last executing test programs: 3m30.949490501s ago: executing program 3 (id=6325): epoll_ctl$EPOLL_CTL_ADD(0xffffffffffffffff, 0x1, 0xffffffffffffffff, 0x0) r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0xa8442, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x7101}) r1 = openat$tun(0xffffffffffffff9c, &(0x7f0000000400), 0x0, 0x0) r2 = socket(0x400000000010, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f0000000380)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r2, &(0x7f00000012c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000005c0)=@newqdisc={0x38, 0x24, 0x4ee4e6a52ff56541, 0x70bd2a, 0xffffffff, {0x0, 0x0, 0x0, r3, {0x0, 0xfff1}, {0xffff, 0xffff}}, [@qdisc_kind_options=@q_multiq={{0xb}, {0x8}}]}, 0x38}}, 0x0) sendmsg$nl_route_sched(r2, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000180)={&(0x7f00000022c0)=@newtfilter={0x94, 0x2c, 0xd27, 0x170bd2b, 0x2, {0x0, 0x0, 0x0, r3, {0x0, 0x10}, {}, {0x8, 0xfff2}}, [@filter_kind_options=@f_flow={{0x9}, {0x64, 0x2, [@TCA_FLOW_MODE={0x8, 0x2, 0x1}, @TCA_FLOW_KEYS={0x8, 0x1, 0x1e3ab}, @TCA_FLOW_ACT={0x50, 0x9, 0x0, 0x1, [@m_csum={0x4c, 0x1, 0x0, 0x0, {{0x9}, {0x20, 0x2, 0x0, 0x1, [@TCA_CSUM_PARMS={0x1c, 0x1, {{0x1003d1, 0x3, 0x20000000, 0x2, 0x6}, 0x64}}]}, {0x4}, {0xc, 0x7, {0x1, 0x1}}, {0xc, 0x8, {0x1, 0x1}}}}]}]}}]}, 0x94}, 0x1, 0x0, 0x0, 0xc804}, 0x2) close(r1) socket$unix(0x1, 0x2, 0x0) ioctl$SIOCSIFHWADDR(r1, 0x8914, &(0x7f0000002280)={'syzkaller0\x00', @random="af75355d1696"}) r4 = socket$kcm(0x11, 0x3, 0x0) r5 = socket$nl_generic(0x10, 0x3, 0x10) r6 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000580), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r5, 0x8933, &(0x7f00000013c0)={'wlan1\x00', 0x0}) sendmsg$NL80211_CMD_FRAME(r5, &(0x7f0000001380)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f0000000dc0)=ANY=[@ANYBLOB="f4060000", @ANYRES16=r6, @ANYBLOB="01000000000000e14f003b00000008000300", @ANYRES32=r7, @ANYBLOB="d50633008000009effffffffffff080211000001"], 0x6f4}}, 0x0) sendmsg$NL80211_CMD_DEL_PMK(r2, &(0x7f0000000a80)={&(0x7f0000000200)={0x10, 0x0, 0x0, 0x1000}, 0xc, &(0x7f0000000a40)={&(0x7f0000000980)={0x80, r6, 0x4, 0x70bd23, 0x25dfdbfc, {{}, {@void, @void}}, [@NL80211_ATTR_MAC={0xa}, @NL80211_ATTR_MAC={0xa}, @NL80211_ATTR_MAC={0xa, 0x6, @device_b}, @NL80211_ATTR_MAC={0xa, 0x6, @broadcast}, @NL80211_ATTR_MAC={0xa, 0x6, @device_b}, @NL80211_ATTR_MAC={0xa, 0x6, @device_b}, @NL80211_ATTR_MAC={0xa, 0x6, @broadcast}, @NL80211_ATTR_MAC={0xa, 0x6, @device_b}, @NL80211_ATTR_MAC={0xa}]}, 0x80}, 0x1, 0x0, 0x0, 0x4048805}, 0x40) setsockopt$sock_attach_bpf(r4, 0x107, 0xf, &(0x7f0000000600), 0x4) r8 = socket$unix(0x1, 0x1, 0x0) r9 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='memory.events\x00', 0x275a, 0x0) mmap(&(0x7f0000001000/0x3000)=nil, 0x3000, 0x300000d, 0x6052, r9, 0x1000) r10 = syz_init_net_socket$llc(0x1a, 0x1, 0x0) sendmmsg$inet(r10, &(0x7f0000004c40)=[{{&(0x7f0000000040)={0x2, 0x0, @multicast2}, 0x10, 0x0}}, {{0x0, 0x0, &(0x7f0000004200)=[{&(0x7f0000001600)="c7c0", 0x2}], 0x1, &(0x7f0000004ec0)=ANY=[], 0xa8}}], 0x2, 0x8014) ioctl$sock_SIOCGIFINDEX(r8, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$kcm(r4, &(0x7f0000000280)={&(0x7f0000000740)=@xdp={0x2c, 0x0, r11, 0x42}, 0x80, &(0x7f0000003440)=[{&(0x7f00000002c0)="27030200dc0f24000e00003c000c00000000ff840000000200000003125ce882cbf490d908f1523f000000002d9c2740e260a09c6911cda856d5141bffc6e29a5789796eec81944d7dff184d3319ce9dfb5c1fcd66e67b91a917a67ece64299573503cbc7e27133c4e5ed68c7a9b407a275bcff3432a487ebef21275b91d386164b443c1dfdf63831812e0471639a99b97a9923e4659cd5d1e3c", 0x9a}, {&(0x7f0000001300)="76e69c0141b4626c18e58316fb1785bc79a094726e33891c6d73f43317b7de3105b7a250790f8a23088b7292aad0049477fd7b736036a2ba810a11b6e5e83b06e0c428d362a29030f3fbb8f93a957f85472c59a37fbc2dc4abf47a23fe1bbab86b3666155606864b97f7615a55989cd2e143f1a9aca24050db9efff1f1639b55a2a771ec9e91f94fb670c3f35f31c40170189010e598500aa376763444ecaf5df2a31e04eda4201194c49c48d817c9d8d50d47c014b329be33b127527fe321b097a15f48ef82a32b10e24a1b56e981b91257aeddd7fee2fe035a1a164b3906ca184ad08f294cde3dfa48743847cac62a87c2d96176a9f6b4278dc95c6c637294986fa9e3e82b504341f82bf314389b0af7c8e07cb6f5ef9bcd83993c880ef2b2aa313a124bee3deb3133338c291d698f04b796be5514c81bad54c22190acda8145b1c14c4b916e2f5c2f10a8702b90d26e0332605edbc351edcd5621cf8c0f1585b1a53879f9ad931c18b15426856dc1c800e4cce36c6c1bf880c0c40a718810ff4793eba9e39d7cd9b351905a845dd3064613cd6f75802a6bc51c1524b412a2a68e6fa4886bd13b48aa9a12a7ace6fa08ccc86cda842d2f4b564a76a9e8adad2249e0dc200a2e647d34ef0dc23dd85674cce8f8e08a6c5ea76db48ac832f2a6e7514c9ab9f7e99fb3a7ec6cbc1ab45e12d151176cd6a044572928dfd2b72e3557d037b12328f7d4388a4ff8a8e890b2cdaa61fd525dfd3d0feda9c066feff70d89e8fbaaa4ac79e0b814c7b0cb9de9b5915ee30c12c55dc302fa36f96a6b4a437e2f7bac25fb284eec70388c1d4ee9fb51483c801007a74c1806141802eb107b80a047315c048db3671e35139544988b51a23136b02151a06114cc80c05b772786a505edc6d8f74a66b126a940f06000d7abbf3224b9e1f86eb693778968b3e982f197570ffa5732524be57aba33a59cf0032ef61b52f7c2fc2cd992d616452316ee21e7361cfc527acb09f0f46bb8ef013f28d7f615b09037d26e0715d927afee6b9878adad923ce6a6114bb8d3463be786232330a028c152adb31596c77a60231d53fbb8ce73509f37100f69c9004429e904b644de72b865fdccedbc99927542df25180f5880d20590900a9e8b711c8867b67b98d48caf8259797b41284f6e52aa5177ca06a4f25a568ea3a5dd13c6711436d63b814da12b72470eb3468860e5ef86bf381babc6cec73757a1c38a8cf9887bb69045b155ed0ae6c5f2c07f3b9f02c6f02a9ee474e3a9d75e67694bb2a0f28a672a5883dc9688ca2166f914bb1cfc70685907bfa4e9693d9620969fa41ca907751335193417b468de3bab8bf0b7438abe80f494c95e017f41e9a232c52153bc58adf7cc845e770ba119756bad683ff9c701cdd34bc540d8164cf3099c011b328fc0a0445e8eb8085c8cd2fdaf22e1dea9d04454b37af3c83dd3f667f73ca9eb0c3e9bc328b536a1ae9a449b24e227bb05692b16560756d9f0cb3200df43c26d3dbed542f7bd4e3d1329c8e9f631520355e9254b1687197c8374111ee1de4c1784d843aa26992280c9ec267965b8d4d6461afcd597ce636316f5c4ac8f1bec9aa16acd974798c10475e53310630a36796ab4bba263ec76008a821ee9b58861e77f1aa341b9a1bcc9e21c9eb0625297604cdf14e77040e46603597f87d00053c7aafd8130813102105463ea538990f880525cd80e12c426eda2f87a4aefe29505de1a924fad50d9b97a37418331a542333585105ca18976435917721e80f3c631f268b8517f00dc9c8da872328a27e296aa7422b290327feda241d7ea0cd81750d044969e4429197ee55e8111193aee3df3bf37961a4323ac640b0fb11b19cb4e28756defd9f2e1ef3adc3b0aeb5102399dde99e5e67ff4d18c6475440612f42274d17ebc0280f73c89e77fd9dd652edb5ea4e7ad7326dd4c69cea26b47d8314ad412f8b96f2a33a6323c1dc4050ffde22b31656c22b8a5597c3c50cbf4efa9c8d2e4200ccab35ad8badc09d8e05a7abc3dfdce491ecd682dde18f2da41bff3c2e293ddc82df8a1ca558a08b7937bd7228ed25522f41bcdfba8c01a7aa93af6e58b3912dace81ffc5f079e8a4e9d45778afa57909a8e9138abbf4ae6bdbc571d8cc0fb68755b644934fc98fdb263098afab3ffed8e80ea4e935852d9577935c0a5b03425e5e1c3327213d0068dea19165602000000076fe3ad291b73f08e5bf3cb50f60510b85f09bec5dd2118230541448370fa2d1b362ce6c2eee65909ef08bbad2e38ef2fa7d6c0bbb2fbf90e1a63b26c8e41f17b35b1e55885ac66f263d0f42a27a7823d664e3ae65909dd411f05371f21e5bbf7424d41b966e2e8891ae13c3fb700987789f79cca95807ab3068549f250caee6ab7f924afec4b6c821f82f3683d42fde5ccbfafba73c720f8481a7e4d2315e2219f4925893268649dddf696586916bb8c02a3697c38016788d4c799cbbc52043d0ebd08d74efb4619a46db86c744928a580f53ae2d5bbbc69342f722ab65b305975ab500ce7335ceb7d0f726c83a2c47eccf416fdb79f8439d2c608019ea2ef94d1fe8a7367013ae57330165228509d62fab87f04b73a76f80049f23d11a3068721414f8e45b18f4c1d56c11da71c949b35e6c5305452057f947520abbaf701c9b7cbfe623adc65a050458cb5948d1c1699b452b3d9fbba6b3bcdb537bbbf95d8267760cd943de819349966dc515babfca73d5ff3551bc56fe0f9dedb6dd5f4463a3aa652dab81a589ca4e4b0f19ee3b4b20c3986df2f72ba990b421c77b00a9b5cca5d850d607d0a46c2f1b1bbf8dc7f0cc6fea3104615a6cd698d89fca37adf4edfe4ba7c41231a9f2a89c55612e9c7031b7d56d2eb88745ba43a63a122d4d6661e83408a807f9b4519c05f01383811e9a2506c0c23618528599152f7a0481d1e576e4eba29c7725f24f649be7e5d7b9678a91e22d559ee77a1ddfe7225afa40085061c492fc4714f90e481cf494ec6d108fe0be6633d4f4785cb1c82f15190333398283ade4cb97f8104a195098a5a1c90227797fa8216d4762b6e78c60030e69f413cccf052df64a3d1bda69f6dbff49a68ef298809390f39a91e3b5b1971dac8554ed9ae24b4789ba60c145c059b1cfbf6594ed3c734bb4e1172f2e31a18659764bf324621d68b8e356ac3faee71ea97b0b78eeaa29c0f7ee1129777ef1ecd4d7f6586f8d0308709a94489951a04d7eba9793af6c929a0e91cda90457ca1c128cb6aa23f6da8f64f0d78a59f07a19515d9f607aa79c7b6c466e474e45ad85b0f2b82d470c03f7bbfb2fa68b32d4ac188d4a64f22b29c3af9f0b39bc2bb6b399e50f71968effe5b2f0d51489aca30993a67dbd80698f9a0c2ba9addffa3c3712215e63f424ebb5ebaf24fbf476f1d85493050c8be181f7f8783a34484005b58a703899ad2dff546eac853be1529fbe865a3f97643e8522956e0e361ac278e014328aea0b8d4268fd157513bd0f64f589ff8aaa0df2eb929984661031626bc661a5d3035b373177a4703a5000ef9b3ccb84b3dbaecb25ca341c5f12959d214e84b6545f47704d635765b336e4374975c2c40d5814b68b02965e517197edb553e7d3d8432544f66ce84990e7873fa2fadfaaeaa9915f907b3396b8529b03b646cf29be65784b5c08aa77521dd5064669f5ab33cc8ea168ea80949af9ee3937b2aa54250bd733c51c7c4be47c5848abf86b6f522e2a2dd4aa39693af731d70314e1d7af25c57a2dd126121bcd316118c66c18e2109a0c87714f00deaef07648e75f498eb7a8f30784376d14121a1ff34d402c5255fd2c0569624e93a796eb92980ee82ed283bb538e20dd8b02db072f897004f0e11de081cab5bedd9438c612982f1c73388ed98ae3b2d3adc6b8e70434c8992f52ab7c9488da5b67c6c003fdf530ef4172e0ccc16ff75fe6c919619c7ae513a8fcdfdb01410df94978f88b44e60b17a1984a600e04bd072fa731e19f75034d78b57f9890ab4dff68bf2928b5fc711bae0f1baeb8596e8a42f7f172125fb1da929d1f921c53f6cba0d98cd6e31b41ebf3935981b9e98524dd344b9e76b66d31f7d47869cdd3ae49e4e8c42264be751219861504ad49ab00e384e7bbf06472714829dd61e58a1784696a02eee6d9c92446392cadf4436c7eb769d1c5226164a9be70d2c2c6b71342a6d03dc0d39d224f9df8e4ed11c86a47531d5449e5364e8ca5af4c03455fa9da8b5b0d174e41bace68e51619967d79eaaac20b2a9e773b3418ff1a10c1835bed07e6109eac8ea4f130bc70aad103356f9749195fc2745f7076b5b165ff56de0596018b8251a0bd700db48a2243fe56831cf6785d70ded595b1bf9b25f2979923176109adb8012ae650c3fcb110352b884f79aeb465817124f75cda3168ec65cdace89522c0a7061629ea0d5d0573b9aa029500d64cb5df4f440859e4944047e6967511f0f25e9a45751d296ed6b61d4f217c28672d34696fcbaad5a57fd0e063537e889df2bf9e20e6c075296a800179a23e605948dc74fcf", 0xc9c}, {&(0x7f0000000640)="c91d588b87bd12b736780a766e3ebca34836bf87f46f8127511d29f92e1a4e8bd5fb5367cef57a6d8db59a972c54efc7ece9c07cf2d3c54d7af0deecef81ce277562dde92e480b2cf42e52cc039c43fea94e730feb6f5cad427446e7357d255248ab48a0b733cc2c7541488d63b8f6d2c4f0e03ac8faecc74486b2cfb59a28d701271dc07ef9d82e0ce78bca83048caf4cd8d753e859a0114047fedf4f4df5863a2f849b5fc6ef0b49bf7a6cb6faab2a777ddef657a489fe85f61ae70ac345b13dda6ebc6b53176140df49ecd9b09728806bb5ef9dd4ae222e47a3b4731f49b87c93d0cd174e5d670dbd4c915674f20327e549", 0xfffffffffffffee3}, {&(0x7f0000000440)="1da19d23fdff85b98167afffffffff20df65aece0cffbb361fd19ec08ddad9340531b1c05e106ea2b36a41070b0be2be119aa8c7d8444f4341cccd89faa6253e1ee49e9132f015fd9988ae0b16b48669fd2863efe80b92787339069a0f79bc832754fc4c564bc7c61f70be9565f15584fd519f000000005d433935485cdc2ffa2be958749701504aefae9ac942fd1dfc86b59a3d1caf7923edfc844f870f12b251ce19cedc69367b00003c404d4ac7409ae7f612cd45bc47765d0c3b530a47f46c3a9887c3e6ea7734e44835fcd6d23a0d7e00b73ac716a577005fe637cf7c7a", 0xe0}, {&(0x7f0000000f80)="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", 0x131}, {&(0x7f00000007c0)="52a8d1d111095a87c1484a0130b027c6d508c0a2525d7f60a7fe125fe0686c6b17ff484cffe3be7fdaee684c7a77ca55c3108b09dd1ff94fe2a038e7aa6090dc4ec5d3ced292672f2e9c13e8be36cbfe846e7741d2292d3d565d4052599d7575bec9a48bd92d949ae4d643a85a564fd4ed383e149790c538af6a98b06fcf7cd8bf07c4fcabc4e932e4bd", 0x8a}, {&(0x7f0000000880)="239f6d1aa5b8f06e84128c19afd4e09aefab9fa075fab9eeab892d82965174782752ff2ec7dd994f21c27c78ab2562a0f55bd63bf9ebfa37dd3b50467d5bc2104c1deec8c0dd8bae8160f8e310f68611981b83e48346f48da89f76977f7f8d79d5640ebf9db5a9c73922eac8e3c12b7a342e7aa02be87fa78ad41d40a5", 0x7d}, {&(0x7f0000000900)="299ff5aa119f9a667b0b1e858ad1a1bfcfd6c87bb4cb5abbe81601a3830bc642a3646bcbab832af042f8415340866790c7c241200f951c7ebb4294af9526ed0c27a4859e0dee5d86dc81ee6e", 0x4c}, {&(0x7f0000002380)="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", 0xeb2}, {0x0}], 0xa}, 0x8bb3a321ef809a) r12 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r9, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000240)=ANY=[], 0x7c}, 0x1, 0x0, 0x0, 0x4000}, 0x800) sendmsg$NFT_BATCH(r12, &(0x7f0000009b40)={0x0, 0xfffffffffffffe8e, &(0x7f0000009b00)={&(0x7f0000000100)=ANY=[@ANYBLOB="140000001000010000000000000000000500000a4c000000090a010400000000000000000a0000040900010073797a310000000008000540000000020900020073797a310000000008000a40fffffffc080003400000001408000c4000000e45400000000c0a010100000000000000000a0000060900020073797a31000000000900010073797a310000000014000380100000800c00018006000100d103000014000000110001"], 0xb4}, 0x1, 0x0, 0x0, 0x4000850}, 0x40) sendmsg$NFT_BATCH(r12, &(0x7f0000009b40)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000002c0)=ANY=[@ANYBLOB="140000001000010000000000000000000300000a580000000c0a01010000af00000000000a00000a0900020073797a31000000000900010073797a31000000002c000380280000800c00018006000100d10300000c000440000000002df31ab30c000540000000f7"], 0x80}, 0x1, 0x0, 0x0, 0x4000850}, 0x40) syz_emit_ethernet(0x3e, &(0x7f0000000ac0)=ANY=[@ANYBLOB="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"], 0x0) 3m30.513756886s ago: executing program 3 (id=6329): socket$nl_generic(0x10, 0x3, 0x10) (async) r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = socket$nl_netfilter(0x10, 0x3, 0xc) ioctl$sock_SIOCETHTOOL(r1, 0x8946, &(0x7f0000000300)={'veth0\x00', &(0x7f0000000440)=@ethtool_eeprom={0x48, 0x6bf, 0x8}}) r2 = syz_genetlink_get_family_id$devlink(&(0x7f0000000140), 0xffffffffffffffff) socket$inet6_sctp(0xa, 0x5, 0x84) (async) r3 = socket$inet6_sctp(0xa, 0x5, 0x84) setsockopt$netlink_NETLINK_TX_RING(0xffffffffffffffff, 0x10e, 0xc, &(0x7f0000000040)={0x6}, 0x10) (async) setsockopt$netlink_NETLINK_TX_RING(0xffffffffffffffff, 0x10e, 0xc, &(0x7f0000000040)={0x6}, 0x10) getsockopt$bt_hci(r3, 0x84, 0x84, &(0x7f0000000040)=""/4146, &(0x7f0000000000)=0x1032) r4 = epoll_create1(0x0) ioctl$FS_IOC_SETFLAGS(r4, 0x40088a01, &(0x7f0000000000)=0x100) (async) ioctl$FS_IOC_SETFLAGS(r4, 0x40088a01, &(0x7f0000000000)=0x100) r5 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000040)='cpuacct.usage_sys\x00', 0x275a, 0x0) mmap(&(0x7f0000000000/0x400000)=nil, 0x400000, 0x1, 0x10012, r5, 0x0) r6 = syz_init_net_socket$x25(0x9, 0x5, 0x0) setsockopt$X25_QBITINCL(r6, 0x106, 0x1, &(0x7f0000000400), 0x4) (async) setsockopt$X25_QBITINCL(r6, 0x106, 0x1, &(0x7f0000000400), 0x4) r7 = socket$igmp(0x2, 0x3, 0x2) setsockopt$MRT_ADD_MFC(r7, 0x0, 0xcc, 0x0, 0x3c) sendmsg$DEVLINK_CMD_SB_TC_POOL_BIND_SET(r0, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000000)=ANY=[@ANYRESDEC=0x0, @ANYRES16=r2, @ANYBLOB="01002abd7000fddbdf25180000000e0001006e657464657673696d0000000f0002006e657464657673696d300000080003000100000008000b004e44000006001600020000000500120001000000060011000700000008000b00ff7f0000"], 0x64}, 0x1, 0x0, 0x0, 0x804}, 0x4000000) 3m30.079775321s ago: executing program 3 (id=6336): getsockopt$IP6T_SO_GET_REVISION_TARGET(0xffffffffffffffff, 0x29, 0x45, &(0x7f0000000000)={'IDLETIMER\x00'}, &(0x7f0000000040)=0x1e) r0 = socket$inet6_icmp(0xa, 0x2, 0x3a) ioctl$sock_ipv6_tunnel_SIOCADDTUNNEL(0xffffffffffffffff, 0x89f1, &(0x7f0000000100)={'syztnl1\x00', &(0x7f0000000080)={'ip6gre0\x00', 0x0, 0x2f, 0x0, 0x8, 0x401, 0x52, @remote, @loopback, 0x1, 0x10, 0x0, 0x6}}) ioctl$sock_inet6_SIOCSIFADDR(r0, 0x8916, &(0x7f0000000140)={@empty, 0x1b, r1}) r2 = socket$inet_udp(0x2, 0x2, 0x0) ioctl$sock_ipv4_tunnel_SIOCGETTUNNEL(r2, 0x89f0, &(0x7f0000000200)={'sit0\x00', &(0x7f0000000180)={'gretap0\x00', r1, 0x7800, 0x40, 0x3, 0x7, {{0x11, 0x4, 0x3, 0x2, 0x44, 0x66, 0x0, 0x80, 0x29, 0x0, @private=0xa010100, @remote, {[@noop, @timestamp_addr={0x44, 0x14, 0xd9, 0x1, 0x2, [{@rand_addr=0x64010102, 0x9}, {@empty, 0x2}]}, @end, @rr={0x7, 0x17, 0x12, [@multicast1, @dev={0xac, 0x14, 0x14, 0x3f}, @local, @broadcast, @broadcast]}]}}}}}) r4 = bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f0000000240)={0x1b, 0x0, 0x0, 0x3a, 0x0, 0xffffffffffffffff, 0x124, '\x00', 0x0, 0xffffffffffffffff, 0x4, 0x2, 0x3}, 0x50) ioctl$BTRFS_IOC_SET_RECEIVED_SUBVOL(r0, 0xc0c89425, &(0x7f00000002c0)={"c0387e5712471e72c62e66614425aa0a", 0x0, 0x0, {0x7, 0xc4c}, {0x5, 0x4}, 0xff, [0x100, 0x1482, 0x4, 0xe0, 0xfffffffffffffff8, 0x5, 0x10, 0x5, 0x7659, 0x2, 0x4, 0x3, 0x8, 0xa73, 0x9, 0x4]}) ioctl$BTRFS_IOC_RM_DEV_V2(r2, 0x5000943a, &(0x7f00000003c0)={{r4}, r5, 0x10, @unused=[0x5da5, 0x7, 0x6, 0xffffffff], @subvolid=0x9}) bind$rds(r4, &(0x7f00000013c0)={0x2, 0x4e23, @remote}, 0x10) ioctl$XFS_IOC_ATTRMULTI_BY_HANDLE(r0, 0x4048587b, &(0x7f0000001b40)={{r2, &(0x7f0000001400)=',$/^\'\x00', 0xc000, &(0x7f0000001440)={@align=0xffffffffffffffff, {0xfffb, 0x5, 0xd92, 0x2}}, 0x1, &(0x7f0000001480), &(0x7f00000014c0)=0x400}, 0x6, &(0x7f0000001a80)=[{0x3, 0x5, &(0x7f0000001500)='\x00', &(0x7f0000001540)="ff31161fb3aafcbd3c00997b0ae09b55716ed5fcdb0a8b69c68ebc5edf81f7994130ba6a7f4ddbaed91a29adc07cb389ecb6352ac950ef65cab81be98d1049585bb5444fcbfc842b73e33f2ac3b40ebd1cc39dd1c9ccb44c0e270c1e72ccf2ac14296dc400d8d8772223b5b3af7443e1602cdecd71a0d11609aa412706400ce548d00747280307e421a6da4043c0d97e699e61990f3e28d9d7459e0749cb6726196f63c301", 0xa5, 0x8}, {0x1, 0x401, &(0x7f0000001600)='ip6gre0\x00', &(0x7f0000001640)="4b3f22f1f3797019c728f3bf0ab6d425ce4ae441cf212dad6a411e6bc4c25a2e5ab942bebdb161b27b05dfb7557a6754afeb2db322eaa29659ecab1d3516b2af706b634dcc157dde09a0d1de9d3d717f0b3a9d6015dc733091444c20ccad35462607c298a3411a44597e9572377d251f54d64e9447e4d6c6670489467d9a52a804d2c3d1fcb3e49b8b0e769970cd5398b94a72527a7e906b94ba05668c", 0x9d}, {0x2, 0x5, &(0x7f0000001700)='.$-\x00', &(0x7f0000001740)="2ae1e0476b87fc159334c1d1554728667ae81919ad18d042b465063103a2d19bd5d45fcb4da19630d6e7e464135402c656a64890828e1fd69715573f117c5d8de3d3617a7d813c614edf26d4eb7291b3bb1a1bde7afce76a002ab2583da3c5cf1219710d538c933c8be9ab34e18b9257bf11061b54a3f74370361860fc853f55f74ca337777fcf7c63c2ddce8e67412b505914e2b75e757460abe10615fa84fca2125c042b4b5ff652b20ee9ea4a1fc07722aef00b5ae278a83051ec178790c09c8dd6", 0xc3, 0x1a}, {0x2, 0x0, &(0x7f0000001840)='\xd4^@\xdb*&\x00', &(0x7f0000001880)="41672698b3f086c043d5b8340cf80493d7f062af14ae0cb8b428592daa2ebcf644a225c253b0745b41fd5d914439087f77d1eb2b42764f8a5f5816eba1d0e3f7c184d55b9a9cf32230179f971f73fddc91b52cf50ae24aec25a6ca51e4ac3af19fa4f214fd5369b64c9e6f802dbbedf484a62991066abf", 0x77, 0x10}, {0x1, 0x400, &(0x7f0000001900)='\x00', &(0x7f0000001940)="8715f4a319f9555bbdfdb21555d41a073f7e759733b24070cec52e0d12aceb04f80973f415693a4fc43601341c21fdf32bba6c4c6ee163cd5ccf1d3ca702e993abd538f2731892b54d727187118966d6830132af519ae0dbe70362b0b0230242c4209cf2141f75eff3629ffa1bc09d782b044ef8c12f8862b244ee9c6dbebbb2", 0x80, 0x18}, {0x2, 0x5, &(0x7f00000019c0)='ip6gre0\x00', &(0x7f0000001a00)="4658f4e2f91d52afa2ef442484e48ce9a204dee981805bd54a83de2de545056e5a0569498d1049845f83e2ea590a2855428be8d1ac322b17c2eeb43827d6cfa8b0deb219589a466805c4c65a8f97386e6210214aa17506691a88a50a556233bed8b510809b395fd2bd140280aba2fa13fde4a3d8", 0x74, 0x10}]}) bpf$PROG_BIND_MAP(0x23, &(0x7f0000001bc0)={r6, r4}, 0xc) getsockopt$PNPIPE_INITSTATE(r6, 0x113, 0x4, &(0x7f0000001c00), &(0x7f0000001c40)=0x4) bpf$MAP_LOOKUP_ELEM(0x1, &(0x7f0000001d40)={r6, &(0x7f0000001c80)="738d1dc756de7ebd112b5d74fdb87153128d73c063e618ea2a303f174f09351cefd449ee58f53dc42d8208657c973a5c77c35c922a173c491d3e057124a03b5259f1ad2aaa88c34ac5c51b702093bd94bc96ccbeabd239", &(0x7f0000001d00)=""/33}, 0x20) r7 = bpf$MAP_CREATE_TAIL_CALL(0x0, &(0x7f0000001d80)={0x3, 0x4, 0x4, 0xa, 0x0, r6, 0xfffffffa, '\x00', r3, r6, 0x3, 0x1, 0x1}, 0x50) ioctl$ifreq_SIOCGIFINDEX_vcan(r0, 0x8933, &(0x7f0000001e00)={'vcan0\x00', 0x0}) bpf$MAP_CREATE(0x0, &(0x7f0000001e40)=@base={0x21, 0x4, 0x0, 0x3, 0x3008, r7, 0x9, '\x00', r8, 0xffffffffffffffff, 0x4, 0x3, 0x1}, 0x50) r9 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$TIPC_NL_KEY_SET(r9, &(0x7f0000002080)={&(0x7f0000001ec0)={0x10, 0x0, 0x0, 0x1}, 0xc, &(0x7f0000002040)={&(0x7f0000001f00)={0x130, 0x0, 0x400, 0x70bd25, 0x25dfdbff, {}, [@TIPC_NLA_NET={0x3c, 0x7, 0x0, 0x1, [@TIPC_NLA_NET_ID={0x8, 0x1, 0x4}, @TIPC_NLA_NET_ID={0x8, 0x1, 0xc1d}, @TIPC_NLA_NET_ADDR={0x8, 0x2, 0x80000000}, @TIPC_NLA_NET_ID={0x8}, @TIPC_NLA_NET_NODEID_W1={0xc, 0x4, 0x4}, @TIPC_NLA_NET_NODEID={0xc, 0x3, 0xfffffffffffffffd}]}, @TIPC_NLA_SOCK={0x24, 0x2, 0x0, 0x1, [@TIPC_NLA_SOCK_REF={0x8, 0x2, 0x8}, @TIPC_NLA_SOCK_REF={0x8, 0x2, 0x4}, @TIPC_NLA_SOCK_ADDR={0x8, 0x1, 0xe}, @TIPC_NLA_SOCK_ADDR={0x8, 0x1, 0x3}]}, @TIPC_NLA_LINK={0x4}, @TIPC_NLA_LINK={0xb8, 0x4, 0x0, 0x1, [@TIPC_NLA_LINK_PROP={0x44, 0x7, 0x0, 0x1, [@TIPC_NLA_PROP_MTU={0x8, 0x4, 0xa2}, @TIPC_NLA_PROP_WIN={0x8, 0x3, 0x6}, @TIPC_NLA_PROP_TOL={0x8, 0x2, 0x9}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x3}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x8}, @TIPC_NLA_PROP_TOL={0x8, 0x2, 0x7}, @TIPC_NLA_PROP_TOL={0x8, 0x2, 0x5}, @TIPC_NLA_PROP_MTU={0x8, 0x4, 0x2}]}, @TIPC_NLA_LINK_NAME={0x13, 0x1, 'broadcast-link\x00'}, @TIPC_NLA_LINK_NAME={0x9, 0x1, 'syz1\x00'}, @TIPC_NLA_LINK_NAME={0x13, 0x1, 'broadcast-link\x00'}, @TIPC_NLA_LINK_PROP={0x3c, 0x7, 0x0, 0x1, [@TIPC_NLA_PROP_WIN={0x8, 0x3, 0x1}, @TIPC_NLA_PROP_MTU={0x8, 0x4, 0x1}, @TIPC_NLA_PROP_WIN={0x8, 0x3, 0x5}, @TIPC_NLA_PROP_TOL={0x8, 0x2, 0x80}, @TIPC_NLA_PROP_WIN={0x8, 0x3, 0x3}, @TIPC_NLA_PROP_MTU={0x8, 0x4, 0x3}, @TIPC_NLA_PROP_TOL={0x8, 0x2, 0xc}]}]}]}, 0x130}, 0x1, 0x0, 0x0, 0x404c000}, 0x90) bind$alg(r6, &(0x7f00000020c0)={0x26, 'aead\x00', 0x0, 0x0, 'aegis128\x00'}, 0x58) r10 = syz_genetlink_get_family_id$nl80211(&(0x7f0000002180), r6) sendmsg$NL80211_CMD_GET_MPATH(r9, &(0x7f0000002280)={&(0x7f0000002140), 0xc, &(0x7f0000002240)={&(0x7f00000021c0)={0x44, r10, 0x300, 0x70bd27, 0x25dfdbfb, {{}, {@void, @void}}, [@NL80211_ATTR_MAC={0xa, 0x6, @broadcast}, @NL80211_ATTR_MAC={0xa, 0x6, @broadcast}, @NL80211_ATTR_MPATH_NEXT_HOP={0xa, 0x1a, @broadcast}, @NL80211_ATTR_MPATH_NEXT_HOP={0xa, 0x1a, @device_b}]}, 0x44}}, 0x20000004) r11 = syz_genetlink_get_family_id$fou(&(0x7f0000002300), r9) sendmsg$FOU_CMD_ADD(r9, &(0x7f00000023c0)={&(0x7f00000022c0)={0x10, 0x0, 0x0, 0x40000}, 0xc, &(0x7f0000002380)={&(0x7f0000002340)={0x40, r11, 0x2, 0x70bd28, 0x25dfdbfc, {}, [@FOU_ATTR_PEER_V6={0x14, 0x9, @remote}, @FOU_ATTR_LOCAL_V4={0x8, 0x6, @remote}, @FOU_ATTR_PEER_V4={0x8, 0x8, @dev={0xac, 0x14, 0x14, 0xf}}, @FOU_ATTR_LOCAL_V4={0x8, 0x6, @multicast2}]}, 0x40}, 0x1, 0x0, 0x0, 0x10}, 0x40) r12 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$TIPC_NL_KEY_SET(r12, &(0x7f00000024c0)={&(0x7f0000002400)={0x10, 0x0, 0x0, 0x1000}, 0xc, &(0x7f0000002480)={&(0x7f0000002440)={0x14, 0x0, 0x300, 0x70bd2a, 0x25dfdbfe}, 0x14}, 0x1, 0x0, 0x0, 0x4008000}, 0x8800) ioctl$sock_SIOCSIFVLAN_GET_VLAN_REALDEV_NAME_CMD(r9, 0x8983, &(0x7f0000002500)={0x8, 'pim6reg0\x00', {'nr0\x00'}, 0x6}) ioctl$XFS_IOC_FSGEOMETRY_V1(r0, 0x80705864, &(0x7f0000002540)) pwritev(r4, &(0x7f0000002840)=[{&(0x7f00000025c0)="922a3835d1273716353de593aa17c3a49041cc96ee91c27fc1c4a5f12e815029ffa33081747f81c8e1fbb3127555b8420499e9daa96f5e26f3d0b3d5873b623064a442b848a3fc9b4afdd321717e59719d4b0d6d48a7d37491025ae31dc9089fd13749def83a267cbad6b1aa3e6c3420db1431cc3463cbf78c45226a98e76146ca8893ed6a6e5942cd50f798b2ef09562934e0e219051b9ae259dabb8961ee56018a0a22b6613cf0c1ba40a3e5", 0xad}, {&(0x7f0000002680)="48c44fa63956bb0aefc1994bbf0cd77976c6208eb8f4af31eb6d9492af22ad9b04e34cd4f341a3b7375dd1d668df70a08590e90fc737ef0f04d48808f6b3883d5267aed20fc68de2c014d7a59fc07076ef4ba5871f098cd04326b022baf1b41823fa6f5c326e9278e9d720931dc2d652ae5ba955a7dad0de78bc2a16e297e8f2222ab1e7601aacce81b9aec76042983116a76dbc4057", 0x96}, {&(0x7f0000002740)="620b7aa1d1f3bb0400bf1899b76697e8a3986172fb177da47c419fd8fcf2390e0e5eafedc661faa99e1dd95c2684728ca31ffe3d06c0a662fb98c751daad7c54b5176308b146b7714c34adffdc81385ac3e061657addeffc019183fcadf2b5f01a4c11d292f7ccbda0d0f7b7af", 0x6d}, {&(0x7f00000027c0)="0a496a924f0a45923fcfc4e869365c84cc13380884cc92c81e862e379f6ac646cb36f106460583e2e4496ec11b028736cbfff84b6ab941955e7859b679f477b65b1505f342f7de1d9f33f3a7c7e6e84ea70b4e61278f1d7c2a73121192bcd016997c526e500ebdd0f8ab29", 0x6b}], 0x4, 0x6, 0x5) ioctl$sock_SIOCSIFVLAN_GET_VLAN_REALDEV_NAME_CMD(r12, 0x8983, &(0x7f0000002880)={0x8, 'hsr0\x00', {'vlan1\x00'}, 0x8b2e}) 3m29.793633993s ago: executing program 3 (id=6339): r0 = socket$kcm(0x29, 0x0, 0x0) r1 = openat$tun(0xffffffffffffff9c, &(0x7f0000000000), 0x40880, 0x0) write$tun(r1, &(0x7f0000000040)={@void, @val={0x4, 0x80, 0x0, 0xbc, 0x0, 0x800}, @x25={0x0, 0x7, 0x1b, "725fd00cbd0f4ae7b9343128ca33e7aa26983164d97e24a0bb5cd5dc7a5e62088442e1e6f2b3dd34ed3435e81e153bdcdd8a993f3d1f055200dd5976441377dd36ff8e38782185df3f5d078ba142795465b9059229df9d6a911caaa73591137491cc21ae50be8a46b58ee61131ade1795fd6bceee3ad73807d9eed15154f9aee2518f6cb674e082b4c40532446e0ba81c4af4135ad302a5f67c7781fe77499766ee8f2848054c73b2c5d62d516ae02511407bc62ef22532a4c68cba6dfac9875138900508fa98fc521b463bd44f992590685fd27211df8287343018fb0cd8cb3c4ac0ca9c805f3419115bb2cc822b7dde9cc4efb5c7876024d3c8cd82140825ae8d8a110969654399f6ab199334f7b01e827014cd52542afffc975c340b326e05ee6fc1ead6fee4c251579c1d32dac27ada146cb4ac8a45342a44ad1830ebb5739dcd66cbaab3432f6996521493829f83eda6b476b84aaa76c6faca79e5369fd62568edbc03c653a7c7fa8aa196a5e3de46129f575bce627f24b4b1082c608286fe1dc81fd08caaa5a139d0b47f742a0984b542c9340a828598d9f123574517b0f941a461ebd91468b1311c9477bb5fa50c6c8cdee4fb74438fc37d2245c499cf0f770497d0e8e3515c9c00f9ab9fbc4b962d156a64c6268f3221d3b5a29b72b438068b7be7910900f818cbe95f022f8a81373864fe611e0754277b6e2871118bac5f4c0a22b9f996df8feb8d6a09b0df307803fbcd643e7ea66a1540831f200dc66b75c8913955b93dc6be83c4df6065d094e0eb1124cff3205cabb9ed0c3f2e53f12016de57c6f2195ef2b73c89064ccfc6ab010de50e6b78762016f78829b580ee62857b66b64dc9d9876da85fd8f9594bb6759e5dd2197515c23097b73e280c6471ba853f1d35c28346925bda2e6b309211aa1035acb88b38ae11fbfd4789f2784cc4e181fe88561194155afc8b63515264425bc27236235ba465b5bf046c67174188b78956cd31f0d698005d5a873ade553f6f18e0bd403ded65f34a721dcaf2e39a4af78aea84746641b15ab7bdb85b515e8e9d8775887a074322f6790e09a98f4db17223d3ed7188e64e4d926207628e4e3f555eb02389fde646f16ae96f45810e84c9c659c4d23e54e9b8af885d98dd879813c099f956b1cb5c801bbb369b21713a554de15ed3292de56adacbf333b6f79e4e7c9acae6e106cf523783d6e0c00466518f05168209550ea796bc3595bbc4e9a666b2e5161d82a01665c7691b269d74731023610122f50b6a32083c79191e34ca73477a6fab878e015dcc38976dbc5d6365164edd4d31a49b812520b6ff051f8c08c573209b794bfac2a0dc4f0e7808bf6a3a20be0d3b1b999d5a7f066ead571a088b81e2f8f2f892e45894f2fe35bc19be81f710f26cda2d5406d30dbc1794cd7d13c485a7cd86d90ba0ff6cbd3d27a30638a6951e8f0e829b756a9688643925c5a3a75aa3deaae81c91d90c0a6f2712b6bb4c3483a986033d011684bff5c4ab58f87ba897e0f05c6ce78ee914c5289124b8b2b53000cd7c1a9cf27f002fd2585c9218da4141af06e6772b3f4dd9b187d55c2aa6645b107031780bdadc9d78a4d0256f2bd29c643eb55d17ab5e4cfe4f5f94799399d262107c466c49f637c2347630800ccb1ff14a8886096c8ff775fbcc8ca67d26e800845e1d82d3987ba16bdedd8c7ee444c9de410213933c6a6bd5d9c2af0a9e43d924e42bec82c4acc5eac8ef5fe2fea4f249c199bef0b0f3ec745fdb0ec88544dd26fe14faa6ad0e6b68c249ca9532fe6a21a7568f1fd2ada99345d335589b02ca123c6cf363af190fa9d939945b0ac43e12ef029cbc1f4fed9fe2f7a47df2a43bf56f47703e3b797817cff6f9399a76f4082107f3fa1efaed4f95ed7ce1fa593ba81a1532e037a362a016ad32ba0862f7368a244671ccb1a2062c3a13a1b08f9f3168ede9a98d7d2f004808d6189cab4c8b5990cd8cd951573efe9507ad80bc4513c702f5f532f660ced948fb2b5ef6627dcbb2d18dbb308d0025d513b93aa07adc068bc9b0642e35f29687638773f64a481824fe52e80ecd3060e55f95c3f2ec508a76a7cf582610c298bed8bc8d3e5a3efc5d471310392fe61e39f072e80a0f24420e02d81ee5ce5fbbda4aba4003562ae326bc5862fa71c08f111707c6e789eb46d80d7e14f239a268c8f3c0c1e6fd8cb318ac01dbb7c879e3f9f7a196166ddb6d6e090b697669f61b64ea9d70fb47105df44a6e63f7833699b717eb967494480ef415b011b3c86a636a6324bf712247590981f02d6f4678e8bd42414916e592bbf4baced605d767b9c394b7706b67abd331f9e408a49fe5cb843d59c212be898c60257d72ae0ca0377a4d9f8e7118a20b55fc1aca6b9785779c0e2b3c2c627d1abe31d1bd9d88d9a23eaf550ad9a7615321bb078a15b60b4eb13dd7d284667bb0140fdae060a3ad55d0013222383191bd9221f61c566560671242729eff4ed67558a74d4ae27da6269e36bb92d94497aa5b7a92cf84e18aec524761925097b438760a54d41456409e0b800b4c80b5dafd6a7b49e880d8037517c382049b1be1b8af9b60be9192915933ecf64688502f752c5ec9ff45eab9c12a3d7fe25e22353548aae77cdf605570544c4ada00964bae8e13e85dcb471e3da8b30e2779836eb45c6d21092d191fb27d084d058729d4a548a0da0ec395ca6f5e41976bbc50d6f34360256d80cc5fdcb4cdd7d0b61adf81706a44686ffd928db45c37e8ca2922c73e4623be2d0bae32aa46169e3362fc91513ffe935f93b513b5d06fe49a0b105f4cdb3884b925fe1414d9ca832f1fc01c7da0e92c37afa2326d7d81fe675c08a4b39764fc8d154eb9524da168f17d1a8956d6627dc7e2937b3a57615c0db54b13740bdeb0f58778025fe9cb57dc98afe936c8f253a144c725fd91540e38e13041a529d36ff95360b25dc450c06eda083effb2bba9ee87a0db49b6c4f055aca23d88047dbfbda5a6940be48d833879155be1911de1eeafef76976c133263fbed23ac0c38ea977dafd7316984f515064677506e38e8d196fd19ba1eae5373529732be541a4068b9b13f49ebc282a2ccbedb4db1d42cf0c76616e4a0544c750e29d397307bf820ca60fcf0d91bb91b01723c493e6392f4a5f46b74fb9f2d73d61ee15c1015f46ac75d88b86d50cb5c45de524920e3ed149ee182417e9bed31a89c2031eb238738e7d71c8ffcfc030709575ea0ce51c084129cdac78d79dddb7e87d8bb3883fff6a184c22a8f524b037f087cde8b95e46700d6293027cc4fce5848b3e901a953074eaa97372fb39c3fdaaed273ab4639d569ba8304c063501f355f50d63d0d9e1784ae4f11f549ae34fd56fda81ad40291389208db7d76de1aecb18b66466522483f3deaf6a2b8a3e83ee947aee5e4b9b29ae2b7aac37e1000f6bef602c11cda7b72f030f6a06526b3a2c7b3917843503b227aeb6cc9ce10b4d801f776253ea38d4647ca633f8a64d2b0acb7e78f9e474f3f0809bffef0853c79b5cea97a3790ac14587163b2011657488b6792262ed99a3526abca4fc90d2c233921c27e9e74b9747ba640194f5208012a1c9a76439384cb758b78b7e5c62c39d09594c48c7edc32453720de1bbd30c81fd918b9cbe393bbc53aa29a63fc4623de455817105f0a6514eb030aaaeb6f8e64c664c23de0f2b9810804c92e2ae8388f6279e897c34f14131cc0b62954cd29cea63738bac580ab0fd8a6835157538000db0976dbd98a194ae1e2a6c55376bac5e85458aa16770f553b8c5aa0f19528809e717255de0d235d308c0b83dcfa0925bea8ce7afb522c4e39e7bba0bad355d04fc80f280105d1c686cfea4d0699ca33e39894171d436cbcdf267661ee50cfe458b4106a25b4ef16397334e4058b82e1163ce2531937a92e129002157478ee8b39bbac7697934b6470879cc27bd9dafe86d396ab8f3c1f8b5046a465b45031e4c14d167e746de5c866648470f0c7ae7629c408678124c09dca22b00b9f935fa96bf92eae36aae1347da7f365c042247627763c0424edebf766599ef7dc93fbbe96a1885966d8d9d6010500cc35243f972020cba92bd5ebeeea9a4a8404c3450279decb38b177157d3a6808ce64d66bfcef56af5b42da50427b19bef693abcf7ebefa0dbba15511a68c6b4fe6e0dc340b0439b7bc2b47b7a66200ef5b9312495a0bfbb66c8280007b503f3159d5b83a53786a9c01c93997daa1f446c867e34b559a3a0dc65f4c8157b381ef1a5a1d3a07834ea8ca2cb0a7a6c0fce154e50c4a78f3e749bcde8c27da24b2f538c91740a21cb20f0ca1ba1e36c13a55bd7743dbd274ac024a28c573d9fe8fc10948750ce9cc40db5dbdb365ff88655519bd6a8d7d1f93fb9903957d42018c23c652e81eb74b821808486bc18d0ebd710081e38b46389604b0bda96992378f98e10fedce08491cf52bee324e654ec8eac6f86f04c53bf4bd4a855e2b130fc8a5f7b4ccd32e1b339aaecc6d3c501fd4dc050488a4b1550666fe65a7ff4b4585c4aa56121085e38127eebe6ad629bb45896acf296b9674ecc18afb3f5ac467183a4428ccd0ef8134a67bed3d8fd911e39098ad65c9055cff36658bd28489cd48b99a3f22b933a9f2d4143d6ea1ccd40e22e0af72add889059486d7401dd832cc80ce4eee31f921b252451efada61c1d063b00c2ee7906a1bda0012738094f6bb875c574187cf6b18b32f9d958252f064f1af5a085965adecaaf1029cd9af62bd596aa5304ba3a9f1f714c0bcc39fd21391a83f41634872e7f8af9b93d042149b8fecda6ce20219df4193eccd34b9d8ebe55d4131c28f555f8b6989c40aa4d9d339db9e96e52e89346c3e6f45fbe545bfc4458b14663f1749e1d149bd91a9f8133a9c47290ecc27910a9bec419f65a4d47da13e41c0b7377bea9ec78830d72ebc11be9f0eb09bc73085fd50d72e356ea19c3f176dcf5abe4c7d67f302aaba411aa1f56f1952a85c0c4a794fec14ffa37c3f5d460ea1683da7ae85694f053e2813f513bce38da20240b1cfce9ee67fe9222813d088483df4d81ee4c51f763a91033a396846726ffaf61d9349ba5e22893d73ff3f929721f978df127c2eed35d4ef8f4bcc941feca446b6c7b1aa439aac54124e76ffb94f8af3bec590e886f842d74c6abf7fe37ffa71f4aa69a9ca918c6a590730a64f56be2c296a596097234999f53dc25e2b9ec020ad392cefb3831a3efce7462c1404b284dd6fd3ec87fd617986272da9cbb1c12f422a3d1b4a90576913cc8fc26f47623c41b83545e3d6e54dc57d8f0c5a09c42c97c8c105fd7fa019831a2d93c3fc80747b1b5b7bfa2dfe14a950fbea8bea8e58eb49d52f52ba8f1d2fa68e13cab7aec2faa0214f276a856816856f669484f965965ce03f78b083b18ec43d1889f28ed3cbbd0f19635d88137650d0b177c9729b540c1244f8881e219be79f214bdf5f216ba975ce341b6b42d7b311f8d63114cd8d0c711debb14407c03ece6a6ca8f248cd8e17cf8286672d12513ca8f8daf1ed38cdc06b4a58c8b6875889a7105d8bd472071dea3eb15d13b6a048b865ba6f614bb6ffebb397984b494f461bb3c97b6b21afd5f69f26406399922791cfbdf6a9999e2ca77c6a010311c56880f23e99c9deddbe0d6d5f3be745ee3961c48916a3c02e857a0fbcb2da9b06bf518baf695f96118ccbbac752d9f521a102b25d20fca2ea5147614fedc25a34656229a334602a34f776d94acdc9b966df8cdff248b"}}, 0x100d) r2 = socket$nl_xfrm(0x10, 0x3, 0x6) r3 = socket$igmp(0x2, 0x3, 0x2) connect$inet(r3, &(0x7f0000001080)={0x2, 0x4e24, @loopback}, 0x10) socket$nl_xfrm(0x10, 0x3, 0x6) r4 = openat$nci(0xffffffffffffff9c, &(0x7f00000010c0), 0x2, 0x0) write$nci(r4, &(0x7f0000001100)=@NCI_OP_RF_NFCEE_ACTION_NTF, 0x3) ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f0000001140)={'veth0_to_team\x00', 0x0}) socket$nl_route(0x10, 0x3, 0x0) socket$packet(0x11, 0x2, 0x300) r6 = socket$alg(0x26, 0x5, 0x0) bind$alg(r6, &(0x7f0000001180)={0x26, 'skcipher\x00', 0x0, 0x0, 'ctr-aes-neon\x00'}, 0x58) r7 = socket$inet6_udplite(0xa, 0x2, 0x88) setsockopt$inet6_udp_encap(r7, 0x11, 0x64, &(0x7f0000001200)=0x1, 0x4) r8 = bpf$ITER_CREATE(0x21, &(0x7f0000001280), 0x8) syz_genetlink_get_family_id$nl80211(&(0x7f0000001240), r8) sendmsg$ETHTOOL_MSG_COALESCE_SET(0xffffffffffffffff, &(0x7f0000001380)={&(0x7f00000012c0)={0x10, 0x0, 0x0, 0x2000}, 0xc, &(0x7f0000001340)={&(0x7f0000001300)={0x1c, 0x0, 0x300, 0x70bd29, 0x25dfdbfe, {}, [@ETHTOOL_A_COALESCE_TX_USECS_HIGH={0x8, 0x15, 0x10000}]}, 0x1c}, 0x1, 0x0, 0x0, 0x8800}, 0x20000003) r9 = syz_genetlink_get_family_id$ethtool(&(0x7f0000001400), r8) ioctl$sock_ipv6_tunnel_SIOCGETTUNNEL(r7, 0x89f0, &(0x7f00000014c0)={'syztnl0\x00', &(0x7f0000001440)={'ip6tnl0\x00', r5, 0x0, 0xa4, 0x7f, 0x4, 0x8, @private1={0xfc, 0x1, '\x00', 0x1}, @ipv4={'\x00', '\xff\xff', @loopback}, 0x8, 0x0, 0x8, 0x6}}) ioctl$ifreq_SIOCGIFINDEX_team(r0, 0x8933, &(0x7f0000001500)={'team0\x00', 0x0}) sendmsg$ETHTOOL_MSG_COALESCE_GET(r1, &(0x7f0000001680)={&(0x7f00000013c0)={0x10, 0x0, 0x0, 0x400}, 0xc, &(0x7f0000001640)={&(0x7f0000001540)={0xec, r9, 0x14, 0x70bd27, 