last executing test programs: 2m40.08050217s ago: executing program 4 (id=766): r0 = socket$kcm(0x2, 0x5, 0x0) (async) r1 = socket$kcm(0x10, 0x2, 0x0) sendmsg$inet(r1, &(0x7f0000000080)={0x0, 0x74, &(0x7f0000000100)=[{&(0x7f00000001c0)="5c00000012006bab9a3fe3d86e17aa0a046b876c1d0048007ea60864160af36504001a0038001d001931a0e69ee517d34460bc06000000a705251e6182949a3651f60a84c9f4d4938037e70e4509c5bb", 0x33fe0}], 0x1, 0x0, 0x0, 0x1f00c00e}, 0x0) (async) recvmsg$kcm(r1, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000004140)=[{&(0x7f0000000240)=""/212, 0xd4}], 0x1}, 0x0) sendmsg$netlink(0xffffffffffffffff, &(0x7f0000001940)={0x0, 0x0, &(0x7f0000000340)=[{&(0x7f0000000300)={0x10, 0x3d, 0x800, 0x70bd2a, 0x25dfdbfc}, 0x10}], 0x1, 0x0, 0x0, 0x4000}, 0x44040) (async) r2 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r2, &(0x7f000000c2c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f00000003c0)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a28000000000a0101000000005e1affd5020000000900010073797a300000000008000240000000032c000000030a01030000e6ff00000000020000000900010073797a30000000000900030073797a320000000014000000110001"], 0x7c}}, 0x0) (async) sendmsg$NFT_BATCH(r2, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000a00)={{0x14}, [@NFT_MSG_NEWRULE={0x5c, 0x6, 0xa, 0x409, 0x0, 0x0, {0x2}, [@NFTA_RULE_EXPRESSIONS={0x30, 0x4, 0x0, 0x1, [{0x2c, 0x1, 0x0, 0x1, @numgen={{0xb}, @val={0x1c, 0x2, 0x0, 0x1, [@NFTA_NG_DREG={0x8}, @NFTA_NG_TYPE={0x8, 0x3, 0x1, 0x0, 0x2}, @NFTA_NG_MODULUS={0x8}]}}}]}, @NFTA_RULE_TABLE={0x9, 0x1, 'syz0\x00'}, @NFTA_RULE_CHAIN={0x9, 0x2, 'syz2\x00'}]}], {0x14}}, 0x84}}, 0x0) (async) r3 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r3, &(0x7f0000000840)={0x0, 0x0, &(0x7f0000000800)={&(0x7f00000001c0)=ANY=[@ANYBLOB="4c03000017"], 0x34c}}, 0x0) (async) r4 = socket(0xa, 0x3, 0x3a) setsockopt$MRT6_DEL_MIF(r4, 0x29, 0xc8, 0x0, 0xc000000) (async) setsockopt$MRT6_ADD_MFC(r4, 0x29, 0xcc, &(0x7f0000000280)={{0xa, 0x0, 0x0, @loopback}, {0xa, 0x0, 0x0, @mcast2}}, 0x5c) setsockopt$MRT6_ADD_MFC_PROXY(r4, 0x29, 0xd2, &(0x7f0000000300)={{0xa, 0x0, 0x0, @loopback}, {0xa, 0x0, 0x0, @mcast2}, 0x1}, 0x5c) (async) r5 = socket(0xa, 0x3, 0x3a) setsockopt$MRT6_FLUSH(r5, 0x29, 0xd4, &(0x7f0000000240)=0x5, 0x4) (async) sendmsg$inet(r0, &(0x7f0000000080)={&(0x7f0000001280)={0x2, 0x0, @initdev={0xac, 0x1e, 0x0, 0x0}}, 0x10, &(0x7f00000006c0)=[{&(0x7f00000012c0)='#', 0x1}, {&(0x7f00000004c0)="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", 0xfa}, {&(0x7f00000005c0)="c20f6a96321011e580ed9bfec1ab73cca572307464fae57c23b51de9f45241b20e334bfe2d4bf66138fc76364f8a350fef2fc31984f8f353b70777e685c6ee6ac6104d614a", 0x45}, {&(0x7f0000000000)="75d7a1b01414b6bb75caf16f88bb23cf944ef08f8d42297653eaafefd4", 0x1d}], 0x4}, 0x0) r6 = socket(0x840000000002, 0x3, 0x100) getsockopt$inet_mreqn(r6, 0x0, 0x33, 0x0, &(0x7f0000000740)=0x2) sendmsg$inet(r0, &(0x7f0000000140)={&(0x7f0000000100)={0x2, 0x4e20, @private=0xa010101}, 0x10, &(0x7f0000000740)=[{&(0x7f00000001c0)="629ef49efe", 0x5}], 0x1}, 0x44006) (async) r7 = openat$tun(0xffffffffffffff9c, &(0x7f0000000040), 0x200, 0x0) (async) bpf$PROG_LOAD(0x5, &(0x7f00000054c0)={0x10, 0x16, &(0x7f0000000400)=ANY=[@ANYBLOB="61122800000000006113140000000000bf1020000000000015000200091b00003d030100000000008701000000000000bc26000000000000bf6700000000000046030000f119ff0f6702000014000000160300000ee600f0bf050000000000000f610000000000006507f4ff02000400070700004c0040001f75000000000000bf54000000000000070500000300f9ffad430100000000009500000000000000050000000000000095000000000000004d9bd591d568253e9988431ec068e3a82983d58719d72183f2cb7f43dd55788be820b236dcb695dbfd737cbf719506d2d6b05fe7030586e3f640f9f7e9a73b761ad4f0952a70046270d2b6436fdeecd791614ed46de741eb8cf91c046ef9beca574b350021c7ec6ef130f53748068ca432dae4e248b22b9ad8b2811f67916a1764578cba4b069037bfb3362d5691ac397f7e207145d970f0d97867552629b146645c78cd3e7dbeca38e49a9d5221f1f45f0a25890d04d91a15a05ae7e7ed6252c3d6c1973fb858de1da70d67317e7872b0603ce47ed2c1520e71b527bb42aa2e20e1e85df73736ed0a782ab7e7278dd54358cfdf6313d40f926332623625b49626481054787ab2dff85a9bebd6b317f26c691a65aa97bb3d1506a3a565e9c7ea5ad4611d2d77ee8a5c1b23814a26b6a20061fbb65bdd03770fa849f2a29ba69f90625f42592a70ba890f7a92878ae73574c3a233ee5954119931a1905210715fa77a8795f2fbec3797cb90f59fe8a4abec25"], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @sk_msg}, 0x48) (async) r8 = bpf$BPF_PROG_WITH_BTFID_LOAD(0x5, &(0x7f0000000300)=@bpf_lsm={0x1d, 0x6, &(0x7f00000000c0)=@framed={{0x18, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x54e}, [@jmp={0x5, 0x0, 0x1, 0x0, 0x2, 0x30, 0x8}, @btf_id={0x18, 0xb, 0x3, 0x0, 0x2}]}, &(0x7f0000000180)='syzkaller\x00', 0x10001, 0x0, 0x0, 0x41100, 0x4, '\x00', 0x0, 0x1b, 0xffffffffffffffff, 0x8, &(0x7f0000000200)={0x7, 0x5}, 0x8, 0x10, &(0x7f0000000240)={0x0, 0x1, 0x4}, 0x10, 0x0, 0x0, 0x2, &(0x7f0000000280)=[r6, 0x1, 0x1, 0xffffffffffffffff, 0x1], &(0x7f00000002c0)=[{0x0, 0x5, 0xe, 0x9}, {0x5, 0x4, 0x8, 0x1}], 0x10, 0x2}, 0x94) ioctl$TUNSETSTEERINGEBPF(r7, 0x800454e0, &(0x7f00000003c0)=r8) 2m39.891005886s ago: executing program 4 (id=769): bpf$PROG_LOAD(0x5, &(0x7f000000e000)={0x3, 0x4, &(0x7f0000000040)=@framed={{0xffffffb4, 0x5, 0x0, 0x0, 0x0, 0x61, 0x10, 0x58}, [@ldst={0x6, 0x0, 0x6}]}, &(0x7f0000003ff6)='GPL\x00', 0x4, 0xc3, &(0x7f000000cf3d)=""/195, 0x0, 0x0, '\x00', 0x0, @sched_cls, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0x8, 0x10, &(0x7f0000000000), 0x10}, 0x94) 2m39.76352492s ago: executing program 4 (id=771): r0 = socket$kcm(0x10, 0x2, 