={{0xb}, {0x8}}]}, 0x38}}, 0x0) sendmsg$nl_route_sched(r2, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000240)=@newtfilter={0x4c, 0x2c, 0xd27, 0x70bd25, 0x2, {0x0, 0x0, 0x0, r3, {0x0, 0x1}, {}, {0x8, 0x4}}, [@filter_kind_options=@f_flow={{0x9}, {0x1c, 0x2, [@TCA_FLOW_BASECLASS={0x8, 0x3, {0xffe0, 0xd}}, @TCA_FLOW_MODE={0x8, 0x2, 0x1}, @TCA_FLOW_KEYS={0x8, 0x1, 0x15625}]}}]}, 0x4c}}, 0x0) sendmsg$IPSET_CMD_CREATE(r2, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000040)=ANY=[@ANYRESHEX=r0], 0x4c}}, 0x20040040) r4 = bpf$PROG_LOAD_XDP(0x5, &(0x7f00000003c0)={0x6, 0x3, &(0x7f0000000680)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x7, 0x0, 0x0, 0x41100, 0x0, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0xffff7fff}, 0x94) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000600)={r4, 0x5, 0xb68, 0x0, &(0x7f0000000000)='%', 0x0, 0xd01, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2}, 0x48) r5 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r5, &(0x7f000000c2c0)={0x0, 0x0, &(0x7f000000c280)={&(0x7f0000000100)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a20000000000a01010000000000000000050000080900010073797a30000000005c000000030a03000000000000000000050000000900010073797a30000000000900030073797a300000000008000c40000000032800048008000240000000120800014000000000140004"], 0xa4}}, 0x0) recvmsg$can_raw(r0, &(0x7f0000001600)={0x0, 0x0, 0x0}, 0x40012020) 4m33.628131482s ago: executing program 3 (id=2197): bpf$BPF_GET_PROG_INFO(0xf, &(0x7f0000000540)={0xffffffffffffffff, 0xe0, &(0x7f00000003c0)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, &(0x7f0000000140)=[0x0, 0x0, 0x0, 0x0], ""/16, 0x0, 0x0, 0x0, 0x0, 0x8, 0x6, &(0x7f0000000180)=[0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0], &(0x7f0000000240)=[0x0, 0x0, 0x0, 0x0, 0x0, 0x0], 0x0, 0x2b, &(0x7f0000000280)=[{}, {}, {}], 0x18, 0x10, &(0x7f0000000300), &(0x7f0000000340), 0x8, 0x93, 0x8, 0x8, &(0x7f0000000380)}}, 0x10) bpf$PROG_LOAD(0x5, &(0x7f00000007c0)={0x14, 0x4, &(0x7f0000000200)=ANY=[@ANYBLOB="180000000300000000000000feffff10850000000700000095"], 0x0, 0x0, 0x0, 0x0, 0x41100, 0x70, '\x00', 0x0, @fallback=0x30, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, r1, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) readv(0xffffffffffffffff, &(0x7f0000002340)=[{0x0}], 0x1) r2 = socket$xdp(0x2c, 0x3, 0x0) getsockopt$XDP_MMAP_OFFSETS(r2, 0x11b, 0x1, &(0x7f0000002f80), &(0x7f0000003000)=0x80) r3 = bpf$PROG_LOAD(0x5, &(0x7f0000000040)={0x2, 0x4, &(0x7f0000000200)=ANY=[], &(0x7f0000000000)='GPL\x00', 0x0, 0x0, 0x0, 0x100, 0x70, '\x00', 0x0, @fallback=0x30, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x6}, 0x94) r4 = openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0) ioctl$TUNSETIFF(r4, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x7101}) r5 = socket(0x400000000010, 0x3, 0x0) r6 = socket$unix(0x1, 0x1, 0x0) ioctl$sock_SIOCGIFINDEX(r6, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r5, &(0x7f00000012c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000005c0)=@newqdisc={0x38, 0x24, 0x4ee4e6a52ff56541, 0x70bd2a, 0xffffffff, {0x0, 0x0, 0x0, r7, {0x0, 0xfff1}, {0xffff, 0xffff}, {0x0, 0x2}}, [@qdisc_kind_options=@q_multiq={{0xb}, {0x8, 0x2, {0x0, 0x3}}}]}, 0x38}}, 0x0) sendmsg$nl_route_sched(r5, &(0x7f0000000580)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000700)=@newtfilter={0x94, 0x2c, 0xd27, 0x70bd2d, 0x25dfdc00, {0x0, 0x0, 0x0, r7, {0x0, 0x3}, {}, {0xfff3, 0xffe0}}, [@filter_kind_options=@f_matchall={{0xd}, {0x60, 0x2, [@TCA_MATCHALL_ACT={0x5c, 0x2, [@m_ife={0x58, 0x1, 0x0, 0x0, {{0x8}, {0x20, 0x2, 0x0, 0x1, [@TCA_IFE_PARMS={0x1c, 0x1, {{0xd, 0xd6, 0x10000000, 0x3, 0x4}, 0x1}}]}, {0x13, 0x6, "c0bee87282de4849f966ae767b78b7"}, {0xc}, {0xc, 0x8, {0x3, 0x3}}}}]}]}}]}, 0x94}, 0x1, 0x0, 0x0, 0x50}, 0x0) r8 = socket(0x400000000010, 0x3, 0x0) r9 = socket$unix(0x1, 0x1, 0x0) r10 = socket$nl_generic(0x10, 0x3, 0x10) r11 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000140), 0xffffffffffffffff) sendmsg$NL80211_CMD_SET_REG(r10, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000480)={&(0x7f0000000600)={0x1c, r11, 0x103, 0x0, 0x0, {}, [@NL80211_ATTR_REG_ALPHA2={0x6, 0x21, 'a\x00'}]}, 0x1c}}, 0x0) syz_genetlink_get_family_id$batadv(&(0x7f00000006c0), r10) ioctl$TUNSETPERSIST(r4, 0x400454cb, 0x0) ioctl$sock_SIOCGIFINDEX(r9, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r8, &(0x7f0000000580)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000140)=@newtfilter={0x84, 0x2c, 0xd27, 0x70bd2d, 0x25dfdc00, {0x0, 0x0, 0x0, r12, {0x0, 0x3}, {}, {0xfff3, 0x1f}}, [@filter_kind_options=@f_matchall={{0xd}, {0x50, 0x2, [@TCA_MATCHALL_ACT={0x4c, 0x2, [@m_ife={0x48, 0x1, 0x0, 0x0, {{0x8}, {0x20, 0x2, 0x0, 0x1, [@TCA_IFE_PARMS={0x1c, 0x1, {{0xd, 0xd0ea, 0x20000001, 0x3, 0x4}, 0x1}}]}, {0x4}, {0xc}, {0xc, 0x8, {0x1, 0x3}}}}]}]}}]}, 0x84}, 0x1, 0x0, 0x0, 0x50}, 0x0) bpf$BPF_LINK_CREATE_XDP(0x1c, &(0x7f0000000500)={r3, 0x0, 0x30, 0x0, @val=@uprobe_multi={&(0x7f00000004c0)='./cgroup/cgroup.procs\x00', &(0x7f00000002c0)=[0x1, 0x0], &(0x7f0000000700), 0x0, 0x100000}}, 0x40) ioctl$NS_GET_OWNER_UID(0xffffffffffffffff, 0xb704, &(0x7f0000000580)=0x0) setsockopt$inet6_IPV6_XFRM_POLICY(0xffffffffffffffff, 0x29, 0x23, &(0x7f00000005c0)={{{@in6=@mcast2, @in6=@mcast2, 0x4e21, 0x3, 0x4e20, 0x0, 0x2, 0x0, 0x80, 0x87, r0, r13}, {0x800, 0x4, 0x5, 0x8, 0xfffffffffffffbff, 0x7, 0x3, 0xb}, {0x4, 0x1000, 0x0, 0x3}, 0xffffff4b, 0x6e6bbf, 0x0, 0x1, 0x0, 0x2}, {{@in6=@remote, 0x4d3, 0x6c}, 0xa, @in6=@remote, 0x3501, 0x1, 0x2, 0x80, 0x10001, 0x2, 0x8}}, 0xe8) mmap(&(0x7f0000001000/0xc00000)=nil, 0xc00000, 0x3000004, 0x3032, 0xffffffffffffffff, 0x0) pipe(&(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) readv(r14, &(0x7f0000000000)=[{&(0x7f00000000c0)=""/243, 0xfffffdef}], 0x1) write$cgroup_subtree(r15, &(0x7f0000000700)=ANY=[], 0xfe33) openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='cgroup.controllers\x00', 0x275a, 0x0) 4m18.58406658s ago: executing program 33 (id=2197): bpf$BPF_GET_PROG_INFO(0xf, &(0x7f0000000540)={0xffffffffffffffff, 0xe0, &(0x7f00000003c0)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, &(0x7f0000000140)=[0x0, 0x0, 0x0, 0x0], ""/16, 0x0, 0x0, 0x0, 0x0, 0x8, 0x6, &(0x7f0000000180)=[0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0], &(0x7f0000000240)=[0x0, 0x0, 0x0, 0x0, 0x0, 0x0], 0x0, 0x2b, &(0x7f0000000280)=[{}, {}, {}], 0x18, 0x10, &(0x7f0000000300), &(0x7f0000000340), 0x8, 0x93, 0x8, 0x8, &(0x7f0000000380)}}, 0x10) bpf$PROG_LOAD(0x5, &(0x7f00000007c0)={0x14, 0x4, &(0x7f0000000200)=ANY=[@ANYBLOB="180000000300000000000000feffff10850000000700000095"], 0x0, 0x0, 0x0, 0x0, 0x41100, 0x70, '\x00', 0x0, @fallback=0x30, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, r1, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) readv(0xffffffffffffffff, &(0x7f0000002340)=[{0x0}], 0x1) r2 = socket$xdp(0x2c, 0x3, 0x0) getsockopt$XDP_MMAP_OFFSETS(r2, 0x11b, 0x1, &(0x7f0000002f80), &(0x7f0000003000)=0x80) r3 = bpf$PROG_LOAD(0x5, &(0x7f0000000040)={0x2, 0x4, &(0x7f0000000200)=ANY=[], &(0x7f0000000000)='GPL\x00', 0x0, 0x0, 0x0, 0x100, 0x70, '\x00', 0x0, @fallback=0x30, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x6}, 0x94) r4 = openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0) ioctl$TUNSETIFF(r4, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x7101}) r5 = socket(0x400000000010, 0x3, 0x0) r6 = socket$unix(0x1, 0x1, 0x0) ioctl$sock_SIOCGIFINDEX(r6, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r5, &(0x7f00000012c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000005c0)=@newqdisc={0x38, 0x24, 0x4ee4e6a52ff56541, 0x70bd2a, 0xffffffff, {0x0, 0x0, 0x0, r7, {0x0, 0xfff1}, {0xffff, 0xffff}, {0x0, 0x2}}, [@qdisc_kind_options=@q_multiq={{0xb}, {0x8, 0x2, {0x0, 0x3}}}]}, 0x38}}, 0x0) sendmsg$nl_route_sched(r5, &(0x7f0000000580)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000700)=@newtfilter={0x94, 0x2c, 0xd27, 0x70bd2d, 0x25dfdc00, {0x0, 0x0, 0x0, r7, {0x0, 0x3}, {}, {0xfff3, 0xffe0}}, [@filter_kind_options=@f_matchall={{0xd}, {0x60, 0x2, [@TCA_MATCHALL_ACT={0x5c, 0x2, [@m_ife={0x58, 0x1, 0x0, 0x0, {{0x8}, {0x20, 0x2, 0x0, 0x1, [@TCA_IFE_PARMS={0x1c, 0x1, {{0xd, 0xd6, 0x10000000, 0x3, 0x4}, 0x1}}]}, {0x13, 0x6, "c0bee87282de4849f966ae767b78b7"}, {0xc}, {0xc, 0x8, {0x3, 0x3}}}}]}]}}]}, 0x94}, 0x1, 0x0, 0x0, 0x50}, 0x0) r8 = socket(0x400000000010, 0x3, 0x0) r9 = socket$unix(0x1, 0x1, 0x0) r10 = socket$nl_generic(0x10, 0x3, 0x10) r11 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000140), 0xffffffffffffffff) sendmsg$NL80211_CMD_SET_REG(r10, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000480)={&(0x7f0000000600)={0x1c, r11, 0x103, 0x0, 0x0, {}, [@NL80211_ATTR_REG_ALPHA2={0x6, 0x21, 'a\x00'}]}, 0x1c}}, 0x0) syz_genetlink_get_family_id$batadv(&(0x7f00000006c0), r10) ioctl$TUNSETPERSIST(r4, 0x400454cb, 0x0) ioctl$sock_SIOCGIFINDEX(r9, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r8, &(0x7f0000000580)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000140)=@newtfilter={0x84, 0x2c, 0xd27, 0x70bd2d, 0x25dfdc00, {0x0, 0x0, 0x0, r12, {0x0, 0x3}, {}, {0xfff3, 0x1f}}, [@filter_kind_options=@f_matchall={{0xd}, {0x50, 0x2, [@TCA_MATCHALL_ACT={0x4c, 0x2, [@m_ife={0x48, 0x1, 0x0, 0x0, {{0x8}, {0x20, 0x2, 0x0, 0x1, [@TCA_IFE_PARMS={0x1c, 0x1, {{0xd, 0xd0ea, 0x20000001, 0x3, 0x4}, 0x1}}]}, {0x4}, {0xc}, {0xc, 0x8, {0x1, 0x3}}}}]}]}}]}, 0x84}, 0x1, 0x0, 0x0, 0x50}, 0x0) bpf$BPF_LINK_CREATE_XDP(0x1c, &(0x7f0000000500)={r3, 0x0, 0x30, 0x0, @val=@uprobe_multi={&(0x7f00000004c0)='./cgroup/cgroup.procs\x00', &(0x7f00000002c0)=[0x1, 0x0], &(0x7f0000000700), 0x0, 0x100000}}, 0x40) ioctl$NS_GET_OWNER_UID(0xffffffffffffffff, 0xb704, &(0x7f0000000580)=0x0) setsockopt$inet6_IPV6_XFRM_POLICY(0xffffffffffffffff, 0x29, 0x23, &(0x7f00000005c0)={{{@in6=@mcast2, @in6=@mcast2, 0x4e21, 0x3, 0x4e20, 0x0, 0x2, 0x0, 0x80, 0x87, r0, r13}, {0x800, 0x4, 0x5, 0x8, 0xfffffffffffffbff, 0x7, 0x3, 0xb}, {0x4, 0x1000, 0x0, 0x3}, 0xffffff4b, 0x6e6bbf, 0x0, 0x1, 0x0, 0x2}, {{@in6=@remote, 0x4d3, 0x6c}, 0xa, @in6=@remote, 0x3501, 0x1, 0x2, 0x80, 0x10001, 0x2, 0x8}}, 0xe8) mmap(&(0x7f0000001000/0xc00000)=nil, 0xc00000, 0x3000004, 0x3032, 0xffffffffffffffff, 0x0) pipe(&(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) readv(r14, &(0x7f0000000000)=[{&(0x7f00000000c0)=""/243, 0xfffffdef}], 0x1) write$cgroup_subtree(r15, &(0x7f0000000700)=ANY=[], 0xfe33) openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='cgroup.controllers\x00', 0x275a, 0x0) 2m29.305940618s ago: executing program 5 (id=3356): r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='memory.events\x00', 0x275a, 0x0) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000080)={0xffffffffffffffff, 0x18000000000002a0, 0xa8, 0x0, &(0x7f0000000100)="b9ff030f6044238cb89e14f088a81bff886411004048633321fbac14142ce934a0a662079f4b4d2f87e56dca6aab845013f208001a3901050b038da1880b25181aa59d943be3f4aed50ea5a6b8686731cb89ef77123c899b699eeaa8eaa0073461119663906400f30c0600000000000059b6d3296e8ca31bce1d8392078b72f24996ae17dffc2e43c8174b54b620636894aaacf28ff62616363c70a440aec4014caf28c0adc04308", 0x0, 0xfe, 0x60000000, 0x0, 0x0, 0x0, 0x0, 0x2}, 0x50) write$cgroup_subtree(r0, &(0x7f0000000100)=ANY=[], 0x32600) getsockopt$inet_sctp6_SCTP_PEER_AUTH_CHUNKS(r0, 0x84, 0x1a, &(0x7f0000000000)={0x0, 0x51, "2b104e2f021dcd1e546363ccf2378ba405ea892bff0276fb3842bb007747660f52027c38576d4996512b440d66aa9d0461c7ca60a3529d86388f27c1151ea5356e8a574b81c2f63b425a13cad5ab5cc3cd"}, &(0x7f0000000200)=0x59) getsockopt$inet_sctp6_SCTP_PR_SUPPORTED(r0, 0x84, 0x71, &(0x7f0000000280)={r1, 0xffff048f}, &(0x7f00000002c0)=0x8) mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x2000001, 0x12, r0, 0x0) r2 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='memory.events\x00', 0x7a44, 0x1700) mmap(&(0x7f0000ff9000/0x4000)=nil, 0x4000, 0xe, 0x4010, r2, 0x952de000) r3 = socket(0x10, 0x3, 0x0) setsockopt$netlink_NETLINK_TX_RING(r3, 0x10e, 0xc, &(0x7f00000001c0)={0x4000}, 0x10) sendmsg$nl_generic(r3, &(0x7f0000000240)={0x0, 0x0, &(0x7f00000011c0)={&(0x7f0000001300)=ANY=[@ANYBLOB="dc0000001e00010a00000000000000000002"], 0xdc}}, 0x0) 2m29.114516586s ago: executing program 5 (id=3358): r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000580), r0) r2 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX_80211(r2, 0x8933, &(0x7f0000000080)={'wlan1\x00', 0x0}) sendmsg$NL80211_CMD_TDLS_OPER(r0, &(0x7f0000000980)={0x0, 0x0, &(0x7f0000000940)={&(0x7f00000008c0)={0x60, r1, 0x5, 0x70bd25, 0x25dfdbfd, {{}, {@val={0x8, 0x3, r3}, @void}}, [@NL80211_ATTR_TDLS_OPERATION={0x5, 0x8a, 0x1}, @NL80211_ATTR_MAC={0xa, 0x6, @device_b}, @NL80211_ATTR_MAC={0xa, 0x6, @device_b}, @NL80211_ATTR_MAC={0xa, 0x6, @device_b}, @NL80211_ATTR_MAC={0xa, 0x6, @device_b}, @NL80211_ATTR_MAC={0xa}]}, 0x60}, 0x1, 0x0, 0x0, 0x800}, 0x20040000) 2m29.039760145s ago: executing program 5 (id=3360): syz_emit_ethernet(0x56, &(0x7f0000000400)=ANY=[@ANYBLOB="0180c200000eaaaaaaaaaaaa86dd60f4adf700202c00fe800000000000000000000000000000ff0200000000000000000000000010000000000000000000050200c900000000810090780000000315b572d434a7024c"], 0x0) 2m28.921041909s ago: executing program 5 (id=3363): syz_emit_ethernet(0x1c8, &(0x7f0000000280)={@link_local={0x3, 0x80, 0xc2, 0x0, 0x0, 0x3}, @multicast, @void, {@ipv4={0x800, @gre={{0x14, 0x4, 0x0, 0x9, 0x1ba, 0x66, 0x0, 0xf0, 0x2f, 0x0, @remote, @remote, {[@lsrr={0x83, 0xb, 0x6b, [@loopback, @empty]}, @noop, @rr={0x7, 0x1b, 0xf2, [@multicast2, @dev={0xac, 0x14, 0x14, 0xb}, @multicast1, @broadcast, @initdev={0xac, 0x1e, 0x1, 0x0}, @dev={0xac, 0x14, 0x14, 0xd}]}, @timestamp_addr={0x44, 0x14, 0x1d, 0x1, 0x1, [{@rand_addr=0x64010101, 0x9}, {@rand_addr=0x64010102, 0x7fb}]}]}}, {{0x0, 0x0, 0x1, 0x1, 0x0, 0x1, 0x0, 0x1, 0x880b, 0x17, 0x0, [0x5], "076b6f4f821bb75cc1332763c4a3b4cfeab849e1a224bd"}, {0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x800, [0x8, 0x3, 0x3]}, {0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x86dd, [], "ad88b707bb3e09488536a4080d4ca5735d7b"}, {0x8, 0x88be, 0x2, {{0x8, 0x1, 0x10, 0x2, 0x1, 0x0, 0x0, 0x1}}}, {0x8, 0x22eb, 0x3, {{0x2, 0x2, 0xb0, 0x3, 0x1, 0x1, 0x0, 0x2}, 0x2, {0x2, 0xf, 0x2, 0x1c, 0x1, 0x1, 0x2}}}, {0x8, 0x6558, 0x1, "5383285aa6f22c75c7083b5b40a9a01190787571500f055ea28e51b7582d121fb10808be0e9768ed0d73285df1b03a4023475081f7e52a6d158d18cb1f8f4c9bec8f276278b5295276d4ec897298a4faf014fb63f7064ce6f2e7248e2cd7c217cfe01f4196225a9e42b2975326aa1e37dfb878ad66ef7bc4324d189928b31bf15f050cec245d0f6e0397596d121fce42204a70e7d03f2ebe3350e13395d9d75c8003d9012884cd3a6b011462c4d17ca95262f588651920514d2506115ddcbaea42aad3cb5f13262fc722d7d863b7595138c3c05b3344957ebb8f2604d858c5f51f57df116f0a13b4fb5f44c054bf1cd837c0e1140f"}}}}}}, 0x0) r0 = socket$nl_route(0x10, 0x3, 0x0) bpf$BPF_PROG_WITH_BTFID_LOAD(0x5, &(0x7f0000000300)=@bpf_lsm={0xb, 0x3, &(0x7f0000000040)=ANY=[@ANYBLOB="660a000000000000611177000000000095"], &(0x7f0000000000)='GPL\x00'}, 0x94) sendmsg$nl_route(r0, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000002840)={&(0x7f00000027c0)=ANY=[@ANYBLOB="780000001c00b5f52abd7000fedbdf2502000000", @ANYRES32=r0, @ANYBLOB="0000050308000b003f78e60008000a000000000008000f0001000000080001"], 0x78}, 0x1, 0x0, 0x0, 0x4044008}, 0x16) 2m28.763011749s ago: executing program 5 (id=3368): bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000540)={&(0x7f0000000580)=ANY=[], &(0x7f0000000500)=""/50, 0x18, 0x32, 0x1, 0x81}, 0x28) bpf$PROG_LOAD(0x5, &(0x7f0000000780)={0x3, 0x16, &(0x7f0000000280)=ANY=[@ANYBLOB="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"], 0x0, 0x0, 0x0, 0x0, 0x9f0e5cc4bcd4d319, 0x0, '\x00', 0x0, @sched_cls}, 0x94) r0 = socket$nl_generic(0x10, 0x3, 0x10) shutdown(0xffffffffffffffff, 0x0) r1 = syz_genetlink_get_family_id$tipc2(&(0x7f0000000100), 0xffffffffffffffff) bpf$MAP_CREATE_TAIL_CALL(0x0, &(0x7f0000000740)={0x3, 0x4, 0x4, 0xa, 0x0, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0x0}, 0x48) bpf$PROG_LOAD(0x5, &(0x7f0000000880)={0x3, 0x8, &(0x7f00000009c0)=ANY=[@ANYBLOB, @ANYBLOB="0000000000000000b7"], &(0x7f0000000980)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @sched_cls, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r2 = socket$alg(0x26, 0x5, 0x0) bind$alg(r2, &(0x7f0000000000)={0x26, 'aead\x00', 0x0, 0x0, 'aegis128-aesni\x00'}, 0x58) setsockopt$ALG_SET_KEY(r2, 0x117, 0x1, &(0x7f0000000140)="2c385aa3d49100dc6626c892b6bc436a", 0x10) r3 = accept4(r2, 0x0, 0x0, 0x0) sendmsg$nl_route_sched_retired(r3, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000012100), 0xe078}}, 0x0) recvmmsg(r3, &(0x7f0000001d00)=[{{0x0, 0x0, 0x0}, 0x1}, {{0x0, 0x0, &(0x7f0000000200), 0x1f}}], 0x2, 0x40010000, 0x0) getsockopt$inet_sctp_SCTP_STATUS(0xffffffffffffffff, 0x84, 0xe, &(0x7f0000000000)={0x0, 0x9, 0x400, 0xb, 0x3, 0xfff1, 0x9, 0x4, {0x0, @in6={{0xa, 0x4e23, 0xf8e5, @initdev={0xfe, 0x88, '\x00', 0x1, 0x0}, 0x9}}, 0xffffc4a1, 0x1, 0xf, 0xfcb, 0x5}}, &(0x7f00000001c0)=0xb0) r5 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r6 = syz_genetlink_get_family_id$ieee802154(&(0x7f0000000340), r5) sendmsg$IEEE802154_SET_MACPARAMS(r5, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000380)={0x28, r6, 0x1, 0x70bd27, 0x25dfdbfd, {}, [@IEEE802154_ATTR_DEV_NAME={0xa, 0x1, 'wpan0\x00'}, @IEEE802154_ATTR_CSMA_RETRIES={0x5}]}, 0x28}, 0x1, 0x0, 0x0, 0x20008850}, 0x48090) setsockopt$inet_sctp6_SCTP_DELAYED_SACK(r3, 0x84, 0x10, &(0x7f0000000180)=@assoc_value={r4, 0x3}, 0x8) ioctl$sock_ipv4_tunnel_SIOCGETTUNNEL(0xffffffffffffffff, 0x89f0, &(0x7f00000000c0)={'syztnl1\x00', 0x0}) bpf$MAP_CREATE(0x0, 0x0, 0x0) r7 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r8 = syz_genetlink_get_family_id$nl802154(&(0x7f0000004f80), r7) sendmsg$NL802154_CMD_SET_CHANNEL(r7, &(0x7f0000005100)={0x0, 0x0, &(0x7f00000050c0)={&(0x7f0000005040)={0x2c, r8, 0x1, 0x70bd2c, 0x25dfdbfc, {}, [@NL802154_ATTR_PAGE={0x5, 0x7, 0x2}, @NL802154_ATTR_CHANNEL={0x5}, @NL802154_ATTR_WPAN_PHY={0x8, 0x1, 0x1}]}, 0x2c}, 0x1, 0x0, 0x0, 0x4000011}, 0x48010) sendmsg$NL802154_CMD_SET_CHANNEL(r5, &(0x7f00000005c0)={&(0x7f0000000200)={0x10, 0x0, 0x0, 0x100000}, 0xc, &(0x7f0000000580)={&(0x7f0000000240)={0x1c, r8, 0x10, 0x70bd26, 0x25dfdbfb, {}, [@NL802154_ATTR_WPAN_PHY={0x8, 0x1, 0x1}]}, 0x1c}}, 0x285efbca4e751536) sendmsg$TIPC_NL_KEY_SET(r0, &(0x7f0000000100)={0x0, 0x0, &(0x7f00000003c0)={&(0x7f00000004c0)=ANY=[@ANYBLOB='h\x00\x00\x00', @ANYRES16=r1, @ANYBLOB="0100000000000000000017000000540006803c00040067636d286165732900000000000000000000000000000000000000000000000014000000e3de3d7b4cd07ec3ee777de774fc7987cca41989140003"], 0x68}, 0x1, 0x0, 0x0, 0x4}, 0x4008014) 2m28.406308642s ago: executing program 5 (id=3372): r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = socket$nl_route(0x10, 0x3, 0x0) (async) r2 = socket$nl_generic(0x10, 0x3, 0x10) (async) r3 = socket$nl_generic(0x10, 0x3, 0x10) (async) r4 = syz_genetlink_get_family_id$batadv(&(0x7f00000006c0), r0) sendmsg$BATADV_CMD_GET_TRANSTABLE_GLOBAL(r3, &(0x7f00000007c0)={&(0x7f0000000300)={0x10, 0x0, 0x0, 0x200000}, 0xc, &(0x7f0000000780)={&(0x7f0000000700)={0x58, r4, 0x20, 0x70bd29, 0x25dfdbfc, {}, [@BATADV_ATTR_GW_MODE={0x5}, @BATADV_ATTR_DISTRIBUTED_ARP_TABLE_ENABLED={0x5}, @BATADV_ATTR_GW_SEL_CLASS={0x8, 0x34, 0x100}, @BATADV_ATTR_VLANID={0x6, 0x28, 0x4}, @BATADV_ATTR_GW_BANDWIDTH_UP={0x8, 0x32, 0x9}, @BATADV_ATTR_ORIG_ADDRESS={0xa, 0x9, @broadcast}, @BATADV_ATTR_AGGREGATED_OGMS_ENABLED={0x5, 0x29, 0x1}, @BATADV_ATTR_DISTRIBUTED_ARP_TABLE_ENABLED={0x5}]}, 0x58}, 0x1, 0x0, 0x0, 0x4000080}, 0x40080) (async) r5 = syz_genetlink_get_family_id$batadv(&(0x7f0000000080), 0xffffffffffffffff) ioctl$ifreq_SIOCGIFINDEX_batadv_mesh(r1, 0x8933, &(0x7f00000000c0)={'batadv0\x00', 0x0}) r7 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r7, &(0x7f0000000100)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000340)=ANY=[@ANYBLOB="1c0000002100090002000000ffdbdf25020000000800080046"], 0x1c}, 0x1, 0x0, 0x0, 0x4000000}, 0x844) sendmsg$BATADV_CMD_TP_METER(r2, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000100)={0x1c, r5, 0x1, 0x70bd25, 0x25dfdbfe, {}, [@BATADV_ATTR_MESH_IFINDEX={0x8, 0x3, r6}]}, 0x1c}, 0x1, 0x0, 0x0, 0x20000000}, 0x4000000) sendmsg$nl_generic(r0, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000080)=ANY=[@ANYBLOB="1800000026000100fdff0700001000000400000004000180"], 0x18}, 0x1, 0x0, 0x0, 0x400c801}, 0x4008090) (async) r8 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r8, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000004c0)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a20000000000a01080000000000000000010000000900010073797a300000000070000000090a010400000000000000000100000008000a40000000000900020073797a31000000000900010073797a30000000000800054000000021340011800a0001006c696d6974000000240002800c000240000000000000008108000340fffffffd0c0001400000000000000007"], 0xb8}}, 0x0) (async) r9 = socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$devlink(&(0x7f0000000040), r9) r10 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r10, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000940)={{0x14}, [@NFT_MSG_NEWTABLE={0x28, 0x0, 0xa, 0x3, 0x0, 0x0, {0x1}, [@NFTA_TABLE_NAME={0x9, 0x1, 'syz0\x00'}, @NFTA_TABLE_FLAGS={0x8, 0x2, 0x1, 0x0, 0x2}]}, @NFT_MSG_NEWSET={0xec, 0x9, 0xa, 0x401, 0x0, 0x0, {0x1, 0x0, 0x2}, [@NFTA_SET_ID={0x8}, @NFTA_SET_NAME={0x9, 0x2, 'syz1\x00'}, @NFTA_SET_TABLE={0x9, 0x1, 'syz0\x00'}, @NFTA_SET_KEY_LEN={0x8, 0x5, 0x1, 0x0, 0x37}, @NFTA_SET_EXPR={0xb0, 0x11, 0x0, 0x1, @match={{0xa}, @val={0xa0, 0x2, 0x0, 0x1, [@NFTA_MATCH_REV={0x8}, @NFTA_MATCH_INFO={0x4}, @NFTA_MATCH_INFO={0x90, 0x3, "3d7a1eca8fd42a3856ccd5d75e07a643ffe075d736d095f8e80d723ec8dffa6c4e845a597d27c05198d18211f637699c8a695ee6e008bc5f90c94b22028f0676bc1ce49ca286577bf686943356c25f302b92785f5944ec3968fb1559562b1ef2c477842e0da69fa5e6fb53db6c46a154f9f6e8c3de6dca004e112aa81d7c81772fd42b45ebe720e38233d7cf"}]}}}]}], {0x14, 0x10}}, 0x13c}}, 0x0) (async) socketpair$unix(0x1, 0x0, 0x0, &(0x7f0000000040)) (async) bpf$BPF_BTF_LOAD(0x12, &(0x7f00000001c0)={&(0x7f0000000000)=ANY=[@ANYBLOB="9feb010018000000000000003000000030000000020000000000000000000002000000000000000002000004680800000000000001000000000000000000000001"], 0x0, 0x4a}, 0x20) r11 = socket$inet6_udp(0xa, 0x2, 0x0) ioctl$XFS_IOC_START_COMMIT(r1, 0x80585882, &(0x7f0000000280)={0xffffffffffffffff}) (async) r13 = getuid() ioctl$TUNSETOWNER(r12, 0x400454cc, r13) setsockopt$IP6T_SO_SET_REPLACE(r11, 0x29, 0x40, &(0x7f0000000340)=@raw={'raw\x00', 0x3c1, 0x3, 0x2f8, 0x118, 0xc8, 0x8, 0x0, 0x5803, 0x228, 0x2e8, 0x2e8, 0x228, 0x2e8, 0x3, 0x0, {[{{@uncond, 0x0, 0xd8, 0x118, 0x0, {0x0, 0x2000000000000}, [@common=@inet=@esp={{0x30}, {[0x4d4, 0x4d3], 0x1}}]}, @common=@unspec=@RATEEST={0x40, 'RATEEST\x00', 0x0, {'syz1\x00', 0x81, 0xff, {0x4}}}}, {{@ipv6={@private0, @rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x02', [0xffffffff, 0xffffff00], [0xffffffff, 0xffffff00, 0xffffff00], 'lo\x00', 'ipvlan1\x00', {}, {}, 0x3c, 0x8, 0x3}, 0x0, 0xd8, 0x110, 0x0, {}, [@common=@frag={{0x30}, {[0x26, 0x4], 0x14, 0x32, 0x1}}]}, @common=@inet=@SET3={0x38, 'SET\x00', 0x3, {{0xffffffffffffffff, 0x3, 0x1}, {0x1, 0x4, 0x4}, {0x0, 0x3, 0x1}, 0x4, 0x101}}}], {{'\x00', 0x0, 0xa8, 0xd0}, {0x28}}}}, 0x68) 2m13.452966541s ago: executing program 34 (id=3372): r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = socket$nl_route(0x10, 0x3, 0x0) (async) r2 = socket$nl_generic(0x10, 0x3, 0x10) (async) r3 = socket$nl_generic(0x10, 0x3, 0x10) (async) r4 = syz_genetlink_get_family_id$batadv(&(0x7f00000006c0), r0) sendmsg$BATADV_CMD_GET_TRANSTABLE_GLOBAL(r3, &(0x7f00000007c0)={&(0x7f0000000300)={0x10, 0x0, 0x0, 0x200000}, 0xc, &(0x7f0000000780)={&(0x7f0000000700)={0x58, r4, 0x20, 0x70bd29, 0x25dfdbfc, {}, [@BATADV_ATTR_GW_MODE={0x5}, @BATADV_ATTR_DISTRIBUTED_ARP_TABLE_ENABLED={0x5}, @BATADV_ATTR_GW_SEL_CLASS={0x8, 0x34, 0x100}, @BATADV_ATTR_VLANID={0x6, 0x28, 0x4}, @BATADV_ATTR_GW_BANDWIDTH_UP={0x8, 0x32, 0x9}, @BATADV_ATTR_ORIG_ADDRESS={0xa, 0x9, @broadcast}, @BATADV_ATTR_AGGREGATED_OGMS_ENABLED={0x5, 0x29, 0x1}, @BATADV_ATTR_DISTRIBUTED_ARP_TABLE_ENABLED={0x5}]}, 0x58}, 0x1, 0x0, 0x0, 0x4000080}, 0x40080) (async) r5 = syz_genetlink_get_family_id$batadv(&(0x7f0000000080), 0xffffffffffffffff) ioctl$ifreq_SIOCGIFINDEX_batadv_mesh(r1, 0x8933, &(0x7f00000000c0)={'batadv0\x00', 0x0}) r7 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r7, &(0x7f0000000100)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000340)=ANY=[@ANYBLOB="1c0000002100090002000000ffdbdf25020000000800080046"], 0x1c}, 0x1, 0x0, 0x0, 0x4000000}, 0x844) sendmsg$BATADV_CMD_TP_METER(r2, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000100)={0x1c, r5, 0x1, 0x70bd25, 0x25dfdbfe, {}, [@BATADV_ATTR_MESH_IFINDEX={0x8, 0x3, r6}]}, 0x1c}, 0x1, 0x0, 0x0, 0x20000000}, 0x4000000) sendmsg$nl_generic(r0, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000080)=ANY=[@ANYBLOB="1800000026000100fdff0700001000000400000004000180"], 0x18}, 0x1, 0x0, 0x0, 0x400c801}, 0x4008090) (async) r8 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r8, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000004c0)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a20000000000a01080000000000000000010000000900010073797a300000000070000000090a010400000000000000000100000008000a40000000000900020073797a31000000000900010073797a30000000000800054000000021340011800a0001006c696d6974000000240002800c000240000000000000008108000340fffffffd0c0001400000000000000007"], 0xb8}}, 0x0) (async) r9 = socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$devlink(&(0x7f0000000040), r9) r10 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r10, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000940)={{0x14}, [@NFT_MSG_NEWTABLE={0x28, 0x0, 0xa, 0x3, 0x0, 0x0, {0x1}, [@NFTA_TABLE_NAME={0x9, 0x1, 'syz0\x00'}, @NFTA_TABLE_FLAGS={0x8, 0x2, 0x1, 0x0, 0x2}]}, @NFT_MSG_NEWSET={0xec, 0x9, 0xa, 0x401, 0x0, 0x0, {0x1, 0x0, 0x2}, [@NFTA_SET_ID={0x8}, @NFTA_SET_NAME={0x9, 0x2, 'syz1\x00'}, @NFTA_SET_TABLE={0x9, 0x1, 'syz0\x00'}, @NFTA_SET_KEY_LEN={0x8, 0x5, 0x1, 0x0, 0x37}, @NFTA_SET_EXPR={0xb0, 0x11, 0x0, 0x1, @match={{0xa}, @val={0xa0, 0x2, 0x0, 0x1, [@NFTA_MATCH_REV={0x8}, @NFTA_MATCH_INFO={0x4}, @NFTA_MATCH_INFO={0x90, 0x3, "3d7a1eca8fd42a3856ccd5d75e07a643ffe075d736d095f8e80d723ec8dffa6c4e845a597d27c05198d18211f637699c8a695ee6e008bc5f90c94b22028f0676bc1ce49ca286577bf686943356c25f302b92785f5944ec3968fb1559562b1ef2c477842e0da69fa5e6fb53db6c46a154f9f6e8c3de6dca004e112aa81d7c81772fd42b45ebe720e38233d7cf"}]}}}]}], {0x14, 0x10}}, 0x13c}}, 0x0) (async) socketpair$unix(0x1, 0x0, 0x0, &(0x7f0000000040)) (async) bpf$BPF_BTF_LOAD(0x12, &(0x7f00000001c0)={&(0x7f0000000000)=ANY=[@ANYBLOB="9feb010018000000000000003000000030000000020000000000000000000002000000000000000002000004680800000000000001000000000000000000000001"], 0x0, 0x4a}, 0x20) r11 = socket$inet6_udp(0xa, 0x2, 0x0) ioctl$XFS_IOC_START_COMMIT(r1, 0x80585882, &(0x7f0000000280)={0xffffffffffffffff}) (async) r13 = getuid() ioctl$TUNSETOWNER(r12, 0x400454cc, r13) setsockopt$IP6T_SO_SET_REPLACE(r11, 0x29, 0x40, &(0x7f0000000340)=@raw={'raw\x00', 0x3c1, 0x3, 0x2f8, 0x118, 0xc8, 0x8, 0x0, 0x5803, 0x228, 0x2e8, 0x2e8, 0x228, 0x2e8, 0x3, 0x0, {[{{@uncond, 0x0, 0xd8, 0x118, 0x0, {0x0, 0x2000000000000}, [@common=@inet=@esp={{0x30}, {[0x4d4, 0x4d3], 0x1}}]}, @common=@unspec=@RATEEST={0x40, 'RATEEST\x00', 0x0, {'syz1\x00', 0x81, 0xff, {0x4}}}}, {{@ipv6={@private0, @rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x02', [0xffffffff, 0xffffff00], [0xffffffff, 0xffffff00, 0xffffff00], 'lo\x00', 'ipvlan1\x00', {}, {}, 0x3c, 0x8, 0x3}, 0x0, 0xd8, 0x110, 0x0, {}, [@common=@frag={{0x30}, {[0x26, 0x4], 0x14, 0x32, 0x1}}]}, @common=@inet=@SET3={0x38, 'SET\x00', 0x3, {{0xffffffffffffffff, 0x3, 0x1}, {0x1, 0x4, 0x4}, {0x0, 0x3, 0x1}, 0x4, 0x101}}}], {{'\x00', 0x0, 0xa8, 0xd0}, {0x28}}}}, 0x68) 1m0.260311958s ago: executing program 7 (id=4520): bpf$BPF_BTF_LOAD(0x12, 0x0, 0x0) socket(0x2b, 0x3, 0x0) socket$kcm(0x29, 0x5, 0x0) openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000140)='blkio.bfq.io_service_time_recursive\x00', 0x275a, 0x0) r0 = bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000140)={&(0x7f0000000080)={{0xeb9f, 0x1, 0x0, 0x18, 0x0, 0xc, 0xc, 0x2, [@func_proto]}}, 0x0, 0x26}, 0x20) r1 = bpf$MAP_CREATE(0x0, &(0x7f00000000c0)=@base={0x1f, 0x0, 0x0, 0x8000}, 0x48) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000400)={0x1d, 0xc, &(0x7f00000001c0)=@framed={{}, [@ringbuf_output={{0x18, 0x1, 0x1, 0x0, r1}, {}, {}, {}, {}, {}, {0x7, 0x0, 0xb, 0x4, 0x0, 0x0, 0x2}, {0x85, 0x0, 0x0, 0xae}}]}, &(0x7f0000000180)='syzkaller\x00', 0x4, 0x0, 0x0, 0x40f00}, 0x94) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000580)={0x0, 0x17, &(0x7f00000002c0)=@ringbuf={{0x18, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0xf}, {{0x18, 0x1, 0x1, 0x0, r1}}, {}, [@printk={@lld, {}, {}, {}, {}, {0x7, 0x0, 0xb, 0x3, 0x0, 0x0, 0x400}}], {{}, {}, {0x85, 0x0, 0x0, 0x85}}}, &(0x7f0000000280)='GPL\x00', 0x1, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, r0, 0x3e}, 0x94) r2 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r2, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000200)=ANY=[@ANYBLOB="3800000040000701feffffff02000000017c0000040042800c00018006000600800a000014000280100014800c0016800800b600884729"], 0x38}, 0x1, 0x0, 0x0, 0x4048011}, 0xc800) r3 = socket$key(0xf, 0x3, 0x2) sendmsg$key(r3, &(0x7f0000000000)={0x500, 0x0, &(0x7f0000000080)={&(0x7f00000000c0)={0x2, 0x1, 0x0, 0x9, 0xa, 0x0, 0x0, 0x0, [@sadb_address={0x3, 0x6, 0x0, 0x0, 0x0, @in={0x2, 0x0, @multicast1}}, @sadb_address={0x3, 0x5, 0x0, 0x0, 0x0, @in={0x2, 0x0, @loopback}}, @sadb_x_sa2={0x2, 0x13, 0x3}]}, 0x50}}, 0x0) openat$rfkill(0xffffffffffffff9c, &(0x7f0000000040), 0x801, 0x0) r4 = openat$rfkill(0xffffffffffffff9c, &(0x7f0000000040), 0x801, 0x0) r5 = socket$nl_generic(0x10, 0x3, 0x10) r6 = socket$nl_generic(0x10, 0x3, 0x10) r7 = syz_genetlink_get_family_id$tipc(&(0x7f00000001c0), 0xffffffffffffffff) sendmsg$TIPC_CMD_SHOW_NAME_TABLE(r6, &(0x7f0000000980)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000180)={0x30, r7, 0x1, 0x70bd2a, 0x40000, {{}, {}, {0x14, 0x19, {0x1, 0x1, 0x1}}}}, 0x30}}, 0x4) sendmsg$TIPC_CMD_DISABLE_BEARER(r5, &(0x7f00000004c0)={&(0x7f0000000240)={0x10, 0x0, 0x0, 0x8}, 0xc, &(0x7f00000003c0)={&(0x7f0000000380)={0x2c, r7, 0x400, 0x70bd2a, 0x25dfdbff, {{}, {}, {0x10, 0x13, @udp='udp:syz2\x00'}}, ["", "", "", "", "", "", "", ""]}, 0x2c}, 0x1, 0x0, 0x0, 0x40041}, 0x0) sendmsg$nl_route(0xffffffffffffffff, 0x0, 0x20040850) write$rfkill(r4, &(0x7f0000000080)={0x0, 0x1, 0x3, 0x3, 0xfd}, 0x8) 59.357956494s ago: executing program 7 (id=4531): r0 = syz_init_net_socket$bt_l2cap(0x1f, 0x1, 0x0) r1 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r1, &(0x7f000000c2c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000340)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a28000000000a0101000000005e1affd5020000000900010073797a300000000008000240000000032c000000030a01030000e6ff00000000020000000900010073797a30000000000900030073797a320000000014000000110001"], 0x7c}}, 0x0) r2 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r2, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000680)=ANY=[@ANYBLOB="14000000100001000000000000b890c1a000000a80000000160a01030000000000000000020000000900020073797a30000000000900010073797a3000000000540003"], 0xa8}}, 0x0) listen(r0, 0x100001) r3 = socket(0x22, 0x2, 0x3) ioctl$IMGETCOUNT(r3, 0x80044943, &(0x7f00000003c0)) r4 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000140), r3) sendmsg$NL80211_CMD_SET_POWER_SAVE(r3, &(0x7f0000000240)={&(0x7f0000000100)={0x10, 0x0, 0x0, 0x40}, 0xc, &(0x7f00000001c0)={&(0x7f0000000180)={0x2c, r4, 0x800, 0x70bd2b, 0x25dfdbfd, {{}, {@val={0x8}, @void}}, [@NL80211_ATTR_PS_STATE={0x8, 0x5d, 0x1}, @NL80211_ATTR_PS_STATE={0x8}]}, 0x2c}, 0x1, 0x0, 0x0, 0x40a0}, 0x4008000) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000000)={0x13, 0x4, &(0x7f00000006c0)=ANY=[@ANYBLOB="18000000000000000000000000000000850000004c00000095"], &(0x7f00000000c0)='GPL\x00', 0x4, 0x0, 0x0, 0x0, 0x6a, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0xff6e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x130}, 0x90) 59.199600974s ago: executing program 7 (id=4533): r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$batadv(&(0x7f000009f580), r0) ioctl$ifreq_SIOCGIFINDEX_batadv_mesh(r0, 