last executing test programs: 19m40.512602308s ago: executing program 2 (id=2828): r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='memory.events\x00', 0x7a44, 0x1700) r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000140)='memory.events\x00', 0x7a05, 0x1700) sendfile(r1, r0, 0x0, 0x10000) r2 = socket$xdp(0x2c, 0x3, 0x0) mmap$xdp(&(0x7f0000ffe000/0x2000)=nil, 0x2002, 0x0, 0x11, r2, 0x80000000) getsockopt$ARPT_SO_GET_REVISION_TARGET(r0, 0x0, 0x63, &(0x7f0000000000)={'icmp\x00'}, &(0x7f0000000040)=0x1e) openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='memory.events\x00', 0x7a44, 0x1700) (async) openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000140)='memory.events\x00', 0x7a05, 0x1700) (async) sendfile(r1, r0, 0x0, 0x10000) (async) socket$xdp(0x2c, 0x3, 0x0) (async) mmap$xdp(&(0x7f0000ffe000/0x2000)=nil, 0x2002, 0x0, 0x11, r2, 0x80000000) (async) getsockopt$ARPT_SO_GET_REVISION_TARGET(r0, 0x0, 0x63, &(0x7f0000000000)={'icmp\x00'}, &(0x7f0000000040)=0x1e) (async) 19m40.301071441s ago: executing program 2 (id=2831): r0 = bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000200)={&(0x7f0000000040)={{0xeb9f, 0x1, 0x0, 0x18, 0x0, 0xa1, 0xa1, 0x5, [@func_proto={0x0, 0x6, 0x0, 0xd, 0x0, [{0x10, 0x3}, {0x8, 0x5}, {0x8, 0x3}, {0xa, 0x1}, {0x6, 0x2}, {0xa, 0x1}]}, @var={0x6, 0x0, 0x0, 0xe, 0x3, 0x1}, @datasec={0x2, 0x4, 0x0, 0xf, 0x1, [{0x1, 0x2, 0x7}, {0x4, 0xfffffff3, 0x40}, {0x1, 0x1, 0x6}, {0x8, 0xfffffffb, 0x842}], '}'}, @enum64={0x5, 0x1, 0x0, 0x13, 0x0, 0x1, [{0xb, 0xffffff7f}]}]}, {0x0, [0x30, 0x2e, 0x61]}}, &(0x7f0000000140)=""/172, 0xc1, 0xac, 0x0, 0x1}, 0x28) r1 = bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000340)={0x2, 0x4, 0x8, 0x1, 0x80, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0x0}, 0x50) bpf$BPF_MAP_CONST_STR_FREEZE(0x16, &(0x7f0000000000)={r1}, 0x4) r2 = bpf$MAP_CREATE(0x0, &(0x7f0000000200)=ANY=[@ANYBLOB="0a00000005000000020000000700000002"], 0x50) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f00000005c0)={{r2}, &(0x7f00000002c0), &(0x7f0000000580)}, 0x20) (async) r3 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0x19, &(0x7f0000002280)=@framed={{0x18, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x4000}, [@ringbuf_output={{0x18, 0x1, 0x1, 0x0, r2}, {}, {}, {}, {}, {}, {}, {0x85, 0x0, 0x0, 0x3}}, @snprintf={{}, {}, {0x7, 0x0, 0xb, 0x8, 0x0, 0x0, 0x466}, {}, {}, {}, {}, {}, {}, {0x18, 0x3, 0x2, 0x0, r1}}]}, &(0x7f0000000400)='GPL\x00', 0x0, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, @fallback=0xd, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$PROG_BIND_MAP(0xa, &(0x7f00000003c0)={r3, r2}, 0xc) (async) r4 = bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000500)={0x2, 0x4, 0x8, 0x1, 0x80, 0xffffffffffffffff, 0x9, '\x00', 0x0, r0, 0x3, 0x5, 0x1}, 0x50) bpf$MAP_CREATE(0x0, &(0x7f0000000580)=@base={0x1e, 0x4, 0x4, 0x7, 0x1000, r4, 0x2}, 0x50) (async) r5 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[], 0x48) r6 = bpf$PROG_LOAD(0x5, &(0x7f0000000340)={0x11, 0x14, &(0x7f0000000280)=ANY=[@ANYBLOB="180000000000000000000000000000001801000020646c2100000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000000400000018110000", @ANYRES32=r5, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000100000095"], &(0x7f0000000000)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$PROG_BIND_MAP(0xa, &(0x7f00000004c0)={r6}, 0xc) 19m40.117764364s ago: executing program 2 (id=2835): r0 = socket(0x40000000015, 0x5, 0x0) setsockopt$sock_int(r0, 0x1, 0x23, &(0x7f0000000000)=0x2, 0x4) bind$inet(r0, &(0x7f00008a5ff0)={0x2, 0x0, @loopback}, 0x10) sendmsg$AUDIT_TTY_GET(r0, &(0x7f0000000100)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x80}, 0xc, &(0x7f00000000c0)={&(0x7f0000000080)={0x10, 0x3f8, 0x10, 0x70bd2d, 0x25dfdbfb, "", ["", ""]}, 0x10}, 0x1, 0x0, 0x0, 0xc1}, 0x8000) recvmmsg(r0, &(0x7f00000040c0)=[{{0x0, 0x0, 0x0, 0x0, &(0x7f00000015c0)=""/127, 0x7f}}], 0x1, 0x0, 0x0) r1 = socket(0x10, 0x3, 0x0) (async, rerun: 64) r2 = socket$inet_udplite(0x2, 0x2, 0x88) (rerun: 64) ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f0000000340)={'bridge_slave_0\x00', 0x0}) sendmsg$nl_route(r1, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000080)=ANY=[@ANYBLOB="700200001300290a000000000000000007000000", @ANYRES32=r3, @ANYBLOB="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"], 0x270}, 0x1, 0x0, 0x0, 0x20008014}, 0x4) ioctl$ifreq_SIOCGIFINDEX_vcan(r1, 0x8933, &(0x7f00000001c0)={'vxcan0\x00', 0x0}) setsockopt$inet6_mreq(r0, 0x29, 0x15, &(0x7f0000000140)={@private2={0xfc, 0x2, '\x00', 0x1}, r4}, 0x14) (async) sendto$inet(r0, 0x0, 0x0, 0x0, &(0x7f0000000200)={0x2, 0x0, @loopback}, 0x10) 19m39.599025951s ago: executing program 2 (id=2839): r0 = bpf$PROG_LOAD(0x5, &(0x7f0000000440)={0xb, 0x42, &(0x7f0000000040)=@ringbuf={{0x18, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0xc}, {}, {}, [@map_fd={0x18, 0x3}, @tail_call={{0x18, 0x2, 0x1, 0x0, 0x1}}, @ringbuf_output, @ringbuf_query={{0x18, 0x1, 0x1, 0x0, 0x1}}, @ringbuf_query, @initr0={0x18, 0x0, 0x0, 0x0, 0x6, 0x0, 0x0, 0x0, 0x68d210d4}, @snprintf={{}, {}, {0x7, 0x0, 0xb, 0x8, 0x0, 0x0, 0x4}, {}, {}, {}, {}, {}, {}, {0x18, 0x3, 0x2, 0x0, 0x1}}, @map_idx={0x18, 0x2, 0x5, 0x0, 0x5}, @exit, @ringbuf_output={{}, {0x7, 0x0, 0xb, 0x8, 0x0, 0x0, 0x6}, {}, {}, {}, {}, {0x7, 0x0, 0xb, 0x4, 0x0, 0x0, 0x2}}], {{}, {0x7, 0x0, 0xb, 0x2, 0x0, 0x0, 0x1}, {0x85, 0x0, 0x0, 0x84}}}, &(0x7f0000000280)='syzkaller\x00', 0x5, 0x45, &(0x7f00000002c0)=""/69, 0x41100, 0x0, '\x00', 0x0, @fallback=0x35, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, &(0x7f0000000340)={0x4, 0xf, 0x96}, 0x10, 0xffffffffffffffff, 0xffffffffffffffff, 0x0, &(0x7f0000000380)=[0x1, 0x1, 0x1, 0x1, 0x1, 0xffffffffffffffff, 0x1], 0x0, 0x10, 0x9}, 0x94) preadv(r0, &(0x7f0000001880)=[{&(0x7f0000000740)=""/4096, 0x1000}, {&(0x7f0000000500)=""/173, 0xad}, {&(0x7f00000003c0)=""/27, 0x1b}, {&(0x7f00000005c0)=""/198, 0xc6}, {&(0x7f0000001740)=""/80, 0x50}, {&(0x7f00000017c0)=""/129, 0x81}], 0x6, 0x1, 0x2) r1 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r1, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000700)={&(0x7f0000000400)=@newtaction={0x18, 0x76, 0x1, 0x70bd2b, 0x25d7dbfc, {}, [{0x4}]}, 0x18}}, 0x0) 19m39.420567336s ago: executing program 2 (id=2841): r0 = bpf$PROG_LOAD(0x5, &(0x7f00000001c0)={0x3, 0xc, &(0x7f00000005c0)=ANY=[@ANYBLOB="1800000000000000000000000000000085000000220000001801000020786c2500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b7030000110b0008850000000700000095"], &(0x7f0000000500)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0xd, '\x00', 0x0, @sched_cls=0x37, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r1 = socket$netlink(0x10, 0x3, 0x7) (async, rerun: 32) r2 = socket$nl_netfilter(0x10, 0x3, 0xc) (rerun: 32) sendmsg$IPSET_CMD_CREATE(r2, &(0x7f0000000240)={0x0, 0x0, &(0x7f00000044c0)={&(0x7f0000000040)={0x54, 0x2, 0x6, 0x3, 0x0, 0x0, {0x5}, [@IPSET_ATTR_DATA={0xc, 0x7, 0x0, 0x1, [@IPSET_ATTR_CADT_FLAGS={0x8, 0x8, 0x0, 0x0, 0x40}]}, @IPSET_ATTR_SETNAME={0x9, 0x2, 'syz2\x00'}, @IPSET_ATTR_REVISION={0x5}, @IPSET_ATTR_FAMILY={0x5, 0x5, 0xa}, @IPSET_ATTR_TYPENAME={0xd, 0x3, 'list:set\x00'}, @IPSET_ATTR_PROTOCOL={0x5}]}, 0x54}}, 0x80) (async) setsockopt$netlink_NETLINK_TX_RING(r1, 0x10e, 0x7, &(0x7f0000000000)={0x9, 0x9, 0x7ff, 0x1}, 0x10) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f00000000c0)={r0, 0x0, 0xd2, 0x0, &(0x7f0000000280)="c1188e19b95d02ff4284860186dd645ad91366d958ffa0020000002eb7f09bed38d62714371c8a38441eeac46ac978a24d6bdd3600abc878fb314a81524561c94abaf3cc75ad667196772a2d5dc1ee41774360fbe5b6a1c4a24271662eca7116c054240aba9b300c9ca78dccfa215ab82d763bac4cc0feec3fd16a5907668ec7e463180a669c9f813434e015dd08833a2ae1988229365b7f7fa8986c3f845e9ee462e0af80f66d8881f0893df09b5678fa4939a8e8f13999c71f86a986f7dc8f19b688aaf78f4344825a227ee40000000000", 0x0, 0x6, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x50) 19m38.412685068s ago: executing program 2 (id=2851): bpf$PROG_LOAD(0x5, &(0x7f0000000500)={0x3, 0xb, &(0x7f0000000200)=ANY=[@ANYBLOB="180000000700000000000000200000001803000020646c2500000000002020207b1af8ff00000000bfa110000000000007010000f8ffffffb702000008000000b7030000f1950000850000009e00000095"], &(0x7f0000000c40)='GPL\x00', 0x1, 0x0, 0x0, 0x41100, 0x0, '\x00', 0x0, @fallback=0x24, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffe}, 0x94) r0 = syz_init_net_socket$bt_sco(0x1f, 0x5, 0x2) bind$bt_sco(r0, &(0x7f0000000000)={0x1f, @fixed={'\xaa\xaa\xaa\xaa\xaa', 0x10}}, 0x8) listen(r0, 0x3) accept4(r0, 0x0, 0x0, 0x0) r1 = openat$tun(0xffffffffffffff9c, &(0x7f0000000100), 0x0, 0x0) ioctl$TUNSETIFF(r1, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x2}) r2 = socket$nl_route(0x10, 0x3, 0x0) r3 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="0600000004000000040000000500000200000000", @ANYRES32, @ANYBLOB='\x00'/20, @ANYRES32=0x0, @ANYRES32, @ANYBLOB='\x00'/28], 0x50) r4 = bpf$MAP_CREATE(0x0, &(0x7f00000000c0)=ANY=[@ANYBLOB="1b00000000000000000000000080000000000000", @ANYRES32, @ANYBLOB="00000000000000000100"/20, @ANYRES32=0x0, @ANYRES32, @ANYBLOB='\x00'/28], 0x50) bpf$PROG_LOAD(0x5, &(0x7f00000004c0)={0x11, 0x10, &(0x7f0000000180)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r4, @ANYBLOB="0000000000000000b702000002000000850000008600000018110000", @ANYRES32=r3, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b70400000000000085000000c300000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x11, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) r7 = bpf$PROG_LOAD(0x5, &(0x7f0000000880)={0x1, 0x10, &(0x7f0000000180)=ANY=[], &(0x7f0000000980)='GPL\x00', 0x0, 0x0, 0x0, 0x40f00, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) setsockopt$sock_attach_bpf(r5, 0x1, 0x32, &(0x7f00000000c0)=r7, 0x4) sendmsg$unix(r6, &(0x7f00000006c0)={0x0, 0x0, 0x0}, 0x0) r8 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r8, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000007c0)=@newtaction={0x70, 0x30, 0xffff, 0x0, 0x0, {}, [{0x5c, 0x1, [@m_ife={0x58, 0x1, 0x0, 0x0, {{0x8}, {0x30, 0x2, 0x0, 0x1, [@TCA_IFE_METALST={0x4}, @TCA_IFE_PARMS={0x1c, 0x1, {{0x1, 0x9, 0x4, 0x5, 0x1}, 0x1}}, @TCA_IFE_SMAC={0xa, 0x4, @link_local={0x1, 0x80, 0xc2, 0x0, 0x0, 0x1}}]}, {0x4}, {0xc}, {0xc}}}]}]}, 0x70}}, 0x0) r9 = socket$tipc(0x1e, 0x5, 0x0) recvmmsg(r9, 0x0, 0x0, 0x2, 0x0) r10 = openat$tun(0xffffffffffffff9c, &(0x7f0000000000), 0x40a01, 0x0) ioctl$TUNSETCARRIER(r1, 0x400454e2, &(0x7f0000000080)=0x1) ioctl$TUNSETIFF(r10, 0x400454ca, &(0x7f0000000200)={'syzkaller1\x00', 0xc201}) r11 = socket$kcm(0x2, 0xa, 0x2) ioctl$SIOCSIFHWADDR(r11, 0x8914, &(0x7f0000000180)={'syzkaller1\x00', @link_local={0x1, 0x80, 0xc2, 0x0, 0x0, 0x2}}) bpf$MAP_UPDATE_ELEM(0x2, &(0x7f0000000280)={0xffffffffffffffff, &(0x7f0000000100)="74c71536cea3e7c1818c5b", 0x0, 0x4}, 0x20) write$tun(r10, &(0x7f00000000c0)=ANY=[@ANYBLOB="001c86dd0700100000004000000060ec97000fc83c00fe8000000000000000000000000000aaff02000000000000000000000000000106"], 0xffe) ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r2, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000580)={&(0x7f0000000340)=@newqdisc={0x4c, 0x24, 0x4ee4e6a52ff56541, 0x1, 0x25dfdbfd, {0x0, 0x0, 0x0, r12, {0x0, 0xb}, {0xffff, 0xffff}, {0xfff2, 0xfff3}}, [@qdisc_kind_options=@q_netem={{0xa}, {0x1c, 0x2, {{0x3, 0x3, 0x6361, 0x0, 0xffffffff, 0x3}}}}]}, 0x4c}, 0x1, 0x0, 0x0, 0x40088c1}, 0x0) shutdown(r0, 0x1) setsockopt$sock_int(r0, 0x1, 0x20, &(0x7f0000000280)=0xfffff908, 0x4) 19m23.241502153s ago: executing program 32 (id=2851): bpf$PROG_LOAD(0x5, &(0x7f0000000500)={0x3, 0xb, &(0x7f0000000200)=ANY=[@ANYBLOB="180000000700000000000000200000001803000020646c2500000000002020207b1af8ff00000000bfa110000000000007010000f8ffffffb702000008000000b7030000f1950000850000009e00000095"], &(0x7f0000000c40)='GPL\x00', 0x1, 0x0, 0x0, 0x41100, 0x0, '\x00', 0x0, @fallback=0x24, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffe}, 0x94) r0 = syz_init_net_socket$bt_sco(0x1f, 0x5, 0x2) bind$bt_sco(r0, &(0x7f0000000000)={0x1f, @fixed={'\xaa\xaa\xaa\xaa\xaa', 0x10}}, 0x8) listen(r0, 0x3) accept4(r0, 0x0, 0x0, 0x0) r1 = openat$tun(0xffffffffffffff9c, &(0x7f0000000100), 0x0, 0x0) ioctl$TUNSETIFF(r1, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x2}) r2 = socket$nl_route(0x10, 0x3, 0x0) r3 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="0600000004000000040000000500000200000000", @ANYRES32, @ANYBLOB='\x00'/20, @ANYRES32=0x0, @ANYRES32, @ANYBLOB='\x00'/28], 0x50) r4 = bpf$MAP_CREATE(0x0, &(0x7f00000000c0)=ANY=[@ANYBLOB="1b00000000000000000000000080000000000000", @ANYRES32, @ANYBLOB="00000000000000000100"/20, @ANYRES32=0x0, @ANYRES32, @ANYBLOB='\x00'/28], 0x50) bpf$PROG_LOAD(0x5, &(0x7f00000004c0)={0x11, 0x10, &(0x7f0000000180)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r4, @ANYBLOB="0000000000000000b702000002000000850000008600000018110000", @ANYRES32=r3, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b70400000000000085000000c300000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x11, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) r7 = bpf$PROG_LOAD(0x5, &(0x7f0000000880)={0x1, 0x10, &(0x7f0000000180)=ANY=[], &(0x7f0000000980)='GPL\x00', 0x0, 0x0, 0x0, 0x40f00, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) setsockopt$sock_attach_bpf(r5, 0x1, 0x32, &(0x7f00000000c0)=r7, 0x4) sendmsg$unix(r6, &(0x7f00000006c0)={0x0, 0x0, 0x0}, 0x0) r8 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r8, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000007c0)=@newtaction={0x70, 0x30, 0xffff, 0x0, 0x0, {}, [{0x5c, 0x1, [@m_ife={0x58, 0x1, 0x0, 0x0, {{0x8}, {0x30, 0x2, 0x0, 0x1, [@TCA_IFE_METALST={0x4}, @TCA_IFE_PARMS={0x1c, 0x1, {{0x1, 0x9, 0x4, 0x5, 0x1}, 0x1}}, @TCA_IFE_SMAC={0xa, 0x4, @link_local={0x1, 0x80, 0xc2, 0x0, 0x0, 0x1}}]}, {0x4}, {0xc}, {0xc}}}]}]}, 0x70}}, 0x0) r9 = socket$tipc(0x1e, 0x5, 0x0) recvmmsg(r9, 0x0, 0x0, 0x2, 0x0) r10 = openat$tun(0xffffffffffffff9c, &(0x7f0000000000), 0x40a01, 0x0) ioctl$TUNSETCARRIER(r1, 0x400454e2, &(0x7f0000000080)=0x1) ioctl$TUNSETIFF(r10, 0x400454ca, &(0x7f0000000200)={'syzkaller1\x00', 0xc201}) r11 = socket$kcm(0x2, 0xa, 0x2) ioctl$SIOCSIFHWADDR(r11, 0x8914, &(0x7f0000000180)={'syzkaller1\x00', @link_local={0x1, 0x80, 0xc2, 0x0, 0x0, 0x2}}) bpf$MAP_UPDATE_ELEM(0x2, &(0x7f0000000280)={0xffffffffffffffff, &(0x7f0000000100)="74c71536cea3e7c1818c5b", 0x0, 0x4}, 0x20) write$tun(r10, &(0x7f00000000c0)=ANY=[@ANYBLOB="001c86dd0700100000004000000060ec97000fc83c00fe8000000000000000000000000000aaff02000000000000000000000000000106"], 0xffe) ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r2, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000580)={&(0x7f0000000340)=@newqdisc={0x4c, 0x24, 0x4ee4e6a52ff56541, 0x1, 0x25dfdbfd, {0x0, 0x0, 0x0, r12, {0x0, 0xb}, {0xffff, 0xffff}, {0xfff2, 0xfff3}}, [@qdisc_kind_options=@q_netem={{0xa}, {0x1c, 0x2, {{0x3, 0x3, 0x6361, 0x0, 0xffffffff, 0x3}}}}]}, 0x4c}, 0x1, 0x0, 0x0, 0x40088c1}, 0x0) shutdown(r0, 0x1) setsockopt$sock_int(r0, 0x1, 0x20, &(0x7f0000000280)=0xfffff908, 0x4) 5m35.638340303s ago: executing program 1 (id=9822): r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000100), 0x0, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x2}) sendmsg$key(0xffffffffffffffff, &(0x7f00000001c0)={0x40000000, 0x0, &(0x7f0000000040)={&(0x7f0000000080)=ANY=[@ANYBLOB="02030609100000000000004c9e0000000200130002"], 0x80}}, 0x0) r1 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r1, &(0x7f0000000b40)={0x0, 0x0, &(0x7f0000000b00)={&(0x7f0000000080)=ANY=[@ANYBLOB="180000003f00010327bd7000fbdbdf2503"], 0x20}, 0x1, 0x0, 0x0, 0x10}, 0x20000800) r2 = socket$unix(0x1, 0x1, 0x0) r3 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPCTNL_MSG_EXP_NEW(r3, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000000c0)={0x58, 0x0, 0x2, 0x201, 0x0, 0x0, {0xa}, [@CTA_EXPECT_MASK={0x4}, @CTA_EXPECT_TUPLE={0x3c, 0x2, 0x0, 0x1, [@CTA_TUPLE_IP={0x2c, 0x1, 0x0, 0x1, @ipv6={{0x14, 0x3, @dev={0xfe, 0x80, '\x00', 0x44}}, {0x14, 0x4, @local}}}, @CTA_TUPLE_PROTO={0xc, 0x2, 0x0, 0x1, {0x5, 0x1, 0x1}}]}, @CTA_EXPECT_MASTER={0x4}]}, 0x58}, 0x1, 0x0, 0x0, 0x90}, 0x8000) ioctl$FICLONE(r2, 0x40049409, r3) r4 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r4, &(0x7f0000000000)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000080)=@deltclass={0x30, 0x29, 0x200, 0x70bd2c, 0x25dfdbfc, {0x0, 0x0, 0x0, r5, {0xfff1, 0xfff3}, {0x9, 0xd}, {0xc, 0x2}}, [@tclass_kind_options=@c_multiq={0xb}]}, 0x30}, 0x1, 0x0, 0x0, 0x48085}, 0x0) r6 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r6, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r6, &(0x7f00000003c0)={0x0, 0x0, &(0x7f0000000300)={&(0x7f00000005c0)=@newqdisc={0x5c, 0x24, 0x4ee4e6a52ff56541, 0x70b926, 0x25dfdc01, {0x0, 0x0, 0x0, r7, {0x0, 0xd}, {0xffff, 0xb}, {0xffff, 0xffe0}}, [@qdisc_kind_options=@q_fq_codel={{0xd}, {0x4}}, @TCA_STAB={0x24, 0x8, 0x0, 0x1, [{{0x1c, 0x1, {0x8, 0x15, 0x6, 0x94, 0x2, 0x0, 0xf1}}, {0x4}}]}]}, 0x5c}, 0x1, 0x0, 0x0, 0x240040e0}, 0x4890) 5m35.472579621s ago: executing program 1 (id=9825): bpf$PROG_LOAD(0x5, 0x0, 0x0) r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000380)=ANY=[@ANYBLOB="09000000070000000080000001"], 0x48) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f00000001c0)={{r0, 0xffffffffffffffff}, &(0x7f00000002c0), &(0x7f0000000280)}, 0x20) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="18000000000d0039000000000000b4a518110000", @ANYRES32=r1], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) r2 = socket$inet_tcp(0x2, 0x1, 0x0) ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f0000000180)={'syz_tun\x00', 0x0}) r4 = bpf$PROG_LOAD(0x5, &(0x7f00000002c0)={0x6, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x40f00, 0x0, '\x00', 0x0, @fallback=0x2, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_LINK_CREATE_XDP(0x1c, &(0x7f0000000000)={r4, r3, 0x25, 0x0, @void}, 0x10) syz_emit_ethernet(0xfdef, &(0x7f0000000400)=ANY=[], 0x0) 5m35.398608702s ago: executing program 1 (id=9827): r0 = socket$inet(0x2, 0x2, 0x0) setsockopt$inet_mreqn(r0, 0x0, 0x23, &(0x7f0000000740)={@multicast2, @loopback}, 0xc) setsockopt$inet_msfilter(r0, 0x0, 0x29, &(0x7f0000000000)=ANY=[@ANYBLOB="e00000027fa80a010100000004"], 0x57) r1 = socket$netlink(0x10, 0x3, 0x0) ioctl$sock_TIOCINQ(r0, 0x541b, &(0x7f0000000040)) r2 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r2, &(0x7f000000c2c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000400)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a28000000000a0101000000005e1affd5020000000900010073797a300000000008000240000000032c000000030a01030000e6ff00000000020000000900010073797a30000000000900030073797a320000000014000000110001"], 0x7c}}, 0x0) sendmsg$NFT_BATCH(r2, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000240)={{0x14}, [@NFT_MSG_NEWRULE={0x7c, 0x6, 0xa, 0x40b, 0x0, 0x0, {0x2}, [@NFTA_RULE_EXPRESSIONS={0x50, 0x4, 0x0, 0x1, [{0x18, 0x1, 0x0, 0x1, @osf={{0x8}, @val={0xc, 0x2, 0x0, 0x1, [@NFTA_OSF_DREG={0x8, 0x1, 0x1, 0x0, 0x4}]}}}, {0x24, 0x1, 0x0, 0x1, @meta={{0x9}, @val={0x14, 0x2, 0x0, 0x1, [@NFTA_META_KEY={0x8, 0x2, 0x1, 0x0, 0xc}, @NFTA_META_SREG={0x8, 0x3, 0x1, 0x0, 0x4}]}}}, {0x10, 0x1, 0x0, 0x1, @dup={{0x8}, @val={0x4}}}]}, @NFTA_RULE_TABLE={0x9, 0x1, 'syz0\x00'}, @NFTA_RULE_CHAIN={0x9, 0x2, 'syz2\x00'}]}], {0x14, 0x11, 0x1, 0x0, 0x0, {0x1}}}, 0xa4}}, 0x0) writev(r1, &(0x7f00000003c0)=[{&(0x7f0000000180)="390000001300034700bb65e1c3e4ffff01000000010000005600000025000000190004000400000007fd17e5ffff0800040000000000000000", 0x39}], 0x1) writev(r1, &(0x7f0000000100)=[{&(0x7f0000000400)="390000001300034700bb5be1c3e4feff06000000010000004500000025000000190004000400ad000200000000000006040000000000f93132", 0x39}], 0x1) r3 = socket$nl_route(0x10, 0x3, 0x0) r4 = syz_genetlink_get_family_id$ethtool(&(0x7f0000000040), 0xffffffffffffffff) r5 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$ETHTOOL_MSG_STRSET_GET(r5, &(0x7f0000000380)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000001640)=ANY=[@ANYBLOB="14000000", @ANYRES16=r4, @ANYBLOB="210329bd7000a7dbdf2501"], 0x14}, 0x1, 0x0, 0x0, 0x4c811}, 0x4) socketpair$unix(0x1, 0x2, 0x0, &(0x7f00000001c0)={0xffffffffffffffff}) sendmmsg(r6, &(0x7f0000005540)=[{{&(0x7f0000000140)=@xdp={0x2c, 0x0, 0x0, 0x14}, 0x80, 0x0, 0x0, &(0x7f0000000380)=[{0x10, 0x109, 0xfffffffa}], 0x10}}], 0x1, 0x0) recvmmsg(r5, &(0x7f00000001c0)=[{{0x0, 0x0, &(0x7f0000000080)=[{&(0x7f0000000100)=""/115, 0x73}, {&(0x7f0000000400)=""/4083, 0xff3}], 0x2}, 0x8}], 0x4, 0x180, 0x0) sendmsg$nl_route(r3, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000080)=@newlink={0x28, 0x10, 0x1, 0x70bd25, 0x25dfdbfc, {0x0, 0x0, 0x0, 0x0, 0x40938, 0x3}, [@IFLA_GROUP={0x8}]}, 0x28}, 0x1, 0x0, 0x0, 0x68010}, 0x0) setsockopt$inet_mreqsrc(r0, 0x0, 0x28, &(0x7f0000000440)={@multicast2, @loopback, @empty}, 0xc) 5m34.432299329s ago: executing program 1 (id=9837): bpf$PROG_LOAD(0x5, 0x0, 0x0) r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000380)=ANY=[@ANYBLOB="09000000070000000080000001"], 0x48) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f00000001c0)={{r0, 0xffffffffffffffff}, &(0x7f00000002c0), &(0x7f0000000280)}, 0x20) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="18000000000d0039000000000000b4a518110000", @ANYRES32=r1], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) r2 = socket$inet_tcp(0x2, 0x1, 0x0) ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f0000000180)={'syz_tun\x00', 0x0}) r4 = bpf$PROG_LOAD(0x5, &(0x7f00000002c0)={0x6, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x40f00, 0x0, '\x00', 0x0, @fallback=0x2, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_LINK_CREATE_XDP(0x1c, &(0x7f0000000000)={r4, r3, 0x25, 0x0, @void}, 0x10) syz_emit_ethernet(0xfdef, &(0x7f0000000400)=ANY=[], 0x0) 5m34.23145699s ago: executing program 1 (id=9840): r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000040)='memory.events\x00', 0x275a, 0x0) write$tun(r0, &(0x7f0000000080)=ANY=[], 0x141) (async) mmap(&(0x7f0000000000/0x4000)=nil, 0x4000, 0x1, 0x10012, r0, 0x0) (async) r1 = socket$inet_tcp(0x2, 0x1, 0x0) bind$inet(r1, &(0x7f0000000080)={0x2, 0x4e21, @broadcast}, 0x10) connect$inet(r1, &(0x7f0000000180)={0x2, 0x4e21, @local}, 0x10) sendto$inet(r1, &(0x7f0000000000), 0xffffffffffffff94, 0x0, 0x0, 0x11) (async) setsockopt$inet_tcp_TCP_CONGESTION(r1, 0x6, 0xd, &(0x7f0000000000)='cdg', 0x3) (async) sendmmsg$inet(r1, &(0x7f00000023c0)=[{{0x0, 0x0, &(0x7f0000001440)=[{&(0x7f0000000040)="e1", 0x1}], 0x1}}], 0x1, 0x4001) (async) recvfrom$inet(r1, &(0x7f0000000080)=""/8, 0xfffffffffffffd0b, 0x700, 0x0, 0xfffffffffffffd25) bpf$ITER_CREATE(0xb, &(0x7f0000000100), 0x1000) r2 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r3 = syz_genetlink_get_family_id$netlbl_cipso(&(0x7f00000002c0), r2) sendmsg$NLBL_CIPSOV4_C_ADD(r2, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000840)={0x38, r3, 0x1, 0x0, 0x0, {}, [@NLBL_CIPSOV4_A_DOI={0x8, 0x1, 0x3}, @NLBL_CIPSOV4_A_TAGLST={0x14, 0x4, 0x0, 0x1, [{0x5, 0x3, 0x1}, {0x5, 0x3, 0x80}]}, @NLBL_CIPSOV4_A_MTYPE={0x8, 0x2, 0x2}]}, 0x38}, 0x1, 0x0, 0x0, 0xc082}, 0xc000) (async) r4 = socket(0x10, 0x803, 0x0) bpf$PROG_LOAD(0x5, &(0x7f00000054c0)={0x5, 0x16, &(0x7f0000000240)=ANY=[@ANYBLOB="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"], &(0x7f0000001580)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x8, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0xfffffde5, 0x0, 0xffffffffffffffff, 0x39}, 0x48) (async, rerun: 32) getsockname$packet(r4, &(0x7f0000000140)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) (rerun: 32) sendmsg$nl_route(r4, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000240)=ANY=[@ANYBLOB="4c000000100039042abd70000000000000000000", @ANYRES32=r5, @ANYBLOB="01180200031100002c0012800e00010069703665727370616e0000001800028008001500a8bc0d00040012"], 0x4c}}, 0x0) 5m33.850277872s ago: executing program 1 (id=9842): sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000140)=@newtaction={0x70, 0x30, 0x0, 0x0, 0x0, {0x9}, [{0x5c, 0x1, [@m_sample={0x58, 0x20, 0x0, 0x0, {{0xb}, {0x2c, 0x2, 0x0, 0x1, [@TCA_SAMPLE_PSAMPLE_GROUP={0x8, 0x5, 0x2}, @TCA_SAMPLE_RATE={0x8}, @TCA_SAMPLE_PARMS={0x18, 0x2, {0x0, 0x0, 0x0, 0x0, 0x80000}}]}, {0x4}, {0xc, 0x7, {0x1}}, {0xc, 0x8, {0x7}}}}]}]}, 0x70}}, 0x20040000) r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000140)=ANY=[@ANYBLOB="9000000010000305000000000000000000000700", @ANYRES32=0x0, @ANYBLOB="996e06004d4c0700540012800800010068737200480002800500030008000000050003000500000005000300fd00000008000200", @ANYRES32=r0, @ANYBLOB="08000100", @ANYRES32=r1], 0x90}}, 0x0) r2 = bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000d80)={&(0x7f0000000140)=ANY=[@ANYBLOB="9f08000018000000000000000c0000000c000000020000000000006fdd12ffb0fc044375c587ebeeb1d7bc2f1cf99c24a53cfcdae5224b23ca1824aee36e8b4d59b60fa710caa555ed239d0bbb5811207e9dc1280b32b209aa1777a969e5c17af094354f7910c1ddaad58a4517fde3400cdf82ac00"/131], 0x0, 0x26}, 0x20) r3 = socket$alg(0x26, 0x5, 0x0) bind$alg(r3, &(0x7f0000000000)={0x26, 'hash\x00', 0x0, 0x0, 'xxhash64\x00'}, 0x58) r4 = accept4(r3, 0x0, 0x0, 0x0) sendmmsg$unix(r4, &(0x7f0000009d00)=[{{0x0, 0x0, &(0x7f0000005300)=[{&(0x7f0000000380)="dc53410c028336dd2edc80341a8e69f3db7a666f4261671c2334281380dd7b98f3ce423cfb74ad23ce8f39992d8fcad4015c8b9a8f0a87c00bdf9903033cd4cfca868b4baa9614334d48e649cb0cab6eed38ef749abd3995a1886f756a44af06d5bef6", 0x63}, {&(0x7f0000000540)="4cdd3b8b18257694ae8b637b5c4147d1a6dd59775e694104a33f3f06f11767666909b3581ddd7b6186285aa7062ec5cb9b2924afbab0ced703dfba75b237fae00db0bff39394c048c4683d384286936cf9787961c641577c73a8764350be74e1f2153c20bf53cbdaa94193817262e4d4d7a051fbaa6b848add4e28bf6670115122061bf1d9395b58580a1dbc28ab7060fa2c1fa0f1228e9db8ffcf6de5e2cf5041d1dff5f7e8351175895b3ec719faad9fb36475bc", 0xb5}], 0x2}}], 0x1, 0x0) bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f00000003c0)={0x9, 0x4, 0x4, 0x2, 0x80, 0x1, 0x0, '\x00', 0x0, r2, 0x1, 0x1}, 0x48) r5 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r5, &(0x7f0000000000)={0x0, 0xffffffffffffff2f, &(0x7f0000000040)={&(0x7f0000000240)={0x14, 0x26, 0x1, 0xf0bd26, 0x25dfdbfc, {0x6}}, 0x14}, 0x1, 0x0, 0x0, 0x4001d}, 0x48000) bpf$MAP_CREATE(0x0, &(0x7f0000000280)=ANY=[@ANYBLOB="0a00000004000000dd0000000a"], 0x50) socket$nl_generic(0x10, 0x3, 0x10) r6 = socket$inet_mptcp(0x2, 0x1, 0x106) socketpair$unix(0x1, 0x1, 0x0, &(0x7f00000005c0)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$sock_SIOCGIFINDEX(r7, 0x8933, &(0x7f0000000340)={'bridge_slave_1\x00', 0x0}) r10 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r11 = syz_genetlink_get_family_id$netlbl_unlabel(&(0x7f0000000040), r10) sendmsg$NLBL_UNLABEL_C_STATICREMOVE(r10, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000740)={0x28, r11, 0x1, 0x0, 0x0, {}, [@NLBL_UNLABEL_A_IFACE={0x14, 0x6, 'virt_wifi0\x00'}]}, 0x28}}, 0x0) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000140)=ANY=[@ANYBLOB="7c0000001000010400"/20, @ANYRES32=r8, @ANYBLOB="00000000000000005c001280110001006272696467655f736c617665000000004400058005000500000000000500200001000000050008000000"], 0x7c}, 0x1, 0x0, 0x0, 0x10}, 0x0) r12 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r12, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000009c0)=ANY=[@ANYBLOB="140000003a000b0026747000ffdbdf2512"], 0x14}, 0x1, 0x0, 0x0, 0x40}, 0x8010) setsockopt$inet_IP_XFRM_POLICY(r6, 0x0, 0x11, &(0x7f0000000480)={{{@in=@rand_addr=0x64010111, @in6=@private2, 0x4e24, 0x4, 0x5, 0x578, 0x2, 0x80, 0x90, 0x21, r9, 0xee01}, {0x4, 0x1, 0xe, 0x4, 0x0, 0x800, 0x733b, 0x4}, {0x6, 0x7, 0x401, 0x3}, 0xe0, 0x0, 0x2, 0x1, 0x2, 0x4}, {{@in6=@local, 0x4d3, 0x3c}, 0xa, @in6=@local, 0x3501, 0x4, 0x3, 0x3, 0x0, 0x7, 0x7fff}}, 0xe8) socket$nl_route(0x10, 0x3, 0x0) bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000280)={&(0x7f0000000340)=ANY=[@ANYBLOB="9feb010018000000000000003c0000003c000000020000000000000002000084ffffffff000000000300000000000000000000000200000000000000000000000000000a03000000000000000000001302"], 0x0, 0x56}, 0x20) bpf$PROG_LOAD(0x5, &(0x7f0000000080)={0x3, 0x8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @sched_cls}, 0x94) r13 = bpf$MAP_CREATE(0x0, &(0x7f00000006c0)=ANY=[@ANYBLOB="170000000000000004000000ff"], 0x50) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000a40)={0x3, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r13], 0x0}, 0x94) bpf$PROG_LOAD_XDP(0x5, &(0x7f00000003c0)={0x6, 0x5, &(0x7f0000000100)=ANY=[@ANYBLOB="180000000000000000000000000000001850000000000020000000000000000095"], &(0x7f0000000000)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0xfffffff0, 0x0, 0x0, 0x0, &(0x7f0000000080)}, 0x9a) 5m18.690546459s ago: executing program 33 (id=9842): sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000140)=@newtaction={0x70, 0x30, 0x0, 0x0, 0x0, {0x9}, [{0x5c, 0x1, [@m_sample={0x58, 0x20, 0x0, 0x0, {{0xb}, {0x2c, 0x2, 0x0, 0x1, [@TCA_SAMPLE_PSAMPLE_GROUP={0x8, 0x5, 0x2}, @TCA_SAMPLE_RATE={0x8}, @TCA_SAMPLE_PARMS={0x18, 0x2, {0x0, 0x0, 0x0, 0x0, 0x80000}}]}, {0x4}, {0xc, 0x7, {0x1}}, {0xc, 0x8, {0x7}}}}]}]}, 0x70}}, 0x20040000) r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000140)=ANY=[@ANYBLOB="9000000010000305000000000000000000000700", @ANYRES32=0x0, @ANYBLOB="996e06004d4c0700540012800800010068737200480002800500030008000000050003000500000005000300fd00000008000200", @ANYRES32=r0, @ANYBLOB="08000100", @ANYRES32=r1], 0x90}}, 0x0) r2 = bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000d80)={&(0x7f0000000140)=ANY=[@ANYBLOB="9f08000018000000000000000c0000000c000000020000000000006fdd12ffb0fc044375c587ebeeb1d7bc2f1cf99c24a53cfcdae5224b23ca1824aee36e8b4d59b60fa710caa555ed239d0bbb5811207e9dc1280b32b209aa1777a969e5c17af094354f7910c1ddaad58a4517fde3400cdf82ac00"/131], 0x0, 0x26}, 0x20) r3 = socket$alg(0x26, 0x5, 0x0) bind$alg(r3, &(0x7f0000000000)={0x26, 'hash\x00', 0x0, 0x0, 'xxhash64\x00'}, 0x58) r4 = accept4(r3, 0x0, 0x0, 0x0) sendmmsg$unix(r4, &(0x7f0000009d00)=[{{0x0, 0x0, &(0x7f0000005300)=[{&(0x7f0000000380)="dc53410c028336dd2edc80341a8e69f3db7a666f4261671c2334281380dd7b98f3ce423cfb74ad23ce8f39992d8fcad4015c8b9a8f0a87c00bdf9903033cd4cfca868b4baa9614334d48e649cb0cab6eed38ef749abd3995a1886f756a44af06d5bef6", 0x63}, {&(0x7f0000000540)="4cdd3b8b18257694ae8b637b5c4147d1a6dd59775e694104a33f3f06f11767666909b3581ddd7b6186285aa7062ec5cb9b2924afbab0ced703dfba75b237fae00db0bff39394c048c4683d384286936cf9787961c641577c73a8764350be74e1f2153c20bf53cbdaa94193817262e4d4d7a051fbaa6b848add4e28bf6670115122061bf1d9395b58580a1dbc28ab7060fa2c1fa0f1228e9db8ffcf6de5e2cf5041d1dff5f7e8351175895b3ec719faad9fb36475bc", 0xb5}], 0x2}}], 0x1, 0x0) bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f00000003c0)={0x9, 0x4, 0x4, 0x2, 0x80, 0x1, 0x0, '\x00', 0x0, r2, 0x1, 0x1}, 0x48) r5 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r5, &(0x7f0000000000)={0x0, 0xffffffffffffff2f, &(0x7f0000000040)={&(0x7f0000000240)={0x14, 0x26, 0x1, 0xf0bd26, 0x25dfdbfc, {0x6}}, 0x14}, 0x1, 0x0, 0x0, 0x4001d}, 0x48000) bpf$MAP_CREATE(0x0, &(0x7f0000000280)=ANY=[@ANYBLOB="0a00000004000000dd0000000a"], 0x50) socket$nl_generic(0x10, 0x3, 0x10) r6 = socket$inet_mptcp(0x2, 0x1, 0x106) socketpair$unix(0x1, 0x1, 0x0, &(0x7f00000005c0)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$sock_SIOCGIFINDEX(r7, 0x8933, &(0x7f0000000340)={'bridge_slave_1\x00', 0x0}) r10 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r11 = syz_genetlink_get_family_id$netlbl_unlabel(&(0x7f0000000040), r10) sendmsg$NLBL_UNLABEL_C_STATICREMOVE(r10, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000740)={0x28, r11, 0x1, 0x0, 0x0, {}, [@NLBL_UNLABEL_A_IFACE={0x14, 0x6, 'virt_wifi0\x00'}]}, 0x28}}, 0x0) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000140)=ANY=[@ANYBLOB="7c0000001000010400"/20, @ANYRES32=r8, @ANYBLOB="00000000000000005c001280110001006272696467655f736c617665000000004400058005000500000000000500200001000000050008000000"], 0x7c}, 0x1, 0x0, 0x0, 0x10}, 0x0) r12 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r12, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000009c0)=ANY=[@ANYBLOB="140000003a000b0026747000ffdbdf2512"], 0x14}, 0x1, 0x0, 0x0, 0x40}, 0x8010) setsockopt$inet_IP_XFRM_POLICY(r6, 0x0, 0x11, &(0x7f0000000480)={{{@in=@rand_addr=0x64010111, @in6=@private2, 0x4e24, 0x4, 0x5, 0x578, 0x2, 0x80, 0x90, 0x21, r9, 0xee01}, {0x4, 0x1, 0xe, 0x4, 0x0, 0x800, 0x733b, 0x4}, {0x6, 0x7, 0x401, 0x3}, 0xe0, 0x0, 0x2, 0x1, 0x2, 0x4}, {{@in6=@local, 0x4d3, 0x3c}, 0xa, @in6=@local, 0x3501, 0x4, 0x3, 0x3, 0x0, 0x7, 0x7fff}}, 0xe8) socket$nl_route(0x10, 0x3, 0x0) bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000280)={&(0x7f0000000340)=ANY=[@ANYBLOB="9feb010018000000000000003c0000003c000000020000000000000002000084ffffffff000000000300000000000000000000000200000000000000000000000000000a03000000000000000000001302"], 0x0, 0x56}, 0x20) bpf$PROG_LOAD(0x5, &(0x7f0000000080)={0x3, 0x8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @sched_cls}, 0x94) r13 = bpf$MAP_CREATE(0x0, &(0x7f00000006c0)=ANY=[@ANYBLOB="170000000000000004000000ff"], 0x50) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000a40)={0x3, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r13], 0x0}, 0x94) bpf$PROG_LOAD_XDP(0x5, &(0x7f00000003c0)={0x6, 0x5, &(0x7f0000000100)=ANY=[@ANYBLOB="180000000000000000000000000000001850000000000020000000000000000095"], &(0x7f0000000000)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0xfffffff0, 0x0, 0x0, 0x0, &(0x7f0000000080)}, 0x9a) 2m28.083154669s ago: executing program 6 (id=11554): r0 = socket$nl_route(0x10, 0x3, 0x0) (async) r1 = openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0x2802, 0x0) ioctl$TUNSETIFF(r1, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x7101}) (async) r2 = socket(0x400000000010, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r2, &(0x7f00000012c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000000c0)=@newqdisc={0x38, 0x24, 0x4ee4e6a52ff56541, 0x70bd2a, 0xfffffffd, {0x0, 0x0, 0x0, r3, {0x0, 0x1}, {0xffff, 0xffff}, {0xffe0, 0x9}}, [@qdisc_kind_options=@q_multiq={{0xb}, {0x8}}]}, 0x38}}, 0x0) (async) sendmsg$nl_route_sched(r2, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000500)=@gettaction={0x74, 0x32, 0x10, 0x70bd2a, 0x25dfdbff, {}, [@action_gd=@TCA_ACT_TAB={0x60, 0x1, [{0xc, 0x8, 0x0, 0x0, @TCA_ACT_INDEX={0x8, 0x3, 0x1}}, {0xc, 0x2, 0x0, 0x0, @TCA_ACT_INDEX={0x8}}, {0xc, 0x3ff9, 0x0, 0x0, @TCA_ACT_INDEX={0x8, 0x3, 0x6}}, {0xc, 0x15, 0x0, 0x0, @TCA_ACT_INDEX={0x8, 0x3, 0x80}}, {0x10, 0x7, 0x0, 0x0, @TCA_ACT_KIND={0xc, 0x1, 'skbedit\x00'}}, {0xc, 0x19, 0x0, 0x0, @TCA_ACT_KIND={0x8, 0x1, 'nat\x00'}}, {0x10, 0x1b, 0x0, 0x0, @TCA_ACT_KIND={0xb, 0x1, 'police\x00'}}]}]}, 0x74}, 0x1, 0x0, 0x0, 0x20041090}, 0x0) r4 = socket$unix(0x1, 0x1, 0x0) (async) r5 = socket$kcm(0x11, 0x3, 0x0) (async) r6 = openat$tun(0xffffffffffffff9c, &(0x7f0000000400), 