last executing test programs: 5m34.896885319s ago: executing program 1 (id=1563): r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000002c0)=ANY=[@ANYBLOB="480000001000010400"/20, @ANYRES32=0x0, @ANYBLOB="00000000000000002800128009000100626f6e64"], 0x48}}, 0x0) sendmmsg$inet(r0, &(0x7f0000005200)=[{{0x0, 0x4b, &(0x7f0000000000), 0x1}}], 0x1, 0x0) r1 = socket$inet_sctp(0x2, 0x1, 0x84) setsockopt$inet_int(r1, 0x0, 0x8, &(0x7f0000000000)=0x1ff, 0x4) getsockopt$inet_opts(r1, 0x0, 0x9, &(0x7f0000000480)=""/37, &(0x7f0000000340)=0x25) socket(0x10, 0x803, 0x0) 5m34.894877269s ago: executing program 1 (id=1566): r0 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r0, &(0x7f0000000180)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000240)=@delpolicy={0x50, 0x27, 0x1, 0x0, 0x0, {{@in=@private=0xa010100, @in6=@remote, 0x0, 0x0, 0xfffc}}}, 0x50}}, 0x0) sendmmsg$inet(0xffffffffffffffff, &(0x7f0000001940)=[{{0x0, 0x0, &(0x7f0000000380)=[{&(0x7f0000002540)="955232d6c9", 0x5}], 0x1}}], 0x1, 0x4044805) r1 = socket$inet_mptcp(0x2, 0x1, 0x106) ioctl$sock_SIOCSPGRP(r1, 0x8902, &(0x7f0000000200)) ioctl$sock_FIOGETOWN(r1, 0x8903, &(0x7f0000002800)) r2 = syz_init_net_socket$bt_hidp(0x1f, 0x3, 0x6) r3 = syz_init_net_socket$bt_l2cap(0x1f, 0x3, 0x0) connect$bt_l2cap(r3, &(0x7f0000000080)={0x1f, 0x0, @fixed={'\xaa\xaa\xaa\xaa\xaa', 0x10}, 0x7ff}, 0xe) r4 = socket$inet6(0xa, 0x1, 0x0) getsockopt$IP_VS_SO_GET_DESTS(r4, 0x0, 0x484, &(0x7f0000000100)=""/217, &(0x7f0000000200)=0x18) ioctl$sock_bt_hidp_HIDPCONNADD(r2, 0x400448c8, &(0x7f0000000280)={r3, r3, 0x3, 0x8, &(0x7f0000000100)="81839c93f294064c", 0x9, 0xb, 0x6, 0x5508, 0xc336, 0x1, 0xb, 'syz0\x00'}) r5 = syz_genetlink_get_family_id$batadv(&(0x7f0000000240), 0xffffffffffffffff) sendmsg$BATADV_CMD_GET_TRANSTABLE_GLOBAL(r3, &(0x7f0000000400)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x8}, 0xc, &(0x7f00000003c0)={&(0x7f0000000340)={0x1c, r5, 0x20, 0x70bd2a, 0x25dfdbfc, {}, [@BATADV_ATTR_MULTICAST_FORCEFLOOD_ENABLED={0x5, 0x37, 0x1}]}, 0x1c}, 0x1, 0x0, 0x0, 0x8000}, 0x2004c044) ioctl$sock_bt_hidp_HIDPCONNDEL(r2, 0x400448c9, &(0x7f0000000000)={@fixed={'\xaa\xaa\xaa\xaa\xaa', 0x10}}) r6 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r6, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000100)=ANY=[@ANYBLOB="1400000010000700000e0000000000000000000a20000000000a03000000000000000000010000000900010073797a30000000003c000000090a010400000000000000000100000008000a40000000000900020073797a32000000000900010073797a30000000000800054000000002600000000c0a01080000000000000000010000000900020073797a32000000003400038030000080080003400000000224000b80200001800e000100636f6e6e6c696d69740000000c00028008000140000000000900010073797a30"], 0xe4}, 0x1, 0x0, 0x0, 0x24040095}, 0x0) 5m34.497416893s ago: executing program 1 (id=1572): socketpair$unix(0x1, 0x1, 0x0, &(0x7f00000029c0)={0xffffffffffffffff, 0xffffffffffffffff}) sendmsg$inet(r1, &(0x7f00000000c0)={0x0, 0x0, &(0x7f00000001c0)=[{&(0x7f0000000300)="1b6a53", 0x3}], 0x1}, 0x24000041) r2 = socket$inet_icmp_raw(0x2, 0x3, 0x1) syz_init_net_socket$bt_hci(0x1f, 0x3, 0x5) close(0x4) ioctl$sock_FIOGETOWN(r2, 0x8903, &(0x7f0000000040)=0x0) syz_open_procfs$namespace(r3, &(0x7f0000000080)='ns/ipc\x00') unshare(0x6a040000) sendmsg$NL80211_CMD_SET_WOWLAN(0xffffffffffffffff, 0x0, 0x0) r4 = socket$inet6_sctp(0xa, 0x5867a9a085247969, 0x84) setsockopt(r4, 0x84, 0x81, &(0x7f0000000280)="1a00000002000000", 0x8) r5 = socket$nl_generic(0x10, 0x3, 0x10) r6 = syz_genetlink_get_family_id$tipc2(&(0x7f0000005880), 0xffffffffffffffff) sendmsg$TIPC_NL_LINK_SET(r5, &(0x7f0000005d00)={0x0, 0x0, &(0x7f0000005cc0)={&(0x7f0000000180)=ANY=[@ANYBLOB='\x00\x00\x00\x00', @ANYRES16=r6, @ANYBLOB="01002cbd7000fbdbdf2509000000140004800c00078008000300f0ffffff04000780400002800400038008000200970e0000040004002c00038008000100080000000800010009000000080001000008000008000100000800000800020003000000"], 0x68}}, 0x8040) setsockopt$inet_sctp_SCTP_SOCKOPT_BINDX_ADD(r4, 0x84, 0x64, &(0x7f0000000000)=[@in6={0xa, 0x4e23, 0x401, @loopback}], 0x1c) sendto$inet6(r4, &(0x7f0000000100)="b8", 0xffe0, 0x2000c851, &(0x7f0000000140)={0xa, 0x4e23, 0x0, @loopback, 0xffffffff}, 0x1c) setsockopt$inet_sctp6_SCTP_AUTH_DELETE_KEY(r4, 0x84, 0x19, &(0x7f0000000080)={0x0, 0x6}, 0x8) openat$tun(0xffffffffffffff9c, 0x0, 0x40241, 0x0) socket$kcm(0x2, 0x3, 0x2) r7 = socket$inet6_sctp(0xa, 0x1, 0x84) getsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX3(r7, 0x84, 0x6f, 0x0, 0x0) setsockopt$inet_sctp6_SCTP_PEER_ADDR_THLDS(0xffffffffffffffff, 0x84, 0x85, 0x0, 0x0) socketpair(0x8, 0x6, 0x86f6, &(0x7f0000000000)) unshare(0x400) setsockopt$sock_attach_bpf(r0, 0x1, 0x10, &(0x7f0000001280), 0x4) unshare(0x26020480) r8 = bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000340)=ANY=[@ANYBLOB="02000000040000000800000001"], 0xe) bpf$PROG_LOAD(0x5, &(0x7f0000000640)={0x3, 0x10, &(0x7f0000000740)=ANY=[@ANYBLOB="18000000000000000000000000000000b7080000020000006b8a00fe00000000c7080000010000007b8af0ff00000000bda100000000000007000000f8ffffffbfa400000000000007040000f0ffffffb7020000080000fa18230000", @ANYRES32=r8, @ANYBLOB="0000000000000000b704000008000000850000001a00000095"], &(0x7f0000000000)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x2, '\x00', 0x0, @fallback=0x37, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xf63}, 0x94) r9 = socket$inet6(0xa, 0x3, 0x8) setsockopt$inet6_int(r9, 0x29, 0x7, 0x0, 0x0) 5m31.989107124s ago: executing program 1 (id=1590): socketpair(0x2c, 0xa, 0x11, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) setsockopt$MRT_ASSERT(r0, 0x0, 0xcf, &(0x7f0000000000), 0x4) 5m31.863402672s ago: executing program 1 (id=1592): r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000000), 0x40241, 0x0) r1 = socket$inet6_sctp(0xa, 0x1, 0x84) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000040)={'wg2\x00'}) (async) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000200)={'syzkaller1\x00', 0xc201}) (async) r2 = socket$kcm(0x2, 0xa, 0x2) ioctl$SIOCSIFHWADDR(r2, 0x8914, &(0x7f0000000180)={'syzkaller1\x00', @link_local={0x1, 0x80, 0xc2, 0x0, 0x0, 0xe}}) (async) write$tun(r0, &(0x7f0000000240)=ANY=[@ANYBLOB="0800080005000200b6e71400020046200fc000680000030690780a010100e0000001940400004e204e284b81eef70c8246e172ddb01816d624563e6757f68125c1cabfba630e87a53b140797c8e1585b1dd265fd9bdaae88555b7b40060eb99361c1ea9be06768c7c9f80d66e5ae4dbea73d407152f46d3998b9cfee3fabd916568fb91f45518886", @ANYRES32=0x41424344, @ANYRES32=0x41424344, @ANYBLOB="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"], 0xfce) 5m30.002350616s ago: executing program 1 (id=1599): r0 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r0, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000180)={&(0x7f00000008c0)={0x14, 0x26, 0x9, 0x80001, 0x81, {0x6}}, 0x14}, 0x1, 0x0, 0x0, 0x404c005}, 0x4000040) r1 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r1, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000240)=ANY=[@ANYBLOB="140000001000010000000000000000000500000a28000000000a030000000000000000000a00000708000240000000020900010073797a31000000002c000000030a010100000000000000000a0000070900010073797a31000000000900030073797a320000000014000000110001"], 0x7c}, 0x1, 0x0, 0x0, 0x4000}, 0x0) sendmsg$NFT_BATCH(r1, &(0x7f0000009b40)={0x0, 0x0, &(0x7f0000009b00)={&(0x7f0000000100)=ANY=[@ANYBLOB="140000001000010000000000000000000500000a4c000000090a010400000000000000000a0000040900010073797a310000000008000540000000020900020073797a310000000008000a40fffffffc080003400000001408000c4000000e45400000000c0a010100000000000000000a0000060900020073797a31000000000900010073797a310000000014000380100000800c00018006000100d103000014000000110001"], 0xb4}, 0x1, 0x0, 0x0, 0x4000850}, 0x40) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000200)={0x6, 0x4, &(0x7f0000000680)=@framed={{0x18, 0x0, 0x0, 0x0, 0x6, 0x0, 0x0, 0x0, 0x1f}, [@ldst={0x1, 0x2, 0x3, 0x2, 0x0, 0x80}]}, &(0x7f0000000000)='GPL\x00', 0x4, 0xb, &(0x7f0000000080)=""/11, 0x41000, 0x0, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0xb}, 0x94) r2 = socket$nl_netfilter(0x10, 0x3, 0xc) r3 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) bind$bt_hci(r3, &(0x7f0000000000)={0x1f, 0xffffffffffffffff, 0x3}, 0x6) getsockopt$IP_VS_SO_GET_DAEMON(r3, 0x0, 0x487, 0x0, &(0x7f00000001c0)) sendmsg$NFT_MSG_GETSETELEM(r2, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000140)={0x48, 0xd, 0xa, 0x801, 0x0, 0x0, {0xa, 0x0, 0x1}, [@NFTA_SET_ELEM_LIST_SET={0x9, 0x2, 'syz1\x00'}, @NFTA_SET_ELEM_LIST_TABLE={0x9, 0x1, 'syz1\x00'}, @NFTA_SET_ELEM_LIST_ELEMENTS={0x1c, 0x3, 0x0, 0x1, [{0x18, 0x0, 0x0, 0x1, [@NFTA_SET_ELEM_KEY={0xc, 0x1, 0x0, 0x1, [@NFTA_DATA_VALUE={0x6, 0x1, '\r\x00'}]}, @NFTA_SET_ELEM_FLAGS={0x8, 0x3, 0x1, 0x0, 0x1}]}]}]}, 0x48}, 0x1, 0x0, 0x0, 0x4000805}, 0x8000) r4 = socket$nl_generic(0x10, 0x3, 0x10) r5 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX_80211(r5, 0x8933, &(0x7f0000000080)={'wlan1\x00', 0x0}) r7 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_tcp_int(r7, 0x6, 0x13, &(0x7f0000000040)=0x100000001, 0x4) setsockopt$inet6_tcp_TCP_REPAIR_QUEUE(r7, 0x6, 0x14, &(0x7f0000000280)=0x1, 0x4) connect$inet6(r7, &(0x7f0000000080)={0xa, 0x0, 0x0, @ipv4={'\x00', '\xff\xff', @remote}}, 0x1c) sendto$inet6(r7, &(0x7f00000000c0)='\x00', 0x1, 0x24000000, 0x0, 0x0) recvmsg(r7, &(0x7f00000006c0)={0x0, 0x0, &(0x7f0000000b80)=[{&(0x7f0000000780)=""/243, 0x11000}], 0x1}, 0x142) r8 = socket$inet_smc(0x2b, 0x1, 0x0) ioctl$sock_SIOCGIFINDEX_80211(r8, 0x8933, &(0x7f0000000340)={'wlan1\x00'}) r9 = syz_genetlink_get_family_id$nl80211(&(0x7f00000001c0), 0xffffffffffffffff) sendmsg$NL80211_CMD_SET_CQM(r5, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000140)={&(0x7f00000000c0)={0x30, r9, 0x1, 0x0, 0x0, {{}, {@val={0x8, 0x3, r6}, @void}}, [@NL80211_ATTR_CQM={0x14, 0x5e, 0x0, 0x1, [@NL80211_ATTR_CQM_TXE_RATE={0x8, 0x5, 0x805c}, @NL80211_ATTR_CQM_TXE_PKTS={0x8, 0x6, 0x10}]}]}, 0x30}, 0x1, 0x0, 0x0, 0x4c0}, 0x84) sendmsg$NL80211_CMD_GET_STATION(r4, &(0x7f0000000300)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x8000}, 0xc, &(0x7f00000002c0)={&(0x7f00000001c0)={0x4c, r9, 0x8, 0x70bd28, 0x25dfdbfe, {{}, {@void, @void}}, [@NL80211_ATTR_STA_SUPPORTED_RATES={0xb, 0x13, [{0x36, 0x1}, {0x2}, {0x60, 0x1}, {0x30, 0x1}, {0x3}, {0xb, 0x1}, {0x18}]}, @NL80211_ATTR_STA_SUPPORTED_RATES={0x21, 0x13, [{0x60, 0x1}, {0x12, 0x1}, {0x42, 0x1}, {0x18, 0x1}, {0x9}, {0xb, 0x1}, {0x30, 0x1}, {0x5}, {0x24}, {0xb}, {0x6}, {0x12}, {0x6a, 0x1}, {0x30, 0x1}, {0x24}, {0x36}, {0x16, 0x1}, {0x60, 0x1}, {0x5}, {0x3}, {0x24}, {0xc}, {0xb, 0x1}, {0x6, 0x1}, {0x30, 0x1}, {0x16, 0x1}, {0x24, 0x1}, {0x5}, {0x9, 0x1}]}, @NL80211_ATTR_STA_LISTEN_INTERVAL={0x6, 0x12, 0xfe00}]}, 0x4c}, 0x1, 0x0, 0x0, 0x10}, 0x4000000) 5m14.768244515s ago: executing program 32 (id=1599): r0 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r0, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000180)={&(0x7f00000008c0)={0x14, 0x26, 0x9, 0x80001, 0x81, {0x6}}, 0x14}, 0x1, 0x0, 0x0, 0x404c005}, 0x4000040) r1 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r1, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000240)=ANY=[@ANYBLOB="140000001000010000000000000000000500000a28000000000a030000000000000000000a00000708000240000000020900010073797a31000000002c000000030a010100000000000000000a0000070900010073797a31000000000900030073797a320000000014000000110001"], 0x7c}, 0x1, 0x0, 0x0, 0x4000}, 0x0) sendmsg$NFT_BATCH(r1, &(0x7f0000009b40)={0x0, 0x0, &(0x7f0000009b00)={&(0x7f0000000100)=ANY=[@ANYBLOB="140000001000010000000000000000000500000a4c000000090a010400000000000000000a0000040900010073797a310000000008000540000000020900020073797a310000000008000a40fffffffc080003400000001408000c4000000e45400000000c0a010100000000000000000a0000060900020073797a31000000000900010073797a310000000014000380100000800c00018006000100d103000014000000110001"], 0xb4}, 0x1, 0x0, 0x0, 0x4000850}, 0x40) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000200)={0x6, 0x4, &(0x7f0000000680)=@framed={{0x18, 0x0, 0x0, 0x0, 0x6, 0x0, 0x0, 0x0, 0x1f}, [@ldst={0x1, 0x2, 0x3, 0x2, 0x0, 0x80}]}, &(0x7f0000000000)='GPL\x00', 0x4, 0xb, &(0x7f0000000080)=""/11, 0x41000, 0x0, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0xb}, 0x94) r2 = socket$nl_netfilter(0x10, 0x3, 0xc) r3 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) bind$bt_hci(r3, &(0x7f0000000000)={0x1f, 0xffffffffffffffff, 0x3}, 0x6) getsockopt$IP_VS_SO_GET_DAEMON(r3, 0x0, 0x487, 0x0, &(0x7f00000001c0)) sendmsg$NFT_MSG_GETSETELEM(r2, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000140)={0x48, 0xd, 0xa, 0x801, 0x0, 0x0, {0xa, 0x0, 0x1}, [@NFTA_SET_ELEM_LIST_SET={0x9, 0x2, 'syz1\x00'}, @NFTA_SET_ELEM_LIST_TABLE={0x9, 0x1, 'syz1\x00'}, @NFTA_SET_ELEM_LIST_ELEMENTS={0x1c, 0x3, 0x0, 0x1, [{0x18, 0x0, 0x0, 0x1, [@NFTA_SET_ELEM_KEY={0xc, 0x1, 0x0, 0x1, [@NFTA_DATA_VALUE={0x6, 0x1, '\r\x00'}]}, @NFTA_SET_ELEM_FLAGS={0x8, 0x3, 0x1, 0x0, 0x1}]}]}]}, 0x48}, 0x1, 0x0, 0x0, 0x4000805}, 0x8000) r4 = socket$nl_generic(0x10, 0x3, 0x10) r5 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX_80211(r5, 0x8933, &(0x7f0000000080)={'wlan1\x00', 0x0}) r7 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_tcp_int(r7, 0x6, 0x13, &(0x7f0000000040)=0x100000001, 0x4) setsockopt$inet6_tcp_TCP_REPAIR_QUEUE(r7, 0x6, 0x14, &(0x7f0000000280)=0x1, 0x4) connect$inet6(r7, &(0x7f0000000080)={0xa, 0x0, 0x0, @ipv4={'\x00', '\xff\xff', @remote}}, 0x1c) sendto$inet6(r7, &(0x7f00000000c0)='\x00', 0x1, 0x24000000, 0x0, 0x0) recvmsg(r7, &(0x7f00000006c0)={0x0, 0x0, &(0x7f0000000b80)=[{&(0x7f0000000780)=""/243, 0x11000}], 0x1}, 0x142) r8 = socket$inet_smc(0x2b, 0x1, 0x0) ioctl$sock_SIOCGIFINDEX_80211(r8, 0x8933, &(0x7f0000000340)={'wlan1\x00'}) r9 = syz_genetlink_get_family_id$nl80211(&(0x7f00000001c0), 0xffffffffffffffff) sendmsg$NL80211_CMD_SET_CQM(r5, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000140)={&(0x7f00000000c0)={0x30, r9, 0x1, 0x0, 0x0, {{}, {@val={0x8, 0x3, r6}, @void}}, [@NL80211_ATTR_CQM={0x14, 0x5e, 0x0, 0x1, [@NL80211_ATTR_CQM_TXE_RATE={0x8, 0x5, 0x805c}, @NL80211_ATTR_CQM_TXE_PKTS={0x8, 0x6, 0x10}]}]}, 0x30}, 0x1, 0x0, 0x0, 0x4c0}, 0x84) sendmsg$NL80211_CMD_GET_STATION(r4, &(0x7f0000000300)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x8000}, 0xc, &(0x7f00000002c0)={&(0x7f00000001c0)={0x4c, r9, 0x8, 0x70bd28, 0x25dfdbfe, {{}, {@void, @void}}, [@NL80211_ATTR_STA_SUPPORTED_RATES={0xb, 0x13, [{0x36, 0x1}, {0x2}, {0x60, 0x1}, {0x30, 0x1}, {0x3}, {0xb, 0x1}, {0x18}]}, @NL80211_ATTR_STA_SUPPORTED_RATES={0x21, 0x13, [{0x60, 0x1}, {0x12, 0x1}, {0x42, 0x1}, {0x18, 0x1}, {0x9}, {0xb, 0x1}, {0x30, 0x1}, {0x5}, {0x24}, {0xb}, {0x6}, {0x12}, {0x6a, 0x1}, {0x30, 0x1}, {0x24}, {0x36}, {0x16, 0x1}, {0x60, 0x1}, {0x5}, {0x3}, {0x24}, {0xc}, {0xb, 0x1}, {0x6, 0x1}, {0x30, 0x1}, {0x16, 0x1}, {0x24, 0x1}, {0x5}, {0x9, 0x1}]}, @NL80211_ATTR_STA_LISTEN_INTERVAL={0x6, 0x12, 0xfe00}]}, 0x4c}, 0x1, 0x0, 0x0, 0x10}, 0x4000000) 2m43.92770758s ago: executing program 3 (id=3096): socket$inet6_tcp(0xa, 0x1, 0x0) (async) r0 = socket$inet6_tcp(0xa, 0x1, 0x0) bpf$BPF_PROG_DETACH(0x9, &(0x7f00000001c0)=ANY=[@ANYRES32, @ANYRES32, @ANYBLOB="07ff00"/12, @ANYRES32, @ANYBLOB, @ANYRES64=0x0], 0x20) socket$can_raw(0x1d, 0x3, 0x1) (async) r1 = socket$can_raw(0x1d, 0x3, 0x1) ioctl$FS_IOC_GETFSUUID(r1, 0x80111500, 0x0) r2 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) r3 = socket$kcm(0x10, 0x2, 0x0) sendmsg$kcm(r3, &(0x7f0000000600)={0x0, 0x0, &(0x7f00000004c0)=[{&(0x7f0000000340)="2e00000010008188e6b62aa73772cc9f1ba1f848110000005e140602000000000e000a001000000002900000121f", 0x2e}], 0x1}, 0x8044) sendmsg$kcm(r3, &(0x7f0000000600)={0x0, 0xa00, &(0x7f0000000080)=[{&(0x7f0000000040)="2e00000010008188040f80ec59acbc0413a1f848110000005e140602000000000e000a000f00000002800000121f", 0x2e}], 0x1}, 0x8000) (async) sendmsg$kcm(r3, &(0x7f0000000600)={0x0, 0xa00, &(0x7f0000000080)=[{&(0x7f0000000040)="2e00000010008188040f80ec59acbc0413a1f848110000005e140602000000000e000a000f00000002800000121f", 0x2e}], 0x1}, 0x8000) ioctl$sock_kcm_SIOCKCMCLONE(r3, 0x89e2, &(0x7f00000000c0)={r2}) setsockopt$SO_ATTACH_FILTER(r2, 0x1, 0x1a, &(0x7f0000000080)={0x1, &(0x7f0000000040)=[{0x6}]}, 0x10) (async) setsockopt$SO_ATTACH_FILTER(r2, 0x1, 0x1a, &(0x7f0000000080)={0x1, &(0x7f0000000040)=[{0x6}]}, 0x10) socket$alg(0x26, 0x5, 0x0) (async) r4 = socket$alg(0x26, 0x5, 0x0) bind$alg(r4, &(0x7f0000000100)={0x26, 'aead\x00', 0x0, 0x0, 'aegis128-generic\x00'}, 0x58) accept4(r4, 0x0, 0x0, 0x0) (async) r5 = accept4(r4, 0x0, 0x0, 0x0) setsockopt$ALG_SET_KEY(r4, 0x117, 0x1, &(0x7f0000000200)="ad00"/16, 0x10) recvmmsg(r5, &(0x7f0000002440), 0x3ffffffffffff67, 0x0, 0x0) (async) recvmmsg(r5, &(0x7f0000002440), 0x3ffffffffffff67, 0x0, 0x0) syz_init_net_socket$bt_hci(0x1f, 0x3, 0x5) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f05ebbee1, 0x8031, 0xffffffffffffffff, 0x0) mmap(&(0x7f0000000000/0xfbe000)=nil, 0xfbe000, 0x2, 0x31, 0xffffffffffffffff, 0x0) r6 = socket$can_raw(0x1d, 0x3, 0x1) getsockopt$CAN_RAW_JOIN_FILTERS(r6, 0x65, 0x2, 0x0, &(0x7f0000000000)=0x45) syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) (async) syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) setsockopt$sock_int(r0, 0x1, 0xf, &(0x7f0000000180)=0x800001, 0x4) (async) setsockopt$sock_int(r0, 0x1, 0xf, &(0x7f0000000180)=0x800001, 0x4) bind$inet6(r0, &(0x7f0000000140)={0xa, 0x4e22, 0x0, @ipv4={'\x00', '\xff\xff', @empty}}, 0x1c) listen(r0, 0x0) (async) listen(r0, 0x0) r7 = syz_genetlink_get_family_id$ethtool(&(0x7f0000000140), 0xffffffffffffffff) r8 = socket$nl_route(0x10, 0x3, 0x0) r9 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r9, 0x8933, &(0x7f0000000040)={'bridge_slave_0\x00'}) sendmsg$nl_route(r9, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000180)={&(0x7f00000003c0)=ANY=[], 0x28}, 0x1, 0x0, 0x0, 0x44801}, 0x840) sendmsg$nl_route(r8, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000180)=ANY=[@ANYBLOB="380000006d0001002dbd70fafddbdf2500000000", @ANYRES32=r7, @ANYBLOB="0800050045a4000018003480140035"], 0x38}, 0x1, 0x0, 0x0, 0x20004000}, 0x20000000) 2m43.556796236s ago: executing program 3 (id=3099): r0 = socket$nl_generic(0x10, 0x3, 0x10) syz_open_procfs$namespace(0x0, &(0x7f00000000c0)='ns/net\x00') r1 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x16, 0xb, &(0x7f0000000580)=ANY=[@ANYBLOB="18000000000000000000000000000000180000002020702500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000000000000b703000000000000850000007000000095"], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x41100, 0x0, '\x00', 0x0, @flow_dissector, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_PROG_TEST_RUN(0x1c, &(0x7f00000004c0)={r1, 0x3, 0x11, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8}, 0x44) r2 = bpf$PROG_LOAD(0x5, &(0x7f0000000080)={0x3, 0x8, &(0x7f00000003c0)=ANY=[@ANYBLOB="620af8ff0c200021bfa100000000000007010000f8ffffffb702000003000000bd1200000000000085000000d0000000b70000000000000095000000000000003fba6a7d36d9b18ed812a2e2c49e8020a6f4e0e4a9446ca2b5f1cc1a100a9af698393aa0f3881f9c24aa56f15199fad0093c59d66b5ece9f36c70d0f010c5077da80fb982c1e9400c603146cea484a415b76966118b64f751a0f241b072e90080008002d75593a280000c93e64c227c95aa0b784625704f07a72c2918451ebdcf4cef7f9606056fe5c34664c0af9360a1f7a5e6b607130c89f18c0c1089d8b85880000c29c48b45ef4adf634be763288d01aa27ae8b09e13e79ab20b0b8ed8fb7a68af2ad0000000000000006f803c6468082089b302d7bff8f06f7f918d65eae391cb41336023cdcedb5e0125ebbcebddcf10cb2364149215108355ee570f8078be5cab389cd65e7133719acd97cfa107d40224edc5465a932b77e74e802a0d42bc6099ad23000000803a90bce6dc3a13871765df961c2ed3b1006ef6c1ff0900000000000010c63a949e8b7955394ffa82b8e942c89112f40cfd7c3a1d37a6ab87b1586602d985430cea0162ab3fcf4591c926abfb076719237c8d0e60b0eea24492a660583eecdbf5bcd3de3a83209da17a0faf60fd6ad9b97aa5fa68480366c9c6fd6fa5043aa3926b81e3b59c9f081d6a08000000ea2b1a52496dfcaf99431412fd134a996382a1a04d5bb924cfe5f3185418d60532be9c4d2ec7c32f2095e63c8cdc28f74d043ed8dba2f23b01a9aeb980aff9fa3a64709270c701db801f44cf945b7632f32030916f89c6dad7603f2ba2a790d62d6faec2fed44da4928b30142bdda5e6c5d50b83bae616b5054d1e7c13b1355d6f4a8245eaa4997da9c77af4c0eb97fca585ec6bf58351d599e9b61e8caab9c70764b0a8a7583c90b3433b809bdb9fbd48bc873495cbff8a41326eea31ae4e0f75057df3c9d13330ca006bce1a84521f14518c9b476fccbd6c712016219848624b87cec2dbe98223a0eb4fa39f6b5c02e6d6d90756ff57902a8f57010000009700ce0b4b8bc22941330000000000000000000300000000000000000000000010008bc0d955f2a83366b99711e6e8861c46495ba585a4b2d02edc3e28dd279a896249ed85b9806f0b6c4a000000002b43dcacc413b48dafb7a2c8cb482bac0ac502d9ba96ffffff7f00000000df73be83bb7d5ad883ef3b7cda42013d53046da21b40216e14ba2d6af8656bfff17addaedab25b30002abbba7fa725f38400be7c1f001b2cd317902f19e385be9e48dccff72943327d830689da6b53ffffffff631c7771429d1200000033ed846197fcff5e1c7c3d1d6e3a52872baef9753fffffffffffffe09fec2271fe010cd7bb2366fde4a59429738fcc917a57f94f6c453cea623cc5ee0c2a5ff870ce5dfd3467decb05cfd9fcd41df54cdbd9d10a64c108285e71b5565b1768ee58969c41595229df17bcad70fb4021428ce978275d5bc8955778567bc79e13b78249788f11f708008b75d4fe32b561d46ea3abe0fa4d30dc94ef241875f3b4b6ab7929a57affe7d7fa29822aea68a660e717a04becff0f719107000000000000002d7e927123d8ecbbc55bf404571be54c72d978cf2804107f0238abccd32368e57040906df0042e19000000000000002c06f815312e086dd022c074eb8a322fb0bf47c0a8d154b405c37feaf3dd95f6ef44cd1fe582786105c7df8be4877084d4173731efe895efc71f665c4d75cf2458e35d2c9062ece84c99e061887a20639b41c8c12ee86c50804042b3eac1f879b136345cf67ca3fb2b5e518a75f9e7d7101d5e186c489b3a06fb99e0aa7f23a054de2f4d92d6bd72ee2c9fdc75aaaf1e3e483b4ad055e4af403269b4a39ce40293947d9a631bcbf3583784acbda216550d7aec6b79e30cbd128f54c2d3335457ac0eaaa99bf0bdc14ae358c3b377327ac9ecc34f24c9ae153ec60ac0694da85bff9f5f4df9b3fdf242b985bf16b99c9cc0ad1857036f1a985f369191ae954febb3df464bfe0f773ee9afe72f32a2befb89d3777399f5874c553a2ebe9061fe86e669642e09bb6d163118e4cbe024fd452277c3887d6116c6cc9d8046c216c1f8a9778cb26e22a2a998de5eaeadea2a40da8daccf080842a486721737390cbf3a74cb2003efb9a101b51ab63e9600040000b8a8c9ae3d14f93100c2e0893862eef552fcde2981f48c482bde6e4a4304e50c349f4f9ecee27defd83871c5191e10096e7e60fc3541a2c905a1a95e9571bf38aebd15172f94e3245c582909e2a3bce109b6000000000000000000d6d5210d7560eb92d6a97a27602b81f7636df1535bef1497f90100000000000000abf9010000007740890200d627e87306703be8672dc84eeadba6a41891c170d1ab57075228a9f46ed9bd1f08fb8191bbab2dc51de3a61f0868afc4294859323e7a45319f18101288a0268893373750d10a3fc22dd704e4214de5946912d6c98cd1a9fbe1e7ef8c08acaf30235b920500d2eca55f74a23641f61f2d5b308cf0d031b0c7f0ced69b93e9960ff5f76062adae283d9756237badf4e7965bbe2777e808fcba821aa8e8c5c39609ff85000000000000c1fee30a3f7a85d1b29e58c77685efc0ceb1c8e5729c66018d169fc03aa188546b3ad2a182068e1e3a0e2505bc7f41019645466a31c72ad53bc19faa5401120000793ac48c1b539c75ab40743b00020000a1f68df75cf43f8ecc8d3726602111b40e761fd210a1920382f14d12ca3c3431ee97471c781d0d1280fb00818654a53b6df4b2c97cc1c98d85fda8f80fe908b65550b441233151122b41a8d73062197655b7f0469250a5989cef0e10773920ed3ccee42d2c3eb80159da5c002511e6eb93842054cfce2ac306cb6e472db3fd67a49b6855a694a8d359add43907003223a47a7fae4f3748d5a432825bc40a03aaef1c8488d86dc211dd2a3ba71e0f45492ef1f8b65ccb3dcd251a61b152d02c29ca0a3328fa7753a5cddea1acaae55ae8263fb284b7a6ab2a8826c1b948207c498cf4824ab1ea3225c380fac12f8205d182f8999e0311da5b8378bc841e1787e3a8128dda381a26cb2b365702ff8a27831375b2ddaa2f56e21169f7ca4fd9655ccd4a584acd244e965a0afedaff7c415ff682a4044b3381cc2df28278c9a6824c52048a7cfabda294925cc0956bffa8e950ff5e49f41ae600d830207bf728cd9807933c3c16d80bbea611a18becc2dc38ca0a6f5740f340b76edcd1f539bd43007231dcef58c7b88b5aeedaf9626cb51ce1737c10ab37d4f98a934b0f900e0eb639878a1200629f5503cf679154d27681d7a3744cbcd42af59407c9c8e39c5271868917954e604352ba26171d004f1cb2976fab3fa19c7d3ef9678bff79f5155524f061378f94fb453786c3a6f78b10d383b49e31d1568bd43ee34ce6e6be235aa6207285665c2fba773671da41959f51610963b48930658e2d6125a26085001345b0473240b7e5e91811312c43663e76f711d7219ecdec75c7ea1cf0f8f8fff40247d59bbde2ebb8659197e0f37a71be1b12a182ed7de3acba28561a04b807f7a4647e2ea6d8fb92541d07c3d5e4ba077d3cad9f8ba1919592014c00c8eccb2ca5d48ba7b1c3fb185a4bb79700cf51f818b0c701c8de47d12281a67bdaf4b0c50bee9e8f5936250df2e15c1172e7ea6619f7db330700d1e9e42a035e6fd532f61fbfed9c4a7124a1e38eee50a6bbcd1d4e3f68c3f27dd9a70f1a7c6046237ddfb0b26e197322226367d998010458cd4df10af249ce717f6f45e5176e0ddae3054d7289d4e13ab0912703ee39ce264572b89194fdf7acecc35cf8309d4b680a08eed367dad855fce210f1a7c7222dd360eafb4bef7d58bf83362930af6e3f3f851abdc0003bdf9401b533019e90feb069189100007a82df8d9b5f44ebf9355e7b1b01c9470608d4f306d21004730396a4d6c6d46e1ffac97aa93c36123532a36186575266be4981c847160079421d0137801e553069f8d025c40f287378810defc7f2ed4e15f6af17b21153394f8bcfa6a23a77c8d61c9bbc127a57b8d631f36558d9093dee08bc53d97a8003363421738650a26c8fd87b13026799caf58e59951b125e7f161ca34e2c0dd65a23d01a3cb191e743de07247c7f993cf01166fa2ac1ba02f60550e63a7f50422e478c6b5d87f9bd0567a279a9d85a380db25c43bd0529ad783b9d64aaac1b793afb44b7126e17d2b7c0d6be650de7eeef3f3605af344015d03c3e7819145cb9fe1978c98bf9cf10773db59505ae33708c728844c872dfd2cb0b29754f928c59306ce105ca18cb72f0944d0e4fea0a0abd0285bdaf1b000000c089d640c2facb0d1e6243873ac4b1e1068c45c715b68effb7d58d1f9e726dbf6bd910ca4ce0e075658ede42192cf393a50dcc197b03402fed75083628e5dd38213d353b9049e71f037064b05e73ec00c710f1ffc5737d397d555d1cf8859cc05bea8dc3c6a5b3b6fa1c81707479db1833d593a271253aa11efdb36b74784f2fc286814848e92d8ee541bc179813297a0a4cc3c8f80c28701185bea091f32475e859479b734727afc110e1abcff460172fd1b42e3c0e2a4bf94a060069000010000087c7572a1e7596f89e5c3d5e70640c90815f77b7b13d0000000085a1e1e84900000000000000000000000000b422fc160a458ee5a91a2471e6e56fdabec6c73ce8983fc68f0b7cdcdde632e6f54a07620e8aa116ce9e84fc3cd5e8288a333dcebb233da9186796995ba69487d8f77d2f8800f02d690fc70a08b231cad1bdcf3740a95d4dd1cfe0f417f275493cf33b19ffff93dfdaf7eb00b8ad87cdf7c21bab5af8e2bac54ee5597e6508c1158124a538c36f9bb11fea7d8b8c7e954b1bc7811654a6636b33f271d0923e9ecd1b724b8feffadfc23c07000000f0785fb722f346d6a5dffe1884d4d0cd8f00000092c85ed44db68ab800000000000000406e6ed9b219ad07125381087298e75965d1cc5932ddf9e66351ba332a34bee3e3d562c914c629933f0b8724cf680889ade72558d191d96ee1b84bb64b14aebc6b5194c55dd6890c69a718f9018586c5131c8dc8e0379bafda1a0fd2997ff115215ce23dca8db7236c1554cdaaadcce2f31834c1bd1908d8e1b361034db56be76acb7654a195bc3e98df3a5dffd5b07838a3ef7da3433110e37f7c7cb7f3800de7f99abf910d6949e062747a9c87dcfcc716d6a9c0ec53b9cffe3cfd1df69a76f373d7f997edb9b80bdea1a99c2a6fbb25e035deadaadd7917ebfedd6304a19491769476208684e343f86b4d55a7dbbb07283cb1e35a139d24ebc5b4f8e35a82d3a7f84cb1e02a5a92b53567088be0b1ca023ccd518c0e0715b1c8760801a419ebd2e26440ff7493019bdb655cc88d72d6d7b6bca5a2e19b63ec52fcc49a729f11ab377f7132c543d29646a9378eea0761b7ed9d2172e33ed87c6513c843b180cc00000000006bedf2ed716ca43a941119b96d82b26d9061de240d85ec2cfa462bd52104489bb7a7548d7cc53627031e909c69cb824233975a1ea645de63522407c3a240a37e946f30ebf075ea97846a0a8d2286f3f446b1b99ab83a12ddf8a1c06294eadc3eb3e339591afd5c00000000000000000000000000000000000000000000000000579dad8347a3d16976bb7483840b32db0158fb6c809349333325a7866ca5d3133e33ef1a183cefdb65a79fa71800988c8445029e024822dbcfcab49c3a0aec9bd43e6e14078b260700d849a2aa14c9b593f6dcb1de334c065ecfd65031606e55949c185bcda9fde4f9b46a76b8a24bbcd31b22373eb0473248150cd179405ee1af1183b0c0ce3483dc1d9bf732b0751b78fb211d6706b55960c6431afbc02b3c7e08086573939290bb9e590a3875f02a828bf209d0ed9829dec16ab67a4f59a504e09f55ab82bbd405087a17a229a149c53ee9145500db213cb36489a10957739e481a756e65bde579bbbfb404213f661eeaaffacbcfbfd60b1a715c366da2b37ac7e9e3033f8ec04db1c2412e02ccd0617d9fb646c4897750d068c936c3558a94b05d7c65c0d458c0d70d0aa864bc1e324d3f69b1b4061627da875a4b5c2668ab0990623fe6f3b54cd1c79da4baf256f88750c18486330589473e267fa44e220cf40db662b570c2a2fbba9a34a3dd7bbd8368fe506daa62b45797d4b397905a69e58eb436c08cc78963197adb1b16ad83a1a9b4"], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @sched_cls}, 0x48) bpf$LINK_GET_NEXT_ID(0x1f, &(0x7f0000000180)={0x0, 0x0}, 0x0) r4 = bpf$LINK_GET_FD_BY_ID(0x1e, &(0x7f0000000000)=r3, 0x4) bpf$BPF_LINK_UPDATE(0x1d, &(0x7f0000000040)={r4, r2, 0x0, r2}, 0x5) r5 = bpf$PROG_LOAD(0x5, &(0x7f0000000040)={0x6, 0x4, &(0x7f0000000000)=@framed={{0x18, 0x2, 0x0, 0x0, 0x2}, [@call={0x85, 0x0, 0x0, 0x41}]}, &(0x7f00000001c0)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @xdp, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x100}, 0x94) r6 = socket$netlink(0x10, 0x3, 0xc) bind$netlink(r6, &(0x7f0000514ff4)={0x10, 0x0, 0x0, 0x2ffffffff}, 0xc) setsockopt$netlink_NETLINK_BROADCAST_ERROR(r6, 0x10e, 0x4, &(0x7f0000000140)=0x6, 0x4) setsockopt$sock_int(r6, 0x1, 0x8, &(0x7f0000000200), 0x4) r7 = socket$nl_netfilter(0x10, 0x3, 0xc) accept(0xffffffffffffffff, &(0x7f0000000000)=@x25, &(0x7f0000000080)=0x80) r8 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPCTNL_MSG_CT_NEW(r8, &(0x7f0000000300)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000800)=ANY=[@ANYBLOB="8400000000010104000000000000000002000000240001801400018008000100ac1414bb08000200ac0314bb0c0002800500010000000000240002801400018008000100ac1414aa08000200ac1414000c0002800500010000000000080007400000000010001700000000000000000000000000100016", @ANYBLOB="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"], 0x84}}, 0x0) r9 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPCTNL_MSG_CT_DELETE(r7, &(0x7f0000000300)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000640)={0x14, 0x2, 0x1, 0x5, 0x0, 0x0, {0x2, 0x0, 0x8}}, 0x14}, 0x1, 0x100000000000000, 0x0, 0x20044804}, 0x40040) sendmsg$IPCTNL_MSG_CT_GET_DYING(r9, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000040)={0x14, 0x6, 0x1, 0x401, 0x0, 0x0, {0x0, 0x0, 0x4}}, 0x14}, 0x1, 0x0, 0x0, 0x2404c031}, 0x20000000) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000600)={r5, 0x0, 0x2100, 0x0, &(0x7f0000000100), 0x0, 0x1008, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x9}, 0x50) r10 = socket$nl_generic(0x10, 0x3, 0x10) r11 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_CREATE(r11, &(0x7f0000000180)={0x0, 0x0, &(0x7f00000004c0)={&(0x7f0000000500)={0x54, 0x2, 0x6, 0x5, 0x0, 0x3000000, {0x0, 0x0, 0xfffd}, [@IPSET_ATTR_TYPENAME={0xe, 0x3, 'bitmap:ip\x00'}, @IPSET_ATTR_REVISION={0x5}, @IPSET_ATTR_SETNAME={0x9, 0x2, 'syz1\x00'}, @IPSET_ATTR_SETNAME={0x9, 0x2, 'syz1\x00'}, @IPSET_ATTR_FAMILY={0x5, 0x5, 0x2}, @IPSET_ATTR_PROTOCOL={0x5, 0x1, 0x6}]}, 0x54}}, 0x0) bpf$MAP_CREATE(0x0, &(0x7f00000000c0)=ANY=[@ANYBLOB="1f0000000000000000000000001000", @ANYRES32=0x1, @ANYBLOB="00000000000000000002000000", @ANYRES32=0x0, @ANYRES32], 0x48) r12 = syz_genetlink_get_family_id$fou(&(0x7f0000000200), 0xffffffffffffffff) sendmsg$FOU_CMD_ADD(r10, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000240)={&(0x7f00000002c0)=ANY=[@ANYBLOB="1c000000", @ANYRES16=r12, @ANYBLOB="0100000080000000000001000000050004000100000022964f403d621fff1f91f9f41a808829733f338aef991a9ace815fce31c47a32c8d2eefc84641d1b0f9f7f9df4cf0b89751ae5f456439a041ff3584d115c9aeb28654219a3e83bd57f6142936c40314dd479e1593f9e2c01cbcce3ed437c8299696f316af6fc21a82ad82c6843df46b23f511240f252a3b56ad734fdcbc86708b2cd9c58e87c55b237ad2aacf7518a088babe6c9684414c9617c5b1b54389392de8570e54740045fc9856b4c6de61635a7bbc5e84d94ac1491b5fe2d665b3bffefed5a4f89cb82"], 0x1c}}, 0x0) sendmsg$FOU_CMD_DEL(r0, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000200)={&(0x7f00000001c0)={0x14, r12, 0x1, 0x70bd27}, 0x14}}, 0x0) 2m43.453842434s ago: executing program 3 (id=3101): r0 = syz_init_net_socket$nfc_llcp(0x27, 0x1, 0x1) r1 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r1, &(0x7f000000c2c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000340)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a28000000000a0101000000005e1affd5020000000900010073797a300000000008000240000000032c000000030a01030000e6ff00000000020000000900010073797a30000000000900030073797a320000000014000000110001"], 0x7c}}, 0x0) sendmsg$NFT_BATCH(r1, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000004c0)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a2c000000060a0bfc0000000000000000020000000900010073797a30000000000900020073797a320000000014000000110001"], 0x54}, 0x1, 0x0, 0x0, 0x40820}, 0x0) close(r1) r2 = openat$nci(0xffffffffffffff9c, &(0x7f0000000080), 0x2, 0x0) ioctl$IOCTL_GET_NCIDEV_IDX(r2, 0x0, &(0x7f0000000000)=0x0) bind$nfc_llcp(r0, &(0x7f0000001040)={0x27, r3, 0xffffffffffffffff, 0x5, 0x0, 0x0, "d92984bd1ca44c226af5160e961711a077609475b78411e88509de050000000000f2170e65e3f50327e422000000000000000000000200000000001900", 0x3c}, 0x60) listen(r0, 0x0) r4 = socket$inet_udp(0x2, 0x2, 0x0) ioctl$sock_SIOCADDRT(r4, 0x890b, &(0x7f0000001740)={0x0, @in={0x2, 0x4e21, @broadcast}, @ethernet={0x306, @remote}, @nl=@unspec, 0x7, 0x0, 0x0, 0x0, 0x0, 0x0, 0x9, 0xb, 0x4}) close(r2) syz_init_net_socket$nfc_llcp(0x27, 0x1, 0x1) (async) socket$nl_netfilter(0x10, 0x3, 