0x8933, &(0x7f0000000140)={'batadv0\x00', 0x0}) sendmsg$BATADV_CMD_GET_DAT_CACHE(r0, &(0x7f0000000200)={0x0, 0x40000, &(0x7f00000000c0)={&(0x7f0000000080)={0x1c, r1, 0x303, 0x0, 0x0, {0x6}, [@BATADV_ATTR_MESH_IFINDEX={0x8, 0x3, r2}]}, 0x1c}}, 0x0) syz_genetlink_get_family_id$batadv(&(0x7f0000000040), r0) r3 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r3, &(0x7f00000001c0)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x200000}, 0xc, &(0x7f0000000180)={&(0x7f0000000240)=ANY=[@ANYBLOB="1c0000001d0000022dbd7000fddbdf2502000000", @ANYRES32=r2, @ANYBLOB="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"], 0x1c}, 0x1, 0x0, 0x0, 0x40}, 0x0) 59.016275397s ago: executing program 7 (id=4535): r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a) bpf$MAP_CREATE(0x1900000000000000, &(0x7f0000000040)=@base={0x1b, 0x0, 0x0, 0x2002, 0x0, 0xffffffffffffffff, 0x800}, 0x50) r2 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a) ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f00000001c0)={'dummy0\x00', 0x0}) r4 = socket$inet6_udplite(0xa, 0x2, 0x88) setsockopt$inet6_buf(r4, 0x29, 0xd1, &(0x7f0000000140)="7cdc3121d12731d6015c57afb09bc20f2310a2413191682fa9012c91032db8d491cf4ae45b13d8d2d3809ed48e8a", 0x2e) r5 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_route(r5, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000001140)={&(0x7f0000001180)=@newlink={0x48, 0x10, 0x503, 0x70bd2b, 0x0, {0x0, 0x0, 0x0, 0x0, 0x0, 0x140}, [@IFLA_LINKINFO={0x20, 0x12, 0x0, 0x1, @macsec={{0xb}, {0x10, 0x2, 0x0, 0x1, [@IFLA_MACSEC_SCI={0xc, 0x1, 0xffffffffffffffff}]}}}, @IFLA_LINK={0x8, 0x5, r3}]}, 0x48}, 0x1, 0x0, 0x0, 0x8004}, 0x0) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000000)={'macvlan0\x00', 0x0}) sendmsg$nl_route(r0, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000001140)={&(0x7f00000000c0)=ANY=[@ANYBLOB="cf580000001000030500"/21, @ANYRES32=0x0, @ANYBLOB="0000000004000400300012800c0001006d6163766c616e0020000280080001001000000008000300000000000a000400aaaaaaaaaabb000008000500", @ANYRES32=r6, @ANYBLOB], 0x58}}, 0x0) 58.772519874s ago: executing program 7 (id=4540): getsockopt$inet_sctp6_SCTP_RTOINFO(0xffffffffffffffff, 0x84, 0x0, &(0x7f0000000040)={0x0, 0xfff, 0x7, 0x1}, &(0x7f0000000080)=0x10) setsockopt$inet_sctp_SCTP_CONTEXT(0xffffffffffffffff, 0x84, 0x11, &(0x7f00000000c0)={r0, 0x6}, 0x8) r1 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="02000000040000000800000006"], 0x48) r2 = socket$kcm(0xa, 0x2, 0x0) (async) setsockopt$IP_VS_SO_SET_ADD(0xffffffffffffffff, 0x0, 0x482, &(0x7f0000000240)={0x84, @local, 0x4e20, 0x3, 'lc\x00', 0x0, 0xa7e, 0x70}, 0x2c) sendmsg$sock(r2, &(0x7f0000000400)={&(0x7f0000000580)=@in6={0x2, 0x4e20, 0x0, @dev}, 0x80, 0x0, 0x0, &(0x7f0000000000)=[@mark={{0x14, 0x1, 0x24, 0x3}}], 0x18, 0xb00}, 0x0) (async) bpf$PROG_LOAD(0x5, &(0x7f00000003c0)={0x6, 0xd, &(0x7f0000000180)=ANY=[@ANYBLOB="18000000000000000000000000000000850000005000000018110000", @ANYRES32=r1, @ANYBLOB="0000000000000000b7080000000000007b8af0ff00000000bfa200000000000007020000f5ffffffb703000008000000b704000080000000850000000100000095"], &(0x7f0000001b80)='syzkaller\x00', 0x0, 0x0, 0x0, 0x41100, 0x0, '\x00', 0x0, @fallback=0xb, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) 58.641030784s ago: executing program 7 (id=4543): r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000780)={&(0x7f0000000100)=@ipv4_newroute={0x38, 0x18, 0x35f32a6dfa748ddd, 0x0, 0x0, {0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x6}, [@RTA_ENCAP_TYPE={0x6, 0x15, 0x2}, @RTA_ENCAP={0x14, 0x16, 0x0, 0x1, @LWTUNNEL_IP6_OPTS={0x10, 0x8, @LWTUNNEL_IP_OPTS_VXLAN={0xc, 0x2, 0x0, 0x1, @LWTUNNEL_IP_OPT_VXLAN_GBP={0x8, 0x1, 0x9}}}}]}, 0x38}}, 0x0) r1 = socket$nl_generic(0x10, 0x3, 0x10) socket(0x11, 0x6, 0x7) sendmsg$nl_generic(r1, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000001ac0)={&(0x7f0000000340)={0x14, 0x26, 0x1, 0xf0bd26, 0x25dfdbfc, {0x3}}, 0x14}}, 0x24048000) 43.627644779s ago: executing program 35 (id=4543): r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000780)={&(0x7f0000000100)=@ipv4_newroute={0x38, 0x18, 0x35f32a6dfa748ddd, 0x0, 0x0, {0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x6}, [@RTA_ENCAP_TYPE={0x6, 0x15, 0x2}, @RTA_ENCAP={0x14, 0x16, 0x0, 0x1, @LWTUNNEL_IP6_OPTS={0x10, 0x8, @LWTUNNEL_IP_OPTS_VXLAN={0xc, 0x2, 0x0, 0x1, @LWTUNNEL_IP_OPT_VXLAN_GBP={0x8, 0x1, 0x9}}}}]}, 0x38}}, 0x0) r1 = socket$nl_generic(0x10, 0x3, 0x10) socket(0x11, 0x6, 0x7) sendmsg$nl_generic(r1, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000001ac0)={&(0x7f0000000340)={0x14, 0x26, 0x1, 0xf0bd26, 0x25dfdbfc, {0x3}}, 0x14}}, 0x24048000) 6.636692199s ago: executing program 2 (id=5206): r0 = socket$packet(0x11, 0x3, 0x300) (async, rerun: 64) r1 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000002c80)={0x3, 0x6, &(0x7f0000000840)=ANY=[@ANYBLOB="1802000000000000000000000000000085000000870000001800000007000000000000000300000095"], &(0x7f0000000000)='GPL\x00'}, 0x90) (rerun: 64) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f00000002c0)={r1, 0x0, 0xe, 0x0, &(0x7f0000000100)="e0b9547ed387dbe9abc89b6f5bec", 0x0, 0x8, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x50) (async) ioctl$ifreq_SIOCGIFINDEX_batadv_mesh(r0, 0x8933, &(0x7f0000000080)={'batadv0\x00', 0x0}) (async) ioctl$sock_SIOCSIFBR(r0, 0x8941, &(0x7f00000001c0)=@generic={0x3, 0x4, 0xfffffffffffff000}) (async) r3 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r3, &(0x7f00000018c0)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000000)=ANY=[@ANYBLOB="300000001e00010000000000007f000007000000", @ANYRES32, @ANYBLOB="000000000a000500aaaaaaaaaabb0000080009"], 0x30}}, 0x0) syz_emit_ethernet(0x2a, &(0x7f0000000100)=ANY=[@ANYBLOB="bbbbbbbbbbbb8a0a63cdec590806000108000604"], 0x0) (async) sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f0000000140)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x40}, 0xc, &(0x7f00000000c0)={&(0x7f0000000880)={{0x14}, [@NFT_MSG_NEWSET={0x124, 0x9, 0xa, 0x101, 0x0, 0x0, {0x1, 0x0, 0x7}, [@NFTA_SET_NAME={0x9, 0x2, 'syz1\x00'}, @NFTA_SET_TABLE={0x9, 0x1, 'syz0\x00'}, @NFTA_SET_TIMEOUT={0xc, 0xb, 0x1, 0x0, 0x8}, @NFTA_SET_USERDATA={0xe9, 0xd, 0x1, 0x0, "899fe729c57b6453fa63f8563532947ed39f1afb22128dcfafb427202cdb373419dfbd9ce97e0fbd0e57a66c142fc490fe0c9829ee7ad82ca6f2282c0545854646da7b84a22d55a646e2dea34103bf4bb61089b5809c8101a4be1d434ccd0fcef6ae8ff33de60bca7de492675dabfc9cf9e92584e094fdb9d4c6a3cfabfe66f477c520bd93d9d7290c9bb7aa20fc23ba05585b46e2e4678f166ca19bbc3cb3dd42028d0289fd0c05cf25e793f5a39a6459802c18e1e8baeb23448732f5b4b381d3fac020ef00f520e9c681f46bf4e56633e60f1e436064ae194c9ba477661ba47550a1a5ff"}]}, @NFT_MSG_DELSET={0x10c, 0xb, 0xa, 0x101, 0x0, 0x0, {0x2, 0x0, 0x4}, [@NFTA_SET_TIMEOUT={0xc, 0xb, 0x1, 0x0, 0x4}, @NFTA_SET_POLICY={0x8}, @NFTA_SET_HANDLE={0xc, 0x10, 0x1, 0x0, 0x3}, @NFTA_SET_EXPRESSIONS={0xd8, 0x12, 0x0, 0x1, [{0xc, 0x1, 0x0, 0x1, @dup_ipv6={{0x8}, @void}}, {0x18, 0x1, 0x0, 0x1, @osf={{0x8}, @val={0xc, 0x2, 0x0, 0x1, [@NFTA_OSF_FLAGS={0x8}]}}}, {0x58, 0x1, 0x0, 0x1, @inner={{0xa}, @val={0x48, 0x2, 0x0, 0x1, [@NFTA_INNER_NUM={0x8}, @NFTA_INNER_HDRSIZE={0x8, 0x4, 0x1, 0x0, 0x3}, @NFTA_INNER_TYPE={0x8, 0x2, 0x1, 0x0, 0xd7}, @NFTA_INNER_TYPE={0x8, 0x2, 0x1, 0x0, 0xc1}, @NFTA_INNER_TYPE={0x8, 0x2, 0x1, 0x0, 0x82}, @NFTA_INNER_EXPR={0x1c, 0x5, 0x0, 0x1, @meta={{0x9}, @val={0xc, 0x2, 0x0, 0x1, [@NFTA_META_DREG={0x8, 0x1, 0x1, 0x0, 0x18}]}}}]}}}, {0x10, 0x1, 0x0, 0x1, @target={{0xb}, @void}}, {0x10, 0x1, 0x0, 0x1, @meta={{0x9}, @void}}, {0x38, 0x1, 0x0, 0x1, @rt={{0x7}, @val={0x2c, 0x2, 0x0, 0x1, [@NFTA_RT_DREG={0x8, 0x1, 0x1, 0x0, 0x17}, @NFTA_RT_KEY={0x8, 0x2, 0x1, 0x0, 0x4}, @NFTA_RT_DREG={0x8, 0x1, 0x1, 0x0, 0x4}, @NFTA_RT_DREG={0x8, 0x1, 0x1, 0x0, 0x12}, @NFTA_RT_DREG={0x8, 0x1, 0x1, 0x0, 0x16}]}}}]}]}, @NFT_MSG_NEWCHAIN={0x27c, 0x3, 0xa, 0x401, 0x0, 0x0, {0x5, 0x0, 0x8}, [@NFTA_CHAIN_NAME={0x9, 0x3, 'syz0\x00'}, @NFTA_CHAIN_HOOK={0x6c, 0x4, 0x0, 0x1, [@NFTA_HOOK_HOOKNUM={0x8, 0x1, 0x1, 0x0, 0x4}, @NFTA_HOOK_PRIORITY={0x8, 0x2, 0x1, 0x0, 0x11805ba3}, @NFTA_HOOK_PRIORITY={0x8, 0x2, 0x1, 0x0, 0x54b29e67}, @NFTA_HOOK_PRIORITY={0x8, 0x2, 0x1, 0x0, 0x6c68f3ce}, @NFTA_HOOK_HOOKNUM={0x8}, @NFTA_HOOK_HOOKNUM={0x8, 0x1, 0x1, 0x0, 0x2}, @NFTA_HOOK_DEV={0x14}, @NFTA_HOOK_PRIORITY={0x8, 0x2, 0x1, 0x0, 0x153a53e8}, @NFTA_HOOK_DEV={0x14, 0x3, 'veth1\x00'}, @NFTA_HOOK_HOOKNUM={0x8, 0x1, 0x1, 0x0, 0x3}]}, @NFTA_CHAIN_TYPE={0xa, 0x7, 'route\x00'}, @NFTA_CHAIN_HOOK={0x68, 0x4, 0x0, 0x1, [@NFTA_HOOK_PRIORITY={0x8, 0x2, 0x1, 0x0, 0xd0f909a}, @NFTA_HOOK_DEV={0x14, 0x3, 'bond0\x00'}, @NFTA_HOOK_DEV={0x14, 0x3, 'team_slave_1\x00'}, @NFTA_HOOK_HOOKNUM={0x8, 0x1, 0x1, 0x0, 0x3}, @NFTA_HOOK_HOOKNUM={0x8, 0x1, 0x1, 0x0, 0x4}, @NFTA_HOOK_DEV={0x14, 0x3, 'ip6gretap0\x00'}, @NFTA_HOOK_PRIORITY={0x8, 0x2, 0x1, 0x0, 0x7b8a02f7}, @NFTA_HOOK_PRIORITY={0x8, 0x2, 0x1, 0x0, 0x5d07cb5}]}, @NFTA_CHAIN_HOOK={0x2c, 0x4, 0x0, 0x1, [@NFTA_HOOK_PRIORITY={0x8, 0x2, 0x1, 0x0, 0x7cf169ad}, @NFTA_HOOK_HOOKNUM={0x8, 0x1, 0x1, 0x0, 0x1}, @NFTA_HOOK_PRIORITY={0x8, 0x2, 0x1, 0x0, 0x6180e493}, @NFTA_HOOK_HOOKNUM={0x8, 0x1, 0x1, 0x0, 0x3}, @NFTA_HOOK_HOOKNUM={0x8, 0x1, 0x1, 0x0, 0x2}]}, @NFTA_CHAIN_NAME={0x9, 0x3, 'syz1\x00'}, @NFTA_CHAIN_USERDATA={0xd3, 0xc, "f22645600e783a06295dbe25408da5c50049280a6de86c8e7d53a4f2cdc8f71258fe4a339397ef1fa41f773a50f1f94d0fbaecbbbc0fbd6296949e73dfcfb917db41db5f0576970d544bcb2af3cddaa3e72c67c0ffb37bfc4257621102ee644c518032f4ce18160e74d14e9f6c900ebf6ce493809d61e5dc8bb1d3608618e7d667550ce1a83b8bffc3fbb826ce5f4eb930c1ea5dbb69ce4ce864577ce962ba34c24f16d0c9c6a06ccd6a3fdd5a9ae77ec6a0d475bc4bce7a807a6ae15b959bb84b4f63f8fa078aff4c027901f7e261"}, @NFTA_CHAIN_HOOK={0x70, 0x4, 0x0, 0x1, [@NFTA_HOOK_HOOKNUM={0x8, 0x1, 0x1, 0x0, 0x1}, @NFTA_HOOK_HOOKNUM={0x8, 0x1, 0x1, 0x0, 0x2}, @NFTA_HOOK_HOOKNUM={0x8}, @NFTA_HOOK_DEV={0x14, 0x3, 'xfrm0\x00'}, @NFTA_HOOK_HOOKNUM={0x8, 0x1, 0x1, 0x0, 0x1}, @NFTA_HOOK_PRIORITY={0x8, 0x2, 0x1, 0x0, 0x473f52d9}, @NFTA_HOOK_DEV={0x14, 0x3, 'veth0_virt_wifi\x00'}, @NFTA_HOOK_DEV={0x14, 0x3, 'veth0_to_hsr\x00'}, @NFTA_HOOK_HOOKNUM={0x8, 0x1, 0x1, 0x0, 0x4}]}]}, @NFT_MSG_DELSETELEM={0x1c, 0xe, 0xa, 0x301, 0x0, 0x0, {0x7, 0x0, 0x9}, [@NFTA_SET_ELEM_LIST_SET_ID={0x8, 0x4, 0x1, 0x0, 0x3}]}, @NFT_MSG_NEWRULE={0x44, 0x6, 0xa, 0x801, 0x0, 0x0, {0x7, 0x0, 0x7}, [@NFTA_RULE_ID={0x8, 0x9, 0x1, 0x0, 0x2}, @NFTA_RULE_TABLE={0x9, 0x1, 'syz1\x00'}, @NFTA_RULE_HANDLE={0xc, 0x3, 0x1, 0x0, 0x1}, @NFTA_RULE_CHAIN_ID={0x8, 0xb, 0x1, 0x0, 0x2}, @NFTA_RULE_ID={0x8}]}], {0x14, 0x11, 0x1, 0x0, 0x0, {0x3}}}, 0x534}, 0x1, 0x0, 0x0, 0x4001}, 0x40011) (async) sendto$packet(r0, &(0x7f0000000100)="f257a8ea7bc273dfaeab96850806", 0x2a, 0x0, &(0x7f0000000200)={0x11, 0x0, r2, 0x1, 0x0, 0x6, @link_local}, 0x14) 6.066658679s ago: executing program 2 (id=5218): r0 = syz_init_net_socket$nl_rdma(0x10, 0x3, 0x10) sendmsg$netlink(r0, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000000)=[{&(0x7f0000005d00)={0x110, 0x2e, 0x1, 0x0, 0x25dfdbfb, "", [@nested={0x100, 0x117, 0x0, 0x1, [@typed={0x14, 0x1, 0x0, 0x0, @ipv6=@ipv4={'\x00', '\xff\xff', @empty}}, @typed={0x8, 0x16, 0x0, 0x0, @u32=0x2000007}, @typed={0x4, 0xeb}, @generic="50bb2d6f67d29d6fabadb107d0def49c88ea04abde1d5e8d3fb22a1b5046778bdafefc46b0449ade68bf84b36ec72dd71265fc2e882348c26c2126237dd5b37f5ae655b1086cda40e00aec58754734be31d750351dc076eb43d9621dc08c029d1608a46cf26fbe816b89f7cb81bff81a8b9482565856555ee923c65973deb0a99b962bc0fe94a3fcae3697bd7b85b3a682167c43dbf137115a40ebddcad74875ec58e9a3ddb9ad02a078cf0d972df9e99f079767734f69ce475f00ac64337803f5eb4e5842f4d98fe3fa370d47eb640dc5061dc35817c8a66c29be82"]}]}, 0x110}], 0x1, 0x0, 0x0, 0x1}, 0x8000) (async) r1 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX_80211(r1, 0x8933, &(0x7f0000000180)={'wlan0\x00'}) bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000000)={&(0x7f00000003c0)={{0xeb9f, 0x1, 0x0, 0x18, 0x0, 0x54, 0x54, 0x2, [@enum64={0x9, 0x6, 0x0, 0x13, 0x0, 0x1, [{0x9, 0x6, 0x4}, {0xe, 0x9, 0xfffff800}, {0x4, 0xffffff9d, 0xfffffffd}, {0xd, 0xf, 0xb4b2}, {0x6, 0x8, 0xb79}, {0x8000000b, 0xd3d7, 0x80000001}]}]}}, &(0x7f0000000100)=""/141, 0x6e, 0x8d, 0x1, 0x7}, 0x28) (async) r2 = openat$tun(0xffffffffffffff9c, &(0x7f0000000000), 0x48241, 0x0) ioctl$TUNSETIFF(r2, 0x400454ca, &(0x7f00000000c0)={'syzkaller1\x00', 0x6bf1c2d5adba8c32}) (async) bpf$PROG_LOAD(0x5, &(0x7f0000000640)={0x1, 0xb, &(0x7f0000000540)=ANY=[@ANYBLOB="180800ec0c000000000000000000000018010000206353b28553dbc060c430bb1c3a3362af7747e3044e4e7f742f313698497a644fb38223b8cbd87af9acc8973bda3fffde18e2ee306b9adb1264c212bd181b6157890ceb9abb0d6ca6a737220aab5792d626aea85644341d0512ed5e66de28d3522ca4255f9e4fe0471864891932667c30c65331080201bf5ac2be40e19dd8c788588377ce8f5a515145c4cedd45400b8a87787685fc76c7ffac0514bc41a21c2ca872d1b0246c47aa4867fb90f9abba266ea5f01107597fd80614b55a6abb824e0a161504ec7fccaff69bfebe216c7215e2fdfa657e"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x20, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000001140)={&(0x7f0000000100)=ANY=[@ANYRES8, @ANYRES32, @ANYBLOB="0000000000000000400012800c0001"], 0x68}}, 0x0) r3 = socket$igmp6(0xa, 0x3, 0x2) (async) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000140)={0x0, 0x0, &(0x7f00000000c0)={0x0}}, 0x4c000) (async) r4 = socket$kcm(0x2, 0xa, 0x2) ioctl$SIOCSIFHWADDR(r4, 0x8914, &(0x7f0000000380)={'syzkaller1\x00', @link_local}) (async) ioctl$sock_SIOCSIFVLAN_ADD_VLAN_CMD(r3, 0x8983, &(0x7f0000000300)={0x0, 'syzkaller1\x00', {0x2}}) write$tun(r2, &(0x7f0000000100)=ANY=[@ANYRES8=r1], 0x72) r5 = syz_genetlink_get_family_id$ethtool(&(0x7f0000000080), 0xffffffffffffffff) (async) r6 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$ETHTOOL_MSG_STRSET_GET(r6, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000500)=ANY=[@ANYBLOB="1c000000", @ANYRES16=r5, @ANYBLOB="9b0f2abd7000ffdbdf2501000000000300"], 0x1c}, 0x1, 0x0, 0x0, 0x60c5}, 0x80) (async) socket(0x10, 0x3, 0x0) (async) r7 = socket$netlink(0x10, 0x3, 0x0) (async) socket$inet_udp(0x2, 0x2, 0x0) (async) r8 = socket(0x10, 0x803, 0x0) syz_genetlink_get_family_id$nl80211(&(0x7f00000001c0), r8) (async) getsockname$packet(r8, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route(r8, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000380)=ANY=[@ANYBLOB="3c0000001000850600"/20, @ANYRES32=r9, @ANYBLOB="01000000000000001c0012000c000100626f6e64000000000c0002000800010006"], 0x3c}}, 0x0) sendmsg$nl_route(r7, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000140)=@newlink={0x3c, 0x10, 0xffffff1f, 0x0, 0x1, {}, [@IFLA_LINKINFO={0x14, 0x12, 0x0, 0x1, @veth={{0x9}, {0x4, 0x2, 0x0, 0x1, @void}}}, @IFLA_MASTER={0x8, 0xa, r9}]}, 0x3c}, 0x1, 0x0, 0x0, 0x40000}, 0x0) r10 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r10, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000480)=ANY=[@ANYBLOB="3c0000001000030400"/20, @ANYRES32=0x0, @ANYBLOB="a4280400000000001400350076657468305f746f5f626f6e6400000008000a00", @ANYRES32=r9], 0x3c}, 0x1, 0x0, 0x0, 0x4008800}, 0x8000) sendmsg$nl_route(r8, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000440)={&(0x7f0000000080)=ANY=[], 0x54}, 0x1, 0x0, 0x0, 0x4000800}, 0x80) (async) sendmsg$TIPC_NL_LINK_SET(0xffffffffffffffff, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000340)={&(0x7f0000000140)=ANY=[], 0x50}}, 0x0) 5.789718283s ago: executing program 6 (id=5223): r0 = bpf$BPF_BTF_LOAD(0x12, &(0x7f00000003c0)={&(0x7f0000000540)=ANY=[@ANYBLOB="9feb010018000000000000000c0000000c000000020000000000000000000004"], 0x0, 0x26}, 0x20) r1 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000180)='./cgroup.net/syz0\x00', 0x200002, 0x0) r2 = openat$cgroup_ro(r1, &(0x7f00000001c0)='memory.numa_stat\x00', 0x275a, 0x0) socket$packet(0x11, 0x0, 0x300) ioctl$FS_IOC_SETFLAGS(r2, 0x40086602, &(0x7f0000000040)=0x1) r3 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_tcp_int(r3, 0x6, 0x6, &(0x7f0000000000)=0x80000001, 0x4) ioctl$FIOCLEX(r3, 0x5451) mmap(&(0x7f0000000000/0x4000)=nil, 0x4000, 0x2000004, 0x1010, r2, 0x12504000) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0xd, 0x3, &(0x7f0000000800)=ANY=[@ANYBLOB="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"], &(0x7f0000000080)='GPL\x00', 0x5, 0x1f6, &(0x7f00000002c0)=""/168, 0x0, 0x0, '\x00', 0x0, @sock_ops, r0, 0x8, 0x0, 0x0, 0x10, &(0x7f0000000200), 0x1, 0x0, 0xffffffffffffffff, 0xf5010000}, 0x6d) bpf$BPF_GET_PROG_INFO(0xf, &(0x7f00000007c0)={r2, 0xe0, &(0x7f0000000400)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, ""/16, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, &(0x7f0000001a00), 0x0, 0x0, 0x10, 0x8, 0x0, 0x0}}, 0x10) 5.788521725s ago: executing program 2 (id=5224): syz_emit_ethernet(0x3b6, &(0x7f0000000200)=ANY=[@ANYBLOB="aaaaaaaaaaaaaaaaaaaaaa2286dd60cabf0003803afffe8000000000000000000000000000bbff02000000000000000000000000000186009078000000000000000000000000000aa78ce54006598080a8030037004023493b87aafaffffffffffffff23732472eefa45ad96579269748e254c1e4a8a8b3f0ab0c430d3be27df3e34066d42ca0a5c15b37adac15084dbaf736b41e5af250200010000000500000000260004000018fe906d26efe39393fe08f73eabc5977b1190a3a6ad8338f1511cdd10c35d8f6de79fc7fd175f75649fa208fb487d4c622d7d188e91dc71a368a32c829af02d7f44d92324a7051e460a13ddde25a5b85b9d930914625d8a049b4cf0d129806a610ad8477a2499a9a0527f75b655a6653d0363a979acf93f88eea07d68423e90280409de1657275f716a2bf2915d1783e8eb477b0d1170f0ecbdef4c23e1b76e9ab3d2fbe4b34438d2a77577edd0ebed9682b851b380ae0cab282af9d7ebe668177704c5fd4698c934de4731f3f61effc978001d06aa85616177c41bc943afcb84619755403946b0730a18d5c38cf7dcad830f2dc8674b87ba8b58f81ece27975cc39e595e9af90b4fe92a38d25551c2d9ebfc5dfc5a2a501b7e483de3f808895c5f4a1a2367bc591dd8b094822ff0dea07c9a1f643c822a18b79f7c5eba31fb68b2d734a6671e27182aee96f24a4a5cf390dab23b500b0c0272479611e4f7f4299ec4d926d443367b105185e6ecd9602ba95392343e9bbd047ef6bc1ba42399907ccd0a562db212baa39eb8164e240069f656d3a05fecf894222a141123f5ac010000000000000090aa235a670670ffc5dc49dfb58d00000000000000040b17dcea46805d4809c20547406b18901b0aeff04c0300f3c75dc2d227a83b89483be298af1084743475671545e65eb2e9ac946a3f0e2bc4619f91394c02bcfbbb7d71138537d68e2d2c6393a9f3becd1a9f51a948b5b3032107b8a3e100908f61640000000200fe80ffff00000000000000ff0bc0fe00000000008824716e9f201a0015ca83747357a02745000400000000145e14f0e74d2d42cfb3f27fafb60845f90b6dfc2e37bc87c6905bbc94d33e1ea71a28105f543e868a8a53b360a9d33e2b1e26eb1d18065daa7628cf9ef083611c9f6ae2e1eb3d8bf9c6ab2642c4808288e62afbf03269f1f98aea6ab3beb5fdc5fdaabc2c676d8800871a6aa54155dea2d995cb22c9924e0ad38c6967052cc7786d779b8353aac33a57d79b05613a12328f61129017fb632dbf04542188b196e213408c0005d5170000dce9674a36da018dff16e70b8b14c4b7a94fe18e88"], 0x0) r0 = openat$ppp(0xffffffffffffff9c, &(0x7f0000000000), 0xc0802, 0x0) ioctl$PPPIOCNEWUNIT(r0, 0xc004743e, &(0x7f0000000180)=0x4000000) ioctl$PPPIOCSFLAGS1(r0, 0x40047459, &(0x7f0000000080)=0x6100204) pwritev(r0, &(0x7f0000000100)=[{&(0x7f0000000540)="00214797357e0e8d442441e9beae583d48ac340dc69d54af976b6a7c18c4907ed175462f18ec0e16ad9f57abed3bad46320d0d4abf7c3a617f1b2fbe8b338d1fce4490668ce9faadcf6b44b9906eeb59241caa04a1bf2399f37a7f2218", 0x5d}], 0x1, 0x739, 0x1) preadv(r0, &(0x7f0000000400)=[{&(0x7f0000000140)=""/176, 0xb0}], 0x1, 0x6, 0x1) r1 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r1, &(0x7f0000000640)={&(0x7f00000000c0)={0x10, 0x0, 0x0, 0x40804208}, 0xc, &(0x7f0000000600)={&(0x7f00000005c0)=@getlink={0x3c, 0x12, 0x20, 0x70bd29, 0x25dfdbfd, {0x0, 0x0, 0x0, 0x0, 0x14}, [@IFLA_AF_SPEC={0x14, 0x1a, 0x0, 0x1, [@AF_MPLS={0x4}, @AF_INET6={0x4}, @AF_MPLS={0x4}, @AF_BRIDGE={0x4}]}, @IFLA_LINKMODE={0x5, 0x11, 0x7}]}, 0x3c}, 0x1, 0x0, 0x0, 0x80}, 0x1) socket(0x2, 0xa, 0x300) r2 = socket$packet(0x11, 0x3, 0x300) setsockopt$packet_int(r2, 0x107, 0xf, &(0x7f0000000000)=0x9, 0x4) ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f0000000040)={'ip6_vti0\x00', 0x0}) sendto$packet(r2, &(0x7f0000000180)="10030600e0ff020004004788aa96a13bb100001100007fca1a00", 0x10608, 0x0, &(0x7f0000000140)={0x11, 0x0, r3}, 0x14) r4 = socket$inet_udp(0x2, 0x2, 0x0) ioctl$sock_ipv6_tunnel_SIOCDEL6RD(r4, 0x89fa, &(0x7f0000000040)={'sit0\x00', &(0x7f0000000000)={@dev={0xfe, 0x80, '\x00', 0x3b}, @empty, 0x6, 0x1f}}) 5.619033345s ago: executing program 6 (id=5227): r0 = socket$inet6_sctp(0xa, 0x1, 0x84) setsockopt$inet_sctp6_SCTP_DEFAULT_PRINFO(r0, 0x84, 0x72, &(0x7f0000000240)={0x0, 0x4020, 0x30}, 0xc) bind$inet6(r0, &(0x7f0000000000)={0xa, 0x4e23, 0x0, @empty}, 0x1c) sendto$inet6(r0, &(0x7f0000000080)="002dfdcd71cff35d7f19ea4ff800000fd8290dcdc78aedebce", 0x19, 0x24000010, &(0x7f0000000200)={0xa, 0x4e23, 0x0, @private1}, 0x1c) (async) r1 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r1, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000200)={{0x14, 0x10, 0x4}, [@NFT_MSG_NEWTABLE={0x20, 0x0, 0xa, 0x5, 0x0, 0x0, {0x7}, [@NFTA_TABLE_NAME={0x9, 0x1, 'syz0\x00'}]}, @NFT_MSG_NEWSET={0x3c, 0x9, 0xa, 0x401, 0x0, 0x0, {0x7}, [@NFTA_SET_ID={0x8}, @NFTA_SET_NAME={0x9, 0x2, 'syz1\x00'}, @NFTA_SET_TABLE={0x9, 0x1, 'syz0\x00'}, @NFTA_SET_KEY_LEN={0x8, 0x5, 0x1, 0x0, 0x21}]}, @NFT_MSG_NEWSETELEM={0x2c, 0x1e, 0xa, 0x301, 0x0, 0x0, {0x7}, [@NFTA_SET_ELEM_LIST_SET={0x9, 0x2, 'syz0\x00'}, @NFTA_SET_ELEM_LIST_TABLE={0x9, 0x1, 'syz0\x00'}]}], {0x14, 0x10, 0x1, 0x0, 0x0, {0x0, 0x84}}}, 0xb0}}, 0x0) sendto$inet6(r0, &(0x7f0000000c80)="7cffa9061b2f8b", 0x7, 0xbcff, 0x0, 0x0) 5.564700772s ago: executing program 2 (id=5230): r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = socket(0x10, 0x803, 0x0) sendmsg$IPVS_CMD_SET_INFO(r1, &(0x7f0000000b00)={0x0, 0x0, &(0x7f0000000ac0)={0x0, 0x14}}, 0x0) getsockname$packet(r1, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route(r0, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000080)=@newlink={0x20, 0x10, 0x8f6333b08ec0245e, 0x0, 0x0, {0x0, 0x0, 0x0, r2, 0x90646, 0x10280}}, 0x20}, 0x1, 0x0, 0x0, 0x20048e55}, 0x41) r3 = socket$netlink(0x10, 0x3, 0x0) r4 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) bind$bt_hci(r4, &(0x7f0000000000)={0x1f, 0xffff, 0x3}, 0x6) r5 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) setsockopt$SO_ATTACH_FILTER(r5, 0x1, 0x1a, &(0x7f0000000080)={0x1, &(0x7f0000000040)=[{0x6}]}, 0x10) bind$bt_hci(r5, &(0x7f0000000140)={0x1f, 0xffff, 0x2}, 0x6) r6 = socket(0x10, 0x803, 0x4) sendmsg$IPVS_CMD_SET_INFO(r6, &(0x7f0000000b00)={0x0, 0x0, &(0x7f0000000ac0)={0x0, 0x14}}, 0x0) r7 = socket$xdp(0x2c, 0x3, 0x0) setsockopt$XDP_RX_RING(r7, 0x11b, 0x2, &(0x7f0000000040)=0x1000000, 0x4) bind$xdp(r7, &(0x7f0000000100)={0x2c, 0x4}, 0x10) r8 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCETHTOOL(r8, 0x8946, &(0x7f0000000200)={'xfrm0\x00', &(0x7f00000004c0)=@ethtool_sset_info={0x37, 0x0, 0x8001}}) mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x2000001, 0x12, r7, 0x0) getsockname$packet(r6, &(0x7f0000000340)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x66) sendmsg$nl_route(r3, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000140)=@newlink={0x3c, 0x10, 0xffffff1f, 0x0, 0x80, {0x0, 0x0, 0x0, 0x0, 0x300, 0x3f00}, [@IFLA_MASTER={0x8, 0xa, r9}, @IFLA_LINKINFO={0x14, 0x12, 0x0, 0x1, @bridge={{0xb}, {0x4}}}]}, 0x3c}, 0x1, 0x0, 0x0, 0x2000c0c1}, 0x40000) 4.628878446s ago: executing program 6 (id=5237): socket$nl_route(0x10, 0x3, 0x0) (async) r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000140)={0xd, 0x4, &(0x7f0000000000)=ANY=[@ANYBLOB="180000000000000000000000000000007110a9000000000095"], &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x24}, 0x90) (async) r1 = socket(0x200000000000011, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000000)={'bridge0\x00', 0x0}) r3 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r3, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000080)=ANY=[@ANYRESDEC=r0, @ANYRES32=r2, @ANYBLOB='\x00\x00\x00\x00', @ANYRESDEC=r1], 0x38}}, 0x8001) r4 = socket$nl_generic(0x10, 0x3, 0x10) r5 = syz_genetlink_get_family_id$ethtool(&(0x7f0000001300), r4) sendmsg$ETHTOOL_MSG_TSINFO_GET(r4, &(0x7f0000001480)={0x0, 0x0, &(0x7f0000001440)={&(0x7f0000000000)={0x2c, r5, 0x200, 0x70bd27, 0x25dfdbfd, {}, [@HEADER={0x18, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'bridge_slave_0\x00'}]}]}, 0x2c}, 0x1, 0x0, 0x0, 0x4030015}, 0x10004800) 4.502271687s ago: executing program 6 (id=5240): r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000580)={&(0x7f0000000180)=@newlink={0x3c, 0x10, 0x403, 0x4, 0x0, {0x0, 0x0, 0x0, 0x0, 0x20101, 0x382}, [@IFLA_LINKINFO={0x1c, 0x12, 0x0, 0x1, @geneve={{0xb}, {0xc, 0x2, 0x0, 0x1, [@IFLA_GENEVE_UDP_ZERO_CSUM6_TX={0x5}]}}}]}, 0x3c}, 0x1, 0xba01}, 0x810) ioctl$sock_kcm_SIOCKCMCLONE(0xffffffffffffffff, 0x89e2, &(0x7f00000001c0)={r0}) bind$xdp(r1, &(0x7f0000000240)={0x2c, 0x3, 0x0, 0x2c}, 0x10) bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000300)={&(0x7f0000000340)={{0xeb9f, 0x1, 0x0, 0x18, 0x0, 0x84, 0x84, 0x2, [@var, @func_proto={0x0, 0x6, 0x0, 0xd, 0x0, [{}, {}, {}, {0xa}, {}, {}]}, @func, @func_proto={0x0, 0x1, 0x0, 0xd, 0x0, [{0x4, 0x5}]}, @volatile, @volatile={0x0, 0x0, 0x0, 0x9, 0x2}]}}, 0x0, 0x9e}, 0x28) r2 = bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000140)={&(0x7f0000000000)={{0xeb9f, 0x1, 0x0, 0x18, 0x0, 0xc, 0xc, 0x2, [@struct]}}, 0x0, 0x26}, 0x20) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000500)={0x6, 0x3, &(0x7f0000000200)=ANY=[@ANYBLOB="1800"/24], &(0x7f0000000280)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x25, r2, 0x8, 0x0, 0x0, 0x10, &(0x7f00000004c0), 0x2, 0x0, 0x0, 0x1d6225b, 0x0, 0x0, 0x14}, 0x90) r3 = syz_genetlink_get_family_id$tipc(&(0x7f0000000080), 0xffffffffffffffff) close(r0) sendmsg$TIPC_CMD_GET_NODES(0xffffffffffffffff, &(0x7f0000000180)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x80000}, 0xc, &(0x7f0000000100)={&(0x7f00000000c0)={0x1c, r3, 0x300, 0x70bd2c, 0x25dfdbfe, {}, ["", "", "", "", "", ""]}, 0x1c}, 0x1, 0x0, 0x0, 0xc000}, 0x48095) socket$nl_route(0x10, 0x3, 0x0) (async) sendmsg$nl_route(r0, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000580)={&(0x7f0000000180)=@newlink={0x3c, 0x10, 0x403, 0x4, 0x0, {0x0, 0x0, 0x0, 0x0, 0x20101, 0x382}, [@IFLA_LINKINFO={0x1c, 0x12, 0x0, 0x1, @geneve={{0xb}, {0xc, 0x2, 0x0, 0x1, [@IFLA_GENEVE_UDP_ZERO_CSUM6_TX={0x5}]}}}]}, 0x3c}, 0x1, 0xba01}, 0x810) (async) ioctl$sock_kcm_SIOCKCMCLONE(0xffffffffffffffff, 0x89e2, &(0x7f00000001c0)={r0}) (async) bind$xdp(r1, &(0x7f0000000240)={0x2c, 0x3, 0x0, 0x2c}, 0x10) (async) bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000300)={&(0x7f0000000340)={{0xeb9f, 0x1, 0x0, 0x18, 0x0, 0x84, 0x84, 0x2, [@var, @func_proto={0x0, 0x6, 0x0, 0xd, 0x0, [{}, {}, {}, {0xa}, {}, {}]}, @func, @func_proto={0x0, 0x1, 0x0, 0xd, 0x0, [{0x4, 0x5}]}, @volatile, @volatile={0x0, 0x0, 0x0, 0x9, 0x2}]}}, 0x0, 0x9e}, 0x28) (async) bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000140)={&(0x7f0000000000)={{0xeb9f, 0x1, 0x0, 0x18, 0x0, 0xc, 0xc, 0x2, [@struct]}}, 0x0, 0x26}, 0x20) (async) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000500)={0x6, 0x3, &(0x7f0000000200)=ANY=[@ANYBLOB="1800"/24], &(0x7f0000000280)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x25, r2, 0x8, 0x0, 0x0, 0x10, &(0x7f00000004c0), 0x2, 0x0, 0x0, 0x1d6225b, 0x0, 0x0, 0x14}, 0x90) (async) syz_genetlink_get_family_id$tipc(&(0x7f0000000080), 0xffffffffffffffff) (async) close(r0) (async) sendmsg$TIPC_CMD_GET_NODES(0xffffffffffffffff, &(0x7f0000000180)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x80000}, 0xc, &(0x7f0000000100)={&(0x7f00000000c0)={0x1c, r3, 0x300, 0x70bd2c, 0x25dfdbfe, {}, ["", "", "", "", "", ""]}, 0x1c}, 0x1, 0x0, 0x0, 0xc000}, 0x48095) (async) 4.154193376s ago: executing program 6 (id=5245): r0 = socket(0xa, 0x3, 0x3a) setsockopt$MRT6_FLUSH(r0, 0x29, 0xd4, &(0x7f0000000180)=0x4, 0x4) bpf$OBJ_GET_MAP(0x7, &(0x7f0000000040)=@o_path={&(0x7f0000000000)='./file0\x00', 0x0, 0x18, r0}, 0x18) 3.991443522s ago: executing program 0 (id=5246): r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000040), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f0000000180)={'wlan0\x00', 0x0}) sendmsg$NL80211_CMD_TRIGGER_SCAN(r0, &(0x7f00000014c0)={&(0x7f0000000f00)={0x10, 0x0, 0x0, 0x8}, 0xc, &(0x7f0000001480)={&(0x7f0000000f40)={0x19c, r1, 0x1, 0x70bd25, 0x25dfdbfb, {{}, {@val={0x8, 0x3, r2}, @void}}, [@NL80211_ATTR_SCAN_SUPP_RATES={0xf4, 0x7d, 0x0, 0x1, [@NL80211_BAND_2GHZ={0xef, 0x0, "549b1da48ec9c83bfedbb14eb2a63142b836d006a50901d25146ede566d2851f64e4da9c76a9565ed6fc9c09c9aa49d409692ce6e93aa45c69aaaedf1efedf0d3d539d52eda5803b59dcd30578552315d18b42bdd1c2915336f7ddb7ed2d5a6a4c388ef61aed3ffbffd9fdc8f808c47280291b5470b8d2499bda97ebf077baf8e825d1d8f8dd739f1f48a959b7cf143922370538ed823d04d3511e340f73a79e1916f66b3a23b5a46485954c65aa668187792343f69392c2c252960e609dac86ca982323770d91fae077ea939ea2eec4278195630c0702f05750b50478ceb62020c4abba4f902b4fca5c09"}]}, @NL80211_ATTR_SCAN_SSIDS={0x70, 0x2d, 0x0, 0x1, [{0x21, 0x0, @random="a2ab66ad3290a850e4247b7f9014645df702abece3ff76076d9bf3e428"}, {0xa, 0x0, @default_ibss_ssid}, {0xa, 0x0, @default_ap_ssid}, {0xa, 0x0, @default_ibss_ssid}, {0x24, 0x0, @random="8e8d88cefd4ebcce9c791f4997961871265610d4b87f12d061bc0119049fedfb"}]}, @NL80211_ATTR_SCHED_SCAN_INTERVAL={0x8, 0x77, 0x5}, @NL80211_ATTR_SCHED_SCAN_RSSI_ADJUST={0x6, 0xf7, {0xe}}, @NL80211_ATTR_MEASUREMENT_DURATION_MANDATORY={0x4}, @NL80211_ATTR_SCAN_SUPP_RATES={0x4}, @NL80211_ATTR_MEASUREMENT_DURATION_MANDATORY={0x4}]}, 0x19c}, 0x1, 0x0, 0x0, 0x40}, 0x400) 3.924768385s ago: executing program 6 (id=5247): r0 = bpf$PROG_LOAD(0x5, &(0x7f0000000440)={0x20, 0x6, &(0x7f0000000000)=@framed={{0xffffffb4, 0x6, 0x0, 0x0, 0x0, 0x71, 0x11, 0x24}, [@func={0x85, 0x0, 0x1, 0x0, 0x2}, @call={0x85, 0x0, 0x0, 0x20000007}, @exit]}, &(0x7f0000000080)='GPL\x00', 0x4, 0xc3, &(0x7f000000cf3d)=""/195, 0x41100, 0x0, '\x00', 0x0, @netfilter, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0xe}, 0x94) bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000880)={&(0x7f00000007c0)=ANY=[@ANYBLOB="9feb0100180000000000eaccc015083e4d38699d00001c0000001c0000000300000000000000000000050000000001000000000000110100000000000000005f00"], 0x0, 0x37}, 0x20) r1 = syz_init_net_socket$netrom(0x6, 0x5, 0x0) getsockopt$netrom_NETROM_T4(r1, 0x103, 0x4, 0x0, &(0x7f00000000c0)) r2 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000040)='memory.events\x00', 0x275a, 0x0) mmap(&(0x7f0000000000/0x4000)=nil, 0x4000, 0x1, 0x10012, r2, 0x0) r3 = socket$inet6_tcp(0xa, 0x1, 0x0) r4 = socket$nl_route(0x10, 0x3, 0x0) bpf$PROG_LOAD(0x5, &(0x7f0000000080)={0x4, 0xe, 0x0, 0x0}, 0x94) sendmsg$nl_route(r4, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000040)=ANY=[@ANYBLOB="4800000010000304000000000400000000007400", @ANYRES32=0x0, @ANYBLOB="0000000003120100280012800b00010062726964676500001800028005002c00020000000c002e"], 0x48}, 0x1, 0x0, 0x0, 0x20040884}, 0x0) setsockopt$inet6_mreq(r3, 0x29, 0x1b, &(0x7f0000001240)={@initdev={0xfe, 0x88, '\x00', 0x0, 0x0}}, 0x14) r5 = socket$rds(0x15, 0x5, 0x0) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000000c0)=ANY=[@ANYBLOB="3800000054000147880000000000000007008209", @ANYRES32, @ANYBLOB="20000100", @ANYRES32], 0x38}}, 0x0) ioctl$TUNSETSTEERINGEBPF(r2, 0x800454e0, &(0x7f0000000100)=r2) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000380)=@newqdisc={0x24, 0x24, 0xf0b, 0x0, 0x0, {0x0, 0x0, 0x0, 0x0, {}, {0xffff, 0xffff}}}, 0x24}}, 0x0) r6 = socket$netlink(0x10, 0x3, 0x4) r7 = bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000240)={0x2, 0x4, 0x8, 0x1, 0x80, 0x0}, 0x50) bpf$PROG_LOAD(0x5, &(0x7f0000000840)={0xb, 0x1c, &(0x7f0000000d80)=ANY=[@ANYBLOB="18080000f7ffffff000000000000000018110000", @ANYRES32=r7, @ANYBLOB="0000000000000000b702000014000000b7030000000000008500000005000000bf0900000000000035090100000000009500000000000000b70200001fffffff7b9af8ff00000000d60900001fffffff7baaf0ff00000000bf2700000000000007080000fffdffffbf9400000000000007040000f0ffffff640200000800000018220000", @ANYRES32=r7, @ANYBLOB="0000000000000000b7050000080000004608f0ff76000000bf980000000000004d080000000000008500000005000000b70000000000000095"], &(0x7f0000000980)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x80000000}, 0x94) sendmmsg(r6, &(0x7f00000002c0), 0x40000000000009f, 0x0) bind$rds(r5, &(0x7f0000000040)={0x2, 0x0, @loopback}, 0x10) sendmsg$rds(r5, &(0x7f0000001600)={&(0x7f0000000000)={0x2, 0x0, @remote}, 0x10, 0x0, 0x0, &(0x7f0000000180)=[@rdma_args={0x18, 0x114, 0x1, {{}, {0x0}, &(0x7f0000000680)=[{&(0x7f0000001640)=""/4096, 0x1000}, {&(0x7f0000002640)=""/4096, 0x1000}], 0x2, 0x27}}], 