0x0) sendmsg$kcm(r0, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000080)=[{&(0x7f0000000300)="d8000000180081064e81f782db4cb904021d0820fe067c05e8fe55a10a0005000140020003600e41b0000900ac0006fc1100000016000500014002000000035c3b61c1d67f6f94007174cf6efb8000a007a290457f0189b316277ce06bbace8017cbec4c2ee5a7cef4090000001b14d6d930dfe1d9d322fe7c4650b5b9bd6ee6f63f5aeb4edbb57a5025ccca9e00360db798262f3d40fad95667e006dcdf63951f215ce3bb9ad809d5e1cace81ed0bffece0b4ff010000000000000dd6e4edef3d93452a09004b43370e9703920723f97e46bb5c07540d3b", 0xd8}], 0x1}, 0x0) recvmmsg(r0, &(0x7f0000000b80)=[{{&(0x7f0000000900)=@in={0x2, 0x0, @initdev}, 0x80, &(0x7f0000000b00)=[{&(0x7f0000000980)=""/223, 0xdf}, {&(0x7f0000000a80)=""/108, 0x6c}], 0x2, &(0x7f0000000b40)=""/31, 0x1f}, 0xfffff801}], 0x1, 0x10000, &(0x7f0000000bc0)={0x77359400}) r1 = socket$inet_smc(0x2b, 0x1, 0x0) sendmsg$kcm(r0, &(0x7f0000000fc0)={&(0x7f0000000c00)=@pppol2tp={0x18, 0x1, {0x0, 0xffffffffffffffff, {0x2, 0x4e22, @empty}, 0x0, 0x3, 0x3, 0x1}}, 0x80, &(0x7f0000000f40)=[{&(0x7f0000000c80)="58a6066a14d4b592ec29b78ad4cffe954091d7131a7c39f51f4f8b55a4c57120026364039446f9596af63e2d480484a229992e7ed8ff534e0d8766b12cb8314a840c6d2c65641163a0a7e367f0b387266f0243522f2e620cf828fc3dfb893786a60a2e08068225f3bf6a76663cfd4e02f2126b85daca6b778c397a7a50b1e776a95221f5e1e5a3900f028e033443b0bb9742759b289ce2a666e75b4a3106610c95de035f5df07824c394ee7a3b80a64fed34f1321a26853e0f0abb0d49b378b6657442da8a635e637fbe43f566e96c6f37108eef143bc3b49f3dc647fa327f47d1dc", 0xe2}, {&(0x7f0000000d80)="4e9d4184aa975a1f0b4866a9f54c0d86bcdd61565cb45dc2035f32c5e50cb476084d2da8c478dcb315b44fce191bbbb320b1e27b6809602e4831774dbb50b0f9504529836f4ecc664fa610dc0feb58e9dbc3827064eb709f7a278dc079a821a3fe63cec7212a5deba76723840c1a6508ba6cd120a43add80ddf44251d3b6ff2b2a207373c36ea8849868831e06f725e7", 0x90}, {&(0x7f0000000e40)="becb7c6207798561dd4ee1a1366169a288", 0x11}, {&(0x7f0000000e80)="47d21e32169713feada883af17b87ccead1463cf8439eedc74fe4477b92530fc1e219933bdd57644a4b667378658edabd642b935b85ad800954dbd1a02b51913fefd13705e0642ca30509b0635e002fb8a83e86aaeabc232150e87794caf8f507eec89fdad9a0c38bea139d3990c264d6c61c0ef97825085c9e4718d40f0b520ae99247eaf766152416b6b0d436be33923ecf190bcbd84331670fcfc7ecccb2b4bfedb59b666305feca31936feece1a7e4635d6c172e3d", 0xb7}], 0x4, &(0x7f0000000f80)=ANY=[@ANYBLOB="20008080000000000e010000ff03000077d4833a9c950a25126df5b9f0e7820a"], 0x20}, 0x40000800) r2 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_tcp_int(r2, 0x6, 0x13, &(0x7f0000000040)=0x100000001, 0x4) setsockopt$inet6_tcp_TCP_REPAIR_QUEUE(r2, 0x6, 0x14, &(0x7f0000000280)=0x1, 0x4) connect$inet6(r2, &(0x7f0000000080)={0xa, 0x0, 0x0, @ipv4={'\x00', '\xff\xff', @remote}}, 0x1c) sendto$inet6(r2, &(0x7f00000001c0)="a6", 0x1, 0x840, 0x0, 0x0) getsockopt$inet6_tcp_TCP_ZEROCOPY_RECEIVE(r2, 0x6, 0x23, &(0x7f0000000440)={&(0x7f0000ffb000/0x4000)=nil, 0x2000, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x3d, 0x1, 0x0, 0x2a}, &(0x7f0000000380)=0x3e) getsockopt$inet_pktinfo(r1, 0x0, 0x8, &(0x7f0000000100)={0x0, @rand_addr, @multicast1}, &(0x7f0000000400)=0xc) r3 = socket$inet_tcp(0x2, 0x1, 0x0) bind$inet(r3, &(0x7f0000000040)={0x2, 0x4e21, @local}, 0x10) setsockopt$inet_tcp_int(r3, 0x6, 0x210000000013, &(0x7f00000000c0)=0x100000001, 0x4) socket$unix(0x1, 0x1, 0x0) connect$inet(r3, &(0x7f0000000180)={0x2, 0x4e21, @local}, 0x10) setsockopt$inet_tcp_int(r3, 0x6, 0x18, &(0x7f0000000100)=0xfefffff9, 0x4) socket$netlink(0x10, 0x3, 0x0) pselect6(0x2000, &(0x7f0000000040)={0x0, 0x0, 0x0, 0x300}, 0x0, &(0x7f0000000100)={0x8}, 0x0, 0x0) r4 = syz_init_net_socket$nl_rdma(0x10, 0x3, 0x10) sendmsg$netlink(r4, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000000)=[{&(0x7f0000005d00)={0x14, 0x3b, 0x1, 0x0, 0x25dfdbfe, "", [@nested={0x4, 0xf2}]}, 0x14}], 0x1, 0x0, 0x0, 0x1}, 0x0) bpf$BPF_BTF_LOAD(0x12, &(0x7f0000001580)={&(0x7f0000000000)=ANY=[@ANYBLOB="9feb010018000000000000006000000060000000020000000600000007000093020000000d0000000b0000002946d6b60c000000ffff0000ff7f000008000000080000000100000004000000fcffffff9300000007000000c01d13000800130008000000a8b80000000000800300000001000000040000000000"], 0x0, 0xfffffffffffffeb8}, 0x28) setsockopt$inet_tcp_TCP_REPAIR_OPTIONS(r3, 0x6, 0x16, &(0x7f0000000340)=[@sack_perm, @mss, @sack_perm, @timestamp, @timestamp, @mss, @timestamp, @sack_perm], 0x20000000000000ec) setsockopt$inet_tcp_TCP_REPAIR(r3, 0x6, 0x13, &(0x7f00000001c0), 0x4) r5 = socket$can_bcm(0x1d, 0x2, 0x2) connect$can_bcm(r5, &(0x7f0000000000), 0x10) sendmsg$can_bcm(r5, &(0x7f0000000200)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f00000000c0)={0x5, 0x0, 0x0, {}, {0x77359400}, {}, 0x2, @can={{}, 0x0, 0x0, 0x0, 0x0, "3fd31340e92c4bb8"}}, 0x48}, 0x300}, 0x0) sendmsg$can_bcm(r5, &(0x7f0000000200)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f00000000c0)={0x5, 0x30, 0x0, {}, {0x77359400}, {}, 0x2, @can={{}, 0x0, 0x0, 0x0, 0x0, "3fd31340e92c4bb8"}}, 0x48}, 0x300}, 0x0) socket$nl_xfrm(0x10, 0x3, 0x6) 2m38.588848046s ago: executing program 4 (id=787): r0 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000040), 0xffffffffffffffff) sendmsg$NL80211_CMD_LEAVE_IBSS(0xffffffffffffffff, &(0x7f0000000100)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x400}, 0xc, &(0x7f00000000c0)={&(0x7f0000000080)={0x14, r0, 0x10, 0x70bd2a, 0x25dfdbfb, {{}, {@void, @void}}, ["", "", "", "", "", "", ""]}, 0x14}, 0x1, 0x0, 0x0, 0x4810}, 0x20000000) r1 = socket$nl_generic(0x10, 0x3, 0x10) r2 = syz_genetlink_get_family_id$smc(&(0x7f0000000180), 0xffffffffffffffff) sendmsg$SMC_PNETID_DEL(r1, &(0x7f0000000280)={&(0x7f0000000140)={0x10, 0x0, 0x0, 0x10}, 0xc, &(0x7f0000000240)={&(0x7f00000001c0)={0x78, r2, 0x2, 0x70bd2a, 0x25dfdbfc, {}, [@SMC_PNETID_IBPORT={0x5, 0x4, 0x1}, @SMC_PNETID_NAME={0x9, 0x1, 'syz2\x00'}, @SMC_PNETID_ETHNAME={0x14, 0x2, 'macsec0\x00'}, @SMC_PNETID_NAME={0x9, 0x1, 'syz0\x00'}, @SMC_PNETID_ETHNAME={0x14, 0x2, 'geneve1\x00'}, @SMC_PNETID_IBPORT={0x5, 