0xc) (async) sendmsg$NFT_BATCH(r1, &(0x7f000000c2c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000340)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a28000000000a0101000000005e1affd5020000000900010073797a300000000008000240000000032c000000030a01030000e6ff00000000020000000900010073797a30000000000900030073797a320000000014000000110001"], 0x7c}}, 0x0) (async) sendmsg$NFT_BATCH(r1, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000004c0)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a2c000000060a0bfc0000000000000000020000000900010073797a30000000000900020073797a320000000014000000110001"], 0x54}, 0x1, 0x0, 0x0, 0x40820}, 0x0) (async) close(r1) (async) openat$nci(0xffffffffffffff9c, &(0x7f0000000080), 0x2, 0x0) (async) ioctl$IOCTL_GET_NCIDEV_IDX(r2, 0x0, &(0x7f0000000000)) (async) bind$nfc_llcp(r0, &(0x7f0000001040)={0x27, r3, 0xffffffffffffffff, 0x5, 0x0, 0x0, "d92984bd1ca44c226af5160e961711a077609475b78411e88509de050000000000f2170e65e3f50327e422000000000000000000000200000000001900", 0x3c}, 0x60) (async) listen(r0, 0x0) (async) socket$inet_udp(0x2, 0x2, 0x0) (async) ioctl$sock_SIOCADDRT(r4, 0x890b, &(0x7f0000001740)={0x0, @in={0x2, 0x4e21, @broadcast}, @ethernet={0x306, @remote}, @nl=@unspec, 0x7, 0x0, 0x0, 0x0, 0x0, 0x0, 0x9, 0xb, 0x4}) (async) close(r2) (async) 2m43.096930257s ago: executing program 3 (id=3105): r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r1 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_tcp_int(r1, 0x6, 0x13, &(0x7f0000000000)=0x100000001, 0x4) connect$inet6(r1, &(0x7f0000000200)={0xa, 0x0, 0x0, @loopback}, 0x1c) setsockopt$inet6_tcp_TCP_ULP(r1, 0x6, 0x1f, &(0x7f00000000c0), 0x4) getsockopt$bt_l2cap_L2CAP_CONNINFO(0xffffffffffffffff, 0x6, 0x2, &(0x7f0000000140), &(0x7f0000000180)=0x6) setsockopt$inet6_tcp_TLS_TX(r1, 0x11a, 0x1, &(0x7f0000000540)=@gcm_128={{0x303}, "ffffffffffffffe2", "8e083700daf38a6d69e9b5e9c2f133d7", '\x00', "12772541f8eb02bb"}, 0x28) shutdown(r1, 0x1) r2 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000002c0)='freezer.state\x00', 0x275a, 0x0) write$cgroup_int(r2, &(0x7f0000000000), 0xffffff6a) sendfile(r1, r2, 0x0, 0xffffffff004) r3 = syz_genetlink_get_family_id$netlbl_mgmt(&(0x7f0000000300), r0) r4 = syz_genetlink_get_family_id$ieee802154(&(0x7f0000000040), r0) sendmsg$IEEE802154_LLSEC_ADD_DEVKEY(r0, &(0x7f0000000100)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x400000}, 0xc, &(0x7f00000000c0)={&(0x7f0000000080)={0x38, r4, 0x400, 0x70bd28, 0x25dfdbff, {}, [@IEEE802154_ATTR_LLSEC_FRAME_COUNTER={0x8, 0x2f, 0x7fffffff}, @IEEE802154_ATTR_LLSEC_KEY_MODE={0x5, 0x2b, 0x1}, @IEEE802154_ATTR_LLSEC_KEY_SOURCE_EXTENDED={0xc, 0x2d, {0xaaaaaaaaaaaa0202}}, @IEEE802154_ATTR_SHORT_ADDR={0x6, 0x4, 0xaaa0}]}, 0x38}, 0x1, 0x0, 0x0, 0x4000004}, 0x4000050) sendmsg$NLBL_MGMT_C_PROTOCOLS(r0, &(0x7f0000000d40)={0x0, 0x0, &(0x7f0000000d00)={&(0x7f0000000c80)={0x14, r3, 0x8b3b2c1205c54311, 0x70bd28, 0x25dfdbfc}, 0x14}, 0x1, 0x0, 0x0, 0x40000}, 0x4000100) syz_genetlink_get_family_id$netlbl_unlabel(&(0x7f0000000380), r0) syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) (async) socket$inet6_tcp(0xa, 0x1, 0x0) (async) setsockopt$inet6_tcp_int(r1, 0x6, 0x13, &(0x7f0000000000)=0x100000001, 0x4) (async) connect$inet6(r1, &(0x7f0000000200)={0xa, 0x0, 0x0, @loopback}, 0x1c) (async) setsockopt$inet6_tcp_TCP_ULP(r1, 0x6, 0x1f, &(0x7f00000000c0), 0x4) (async) getsockopt$bt_l2cap_L2CAP_CONNINFO(0xffffffffffffffff, 0x6, 0x2, &(0x7f0000000140), &(0x7f0000000180)=0x6) (async) setsockopt$inet6_tcp_TLS_TX(r1, 0x11a, 0x1, &(0x7f0000000540)=@gcm_128={{0x303}, "ffffffffffffffe2", "8e083700daf38a6d69e9b5e9c2f133d7", '\x00', "12772541f8eb02bb"}, 0x28) (async) shutdown(r1, 0x1) (async) openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000002c0)='freezer.state\x00', 0x275a, 0x0) (async) write$cgroup_int(r2, &(0x7f0000000000), 0xffffff6a) (async) sendfile(r1, r2, 0x0, 0xffffffff004) (async) syz_genetlink_get_family_id$netlbl_mgmt(&(0x7f0000000300), r0) (async) syz_genetlink_get_family_id$ieee802154(&(0x7f0000000040), r0) (async) sendmsg$IEEE802154_LLSEC_ADD_DEVKEY(r0, &(0x7f0000000100)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x400000}, 0xc, &(0x7f00000000c0)={&(0x7f0000000080)={0x38, r4, 0x400, 0x70bd28, 0x25dfdbff, {}, [@IEEE802154_ATTR_LLSEC_FRAME_COUNTER={0x8, 0x2f, 0x7fffffff}, @IEEE802154_ATTR_LLSEC_KEY_MODE={0x5, 0x2b, 0x1}, @IEEE802154_ATTR_LLSEC_KEY_SOURCE_EXTENDED={0xc, 0x2d, {0xaaaaaaaaaaaa0202}}, @IEEE802154_ATTR_SHORT_ADDR={0x6, 0x4, 0xaaa0}]}, 0x38}, 0x1, 0x0, 0x0, 0x4000004}, 0x4000050) (async) sendmsg$NLBL_MGMT_C_PROTOCOLS(r0, &(0x7f0000000d40)={0x0, 0x0, &(0x7f0000000d00)={&(0x7f0000000c80)={0x14, r3, 0x8b3b2c1205c54311, 0x70bd28, 0x25dfdbfc}, 0x14}, 0x1, 0x0, 0x0, 0x40000}, 0x4000100) (async) syz_genetlink_get_family_id$netlbl_unlabel(&(0x7f0000000380), r0) (async) 2m42.822319285s ago: executing program 3 (id=3106): bpf$ITER_CREATE(0x21, &(0x7f0000000100), 0x8) r0 = bpf$PROG_LOAD(0x5, &(0x7f00000003c0)={0x15, 0x3, &(0x7f0000000580)=ANY=[@ANYBLOB="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"], &(0x7f0000003ff6)='syzkaller\x00', 0x1, 0xc3, &(0x7f00000002c0)=""/195, 0x40f00, 0x0, '\x00', 0x0, @sk_reuseport=0x27}, 0x94) r1 = socket$inet_udp(0x2, 0x2, 0x0) setsockopt$sock_int(r1, 0x1, 0x1000000000000f, &(0x7f0000000180)=0x57bb, 0x3c) setsockopt$sock_attach_bpf(r1, 0x1, 0x34, &(0x7f00000000c0)=r0, 0x4) close(0x3) setsockopt$SO_ATTACH_FILTER(r1, 0x1, 0x33, &(0x7f00000a2000)={0x1, &(0x7f0000000200)=[{0x6}]}, 0x10) 2m42.74995401s ago: executing program 3 (id=3107): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r0, &(0x7f0000000840)={0x0, 0x0, &(0x7f0000000100)={&(0x7f000000c300)={{0x14}, [@NFT_MSG_NEWSET={0x3c, 0x12, 0xa, 0x9, 0x0, 0x0, {0x2}, [@NFTA_SET_NAME={0x9, 0x2, 'syz1\x00'}, @NFTA_SET_KEY_TYPE={0x8, 0x4, 0x1, 0x0, 0x4000000}, @NFTA_SET_TABLE={0x9, 0x1, 'syz0\x00'}, @NFTA_SET_FLAGS={0x8, 0x3, 0x1, 0x0, 0x4}]}], {0x14}}, 0x64}}, 0x0) r1 = socket$inet_sctp(0x2, 0x5, 0x84) r2 = socket$inet6_sctp(0xa, 0x5, 0x84) setsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX_OLD(r2, 0x84, 0x6b, &(0x7f0000000080)=[@in6={0xa, 0x0, 0x0, @rand_addr=' \x01\x00'}], 0x1c) setsockopt(r2, 0x84, 0x7f, &(0x7f0000000040)="020000000980ffff", 0x8) setsockopt$SO_TIMESTAMPING(r2, 0x1, 0x41, &(0x7f0000000200)=0x78, 0x4) recvmsg(r2, &(0x7f0000000300)={0x0, 0x0, 0x0}, 0x0) getsockopt$inet_sctp6_SCTP_PR_SUPPORTED(r2, 0x84, 0x71, &(0x7f0000000000)={0x0}, &(0x7f0000000140)=0x8) getsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX3(r2, 0x84, 0x6f, &(0x7f0000000340)={r3, 0xa0, &(0x7f0000000240)=[@in={0x2, 0x4e24, @private=0xa010101}, @in6={0xa, 0x4e21, 0x200, @empty, 0x28}, @in6={0xa, 0x4e23, 0x9, @mcast2}, @in={0x2, 0x4e20, @loopback}, @in6={0xa, 0x4e24, 0x3, @loopback, 0x5}, @in={0x2, 0x4e23, @empty}, @in6={0xa, 0x4e21, 0x9, @initdev={0xfe, 0x88, '\x00', 0x0, 0x0}, 0x5d}]}, &(0x7f0000000380)=0x10) r4 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r4, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000001ac0)={&(0x7f00000041c0)={0x14, 0x26, 0x1, 0xf0bd26, 0x25dfdbfc, {0x7}}, 0x14}, 0x1, 0x0, 0x0, 0x4000d}, 0x20048000) sendmmsg$inet_sctp(r1, &(0x7f00000001c0)=[{&(0x7f0000000080)=@in6={0xa, 0x4e23, 0x7fff, @ipv4={'\x00', '\xff\xff', @private=0xa010100}, 0x8}, 0x1c, &(0x7f0000000180)=[{&(0x7f0000000100)="f4", 0x1}], 0x1, &(0x7f0000000200)=ANY=[], 0x30}], 0x1, 0x20000044) r5 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r5, &(0x7f00000000c0)={0x0, 0xfffffffffffffcf6, &(0x7f0000000040)={&(0x7f0000000200)=ANY=[@ANYRES32], 0x110}}, 0x0) socket$nl_netfilter(0x10, 0x3, 0xc) (async) sendmsg$NFT_BATCH(r0, &(0x7f0000000840)={0x0, 0x0, &(0x7f0000000100)={&(0x7f000000c300)={{0x14}, [@NFT_MSG_NEWSET={0x3c, 0x12, 0xa, 0x9, 0x0, 0x0, {0x2}, [@NFTA_SET_NAME={0x9, 0x2, 'syz1\x00'}, @NFTA_SET_KEY_TYPE={0x8, 0x4, 0x1, 0x0, 0x4000000}, @NFTA_SET_TABLE={0x9, 0x1, 'syz0\x00'}, @NFTA_SET_FLAGS={0x8, 0x3, 0x1, 0x0, 0x4}]}], {0x14}}, 0x64}}, 0x0) (async) socket$inet_sctp(0x2, 0x5, 0x84) (async) socket$inet6_sctp(0xa, 0x5, 0x84) (async) setsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX_OLD(r2, 0x84, 0x6b, &(0x7f0000000080)=[@in6={0xa, 0x0, 0x0, @rand_addr=' \x01\x00'}], 0x1c) (async) setsockopt(r2, 0x84, 0x7f, &(0x7f0000000040)="020000000980ffff", 0x8) (async) setsockopt$SO_TIMESTAMPING(r2, 0x1, 0x41, &(0x7f0000000200)=0x78, 0x4) (async) recvmsg(r2, &(0x7f0000000300)={0x0, 0x0, 0x0}, 0x0) (async) getsockopt$inet_sctp6_SCTP_PR_SUPPORTED(r2, 0x84, 0x71, &(0x7f0000000000), &(0x7f0000000140)=0x8) (async) getsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX3(r2, 0x84, 0x6f, &(0x7f0000000340)={r3, 0xa0, &(0x7f0000000240)=[@in={0x2, 0x4e24, @private=0xa010101}, @in6={0xa, 0x4e21, 0x200, @empty, 0x28}, @in6={0xa, 0x4e23, 0x9, @mcast2}, @in={0x2, 0x4e20, @loopback}, @in6={0xa, 0x4e24, 0x3, @loopback, 0x5}, @in={0x2, 0x4e23, @empty}, @in6={0xa, 0x4e21, 0x9, @initdev={0xfe, 0x88, '\x00', 0x0, 0x0}, 0x5d}]}, &(0x7f0000000380)=0x10) (async) socket$nl_generic(0x10, 0x3, 0x10) (async) sendmsg$nl_generic(r4, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000001ac0)={&(0x7f00000041c0)={0x14, 0x26, 0x1, 0xf0bd26, 0x25dfdbfc, {0x7}}, 0x14}, 0x1, 0x0, 0x0, 0x4000d}, 0x20048000) (async) sendmmsg$inet_sctp(r1, &(0x7f00000001c0)=[{&(0x7f0000000080)=@in6={0xa, 0x4e23, 0x7fff, @ipv4={'\x00', '\xff\xff', @private=0xa010100}, 0x8}, 0x1c, &(0x7f0000000180)=[{&(0x7f0000000100)="f4", 0x1}], 0x1, &(0x7f0000000200)=ANY=[], 0x30}], 0x1, 0x20000044) (async) socket$nl_netfilter(0x10, 0x3, 0xc) (async) sendmsg$NFT_BATCH(r5, &(0x7f00000000c0)={0x0, 0xfffffffffffffcf6, &(0x7f0000000040)={&(0x7f0000000200)=ANY=[@ANYRES32], 0x110}}, 0x0) (async) 2m27.625268322s ago: executing program 33 (id=3107): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r0, &(0x7f0000000840)={0x0, 0x0, &(0x7f0000000100)={&(0x7f000000c300)={{0x14}, [@NFT_MSG_NEWSET={0x3c, 0x12, 0xa, 0x9, 0x0, 0x0, {0x2}, [@NFTA_SET_NAME={0x9, 0x2, 'syz1\x00'}, @NFTA_SET_KEY_TYPE={0x8, 0x4, 0x1, 0x0, 0x4000000}, @NFTA_SET_TABLE={0x9, 0x1, 'syz0\x00'}, @NFTA_SET_FLAGS={0x8, 0x3, 0x1, 0x0, 0x4}]}], {0x14}}, 0x64}}, 0x0) r1 = socket$inet_sctp(0x2, 0x5, 0x84) r2 = socket$inet6_sctp(0xa, 0x5, 0x84) setsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX_OLD(r2, 0x84, 0x6b, &(0x7f0000000080)=[@in6={0xa, 0x0, 0x0, @rand_addr=' \x01\x00'}], 0x1c) setsockopt(r2, 0x84, 0x7f, &(0x7f0000000040)="020000000980ffff", 0x8) setsockopt$SO_TIMESTAMPING(r2, 0x1, 0x41, &(0x7f0000000200)=0x78, 0x4) recvmsg(r2, &(0x7f0000000300)={0x0, 0x0, 0x0}, 0x0) getsockopt$inet_sctp6_SCTP_PR_SUPPORTED(r2, 0x84, 0x71, &(0x7f0000000000)={0x0}, &(0x7f0000000140)=0x8) getsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX3(r2, 0x84, 0x6f, &(0x7f0000000340)={r3, 0xa0, &(0x7f0000000240)=[@in={0x2, 0x4e24, @private=0xa010101}, @in6={0xa, 0x4e21, 0x200, @empty, 0x28}, @in6={0xa, 0x4e23, 0x9, @mcast2}, @in={0x2, 0x4e20, @loopback}, @in6={0xa, 0x4e24, 0x3, @loopback, 0x5}, @in={0x2, 0x4e23, @empty}, @in6={0xa, 0x4e21, 0x9, @initdev={0xfe, 0x88, '\x00', 0x0, 0x0}, 0x5d}]}, &(0x7f0000000380)=0x10) r4 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r4, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000001ac0)={&(0x7f00000041c0)={0x14, 0x26, 0x1, 0xf0bd26, 0x25dfdbfc, {0x7}}, 0x14}, 0x1, 0x0, 0x0, 0x4000d}, 0x20048000) sendmmsg$inet_sctp(r1, &(0x7f00000001c0)=[{&(0x7f0000000080)=@in6={0xa, 0x4e23, 0x7fff, @ipv4={'\x00', '\xff\xff', @private=0xa010100}, 0x8}, 0x1c, &(0x7f0000000180)=[{&(0x7f0000000100)="f4", 0x1}], 0x1, &(0x7f0000000200)=ANY=[], 0x30}], 0x1, 0x20000044) r5 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r5, &(0x7f00000000c0)={0x0, 0xfffffffffffffcf6, &(0x7f0000000040)={&(0x7f0000000200)=ANY=[@ANYRES32], 0x110}}, 0x0) socket$nl_netfilter(0x10, 0x3, 0xc) (async) sendmsg$NFT_BATCH(r0, &(0x7f0000000840)={0x0, 0x0, &(0x7f0000000100)={&(0x7f000000c300)={{0x14}, [@NFT_MSG_NEWSET={0x3c, 0x12, 0xa, 0x9, 0x0, 0x0, {0x2}, [@NFTA_SET_NAME={0x9, 0x2, 'syz1\x00'}, @NFTA_SET_KEY_TYPE={0x8, 0x4, 0x1, 0x0, 0x4000000}, @NFTA_SET_TABLE={0x9, 0x1, 'syz0\x00'}, @NFTA_SET_FLAGS={0x8, 0x3, 0x1, 0x0, 0x4}]}], {0x14}}, 0x64}}, 0x0) (async) socket$inet_sctp(0x2, 0x5, 0x84) (async) socket$inet6_sctp(0xa, 0x5, 0x84) (async) setsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX_OLD(r2, 0x84, 0x6b, &(0x7f0000000080)=[@in6={0xa, 0x0, 0x0, @rand_addr=' \x01\x00'}], 0x1c) (async) setsockopt(r2, 0x84, 0x7f, &(0x7f0000000040)="020000000980ffff", 0x8) (async) setsockopt$SO_TIMESTAMPING(r2, 0x1, 0x41, &(0x7f0000000200)=0x78, 0x4) (async) recvmsg(r2, &(0x7f0000000300)={0x0, 0x0, 0x0}, 0x0) (async) getsockopt$inet_sctp6_SCTP_PR_SUPPORTED(r2, 0x84, 0x71, &(0x7f0000000000), &(0x7f0000000140)=0x8) (async) getsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX3(r2, 0x84, 0x6f, &(0x7f0000000340)={r3, 0xa0, &(0x7f0000000240)=[@in={0x2, 0x4e24, @private=0xa010101}, @in6={0xa, 0x4e21, 0x200, @empty, 0x28}, @in6={0xa, 0x4e23, 0x9, @mcast2}, @in={0x2, 0x4e20, @loopback}, @in6={0xa, 0x4e24, 0x3, @loopback, 0x5}, @in={0x2, 0x4e23, @empty}, @in6={0xa, 0x4e21, 0x9, @initdev={0xfe, 0x88, '\x00', 0x0, 0x0}, 0x5d}]}, &(0x7f0000000380)=0x10) (async) socket$nl_generic(0x10, 0x3, 0x10) (async) sendmsg$nl_generic(r4, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000001ac0)={&(0x7f00000041c0)={0x14, 0x26, 0x1, 0xf0bd26, 0x25dfdbfc, {0x7}}, 0x14}, 0x1, 0x0, 0x0, 0x4000d}, 0x20048000) (async) sendmmsg$inet_sctp(r1, &(0x7f00000001c0)=[{&(0x7f0000000080)=@in6={0xa, 0x4e23, 0x7fff, @ipv4={'\x00', '\xff\xff', @private=0xa010100}, 0x8}, 0x1c, &(0x7f0000000180)=[{&(0x7f0000000100)="f4", 0x1}], 0x1, &(0x7f0000000200)=ANY=[], 0x30}], 0x1, 0x20000044) (async) socket$nl_netfilter(0x10, 0x3, 0xc) (async) sendmsg$NFT_BATCH(r5, &(0x7f00000000c0)={0x0, 0xfffffffffffffcf6, &(0x7f0000000040)={&(0x7f0000000200)=ANY=[@ANYRES32], 0x110}}, 0x0) (async) 4.359843516s ago: executing program 2 (id=4024): bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000440)={0x1a, 0x3, &(0x7f0000000500)=ANY=[@ANYBLOB="1800000000000000000000000000000495"], &(0x7f00000001c0)='GPL\x00', 0x1, 0x0, 0x0, 0x41100, 0x3c, '\x00', 0x0, 0x1a, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x2309e}, 0x94) 4.223974182s ago: executing program 2 (id=4029): r0 = socket$alg(0x26, 0x5, 0x0) bind$alg(r0, &(0x7f00000001c0)={0x26, 'skcipher\x00', 0x0, 0x0, 'essiv(cbc(aes),sha256)\x00'}, 0x58) setsockopt$ALG_SET_KEY(r0, 0x117, 0x1, &(0x7f0000000280)="ad56b6c5820fae9d6dcd3292ea54c7beef915d564c90c200", 0x18) r1 = accept4(r0, 0x0, 0x0, 0x800) sendmmsg$alg(r1, &(0x7f0000000040)=[{0x0, 0x0, 0x0, 0x0, &(0x7f0000000380)=[@op={0x18, 0x117, 0x3, 0x1}], 0x18}], 0x1, 0x48000) sendto(r1, &(0x7f0000000840)="6a92ae12e99602a00300c03200000100", 0x10, 0x4c080, 0x0, 0x0) recvmsg(r1, &(0x7f00000005c0)={0x0, 0x0, &(0x7f00000001c0)=[{&(0x7f00000000c0)=""/81, 0x51}], 0x1}, 0x0) 4.096316844s ago: executing program 2 (id=4034): sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000500)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000000)=@bridge_setlink={0x20, 0x13, 0xa2f, 0x70bd2b, 0x0, {0x7, 0x0, 0x68, 0x0, 0x940, 0x27025}}, 0x20}, 0x1, 0x0, 0x0, 0x240048d4}, 0x0) r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$netlbl_unlabel(&(0x7f0000000440), r0) sendmsg$NLBL_UNLABEL_C_STATICLISTDEF(r0, &(0x7f0000000500)={0x0, 0x0, &(0x7f00000004c0)={&(0x7f0000000080)=ANY=[@ANYBLOB="14000000", @ANYRES16=r1, @ANYBLOB="07ef00"/14], 0x14}, 0x1, 0x0, 0x0, 0x1}, 0x45080) r2 = socket$rds(0x15, 0x5, 0x0) ioctl$sock_proto_private(r2, 0x89e0, &(0x7f0000001080)) (async) r3 = socket$kcm(0x10, 0x2, 0x0) (async) r4 = socket$nl_netfilter(0x10, 0x3, 0xc) (async) r5 = openat$tun(0xffffffffffffff9c, &(0x7f0000000100), 0x0, 0x0) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000680)={0x18, 0x5, &(0x7f0000000000)=ANY=[], &(0x7f0000000040)='GPL\x00', 0x8, 0xfa, &(0x7f0000000880)=""/236, 0x41000}, 0x94) (async) ioctl$TUNSETIFF(r5, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x2}) (async) r6 = openat$tun(0xffffffffffffff9c, &(0x7f0000000400), 0x0, 0x0) close(r6) (async, rerun: 64) r7 = socket$netlink(0x10, 0x3, 0x0) (rerun: 64) ioctl$SIOCSIFHWADDR(r6, 0x8914, &(0x7f0000002280)={'syzkaller0\x00', @multicast}) r8 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r8, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r8, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000580)={&(0x7f0000000600)=@newqdisc={0x4c, 0x24, 0x4ee4e6a52ff56541, 0x1, 0x25dfdbfd, {0x0, 0x0, 0x0, r9, {0x0, 0xb}, {0xffff, 0xffff}, {0xfff2}}, [@qdisc_kind_options=@q_netem={{0xa}, {0x1c, 0x2, {{0x3, 0x3, 0x6361, 0x5, 0xffffffff, 0x3}}}}]}, 0x4c}, 0x1, 0x0, 0x0, 0x40088c1}, 0x0) sendmsg$nl_route_sched(r8, &(0x7f00000003c0)={0x0, 0x0, &(0x7f0000000300)={&(0x7f00000004c0)=@newqdisc={0x48, 0x24, 0x4ee4e6a52ff56541, 0x70b926, 0x25dfdc01, {0x0, 0x0, 0x0, r9, {0x0, 0xd}, {0xffff, 0xb}, {0xffff, 0xffe0}}, [@qdisc_kind_options=@q_fq_codel={{0xd}, {0x14, 0x2, [@TCA_FQ_CODEL_CE_THRESHOLD={0x8, 0x7, 0xfffffff9}, @TCA_FQ_CODEL_CE_THRESHOLD_MASK={0x5, 0xb, 0x40}]}}]}, 0x48}, 0x1, 0x0, 0x0, 0x240040e0}, 0x4890) (async) r10 = socket$packet(0x11, 0x3, 0x300) sendto$packet(r10, &(0x7f0000000c40)="bad330752181516b2b316f3a277f953286dd", 0x12, 0x2000041, &(0x7f00000001c0)={0x11, 0x88a8, r9, 0x1, 0xd8, 0x6, @link_local}, 0x14) (async, rerun: 32) sendmsg$NFT_BATCH(r4, &(0x7f000000c2c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f00000003c0)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a28000000000a0101000000005e1affd5020000000900010073797a300000000008000240000000032c000000030a01030000e6ff00000000020000000900010073797a30000000000900030073797a320000000014000000110001"], 0x7c}}, 0x0) (async, rerun: 32) sendmsg$NFT_BATCH(r4, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000800)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a2c000000020a09040000000000000000020000000900010073797a30000000000900020073797a320000000020000000080a05000000000000000000020000000900010073797a30"], 0x94}, 0x1, 0x0, 0x0, 0x44002}, 0x0) write$cgroup_subtree(r3, &(0x7f0000000000)=ANY=[@ANYBLOB="563f00001800599c6d0e00009bd029ef8020ab070004000523a608463a3f"], 0xfe33) r11 = socket$nl_netfilter(0x10, 0x3, 0xc) (async) sendmsg$IPSET_CMD_GET_BYINDEX(r7, &(0x7f0000000380)={&(0x7f0000000140)={0x10, 0x0, 0x0, 0x3b96573cb228bf98}, 0xc, &(0x7f0000000340)={&(0x7f0000000180)={0x2c, 0xf, 0x6, 0x301, 0x0, 0x0, {0xa, 0x0, 0xa}, [@IPSET_ATTR_PROTOCOL={0x5}, @IPSET_ATTR_PROTOCOL={0x5}, @IPSET_ATTR_PROTOCOL={0x5}]}, 0x2c}, 0x1, 0x0, 0x0, 0x4c080}, 0x8080) (async, rerun: 64) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000080)={0xffffffffffffffff}) (rerun: 64) ioctl$sock_SIOCGIFINDEX_80211(r12, 0x8b15, &(0x7f0000000000)={'wlan1\x00'}) (async) setsockopt$netlink_NETLINK_RX_RING(r11, 0x10e, 0xb, &(0x7f00000000c0)={0xfffffff6}, 0x10) (async) sendmsg$nl_netfilter(r11, &(0x7f0000000540)={0x0, 0x0, &(0x7f0000000500)={&(0x7f0000000300)=ANY=[@ANYBLOB='\x00\x00\x00\x00\x00\x00\x00\x00\x00'], 0x18}}, 0x0) 3.904250112s ago: executing program 2 (id=4036): close(0xffffffffffffffff) syz_open_procfs$namespace(0xffffffffffffffff, &(0x7f0000000300)='ns/net\x00') bpf$BPF_PROG_TEST_RUN(0x1c, 0x0, 0x0) bpf$LINK_DETACH(0x22, &(0x7f0000000340), 0x4) bpf$LINK_GET_NEXT_ID(0x1f, &(0x7f0000000d00), 0x8) ioctl$TUNSETIFF(0xffffffffffffffff, 0x400454ca, &(0x7f0000000000)={'syzkaller1\x00', 0x1}) write$tun(0xffffffffffffffff, 0x0, 0xfdef) r0 = socket$nl_rdma(0x10, 0x3, 0x14) sendmsg$RDMA_NLDEV_CMD_DELLINK(r0, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000080)={0x38, 0x1413, 0x1, 0x0, 0x0, "", [@RDMA_NLDEV_ATTR_DEV_INDEX={0x8}, @RDMA_NLDEV_ATTR_DEV_INDEX={0xfffffffffffffeb9, 0x1, 0x1}, @RDMA_NLDEV_ATTR_DEV_INDEX={0x8}, @RDMA_NLDEV_ATTR_DEV_INDEX={0x8, 0x1, 0x202}, @RDMA_NLDEV_ATTR_DEV_INDEX={0x8, 0x1, 0x2}]}, 0x38}}, 0x0) r1 = socket(0x1d, 0x2, 0x6) mmap(&(0x7f0000000000/0xfff000)=nil, 0xfff000, 0x2, 0x2000000000032, 0xffffffffffffffff, 0x0) ioctl$ifreq_SIOCGIFINDEX_vcan(r1, 0x8933, &(0x7f0000000000)={'vxcan0\x00', 0x0}) r3 = socket(0x10, 0x2, 0x0) ioctl$sock_ipv6_tunnel_SIOCADDTUNNEL(r3, 0x89f1, &(0x7f00000000c0)={'ip6_vti0\x00', &(0x7f0000000000)={'syztnl2\x00', r2, 0x0, 0x20, 0x0, 0x0, 0x0, @dev, @private2, 0x0, 0x40, 0xfc, 0x6}}) 3.680567511s ago: executing program 2 (id=4041): r0 = socket$nl_route(0x10, 0x3, 0x0) (async) r1 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r1, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000580)={&(0x7f0000000340)=@newqdisc={0x4c, 0x24, 0x4ee4e6a52ff56541, 0x1, 0x25dfdbfd, {0x0, 0x0, 0x0, r2, {0x0, 0xb}, {0xffff, 0xffff}, {0xfff2}}, [@qdisc_kind_options=@q_netem={{0xa}, {0x1c, 0x2, {{0x3, 0x3, 0x6361, 0x7, 0xffffffff, 0x3}}}}]}, 0x4c}, 0x1, 0x0, 0x0, 0x40088c1}, 0x0) socket$nl_xfrm(0x10, 0x3, 0x6) (async) sendmsg$nl_route_sched(r1, &(0x7f00000003c0)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000001040)=@newqdisc={0x3c, 0x24, 0x4ee4e6a52ff56541, 0x70b926, 0x25dfdc01, {0x0, 0x0, 0x0, r2, {0x0, 0xd}, {0xffff, 0xb}, {0xffff, 0xffe0}}, [@qdisc_kind_options=@q_codel={{0xa}, {0xc, 0x2, [@TCA_CODEL_CE_THRESHOLD={0x8, 0x5, 0x4}]}}]}, 0x3c}, 0x1, 0x0, 0x0, 0x240040e0}, 0x4890) (async) r3 = socket$packet(0x11, 0x3, 0x300) sendto$packet(r3, &(0x7f00000005c0)="bad330fbc9b55400040000ea0756a85d86dd", 0x12, 0x40, &(0x7f00000001c0)={0x11, 0x8100, r2, 0x1, 0xd8, 0x6, @multicast}, 0x14) (async) sendmsg$nl_route(r0, &(0x7f0000000540)={0x0, 0x0, &(0x7f0000000400)={&(0x7f0000000100)=@ipv4_newaddr={0x54, 0x14, 0x100, 0x70bd26, 0x25dfdbfc, {0x2, 0x18, 0x14, 0xff, r2}, [@IFA_LABEL={0x14, 0x3, 'ip6erspan0\x00'}, @IFA_BROADCAST={0x8, 0x4, @broadcast}, @IFA_RT_PRIORITY={0x8, 0x9, 0x1}, @IFA_FLAGS={0x8}, @IFA_LOCAL={0x8, 0x2, @remote}, @IFA_ADDRESS={0x8, 0x1, @broadcast}]}, 0x54}, 0x1, 0x0, 0x0, 0x20040040}, 0x20008006) r4 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r4, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000007480)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a20000000000a01030000000000000000050000080900010073797a30000000002c000000030a01010000000000000000050000000900010073797a3000000000f3000300737963300000000058000000060a010400000000000000000500400008000b4000000000300004802c000180090001007866726d000000001c0002800500030001000000080001400000000a08000240000000050900010073797a3000000000140000001100010000000000000000000000000a"], 0xcc}}, 0x40) 3.400683369s ago: executing program 2 (id=4044): socket$inet_icmp_raw(0x2, 0x3, 0x1) recvmmsg(0xffffffffffffffff, &(0x7f0000004400), 0x0, 0x2020, 0x0) getsockopt$inet_mptcp_buf(0xffffffffffffffff, 0x6, 0x2, 0xfffffffffffffffd, 0x0) openat$tun(0xffffffffffffff9c, &(0x7f0000000000), 0x40241, 0x0) r0 = socket$inet_icmp_raw(0x2, 0x3, 0x1) setsockopt$IPT_SO_SET_REPLACE(r0, 0x0, 0x40, &(0x7f00000025c0)=@filter={'filter\x00', 0x42, 0x4, 0x348, 0xffffffff, 0xf8, 0x0, 0x1c8, 0xffffffff, 0xffffffff, 0x2b0, 0x2b0, 0x2b0, 0xffffffff, 0x5, 0x0, {[{{@uncond, 0x3127, 0xd0, 0xf8, 0x1ba, {0x46010000}, [@common=@addrtype={{0x30}}, @common=@addrtype={{0x30}}]}, @REJECT={0x28}}, {{@ip={@dev={0xac, 0x14, 0x14, 0x11}, @broadcast, 0xffffffff, 0xff000000, 'vlan1\x00', 'macvlan1\x00', {}, {0xff}, 0x16, 0x0, 0x8}, 0x287, 0x70, 0xd0, 0x0, {0x0, 0x4}}, @common=@SET={0x60, 'SET\x00', 0x0, {{0xffffffffffffffff, [0x4, 0x1], 0x4, 0x1}, {0x0, [0x4, 0x11, 0x5, 0x1], 0x4, 0x3}}}}, {{@ip={@multicast1, @broadcast, 0x0, 0xffffff00, 'lo\x00', 'veth0_virt_wifi\x00'}, 0x0, 0xc0, 0xe8, 0x0, {}, [@common=@osf={{0x50}, {'syz1\x00', 0x0, 0x5, 0x1, 0x1}}]}, @REJECT={0x28}}], {{'\x00', 0x0, 0x70, 0x98}, {0x28}}}}, 0x3a8) socket$nl_xfrm(0x10, 0x3, 0x6) r1 = syz_init_net_socket$bt_l2cap(0x1f, 0x1, 0x3) r2 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r2, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000002980)={0x1fc, 0x3e, 0x1, 0xfffffffe, 0x25dfdbfe, {0x1, 0x7c}, [@nested={0xfe, 0x142, 0x0, 0x1, [@nested={0x4, 0x31}, @generic="c14311d34517e836bc56ecb56a3cac9601bd87f67b52f49d73ee50a402c17177e03c9272b0c717124aadde585afa0d67a557feead5f0165c748cfcd64294b288f91f523cf5d0c5a25ade1b5481bfd71431d507a3db7df53b663533a9248494e279dbc806a6ab6dfa59ceeeaf8202f967a06cd89794543ad07c4b3e9510fa7ab09309e43e20fe76befe6ea5f9483672ace88ed5d7a71baffc3db20b4bbba29fcdf228d131469b884f2689eebd81b2f07ed531aa888a94a4f6ae10758a50bc436c1481368eccca7f8418375b24db6419f7e5a1f657fc08a4761d0ec2c2224e235a5b34", @typed={0xa, 0xa2, 0x0, 0x0, @str='wlan0\x00'}, @typed={0x8, 0x14a, 0x0, 0x0, @u32=0x3}]}, @typed={0x8, 0x5e, 0x0, 0x0, @fd=r0}, @nested={0xe0, 0x2, 0x0, 0x1, [@generic="984984a17805b74333dfa7ff170a04d876c15d09092322ec89fd8da005d55b3bcec5e1e58b353256a7f39abe41f5618c61b6d6e750885910c97f90c3f974d4c1079da7ad66314fb1c71433853a60aa74e16122a5174515a95638fe061d1d667938fddd4df6169839276d898118a67ad2639d8ab46dd82fe99eccd19f8300206c84fbfdd3001967f4b8493e8e4671e28892b32c872b2a264d8c9d55c965911c2836eb4eab2e544ff324d9a5b12fd098e499f794de91a0f17579dc64dbbb3fbf1f5e679f5be0f53b4e022cf55d6601d6270c18ac85977682f2747a99db"]}]}, 0x1fc}}, 0x800c000) socketpair(0x1, 0x1, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) r4 = bpf$MAP_CREATE(0x0, &(0x7f00000000c0)=ANY=[@ANYBLOB="12000000220000000400000002"], 0x48) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000180)={{r4}, &(0x7f0000000200), &(0x7f0000000140)=r3}, 0x20) bpf$MAP_DELETE_ELEM(0x3, &(0x7f0000000080)={r4, &(0x7f0000000040)}, 0x20) r5 = socket$inet6(0xa, 0x3, 0x5) r6 = epoll_create1(0x0) r7 = socket$nl_generic(0x10, 0x3, 0x10) r8 = syz_genetlink_get_family_id$devlink(&(0x7f00000000c0), 0xffffffffffffffff) sendmsg$DEVLINK_CMD_RATE_NEW(r7, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000840)={0x34, r8, 0x1, 0x0, 0x0, {0x3a}, [@handle=@nsim={{0xe}, {0xf, 0x2, {'netdevsim', 0x0}}}]}, 0x34}}, 0x0) r9 = socket(0x200000000000011, 0x2, 0x0) setsockopt$packet_tx_ring(r9, 0x107, 0xd, &(0x7f0000000040)=@req3={0x10000, 0x100000001, 0x10000, 0x1, 0x0, 0x7fffffff, 0x34}, 0x1c) epoll_ctl$EPOLL_CTL_ADD(r6, 0x1, r9, &(0x7f0000000080)={0x14}) r10 = syz_genetlink_get_family_id$smc(&(0x7f0000000000), 0xffffffffffffffff) r11 = syz_init_net_socket$nl_rdma(0x10, 0x3, 0x10) sendmsg$SMC_PNETID_ADD(r11, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000880)={&(0x7f0000000140)={0x40, r10, 0x1, 0x70bd27, 0x5, {}, [@SMC_PNETID_NAME={0x9, 0x1, 'syz0\x00'}, @SMC_PNETID_IBNAME={0x9, 0x3, 'syz1\x00'}, @SMC_PNETID_ETHNAME={0x14, 0x2, 'wlan0\x00'}]}, 0x40}, 0x1, 0x0, 0x0, 0x4}, 0x0) sendmsg$SMC_PNETID_FLUSH(r9, &(0x7f0000000240)={&(0x7f0000000100)={0x10, 0x0, 0x0, 0x400}, 0xc, &(0x7f0000000140)={&(0x7f00000001c0)={0x58, r10, 0x0, 0x70bd27, 0x25dfdbff, {}, [@SMC_PNETID_IBNAME={0x9, 0x3, 'syz0\x00'}, @SMC_PNETID_IBNAME={0x9, 0x3, 'syz1\x00'}, @SMC_PNETID_ETHNAME={0x14, 0x2, 'bond_slave_1\x00'}, @SMC_PNETID_IBNAME={0x9, 0x3, 'syz1\x00'}, @SMC_PNETID_NAME={0x9, 0x1, 'syz1\x00'}]}, 0x58}, 0x1, 0x0, 0x0, 0x20000000}, 0x40080) getsockopt$bt_BT_CHANNEL_POLICY(r9, 0x112, 0xa, &(0x7f0000000040)=0x8, &(0x7f0000000080)=0x4) sendto$l2tp6(r5, 0x0, 0x0, 0x54, &(0x7f0000000180)={0xa, 0x0, 0x10000, @mcast2, 0xfffffffa, 0x4}, 0x20) shutdown(r1, 0x0) recvmmsg(r1, &(0x7f00000055c0), 0x400023c, 0x300, 0x0) 2.911812531s ago: executing program 6 (id=4051): r0 = syz_init_net_socket$bt_l2cap(0x1f, 0x2, 0x0) sendmsg$IPCTNL_MSG_TIMEOUT_GET(0xffffffffffffffff, 0x0, 0x20040000) r1 = socket$nl_rdma(0x10, 0x3, 0x14) r2 = syz_init_net_socket$llc(0x1a, 0x1, 0x0) getsockopt$llc_int(r2, 0x10c, 0x4, &(0x7f0000001b00), &(0x7f0000000000)=0x4) sendmsg$RDMA_NLDEV_CMD_RES_CQ_GET(r1, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000000c0)={0x10, 0x1418, 0x1, 0x2, 0x3}, 0x10}, 0x1, 0x0, 0x0, 0x8}, 0x0) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8b30, &(0x7f0000000040)={'wlan0\x00'}) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8b30, &(0x7f00000000c0)={'wlan0\x00'}) syz_emit_ethernet(0x4a, &(0x7f00000003c0)={@local, @empty, @void, {@ipv6={0x86dd, @tcp={0x0, 0x6, "0a8435", 0x14, 0x2f, 0x0, @remote, @local, {[], {{0x0, 0x22eb, 0x41424344, 0x41424344, 0x0, 0x0, 0x5}}}}}}}, 0x0) 2.392615744s ago: executing program 6 (id=4056): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r0, &(0x7f000000c2c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000340)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a28000000000a0101000000005e1affd5020000000900010073797a300000000008000240000000032c000000030a01030000e6ff00000000020000000900010073797a30000000000900030073797a320000000014000000110001"], 0x7c}}, 0x4000) sendmsg$NFT_MSG_GETRULE(r0, &(0x7f0000000240)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000000)=ANY=[@ANYBLOB="20000000190a01080000000000000000020000000900010073797a3000000000413bc2ba82944cd904a96ac152fbd7e9a86f558e5ee2720126423faf33bc1e451a87d820e41dfde0428c27a3cd367c8ce055e7750709d0a599127719e1afecd5edfef586e6ad4f015426e2a7ae937d496200d530b3e3b08cab37198b0814f84940775a2646ecda765236aa6afdfbd4e7de25cc87e2c141b098763f0900eb9725c76dada2ea192822595d"], 0x20}}, 0x4c004) 2.312846063s ago: executing program 6 (id=4058): r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = socket$inet_icmp_raw(0x2, 0x3, 0x1) r2 = epoll_create1(0x0) epoll_wait(r2, &(0x7f0000000000)=[{}, {}, {}, {}, {}], 0x5, 0x3) bpf$BPF_PROG_DETACH(0x9, &(0x7f0000000080)={@fallback, 0xffffffffffffffff, 0x37, 0x2000}, 0x20) r3 = bpf$MAP_CREATE(0x0, &(0x7f0000000480)=@bloom_filter={0x1e, 0xffff, 0x4, 0x5, 0x1000, 0xffffffffffffffff, 0xffff2d79, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x24, 0x2, 0x3}, 0x50) bpf$BPF_PROG_ATTACH(0x8, &(0x7f0000000000)={@map=r3, 0xffffffffffffffff, 0x24, 0x2000}, 0x20) r4 = bpf$MAP_CREATE(0x0, &(0x7f0000000700)=ANY=[@ANYBLOB="06000000f5c2a69d4c000000440d000020000000100b5356fea394c07491126a0159a597d705abc481ce06aacbb653cb2546315fbe65e8683bb845806624effba69e9fe9ecc12f98f231d3e9e10a6f74f18db88da6f6c741c6a2daeceb5962ae4a82eab7737a848112c175c78afb371809c1d1c8ad93e51960575ad47bd9fb", @ANYRES32, @ANYBLOB="0100"/20, @ANYRES32=0x0, @ANYRES32, @ANYBLOB="0000000003000000ff0100"/28], 0x50) bpf$BPF_PROG_DETACH(0x9, &(0x7f0000000600)=ANY=[@ANYRES32=r4, @ANYRES32, @ANYBLOB="330000001000000000000000", @ANYRES32, @ANYBLOB="8e5b0f41daf2a1d18dc3f51844cc2a45d59a71044ecf93bf479cbd04e059e2a15cfa7c6ca9a9a17999df4af4f1b1337ca21f4a9d46f280d1bc8419901c616f3462c26c09ebbdaa430ab5cb318103b4971e9f7ed8fd8524df7f5701a76f0a445be579dc75536ffd2d93a13813b746552e6bdabd2c1119945013a78a4613f8420b694b83623a6cf419f7410610febe2128252db1b6adf92ec753159a75ee6a7f877b558b82ac2bb740", @ANYRES64=0x0], 0x20) bpf$BPF_PROG_DETACH(0x1c, &(0x7f0000001580)={@fallback=r3, 0xffffffffffffffff, 0x16}, 0x20) r5 = socket$can_raw(0x1d, 0x3, 0x1) setsockopt$CAN_RAW_FD_FRAMES(r5, 0x65, 0x5, &(0x7f0000000040)=0x1, 0x4) ioctl$sock_SIOCGIFINDEX(r5, 0x8933, &(0x7f0000000300)={'lo\x00', 0x0}) sendmsg$can_raw(r5, &(0x7f0000000000)={&(0x7f00000000c0)={0x1d, r6}, 0x10, &(0x7f00000003c0)={&(0x7f0000000200)=@canfd={{0x3, 0x1, 0x1}, 0x19, 0x3, 0x0, 0x0, "240a86003584b924cac358fd4eb444c5fe6eee297e3a4c67d606757d568df33e2c5213673263b835cf2ba3a79fc2bf9b84364474135f7c9d64abb3c843d4d8be"}, 0x48}, 0x2, 0x0, 0x0, 0x24000884}, 0x30048009) bpf$BPF_PROG_GET_NEXT_ID(0xb, &(0x7f00000001c0)={0x1, 0x0}, 0x8) bpf$BPF_PROG_DETACH(0x9, &(0x7f0000000140)={@fallback, 0xffffffffffffffff, 0x17, 0x24, 0x0, @void, @void, @void, @value=r7}, 0x20) r8 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000), 0x200002, 0x0) r9 = openat$cgroup_ro(r8, &(0x7f0000000200)='blkio.throttle.io_serviced_recursive\x00', 0x275a, 0x0) r10 = bpf$OBJ_GET_PROG(0x7, &(0x7f0000000380)=@o_path={&(0x7f0000000340)='./file0\x00', 0x0, 0x4000, r0}, 0x18) bpf$BPF_PROG_DETACH(0x9, &(0x7f00000003c0)={@cgroup=r8, 0xffffffffffffffff, 0x18, 0x8, 0x0, @void, @value=r10}, 0x20) r11 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$ifreq_SIOCGIFINDEX_batadv_mesh(r11, 0x8933, &(0x7f0000000440)={'batadv0\x00', 0x0}) sendmsg$BATADV_CMD_SET_MESH(r11, &(0x7f0000000540)={0x0, 0x0, &(0x7f0000000500)={&(0x7f0000000880)=ANY=[@ANYBLOB=',\x00\x00\x00', @ANYRES16, @ANYBLOB="010028bd7040010000000f00000008000300", @ANYRES32=r12, @ANYBLOB="05002e"], 0x2c}}, 0x0) recvfrom(r1, 0x0, 0x0, 0x141, 0x0, 0x0) bind$inet6(r9, &(0x7f0000000100)={0xa, 0x4e20, 0x100, @initdev={0xfe, 0x88, '\x00', 0x0, 0x0}, 0xfffffffb}, 0x1c) r13 = socket$tipc(0x1e, 0x2, 0x0) r14 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r14, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000240)=ANY=[@ANYBLOB="140000001000010000000000000000000500000a28000000000a030000000000000000000a00000708000240000000020900010073797a31000000002c000000030a010100000000000000000a0000070900010073797a31000000000900030073797a320000000014000000110001"], 0x7c}, 0x1, 0x0, 0x0, 0x4000}, 0x4000000) sendmsg$NFT_BATCH(r14, &(0x7f0000000500)={0x0, 0x0, &(0x7f0000009b00)={&(0x7f00000002c0)={{0x14, 0x10, 0x1, 0x0, 0x0, {0x7}}, [@NFT_MSG_NEWRULE={0x54, 0x6, 0xa, 0x403, 0x0, 0x0, {0xa, 0x0, 0x1}, [@NFTA_RULE_TABLE={0x9, 0x1, 'syz1\x00'}, @NFTA_RULE_EXPRESSIONS={0x20, 0x4, 0x0, 0x1, [{0x1c, 0x1, 0x0, 0x1, @flow_offload={{0x11}, @val={0x4}}}]}, @NFTA_RULE_CHAIN={0x9, 0x2, 'syz2\x00'}, @NFTA_RULE_USERDATA={0x5, 0x7, 0x1, 0x0, 'b'}]}], {0x14, 0x11, 0x1, 0x0, 