0x25dfdbfc, {}, [@HEADER={0x14, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r10}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r5}]}, @HEADER={0x70, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r5}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r5}, @ETHTOOL_A_HEADER_DEV_NAME={0x14}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'hsr0\x00'}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'bond0\x00'}, @ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x1}, @ETHTOOL_A_HEADER_FLAGS={0x8}, @ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x2}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r5}]}, @HEADER={0x14, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r5}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r11}]}, @HEADER={0x18, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'veth1_to_hsr\x00'}]}, @HEADER={0x28, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'bond0\x00'}, @ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x2}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r5}]}]}, 0xec}, 0x1, 0x0, 0x0, 0x801}, 0x1) ioctl$TUNSETLINK(0xffffffffffffffff, 0x400454cd, 0x204) bind$inet(r3, &(0x7f00000016c0)={0x2, 0x4e22, @rand_addr=0x64010102}, 0x10) sendmsg$ETHTOOL_MSG_LINKINFO_GET(r8, &(0x7f0000001840)={&(0x7f0000001700)={0x10, 0x0, 0x0, 0x20000}, 0xc, &(0x7f0000001800)={&(0x7f0000001740)={0xac, r9, 0x400, 0x70bd2a, 0x25dfdbfc, {}, [@HEADER={0x18, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'veth1_virt_wifi\x00'}]}, @HEADER={0x40, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'sit0\x00'}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'veth1_macvtap\x00'}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'vlan0\x00'}]}, @HEADER={0x40, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x2}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'veth1_vlan\x00'}, @ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x3}, @ETHTOOL_A_HEADER_FLAGS={0x8}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r11}, @ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x1}]}]}, 0xac}, 0x1, 0x0, 0x0, 0x8010}, 0x20040090) socket$nl_netfilter(0x10, 0x3, 0xc) ioctl$sock_inet6_SIOCSIFADDR(r8, 0x8916, &(0x7f0000001880)={@ipv4={'\x00', '\xff\xff', @dev={0xac, 0x14, 0x14, 0x23}}, 0x38, r10}) ioctl$sock_SIOCSIFBR(r8, 0x8941, &(0x7f00000018c0)=@generic={0x1, 0x8, 0xfffffffffffffff8}) ioctl$BTRFS_IOC_GET_DEV_STATS(r2, 0xc4089434, &(0x7f0000002900)={0x0, 0x6, 0x0, [0x36, 0x0, 0x9, 0x7, 0x1c02], [0x4, 0xf, 0x9852, 0x2, 0x9, 0x8001, 0x4, 0x8, 0x4, 0x6, 0x1, 0x0, 0x2, 0xfffffffffffffffe, 0xe35, 0x10, 0x9, 0x3, 0x0, 0x486, 0x1, 0x7ff, 0x1, 0x8, 0x7, 0x100000001, 0xca15, 0xae53, 0x5, 0x521, 0x7f, 0xc, 0x10, 0x2, 0x6, 0x0, 0x9, 0xcb54, 0x3ff, 0x5138, 0x7, 0x0, 0x0, 0x4, 0xf, 0xfffffffffffffff9, 0x800, 0x800, 0x3, 0x1, 0x195, 0x7, 0x2, 0x2, 0x2400000000, 0x12e9, 0x0, 0x100, 0x1ff, 0x2, 0x8, 0x0, 0x0, 0x8000000000000001, 0x4, 0x100000000, 0x4, 0xa00000000000, 0x2, 0x8001, 0x1, 0x100, 0x401, 0x5, 0x4, 0x9, 0x4, 0x8, 0xa, 0x1, 0xce, 0x1, 0x7, 0x9, 0x8, 0x0, 0x4, 0x9c8, 0x1, 0x6, 0x8, 0xfffffffffffff8a7, 0x8000, 0x0, 0x9, 0x3, 0x2, 0x3, 0x8000000000000001, 0x9, 0x494f, 0x3ff, 0x3, 0x2, 0xff, 0x8, 0x1b1b, 0xfffffffffffffc01, 0x4421, 0x5, 0x8000, 0xffffffff, 0xc72, 0x7f, 0x0, 0x9, 0x8, 0x4, 0x3ff, 0x915]}) 3m29.306196496s ago: executing program 3 (id=6342): r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = syz_init_net_socket$rose(0xb, 0x5, 0x0) (async) ioctl$ifreq_SIOCGIFINDEX_team(r0, 0x8933, &(0x7f0000000040)={'team0\x00', 0x0}) (async) r3 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r3, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000200)=@newlink={0x38, 0x10, 0x10, 0x0, 0x25dfdbfc, {0x0, 0x0, 0x0, 0x0, 0x88aab9a6}, [@IFLA_LINKINFO={0x18, 0x12, 0x0, 0x1, @gre={{0x8}, {0xc, 0x2, 0x0, 0x1, [@IFLA_GRE_IGNORE_DF={0x5, 0x13, 0x1}]}}}]}, 0x38}}, 0x0) (async, rerun: 32) socket$packet(0x11, 0x3, 0x300) (async, rerun: 32) r4 = openat$nci(0xffffffffffffff9c, &(0x7f0000000080), 0x2, 0x0) ioctl$IOCTL_GET_NCIDEV_IDX(r4, 0x0, &(0x7f00000000c0)=0x0) (async) r6 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r7 = syz_genetlink_get_family_id$nfc(&(0x7f0000000100), r6) sendmsg$NFC_CMD_DEV_UP(r6, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000180)={&(0x7f00000001c0)={0x1c, r7, 0x1, 0x123, 0x234, {}, [@NFC_ATTR_DEVICE_INDEX={0x8, 0x1, r5}]}, 0x1c}}, 0x0) read$nci(r4, &(0x7f0000000200)=""/100, 0x64) (async) write$nci(r4, 0x0, 0x0) (async, rerun: 32) read$nci(r4, 0x0, 0x0) (async, rerun: 32) write$nci(r4, &(0x7f0000000b00)=@NCI_OP_RF_DISCOVER_NTF={0x1, 0x0, 0x3, 0x3, 0x3, @v={0xa, 0x3, 0x6, 0x6, {0x9, 0x5, "fb779d883bafac2f"}, 0x2}}, 0xdb) (async, rerun: 64) r8 = syz_init_net_socket$802154_dgram(0x24, 0x2, 0x0) (rerun: 64) connect$802154_dgram(r8, &(0x7f0000000200)={0x2, @none={0x0, 0x2}}, 0x14) (async) sendmsg$kcm(0xffffffffffffffff, &(0x7f0000001640)={&(0x7f0000000080)=@ll={0x11, 0xf5, r2, 0x1, 0x2}, 0x80, &(0x7f0000001540)=[{&(0x7f0000000100)="715266430a49149f72181dd5e0971ccc7e4a9e6bad6406d006a5a4bc9f290ae2c7ef807218eb2a1b21a6db1b682db0dbeaf225d817974d3171627e3c8936a8a3d25f547f074504a9fe2f01eef74544576047c27036c32a0f88a6ecbb6cde107f0fad6dab619bf0cb", 0x68}, {&(0x7f0000000540)="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", 0x1000}], 0x2, &(0x7f0000001580)=ANY=[@ANYBLOB="b8000000000000000d010000ff000000bd6f8c524c7a24e817b1a8caa1e580c45751e62ab86180a109c7cc5ff35298fcc755ee7355c1432a385fc2f1b63a9621f7aaab7b8069d4c441900016e9afc7e80bbfa74ed409464bc059dc38b38c08c9f60f2053268181b42d23262565e15b1772fa745cc13b2ca8a5c50394a18a6c6a461a1f7aec34878023575905f15081ca2eaf7487327f5cbb1e04f9553bcc9c5e36bd846135931d2797b6ed136d86cba909b84b0000000000"], 0xb8}, 0x1) r9 = syz_init_net_socket$bt_sco(0x1f, 0x5, 0x2) getsockopt$bt_BT_VOICE(r9, 0x112, 0xb, 0x0, &(0x7f0000001d80)) (async) getsockopt$bt_sco_SCO_OPTIONS(r9, 0x11, 0x1, &(0x7f0000000180)=""/62, &(0x7f00000001c0)=0x3e) (async) setsockopt$rose(r1, 0x104, 0x7, &(0x7f0000000500), 0x4) (async, rerun: 32) r10 = socket$inet_sctp(0x2, 0x5, 0x84) (rerun: 32) getsockopt$inet_sctp_SCTP_SOCKOPT_CONNECTX3(r10, 0x84, 0x6f, &(0x7f00000002c0)={0x0, 0x1c, &(0x7f0000000240)=[@in6={0xa, 0x4e22, 0x8, @empty, 0xbb42}]}, &(0x7f0000000480)=0x10) getsockopt$inet_sctp_SCTP_GET_ASSOC_ID_LIST(r10, 0x84, 0x1d, &(0x7f0000000200), &(0x7f0000000280)=0x4) (async) socket$inet_udp(0x2, 0x2, 0x0) sendmsg$nl_route(r0, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000380)=ANY=[@ANYBLOB="4000000010003b1500"/20, @ANYRESOCT=r3, @ANYBLOB="00000000000000001800128008000100677470000c00028008000100", @ANYRES64=r1, @ANYBLOB='\b\x00\n\x00', @ANYRES32], 0x40}}, 0x0) 3m28.819352235s ago: executing program 3 (id=6346): sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000080)=@newqdisc={0x30, 0x24, 0x20, 0x2, 0x0, {0x0, 0x0, 0x0, 0x0, {0x7}, {0xffff, 0xffff}, {0x0, 0x5}}, [@qdisc_kind_options=@q_fq={{0x7}, {0x4}}]}, 0x30}}, 0x4000000) r0 = socket$netlink(0x10, 0x3, 0x0) r1 = socket(0x10, 0x3, 0x0) r2 = syz_init_net_socket$rose(0xb, 0x5, 0x0) ioctl$sock_rose_SIOCDELRT(r2, 0x890c, &(0x7f0000000dc0)={@dev={0xbb, 0xbb, 0xbb, 0x1, 0x0}, 0x0, @bcast, @netrom={'nr', 0x0}, 0x0, [@netrom={0xbb, 0xbb, 0xbb, 0xbb, 0xbb, 0x0, 0x0}, @remote={0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0x1}, @remote={0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0x3}, @netrom={0xbb, 0xbb, 0xbb, 0xbb, 0xbb, 0x0, 0x0}, @default, @bcast, @default, @netrom={0xbb, 0xbb, 0xbb, 0xbb, 0xbb, 0x0, 0x0}]}) sendmsg$nl_route(r1, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000780)={&(0x7f0000000200)=ANY=[@ANYBLOB="3c0000001800dd8d000000000000000002"], 0x3c}, 0x1, 0x0, 0x0, 0x20000010}, 0x200000a0) bpf$PROG_LOAD(0x5, &(0x7f00000054c0)={0xe, 0x16, &(0x7f0000000940)=ANY=[@ANYBLOB="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"], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @sk_skb, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0xffffffffffffffd2}, 0x48) sendmmsg(r1, &(0x7f0000000000), 0x400000000000235, 0x0) r3 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r3, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000008c0)={0x14, 0x26, 0x9, 0x80004, 0x80, {0x6}}, 0x14}, 0x1, 0x0, 0x0, 0x4c010}, 0x4000000) socket$inet6_icmp_raw(0xa, 0x3, 0x3a) r4 = socket$nl_xfrm(0x10, 0x3, 0x6) bpf$PROG_LOAD(0x5, &(0x7f000000e000)={0xe, 0x4, &(0x7f0000001300)=ANY=[@ANYBLOB="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"], &(0x7f0000003ff6)='GPL\x00', 0x4, 0xfd90, &(0x7f000000cf3d)=""/195, 0x0, 0x0, '\x00', 0x0, @sk_skb, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0x366, 0x10, &(0x7f0000000000), 0x1dd}, 0x48) r5 = socket$nl_generic(0x10, 0x3, 0x10) r6 = syz_genetlink_get_family_id$wireguard(&(0x7f00000003c0), 0xffffffffffffffff) sendmsg$WG_CMD_SET_DEVICE(r5, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000007c0)={0x188, r6, 0x1, 0x0, 0x0, {}, [@WGDEVICE_A_PEERS={0x13c, 0x8, 0x0, 0x1, [{0x80, 0x0, 0x0, 0x1, [@WGPEER_A_ALLOWEDIPS={0x50, 0x9, 0x0, 0x1, [{0x4c, 0x0, 0x0, 0x1, [@ipv4={{0x6}, {0x8, 0x2, @local}, {0x5, 0x3, 0x2}}, @ipv4={{0x6}, {0x8, 0x2, @multicast2}, {0x5, 0x3, 0x1}}, @ipv4={{0x6}, {0x8, 0x2, @multicast1}, {0x5, 0x3, 0x1}}]}]}, @WGPEER_A_PUBLIC_KEY={0x24, 0x1, @a_g}, @WGPEER_A_PERSISTENT_KEEPALIVE_INTERVAL={0x6, 0x5, 0x6}]}, {0x4c, 0x0, 0x0, 0x1, [@WGPEER_A_PUBLIC_KEY={0x24, 0x1, @neg}, @WGPEER_A_PRESHARED_KEY={0x24, 0x2, "491bc0be1dc1f88092e741a88b64f6dd9218ad21b44b472e44f1d0807ee6675c"}]}, {0x6c, 0x0, 0x0, 0x1, [@WGPEER_A_PUBLIC_KEY={0x24, 0x1, @c_g}, @WGPEER_A_ENDPOINT6={0x20, 0x4, {0xa, 0x9, 0x7, @empty, 0x3}}, @WGPEER_A_ALLOWEDIPS={0x24, 0x9, 0x0, 0x1, [{0x1c, 0x0, 0x0, 0x1, [@ipv4={{0x6}, {0x8, 0x2, @loopback}, {0x5, 0x3, 0x3}}]}, {0xfffffffffffffe44}]}]}]}, @WGDEVICE_A_PRIVATE_KEY={0x24, 0x3, @b}, @WGDEVICE_A_IFNAME={0x14, 0x2, 'wg0\x00'}]}, 0x188}, 0x1, 0x0, 0x0, 0x4004840}, 0x40000) sendmsg$nl_xfrm(r4, &(0x7f0000000940)={0x0, 0x0, &(0x7f0000000900)={&(0x7f0000000400)=ANY=[@ANYBLOB="54020000170001000000000000000000200100000000000000000000000000010000000000000000ac141400000000000000000000000000fc020000000000000003000000000000e000000200001000000000000000000000000000000000080a00000000000000", @ANYRES32=0x0, @ANYRES32=0x0, @ANYBLOB="1242ffff040000000000000000000037660b6aff00000000000000000000000000000000000000000200002000000000", @ANYRES32, @ANYRES32, @ANYBLOB="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"], 0x254}}, 0x0) r7 = socket$inet6_sctp(0xa, 0x5, 0x84) shutdown(r7, 0x0) getsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX3(r7, 0x84, 0x6f, &(0x7f0000000000)={0x0, 0x1c, &(0x7f0000000040)=[@in6={0xa, 0x4e23, 0x0, @loopback, 0x52}]}, &(0x7f0000000440)=0x10) setsockopt$inet_sctp6_SCTP_RTOINFO(r7, 0x84, 0x0, &(0x7f0000000100)={r8}, 0x10) r9 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='memory.events\x00', 0x275a, 0x0) write$cgroup_subtree(r9, &(0x7f0000000100)=ANY=[], 0x32600) mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x2000001, 0x12, r9, 0x0) r10 = socket$inet6_sctp(0xa, 0x5, 0x84) setsockopt(r10, 0x84, 0x80, &(0x7f0000000000)='\x00\x00\x00\x00\t\x00\x00\x00', 0x8) ioctl$sock_SIOCGIFINDEX(r4, 0x8933, &(0x7f0000000040)={'veth1_to_team\x00', 0x0}) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000100)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000080)=ANY=[@ANYBLOB="280000007000010010ab4be68e8da23507000000", @ANYRES32=r11, @ANYBLOB="1000018004000480080001"], 0x28}}, 0x0) sendmmsg(r0, &(0x7f00000002c0), 0x40000000000009f, 0x0) 3m13.72949394s ago: executing program 32 (id=6346): sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000080)=@newqdisc={0x30, 0x24, 0x20, 0x2, 0x0, {0x0, 0x0, 0x0, 0x0, {0x7}, {0xffff, 0xffff}, {0x0, 0x5}}, [@qdisc_kind_options=@q_fq={{0x7}, {0x4}}]}, 0x30}}, 0x4000000) r0 = socket$netlink(0x10, 0x3, 0x0) r1 = socket(0x10, 0x3, 0x0) r2 = syz_init_net_socket$rose(0xb, 0x5, 0x0) ioctl$sock_rose_SIOCDELRT(r2, 0x890c, &(0x7f0000000dc0)={@dev={0xbb, 0xbb, 0xbb, 0x1, 0x0}, 0x0, @bcast, @netrom={'nr', 0x0}, 0x0, [@netrom={0xbb, 0xbb, 0xbb, 0xbb, 0xbb, 0x0, 0x0}, @remote={0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0x1}, @remote={0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0x3}, @netrom={0xbb, 0xbb, 0xbb, 0xbb, 0xbb, 0x0, 0x0}, @default, @bcast, @default, @netrom={0xbb, 0xbb, 0xbb, 0xbb, 0xbb, 0x0, 0x0}]}) sendmsg$nl_route(r1, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000780)={&(0x7f0000000200)=ANY=[@ANYBLOB="3c0000001800dd8d000000000000000002"], 0x3c}, 0x1, 0x0, 0x0, 0x20000010}, 0x200000a0) bpf$PROG_LOAD(0x5, &(0x7f00000054c0)={0xe, 0x16, &(0x7f0000000940)=ANY=[@ANYBLOB="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"], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @sk_skb, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0xffffffffffffffd2}, 0x48) sendmmsg(r1, &(0x7f0000000000), 0x400000000000235, 0x0) r3 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r3, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000008c0)={0x14, 0x26, 0x9, 0x80004, 0x80, {0x6}}, 0x14}, 0x1, 0x0, 0x0, 0x4c010}, 0x4000000) socket$inet6_icmp_raw(0xa, 0x3, 0x3a) r4 = socket$nl_xfrm(0x10, 0x3, 0x6) bpf$PROG_LOAD(0x5, &(0x7f000000e000)={0xe, 0x4, &(0x7f0000001300)=ANY=[@ANYBLOB="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"], &(0x7f0000003ff6)='GPL\x00', 0x4, 0xfd90, &(0x7f000000cf3d)=""/195, 0x0, 0x0, '\x00', 0x0, @sk_skb, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0x366, 0x10, &(0x7f0000000000), 0x1dd}, 0x48) r5 = socket$nl_generic(0x10, 0x3, 0x10) r6 = syz_genetlink_get_family_id$wireguard(&(0x7f00000003c0), 0xffffffffffffffff) sendmsg$WG_CMD_SET_DEVICE(r5, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000007c0)={0x188, r6, 0x1, 0x0, 0x0, {}, [@WGDEVICE_A_PEERS={0x13c, 0x8, 0x0, 0x1, [{0x80, 0x0, 0x0, 0x1, [@WGPEER_A_ALLOWEDIPS={0x50, 0x9, 0x0, 0x1, [{0x4c, 0x0, 0x0, 0x1, [@ipv4={{0x6}, {0x8, 0x2, @local}, {0x5, 0x3, 0x2}}, @ipv4={{0x6}, {0x8, 0x2, @multicast2}, {0x5, 0x3, 0x1}}, @ipv4={{0x6}, {0x8, 0x2, @multicast1}, {0x5, 0x3, 0x1}}]}]}, @WGPEER_A_PUBLIC_KEY={0x24, 0x1, @a_g}, @WGPEER_A_PERSISTENT_KEEPALIVE_INTERVAL={0x6, 0x5, 0x6}]}, {0x4c, 0x0, 0x0, 0x1, [@WGPEER_A_PUBLIC_KEY={0x24, 0x1, @neg}, @WGPEER_A_PRESHARED_KEY={0x24, 0x2, "491bc0be1dc1f88092e741a88b64f6dd9218ad21b44b472e44f1d0807ee6675c"}]}, {0x6c, 0x0, 0x0, 0x1, [@WGPEER_A_PUBLIC_KEY={0x24, 0x1, @c_g}, @WGPEER_A_ENDPOINT6={0x20, 0x4, {0xa, 0x9, 0x7, @empty, 0x3}}, @WGPEER_A_ALLOWEDIPS={0x24, 0x9, 0x0, 0x1, [{0x1c, 0x0, 0x0, 0x1, [@ipv4={{0x6}, {0x8, 0x2, @loopback}, {0x5, 0x3, 0x3}}]}, {0xfffffffffffffe44}]}]}]}, @WGDEVICE_A_PRIVATE_KEY={0x24, 0x3, @b}, @WGDEVICE_A_IFNAME={0x14, 0x2, 'wg0\x00'}]}, 0x188}, 0x1, 0x0, 0x0, 0x4004840}, 0x40000) sendmsg$nl_xfrm(r4, &(0x7f0000000940)={0x0, 0x0, &(0x7f0000000900)={&(0x7f0000000400)=ANY=[@ANYBLOB="54020000170001000000000000000000200100000000000000000000000000010000000000000000ac141400000000000000000000000000fc020000000000000003000000000000e000000200001000000000000000000000000000000000080a00000000000000", @ANYRES32=0x0, @ANYRES32=0x0, @ANYBLOB="1242ffff040000000000000000000037660b6aff00000000000000000000000000000000000000000200002000000000", @ANYRES32, @ANYRES32, @ANYBLOB="00000000000000000000000000000000000000000000000000000000000000e0270300000000000000000000000000000000000000000000000000000000000000000000000000000010000000000000000000000000000000000000000000650d000000000000e1000000000000000007000000ff0f0000000000000000000008000b000000000008001600000000000c001500000000005d0000000401050000000000000000000000ffff00000000000000003300000002000000e00000020000000000000000000000000000000000000000000000000000000000000000ff010000000000000000000000000001000000003c0000000a000000fe8000000000000000000000000000aa0000000001"], 0x254}}, 0x0) r7 = socket$inet6_sctp(0xa, 0x5, 0x84) shutdown(r7, 0x0) getsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX3(r7, 0x84, 0x6f, &(0x7f0000000000)={0x0, 0x1c, &(0x7f0000000040)=[@in6={0xa, 0x4e23, 0x0, @loopback, 0x52}]}, &(0x7f0000000440)=0x10) setsockopt$inet_sctp6_SCTP_RTOINFO(r7, 0x84, 0x0, &(0x7f0000000100)={r8}, 0x10) r9 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='memory.events\x00', 0x275a, 0x0) write$cgroup_subtree(r9, &(0x7f0000000100)=ANY=[], 0x32600) mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x2000001, 0x12, r9, 0x0) r10 = socket$inet6_sctp(0xa, 0x5, 0x84) setsockopt(r10, 0x84, 0x80, &(0x7f0000000000)='\x00\x00\x00\x00\t\x00\x00\x00', 0x8) ioctl$sock_SIOCGIFINDEX(r4, 0x8933, &(0x7f0000000040)={'veth1_to_team\x00', 0x0}) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000100)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000080)=ANY=[@ANYBLOB="280000007000010010ab4be68e8da23507000000", @ANYRES32=r11, @ANYBLOB="1000018004000480080001"], 0x28}}, 0x0) sendmmsg(r0, &(0x7f00000002c0), 0x40000000000009f, 0x0) 2m34.118121536s ago: executing program 0 (id=6964): r0 = socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$ethtool(&(0x7f00000002c0), 0xffffffffffffffff) (async) r1 = syz_genetlink_get_family_id$ethtool(&(0x7f00000002c0), 0xffffffffffffffff) sendmsg$ETHTOOL_MSG_LINKMODES_SET(r0, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000380)={&(0x7f0000000000)={0x14, r1, 0x1, 0x0, 0x0, {0x28}}, 0x14}}, 0x0) (async) sendmsg$ETHTOOL_MSG_LINKMODES_SET(r0, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000380)={&(0x7f0000000000)={0x14, r1, 0x1, 0x0, 0x0, {0x28}}, 0x14}}, 0x0) syz_init_net_socket$llc(0x1a, 0x801, 0x0) (async) r2 = syz_init_net_socket$llc(0x1a, 0x801, 0x0) bind$llc(r2, &(0x7f0000000000)={0x1a, 0x0, 0x0, 0x0, 0x0, 0x42}, 0x10) connect$llc(r2, &(0x7f0000000240)={0x1a, 0x302, 0x0, 0x6, 0x0, 0x0, @broadcast}, 0x10) listen(r2, 0x9) r3 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCSIFVLAN_SET_VLAN_NAME_TYPE_CMD(r3, 0x8983, &(0x7f0000000040)={0x6, 'ip6erspan0\x00', {}, 0x105}) write$cgroup_subtree(0xffffffffffffffff, &(0x7f0000000080)=ANY=[@ANYBLOB="2b70696473617ad67e707b42f074202b6e65745f7072696f20"], 0x19) (async) write$cgroup_subtree(0xffffffffffffffff, &(0x7f0000000080)=ANY=[@ANYBLOB="2b70696473617ad67e707b42f074202b6e65745f7072696f20"], 0x19) ioctl$sock_ipv6_tunnel_SIOCGET6RD(0xffffffffffffffff, 0x89f8, &(0x7f0000000200)={'gre0\x00', &(0x7f0000000100)={'ip_vti0\x00', 0x0, 0x8, 0x8000, 0x2, 0x4, {{0x19, 0x4, 0x3, 0x2, 0x64, 0x65, 0x0, 0xdd, 0x2f, 0x0, @rand_addr=0x64010100, @dev={0xac, 0x14, 0x14, 0x2a}, {[@timestamp_addr={0x44, 0x24, 0xb3, 0x1, 0x3, [{@private=0xa010101, 0x7}, {@private=0xa010102, 0xd}, {@private=0xa010100, 0x6}, {@dev={0xac, 0x14, 0x14, 0x1c}, 0x8}]}, @cipso={0x86, 0xf, 0x0, [{0x7, 0x9, "6cf02cc797d584"}]}, @ssrr={0x89, 0x17, 0x42, [@dev={0xac, 0x14, 0x14, 0x1f}, @broadcast, @multicast1, @local, @remote]}, @ra={0x94, 0x4, 0x1}]}}}}}) sendmsg$nl_route_sched(r3, &(0x7f0000000340)={&(0x7f00000000c0)={0x10, 0x0, 0x0, 0x40000000}, 0xc, &(0x7f0000000300)={&(0x7f0000000280)=@gettfilter={0x34, 0x2e, 0x400, 0x70bd29, 0x25dfdbfc, {0x0, 0x0, 0x0, r4, {0xe, 0xd}, {0x5, 0xb}, {0x6, 0xb}}, [{0x8, 0xb, 0x1}, {0x8, 0xb, 0x2}]}, 0x34}, 0x1, 0x0, 0x0, 0xd0d0}, 0x40044) ioctl$sock_SIOCGIFVLAN_ADD_VLAN_CMD(r3, 0x8982, &(0x7f00000006c0)={0x0, 'macvtap0\x00', {0xffe}, 0x2b1}) 2m33.897729279s ago: executing program 0 (id=6969): r0 = socket(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000000380)={0x0, 0x0, &(0x7f0000000340)={&(0x7f00000002c0)=ANY=[@ANYBLOB="340000001200010000000000fcdbdf2507000000", @ANYRES32=0x0, @ANYBLOB="00000000000000001409350077673000000000000000"], 0x34}}, 0x0) 2m33.650492331s ago: executing program 0 (id=6971): r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f00000006c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000140)=@RTM_NEWMDB={0x18, 0x54, 0x1}, 0x18}}, 0x0) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000100)={&(0x7f00000001c0)=@gettaction={0x48, 0x32, 0x400, 0x70bd2a, 0x25cfdbfd, {}, [@action_dump_flags=@TCA_ROOT_FLAGS={0xc, 0x2, {0x1}}, @action_gd=@TCA_ACT_TAB={0x28, 0x1, [{0xc, 0x7, 0x0, 0x0, @TCA_ACT_INDEX={0x8, 0x3, 0x9}}, {0xc, 0x2, 0x0, 0x0, @TCA_ACT_INDEX={0x8, 0x3, 0x81f7}}, {0xc, 0x1f, 0x0, 0x0, @TCA_ACT_INDEX={0x8, 0x3, 0x4}}]}]}, 0x48}, 0x1, 0x0, 0x0, 0x4008000}, 0x4040090) r1 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000000)={'bond0\x00'}) 2m33.477547252s ago: executing program 0 (id=6973): socket$nl_generic(0x10, 0x3, 0x10) r0 = socket$inet6_tcp(0xa, 0x1, 0x0) r1 = socket$inet6_sctp(0xa, 0x1, 0x84) setsockopt$inet_sctp6_SCTP_ENABLE_STREAM_RESET(r1, 0x84, 0x76, &(0x7f0000444ff8)={0x0, 0x7}, 0x8) setsockopt$inet_sctp6_SCTP_RECONFIG_SUPPORTED(r1, 0x84, 0x75, &(0x7f0000000000)={0x0, 0x9}, 0x8) ioctl$F2FS_IOC_START_ATOMIC_WRITE(r1, 0xf501, 0x0) setsockopt$inet_sctp_SCTP_SOCKOPT_BINDX_ADD(r1, 0x84, 0x64, &(0x7f0000000280)=[@in6={0xa, 0x4e23, 0x0, @loopback, 0xff}], 0x1c) sendmmsg$inet6(r1, &(0x7f0000000480)=[{{&(0x7f0000000080)={0xa, 0x4e23, 0x0, @loopback, 0x80020}, 0x1c, &(0x7f0000000300)=[{&(0x7f00000034c0)='\x00', 0x1}], 0x1}}], 0x1, 0x34000811) setsockopt$inet_sctp6_SCTP_RESET_STREAMS(r1, 0x84, 0x77, &(0x7f00000009c0)=ANY=[@ANYBLOB="12e01b3989dd", @ANYRES32=r0], 0x1000f) sendmsg$MPTCP_PM_CMD_FLUSH_ADDRS(0xffffffffffffffff, 0x0, 0x800) setsockopt(0xffffffffffffffff, 0x1, 0x10000000000009, 0x0, 0x0) getsockopt$inet_sctp6_SCTP_GET_ASSOC_ID_LIST(r1, 0x84, 0x1d, 0x0, 0x0) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f00000007c0)={0x0, 0x0, &(0x7f0000000480)={&(0x7f0000000a00)=@delchain={0x10c, 0x65, 0x0, 0x0, 0x1000, {0x0, 0x0, 0x0, 0x0, {0x0, 0xfff2}, {0xf}, {0xc}}, [@filter_kind_options=@f_route={{0xa}, {0xdc, 0x2, [@TCA_ROUTE4_CLASSID={0x8, 0x1, {0xffe0, 0xfff1}}, @TCA_ROUTE4_ACT={0xd0, 0x6, [@m_csum={0x30, 0x8, 0x0, 0x0, {{0x9}, {0x4}, {0x4}, {0xc, 0x7, {0x1, 0x1}}, {0xc, 0x8, {0x1, 0x3}}}}, @m_ife={0x4c, 0x1a, 0x0, 0x0, {{0x8}, {0x10, 0x2, 0x0, 0x1, [@TCA_IFE_SMAC={0xa, 0x4, @remote}]}, {0x15, 0x6, "3c4d628f307b84d62ea02c2a83d6801f55"}, {0xc, 0x7, {0x1, 0x1}}, {0xc, 0x8, {0x2, 0x5}}}}, @m_connmark={0x50, 0x1c, 0x0, 0x0, {{0xd}, {0x20, 0x2, 0x0, 0x1, [@TCA_CONNMARK_PARMS={0x1c, 0x1, {{0x7, 0x10000, 0x7, 0xd, 0x20cb}, 0x2}}]}, {0x4}, {0xc, 0x7, {0x1}}, {0xc, 0x8, {0x1, 0x1}}}}]}]}}]}, 0x10c}}, 0x0) r2 = openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0) ioctl$TUNSETIFF(r2, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x7101}) r3 = socket(0x400000000010, 0x3, 0x0) r4 = socket$unix(0x1, 0x1, 0x0) ioctl$sock_SIOCGIFINDEX(r4, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r3, &(0x7f0000000bc0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000640)=@newqdisc={0x48, 0x24, 0x4ee4e6a52ff56541, 0x70bd29, 0xffffffff, {0x0, 0x0, 0x0, r5, {0x0, 0xfff1}, {0xffff, 0xffff}, {0x0, 0x2}}, [@qdisc_kind_options=@q_htb={{0x8}, {0x1c, 0x2, [@TCA_HTB_INIT={0x18, 0x2, {0x3, 0x100, 0xe}}]}}]}, 0x48}, 0x1, 0x0, 0x0, 0x4}, 0x0) sendmsg$nl_route_sched(r3, &(0x7f0000000580)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000380)=@newtfilter={0x6c, 0x2c, 0xd27, 0x30bd29, 0x25dfdc00, {0x0, 0x0, 0x0, r5, {0xb, 0x8}, {}, {0x8, 0xc}}, [@filter_kind_options=@f_u32={{0x8}, {0x40, 0x2, [@TCA_U32_LINK={0x8}, @TCA_U32_SEL={0x34, 0x5, {0xd, 0x6, 0x2, 0xfffd, 0x7, 0x9, 0x4, 0x8, [{0x0, 0x575e, 0x6, 0x9}, {0x1, 0xf, 0xfffffffe, 0xd5bd}]}}]}}]}, 0x6c}, 0x1, 0x0, 0x0, 0x20000010}, 0x20000000) syz_init_net_socket$rose(0xb, 0x5, 0x0) r6 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r7 = syz_genetlink_get_family_id$nl802154(&(0x7f00000000c0), r6) ioctl$sock_SIOCGIFINDEX_802154(r6, 0x8933, &(0x7f0000000600)={'wpan1\x00'}) r8 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) sendmsg$NL802154_CMD_DEL_SEC_KEY(r8, &(0x7f0000000c80)={0x0, 0x0, &(0x7f0000000640)={&(0x7f0000000300)={0x5c, r7, 0x400, 0x70bd2d, 0x25dfdbfd}, 0x14}, 0x1, 0x0, 0x0, 0x901}, 0x4048004) bpf$PROG_LOAD(0x5, &(0x7f00000017c0)={0x2, 0xe, &(0x7f0000000200)=ANY=[@ANYBLOB="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"], &(0x7f00000001c0)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x1f, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0xffffffffffffff97, 0x10, &(0x7f00000000c0), 0xfffffffffffffd27}, 0x48) r9 = socket(0x10, 0x803, 0x0) sendto(r9, &(0x7f0000000740)="120000001200e7ef007b00000000000000a1", 0x12, 0x0, 0x0, 0x0) recvmmsg(r9, &(0x7f00000037c0)=[{{&(0x7f00000004c0)=@ethernet={0x0, @random}, 0xfdf4, &(0x7f0000000380)=[{&(0x7f0000000140)=""/100, 0x365}, {&(0x7f0000000280)=""/85, 0x7c}, {&(0x7f0000000fc0)=""/4096, 0x197}, {&(0x7f0000000400)=""/106, 0x645}, {&(0x7f0000000980)=""/73, 0x1b}, {&(0x7f0000000200)=""/77, 0x14}, {&(0x7f00000007c0)=""/154, 0x7e}, {&(0x7f00000001c0)=""/17, 0x1d8}], 0x21, &(0x7f0000000600)=""/191, 0x41, 0xb00}}], 0x4000000000003b4, 0x0, &(0x7f0000003700)={0x77359400}) 2m32.627597869s ago: executing program 0 (id=6984): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_CREATE(r0, &(0x7f0000001080)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000180)=ANY=[@ANYBLOB="64000000020601020000000600000000000000000e1803006269746d61703a6970000000050004000000000005000500050000002000078005001400000000000c0001800800014080ffffff050003000000000005000500020000000500010006000000"], 0x64}}, 0x0) 2m32.407346036s ago: executing program 0 (id=6987): r0 = socket$l2tp(0x2, 0x2, 0x73) getpeername$l2tp(r0, &(0x7f0000000100)={0x2, 0x0, @initdev}, &(0x7f0000000200)=0x10) (async, rerun: 32) sendmsg$MPTCP_PM_CMD_SET_FLAGS(0xffffffffffffffff, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000280)={&(0x7f00000001c0)=ANY=[@ANYBLOB='(\x00\x00\x00', @ANYRES16=0x0, @ANYBLOB="000126bd700000dcdf250700000005fe018008000700", @ANYBLOB='\b'], 0x28}, 0x1, 0x0, 0x0, 0x10000}, 0x0) (async, rerun: 32) r1 = socket$nl_route(0x10, 0x3, 0x0) r2 = socket$inet6_udp(0xa, 0x2, 0x0) (async) r3 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r3, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000001ac0)={&(0x7f0000000000)={0x14, 0x26, 0x1, 0xf0bd26, 0x25dfdbfd, {0x5}}, 0x14}, 0x1, 0x0, 0x0, 0x4000d}, 0x20000000) (async) ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f0000000c80)={'lo\x00', 0x0}) sendmsg$nl_route_sched(r1, &(0x7f0000001200)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000002c0)=@newqdisc={0x48, 0x24, 0x4ee4e6a52ff56541, 0x0, 0x0, {0x0, 0x0, 0x0, r4, {}, {0xffff, 0xffff}}, [@qdisc_kind_options=@q_fq={{0x7}, {0x1c, 0x2, [@TCA_FQ_FLOW_DEFAULT_RATE={0x18, 0x10, 0x3}, @TCA_FQ_FLOW_MAX_RATE={0x2, 0x2}, @TCA_FQ_BUCKETS_LOG={0x0, 0x8, 0xf}]}}]}, 0x48}}, 0x20008000) (async) r5 = socket$netlink(0x10, 0x3, 0x10) r6 = syz_genetlink_get_family_id$team(&(0x7f00000044c0), 0xffffffffffffffff) (async) socket$nl_generic(0x10, 0x3, 0x10) (async) ioctl$ifreq_SIOCGIFINDEX_team(r5, 0x8933, &(0x7f0000000280)) r7 = socket$netlink(0x10, 0x3, 0x10) sendmsg$TEAM_CMD_OPTIONS_SET(r7, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000180)=ANY=[@ANYRES16, @ANYRES16=r6, @ANYBLOB="050427bd7000fedbdf250100000008000100", @ANYRES8=r6, @ANYBLOB="f400028061000100240001006e6f746966795f70656572735f696e74657276616c00000000000000000000000500030003000000080004"], 0x110}, 0x1, 0x0, 0x0, 0x4000401}, 0x2404c080) (async) r8 = socket$igmp6(0xa, 0x3, 0x2) getsockopt$MRT6(r8, 0x29, 0xce, &(0x7f0000000040), &(0x7f00000000c0)=0x4) 2m17.364974167s ago: executing program 33 (id=6987): r0 = socket$l2tp(0x2, 0x2, 0x73) getpeername$l2tp(r0, &(0x7f0000000100)={0x2, 0x0, @initdev}, &(0x7f0000000200)=0x10) (async, rerun: 32) sendmsg$MPTCP_PM_CMD_SET_FLAGS(0xffffffffffffffff, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000280)={&(0x7f00000001c0)=ANY=[@ANYBLOB='(\x00\x00\x00', @ANYRES16=0x0, @ANYBLOB="000126bd700000dcdf250700000005fe018008000700", @ANYBLOB='\b'], 0x28}, 0x1, 0x0, 0x0, 0x10000}, 0x0) (async, rerun: 32) r1 = socket$nl_route(0x10, 0x3, 0x0) r2 = socket$inet6_udp(0xa, 0x2, 0x0) (async) r3 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r3, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000001ac0)={&(0x7f0000000000)={0x14, 0x26, 0x1, 0xf0bd26, 0x25dfdbfd, {0x5}}, 0x14}, 0x1, 0x0, 0x0, 0x4000d}, 0x20000000) (async) ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f0000000c80)={'lo\x00', 0x0}) sendmsg$nl_route_sched(r1, &(0x7f0000001200)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000002c0)=@newqdisc={0x48, 0x24, 0x4ee4e6a52ff56541, 0x0, 0x0, {0x0, 0x0, 0x0, r4, {}, {0xffff, 0xffff}}, [@qdisc_kind_options=@q_fq={{0x7}, {0x1c, 0x2, [@TCA_FQ_FLOW_DEFAULT_RATE={0x18, 0x10, 0x3}, @TCA_FQ_FLOW_MAX_RATE={0x2, 0x2}, @TCA_FQ_BUCKETS_LOG={0x0, 0x8, 0xf}]}}]}, 0x48}}, 0x20008000) (async) r5 = socket$netlink(0x10, 0x3, 0x10) r6 = syz_genetlink_get_family_id$team(&(0x7f00000044c0), 0xffffffffffffffff) (async) socket$nl_generic(0x10, 0x3, 0x10) (async) ioctl$ifreq_SIOCGIFINDEX_team(r5, 0x8933, &(0x7f0000000280)) r7 = socket$netlink(0x10, 0x3, 0x10) sendmsg$TEAM_CMD_OPTIONS_SET(r7, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000180)=ANY=[@ANYRES16, @ANYRES16=r6, @ANYBLOB="050427bd7000fedbdf250100000008000100", @ANYRES8=r6, @ANYBLOB="f400028061000100240001006e6f746966795f70656572735f696e74657276616c00000000000000000000000500030003000000080004"], 0x110}, 0x1, 0x0, 0x0, 0x4000401}, 0x2404c080) (async) r8 = socket$igmp6(0xa, 0x3, 0x2) getsockopt$MRT6(r8, 0x29, 0xce, &(0x7f0000000040), &(0x7f00000000c0)=0x4) 2.352028496s ago: executing program 2 (id=8195): r0 = socket(0x10, 0x3, 0x0) r1 = socket(0x2, 0x2, 0x4) sendmsg$nl_generic(r1, &(0x7f00000002c0)={&(0x7f0000000000), 0xc, &(0x7f0000000280)={&(0x7f0000000100)={0x17c, 0x24, 0x100, 0x70bd2c, 0x25dfdbfe, {0xc}, [@typed={0x5, 0x4a, 0x0, 0x0, @str='\x00'}, @nested={0x66, 0x38, 0x0, 0x1, [@nested={0x4, 0x57}, @generic="b14f8c4f35055e69d29c300f3ed4151d1c75a2a97bb804e911e51126760526d16f59d32a317c45c2b888d6de52c60eb60a02ad73027a4654c50cc2d414c924a97809b2dc43e22afa9d87f3351748c86d53d8294257d41f8bb8580108d6dc"]}, @generic="4ba4b9324782e407aa5cd1dbdb11c1e56cdcc13b07bbda3ca74fa14cc5f17df7a6fc58a50b78c19631fa4b035a3fd560d9337e1f3273e5fcbde898914bd5a4c1cdcf97d0cfab527a11a8f8ceff6d2967b7cbf77919dad95a714cdbe481c039efb89291b1b85a6aa1b0e404e4af9d3e717086bbc88cc24477502c140de00cc56a1393926b370ec143aff3a9dbdcb9c324fa41bb02bf3a8f8d2fc1698b11797c62de5caa54f98e33bacf7d9721dc18f5e1b4fc2651baf063a0a1dd4789ea5545ff693ef3b8b081b3ac498e6a8a6543ca156dd13b8dea4bd17f9397c37012580878a64909ff8a97e1867d5487dc88c5521fa180bd38385f"]}, 0x17c}, 0x1, 0x0, 0x0, 0x4000000}, 0x841) sendmsg$nl_generic(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000000c0)=ANY=[@ANYBLOB="1c0000005200ff0000000000000040000a00000008000143febfffff"], 0x1c}}, 0x20000054) 2.132206423s ago: executing program 4 (id=8196): r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$TIPC_NL_NAME_TABLE_GET(r1, &(0x7f0000001340)={&(0x7f0000000080)={0x10, 0x0, 0x0, 0x800}, 0xc, &(0x7f0000001300)={&(0x7f00000001c0)={0x1110, 0x0, 0x4, 0x70bd27, 0x25dfdbfe, {}, [@TIPC_NLA_NODE={0x10d8, 0x6, 0x0, 0x1, [@TIPC_NLA_NODE_ID={0x1004, 0x3, "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"}, @TIPC_NLA_NODE_ID={0xc, 0x3, "082301137e62fddb"}, @TIPC_NLA_NODE_UP={0x4}, @TIPC_NLA_NODE_ID={0xa8, 0x3, "eb1a591cf47675c8175ba4f13bc42ba75f6182f8e92679d3c92c9501b370fde6f9efa2001e3f2d1ed1ad0b080dc38dcf96f2d74c68087ee088a43074c52d1a305e9f021f76847aa4755e7d1d69d37dc8a4e68cf63a2f4200fa9530c7c4187ea5595463e504a55611a53a27f77a2e94aec5accb6dc81d68477b90913038ff0cbae9975064e424acea44da2f389bb9f6c21878fd4fad352d4a46d21f4ccb1802a233a10253"}, @TIPC_NLA_NODE_REKEYING={0x8, 0x6, 0x8b}, @TIPC_NLA_NODE_REKEYING={0x8, 0x6, 0x5}, @TIPC_NLA_NODE_ADDR={0x8, 0x1, 0xb}]}, @TIPC_NLA_SOCK={0x24, 0x2, 0x0, 0x1, [@TIPC_NLA_SOCK_REF={0x8, 0x2, 0xede}, @TIPC_NLA_SOCK_REF={0x8, 0x2, 0x8}, @TIPC_NLA_SOCK_REF={0x8, 0x2, 0x10000}, @TIPC_NLA_SOCK_ADDR={0x8}]}]}, 0x1110}, 0x1, 0x0, 0x0, 0x60000100}, 0x41) sendmsg$nl_generic(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000040)=ANY=[@ANYBLOB="3400000044000701feffffff00000000037c0000040042800c00018006000600800a0000100002800a"], 0x34}, 0x1, 0x0, 0x0, 0x48815}, 0xc000) r2 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r3 = syz_genetlink_get_family_id$netlbl_unlabel(&(0x7f00000001c0), r2) sendmsg$NLBL_UNLABEL_C_STATICREMOVEDEF(r2, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000200)=ANY=[@ANYBLOB='x\x00\x00\x00', @ANYRES16=r3, @ANYBLOB="01400000000000000000067400062c00070073797352656d5f753a6f626a6563745f723a756465765f68656c7065725f657865635f743a733000080002000000e6ff06000700263a3a0914000600626f6e64300000000000000000000000080003"], 0x78}, 0x1, 0xffffffff00000003}, 0x0) sendmsg$NLBL_UNLABEL_C_STATICLISTDEF(0xffffffffffffffff, &(0x7f0000001480)={&(0x7f00000000c0)={0x10, 0x0, 0x0, 0x10000}, 0xc, &(0x7f0000001440)={&(0x7f0000001380)={0xa0, r3, 0x20, 0x70bd2a, 0x25dfdbfd, {}, [@NLBL_UNLABEL_A_IPV4MASK={0x8, 0x5, @initdev={0xac, 0x1e, 0x0, 0x0}}, @NLBL_UNLABEL_A_IPV4MASK={0x8, 0x5, @local}, @NLBL_UNLABEL_A_IPV6ADDR={0x14, 0x2, @private2={0xfc, 0x2, '\x00', 0x1}}, @NLBL_UNLABEL_A_ACPTFLG={0x5}, @NLBL_UNLABEL_A_IPV4MASK={0x8, 0x5, @rand_addr=0x64010101}, @NLBL_UNLABEL_A_IFACE={0x14, 0x6, 'wg0\x00'}, @NLBL_UNLABEL_A_SECCTX={0x14, 0x7, '/usr/sbin/cupsd\x00'}, @NLBL_UNLABEL_A_IPV6MASK={0x14, 0x3, @private1={0xfc, 0x1, '\x00', 0x1}}, @NLBL_UNLABEL_A_IPV6MASK={0x14, 0x3, @remote}, @NLBL_UNLABEL_A_IPV4MASK={0x8, 0x5, @broadcast}]}, 0xa0}, 0x1, 0x0, 0x0, 0x8084}, 0x40000) 1.946127019s ago: executing program 4 (id=8200): ioctl$F2FS_IOC_MOVE_RANGE(0xffffffffffffffff, 0xc020f509, &(0x7f0000000000)={0xffffffffffffffff, 0x8001, 0xd, 0x81}) r1 = syz_genetlink_get_family_id$tipc(&(0x7f0000000080), 0xffffffffffffffff) sendmsg$TIPC_CMD_GET_NODES(r0, &(0x7f0000000140)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x100000}, 0xc, &(0x7f0000000100)={&(0x7f00000000c0)={0x1c, r1, 0x2, 0x70bd25, 0x25dfdbff, {}, ["", ""]}, 0x1c}, 0x1, 0x0, 0x0, 0x40000}, 0x20008000) getsockopt$SO_J1939_ERRQUEUE(r0, 0x6b, 0x4, &(0x7f0000000180), &(0x7f00000001c0)=0x4) setsockopt$MRT_ADD_MFC_PROXY(r0, 0x0, 0xd2, &(0x7f0000000200)={@empty, @loopback, 0x1, "bfb832434e792d01e8e93a4ed4c5f980c3483f78ec3dcba4866ff464127e46b9", 0x9, 0x4, 0x7, 0x5}, 0x3c) r2 = syz_genetlink_get_family_id$tipc2(&(0x7f0000000280), r0) sendmsg$TIPC_NL_UDP_GET_REMOTEIP(r0, &(0x7f0000000380)={&(0x7f0000000240)={0x10, 0x0, 0x0, 0x2000}, 0xc, &(0x7f0000000340)={&(0x7f00000002c0)={0x78, r2, 0x100, 0x70bd2a, 0x25dfdbfc, {}, [@TIPC_NLA_NODE={0x64, 0x6, 0x0, 0x1, [@TIPC_NLA_NODE_ID={0x9, 0x3, "cc304ff20c"}, @TIPC_NLA_NODE_ADDR={0x8, 0x1, 0x401}, @TIPC_NLA_NODE_KEY={0x3f, 0x4, {'gcm(aes)\x00', 0x17, "8451c972c152b153d48687a6fe217f5886090131e7e33a"}}, @TIPC_NLA_NODE_UP={0x4}, @TIPC_NLA_NODE_ADDR={0x8, 0x1, 0x80000001}]}]}, 0x78}, 0x1, 0x0, 0x0, 0x400}, 0x4814) sendmsg$NL80211_CMD_NOTIFY_RADAR(r0, &(0x7f0000000480)={&(0x7f00000003c0)={0x10, 0x0, 0x0, 0x20}, 0xc, &(0x7f0000000440)={&(0x7f0000000400)={0x30, 0x0, 0x100, 0x70bd2b, 0x25dfdbff, {{}, {@void, @val={0xc, 0x99, {0x3, 0x6e}}}}, [@NL80211_ATTR_WIPHY_FREQ={0x8, 0x26, @random=0x15cc}, @NL80211_ATTR_CENTER_FREQ1={0x8, 0xa0, 0x1}]}, 0x30}, 0x1, 0x0, 0x0, 0x4000000}, 0x4800) getsockopt$netrom_NETROM_IDLE(r0, 0x103, 0x7, &(0x7f00000004c0)=0x4, &(0x7f0000000500)=0x4) sendmsg$TIPC_CMD_ENABLE_BEARER(r0, &(0x7f0000000600)={&(0x7f0000000540)={0x10, 