0x48}, 0x0) ioctl$sock_ipv6_tunnel_SIOCGET6RD(r2, 0x89f8, &(0x7f0000000200)={'syztnl0\x00', &(0x7f00000006c0)={'sit0\x00', 0x0, 0x80, 0x40, 0x7fffffff, 0x5, {{0x34, 0x4, 0x0, 0x8, 0xd0, 0x65, 0x0, 0x78, 0x29, 0x0, @empty, @multicast1, {[@lsrr={0x83, 0xb, 0x73, [@remote, @remote]}, @timestamp={0x44, 0x10, 0x67, 0x0, 0x0, [0x6, 0x3, 0x1]}, @timestamp={0x44, 0x14, 0x7c, 0x0, 0x2, [0x4, 0x1, 0x9669, 0x7]}, @rr={0x7, 0x27, 0xf4, [@dev={0xac, 0x14, 0x14, 0x2d}, @loopback, @local, @broadcast, @private=0xa010100, @dev={0xac, 0x14, 0x14, 0x23}, @local, @initdev={0xac, 0x1e, 0x0, 0x0}, @multicast2]}, @noop, @timestamp={0x44, 0x18, 0x34, 0x0, 0x0, [0x1, 0x72d, 0x7, 0x7, 0xd]}, @end, @timestamp={0x44, 0x18, 0xed, 0x0, 0x5, [0xffffffff, 0xbb, 0x2, 0x2, 0x6]}, @timestamp_prespec={0x44, 0x34, 0x2a, 0x3, 0x2, [{@remote, 0x8001}, {@dev={0xac, 0x14, 0x14, 0x1a}, 0xfffffffb}, {@rand_addr=0x64010100, 0x1}, {@loopback, 0xf}, {@dev={0xac, 0x14, 0x14, 0x23}, 0x4}, {@empty, 0x5}]}]}}}}}) bpf$MAP_CREATE(0x0, &(0x7f00000005c0)=@bloom_filter={0x1e, 0x8, 0x10, 0xffffffff, 0x28000, r2, 0x9, '\x00', r8, r2, 0x0, 0x2, 0x4, 0xf, @value=r2}, 0x50) getpid() r9 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r9, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000003c0)={{0x14}, [@NFT_MSG_NEWTABLE={0x20, 0x0, 0xa, 0x5, 0x0, 0x0, {0x1}, [@NFTA_TABLE_NAME={0x9, 0x1, 'syz0\x00'}]}, @NFT_MSG_NEWCHAIN={0x2c, 0x3, 0xa, 0x201, 0x0, 0x0, {0x1}, [@NFTA_CHAIN_TABLE={0x9, 0x1, 'syz0\x00'}, @NFTA_CHAIN_NAME={0x9, 0x3, 'syz1\x00'}]}, @NFT_MSG_NEWRULE={0x58, 0x6, 0xa, 0x401, 0x0, 0x0, {0x1}, [@NFTA_RULE_CHAIN_ID={0x8}, @NFTA_RULE_EXPRESSIONS={0x30, 0x4, 0x0, 0x1, [{0x2c, 0x1, 0x0, 0x1, @cmp={{0x8}, @val={0x20, 0x2, 0x0, 0x1, [@NFTA_CMP_DATA={0xc, 0x3, 0x0, 0x1, [@NFTA_DATA_VALUE={0x5, 0x1, 'c'}]}, @NFTA_CMP_SREG={0x8, 0x1, 0x1, 0x0, 0x8}, @NFTA_CMP_OP={0x8, 0x2, 0x1, 0x0, 0x1}]}}}]}, @NFTA_RULE_TABLE={0x9, 0x1, 'syz0\x00'}]}], {0x14}}, 0xcc}, 0x1, 0x0, 0x0, 0x20004014}, 0x0) bpf$BPF_GET_PROG_INFO(0xf, &(0x7f0000000380)={r0, 0xe8, &(0x7f00000004c0)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, ""/16, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8, 0x0, 0x0}}, 0x10) 3.864390842s ago: executing program 0 (id=5248): socketpair$unix(0x1, 0x5, 0x0, &(0x7f00000001c0)={0xffffffffffffffff, 0xffffffffffffffff}) setsockopt$SO_ATTACH_FILTER(r0, 0x1, 0x1a, &(0x7f0000000000)={0x3, &(0x7f0000000040)=[{}, {0x94, 0x0, 0x0, 0x8000}, {0x46}]}, 0x10) r1 = syz_init_net_socket$x25(0x9, 0x5, 0x0) r2 = socket$nl_generic(0x10, 0x3, 0x10) r3 = syz_genetlink_get_family_id$l2tp(&(0x7f0000000b40), 0xffffffffffffffff) sendmsg$L2TP_CMD_TUNNEL_GET(r2, &(0x7f0000000c00)={0x0, 0x0, &(0x7f0000000bc0)={&(0x7f0000000b80)={0x14, r3, 0x1}, 0x14}}, 0x0) listen(r1, 0xc) close(r1) ioctl$TUNSETIFF(0xffffffffffffffff, 0x400454ca, &(0x7f0000000080)={'pimreg0\x00', 0x7c2}) r4 = socket$inet_sctp(0x2, 0x5, 0x84) getsockopt$inet_sctp_SCTP_PR_STREAM_STATUS(r4, 0x84, 0x74, &(0x7f0000000080)=""/51, &(0x7f0000000140)=0x33) pipe(&(0x7f0000000100)) r5 = socket$nl_rdma(0x10, 0x3, 0x14) sendmsg$RDMA_NLDEV_CMD_NEWLINK(r5, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000440)=ANY=[@ANYBLOB="38000000031401003b8a7000fcdbdf250900020073797a32000000000800410073707700140033006c6f"], 0x38}, 0x1, 0x0, 0x0, 0x4}, 0x810) r6 = socket(0x10, 0x3, 0x0) setsockopt$netlink_NETLINK_TX_RING(r6, 0x10e, 0xc, &(0x7f0000000180)={0xffffff}, 0x10) write(r6, &(0x7f0000000000)="240000001a00590214f9f407000904101f00000000000100000200000800040001000000", 0x24) accept(r1, 0x0, 0x0) bpf$MAP_CREATE(0x0, &(0x7f0000000080)=ANY=[@ANYBLOB="1e0000000400000002000000ffff000088100800", @ANYRES32, @ANYBLOB="0100"/20, @ANYRES32=0x0, @ANYRES32, @ANYBLOB="0100000002000000050000009e771bf500"/28], 0x50) 3.581052673s ago: executing program 0 (id=5251): r0 = bpf$MAP_CREATE(0x100000000000000, &(0x7f0000000440)=@base={0xa, 0x9, 0x8, 0x2}, 0x48) r1 = bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000040)={0x3, 0x6, &(0x7f0000000240)=@framed={{0x18, 0x2}, [@map_fd={0x18, 0x3, 0x1, 0x0, r0}, @call={0x85, 0x0, 0x0, 0xc0}]}, &(0x7f0000000000)='GPL\x00', 0x0, 0x0, 0x0, 0x41100}, 0x94) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000140)={r1, 0x18000000000002a0, 0xe, 0x0, &(0x7f0000000200)="9e36d448b388dd965f7a33120800", 0x0, 0xbffffffe, 0xe8030000, 0x0, 0x0, 0x0, 0x0}, 0x50) r2 = socket$netlink(0x10, 0x3, 0x8000000004) writev(r2, 0x0, 0x0) bpf$PROG_LOAD(0x5, &(0x7f0000000680)={0x3, 0x8, &(0x7f0000000740)=@framed={{}, [@tail_call={{0x18, 0x2, 0x1, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x70000000}}]}, &(0x7f0000000780)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @sched_cls, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0xa0) r3 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r3, &(0x7f000000c2c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000340)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a28000000000a0101000000005e1affd5020000000900010073797a300000000008000240000000032c000000030a01030000e6ff00000000020000000900010073797a30000000000900030073797a320000000014000000110001"], 0x7c}}, 0x0) r4 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r4, &(0x7f0000000140)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f00000003c0)={{0x14}, [@NFT_MSG_DELCHAIN={0x20, 0x5, 0xa, 0x5, 0x0, 0x0, {0x2}, [@NFTA_CHAIN_TABLE={0x9, 0x1, 'syz0\x00'}]}], {0x14}}, 0x48}}, 0x0) bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000080)={&(0x7f0000000240)={{0xeb9f, 0x1, 0x0, 0x18, 0x0, 0xc, 0xc, 0x3, [@fwd={0x2}]}, {0x0, [0x30]}}, 0x0, 0x27, 0x0, 0x1, 0x7fffffff}, 0x20) bpf$PROG_LOAD(0x5, &(0x7f000000e000)={0x1, 0x4, &(0x7f0000000880)=ANY=[@ANYBLOB="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"], &(0x7f0000003ff6)='GPL\x00', 0x5, 0xfd96, &(0x7f0000000080)=""/201, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0xfffffffffffffd56, 0x10, &(0x7f0000000000), 0x1dd}, 0x48) 2.833367952s ago: executing program 8 (id=5256): r0 = socket$nl_generic(0x10, 0x3, 0x10) (async, rerun: 64) r1 = syz_genetlink_get_family_id$tipc2(&(0x7f0000000080), 0xffffffffffffffff) (rerun: 64) sendmsg$TIPC_NL_LINK_GET(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000240)={0x24, r1, 0x351d4d5b9375e359, 0x0, 0x0, {}, [@TIPC_NLA_LINK={0x10, 0x4, 0x0, 0x1, [@TIPC_NLA_LINK_NAME={0x9, 0x5, 'syz0\x00'}]}]}, 0x24}}, 0x0) (async) r2 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$XFS_IOC_PATH_TO_FSHANDLE(r2, 0xc0385868, &(0x7f0000000200)={r0, &(0x7f00000000c0)='\xbf{\\@\\+@^/,\x00', 0x100, &(0x7f0000000140)={@_ha_fsid={[0x5, 0xffffff01]}, {0x3, 0x5a40, 0x7, 0x6}}, 0x8000, &(0x7f0000000180)={@_ha_fsid}, &(0x7f00000001c0)=0x2}) syz_genetlink_get_family_id$devlink(&(0x7f0000000000), r3) (async) r4 = socket$nl_netfilter(0x10, 0x3, 0xc) close(r4) (async) r5 = socket$nl_netfilter(0x10, 0x3, 0xc) close(r5) (async) r6 = socket$nl_netfilter(0x10, 0x3, 0xc) write$cgroup_subtree(r3, &(0x7f0000000700)={[{0x2b, 'perf_event'}]}, 0xc) sendmsg$NFT_BATCH(r6, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000000)=ANY=[@ANYBLOB="140000001000010000000000000000000500000a28000000000a030000000000000000000a00000708000240000000020900010073797a31000000002c000000030a010100000000000000000a0000070900010073797a31000000000900030073797a320000000014000000110001"], 0x7c}, 0x1, 0x0, 0x0, 0x4090}, 0x0) (async) sendmsg$NFT_BATCH(r6, &(0x7f0000009b40)={0x0, 0x0, &(0x7f0000009b00)={&(0x7f0000000680)={{0x14, 0x10, 0x1, 0x0, 0x0, {0x5}}, [@NFT_MSG_NEWSET={0x44, 0x9, 0xa, 0x401, 0x0, 0x0, {0xa, 0x0, 0x4}, [@NFTA_SET_TABLE={0x9, 0x1, 'syz1\x00'}, @NFTA_SET_KEY_LEN={0x8, 0x5, 0x1, 0x0, 0x2}, @NFTA_SET_NAME={0x9, 0x2, 'syz1\x00'}, @NFTA_SET_ID={0x8, 0xa, 0x1, 0x0, 0xfffffffc}, @NFTA_SET_FLAGS={0x8, 0x3, 0x1, 0x0, 0x130}]}], {0x14, 0x11, 0x1, 0x0, 0x0, {0x1}}}, 0x6c}, 0x1, 0x0, 0x0, 0x4000850}, 0x40) (async) sendmsg$NFT_BATCH(r5, &(0x7f0000009b40)={0x0, 0x0, &(0x7f0000009b00)={&(0x7f0000000340)={{0x14, 0x10, 0x1, 0x0, 0x0, {0x5}}, [@NFT_MSG_NEWSETELEM={0x4c, 0xc, 0xa, 0x101, 0x0, 0x0, {0xa, 0x0, 0x6}, [@NFTA_SET_ELEM_LIST_SET={0x9, 0x2, 'syz1\x00'}, @NFTA_SET_ELEM_LIST_TABLE={0x9, 0x1, 'syz1\x00'}, @NFTA_SET_ELEM_LIST_ELEMENTS={0x20, 0x3, 0x0, 0x1, [{0x1c, 0x0, 0x0, 0x1, [@NFTA_SET_ELEM_KEY={0xc, 0x1, 0x0, 0x1, [@NFTA_DATA_VALUE={0x6, 0x1, '\x00\x00'}]}, @NFTA_SET_ELEM_TIMEOUT={0xc, 0x4, 0x1, 0x0, 0x7}]}]}]}], {0x14, 0x11, 0x1, 0x0, 0x0, {0x1}}}, 0x74}, 0x1, 0x0, 0x0, 0x4008051}, 0x40) (async) sendmsg$NFT_BATCH(r4, &(0x7f0000009b40)={0x0, 0x0, &(0x7f0000009b00)={&(0x7f00000001c0)=ANY=[@ANYBLOB="140000001000010000000000000000000500000a480000001e0a010100000000000000000a0000060900020073797a31000000000900010073797a31000000001c000380180000800c000180060001"], 0x70}, 0x1, 0x0, 0x0, 0x4451099e661a63b1}, 0x0) sendmsg$nl_generic(r2, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000800)={0x1c, 0x2e, 0x9, 0x70bd27, 0x0, {0x4}, [@typed={0x6, 0xb, 0x0, 0x0, @str='{\x00'}]}, 0x1c}, 0x1, 0x0, 0x0, 0x42804}, 0x84) (async) readv(r2, &(0x7f0000000640)=[{&(0x7f0000000840)=""/4096, 0x1000}, {&(0x7f0000000280)=""/29, 0x1d}, {&(0x7f00000002c0)=""/25, 0x19}, {&(0x7f0000000300)=""/135, 0x87}, {&(0x7f00000003c0)=""/243, 0xf3}, {&(0x7f00000004c0)=""/39, 0x27}, {&(0x7f0000000500)=""/228, 0xe4}, {&(0x7f0000001840)=""/4096, 0x1000}, {&(0x7f0000000600)=""/8, 0x8}], 0x9) 2.530883582s ago: executing program 0 (id=5258): r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000040), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f0000000180)={'wlan0\x00', 0x0}) sendmsg$NL80211_CMD_TRIGGER_SCAN(r0, &(0x7f00000014c0)={&(0x7f0000000f00)={0x10, 0x0, 0x0, 0x8}, 0xc, &(0x7f0000001480)={&(0x7f0000000f40)={0x19c, r1, 0x1, 0x70bd25, 0x25dfdbfb, {{}, {@val={0x8, 0x3, r2}, @void}}, [@NL80211_ATTR_SCAN_SUPP_RATES={0xf4, 0x7d, 0x0, 0x1, [@NL80211_BAND_2GHZ={0xef, 0x0, "549b1da48ec9c83bfedbb14eb2a63142b836d006a50901d25146ede566d2851f64e4da9c76a9565ed6fc9c09c9aa49d409692ce6e93aa45c69aaaedf1efedf0d3d539d52eda5803b59dcd30578552315d18b42bdd1c2915336f7ddb7ed2d5a6a4c388ef61aed3ffbffd9fdc8f808c47280291b5470b8d2499bda97ebf077baf8e825d1d8f8dd739f1f48a959b7cf143922370538ed823d04d3511e340f73a79e1916f66b3a23b5a46485954c65aa668187792343f69392c2c252960e609dac86ca982323770d91fae077ea939ea2eec4278195630c0702f05750b50478ceb62020c4abba4f902b4fca5c09"}]}, @NL80211_ATTR_SCAN_SSIDS={0x70, 0x2d, 0x0, 0x1, [{0x21, 0x0, @random="a2ab66ad3290a850e4247b7f9014645df702abece3ff76076d9bf3e428"}, {0xa, 0x0, @default_ibss_ssid}, {0xa, 0x0, @default_ap_ssid}, {0xa, 0x0, @default_ibss_ssid}, {0x24, 0x0, @random="8e8d88cefd4ebcce9c791f4997961871265610d4b87f12d061bc0119049fedfb"}]}, @NL80211_ATTR_SCHED_SCAN_INTERVAL={0x8, 0x77, 0x5}, @NL80211_ATTR_SCHED_SCAN_RSSI_ADJUST={0x6, 0xf7, {0xe}}, @NL80211_ATTR_MEASUREMENT_DURATION_MANDATORY={0x4}, @NL80211_ATTR_SCAN_SUPP_RATES={0x4}, @NL80211_ATTR_MEASUREMENT_DURATION_MANDATORY={0x4}]}, 0x19c}, 0x1, 0x0, 0x0, 0x40}, 0x400) 2.475225672s ago: executing program 1 (id=5259): clock_gettime(0x7, &(0x7f0000000340)) (async) r0 = socket(0x1e, 0x5, 0x942) (async) syz_open_procfs$namespace(0x0, &(0x7f0000000000)) close(0x3) (async) getsockopt$inet_tcp_TCP_ZEROCOPY_RECEIVE(r0, 0x6, 0x23, 0x0, &(0x7f0000000200)) 2.297176203s ago: executing program 1 (id=5260): r0 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000180)={&(0x7f00000002c0)=ANY=[@ANYBLOB="1c00000045000900000000000000000003000000080002"], 0x1c}}, 0x0) r1 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r1, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000014c0)={{0x14}, [@NFT_MSG_NEWTABLE={0x20, 0x0, 0xa, 0x3, 0x0, 0x0, {0x1}, [@NFTA_TABLE_NAME={0x9, 0x1, 'syz0\x00'}]}, @NFT_MSG_NEWSET={0x68, 0x9, 0xa, 0x401, 0x0, 0x0, {0x1}, [@NFTA_SET_ID={0x8}, @NFTA_SET_NAME={0x9, 0x2, 'syz2\x00'}, @NFTA_SET_TABLE={0x9, 0x1, 'syz0\x00'}, @NFTA_SET_KEY_LEN={0x8, 0x5, 0x1, 0x0, 0x3a}, @NFTA_SET_EXPR={0x2c, 0x11, 0x0, 0x1, @target={{0xb}, @val={0x1c, 0x2, 0x0, 0x1, [@NFTA_TARGET_INFO={0x4}, @NFTA_TARGET_REV={0x8}, @NFTA_TARGET_NAME={0xa, 0x1, 'NFLOG\x00'}]}}}]}], {0x14, 0x10}}, 0xb0}}, 0x20000800) 2.051131122s ago: executing program 0 (id=5261): r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000240)=ANY=[@ANYBLOB="3c38fc", @ANYRES32=0x0, @ANYBLOB="00000000000000001c0012800b00010062726964676500000c00028005002d0040000000"], 0x3c}, 0x1, 0x0, 0x0, 0x80}, 0x0) r1 = socket(0xa, 0x3, 0x3a) setsockopt$MRT6_ADD_MFC(r1, 0x29, 0xcc, &(0x7f0000000000)={{0xa, 0x0, 0x0, @private2}, {0xa, 0x0, 0x0, @empty}}, 0x5c) getpeername$llc(r1, &(0x7f0000000100)={0x1a, 0x0, 0x0, 0x0, 0x0, 0x0, @local}, &(0x7f0000000140)=0x10) r2 = bpf$PROG_LOAD(0x5, &(0x7f0000000180)={0x4, 0x5, &(0x7f0000000240)=@framed={{0x18, 0x2, 0x0, 0x0, 0x2}, [@call={0x85, 0x0, 0x0, 0x87}, @call={0x85, 0x0, 0x0, 0x7}]}, &(0x7f00000000c0)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000600)={r2, 0x0, 0x28, 0x0, &(0x7f0000000900)="e02742e8680d85ff9782762f86dd", 0x0, 0x1a, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x48) r3 = socket$inet_udp(0x2, 0x2, 0x0) recvfrom(r3, &(0x7f0000000340)=""/4096, 0x1000, 0x3, &(0x7f00000001c0)=@llc={0x1a, 0x18, 0xfd, 0x4, 0xff, 0x6, @link_local={0x1, 0x80, 0xc2, 0x0, 0x0, 0x1}}, 0x80) ioctl$sock_ipv4_tunnel_SIOCGETTUNNEL(r3, 0x89f0, &(0x7f0000000000)={'syztnl2\x00', &(0x7f0000000080)={'sit0\x00', 0x0, 0x7807, 0x0, 0x2, 0xff1, {{0x16, 0x4, 0x0, 0x7, 0x58, 0x67, 0x0, 0xdd, 0x2f, 0x0, @broadcast, @private=0xa010102, {[@timestamp_prespec={0x44, 0x2c, 0xc3, 0x3, 0x3, [{@multicast2, 0x10001}, {@dev={0xac, 0x14, 0x14, 0x15}, 0x656}, {@rand_addr=0x64010101, 0xfffffff8}, {@loopback, 0xa28}, {@dev={0xac, 0x14, 0x14, 0x44}, 0x7}]}, @cipso={0x86, 0x14, 0x0, [{0x0, 0x2}, {0x2, 0x5, "559061"}, {0x2, 0x4, "43aa"}, {0x4, 0x3, '5'}]}, @end]}}}}}) ioctl$sock_ipv4_tunnel_SIOCDELTUNNEL(r3, 0x89f2, &(0x7f0000000180)={'erspan0\x00', &(0x7f0000001340)={'tunl0\x00', r4, 0x80, 0x80, 0xb1b, 0xb, {{0x19, 0x4, 0x1, 0x5, 0x64, 0x68, 0x0, 0x2, 0x2f, 0x0, @rand_addr=0x64010102, @dev={0xac, 0x14, 0x14, 0x1e}, {[@timestamp={0x44, 0x18, 0x21, 0x0, 0x1, [0xb23, 0x9, 0x4, 0xf, 0x3]}, @lsrr={0x83, 0x7, 0xbe, [@rand_addr=0x64010100]}, @timestamp_addr={0x44, 0x2c, 0x6e, 0x1, 0x0, [{@local, 0xdf42}, {@initdev={0xac, 0x1e, 0x0, 0x0}, 0x7}, {@multicast2}, {@initdev={0xac, 0x1e, 0x1, 0x0}, 0x40}, {@loopback, 0xffffffff}]}, @ra={0x94, 0x4}]}}}}}) 2.027804537s ago: executing program 1 (id=5262): sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000300)=ANY=[@ANYBLOB='$\x00'], 0x24}}, 0x0) r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000540)=ANY=[@ANYBLOB="0b00000000010000000100000900000001"], 0x48) bpf$MAP_UPDATE_BATCH(0x1a, &(0x7f0000000640)={0x0, 0x0, &(0x7f0000000000), &(0x7f00000002c0), 0x8, r0}, 0x38) bpf$MAP_LOOKUP_BATCH(0x1b, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000780)="b715d2d51612c7e95c816491c0f81d4989c546673ef100a3480a5a5ea832aefa6dcc9464d1762a6867e199e763fbfe540000ff85a9524b80876d463e510d96e1d2544dc3444d561dd6afa0d944a29e420d6e40bf97de7fca8571593818ca43f4e6a6fb6401321f498514198a1a1b1611b7d346cc34833ff20933ad418f3d5446db604f1847bc84624f479b400da9d996fcdbb2d4f1181a000000000000000000000000000119df4361c72ccd458d4d7f5bbd4310c23a9e1cdea4ce5132167c1c039d4719b61afa2b9271e6af425906e78708a0e83511d78b5a71c4bf213ce2819d9500000000000000211823de237ccf40578ed993c5de9b9d163341f9bf601f58a05677eaff046d5118b1f517965d8e32e3d2c8a3e0fe4ee406e9408f54abdf274aff3d56faed6b27e5c56c05b8d8808a3d06c704b19ff3e1c9f8449c", 0x0, 0x3, r0}, 0x38) ioctl$XFS_IOC_FD_TO_HANDLE(0xffffffffffffffff, 0xc038586a, &(0x7f0000000300)={0xffffffffffffffff, &(0x7f0000000140)='-]%,):/(*$\x00', 0x400080, &(0x7f0000000180)={@align=0x2, {0x3, 0xfafb, 0x40, 0x10000000003}}, 0x0, &(0x7f0000000240)={@_ha_fsid}, &(0x7f00000002c0)=0x7}) r2 = syz_genetlink_get_family_id$nl80211(&(0x7f00000003c0), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(0xffffffffffffffff, 0x8933, &(0x7f0000000440)={'wlan1\x00', 0x0}) socket$netlink(0x10, 0x3, 0x0) r4 = socket$nl_route(0x10, 0x3, 0x0) r5 = socket$alg(0x26, 0x5, 0x0) bind$alg(r5, 0x0, 0x0) setsockopt$ALG_SET_KEY(r5, 0x117, 0x1, 0x0, 0x0) sendmsg$nl_route_sched_retired(0xffffffffffffffff, 0x0, 0x0) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, 0x0, 0x0) ioctl$sock_SIOCGIFINDEX(r4, 0x8933, &(0x7f0000000040)={'lo\x00', 0x0}) sendmsg$nl_route(r4, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000180)={&(0x7f00000001c0)=ANY=[@ANYBLOB="2c00e0ad4ef8d280f600001c00357428b5705658d094dffd8b16c041faa5a9e4efbe", @ANYRES32=r6, @ANYBLOB="1000a204080001000000000008000f0004"], 0x2c}, 0x1, 0x0, 0x0, 0x20040001}, 0x200080c0) r7 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) sendmsg$NFC_CMD_GET_TARGET(r7, 0x0, 0x0) syz_genetlink_get_family_id$nfc(&(0x7f0000000140), r7) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000280)={0x6, 0x0, 0x0, &(0x7f0000000100)='GPL\x00', 0x2, 0x0, 0x0, 0x40f00, 0x6f, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0xf}, 0x94) socket$nl_route(0x10, 0x3, 0x0) sendmsg$NL80211_CMD_TDLS_CHANNEL_SWITCH(r1, &(0x7f00000005c0)={&(0x7f0000000340)={0x10, 0x0, 0x0, 0x1000}, 0xc, &(0x7f0000000580)={&(0x7f0000000480)=ANY=[@ANYBLOB="8cdc0000", @ANYRES16=r2, @ANYBLOB="00012cbd7000fedbdf256f00000008000300", @ANYRES32=r3, @ANYBLOB="0c009900040000002d0000000500d600000000000a000600080211000001000008002201d8020000080022013901000008002700030000000800a100000400000a00060008021100000000000500d600050000000500d600a90000000a00060008021100000000000500d600d5000000"], 0x8c}, 0x1, 0x0, 0x0, 0x800}, 0x4) socket(0x18, 0x5, 0x0) r8 = socket$can_raw(0x1d, 0x3, 0x1) getsockname$packet(r8, 0x0, &(0x7f0000000080)) r9 = openat$tun(0xffffffffffffff9c, &(0x7f0000000080), 0x1c1342, 0x0) ioctl$TUNSETIFF(r9, 0x400454ca, &(0x7f00000000c0)={'syzkaller0\x00', 0x84aebfbd6349b7f2}) r10 = openat$tun(0xffffffffffffff9c, &(0x7f0000000400), 0x0, 0x0) close(r10) socket$nl_generic(0x10, 0x3, 0x10) 1.801421235s ago: executing program 8 (id=5263): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000040)={0x2, 0x4, &(0x7f0000000200)=ANY=[@ANYBLOB="180000000300000000000000feffff10850000000700000095"], &(0x7f0000000000)='GPL\x00', 0x0, 0x0, 0x0, 0x100, 0x70, '\x00', 0x0, @fallback=0x30, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffe}, 0x94) r2 = bpf$MAP_CREATE(0x0, &(0x7f0000000000)=ANY=[@ANYBLOB="06000000040000005b0000008a"], 0x48) r3 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r3, 0x8933, &(0x7f0000000300)={'bridge0\x00', 0x0}) sendmsg$nl_route(r3, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000080)=@RTM_NEWMDB={0x38, 0x54, 0x1, 0x70bd2b, 0x2, {0x7, r4}, [@MDBA_SET_ENTRY={0x20, 0x1, {r4, 0x0, 0x2, 0x2, {@ip4=@loopback, 0x86dd}}}]}, 0x38}, 0x1, 0x0, 0x0, 0x5}, 0x40080c0) bpf$MAP_LOOKUP_BATCH(0x18, &(0x7f0000001e40)={0x0, 0x0, &(0x7f0000000100), 0x0, 0x7f, r2}, 0x38) r5 = bpf$MAP_CREATE(0x0, &(0x7f0000000240)=@base={0x22, 0x8, 0x3, 0x9, 0x60002, 0xffffffffffffffff, 0x2, '\x00', 0x0, 0xffffffffffffffff, 0x2, 0x0, 0x5}, 0x50) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000004c0)={0x11, 0xe, &(0x7f0000001980)=ANY=[@ANYBLOB="1801000020646c2500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000008000000850000000600000018140000", @ANYRES32=r2, @ANYBLOB="007bb500000000000000181c0000", @ANYRES32=r5, @ANYBLOB="00000000000000000d910600ffffffff8510000008000000"], &(0x7f0000000140)='syzkaller\x00', 0x0, 0x1000, &(0x7f00000006c0)=""/4096, 0x0, 0x58, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, &(0x7f00000001c0)={0x5, 0x3}, 0x8, 0x10, &(0x7f00000003c0)={0x5, 0xb, 0xffffffbe, 0x5}, 0x10, 0x0, 0x0, 0x8, &(0x7f0000000400), &(0x7f0000000440)=[{0x4, 0x5, 0x4, 0x6}, {0x5, 0x2, 0x7, 0x5}, {0x4, 0x2, 0x8}, {0x5, 0x5, 0x0, 0x3}, {0x5, 0x5, 0xb, 0xc}, {0x4, 0x3, 0xb, 0xc}, {0x2, 0x5, 0xb, 0x1c}, {0x0, 0x3, 0x6, 0x2}], 0x10, 0x1}, 0x94) r6 = bpf$MAP_CREATE(0x0, &(0x7f0000000600)=@base={0x1b, 0x0, 0x0, 0x8000}, 0x50) r7 = bpf$BPF_LINK_CREATE_XDP(0x1c, &(0x7f0000000180)={r1, 0x0, 0x30, 0x0, @val=@uprobe_multi={&(0x7f00000002c0)='./cgroup/cgroup.procs\x00', &(0x7f0000000300)=[0x0], 0x0, 0x0, 0x1}}, 0x40) bpf$BPF_GET_MAP_INFO(0xf, &(0x7f0000000680)={r7, 0x58, &(0x7f0000000600)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, ""/16, 0x0}}, 0x10) bpf$PROG_LOAD_XDP(0x5, &(0x7f00000018c0)={0x6, 0x13, &(0x7f00000016c0)=@raw=[@cb_func={0x18, 0xb, 0x4, 0x0, 0x8}, @tail_call={{0x18, 0x2, 0x1, 0x0, r6}}, @btf_id={0x18, 0x0, 0x3, 0x0, 0x3}, @func={0x85, 0x0, 0x1, 0x0, 0xfffffffffffffff8}, @ldst={0x3, 0x2, 0x0, 0x5, 0x3, 0x6}, @map_val={0x18, 0x3, 0x2, 0x0, r2}, @ldst={0x2, 0x3, 0x1, 0xc, 0x0, 0x20, 0x4}, @initr0={0x18, 0x0, 0x0, 0x0, 0x3}, @ldst={0x1, 0x1, 0x6, 0x6, 0xd, 0xfffffffffffffff2, 0xffffffffffffffff}, @btf_id={0x18, 0x4, 0x3, 0x0, 0x1}], &(0x7f0000000400)='GPL\x00', 0x5, 0xfc, &(0x7f0000001780)=""/252, 0x41000, 0x12, '\x00', r8, 0x25, 0xffffffffffffffff, 0x8, &(0x7f0000000580)={0x5, 0x4}, 0x8, 0x10, &(0x7f00000005c0)={0x4, 0x1, 0x7fffffff, 0xffffffff}, 0x10, 0x0, 0x0, 0x0, &(0x7f0000001880)=[r2], 0x0, 0x10, 0x1}, 0x94) sendmsg$IPSET_CMD_CREATE(r0, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000600)={&(0x7f0000000000)={0x50, 0x2, 0x6, 0x201, 0x0, 0x0, {}, [@IPSET_ATTR_PROTOCOL={0x5}, @IPSET_ATTR_SETNAME={0x9, 0x2, 'syz0\x00'}, @IPSET_ATTR_FAMILY={0x5, 0x5, 0x2}, @IPSET_ATTR_DATA={0xc, 0x7, 0x0, 0x1, [@IPSET_ATTR_BUCKETSIZE={0x5, 0x15, 0x2}]}, @IPSET_ATTR_REVISION={0x5}, @IPSET_ATTR_TYPENAME={0xc, 0x3, 'hash:ip\x00'}]}, 0x50}}, 0x0) 1.628014526s ago: executing program 1 (id=5264): r0 = syz_init_net_socket$ax25(0x3, 0x5, 0x6) ioctl$sock_kcm_SIOCKCMCLONE(0xffffffffffffffff, 0x89e2, &(0x7f0000000180)={r0}) socket$nl_route(0x10, 0x3, 0x0) (async) getsockopt$ax25_int(r1, 0x101, 0x4, &(0x7f0000000200), &(0x7f00000000c0)=0x4) (async) r2 = bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000040)={0x6, 0x4, &(0x7f0000000100)=ANY=[@ANYBLOB="1800000001000000000000000000ddff370001001000000095"], &(0x7f0000000440)='syzkaller\x00', 0x7, 0x0, 0x0, 0x0, 0x3}, 0x94) r3 = syz_genetlink_get_family_id$ipvs(&(0x7f00000001c0), r1) (async) r4 = socket$inet6_udp(0xa, 0x2, 0x0) setsockopt$inet6_IPV6_FLOWLABEL_MGR(r4, 0x29, 0x20, &(0x7f0000000180)={@rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x01', 0x8000000, 0x0, 0xff, 0x1, 0xfffc}, 0x20) (async) setsockopt$inet6_IPV6_FLOWLABEL_MGR(r4, 0x29, 0x20, &(0x7f0000000180)={@private0, 0x8000000, 0x2, 0x0, 0x0, 0x0, 0x1}, 0x20) bpf$BPF_PROG_ATTACH(0x8, &(0x7f0000000000)={@fallback=r1, r2, 0x151884f1b123deca, 0x4, r2, @void, @value=r2}, 0x20) (async) sendmsg$IPVS_CMD_SET_INFO(r1, &(0x7f00000002c0)={&(0x7f0000000140)={0x10, 0x0, 0x0, 0x40000}, 0xc, &(0x7f0000000280)={&(0x7f0000000240)=ANY=[@ANYBLOB="1c000000", @ANYRES16=r3, @ANYBLOB="0100250000050002f4f40a000000e000000000e30000"], 0x1c}, 0x1, 0x0, 0x0, 0x800}, 0x240080c0) (async) ioctl$sock_ipv6_tunnel_SIOCGET6RD(r1, 0x89f8, &(0x7f00000003c0)={'ip_vti0\x00', &(0x7f0000000380)={'tunl0\x00', 0x0, 0x7800, 0x0, 0x5b1, 0xf51c, {{0x6, 0x4, 0x1, 0x7, 0x18, 0x67, 0x0, 0x2, 0x29, 0x0, @initdev={0xac, 0x1e, 0x1, 0x0}, @multicast2, {[@generic={0x89, 0x4, '<^'}]}}}}}) r6 = socket(0x2a, 0x2, 0x0) (async) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000000400)={&(0x7f00000005c0)=@newqdisc={0x24}, 0x24}}, 0x0) getsockname$packet(r6, &(0x7f0000000240)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000040)=0x14) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000380)=@newqdisc={0x24, 0x24, 0xf0b, 0x0, 0x0, {0x0, 0x0, 0x0, r7, {}, {0xffff, 0xffff}}}, 0x24}}, 0x0) (async) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000080)=@newtfilter={0x50, 0x2c, 0xd27, 0x2, 0x0, {0x0, 0x0, 0x0, r7, {0xb, 0x6}, {}, {0x1c, 0xfff1}}, [@filter_kind_options=@f_flower={{0xb}, {0x20, 0x2, [@TCA_FLOWER_KEY_ENC_OPTS={0x1c, 0x54, 0x0, 0x1, [@TCA_FLOWER_KEY_ENC_OPTS_ERSPAN={0x14, 0x3, 0x0, 0x1, [@TCA_FLOWER_KEY_ENC_OPT_ERSPAN_INDEX={0x8, 0x2, 0xfffffff8}, @TCA_FLOWER_KEY_ENC_OPT_ERSPAN_VER={0x5, 0x1, 0x1}]}, @TCA_FLOWER_KEY_ENC_OPTS_ERSPAN={0x4}]}]}}]}, 0x50}}, 0x0) (async) setsockopt$RXRPC_SECURITY_KEY(0xffffffffffffffff, 0x110, 0x1, &(0x7f00000000c0)='\x00e\xa9f\x9e\xbbT}\x15\x91H\x93sW\x94\b\xa2\xf0Es&\xc7\xf8\x8c\xc8\xb1&\x12\xebS\x98\xf3C]A\xf5$\x1e\xf5g|a\xc0\r\x00\x00', 0xff1e) (async) r8 = socket$netlink(0x10, 0x3, 0x0) sendmmsg(r8, &(0x7f00000002c0), 0x40000000000009f, 0x0) sendto$packet(r1, &(0x7f0000000300)="ce486f12211eb096ce295ad0c1bd5e8c10a32c181808c01b0247ff73391d1b93935832cfce7f3f590abdbcded24195fa86bbcc3c90ad8d127de8a64584a3d159ec28cbc0f31579d23c", 0x49, 0x800, &(0x7f0000000400)={0x11, 0x2, r5, 0x1, 0x7, 0x6, @remote}, 0x14) 1.571896825s ago: executing program 8 (id=5265): socket$inet6_sctp(0xa, 0x1, 0x84) (async) r0 = socket$inet6_sctp(0xa, 0x1, 0x84) r1 = socket(0x2, 0x80805, 0x0) r2 = socket$inet(0x2, 0x80001, 0x84) getsockopt$inet_sctp_SCTP_MAX_BURST(r2, 0x84, 0x14, &(0x7f0000000000)=@assoc_value, &(0x7f0000000040)=0x8) (async) getsockopt$inet_sctp_SCTP_MAX_BURST(r2, 0x84, 0x14, &(0x7f0000000000)=@assoc_value={0x0}, &(0x7f0000000040)=0x8) setsockopt$inet_sctp6_SCTP_AUTH_DEACTIVATE_KEY(r1, 0x84, 0x23, &(0x7f0000000100)={r3, 0xa11c}, 0x8) (async) setsockopt$inet_sctp6_SCTP_AUTH_DEACTIVATE_KEY(r1, 0x84, 0x23, &(0x7f0000000100)={r3, 0xa11c}, 0x8) r4 = socket(0x10, 0x803, 0x0) write(r4, &(0x7f0000000040)="1c0000005e001f3814584707f9f4ffffff000000250000001ff80020", 0x1c) getsockopt$inet_sctp6_SCTP_PEER_ADDR_THLDS(0xffffffffffffffff, 0x84, 0x1f, &(0x7f00000000c0)={0x0, @in={{0x2, 0x4e22, @dev={0xac, 0x14, 0x14, 0x3a}}}, 0x1ff, 0x5}, &(0x7f00000001c0)=0x90) getsockopt$inet_sctp6_SCTP_STATUS(r0, 0x84, 0xe, &(0x7f0000000200)={r3, 0x64, 0xc, 0x800, 0x4, 0xfff, 0x4, 0x4, {r5, @in={{0x2, 0x4e23, @loopback}}, 0x4, 0x7, 0x5, 0x7fff, 0x9}}, &(0x7f00000002c0)=0xb0) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f00000012c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000600)=@newqdisc={0x1dc, 0x24, 0x4ee4e6a52ff56541, 0x70bd2d, 0xffffffff, {0x0, 0x0, 0x0, 0x0, {0x0, 0xfff1}, {0xffff, 0xffff}, {0x1, 0xf}}, [@TCA_STAB={0xdc, 0x8, 0x0, 0x1, [{{0x1c, 0x1, {0x0, 0xbc, 0xf, 0x4, 0x0, 0x0, 0x8, 0x1}}, {0x6, 0x2, [0x1]}}, {{0x1c, 0x1, {0x9, 0xd, 0x4, 0x4, 0x1, 0xfffffff8, 0x80000000, 0x3}}, {0xa, 0x2, [0xcd0c, 0xa2b, 0x1]}}, {{0x1c, 0x1, {0x1, 0x7, 0x3, 0x3, 0x0, 0xf, 0x2, 0x5}}, {0xe, 0x2, [0x0, 0x1000, 0x401, 0x0, 0xa77c]}}, {{0x1c, 0x1, {0x40, 0x81, 0x2, 0x4a73, 0x0, 0x10001, 0x9e000000, 0x7}}, {0x12, 0x2, [0x4, 0x2, 0x7fff, 0x8, 0x6, 0x2ff9, 0xe40]}}, {{0x1c, 0x1, {0x4, 0x0, 0x4, 0xfffffff9, 0x1, 0x2, 0x0, 0x7}}, {0x12, 0x2, [0x3, 0x0, 0x4, 0x1, 0x1, 0x6, 0x5]}}]}, @TCA_STAB={0x84, 0x8, 0x0, 0x1, [{{0x1c, 0x1, {0x2, 0x4, 0x6, 0x5, 0x1, 0x413a, 0x5, 0x7}}, {0x12, 0x2, [0x5, 0xfff, 0xffff, 0xfff7, 0x3ec, 0x0, 0x5]}}, {{0x1c, 0x1, {0x5, 0x7, 0x7, 0x5, 0x0, 0x2, 0x5, 0x1}}, {0x6, 0x2, [0xcda]}}, {{0x1c, 0x1, {0x10, 0x87, 0x0, 0xfffffff8, 0x1, 0x6, 0x900000, 0x5}}, {0xe, 0x2, [0x7, 0x3, 0x0, 0x7, 0xfffb]}}]}, @TCA_INGRESS_BLOCK={0x8, 0xd, 0x4}, @TCA_EGRESS_BLOCK={0x8, 0xe, 0x5}, @TCA_STAB={0x48, 0x8, 0x0, 0x1, [{{0x1c, 0x1, {0x1, 0x9, 0x3, 0x40, 0x1, 0x7, 0x9, 0x1}}, {0x6, 0x2, [0xffff]}}, {{0x1c, 0x1, {0x1, 0xfb, 0x2, 0x4, 0x2, 0x2, 0x3}}, {0x4}}]}]}, 0x1dc}}, 0x0) r6 = socket$nl_xfrm(0x10, 0x3, 0x6) ioctl$BTRFS_IOC_GET_SUBVOL_INFO(r6, 0x81f8943c, &(0x7f00000003c0)={0x0, ""/256, 0x0, 0x0, 0x0, 0x0, ""/16, ""/16, ""/16, 0x0}) ioctl$BTRFS_IOC_START_SYNC(r6, 0x80089418, &(0x7f00000005c0)=0x0) ioctl$BTRFS_IOC_SET_RECEIVED_SUBVOL(r1, 0xc0c89425, &(0x7f0000000cc0)={"f890d77bd748dc6f073733b929530f8e", r7, r8, {0x3ff}, {0xee, 0x10}, 0x722, [0x2, 0x7, 0x923, 0x9, 0x0, 0x100000000, 0x5, 0x2, 0x0, 0x81, 0x49, 0x6, 0x3, 0x3, 0x5, 0x4]}) socket$igmp(0x2, 0x3, 0x2) (async) r9 = socket$igmp(0x2, 0x3, 0x2) ioctl$sock_SIOCGIFINDEX(r9, 0x8933, &(0x7f0000000180)={'netdevsim0\x00'}) (async) ioctl$sock_SIOCGIFINDEX(r9, 0x8933, &(0x7f0000000180)={'netdevsim0\x00', 0x0}) setsockopt$inet_sctp_SCTP_SOCKOPT_CONNECTX(0xffffffffffffffff, 0x84, 0x6e, &(0x7f00000000c0)=[@in6={0xa, 0x0, 0x9000, @rand_addr=' \x01\x00'}], 0x1c) socket$inet6_sctp(0xa, 0x1, 0x84) (async) r11 = socket$inet6_sctp(0xa, 0x1, 0x84) sendmsg$NFT_BATCH(r1, &(0x7f0000000380)={&(0x7f0000000300)={0x10, 0x0, 0x0, 0x8}, 0xc, &(0x7f0000000340)={&(0x7f0000000800)={{0x14, 0x10, 0x1, 0x0, 0x0, {0x1}}, [@NFT_MSG_DELOBJ={0x80, 0x14, 0xa, 0x101, 0x0, 0x0, {0x7}, [@NFTA_OBJ_USERDATA={0x5a, 0x8, "df3112050890b12a41afb00db6d9d8ef6c259d6782863b2b9a0705466f0ad28925025e5bb580eb02d5f2371a2ece06ac3ec451f9e90824e7e72a595890e79ac5aa1ef263aa89ba201230eb08007f22042540138f393d"}, @NFTA_OBJ_TYPE={0x8}, @NFTA_OBJ_TYPE={0x8, 0x3, 0x1, 0x0, 0x4}]}, @NFT_MSG_DELFLOWTABLE={0x78, 0x18, 0xa, 0x401, 0x0, 0x0, {0x0, 0x0, 0x2}, [@NFTA_FLOWTABLE_HOOK={0x2c, 0x3, 0x0, 0x1, [@NFTA_FLOWTABLE_HOOK_PRIORITY={0x8, 0x2, 0x1, 0x0, 0x401}, @NFTA_FLOWTABLE_HOOK_NUM={0x8}, @NFTA_FLOWTABLE_HOOK_NUM={0x8}, @NFTA_FLOWTABLE_HOOK_NUM={0x8}, @NFTA_FLOWTABLE_HOOK_PRIORITY={0x8}]}, @NFTA_FLOWTABLE_NAME={0x9, 0x2, 'syz0\x00'}, @NFTA_FLOWTABLE_TABLE={0x9, 0x1, 'syz1\x00'}, @NFTA_FLOWTABLE_HANDLE={0xc, 0x5, 0x1, 0x0, 0x5}, @NFTA_FLOWTABLE_FLAGS={0x8, 0x7, 0x1, 0x0, 0x1}, @NFTA_FLOWTABLE_NAME={0x9, 0x2, 'syz0\x00'}]}, @NFT_MSG_NEWRULE={0x15c, 0x6, 0xa, 0x0, 0x0, 0x0, {0xb, 0x0, 0x8}, [@NFTA_RULE_USERDATA={0xd5, 0x7, 0x1, 0x0, "50d7606150f8ebc42081407613ad06bcc3c7fe6d5faeb432dd0c15533cac8484cd3fa6cb59a56ed2a86819a29cc45ed3e15888caec0d1eb66f5daab615469cb5a37460be5b8aa74b124b5fd366c1d53fe1a00e1b0946ab1faec3a1bb638157f7537fb3df47bb354859a0c5e98c908fcf020173458adb708c3a9452c199ed983c527a643eb303fdefcd4331cf25d2e7fe9bfaa579cc233f62eb8ba5573522f5869694a74ea50c76a917a2b8dbaf8f045b1d2ef31bb6a1973cfd34e1b3b4c5d04ce940cada2bc2213e9131b8101a41345ca1"}, @NFTA_RULE_ID={0x8, 0x9, 0x1, 0x0, 0x2}, @NFTA_RULE_COMPAT={0x4c, 0x5, 0x0, 0x1, [@NFTA_RULE_COMPAT_PROTO_BRIDGE={0x8, 0x1, 0x1, 0x0, 0x805}, @NFTA_RULE_COMPAT_PROTO_IPV6={0x8, 0x1, 0x1, 0x0, 0x11}, @NFTA_RULE_COMPAT_PROTO_BRIDGE={0x8, 0x1, 0x1, 0x0, 0x6558}, @NFTA_RULE_COMPAT_PROTO_IPV4={0x8, 0x1, 0x1, 0x0, 0x4}, @NFTA_RULE_COMPAT_PROTO_IPV4={0x8, 0x1, 0x1, 0x0, 0x2e}, @NFTA_RULE_COMPAT_FLAGS={0x8, 0x2, 0x1, 0x0, 0x3}, @NFTA_RULE_COMPAT_PROTO_BRIDGE={0x8, 0x1, 0x1, 0x0, 0x6002}, @NFTA_RULE_COMPAT_PROTO_IPV4={0x8, 0x1, 0x1, 0x0, 0x6}, @NFTA_RULE_COMPAT_PROTO_IPV6={0x8, 0x1, 0x1, 0x0, 0x2e}]}, @NFTA_RULE_USERDATA={0x1a, 0x7, 0x1, 0x0, "3f4f068f407cb986171a9d19e40df01fecdc2eb6fbed"}]}, @NFT_MSG_NEWCHAIN={0x100, 0x3, 0xa, 0x401, 0x0, 0x0, {0x5, 0x0, 0x5}, [@NFTA_CHAIN_COUNTERS={0x40, 0x8, 0x0, 0x1, [@NFTA_COUNTER_BYTES={0xc, 0x1, 0x1, 0x0, 0x4}, @NFTA_COUNTER_PACKETS={0xc, 0x2, 0x1, 0x0, 0x5}, @NFTA_COUNTER_BYTES={0xc, 0x1, 0x1, 0x0, 0x3}, @NFTA_COUNTER_PACKETS={0xc, 0x2, 0x1, 0x0, 0xeb5a}, @NFTA_COUNTER_BYTES={0xc, 0x1, 0x1, 0x0, 0x400}]}, @NFTA_CHAIN_TYPE={0xa, 0x7, 'route\x00'}, @NFTA_CHAIN_FLAGS={0x8, 0xa, 0x1, 0x0, 0x6}, @NFTA_CHAIN_NAME={0x9, 0x3, 'syz2\x00'}, @NFTA_CHAIN_POLICY={0x8, 0x5, 0x1, 0x0, 0x1}, @NFTA_CHAIN_USERDATA={0x75, 0xc, "45ef1a3e515b7c1dd550925ff1f1f09b114f6220c610193763987004829aca926ae7cc46847454f4d2494179198ede209a5c034469ba6ed92f09c961905b3469e6cb2b01b88a0a85ba567674057f9cb48ea025cd52b9f1903ea050b5bcd7cea89a04ee63a95fc641370744aa857ce83725"}, @NFTA_CHAIN_TABLE={0x9, 0x1, 'syz0\x00'}]}, @NFT_MSG_DELRULE={0xc0, 0x8, 0xa, 0x801, 0x0, 0x0, {0x1, 0x0, 0x6}, [@NFTA_RULE_CHAIN_ID={0x8, 0xb, 0x1, 0x0, 0x1}, @NFTA_RULE_HANDLE={0xc, 0x3, 0x1, 0x0, 0x3}, @NFTA_RULE_USERDATA={0x1a, 0x7, 0x1, 0x0, "a62e94d96575065f364512449e68505ac15130c2d2ee"}, @NFTA_RULE_HANDLE={0xc, 0x3, 0x1, 0x0, 0x4}, @NFTA_RULE_USERDATA={0x55, 0x7, 0x1, 0x0, "9ec376eac55b0c9c7dcbd5dcd58dac6bfaf716898d11274a2cb78592f1fca16391a4077b88a0483e5f017725163195d8ea95b6fd7e7aaa353fd6177aeee27cdc204b304bf8f2172e1f9fadedfa237a5d8d"}, @NFTA_RULE_TABLE={0x9, 0x1, 'syz1\x00'}, @NFTA_RULE_POSITION={0xc, 0x6, 0x1, 0x0, 0x2}]}, @NFT_MSG_DELTABLE={0x14, 0x2, 0xa, 0x3, 0x0, 0x0, {0x0, 0x0, 0x5}}, @NFT_MSG_NEWFLOWTABLE={0x48, 0x16, 0xa, 0x801, 0x0, 0x0, {0xa, 0x0, 0x4}, [@NFTA_FLOWTABLE_HANDLE={0xc, 0x5, 0x1, 0x0, 0x3}, @NFTA_FLOWTABLE_HANDLE={0xc, 0x5, 0x1, 0x0, 0x4}, @NFTA_FLOWTABLE_FLAGS={0x8, 0x7, 0x1, 0x0, 0x3}, @NFTA_FLOWTABLE_NAME={0x9, 0x2, 'syz0\x00'}, @NFTA_FLOWTABLE_FLAGS={0x8}]}], {0x14, 0x11, 0x1, 0x0, 0x0, {0xa}}}, 0x498}, 0x1, 0x0, 0x0, 0x24008801}, 0x4000801) (async) sendmsg$NFT_BATCH(r1, &(0x7f0000000380)={&(0x7f0000000300)={0x10, 0x0, 0x0, 0x8}, 0xc, &(0x7f0000000340)={&(0x7f0000000800)={{0x14, 0x10, 0x1, 0x0, 0x0, {0x1}}, [@NFT_MSG_DELOBJ={0x80, 0x14, 0xa, 0x101, 0x0, 0x0, {0x7}, [@NFTA_OBJ_USERDATA={0x5a, 