0x4, 0x2}, @SMC_PNETID_IBPORT={0x5, 0x4, 0x2}, @SMC_PNETID_IBNAME={0x9, 0x3, 'syz0\x00'}]}, 0x78}}, 0x800) r3 = socket$tipc(0x1e, 0x2, 0x0) getpeername$tipc(r3, &(0x7f00000002c0)=@name, &(0x7f0000000300)=0x10) r4 = bpf$OBJ_GET_PROG(0x7, &(0x7f0000000380)=@generic={&(0x7f0000000340)='./file0\x00', 0x0, 0x4}, 0x18) ioctl$sock_SIOCGIFINDEX_80211(r3, 0x8933, &(0x7f0000000400)={'wlan1\x00', 0x0}) sendmsg$NL80211_CMD_TDLS_MGMT(r1, &(0x7f00000004c0)={&(0x7f00000003c0)={0x10, 0x0, 0x0, 0x2410}, 0xc, &(0x7f0000000480)={&(0x7f0000000440)={0x24, r0, 0x100, 0x70bd2d, 0x25dfdbfc, {{}, {@val={0x8, 0x3, r5}, @void}}, [@NL80211_ATTR_TDLS_DIALOG_TOKEN={0x5, 0x89, 0x40}]}, 0x24}, 0x1, 0x0, 0x0, 0x800}, 0x0) sendmsg$SMC_PNETID_DEL(r1, &(0x7f0000000600)={&(0x7f0000000500)={0x10, 0x0, 0x0, 0x1000}, 0xc, &(0x7f00000005c0)={&(0x7f0000000540)={0x54, 0x0, 0x800, 0x70bd29, 0x25dfdbff, {}, [@SMC_PNETID_ETHNAME={0x14, 0x2, 'pimreg\x00'}, @SMC_PNETID_NAME={0x9, 0x1, 'syz2\x00'}, @SMC_PNETID_IBNAME={0x9, 0x3, 'syz0\x00'}, @SMC_PNETID_IBPORT={0x5, 0x4, 0x2}, @SMC_PNETID_NAME={0x9, 0x1, 'syz2\x00'}]}, 0x54}, 0x1, 0x0, 0x0, 0x14}, 0x4000) getsockopt$TIPC_SRC_DROPPABLE(r3, 0x10f, 0x80, &(0x7f0000000640), &(0x7f0000000680)=0x4) sendmsg$NL80211_CMD_TDLS_OPER(r1, &(0x7f0000000780)={&(0x7f00000006c0), 0xc, &(0x7f0000000740)={&(0x7f0000000700)={0x28, r0, 0x300, 0x70bd2d, 0x25dfdbfb, {{}, {@void, @val={0xc, 0x99, {0x38, 0x10}}}}, [@NL80211_ATTR_TDLS_OPERATION={0x5, 0x8a, 0x4}]}, 0x28}, 0x1, 0x0, 0x0, 0x40000}, 0x4000010) bpf$BPF_GET_MAP_INFO(0xf, &(0x7f0000000d00)={0x1, 0x58, &(0x7f0000000c80)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, ""/16, 0x0}}, 0x10) sendmmsg$inet(0xffffffffffffffff, &(0x7f0000000f40)=[{{&(0x7f00000007c0)={0x2, 0x4e20, @broadcast}, 0x10, &(0x7f0000000c00)=[{&(0x7f0000000800)="964ec99996f7c112005bc0482e7b75bbdbf61cbc381c62dee6b6ce5ac11696369039d40e6a1534069653b0797ce0856c8af64afa58c3e692581ecd414dd4a57c7e2a479e57c3a441946bd3857f5e4b1db600673a3e02f3b02ec10f0ccb4f4a52", 0x60}, {&(0x7f0000000880)="8d61e0022cd162f4145fb5864c3dd3cee26890b5a7eabd7155596e6cec692223d9d0648d5377d03e2976146cce10d844584643251a91380b2cec15c094ccaf335cba40a6e1f50451304613c49574b27375116ff966859233411fb95fbd301cef5dcf6c790c4ce855213c7dfcec246dd804e9a4d8a7f3a248d2f7aebbf205d1ea6f152664ec95ec29e0404c76eb013e986016f0d8001975c1fd3467", 0x9b}, {&(0x7f0000000940)="16c51fe800a8b45c8bdbf3aaba8094c2bf1484ceac486247f9e5d7797b5ff25e8c55f40bc6be1e03aadf0f2054116e683080bd7d31b1331322b328e5571114a707ab4be332d17024f04f500535ec0dbc6bb3b7803a21cbbfb93c15997da15b6c1cad10b7880b29b82fa9eec8b5f4ba6a2183d099a047a5009198cec5e8767f0a9284799e8e3195eec804e6ce693a87cea6a7241045ad5303d36437508fe5e373dc49bdc44ca4c2b9c5fcb522196cb9b5f99960a456e1fc565318ca01add3bb", 0xbf}, {&(0x7f0000000a00)="206e1d6b80706d07630194f6bbebb329f28b0e0679c4b8e34765103f915a76f6361ac07c165335a06c43604d1739e9b998c3170cc6a51eee9a8a1b9b38e9a976c02582e5cb94b3284b7bc5d7bf270ae549ba888eeffc4beda4834739e564a6e4de414d687a5ad19738673a51d74fa81fe8a85bf18d2be92beea9c159aa4e5d29d73cc4aebb359ef4d283a0b85164a0c05aa3c32779a066", 0x97}, {&(0x7f0000000ac0)="1495835c860549ae414c222680026a900f397d5189d9e52d1966f1e087896b055eec84f33f30eee6cda6ddf9b00b15af4b540176548cdc3d842189b3bb0a52ba74", 0x41}, {&(0x7f0000000b40)="1544fee8b48641bfd759e4969cad9be4da1687bfb8fcd283c8d2c7056d6c3c785186fb41a783b35e4b67777f88fa108f6609ffb123c4563ee2c361d26d805fdd0e8cf95619627e4a02e25a5bd1df506a9fcf3c7940db0d4e5e628d8104f519c76c4574d869f801cbf74e35ad4fb010ea5d1f87301fe96a5ec8f44805da8207db1768b4b63395dbd8516d292280345e533daacd831af55b1da3a38ee7222c56a93a18350f0d48867954ca6b3b1fad5ae8e6", 0xb1}], 0x6, &(0x7f0000000d40)=[@ip_tos_u8={{0x11, 0x0, 0x1, 0xff}}, @ip_retopts={{0x7c, 0x0, 0x7, {[@timestamp_addr={0x44, 0x34, 0x40, 0x1, 0x2, [{@broadcast, 0x10}, {@empty, 0x7}, {@empty, 0x2}, {@multicast1, 0xc4}, {@multicast1, 0xfe}, {@remote, 0x80000000}]}, @timestamp_prespec={0x44, 0x24, 0xb3, 0x3, 0x6, [{@broadcast, 0x9}, {@dev={0xac, 0x14, 0x14, 0x1e}, 0x9}, {@rand_addr=0x64010100, 0x1}, {@multicast1, 0x5}]}, @timestamp_prespec={0x44, 0x14, 0xa, 0x3, 0x4, [{@loopback, 0x2}, {@private=0xa010100, 0x65d}]}]}}}, @ip_retopts={{0xb0, 0x0, 0x7, {[@lsrr={0x83, 0x1b, 0x9f, [@broadcast, @broadcast, @initdev={0xac, 0x1e, 0x0, 0x0}, @dev={0xac, 0x14, 0x14, 0x29}, @multicast1, @initdev={0xac, 0x1e, 0x1, 0x0}]}, @ra={0x94, 0x4}, @cipso={0x86, 0x1e, 0x0, [{0x0, 0xc, "a05ad8652cf5dcfb956e"}, {0x0, 0xc, "5994bc98d23961128fd5"}]}, @ssrr={0x89, 0xf, 0xe8, [@private=0xa010100, @private=0xa010102, @local]}, @timestamp_addr={0x44, 0x3c, 0x5d, 0x1, 0xb, [{@remote, 0xfffffff8}, {@remote, 0xf81}, {@multicast1, 0xffffffff}, {@local, 0x6}, {@multicast2, 0x8}, {@dev={0xac, 0x14, 0x14, 0x10}, 0x3}, {@rand_addr=0x64010102, 0xd12feb00}]}, @lsrr={0x83, 0xb, 0x5e, [@private=0xa010101, @private=0xa010101]}, @lsrr={0x83, 0xb, 0x68, [@multicast2, @dev={0xac, 0x14, 0x14, 0x23}]}]}}}, @ip_ttl={{0x14, 0x0, 0x2, 0x3}}, @ip_tos_int={{0x14, 0x0, 0x1, 0x1000}}, @ip_tos_int={{0x14, 0x0, 0x1, 0x6}}, @ip_pktinfo={{0x1c, 0x0, 0x8, {r6, @multicast2, @multicast1}}}, @ip_tos_int={{0x14, 0x0, 0x1, 0x1ff}}], 0x1c8}}], 0x1, 0x5) ioctl$BTRFS_IOC_GET_SUBVOL_INFO(r4, 0x81f8943c, &(0x7f0000000f80)={0x0, ""/256, 0x0, 0x0, 0x0}) ioctl$BTRFS_IOC_START_SYNC(r3, 0x80089418, &(0x7f0000001180)=0x0) ioctl$BTRFS_IOC_SET_RECEIVED_SUBVOL(0xffffffffffffffff, 0xc0c89425, &(0x7f00000011c0)={"1c4c86f1865ea51219f2142a36fc9a5c", r7, r8, {0x3, 0x7}, {0x2, 0x5}, 0x57, [0x1, 0x8, 0x7, 0x4, 0x7, 0x1ff, 0xfffffffffffffff8, 0x1, 0xcf3f, 0x7, 0x797, 0x1ff, 0x1, 0x12, 0x3, 0x7]}) socket$unix(0x1, 0x2, 0x0) r9 = syz_genetlink_get_family_id$ipvs(&(0x7f0000001300), r1) sendmsg$IPVS_CMD_GET_INFO(r1, &(0x7f00000013c0)={&(0x7f00000012c0)={0x10, 