0x0, 0x0, 0x400000}, 0xc, &(0x7f00000005c0)={&(0x7f0000000580)={0x34, r1, 0x200, 0x70bd25, 0xfffeffff, {{}, {}, {0x18, 0x17, {0x0, 0x1, @l2={'eth', 0x3a, 'vcan0\x00'}}}}, ["", "", "", ""]}, 0x34}, 0x1, 0x0, 0x0, 0x400c000}, 0x44084) getsockname$packet(r0, &(0x7f0000000700)={0x11, 0x0, 0x0}, &(0x7f0000000740)=0x14) r4 = openat$cgroup_ro(r0, &(0x7f00000007c0)='memory.events.local\x00', 0x0, 0x0) bpf$BPF_PROG_WITH_BTFID_LOAD(0x5, &(0x7f0000000900)=@bpf_tracing={0x1a, 0x3, &(0x7f0000000640)=@raw=[@jmp={0x5, 0x1, 0x3, 0xa, 0x1, 0xffffffffffffffff, 0xfffffffffffffff0}, @ldst={0x0, 0x0, 0x4, 0x2, 0x3, 0x100, 0x8}, @call={0x85, 0x0, 0x0, 0xb3}], &(0x7f0000000680)='syzkaller\x00', 0x4, 0x37, &(0x7f00000006c0)=""/55, 0x40f00, 0x30, '\x00', r3, 0x17, r0, 0x8, 0x0, 0x0, 0x10, &(0x7f0000000780)={0x1, 0x2, 0x0, 0xe2f}, 0x10, 0x2e78b, r0, 0x9, &(0x7f0000000800)=[r0, r4, r0, r0, r0], &(0x7f0000000840)=[{0x0, 0x2, 0x5, 0xb}, {0x2, 0x4, 0x7, 0x7}, {0x1, 0x2, 0xe, 0x9}, {0x2, 0x5, 0xb, 0xa}, {0x5, 0x2, 0x1, 0x8}, {0x4, 0x4, 0x10, 0x5}, {0x2, 0x4, 0x2, 0x3}, {0x80000000, 0x5, 0x5, 0x6}, {0x2, 0x2, 0x5, 0x3}], 0x10, 0x400}, 0x94) getsockopt$inet_IP_IPSEC_POLICY(r4, 0x0, 0x10, &(0x7f0000000a00)={{{@in=@multicast1, @in=@loopback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}, {{@in=@dev}, 0x0, @in=@initdev}}, &(0x7f0000000b00)=0xe8) sendmsg$nl_route(r4, &(0x7f0000000d00)={&(0x7f00000009c0)={0x10, 0x0, 0x0, 0x2000}, 0xc, &(0x7f0000000cc0)={&(0x7f0000000b40)=@can_newroute={0x180, 0x18, 0x20, 0x70bd26, 0x25dfdbfb, {0x1d, 0x1, 0x7}, [@CGW_CS_XOR={0x8, 0x5, {0x2, 0xfffffffffffffffc, 0xfffffffffffffff7, 0x7}}, @CGW_FILTER={0xc, 0xb, {{0x1}, {0x3, 0x0, 0x1, 0x1}}}, @CGW_FILTER={0xc, 0xb, {{0x3, 0x0, 0x0, 0x1}, {0x2, 0x1, 0x0, 0x1}}}, @CGW_MOD_XOR={0x15, 0x3, {{{0x4, 0x0, 0x0, 0x1}, 0x6, 0x1, 0x0, 0x0, "c931b04ed2ddfe58"}, 0x2}}, @CGW_CS_CRC8={0x11e, 0x6, {0x3, 0x38, 0x57, 0x5, 0x0, "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", 0x0, "c57ec3da2c652c2d21a95fa18a941030ac34195d"}}, @CGW_FILTER={0xc, 0xb, {{0x4, 0x0, 0x1}, {0x4, 0x1, 0x1}}}, @CGW_MOD_UID={0x8, 0xe, r5}]}, 0x180}, 0x1, 0x0, 0x0, 0x4020}, 0x20000000) r6 = syz_init_net_socket$netrom(0x6, 0x5, 0x0) getpeername$netrom(r6, &(0x7f0000000d40)={{0x3, @default}, [@default, @null, @rose, @rose, @remote, @remote, @default, @netrom]}, &(0x7f0000000dc0)=0x48) close(r6) r7 = accept$alg(r0, 0x0, 0x0) close(r7) ioctl$sock_inet_SIOCSARP(r0, 0x8955, &(0x7f0000000e00)={{0x2, 0x4e20, @loopback}, {0x6, @link_local}, 0x0, {0x2, 0x4e24, @remote}, 'bond_slave_0\x00'}) socket$kcm(0x29, 0x5, 0x0) r8 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r9 = syz_genetlink_get_family_id$nfc(&(0x7f0000000ec0), 0xffffffffffffffff) ioctl$IOCTL_GET_NCIDEV_IDX(r0, 0x0, &(0x7f0000000f00)=0x0) ioctl$IOCTL_GET_NCIDEV_IDX(r4, 0x0, &(0x7f0000000f40)=0x0) ioctl$IOCTL_GET_NCIDEV_IDX(r4, 0x0, &(0x7f0000000f80)=0x0) ioctl$IOCTL_GET_NCIDEV_IDX(r0, 0x0, &(0x7f0000000fc0)=0x0) ioctl$IOCTL_GET_NCIDEV_IDX(r4, 0x0, &(0x7f0000001000)=0x0) sendmsg$NFC_CMD_GET_DEVICE(r8, &(0x7f0000001180)={&(0x7f0000000e80)={0x10, 0x0, 0x0, 0x1000}, 0xc, &(0x7f0000001140)={&(0x7f00000010c0)={0x54, r9, 0x400, 0x70bd29, 0x25dfdbfd, {}, [@NFC_ATTR_DEVICE_INDEX={0x8}, @NFC_ATTR_DEVICE_INDEX={0x8, 0x1, r10}, @NFC_ATTR_DEVICE_INDEX={0x8, 0x1, r11}, @NFC_ATTR_DEVICE_INDEX={0x8, 0x1, r12}, @NFC_ATTR_DEVICE_INDEX={0x8, 0x1, r13}, @NFC_ATTR_DEVICE_INDEX={0x8, 0x1, r14}, @NFC_ATTR_DEVICE_INDEX={0x8}, @NFC_ATTR_DEVICE_INDEX={0x8}]}, 0x54}, 0x1, 0x0, 0x0, 0x20000044}, 0x814) 1.850846953s ago: executing program 2 (id=8203): socket$packet(0x11, 0x3, 0x300) r0 = socket$nl_netfilter(0x10, 0x3, 0xc) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000140), 0xffffffffffffffff) r2 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX_80211(r2, 0x8933, &(0x7f00000078c0)={'wlan0\x00', 0x0}) sendmsg$NL80211_CMD_GET_WIPHY(r2, &(0x7f0000007980)={0x0, 0x0, &(0x7f0000007940)={&(0x7f0000007900)={0x24, r1, 0xccd495925cefb39, 0x70bd25, 0x25dfdbfd, {{}, {@val={0x8, 0x1, 0x45}, @val={0x8, 0x3, r3}, @void}}}, 0x24}, 0x1, 0x0, 0x0, 0x200040c0}, 0x800) sendmsg$NFT_BATCH(r0, &(0x7f000000c2c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000340)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a28000000000a0101000000005e1affd5020000000900010073797a300000000008000240000000032c000000030a01030000e6ff00000000020000000900010073797a30000000000900030073797a320000000014000000110001"], 0x7c}}, 0x0) sendmsg$NFT_BATCH(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000003c0)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a64000000060a0b0400000000000000000200000038000480340001800c0001007061796c6f6164002400028008000340000000010800024000000000080001400000000f08000440000000020900010073797a30000000000900020073797a320000000014000000110001"], 0x8c}}, 0x0) bpf$BPF_BTF_LOAD(0x12, 0x0, 0x0) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000005c40)={0x0, 0x0, &(0x7f0000005c00)={&(0x7f0000000100)=@newtaction={0x80, 0x30, 0x1, 0x0, 0x0, {}, [{0x6c, 0x1, [@m_bpf={0x68, 0x1, 0x0, 0x0, {{0x8}, {0x1c, 0x2, 0x0, 0x1, [@TCA_ACT_BPF_PARMS={0x18, 0x2, {0x0, 0x0, 0x20000000}}]}, {0x26, 0x6, "29a0990ce95db373b31faad9c3464ef76c1af7da240eece263a3f6f43266bad878ac"}, {0xc}, {0xc, 0x8, {0x0, 0x1}}}}]}]}, 0x80}}, 0x0) r4 = socket$kcm(0x10, 0x2, 0x0) r5 = socket(0x10, 0x3, 0x0) r6 = socket$nl_generic(0x10, 0x3, 0x10) r7 = syz_genetlink_get_family_id$nl80211(&(0x7f00000006c0), 0xffffffffffffffff) r8 = socket$netlink(0x10, 0x3, 0x0) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$sock_SIOCGIFINDEX(r9, 0x8933, &(0x7f0000000000)={'macsec0\x00', 0x0}) sendmsg$nl_route(r8, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000140)={&(0x7f00000002c0)=ANY=[@ANYBLOB="3c0000001000010010000000ffdbdf2530000000", @ANYRES32=r10, @ANYBLOB="20000000000000001c0012800b0001006d616373656300000c00028005000f"], 0x3c}}, 0x0) ioctl$sock_SIOCGIFINDEX_80211(r6, 0x8933, &(0x7f0000000000)={'wlan0\x00', 0x0}) sendmsg$NL80211_CMD_SET_TID_CONFIG(r6, &(0x7f0000000c00)={0x0, 0x0, &(0x7f0000000bc0)={&(0x7f0000000040)={0x30, r7, 0x1, 0x0, 0x0, {{}, {@val={0x8, 0x3, r11}, @void}}, [@NL80211_ATTR_TID_CONFIG={0x14, 0x11d, 0x0, 0x1, [{0x10, 0x0, 0x0, 0x1, [@NL80211_TID_CONFIG_ATTR_OVERRIDE={0x4}, @NL80211_TID_CONFIG_ATTR_TIDS={0x6, 0x5, 0x59}]}]}]}, 0x30}}, 0x0) sendmsg$NL80211_CMD_DISCONNECT(r5, &(0x7f0000000300)={&(0x7f0000000180)={0x10, 0x0, 0x0, 0x4000000}, 0xc, &(0x7f00000002c0)={&(0x7f0000000240)={0x70, 0x0, 0x4, 0x70bd2d, 0x25dfdbff, {{}, {@val={0x8, 0x3, r11}, @val={0xc, 0x99, {0x80, 0x4c}}}}, [@NL80211_ATTR_REASON_CODE={0x6, 0x36, 0x3b}, @NL80211_ATTR_REASON_CODE={0x6, 0x36, 0x3a}, @NL80211_ATTR_REASON_CODE={0x6, 0x36, 0x39}, @NL80211_ATTR_REASON_CODE={0x6, 0x36, 0x6}, @NL80211_ATTR_REASON_CODE={0x6, 0x36, 0x11}, @NL80211_ATTR_REASON_CODE={0x6, 0x36, 0x2b}, @NL80211_ATTR_REASON_CODE={0x6, 0x36, 0x20}, @NL80211_ATTR_REASON_CODE={0x6, 0x36, 0x6}, @NL80211_ATTR_REASON_CODE={0x6, 0x36, 0x2a}]}, 0x70}, 0x1, 0x0, 0x0, 0x404c050}, 0x8080) r12 = socket$nl_route(0x10, 0x3, 0x0) ioctl$ifreq_SIOCGIFINDEX_vcan(r12, 0x8933, &(0x7f0000000040)={'vxcan0\x00', 0x0}) sendmsg$nl_route(r5, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000000)=@can_newroute={0x24, 0x18, 0x1, 0x0, 0x25dfdbfe, {0x1d, 0x1, 0x6}, [@CGW_SRC_IF={0x8, 0x9, r13}, @CGW_DST_IF={0x8, 0xa, r13}]}, 0x24}, 0x1, 0x0, 0x0, 0x40000}, 0x0) write$cgroup_subtree(r4, &(0x7f0000000000)=ANY=[@ANYBLOB="563f000019"], 0xfe33) 1.727091957s ago: executing program 4 (id=8206): r0 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000200)=ANY=[@ANYBLOB="3800000040000701feffffff02000000017c0000040042800c00018006000600800a000014000280100014800c0016800800b600884729"], 0x38}, 0x1, 0x0, 0x0, 0x4048011}, 0xc800) syz_genetlink_get_family_id$devlink(&(0x7f0000000040), r0) 1.710963709s ago: executing program 5 (id=8207): sendmsg$IPSET_CMD_CREATE(0xffffffffffffffff, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000080)={0x0}}, 0x891) r0 = socket(0x10, 0x3, 0x0) setsockopt$netlink_NETLINK_TX_RING(r0, 0x10e, 0xc, &(0x7f00000001c0)={0x80000006}, 0x10) sendmsg$kcm(r0, &(0x7f00000016c0)={0x0, 0x0, &(0x7f00000000c0)=[{&(0x7f0000000040)="1c0000004a008102e00f80ecdb4cb9020a", 0x4a}, {&(0x7f0000001700)="0c74c75350f4a590e15c61c7942348092734fe1863473bbce6798a60e9", 0x1d}], 0x2, 0x0, 0x0, 0x10}, 0x0) r1 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$netlbl_cipso(&(0x7f0000000240), r1) r2 = syz_genetlink_get_family_id$ieee802154(&(0x7f0000000080), 0xffffffffffffffff) sendmsg$IEEE802154_ASSOCIATE_REQ(r1, &(0x7f0000000300)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x80000}, 0xc, &(0x7f00000002c0)={&(0x7f0000000140)={0x50, r2, 0x2, 0x70bd27, 0x25dfdbfb, {}, [@IEEE802154_ATTR_COORD_PAN_ID={0x6}, @IEEE802154_ATTR_COORD_HW_ADDR={0xc, 0x9, {0xaaaaaaaaaaaa0002}}, @IEEE802154_ATTR_COORD_PAN_ID={0x6, 0xa, 0x1}, @IEEE802154_ATTR_PAGE={0x5, 0x1d, 0x1a}, @IEEE802154_ATTR_COORD_PAN_ID={0x6, 0xa, 0xffff}, @IEEE802154_ATTR_COORD_SHORT_ADDR={0x6, 0x8, 0xaaa0}, @IEEE802154_ATTR_CAPABILITY={0x5, 0x11, 0x1}]}, 0x50}, 0x1, 0x0, 0x0, 0x10}, 0x40) r3 = socket$alg(0x26, 0x5, 0x0) bind$alg(r3, &(0x7f00000004c0)={0x26, 'skcipher\x00', 0x0, 0x0, 'ecb-camellia-aesni\x00'}, 0x58) setsockopt$ALG_SET_KEY(r3, 0x117, 0x1, &(0x7f0000000280)="ad56b6c5820fae9d6dcd3292ea54c7beef915d564c90c200", 0x18) r4 = accept4(r3, 0x0, 0x0, 0x800) r5 = socket$nl_rdma(0x10, 0x3, 0x14) sendmsg$RDMA_NLDEV_CMD_RES_CM_ID_GET(r5, &(0x7f00000014c0)={0x0, 0x0, &(0x7f0000001480)={&(0x7f0000000000)={0x18, 0x140b, 0x301, 0x70bd2a, 0x25dfdbfa, "", [@RDMA_NLDEV_ATTR_DEV_INDEX={0x8, 0x1, 0x1}]}, 0x18}, 0x1, 0x0, 0x0, 0x800}, 0x20008000) sendmmsg$alg(r4, &(0x7f0000003700)=[{0x0, 0x0, &(0x7f0000000440)=[{&(0x7f0000001340)="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", 0x200}], 0x1, &(0x7f0000000540)=[@op={0x18, 0x117, 0x3, 0x1}], 0x18, 0x20000000}], 0x1, 0x20044881) recvmsg(r4, &(0x7f00000005c0)={0x0, 0x0, &(0x7f00000001c0)=[{&(0x7f00000000c0)=""/81, 0x7ffff000}, {&(0x7f0000000200)=""/83, 0x20000253}], 0x2}, 0x0) r6 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r6, &(0x7f0000002240)={0x0, 0x0, &(0x7f0000001140)={&(0x7f0000000000)=@newlink={0x40, 0x10, 0x503, 0x0, 0x0, {}, [@IFLA_LINKINFO={0x14, 0x12, 0x0, 0x1, @geneve={{0xb}, {0x4}}}, @IFLA_ADDRESS={0xa, 0x1, @dev}]}, 0x40}}, 0x0) 1.561156172s ago: executing program 2 (id=8209): r0 = socket$kcm(0x10, 0x2, 0x4) sendmsg$kcm(r0, &(0x7f0000000240)={0x0, 0xf0ffffff, &(0x7f0000000140)=[{&(0x7f0000000280)="89000000120081ae08060cdc030000007f03e3f7000000006ee2ffca1b1f0000000004c00e72f750375ed08a56331dbf9ed7815e381ad6e747033a0093b837dc6cc01e32efaec8c7a6ec0012100001400d280c00bdad446b9bbc7a46e3988285dcdf12f21308f868fece01955fed0009d78f0a947ee2b49e33538afa8af92347514f0b56a20ff27fff", 0x89}], 0x1}, 0x0) r1 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r1, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000040)=@getneigh={0x14, 0x1e, 0x400, 0x70bd25, 0x25dfdbfe, {}, ["", ""]}, 0x14}, 0x1, 0x0, 0x0, 0x20000000}, 0x0) 1.422351584s ago: executing program 4 (id=8212): socket$nl_route(0x10, 0x3, 0x0) r0 = socket$inet6_tcp(0xa, 0x1, 0x0) r1 = epoll_create1(0x0) epoll_ctl$EPOLL_CTL_ADD(r1, 0x1, r0, &(0x7f0000001200)={0x60000010}) r2 = epoll_create1(0x0) r3 = socket$inet_sctp(0x2, 0x5, 0x84) ioctl$sock_inet_SIOCADDRT(r3, 0x890b, &(0x7f0000000240)={0x0, {0x2, 0x4e24, @multicast1}, {0x2, 0x4e22, @dev={0xac, 0x14, 0x14, 0x41}}, {0x2, 0x4e21, @broadcast}, 0xd1, 0x0, 0x0, 0x0, 0x2, 0x0, 0xfffffffffffffffe, 0x9, 0x4}) setsockopt$inet_sctp_SCTP_PRIMARY_ADDR(r3, 0x84, 0x6, 0x0, 0x0) epoll_ctl$EPOLL_CTL_ADD(r2, 0x1, r0, &(0x7f0000000280)={0x1000}) r4 = socket$inet(0x2, 0x4000000000000001, 0x100) socket(0x1d, 0x2, 0x6) pselect6(0x40, &(0x7f0000000100)={0x0, 0x0, 0xffffffffffffffff, 0x0, 0x800, 0x2, 0x80000000000004, 0x6}, 0x0, &(0x7f0000000400)={0x1f, 0x0, 0x800000000000, 0x0, 0x1000000000, 0x0, 0xfffffffffffffffe}, 0x0, 0x0) sendto$inet(r4, 0x0, 0x0, 0x200007fd, 0x0, 0x0) r5 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r5, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000004c0)={{0x14, 0x10, 0x1, 0x0, 0x0, {0x2}}, [@NFT_MSG_NEWTABLE={0x20, 0x0, 0xa, 0x801, 0x0, 0x0, {0x1, 0x0, 0xfffc}, [@NFTA_TABLE_NAME={0x9, 0x1, 'syz0\x00'}]}, @NFT_MSG_NEWCHAIN={0x40, 0x3, 0xa, 0x101, 0x0, 0x0, {0x1}, [@NFTA_CHAIN_NAME={0x9, 0x3, 'syz0\x00'}, @NFTA_CHAIN_HOOK={0x14, 0x4, 0x0, 0x1, [@NFTA_HOOK_PRIORITY={0x8}, @NFTA_HOOK_HOOKNUM={0x8}]}, @NFTA_CHAIN_TABLE={0x9, 0x1, 'syz0\x00'}]}, @NFT_MSG_NEWRULE={0x44, 0x6, 0xa, 0x401, 0x0, 0x0, {0x1}, [@NFTA_RULE_EXPRESSIONS={0x1c, 0x4, 0x0, 0x1, [{0x18, 0x1, 0x0, 0x1, @osf={{0x8}, @val={0xc, 0x2, 0x0, 0x1, [@NFTA_OSF_DREG={0x8, 0x1, 0x1, 0x0, 0x4}]}}}]}, @NFTA_RULE_CHAIN_ID={0x8}, @NFTA_RULE_TABLE={0x9, 0x1, 'syz0\x00'}]}], {0x14}}, 0xcc}, 0x1, 0x0, 0x0, 0x8000}, 0x0) setsockopt$sock_int(r4, 0x1, 0x20, &(0x7f0000000100)=0x6, 0x4) close(0x4) 1.41699086s ago: executing program 5 (id=8213): r0 = socket(0x10, 0x80002, 0x0) sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000100)=ANY=[], 0x64}, 0x1, 0x0, 0x0, 0x4004001}, 0x0) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000100)=ANY=[@ANYBLOB="440000001000080025bd7000fcdbff2500000000", @ANYRES32=0x0, @ANYBLOB="1000000082040400240012800b0001006272696467650000140002800800020001000000080003001d0020"], 0x44}, 0x1, 0x0, 0x0, 0x10}, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000680)={0xffffffffffffffff, 0xffffffffffffffff}) setsockopt$sock_attach_bpf(r1, 0x1, 0x4c, &(0x7f0000000000), 0x4) recvmsg$unix(r1, &(0x7f0000000080)={0x0, 0x0, 0x0, 0x0, &(0x7f0000000300)=[@rights={{0x14, 0x1, 0x1, [0xffffffffffffffff]}}], 0x18}, 0x2000) ioctl$TUNSETNOCSUM(r2, 0xff04, 0x0) epoll_ctl$EPOLL_CTL_DEL(r2, 0x2, r0) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000100)=ANY=[@ANYBLOB="500000001000010425bbe5ad600027842cf52300", @ANYRES32=0x0, @ANYBLOB="0300000000000000280012800a00010076786c616e00"], 0x50}, 0x1, 0x0, 0x0, 0x13d33d22cca65c15}, 0x4008840) r3 = syz_genetlink_get_family_id$tipc2(&(0x7f00000001c0), r2) sendmsg$TIPC_NL_KEY_SET(r2, &(0x7f0000000340)={&(0x7f0000000180)={0x10, 0x0, 0x0, 0x800}, 0xc, &(0x7f00000002c0)={&(0x7f0000000240)={0x74, r3, 0x2, 0x70bd26, 0x25dfdbfb, {}, [@TIPC_NLA_BEARER={0x4c, 0x1, 0x0, 0x1, [@TIPC_NLA_BEARER_PROP={0xc, 0x2, 0x0, 0x1, [@TIPC_NLA_PROP_WIN={0x8, 0x3, 0x4f0a}]}, @TIPC_NLA_BEARER_PROP={0x3c, 0x2, 0x0, 0x1, [@TIPC_NLA_PROP_MTU={0x8, 0x4, 0xffffffff}, @TIPC_NLA_PROP_MTU={0x8, 0x4, 0xcc39}, @TIPC_NLA_PROP_WIN={0x8, 0x3, 0xfff}, @TIPC_NLA_PROP_WIN={0x8, 0x3, 0x5}, @TIPC_NLA_PROP_WIN={0x8, 0x3, 0x6}, @TIPC_NLA_PROP_MTU={0x8, 0x4, 0x1}, @TIPC_NLA_PROP_TOL={0x8, 0x2, 0x80}]}]}, @TIPC_NLA_MON={0x14, 0x9, 0x0, 0x1, [@TIPC_NLA_MON_REF={0x8, 0x2, 0x80000000}, @TIPC_NLA_MON_REF={0x8}]}]}, 0x74}, 0x1, 0x0, 0x0, 0x40000}, 0x800) sendmmsg$alg(r0, &(0x7f00000000c0), 0x492492492492627, 0x0) 1.385284567s ago: executing program 2 (id=8214): r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000000), 0x48241, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f00000000c0)={'syzkaller1\x00', 0x6bf1c2d5adba8c32}) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000040)) r1 = socket$nl_generic(0x10, 0x3, 0x10) r2 = syz_genetlink_get_family_id$devlink(&(0x7f0000000440), 0xffffffffffffffff) sendmsg$DEVLINK_CMD_TRAP_POLICER_SET(r1, &(0x7f0000000600)={0x0, 0x0, &(0x7f0000000580)={&(0x7f0000000480)={0x54, r2, 0x1, 0x70bd2b, 0x25dfdbfe, {}, [{@nsim={{0xe}, {0xf, 0x2, {'netdevsim', 0x0}}}, {0x8}, {0xc, 0x8f, 0x401}, {0xc}}]}, 0x54}, 0x1, 0x0, 0x0, 0x8000}, 0x804) r3 = socket$kcm(0x2, 0xa, 0x2) ioctl$SIOCSIFHWADDR(r3, 0x8914, &(0x7f0000000180)={'syzkaller1\x00', @link_local={0x1, 0x80, 0xc2, 0x0, 0x0, 0xe}}) r4 = socket$inet6(0xa, 0x2, 0x0) sendto$inet6(r4, 0x0, 0x0, 0x8c0, 0xfffffffffffffffd, 0x0) write$tun(r0, &(0x7f0000000300)={@val={0x0, 0x6005}, @void, @eth={@multicast, @multicast, @val={@val={0x88a8, 0x5, 0x1, 0x4}, {0x8100, 0x6, 0x0, 0x6}}, {@ipv4={0x800, @generic={{0x7, 0x4, 0x1, 0x6, 0x1c, 0xe4, 0x0, 0x8, 0x11, 0x0, @dev={0xac, 0x14, 0x14, 0x29}, @loopback, {[@ra={0x94, 0x4, 0x1}, @rr={0x7, 0x3, 0x8}]}}}}}}}, 0x36) 1.104392194s ago: executing program 2 (id=8218): r0 = socket$netlink(0x10, 0x3, 0x0) socketpair(0x1, 0x100000005, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) getpeername$packet(r1, &(0x7f0000000000)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @dev}, &(0x7f0000000040)=0x14) syz_genetlink_get_family_id$batadv(&(0x7f0000000080), r2) sendmsg$nl_route(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000001140)={&(0x7f0000000100)=ANY=[@ANYBLOB="5000000010000305fcffffff0000000000080000", @ANYRES32=0x0, @ANYRES64=r3, @ANYRESOCT=r1, @ANYRES8=r3], 0x50}, 0x1, 0x0, 0x0, 0x20000000}, 0x0) 908.08312ms ago: executing program 1 (id=8221): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000100)={{0x14}, [@NFT_MSG_NEWTABLE={0x20, 0x0, 0xa, 0x3, 0x0, 0x0, {0x7, 0x0, 0x4}, [@NFTA_TABLE_NAME={0x9, 0x1, 'syz0\x00'}]}, @NFT_MSG_NEWSET={0x128, 0x9, 0xa, 0x401, 0x0, 0x0, {0x7, 0x0, 0x2}, [@NFTA_SET_ID={0x8}, @NFTA_SET_NAME={0x9, 0x2, 'syz1\x00'}, @NFTA_SET_TABLE={0x9, 0x1, 'syz0\x00'}, @NFTA_SET_KEY_LEN={0x8, 0x5, 0x1, 0x0, 0x21}, @NFTA_SET_DESC={0xec, 0x9, 0x0, 0x1, [@NFTA_SET_DESC_SIZE={0x8, 0x1, 0x1, 0x0, 0x2}, @NFTA_SET_DESC_CONCAT={0x24, 0x2, 0x0, 0x1, [{0x14, 0x1, 0x0, 0x1, [@NFTA_SET_FIELD_LEN={0x8, 0x1, 0x1, 0x0, 0x6}, @NFTA_SET_FIELD_LEN={0x8, 0x1, 0x1, 0x0, 0xffff7fff}]}, {0xc, 0x1, 0x0, 0x1, [@NFTA_SET_FIELD_LEN={0x8, 0x1, 0x1, 0x0, 0x4}]}]}, @NFTA_SET_DESC_SIZE={0x8, 0x1, 0x1, 0x0, 0x5}, @NFTA_SET_DESC_CONCAT={0xac, 0x2, 0x0, 0x1, [{0x34, 0x1, 0x0, 0x1, [@NFTA_SET_FIELD_LEN={0x8, 0x1, 0x1, 0x0, 0x6}, @NFTA_SET_FIELD_LEN={0x8, 0x1, 0x1, 0x0, 0x1000}, @NFTA_SET_FIELD_LEN={0x8, 0x1, 0x1, 0x0, 0x5}, @NFTA_SET_FIELD_LEN={0x8}, @NFTA_SET_FIELD_LEN={0x8, 0x1, 0x1, 0x0, 0x9}, @NFTA_SET_FIELD_LEN={0x8, 0x1, 0x1, 0x0, 0x8}]}, {0xc, 0x1, 0x0, 0x1, [@NFTA_SET_FIELD_LEN={0x8, 0x1, 0x1, 0x0, 0x8000}]}, {0x2c, 0x1, 0x0, 0x1, [@NFTA_SET_FIELD_LEN={0x8}, @NFTA_SET_FIELD_LEN={0x8, 0x1, 0x1, 0x0, 0x6}, @NFTA_SET_FIELD_LEN={0x8, 0x1, 0x1, 0x0, 0x9}, @NFTA_SET_FIELD_LEN={0x8, 0x1, 0x1, 0x0, 0xfffffffa}, @NFTA_SET_FIELD_LEN={0x8}]}, {0x3c, 0x1, 0x0, 0x1, [@NFTA_SET_FIELD_LEN={0x8}, @NFTA_SET_FIELD_LEN={0x8, 0x1, 0x1, 0x0, 0x4}, @NFTA_SET_FIELD_LEN={0x8, 0x1, 0x1, 0x0, 0x9}, @NFTA_SET_FIELD_LEN={0x8, 0x1, 0x1, 0x0, 0x56}, @NFTA_SET_FIELD_LEN={0x8, 0x1, 0x1, 0x0, 0x8a3}, @NFTA_SET_FIELD_LEN={0x8, 0x1, 0x1, 0x0, 0x7}, @NFTA_SET_FIELD_LEN={0x8, 0x1, 0x1, 0x0, 0x3}]}]}, @NFTA_SET_DESC_SIZE={0x8, 0x1, 0x1, 0x0, 0xb6d9}]}]}], {0x14, 0x10, 0x1, 0x0, 0x0, {0x0, 0x84}}}, 0x170}}, 0x0) syz_emit_ethernet(0x34, &(0x7f0000000000)={@broadcast, @local, @val={@void, {0x8100, 0x0, 0x0, 0x2}}, {@arp={0x806, @generic={0x336, 0x9300, 0x6, 0x6, 0x3, @empty, "bd6ec2584119", @random="616afbc4ae2d", "8b4b7d80b4bec867"}}}}, &(0x7f0000000080)={0x0, 0x1, [0xb2a, 0xf9c, 0xbcf, 0x33c]}) 806.50849ms ago: executing program 1 (id=8222): r0 = syz_init_net_socket$nl_rdma(0x10, 0x3, 0x10) sendmsg$netlink(r0, &(0x7f00000001c0)={0x0, 0x0, &(0x7f00000000c0)=[{&(0x7f0000000780)=ANY=[@ANYBLOB="140000003600ff07000000000000ffff03"], 0x14}], 0x1, 0x0, 0xffffffffffffffa3, 0x4000080}, 0x84) (async) sendmsg$netlink(r0, &(0x7f00000001c0)={0x0, 0x0, &(0x7f00000000c0)=[{&(0x7f0000000780)=ANY=[@ANYBLOB="140000003600ff07000000000000ffff03"], 0x14}], 0x1, 0x0, 0xffffffffffffffa3, 0x4000080}, 0x84) mmap(&(0x7f0000000000/0x95c000)=nil, 0x95c000, 0x1000001, 0x8c4b815a5465c2b1, 0xffffffffffffffff, 0x0) syz_genetlink_get_family_id$nl80211(&(0x7f0000000b00), 0xffffffffffffffff) r1 = syz_init_net_socket$802154_dgram(0x24, 0x2, 0x0) setsockopt$WPAN_SECURITY(r1, 0x0, 0x1, &(0x7f0000000000)=0x1, 0x4) (async) setsockopt$WPAN_SECURITY(r1, 0x0, 0x1, &(0x7f0000000000)=0x1, 0x4) syz_init_net_socket$802154_dgram(0x24, 0x2, 0x0) setsockopt$WPAN_SECURITY(r1, 0x0, 0x1, &(0x7f0000000080), 0x2) (async) setsockopt$WPAN_SECURITY(r1, 0x0, 0x1, &(0x7f0000000080), 0x2) r2 = socket$netlink(0x10, 0x3, 0x0) bind$netlink(r2, &(0x7f0000514ff4)={0x10, 0x0, 0x0, 0x2ffffffff}, 0xc) 805.097246ms ago: executing program 6 (id=8223): r0 = socket$inet6_sctp(0xa, 0x5, 0x84) shutdown(r0, 0x0) (async) getsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX3(r0, 0x84, 0x6f, &(0x7f0000000000)={0x0, 0x1c, &(0x7f0000000040)=[@in6={0xa, 0x4e23, 0x0, @loopback, 0x52}]}, &(0x7f0000000440)=0x10) setsockopt$inet_sctp6_SCTP_RTOINFO(r0, 0x84, 0x0, &(0x7f0000000100)={r1, 0xfffffffd}, 0x10) (async) r2 = socket$inet6(0xa, 0x1, 0x0) setsockopt$inet6_buf(r2, 0x29, 0x39, &(0x7f0000000040)="ff02040000ffffffffffffffff1f2be82db1af0000000000", 0x18) (async) setsockopt$inet6_opts(r2, 0x29, 0x39, 0x0, 0x0) (async) r3 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='memory.events\x00', 0x275a, 0x0) (async) pipe(&(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) (async) r5 = socket$inet6_mptcp(0xa, 0x1, 0x106) splice(r5, 0x0, r4, 0x0, 0x800, 0x0) write$cgroup_subtree(r4, &(0x7f0000000100)=ANY=[], 0x32600) (async) mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x2000001, 0x12, r3, 0x0) (async) setsockopt(r0, 0x84, 0x80, &(0x7f0000000000)='\x00\x00\x00\x00\t\x00\x00\x00', 0x8) 729.838192ms ago: executing program 6 (id=8224): bpf$BPF_GET_MAP_INFO(0xf, &(0x7f0000000400)={0x1, 0x58, &(0x7f0000000380)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, ""/16, 0x0}}, 0x10) r1 = socket(0x10, 0x803, 0x0) sendto(r1, &(0x7f0000000740)="120000001200e7ef007b00000000000000a1", 0x12, 0x0, 0x0, 0x0) recvmmsg(r1, &(0x7f00000037c0)=[{{&(0x7f00000004c0)=@ethernet={0x0, @random}, 0xfdf4, &(0x7f0000000380)=[{&(0x7f0000000140)=""/100, 0x365}, {&(0x7f0000000280)=""/85, 0x7c}, {&(0x7f0000000fc0)=""/4096, 0x197}, {&(0x7f0000000400)=""/106, 0x645}, {&(0x7f0000000980)=""/73, 0x1b}, {&(0x7f0000000200)=""/77, 0x14}, {&(0x7f00000007c0)=""/154, 0x21}, {&(0x7f00000001c0)=""/17, 0x1d8}], 0x21, &(0x7f0000000600)=""/191, 0xffffffffffffff2f}}], 0x4000000000003b4, 0x2040000, &(0x7f0000003700)={0x77359400}) sendmsg$DCCPDIAG_GETSOCK(r1, &(0x7f00000039c0)={&(0x7f0000000640)={0x10, 0x0, 0x0, 0x40000000}, 0xc, &(0x7f0000003980)={&(0x7f0000002900)={0x1050, 0x13, 0x100, 0x70bd2d, 0x25dfdbfe, {0x2b, 0x80, 0x92, 0x4, {0x4e24, 0x4e20, [0xea3, 0x0, 0x4, 0x3], [0x98, 0x9, 0x2, 0x9], r0, [0x7, 0x6]}, 0x7, 0x2}, [@INET_DIAG_REQ_BYTECODE={0x1004, 0x1, "5906b1eec7b75f076f1f3bb4f1b9126fdebbca5f82c7f309cf1c179baf6f23084ab45569b194439087d411211c4afafa0062b3509ca0d3a6a55bd7ae460075dd35e61e125cc9b8cfb2d4bb8f1aa07ea4808222776d6317ef9c01788c7aa8eb1aa26e7dbb515c1e936561e94b59cebccbc19113e2c0edd110bd1a9a8a23243428d783c6c85e2273c4d0587ae4fbe475f1aab4702493a012b3794b4c058672757a6c53ef80322f22846d7d5f85b5e8fdc6022b4ddd2cb77ff38426a1c87e19351053c02602ded5011408f234be8bec9ffa66cad01b62f8516ec3f2328810191f8c7fa00ace65a57a8bfedfcbf4cdfd2415163e80633c834d0ab736c7dd7a3727db1af3e2e6084a6896537b4bed71a6e6c86562acb522efa822569a32c12c43e83ac438cb935d5e84fc6f7ec15f8a262d99a0a3677e84524b2ebff3e939026f86778b404f424c11c4c45fc2abd62443d4710acabb9628b31522dd1a9749db7ede2964b22d532afe82a46badbc73e9d25a8431dd49178ca49f5bb9839909495f6e1f34d5b143454745cc6ba51025e69274a0eb1793e8f95207f7d932196cb9286081128df95cf140eb939ca78b4a610d37fcd5dfa5ecfc9034e277e3a240f249ec9a68e01e024c8a3803de62cdea20ae3208493e34a6b57d6d1d8128d955f529ebc86f3ca01fef00e9546b87176ad6968673c35ce10ae8532c18abe0e236734c267d1c6277c4b9aa1732a356f1826f77b3e603fa67b71e36ce52e29eb6c678ec7f8395de7229d6f67c6079db039afe81e0cf03783aa33c5a889e8519e01d81a7293448e0c63b7d778c139284182bcd54f49c7edc0fcb835b9a0943370d1226acb22e77bbb9824d87bb844219cf8802eeedbde42e12b01a1e0852c182496be20ddaa5388646faabd035262fcaa4b55443596e82e8254ee419edea27425356255c70aa860a2af0b2b221bacc95c2340d37cde004340466c0082f8894153305f24c27d96a529bf6481a239a44602ffc0fae14ae2c7bc3dff01d9bf61e78edf00e55d70a8b100693c928423e76fb0dd5396b1a967ce06134c001b362a0b88d9edc4b10f3c7b2dc14390bd799960a66971f701229a86a40a37c399e9b59441f709ca58707a62afd458c1f4bd645165d41b318e6e64d65f9d42127643f53ac6314b41e0e5f6f0d47a049b6e5867e510dae1aa6bc4072c84303becb82444a5a629362f5300f9060c21716ebf2ee848f257fb80c7417902470dc71f5a9111f74dafbcbea28b2f6b0c26f0e9f1a78d082e2d4920fa67b489f04ca4df7fef41a1804a725dabae5afd22b715fa8de4dadd318789aface7a7541a052a4c7d4ffd563df9eb2eb61319332872f6542ac9b3551881cd74dd159b6b36a289be875dd1ddd6a785c7dce4983debe082735e9069b2e9ed38383f5c3211ff8ffe5d1201c719068c6fd9aed2c23763c5274ab954f092b02eeab1447e6d36d9fd9a56eed4e7c384b59e10b0b7b09c76c8d2eb43c7cfd262f401fceaed146dbd1b2c2fa3dcdff1e6c536b9ee05622ee84e9d40a7cd0c76b163aaa3b92d1bc51182ff375cf9067608880fb4023d9a2ea8dfdadd5fe259b3cdcd20a16db330af717e14ee43ed58c3a559d6b389009f6024d46d2ee5623ec220fd97dacba2c2b3053ffca963ea091b19f647bbb43ee5b0eda8242d90b91793244d2fc197738c2be9daecdf9b12284bbe53f244c2845352ec3edd95f4c1718a4ebe18c9fa94660a6e2a24d6e956e1e7fbd6a29b2f209dffdae15f8d00fa5a8c293bebcb5ec5131a92ca22215201148ef85c430f42e7bcd4c10abb2078cecb233c476feca7bf16128ddfd5aa4332a643c30f53bd3eeb2396e63e7f4c80832afac355a07f5ba37f6cca75caac9ab5bf4ea173e95f7d83ae14d6e9adb0538b4c90df3a6bf86355d36832244ea886d1c885509f386bb2e5a849965513aca0e659bcef7a7f00d6acc43e28d0a364c71576abaac7977921e815e073ca30099bb84ebea7c08b5511ede6eefd76f6e362eaad05036c3f78c0c293a72d19cb6b01dbcf29e60ba0a38fbb6b79f12984ec51e56ebdbc6a7c72c29089985d6b49abfe736b1a93a9d4b9864b96aa60a35e383706b8cf2a0b7ccb5519ff62316f04167e666f001534f7acf2e3ba8e4c8fb0df7c52abeac69b899769b9b235c1b8b4b0162cde4616720befe6ea3bd6d9fb4728606615091d2766160fc0f23e85842400740697ced5908420c2da465a396ffd069a52510192491d8d63e3e15b5d5ce9294cf468a93be9bc18bbafa59da4d546cfb21a94431d3f140acb359d373d597f080d777488b43b508cea201c723720ac028198a9ee627d8b3fb887394b06fbbbe73c86f7e99fbcb472664645d2fbaff9d3e66bba2573de7a796a741ccf3d8ac7aea06f615e68ae1fe8a5ec87a52a1c4118541841c7a1f5bfb2e119ea0459cc06e4ceab992c8add0bea36034ffb0662499d89474700747a6d5dca25abcb8eddc243aa65c8e9bcb1e6386e27dcf4a22e1877f0877189066ce0bbebe8a4a83660bd518893e5d037f66d211af5d5ac10be885fd23e689caa08b6de744a4d1805b7914be9d1e053b735f160ba65cb6058ba5b1d5755fe8395882bb35150ca214b98fcfdf0f4ee7a4d8e047c5276fe74258f8e4b2a617350f57ee8ff00787476a85ff5bf8e7d4dd09a7d2bcbc9d1482b170303c23ab3cb478807e89f680db702b0b66d3c85bc837d3412ece6e337f403b0d1a856acebd5a95d791c2206046b1ccca9504d6f22fc896fefc6dddf4ddc4ef38c334e8078f4b1eda109c2de4e361e0a4dc8f20eadc5214220f6965fb55812e4fd30cdfa454743f412563dc24be3b3c5467be545d805fed10fdf7f3ba114a93275b1353e476acc45fc3aa6fb01cefa0e7d891a43cfa15784a7007067576295c1cb5d0f36e741a23aa4792fc1949e23075a5a86d33d590c367ec24d2a0ae4adcb63efc84292911a6f33f1468aa9d80ccf6cc0d973b65603b88d252e970bef06b10c687940acefb515c7257e2604acc02cea3f9467f8b799d3016ecfe93c4f4e61ef885625a3865af800932b8cbc1fddaf3b0377c8d27290d81c38bb69be67f072adcd079ee6be25b651a050cac4934150a9faf54b058501830991c7c1bb920ff203690267f37619c873ea92036c8519a8728440c604f1a8fd3e2df3f2fac06d3eb6404a8aa88c37aedd60bf2d88f05f1ea0e46d44e22ee6f0a884bc74182edf63bf2a52510ffd89dd4b7949f348704233fa2451a4af95d37a65e4e08372b6f9165f95dd229587534d4469f18a515bbc61c8a01bbad013cc8f368eaf33019f948540e7e3de1a4ddd76a3cc8c62c5c6637b9db79a3e1b8c5ddc457c6f6e579e7a2ae7d4c160e54f6c60a93911073ba415776e5df10d367d17ab72f830740ba0bd8eb53a11d2d095519299dfe30a265454f5f32b623805f74d80e9614d91581c68880a585acdb756181903cf9a1c33dfa3897fabcdfc7d50fbb3caddf2c7c938b8c0dee51556ce668a807c08923046224a6fe7c2f78fb5c41086e44fa4735b979c1cac34cf04814c89b0d5dd95f1a9fd71239bf2d5f71e25c05a9bb443e7218cb130b6f781592a8b8c500cda9ab0df34eb78b40c89855d896d6994294887df9763ce7748a4da995183848438b32ec990c136df51947af7c6c98443eab9a6e26440a99286aa61021407ded56450fb26c554eaf1363dbbd4191edd5613082d877f08e93cd2e5d198d7d24a06fc77613d41ace7b3f22881024cc4137119a06869d165e0c47d94e85ed8a7bc24a2b9d5022ea817e93c1d4f3bdcdbc054d709edfed42fc8e5bb7e04d9106671823febe76954ebc558e3cc1123bb1e954e2256a5fb3a90aff1e8ec6adc2276c2d948f4077499659300734d1e1e58499bef4be1de8f848439e84df89b1600bc112a1fdc60832936d71013fd9177222495f991374459aa601ee0a391bcb543dc120aec8f087a62ed5b2bbc3296ee2c1e95f1d4ac4652df26fee1c6747d0b6741d154362cb50ce94fd652c80ea9cc424ec1b2782badef26cf778719dc4d073f6596e4f30842a74172e19e0fdb9c8fe904b06391e87919f629141553873db96de66a469006509dc9b2f30d9e7785677c52382ee78ffa2826580c8d8114be18559a187d72a401c426333e90e02864fc1b67ee4ac3e5cb64a6b3f8ffcd0a379d09537f9cd149dfb4525fbd707fe9898126ecbbedf1ae4385d38fc3aa2a44b150802bc7de6f39924a10b20f0de2f622d7f3dde9cb19cd0fa832181add22561da36fead37bc2461822d48a87655a75fe925391958277a1348cfba1412f7ae1a4e78f4b386583ad6b23fd23dfbaae900f1db0f7a6e00db458413333cc403112f10d68ac8a9e9404e2689d4f0eb1e9562a412bfe3620f8a9784ca8f5ec1b11cc9ff645f3249f4869d5ab605a6b7a5d10fa62c789f15b38ea29df587239e91f58f6281c49118afe42b7adf57eed209ee8d4b716c78a839f27d5f801982a3bb26900e6faf0d660e216498ae96d375e120c1c84e1e9ddf32719966614dfc5b53b412a8903fa3d52abcf0c80c991b52f2d88ee40bbd6a982a4fec14ecd4b8c80565182615370f3a85562db8532cb33c5c2bb46fe2493ace18ed7a363bff1867c92db450b7fbff29c84eedf2e5049f156fa6181fa7f303fba75b044ec429d7042d36f5f1f08c523d57e5f0a9968c10a24eb8c05600624995abc39a8a5b49d25c8a7097c318483d0ffe40528e1b6d6444f9d5f215946f49bc680628476fcc7374cba847c3afd4d2855fd693ca18370060008a343b22adbfcc5c68cc3700b8f4b0f0c09c63e4ee994ddda31649cbcb3ade62ba6372246a23ae63734a596d4e460b3951bf44c08f81bb0b05434cf37e7faf24a6c255335bca34e9c9005704a50e4413a5f034bea78ced10b79c0d7e9066dd580d7d1138db45dcf3b14d902a9dda718b66b424c27162d4998f59c9b01c0492b07ebc8feb39bafeb284f8b01ed3f48c4ea80c3ac884d011f8580abc9a6ee8266a507d750636dfac672405385e25939ce51220e9b4deedd11044574974c000de03c6ce0860bb4b31573b1e4ee193c6b24699cec959bcdf2f8945e83c967c3ab08bed9e1701f7e4eeabce3bd5b09c1b36695baf291341a606e1c988568f1742c81c2a926cfcc92cf900721e62852c49f70f1bd9ac30d5331806331b0b0a3db39f9af1b177725e5c992822282a7d088f3def92ca3afded140cefb19ad42d5e3a64a19cf6d104a4f29146a38a0ddb523f30cbeda526b466a4bfbb8623b65cab5db416224c1dad5ebd3f7cb2549195a12ef7d2e86ffed5caf4f5c11e2c2de81870e45f19b126913a1a9cc617efdae332c0c0b8418c2b3ff9a0c920161da646f248d5ac0f715a586663038392bf6b0a97ca3cdb7df80db5a90b0a6857ec12d17978867574f62ba71f771721fd58431e2d8806431bece43f6ff5d18884f4717a95cf23ddfb09b112938af81c047c233baee403de3f3d56120120ad3d98c121da4fb18add827a561d173d4d61e5184c7f661b70fe121c82f84f0684dff01bb4ee95cf98b0cf72d90f796bdfdba1bd7755dc993e0f32b5cabfaf6d5bd97bb14397e14c8813e2a75fa946a97c1218f809a0a0d3050de85fa5a5d6295167d96da345dcb240bbff29c7d47332012787be236e515b4d75b285300b46ac9be392fc205ccf8090b2365a9368f87957690b78997c2e23a9361e5d72b512f525a10a63e25862e2e4667b96c086092d8992206e214c55375b7b9d433002e55473ba1f9f3dfc"}]}, 0x1050}, 0x1, 0x0, 0x0, 0x1400005d}, 0x4800) ioctl$XFS_IOC_ATTRLIST_BY_HANDLE(0xffffffffffffffff, 0x4058587a, &(0x7f0000000840)={{0xffffffffffffffff, &(0x7f0000000480)='*/\x00', 0x2000, &(0x7f00000004c0)={@_ha_fsid={[0x4f, 0xac3]}, {0x401, 0xb9d, 0x1, 0x7fff}}, 0x8, &(0x7f0000000500)={@_ha_fsid}, &(0x7f0000000540)=0x3}, {[0x0, 0x5, 0x7, 0x7]}, 0xfffffff6, 0xc1, &(0x7f0000000740)=""/193}) r2 = bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000440)={&(0x7f0000000580)=ANY=[@ANYBLOB="9feb01001800000000000000180000001800000005000000000000000000000a020400000600000000006175000000000000000000"], &(0x7f00000018c0)=""/4109, 0x35, 0x100d, 0x0, 0x2}, 0x28) r3 = bpf$BPF_BTF_GET_FD_BY_ID(0x13, &(0x7f0000001840)=0xffffffffffffffff, 0x4) bpf$MAP_CREATE(0x0, &(0x7f00000017c0)=@bloom_filter={0x1e, 0x18000, 0x4, 0x7, 0x59382, 0x1, 0x1, '\x00', r0, r2, 0x2, 0x0, 0x0, 0x4, @value=r3}, 0x50) r4 = socket$inet6_mptcp(0xa, 0x1, 0x106) listen(r4, 0x0) r5 = socket$kcm(0x10, 0x2, 0x0) sendmsg$kcm(r5, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000001780)=[{&(0x7f0000000180)="d8000000180081064e81f782db4cb904021d0820fe067c05e8fe55a10a0005000140020003600e41b0000900ac0006fc1120000016000500014002000000035c3b61c1d67f6f94007174cf6efb8000a007a290457f0189b316277ce06bbace8017cbec4c2ee5a7cef4090000001b14d6d930dfe1d9d322fe7c4650b5b9bd6ee6f63f5aeb4edbb57a5025ccca9e00360db798262f3d40fad95667e006dcdf63951f215ce3bb9ad809d5e1cace81ed0bffece0b4ff010000000000000dd6e4edef3d93452a09004b43370e9703920723f97e46bb5c07540d3b", 0xd8}], 0x1}, 0x8044) r6 = socket$netlink(0x10, 0x3, 0x8000000004) writev(r6, &(0x7f0000000280)=[{&(0x7f00000005c0)="580000001400192340834b80040d8c560a06ffffff7f000000010000000058000b480400945f64009400050038925a01000000800000008004000000ff0109000000fff5dd0000000800030006010000418e01400004fcff", 0x58}], 0x1) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000002c0)={0x1e, 0x4, &(0x7f0000000080)=ANY=[@ANYBLOB="18000000000000000000000000000000711214000000000095", @ANYRESOCT], &(0x7f0000000000)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x24}, 0x94) socketpair$tipc(0x1e, 0x2, 0x0, &(0x7f00000006c0)={0xffffffffffffffff}) sendmsg$tipc(r7, &(0x7f0000001880)={&(0x7f0000000700)=@nameseq={0x1e, 0x1, 0x0, {0x1, 0x3, 0x3}}, 0x10, 0x0}, 0x0) r8 = syz_genetlink_get_family_id$mptcp(&(0x7f0000000040), r6) sendmsg$MPTCP_PM_CMD_SUBFLOW_CREATE(r6, &(0x7f0000000100)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x2}, 0xc, &(0x7f00000000c0)={&(0x7f0000000140)={0x3c, r8, 0x4, 0x70bd28, 0x25dfdbfc, {}, [@MPTCP_PM_ATTR_SUBFLOWS={0x8, 0x3, 0x8}, @MPTCP_PM_ATTR_SUBFLOWS={0x8, 0x3, 0x2}, @MPTCP_PM_ATTR_TOKEN={0x8, 0x4, 0x1}, @MPTCP_PM_ATTR_LOC_ID={0x5, 0x5, 0x6}, @MPTCP_PM_ATTR_TOKEN={0x8, 0x4, 0x9}]}, 0x3c}, 0x1, 0x0, 0x0, 0x1}, 0x4044800) 716.481886ms ago: executing program 1 (id=8225): bpf$BPF_PROG_WITH_BTFID_LOAD(0x5, &(0x7f0000000400)=@bpf_lsm={0x6, 0x4, &(0x7f0000000000)=ANY=[@ANYBLOB="1800000000000000581cdb194a00000000002bc7006110000000000000950000"], &(0x7f0000000100)='GPL\x00', 0x5, 0xd2, &(0x7f00000002c0)=""/210, 0x0, 0x5}, 0x90) r0 = socket(0x2b, 0x80801, 0x1) setsockopt$bt_hci_HCI_DATA_DIR(r0, 0x0, 0x1, &(0x7f0000000040)=0x8, 0x4) r1 = socket$nl_netfilter(0x10, 0x3, 0xc) r2 = socket$inet(0x2, 0x2, 0x0) setsockopt$EBT_SO_SET_ENTRIES(r2, 0x0, 0x80, &(0x7f0000000040)=@nat={'nat\x00', 0x19, 0x4, 0x90, [0x200000000780, 0x0, 0x0, 0x2000000007b0, 0x200000000ae4], 0x0, 0x0, &(0x7f0000000780)=ANY=[@ANYBLOB="00000000000000000000000000000000000000000000000000000000000000000000000000000000ffffffff00000000000000000000000000000000000000000000000000000000000000000000000000000000feffffff0000000000000000000000000000000000000000000000000000000000000000000000000000000002000000ffffffff0000000000000000"]}, 0x108) sendmsg$IPSET_CMD_CREATE(r1, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000200)=ANY=[@ANYBLOB="600000000206010300000000000000000000000014000780080012400000000005001500060000000500010006000000050005000a00000005000400000000000900020073797a300000000011000300686173683a6e65742c6e6574"], 0x60}}, 0x0) 566.648566ms ago: executing program 1 (id=8226): r0 = bpf$BPF_PROG_WITH_BTFID_LOAD(0x5, &(0x7f0000000280)=@bpf_lsm={0x6, 