0x8, "df3112050890b12a41afb00db6d9d8ef6c259d6782863b2b9a0705466f0ad28925025e5bb580eb02d5f2371a2ece06ac3ec451f9e90824e7e72a595890e79ac5aa1ef263aa89ba201230eb08007f22042540138f393d"}, @NFTA_OBJ_TYPE={0x8}, @NFTA_OBJ_TYPE={0x8, 0x3, 0x1, 0x0, 0x4}]}, @NFT_MSG_DELFLOWTABLE={0x78, 0x18, 0xa, 0x401, 0x0, 0x0, {0x0, 0x0, 0x2}, [@NFTA_FLOWTABLE_HOOK={0x2c, 0x3, 0x0, 0x1, [@NFTA_FLOWTABLE_HOOK_PRIORITY={0x8, 0x2, 0x1, 0x0, 0x401}, @NFTA_FLOWTABLE_HOOK_NUM={0x8}, @NFTA_FLOWTABLE_HOOK_NUM={0x8}, @NFTA_FLOWTABLE_HOOK_NUM={0x8}, @NFTA_FLOWTABLE_HOOK_PRIORITY={0x8}]}, @NFTA_FLOWTABLE_NAME={0x9, 0x2, 'syz0\x00'}, @NFTA_FLOWTABLE_TABLE={0x9, 0x1, 'syz1\x00'}, @NFTA_FLOWTABLE_HANDLE={0xc, 0x5, 0x1, 0x0, 0x5}, @NFTA_FLOWTABLE_FLAGS={0x8, 0x7, 0x1, 0x0, 0x1}, @NFTA_FLOWTABLE_NAME={0x9, 0x2, 'syz0\x00'}]}, @NFT_MSG_NEWRULE={0x15c, 0x6, 0xa, 0x0, 0x0, 0x0, {0xb, 0x0, 0x8}, [@NFTA_RULE_USERDATA={0xd5, 0x7, 0x1, 0x0, "50d7606150f8ebc42081407613ad06bcc3c7fe6d5faeb432dd0c15533cac8484cd3fa6cb59a56ed2a86819a29cc45ed3e15888caec0d1eb66f5daab615469cb5a37460be5b8aa74b124b5fd366c1d53fe1a00e1b0946ab1faec3a1bb638157f7537fb3df47bb354859a0c5e98c908fcf020173458adb708c3a9452c199ed983c527a643eb303fdefcd4331cf25d2e7fe9bfaa579cc233f62eb8ba5573522f5869694a74ea50c76a917a2b8dbaf8f045b1d2ef31bb6a1973cfd34e1b3b4c5d04ce940cada2bc2213e9131b8101a41345ca1"}, @NFTA_RULE_ID={0x8, 0x9, 0x1, 0x0, 0x2}, @NFTA_RULE_COMPAT={0x4c, 0x5, 0x0, 0x1, [@NFTA_RULE_COMPAT_PROTO_BRIDGE={0x8, 0x1, 0x1, 0x0, 0x805}, @NFTA_RULE_COMPAT_PROTO_IPV6={0x8, 0x1, 0x1, 0x0, 0x11}, @NFTA_RULE_COMPAT_PROTO_BRIDGE={0x8, 0x1, 0x1, 0x0, 0x6558}, @NFTA_RULE_COMPAT_PROTO_IPV4={0x8, 0x1, 0x1, 0x0, 0x4}, @NFTA_RULE_COMPAT_PROTO_IPV4={0x8, 0x1, 0x1, 0x0, 0x2e}, @NFTA_RULE_COMPAT_FLAGS={0x8, 0x2, 0x1, 0x0, 0x3}, @NFTA_RULE_COMPAT_PROTO_BRIDGE={0x8, 0x1, 0x1, 0x0, 0x6002}, @NFTA_RULE_COMPAT_PROTO_IPV4={0x8, 0x1, 0x1, 0x0, 0x6}, @NFTA_RULE_COMPAT_PROTO_IPV6={0x8, 0x1, 0x1, 0x0, 0x2e}]}, @NFTA_RULE_USERDATA={0x1a, 0x7, 0x1, 0x0, "3f4f068f407cb986171a9d19e40df01fecdc2eb6fbed"}]}, @NFT_MSG_NEWCHAIN={0x100, 0x3, 0xa, 0x401, 0x0, 0x0, {0x5, 0x0, 0x5}, [@NFTA_CHAIN_COUNTERS={0x40, 0x8, 0x0, 0x1, [@NFTA_COUNTER_BYTES={0xc, 0x1, 0x1, 0x0, 0x4}, @NFTA_COUNTER_PACKETS={0xc, 0x2, 0x1, 0x0, 0x5}, @NFTA_COUNTER_BYTES={0xc, 0x1, 0x1, 0x0, 0x3}, @NFTA_COUNTER_PACKETS={0xc, 0x2, 0x1, 0x0, 0xeb5a}, @NFTA_COUNTER_BYTES={0xc, 0x1, 0x1, 0x0, 0x400}]}, @NFTA_CHAIN_TYPE={0xa, 0x7, 'route\x00'}, @NFTA_CHAIN_FLAGS={0x8, 0xa, 0x1, 0x0, 0x6}, @NFTA_CHAIN_NAME={0x9, 0x3, 'syz2\x00'}, @NFTA_CHAIN_POLICY={0x8, 0x5, 0x1, 0x0, 0x1}, @NFTA_CHAIN_USERDATA={0x75, 0xc, "45ef1a3e515b7c1dd550925ff1f1f09b114f6220c610193763987004829aca926ae7cc46847454f4d2494179198ede209a5c034469ba6ed92f09c961905b3469e6cb2b01b88a0a85ba567674057f9cb48ea025cd52b9f1903ea050b5bcd7cea89a04ee63a95fc641370744aa857ce83725"}, @NFTA_CHAIN_TABLE={0x9, 0x1, 'syz0\x00'}]}, @NFT_MSG_DELRULE={0xc0, 0x8, 0xa, 0x801, 0x0, 0x0, {0x1, 0x0, 0x6}, [@NFTA_RULE_CHAIN_ID={0x8, 0xb, 0x1, 0x0, 0x1}, @NFTA_RULE_HANDLE={0xc, 0x3, 0x1, 0x0, 0x3}, @NFTA_RULE_USERDATA={0x1a, 0x7, 0x1, 0x0, "a62e94d96575065f364512449e68505ac15130c2d2ee"}, @NFTA_RULE_HANDLE={0xc, 0x3, 0x1, 0x0, 0x4}, @NFTA_RULE_USERDATA={0x55, 0x7, 0x1, 0x0, "9ec376eac55b0c9c7dcbd5dcd58dac6bfaf716898d11274a2cb78592f1fca16391a4077b88a0483e5f017725163195d8ea95b6fd7e7aaa353fd6177aeee27cdc204b304bf8f2172e1f9fadedfa237a5d8d"}, @NFTA_RULE_TABLE={0x9, 0x1, 'syz1\x00'}, @NFTA_RULE_POSITION={0xc, 0x6, 0x1, 0x0, 0x2}]}, @NFT_MSG_DELTABLE={0x14, 0x2, 0xa, 0x3, 0x0, 0x0, {0x0, 0x0, 0x5}}, @NFT_MSG_NEWFLOWTABLE={0x48, 0x16, 0xa, 0x801, 0x0, 0x0, {0xa, 0x0, 0x4}, [@NFTA_FLOWTABLE_HANDLE={0xc, 0x5, 0x1, 0x0, 0x3}, @NFTA_FLOWTABLE_HANDLE={0xc, 0x5, 0x1, 0x0, 0x4}, @NFTA_FLOWTABLE_FLAGS={0x8, 0x7, 0x1, 0x0, 0x3}, @NFTA_FLOWTABLE_NAME={0x9, 0x2, 'syz0\x00'}, @NFTA_FLOWTABLE_FLAGS={0x8}]}], {0x14, 0x11, 0x1, 0x0, 0x0, {0xa}}}, 0x498}, 0x1, 0x0, 0x0, 0x24008801}, 0x4000801) getsockopt$inet_sctp6_SCTP_PR_STREAM_STATUS(r11, 0x84, 0x74, &(0x7f00000000c0)=""/47, &(0x7f0000000040)=0x2f) sendmsg$nl_xfrm(r6, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000680)=ANY=[@ANYBLOB="5c0100001000130700000000fcdbdf25e0000001000000000000000000000000ff020000000000000000000000000001000400004e2100020000000021000000", @ANYRES32=0x0, @ANYRES32=0xee00, @ANYBLOB="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", @ANYRES32=r10], 0x15c}, 0x1, 0x0, 0x0, 0x880}, 0x2014) 1.436549115s ago: executing program 8 (id=5266): ioctl$PPPIOCGIDLE64(0xffffffffffffffff, 0x8010743f, &(0x7f0000000000)) r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000040), 0x1e1001, 0x0) ioctl$TUNSETCARRIER(r0, 0x400454e2, &(0x7f0000000080)=0x1) socket$unix(0x1, 0x5, 0x0) r1 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$TIPC_CMD_GET_BEARER_NAMES(r1, 0x0, 0x4814) listen(r1, 0x8) ioctl$sock_SIOCGIFINDEX_80211(r1, 0x8933, 0x0) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f00000002c0)={{0x1, 0xffffffffffffffff}, 0x0, &(0x7f0000000280)}, 0x20) bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000300)={0x2, 0x4, 0x8, 0x1, 0x80, r2, 0x3, '\x00', 0x0, 0xffffffffffffffff, 0x4, 0x0, 0x5}, 0x50) ioctl$FS_IOC_RESVSP(r0, 0x40305828, 0x0) bpf$MAP_CREATE_RINGBUF(0x0, 0x0, 0x0) ioctl$ifreq_SIOCGIFINDEX_batadv_mesh(r1, 0x8933, 0x0) setsockopt$inet_udp_encap(0xffffffffffffffff, 0x11, 0x64, 0x0, 0x0) r3 = syz_genetlink_get_family_id$batadv(&(0x7f0000000900), 0xffffffffffffffff) sendmsg$BATADV_CMD_TP_METER(0xffffffffffffffff, &(0x7f00000009c0)={&(0x7f00000008c0)={0x10, 0x0, 0x0, 0x400}, 0xc, &(0x7f0000000980)={&(0x7f0000000580)=ANY=[@ANYBLOB='8\x00\x00\x00', @ANYRES16=r3, @ANYBLOB="08002cbd7000fddbdf25020000000a000900bbbbbbbbbbbb0000080039000000008005002a000000000008000600", @ANYRES32=0x0, @ANYBLOB="1cad0baa2297da1dad71d157857f93c98bc539d56a543e8aab0bfab996ab2ca618071643e67f7b4a9189e1918ab43c29b9a954a729c65e91e00adc6a817220d197567f37fe20d248f8f52843122fb46531802b054f60321a64a816cd3f696e26dbcc8787859fcb36e29a26fb9040e42daf8e87b40202d882ee7ce05e3533437668f3d46b557d5140791f091a20f36e56e9102f5c04ed0ed10eefb7354f418541e4e672f3213a22bde2d6b89a1060da3c497969597c4d1305fecf04ef15104e453bcab95b6256853644236b1869da80"], 0x38}, 0x1, 0x0, 0x0, 0x5}, 0xc4) socket$inet_udp(0x2, 0x2, 0x0) openat$tun(0xffffffffffffff9c, &(0x7f0000000200), 0x80, 0x0) ioctl$TUNATTACHFILTER(r0, 0x401054d5, 0x0) socket$inet6_sctp(0xa, 0x1, 0x84) getsockopt$inet_sctp_SCTP_STREAM_SCHEDULER(0xffffffffffffffff, 0x84, 0x7b, &(0x7f00000000c0)={0x0, 0x1}, &(0x7f0000000100)=0x8) getsockopt$IP_VS_SO_GET_VERSION(0xffffffffffffffff, 0x0, 0x480, &(0x7f0000000a80), &(0x7f0000000ac0)=0x40) r4 = syz_genetlink_get_family_id$smc(&(0x7f0000000c00), r1) sendmsg$SMC_PNETID_GET(r1, &(0x7f0000000d40)={&(0x7f0000000bc0)={0x10, 0x0, 0x0, 0x2000000}, 0xc, &(0x7f0000000d00)={&(0x7f0000000380)=ANY=[@ANYBLOB="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"/380, @ANYRES16=r4, @ANYBLOB="01002cbd7000fcdbdf25010000000900030073797a31000000000900030073797a310000000014000200766c616e3000000000000000000000000900030073797a31000000000900010073797a3200000000"], 0x58}, 0x1, 0x0, 0x0, 0xc0c4}, 0x840) 1.435284012s ago: executing program 1 (id=5267): bpf$BPF_PROG_WITH_BTFID_LOAD(0x5, &(0x7f0000000300)=@bpf_lsm={0x4, 0x4, &(0x7f0000000040)=@framed={{0x66, 0xa, 0x0, 0x0, 0x0, 0x61, 0x11, 0x8c}, [@call={0x85, 0x0, 0x0, 0xcc}]}, &(0x7f0000000000)='GPL\x00'}, 0x90) (async) mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x3, 0xc1ddfe9aa4c8d4f8, 0xffffffffffffffff, 0xfffff000) (async) r0 = socket$nl_netfilter(0x10, 0x3, 0xc) r1 = syz_init_net_socket$nl_rdma(0x10, 0x3, 0x10) r2 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPCTNL_MSG_CT_GET(r2, &(0x7f0000000d00)={0x0, 0x0, &(0x7f0000000cc0)={&(0x7f0000000c80)={0x24, 0x1, 0x1, 0x201, 0x0, 0x0, {0x0, 0x0, 0xa}, [@CTA_MARK_MASK={0x8, 0x15, 0x1, 0x0, 0x2}, @CTA_MARK={0x8, 0x8, 0x1, 0x0, 0x5}]}, 0x24}}, 0x4000000) (async) write(r1, &(0x7f0000000080)="29000000140005b7ff000000040860eb01cb02fcb2e4e6589b3e0ed7283f14b912685e684c42b9eeb9", 0x29) bpf$MAP_CREATE(0x0, &(0x7f0000000000)=@base={0x10, 0x4, 0x4, 0x7f7aa7c5}, 0x48) sendmsg$NFT_BATCH(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000400)={{0x14}, [@NFT_MSG_NEWTABLE={0x20, 0x0, 0xa, 0x3, 0x0, 0x0, {0x1}, [@NFTA_TABLE_NAME={0x9, 0x1, 'syz0\x00'}]}, @NFT_MSG_NEWSET={0x44, 0x9, 0xa, 0x401, 0x0, 0x0, {0x1}, [@NFTA_SET_ID={0x8}, @NFTA_SET_NAME={0x9, 0x2, 'syz2\x00'}, @NFTA_SET_TABLE={0x9, 0x1, 'syz0\x00'}, @NFTA_SET_KEY_LEN={0x8, 0x5, 0x1, 0x0, 0x1f}, @NFTA_SET_FLAGS={0x8, 0x3, 0x1, 0x0, 0x7}]}, @NFT_MSG_NEWSETELEM={0x4c, 0xc, 0xa, 0x201, 0x0, 0x0, {0x1}, [@NFTA_SET_ELEM_LIST_SET={0x9, 0x2, 'syz2\x00'}, @NFTA_SET_ELEM_LIST_ELEMENTS={0x20, 0x3, 0x0, 0x1, [{0x1c, 0x0, 0x0, 0x1, [@NFTA_SET_ELEM_KEY={0x4}, @NFTA_SET_ELEM_FLAGS={0x8, 0x3, 0x1, 0x0, 0x1}, @NFTA_SET_ELEM_TIMEOUT={0xc}]}]}, @NFTA_SET_ELEM_LIST_TABLE={0x9, 0x1, 'syz0\x00'}]}], {0x14, 0x10}}, 0xd8}, 0x1, 0x0, 0x0, 0x131e284dd61db437}, 0x0) 1.272084154s ago: executing program 0 (id=5268): r0 = socket$kcm(0x29, 0x2, 0x0) r1 = socket$inet_udp(0x2, 0x2, 0x0) ioctl$sock_inet_udp_SIOCINQ(r1, 0x541b, &(0x7f0000000180)) r2 = socket$nl_generic(0x10, 0x3, 0x10) r3 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000080), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r2, 0x8933, &(0x7f00000000c0)={'wlan1\x00', 0x0}) sendmsg$NL80211_CMD_SET_INTERFACE(r2, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000200)=ANY=[@ANYBLOB='$\x00\x00\x00', @ANYRES16=r3, @ANYBLOB="0500000000000000006b2844614a0e1f6d79959d070381becac3096c59d61369da6bdeffb34287a647e85c9e4c377bac073c6472771b08d0f3b7d54b49d9725ccf272a39719805320241197397e71e12ccd0050eabd668cb4af1eff8c96eb032fdb232e8b9ac3b934c616ced0c41165cffdaba7fb85cb5019d43ea987e5293fcc0984d87ded1414a2428e6d0688a20c24a", @ANYRES32=r4, @ANYBLOB="0800050008000000"], 0x24}}, 0x48000) sendmsg$kcm(r0, &(0x7f0000001b40)={&(0x7f00000002c0)=@qipcrtr={0x2a, 0xffffffff, 0x2}, 0x80, &(0x7f0000000980)=[{&(0x7f0000000340)="5cefc528a53726903956204319f257fa34ca93bfdbfc4de831fe4178c6de5475f39cca4e2b2d482ae04401dfa9cbd84c01167afd74322af5be0fb90f9e1f885c7c0054c1a0ceef77751c49bf2dc756c1086ff56d19c6aa1b660c7f01669fab50f43036", 0x63}, {&(0x7f00000003c0)="0774f1504ef37c392a7a412a469058d4c0d8815257c5adfe254a43f699b9e8e63fb612c20f54c2783c1f4fd13ff7fedc29d7fac4c5dff8b3add72f5ee401cf666aa21dc09c3066e485cc64aefa60a1a4a6b48cab47923532ced2b6641f9f7f8f3027c9e44b0f5c675b019b31564b5950dbc20fe84b96342cb40b6e89460ae1872056a165c9700e5f9faf906f05ceccb6383f9a3bfff16b863e4e11ca0fa56a7d48a6fe56e8b9eb462a518b3749c9821517031eecafc03d37e4349573e297cb15bd1413b745008883711f1ea87499c75164e9f12a47b759e3cd7d3545df4e88f4030baeb90624fd866e9193a2", 0xec}, {&(0x7f00000004c0)="538ee11f255fc935f7d11e93177beb5ebf65b8dd9e972c085b3135c58ebe85fa8df61a924a3842f16b7d5a012e5a3f87a12c6bd816cbaa200380e22820f32916997ed1d55f0db8e2350eda265252fdc2c2e59630d1d72fba6392ac8a72e58b48b8c208efd53c4838a249f7447fb7ca535979f2fe651da4615c5d08444f6a51a2c1a8a3beb0035ddb2c6d69ac729922954a40d38b7e987e93e65e9dc51ac5da5742f30e63e27c256fe9191f67ed25fd8bc3b6df4df47afcb104d3c52de20b59ca9263190e8977aa04f8852480f60f646a1b02a07542f2943dc49f4ddb6844c26969ce8e7f8eb5a32fb16582d8", 0xec}, {&(0x7f00000005c0)}, {&(0x7f0000000600)="73aa8f502d2e3c557a256f60779fcc087d40aeb7dab2bfeacb8059ca692712e3c737406878bc8df206e826d657e8aba797b71f165e0a5dd124d190dde9b242b7d65e942ae20dc9b77f717b2bcf71b197ea7a92266ac9a95ffde27ce193f80611f3ed1f1f3b7f39f7164a1cc06bc36cdd4ba3b0d33ecf65b386dcc1800078502cb4583ec8b981621d8b", 0x89}, {&(0x7f00000006c0)="0f9f1432fa45552acba387a7a0fedd08", 0x10}, {&(0x7f0000000700)="77bb66ce05c6d6184cbc3aec6a98febe223b98515e903140be8efba91c9440c1e410cfff13e20af5b67dcd624dc6a13278428a9587b02f80d7892a4c828be8fab92dfe5a98d3125ff92155d74168b545dd1288c1d826c0f1cf0ed7227325498ac06ff349ffc302ce61f6f1de59911261ac24afa980bcb36d8b66453515cbf5e77207d32867a321dd107503c9224d7f3f1602b4e601a5afa1c2877acbbea26ca5bfbb4ffc1f9fe27b7cefcd4629a53a172ba901a64b83c6db47edc450cab4c375bc45a481b624f1383bf29fa56dcee686e731184de9553351578a2dc6081e2a2924ba", 0xe2}, {&(0x7f0000000800)="db99009a79159b467a8d6e6abffe9180b925ffbd1eb97ccb97b1cb7f0a1110ff4bce2469d0c1f1071fecb6b44d1b7386e7fce4f3730e8dea2c5ae355520c6f8018f4c4ed4901e134654c03c9d3e50c484b8553edfafc842da11f1b2476a8a839e90d8c881bd8949e254d919e78de01b874007fc8a694eff9d7b3f5196891213f6c0c1e8f94299cfcca673d992351706f6fac1ceec8e317dbe455c840fa192aa632c08633b849518ee05e590181904bd36b9ba701916c132e8d6881e08b44a67a3e6a4fee9df0be8e280b3a333f4a049f4f5147fe557a91a15212c48b", 0xdc}, {&(0x7f0000000900)="d37ac01c566d5d25c86981ccf3fdf35b5b69e3db04bc4b6a0f95e1ca4e1e7181c5a5e2255740b1041df0cad2c0dbda0198e6396b256c09f384f9bd4544c85428748e83dd7f2e9ae44c3c4848b6f99c377b", 0x51}], 0x9, &(0x7f0000000a40)=ANY=[@ANYBLOB="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"], 0x10d0}, 0x0) sendmsg$NL80211_CMD_CONNECT(r2, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000040)=ANY=[@ANYBLOB=',\x00\x00\x00', @ANYRES16=r3, @ANYBLOB="05002ebd7000000000000800000008000300", @ANYRES32=r4, @ANYRESHEX=r4], 0x2c}, 0x1, 0x0, 0x0, 0x44840}, 0x0) 1.156310844s ago: executing program 8 (id=5269): r0 = syz_genetlink_get_family_id$tipc2(&(0x7f00000000c0), 0xffffffffffffffff) r1 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$TIPC_NL_BEARER_GET(r1, &(0x7f0000000140)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x2}, 0xc, &(0x7f0000000100)={&(0x7f0000000300)=ANY=[@ANYBLOB='\x00\x00\x00\x00', @ANYRES16=r0, @ANYBLOB="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"], 0x280}, 0x1, 0x0, 0x0, 0x8000}, 0x41) mmap(&(0x7f0000001000/0xc00000)=nil, 0xc00000, 0x0, 0x3032, 0xffffffffffffffff, 0x0) (async) r2 = socket$inet6_tcp(0xa, 0x1, 0x0) getsockopt$IP_VS_SO_GET_SERVICES(r2, 0x0, 0x482, &(0x7f0000001640)=""/139, &(0x7f0000000100)=0x8) (async) r3 = socket$nl_generic(0x10, 0x3, 0x10) (async, rerun: 32) r4 = socket$vsock_stream(0x28, 0x1, 0x0) (rerun: 32) setsockopt$SO_VM_SOCKETS_BUFFER_MIN_SIZE(r4, 0x28, 0x8, &(0x7f0000000100), 0x12d) r5 = syz_genetlink_get_family_id$ethtool(&(0x7f0000000040), 0xffffffffffffffff) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000200)={{0x1, 0xffffffffffffffff}, &(0x7f0000000180), &(0x7f00000001c0)}, 0x20) (async, rerun: 32) r7 = bpf$MAP_CREATE_TAIL_CALL(0x0, &(0x7f0000001180)={0x3, 0x4, 0x4, 0xa, 0x0, 0x1, 0x8, '\x00', 0x0, 0xffffffffffffffff, 0x3, 0x0, 0x1}, 0x50) (async, rerun: 32) r8 = bpf$OBJ_GET_MAP(0x7, &(0x7f0000000600)=@generic={&(0x7f0000000240)='./file0\x00', 0x0, 0x8}, 0x18) r9 = bpf$OBJ_GET_MAP(0x7, &(0x7f0000000680)=@o_path={&(0x7f0000000640)='./file0\x00', 0x0, 0x10, r1}, 0x18) getsockopt$PNPIPE_IFINDEX(0xffffffffffffffff, 0x113, 0x2, &(0x7f00000008c0)=0x0, &(0x7f0000000900)=0x4) mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000)='./cgroup.net/syz0\x00', 0x1ff) r11 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000), 0x200002, 0x0) ioctl$XFS_IOC_ATTRLIST_BY_HANDLE(r7, 0x4058587a, &(0x7f0000000f40)={{r11, &(0x7f0000000dc0)='\x00', 0x400802, &(0x7f0000000e00)={@_ha_fsid={[0x4]}, {0x8, 0xa, 0x8001, 0x6}}, 0x9, &(0x7f0000000e40), &(0x7f0000000e80)=0x800000}, {[0xa31, 0x100, 0x9, 0x9]}, 0x5, 0x78, &(0x7f0000000ec0)=""/120}) bpf$BPF_PROG_QUERY(0x10, &(0x7f00000010c0)={@map=r8, 0xc, 0x9da38ca342b32533, 0xe, &(0x7f0000000fc0)=[0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0], 0x8, 0x0, &(0x7f0000001000), &(0x7f0000001040)=[0x0, 0x0, 0x0, 0x0], &(0x7f0000001080)=[0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0], 0x0}, 0x40) (async, rerun: 32) r14 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='memory.events\x00', 0x275a, 0x0) (rerun: 32) write$cgroup_subtree(r14, &(0x7f0000000000)=ANY=[], 0x3261e) (async) mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x9, 0x13, r14, 0x0) bpf$BPF_PROG_ATTACH(0x8, &(0x7f0000001100)={@map=r7, 0xffffffffffffffff, 0x22, 0x4, r12, @void, @value=r14, @void, @void, r13}, 0x20) r15 = openat$cgroup_ro(r11, &(0x7f0000001140)='cpuset.memory_pressure_enabled\x00', 0x0, 0x0) preadv(r15, &(0x7f0000000140)=[{&(0x7f0000000280)=""/241, 0xf1}], 0x1, 0x0, 0x0) (async) r16 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000ac0)={0x11, 0x5, &(0x7f0000000940)=@framed={{0x18, 0x0, 0x0, 0x0, 0xe, 0x0, 0x0, 0x0, 0x1}, [@initr0={0x18, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x1000}]}, &(0x7f0000000980)='syzkaller\x00', 0x4, 0x0, 0x0, 0x41100, 0x18, '\x00', 0x0, 0x0, r4, 0x8, &(0x7f00000009c0)={0xa, 0x3}, 0x8, 0x10, &(0x7f0000000a00)={0x1, 0x9, 0x1, 0x1}, 0x10, 0x0, 0x0, 0x1, &(0x7f0000000a40)=[0x1, 0x1, 0xffffffffffffffff, 0xffffffffffffffff], &(0x7f0000000a80)=[{0x4, 0x3, 0x4, 0x9}], 0x10, 0x6}, 0x94) bpf$PROG_LOAD(0x5, &(0x7f0000000c00)={0x11, 0x18, &(0x7f0000001200)=@raw=[@exit, @ringbuf_output={{0x18, 0x1, 0x1, 0x0, r6}, {}, {}, {}, {}, {}, {0x7, 0x0, 0xb, 0x4, 0x0, 0x0, 0x2}}, @ringbuf_query, @initr0={0x18, 0x0, 0x0, 0x0, 0x4, 0x0, 0x0, 0x0, 0x40}, @func={0x85, 0x0, 0x1, 0x0, 0xfffffffffffffff9}, @map_fd={0x18, 0x0, 0x1, 0x0, r7}, @map_fd={0x18, 0x3, 0x1, 0x0, r6}, @ldst={0x2, 0x3, 0x6, 0x7, 0x5, 0x1, 0x8}, @map_fd={0x18, 0xb, 0x1, 0x0, r9}], &(0x7f0000000780)='syzkaller\x00', 0x8, 0xdc, &(0x7f00000007c0)=""/220, 0x40f00, 0x78, '\x00', r10, @fallback=0x2e, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, r16, 0x5, 0x0, &(0x7f0000000b80)=[{0x5, 0x5, 0xa, 0x6}, {0x2, 0x5, 0x4, 0x3}, {0x5, 0x1, 0x5, 0xa}, {0x1, 0x3, 0x40005, 0x7}, {0x2, 0x2, 0x6, 0x7}], 0x10, 0x7}, 0x94) getsockopt$inet_sctp6_SCTP_DEFAULT_SNDINFO(r15, 0x84, 0x22, &(0x7f0000000cc0)={0xfffc, 0x8001, 0x5, 0x7ff, 0x0}, &(0x7f0000000d00)=0x10) getsockopt$inet_sctp6_SCTP_MAXSEG(r15, 0x84, 0xd, &(0x7f0000000d40)=@assoc_id=r17, &(0x7f0000000d80)=0x4) (async) sendmsg$ETHTOOL_MSG_COALESCE_SET(r3, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000080)=ANY=[@ANYBLOB='4\x00\x00\x00', @ANYRES16=r5, @ANYBLOB="01002dbd70000000000010000000180001801400020076657468315f746f5f626f6e6400000005000e"], 0x34}, 0x1, 0x0, 0x0, 0x20040804}, 0x4044890) 1.01935716s ago: executing program 2 (id=5270): r0 = socket$kcm(0x10, 0x2, 0x10) recvmmsg(r0, &(0x7f0000000980)=[{{0x0, 0x0, &(0x7f0000000bc0)=[{&(0x7f0000000b00)=""/136, 0x88}, {&(0x7f0000001340)=""/4094, 0xffe}, {&(0x7f0000000040)=""/109, 0x6d}, {&(0x7f0000000200)=""/144, 0x90}], 0x4}, 0x1}, {{0x0, 0x0, 0x0}}], 0x2, 0x0, 0x0) sendmsg$key(0xffffffffffffffff, &(0x7f0000000100)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000000)={0x2, 0x18, 0x9, 0x8, 0x4, 0x0, 0x70bd2c, 0x25dfdbfb, [@sadb_spirange={0x2, 0x10, 0x4d5, 0x4d5}]}, 0x20}}, 0x10) 1.014855356s ago: executing program 1 (id=5271): r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000040), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f0000000180)={'wlan0\x00', 0x0}) sendmsg$NL80211_CMD_TRIGGER_SCAN(r0, &(0x7f00000014c0)={&(0x7f0000000f00)={0x10, 0x0, 0x0, 0x8}, 0xc, &(0x7f0000001480)={&(0x7f0000000f40)={0x1a0, r1, 0x1, 0x70bd25, 0x25dfdbfb, {{}, {@val={0x8, 0x3, r2}, @void}}, [@NL80211_ATTR_SCAN_SUPP_RATES={0xf4, 0x7d, 0x0, 0x1, [@NL80211_BAND_2GHZ={0xef, 0x0, "549b1da48ec9c83bfedbb14eb2a63142b836d006a50901d25146ede566d2851f64e4da9c76a9565ed6fc9c09c9aa49d409692ce6e93aa45c69aaaedf1efedf0d3d539d52eda5803b59dcd30578552315d18b42bdd1c2915336f7ddb7ed2d5a6a4c388ef61aed3ffbffd9fdc8f808c47280291b5470b8d2499bda97ebf077baf8e825d1d8f8dd739f1f48a959b7cf143922370538ed823d04d3511e340f73a79e1916f66b3a23b5a46485954c65aa668187792343f69392c2c252960e609dac86ca982323770d91fae077ea939ea2eec4278195630c0702f05750b50478ceb62020c4abba4f902b4fca5c09"}]}, @NL80211_ATTR_SCAN_SSIDS={0x74, 0x2d, 0x0, 0x1, [{0x4}, {0x21, 0x0, @random="a2ab66ad3290a850e4247b7f9014645df702abece3ff76076d9bf3e428"}, {0xa, 0x0, @default_ibss_ssid}, {0xa, 0x0, @default_ap_ssid}, {0xa, 0x0, @default_ibss_ssid}, {0x24, 0x0, @random="8e8d88cefd4ebcce9c791f4997961871265610d4b87f12d061bc0119049fedfb"}]}, @NL80211_ATTR_SCHED_SCAN_INTERVAL={0x8, 0x77, 0x5}, @NL80211_ATTR_SCHED_SCAN_RSSI_ADJUST={0x6, 0xf7, {0xe}}, @NL80211_ATTR_MEASUREMENT_DURATION_MANDATORY={0x4}, @NL80211_ATTR_SCAN_SUPP_RATES={0x4}, @NL80211_ATTR_MEASUREMENT_DURATION_MANDATORY={0x4}]}, 0x1a0}, 0x1, 0x0, 0x0, 0x40}, 0x400) 909.828482ms ago: executing program 8 (id=5272): syz_emit_ethernet(0x36, &(0x7f00000000c0)=ANY=[@ANYBLOB="aaaa59f8a9e2e80dce83473f5ddcaaaad3a3c7108221ff00006701fc0000000000000000000012280000000000000000000000000101000000000000f1d1597981b557c3275d9fe03db49c35238dbf"], 0x0) r0 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000047c0)=ANY=[@ANYBLOB="140000003a00010100000000000204000a"], 0x14}}, 0x0) recvmmsg(r0, &(0x7f0000003700)=[{{0x0, 0x0, &(0x7f0000000000)=[{&(0x7f0000000280)=""/4085, 0xff5}], 0x1}}], 0x4000000000001a3, 0x140, 0x0) r1 = socket$inet_udplite(0x2, 0x2, 0x88) r2 = socket$kcm(0x10, 0x400000002, 0x0) recvmsg$kcm(r2, &(0x7f0000006480)={0x0, 0x0, &(0x7f0000000200)=[{&(0x7f00000014c0)=""/4096, 0x1000}, {&(0x7f0000000640)=""/125, 0x7d}, {&(0x7f00000008c0)=""/200, 0xc8}, {&(0x7f00000024c0)=""/4083, 0xff3}, {&(0x7f0000000b80)=""/66, 0x42}, {&(0x7f00000002c0)=""/35, 0x23}], 0x6}, 0x0) sendmsg$inet(r2, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000080)=[{&(0x7f0000000140)="1c0000005e007f029ea69801d76ab0a272a2a788bab6c95f79725074", 0x1c}], 0x1}, 0x0) ioctl$sock_inet_udp_SIOCINQ(r1, 0x541b, &(0x7f0000000000)) 0s ago: executing program 2 (id=5273): r0 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_buf(r0, 0x29, 0x30, &(0x7f00000001c0)="520222171935f335f1e859e48843f49ecfabe6b7aa722b66173da5cfcfd393c7d2070bbb91ab1ffa5da786cc4db054006fd676484e513462d69932ded722da3375df83a1748971fa20cecfc3ab09095aad8df77320aa60a2395a9b1c2ef04ac3a39350293363d331ab4061e904586bc47e737a30bc4eb214f6d15c3ebdf02fe04e78c21c2c3a0352e3c22402e8ecce7ff6", 0x91) r1 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000100)=@newqdisc={0x44, 0x24, 0x4, 0x80000000, 0x0, {0x0, 0x0, 0x0, 0x0, {0x4}, {0xa, 0xfff3}, {0x0, 0x1}}, [@qdisc_kind_options=@q_fq_pie={{0xb}, {0x14, 0x8002, [@TCA_FQ_PIE_ECN_PROB={0x8, 0x9, 0x32}, @TCA_FQ_PIE_FLOWS={0x8, 0x2, 0x64bf}]}}]}, 0x44}, 0x1, 0x0, 0x0, 0xc5}, 0x0) sendmsg$nl_route(r1, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000100)=ANY=[@ANYBLOB="500000001000010425bbe5ad600027842cf52300", @ANYRES32=0x0, @ANYBLOB="0000000000008000280012800a00010076786c616e00"], 0x50}}, 0x4008840) kernel console output (not intermixed with test programs): 391.411598][T18296] netlink: 4 bytes leftover after parsing attributes in process `syz.2.3320'. [ 391.526467][T18254] nci: __nci_request: wait_for_completion_interruptible_timeout failed -512 [ 391.577642][T18304] netlink: 12 bytes leftover after parsing attributes in process `syz.1.3322'. [ 391.803389][T18320] netlink: 8 bytes leftover after parsing attributes in process `syz.5.3327'. [ 391.843939][T18320] netlink: 8 bytes leftover after parsing attributes in process `syz.5.3327'. [ 391.863386][T18323] netlink: 8 bytes leftover after parsing attributes in process `syz.6.3330'. [ 392.011820][T18328] syzkaller0: entered promiscuous mode [ 392.024128][T18328] syzkaller0: entered allmulticast mode [ 392.039670][T17952] IPVS: starting estimator thread 0... [ 392.109481][T18339] netlink: 40 bytes leftover after parsing attributes in process `syz.5.3335'. [ 392.145083][T18336] IPVS: using max 26 ests per chain, 62400 per kthread [ 392.194035][T18347] openvswitch: netlink: Tunnel attr 78 out of range max 16 [ 392.233636][T18350] netlink: 'syz.6.3336': attribute type 8 has an invalid length. [ 394.000321][ T79] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 394.634883][ T79] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 395.067476][T18339] nci: __nci_request: wait_for_completion_interruptible_timeout failed -512 [ 395.235243][T18392] bridge: RTM_NEWNEIGH with invalid state 0x8 [ 395.623345][ T29] audit: type=1800 audit(1773125167.202:6): pid=18412 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.5.3356" name=4996AE17DFFC2E43C8174B54B620636894AAACF28FF62616363C70A440AEC4014CAF28C0ADC04308 dev="tmpfs" ino=1600 res=0 errno=0 [ 395.794383][T18425] netlink: 12 bytes leftover after parsing attributes in process `syz.1.3359'. [ 395.832603][ T149] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 395.879292][T18425] syzkaller0: entered promiscuous mode [ 395.891921][T18425] syzkaller0: entered allmulticast mode [ 396.033035][T18438] netlink: 60 bytes leftover after parsing attributes in process `syz.5.3363'. [ 396.189269][T18445] netlink: 'syz.0.3367': attribute type 13 has an invalid length. [ 396.382524][T18455] syzkaller0: entered promiscuous mode [ 396.388171][T18455] syzkaller0: entered allmulticast mode [ 396.414183][T18455] 0: reclassify loop, rule prio 0, protocol 800 [ 396.570621][T18472] netlink: 24 bytes leftover after parsing attributes in process `syz.6.3373'. [ 396.686899][T18478] netlink: 12 bytes leftover after parsing attributes in process `syz.1.3377'. [ 396.734657][T18475] netlink: 'syz.0.3376': attribute type 9 has an invalid length. [ 396.745782][T18478] netlink: 16 bytes leftover after parsing attributes in process `syz.1.3377'. [ 397.606435][T18518] netlink: 8 bytes leftover after parsing attributes in process `syz.2.3388'. [ 397.848737][T18531] netlink: 4 bytes leftover after parsing attributes in process `syz.0.3390'. [ 398.517732][T18565] netlink: 'syz.6.3400': attribute type 24 has an invalid length. [ 399.753283][ T12] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 400.071274][T18590] netlink: 28 bytes leftover after parsing attributes in process `syz.6.3408'. [ 400.099051][T18590] netlink: 20 bytes leftover after parsing attributes in process `syz.6.3408'. [ 400.111331][T18593] netlink: 36 bytes leftover after parsing attributes in process `syz.0.3410'. [ 400.121711][T18593] openvswitch: netlink: Flow get message rejected, Key attribute missing. [ 400.142173][T18590] netlink: 4 bytes leftover after parsing attributes in process `syz.6.3408'. [ 400.239005][T18600] netlink: 12 bytes leftover after parsing attributes in process `syz.0.3412'. [ 400.349110][T18606] netlink: 'syz.6.3415': attribute type 11 has an invalid length. [ 400.394033][ T49] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 400.486775][ C1] vcan0: j1939_tp_rxtimer: 0xffff888081d02800: rx timeout, send abort [ 400.509303][T18618] bond1: (slave lo): Releasing backup interface [ 400.518173][T18618] bond1: (slave lo): last VLAN challenged slave left bond - VLAN blocking is removed [ 400.535886][T18618] A link change request failed with some changes committed already. Interface hsr_slave_0 may have been left with an inconsistent configuration, please check. [ 400.870948][T18644] xt_ipcomp: unknown flags 1D [ 400.987415][ C1] vcan0: j1939_tp_rxtimer: 0xffff888077cf5c00: rx timeout, send abort [ 400.996372][ C1] vcan0: j1939_tp_rxtimer: 0xffff888081d02800: abort rx timeout. Force session deactivation [ 401.072788][T18650] bond3: Unable to set down delay as MII monitoring is disabled [ 401.094704][T18650] bond3 (unregistering): Released all slaves [ 401.323887][T18663] bridge0: received packet on syz_tun with own address as source address (addr:aa:aa:aa:aa:aa:aa, vlan:0) [ 401.358551][T18663] netlink: 'syz.2.3432': attribute type 1 has an invalid length. [ 401.495781][ C1] vcan0: j1939_tp_rxtimer: 0xffff888077cf5c00: abort rx timeout. Force session deactivation [ 401.672778][ T49] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 401.688681][T18683] __nla_validate_parse: 2 callbacks suppressed [ 401.688701][T18683] netlink: 32 bytes leftover after parsing attributes in process `syz.1.3437'. [ 401.961740][T18707] netlink: 48 bytes leftover after parsing attributes in process `syz.6.3442'. [ 402.168037][T18714] syzkaller0: entered promiscuous mode [ 402.174055][T18714] syzkaller0: entered allmulticast mode [ 402.590921][T18727] sch_fq: defrate 53322 ignored. [ 402.833411][T18741] netlink: 12 bytes leftover after parsing attributes in process `syz.2.3454'. [ 402.893272][ T51] block nbd2: Receive control failed (result -1) [ 403.139113][T18758] netlink: 8 bytes leftover after parsing attributes in process `syz.0.3460'. [ 403.154415][T18753] netlink: 8 bytes leftover after parsing attributes in process `syz.0.3460'. [ 403.180461][T18753] netlink: 'syz.0.3460': attribute type 30 has an invalid length. [ 403.205325][T18758] netlink: 'syz.0.3460': attribute type 30 has an invalid length. [ 403.261595][ T1103] netdevsim netdevsim0 netdevsim0: set [0, 0] type 1 family 0 port 8472 - 0 [ 403.273992][ T1103] netdevsim netdevsim0 netdevsim1: set [0, 0] type 1 family 0 port 8472 - 0 [ 403.306151][ T1103] netdevsim netdevsim0 netdevsim2: set [0, 0] type 1 family 0 port 8472 - 0 [ 403.325482][ T1103] netdevsim netdevsim0 netdevsim3: set [0, 0] type 1 family 0 port 8472 - 0 [ 403.706891][T18785] netlink: 8 bytes leftover after parsing attributes in process `syz.6.3470'. [ 403.735378][T18785] A link change request failed with some changes committed already. Interface geneve0 may have been left with an inconsistent configuration, please check. [ 404.078016][T18810] netlink: 4 bytes leftover after parsing attributes in process `syz.2.3477'. [ 404.221174][T18818] netlink: 4 bytes leftover after parsing attributes in process `syz.2.3480'. [ 404.368543][T18824] netlink: 'syz.0.3482': attribute type 1 has an invalid length. [ 404.417410][T18827] netlink: 8 bytes leftover after parsing attributes in process `syz.2.3483'. [ 404.450257][T18828] bond1: (slave gretap1): making interface the new active one [ 404.459253][T18828] bond1: (slave gretap1): Enslaving as an active interface with an up link [ 404.636673][T18840] netlink: 12 bytes leftover after parsing attributes in process `syz.1.3488'. [ 404.652557][T18840] netlink: 'syz.1.3488': attribute type 30 has an invalid length. [ 404.792821][ T149] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 405.031216][T18869] netlink: 'syz.1.3498': attribute type 11 has an invalid length. [ 405.107262][T18872] netlink: 'syz.0.3499': attribute type 12 has an invalid length. [ 405.189086][T18872] bond2: option primary_reselect: invalid value (255) [ 405.198776][T18872] bond2 (unregistering): Released all slaves [ 405.411931][T18890] netlink: 'syz.0.3504': attribute type 1 has an invalid length. [ 405.516650][ T79] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 405.559757][T18893] netlink: 'syz.2.3505': attribute type 1 has an invalid length. [ 405.585767][T18893] netlink: 'syz.2.3505': attribute type 2 has an invalid length. [ 405.597838][T18895] xt_l2tp: invalid flags combination: 8 [ 405.605521][T18895] xt_TCPMSS: Only works on TCP SYN packets [ 405.624934][T18895] IPv6: NLM_F_CREATE should be specified when creating new route [ 405.642508][T18895] IPv6: RTM_NEWROUTE with no NLM_F_CREATE or NLM_F_REPLACE [ 405.649895][T18895] IPv6: NLM_F_CREATE should be set when creating new route [ 405.657265][T18895] IPv6: NLM_F_CREATE should be set when creating new route [ 405.664597][T18895] IPv6: NLM_F_CREATE should be set when creating new route [ 405.896007][T18903] vlan2: entered allmulticast mode [ 405.901459][T18903] bond0: entered allmulticast mode [ 405.906999][T18903] #ÿ: entered allmulticast mode [ 405.913574][T18903] bond_slave_1: entered allmulticast mode [ 405.964465][T18903] bond0 (unregistering): (slave 7#ÿ): Releasing backup interface [ 405.979511][T18903] #ÿ: left allmulticast mode [ 405.991551][T18903] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 406.001428][T18903] bond_slave_1: left allmulticast mode [ 406.009455][T18903] bond0 (unregistering): Released all slaves [ 406.284237][T18931] dummy0: entered promiscuous mode [ 406.291643][T18931] bridge0: port 4(dummy0) entered blocking state [ 406.301922][T18931] bridge0: port 4(dummy0) entered disabled state [ 406.309000][T18931] dummy0: entered allmulticast mode [ 406.318598][T18931] bridge0: port 4(dummy0) entered blocking state [ 406.325170][T18931] bridge0: port 4(dummy0) entered forwarding state [ 406.477260][T18937] validate_nla: 2 callbacks suppressed [ 406.477280][T18937] netlink: 'syz.2.3519': attribute type 39 has an invalid length. [ 406.483703][T18939] netlink: 'syz.6.3520': attribute type 20 has an invalid length. [ 406.500896][T18939] netlink: 'syz.6.3520': attribute type 21 has an invalid length. [ 406.508661][T18937] bridge0: port 3(syz_tun) entered disabled state [ 406.515879][T18939] IPv6: NLM_F_CREATE should be specified when creating new route [ 406.524483][T18939] IPv6: RTM_NEWROUTE with no NLM_F_CREATE or NLM_F_REPLACE [ 406.531790][T18939] IPv6: NLM_F_CREATE should be set when creating new route [ 406.542681][T18937] syz_tun (unregistering): left allmulticast mode [ 406.549161][T18937] syz_tun (unregistering): left promiscuous mode [ 406.556404][T18937] bridge0: port 3(syz_tun) entered disabled state [ 406.728667][T18948] __nla_validate_parse: 7 callbacks suppressed [ 406.728690][T18948] netlink: 52 bytes leftover after parsing attributes in process `syz.6.3524'. [ 406.899562][T18955] sctp: [Deprecated]: syz.2.3526 (pid 18955) Use of int in max_burst socket option. [ 406.899562][T18955] Use struct sctp_assoc_value instead [ 407.047315][T18965] geneve2: entered promiscuous mode [ 407.058075][ T49] netdevsim netdevsim0 netdevsim0: set [1, 1] type 2 family 0 port 38574 - 0 [ 407.071934][ T49] netdevsim netdevsim0 netdevsim1: set [1, 1] type 2 family 0 port 38574 - 0 [ 407.088209][T18966] netlink: 40 bytes leftover after parsing attributes in process `syz.2.3529'. [ 407.102122][ T49] netdevsim netdevsim0 netdevsim2: set [1, 1] type 2 family 0 port 38574 - 0 [ 407.151331][ T49] netdevsim netdevsim0 netdevsim3: set [1, 1] type 2 family 0 port 38574 - 0 [ 407.218918][T18972] "syz.1.3531" (18972) uses obsolete ecb(arc4) skcipher [ 407.308361][T18977] x_tables: ip_tables: DNAT target: used from hooks POSTROUTING, but only usable from PREROUTING/OUTPUT [ 407.433522][ T49] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 407.442621][T18990] netlink: 24 bytes leftover after parsing attributes in process `syz.0.3537'. [ 407.570188][T19000] netlink: 16 bytes leftover after parsing attributes in process `syz.6.3541'. [ 407.582944][T19000] netlink: 4 bytes leftover after parsing attributes in process `syz.6.3541'. [ 407.593155][T19000] netlink: 24 bytes leftover after parsing attributes in process `syz.6.3541'. [ 407.779963][T19006] syzkaller0: entered promiscuous mode [ 407.787757][T19006] syzkaller0: entered allmulticast mode [ 408.166167][T19034] netlink: 12 bytes leftover after parsing attributes in process `syz.6.3554'. [ 409.570610][T19034] 8021q: adding VLAN 0 to HW filter on device batadv1 [ 409.581266][T19034] team0: Port device batadv1 added [ 409.698356][T19043] netlink: 'syz.0.3557': attribute type 9 has an invalid length. [ 409.920588][T19056] syzkaller0: entered promiscuous mode [ 409.932371][T19056] syzkaller0: entered allmulticast mode [ 409.937795][T19064] netlink: 56 bytes leftover after parsing attributes in process `syz.2.3564'. [ 410.161867][T19073] netlink: 'syz.0.3566': attribute type 1 has an invalid length. [ 410.169901][T19073] netlink: 'syz.0.3566': attribute type 2 has an invalid length. [ 410.554307][ T79] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 410.642716][ T79] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 410.885425][T19080] netlink: 'syz.6.3567': attribute type 1 has an invalid length. [ 410.985741][T19080] batman_adv: Cannot find parent device. Skipping batadv-on-batadv check for gretap3 [ 410.997380][T19080] gretap3: default qdisc (pfifo_fast) fail, fallback to noqueue [ 411.006439][T19080] gretap3: entered promiscuous mode [ 411.011757][T19080] gretap3: entered allmulticast mode [ 411.229501][T19119] xt_SECMARK: only valid in 'mangle' or 'security' table, not 'raw' [ 411.434958][ T5143] Bluetooth: hci5: command 0x0406 tx timeout [ 411.436878][ T5841] Bluetooth: hci6: command 0x0406 tx timeout [ 411.616669][T19138] netlink: 12 bytes leftover after parsing attributes in process `syz.2.3582'. [ 411.662156][ T5836] Bluetooth: hci0: unexpected cc 0x0c03 length: 249 > 1 [ 411.674328][ T5836] Bluetooth: hci0: unexpected cc 0x1003 length: 249 > 9 [ 411.683180][ T5836] Bluetooth: hci0: unexpected cc 0x1001 length: 249 > 9 [ 411.691841][ T5836] Bluetooth: hci0: unexpected cc 0x0c23 length: 249 > 4 [ 411.700447][ T5836] Bluetooth: hci0: unexpected cc 0x0c38 length: 249 > 2 [ 411.707914][T19138] atomic_op ffff8880566ad998 conn xmit_atomic 0000000000000000 [ 411.755897][T19140] wg1 speed is unknown, defaulting to 1000 [ 412.028882][T19157] Bluetooth: hci1: too big key_count value 32778 [ 412.039197][T19155] syzkaller0: entered promiscuous mode [ 412.045473][T19155] syzkaller0: entered allmulticast mode [ 412.149106][T19140] chnl_net:caif_netlink_parms(): no params data found [ 412.363267][T19172] netlink: 144 bytes leftover after parsing attributes in process `syz.2.3591'. [ 412.381793][T19140] bridge0: port 1(bridge_slave_0) entered blocking state [ 412.389661][T19140] bridge0: port 1(bridge_slave_0) entered disabled state [ 412.398144][T19140] bridge_slave_0: entered allmulticast mode [ 412.406938][T19140] bridge_slave_0: entered promiscuous mode [ 412.433658][T19140] bridge0: port 2(bridge_slave_1) entered blocking state [ 412.442540][T19140] bridge0: port 2(bridge_slave_1) entered disabled state [ 412.450266][T19140] bridge_slave_1: entered allmulticast mode [ 412.458822][T19140] bridge_slave_1: entered promiscuous mode [ 412.498323][T19140] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 412.514142][T19140] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 412.594026][T19140] team0: Port device team_slave_0 added [ 412.623186][T19140] team0: Port device team_slave_1 added [ 412.670816][T19187] netlink: 8 bytes leftover after parsing attributes in process `syz.1.3595'. [ 412.686274][T19140] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 412.702573][T19140] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 412.730995][T19140] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 412.759487][T19140] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 412.767294][T19140] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 412.795066][T19140] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 412.828274][T19191] netlink: 211792 bytes leftover after parsing attributes in process `syz.0.3597'. [ 412.916720][T19140] hsr_slave_0: entered promiscuous mode [ 412.927344][T19140] hsr_slave_1: entered promiscuous mode [ 412.931043][T19201] netlink: 1280 bytes leftover after parsing attributes in process `syz.1.3600'. [ 412.940398][T19140] debugfs: 'hsr0' already exists in 'hsr' [ 412.948796][T19140] Cannot create hsr debugfs directory [ 412.955757][T19193] syzkaller0: entered promiscuous mode [ 412.961534][T19193] syzkaller0: entered allmulticast mode [ 413.111616][T19211] netlink: 84 bytes leftover after parsing attributes in process `syz.1.3601'. [ 413.193462][ T49] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 413.289895][T19215] syzkaller1: entered promiscuous mode [ 413.296197][T19215] syzkaller1: entered allmulticast mode [ 413.305161][T19215] syzkaller1: left promiscuous mode [ 413.310661][T19215] syzkaller1: left allmulticast mode [ 413.415587][T19217] erspan0: entered promiscuous mode [ 413.421089][T19217] erspan0: entered allmulticast mode [ 413.753504][ T51] Bluetooth: hci0: command tx timeout [ 415.672618][ T49] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 415.832249][ T51] Bluetooth: hci0: command tx timeout [ 415.910007][T19198] nci: __nci_request: wait_for_completion_interruptible_timeout failed -512 [ 415.919161][T19209] netlink: 'syz.1.3601': attribute type 23 has an invalid length. [ 415.988599][T19140] netdevsim netdevsim7 netdevsim0: renamed from eth0 [ 416.030980][T19140] netdevsim netdevsim7 netdevsim1: renamed from eth1 [ 416.068177][T19140] netdevsim netdevsim7 netdevsim2: renamed from eth2 [ 416.108640][T19140] netdevsim netdevsim7 netdevsim3: renamed from eth3 [ 416.394291][ T79] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 416.488475][T19140] 8021q: adding VLAN 0 to HW filter on device bond0 [ 416.534324][T19140] 8021q: adding VLAN 0 to HW filter on device team0 [ 416.555833][ T49] bridge0: port 1(bridge_slave_0) entered blocking state [ 416.563116][ T49] bridge0: port 1(bridge_slave_0) entered forwarding state [ 416.583596][T19261] netlink: 232 bytes leftover after parsing attributes in process `syz.6.3615'. [ 416.638385][ T12] bridge0: port 2(bridge_slave_1) entered blocking state [ 416.645913][ T12] bridge0: port 2(bridge_slave_1) entered forwarding state [ 416.824422][T19140] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 417.320489][T19290] netlink: 8 bytes leftover after parsing attributes in process `syz.2.3621'. [ 417.363305][T19290] veth0_to_bridge: entered promiscuous mode [ 417.428327][T19140] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 417.464890][T19289] veth0_to_bridge: left promiscuous mode [ 417.637200][T19303] netlink: 8 bytes leftover after parsing attributes in process `syz.2.3626'. [ 417.673437][T19302] xt_policy: output policy not valid in PREROUTING and INPUT [ 417.846645][T19317] netlink: 'syz.6.3630': attribute type 10 has an invalid length. [ 417.913635][ T51] Bluetooth: hci0: command tx timeout [ 417.994643][T19325] netlink: 40 bytes leftover after parsing attributes in process `syz.0.3631'. [ 418.017430][T19328] netlink: 40 bytes leftover after parsing attributes in process `syz.0.3631'. [ 418.276702][T19340] netlink: 8 bytes leftover after parsing attributes in process `syz.0.3636'. [ 418.318161][ T79] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 418.344540][T19140] veth0_vlan: entered promiscuous mode [ 418.379775][T19140] veth1_vlan: entered promiscuous mode [ 418.451845][T19353] netlink: 24 bytes leftover after parsing attributes in process `syz.2.3639'. [ 418.560408][T19140] veth0_macvtap: entered promiscuous mode [ 418.598845][T19353] netlink: 4 bytes leftover after parsing attributes in process `syz.2.3639'. [ 418.651135][T19140] veth1_macvtap: entered promiscuous mode [ 418.731668][T19140] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 418.777357][T19140] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 418.819579][ T13] netdevsim netdevsim7 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 418.863735][ T13] netdevsim netdevsim7 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 418.890784][ T13] netdevsim netdevsim7 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 418.948581][ T13] netdevsim netdevsim7 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 419.177718][ T49] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 419.195563][ T49] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 419.407324][ T35] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 419.423285][ T35] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 419.765571][T19411] netlink: 190972 bytes leftover after parsing attributes in process `syz.2.3651'. [ 419.803573][T19413] netlink: 60 bytes leftover after parsing attributes in process `syz.6.3652'. [ 419.859345][T19415] netlink: 'syz.1.3653': attribute type 11 has an invalid length. [ 419.980353][T19420] netlink: 108 bytes leftover after parsing attributes in process `syz.7.3655'. [ 419.998347][ T51] Bluetooth: hci0: command tx timeout [ 420.167710][T19434] netlink: 'syz.6.3661': attribute type 1 has an invalid length. [ 420.239072][T19434] bond3: (slave bridge6): making interface the new active one [ 420.294125][T19434] bond3: (slave bridge6): Enslaving as an active interface with an up link [ 420.325911][T19442] team0: Device ip6gre1 is of different type [ 420.528353][T19457] ieee802154 phy1 wpan1: encryption failed: -22 [ 420.564058][T19461] netlink: 'syz.2.3668': attribute type 3 has an invalid length. [ 420.874643][ T49] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 421.078305][T19492] x_tables: (null)_tables: NFQUEUE.1 target: invalid size 8 (kernel) != (user) 16 [ 421.172238][T19497] netlink: 72 bytes leftover after parsing attributes in process `syz.6.3679'. [ 421.235243][T19500] Bluetooth: MGMT ver 1.23 [ 421.460864][T19510] wlan1: mtu greater than device maximum [ 421.520156][T19517] bond2 (unregistering): Released all slaves [ 421.662381][T19519] !: renamed from dummy0 [ 421.903296][T19552] vlan0: entered allmulticast mode [ 421.908498][T19552] bond0: entered allmulticast mode [ 421.914939][T19552] bond_slave_0: entered allmulticast mode [ 421.920727][T19552] bond_slave_1: entered allmulticast mode [ 421.933930][T19552] mac80211_hwsim hwsim60 wlan1: entered allmulticast mode [ 421.978661][T19552] netlink: 'syz.6.3691': attribute type 11 has an invalid length. [ 422.062566][T19552] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 422.141727][T19552] bond_slave_0: left allmulticast mode [ 422.155003][ T35] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 422.178977][T19552] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 422.199000][T19552] bond_slave_1: left allmulticast mode [ 422.215054][T19552] bond0 (unregistering): (slave wlan1): Releasing backup interface [ 422.227820][T19552] mac80211_hwsim hwsim60 wlan1: left allmulticast mode [ 422.265401][T19552] bond0 (unregistering): Released all slaves [ 423.038869][T19602] netlink: zone id is out of range [ 423.067509][T19602] netlink: zone id is out of range [ 423.086230][T19602] netlink: zone id is out of range [ 423.091432][T19602] netlink: zone id is out of range [ 423.142502][T19602] netlink: zone id is out of range [ 423.149183][T19602] netlink: zone id is out of range [ 423.156024][T19602] netlink: zone id is out of range [ 423.349907][T19619] netlink: 'syz.1.3717': attribute type 1 has an invalid length. [ 423.463114][T19628] Bluetooth: MGMT ver 1.23 [ 423.632782][T19634] netlink: 'syz.2.3721': attribute type 3 has an invalid length. [ 423.649645][T19634] __nla_validate_parse: 5 callbacks suppressed [ 423.649667][T19634] netlink: 244 bytes leftover after parsing attributes in process `syz.2.3721'. [ 423.817217][T19642] netlink: 'syz.6.3723': attribute type 3 has an invalid length. [ 423.898568][T19653] netlink: 28 bytes leftover after parsing attributes in process `syz.1.3725'. [ 423.922135][T19653] netlink: 8 bytes leftover after parsing attributes in process `syz.1.3725'. [ 424.561026][T19690] netlink: 'syz.2.3736': attribute type 16 has an invalid length. [ 424.585505][T19690] netlink: 20 bytes leftover after parsing attributes in process `syz.2.3736'. [ 424.781783][T19702] ip_vti0: entered promiscuous mode [ 424.789765][T19702] netlink: 8 bytes leftover after parsing attributes in process `syz.6.3739'. [ 424.824569][T19702] netlink: 4 bytes leftover after parsing attributes in process `syz.6.3739'. [ 425.186896][T19739] netlink: 24 bytes leftover after parsing attributes in process `syz.2.3747'. [ 425.213211][T19735] netlink: 8 bytes leftover after parsing attributes in process `syz.6.3748'. [ 425.233808][T19739] netlink: 88 bytes leftover after parsing attributes in process `syz.2.3747'. [ 425.262872][T19731] netlink: 4 bytes leftover after parsing attributes in process `syz.2.3747'. [ 425.469981][T19754] wg1 speed is unknown, defaulting to 1000 [ 425.538481][T19759] netlink: 'syz.2.3752': attribute type 10 has an invalid length. [ 425.707120][T19768] netlink: 'syz.7.3756': attribute type 1 has an invalid length. [ 425.796399][T19768] 8021q: adding VLAN 0 to HW filter on device bond1 [ 425.840734][T19768] vlan2: entered promiscuous mode [ 425.866761][T19768] bond1: entered promiscuous mode [ 425.903159][T19768] vlan2: entered allmulticast mode [ 425.910124][T19768] bond1: entered allmulticast mode [ 425.931860][T19772] macvtap1: entered promiscuous mode [ 425.942285][T19772] syz_tun: entered promiscuous mode [ 425.967120][T19772] syz_tun: left promiscuous mode [ 426.087741][T19771] bond1: (slave bridge1): making interface the new active one [ 426.112699][T19771] bridge1: entered promiscuous mode [ 426.118158][T19771] bridge1: entered allmulticast mode [ 426.126013][T19771] bond1: (slave bridge1): Enslaving as an active interface with an up link [ 426.275754][T17955] IPVS: starting estimator thread 0... [ 426.291108][T19790] IPVS: set_ctl: invalid protocol: 59 127.0.0.1:20003 [ 426.363726][T19791] IPVS: using max 25 ests per chain, 60000 per kthread [ 426.633908][ T60] net_ratelimit: 4 callbacks suppressed [ 426.633927][ T60] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 427.272987][ T35] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 428.862775][T19778] nci: __nci_request: wait_for_completion_interruptible_timeout failed -512 [ 429.049506][T19825] __nla_validate_parse: 4 callbacks suppressed [ 429.049528][T19825] netlink: 4 bytes leftover after parsing attributes in process `syz.7.3772'. [ 429.082283][T19823] netlink: 'syz.2.3771': attribute type 17 has an invalid length. [ 429.091132][T19823] netlink: 4 bytes leftover after parsing attributes in process `syz.2.3771'. [ 429.115598][T19831] netlink: 'syz.6.3769': attribute type 24 has an invalid length. [ 429.131908][T19823] netlink: 28 bytes leftover after parsing attributes in process `syz.2.3771'. [ 429.192932][ T1334] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 429.229512][T19835] netlink: 60 bytes leftover after parsing attributes in process `syz.1.3774'. [ 429.468353][T19852] netlink: 4 bytes leftover after parsing attributes in process `syz.0.3781'. [ 429.493787][T19850] syzkaller0: entered promiscuous mode [ 429.499325][T19850] syzkaller0: entered allmulticast mode [ 429.511447][T19858] netlink: 732 bytes leftover after parsing attributes in process `syz.2.3782'. [ 429.645562][T19861] bridge0: port 1(bridge_slave_0) entered disabled state [ 429.681632][T19861] bridge_slave_0 (unregistering): left allmulticast mode [ 429.710969][T19861] bridge_slave_0 (unregistering): left promiscuous mode [ 429.738388][T19861] bridge0: port 1(bridge_slave_0) entered disabled state [ 429.907281][T19874] netlink: 8 bytes leftover after parsing attributes in process `syz.6.3788'. [ 430.146979][T19885] netlink: 28 bytes leftover after parsing attributes in process `syz.1.3792'. [ 430.432979][T19905] team0: No ports can be present during mode change [ 430.619359][T19917] netlink: 4 bytes leftover after parsing attributes in process `syz.7.3805'. [ 430.666421][T19917] bridge0: entered promiscuous mode [ 430.693941][T19917] macsec1: entered promiscuous mode [ 430.699388][T19917] macsec1: entered allmulticast mode [ 430.735912][T19917] bridge0: entered allmulticast mode [ 430.743443][T19927] netlink: 16 bytes leftover after parsing attributes in process `syz.0.3803'. [ 430.756974][T19917] bridge0: port 1(macsec1) entered blocking state [ 430.767439][T19917] bridge0: port 1(macsec1) entered disabled state [ 430.779934][T19917] bridge0: left allmulticast mode [ 430.788792][T19917] bridge0: left promiscuous mode [ 430.803928][T19913] tipc: Enabling of bearer rejected, failed to enable media [ 430.964375][T19932] block nbd6: not configured, cannot reconfigure [ 431.280398][T19955] netlink: 'syz.0.3816': attribute type 4 has an invalid length. [ 431.309615][T19958] IPVS: sync thread started: state = MASTER, mcast_ifn = veth1_to_team, syncid = 4, id = 0 [ 431.333318][T19959] netlink: 'syz.1.3818': attribute type 1 has an invalid length. [ 431.369326][T19959] 8021q: adding VLAN 0 to HW filter on device bond5 [ 431.595043][T19975] nbd: socks must be embedded in a SOCK_ITEM attr [ 431.669916][T19975] netlink: 'syz.2.3826': attribute type 20 has an invalid length. [ 431.678703][ T60] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 431.711145][ T60] netdevsim netdevsim2 netdevsim0: set [0, 0] type 1 family 0 port 8472 - 0 [ 431.711200][T19975] netlink: 'syz.2.3826': attribute type 20 has an invalid length. [ 431.721958][ T60] netdevsim netdevsim2 netdevsim1: set [0, 0] type 1 family 0 port 8472 - 0 [ 431.760160][ T60] netdevsim netdevsim2 netdevsim2: set [0, 0] type 1 family 0 port 8472 - 0 [ 431.780200][ T60] netdevsim netdevsim2 netdevsim3: set [0, 0] type 1 family 0 port 8472 - 0 [ 431.817241][T19988] erspan0: entered promiscuous mode [ 431.824484][T19988] erspan0: entered allmulticast mode [ 432.068730][T20003] geneve2: entered promiscuous mode [ 432.088454][T20003] geneve2: entered allmulticast mode [ 432.109513][ T58] netdevsim netdevsim1 netdevsim0: set [1, 1] type 2 family 0 port 19999 - 0 [ 432.188384][ T58] netdevsim netdevsim1 netdevsim1: set [1, 1] type 2 family 0 port 19999 - 0 [ 432.210313][ T58] netdevsim netdevsim1 netdevsim2: set [1, 1] type 2 family 0 port 19999 - 0 [ 432.270536][T20019] macvlan2: entered promiscuous mode [ 432.292879][T20019] macvlan2: entered allmulticast mode [ 432.303257][T20019] bond3: (slave macvlan2): Opening slave failed [ 432.335373][ T58] netdevsim netdevsim1 netdevsim3: set [1, 1] type 2 family 0 port 19999 - 0 [ 432.403122][T20027] openvswitch: netlink: Unexpected mask (mask=1040, allowed=10048) [ 432.563897][T20034] netlink: 'syz.6.3840': attribute type 1 has an invalid length. [ 432.636384][T20041] TCP: TCP_TX_DELAY enabled [ 432.838561][T20058] veth0_macvtap: left promiscuous mode [ 433.020291][T20071] syzkaller0: entered promiscuous mode [ 433.030923][T20071] syzkaller0: entered allmulticast mode [ 433.053144][ T49] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 433.200410][T20080] netem: incorrect ge model size [ 433.214191][T20080] netem: change failed [ 433.368479][T20098] openvswitch: netlink: Message has 1 unknown bytes. [ 433.412416][T20098] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 433.637228][T20116] syzkaller0: entered promiscuous mode [ 433.663921][T20116] syzkaller0: entered allmulticast mode [ 433.719620][T20116] netlink: 'syz.2.3867': attribute type 9 has an invalid length. [ 433.765159][T20116] netlink: 'syz.2.3867': attribute type 11 has an invalid length. [ 433.791232][T20116] netlink: 'syz.2.3867': attribute type 12 has an invalid length. [ 434.316986][ T35] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 434.364600][T20152] nbd: socks must be embedded in a SOCK_ITEM attr [ 434.656782][T20163] __nla_validate_parse: 24 callbacks suppressed [ 434.656805][T20163] netlink: 60 bytes leftover after parsing attributes in process `syz.0.3879'. [ 434.696315][T20163] netlink: 60 bytes leftover after parsing attributes in process `syz.0.3879'. [ 434.757747][T20163] netlink: 12 bytes leftover after parsing attributes in process `syz.0.3879'. [ 434.773416][T20167] netlink: 4 bytes leftover after parsing attributes in process `syz.7.3882'. [ 434.788011][T20163] block nbd3: Unsupported socket: should be TCP or UNIX. [ 435.089601][T20178] netlink: 8 bytes leftover after parsing attributes in process `syz.7.3887'. [ 435.129732][T20178] netlink: 8 bytes leftover after parsing attributes in process `syz.7.3887'. [ 435.154563][ T13] netdevsim netdevsim0 netdevsim0: unset [0, 0] type 1 family 0 port 8472 - 0 [ 435.177070][ T13] netdevsim netdevsim0 netdevsim0: unset [1, 0] type 2 family 0 port 6081 - 0 [ 435.200240][ T13] netdevsim netdevsim0 netdevsim0: unset [1, 1] type 2 family 0 port 38574 - 0 [ 435.421735][T20181] syzkaller0: entered promiscuous mode [ 435.430861][T20181] syzkaller0: entered allmulticast mode [ 435.480548][T20188] validate_nla: 1 callbacks suppressed [ 435.480571][T20188] netlink: 'syz.2.3888': attribute type 21 has an invalid length. [ 436.793724][ T60] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 437.317787][T20188] netlink: 'syz.2.3888': attribute type 6 has an invalid length. [ 437.326166][T20188] netlink: 132 bytes leftover after parsing attributes in process `syz.2.3888'. [ 437.338351][T20204] gre0: entered promiscuous mode [ 437.347595][T20204] gre0: entered allmulticast mode [ 437.466819][T20233] netlink: 'syz.2.3900': attribute type 27 has an invalid length. [ 437.485975][T20233] netlink: 12 bytes leftover after parsing attributes in process `syz.2.3900'. [ 437.496817][T20233] openvswitch: netlink: Flow actions attr not present in new flow. [ 437.527982][T20236] netlink: 64 bytes leftover after parsing attributes in process `syz.7.3901'. [ 437.541256][T20236] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check. [ 439.138899][T20223] nci: __nci_request: wait_for_completion_interruptible_timeout failed -512 [ 439.328214][T20259] netlink: 'syz.7.3906': attribute type 1 has an invalid length. [ 439.384347][T20259] netlink: 12 bytes leftover after parsing attributes in process `syz.7.3906'. [ 439.696085][T20280] syzkaller1: entered promiscuous mode [ 439.701636][T20280] syzkaller1: entered allmulticast mode [ 439.708255][T20285] netlink: 25 bytes leftover after parsing attributes in process `syz.7.3916'. [ 439.720678][T20280] netlink: 20 bytes leftover after parsing attributes in process `syz.1.3914'. [ 439.734824][T20280] tipc: Invalid UDP bearer configuration [ 439.734881][T20280] tipc: Enabling of bearer rejected, failed to enable media [ 439.760021][T20288] netlink: 'syz.7.3916': attribute type 4 has an invalid length. [ 439.786692][T20289] netlink: 232 bytes leftover after parsing attributes in process `syz.0.3917'. [ 439.988901][T20292] : entered promiscuous mode [ 440.021048][T20292] netlink: 'syz.2.3918': attribute type 1 has an invalid length. [ 440.078388][ T1301] ieee802154 phy1 wpan1: encryption failed: -22 [ 440.085775][ T1334] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 440.117493][T20304] netlink: 'syz.7.3922': attribute type 1 has an invalid length. [ 440.149338][T20309] netlink: 32 bytes leftover after parsing attributes in process `syz.0.3923'. [ 440.165316][T20304] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check. [ 440.304313][T20319] openvswitch: netlink: IP tunnel dst address not specified [ 440.348847][T20315] netlink: 16 bytes leftover after parsing attributes in process `syz.1.3926'. [ 440.427547][ T1334] tipc: Subscription rejected, illegal request [ 440.575207][T20334] x_tables: unsorted underflow at hook 1 [ 440.704929][T20340] syzkaller0: entered promiscuous mode [ 440.710879][T20340] syzkaller0: entered allmulticast mode [ 440.949492][T20357] bridge2: entered promiscuous mode [ 440.976294][T20357] bridge2: entered allmulticast mode [ 441.000392][T20357] team0: Port device bridge2 added [ 441.027823][T20368] syz.1.3940: vmalloc error: size 8589938688, exceeds total pages, mode:0xdc0(GFP_KERNEL|__GFP_ZERO), nodemask=(null),cpuset=/,mems_allowed=0-1 [ 441.047506][T20364] bridge0: port 1(team0) entered blocking state [ 441.056917][T20364] bridge0: port 1(team0) entered disabled state [ 441.065216][T20364] team0: entered allmulticast mode [ 441.070688][T20364] team_slave_0: entered allmulticast mode [ 441.084842][T20364] team_slave_1: entered allmulticast mode [ 441.093706][T20368] CPU: 0 UID: 0 PID: 20368 Comm: syz.1.3940 Not tainted syzkaller #0 PREEMPT(full) [ 441.093738][T20368] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 02/12/2026 [ 441.093762][T20368] Call Trace: [ 441.093772][T20368] [ 441.093782][T20368] dump_stack_lvl+0xe8/0x150 [ 441.094040][T20368] warn_alloc+0x249/0x340 [ 441.094106][T20368] ? stack_trace_save+0xa9/0x100 [ 441.094161][T20368] ? __pfx_warn_alloc+0x10/0x10 [ 441.094194][T20368] ? kasan_save_track+0x4f/0x80 [ 441.094229][T20368] ? kasan_save_track+0x3e/0x80 [ 441.094251][T20368] ? __kasan_kmalloc+0x93/0xb0 [ 441.094274][T20368] ? __kmalloc_cache_noprof+0x31c/0x660 [ 441.094298][T20368] ? xskq_create+0x56/0x170 [ 441.094425][T20368] ? xsk_setsockopt+0x54c/0x990 [ 441.094461][T20368] ? do_sock_setsockopt+0x17c/0x1b0 [ 441.094574][T20368] ? __x64_sys_setsockopt+0x13d/0x1b0 [ 441.094614][T20368] ? do_syscall_64+0x14d/0xf80 [ 441.094687][T20368] __vmalloc_node_range_noprof+0x132/0x1730 [ 441.094754][T20368] ? __pfx___vmalloc_node_range_noprof+0x10/0x10 [ 441.094788][T20368] ? __kasan_kmalloc+0x93/0xb0 [ 441.094820][T20368] vmalloc_user_noprof+0xad/0xe0 [ 441.094844][T20368] ? xskq_create+0xbf/0x170 [ 441.094876][T20368] xskq_create+0xbf/0x170 [ 441.094911][T20368] xsk_init_queue+0x8a/0xe0 [ 441.094943][T20368] xsk_setsockopt+0x54c/0x990 [ 441.094976][T20368] ? __pfx_xsk_setsockopt+0x10/0x10 [ 441.095005][T20368] ? __pfx_aa_sk_perm+0x10/0x10 [ 441.095104][T20368] ? aa_sock_opt_perm+0xff/0x1a0 [ 441.095198][T20368] ? bpf_lsm_socket_setsockopt+0x9/0x20 [ 441.095260][T20368] ? __pfx_xsk_setsockopt+0x10/0x10 [ 441.095291][T20368] do_sock_setsockopt+0x17c/0x1b0 [ 441.095331][T20368] __x64_sys_setsockopt+0x13d/0x1b0 [ 441.095373][T20368] do_syscall_64+0x14d/0xf80 [ 441.095405][T20368] ? trace_irq_disable+0x3b/0x150 [ 441.095453][T20368] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 441.095493][T20368] ? clear_bhb_loop+0x40/0x90 [ 441.095521][T20368] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 441.095548][T20368] RIP: 0033:0x7f57d159c799 [ 441.095570][T20368] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 441.095600][T20368] RSP: 002b:00007f57d2405028 EFLAGS: 00000246 ORIG_RAX: 0000000000000036 [ 441.095625][T20368] RAX: ffffffffffffffda RBX: 00007f57d1815fa0 RCX: 00007f57d159c799 [ 441.095641][T20368] RDX: 0000000000000006 RSI: 000000000000011b RDI: 0000000000000004 [ 441.095655][T20368] RBP: 00007f57d1632bd9 R08: 0000000000000004 R09: 0000000000000000 [ 441.095669][T20368] R10: 0000200000000000 R11: 0000000000000246 R12: 0000000000000000 [ 441.095684][T20368] R13: 00007f57d1816038 R14: 00007f57d1815fa0 R15: 00007ffee8302ad8 [ 441.095725][T20368] [ 441.098483][T20364] team0: entered promiscuous mode [ 441.153066][T20368] Mem-Info: [ 441.263844][T20364] team_slave_0: entered promiscuous mode [ 441.321438][T20368] active_anon:6996 inactive_anon:0 isolated_anon:0 [ 441.321438][T20368] active_file:3154 inactive_file:40233 isolated_file:0 [ 441.321438][T20368] unevictable:770 dirty:214 writeback:0 [ 441.321438][T20368] slab_reclaimable:13572 slab_unreclaimable:124541 [ 441.321438][T20368] mapped:41976 shmem:1362 pagetables:1572 [ 441.321438][T20368] sec_pagetables:0 bounce:0 [ 441.321438][T20368] kernel_misc_reclaimable:0 [ 441.321438][T20368] free:1267987 free_pcp:11535 free_cma:0 [ 441.442589][T20368] Node 0 active_anon:27984kB inactive_anon:0kB active_file:12616kB inactive_file:160736kB unevictable:1544kB isolated(anon):0kB isolated(file):0kB mapped:175104kB dirty:852kB writeback:0kB shmem:3912kB shmem_thp:0kB shmem_pmdmapped:0kB anon_thp:0kB kernel_stack:15808kB pagetables:6252kB sec_pagetables:0kB all_unreclaimable? no Balloon:0kB [ 441.487292][T20364] team_slave_1: entered promiscuous mode [ 441.494543][T20364] bridge0: port 1(team0) entered blocking state [ 441.501177][T20364] bridge0: port 1(team0) entered forwarding state [ 441.528253][T20368] Node 1 active_anon:0kB inactive_anon:0kB active_file:0kB inactive_file:196kB unevictable:1536kB isolated(anon):0kB isolated(file):0kB mapped:0kB dirty:4kB writeback:0kB shmem:1536kB shmem_thp:0kB shmem_pmdmapped:0kB anon_thp:0kB kernel_stack:32kB pagetables:136kB sec_pagetables:0kB all_unreclaimable? no Balloon:0kB [ 441.588798][T20362] netlink: 'syz.0.3939': attribute type 10 has an invalid length. [ 441.599396][T20362] bridge0: port 2(bridge_slave_1) entered disabled state [ 441.612898][T20362] bridge_slave_1: left allmulticast mode [ 441.618614][T20362] bridge_slave_1: left promiscuous mode [ 441.646390][T20362] bridge0: port 2(bridge_slave_1) entered disabled state [ 441.654668][T20368] Node 0 DMA free:15360kB boost:0kB min:208kB low:260kB high:312kB reserved_highatomic:0KB free_highatomic:0KB active_anon:0kB inactive_anon:0kB active_file:0kB inactive_file:0kB unevictable:0kB writepending:0kB zspages:0kB present:15992kB managed:15360kB mlocked:0kB bounce:0kB free_pcp:0kB local_pcp:0kB free_cma:0kB [ 441.690354][T20368] lowmem_reserve[]: 0 2492 2493 2493 2493 [ 441.711559][T20362] bond0: (slave bridge_slave_1): Enslaving as an active interface with an up link [ 441.722413][T20368] Node 0 DMA32 free:1133412kB boost:0kB min:34200kB low:42748kB high:51296kB reserved_highatomic:0KB free_highatomic:0KB active_anon:27884kB inactive_anon:0kB active_file:12616kB inactive_file:160736kB unevictable:1544kB writepending:852kB zspages:0kB present:3129332kB managed:2552784kB mlocked:8kB bounce:0kB free_pcp:45396kB local_pcp:23984kB free_cma:0kB [ 441.760361][T20368] lowmem_reserve[]: 0 0 0 0 0 [ 441.766123][T20368] Node 0 Normal free:0kB boost:0kB min:8kB low:8kB high:8kB reserved_highatomic:0KB free_highatomic:0KB active_anon:0kB inactive_anon:0kB active_file:0kB inactive_file:0kB unevictable:0kB writepending:0kB zspages:0kB present:1048580kB managed:884kB mlocked:0kB bounce:0kB free_pcp:16kB local_pcp:8kB free_cma:0kB [ 441.797892][T20368] lowmem_reserve[]: 0 0 0 0 0 [ 441.821950][T20368] Node 1 Normal free:3925480kB boost:0kB min:55688kB low:69608kB high:83528kB reserved_highatomic:0KB free_highatomic:0KB active_anon:0kB inactive_anon:0kB active_file:0kB inactive_file:196kB