0x0, 0x0) close(r6) (async) socket$nl_generic(0x10, 0x3, 0x10) ioctl$SIOCSIFHWADDR(r6, 0x8914, &(0x7f0000002280)={'syzkaller0\x00', @multicast}) (async) ioctl$sock_SIOCGIFINDEX(r4, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$kcm(r5, &(0x7f00000000c0)={&(0x7f0000000440)=@xdp={0x2c, 0x7, r7, 0x4003e}, 0x80, &(0x7f0000000380)=[{&(0x7f00000002c0)="a264c70c398a54beba73370dff7be7db19f65f369fff79da9e212f29b2c4151605000000e547033712a2529ab4ced3", 0x2f}, {&(0x7f0000000880)="eb6780c30372e6f267cd8342ecb8c93dea63810e0fa4479d0482e031f85148f2830d8fed9f3ea71d7b40e36f998167222a71d0617610d2d7d38f8e90d71326220216f8d0692875f3a8756cff85", 0x4d}], 0x2}, 0x4) (async) sendmsg$nl_route(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000680)=ANY=[@ANYBLOB="4c0000001000010400"/20, @ANYRES32=0x0, @ANYBLOB="00000000000000002c0012800e00010069703665727370616e0000001800028006001800008000000400120005001600"], 0x4c}}, 0x0) 2m27.834639036s ago: executing program 6 (id=11558): syz_emit_ethernet(0x46, &(0x7f0000000000)={@broadcast, @remote, @void, {@ipv6={0x86dd, @icmpv6={0x0, 0x6, "120008", 0x10, 0x3a, 0xff, @remote, @mcast2, {[], @ndisc_ra={0x86, 0x0, 0x0, 0x1, 0x0, 0x2}}}}}}, 0x0) syz_emit_ethernet(0x5e, &(0x7f0000002e40)={@local, @dev, @void, {@ipv6={0x86dd, @icmpv6={0x0, 0x6, "7428dd", 0x28, 0x3a, 0xff, @remote, @mcast2, {[], @ndisc_na={0x89, 0x0, 0x0, 0x0, '\x00', @initdev={0xfe, 0x88, '\x00', 0x0, 0x0}, [{0x0, 0x2, "122b472e41e24b11f34b608816e5"}]}}}}}}, 0x0) syz_emit_ethernet(0x34d, &(0x7f0000000780)={@link_local={0x1, 0x80, 0xc2, 0x0, 0x0, 0x2}, @link_local, @void, {@ipv6={0x86dd, @icmpv6={0x0, 0x6, "00cd04", 0x317, 0x3a, 0xff, @remote, @mcast2, {[], @ndisc_ra={0x86, 0x0, 0x0, 0x0, 0x5, 0x1, 0x0, 0x0, [{0x3, 0xa, "a78c000005dc8080a2030003004003493b87aafaffffffffffffff23732472eefa45ad96579269748e254c1e4a8a8b3f0ab0c430d3be27df3e34060600000000000000dac15084dbaf736b41e5af0502"}, {0x0, 0x1, "000005000000000026000400"}, {0x0, 0x18, "fe906d26efe39393fe08f73eabc5977b1190a3a6ad8338f1511cdd10c35d8f6de79fc7fd175f75649fa368a32c829af02d7f44d92324a7051e460a13ddde25a5b85b9d930914625d8a049b4cf0d129806a610ad8477a2499a9a0527f75b655a6653d0363a979acf93f88eea07d68423e90280409de1657275f716a2bf3915d1783e8eb477b0d1170f0ecbdef4c23e1b76e9ab3d2fbe4b34438d2a77577edd0ebed9682b851b380ae0cab282af9d7ebe668177704c5fd4698c934de4731f3f61effc9"}, {0x5, 0x1d, "06aa85616177c61bc943afcb84619755403946b0730a18d5c38cf7dcad830f2dc8674b87ba8b58f81ece27975cc39e595e9af90b4fe92a38d25551c2d9ebfc5dfc5a2a501b7e483de3f808895c5f4a1a2367bc591dd8b094822ff0dea07c9a1f643c822a18b79f7c5eba31fb68b2d734a6671e27182aee4df24a4a5cf390dab23b500b0c0272479611e4f7f4299ec4d926d443367b105185e6ecd9602ba95392343e9bbd047ef6bc1ba42399907ccd0a562db212baa39eb8164e240069f656d3a05fecf894222a141123f5ac010000000000000090aa235a670670ffc5dc49dfb58d00000000000000"}, {0x0, 0xb, "17dcea468000000000054740a5d4901b0aeff04c0300f3c75dc2d227a83b89483b1084743475671545e65eb2bce9ac946a3f0e2bc4000091394c02bcfbbb7d71138537d68e2d2c6393a9f3cc271a9ff09a48b5b303f4f0"}, {0xe, 0x7, "b8a3e10000a3e1100000006f00ffc0ffff00000000600000ff0bc0fe000000000000000000000000d9a0274400"/55}, {0x0, 0xc, "5e14ccb44d2d42cfb3f27fafb60845f90b6dfc2e37bc87c6905bbc94d33e1ea71a28105f543e868a8a53b360a9d33e2b1e26eb1d260600aa89c8f267d76ece1c9f6ae2e1eb3d8bf9c6ab2642c4808298e62afbf03269f1f98aea6ab3beb5fdc5fdaabc2c"}]}}}}}}, 0x0) 2m27.714882948s ago: executing program 6 (id=11559): r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000380)={&(0x7f00000002c0)=ANY=[@ANYBLOB="54000000100001002abd70000400000000000000", @ANYRES32=0x0, @ANYBLOB="8021000000000000140003006272696467655f736c6176655f30000005001100010000001800168014"], 0x54}, 0x1, 0x0, 0x0, 0x4048080}, 0x0) r1 = socket$nl_generic(0x10, 0x3, 0x10) r2 = syz_genetlink_get_family_id$tipc2(&(0x7f0000000100), 0xffffffffffffffff) bind$alg(0xffffffffffffffff, &(0x7f0000000500)={0x26, 'aead\x00', 0x0, 0x0, 'aegis128-generic\x00'}, 0x58) sendmsg$TIPC_NL_KEY_SET(r1, &(0x7f0000000100)={0x0, 0x0, &(0x7f00000003c0)={&(0x7f0000000140)=ANY=[@ANYBLOB="080648a47e418f010ed666f0e0f9e27bf2faf2df09efec8f1bbfd965bc7f5fee3dc6b209b211eb0e4848d4f7cd54fa1d62f9a3abba18ab01149a0e6c195d8f334639da59314bb452a2d0019d551a0ddcbbcc80dce54eb1a12dfe997ab99ea96dde1430c0b3211a1b46c730b63a20c2459fd1f37139f1a051c3e45f8a35d694cf2040844f85a843a32ba5980115a8f87e0f2011b8bb61cc7e38c14d6f061b8fd4d1deca24a954000a649910da58212ab103347ad2e4baa7cdb205b3406e092463b64b67924560a6786b", @ANYRES16=r2, @ANYBLOB="0100000000000000000017000000540006803c00040067636d286165732900000000000000000000000000000000000000000000000014000000e3de3d7b4cd07ec3ee777de774fc7987cca41989140003"], 0x68}, 0x1, 0x0, 0x0, 0x4}, 0x4008014) 2m27.503300953s ago: executing program 6 (id=11562): syz_emit_ethernet(0x17f, &(0x7f00000004c0)=ANY=[@ANYRESHEX, @ANYRES32=0x41424344, @ANYBLOB="700200049078"], 0x0) 2m27.347029264s ago: executing program 6 (id=11564): r0 = socket$inet6_tcp(0xa, 0x1, 0x0) listen(r0, 0x0) connect$tipc(0xffffffffffffffff, &(0x7f0000003100)=@nameseq={0x1e, 0x1, 0x0, {0x1, 0x0, 0x2}}, 0x10) bpf$PROG_LOAD(0x5, &(0x7f0000000440)={0x10, 0x4, &(0x7f0000000180)=ANY=[@ANYBLOB="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"], &(0x7f0000000080)='GPL\x00', 0x4, 0xc3, &(0x7f000000cf3d)=""/195, 0x0, 0x0, '\x00', 0x0, @sk_msg, 0xffffffffffffffff, 0x8, &(0x7f0000000000)={0x0, 0x3}, 0x8, 0x10, &(0x7f0000000000), 0x10}, 0x94) (async, rerun: 32) r1 = accept4(r0, 0x0, 0x0, 0x800) (rerun: 32) r2 = bpf$MAP_CREATE(0x0, &(0x7f0000000040)=ANY=[@ANYBLOB="05000000044c00000400000009"], 0x48) (async) r3 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r3, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000029c0)=ANY=[@ANYBLOB="fc010000190001000000000000000000fc0200000000000000000000000000000000000000000000000000000000000000000040000000000200000008000000", @ANYRES32=0x0, @ANYRES32=0x0, @ANYBLOB="00000000000000000000000000000000000000010000000000000000000000000000000000000000000000000000000000000000000000001d0000000000000000000000000000000000000000000000000000000000000001000000000000000000000000000000000000020000000044010500ac14143b000000000000000000000000000004d32b00000000000000ac14140c000000000000000000000000000000000003ff00000000000000000000000000fc020000000000000000200000000000000000003200000000000000ac1414aa000000000000000000000000000000000100000000000000ffffffff0000000000000000000000000000000000000001000000003c00000002000000fe8800000000000000000000000000010000000001030000000000000600000000000000fc01000000000000000000000000000000000000320000000200000000000000000000000000000000000000fdffffffcd"], 0x1fc}}, 0x0) (async, rerun: 64) bpf$MAP_LOOKUP_BATCH(0x18, &(0x7f00000021c0)={0x0, 0xfffffffffffffffe, 0x0, 0x0, 0x10800ff, r2}, 0x38) (async, rerun: 64) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000440)={0x13, 0xf, &(0x7f0000000100)=@ringbuf={{0x18, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xd}, {{0x18, 0x1, 0x1, 0x0, r2}}, {}, [], {{}, {0x7, 0x0, 0xb, 0x2, 0x0, 0x0, 0x1}, {0x85, 0x0, 0x0, 0x85}}}, &(0x7f0000000000)='GPL\x00', 0x2, 0x0, 0x0, 0x0, 0x8}, 0x94) setsockopt$inet6_tcp_int(r0, 0x6, 0x19, &(0x7f0000000080), 0x4) (async) r4 = accept$nfc_llcp(r1, &(0x7f0000000300), &(0x7f00000000c0)=0x60) ioctl$sock_ifreq(r4, 0x8993, &(0x7f00000003c0)={'ipvlan1\x00', @ifru_data=&(0x7f0000000380)="ac4ebb75f4fd48bc6490468c62626819746380e7ce19c502b1cd640ff1aead28"}) 2m27.118687634s ago: executing program 6 (id=11567): ioctl$sock_SIOCGIFINDEX(0xffffffffffffffff, 0x8933, &(0x7f00000002c0)={'macvtap0\x00', 0x0}) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000b00)=ANY=[@ANYBLOB="1800000000000000003142346454ad000000001d0000181100"/34, @ANYRES32, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000100000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0xd, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r2 = bpf$MAP_CREATE(0x0, &(0x7f0000000380)=ANY=[@ANYRESDEC=r0], 0x48) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000400)={{r2, 0xffffffffffffffff}, &(0x7f00000002c0), &(0x7f00000004c0)=r1}, 0x20) r4 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="18000000000d0039000000000000b4a518110000", @ANYRES32=r3], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) r5 = socket$inet_tcp(0x2, 0x1, 0x0) r6 = bpf$MAP_CREATE(0x0, &(0x7f0000000bc0)=ANY=[@ANYBLOB="19000008d2aa0c846c546d000200000000000000", @ANYRES32=0x1, @ANYRESOCT, @ANYRESDEC=r5, @ANYRES32=r4, @ANYRESOCT=r4], 0x48) bpf$MAP_GET_NEXT_KEY(0x2, &(0x7f0000000240)={r6, &(0x7f0000000280), &(0x7f0000000000)=""/3, 0x2}, 0x20) bpf$MAP_GET_NEXT_KEY(0x2, &(0x7f0000000240)={r6, &(0x7f0000000340)="ee3c", &(0x7f0000000000)=""/6, 0x2}, 0x20) bpf$MAP_DELETE_ELEM(0x3, &(0x7f0000000800)={r6, &(0x7f0000000780)}, 0x20) ioctl$sock_SIOCGIFINDEX(r5, 0x8933, &(0x7f0000000180)={'syz_tun\x00', 0x0}) r8 = bpf$PROG_LOAD(0x5, &(0x7f00000002c0)={0xa, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x40f00, 0x0, '\x00', 0x0, @fallback=0x2, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_LINK_CREATE_XDP(0x1c, &(0x7f0000000000)={r8, r7, 0x25, 0x0, @void}, 0x10) syz_emit_ethernet(0xfdef, &(0x7f0000000400)=ANY=[], 0x0) socket$nl_route(0x10, 0x3, 0x0) r9 = socket$inet_tcp(0x2, 0x1, 0x0) setsockopt$IPT_SO_SET_REPLACE(r9, 0x0, 0x40, &(0x7f0000000640)=@nat={'nat\x00', 0x670, 0x5, 0x448, 0x228, 0x0, 0xfeffffff, 0x100, 0x2f8, 0x3b0, 0x3b0, 0xffffffff, 0x3b0, 0x3b0, 0x5, 0x0, {[{{@ip={@private=0xa010101, @multicast2, 0x0, 0x0, 'team0\x00', 'caif0\x00', {}, {}, 0x6}, 0x0, 0xd0, 0x100, 0x0, {}, [@common=@inet=@tcp={{0x30}}, @common=@inet=@tcp={{0x30}, {[], [], 0x0, 0x0, 0x2, 0x6}}]}, @common=@inet=@SET2={0x30, 'SET\x00', 0x2, {{0x0, 0x4, 0x6}, {0x0, 0x1}, 0x6, 0x5}}}, {{@uncond, 0x0, 0xf0, 0x128, 0x0, {}, [@common=@set={{0x40}, {{0x0, [0x0, 0x4]}}}, @common=@set={{0x40}, {{0x0, [0x1]}}}]}, @NETMAP={0x38, 'NETMAP\x00', 0x0, {0x1, {0x20, @multicast1, @local, @gre_key, @gre_key=0x200}}}}, {{@ip={@loopback, @rand_addr=0x64010100, 0x0, 0x0, 'lo\x00', 'ip6tnl0\x00'}, 0x0, 0x98, 0xd0, 0x0, {}, [@common=@ttl={{0x28}, {0x0, 0x94}}]}, @NETMAP={0x38, 'NETMAP\x00', 0x0, {0x1, {0x0, @remote, @initdev={0xac, 0x1e, 0x0, 0x0}, @gre_key=0x1, @port=0x4e24}}}}, {{@ip={@local, @broadcast, 0x0, 0x0, 'pim6reg0\x00', 'wlan0\x00', {}, {}, 0x16}, 0x0, 0x70, 0xb8}, @unspec=@SNAT1={0x48, 'SNAT\x00', 0x1, {0x8, @ipv6=@empty, @ipv4=@multicast1, @port, @gre_key}}}], {{'\x00', 0x0, 0x70, 0x98}, {0x28}}}}, 0x4a8) r10 = openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0) r11 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r11, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000006c0)=ANY=[@ANYBLOB="14000000260001032bbd3000fcffbfff01"], 0x14}, 0x1, 0x0, 0x0, 0x448d3}, 0x800) ioctl$TUNSETIFF(r10, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x7101}) r12 = syz_init_net_socket$bt_l2cap(0x1f, 0x2, 0x0) connect$bt_l2cap(r12, &(0x7f0000000080)={0x1f, 0x0, @fixed={'\xaa\xaa\xaa\xaa\xaa', 0x10}, 0x7ff}, 0xe) r13 = syz_init_net_socket$bt_hidp(0x1f, 0x3, 0x6) ioctl$sock_bt_hidp_HIDPCONNADD(r13, 0x400448c8, &(0x7f0000000340)={r12, r12, 0x8, 0x0, 0x0, 0x82, 0x4a, 0x15c2, 0x5886, 0x801, 0x0, 0x8, 'syz0\x00'}) r14 = socket$alg(0x26, 0x5, 0x0) bind$alg(r14, &(0x7f0000000200)={0x26, 'skcipher\x00', 0x0, 0x0, 'cbc-serpent-sse2\x00'}, 0x58) setsockopt$ALG_SET_KEY(r14, 0x117, 0x1, 0x0, 0x0) r15 = accept4(r14, 0x0, 0x0, 0x0) sendmmsg$alg(r15, &(0x7f0000003340)=[{0x0, 0x0, &(0x7f0000000080)=[{&(0x7f0000000000)="81fc968c8e602f12c08090cca64b50fd3da579fea7cfb7a60842e5ed5f28eb92ce85ff67ae4586173191ea11764930ce6cffa1941eb83e19fd7edaacf94dc7424ea3f5b2c3090b2512c5731decbe5706505f71967d78c85e5dfe539b94b505fd017feaa8cb7ff33abfe523165e9245f5", 0x70}, {&(0x7f0000000280)="d1eb57ef3c3b938aec92d6b0f96439092ce50229ef3c76f4a29925611af18ab9f6fb64dbda37de73d2f86599da41f74348d8abd1415cb7c0cc686346f39fad1650a45bb0e2351e84f0e5bd3539e67a87ee7661516e9ba9d5dd3c02a643420de7940c73cf1db26f55947a508b25f78dee121adf8805143e7fae13e8b6c5f129f3774d7bcbd71fb4089652786bc4cc963f17020109b33f367a30a97bf4e040988447941d7020f23b6d7724f9a57b3ba1af970a8a85c167d9798d8d0611f57c87e74739a8513a81e749b70b2e9138d04c30cb22b0b4769ae79a74", 0xd9}, {&(0x7f0000000580)="42c432047f96c651b76abac9cbb014dc1b8b8bd64190897747a0124c8d540b3f0cf6c78a177a43367a7599f4501302753bd6f39f372aec751b87a7a30f1d821e2e2d07f6da2ef399ece31c7add974a84437608424efd53a504713b623364c9e33552530b14e10bfd79a132caf93a2543c5744eb59f5aa7505343e024a04f7f6bd135035f8997eee582a974190cb927df76e299fa79e16da39a8d444146c4cefcd47ca81fe12da0bcb8db65559a4f0b8de782562aaa9994b5ac3a5261c0e1dbc20a9724f39b732a95f283fe6859e541919671eaaddc690d879c7652d6fa1111f71654704ab97759d7b73097b908f94081924fd60641ed34f0", 0xf8}], 0x3, 0x0, 0x0, 0x4040010}], 0x1, 0x41) 2m12.093221814s ago: executing program 34 (id=11567): ioctl$sock_SIOCGIFINDEX(0xffffffffffffffff, 0x8933, &(0x7f00000002c0)={'macvtap0\x00', 0x0}) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000b00)=ANY=[@ANYBLOB="1800000000000000003142346454ad000000001d0000181100"/34, @ANYRES32, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000100000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0xd, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r2 = bpf$MAP_CREATE(0x0, &(0x7f0000000380)=ANY=[@ANYRESDEC=r0], 0x48) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000400)={{r2, 0xffffffffffffffff}, &(0x7f00000002c0), &(0x7f00000004c0)=r1}, 0x20) r4 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="18000000000d0039000000000000b4a518110000", @ANYRES32=r3], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) r5 = socket$inet_tcp(0x2, 0x1, 0x0) r6 = bpf$MAP_CREATE(0x0, &(0x7f0000000bc0)=ANY=[@ANYBLOB="19000008d2aa0c846c546d000200000000000000", @ANYRES32=0x1, @ANYRESOCT, @ANYRESDEC=r5, @ANYRES32=r4, @ANYRESOCT=r4], 0x48) bpf$MAP_GET_NEXT_KEY(0x2, &(0x7f0000000240)={r6, &(0x7f0000000280), &(0x7f0000000000)=""/3, 0x2}, 0x20) bpf$MAP_GET_NEXT_KEY(0x2, &(0x7f0000000240)={r6, &(0x7f0000000340)="ee3c", &(0x7f0000000000)=""/6, 0x2}, 0x20) bpf$MAP_DELETE_ELEM(0x3, &(0x7f0000000800)={r6, &(0x7f0000000780)}, 0x20) ioctl$sock_SIOCGIFINDEX(r5, 0x8933, &(0x7f0000000180)={'syz_tun\x00', 0x0}) r8 = bpf$PROG_LOAD(0x5, &(0x7f00000002c0)={0xa, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x40f00, 0x0, '\x00', 0x0, @fallback=0x2, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_LINK_CREATE_XDP(0x1c, &(0x7f0000000000)={r8, r7, 0x25, 0x0, @void}, 0x10) syz_emit_ethernet(0xfdef, &(0x7f0000000400)=ANY=[], 0x0) socket$nl_route(0x10, 0x3, 0x0) r9 = socket$inet_tcp(0x2, 0x1, 0x0) setsockopt$IPT_SO_SET_REPLACE(r9, 0x0, 0x40, &(0x7f0000000640)=@nat={'nat\x00', 0x670, 0x5, 0x448, 0x228, 0x0, 0xfeffffff, 0x100, 0x2f8, 0x3b0, 0x3b0, 0xffffffff, 0x3b0, 0x3b0, 0x5, 0x0, {[{{@ip={@private=0xa010101, @multicast2, 0x0, 0x0, 'team0\x00', 'caif0\x00', {}, {}, 0x6}, 0x0, 0xd0, 0x100, 0x0, {}, [@common=@inet=@tcp={{0x30}}, @common=@inet=@tcp={{0x30}, {[], [], 0x0, 0x0, 0x2, 0x6}}]}, @common=@inet=@SET2={0x30, 'SET\x00', 0x2, {{0x0, 0x4, 0x6}, {0x0, 0x1}, 0x6, 0x5}}}, {{@uncond, 0x0, 0xf0, 0x128, 0x0, {}, [@common=@set={{0x40}, {{0x0, [0x0, 0x4]}}}, @common=@set={{0x40}, {{0x0, [0x1]}}}]}, @NETMAP={0x38, 'NETMAP\x00', 0x0, {0x1, {0x20, @multicast1, @local, @gre_key, @gre_key=0x200}}}}, {{@ip={@loopback, @rand_addr=0x64010100, 0x0, 0x0, 'lo\x00', 'ip6tnl0\x00'}, 0x0, 0x98, 0xd0, 0x0, {}, [@common=@ttl={{0x28}, {0x0, 0x94}}]}, @NETMAP={0x38, 'NETMAP\x00', 0x0, {0x1, {0x0, @remote, @initdev={0xac, 0x1e, 0x0, 0x0}, @gre_key=0x1, @port=0x4e24}}}}, {{@ip={@local, @broadcast, 0x0, 0x0, 'pim6reg0\x00', 'wlan0\x00', {}, {}, 0x16}, 0x0, 0x70, 0xb8}, @unspec=@SNAT1={0x48, 'SNAT\x00', 0x1, {0x8, @ipv6=@empty, @ipv4=@multicast1, @port, @gre_key}}}], {{'\x00', 0x0, 0x70, 0x98}, {0x28}}}}, 0x4a8) r10 = openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0) r11 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r11, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000006c0)=ANY=[@ANYBLOB="14000000260001032bbd3000fcffbfff01"], 0x14}, 0x1, 0x0, 0x0, 0x448d3}, 0x800) ioctl$TUNSETIFF(r10, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x7101}) r12 = syz_init_net_socket$bt_l2cap(0x1f, 0x2, 0x0) connect$bt_l2cap(r12, &(0x7f0000000080)={0x1f, 0x0, @fixed={'\xaa\xaa\xaa\xaa\xaa', 0x10}, 0x7ff}, 0xe) r13 = syz_init_net_socket$bt_hidp(0x1f, 0x3, 0x6) ioctl$sock_bt_hidp_HIDPCONNADD(r13, 0x400448c8, &(0x7f0000000340)={r12, r12, 0x8, 0x0, 0x0, 0x82, 0x4a, 0x15c2, 0x5886, 0x801, 0x0, 0x8, 'syz0\x00'}) r14 = socket$alg(0x26, 0x5, 0x0) bind$alg(r14, &(0x7f0000000200)={0x26, 'skcipher\x00', 0x0, 0x0, 'cbc-serpent-sse2\x00'}, 0x58) setsockopt$ALG_SET_KEY(r14, 0x117, 0x1, 0x0, 0x0) r15 = accept4(r14, 0x0, 0x0, 0x0) sendmmsg$alg(r15, &(0x7f0000003340)=[{0x0, 0x0, &(0x7f0000000080)=[{&(0x7f0000000000)="81fc968c8e602f12c08090cca64b50fd3da579fea7cfb7a60842e5ed5f28eb92ce85ff67ae4586173191ea11764930ce6cffa1941eb83e19fd7edaacf94dc7424ea3f5b2c3090b2512c5731decbe5706505f71967d78c85e5dfe539b94b505fd017feaa8cb7ff33abfe523165e9245f5", 0x70}, {&(0x7f0000000280)="d1eb57ef3c3b938aec92d6b0f96439092ce50229ef3c76f4a29925611af18ab9f6fb64dbda37de73d2f86599da41f74348d8abd1415cb7c0cc686346f39fad1650a45bb0e2351e84f0e5bd3539e67a87ee7661516e9ba9d5dd3c02a643420de7940c73cf1db26f55947a508b25f78dee121adf8805143e7fae13e8b6c5f129f3774d7bcbd71fb4089652786bc4cc963f17020109b33f367a30a97bf4e040988447941d7020f23b6d7724f9a57b3ba1af970a8a85c167d9798d8d0611f57c87e74739a8513a81e749b70b2e9138d04c30cb22b0b4769ae79a74", 0xd9}, {&(0x7f0000000580)="42c432047f96c651b76abac9cbb014dc1b8b8bd64190897747a0124c8d540b3f0cf6c78a177a43367a7599f4501302753bd6f39f372aec751b87a7a30f1d821e2e2d07f6da2ef399ece31c7add974a84437608424efd53a504713b623364c9e33552530b14e10bfd79a132caf93a2543c5744eb59f5aa7505343e024a04f7f6bd135035f8997eee582a974190cb927df76e299fa79e16da39a8d444146c4cefcd47ca81fe12da0bcb8db65559a4f0b8de782562aaa9994b5ac3a5261c0e1dbc20a9724f39b732a95f283fe6859e541919671eaaddc690d879c7652d6fa1111f71654704ab97759d7b73097b908f94081924fd60641ed34f0", 0xf8}], 0x3, 0x0, 0x0, 0x4040010}], 0x1, 0x41) 4.242603065s ago: executing program 5 (id=12629): recvmsg(0xffffffffffffffff, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000000140)=[{0x0}], 0x1}, 0x0) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000040)=@newqdisc={0x24, 0x24, 0x8, 0x70bd2a, 0x0, {0x0, 0x0, 0x0, 0x0, {0x5, 0x10}, {0xffff, 0xffff}, {0xfff3, 0x6}}}, 0x24}}, 0x8040) r0 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000140)={&(0x7f00000004c0)=ANY=[@ANYBLOB="740000001000010400"/20, @ANYRES32=0x0, @ANYBLOB="2b030040000000004c0012800b00010067656e65766500003c0002800800050001000000140007000000000000000005000000000000000108000f"], 0x74}}, 0x0) sendmmsg(r0, &(0x7f00000002c0), 0x40000000000009f, 0x0) r1 = accept4$tipc(0xffffffffffffffff, &(0x7f0000000000)=@id, &(0x7f00000000c0)=0x10, 0x0) getsockopt$TIPC_SOCK_RECVQ_DEPTH(r1, 0x10f, 0x84, &(0x7f0000000100), &(0x7f0000000180)=0x4) 4.071075716s ago: executing program 5 (id=12631): r0 = socket$inet_udp(0x2, 0x2, 0x0) bind$inet(r0, 0x0, 0x0) connect$inet(r0, &(0x7f0000000480)={0x2, 0x4, @multicast2}, 0x10) sendmmsg(r0, &(0x7f0000007fc0), 0x800001d, 0x0) setsockopt$IP_VS_SO_SET_ADD(r0, 0x0, 0x482, &(0x7f0000000380)={0x4, @remote, 0x4e24, 0x2, 'sh\x00', 0x1, 0x100, 0x51}, 0x2c) socketpair$nbd(0x1, 0x1, 0x0, &(0x7f00000003c0)={0xffffffffffffffff, 0xffffffffffffffff}) syz_genetlink_get_family_id$tipc(&(0x7f0000000040), 0xffffffffffffffff) openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='memory.events\x00', 0x275a, 0x0) socket$nl_netfilter(0x10, 0x3, 0xc) syz_init_net_socket$nl_rdma(0x10, 0x3, 0x10) syz_init_net_socket$rose(0xb, 0x5, 0x0) r2 = syz_init_net_socket$ax25(0x3, 0x5, 0x31) ioctl$SIOCAX25NOUID(r2, 0x89e3, 0x0) socket$nl_route(0x10, 0x3, 0x0) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000680)={0x10, 0x4, &(0x7f0000000380)=ANY=[], &(0x7f00000000c0)='GPL\x00', 0x0, 0x0, 0x0, 0x41000}, 0x94) epoll_create1(0x80000) r3 = socket$nl_route(0x10, 0x3, 0x0) setsockopt$netlink_NETLINK_NO_ENOBUFS(r3, 0x10e, 0xc, &(0x7f0000000340)=0x6, 0x4) sendmsg$nl_route(r3, &(0x7f0000000100)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000000)=ANY=[@ANYBLOB="240000001a0001000000ff7f0000000080000000", @ANYRES32=0x0, @ANYBLOB='\x00\x00\x00\x00\b\x00', @ANYRES32=r3], 0x24}}, 0x0) ioctl$SIOCSIFHWADDR(r1, 0x8923, &(0x7f00000000c0)={'bond_slave_0\x00', @random="013301300108"}) r4 = socket$inet_mptcp(0x2, 0x1, 0x106) setsockopt$inet_tcp_int(r4, 0x6, 0x19, &(0x7f00000001c0)=0x1, 0x4) bind$inet(r4, &(0x7f0000000100)={0x2, 0x4e24, @loopback}, 0x10) r5 = socket$inet(0x2, 0x4000000000000001, 0x0) bind$inet(r5, &(0x7f0000000080)={0x2, 0x4e23, @local}, 0x10) setsockopt$SO_ATTACH_FILTER(r5, 0x1, 0x1a, &(0x7f0000000000)={0x1, &(0x7f0000000280)=[{0x6, 0xfa, 0x0, 0xa4}]}, 0x10) sendto$inet(r5, 0x0, 0x0, 0x200007fd, &(0x7f0000e68000)={0x2, 0x4e23, @local}, 0x10) sendmmsg$inet(r5, &(0x7f00000001c0)=[{{0x0, 0x0, &(0x7f0000000200)=[{&(0x7f00000004c0)="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", 0x14e}], 0x1}}], 0x1, 0x4e891) getsockopt$inet_tcp_TCP_ZEROCOPY_RECEIVE(r4, 0x6, 0x23, &(0x7f0000000180)={&(0x7f0000ffb000/0x3000)=nil, 0x3000, 0x0, 0x0, 0x0, &(0x7f0000000740)=""/4096, 0x103d, 0x0, 0x0}, &(0x7f0000000240)=0x40) sendmmsg$inet(r4, &(0x7f0000004980)=[{{&(0x7f0000000000)={0x2, 0x4e24, @loopback}, 0x10, &(0x7f0000000080)=[{&(0x7f0000000280)="5338a3848b25e258a2", 0x9}], 0x1}}], 0x1, 0x20008000) 4.060859718s ago: executing program 7 (id=12632): pipe(&(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) (async) r2 = epoll_create1(0x0) epoll_ctl$EPOLL_CTL_ADD(r2, 0x1, r0, &(0x7f0000000140)={0x1}) (async) vmsplice(r1, &(0x7f0000000300)=[{&(0x7f0000000a80)="86", 0x1}], 0x1, 0x8) (async) write$cgroup_devices(r1, &(0x7f00000001c0)={'b', ' *:* ', 'wm\x00'}, 0x9) (async) r3 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r3, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000500)={&(0x7f00000003c0)=@newlink={0x108, 0x10, 0x439, 0x70bd2b, 0xffffffea, {0x0, 0x0, 0xe403, 0x0, 0x13, 0x618c4}, [@IFLA_LINKINFO={0xe8, 0x12, 0x0, 0x1, @vti={{0x8}, {0xdc, 0x2, 0x0, 0x1, [@IFLA_VTI_LOCAL={0x8, 0x4, @dev={0xac, 0x14, 0x14, 0x27}}, @vti_common_policy=[@IFLA_VTI_LINK={0x8}, @IFLA_VTI_LINK={0x8}, @IFLA_VTI_LINK={0x8}, @IFLA_VTI_FWMARK={0x8, 0x6, 0x10000}, @IFLA_VTI_FWMARK={0x8, 0x6, 0x9}], @IFLA_VTI_LOCAL={0x8, 0x4, @dev={0xac, 0x14, 0x14, 0x39}}, @vti_common_policy=[@IFLA_VTI_LINK={0x8}, @IFLA_VTI_FWMARK={0x8, 0x6, 0x3}, @IFLA_VTI_OKEY={0x8, 0x3, 0xd}, @IFLA_VTI_LINK={0x8}, @IFLA_VTI_FWMARK={0x0, 0x6, 0x80000001}, @IFLA_VTI_LINK={0x8}, @IFLA_VTI_IKEY={0x8, 0x2, 0x5}, @IFLA_VTI_OKEY={0x8, 0x3, 0x62}], @vti_common_policy=[@IFLA_VTI_OKEY={0x8, 0x3, 0x80000000}, @IFLA_VTI_OKEY={0x8, 0x3, 0x1}, @IFLA_VTI_FWMARK={0x8}, @IFLA_VTI_IKEY={0x8, 0x2, 0x7}, @IFLA_VTI_OKEY={0x8, 0x3, 0x7ff}, @IFLA_VTI_FWMARK={0x8, 0x6, 0x2}, @IFLA_VTI_FWMARK={0x8, 0x6, 0x1}, @IFLA_VTI_LINK={0x8}], @IFLA_VTI_REMOTE={0x8, 0x5, @rand_addr=0x64010101}, @IFLA_VTI_REMOTE={0x8, 0x5, @rand_addr=0x64010102}, @IFLA_VTI_LOCAL={0x8, 0x4, @local}, @IFLA_VTI_LOCAL={0x8, 0x4, @dev={0xac, 0x14, 0x14, 0x1f}}]}}}]}, 0x108}, 0x1, 0x0, 0x0, 0x8000}, 0x2000c044) 3.96515075s ago: executing program 7 (id=12634): r0 = socket(0x10, 0x3, 0x0) setsockopt$netlink_NETLINK_TX_RING(r0, 0x10e, 0xc, &(0x7f0000000140)={0x6}, 0x10) r1 = socket$rds(0x15, 0x5, 0x0) r2 = socket(0x40000000015, 0x5, 0x0) connect$inet(r2, &(0x7f0000000080)={0x2, 0x0, @loopback}, 0x10) bind$inet(r2, &(0x7f0000000340)={0x2, 0x0, @loopback}, 0x10) sendmsg$inet(r2, &(0x7f0000001800)={0x0, 0x0, 0x0}, 0x8084) ioctl$F2FS_IOC_MOVE_RANGE(r1, 0xc020f509, &(0x7f0000001440)={r0, 0x0, 0x3, 0xfffffffffffffffc}) getsockopt$inet_sctp6_SCTP_LOCAL_AUTH_CHUNKS(r3, 0x84, 0x1b, &(0x7f00000015c0)={0x0, 0xbc, "6d3fdf55381edabda10a77970c703595dc4dad66f05a5a6f9bb9074b2f072eabaeacf0f6188594c053086a53d42ec478c299d7931a0788799d5383e1b7d3e3440ab7918ae0384b29c7edab1fdfe975d70682f3c2d67003c2ba9149d04a226fb5f24b83aaf80876298a0da063b35a6c23b9c4a98fa4d40a8165e6eb15d19afb7657a75b8a56805faec93a17bd01bddea511ac9f8bc373ca1818456f3a414f54ee7d0bcebaedc2a61afb304b3c4d737895a26678fb656e3f85ff3c0faf"}, &(0x7f00000016c0)=0xc4) getsockopt$inet_sctp6_SCTP_ENABLE_STREAM_RESET(r2, 0x84, 0x76, &(0x7f0000001700)={r4, 0x22}, &(0x7f0000001740)=0x8) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000001500)={0x18, 0xb, &(0x7f0000001780)=@framed={{0x18, 0x0, 0x0, 0x0, 0x6, 0x0, 0x0, 0x0, 0x2}, [@printk={@llx, {}, {}, {}, {}, {0x7, 0x0, 0xb, 0x3, 0x0, 0x0, 0x5}}]}, &(0x7f00000001c0)='syzkaller\x00', 0x0, 0x1000, &(0x7f0000000440)=""/4096, 0x41100, 0x40, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, &(0x7f0000000240)={0x6, 0x2}, 0x8, 0x10, &(0x7f0000000300)={0x0, 0xd, 0x9, 0x5}, 0x10, 0x0, 0x0, 0x1, &(0x7f0000000100)=[0x1, r3], &(0x7f00000014c0)=[{0x4, 0x4, 0xd, 0x3}], 0x10, 0x9}, 0x94) r5 = socket$packet(0x11, 0x2, 0x300) setsockopt$packet_rx_ring(r5, 0x107, 0x5, &(0x7f00000000c0)=@req={0x8000, 0xb4f, 0x300, 0x1daf6}, 0x10) mmap(&(0x7f0000001000/0xc00000)=nil, 0xc00000, 0x2000004, 0x3b071, 0xffffffffffffffff, 0x0) setsockopt$packet_int(r5, 0x107, 0xa, &(0x7f00000014c0), 0x4) r6 = socket$inet_smc(0x2b, 0x1, 0x0) sendto$inet(r6, &(0x7f0000000380)="b9c478b05d5e064f786056914d61e82d7582a9399946c6f00ea37e56e9429b858502474fc554299a442b77b49302b47ae9d3584f3d1585fd490c7fb2062c56227bc55b0b7720f8751d7e7a882d68b98a9a5956a772f5e4e5c595340c842a3a28f9ec709ed3da3bd2d4dcb2b1de943b", 0x6f, 0x20000081, &(0x7f0000000040)={0x2, 0x4e22, @remote}, 0x10) sendmsg$NFNL_MSG_CTHELPER_DEL(0xffffffffffffffff, 0x0, 0x4) write(r0, &(0x7f0000000000)="1c0000001a005f0214f9f407000904001f000000ff02000200000000", 0x1c) r7 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r7, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000180)=ANY=[@ANYBLOB="280000001000010002000000000000", @ANYRES32=0x0, @ANYBLOB="000000fd0001040008001b"], 0x28}}, 0x0) sendmmsg$inet6(0xffffffffffffffff, 0x0, 0x0, 0x0) r8 = socket$kcm(0x10, 0x2, 0x0) ioctl$sock_SIOCGIFVLAN_ADD_VLAN_CMD(r8, 0x8982, &(0x7f0000000400)={0x0, 'batadv0\x00', {0x5}}) socket$inet6_sctp(0xa, 0x5, 0x84) socket$inet6_sctp(0xa, 0x5, 0x84) socket(0x2, 0x80805, 0x0) r9 = socket$nl_route(0x10, 0x3, 0x0) ioctl$ifreq_SIOCGIFINDEX_batadv_mesh(0xffffffffffffffff, 0x8933, 0x0) sendmsg$nl_route(r9, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000340)={&(0x7f0000001480)=ANY=[@ANYBLOB="3c0000001300010004000000000000", @ANYRESDEC=r0, @ANYBLOB='\t\x00\x00\x00\x00\x00', @ANYRES32, @ANYBLOB="1400350064756d6d7930"], 0x3c}, 0x1, 0x0, 0x0, 0x8004010}, 0x0) 3.855033534s ago: executing program 5 (id=12636): r0 = socket$inet6_sctp(0xa, 0x1, 0x84) r1 = socket$netlink(0x10, 0x3, 0x0) getsockname$packet(0xffffffffffffffff, &(0x7f00000002c0)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, 0x0) sendmsg$nl_route(r1, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000008c0)=ANY=[@ANYBLOB], 0x48}}, 0x0) sendmsg$nl_route_sched(r1, 0x0, 0x4000800) sendmsg$nl_route_sched(r1, 0x0, 0x0) getsockopt$inet_sctp_SCTP_ENABLE_STREAM_RESET(0xffffffffffffffff, 0x84, 0x76, &(0x7f0000000000)={0x0, 0x5}, &(0x7f0000000040)=0x8) getsockopt$inet_sctp6_SCTP_STATUS(r0, 0x84, 0xe, 0x0, 0x0) r2 = socket(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r2, 0x0, 0x24048894) r3 = socket(0x10, 0x3, 0x0) sendmsg$nl_generic(r3, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000080)={0x14, 0x12, 0xa01, 0x1000004, 0x0, {0x80}}, 0x14}}, 0x0) r4 = syz_init_net_socket$nl_rdma(0x10, 0x3, 0x10) syz_genetlink_get_family_id$smc(&(0x7f0000000240), 0xffffffffffffffff) sendmsg$SMC_PNETID_DEL(r4, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000400)=ANY=[], 0x4c}, 0x1, 0x40030000000000, 0x0, 0x40084}, 0x0) syz_genetlink_get_family_id$nl80211(&(0x7f0000000080), 0xffffffffffffffff) r5 = socket$nl_generic(0x10, 0x3, 0x10) r6 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000a00), 0xffffffffffffffff) r7 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX_80211(r7, 0x8933, &(0x7f0000000040)={'wlan0\x00', 0x0}) sendmsg$NL80211_CMD_SET_COALESCE(r5, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000b00)={&(0x7f0000000280)=ANY=[@ANYBLOB='$\x00\x00\x00', @ANYRES16=r6, @ANYBLOB="010000004000ffffffff0200000008000300", @ANYRES32=r8, @ANYBLOB="080002002e"], 0x24}, 0x1, 0x6c00, 0x0, 0x4d080}, 0x0) socket$nl_generic(0x10, 0x3, 0x10) r9 = socket$nl_generic(0x10, 0x3, 0x10) r10 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000080), 0xffffffffffffffff) sendmsg$NL80211_CMD_REMAIN_ON_CHANNEL(r9, &(0x7f0000000480)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000100)={0x20, r10, 0x9c3fa077fa966179, 0xfffffffd, 0x0, {{0x7e}, {@void, @val={0xc, 0x99, {0x916c, 0x14}}}}}, 0x20}}, 0x4000054) sendmsg$NL80211_CMD_RELOAD_REGDB(r9, &(0x7f00000006c0)={0x0, 0x0, &(0x7f0000000440)={&(0x7f0000000340)={0x14, r10, 0x1, 0x70bd2d, 0x25dfdbfe}, 0x14}, 0x1, 0x0, 0x0, 0x20000000}, 0x20008004) socket$nl_generic(0x10, 0x3, 0x10) r11 = socket$unix(0x1, 0x2, 0x0) syz_genetlink_get_family_id$nl80211(&(0x7f00000000c0), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r11, 0x8933, &(0x7f0000000100)={'wlan1\x00'}) 3.058544235s ago: executing program 5 (id=12640): r0 = openat$tun(0xffffffffffffff9c, &(0x7f00000001c0), 0xe8001, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000040)={'syzkaller1\x00', 0x2}) ioctl$TUNSETOFFLOAD(r0, 0x400454c9, 0x10) ioctl$TUNSETLINK(r0, 0x400454cd, 0x300) r1 = socket$netlink(0x10, 0x3, 0x0) r2 = socket$nl_route(0x10, 0x3, 0x0) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000000)={0x6, 0xa, &(0x7f0000000400)=@framed={{}, [@jmp={0x6, 0x0, 0xc, 0x0, 0x0, 0x1, 0x25}, @func={0x85, 0x0, 0x1, 0x0, 0x1}, @exit, @cb_func={0x18, 0x0, 0x4, 0x0, 0x2}, @exit, @call={0x85, 0x0, 0x0, 0x27}]}, &(0x7f0000000100)='GPL\x00', 0x8, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x807}, 0x94) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$sock_SIOCGIFINDEX(r4, 0x8933, &(0x7f0000000000)={'lo\x00', 0x0}) sendmsg$nl_route(r2, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000100)=@ipv6_newaddr={0x48, 0x14, 0x1, 0xfffffffc, 0x0, {0xa, 0x0, 0x0, 0x0, r5}, [@IFA_ADDRESS={0x14, 0x1, @mcast2}, @IFA_FLAGS={0x8, 0x8, 0x402}, @IFA_CACHEINFO={0x14, 0x6, {0x5, 0x7, 0x77eb488a, 0x5}}]}, 0x48}}, 0x0) r6 = socket$inet6_mptcp(0xa, 0x1, 0x106) r7 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r7, 0x8933, &(0x7f0000000100)={'macvtap0\x00', 0x0}) sendmsg$nl_route_sched(r7, &(0x7f00000012c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000140)=@newqdisc={0x44, 0x24, 0x4ee4e6a52ff56541, 0x70bd2a, 0xffffffff, {0x0, 0x0, 0x0, r8, {0x0, 0xfff1}, {0xffff, 0xffff}}, [@qdisc_kind_options=@q_hfsc={{0x9}, {0x14, 0x2, @TCA_HFSC_FSC={0x10, 0x2, {0xd, 0xfffffffb, 0x7fffffff}}}}]}, 0x44}, 0x1, 0x0, 0x0, 0x4000000}, 0x20040084) sendmsg$nl_route_sched(r7, &(0x7f0000001200)={0x0, 0x0, &(0x7f0000000280)={&(0x7f00000005c0)=@newqdisc={0x48, 0x28, 0x4ee4e6a52ff56541, 0x5001, 0xfffffdfc, {0x0, 0x0, 0x0, r8, {0xfff3}, {0x0, 0xfff1}, {0x2, 0x8}}, [@qdisc_kind_options=@q_etf={{0x8}, {0x14, 0x2, @TCA_ETF_PARMS={0x10, 0x1, {0xffffff01, 0xb7c56ad10922c48a, 0x1}}}}, @TCA_RATE={0x6, 0x5, {0x0, 0x11}}]}, 0x48}, 0x1, 0x0, 0x0, 0x40098}, 0x4000000) getsockopt$IP_SET_OP_GET_FNAME(r6, 0x1, 0x53, &(0x7f00000000c0)={0x8, 0x7, 0x0, 'syz2\x00'}, &(0x7f00000001c0)=0x2c) socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r1, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000340)=ANY=[@ANYBLOB="300000002000010026bd7000070000000014000100", @ANYRES8=r5, @ANYRES32=r3, @ANYRES32=r2], 0x30}, 0x1, 0x0, 0x0, 0x40814}, 0x4000004) r9 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_TEST(r9, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000180)=ANY=[@ANYBLOB="1400"/20], 0x14}, 0x1, 0x0, 0x0, 0x48}, 0x44000) sendmsg$nl_route(0xffffffffffffffff, 0x0, 0x4000) bpf$ENABLE_STATS(0x20, &(0x7f0000000280), 0x4) sendmsg$nl_route(r1, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000000)=ANY=[@ANYRESHEX=r9], 0x5c}, 0x1, 0x0, 0x0, 0x20000004}, 0x0) 3.055416148s ago: executing program 5 (id=12644): r0 = openat$6lowpan_control(0xffffffffffffff9c, &(0x7f0000000040), 0x2, 0x0) sendmsg$NFT_BATCH(0xffffffffffffffff, 0x0, 0x0) unshare(0x6a040000) bpf$MAP_CREATE(0x0, 0x0, 0x48) bpf$PROG_LOAD(0x5, 0x0, 0x0) bpf$PROG_LOAD(0x5, 0x0, 0x0) r1 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r1, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000007c0)={{0x14}, [@NFT_MSG_NEWTABLE={0x20, 0x0, 0xa, 0x401, 0x0, 0x0, {0x1, 0x0, 0x8003}, [@NFTA_TABLE_NAME={0x9, 0x1, 'syz0\x00'}]}, @NFT_MSG_NEWCHAIN={0x2c, 0x3, 0xa, 0x101, 0x0, 0x0, {0x1}, [@NFTA_CHAIN_TABLE={0x9, 0x1, 'syz0\x00'}, @NFTA_CHAIN_NAME={0x9, 0x3, 'syz2\x00'}]}, @NFT_MSG_NEWRULE={0x58, 0x6, 0xa, 0x401, 0x0, 0x0, {0x1}, [@NFTA_RULE_CHAIN_ID={0x8}, @NFTA_RULE_EXPRESSIONS={0x30, 0x4, 0x0, 0x1, [{0x2c, 0x1, 0x0, 0x1, @exthdr={{0xb}, @val={0x1c, 0x2, 0x0, 0x1, [@NFTA_EXTHDR_DREG={0x8, 0x1, 0x1, 0x0, 0xf}, @NFTA_EXTHDR_OFFSET={0x8}, @NFTA_EXTHDR_TYPE={0x5, 0x2, 0x7}]}}}]}, @NFTA_RULE_TABLE={0x9, 0x1, 'syz0\x00'}]}], {0x14, 0x11, 0x1, 0x0, 0x0, {0x7}}}, 0xcc}}, 0x0) bpf$BPF_GET_PROG_INFO(0xa, 0x0, 0x0) r2 = socket(0xa, 0x3, 0xff) r3 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r4 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r5 = syz_genetlink_get_family_id$nl802154(&(0x7f0000000080), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_802154(r3, 0x8933, &(0x7f0000000340)={'wpan0\x00', 0x0}) sendmsg$NL802154_CMD_DEL_SEC_LEVEL(r4, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000000)={0x38, r5, 0x1, 0x70bd25, 0x25dfdbfd, {}, [@NL802154_ATTR_SEC_LEVEL={0x1c, 0x2d, 0x0, 0x1, [@NL802154_SECLEVEL_ATTR_DEV_OVERRIDE={0x5}, @NL802154_SECLEVEL_ATTR_LEVELS={0x5, 0x1, 0x1}, @NL802154_SECLEVEL_ATTR_FRAME={0x8, 0x2, 0x3}]}, @NL802154_ATTR_IFINDEX={0x8, 0x3, r6}]}, 0x38}, 0x1, 0x0, 0x0, 0x20000000}, 0x8000) r7 = socket(0x2b, 0x1, 0x0) unshare(0x2c020400) ppoll(&(0x7f0000000280)=[{r7, 0xa0}], 0x1, 0x0, 0x0, 0x0) connect$inet6(r2, &(0x7f00000000c0)={0xa, 0x4e22, 0x2, @loopback, 0x6}, 0x1c) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000140)={0xd, 0x4, &(0x7f0000000000)=ANY=[@ANYBLOB="1800000000af000000009500000000000000"], &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x24}, 0x80) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000000)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000500)=ANY=[@ANYBLOB="2400000068000100020000000200010000000400000060eb9497e1ef143ff9a0e54e2860e9bb1403005d02487d0d82d01557ce56295ad1"], 0x24}, 0x1, 0x0, 0x0, 0x24008000}, 0x4000) r8 = epoll_create1(0x80000) r9 = epoll_create1(0x0) socket$rds(0x15, 0x5, 0x0) sendmsg$IEEE802154_LLSEC_SETPARAMS(0xffffffffffffffff, &(0x7f0000000380)={&(0x7f0000000100)={0x10, 0x0, 0x0, 0x40}, 0xc, &(0x7f0000000240)={&(0x7f0000000200)={0x40, 0x0, 0x814, 0x70bd25, 0x25dfdbfe, {}, [@IEEE802154_ATTR_PAN_ID={0x6, 0x6, 0x3}, @IEEE802154_ATTR_LLSEC_KEY_SOURCE_EXTENDED={0xc, 0x2d, {0xaaaaaaaaaaaa0002}}, @IEEE802154_ATTR_SHORT_ADDR={0x6, 