0x3, &(0x7f00000003c0)=ANY=[@ANYBLOB="18000000003f000000000000000000f195"], &(0x7f0000000140)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x1b, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0xfb6}, 0x94) r1 = socket$alg(0x26, 0x5, 0x0) bind$alg(r1, &(0x7f0000000000)={0x26, 'skcipher\x00', 0x0, 0x0, 'ecb(blowfish)\x00'}, 0x58) setsockopt$ALG_SET_KEY(r1, 0x117, 0x1, &(0x7f0000c18000)="ad56b6c5", 0x4) r2 = accept4(r1, 0x0, 0x0, 0x80800) sendmmsg$alg(r2, &(0x7f0000003780)=[{0x0, 0x0, 0x0, 0x0, &(0x7f0000000380)=[@op={0x18, 0x117, 0x3, 0x1}], 0x18}], 0x1, 0x0) recvmsg$unix(r2, 0x0, 0x2041) syz_genetlink_get_family_id$tipc(&(0x7f0000000000), r2) bpf$BPF_PROG_TEST_RUN(0x1c, &(0x7f0000000240)={r0, 0x30, 0x25, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffffffffe33, 0x0, 0x0, 0x0}, 0x40) r3 = socket$kcm(0x10, 0x2, 0x0) bpf$PROG_LOAD(0x5, &(0x7f0000000040)={0x2, 0x4, &(0x7f0000000200)=ANY=[@ANYBLOB="180000000300000000000000feffff10850000000700000095"], &(0x7f0000000000)='GPL\x00', 0x0, 0x0, 0x0, 0x100, 0x70, '\x00', 0x0, @fallback=0x30, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r4 = bpf$PROG_LOAD(0x5, &(0x7f00000017c0)={0x1, 0xe, &(0x7f0000000200)=ANY=[@ANYBLOB="b700000081000000bfa300000000000007030000f1feffff720a05fef8ffffff71a400fe0000000071101000000000001d300200000000004704000001ed00000f030000000000001d44000000000000730a04fe0000000072030000000a0000b500f9ff000000009500000000000000023bc065b58111c6dfa041b63af4a3912435f1a864a710aad58db6a693002e7f3be361917adef6ee1c8a2a4f8ef1e50becb19bc461e91a7168c50000000190f32050e436fe275daf51efd601b6bf01c8e8b1b526375ec4dd6fcd82e4fe51bef7af9aa0d7d600c095199fe3ff3128e599b0eaebbdbd732c9cc00eec363e4a8f6456e2cc21557c0afc646cb7798b3e6440c2fbdb00a3e35208b0bb0d2cd829e654400e2438ec649dc74a28610643a98d9ec21ead2ed51b104d4d91af25b845d8a7925c3109b151b8b9f75dd08d123deda88c658d42ecbf28bf7076c15b463bebc72f526d8e8afcb913466aaa7f6df70252e79166d858fcd0e06dd31af9612f2460d0b11008e59a5923906f88b53987ad1714e72ba7a54f0c33d39000d06a59ff616276fd9aa58f2477184b6a89adaf17b0a6041bdef728d236619074d6ebdfd1f5089048ddff6da40f9411fe722631cb467600ade70063e5291569b33d21dae356e1c51f03a801be8189679a16da18ec0ae564162a27afea62d84f3a10746443d6438e959532e0617d419c6bc6ea9f2bca4464f56e24e6d2105bd901204a1deeed4155617572652d950ad31928b0b0c3dc2869f478341d02d0f5ad94b081fcd507acb4b9c65fee9d5a17f48a7382f13d000000225d85ae49cee383dc5049076b989b40000000000000da60d2ae20cfb91d6a49964757cdf538f9ce2bdb1ab062cd54e67011d355d84ce97bb0c6b4a595e487efbb2d71cde2c140952f9a0f0bc6980fe78683ac5c0c31032599ddd71063be9261b2e1aab1675b34a26048ef8c126aeef5f510a8f1aded94a129e4aec6f8d9ab06faffc3a15d96c2ea3e2e04cfe031b2875353193f82ade69d0540059fe6c7fe7cd8697502c7596566d674e425da5e87e59602a9f6590521d31d3804b3e0a1053abdc31282dfb15eb6841bb64a1b304502dda787343ce3c953992e4a982f3c48153baae244e7bf37548c7f1a4cad2422ee965a38f7defbd2160242b104e20dc2d9b0c35608d402ccdd9069bd50b994fda7a9de44028d6112a0c2d21b2dc98816106dec28eaeb883418f562ae00003ea96d10f172c0374d6eed826416050000000bfe9b4a9c5a90ff59d54d1f92ecc4e95dd2d18383117c039862198899b212c55318294270a1ad10c80fef7c24d47afce829ba0f85da6d888f18ea40ab959f6074ab2a40d85d15017ab513cdc6c0e57fb1c1ca571380d7b4ead35a385e0b4a26b702396df7e0c1e02b6e4114f244a9bf93f04bf072f0861f7580e69db384ac7eeedcf2ba1a9508f9d6aba582a896a9f1ffa968eacea75caf822a7a63ba34015ea5aacb1188883ad2a3b1832371fe5bc621426d1ed0a4a99702cc1b6912a1e717d29135753208165b9cdbae2ed9dc7358f0ebadde0b727f27feeb744ddcc536cbae315c7d1fe1399562ba6824840bd2951680f6f2f9a6a8346962a350845ffa0d829e4f79adc287906943408e6df3c391e97ba48db0a5adbfd03aac93df8866fb010aec0e92bed1fe39af169d2a466f0db6f3d9436a7d55fc30511d00e10000c95265b2bd83d64a532869d701723fedcbada1ee7baa5b6a686b50f0937f778af083e055f6138a757ebd0ed91124a6b244f9acf41ac5d73a008364e0606a594817031fc2f52c8785fe0721719b3d654026c6ea08b83b5703dad844ceb201ddeb6dc5f6a903792283c42efc54fa84323afc4c10eff462c8843187f1dd48ef3fa293774d582956ff0f40b10ca94f6feeb2893c17888e1cdba94a6ea80c33ead5722c3293a493f1479531dd88261458f40d31fe8df15efaaeea831555877f9538d6ee6ba65893ff1f908ba7554ba583fef3ec7932f5954f31a878e2fae6691d1aee1da02ba516467df3e7d1daac43738012e4fee18a22da19fcdb4c2890cda1f96b952511e3a69d694d625e0b2f808890205f3a6da2819d2f9e77c7c64affa54fec0136cbafa5f6f096753b639a924599c1f69219927ea5301fff0a6063d427f0688430754c02180d61542c2571f983e9673560000000000000000005a7b57f03ca91a01ba2e30ca99e8ebc15ecb4d91675767999d146aef77997e344e61482808c02b04d086f737a159d7e0c6e4d81ad64a8bbca48568325b2969e2b15f36b788bce5ccdbaf75c94cb93499f6947a967a7bce14c6de4e7c0660d80010f5c653d22d490cba8c2a4ab595bf4238f18ca428dafc7ac96d404607a0000000051a2104f22e6db5a62b5089c1b45282d38864daa3ae81d6b0968d1d2867b91b7d120617d12d91db2633d6864da40b54783a17aaeb6737c323f9f98e354cc98dcfe23ad01bd1c61563e69ffe1c2c73e16e1461173f359e93d2c5e424c17998809ec8f0232b3955e052a4cecd89008f70314a0bdec86f9b1eb93d491ec86a4555d89fe0120f64c62e8e3ed8bcb45202c3d4bbec8d722824c0ebca8db1ea4a003d2fbdc1f9be78537756ab5bbe4fe9af5d785d0128171c90d9900ce2532b0f9d01c4b45294fbba468df3e1b583cb4e62e754598e47df6bd06431c94bc5d047899fd219f448bf9189c65c9d91eda6b52a373803a9efe44f86909bc90addb7b9aee813df534aac4b3093c91b8068cd84990453f806694d461b76a58d88cf0f520310a1e80dc18cde9ad662eee077515d0a8811922929e085392ab3d1311b8243266d87047f601fa88a0da36b9f302e8262395174328f2482d14008de83070744f143fdec90ba5a82668d5fac114c13955ad6dca5db2231d8ba14c54c47ed04a4b4ace17e357e1d6432399f87a7a14245bbd796a090f3b247b95d37ff40a404bdad74bd20000000000000000000099fef7cd7af3ce64a92f95d89d125b1e641240d7e5e27a3d1f7684448c3e3822d617e205061298b939a191be4b48e169bde2cae3accc5bd40a2968b59c93d35f8e42366fdef9a2abae1cf01ce68abff28861aac8302d268569dd42e194e330c7aaa54ebbcefd23f21ce8153b9926e12e925cb56119df72c7533a48d028ad0c74e2a9478fa3be18a1a2b65079cc1c00000000000000f59dd19e8d525206c0a728cfd42193abe8130bc01a2d69841f3d7799ac04bdc590bb1c89b9c695f163e57343c9bfb59909433c9001c5f8b23e38534a538fc933cac6c2a92d038df638a0f226df9fb857bd414c2cd69985e8053e3dfa41614d7c74d04d8c2471041d17c730fad28395f8d4688898cd58b9d600c851626529bb58aa364b55e73f053450665e7b94ed1012fd7a8139166fd5e59c84f4ab279b1b99c028db4cb9680c8035f967db18de738844da7e260a830c1ffa49f5af3c15423a0e315acb82a3e89218cb314e68fda4d94aa1d815babc13b9fd336d205c5913ef67cf0216e2d81e6127bd9d7fab28800eaab2355992f8ce4cd38add4b272c0bee4076ca4847ffa691cf78fb7ec212bad3bef29f577ea7159b7f3025b3d977ff7c91024cf71126233cb8791c3c"], &(0x7f00000001c0)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0x0, 0x10, &(0x7f0000000000), 0xfffffffffffffd00}, 0x48) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000100)={0xffffffffffffffff, 0xffffffffffffffff}) getsockopt$sock_cred(r6, 0x1, 0x11, &(0x7f0000001fc0)={0x0}, &(0x7f0000002000)=0xc) sendmmsg$unix(r5, &(0x7f0000001d40)=[{{0x0, 0x0, &(0x7f0000000e40)=[{&(0x7f0000000240)="af", 0x1}], 0x1}}, {{0x0, 0x0, 0x0, 0x0, &(0x7f00000014c0)=[@cred={{0x1c, 0x1, 0x2, {r7}}}, @rights={{0x14, 0x1, 0x1, [r5]}}], 0x38}}], 0x2, 0x801) bpf$BPF_LINK_CREATE_XDP(0x1c, &(0x7f0000000180)={r4, 0x0, 0x30, 0x2d, @void}, 0x10) ioctl$sock_ipv4_tunnel_SIOCDELTUNNEL(0xffffffffffffffff, 0x89f2, &(0x7f00000001c0)={'tunl0\x00', &(0x7f0000000380)={'gretap0\x00', 0x0, 0x7, 0x48, 0x7, 0x0, {{0xa, 0x4, 0x1, 0x3, 0x28, 0x64, 0x0, 0x8, 0x29, 0x0, @dev={0xac, 0x14, 0x14, 0xc}, @private=0xa010101, {[@cipso={0x86, 0xa, 0x0, [{0x5, 0x4, "749d"}]}, @cipso={0x86, 0xa, 0x2, [{0x1, 0x4, "b3ce"}]}]}}}}}) r8 = socket$inet6_udplite(0xa, 0x2, 0x88) r9 = socket(0x2a, 0x2, 0x0) getsockname$packet(r9, &(0x7f0000000200)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000001480)=0x14) r11 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r11, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000540)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a20000000000a03000000000000000000030000000900010073797a30000000005c000000030a03000000000000001700030000000900030073797a30000000000900010073797a300000000014000480080002400000000008000140000000001c0008800c00024000000000000000000c000140000000000000000014000000110001"], 0xa4}}, 0x0) r12 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r12, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000540)=ANY=[], 0xcc}}, 0x0) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000180)=@newqdisc={0x24, 0x24, 0x1, 0x0, 0x0, {0x0, 0x0, 0x0, r10, {0xe}, {0xffff, 0xffff}, {0x0, 0xfff1}}}, 0x24}}, 0x0) ioctl$sock_ipv6_tunnel_SIOCGETTUNNEL(r8, 0x89f0, &(0x7f0000000480)={'ip6tnl0\x00', &(0x7f0000000400)={'syztnl1\x00', r10, 0x2f, 0x12, 0x0, 0xfff, 0x44, @initdev={0xfe, 0x88, '\x00', 0x1, 0x0}, @private1, 0x80, 0x10, 0x200, 0x4f}}) sendmsg$kcm(r3, &(0x7f0000000600)={0x0, 0x0, &(0x7f0000000000)=[{&(0x7f0000000300)="2e00000011008188040f80ec59acbc0413a181b230000000000100000010e61e0e0027000f00000000800200121f", 0x2e}], 0x1}, 0x0) 566.062568ms ago: executing program 6 (id=8227): r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$ieee802154(&(0x7f0000000780), r0) sendmsg$IEEE802154_LLSEC_DEL_KEY(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000ac0)={&(0x7f0000000a80)={0x14, r1, 0x1, 0x70bd26, 0x25dfdbfd}, 0x14}, 0x1, 0x0, 0x0, 0x20000000}, 0xc800) 473.284574ms ago: executing program 5 (id=8228): r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000100)='blkio.bfq.io_wait_time\x00', 0x275a, 0x0) mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x0, 0x12, r0, 0x0) r1 = socket$can_raw(0x1d, 0x3, 0x1) setsockopt$CAN_RAW_JOIN_FILTERS(r1, 0x65, 0x6, &(0x7f0000000140), 0x4) r2 = socket$inet_udplite(0x2, 0x2, 0x88) setsockopt$IPT_SO_SET_REPLACE(r2, 0x4000000000000, 0x40, &(0x7f00000005c0)=@raw={'raw\x00', 0x4001, 0x3, 0x4a0, 0x0, 0x0, 0x148, 0x1f0, 0x148, 0x408, 0x240, 0x240, 0x408, 0x240, 0x7fffffe, 0x0, {[{{@ip={@private=0xa010102, @local, 0x0, 0xff000000, 'ip6tnl0\x00', 'wlan1\x00', {}, {}, 0x88, 0x3, 0x10}, 0x0, 0x190, 0x1f0, 0x0, {}, [@inet=@rpfilter={{0x28}, {0x6}}, @common=@inet=@recent0={{0xf8}, {0x0, 0x6, 0x1, 0x1, 'syz1\x00', 0xc}}]}, @common=@inet=@HMARK={0x60, 'HMARK\x00', 0x0, {@ipv4=@initdev={0xac, 0x1e, 0x1, 0x0}, [0xffffff00, 0xffffff00, 0x0, 0xffffffff], 0x4e22, 0x4e22, 0x4e20, 0x4e23, 0x8, 0x2, 0x5f4a, 0x100, 0x2}}}, {{@ip={@remote, @multicast1, 0xff000000, 0xffffff00, 'tunl0\x00', 'pimreg1\x00', {}, {0xff}, 0x84, 0x0, 0x60}, 0x0, 0x1b8, 0x218, 0x0, {}, [@common=@inet=@multiport={{0x50}, {0x0, 0x6, [0x4e20, 0x4e24, 0x4e24, 0x4e23, 0x4e22, 0x4e21, 0x4e20, 0x4e24, 0x4e23, 0x4e21, 0x4e20, 0x4e22, 0x4e20, 0x4e22, 0x4e23], [0x1, 0x1, 0x0, 0x0, 0x0, 0x7, 0x0, 0x1, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1]}}, @common=@inet=@recent0={{0xf8}, {0x4, 0x3, 0x1, 0x1, 'syz1\x00', 0x5}}]}, @common=@SET={0x60, 'SET\x00', 0x0, {{0x2, [0x1, 0x1, 0x3, 0x1, 0x5, 0x1], 0x3}, {0x1, [0x1, 0x2, 0x7, 0x1, 0x0, 0x4]}}}}], {{'\x00', 0x0, 0x70, 0x98}, {0x28}}}}, 0x500) r3 = accept4$netrom(r0, 0x0, &(0x7f0000000000), 0x80000) ioctl$sock_netrom_SIOCADDRT(r3, 0x890b, &(0x7f0000000040)={0x1, @bcast, @netrom={'nr', 0x0}, 0x6, 'syz1\x00', @rose={0xbb, 0xbb, 0xbb, 0x1, 0x0}, 0x1, 0x7, [@rose={0xbb, 0xbb, 0xbb, 0x1, 0x0}, @null, @netrom={0xbb, 0xbb, 0xbb, 0xbb, 0xbb, 0x0, 0x0}, @bcast, @netrom={0xbb, 0xbb, 0xbb, 0xbb, 0xbb, 0x0, 0x0}, @remote={0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0x0}, @bcast, @null]}) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000600)={0x11, 0x3, &(0x7f0000000140)=ANY=[@ANYBLOB="620ac4ff00ffffffd41064000000000095"], &(0x7f0000000480)='GPL\x00', 0x0, 0x0, 0x0, 0x40f00, 0x21, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0xfffffffc}, 0x94) 472.267728ms ago: executing program 6 (id=8229): r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='cgroup.controllers\x00', 0x275a, 0x0) mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000040)='./cgroup.cpu/syz0\x00', 0x1ff) write$tun(r0, &(0x7f0000000000)=ANY=[], 0x38) r1 = socket$inet_tcp(0x2, 0x1, 0x0) ioctl$sock_inet_SIOCSARP(r1, 0x8953, &(0x7f0000000180)={{0x2, 0x0, @empty}, {}, 0x24, {0x2, 0x0, @loopback}, 'syzkaller0\x00'}) mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x1, 0x10012, r0, 0x0) openat$tun(0xffffffffffffff9c, &(0x7f0000000000), 0x4000, 0x0) 427.047003ms ago: executing program 4 (id=8230): bpf$PROG_LOAD(0x5, &(0x7f00000054c0)={0x2, 0x16, &(0x7f0000000800)=ANY=[@ANYBLOB="611234000000000061134c0000000000bf3000000000000015000200000000103d030100000000009500000000000000bc26080000000000bf67000000000000070300000fff07006702000003000000160600000ee600f0bf050000000000000f650000000000006507f4ff02000000070700004c0040001f75000000000000bf54000000000000070500000300f909ad430100000000009500000000000000050000000000000095000000000000004d9bd591d568253e9988431ec068e3a82983d58719d72183f2cb7f43dd55788be820b236dcb695dbfd737cbf719506d2d6b05fe70305865050df26469fac5202d6293c3d5e11f4f83e7455baeeba4f"], &(0x7f0000000100)='GPL\x00'}, 0x48) r0 = socket$l2tp6(0xa, 0x2, 0x73) r1 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r1, &(0x7f0000000480)={0x0, 0x0, &(0x7f0000001f40)={&(0x7f00000004c0)=ANY=[@ANYBLOB="fc000000190001002dbd70000300000064010102000000000000000000000000fc000000000000000000000000000000fffd0000000000000a00000400000000", @ANYRES32=0x0, @ANYRES32, @ANYBLOB="00000000000000000c00000000000000000000000000000000002000000000000000000000000000ffffffffffffffefcb0000000000000000000000000000000000000000000000000a000000000000feffffffff7f40000200000000000000ae0f00000000000001"], 0xfc}}, 0x0) sendmsg$inet6(r0, &(0x7f0000000440)={&(0x7f0000000300)={0xa, 0x4e24, 0xffffffff, @mcast1, 0x10000}, 0x1c, 0x0}, 0x48814) 310.873327ms ago: executing program 1 (id=8231): r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r1, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000010c0)={{0x14}, [@NFT_MSG_NEWTABLE={0x20, 0x0, 0xa, 0x101, 0x0, 0x0, {0x1}, [@NFTA_TABLE_NAME={0x9, 0x1, 'syz0\x00'}]}, @NFT_MSG_NEWCHAIN={0x34, 0x3, 0xa, 0x401, 0x0, 0x0, {0x1, 0x0, 0x1}, [@NFTA_CHAIN_NAME={0x9, 0x3, 'syz2\x00'}, @NFTA_CHAIN_FLAGS={0x8, 0xa, 0x1, 0x0, 0x2}, @NFTA_CHAIN_TABLE={0x9, 0x1, 'syz0\x00'}]}], {0x14, 0x11, 0x1, 0x0, 0x0, {0x7}}}, 0x7c}, 0x1, 0x0, 0x0, 0x8040}, 0x0) r2 = syz_genetlink_get_family_id$ethtool(&(0x7f0000000240), 0xffffffffffffffff) sendmsg$ETHTOOL_MSG_LINKMODES_SET(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000140)={0x34, r2, 0x1, 0x0, 0x0, {}, [@ETHTOOL_A_LINKMODES_HEADER={0x18, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'syz_tun\x00'}]}, @ETHTOOL_A_LINKMODES_DUPLEX={0x5, 0x6, 0x1}]}, 0x34}}, 0x0) r3 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000040), r0) r4 = socket$nl_netfilter(0x10, 0x3, 0xc) r5 = socket$inet6_sctp(0xa, 0x5, 0x84) setsockopt$inet_sctp6_SCTP_PEER_ADDR_PARAMS(r5, 0x84, 0x9, &(0x7f0000000680)={0x0, @in6={{0xa, 0x4e24, 0x3, @remote, 0x3}}, 0x4e, 0x6, 0x503, 0x3, 0x414d6714bf78e175, 0x80000001, 0x3}, 0x9c) r6 = socket$nl_generic(0x10, 0x3, 0x10) r7 = syz_genetlink_get_family_id$nl80211(&(0x7f00000000c0), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r4, 0x8933, &(0x7f00000004c0)={'wlan0\x00', 0x0}) sendmsg$NL80211_CMD_FRAME(r6, &(0x7f00000007c0)={0x0, 0x0, &(0x7f0000000780)={&(0x7f0000000000)={0x4c, r7, 0x5, 0x70bd2b, 0x25dfdbff, {{}, {@val={0x8, 0x3, r8}, @void}}, [@NL80211_ATTR_CSA_C_OFFSETS_TX={0x8, 0xcd, [0x5, 0x3]}, @NL80211_ATTR_FRAME={0x26, 0x33, @auth={{{0x0, 0x0, 0xb, 0x0, 0x0, 0x1, 0x1, 0x0, 0x1, 0x0, 0x1}, {0x6}, @device_a, @broadcast, @random="6ba9f01467de", {0x4, 0xcdc}, @value=@ver_80211n={0x0, 0x98b, 0x2, 0x1, 0x0, 0x1, 0x0, 0x0, 0x1}}, 0x8, 0x10, 0x43, @void}}]}, 0x4c}}, 0x20000800) sendmsg$NL80211_CMD_PROBE_MESH_LINK(r0, &(0x7f0000000280)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x2000000}, 0xc, &(0x7f0000000200)={&(0x7f0000000180)={0x64, r3, 0x300, 0x70bd25, 0x25dfdbfc, {{}, {@val={0x8, 0x3, r8}, @void}}, [@NL80211_ATTR_MAC={0xa, 0x6, @device_b}, @NL80211_ATTR_FRAME={0x3a, 0x33, @mgmt_frame=@action={{{0x0, 0x0, 0xd, 0x0, 0x0, 0x0, 0x0, 0x1, 0x1}, {0x1}, @device_a, @broadcast, @random="a07711760cb2", {0xe, 0xffb}}, @tdls_chsw_resp={0xc, 0x6, {0x41, {0x65, 0x12, {@from_mac=@device_b, @device_b, @device_b}}, {0x68, 0x4, {0xfffd, 0xfec5}}}}}}]}, 0x64}, 0x1, 0x0, 0x0, 0x20008800}, 0x81) 309.052849ms ago: executing program 6 (id=8232): socket$kcm(0x10, 0x2, 0x0) r0 = socket$inet(0x2, 0x4000000000000001, 0x0) setsockopt$inet_tcp_int(r0, 0x6, 0x80000000000002, &(0x7f00000004c0)=0x79, 0x4) bind$inet(r0, &(0x7f0000000080)={0x2, 0x4e23, @multicast1}, 0x10) setsockopt$SO_ATTACH_FILTER(r0, 0x1, 0x1a, &(0x7f0000000000)={0x1, &(0x7f0000000280)=[{0x16, 0xfa, 0x0, 0xe4}]}, 0x10) sendto$inet(r0, 0x0, 0x0, 0x200007fd, &(0x7f0000e68000)={0x2, 0x4e23, @local}, 0x10) setsockopt$inet_tcp_TCP_CONGESTION(r0, 0x6, 0xd, &(0x7f0000000100)='bbr', 0x3) sendmmsg$inet(r0, &(0x7f00000001c0)=[{{0x0, 0x0, &(0x7f0000001dc0)=[{&(0x7f0000000140)="84f8a9848519def38491bbc4173c3c6f357d0272b7319130feaab952ac4703cad04be68907e50e997fc26e0000ea4feb931647fc5393de25000000000000000000", 0x41}, {&(0x7f0000000e80)="44900000000056ee66c372f3105eb186dd8062fad2d5b5bfb0ba06f274a8d026bd209da8ffa6a26e3b3f8075704a9d0ef9aff7f1e7db24609f02d34e76992c9df9fe6888c6c9a4825c6223be6ac54536025af1dea54e527c68b0ff250261953f2da79a78104c2d9e7b16ed86b124945aa9ab7581ebd385fb61d442035db81e18c2d2462d0bb25fff9d3b1ce90b597992b2a4d541611ce77f58dce7c9500118229e7cdf4ca7f6adca92c73d97ce54164c1942b2568635bec8e020b41fb2f8000000000000000000000000000000001c8a9f7956583e26f6f0edc415851d0b8305fe66c2b7c114e3712d87744938848f24a13cb604000000000000000000000000000000c7aa5035897b20a6c23f1fc4af2990c07f784b985a3de7740bd33848702930", 0x122}, {&(0x7f00000003c0)="641a6a2b863c0dd898013a3f97a834ebb75a925ab48c844221841a232932fc2e37e327de21450df098c113e179a0", 0x2e}, {&(0x7f0000000ac0)="985e44efeabe001cabcf3d8673c3a254a9a2d3197970cb347b70a243bf77139a94bc3ae91684aaf7b7dff691deb8f8aef2d915fb3a0794a9a9b431a819bca6122c350637808dde804a048fd8696e524b2934126c443ce93d82e931eb9918e6c0827686e59209d2e02c9210fd8048f04ad6c48b3072092c483271361816bf21afb8473a064f1988536d4b5888807b3aaafa", 0x91}], 0x4}}, {{0x0, 0x0, &(0x7f0000000500)=[{&(0x7f0000000fc0)="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", 0x124}], 0x1}}, {{0x0, 0x0, &(0x7f0000000b80)=[{&(0x7f0000000640)="42e013913edbeb683c44e18a52b5a2462064ddd92caaba941de80d06047dedb7eeeff3a27eacf4c416b6979d6c918608807c44d01535dbaab3b390086e4fd43c6b5931187023646d6beac2340fdc7a0d81214ac76a818f64d287311e8828dfd3e3dd67efdb129a6e52745d1540e570891f6bf411cc16a18c4d34e522a1f003498f1a03ea1f8828b6c902286c71a9bc21923972dacfa74fef6a0fd3267e599c1dd33dff5d7b28f134bda4a29962fd5daa4fc9c5", 0xb3}, {&(0x7f00000002c0)="b1155498aa147d5345bf7f28767cb0160e43a397bd7570c1d12d3e06a6334296c872c191e6e2b68a08bd78c4988dcf59614cafcfa96f99140ac9f7193e8998f0993fb76c6481e13e3b648c286c934fe1c0fe868869f393b0f0373e25b390c5127c8952ea553daf116c8957ae988f8e6fa82216fa8f80a88894860903df4f387720a7d6657034ec7e335badeb31c379c1ebdd173d1971bdd9b1bfd1cad28c11471545a1e6d377a747038116bc1371530008d9a91ad0042640dd2334974286a10fa8", 0xc1}, {&(0x7f0000000840)="22e7c6de6dbd521cbafc70e7baa415b54b2e473d78fffa3e6827ba5a3c051f58c5310b9651318d54dc812f44b3b6434d719dcad2a4bf1b70ba2b23ec38a52c74bf9f16d82be8ad7b46d8f58c4c21bc359898520636758637eca6feef25aeb6eed685e7da07fd105a1a18cec1bd9b09b56429181939521b30390d4a79e65522d4e1bce0c56d99526fb4b69fb1e53f5f8027c551eed9904c6ce31f254988ecb0184c27653aad4dd2938cc027130ee37b6ca8d720f453e588067dc98c22dc210fc20e789fb3", 0xc4}, {&(0x7f0000000940)="ddb67efee812168dde248906e99e3af8ceeb3becaede5a5614565c375ce0cb", 0x1f}], 0x4}}], 0x3, 0x2090) setsockopt$sock_int(r0, 0x1, 0x8, &(0x7f0000000600)=0xdfa, 0x4) r1 = socket$nl_route(0x10, 0x3, 0x0) r2 = socket(0x1e, 0x2, 0x0) setsockopt$TIPC_DEST_DROPPABLE(r2, 0x10f, 0x81, &(0x7f0000000480), 0x4) sendmsg$tipc(r2, &(0x7f0000000200)={&(0x7f0000000000)=@nameseq={0x1e, 0x1, 0x0, {0x1, 0x0, 0x8}}, 0x10, &(0x7f0000000080)=[{&(0x7f0000000580)="0087", 0x2}], 0x1}, 0x0) recvmmsg(r2, &(0x7f00000070c0)=[{{0x0, 0x0, &(0x7f0000000b00)=[{&(0x7f0000000a40)=""/188, 0xbc}], 0x1, &(0x7f0000000500)=""/87, 0x57}}], 0x1, 0x0, 0x0) bpf$MAP_UPDATE_BATCH(0x1a, &(0x7f0000000000)={0x0, 0x0, 0x0, &(0x7f0000010040), 0x0, 0xffffffffffffffff, 0x4}, 0x38) r3 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000940)='hugetlb.2MB.usage_in_bytes\x00', 0x26e1, 0x0) socket$inet_sctp(0x2, 0x1, 0x84) ioctl$SIOCSIFHWADDR(r3, 0x8b34, &(0x7f0000000000)={'wlan1\x00', @random="000500000020"}) r4 = socket$tipc(0x1e, 0x4, 0x0) setsockopt$TIPC_GROUP_JOIN(r4, 0x10f, 0x87, &(0x7f0000000040)={0x41, 0x83f}, 0x10) r5 = socket$tipc(0x1e, 0x5, 0x0) sendmsg$tipc(r5, &(0x7f0000000380)={&(0x7f0000000140)=@nameseq={0x1e, 0x1, 0x0, {0x42, 0x3, 0x4}}, 0x10, 0x0}, 0x0) r6 = socket(0x11, 0x3, 0x0) r7 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r7, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000003c0)=ANY=[@ANYBLOB="3c020000190001000000000000000000fc020000000000000000000000000000ac1e000100000000000000000000000000000000000000000a00008088000000", @ANYRES32=0x0, @ANYRES32=0x0, @ANYBLOB="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"], 0x23c}}, 0x4004000) ioctl$sock_SIOCGIFINDEX(r6, 0x8933, &(0x7f00000001c0)={'ip6gretap0\x00', 0x0}) bind$packet(r6, &(0x7f0000000180)={0x11, 0x0, r8, 0x1, 0x0, 0x6, @remote}, 0x14) sendmsg$nl_route(r1, &(0x7f0000000440)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x40000}, 0xc, &(0x7f0000000400)={&(0x7f00000000c0)=ANY=[@ANYBLOB="2c0000001800020028bd06000000df25802010fffc00c8090023000008001e000400000008000400", @ANYRES32=r8, @ANYBLOB], 0x2c}, 0x1, 0x0, 0x0, 0x80}, 0x8000) sendto$inet(r0, &(0x7f0000000580)="17", 0x59a, 0x10008095, 0x0, 0x0) 307.595845ms ago: executing program 5 (id=8233): mmap(&(0x7f0000000000/0x400000)=nil, 0x400000, 0x1, 0x41071, 0xffffffffffffffff, 0x0) (async) r0 = socket(0x1e, 0x4, 0x0) setsockopt$packet_tx_ring(r0, 0x10f, 0x87, &(0x7f0000000440)=@req={0x3fc}, 0x10) (async) bpf$PROG_LOAD_XDP(0x5, &(0x7f00000000c0)={0x11, 0x4, &(0x7f0000000080)=@framed={{}, [@ldst={0x2, 0x2, 0x3, 0x1, 0x0, 0x9a}]}, &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0xf}, 0x90) 284.378183ms ago: executing program 4 (id=8234): r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000000), 0x40241, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000200)={'syzkaller1\x00', 0xc201}) bpf$PROG_LOAD(0x5, &(0x7f0000000180)={0xe, 0x4, &(0x7f0000000040)=@framed={{}, [@ldst={0x1, 0x2, 0x3, 0x0, 0x1, 0x31}]}, &(0x7f0000000100)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @sk_skb, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) r1 = socket(0x2d, 0x2, 0x0) ioctl$sock_kcm_SIOCKCMCLONE(r1, 0x89e3, &(0x7f0000000000)={r1}) setsockopt$inet6_tcp_TCP_REPAIR_QUEUE(r1, 0x6, 0x14, &(0x7f0000000040)=0x1, 0x4) r3 = socket$kcm(0x2, 0xa, 0x2) ioctl$SIOCSIFHWADDR(r3, 0x8914, &(0x7f0000000180)={'syzkaller1\x00', @link_local}) mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000)='./cgroup.cpu/syz0\x00', 0x1ff) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000680)={0xffffffffffffffff, 0xffffffffffffffff}) setsockopt$sock_attach_bpf(r5, 0x1, 0x4c, &(0x7f0000000000), 0x4) sendmsg$inet(r4, &(0x7f0000000140)={0x0, 0x0, 0x0}, 0x0) recvmsg$unix(r5, &(0x7f0000000080)={0x0, 0x0, 0x0, 0x0, &(0x7f0000000300)=[@rights={{0x14, 0x1, 0x1, [0xffffffffffffffff]}}], 0x18}, 0x2000) ioctl$TUNSETNOCSUM(r6, 0x80087601, 0xfffffffffffffffe) r7 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000), 0x200002, 0x0) r8 = openat$cgroup_int(r7, &(0x7f0000000080)='hugetlb.2MB.rsvd.limit_in_bytes\x00', 0x2, 0x0) write$cgroup_subtree(r8, &(0x7f0000000180)=ANY=[@ANYBLOB='-1'], 0x27) bpf$PROG_LOAD(0x5, &(0x7f0000001e00)={0x3, 0x16, &(0x7f0000000280)=ANY=[@ANYBLOB="7912b8000000000061138c0000000000bf2000000000000015000000080063033d030100000000009500003a000000006916000000000000bf6700000000000066060500fcff03006706000002"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @sched_cls}, 0x94) write$tun(r0, &(0x7f0000000280)={@val={0x6f01, 0x800}, @val={0x1, 0x0, 0x27, 0x0, 0x27}, @mpls={[], @ipv4=@tcp={{0x6, 0x4, 0x0, 0x0, 0x3f, 0x0, 0x0, 0x0, 0x84, 0x0, @empty=0x3fffff20, @local}, {{0x0, 0x0, 0x41424344, 0x41424344, 0x0, 0x5, 0xb, 0x0, 0x0, 0x0, 0x18, {[@window={0x9, 0xfffffffffffffec4}, @timestamp={0x5, 0x2, 0x7ffffff, 0x1008}, @generic={0x0, 0x2, "d58838068b91"}]}}}}}}, 0xfd6c) getsockopt$inet_pktinfo(r2, 0x0, 0x8, &(0x7f00000000c0)={0x0, @local, @multicast2}, &(0x7f0000000100)=0xc) ioctl$sock_ipv6_tunnel_SIOCGET6RD(r2, 0x89f8, &(0x7f00000003c0)={'gretap0\x00', &(0x7f0000000300)={'gre0\x00', r9, 0x700, 0x700, 0x3, 0x0, {{0x1c, 0x4, 0x2, 0x0, 0x70, 0x68, 0x0, 0x2, 0x29, 0x0, @multicast2, @dev={0xac, 0x14, 0x14, 0x3d}, {[@timestamp={0x44, 0x14, 0x99, 0x0, 0x3, [0x7, 0x7, 0x5, 0x7]}, @lsrr={0x83, 0x7, 0xf, [@rand_addr=0x64010102]}, @timestamp_prespec={0x44, 0x1c, 0x77, 0x3, 0xc, [{@private=0xa010101, 0x1}, {@multicast2, 0x8}, {@empty, 0x5}]}, @lsrr={0x83, 0xf, 0x2d, [@loopback, @local, @multicast1]}, @ssrr={0x89, 0xb, 0x31, [@empty, @rand_addr=0x64010100]}, @end, @generic={0x83, 0xa, "215713e9e4289b37"}]}}}}}) 180.172089ms ago: executing program 1 (id=8235): r0 = socket$igmp6(0xa, 0x3, 0x2) setsockopt$inet6_group_source_req(r0, 0x29, 0x2e, &(0x7f00000001c0)={0x0, {{0xa, 0x0, 0xdb, @mcast1={0xff, 0xf}}}, {{0xa, 0x0, 0x0, @private0}}}, 0x108) (async, rerun: 32) r1 = socket$nl_generic(0x10, 0x3, 0x10) (rerun: 32) sendmsg$nl_generic(r1, &(0x7f0000002780)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000000)={0x44, 0x40, 0x1, 0x7fffc, 0x4, {0x1}, [@nested={0x4, 0x48}, @nested={0x20, 0x1, 0x0, 0x1, [@nested={0x1c, 0x10, 0x0, 0x1, [@nested={0x18, 0x10, 0x0, 0x1, [@typed={0x14, 0x83, 0x0, 0x0, @ipv6=@private2={0xfc, 0x2, '\x00', 0x1}}]}]}]}, @typed={0xc, 0x2, 0x0, 0x0, @u64}]}, 0x44}, 0x1, 0x0, 0x0, 0x2c2ee7df973b1f32}, 0x4008094) (async) setsockopt$inet6_group_source_req(r0, 0x29, 0x2f, &(0x7f00000001c0)={0x0, {{0xa, 0x0, 0x0, @mcast1={0xff, 0xf}}}, {{0xa, 0x0, 0x0, @private0}}}, 0x108) (async) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000040)={0x1f, 0x2, &(0x7f0000000100)=ANY=[@ANYBLOB="8500000066000000950000bef5aa0f7f3ae93e6b3c9de62dea26c2f751439859c92632ccca9130f28d5f7f532952ac9d0f4b4f4be2a21e470c42beccd4b18761eb17d5c7275e11bd2b221c6cfa099a6e19"], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x51}, 0x90) 122.831768ms ago: executing program 5 (id=8236): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) r1 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r1, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000014c0)=@newsa={0x154, 0x10, 0x1, 0x0, 0x0, {{@in6=@initdev={0xfe, 0x88, '\x00', 0x0, 0x0}, @in=@broadcast, 0x1000}, {@in, 0x0, 0x32}, @in6=@loopback, {}, {}, {}, 0x0, 0x0, 0x2, 0x0, 0x1}, [@algo_crypt={0x48, 0x2, {{'cbc(aes)\x00'}}}, @replay_esn_val={0x1c}]}, 0x154}}, 0x0) sendmsg$NFNL_MSG_CTHELPER_NEW(r0, &(0x7f0000000480)={0x0, 0x0, &(0x7f0000000440)={&(0x7f0000000340)={0x68, 0x0, 0x9, 0x3, 0x0, 0x0, {}, [@NFCTH_POLICY={0xc, 0x4, 0x0, 0x1, {0x8}}, @NFCTH_NAME={0x9, 0x1, 'syz0\x00'}, @NFCTH_TUPLE={0x3c, 0x2, [@CTA_TUPLE_IP={0x2c, 0x1, 0x0, 0x1, @ipv6={{0x14, 0x3, @empty}, {0x14, 0x4, @local}}}, @CTA_TUPLE_PROTO={0xc, 0x2, 0x0, 0x1, {0x5}}]}]}, 0x68}}, 0x0) socket$nl_netfilter(0x10, 0x3, 0xc) (async) socket$nl_xfrm(0x10, 0x3, 0x6) (async) sendmsg$nl_xfrm(r1, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000014c0)=@newsa={0x154, 0x10, 0x1, 0x0, 0x0, {{@in6=@initdev={0xfe, 0x88, '\x00', 0x0, 0x0}, @in=@broadcast, 0x1000}, {@in, 0x0, 0x32}, @in6=@loopback, {}, {}, {}, 0x0, 0x0, 0x2, 0x0, 0x1}, [@algo_crypt={0x48, 0x2, {{'cbc(aes)\x00'}}}, @replay_esn_val={0x1c}]}, 0x154}}, 0x0) (async) sendmsg$NFNL_MSG_CTHELPER_NEW(r0, &(0x7f0000000480)={0x0, 0x0, &(0x7f0000000440)={&(0x7f0000000340)={0x68, 0x0, 0x9, 0x3, 0x0, 0x0, {}, [@NFCTH_POLICY={0xc, 0x4, 0x0, 0x1, {0x8}}, @NFCTH_NAME={0x9, 0x1, 'syz0\x00'}, @NFCTH_TUPLE={0x3c, 0x2, [@CTA_TUPLE_IP={0x2c, 0x1, 0x0, 0x1, @ipv6={{0x14, 0x3, @empty}, {0x14, 0x4, @local}}}, @CTA_TUPLE_PROTO={0xc, 0x2, 0x0, 0x1, {0x5}}]}]}, 0x68}}, 0x0) (async) 121.96717ms ago: executing program 2 (id=8237): r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000007c0)={0x7, 0x4, &(0x7f0000000480)=ANY=[@ANYBLOB="1800000000fcffff00000000030800009c000100000000adb1ea2e035ed9e029"], &(0x7f00000005c0)='syzkaller\x00', 0x2}, 0x94) (async) r1 = socket$packet(0x11, 0x3, 0x300) (async) r2 = bpf$PROG_LOAD(0x5, &(0x7f0000000080)={0x1, 0xe, &(0x7f00000004c0)=ANY=[@ANYBLOB="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"], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0x0, 0x10, &(0x7f0000000340), 0xfffffffffffffe19}, 0x42) setsockopt$sock_attach_bpf(r1, 0x1, 0x32, &(0x7f00000008c0)=r2, 0x4) r3 = openat$tun(0xffffffffffffff9c, &(0x7f0000000000), 0x40241, 0x0) ioctl$TUNSETIFF(r3, 0x400454ca, &(0x7f0000000200)={'syzkaller1\x00', 0xc201}) r4 = socket$kcm(0x2, 0xa, 0x2) ioctl$SIOCSIFHWADDR(r4, 0x8914, &(0x7f0000000180)={'syzkaller1\x00', @link_local}) (async) write$tun(r3, &(0x7f0000000240)=ANY=[@ANYBLOB="000086dd00001100"], 0xfce) ioctl$sock_kcm_SIOCKCMCLONE(0xffffffffffffffff, 0x89e2, &(0x7f0000000000)={0xffffffffffffffff}) r6 = openat$tun(0xffffffffffffff9c, &(0x7f0000000140), 0x0, 0x0) ioctl$TUNSETIFF(r6, 0x400454ca, &(0x7f00000000c0)={'syzkaller1\x00', 0x4c02}) readv(r6, &(0x7f00000001c0)=[{&(0x7f0000001400)=""/227, 0x10}], 0x4) (async, rerun: 32) r7 = socket$kcm(0x2, 0xa, 0x2) (rerun: 32) ioctl$SIOCSIFHWADDR(r7, 0x8914, &(0x7f0000000000)={'syzkaller1\x00', @link_local}) (async) setsockopt$inet_tcp_TCP_CONGESTION(r5, 0x6, 0xd, &(0x7f0000000180)='cubic', 0x5) socket$packet(0x11, 0x3, 0x300) r8 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='memory.events\x00', 0x275a, 0x0) mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x2000001, 0x12, r8, 0x0) (async) r9 = gettid() socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000540)={0xffffffffffffffff, 0xffffffffffffffff}) getsockopt$sock_cred(r10, 0x1, 0x11, &(0x7f0000000380)={0x0, 0x0, 0x0}, &(0x7f00000003c0)=0xc) r14 = syz_open_procfs$namespace(r11, &(0x7f0000001780)='ns/ipc\x00') (async) r15 = getpid() sendmmsg$unix(r10, &(0x7f0000001b00)=[{{0x0, 0x0, 0x0, 0x0, &(0x7f0000000400)=[@cred={{0x1c, 0x1, 0x2, {r11, 0x0, 0xee00}}}], 0x20, 0x4044014}}, {{0x0, 0x0, 0x0, 0x0, &(0x7f0000001bc0)=[@cred={{0x1c, 0x1, 0x2, {r11, 0x0, r13}}}, @cred={{0x1c, 0x1, 0x2, {r15, r12}}}, @rights={{0x18, 0x1, 0x1, [r14, 0xffffffffffffffff]}}], 0x58, 0x800}}], 0x2, 0x0) (async) setsockopt$sock_cred(r5, 0x1, 0x11, &(0x7f0000000200)={r9, 0x0, r13}, 0xc) (async, rerun: 32) ioctl$sock_ipv6_tunnel_SIOCADDTUNNEL(r0, 0x89f1, &(0x7f00000000c0)={'syztnl0\x00', &(0x7f0000000040)={'ip6tnl0\x00', 0x0, 0x4, 0x8, 0x13, 0x4, 0x8, @ipv4={'\x00', '\xff\xff', @rand_addr=0x64010102}, @mcast1, 0x2e77f3b97c5560df, 0x1, 0xdf, 0x6}}) (rerun: 32) bind$packet(r5, &(0x7f0000000100)={0x11, 0x18, r16, 0x1, 0x10, 0x6, @remote}, 0x14) 121.257438ms ago: executing program 6 (id=8238): r0 = socket$inet6(0xa, 0x6, 0x7) r1 = gettid() ioctl$sock_FIOSETOWN(r0, 0x8901, &(0x7f0000000000)=r1) getsockopt$IPT_SO_GET_REVISION_MATCH(r0, 0x0, 0x42, &(0x7f0000000040)={'NETMAP\x00'}, &(0x7f0000000080)=0x1e) r2 = openat$cgroup_procs(0xffffffffffffffff, &(0x7f00000000c0)='cgroup.threads\x00', 0x2, 0x0) r3 = gettid() write$cgroup_pid(r2, &(0x7f0000000100)=r3, 0x12) r4 = socket$nl_audit(0x10, 0x3, 0x9) sendmsg$AUDIT_SET(r4, &(0x7f0000000200)={&(0x7f0000000140)={0x10, 0x0, 0x0, 0x1000}, 0xc, &(0x7f00000001c0)={&(0x7f0000000180)={0x3c, 0x3e9, 0x100, 0x70bd2b, 0x25dfdbfb, {0x11, 0x1, 0x0, r3, 0x401, 0x4, 0xf75, 0x9, 0x0, 0x0, 0x6}, ["", "", "", "", "", "", ""]}, 0x3c}, 0x1, 0x0, 0x0, 0x4040}, 0x80) r5 = socket$netlink(0x10, 0x3, 0x4) r6 = syz_genetlink_get_family_id$devlink(&(0x7f0000000280), 0xffffffffffffffff) sendmsg$DEVLINK_CMD_PORT_SET(r5, &(0x7f0000000400)={&(0x7f0000000240)={0x10, 0x0, 0x0, 0x4000}, 0xc, &(0x7f00000003c0)={&(0x7f00000002c0)={0xc8, r6, 0x1, 0x70bd2d, 0x25dfdbfd, {}, [{{@pci={{0x8}, {0x11}}, {0x8, 0x3, 0x1}}, {0x6, 0x4, 0x1}}, {{@pci={{0x8}, {0x11}}, {0x8, 0x3, 0x3}}, {0x6, 0x4, 0x1}}, {{@nsim={{0xe}, {0xf, 0x2, {'netdevsim', 0x0}}}, {0x8, 0x3, 0x2}}, {0x6, 0x4, 0x2}}, {{@pci={{0x8}, {0x11}}, {0x8}}, {0x6, 0x4, 0x3}}]}, 0xc8}, 0x1, 0x0, 0x0, 0x800}, 0x91) r7 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000440)='./cgroup/syz1\x00', 0x200002, 0x0) r8 = socket$packet(0x11, 0x3, 0x300) setsockopt$inet_sctp_SCTP_HMAC_IDENT(r7, 0x84, 0x16, &(0x7f0000000480)={0x1, [0x5]}, 0x6) r9 = openat$tcp_mem(0xffffffffffffff9c, &(0x7f00000004c0)='/proc/sys/net/ipv4/tcp_wmem\x00', 0x1, 0x0) write$tcp_mem(r9, &(0x7f0000000500)={0x8, 0x20, 0x2, 0x20, 0x5}, 0x48) r10 = socket$qrtr(0x2a, 0x2, 0x0) bind$qrtr(r10, 0xffffffffffffffff, 0x0) ioctl$sock_SIOCGIFINDEX_80211(r8, 0x8933, &(0x7f00000005c0)={'wlan0\x00', 0x0}) sendmsg$NL80211_CMD_GET_SURVEY(r5, &(0x7f0000000680)={&(0x7f0000000580)={0x10, 0x0, 0x0, 0x10000000}, 0xc, &(0x7f0000000640)={&(0x7f0000000600)={0x28, 0x0, 0x200, 0x70bd2b, 0x25dfdbfe, {{}, {@val={0x8, 0x3, r11}, @val={0xc, 0x99, {0x6, 0x71}}}}, ["", "", "", ""]}, 0x28}, 0x1, 0x0, 0x0, 0x4048040}, 0x24000015) sendmsg$DEVLINK_CMD_RELOAD(r5, &(0x7f0000000800)={&(0x7f00000006c0)={0x10, 0x0, 0x0, 0x200000}, 0xc, &(0x7f00000007c0)={&(0x7f0000000700)={0xa4, r6, 0x200, 0x70bd28, 0x25dfdbfb, {}, [{@pci={{0x8}, {0x11}}, @DEVLINK_ATTR_NETNS_ID={0x8}}, {@pci={{0x8}, {0x11}}, @DEVLINK_ATTR_NETNS_PID={0x8, 0x8b, r3}}, {@pci={{0x8}, {0x11}}, @DEVLINK_ATTR_NETNS_ID={0x8, 0x8c, 0x3}}, {@pci={{0x8}, {0x11}}, @DEVLINK_ATTR_NETNS_PID={0x8, 0x8b, r1}}]}, 0xa4}, 0x1, 0x0, 0x0, 0x8000}, 0x80000) sendmsg$DEVLINK_CMD_PORT_GET(r5, &(0x7f00000009c0)={&(0x7f0000000840)={0x10, 0x0, 0x0, 0x1000}, 0xc, &(0x7f0000000980)={&(0x7f0000000880)={0xd0, r6, 0x100, 0x70bd26, 0x25dfdbfd, {}, [{{@pci={{0x8}, {0x11}}, {0x8}}}, {{@nsim={{0xe}, {0xf, 0x2, {'netdevsim', 0x0}}}, {0x8}}}, {{@pci={{0x8}, {0x11}}, {0x8}}}, {{@pci={{0x8}, {0x11}}, {0x8, 0x3, 0x2}}}, {{@nsim={{0xe}, {0xf, 0x2, {'netdevsim', 0x0}}}, {0x8, 0x3, 0x3}}}]}, 0xd0}, 0x1, 0x0, 0x0, 0x4008014}, 0x840) ioctl$sock_inet_udp_SIOCOUTQ(0xffffffffffffffff, 0x5411, &(0x7f0000000a00)) ioctl$sock_SIOCGPGRP(r10, 0x8904, &(0x7f0000000a40)) r12 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000ac0), r5) sendmsg$NL80211_CMD_REGISTER_FRAME(r5, &(0x7f0000000d00)={&(0x7f0000000a80)={0x10, 0x0, 0x0, 0x20}, 0xc, &(0x7f0000000cc0)={&(0x7f0000000b00)={0x190, r12, 0x302, 0x70bd29, 0x25dfdbfb, {{}, {@val={0x8, 0x3, r11}, @val={0xc, 0x99, {0x29e5, 0x45}}}}, [@NL80211_ATTR_FRAME_TYPE={0x6, 0x65, 0xd}, @NL80211_ATTR_FRAME_TYPE={0x6, 0x65, 0x1}, @NL80211_ATTR_FRAME_TYPE={0x6, 0x65, 0x2}, @NL80211_ATTR_FRAME_MATCH={0xe8, 0x5b, "7eb88c6c40c711aed520cd69b581efbbaa40d69881a305e025d5779a0cfa457002d3dc7586a6c99e63552f8b0ed21d5cea0afe42f7b34c315fa0c7ab134d8f172fb0e2ab578829da37bb574a40e51e4e808c98ae12a22d96fdfc5274f6471ad2ef8593bd52635b0de0d97db89b852214fa5d7c7939816ee5baae90e483263c99e9868eb82c744ebc2da416cb2cd5afd62c43ede34c73014090f7c53ec3a3783a869b65cf74633747890a39730efa24f75d7c90e98b851709b933c965f466e7aa94e514707b8b036c425b166c1decfa05d45ce6c3c00502af08b6d13bb818c6ade5134aa9"}, @NL80211_ATTR_FRAME_TYPE={0x6, 