unevictable:1536kB writepending:4kB zspages:0kB present:4194300kB managed:4111100kB mlocked:0kB bounce:0kB free_pcp:752kB local_pcp:0kB free_cma:0kB [ 441.858751][T20368] lowmem_reserve[]: 0 0 0 0 0 [ 441.865029][T20368] Node 0 DMA: 0*4kB 0*8kB 0*16kB 0*32kB 0*64kB 0*128kB 0*256kB 0*512kB 1*1024kB (U) 1*2048kB (M) 3*4096kB (M) = 15360kB [ 441.894063][T20368] Node 0 DMA32: 5207*4kB (UME) 4593*8kB (UM) 3104*16kB (UM) 132*32kB (UM) 74*64kB (UME) 76*128kB (UME) 337*256kB (UM) 289*512kB (UM) 179*1024kB (U) 86*2048kB (UME) 100*4096kB (UM) = 1129188kB [ 441.953556][T20368] Node 0 Normal: 0*4kB 0*8kB 0*16kB 0*32kB 0*64kB 0*128kB 0*256kB 0*512kB 0*1024kB 0*2048kB 0*4096kB = 0kB [ 441.965693][T20368] Node 1 Normal: 1*4kB (M) 2*8kB (UM) 5*16kB (UME) 2*32kB (ME) 3*64kB (UME) 5*128kB (UME) 5*256kB (UM) 3*512kB (UM) 2*1024kB (ME) 2*2048kB (UE) 956*4096kB (M) = 3925732kB [ 441.998064][ T35] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 442.019252][T20368] Node 0 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=1048576kB [ 442.037848][T20368] Node 0 hugepages_total=2 hugepages_free=2 hugepages_surp=0 hugepages_size=2048kB [ 442.048463][T20368] Node 1 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=1048576kB [ 442.064683][T20368] Node 1 hugepages_total=2 hugepages_free=2 hugepages_surp=0 hugepages_size=2048kB [ 442.074606][T20368] 45577 total pagecache pages [ 442.079423][T20368] 0 pages in swap cache [ 442.084036][T20368] Free swap = 124996kB [ 442.131516][T20368] Total swap = 124996kB [ 442.138414][T20368] 2097051 pages RAM [ 442.150262][T20368] 0 pages HighMem/MovableOnly [ 442.160377][T20368] 427019 pages reserved [ 442.166934][T20368] 0 pages cma reserved [ 442.232478][T20404] netlink: 'syz.7.3948': attribute type 1 has an invalid length. [ 442.320283][T20406] netlink: 'syz.1.3949': attribute type 75 has an invalid length. [ 442.492366][T20391] netlink: 'syz.6.3944': attribute type 32 has an invalid length. [ 442.501702][T20391] netlink: 776 bytes leftover after parsing attributes in process `syz.6.3944'. [ 442.595507][T20421] netdevsim netdevsim1: Direct firmware load for . failed with error -2 [ 442.618304][T20421] netdevsim netdevsim1: Falling back to sysfs fallback for: . [ 442.642825][T20417] netlink: 'syz.7.3952': attribute type 4 has an invalid length. [ 442.875884][T20434] netlink: 9 bytes leftover after parsing attributes in process `syz.7.3958'. [ 442.887992][T20434] 0·: renamed from hsr_slave_1 (while UP) [ 442.915783][T20434] 0·: entered allmulticast mode [ 442.927140][T20438] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 442.940064][T20434] A link change request failed with some changes committed already. Interface c0· may have been left with an inconsistent configuration, please check. [ 442.972898][T20438] netlink: 12 bytes leftover after parsing attributes in process `syz.6.3959'. [ 443.013073][T20438] netlink: 'syz.6.3959': attribute type 1 has an invalid length. [ 443.093867][T20448] netlink: 12 bytes leftover after parsing attributes in process `syz.0.3963'. [ 443.225602][T20448] syzkaller0: entered promiscuous mode [ 443.246461][T20448] syzkaller0: entered allmulticast mode [ 443.498980][T20467] netlink: 48 bytes leftover after parsing attributes in process `syz.7.3970'. [ 443.798371][T20494] netlink: 'syz.6.3978': attribute type 1 has an invalid length. [ 443.826042][T20498] netlink: 'syz.1.3974': attribute type 9 has an invalid length. [ 443.845647][T20494] bond4: entered promiscuous mode [ 443.851129][T20494] 8021q: adding VLAN 0 to HW filter on device bond4 [ 443.872395][T20485] netlink: 'syz.7.3976': attribute type 4 has an invalid length. [ 443.933982][T20503] IPVS: length: 239 != 24 [ 444.056608][T20506] netlink: 'syz.2.3979': attribute type 58 has an invalid length. [ 444.110567][T20511] macsec1: entered promiscuous mode [ 444.217385][T20517] vlan2: entered promiscuous mode [ 444.233514][T20517] geneve1: entered promiscuous mode [ 444.239062][T20517] vlan2: entered allmulticast mode [ 444.247175][T20517] geneve1: entered allmulticast mode [ 444.446060][T20528] wg1 speed is unknown, defaulting to 1000 [ 444.967363][T20551] __nla_validate_parse: 4 callbacks suppressed [ 444.967382][T20551] netlink: 20 bytes leftover after parsing attributes in process `syz.1.3993'. [ 445.027507][ T5880] IPVS: starting estimator thread 0... [ 445.101510][T20568] netlink: 16 bytes leftover after parsing attributes in process `syz.6.3996'. [ 445.122602][T20565] IPVS: using max 26 ests per chain, 62400 per kthread [ 445.237600][T20575] netlink: 12 bytes leftover after parsing attributes in process `syz.1.3997'. [ 445.249414][T20577] netlink: 44 bytes leftover after parsing attributes in process `syz.0.3999'. [ 445.255244][T20582] netlink: 6040 bytes leftover after parsing attributes in process `syz.6.4001'. [ 445.274181][T20577] netlink: 43 bytes leftover after parsing attributes in process `syz.0.3999'. [ 445.304685][T20575] netlink: 4 bytes leftover after parsing attributes in process `syz.1.3997'. [ 445.308041][T20577] netlink: 43 bytes leftover after parsing attributes in process `syz.0.3999'. [ 445.319467][T20575] netlink: 8 bytes leftover after parsing attributes in process `syz.1.3997'. [ 445.333076][T20582] netlink: 348 bytes leftover after parsing attributes in process `syz.6.4001'. [ 445.599696][T20596] bond6 (unregistering): Released all slaves [ 445.834091][ T13] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 446.094486][T20630] bond4: entered promiscuous mode [ 446.107383][T20630] bond4: entered allmulticast mode [ 446.113605][T20630] 8021q: adding VLAN 0 to HW filter on device bond4 [ 446.170326][ T58] netdevsim netdevsim1 netdevsim0: set [1, 2] type 2 family 0 port 20002 - 0 [ 446.180394][ T58] netdevsim netdevsim1 netdevsim1: set [1, 2] type 2 family 0 port 20002 - 0 [ 446.194692][T20637] openvswitch: netlink: IP tunnel dst address not specified [ 446.210426][ T58] netdevsim netdevsim1 netdevsim2: set [1, 2] type 2 family 0 port 20002 - 0 [ 446.229349][T20642] ip6gre2: entered allmulticast mode [ 446.253476][ T58] netdevsim netdevsim1 netdevsim3: set [1, 2] type 2 family 0 port 20002 - 0 [ 446.573465][T20654] wg1 speed is unknown, defaulting to 1000 [ 447.152463][T20682] bridge0: trying to set multicast startup query interval below minimum, setting to 100 (1000ms) [ 447.174622][T20682] bridge0: port 1(bridge_slave_0) entered disabled state [ 447.204102][T20682] bridge0: entered allmulticast mode [ 447.276514][ T5836] Bluetooth: hci7: command 0x0406 tx timeout [ 447.390744][T20695] bond2: entered promiscuous mode [ 447.396015][T20695] bond2: entered allmulticast mode [ 447.401787][T20695] 8021q: adding VLAN 0 to HW filter on device bond2 [ 447.432166][T20696] xfrm1: entered promiscuous mode [ 447.454464][T20696] xfrm1: entered allmulticast mode [ 447.508027][ T5902] IPVS: starting estimator thread 0... [ 447.513927][T20699] IPVS: ip_vs_edit_dest(): lower threshold is higher than upper threshold [ 447.556790][T20704] validate_nla: 4 callbacks suppressed [ 447.556811][T20704] netlink: 'syz.0.4038': attribute type 1 has an invalid length. [ 447.587623][T20699] ipt_REJECT: ECHOREPLY no longer supported. [ 447.594323][T20704] netlink: 'syz.0.4038': attribute type 1 has an invalid length. [ 447.629719][T20704] x_tables: duplicate underflow at hook 3 [ 447.652605][T20703] IPVS: using max 27 ests per chain, 64800 per kthread [ 447.754637][ T35] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 447.825275][T20719] netlink: 'syz.1.4045': attribute type 3 has an invalid length. [ 448.309948][T20741] bond6 (unregistering): Released all slaves [ 448.404449][ T1334] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 448.583705][T20760] tipc: Started in network mode [ 448.588661][T20760] tipc: Node identity e69ee8a903b9, cluster identity 4711 [ 448.622306][T20760] tipc: Enabled bearer , priority 0 [ 448.732507][T20761] syzkaller0: entered promiscuous mode [ 448.738188][T20761] syzkaller0: entered allmulticast mode [ 448.744878][T20761] tipc: Resetting bearer [ 448.769622][T20767] xt_TPROXY: Can be used only with -p tcp or -p udp [ 448.799841][T20759] tipc: Resetting bearer [ 448.985513][T20781] netlink: 'syz.2.4060': attribute type 11 has an invalid length. [ 449.854300][T20797] x_tables: ip_tables: icmp match: only valid for protocol 1 [ 450.682767][T20759] tipc: Disabling bearer [ 450.702764][T20786] workqueue: Failed to create a rescuer kthread for wq "bond6": -EINTR [ 450.720773][ T10] tipc: Node number set to 3844597929 [ 451.183302][T20827] __nla_validate_parse: 12 callbacks suppressed [ 451.183324][T20827] netlink: 12 bytes leftover after parsing attributes in process `syz.6.4072'. [ 451.259820][T20827] bridge10: trying to set multicast query interval above maximum, setting to 8640000 (86400000ms) [ 451.283257][T20831] netlink: 576 bytes leftover after parsing attributes in process `syz.7.4069'. [ 451.504706][T20839] netlink: 12 bytes leftover after parsing attributes in process `syz.1.4074'. [ 451.534083][T20843] netlink: 64 bytes leftover after parsing attributes in process `syz.6.4075'. [ 451.593472][ T13] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 451.610495][T20839] vlan0: entered allmulticast mode [ 451.623478][T20848] netlink: 'syz.7.4078': attribute type 1 has an invalid length. [ 451.645807][T20839] bridge4: entered allmulticast mode [ 451.688414][T20851] bridge4: port 1(veth3) entered blocking state [ 451.700940][T20851] bridge4: port 1(veth3) entered disabled state [ 451.707820][T20851] veth3: entered allmulticast mode [ 451.715220][T20851] veth3: entered promiscuous mode [ 451.734945][T20856] openvswitch: netlink: Unexpected mask (mask=240040, allowed=10048) [ 451.906309][T20859] tipc: Started in network mode [ 451.922243][T20859] tipc: Node identity aaaaaaaaaa35, cluster identity 4711 [ 451.942926][T20859] tipc: Enabled bearer , priority 2 [ 451.973323][T20863] netdevsim netdevsim1 netdevsim0: entered promiscuous mode [ 452.021177][T20867] netlink: 16 bytes leftover after parsing attributes in process `syz.2.4083'. [ 452.060433][T20866] netlink: 16 bytes leftover after parsing attributes in process `syz.2.4083'. [ 452.284308][T20883] netlink: 'syz.7.4087': attribute type 1 has an invalid length. [ 452.330981][T20883] netlink: 244 bytes leftover after parsing attributes in process `syz.7.4087'. [ 452.395072][T20888] netlink: 8 bytes leftover after parsing attributes in process `syz.0.4088'. [ 452.596828][T20898] syzkaller1: entered promiscuous mode [ 452.607911][T20898] syzkaller1: entered allmulticast mode [ 452.628949][T20904] xt_hashlimit: size too large, truncated to 1048576 [ 452.850765][T20914] netlink: 28 bytes leftover after parsing attributes in process `syz.7.4098'. [ 452.878998][T20919] netlink: 'syz.2.4101': attribute type 1 has an invalid length. [ 452.919999][T20923] netlink: 40 bytes leftover after parsing attributes in process `syz.0.4099'. [ 453.064949][ T5902] tipc: Node number set to 10463914 [ 453.282929][T20946] x_tables: unsorted underflow at hook 1 [ 453.513835][ T35] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 453.616843][T20970] xt_cluster: node mask cannot exceed total number of nodes [ 453.825918][T20983] team0: left allmulticast mode [ 453.830876][T20983] team_slave_0: left allmulticast mode [ 453.862450][T20983] team_slave_1: left allmulticast mode [ 453.868095][T20983] team0: left promiscuous mode [ 453.876908][T20983] team_slave_0: left promiscuous mode [ 453.882926][T20983] team_slave_1: left promiscuous mode [ 453.889108][T20983] bridge0: port 1(team0) entered disabled state [ 453.901883][T20983] bridge_slave_1: left allmulticast mode [ 453.910650][T20983] bridge_slave_1: left promiscuous mode [ 453.921386][T20983] bridge0: port 2(bridge_slave_1) entered disabled state [ 454.009231][T20987] tipc: Enabling of bearer rejected, failed to enable media [ 454.154132][ T13] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 454.257047][T21008] veth9: entered allmulticast mode [ 454.271768][T21013] xt_hashlimit: size too large, truncated to 1048576 [ 455.079919][T21059] netdevsim netdevsim0 netdevsim3 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 455.091877][T21059] netdevsim netdevsim0 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 455.104756][T21059] netdevsim netdevsim0 netdevsim3 (unregistering): unset [1, 1] type 2 family 0 port 38574 - 0 [ 455.134369][T21064] batman_adv: Cannot find parent device. Skipping batadv-on-batadv check for gretap1 [ 455.234636][T21059] netdevsim netdevsim0 netdevsim2 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 455.245640][T21059] netdevsim netdevsim0 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 455.256690][T21059] netdevsim netdevsim0 netdevsim2 (unregistering): unset [1, 1] type 2 family 0 port 38574 - 0 [ 455.368187][T21059] netdevsim netdevsim0 netdevsim1 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 455.392294][T21059] netdevsim netdevsim0 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 455.416399][T21059] netdevsim netdevsim0 netdevsim1 (unregistering): unset [1, 1] type 2 family 0 port 38574 - 0 [ 455.742438][T21090] veth0_to_bridge: vlans aren't supported yet for dev_uc|mc_add() [ 455.941546][ T1334] netdevsim netdevsim0 eth0: set [0, 0] type 1 family 0 port 8472 - 0 [ 455.983250][ T1334] netdevsim netdevsim0 eth0: set [1, 0] type 2 family 0 port 38574 - 0 [ 456.013147][ T1334] netdevsim netdevsim0 eth0: set [1, 1] type 2 family 0 port 6081 - 0 [ 456.021611][ T1334] netdevsim netdevsim0 eth1: set [0, 0] type 1 family 0 port 8472 - 0 [ 456.072477][ T1334] netdevsim netdevsim0 eth1: set [1, 0] type 2 family 0 port 38574 - 0 [ 456.080852][ T1334] netdevsim netdevsim0 eth1: set [1, 1] type 2 family 0 port 6081 - 0 [ 456.160172][ T1103] netdevsim netdevsim0 eth2: set [0, 0] type 1 family 0 port 8472 - 0 [ 456.178306][ T1103] netdevsim netdevsim0 eth2: set [1, 0] type 2 family 0 port 38574 - 0 [ 456.192162][ T1103] netdevsim netdevsim0 eth2: set [1, 1] type 2 family 0 port 6081 - 0 [ 456.227348][ T1103] netdevsim netdevsim0 eth3: set [0, 0] type 1 family 0 port 8472 - 0 [ 456.237309][ T1103] netdevsim netdevsim0 eth3: set [1, 0] type 2 family 0 port 38574 - 0 [ 456.246037][ T1103] netdevsim netdevsim0 eth3: set [1, 1] type 2 family 0 port 6081 - 0 [ 456.390625][T21121] netlink: 'syz.0.4155': attribute type 1 has an invalid length. [ 456.448751][T21121] 8021q: adding VLAN 0 to HW filter on device bond3 [ 456.495203][T21122] 8021q: adding VLAN 0 to HW filter on device bond3 [ 456.502965][T21122] bond3: (slave vxcan3): The slave device specified does not support setting the MAC address [ 456.525283][T21130] __nla_validate_parse: 11 callbacks suppressed [ 456.525297][T21130] netlink: 32 bytes leftover after parsing attributes in process `syz.2.4159'. [ 456.541182][T21122] bond3: (slave vxcan3): Error -95 calling set_mac_address [ 456.585883][T21126] bond3: (slave vxcan3): The slave device specified does not support setting the MAC address [ 456.598275][T21126] bond3: (slave vxcan3): Error -95 calling set_mac_address [ 456.612683][T21134] netlink: 'syz.7.4158': attribute type 3 has an invalid length. [ 456.639845][T21121] veth5: entered promiscuous mode [ 456.649265][T21121] bond3: (slave veth5): Enslaving as an active interface with a down link [ 456.658268][T21130] netlink: 28 bytes leftover after parsing attributes in process `syz.2.4159'. [ 456.758976][T21137] netlink: 64 bytes leftover after parsing attributes in process `syz.0.4160'. [ 456.803846][T21141] netlink: 12 bytes leftover after parsing attributes in process `syz.6.4161'. [ 457.086142][T21161] netlink: 4 bytes leftover after parsing attributes in process `syz.1.4167'. [ 457.354482][ T13] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 457.529314][T21183] netlink: 48 bytes leftover after parsing attributes in process `syz.1.4173'. [ 457.905972][T21207] netlink: 8 bytes leftover after parsing attributes in process `syz.1.4178'. [ 458.034661][T21220] netlink: 80 bytes leftover after parsing attributes in process `syz.0.4179'. [ 458.065839][T21224] netlink: 36 bytes leftover after parsing attributes in process `syz.2.4183'. [ 458.159300][T21229] tipc: MTU too low for tipc bearer [ 458.167360][T21226] tipc: MTU too low for tipc bearer [ 458.181312][T21226] syzkaller0: entered promiscuous mode [ 458.186930][T21226] syzkaller0: entered allmulticast mode [ 458.196612][T21229] netlink: 'syz.6.4184': attribute type 3 has an invalid length. [ 458.214089][T21234] netlink: 4 bytes leftover after parsing attributes in process `syz.2.4186'. [ 458.239262][T21231] netlink: 'syz.6.4184': attribute type 3 has an invalid length. [ 458.772829][T21267] veth1_macvtap: left promiscuous mode [ 459.002958][T21281] bond0: entered promiscuous mode [ 459.040955][T21281] bond_slave_0: entered promiscuous mode [ 459.071934][T21281] bond_slave_1: entered promiscuous mode [ 459.273334][ T49] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 459.390356][T21274] netlink: 'syz.1.4198': attribute type 29 has an invalid length. [ 459.399487][T21302] netlink: 'syz.1.4198': attribute type 29 has an invalid length. [ 459.411492][T21304] netlink: 'syz.1.4198': attribute type 29 has an invalid length. [ 459.478270][T21307] block nbd3: Unsupported socket: should be TCP or UNIX. [ 459.720666][T21320] syzkaller1: entered promiscuous mode [ 459.743038][T21320] syzkaller1: entered allmulticast mode [ 459.884161][T21327] syzkaller0: entered promiscuous mode [ 459.889717][T21327] syzkaller0: entered allmulticast mode [ 459.916054][ T35] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 460.703889][T21383] sch_tbf: burst 127 is lower than device syzkaller0 mtu (1514) ! [ 460.746945][T21390] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 460.767565][T21391] syzkaller0: entered promiscuous mode [ 460.773307][T21391] syzkaller0: entered allmulticast mode [ 463.113503][ T1334] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 463.521214][T21412] xt_hashlimit: invalid interval [ 463.638296][T21372] nci: __nci_request: wait_for_completion_interruptible_timeout failed -512 [ 463.831689][T21423] netlink: 'syz.7.4240': attribute type 33 has an invalid length. [ 463.882590][T21423] __nla_validate_parse: 15 callbacks suppressed [ 463.882609][T21423] netlink: 152 bytes leftover after parsing attributes in process `syz.7.4240'. [ 463.906428][T21428] ieee802154 phy1 wpan1: encryption failed: -126 [ 463.925654][T21430] netlink: 14 bytes leftover after parsing attributes in process `syz.7.4240'. [ 464.013977][T21432] IPv6: sit3: Disabled Multicast RS [ 464.020501][T21432] sit3: entered allmulticast mode [ 464.293407][T21455] netlink: 16 bytes leftover after parsing attributes in process `syz.1.4250'. [ 464.315826][T21455] netlink: 32 bytes leftover after parsing attributes in process `syz.1.4250'. [ 464.361818][T21455] gretap2: entered promiscuous mode [ 464.382110][T21455] gretap2: entered allmulticast mode [ 464.435687][T21465] bond3 (unregistering): Released all slaves [ 464.457808][T21471] netlink: 'syz.6.4253': attribute type 7 has an invalid length. [ 464.466199][T21471] netlink: 140 bytes leftover after parsing attributes in process `syz.6.4253'. [ 464.491436][T21475] netlink: 104 bytes leftover after parsing attributes in process `syz.0.4255'. [ 464.521795][T21474] netlink: 104 bytes leftover after parsing attributes in process `syz.0.4255'. [ 464.735212][T21488] netlink: 4 bytes leftover after parsing attributes in process `syz.7.4258'. [ 464.823014][T21490] netlink: 8 bytes leftover after parsing attributes in process `syz.6.4259'. [ 464.838970][T21490] netlink: 4 bytes leftover after parsing attributes in process `syz.6.4259'. [ 465.035644][ T35] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 465.070021][T21512] syzkaller1: entered promiscuous mode [ 465.086600][T21512] syzkaller1: entered allmulticast mode [ 465.201299][T21519] syzkaller0: entered promiscuous mode [ 465.207219][T21519] syzkaller0: entered allmulticast mode [ 465.499499][T21534] netlink: 'syz.1.4273': attribute type 11 has an invalid length. [ 465.593235][T21543] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 465.614586][T21541] xt_policy: input policy not valid in POSTROUTING and OUTPUT [ 465.674214][ T49] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 465.712391][T21548] netlink: 'syz.2.4279': attribute type 29 has an invalid length. [ 465.804275][T21552] tap0: tun_chr_ioctl cmd 1074025672 [ 465.809690][T21552] tap0: ignored: set checksum disabled [ 465.905179][T21559] erspan0: left allmulticast mode [ 466.381311][T21584] netlink: 'syz.2.4292': attribute type 1 has an invalid length. [ 466.512670][T21596] 8021q: adding VLAN 0 to HW filter on device bond5 [ 466.526519][T21598] netlink: 'syz.6.4296': attribute type 1 has an invalid length. [ 466.538769][T21597] netlink: 'syz.6.4296': attribute type 1 has an invalid length. [ 467.052248][T21628] "syz.6.4305" (21628) uses obsolete ecb(arc4) skcipher [ 467.424390][T21649] gretap0: entered promiscuous mode [ 467.444062][T21649] gretap0: left promiscuous mode [ 467.491811][T21651] PF_CAN: dropped non conform CAN XL skbuff: dev type 65534, len 40 [ 467.767770][T21676] sctp: [Deprecated]: syz.1.4321 (pid 21676) Use of int in maxseg socket option. [ 467.767770][T21676] Use struct sctp_assoc_value instead [ 468.141371][T21694] ipt_REJECT: TCP_RESET invalid for non-tcp [ 468.153000][ T35] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 468.375967][T21713] pim6reg: entered allmulticast mode [ 468.387981][T21713] pim6reg: left allmulticast mode [ 468.470536][T21722] netlink: 'syz.7.4332': attribute type 2 has an invalid length. [ 468.963105][T21770] openvswitch: netlink: IP tunnel TTL not specified. [ 469.153505][T21780] __nla_validate_parse: 22 callbacks suppressed [ 469.153527][T21780] netlink: 8 bytes leftover after parsing attributes in process `syz.2.4350'. [ 469.484954][T21791] netlink: 'syz.6.4354': attribute type 2 has an invalid length. [ 469.512094][T21791] netlink: 'syz.6.4354': attribute type 2 has an invalid length. [ 469.522826][T21791] netlink: 8 bytes leftover after parsing attributes in process `syz.6.4354'. [ 469.986545][T21798] syz_tun: entered allmulticast mode [ 470.008613][T21801] x_tables: ip_tables: rpfilter match: used from hooks OUTPUT, but only valid from PREROUTING [ 470.153352][ T13] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 471.432754][ T58] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 472.169142][T21811] bond4: option packets_per_slave: invalid value (18446744073709551615) [ 472.178142][T21811] bond4: option packets_per_slave: allowed values 0 - 65535 [ 472.189400][T21811] bond4 (unregistering): Released all slaves [ 472.210178][T21794] syz_tun: left allmulticast mode [ 472.488211][T21823] pimreg3: entered allmulticast mode [ 472.700872][T21839] netlink: 212368 bytes leftover after parsing attributes in process `syz.7.4368'. [ 472.873236][T21843] A link change request failed with some changes committed already. Interface geneve0 may have been left with an inconsistent configuration, please check. [ 472.911369][T21846] netlink: 100 bytes leftover after parsing attributes in process `syz.1.4370'. [ 473.192934][ T13] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 473.304116][T21874] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check. [ 473.742932][T21903] netlink: 'syz.7.4387': attribute type 1 has an invalid length. [ 473.769878][T21903] netlink: 12 bytes leftover after parsing attributes in process `syz.7.4387'. [ 473.796446][T21903] netlink: 12 bytes leftover after parsing attributes in process `syz.7.4387'. [ 473.888311][T21909] netlink: 'syz.0.4389': attribute type 23 has an invalid length. [ 473.967302][T21911] x_tables: unsorted underflow at hook 4 [ 474.181291][T21920] netlink: 212368 bytes leftover after parsing attributes in process `syz.7.4394'. [ 474.389395][T21933] netlink: 'syz.7.4398': attribute type 1 has an invalid length. [ 474.617374][T21933] bond3: entered promiscuous mode [ 474.625885][T21933] 8021q: adding VLAN 0 to HW filter on device bond3 [ 474.775515][T21960] team0: No ports can be present during mode change [ 474.891503][T21968] netlink: 8 bytes leftover after parsing attributes in process `syz.6.4405'. [ 474.934582][T21968] netlink: 52 bytes leftover after parsing attributes in process `syz.6.4405'. [ 475.021647][T21968] netlink: 24 bytes leftover after parsing attributes in process `syz.6.4405'. [ 475.060091][T21980] netlink: 'syz.1.4409': attribute type 11 has an invalid length. [ 475.346366][T22006] netlink: 28 bytes leftover after parsing attributes in process `syz.6.4415'. [ 475.364908][T22010] IPVS: sync thread started: state = MASTER, mcast_ifn = veth1_to_team, syncid = 4, id = 0 [ 475.570532][T22020] netlink: 28 bytes leftover after parsing attributes in process `syz.0.4418'. [ 475.778966][T22038] IPv6: RTM_NEWROUTE with no NLM_F_CREATE or NLM_F_REPLACE [ 475.786337][T22038] IPv6: NLM_F_CREATE should be set when creating new route [ 475.809389][T22034] netem: change failed [ 475.918200][ T49] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 476.098440][ T5488] veth1_macvtap: left promiscuous mode [ 476.234316][T22054] netlink: 12 bytes leftover after parsing attributes in process `syz.1.4426'. [ 476.244792][T22054] openvswitch: netlink: Flow actions attr not present in new flow. [ 476.480731][T22071] ieee802154 phy1 wpan1: encryption failed: -22 [ 476.489970][T22072] netlink: 88 bytes leftover after parsing attributes in process `syz.7.4433'. [ 476.508066][T22072] netlink: 24 bytes leftover after parsing attributes in process `syz.7.4433'. [ 476.563481][T22072] netlink: 24 bytes leftover after parsing attributes in process `syz.7.4433'. [ 476.664702][T22084] netlink: 'syz.6.4435': attribute type 1 has an invalid length. [ 477.094633][T22072] workqueue: Failed to create a rescuer kthread for wq "bond4": -EINTR [ 477.100595][ T49] netdevsim netdevsim1 netdevsim0: unset [0, 0] type 1 family 0 port 8472 - 0 [ 477.168502][ T49] netdevsim netdevsim1 netdevsim0: unset [1, 0] type 2 family 0 port 6081 - 0 [ 477.191363][ T49] netdevsim netdevsim1 netdevsim0: unset [1, 1] type 2 family 0 port 19999 - 0 [ 477.203145][ T1103] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 477.225020][ T49] netdevsim netdevsim1 netdevsim0: unset [1, 2] type 2 family 0 port 20002 - 0 [ 477.321614][T22089] bond5: (slave bridge14): making interface the new active one [ 477.338763][T22089] bond5: (slave bridge14): Enslaving as an active interface with an up link [ 477.377882][ T49] netdevsim netdevsim1 netdevsim1: unset [0, 0] type 1 family 0 port 8472 - 0 [ 477.395685][ T49] netdevsim netdevsim1 netdevsim1: unset [1, 0] type 2 family 0 port 6081 - 0 [ 477.404781][ T49] netdevsim netdevsim1 netdevsim1: unset [1, 1] type 2 family 0 port 19999 - 0 [ 477.422032][ T49] netdevsim netdevsim1 netdevsim1: unset [1, 2] type 2 family 0 port 20002 - 0 [ 477.453338][ T49] netdevsim netdevsim1 netdevsim2: unset [0, 0] type 1 family 0 port 8472 - 0 [ 477.462372][ T49] netdevsim netdevsim1 netdevsim2: unset [1, 0] type 2 family 0 port 6081 - 0 [ 477.486035][ T49] netdevsim netdevsim1 netdevsim2: unset [1, 1] type 2 family 0 port 19999 - 0 [ 477.499425][ T49] netdevsim netdevsim1 netdevsim2: unset [1, 2] type 2 family 0 port 20002 - 0 [ 477.517100][ T49] netdevsim netdevsim1 netdevsim3: unset [0, 0] type 1 family 0 port 8472 - 0 [ 477.528758][ T49] netdevsim netdevsim1 netdevsim3: unset [1, 0] type 2 family 0 port 6081 - 0 [ 477.538426][ T49] netdevsim netdevsim1 netdevsim3: unset [1, 1] type 2 family 0 port 19999 - 0 [ 477.547792][ T49] netdevsim netdevsim1 netdevsim3: unset [1, 2] type 2 family 0 port 20002 - 0 [ 477.583618][T22107] mac80211_hwsim hwsim81 syzkaller0: entered promiscuous mode [ 477.602484][ T51] Bluetooth: hci2: command tx timeout [ 477.619349][T22107] mac80211_hwsim hwsim81 syzkaller0: entered allmulticast mode [ 477.944943][T22140] netlink: 'syz.1.4445': attribute type 33 has an invalid length. [ 478.276484][T22166] netlink: 'syz.0.4449': attribute type 1 has an invalid length. [ 478.380291][T22166] bond4: entered promiscuous mode [ 478.386563][T22166] 8021q: adding VLAN 0 to HW filter on device bond4 [ 478.473277][ T49] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 478.490555][T22166] macvtap1: entered allmulticast mode [ 478.527846][T22172] bond4: (slave bridge3): making interface the new active one [ 478.542175][T22172] bridge3: entered promiscuous mode [ 478.560218][T22172] bond4: (slave bridge3): Enslaving as an active interface with an up link [ 479.361905][T22213] __nla_validate_parse: 8 callbacks suppressed [ 479.361926][T22213] netlink: 28 bytes leftover after parsing attributes in process `syz.0.4462'. [ 479.503476][T22218] team0 (unregistering): Port device team_slave_0 removed [ 479.538640][T22218] team0 (unregistering): Port device team_slave_1 removed [ 479.616245][T22218] team0 (unregistering): Port device bridge2 removed [ 480.525333][T22251] netlink: 88 bytes leftover after parsing attributes in process `syz.0.4471'. [ 480.790046][T22278] netlink: 12 bytes leftover after parsing attributes in process `syz.0.4479'. [ 480.827635][T22278] netlink: 12 bytes leftover after parsing attributes in process `syz.0.4479'. [ 480.881376][T22288] openvswitch: netlink: Flow actions attr not present in new flow. [ 480.886653][T22278] netlink: 12 bytes leftover after parsing attributes in process `syz.0.4479'. [ 480.930945][T22278] netlink: 12 bytes leftover after parsing attributes in process `syz.0.4479'. [ 481.034885][ T1334] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 481.047921][T22293] netlink: 'syz.1.4483': attribute type 13 has an invalid length. [ 481.188286][T22305] tipc: Enabling of bearer rejected, already enabled [ 481.319577][T22309] netlink: 20 bytes leftover after parsing attributes in process `syz.2.4488'. [ 481.374621][T22313] netlink: 36 bytes leftover after parsing attributes in process `syz.0.4489'. [ 481.384765][T22309] netlink: 'syz.2.4488': attribute type 1 has an invalid length. [ 481.737794][T22340] netlink: 128 bytes leftover after parsing attributes in process `syz.6.4499'. [ 481.793173][T22339] netlink: 12 bytes leftover after parsing attributes in process `syz.0.4497'. [ 482.379802][T22377] syzkaller0: entered promiscuous mode [ 482.386913][T22377] syzkaller0: entered allmulticast mode [ 482.404023][T22388] syzkaller0: entered promiscuous mode [ 482.428187][T22388] syzkaller0: entered allmulticast mode [ 482.957050][ T1334] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 483.112864][ T5836] Bluetooth: hci2: command 0x0406 tx timeout [ 483.606443][ T1334] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 484.268428][T22407] net veth1_virt_wifi ÿÿÿÿÿÿ: renamed from virt_wifi0 [ 484.301441][T22407] netlink: 'syz.7.4513': attribute type 10 has an invalid length. [ 484.397420][T22420] netlink: 'syz.0.4516': attribute type 11 has an invalid length. [ 484.436337][T22420] __nla_validate_parse: 4 callbacks suppressed [ 484.436358][T22420] netlink: 199828 bytes leftover after parsing attributes in process `syz.0.4516'. [ 484.567588][T22415] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check. [ 484.610525][T22433] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 484.977143][T22454] netlink: 'syz.6.4524': attribute type 33 has an invalid length. [ 485.046893][T22454] netlink: 152 bytes leftover after parsing attributes in process `syz.6.4524'. [ 485.312202][T22464] syzkaller0: entered promiscuous mode [ 485.329291][T22464] syzkaller0: entered allmulticast mode [ 485.387777][T22472] netlink: 4 bytes leftover after parsing attributes in process `syz.6.4528'. [ 485.413957][T22473] netlink: 4 bytes leftover after parsing attributes in process `syz.6.4528'. [ 485.557245][T22476] netlink: 4 bytes leftover after parsing attributes in process `syz.1.4529'. [ 485.578761][T22476] hsr_slave_1 (unregistering): left promiscuous mode [ 485.767350][T22492] netlink: 168 bytes leftover after parsing attributes in process `syz.1.4534'. [ 486.793502][ T60] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 486.811616][T22555] netlink: 'syz.2.4550': attribute type 32 has an invalid length. [ 486.977747][T22558] netlink: 'syz.1.4551': attribute type 11 has an invalid length. [ 486.987156][T22558] netlink: 228 