0x0, {0xa}}}, 0x7c}, 0x1, 0x0, 0x0, 0x4000850}, 0x20040040) setsockopt$TIPC_GROUP_JOIN(r13, 0x10f, 0x87, &(0x7f00000000c0)={0x80000043, 0x0, 0x0, 0x3}, 0x10) 2.090416229s ago: executing program 6 (id=4061): r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) socket$inet_mptcp(0x2, 0x1, 0x106) (async) r1 = socket$inet_mptcp(0x2, 0x1, 0x106) setsockopt$sock_int(r1, 0x1, 0x1d, 0x0, 0x0) r2 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r3 = syz_genetlink_get_family_id$nfc(&(0x7f0000000140), r0) sendmsg$NFC_CMD_DEV_DOWN(r2, &(0x7f0000000400)={0x0, 0x0, &(0x7f00000003c0)={&(0x7f0000000300)={0x14, r3, 0xe2dd266ab2404e65, 0x70bd2d, 0x25dfdbfc}, 0x14}, 0x1, 0x0, 0x0, 0x40000}, 0x800) (async) sendmsg$NFC_CMD_DEV_DOWN(r2, &(0x7f0000000400)={0x0, 0x0, &(0x7f00000003c0)={&(0x7f0000000300)={0x14, r3, 0xe2dd266ab2404e65, 0x70bd2d, 0x25dfdbfc}, 0x14}, 0x1, 0x0, 0x0, 0x40000}, 0x800) 1.915171193s ago: executing program 6 (id=4064): r0 = socket$packet(0x11, 0x2, 0x300) r1 = socket(0x840000000002, 0x3, 0xff) r2 = bpf$PROG_LOAD(0x5, &(0x7f00000003c0)={0x6, 0x3, &(0x7f0000000480)=ANY=[@ANYBLOB="1800000002000000000000000000000095"], &(0x7f0000000500)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @xdp=0x25, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r3 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX(r3, 0x8933, &(0x7f0000000580)={'veth1_to_bond\x00', 0x0}) r5 = bpf$BPF_LINK_CREATE_XDP(0x1c, &(0x7f00000001c0)={r2, r4, 0x25, 0x2, @val=@perf_event={0x11}}, 0x18) r6 = bpf$PROG_LOAD(0x5, &(0x7f00000003c0)={0x6, 0x3, &(0x7f0000000480)=ANY=[], &(0x7f0000000500)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x32, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_LINK_UPDATE(0x1d, &(0x7f0000000680)={r5, r6, 0x4, r2}, 0x10) sendmmsg$inet(r1, &(0x7f0000000b00)=[{{&(0x7f00000001c0)={0x2, 0xffff, @remote}, 0x10, &(0x7f0000000080)=[{&(0x7f00000000c0)="a905000000007464000100000000000000e5c09a0349f9cd417e5d4c8ba3d218c4f7e4ebebee6335ac4ca8c4e94692a88e", 0x31}], 0x1}}], 0x1, 0x24004044) setsockopt$packet_fanout(r0, 0x107, 0x12, &(0x7f0000000140)={0x100, 0x6}, 0x4) setsockopt$packet_fanout_data(r0, 0x107, 0x16, &(0x7f0000000100)={0x3, &(0x7f0000000180)=[{0x28, 0x0, 0x0, 0xfffff034}, {0x50, 0x1}, {0x6, 0x80, 0xfd}]}, 0x10) r7 = bpf$BPF_BTF_LOAD(0x12, &(0x7f00000004c0)={&(0x7f0000000400)={{0xeb9f, 0x1, 0x0, 0x18, 0x0, 0x80, 0x80, 0x6, [@ptr={0x9, 0x0, 0x0, 0x2, 0x4}, @var={0x1, 0x0, 0x0, 0xe, 0x3}, @struct={0x10, 0x1, 0x0, 0x4, 0x0, 0x1, [{0xe, 0x4, 0x6}]}, @type_tag={0x3, 0x0, 0x0, 0x12, 0x2}, @enum={0xc, 0x2, 0x0, 0x6, 0x4, [{0xb, 0x7}, {0xc, 0xffffff80}]}, @struct={0x1, 0x2, 0x0, 0x4, 0x0, 0x0, [{0x1, 0x4, 0x271}, {0x1, 0x2, 0x6}]}]}, {0x0, [0x61, 0x30, 0x5f, 0x2e]}}, &(0x7f0000000040)=""/48, 0x9e, 0x30, 0x0, 0x81, 0x10000}, 0x28) pipe(&(0x7f0000000180)={0xffffffffffffffff, 0xffffffffffffffff}) r10 = socket$packet(0x11, 0x3, 0x300) setsockopt$packet_int(r10, 0x107, 0xf, &(0x7f0000006ffc)=0x4000000000000200, 0xe50fb6c50bc849c9) r11 = socket$netlink(0x10, 0x3, 0x4) ioctl$sock_SIOCGIFINDEX(r11, 0x8933, &(0x7f0000000240)={'veth1_virt_wifi\x00', 0x0}) bind$packet(r10, &(0x7f0000000480)={0x11, 0xf8, r12, 0x1, 0x0, 0x6, @dev={'\xaa\xaa\xaa\xaa\xaa', 0x36}}, 0x14) splice(r8, 0x0, r10, 0x0, 0x10500, 0x0) bpf$PROG_LOAD(0x5, &(0x7f00000017c0)={0x1, 0xe, &(0x7f0000000200)=ANY=[@ANYBLOB="b700000081000000bfa30000000000000703000009feffff720a00fef8ffffff71a400fe0000000071101000000000001d410200000000004704000001ed030407000000c00000001d440000000000006b0a00fe0000000072030000000a0000e500f9ff000000009500000000000000023bc065b58111c6dfa041b63af4a3912435f1a864a710aad58db6a693002e7f3be361917adef6ee1c8a2a4f8ef1e50becb19bc461e91a7168c50000000190f32050e436fe275daf51efd601b6bf01c8e8b1b526375ec4dd6fcd82e4fe51bef7af9aa0d7d600c095199fe3ff3128e599b0eaebbdbd732c9cc00eec363e4a8f6456e2cc21557c0afc646cb7798b3e6440c2fbdb00a3e35208b0bb0d2cd829e654400e2438ec649dc74a28610643a98d9ec21ead2ed51b104d4d91af25b845d8a7925c3109b151b8b9f75dd08d123deda88c658d42ecbf28bf7076c15b463bebc72f526d8e8afcb913466aaa7f6df70252e79166d858fcd0e06dd31af9612f2460d0b11008e59a5923906f88b53987ad1714e72ba7a54f0c33d39000d06a59ff616276fd9aa58f2477184b6a89adaf17b0a6041bdef728d236619074d6ebdfd1f5089048ddff6da40f9411fe722631cb467600ade70063e5291569b33d21dae356e1c51f03a801be8189679a16da18ec0ae564162a27afea62d84f3a10746443d6438e959532e0617d419c6bc6ea9f2bca4464f56e24e6d2105bd901204a1deeed4155617572652d950ad31928b0b0c3dc2869f478341d02d0f5ad94b081fcd507acb4b9c65fee9d5a17f48a7382f13d000000225d85ae49cee383dc5049076b989b40000000000000da60d2ae20cfb91d6a49964757cdf538f9ce2bdb1ab062cd54e67011d355d84ce97bb0c6b4a595e487efbb2d71cde2c140952f9a0f0bc6980fe78683ac5c0c31032599ddd71063be9261b2e1aab1675b34a26048ef8c126aeef5f510a8f1aded94a129e4aec6f8d9ab06faffc3a15d96c2ea3e2e04cfe031b2875353193f82ade69d0540059fe6c7fe7cd8697502c7596566d674e425da5e87e59602a9f6590521d31d3804b3e0a1053abdc31282dfb15eb6841bb64a1b304502dda787343ce3c953992e4a982f3c48153baae244e7bf37548c7f1a4cad2422ee965a38f7defbd2160242b104e20dc2d9b0c35608d402ccdd9069bd50b994fda7a9de44028d6112a0c2d21b2dc98816106dec28eaeb883418f562ae00003ea96d10f172c0374d6eed826416050000000bfe9b4a9c5a90ff59d54d1f92ecc4e95dd2d18383117c039862198899b212c55318294270a1ad10c80fef7c24d47afce829ba0f85da6d888f18ea40ab959f6074ab2a40d85d15017ab513cdc6c0e57fb1c1ca571380d7b4ead35a385e0b4a26b702396df7e0c1e02b6e4114f244a9bf93f04bf072f0861f7580e69db384ac7eeedcf2ba1a9508f9d6aba582a896a9f1ffa968eacea75caf822a7a63ba34015ea5aacb1188883ad2a3b1832371fe5bc621426d1ed0a4a99702cc1b6912a1e717d29135753208165b9cdbae2ed9dc7358f0ebadde0b727f27feeb744ddcc536cbae315c7d1fe1399562ba6824840bd2951680f6f2f9a6a8346962a350845ffa0d829e4f79adc287906943408e6df3c391e97ba48db0a5adbfd03aac93df8866fb010aec0e92bed1fe39af169d2a466f0db6f3d9436a7d55fc30511d00e10000c95265b2bd83d64a532869d701723fedcbada1ee7baa5b6a686b50f0937f778af083e055f6138a757ebd0ed91124a6b244f9acf41ac5d73a008364e0606a594817031fc2f52c8785fe0721719b3d654026c6ea08b83b5703dad844ceb201ddeb6dc5f6a903792283c42efc54fa84323afc4c10eff462c8843187f1dd48ef3fa293774d582956ff0f40b10ca94f6feeb2893c17888e1cdba94a6ea80c33ead5722c3293a493f1479531dd88261458f40d31fe8df15efaaeea831555877f9538d6ee6ba65893ff1f908ba7554ba583fef3ec7932f5954f31a878e2fae6691d1aee1da02ba516467df3e7d1daac43738012e4fee18a22da19fcdb4c2890cda1f96b952511e3a69d694d625e0b2f808890205f3a6da2819d2f9e77c7c64affa54fec0136cbafa5f6f096753b639a924599c1f69219927ea5301fff0a6063d427f0688430754c02180d61542c2571f983e9673560000000000000000005a7b57f03ca91a01ba2e30ca99e8ebc15ecb4d91675767999d146aef7799738b292fd640dfef6b04d086f737a159d7e0c6e4d81ad64a8bbca48568325b2969e2b15f36b788bce5ccdbaf75c94cb93499f6947a967a7bce14c6de4e7c0660d80010f5c653d22d490cba8c2a4ab595bf4238f18ca428dafc7ac96d404607a0000000051a2104f22e6db5a62b5089c1b45282d38864daa3ae81d6b0968d1d2867b91b7d120617d12d91db2633d6864da40b54783a17aaeb6737c323f9f98e354cc98dcfe23ad01bd1c61563e69ffe1c2c73e16e1461173f359e93d2c5e424c17998809ec8f0232b3955e052a4cecd89008f70314a0bdec86f9b1eb93d491ec86a4555d89fe0120f64c62e8e3ed8bcb45202c3d4bbec8d722824c0ebca8db1ea4a003d2fbdc1f9be78537756ab5bbe4fe9af5d785d0128171c90d9900ce2532b0f9d01c4b45294fbba468df3e1b583cb4e62e754598e47df6bd06431c94bc5d047899fd219f448bf9189c65c9d91eda6b52a373803a9efe44f86909bc90addb7b9aee813df534aac4b3093c91b8068cd84990453f806694d461b76a58d88cf0f520310a1e80dc18cde9ad662eee077515d0a8811922929e085392ab3d1311b8243266d87047f601fa88a0da36b9f302e8262395174328f2482d14008de83070744f143fdec90ba5a82668d5fac114c13955ad6dca5db2231d8ba14c54c47ed04a4b4ace17e357e1d6432399f87a7a14245bbd796a090f3b247b95d37ff40a404bdad74bd20000000000000000000099fef7cd7af3ce64a92f95d89d125b1e641240d7e5e27a3d1f7684448c3e3822d617e205061298b939a191be4b48e169bde2cae3accc5bd40a2968b59c93d35f8e42366fdef9a2abae1cf01ce68abff28861aac8302d268569dd42e194e330c7aaa54ebbcefd23f21ce8153b9926e12e925cb56119df72c7533a48d028ad0c74e2a9478fa3be18a1a2b65079cc1c00000000000000f59dd19e8d525206c0a728cfd42193abe8130bc01a2d69841f3d7799ac04bdc590bb1c89b9c695f163e57343c9bfb59909433c9001c5f8b23e38534a538fc933cac6c2a92d038df638a0f226df9fb857bd414c2cd69985e8053e3dfa41614d7c74d04d8c2471041d17c730fad28395f8d4688898cd58b9d600c851626529bb58aa364b55e73f053450665e7b94ed1012fd7a8139166fd5e59c84f4ab279b1b99c028db4cb9680c8035f967db18de738844da7e260a830c1ffa49f5af3c15423a0e315acb82a3e89218cb314e68fda4d94aa1d815babc13b9fd336d205c5913ef67cf0216e2d81e6127bd9d7fab28800eaab2355992f8ce4cd38add4b272c0bee4076ca4847ffa691cf78fb7ec212bad3bef29f577ea7159b7f3025b3d977ff7c91024cf71126233cb8791c3c"], &(0x7f00000001c0)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0x0, 0x10, &(0x7f0000000000), 0xfffffffffffffd00}, 0x48) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000500)={0x6, 0x1c, &(0x7f0000000680)=ANY=[], 0x0, 0x0, 0x0, 0x0, 0x0, 0x18, '\x00', 0x0, 0x25, r7}, 0x94) r13 = bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000200)={0x6, 0x3, &(0x7f0000000680)=ANY=[], &(0x7f00000002c0)='syzkaller\x00'}, 0x94) getsockopt$inet_int(r9, 0x0, 0x18, &(0x7f0000000300), &(0x7f0000000340)=0x4) r14 = socket$nl_rdma(0x10, 0x3, 0x14) sendmsg$RDMA_NLDEV_CMD_RES_QP_GET(r14, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000140)={0x18, 0x140a, 0xd01, 0x70bd2b, 0x25dfdbfe, "", [@RDMA_NLDEV_ATTR_DEV_INDEX={0x8}]}, 0x18}, 0x1, 0x0, 0x0, 0x9040}, 0xc010) r15 = socket$nl_xfrm(0x10, 0x3, 0x6) getsockopt$sock_buf(r15, 0x1, 0x28, 0x0, 0x0) write$cgroup_subtree(0xffffffffffffffff, &(0x7f0000000000)=ANY=[@ANYBLOB="8fedcb7902009875f37538e486dd6317ce62667f2c00fe80000000000000875a65969ff57b00000000000000000000000000ac1414aa88"], 0xfdef) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000600)={r13, 0x5, 0xb68, 0x0, &(0x7f0000000000)='%', 0x0, 0xd01, 0x88be, 0x0, 0x0, 0x0, 0x0, 0x2}, 0x48) bpf$BPF_BTF_LOAD(0x12, &(0x7f00000001c0)={&(0x7f00000003c0)=ANY=[@ANYBLOB="9feb01001800000000000000240000002400000002000000000000000000000202000000000000000000000a03000000000000000000000a"], 0x0, 0x3e}, 0x20) 1.704580234s ago: executing program 5 (id=4066): r0 = bpf$OBJ_GET_MAP(0x7, &(0x7f0000000080)=@generic={&(0x7f0000000040)='./file0\x00', 0x0, 0x10}, 0x18) r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='memory.events\x00', 0x275a, 0x0) write$cgroup_subtree(r1, &(0x7f0000000040)=ANY=[], 0x10448) mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x2000001, 0x12, r1, 0x0) write$cgroup_type(r1, &(0x7f0000000140), 0x9) r2 = bpf$MAP_CREATE_TAIL_CALL(0x0, &(0x7f00000000c0)={0x3, 0x4, 0x4, 0xa, 0x0, r1, 0x83bd, '\x00', 0x0, r1, 0x9, 0x5}, 0x50) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000240)={0x11, 0xc, &(0x7f00000001c0)=@framed={{0x18, 0x8}, [@generic={0x81, 0xd, 0x5, 0x6, 0x6}, @cb_func={0x18, 0x0, 0x4, 0x0, 0x2}, @map_idx_val={0x18, 0x9, 0x6, 0x0, 0x6, 0x0, 0x0, 0x0, 0x1}, @map_val={0x18, 0xa, 0x2, 0x0, r2, 0x0, 0x0, 0x0, 0x40}, @map_val={0x18, 0xb, 0x2, 0x0, r0, 0x0, 0x0, 0x0, 0x1}]}, &(0x7f0000000000)='GPL\x00', 0x4}, 0x94) 1.42749705s ago: executing program 5 (id=4068): r0 = bpf$PROG_LOAD(0x5, &(0x7f0000000380)={0x6, 0x5, &(0x7f0000000080)=@framed={{0x18, 0x2, 0x0, 0x0, 0x4d6, 0x0, 0x0, 0x0, 0x3}, [@call={0x85, 0x0, 0x0, 0x17}, @call={0x85, 0x0, 0x0, 0x11}]}, &(0x7f00000000c0)='GPL\x00', 0x0, 0x0, 0x0, 0x40f00, 0x0, '\x00', 0x0, @xdp, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x7ffffc}, 0x94) r1 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="0a00000004000000ff0f000007"], 0x48) bpf$PROG_LOAD(0x5, &(0x7f0000000500)={0xd, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r1, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000000000000b70400000000000085000000c300000095"], 0x0, 0x0, 0x0, 0x0, 0x41100, 0x12, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r2 = bpf$PROG_LOAD(0x5, &(0x7f00000005c0)={0x1, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000000)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x10, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r3 = socket$packet(0x11, 0x2, 0x300) r4 = socket$packet(0x11, 0x3, 0x300) ioctl$sock_SIOCGIFINDEX(r4, 0x89a0, &(0x7f0000000040)={'syzkaller0\x00'}) ioctl$sock_SIOCGIFINDEX(r4, 0x8933, &(0x7f0000000300)={'syzkaller0\x00', 0x0}) setsockopt$packet_add_memb(r3, 0x107, 0x1, &(0x7f0000000280)={r5, 0x2, 0x6, @local}, 0x6b) r6 = socket$packet(0x11, 0x2, 0x300) r7 = socket$kcm(0x10, 0x2, 0x0) sendmsg$inet(r7, &(0x7f0000000080)={0x0, 0x74, &(0x7f0000000100)=[{&(0x7f00000001c0)="5c00000012006bab9a3fe3d86e17aa0a046b876c1d0048007ea60864160af36504001a0038001d001931a0e69ee517d34460bc06000000a705251e6182949a3651f60a84c9f4d4938037e70e4509c5bb", 0x33fe0}], 0x1, 0x0, 0x0, 0x1f00c00e}, 0x0) recvmsg$kcm(r7, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000040)=[{&(0x7f0000000240)=""/209, 0xd1}], 0x1}, 0x10100) r8 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r8, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000001c0)=ANY=[@ANYBLOB="840100001a"], 0x184}}, 0x0) setsockopt$packet_add_memb(r3, 0x107, 0x1, &(0x7f0000000100)={r5, 0x1, 0x6, @multicast}, 0x10) ioctl$sock_SIOCGIFINDEX(r6, 0x89a1, &(0x7f0000000040)={'syzkaller0\x00'}) socketpair$unix(0x1, 0x2, 0x0, &(0x7f00000001c0)={0xffffffffffffffff, 0xffffffffffffffff}) setsockopt$sock_attach_bpf(r9, 0x1, 0x32, &(0x7f0000000180)=r2, 0x4) sendmsg$inet(r10, &(0x7f0000000100)={0x0, 0x0, 0x0}, 0x20000000) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000600)={r0, 0x0, 0x2107, 0x0, &(0x7f0000000100), 0x0, 0x1008, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x9}, 0x50) 1.196306039s ago: executing program 4 (id=4070): r0 = socket$nl_route(0x10, 0x3, 0x0) ioctl$ifreq_SIOCGIFINDEX_batadv_hard(r0, 0x8933, &(0x7f00000000c0)={'batadv_slave_0\x00', 0x0}) sendmsg$nl_route_sched_retired(r0, &(0x7f0000000080)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x80000}, 0xc, &(0x7f0000000040)={&(0x7f00000005c0)=@deltclass={0xcf8, 0x29, 0x8, 0x70bd25, 0x25dfdbfe, {0x0, 0x0, 0x0, r1, {0xc, 0xc}, {0xf, 0xf}, {0xc, 0xa}}, [@c_atm={{0x8}, {0x38, 0x2, [@TCA_ATM_HDR={0x2b, 0x3, "143c8b3cf48b74289fb80709948fff860523c970231f15fcb605cb74c9db33da81db7d6dd93083"}, @TCA_ATM_FD={0x8, 0x1, r0}]}}, @c_cbq={{0x8}, {0x428, 0x2, [@TCA_CBQ_FOPT={0x10, 0x3, {{0xfff1}, 0xf, 0x3}}, @TCA_CBQ_RTAB={0x404, 0x6, [0x7, 0x557, 0x80, 0x3, 0x100, 0x7f, 0x81, 0xfffffffa, 0x10001, 0xf, 0x6924f568, 0x0, 0x6, 0x5, 0x64, 0x2, 0x7b, 0xcda0, 0x3, 0x2, 0x200, 0x0, 0x1, 0x6, 0x7, 0x0, 0x6, 0x3, 0x22f, 0x80, 0x6, 0x200, 0x3, 0x8, 0x1, 0x4, 0x1, 0x101, 0xfffff313, 0x80000000, 0x30, 0x8, 0x7, 0x80000000, 0x100, 0x100, 0xf, 0x0, 0x351, 0x6, 0xf29, 0x10000000, 0x9, 0x100, 0x1, 0x8, 0x5, 0x36, 0x0, 0x9, 0x8, 0x9, 0x9, 0xffff0091, 0x9, 0x2, 0x4, 0x7fff, 0xffffffff, 0x4, 0x6, 0xa, 0x2, 0x0, 0x101, 0x1, 0x1, 0xfffffffa, 0xed26, 0x7d, 0x5, 0x1, 0x8, 0x8, 0x8, 0x1, 0x101, 0x400, 0xe0000000, 0x0, 0x800, 0x7fff, 0x2, 0x2, 0x88, 0x2e8000, 0x11, 0x9, 0xa8, 0xb99, 0x0, 0xe696, 0x91d3, 0xc9, 0x4, 0x8, 0xcb4, 0x1, 0x2, 0x4, 0x80, 0x1, 0x3, 0x80000001, 0x7, 0x2, 0x34, 0x7, 0x6, 0x8, 0x1, 0x1, 0x8, 0x6, 0x6, 0x1ff, 0x5, 0x3ff, 0x4b, 0x0, 0x214, 0x5, 0xbf, 0x80000000, 0x3, 0xdc25, 0x4, 0x9, 0x0, 0x0, 0x7, 0xffffffff, 0xf22, 0x6, 0x2000, 0x1ff, 0x8, 0x7, 0x9, 0x1, 0x9, 0xe47, 0x4, 0x1ff, 0x0, 0x18, 0x5, 0x4, 0x3, 0xfbf8, 0x0, 0x0, 0x4, 0x9, 0x1, 0x4, 0x7fffffff, 0x4, 0xfffffffe, 0xe, 0x8, 0xb2, 0x6, 0x4, 0x7, 0x6, 0x9, 0x6, 0x2, 0x7, 0x5, 0x4, 0x6, 0x799, 0x8, 0x1, 0x4890f466, 0xaa, 0x1, 0x1000, 0x1, 0x400, 0x4, 0x400, 0x3, 0x9, 0x6820, 0x7fff, 0x10001, 0x7f, 0xa, 0x2, 0x7, 0x21d8, 0xfff, 0x0, 0x5, 0x40, 0x1, 0xffffffff, 0xffff, 0x4, 0x1, 0x0, 0x2f, 0x348, 0x4, 0x0, 0x3, 0x0, 0x3ff, 0x100, 0x6, 0x1, 0x9, 0x1b, 0x5, 0x1ff, 0x9, 0xc24, 0x5, 0x1000, 0x1, 0x0, 0x7f, 0x9, 0x6, 0x4, 0x6, 0x4, 0x0, 0x80, 0x4, 0x8, 0x6, 0x0, 0x2000080, 0x6, 0x6, 0xd7ae, 0x58, 0x8000, 0x1, 0xf, 0x1, 0x1]}, @TCA_CBQ_RATE={0x10, 0x5, {0xbb, 0x1, 0xc5a, 0x5, 0x8, 0x5}}]}}, @c_cbq={{0x8}, {0x85c, 0x2, [@TCA_CBQ_WRROPT={0x10, 0x2, {0xe, 0x1, 0x5, 0xf1, 0x5, 0x5}}, @TCA_CBQ_RATE={0x10, 0x5, {0xf8, 0x0, 0x0, 0xde}}, @TCA_CBQ_RATE={0x10, 0x5, {0xed, 0x2, 0x5, 0x9, 0x64, 0x2}}, @TCA_CBQ_RTAB={0x404, 0x6, [0x8, 0x4, 0x2, 0x5, 0x7fffffff, 0x5, 0x5, 0x4, 0xf5dd, 0x248000, 0x4, 0xf, 0x4, 0x5, 0x0, 0x7, 0x3, 0x6, 0x7, 0x7, 0x8, 0x4, 0x7fff, 0x5, 0x8000, 0x602, 0x9, 0xa1c4, 0x8, 0x2, 0x6, 0x2, 0xff, 0x8, 0xfffff5fe, 0x1, 0x5, 0x8, 0x4, 0x7fff, 0x5, 0x7, 0x9, 0xffffffff, 0x9, 0x2, 0x1200000, 0x1, 0x3, 0xc3, 0x4, 0x454d, 0xaa22, 0x1, 0x3, 0x7f, 0x8, 0x3ff, 0x1, 0x10001, 0x5, 0x3, 0x7d7, 0x8, 0x8, 0x9, 0x9, 0x2, 0x9, 0x1ff, 0x6, 0x4f8ab556, 0x5, 0x6, 0xfd, 0xa0000, 0x0, 0xfffffffb, 0x8, 0x3, 0x101, 0xb, 0x4, 0x1, 0x1, 0x8, 0x6, 0x5, 0x8, 0x6, 0x1000, 0x1, 0x3, 0x9, 0x6, 0x3, 0x8011, 0x200, 0xa, 0x4, 0x9, 0x9, 0xfffffff8, 0x4, 0x5, 0x2, 0xfffffffd, 0x9, 0x3bd, 0x4, 0x400, 0x8000, 0xf434, 0x200, 0x4, 0x4, 0xfffffffd, 0x8000, 0xa, 0x10, 0x6, 0xe1ba, 0xaa2c, 0x6, 0x1, 0x8, 0x7, 0x9, 0xe3da, 0x4, 0x1, 0x0, 0xffff, 0x4, 0xb, 0x1ff, 0x3e83, 0x80, 0xba, 0x6, 0x0, 0xfa2, 0x3, 0xdc8, 0x1, 0x18, 0x101, 0xe, 0x80, 0xa, 0x8, 0xffffff3b, 0xb4b7, 0xfffffffe, 0x9, 0xfffffc00, 0x1, 0x9, 0x5, 0x80, 0x6, 0x5, 0x0, 0xc986, 0x7, 0x7f, 0x7ff, 0xd, 0x0, 0x9, 0x7fffffff, 0x8, 0x4, 0x7, 0x5f, 0x4, 0x0, 0x3, 0x0, 0x3, 0xc0, 0x10, 0x7ff, 0x1000, 0xfffffff7, 0x8e, 0xce, 0x39e, 0x4, 0x0, 0x1, 0x4, 0x2, 0x5, 0xfffffbff, 0xc7c5, 0x40, 0x15fb5e0a, 0x8169, 0x9, 0x0, 0xd, 0x7, 0xbe, 0x483c, 0x3d6, 0x9, 0x3, 0x8, 0x9, 0x7, 0x4, 0x80, 0x101, 0x9, 0x3, 0xfffffff8, 0x9, 0x9, 0x3c, 0x1, 0xf22, 0xb, 0x7fff, 0x8000, 0x70, 0x9, 0x8, 0x5, 0x87, 0xffffffff, 0xb629, 0x7, 0x1, 0xb123, 0x1, 0x5, 0xffffffff, 0x7fff, 0x3, 0x81, 0x8, 0x5, 0x9a, 0x8, 0x0, 0x1, 0x80000000, 0x7, 0x5, 0xfffffc01, 0x2, 0x1, 0x2, 0x92, 0x10001]}, @TCA_CBQ_RTAB={0x404, 0x6, [0x5, 0x2, 0x1, 0x10, 0x3, 0xacf0, 0x7ff, 0x9, 0xcc, 0x81, 0xfffffffe, 0x10, 0x4, 0x81, 0x7, 0xcc, 0x401, 0xecc, 0x7ff, 0xfffffffa, 0x1000, 0x7, 0x5, 0x9, 0x3, 0x80000001, 0x3, 0x81, 0x9, 0x1, 0x0, 0x7ff, 0x1, 0x0, 0xcd5, 0x6, 0x7, 0x7, 0x4, 0x5, 0x800, 0x0, 0x4, 0x1, 0x9, 0x1, 0x8, 0x6, 0x4f6, 0x9, 0xfffffffb, 0x79, 0x423, 0x6, 0x9, 0x5, 0x7, 0x6, 0xffffffff, 0xc, 0x200, 0x0, 0x8d1c, 0x7, 0x2, 0xe7c, 0x30, 0x7, 0x8, 0x8, 0x10000, 0x9, 0x8, 0x9, 0x4, 0x80000001, 0x5, 0x6, 0xf, 0x80000001, 0x9, 0x3, 0x7, 0x8, 0xd9, 0x8, 0x3, 0x2, 0x7, 0x5, 0x0, 0x6, 0x2, 0x4, 0x8, 0x9, 0x8, 0x10000, 0xfffffffd, 0x7, 0xc, 0xac, 0xc, 0x7, 0x7fff, 0x5e0, 0x4, 0x9, 0xf, 0x1, 0xb7d8, 0x9b, 0x28c, 0xffffffa3, 0x5, 0xf981, 0x6, 0xf3, 0x1, 0x13e0, 0x4, 0xe5b0, 0x2, 0x4, 0x80, 0x6, 0xfffffff7, 0x3, 0x9, 0x7, 0x57, 0x9, 0x7, 0x1, 0x7fffffff, 0xd87, 0x10001, 0x2, 0x7, 0x5, 0x2, 0x7fffffff, 0xa9, 0x6, 0x96, 0x5, 0x7, 0x5, 0x0, 0x8, 0xffffffff, 0x2, 0x1, 0x4d5, 0x7f, 0x0, 0x1000, 0x1, 0x5, 0x0, 0x8c0, 0x60, 0x0, 0x9, 0xb, 0x7, 0x7d8, 0x7, 0xb, 0x5, 0x9, 0x76, 0x10001, 0xffffffff, 0x0, 0x4, 0x3, 0x1, 0x7, 0x6, 0x2, 0x0, 0xfff, 0x9, 0x4, 0x10000, 0x0, 0x1, 0xff, 0xfffffffd, 0xb, 0x2, 0x4, 0x3, 0x800, 0x0, 0xd5b, 0x1, 0xfffffff8, 0x80, 0x70, 0x1, 0x2, 0x800, 0x3, 0x2, 0xb, 0x5f05, 0x9000, 0xfbe2, 0x80000000, 0x6, 0xfffffff8, 0x9, 0x0, 0xffff8001, 0xf, 0x35, 0x5, 0x0, 0x401, 0x1ff, 0x6, 0xeb9, 0x3, 0x8, 0x2, 0x9, 0x100, 0x8, 0x10000, 0x2, 0xd, 0x8, 0x989d, 0x7, 0x9, 0x200, 0x93, 0x8, 0x3, 0x7, 0x1, 0x8, 0xd6f, 0x6, 0x0, 0x6, 0x2, 0x1, 0x35a9, 0x5, 0x4, 0x3, 0x5, 0x7]}, @TCA_CBQ_FOPT={0x10, 0x3, {{0xfffc, 0x1}, 0x6}}, @TCA_CBQ_FOPT={0x10, 0x3, {{0xc, 0xfff5}, 0x9, 0x5edd}}]}}]}, 0xcf8}, 0x1, 0x0, 0x0, 0x200008a0}, 0x4008881) sendmsg$nl_route(r0, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000340)={&(0x7f0000000100)=ANY=[@ANYBLOB="3c0000001800dd8d000000000000000002000000000000060000000006001500010000001800168014000100000000000000000000003000000011"], 0x3c}}, 0x8000) 1.19490275s ago: executing program 0 (id=4071): r0 = openat$nci(0xffffffffffffff9c, &(0x7f0000000080), 0x2, 0x0) r1 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$nfc(&(0x7f0000000100), r1) syz_init_net_socket$nfc_raw(0x27, 0x3, 0x0) ioctl$IOCTL_GET_NCIDEV_IDX(r0, 0x0, &(0x7f00000000c0)=0x0) sendmsg$NFC_CMD_DEV_UP(r1, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000300)=ANY=[@ANYBLOB="1c000000", @ANYRES32=r2, @ANYBLOB="010026bd70003c0200000200000008000100", @ANYRES32=r2], 0x1c}}, 0x0) write$nci(r0, 0x0, 0x0) r3 = socket$nl_netfilter(0x10, 0x3, 0xc) r4 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000440), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r3, 0x8933, &(0x7f0000000480)={'wlan1\x00', 0x0}) sendmsg$NL80211_CMD_NEW_KEY(r0, &(0x7f00000005c0)={&(0x7f0000000400)={0x10, 0x0, 0x0, 0x100000}, 0xc, &(0x7f0000000580)={&(0x7f0000000600)=ANY=[@ANYBLOB='l\x00\x00\x00', @ANYRES16=r4, @ANYBLOB="20002abd7000fcdbdf250b00000008000300cac148a4818974ffef3bb960b0f8cb66541022dcc27073254ce8f4ca6e9ce3cdf6ba7c3ae11aeb5986d4a865659f0c0b6f05dd03181babe6aa61dd9f35de6737a5eae98bcd9722c3f328edbc26295c313769", @ANYRES32=r5, @ANYBLOB="04000b000800090005ac0f000c000a00bcc0f4cfc3c467a50400280024005080050002000100000004000600090001004382299c230000000800030001ac0f00050008000500000007000a00770bdf00"], 0x6c}, 0x1, 0x0, 0x0, 0x100}, 0x800) r6 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r6, &(0x7f0000000140)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f0000000900)=@newtaction={0xa8, 0x30, 0xb, 0x5, 0x0, {}, [{0x94, 0x1, [@m_ct={0x90, 0x1, 0x0, 0x0, {{0x7}, {0x68, 0x2, 0x0, 0x1, [@TCA_CT_PARMS={0x18, 0x1, {0x80000001, 0x0, 0x0, 0x0, 0x400}}, @TCA_CT_ACTION={0x6, 0x3, 0x19}, @TCA_CT_NAT_IPV4_MIN={0x8, 0x9, @private=0xa010102}, @TCA_CT_NAT_IPV4_MAX={0x8, 0xa, @initdev={0xac, 0x1e, 0x1, 0x0}}, @TCA_CT_LABELS={0x14, 0x7, "e142a1dc6b3a3dd0aaeb9317676b63d2"}, @TCA_CT_MARK={0x8, 0x5, 0x9}, @TCA_CT_NAT_PORT_MIN={0x6, 0xd, 0x4e24}, @TCA_CT_NAT_PORT_MAX={0x6, 0xe, 0x4e22}, @TCA_CT_MARK_MASK={0x8, 0x6, 0x8000}]}, {0x4}, {0xc, 0x7, {0x0, 0x1}}, {0xc}}}]}]}, 0xa8}, 0x1, 0x0, 0x0, 0x8890}, 0x40) r7 = socket(0x10, 0x3, 0x0) write(r7, &(0x7f0000000000)="3c00000058001f000307f4f9002304000a04d65f0800010002010002170003800500000099db973b91aa057972513500b0406700912deb5b85932234", 0x3c) syz_genetlink_get_family_id$ipvs(&(0x7f0000000080), r7) r8 = socket$inet6(0xa, 0x2, 0x3a) sendmmsg$inet6(r8, &(0x7f0000000b80)=[{{&(0x7f0000000140)={0xa, 0x4e20, 0x7ffe, @mcast2, 0x4}, 0x1c, &(0x7f00000002c0)=[{&(0x7f0000000080)="8000102e7577d401", 0x8}], 0x1, 0x0, 0x30}}], 0x1, 0x4000084) sendmsg$IPVS_CMD_NEW_SERVICE(0xffffffffffffffff, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000140)={&(0x7f00000009c0)=ANY=[@ANYRES64, @ANYRES64, @ANYRES32, @ANYRESHEX=r6, @ANYRES16=r3, @ANYBLOB="4db9d297b5eda20a70b07d1afb21a313722d9c66e1f57b9ea4e6ce9d474501677fb1ada4223592cd7307fdac8375e0a7dd2a3d25e9058fe7044499489c8043f0fa56770e729d6779cbaba476308d9f0b55d4fc62603beeda6dce5ecd698454b7fe78d7b719af81f8ce0926cfb800c5e968a7b126d29bd31086", @ANYRESDEC=r8, @ANYRESHEX=r3, @ANYBLOB="0bb9c489627bf7e974c8be4f7969e7352857d9b32b1266be70f64ce19b9ee0ac53ebdc9af0440809345b04a386c34ba2326b91dd381f90357c022386ffd2e2aa513b9eb10a25501e55fbfebcead956da5e7263e0bdc45b0fcce95e79526eafe35797081281cd708efd7833b415bb0bcbe84f", @ANYRES8=r6], 0x4c}, 0x1, 0x0, 0x0, 0xc0801}, 0x884) sendmsg$IPSET_CMD_FLUSH(r3, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000180)=ANY=[@ANYBLOB="0100000004e60003000000000000000001000007050001000700000005f60000070000000900020073797a300000000005000100070000000900020073797a31000000000900020073797a3000000000"], 0x50}, 0x1, 0x0, 0x0, 0x4880}, 0x40080) sendmsg$IPSET_CMD_CREATE(r3, 0x0, 0x0) r9 = syz_init_net_socket$nl_rdma(0x10, 0x3, 0x10) syz_genetlink_get_family_id$nl80211(0x0, 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r9, 0x8933, 0x0) r10 = bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000340)={0x2, 0x4, 0x8, 0x1, 0x80, 0x1}, 0x50) bpf$PROG_LOAD(0x5, &(0x7f0000000240)={0x1f, 0x10, &(0x7f0000000500)=@framed={{0x18, 0x0, 0x0, 0x0, 0x1f, 0x0, 0x0, 0x0, 0x7e}, [@snprintf={{}, {0x3, 0x3, 0x3, 0xa, 0xa}, {0x5}, {}, {}, {}, {}, {}, {0x7, 0x0, 0xb, 0x2, 0x0, 0x0, 0x20}, {0x18, 0x3, 0x2, 0x0, r10}, {}, {0x85, 0x0, 0x0, 0xb3}}]}, &(0x7f00000000c0)='GPL\x00', 0x3, 0x0, 0x0, 0x41100, 0x18, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xebfb}, 0x94) r11 = socket$inet_smc(0x2b, 0x1, 0x0) ioctl$int_in(r11, 0x5452, &(0x7f000000fa00)=0x9) sendmsg(r11, &(0x7f0000012900)={0x0, 0x0, 0x0}, 0x0) sendmsg$NL80211_CMD_JOIN_MESH(r9, &(0x7f00000002c0)={0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x10}, 0x4040810) 1.119908106s ago: executing program 5 (id=4072): syz_emit_ethernet(0x1f, &(0x7f0000000040)=ANY=[@ANYBLOB="ff0300ffffff000000000000000442420300404000000062cf004ab77f84"], 0x0) r0 = socket$nl_netfilter(0x10, 0x3, 0xc) r1 = socket$kcm(0x23, 0x2, 0x0) sendmsg$sock(r1, &(0x7f0000000340)={0x0, 0x0, 0x0}, 0x0) (async) r2 = openat$tun(0xffffffffffffff9c, &(0x7f0000000000), 0x40241, 0x0) ioctl$TUNSETIFF(r2, 0x400454ca, &(0x7f0000000200)={'syzkaller1\x00', 0xc201}) setsockopt$sock_int(r1, 0x1, 0x6, &(0x7f0000000240)=0x9, 0x4) r3 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r3, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000001c0)=@ipv4_newrule={0x30, 0x20, 0x301, 0x70bd2d, 0x25dfdc01, {0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, 0x12}, [@FRA_GENERIC_POLICY=@FRA_IIFNAME={0x14, 0x3, 'lo\x00'}]}, 0x30}, 0x1, 0x0, 0x0, 0x240480d4}, 0x0) (async, rerun: 32) r4 = socket$kcm(0x2, 0xa, 0x2) (rerun: 32) ioctl$SIOCSIFHWADDR(r4, 0x8914, &(0x7f0000000180)={'syzkaller1\x00', @link_local}) (async) write$tun(r2, &(0x7f0000000380)=ANY=[@ANYBLOB="1c0000f500000000000000862dfdff00000065"], 0x78) (async, rerun: 64) close(0x3) (async, rerun: 64) r5 = socket$inet6_sctp(0xa, 0x5, 0x84) setsockopt$inet6_IPV6_XFRM_POLICY(r5, 0x29, 0x23, &(0x7f00000004c0)={{{@in=@multicast1, @in6=@empty, 0x0, 0x1, 0x4e20, 0x0, 0xa}, {0x0, 0x2, 0x0, 0x671, 0x0, 0x20, 0xfffffffffffffffd, 0x1}, {0xc00000, 0xffffffffffffffff, 0x4}, 0x0, 0x0, 0x1}, {{@in6=@remote, 0x0, 0x2b}, 0x5, @in=@empty, 0x1000, 0x3, 0x0, 0x0, 0x0, 0x5}}, 0xe8) (async, rerun: 32) shutdown(r5, 0x0) (async, rerun: 32) getsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX3(r5, 0x84, 0x6f, &(0x7f0000000200)={0x0, 0x10, &(0x7f00000001c0)=[@in={0x2, 0x4e23, @rand_addr=0x64010100}]}, &(0x7f0000000140)=0x10) getsockopt$inet_sctp6_SCTP_PRIMARY_ADDR(r5, 0x84, 0x7a, &(0x7f0000000340)={r6, @in6={{0xa, 0x3, 0x4, @mcast1}}}, &(0x7f0000000040)=0x84) (async) sendmsg$NFT_BATCH(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000100)={{0x14, 0x10, 0x1, 0x0, 0x0, {0x1}}, [], {0x14, 0x11, 0x1, 0x0, 0x0, {0xa3fe4718837a02ba}}}, 0x28}, 0x1, 0x0, 0x0, 0x8000}, 0xc080) (async) r7 = socket$inet6(0x10, 0x3, 0x0) (async) r8 = syz_init_net_socket$rose(0xb, 0x5, 0x0) bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000280)={&(0x7f0000000080)={{0xeb9f, 0x1, 0x0, 0x18, 0x0, 0x18, 0x18, 0x2, [@ptr, @restrict={0x0, 0x0, 0x0, 0x9, 0x1}]}}, 0x0, 0x32, 0x0, 0x0, 0x1}, 0x28) ioctl$sock_rose_SIOCRSCLRRT(r8, 0x89e4) r9 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl$sock_inet_SIOCSIFADDR(r9, 0x8916, &(0x7f0000000000)={'wlan1\x00', {0x2, 0x0, @local}}) r10 = socket$inet6_sctp(0xa, 0x1, 0x84) sendto$inet6(r10, &(0x7f0000000180)="c5", 0x1, 0x40080, &(0x7f00000000c0)={0xa, 0x4e24, 0x40, @local, 0x13}, 0x1c) (async) getsockopt$inet_sctp6_SCTP_RTOINFO(r10, 0x84, 0x0, &(0x7f0000000080)={0x0, 0x1000, 0x400, 0x3}, &(0x7f0000000140)=0x10) write(r7, &(0x7f0000000040)="2400000021002551241c0165ff00fc020200000000100f000ee1000c08000b0000000000", 0x24) (async) socket$nl_route(0x10, 0x3, 0x0) 1.046912622s ago: executing program 0 (id=4073): r0 = socket$phonet_pipe(0x23, 0x5, 0x2) (async, rerun: 32) r1 = socket$nl_netfilter(0x10, 0x3, 0xc) (rerun: 32) sendmsg$NFT_BATCH(r1, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000180)=ANY=[@ANYBLOB="9c0000001000010000000000000000000000000a74"], 0x9c}}, 0x0) (async) r2 = openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0) ioctl$TUNSETIFF(r2, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x7101}) (async) r3 = socket$nl_route(0x10, 0x3, 0x0) r4 = socket$unix(0x1, 0x1, 0x0) ioctl$TUNGETSNDBUF(r2, 0x800454d3, &(0x7f0000000080)) (async) ioctl$sock_SIOCGIFINDEX(r4, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r3, &(0x7f0000000740)={0x0, 0x0, &(0x7f0000000440)={&(0x7f00000006c0)=@newqdisc={0x48, 0x24, 0x4ee4e6a52ff56541, 0x70bd2a, 0xffffffff, {0x0, 0x0, 0x0, r5, {0x0, 0xfff1}, {0xffff, 0xffff}, {0x0, 0x10}}, [@qdisc_kind_options=@q_prio={{0x9}, {0x18, 0x2, {0x8}}}]}, 0x48}, 0x1, 0x0, 0x0, 0x4000000}, 0x20040084) r6 = bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000340)=ANY=[@ANYBLOB="02000000040000000800000001"], 0x48) r7 = bpf$PROG_LOAD(0x5, &(0x7f00000004c0)={0x1f, 0x18, &(0x7f00000006c0)=ANY=[@ANYBLOB="180000000000000000000000ffffffff180800002020782500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b7030000000400008500000010000000b7080000000000007baaf8ff00000000b5080000000000007b8af0ff00000000bfa100000000000007010000f8ffffffbfa400000000000007040000f0ffffffb70200000800000018230000", @ANYRES32=r6, @ANYBLOB="0000000000000000b70500000800000085000000b300000095"], &(0x7f0000000600)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x10, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$PROG_BIND_MAP(0xa, &(0x7f0000000440)={r7, r6}, 0xc) (async, rerun: 32) r8 = socket(0x400000000010, 0x3, 0x0) (rerun: 32) r9 = socket$unix(0x1, 0x1, 0x0) ioctl$sock_SIOCGIFINDEX(r9, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r8, &(0x7f0000000400)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000003c0)=@delqdisc={0x24, 0x25, 0x1, 0x70bd25, 0x255fdbff, {0x0, 0x0, 0x0, r10, {}, {0x8, 0xfff1}, {0x4, 0xfff1}}}, 0x24}, 0x1, 0x0, 0x0, 0x20081054}, 0x24008088) (async, rerun: 32) accept4$phonet_pipe(r0, 0x0, 0x0, 0x80000) (rerun: 32) 784.268313ms ago: executing program 4 (id=4074): sendmsg$NLBL_CIPSOV4_C_ADD(0xffffffffffffffff, &(0x7f0000000040)={0xffffffffffffffff, 0x0, &(0x7f0000000000)={&(0x7f00000001c0)={0x160, 0x0, 0x400, 0x70bd25, 0x25dfdbfe, {}, [@NLBL_CIPSOV4_A_MLSCATLST={0x28, 0xc, 0x0, 0x1, [{0x24, 0xb, 0x0, 0x1, [@NLBL_CIPSOV4_A_MLSCATLOC={0x8, 0x9, 0x1bd44171}, @NLBL_CIPSOV4_A_MLSCATLOC={0x8, 0x9, 0x1f086482}, @NLBL_CIPSOV4_A_MLSCATREM={0x8, 0xa, 0x332}, @NLBL_CIPSOV4_A_MLSCATREM={0x8, 0xa, 0xd652}]}]}, @NLBL_CIPSOV4_A_MLSCATLST={0x11c, 0xc, 0x0, 0x1, [{0x2c, 0xb, 0x0, 0x1, [@NLBL_CIPSOV4_A_MLSCATLOC={0x8, 0x9, 0x281077fe}, @NLBL_CIPSOV4_A_MLSCATLOC={0x8, 0x9, 0x265474fe}, @NLBL_CIPSOV4_A_MLSCATLOC={0x8, 0x9, 0x377b809}, @NLBL_CIPSOV4_A_MLSCATREM={0x8, 0xa, 0xa4fe}, @NLBL_CIPSOV4_A_MLSCATREM={0x8, 0xa, 0xf48a}]}, {0x34, 0xb, 0x0, 0x1, [@NLBL_CIPSOV4_A_MLSCATLOC={0x8, 0x9, 0x11b8565d}, @NLBL_CIPSOV4_A_MLSCATREM={0x8, 0xa, 0x456f}, @NLBL_CIPSOV4_A_MLSCATREM={0x8, 0xa, 0x5f9}, @NLBL_CIPSOV4_A_MLSCATLOC={0x8, 0x9, 0x347bfcec}, @NLBL_CIPSOV4_A_MLSCATREM={0x8, 0xa, 0xed2a}, @NLBL_CIPSOV4_A_MLSCATREM={0x8, 0xa, 0x8462}]}, {0x2c, 0xb, 0x0, 0x1, [@NLBL_CIPSOV4_A_MLSCATLOC={0x8, 0x9, 0x1d075dd3}, @NLBL_CIPSOV4_A_MLSCATLOC={0x8, 0x9, 0x4dbde4bd}, @NLBL_CIPSOV4_A_MLSCATREM={0x8, 0xa, 0x9c35}, @NLBL_CIPSOV4_A_MLSCATREM={0x8, 0xa, 0x9edd}, @NLBL_CIPSOV4_A_MLSCATREM={0x8, 0xa, 0x52f4}]}, {0x44, 0xb, 0x0, 0x1, [@NLBL_CIPSOV4_A_MLSCATREM={0x8, 0xa, 0xffee}, @NLBL_CIPSOV4_A_MLSCATREM={0x8, 0xa, 0x4ebe}, @NLBL_CIPSOV4_A_MLSCATREM={0x8, 0xa, 0xd3fb}, @NLBL_CIPSOV4_A_MLSCATREM={0x8, 0xa, 0x7073}, @NLBL_CIPSOV4_A_MLSCATREM={0x8, 0xa, 0x72a0}, @NLBL_CIPSOV4_A_MLSCATREM={0x8, 0xa, 0xd826}, @NLBL_CIPSOV4_A_MLSCATLOC={0x8, 0x9, 0x319c0de1}, @NLBL_CIPSOV4_A_MLSCATLOC={0x8, 0x9, 0x7b9d8ad2}]}, {0x1c, 0xb, 0x0, 0x1, [@NLBL_CIPSOV4_A_MLSCATREM={0x8, 0xa, 0xd4c1}, @NLBL_CIPSOV4_A_MLSCATLOC={0x8, 0x9, 0x1250ab69}, @NLBL_CIPSOV4_A_MLSCATLOC={0x8, 0x9, 0x2dafba31}]}, {0x2c, 0xb, 0x0, 0x1, [@NLBL_CIPSOV4_A_MLSCATLOC={0x8, 0x9, 0x2fdefce}, @NLBL_CIPSOV4_A_MLSCATREM={0x8, 0xa, 0x36ab}, @NLBL_CIPSOV4_A_MLSCATLOC={0x8, 0x9, 0x20aae68a}, @NLBL_CIPSOV4_A_MLSCATLOC={0x8, 0x9, 0x772f1a7d}, @NLBL_CIPSOV4_A_MLSCATLOC={0x8, 0x9, 0x50516bd2}]}]}, @NLBL_CIPSOV4_A_MTYPE={0x8, 0x2, 0x2}]}, 0x160}, 0x1, 0x0, 0x0, 0x8000}, 0x8054) r0 = socket$nl_rdma(0x10, 0x3, 0x14) sendmsg$RDMA_NLDEV_CMD_GET_CHARDEV(r0, &(0x7f0000000880)={0x0, 0x0, &(0x7f0000000840)={&(0x7f0000000040)={0x10, 0x140f, 0x1, 0x70bd28, 0x25dfdbfc}, 0x10}, 0x1, 0x0, 0x0, 0x80}, 0x20000000) r1 = socket$nl_generic(0x10, 0x3, 0x10) r2 = socket$packet(0x11, 0x2, 0x300) setsockopt$packet_rx_ring(r2, 0x107, 0x5, &(0x7f0000000340)=@req3={0x5, 0x126, 0x1, 0x9, 0x5, 0x4, 0x6}, 0x1c) r3 = socket$inet_icmp_raw(0x2, 0x3, 0x1) getsockopt(r3, 0xff, 0x1, 0x0, 0x0) r4 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000080), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r1, 0x8933, &(0x7f00000000c0)={'wlan0\x00', 0x0}) sendmsg$NL80211_CMD_SET_INTERFACE(r1, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000180)={0x24, r4, 0x5, 0x0, 0x0, {{}, {@val={0x8, 0x3, r5}, @void}}, [@NL80211_ATTR_IFTYPE={0x8, 0x5, 0x3}]}, 0x24}}, 0x0) 745.409251ms ago: executing program 0 (id=4075): r0 = socket$netlink(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFCONF(r0, 