0x65, 0x3}, @NL80211_ATTR_FRAME_MATCH={0x60, 0x5b, "34d130d79a270aa76a2b394aa6edf7baca894dc02df37d7f4943a40205c8d09c0ce1f325b59ad0f7c64f9ce311fe6e1268a5051b3273fa3d2617df126524d22d94e4a9906382eb6c972abc8a9bba833ca54d09d5835a7969d1ca4377"}]}, 0x190}, 0x1, 0x0, 0x0, 0x8000}, 0x0) getsockopt$inet6_IPV6_IPSEC_POLICY(r0, 0x29, 0x22, &(0x7f0000000d40)={{{@in6=@dev, @in=@empty, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}, {{@in=@broadcast}}}, &(0x7f0000000e40)=0xe8) ioctl$SIOCAX25DELUID(0xffffffffffffffff, 0x89e2, &(0x7f0000000e80)={0x3, @netrom={0xbb, 0xbb, 0xbb, 0xbb, 0xbb, 0x0, 0x0}, r13}) setsockopt$CAN_RAW_FILTER(0xffffffffffffffff, 0x65, 0x1, &(0x7f0000000ec0)=[{{0x0, 0x0, 0x1, 0x1}, {0x1, 0x0, 0x0, 0x1}}], 0x8) 0s ago: executing program 5 (id=8239): r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000040), 0xc2300, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f00000000c0)={'syzkaller0\x00', 0x4000}) r1 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r1, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000c00)={0x28, 0x40, 0x107, 0x70bd2b, 0x25dfdbfe, {0x3, 0x7c}, [@nested={0x4, 0x1c2}, @nested={0xc, 0x1, 0x0, 0x1, [@nested={0x8, 0x10, 0x0, 0x1, [@nested={0x4, 0x141}]}]}, @typed={0x4, 0x8}]}, 0x28}, 0x1, 0x0, 0x0, 0x4c090}, 0xc000) syz_genetlink_get_family_id$ethtool(&(0x7f0000000140), r1) r2 = socket(0x10, 0x803, 0x0) ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) ioctl$TUNGETDEVNETNS(r0, 0x54e3, 0x0) sendmsg$nl_route_sched(r2, &(0x7f00000012c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000a40)=@newqdisc={0x38, 0x24, 0x4ee4e6a52ff56541, 0x70bd28, 0x25dfdbfc, {0x0, 0x0, 0x0, r3, {0x0, 0x6}, {0xffff, 0xffff}, {0x6}}, [@qdisc_kind_options=@q_fq_codel={{0xd}, {0x4}}]}, 0x38}}, 0x0) sendmsg$nl_route_sched(r2, &(0x7f0000006040)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000340)=@newtfilter={0x3c, 0x2c, 0xd27, 0x70bd25, 0x4, {0x0, 0x0, 0x0, r3, {0x4, 0x2}, {}, {0x1, 0xf}}, [@filter_kind_options=@f_basic={{0xa}, {0xc, 0x2, [@TCA_BASIC_CLASSID={0x4, 0x1, {0x3, 0x2}}]}}]}, 0x3c}}, 0x20040054) sendmsg$kcm(0xffffffffffffffff, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000900)=[{&(0x7f0000000280)="89000000120081ae08060cdc030000017f03e3f7000000006ee2ffca1b1f00ff0f00000000000050375ed08a56331dbf9ed78105001ad6e747033a0093b837dc6cc01e32efaec8c7a6ec00120c00030004080c00bdad01409bbc7a46e39a54cbbda812176679df069163ce955fed0009d78f0a947ee2b49e33538afaeb2713f450ebd010a20ff27fff", 0x89}], 0x1, 0x0, 0x0, 0x7}, 0x0) kernel console output (not intermixed with test programs): : IP tunnel dst address not specified [ 649.817417][T29772] netdevsim netdevsim0 netdevsim0: renamed from eth0 [ 649.859180][T29772] netdevsim netdevsim0 netdevsim1: renamed from eth1 [ 649.874965][T29772] netdevsim netdevsim0 netdevsim2: renamed from eth2 [ 649.887596][T29772] netdevsim netdevsim0 netdevsim3: renamed from eth3 [ 649.931604][T29892] xt_addrtype: ipv6 does not support BROADCAST matching [ 650.094880][T29772] 8021q: adding VLAN 0 to HW filter on device bond0 [ 650.105573][T29899] __nla_validate_parse: 6 callbacks suppressed [ 650.105592][T29899] netlink: 256 bytes leftover after parsing attributes in process `syz.1.6400'. [ 650.147714][T29772] 8021q: adding VLAN 0 to HW filter on device team0 [ 650.164815][ T12] bridge0: port 1(bridge_slave_0) entered blocking state [ 650.172104][ T12] bridge0: port 1(bridge_slave_0) entered forwarding state [ 650.194706][ T12] bridge0: port 2(bridge_slave_1) entered blocking state [ 650.202135][ T12] bridge0: port 2(bridge_slave_1) entered forwarding state [ 650.510763][T29772] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 650.579585][T29772] veth0_vlan: entered promiscuous mode [ 650.597635][T29772] veth1_vlan: entered promiscuous mode [ 650.648366][T29772] veth0_macvtap: entered promiscuous mode [ 650.672483][T29772] veth1_macvtap: entered promiscuous mode [ 650.703269][T29922] netlink: 'syz.4.6407': attribute type 2 has an invalid length. [ 650.719808][T29922] netlink: 188 bytes leftover after parsing attributes in process `syz.4.6407'. [ 650.720622][T29772] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 650.751398][T29772] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 650.766364][ T12] netdevsim netdevsim0 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 650.790477][ T12] netdevsim netdevsim0 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 650.822687][ T12] netdevsim netdevsim0 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 650.836453][ T12] netdevsim netdevsim0 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 650.851258][T29924] netlink: 'syz.2.6408': attribute type 13 has an invalid length. [ 650.855916][ T5833] Bluetooth: hci2: command tx timeout [ 651.005633][ T12] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 651.025787][ T12] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 651.166060][T29937] netlink: 36 bytes leftover after parsing attributes in process `syz.4.6411'. [ 651.188003][ T12] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 651.214046][ T12] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 651.334883][T29950] netlink: 36 bytes leftover after parsing attributes in process `syz.0.6365'. [ 651.352651][T29948] netlink: 'syz.2.6414': attribute type 23 has an invalid length. [ 651.653538][T29965] macvlan0: entered promiscuous mode [ 651.691622][ T5838] Bluetooth: hci3: unexpected cc 0x0c03 length: 249 > 1 [ 651.702267][ T5838] Bluetooth: hci3: unexpected cc 0x1003 length: 249 > 9 [ 651.713271][ T5838] Bluetooth: hci3: unexpected cc 0x1001 length: 249 > 9 [ 651.723576][ T5838] Bluetooth: hci3: unexpected cc 0x0c23 length: 249 > 4 [ 651.733124][ T5838] Bluetooth: hci3: unexpected cc 0x0c38 length: 249 > 2 [ 651.783851][T29968] vxcan1 speed is unknown, defaulting to 1000 [ 651.806053][T29971] netlink: 8 bytes leftover after parsing attributes in process `syz.1.6417'. [ 652.018956][T29973] xt_hashlimit: size too large, truncated to 1048576 [ 652.352801][T29968] lo speed is unknown, defaulting to 1000 [ 652.544873][T29983] netlink: 16 bytes leftover after parsing attributes in process `syz.2.6421'. [ 652.648190][T29968] chnl_net:caif_netlink_parms(): no params data found [ 652.719674][T29986] syzkaller0: entered promiscuous mode [ 652.725760][T29986] syzkaller0: entered allmulticast mode [ 652.755789][T29990] netlink: 28 bytes leftover after parsing attributes in process `syz.1.6424'. [ 652.884264][T29968] bridge0: port 1(bridge_slave_0) entered blocking state [ 652.891649][T29968] bridge0: port 1(bridge_slave_0) entered disabled state [ 652.899494][T29968] bridge_slave_0: entered allmulticast mode [ 652.907961][T29968] bridge_slave_0: entered promiscuous mode [ 652.917951][T29968] bridge0: port 2(bridge_slave_1) entered blocking state [ 652.926140][T29968] bridge0: port 2(bridge_slave_1) entered disabled state [ 652.932486][ T5833] Bluetooth: hci2: command tx timeout [ 652.936659][T29968] bridge_slave_1: entered allmulticast mode [ 652.947655][T29968] bridge_slave_1: entered promiscuous mode [ 653.006574][T29968] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 653.030256][T29968] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 653.056886][T30003] netlink: 8 bytes leftover after parsing attributes in process `syz.1.6427'. [ 653.080863][T30003] netlink: 12 bytes leftover after parsing attributes in process `syz.1.6427'. [ 653.101470][T30003] netlink: 8 bytes leftover after parsing attributes in process `syz.1.6427'. [ 653.140244][T29968] team0: Port device team_slave_0 added [ 653.151612][T29968] team0: Port device team_slave_1 added [ 653.226155][T29968] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 653.251432][T29968] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 653.284734][T29968] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 653.327608][T29968] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 653.342003][T29968] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 653.390122][T29968] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 653.474848][T29968] hsr_slave_0: entered promiscuous mode [ 653.483096][T29968] hsr_slave_1: entered promiscuous mode [ 653.489840][T29968] debugfs: 'hsr0' already exists in 'hsr' [ 653.497642][T29968] Cannot create hsr debugfs directory [ 653.805807][T29968] netdevsim netdevsim4 eth3 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 653.813817][ T5833] Bluetooth: hci3: command tx timeout [ 653.820187][T29968] netdevsim netdevsim4 eth3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 653.903592][T29968] netdevsim netdevsim4 eth2 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 653.913695][T29968] netdevsim netdevsim4 eth2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 653.992972][T29968] netdevsim netdevsim4 eth1 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 654.018892][T29968] netdevsim netdevsim4 eth1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 654.111995][T29968] netdevsim netdevsim4 eth0 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 654.123205][T29968] netdevsim netdevsim4 eth0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 655.013809][ T5833] Bluetooth: hci2: command tx timeout [ 655.332316][ T5878] page_pool_release_retry() stalled pool shutdown: id 136, 1 inflight 60 sec [ 655.893392][ T5833] Bluetooth: hci3: command tx timeout [ 656.284439][T30063] __nla_validate_parse: 9 callbacks suppressed [ 656.284470][T30063] netlink: 24 bytes leftover after parsing attributes in process `syz.0.6444'. [ 656.324112][T29968] netdevsim netdevsim4 netdevsim0: renamed from eth0 [ 656.352501][T29968] netdevsim netdevsim4 netdevsim1: renamed from eth1 [ 656.393383][T29968] netdevsim netdevsim4 netdevsim2: renamed from eth2 [ 656.415942][T29968] netdevsim netdevsim4 netdevsim3: renamed from eth3 [ 656.540376][T30080] batman_adv: Cannot find parent device. Skipping batadv-on-batadv check for gretap1 [ 656.554916][T30080] gretap1: default qdisc (pfifo_fast) fail, fallback to noqueue [ 656.573114][T30080] gretap1: entered promiscuous mode [ 656.578675][T30080] gretap1: entered allmulticast mode [ 656.656379][T29968] 8021q: adding VLAN 0 to HW filter on device bond0 [ 656.683044][T29968] 8021q: adding VLAN 0 to HW filter on device team0 [ 656.707447][ T36] bridge0: port 1(bridge_slave_0) entered blocking state [ 656.714792][ T36] bridge0: port 1(bridge_slave_0) entered forwarding state [ 656.722952][T30088] netlink: 240 bytes leftover after parsing attributes in process `syz.1.6450'. [ 656.760788][ T36] bridge0: port 2(bridge_slave_1) entered blocking state [ 656.768043][ T36] bridge0: port 2(bridge_slave_1) entered forwarding state [ 656.810991][T30097] netlink: 8 bytes leftover after parsing attributes in process `syz.2.6452'. [ 656.905431][T30101] netlink: 12 bytes leftover after parsing attributes in process `syz.1.6453'. [ 657.025786][T30106] netlink: 212348 bytes leftover after parsing attributes in process `syz.2.6455'. [ 657.093371][ T5833] Bluetooth: hci2: command tx timeout [ 657.271475][T18477] lec:lec_start_xmit: lec0:No lecd attached [ 657.369208][T29968] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 657.483943][T30127] batadv_slave_0: entered promiscuous mode [ 657.489839][T30130] netlink: 'syz.1.6459': attribute type 21 has an invalid length. [ 657.489865][T30130] netlink: 128 bytes leftover after parsing attributes in process `syz.1.6459'. [ 657.524129][T30130] netlink: 3 bytes leftover after parsing attributes in process `syz.1.6459'. [ 657.535774][T30126] batadv_slave_0: left promiscuous mode [ 657.561426][T30132] netlink: 'syz.0.6462': attribute type 2 has an invalid length. [ 657.604304][T30132] 9: entered promiscuous mode [ 657.807924][T30141] netlink: set zone limit has 4 unknown bytes [ 657.862512][T30149] netlink: zone id is out of range [ 657.870211][T30149] netlink: zone id is out of range [ 657.922818][T29968] veth0_vlan: entered promiscuous mode [ 657.938093][T29968] veth1_vlan: entered promiscuous mode [ 657.974804][ T5833] Bluetooth: hci3: command tx timeout [ 658.007588][T29968] veth0_macvtap: entered promiscuous mode [ 658.031327][T29968] veth1_macvtap: entered promiscuous mode [ 658.105016][T29968] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 658.138417][T29968] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 658.171557][T17989] netdevsim netdevsim4 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 658.208101][T17989] netdevsim netdevsim4 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 658.230282][T17989] netdevsim netdevsim4 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 658.247253][T17989] netdevsim netdevsim4 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 658.411195][T30165] netlink: 32 bytes leftover after parsing attributes in process `syz.0.6471'. [ 658.421439][T17990] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 658.430903][T17990] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 658.504097][T17990] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 658.528819][T17990] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 658.683592][T30175] netlink: 'syz.2.6475': attribute type 4 has an invalid length. [ 658.702643][T30175] netlink: 17 bytes leftover after parsing attributes in process `syz.2.6475'. [ 658.794518][T30183] tipc: Started in network mode [ 658.802086][T30183] tipc: Node identity 0a8cec24a6c7, cluster identity 4711 [ 658.819485][T30184] netlink: 16 bytes leftover after parsing attributes in process `syz.0.6477'. [ 658.835556][T30183] tipc: Enabled bearer , priority 0 [ 658.851071][T30178] syzkaller0: entered promiscuous mode [ 658.857268][T30178] syzkaller0: entered allmulticast mode [ 659.383896][T30212] sctp: [Deprecated]: syz.1.6485 (pid 30212) Use of int in max_burst socket option deprecated. [ 659.383896][T30212] Use struct sctp_assoc_value instead [ 659.510197][ T5145] Bluetooth: hci1: unexpected cc 0x0c03 length: 249 > 1 [ 659.524899][ T5145] Bluetooth: hci1: unexpected cc 0x1003 length: 249 > 9 [ 659.536228][ T5145] Bluetooth: hci1: unexpected cc 0x1001 length: 249 > 9 [ 659.559523][ T5145] Bluetooth: hci1: unexpected cc 0x0c23 length: 249 > 4 [ 659.568439][ T5145] Bluetooth: hci1: unexpected cc 0x0c38 length: 249 > 2 [ 659.579611][T30177] tipc: Resetting bearer [ 659.616829][T30177] tipc: Disabling bearer [ 659.688461][T30217] vxcan1 speed is unknown, defaulting to 1000 [ 660.037034][T30230] ÿ: renamed from bond_slave_1 (while UP) [ 660.052135][ T5838] Bluetooth: hci3: command tx timeout [ 660.177124][T30217] lo speed is unknown, defaulting to 1000 [ 660.258290][T30236] ip6t_REJECT: TCP_RESET illegal for non-tcp [ 660.367930][T30250] xt_HMARK: spi-set and port-set can't be combined [ 660.385738][T30249] gre0: entered promiscuous mode [ 660.392214][T30249] gre0: entered allmulticast mode [ 660.863645][T30274] netlink: 'syz.0.6501': attribute type 3 has an invalid length. [ 660.871645][T30274] netlink: 'syz.0.6501': attribute type 3 has an invalid length. [ 660.969803][T30279] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 660.986793][T30274] netlink: 'syz.0.6501': attribute type 4 has an invalid length. [ 661.001515][T30217] chnl_net:caif_netlink_parms(): no params data found [ 661.311007][T30295] gretap0: entered allmulticast mode [ 661.360674][T30217] bridge0: port 1(bridge_slave_0) entered blocking state [ 661.375243][T30302] netlink: 'syz.0.6510': attribute type 9 has an invalid length. [ 661.402561][T30217] bridge0: port 1(bridge_slave_0) entered disabled state [ 661.422145][T30217] bridge_slave_0: entered allmulticast mode [ 661.437204][T30217] bridge_slave_0: entered promiscuous mode [ 661.462264][T30217] bridge0: port 2(bridge_slave_1) entered blocking state [ 661.480207][T30217] bridge0: port 2(bridge_slave_1) entered disabled state [ 661.498105][T30217] bridge_slave_1: entered allmulticast mode [ 661.517897][T30217] bridge_slave_1: entered promiscuous mode [ 661.566036][T30308] __nla_validate_parse: 7 callbacks suppressed [ 661.566055][T30308] netlink: 20 bytes leftover after parsing attributes in process `syz.1.6512'. [ 661.618697][T30308] netlink: 20 bytes leftover after parsing attributes in process `syz.1.6512'. [ 661.655508][ T5833] Bluetooth: hci1: command tx timeout [ 661.666948][T30217] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 661.697927][T30217] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 661.778513][T30217] team0: Port device team_slave_0 added [ 661.807369][T30217] team0: Port device team_slave_1 added [ 661.888494][T30217] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 661.896552][T30217] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 661.972474][T30321] netlink: 'syz.1.6517': attribute type 10 has an invalid length. [ 661.991608][T30217] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 662.084046][T30323] bond1 (unregistering): Released all slaves [ 662.122994][T30217] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 662.137060][T30326] nftables ruleset with unbound set [ 662.194677][T30217] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 662.281935][ C0] lec0: NETDEV WATCHDOG: CPU: 0: transmit queue 0 timed out 5010 ms [ 662.290317][ C0] lec:lec_tx_timeout: lec0 [ 662.310017][T30217] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 662.644077][T30217] hsr_slave_0: entered promiscuous mode [ 662.660611][T30343] netlink: 'syz.4.6521': attribute type 1 has an invalid length. [ 662.672495][T30217] hsr_slave_1: entered promiscuous mode [ 662.679229][T30217] debugfs: 'hsr0' already exists in 'hsr' [ 662.699759][T30345] netlink: 28 bytes leftover after parsing attributes in process `syz.0.6522'. [ 662.716252][T30217] Cannot create hsr debugfs directory [ 662.755424][T30346] vlan2: entered promiscuous mode [ 662.761156][T30346] team_slave_0: entered promiscuous mode [ 662.769803][T30346] vlan2: entered allmulticast mode [ 662.785164][T30346] team_slave_0: entered allmulticast mode [ 663.213097][T30358] netlink: 'syz.0.6526': attribute type 11 has an invalid length. [ 663.271699][T30367] ¾x9ÿ: renamed from bridge_slave_0 (while UP) [ 663.378660][T30370] netlink: 104 bytes leftover after parsing attributes in process `syz.4.6530'. [ 663.400839][T30370] netlink: 104 bytes leftover after parsing attributes in process `syz.4.6530'. [ 663.437377][T30370] netlink: 104 bytes leftover after parsing attributes in process `syz.4.6530'. [ 663.464710][T30370] netlink: 104 bytes leftover after parsing attributes in process `syz.4.6530'. [ 663.486079][T30370] netlink: 104 bytes leftover after parsing attributes in process `syz.4.6530'. [ 663.549114][T30370] netlink: 104 bytes leftover after parsing attributes in process `syz.4.6530'. [ 663.587293][T30370] netlink: 104 bytes leftover after parsing attributes in process `syz.4.6530'. [ 663.675388][T30217] netdevsim netdevsim5 netdevsim0: renamed from eth0 [ 663.698821][T30217] netdevsim netdevsim5 netdevsim1: renamed from eth1 [ 663.734158][ T5833] Bluetooth: hci1: command tx timeout [ 663.740294][T30217] netdevsim netdevsim5 netdevsim2: renamed from eth2 [ 663.774003][T30217] netdevsim netdevsim5 netdevsim3: renamed from eth3 [ 663.858414][T30388] Bluetooth: MGMT ver 1.23 [ 663.919494][T30388] ipvlan2: entered promiscuous mode [ 663.933152][T30388] 8021q: adding VLAN 0 to HW filter on device ipvlan2 [ 664.179789][T30217] 8021q: adding VLAN 0 to HW filter on device bond0 [ 664.243245][T30397] syzkaller0: entered promiscuous mode [ 664.248799][T30397] syzkaller0: entered allmulticast mode [ 664.306179][T30217] 8021q: adding VLAN 0 to HW filter on device team0 [ 664.340195][ T36] bridge0: port 1(bridge_slave_0) entered blocking state [ 664.347475][ T36] bridge0: port 1(bridge_slave_0) entered forwarding state [ 664.454060][ T36] bridge0: port 2(bridge_slave_1) entered blocking state [ 664.461572][ T36] bridge0: port 2(bridge_slave_1) entered forwarding state [ 665.077794][T30426] xt_CT: You must specify a L4 protocol and not use inversions on it [ 665.145030][T30217] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 665.651324][T30450] netlink: 'syz.1.6548': attribute type 33 has an invalid length. [ 665.757110][T17667] gretap0: left allmulticast mode [ 665.777622][T17667] gretap0: left promiscuous mode [ 665.799653][T17667] bridge0: port 3(gretap0) entered disabled state [ 665.811954][ T5838] Bluetooth: hci1: command tx timeout [ 665.863698][T17667] bridge_slave_1: left allmulticast mode [ 665.871899][T17667] bridge_slave_1: left promiscuous mode [ 665.877749][T17667] bridge0: port 2(bridge_slave_1) entered disabled state [ 665.891918][ T5838] Bluetooth: hci2: command 0x0401 tx timeout [ 665.898267][ T5833] Bluetooth: hci2: Opcode 0x0401 failed: -110 [ 665.921174][T17667] ¾x9ÿ: left allmulticast mode [ 665.928660][T17667] ¾x9ÿ: left promiscuous mode [ 665.938458][T17667] bridge0: port 1(1¾x9ÿ) entered disabled state [ 666.175385][T30470] netlink: 'syz.0.6552': attribute type 17 has an invalid length. [ 666.349263][T17667] bond7 (unregistering): (slave gretap2): Releasing active interface [ 666.431393][T17667] bond2 (unregistering): (slave geneve2): Releasing active interface [ 666.600110][T17667] bond5 (unregistering): (slave bridge2): Releasing backup interface [ 666.608938][T17667] bridge2 (unregistering): left promiscuous mode [ 666.707495][T17667] bond1 (unregistering): Released all slaves [ 666.733103][T17667] bond2 (unregistering): Released all slaves [ 666.768650][T17667] bond3 (unregistering): Released all slaves [ 666.788194][T17667] bond4 (unregistering): Released all slaves [ 666.807652][T17667] bond0 (unregistering): Released all slaves [ 666.837635][T17667] bond5 (unregistering): Released all slaves [ 666.859329][T17667] bond6 (unregistering): Released all slaves [ 666.884416][T17667] bond7 (unregistering): Released all slaves [ 667.130658][T17667] tipc: Left network mode [ 667.138914][T30217] veth0_vlan: entered promiscuous mode [ 667.170768][T30217] veth1_vlan: entered promiscuous mode [ 667.305999][T30217] veth0_macvtap: entered promiscuous mode [ 667.338338][T30217] veth1_macvtap: entered promiscuous mode [ 667.455262][T30217] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 667.482902][T30497] netlink: 'syz.0.6560': attribute type 1 has an invalid length. [ 667.502654][T30217] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 667.559942][ T12] netdevsim netdevsim5 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 667.582996][ T12] netdevsim netdevsim5 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 667.621394][ T12] netdevsim netdevsim5 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 667.654904][ T12] netdevsim netdevsim5 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 667.895389][ T5833] Bluetooth: hci1: command tx timeout [ 667.960202][T30520] netlink: 'syz.2.6564': attribute type 4 has an invalid length. [ 668.011989][T30521] netlink: 'syz.2.6564': attribute type 4 has an invalid length. [ 668.335076][ T12] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 668.351648][ T12] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 668.527498][ T36] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 668.564964][ T36] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 668.702796][T30545] __nla_validate_parse: 64 callbacks suppressed [ 668.702817][T30545] netlink: 16150 bytes leftover after parsing attributes in process `syz.1.6569'. [ 668.741992][T30549] netlink: 16150 bytes leftover after parsing attributes in process `syz.1.6569'. [ 668.765905][T30545] vlan2: entered promiscuous mode [ 668.777512][T30545] bridge0: entered promiscuous mode [ 669.000378][T30558] syzkaller1: entered promiscuous mode [ 669.006267][T30558] syzkaller1: entered allmulticast mode [ 669.039603][ T8143] IPVS: starting estimator thread 0... [ 669.049452][T30565] IPVS: dh: TCP 172.20.20.170:0 - no destination available [ 669.142088][T30569] IPVS: using max 35 ests per chain, 84000 per kthread [ 669.264750][T17667] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 669.283109][T17667] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 669.291427][T17667] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 669.307406][T17667] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 669.335285][T17667] veth0_macvtap: left allmulticast mode [ 669.351998][T17667] veth1_macvtap: left promiscuous mode [ 669.362522][T17667] veth0_macvtap: left promiscuous mode [ 669.751268][T17667] team0 (unregistering): Port device team_slave_1 removed [ 669.788671][T17667] team0 (unregistering): Port device team_slave_0 removed [ 670.175218][T30599] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check. [ 670.231407][T30603] netlink: 8 bytes leftover after parsing attributes in process `syz.0.6584'. [ 670.309337][T30606] netlink: 4 bytes leftover after parsing attributes in process `syz.4.6583'. [ 670.632129][ T5879] IPVS: starting estimator thread 0... [ 670.685884][T17667] IPVS: stop unused estimator thread 0... [ 670.758144][T30636] netlink: 8 bytes leftover after parsing attributes in process `syz.4.6592'. [ 670.785633][T30628] IPVS: using max 28 ests per chain, 67200 per kthread [ 670.911486][T30640] netlink: 596 bytes leftover after parsing attributes in process `syz.2.6594'. [ 671.142793][T30653] Bluetooth: hci2: Opcode 0x0401 failed: -4 [ 671.155182][T30659] netlink: 248 bytes leftover after parsing attributes in process `syz.2.6598'. [ 671.291669][T30668] netlink: 52 bytes leftover after parsing attributes in process `syz.2.6601'. [ 671.516958][T30685] netlink: 28 bytes leftover after parsing attributes in process `syz.4.6606'. [ 671.660131][T30693] netlink: 65047 bytes leftover after parsing attributes in process `syz.1.6608'. [ 671.960578][T30704] syzkaller0: entered promiscuous mode [ 671.966297][T30704] syzkaller0: entered allmulticast mode [ 672.106740][T30714] netlink: 'syz.0.6616': attribute type 142 has an invalid length. [ 672.123317][T30716] openvswitch: netlink: Unknown nsh attribute 0 [ 672.363006][T30727] netlink: 'syz.4.6620': attribute type 1 has an invalid length. [ 672.828672][T30750] pimreg3: entered allmulticast mode [ 673.174501][ T5833] Bluetooth: hci2: command 0x0401 tx timeout [ 673.262919][T30766] netlink: 'syz.5.6634': attribute type 10 has an invalid length. [ 673.312494][T30772] netlink: 'syz.1.6635': attribute type 25 has an invalid length. [ 673.344444][T30766] bridge0: port 2(bridge_slave_1) entered disabled state [ 673.354201][T30766] bridge_slave_1: left allmulticast mode [ 673.360948][T30766] bridge_slave_1: left promiscuous mode [ 673.370936][T30766] bridge0: port 2(bridge_slave_1) entered disabled state [ 673.387720][T30766] bond0: (slave bridge_slave_1): Enslaving as an active interface with an up link [ 673.412884][T30772] netlink: 'syz.1.6635': attribute type 25 has an invalid length. [ 673.435758][T17990] netdevsim netdevsim1 netdevsim0: set [0, 0] type 1 family 0 port 8472 - 0 [ 673.459036][T17990] netdevsim netdevsim1 netdevsim1: set [0, 0] type 1 family 0 port 8472 - 0 [ 673.497144][T17990] netdevsim netdevsim1 netdevsim2: set [0, 0] type 1 family 0 port 8472 - 0 [ 673.513145][T17990] netdevsim netdevsim1 netdevsim3: set [0, 0] type 1 family 0 port 8472 - 0 [ 673.733916][T30780] PF_CAN: dropped non conform CAN XL skbuff: dev type 65534, len 40 [ 673.750944][T30783] __nla_validate_parse: 11 callbacks suppressed [ 673.750966][T30783] netlink: 52 bytes leftover after parsing attributes in process `syz.4.6637'. [ 673.827220][T30786] netlink: 12 bytes leftover after parsing attributes in process `syz.0.6640'. [ 673.937583][T30792] netlink: 48 bytes leftover after parsing attributes in process `syz.4.6642'. [ 673.964909][T28649] IPVS: starting estimator thread 0... [ 673.994773][T30794] IPVS: ip_vs_edit_dest(): lower threshold is higher than upper threshold [ 674.073280][T30795] IPVS: using max 30 ests per chain, 72000 per kthread [ 674.381110][T30810] tipc: New replicast peer: 255.255.255.255 [ 674.401092][T30810] tipc: Enabled bearer , priority 10 [ 674.583543][T30832] netlink: 'syz.2.6652': attribute type 16 has an invalid length. [ 674.613461][T30832] netlink: 'syz.2.6652': attribute type 17 has an invalid length. [ 674.710220][T30842] netlink: 'syz.4.6655': attribute type 2 has an invalid length. [ 674.729684][T30842] netlink: 'syz.4.6655': attribute type 1 has an invalid length. [ 674.873974][T30848] netlink: 4 bytes leftover after parsing attributes in process `syz.4.6656'. [ 675.012732][T30832] A link change request failed with some changes committed already. Interface caif0 may have been left with an inconsistent configuration, please check. [ 675.086202][T30848] team_slave_1: entered promiscuous mode [ 675.114999][T30848] macvtap1: entered promiscuous mode [ 675.120492][T30848] team0: entered promiscuous mode [ 675.172349][T30848] macvtap1: entered allmulticast mode [ 675.184226][T30848] team0: entered allmulticast mode [ 675.189518][T30848] team_slave_1: entered allmulticast mode [ 675.197753][T30855] openvswitch: netlink: IP tunnel dst address not specified [ 675.206824][T30857] openvswitch: netlink: IP tunnel dst address not specified [ 675.233337][T30848] 8021q: adding VLAN 0 to HW filter on device macvtap1 [ 675.393421][T28649] tipc: Node number set to 2890656804 [ 675.739795][T30890] syzkaller1: entered promiscuous mode [ 675.774545][T30890] syzkaller1: entered allmulticast mode [ 675.789817][T30895] netlink: 16 bytes leftover after parsing attributes in process `syz.2.6671'. [ 675.990040][T30904] vcan1: entered promiscuous mode [ 676.012016][T30904] vcan1: entered allmulticast mode [ 676.150624][T30917] netlink: 212348 bytes leftover after parsing attributes in process `syz.0.6678'. [ 676.240566][T30923] netlink: 'syz.4.6680': attribute type 1 has an invalid length. [ 676.257534][T30920] gtp0: entered promiscuous mode [ 676.263522][T30920] gtp0: entered allmulticast mode [ 676.321368][T30923] 8021q: adding VLAN 0 to HW filter on device bond2 [ 676.364448][T30923] netlink: 48 bytes leftover after parsing attributes in process `syz.4.6680'. [ 676.530162][T30942] netlink: 190972 bytes leftover after parsing attributes in process `syz.5.6686'. [ 676.808817][T30958] netlink: 12 bytes leftover after parsing attributes in process `syz.5.6691'. [ 676.839421][T17989] netdevsim netdevsim5 netdevsim0: set [0, 0] type 1 family 0 port 8472 - 0 [ 676.852555][T30958] netlink: 12 bytes leftover after parsing attributes in process `syz.5.6691'. [ 676.857391][T17989] netdevsim netdevsim5 netdevsim1: set [0, 0] type 1 family 0 port 8472 - 0 [ 676.890193][T17989] netdevsim netdevsim5 netdevsim2: set [0, 0] type 1 family 0 port 8472 - 0 [ 676.913927][T17989] netdevsim netdevsim5 netdevsim3: set [0, 0] type 1 family 0 port 8472 - 0 [ 677.272448][T30986] netlink: 'syz.0.6697': attribute type 1 has an invalid length. [ 677.329491][T30986] bond1: entered promiscuous mode [ 677.337012][T30986] bond1: entered allmulticast mode [ 677.344489][T30986] 8021q: adding VLAN 0 to HW filter on device bond1 [ 677.474092][T30986] bridge1: entered promiscuous mode [ 677.479613][T30986] bridge1: entered allmulticast mode [ 677.488269][T30986] bond1: (slave bridge1): Enslaving as a backup interface with an up link [ 677.553354][ T13] bond1: Warning: No 802.3ad response from the link partner for any adapters in the bond [ 677.689682][T17990] bond1: Warning: No 802.3ad response from the link partner for any adapters in the bond [ 677.754306][T31009] netlink: 'syz.0.6703': attribute type 1 has an invalid length. [ 677.821716][T31009] bond2: (slave ip6gre1): The slave device specified does not support setting the MAC address [ 677.848647][T31009] bond2: (slave ip6gre1): Setting fail_over_mac to active for active-backup mode [ 677.869303][T31009] bond2: (slave ip6gre1): making interface the new active one [ 677.883729][T31009] bond2: (slave ip6gre1): Enslaving as an active interface with an up link [ 677.985272][T31024] netlink: zone id is out of range [ 678.013551][T31024] netlink: zone id is out of range [ 678.018824][T31024] netlink: zone id is out of range [ 678.065120][T31024] netlink: zone id is out of range [ 678.101997][T31024] netlink: zone id is out of range [ 678.132787][ T5838] Bluetooth: hci1: command tx timeout [ 678.316359][T31042] netlink: 'syz.5.6714': attribute type 20 has an invalid length. [ 678.648089][T31064] netlink: 'syz.5.6719': attribute type 1 has an invalid length. [ 678.735148][T31064] 8021q: adding VLAN 0 to HW filter on device bond1 [ 678.898236][T31071] bond1: (slave veth3): Enslaving as an active interface with a down link [ 679.045051][T31071] macvlan4: entered promiscuous mode [ 679.051045][T31071] macvlan4: entered allmulticast mode [ 679.102202][T31071] bond1: entered promiscuous mode [ 679.108194][T31071] 8021q: adding VLAN 0 to HW filter on device macvlan4 [ 679.151483][T31071] bond1: (slave macvlan4): the slave hw address is in use by the bond; couldn't find a slave with a free hw address to give it (this should not have happened) [ 679.222736][T31071] bond1: left promiscuous mode [ 679.409366][T31071] __nla_validate_parse: 10 callbacks suppressed [ 679.409389][T31071] netlink: 24 bytes leftover after parsing attributes in process `syz.5.6719'. [ 679.628127][T31115] atomic_op ffff8880256ca198 conn xmit_atomic 0000000000000000 [ 679.792457][T31122] netlink: 84 bytes leftover after parsing attributes in process `syz.5.6730'. [ 679.835957][T31119] netdevsim netdevsim0 netdevsim0: entered promiscuous mode [ 679.856610][T31125] IPVS: Schedule: port zero only supported in persistent services, check your ipvs configuration [ 679.934573][T31123] netlink: 12 bytes leftover after parsing attributes in process `syz.2.6729'. [ 680.223992][ T5838] Bluetooth: hci1: command 0x0405 tx timeout [ 680.672969][T31169] netlink: 'syz.4.6735': attribute type 1 has an invalid length. [ 680.769526][T31169] 8021q: adding VLAN 0 to HW filter on device bond3 [ 680.902810][T31176] netlink: 24 bytes leftover after parsing attributes in process `syz.1.6737'. [ 680.923742][T31178] netlink: 12 bytes leftover after parsing attributes in process `syz.4.6738'. [ 681.145204][T31188] netlink: 8 bytes leftover after parsing attributes in process `syz.0.6739'. [ 681.183422][T31188] netlink: 8 bytes leftover after parsing attributes in process `syz.0.6739'. [ 681.308300][T31200] netlink: 'syz.2.6743': attribute type 1 has an invalid length. [ 681.453183][T31203] netlink: 64 bytes leftover after parsing attributes in process `syz.2.6745'. [ 681.462886][T31203] netlink: 64 bytes leftover after parsing attributes in