0x0, 0x0, 0x80400000}, 0xc, &(0x7f0000001380)={&(0x7f0000001340)={0x40, r9, 0x8, 0x70bd2d, 0x25dfdbfd, {}, [@IPVS_CMD_ATTR_DEST={0x2c, 0x2, 0x0, 0x1, [@IPVS_DEST_ATTR_PORT={0x6, 0x2, 0x4e23}, @IPVS_DEST_ATTR_WEIGHT={0x8, 0x4, 0x8001}, @IPVS_DEST_ATTR_U_THRESH={0x8, 0x5, 0xfff}, @IPVS_DEST_ATTR_PORT={0x6, 0x2, 0x4e23}, @IPVS_DEST_ATTR_TUN_PORT={0x6, 0xe, 0x4e21}]}]}, 0x40}, 0x1, 0x0, 0x0, 0x4}, 0x800) bpf$BPF_PROG_QUERY(0x10, &(0x7f0000001500)={@ifindex=r6, 0x37, 0x0, 0x4, &(0x7f0000001400)=[0x0], 0x1, 0x0, &(0x7f0000001440)=[0x0], &(0x7f0000001480)=[0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0], &(0x7f00000014c0)=[0x0], 0x0}, 0x40) r11 = bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000001580)={0x2, 0x4, 0x8, 0x1, 0x80, 0xffffffffffffffff, 0x80, '\x00', r6, 0xffffffffffffffff, 0x4, 0x5, 0x1}, 0x50) r12 = bpf$BPF_LINK_CREATE(0x1c, &(0x7f0000001600)={r4, 0xffffffffffffffff, 0x1d, 0x0, @val=@netkit={@void, @value=r4}}, 0x1c) bpf$BPF_PROG_DETACH(0x9, &(0x7f0000001540)={@map=r11, r4, 0x9, 0x2014, 0x0, @value=r12, @void, @void, @void, r10}, 0x20) sendmsg$NL80211_CMD_JOIN_OCB(r1, &(0x7f0000001700)={&(0x7f0000001640)={0x10, 0x0, 0x0, 0x1}, 0xc, &(0x7f00000016c0)={&(0x7f0000001680)={0x2c, r0, 0x20, 0x70bd26, 0x25dfdbfe, {{}, {@val={0x8, 0x3, r5}, @void}}, [@NL80211_ATTR_WIPHY_EDMG_BW_CONFIG={0x5, 0x119, 0xb}, @NL80211_ATTR_WIPHY_CHANNEL_TYPE={0x8}]}, 0x2c}, 0x1, 0x0, 0x0, 0x808}, 0x4000004) r13 = socket$igmp(0x2, 0x3, 0x2) setsockopt$MRT_DEL_MFC_PROXY(r13, 0x0, 0xd3, &(0x7f0000001740)={@remote, @empty, 0xffffffffffffffff, "20bf5e9a2beeb6da13a6c37efe749bc43419a4fb724bb3a3a601b9c4c5175129", 0x6, 0xfffffffe, 0x5, 0x8}, 0x3c) syz_genetlink_get_family_id$nl80211(&(0x7f0000001780), r1) sendmsg$NL80211_CMD_STOP_AP(0xffffffffffffffff, &(0x7f0000001880)={&(0x7f00000017c0)={0x10, 0x0, 0x0, 0x100000}, 0xc, &(0x7f0000001840)={&(0x7f0000001800)={0x1c, 0x0, 0x630, 0x70bd29, 0x25dfdbfd, {{}, {@val={0x8, 0x3, r5}, @void}}, ["", ""]}, 0x1c}, 0x1, 0x0, 0x0, 0x4000800}, 0x14) 2m38.419881764s ago: executing program 4 (id=791): r0 = socket$inet6_mptcp(0xa, 0x1, 0x106) getsockopt$inet6_tcp_int(r0, 0x6, 0x1b, &(0x7f0000000080), &(0x7f00000000c0)=0x4) r1 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r1, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000040)=ANY=[@ANYBLOB="3000000040000701feffffff00000000017c000004004280140001000400028000"/48], 0x30}, 0x1, 0x0, 0x0, 0x48815}, 0xc000) socket$nl_netfilter(0x10, 0x3, 0xc) r2 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_ADD(r2, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000080)={0x84, 0x9, 0x6, 0x3, 0x0, 0x0, {0x5, 0x0, 0x40}, [@IPSET_ATTR_SETNAME={0x9, 0x2, 'syz1\x00'}, @IPSET_ATTR_PROTOCOL={0x5}, @IPSET_ATTR_DATA={0x5c, 0x7, 0x0, 0x1, [@IPSET_ATTR_PORT={0x6, 0x4, 0x1, 0x0, 0x4e21}, @IPSET_ATTR_PROTO={0x5, 0x7, 0xff}, @IPSET_ATTR_IP={0xc, 0x1, 0x0, 0x1, @IPSET_ATTR_IPADDR_IPV4={0x8, 0x1, 0x1, 0x0, @private=0xe0004000}}, @IPSET_ATTR_IP_TO={0xc, 0x2, 0x0, 0x1, @IPSET_ATTR_IPADDR_IPV4={0x8, 0x1, 0x1, 0x0, @multicast2}}, @IPSET_ATTR_IP2={0xc, 0x14, 0x0, 0x1, @IPSET_ATTR_IPADDR_IPV4={0x8, 0x1, 0x1, 0x0, @broadcast}}, @IPSET_ATTR_CIDR={0x5, 0x3, 0x9}, @IPSET_ATTR_BYTES={0xc, 0x18, 0x1, 0x0, 0x8}, @IPSET_ATTR_SKBQUEUE={0x6, 0x1d, 0x1, 0x0, 0x6}, @IPSET_ATTR_CADT_FLAGS={0x8, 0x8, 0x1, 0x0, 0x10}]}]}, 0x84}, 0x1, 0x0, 0x0, 0x10004893}, 0x80) r3 = socket$inet6(0xa, 0x80002, 0x0) setsockopt$SO_TIMESTAMPING(r3, 0x1, 0x25, &(0x7f0000000000)=0x6d93, 0x4) r4 = syz_genetlink_get_family_id$mptcp(&(0x7f0000000140), r1) sendmsg$MPTCP_PM_CMD_SUBFLOW_CREATE(r1, &(0x7f0000000280)={&(0x7f0000000100)={0x10, 0x0, 0x0, 0x4000}, 0xc, &(0x7f0000000240)={&(0x7f00000001c0)={0x50, r4, 0x300, 0x70bd2c, 0x25dfdbfd, {}, [@MPTCP_PM_ATTR_LOC_ID={0x5, 0x5, 0x2}, @MPTCP_PM_ATTR_ADDR_REMOTE={0x2c, 0x6, 0x0, 0x1, [@MPTCP_PM_ADDR_ATTR_FAMILY={0x6, 0x1, 0x2}, @MPTCP_PM_ADDR_ATTR_PORT={0x6, 0x5, 0x4e20}, @MPTCP_PM_ADDR_ATTR_ID={0x5, 0x2, 0x4}, @MPTCP_PM_ADDR_ATTR_ID={0x5, 0x2, 0x2}, @MPTCP_PM_ADDR_ATTR_PORT={0x6, 0x5, 0x4e22}]}, @MPTCP_PM_ATTR_LOC_ID={0x5, 0x5, 0x4}]}, 0x50}, 0x1, 0x0, 0x0, 0x44040000}, 0x1) sendmsg$sock(r3, &(0x7f0000000780)={&(0x7f0000000300)=@in6={0xa, 0x4e23, 0x41d, @ipv4={'\x00', '\xff\xff', @dev={0xac, 0x14, 0x14, 0x33}}, 0x4}, 0x80, 0x0, 0x0, &(0x7f0000000040)=[@mark={{0x14, 0x1, 0x51, 0x1}}], 0x18}, 0x80) 2m38.120162487s ago: executing program 4 (id=796): sendmsg$NFNL_MSG_ACCT_GET(0xffffffffffffffff, &(0x7f0000000140)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x2000}, 0xc, &(0x7f0000000100)={&(0x7f0000000040)={0xb0, 0x1, 0x7, 0x801, 0x0, 0x0, {0x5, 0x0, 0x1}, [@NFACCT_PKTS={0xc, 0x2, 0x1, 0x0, 0x1ff}, @NFACCT_PKTS={0xc, 0x2, 0x1, 0x0, 0x60000}, @NFACCT_QUOTA={0xc, 0x6, 0x1, 0x0, 0x8}, @NFACCT_FLAGS={0x8, 0x5, 0x1, 0x0, 0x2}, @NFACCT_FILTER={0x4c, 0x7, 0x0, 0x1, [@NFACCT_FILTER_VALUE={0x8, 0x2, 0x1, 0x0, 0x52}, @NFACCT_FILTER_VALUE={0x8, 0x2, 0x1, 0x0, 0xffff}, @NFACCT_FILTER_MASK={0x8, 0x1, 0x1, 0x0, 0x401}, @NFACCT_FILTER_VALUE={0x8, 0x2, 0x1, 0x0, 0xfffffffd}, @NFACCT_FILTER_VALUE={0x8, 0x2, 0x1, 0x0, 0x6}, @NFACCT_FILTER_MASK={0x8, 0x1, 0x1, 0x0, 0x8000000}, @NFACCT_FILTER_MASK={0x8, 0x1, 0x1, 0x0, 0xfffffffd}, @NFACCT_FILTER_VALUE={0x8, 0x2, 0x1, 0x0, 0x5}, @NFACCT_FILTER_MASK={0x8, 0x1, 0x1, 0x0, 0xe}]}, @NFACCT_PKTS={0xc, 0x2, 0x1, 0x0, 0xf}, @NFACCT_PKTS={0xc, 0x2, 0x1, 0x0, 0xd3e}, @NFACCT_NAME={0x9, 0x1, 'syz1\x00'}]}, 0xb0}, 0x1, 0x0, 0x0, 0x810}, 0x40001) r0 = socket$kcm(0x29, 0x4, 0x0) r1 = bpf$ITER_CREATE(0x21, &(0x7f0000000180), 0x8) sendmsg$NFT_MSG_GETCHAIN(r1, &(0x7f0000000280)={&(0x7f00000001c0)={0x10, 0x0, 0x0, 0x20000000}, 0xc, &(0x7f0000000240)={&(0x7f0000000200)={0x28, 0x4, 0xa, 0x201, 0x0, 0x0, {0x5, 0x0, 0x8}, [@NFTA_CHAIN_TABLE={0x9, 0x1, 