0x8912, &(0x7f0000000040)=@req={0x28, &(0x7f0000000000)={'macvlan0\x00', @ifru_names='veth0_to_batadv\x00'}}) socket$unix(0x1, 0x1, 0x0) socket$nl_xfrm(0x10, 0x3, 0x6) unshare(0x28000600) writev(r0, &(0x7f00000000c0)=[{&(0x7f0000000080)="390000001300090468fe0700000000000000ff3f08000000480100100000000019002b000a0001000500000000000072080003000500000000", 0x39}], 0x1) 579.723562ms ago: executing program 6 (id=4076): mmap(&(0x7f0000001000/0xc00000)=nil, 0xc00000, 0x2000004, 0x3b071, 0xffffffffffffffff, 0x0) r0 = bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f00000007c0)=ANY=[@ANYBLOB="1b0000000000000000000000000004"], 0x50) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000700)={0x11, 0x18, &(0x7f0000000540)=ANY=[@ANYBLOB="180000008f080000000000000010000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b702000014000000bf030000fcff00008500000086000000bf0900000000000055090100000000809500000000000000180100002020752500000000002020207b1af8ff00000000bfa100000000000007010000f8feffffb702000008000000b70300007b0d0000850000007f0000004500f4fffcffffffbf91000000000000b702000001000000850000008500008d480000000000000095"], &(0x7f0000000080)='GPL\x00', 0x7, 0xffe, &(0x7f0000000cc0)=""/4094, 0x41000, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0xfffffffb}, 0x94) r1 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r2 = bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f00000005c0)={0x2, 0x4, 0x8, 0x1, 0x80, 0x0, 0xfffffffe, '\x00', 0x0, 0x0}, 0x50) bpf$MAP_UPDATE_CONST_STR(0x2, &(0x7f0000000100)={{r2, 0xffffffffffffffff}, &(0x7f0000000240), &(0x7f0000000300)='%+9llu \x00'}, 0x20) bpf$BPF_MAP_CONST_STR_FREEZE(0x16, &(0x7f0000000000)={r3}, 0x4) bpf$PROG_LOAD(0x5, &(0x7f0000000340)={0x1, 0x10, &(0x7f0000000a00)=@framed={{0x18, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5}, [@snprintf={{}, {}, {0x7, 0x0, 0xb, 0x8, 0x0, 0x0, 0x10000}, {}, {}, {}, {}, {}, {}, {0x18, 0x3, 0x2, 0x0, r3}}]}, &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x41100, 0x0, '\x00', 0x0, @fallback=0xb, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r4 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r4, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000780)={&(0x7f00000005c0)=ANY=[], 0x28}, 0x1, 0x0, 0x0, 0xcd4}, 0x4000050) r5 = syz_genetlink_get_family_id$nl802154(&(0x7f0000000300), r1) r6 = socket$alg(0x26, 0x5, 0x0) bind$alg(r6, &(0x7f0000000340)={0x26, 'skcipher\x00', 0x0, 0x0, 'ecb-cast6-avx\x00'}, 0x58) setsockopt$ALG_SET_KEY(r6, 0x117, 0x1, &(0x7f0000000140)="2c385aa3d49100dc6626c892b6bc436a", 0x10) r7 = accept4(r6, 0x0, 0x0, 0x0) sendmsg$DCCPDIAG_GETSOCK(r7, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000003c0)={0x230, 0x13, 0x1, 0x70bd2c, 0x25dfdbfb, {0x1a, 0x3, 0x4, 0x1, {0x4e23, 0x4e24, [0x3, 0x8, 0x8000, 0x224], [0xa, 0xaea7, 0x3, 0x5], 0x0, [0x1ff, 0x5]}, 0xc, 0x2f}, [@INET_DIAG_REQ_BYTECODE={0x91, 0x1, "a550b29bec23f7c4c7bf8e4ba40fd052e4aa0188a95643215dc291e5491a031664e4ecfad4805d998ae391750cf625f33040226455244391c9f7033301ea1a27d4f3cbbb3920df9ae732381e6c9eae832b65d9746423107da35be5929001355437a86d947ec02fb238aee5f8acce49c10026fa000c55f2d22b53238993fa262edbb2dd4c8f3649bad9359049e1"}, @INET_DIAG_REQ_BYTECODE={0x14e, 0x1, "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"}]}, 0x230}, 0x1, 0x0, 0x0, 0x40800}, 0x4011) recvmmsg$unix(r7, &(0x7f0000003a40)=[{{0x0, 0x0, &(0x7f0000001500)=[{&(0x7f0000000180)=""/240, 0xf0}, {&(0x7f0000000000)=""/57, 0x39}, {&(0x7f0000000280)=""/26, 0x1a}], 0x3}}, {{0x0, 0x0, &(0x7f0000001740)=[{&(0x7f00000016c0)=""/121, 0x79}], 0x1}}], 0x2, 0x10100, 0x0) r8 = syz_init_net_socket$rose(0xb, 0x5, 0x0) setsockopt$rose(r8, 0x104, 0x3, &(0x7f0000000000)=0x10, 0x4) ioctl$sock_SIOCGIFINDEX_802154(r1, 0x8933, &(0x7f0000000ac0)={'wpan0\x00', 0x0}) sendmsg$NL802154_CMD_DEL_SEC_KEY(r1, &(0x7f0000000c80)={0x0, 0x0, &(0x7f0000000340)={&(0x7f0000001ec0)=ANY=[@ANYBLOB='p\x00\x00\x00', @ANYRES16=r5, @ANYBLOB="010024bd700000dcdf251800000054003080500001800800010000000000440003801d000200030000000600010003050000000002000100000006000300a1aa00000600040000000000000000000c0004000201aaaaaaaaaaaa06000300a1aa000008000300", @ANYRES32=r9], 0x70}}, 0x4040084) 528.355641ms ago: executing program 5 (id=4077): r0 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="0500000004000000ff0f000007"], 0x48) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000780)={{r0, 0xffffffffffffffff}, &(0x7f0000000040), &(0x7f0000000700)}, 0x20) bpf$PROG_LOAD(0x5, &(0x7f0000000340)={0x10, 0x4, &(0x7f0000000040)=ANY=[@ANYBLOB="e500000000000000791048000000000081000400000000009500740000000000"], &(0x7f0000003ff6)='GPL\x00', 0x8, 0xc3, &(0x7f0000000400)=""/198, 0x0, 0x0, '\x00', 0x0, @sk_msg, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0xffffff52}, 0x37) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0xd, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000000000000b70400000000000085000000c300000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0}, 0x94) r2 = openat$cgroup(0xffffffffffffffff, &(0x7f0000000080)='syz1\x00', 0x200002, 0x0) r3 = socket$kcm(0x10, 0x2, 0x4) sendmsg$inet(r3, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)=[{&(0x7f0000000100)="5c00000012006bab9e3fe3d86e6c1d0700147ea64e21160af3650ab68675f8001d000a00a0e69ee517d34460bc24eab556a705251e6182949a36c23d3b48dfd8cdbf9367b4fa51f60a64c9f408000300060100000800030011000000", 0x5c}], 0x1, 0x0, 0x0, 0x1f00c00e}, 0x0) bpf$BPF_LINK_CREATE(0x1c, &(0x7f0000000180)={0xffffffffffffffff, r2, 0xd, 0x0, @void}, 0x10) r4 = bpf$PROG_LOAD(0x5, &(0x7f0000000800)={0x6, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000b00)='syzkaller\x00', 0x0, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, @fallback=0x16, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5}, 0x94) ioctl$BTRFS_IOC_SET_RECEIVED_SUBVOL(r1, 0xc0c89425, &(0x7f00000001c0)={"359ea2fac9e6672bb02a614f06151223", 0x0, 0x0, {0x7ff, 0x4}, {0x1, 0x9}, 0x1, [0x80000001, 0xe86, 0x8, 0x0, 0x160, 0x1, 0x3, 0x8, 0x7, 0x5, 0x9, 0x0, 0x4, 0xfff, 0x9, 0x81]}) ioctl$BTRFS_IOC_DEV_INFO(r4, 0xd000941e, &(0x7f0000000b40)={0x0, "f032523f23b6cdf2adb1dabb8cc32c09"}) ioctl$BTRFS_IOC_SUBVOL_CREATE_V2(r2, 0x50009418, &(0x7f0000001b40)={{r2}, r5, 0x10, @inherit={0x68, &(0x7f00000002c0)={0x1, 0x4, 0xb9e, 0xa, {0x3f, 0x81, 0x8001, 0xd, 0x1}, [0xfffffffffffffe01, 0x100000000, 0x7, 0xfffffffffffffff0]}}, @devid=r6}) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000000)={r4, 0x2000000, 0xe, 0x0, &(0x7f00000004c0)="630b008646dc3f0adf33c9f7b986", 0x0, 0x1ff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x2}, 0x50) 519.620425ms ago: executing program 4 (id=4078): syz_emit_ethernet(0xb8, &(0x7f0000000080)=ANY=[@ANYBLOB="aaaaaaaaaaaabbbb02bbbbbb86dd60ee527a00823cff20010000000000000000000000000001ff02000000000000000000000000000173000000000000000420880b0000000000000800000086dd4abee71bfd001ae98ca4793a90ebf7fc920f6f822dd2d85f4463311baf0b19ed0b4e6276655c893490b0d86c5434c4dd54cf8b69080088be00000001100000000100000000000000080022eb000000002000000802000000000000000000000008006558000000000000"], 0x0) sendmsg$NBD_CMD_CONNECT(0xffffffffffffffff, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000003c0)=ANY=[@ANYBLOB='h\x00\x00\x00', @ANYRES16, @ANYBLOB="0100000000000000000001"], 0x6c}}, 0x0) r0 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f00000003c0)=ANY=[@ANYBLOB="1400000015000103"], 0x14}, 0x1, 0x0, 0x0, 0x4}, 0x0) readv(r0, &(0x7f0000000040)=[{&(0x7f0000000540)=""/4114, 0x1012}], 0x1) r1 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r1, &(0x7f00000008c0)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000900)=ANY=[@ANYBLOB="5c0800002c0007012bbd700000000000097c00000c00018006000600843b000009000280040071008c0000000800e400", @ANYRES32, @ANYBLOB="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", @ANYRES32, @ANYBLOB="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"], 0x85c}, 0x1, 0x0, 0x0, 0x24048011}, 0xc000) 495.225507ms ago: executing program 0 (id=4079): r0 = syz_init_net_socket$ax25(0x3, 0x5, 0xc3) r1 = socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$nl80211(&(0x7f0000000000), r1) r2 = accept$ax25(r0, &(0x7f0000000040)={{0x3, @null}, [@netrom, @default, @default, @rose, @default, @rose, @rose]}, &(0x7f00000000c0)=0x48) sendto$ax25(r2, &(0x7f0000000100)="2f09db71b0ec366643549fed4e514659c13c75ccf91c78f70859", 0x1a, 0x80, &(0x7f0000000140)={{0x3, @netrom={0xbb, 0xbb, 0xbb, 0xbb, 0xbb, 0x0, 0x0}}, [@remote={0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0x3}, @bcast, @bcast, @rose={0xbb, 0xbb, 0xbb, 0x1, 0x0}, @netrom={0xbb, 0xbb, 0xbb, 0xbb, 0xbb, 0x0, 0x0}, @remote={0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0x3}, @bcast, @netrom={0xbb, 0xbb, 0xbb, 0xbb, 0xbb, 0x0, 0x0}]}, 0x48) ioctl$sock_kcm_SIOCKCMCLONE(0xffffffffffffffff, 0x89e2, &(0x7f00000001c0)={r1}) bind$inet6(r3, &(0x7f0000000200)={0xa, 0x4e24, 0x6, @private0, 0x4}, 0x1c) bpf$MAP_UPDATE_CONST_STR(0x2, &(0x7f00000002c0)={{0xffffffffffffffff, 0xffffffffffffffff}, &(0x7f0000000240), &(0x7f0000000280)='%pi6 \x00'}, 0x20) ioctl$sock_SIOCGSKNS(r1, 0x894c, &(0x7f0000000300)=0x3) bind$ax25(r2, &(0x7f0000000340)={{0x3, @remote={0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0x3}, 0x7}, [@remote={0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0x0}, @rose={0xbb, 0xbb, 0xbb, 0x1, 0x0}, @remote={0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0x0}, @default, @remote={0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0x2}, @rose={0xbb, 0xbb, 0xbb, 0x1, 0x0}, @netrom={0xbb, 0xbb, 0xbb, 0xbb, 0xbb, 0x0, 0x0}, @default]}, 0x48) setsockopt$inet6_group_source_req(r3, 0x29, 0x2d, &(0x7f00000003c0)={0xd, {{0xa, 0x4e23, 0xfffffffd, @remote, 0x80000000}}, {{0xa, 0x4e23, 0x9, @rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x01', 0x9}}}, 0x108) getsockopt$inet_sctp_SCTP_AUTH_ACTIVE_KEY(r3, 0x84, 0x18, &(0x7f0000000500)={0x0, 0x2}, &(0x7f0000000540)=0x8) syz_genetlink_get_family_id$tipc(&(0x7f0000000580), r3) syz_init_net_socket$nl_rdma(0x10, 0x3, 0x10) ioctl$sock_ipv4_tunnel_SIOCADDTUNNEL(r3, 0x89f1, &(0x7f0000000600)={'gretap0\x00', &(0x7f00000005c0)={'sit0\x00', 0x0, 0x8000, 0x8000, 0xfffffffb, 0x8, {{0x6, 0x4, 0x2, 0x0, 0x18, 0x66, 0x0, 0x40, 0x2f, 0x0, @dev={0xac, 0x14, 0x14, 0x40}, @dev={0xac, 0x14, 0x14, 0x19}, {[@ra={0x94, 0x4, 0x1}]}}}}}) r6 = socket$xdp(0x2c, 0x3, 0x0) bind$xdp(0xffffffffffffffff, &(0x7f0000000640)={0x2c, 0x7, r5, 0x38, r6}, 0x10) r7 = syz_init_net_socket$nfc_llcp(0x27, 0x3, 0x1) setsockopt$nfc_llcp_NFC_LLCP_RW(r7, 0x118, 0x0, &(0x7f0000000680)=0x8, 0x4) ioctl$IOCTL_GET_NCIDEV_IDX(r6, 0x0, &(0x7f00000006c0)=0x0) bind(r3, &(0x7f0000000700)=@nfc={0x27, r8, 0xffffffffffffffff, 0x3}, 0x80) ioctl$sock_netrom_SIOCADDRT(r3, 0x890b, &(0x7f0000000780)={0x0, @rose={0xbb, 0xbb, 0xbb, 0x1, 0x0}, @netrom={'nr', 0x0}, 0xffff, 'syz0\x00', @remote={0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0x2}, 0x3, 0x8, [@null, @remote={0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0x3}, @default, @netrom={0xbb, 0xbb, 0xbb, 0xbb, 0xbb, 0x0, 0x0}, @remote={0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0x1}, @netrom={0xbb, 0xbb, 0xbb, 0xbb, 0xbb, 0x0, 0x0}, @null, @netrom={0xbb, 0xbb, 0xbb, 0xbb, 0xbb, 0x0, 0x0}]}) setsockopt$MISDN_TIME_STAMP(r3, 0x0, 0x1, &(0x7f0000000800), 0x4) socket$inet6_sctp(0xa, 0x1, 0x84) socket$unix(0x1, 0x4, 0x0) getsockopt$IP6T_SO_GET_REVISION_MATCH(r3, 0x29, 0x44, &(0x7f0000000840)={'ipvs\x00'}, &(0x7f0000000880)=0x1e) r9 = syz_genetlink_get_family_id$l2tp(&(0x7f0000000900), r3) sendmsg$L2TP_CMD_SESSION_MODIFY(r3, &(0x7f00000009c0)={&(0x7f00000008c0), 0xc, &(0x7f0000000980)={&(0x7f0000000940)={0x1c, r9, 0x200, 0x70bd26, 0x25dfdbfc, {}, [@L2TP_ATTR_PW_TYPE={0x6, 0x1, 0xb}]}, 0x1c}, 0x1, 0x0, 0x0, 0x28080}, 0x10) r10 = bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000c00)={0x6, 0x1c, &(0x7f0000000a00)=@ringbuf={{0x18, 0x0, 0x0, 0x0, 0x7}, {}, {}, [@call={0x85, 0x0, 0x0, 0xbe}, @jmp={0x5, 0x1, 0x7, 0x7, 0xb, 0xfffffffffffffff8, 0x10}, @ringbuf_query, @exit, @btf_id={0x18, 0xb, 0x3, 0x0, 0x2}, @initr0={0x18, 0x0, 0x0, 0x0, 0x7, 0x0, 0x0, 0x0, 0x5eae}, @func={0x85, 0x0, 0x1, 0x0, 0x8}, @ldst={0x3, 0x0, 0x6, 0x1, 0x3, 0x10}], {{}, {0x7, 0x0, 0xb, 0x2, 0x0, 0x0, 0x1}, {0x85, 0x0, 0x0, 0x85}}}, &(0x7f0000000b00)='GPL\x00', 0x10001, 0x0, 0x0, 0x0, 0x20, '\x00', r5, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, &(0x7f0000000b40)={0x5, 0x1, 0xfffffff7}, 0x10, 0x0, 0x0, 0x2, &(0x7f0000000b80)=[r4, r4], &(0x7f0000000bc0)=[{0x5, 0x4, 0x9, 0x3}, {0x0, 0x1, 0x1, 0xc}], 0x10, 0x1}, 0x94) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000f80)={r10, 0x0, 0xef, 0x0, &(0x7f0000000cc0)="ab09a1cd4758b5210fa8b08646c405ec355cdc21994e7e73ceaeff4c7f6038aa0dcb4d36f0adb14e345a5b6a7e09c7ba3a77ab7fb348507499650d39c188cd83b07fbc24375e371ab6d0c519797105da95c8e9e45bdbab5f065e536bdd67357383b289ce0240f4c4ae6a88e78b6f87f117683c384f825f4f03622c1e36837af4ad9cbb3edaaa406ba4c9db26f04265192512a7bfa779e1569029eb54abfe8700aa427ce58af2e0831a7b7ca8bf099353a52cac67d2741d301097239a65360449bbfd1e195b7690c61d8544c06f9bf15d17e9679e7adbddccad83a31e89cc4c743f5d779c7e329d06f6bb45e3fd92ae", &(0x7f0000000dc0), 0x4d2, 0x0, 0xf5, 0x45, &(0x7f0000000e00)="e8631c01731630ebcf266a2d47b0def46321a5eab2bac6b14f36f03264435b6a149c0fd395e11ff5dfd7c7a9cacad8e99b977a87a4a99dfb1e633f09e9607b5b7e7e30da8917cc435778f93315a03c8bd7ac4092571b9e9f1b638ac5f47aa9ac8498a665c514afb2587e8cae3f113f024e324bd1bc5e140b31fa7790808ef5132f8b0464689b8526d746546288f9bddbcfb1b0c8de71a1c56d527b904bb6331534ebc2c9180fea06304fb51ce3d4620ce983d6dbbbddf32e73824009ceac89bd670a196b8f27fda1199ccd175648dbcdb96778089156d419985c0dcb0c8d3764ca28a08a91dc663762a1d2b5358d193a946bd7535b", &(0x7f0000000f00)="30b2bae9825883fed5533214dfe3174d42b39c32e4d431233801750ce012c10dc356a4907788b8afc0bdad09ddfbb9eb54669a2a85cb1a4df63fd3b22f1ace229591c73fe4", 0x4}, 0x50) 389.015974ms ago: executing program 4 (id=4080): r0 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_tcp_TCP_QUEUE_SEQ(r0, 0x6, 0x15, &(0x7f0000000000)=0x80000000, 0x4) r1 = socket$nl_generic(0x10, 0x3, 0x10) r2 = syz_genetlink_get_family_id$devlink(&(0x7f0000000080), 0xffffffffffffffff) sendmsg$DEVLINK_CMD_SB_OCC_MAX_CLEAR(r1, &(0x7f0000000200)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x80}, 0xc, &(0x7f00000001c0)={&(0x7f00000000c0)={0xd4, r2, 0x4, 0x70bd28, 0x25dfdbfe, {}, [{@pci={{0x8}, {0x11}}, {0x8, 0xb, 0x6}}, {@nsim={{0xe}, {0xf, 0x2, {'netdevsim', 0x0}}}, {0x8, 0xb, 0x4}}, {@nsim={{0xe}, {0xf, 0x2, {'netdevsim', 0x0}}}, {0x8, 0xb, 0x8}}, {@pci={{0x8}, {0x11}}, {0x8, 0xb, 0x8}}, {@nsim={{0xe}, {0xf, 0x2, {'netdevsim', 0x0}}}, {0x8, 0xb, 0x4}}]}, 0xd4}, 0x1, 0x0, 0x0, 0xb33def9cce259a2d}, 0x4000010) r3 = socket$l2tp(0x2, 0x2, 0x73) accept4$inet(r3, &(0x7f0000000240)={0x2, 0x0, @multicast1}, &(0x7f0000000280)=0x10, 0x80800) setsockopt$inet6_tcp_TCP_CONGESTION(r0, 0x6, 0xd, &(0x7f00000002c0)='illinois', 0x8) r4 = socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$devlink(&(0x7f0000000300), r4) r5 = socket$isdn_base(0x22, 0x3, 0x0) bind$isdn_base(r5, &(0x7f0000000340)={0x22, 0x97, 0x8, 0x9, 0xa}, 0x6) pipe(&(0x7f0000000380)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PPPIOCGFLAGS1(r7, 0x8004745a, &(0x7f00000003c0)) r8 = socket$nl_crypto(0x10, 0x3, 0x15) sendmsg$nl_crypto(r8, &(0x7f0000000580)={&(0x7f0000000400)={0x10, 0x0, 0x0, 0x200}, 0xc, &(0x7f0000000540)={&(0x7f0000000440)=@get={0xf0, 0x13, 0x300, 0x70bd27, 0x25dfdbfb, {{'drbg_pr_hmac_sha1\x00'}, '\x00', '\x00', 0x2000, 0x2000}, [{0x8, 0x1, 0x3}, {0x8}]}, 0xf0}, 0x1, 0x0, 0x0, 0x4000}, 0x40004) shutdown(r5, 0x0) r9 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_ipv4_tunnel_SIOCGETTUNNEL(r8, 0x89f0, &(0x7f00000006c0)={'tunl0\x00', &(0x7f0000000600)={'gretap0\x00', 0x0, 0x8000, 0x7800, 0x7, 0x3, {{0x24, 0x4, 0x1, 0x8, 0x90, 0x64, 0x0, 0xf4, 0x4, 0x0, @multicast2, @empty, {[@noop, @ssrr={0x89, 0x1b, 0x4d, [@initdev={0xac, 0x1e, 0x1, 0x0}, @rand_addr=0x64010102, @loopback, @dev={0xac, 0x14, 0x14, 0x20}, @private=0xa010102, @multicast1]}, @timestamp_prespec={0x44, 0x54, 0x6f, 0x3, 0x8, [{@private=0xa010102}, {@multicast2, 0x3}, {@empty}, {@empty}, {@loopback, 0x6a}, {@dev={0xac, 0x14, 0x14, 0x36}, 0xfffffff9}, {@remote, 0x4}, {@private=0xa010102, 0x3}, {@rand_addr=0x64010101, 0x10}, {@loopback, 0xb}]}, @timestamp={0x44, 0xc, 0xdf, 0x0, 0x1, [0x101, 0xffffffff]}]}}}}}) sendmsg$nl_route_sched(r7, &(0x7f0000000780)={&(0x7f00000005c0)={0x10, 0x0, 0x0, 0x80}, 0xc, &(0x7f0000000740)={&(0x7f0000000700)=@gettfilter={0x3c, 0x2e, 0x20, 0x70bd2a, 0x25dfdbfc, {0x0, 0x0, 0x0, r10, {0xe, 0xe}, {0x6, 0xc}, {0x2, 0xc}}, [{0x8, 0xb, 0x3}, {0x8}, {0x8, 0xb, 0xff}]}, 0x3c}, 0x1, 0x0, 0x0, 0x4000}, 0x4040) r11 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000800), r4) sendmsg$NL80211_CMD_UPDATE_OWE_INFO(r4, &(0x7f0000000940)={&(0x7f00000007c0)={0x10, 0x0, 0x0, 0x400}, 0xc, &(0x7f0000000900)={&(0x7f0000000840)={0xbc, r11, 0x300, 0x70bd2d, 0x25dfdbfe, {{}, {@void, @void}}, [@NL80211_ATTR_MAC={0xa, 0x6, @device_b}, @NL80211_ATTR_MAC={0xa, 0x6, @broadcast}, @NL80211_ATTR_MAC={0xa, 0x6, @device_b}, @NL80211_ATTR_IE={0x7a, 0x2a, [@mesh_chsw={0x76, 0x6, {0x5, 0x8, 0x8, 0x5}}, @measure_req={0x26, 0x53, {0x3, 0xfb, 0x0, "b8870d188323b329a38be2e467f4ea9536921d5a686ca606f56f80d51b9162264218537931085ecaba3c421851a1411dea863e614d6c663cdfae2645a70ef35ef364318eb8f0fa39b7b1e401617d9c12"}}, @chsw_timing={0x68, 0x4, {0xa, 0xfffc}}, @ssid={0x0, 0x6, @default_ap_ssid}, @sec_chan_ofs={0x3e, 0x1, 0x3}, @mesh_id={0x72, 0x6}]}, @NL80211_ATTR_STATUS_CODE={0x6, 0x48, 0x1e}]}, 0xbc}, 0x1, 0x0, 0x0, 0x24000801}, 0x4040850) ioctl$sock_kcm_SIOCKCMCLONE(r6, 0x89e2, &(0x7f0000000980)={r3}) setsockopt$ALG_SET_KEY(r12, 0x117, 0x1, &(0x7f00000009c0)="fdc02a19d5c08393777c783e06179e8989f973ec9ed852c0f9288b117faeeace8f36d651dc07387eabb1a5bc94d07249a1e6175fd35228ac9f1f325fce88f145e66a2128cbf8703c7a7184c5e8e4b731d216300fb9dc39a8ddb385403d730ad80da8d58dc5b6e9758fa2c43a056367710a6bc7a0571b28539c625bbd0e72fd125852ab56374b105480769449cf42", 0x8e) ioctl$SIOCAX25NOUID(r12, 0x89e3, &(0x7f0000000a80)) r13 = syz_genetlink_get_family_id$ethtool(&(0x7f0000000b00), r9) sendmsg$ETHTOOL_MSG_EEE_SET(r9, &(0x7f0000000c00)={&(0x7f0000000ac0)={0x10, 0x0, 0x0, 0x1000000}, 0xc, &(0x7f0000000bc0)={&(0x7f0000000b40)={0x48, r13, 0x10, 0x70bd27, 0x25dfdbfe, {}, [@ETHTOOL_A_EEE_MODES_OURS={0x8, 0x2, 0x0, 0x1, [@ETHTOOL_A_BITSET_NOMASK={0x4}]}, @ETHTOOL_A_EEE_TX_LPI_ENABLED={0x5}, @ETHTOOL_A_EEE_TX_LPI_ENABLED={0x5}, @ETHTOOL_A_EEE_TX_LPI_ENABLED={0x5}, @ETHTOOL_A_EEE_HEADER={0x14, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_FLAGS={0x8}, @ETHTOOL_A_HEADER_FLAGS={0x8}]}]}, 0x48}, 0x1, 0x0, 0x0, 0x80}, 0x10) sendmsg$IPSET_CMD_LIST(r7, &(0x7f0000000d40)={&(0x7f0000000c40)={0x10, 0x0, 0x0, 0x80000000}, 0xc, &(0x7f0000000d00)={&(0x7f0000000c80)={0x50, 0x7, 0x6, 0x201, 0x0, 0x0, {0x0, 0x0, 0x6}, [@IPSET_ATTR_FLAGS={0x8, 0x6, 0x1, 0x0, 0xffff}, @IPSET_ATTR_FLAGS={0x8, 0x6, 0x1, 0x0, 0x319c84e1}, @IPSET_ATTR_FLAGS={0x8, 0x6, 0x1, 0x0, 0x3}, @IPSET_ATTR_FLAGS={0x8, 0x6, 0x1, 0x0, 0x5}, @IPSET_ATTR_SETNAME={0x9, 0x2, 'syz0\x00'}, @IPSET_ATTR_PROTOCOL={0x5}, @IPSET_ATTR_PROTOCOL={0x5}]}, 0x50}}, 0x9811) ioctl$sock_FIOGETOWN(r8, 0x8903, &(0x7f0000000d80)=0x0) ioctl$sock_FIOSETOWN(r12, 0x8901, &(0x7f0000000dc0)=r14) 299.963213ms ago: executing program 0 (id=4081): r0 = socket$inet6_tcp(0xa, 0x1, 0x0) r1 = socket$inet_tcp(0x2, 0x1, 0x0) bpf$MAP_CREATE(0x0, &(0x7f0000000a40)=ANY=[], 0x50) r2 = socket$can_bcm(0x1d, 0x2, 0x2) connect$can_bcm(r2, &(0x7f0000000180), 0x10) sendmsg$can_bcm(r2, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000006c0)=ANY=[@ANYBLOB="05000000d866551c22f150221fa013003939a0ead7f342f87739720d9408b2be880e352ce4f0785c6a8ce20cee8bd67245916c4ec15011739af636096b3bd951fb2b81ebc21f1fd664bbad980209aa4dd8b25f96a0012315556b807369832dbe697aa9ebe60ac1588789a9c6ed96b70990efb48c1fafd39aff4ed6ba2f8b7ce62839fab509ecf8a0d2dbfeeb05b61fb0afe0d4e6e30881d5c03895cac7faeac36c30d0a1f9ca22aae4fc703dee0b005d57493106", @ANYRES32, @ANYRES64=0x2710, @ANYRES64=0x0, @ANYRES8, @ANYRES16=r2], 0x48}, 0x1, 0x0, 0x0, 0x50}, 0x0) bind$inet(r1, &(0x7f0000000380)={0x2, 0x4e22, @empty}, 0x10) setsockopt$inet6_int(r0, 0x29, 0x50, &(0x7f0000000000)=0x1ffffd, 0x4) bind$inet6(r0, &(0x7f0000000140)={0xa, 0x4e22, 0x0, @empty, 0xffffffff}, 0x1c) r3 = socket$netlink(0x10, 0x3, 0x8000000004) r4 = socket(0xa, 0x2, 0x0) setsockopt$inet_int(r4, 0x0, 0x18, &(0x7f0000000080)=0x200, 0x4) bind$inet6(r4, &(0x7f0000000000)={0xa, 0x0, 0x7, @private2={0xfc, 0x2, '\x00', 0x1}, 0x7fff}, 0x1c) writev(r3, &(0x7f00000000c0)=[{&(0x7f0000000200)="580000001400192340834b80040d8c560a0677bc45ff810500000000000058000b480400945f64009400050028925a01000000000000008000f0fffeffe809000000fff5dd0000001000010002081000418e00000004fcff", 0x58}], 0x1) ioctl$sock_ipv6_tunnel_SIOCGETTUNNEL(0xffffffffffffffff, 0x89f0, &(0x7f0000000040)={'ip6gre0\x00', &(0x7f0000000440)={'syztnl0\x00', 0x0, 0x4, 0x8, 0xbe, 0x1, 0x708fb595da58031d, @private0={0xfc, 0x0, '\x00', 0x1}, @mcast2, 0x1, 0x10, 0x7f7ff98d, 0x401}}) r5 = socket$inet_sctp(0x2, 0x5, 0x84) setsockopt$inet_sctp_SCTP_SOCKOPT_CONNECTX(r5, 0x84, 0x6e, &(0x7f0000009200)=[@in={0x2, 0x0, @remote}], 0xf) ioctl$ifreq_SIOCGIFINDEX_wireguard(r5, 0x8933, &(0x7f00000001c0)={'wg2\x00', 0x0}) setsockopt$inet_mreqn(r1, 0x0, 0x24, &(0x7f0000000100)={@loopback, @remote, r6}, 0xc) r7 = socket$nl_netfilter(0x10, 0x3, 0xc) r8 = openat$tun(0xffffffffffffff9c, &(0x7f0000000400), 0x0, 0x0) socket$nl_netfilter(0x10, 0x3, 0xc) ioctl$sock_netdev_private(r4, 0x89f3, &(0x7f0000000340)="a6cc04e2d8bb1d2db8b2f1c38ad32ccf15b86e3ae60979e2b368d57d980a8c5132fa96325dd874c55a8ff69813a308d0") close(r8) syz_init_net_socket$nl_rdma(0x10, 0x3, 0x10) bpf$BPF_PROG_WITH_BTFID_LOAD(0x5, &(0x7f0000000600)=@bpf_lsm={0x18, 0x5, &(0x7f00000002c0)=ANY=[], &(0x7f0000000100)='GPL\x00', 0x7, 0x0, 0x0, 0x0, 0x5}, 0x94) ioctl$SIOCSIFHWADDR(r8, 0x8914, &(0x7f0000002280)={'syzkaller0\x00'}) ioctl$SIOCSIFHWADDR(r8, 0x8924, &(0x7f00000003c0)={'gre0\x00', @local}) sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f00000004c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000580)=ANY=[@ANYBLOB="140000001000010000000000000000000500000a28000000000a030000000000000000000a00000708000240000000020900010073797a31000000002c000000030a010100000000000000000a0000070900010073797a31000000000900030073797a320000000014000000110001", @ANYRES64], 0x7c}, 0x1, 0x0, 0x0, 0x4000}, 0x0) sendmsg$NFT_BATCH(r7, &(0x7f0000009b40)={0x0, 0x0, &(0x7f0000009b00)={&(0x7f00000002c0)=ANY=[@ANYBLOB="140000001000010000000000000000000100000a14000000090a410400000001eeff000000040000000100000a"], 0x2a}, 0x1, 0x0, 0x0, 0x4044050}, 0x40) 299.525694ms ago: executing program 5 (id=4082): r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nfc(&(0x7f00000000c0), r0) (async) r2 = bpf$MAP_CREATE(0x0, &(0x7f0000000400)=ANY=[@ANYBLOB="0b0000000b000e0001000100091c6d000100000005008f0e5bdb5cd4ca7e4cc9d203403c09bf9c72f556b0be4d4d6693271ebcbd25adf06a5501000000a457a718936f741ad4585beba4c0b0c6e8a5c1ddfe28e1eda77a2d93308bcaf0bf248d5501bfd70cee4fa0a68512ed6a78407ca13c3661bedce5", @ANYRES32, @ANYBLOB='\x00'/20, @ANYRES32=0x0, @ANYRES32, @ANYBLOB='\x00'/28], 0x48) mmap(&(0x7f000009f000/0x800000)=nil, 0x800000, 0x0, 0x11, r2, 0x0) r3 = socket$nl_route(0x10, 0x3, 0x0) r4 = socket$unix(0x1, 0x1, 0x0) ioctl$sock_SIOCGIFINDEX(r4, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r3, &(0x7f00000012c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000280)=@newqdisc={0x48, 0x24, 0x4ee4e6a52ff56541, 0x70bd26, 0xffffffff, {0x0, 0x0, 0x0, r5, {0x0, 0xfff1}, {0xffff, 0xffff}}, [@qdisc_kind_options=@q_htb={{0x8}, {0x1c, 0x2, [@TCA_HTB_INIT={0x18, 0x2, {0x3, 0x8, 0x4}}]}}]}, 0x48}}, 0x20040084) (async) r6 = bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000080)={&(0x7f0000000200)={{0xeb9f, 0x1, 0x0, 0x18, 0x0, 0x13b, 0x13b, 0x7, [@restrict={0x3, 0x0, 0x0, 0xb, 0x1}, @const={0x5, 0x0, 0x0, 0xa, 0x2}, @enum={0x4, 0x4, 0x0, 0x6, 0x4, [{0xe, 0x9}, {0x8, 0x9}, {0xf, 0x6}, {0xc, 0x7}]}, @int={0x3, 0x0, 0x0, 0x1, 0x0, 0x1f, 0x0, 0x51, 0x2}, @datasec={0x4, 0x6, 0x0, 0xf, 0x2, [{0x5, 0x9, 0x4}, {0x4, 0x6, 0x80}, {0x4, 0x3, 0x3}, {0x3, 0xd, 0xd}, {0x4, 0x8, 0x1ff}, {0x2, 0x8, 0x690e}], "df88"}, @array={0x0, 0x0, 0x0, 0x3, 0x0, {0x2, 0x5, 0x80000001}}, @datasec={0xf, 0x1, 0x0, 0xf, 0x1, [{0x4, 0x2, 0x500}], '_'}, @array={0x0, 0x0, 0x0, 0x3, 0x0, {0x1, 0x2, 0x6}}, @union={0x7, 0x5, 0x0, 0x5, 0x0, 0x6, [{0x2, 0x3, 0x3}, {0x8, 0x2, 0x3}, {0x3, 0x3, 0x9}, {0x1, 0x4, 0x7}, {0x6, 0x3}]}]}, {0x0, [0x30, 0x0, 0x0, 0x2e, 0x0]}}, &(0x7f0000000000)=""/113, 0x15b, 0x71, 0x1, 0x1, 0x10000}, 0x28) bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000380)={0x2, 0x4, 0x8, 0x1, 0x80, r2, 0x7, '\x00', r5, r6, 0x4, 0x3}, 0x50) (async) sendmsg$NFC_CMD_GET_DEVICE(r0, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000140)={0x1c, r1, 0x1, 0x70bd27, 0x25dfdbff, {}, [@NFC_ATTR_DEVICE_INDEX={0x8}]}, 0x1c}, 0x1, 0x0, 0x0, 0x4}, 0x20040014) 181.686393ms ago: executing program 5 (id=4083): socket$inet_udp(0x2, 0x2, 0x0) (async) r0 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000040)={'tunl0\x00', 0x0}) (async) r2 = openat$cgroup_ro(0xffffffffffffffff, &(0x7f0000000080)='cpuacct.stat\x00', 0x0, 0x0) unshare(0x400) (async) r3 = socket$inet6_tcp(0xa, 0x1, 0x0) (async) r4 = accept4$unix(r2, &(0x7f0000000200), &(0x7f0000000280)=0x6e, 0x80000) connect$pppl2tp(r2, &(0x7f00000002c0)=@pppol2tpv3in6={0x18, 0x1, {0x0, r4, 0x2, 0x2, 0x2, 0x4, {0xa, 0x4e23, 0x9, @ipv4={'\x00', '\xff\xff', @loopback}, 0xa97}}}, 0x3a) socket$nl_generic(0x10, 0x3, 0x10) (async) r5 = openat$tun(0xffffffffffffff9c, &(0x7f0000000000), 0x40241, 0x0) ioctl$TUNSETIFF(r5, 0x400454ca, &(0x7f0000000200)={'syzkaller1\x00', 0xc201}) ioctl$TUNSETLINK(r5, 0x400454cd, 0x6) r6 = socket$kcm(0x2, 0xa, 0x2) ioctl$SIOCSIFHWADDR(r6, 0x8914, &(0x7f00000001c0)={'syzkaller1\x00', @broadcast}) close(0x4) (async) getsockopt$inet6_tcp_int(r3, 0x6, 0x2a, 0x0, &(0x7f0000000b40)) sendto$packet(r2, &(0x7f00000000c0)="1fb47915e9ead72c5e7b3f635dae93e550ae3e25cbe1cea7438e013754f094aa5b2b998cb6e3914ba38e5b28dbee5cd51af0016ec406a9c20e6b399dd0d5d19fcea08680b8a005bbd7813d444e3fa424b9b54aa14460ca5d3aa6573e3bd923ba9e275190c4b3813cb434408de7793f63b1d663951856323e8af5545c96cf567b174f57d345039f3611320a8fb009d297fa146de8115cbed9af7484e8cf00c70f582abce92dffcc535b2a85a829bd66faf63e3c076141a5b653cf545b3e771fe4cfcc4fa20bb5d6eebcd6453c7e71940ec151ab6cee02afff96470f8a6d3a9187258a8569", 0xe4, 0x2400c040, &(0x7f00000001c0)={0x11, 0x1c, r1, 0x1, 0x6, 0x6, @link_local={0x1, 0x80, 0xc2, 0x0, 0x0, 0x2}}, 0x14) (async) r7 = bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000340)={0x2, 0x4, 0x8, 0x1, 0x80, 0x0, 0x0, '\x00', 0x0, 0x0}, 0x48) r8 = bpf$PROG_LOAD(0x5, &(0x7f00000004c0)={0x11, 0x10, &(0x7f0000000000)=ANY=[@ANYBLOB="18000000000000000000000000000000b7080000000000007b8af8ff00000000b7080000000000007b8af0ff00000000bfa100000000000007010000f8ffffffbfa400000000000007040000f0ffffffb70200000800000018230000", @ANYRES32=r7, @ANYBLOB="0000000000000000b703000008000040850000006900000095"], &(0x7f0000000600)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000640)={r8, 0x0, 0x0, 0x23000000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x50) sendmsg$nl_route_sched(r0, &(0x7f0000001200)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000001a40)=@newqdisc={0x154, 0x24, 0x4ee4e6a52ff56541, 0x70bd2d, 0xfffffffe, {0x0, 0x0, 0x0, r1, {0x0, 0xb}, {0xffff, 0xffff}}, [@qdisc_kind_options=@q_choke={{0xa}, {0x124, 0x2, [@TCA_CHOKE_STAB={0x104, 0x2, "f38b9c869dc5c3e26ac45fddcba0ca9d8b1f049df651f99cae564df88a24d842876061dbdf39258e824d497e760b8f9cbe9125090dff51a239401c5dde8d09c8d7a0d142fcbe91b0816252d3e22656cfc65722a377c91594e0b8539e22c3bffb59e36f8245041a164c6c84ddc21798a522106e087bbdb7776f6e4d64596ca241dacd1b462c15479667813f5ecf263d6e0530300565b55f91ef6778d920386e69ab98bb2d7eab2acec199eb22dff43085e4b72ae0a3a4dc3e54ea506f695d494ec0a6544905af790f399bbd6cd89040d3d877025715674be73f7f7b985ac540ec4b274cad55c6d69cb9c196cdb2f139085ba4c0a72e6c14a6bd22b1b65e045208"}, @TCA_CHOKE_MAX_P={0x8, 0x3, 0x3c}, @TCA_CHOKE_PARMS={0x14, 0x1, {0x400, 0x80000000, 0x9, 0x9, 0x3, 0x12, 0x1}}]}}]}, 0x154}}, 0x4000010) 169.598272ms ago: executing program 4 (id=4084): r0 = socket$nl_route(0x10, 0x3, 0x0) bpf$PROG_LOAD(0x5, &(0x7f0000000440)={0x3, 0xc, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @sched_cls, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r1 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a) setsockopt$inet6_IPV6_HOPOPTS(r1, 0x29, 0x36, &(0x7f0000000040)=ANY=[], 0x8) connect$inet6(r1, &(0x7f0000000100)={0xa, 0x0, 0x0, @mcast2, 0x7}, 0x1c) setsockopt$SO_BINDTODEVICE(r1, 0x1, 0x19, &(0x7f0000000080)='bridge0\x00', 0x10) sendmmsg$inet6(r1, &(0x7f0000000a00)=[{{0x0, 0x0, &(0x7f0000000900)=[{&(0x7f00000000c0)="eb2353", 0x3}], 0x1}}], 0x1, 0x6204c800) sendto$inet6(r1, &(0x7f0000000440)='\x00\x00', 0x1b, 0x20003bc4, 0x0, 0x0) sendmsg$nl_route(r0, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000000)=@newlink={0x44, 0x10, 0x403, 0x0, 0x80000000, {0x0, 0x0, 0x0, 0x0, 0x88adfda5}, [@IFLA_LINKINFO={0x24, 0x12, 0x0, 0x1, @bond={{0x9}, {0x14, 0x2, 0x0, 0x1, [@IFLA_BOND_MODE={0x5, 0x1, 0x1}, @IFLA_BOND_LP_INTERVAL={0x8, 0x13, 0x6}]}}}]}, 0x44}, 0x1, 0x0, 0x0, 0x8044}, 0x8000) 16.172115ms ago: executing program 0 (id=4085): r0 = socket(0x10, 0x3, 0x0) getsockopt$SO_TIMESTAMP(r0, 0x1, 0x1d, &(0x7f0000000080), &(0x7f0000000140)=0x4) setsockopt$netlink_NETLINK_TX_RING(r0, 0x10e, 0xc, &(0x7f0000000180)={0x80000020}, 0x10) r1 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a) connect$inet6(r1, &(0x7f00000001c0)={0xa, 0x0, 0x120, @empty, 0x1000}, 0x1c) sendmmsg$inet6(r1, &(0x7f0000000180)=[{{0x0, 0x0, &(0x7f0000000380)=[{&(0x7f0000000240)="fb3b4ae3422220078307c0b534694f49567ea877b6d526b7493042a7ff2e1ca4684ba63d2a23c81b0fcc40c71ad475fc253a6112f471956b53851c02ea953a7c433c40f6252f472ff1e50f9e8df478925800ff2bd87c265dfe26ebd268adb65594677bfd1fd0ca2d08d64e9e8922ed9da0e9", 0xffdb}], 0x1}}], 0x1, 0x4404c884) sendto$inet6(r1, &(0x7f0000000300), 0x16, 0x3b00, 0x0, 0xfffffffffffffdfd) sendmsg$nl_route(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000340)=ANY=[@ANYBLOB="1c0000001a00010000000000000000001c14000b"], 0x1c}}, 0x0) r2 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='memory.events\x00', 0x275a, 0x0) mmap(&(0x7f0000002000/0x4000)=nil, 0x4000, 0xedc623580215bdcd, 0x12, r2, 0x0) getsockopt$netrom_NETROM_T4(r2, 0x103, 0x6, &(0x7f0000000200)=0x4, &(0x7f00000002c0)=0x4) r3 = socket(0x1e, 0x4, 0x0) setsockopt$TIPC_DEST_DROPPABLE(r3, 0x10f, 0x81, &(0x7f0000000480), 0x4) recvmmsg(r3, &(0x7f0000000800)=[{{0x0, 0x0, &(0x7f0000000000)=[{&(0x7f0000001e40)=""/174, 0xae}], 0x1, &(0x7f0000001fc0)=""/65, 0x41}, 0x1}], 0x1, 0x40002122, 0x0) sendmsg$tipc(r3, &(0x7f0000000100)={&(0x7f0000000040)=@nameseq={0x1e, 0x1, 0x3, {0x1, 0x1, 0x2}}, 0x10, &(0x7f0000000380)=[{&(0x7f00000000c0)="e8", 0x1}], 0x1}, 0x4800) 0s ago: executing program 4 (id=4086): r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$tipc(&(0x7f0000001400), 0xffffffffffffffff) sendmsg$TIPC_CMD_GET_NODES(r0, &(0x7f00000014c0)={0x0, 0x0, &(0x7f0000001480)={&(0x7f0000001440)={0x1c, r1, 0x1, 0x70bd2c, 0x25dfdbff, {{}, {0x0, 0x4108}}}, 0x1c}, 0x1, 0x0, 0x0, 0x4040000}, 0x4004014) r2 = socket$inet_udp(0x2, 0x2, 0x0) setsockopt$inet_group_source_req(r2, 0x0, 0x2e, &(0x7f0000000340)={0x3, {{0x2, 0x4e23, @multicast1}}, {{0x2, 0x0, @remote}}}, 0x108) setsockopt$inet_group_source_req(r2, 0x0, 0x2e, &(0x7f0000000480)={0x6, {{0x2, 0x400, @multicast2}}, {{0x2, 0x0, @empty}}}, 0x108) r3 = socket(0x11, 0x3, 0x0) setsockopt$packet_tx_ring(r3, 0x107, 0xd, &(0x7f0000000000)=@req3={0x10000, 0x1, 0x100, 0x100, 0x100, 0x0, 0x4}, 0x1c) unshare(0x22020400) pselect6(0x40, &(0x7f00000002c0)={0x0, 0xffffffff, 0x0, 0x2, 0x7fffffffffffffff, 0x223, 0x0, 0xfffffffffffffffd}, &(0x7f0000000500)={0x9, 0x1, 0xffff, 0x5, 0x7, 0xc, 0x8, 0x830}, 0x0, 0x0, 0x0) socket$nl_netfilter(0x10, 0x3, 0xc) r4 = socket$nl_generic(0x10, 0x3, 0x10) r5 = syz_genetlink_get_family_id$tipc2(&(0x7f0000000400), 0xffffffffffffffff) sendmsg$TIPC_NL_BEARER_SET(r4, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000440)={0x44, r5, 0x1, 0x70bd28, 0x25dfdbf5, {}, [@TIPC_NLA_BEARER={0x30, 0x1, 0x0, 0x1, [@TIPC_NLA_BEARER_NAME={0xd, 0x1, @udp='udp:syz2\x00'}, @TIPC_NLA_BEARER_PROP={0x1c, 0x2, 0x0, 0x1, [@TIPC_NLA_PROP_WIN={0x8, 0x3, 0x100}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x4}, @TIPC_NLA_PROP_TOL={0x8, 0x2, 0xc2}]}]}]}, 0x44}, 0x1, 0x0, 0x0, 0x404c414}, 0x4040140) getsockopt$inet_buf(r2, 0x0, 0x30, &(0x7f0000000340)=""/225, &(0x7f0000000180)=0xe1) r6 = socket$inet_mptcp(0x2, 0x1, 0x106) setsockopt$inet_tcp_int(r6, 0x6, 0x5, &(0x7f0000000040)=0x24, 0x5) bind$alg(0xffffffffffffffff, &(0x7f0000000600)={0x26, 'skcipher\x00', 0x0, 0x0, 'xts(serpent)\x00'}, 