process `syz.2.6745'. [ 681.509128][T31209] netlink: 'syz.4.6744': attribute type 5 has an invalid length. [ 681.666396][T31216] netlink: 12 bytes leftover after parsing attributes in process `syz.2.6748'. [ 681.829933][T31231] netlink: 'syz.0.6752': attribute type 1 has an invalid length. [ 681.855477][T31229] syzkaller1: entered promiscuous mode [ 681.861032][T31229] syzkaller1: entered allmulticast mode [ 681.925185][T31229] gretap1: entered promiscuous mode [ 681.930481][T31229] gretap1: entered allmulticast mode [ 682.964043][T31280] net_ratelimit: 3 callbacks suppressed [ 682.964064][T31280] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 683.003889][T31277] bridge1: port 1(veth5) entered blocking state [ 683.010739][T31277] bridge1: port 1(veth5) entered disabled state [ 683.021060][T31277] veth5: entered allmulticast mode [ 683.034577][T31277] veth5: entered promiscuous mode [ 683.101212][T31283] bridge1: port 2(veth7) entered blocking state [ 683.108103][T31283] bridge1: port 2(veth7) entered disabled state [ 683.117111][T31283] veth7: entered allmulticast mode [ 683.126165][T31283] veth7: entered promiscuous mode [ 683.286107][T31295] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 683.433337][T31304] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 683.447033][T31305] openvswitch: netlink: IP tunnel attribute has 30 unknown bytes. [ 683.491050][T31305] bond2: entered promiscuous mode [ 683.641193][T31314] bond3: option lacp_active: mode dependency failed, not supported in mode balance-rr(0) [ 683.664787][T31314] bond3 (unregistering): Released all slaves [ 684.152697][T31339] netlink: 'syz.4.6784': attribute type 4 has an invalid length. [ 684.252586][T31339] netlink: 'syz.4.6784': attribute type 4 has an invalid length. [ 684.332643][T31355] IPVS: Schedule: port zero only supported in persistent services, check your ipvs configuration [ 684.372316][ T5878] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 684.381399][ T5878] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 684.509991][T31360] __nla_validate_parse: 16 callbacks suppressed [ 684.510085][T31360] netlink: 24 bytes leftover after parsing attributes in process `syz.4.6790'. [ 684.764882][T31374] netlink: 'syz.4.6795': attribute type 1 has an invalid length. [ 684.776186][T31373] tipc: Started in network mode [ 684.781244][T31373] tipc: Node identity 080211000001, cluster identity 4711 [ 684.789731][T31374] netlink: 216 bytes leftover after parsing attributes in process `syz.4.6795'. [ 684.832104][T31373] tipc: Enabled bearer , priority 0 [ 684.841500][T31373] syzkaller0: mtu less than device minimum [ 685.022707][T31384] netlink: 52 bytes leftover after parsing attributes in process `syz.4.6799'. [ 685.036056][T31384] bridge0: port 2(bridge_slave_1) entered disabled state [ 685.043692][T31384] bridge0: port 1(bridge_slave_0) entered disabled state [ 685.243351][T31400] netlink: 'syz.1.6805': attribute type 3 has an invalid length. [ 685.386031][T31410] netlink: 28 bytes leftover after parsing attributes in process `syz.0.6808'. [ 685.395439][T31410] netlink: 'syz.0.6808': attribute type 7 has an invalid length. [ 685.405891][T31410] netlink: 'syz.0.6808': attribute type 8 has an invalid length. [ 685.414168][ T8143] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 685.440233][T31410] netlink: 4 bytes leftover after parsing attributes in process `syz.0.6808'. [ 685.480748][T31408] netlink: 'syz.2.6807': attribute type 2 has an invalid length. [ 685.503468][T31410] ip6gretap0: entered promiscuous mode [ 685.582484][T31410] gretap0: entered promiscuous mode [ 685.602281][T31410] erspan0: entered promiscuous mode [ 685.625525][T31410] debugfs: 'hsr1' already exists in 'hsr' [ 685.645636][T31410] Cannot create hsr debugfs directory [ 685.685141][T31422] netlink: 'syz.5.6811': attribute type 3 has an invalid length. [ 685.693862][T31422] netlink: 'syz.5.6811': attribute type 3 has an invalid length. [ 685.714586][T31422] netlink: 'syz.5.6811': attribute type 1 has an invalid length. [ 685.722487][T31422] netlink: 244 bytes leftover after parsing attributes in process `syz.5.6811'. [ 685.952248][ T8143] tipc: Node number set to 134418688 [ 685.992150][ C0] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 686.023725][T31439] netlink: 12 bytes leftover after parsing attributes in process `syz.0.6817'. [ 686.081112][T31444] netlink: 8 bytes leftover after parsing attributes in process `syz.1.6818'. [ 686.121980][T31447] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 686.145892][ T1302] lec:lec_start_xmit: lec0:No lecd attached [ 686.155177][T28648] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 686.185280][T31449] netlink: 1 bytes leftover after parsing attributes in process `syz.5.6820'. [ 686.216204][T31452] netlink: 8 bytes leftover after parsing attributes in process `syz.2.6819'. [ 686.229607][T31449] xt_policy: neither incoming nor outgoing policy selected [ 688.053531][ C0] net_ratelimit: 29 callbacks suppressed [ 688.053553][ C0] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 688.067845][ C0] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 688.092312][T31546] hsr_slave_1 (unregistering): left promiscuous mode [ 688.120443][T31544] pim6reg1: entered promiscuous mode [ 688.127226][T31544] pim6reg1: entered allmulticast mode [ 688.552040][ T8143] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 688.717078][T31573] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check. [ 688.777884][T31567] bond3: option lacp_active: mode dependency failed, not supported in mode balance-rr(0) [ 688.826049][T31567] bond3 (unregistering): Released all slaves [ 689.031895][T31591] IPv6: NLM_F_CREATE should be specified when creating new route [ 689.184069][T28647] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 689.455267][T31598] vlan0: entered promiscuous mode [ 689.493914][T31598] vlan0: entered allmulticast mode [ 689.519079][T31598] hsr_slave_1: entered allmulticast mode [ 689.575592][ T8143] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 689.593434][T31614] RDS: rds_bind could not find a transport for fe80::, load rds_tcp or rds_rdma? [ 689.607504][T31615] __nla_validate_parse: 5 callbacks suppressed [ 689.607515][T31617] netlink: 8 bytes leftover after parsing attributes in process `syz.5.6868'. [ 689.607524][T31615] netlink: 8 bytes leftover after parsing attributes in process `syz.5.6868'. [ 689.607552][T31615] validate_nla: 3 callbacks suppressed [ 689.607613][T31615] netlink: 'syz.5.6868': attribute type 21 has an invalid length. [ 689.648254][T31615] netlink: 8 bytes leftover after parsing attributes in process `syz.5.6868'. [ 689.668173][T31615] netlink: 8 bytes leftover after parsing attributes in process `syz.5.6868'. [ 689.677398][T31615] netlink: 'syz.5.6868': attribute type 21 has an invalid length. [ 689.680381][T31617] netlink: 'syz.5.6868': attribute type 21 has an invalid length. [ 689.685850][T31615] netlink: 8 bytes leftover after parsing attributes in process `syz.5.6868'. [ 689.730729][T31617] netlink: 8 bytes leftover after parsing attributes in process `syz.5.6868'. [ 689.779251][T31617] netlink: 8 bytes leftover after parsing attributes in process `syz.5.6868'. [ 689.802052][T31617] netlink: 'syz.5.6868': attribute type 21 has an invalid length. [ 689.811305][T31617] netlink: 8 bytes leftover after parsing attributes in process `syz.5.6868'. [ 689.847557][T31622] netlink: 76 bytes leftover after parsing attributes in process `syz.0.6869'. [ 690.142332][T31634] netlink: 32 bytes leftover after parsing attributes in process `syz.2.6874'. [ 690.183084][T31634] netlink: 'syz.2.6874': attribute type 5 has an invalid length. [ 690.264335][T31641] netlink: 'syz.1.6876': attribute type 11 has an invalid length. [ 690.401532][T31647] Unsupported ieee802154 address type: 0 [ 690.425738][T31653] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 690.613704][ T8143] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 690.622140][ T8143] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 691.032077][ C0] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 691.148648][T31699] tipc: Enabled bearer , priority 0 [ 691.220342][T31697] syzkaller0: MTU too low for tipc bearer [ 691.252365][ C0] lec0: NETDEV WATCHDOG: CPU: 0: transmit queue 0 timed out 5100 ms [ 691.260657][ C0] lec:lec_tx_timeout: lec0 [ 691.267182][T31697] tipc: Disabling bearer [ 691.574326][T31714] ip6t_REJECT: ECHOREPLY is not supported [ 691.703837][T31720] netlink: 'syz.1.6895': attribute type 1 has an invalid length. [ 692.049943][T31746] netlink: 'syz.2.6902': attribute type 1 has an invalid length. [ 692.080080][T31746] netlink: 'syz.2.6902': attribute type 1 has an invalid length. [ 692.123073][T31751] xt_l2tp: v2 doesn't support IP mode [ 692.370954][T31762] syzkaller0: entered promiscuous mode [ 692.379034][T31762] syzkaller0: entered allmulticast mode [ 692.913235][T31773] vxcan1 speed is unknown, defaulting to 1000 [ 693.092222][ C0] net_ratelimit: 7 callbacks suppressed [ 693.092246][ C0] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 693.177319][T31788] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 693.209163][T31788] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 693.404081][T31797] xt_CT: You must specify a L4 protocol and not use inversions on it [ 693.411565][T31773] lo speed is unknown, defaulting to 1000 [ 693.682265][T31809] netlink: 'syz.0.6915': attribute type 51 has an invalid length. [ 693.735304][ T8143] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 694.397185][T31834] bond2: Unable to set peer notification delay as MII monitoring is disabled [ 694.411452][T31834] bond2 (unregistering): Released all slaves [ 694.552194][T31848] bond0: (slave lo): enslaved VLAN challenged slave. Adding VLANs will be blocked as long as it is part of bond. [ 694.601188][T31848] bond0: (slave lo): Error: Device can not be enslaved while up [ 694.635680][T31848] netlink: 'syz.4.6925': attribute type 1 has an invalid length. [ 694.656812][T31848] netlink: 'syz.4.6925': attribute type 4 has an invalid length. [ 694.672084][T31848] __nla_validate_parse: 9 callbacks suppressed [ 694.672104][T31848] netlink: 9422 bytes leftover after parsing attributes in process `syz.4.6925'. [ 694.694160][T31853] syzkaller1: entered promiscuous mode [ 694.712413][T31853] syzkaller1: entered allmulticast mode [ 694.772587][ T5879] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 694.849748][T31858] vlan1: entered allmulticast mode [ 694.856798][T31858] bond0: entered allmulticast mode [ 694.865540][T31858] bond_slave_0: entered allmulticast mode [ 694.883029][T31858] ÿ: entered allmulticast mode [ 694.891254][T31865] netlink: 16 bytes leftover after parsing attributes in process `syz.2.6931'. [ 695.191231][T31878] nci: __nci_request: wait_for_completion_interruptible_timeout failed -512 [ 695.225773][T31886] netlink: 8 bytes leftover after parsing attributes in process `syz.1.6935'. [ 695.264151][T31886] netlink: 12 bytes leftover after parsing attributes in process `syz.1.6935'. [ 695.267656][T28649] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 695.383728][T31889] netlink: 8 bytes leftover after parsing attributes in process `syz.4.6936'. [ 695.389703][T31892] netlink: 4552 bytes leftover after parsing attributes in process `syz.2.6938'. [ 695.417426][T31892] netlink: 4552 bytes leftover after parsing attributes in process `syz.2.6938'. [ 695.696094][T31914] SET target dimension over the limit! [ 695.751023][T31910] netlink: 'syz.4.6941': attribute type 10 has an invalid length. [ 695.816229][ T8143] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 696.072059][ C0] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 696.105262][T31939] netlink: 4 bytes leftover after parsing attributes in process `syz.5.6950'. [ 696.191035][T31944] netlink: 220 bytes leftover after parsing attributes in process `syz.5.6950'. [ 697.094583][ C0] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 697.893123][ T8143] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 698.133533][ C0] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 698.306585][T28649] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 698.629595][T31953] netlink: 16 bytes leftover after parsing attributes in process `syz.5.6955'. [ 698.831956][T31974] delete_channel: no stack [ 698.871693][T31975] hsr_slave_0: hsr_addr_subst_dest: Unknown node [ 698.933001][ T5878] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 699.037304][T31984] netlink: 'syz.4.6966': attribute type 29 has an invalid length. [ 699.075569][T31984] netlink: 'syz.4.6966': attribute type 9 has an invalid length. [ 699.095626][T31984] netlink: 'syz.4.6966': attribute type 11 has an invalid length. [ 699.141269][T31991] netlink: 'syz.4.6966': attribute type 2 has an invalid length. [ 699.252657][T31984] netlink: 'syz.4.6966': attribute type 12 has an invalid length. [ 699.878523][T32028] netlink: 'syz.1.6977': attribute type 2 has an invalid length. [ 699.949677][T32028] ipvlan3: entered allmulticast mode [ 699.973191][ T5879] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 699.974015][T32028] batadv_slave_1: entered allmulticast mode [ 700.019136][T32028] batman_adv: batadv0: Adding interface: ipvlan3 [ 700.026164][T32028] batman_adv: batadv0: The MTU of interface ipvlan3 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 700.092339][T32028] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 700.112430][T32028] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 700.125704][T32028] batman_adv: batadv0: Interface activated: ipvlan3 [ 700.213718][T28647] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 700.341526][T32043] __nla_validate_parse: 74 callbacks suppressed [ 700.341549][T32043] netlink: 27 bytes leftover after parsing attributes in process `syz.1.6982'. [ 700.359659][T32042] netlink: 4 bytes leftover after parsing attributes in process `syz.2.6983'. [ 700.378672][T32042] netlink: 4 bytes leftover after parsing attributes in process `syz.2.6983'. [ 700.378959][T32046] netlink: 80 bytes leftover after parsing attributes in process `syz.0.6984'. [ 700.466911][T32054] netlink: 'syz.4.6986': attribute type 1 has an invalid length. [ 700.564738][T32054] 8021q: adding VLAN 0 to HW filter on device bond4 [ 700.808933][T32077] netlink: 'syz.2.6992': attribute type 1 has an invalid length. [ 700.837654][T32077] bond3: entered promiscuous mode [ 700.843785][T32077] 8021q: adding VLAN 0 to HW filter on device bond3 [ 700.854255][T28649] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 700.869876][T32077] netlink: 12 bytes leftover after parsing attributes in process `syz.2.6992'. [ 700.882770][T32077] netlink: 12 bytes leftover after parsing attributes in process `syz.2.6992'. [ 701.012750][ T5878] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 701.112093][ C0] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 701.208956][T32090] netlink: 8 bytes leftover after parsing attributes in process `syz.1.6995'. [ 701.343120][T28649] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 703.171971][ C0] net_ratelimit: 7 callbacks suppressed [ 703.171989][ C0] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 703.629856][T32065] nci: __nci_request: wait_for_completion_interruptible_timeout failed -512 [ 703.821997][T32133] x_tables: duplicate entry at hook 2 [ 704.076996][T32142] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check. [ 704.132435][ T5907] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 704.295945][T32142] netlink: 80 bytes leftover after parsing attributes in process `syz.5.7014'. [ 704.534947][T28648] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 705.173363][ T5879] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 706.151955][ C0] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 706.219264][ T5907] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 707.026319][T17989] bond9 (unregistering): (slave gretap2): Releasing active interface [ 707.172119][ C0] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 707.256632][ T5907] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 707.348440][T17989] bond11 (unregistering): (slave bridge6): Releasing active interface [ 707.478306][T17989] bond1 (unregistering): Released all slaves [ 707.495123][T17989] bond2 (unregistering): Released all slaves [ 707.510788][T17989] bond3 (unregistering): Released all slaves [ 707.529586][T17989] bond4 (unregistering): Released all slaves [ 707.554430][T17989] bond5 (unregistering): Released all slaves [ 707.569994][T17989] bond6 (unregistering): Released all slaves [ 707.582894][T28647] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 707.597561][T17989] bond7 (unregistering): Released all slaves [ 707.617107][T17989] bond8 (unregistering): Released all slaves [ 707.636464][T17989] bond9 (unregistering): Released all slaves [ 707.655935][T17989] bond10 (unregistering): Released all slaves [ 707.673888][T17989] bond11 (unregistering): Released all slaves [ 707.693647][T17989] bond0 (unregistering): Released all slaves [ 707.713359][T17989] bond12 (unregistering): Released all slaves [ 707.920453][T17989] : left promiscuous mode [ 708.125277][T17989] tipc: Left network mode [ 708.212477][ C0] net_ratelimit: 3 callbacks suppressed [ 708.212502][ C0] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 708.299516][ T5907] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 708.447332][T32217] netlink: 'syz.5.7032': attribute type 11 has an invalid length. [ 708.487053][T32217] netlink: 224 bytes leftover after parsing attributes in process `syz.5.7032'. [ 708.636085][T32227] netlink: 4 bytes leftover after parsing attributes in process `syz.2.7033'. [ 708.675703][T32223] netlink: 8 bytes leftover after parsing attributes in process `syz.1.7034'. [ 708.774827][T32231] netlink: 'syz.4.7036': attribute type 4 has an invalid length. [ 708.912221][T32232] netlink: 28 bytes leftover after parsing attributes in process `syz.5.7035'. [ 708.964214][T32236] netlink: 'syz.1.7037': attribute type 3 has an invalid length. [ 708.986448][T32236] netlink: 'syz.1.7037': attribute type 3 has an invalid length. [ 709.229613][T32247] netlink: 220 bytes leftover after parsing attributes in process `syz.1.7043'. [ 709.301112][T32253] x_tables: duplicate entry at hook 3 [ 709.335426][ T5879] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 709.759498][T32243] bond5: Removing last ns target with arp_interval on [ 709.819229][T32258] af_packet: tpacket_rcv: packet too big, clamped from 17804 to 3952. macoff=96 [ 710.121228][T32263] syzkaller0: entered promiscuous mode [ 710.143560][T32263] syzkaller0: entered allmulticast mode [ 710.210490][ T5833] Bluetooth: hci1: link tx timeout [ 710.219405][ T5833] Bluetooth: hci1: killing stalled connection 11:aa:aa:aa:aa:aa [ 710.347698][T17989] hsr_slave_0: left promiscuous mode [ 710.375577][T17989] pim6reg (unregistering): left allmulticast mode [ 710.382803][ T5907] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 710.455916][T28649] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 710.618658][T28647] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 710.785849][T32292] netlink: 12 bytes leftover after parsing attributes in process `syz.5.7051'. [ 710.818255][T32292] netlink: 56 bytes leftover after parsing attributes in process `syz.5.7051'. [ 710.836142][T32292] netlink: 8 bytes leftover after parsing attributes in process `syz.5.7051'. [ 710.875085][T32294] netlink: 32 bytes leftover after parsing attributes in process `syz.4.7052'. [ 710.891638][T32298] netlink: 8 bytes leftover after parsing attributes in process `syz.2.7053'. [ 711.192061][ C0] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 711.414347][ T5879] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 712.215093][ C0] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 712.292701][ T5838] Bluetooth: hci1: command 0x0405 tx timeout [ 712.457571][ T5879] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 712.778242][T32296] netlink: 'syz.4.7052': attribute type 3 has an invalid length. [ 712.903290][T32309] netlink: 'syz.4.7056': attribute type 39 has an invalid length. [ 713.000198][T32318] netlink: 'syz.2.7058': attribute type 1 has an invalid length. [ 713.258377][ C0] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 713.319100][T17989] IPVS: stop unused estimator thread 0... [ 713.382084][T32334] netlink: 'syz.2.7064': attribute type 1 has an invalid length. [ 713.492144][ T5879] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 713.652766][T28647] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 713.875970][T32361] netlink: 'syz.2.7072': attribute type 29 has an invalid length. [ 713.895756][T32361] __nla_validate_parse: 1 callbacks suppressed [ 713.895778][T32361] netlink: 4 bytes leftover after parsing attributes in process `syz.2.7072'. [ 714.086897][T32375] openvswitch: netlink: Message has 8 unknown bytes. [ 714.108820][T32375] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 714.138668][T32375] netlink: 16 bytes leftover after parsing attributes in process `syz.4.7077'. [ 714.533319][ T5879] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 715.575715][ T5907] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 715.631707][ T5838] Bluetooth: hci6: unexpected cc 0x0c03 length: 249 > 1 [ 715.642994][ T5838] Bluetooth: hci6: unexpected cc 0x1003 length: 249 > 9 [ 715.651363][ T5838] Bluetooth: hci6: unexpected cc 0x1001 length: 249 > 9 [ 715.660604][ T5838] Bluetooth: hci6: unexpected cc 0x0c23 length: 249 > 4 [ 715.669927][ T5838] Bluetooth: hci6: unexpected cc 0x0c38 length: 249 > 2 [ 715.711601][T32396] vxcan1 speed is unknown, defaulting to 1000 [ 715.859267][T32396] lo speed is unknown, defaulting to 1000 [ 715.990100][T32396] chnl_net:caif_netlink_parms(): no params data found [ 716.074879][T32396] bridge0: port 1(bridge_slave_0) entered blocking state [ 716.082285][T32396] bridge0: port 1(bridge_slave_0) entered disabled state [ 716.089618][T32396] bridge_slave_0: entered allmulticast mode [ 716.097621][T32396] bridge_slave_0: entered promiscuous mode [ 716.107072][T32396] bridge0: port 2(bridge_slave_1) entered blocking state [ 716.114755][T32396] bridge0: port 2(bridge_slave_1) entered disabled state [ 716.123424][T32396] bridge_slave_1: entered allmulticast mode [ 716.130987][T32396] bridge_slave_1: entered promiscuous mode [ 716.165086][T32396] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 716.178042][T32396] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 716.211283][T32396] team0: Port device team_slave_0 added [ 716.221448][T32396] team0: Port device team_slave_1 added [ 716.231999][ C0] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 716.260663][T32396] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 716.268202][T32396] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 716.295181][T32396] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 716.308165][T32396] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 716.315323][T32396] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 716.343616][T32396] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 716.396182][T32396] hsr_slave_0: entered promiscuous mode [ 716.403399][T32396] hsr_slave_1: entered promiscuous mode [ 716.410004][T32396] debugfs: 'hsr0' already exists in 'hsr' [ 716.416116][T32396] Cannot create hsr debugfs directory [ 716.612160][ T5879] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 716.692316][T28649] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 717.034240][T32370] nci: __nci_request: wait_for_completion_interruptible_timeout failed -512 [ 717.084237][T32396] netdevsim netdevsim6 netdevsim0: renamed from eth0 [ 717.166912][T32396] netdevsim netdevsim6 netdevsim1: renamed from eth1 [ 717.214930][T32406] xt_TPROXY: Can be used only with -p tcp or -p udp [ 717.217335][T32396] netdevsim netdevsim6 netdevsim2: renamed from eth2 [ 717.264109][T32396] netdevsim netdevsim6 netdevsim3: renamed from eth3 [ 717.302911][T32406] netlink: 12 bytes leftover after parsing attributes in process `syz.1.7083'. [ 717.313134][T32406] netlink: 808 bytes leftover after parsing attributes in process `syz.1.7083'. [ 717.389899][T32418] netlink: 'syz.2.7084': attribute type 4 has an invalid length. [ 717.425868][T32422] netlink: 'syz.5.7087': attribute type 1 has an invalid length. [ 717.489969][T32421] netlink: 44 bytes leftover after parsing attributes in process `syz.4.7088'. [ 717.517949][T32421] netlink: 35 bytes leftover after parsing attributes in process `syz.4.7088'. [ 717.527426][T32421] netlink: 'syz.4.7088': attribute type 5 has an invalid length. [ 717.552929][T32421] netlink: 'syz.4.7088': attribute type 6 has an invalid length. [ 717.585338][T32421] netlink: 35 bytes leftover after parsing attributes in process `syz.4.7088'. [ 717.732032][ T5833] Bluetooth: hci6: command tx timeout [ 717.986935][T32456] veth0_to_bridge: vlans aren't supported yet for dev_uc|mc_add() [ 718.003651][T32457] bridge1: trying to set multicast startup query interval below minimum, setting to 100 (1000ms) [ 718.154405][T32466] netlink: 12 bytes leftover after parsing attributes in process `syz.4.7099'. [ 718.164186][T32396] 8021q: adding VLAN 0 to HW filter on device bond0 [ 718.209003][T32396] 8021q: adding VLAN 0 to HW filter on device team0 [ 718.243967][T17988] bridge0: port 1(bridge_slave_0) entered blocking state [ 718.251287][T17988] bridge0: port 1(bridge_slave_0) entered forwarding state [ 718.274344][T32473] –: renamed from vxcan1 (while UP) [ 718.291585][T17990] bridge0: port 2(bridge_slave_1) entered blocking state [ 718.298863][T17990] bridge0: port 2(bridge_slave_1) entered forwarding state [ 718.534274][T32396] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 718.949140][T32396] veth0_vlan: entered promiscuous mode [ 718.968497][T32396] veth1_vlan: entered promiscuous mode [ 719.017634][T32396] veth0_macvtap: entered promiscuous mode [ 719.032800][T32396] veth1_macvtap: entered promiscuous mode [ 719.066004][T32396] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 719.088845][T32396] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 719.114023][ T1029] netdevsim netdevsim6 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 719.127332][ T1029] netdevsim netdevsim6 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 719.137814][ T1029] netdevsim netdevsim6 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 719.147489][ T1029] netdevsim netdevsim6 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 719.813261][ T5833] Bluetooth: hci6: command tx timeout [ 720.710081][T32442] nci: __nci_request: wait_for_completion_interruptible_timeout failed -512 [ 720.956911][T17989] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 720.982119][T17989] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 721.098064][T17990] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 721.116203][T17990] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 721.166640][T32515] netlink: 8 bytes leftover after parsing attributes in process `syz.1.7108'. [ 721.307798][T18477] lec:lec_start_xmit: lec0:No lecd attached [ 721.323113][T32521] bond4: entered promiscuous mode [ 721.379031][T32526] syz_tun: entered allmulticast mode [ 721.397330][T32526] rdma_rxe: rxe_newlink: failed to add veth0_vlan [ 721.444726][T32525] syz_tun: left allmulticast mode [ 721.892290][ T5833] Bluetooth: hci6: command tx timeout [ 721.999596][T32561] netlink: 'syz.5.7121': attribute type 10 has an invalid length. [ 722.021033][T32561] team0 (unregistering): Port device team_slave_0 removed [ 722.035125][T32561] team0 (unregistering): Port device team_slave_1 removed [ 722.717097][T32571] netlink: 4 bytes leftover after parsing attributes in process `syz.2.7122'. [ 722.876387][T32578] netlink: 8 bytes leftover after parsing attributes in process `syz.5.7124'. [ 722.906458][T32578] netlink: 'syz.5.7124': attribute type 1 has an invalid length. [ 723.139759][T32593] netlink: 8 bytes leftover after parsing attributes in process `syz.2.7128'. [ 723.971905][ T5833] Bluetooth: hci6: command tx timeout [ 724.771204][T32546] nci: __nci_request: wait_for_completion_interruptible_timeout failed -512 [ 725.278024][T32630] netlink: 24 bytes leftover after parsing attributes in process `syz.5.7138'. [ 725.420702][T32638] netlink: 8 bytes leftover after parsing attributes in process `syz.1.7141'. [ 725.766853][T32662] netlink: 'syz.6.7147': attribute type 1 has an invalid length. [ 725.800237][T32662] netlink: 224 bytes leftover after parsing attributes in process `syz.6.7147'. [ 725.963594][T32679] netlink: 8 bytes leftover after parsing attributes in process `syz.6.7147'. [ 725.973618][T32679] netlink: 4 bytes leftover after parsing attributes in process `syz.6.7147'. [ 726.321874][ C0] lec0: NETDEV WATCHDOG: CPU: 0: transmit queue 0 timed out 5010 ms [ 726.329996][ C0] lec:lec_tx_timeout: lec0 [ 728.605365][T32655] nci: __nci_request: wait_for_completion_interruptible_timeout failed -512 [ 728.802379][T32697] bond0: entered promiscuous mode [ 728.807612][T32697] bond_slave_0: entered promiscuous mode [ 728.826048][T32697] bond_slave_1: entered promiscuous mode [ 728.840123][T32701] netlink: 8 bytes leftover after parsing attributes in process `syz.4.7152'. [ 729.153538][T32723] xt_l2tp: v2 doesn't support IP mode [ 729.933419][T32701] Bluetooth: hci5: Opcode 0x0c1a failed: -4 [ 729.941945][T32701] Bluetooth: hci5: Error when powering off device on rfkill (-4) [ 730.182131][ T30] audit: type=1107 audit(1775282814.480:3): pid=32749 uid=0 auid=4294967295 ses=4294967295 subj=unconfined msg=''á"4êGÛÌji7 [ 730.182131][ T30] ñ®ãP(.Koøì”Á¢ÞãÊf«Ã$Y·¥>ÒXîoµoÞƒá”n þ -ìÔ•“Cõß¹çÑ Y“ £ð ôè¬ZË@è4Ÿ®ZËøe˜' [ 730.284487][T32701] Bluetooth: hci4: Opcode 0x0c1a failed: -4 [ 730.342377][T32701] Bluetooth: hci4: Error when powering off device on rfkill (-4) [ 730.408669][T32701] Bluetooth: hci2: Opcode 0x0c1a failed: -4 [ 730.425369][T32701] Bluetooth: hci2: Error when powering off device on rfkill (-4) [ 730.459552][T32761] netlink: 8 bytes leftover after parsing attributes in process `syz.6.7163'. [ 730.547155][ T300] netlink: 'syz.5.7165': attribute type 15 has an invalid length. [ 730.548232][T32763] netlink: 8 bytes leftover after parsing attributes in process `syz.1.7166'. [ 730.590998][ T300] netlink: 'syz.5.7165': attribute type 1 has an invalid length. [ 730.608697][T32701] Bluetooth: hci3: Opcode 0x0c1a failed: -4 [ 730.622041][T32763] netlink: 24 bytes leftover after parsing attributes in process `syz.1.7166'. [ 730.642080][T32701] Bluetooth: hci3: Error when powering off device on rfkill (-4) [ 730.845972][T32701] Bluetooth: hci1: Opcode 0x0c1a failed: -4 [ 730.902005][T32701] Bluetooth: hci1: Error when powering off device on rfkill (-4) [ 731.315386][ T328] netlink: 'syz.1.7172': attribute type 11 has an invalid length. [ 731.325279][ T328] netlink: 64 bytes leftover after parsing attributes in process `syz.1.7172'. [ 731.336784][ T328] netlink: 12 bytes leftover after parsing attributes in process `syz.1.7172'. [ 731.440284][T32701] Bluetooth: hci6: Opcode 0x0c1a failed: -4 [ 731.446599][T32701] Bluetooth: hci6: Error when powering off device on rfkill (-4) [ 731.668856][ T336] netlink: 'syz.1.7174': attribute type 10 has an invalid length. [ 731.827984][ T336] veth0_macvtap: left promiscuous mode [ 732.068593][ T366] netlink: 212408 bytes leftover after parsing attributes in process `syz.4.7180'. [ 732.172781][ T371] netlink: 24 bytes leftover after parsing attributes in process `syz.1.7182'. [ 732.345670][ T378] tipc: Enabled bearer , priority 5 [ 732.475776][ T385] netlink: 4 bytes leftover after parsing attributes in process `syz.1.7186'. [ 732.835383][ T409] netlink: 'syz.5.7194': attribute type 2 has an invalid length. [ 732.854241][ T409] netlink: 'syz.5.7194': attribute type 2 has an invalid length. [ 733.143133][T17667] bond0: (slave bond_slave_0): interface is now down [ 733.150979][T17667] bond0: (slave ÿ): interface is now down [ 733.262742][ T436] netlink: 'syz.2.7200': attribute type 1 has an invalid length. [ 733.310058][ T436] netlink: 'syz.2.7200': attribute type 2 has an invalid length. [ 733.762778][ T464] netlink: 40 bytes leftover after parsing attributes in process `syz.1.7208'. [ 734.235878][ T493] netlink: 4 bytes leftover after parsing attributes in process `syz.6.7215'. [ 734.282895][ T493] team1 (uninitialized): Failed to send options change via netlink (err -105) [ 734.375580][ T499] netlink: 8 bytes leftover after parsing attributes in process `syz.2.7214'. [ 734.385195][ T499] ksmbd: Daemon and kernel module version mismatch. ksmbd: 0, kernel module: 1. User-space ksmbd should terminate. [ 734.466476][ T493] team1: entered promiscuous mode [ 734.482139][ T493] team1: entered allmulticast mode [ 735.048946][ T540] netlink: 8 bytes leftover after parsing attributes in process `syz.5.7226'. [ 735.079282][ T541] veth0: entered promiscuous mode [ 735.186499][ T547] syzkaller1: entered promiscuous mode [ 735.201062][ T547] syzkaller1: entered allmulticast mode [ 735.275536][ T550] netdevsim netdevsim1 netdevsim0: entered promiscuous mode [ 735.355074][ T545] bond1: entered promiscuous mode [ 735.360407][ T545] bond1: entered allmulticast mode [ 735.366996][ T545] 8021q: adding VLAN 0 to HW filter on device bond1 [ 735.466396][ T564] netlink: 48 bytes leftover after parsing attributes in process `syz.1.7233'. [ 735.558171][ T567] netlink: 'syz.5.7234': attribute type 1 has an invalid length. [ 735.627931][ T571] netlink: 4 bytes leftover after parsing attributes in process `syz.6.7235'. [ 735.734700][T17988] bond0: (slave bond_slave_0): interface is now down [ 735.741493][T17988] bond0: (slave ÿ): interface is now down [ 735.770486][ T576] vxcan1 speed is unknown, defaulting to 1000 [ 735.813937][T17988] bond0: now running without any active interface! [ 735.898873][ T539] veth0: left promiscuous mode [ 736.442608][ T610] netlink: 24 bytes leftover after parsing attributes in process `syz.4.7244'. [ 736.509729][ T576] lo speed is unknown, defaulting to 1000 [ 736.592832][ T613] netlink: 28 bytes leftover after parsing attributes in process `syz.5.7247'. [ 736.637755][ T613] net_ratelimit: 10 callbacks suppressed [ 736.637778][ T613] openvswitch: netlink: Flow key attr not present in new flow. [ 736.677500][ T621] netlink: 332 bytes leftover after parsing attributes in process `syz.2.7245'. [ 736.708061][ T613] netlink: 288 bytes leftover after parsing attributes in process `syz.5.7247'. [ 736.947521][ T629] IPVS: Unknown