'syz0\x00'}, @NFTA_CHAIN_FLAGS={0x8, 0xa, 0x1, 0x0, 0x4}]}, 0x28}, 0x1, 0x0, 0x0, 0x1}, 0x40880) getsockopt$inet_sctp6_SCTP_PRIMARY_ADDR(0xffffffffffffffff, 0x84, 0x6, &(0x7f00000002c0)={0x0, @in6={{0xa, 0x4e23, 0x8, @private2, 0x7}}}, &(0x7f0000000380)=0x84) setsockopt$inet_sctp6_SCTP_DEFAULT_SEND_PARAM(r1, 0x84, 0xa, &(0x7f00000003c0)={0x3, 0xa0b, 0x8001, 0x1, 0x7, 0x6, 0x4, 0xffffffff, r2}, 0x20) r3 = socket(0x1a, 0x1, 0x3ff) getsockopt$inet6_IPV6_IPSEC_POLICY(r3, 0x29, 0x22, &(0x7f0000000400)={{{@in=@loopback, @in6=@dev, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}, {{@in6=@private2}, 0x0, @in6=@private1}}, &(0x7f0000000500)=0xe8) sendmsg$sock(r0, &(0x7f0000000a00)={0x0, 0x0, &(0x7f0000000980)=[{&(0x7f0000000540)="6e176549e983631954e60334ceb292b5edfb7a22d6abd6b5d6905c9cdcacebe7d6f1cd1dbb1d09de045b1e30943821916e7193c3323586946432325749527a069877cf341f38598da47e973d5b5e0b7214de8dd00963d7579e97707174897f2741e640b6ad33338114afd2f4de4b3ad4126cac5f20e4523b079dbfdbf73a690835485c90a8dee1157b24a2a993d6f5f36719f57b137648f01be80db1cb4578cb", 0xa0}, {&(0x7f0000000600)="be1d3421d4584d2cdd", 0x9}, {&(0x7f0000000640)="49745d2e23e9541ef635e4fb951f251b8435692d4c38cde2be31bc35c28a02ffc72b47043dd171643121940aec7f2a1d5cf6111c32d8201d7b25c644b1bc5ee00ad5e22e567c1c569525a3f1cd3b9b44f97e8b6eb61001a0dadeb7a3b0f0e115d42f941d56f07b01fbf30812d7bf5dd52c907e7a001ae2bbfcab7cf8544e286a18b46c95ca30ea5e42aa850ee7d47326a62366c42607a89d76cf9c3ac4fa79f5c97eb3213e0deb8a87c3f100925feca39d8c138aecf5e2cd453216082470ecd6e52045f38cc1e70b9ac6a6c458f6c23717a3afb439fb54d80c6d1b53171fe61a6391d6279fdc548bcf7acb657b12af807889206f7db19d2bb5d135fe", 0xfc}, {&(0x7f0000000740)="50a28d13ced623a5b59dcba1e8c1446f662fa6c1d6b200b9e7a82aebf1f3e2a4bc04d20adc6e4531901c982b98e2e1bb781f12b3586a7fe83ce78c17a99074399e482853ae17cfce492494b7ebe881f8d7bd41b7d7205624229ed88552db424d943a220fb2cd2eb141769e87d21424337b7471964efe710cc3cc03c4b9bd485ef7effc3081433c8c4d28cf46444cb608936dac258b3368128bbe7ee33d8aa0e4cdf32a71eab51a38330e62ca3d85de1e1963e1e3fd0ac27104de6ec725cf45f1a2909806366098cb97a3d58fb2e5d05cd4add7ed62", 0xd5}, {&(0x7f0000000840)="c50ff6e4d659901754a5893672e66f81e83d3f9f729c699aedb3db610a46d735e12f4e1208c1da1d22955616f179e089f5ca4d41a6730151fc9288cdca7b095626c94c9d95c60c7e43799b5321f79753f5ee46eac6e82d4cacf14c2f9a854d26460c413bd52cb8d7aedf38072e6ce1c8d957cf9ac975d5ec047c603211cc4bf0a3a171c09515ee7e424b1b6fdbc175751b5882d41b72005ed2caa3505bea9b106f7332d4495d1624fba6bc75d31f70d53ee5600db139e865baee0118625a63590772ef13f800aa9712694f", 0xcb}, {&(0x7f0000000940)="50bfa7b1626fb0", 0x7}], 0x6}, 0x40000) recvmsg$unix(r1, &(0x7f0000000c40)={0x0, 0x0, &(0x7f0000000c00)=[{&(0x7f0000000a40)=""/254, 0xfe}, {&(0x7f0000000b40)=""/133, 0x85}], 0x2}, 0x2122) ioctl$sock_ipv6_tunnel_SIOCDELTUNNEL(r1, 0x89f2, &(0x7f0000000d00)={'syztnl1\x00', &(0x7f0000000c80)={'ip6_vti0\x00', r4, 0x29, 0xa9, 0x2, 0x7, 0x4, @initdev={0xfe, 0x88, '\x00', 0x1, 0x0}, @remote, 0x40, 0x8, 0x0, 0x401}}) ioctl$SIOCPNGETOBJECT(r3, 0x89e0, &(0x7f0000000d40)=0x80) r6 = socket$nl_rdma(0x10, 0x3, 0x14) sendmsg$RDMA_NLDEV_CMD_DELLINK(r6, &(0x7f0000000e40)={&(0x7f0000000d80)={0x10, 0x0, 0x0, 0x200000}, 0xc, &(0x7f0000000e00)={&(0x7f0000000dc0)={0x30, 0x1404, 0x11, 0x70bd2b, 0x25dfdbfd, "", [@RDMA_NLDEV_ATTR_DEV_INDEX={0x8, 0x1, 0x2}, @RDMA_NLDEV_ATTR_DEV_INDEX={0x8, 0x1, 0x2}, @RDMA_NLDEV_ATTR_DEV_INDEX={0x8, 0x1, 0x1}, @RDMA_NLDEV_ATTR_DEV_INDEX={0x8}]}, 0x30}, 0x1, 0x0, 0x0, 0x48001}, 0x40) getsockopt$IP_VS_SO_GET_SERVICE(r6, 0x0, 0x483, &(0x7f0000000e80), &(0x7f0000000f00)=0x68) sendmsg$sock(r0, &(0x7f0000002580)={&(0x7f0000000f40)=@isdn={0x22, 0x9, 0xa0, 0xf7, 0x5c}, 0x80, &(0x7f0000002480)=[{&(0x7f0000000fc0)="09a1a921aea4a020a525c68c52d3906c909aa9e8e9f70378b1c21b5a8117ff428b2fc2464f6507618937412b6c451ee95a500d53b4df419bb2f351a4b8923b377234850d0a3a2b04562725e8d1466a86a3dde9201e9a37fb9d34ad9f037b366a81bcfc8b9fd2baa6acba0845d3e0689005fecfa64ef121656a00d7cbed334213ec47b8186059ab128b98cada0cd81f8e58c9ce493c2ee9b92e70", 0x9a}, {&(0x7f0000001080)="0a5cf44ac3aeaed470050cc762386e4474f66f02c66d7c158881c11ce1048c65c680731277030e16527b7b23cc4fef", 0x2f}, {&(0x7f00000010c0)="ebf83bcd70c3fce7714846cce05453264c519785c351b71b02671c6c6385e2f531c35d8925d9b3666e813a2ef17d6eda264dfd110a33c6ebbb9ce4036bab8264c5321b0af8fc2aacf0df4dd729fc034bb6526ee7288111f2bb33c4d4e161fc4567367d78bb448a538c25f62f28ac0b2a4a0378831c67bb3085f07b3671739c934873e8bd9e7ac2cec50c6496bbed9df2373c6155f66e7c13c70895ec871967e84cc9e52863883eeaec086a5f29947749160ebfac788752d87d133928b7215349a2eb22659094bae40d277d853aec0263a9d2efb0f69ac84a35298fd354fd30f12c3dfa027622a3e7dee5be231015fa5cd2a951fe6e249a698cce9a8d905b7761cb99a20a923e1f87ed7cb13a9249df987640a524db62e6d762ce658c10541b513d09b43d5b431058362e94240c2d3c0d0dc0076ae33ab9066e1b3e052afc1b944cadfbe153ba63f914681a812d46a8fc5d47876f2b1ef8fdd8633dcd0fdd47f61171716f435ae8679eb464766c7a7b9ba74a9fe1580242354fd6b566ecc8eaf26d6d0d92e6adbeff0d156c13c0d58e369ce91c096b431ae273ebd3f1e98e7d0a82d2e6493eed72f4c58a24f06d9f19a9737b8b2b78c88fa073234a96cb6fb260a3671b136157c9ee8b7165dde0495c8abcd670306fcac0be3b354d66568156880686bc0fcf90d1c4e869d72ed6d0349b72e83985a148dd4a9499ee03f6f17e8b61d078f84d5f4600d38ca5667ac39d8b4d1352ba6aebe9311385478c476a696ef03f0eef61094ba006d219c9bb1bb1109b01b76211cb481d20986703688124ab10d42e837f6cbc7b23501fcb6af07c8fa6c4b00af8a536df1ce0b70adeec3693f59815f833270669451e2f1d2162049348a9f735c1fa75eacfbb21c7fb4f6fad5f04d3c5bb0c68b0b78904a7e45ba3113f6b7f18c6ac99799bf218d8bf43395369b8f4140696f00ac2c1c2fcedecd9345cf0b90fca4fdf2d278a5e06516ae480e0f1f44670021c1cc669537242d69afc641bea387a1c874ede06a8d6517cdda5fda4940eab329885cb9fcc0853f4738ec568dbb27e4ba499cd7e555e473db9806458119d0ee033c952fef817976d3a9499217cf07f9f37c3140cb55c