0x4, 0xaaa3}, @IEEE802154_ATTR_DEV_INDEX={0x8, 0x2, r6}, @IEEE802154_ATTR_PAN_ID={0x6, 0x6, 0x3}]}, 0x40}, 0x1, 0x0, 0x0, 0x10}, 0x894) socket$inet6_mptcp(0xa, 0x1, 0x106) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000fc0)) pselect6(0x40, &(0x7f00000001c0)={0x0, 0x0, 0x3, 0xfffffffffffffffd}, 0x0, &(0x7f00000002c0)={0x3ff, 0x0, 0x0, 0x9, 0x0, 0x0, 0x7fffffff}, 0x0, 0x0) epoll_ctl$EPOLL_CTL_ADD(r8, 0x1, r0, &(0x7f00000001c0)={0x10000004}) epoll_ctl$EPOLL_CTL_ADD(r9, 0x1, r8, &(0x7f0000000000)={0xa0000001}) 2.403390241s ago: executing program 7 (id=12647): r0 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) unshare(0x24020400) syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r1 = socket$xdp(0x2c, 0x3, 0x0) setsockopt$XDP_UMEM_REG(r1, 0x11b, 0x4, &(0x7f00000000c0)={&(0x7f0000000000)=""/5, 0x200000, 0x1000}, 0x20) r2 = socket$netlink(0x10, 0x3, 0x400000000000004) writev(r2, &(0x7f0000000140)=[{&(0x7f0000000240)="480000001400190d09004beafd0d8c562c84ed7a80ffe05e959126dda8900db462060f000000000000a2bc5603ca00000f7f8900000ec00000000101ff0000000309ff5bffff00c7", 0x48}], 0x1) syz_genetlink_get_family_id$netlbl_mgmt(&(0x7f0000000040), 0xffffffffffffffff) r3 = socket$inet6_sctp(0xa, 0x5, 0x84) shutdown(r3, 0x0) getsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX3(r3, 0x84, 0x6f, &(0x7f0000000000)={0x0, 0x10, &(0x7f0000000100)=[@in={0x2, 0x4e24, @initdev={0xac, 0x1e, 0x0, 0x0}}]}, &(0x7f0000000180)=0x10) r4 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='memory.events\x00', 0x275a, 0x0) write$cgroup_subtree(r4, &(0x7f0000000000)=ANY=[], 0x10448) mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x2000001, 0x12, r4, 0x0) r5 = socket$inet6_sctp(0xa, 0x5, 0x84) setsockopt(r5, 0x84, 0x80, &(0x7f0000000000)='\x00\x00\x00\x00\t\x00\x00\x00', 0x8) r6 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$netlbl_mgmt(&(0x7f0000000180), r6) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f00000021c0)={0x0, 0x0, 0x0}, 0x0) r7 = syz_genetlink_get_family_id$nfc(&(0x7f0000000600), r6) ioctl$IOCTL_GET_NCIDEV_IDX(0xffffffffffffffff, 0x0, &(0x7f0000000640)=0x0) sendmsg$NFC_CMD_LLC_SDREQ(r6, &(0x7f0000000700)={&(0x7f0000000140)={0x10, 0x0, 0x0, 0x2000000}, 0xc, &(0x7f00000006c0)={&(0x7f0000000680)={0x1c, r7, 0x1, 0x70bd26, 0x25dfdbfb, {}, [@NFC_ATTR_DEVICE_INDEX={0x8, 0x1, r8}]}, 0x1c}, 0x1, 0x0, 0x0, 0x90}, 0x20044011) bpf$BPF_GET_PROG_INFO(0xf, &(0x7f0000000340)={0xffffffffffffffff, 0xe0, &(0x7f0000000500)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, ""/16, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8, 0x0, 0x0}}, 0x10) r9 = socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$ethtool(&(0x7f0000000240), 0xffffffffffffffff) r10 = socket$inet6_sctp(0xa, 0x1, 0x84) setsockopt(r10, 0x84, 0x81, &(0x7f00000002c0)="1a00000002000000", 0x8) setsockopt$inet_sctp6_SCTP_HMAC_IDENT(r10, 0x84, 0x16, &(0x7f00000000c0)=ANY=[@ANYBLOB="0100000003"], 0xa) sendmsg$ETHTOOL_MSG_LINKINFO_SET(r9, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000280)={&(0x7f00000001c0)=ANY=[@ANYBLOB='D\x00\x00\x00', @ANYRESDEC=r6, @ANYRES64=r0], 0x44}, 0x1, 0x0, 0x0, 0x20009085}, 0x40040c0) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000002c0)={0x18, 0xd, &(0x7f0000000080)=ANY=[@ANYBLOB="1802000000000000000000000000000085100000010000009500000000000000180100002020732500000000002020207b1af8ff00000000db1154b5f1000000070100000700ffff9702000008000000b703000000000028850000009500000095"], &(0x7f0000000000)='syzkaller\x00', 0x1, 0x0, 0x0, 0x0, 0xa}, 0x94) 2.36737816s ago: executing program 3 (id=12648): r0 = openat$ppp(0xffffffffffffff9c, &(0x7f0000000040), 0x161042, 0x0) ioctl$PPPIOCNEWUNIT(r0, 0xc004743e, &(0x7f00000001c0)=0x3) ioctl$PPPIOCSPASS(r0, 0x40107447, &(0x7f0000000080)={0x2, &(0x7f0000000100)=[{0x50, 0xff, 0x0, 0x8}, {0x6, 0x60, 0x6}]}) (async) r1 = syz_init_net_socket$bt_l2cap(0x1f, 0x1, 0x3) ioctl$sock_ifreq(r1, 0x89f0, &(0x7f0000000180)={'bond0\x00', @ifru_names='sit0\x00'}) (async) ioctl$PPPIOCSDEBUG(r0, 0x40047440, &(0x7f00000000c0)=0x7) (async) write$ppp(r0, &(0x7f00000008c0)="00003be032c6a4", 0x7) (async) r2 = socket$nl_generic(0x10, 0x3, 0x10) (async) r3 = socket(0x10, 0x3, 0x4) sendmsg$nl_route_sched(r3, &(0x7f0000000000)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f0000000340)=@newqdisc={0x68, 0x14, 0xf0b, 0x70bd26, 0x0, {0x2, 0x0, 0x0, 0x0, {0x7, 0xa}, {0x1, 0xffe0}, {0xffe0, 0xa}}, [@TCA_STAB={0x44, 0x8, 0x0, 0x1, [{{0x1c, 0x1, {0xd4, 0x6, 0x200, 0xc, 0x1, 0x40000002, 0x7e}}, {0x4}}, {{0x1c, 0x1, {0x0, 0x18, 0x7, 0xf, 0x0, 0x4, 0x9}}, {0x4}}]}]}, 0x68}, 0x1, 0x0, 0x0, 0x10000000}, 0x8080) (async) sendmsg$nl_generic(r2, &(0x7f0000000000)={0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x2004c010}, 0x4080) (async) r4 = socket(0x2, 0x80805, 0x0) (async) r5 = socket$nl_generic(0x10, 0x3, 0x10) bpf$MAP_CREATE(0x0, &(0x7f0000000400)=ANY=[@ANYRES32=0x1, @ANYBLOB='\x00'/20, @ANYRES32=0x0, @ANYRES32], 0x48) (async) sendmsg$nl_generic(r5, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000400)=ANY=[@ANYBLOB="d800000043000701feffffff00000000017c000004004280b80001"], 0xd8}, 0x1, 0x0, 0x0, 0x48815}, 0xc000) (async) setsockopt$inet_sctp6_SCTP_STREAM_SCHEDULER_VALUE(r4, 0x84, 0x82, &(0x7f0000000300)={0x0, 0x10, 0x4}, 0x8) sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000100)=ANY=[@ANYRESOCT=0x0], 0x5c}, 0x1, 0x0, 0x0, 0x20004095}, 0x20004024) 1.911241015s ago: executing program 3 (id=12652): r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000100), 0x0, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x2}) r1 = socket$netlink(0x10, 0x3, 0x0) r2 = socket$nl_route(0x10, 0x3, 0x0) r3 = socket$unix(0x1, 0x1, 0x0) ioctl$sock_SIOCGIFINDEX(r3, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r2, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000180)=@newqdisc={0x48, 0x24, 0x4ee4e6a52ff56541, 0x70bd26, 0x25dfdbff, {0x0, 0x0, 0x0, r4, {0x0, 0xfff1}, {0xffff, 0xffff}}, [@qdisc_kind_options=@q_htb={{0x8}, {0x1c, 0x2, [@TCA_HTB_INIT={0x18, 0x2, {0x3, 0x4, 0x7fffffff}}]}}]}, 0x48}}, 0x20040084) sendmsg$nl_route_sched(r1, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000240)=@newqdisc={0x6c, 0x28, 0x4ee4e6a52ff56541, 0x4001, 0x25dfdbfb, {0x0, 0x0, 0x0, r4, {}, {0xffff, 0xffff}, {0x2, 0x1}}, [@qdisc_kind_options=@q_gred={{0x9}, {0x3c, 0x2, [@TCA_GRED_PARMS={0x38, 0x1, {0x40, 0x6, 0x3, 0x8, 0x6, 0xffffff26, 0x2, 0x80, 0x8, 0x7, 0x15, 0x9d, 0x4, 0x5, 0x7, 0xc5f7}}]}}]}, 0x6c}, 0x1, 0x0, 0x0, 0x200400dc}, 0x0) r5 = socket(0x400000000010, 0x3, 0x0) r6 = socket$unix(0x1, 0x1, 0x0) ioctl$sock_SIOCGIFINDEX(r6, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r5, &(0x7f0000000900)={0x0, 0x0, &(0x7f0000000140)={&(0x7f00000000c0)=@newtfilter={0x3c, 0x2c, 0xd27, 0x70bd28, 0xfffff000, {0x0, 0x0, 0x0, r7, {0xf000, 0xffff}, {}, {0x7}}, [@filter_kind_options=@f_route={{0xa}, {0xc, 0x2, [@TCA_ROUTE4_CLASSID={0x8, 0x1, {0x0, 0xfff1}}]}}]}, 0x3c}, 0x1, 0x0, 0x0, 0x80}, 0x20000800) close(0x3) 1.723659147s ago: executing program 7 (id=12653): socket$nl_generic(0x10, 0x3, 0x10) (async) r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$mptcp(&(0x7f0000005c40), 0xffffffffffffffff) r2 = syz_genetlink_get_family_id$devlink(&(0x7f0000000100), r0) sendmsg$DEVLINK_CMD_SB_POOL_GET(r0, &(0x7f00000001c0)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x1000000}, 0xc, &(0x7f0000000180)={&(0x7f0000000140)={0x40, r2, 0x200, 0x70bd27, 0x25dfdbfd, {}, [{@pci={{0x8}, {0x11}}, {0x8, 0xb, 0xc61a}, {0x6, 0x11, 0x5}}]}, 0x40}, 0x1, 0x0, 0x0, 0x4}, 0x24004090) sendmsg$MPTCP_PM_CMD_GET_ADDR(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000080)=ANY=[@ANYBLOB="1863f173000000", @ANYRES16=r1, @ANYBLOB="fcffffadd4018000000000"], 0x18}, 0x1, 0x0, 0x0, 0x4000}, 0x48005) 1.646885952s ago: executing program 0 (id=12654): r0 = socket$inet_sctp(0x2, 0x5, 0x84) openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='memory.events\x00', 0x275a, 0x0) (async) r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='memory.events\x00', 0x275a, 0x0) openat$6lowpan_enable(0xffffffffffffff9c, &(0x7f0000007540), 0x2, 0x0) (async) r2 = openat$6lowpan_enable(0xffffffffffffff9c, &(0x7f0000007540), 0x2, 0x0) read(r2, &(0x7f00000013c0)=""/155, 0x9b) readv(r2, &(0x7f00000012c0)=[{&(0x7f0000000040)=""/4096, 0x1000}], 0x1) (async) readv(r2, &(0x7f00000012c0)=[{&(0x7f0000000040)=""/4096, 0x1000}], 0x1) write$cgroup_subtree(r1, &(0x7f0000000000)=ANY=[], 0x32600) (async) write$cgroup_subtree(r1, &(0x7f0000000000)=ANY=[], 0x32600) mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x2000001, 0x12, r1, 0x0) (async) mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x2000001, 0x12, r1, 0x0) bpf$MAP_LOOKUP_BATCH(0x18, &(0x7f0000000200)={&(0x7f0000000000)="94f8d479b91556a13b1d363d2d4c58a84b0d344d5c67a25eb43fcbd7ceb11e80910f9847a6f7c553f28b6490850c418ec886e4a98ee4a2fc7ee61be0d3c478d56f8e7f3095837650ce270ba09f429620", &(0x7f0000000140)=""/153, &(0x7f0000000080)="79dedb989b420094f747371d2d05c6081ec6c3949193d57b7c338daa4ad02f577dc74fc01bfe01c5e9a2a437550fd4259ba6913a", &(0x7f00000000c0)="8f17604c829ef795174677906c09bc2f52a72e5e70b5322b08ee617ffb4e631c7f8d05945ee238cffbc82d45caba2a52d99d339561825d", 0x1, r1}, 0x38) unshare(0xc000400) socketpair$unix(0x1, 0x5, 0x0, &(0x7f00000005c0)={0xffffffffffffffff, 0xffffffffffffffff}) getsockopt$sock_buf(r3, 0x1, 0x39, 0xffffffffffffffff, &(0x7f0000000100)) setsockopt$inet_group_source_req(r0, 0x0, 0x2e, &(0x7f0000000240)={0x9, {{0x2, 0x4e23, @multicast1}}, {{0x2, 0x4e20, @private=0xa010101}}}, 0x108) r4 = openat$tun(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) ioctl$TUNSETIFF(r4, 0x400454ca, &(0x7f0000001100)={'veth0_to_bridge\x00', 0x2000}) (async) ioctl$TUNSETIFF(r4, 0x400454ca, &(0x7f0000001100)={'veth0_to_bridge\x00', 0x2000}) r5 = socket(0x400000000010, 0x80000, 0x0) r6 = socket$unix(0x1, 0x5, 0x0) ioctl$sock_SIOCGIFINDEX(r6, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r1, &(0x7f00000012c0)={0x0, 0x0, &(0x7f0000001080)={&(0x7f00000001c0)=@newqdisc={0x24, 0x24, 0x4ee4e6a52ff56541, 0x70bd2a, 0xffffffff, {0x0, 0x0, 0x0, r7, {0x0, 0xffff}, {0xffff, 0xffff}, {0x0, 0xf}}}, 0x24}, 0x1, 0x0, 0x0, 0x4040}, 0x0) sendmsg$nl_route_sched(r5, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000380)={&(0x7f00000025c0)=@newtfilter={0x460, 0x2c, 0x10, 0x70bf24, 0x25dfdbfc, {0x0, 0x0, 0x0, r7, {0xfff3, 0xffe0}, {}, {0x5, 0x8}}, [@filter_kind_options=@f_bpf={{0x8}, {0x434, 0x2, [@TCA_BPF_FLAGS={0x8, 0x8, 0x1}, @TCA_BPF_CLASSID={0x8, 0x3, {0xffff, 0xc}}, @TCA_BPF_FD={0x8, 0x6, r1}, @TCA_BPF_FD={0x8, 0x6, r1}, @TCA_BPF_POLICE={0x410, 0x2, [@TCA_POLICE_RESULT={0x8, 0x5, 0xee}, @TCA_POLICE_RATE={0x404, 0x2, [0x5, 0x80000000, 0x100000, 0xb2, 0x100, 0x49f, 0xffffff61, 0xfb20653, 0x4, 0xb, 0x1, 0x3, 0x1, 0x7, 0x3, 0x6, 0x5, 0x7, 0x2, 0x1ff, 0x7f, 0x4, 0x7ff, 0x6, 0x7fff, 0x5, 0xe3, 0x0, 0x2, 0x1, 0x3, 0x6018, 0x8000, 0x6, 0x4, 0x2, 0x8a8, 0x2, 0x2, 0x8, 0x7, 0x0, 0x2, 0x1ff, 0x3f0, 0x1c4e5340, 0x2, 0x100, 0x200, 0x84d, 0x4, 0x100, 0x3, 0x54, 0x1800, 0xf73, 0x7230, 0x3, 0x100, 0x7, 0x0, 0x7, 0x6, 0x7f, 0x9, 0x9, 0x100, 0x9, 0x335, 0x5, 0x8000, 0x400, 0xfffffffa, 0x1ff, 0xffffffff, 0x9, 0x10, 0xd15, 0x1, 0x5, 0xff, 0x1, 0x9, 0x3, 0x0, 0x8, 0x3, 0x3, 0x800, 0x7fffffff, 0x6, 0x5, 0x400, 0x8, 0x7f, 0x7ff, 0x6, 0x8001, 0x9, 0x9, 0xcae, 0x7, 0x5, 0x2, 0x5, 0x7ff, 0x2, 0x4, 0x8, 0xf8, 0x8, 0x6, 0x2, 0x9, 0x5, 0x8, 0x80000000, 0x8, 0x8, 0x4, 0xfffffffc, 0xe, 0x168, 0xfffffffc, 0xf87, 0x1, 0x1, 0x6, 0x6, 0x8000, 0x2, 0x583, 0x6, 0xe6b, 0xd92, 0x6, 0x1, 0x0, 0x20c1, 0x42, 0x9, 0x6, 0x8, 0x6, 0x6, 0xa, 0x4, 0xa, 0x9, 0x5000000, 0x7, 0x31, 0xaedf, 0x7, 0x4f03, 0x7f99b3ba, 0xffffe5f4, 0x56f, 0x6, 0x9e7, 0x4, 0x10000, 0x4, 0x8000, 0x5c1f, 0xff0000, 0xfffffffe, 0x80, 0x80, 0x2, 0xe58b, 0x1, 0x6, 0x5, 0x8001, 0x200, 0xfffffffd, 0x4, 0x9, 0x1, 0x0, 0x0, 0x401, 0x2, 0xfffffff7, 0x6, 0xe9, 0xf199, 0x7f, 0x1, 0x65, 0x7, 0x41, 0x0, 0x2, 0x5, 0x0, 0xa9, 0xfffffff9, 0x0, 0x6, 0x5, 0x3, 0x4, 0x1ff, 0x4, 0x7, 0x400, 0xf, 0x9044, 0x1, 0x101, 0x905d8c00, 0x9, 0x2, 0xcc4, 0xa, 0x1000, 0x10001, 0x10001, 0x2, 0xfffffff0, 0x61, 0x1bf5, 0x0, 0x91, 0x200, 0x9, 0x9, 0x5, 0x100, 0x6, 0x7, 0x2, 0x7, 0xf25, 0x3, 0x4, 0x0, 0x2, 0x7, 0x0, 0x7, 0x80000001, 0x6, 0x1, 0x3d, 0x0, 0x4, 0x9, 0xfffffff7, 0x1, 0x0, 0xffffffff, 0x7ff, 0x8]}]}]}}]}, 0x460}, 0x1, 0x0, 0x0, 0x8848}, 0x4000010) socket(0x400000000010, 0x3, 0x0) socket$tipc(0x1e, 0x2, 0x0) bpf$MAP_CREATE(0x0, &(0x7f0000001180)=ANY=[@ANYBLOB="1b000000000000000000000000800000000000001f0de64bb44f78dc0b0700304ec139ad2a18590e36c824392d6f6e3cd33df2f7350226fea37996785401df521a4b90df6891745f7ab657114484048c646dc8f1a5cf1bbf36bbad8ad74a19661d3c7646b292c9377396fa377449afdf01a003db71f2088273f96cd8d4ea73c295dcb11a3433af774b6ea8d85eaabf23a78bb1723e40b4cc07e4f6ce06dab2763fd638c463a87e76935215d1bceeeae4b86ffeafaeeee708acea88605e6a0b97a47dde55de79eaea489bb2e7dd143b762f9e6d14", @ANYRES32, @ANYBLOB='\x00'/20, @ANYRES32=0x0, @ANYRES32, @ANYBLOB='\x00'/28], 0x50) socket$inet6_tcp(0xa, 0x1, 0x0) (async) r8 = socket$inet6_tcp(0xa, 0x1, 0x0) bind$inet6(r8, 0x0, 0x0) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000fc0)={0xffffffffffffffff, 0xffffffffffffffff}) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000fc0)) (async) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000fc0)) bind$vsock_stream(0xffffffffffffffff, 0x0, 0x0) pselect6(0x40, &(0x7f00000001c0)={0x0, 0x0, 0x3, 0xfffffffffffffffd}, 0x0, &(0x7f00000010c0)={0x401, 0x0, 0x0, 0x9, 0x0, 0x0, 0x7fffffff}, 0x0, 0x0) (async) pselect6(0x40, &(0x7f00000001c0)={0x0, 0x0, 0x3, 0xfffffffffffffffd}, 0x0, &(0x7f00000010c0)={0x401, 0x0, 0x0, 0x9, 0x0, 0x0, 0x7fffffff}, 0x0, 0x0) sendmsg$inet(r9, &(0x7f0000001580)={0x0, 0x0, &(0x7f0000001400)=[{&(0x7f0000000080)="3bfdd75fa5717852d59a9367444a2130e72cd4dabc8854532cca0c32a5b9f844a4610c7525650ce3d3b76b15026d93e6dee896115e9364066aa3d14e33ef732b4681335c576902153114bdb9c74b538a71115fb1d1a63d1b04129661b29aab89d0be999a6b7c9bea755adedbf305a79f70b71d3d4c98577b49db4963ce89b0def5e840f459659cb6f86d56b069a5de11d601d348ff88ca6e5e2cfe40176880b33e9e8dbc32ba2e6a99b1b50276dc4f06166000d7069a3cc76f", 0xb9}, {&(0x7f0000000180)="892950e2405ee8629d9384a91c16d1706a3e61f305119f95cac0f1927f4c205b971eb41147cb1f86883d6910e68ac3996551800b3ec64b77f8444b18345a2c8b178eeeba0cde7319a5a46bfe7f5770e019efd9d52069edcced33a758c4e657f3a792dc193a1911b4e82ea800ad7afe03c851a8", 0x73}, {&(0x7f0000000200)="a68cde0d56b170df7710b54f17d9a39c4f98f3547190", 0x20000216}, {&(0x7f0000000240)="45e04400f2b383517a08c397dd0a76e67ecfc8e74573c24dedd3a48fb62418c1412fdcd15e888cb0f5d02e77bfecefda6b064c0bb2b66a9a522e63873dde02330510255eec7dfa1af708cdab59fb71eca786a359a2c3b0cbad35144ec5b069c53f90e43339845dc7fd140c55b0149ab38eb27c140f374bcc2c95b0b121d1a9302f3a01b888243b3fc0d46f0de0", 0x8d}, {&(0x7f0000000300)="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", 0xcb3}], 0x5, &(0x7f0000001480)=[@ip_pktinfo={{0x1c, 0x0, 0x8, {0x0, @private, @multicast1}}}], 0x20}, 0x0) recvmsg$unix(r10, &(0x7f0000001140)={0x0, 0x0, &(0x7f0000001040)=[{&(0x7f00000015c0)=""/4096, 0x7ffff000}], 0x1, 0x0, 0x2}, 0x40000300) (async) recvmsg$unix(r10, &(0x7f0000001140)={0x0, 0x0, &(0x7f0000001040)=[{&(0x7f00000015c0)=""/4096, 0x7ffff000}], 0x1, 0x0, 0x2}, 0x40000300) 1.640401746s ago: executing program 4 (id=12655): ioctl$ifreq_SIOCGIFINDEX_batadv_mesh(0xffffffffffffffff, 0x8933, &(0x7f0000000040)={'batadv0\x00', 0x0}) ioctl$sock_ipv4_tunnel_SIOCCHGTUNNEL(0xffffffffffffffff, 0x89f3, &(0x7f0000000080)={'tunl0\x00', &(0x7f0000000480)={'syztnl1\x00', r0, 0x0, 0x1, 0x10000, 0x5, {{0x18, 0x4, 0x1, 0x0, 0x60, 0x66, 0x0, 0x7f, 0xf00b034a8e21d1, 0x0, @multicast2, @local, {[@generic={0x82, 0xe, "6433d737b2deebf5d320bfdb"}, @noop, @lsrr={0x83, 0x3, 0xfd}, @cipso={0x86, 0x1b, 0x3, [{0x5, 0x10, "49004746d4bd87df8eafd4e996fd"}, {0x0, 0x5, "e2636d"}]}, @generic={0x83, 0x4, "308d"}, @timestamp={0x44, 0x4, 0x9d, 0x0, 0x4}, @timestamp_addr={0x44, 0x14, 0xf9, 0x1, 0xd, [{@private=0xa010101, 0x2b}, {@multicast2, 0x8001}]}]}}}}}) r1 = bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000340)=ANY=[@ANYBLOB="020000000400"], 0x50) bpf$BPF_MAP_CONST_STR_FREEZE(0x16, &(0x7f0000000000)={r1}, 0x4) r2 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f0000000040)={'macvtap0\x00', 0x0}) r4 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r4, &(0x7f0000000000)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f00000000c0)=@newlink={0x44, 0x10, 0xffffffffffffffff, 0x70bd2a, 0x25dfdbfb, {0x0, 0x0, 0x0, 0x0, 0xc6da5938055fa6fd, 0x21}, [@IFLA_LINKINFO={0x14, 0x12, 0x0, 0x1, @macvtap={{0xc}, {0x4}}}, @IFLA_MTU={0x8, 0x4, 0xf3cd}, @IFLA_LINK={0x8, 0x5, r3}]}, 0x44}, 0x1, 0x0, 0x0, 0x51}, 0x2000c000) socket$igmp(0x2, 0x3, 0x2) syz_init_net_socket$rose(0xb, 0x5, 0x0) syz_emit_ethernet(0x46, &(0x7f0000000400)={@local, @random="df00004000", @void, {@ipv4={0x800, @tcp={{0x9, 0x4, 0x0, 0x0, 0x38, 0x0, 0x0, 0xff, 0x6, 0x0, @initdev={0xac, 0x1e, 0x0, 0x0}, @dev={0xac, 0x14, 0x14, 0x11}, {[@ssrr={0x89, 0x7, 0xa2, [@initdev={0xac, 0x1e, 0x0, 0x0}]}, @cipso={0x86, 0x6, 0x1}]}}, {{0x0, 0x0, 0x41424344, 0x41424344, 0x0, 0x0, 0x5}}}}}}, 0x0) epoll_ctl$EPOLL_CTL_ADD(0xffffffffffffffff, 0x1, 0xffffffffffffffff, 0x0) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x1, 0x11, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x10, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1000000}, 0x94) r5 = socket$nl_route(0x10, 0x3, 0x0) r6 = socket(0x1, 0x803, 0x0) syz_genetlink_get_family_id$nfc(&(0x7f0000000180), 0xffffffffffffffff) getsockname$packet(r6, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f00000001c0)=0x14) r8 = socket$unix(0x1, 0x1, 0x0) ioctl$sock_SIOCGIFINDEX(r8, 0x8933, &(0x7f0000000100)={'veth0_to_bond\x00', 0x0}) r10 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_CREATE(r10, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000280)={&(0x7f00000001c0)={0x50, 0x2, 0x6, 0x301, 0x7, 0x0, {}, [@IPSET_ATTR_DATA={0xc, 0x7, 0x0, 0x1, [@IPSET_ATTR_HASHSIZE={0x8, 0x12, 0x0}]}, @IPSET_ATTR_PROTOCOL={0x5, 0x1, 0x6}, @IPSET_ATTR_FAMILY={0x5, 0x5, 0xa}, @IPSET_ATTR_REVISION={0x5}, @IPSET_ATTR_SETNAME={0x9, 0x2, 'syz1\x00'}, @IPSET_ATTR_TYPENAME={0xc, 0x3, 'hash:ip\x00'}]}, 0x50}, 0x1, 0x0, 0x0, 0x40845}, 0x8404) sendmsg$nl_route(r5, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000300)=ANY=[@ANYBLOB="680000001000030400"/20, @ANYRES32=0x0, @ANYBLOB="46060900000000003800128009000100766c616e000000002800028006000100040000001c0003800c00010400000000010000000c000100f7ffffff0300000008000500", @ANYRES32=r9, @ANYBLOB='\b\x00\n\x00', @ANYRES32=r7], 0x68}, 0x1, 0x0, 0x0, 0x600}, 0x0) 1.531597932s ago: executing program 7 (id=12656): sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f0000000380)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000a00)={{0x14}, [@NFT_MSG_NEWSET={0x418, 0x9, 0xa, 0x101, 0x0, 0x0, {0xf, 0x0, 0x5}, [@NFTA_SET_NAME={0x9, 0x2, 'syz0\x00'}, @NFTA_SET_ID={0x8, 0xa, 0x1, 0x0, 0x3}, @NFTA_SET_GC_INTERVAL={0x8, 0xc, 0x1, 0x0, 0x2}, @NFTA_SET_DESC={0x3e0, 0x9, 0x0, 0x1, [@NFTA_SET_DESC_SIZE={0x8, 0x1, 0x1, 0x0, 0x8}, @NFTA_SET_DESC_CONCAT={0xb8, 0x2, 0x0, 0x1, [{0x44, 0x1, 0x0, 0x1, [@NFTA_SET_FIELD_LEN={0x8, 0x1, 0x1, 0x0, 0x80}, @NFTA_SET_FIELD_LEN={0x8, 0x1, 0x1, 0x0, 0x8}, @NFTA_SET_FIELD_LEN={0x8, 0x1, 0x1, 0x0, 0xc}, @NFTA_SET_FIELD_LEN={0x8, 0x1, 0x1, 0x0, 0xffffffff}, @NFTA_SET_FIELD_LEN={0x8, 0x1, 0x1, 0x0, 0x3}, @NFTA_SET_FIELD_LEN={0x8, 0x1, 0x1, 0x0, 0x7fff}, @NFTA_SET_FIELD_LEN={0x8, 0x1, 0x1, 0x0, 0x1}, @NFTA_SET_FIELD_LEN={0x8, 0x1, 0x1, 0x0, 0xffff}]}, {0x2c, 0x1, 0x0, 0x1, [@NFTA_SET_FIELD_LEN={0x8, 0x1, 0x1, 0x0, 0x7}, @NFTA_SET_FIELD_LEN={0x8, 0x1, 0x1, 0x0, 0x7}, @NFTA_SET_FIELD_LEN={0x8, 0x1, 0x1, 0x0, 0x9}, @NFTA_SET_FIELD_LEN={0x8, 0x1, 0x1, 0x0, 0x3ff}, @NFTA_SET_FIELD_LEN={0x8, 0x1, 0x1, 0x0, 0x9}]}, {0x44, 0x1, 0x0, 0x1, [@NFTA_SET_FIELD_LEN={0x8, 0x1, 0x1, 0x0, 0x400}, @NFTA_SET_FIELD_LEN={0x8, 0x1, 0x1, 0x0, 0x800}, @NFTA_SET_FIELD_LEN={0x8}, @NFTA_SET_FIELD_LEN={0x8, 0x1, 0x1, 0x0, 0x7b0}, @NFTA_SET_FIELD_LEN={0x8, 0x1, 0x1, 0x0, 0x3ff}, @NFTA_SET_FIELD_LEN={0x8, 0x1, 0x1, 0x0, 0x3}, @NFTA_SET_FIELD_LEN={0x8, 0x1, 0x1, 0x0, 0x20000}, @NFTA_SET_FIELD_LEN={0x8, 0x1, 0x1, 0x0, 0x2}]}]}, @NFTA_SET_DESC_SIZE={0x8, 0x1, 0x1, 0x0, 0x9}, @NFTA_SET_DESC_CONCAT={0x15c, 0x2, 0x0, 0x1, [{0x3c, 0x1, 0x0, 0x1, [@NFTA_SET_FIELD_LEN={0x8, 0x1, 0x1, 0x0, 0x8}, @NFTA_SET_FIELD_LEN={0x8, 0x1, 0x1, 0x0, 0x5}, @NFTA_SET_FIELD_LEN={0x8, 0x1, 0x1, 0x0, 0x1}, @NFTA_SET_FIELD_LEN={0x8, 0x1, 0x1, 0x0, 0xfffffeff}, @NFTA_SET_FIELD_LEN={0x8, 0x1, 0x1, 0x0, 0xc0}, @NFTA_SET_FIELD_LEN={0x8, 0x1, 0x1, 0x0, 0x535}, @NFTA_SET_FIELD_LEN={0x8, 0x1, 0x1, 0x0, 0x6af}]}, {0x14, 0x1, 0x0, 0x1, [@NFTA_SET_FIELD_LEN={0x8, 0x1, 0x1, 0x0, 0x9}, @NFTA_SET_FIELD_LEN={0x8, 0x1, 0x1, 0x0, 0x6}]}, {0x14, 0x1, 0x0, 0x1, [@NFTA_SET_FIELD_LEN={0x8, 0x1, 0x1, 0x0, 0x2}, @NFTA_SET_FIELD_LEN={0x8}]}, {0x4c, 0x1, 0x0, 0x1, [@NFTA_SET_FIELD_LEN={0x8, 0x1, 0x1, 0x0, 0x6}, @NFTA_SET_FIELD_LEN={0x8, 0x1, 0x1, 0x0, 0x9}, @NFTA_SET_FIELD_LEN={0x8, 0x1, 0x1, 0x0, 0x1000}, @NFTA_SET_FIELD_LEN={0x8}, @NFTA_SET_FIELD_LEN={0x8, 0x1, 0x1, 0x0, 0xdc}, @NFTA_SET_FIELD_LEN={0x8, 0x1, 0x1, 0x0, 0x3}, @NFTA_SET_FIELD_LEN={0x8, 0x1, 0x1, 0x0, 0x3}, @NFTA_SET_FIELD_LEN={0x8, 0x1, 0x1, 0x0, 0x9}, @NFTA_SET_FIELD_LEN={0x8, 0x1, 0x1, 0x0, 0x400}]}, {0x4c, 0x1, 0x0, 0x1, [@NFTA_SET_FIELD_LEN={0x8, 0x1, 0x1, 0x0, 0x4a}, @NFTA_SET_FIELD_LEN={0x8, 0x1, 0x1, 0x0, 0x6}, @NFTA_SET_FIELD_LEN={0x8, 0x1, 0x1, 0x0, 0x1ff}, @NFTA_SET_FIELD_LEN={0x8, 0x1, 0x1, 0x0, 0x9}, @NFTA_SET_FIELD_LEN={0x8, 0x1, 0x1, 0x0, 0x2}, @NFTA_SET_FIELD_LEN={0x8, 0x1, 0x1, 0x0, 0x1000}, @NFTA_SET_FIELD_LEN={0x8, 0x1, 0x1, 0x0, 0x5693}, @NFTA_SET_FIELD_LEN={0x8, 0x1, 0x1, 0x0, 0x3}, @NFTA_SET_FIELD_LEN={0x8, 0x1, 0x1, 0x0, 0x3}]}, {0x1c, 0x1, 0x0, 0x1, [@NFTA_SET_FIELD_LEN={0x8, 0x1, 0x1, 0x0, 0xf}, @NFTA_SET_FIELD_LEN={0x8, 0x1, 0x1, 0x0, 0x7a56}, @NFTA_SET_FIELD_LEN={0x8, 0x1, 0x1, 0x0, 0xe}]}, {0x1c, 0x1, 0x0, 0x1, [@NFTA_SET_FIELD_LEN={0x8, 0x1, 0x1, 0x0, 0x5}, @NFTA_SET_FIELD_LEN={0x8}, @NFTA_SET_FIELD_LEN={0x8}]}, {0x24, 0x1, 0x0, 0x1, [@NFTA_SET_FIELD_LEN={0x8, 0x1, 0x1, 0x0, 0x3}, @NFTA_SET_FIELD_LEN={0x8, 0x1, 0x1, 0x0, 0x2}, @NFTA_SET_FIELD_LEN={0x8, 0x1, 0x1, 0x0, 0x6}, @NFTA_SET_FIELD_LEN={0x8, 0x1, 0x1, 0x0, 0x8}]}]}, @NFTA_SET_DESC_SIZE={0x8, 0x1, 0x1, 0x0, 0xfffffffd}, @NFTA_SET_DESC_CONCAT={0xdc, 0x2, 0x0, 0x1, [{0x14, 0x1, 0x0, 0x1, [@NFTA_SET_FIELD_LEN={0x8, 0x1, 0x1, 0x0, 0x5}, @NFTA_SET_FIELD_LEN={0x8, 0x1, 0x1, 0x0, 0x9}]}, {0x4c, 0x1, 0x0, 0x1, [@NFTA_SET_FIELD_LEN={0x8}, @NFTA_SET_FIELD_LEN={0x8}, @NFTA_SET_FIELD_LEN={0x8, 0x1, 0x1, 0x0, 0x4}, @NFTA_SET_FIELD_LEN={0x8, 0x1, 0x1, 0x0, 0x9}, @NFTA_SET_FIELD_LEN={0x8, 0x1, 0x1, 0x0, 0x1000}, @NFTA_SET_FIELD_LEN={0x8, 0x1, 0x1, 0x0, 0xfffffffd}, @NFTA_SET_FIELD_LEN={0x8, 0x1, 0x1, 0x0, 0x4}, @NFTA_SET_FIELD_LEN={0x8, 0x1, 0x1, 0x0, 0x7}, @NFTA_SET_FIELD_LEN={0x8}]}, {0x14, 0x1, 0x0, 0x1, [@NFTA_SET_FIELD_LEN={0x8, 0x1, 0x1, 0x0, 0xab}, @NFTA_SET_FIELD_LEN={0x8, 0x1, 0x1, 0x0, 0x5a9e}]}, {0x24, 0x1, 0x0, 0x1, [@NFTA_SET_FIELD_LEN={0x8, 0x1, 0x1, 0x0, 0x1}, @NFTA_SET_FIELD_LEN={0x8, 0x1, 0x1, 0x0, 0x1}, @NFTA_SET_FIELD_LEN={0x8, 0x1, 0x1, 0x0, 0x67d40569}, @NFTA_SET_FIELD_LEN={0x8, 0x1, 0x1, 0x0, 0xa8}]}, {0xc, 0x1, 0x0, 0x1, [@NFTA_SET_FIELD_LEN={0x8, 0x1, 0x1, 0x0, 0x8}]}, {0x34, 0x1, 0x0, 0x1, [@NFTA_SET_FIELD_LEN={0x8, 0x1, 0x1, 0x0, 0x4}, @NFTA_SET_FIELD_LEN={0x8, 0x1, 0x1, 0x0, 0x23ac}, @NFTA_SET_FIELD_LEN={0x8, 0x1, 0x1, 0x0, 0x4}, @NFTA_SET_FIELD_LEN={0x8, 0x1, 0x1, 0x0, 0x9}, @NFTA_SET_FIELD_LEN={0x8, 0x1, 0x1, 0x0, 0xe}, @NFTA_SET_FIELD_LEN={0x8, 0x1, 0x1, 0x0, 0xfffffffd}]}]}, @NFTA_SET_DESC_CONCAT={0x40, 0x2, 0x0, 0x1, [{0xc, 0x1, 0x0, 0x1, [@NFTA_SET_FIELD_LEN={0x8}]}, {0x24, 0x1, 0x0, 0x1, [@NFTA_SET_FIELD_LEN={0x8}, @NFTA_SET_FIELD_LEN={0x8, 0x1, 0x1, 0x0, 0x1}, @NFTA_SET_FIELD_LEN={0x8, 0x1, 0x1, 0x0, 0x1}, @NFTA_SET_FIELD_LEN={0x8, 0x1, 0x1, 0x0, 0x1}]}, {0xc, 0x1, 0x0, 0x1, [@NFTA_SET_FIELD_LEN={0x8, 0x1, 0x1, 0x0, 0xffff}]}]}, @NFTA_SET_DESC_CONCAT={0x94, 0x2, 0x0, 0x1, [{0x4c, 0x1, 0x0, 0x1, [@NFTA_SET_FIELD_LEN={0x8, 0x1, 0x1, 0x0, 0x7}, @NFTA_SET_FIELD_LEN={0x8, 0x1, 0x1, 0x0, 0x9}, @NFTA_SET_FIELD_LEN={0x8, 0x1, 0x1, 0x0, 0x4}, @NFTA_SET_FIELD_LEN={0x8, 0x1, 0x1, 0x0, 0x81}, @NFTA_SET_FIELD_LEN={0x8, 0x1, 0x1, 0x0, 0x1}, @NFTA_SET_FIELD_LEN={0x8}, @NFTA_SET_FIELD_LEN={0x8, 0x1, 0x1, 0x0, 0x8}, @NFTA_SET_FIELD_LEN={0x8, 0x1, 0x1, 0x0, 0x8}, @NFTA_SET_FIELD_LEN={0x8, 0x1, 0x1, 0x0, 0x6}]}, {0x24, 0x1, 0x0, 0x1, [@NFTA_SET_FIELD_LEN={0x8, 0x1, 0x1, 0x0, 0x9}, @NFTA_SET_FIELD_LEN={0x8, 0x1, 0x1, 0x0, 0x7ff}, @NFTA_SET_FIELD_LEN={0x8, 0x1, 0x1, 0x0, 0x6}, @NFTA_SET_FIELD_LEN={0x8, 0x1, 0x1, 0x0, 0x7ff}]}, {0xc, 0x1, 0x0, 0x1, [@NFTA_SET_FIELD_LEN={0x8, 0x1, 0x1, 0x0, 0x2}]}, {0x14, 0x1, 0x0, 0x1, [@NFTA_SET_FIELD_LEN={0x8, 0x1, 0x1, 0x0, 0x8a}, @NFTA_SET_FIELD_LEN={0x8, 0x1, 0x1, 0x0, 0x8000}]}]}]}, @NFTA_SET_DATA_LEN={0x8, 0x7, 0x1, 0x0, 0x1}]}, @NFT_MSG_NEWFLOWTABLE={0x88, 0x16, 0xa, 0x1, 0x0, 0x0, {0x2}, [@NFTA_FLOWTABLE_TABLE={0x9, 0x1, 'syz0\x00'}, @NFTA_FLOWTABLE_NAME={0x9, 0x2, 'syz1\x00'}, @NFTA_FLOWTABLE_HOOK={0x5c, 0x3, 0x0, 0x1, [@NFTA_FLOWTABLE_HOOK_DEVS={0x40, 0x3, 0x0, 0x1, [{0x14, 0x1, 'ip6erspan0\x00'}, {0x14, 0x1, 'sit0\x00'}, {0x14, 0x1, 'veth1_to_batadv\x00'}]}, @NFTA_FLOWTABLE_HOOK_DEVS={0x18, 0x3, 0x0, 0x1, [{0x14, 0x1, 'veth1_to_bond\x00'}]}]}]}, @NFT_MSG_DELFLOWTABLE={0x5c, 0x16, 0xa, 0x101, 0xb00, 0x0, {0x1}, [@NFTA_FLOWTABLE_NAME={0x9, 0x2, 'syz1\x00'}, @NFTA_FLOWTABLE_TABLE={0x9, 0x1, 'syz0\x00'}, @NFTA_FLOWTABLE_HOOK={0x30, 0x3, 0x0, 0x1, [@NFTA_FLOWTABLE_HOOK_DEVS={0x2c, 0x3, 0x0, 0x1, [{0x14, 0x1, 'vcan0\x00'}, {0x14, 0x1, 'pim6reg1\x00'}]}]}]}], {0x14, 0x10}}, 0x524}, 0x1, 0x0, 0x0, 0x40000}, 0x0) socketpair$tipc(0x1e, 0x1, 0x0, &(0x7f00000001c0)={0xffffffffffffffff, 0xffffffffffffffff}) recvmsg(r0, &(0x7f0000000500)={&(0x7f0000000040)=@hci, 0x80, &(0x7f0000000100)=[{&(0x7f0000000400)=""/248, 0xd68210}], 0x1, 0x0, 0x1f00000000000000, 0x200000}, 0x1f00) r2 = socket$alg(0x26, 0x5, 0x0) bind$alg(r2, &(0x7f0000000b00)={0x26, 'skcipher\x00', 0x0, 0x0, 'ecb-blowfish-asm\x00'}, 0x58) setsockopt$ALG_SET_KEY(r2, 0x117, 0x1, &(0x7f0000c18000)="ad56b6c5", 0x4) r3 = accept4(r2, 0x0, 0x0, 0x80800) sendmmsg$alg(r3, &(0x7f0000000280)=[{0x0, 0x0, &(0x7f0000000600)=[{&(0x7f0000000080)="f703010010fff3be522ba800000000", 0xf}, {&(0x7f0000000140)="ebe3a0e9796cfd1647e299f4e376fdba1282", 0x12}], 0x2, 0x0, 0x0, 0x2000847}], 0x1, 0x40800) recvmmsg$unix(r3, &(0x7f0000000d40)=[{{0x0, 0x0, &(0x7f0000001240)=[{&(0x7f0000000580)=""/21, 0x15}, {&(0x7f0000000640)=""/11, 0xb}], 0x2}}, {{0x0, 0x0, &(0x7f0000000240)=[{&(0x7f00000004c0)=""/192, 0xc0}], 0x1}}], 0x2, 0x40000000, 0x0) sendmsg$tipc(r1, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000200)=[{&(0x7f0000000140)="a2", 0xfffffdef}], 0x1}, 0x0) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f05ebbee1, 0x8031, 0xffffffffffffffff, 0x0) r4 = socket$kcm(0x10, 0x2, 0x0) sendmsg$inet(r4, &(0x7f0000000080)={0x0, 0x74, &(0x7f0000000100)=[{&(0x7f00000001c0)="5c00000012006bab9a3fe3d86e17aa0a046b876c1d0048007ea60864160af36504001a0038001d001931a0e69ee517d34460bc06000000a705251e6182949a3651f60a84c9f4d4938037e70e4509c5bb", 0x33fe0}], 0x1, 0x0, 0x0, 0x1f00c00e}, 0x0) recvmsg$kcm(r4, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000004140)=[{&(0x7f0000000240)=""/212, 0xd4}], 0x1}, 0x0) sendmsg$NFT_BATCH(0xffffffffffffffff, 0x0, 0x0) sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f0000000100)={0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x20000002}, 0x20004000) setsockopt$SO_ATTACH_FILTER(0xffffffffffffffff, 0x1, 0x1a, &(0x7f0000000080)={0x0, 0x0}, 0x10) bpf$PROG_LOAD(0x5, 0x0, 0x0) sendmsg$netlink(0xffffffffffffffff, &(0x7f00000047c0)={0x0, 0x0, &(0x7f0000000e40)=[{&(0x7f0000000200)=ANY=[@ANYBLOB="180000007a00010600000000fbdbdf2507"], 0x18}], 0x1, 0x0, 0x0, 0x4000050}, 0x80) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000200)=ANY=[], 0xa0}}, 0x0) r5 = socket(0x10, 0x3, 0x0) sendmmsg(r5, &(0x7f0000000000), 0x4000000000001f2, 0x0) bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="0e000000040000000800000005"], 0x48) r6 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[], 0x48) r7 = bpf$PROG_LOAD(0x5, &(0x7f0000000540)={0x11, 0x14, &(0x7f0000000280)=ANY=[@ANYBLOB="180000000000000000000000000000001801000020646c2100000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000007200000018110000", @ANYRES32=r6, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000100000095"], &(0x7f0000000240)='GPL\x00', 0x1, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$PROG_BIND_MAP(0xa, &(0x7f0000000080)={r7}, 0xc) sendmsg$netlink(0xffffffffffffffff, &(0x7f0000001940)={0x0, 0x0, &(0x7f0000000340)=[{&(0x7f0000000300)=ANY=[@ANYBLOB="100000003d0000082abd7000fcdbdf27"], 0x10}], 0x1, 0x0, 0x0, 0x4000}, 0x44040) r8 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r8, &(0x7f0000000840)={0x0, 0x0, &(0x7f0000000800)={&(0x7f00000001c0)=ANY=[@ANYBLOB="4c03000017"], 0x34c}}, 0x0) 1.463013792s ago: executing program 3 (id=12657): r0 = socket$packet(0x11, 0x3, 0x300) setsockopt$packet_tx_ring(r0, 0x107, 0xd, 0x0, 0x0) r1 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$TIPC_NL_MON_PEER_GET(r1, &(0x7f0000000280)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x200000}, 0xc, &(0x7f00000000c0)={&(0x7f0000001480)=ANY=[@ANYBLOB='h\x00\x00\x00', @ANYRES16=0x0, @ANYBLOB="02002abd7000fddbdf2513000000100007800c000400ff01007e83031f59cac09c6f910000000000440003800800030022000000080003000001000008000300517fff040000000000000000080001000200a57fb28c20588769c07fee701cac00000800030008000000080001008000000008000300040000001d337ba472b889049ced299ae84b"], 0x68}, 0x1, 0x0, 0x0, 0x20000000}, 0x4000041) sendmsg$nl_generic(r1, &(0x7f00000029c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000100)={0x20, 0x10, 0x701, 0x0, 0x0, {0xa}, [@typed={0xc, 0x2, 0x0, 0x0, @str='nl80211\x00'}]}, 0x20}}, 0x0) recvmmsg(r1, &(0x7f0000001b40)=[{{0x0, 0x0, &(0x7f0000000000)=[{&(0x7f0000000140)=""/189, 0xbd}, {&(0x7f00000003c0)=""/152, 0x98}, {&(0x7f0000000480)=""/4096, 0x1000}], 0x3}}], 0x7, 0x0, 0x0) bpf$PROG_LOAD(0x5, &(0x7f00000002c0)={0x3, 0x0, 0x0, &(0x7f0000000080)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @sched_cls, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r2 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) r3 = syz_genetlink_get_family_id$nl80211(&(0x7f00000015c0), r1) sendmsg$NL80211_CMD_CRIT_PROTOCOL_STOP(r1, &(0x7f0000001680)={&(0x7f0000001580)={0x10, 0x0, 0x0, 0x80000}, 0xc, &(0x7f0000001640)={&(0x7f00000018c0)=ANY=[@ANYBLOB="1400e100e7d64fb9167418ffbb9dc683278c51a82cfe015f1d1feb452b4e8985d8f1027d12e821cb860dd353d846d887b5c50ff94ac22f2a5373f05ae2847b79743ffdfb4afde311d1192a2390e6bd20c6e5f88afd6f16", @ANYRES16=r3, @ANYBLOB="040028bd7000fcdbdf256300000008000300", @ANYRES32=0x0, @ANYBLOB], 0x1c}, 0x1, 0x0, 0x0, 0x4}, 0x5) bind$bt_hci(r2, &(0x7f0000000080)={0x1f, 0xffff, 0x4}, 0x6) setsockopt$sock_int(r2, 0x1, 0x25, &(0x7f0000000300)=0x8, 0x4) recvmmsg(r2, &(0x7f0000001840)=[{{0x0, 0x0, 0x0}, 0x1ff}], 0x1, 0x40002000, 0x0) setsockopt$packet_int(r0, 0x107, 0xf, &(0x7f0000000100)=0x207, 0x4) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000000)={'ip6tnl0\x00', 0x0}) r5 = syz_genetlink_get_family_id$team(&(0x7f0000000100), 0xffffffffffffffff) r6 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFNL_MSG_ACCT_GET_CTRZERO(r6, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000100)={0x28, 0x2, 0x7, 0x201, 0x0, 0x0, {0xd, 0x0, 0x9}, [@NFACCT_FILTER={0x14, 0x7, 0x0, 0x1, [@NFACCT_FILTER_MASK={0x8, 0x1, 0x1, 0x0, 0x57a}, @NFACCT_FILTER_VALUE={0x8, 0x2, 0x1, 0x0, 0x6}]}]}, 0x28}, 0x1, 0x0, 0x0, 0x4}, 0x800) sendmsg$TEAM_CMD_PORT_LIST_GET(0xffffffffffffffff, &(0x7f00000003c0)={0x0, 0x0, &(0x7f0000000380)={&(0x7f0000000540)={0x20, r5, 0x211, 0x70bd25, 0x25dfdbfb, {}, [{{0x8}, {0x4}}]}, 0x20}}, 0x20044010) r7 = socket$nl_netfilter(0x10, 0x3, 0xc) r8 = syz_genetlink_get_family_id$tipc(&(0x7f0000001700), r1) sendmsg$TIPC_CMD_SET_LINK_TOL(r1, &(0x7f0000001800)={&(0x7f00000016c0)={0x10, 0x0, 0x0, 0x800}, 0xc, &(0x7f00000017c0)={&(0x7f0000001940)=ANY=[@ANYBLOB="984daec9d224de465b9d50478e82c0e7cc6c43", @ANYRES16=r8, @ANYBLOB="04002cbd7000fcdbdf25010000000000000007410000fde800180000000365746800"/98], 0x68}, 0x1, 0x0, 0x0, 0x40}, 0x4001) sendmsg$IPSET_CMD_LIST(r7, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000040)=ANY=[@ANYBLOB="1c0000000706010300000068416a8fb4e89743090500010007"], 0x1c}, 0x1, 0x0, 0x0, 0x44000}, 0x8000) close(r7) sendto$packet(r0, &(0x7f00000002c0)="11073e103b28", 0x6, 0x20020000, &(0x7f0000001600)={0x11, 0x9, r4, 0x1, 0x0, 0x6, @local}, 0x14) r9 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r9, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000240)=ANY=[@ANYBLOB="440000001a00010000000000000000008180800000000000468c15ca0000000014000200fc01000000000000000000000000000014000100fe8800"/68], 0x44}}, 0x0) ioctl$sock_SIOCGPGRP(r0, 0x8904, &(0x7f0000000240)=0x0) sendmsg$nl_generic(r1, &(0x7f0000001540)={&(0x7f0000000200)={0x10, 0x0, 0x0, 0x100}, 0xc, &(0x7f0000000380)={&(0x7f0000002a00)={0x1518, 0x42, 0x100, 0x70bd2a, 0x25dfdbfd, {0x9}, [@typed={0x4, 0x19}, @nested={0x1f0, 0x20, 0x0, 0x1, [@nested={0x4, 0xc0}, @generic="fde28df2e0a99c0dbc4b68e3ef205430f197cfbeea7bae50d0da2aaebd161750f1a8e1f9c4f479a48b0e5bf920cd724a684dc5551ceadf75b994971e6cbba759754d5fc0b3fec855271a82e7041019219d13b5936f5b76a89869cde7cdf05f7756c01dc2d46b6b7eb79fc4a10588ff485e541e35813c5c7b01ed0825be31520ff7d9224bf27b5d09afdb7ade998c7ce0c79a92b81d3df37ae11d23c27d588c04c9ef5a4f6b3b0fe6fbb1cf393b3100503239533f0f35d41bfa05f943ccf658de354c594b9ad8804b592d08c3abcaae0340867c3c7cb9c014e58f5028be6a3d646d02fc9daafd", @nested={0x4, 0x6f}, @generic="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"]}, @nested={0x11b8, 0x9, 0x0, 0x1, [@generic="d01f9f00f1a164bf02b0e85124bdc90c9d8eb3b728146f7ee53cd8d69d30b2ad224bdd5f1ab726e27bf3c2d11d2dc321b4d3ceb19ed164f05613c6f489a9b9b8402271a66bc0226516a9497f5e24", @generic="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", @generic="11a6644d80375a8ed2df8d482c637c52af0b6ab8bddf18361ccb916f3de9da57941a581cad57719d5a8a15d10648c869580f6ec4bee202aa12ecbf1b95c4e41308cea54605e6ad19e157b274b982525afc10f84e0ae4de8132e457703079761efdb06ec31e72dba551510935a99aa51a38ca2296169b27a7f0351706204e2dbf87dcea06d512b69f485fe68cf2b1eb280b26e7f4cd159d1daab86fb492e75d27f27b4ade257d6d9ccfdf28c7314b15358376", @nested={0x4, 0x97}, @typed={0xbe, 0x2d, 0x0, 0x0, @binary="82b96cf70079834ef4645234ae57f9cf370fee6f5675b25e447d0e46a2a9fac3ca35923307333f60645b559278bedc2a567241b178e5fb910d2146cd39454c4f534423912acafecf92d8eafe93b62ba9319e2611a16edd042667873957a8a9d96978f5c12d9a92631459fbf255cb65026a540a9500ff738eb935c97cd5fa7c1b37d111bfae3d060be9cc0819f402c0de3219fa5f3729de1355b1944922abb5649a74e8420b0ef4e397b865888dfd1c9e36e71351fe692b8be4ff"}, @typed={0x8, 