mcast interface: pimreg [ 736.968256][ T631] netlink: 28 bytes leftover after parsing attributes in process `syz.2.7250'. [ 737.509034][ T666] netlink: 'syz.2.7258': attribute type 2 has an invalid length. [ 737.538754][ T666] 9: entered promiscuous mode [ 738.167504][ T696] xt_policy: input policy not valid in POSTROUTING and OUTPUT [ 738.226224][ T698] ipt_REJECT: TCP_RESET invalid for non-tcp [ 738.477345][ T709] netlink: 'syz.6.7272': attribute type 1 has an invalid length. [ 739.159725][ T746] netlink: 'syz.2.7280': attribute type 3 has an invalid length. [ 739.505476][ T772] __nla_validate_parse: 7 callbacks suppressed [ 739.505500][ T772] netlink: 204 bytes leftover after parsing attributes in process `syz.4.7285'. [ 739.547896][ T771] netlink: 28 bytes leftover after parsing attributes in process `syz.5.7286'. [ 739.568545][ T771] netlink: 28 bytes leftover after parsing attributes in process `syz.5.7286'. [ 739.650387][ T779] netlink: 1 bytes leftover after parsing attributes in process `syz.1.7288'. [ 739.704539][ T779] nbd: must specify at least one socket [ 739.715701][ T779] netlink: 'syz.1.7288': attribute type 11 has an invalid length. [ 739.733899][ T779] netlink: 132 bytes leftover after parsing attributes in process `syz.1.7288'. [ 739.755279][ T791] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 739.915534][ T800] erspan0: entered promiscuous mode [ 740.002698][ T804] netlink: 48 bytes leftover after parsing attributes in process `syz.1.7293'. [ 740.400981][ T818] openvswitch: netlink: Message has -2 unknown bytes. [ 740.811655][ T829] netlink: 256 bytes leftover after parsing attributes in process `syz.4.7300'. [ 741.098093][ T851] netlink: 8 bytes leftover after parsing attributes in process `syz.5.7307'. [ 741.227076][ T855] netlink: 8 bytes leftover after parsing attributes in process `syz.5.7309'. [ 741.245150][ T855] netlink: 24 bytes leftover after parsing attributes in process `syz.5.7309'. [ 741.288382][ T866] netlink: 'syz.2.7312': attribute type 12 has an invalid length. [ 741.447716][ T875] veth0_macvtap: left promiscuous mode [ 741.448445][ T877] netlink: 'syz.5.7317': attribute type 1 has an invalid length. [ 741.579127][ T878] workqueue: Failed to create a rescuer kthread for wq "bond3": -EINTR [ 741.580327][ T877] workqueue: Failed to create a rescuer kthread for wq "bond3": -EINTR [ 741.946245][ T905] netlink: 'syz.5.7323': attribute type 10 has an invalid length. [ 741.958463][ T905] bridge0: port 1(bridge_slave_0) entered disabled state [ 741.988565][ T905] bridge0: port 1(bridge_slave_0) entered blocking state [ 741.995949][ T905] bridge0: port 1(bridge_slave_0) entered forwarding state [ 742.028661][ T910] xt_hashlimit: size too large, truncated to 1048576 [ 742.063798][ T905] bond0: (slave bridge0): Enslaving as an active interface with an up link [ 742.086205][ T913] netlink: 'syz.2.7322': attribute type 64 has an invalid length. [ 742.245427][ T930] netlink: 'syz.4.7330': attribute type 4 has an invalid length. [ 742.259678][ T930] netlink: 'syz.4.7330': attribute type 4 has an invalid length. [ 742.399026][ T944] netlink: 'syz.5.7333': attribute type 6 has an invalid length. [ 742.407304][ T944] netlink: 'syz.5.7333': attribute type 5 has an invalid length. [ 742.417660][ T944] netlink: 'syz.5.7333': attribute type 3 has an invalid length. [ 742.437686][ T944] bridge_slave_0: default FDB implementation only supports local addresses [ 742.447215][ T30] audit: type=1800 audit(1775282826.740:4): pid=937 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="syz.1.7331" name="memory.events" dev="tmpfs" ino=1199 res=0 errno=0 [ 742.469854][ T951] netlink: 'syz.1.7331': attribute type 4 has an invalid length. [ 742.676694][ T957] xt_TCPMSS: path-MTU clamping only supported in FORWARD, OUTPUT and POSTROUTING hooks [ 742.826363][ T971] openvswitch: netlink: Unexpected mask (mask=4000040, allowed=10048) [ 742.849821][ T972] IPVS: set_ctl: invalid protocol: 0 172.20.20.170:20000 [ 743.060156][ T979] bond2: (slave vxcan3): The slave device specified does not support setting the MAC address [ 743.084131][ T979] bond2: (slave vxcan3): Error -95 calling set_mac_address [ 743.224495][ T974] bond2: (slave gretap2): making interface the new active one [ 743.233889][ T974] bond2: (slave gretap2): Enslaving as an active interface with an up link [ 743.440227][ T1004] Can not set IPV6_FL_F_REFLECT if flowlabel_consistency sysctl is enable [ 744.347568][ T1075] 8021q: adding VLAN 0 to HW filter on device bond5 [ 745.177283][ T1130] __nla_validate_parse: 36 callbacks suppressed [ 745.177307][ T1130] netlink: 104 bytes leftover after parsing attributes in process `syz.2.7384'. [ 745.214749][ T1132] netlink: 12 bytes leftover after parsing attributes in process `syz.4.7385'. [ 745.475050][ T1132] bond6: entered promiscuous mode [ 745.517233][ T1132] 8021q: adding VLAN 0 to HW filter on device bond6 [ 745.657444][ T1158] netlink: 212368 bytes leftover after parsing attributes in process `syz.5.7388'. [ 745.888979][ T1162] netlink: 8 bytes leftover after parsing attributes in process `syz.2.7390'. [ 745.901179][ T1167] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check. [ 745.920955][ T1162] netlink: 44 bytes leftover after parsing attributes in process `syz.2.7390'. [ 746.280194][ T1193] netdevsim netdevsim5: Direct firmware load for . failed with error -2 [ 746.320291][ T1197] netlink: 108 bytes leftover after parsing attributes in process `syz.6.7401'. [ 746.330078][ T1193] netdevsim netdevsim5: Falling back to sysfs fallback for: . [ 746.421137][ T1205] netlink: 212348 bytes leftover after parsing attributes in process `syz.2.7404'. [ 746.449233][ T1199] vlan3: entered promiscuous mode [ 746.450264][ T1205] netlink: ct family unspecified [ 746.465670][ T1199] bridge0: entered promiscuous mode [ 746.802873][ T1224] netlink: 'syz.1.7410': attribute type 11 has an invalid length. [ 746.815505][ T1224] netlink: 'syz.1.7410': attribute type 11 has an invalid length. [ 746.836886][ T1224] netlink: 224 bytes leftover after parsing attributes in process `syz.1.7410'. [ 747.323239][ T1260] ip6t_srh: unknown srh invflags 4000 [ 747.373436][ T1262] validate_nla: 13 callbacks suppressed [ 747.373461][ T1262] netlink: 'syz.2.7418': attribute type 10 has an invalid length. [ 747.410567][ T1262] netlink: 4 bytes leftover after parsing attributes in process `syz.2.7418'. [ 747.583423][ T1302] lec:lec_start_xmit: lec0:No lecd attached [ 747.643564][ T1286] netlink: 44 bytes leftover after parsing attributes in process `syz.4.7421'. [ 748.831554][ T1341] : entered promiscuous mode [ 749.115380][ T1357] netlink: 'syz.6.7437': attribute type 1 has an invalid length. [ 749.337508][ T1372] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check. [ 749.340411][ T1373] netlink: 'syz.5.7440': attribute type 9 has an invalid length. [ 750.532534][ T1439] netlink: 'syz.4.7464': attribute type 1 has an invalid length. [ 750.569315][ T1439] bond7: entered promiscuous mode [ 750.575565][ T1439] 8021q: adding VLAN 0 to HW filter on device bond7 [ 750.587812][ T1442] erspan0: entered allmulticast mode [ 750.651559][ T1439] bond7: (slave bridge1): making interface the new active one [ 750.661206][ T1439] bridge1: entered promiscuous mode [ 750.714374][ T1439] bridge1: left promiscuous mode [ 750.928567][ T1463] syzkaller0: entered promiscuous mode [ 750.935145][ T1463] syzkaller0: entered allmulticast mode [ 751.057428][ T1461] syzkaller0: entered promiscuous mode [ 751.075130][ T1461] syzkaller0: entered allmulticast mode [ 751.252896][ T1479] __nla_validate_parse: 5 callbacks suppressed [ 751.252917][ T1479] netlink: 36 bytes leftover after parsing attributes in process `syz.1.7472'. [ 751.280827][ T1483] netlink: 'syz.5.7473': attribute type 1 has an invalid length. [ 751.295659][ T1483] netlink: 48 bytes leftover after parsing attributes in process `syz.5.7473'. [ 751.433013][ T1486] netlink: 20 bytes leftover after parsing attributes in process `syz.6.7475'. [ 751.631658][ T1501] xt_bpf: check failed: parse error [ 751.639325][ T1503] xt_bpf: check failed: parse error [ 751.677762][ T1504] netlink: 8 bytes leftover after parsing attributes in process `syz.4.7479'. [ 751.697170][ T1504] netlink: 24 bytes leftover after parsing attributes in process `syz.4.7479'. [ 751.764739][ T1508] netlink: 16 bytes leftover after parsing attributes in process `syz.2.7481'. [ 751.775984][ T1506] syzkaller1: entered promiscuous mode [ 751.783126][ T1506] syzkaller1: entered allmulticast mode [ 751.855451][ T1511] netlink: 256 bytes leftover after parsing attributes in process `syz.6.7482'. [ 752.003614][ T1520] netlink: 8 bytes leftover after parsing attributes in process `syz.4.7485'. [ 752.166712][ T1528] netlink: 4 bytes leftover after parsing attributes in process `syz.2.7489'. [ 752.257071][ T1533] netlink: 44 bytes leftover after parsing attributes in process `syz.1.7491'. [ 752.278472][ T1533] netlink: 'syz.1.7491': attribute type 6 has an invalid length. [ 752.289490][ T1533] netlink: 'syz.1.7491': attribute type 5 has an invalid length. [ 752.344932][ T1541] netlink: 'syz.6.7490': attribute type 1 has an invalid length. [ 752.661420][ T1553] netlink: 'syz.1.7496': attribute type 1 has an invalid length. [ 752.673325][ T1559] ICMPv6: Received fragmented ndisc packet. Carefully consider disabling suppress_frag_ndisc. [ 752.702880][ T1558] netlink: 'syz.5.7498': attribute type 1 has an invalid length. [ 752.820167][ T1562] netlink: 'syz.6.7499': attribute type 18 has an invalid length. [ 752.899055][ T1102] netdevsim netdevsim6 netdevsim0: set [0, 0] type 1 family 0 port 8472 - 0 [ 752.916331][ T1568] 8021q: adding VLAN 0 to HW filter on device ipvlan0 [ 752.986195][ T1102] netdevsim netdevsim6 netdevsim1: set [0, 0] type 1 family 0 port 8472 - 0 [ 753.001090][ T1102] netdevsim netdevsim6 netdevsim2: set [0, 0] type 1 family 0 port 8472 - 0 [ 753.019932][ T1102] netdevsim netdevsim6 netdevsim3: set [0, 0] type 1 family 0 port 8472 - 0 [ 753.135579][ T1579] netlink: 'syz.6.7499': attribute type 39 has an invalid length. [ 753.221490][ T1579] hsr_slave_1 (unregistering): left promiscuous mode [ 753.237531][ T1585] openvswitch: netlink: Missing key (keys=40, expected=200000) [ 753.251944][ C0] lec0: NETDEV WATCHDOG: CPU: 0: transmit queue 0 timed out 5670 ms [ 753.260169][ C0] lec:lec_tx_timeout: lec0 [ 753.430283][ T1594] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check. [ 753.697596][ T1606] vxcan1 speed is unknown, defaulting to 1000 [ 753.818135][ T1611] netlink: 'syz.4.7516': attribute type 12 has an invalid length. [ 753.929820][ T1611] bond8: option primary_reselect: invalid value (255) [ 753.946106][ T1611] bond8 (unregistering): Released all slaves [ 753.959483][ T1618] netlink: 'syz.1.7517': attribute type 1 has an invalid length. [ 754.260774][ T1606] lo speed is unknown, defaulting to 1000 [ 755.382106][ T1688] netlink: 'syz.6.7538': attribute type 1 has an invalid length. [ 755.429557][ T1693] netlink: 'syz.2.7541': attribute type 21 has an invalid length. [ 755.469259][ T1696] bond2: (slave vxcan3): The slave device specified does not support setting the MAC address [ 755.486700][ T1696] bond2: (slave vxcan3): Error -95 calling set_mac_address [ 755.516626][ T1693] netlink: 'syz.2.7541': attribute type 6 has an invalid length. [ 755.544790][ T1688] bond2: (slave gretap1): making interface the new active one [ 755.554097][ T1688] bond2: (slave gretap1): Enslaving as an active interface with an up link [ 755.566572][ T1698] tipc: Resetting bearer [ 755.596797][ T1698] mac80211_hwsim hwsim70 syzkaller0: entered promiscuous mode [ 755.604696][ T1698] mac80211_hwsim hwsim70 syzkaller0: entered allmulticast mode [ 755.628245][ T1688] macvlan2: entered promiscuous mode [ 755.634170][ T1688] macvlan2: entered allmulticast mode [ 755.643056][ T1688] bond2: entered promiscuous mode [ 755.649942][ T1688] gretap1: entered promiscuous mode [ 755.685661][ T1688] 8021q: adding VLAN 0 to HW filter on device macvlan2 [ 755.698741][ T1688] bond2: (slave macvlan2): the slave hw address is in use by the bond; giving it the hw address of gretap1 [ 755.723114][ T1688] bond2: left promiscuous mode [ 755.737945][ T1688] gretap1: left promiscuous mode [ 755.777765][ T1701] tipc: Resetting bearer [ 755.791103][ T1708] Cannot find add_set index 65532 as target [ 755.944585][ T1711] netlink: 'syz.2.7547': attribute type 7 has an invalid length. [ 756.121284][ T1726] xt_connbytes: Forcing CT accounting to be enabled [ 756.425251][ T1744] __nla_validate_parse: 24 callbacks suppressed [ 756.425277][ T1744] netlink: 1 bytes leftover after parsing attributes in process `syz.5.7555'. [ 756.499170][ T1750] netlink: 144 bytes leftover after parsing attributes in process `syz.4.7556'. [ 756.621542][ T1750] vxcan1: entered promiscuous mode [ 756.662125][ T1750] vxcan1: entered allmulticast mode [ 756.667597][ T1750] team0: Device vxcan1 is of different type [ 756.944687][ T1775] netlink: 12 bytes leftover after parsing attributes in process `syz.6.7561'. [ 756.982649][ T1775] 8021q: adding VLAN 0 to HW filter on device batadv1 [ 756.992701][ T1775] team0: Port device batadv1 added [ 757.000421][ T1773] netlink: 216 bytes leftover after parsing attributes in process `syz.4.7563'. [ 757.010470][ T1774] netlink: 8 bytes leftover after parsing attributes in process `syz.4.7563'. [ 757.454126][ T1802] netlink: 8 bytes leftover after parsing attributes in process `syz.5.7571'. [ 757.557906][ T1813] netlink: 232 bytes leftover after parsing attributes in process `syz.4.7570'. [ 757.620243][ T1809] workqueue: Failed to create a rescuer kthread for wq "bond3": -EINTR [ 757.737015][ T1819] workqueue: Failed to create a rescuer kthread for wq "nfc3_nci_tx_wq": -EINTR [ 757.824870][ T1831] netlink: 440 bytes leftover after parsing attributes in process `syz.5.7575'. [ 758.293337][ T1853] validate_nla: 4 callbacks suppressed [ 758.293358][ T1853] netlink: 'syz.1.7581': attribute type 21 has an invalid length. [ 758.308551][ T1851] netlink: 24 bytes leftover after parsing attributes in process `syz.6.7582'. [ 758.332336][ T1853] netlink: 4 bytes leftover after parsing attributes in process `syz.1.7581'. [ 758.342120][ T1859] netlink: 'syz.4.7583': attribute type 1 has an invalid length. [ 758.829508][ T1886] tipc: Started in network mode [ 758.845977][ T1886] tipc: Node identity aaaaaaaaaa32, cluster identity 4711 [ 758.876868][ T1886] tipc: Enabled bearer , priority 24 [ 759.023540][ T1901] syzkaller1: entered promiscuous mode [ 759.029420][ T1901] syzkaller1: entered allmulticast mode [ 759.072894][ T1901] batman_adv: batadv0: Adding interface: dummy0 [ 759.080544][ T1901] batman_adv: batadv0: The MTU of interface dummy0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 759.111590][ T1901] batman_adv: batadv0: Interface activated: dummy0 [ 759.144651][ T1906] batadv0: mtu less than device minimum [ 759.183985][ T1906] batman_adv: batadv0: Forced to purge local tt entries to fit new maximum fragment MTU (-320) [ 759.196901][ T1906] batman_adv: batadv0: Forced to purge local tt entries to fit new maximum fragment MTU (-320) [ 759.209240][ T1906] batman_adv: batadv0: Forced to purge local tt entries to fit new maximum fragment MTU (-320) [ 759.221360][ T1906] batman_adv: batadv0: Forced to purge local tt entries to fit new maximum fragment MTU (-320) [ 759.233593][ T1906] batman_adv: batadv0: Forced to purge local tt entries to fit new maximum fragment MTU (-320) [ 759.245501][ T1906] batman_adv: batadv0: Forced to purge local tt entries to fit new maximum fragment MTU (-320) [ 759.257679][ T1906] batman_adv: batadv0: Forced to purge local tt entries to fit new maximum fragment MTU (-320) [ 759.269759][ T1906] batman_adv: batadv0: Forced to purge local tt entries to fit new maximum fragment MTU (-320) [ 759.281867][ T1906] batman_adv: batadv0: Forced to purge local tt entries to fit new maximum fragment MTU (-320) [ 759.543807][ T1924] tipc: New replicast peer: 172.20.20.19 [ 759.578343][ T1930] xt_cgroup: invalid path, errno=-2 [ 759.586730][ T1920] syzkaller0: entered promiscuous mode [ 759.874526][T28649] tipc: Node number set to 10005162 [ 760.247005][ T1959] netlink: 'syz.1.7612': attribute type 1 has an invalid length. [ 760.346087][ T1962] bond3: (slave gretap3): making interface the new active one [ 760.371461][ T1962] bond3: (slave gretap3): Enslaving as an active interface with an up link [ 760.915451][ T1953] llcp: nfc_llcp_send_ui_frame: Could not allocate PDU (error=-512) [ 760.927204][ T1953] llcp: nfc_llcp_send_ui_frame: Could not allocate PDU (error=-512) [ 761.227016][ T2003] netlink: 'syz.5.7626': attribute type 4 has an invalid length. [ 761.875937][ T2042] __nla_validate_parse: 5 callbacks suppressed [ 761.875958][ T2042] netlink: 32 bytes leftover after parsing attributes in process `syz.2.7636'. [ 761.914662][ T2042] netlink: 8 bytes leftover after parsing attributes in process `syz.2.7636'. [ 762.230749][ T2032] sctp: [Deprecated]: syz.5.7634 (pid 2032) Use of struct sctp_assoc_value in delayed_ack socket option. [ 762.230749][ T2032] Use struct sctp_sack_info instead [ 764.936835][ T2062] netlink: 32 bytes leftover after parsing attributes in process `syz.5.7642'. [ 765.200926][ T2074] netlink: 'syz.5.7645': attribute type 1 has an invalid length. [ 765.229659][ T2074] netlink: 'syz.5.7645': attribute type 1 has an invalid length. [ 765.340392][ T2089] netlink: 'syz.2.7650': attribute type 61 has an invalid length. [ 765.361396][ T2089] netlink: 16 bytes leftover after parsing attributes in process `syz.2.7650'. [ 765.385311][ T2089] netlink: 4 bytes leftover after parsing attributes in process `syz.2.7650'. [ 765.417596][ T2091] sctp: [Deprecated]: syz.4.7651 (pid 2091) Use of struct sctp_assoc_value in delayed_ack socket option. [ 765.417596][ T2091] Use struct sctp_sack_info instead [ 765.507217][ T2100] netlink: 104 bytes leftover after parsing attributes in process `syz.1.7654'. [ 765.738984][ T2111] vlan1: entered allmulticast mode [ 765.771942][ T2111] veth0_vlan: entered allmulticast mode [ 765.783768][ T2104] net_ratelimit: 10 callbacks suppressed [ 765.783791][ T2104] hsr_slave_0: hsr_addr_subst_dest: Unknown node [ 765.796170][ T2104] hsr_slave_1: hsr_addr_subst_dest: Unknown node [ 765.823996][ T2104] syzkaller0: entered promiscuous mode [ 765.942982][ T2119] Cannot find del_set index 4 as target [ 766.028428][ T2125] netlink: 'syz.4.7665': attribute type 29 has an invalid length. [ 766.559631][ T2158] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check. [ 766.911351][ T2179] netlink: 207952 bytes leftover after parsing attributes in process `syz.1.7676'. [ 767.128800][ T2186] veth0: entered promiscuous mode [ 767.227124][ T2186] veth0: left promiscuous mode [ 767.378991][ T2204] netlink: 12 bytes leftover after parsing attributes in process `syz.1.7682'. [ 767.395027][ T2212] SET target dimension over the limit! [ 767.402795][ T2209] netlink: 12 bytes leftover after parsing attributes in process `syz.6.7685'. [ 767.438753][ T2203] netlink: 12 bytes leftover after parsing attributes in process `syz.1.7682'. [ 767.478051][ T2209] 8021q: adding VLAN 0 to HW filter on device bond3 [ 767.563538][ T2223] macvlan0: entered promiscuous mode [ 767.750575][ T2238] netlink: 28 bytes leftover after parsing attributes in process `syz.6.7692'. [ 767.759831][ T2238] netlink: 28 bytes leftover after parsing attributes in process `syz.6.7692'. [ 768.368246][ T2269] netlink: 12 bytes leftover after parsing attributes in process `syz.5.7700'. [ 768.401679][ T2267] netlink: 8 bytes leftover after parsing attributes in process `syz.5.7700'. [ 768.447588][ T2272] openvswitch: netlink: ct_state flags 010000e0 unsupported [ 768.582004][ T2272] netlink: 28 bytes leftover after parsing attributes in process `syz.6.7702'. [ 768.599653][ T2278] netlink: 72 bytes leftover after parsing attributes in process `syz.1.7705'. [ 768.609856][ T2272] tipc: Trying to set illegal importance in message [ 768.796531][ T2287] netlink: 'syz.6.7708': attribute type 2 has an invalid length. [ 768.805317][ T2287] netlink: 'syz.6.7708': attribute type 11 has an invalid length. [ 768.820611][ T2284] bond4 (unregistering): Released all slaves [ 768.885579][ T2293] netlink: 'syz.4.7710': attribute type 2 has an invalid length. [ 768.905836][ T2293] !: entered promiscuous mode [ 769.018874][ T2297] bond8: option arp_validate: mode dependency failed, not supported in mode balance-alb(6) [ 769.034104][ T2297] bond8 (unregistering): Released all slaves [ 769.065139][ T2300] tipc: Enabled bearer , priority 1 [ 769.278097][ T2309] ip6gre0: Master is either lo or non-ether device [ 769.432630][ T2321] 8021q: VLANs not supported on lo [ 769.854785][ T2345] netlink: 'syz.5.7728': attribute type 3 has an invalid length. [ 769.867077][ T2345] netlink: 'syz.5.7728': attribute type 2 has an invalid length. [ 769.878712][ T2342] netlink: 'syz.6.7727': attribute type 64 has an invalid length. [ 770.222425][ T2365] veth0_to_batadv: entered promiscuous mode [ 770.235317][ T2365] macsec1: entered promiscuous mode [ 770.245532][ T2365] macsec1: entered allmulticast mode [ 770.265613][ T2365] veth0_to_batadv: entered allmulticast mode [ 770.310466][ T2365] veth0_to_batadv: left allmulticast mode [ 770.318673][ T2365] veth0_to_batadv: left promiscuous mode [ 770.398881][ T2367] veth0_to_batadv: entered promiscuous mode [ 770.416454][ T2367] macsec1: entered promiscuous mode [ 770.432157][ T2367] macsec1: entered allmulticast mode [ 770.437539][ T2367] veth0_to_batadv: entered allmulticast mode [ 770.461630][ T2367] veth0_to_batadv: left allmulticast mode [ 770.488676][ T2367] veth0_to_batadv: left promiscuous mode [ 770.666061][ T2387] syzkaller0: entered promiscuous mode [ 770.671943][ T2387] syzkaller0: entered allmulticast mode [ 770.761655][ T2387] openvswitch: netlink: Missing key (keys=40, expected=2000) [ 770.899186][T17989] netdevsim netdevsim2 netdevsim0: set [0, 0] type 1 family 0 port 8472 - 0 [ 770.911233][ T2393] IPVS: Scheduler module ip_vs_sip not found [ 770.920155][T17989] netdevsim netdevsim2 netdevsim1: set [0, 0] type 1 family 0 port 8472 - 0 [ 771.023574][T17667] netdevsim netdevsim2 netdevsim2: set [0, 0] type 1 family 0 port 8472 - 0 [ 771.044309][T17667] netdevsim netdevsim2 netdevsim3: set [0, 0] type 1 family 0 port 8472 - 0 [ 771.058417][ T2412] sctp: [Deprecated]: syz.1.7745 (pid 2412) Use of int in max_burst socket option. [ 771.058417][ T2412] Use struct sctp_assoc_value instead [ 771.302913][ T2425] gretap2: entered promiscuous mode [ 771.334001][ T2425] batman_adv: batadv0: Adding interface: gretap2 [ 771.355935][ T2425] batman_adv: batadv0: The MTU of interface gretap2 is too small (1462) to handle the transport of batman-adv packets. If you experience problems getting traffic through try increasing the MTU to 1500. [ 771.377146][ T2425] batman_adv: batadv0: Not using interface gretap2 (retrying later): interface not active [ 771.660457][ T2457] netlink: 'syz.6.7756': attribute type 2 has an invalid length. [ 772.297552][ T2498] __nla_validate_parse: 19 callbacks suppressed [ 772.297575][ T2498] netlink: 60 bytes leftover after parsing attributes in process `syz.6.7765'. [ 772.419047][ T2505] netlink: 20 bytes leftover after parsing attributes in process `syz.4.7769'. [ 772.523163][ T2513] syzkaller1: entered promiscuous mode [ 772.528955][ T2513] syzkaller1: entered allmulticast mode [ 772.590096][ T2513] bond3: Removing last arp target with arp_interval on [ 772.636587][ T2519] bond4: option packets_per_slave: invalid value (18446744073709551615) [ 772.645513][ T2519] bond4: option packets_per_slave: allowed values 0 - 65535 [ 772.657147][ T2519] bond4 (unregistering): Released all slaves [ 772.662946][ T2524] netlink: 'syz.6.7772': attribute type 1 has an invalid length. [ 772.718318][ T2521] netlink: 179344 bytes leftover after parsing attributes in process `syz.6.7772'. [ 772.757482][ T2530] netlink: 8 bytes leftover after parsing attributes in process `syz.2.7774'. [ 772.951651][ T2539] netlink: 20 bytes leftover after parsing attributes in process `syz.6.7778'. [ 772.976280][ T2539] team0: entered promiscuous mode [ 772.981454][ T2539] team_slave_0: entered promiscuous mode [ 773.023315][ T2539] team_slave_1: entered promiscuous mode [ 773.029249][ T2539] batadv1: entered promiscuous mode [ 773.052966][ T2539] team0: entered allmulticast mode [ 773.078477][ T2539] team_slave_0: entered allmulticast mode [ 773.097194][ T2539] team_slave_1: entered allmulticast mode [ 773.112180][ T2539] batadv1: entered allmulticast mode [ 773.180567][ T2539] team0: Cannot enslave team device to itself [ 773.281649][ T2545] vxcan1 speed is unknown, defaulting to 1000 [ 773.332393][ T2561] netlink: 24 bytes leftover after parsing attributes in process `syz.4.7781'. [ 773.359064][ T2566] netlink: 60 bytes leftover after parsing attributes in process `syz.6.7782'. [ 773.909419][ T2585] vxcan1 speed is unknown, defaulting to 1000 [ 773.918563][ T2545] lo speed is unknown, defaulting to 1000 [ 774.025950][ T2596] netlink: set zone limit has 4 unknown bytes [ 774.701631][ T2585] lo speed is unknown, defaulting to 1000 [ 774.781408][ T2625] netlink: 32 bytes leftover after parsing attributes in process `syz.1.7795'. [ 774.793275][ T2632] netlink: 36 bytes leftover after parsing attributes in process `syz.5.7797'. [ 774.804522][ T2626] bridge3: the hash_elasticity option has been deprecated and is always 16 [ 775.384492][ T2681] 8021q: VLANs not supported on tunl0 [ 775.516521][T28649] IPVS: starting estimator thread 0... [ 775.535008][ T2683] vxcan1 speed is unknown, defaulting to 1000 [ 775.662412][ T2690] IPVS: using max 28 ests per chain, 67200 per kthread [ 775.789162][ T2698] netlink: 8 bytes leftover after parsing attributes in process `syz.4.7811'. [ 775.844264][ T2683] lo speed is unknown, defaulting to 1000 [ 775.869520][ T2694] syz_tun: entered allmulticast mode [ 775.920595][ T2699] tap0: tun_chr_ioctl cmd 1074025678 [ 775.927275][ T2699] tap0: group set to 0 [ 776.643654][ T2739] netlink: 'syz.2.7818': attribute type 9 has an invalid length. [ 776.652738][ T2739] netlink: 'syz.2.7818': attribute type 11 has an invalid length. [ 776.660776][ T2739] netlink: 'syz.2.7818': attribute type 12 has an invalid length. [ 776.680027][ T2728] bond6: option tlb_dynamic_lb: mode dependency failed, not supported in mode balance-xor(2) [ 776.693133][ T2728] bond6 (unregistering): Released all slaves [ 776.705755][ T2740] netlink: 'syz.4.7820': attribute type 1 has an invalid length. [ 776.737686][ T2692] syz_tun: left allmulticast mode [ 776.935946][ T2747] macsec2: entered promiscuous mode [ 777.036535][ T2748] A link change request failed with some changes committed already. Interface bridge_slave_0 may have been left with an inconsistent configuration, please check. [ 777.349205][ T2776] __nla_validate_parse: 5 callbacks suppressed [ 777.349226][ T2776] netlink: 32 bytes leftover after parsing attributes in process `syz.4.7828'. [ 777.366697][ T2780] netlink: 32 bytes leftover after parsing attributes in process `syz.4.7828'. [ 777.598755][ T2789] netlink: 'syz.5.7830': attribute type 2 has an invalid length. [ 777.655426][ T2786] syzkaller0: entered allmulticast mode [ 777.788974][ T2797] tc_dump_action: action bad kind [ 777.801484][ T2808] netlink: 8 bytes leftover after parsing attributes in process `syz.1.7835'. [ 777.823778][ T2807] pimreg3: entered allmulticast mode [ 777.832061][ T2806] netlink: 248 bytes leftover after parsing attributes in process `syz.2.7836'. [ 780.043836][ T2801] tc_dump_action: action bad kind [ 780.053763][ T2841] netlink: 'syz.1.7843': attribute type 12 has an invalid length. [ 780.239758][ T2843] syzkaller0: entered promiscuous mode [ 780.245661][ T2843] syzkaller0: entered allmulticast mode [ 780.285399][ T2859] RDS: rds_bind could not find a transport for 400:0:1200:0:1030:0:ffff:ffff, load rds_tcp or rds_rdma? [ 780.332352][ T2863] SET target dimension over the limit! [ 780.404158][ T2865] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 780.882934][ T2910] IPVS: Schedule: port zero only supported in persistent services, check your ipvs configuration [ 780.966394][ T2914] lo: entered promiscuous mode [ 781.089997][ T2926] netlink: 24 bytes leftover after parsing attributes in process `syz.5.7864'. [ 781.118332][ T2926] bond0: entered promiscuous mode [ 781.126286][ T2926] bond_slave_0: entered promiscuous mode [ 781.132823][ T2926] bond_slave_1: entered promiscuous mode [ 781.139019][ T2926] bridge_slave_1: entered promiscuous mode [ 781.147135][ T2926] bridge0: entered promiscuous mode [ 781.159767][ T2926] batadv0: entered promiscuous mode [ 781.168297][ T2926] debugfs: 'hsr1' already exists in 'hsr' [ 781.175065][ T2926] Cannot create hsr debugfs directory [ 781.181420][ T2926] hsr1: entered promiscuous mode [ 781.187519][ T2926] hsr1: entered allmulticast mode [ 781.193299][ T2926] bond0: entered allmulticast mode [ 781.198596][ T2926] bond_slave_0: entered allmulticast mode [ 781.205410][ T2926] bond_slave_1: entered allmulticast mode [ 781.211310][ T2926] bridge_slave_1: entered allmulticast mode [ 781.218571][ T2926] bridge0: entered allmulticast mode [ 781.225332][ T2926] batadv0: entered allmulticast mode [ 781.231408][ T2926] 8021q: adding VLAN 0 to HW filter on device hsr1 [ 781.241171][ T2926] bond0: left promiscuous mode [ 781.247379][ T2926] bond_slave_0: left promiscuous mode [ 781.255735][ T2926] bond_slave_1: left promiscuous mode [ 781.261453][ T2926] bridge_slave_1: left promiscuous mode [ 781.279809][ T2926] bridge0: left promiscuous mode [ 781.293904][ T2926] batadv0: left promiscuous mode [ 781.456611][ T2934] netlink: 4 bytes leftover after parsing attributes in process `syz.6.7866'. [ 781.499607][ T2934] netlink: 4 bytes leftover after parsing attributes in process `syz.6.7866'. [ 781.518705][ T2934] netlink: 8 bytes leftover after parsing attributes in process `syz.6.7866'. [ 781.795389][ T2952] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check. [ 782.108025][ T2984] netlink: 4 bytes leftover after parsing attributes in process `syz.1.7879'. [ 782.142247][ T2984] netlink: 96 bytes leftover after parsing attributes in process `syz.1.7879'. [ 782.151570][ T2984] 8021q: VLANs not supported on gre0 [ 782.196535][ T2978] netlink: 'syz.4.7877': attribute type 4 has an invalid length. [ 782.378141][ T2990] ipt_rpfilter: unknown options [ 782.576416][ T3006] netlink: 'syz.2.7887': attribute type 10 has an invalid length. [ 782.646310][ T3008] netlink: 12 bytes leftover after parsing attributes in process `syz.6.7888'. [ 782.855389][ T3011] bridge1: port 1(veth7) entered blocking state [ 782.862479][ T3011] bridge1: port 1(veth7) entered disabled state [ 782.869031][ T3011] veth7: entered allmulticast mode [ 782.916822][ T3011] veth7: entered promiscuous mode [ 782.944938][ T3018] netlink: 8 bytes leftover after parsing attributes in process `syz.2.7890'. [ 782.980615][ T3008] bridge1: port 2(veth9) entered blocking state [ 782.988290][ T3008] bridge1: port 2(veth9) entered disabled state [ 782.995868][ T3008] veth9: entered allmulticast mode [ 782.997077][ T3022] netlink: 8 bytes leftover after parsing attributes in process `syz.4.7891'. [ 783.007753][ T3008] veth9: entered promiscuous mode [ 783.018970][ T3015] netlink: 8 bytes leftover after parsing attributes in process `syz.2.7890'. [ 783.047849][ T3018] netlink: 8 bytes leftover after parsing attributes in process `syz.2.7890'. [ 783.227423][ T3029] netlink: 4 bytes leftover after parsing attributes in process `syz.2.7893'. [ 783.300228][ T3029] netlink: 4 bytes leftover after parsing attributes in process `syz.2.7893'. [ 783.330492][ T3029] netlink: 4 bytes leftover after parsing attributes in process `syz.2.7893'. [ 783.342720][ T3032] netlink: 12 bytes leftover after parsing attributes in process `syz.4.7895'. [ 783.352605][ T3032] netlink: 60 bytes leftover after parsing attributes in process `syz.4.7895'. [ 783.680746][ T3053] IPVS: set_ctl: invalid protocol: 33 127.0.0.1:20002 [ 783.699945][ T3057] bridge_slave_0: left allmulticast mode [ 783.706345][ T3057] bridge_slave_0: left promiscuous mode [ 783.739792][ T3057] bridge0: port 1(bridge_slave_0) entered disabled state [ 783.819903][ T3057] bond0: (slave bridge0): Releasing backup interface [ 783.841225][ T3057] bridge0 (unregistering): left allmulticast mode [ 784.159557][ T3081] tipc: Enabling of bearer rejected, failed to enable media [ 784.305526][T18477] lec:lec_start_xmit: lec0:No lecd attached [ 784.321570][ T3088] netlink: 'syz.1.7912': attribute type 10 has an invalid length. [ 784.415219][ T3088] team0 (unregistering): Port device team_slave_0 removed [ 784.468534][ T3088] team0 (unregistering): Port device team_slave_1 removed [ 784.484679][ T3091] tipc: Enabling of bearer rejected, failed to enable media [ 784.943835][ T3136] x_tables: ip_tables: TCPOPTSTRIP target: only valid in mangle table, not security [ 784.957103][ T3137] IPv6: NLM_F_CREATE should be specified when creating new route [ 784.970155][ T3117] bond0: entered allmulticast mode [ 784.982364][ T3117] bond_slave_0: entered allmulticast mode [ 784.998621][ T3117] bond_slave_1: entered allmulticast mode [ 785.304916][ T3158] netlink: 'syz.5.7926': attribute type 3 has an invalid length. [ 785.359951][ T3149] netlink: 'syz.5.7926': attribute type 10 has an invalid length. [ 785.404663][ T3149] bond0: option actor_port_prio: mode dependency failed, not supported in mode balance-rr(0) [ 785.506765][ T3162] bridge2: trying to set multicast query interval above maximum, setting to 8640000 (86400000ms) [ 786.101579][ T3206] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check. [ 786.167545][ T3207] pimreg: entered allmulticast mode [ 786.317326][ T3218] IPv6: RTM_NEWROUTE with no NLM_F_CREATE or NLM_F_REPLACE [ 786.324864][ T3218] IPv6: NLM_F_CREATE should be set when creating new route [ 786.332434][ T3218] IPv6: NLM_F_CREATE should be set when creating new route [ 786.339812][ T3218] IPv6: NLM_F_CREATE should be set when creating new route [ 786.373195][ T3220] IPv6: RTM_NEWROUTE with no NLM_F_CREATE or NLM_F_REPLACE [ 786.604061][ T30] audit: type=1800 audit(1775282870.910:5): pid=3230 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.4.7946" name=02 dev="tmpfs" ino=1524 res=0 errno=0 [ 786.921468][ T3239] geneve2: entered promiscuous mode [ 787.065048][ T3246] xt_cgroup: invalid path, errno=-2 [ 787.613149][ T3265] netlink: 'syz.4.7957': attribute type 1 has an invalid length. [ 787.773092][ T3272] tipc: Trying to