bytes leftover after parsing attributes in process `syz.1.4551'. [ 487.051744][T22560] netlink: 64 bytes leftover after parsing attributes in process `syz.6.4552'. [ 487.135265][T22565] syzkaller1: entered promiscuous mode [ 487.141014][T22565] syzkaller1: entered allmulticast mode [ 487.180109][T22567] netlink: 'syz.1.4555': attribute type 11 has an invalid length. [ 487.456380][T22575] netlink: 'syz.0.4558': attribute type 25 has an invalid length. [ 487.659089][T22582] netlink: 'syz.2.4560': attribute type 1 has an invalid length. [ 487.667101][T22582] netlink: 224 bytes leftover after parsing attributes in process `syz.2.4560'. [ 487.740939][T22590] netlink: 16 bytes leftover after parsing attributes in process `syz.2.4562'. [ 487.824123][T22590] bridge0: port 4(dummy0) entered disabled state [ 487.830787][T22590] bridge0: port 2(bridge_slave_1) entered disabled state [ 487.838522][T22590] bridge0: port 1(bridge_slave_0) entered disabled state [ 487.868656][T22590] dummy0: left allmulticast mode [ 487.874642][T22590] bridge0: port 4(dummy0) entered disabled state [ 487.916169][T22590] bridge_slave_0: left allmulticast mode [ 487.922146][T22590] bridge_slave_0: left promiscuous mode [ 487.928128][T22590] bridge0: port 1(bridge_slave_0) entered disabled state [ 487.943400][T22590] bridge_slave_1: left allmulticast mode [ 487.949126][T22590] bridge_slave_1: left promiscuous mode [ 487.955421][T22590] bridge0: port 2(bridge_slave_1) entered disabled state [ 487.978183][T22590] team0: Port device team_slave_0 removed [ 487.990304][T22590] team0: Port device team_slave_1 removed [ 487.999206][T22590] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 488.010076][T22590] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 488.036589][T22590] A link change request failed with some changes committed already. Interface hsr_slave_0 may have been left with an inconsistent configuration, please check. [ 488.137887][T22596] ip6tnl0: Caught tx_queue_len zero misconfig [ 488.336506][T22606] netlink: 'syz.6.4567': attribute type 1 has an invalid length. [ 488.725699][ T149] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 489.166903][T22654] block nbd0: Unsupported socket: should be TCP or UNIX. [ 489.358540][ T35] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 489.794161][T22691] __nla_validate_parse: 7 callbacks suppressed [ 489.794195][T22691] netlink: 32 bytes leftover after parsing attributes in process `syz.0.4594'. [ 489.861106][T22689] veth1_macvtap: left promiscuous mode [ 490.067497][T22709] netlink: 'syz.6.4599': attribute type 11 has an invalid length. [ 490.105307][T22706] netlink: 8 bytes leftover after parsing attributes in process `syz.0.4597'. [ 490.153224][T22715] netlink: 4 bytes leftover after parsing attributes in process `syz.2.4598'. [ 490.187772][T22706] ipvlan0: entered allmulticast mode [ 490.195382][T22706] batadv_slave_1: entered allmulticast mode [ 490.208994][T22712] lo: Caught tx_queue_len zero misconfig [ 490.283126][T22720] netlink: 'syz.6.4601': attribute type 19 has an invalid length. [ 490.412668][T22724] workqueue: Failed to create a rescuer kthread for wq "bond6": -EINTR [ 490.603743][T22723] syzkaller0: entered promiscuous mode [ 490.649310][T22723] syzkaller0: entered allmulticast mode [ 490.766143][T22751] netlink: 14 bytes leftover after parsing attributes in process `syz.6.4606'. [ 491.156180][T22772] netlink: 8 bytes leftover after parsing attributes in process `syz.0.4609'. [ 491.918472][ T35] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 492.687228][T22768] team0: Device batadv1 failed to change mtu [ 492.694425][ T1103] netdevsim netdevsim2 netdevsim0: unset [0, 0] type 1 family 0 port 8472 - 0 [ 492.740949][ T1103] netdevsim netdevsim2 netdevsim0: unset [1, 0] type 2 family 0 port 6081 - 0 [ 492.772261][ T1103] netdevsim netdevsim2 netdevsim0: unset [1, 1] type 2 family 0 port 19999 - 0 [ 492.977054][T22794] netlink: 4 bytes leftover after parsing attributes in process `syz.1.4616'. [ 493.014269][T22794] macvtap0: entered promiscuous mode [ 493.019648][T22794] ip6gretap0: entered promiscuous mode [ 493.027951][T22794] macvtap0: entered allmulticast mode [ 493.034821][T22794] ip6gretap0: entered allmulticast mode [ 493.043582][T22800] netlink: 'syz.2.4619': attribute type 1 has an invalid length. [ 493.051402][T22800] netlink: 'syz.2.4619': attribute type 2 has an invalid length. [ 493.062477][T22800] netlink: 'syz.2.4619': attribute type 1 has an invalid length. [ 493.070361][T22800] netlink: 16 bytes leftover after parsing attributes in process `syz.2.4619'. [ 493.083678][T22799] FAULT_INJECTION: forcing a failure. [ 493.083678][T22799] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 493.104880][T22799] CPU: 1 UID: 0 PID: 22799 Comm: syz.0.4618 Not tainted syzkaller #0 PREEMPT(full) [ 493.104917][T22799] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 02/12/2026 [ 493.104931][T22799] Call Trace: [ 493.104939][T22799] [ 493.104947][T22799] dump_stack_lvl+0xe8/0x150 [ 493.104986][T22799] should_fail_ex+0x412/0x560 [ 493.105126][T22799] _copy_from_user+0x2d/0xb0 [ 493.105214][T22799] ___sys_sendmsg+0x1c6/0x360 [ 493.105242][T22799] ? __pfx____sys_sendmsg+0x10/0x10 [ 493.105268][T22799] ? kstrtouint+0x6e/0xe0 [ 493.105321][T22799] ? __fget_files+0x2a/0x420 [ 493.105367][T22799] ? __fget_files+0x3a0/0x420 [ 493.105409][T22799] __sys_sendmmsg+0x27c/0x4e0 [ 493.105435][T22799] ? __pfx___sys_sendmmsg+0x10/0x10 [ 493.105452][T22799] ? __mutex_unlock_slowpath+0x1bd/0x7d0 [ 493.105501][T22799] ? ksys_write+0x242/0x270 [ 493.105534][T22799] ? __pfx_ksys_write+0x10/0x10 [ 493.105565][T22799] __x64_sys_sendmmsg+0xa0/0xc0 [ 493.105589][T22799] do_syscall_64+0x14d/0xf80 [ 493.105620][T22799] ? trace_irq_disable+0x3b/0x150 [ 493.105653][T22799] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 493.105675][T22799] ? clear_bhb_loop+0x40/0x90 [ 493.105701][T22799] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 493.105723][T22799] RIP: 0033:0x7fe34bb9c799 [ 493.105744][T22799] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 493.105763][T22799] RSP: 002b:00007fe34caad028 EFLAGS: 00000246 ORIG_RAX: 0000000000000133 [ 493.105786][T22799] RAX: ffffffffffffffda RBX: 00007fe34be15fa0 RCX: 00007fe34bb9c799 [ 493.105802][T22799] RDX: 040000000000009f RSI: 00002000000002c0 RDI: 0000000000000005 [ 493.105825][T22799] RBP: 00007fe34caad090 R08: 0000000000000000 R09: 0000000000000000 [ 493.105839][T22799] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 493.105851][T22799] R13: 00007fe34be16038 R14: 00007fe34be15fa0 R15: 00007ffecd71bef8 [ 493.105885][T22799] [ 493.386357][T22805] netlink: 12 bytes leftover after parsing attributes in process `syz.2.4623'. [ 493.395742][T22805] netlink: 12 bytes leftover after parsing attributes in process `syz.2.4623'. [ 493.404841][T22805] netlink: 28 bytes leftover after parsing attributes in process `syz.2.4623'. [ 493.471251][T22811] netlink: 'syz.6.4624': attribute type 1 has an invalid length. [ 493.517027][T22815] openvswitch: netlink: IPv4 tun info is not correct [ 493.886624][T22840] FAULT_INJECTION: forcing a failure. [ 493.886624][T22840] name failslab, interval 1, probability 0, space 0, times 0 [ 493.938494][T22840] CPU: 0 UID: 0 PID: 22840 Comm: syz.2.4631 Not tainted syzkaller #0 PREEMPT(full) [ 493.938524][T22840] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 02/12/2026 [ 493.938537][T22840] Call Trace: [ 493.938545][T22840] [ 493.938554][T22840] dump_stack_lvl+0xe8/0x150 [ 493.938591][T22840] should_fail_ex+0x412/0x560 [ 493.938623][T22840] should_failslab+0xa8/0x100 [ 493.938653][T22840] kmem_cache_alloc_node_noprof+0x8f/0x690 [ 493.938676][T22840] ? __alloc_skb+0x186/0x7d0 [ 493.938789][T22840] ? __alloc_skb+0x1d0/0x7d0 [ 493.938817][T22840] ? __local_bh_enable_ip+0xd0/0x130 [ 493.938873][T22840] __alloc_skb+0x1d0/0x7d0 [ 493.938909][T22840] netlink_sendmsg+0x5d4/0xb40 [ 493.939026][T22840] ? __pfx_netlink_sendmsg+0x10/0x10 [ 493.939059][T22840] ? aa_sock_msg_perm+0xf1/0x1b0 [ 493.939092][T22840] ? bpf_lsm_socket_sendmsg+0x9/0x20 [ 493.939119][T22840] ____sys_sendmsg+0x972/0x9f0 [ 493.939150][T22840] ? __lock_acquire+0x6b5/0x2cf0 [ 493.939188][T22840] ? __pfx_____sys_sendmsg+0x10/0x10 [ 493.939241][T22840] ? import_iovec+0x73/0xa0 [ 493.939317][T22840] ___sys_sendmsg+0x2a5/0x360 [ 493.939343][T22840] ? __pfx____sys_sendmsg+0x10/0x10 [ 493.939369][T22840] ? kstrtouint+0x6e/0xe0 [ 493.939422][T22840] ? __fget_files+0x2a/0x420 [ 493.939453][T22840] ? __fget_files+0x3a0/0x420 [ 493.939494][T22840] __sys_sendmmsg+0x27c/0x4e0 [ 493.939526][T22840] ? __pfx___sys_sendmmsg+0x10/0x10 [ 493.939545][T22840] ? __mutex_unlock_slowpath+0x1bd/0x7d0 [ 493.939596][T22840] ? ksys_write+0x242/0x270 [ 493.939622][T22840] ? __pfx_ksys_write+0x10/0x10 [ 493.939653][T22840] __x64_sys_sendmmsg+0xa0/0xc0 [ 493.939677][T22840] do_syscall_64+0x14d/0xf80 [ 493.939709][T22840] ? trace_irq_disable+0x3b/0x150 [ 493.939741][T22840] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 493.939763][T22840] ? clear_bhb_loop+0x40/0x90 [ 493.939790][T22840] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 493.939813][T22840] RIP: 0033:0x7fbfe259c799 [ 493.939834][T22840] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 493.939853][T22840] RSP: 002b:00007fbfe34a7028 EFLAGS: 00000246 ORIG_RAX: 0000000000000133 [ 493.939877][T22840] RAX: ffffffffffffffda RBX: 00007fbfe2815fa0 RCX: 00007fbfe259c799 [ 493.939893][T22840] RDX: 040000000000009f RSI: 00002000000002c0 RDI: 0000000000000005 [ 493.939908][T22840] RBP: 00007fbfe34a7090 R08: 0000000000000000 R09: 0000000000000000 [ 493.939922][T22840] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 493.939934][T22840] R13: 00007fbfe2816038 R14: 00007fbfe2815fa0 R15: 00007ffcf3a447a8 [ 493.939968][T22840] [ 494.215170][T22851] netlink: ct family unspecified [ 494.478389][ T60] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 494.522775][T22867] netlink: 'syz.1.4637': attribute type 2 has an invalid length. [ 494.948624][T22885] : entered promiscuous mode [ 495.046649][T22896] __nla_validate_parse: 8 callbacks suppressed [ 495.046670][T22896] netlink: 24 bytes leftover after parsing attributes in process `syz.2.4647'. [ 495.113185][ T1103] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 495.152421][T22899] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check. [ 495.214395][T22906] netlink: 24 bytes leftover after parsing attributes in process `syz.0.4649'. [ 495.281052][T22912] netlink: 36 bytes leftover after parsing attributes in process `syz.1.4651'. [ 495.416118][T22921] netlink: 7064 bytes leftover after parsing attributes in process `syz.1.4653'. [ 495.442064][T22921] openvswitch: netlink: Missing key (keys=40, expected=10000000) [ 495.543459][T22931] netlink: 'syz.6.4657': attribute type 4 has an invalid length. [ 495.551416][T22931] netlink: 224 bytes leftover after parsing attributes in process `syz.6.4657'. [ 495.670961][T22936] netlink: 8 bytes leftover after parsing attributes in process `syz.6.4657'. [ 495.693355][T22941] netlink: 'syz.1.4661': attribute type 4 has an invalid length. [ 495.700409][T22936] netlink: 8 bytes leftover after parsing attributes in process `syz.6.4657'. [ 495.714349][T22941] netlink: 152 bytes leftover after parsing attributes in process `syz.1.4661'. [ 495.726845][T22941] .`: renamed from bond0 [ 495.811071][T22946] netlink: 'syz.2.4662': attribute type 1 has an invalid length. [ 495.852844][T22946] 8021q: adding VLAN 0 to HW filter on device bond7 [ 495.872373][T22950] IPv6: sit3: Disabled Multicast RS [ 495.878893][T22950] sit3: entered allmulticast mode [ 496.228663][T22981] FAULT_INJECTION: forcing a failure. [ 496.228663][T22981] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 496.260930][T22981] CPU: 0 UID: 0 PID: 22981 Comm: syz.1.4671 Not tainted syzkaller #0 PREEMPT(full) [ 496.260961][T22981] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 02/12/2026 [ 496.260975][T22981] Call Trace: [ 496.260983][T22981] [ 496.260993][T22981] dump_stack_lvl+0xe8/0x150 [ 496.261040][T22981] should_fail_ex+0x412/0x560 [ 496.261073][T22981] _copy_from_user+0x2d/0xb0 [ 496.261108][T22981] ___sys_sendmsg+0x1c6/0x360 [ 496.261139][T22981] ? __pfx____sys_sendmsg+0x10/0x10 [ 496.261215][T22981] __sys_sendmmsg+0x27c/0x4e0 [ 496.261243][T22981] ? __pfx___sys_sendmmsg+0x10/0x10 [ 496.261263][T22981] ? __mutex_unlock_slowpath+0x1bd/0x7d0 [ 496.261316][T22981] ? ksys_write+0x242/0x270 [ 496.261342][T22981] ? __pfx_ksys_write+0x10/0x10 [ 496.261372][T22981] __x64_sys_sendmmsg+0xa0/0xc0 [ 496.261396][T22981] do_syscall_64+0x14d/0xf80 [ 496.261428][T22981] ? trace_irq_disable+0x3b/0x150 [ 496.261459][T22981] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 496.261481][T22981] ? clear_bhb_loop+0x40/0x90 [ 496.261507][T22981] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 496.261536][T22981] RIP: 0033:0x7f57d159c799 [ 496.261556][T22981] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 496.261575][T22981] RSP: 002b:00007f57d2405028 EFLAGS: 00000246 ORIG_RAX: 0000000000000133 [ 496.261599][T22981] RAX: ffffffffffffffda RBX: 00007f57d1815fa0 RCX: 00007f57d159c799 [ 496.261615][T22981] RDX: 040000000000009f RSI: 00002000000002c0 RDI: 0000000000000005 [ 496.261629][T22981] RBP: 00007f57d2405090 R08: 0000000000000000 R09: 0000000000000000 [ 496.261642][T22981] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 496.261655][T22981] R13: 00007f57d1816038 R14: 00007f57d1815fa0 R15: 00007ffee8302ad8 [ 496.261690][T22981] [ 496.582791][T22995] veth0_to_hsr: Caught tx_queue_len zero misconfig [ 496.634896][T22997] netlink: 24 bytes leftover after parsing attributes in process `syz.0.4675'. [ 496.785611][T23005] netlink: 40 bytes leftover after parsing attributes in process `syz.6.4676'. [ 497.526718][T23052] veth0_to_bridge: entered promiscuous mode [ 497.578873][T23054] veth0_to_bridge: left promiscuous mode [ 497.679653][ T60] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 497.819610][T23073] sctp: [Deprecated]: syz.2.4695 (pid 23073) Use of int in max_burst socket option. [ 497.819610][T23073] Use struct sctp_assoc_value instead [ 497.840168][T23078] lo: entered allmulticast mode [ 497.962283][T23089] netlink: 'syz.2.4699': attribute type 11 has an invalid length. [ 497.985336][T23075] lo: left allmulticast mode [ 498.092867][T23095] pimreg: entered allmulticast mode [ 498.206266][T23097] 8021q: adding VLAN 0 to HW filter on device bond8 [ 498.239499][T23103] 8021q: adding VLAN 0 to HW filter on device bond8 [ 498.248917][T23103] bond8: (slave vxcan7): The slave device specified does not support setting the MAC address [ 498.260524][T23103] bond8: (slave vxcan7): Error -95 calling set_mac_address [ 498.472552][ T5836] Bluetooth: hci3: command 0x0406 tx timeout [ 498.574634][T23122] IPVS: Unknown mcast interface: vcan0 [ 498.764853][T23131] xt_hashlimit: size too large, truncated to 1048576 [ 499.251198][T23165] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check. [ 499.390369][T23174] openvswitch: netlink: IP tunnel dst address not specified [ 499.593396][ T60] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 499.883092][T23208] bond5: option arp_interval: mode dependency failed, not supported in mode balance-tlb(5) [ 499.906114][T23208] bond5 (unregistering): Released all slaves [ 499.971292][T23214] netlink: 'syz.6.4737': attribute type 4 has an invalid length. [ 500.183563][T23228] __nla_validate_parse: 13 callbacks suppressed [ 500.183587][T23228] netlink: 40 bytes leftover after parsing attributes in process `syz.6.4739'. [ 500.526945][T23257] netlink: 'syz.1.4751': attribute type 8 has an invalid length. [ 500.548474][T23257] RDS: rds_bind could not find a transport for ::ffff:172.30.0.2, load rds_tcp or rds_rdma? [ 500.576021][T23259] netlink: 12 bytes leftover after parsing attributes in process `syz.2.4752'. [ 500.721680][T23265] syzkaller1: entered promiscuous mode [ 500.727647][T23265] syzkaller1: entered allmulticast mode [ 500.879254][ T60] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 501.047298][T23285] netlink: 44 bytes leftover after parsing attributes in process `syz.6.4761'. [ 501.080570][T23286] netlink: 'syz.1.4762': attribute type 9 has an invalid length. [ 501.088938][T23286] netlink: 'syz.1.4762': attribute type 11 has an invalid length. [ 501.097870][T23286] netlink: 'syz.1.4762': attribute type 12 has an invalid length. [ 501.106908][T23286] netlink: 210020 bytes leftover after parsing attributes in process `syz.1.4762'. [ 501.121179][T23286] netlink: 4 bytes leftover after parsing attributes in process `syz.1.4762'. [ 501.403213][ T5836] Bluetooth: hci4: unexpected cc 0x0c03 length: 249 > 1 [ 501.412654][ T5836] Bluetooth: hci4: unexpected cc 0x1003 length: 249 > 9 [ 501.420993][ T5836] Bluetooth: hci4: unexpected cc 0x1001 length: 249 > 9 [ 501.432042][ T5836] Bluetooth: hci4: unexpected cc 0x0c23 length: 249 > 4 [ 501.439955][ T5836] Bluetooth: hci4: unexpected cc 0x0c38 length: 249 > 2 [ 501.516526][ T1301] ieee802154 phy1 wpan1: encryption failed: -22 [ 501.638541][T23306] wg1 speed is unknown, defaulting to 1000 [ 501.746093][T23319] netlink: 28 bytes leftover after parsing attributes in process `syz.6.4770'. [ 501.798842][T23323] netlink: 60 bytes leftover after parsing attributes in process `syz.6.4770'. [ 502.057979][T23337] netlink: 48 bytes leftover after parsing attributes in process `syz.1.4774'. [ 502.088391][T23335] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 502.259070][T23348] netlink: 204 bytes leftover after parsing attributes in process `syz.0.4777'. [ 502.291781][T23348] netlink: 44 bytes leftover after parsing attributes in process `syz.0.4777'. [ 502.371464][T23306] chnl_net:caif_netlink_parms(): no params data found [ 502.796600][ T13] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 503.401373][T23366] bridge0: port 2(bridge_slave_1) entered disabled state [ 503.409134][T23366] bridge0: port 1(bridge_slave_0) entered disabled state [ 503.512901][ T51] Bluetooth: hci4: command tx timeout [ 503.697457][T23366] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 503.712975][T23366] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 503.839812][T23375] erspan0: left promiscuous mode [ 503.847562][T23306] bridge0: port 1(bridge_slave_0) entered blocking state [ 503.867081][T23306] bridge0: port 1(bridge_slave_0) entered disabled state [ 503.880114][T23306] bridge_slave_0: entered allmulticast mode [ 503.898933][T23306] bridge_slave_0: entered promiscuous mode [ 503.931868][T23379] gre1: entered promiscuous mode [ 503.946063][T23379] gre1: entered allmulticast mode [ 503.966240][T23413] sctp: [Deprecated]: syz.6.4789 (pid 23413) Use of int in maxseg socket option. [ 503.966240][T23413] Use struct sctp_assoc_value instead [ 503.983696][ T1334] netdevsim netdevsim6 eth0: unset [1, 0] type 2 family 0 port 6081 - 0 [ 504.031378][ T1334] netdevsim netdevsim6 eth1: unset [1, 0] type 2 family 0 port 6081 - 0 [ 504.067737][T23306] bridge0: port 2(bridge_slave_1) entered blocking state [ 504.104699][T23306] bridge0: port 2(bridge_slave_1) entered disabled state [ 504.112519][T23306] bridge_slave_1: entered allmulticast mode [ 504.120505][T23306] bridge_slave_1: entered promiscuous mode [ 504.144170][ T1334] netdevsim netdevsim6 eth2: unset [1, 0] type 2 family 0 port 6081 - 0 [ 504.163890][ T1334] netdevsim netdevsim6 eth3: unset [1, 0] type 2 family 0 port 6081 - 0 [ 504.271368][T23306] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 504.289889][T23423] bridge: RTM_NEWNEIGH bridge0 with NTF_USE is not supported [ 504.305481][T23421] bridge: RTM_NEWNEIGH with unconfigured vlan 1 on bridge0 [ 504.324380][T23306] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 504.453361][T23306] team0: Port device team_slave_0 added [ 504.466547][T23306] team0: Port device team_slave_1 added [ 504.542715][T23306] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 504.559981][T23306] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 504.597833][T23306] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 504.614927][T23306] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 504.621982][T23306] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 504.735997][T23306] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 505.020250][T23306] hsr_slave_0: entered promiscuous mode [ 505.045740][T23306] hsr_slave_1: entered promiscuous mode [ 505.056987][T23306] debugfs: 'hsr0' already exists in 'hsr' [ 505.062968][T23306] Cannot create hsr debugfs directory [ 505.110495][T23457] IPVS: Schedule: port zero only supported in persistent services, check your ipvs configuration [ 505.260447][T23468] team0: Port device team_slave_0 removed [ 505.270243][T23474] __nla_validate_parse: 3 callbacks suppressed [ 505.270263][T23474] netlink: 108 bytes leftover after parsing attributes in process `syz.2.4808'. [ 505.355037][ T1334] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 505.576879][T23494] netlink: 4 bytes leftover after parsing attributes in process `syz.2.4813'. [ 505.586983][T23493] netlink: 4 bytes leftover after parsing attributes in process `syz.2.4813'. [ 505.593511][ T51] Bluetooth: hci4: command tx timeout [ 506.162225][ C1] IPVS: Schedule: port zero only supported in persistent services, check your ipvs configuration [ 506.362481][T23490] syzkaller0: entered promiscuous mode [ 506.378345][T23490] syzkaller0: entered allmulticast mode [ 506.639702][ T13] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 506.660842][T23306] netdevsim netdevsim8 netdevsim0: renamed from eth0 [ 506.704726][T23306] netdevsim netdevsim8 netdevsim1: renamed from eth1 [ 506.729174][T23510] Cannot find add_set index 0 as target [ 506.733166][T23306] netdevsim netdevsim8 netdevsim2: renamed from eth2 [ 506.788559][T23306] netdevsim netdevsim8 netdevsim3: renamed from eth3 [ 506.795730][T23515] netlink: 4 bytes leftover after parsing attributes in process `syz.1.4819'. [ 507.053985][T23306] 8021q: adding VLAN 0 to HW filter on device bond0 [ 507.095298][T23306] 8021q: adding VLAN 0 to HW filter on device team0 [ 507.123053][ T60] bridge0: port 1(bridge_slave_0) entered blocking state [ 507.130686][ T60] bridge0: port 1(bridge_slave_0) entered forwarding state [ 507.157580][ T13] bridge0: port 2(bridge_slave_1) entered blocking state [ 507.164841][ T13] bridge0: port 2(bridge_slave_1) entered forwarding state [ 507.401576][T23306] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 507.661195][T23306] veth0_vlan: entered promiscuous mode [ 507.672438][ T51] Bluetooth: hci4: command tx timeout [ 507.678197][T23306] veth1_vlan: entered promiscuous mode [ 507.711045][T23306] veth0_macvtap: entered promiscuous mode [ 507.725145][T23306] veth1_macvtap: entered promiscuous mode [ 507.746209][T23306] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 507.765943][T23306] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 507.781664][ T1334] netdevsim netdevsim8 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 507.792422][ T1334] netdevsim netdevsim8 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 507.804950][ T1334] netdevsim netdevsim8 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 507.815167][ T1334] netdevsim netdevsim8 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 508.553412][ T149] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 509.752200][ T51] Bluetooth: hci4: command tx timeout [ 509.954912][T23536] nci: __nci_request: wait_for_completion_interruptible_timeout failed -512 [ 509.967293][T23535] tipc: Enabled bearer , priority 10 [ 510.137650][T23567] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 510.150945][ T149] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 510.172381][ T149] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 510.256443][T23570] bond5: option tlb_dynamic_lb: mode dependency failed, not supported in mode balance-xor(2) [ 510.291811][T23570] bond5 (unregistering): Released all slaves [ 510.353691][ T60] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 510.365578][ T60] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 510.410388][T23583] IPVS: set_ctl: invalid protocol: 29 127.0.0.1:20004 [ 510.595097][T23594] dvmrp6: entered allmulticast mode [ 510.617151][T23592] bridge8: trying to set multicast startup query interval below minimum, setting to 100 (1000ms) [ 510.828176][T23614] netlink: 212368 bytes leftover after parsing attributes in process `syz.8.4839'. [ 510.844223][T23605] netlink: 4 bytes leftover after parsing attributes in process `syz.2.4833'. [ 510.892913][T23614] netlink: 8 bytes leftover after parsing attributes in process `syz.8.4839'. [ 511.117577][ T60] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 511.379657][T23648] sctp: [Deprecated]: syz.2.4848 (pid 23648) Use of int in max_burst socket option. [ 511.379657][T23648] Use struct sctp_assoc_value instead [ 511.554283][T23655] netlink: 8 bytes leftover after parsing attributes in process `syz.6.4850'. [ 511.591452][T23660] openvswitch: netlink: nsh attribute has 4 unknown bytes. [ 511.610974][T23660] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 511.782176][ T1334] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 511.827993][T23672] TC_ACT_REPEAT abuse ? [ 512.428287][T23712] netlink: 8 bytes leftover after parsing attributes in process `syz.2.4867'. [ 512.488351][T23715] netlink: 12 bytes leftover after parsing attributes in process `syz.0.4868'. [ 512.502147][T23715] netlink: 56 bytes leftover after parsing attributes in process `syz.0.4868'. [ 512.511360][T23715] netlink: 8 bytes leftover after parsing attributes in process `syz.0.4868'. [ 512.529476][T23718] netlink: 12 bytes leftover after parsing attributes in process `syz.0.4868'. [ 512.542868][T23718] netlink: 56 bytes leftover after parsing attributes in process `syz.0.4868'. [ 513.097645][T23753] openvswitch: netlink: Duplicate key (type 2). [ 513.267888][T23764] bridge0: port 1(bridge_slave_0) entered blocking state [ 513.275326][T23764] bridge0: port 1(bridge_slave_0) entered forwarding state [ 513.460642][T23770] netlink: 'syz.2.4885': attribute type 33 has an invalid length. [ 513.506037][T23770] bond9: option broadcast_neighbor: mode dependency failed, not supported in mode balance-rr(0) [ 513.525181][T23770] bond9 (unregistering): Released all slaves [ 513.821851][T23791] openvswitch: netlink: nsh attribute has 2 unknown bytes. [ 513.976379][T23795] netlink: 'syz.8.4891': attribute type 2 has an invalid length. [ 514.067666][T23801] vcan0: tx drop: invalid da for name 0x0000000000000001 [ 514.239664][T23809] syzkaller0: entered promiscuous mode [ 514.272593][T23809] syzkaller0: entered allmulticast mode [ 514.313787][ T49] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 514.403736][T23811] bond0: Invalid ad_actor_system MAC address. [ 514.409943][T23811] bond0: option ad_actor_system: invalid value (1) [ 514.435767][T23811] bond0 (unregistering): Released all slaves [ 514.463741][T23822] erspan1: entered allmulticast mode [ 514.494131][T23830] netlink: 'syz.0.4900': attribute type 7 has an invalid length. [ 514.523772][T23830] netlink: 'syz.0.4900': attribute type 8 has an invalid length. [ 514.557461][T23833] netlink: 'syz.0.4900': attribute type 2 has an invalid length. [ 514.749784][T23846] syzkaller0: entered promiscuous mode [ 514.782658][T23846] syzkaller0: entered allmulticast mode [ 514.841446][T23855] netlink: 'syz.6.4909': attribute type 39 has an invalid length. [ 515.584757][T23886] syzkaller0: entered promiscuous mode [ 515.590490][T23886] syzkaller0: entered allmulticast mode [ 515.600356][T23892] netlink: 'syz.0.4919': attribute type 29 has an invalid length. [ 516.155138][ T49] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 516.881045][ T149] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 517.620503][ T1334] veth3: left allmulticast mode [ 517.632426][ T1334] veth3: left promiscuous mode [ 517.637471][ T1334] bridge5: port 1(veth3) entered disabled state [ 517.871636][T23935] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 517.945535][T23935] __nla_validate_parse: 17 callbacks suppressed [ 517.945557][T23935] netlink: 9 bytes leftover after parsing attributes in process `syz.0.4928'. [ 518.119973][ T1334] gretap0 (unregistering): left promiscuous mode [ 518.175589][T23946] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 518.576284][T23924] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 518.587332][ T1334] bond4 (unregistering): (slave bridge9): Releasing backup interface [ 518.691802][ T1334] bond0 (unregistering): left promiscuous mode [ 518.698527][ T1334] bond_slave_0: left promiscuous mode [ 518.704822][ T1334] bond_slave_1: left promiscuous mode [ 518.718283][ T1334] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 518.727732][ T1334] bond_slave_0: left allmulticast mode [ 518.738812][ T1334] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 518.748288][ T1334] bond_slave_1: left allmulticast mode [ 518.754980][ T1334] bond0 (unregistering): Released all slaves [ 518.766219][ T1334] bond1 (unregistering): Released all slaves [ 518.781895][ T1334] bond2 (unregistering): Released all slaves [ 518.800313][ T1334] bond3 (unregistering): (slave C): Releasing backup interface [ 518.809246][ T1334] bond3 (unregistering): (slave C): last VLAN challenged slave left bond - VLAN blocking is removed [ 518.827479][ T1334] bond3 (unregistering): Released all slaves [ 518.844515][ T1334] bond4 (unregistering): Released all slaves [ 518.859186][ T1334] bond5 (unregistering): Released all slaves [ 519.005795][ T1334] tipc: Disabling bearer [ 519.025221][ T1334] tipc: Disabling bearer [ 519.037946][ T1334] tipc: Left network mode [ 519.083684][T23953] netlink: 8 bytes leftover after parsing attributes in process `syz.1.4932'. [ 519.093738][T23951] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check. [ 519.141826][T23954] syzkaller0: create flow: hash 2958891474 index 1 [ 519.151289][T23953] netlink: 'syz.1.4932': attribute type 5 has an invalid length. [ 519.181716][T23953] netlink: 20 bytes leftover after parsing attributes in process `syz.1.4932'. [ 519.433546][ T49] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 519.586085][T23957] syzkaller0: delete flow: hash 2958891474 index 1 [ 519.704474][T23974] IPVS: set_ctl: invalid protocol: 55425 224.0.0.1:20003 [ 520.415426][T23981] netlink: 'syz.8.4938': attribute type 1 has an invalid length. [ 521.354379][ T35] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 521.397215][T23966] mac80211_hwsim hwsim75 wlan0: entered promiscuous mode [ 521.523237][T23988] netlink: 40 bytes leftover after parsing attributes in process `syz.2.4940'. [ 521.753352][T24008] netlink: 'syz.0.4945': attribute type 12 has an invalid length. [ 521.763023][T24008] netlink: 190972 bytes leftover after parsing attributes in process `syz.0.4945'. [ 521.792610][T24000] netdevsim netdevsim8 netdevsim0: entered promiscuous mode [ 521.814256][T24008] xt_CT: You must specify a L4 protocol and not use inversions on it [ 521.884446][T24013] netlink: 44 bytes leftover after parsing attributes in process `syz.2.4948'. [ 521.903808][T24013] netlink: 35 bytes leftover after parsing attributes in process `syz.2.4948'. [ 521.914029][T24013] netlink: 'syz.2.4948': attribute type 5 has an invalid length. [ 521.923741][T24013] netlink: 'syz.2.4948': attribute type 6 has an invalid length. [ 521.938399][T24013] netlink: 35 bytes leftover after parsing attributes in process `syz.2.4948'. [ 521.981843][T24018] netlink: 'syz.8.4949': attribute type 1 has an invalid length. [ 522.029283][T24018] netlink: 224 bytes leftover after parsing attributes in process `syz.8.4949'. [ 522.279535][T24031] xt_HMARK: proto mask must be zero with L3 mode [ 522.433704][T24038] netlink: 4 bytes leftover after parsing attributes in process `syz.2.4956'. [ 522.634432][ T149] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 522.691674][T24053] netlink: 'syz.8.4959': attribute type 10 has an invalid length. [ 522.713047][T24043] syzkaller0: entered promiscuous mode [ 522.718600][T24043] syzkaller0: entered allmulticast mode [ 522.846943][T24053] bridge0: port 2(bridge_slave_1) entered disabled state [ 522.857014][T24053] bridge_slave_1: left allmulticast mode [ 522.879637][T24053] bridge_slave_1: left promiscuous mode [ 522.887380][T24053] bridge0: port 2(bridge_slave_1) entered disabled state [ 522.917230][T24053] bond0: (slave bridge_slave_1): Enslaving as an active interface with an up link [ 523.033077][T24066] x_tables: (null)_tables: NFQUEUE.1 target: invalid size 8 (kernel) != (user) 16 [ 523.281343][T24040] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 523.870457][T24074] netlink: 'syz.1.4965': attribute type 1 has an invalid length. [ 523.884820][T24074] __nla_validate_parse: 2 callbacks suppressed [ 523.884840][T24074] netlink: 12 bytes leftover after parsing attributes in process `syz.1.4965'. [ 524.854402][T24084] netlink: 8 bytes leftover after parsing attributes in process `syz.1.4967'. [ 524.875970][T24084] netlink: 16 bytes leftover after parsing attributes in process `syz.1.4967'. [ 524.914428][T24087] syz_tun: entered promiscuous mode [ 524.919141][T24095] netlink: 40 bytes leftover after parsing attributes in process `syz.2.4970'. [ 524.929626][T24084] netlink: 8 bytes leftover after parsing attributes in process `syz.1.4967'. [ 524.943861][T24087] macvtap1: entered promiscuous mode [ 525.101659][T24102] openvswitch: netlink: Geneve opt len 3 is not a multiple of 4. [ 525.178108][T24105] syzkaller0: entered promiscuous mode [ 525.193114][T24105] syzkaller0: entered allmulticast mode [ 525.193313][ T60] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 525.439939][T24126] netlink: 'syz.1.4979': attribute type 5 has an invalid length. [ 525.635420][T24128] can: request_module (can-proto-0) failed. [ 525.646596][T24136] netlink: 76 bytes leftover after parsing attributes in process `syz.6.4983'. [ 525.656385][T24136] netlink: 76 bytes leftover after parsing attributes in process `syz.6.4983'. [ 525.664037][T24128] sctp: [Deprecated]: syz.0.4980 (pid 24128) Use of int in max_burst socket option deprecated. [ 525.664037][T24128] Use struct sctp_assoc_value instead [ 525.702387][T24134] netlink: 8 bytes leftover after parsing attributes in process `syz.0.4980'. [ 525.789685][T24140] netlink: 12 bytes leftover after parsing attributes in process `syz.1.4984'. [ 525.805297][T24128] netlink: 16 bytes leftover after parsing attributes in process `syz.0.4980'. [ 525.865423][T24140] vxcan2: entered allmulticast mode [ 526.099699][T24154] veth7: entered promiscuous mode [ 526.105360][T24154] veth7: entered allmulticast mode [ 526.664366][T24193] netlink: 'syz.0.5001': attribute type 1 has an invalid length. [ 526.720959][T24195] tipc: Enabling of bearer rejected, failed to enable media [ 526.741851][T24201] netlink: 'syz.1.5000': attribute type 2 has an invalid length. [ 526.794019][T24199] batman_adv: Cannot find parent device. Skipping batadv-on-batadv check for gretap4 [ 526.819645][T24206] netlink: 'syz.2.5003': attribute type 1 has an invalid length. [ 526.833889][T24199] gretap4: default qdisc (pfifo_fast) fail, fallback to noqueue [ 526.857890][T24199] gretap4: entered promiscuous mode [ 526.866396][T24210] openvswitch: netlink: Unexpected mask (mask=2020040, allowed=2010048) [ 526.885778][T24199] gretap4: entered allmulticast mode [ 527.051238][T24206] 8021q: adding VLAN 0 to HW filter on device bond9 [ 527.088052][T24211] bond9: (slave veth13): Enslaving as an active interface with a down link [ 527.120229][T24214] 8021q: adding VLAN 0 to HW filter on device batadv1 [ 527.128784][ T149] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 527.156364][T24214] bond9: (slave batadv1): dev_set_mac_address on slave failed! ALB mode requires that the base driver support setting the hw address also when the network device's interface is open [ 527.559418][T24233] syzkaller1: entered promiscuous mode [ 527.565058][T24233] syzkaller1: entered allmulticast mode [ 527.675012][ T1103] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 527.712330][ T1334] hsr_slave_0: left promiscuous mode [ 527.746862][ T1334] hsr_slave_1: left promiscuous mode [ 527.764842][ T1334] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 527.780216][ T1334] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 527.809793][ T1334] batman_adv: batadv0: Interface deactivated: ipvlan2 [ 527.830767][ T1334] batman_adv: batadv0: Removing interface: ipvlan2 [ 527.850289][ T1334] veth1_macvtap: left promiscuous mode [ 527.857423][ T1334] veth1_vlan: left promiscuous mode [ 527.864448][ T1334] veth0_vlan: left promiscuous mode [ 528.036865][ T1334] vlan1 (unregistering): left allmulticast mode [ 528.051671][ T1334] veth0_vlan (unregistering): left allmulticast mode [ 528.147324][ T1334] team0 (unregistering): Port device team_slave_1 removed [ 528.163751][ T1334] team0 (unregistering): Port device team_slave_0 removed [ 528.416490][T24264] tc_dump_action: action bad kind [ 528.603416][T24278] x_tables: ip6_tables: mh match: only valid for protocol 135 [ 528.712329][ T5836] Bluetooth: hci4: command 0x0405 tx timeout [ 529.117916][T24302] __nla_validate_parse: 8 callbacks suppressed [ 529.117939][T24302] netlink: 8 bytes leftover after parsing attributes in process `syz.2.5026'. [ 529.145514][T24303] netlink: 8 bytes leftover after parsing attributes in process `syz.2.5026'. [ 529.269654][ T1334] IPVS: stop unused estimator thread 0... [ 529.377613][T24311] netlink: 256 bytes leftover after parsing attributes in process `syz.8.5029'. [ 529.390680][T24314] Bluetooth: hci0: Opcode 0x080f failed: -22 [ 529.393144][T24311] netlink: 256 bytes leftover after parsing attributes in process `syz.8.5029'. [ 529.506127][T24321] netlink: 'syz.1.5031': attribute type 4 has an invalid length. [ 529.611744][T24328] netlink: 'syz.1.5036': attribute type 21 has an invalid length. [ 529.645512][T24332] netlink: 12 bytes leftover after parsing attributes in process `syz.8.5035'. [ 529.671632][T24332] netlink: 'syz.8.5035': attribute type 1 has an invalid length. [ 529.757410][T24332] netlink: 16 bytes leftover after parsing attributes in process `syz.8.5035'. [ 529.776346][T24332] netlink: 16 bytes leftover after parsing attributes in process `syz.8.5035'. [ 530.000741][T24354] netlink: 12 bytes leftover after parsing attributes in process `syz.2.5041'. [ 530.011301][T24350] netlink: 20 bytes leftover after parsing attributes in process `syz.8.5040'. [ 530.118681][T24360] netlink: 'syz.1.5043': attribute type 21 has an invalid length. [ 530.138027][T24360] netlink: 156 bytes leftover after parsing attributes in process `syz.1.5043'. [ 530.424604][T24380] veth9: entered allmulticast mode [ 530.534097][T24387] batadv_slave_0: entered allmulticast mode [ 530.768268][T24404] netlink: 'syz.2.5055': attribute type 1 has an invalid length. [ 530.778486][T24407] netlink: 'syz.1.5056': attribute type 1 has an invalid length. [ 530.786686][T24407] netlink: 'syz.1.5056': attribute type 1 has an invalid length. [ 530.795084][T24407] netlink: 'syz.1.5056': attribute type 8 has an invalid length. [ 530.952614][ T13] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 531.200817][T24431] netlink: 'syz.6.5063': attribute type 5 has an invalid length. [ 532.016713][T24482] netlink: 'syz.1.5077': attribute type 5 has an invalid length. [ 532.429601][T24517] netlink: 'syz.0.5088': attribute type 8 has an invalid length. [ 532.591823][T24533] openvswitch: netlink: Key 6 has unexpected len 4 expected 2 [ 532.664979][T24535] ip6gretap0 (unregistering): left allmulticast mode [ 532.682152][T24535] ip6gretap0 (unregistering): left promiscuous mode [ 532.793065][ T49] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 532.872782][ T1103] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 532.923593][T24549] bond8: Removing last ns target with arp_interval on [ 532.960379][T24553] batman_adv: Cannot find parent device. Skipping batadv-on-batadv check for gretap1 [ 533.001274][T24553] gretap1: default qdisc (pfifo_fast) fail, fallback to noqueue [ 533.022575][T24553] gretap1: entered promiscuous mode [ 533.027968][T24553] gretap1: entered allmulticast mode [ 533.266858][T24574] netlink: 'syz.8.5104': attribute type 4 has an invalid length. [ 533.498560][T24584] x_tables: duplicate entry at hook 3 [ 533.518923][T24587] x_tables: duplicate entry at hook 3 [ 533.550508][T24588] netlink: 'syz.6.5109': attribute type 1 has an invalid length. [ 533.772867][T24603] syzkaller0: entered promiscuous mode [ 533.778419][T24603] syzkaller0: entered allmulticast mode [ 534.066173][T24626] sch_fq: defrate 53322 ignored. [ 534.224642][T24635] netlink: 'syz.6.5125': attribute type 1 has an invalid length. [ 534.281653][T24635] bond9: entered promiscuous mode [ 534.287378][T24635] 8021q: adding VLAN 0 to HW filter on device bond9 [ 534.356844][T24635] macvtap1: entered allmulticast mode [ 534.384442][T24635] bond9: (slave bridge15): making interface the new active one [ 534.393414][T24635] bridge15: entered promiscuous mode [ 534.401282][T24635] bond9: (slave bridge15): Enslaving as an active interface with an up link [ 534.459637][T24640] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 534.660589][T24661] IPVS: sync thread started: state = BACKUP, mcast_ifn = vcan0, syncid = 0, id = 0 [ 534.770369][T24670] __nla_validate_parse: 25 callbacks suppressed [ 534.770390][T24670] netlink: 4 bytes leftover after parsing attributes in process `syz.2.5137'. [ 534.797962][T24673] bridge0: port 1(gretap0) entered blocking state [ 534.805313][T24673] bridge0: port 1(gretap0) entered disabled state [ 534.813303][T24673] gretap0: entered allmulticast mode [ 534.822416][T24673] gretap0: entered promiscuous mode [ 535.138597][T24694] netlink: 28 bytes leftover after parsing attributes in process `syz.2.5144'. [ 535.180092][T24694] netlink: 28 bytes leftover after parsing attributes in process `syz.2.5144'. [ 535.389474][T24708] netlink: 16 bytes leftover after parsing attributes in process `syz.2.5148'. [ 535.733477][T24734] netlink: 4 bytes leftover after parsing attributes in process `syz.1.5155'. [ 536.084138][ T1103] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 536.224646][T24764] xt_hashlimit: max too large, truncated to 1048576 [ 536.245781][T24763] syzkaller0: entered promiscuous mode [ 536.251537][T24763] syzkaller0: entered allmulticast mode [ 536.257342][T24766] netlink: 212368 bytes leftover after parsing attributes in process `syz.8.5165'. [ 536.658933][T24789] netlink: 144 bytes leftover after parsing attributes in process `syz.6.5173'. [ 536.807006][T24795] syzkaller0: entered promiscuous mode [ 536.818070][T24795] syzkaller0: entered allmulticast mode [ 536.971246][T24803] pim6reg1: entered promiscuous mode [ 536.987975][T24803] pim6reg1: entered allmulticast mode [ 537.122188][T24813] syzkaller1: entered promiscuous mode [ 537.134527][T24813] syzkaller1: entered allmulticast mode [ 537.176510][T24816] netlink: 24 bytes leftover after parsing attributes in process `syz.6.5186'. [ 537.215252][T24824] netlink: 12 bytes leftover after parsing attributes in process `syz.8.5188'. [ 537.330491][T24829] netlink: 8 bytes leftover after parsing attributes in process `syz.8.5189'. [ 537.331425][T24825] syzkaller0: entered promiscuous mode [ 537.372462][T24825] syzkaller0: entered allmulticast mode [ 537.389473][T24829] Unknown options in mask b7f2 [ 537.594786][T24841] netlink: 'syz.8.5193': attribute type 1 has an invalid length. [ 537.623641][T24841] workqueue: Failed to create a rescuer kthread for wq "bond1": -EINTR [ 537.690682][T24846] netlink: 'syz.0.5194': attribute type 1 has an invalid length. [ 537.758440][T24846] netlink: 'syz.0.5194': attribute type 2 has an invalid length. [ 537.809554][T24855] bridge0: port 1(bridge_slave_0) entered disabled state [ 537.990055][T24864] bond0: Invalid ad_actor_system MAC address. [ 537.998768][ T1334] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 538.006963][T24864] bond0: option ad_actor_system: invalid value (1) [ 538.032898][T24864] bond0 (unregistering): Released all slaves [ 538.364389][T24887] ipt_REJECT: TCP_RESET invalid for non-tcp [ 538.425133][T24891] netlink: 'syz.6.5211': attribute type 25 has an invalid length. [ 538.580410][T24899] netlink: 'syz.0.5213': attribute type 10 has an invalid length. [ 538.626428][T24899] veth0_macvtap: left promiscuous mode [ 538.642821][ T1103] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 538.668621][T24902] sctp: [Deprecated]: syz.1.5214 (pid 24902) Use of int in maxseg socket option. [ 538.668621][T24902] Use struct sctp_assoc_value instead [ 539.009970][T24922] netlink: 'syz.8.5221': attribute type 9 has an invalid length. [ 539.017984][T24922] netlink: 'syz.8.5221': attribute type 11 has an invalid length. [ 539.026125][T24922] netlink: 'syz.8.5221': attribute type 12 has an invalid length. [ 539.036702][T24922] veth1_macvtap: left promiscuous mode [ 540.150399][T24972] __nla_validate_parse: 10 callbacks suppressed [ 540.150421][T24972] netlink: 32 bytes leftover after parsing attributes in process `syz.0.5236'. [ 540.495659][T24984] geneve3: entered promiscuous mode [ 540.518096][T24987] netlink: 4 bytes leftover after parsing attributes in process `syz.1.5241'. [ 540.546816][T24986] netlink: 4 bytes leftover after parsing attributes in process `syz.1.5241'. [ 541.570465][ T5836] Bluetooth: hci8: unexpected cc 0x0c03 length: 249 > 1 [ 541.581477][ T5836] Bluetooth: hci8: unexpected cc 0x1003 length: 249 > 9 [ 541.589772][ T5836] Bluetooth: hci8: unexpected cc 0x1001 length: 249 > 9 [ 541.599681][ T5836] Bluetooth: hci8: unexpected cc 0x0c23 length: 249 > 4 [ 541.607948][ T5836] Bluetooth: hci8: unexpected cc 0x0c38 length: 249 > 2 [ 541.695978][T25025] wg1 speed is unknown, defaulting to 1000 [ 541.832973][ T1103] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 542.271790][T25038] netlink: 8 bytes leftover after parsing attributes in process `syz.8.5256'. [ 542.278676][T25025] chnl_net:caif_netlink_parms(): no params data found [ 542.281365][T25038] netlink: 8 bytes leftover after parsing attributes in process `syz.8.5256'. [ 542.680660][T25025] bridge0: port 1(bridge_slave_0) entered blocking state [ 542.692393][T25025] bridge0: port 1(bridge_slave_0) entered disabled state [ 542.699858][T25025] bridge_slave_0: entered allmulticast mode [ 542.709099][T25025] bridge_slave_0: entered promiscuous mode [ 542.739234][T25025] bridge0: port 2(bridge_slave_1) entered blocking state [ 542.794027][T25025] bridge0: port 2(bridge_slave_1) entered disabled state [ 542.820254][T25025] bridge_slave_1: entered allmulticast mode [ 542.848072][T25025] bridge_slave_1: entered promiscuous mode [ 543.018733][T25025] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 543.045902][T25025] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 543.168533][T25025] team0: Port device team_slave_0 added [ 543.185279][T25025] team0: Port device team_slave_1 added [ 543.304923][T25025] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 543.327283][T25025] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 543.361360][T25025] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 543.437686][T25025] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 543.461058][T25025] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 543.489136][T25025] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 543.721449][T25025] hsr_slave_0: entered promiscuous mode [ 543.738682][ T5836] Bluetooth: hci8: command tx timeout [ 543.748497][T25025] hsr_slave_1: entered promiscuous mode [ 543.763053][ T13] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 543.786533][T25095] netlink: 16 bytes leftover after parsing attributes in process `syz.0.5268'. [ 543.835705][ T60] bridge_slave_1: left allmulticast mode [ 543.841999][T25093] netlink: 16 bytes leftover after parsing attributes in process `syz.0.5268'. [ 543.851257][ T60] bridge_slave_1: left promiscuous mode [ 543.872455][ T60] bridge0: port 2(bridge_slave_1) entered disabled state [ 543.901265][ T60] bridge_slave_0: left allmulticast mode [ 543.915498][ T60] bridge_slave_0: left promiscuous mode [ 543.928353][ T60] bridge0: port 1(bridge_slave_0) entered disabled state [ 544.456523][ T1103] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 544.838406][T25126] netlink: 8 bytes leftover after parsing attributes in process `syz.2.5273'. [ 544.849939][T25126] netlink: 4 bytes leftover after parsing attributes in process `syz.2.5273'. [ 545.032413][ T30] INFO: task syz.5.3372:18458 blocked for more than 143 seconds. [ 545.040612][ T30] Not tainted syzkaller #0 [ 545.046216][ T30] "echo 0 > /proc/sys/kernel/hung_task_timeout_secs" disables this message. [ 545.055236][ T30] task:syz.5.3372 state:D stack:27304 pid:18458 tgid:18456 ppid:13082 task_flags:0x400140 flags:0x00080002 [ 545.067446][ T30] Call Trace: [ 545.071034][ T30] [ 545.074481][ T30] __schedule+0x15dd/0x52d0 SYZFAIL: failed to recv rpc fd=3 want=4 recv=0 n=0 (errno 9: Bad file descriptor) [ 545.079144][ T30] ? __pfx___schedule+0x10/0x10 [ 545.086257][ T30] ? schedule+0x90/0x360 [ 545.090581][ T30] schedule+0x164/0x360 [ 545.095196][ T30] schedule_preempt_disabled+0x13/0x30 [ 545.100881][ T30] __mutex_lock+0x7fe/0x1300 [ 545.105832][ T30] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 545.112896][ T30] ? __mutex_lock+0x5ac/0x1300 [ 545.117728][ T30] ? nfsd_nl_version_set_doit+0xcd/0x7a0 [ 545.132618][ T30] ? __pfx___mutex_lock+0x10/0x10 [ 545.137829][ T30] nfsd_nl_version_set_doit+0xcd/0x7a0 [ 545.152152][ T30] ? __pfx_nfsd_nl_version_set_doit+0x10/0x10 [ 545.158318][ T30] ? genl_family_rcv_msg_attrs_parse+0x1c9/0x2a0 [ 545.206817][ T30] genl_family_rcv_msg_doit+0x22a/0x330 [ 545.218969][ T30] ? __asan_memcpy+0x40/0x70 [ 545.223823][ T30] ? __pfx_genl_family_rcv_msg_doit+0x10/0x10 [ 545.230074][ T30] ? bpf_lsm_capable+0x9/0x20 [ 545.235217][ T30] ? security_capable+0x7e/0x2c0 [ 545.240328][ T30] genl_rcv_msg+0x61c/0x7a0 [ 545.259347][ T30] ? __pfx_genl_rcv_msg+0x10/0x10 [ 545.265059][ T30] ? __pfx_nfsd_nl_version_set_doit+0x10/0x10 [ 545.271204][ T30] ? __lock_acquire+0x6b5/0x2cf0 [ 545.276585][ T30] netlink_rcv_skb+0x232/0x4b0 [ 545.281428][ T30] ? __pfx_genl_rcv_msg+0x10/0x10 [ 545.287435][ T30] ? __pfx_netlink_rcv_skb+0x10/0x10 [ 545.293849][ T30] ? down_read+0x272/0x2e0 [ 545.298520][ T30] ? genl_rcv+0xd/0x40 [ 545.304815][ T30] genl_rcv+0x28/0x40 [ 545.308875][ T30] netlink_unicast+0x80f/0x9b0 [ 545.314075][ T30] ? __pfx_netlink_unicast+0x10/0x10 [ 545.320099][ T30] ? netlink_sendmsg+0x650/0xb40 [ 545.327581][ T30] ? skb_put+0x11b/0x210 [ 545.333010][ T30] netlink_sendmsg+0x813/0xb40 [ 545.337848][ T30] ? __pfx_netlink_sendmsg+0x10/0x10 [ 545.343575][ T30] ? aa_sock_msg_perm+0xf1/0x1b0 [ 545.348691][ T30] ? bpf_lsm_socket_sendmsg+0x9/0x20 [ 545.355540][ T30] ____sys_sendmsg+0x972/0x9f0 [ 545.360735][ T30] ? __pfx_____sys_sendmsg+0x10/0x10 [ 545.374770][ T30] ? import_iovec+0x73/0xa0 [ 545.379375][ T30] ___sys_sendmsg+0x2a5/0x360 [ 545.384813][ T30] ? __pfx____sys_sendmsg+0x10/0x10 [ 545.390074][ T30] ? futex_wake+0x4ac/0x580 [ 545.395122][ T30] ? __fget_files+0x2a/0x420 [ 545.399869][ T30] ? __fget_files+0x3a0/0x420 [ 545.405123][ T30] __x64_sys_sendmsg+0x1bd/0x2a0 [ 545.410623][ T30] ? __pfx___x64_sys_sendmsg+0x10/0x10 [ 545.417147][ T30] ? rcu_is_watching+0x15/0xb0 [ 545.422778][ T30] do_syscall_64+0x14d/0xf80 [ 545.427423][ T30] ? trace_irq_disable+0x3b/0x150 [ 545.433725][ T30] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 545.439849][ T30] ? clear_bhb_loop+0x40/0x90 [ 545.445260][ T30] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 545.451204][ T30] RIP: 0033:0x7f939879c799 [ 545.455744][ T30] RSP: 002b:00007f93996d1028 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 545.464360][ T30] RAX: ffffffffffffffda RBX: 00007f9398a16090 RCX: 00007f939879c799 [ 545.478300][ T30] RDX: 0000000004008090 RSI: 0000200000000140 RDI: 0000000000000003 [ 545.486478][ T30] RBP: 00007f9398832bd9 R08: 0000000000000000 R09: 0000000000000000 [ 545.494532][ T30] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 545.503002][ T30] R13: 00007f9398a16128 R14: 00007f9398a16090 R15: 00007fff92b526e8 [ 545.511011][ T30] [ 545.514839][ T30] [ 545.514839][ T30] Showing all locks held in the system: [ 545.534232][ T30] 1 lock held by khungtaskd/30: [ 545.539151][ T30] #0: ffffffff8e7602e0 (rcu_read_lock){....}-{1:3}, at: debug_show_all_locks+0x2e/0x180 [ 545.549370][ T30] 6 locks held by kworker/u8:3/49: [ 545.554621][ T30] 5 locks held by kworker/u8:5/60: [ 545.559765][ T30] #0: ffff88801b6d6948 ((wq_completion)netns){+.+.}-{0:0}, at: process_scheduled_works+0x9ea/0x1830 [ 545.571174][ T30] #1: ffffc9000211fc40 (net_cleanup_work){+.+.}-{0:0}, at: process_scheduled_works+0xa25/0x1830 [ 545.588373][ T30] #2: ffffffff8fbbeff0 (pernet_ops_rwsem){++++}-{4:4}, at: cleanup_net+0xf4/0x800 [ 545.598342][ T30] #3: ffffffff8fbcd788 (rtnl_mutex){+.+.}-{4:4}, at: ops_undo_list+0x2a4/0x940 [ 545.611885][ T30] #4: ffffffff8e766578 (rcu_state.exp_mutex){+.+.}-{4:4}, at: synchronize_rcu_expedited+0x2d0/0x770 [ 545.623203][ T30] 3 locks held by kworker/u8:8/1103: [ 545.628798][ T30] #0: ffff88813fe4c148 ((wq_completion)events_unbound){+.+.}-{0:0}, at: process_scheduled_works+0x9ea/0x1830 [ 545.640804][ T30] #1: ffffc90004c0fc40 ((linkwatch_work).work){+.+.}-{0:0}, at: process_scheduled_works+0xa25/0x1830 [ 545.652629][ T30] #2: ffffffff8fbcd788 (rtnl_mutex){+.+.}-{4:4}, at: linkwatch_event+0xe/0x60 [ 545.661828][ T30] 1 lock held by dhcpcd/5488: [ 545.666737][ T30] #0: ffffffff8fbcd788 (rtnl_mutex){+.+.}-{4:4}, at: devinet_ioctl+0x32b/0x1b30 [ 545.676872][ T30] 2 locks held by getty/5584: [ 545.681609][ T30] #0: ffff888035b600a0 (&tty->ldisc_sem){++++}-{0:0}, at: tty_ldisc_ref_wait+0x25/0x70 [ 545.692242][ T30] #1: ffffc9000332b2f0 (&ldata->atomic_read_lock){+.+.}-{4:4}, at: n_tty_read+0x45c/0x13c0 [ 545.702565][ T30] 2 locks held by syz.4.1739/12305: [ 545.707813][ T30] #0: ffffffff8fc3b530 (cb_lock){++++}-{4:4}, at: genl_rcv+0x19/0x40 [ 545.716598][ T30] #1: ffffffff8ea875e8 (nfsd_mutex){+.+.}-{4:4}, at: nfsd_nl_listener_set_doit+0x141/0x1670 [ 545.727421][ T30] 2 locks held by syz.5.3372/18458: [ 545.732856][ T30] #0: ffffffff8fc3b530 (cb_lock){++++}-{4:4}, at: genl_rcv+0x19/0x40 [ 545.741179][ T30] #1: ffffffff8ea875e8 (nfsd_mutex){+.+.}-{4:4}, at: nfsd_nl_version_set_doit+0xcd/0x7a0 [ 545.751536][ T30] 2 locks held by syz.7.4543/22525: [ 545.756986][ T30] #0: ffffffff8fc3b530 (cb_lock){++++}-{4:4}, at: genl_rcv+0x19/0x40 [ 545.762492][ T5836] Bluetooth: hci8: command tx timeout [ 545.765543][ T30] #1: ffffffff8ea875e8 (nfsd_mutex){+.+.}-{4:4}, at: nfsd_nl_threads_get_doit+0x1c0/0x790 [ 545.781306][ T30] 3 locks held by kworker/1:13/23406: [ 545.786905][ T30] #0: ffff88813fe0e148 ((wq_completion)events_power_efficient){+.+.}-{0:0}, at: process_scheduled_works+0x9ea/0x1830 [ 545.799510][ T30] #1: ffffc900101cfc40 ((crda_timeout).work){+.+.}-{0:0}, at: process_scheduled_works+0xa25/0x1830 [ 545.813732][ T30] #2: ffffffff8fbcd788 (rtnl_mutex){+.+.}-{4:4}, at: crda_timeout_work+0x16/0x80 [ 545.823588][ T30] 3 locks held by kworker/1:15/23408: [ 545.829437][ T30] #0: ffff88813fe0f548 ((wq_completion)events){+.+.}-{0:0}, at: process_scheduled_works+0x9ea/0x1830 [ 545.841792][ T30] #1: ffffc9000db27c40 (deferred_process_work){+.+.}-{0:0}, at: process_scheduled_works+0xa25/0x1830 [ 545.853031][ T30] #2: ffffffff8fbcd788 (rtnl_mutex){+.+.}-{4:4}, at: switchdev_deferred_process_work+0xe/0x20 [ 545.863924][ T30] 1 lock held by syz-executor/25025: [ 545.869248][ T30] #0: ffffffff8fbcd788 (rtnl_mutex){+.+.}-{4:4}, at: rtnl_newlink+0x8a1/0x1be0 [ 545.878512][ T30] 2 locks held by syz.0.5268/25093: [ 545.883821][ T30] #0: ffffffff8fc3b530 (cb_lock){++++}-{4:4}, at: genl_rcv+0x19/0x40 [ 545.892517][ T30] #1: ffffffff8fbcd788 (rtnl_mutex){+.+.}-{4:4}, at: nl80211_pre_doit+0x5f/0x930 [ 545.901891][ T30] 2 locks held by syz.0.5268/25095: [ 545.907228][ T30] #0: ffffffff8fc3b530 (cb_lock){++++}-{4:4}, at: genl_rcv+0x19/0x40 [ 545.916217][ T30] #1: ffffffff8fbcd788 (rtnl_mutex){+.+.}-{4:4}, at: nl80211_pre_doit+0x5f/0x930 [ 545.925929][ T30] 2 locks held by syz.1.5271/25106: [ 545.931526][ T30] #0: ffffffff8fc3b530 (cb_lock){++++}-{4:4}, at: genl_rcv+0x19/0x40 [ 545.940121][ T30] #1: ffffffff8fbcd788 (rtnl_mutex){+.+.}-{4:4}, at: nl80211_pre_doit+0x5f/0x930 [ 545.949594][ T30] 2 locks held by syz.8.5272/25112: [ 545.955318][ T30] #0: ffff88807c6036f0 (nlk_cb_mutex-ROUTE){+.+.}-{4:4}, at: __netlink_dump_start+0xfe/0x7e0 [ 545.965781][ T30] #1: ffffffff8fbcd788 (rtnl_mutex){+.+.}-{4:4}, at: rtnl_dumpit+0x92/0x200 [ 545.974782][ T30] 2 locks held by syz.2.5273/25126: [ 545.979985][ T30] #0: ffffffff9011db60 (&ops->srcu#2){.+.+}-{0:0}, at: rtnl_link_ops_get+0x23/0x250 [ 545.989890][ T30] #1: ffffffff8fbcd788 (rtnl_mutex){+.+.}-{4:4}, at: rtnl_newlink+0x8a1/0x1be0 [ 545.999282][ T30] [ 546.002837][ T30] ============================================= [ 546.002837][ T30] [ 546.003650][ T60] bond1 (unregistering): (slave bridge3): Releasing backup interface [ 546.011490][ T30] NMI backtrace for cpu 1 [ 546.011533][ T30] CPU: 1 UID: 0 PID: 30 Comm: khungtaskd Not tainted syzkaller #0 PREEMPT(full) [ 546.011605][ T30] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 02/12/2026 [ 546.011639][ T30] Call Trace: [ 546.011662][ T30] [ 546.011692][ T30] dump_stack_lvl+0xe8/0x150 [ 546.011785][ T30] nmi_cpu_backtrace+0x274/0x2d0 [ 546.011975][ T30] ? __pfx_nmi_raise_cpu_backtrace+0x10/0x10 [ 546.012085][ T30] nmi_trigger_cpumask_backtrace+0x17a/0x300 [ 546.012167][ T30] sys_info+0x135/0x170 [ 546.012221][ T30] watchdog+0xfd9/0x1030 [ 546.012324][ T30] ? watchdog+0x21a/0x1030 [ 546.012422][ T30] kthread+0x388/0x470 [ 546.012491][ T30] ? __pfx_watchdog+0x10/0x10 [ 546.012577][ T30] ? __pfx_kthread+0x10/0x10 [ 546.012639][ T30] ret_from_fork+0x51e/0xb90 [ 546.012720][ T30] ? __pfx_ret_from_fork+0x10/0x10 [ 546.012792][ T30] ? __switch_to+0xc7d/0x1450 [ 546.012919][ T30] ? __pfx_kthread+0x10/0x10 [ 546.012973][ T30] ret_from_fork_asm+0x1a/0x30 [ 546.013098][ T30] [ 546.014101][ T30] Sending NMI from CPU 1 to CPUs 0: [ 546.033025][ T60] bridge3 (unregistering): left promiscuous mode [ 546.033837][ C0] NMI backtrace for cpu 0 [ 546.033852][ C0] CPU: 0 UID: 0 PID: 60 Comm: kworker/u8:5 Not tainted syzkaller #0 PREEMPT(full) [ 546.033872][ C0] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 02/12/2026 [ 546.033884][ C0] Workqueue: netns cleanup_net [ 546.033914][ C0] RIP: 0010:io_serial_in+0x77/0xc0 [ 546.034053][ C0] Code: e8 8e 4f 85 fc 44 89 f9 d3 e3 49 83 c6 40 4c 89 f0 48 c1 e8 03 42 80 3c 20 00 74 08 4c 89 f7 e8 0f 91 ef fc 41 03 1e 89 da ec <0f> b6 c0 5b 41 5c 41 5e 41 5f e9 8a 5e 70 06 cc 44 89 f9 80 e1 07 [ 546.034069][ C0] RSP: 0018:ffffc9000211e990 EFLAGS: 00000002 [ 546.034084][ C0] RAX: 1ffffffff34b9b00 RBX: 00000000000003fd RCX: 0000000000000000 [ 546.034097][ C0] RDX: 00000000000003fd RSI: 0000000000000000 RDI: 0000000000000020 [ 546.034108][ C0] RBP: ffffffff9a5cdb70 R08: ffff888024d50237 R09: 1ffff110049aa046 [ 546.034121][ C0] R10: dffffc0000000000 R11: ffffffff85404990 R12: dffffc0000000000 [ 546.034135][ C0] R13: 0000000000000000 R14: ffffffff9a5cd8e0 R15: 0000000000000000 [ 546.034147][ C0] FS: 0000000000000000(0000) GS:ffff888125461000(0000) knlGS:0000000000000000 [ 546.034162][ C0] CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033 [ 546.034173][ C0] CR2: 00007fbfe25e9e80 CR3: 000000007d886000 CR4: 00000000003526f0 [ 546.034189][ C0] Call Trace: [ 546.034196][ C0] [ 546.034205][ C0] wait_for_lsr+0x1a1/0x2f0 [ 546.034229][ C0] serial8250_console_write+0x1348/0x1ba0 [ 546.034266][ C0] ? __pfx_serial8250_console_write+0x10/0x10 [ 546.034293][ C0] ? lock_acquire+0xf0/0x2e0 [ 546.034319][ C0] ? do_raw_spin_unlock+0xf5/0x210 [ 546.034338][ C0] ? console_flush_all+0x123/0xb20 [ 546.034356][ C0] console_flush_all+0x718/0xb20 [ 546.034375][ C0] ? console_flush_all+0x123/0xb20 [ 546.034396][ C0] ? __pfx_console_flush_all+0x10/0x10 [ 546.034416][ C0] ? is_printk_cpu_sync_owner+0x32/0x40 [ 546.034440][ C0] console_unlock+0xd1/0x1c0 [ 546.034467][ C0] ? __pfx_console_unlock+0x10/0x10 [ 546.034496][ C0] ? vprintk_emit+0x2cf/0x560 [ 546.034521][ C0] ? vprintk_emit+0x2cf/0x560 [ 546.034549][ C0] vprintk_emit+0x485/0x560 [ 546.034577][ C0] ? __pfx_vprintk_emit+0x10/0x10 [ 546.034604][ C0] ? __lock_acquire+0x6b5/0x2cf0 [ 546.034630][ C0] _printk+0xdd/0x130 [ 546.034646][ C0] ? trace_sched_exit_tp+0x3a/0x150 [ 546.034669][ C0] ? __pfx__printk+0x10/0x10 [ 546.034688][ C0] ? __netdev_printk+0x1bf/0x480 [ 546.034751][ C0] netdev_info+0x11e/0x180 [ 546.034774][ C0] ? __pfx_netdev_info+0x10/0x10 [ 546.034794][ C0] ? bond_change_active_slave+0x6e4/0x35f0 [ 546.034901][ C0] __dev_set_promiscuity+0x2e7/0x710 [ 546.034950][ C0] ? __pfx___mutex_unlock_slowpath+0x10/0x10 [ 546.034971][ C0] netif_set_promiscuity+0x50/0xe0 [ 546.034999][ C0] dev_set_promiscuity+0x126/0x260 [ 546.035054][ C0] bond_change_active_slave+0xc99/0x35f0 [ 546.035093][ C0] ? __pfx_bond_change_active_slave+0x10/0x10 [ 546.035119][ C0] ? __netdev_upper_dev_unlink+0x63b/0x790 [ 546.035147][ C0] ? __netdev_printk+0x1bf/0x480 [ 546.035171][ C0] ? netdev_info+0x11e/0x180 [ 546.035191][ C0] ? __pfx_netdev_info+0x10/0x10 [ 546.035208][ C0] ? netdev_upper_dev_unlink+0x99/0xe0 [ 546.035241][ C0] __bond_release_one+0x83c/0x1150 [ 546.035268][ C0] ? __pfx___bond_release_one+0x10/0x10 [ 546.035284][ C0] ? __mutex_trylock_common+0x158/0x260 [ 546.035327][ C0] ? trace_contention_end+0x3d/0x150 [ 546.035362][ C0] bond_netdev_event+0x53d/0xfc0 [ 546.035413][ C0] ? __pfx_bond_netdev_event+0x10/0x10 [ 546.035439][ C0] ? __pfx___mutex_unlock_slowpath+0x10/0x10 [ 546.035458][ C0] ? lockdep_hardirqs_on+0x7a/0x110 [ 546.035485][ C0] ? __local_bh_enable_ip+0xd0/0x130 [ 546.035509][ C0] ? igmp_netdev_event+0x7c/0x750 [ 546.035564][ C0] notifier_call_chain+0x1be/0x400 [ 546.035597][ C0] unregister_netdevice_many_notify+0x186a/0x2370 [ 546.035627][ C0] ? __pfx_unregister_netdevice_many_notify+0x10/0x10 [ 546.035649][ C0] ? __pfx_unregister_netdevice_queue+0x10/0x10 [ 546.035668][ C0] ? net_generic+0x1e/0x240 [ 546.035691][ C0] ? __pfx_nexthop_net_exit_rtnl+0x10/0x10 [ 546.035757][ C0] ? mutex_is_locked+0x17/0x50 [ 546.035782][ C0] ? nexthop_net_exit_rtnl+0x232/0x270 [ 546.035809][ C0] ops_undo_list+0x3d3/0x940 [ 546.035837][ C0] ? __pfx_ops_undo_list+0x10/0x10 [ 546.035864][ C0] ? idr_destroy+0x218/0x290 [ 546.035887][ C0] ? do_raw_spin_unlock+0xf5/0x210 [ 546.035907][ C0] cleanup_net+0x56b/0x800 [ 546.035933][ C0] ? __pfx_cleanup_net+0x10/0x10 [ 546.035962][ C0] ? process_scheduled_works+0xa25/0x1830 [ 546.035985][ C0] ? process_scheduled_works+0xa25/0x1830 [ 546.036008][ C0] process_scheduled_works+0xb02/0x1830 [ 546.036053][ C0] ? __pfx_process_scheduled_works+0x10/0x10 [ 546.036080][ C0] ? assign_work+0x3d5/0x5e0 [ 546.036105][ C0] worker_thread+0xa50/0xfc0 [ 546.036144][ C0] kthread+0x388/0x470 [ 546.036161][ C0] ? __pfx_worker_thread+0x10/0x10 [ 546.036182][ C0] ? __pfx_kthread+0x10/0x10 [ 546.036200][ C0] ret_from_fork+0x51e/0xb90 [ 546.036224][ C0] ? __pfx_ret_from_fork+0x10/0x10 [ 546.036246][ C0] ? __switch_to+0xc7d/0x1450 [ 546.036268][ C0] ? __pfx_kthread+0x10/0x10 [ 546.036285][ C0] ret_from_fork_asm+0x1a/0x30 [ 546.036330][ C0] [ 546.056031][ T30] Kernel panic - not syncing: hung_task: blocked tasks [ 546.056098][ T30] CPU: 1 UID: 0 PID: 30 Comm: khungtaskd Not tainted syzkaller #0 PREEMPT(full) [ 546.056166][ T30] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 02/12/2026 [ 546.056204][ T30] Call Trace: [ 546.056228][ T30] [ 546.056259][ T30] vpanic+0x56c/0xa60 [ 546.056346][ T30] ? __pfx___schedule+0x10/0x10 [ 546.056439][ T30] ? __pfx_vpanic+0x10/0x10 [ 546.056544][ T30] panic+0xc5/0xd0 [ 546.056632][ T30] ? __pfx_panic+0x10/0x10 [ 546.056711][ T30] ? preempt_schedule_thunk+0x16/0x30 [ 546.056823][ T30] ? nmi_trigger_cpumask_backtrace+0x2bb/0x300 [ 546.056923][ T30] watchdog+0x1023/0x1030 [ 546.057054][ T30] ? watchdog+0x21a/0x1030 [ 546.057161][ T30] kthread+0x388/0x470 [ 546.057216][ T30] ? __pfx_watchdog+0x10/0x10 [ 546.057301][ T30] ? __pfx_kthread+0x10/0x10 [ 546.057357][ T30] ret_from_fork+0x51e/0xb90 [ 546.057442][ T30] ? __pfx_ret_from_fork+0x10/0x10 [ 546.057547][ T30] ? __switch_to+0xc7d/0x1450 [ 546.057629][ T30] ? __pfx_kthread+0x10/0x10 [ 546.057685][ T30] ret_from_fork_asm+0x1a/0x30 [ 546.057819][ T30] [ 546.059180][ T30] Kernel Offset: disabled