0x41, 0x0, 0x0, @pid=r10}, @typed={0x8, 0x70, 0x0, 0x0, @u32=0xae1}]}, @generic="da1c3c920412492412c73d6c5fadc41c175ee5cc7f9a65e3d072b327e61d264d1bb797560daf0a1c3314efc3b5d1fcefd18768140949cb59b12fb6229fcad3133045d06d9de62e2c363eab64fb92da437d0b8fe9bfdbc8c789c42d4df528f2c3d055a2548b202697ecd38f080b95954c0f439496d135caca65ed3c25a2834f3fd626671091ee2903e31812eea57faf7da90dd8f049c601426eaa6edf739955517b256687a0d449", @typed={0x83, 0x2e, 0x0, 0x0, @binary="0c410bc7755d891f7844e2c64515c5cd802e48ffafae237447dd3773f7f96ec75cea2fbbe89d7e1c34413bd60a7668fb65c15904c21906a3d8e4ccd4a8f907aa25596f130b65ab31aa5786f05aebbad40952f9690ba8b7aceae94e2b518defcb7cccc3fb818e76e88d4bc472368916d9d26d7169cb6a35e1531526c79e058b"}, @generic="e427d2a440526483e6ac91188f6e03acf2815731feda466fa635c8f378a7eb126901d73c445228789c9d0a06"]}, 0x1518}, 0x1, 0x0, 0x0, 0x4000800}, 0x8000) socket$nl_netfilter(0x10, 0x3, 0xc) 1.296640488s ago: executing program 3 (id=12658): r0 = socket$alg(0x26, 0x5, 0x0) bind$alg(r0, &(0x7f00000004c0)={0x26, 'skcipher\x00', 0x0, 0x0, 'cbc-camellia-asm\x00'}, 0x58) setsockopt$ALG_SET_KEY(r0, 0x117, 0x1, &(0x7f0000000280)="ad56b6c5820fae9d6dcd3292ea54c7beef915d564c90c200", 0x18) r1 = accept4(r0, 0x0, 0x0, 0x800) sendmmsg$alg(r1, &(0x7f0000000040)=[{0x0, 0x0, &(0x7f0000000000)=[{&(0x7f0000000080)="f78d9ca38fff48f3be52163448412ba8", 0x10}, {&(0x7f0000000140)="ebe3a0e9796cfd1647e299f4e376fdba128280b372219d205e81f4a7f71c1926aae1efd7e0054a863f3d5cfe6cb55b5bb9fa6935849e6098ed884e7cb51726b360fbb37b4fe035bbb095873048", 0x4d}, {&(0x7f00000003c0)="e8700e444d50a969ff67347cff6127e6ef12ee3819271482a4975a52c1ab9b8b4db3945d1032005eabe97b4dc33a47d3a158da988456d30026b433186f53cdcdb93a4722bf306a10470d50f5cb1ece9ead3459bab1cf1538cd0b157653c5e892962c80f158c443e9c6ad7d2a8103ef2f4b93766b9a21501f94c1568b13756b66f74f46cf801704d2da8b96c34070b233af0afcc436712e58ed25e721193af05a045ad3fdc928f02f3dbad19d3e66eebda2e63f3f46ef4511cee26d7b48241847bf9e343ef4674c45e2a085060f11", 0xce}], 0x3, &(0x7f00000002c0)=[@op={0x18}], 0x18}], 0x1, 0x40800) recvmsg(r1, &(0x7f00000005c0)={0x0, 0x0, &(0x7f00000001c0)=[{&(0x7f00000000c0)=""/81, 0x7ffff000}, {&(0x7f0000000200)=""/83, 0x20000253}], 0x2}, 0x0) setsockopt$TIPC_DEST_DROPPABLE(r1, 0x10f, 0x81, &(0x7f0000000200)=0x5, 0x4) r2 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_ax25_SIOCDELRT(r1, 0x890c, &(0x7f0000000300)={@bcast, @bcast, 0x1, [@rose={0xbb, 0xbb, 0xbb, 0x1, 0x0}, @rose={0xbb, 0xbb, 0xbb, 0x1, 0x0}, @default, @rose={0xbb, 0xbb, 0xbb, 0x1, 0x0}, @default, @remote={0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0x0}, @bcast, @bcast]}) r3 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r3, &(0x7f00000003c0)={0x0, 0x0, &(0x7f0000000540)={&(0x7f0000000040)=@delpolicy={0x1b4, 0x14, 0x1, 0x0, 0x25dfdbfb, {{@in6=@ipv4={'\x00', '\xff\xff', @local}, @in=@multicast2, 0x0, 0x80, 0x7, 0x0, 0x0, 0x0, 0x20}}, [@sec_ctx={0x5c, 0x8, {0x58, 0x8, 0x0, 0x0, 0x50, "0df75ec3a1cdea87b70000c8fe207565a74a6f2e5219779b6349b64df3509855bdb190c35811e6c15a09c309d8748fc6a5a8d989cb5cfdd3def7668f700ac3de66f79e5a78e9ed48b2f6836d7e30ab0d"}}, @algo_auth={0x107, 0x1, {{'sha224-ce\x00'}, 0x5f8, "bc33793711f55b5ac4252368fa7e1d4c341799225d906d7b57050730f076519d0dd16eeceb0bc4450629859a2449d35a50a0a8cfda69d981d92d73118c220ecbd1a7e5d2c637cf54f9e8e511ebed79b6cd23dfcf6de9e94009791fbeeb86d0fdfbf3e365e0ad0b0c90e362bef5c92c4a97e9cf2aa6ed62e7b494098df358af107a821e740bba8ccaf70ac3c0accb5a38fabe656019a88d15b5a1dcdf4f4e17b41acabb3f785a0f4cd1f1056c158d7a63474d7fbfa60be770f31c60263607ea"}}]}, 0x1b4}}, 0x4004040) sendmsg$nl_route(r2, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000800)=ANY=[@ANYBLOB="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"], 0x14c}}, 0x0) 1.295701234s ago: executing program 4 (id=12659): r0 = socket$inet_sctp(0x2, 0x5, 0x84) r1 = socket$inet6_sctp(0xa, 0x5, 0x84) getsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX3(r1, 0x84, 0x6f, &(0x7f0000000040)={0x0, 0x10, &(0x7f0000000000)=[@in={0x2, 0x0, @private=0xa010101}]}, &(0x7f0000000080)=0x10) socket$inet6_sctp(0xa, 0x801, 0x84) (async) r2 = socket$inet6_sctp(0xa, 0x801, 0x84) setsockopt$inet_sctp6_SCTP_DELAYED_SACK(r2, 0x84, 0x10, &(0x7f0000000380)=@assoc_value={0x0, 0x8}, 0x8) sendmsg$inet_sctp(r0, &(0x7f0000000400)={0x0, 0x0, &(0x7f0000000dc0), 0x0, &(0x7f00000000c0)=ANY=[@ANYBLOB="2000000000000000840000000200000006000400280100000b008002", @ANYRES8], 0x20, 0x6044}, 0x0) (async) sendmsg$inet_sctp(r0, &(0x7f0000000400)={0x0, 0x0, &(0x7f0000000dc0), 0x0, &(0x7f00000000c0)=ANY=[@ANYBLOB="2000000000000000840000000200000006000400280100000b008002", @ANYRES8], 0x20, 0x6044}, 0x0) 1.286293702s ago: executing program 0 (id=12660): r0 = socket$inet_mptcp(0x2, 0x1, 0x106) bind$unix(r0, &(0x7f0000000600)=@abs={0x0, 0x0, 0x4e24}, 0x6e) socket$vsock_stream(0x28, 0x1, 0x28) 1.074349156s ago: executing program 3 (id=12661): r0 = socket$nl_route(0x10, 0x3, 0x0) socket$nl_route(0x10, 0x3, 0x0) (async) r1 = socket$nl_route(0x10, 0x3, 0x0) ioctl$ifreq_SIOCGIFINDEX_team(r1, 0x8933, &(0x7f0000000000)={'team0\x00', 0x0}) openat$tun(0xffffffffffffff9c, &(0x7f00000003c0), 0x1c1341, 0x0) (async) r3 = openat$tun(0xffffffffffffff9c, &(0x7f00000003c0), 0x1c1341, 0x0) ioctl$TUNSETIFF(r3, 0x400454ca, &(0x7f00000000c0)={'syzkaller0\x00', 0x84aebfbd6349b7f2}) close(0xffffffffffffffff) r4 = socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$tipc(&(0x7f0000000200), 0xffffffffffffffff) (async) r5 = syz_genetlink_get_family_id$tipc(&(0x7f0000000200), 0xffffffffffffffff) sendmsg$TIPC_CMD_ENABLE_BEARER(r4, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000680)=ANY=[@ANYBLOB='8\x00\x00\x00', @ANYRES16=r5, @ANYBLOB="010000000d0000000000010000000000000001410000001c001700000000000000006574683a73797a6b616c6c657230"], 0x38}}, 0x0) ioctl$SIOCSIFHWADDR(0xffffffffffffffff, 0x8914, &(0x7f0000002280)={'syzkaller0\x00', @multicast}) (async) ioctl$SIOCSIFHWADDR(0xffffffffffffffff, 0x8914, &(0x7f0000002280)={'syzkaller0\x00', @multicast}) writev(r3, &(0x7f0000000080)=[{&(0x7f0000000100)="89e73d5521fe62a3b47380c988ca", 0xe}, {&(0x7f0000000000)="e4ca4e42ec95daeb7b952b8b410f3a11", 0x10}], 0x2) sendmsg$nl_route(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000180)={&(0x7f00000002c0)=@newlink={0x6c, 0x10, 0xffffffffffffffff, 0x70bd25, 0x25dfdbfb, {0x0, 0x0, 0x0, 0x0, 0x2017, 0x2021}, [@IFLA_LINKINFO={0x44, 0x12, 0x0, 0x1, @vlan={{0x9}, {0x34, 0x2, 0x0, 0x1, [@IFLA_VLAN_ID={0x6, 0x1, 0x3}, @IFLA_VLAN_INGRESS_QOS={0x28, 0x4, 0x0, 0x1, [@IFLA_VLAN_QOS_MAPPING={0xc, 0x1, {0x81, 0xfffffffb}}, @IFLA_VLAN_QOS_MAPPING={0xc, 0x1, {0x1, 0xfde}}, @IFLA_VLAN_QOS_MAPPING={0xc, 0x1, {0x2, 0x5}}]}]}}}, @IFLA_LINK={0x8, 0x5, r2}]}, 0x6c}, 0x1, 0x0, 0x0, 0x1}, 0x8008006) 1.0736337s ago: executing program 0 (id=12662): ioctl$sock_ipv6_tunnel_SIOCCHGTUNNEL(0xffffffffffffffff, 0x89f3, &(0x7f0000000140)={'syztnl0\x00', &(0x7f00000000c0)={'syztnl0\x00', 0x0, 0x2f, 0xf, 0x2, 0x4, 0x68, @empty, @empty, 0x96, 0x7807, 0x9, 0xc6}}) bpf$PROG_LOAD(0x5, &(0x7f0000000200)={0xc, 0xe, &(0x7f0000001740)=ANY=[@ANYRESDEC=0x0], &(0x7f0000000340)='GPL\x00', 0x0, 0x0, 0x0, 0x41000, 0x2, '\x00', r0}, 0x94) r1 = accept4$tipc(0xffffffffffffffff, 0x0, &(0x7f0000000000), 0x80800) getsockopt$TIPC_SOCK_RECVQ_DEPTH(r1, 0x10f, 0x84, &(0x7f0000000040), &(0x7f0000000080)=0x4) ioctl$sock_ipv6_tunnel_SIOCCHGTUNNEL(0xffffffffffffffff, 0x89f3, &(0x7f0000000140)={'syztnl0\x00', &(0x7f00000000c0)={'syztnl0\x00', 0x0, 0x2f, 0xf, 0x2, 0x4, 0x68, @empty, @empty, 0x96, 0x7807, 0x9, 0xc6}}) (async) bpf$PROG_LOAD(0x5, &(0x7f0000000200)={0xc, 0xe, &(0x7f0000001740)=ANY=[@ANYRESDEC=0x0], &(0x7f0000000340)='GPL\x00', 0x0, 0x0, 0x0, 0x41000, 0x2, '\x00', r0}, 0x94) (async) accept4$tipc(0xffffffffffffffff, 0x0, &(0x7f0000000000), 0x80800) (async) getsockopt$TIPC_SOCK_RECVQ_DEPTH(r1, 0x10f, 0x84, &(0x7f0000000040), &(0x7f0000000080)=0x4) (async) 949.550706ms ago: executing program 4 (id=12663): r0 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000001240)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000000)=@newlink={0x20, 0x10, 0x10, 0x0, 0x25dfdbfa, {0x0, 0x0, 0x0, 0x0, 0x10020, 0x35288}}, 0x20}, 0x1, 0x0, 0x0, 0x2000c014}, 0x4000000) socket$netlink(0x10, 0x3, 0x0) (async) sendmsg$nl_route(r0, &(0x7f0000001240)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000000)=@newlink={0x20, 0x10, 0x10, 0x0, 0x25dfdbfa, {0x0, 0x0, 0x0, 0x0, 0x10020, 0x35288}}, 0x20}, 0x1, 0x0, 0x0, 0x2000c014}, 0x4000000) (async) 850.6256ms ago: executing program 0 (id=12664): sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000000)={0x0}, 0x1, 0x0, 0x0, 0x4000811}, 0x0) r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = socket$alg(0x26, 0x5, 0x0) setsockopt$ALG_SET_KEY(0xffffffffffffffff, 0x117, 0x1, &(0x7f0000000480)="b19ccccf84f531d9ec214627c11430", 0xf) sendmmsg$alg(0xffffffffffffffff, &(0x7f0000004c80)=[{0x0, 0x0, &(0x7f0000000300)=[{&(0x7f0000000940)="1beb41ea4ea9ca354f167d9eaee7dc35eca218b865688d79fe31cbe00d190c853bfe6a22bd7dec0023aa0e038d07000040e37e00f7dd3afafdbc70e1b5928033df5e82fd76f31e8b29a0f05c2cef56f56cd0330dc984004f220b7dcb23a05d530df65691cf6a3cceb7a97c673856f552ded9530b52fe6d1e662090d2802233ec1adca9eaab9dd6f04b2717ed1552cf46dc28cd3fbf1ec1eaedd80d1da838a00a1e229ce16d2c1a411be06f715e8b6aa7552800d5", 0xb4}, {&(0x7f0000000b00)}], 0x2, 0x0, 0x0, 0x4004090}, {0x0, 0x0, &(0x7f0000000340)=[{&(0x7f0000000540)="d21e61c0af08368aedabcf6e445f1ca30a2f37d1f6d14042", 0x18}, {&(0x7f0000000c00)}, {&(0x7f0000000cc0)="a659d6cd13b743c3883fa66b26998868e129449c58fe04d445f9c63392ec1473c4e34a11a18e0fa2c3ff1fefe4200a23a2befe7c334b021bbad3522f8f3f36083d885cb29fa1829ff0caa3eb06fcfa1cc00d19092f9d6d93590fd4671bce11ec7b2f3912c5fe0804a2647a4de1f6d804e2da914136a7a4b169f152ec6af9204c3465d58e410029e4f28574ebfef1ac2fc1d17d5133793c9e9fbe4889c2a1427cb84332f6d4dad0f47d084b27c6c5afe46d605c7c33fa61fee2bdf78c16167904fab9a81bbb8a0ee73a56e9a67549a2701def6cc0224db8d147e08f15ec7d6f38ef", 0xe1}], 0x3, 0x0, 0x0, 0x1}], 0x2, 0x4004000) bind$alg(r1, &(0x7f00000004c0)={0x26, 'skcipher\x00', 0x0, 0x0, 'cbc-camellia-asm\x00'}, 0x58) setsockopt$ALG_SET_KEY(r1, 0x117, 0x1, &(0x7f0000000280)="ad56b6c5820fae9d6dcd3292ea54c7beef915d564c90c200", 0x18) r2 = accept4(r1, 0x0, 0x0, 0x800) sendmmsg$alg(r2, &(0x7f0000000040)=[{0x0, 0x0, &(0x7f0000000000)=[{&(0x7f0000000600)="f78d9ca38fffee0908866fe884d1ff1a8c918d4f5b458f543cbdfec0cecf42936f1a9440aa0654234b621994332a14c5f1752fc49e565d46f96f309c9c98310337b99bba66acb68dfe121b945b9e82eaa64a5a9d34e5241e511959dfa8ae00"/107, 0x6b}, {&(0x7f0000000140)="ebe3a0e9796cfd1647e299f4e376fdba128280b372219d205e81f4a7f71c1926aae1efd7e0054a863f3d5cfe6cb55b5bb9fa6935849e6098ed884e7cb51726b360fbb37b4fe035bbb095873048", 0x4d}, {&(0x7f00000003c0)="e8700e444d50a969ff67347cff6127e6ef12ee3819271482a4975a52c1ab9b8b4db3945d1032005eabe97b4dc33a47d3a158da988456d30026b433186f53cdcdb93a4722bf306a10470d50f5cb1ece9ead3459bab1cf1538cd0b157653c5e892962c80f158c443e9c6ad7d2a8103ef2f4b93766b9a21501f94c1568b13756b66f74f46cf801704d2da8b96c34070b233af0afcc436712e58ed25e721193af05a045ad3fdc928f02f3dbad19d3e66eebda2e63f3f46ef4511cee26d7b48241847bf9e343ef4674c45e2a085060f11", 0xce}], 0x3, &(0x7f0000000380)=[@op={0x18, 0x117, 0x3, 0x1}], 0x18}], 0x1, 0x40800) recvmsg(r2, &(0x7f00000005c0)={0x0, 0x0, &(0x7f00000001c0)=[{&(0x7f00000000c0)=""/81, 0x7ffff000}, {&(0x7f0000000200)=""/83, 0x20000253}], 0x2}, 0x0) syz_genetlink_get_family_id$nl80211(&(0x7f0000000080), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f00000013c0)={'wlan1\x00'}) sendmsg$NL80211_CMD_FRAME(r0, &(0x7f0000000580)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f0000001400)=ANY=[@ANYBLOB="f4060000", @ANYBLOB="521ce15ec74bdebef649fedd26cbbcf2ae59b4ce70c05ca54b149d50d4902d7c036ff8", @ANYBLOB="01000000000000e14f003b00000008000300", @ANYBLOB="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", @ANYRES64=r2], 0x6f4}}, 0x20000000) r3 = socket(0x10, 0x3, 0x6) bind$inet6(r3, &(0x7f0000000240)={0xa, 0x4e20, 0xf, @empty, 0x9}, 0x1c) r4 = socket$netlink(0x10, 0x3, 0x0) r5 = socket$nl_route(0x10, 0x3, 0x0) r6 = socket$nl_generic(0x10, 0x3, 0x10) r7 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000080), r6) ioctl$sock_SIOCGIFINDEX_80211(r6, 0x8933, &(0x7f00000000c0)={'wlan1\x00', 0x0}) sendmsg$NL80211_CMD_SET_INTERFACE(r6, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000000)={0x24, r7, 0x5, 0x0, 0x0, {{}, {@val={0x8, 0x3, r8}, @void}}, [@NL80211_ATTR_IFTYPE={0x8, 0x5, 0x4}]}, 0x24}, 0x1, 0x0, 0x0, 0x4000801}, 0xc0c4) r9 = socket$alg(0x26, 0x5, 0x0) bind$alg(r9, &(0x7f00000004c0)={0x26, 'hash\x00', 0x0, 0x0, 'sha3-256\x00'}, 0x58) r10 = syz_open_procfs$namespace(0x0, &(0x7f0000000200)='ns/pid_for_children\x00') pread64(r10, 0x0, 0x0, 0xfff) r11 = accept4(r9, 0x0, 0x0, 0x800) sendmmsg$alg(r11, &(0x7f0000000040)=[{0x0, 0x0, &(0x7f0000000000)=[{&(0x7f00000003c0)="e8700e444d50a969ff67347cff6127e6ef12ee3819271482a4975a52c1ab9b8b4db3945d1032005eabe97b4dc33a47d3a158da988456d30026b433186f53cdcdb93a4722bf306a10470d50f5cb1ece9ead3459bab1cf1538cd0b157653c5e892962c80f158c443e9", 0x68}], 0x1}], 0x1, 0x40800) ioctl$sock_SIOCGIFINDEX(r5, 0x8933, &(0x7f0000000040)={'tunl0\x00', 0x0}) sendmsg$nl_route_sched(r5, &(0x7f0000001200)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000080)=@gettclass={0x0, 0x2a, 0x200, 0x70bd28, 0x25dfdbfd, {0x0, 0x0, 0x0, r12, {0x6, 0x3900667fe9cd03c3}, {0xffff, 0xc}, {0x9, 0xf}}, [""]}, 0x7c}}, 0x810) sendmmsg(r4, &(0x7f00000002c0), 0x40000000000009f, 0x0) 714.111194ms ago: executing program 4 (id=12665): r0 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r0, &(0x7f00000005c0)={0x0, 0x0, &(0x7f0000000580)={&(0x7f0000000340)=ANY=[@ANYBLOB="480000001e00010027bd7000fddbdf25fc0000b9578e10071d333d0000000000000004d207003200fe8000000000000000000000000000aa0400000001350000080023"], 0x48}}, 0x0) syz_emit_ethernet(0x3e, &(0x7f0000000080)={@local, @multicast, @void, {@ipv4={0x800, @tcp={{0x7, 0x4, 0x0, 0x0, 0x30, 0x64, 0x0, 0x0, 0x6, 0x0, @private=0xa010101, @local, {[@generic={0x82, 0x2}, @generic={0x7, 0x6, "bb8e1297"}]}}, {{0x4e21, 0x4e22, 0x41424344, 0x41424344, 0x0, 0x6, 0x5, 0x2, 0xffff}}}}}}, 0x0) 580.844546ms ago: executing program 0 (id=12666): r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000000), 0x40241, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000200)={'syzkaller1\x00', 0xc201}) (async, rerun: 64) r1 = socket$kcm(0x2, 0x3, 0x2) (async, rerun: 64) r2 = socket$packet(0x11, 0x3, 0x300) (async) r3 = socket$packet(0x11, 0x2, 0x300) (async, rerun: 64) r4 = bpf$MAP_CREATE(0x0, &(0x7f0000000800)=ANY=[@ANYBLOB="0b00000008000000010001000900000001"], 0x50) (rerun: 64) bpf$MAP_GET_NEXT_KEY(0x2, &(0x7f0000000080)={r4, &(0x7f0000000080), &(0x7f0000000200)=""/166}, 0x20) (async) bpf$PROG_LOAD(0x5, &(0x7f0000000540)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r4, @ANYBLOB="0000000000000000b70800000d0000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000100000095"], 0x0, 0x0, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xa000000}, 0x94) (async) r5 = bpf$PROG_LOAD(0x5, &(0x7f0000000880)={0x1, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000000)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x10, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) setsockopt$sock_attach_bpf(r3, 0x1, 0x32, &(0x7f0000000180)=r5, 0x4) (async) r6 = bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000480)={0x6, 0x3, &(0x7f0000000680)=ANY=[@ANYBLOB="1800000002000000000000000000000095"], &(0x7f0000000040)='syzkaller\x00'}, 0x90) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000600)={r6, 0x5, 0xe, 0x0, &(0x7f00000000c0)="279a004c6588d5d6dc03d5cc2a00", 0x0, 0xd01, 0x2a0, 0x0, 0x0, 0x0, 0x0, 0x2}, 0x50) r7 = syz_init_net_socket$ax25(0x3, 0x5, 0xc4) accept4(r7, 0x0, 0x0, 0x800) (async) recvmmsg(r3, &(0x7f0000001700)=[{{0x0, 0x0, 0x0}, 0x13013911}], 0x1, 0x40, 0x0) getsockopt$SO_COOKIE(r2, 0x1, 0x39, &(0x7f0000000100), &(0x7f0000000140)=0x8) ioctl$SIOCSIFHWADDR(r1, 0x8914, &(0x7f0000000040)={'syzkaller1\x00', @broadcast}) (async, rerun: 64) write$tun(r0, &(0x7f00000000c0)={@val={0x8, 0x800}, @val={0x7, 0x3, 0x3, 0x2, 0x14}, @ipv4=@tcp={{0x5, 0x4, 0x0, 0x4, 0x28, 0x8000, 0x0, 0x8, 0x2f, 0x0, @initdev={0xac, 0x1e, 0x0, 0x0}, @broadcast}, {{0x100, 0x88a8, 0x41424344, 0x41424344, 0x0, 0x0, 0x5, 0x20, 0x5}}}}, 0x36) (rerun: 64) 522.968982ms ago: executing program 4 (id=12667): r0 = socket$nl_generic(0x10, 0x3, 0x10) openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0) socket$packet(0x11, 0x2, 0x300) r1 = socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$tipc2(&(0x7f0000006340), 0xffffffffffffffff) sendmsg$TIPC_NL_PEER_REMOVE(r1, 0x0, 0x4000000) bpf$MAP_CREATE(0x0, &(0x7f0000000180)=@bloom_filter={0x1e, 0x0, 0x1, 0x7, 0x0, 0x1}, 0x48) r2 = socket$packet(0x11, 0x3, 0x300) setsockopt$packet_int(r2, 0x107, 0x14, &(0x7f0000000080)=0xfff, 0x4) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000000)) pipe(&(0x7f0000000080)) socketpair(0x1, 0x100000005, 0x0, &(0x7f0000000000)={0xffffffffffffffff}) r4 = socket$inet_udp(0x2, 0x2, 0x0) setsockopt$IPT_SO_SET_REPLACE(r4, 0x0, 0x40, &(0x7f0000000000)=@raw={'raw\x00', 0x8, 0x3, 0x398, 0x0, 0xa, 0x148, 0x0, 0x10, 0x300, 0x2a8, 0x2a8, 0x300, 0x2a8, 0x3, 0x0, {[{{@uncond, 0x0, 0x70, 0xb0, 0x0, {0x200003ae, 0x7f00}}, @common=@unspec=@RATEEST={0x40, 'RATEEST\x00', 0x0, {'syz1\x00', 0x1, 0x1, {0xc9e5}}}}, {{@uncond, 0x0, 0x1f0, 0x250, 0x0, {}, [@common=@inet=@hashlimit3={{0x158}, {'wg2\x00', {0xffffffffffffffff, 0xff, 0x0, 0x0, 0x0, 0x7fff, 0x200}}}, @inet=@rpfilter={{0x28}}]}, @common=@SET={0x60, 'SET\x00', 0x0, {{0x3, [0x2, 0x2, 0x6, 0x0, 0x3, 0x1], 0x3, 0x3}, {0x2, [0x0, 0x8, 0x1, 0x5, 0x7, 0x7], 0x2, 0x5}}}}], {{'\x00', 0xc8, 0x70, 0x98}, {0x28}}}}, 0x3f8) getpeername$packet(r3, &(0x7f0000000000)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @dev}, &(0x7f00000000c0)=0x14) sendmmsg(r2, &(0x7f0000000440)=[{{&(0x7f0000000700)=@xdp={0x2c, 0x0, r5}, 0x80, &(0x7f00000004c0)=[{&(0x7f0000000180)='O', 0x36}], 0x1}}], 0x1, 0x0) r6 = socket$key(0xf, 0x3, 0x2) sendmsg$key(r6, &(0x7f0000000040)={0x4000000, 0x0, &(0x7f0000000000)={&(0x7f0000000380)=ANY=[@ANYBLOB="020f0000100000000000000000000000030005000000000002000000ac1e00010000000000000000080012000008000000000000000000000600000000000000000000000000000000000000000000000000000000000000fc020000000000000000000000000000030006000000000002"], 0x80}}, 0x0) r7 = bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000340)=ANY=[@ANYBLOB="02000000040000000800000001"], 0x48) r8 = bpf$PROG_LOAD(0x5, &(0x7f0000000500)={0x1f, 0x11, &(0x7f0000000200)=ANY=[@ANYBLOB="18000000ffffffff000000000000000085000000a8000000b7080000000000007b8af8ff00000000b7080000000000007b8af0ff00000000bfa100000000000007010000f8ffffffbfa400000000000007040000f0ffffffb70200000800000018230000", @ANYRES32=r7, @ANYBLOB="0000000000000000b705000000000000850000000400000095"], &(0x7f0000000b00)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x1a, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000340)={r8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x48) sendmsg$nl_generic(r0, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000001100)={0x30, 0x40, 0x1, 0x7fffc, 0x4, {0x1}, [@nested={0x4, 0x48}, @nested={0x10, 0x1, 0x0, 0x1, [@nested={0xc, 0x10, 0x0, 0x1, [@typed={0x6, 0x9, 0x0, 0x0, @str=':\x00'}]}]}, @typed={0x8, 0x2, 0x0, 0x0, @fd=r0}]}, 0x30}, 0x1, 0x0, 0x0, 0x400c801}, 0x4008094) r9 = socket$nl_generic(0x10, 0x3, 0x10) r10 = syz_genetlink_get_family_id$ethtool(&(0x7f0000000040), 0xffffffffffffffff) sendmsg$ETHTOOL_MSG_LINKMODES_SET(r9, &(0x7f0000000700)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000140)={0x2c, r10, 0x301, 0x70bd26, 0x25dfdbfb, {0x1c}, [@ETHTOOL_A_LINKMODES_HEADER={0x18, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'lo\x00'}]}]}, 0x2c}, 0x1, 0x0, 0x0, 0x80}, 0x40006) setsockopt$sock_int(r9, 0x1, 0x0, &(0x7f0000000000)=0x7, 0x4) 446.974579ms ago: executing program 3 (id=12668): r0 = socket$inet_udp(0x2, 0x2, 0x0) bind$inet(r0, &(0x7f0000000040)={0x2, 0x4e20, @empty}, 0x10) r1 = socket$qrtr(0x2a, 0x2, 0x0) connect$qrtr(r1, &(0x7f00000000c0)={0x2a, 0x0, 0x3fff}, 0xc) r2 = socket$qrtr(0x2a, 0x2, 0x0) connect$qrtr(r2, &(0x7f0000000040)={0x2a, 0x1, 0x4000}, 0xc) writev(r2, &(0x7f0000000340)=[{&(0x7f0000000080)="fb", 0x1}], 0x1) recvfrom(r1, 0x0, 0x0, 0x0, 0x0, 0x0) syz_emit_ethernet(0x80, &(0x7f0000000100)={@local, @link_local, @void, {@ipv4={0x800, @udp={{0x5, 0x4, 0x0, 0x1, 0x61, 0x0, 0x0, 0x0, 0x11, 0x0, @empty, @empty}, {0x4e24, 0x4e20, 0x4d, 0x0, @wg=@initiation={0x1, 0x1, "65a252e7cb7a5918c004a9971a46afced2c32642b1ec9fe34818d8ccd82041b7", "c930713c550e74ee13c2638ac75b2a9666efd31a34fce4498df8105d8bd8ed283a220c3a9becd8a70d3607ea8270d351", "ae12e16b560f2f8ac4ca3e745ce285f12f6e8719e7f1e7f286a68f76", {"980aa8fb8f80d69f1fb587086447e93e", "55e824bb69e833bd36300b088233545a"}}}}}}}, 0x0) recvmmsg(r0, &(0x7f0000002ec0)=[{{0x0, 0x0, 0x0, 0x0, &(0x7f00000000c0)=""/13, 0x62}, 0x2}], 0x1, 0x22, 0x0) setsockopt$sock_int(r0, 0x1, 0x28, &(0x7f0000000000)=0x3, 0x4) syz_emit_ethernet(0x2a, &(0x7f0000000080)={@local, @empty, @void, {@ipv4={0x800, @udp={{0x5, 0x4, 0x0, 0x0, 0x1c, 0x0, 0x0, 0x0, 0x11, 0x0, @empty, @empty}, {0x0, 0x4e20, 0x8}}}}}, 0x0) r3 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_route(r3, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000340)=@newlink={0x1f8, 0x10, 0x2, 0x0, 0x0, {0x0, 0x0, 0x0, 0x0, 0x4000c}, [@IFLA_AF_SPEC={0x1d8, 0x1a, 0x0, 0x1, [@AF_INET={0x50, 0x2, 0x0, 0x1, {0x4c, 0x1, 0x0, 0x1, [{0x8, 0x1c, 0x0, 0x0, 0x8}, {0x8, 0x7, 0x0, 0x0, 0xfffffff0}, {0x8, 0xa, 0x0, 0x0, 0x9}, {0x8, 0x11, 0x0, 0x0, 0x5}, {0x8, 0x15, 0x0, 0x0, 0xbee6}, {0x8, 0x15, 0x0, 0x0, 0x1}, {0x8, 0xd, 0x0, 0x0, 0x80000000}, {0x8, 0x7, 0x0, 0x0, 0xeff}, {0x8, 0x13, 0x0, 0x0, 0x2}]}}, @AF_INET6={0x64, 0xa, 0x0, 0x1, [@IFLA_INET6_ADDR_GEN_MODE={0x5, 0x8, 0x1}, @IFLA_INET6_TOKEN={0x14, 0x7, @initdev={0xfe, 0x88, '\x00', 0x0, 0x0}}, @IFLA_INET6_TOKEN={0x14, 0x7, @remote}, @IFLA_INET6_ADDR_GEN_MODE={0x5, 0x8, 0x9}, @IFLA_INET6_TOKEN={0x14, 0x7, @mcast1}, @IFLA_INET6_TOKEN={0x14, 0x7, @dev={0xfe, 0x80, '\x00', 0x3d}}]}, @AF_MPLS={0x4}, @AF_INET6={0x9c, 0xa, 0x0, 0x1, [@IFLA_INET6_TOKEN={0x14, 0x7, @empty}, @IFLA_INET6_ADDR_GEN_MODE={0x5, 0x8, 0x7c}, @IFLA_INET6_TOKEN={0x14, 0x7, @private2}, @IFLA_INET6_TOKEN={0x14, 0x7, @private1={0xfc, 0x1, '\x00', 0x1}}, @IFLA_INET6_TOKEN={0x14, 0x7, @remote}, @IFLA_INET6_ADDR_GEN_MODE={0x5, 0x8, 0x6}, @IFLA_INET6_ADDR_GEN_MODE={0x5, 0x8, 0xea}, @IFLA_INET6_ADDR_GEN_MODE={0x5, 0x8, 0x1}, @IFLA_INET6_TOKEN={0x14, 0x7, @initdev={0xfe, 0x88, '\x00', 0x0, 0x0}}, @IFLA_INET6_TOKEN={0x14, 0x7, @mcast2}]}, @AF_BRIDGE={0x4}, @AF_INET={0x28, 0x2, 0x0, 0x1, {0x24, 0x1, 0x0, 0x1, [{0x8, 0x9, 0x0, 0x0, 0x8a}, {0x8, 0x2, 0x0, 0x0, 0x2}, {0x8, 0xd, 0x0, 0x0, 0x800}, {0x8, 0x18, 0x0, 0x0, 0x7f}]}}, @AF_INET6={0x50, 0xa, 0x0, 0x1, [@IFLA_INET6_ADDR_GEN_MODE={0x5, 0x8, 0x5}, @IFLA_INET6_TOKEN={0x14, 0x7, @private0={0xfc, 0x0, '\x00', 0x1}}, @IFLA_INET6_TOKEN={0x14, 0x7, @rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x02'}, @IFLA_INET6_ADDR_GEN_MODE={0x5, 0x8, 0x9}, @IFLA_INET6_TOKEN={0x14, 0x7, @remote}]}, @AF_MPLS={0x4}]}]}, 0x1f8}}, 0x4040) 261.318621ms ago: executing program 4 (id=12669): r0 = socket$pppl2tp(0x18, 0x1, 0x1) r1 = socket$inet6(0xa, 0x3, 0x88) setsockopt$SO_BINDTODEVICE(r1, 0x1, 0x19, 0x0, 0x0) r2 = openat$tun(0xffffffffffffff9c, &(0x7f00000001c0), 0xa2f01, 0x0) ioctl$TUNSETIFF(r2, 0x400454ca, &(0x7f00000000c0)={'syzkaller1\x00', 0x6bf1c2d5adba8c32}) (async) r3 = socket$kcm(0x2, 0xa, 0x2) ioctl$SIOCSIFHWADDR(r3, 0x8914, &(0x7f0000000180)={'syzkaller1\x00', @link_local}) (async) write$tun(r2, &(0x7f0000000dc0)=ANY=[@ANYBLOB="0a000000bbbbbbbbbbbb0180c200000386dd6d002000006488ff00000000000000000000000000000000ff020000000000000000000000000001"], 0x9e) socket$nl_route(0x10, 0x3, 0x0) (async) recvfrom$l2tp6(r1, 0x0, 0x0, 0x40000000, &(0x7f0000000300)={0xa, 0x0, 0x0, @local}, 0x20) (async) r4 = socket$inet6_udp(0xa, 0x2, 0x0) connect$pppl2tp(r0, &(0x7f0000000000)=@pppol2tpv3={0x18, 0x1, {0x3, r4, {0x2, 0x0, @dev={0xac, 0x14, 0x14, 0x20}}, 0x2}}, 0x2e) (async) r5 = socket$packet(0x11, 0x2, 0x300) sendmsg(r5, &(0x7f0000000480)={&(0x7f0000000000)=@hci={0x1f, 0x1, 0x1}, 0x80, &(0x7f0000000400)=[{&(0x7f0000000080)="046317", 0x10004}], 0x1}, 0x2400c000) r6 = syz_genetlink_get_family_id$l2tp(&(0x7f00000008c0), 0xffffffffffffffff) r7 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$L2TP_CMD_SESSION_DELETE(r7, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000040)={0x34, r6, 0x1, 0x1070bd2c, 0x4, {0x5}, [@L2TP_ATTR_PW_TYPE={0x6, 0x1, 0x5}, @L2TP_ATTR_CONN_ID={0x8, 0x9, 0x2}, @L2TP_ATTR_SESSION_ID={0x8}, @L2TP_ATTR_PEER_SESSION_ID={0x8, 0xc, 0xaa8}]}, 0x34}, 0x1, 0x0, 0x0, 0x20008000}, 0x30) (async) r8 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$TIPC_NL_LINK_GET(r8, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000040)=ANY=[], 0x7c}, 0x1, 0x0, 0x0, 0x48000}, 0x0) 191.406785ms ago: executing program 0 (id=12670): sendmsg$IPCTNL_MSG_EXP_NEW(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000300)={0x48, 0x0, 0x2, 0x201, 0x0, 0x0, {}, [@CTA_EXPECT_MASK={0x4}, @CTA_EXPECT_TUPLE={0x30, 0x2, 0x0, 0x1, [@CTA_TUPLE_IP={0x2c, 0x1, 0x0, 0x1, @ipv6={{0x14, 0x3, @dev={0xfe, 0x80, '\x00', 0x2c}}, {0x14, 0x4, @ipv4={'\x00', '\xff\xff', @dev={0xac, 0x14, 0x14, 0x39}}}}}]}]}, 0x48}, 0x1, 0x0, 0x0, 0x80}, 0x0) r0 = socket(0x10, 0x80002, 0x0) r1 = bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000340)=ANY=[@ANYBLOB="0200000004000000080000000100000080"], 0x48) bpf$BPF_MAP_CONST_STR_FREEZE(0x16, &(0x7f0000000140)={r1, 0xffffffffffffffff}, 0x4) ioctl$sock_ipv6_tunnel_SIOCDELTUNNEL(r0, 0x89f2, &(0x7f0000000500)={'ip6gre0\x00', &(0x7f0000000580)={'ip6gre0\x00', 0x0, 0x2f, 0x5, 0x7, 0x2400000, 0x42, @rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x02', @ipv4={'\x00', '\xff\xff', @multicast2}, 0x7800, 0x7800, 0x2}}) r4 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='cgroup.controllers\x00', 0x275a, 0x0) bind$rds(r4, &(0x7f0000000300)={0x2, 0x4e20, @local}, 0xffffffffffffff9b) write$cgroup_int(r4, &(0x7f0000000200), 0xffffffc1) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x2, 0x22051, r4, 0x0) mmap(&(0x7f00007a6000/0x3000)=nil, 0x3000, 0x100000c, 0x22051, r4, 0x0) bpf$BPF_GET_BTF_INFO(0xf, &(0x7f00000017c0)={0xffffffffffffffff, 0x20, &(0x7f0000001780)={&(0x7f0000000680)=""/198, 0xc6, 0x0, &(0x7f0000000780)=""/4096, 0x1000}}, 0x10) r6 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000040)='blkio.bfq.sectors\x00', 0x26e1, 0x0) close(r6) ioctl$SIOCSIFHWADDR(r6, 0x8b26, &(0x7f0000000100)={'wlan1\x00', @dev={'\xaa\xaa\xaa\xaa\xaa', 0x1d}}) bpf$PROG_LOAD(0x5, &(0x7f0000001880)={0x16, 0x1, &(0x7f00000002c0)=@raw=[@kfunc={0x85, 0x0, 0x2, 0x0, 0x3}], &(0x7f0000000380)='syzkaller\x00', 0x7f, 0x47, &(0x7f0000000480)=""/71, 0x40f00, 0x46, '\x00', r3, @fallback=0x36, r4, 0x8, &(0x7f0000000600)={0x4, 0x1}, 0x8, 0x10, &(0x7f0000000640)={0x1, 0xc, 0x37, 0x1}, 0x10, r5, r6, 0x3, &(0x7f0000001800)=[r2], &(0x7f0000001840)=[{0x2, 0x4, 0x9, 0x9}, {0x1, 0x2, 0xe, 0x6}, {0x1, 0x3, 0x2, 0x8}], 0x10, 0xb}, 0x94) r7 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x3, 0x11, &(0x7f00000003c0)=@framed={{}, [@call={0x85, 0x0, 0x0, 0x61}, @snprintf={{}, {}, {}, {}, {}, {}, {}, {}, {}, {0x18, 0x3, 0x2, 0x0, r1}}]}, &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @sched_cls, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000240)={r7, 0x0, 0x14, 0x0, &(0x7f0000000540)="3d25ff005b19c4cbd001709b080041fe7a8aa879", 0x0, 0x11, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x38) sendmsg$nl_route(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000300)=ANY=[@ANYBLOB="4800000010001fff0000056800080000faff0000", @ANYRES32=0x0, @ANYBLOB="c30c424700000000280012800a00010076786c616e00000018000280140010"], 0x48}}, 0x4004000) r8 = socket$inet6_udp(0xa, 0x2, 0x0) sendto$inet6(r8, &(0x7f0000000000)="05affa3b526810beec93e5", 0xb, 0x40000, &(0x7f00000001c0)={0xa, 0x4e23, 0x2b21, @rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x01', 0x15c}, 0x1c) sendmmsg$alg(r0, &(0x7f00000000c0), 0x492492492492627, 0x0) 7.109858ms ago: executing program 5 (id=12671): r0 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000040)={'bridge_slave_0\x00', 0x0}) r2 = bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000340)={0x2, 0x4, 0x8, 0x1, 0x80, 0x0}, 0x48) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000000)={0x18, 0x10, &(0x7f0000000600)=@framed={{}, [@snprintf={{}, {}, {}, {}, {}, {}, {}, {}, {}, {0x18, 0x3, 0x2, 0x0, r2}}]}, &(0x7f0000000300)='GPL\x00', 0x8, 0xff8, &(0x7f0000001e00)=""/4088}, 0x94) sendmsg$nl_route(r0, &(0x7f0000001300)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000080)=ANY=[@ANYBLOB="340000001c0001fc28bd7000fcdbdf2507000000", @ANYRES32=r1, @ANYBLOB="8000260b0a0002000180c200000c00000c000e80"], 0x34}, 0x1, 0x0, 0x0, 0x400c021}, 0x20040010) socketpair(0x1, 0x1, 0x2400000, &(0x7f0000000000)={0xffffffffffffffff}) sendmsg$qrtr(r3, &(0x7f0000000040)={0x0, 0x0, &(0x7f00000004c0)=[{&(0x7f0000000140)="47d43b6460dda3c95d624757e31807036f12c3e74489eb8352f3b16cc5b5846f12d6dd790110ac9ae393da065f32523f0d5327cf068d682f3d361a196e592267e7a6fb9f857c894c626aae8006b314089064c4c02f1504b3a3e77224d483f52cbf635e5d09d563304bc6ba3d618dfb85b4da2bc0a9de25028a99488cea20b997df90b6f4f8e04bd8d36046cfe72608b5f26025dab98368608bfdb4b42c4023c2dd1c673e8096ca2539da09871905", 0xae}, {&(0x7f0000000200)="56683fd28cc200e5fb57e7c36768d42cf3dbcd9bc6ddd09aa14bdf3be2ae44d93c1987ed2d089dd4a94ae56f8ffd52e44d00a3313ee7c5773eca8fc81bcfaea69df4aa2d2ec0a27de1a4e39f98bdf3bda80da21076e1ebb2a6b23b4acda9423d8fe95f372939a3bca9c021c8e693b51349129fcc9ed1f4f0e84431cc44aa2c546ad2b2d9672ce73672f98177f65de0414510e943b7b2db3619ee2de38d9d15e6e81959b8ed1dd92de9a73862c97c450148e09fcfcc15d91c30316228a72decc6f3bd254158a2e0b152b3bfc3f1e16a79d57276ffdcec52155cf88c408794dae6fb0c0b7d431d7ffaa0e3f140b591", 0xee}, {&(0x7f0000000300)="5cb4a2cd658337321587b7a6255da0b503246f09d6d287d86d7f1fc7dba8af69995f0444ce163f1e1600a3fef3b6208bcb8e463c015b644c4e31771702b8fd4f7b4d6f46a4e8bed046f89ca76eedfbb382e6c21e7a567a8a422cd4fcccc4743dd8ca1805ecd9c559bf855732df8730e4511fc6b13400b4f8de7c61f7823f", 0x7e}, {&(0x7f0000000380)="5750f2accf0a8fbc5b8dd9da35d7af2258ab1226d3cc42b7a690816d53bf7a2a2c7efabf57ff53ebe97a0725f8f17a1afa6d17ad8b00da6e5b661f3be4ea224c7a375bb67a3b74408b5169ccec57c52f", 0x50}, {&(0x7f0000000400)="4f68cdce9cf717ad173fc3a46cbf36edf285748c5912f21531efbea1a47804680c29882f7567e562ee7b80e29a918807907fe9a820e9a454be2208203e8cc9a680096aa957e90badd2e4c1ff130df9d23a21994215ce0d1a4c9082db2a433d294758b088aa00215d95d346d780c46f9214d4bbab1b355780cdf419232935d0d8a630e672857338c06a4c0a63f1037d8d44b33184125b31cbbebb1add7caa57db06d1d51d4082ecbf060c7a0cb1ece5a481cea1ffd81a5e0f3b5b", 0xba}], 0x5, &(0x7f0000000840)=ANY=[@ANYBLOB="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"], 0x2e0}, 0x38) socket$kcm(0x2d, 0x2, 0x0) bind$xdp(0xffffffffffffffff, &(0x7f0000000080)={0x2d, 0x0, 0x0, 0x100000c}, 0x10) 0s ago: executing program 7 (id=12672): r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$netlbl_mgmt(&(0x7f0000000040), r0) sendmsg$NLBL_MGMT_C_ADDDEF(r0, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000001380)={&(0x7f0000001480)={0x40, r1, 0x1, 0xfffffffc, 0x0, {}, [@NLBL_MGMT_A_IPV4MASK={0x8, 0x8, @broadcast}, @NLBL_MGMT_A_IPV6MASK={0x14, 0x6, @initdev={0xfe, 0x88, '\x00', 0x0, 0x0}}, @NLBL_MGMT_A_PROTOCOL={0x8, 0x2, 0x7}, @NLBL_MGMT_A_IPV4ADDR={0x8, 0x7, @empty}]}, 0x40}}, 0x80) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000580)={0x5, 0x5, &(0x7f00000003c0)=ANY=[@ANYBLOB="180000004830000000000000fa40000007010000080020007500feff0000820095"], &(0x7f0000000100)='GPL\x00', 0x3, 0xfa, &(0x7f00000007c0)=""/250, 0x0, 0x8}, 0x94) bpf$PROG_LOAD(0x5, &(0x7f00000017c0)={0x1, 0xe, &(0x7f0000002a00)=ANY=[@ANYBLOB="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"], &(0x7f00000001c0)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0x0, 0x10, &(0x7f0000000000), 0xfffffffffffffd00}, 0x48) r2 = socket$nl_generic(0x10, 0x3, 0x10) r3 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000380), 0xffffffffffffffff) r4 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX_80211(r4, 0x8933, &(0x7f0000000000)={'wlan1\x00', 0x0}) sendmsg$NL80211_CMD_FRAME(r4, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000fc0)={&(0x7f0000000400)={0x40, r3, 0x1, 0x0, 0x25dfdbfd, {{0x2}, {@val={0x8, 0x3, r5}, @val={0xc, 0x99, {0x9, 0x74}}}}, [@chandef_params=[@NL80211_ATTR_CENTER_FREQ1={0x8, 0xa0, 0x99e}], @chandef_params=[@NL80211_ATTR_WIPHY_FREQ={0x8, 0x26, @random=0x980}, @NL80211_ATTR_CHANNEL_WIDTH={0x8}]]}, 0x40}}, 0x20000000) ioctl$sock_SIOCGIFINDEX_80211(0xffffffffffffffff, 0x8933, &(0x7f00000000c0)={'wlan1\x00', 0x0}) r7 = socket(0x15, 0x5, 0x0) getsockopt(r7, 0x200000000114, 0x2714, 0x0, &(0x7f0000000000)) sendmsg$NL80211_CMD_START_NAN(r2, &(0x7f0000000240)={&(0x7f0000000080)={0x10, 0x0, 0x0, 0x80000}, 0xc, &(0x7f0000000200)={&(0x7f0000000140)={0x5c, r3, 0x800, 0x70bd2c, 0x25dfdbfd, {{}, {@val={0x8, 0x3, r6}, @void}}, [@NL80211_ATTR_BANDS={0x8, 0xef, 0x8}, @NL80211_ATTR_NAN_MASTER_PREF={0x5, 0xee, 0x1}, @NL80211_ATTR_BANDS={0x8, 0xef, 0x3}, @NL80211_ATTR_NAN_MASTER_PREF={0x5, 0xee, 0x1}, @NL80211_ATTR_BANDS={0x8, 0xef, 0x2}, @NL80211_ATTR_NAN_MASTER_PREF={0x5, 0xee, 0x76}, @NL80211_ATTR_NAN_MASTER_PREF={0x5, 0xee, 0x5}, @NL80211_ATTR_NAN_MASTER_PREF={0x5, 0xee, 0x4b}]}, 0x5c}, 0x1, 0x0, 0x0, 0x48d4}, 0x50) kernel console output (not intermixed with test programs): C1] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1478.098479][T19548] 8021q: adding VLAN 0 to HW filter on device macvlan0 [ 1478.116448][T19548] netlink: 28 bytes leftover after parsing attributes in process `syz.4.11590'. [ 1478.130569][T19552] 8021q: adding VLAN 0 to HW filter on device macvlan1 [ 1478.245547][T19563] netlink: 4 bytes leftover after parsing attributes in process `syz.0.11593'. [ 1478.339135][T19566] netlink: 'syz.4.11594': attribute type 5 has an invalid length. [ 1478.342550][T19237] veth0_vlan: entered promiscuous mode [ 1478.373992][T19566] ip6erspan0: entered promiscuous mode [ 1478.389840][T19237] veth1_vlan: entered promiscuous mode [ 1478.451686][T19237] veth0_macvtap: entered promiscuous mode [ 1478.466761][T19237] veth1_macvtap: entered promiscuous mode [ 1478.517294][T19237] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 1478.542051][T19237] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 1478.564896][ T8747] netdevsim netdevsim5 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 1478.586165][ T8747] netdevsim netdevsim5 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 1478.606312][ T8747] netdevsim netdevsim5 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 1478.619104][ T8747] netdevsim netdevsim5 