set illegal importance in message [ 787.987098][ T3281] __nla_validate_parse: 16 callbacks suppressed [ 787.987119][ T3281] netlink: 20 bytes leftover after parsing attributes in process `syz.4.7962'. [ 788.015814][ T3282] netlink: 12 bytes leftover after parsing attributes in process `syz.1.7960'. [ 788.040397][ T3278] syzkaller0: entered promiscuous mode [ 788.069105][ T3278] syzkaller0: entered allmulticast mode [ 788.082032][ T3282] netlink: 12 bytes leftover after parsing attributes in process `syz.1.7960'. [ 788.127923][ T3281] vcan0: entered promiscuous mode [ 788.166850][ T3281] vcan0: entered allmulticast mode [ 788.355877][T32396] syz-executor invoked oom-killer: gfp_mask=0x100cca(GFP_HIGHUSER_MOVABLE), order=0, oom_score_adj=0 [ 788.488869][T32396] CPU: 0 UID: 0 PID: 32396 Comm: syz-executor Not tainted syzkaller #0 PREEMPT(full) [ 788.488898][T32396] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 03/18/2026 [ 788.488912][T32396] Call Trace: [ 788.488920][T32396] [ 788.488929][T32396] dump_stack_lvl+0xe8/0x150 [ 788.488963][T32396] dump_header+0xd3/0x4c0 [ 788.488990][T32396] oom_kill_process+0x3ab/0x970 [ 788.489017][T32396] out_of_memory+0x106c/0x1410 [ 788.489041][T32396] ? __pfx___mutex_lock+0x10/0x10 [ 788.489076][T32396] ? __pfx_out_of_memory+0x10/0x10 [ 788.489095][T32396] ? do_raw_spin_unlock+0xf5/0x210 [ 788.489126][T32396] try_charge_memcg+0xc53/0x1560 [ 788.489171][T32396] ? __pfx_try_charge_memcg+0x10/0x10 [ 788.489207][T32396] ? mem_cgroup_swapin_charge_folio+0x36/0x4d0 [ 788.489236][T32396] ? mem_cgroup_swapin_charge_folio+0x36/0x4d0 [ 788.489264][T32396] mem_cgroup_swapin_charge_folio+0x2e3/0x4d0 [ 788.489292][T32396] __swap_cache_prepare_and_add+0xe8/0x760 [ 788.489330][T32396] ? page_rmappable_folio+0x9a/0x170 [ 788.489363][T32396] swap_cache_alloc_folio+0xf1/0x240 [ 788.489396][T32396] swap_cluster_readahead+0x369/0x690 [ 788.489423][T32396] ? __pfx_swap_cluster_readahead+0x10/0x10 [ 788.489456][T32396] ? get_vma_policy+0x27b/0x3c0 [ 788.489484][T32396] swapin_readahead+0x196/0xc50 [ 788.489517][T32396] ? __pfx_swapin_readahead+0x10/0x10 [ 788.489538][T32396] ? swap_table_get+0x1e/0x260 [ 788.489565][T32396] ? swap_table_get+0x1e/0x260 [ 788.489591][T32396] ? swap_table_get+0x1e/0x260 [ 788.489619][T32396] ? swap_table_get+0x216/0x260 [ 788.489648][T32396] ? swap_cache_get_folio+0x513/0x520 [ 788.489684][T32396] do_swap_page+0x56f/0x5a20 [ 788.489737][T32396] ? do_swap_page+0x127/0x5a20 [ 788.489763][T32396] ? __pfx_do_swap_page+0x10/0x10 [ 788.489787][T32396] ? __pte_offset_map+0x1ae/0x240 [ 788.489810][T32396] ? pte_offset_map_rw_nolock+0xea/0x160 [ 788.489840][T32396] handle_mm_fault+0x12d2/0x3310 [ 788.489884][T32396] ? handle_mm_fault+0xee/0x3310 [ 788.489921][T32396] ? __pfx_handle_mm_fault+0x10/0x10 [ 788.489947][T32396] ? lock_vma_under_rcu+0x45a/0x500 [ 788.489997][T32396] do_user_addr_fault+0xa73/0x1340 [ 788.490032][T32396] ? rcu_is_watching+0x15/0xb0 [ 788.490060][T32396] ? trace_page_fault_user+0x84/0x210 [ 788.490088][T32396] exc_page_fault+0x6a/0xc0 [ 788.490114][T32396] asm_exc_page_fault+0x26/0x30 [ 788.490133][T32396] RIP: 0033:0x7f443495d04e [ 788.490153][T32396] Code: 08 0f 85 a5 a8 ff ff 49 89 fb 48 89 f0 48 89 d7 48 89 ce 4c 89 c2 4d 89 ca 4c 8b 44 24 08 4c 8b 4c 24 10 4c 89 5c 24 08 0f 05 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 80 00 00 00 00 48 83 ec 08 [ 788.490170][T32396] RSP: 002b:00007ffd1b9fc278 EFLAGS: 00010246 [ 788.490189][T32396] RAX: 0000000000000000 RBX: 000055555d72c500 RCX: 00007f443495d04e [ 788.490203][T32396] RDX: 00007ffd1b9fc2d0 RSI: 0000000000000000 RDI: 0000000000000000 [ 788.490215][T32396] RBP: 00007ffd1b9fc33c R08: 0000000000000000 R09: 0000000000000000 [ 788.490226][T32396] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000001388 [ 788.490238][T32396] R13: 00000000000927c0 R14: 00000000000c02e6 R15: 00007ffd1b9fc390 [ 788.490272][T32396] [ 788.490280][T32396] memory: usage 307200kB, limit 307200kB, failcnt 201 [ 788.643845][ T3307] IPVS: sh: FWM 3 0x00000003 - no destination available [ 788.853166][ T3311] netlink: 12 bytes leftover after parsing attributes in process `syz.1.7966'. [ 788.898844][T32396] memory+swap: usage 307400kB, limit 9007199254740988kB, failcnt 0 [ 788.944437][T32396] kmem: usage 307128kB, limit 9007199254740988kB, failcnt 0 [ 789.018930][T32396] Memory cgroup stats for /syz6: [ 789.027476][T32396] cache 0 [ 789.071314][T32396] rss 8192 [ 789.112002][T32396] rss_huge 0 [ 789.136157][T32396] shmem 0 [ 789.157709][T32396] mapped_file 0 [ 789.175682][T32396] dirty 0 [ 789.183790][ T3321] netlink: 'syz.5.7968': attribute type 1 has an invalid length. [ 789.195236][T32396] writeback 0 [ 789.198659][T32396] workingset_refault_anon 13 [ 789.204618][T32396] workingset_refault_file 0 [ 789.217166][T32396] swap 200704 [ 789.220521][T32396] swapcached 266240 [ 789.241314][ T3321] 8021q: adding VLAN 0 to HW filter on device bond4 [ 789.279077][T32396] pgpgin 14704 [ 789.285452][T32396] pgpgout 14701 [ 789.289142][ T3321] bond4: entered allmulticast mode [ 789.311826][ C0] lec0: NETDEV WATCHDOG: CPU: 0: transmit queue 0 timed out 5010 ms [ 789.319930][ C0] lec:lec_tx_timeout: lec0 [ 789.348116][T32396] pgfault 26717 [ 789.351680][T32396] pgmajfault 12 [ 789.374222][T32396] inactive_anon 12288 [ 789.378279][T32396] active_anon 0 [ 789.412005][T32396] inactive_file 0 [ 789.423104][T32396] active_file 0 [ 789.436699][T32396] unevictable 0 [ 789.448442][T32396] hierarchical_memory_limit 314572800 [ 789.470307][ T3321] bond4: (slave ip6gretap1): making interface the new active one [ 789.476193][T32396] hierarchical_memsw_limit 9223372036854771712 [ 789.503328][T32396] total_cache 0 [ 789.511523][T32396] total_rss 8192 [ 789.519818][T32396] total_rss_huge 0 [ 789.529398][T32396] total_shmem 0 [ 789.531274][ T3321] ip6gretap1: entered allmulticast mode [ 789.537694][T32396] total_mapped_file 0 [ 789.556056][T32396] total_dirty 0 [ 789.571250][T32396] total_writeback 0 [ 789.575473][ T3321] bond4: (slave ip6gretap1): Enslaving as an active interface with an up link [ 789.621993][T32396] total_workingset_refault_anon 13 [ 789.627335][T32396] total_workingset_refault_file 0 [ 789.652156][T32396] total_swap 200704 [ 789.680450][T32396] total_swapcached 266240 [ 789.699554][T32396] total_pgpgin 14704 [ 789.732799][T32396] total_pgpgout 14701 [ 789.736856][T32396] total_pgfault 26717 [ 789.740879][T32396] total_pgmajfault 12 [ 789.777693][T32396] total_inactive_anon 12288 [ 789.787832][T32396] total_active_anon 0 [ 789.797961][T32396] total_inactive_file 0 [ 789.816750][T32396] total_active_file 0 [ 789.824594][T32396] total_unevictable 0 [ 789.837517][T32396] anon_cost 0 [ 789.847454][T32396] file_cost 0 [ 789.851216][T32396] oom-kill:constraint=CONSTRAINT_MEMCG,nodemask=(null),cpuset=/,mems_allowed=0-1,oom_memcg=/syz6,task_memcg=/syz6,task=syz.6.7944,pid=3219,uid=0 [ 789.873327][ T3346] netlink: 4 bytes leftover after parsing attributes in process `syz.1.7974'. [ 789.882621][T32396] Memory cgroup out of memory: OOM victim 3219 (syz.6.7944) is already exiting. Skip killing the task [ 789.905261][ T3345] netlink: 24 bytes leftover after parsing attributes in process `syz.5.7975'. [ 790.119532][ T3350] netlink: 'syz.4.7979': attribute type 39 has an invalid length. [ 790.415821][ T3361] vxcan1 speed is unknown, defaulting to 1000 [ 790.444346][ T3371] netlink: 72 bytes leftover after parsing attributes in process `syz.5.7983'. [ 790.465612][ T3371] netlink: 72 bytes leftover after parsing attributes in process `syz.5.7983'. [ 790.737461][ T3361] lo speed is unknown, defaulting to 1000 [ 791.287625][ T3411] xt_cgroup: invalid path, errno=-2 [ 791.490847][ T3415] netlink: 8 bytes leftover after parsing attributes in process `syz.6.7994'. [ 791.525733][ T3415] netlink: 8 bytes leftover after parsing attributes in process `syz.6.7994'. [ 791.874615][ T3434] netlink: 'syz.2.8000': attribute type 1 has an invalid length. [ 792.057527][ T3440] bridge0: port 3(ipvlan3) entered blocking state [ 792.064460][ T3440] bridge0: port 3(ipvlan3) entered disabled state [ 792.071315][ T3440] ipvlan3: entered allmulticast mode [ 792.090684][ T3440] bridge0: entered allmulticast mode [ 792.124363][ T3440] ipvlan3: left allmulticast mode [ 792.147479][ T3440] bridge0: left allmulticast mode [ 792.423068][ T3454] netlink: 'syz.6.8008': attribute type 10 has an invalid length. [ 792.835831][ T3468] bond0: (slave bridge_slave_1): Releasing backup interface [ 792.890164][ T3468] bridge_slave_1: left allmulticast mode [ 792.940752][ T3468] bond0: (slave bond_slave_0): Releasing backup interface [ 792.964495][ T3468] bond_slave_0: left allmulticast mode [ 792.989579][ T3468] bond0: (slave bond_slave_1): Releasing backup interface [ 793.009869][ T3468] bond_slave_1: left allmulticast mode [ 793.033395][ T3468] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 793.061295][ T3468] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 793.096303][ T3468] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 793.104620][ T3468] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 793.116877][ T3468] A link change request failed with some changes committed already. Interface hsr_slave_0 may have been left with an inconsistent configuration, please check. [ 793.140234][ T3477] __nla_validate_parse: 9 callbacks suppressed [ 793.140250][ T3477] netlink: 12 bytes leftover after parsing attributes in process `syz.2.8012'. [ 793.827934][ T3500] syzkaller0: entered promiscuous mode [ 793.835758][ T3510] netlink: 8 bytes leftover after parsing attributes in process `syz.1.8022'. [ 809.023027][ T1302] lec:lec_start_xmit: lec0:No lecd attached [ 814.211975][ C0] lec0: NETDEV WATCHDOG: CPU: 0: transmit queue 0 timed out 5190 ms [ 814.220170][ C0] lec:lec_tx_timeout: lec0 [ 838.634072][ T3537] netlink: 16 bytes leftover after parsing attributes in process `syz.5.8027'. [ 838.756100][ T3549] netlink: 'syz.5.8030': attribute type 1 has an invalid length. [ 838.775352][ T3549] netlink: 'syz.5.8030': attribute type 2 has an invalid length. [ 838.787217][ T3553] netlink: 'syz.2.8029': attribute type 32 has an invalid length. [ 838.895531][ T3558] bond5: (slave lo): enslaved VLAN challenged slave. Adding VLANs will be blocked as long as it is part of bond. [ 838.918203][ T3558] bond5: (slave lo): Enslaving as an active interface with an up link [ 838.933754][ T3558] A link change request failed with some changes committed already. Interface tunl0 may have been left with an inconsistent configuration, please check. [ 838.985670][ T3562] netlink: 8 bytes leftover after parsing attributes in process `syz.4.8033'. [ 839.280983][ T3580] netlink: 28 bytes leftover after parsing attributes in process `syz.5.8039'. [ 839.301342][ T3581] netlink: 8 bytes leftover after parsing attributes in process `syz.4.8038'. [ 839.367884][ T3585] vlan0: entered allmulticast mode [ 839.375318][ T3585] netlink: 14 bytes leftover after parsing attributes in process `syz.5.8041'. [ 839.426807][ T3585] bond0 (unregistering): Released all slaves [ 839.606877][ T3594] netlink: 'syz.1.8042': attribute type 1 has an invalid length. [ 839.690790][ T3594] 8021q: adding VLAN 0 to HW filter on device bond4 [ 839.717128][ T3600] syzkaller1: entered promiscuous mode [ 839.723338][ T3601] netlink: 8 bytes leftover after parsing attributes in process `syz.5.8044'. [ 839.740840][ T3600] syzkaller1: entered allmulticast mode [ 839.752419][ T3594] netlink: 'syz.1.8042': attribute type 7 has an invalid length. [ 839.770945][ T3594] netlink: 'syz.1.8042': attribute type 7 has an invalid length. [ 839.775697][ T3600] ip6t_rpfilter: unknown options [ 839.799043][ T3594] netlink: 8 bytes leftover after parsing attributes in process `syz.1.8042'. [ 839.813274][ T3600] tipc: Started in network mode [ 839.824142][ T3600] tipc: Node identity 9ae6ca88d93c, cluster identity 4711 [ 839.832292][ T3600] tipc: Enabled bearer , priority 0 [ 839.900873][ T3600] syzkaller0: entered promiscuous mode [ 839.909284][ T3600] syzkaller0: entered allmulticast mode [ 839.923884][ T3600] tipc: Resetting bearer [ 840.011354][ T3600] netlink: 4 bytes leftover after parsing attributes in process `syz.6.8043'. [ 840.047062][ T3298] tipc: Resetting bearer [ 840.072187][ T3609] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check. [ 840.094956][ T3610] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check. [ 840.117022][ T3612] netlink: 408 bytes leftover after parsing attributes in process `syz.5.8047'. [ 840.152127][ T3598] tipc: Resetting bearer [ 842.263596][ T3598] tipc: Disabling bearer [ 842.275420][ T3612] netlink: 284 bytes leftover after parsing attributes in process `syz.5.8047'. [ 842.303185][T28648] tipc: Node number set to 1138412168 [ 842.415077][ T3635] IPVS: set_ctl: invalid protocol: 50 224.0.0.1:20001 [ 842.478292][ T3643] netlink: 'syz.5.8054': attribute type 1 has an invalid length. [ 842.539788][ T3648] netlink: 'syz.2.8056': attribute type 75 has an invalid length. [ 842.554063][ T3648] xt_l2tp: missing protocol rule (udp|l2tpip) [ 842.584435][T28649] IPVS: starting estimator thread 0... [ 842.643402][ T3643] bond0: entered promiscuous mode [ 842.649102][ T3643] 8021q: adding VLAN 0 to HW filter on device bond0 [ 842.671857][ T3653] IPVS: using max 30 ests per chain, 72000 per kthread [ 842.697892][ T3649] bond0: (slave bridge3): making interface the new active one [ 842.706932][ T3649] bridge3: entered promiscuous mode [ 842.714577][ T3649] bond0: (slave bridge3): Enslaving as an active interface with an up link [ 842.814679][ T1029] tipc: Subscription rejected, illegal request [ 842.911562][ T3667] netlink: 'syz.4.8058': attribute type 142 has an invalid length. [ 843.516368][ T3705] openvswitch: netlink: nsh attribute has 4 unknown bytes. [ 843.537394][ T3704] netlink: 'syz.2.8075': attribute type 29 has an invalid length. [ 843.771037][ T3722] __nla_validate_parse: 5 callbacks suppressed [ 843.771062][ T3722] netlink: 204 bytes leftover after parsing attributes in process `syz.1.8076'. [ 843.911627][ T3730] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 843.967811][ T3731] ÿ: renamed from bond_slave_1 (while UP) [ 844.048590][ T3738] netlink: 120 bytes leftover after parsing attributes in process `syz.6.8083'. [ 844.060481][ T3738] netlink: 'syz.6.8083': attribute type 1 has an invalid length. [ 844.068639][ T3738] netlink: 64 bytes leftover after parsing attributes in process `syz.6.8083'. [ 844.170128][ T3742] netlink: 16 bytes leftover after parsing attributes in process `syz.5.8085'. [ 844.327703][ T3754] netlink: 8 bytes leftover after parsing attributes in process `syz.5.8090'. [ 844.363697][ T3754] netlink: 'syz.5.8090': attribute type 5 has an invalid length. [ 844.376150][ T3754] netlink: 20 bytes leftover after parsing attributes in process `syz.5.8090'. [ 844.395710][ T3756] netlink: 20 bytes leftover after parsing attributes in process `syz.6.8089'. [ 844.396206][ T3754] geneve2: entered promiscuous mode [ 844.419729][ T3754] geneve2: entered allmulticast mode [ 844.428802][ T3303] netdevsim netdevsim5 netdevsim0: set [1, 1] type 2 family 0 port 256 - 0 [ 844.454729][ T3303] netdevsim netdevsim5 netdevsim1: set [1, 1] type 2 family 0 port 256 - 0 [ 844.503480][ T3762] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 844.536735][ T3303] netdevsim netdevsim5 netdevsim2: set [1, 1] type 2 family 0 port 256 - 0 [ 844.548140][ T3303] netdevsim netdevsim5 netdevsim3: set [1, 1] type 2 family 0 port 256 - 0 [ 844.623508][ T3756] bond4: (slave vlan0): Enslaving as an active interface with an up link [ 844.930894][ T3787] Cannot find del_set index 4 as target [ 845.095397][ T3796] netlink: 48 bytes leftover after parsing attributes in process `syz.1.8100'. [ 845.143215][ T3799] bridge0: port 2(bridge_slave_1) entered disabled state [ 845.150849][ T3799] bridge0: port 1(bridge_slave_0) entered disabled state [ 845.446036][ T3810] erspan0: entered promiscuous mode [ 845.451333][ T3810] erspan0: entered allmulticast mode [ 846.528737][ T3871] netlink: 112 bytes leftover after parsing attributes in process `syz.2.8122'. [ 846.710492][ T3879] netlink: 'syz.5.8123': attribute type 1 has an invalid length. [ 846.787051][ T3879] 8021q: adding VLAN 0 to HW filter on device bond6 [ 846.837951][ T3879] netlink: zone id is out of range [ 846.844231][ T3879] netlink: zone id is out of range [ 846.849413][ T3879] netlink: zone id is out of range [ 846.879836][ T3879] netlink: zone id is out of range [ 846.893982][ T3879] netlink: zone id is out of range [ 846.903852][ T3887] netdevsim netdevsim2 netdevsim0: IPsec offload requires 128 bit authentication [ 846.919142][ T3889] xt_AUDIT: Audit type out of range (valid range: 0..2) [ 846.952806][ T3879] netlink: zone id is out of range [ 846.961833][ T3879] netlink: zone id is out of range [ 846.975830][ T3879] netlink: zone id is out of range [ 846.981266][ T3879] netlink: zone id is out of range [ 847.075315][ T3900] Bluetooth: MGMT ver 1.23 [ 847.080996][ T3900] netlink: 13 bytes leftover after parsing attributes in process `syz.6.8129'. [ 847.931751][T18477] lec:lec_start_xmit: lec0:No lecd attached [ 848.331216][ T3974] netlink: 'syz.6.8154': attribute type 4 has an invalid length. [ 848.375394][ T3974] netlink: 'syz.6.8154': attribute type 4 has an invalid length. [ 848.426824][ T3974] netlink: 'syz.6.8154': attribute type 4 has an invalid length. [ 848.464212][ T3974] netlink: 'syz.6.8154': attribute type 4 has an invalid length. [ 848.472515][ T3974] netlink: 'syz.6.8154': attribute type 4 has an invalid length. [ 848.480923][ T3974] netlink: 'syz.6.8154': attribute type 4 has an invalid length. [ 848.490076][ T3974] netlink: 'syz.6.8154': attribute type 4 has an invalid length. [ 848.802980][ T4000] x_tables: unsorted underflow at hook 4 [ 848.818920][ T4001] __nla_validate_parse: 7 callbacks suppressed [ 848.818940][ T4001] netlink: 40 bytes leftover after parsing attributes in process `syz.1.8164'. [ 848.986730][ T4006] rdma_rxe: rxe_newlink: failed to add lo [ 848.996149][ T4007] netlink: 20 bytes leftover after parsing attributes in process `syz.4.8168'. [ 849.029539][ T4007] netlink: 256 bytes leftover after parsing attributes in process `syz.4.8168'. [ 849.043326][ T4007] netlink: 256 bytes leftover after parsing attributes in process `syz.4.8168'. [ 849.144994][ T4009] netlink: 12 bytes leftover after parsing attributes in process `syz.1.8169'. [ 849.237724][ T4016] netlink: 28 bytes leftover after parsing attributes in process `syz.5.8172'. [ 849.346013][ T4019] netlink: 24 bytes leftover after parsing attributes in process `syz.4.8174'. [ 849.376358][ T4023] netlink: 8 bytes leftover after parsing attributes in process `syz.4.8174'. [ 849.395722][ T4022] netlink: 4 bytes leftover after parsing attributes in process `syz.1.8175'. [ 849.882155][ T4049] mac80211_hwsim hwsim61 syzkaller0: entered promiscuous mode [ 849.905766][ T4047] validate_nla: 58 callbacks suppressed [ 849.905788][ T4047] netlink: 'syz.4.8182': attribute type 1 has an invalid length. [ 849.923674][ T4049] mac80211_hwsim hwsim61 syzkaller0: entered allmulticast mode [ 849.969285][ T4047] workqueue: Failed to create a rescuer kthread for wq "bond8": -EINTR [ 850.118691][ T4056] netlink: 56 bytes leftover after parsing attributes in process `syz.6.8185'. [ 850.139971][ T4056] netlink: 'syz.6.8185': attribute type 2 has an invalid length. [ 850.185119][ T4064] netlink: 'syz.4.8188': attribute type 10 has an invalid length. [ 850.196001][ T4068] netlink: 'syz.1.8190': attribute type 1 has an invalid length. [ 850.205241][ T4064] bridge0: port 2(bridge_slave_1) entered blocking state [ 850.212496][ T4064] bridge0: port 2(bridge_slave_1) entered listening state [ 850.220029][ T4064] bridge0: port 1(bridge_slave_0) entered blocking state [ 850.227287][ T4064] bridge0: port 1(bridge_slave_0) entered listening state [ 850.259796][ T4064] bridge0: entered allmulticast mode [ 850.314003][ T4064] bridge0: port 2(bridge_slave_1) entered disabled state [ 850.321412][ T4064] bridge0: port 1(bridge_slave_0) entered disabled state [ 850.391445][ T4068] 8021q: adding VLAN 0 to HW filter on device bond5 [ 850.426702][ T4071] vlan3: entered promiscuous mode [ 850.445686][ T4071] bond5: entered promiscuous mode [ 850.463095][ T4071] vlan3: entered allmulticast mode [ 850.504100][ T4071] bond5: entered allmulticast mode [ 850.583411][ T4077] bond5: (slave bridge4): making interface the new active one [ 850.591303][ T4077] bridge4: entered promiscuous mode [ 850.600014][ T4077] bridge4: entered allmulticast mode [ 850.610463][ T4086] workqueue: Failed to create a rescuer kthread for wq "nfc3_nci_cmd_wq": -EINTR [ 850.643863][ T4077] bond5: (slave bridge4): Enslaving as an active interface with an up link [ 850.834326][ T4102] netlink: 'syz.4.8196': attribute type 2 has an invalid length. [ 851.152537][ T4124] veth1_macvtap: left promiscuous mode [ 851.218443][ T4128] ip6t_REJECT: TCP_RESET illegal for non-tcp [ 851.263525][ T4134] net_ratelimit: 138 callbacks suppressed [ 851.263549][ T4134] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 851.539163][ T4144] 8021q: VLANs not supported on ip6tnl0 [ 851.728335][ T4156] bridge0: port 3(batadv2) entered blocking state [ 851.751322][ T4156] bridge0: port 3(batadv2) entered disabled state [ 851.764494][ T4156] batadv2: entered allmulticast mode [ 851.776168][ T4156] batadv2: entered promiscuous mode [ 852.217175][ T4179] netlink: 'syz.6.8224': attribute type 5 has an invalid length. [ 852.225804][ T3303] batman_adv: batadv2: No IGMP Querier present - multicast optimizations disabled [ 852.225846][ T3303] batman_adv: batadv2: No MLD Querier present - multicast optimizations disabled [ 852.331422][ T4183] netlink: 'syz.1.8226': attribute type 39 has an invalid length. [ 852.380281][ T4183] hsr_slave_1 (unregistering): left promiscuous mode [ 852.745066][ T4203] netlink: 'syz.5.8236': attribute type 1 has an invalid length. [ 852.766002][ T4203] netlink: 'syz.5.8236': attribute type 2 has an invalid length. [ 852.789704][ T4204] openvswitch: netlink: Tunnel attr 16 has unexpected len 20 expected 0 [ 852.997655][ T4220] pim6reg: entered allmulticast mode [ 853.115605][ T4222] netlink: 'syz.5.8239': attribute type 1 has an invalid length. [ 853.251762][ C0] lec0: NETDEV WATCHDOG: CPU: 0: transmit queue 0 timed out 5320 ms [ 853.260134][ C0] lec:lec_tx_timeout: lec0 [ 853.350543][ T4236] geneve3: entered promiscuous mode [ 857.654795][ T31] INFO: task syz.0.6987:32057 blocked for more than 143 seconds. [ 857.662852][ T31] Not tainted syzkaller #0 [ 857.667871][ T31] "echo 0 > /proc/sys/kernel/hung_task_timeout_secs" disables this message. [ 857.677218][ T31] task:syz.0.6987 state:D stack:27144 pid:32057 tgid:32056 ppid:29772 task_flags:0x400040 flags:0x00080002 [ 857.689547][ T31] Call Trace: [ 857.693067][ T31] [ 857.696052][ T31] __schedule+0x15dd/0x52d0 SYZFAIL: failed to recv rpc fd=3 want=4 recv=0 n=-1 (errno 104: Connection reset by peer) [ 857.700608][ T31] ? __pfx___schedule+0x10/0x10 [ 857.706225][ T31] ? schedule+0x90/0x360 [ 857.711321][ T31] schedule+0x164/0x360 [ 857.715890][ T31] schedule_preempt_disabled+0x13/0x30 [ 857.721544][ T31] __mutex_lock+0x7fe/0x1300 [ 857.727720][ T31] ? __mutex_lock+0x5ac/0x1300 [ 857.739216][ T31] ? nfsd_nl_version_get_doit+0x17c/0xc40 [ 857.745255][ T31] ? __pfx___mutex_lock+0x10/0x10 [ 857.750363][ T31] ? __nlmsg_put+0xef/0x1b0 [ 857.756931][ T31] ? genlmsg_put+0x137/0x2e0 [ 857.761609][ T31] nfsd_nl_version_get_doit+0x17c/0xc40 [ 857.768711][ T31] ? kmem_cache_free+0x187/0x630 [ 857.774421][ T31] ? nlmon_xmit+0xb0/0x100 [ 857.778919][ T31] ? __pfx_nfsd_nl_version_get_doit+0x10/0x10 [ 857.786051][ T31] ? dev_hard_start_xmit+0x802/0x870 [ 857.791538][ T31] genl_family_rcv_msg_doit+0x22a/0x330 [ 857.822076][ T31] ? __asan_memcpy+0x40/0x70 [ 857.826762][ T31] ? __pfx_genl_family_rcv_msg_doit+0x10/0x10 [ 857.891792][ T31] genl_rcv_msg+0x61c/0x7a0 [ 857.902254][ T31] ? __pfx_genl_rcv_msg+0x10/0x10 [ 857.907371][ T31] ? __pfx_nfsd_nl_version_get_doit+0x10/0x10 [ 857.951851][ T31] ? __lock_acquire+0x6b5/0x2cf0 [ 857.956932][ T31] netlink_rcv_skb+0x232/0x4b0 [ 857.983656][ T31] ? __pfx_genl_rcv_msg+0x10/0x10 [ 857.988782][ T31] ? __pfx_netlink_rcv_skb+0x10/0x10 [ 858.011792][ T31] ? down_read+0x272/0x2e0 [ 858.016312][ T31] ? genl_rcv+0xd/0x40 [ 858.020438][ T31] genl_rcv+0x28/0x40 [ 858.061811][ T31] netlink_unicast+0x80f/0x9b0 [ 858.066687][ T31] ? __pfx_netlink_unicast+0x10/0x10 [ 858.089821][ T31] ? netlink_sendmsg+0x650/0xb40 [ 858.101812][ T31] ? skb_put+0x11b/0x210 [ 858.106149][ T31] netlink_sendmsg+0x813/0xb40 [ 858.110980][ T31] ? __pfx_netlink_sendmsg+0x10/0x10 [ 858.132650][ T31] ? aa_sock_msg_perm+0xf1/0x1b0 [ 858.137690][ T31] ? bpf_lsm_socket_sendmsg+0x9/0x20 [ 858.152495][ T31] ____sys_sendmsg+0x972/0x9f0 [ 858.157341][ T31] ? futex_unqueue+0x211/0x240 [ 858.172173][ T31] ? __pfx_____sys_sendmsg+0x10/0x10 [ 858.177561][ T31] ? import_iovec+0x73/0xa0 [ 858.195939][ T31] ___sys_sendmsg+0x2a5/0x360 [ 858.200720][ T31] ? __pfx____sys_sendmsg+0x10/0x10 [ 858.231827][ T31] ? futex_wait+0x29a/0x380 [ 858.236652][ T31] ? __fget_files+0x2a/0x420 [ 858.241327][ T31] ? __fget_files+0x3a0/0x420 [ 858.281931][ T31] __x64_sys_sendmsg+0x1bd/0x2a0 [ 858.287030][ T31] ? __pfx___x64_sys_sendmsg+0x10/0x10 [ 858.332144][ T31] ? rcu_is_watching+0x15/0xb0 [ 858.337141][ T31] do_syscall_64+0x14d/0xf80 [ 858.362829][ T31] ? trace_irq_disable+0x3b/0x150 [ 858.368087][ T31] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 858.402576][ T31] ? clear_bhb_loop+0x40/0x90 [ 858.407406][ T31] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 858.442146][ T31] RIP: 0033:0x7f1744b9c819 [ 858.446748][ T31] RSP: 002b:00007f1745b14028 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 858.482124][ T31] RAX: ffffffffffffffda RBX: 00007f1744e15fa0 RCX: 00007f1744b9c819 [ 858.490287][ T31] RDX: 0000000020000000 RSI: 0000200000000140 RDI: 0000000000000006 [ 858.542368][ T31] RBP: 00007f1744c32c91 R08: 0000000000000000 R09: 0000000000000000 [ 858.550423][ T31] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 858.591927][ T31] R13: 00007f1744e16038 R14: 00007f1744e15fa0 R15: 00007ffc3599fab8 [ 858.600012][ T31] [ 858.623085][ T31] [ 858.623085][ T31] Showing all locks held in the system: [ 858.630974][ T31] 1 lock held by khungtaskd/31: [ 858.636320][ T31] #0: ffffffff8e75e5e0 (rcu_read_lock){....}-{1:3}, at: debug_show_all_locks+0x2e/0x180 [ 858.653537][ T31] 2 locks held by getty/5582: [ 858.658418][ T31] #0: ffff8880375c20a0 (&tty->ldisc_sem){++++}-{0:0}, at: tty_ldisc_ref_wait+0x25/0x70 [ 858.668652][ T31] #1: ffffc9000332b2f0 (&ldata->atomic_read_lock){+.+.}-{4:4}, at: n_tty_read+0x45c/0x13c0 [ 858.679536][ T31] 3 locks held by kworker/0:4/5879: [ 858.685086][ T31] #0: ffff88813fe0f148 ((wq_completion)events){+.+.}-{0:0}, at: process_scheduled_works+0xa52/0x18c0 [ 858.698057][ T31] #1: ffffc90003e87c40 (free_ipc_work){+.+.}-{0:0}, at: process_scheduled_works+0xa8d/0x18c0 [ 858.708899][ T31] #2: ffffffff8e7648f8 (rcu_state.exp_mutex){+.+.}-{4:4}, at: synchronize_rcu_expedited+0x38d/0x770 [ 858.738185][ T31] 1 lock held by syz-executor/28739: [ 858.744042][ T31] #0: ffffffff8e7648f8 (rcu_state.exp_mutex){+.+.}-{4:4}, at: synchronize_rcu_expedited+0x38d/0x770 [ 858.761156][ T31] 2 locks held by syz.3.6346/29677: [ 858.767153][ T31] #0: ffffffff8fc3de70 (cb_lock){++++}-{4:4}, at: genl_rcv+0x19/0x40 [ 858.777321][ T31] #1: ffffffff8ea86b88 (nfsd_mutex){+.+.}-{4:4}, at: nfsd_nl_listener_set_doit+0x141/0x1670 [ 858.788110][ T31] 1 lock held by syz-executor/29968: [ 858.794001][ T31] #0: ffffffff8fbd00c8 (rtnl_mutex){+.+.}-{4:4}, at: tun_chr_close+0x3e/0x1c0 [ 858.803442][ T31] 2 locks held by syz.0.6987/32057: [ 858.808738][ T31] #0: ffffffff8fc3de70 (cb_lock){++++}-{4:4}, at: genl_rcv+0x19/0x40 [ 858.817667][ T31] #1: ffffffff8ea86b88 (nfsd_mutex){+.+.}-{4:4}, at: nfsd_nl_version_get_doit+0x17c/0xc40 [ 858.828662][ T31] 4 locks held by kworker/u8:15/2636: [ 858.834381][ T31] #0: ffff8880b863ae60 (&rq->__lock){-.-.}-{2:2}, at: raw_spin_rq_lock_nested+0x31/0x150 [ 858.844633][ T31] #1: ffff8880b8624588 (psi_seq){-.-.}-{0:0}, at: psi_task_switch+0x53/0x880 [ 858.854968][ T31] #2: ffff888033814120 (&hard_iface->bat_iv.ogm_buff_mutex){+.+.}-{4:4}, at: batadv_iv_ogm_schedule+0xe5/0xf50 [ 858.867266][ T31] #3: ffffffff9a547d58 (&obj_hash[i].lock){-.-.}-{2:2}, at: debug_object_activate+0x83/0x580 [ 858.877852][ T31] [ 858.880379][ T31] ============================================= [ 858.880379][ T31] [ 858.985062][ T31] NMI backtrace for cpu 1 [ 858.985085][ T31] CPU: 1 UID: 0 PID: 31 Comm: khungtaskd Not tainted syzkaller #0 PREEMPT(full) [ 858.985109][ T31] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 03/18/2026 [ 858.985123][ T31] Call Trace: [ 858.985132][ T31] [ 858.985141][ T31] dump_stack_lvl+0xe8/0x150 [ 858.985177][ T31] nmi_cpu_backtrace+0x274/0x2d0 [ 858.985200][ T31] ? __pfx_nmi_raise_cpu_backtrace+0x10/0x10 [ 858.985232][ T31] nmi_trigger_cpumask_backtrace+0x17a/0x300 [ 858.985257][ T31] sys_info+0x135/0x170 [ 858.985287][ T31] watchdog+0xfd9/0x1030 [ 858.985314][ T31] ? watchdog+0x21a/0x1030 [ 858.985343][ T31] kthread+0x388/0x470 [ 858.985365][ T31] ? __pfx_watchdog+0x10/0x10 [ 858.985383][ T31] ? __pfx_kthread+0x10/0x10 [ 858.985406][ T31] ret_from_fork+0x51e/0xb90 [ 858.985437][ T31] ? __pfx_ret_from_fork+0x10/0x10 [ 858.985463][ T31] ? __switch_to+0xc7d/0x1450 [ 858.985492][ T31] ? __pfx_kthread+0x10/0x10 [ 858.985516][ T31] ret_from_fork_asm+0x1a/0x30 [ 858.985564][ T31] [ 858.985572][ T31] Sending NMI from CPU 1 to CPUs 0: [ 859.099793][ C0] NMI backtrace for cpu 0 [ 859.099814][ C0] CPU: 0 UID: 0 PID: 30217 Comm: syz-executor Not tainted syzkaller #0 PREEMPT(full) [ 859.099835][ C0] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 03/18/2026 [ 859.099847][ C0] RIP: 0010:lock_acquire+0x80/0x2e0 [ 859.099876][ C0] Code: 00 84 c0 0f 84 bc 01 00 00 83 3d 3a 76 70 0e 00 0f 84 c3 00 00 00 48 8b 74 24 68 4c 89 ef e8 97 4a 8e 00 83 3d 20 76 70 0e 00 <0f> 84 c1 00 00 00 65 8b 05 03 49 7b 11 85 c0 0f 85 b2 00 00 00 65 [ 859.099892][ C0] RSP: 0018:ffffc9000dbaf6c0 EFLAGS: 00000202 [ 859.099909][ C0] RAX: 0000000000000001 RBX: ffffffff8176a787 RCX: 0000000080000001 [ 859.099922][ C0] RDX: 0000000000000000 RSI: ffffffff81767eb2 RDI: 1ffffffff1cebcbc [ 859.099940][ C0] RBP: 0000000000000000 R08: 0000000000000000 R09: 0000000000000000 [ 859.099951][ C0] R10: ffffc9000dbaf868 R11: fffff52001b75f19 R12: 0000000000000002 [ 859.099964][ C0] R13: ffffffff8e75e5e0 R14: 0000000000000000 R15: 0000000000000000 [ 859.099976][ C0] FS: 0000000000000000(0000) GS:ffff888125457000(0000) knlGS:0000000000000000 [ 859.099991][ C0] CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033 [ 859.100003][ C0] CR2: 00007ffeb1f6fc64 CR3: 000000002b804000 CR4: 00000000003526f0 [ 859.100019][ C0] Call Trace: [ 859.100027][ C0] [ 859.100038][ C0] ? __unwind_start+0xf7/0x760 [ 859.100066][ C0] ? unwind_next_frame+0xa5/0x23c0 [ 859.100092][ C0] unwind_next_frame+0xc2/0x23c0 [ 859.100116][ C0] ? unwind_next_frame+0xa5/0x23c0 [ 859.100145][ C0] ? is_bpf_text_address+0x26/0x2b0 [ 859.100166][ C0] ? get_stack_info_noinstr+0x1b/0x130 [ 859.100190][ C0] __unwind_start+0x5b8/0x760 [ 859.100218][ C0] ? __pfx_stack_trace_consume_entry+0x10/0x10 [ 859.100239][ C0] arch_stack_walk+0xe3/0x150 [ 859.100267][ C0] ? __unwind_start+0xf7/0x760 [ 859.100296][ C0] stack_trace_save+0xa9/0x100 [ 859.100315][ C0] ? __pfx_stack_trace_save+0x10/0x10 [ 859.100333][ C0] ? __lock_acquire+0x6b5/0x2cf0 [ 859.100360][ C0] save_stack+0x122/0x230 [ 859.100380][ C0] ? __pfx_save_stack+0x10/0x10 [ 859.100413][ C0] __reset_page_owner+0x71/0x1f0 [ 859.100434][ C0] __free_frozen_pages+0xc2b/0xdb0 [ 859.100457][ C0] ? ___free_pages+0xb2/0x220 [ 859.100481][ C0] vfree+0x25a/0x400 [ 859.100499][ C0] ? __pfx_kcov_close+0x10/0x10 [ 859.100526][ C0] kcov_close+0x28/0x50 [ 859.100551][ C0] __fput+0x44f/0xa70 [ 859.100583][ C0] task_work_run+0x1d9/0x270 [ 859.100604][ C0] ? __pfx_task_work_run+0x10/0x10 [ 859.100624][ C0] ? kmem_cache_free+0x187/0x630 [ 859.100643][ C0] ? do_exit+0x70a/0x23c0 [ 859.100664][ C0] do_exit+0x70f/0x23c0 [ 859.100686][ C0] ? __pfx_do_exit+0x10/0x10 [ 859.100702][ C0] ? do_raw_spin_lock+0x12b/0x2f0 [ 859.100726][ C0] ? _raw_spin_unlock_irq+0x23/0x50 [ 859.100749][ C0] do_group_exit+0x21b/0x2d0 [ 859.100771][ C0] __x64_sys_exit_group+0x3f/0x40 [ 859.100789][ C0] x64_sys_call+0x221a/0x2240 [ 859.100817][ C0] do_syscall_64+0x14d/0xf80 [ 859.100839][ C0] ? trace_irq_disable+0x3b/0x150 [ 859.100854][ C0] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 859.100873][ C0] ? clear_bhb_loop+0x40/0x90 [ 859.100894][ C0] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 859.100911][ C0] RIP: 0033:0x7f06e5b9c819 [ 859.100927][ C0] Code: Unable to access opcode bytes at 0x7f06e5b9c7ef. [ 859.100942][ C0] RSP: 002b:00007ffde702faa8 EFLAGS: 00000246 ORIG_RAX: 00000000000000e7 [ 859.100960][ C0] RAX: ffffffffffffffda RBX: 00007f06e5c33bd9 RCX: 00007f06e5b9c819 [ 859.100973][ C0] RDX: 0000000000000000 RSI: 0000000000000000 RDI: 0000000000000043 [ 859.100984][ C0] RBP: 00007f06e5c33beb R08: 0000000000000000 R09: 00000000000927c0 [ 859.100996][ C0] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000006 [ 859.101007][ C0] R13: 00000000000927c0 R14: 00000000000d0539 R15: 00007ffde702fc50 [ 859.101031][ C0] [ 859.112429][ T31] Kernel panic - not syncing: hung_task: blocked tasks [ 859.112492][ T31] CPU: 1 UID: 0 PID: 31 Comm: khungtaskd Not tainted syzkaller #0 PREEMPT(full) [ 859.112567][ T31] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 03/18/2026 [ 859.112610][ T31] Call Trace: [ 859.112653][ T31] [ 859.112678][ T31] vpanic+0x56c/0xa60 [ 859.112786][ T31] ? __pfx___schedule+0x10/0x10 [ 859.112875][ T31] ? __pfx_vpanic+0x10/0x10 [ 859.112983][ T31] panic+0xc5/0xd0 [ 859.113085][ T31] ? __pfx_panic+0x10/0x10 [ 859.113166][ T31] ? preempt_schedule_thunk+0x16/0x30 [ 859.113269][ T31] ? nmi_trigger_cpumask_backtrace+0x2bb/0x300 [ 859.113374][ T31] watchdog+0x1023/0x1030 [ 859.113458][ T31] ? watchdog+0x21a/0x1030 [ 859.113535][ T31] kthread+0x388/0x470 [ 859.113593][ T31] ? __pfx_watchdog+0x10/0x10 [ 859.113647][ T31] ? __pfx_kthread+0x10/0x10 [ 859.113724][ T31] ret_from_fork+0x51e/0xb90 [ 859.113811][ T31] ? __pfx_ret_from_fork+0x10/0x10 [ 859.113887][ T31] ? __switch_to+0xc7d/0x1450 [ 859.113958][ T31] ? __pfx_kthread+0x10/0x10 [ 859.114024][ T31] ret_from_fork_asm+0x1a/0x30 [ 859.114148][ T31] [ 859.598100][ T31] Kernel Offset: disabled [ 859.602445][ T31] Rebooting in 86400 seconds..