0x58) bpf$MAP_UPDATE_ELEM(0x2, &(0x7f00000005c0)={0xffffffffffffffff, &(0x7f0000000480), &(0x7f0000000580)=@tcp}, 0x99) setsockopt$inet_int(r6, 0x0, 0x13, &(0x7f0000000000)=0x800, 0x4) kernel console output (not intermixed with test programs): lave_0) entered blocking state [ 566.363227][T10601] bridge0: port 1(bridge_slave_0) entered forwarding state [ 566.400143][T10601] bridge0: port 2(bridge_slave_1) entered blocking state [ 566.407433][T10601] bridge0: port 2(bridge_slave_1) entered forwarding state [ 566.487065][T17618] __nla_validate_parse: 11 callbacks suppressed [ 566.487086][T17618] netlink: 20 bytes leftover after parsing attributes in process `syz.5.2897'. [ 566.650377][T17624] netlink: 8 bytes leftover after parsing attributes in process `syz.0.2899'. [ 566.702772][T17621] lo speed is unknown, defaulting to 1000 [ 566.878268][ T66] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 566.886536][ T66] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 567.050112][T17650] IPVS: set_ctl: invalid protocol: 46 224.0.0.2:20001 [ 567.093824][T17650] llcp: llcp_sock_recvmsg: Recv datagram failed state 4 -11 0 [ 567.174747][T17654] netlink: 12 bytes leftover after parsing attributes in process `syz.3.2904'. [ 567.209068][T17654] netlink: 12 bytes leftover after parsing attributes in process `syz.3.2904'. [ 567.222878][T17654] netlink: 'syz.3.2904': attribute type 2 has an invalid length. [ 567.228061][T17426] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 567.261679][T17654] netlink: 16 bytes leftover after parsing attributes in process `syz.3.2904'. [ 567.271689][ C0] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 567.631150][T17668] mac80211_hwsim hwsim10 syzkaller0: left promiscuous mode [ 567.638705][T17668] mac80211_hwsim hwsim10 syzkaller0: left allmulticast mode [ 567.647307][T17668] tipc: Resetting bearer [ 567.669915][ T5822] Bluetooth: hci6: command tx timeout [ 567.758429][T17678] delete_channel: no stack [ 567.883187][T17685] syzkaller0: entered promiscuous mode [ 567.888866][T17685] syzkaller0: entered allmulticast mode [ 568.006999][T17689] netlink: 8 bytes leftover after parsing attributes in process `syz.0.2915'. [ 568.073400][T17695] lo: left allmulticast mode [ 568.092996][T17695] bond2: left promiscuous mode [ 568.098076][T17695] bond3: left promiscuous mode [ 568.105939][T17695] geneve4: left promiscuous mode [ 568.124482][T17695] veth3: left promiscuous mode [ 568.152633][T17695] geneve5: left promiscuous mode [ 568.204814][T17426] veth0_vlan: entered promiscuous mode [ 568.221704][T17426] veth1_vlan: entered promiscuous mode [ 568.276566][T17426] veth0_macvtap: entered promiscuous mode [ 568.289528][T17426] veth1_macvtap: entered promiscuous mode [ 568.309876][ C0] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 568.317678][T17426] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 568.346418][T17426] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 568.382470][T10608] netdevsim netdevsim4 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 568.400624][T10608] netdevsim netdevsim4 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 568.421416][T10606] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 568.431775][T10608] netdevsim netdevsim4 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 568.441467][T17710] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 568.452932][T10606] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 568.460389][T10608] netdevsim netdevsim4 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 568.577097][ T30] audit: type=1800 audit(1770372585.443:10): pid=17705 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="syz.5.2917" name="memory.events" dev="tmpfs" ino=1049 res=0 errno=0 [ 568.696752][T10606] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 568.715189][T10606] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 568.794708][T10601] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 568.804616][T10601] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 569.283007][T16779] Bluetooth: hci0: unexpected cc 0x0c03 length: 249 > 1 [ 569.307780][T16779] Bluetooth: hci0: unexpected cc 0x1003 length: 249 > 9 [ 569.318481][T16779] Bluetooth: hci0: unexpected cc 0x1001 length: 249 > 9 [ 569.360976][T16779] Bluetooth: hci0: unexpected cc 0x0c23 length: 249 > 4 [ 569.379281][T16779] Bluetooth: hci0: unexpected cc 0x0c38 length: 249 > 2 [ 569.487769][T17733] lo speed is unknown, defaulting to 1000 [ 569.751731][ T5822] Bluetooth: hci6: command tx timeout [ 569.854596][T17756] netlink: 'syz.4.2928': attribute type 8 has an invalid length. [ 569.874275][T17756] netlink: 4 bytes leftover after parsing attributes in process `syz.4.2928'. [ 569.933230][T17756] bond0: entered promiscuous mode [ 569.938792][T17756] bond_slave_0: entered promiscuous mode [ 569.945830][T17756] bond_slave_1: entered promiscuous mode [ 569.954072][T17756] gretap0: entered promiscuous mode [ 569.961600][T17756] bond0: left promiscuous mode [ 569.967112][T17756] bond_slave_0: left promiscuous mode [ 569.973202][T17756] bond_slave_1: left promiscuous mode [ 569.981528][T17756] gretap0: left promiscuous mode [ 570.071683][ T36] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 570.257756][T17733] chnl_net:caif_netlink_parms(): no params data found [ 570.323550][T17777] netlink: 48 bytes leftover after parsing attributes in process `syz.2.2933'. [ 570.389960][ C0] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 570.585951][T17733] bridge0: port 1(bridge_slave_0) entered blocking state [ 570.621414][T17733] bridge0: port 1(bridge_slave_0) entered disabled state [ 570.628802][T17733] bridge_slave_0: entered allmulticast mode [ 570.632673][T17795] netlink: 'syz.5.2937': attribute type 10 has an invalid length. [ 570.650425][T17733] bridge_slave_0: entered promiscuous mode [ 570.678872][T17793] netlink: 16178 bytes leftover after parsing attributes in process `syz.4.2936'. [ 570.682144][T17795] syz_tun: entered promiscuous mode [ 570.698426][T17788] netlink: 12 bytes leftover after parsing attributes in process `syz.2.2935'. [ 570.736054][T17733] bridge0: port 2(bridge_slave_1) entered blocking state [ 570.762786][T17733] bridge0: port 2(bridge_slave_1) entered disabled state [ 570.775061][T17733] bridge_slave_1: entered allmulticast mode [ 570.785030][T17733] bridge_slave_1: entered promiscuous mode [ 570.905999][T17733] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 570.928925][T17733] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 571.018193][T17733] team0: Port device team_slave_0 added [ 571.047620][T17733] team0: Port device team_slave_1 added [ 571.084050][T17813] netlink: 'syz.2.2943': attribute type 7 has an invalid length. [ 571.154767][T17733] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 571.177713][T17733] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 571.230926][T17733] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 571.275670][T17733] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 571.293519][T17733] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 571.321004][T17733] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 571.350871][T10608] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 571.416278][T17733] hsr_slave_0: entered promiscuous mode [ 571.424291][T17733] hsr_slave_1: entered promiscuous mode [ 571.430911][ T5822] Bluetooth: hci0: command tx timeout [ 571.442420][T17733] debugfs: 'hsr0' already exists in 'hsr' [ 571.448210][T17733] Cannot create hsr debugfs directory [ 571.578672][T17843] __nla_validate_parse: 3 callbacks suppressed [ 571.578695][T17843] netlink: 8 bytes leftover after parsing attributes in process `syz.0.2951'. [ 571.666119][T17733] netdevsim netdevsim3 eth3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 571.735005][T17733] netdevsim netdevsim3 eth2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 571.776278][T17853] netlink: 56 bytes leftover after parsing attributes in process `syz.2.2953'. [ 571.793432][T17733] netdevsim netdevsim3 eth1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 571.850419][T17853] netlink: 4 bytes leftover after parsing attributes in process `syz.2.2953'. [ 571.877534][T17733] netdevsim netdevsim3 eth0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 571.991843][ T6171] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 572.112266][T17860] xt_ecn: cannot match TCP bits for non-tcp packets [ 572.141726][T17733] netdevsim netdevsim3 netdevsim0: renamed from eth0 [ 572.173984][T17733] netdevsim netdevsim3 netdevsim1: renamed from eth1 [ 572.199496][T17733] netdevsim netdevsim3 netdevsim2: renamed from eth2 [ 572.226717][T17733] netdevsim netdevsim3 netdevsim3: renamed from eth3 [ 572.304554][T17870] netlink: 'syz.5.2956': attribute type 1 has an invalid length. [ 572.313257][T17870] netlink: 68 bytes leftover after parsing attributes in process `syz.5.2956'. [ 572.374673][T17873] nbd: must specify at least one socket [ 572.401718][T17733] 8021q: adding VLAN 0 to HW filter on device bond0 [ 572.447707][T17877] openvswitch: netlink: Unexpected mask (mask=240040, allowed=10048) [ 572.481021][T17733] 8021q: adding VLAN 0 to HW filter on device team0 [ 572.527700][T10608] bridge0: port 1(bridge_slave_0) entered blocking state [ 572.534960][T10608] bridge0: port 1(bridge_slave_0) entered forwarding state [ 572.624847][ T36] bridge0: port 2(bridge_slave_1) entered blocking state [ 572.632206][ T36] bridge0: port 2(bridge_slave_1) entered forwarding state [ 572.640652][T15982] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 572.660957][T17879] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 572.669716][ C1] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 572.728569][T17883] lo speed is unknown, defaulting to 1000 [ 572.828203][T17891] netlink: 12 bytes leftover after parsing attributes in process `syz.5.2962'. [ 573.021613][T17898] netlink: 8 bytes leftover after parsing attributes in process `syz.4.2964'. [ 573.266901][T17910] netlink: 28 bytes leftover after parsing attributes in process `syz.0.2966'. [ 573.396884][T17733] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 573.435465][T17914] netlink: 28 bytes leftover after parsing attributes in process `syz.2.2968'. [ 573.510648][ T5822] Bluetooth: hci0: command tx timeout [ 573.575192][T17733] veth0_vlan: entered promiscuous mode [ 574.026501][T17733] veth1_vlan: entered promiscuous mode [ 574.143203][T17930] netlink: 12 bytes leftover after parsing attributes in process `syz.4.2971'. [ 574.154973][T17924] netlink: 12 bytes leftover after parsing attributes in process `syz.4.2971'. [ 574.258127][T17733] veth0_macvtap: entered promiscuous mode [ 574.282946][T17733] veth1_macvtap: entered promiscuous mode [ 574.323200][T17733] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 574.382994][T17733] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 574.432260][T10606] netdevsim netdevsim3 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 574.443198][T10606] netdevsim netdevsim3 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 574.469977][ C0] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 574.780409][T10606] netdevsim netdevsim3 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 574.850708][T10606] netdevsim netdevsim3 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 575.052694][T10606] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 575.070448][T10606] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 575.179525][T10608] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 575.215114][T10608] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 575.525238][T17959] syzkaller0: entered promiscuous mode [ 575.534478][T17959] syzkaller0: entered allmulticast mode [ 575.599838][ T5822] Bluetooth: hci0: command tx timeout [ 575.830422][T10608] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 575.959074][T17971] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 575.990294][T17974] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 576.072588][T17974] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 576.190872][T17978] erspan0: entered promiscuous mode [ 576.527737][T17993] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 576.551952][T16779] Bluetooth: hci3: unexpected cc 0x0c03 length: 249 > 1 [ 576.562882][T16779] Bluetooth: hci3: unexpected cc 0x1003 length: 249 > 9 [ 576.578843][T16779] Bluetooth: hci3: unexpected cc 0x1001 length: 249 > 9 [ 576.593218][T16779] Bluetooth: hci3: unexpected cc 0x0c23 length: 249 > 4 [ 576.605019][T16779] Bluetooth: hci3: unexpected cc 0x0c38 length: 249 > 2 [ 576.642231][T17996] erspan0: entered promiscuous mode [ 576.647687][T17996] __nla_validate_parse: 4 callbacks suppressed [ 576.647709][T17996] netlink: 8 bytes leftover after parsing attributes in process `syz.5.2993'. [ 576.732084][T17999] netlink: 28 bytes leftover after parsing attributes in process `syz.3.2994'. [ 576.751312][T17999] batadv_slave_1: entered promiscuous mode [ 576.760397][T17999] netlink: 4 bytes leftover after parsing attributes in process `syz.3.2994'. [ 576.796068][T18000] netlink: 4 bytes leftover after parsing attributes in process `syz.3.2994'. [ 576.824005][T17999] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 576.858159][T18006] netlink: 4 bytes leftover after parsing attributes in process `syz.4.2995'. [ 576.898941][T17999] batadv_slave_1 (unregistering): left promiscuous mode [ 576.913597][T17999] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 577.089408][T17994] lo speed is unknown, defaulting to 1000 [ 577.126447][T10608] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 577.137103][T18005] lo speed is unknown, defaulting to 1000 [ 577.163169][T18013] netlink: 8 bytes leftover after parsing attributes in process `syz.5.2997'. [ 577.188794][T18013] netlink: 'syz.5.2997': attribute type 30 has an invalid length. [ 577.222641][T18015] syzkaller0: entered promiscuous mode [ 577.228198][T18015] syzkaller0: entered allmulticast mode [ 577.287308][T18013] netlink: 8 bytes leftover after parsing attributes in process `syz.5.2997'. [ 577.298389][T18013] netlink: 'syz.5.2997': attribute type 30 has an invalid length. [ 577.362893][ T36] netdevsim netdevsim5 eth0: set [0, 0] type 1 family 0 port 8472 - 0 [ 577.371616][ T36] netdevsim netdevsim5 eth1: set [0, 0] type 1 family 0 port 8472 - 0 [ 577.381060][ T36] netdevsim netdevsim5 eth2: set [0, 0] type 1 family 0 port 8472 - 0 [ 577.470566][ T36] netdevsim netdevsim5 eth3: set [0, 0] type 1 family 0 port 8472 - 0 [ 577.670057][ T5822] Bluetooth: hci0: command tx timeout [ 577.706665][T18030] ip6gre1: entered promiscuous mode [ 577.712792][T18030] ip6gre1: entered allmulticast mode [ 577.750887][ T36] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 577.795482][T18030] ip6gre2: entered promiscuous mode [ 577.803108][T18030] ip6gre2: entered allmulticast mode [ 577.825577][T17994] chnl_net:caif_netlink_parms(): no params data found [ 578.086077][ T66] netdevsim netdevsim2 eth1: set [1, 0] type 2 family 0 port 6081 - 0 [ 578.095567][ T66] netdevsim netdevsim2 eth2: set [1, 0] type 2 family 0 port 6081 - 0 [ 578.132710][T10606] netdevsim netdevsim2 eth3: set [1, 0] type 2 family 0 port 6081 - 0 [ 578.340362][T10606] netdevsim netdevsim2 eth4: set [1, 0] type 2 family 0 port 6081 - 0 [ 578.351040][T15982] bridge_slave_1: left allmulticast mode [ 578.356951][T15982] bridge_slave_1: left promiscuous mode [ 578.392337][ T66] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 578.409715][T15982] bridge0: port 2(bridge_slave_1) entered disabled state [ 578.463261][T15982] bridge_slave_0: left allmulticast mode [ 578.468963][T15982] bridge_slave_0: left promiscuous mode [ 578.497284][T15982] bridge0: port 1(bridge_slave_0) entered disabled state [ 578.603718][T15982] ip6gretap1: left allmulticast mode [ 578.615771][T15982] ip6gretap1: left promiscuous mode [ 578.626175][T15982] bridge8: port 1(ip6gretap1) entered disabled state [ 578.711033][ T5822] Bluetooth: hci3: command tx timeout [ 579.966162][T15982] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 579.977149][T15982] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 579.986853][T15982] bond0 (unregistering): Released all slaves [ 579.998028][T15982] bond1 (unregistering): Released all slaves [ 580.011621][T15982] bond2 (unregistering): Released all slaves [ 580.027583][T15982] bond3 (unregistering): Released all slaves [ 580.041581][T15982] bond4 (unregistering): Released all slaves [ 580.063236][T15982] bond5 (unregistering): (slave veth3): Releasing active interface [ 580.083136][T15982] bond5 (unregistering): Released all slaves [ 580.096724][T15982] bond6 (unregistering): Released all slaves [ 580.110696][T15982] bond7 (unregistering): (slave bond8): Releasing active interface [ 580.119326][T15982] bond7 (unregistering): Released all slaves [ 580.134844][T15982] bond8 (unregistering): Released all slaves [ 580.174305][T17994] bridge0: port 1(bridge_slave_0) entered blocking state [ 580.182205][T17994] bridge0: port 1(bridge_slave_0) entered disabled state [ 580.189517][T17994] bridge_slave_0: entered allmulticast mode [ 580.200996][T17994] bridge_slave_0: entered promiscuous mode [ 580.221293][T18076] syzkaller0: entered promiscuous mode [ 580.226914][T18076] syzkaller0: entered allmulticast mode [ 580.253491][T18052] tipc: Resetting bearer [ 580.334436][T17994] bridge0: port 2(bridge_slave_1) entered blocking state [ 580.342161][T17994] bridge0: port 2(bridge_slave_1) entered disabled state [ 580.354460][T17994] bridge_slave_1: entered allmulticast mode [ 580.363654][T17994] bridge_slave_1: entered promiscuous mode [ 580.551857][T15982] mÿ5nè‹Ò: left promiscuous mode [ 580.586997][T18096] bridge0: entered promiscuous mode [ 580.595791][T18096] bridge0: port 3(macvtap1) entered blocking state [ 580.603449][T18096] bridge0: port 3(macvtap1) entered disabled state [ 580.613777][T18096] macvtap1: entered allmulticast mode [ 580.619227][T18096] bridge0: entered allmulticast mode [ 580.627732][T18096] macvtap1: left allmulticast mode [ 580.639206][T18096] bridge0: left allmulticast mode [ 580.644086][T18109] netlink: 20 bytes leftover after parsing attributes in process `syz.4.3013'. [ 580.655978][T18096] bridge0: left promiscuous mode [ 580.721510][T17994] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 580.732137][T15982] : left promiscuous mode [ 580.789932][ T5822] Bluetooth: hci3: command tx timeout [ 580.807282][T17994] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 580.853750][T15982] tipc: Left network mode [ 580.922993][T17994] team0: Port device team_slave_0 added [ 580.943685][T17994] team0: Port device team_slave_1 added [ 581.225989][T17994] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 581.248039][T17994] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 581.339720][T17994] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 581.417806][T18138] netlink: 32 bytes leftover after parsing attributes in process `syz.3.3023'. [ 581.437555][T18132] dvmrp6: entered allmulticast mode [ 581.444959][T17994] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 581.460416][T17994] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 581.529713][T17994] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 581.552583][T18149] netlink: 12 bytes leftover after parsing attributes in process `syz.4.3021'. [ 581.594335][T10608] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 581.704275][T18149] bond1: entered promiscuous mode [ 581.710216][T18149] 8021q: adding VLAN 0 to HW filter on device bond1 [ 582.067826][T18174] netlink: 24 bytes leftover after parsing attributes in process `syz.3.3027'. [ 582.134491][T17994] hsr_slave_0: entered promiscuous mode [ 582.143536][T17994] hsr_slave_1: entered promiscuous mode [ 582.153142][T17994] debugfs: 'hsr0' already exists in 'hsr' [ 582.158929][T17994] Cannot create hsr debugfs directory [ 582.159124][T18161] netlink: 4 bytes leftover after parsing attributes in process `syz.5.3025'. [ 582.277915][T18176] netlink: 8 bytes leftover after parsing attributes in process `syz.0.3029'. [ 582.294883][T18176] netlink: 12 bytes leftover after parsing attributes in process `syz.0.3029'. [ 582.515972][T18180] bond7: option lacp_active: mode dependency failed, not supported in mode balance-rr(0) [ 582.565016][T18180] bond7 (unregistering): Released all slaves [ 582.771442][T18189] netlink: 'syz.5.3031': attribute type 8 has an invalid length. [ 582.870058][ C0] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 582.882996][T10606] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 582.891353][ T5822] Bluetooth: hci3: command tx timeout [ 583.432524][T18199] lo speed is unknown, defaulting to 1000 [ 583.510933][ T6171] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 583.553338][T15982] hsr_slave_0: left promiscuous mode [ 583.573061][T15982] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 583.998277][T15982] team0 (unregistering): Port device team_slave_0 removed [ 584.152558][T10601] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 584.275002][T17994] netdevsim netdevsim2 eth4 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 584.573578][T17994] netdevsim netdevsim2 eth3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 584.827234][T17994] netdevsim netdevsim2 eth2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 584.935931][T18258] netlink: 620 bytes leftover after parsing attributes in process `syz.5.3045'. [ 584.949890][ T5822] Bluetooth: hci3: command tx timeout [ 585.066457][T17994] netdevsim netdevsim2 eth1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 585.531039][T15982] IPVS: stop unused estimator thread 0... [ 585.951223][T17994] netdevsim netdevsim2 netdevsim0: renamed from eth0 [ 586.035612][T18312] tipc: Enabled bearer , priority 0 [ 586.064739][T17994] netdevsim netdevsim2 netdevsim1: renamed from eth1 [ 586.105964][T17994] netdevsim netdevsim2 netdevsim2: renamed from eth2 [ 586.149316][T18317] syzkaller0: entered promiscuous mode [ 586.180452][T18317] syzkaller0: entered allmulticast mode [ 586.198893][T18303] batman_adv: Cannot find parent device. Skipping batadv-on-batadv check for ip6gretap1 [ 586.262328][T17994] netdevsim netdevsim2 netdevsim3: renamed from eth3 [ 586.319293][T18317] sch_tbf: burst 127 is lower than device syzkaller0 mtu (1514) ! [ 586.404994][T18317] tipc: Resetting bearer [ 586.485209][T18331] syzkaller0: entered promiscuous mode [ 586.491605][T18331] syzkaller0: entered allmulticast mode [ 586.623600][T18308] tipc: Resetting bearer [ 586.658379][T18308] tipc: Disabling bearer [ 587.352020][T10606] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 588.640784][T10608] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 589.270807][T10606] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 589.279049][T15982] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 589.294532][T18332] nci: __nci_request: wait_for_completion_interruptible_timeout failed -512 [ 589.491032][T18408] netlink: 4 bytes leftover after parsing attributes in process `syz.0.3063'. [ 589.503787][T18407] netlink: 220 bytes leftover after parsing attributes in process `syz.3.3064'. [ 589.560137][T18413] netlink: 8 bytes leftover after parsing attributes in process `syz.3.3064'. [ 589.577734][T18408] hsr_slave_1 (unregistering): left promiscuous mode [ 589.613114][T17994] 8021q: adding VLAN 0 to HW filter on device bond0 [ 589.750975][T18427] Bluetooth: MGMT ver 1.23 [ 589.843207][T17994] 8021q: adding VLAN 0 to HW filter on device team0 [ 589.871688][T10606] bridge0: port 1(bridge_slave_0) entered blocking state [ 589.879193][T10606] bridge0: port 1(bridge_slave_0) entered forwarding state [ 589.922185][T10606] bridge0: port 2(bridge_slave_1) entered blocking state [ 589.929424][T10606] bridge0: port 2(bridge_slave_1) entered forwarding state [ 589.938157][T18433] netlink: 7064 bytes leftover after parsing attributes in process `syz.3.3069'. [ 589.968939][T18433] openvswitch: netlink: Missing key (keys=40, expected=100) [ 590.300748][T18446] netlink: 16 bytes leftover after parsing attributes in process `syz.3.3073'. [ 590.321000][T18447] sctp: [Deprecated]: syz.0.3074 (pid 18447) Use of int in maxseg socket option. [ 590.321000][T18447] Use struct sctp_assoc_value instead [ 590.346910][T18446] syzkaller0: entered allmulticast mode [ 590.463554][T17994] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 590.509326][T18451] netlink: 8 bytes leftover after parsing attributes in process `syz.0.3074'. [ 590.528659][T18451] netlink: 12 bytes leftover after parsing attributes in process `syz.0.3074'. [ 590.584743][T17994] veth0_vlan: entered promiscuous mode [ 590.612149][T17994] veth1_vlan: entered promiscuous mode [ 590.655341][T18451] netlink: 8 bytes leftover after parsing attributes in process `syz.0.3074'. [ 590.685171][T17994] veth0_macvtap: entered promiscuous mode [ 590.699804][T18451] netlink: 12 bytes leftover after parsing attributes in process `syz.0.3074'. [ 590.734148][T17994] veth1_macvtap: entered promiscuous mode [ 590.778775][T17994] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 590.816395][T17994] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 590.851003][T18462] netlink: 'syz.3.3078': attribute type 12 has an invalid length. [ 590.858962][T18462] netlink: 132 bytes leftover after parsing attributes in process `syz.3.3078'. [ 590.886200][T10606] netdevsim netdevsim2 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 590.932924][T10606] netdevsim netdevsim2 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 590.959848][T10606] netdevsim netdevsim2 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 591.007959][T10606] netdevsim netdevsim2 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 591.247027][ T66] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 591.269375][ T66] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 591.605220][T18488] syzkaller1: entered promiscuous mode [ 591.615786][T18488] syzkaller1: entered allmulticast mode [ 591.647425][T10608] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 591.710084][T10608] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 591.947219][T18497] openvswitch: netlink: Flow key attr not present in new flow. [ 591.970466][T18496] openvswitch: netlink: Flow key attr not present in new flow. [ 592.060632][T18496] veth0_macvtap: left promiscuous mode [ 592.319964][T16779] Bluetooth: hci2: unexpected cc 0x0c03 length: 249 > 1 [ 592.334165][T16779] Bluetooth: hci2: unexpected cc 0x1003 length: 249 > 9 [ 592.342727][T16779] Bluetooth: hci2: unexpected cc 0x1001 length: 249 > 9 [ 592.353860][T16779] Bluetooth: hci2: unexpected cc 0x0c23 length: 249 > 4 [ 592.374188][T16779] Bluetooth: hci2: unexpected cc 0x0c38 length: 249 > 2 [ 593.004857][T18542] netlink: 'syz.3.3096': attribute type 10 has an invalid length. [ 593.032846][T18542] team0: Port device dummy0 added [ 593.044345][T18542] netlink: 'syz.3.3096': attribute type 10 has an invalid length. [ 593.044345][T18543] netlink: 'syz.3.3096': attribute type 10 has an invalid length. [ 593.061927][T18516] chnl_net:caif_netlink_parms(): no params data found [ 593.111496][ T51] block nbd4: Possible stuck request ffff888025568000: control (read@0,1024B). Runtime 60 seconds [ 593.123794][ T51] block nbd4: Possible stuck request ffff888025568200: control (read@1024,1024B). Runtime 60 seconds [ 593.125036][T18543] team0: Port device dummy0 removed [ 593.135461][ T51] block nbd4: Possible stuck request ffff888025568400: control (read@2048,1024B). Runtime 60 seconds [ 593.152060][ T51] block nbd4: Possible stuck request ffff888025568600: control (read@3072,1024B). Runtime 60 seconds [ 593.170969][ T6171] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 593.193180][T18543] bond0: (slave dummy0): Enslaving as an active interface with an up link [ 593.722847][T18574] workqueue: Failed to create a rescuer kthread for wq "nfc3_nci_cmd_wq": -EINTR [ 594.391949][T10601] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 594.409309][ T8663] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 594.473653][T16779] Bluetooth: hci2: command tx timeout [ 595.036165][ T6171] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 595.817704][T18516] bridge0: port 1(bridge_slave_0) entered blocking state [ 595.825227][T18516] bridge0: port 1(bridge_slave_0) entered disabled state [ 595.833141][T18516] bridge_slave_0: entered allmulticast mode [ 595.846407][T18516] bridge_slave_0: entered promiscuous mode [ 595.856232][T18516] bridge0: port 2(bridge_slave_1) entered blocking state [ 595.864072][T18516] bridge0: port 2(bridge_slave_1) entered disabled state [ 595.875074][T18516] bridge_slave_1: entered allmulticast mode [ 595.883564][T18516] bridge_slave_1: entered promiscuous mode [ 595.988750][T18516] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 596.049053][T18516] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 596.096098][ T6171] netdevsim netdevsim0 eth1: set [1, 0] type 2 family 0 port 6081 - 0 [ 596.122046][ T6171] netdevsim netdevsim0 eth2: set [1, 0] type 2 family 0 port 6081 - 0 [ 596.133715][T18596] __nla_validate_parse: 2 callbacks suppressed [ 596.133734][T18596] netlink: 8 bytes leftover after parsing attributes in process `syz.4.3109'. [ 596.201937][T18603] netlink: 24 bytes leftover after parsing attributes in process `syz.5.3110'. [ 596.231901][T18516] team0: Port device team_slave_0 added [ 596.255711][T18516] team0: Port device team_slave_1 added [ 596.286875][T18606] netlink: 36 bytes leftover after parsing attributes in process `syz.4.3112'. [ 596.293405][T18608] netlink: 'syz.2.3111': attribute type 1 has an invalid length. [ 596.324727][T18608] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 596.368952][T18516] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 596.388341][T18516] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 596.423961][T18610] netlink: 12 bytes leftover after parsing attributes in process `syz.4.3112'. [ 596.438275][T18516] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 596.451883][T15982] netdevsim netdevsim0 eth3: set [1, 0] type 2 family 0 port 6081 - 0 [ 596.485402][T18610] ipvlan2: entered promiscuous mode [ 596.507033][T18516] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 596.514187][T18516] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 596.541367][T18516] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 596.555871][T16779] Bluetooth: hci2: command tx timeout [ 596.581925][ T6171] netdevsim netdevsim0 eth4: set [1, 0] type 2 family 0 port 6081 - 0 [ 596.633252][T10608] bridge_slave_1: left allmulticast mode [ 596.639191][T10608] bridge_slave_1: left promiscuous mode [ 596.645905][T10608] bridge0: port 2(bridge_slave_1) entered disabled state [ 596.657705][T10608] bridge_slave_0: left allmulticast mode [ 596.663506][T10608] bridge_slave_0: left promiscuous mode [ 596.669504][T10608] bridge0: port 1(bridge_slave_0) entered disabled state [ 596.839399][T10608] bond2 (unregistering): (slave ip6gretap1): Releasing active interface [ 596.848011][T10608] bond2 (unregistering): (slave ip6gretap1): the permanent HWaddr of slave - 72:a5:ef:9e:dc:54 - is still in use by bond - set the HWaddr of slave to a different address to avoid conflicts [ 596.872758][T10608] bond2 (unregistering): (slave erspan0): making interface the new active one [ 597.121377][T10608] bond2 (unregistering): (slave erspan0): Releasing active interface [ 597.216380][T10608] dvmrp6 (unregistering): left allmulticast mode [ 597.564316][T10608] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 597.575483][T10608] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 597.587016][T10608] bond0 (unregistering): (slave team0): Releasing backup interface [ 597.598534][T10608] bond0 (unregistering): Released all slaves [ 597.610759][T10608] bond1 (unregistering): (slave batadv1): Releasing active interface [ 597.620808][T10608] bond1 (unregistering): Released all slaves [ 597.634987][T10608] bond2 (unregistering): (slave veth9): Releasing active interface [ 597.662930][T10608] bond2 (unregistering): Released all slaves [ 597.700561][T10608] bond3 (unregistering): Released all slaves [ 597.746788][T10608] bond4 (unregistering): (slave vxcan3): Releasing backup interface [ 597.755847][T10608] bond4 (unregistering): Released all slaves [ 597.775875][T10608] bond5 (unregistering): Released all slaves [ 597.795193][T10608] bond6 (unregistering): Released all slaves [ 597.895145][T18516] hsr_slave_0: entered promiscuous mode [ 597.907348][T18516] hsr_slave_1: entered promiscuous mode [ 597.929994][T18516] debugfs: 'hsr0' already exists in 'hsr' [ 597.944242][T18516] Cannot create hsr debugfs directory [ 598.005079][T10608] : left