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 1478.807291][ T6492] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 1478.842377][ T6492] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 1478.919258][ T8764] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 1478.934243][ T8764] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 1478.980132][ C1] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1479.440501][T19605] lo speed is unknown, defaulting to 1000 [ 1479.480770][T19614] openvswitch: netlink: Unexpected mask (mask=40040, allowed=10048) [ 1479.504035][T19605] lo speed is unknown, defaulting to 1000 [ 1479.643189][T19618] tipc: Enabling of bearer rejected, already enabled [ 1479.737251][T19620] netlink: 8 bytes leftover after parsing attributes in process `syz.0.11606'. [ 1479.757911][T19620] netlink: 620 bytes leftover after parsing attributes in process `syz.0.11606'. [ 1480.020448][ C0] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1480.028744][ C1] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1480.036901][ C0] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1480.045383][ C0] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1480.130457][T19631] can: request_module (can-proto-0) failed. [ 1480.152135][T19605] wg1 speed is unknown, defaulting to 1000 [ 1480.557906][T19648] openvswitch: netlink: Message has 4 unknown bytes. [ 1480.653408][T19650] netlink: 12 bytes leftover after parsing attributes in process `syz.5.11615'. [ 1480.755983][T19654] x_tables: duplicate underflow at hook 2 [ 1480.796222][T19656] netlink: 128 bytes leftover after parsing attributes in process `syz.5.11618'. [ 1480.847016][T19662] netlink: 'syz.0.11617': attribute type 21 has an invalid length. [ 1480.855637][T19662] netlink: 132 bytes leftover after parsing attributes in process `syz.0.11617'. [ 1481.060062][ C1] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1481.204747][T19673] veth0: Caught tx_queue_len zero misconfig [ 1481.319659][T19683] netlink: 212360 bytes leftover after parsing attributes in process `syz.3.11627'. [ 1481.320108][T19684] netlink: 212360 bytes leftover after parsing attributes in process `syz.3.11627'. [ 1481.487934][T19689] netlink: 'syz.3.11629': attribute type 10 has an invalid length. [ 1481.522421][T19689] team0: Device veth0_vlan failed to register rx_handler [ 1481.679499][T19694] netlink: 24 bytes leftover after parsing attributes in process `syz.0.11631'. [ 1481.883590][T19701] lo speed is unknown, defaulting to 1000 [ 1481.908242][T19701] lo speed is unknown, defaulting to 1000 [ 1482.100443][ C1] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1482.214802][T19721] lo speed is unknown, defaulting to 1000 [ 1482.300255][T19727] syz.4.11638: vmalloc error: size 8589938688, exceeds total pages, mode:0xdc0(GFP_KERNEL|__GFP_ZERO), nodemask=(null),cpuset=/,mems_allowed=0-1 [ 1482.315258][T19727] CPU: 1 UID: 0 PID: 19727 Comm: syz.4.11638 Not tainted syzkaller #0 PREEMPT(full) [ 1482.315288][T19727] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/24/2026 [ 1482.315300][T19727] Call Trace: [ 1482.315310][T19727] [ 1482.315319][T19727] dump_stack_lvl+0xe8/0x150 [ 1482.315355][T19727] warn_alloc+0x249/0x340 [ 1482.315379][T19727] ? stack_trace_save+0xa9/0x100 [ 1482.315409][T19727] ? __pfx_warn_alloc+0x10/0x10 [ 1482.315432][T19727] ? kasan_save_track+0x4f/0x80 [ 1482.315447][T19727] ? kasan_save_track+0x3e/0x80 [ 1482.315460][T19727] ? __kasan_kmalloc+0x93/0xb0 [ 1482.315475][T19727] ? __kmalloc_cache_noprof+0x3d1/0x6e0 [ 1482.315490][T19727] ? xskq_create+0x56/0x170 [ 1482.315510][T19727] ? xsk_setsockopt+0x54c/0x990 [ 1482.315526][T19727] ? do_sock_setsockopt+0x17c/0x1b0 [ 1482.315546][T19727] ? __x64_sys_setsockopt+0x13d/0x1b0 [ 1482.315564][T19727] ? do_syscall_64+0xe2/0xf80 [ 1482.315588][T19727] __vmalloc_node_range_noprof+0x132/0x1730 [ 1482.315633][T19727] ? __pfx___vmalloc_node_range_noprof+0x10/0x10 [ 1482.315655][T19727] ? __kasan_kmalloc+0x93/0xb0 [ 1482.315686][T19727] vmalloc_user_noprof+0xad/0xe0 [ 1482.315702][T19727] ? xskq_create+0xbf/0x170 [ 1482.315721][T19727] xskq_create+0xbf/0x170 [ 1482.315742][T19727] xsk_init_queue+0xad/0x110 [ 1482.315763][T19727] xsk_setsockopt+0x54c/0x990 [ 1482.315783][T19727] ? __pfx_xsk_setsockopt+0x10/0x10 [ 1482.315800][T19727] ? __pfx_aa_sk_perm+0x10/0x10 [ 1482.315822][T19727] ? aa_sock_opt_perm+0xff/0x1a0 [ 1482.315845][T19727] ? bpf_lsm_socket_setsockopt+0x9/0x20 [ 1482.315863][T19727] ? __pfx_xsk_setsockopt+0x10/0x10 [ 1482.315883][T19727] do_sock_setsockopt+0x17c/0x1b0 [ 1482.315908][T19727] __x64_sys_setsockopt+0x13d/0x1b0 [ 1482.315935][T19727] do_syscall_64+0xe2/0xf80 [ 1482.315954][T19727] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1482.315969][T19727] ? trace_irq_disable+0x37/0x100 [ 1482.315983][T19727] ? clear_bhb_loop+0x60/0xb0 [ 1482.316002][T19727] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1482.316017][T19727] RIP: 0033:0x7fb47b19aeb9 [ 1482.316034][T19727] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 1482.316048][T19727] RSP: 002b:00007fb47c0f7028 EFLAGS: 00000246 ORIG_RAX: 0000000000000036 [ 1482.316066][T19727] RAX: ffffffffffffffda RBX: 00007fb47b416180 RCX: 00007fb47b19aeb9 [ 1482.316078][T19727] RDX: 0000000000000006 RSI: 000000000000011b RDI: 0000000000000008 [ 1482.316088][T19727] RBP: 00007fb47b208c1f R08: 0000000000000004 R09: 0000000000000000 [ 1482.316098][T19727] R10: 0000200000000000 R11: 0000000000000246 R12: 0000000000000000 [ 1482.316108][T19727] R13: 00007fb47b416218 R14: 00007fb47b416180 R15: 00007fffae465e28 [ 1482.316140][T19727] [ 1482.316152][T19727] Mem-Info: [ 1482.458482][T19721] lo speed is unknown, defaulting to 1000 [ 1482.459837][T19727] active_anon:10173 inactive_anon:0 isolated_anon:0 [ 1482.459837][T19727] active_file:3143 inactive_file:40505 isolated_file:0 [ 1482.459837][T19727] unevictable:768 dirty:72 writeback:0 [ 1482.459837][T19727] slab_reclaimable:15427 slab_unreclaimable:224479 [ 1482.459837][T19727] mapped:34836 shmem:1380 pagetables:1670 [ 1482.459837][T19727] sec_pagetables:0 bounce:0 [ 1482.459837][T19727] kernel_misc_reclaimable:0 [ 1482.459837][T19727] free:1152776 free_pcp:24956 free_cma:0 [ 1482.653038][T19727] Node 0 active_anon:40692kB inactive_anon:0kB active_file:12572kB inactive_file:161816kB unevictable:1536kB isolated(anon):0kB isolated(file):0kB mapped:24656kB dirty:288kB writeback:0kB shmem:3984kB shmem_thp:0kB shmem_pmdmapped:0kB anon_thp:0kB kernel_stack:18084kB pagetables:6472kB sec_pagetables:0kB all_unreclaimable? no Balloon:0kB [ 1482.691127][T19727] Node 1 active_anon:0kB inactive_anon:0kB active_file:0kB inactive_file:204kB unevictable:1536kB isolated(anon):0kB isolated(file):0kB mapped:114688kB dirty:0kB writeback:0kB shmem:1536kB shmem_thp:0kB shmem_pmdmapped:0kB anon_thp:0kB kernel_stack:64kB pagetables:108kB sec_pagetables:0kB all_unreclaimable? no Balloon:0kB [ 1482.725547][T19727] Node 0 DMA free:11208kB boost:0kB min:208kB low:260kB high:312kB reserved_highatomic:0KB free_highatomic:0KB active_anon:0kB inactive_anon:0kB active_file:0kB inactive_file:0kB unevictable:0kB writepending:0kB zspages:0kB present:15992kB managed:15360kB mlocked:0kB bounce:0kB free_pcp:56kB local_pcp:32kB free_cma:0kB [ 1482.759690][T19727] lowmem_reserve[]: 0 2494 2495 2495 2495 [ 1482.765714][T19727] Node 0 DMA32 free:1264968kB boost:0kB min:34216kB low:42768kB high:51320kB reserved_highatomic:0KB free_highatomic:0KB active_anon:40692kB inactive_anon:0kB active_file:12572kB inactive_file:161816kB unevictable:1536kB writepending:288kB zspages:0kB present:3129332kB managed:2554036kB mlocked:0kB bounce:0kB free_pcp:41724kB local_pcp:17940kB free_cma:0kB [ 1482.805816][T19727] lowmem_reserve[]: 0 0 1 1 1 [ 1482.810949][T19727] Node 0 Normal free:0kB boost:0kB min:12kB low:12kB high:12kB reserved_highatomic:0KB free_highatomic:0KB active_anon:0kB inactive_anon:0kB active_file:0kB inactive_file:0kB unevictable:0kB writepending:0kB zspages:0kB present:1048580kB managed:1132kB mlocked:0kB bounce:0kB free_pcp:0kB local_pcp:0kB free_cma:0kB [ 1482.843068][T19727] lowmem_reserve[]: 0 0 0 0 0 [ 1482.847920][T19727] Node 1 Normal free:3334320kB boost:0kB min:55668kB low:69584kB high:83500kB reserved_highatomic:0KB free_highatomic:0KB active_anon:0kB inactive_anon:0kB active_file:0kB inactive_file:204kB unevictable:1536kB writepending:0kB zspages:0kB present:4194300kB managed:4111100kB mlocked:0kB bounce:0kB free_pcp:57356kB local_pcp:29608kB free_cma:0kB [ 1482.892179][T19727] lowmem_reserve[]: 0 0 0 0 0 [ 1482.897055][T19727] Node 0 DMA: 2*4kB (U) 0*8kB 0*16kB 2*32kB (U) 2*64kB (U) 2*128kB (U) 2*256kB (U) 2*512kB (U) 3*1024kB (U) 3*2048kB (UM) 0*4096kB = 11208kB [ 1482.897387][T19701] wg1 speed is unknown, defaulting to 1000 [ 1482.912598][T19727] Node 0 DMA32: 8558*4kB (UM) 10434*8kB (UM) 6992*16kB (UME) 240*32kB (UM) 70*64kB (UM) 454*128kB (UM) 778*256kB (UME) 492*512kB (UM) 304*1024kB (UM) 99*2048kB (UM) 0*4096kB = 1264968kB [ 1482.937123][T19727] Node 0 Normal: 0*4kB 0*8kB 0*16kB 0*32kB 0*64kB 0*128kB 0*256kB 0*512kB 0*1024kB 0*2048kB 0*4096kB = 0kB [ 1482.950186][T19727] Node 1 Normal: 188*4kB (UE) 56*8kB (UME) 48*16kB (UME) 92*32kB (UME) 34*64kB (UME) 12*128kB (UME) 9*256kB (UM) 7*512kB (UM) 10*1024kB (UME) 8*2048kB (UE) 804*4096kB (UM) = 3334320kB [ 1482.968831][T19727] Node 0 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=1048576kB [ 1483.030019][T19727] Node 0 hugepages_total=2 hugepages_free=2 hugepages_surp=0 hugepages_size=2048kB [ 1483.049666][T19727] Node 1 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=1048576kB [ 1483.069392][T19727] Node 1 hugepages_total=2 hugepages_free=2 hugepages_surp=0 hugepages_size=2048kB [ 1483.079618][T19727] 45024 total pagecache pages [ 1483.085216][T19727] 0 pages in swap cache [ 1483.089483][T19727] Free swap = 124996kB [ 1483.094229][T19727] Total swap = 124996kB [ 1483.098860][T19727] 2097051 pages RAM [ 1483.103722][T19727] 0 pages HighMem/MovableOnly [ 1483.108522][T19727] 426644 pages reserved [ 1483.112864][T19727] 0 pages cma reserved [ 1483.140029][ C1] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1483.427294][T19739] __nla_validate_parse: 1 callbacks suppressed [ 1483.427316][T19739] netlink: 44 bytes leftover after parsing attributes in process `syz.4.11641'. [ 1483.446945][T19721] wg1 speed is unknown, defaulting to 1000 [ 1483.540238][ C1] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1483.548869][ C1] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1483.557412][ C1] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1483.578069][T19741] netlink: 24 bytes leftover after parsing attributes in process `syz.4.11642'. [ 1484.180530][ C1] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1485.174454][T19765] lo speed is unknown, defaulting to 1000 [ 1485.220031][ C1] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1485.244901][T19765] lo speed is unknown, defaulting to 1000 [ 1485.263005][T19776] lo speed is unknown, defaulting to 1000 [ 1485.554345][T19776] lo speed is unknown, defaulting to 1000 [ 1485.653550][T19788] netlink: 8 bytes leftover after parsing attributes in process `syz.0.11651'. [ 1485.842219][T19765] wg1 speed is unknown, defaulting to 1000 [ 1486.079439][T19794] bridge0: port 1(bridge_slave_0) entered disabled state [ 1486.112693][T19794] bridge0: entered allmulticast mode [ 1486.260528][ C1] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1486.310949][T19776] wg1 speed is unknown, defaulting to 1000 [ 1486.528629][T19741] nci: __nci_request: wait_for_completion_interruptible_timeout failed -512 [ 1486.760853][T19798] xt_hashlimit: size too large, truncated to 1048576 [ 1486.980208][ C0] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1486.988554][ C0] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1486.997057][ C0] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1487.154356][T19807] netlink: 'syz.4.11655': attribute type 1 has an invalid length. [ 1487.181786][T19807] netlink: 8 bytes leftover after parsing attributes in process `syz.4.11655'. [ 1487.402221][T19821] netlink: 'syz.3.11658': attribute type 1 has an invalid length. [ 1487.472999][T19824] netlink: 'syz.3.11658': attribute type 1 has an invalid length. [ 1487.485607][T19821] 8021q: adding VLAN 0 to HW filter on device bond6 [ 1487.494822][T19824] netlink: 'syz.3.11658': attribute type 2 has an invalid length. [ 1487.515593][T19824] netlink: 200 bytes leftover after parsing attributes in process `syz.3.11658'. [ 1487.559487][T19824] netlink: 16 bytes leftover after parsing attributes in process `syz.3.11658'. [ 1487.748347][T19827] SET target dimension over the limit! [ 1487.763412][T19827] netlink: 28 bytes leftover after parsing attributes in process `syz.3.11658'. [ 1487.875251][ T30] audit: type=1800 audit(1770616693.602:49): pid=19829 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.4.11659" name=0C dev="tmpfs" ino=2801 res=0 errno=0 [ 1488.045744][T19839] syzkaller0: entered promiscuous mode [ 1488.080400][T19839] syzkaller0: entered allmulticast mode [ 1488.340451][ C1] net_ratelimit: 1 callbacks suppressed [ 1488.340472][ C1] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1488.361582][T19850] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 1488.363202][T19851] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 1488.542019][T10197] Bluetooth: hci2: unexpected cc 0x0c03 length: 249 > 1 [ 1488.554344][T10197] Bluetooth: hci2: unexpected cc 0x1003 length: 249 > 9 [ 1488.563777][T10197] Bluetooth: hci2: unexpected cc 0x1001 length: 249 > 9 [ 1488.574184][T10197] Bluetooth: hci2: unexpected cc 0x0c23 length: 249 > 4 [ 1488.590944][T10197] Bluetooth: hci2: unexpected cc 0x0c38 length: 249 > 2 [ 1488.606906][T19863] netlink: 12 bytes leftover after parsing attributes in process `syz.4.11669'. [ 1488.654906][T19859] lo speed is unknown, defaulting to 1000 [ 1488.664535][T19859] lo speed is unknown, defaulting to 1000 [ 1488.735597][T19872] netlink: 4 bytes leftover after parsing attributes in process `syz.4.11671'. [ 1489.047629][T19859] wg1 speed is unknown, defaulting to 1000 [ 1489.304481][T19859] chnl_net:caif_netlink_parms(): no params data found [ 1489.310033][T19889] netlink: 12 bytes leftover after parsing attributes in process `syz.3.11676'. [ 1489.365770][T19893] IPVS: set_ctl: invalid protocol: 44 255.255.255.255:20001 [ 1489.377883][T19889] workqueue: Failed to create a rescuer kthread for wq "bond7": -EINTR [ 1489.380059][ C1] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1489.511701][T19859] bridge0: port 1(bridge_slave_0) entered blocking state [ 1489.547482][T19859] bridge0: port 1(bridge_slave_0) entered disabled state [ 1489.567559][T19859] bridge_slave_0: entered allmulticast mode [ 1489.594874][T19859] bridge_slave_0: entered promiscuous mode [ 1489.623344][T19859] bridge0: port 2(bridge_slave_1) entered blocking state [ 1489.637243][T19859] bridge0: port 2(bridge_slave_1) entered disabled state [ 1489.651449][T19859] bridge_slave_1: entered allmulticast mode [ 1489.682029][T19859] bridge_slave_1: entered promiscuous mode [ 1489.726963][T19905] netlink: 28 bytes leftover after parsing attributes in process `syz.0.11678'. [ 1489.781357][T19905] netlink: 28 bytes leftover after parsing attributes in process `syz.0.11678'. [ 1489.841001][T19905] syzkaller0: entered promiscuous mode [ 1489.847353][T19905] syzkaller0: entered allmulticast mode [ 1489.858838][T19905] netlink: 12 bytes leftover after parsing attributes in process `syz.0.11678'. [ 1489.926311][T19859] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 1490.045540][T19912] bond10 (unregistering): Released all slaves [ 1490.271351][T19928] netlink: 'syz.3.11683': attribute type 10 has an invalid length. [ 1490.340643][ C0] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1490.349310][ C0] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1490.357804][ C0] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1490.420548][ C1] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1490.562726][T19859] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 1490.613986][T19930] netlink: 28 bytes leftover after parsing attributes in process `syz.3.11683'. [ 1490.660205][T21937] Bluetooth: hci2: command tx timeout [ 1490.689452][T19859] team0: Port device team_slave_0 added [ 1490.704679][T19859] team0: Port device team_slave_1 added [ 1490.746702][T19859] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 1490.754640][T19859] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 1490.782467][T19859] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 1490.839777][T19859] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 1490.865523][T19859] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 1490.932407][T19859] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 1491.078749][T19944] netlink: 44 bytes leftover after parsing attributes in process `syz.3.11686'. [ 1491.107271][T19859] hsr_slave_0: entered promiscuous mode [ 1491.119636][T19859] hsr_slave_1: entered promiscuous mode [ 1491.126846][T19859] debugfs: 'hsr0' already exists in 'hsr' [ 1491.133297][T19859] Cannot create hsr debugfs directory [ 1491.228022][T19962] lo speed is unknown, defaulting to 1000 [ 1491.278506][T19962] lo speed is unknown, defaulting to 1000 [ 1491.460029][ C1] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1491.571860][T19971] netlink: 12 bytes leftover after parsing attributes in process `syz.3.11693'. [ 1491.671550][T19973] A link change request failed with some changes committed already. Interface bridge_slave_0 may have been left with an inconsistent configuration, please check. [ 1491.794979][T19974] tipc: Resetting bearer [ 1492.385248][T20010] netlink: 'syz.3.11699': attribute type 4 has an invalid length. [ 1492.436992][T20013] netlink: 'syz.3.11699': attribute type 4 has an invalid length. [ 1492.500410][ C1] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1492.726407][T19859] netdevsim netdevsim7 netdevsim0: renamed from eth0 [ 1492.740174][T21937] Bluetooth: hci2: command tx timeout [ 1492.773769][T19859] netdevsim netdevsim7 netdevsim1: renamed from eth1 [ 1492.806485][T19859] netdevsim netdevsim7 netdevsim2: renamed from eth2 [ 1492.861201][T19962] wg1 speed is unknown, defaulting to 1000 [ 1492.895080][T19859] netdevsim netdevsim7 netdevsim3: renamed from eth3 [ 1493.311160][T20047] netlink: 8 bytes leftover after parsing attributes in process `syz.5.11706'. [ 1493.540162][ C1] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1493.589286][T20068] syzkaller0: tun_chr_ioctl cmd 1074025673 [ 1493.598883][T20068] syzkaller0: tun_chr_ioctl cmd 1074025673 [ 1493.700585][ C1] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1493.709121][ C1] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1493.717785][ C1] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1493.775654][T20066] syzkaller0: tun_chr_ioctl cmd 1074025681 [ 1493.781953][T20068] syzkaller0: tun_chr_ioctl cmd 1074025673 [ 1493.792765][T19859] 8021q: adding VLAN 0 to HW filter on device bond0 [ 1493.973222][T19859] 8021q: adding VLAN 0 to HW filter on device team0 [ 1494.012089][ T8764] bridge0: port 1(bridge_slave_0) entered blocking state [ 1494.019292][ T8764] bridge0: port 1(bridge_slave_0) entered forwarding state [ 1494.452408][ T8764] bridge0: port 2(bridge_slave_1) entered blocking state [ 1494.459819][ T8764] bridge0: port 2(bridge_slave_1) entered forwarding state [ 1494.580547][ C1] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1494.820286][T21937] Bluetooth: hci2: command tx timeout [ 1494.989068][T20115] netlink: 20 bytes leftover after parsing attributes in process `syz.0.11716'. [ 1495.419001][T19859] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 1495.620259][ C1] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1495.688129][T20147] netlink: 'syz.4.11720': attribute type 4 has an invalid length. [ 1495.713231][T20144] bond0: option downdelay: invalid value (18446744073709551607) [ 1495.730285][T20144] bond0: option downdelay: allowed values 0 - 2147483647 [ 1495.739809][T20149] netlink: 'syz.4.11720': attribute type 4 has an invalid length. [ 1495.975386][T20164] netlink: 8 bytes leftover after parsing attributes in process `syz.0.11724'. [ 1496.023330][T20160] lo speed is unknown, defaulting to 1000 [ 1496.050393][T20166] netlink: 8 bytes leftover after parsing attributes in process `syz.0.11724'. [ 1496.110742][T20160] lo speed is unknown, defaulting to 1000 [ 1496.434479][T20183] rdma_rxe: rxe_newlink: rxe creation allowed on top of a real device only [ 1496.539759][T20184] netlink: 64 bytes leftover after parsing attributes in process `syz.5.11728'. [ 1496.655058][T20160] wg1 speed is unknown, defaulting to 1000 [ 1496.660453][ C1] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1496.675268][T19859] veth0_vlan: entered promiscuous mode [ 1496.818637][T19859] veth1_vlan: entered promiscuous mode [ 1496.900909][T21937] Bluetooth: hci2: command tx timeout [ 1497.060619][ C0] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1497.069407][ C0] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1497.078196][ C0] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1497.176477][T20192] bond1: option lacp_active: mode dependency failed, not supported in mode balance-rr(0) [ 1497.193022][T20192] bond1 (unregistering): Released all slaves [ 1497.225851][T20198] netdevsim netdevsim0 eth3 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 1497.268680][T20198] netdevsim netdevsim0 eth3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1497.324598][T19859] veth0_macvtap: entered promiscuous mode [ 1497.357654][T19859] veth1_macvtap: entered promiscuous mode [ 1497.413600][T20198] netdevsim netdevsim0 eth2 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 1497.423759][T20198] netdevsim netdevsim0 eth2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1497.496759][T19859] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 1497.534776][T20198] netdevsim netdevsim0 eth1 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 1497.555043][T20198] netdevsim netdevsim0 eth1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1497.595851][T19859] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 1497.644332][ T8756] netdevsim netdevsim7 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 1497.663936][T20198] netdevsim netdevsim0 eth0 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 1497.690313][T20198] netdevsim netdevsim0 eth0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1497.768384][ T8756] netdevsim netdevsim7 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 1497.793879][T20214] tipc: Enabling of bearer rejected, failed to enable media [ 1497.824800][ T8756] netdevsim netdevsim7 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 1497.858503][ T8756] netdevsim netdevsim7 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 1497.959486][T20208] netlink: 20 bytes leftover after parsing attributes in process `syz.5.11732'. [ 1498.087325][ T8738] netdevsim netdevsim0 eth0: set [0, 0] type 1 family 0 port 8472 - 0 [ 1498.108435][ T8738] netdevsim netdevsim0 eth0: set [1, 0] type 2 family 0 port 6081 - 0 [ 1498.135747][ T8738] netdevsim netdevsim0 eth1: set [0, 0] type 1 family 0 port 8472 - 0 [ 1498.144296][ T8738] netdevsim netdevsim0 eth1: set [1, 0] type 2 family 0 port 6081 - 0 [ 1498.195307][ T8738] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 1498.220171][ T8738] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 1498.249408][ T524] netdevsim netdevsim0 eth2: set [0, 0] type 1 family 0 port 8472 - 0 [ 1498.269116][ T524] netdevsim netdevsim0 eth2: set [1, 0] type 2 family 0 port 6081 - 0 [ 1498.312090][ T8738] netdevsim netdevsim0 eth3: set [0, 0] type 1 family 0 port 8472 - 0 [ 1498.329136][ T8738] netdevsim netdevsim0 eth3: set [1, 0] type 2 family 0 port 6081 - 0 [ 1498.393349][ T524] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 1498.421271][ T524] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 1498.600787][T20233] tipc: Enabled bearer , priority 0 [ 1498.628765][T20233] syzkaller0: entered promiscuous mode [ 1498.650565][T20233] syzkaller0: entered allmulticast mode [ 1498.681561][T20241] xt_hashlimit: size too large, truncated to 1048576 [ 1498.698719][T20241] xt_hashlimit: max too large, truncated to 1048576 [ 1498.713845][T20233] tipc: Resetting bearer [ 1498.725394][T20242] net_ratelimit: 1 callbacks suppressed [ 1498.725414][T20242] openvswitch: netlink: IP tunnel TTL not specified. [ 1498.739130][T20231] tipc: Resetting bearer [ 1498.746246][ C1] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1498.767069][T20241] xt_hashlimit: size too large, truncated to 1048576 [ 1498.779482][T20241] xt_hashlimit: max too large, truncated to 1048576 [ 1498.860763][T20231] tipc: Disabling bearer [ 1498.874877][T20252] netlink: 'syz.5.11743': attribute type 3 has an invalid length. [ 1498.902793][T20249] netlink: 348 bytes leftover after parsing attributes in process `syz.4.11741'. [ 1499.038173][T20250] syzkaller0: entered promiscuous mode [ 1499.043958][T20250] syzkaller0: entered allmulticast mode [ 1499.704453][T20294] netlink: 8 bytes leftover after parsing attributes in process `syz.5.11751'. [ 1499.780151][ C1] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1500.507452][ C1] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1500.516117][ C1] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1500.524652][ C1] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1500.820474][ C1] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1501.866189][ C1] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1502.277090][T20297] lo speed is unknown, defaulting to 1000 [ 1502.313426][T20297] lo speed is unknown, defaulting to 1000 [ 1502.338731][T20299] netlink: 'syz.3.11753': attribute type 62 has an invalid length. [ 1502.365003][T20300] netlink: 'syz.3.11753': attribute type 62 has an invalid length. [ 1502.540033][T20308] netlink: 80 bytes leftover after parsing attributes in process `syz.7.11757'. [ 1502.580979][T20308] netlink: 8 bytes leftover after parsing attributes in process `syz.7.11757'. [ 1502.617970][T20308] bridge_slave_0: left allmulticast mode [ 1502.631423][T20313] Cannot find set identified by id 65534 to match [ 1502.720183][T20308] bridge_slave_0: left promiscuous mode [ 1502.726040][T20308] bridge0: port 1(bridge_slave_0) entered disabled state [ 1502.785402][T20322] netlink: 20 bytes leftover after parsing attributes in process `syz.0.11761'. [ 1502.792367][T20308] bridge_slave_1: left allmulticast mode [ 1502.808775][T20308] bridge_slave_1: left promiscuous mode [ 1502.835001][T20308] bridge0: port 2(bridge_slave_1) entered disabled state [ 1502.900437][ C1] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1502.912834][T20308] bond0: (slave bond_slave_0): Releasing backup interface [ 1502.947184][T20308] bond0: (slave bond_slave_1): Releasing backup interface [ 1503.017390][T20308] team0: Port device team_slave_0 removed [ 1503.036234][T20308] team0: Port device team_slave_1 removed [ 1503.045371][T20308] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 1503.054401][T20308] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 1503.065509][T20308] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 1503.073395][T20308] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 1503.085396][T20308] A link change request failed with some changes committed already. Interface hsr_slave_0 may have been left with an inconsistent configuration, please check. [ 1503.124280][T20319] netlink: 'syz.4.11760': attribute type 10 has an invalid length. [ 1503.158981][T20323] syzkaller0: entered promiscuous mode [ 1503.166207][T20323] syzkaller0: entered allmulticast mode [ 1503.215616][T20319] bond0: (slave wlan1): Enslaving as an active interface with a down link [ 1503.299151][T20343] netlink: 156 bytes leftover after parsing attributes in process `syz.0.11765'. [ 1503.329630][T20345] netlink: 156 bytes leftover after parsing attributes in process `syz.0.11765'. [ 1503.330706][T20343] netlink: 20 bytes leftover after parsing attributes in process `syz.0.11765'. [ 1503.370860][T20345] netlink: 20 bytes leftover after parsing attributes in process `syz.0.11765'. [ 1503.574257][T20297] wg1 speed is unknown, defaulting to 1000 [ 1503.585117][T20340] rdma_rxe: rxe_newlink: failed to add bond_slave_0 [ 1503.663352][T20355] netlink: 12 bytes leftover after parsing attributes in process `syz.7.11770'. [ 1503.720909][T20355] netlink: 12 bytes leftover after parsing attributes in process `syz.7.11770'. [ 1503.785030][T20355] netlink: 12 bytes leftover after parsing attributes in process `syz.7.11770'. [ 1503.860240][ C0] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1503.868786][ C0] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1503.877282][ C0] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1503.940639][ C1] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1504.168158][T20383] tipc: Enabling of bearer rejected, already enabled [ 1504.378174][T20388] dvmrp0: entered allmulticast mode [ 1504.619385][T20395] lo speed is unknown, defaulting to 1000 [ 1504.708998][T20395] lo speed is unknown, defaulting to 1000 [ 1504.980755][ C1] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1505.774077][T20395] wg1 speed is unknown, defaulting to 1000 [ 1506.020136][ C1] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1506.168607][T20447] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 1506.268659][T20456] tipc: Enabling of bearer rejected, failed to enable media [ 1506.289232][T20456] syzkaller0: entered promiscuous mode [ 1506.298385][T20456] syzkaller0: entered allmulticast mode [ 1506.413676][T20461] bond0: (slave rose0): Error: Device is in use and cannot be enslaved [ 1507.036023][T20485] tipc: Started in network mode [ 1507.055326][T20485] tipc: Node identity 4692bc4d8b9b, cluster identity 4711 [ 1507.063370][ C1] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1507.083219][T20485] tipc: Enabled bearer , priority 0 [ 1507.154198][T20479] lo speed is unknown, defaulting to 1000 [ 1507.164860][T20479] lo speed is unknown, defaulting to 1000 [ 1507.217140][T20485] tipc: Disabling bearer [ 1507.300571][ C0] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1507.309179][ C0] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1507.318250][ C0] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1507.575858][T20512] lo speed is unknown, defaulting to 1000 [ 1507.587879][T20512] lo speed is unknown, defaulting to 1000 [ 1508.017097][T20479] wg1 speed is unknown, defaulting to 1000 [ 1508.425404][T20529] Bluetooth: hci7: unexpected cc 0x0c03 length: 249 > 1 [ 1508.437503][T20529] Bluetooth: hci7: unexpected cc 0x1003 length: 249 > 9 [ 1508.448056][T20529] Bluetooth: hci7: unexpected cc 0x1001 length: 249 > 9 [ 1508.472193][T20529] Bluetooth: hci7: unexpected cc 0x0c23 length: 249 > 4 [ 1508.491228][T20529] Bluetooth: hci7: unexpected cc 0x0c38 length: 249 > 2 [ 1508.632785][T20535] __nla_validate_parse: 35 callbacks suppressed [ 1508.632808][T20535] netlink: 176 bytes leftover after parsing attributes in process `syz.4.11821'. [ 1508.814109][T20526] lo speed is unknown, defaulting to 1000 [ 1509.043133][T20512] wg1 speed is unknown, defaulting to 1000 [ 1509.063682][T20526] lo speed is unknown, defaulting to 1000 [ 1509.140707][ C1] net_ratelimit: 1 callbacks suppressed [ 1509.140733][ C1] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1509.423295][T20555] netlink: 'syz.7.11829': attribute type 21 has an invalid length. [ 1509.733585][T20559] netlink: 4 bytes leftover after parsing attributes in process `syz.7.11830'. [ 1510.180077][ C1] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1510.586518][T21937] Bluetooth: hci7: command tx timeout [ 1510.660709][ C1] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1510.669222][ C1] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1510.677800][ C1] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1511.143176][T20526] wg1 speed is unknown, defaulting to 1000 [ 1511.220505][ C1] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1511.605931][T20526] chnl_net:caif_netlink_parms(): no params data found [ 1511.938241][T20526] bridge0: port 1(bridge_slave_0) entered blocking state [ 1511.949268][T20526] bridge0: port 1(bridge_slave_0) entered disabled state [ 1511.965934][T20526] bridge_slave_0: entered allmulticast mode [ 1511.974700][T20526] bridge_slave_0: entered promiscuous mode [ 1512.008518][T20526] bridge0: port 2(bridge_slave_1) entered blocking state [ 1512.026584][T20526] bridge0: port 2(bridge_slave_1) entered disabled state [ 1512.045997][T20526] bridge_slave_1: entered allmulticast mode [ 1512.046918][T20645] netlink: 16 bytes leftover after parsing attributes in process `syz.7.11850'. [ 1512.065406][T20526] bridge_slave_1: entered promiscuous mode [ 1512.114355][T20642] netlink: 'syz.0.11851': attribute type 1 has an invalid length. [ 1512.122770][T20642] netlink: 52 bytes leftover after parsing attributes in process `syz.0.11851'. [ 1512.164933][T20642] sctp: [Deprecated]: syz.0.11851 (pid 20642) Use of int in max_burst socket option deprecated. [ 1512.164933][T20642] Use struct sctp_assoc_value instead [ 1512.209000][T20642] netlink: 28 bytes leftover after parsing attributes in process `syz.0.11851'. [ 1512.260184][ C1] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1512.318057][T20526] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 1512.333227][T20526] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 1512.378959][T20665] ip6tnl0: Caught tx_queue_len zero misconfig [ 1512.393751][T20526] team0: Port device team_slave_0 added [ 1512.409092][T20526] team0: Port device team_slave_1 added [ 1512.469230][T20526] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 1512.477775][T20526] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 1512.505253][T20526] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 1512.517798][T20670] netlink: 220 bytes leftover after parsing attributes in process `syz.4.11857'. [ 1512.562368][T20526] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 1512.569329][T20526] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 1512.598167][T20526] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 1512.664496][T21937] Bluetooth: hci7: command tx timeout [ 1512.682132][T20526] hsr_slave_0: entered promiscuous mode [ 1512.699357][T20526] hsr_slave_1: entered promiscuous mode [ 1512.706708][T20526] debugfs: 'hsr0' already exists in 'hsr' [ 1512.713249][T20526] Cannot create hsr debugfs directory [ 1513.060988][ T8748] hsr0: left allmulticast mode [ 1513.074292][ T8748] hsr_slave_0: left allmulticast mode [ 1513.079966][ T8748] hsr_slave_1: left allmulticast mode [ 1513.085397][ T8748] hsr0: left promiscuous mode [ 1513.090542][ T8748] bridge0: port 3(hsr0) entered disabled state [ 1513.300389][ C1] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1513.734629][ T8748] bond2 (unregistering): (slave bridge9): Releasing active interface [ 1513.783417][ T8748] bond0 (unregistering): (slave bridge_slave_1): Releasing backup interface [ 1513.794419][ T8748] bond0 (unregistering): Released all slaves [ 1513.810008][ T8748] bond1 (unregistering): Released all slaves [ 1513.825143][ T8748] bond2 (unregistering): Released all slaves [ 1513.838648][ T8748] bond3 (unregistering): Released all slaves [ 1513.855031][ T8748] bond4 (unregistering): Released all slaves [ 1513.875359][ T8748] bond5 (unregistering): Released all slaves [ 1513.889686][ T8748] bond6 (unregistering): Released all slaves [ 1514.013164][ T8748] : left promiscuous mode [ 1514.091393][ T8748] tipc: Disabling bearer [ 1514.110158][ T8748] tipc: Left network mode [ 1514.260223][ C0] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1514.268766][ C0] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1514.277228][ C0] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1514.340380][ C1] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1514.714811][ T8748] hsr_slave_0: left promiscuous mode [ 1514.721559][ T8748] hsr_slave_1: left promiscuous mode [ 1514.740495][T21937] Bluetooth: hci7: command tx timeout [ 1514.750718][T20529] Bluetooth: hci3: link tx timeout [ 1514.755955][T20529] Bluetooth: hci3: killing stalled connection 10:aa:aa:aa:aa:aa [ 1514.776364][ T8748] pim6reg (unregistering): left allmulticast mode [ 1515.168758][T20652] nci: __nci_request: wait_for_completion_interruptible_timeout failed -512 [ 1515.193521][T20662] netlink: 'syz.0.11856': attribute type 11 has an invalid length. [ 1515.202175][T20662] netlink: 199828 bytes leftover after parsing attributes in process `syz.0.11856'. [ 1515.224222][T20526] netdevsim netdevsim3 netdevsim0: renamed from eth0 [ 1515.303149][T20526] netdevsim netdevsim3 netdevsim1: renamed from eth1 [ 1515.361911][T20526] netdevsim netdevsim3 netdevsim2: renamed from eth2 [ 1515.383605][ C1] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1515.415590][T20526] netdevsim netdevsim3 netdevsim3: renamed from eth3 [ 1515.916854][ T8748] IPVS: stop unused estimator thread 0... [ 1515.954055][T20720] netlink: 496 bytes leftover after parsing attributes in process `syz.7.11867'. [ 1515.983703][T20730] lo speed is unknown, defaulting to 1000 [ 1516.007154][T20730] lo speed is unknown, defaulting to 1000 [ 1516.293091][T20526] 8021q: adding VLAN 0 to HW filter on device bond0 [ 1516.357984][T20526] 8021q: adding VLAN 0 to HW filter on device team0 [ 1516.409748][ T8748] bridge0: port 1(bridge_slave_0) entered blocking state [ 1516.417040][ T8748] bridge0: port 1(bridge_slave_0) entered forwarding state [ 1516.425073][ C1] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1516.467884][ T8748] bridge0: port 2(bridge_slave_1) entered blocking state [ 1516.475160][ T8748] bridge0: port 2(bridge_slave_1) entered forwarding state [ 1516.831749][T21937] Bluetooth: hci3: command 0x0405 tx timeout [ 1516.838039][T21937] Bluetooth: hci7: command tx timeout [ 1517.107533][T20730] wg1 speed is unknown, defaulting to 1000 [ 1517.460741][ C1] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1517.463165][T20772] netlink: 8 bytes leftover after parsing attributes in process `syz.0.11877'. [ 1517.576584][T20526] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 1517.700301][ C0] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1517.708909][ C0] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1517.717597][ C0] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1517.799498][T20526] veth0_vlan: entered promiscuous mode [ 1517.857686][T20526] veth1_vlan: entered promiscuous mode [ 1518.168186][T20526] veth0_macvtap: entered promiscuous mode [ 1518.358939][T20795] 8021q: adding VLAN 0 to HW filter on device bond10 [ 1518.381064][T20795] team0: Port device bond10 added [ 1518.388218][T20526] veth1_macvtap: entered promiscuous mode [ 1518.448528][T20808] tipc: Enabling of bearer rejected, already enabled [ 1518.507947][T20526] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 1518.600299][T20526] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 1518.698166][ T8749] netdevsim netdevsim3 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 1518.720797][ T8749] netdevsim netdevsim3 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 1518.781145][ T8749] netdevsim netdevsim3 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 1518.800643][ T8749] netdevsim netdevsim3 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 1519.056735][T20833] bond0: (slave sit0): Error: Device type is different from other slaves [ 1519.102399][ T8769] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 1519.150492][T20837] netlink: 8 bytes leftover after parsing attributes in process `syz.5.11887'. [ 1519.172047][ T8769] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 1519.257592][ T30] audit: type=1804 audit(1770616724.982:50): pid=20842 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=invalid_pcr cause=open_writers comm="syz.5.11887" name="/newroot/78/memory.events" dev="tmpfs" ino=413 res=1 errno=0 [ 1519.324269][ T30] audit: type=1800 audit(1770616724.982:51): pid=20842 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.5.11887" name="memory.events" dev="tmpfs" ino=413 res=0 errno=0 [ 1519.359197][ T8749] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 1519.377870][ T8749] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 1519.407060][T20837] lo speed is unknown, defaulting to 1000 [ 1519.422929][T20848] netlink: 20 bytes leftover after parsing attributes in process `syz.4.11889'. [ 1519.467386][T20837] lo speed is unknown, defaulting to 1000 [ 1519.527197][T20853] netlink: 124 bytes leftover after parsing attributes in process `syz.0.11892'. [ 1519.540468][ C1] net_ratelimit: 1 callbacks suppressed [ 1519.540489][ C1] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1519.958198][T20875] netlink: 20 bytes leftover after parsing attributes in process `syz.7.11895'. [ 1520.329325][T20891] netlink: 8 bytes leftover after parsing attributes in process `syz.4.11899'. [ 1520.580912][ C1] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1520.582566][ C0] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1520.600548][T20901] lo speed is unknown, defaulting to 1000 [ 1520.655661][T20901] lo speed is unknown, defaulting to 1000 [ 1520.921614][T20837] wg1 speed is unknown, defaulting to 1000 [ 1520.965868][T20913] netlink: 4 bytes leftover after parsing attributes in process `syz.7.11903'. [ 1521.060517][ C0] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1521.069049][ C0] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1521.077578][ C0] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1521.137038][T20918] netlink: 36 bytes leftover after parsing attributes in process `syz.7.11903'. [ 1521.150523][T20918] netlink: 32 bytes leftover after parsing attributes in process `syz.7.11903'. [ 1521.160196][T20890] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 1521.273053][T20916] syzkaller0: entered promiscuous mode [ 1521.299629][T20916] syzkaller0: entered allmulticast mode [ 1521.333602][T20915] lo speed is unknown, defaulting to 1000 [ 1521.385513][T20915] lo speed is unknown, defaulting to 1000 [ 1521.620499][ C1] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1521.955718][T20933] netlink: 'syz.3.11905': attribute type 32 has an invalid length. [ 1521.980186][T20933] netlink: 8 bytes leftover after parsing attributes in process `syz.3.11905'. [ 1522.117830][T20933] bond1: option coupled_control: invalid value (12) [ 1522.179201][T20933] bond1 (unregistering): Released all slaves [ 1522.249567][T20901] wg1 speed is unknown, defaulting to 1000 [ 1522.447381][T20944] netlink: 8 bytes leftover after parsing attributes in process `syz.3.11906'. [ 1522.469680][T20944] netlink: 32 bytes leftover after parsing attributes in process `syz.3.11906'. [ 1522.636197][T20950] netlink: 4 bytes leftover after parsing attributes in process `syz.3.11907'. [ 1522.660126][ C1] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1522.767065][T20953] netlink: 36 bytes leftover after parsing attributes in process `syz.3.11907'. [ 1522.786059][T20953] netlink: 32 bytes leftover after parsing attributes in process `syz.3.11907'. [ 1522.912435][T20951] lo speed is unknown, defaulting to 1000 [ 1523.023925][T20915] wg1 speed is unknown, defaulting to 1000 [ 1523.100144][T20951] lo speed is unknown, defaulting to 1000 [ 1523.605184][T20964] netlink: 'syz.7.11908': attribute type 28 has an invalid length. [ 1523.620741][T20964] netlink: 'syz.7.11908': attribute type 3 has an invalid length. [ 1523.629076][T20964] netlink: 'syz.7.11908': attribute type 28 has an invalid length. [ 1523.640957][T20964] netlink: 'syz.7.11908': attribute type 3 has an invalid length. [ 1523.659981][T20964] netlink: 'syz.7.11908': attribute type 28 has an invalid length. [ 1523.700565][ C1] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1523.722425][T20964] netlink: 'syz.7.11908': attribute type 3 has an invalid length. [ 1523.742395][T20964] netlink: 'syz.7.11908': attribute type 28 has an invalid length. [ 1523.762371][T20964] netlink: 'syz.7.11908': attribute type 3 has an invalid length. [ 1523.784277][T20964] netlink: 'syz.7.11908': attribute type 28 has an invalid length. [ 1524.198974][T20978] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 1524.421471][ C1] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1524.664873][T20985] bond1: invalid ARP target 0.0.0.0 specified for addition [ 1524.677115][T20985] bond1: option arp_ip_target: invalid value (0) [ 1524.704021][T20985] bond1 (unregistering): Released all slaves [ 1524.740145][ C1] net_ratelimit: 2 callbacks suppressed [ 1524.740169][ C1] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1525.058489][T20951] wg1 speed is unknown, defaulting to 1000 [ 1525.780479][ C1] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1525.891698][T21007] syzkaller0: entered promiscuous mode [ 1525.910007][T21007] syzkaller0: entered allmulticast mode [ 1526.820158][ C1] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1527.780193][ C0] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1527.789025][ C0] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1527.797543][ C0] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1527.860752][ C1] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1528.117719][T21021] lo speed is unknown, defaulting to 1000 [ 1528.124078][T21060] __nla_validate_parse: 65 callbacks suppressed [ 1528.124100][T21060] netlink: 24 bytes leftover after parsing attributes in process `syz.7.11921'. [ 1528.193651][T21021] lo speed is unknown, defaulting to 1000 [ 1528.380263][ T8749] veth1_to_hsr: left allmulticast mode [ 1528.391757][ T8749] veth1_to_hsr: left promiscuous mode [ 1528.397454][ T8749] bridge0: port 3(veth1_to_hsr) entered disabled state [ 1528.651615][ T8749] veth17: left allmulticast mode [ 1528.671948][T20754] Bluetooth: hci1: unexpected cc 0x0c03 length: 249 > 1 [ 1528.683620][ T8749] veth17: left promiscuous mode [ 1528.683995][T20754] Bluetooth: hci1: unexpected cc 0x1003 length: 249 > 9 [ 1528.688759][ T8749] bridge9: port 3(veth17) entered disabled state [ 1528.704407][T20754] Bluetooth: hci1: unexpected cc 0x1001 length: 249 > 9 [ 1528.745098][T20754] Bluetooth: hci1: unexpected cc 0x0c23 length: 249 > 4 [ 1528.755096][T20754] Bluetooth: hci1: unexpected cc 0x0c38 length: 249 > 2 [ 1528.777225][ T8749] veth0_to_bond: left promiscuous mode [ 1528.818066][ T8749] bridge9: port 2(veth0_to_bond) entered disabled state [ 1528.868108][ T8749] veth15: left allmulticast mode [ 1528.888845][ T8749] veth15: left promiscuous mode [ 1528.900509][ C1] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1528.923607][ T8749] bridge9: port 1(veth15) entered disabled state [ 1528.931381][T21088] netlink: 52 bytes leftover after parsing attributes in process `syz.3.11925'. [ 1528.990501][ T8749] team0: left allmulticast mode [ 1528.995618][ T8749] team_slave_0: left allmulticast mode [ 1529.013651][ T8749] team_slave_1: left allmulticast mode [ 1529.029933][ T8749] bond10: left allmulticast mode [ 1529.041471][ T8749] team0: left promiscuous mode [ 1529.046401][ T8749] team_slave_0: left promiscuous mode [ 1529.067646][ T8749] team_slave_1: left promiscuous mode [ 1529.074106][ T8749] bond10: left promiscuous mode [ 1529.079532][ T8749] bridge0: port 3(team0) entered disabled state [ 1529.090388][ T8749] bridge_slave_0: left allmulticast mode [ 1529.096182][ T8749] bridge_slave_0: left promiscuous mode [ 1529.103058][ T8749] bridge0: port 1(bridge_slave_0) entered disabled state [ 1529.430496][ T8749] bond14 (unregistering): (slave gretap1): Releasing backup interface [ 1529.454311][ T8749] dvmrp0 (unregistering): left allmulticast mode [ 1529.473613][ T8749] bond4 (unregistering): (slave geneve2): Releasing active interface [ 1529.490971][ T8749] team0: Port device geneve0 removed [ 1529.649043][ T8749] bond6 (unregistering): (slave bridge3): Releasing backup interface [ 1529.657543][ T8749] bridge3 (unregistering): left promiscuous mode [ 1529.934914][ T8749] bond0 (unregistering): (slave dummy0): Releasing backup interface [ 1529.943513][ C1] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1529.954631][ T8749] bond0 (unregistering): Released all slaves [ 1529.965744][ T8749] bond1 (unregistering): (slave veth3): Releasing active interface [ 1529.976138][ T8749] bond1 (unregistering): (slave veth5): Releasing active interface [ 1529.986723][ T8749] bond1 (unregistering): Released all slaves [ 1529.999768][ T8749] bond2 (unregistering): left allmulticast mode [ 1530.006190][ T8749] bond2 (unregistering): left promiscuous mode [ 1530.015739][ T8749] team0: Port device macvlan3 removed [ 1530.025629][ T8749] bond2 (unregistering): Released all slaves [ 1530.042626][ T8749] bond3 (unregistering): Released all slaves [ 1530.057733][ T8749] bond4 (unregistering): Released all slaves [ 1530.074526][ T8749] bond5 (unregistering): Released all slaves [ 1530.089618][ T8749] bond6 (unregistering): Released all slaves [ 1530.105513][ T8749] bond7 (unregistering): Released all slaves [ 1530.122091][ T8749] bond8 (unregistering): Released all slaves [ 1530.137418][ T8749] bond9 (unregistering): Released all slaves [ 1530.151643][ T8749] bond10 (unregistering): Released all slaves [ 1530.168594][ T8749] bond11 (unregistering): Released all slaves [ 1530.188039][ T8749] bond12 (unregistering): (slave vcan1): Releasing backup interface [ 1530.199661][ T8749] vcan1: left promiscuous mode [ 1530.206718][ T8749] bond12 (unregistering): Released all slaves [ 1530.222750][ T8749] bond13 (unregistering): Released all slaves [ 1530.238725][ T8749] bond14 (unregistering): (slave bond15): Releasing backup interface [ 1530.249661][ T8749] bond14 (unregistering): Released all slaves [ 1530.265668][ T8749] bond15 (unregistering): Released all slaves [ 1530.558557][ T8749] bond7 (unregistering): (slave geneve3): Releasing active interface [ 1530.574580][ T8749] tipc: Disabling bearer [ 1530.697827][ T8749] team0: Port device bridge2 removed [ 1530.803344][ T8749] bond6 (unregistering): (slave bridge4): Releasing backup interface [ 1530.821434][T20529] Bluetooth: hci1: command tx timeout [ 1530.949430][ T8749] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 1530.959637][ T8749] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 1530.970210][ T8749] bond0 (unregistering): (slave bridge_slave_1): Releasing backup interface [ 1530.980257][ C1] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1530.990322][ T8749] bond0 (unregistering): Released all slaves [ 1531.002260][ T8749] bond1 (unregistering): (slave vxcan3): Releasing backup interface [ 1531.011284][ T8749] bond1 (unregistering): Released all slaves [ 1531.024518][ T8749] bond2 (unregistering): Released all slaves [ 1531.039715][ T8749] bond3 (unregistering): Released all slaves [ 1531.054559][ T8749] bond4 (unregistering): Released all slaves [ 1531.074862][ T8749] bond5 (unregistering): Released all slaves [ 1531.088611][ T8749] bond6 (unregistering): Released all slaves [ 1531.104179][ T8749] bond7 (unregistering): Released all slaves [ 1531.122263][ T8749] team0: Port device macvlan2 removed [ 1531.135021][ T8749] bond8 (unregistering): Released all slaves [ 1531.151975][ T8749] bond9 (unregistering): Released all slaves [ 1531.166384][ T8749] team0: Port device bond10 removed [ 1531.177266][ T8749] bond10 (unregistering): Released all slaves [ 1531.499319][T21103] IPv6: RTM_NEWROUTE with no NLM_F_CREATE or NLM_F_REPLACE [ 1531.506650][T21103] IPv6: NLM_F_CREATE should be set when creating new route [ 1531.514063][T21103] IPv6: NLM_F_CREATE should be set when creating new route [ 1531.547581][T21074] lo speed is unknown, defaulting to 1000 [ 1531.588859][T21074] lo speed is unknown, defaulting to 1000 [ 1531.900156][T21112] IPv6: addrconf: prefix option has invalid lifetime [ 1531.970846][T21117] FAULT_INJECTION: forcing a failure. [ 1531.970846][T21117] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 1531.984778][T21021] wg1 speed is unknown, defaulting to 1000 [ 1532.004630][T21117] CPU: 0 UID: 0 PID: 21117 Comm: syz.0.11934 Not tainted syzkaller #0 PREEMPT(full) [ 1532.004660][T21117] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/24/2026 [ 1532.004673][T21117] Call Trace: [ 1532.004681][T21117] [ 1532.004691][T21117] dump_stack_lvl+0xe8/0x150 [ 1532.004724][T21117] should_fail_ex+0x412/0x560 [ 1532.004755][T21117] _copy_from_iter+0x1d3/0x1670 [ 1532.004784][T21117] ? unwind_next_frame+0xa5/0x23c0 [ 1532.004817][T21117] ? __pfx__copy_from_iter+0x10/0x10 [ 1532.004844][T21117] ? tun_get_user+0x6ff/0x3dd0 [ 1532.004871][T21117] ? page_copy_sane+0x4e/0x270 [ 1532.004900][T21117] copy_page_from_iter+0xdd/0x170 [ 1532.004932][T21117] tun_get_user+0x1d4b/0x3dd0 [ 1532.004952][T21117] ? tun_get_user+0x6ff/0x3dd0 [ 1532.004994][T21117] ? aa_file_perm+0x440/0x1630 [ 1532.005019][T21117] ? __pfx_tun_get_user+0x10/0x10 [ 1532.005043][T21117] ? __lock_acquire+0x6b5/0x2cf0 [ 1532.005085][T21117] ? ref_tracker_alloc+0x363/0x4d0 [ 1532.005114][T21117] ? __pfx_ref_tracker_alloc+0x10/0x10 [ 1532.005140][T21117] ? tun_get+0x1c/0x2f0 [ 1532.005162][T21117] ? tun_get+0x1c/0x2f0 [ 1532.005189][T21117] ? tun_get+0x1c/0x2f0 [ 1532.005209][T21117] ? tun_get+0x1c/0x2f0 [ 1532.005236][T21117] tun_chr_write_iter+0x113/0x200 [ 1532.005261][T21117] vfs_write+0x61d/0xb90 [ 1532.005300][T21117] ? __pfx_vfs_write+0x10/0x10 [ 1532.005338][T21117] ? __fget_files+0x2a/0x420 [ 1532.005371][T21117] ksys_write+0x150/0x270 [ 1532.005402][T21117] ? __pfx_ksys_write+0x10/0x10 [ 1532.005444][T21117] do_syscall_64+0xe2/0xf80 [ 1532.005470][T21117] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1532.005489][T21117] ? trace_irq_disable+0x37/0x100 [ 1532.005508][T21117] ? clear_bhb_loop+0x60/0xb0 [ 1532.005532][T21117] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1532.005551][T21117] RIP: 0033:0x7f3959b5b78e [ 1532.005570][T21117] Code: 08 0f 85 a5 a8 ff ff 49 89 fb 48 89 f0 48 89 d7 48 89 ce 4c 89 c2 4d 89 ca 4c 8b 44 24 08 4c 8b 4c 24 10 4c 89 5c 24 08 0f 05 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 80 00 00 00 00 48 83 ec 08 [ 1532.005604][T21117] RSP: 002b:00007f395aa79fb8 EFLAGS: 00000246 ORIG_RAX: 0000000000000001 [ 1532.005629][T21117] RAX: ffffffffffffffda RBX: 00007f395aa7a6c0 RCX: 00007f3959b5b78e [ 1532.005643][T21117] RDX: 000000000000034e RSI: 0000200000000780 RDI: 00000000000000c8 [ 1532.005656][T21117] RBP: 00007f395aa7a090 R08: 0000000000000000 R09: 0000000000000000 [ 1532.005668][T21117] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 1532.005680][T21117] R13: 00007f3959e16038 R14: 00007f3959e15fa0 R15: 00007ffc2c27bd28 [ 1532.005715][T21117] [ 1532.020457][ C1] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1532.153324][T21121] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1532.289028][T21123] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1532.642233][T21125] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1532.659462][T21136] netlink: 14593 bytes leftover after parsing attributes in process `syz.7.11937'. [ 1532.736401][T21141] syzkaller0: entered promiscuous mode [ 1532.745505][T21141] syzkaller0: entered allmulticast mode [ 1532.914134][T20529] Bluetooth: hci1: command tx timeout [ 1533.001287][ T8749] : left promiscuous mode [ 1533.043131][T21147] netlink: 16 bytes leftover after parsing attributes in process `syz.3.11941'. [ 1533.060193][ C1] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1533.143681][T21146] vlan2: entered promiscuous mode [ 1533.149796][T21146] bridge0: entered promiscuous mode [ 1533.162228][ T8749] æÿîÿ: left promiscuous mode [ 1533.210094][T21074] wg1 speed is unknown, defaulting to 1000 [ 1533.290029][T21158] netlink: 132 bytes leftover after parsing attributes in process `syz.7.11944'. [ 1533.320899][ T8749] : left promiscuous mode [ 1533.537308][ T8749] tipc: Disabling bearer [ 1533.540377][T21169] netlink: 20 bytes leftover after parsing attributes in process `syz.3.11945'. [ 1533.571368][ T8749] tipc: Left network mode [ 1533.651442][ T8749] tipc: Left network mode [ 1533.747636][T21174] IPv6: addrconf: prefix option has invalid lifetime [ 1534.173646][T21183] syzkaller0: entered promiscuous mode [ 1534.179181][T21183] syzkaller0: entered allmulticast mode [ 1534.312967][T21191] netlink: 8 bytes leftover after parsing attributes in process `syz.7.11951'. [ 1534.338667][T21074] chnl_net:caif_netlink_parms(): no params data found [ 1534.493758][T21198] tipc: Enabled bearer , priority 0 [ 1534.528710][T21193] pim6reg: entered allmulticast mode [ 1534.565727][T21198] tipc: Resetting bearer [ 1534.583540][T21195] pim6reg: left allmulticast mode [ 1534.695489][T21196] tipc: Disabling bearer [ 1534.767741][T21074] bridge0: port 1(bridge_slave_0) entered blocking state [ 1534.800452][T21074] bridge0: port 1(bridge_slave_0) entered disabled state [ 1534.807941][T21074] bridge_slave_0: entered allmulticast mode [ 1534.831449][T21074] bridge_slave_0: entered promiscuous mode [ 1534.878741][T21074] bridge0: port 2(bridge_slave_1) entered blocking state [ 1534.886937][T21074] bridge0: port 2(bridge_slave_1) entered disabled state [ 1534.895181][T21074] bridge_slave_1: entered allmulticast mode [ 1534.906454][T21221] netlink: 292 bytes leftover after parsing attributes in process `syz.0.11959'. [ 1534.911814][T21074] bridge_slave_1: entered promiscuous mode [ 1534.982334][T20529] Bluetooth: hci1: command tx timeout [ 1535.087927][T21074] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 1535.126057][T21074] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 1535.137922][T21227] netlink: 32 bytes leftover after parsing attributes in process `syz.5.11961'. [ 1535.212665][T21074] team0: Port device team_slave_0 added [ 1535.310698][T21074] team0: Port device team_slave_1 added [ 1535.418516][T21074] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 1535.428048][T21074] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 1535.428982][T21245] netlink: 68 bytes leftover after parsing attributes in process `syz.0.11965'. [ 1535.456998][T21074] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 1535.520000][T21074] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 1535.529636][T21074] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 1535.560733][T21074] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 1535.729506][T21074] hsr_slave_0: entered promiscuous mode [ 1535.738859][T21074] hsr_slave_1: entered promiscuous mode [ 1535.764646][T21074] debugfs: 'hsr0' already exists in 'hsr' [ 1535.771105][T21074] Cannot create hsr debugfs directory [ 1535.806144][T21259] netlink: 27 bytes leftover after parsing attributes in process `syz.0.11970'. [ 1536.197508][T21263] netlink: set zone limit has 4 unknown bytes [ 1536.210287][T21251] delete_channel: no stack [ 1536.517980][T21275] netlink: 8 bytes leftover after parsing attributes in process `syz.0.11974'. [ 1536.897811][T21294] netlink: 12 bytes leftover after parsing attributes in process `syz.5.11977'. [ 1536.983894][T21294] netlink: 40 bytes leftover after parsing attributes in process `syz.5.11977'. [ 1537.061780][T20529] Bluetooth: hci1: command tx timeout [ 1537.397066][T21312] validate_nla: 121 callbacks suppressed [ 1537.397090][T21312] netlink: 'syz.7.11982': attribute type 10 has an invalid length. [ 1537.574615][T21312] team0: Device ipvlan1 failed to register rx_handler [ 1537.589106][T21303] lo speed is unknown, defaulting to 1000 [ 1537.818208][T21303] lo speed is unknown, defaulting to 1000 [ 1537.871324][ T8749] hsr_slave_0: left promiscuous mode [ 1537.878411][ T8749] hsr_slave_1: left promiscuous mode [ 1537.939544][ T8749] hsr_slave_0: left promiscuous mode [ 1537.955204][ T8749] hsr_slave_1: left promiscuous mode [ 1538.026646][ T8749] pim6reg (unregistering): left allmulticast mode [ 1538.418607][T21334] openvswitch: netlink: Either Ethernet header or EtherType is required. [ 1539.066345][ T8749] team0 (unregistering): Port device team_slave_1 removed [ 1539.087207][ T8749] team0 (unregistering): Port device team_slave_0 removed [ 1539.594849][T21074] netdevsim netdevsim4 netdevsim0: renamed from eth0 [ 1539.646922][T21074] netdevsim netdevsim4 netdevsim1: renamed from eth1 [ 1539.687850][T21074] netdevsim netdevsim4 netdevsim2: renamed from eth2 [ 1539.745550][T21074] netdevsim netdevsim4 netdevsim3: renamed from eth3 [ 1539.844713][T21364] netlink: 'syz.0.11989': attribute type 32 has an invalid length. [ 1539.870288][T21303] wg1 speed is unknown, defaulting to 1000 [ 1539.878089][T21364] __nla_validate_parse: 1 callbacks suppressed [ 1539.878108][T21364] netlink: 60 bytes leftover after parsing attributes in process `syz.0.11989'. [ 1540.110919][T21379] IPv6: addrconf: prefix option has invalid lifetime [ 1540.355288][T21355] Bluetooth: hci0: Opcode 0x0c03 failed: -4 [ 1540.437973][T21074] 8021q: adding VLAN 0 to HW filter on device bond0 [ 1540.529412][T21074] 8021q: adding VLAN 0 to HW filter on device team0 [ 1540.552687][T21391] netlink: 256 bytes leftover after parsing attributes in process `syz.0.11993'. [ 1540.578500][ T8746] bridge0: port 1(bridge_slave_0) entered blocking state [ 1540.585753][ T8746] bridge0: port 1(bridge_slave_0) entered forwarding state [ 1540.608373][ T30] audit: type=1804 audit(1770616746.332:52): pid=21395 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=invalid_pcr cause=open_writers comm="syz.5.11994" name="/newroot/98/memory.events" dev="tmpfs" ino=518 res=1 errno=0 [ 1540.667084][T20716] bridge0: port 2(bridge_slave_1) entered blocking state [ 1540.674348][T20716] bridge0: port 2(bridge_slave_1) entered forwarding state [ 1540.701266][T21398] netlink: 12 bytes leftover after parsing attributes in process `syz.7.11995'. [ 1540.720626][ T30] audit: type=1800 audit(1770616746.332:53): pid=21395 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.5.11994" name="memory.events" dev="tmpfs" ino=518 res=0 errno=0 [ 1540.802930][ T30] audit: type=1804 audit(1770616746.332:54): pid=21395 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=invalid_pcr cause=ToMToU comm="syz.5.11994" name="/newroot/98/memory.events" dev="tmpfs" ino=518 res=1 errno=0 [ 1540.857089][T21401] xt_hashlimit: size too large, truncated to 1048576 [ 1540.923680][T21398] ipvlan2: entered promiscuous mode [ 1540.944399][T21398] 8021q: adding VLAN 0 to HW filter on device ipvlan2 [ 1541.342371][T21418] netlink: 8 bytes leftover after parsing attributes in process `syz.0.11999'. [ 1541.816621][ T8749] IPVS: stop unused estimator thread 0... [ 1541.839645][T21444] netlink: 4 bytes leftover after parsing attributes in process `syz.7.12005'. [ 1541.862225][T21074] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 1541.874219][ T8749] IPVS: stop unused estimator thread 0... [ 1541.948231][T21455] netlink: 8 bytes leftover after parsing attributes in process `syz.3.12007'. [ 1542.225839][T21466] netlink: 12 bytes leftover after parsing attributes in process `syz.3.12007'. [ 1542.242761][T21470] netlink: 4 bytes leftover after parsing attributes in process `syz.7.12005'. [ 1542.381608][T21455] bridge0: port 2(bridge_slave_1) entered disabled state [ 1542.389414][T21455] bridge0: port 1(bridge_slave_0) entered disabled state [ 1542.535710][T21455] team0: Failed to send port change of device team_slave_0 via netlink (err -105) [ 1542.551565][T21444] llcp: llcp_sock_recvmsg: Recv datagram failed state 4 -512 0 [ 1542.563519][T21455] team0: Failed to send port change of device team_slave_1 via netlink (err -105) [ 1542.591536][T21455] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 1542.609639][T21455] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 1542.910246][ T8756] netdevsim netdevsim3 netdevsim0: unset [1, 0] type 2 family 0 port 6081 - 0 [ 1542.930573][ T8756] netdevsim netdevsim3 netdevsim1: unset [1, 0] type 2 family 0 port 6081 - 0 [ 1543.014289][ T8756] netdevsim netdevsim3 netdevsim2: unset [1, 0] type 2 family 0 port 6081 - 0 [ 1543.047131][ T8756] netdevsim netdevsim3 netdevsim3: unset [1, 0] type 2 family 0 port 6081 - 0 [ 1543.608422][T21535] x_tables: duplicate underflow at hook 1 [ 1543.987871][ T8748] tipc: Disabling bearer [ 1544.478898][ T8748] bond0 (unregistering): (slave wlan1): Releasing backup interface [ 1544.499672][ T8748] bond0 (unregistering): Released all slaves [ 1544.528414][ T8748] bond1 (unregistering): Released all slaves [ 1544.586173][ T8748] bond2 (unregistering): Released all slaves [ 1544.633294][ T8748] bond3 (unregistering): Released all slaves [ 1544.682220][ T8748] bond4 (unregistering): Released all slaves [ 1544.714801][ T8748] bond5 (unregistering): Released all slaves [ 1544.762040][ T8748] bond6 (unregistering): Released all slaves [ 1544.794960][ T8748] bond7 (unregistering): Released all slaves [ 1544.835720][ T8748] bond8 (unregistering): Released all slaves [ 1544.856650][ T8748] bond9 (unregistering): Released all slaves [ 1544.878422][ T8748] team0: Port device bond10 removed [ 1544.885134][ T8748] bond10 (unregistering): Released all slaves [ 1544.897954][T21501] syzkaller0: entered promiscuous mode [ 1544.904492][T21501] syzkaller0: entered allmulticast mode [ 1545.050640][T21561] netlink: 'syz.0.12016': attribute type 1 has an invalid length. [ 1545.127031][T21074] veth0_vlan: entered promiscuous mode [ 1545.155274][T21074] veth1_vlan: entered promiscuous mode [ 1545.275500][T21074] veth0_macvtap: entered promiscuous mode [ 1545.297921][T21074] veth1_macvtap: entered promiscuous mode [ 1545.402153][T21074] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 1545.503053][T21578] netlink: 'syz.7.12021': attribute type 142 has an invalid length. [ 1545.550709][T21074] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 1545.569809][T20716] netdevsim netdevsim4 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 1545.617521][T20716] netdevsim netdevsim4 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 1545.641976][T20716] netdevsim netdevsim4 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 1545.681486][T20716] netdevsim netdevsim4 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 1545.790463][T21589] netlink: 24 bytes leftover after parsing attributes in process `syz.3.12025'. [ 1545.917054][ T8752] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 1545.949458][ T8752] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 1546.040772][T21605] netlink: 8 bytes leftover after parsing attributes in process `syz.7.12029'. [ 1546.065540][T20716] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 1546.067096][T21605] netlink: 24 bytes leftover after parsing attributes in process `syz.7.12029'. [ 1546.085275][T20716] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 1546.114555][T21612] A link change request failed with some changes committed already. Interface wg1 may have been left with an inconsistent configuration, please check. [ 1546.138879][T21605] netlink: 8 bytes leftover after parsing attributes in process `syz.7.12029'. [ 1546.155563][T21605] netlink: 'syz.7.12029': attribute type 5 has an invalid length. [ 1546.474728][ T8748] !: left promiscuous mode [ 1546.555129][T21639] netlink: 'syz.0.12037': attribute type 3 has an invalid length. [ 1546.585665][ T8748] : left promiscuous mode [ 1546.720348][ T8748] tipc: Left network mode [ 1546.772648][T21649] netlink: 44 bytes leftover after parsing attributes in process `syz.0.12039'. [ 1547.097982][T21653] netlink: 28 bytes leftover after parsing attributes in process `syz.0.12041'. [ 1547.124659][T21653] netlink: 28 bytes leftover after parsing attributes in process `syz.0.12041'. [ 1547.350660][T21661] netlink: 64 bytes leftover after parsing attributes in process `syz.7.12044'. [ 1547.374219][T21665] netlink: 'syz.0.12045': attribute type 3 has an invalid length. [ 1547.613426][T21675] dvmrp0: entered allmulticast mode [ 1547.859472][T21681] netlink: 48 bytes leftover after parsing attributes in process `syz.4.12049'. [ 1547.873679][T21691] netlink: 'syz.0.12053': attribute type 4 has an invalid length. [ 1548.104570][T21696] netlink: 4 bytes leftover after parsing attributes in process `syz.3.12054'. [ 1548.397690][T21715] IPv6: addrconf: prefix option has invalid lifetime [ 1548.608318][T21729] openvswitch: netlink: ufid size 20 bytes exceeds the range (1, 16) [ 1548.636313][T21729] openvswitch: netlink: Message has 16 unknown bytes. [ 1548.955439][T21745] mac80211_hwsim hwsim139 wlan1: entered promiscuous mode [ 1548.983477][T21745] macvlan0: entered promiscuous mode [ 1549.406132][T21757] x_tables: duplicate underflow at hook 1 [ 1550.806179][T21791] lo speed is unknown, defaulting to 1000 [ 1550.838143][T21791] lo speed is unknown, defaulting to 1000 [ 1550.922875][T21795] A link change request failed with some changes committed already. Interface dummy0 may have been left with an inconsistent configuration, please check. [ 1551.077798][T21821] __nla_validate_parse: 6 callbacks suppressed [ 1551.077821][T21821] netlink: 8 bytes leftover after parsing attributes in process `syz.7.12088'. [ 1551.295769][T21826] netlink: 'syz.0.12089': attribute type 8 has an invalid length. [ 1551.345259][T21829] netlink: 'syz.0.12089': attribute type 8 has an invalid length. [ 1551.348343][ T8748] IPVS: stop unused estimator thread 0... [ 1551.370125][T21830] netlink: 220 bytes leftover after