87cd0d3f767078e24f24d0f759900a827849ce1241dff004892a5481ca95a66ec7ec0cdd4d95032d84b4b32703debc781863def65562d39ca81ad54949bdddaf27e252472948ce4348172d245cce1b4954be84acd39bbdf05a1aff6837abab3f713db3429cfce65278d253ac1963e02df4385d7d6d666fb6ff7412d7cbf68e2fa300efefbf3b4dd2d32aa5ade2b673461e6740969bf0271f33ff93c86eff8ed2da35e2eba5ce60fc69b2b67ee28c00cb80cd068cca80d24d48b3386bf27cd03f3b2cc8076a71aed0e6391c94644b1a69abdfb3798f19ae0052c5140c709e91b596d1fff560abb119a0f1406a23f26ec3fd60e72cfcf08389669e81a7ed9c94c3864acdddfbb534dd48488dc23579ea96a6e457ca16e6a1e8ad0fe30b2da7f66104cfd1d598fdefbf955aee3ceaa1c47d3ffb887ec6861ba57661fe47c0f1e2b26996ef3fc7ce5a20fbee1aa9d5ee235873c46e9f5b7b03382f324940aaa45a62b4be2c75ece28a1ffaa6ba053b5174675a224d4f43545ff81ec1ef7445806749af19e46d519beaef22bcef3628ebc2f9201f8f95b370454578090ac28d9ac1523255fa352fb1e85b473968d8e79d1cb034dec82b949d0321f7df9d853a0353fc1aef7a66919d458e59b164f0f4f623b49ade3e0873ea89747d7fb2b8877d23d9ace5331d31832eb59642d0d6cd329b7ea170055be619bb7c687f1e68f481f8bf2ee2e1c81df137f48b82bb4711410fd79a204631f9e6edaffacf976cc9dd503b138489556faaf54c1a4594aeabf9af4a56775d963d74b06d0a3af3bcba40000bbbf87cecd6d7232985a92b5146b8097a1fa42b896144bed9c033b22eb68b4bab258104e410d45e535d0029a3d1b527d3ab82d06d54dce713494e27859be2bf3c5467009be44782e4acd1e8f35301f87fac8d0f39cf2537920af80539f3069ae9db7267b9de81b38e5da62d6691a8e31611b601ced1eda2437546a2a08392dd8deee82065287bf07bf34b8cb6e91a314835786de8cd015445036c8930e68326c6b48acdfd43c1bd5d9f232c956ffac34241ec7bcf0d59a361b4290a3ed55c0575b3845bab2a4616242e1ffe00f4f54c788d346fab48f03f80a8c4eeadc3e1804a046328b1a3a7b7d4e81664fbb7e346fb1bc6fe186f1daa47122f52054d3caf461c556dbd42ee8d505e4ba417ae2804fe6ca32479dd5a6089c8065019eedb7c90c4ed82273e952207224df5e7a8a021f28f7d4b1bcab1bc0b63400c564ac8162ba27c57696b439b7c6e378a12275f60fe38dce5c621ffecf846ab19a8e435b362169ccdd7072945338024a1db28175e0eae4a11c234e2bae2c0a7e6d80beb0a97d43d2cedb05b0c9ce9304bdef2f8f938b03b3764ba88730e3ce3bfd1365163e06119e6bf84b7f17701f2a2b11ba97c46e64420816d89073566a9e6ba2f304df5973c22ab80f6b5ea9b1d02f2dcf20d3a547cb0f0482d680d04cca5380347f26768079b01498d7f99310cb4e3a4e6961b28426c9c9b2d1c34539aceeb78dbbdf2e14fe42f9c9dd3408ae2062038e8bb51b621b153d7fd6af5d07db39898a6e832e14d6b426b144fec0c834e625afeb217b10b1e7b0d2c441dd6b9babfc4f8dc347718d3bbc5bffdd751f8efb750fa136da2ff1394dd1cb1a6b662f34552286b1bf7b5c9bc9d452972a272fd6061eeb0d30642252e1bc60305663353586674c2838fb32e2197933517e2ea4ab88d32bfb61aa5ab80ca976f55eb11b6e7c0b1354d9fb1d61cab3c6c20e025d612d32fd0106d7152b5e4bc49fb6f062c96b8b69258b84efdfe03201865dc9410776213475eac990af499233a2b303dbe8584b980fb2275e2d86b38a95c5890828e52359027e0d5f068039dd38206ba3c9a66caad4aa5f63fb05e588abb587f303de63b1dfedf5d1ef1893ffe876a9521dc7d3d5d6fd512ccdb9aed229914cf7ea78de51f756751f9b433aa94f7b0fa311143db48b77adabdc223c5002d343ab471a20af4f8fb753142d970070f06a4fd3df4ff402fc210bd55836b6d10f15a79a26e5626d7be1b2ea617fecff179f38bec3bdd7e75c0886a63c33ecd25535c1afbf887665101dbcef9d3539e9858ef419580a45e6133710e17c46514dd8d7623dd4620b06d298577f81b9834b2ccfacdbb488791e7ac3b485adf29efca1f11e154ad16c441a2ca1132e1bd03d90cc26c1b626dab1b9cd886ba4fa5c0235b7c1bb07e7ef231375ad99c60df47e63f1862b9dfb615f140c694741ff415d475a86c5843e211948fc678ad39658ef1643e395f6e3331b43b02089fe83e2999a56d87fdce8a77b2eb8503150902fb2665ba0781ef804d877d02534242b243c60364ded6f8d9f770f9e67758ef3ff953c803262c4c60fdd547dfa4cddfacb192f20cc43525b050f75073639452ee603d8da4f31249578908252a5e99bb66eadb75c755e6eaeef53081de04778f085ba4de0d1bdff3d5bcdd69d49693b9d02aef9048a6918f931101614606ec33750cca4081bb7605b13ca722f341153e450ad624c95a2ea9f85a982ad1696421e22f56fd726948c86f9a54f4d0eca8c516d5e6c3577afa4e2224c5c048595152bffbab351163dc61b3cb91e20e7685d8cdff270c152a35e8b0c68363937c783069ef85dba13f240ed63ac9e28dc47bcd51ca6a8575b59c72b592de4d45f6a2c2226a5ad763f20cb74e869a27ce5e6f4db35f54b7e8495ab77fa72d5c6d6a56e01534498140fe44a1a5249d673996d5b179fb52d3f8410c68695fdd3266d12e0dde341b2713e94272831f260a1d4ffe817588750c0b4c81f868cdf05a1ede92434f5d9ad6a6d899c133a5700a3ea1283c90358fdf927fbeeae7ceb7539b166f03c1e031938e859b91d0c2d3111e9b8a57a086fe25b9232acd2c89fbc3519958140d3783cab0b6960c286d1a2194352da2ef0882b2186e62cf2fc09c30c2cabffb64af2ed504ecfb9eac835737cf601db6669d882259efaafd1221f5165a07921d0d80cb22d9d172bc7a9872beabee5ba21f330e97bdf5ec3bd317dc94f3bfa639d12ad62df291180a1ed12fb7d40046478346c5d6f313718aa97fbef4006bbf4e959a9e6c19a12811cc71e8f4f0e28a4af5e9a9f2ee984226b239b463dfe6d03b3f6a60900d58af3f9a1e9adf3b05b96d3778d989af10b7cde9350bac0d3258017c9bed30148d3b0145ef4af3ad612144871561feb47cd072b8a49f568196906736e3fe9205bfcb1ee7bd1597f769f61cb553d23e58c3aa4be1c7134775b2ee78b8de14a318cc6c815635af2521ea54bffee8ac4a1f96a1840158eff9250cc536fd93e690cdf862388b0d2a70c7568390265440767c967c8fafaee59d3ebc9393c331dd09ddcff45c3ab943e8586f45d827e4a5957c087b6b1612c34427100f3ed17530810105be5cd6280bad809b85bd0fb8ee2ea8ecdf3a2ee3927810255205432e7bd73ad07524563b62cc6b85448c4dbca6b4964e89d9d750d47b706912f3397bc54a3112a718617b1c41275bb42205aaf0d546aaca65d2796bdfd6ddc8dcd791503d7cbbc80653835cd90a7d800c60d152d5796f44bba8734bb85e04413679d097a2fdf81d7697550bd9ed57470a6389b6f6d31128357ec4ef7b682676d550d07ae5279a352e6b08d23096733463002eeb1fef9ac4d44e478fce04b42ea41d98bf5222b858d42a71632d9a4d49556c8c73790f8ce249074360c5873759447058e8cffb18274c5183bf0339c8143419c156972d089c20e6357d9582b184520faaae554b1215a3d93133577a55b2fe46542849f063d5ed1c7258ce773f97ea6c3d8ef31aa48a8cbe861b61d82edcb9a3cb50d5c6e5ce88464c51bcd3fea3510c18de8085090b03724a0e8069cc0b3226481282401e4e7a303d0f0f01ce95864ddcd7e3665eb4e937023040e01c254b229d684450ed45718611785d45cacb15a6fe3d6c76a180112c90673c9ae84e372023c3853a3f1fcfb04bb8ebbfbe928775c419c44e8351c35418a42b812294ae4e295a2af6df671f6476b4e063ef