promiscuous mode [ 598.144250][T10608] tipc: Left network mode [ 598.630644][T16779] Bluetooth: hci2: command tx timeout [ 598.844168][T18516] netdevsim netdevsim0 eth4 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 598.861029][T18662] netlink: 52 bytes leftover after parsing attributes in process `syz.5.3121'. [ 598.899201][ T8663] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 598.984294][T18516] netdevsim netdevsim0 eth3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 599.079390][T18516] netdevsim netdevsim0 eth2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 599.507304][T18516] netdevsim netdevsim0 eth1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 599.517655][ C0] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 599.528679][T18690] netlink: 8 bytes leftover after parsing attributes in process `syz.4.3122'. [ 599.781127][T10608] hsr_slave_0: left promiscuous mode [ 599.787627][T10608] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 600.154047][T15982] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 600.397195][T10608] team0 (unregistering): Port device team_slave_1 removed [ 600.431039][T10608] team0 (unregistering): Port device team_slave_0 removed [ 600.635163][T10608] lo (unregistering): left allmulticast mode [ 600.671113][T18708] netlink: 32 bytes leftover after parsing attributes in process `syz.5.3128'. [ 600.709846][T16779] Bluetooth: hci2: command tx timeout [ 600.792030][ T8663] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 602.845637][T18516] netdevsim netdevsim0 netdevsim0: renamed from eth0 [ 602.902939][T18516] netdevsim netdevsim0 netdevsim1: renamed from eth1 [ 602.937380][T18516] netdevsim netdevsim0 netdevsim2: renamed from eth2 [ 602.966061][T18516] netdevsim netdevsim0 netdevsim3: renamed from eth3 [ 602.995591][T18725] netlink: 4 bytes leftover after parsing attributes in process `syz.2.3129'. [ 603.010915][T18725] netlink: 4 bytes leftover after parsing attributes in process `syz.2.3129'. [ 603.385760][T18516] 8021q: adding VLAN 0 to HW filter on device bond0 [ 603.445509][T18516] 8021q: adding VLAN 0 to HW filter on device team0 [ 603.466522][T15982] bridge0: port 1(bridge_slave_0) entered blocking state [ 603.473800][T15982] bridge0: port 1(bridge_slave_0) entered forwarding state [ 603.517387][T15982] bridge0: port 2(bridge_slave_1) entered blocking state [ 603.524680][T15982] bridge0: port 2(bridge_slave_1) entered forwarding state [ 603.693465][T18761] syzkaller0: entered allmulticast mode [ 603.699366][T18762] syzkaller0: entered promiscuous mode [ 603.773425][T18762] syzkaller0: left promiscuous mode [ 603.778914][T18762] syzkaller0: left allmulticast mode [ 603.981470][T18777] netlink: 12 bytes leftover after parsing attributes in process `syz.5.3138'. [ 604.010374][ T36] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 604.264664][T18516] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 604.574748][T18516] veth0_vlan: entered promiscuous mode [ 604.617389][T18516] veth1_vlan: entered promiscuous mode [ 604.649122][T15982] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 604.716806][T10608] IPVS: stop unused estimator thread 0... [ 604.840833][T18516] veth0_macvtap: entered promiscuous mode [ 604.908021][T18516] veth1_macvtap: entered promiscuous mode [ 605.015116][T18516] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 605.028741][T18824] netlink: 60 bytes leftover after parsing attributes in process `syz.5.3144'. [ 605.066716][T18516] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 605.119360][T10601] netdevsim netdevsim0 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 605.146912][T10601] netdevsim netdevsim0 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 605.186686][T10601] netdevsim netdevsim0 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 605.220221][T18829] netlink: 'syz.4.3145': attribute type 1 has an invalid length. [ 605.232933][T18829] netlink: 224 bytes leftover after parsing attributes in process `syz.4.3145'. [ 605.275391][ T3453] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 605.307718][T10601] netdevsim netdevsim0 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 605.402730][T18838] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 605.456854][ T66] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 605.481568][ T66] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 605.553975][T10608] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 605.570890][T10608] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 605.910339][T10608] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 606.875892][T18880] netlink: 24 bytes leftover after parsing attributes in process `syz.2.3155'. [ 606.961146][T18886] netlink: 4 bytes leftover after parsing attributes in process `syz.2.3155'. [ 606.993984][T18888] netlink: 52 bytes leftover after parsing attributes in process `syz.4.3156'. [ 607.070539][T18882] xt_CT: No such helper "syz0" [ 607.177587][T18891] netlink: 4 bytes leftover after parsing attributes in process `syz.2.3157'. [ 607.208437][T18891] netlink: 4 bytes leftover after parsing attributes in process `syz.2.3157'. [ 607.227541][T18891] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check. [ 607.654131][T18900] openvswitch: netlink: Missing valid actions attribute. [ 607.664619][T18900] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 608.317297][T18934] __nla_validate_parse: 1 callbacks suppressed [ 608.317318][T18934] netlink: 16 bytes leftover after parsing attributes in process `syz.2.3164'. [ 608.556029][T18939] bond0: (slave gre0): The slave device specified does not support setting the MAC address [ 608.591638][T18939] bond0: (slave gre0): Error -95 calling set_mac_address [ 608.719457][T18944] netlink: 12 bytes leftover after parsing attributes in process `syz.0.3169'. [ 608.787094][T18944] netlink: 8 bytes leftover after parsing attributes in process `syz.0.3169'. [ 608.805318][T18944] netlink: 8 bytes leftover after parsing attributes in process `syz.0.3169'. [ 608.836119][T18944] GUP no longer grows the stack in syz.0.3169 (18944): 200000008000-200000800000 (200000007000) [ 608.868330][T18944] CPU: 1 UID: 0 PID: 18944 Comm: syz.0.3169 Not tainted syzkaller #0 PREEMPT(full) [ 608.868362][T18944] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/24/2026 [ 608.868374][T18944] Call Trace: [ 608.868383][T18944] [ 608.868392][T18944] dump_stack_lvl+0xe8/0x150 [ 608.868428][T18944] __get_user_pages+0x2453/0x29d0 [ 608.868492][T18944] ? __gup_longterm_locked+0xc4e/0x1630 [ 608.868521][T18944] ? down_read_killable+0x1bb/0x340 [ 608.868549][T18944] __gup_longterm_locked+0xdcf/0x1630 [ 608.868591][T18944] ? sanity_check_pinned_pages+0x1212/0x12d0 [ 608.868628][T18944] gup_fast_fallback+0x1d82/0x22e0 [ 608.868694][T18944] ? __pfx_gup_fast_fallback+0x10/0x10 [ 608.868729][T18944] ? pin_user_pages_fast+0x4d/0xb0 [ 608.868759][T18944] iov_iter_extract_pages+0x37b/0x5f0 [ 608.868800][T18944] extract_iter_to_sg+0xe62/0x2520 [ 608.868844][T18944] ? __pfx_extract_iter_to_sg+0x10/0x10 [ 608.868891][T18944] ? __asan_memset+0x22/0x50 [ 608.868923][T18944] af_alg_get_rsgl+0x436/0x810 [ 608.868971][T18944] skcipher_recvmsg+0x3a3/0x1140 [ 608.869018][T18944] ? __pfx_skcipher_recvmsg+0x10/0x10 [ 608.869035][T18944] ? __local_bh_enable_ip+0xd0/0x130 [ 608.869056][T18944] ? skcipher_check_key+0x173/0x1e0 [ 608.869074][T18944] ? __pfx_skcipher_recvmsg_nokey+0x10/0x10 [ 608.869095][T18944] ? __pfx_skcipher_recvmsg_nokey+0x10/0x10 [ 608.869116][T18944] sock_recvmsg+0x22c/0x270 [ 608.869144][T18944] __sys_recvfrom+0x240/0x3c0 [ 608.869174][T18944] ? __pfx___sys_recvfrom+0x10/0x10 [ 608.869197][T18944] ? do_futex+0x395/0x420 [ 608.869256][T18944] ? rcu_is_watching+0x15/0xb0 [ 608.869284][T18944] __x64_sys_recvfrom+0xde/0x100 [ 608.869312][T18944] do_syscall_64+0xe2/0xf80 [ 608.869337][T18944] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 608.869356][T18944] ? trace_irq_disable+0x37/0x100 [ 608.869375][T18944] ? clear_bhb_loop+0x60/0xb0 [ 608.869399][T18944] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 608.869418][T18944] RIP: 0033:0x7f0cd019aeb9 [ 608.869438][T18944] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 608.869464][T18944] RSP: 002b:00007f0cd1065028 EFLAGS: 00000246 ORIG_RAX: 000000000000002d [ 608.869488][T18944] RAX: ffffffffffffffda RBX: 00007f0cd0415fa0 RCX: 00007f0cd019aeb9 [ 608.869503][T18944] RDX: ffffffffffffffbf RSI: 00002000000030c0 RDI: 0000000000000006 [ 608.869517][T18944] RBP: 00007f0cd0208c1f R08: 0000000000000000 R09: ffffffffffffffb5 [ 608.869531][T18944] R10: 0000000000000001 R11: 0000000000000246 R12: 0000000000000000 [ 608.869542][T18944] R13: 00007f0cd0416038 R14: 00007f0cd0415fa0 R15: 00007fff8317aba8 [ 608.869577][T18944] [ 609.615336][T18965] netlink: 8 bytes leftover after parsing attributes in process `syz.5.3173'. [ 609.631031][T18971] netlink: 4 bytes leftover after parsing attributes in process `syz.4.3174'. [ 609.757403][T10608] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 609.768168][T10601] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 609.822507][ T5822] Bluetooth: hci1: unexpected cc 0x0c03 length: 249 > 1 [ 609.854468][ T5822] Bluetooth: hci1: unexpected cc 0x1003 length: 249 > 9 [ 609.864563][T18978] netlink: 28 bytes leftover after parsing attributes in process `syz.2.3170'. [ 609.877115][ T5822] Bluetooth: hci1: unexpected cc 0x1001 length: 249 > 9 [ 609.897080][ T5822] Bluetooth: hci1: unexpected cc 0x0c23 length: 249 > 4 [ 609.907477][ T5822] Bluetooth: hci1: unexpected cc 0x0c38 length: 249 > 2 [ 610.231681][T18978] netlink: 'syz.2.3170': attribute type 3 has an invalid length. [ 610.365601][T18997] netlink: 'syz.5.3177': attribute type 1 has an invalid length. [ 610.379828][T18997] netlink: 8 bytes leftover after parsing attributes in process `syz.5.3177'. [ 610.499172][T19003] team_slave_0: entered promiscuous mode [ 610.507395][T19003] team_slave_1: entered promiscuous mode [ 610.521134][T19003] 8021q: adding VLAN 0 to HW filter on device macvlan2 [ 610.631463][T19005] netlink: 8 bytes leftover after parsing attributes in process `syz.4.3178'. [ 610.675632][T19005] netlink: 24 bytes leftover after parsing attributes in process `syz.4.3178'. [ 611.048119][T10608] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 611.267368][T19020] syzkaller1: entered promiscuous mode [ 611.278980][T19020] syzkaller1: entered allmulticast mode [ 611.297388][T18979] chnl_net:caif_netlink_parms(): no params data found [ 611.574245][T19055] netlink: 'syz.4.3186': attribute type 6 has an invalid length. [ 611.670734][T15982] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 611.688773][T18979] bridge0: port 1(bridge_slave_0) entered blocking state [ 611.697551][T18979] bridge0: port 1(bridge_slave_0) entered disabled state [ 611.710055][T18979] bridge_slave_0: entered allmulticast mode [ 611.718385][T18979] bridge_slave_0: entered promiscuous mode [ 611.729351][T18979] bridge0: port 2(bridge_slave_1) entered blocking state [ 611.738557][T18979] bridge0: port 2(bridge_slave_1) entered disabled state [ 611.746210][T18979] bridge_slave_1: entered allmulticast mode [ 611.754846][T18979] bridge_slave_1: entered promiscuous mode [ 611.804755][T18979] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 611.848000][T19070] netlink: 'syz.4.3193': attribute type 1 has an invalid length. [ 611.920471][T18979] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 611.977923][T18979] team0: Port device team_slave_0 added [ 611.988157][T18979] team0: Port device team_slave_1 added [ 611.994185][T16779] Bluetooth: hci1: command tx timeout [ 612.036890][T18979] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 612.044168][T18979] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 612.089732][T18979] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 612.265546][ T30] audit: type=1804 audit(1770372629.133:11): pid=19090 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=invalid_pcr cause=open_writers comm="syz.5.3194" name="/newroot/279/cgroup.controllers" dev="tmpfs" ino=1441 res=1 errno=0 [ 612.311628][T19070] bond2: (slave geneve2): making interface the new active one [ 612.328292][T19070] bond2: (slave geneve2): Enslaving as an active interface with an up link [ 612.339146][ T30] audit: type=1800 audit(1770372629.133:12): pid=19090 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.5.3194" name="cgroup.controllers" dev="tmpfs" ino=1441 res=0 errno=0 [ 612.368746][T19078] 8021q: adding VLAN 0 to HW filter on device bond2 [ 612.460765][T18979] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 612.468882][T18979] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 612.535906][T18979] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 612.552033][T10608] netdevsim netdevsim4 netdevsim0: set [1, 1] type 2 family 0 port 20000 - 0 [ 612.570062][T10608] netdevsim netdevsim4 netdevsim1: set [1, 1] type 2 family 0 port 20000 - 0 [ 612.592131][T10608] netdevsim netdevsim4 netdevsim2: set [1, 1] type 2 family 0 port 20000 - 0 [ 612.609238][T10608] netdevsim netdevsim4 netdevsim3: set [1, 1] type 2 family 0 port 20000 - 0 [ 612.823226][T18979] hsr_slave_0: entered promiscuous mode [ 612.845226][T18979] hsr_slave_1: entered promiscuous mode [ 612.858836][T18979] debugfs: 'hsr0' already exists in 'hsr' [ 612.866310][T18979] Cannot create hsr debugfs directory [ 612.902344][T19106] syzkaller0: entered promiscuous mode [ 612.907934][T19106] syzkaller0: entered allmulticast mode [ 613.239326][T19118] erspan0: left promiscuous mode [ 613.249519][T19118] syz_tun: left promiscuous mode [ 613.272190][T19118] xfrm1: left allmulticast mode [ 613.278079][T19118] veth3: left allmulticast mode [ 613.284295][T19118] ip6gretap1: left promiscuous mode [ 613.299606][T19118] bond2: left allmulticast mode [ 613.304788][T19118] ip6gretap1: left allmulticast mode [ 613.312059][T19118] macvlan0: left allmulticast mode [ 613.643395][T19126] __nla_validate_parse: 17 callbacks suppressed [ 613.643421][T19126] netlink: 15730 bytes leftover after parsing attributes in process `syz.2.3204'. [ 613.700649][T15982] netdevsim netdevsim5 eth0: unset [0, 0] type 1 family 0 port 8472 - 0 [ 613.713289][T15982] netdevsim netdevsim5 eth1: unset [0, 0] type 1 family 0 port 8472 - 0 [ 613.941705][T19123] netlink: 15730 bytes leftover after parsing attributes in process `syz.2.3204'. [ 614.013604][T15982] netdevsim netdevsim5 eth2: unset [0, 0] type 1 family 0 port 8472 - 0 [ 614.079822][T16779] Bluetooth: hci1: command tx timeout [ 614.110398][T15982] netdevsim netdevsim5 eth3: unset [0, 0] type 1 family 0 port 8472 - 0 [ 614.186708][T19137] netlink: 88 bytes leftover after parsing attributes in process `syz.5.3206'. [ 614.224717][T18979] netdevsim netdevsim6 netdevsim0: renamed from eth0 [ 614.267733][T18979] netdevsim netdevsim6 netdevsim1: renamed from eth1 [ 614.422113][T18979] netdevsim netdevsim6 netdevsim2: renamed from eth2 [ 614.457649][T18979] netdevsim netdevsim6 netdevsim3: renamed from eth3 [ 614.499979][T19142] netlink: 'syz.4.3208': attribute type 1 has an invalid length. [ 614.815173][T18979] 8021q: adding VLAN 0 to HW filter on device bond0 [ 614.861038][T18979] 8021q: adding VLAN 0 to HW filter on device team0 [ 614.872586][ T66] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 614.885364][ T3453] bridge0: port 1(bridge_slave_0) entered blocking state [ 614.892590][ T3453] bridge0: port 1(bridge_slave_0) entered forwarding state [ 614.940785][ T3453] bridge0: port 2(bridge_slave_1) entered blocking state [ 614.948142][ T3453] bridge0: port 2(bridge_slave_1) entered forwarding state [ 615.511693][T10601] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 615.770555][T18979] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 615.957187][T19164] netlink: 16 bytes leftover after parsing attributes in process `syz.4.3214'. [ 616.152989][T16779] Bluetooth: hci1: command tx timeout [ 616.282579][T19194] netlink: 8 bytes leftover after parsing attributes in process `syz.5.3219'. [ 616.306141][T19194] netlink: 4 bytes leftover after parsing attributes in process `syz.5.3219'. [ 616.323537][T19194] netlink: 'syz.5.3219': attribute type 7 has an invalid length. [ 616.799989][ T3453] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 616.910324][T19213] netlink: 8 bytes leftover after parsing attributes in process `syz.5.3222'. [ 616.961439][T19215] netlink: 8 bytes leftover after parsing attributes in process `syz.5.3222'. [ 617.146059][T18979] veth0_vlan: entered promiscuous mode [ 617.208549][T18979] veth1_vlan: entered promiscuous mode [ 617.223453][T19226] netlink: 28 bytes leftover after parsing attributes in process `syz.5.3224'. [ 617.289600][T19226] tipc: Enabling of bearer rejected, failed to enable media [ 617.434850][T15982] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 617.461809][T19230] netlink: 'syz.5.3225': attribute type 62 has an invalid length. [ 617.529796][T18979] veth0_macvtap: entered promiscuous mode [ 617.556558][T18979] veth1_macvtap: entered promiscuous mode [ 617.687826][T18979] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 617.747175][T18979] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 617.774718][T15982] netdevsim netdevsim6 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 617.809855][T15982] netdevsim netdevsim6 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 617.847996][T15982] netdevsim netdevsim6 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 617.891069][ T66] netdevsim netdevsim6 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 618.097242][T19248] netlink: 212328 bytes leftover after parsing attributes in process `syz.2.3230'. [ 618.126028][T19248] netlink: Unknown conntrack attr (type=2304, max=9) [ 618.230369][T16779] Bluetooth: hci1: command tx timeout [ 618.327640][ T66] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 618.384243][ T66] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 618.562720][ T36] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 618.576242][T19271] chnl_net:caif_netlink_parms(): no params data found [ 618.598208][ T36] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 619.012045][T19279] __nla_validate_parse: 1 callbacks suppressed [ 619.012069][T19279] netlink: 16 bytes leftover after parsing attributes in process `syz.5.3240'. [ 619.036759][T19279] netlink: 'syz.5.3240': attribute type 11 has an invalid length. [ 619.332396][T19295] netlink: 8 bytes leftover after parsing attributes in process `syz.4.3242'. [ 619.594480][T19312] netlink: 'syz.5.3248': attribute type 3 has an invalid length. [ 620.174533][T19328] netlink: 4 bytes leftover after parsing attributes in process `syz.4.3253'. [ 620.184309][T19329] netlink: 12 bytes leftover after parsing attributes in process `syz.4.3253'. [ 620.633160][T10608] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 621.275800][ T8663] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 622.540187][T19312] nci: __nci_request: wait_for_completion_interruptible_timeout failed -512 [ 622.560475][T10608] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 622.903597][T19355] netlink: 8 bytes leftover after parsing attributes in process `syz.5.3258'. [ 623.191003][ T51] block nbd4: Possible stuck request ffff888025568000: control (read@0,1024B). Runtime 90 seconds [ 623.191600][T10606] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 623.202114][ T51] block nbd4: Possible stuck request ffff888025568200: control (read@1024,1024B). Runtime 90 seconds [ 623.221554][ T51] block nbd4: Possible stuck request ffff888025568400: control (read@2048,1024B). Runtime 90 seconds [ 623.232759][ T51] block nbd4: Possible stuck request ffff888025568600: control (read@3072,1024B). Runtime 90 seconds [ 624.474743][ T1300] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 625.699556][ T5189] udevd[5189]: worker [14963] /devices/virtual/block/nbd4 is taking a long time [ 626.396463][ T3453] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 626.498083][T19397] netlink: 8 bytes leftover after parsing attributes in process `syz.0.3266'. [ 627.031412][ T8663] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 627.182043][T19411] syzkaller0: entered promiscuous mode [ 627.187728][T19411] syzkaller0: entered allmulticast mode [ 627.671493][ T8663] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 628.311997][T10608] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 628.959934][T19365] nci: __nci_request: wait_for_completion_interruptible_timeout failed -512 [ 629.273416][T19429] netlink: 'syz.4.3273': attribute type 2 has an invalid length. [ 629.361175][T19429] l24): entered promiscuous mode [ 629.403266][T19435] netlink: 'syz.6.3276': attribute type 1 has an invalid length. [ 629.422540][T19435] mac80211_hwsim hwsim44 wlan0: entered promiscuous mode [ 629.664670][T19439] bond3: Unable to set peer notification delay as MII monitoring is disabled [ 629.721462][T19448] netlink: 104 bytes leftover after parsing attributes in process `syz.0.3278'. [ 629.966896][T19439] bond3 (unregistering): Released all slaves [ 630.368525][T19454] netlink: 8 bytes leftover after parsing attributes in process `syz.4.3283'. [ 630.385967][T19454] netlink: 8 bytes leftover after parsing attributes in process `syz.4.3283'. [ 630.416249][T19454] netlink: 8 bytes leftover after parsing attributes in process `syz.4.3283'. [ 630.461020][T19454] netlink: 8 bytes leftover after parsing attributes in process `syz.4.3283'. [ 630.510398][T19454] netlink: 8 bytes leftover after parsing attributes in process `syz.4.3283'. [ 630.536532][T19454] netlink: 8 bytes leftover after parsing attributes in process `syz.4.3283'. [ 630.568295][T19454] netlink: 8 bytes leftover after parsing attributes in process `syz.4.3283'. [ 630.581762][T19454] netlink: 8 bytes leftover after parsing attributes in process `syz.4.3283'. [ 630.636125][T19467] netlink: 'syz.5.3284': attribute type 4 has an invalid length. [ 630.668315][T19466] netlink: 'syz.5.3284': attribute type 4 has an invalid length. [ 631.141476][T19481] xt_CHECKSUM: unsupported CHECKSUM operation 68 [ 631.356476][T19482] bridge0: port 1(bridge_slave_0) entered disabled state [ 631.388252][T19482] bridge0: port 2(bridge_slave_1) entered disabled state [ 631.481115][T19484] bridge_slave_1: left allmulticast mode [ 631.486960][T19484] bridge_slave_1: left promiscuous mode [ 631.493466][T19484] bridge0: port 2(bridge_slave_1) entered disabled state [ 631.516409][T19497] __nla_validate_parse: 79 callbacks suppressed [ 631.516434][T19497] netlink: 40 bytes leftover after parsing attributes in process `syz.4.3292'. [ 631.540027][T19484] bridge_slave_0: left allmulticast mode [ 631.545744][T19484] bridge_slave_0: left promiscuous mode [ 631.557784][T19484] bridge0: port 1(bridge_slave_0) entered disabled state [ 632.004221][T19509] input: Bluetooth HID Boot Protocol Device as /devices/virtual/bluetooth/hci1/hci1:200/input7 [ 632.132332][ T30] audit: type=1800 audit(1770372649.003:13): pid=19492 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="syz.0.3291" name="cgroup.controllers" dev="tmpfs" ino=158 res=0 errno=0 [ 632.152738][ C0] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 632.161369][ C0] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 632.407509][T19518] openvswitch: netlink: IP tunnel dst address not specified [ 632.845478][T10606] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 632.905559][T19544] netlink: 12 bytes leftover after parsing attributes in process `syz.2.3306'. [ 632.918043][T19542] netlink: 12 bytes leftover after parsing attributes in process `syz.0.3304'. [ 632.939239][T19542] netlink: 16 bytes leftover after parsing attributes in process `syz.0.3304'. [ 633.091030][T19549] netlink: 20 bytes leftover after parsing attributes in process `syz.5.3307'. [ 633.451343][T10606] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 633.459501][T10606] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 633.555218][T19568] netlink: 4 bytes leftover after parsing attributes in process `syz.2.3313'. [ 633.611807][T19572] IPv6: RTM_NEWROUTE with no NLM_F_CREATE or NLM_F_REPLACE [ 633.619153][T19572] IPv6: NLM_F_CREATE should be set when creating new route [ 633.664417][T19568] IPv6: RTM_NEWROUTE with no NLM_F_CREATE or NLM_F_REPLACE [ 633.671847][T19568] IPv6: NLM_F_CREATE should be set when creating new route [ 634.355667][T19612] ip6gre1: entered promiscuous mode [ 634.540724][T19620] netlink: 8 bytes leftover after parsing attributes in process `syz.4.3325'. [ 634.580433][T19620] batman_adv: Cannot find parent device. Skipping batadv-on-batadv check for gretap1 [ 634.811060][T16779] block nbd5: Receive control failed (result -32) [ 634.823084][ T5822] block nbd6: Receive control failed (result -32) [ 635.220529][T19653] netlink: 'syz.4.3333': attribute type 10 has an invalid length. [ 635.264179][T19653] 8021q: adding VLAN 0 to HW filter on device bond0 [ 635.337327][T19653] bond_slave_0: entered promiscuous mode [ 635.343556][T19653] bond_slave_1: entered promiscuous mode [ 635.353896][T19653] team0: Port device bond0 added [ 635.388018][T19655] netlink: 4 bytes leftover after parsing attributes in process `syz.2.3334'. [ 635.838892][T19685] netlink: 12 bytes leftover after parsing attributes in process `syz.4.3339'. [ 635.863112][T19685] bridge0: port 3(batadv1) entered blocking state [ 635.875960][T19685] bridge0: port 3(batadv1) entered disabled state [ 635.893010][T19685] batadv1: entered allmulticast mode [ 635.901902][T19685] batadv1: entered promiscuous mode [ 635.913051][T19686] sch_tbf: burst 1447 is lower than device macvtap0 mtu (1514) ! [ 636.269007][T19694] netdevsim netdevsim6 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 636.361584][T10601] batman_adv: batadv1: No IGMP Querier present - multicast optimizations disabled [ 636.372142][T10601] batman_adv: batadv1: No MLD Querier present - multicast optimizations disabled [ 636.411920][T19694] netdevsim netdevsim6 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 636.559241][T19694] netdevsim netdevsim6 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 636.685143][T19694] netdevsim netdevsim6 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 636.997845][T19709] nbd: must specify at least one socket [ 637.675311][T15982] netdevsim netdevsim6 eth0: set [1, 0] type 2 family 0 port 6081 - 0 [ 637.691569][T15982] netdevsim netdevsim6 eth1: set [1, 0] type 2 family 0 port 6081 - 0 [ 637.754702][T10601] netdevsim netdevsim6 eth2: set [1, 0] type 2 family 0 port 6081 - 0 [ 637.823280][ T3453] netdevsim netdevsim6 eth3: set [1, 0] type 2 family 0 port 6081 - 0 [ 637.883456][T19747] netlink: 8 bytes leftover after parsing attributes in process `syz.5.3360'. [ 637.911378][ T3453] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 638.086687][T19751] bond1: Removing last ns target with arp_interval on [ 638.120337][T19760] pimreg: entered allmulticast mode [ 638.129000][T19760] pimreg: left allmulticast mode [ 638.181770][T19765] syzkaller0: entered promiscuous mode [ 638.190465][T19765] syzkaller0: entered allmulticast mode [ 638.275593][T19769] netlink: 24 bytes leftover after parsing attributes in process `syz.2.3367'. [ 638.343694][T19769] xt_addrtype: ipv6 does not support BROADCAST matching [ 638.514089][T19781] netlink: 12 bytes leftover after parsing attributes in process `syz.2.3370'. [ 638.551845][ T3453] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 638.571030][T10601] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 638.589132][T19785] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 638.771982][T19792] netlink: 24 bytes leftover after parsing attributes in process `syz.4.3374'. [ 638.822025][T19792] netlink: 4 bytes leftover after parsing attributes in process `syz.4.3374'. [ 638.832695][T19792] netlink: 12 bytes leftover after parsing attributes in process `syz.4.3374'. [ 639.006523][T19801] netlink: 8 bytes leftover after parsing attributes in process `syz.2.3378'. [ 639.030998][T10601] wlan0: Trigger new scan to find an IBSS to join [ 639.048619][T19805] netlink: 4 bytes leftover after parsing attributes in process `syz.4.3379'. [ 639.101787][T19805] veth0_macvtap: left promiscuous mode [ 639.173350][T19809] netlink: 280 bytes leftover after parsing attributes in process `syz.2.3381'. [ 639.191986][ T3453] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 639.551921][T19835] netlink: 64 bytes leftover after parsing attributes in process `syz.4.3386'. [ 639.691143][T19831] nci: __nci_request: wait_for_completion_interruptible_timeout failed -512 [ 641.042031][T19883] netlink: 'syz.0.3400': attribute type 1 has an invalid length. [ 641.427372][T19902] netlink: 'syz.4.3405': attribute type 12 has an invalid length. [ 641.846228][ T30] audit: type=1804 audit(1770372658.713:14): pid=19934 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=invalid_pcr cause=open_writers comm="syz.5.3414" name="/newroot/339/cgroup.controllers" dev="tmpfs" ino=1751 res=1 errno=0 [ 641.903552][ T30] audit: type=1800 audit(1770372658.743:15): pid=19934 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.5.3414" name="cgroup.controllers" dev="tmpfs" ino=1751 res=0 errno=0 [ 641.998868][ T30] audit: type=1804 audit(1770372658.753:16): pid=19934 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=invalid_pcr cause=ToMToU comm="syz.5.3414" name="/newroot/339/cgroup.controllers" dev="tmpfs" ino=1751 res=1 errno=0 [ 642.033484][ T30] audit: type=1800 audit(1770372658.753:17): pid=19940 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.5.3414" name="cgroup.controllers" dev="tmpfs" ino=1751 res=0 errno=0 [ 642.280524][T19956] syz.2.3419: vmalloc error: size 8589938688, exceeds total pages, mode:0xdc0(GFP_KERNEL|__GFP_ZERO), nodemask=(null),cpuset=/,mems_allowed=0-1 [ 642.303273][T19956] CPU: 0 UID: 0 PID: 19956 Comm: syz.2.3419 Not tainted syzkaller #0 PREEMPT(full) [ 642.303305][T19956] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/24/2026 [ 642.303318][T19956] Call Trace: [ 642.303326][T19956] [ 642.303336][T19956] dump_stack_lvl+0xe8/0x150 [ 642.303379][T19956] warn_alloc+0x249/0x340 [ 642.303403][T19956] ? stack_trace_save+0xa9/0x100 [ 642.303433][T19956] ? __pfx_warn_alloc+0x10/0x10 [ 642.303462][T19956] ? kasan_save_track+0x4f/0x80 [ 642.303480][T19956] ? kasan_save_track+0x3e/0x80 [ 642.303497][T19956] ? __kasan_kmalloc+0x93/0xb0 [ 642.303514][T19956] ? __kmalloc_cache_noprof+0x3d1/0x6e0 [ 642.303533][T19956] ? xskq_create+0x56/0x170 [ 642.303555][T19956] ? xsk_setsockopt+0x54c/0x990 [ 642.303574][T19956] ? do_sock_setsockopt+0x17c/0x1b0 [ 642.303596][T19956] ? __x64_sys_setsockopt+0x13d/0x1b0 [ 642.303620][T19956] ? do_syscall_64+0xe2/0xf80 [ 642.303651][T19956] __vmalloc_node_range_noprof+0x132/0x1730 [ 642.303708][T19956] ? __pfx___vmalloc_node_range_noprof+0x10/0x10 [ 642.303737][T19956] ? __kasan_kmalloc+0x93/0xb0 [ 642.303765][T19956] vmalloc_user_noprof+0xad/0xe0 [ 642.303785][T19956] ? xskq_create+0xbf/0x170 [ 642.303811][T19956] xskq_create+0xbf/0x170 [ 642.303840][T19956] xsk_init_queue+0xad/0x110 [ 642.303867][T19956] xsk_setsockopt+0x54c/0x990 [ 642.303893][T19956] ? __pfx_xsk_setsockopt+0x10/0x10 [ 642.303917][T19956] ? __pfx_aa_sk_perm+0x10/0x10 [ 642.303944][T19956] ? aa_sock_opt_perm+0xff/0x1a0 [ 642.303973][T19956] ? bpf_lsm_socket_setsockopt+0x9/0x20 [ 642.303995][T19956] ? __pfx_xsk_setsockopt+0x10/0x10 [ 642.304019][T19956] do_sock_setsockopt+0x17c/0x1b0 [ 642.304050][T19956] __x64_sys_setsockopt+0x13d/0x1b0 [ 642.304082][T19956] do_syscall_64+0xe2/0xf80 [ 642.304108][T19956] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 642.304127][T19956] ? trace_irq_disable+0x37/0x100 [ 642.304146][T19956] ? clear_bhb_loop+0x60/0xb0 [ 642.304171][T19956] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 642.304190][T19956] RIP: 0033:0x7f1a7f79aeb9 [ 642.304210][T19956] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 642.304226][T19956] RSP: 002b:00007f1a8066c028 EFLAGS: 00000246 ORIG_RAX: 0000000000000036 [ 642.304248][T19956] RAX: ffffffffffffffda RBX: 00007f1a7fa15fa0 RCX: 00007f1a7f79aeb9 [ 642.304263][T19956] RDX: 0000000000000006 RSI: 000000000000011b RDI: 0000000000000005 [ 642.304275][T19956] RBP: 00007f1a7f808c1f R08: 0000000000000004 R09: 0000000000000000 [ 642.304287][T19956] R10: 0000200000000000 R11: 0000000000000246 R12: 0000000000000000 [ 642.304299][T19956] R13: 00007f1a7fa16038 R14: 00007f1a7fa15fa0 R15: 00007ffeae36da48 [ 642.304334][T19956] [ 642.304352][T19956] Mem-Info: [ 642.441895][T19952] delete_channel: no stack [ 642.449125][T19956] active_anon:9439 inactive_anon:0 isolated_anon:0 [ 642.449125][T19956] active_file:3538 inactive_file:40174 isolated_file:0 [ 642.449125][T19956] unevictable:768 