parsing attributes in process `syz.7.12090'. [ 1551.584673][T21837] netlink: 20 bytes leftover after parsing attributes in process `syz.7.12093'. [ 1551.662481][T21842] Unsupported Adiantum instantiation: (pcbc(fcrypt),aes,nhpoly1305) [ 1551.753844][T21844] netlink: 12 bytes leftover after parsing attributes in process `syz.7.12094'. [ 1551.766086][T21844] netlink: 'syz.7.12094': attribute type 12 has an invalid length. [ 1551.794182][T21844] netlink: 12 bytes leftover after parsing attributes in process `syz.7.12094'. [ 1551.794182][ T8748] netdevsim netdevsim7 netdevsim0: set [0, 0] type 1 family 0 port 8472 - 0 [ 1551.794232][ T8748] netdevsim netdevsim7 netdevsim1: set [0, 0] type 1 family 0 port 8472 - 0 [ 1551.804675][T21844] netlink: 'syz.7.12094': attribute type 12 has an invalid length. [ 1551.861311][ T8748] netdevsim netdevsim7 netdevsim2: set [0, 0] type 1 family 0 port 8472 - 0 [ 1551.904002][ T8748] netdevsim netdevsim7 netdevsim3: set [0, 0] type 1 family 0 port 8472 - 0 [ 1552.034788][T21852] netlink: 72 bytes leftover after parsing attributes in process `syz.4.12096'. [ 1552.062696][T21852] netlink: 4 bytes leftover after parsing attributes in process `syz.4.12096'. [ 1552.455565][T21861] wg1 speed is unknown, defaulting to 1000 [ 1552.666947][T21858] bridge0: port 2(bridge_slave_1) entered disabled state [ 1552.674871][T21858] bridge0: port 1(bridge_slave_0) entered disabled state [ 1552.834872][T21858] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 1552.853122][T21870] netlink: 8 bytes leftover after parsing attributes in process `syz.7.12100'. [ 1552.855706][T21858] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 1553.015291][T21861] wg1 speed is unknown, defaulting to 1000 [ 1553.050069][ T8746] netdevsim netdevsim4 netdevsim0: unset [1, 0] type 2 family 0 port 6081 - 0 [ 1553.069416][ T8746] netdevsim netdevsim4 netdevsim1: unset [1, 0] type 2 family 0 port 6081 - 0 [ 1553.087797][T21861] wg1 speed is unknown, defaulting to 1000 [ 1553.120698][T21861] infiniband syz0: RDMA CMA: cma_listen_on_dev, error -98 [ 1553.143970][ T8746] netdevsim netdevsim4 netdevsim2: unset [1, 0] type 2 family 0 port 6081 - 0 [ 1553.163667][ T8746] netdevsim netdevsim4 netdevsim3: unset [1, 0] type 2 family 0 port 6081 - 0 [ 1553.192201][T21861] wg1 speed is unknown, defaulting to 1000 [ 1553.203771][T21861] wg1 speed is unknown, defaulting to 1000 [ 1553.212948][T21861] wg1 speed is unknown, defaulting to 1000 [ 1553.220726][T21875] FAULT_INJECTION: forcing a failure. [ 1553.220726][T21875] name failslab, interval 1, probability 0, space 0, times 0 [ 1553.228609][T21861] wg1 speed is unknown, defaulting to 1000 [ 1553.255077][T21861] wg1 speed is unknown, defaulting to 1000 [ 1553.265128][T21877] netlink: 12 bytes leftover after parsing attributes in process `syz.4.12102'. [ 1553.275813][T21875] CPU: 0 UID: 0 PID: 21875 Comm: syz.7.12101 Not tainted syzkaller #0 PREEMPT(full) [ 1553.275842][T21875] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/24/2026 [ 1553.275854][T21875] Call Trace: [ 1553.275863][T21875] [ 1553.275872][T21875] dump_stack_lvl+0xe8/0x150 [ 1553.275906][T21875] should_fail_ex+0x412/0x560 [ 1553.275937][T21875] should_failslab+0xa8/0x100 [ 1553.275963][T21875] __kmalloc_noprof+0xde/0x7e0 [ 1553.275982][T21875] ? kfree+0x4d/0x650 [ 1553.276006][T21875] ? tomoyo_realpath_from_path+0xe3/0x5d0 [ 1553.276040][T21875] tomoyo_realpath_from_path+0xe3/0x5d0 [ 1553.276070][T21875] ? tomoyo_domain+0xd7/0x130 [ 1553.276103][T21875] ? tomoyo_path_number_perm+0x219/0x630 [ 1553.276126][T21875] tomoyo_path_number_perm+0x246/0x630 [ 1553.276152][T21875] ? __pfx_tomoyo_path_number_perm+0x10/0x10 [ 1553.276174][T21875] ? __lock_acquire+0x6b5/0x2cf0 [ 1553.276220][T21875] ? __mutex_unlock_slowpath+0x1bd/0x7d0 [ 1553.276273][T21875] ? __fget_files+0x2a/0x420 [ 1553.276299][T21875] ? __fget_files+0x2a/0x420 [ 1553.276319][T21875] ? __fget_files+0x3a0/0x420 [ 1553.276340][T21875] ? __fget_files+0x2a/0x420 [ 1553.276367][T21875] security_file_ioctl+0xc3/0x2a0 [ 1553.276391][T21875] __se_sys_ioctl+0x47/0x170 [ 1553.276421][T21875] do_syscall_64+0xe2/0xf80 [ 1553.276455][T21875] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1553.276473][T21875] ? trace_irq_disable+0x37/0x100 [ 1553.276492][T21875] ? clear_bhb_loop+0x60/0xb0 [ 1553.276517][T21875] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1553.276536][T21875] RIP: 0033:0x7ff8c6d9aeb9 [ 1553.276555][T21875] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 1553.276571][T21875] RSP: 002b:00007ff8c7be9028 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 1553.276593][T21875] RAX: ffffffffffffffda RBX: 00007ff8c7015fa0 RCX: 00007ff8c6d9aeb9 [ 1553.276607][T21875] RDX: 00002000000010c0 RSI: 000000000000890c RDI: 0000000000000003 [ 1553.276621][T21875] RBP: 00007ff8c7be9090 R08: 0000000000000000 R09: 0000000000000000 [ 1553.276633][T21875] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 1553.276645][T21875] R13: 00007ff8c7016038 R14: 00007ff8c7015fa0 R15: 00007fffd063b6d8 [ 1553.276681][T21875] [ 1553.276690][T21875] ERROR: Out of memory at tomoyo_realpath_from_path. [ 1553.341803][T21861] wg1 speed is unknown, defaulting to 1000 [ 1553.430029][T21877] netlink: 4 bytes leftover after parsing attributes in process `syz.4.12102'. [ 1553.434057][T21861] wg1 speed is unknown, defaulting to 1000 [ 1553.562181][T21861] wg1 speed is unknown, defaulting to 1000 [ 1553.570383][T21861] wg1 speed is unknown, defaulting to 1000 [ 1553.578099][T21861] wg1 speed is unknown, defaulting to 1000 [ 1553.587112][T21861] wg1 speed is unknown, defaulting to 1000 [ 1553.633064][T21886] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1553.646159][T21886] syzkaller0: entered promiscuous mode [ 1553.652087][T21886] syzkaller0: entered allmulticast mode [ 1553.791305][T21888] syzkaller0: entered promiscuous mode [ 1553.812845][T21888] syzkaller0: entered allmulticast mode [ 1553.845920][T21888] netlink: 'syz.4.12106': attribute type 9 has an invalid length. [ 1554.087608][T21915] netlink: 'syz.3.12113': attribute type 1 has an invalid length. [ 1554.226722][T21915] bond1: entered promiscuous mode [ 1554.232537][T21915] 8021q: adding VLAN 0 to HW filter on device bond1 [ 1554.367970][T21928] netdevsim netdevsim5 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1554.571368][T21928] netdevsim netdevsim5 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1554.673682][T21928] netdevsim netdevsim5 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1554.773195][T21928] netdevsim netdevsim5 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1554.920494][T21959] siw: device registration error -23 [ 1554.943884][ T8749] netdevsim netdevsim5 eth0: set [1, 0] type 2 family 0 port 6081 - 0 [ 1554.986738][T12534] netdevsim netdevsim5 eth1: set [1, 0] type 2 family 0 port 6081 - 0 [ 1554.997616][T21953] syzkaller0: entered promiscuous mode [ 1555.007199][T21953] syzkaller0: entered allmulticast mode [ 1555.054814][ T8746] netdevsim netdevsim5 eth2: set [1, 0] type 2 family 0 port 6081 - 0 [ 1555.247250][ T8746] netdevsim netdevsim5 eth3: set [1, 0] type 2 family 0 port 6081 - 0 [ 1555.654924][T21983] netlink: 'syz.0.12133': attribute type 1 has an invalid length. [ 1555.689605][T21982] syzkaller0: entered promiscuous mode [ 1555.695544][T21982] syzkaller0: entered allmulticast mode [ 1555.775190][T21984] bond7: (slave vxcan1): The slave device specified does not support setting the MAC address [ 1555.791454][T21984] bond7: (slave vxcan1): Error -95 calling set_mac_address [ 1556.094813][T22005] tipc: Started in network mode [ 1556.099759][T22005] tipc: Node identity 16b8d474da91, cluster identity 4711 [ 1556.111076][T22005] tipc: Enabled bearer , priority 0 [ 1556.124627][T22005] syzkaller0: entered promiscuous mode [ 1556.150087][T22005] syzkaller0: entered allmulticast mode [ 1556.168587][T22014] tipc: Enabling of bearer rejected, failed to enable media [ 1556.203024][T22005] sch_tbf: burst 127 is lower than device syzkaller0 mtu (1514) ! [ 1556.278904][T22013] can: request_module (can-proto-0) failed. [ 1556.287309][T22007] bond0: mtu less than device minimum [ 1556.304392][T22005] tipc: Resetting bearer [ 1556.342790][T22004] tipc: Resetting bearer [ 1556.397495][T22004] tipc: Disabling bearer [ 1556.415559][T22024] netlink: 'syz.7.12143': attribute type 29 has an invalid length. [ 1556.429098][T22024] netlink: 'syz.7.12143': attribute type 29 has an invalid length. [ 1556.441774][T22024] __nla_validate_parse: 8 callbacks suppressed [ 1556.441795][T22024] netlink: 500 bytes leftover after parsing attributes in process `syz.7.12143'. [ 1556.533660][T22029] netlink: 60 bytes leftover after parsing attributes in process `syz.7.12143'. [ 1556.593046][T22031] sctp: [Deprecated]: syz.4.12146 (pid 22031) Use of int in maxseg socket option. [ 1556.593046][T22031] Use struct sctp_assoc_value instead [ 1559.180024][T22035] workqueue: Failed to create a rescuer kthread for wq "bond8": -EINTR [ 1559.249517][T22037] vcan0: entered promiscuous mode [ 1559.277000][T22037] vcan0: entered allmulticast mode [ 1559.321442][T22031] lo speed is unknown, defaulting to 1000 [ 1559.352273][T22031] lo speed is unknown, defaulting to 1000 [ 1560.040378][T22031] wg1 speed is unknown, defaulting to 1000 [ 1560.492961][T22093] vlan0: entered allmulticast mode [ 1560.498153][T22093] veth0_vlan: entered allmulticast mode [ 1560.618782][T22096] netlink: 8 bytes leftover after parsing attributes in process `syz.7.12163'. [ 1560.623843][T22095] netlink: 8 bytes leftover after parsing attributes in process `syz.7.12163'. [ 1560.670482][T22096] netlink: 96 bytes leftover after parsing attributes in process `syz.7.12163'. [ 1560.700396][T22095] netlink: 96 bytes leftover after parsing attributes in process `syz.7.12163'. [ 1560.902721][T20754] Bluetooth: hci4: unexpected cc 0x0c03 length: 249 > 1 [ 1560.929036][T22104] IPVS: set_ctl: invalid protocol: 44 255.255.255.255:20001 [ 1560.941139][T20754] Bluetooth: hci4: unexpected cc 0x1003 length: 249 > 9 [ 1560.950252][T20754] Bluetooth: hci4: unexpected cc 0x1001 length: 249 > 9 [ 1560.960821][T20754] Bluetooth: hci4: unexpected cc 0x0c23 length: 249 > 4 [ 1560.971903][T20754] Bluetooth: hci4: unexpected cc 0x0c38 length: 249 > 2 [ 1561.290189][T22102] lo speed is unknown, defaulting to 1000 [ 1561.303993][T22102] lo speed is unknown, defaulting to 1000 [ 1561.908524][T22142] netlink: 24 bytes leftover after parsing attributes in process `syz.5.12175'. [ 1561.956644][T22143] netlink: 20 bytes leftover after parsing attributes in process `syz.4.12176'. [ 1562.192163][T22149] bond1: option ad_actor_sys_prio: mode dependency failed, not supported in mode broadcast(3) [ 1562.222322][T22149] bond1 (unregistering): Released all slaves [ 1562.354860][T22151] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 1562.433869][T22102] wg1 speed is unknown, defaulting to 1000 [ 1562.546378][T22159] netlink: 4 bytes leftover after parsing attributes in process `syz.4.12179'. [ 1562.834137][T22169] netlink: 'syz.3.12182': attribute type 29 has an invalid length. [ 1562.863092][T22169] netlink: 'syz.3.12182': attribute type 29 has an invalid length. [ 1562.945310][T22102] chnl_net:caif_netlink_parms(): no params data found [ 1563.061151][T20529] Bluetooth: hci4: command tx timeout [ 1563.348058][T22102] bridge0: port 1(bridge_slave_0) entered blocking state [ 1563.372644][T22102] bridge0: port 1(bridge_slave_0) entered disabled state [ 1563.400624][T22102] bridge_slave_0: entered allmulticast mode [ 1563.437246][T22102] bridge_slave_0: entered promiscuous mode [ 1563.513353][T22194] netlink: 24 bytes leftover after parsing attributes in process `syz.7.12190'. [ 1563.525049][T22102] bridge0: port 2(bridge_slave_1) entered blocking state [ 1563.532631][T22102] bridge0: port 2(bridge_slave_1) entered disabled state [ 1563.540941][T22102] bridge_slave_1: entered allmulticast mode [ 1563.549386][T22102] bridge_slave_1: entered promiscuous mode [ 1563.685031][T22194] netlink: 16 bytes leftover after parsing attributes in process `syz.7.12190'. [ 1563.697997][T22195] netlink: 20 bytes leftover after parsing attributes in process `syz.7.12190'. [ 1563.815365][T22102] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 1563.862166][T22102] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 1564.124850][T22215] netlink: 'syz.5.12195': attribute type 8 has an invalid length. [ 1564.136589][T22102] team0: Port device team_slave_0 added [ 1564.171614][T22102] team0: Port device team_slave_1 added [ 1564.184272][T22215] netlink: 4 bytes leftover after parsing attributes in process `syz.5.12195'. [ 1564.214199][T22213] tipc: Enabled bearer , priority 0 [ 1564.230814][T22215] bond0: entered promiscuous mode [ 1564.237451][T22215] bond_slave_0: entered promiscuous mode [ 1564.244201][T22215] bond_slave_1: entered promiscuous mode [ 1564.253191][T22215] gretap0: entered promiscuous mode [ 1564.281510][T22215] bond0: left promiscuous mode [ 1564.296962][T22215] bond_slave_0: left promiscuous mode [ 1564.320355][T22215] bond_slave_1: left promiscuous mode [ 1564.335063][T22215] gretap0: left promiscuous mode [ 1564.386753][T22214] syzkaller0: entered promiscuous mode [ 1564.396879][T22214] syzkaller0: entered allmulticast mode [ 1564.421291][T22224] tipc: Resetting bearer [ 1564.512158][T22102] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 1564.550145][T22102] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 1564.596017][T22102] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 1564.615468][T22212] tipc: Resetting bearer [ 1564.655296][T22212] tipc: Disabling bearer [ 1564.676419][T22102] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 1564.696657][T22102] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 1564.789052][T22242] netlink: 'syz.3.12201': attribute type 61 has an invalid length. [ 1564.806157][T22242] netlink: 'syz.3.12201': attribute type 62 has an invalid length. [ 1564.807979][T22102] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 1564.975364][T22102] hsr_slave_0: entered promiscuous mode [ 1564.999501][T22102] hsr_slave_1: entered promiscuous mode [ 1565.140971][T20529] Bluetooth: hci4: command tx timeout [ 1565.384077][T22102] netdevsim netdevsim0 eth3 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 1565.407846][T22102] netdevsim netdevsim0 eth3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1565.489050][T22267] netlink: 4 bytes leftover after parsing attributes in process `syz.4.12211'. [ 1565.567971][T22102] netdevsim netdevsim0 eth2 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 1565.585188][T22102] netdevsim netdevsim0 eth2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1565.646493][T22269] netlink: 'syz.3.12210': attribute type 29 has an invalid length. [ 1565.689604][T22102] netdevsim netdevsim0 eth1 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 1565.729797][T22102] netdevsim netdevsim0 eth1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1565.871504][T22102] netdevsim netdevsim0 eth0 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 1565.898668][T22102] netdevsim netdevsim0 eth0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1565.932974][T22281] netlink: 32 bytes leftover after parsing attributes in process `syz.5.12215'. [ 1566.413760][T22102] netdevsim netdevsim0 netdevsim0: renamed from eth0 [ 1566.680447][T22102] netdevsim netdevsim0 netdevsim1: renamed from eth1 [ 1566.744490][T22102] netdevsim netdevsim0 netdevsim2: renamed from eth2 [ 1566.778903][T22102] netdevsim netdevsim0 netdevsim3: renamed from eth3 [ 1567.202203][T22102] 8021q: adding VLAN 0 to HW filter on device bond0 [ 1567.221252][T20529] Bluetooth: hci4: command tx timeout [ 1567.246663][T22102] 8021q: adding VLAN 0 to HW filter on device team0 [ 1567.260857][ T8748] bridge0: port 1(bridge_slave_0) entered blocking state [ 1567.268188][ T8748] bridge0: port 1(bridge_slave_0) entered forwarding state [ 1567.315803][ T8748] bridge0: port 2(bridge_slave_1) entered blocking state [ 1567.323047][ T8748] bridge0: port 2(bridge_slave_1) entered forwarding state [ 1567.335888][T22340] netlink: 64 bytes leftover after parsing attributes in process `syz.5.12230'. [ 1567.584998][T22350] netlink: 8 bytes leftover after parsing attributes in process `syz.3.12232'. [ 1567.647724][T22356] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 1567.671233][T22350] netlink: 32 bytes leftover after parsing attributes in process `syz.3.12232'. [ 1567.984818][T22370] netlink: 'syz.5.12235': attribute type 1 has an invalid length. [ 1568.027502][T22373] netlink: 60 bytes leftover after parsing attributes in process `syz.3.12236'. [ 1568.078973][T22377] batadv0: entered promiscuous mode [ 1568.086436][T22377] A link change request failed with some changes committed already. Interface batadv0 may have been left with an inconsistent configuration, please check. [ 1568.207685][T22381] netlink: 76 bytes leftover after parsing attributes in process `syz.3.12240'. [ 1568.263190][T22379] bond1: option ad_actor_sys_prio: mode dependency failed, not supported in mode balance-rr(0) [ 1568.288865][T22379] bond1 (unregistering): Released all slaves [ 1568.323995][T22102] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 1568.461001][T22102] veth0_vlan: entered promiscuous mode [ 1568.516520][T22102] veth1_vlan: entered promiscuous mode [ 1568.638936][T22102] veth0_macvtap: entered promiscuous mode [ 1568.681721][T22102] veth1_macvtap: entered promiscuous mode [ 1568.706149][T22399] netlink: 32 bytes leftover after parsing attributes in process `syz.4.12245'. [ 1568.752562][T22102] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 1568.768975][T22102] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 1568.789350][ T8746] netdevsim netdevsim0 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 1568.802536][ T8746] netdevsim netdevsim0 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 1568.842448][T22408] openvswitch: netlink: IP tunnel dst address not specified [ 1568.850258][ T8746] netdevsim netdevsim0 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 1568.859205][ T8746] netdevsim netdevsim0 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 1569.009463][ T8748] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 1569.028320][ T8748] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 1569.099528][T22412] netlink: 20 bytes leftover after parsing attributes in process `syz.7.12248'. [ 1569.109629][T22412] netlink: 28 bytes leftover after parsing attributes in process `syz.7.12248'. [ 1569.129720][ T8748] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 1569.144454][ T8748] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 1569.178295][T22416] netlink: 20 bytes leftover after parsing attributes in process `syz.3.12249'. [ 1569.300591][T20529] Bluetooth: hci4: command tx timeout [ 1569.363074][T22426] Bluetooth: MGMT ver 1.23 [ 1569.795795][T22444] syzkaller0: entered promiscuous mode [ 1569.801929][T22444] syzkaller0: entered allmulticast mode [ 1569.911955][T22451] openvswitch: netlink: Message has 16 unknown bytes. [ 1570.067117][T22454] tipc: Enabling of bearer rejected, failed to enable media [ 1570.483144][T22468] openvswitch: netlink: Port -1 exceeds max allowable 65535 [ 1570.576493][T22472] netlink: 44 bytes leftover after parsing attributes in process `syz.3.12267'. [ 1570.769288][T22481] netlink: 'syz.0.12270': attribute type 1 has an invalid length. [ 1570.797527][T22481] netlink: 'syz.0.12270': attribute type 2 has an invalid length. [ 1570.817527][T22486] netlink: 'syz.0.12270': attribute type 1 has an invalid length. [ 1570.862321][T22486] netlink: 'syz.0.12270': attribute type 2 has an invalid length. [ 1572.284252][T22524] x_tables: duplicate underflow at hook 1 [ 1572.422775][T22536] IPv6: addrconf: prefix option has invalid lifetime [ 1572.472088][T22538] x_tables: ip6_tables: CLASSIFY target: used from hooks PREROUTING, but only usable from FORWARD/OUTPUT/POSTROUTING [ 1572.748002][T22548] vlan2: entered allmulticast mode [ 1572.753853][T22548] veth0_to_bond: entered allmulticast mode [ 1572.768013][T22548] team0: Port device vlan2 added [ 1572.841073][ T8769] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 1572.864430][ T8769] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 1572.897604][T22552] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 1572.962301][T22559] __nla_validate_parse: 2 callbacks suppressed [ 1572.962325][T22559] netlink: 8 bytes leftover after parsing attributes in process `syz.7.12290'. [ 1573.194547][T22565] netlink: 'syz.0.12293': attribute type 1 has an invalid length. [ 1573.464985][T22576] netlink: 'syz.0.12295': attribute type 12 has an invalid length. [ 1573.480110][T22576] netlink: 'syz.0.12295': attribute type 29 has an invalid length. [ 1573.501707][T22576] netlink: 148 bytes leftover after parsing attributes in process `syz.0.12295'. [ 1573.603287][T22561] netlink: 24 bytes leftover after parsing attributes in process `syz.7.12292'. [ 1573.631438][T22576] lo speed is unknown, defaulting to 1000 [ 1573.682544][T22576] lo speed is unknown, defaulting to 1000 [ 1573.811541][T22579] lo speed is unknown, defaulting to 1000 [ 1573.913466][T22585] netlink: 'syz.4.12297': attribute type 1 has an invalid length. [ 1574.006865][T22585] 8021q: adding VLAN 0 to HW filter on device bond1 [ 1574.067508][T22579] lo speed is unknown, defaulting to 1000 [ 1574.233086][ T8746] nci: nci_rf_intf_activated_ntf_packet: unsupported rf_interface 0x2d [ 1574.516492][T22576] wg1 speed is unknown, defaulting to 1000 [ 1574.889321][T22600] lo speed is unknown, defaulting to 1000 [ 1574.935430][T22600] lo speed is unknown, defaulting to 1000 [ 1575.582672][T22579] wg1 speed is unknown, defaulting to 1000 [ 1576.241236][T22600] wg1 speed is unknown, defaulting to 1000 [ 1576.261369][T22610] lo speed is unknown, defaulting to 1000 [ 1576.442282][T22610] lo speed is unknown, defaulting to 1000 [ 1576.579610][T22616] vlan3: entered promiscuous mode [ 1576.585890][T22616] geneve1: entered promiscuous mode [ 1576.594682][T22616] vlan3: entered allmulticast mode [ 1576.603829][T22616] geneve1: entered allmulticast mode [ 1577.165813][T22589] nci: __nci_request: wait_for_completion_interruptible_timeout failed -512 [ 1577.401181][T22628] netlink: 'syz.7.12305': attribute type 11 has an invalid length. [ 1577.644409][T22634] netlink: 12 bytes leftover after parsing attributes in process `syz.7.12307'. [ 1577.761999][T22634] netdevsim netdevsim7 netdevsim3 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 1577.772971][T22634] netdevsim netdevsim7 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1577.905682][T22643] netlink: 24 bytes leftover after parsing attributes in process `syz.5.12309'. [ 1577.919218][T22634] netdevsim netdevsim7 netdevsim2 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 1577.947141][T22634] netdevsim netdevsim7 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1577.965565][T22610] wg1 speed is unknown, defaulting to 1000 [ 1577.994773][T22643] netlink: 24 bytes leftover after parsing attributes in process `syz.5.12309'. [ 1578.092403][T22634] netdevsim netdevsim7 netdevsim1 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 1578.103271][T22634] netdevsim netdevsim7 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1578.150954][T22645] netlink: 40 bytes leftover after parsing attributes in process `syz.5.12310'. [ 1578.244219][T22634] netdevsim netdevsim7 netdevsim0 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 1578.254872][T22634] netdevsim netdevsim7 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1578.506113][ T8769] netdevsim netdevsim7 eth0: set [0, 0] type 1 family 0 port 8472 - 0 [ 1578.519945][ T8769] netdevsim netdevsim7 eth0: set [1, 0] type 2 family 0 port 6081 - 0 [ 1578.601651][ T8769] netdevsim netdevsim7 eth1: set [0, 0] type 1 family 0 port 8472 - 0 [ 1578.631190][ T8769] netdevsim netdevsim7 eth1: set [1, 0] type 2 family 0 port 6081 - 0 [ 1578.692750][ T8769] netdevsim netdevsim7 eth2: set [0, 0] type 1 family 0 port 8472 - 0 [ 1578.704549][ T8769] netdevsim netdevsim7 eth2: set [1, 0] type 2 family 0 port 6081 - 0 [ 1578.741789][T22654] netlink: 'syz.5.12311': attribute type 11 has an invalid length. [ 1578.762668][ T8769] netdevsim netdevsim7 eth3: set [0, 0] type 1 family 0 port 8472 - 0 [ 1578.780953][ T8769] netdevsim netdevsim7 eth3: set [1, 0] type 2 family 0 port 6081 - 0 [ 1578.919214][T22659] geneve2: entered promiscuous mode [ 1578.936076][T22657] tipc: Started in network mode [ 1578.941681][T22657] tipc: Node identity bad30a8d062, cluster identity 4711 [ 1578.949211][T22657] tipc: Enabled bearer , priority 0 [ 1578.967182][T22657] syzkaller0: entered promiscuous mode [ 1578.980251][T22657] syzkaller0: entered allmulticast mode [ 1578.992672][ T8769] netdevsim netdevsim4 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 1579.065407][T22657] tipc: Resetting bearer [ 1579.073995][ T8769] netdevsim netdevsim4 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 1579.090595][ T8769] netdevsim netdevsim4 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 1579.144601][ T8769] netdevsim netdevsim4 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 1579.493603][T22672] netlink: 'syz.4.12317': attribute type 13 has an invalid length. [ 1579.503953][T22672] netlink: 'syz.4.12317': attribute type 12 has an invalid length. [ 1579.589029][T22676] lo speed is unknown, defaulting to 1000 [ 1579.600802][T22676] lo speed is unknown, defaulting to 1000 [ 1579.685892][T22656] tipc: Resetting bearer [ 1579.706648][T22678] netlink: 4 bytes leftover after parsing attributes in process `syz.4.12320'. [ 1579.720965][T22656] tipc: Disabling bearer [ 1580.232843][T22695] netlink: 'syz.3.12327': attribute type 1 has an invalid length. [ 1580.262794][T22695] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 1580.428672][T22699] netlink: 8 bytes leftover after parsing attributes in process `syz.4.12329'. [ 1580.467269][T22676] wg1 speed is unknown, defaulting to 1000 [ 1580.785809][T22716] tipc: Enabled bearer , priority 0 [ 1580.818829][T22716] syzkaller0: entered promiscuous mode [ 1580.825117][T22716] syzkaller0: entered allmulticast mode [ 1580.906890][T22719] lo speed is unknown, defaulting to 1000 [ 1580.917677][T22719] lo speed is unknown, defaulting to 1000 [ 1580.935080][T22716] tipc: Resetting bearer [ 1581.004885][T22715] tipc: Resetting bearer [ 1581.052254][T22715] tipc: Disabling bearer [ 1581.089147][T22733] syzkaller1: entered promiscuous mode [ 1581.105452][T22733] syzkaller1: entered allmulticast mode [ 1581.396718][T22736] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 1581.661463][T22745] lo speed is unknown, defaulting to 1000 [ 1581.693966][T22745] lo speed is unknown, defaulting to 1000 [ 1581.788280][T22756] netlink: 8 bytes leftover after parsing attributes in process `syz.4.12342'. [ 1581.857920][T22758] bridge_slave_0: left allmulticast mode [ 1581.890202][T22758] bridge_slave_0: left promiscuous mode [ 1581.896068][T22758] bridge0: port 1(bridge_slave_0) entered disabled state [ 1581.954163][T22758] bridge_slave_1: left allmulticast mode [ 1581.960427][T22758] bridge_slave_1: left promiscuous mode [ 1581.968608][T22758] bridge0: port 2(bridge_slave_1) entered disabled state [ 1581.985691][T22758] bond0: (slave bond_slave_0): Releasing backup interface [ 1581.997412][T22758] bond0: (slave bond_slave_1): Releasing backup interface [ 1582.019398][T22758] team0: Port device team_slave_0 removed [ 1582.037863][T22758] team0: Port device team_slave_1 removed [ 1582.057022][T22758] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 1582.067378][T22758] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 1582.108170][T22758] A link change request failed with some changes committed already. Interface hsr_slave_0 may have been left with an inconsistent configuration, please check. [ 1582.156481][T22719] wg1 speed is unknown, defaulting to 1000 [ 1582.774574][T22745] wg1 speed is unknown, defaulting to 1000 [ 1582.864715][T22792] netlink: 8 bytes leftover after parsing attributes in process `syz.4.12353'. [ 1583.021305][T22796] netlink: 8 bytes leftover after parsing attributes in process `syz.7.12355'. [ 1583.054964][T22796] siw: device registration error -23 [ 1583.452725][T22809] tipc: Enabled bearer , priority 0 [ 1583.463435][T22806] syzkaller0: entered promiscuous mode [ 1583.472030][T22806] syzkaller0: entered allmulticast mode [ 1583.517479][T22806] tipc: Resetting bearer [ 1583.592731][T22811] tipc: Enabled bearer , priority 0 [ 1583.611478][T22811] syzkaller0: entered promiscuous mode [ 1583.617302][T22811] syzkaller0: entered allmulticast mode [ 1583.638359][T22804] tipc: Resetting bearer [ 1583.694552][T22804] tipc: Disabling bearer [ 1583.797642][T22811] tipc: Resetting bearer [ 1583.850874][T22810] tipc: Resetting bearer [ 1583.913645][ T30] audit: type=1107 audit(1770616789.642:55): pid=22820 uid=0 auid=4294967295 ses=4294967295 subj=unconfined msg='¢O+Ì3éÿþf²:ΣLüH' [ 1583.939480][T22810] tipc: Disabling bearer [ 1583.992615][T22824] syzkaller1: entered promiscuous mode [ 1583.998199][T22824] syzkaller1: entered allmulticast mode [ 1584.105507][T22831] netlink: 20 bytes leftover after parsing attributes in process `syz.5.12363'. [ 1584.119434][T22831] netlink: 40 bytes leftover after parsing attributes in process `syz.5.12363'. [ 1584.151501][T22832] netlink: 20 bytes leftover after parsing attributes in process `syz.4.12364'. [ 1584.268954][T22834] syzkaller0: entered promiscuous mode [ 1584.277825][T22834] syzkaller0: entered allmulticast mode [ 1584.479774][T22840] xt_CT: No such helper "snmp_trap" [ 1584.525108][T22840] IPVS: set_ctl: invalid protocol: 51 172.20.20.170:20001 [ 1585.074075][T22861] netlink: 12 bytes leftover after parsing attributes in process `syz.0.12373'. [ 1585.136469][T22876] openvswitch: netlink: ufid size 5796 bytes exceeds the range (1, 16) [ 1585.161811][T22876] openvswitch: netlink: Message has 16 unknown bytes. [ 1585.451034][T22884] netlink: 8 bytes leftover after parsing attributes in process `syz.7.12378'. [ 1585.490245][T22886] netlink: 68 bytes leftover after parsing attributes in process `syz.5.12379'. [ 1585.574510][T22888] netlink: 36 bytes leftover after parsing attributes in process `syz.5.12379'. [ 1585.601206][T22884] A link change request failed with some changes committed already. Interface caif0 may have been left with an inconsistent configuration, please check. [ 1585.702394][T22883] lo speed is unknown, defaulting to 1000 [ 1585.733886][T22883] lo speed is unknown, defaulting to 1000 [ 1585.765252][T20529] block nbd0: Receive control failed (result -32) [ 1586.189532][T22898] netlink: 'syz.3.12382': attribute type 1 has an invalid length. [ 1586.207940][T22898] netlink: 'syz.3.12382': attribute type 2 has an invalid length. [ 1586.338621][T22900] lo speed is unknown, defaulting to 1000 [ 1586.403780][T22900] lo speed is unknown, defaulting to 1000 [ 1586.414423][T22904] RDS: rds_bind could not find a transport for fe80::28, load rds_tcp or rds_rdma? [ 1586.426039][T22911] tipc: Started in network mode [ 1586.440043][T22911] tipc: Node identity ac14140f, cluster identity 4711 [ 1586.455928][T22911] tipc: Enabling of bearer rejected, failed to enable media [ 1587.066262][T22934] netlink: 104 bytes leftover after parsing attributes in process `syz.0.12391'. [ 1587.187684][T22939] netlink: 12 bytes leftover after parsing attributes in process `syz.5.12393'. [ 1587.251416][T22883] wg1 speed is unknown, defaulting to 1000 [ 1587.392668][T22944] team0 (unregistering): Port device team_slave_0 removed [ 1587.464304][T22944] team0 (unregistering): Port device team_slave_1 removed [ 1587.528448][T22944] team0 (unregistering): Port device vlan2 removed [ 1587.787498][T22900] wg1 speed is unknown, defaulting to 1000 [ 1587.919229][T22961] syzkaller1: tun_chr_ioctl cmd 1074025677 [ 1587.933909][T22961] syzkaller1: linktype set to 778 [ 1588.042915][T22964] 8021q: adding VLAN 0 to HW filter on device bond1 [ 1588.059408][T22956] bond_slave_0: entered promiscuous mode [ 1588.065401][T22956] bond_slave_1: entered promiscuous mode [ 1588.100969][T22956] 8021q: adding VLAN 0 to HW filter on device macvlan2 [ 1588.122066][T22956] bond1: (slave macvlan2): Enslaving as a backup interface with an up link [ 1588.519934][ T30] audit: type=1800 audit(1770616794.242:56): pid=22976 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="syz.5.12399" name="memory.events" dev="tmpfs" ino=940 res=0 errno=0 [ 1588.617073][T22975] netlink: 'syz.7.12401': attribute type 1 has an invalid length. [ 1588.684459][T22989] __nla_validate_parse: 1 callbacks suppressed [ 1588.684483][T22989] netlink: 28 bytes leftover after parsing attributes in process `syz.7.12401'. [ 1588.943393][T22975] bond1: entered promiscuous mode [ 1588.998460][T22975] 8021q: adding VLAN 0 to HW filter on device bond1 [ 1589.046135][T22989] bond1: entered allmulticast mode [ 1589.242820][T23002] bond1: (slave bridge1): making interface the new active one [ 1589.270445][T23002] bridge1: entered promiscuous mode [ 1589.288163][T23002] bridge1: entered allmulticast mode [ 1589.303305][T23002] bond1: (slave bridge1): Enslaving as an active interface with an up link [ 1589.366078][T23009] nbd: must specify at least one socket [ 1589.554743][T23016] netlink: 'syz.5.12410': attribute type 10 has an invalid length. [ 1589.615342][T23016] syz_tun: entered promiscuous mode [ 1589.645208][T23016] bond0: (slave syz_tun): Enslaving as an active interface with an up link [ 1589.656506][T23020] netlink: 12 bytes leftover after parsing attributes in process `syz.0.12408'. [ 1589.678088][T23020] netlink: 64 bytes leftover after parsing attributes in process `syz.0.12408'. [ 1589.703819][T23022] netlink: 40 bytes leftover after parsing attributes in process `syz.3.12411'. [ 1589.732039][T23022] netlink: 40 bytes leftover after parsing attributes in process `syz.3.12411'. [ 1589.743276][T23022] netlink: 40 bytes leftover after parsing attributes in process `syz.3.12411'. [ 1589.762194][T23014] lo speed is unknown, defaulting to 1000 [ 1589.772714][T23022] netlink: 40 bytes leftover after parsing attributes in process `syz.3.12411'. [ 1589.775995][T23014] lo speed is unknown, defaulting to 1000 [ 1589.806527][T23022] netlink: 40 bytes leftover after parsing attributes in process `syz.3.12411'. [ 1589.828066][T23022] netlink: 40 bytes leftover after parsing attributes in process `syz.3.12411'. [ 1589.842039][T23022] netlink: 40 bytes leftover after parsing attributes in process `syz.3.12411'. [ 1590.293067][T23049] bond2 (unregistering): Released all slaves [ 