74b1ffee5e00ad2b9b0ac4993a3d3025f8b5ba7f9774cff32b1078cac8e5c42bb580396a1f7839dbaaca071cda582e7e530e9743964092a664091465ca34b62840cd122e646f639989f356955b9f7fd771823bbbf5cdeced9717fcc82a59643f8bb0922de5f541529c61fb47e22024fbd0be3eadb40a8996333a3aa324591e6cc29fea80d52ea4bb4108428935aa2c19d6ca36b1ad5b8800742215358f3690790adda857ca1387ff7a24a33ceb90ab878ba43e3b0a80cf4699e3ccc97a41653322687a9e74a314c6129cace8dee4e3895619d24cb2d4ba007b5861010cd8a5addc88b3e56ef597e258804bcc8de04674e0973266995f6e19e9243cc0f87a0949fe6b409f66d6e5bee5bba3c050bf5de4fcd58252c4d870f2e6447d0f529941715c72865121946dec69c26684a3b63c0c351909f060f2896211288ff798437ea554a4df1229bedbc8d5cf11e69661a8eb8c41fcfe4e5409286ed83ae5645f53ae7b8e1bfa0e188644c1c28960f5c5a7ad95f73c05a7f581239ca3a45b0c6a577e404117267caf22b0e385bdfaa75d2133a0dc614118023741dc273dbf1eb75bb06be575e507f96e9da44d53498d098b4378", 0x1000}, {&(0x7f00000020c0)="a0bb775cec9796fc0a63d04371f8e1cc2e25245ad35869e72b526f42ecc534cb733b88e24f58e8fea4b2e286db6332b1cc38ddc603eea2708276a4b1e003d1c568ae13e65c88be5bdc8eaedbfa2e740a4900be220220266d00d8972e952108a9e3b7c32b306ccd1c1e958929faa2d3c0be3b7af00413d4e54cec8190a97d954ad65cd38cbc190e1f6f6375ce93abdd23b4af76db25654133221a651253a3ce3a3c1f9e43e73946c6c6f9511d9c8c305bfefb7fa5323272752294854c64350db26fdd0bb1553a8c5245b9f05c2dce615c", 0xd0}, {&(0x7f00000021c0)="2ceea3c07fb33be8ab8dd884ae670f5686b9f7ea882e5e866200b30ac5b17c9cc13432bd995e9e8ecc32a7a16bb2f3e606b5a1157ea2f14917f30a7f17c6e20d13bee8de791c2e5ea002afa595d7b7bb57940dfb8d4149be31e1d74509fa18f6caeb91e21da8d1cbb9511115e00d553952e8192431a713efaf8f885a9cd9efad8d0b00c4aaeb8716397f39697f8a19475706cfe9a0ae660cb9970fbf7d4cf77ed5c7dc55ac00011fdf43ccef8694793bf5486615e1bdf29a5e185c62033f6e3e2c0d08e69cffb6d75666c611778322c85f", 0xd1}, {&(0x7f00000022c0)="3aae2b63637e9342351022de84ff8bfa968524de4df21fdef4336eee65e9b042c40e6406e2", 0x25}, {&(0x7f0000002300)="2e47dcca7574bbbf2f0981c6267637bec14f0742e2557d9a59c232e13d4f6deaad6c43d72c56cbdd80ead74912a3fcb15819baa40a996f1721f9b24c0a5b4ea1af833937a8c83e020b43499fdf0e3010260d4806a9b76243ebe374ac9ee119d62245fa689fdc5207a3eb627c5f0d43185e0b315ad2f1295001d40481379fc7f61cda7bf3de9f", 0x86}, {&(0x7f00000023c0)="3b33566700c159fb57504c9a24a1fcce0dbbcb8731610598a4ae731aaf6fb714f31ea8f97ecbda33b9d5dacd2eafdbf95ee388fa43757ebcbf723f3fe4ebd7975762a47a61ea22cbb252549bb4cb63c22bae91d184dad05a784145cb7f26cf2613455af985873c26ecd34d0ef0cca7182c0e4dd8f0c6df9d2fad5ff279be958eb190f4b05f53345c8b1b68878f83da2f927e4f5ad1535a7270c5e3684897b1bd73274534e01da727cd0a86bf659c91a37a", 0xb1}], 0x8, &(0x7f0000002500)=[@mark={{0x14, 0x1, 0x24, 0xbb49}}, @txtime={{0x18, 0x1, 0x3d, 0x1}}, @mark={{0x14, 0x1, 0x24, 0x7}}], 0x48}, 0x0) getsockopt$IP_SET_OP_VERSION(r1, 0x1, 0x53, &(0x7f00000025c0), &(0x7f0000002600)=0x8) ioctl$IMHOLD_L1(r1, 0x80044948, &(0x7f0000002640)=0x101) getsockopt$inet_sctp_SCTP_RECVRCVINFO(r1, 0x84, 0x20, &(0x7f0000002680), &(0x7f00000026c0)=0x4) ioctl$sock_FIOGETOWN(r0, 0x8903, &(0x7f0000002700)) getsockopt$netrom_NETROM_IDLE(r1, 0x103, 0x7, &(0x7f0000002740)=0x5, &(0x7f0000002780)=0x4) sendmsg$NFT_MSG_GETSETELEM(r3, &(0x7f0000002880)={&(0x7f00000027c0)={0x10, 0x0, 0x0, 0x200}, 0xc, &(0x7f0000002840)={&(0x7f0000002800)={0x20, 0xd, 0xa, 0x101, 0x0, 0x0, {0x2bddf7cd95d1c514, 0x0, 0x7}, [@NFTA_SET_ELEM_LIST_TABLE={0x9, 0x1, 'syz1\x00'}]}, 0x20}}, 0x20040000) r7 = socket$inet6_sctp(0xa, 0x5, 0x84) setsockopt$inet_sctp6_SCTP_EVENTS(r7, 0x84, 0xb, &(0x7f00000028c0)={0x9, 0x40, 0xcc, 0x7, 0xd, 0xc, 0x0, 0x0, 0x2, 0x0, 0x1, 0x4, 0xc, 0x27}, 0xe) r8 = syz_genetlink_get_family_id$ethtool(&(0x7f0000002940), r3) sendmsg$ETHTOOL_MSG_COALESCE_GET(r3, &(0x7f0000002a00)={&(0x7f0000002900)={0x10, 0x0, 0x0, 0x4000000}, 0xc, &(0x7f00000029c0)={&(0x7f0000002980)={0x28, r8, 0x20, 0x70bd2d, 0x25dfdbfc, {}, [@HEADER={0x14, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x1}, @ETHTOOL_A_HEADER_FLAGS={0x8}]}]}, 0x28}, 0x1, 0x0, 0x0, 0x100}, 0x0) setsockopt$TIPC_GROUP_JOIN(r1, 0x10f, 0x87, &(0x7f0000002a40)={0x41, 0x1}, 0x10) sendmsg$IPCTNL_MSG_CT_DELETE(r1, &(0x7f0000002b80)={&(0x7f0000002a80)={0x10, 0x0, 0x0, 0x10}, 0xc, &(0x7f0000002b40)={&(0x7f0000002ac0)={0x80, 0x2, 0x1, 0xa05, 0x0, 0x0, {0x7, 0x0, 0x6}, [@CTA_TUPLE_REPLY={0x1c, 0x2, 0x0, 0x1, [@CTA_TUPLE_PROTO={0xc, 0x2, 0x0, 0x1, {0x5, 0x1, 0x88}}, @CTA_TUPLE_PROTO={0xc, 0x2, 0x0, 0x1, {0x5, 0x1, 0x2f}}]}, @CTA_SEQ_ADJ_ORIG={0x44, 0xf, 0x0, 0x1, [@CTA_SEQADJ_CORRECTION_POS={0x8, 0x1, 0x1, 0x0, 0xfffffffb}, @CTA_SEQADJ_OFFSET_BEFORE={0x8, 0x2, 0x1, 0x0, 0x4}, @CTA_SEQADJ_CORRECTION_POS={0x8, 0x1, 0x1, 0x0, 0x9115}, @CTA_SEQADJ_CORRECTION_POS={0x8, 0x1, 0x1, 0x0, 0x9}, @CTA_SEQADJ_OFFSET_AFTER={0x8, 0x3, 0x1, 0x0, 0x41}, @CTA_SEQADJ_OFFSET_AFTER={0x8, 0x3, 0x1, 0x0, 0x10001}, @CTA_SEQADJ_CORRECTION_POS={0x8, 0x1, 0x1, 0x0, 0xe32}, @CTA_SEQADJ_CORRECTION_POS={0x8, 0x1, 0x1, 0x0, 0xfe}]}, @CTA_SEQ_ADJ_REPLY={0xc, 0x10, 0x0, 0x1, [@CTA_SEQADJ_CORRECTION_POS={0x8}]}]}, 0x80}, 0x1, 0x0, 0x0, 0x4}, 0x4000061) r9 = socket$kcm(0x29, 0x0, 0x0) sendmsg$kcm(r9, &(0x7f0000003000)={&(0x7f0000002bc0)=@can={0x1d, r5}, 0x80, &(0x7f0000002e80)=[{&(0x7f0000002c40)="e13e07c92e747f17c3010231223bd274c4bce455f098e356873a619cae9504917d44cdd54c9f78ca8632f61012c80611adc4ddd75b944fbd15cbace482a4ae4b2dda58da95ab3566515a1f572476d6b3fd88f9358741b15fb0055901407dd3ab84f189ae571a1ec15ddefd4a2191cd7c9441b1127d081cb144ef67e3fff16bedd75f10ef02f5b84ada", 0x89}, {&(0x7f0000002d00)="e94291b8c56effbe97e7914a0a02287c518a5cafae05ab7f0490b1aed03dc658c90b7c2b4869a67f0074b843828c71884748eb4cb202b8269f0cd0182203a335d955518f67aa34ada4c4ca9992ab14a5d65afa593363dc268e07a6708fcd729f79836844eeecabcc6e0903feb782eecf05103b3c74dbc55c7d7733828e1d5734050ede06d38dcd8d148ea796df1b8be936a0035e9306bb2ddd6f68d7f5439b1e38752d4c7ed5482d1eef241293118d12157efae2a7f785a8494365f4e71dd51b", 