dirty:271 writeback:0 [ 642.449125][T19956] slab_reclaimable:12407 slab_unreclaimable:162493 [ 642.449125][T19956] mapped:42558 shmem:3933 pagetables:1404 [ 642.449125][T19956] sec_pagetables:0 bounce:0 [ 642.449125][T19956] kernel_misc_reclaimable:0 [ 642.449125][T19956] free:1228283 free_pcp:16148 free_cma:0 [ 642.642839][T19956] Node 0 active_anon:37956kB inactive_anon:0kB active_file:14152kB inactive_file:160496kB unevictable:1536kB isolated(anon):0kB isolated(file):0kB mapped:182532kB dirty:1084kB writeback:0kB shmem:14296kB shmem_thp:0kB shmem_pmdmapped:0kB anon_thp:0kB kernel_stack:16056kB pagetables:5568kB sec_pagetables:0kB all_unreclaimable? no Balloon:0kB [ 642.675963][T19956] Node 1 active_anon:0kB inactive_anon:0kB active_file:0kB inactive_file:200kB unevictable:1536kB isolated(anon):0kB isolated(file):0kB mapped:0kB dirty:0kB writeback:0kB shmem:1536kB shmem_thp:0kB shmem_pmdmapped:0kB anon_thp:0kB kernel_stack:32kB pagetables:148kB sec_pagetables:0kB all_unreclaimable? no Balloon:0kB [ 642.706253][T19956] Node 0 DMA free:15360kB boost:0kB min:208kB low:260kB high:312kB reserved_highatomic:0KB free_highatomic:0KB active_anon:0kB inactive_anon:0kB active_file:0kB inactive_file:0kB unevictable:0kB writepending:0kB zspages:0kB present:15992kB managed:15360kB mlocked:0kB bounce:0kB free_pcp:0kB local_pcp:0kB free_cma:0kB [ 642.740685][T19956] lowmem_reserve[]: 0 2494 2495 2495 2495 [ 642.752029][T19956] Node 0 DMA32 free:1003068kB boost:0kB min:34216kB low:42768kB high:51320kB reserved_highatomic:0KB free_highatomic:0KB active_anon:38256kB inactive_anon:0kB active_file:14152kB inactive_file:160496kB unevictable:1536kB writepending:1084kB zspages:0kB present:3129332kB managed:2554028kB mlocked:0kB bounce:0kB free_pcp:53388kB local_pcp:28588kB free_cma:0kB [ 642.882765][T19956] lowmem_reserve[]: 0 0 1 1 1 [ 642.890842][T19956] Node 0 Normal free:0kB boost:0kB min:12kB low:12kB high:12kB reserved_highatomic:0KB free_highatomic:0KB active_anon:0kB inactive_anon:0kB active_file:0kB inactive_file:0kB unevictable:0kB writepending:0kB zspages:0kB present:1048580kB managed:1132kB mlocked:0kB bounce:0kB free_pcp:0kB local_pcp:0kB free_cma:0kB [ 642.937544][T19956] lowmem_reserve[]: 0 0 0 0 0 [ 642.943617][T19956] Node 1 Normal free:3894004kB boost:0kB min:55668kB low:69584kB high:83500kB reserved_highatomic:0KB free_highatomic:0KB active_anon:0kB inactive_anon:0kB active_file:0kB inactive_file:200kB unevictable:1536kB writepending:0kB zspages:0kB present:4194300kB managed:4111100kB mlocked:0kB bounce:0kB free_pcp:11136kB local_pcp:8992kB free_cma:0kB [ 642.979336][T19976] netlink: 'syz.0.3423': attribute type 10 has an invalid length. [ 643.006543][T19956] lowmem_reserve[]: 0 0 0 0 0 [ 643.012674][T19956] Node 0 DMA: 0*4kB 0*8kB 0*16kB 0*32kB 0*64kB 0*128kB 0*256kB 0*512kB 1*1024kB (U) 1*2048kB (M) 3*4096kB (M) = 15360kB [ 643.026481][T19956] Node 0 DMA32: 4780*4kB (UME) 5211*8kB (UME) 1521*16kB (UME) 306*32kB (UME) 69*64kB (UME) 316*128kB (UME) 268*256kB (UM) 222*512kB (UM) 158*1024kB (UME) 65*2048kB (UM) 96*4096kB (UM) = 1010200kB [ 643.049890][T10606] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 643.064037][T19956] Node 0 Normal: 0*4kB 0*8kB 0*16kB 0*32kB 0*64kB 0*128kB 0*256kB 0*512kB 0*1024kB 0*2048kB 0*4096kB = 0kB [ 643.078382][T19956] Node 1 Normal: 189*4kB (UME) 46*8kB (UME) 29*16kB (UME) 228*32kB (UME) 65*64kB (UME) 12*128kB (UME) 6*256kB (UME) 4*512kB (UME) 1*1024kB (M) 2*2048kB (UE) 945*4096kB (M) = 3894004kB [ 643.099550][T19956] Node 0 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=1048576kB [ 643.129917][T19956] Node 0 hugepages_total=2 hugepages_free=2 hugepages_surp=0 hugepages_size=2048kB [ 643.160523][T19956] Node 1 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=1048576kB [ 643.216484][T19956] Node 1 hugepages_total=2 hugepages_free=2 hugepages_surp=0 hugepages_size=2048kB [ 643.262520][T19956] 45067 total pagecache pages [ 643.278252][T19956] 0 pages in swap cache [ 643.290691][T19956] Free swap = 124996kB [ 643.295369][T19956] Total swap = 124996kB [ 643.300140][T19956] 2097051 pages RAM [ 643.304061][T19956] 0 pages HighMem/MovableOnly [ 643.308882][T19956] 426646 pages reserved [ 643.313679][T19956] 0 pages cma reserved [ 643.333432][T19960] bond2 (unregistering): Released all slaves [ 643.382723][T19961] __nla_validate_parse: 12 callbacks suppressed [ 643.382745][T19961] netlink: 8 bytes leftover after parsing attributes in process `syz.2.3419'. [ 643.398878][T19988] netlink: 36 bytes leftover after parsing attributes in process `syz.5.3425'. [ 643.399215][T19961] netlink: 8 bytes leftover after parsing attributes in process `syz.2.3419'. [ 643.420930][T19961] netlink: 8 bytes leftover after parsing attributes in process `syz.2.3419'. [ 643.441589][T19961] netlink: 8 bytes leftover after parsing attributes in process `syz.2.3419'. [ 643.451257][T19961] netlink: 8 bytes leftover after parsing attributes in process `syz.2.3419'. [ 643.460808][T19961] netlink: 8 bytes leftover after parsing attributes in process `syz.2.3419'. [ 643.470773][T19961] netlink: 8 bytes leftover after parsing attributes in process `syz.2.3419'. [ 643.480521][T19961] netlink: 8 bytes leftover after parsing attributes in process `syz.2.3419'. [ 643.489843][T19961] netlink: 8 bytes leftover after parsing attributes in process `syz.2.3419'. [ 643.526260][T19976] team0: Device ipvlan1 failed to register rx_handler [ 643.577851][T19991] bridge3: entered promiscuous mode [ 643.586399][T19991] bridge3: entered allmulticast mode [ 643.596937][T19991] team0: Port device bridge3 added [ 643.622883][T19993] bridge0: port 4(team0) entered blocking state [ 643.645677][T19993] bridge0: port 4(team0) entered disabled state [ 643.653012][T19993] team0: entered allmulticast mode [ 643.678757][T19993] team_slave_0: entered allmulticast mode [ 643.690304][T19993] team_slave_1: entered allmulticast mode [ 643.696410][T19993] bond0: entered allmulticast mode [ 643.703043][T19993] bond_slave_0: entered allmulticast mode [ 643.708825][T19993] bond_slave_1: entered allmulticast mode [ 643.717779][T19993] team0: left allmulticast mode [ 643.724000][T19993] team_slave_0: left allmulticast mode [ 643.729565][T19993] team_slave_1: left allmulticast mode [ 643.735846][T19993] bond0: left allmulticast mode [ 643.742972][T19993] bond_slave_0: left allmulticast mode [ 643.748481][T19993] bond_slave_1: left allmulticast mode [ 643.992382][ T3453] wlan0: Trigger new scan to find an IBSS to join [ 644.311161][ T8663] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 644.319874][ T8663] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 644.388664][T20020] can: request_module (can-proto-0) failed. [ 644.570060][T20039] ip6tnl0: entered promiscuous mode [ 644.575351][T20039] ip6tnl0: entered allmulticast mode [ 644.950547][T15982] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 645.012767][T15982] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 645.440827][T20067] syz_tun: entered allmulticast mode [ 645.464806][T20072] dvmrp6: entered allmulticast mode [ 645.477028][T20065] erspan0: left promiscuous mode [ 645.521025][T20065] A link change request failed with some changes committed already. Interface caif0 may have been left with an inconsistent configuration, please check. [ 645.570357][T20078] bridge0: entered promiscuous mode [ 645.575740][T20078] macsec1: entered promiscuous mode [ 645.616973][T20079] batman_adv: Cannot find parent device. Skipping batadv-on-batadv check for ip6gretap1 [ 645.825554][T20086] IPv6: RTM_NEWROUTE with no NLM_F_CREATE or NLM_F_REPLACE [ 645.832833][T20086] IPv6: NLM_F_CREATE should be set when creating new route [ 645.851016][T20086] IPv6: RTM_NEWROUTE with no NLM_F_CREATE or NLM_F_REPLACE [ 645.858252][T20086] IPv6: NLM_F_CREATE should be set when creating new route [ 646.277944][T20102] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check. [ 648.071014][ T66] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 648.342139][T20182] nbd: must specify at least one socket [ 648.373202][T20182] block nbd6: NBD_DISCONNECT [ 648.406608][T20182] block nbd6: Send disconnect failed -32 [ 648.435645][T20182] block nbd6: shutting down sockets [ 648.862604][T20197] __nla_validate_parse: 79 callbacks suppressed [ 648.862625][T20197] netlink: 88 bytes leftover after parsing attributes in process `syz.4.3471'. [ 649.167036][T20209] netlink: 140 bytes leftover after parsing attributes in process `syz.0.3476'. [ 649.395740][T20217] syzkaller0: entered promiscuous mode [ 649.413890][T20217] syzkaller0: entered allmulticast mode [ 649.664515][T20227] netlink: 'syz.6.3481': attribute type 4 has an invalid length. [ 649.709457][T20227] netlink: 8 bytes leftover after parsing attributes in process `syz.6.3481'. [ 650.061154][T20236] bond3: entered promiscuous mode [ 650.072720][ T36] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 650.137418][ T66] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 650.341374][T20249] geneve2: entered promiscuous mode [ 650.355993][T20249] geneve2: entered allmulticast mode [ 650.370601][T20255] netlink: 'syz.6.3489': attribute type 3 has an invalid length. [ 650.399826][ T66] netdevsim netdevsim5 eth0: set [1, 0] type 2 family 0 port 20000 - 0 [ 650.427415][ T66] netdevsim netdevsim5 eth1: set [1, 0] type 2 family 0 port 20000 - 0 [ 650.711862][ T36] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 650.790487][ T66] netdevsim netdevsim5 eth2: set [1, 0] type 2 family 0 port 20000 - 0 [ 650.798942][ T66] netdevsim netdevsim5 eth3: set [1, 0] type 2 family 0 port 20000 - 0 [ 651.033900][T20269] netlink: 'syz.5.3493': attribute type 3 has an invalid length. [ 651.139419][T20271] netlink: 'syz.0.3494': attribute type 11 has an invalid length. [ 651.147770][T20271] netlink: 'syz.0.3494': attribute type 11 has an invalid length. [ 651.166665][T20271] netlink: 204 bytes leftover after parsing attributes in process `syz.0.3494'. [ 652.110870][T20284] netlink: 5 bytes leftover after parsing attributes in process `syz.6.3498'. [ 652.148945][T20284] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check. [ 652.277128][T20294] tc_dump_action: action bad kind [ 652.681770][T20310] netlink: 40 bytes leftover after parsing attributes in process `syz.6.3505'. [ 652.693744][T20116] Set syz1 is full, maxelem 65536 reached [ 652.865151][T20316] netlink: 8 bytes leftover after parsing attributes in process `syz.5.3506'. [ 652.920252][T20316] netlink: 8 bytes leftover after parsing attributes in process `syz.5.3506'. [ 652.927156][ T30] audit: type=1804 audit(1770372669.793:18): pid=20317 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=invalid_pcr cause=open_writers comm="syz.5.3506" name="/newroot/367/cgroup.controllers" dev="tmpfs" ino=1894 res=1 errno=0 [ 652.982890][ T30] audit: type=1800 audit(1770372669.793:19): pid=20317 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.5.3506" name="cgroup.controllers" dev="tmpfs" ino=1894 res=0 errno=0 [ 653.012175][ T30] audit: type=1800 audit(1770372669.793:20): pid=20317 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.5.3506" name="cgroup.controllers" dev="tmpfs" ino=1894 res=0 errno=0 [ 653.065817][ T30] audit: type=1800 audit(1770372669.793:21): pid=20317 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.5.3506" name="cgroup.controllers" dev="tmpfs" ino=1894 res=0 errno=0 [ 653.162439][ T30] audit: type=1800 audit(1770372669.793:22): pid=20317 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.5.3506" name="cgroup.controllers" dev="tmpfs" ino=1894 res=0 errno=0 [ 653.252288][ T30] audit: type=1800 audit(1770372669.793:23): pid=20317 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.5.3506" name="cgroup.controllers" dev="tmpfs" ino=1894 res=0 errno=0 [ 653.280814][ T51] block nbd4: Possible stuck request ffff888025568000: control (read@0,1024B). Runtime 120 seconds [ 653.292321][ T51] block nbd4: Possible stuck request ffff888025568200: control (read@1024,1024B). Runtime 120 seconds [ 653.302653][T15982] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 653.304997][ T51] block nbd4: Possible stuck request ffff888025568400: control (read@2048,1024B). Runtime 120 seconds [ 653.324445][ T51] block nbd4: Possible stuck request ffff888025568600: control (read@3072,1024B). Runtime 120 seconds [ 653.416008][ T30] audit: type=1800 audit(1770372669.793:24): pid=20317 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.5.3506" name="cgroup.controllers" dev="tmpfs" ino=1894 res=0 errno=0 [ 653.493989][T20354] netlink: 20 bytes leftover after parsing attributes in process `syz.6.3518'. [ 653.494526][T20338] bridge0: port 2(bridge_slave_1) entered disabled state [ 653.510929][T20338] bridge0: port 1(bridge_slave_0) entered disabled state [ 653.583494][T20357] netlink: 'syz.5.3519': attribute type 1 has an invalid length. [ 653.623858][T20338] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 653.641186][T20338] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 653.744292][T20341] bridge_slave_0: left allmulticast mode [ 653.754740][T20341] bridge0: port 1(bridge_slave_0) entered disabled state [ 653.774457][T20341] A link change request failed with some changes committed already. Interface bridge_slave_0 may have been left with an inconsistent configuration, please check. [ 653.831223][T20352] team0: Device lo is loopback device. Loopback devices can't be added as a team port [ 653.851224][T20352] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check. [ 653.963306][T20357] 8021q: adding VLAN 0 to HW filter on device bond3 [ 654.022301][T20369] netlink: 'syz.6.3522': attribute type 1 has an invalid length. [ 654.038649][T20358] 8021q: adding VLAN 0 to HW filter on device bond3 [ 654.046532][T20358] bond3: (slave vxcan3): The slave device specified does not support setting the MAC address [ 654.058452][T20358] bond3: (slave vxcan3): Error -95 calling set_mac_address [ 654.096115][T20359] bond3: (slave wlan0): dev_set_mac_address on slave failed! ALB mode requires that the base driver support setting the hw address also when the network device's interface is open [ 654.141771][ T36] netdevsim netdevsim0 netdevsim0: unset [1, 0] type 2 family 0 port 6081 - 0 [ 654.152756][ T36] netdevsim netdevsim0 netdevsim1: unset [1, 0] type 2 family 0 port 6081 - 0 [ 654.163838][ T36] netdevsim netdevsim0 netdevsim2: unset [1, 0] type 2 family 0 port 6081 - 0 [ 654.221758][T20378] netlink: 28 bytes leftover after parsing attributes in process `syz.6.3522'. [ 654.349453][T20369] 8021q: adding VLAN 0 to HW filter on device bond1 [ 654.434879][T20358] bond3: (slave vxcan3): The slave device specified does not support setting the MAC address [ 654.446242][T20358] bond3: (slave vxcan3): Error -95 calling set_mac_address [ 654.466418][ T36] netdevsim netdevsim0 netdevsim3: unset [1, 0] type 2 family 0 port 6081 - 0 [ 654.596177][T20387] bond2: entered allmulticast mode [ 654.622254][T20400] netlink: 61203 bytes leftover after parsing attributes in process `syz.5.3528'. [ 654.660383][T20387] 8021q: adding VLAN 0 to HW filter on device bond2 [ 654.830712][T20402] sctp: [Deprecated]: syz.2.3525 (pid 20402) Use of int in max_burst socket option deprecated. [ 654.830712][T20402] Use struct sctp_assoc_value instead [ 655.105527][T20413] netlink: 'syz.5.3530': attribute type 1 has an invalid length. [ 655.191660][ T66] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 655.347786][T20419] netlink: 2 bytes leftover after parsing attributes in process `syz.5.3531'. [ 655.740881][T20439] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 655.832820][T10606] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 655.847366][T20442] netlink: 16186 bytes leftover after parsing attributes in process `syz.6.3538'. [ 655.864367][T20439] netlink: 36 bytes leftover after parsing attributes in process `syz.2.3536'. [ 656.046310][T20457] netlink: 'syz.4.3543': attribute type 13 has an invalid length. [ 656.072182][T20457] gretap0: refused to change device tx_queue_len [ 656.084122][T20457] A link change request failed with some changes committed already. Interface gretap0 may have been left with an inconsistent configuration, please check. [ 656.171750][T20464] netlink: 4 bytes leftover after parsing attributes in process `syz.0.3544'. [ 656.205723][T20466] netlink: 'syz.5.3545': attribute type 10 has an invalid length. [ 656.217477][T20466] 8021q: adding VLAN 0 to HW filter on device team0 [ 656.239425][T20466] bond0: (slave team0): Enslaving as an active interface with an up link [ 656.284384][T20472] netlink: 240 bytes leftover after parsing attributes in process `syz.6.3541'. [ 656.296099][T20471] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 656.301662][T20473] netlink: 132 bytes leftover after parsing attributes in process `syz.0.3544'. [ 656.364020][T20471] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 656.409449][T20476] netlink: 48 bytes leftover after parsing attributes in process `syz.0.3547'. [ 656.449939][T20471] xt_CT: No such helper "pptp" [ 656.467172][T20469] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 656.475167][T10606] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 656.529349][T20483] xt_l2tp: v2 doesn't support IP mode [ 656.881840][T20503] netlink: 192 bytes leftover after parsing attributes in process `syz.2.3553'. [ 657.291378][T20523] 8021q: adding VLAN 0 to HW filter on device batadv2 [ 657.330238][T20523] batadv2: entered promiscuous mode [ 657.337419][T20523] team0: Port device batadv2 added [ 657.532704][T20528] bridge: RTM_NEWNEIGH with invalid ether address [ 657.576911][T20531] syzkaller1: entered promiscuous mode [ 657.586905][T20531] syzkaller1: entered allmulticast mode [ 657.596690][T20531] PF_CAN: dropped non conform CAN skbuff: dev type 280, len 324 [ 657.652421][T20538] 8021q: adding VLAN 0 to HW filter on device batadv1 [ 657.688002][T20538] team0: Port device batadv1 added [ 657.827575][T20556] openvswitch: netlink: Port 167772160 exceeds max allowable 65535 [ 658.010911][T20560] netlink: 'syz.5.3570': attribute type 1 has an invalid length. [ 658.213726][T20571] netlink: 'syz.0.3573': attribute type 11 has an invalid length. [ 658.733109][T20584] ipvlan2: entered allmulticast mode [ 658.747167][T20584] veth0_vlan: entered allmulticast mode [ 658.868435][T20588] netlink: 'syz.5.3580': attribute type 1 has an invalid length. [ 659.031040][T10606] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 659.127425][T20593] bond4: (slave geneve3): making interface the new active one [ 659.137439][T20593] bond4: (slave geneve3): Enslaving as an active interface with an up link [ 659.211252][T10609] netdevsim netdevsim5 eth0: set [1, 1] type 2 family 0 port 20004 - 0 [ 659.334375][T20610] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 659.385801][T20611] erspan0: entered promiscuous mode [ 659.396238][T20611] __nla_validate_parse: 7 callbacks suppressed [ 659.396338][T20611] netlink: 8 bytes leftover after parsing attributes in process `syz.0.3584'. [ 659.412841][T10609] netdevsim netdevsim5 eth1: set [1, 1] type 2 family 0 port 20004 - 0 [ 659.427312][T20622] netlink: 24 bytes leftover after parsing attributes in process `syz.5.3589'. [ 659.451307][T20620] netlink: 'syz.6.3587': attribute type 1 has an invalid length. [ 659.610010][T20620] bond4: entered promiscuous mode [ 659.659035][T20620] 8021q: adding VLAN 0 to HW filter on device bond4 [ 659.685616][T10609] netdevsim netdevsim5 eth2: set [1, 1] type 2 family 0 port 20004 - 0 [ 659.705779][T10609] netdevsim netdevsim5 eth3: set [1, 1] type 2 family 0 port 20004 - 0 [ 659.786798][T20627] 8021q: adding VLAN 0 to HW filter on device bond5 [ 659.797754][T20627] bond4: (slave bond5): making interface the new active one [ 659.805458][T20627] bond5: entered promiscuous mode [ 659.813536][T20627] bond4: (slave bond5): Enslaving as an active interface with an up link [ 659.967875][T20659] netlink: 'syz.2.3598': attribute type 1 has an invalid length. [ 659.995704][T20661] netlink: 16 bytes leftover after parsing attributes in process `syz.4.3594'. [ 660.023501][T20661] netlink: 108 bytes leftover after parsing attributes in process `syz.4.3594'. [ 660.050010][T20661] netlink: 16 bytes leftover after parsing attributes in process `syz.4.3594'. [ 660.164989][T20675] input: Bluetooth HID Boot Protocol Device as /devices/virtual/bluetooth/hci1/hci1:200/input8 [ 660.173411][T20659] 8021q: adding VLAN 0 to HW filter on device bond3 [ 660.310990][ T6169] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 660.364948][T20666] bond3: (slave veth5): Enslaving as an active interface with a down link [ 660.393320][T20685] netlink: 24 bytes leftover after parsing attributes in process `syz.6.3601'. [ 660.398363][T20674] bond3: (slave dummy0): making interface the new active one [ 660.412239][T20674] dummy0: entered promiscuous mode [ 660.417937][T20674] bond3: (slave dummy0): Enslaving as an active interface with an up link [ 660.546456][T20685] xfrm1: entered allmulticast mode [ 660.693437][T20694] netlink: 144 bytes leftover after parsing attributes in process `syz.5.3602'. [ 660.961715][T20705] netlink: 'syz.6.3605': attribute type 6 has an invalid length. [ 660.992947][T20705] netlink: 4 bytes leftover after parsing attributes in process `syz.6.3605'. [ 660.996495][T20707] netlink: 104 bytes leftover after parsing attributes in process `syz.2.3606'. [ 661.013630][T20698] netlink: 8 bytes leftover after parsing attributes in process `syz.6.3605'. [ 661.026736][T20698] netlink: 'syz.6.3605': attribute type 2 has an invalid length. [ 661.260445][T20719] bond4: option ad_actor_sys_prio: mode dependency failed, not supported in mode balance-rr(0) [ 661.330893][T20719] bond4 (unregistering): Released all slaves [ 661.598780][T10612] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 662.232193][ T6169] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 662.281318][T20778] xt_hashlimit: max too large, truncated to 1048576 [ 662.307136][T20778] x_tables: ip_tables: rpfilter match: used from hooks OUTPUT, but only valid from PREROUTING [ 662.390049][T16779] Bluetooth: hci1: command 0x0405 tx timeout [ 662.413078][T20778] netlink: 'syz.0.3623': attribute type 4 has an invalid length. [ 662.453950][T20778] netlink: 'syz.0.3623': attribute type 4 has an invalid length. [ 662.660343][T20792] netlink: 'syz.0.3628': attribute type 3 has an invalid length. [ 662.827755][T20796] netdevsim netdevsim6 eth3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 662.902792][T20796] netdevsim netdevsim6 eth2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 663.032324][T20796] netdevsim netdevsim6 eth1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 663.057341][T20808] netlink: 'syz.2.3633': attribute type 29 has an invalid length. [ 663.077198][T20808] netlink: 'syz.2.3633': attribute type 29 has an invalid length. [ 663.108805][T20808] unsupported nla_type 58 [ 663.143721][T20796] netdevsim netdevsim6 eth0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 663.258558][T20812] netlink: 'syz.2.3635': attribute type 8 has an invalid length. [ 663.288922][T20812] sch_fq: defrate 0 ignored. [ 663.410838][T10606] netdevsim netdevsim6 eth0: set [1, 0] type 2 family 0 port 6081 - 0 [ 663.466085][T10610] netdevsim netdevsim6 eth1: set [1, 0] type 2 family 0 port 6081 - 0 [ 663.505339][T10610] netdevsim netdevsim6 eth2: set [1, 0] type 2 family 0 port 6081 - 0 [ 663.579953][T10606] netdevsim netdevsim6 eth3: set [1, 0] type 2 family 0 port 6081 - 0 [ 663.626702][T20830] netlink: 'syz.2.3639': attribute type 6 has an invalid length. [ 664.208738][T20861] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check. [ 664.795959][ T6169] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 665.271350][T20915] tipc: Started in network mode [ 665.309697][T20915] tipc: Node identity baa024331998, cluster identity 4711 [ 665.461127][T20915] tipc: Enabled bearer , priority 0 [ 665.471163][T20917] tipc: Resetting bearer [ 665.587148][T20914] tipc: Disabling bearer [ 665.768523][T20952] netlink: 'syz.2.3667': attribute type 61 has an invalid length. [ 665.830442][T20952] __nla_validate_parse: 10 callbacks suppressed [ 665.830465][T20952] netlink: 16 bytes leftover after parsing attributes in process `syz.2.3667'. [ 666.092592][ T8659] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 666.421158][T20988] block nbd6: server does not support multiple connections per device. [ 666.432498][T20988] block nbd6: shutting down sockets [ 666.726298][T21000] netlink: 'syz.2.3679': attribute type 2 has an invalid length. [ 666.759692][T21000] netlink: 'syz.2.3679': attribute type 1 has an invalid length. [ 666.780043][T21000] netlink: 224 bytes leftover after parsing attributes in process `syz.2.3679'. [ 666.810136][T21004] netlink: 132 bytes leftover after parsing attributes in process `syz.0.3680'. [ 666.841619][T21007] netlink: 132 bytes leftover after parsing attributes in process `syz.0.3680'. [ 667.150191][T21021] veth6: entered allmulticast mode [ 667.190056][T20998] netlink: 32 bytes leftover after parsing attributes in process `syz.5.3675'. [ 667.229381][T20998] netlink: 32 bytes leftover after parsing attributes in process `syz.5.3675'. [ 667.317591][T21030] netlink: 76 bytes leftover after parsing attributes in process `syz.4.3685'. [ 667.351244][ T6169] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 667.360538][T10609] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 667.436940][T21034] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 667.447162][ C1] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 667.491933][T21039] netlink: 12 bytes leftover after parsing attributes in process `syz.2.3686'. [ 667.512665][T21039] netem: change failed [ 667.519146][T21039] netlink: 60 bytes leftover after parsing attributes in process `syz.2.3686'. [ 667.594346][T21042] netlink: 'syz.4.3685': attribute type 1 has an invalid length. [ 667.636333][T21042] netlink: 'syz.4.3685': attribute type 2 has an invalid length. [ 667.680101][T21042] netlink: 'syz.4.3685': attribute type 1 has an invalid length. [ 667.730787][T21042] netlink: 16 bytes leftover after parsing attributes in process `syz.4.3685'. [ 668.030547][T21066] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 668.055640][T21066] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 668.092180][T21073] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 668.107553][T21056] bridge0: port 2(bridge_slave_1) entered disabled state [ 668.163487][T21056] bridge_slave_0: left promiscuous mode [ 668.204499][T21056] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 668.217611][T21056] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 668.315153][T21056] bond2: left allmulticast mode [ 668.335150][ T8659] netdevsim netdevsim2 netdevsim0: unset [1, 0] type 2 family 0 port 6081 - 0 [ 668.355289][ T8659] netdevsim netdevsim2 netdevsim1: unset [1, 0] type 2 family 0 port 6081 - 0 [ 668.376130][ T8659] netdevsim netdevsim2 netdevsim2: unset [1, 0] type 2 family 0 port 6081 - 0 [ 668.428750][ T8659] netdevsim netdevsim2 netdevsim3: unset [1, 0] type 2 family 0 port 6081 - 0 [ 668.462034][T21075] netlink: 'syz.4.3694': attribute type 4 has an invalid length. [ 668.496822][T21082] netlink: 'syz.6.3696': attribute type 1 has an invalid length. [ 668.646599][T21082] bond6: entered promiscuous mode [ 668.665819][T21082] 8021q: adding VLAN 0 to HW filter on device bond6 [ 668.805180][T21082] 8021q: adding VLAN 0 to HW filter on device bond6 [ 668.830420][T21082] bond6: (slave vti0): The slave device specified does not support setting the MAC address [ 668.872710][T21082] bond6: (slave vti0): Setting fail_over_mac to active for active-backup mode [ 668.915442][T21082] bond6: (slave vti0): making interface the new active one [ 668.944864][T21082] vti0: entered promiscuous mode [ 668.969302][T21082] bond6: (slave vti0): Enslaving as an active interface with an up link [ 669.179041][ T5916] IPVS: starting estimator thread 0... [ 669.271119][T21113] IPVS: using max 26 ests per chain, 62400 per kthread [ 669.588406][T21128] vlan2: entered promiscuous mode [ 669.723764][T21132] net_ratelimit: 5 callbacks suppressed [ 669.723785][T21132] openvswitch: netlink: Tunnel attr 333 out of range max 16 [ 669.962236][T21147] netlink: 'syz.6.3709': attribute type 22 has an invalid length. [ 670.123779][T21159] netlink: 'syz.6.3709': attribute type 10 has an invalid length. [ 670.165408][T21145] bond4 (unregistering): Released all slaves [ 671.080129][T21185] openvswitch: netlink: IPv4 tunnel dst address is zero [ 671.227434][T21194] __nla_validate_parse: 3 callbacks suppressed [ 671.227454][T21194] netlink: 212368 bytes leftover after parsing attributes in process `syz.0.3723'. [ 671.379358][T21203] Can not set IPV6_FL_F_REFLECT if flowlabel_consistency sysctl is enable [ 671.409081][T21206] team_slave_0: left promiscuous mode [ 671.432249][T21206] team_slave_1: left promiscuous mode [ 671.446200][T21206] bond_slave_0: left promiscuous mode [ 671.452117][T21206] bond_slave_1: left promiscuous mode [ 671.471780][T21206] batadv2: left promiscuous mode [ 671.522739][T21206] team0 (unregistering): Port device team_slave_0 removed [ 671.537929][T21206] team0 (unregistering): Port device team_slave_1 removed [ 671.549556][T21206] team0 (unregistering): Port device bond0 removed [ 671.559445][T21206] team0 (unregistering): Port device bridge3 removed [ 671.571058][T21206] team0 (unregistering): Port device batadv2 removed [ 671.840333][T10606] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 671.848796][T10609] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 671.862056][T21220] netlink: 8 bytes leftover after parsing attributes in process `syz.4.3730'. [ 672.113040][T21234] netlink: 41 bytes leftover after parsing attributes in process `syz.6.3732'. [ 672.139246][T21234] netlink: 140 bytes leftover after parsing attributes in process `syz.6.3732'. [ 672.186261][T21234] netlink: 41 bytes leftover after parsing attributes in process `syz.6.3732'. [ 672.332637][T21249] xt_CT: You must specify a L4 protocol and not use inversions on it [ 672.972065][T21262] sctp: [Deprecated]: syz.0.3740 (pid 21262) Use of int in maxseg socket option. [ 672.972065][T21262] Use struct sctp_assoc_value instead [ 673.109298][T21265] bond1: option lacp_rate: mode dependency failed, not supported in mode active-backup(1) [ 673.120030][T10612] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 673.120506][T10612] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 673.152320][T21265] bond1 (unregistering): Released all slaves [ 673.400413][T21278] netlink: 8 bytes leftover after parsing attributes in process `syz.5.3744'. [ 673.442051][T21278] netlink: 8 bytes leftover after parsing attributes in process `syz.5.3744'. [ 673.459778][T21278] A link change request failed with some changes committed already. Interface caif0 may have been left with an inconsistent configuration, please check. [ 673.460997][T21280] netlink: 'syz.2.3745': attribute type 1 has an invalid length. [ 673.606548][T21280] bond4: entered promiscuous mode [ 673.619853][T21280] bond4: entered allmulticast mode [ 673.625556][T21280] 8021q: adding VLAN 0 to HW filter on device bond4 [ 673.913353][T21299] netlink: 40 bytes leftover after parsing attributes in process `syz.5.3750'. [ 673.941698][T21283] nci: __nci_request: wait_for_completion_interruptible_timeout failed -512 [ 673.950243][T21300] dvmrp12: entered allmulticast mode [ 673.978283][T21296] dvmrp12: left allmulticast mode [ 674.142519][T21307] x_tables: ip_tables: rpfilter match: used from hooks OUTPUT, but only valid from PREROUTING [ 674.363774][T21318] netlink: 4 bytes leftover after parsing attributes in process `syz.5.3756'. [ 674.401837][T21321] IPVS: set_ctl: invalid protocol: 115 0.0.0.0:20004 [ 674.411492][T21318] chnl_net:caif_netlink_parms(): no params data found [ 674.501099][T21327] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 674.515015][T21327] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 674.536775][T21321] : renamed from bond_slave_0 [ 674.582605][T21330] netdevsim netdevsim6 eth3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 674.636728][T21324] netlink: 16 bytes leftover after parsing attributes in process `syz.6.3758'. [ 674.692779][T21330] netdevsim netdevsim6 eth2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 674.810914][T21330] netdevsim netdevsim6 eth1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 674.966607][T21330] netdevsim netdevsim6 eth0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 675.223237][T21369] tipc: Enabling not permitted [ 675.229275][T21369] tipc: Enabling of bearer rejected, failed to enable media [ 675.242470][T21369] net_ratelimit: 