1590.433877][T23063] netlink: 'syz.5.12422': attribute type 1 has an invalid length. [ 1590.442295][T23063] netlink: 'syz.5.12422': attribute type 1 has an invalid length. [ 1590.569635][T23063] netlink: 'syz.5.12422': attribute type 1 has an invalid length. [ 1590.604689][T23063] netlink: 'syz.5.12422': attribute type 1 has an invalid length. [ 1590.654068][T23063] netlink: 'syz.5.12422': attribute type 1 has an invalid length. [ 1590.682931][T23063] netlink: 'syz.5.12422': attribute type 1 has an invalid length. [ 1590.862736][T23081] openvswitch: netlink: IP tunnel attribute has 4 unknown bytes. [ 1590.890440][T23081] bond0: option active_slave: mode dependency failed, not supported in mode balance-rr(0) [ 1591.111502][T23014] wg1 speed is unknown, defaulting to 1000 [ 1591.641424][T23105] validate_nla: 27 callbacks suppressed [ 1591.641446][T23105] netlink: 'syz.4.12433': attribute type 10 has an invalid length. [ 1591.684566][T23105] team0: Port device dummy0 added [ 1591.705069][T23106] netlink: 'syz.4.12433': attribute type 10 has an invalid length. [ 1591.807990][T23106] team0: Port device dummy0 removed [ 1591.884265][T23106] bond0: (slave dummy0): Enslaving as an active interface with an up link [ 1592.261096][ C1] ip6_tunnel: ip6gre1 xmit: Local address not yet configured! [ 1592.342114][T23114] nbd: must specify at least one socket [ 1592.639123][T23120] syzkaller0: entered promiscuous mode [ 1592.657331][T23120] syzkaller0: entered allmulticast mode [ 1593.022266][T23140] xt_hashlimit: max too large, truncated to 1048576 [ 1593.050440][T23144] syzkaller0: entered promiscuous mode [ 1593.066498][T23144] syzkaller0: entered allmulticast mode [ 1593.077852][T23145] netlink: 'syz.5.12439': attribute type 3 has an invalid length. [ 1593.920781][T23148] __nla_validate_parse: 33 callbacks suppressed [ 1593.920802][T23148] netlink: 24 bytes leftover after parsing attributes in process `syz.7.12445'. [ 1593.970424][T23148] 8021q: adding VLAN 0 to HW filter on device macvlan2 [ 1593.978498][T23148] team0: Device macvlan2 is already an upper device of the team interface [ 1594.515068][T23166] netlink: 'syz.4.12448': attribute type 16 has an invalid length. [ 1594.524110][T23166] netlink: 64138 bytes leftover after parsing attributes in process `syz.4.12448'. [ 1595.836375][T23129] nci: __nci_request: wait_for_completion_interruptible_timeout failed -512 [ 1596.003100][T23173] workqueue: Failed to create a rescuer kthread for wq "nfc2_nci_tx_wq": -EINTR [ 1596.199330][T23193] syzkaller0: entered promiscuous mode [ 1596.205844][T23193] syzkaller0: entered allmulticast mode [ 1596.219309][T23197] syzkaller0: entered promiscuous mode [ 1596.237194][T23197] syzkaller0: entered allmulticast mode [ 1596.250683][T23199] netlink: 12 bytes leftover after parsing attributes in process `syz.3.12458'. [ 1596.295977][T23204] netlink: 92 bytes leftover after parsing attributes in process `syz.4.12455'. [ 1596.472124][T23199] 8021q: adding VLAN 0 to HW filter on device bond2 [ 1596.505956][T23207] bond2: Unable to set up delay as MII monitoring is disabled [ 1596.810917][T23232] syzkaller0: entered promiscuous mode [ 1596.816527][T23232] syzkaller0: entered allmulticast mode [ 1597.917142][T23234] delete_channel: no stack [ 1597.992559][T23244] netlink: 'syz.5.12464': attribute type 15 has an invalid length. [ 1598.001284][T23244] netlink: 4 bytes leftover after parsing attributes in process `syz.5.12464'. [ 1598.022069][ T8746] netdevsim netdevsim5 eth0: set [0, 0] type 1 family 0 port 2816 - 0 [ 1598.022182][T23244] netlink: 'syz.5.12464': attribute type 15 has an invalid length. [ 1598.030752][ T8746] netdevsim netdevsim5 eth1: set [0, 0] type 1 family 0 port 2816 - 0 [ 1598.038758][T23244] netlink: 4 bytes leftover after parsing attributes in process `syz.5.12464'. [ 1598.047928][ T8746] netdevsim netdevsim5 eth2: set [0, 0] type 1 family 0 port 2816 - 0 [ 1598.064676][ T8746] netdevsim netdevsim5 eth3: set [0, 0] type 1 family 0 port 2816 - 0 [ 1599.174094][T23197] nci: __nci_request: wait_for_completion_interruptible_timeout failed -512 [ 1599.190087][T23230] netlink: 4 bytes leftover after parsing attributes in process `syz.7.12461'. [ 1599.370119][T23255] netlink: 'syz.3.12466': attribute type 2 has an invalid length. [ 1599.486698][T23258] netlink: 8 bytes leftover after parsing attributes in process `syz.4.12467'. [ 1599.641175][T23274] netlink: 28 bytes leftover after parsing attributes in process `syz.5.12468'. [ 1599.661337][T23274] netlink: 28 bytes leftover after parsing attributes in process `syz.5.12468'. [ 1599.795922][T23281] netlink: 666 bytes leftover after parsing attributes in process `syz.4.12471'. [ 1599.924220][T23286] netlink: 44 bytes leftover after parsing attributes in process `syz.3.12474'. [ 1599.967004][T23286] netlink: 35 bytes leftover after parsing attributes in process `syz.3.12474'. [ 1599.992290][T23286] netlink: 'syz.3.12474': attribute type 6 has an invalid length. [ 1600.012196][T23286] netlink: 'syz.3.12474': attribute type 5 has an invalid length. [ 1600.020731][T23286] netlink: 35 bytes leftover after parsing attributes in process `syz.3.12474'. [ 1600.068838][T23298] netlink: 8 bytes leftover after parsing attributes in process `syz.7.12478'. [ 1600.567030][T23331] netlink: 4 bytes leftover after parsing attributes in process `syz.0.12489'. [ 1600.741043][T23339] A link change request failed with some changes committed already. Interface bridge0 may have been left with an inconsistent configuration, please check. [ 1600.749043][T23342] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 1600.797861][T23342] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 1600.975048][T23356] nbd: must specify at least one socket [ 1600.990965][T23356] nbd: must specify at least one socket [ 1601.101475][T15253] hid-generic 0005:0006:5508.0001: hidraw0: BLUETOOTH HID vc3.36 Device [syz0] on aa:aa:aa:aa:aa:aa [ 1601.303075][T23365] fido_id[23365]: Failed to open report descriptor at '/sys/devices/virtual/bluetooth/hci4/hci4:200/report_descriptor': No such file or directory [ 1601.763107][T23396] netlink: 'syz.7.12501': attribute type 1 has an invalid length. [ 1602.172678][T23415] pim6reg: entered allmulticast mode [ 1602.185434][T23412] tipc: Enabled bearer , priority 0 [ 1602.193534][T23412] syzkaller0: entered promiscuous mode [ 1602.209996][T23412] syzkaller0: entered allmulticast mode [ 1602.555476][T23427] bridge0: port 2(bridge_slave_1) entered disabled state [ 1602.563409][T23427] bridge0: port 1(bridge_slave_0) entered disabled state [ 1602.598338][T23427] bond_slave_0: left promiscuous mode [ 1602.613577][T23427] bond_slave_1: left promiscuous mode [ 1602.883210][T23427] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 1602.938592][T23427] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 1603.335785][ T8746] netdevsim netdevsim4 netdevsim0: unset [1, 0] type 2 family 0 port 6081 - 0 [ 1603.344907][ T8746] netdevsim netdevsim4 netdevsim1: unset [1, 0] type 2 family 0 port 6081 - 0 [ 1603.354221][ T8746] netdevsim netdevsim4 netdevsim2: unset [1, 0] type 2 family 0 port 6081 - 0 [ 1603.373719][T23434] tipc: Resetting bearer [ 1603.395396][T23445] bond0: (slave bond_slave_1): Releasing backup interface [ 1603.415900][T23411] tipc: Resetting bearer [ 1603.442686][T23411] tipc: Disabling bearer [ 1603.472493][T15256] tipc: Node number set to 3170044557 [ 1603.478569][T23409] pim6reg: left allmulticast mode [ 1603.498336][ T8746] netdevsim netdevsim4 netdevsim3: unset [1, 0] type 2 family 0 port 6081 - 0 [ 1603.526379][ T8746] netdevsim netdevsim0 netdevsim0: unset [1, 0] type 2 family 0 port 6081 - 0 [ 1603.556552][ T8746] netdevsim netdevsim0 netdevsim1: unset [1, 0] type 2 family 0 port 6081 - 0 [ 1603.596324][ T8746] netdevsim netdevsim0 netdevsim2: unset [1, 0] type 2 family 0 port 6081 - 0 [ 1603.650240][ T8746] netdevsim netdevsim0 netdevsim3: unset [1, 0] type 2 family 0 port 6081 - 0 [ 1603.736076][T23459] xt_hashlimit: size too large, truncated to 1048576 [ 1603.804478][T23469] ¾x9ÿ: renamed from bridge_slave_0 (while UP) [ 1603.853792][T23459] x_tables: ip6_tables: TCPMSS target: only valid for protocol 6 [ 1603.950210][T23477] netlink: 'syz.0.12518': attribute type 23 has an invalid length. [ 1604.123810][T23477] netlink: 'syz.0.12518': attribute type 13 has an invalid length. [ 1604.344897][T23484] llcp: llcp_sock_recvmsg: Recv datagram failed state 3 -6 0 [ 1604.405881][T23488] __nla_validate_parse: 14 callbacks suppressed [ 1604.405906][T23488] netlink: 4 bytes leftover after parsing attributes in process `syz.7.12520'. [ 1604.529535][T23496] xt_ecn: cannot match TCP bits for non-tcp packets [ 1604.580826][T20754] Bluetooth: hci6: command 0x0406 tx timeout [ 1604.644403][T23500] netlink: 212368 bytes leftover after parsing attributes in process `syz.7.12525'. [ 1604.722819][T23505] tipc: Enabled bearer , priority 0 [ 1604.737354][T23504] netlink: 212348 bytes leftover after parsing attributes in process `syz.0.12527'. [ 1604.762076][T23505] syzkaller0: entered promiscuous mode [ 1604.767641][T23505] syzkaller0: entered allmulticast mode [ 1604.882645][T23505] tipc: Resetting bearer [ 1605.168402][T23501] tipc: Resetting bearer [ 1605.222957][T23501] tipc: Disabling bearer [ 1605.369483][T23528] netlink: 'syz.7.12534': attribute type 1 has an invalid length. [ 1605.389989][T23528] netlink: 224 bytes leftover after parsing attributes in process `syz.7.12534'. [ 1605.517884][T23533] netlink: 'syz.3.12536': attribute type 1 has an invalid length. [ 1605.580947][T23533] 8021q: adding VLAN 0 to HW filter on device bond3 [ 1605.609409][T23537] 8021q: adding VLAN 0 to HW filter on device batadv1 [ 1605.627463][T23537] bond3: (slave batadv1): making interface the new active one [ 1605.638477][T23537] bond3: (slave batadv1): Enslaving as an active interface with an up link [ 1605.647812][T23531] netlink: 24 bytes leftover after parsing attributes in process `syz.7.12535'. [ 1605.658077][T23531] netlink: 24 bytes leftover after parsing attributes in process `syz.7.12535'. [ 1605.684968][T23531] syzkaller0: entered promiscuous mode [ 1605.693746][T23531] syzkaller0: entered allmulticast mode [ 1605.770808][T23535] netlink: 28 bytes leftover after parsing attributes in process `syz.7.12535'. [ 1605.784344][T23535] netlink: 28 bytes leftover after parsing attributes in process `syz.7.12535'. [ 1605.829377][T23535] team0: entered promiscuous mode [ 1605.886510][T23535] team0: left promiscuous mode [ 1606.018309][T23543] netlink: 20 bytes leftover after parsing attributes in process `syz.5.12538'. [ 1606.046331][T23543] syzkaller0: create flow: hash 2111540059 index 1 [ 1606.138064][T23542] syzkaller0: delete flow: hash 2111540059 index 1 [ 1608.889744][T23562] tipc: Enabled bearer , priority 0 [ 1608.898326][T23563] syzkaller0: entered promiscuous mode [ 1608.905718][T23563] syzkaller0: entered allmulticast mode [ 1608.938134][T23567] tipc: Resetting bearer [ 1609.095177][T23567] tipc: Resetting bearer [ 1609.144803][T23567] tipc: Disabling bearer [ 1609.173888][T23590] netlink: 12 bytes leftover after parsing attributes in process `syz.5.12550'. [ 1609.225839][T23590] syzkaller0: entered promiscuous mode [ 1609.249983][T23590] syzkaller0: entered allmulticast mode [ 1609.415121][T23605] __nla_validate_parse: 2 callbacks suppressed [ 1609.415143][T23605] netlink: 12 bytes leftover after parsing attributes in process `syz.0.12554'. [ 1609.449605][T23603] netlink: 'syz.3.12553': attribute type 3 has an invalid length. [ 1609.569213][T23615] xt_l2tp: unknown flags: 51 [ 1609.628191][T23619] netlink: 'syz.0.12557': attribute type 10 has an invalid length. [ 1609.974656][T23634] netlink: 8 bytes leftover after parsing attributes in process `syz.4.12561'. [ 1610.014076][T23634] netlink: 24 bytes leftover after parsing attributes in process `syz.4.12561'. [ 1610.051452][T23634] netlink: 8 bytes leftover after parsing attributes in process `syz.4.12561'. [ 1610.105479][T23657] xt_TCPMSS: Only works on TCP SYN packets [ 1610.135236][T23634] netlink: 'syz.4.12561': attribute type 5 has an invalid length. [ 1610.324841][T23697] tipc: Enabling of bearer rejected, failed to enable media [ 1610.325346][T23703] openvswitch: netlink: Key type 83 is out of range max 32 [ 1610.394506][T23710] netlink: 220 bytes leftover after parsing attributes in process `syz.4.12565'. [ 1610.429196][T23623] workqueue: Failed to create a rescuer kthread for wq "nfc22_nci_rx_wq": -EINTR [ 1611.045505][T23739] netlink: 'syz.0.12570': attribute type 58 has an invalid length. [ 1611.303128][T23755] netlink: 'syz.5.12577': attribute type 10 has an invalid length. [ 1611.345589][T23755] team0: Failed to send options change via netlink (err -105) [ 1611.391753][T23755] team0: Port device dummy0 added [ 1611.463880][T23755] netlink: 'syz.5.12577': attribute type 10 has an invalid length. [ 1611.473892][T23760] netlink: 'syz.7.12578': attribute type 1 has an invalid length. [ 1611.482655][T23760] netlink: 216 bytes leftover after parsing attributes in process `syz.7.12578'. [ 1611.533816][T23755] team0: Failed to send port change of device dummy0 via netlink (err -105) [ 1611.581087][T23755] team0: Failed to send options change via netlink (err -105) [ 1611.588800][T23755] team0: Failed to send port change of device dummy0 via netlink (err -105) [ 1611.628429][T23755] team0: Port device dummy0 removed [ 1611.653877][T23755] bond0: (slave dummy0): Enslaving as an active interface with an up link [ 1611.781718][T23770] netlink: 28 bytes leftover after parsing attributes in process `syz.7.12581'. [ 1611.863785][T23770] netlink: 28 bytes leftover after parsing attributes in process `syz.7.12581'. [ 1612.409385][T23808] netlink: 12 bytes leftover after parsing attributes in process `syz.0.12591'. [ 1612.600800][T23819] netlink: 8 bytes leftover after parsing attributes in process `syz.0.12591'. [ 1613.109740][T23842] lo speed is unknown, defaulting to 1000 [ 1613.163948][T23842] lo speed is unknown, defaulting to 1000 [ 1613.595989][T23864] lo speed is unknown, defaulting to 1000 [ 1613.630372][T23864] lo speed is unknown, defaulting to 1000 [ 1614.067701][T23842] wg1 speed is unknown, defaulting to 1000 [ 1614.366365][T23891] x_tables: duplicate underflow at hook 2 [ 1614.572195][T23864] wg1 speed is unknown, defaulting to 1000 [ 1614.733139][T23904] netlink: 'syz.0.12618': attribute type 10 has an invalid length. [ 1614.746156][T23904] __nla_validate_parse: 7 callbacks suppressed [ 1614.746175][T23904] netlink: 228 bytes leftover after parsing attributes in process `syz.0.12618'. [ 1614.820462][T20529] Bluetooth: hci2: command 0x0406 tx timeout [ 1615.285018][ T30] audit: type=1107 audit(1770616821.012:57): pid=23912 uid=0 auid=4294967295 ses=4294967295 subj=unconfined msg='' [ 1615.585575][T23911] tipc: Enabling of bearer rejected, failed to enable media [ 1615.796612][T23925] netlink: 20 bytes leftover after parsing attributes in process `syz.7.12626'. [ 1615.806661][T23925] nbd: must specify a size in bytes for the device [ 1615.877703][T23928] netlink: 24 bytes leftover after parsing attributes in process `syz.7.12627'. [ 1615.907085][T23928] netlink: 8 bytes leftover after parsing attributes in process `syz.7.12627'. [ 1616.032770][T23934] openvswitch: netlink: Missing key (keys=40, expected=10000000) [ 1616.046471][T23928] netlink: 8 bytes leftover after parsing attributes in process `syz.7.12627'. [ 1616.139504][T23938] netlink: 8 bytes leftover after parsing attributes in process `syz.5.12629'. [ 1616.149145][T23938] netlink: 'syz.5.12629': attribute type 5 has an invalid length. [ 1616.157625][T23938] netlink: 20 bytes leftover after parsing attributes in process `syz.5.12629'. [ 1616.177067][T23938] geneve2: entered promiscuous mode [ 1616.182695][T23938] geneve2: entered allmulticast mode [ 1616.190721][ T8749] netdevsim netdevsim5 eth0: set [1, 1] type 2 family 0 port 256 - 0 [ 1616.202650][ T8749] netdevsim netdevsim5 eth1: set [1, 1] type 2 family 0 port 256 - 0 [ 1616.212675][ T8749] netdevsim netdevsim5 eth2: set [1, 1] type 2 family 0 port 256 - 0 [ 1616.247910][ T8749] netdevsim netdevsim5 eth3: set [1, 1] type 2 family 0 port 256 - 0 [ 1616.294510][T23943] netlink: 128 bytes leftover after parsing attributes in process `syz.7.12632'. [ 1616.320481][T23946] IPVS: set_ctl: invalid protocol: 4 172.20.20.187:20004 [ 1616.338190][T23946] : renamed from bond_slave_0 (while UP) [ 1616.396033][T23948] netlink: 65039 bytes leftover after parsing attributes in process `syz.4.12633'. [ 1616.662076][T23964] netlink: 'syz.4.12635': attribute type 21 has an invalid length. [ 1616.720336][T23964] netlink: 128 bytes leftover after parsing attributes in process `syz.4.12635'. [ 1616.766322][T23964] netlink: 'syz.4.12635': attribute type 4 has an invalid length. [ 1616.783386][T23964] netlink: 'syz.4.12635': attribute type 5 has an invalid length. [ 1617.345432][T23982] lo speed is unknown, defaulting to 1000 [ 1617.362619][T23982] lo speed is unknown, defaulting to 1000 [ 1617.766374][T23983] lec:lec_atm_close: lec0: Shut down! [ 1618.064729][T23437] hid-generic 0005:07C0:5508.0002: hidraw0: BLUETOOTH HID vc3.36 Device [syz0] on aa:aa:aa:aa:aa:aa [ 1618.161813][T24002] bond0: (slave sit0): Error: Device type is different from other slaves [ 1618.728521][T23982] wg1 speed is unknown, defaulting to 1000 [ 1618.875685][T24044] vlan2: entered allmulticast mode [ 1618.881489][T24044] veth0_to_bond: entered allmulticast mode [ 1619.210770][T24061] sctp: [Deprecated]: syz.4.12659 (pid 24061) Use of struct sctp_assoc_value in delayed_ack socket option. [ 1619.210770][T24061] Use struct sctp_sack_info instead [ 1619.366125][T24064] tipc: Enabled bearer , priority 0 [ 1619.560949][T24063] tipc: Disabling bearer [ 1619.740325][T23437] lec:lec_start_xmit: lec0:No lecd attached [ 1619.992530][T24087] xt_hashlimit: overflow, try lower: 18446744073709551615/255 [ 1620.002635][T24087] openvswitch: netlink: IP tunnel dst address not specified [ 1620.425073][ T31] INFO: task syz.6.11567:19457 blocked for more than 143 seconds. [ 1620.434363][ T31] Not tainted syzkaller #0 [ 1620.442870][ T31] "echo 0 > /proc/sys/kernel/hung_task_timeout_secs" disables this message. [ 1620.466707][ T31] task:syz.6.11567 state:D stack:26184 pid:19457 tgid:19444 ppid:13378 task_flags:0x400140 flags:0x00080002 [ 1620.491286][ T31] Call Trace: [ 1620.499188][ T31] [ 1620.512595][ T31] __schedule+0x14ea/0x5050 [ 1620.517702][ T31] ? __pfx___schedule+0x10/0x10 [ 1620.544486][ T31] ? schedule+0x90/0x360 [ 1620.552677][ T31] schedule+0x164/0x360 [ 1620.562679][ T31] schedule_preempt_disabled+0x13/0x30 [ 1620.574936][ T31] __mutex_lock+0x7fe/0x1300 [ 1620.585773][ T31] ? __mutex_lock+0x5ac/0x1300 [ 1620.598448][ T31] ? nfsd_nl_rpc_status_get_dumpit+0xdc/0x1410 [ 1620.611869][ T31] ? __pfx___mutex_lock+0x10/0x10 [ 1620.624126][ T31] ? stack_trace_save+0xa9/0x100 [ 1620.635204][ T31] ? __pfx_stack_trace_save+0x10/0x10 [ 1620.641173][ T31] nfsd_nl_rpc_status_get_dumpit+0xdc/0x1410 [ 1620.647388][ T31] ? stack_depot_save_flags+0x33/0x810 [ 1620.653566][ T31] ? kasan_save_track+0x4f/0x80 [ 1620.660012][ T31] ? kasan_save_track+0x3e/0x80 [ 1620.667620][ T31] ? __kasan_kmalloc+0x93/0xb0 [ 1620.672616][ T31] ? __alloc_skb+0x2c1/0x7d0 [ 1620.677556][ T31] ? netlink_dump+0x1ef/0xe80 [ 1620.682488][ T31] ? __netlink_dump_start+0x5cb/0x7e0 [ 1620.688516][ T31] ? genl_family_rcv_msg_dumpit+0x213/0x310 [ 1620.694896][ T31] ? genl_rcv_msg+0x5e8/0x7a0 [ 1620.700676][ T31] ? netlink_rcv_skb+0x232/0x4b0 [ 1620.706035][ T31] ? genl_rcv+0x28/0x40 [ 1620.710358][ T31] ? netlink_unicast+0x80f/0x9b0 [ 1620.715685][ T31] ? netlink_sendmsg+0x813/0xb40 [ 1620.724049][ T31] ? ____sys_sendmsg+0xa68/0xad0 [ 1620.729226][ T31] ? ___sys_sendmsg+0x2a5/0x360 [ 1620.735501][ T31] ? __x64_sys_sendmsg+0x1bd/0x2a0 [ 1620.745024][ T31] ? do_syscall_64+0xe2/0xf80 [ 1620.750748][ T31] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1620.757030][ T31] ? __pfx_nfsd_nl_rpc_status_get_dumpit+0x10/0x10 [ 1620.763799][ T31] ? rcu_is_watching+0x15/0xb0 [ 1620.768937][ T31] ? trace_kmalloc+0x1f/0xb0 [ 1620.773925][ T31] ? __kmalloc_node_track_caller_noprof+0x577/0x7f0 [ 1620.781066][ T31] genl_dumpit+0x10b/0x1b0 [ 1620.785644][ T31] netlink_dump+0x722/0xe80 [ 1620.790301][ T31] ? __pfx_netlink_dump+0x10/0x10 [ 1620.795899][ T31] ? genl_start+0x499/0x6c0 [ 1620.800669][ T31] __netlink_dump_start+0x5cb/0x7e0 [ 1620.806198][ T31] genl_family_rcv_msg_dumpit+0x213/0x310 [ 1620.812258][ T31] ? __pfx_genl_family_rcv_msg_dumpit+0x10/0x10 [ 1620.818656][ T31] ? genl_get_cmd+0x4a8/0x930 [ 1620.824373][ T31] ? __pfx_genl_start+0x10/0x10 [ 1620.829423][ T31] ? __pfx_genl_dumpit+0x10/0x10 [ 1620.834469][ T31] ? __pfx_genl_done+0x10/0x10 [ 1620.840105][ T31] ? __lock_acquire+0x6b5/0x2cf0 [ 1620.845108][ T31] genl_rcv_msg+0x5e8/0x7a0 [ 1620.849673][ T31] ? __pfx_genl_rcv_msg+0x10/0x10 [ 1620.854810][ T31] ? __pfx_nfsd_nl_rpc_status_get_dumpit+0x10/0x10 [ 1620.861803][ T31] netlink_rcv_skb+0x232/0x4b0 [ 1620.866628][ T31] ? __pfx_genl_rcv_msg+0x10/0x10 [ 1620.871896][ T31] ? __pfx_netlink_rcv_skb+0x10/0x10 [ 1620.877433][ T31] ? genl_rcv+0x19/0x40 [ 1620.881777][ T31] ? down_read+0x272/0x2e0 [ 1620.886388][ T31] ? genl_rcv+0xd/0x40 [ 1620.890558][ T31] genl_rcv+0x28/0x40 [ 1620.894652][ T31] netlink_unicast+0x80f/0x9b0 [ 1620.899578][ T31] ? __pfx_netlink_unicast+0x10/0x10 [ 1620.905247][ T31] ? netlink_sendmsg+0x650/0xb40 [ 1620.910423][ T31] ? skb_put+0x11b/0x210 [ 1620.914753][ T31] netlink_sendmsg+0x813/0xb40 [ 1620.919634][ T31] ? __pfx_netlink_sendmsg+0x10/0x10 [ 1620.925276][ T31] ? aa_sock_msg_perm+0xf1/0x1b0 [ 1620.930831][ T31] ? bpf_lsm_socket_sendmsg+0x9/0x20 [ 1620.936159][ T31] ? __pfx_netlink_sendmsg+0x10/0x10 [ 1620.942246][ T31] ____sys_sendmsg+0xa68/0xad0 [ 1620.947175][ T31] ? __might_fault+0xaf/0x130 [ 1620.951964][ T31] ? __pfx_____sys_sendmsg+0x10/0x10 [ 1620.957652][ T31] ? import_iovec+0x73/0xa0 [ 1620.962268][ T31] ___sys_sendmsg+0x2a5/0x360 [ 1620.967076][ T31] ? __lock_acquire+0x6b5/0x2cf0 [ 1620.972134][ T31] ? __pfx____sys_sendmsg+0x10/0x10 [ 1620.977452][ T31] ? futex_wait+0x29a/0x380 [ 1620.982251][ T31] ? __fget_files+0x2a/0x420 [ 1620.986879][ T31] ? __fget_files+0x3a0/0x420 [ 1620.992083][ T31] __x64_sys_sendmsg+0x1bd/0x2a0 [ 1620.997071][ T31] ? __pfx___x64_sys_sendmsg+0x10/0x10 [ 1621.002764][ T31] ? rcu_is_watching+0x15/0xb0 [ 1621.007923][ T31] do_syscall_64+0xe2/0xf80 [ 1621.012508][ T31] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1621.018604][ T31] ? trace_irq_disable+0x37/0x100 [ 1621.023978][ T31] ? clear_bhb_loop+0x60/0xb0 [ 1621.028704][ T31] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1621.034907][ T31] RIP: 0033:0x7f7c3c19aeb9 [ 1621.039372][ T31] RSP: 002b:00007f7c3d0c5028 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 1621.048854][ T31] RAX: ffffffffffffffda RBX: 00007f7c3c416090 RCX: 00007f7c3c19aeb9 [ 1621.056953][ T31] RDX: 0000000000000800 RSI: 0000200000000180 RDI: 0000000000000007 [ 1621.065791][ T31] RBP: 00007f7c3c208c1f R08: 0000000000000000 R09: 0000000000000000 [ 1621.073899][ T31] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 1621.082042][ T31] R13: 00007f7c3c416128 R14: 00007f7c3c416090 R15: 00007fffffeee928 [ 1621.090219][ T31] [ 1621.093401][ T31] [ 1621.093401][ T31] Showing all locks held in the system: [ 1621.101839][ T31] 1 lock held by rcu_exp_gp_kthr/18: [ 1621.107351][ T31] #0: ffff8880b863a918 (&rq->__lock){-.-.}-{2:2}, at: raw_spin_rq_lock_nested+0x2a/0x140 [ 1621.117739][ T31] 1 lock held by khungtaskd/31: [ 1621.122696][ T31] #0: ffffffff8e55a360 (rcu_read_lock){....}-{1:3}, at: debug_show_all_locks+0x2e/0x180 [ 1621.132699][ T31] 2 locks held by klogd/5177: [ 1621.137529][ T31] 1 lock held by dhcpcd/5483: [ 1621.149585][ T31] #0: ffffffff8f9abf08 (rtnl_mutex){+.+.}-{4:4}, at: devinet_ioctl+0x32b/0x1b30 [ 1621.159022][ T31] 2 locks held by getty/5580: [ 1621.163989][ T31] #0: ffff8880307b60a0 (&tty->ldisc_sem){++++}-{0:0}, at: tty_ldisc_ref_wait+0x25/0x70 [ 1621.173897][ T31] #1: ffffc9000332b2f0 (&ldata->atomic_read_lock){+.+.}-{4:4}, at: n_tty_read+0x45c/0x13c0 [ 1621.184303][ T31] 3 locks held by kworker/u8:43/8746: [ 1621.189765][ T31] #0: ffff88813fe69948 ((wq_completion)events_unbound#2){+.+.}-{0:0}, at: process_scheduled_works+0x9d4/0x17a0 [ 1621.202034][ T31] #1: ffffc90003c0fbc0 ((linkwatch_work).work){+.+.}-{0:0}, at: process_scheduled_works+0xa0f/0x17a0 [ 1621.213479][ T31] #2: ffffffff8f9abf08 (rtnl_mutex){+.+.}-{4:4}, at: linkwatch_event+0xe/0x60 [ 1621.223392][ T31] 4 locks held by kworker/u8:46/8749: [ 1621.228808][ T31] 3 locks held by kworker/u8:62/8769: [ 1621.234547][ T31] #0: ffff88803065e948 ((wq_completion)ipv6_addrconf){+.+.}-{0:0}, at: process_scheduled_works+0x9d4/0x17a0 [ 1621.246808][ T31] #1: ffffc90004627bc0 ((work_completion)(&(&ifa->dad_work)->work)){+.+.}-{0:0}, at: process_scheduled_works+0xa0f/0x17a0 [ 1621.260166][ T31] #2: ffffffff8f9abf08 (rtnl_mutex){+.+.}-{4:4}, at: addrconf_dad_work+0x11e/0x14c0 [ 1621.270055][ T31] 3 locks held by kworker/0:0/10669: [ 1621.275363][ T31] #0: ffff88813fe55948 ((wq_completion)events){+.+.}-{0:0}, at: process_scheduled_works+0x9d4/0x17a0 [ 1621.286466][ T31] #1: ffffc90004e87bc0 ((fqdir_free_work).work){+.+.}-{0:0}, at: process_scheduled_works+0xa0f/0x17a0 [ 1621.298074][ T31] #2: ffffffff8e560b40 (rcu_state.barrier_mutex){+.+.}-{4:4}, at: rcu_barrier+0x4c/0x580 [ 1621.308496][ T31] 2 locks held by syz.1.9842/12791: [ 1621.313803][ T31] #0: ffffffff8fa19af0 (cb_lock){++++}-{4:4}, at: genl_rcv+0x19/0x40 [ 1621.322347][ T31] #1: ffffffff8e879428 (nfsd_mutex){+.+.}-{4:4}, at: nfsd_nl_listener_set_doit+0x141/0x16c0 [ 1621.332912][ T31] 3 locks held by syz.6.11567/19457: [ 1621.338324][ T31] #0: ffffffff8fa19af0 (cb_lock){++++}-{4:4}, at: genl_rcv+0x19/0x40 [ 1621.346875][ T31] #1: ffff88804a2b76f0 (nlk_cb_mutex-GENERIC){+.+.}-{4:4}, at: __netlink_dump_start+0xfe/0x7e0 [ 1621.358150][ T31] #2: ffffffff8e879428 (nfsd_mutex){+.+.}-{4:4}, at: nfsd_nl_rpc_status_get_dumpit+0xdc/0x1410 [ 1621.368898][ T31] 3 locks held by syz.3.12668/24088: [ 1621.374674][ T31] #0: ffff888011a84708 (&sb->s_type->i_mutex_key#13){+.+.}-{4:4}, at: sock_close+0x9b/0x240 [ 1621.386080][ T31] #1: ffff888046230ee0 (sk_lock-AF_QIPCRTR){+.+.}-{0:0}, at: qrtr_release+0x52/0x2d0 [ 1621.396011][ T31] #2: ffffffff8e560c78 (rcu_state.exp_mutex){+.+.}-{4:4}, at: synchronize_rcu_expedited+0x2d0/0x770 [ 1621.406988][ T31] 2 locks held by syz.4.12669/24102: [ 1621.412382][ T31] #0: ffffffff8f9abf08 (rtnl_mutex){+.+.}-{4:4}, at: tun_chr_close+0x3e/0x1c0 [ 1621.421475][ T31] #1: ffffffff8e560c78 (rcu_state.exp_mutex){+.+.}-{4:4}, at: synchronize_rcu_expedited+0x38d/0x770 [ 1621.432462][ T31] 2 locks held by syz.0.12670/24101: [ 1621.437882][ T31] #0: ffffffff8fef8c58 (&ops->srcu#2){.+.+}-{0:0}, at: rtnl_link_ops_get+0x23/0x250 [ 1621.447874][ T31] #1: ffffffff8f9abf08 (rtnl_mutex){+.+.}-{4:4}, at: rtnl_newlink+0x8a1/0x1be0 [ 1621.457613][ T31] 2 locks held by syz.0.12670/24107: [ 1621.463787][ T31] #0: ffffffff8fef8c58 (&ops->srcu#2){.+.+}-{0:0}, at: rtnl_link_ops_get+0x23/0x250 [ 1621.473625][ T31] #1: ffffffff8f9abf08 (rtnl_mutex){+.+.}-{4:4}, at: rtnl_newlink+0x8a1/0x1be0 [ 1621.483171][ T31] 2 locks held by syz.7.12672/24113: [ 1621.488581][ T31] #0: ffffffff8fa19af0 (cb_lock){++++}-{4:4}, at: genl_rcv+0x19/0x40 [ 1621.497088][ T31] #1: ffffffff8f9abf08 (rtnl_mutex){+.+.}-{4:4}, at: nl80211_pre_doit+0x5f/0x930 [ 1621.506465][ T31] 1 lock held by syz.5.12671/24116: [ 1621.511904][ T31] #0: ffffffff8f9abf08 (rtnl_mutex){+.+.}-{4:4}, at: rtnetlink_rcv_msg+0x722/0xbe0 [ 1621.521552][ T31] [ 1621.547963][ T8756] netdevsim netdevsim0 netdevsim0: set [0, 0] type 1 family 0 port 8472 - 0 [ 1621.584165][ T31] ============================================= [ 1621.584165][ T31] [ 1621.588079][ T8756] netdevsim netdevsim0 netdevsim1: set [0, 0] type 1 family 0 port 8472 - 0 [ 1621.593445][ T31] NMI backtrace for cpu 1 [ 1621.593462][ T31] CPU: 1 UID: 0 PID: 31 Comm: khungtaskd Not tainted syzkaller #0 PREEMPT(full) [ 1621.593482][ T31] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/24/2026 [ 1621.593493][ T31] Call Trace: [ 1621.593510][ T31] [ 1621.593518][ T31] dump_stack_lvl+0xe8/0x150 [ 1621.593547][ T31] nmi_cpu_backtrace+0x274/0x2d0 [ 1621.593569][ T31] ? __pfx_nmi_raise_cpu_backtrace+0x10/0x10 [ 1621.593597][ T31] nmi_trigger_cpumask_backtrace+0x17a/0x300 [ 1621.593619][ T31] sys_info+0x135/0x170 [ 1621.593635][ T31] watchdog+0xf90/0xfe0 [ 1621.593659][ T31] ? watchdog+0x209/0xfe0 [ 1621.593684][ T31] kthread+0x726/0x8b0 [ 1621.593706][ T31] ? __pfx_watchdog+0x10/0x10 [ 1621.593725][ T31] ? __pfx_kthread+0x10/0x10 [ 1621.593747][ T31] ? _raw_spin_unlock_irq+0x23/0x50 [ 1621.593768][ T31] ? __pfx_kthread+0x10/0x10 [ 1621.593788][ T31] ret_from_fork+0x51b/0xa40 [ 1621.593807][ T31] ? __pfx_ret_from_fork+0x10/0x10 [ 1621.593830][ T31] ? __switch_to+0xc82/0x1410 [ 1621.593856][ T31] ? __pfx_kthread+0x10/0x10 [ 1621.593877][ T31] ret_from_fork_asm+0x1a/0x30 [ 1621.593914][ T31] [ 1621.593921][ T31] Sending NMI from CPU 1 to CPUs 0: [ 1621.636565][ T8756] netdevsim netdevsim0 netdevsim2: set [0, 0] type 1 family 0 port 8472 - 0 [ 1621.640802][ C0] NMI backtrace for cpu 0 [ 1621.640819][ C0] CPU: 0 UID: 0 PID: 8756 Comm: kworker/u8:51 Not tainted syzkaller #0 PREEMPT(full) [ 1621.640838][ C0] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/24/2026 [ 1621.640848][ C0] Workqueue: udp_tunnel_nic udp_tunnel_nic_device_sync_work [ 1621.640872][ C0] RIP: 0010:io_serial_in+0x77/0xc0 [ 1621.640893][ C0] Code: e8 1e c3 92 fc 44 89 f9 d3 e3 49 83 c6 40 4c 89 f0 48 c1 e8 03 42 80 3c 20 00 74 08 4c 89 f7 e8 0f 13 fb fc 41 03 1e 89 da ec <0f> b6 c0 5b 41 5c 41 5e 41 5f c3 cc cc cc cc cc 44 89 f9 80 e1 07 [ 1621.640907][ C0] RSP: 0018:ffffc90003e7efb0 EFLAGS: 00000002 [ 1621.640920][ C0] RAX: 1ffffffff3468200 RBX: 00000000000003fd RCX: 0000000000000000 [ 1621.640932][ C0] RDX: 00000000000003fd RSI: 0000000000000000 RDI: 0000000000000020 [ 1621.640944][ C0] RBP: ffffffff9a341530 R08: ffff8881482a0237 R09: 1ffff11029054046 [ 1621.640955][ C0] R10: dffffc0000000000 R11: ffffffff853193e0 R12: dffffc0000000000 [ 1621.640967][ C0] R13: 0000000000000000 R14: ffffffff9a3412a0 R15: 0000000000000000 [ 1621.640978][ C0] FS: 0000000000000000(0000) GS:ffff8881256ea000(0000) knlGS:0000000000000000 [ 1621.640991][ C0] CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033 [ 1621.641003][ C0] CR2: 00007f7de3be12f8 CR3: 0000000029b80000 CR4: 00000000003526f0 [ 1621.641020][ C0] Call Trace: [ 1621.641027][ C0] [ 1621.641036][ C0] wait_for_lsr+0xd1/0x2f0 [ 1621.641061][ C0] serial8250_console_write+0x1348/0x1ba0 [ 1621.641087][ C0] ? __pfx_serial8250_console_write+0x10/0x10 [ 1621.641106][ C0] ? console_flush_all+0x123/0xb20 [ 1621.641128][ C0] ? do_raw_spin_unlock+0xf5/0x210 [ 1621.641146][ C0] ? console_flush_all+0x123/0xb20 [ 1621.641163][ C0] console_flush_all+0x718/0xb20 [ 1621.641182][ C0] ? console_flush_all+0x123/0xb20 [ 1621.641201][ C0] ? __pfx_console_flush_all+0x10/0x10 [ 1621.641220][ C0] ? is_printk_cpu_sync_owner+0x32/0x40 [ 1621.641241][ C0] console_unlock+0xd1/0x1c0 [ 1621.641264][ C0] ? vprintk_emit+0x2cf/0x560 [ 1621.641280][ C0] ? __pfx_console_unlock+0x10/0x10 [ 1621.641294][ C0] ? vprintk_emit+0x1d0/0x560 [ 1621.641310][ C0] ? vprintk_emit+0x455/0x560 [ 1621.641325][ C0] ? vprintk_emit+0x2cf/0x560 [ 1621.641339][ C0] ? vprintk_emit+0x2cf/0x560 [ 1621.641355][ C0] vprintk_emit+0x485/0x560 [ 1621.641372][ C0] ? __pfx_vprintk_emit+0x10/0x10 [ 1621.641392][ C0] dev_vprintk_emit+0x355/0x420 [ 1621.641410][ C0] ? finish_task_switch+0x161/0x920 [ 1621.641430][ C0] ? __pfx_dev_vprintk_emit+0x10/0x10 [ 1621.641456][ C0] dev_printk_emit+0xee/0x140 [ 1621.641473][ C0] ? rcu_is_watching+0x15/0xb0 [ 1621.641490][ C0] ? __schedule+0x1500/0x5050 [ 1621.641511][ C0] ? __pfx_dev_printk_emit+0x10/0x10 [ 1621.641531][ C0] ? __resched_curr+0x202/0x3f0 [ 1621.641547][ C0] ? __lock_acquire+0x6b5/0x2cf0 [ 1621.641568][ C0] __netdev_printk+0x3e1/0x480 [ 1621.641588][ C0] netdev_info+0x11e/0x180 [ 1621.641612][ C0] ? __pfx_netdev_info+0x10/0x10 [ 1621.641633][ C0] ? __mutex_trylock_common+0x158/0x260 [ 1621.641651][ C0] ? __pfx___mutex_trylock_common+0x10/0x10 [ 1621.641671][ C0] nsim_udp_tunnel_set_port+0x268/0x3e0 [ 1621.641695][ C0] __udp_tunnel_nic_device_sync+0xb9f/0x1580 [ 1621.641721][ C0] ? __pfx___udp_tunnel_nic_device_sync+0x10/0x10 [ 1621.641737][ C0] ? __pfx_do_raw_spin_lock+0x10/0x10 [ 1621.641755][ C0] ? process_scheduled_works+0xa0f/0x17a0 [ 1621.641778][ C0] udp_tunnel_nic_device_sync_work+0x97/0xa10 [ 1621.641797][ C0] ? process_scheduled_works+0xa0f/0x17a0 [ 1621.641818][ C0] ? process_scheduled_works+0xa0f/0x17a0 [ 1621.641840][ C0] process_scheduled_works+0xaec/0x17a0 [ 1621.641874][ C0] ? __pfx_process_scheduled_works+0x10/0x10 [ 1621.641894][ C0] ? do_raw_spin_lock+0x12b/0x2f0 [ 1621.641912][ C0] ? __pfx_do_raw_spin_lock+0x10/0x10 [ 1621.641928][ C0] ? schedule+0x90/0x360 [ 1621.641950][ C0] worker_thread+0xda6/0x1360 [ 1621.641983][ C0] kthread+0x726/0x8b0 [ 1621.642001][ C0] ? __pfx_worker_thread+0x10/0x10 [ 1621.642023][ C0] ? __pfx_kthread+0x10/0x10 [ 1621.642041][ C0] ? _raw_spin_unlock_irq+0x23/0x50 [ 1621.642059][ C0] ? __pfx_kthread+0x10/0x10 [ 1621.642075][ C0] ret_from_fork+0x51b/0xa40 [ 1621.642092][ C0] ? __pfx_ret_from_fork+0x10/0x10 [ 1621.642112][ C0] ? __switch_to+0xc82/0x1410 [ 1621.642135][ C0] ? __pfx_kthread+0x10/0x10 [ 1621.642152][ C0] ret_from_fork_asm+0x1a/0x30 [ 1621.642178][ C0] [ 1621.750425][ T31] Kernel panic - not syncing: hung_task: blocked tasks [ 1621.750449][ T31] CPU: 1 UID: 0 PID: 31 Comm: khungtaskd Not tainted syzkaller #0 PREEMPT(full) [ 1621.750472][ T31] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/24/2026 [ 1621.750492][ T31] Call Trace: [ 1621.750501][ T31] [ 1621.750510][ T31] vpanic+0x1e0/0x670 [ 1621.750542][ T31] panic+0xc5/0xd0 [ 1621.750563][ T31] ? __pfx_panic+0x10/0x10 [ 1621.750586][ T31] ? preempt_schedule_thunk+0x16/0x30 [ 1621.750619][ T31] ? nmi_trigger_cpumask_backtrace+0x2bb/0x300 [ 1621.750643][ T31] watchdog+0xfda/0xfe0 [ 1621.750668][ T31] ? watchdog+0x209/0xfe0 [ 1621.750695][ T31] kthread+0x726/0x8b0 [ 1621.750719][ T31] ? __pfx_watchdog+0x10/0x10 [ 1621.750738][ T31] ? __pfx_kthread+0x10/0x10 [ 1621.750761][ T31] ? _raw_spin_unlock_irq+0x23/0x50 [ 1621.750784][ T31] ? __pfx_kthread+0x10/0x10 [ 1621.750805][ T31] ret_from_fork+0x51b/0xa40 [ 1621.750826][ T31] ? __pfx_ret_from_fork+0x10/0x10 [ 1621.750851][ T31] ? __switch_to+0xc82/0x1410 [ 1621.750878][ T31] ? __pfx_kthread+0x10/0x10 [ 1621.750899][ T31] ret_from_fork_asm+0x1a/0x30 [ 1621.750938][ T31] [ 1621.752158][ T31] Kernel Offset: disabled