3 callbacks suppressed [ 675.242491][T21369] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check. [ 675.288348][T10610] netdevsim netdevsim6 eth0: set [1, 0] type 2 family 0 port 6081 - 0 [ 675.364902][T21374] bridge_slave_0: left allmulticast mode [ 675.379935][T21374] bridge_slave_0: left promiscuous mode [ 675.411897][T21374] bridge0: port 1(bridge_slave_0) entered disabled state [ 675.429146][T21374] bridge_slave_1: left allmulticast mode [ 675.445801][T21374] bridge_slave_1: left promiscuous mode [ 675.454765][T21374] bridge0: port 2(bridge_slave_1) entered disabled state [ 675.467458][T21374] bond0: (slave 30): Releasing backup interface [ 675.477787][T21374] bond0: (slave bond_slave_1): Releasing backup interface [ 675.510964][T21374] team0: Port device team_slave_0 removed [ 675.546191][T21374] team0: Port device team_slave_1 removed [ 675.553173][T21374] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 675.571015][T21374] A link change request failed with some changes committed already. Interface hsr_slave_0 may have been left with an inconsistent configuration, please check. [ 675.598786][T10612] netdevsim netdevsim6 eth1: set [1, 0] type 2 family 0 port 6081 - 0 [ 675.626987][T10612] netdevsim netdevsim6 eth2: set [1, 0] type 2 family 0 port 6081 - 0 [ 675.772281][T10610] netdevsim netdevsim6 eth3: set [1, 0] type 2 family 0 port 6081 - 0 [ 675.861899][T21389] bond5: entered promiscuous mode [ 675.874026][T21389] 8021q: adding VLAN 0 to HW filter on device bond5 [ 676.937382][T21422] __nla_validate_parse: 2 callbacks suppressed [ 676.937402][T21422] netlink: 64 bytes leftover after parsing attributes in process `syz.0.3781'. [ 676.977172][ T6169] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 676.990420][T21422] netlink: 64 bytes leftover after parsing attributes in process `syz.0.3781'. [ 677.031126][T21422] netlink: 64 bytes leftover after parsing attributes in process `syz.0.3781'. [ 677.041100][T21422] netlink: 64 bytes leftover after parsing attributes in process `syz.0.3781'. [ 677.051817][T21422] netlink: 64 bytes leftover after parsing attributes in process `syz.0.3781'. [ 677.062152][T21422] netlink: 64 bytes leftover after parsing attributes in process `syz.0.3781'. [ 677.071862][T21422] netlink: 64 bytes leftover after parsing attributes in process `syz.0.3781'. [ 677.081245][T21422] netlink: 64 bytes leftover after parsing attributes in process `syz.0.3781'. [ 677.090540][T21422] netlink: 64 bytes leftover after parsing attributes in process `syz.0.3781'. [ 677.100582][T21422] netlink: 64 bytes leftover after parsing attributes in process `syz.0.3781'. [ 677.594071][T10612] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 677.940066][T21482] netlink: 'syz.0.3795': attribute type 30 has an invalid length. [ 678.307741][T21501] netlink: 'syz.6.3796': attribute type 1 has an invalid length. [ 678.350202][T21501] NCSI netlink: No device for ifindex 0 [ 678.611277][T21506] dvmrp1: tun_chr_ioctl cmd 1074812118 [ 678.870844][T10612] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 678.880282][T10606] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 678.971592][T21527] Bluetooth: MGMT ver 1.23 [ 678.989961][T21527] openvswitch: netlink: IP tunnel dst address not specified [ 679.086211][T21533] sctp: [Deprecated]: syz.0.3806 (pid 21533) Use of int in maxseg socket option. [ 679.086211][T21533] Use struct sctp_assoc_value instead [ 679.145253][T21534] netlink: 'syz.4.3804': attribute type 1 has an invalid length. [ 679.153887][T21534] netlink: 'syz.4.3804': attribute type 2 has an invalid length. [ 679.341406][T21542] netlink: 'syz.6.3807': attribute type 1 has an invalid length. [ 679.608436][T21552] netlink: 'syz.6.3811': attribute type 1 has an invalid length. [ 679.751396][T21552] bond7: entered promiscuous mode [ 679.761895][T21552] 8021q: adding VLAN 0 to HW filter on device bond7 [ 679.788655][T21560] bond7: (slave bridge0): making interface the new active one [ 679.797110][T21560] bridge0: entered promiscuous mode [ 679.804327][T21560] bond7: (slave bridge0): Enslaving as an active interface with an up link [ 680.224114][T17130] IPVS: starting estimator thread 0... [ 680.246440][T21592] netlink: 'syz.0.3822': attribute type 1 has an invalid length. [ 680.329910][T21594] IPVS: using max 26 ests per chain, 62400 per kthread [ 680.554192][T21596] bond1: (slave gretap1): making interface the new active one [ 680.564447][T21596] bond1: (slave gretap1): Enslaving as an active interface with an up link [ 680.979698][ T30] audit: type=1800 audit(1770372697.833:25): pid=21605 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.4.3824" name="blkio.bfq.time_recursive" dev="tmpfs" ino=995 res=0 errno=0 [ 681.035784][ T30] audit: type=1800 audit(1770372697.833:26): pid=21606 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.4.3824" name="blkio.bfq.time_recursive" dev="tmpfs" ino=995 res=0 errno=0 [ 681.184016][T21613] xt_ecn: cannot match TCP bits for non-tcp packets [ 681.230575][T21611] syzkaller0: entered promiscuous mode [ 681.241252][T21611] syzkaller0: entered allmulticast mode [ 681.312498][T21613] netdevsim netdevsim5 eth3 (unregistering): unset [1, 0] type 2 family 0 port 20000 - 0 [ 681.324520][T21613] netdevsim netdevsim5 eth3 (unregistering): unset [1, 1] type 2 family 0 port 20004 - 0 [ 681.408526][T21613] netdevsim netdevsim5 eth2 (unregistering): unset [1, 0] type 2 family 0 port 20000 - 0 [ 681.419412][T21613] netdevsim netdevsim5 eth2 (unregistering): unset [1, 1] type 2 family 0 port 20004 - 0 [ 681.510922][T21613] netdevsim netdevsim5 eth1 (unregistering): unset [1, 0] type 2 family 0 port 20000 - 0 [ 681.533916][T21613] netdevsim netdevsim5 eth1 (unregistering): unset [1, 1] type 2 family 0 port 20004 - 0 [ 681.641523][T21613] netdevsim netdevsim5 eth0 (unregistering): unset [1, 0] type 2 family 0 port 20000 - 0 [ 681.655309][T21613] netdevsim netdevsim5 eth0 (unregistering): unset [1, 1] type 2 family 0 port 20004 - 0 [ 681.798556][ T12] netdevsim netdevsim5 eth0: set [1, 0] type 2 family 0 port 20004 - 0 [ 681.833849][ T12] netdevsim netdevsim5 eth0: set [1, 1] type 2 family 0 port 20000 - 0 [ 681.880672][ T6172] netdevsim netdevsim5 eth1: set [1, 0] type 2 family 0 port 20004 - 0 [ 681.888985][ T6172] netdevsim netdevsim5 eth1: set [1, 1] type 2 family 0 port 20000 - 0 [ 682.006754][T21650] tipc: Started in network mode [ 682.020017][T21650] tipc: Node identity 02c737341cdd, cluster identity 4711 [ 682.027541][T21650] tipc: Enabled bearer , priority 0 [ 682.035027][T21634] syzkaller0: tun_net_xmit 76 [ 682.046870][T21634] syzkaller0: tun_net_xmit 48 [ 682.060067][T19918] syzkaller0: tun_net_xmit 76 [ 682.081192][T21634] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 682.116694][T21649] syzkaller0: delete flow: hash 158005264 index 1 [ 683.351412][ T8662] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 683.354570][ T51] block nbd4: Possible stuck request ffff888025568000: control (read@0,1024B). Runtime 150 seconds [ 683.370940][ T51] block nbd4: Possible stuck request ffff888025568200: control (read@1024,1024B). Runtime 150 seconds [ 683.382644][ T51] block nbd4: Possible stuck request ffff888025568400: control (read@2048,1024B). Runtime 150 seconds [ 683.394118][ T51] block nbd4: Possible stuck request ffff888025568600: control (read@3072,1024B). Runtime 150 seconds [ 683.991576][T10604] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 684.000055][ T6172] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 684.047430][ T6172] netdevsim netdevsim5 eth2: set [1, 0] type 2 family 0 port 20004 - 0 [ 684.056292][ T6172] netdevsim netdevsim5 eth2: set [1, 1] type 2 family 0 port 20000 - 0 [ 684.066211][T21643] tipc: Resetting bearer [ 684.174016][T21669] __nla_validate_parse: 44 callbacks suppressed [ 684.174040][T21669] netlink: 8 bytes leftover after parsing attributes in process `syz.0.3841'. [ 685.916540][ T1300] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 685.956332][T21643] tipc: Disabling bearer [ 685.968849][T17130] tipc: Node number set to 505034548 [ 686.002170][T21634] netdevsim netdevsim5 eth3: set [1, 0] type 2 family 0 port 20004 - 0 [ 686.030213][T21634] netdevsim netdevsim5 eth3: set [1, 1] type 2 family 0 port 20000 - 0 [ 686.476397][T21710] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 686.490570][T21710] netlink: 'syz.4.3851': attribute type 1 has an invalid length. [ 686.491703][T21711] syzkaller0: entered promiscuous mode [ 686.504157][T21711] syzkaller0: entered allmulticast mode [ 687.145448][T21670] nci: __nci_request: wait_for_completion_interruptible_timeout failed -512 [ 687.191947][ T6172] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 687.297002][T21717] netlink: 12 bytes leftover after parsing attributes in process `syz.0.3853'. [ 687.317523][T21717] netlink: 16 bytes leftover after parsing attributes in process `syz.0.3853'. [ 687.361588][T21717] netlink: 28 bytes leftover after parsing attributes in process `syz.0.3853'. [ 687.514345][T21734] netlink: 8 bytes leftover after parsing attributes in process `syz.6.3856'. [ 687.857574][T21750] sctp: [Deprecated]: syz.2.3862 (pid 21750) Use of int in max_burst socket option. [ 687.857574][T21750] Use struct sctp_assoc_value instead [ 687.982655][T21752] netlink: 20 bytes leftover after parsing attributes in process `syz.6.3863'. [ 687.992294][ T5822] Bluetooth: hci6: command 0x0406 tx timeout [ 687.997057][T21756] netlink: 40 bytes leftover after parsing attributes in process `syz.0.3865'. [ 688.354457][T21775] netlink: 4 bytes leftover after parsing attributes in process `syz.5.3873'. [ 688.697154][T21765] tc_dump_action: action bad kind [ 689.110354][T10608] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 689.118558][ T12] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 689.750878][T10601] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 692.310471][T10601] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 693.109804][ T5822] Bluetooth: hci0: command 0x0406 tx timeout [ 694.870360][T10608] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 694.878546][ T8662] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 695.520696][ T6172] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 698.070938][T21634] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 699.991727][T10608] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 700.000082][T10608] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 701.274500][ T6172] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 701.285273][T10608] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 702.309766][ C1] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 703.111443][ T8662] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 703.349910][ C1] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 703.358150][ T5822] Bluetooth: hci3: command 0x0406 tx timeout [ 704.389844][ C1] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 705.030579][ T6172] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 705.429880][ C1] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 705.760703][ T12] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 706.469830][ C1] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 707.030566][ T6172] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 708.549837][ C1] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 708.950750][T21634] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 710.870715][ T12] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 711.511143][ T12] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 712.150659][ T12] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 712.629967][ C1] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 713.430084][ T51] block nbd4: Possible stuck request ffff888025568000: control (read@0,1024B). Runtime 180 seconds [ 713.440948][ T51] block nbd4: Possible stuck request ffff888025568200: control (read@1024,1024B). Runtime 180 seconds [ 713.452325][ T51] block nbd4: Possible stuck request ffff888025568400: control (read@2048,1024B). Runtime 180 seconds [ 713.463498][ T51] block nbd4: Possible stuck request ffff888025568600: control (read@3072,1024B). Runtime 180 seconds [ 713.590336][ T5822] Bluetooth: hci5: command 0x0405 tx timeout [ 714.070509][ T8662] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 716.604550][ T5189] udevd[5189]: worker [14963] /devices/virtual/block/nbd4 timeout; kill it [ 716.614443][ T5189] udevd[5189]: seq 23182 '/devices/virtual/block/nbd4' killed [ 717.280152][T21634] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 717.920438][ T12] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 718.720890][ T5822] Bluetooth: hci2: command 0x0406 tx timeout [ 719.831512][T10608] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 720.470215][T10608] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 721.109751][ C1] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 722.390528][T10604] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 723.040587][T10608] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 725.510603][ T8662] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 725.590736][ T8662] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 728.153608][T10604] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 728.790442][T10604] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 730.710607][ T8662] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 731.350829][T10604] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 733.910367][T10608] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 734.550460][T10604] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 735.830787][ T8662] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 737.114154][ T12] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 737.749785][ C1] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 739.670523][ T12] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 740.320257][ T12] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 741.590777][T21634] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 742.467671][T21854] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 742.585001][T21859] netlink: 16 bytes leftover after parsing attributes in process `syz.4.3889'. [ 742.615012][T21859] netlink: 4 bytes leftover after parsing attributes in process `syz.4.3889'. [ 742.681905][T21864] IPVS: set_ctl: invalid protocol: 137 172.20.20.49:20003 [ 742.870737][T21634] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 742.925795][T21873] netlink: 4 bytes leftover after parsing attributes in process `syz.4.3891'. [ 743.173133][T21885] xt_hashlimit: Unknown mode mask C4, kernel too old? [ 743.334442][T21897] syzkaller1: tun_chr_ioctl cmd 1074025677 [ 743.361854][T21897] syzkaller1: linktype set to 778 [ 743.445619][T21897] 8021q: adding VLAN 0 to HW filter on device bond2 [ 743.496620][T21889] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 743.511561][ T51] block nbd4: Possible stuck request ffff888025568000: control (read@0,1024B). Runtime 210 seconds [ 743.523490][ T51] block nbd4: Possible stuck request ffff888025568200: control (read@1024,1024B). Runtime 210 seconds [ 743.534895][ T51] block nbd4: Possible stuck request ffff888025568400: control (read@2048,1024B). Runtime 210 seconds [ 743.548162][ T51] block nbd4: Possible stuck request ffff888025568600: control (read@3072,1024B). Runtime 210 seconds [ 743.578170][T21907] 8021q: adding VLAN 0 to HW filter on device macvlan2 [ 743.614003][T21907] bond2: (slave macvlan2): Enslaving as a backup interface with a down link [ 743.971099][T21925] netlink: 'syz.4.3902': attribute type 1 has an invalid length. [ 743.983404][T21924] netlink: 'syz.6.3905': attribute type 1 has an invalid length. [ 744.012012][T21930] netlink: 'syz.5.3904': attribute type 1 has an invalid length. [ 744.081274][T19922] IPVS: starting estimator thread 0... [ 744.087348][T21932] IPVS: fo: UDP 224.0.0.2:0 - no destination available [ 744.138056][T21939] macvlan1: entered promiscuous mode [ 744.169771][T21939] macvlan1: entered allmulticast mode [ 744.200298][T21940] IPVS: using max 28 ests per chain, 67200 per kthread [ 744.210454][T21939] bond6: (slave macvlan1): Opening slave failed [ 744.231884][T21948] netlink: 32 bytes leftover after parsing attributes in process `syz.5.3904'. [ 744.245694][T21948] openvswitch: netlink: Flow key attr not present in new flow. [ 744.344194][T21923] gretap2: entered allmulticast mode [ 744.541879][T21956] netlink: 'syz.6.3908': attribute type 3 has an invalid length. [ 744.618097][T21956] netlink: 654 bytes leftover after parsing attributes in process `syz.6.3908'. [ 744.890984][T21967] netlink: 8 bytes leftover after parsing attributes in process `syz.5.3910'. [ 745.032624][T21987] netlink: 8 bytes leftover after parsing attributes in process `syz.2.3913'. [ 745.060033][T21987] netlink: 20 bytes leftover after parsing attributes in process `syz.2.3913'. [ 745.106459][ T9] IPVS: starting estimator thread 0... [ 745.109337][T21987] geneve2: entered promiscuous mode [ 745.117431][T21987] geneve2: entered allmulticast mode [ 745.124926][ T36] netdevsim netdevsim2 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 745.138971][ T36] netdevsim netdevsim2 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 745.169672][ T36] netdevsim netdevsim2 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 745.188804][ T36] netdevsim netdevsim2 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 745.219707][T21994] IPVS: using max 25 ests per chain, 60000 per kthread [ 745.220189][T21995] xt_NFQUEUE: number of queues (65532) out of range (got 66665) [ 745.371655][T21995] syzkaller0: entered promiscuous mode [ 745.387416][T21995] syzkaller0: entered allmulticast mode [ 745.430339][T10608] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 745.441659][T21995] sch_tbf: burst 127 is lower than device syzkaller0 mtu (1514) ! [ 745.452833][T22007] netlink: 'syz.6.3919': attribute type 13 has an invalid length. [ 745.905919][T22021] lo: entered allmulticast mode [ 745.916720][T22020] lo: left allmulticast mode [ 746.025513][T22019] netlink: 20 bytes leftover after parsing attributes in process `syz.0.3921'. [ 746.074390][ T6172] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 746.344232][T22034] syzkaller0: entered allmulticast mode [ 746.710394][ T12] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 746.739344][T22066] sch_tbf: burst 3 is lower than device veth0_macvtap mtu (1514) ! [ 747.356220][ T1300] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 748.173977][T22135] netlink: 32 bytes leftover after parsing attributes in process `syz.2.3963'. [ 748.453147][T22150] xt_hashlimit: size too large, truncated to 1048576 [ 748.511042][T22156] xt_hashlimit: size too large, truncated to 1048576 [ 748.630687][T10604] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 751.191178][T10608] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 751.381780][T22209] x_tables: ip6_tables: rpfilter match: used from hooks OUTPUT, but only valid from PREROUTING [ 751.732128][T22231] x_tables: ip_tables: socket match: used from hooks FORWARD, but only valid from PREROUTING/INPUT [ 751.830724][T10608] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 751.839457][T10608] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 751.988468][T22244] SET target dimension over the limit! [ 752.082406][T22248] netlink: 'syz.6.4013': attribute type 4 has an invalid length. [ 752.157456][T22248] netlink: 'syz.6.4013': attribute type 4 has an invalid length. [ 752.838254][T22292] netlink: 'syz.5.4031': attribute type 29 has an invalid length. [ 752.857124][T22292] netlink: 'syz.5.4031': attribute type 29 has an invalid length. [ 752.898403][T22292] netlink: 596 bytes leftover after parsing attributes in process `syz.5.4031'. [ 752.973804][T22307] netlink: 24 bytes leftover after parsing attributes in process `syz.6.4035'. [ 753.023581][T22312] netlink: 32 bytes leftover after parsing attributes in process `syz.2.4036'. [ 753.035371][T22311] netlink: 24 bytes leftover after parsing attributes in process `syz.4.4037'. [ 753.045207][T22311] bond0: ARP target 170.170.170.170 is already present [ 753.049122][T22294] netlink: 8 bytes leftover after parsing attributes in process `syz.0.4032'. [ 753.054984][T22311] bond0: option arp_ip_target: invalid value (2863311530) [ 753.066919][T22294] netlink: 240 bytes leftover after parsing attributes in process `syz.0.4032'. [ 753.144414][T22314] netlink: 76 bytes leftover after parsing attributes in process `syz.5.4038'. [ 753.164417][T22314] netlink: 172 bytes leftover after parsing attributes in process `syz.5.4038'. [ 753.262711][T22326] netlink: 24 bytes leftover after parsing attributes in process `syz.5.4038'. [ 753.277035][T22322] netlink: 12 bytes leftover after parsing attributes in process `syz.2.4041'. [ 753.303287][T22326] netlink: 36 bytes leftover after parsing attributes in process `syz.5.4038'. [ 753.340807][T22326] netlink: 36 bytes leftover after parsing attributes in process `syz.5.4038'. [ 753.368506][T22326] netlink: 36 bytes leftover after parsing attributes in process `syz.5.4038'. [ 753.382354][T22326] netlink: 36 bytes leftover after parsing attributes in process `syz.5.4038'. [ 753.397508][T22326] netlink: 36 bytes leftover after parsing attributes in process `syz.5.4038'. [ 753.410675][T22326] netlink: 36 bytes leftover after parsing attributes in process `syz.5.4038'. [ 753.424647][T22326] netlink: 36 bytes leftover after parsing attributes in process `syz.5.4038'. [ 753.434422][T22326] netlink: 36 bytes leftover after parsing attributes in process `syz.5.4038'. [ 753.457444][T22332] ¾x9ÿ: renamed from bridge_slave_0 [ 753.475530][T22337] x_tables: ip_tables: osf match: only valid for protocol 6 [ 753.972634][T22354] netlink: 'syz.5.4050': attribute type 3 has an invalid length. [ 754.018159][T22352] netlink: 'syz.4.4049': attribute type 11 has an invalid length. [ 754.393912][T10608] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 754.830870][T22392] netlink: 'syz.5.4060': attribute type 1 has an invalid length. [ 754.936460][T22392] 8021q: adding VLAN 0 to HW filter on device bond7 [ 755.052200][T22398] bond5: option lacp_active: mode dependency failed, not supported in mode balance-rr(0) [ 755.094316][T22398] bond5 (unregistering): Released all slaves [ 755.258873][T22416] bond0: (slave rose0): Enslaving as an active interface with an up link [ 755.527676][T22423] netlink: 'syz.5.4068': attribute type 29 has an invalid length. [ 755.598929][T22423] netlink: 'syz.5.4068': attribute type 29 has an invalid length. [ 755.740081][T22432] netlink: 'syz.0.4071': attribute type 3 has an invalid length. [ 756.268743][T22454] sit0: entered promiscuous mode [ 756.325917][T22454] netlink: 'syz.0.4075': attribute type 1 has an invalid length. [ 756.829475][T22477] bond5: entered promiscuous mode [ 756.835189][T22477] 8021q: adding VLAN 0 to HW filter on device bond5 [ 756.950932][ T31] INFO: task syz.3.3107:18589 blocked for more than 143 seconds. [ 756.951342][ T6172] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 756.958927][ T31] Not tainted syzkaller #0 [ 756.991502][ T31] "echo 0 > /proc/sys/kernel/hung_task_timeout_secs" disables this message. [ 757.016358][ T31] task:syz.3.3107 state:D stack:27104 pid:18589 tgid:18587 ppid:17733 task_flags:0x400040 flags:0x00080002 [ 757.052137][ T31] Call Trace: [ 757.059062][ T31] [ 757.066865][ T31] __schedule+0x14ea/0x5050 [ 757.076080][ T31] ? __pfx___schedule+0x10/0x10 [ 757.106348][ T31] ? schedule+0x90/0x360 [ 757.115345][ T31] schedule+0x164/0x360 [ 757.124135][ T31] schedule_preempt_disabled+0x13/0x30 [ 757.135372][ T31] __mutex_lock+0x7fe/0x1300 [ 757.145798][ T31] ? __mutex_lock+0x5ac/0x1300 [ 757.156340][ T31] ? nfsd_nl_listener_get_doit+0x10a/0x5e0 [ 757.167992][ T31] ? __pfx___mutex_lock+0x10/0x10 [ 757.178906][ T31] ? __nlmsg_put+0xef/0x1b0 [ 757.189296][ T31] ? genlmsg_put+0x137/0x2e0 [ 757.201711][ T31] nfsd_nl_listener_get_doit+0x10a/0x5e0 [ 757.207622][ T31] ? dev_hard_start_xmit+0x78b/0x7f0 [ 757.213179][ T31] ? genl_family_rcv_msg_attrs_parse+0x13b/0x2a0 [ 757.219965][ T31] genl_family_rcv_msg_doit+0x22a/0x330 [ 757.225728][ T31] ? __asan_memcpy+0x40/0x70 [ 757.230609][ T31] ? __pfx_genl_family_rcv_msg_doit+0x10/0x10 [ 757.237542][ T31] ? __dev_queue_xmit+0x274/0x3850 [ 757.242955][ T31] genl_rcv_msg+0x61c/0x7a0 [ 757.247575][ T31] ? __pfx_genl_rcv_msg+0x10/0x10 [ 757.252773][ T31] ? __pfx_nfsd_nl_listener_get_doit+0x10/0x10 [ 757.259157][ T31] ? __pfx_ref_tracker_free+0x10/0x10 [ 757.264788][ T31] netlink_rcv_skb+0x232/0x4b0 [ 757.270025][ T31] ? __pfx_genl_rcv_msg+0x10/0x10 [ 757.275405][ T31] ? __pfx_netlink_rcv_skb+0x10/0x10 [ 757.281045][ T31] ? genl_rcv+0x19/0x40 [ 757.285404][ T31] ? down_read+0x272/0x2e0 [ 757.290132][ T31] ? genl_rcv+0xd/0x40 [ 757.294470][ T31] genl_rcv+0x28/0x40 [ 757.298661][ T31] netlink_unicast+0x80f/0x9b0 [ 757.303782][ T31] ? __pfx_netlink_unicast+0x10/0x10 [ 757.309286][ T31] ? netlink_sendmsg+0x650/0xb40 [ 757.314432][ T31] ? skb_put+0x11b/0x210 [ 757.318793][ T31] netlink_sendmsg+0x813/0xb40 [ 757.344343][ T31] ? __pfx_netlink_sendmsg+0x10/0x10 [ 757.354443][ T31] ? aa_sock_msg_perm+0xf1/0x1b0 [ 757.359454][ T31] ? bpf_lsm_socket_sendmsg+0x9/0x20 [ 757.375105][ T31] ? __pfx_netlink_sendmsg+0x10/0x10 [ 757.385216][ T31] ____sys_sendmsg+0xa68/0xad0 [ 757.395342][ T31] ? __might_fault+0xaf/0x130 [ 757.405452][ T31] ? __pfx_____sys_sendmsg+0x10/0x10 [ 757.423809][ T31] ? import_iovec+0x73/0xa0 [ 757.440098][ T31] ___sys_sendmsg+0x2a5/0x360 [ 757.444861][ T31] ? __lock_acquire+0x6b5/0x2cf0 [ 757.459126][ T31] ? __pfx____sys_sendmsg+0x10/0x10 [ 757.465271][ T31] ? futex_wait+0x29a/0x380 [ 757.470563][ T31] ? __fget_files+0x2a/0x420 [ 757.475261][ T31] ? __fget_files+0x3a0/0x420 [ 757.481322][ T31] __x64_sys_sendmsg+0x1bd/0x2a0 [ 757.486390][ T31] ? __pfx___x64_sys_sendmsg+0x10/0x10 [ 757.492809][ T31] do_syscall_64+0xe2/0xf80 [ 757.497512][ T31] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 757.504524][ T31] ? trace_irq_disable+0x37/0x100 [ 757.512377][ T31] ? clear_bhb_loop+0x60/0xb0 [ 757.517333][ T31] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 757.526996][ T31] RIP: 0033:0x7fadb1f9aeb9 [ 757.531926][ T31] RSP: 002b:00007fadb2e57028 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 757.541210][ T31] RAX: ffffffffffffffda RBX: 00007fadb2216090 RCX: 00007fadb1f9aeb9 [ 757.550819][ T31] RDX: 0000000020048000 RSI: 0000200000000000 RDI: 0000000000000006 [ 757.558983][ T31] RBP: 00007fadb2008c1f R08: 0000000000000000 R09: 0000000000000000 [ 757.569460][ T31] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 757.578068][ T31] R13: 00007fadb2216128 R14: 00007fadb2216090 R15: 00007ffd5bb3ee48 [ 757.587228][ T31] [ 757.602178][ T6172] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 757.611006][ T12] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 757.660064][ T31] [ 757.660064][ T31] Showing all locks held in the system: [ 757.667941][ T31] 1 lock held by khungtaskd/31: [ 757.677757][ T31] #0: ffffffff8e55a360 (rcu_read_lock){....}-{1:3}, at: debug_show_all_locks+0x2e/0x180 [ 757.688425][ T31] 2 locks held by getty/5575: [ 757.693694][ T31] #0: ffff888034cdd0a0 (&tty->ldisc_sem){++++}-{0:0}, at: tty_ldisc_ref_wait+0x25/0x70 [ 757.704138][ T31] #1: ffffc9000332b2f0 (&ldata->atomic_read_lock){+.+.}-{4:4}, at: n_tty_read+0x45c/0x13c0 [ 757.714755][ T31] 2 locks held by syz.1.1599/12348: [ 757.720613][ T31] #0: ffffffff8fa19c30 (cb_lock){++++}-{4:4}, at: genl_rcv+0x19/0x40 [ 757.729102][ T31] #1: ffffffff8e879428 (nfsd_mutex){+.+.}-{4:4}, at: nfsd_nl_listener_set_doit+0x141/0x16c0 [ 757.740617][ T31] 1 lock held by udevd/14963: [ 757.745521][ T31] #0: ffff8880253cf358 (&disk->open_mutex){+.+.}-{4:4}, at: bdev_open+0xe0/0xd30 [ 757.755463][ T31] 2 locks held by syz.3.3107/18589: [ 757.761421][ T31] #0: ffffffff8fa19c30 (cb_lock){++++}-{4:4}, at: genl_rcv+0x19/0x40 [ 757.770859][ T31] #1: ffffffff8e879428 (nfsd_mutex){+.+.}-{4:4}, at: nfsd_nl_listener_get_doit+0x10a/0x5e0 [ 757.782786][ T31] [ 757.785216][ T31] ============================================= [ 757.785216][ T31] [ 757.794177][ T31] NMI backtrace for cpu 1 [ 757.794194][ T31] CPU: 1 UID: 0 PID: 31 Comm: khungtaskd Not tainted syzkaller #0 PREEMPT(full) [ 757.794216][ T31] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/24/2026 [ 757.794227][ T31] Call Trace: [ 757.794235][ T31] [ 757.794243][ T31] dump_stack_lvl+0xe8/0x150 [ 757.794273][ T31] nmi_cpu_backtrace+0x274/0x2d0 [ 757.794304][ T31] ? __pfx_nmi_raise_cpu_backtrace+0x10/0x10 [ 757.794336][ T31] nmi_trigger_cpumask_backtrace+0x17a/0x300 [ 757.794360][ T31] sys_info+0x135/0x170 [ 757.794378][ T31] watchdog+0xf90/0xfe0 [ 757.794404][ T31] ? watchdog+0x209/0xfe0 [ 757.794432][ T31] kthread+0x726/0x8b0 [ 757.794458][ T31] ? __pfx_watchdog+0x10/0x10 [ 757.794476][ T31] ? __pfx_kthread+0x10/0x10 [ 757.794502][ T31] ? _raw_spin_unlock_irq+0x23/0x50 [ 757.794525][ T31] ? __pfx_kthread+0x10/0x10 [ 757.794548][ T31] ret_from_fork+0x51b/0xa40 [ 757.794570][ T31] ? __pfx_ret_from_fork+0x10/0x10 [ 757.794597][ T31] ? __switch_to+0xc82/0x1410 [ 757.794627][ T31] ? __pfx_kthread+0x10/0x10 [ 757.794649][ T31] ret_from_fork_asm+0x1a/0x30 [ 757.794691][ T31] [ 757.794699][ T31] Sending NMI from CPU 1 to CPUs 0: [ 757.918552][ C0] NMI backtrace for cpu 0 [ 757.918571][ C0] CPU: 0 UID: 0 PID: 5806 Comm: syz-executor Not tainted syzkaller #0 PREEMPT(full) [ 757.918590][ C0] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/24/2026 [ 757.918599][ C0] RIP: 0010:its_return_thunk+0x0/0x10 [ 757.918623][ C0] Code: cc cc cc cc cc cc cc cc cc cc cc cc cc cc cc cc cc cc cc cc cc cc cc cc cc cc cc cc cc cc cc cc cc cc cc cc cc cc cc cc cc cc cc 90 90 90 90 90 90 90 90 90 90 90 90 90 90 e9 1b 2d 98 f5 cc [ 757.918637][ C0] RSP: 0018:ffffc90003fcff40 EFLAGS: 00000046 [ 757.918652][ C0] RAX: 0000000000000001 RBX: 0000000000000000 RCX: 00007ffffffff000 [ 757.918664][ C0] RDX: 0000000000000000 RSI: ffffffff8dcd0e36 RDI: ffffffff8c073a00 [ 757.918674][ C0] RBP: 0000000000000000 R08: ffffffff8fef4b77 R09: 1ffffffff1fde96e [ 757.918685][ C0] R10: dffffc0000000000 R11: fffffbfff1fde96f R12: 0000000000000000 [ 757.918696][ C0] R13: 0000000000000000 R14: 0000000000000000 R15: 0000000000000000 [ 757.918705][ C0] FS: 0000555570a83500(0000) GS:ffff8881256ea000(0000) knlGS:0000000000000000 [ 757.918719][ C0] CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033 [ 757.918730][ C0] CR2: 0000200000cf2030 CR3: 0000000078b68000 CR4: 00000000003526f0 [ 757.918747][ C0] Call Trace: [ 757.918753][ C0] [ 757.918759][ C0] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 757.918776][ C0] RIP: 0033:0x7fe93b7560d7 [ 757.918791][ C0] Code: 48 89 fa 4c 89 df e8 a8 56 00 00 8b 93 08 03 00 00 59 5e 48 83 f8 fc 74 1a 5b c3 0f 1f 84 00 00 00 00 00 48 8b 44 24 10 0f 05 <5b> c3 0f 1f 80 00 00 00 00 83 e2 39 83 fa 08 75 de e8 23 ff ff ff [ 757.918803][ C0] RSP: 002b:00007ffee5f934b0 EFLAGS: 00000202 ORIG_RAX: 00000000000000e6 [ 757.918818][ C0] RAX: 0000000000000000 RBX: 0000555570a83500 RCX: 00007fe93b7560d7 [ 757.918828][ C0] RDX: 00007ffee5f934f0 RSI: 0000000000000000 RDI: 0000000000000000 [ 757.918838][ C0] RBP: 00007ffee5f939d0 R08: 0000000000000000 R09: 0000000000000000 [ 757.918848][ C0] R10: 0000000000000000 R11: 0000000000000202 R12: 0000000000000004 [ 757.918858][ C0] R13: 00007ffee5f9352c R14: 00007ffee5f935c0 R15: 0000000000000000 [ 757.918877][ C0] [ 758.133596][ T31] Kernel panic - not syncing: hung_task: blocked tasks [ 758.140472][ T31] CPU: 1 UID: 0 PID: 31 Comm: khungtaskd Not tainted syzkaller #0 PREEMPT(full) [ 758.149793][ T31] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/24/2026 [ 758.159962][ T31] Call Trace: [ 758.163907][ T31] [ 758.166869][ T31] vpanic+0x1e0/0x670 [ 758.170890][ T31] panic+0xc5/0xd0 [ 758.174642][ T31] ? __pfx_panic+0x10/0x10 [ 758.179094][ T31] ? preempt_schedule_thunk+0x16/0x30 [ 758.184507][ T31] ? nmi_trigger_cpumask_backtrace+0x2bb/0x300 [ 758.190702][ T31] watchdog+0xfda/0xfe0 [ 758.194895][ T31] ? watchdog+0x209/0xfe0 [ 758.199257][ T31] kthread+0x726/0x8b0 [ 758.203450][ T31] ? __pfx_watchdog+0x10/0x10 [ 758.208179][ T31] ? __pfx_kthread+0x10/0x10 [ 758.212796][ T31] ? _raw_spin_unlock_irq+0x23/0x50 [ 758.218075][ T31] ? __pfx_kthread+0x10/0x10 [ 758.222779][ T31] ret_from_fork+0x51b/0xa40 [ 758.227495][ T31] ? __pfx_ret_from_fork+0x10/0x10 [ 758.232633][ T31] ? __switch_to+0xc82/0x1410 [ 758.237640][ T31] ? __pfx_kthread+0x10/0x10 [ 758.242292][ T31] ret_from_fork_asm+0x1a/0x30 [ 758.247332][ T31] [ 758.250854][ T31] Kernel Offset: disabled [ 758.255195][ T31] Rebooting in 86400 seconds..