0xc0}, {&(0x7f0000002dc0)="e2cc37a32fc809f3fb749dde87d2e8e6f9387b3b8533a3126cc19d748604c16e898ecc5ad395dadb1c11a04356c4a437b3e47850cd8044f61b3eeffaa6ca0deca8c4905ff44a3245a0a5b57f4a8ed26471bf6bf091ad47f933d35764641d53ff8cb6b3dd10e2c04a0a61d1ecd84d26c25a785064ac8098bc3b4e98558afc57cfea5699dd01e1f0888bb5571c21f1bcce0fee60e30b716b04a22435f147acfaf607408a0e64babe2d9d26b593c196a911710a0d51a60e6241", 0xb8}], 0x3, &(0x7f0000002ec0)=[{0xe8, 0xfe, 0x7, "ed687f0b581d916b474cdf060607bcf44d05961bbcfb97123c3334fa7eea5b87b05c2f08984fb0d4b4dc1041c13c2badf7ba82745d9c8320a98e0a6ce8aac0575ac0a7da6d9a21d400d1a34721b6fc77ce00c3a45daab51cd12c1e17fa99a6223a221b0852eccd5ca2a7730ea4614e07b1551fcab5e578c250ab61d0010be7ebd37d4a785819831c6af59f7f9996fac40da3c0658662fab8a077d25ea7a9392c59a5e2f1fe847e4062342a0182a8e95e1c0e6a1aa2569c2963e1b49d49002bb67b557c6744a74a6788dff7993b63f9a21805"}, {0x20, 0x10d, 0x7, "a44cb142d108aaa40ceb0912f46c"}], 0x108}, 0x4c800) 2m23.617201995s ago: executing program 0 (id=997): r0 = socket$inet6(0xa, 0x2, 0x0) bind$inet6(r0, &(0x7f0000000100)={0xa, 0x4e20, 0x0, @empty}, 0x1c) (async, rerun: 32) r1 = openat$tun(0xffffffffffffff9c, &(0x7f00000001c0), 0xa2f01, 0x0) (rerun: 32) ioctl$TUNSETIFF(r1, 0x400454ca, &(0x7f00000000c0)={'syzkaller1\x00', 0x6bf1c2d5adba8c32}) r2 = socket$kcm(0x2, 0xa, 0x2) ioctl$SIOCSIFHWADDR(r2, 0x8914, &(0x7f0000000180)={'syzkaller1\x00', @link_local}) r3 = socket$nl_route(0x10, 0x3, 0x0) (async) r4 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000100)='net_prio.prioidx\x00', 0x275a, 0x0) ioctl$FS_IOC_RESVSP(r4, 0x40305828, &(0x7f0000000000)={0x0, 0x1, 0x8, 0x9}) sendmsg$nl_route(r3, &(0x7f0000000200)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x2000}, 0xc, &(0x7f0000000140)={&(0x7f0000000080)=@bridge_setlink={0x30, 0x13, 0x400, 0x70bd2c, 0x25dfdbfb, {0x7, 0x0, 0x0, 0x0, 0x40200, 0x616}, [@IFLA_NUM_RX_QUEUES={0x8, 0x20, 0x7ff}, @IFLA_NET_NS_FD={0x8, 0x1c, r4}]}, 0x30}, 0x1, 0x0, 0x0, 0x10}, 0x4000) (async) setsockopt$inet6_udp_encap(r0, 0x11, 0x64, &(0x7f0000000040)=0x2, 0x4) (async) bpf$BPF_BTF_LOAD(0x12, 0x0, 0x0) (async) r5 = bpf$PROG_LOAD(0x5, &(0x7f000000e000)={0xe, 0x4, &(0x7f0000000040)=ANY=[@ANYBLOB="b4050000d62b00006110600000000000c6000000000000009500000000000000"], &(0x7f0000003ff6)='GPL\x00', 0x4, 0xfd90, &(0x7f000000cf3d)=""/195, 0x0, 0x0, '\x00', 0x0, @sk_skb, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0x366, 0x10, &(0x7f0000000000), 0x1dd}, 0x48) (async) r6 = bpf$MAP_CREATE(0x0, &(0x7f0000000200)=@base={0xf, 0x4, 0x4, 0x12}, 0x48) bpf$BPF_PROG_DETACH(0x9, &(0x7f00000000c0)={@map=r6, r5, 0x5}, 0x10) write$tun(r1, &(0x7f00000003c0)={@val={0xa}, @void, @eth={@multicast, @remote, @void, {@ipv6={0x86dd, @udp={0xd, 0x6, '\x00 \x00', 0x18, 0x11, 0xff, @empty, @mcast2, {[], {0x4f19, 0x4e20, 0x18, 0x0, @wg=@data={0x4, 0x120157d, 0xa}}}}}}}}, 0x52) 2m23.311864953s ago: executing program 0 (id=1002): r0 = bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f0000000080)={0x1b, 0x0, 0x0, 0x100, 0x0, 0xffffffffffffffff, 0x9, '\x00', 0x0, 0xffffffffffffffff, 0x2, 0x1, 0x1}, 0x50) r1 = socket$inet6_mptcp(0xa, 0x1, 0x106) setsockopt$inet6_IPV6_PKTINFO(r1, 0x29, 0x4b, 0x0, 0x6) r2 = bpf$BPF_MAP_GET_FD_BY_ID(0xe, &(0x7f0000000100)={0x0, 0x0, 0x18}, 0xc) bpf$BPF_MAP_CONST_STR_FREEZE(0x16, &(0x7f0000000140)={0xffffffffffffffff, 0xffffffffffffffff}, 0x4) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000600)={0x6, 0x2b, &(0x7f0000000180)=@ringbuf={{0x18, 0x0, 0x0, 0x0, 0x5, 0x0, 0x0, 0x0, 0x800}, {{0x18, 0x1, 0x1, 0x0, r0}}, {}, [@snprintf={{}, {}, {0x7, 0x0, 0xb, 0x8, 0x0, 0x0, 0x9}, {}, {}, {}, {}, {}, {}, {0x18, 0x3, 0x2, 0x0, r2}}, @cb_func={0x18, 0x1}, @snprintf={{}, {}, {0x7, 0x0, 0xb, 0x8, 0x0, 0x0, 0x7}, {}, {}, {}, {}, {}, {}, {0x18, 0x3, 0x2, 0x0, r3}}], {{}, {}, {0x85, 0x0, 0x0, 0x85}}}, &(0x7f0000000040)='syzkaller\x00', 0x5, 0x0, 0x0, 0x0, 0x68}, 0x94) 2m23.194558607s ago: executing program 0 (id=1004): r0 = bpf$MAP_CREATE_TAIL_CALL(0x0, &(0x7f0000000740)={0x3, 0x4, 0x4, 0xa, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0}, 0x48) bpf$PROG_LOAD(0x5, &(0x7f0000000880)={0x3, 0x8, &(0x7f0000000940)=@framed={{0x18, 0x9}, [@tail_call={{0x18, 0x2, 0x1, 0x0, r0}, {0x7, 0x0, 0xb, 0x3, 0x0, 0x0, 0xa000000}}]}, &(0x7f0000000980)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @sched_cls, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) (async) r1 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_route(r1, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000080)=@ipv4_newroute={0x1c, 0x18, 0x113, 0x0, 0x0, {0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0xff}}, 0x1c}}, 0x4000) 2m23.027645549s ago: executing program 0 (id=1005): r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000000), 0x40241, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000200)={'syzkaller1\x00', 0xc201}) sendmsg$IPSET_CMD_CREATE(0xffffffffffffffff, &(0x7f0000000440)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000200)=ANY=[@ANYBLOB="3000000002060101000000000000000000f90003050005000a0000000900020073797a3000000000050001009f"], 0x30}}, 0x0) r1 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_route(r1, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000200)=ANY=[@ANYBLOB="300000001c0001000000000004086aa42d"], 0x30}}, 0x0) write$tun(r0, &(0x7f0000000280)=ANY=[@ANYBLOB="0000080001"], 0x4e) r2 = socket$nl_netfilter(0x10, 0x3, 0xc) r3 = socket$can_j1939(0x1d, 0x2, 0x7) socket(0x27, 0x2, 0x80000000) r4 = socket$netlink(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r4, 0x8933, &(0x7f0000000080)={'bridge0\x00', 0x0}) sendmsg$nl_route(r4, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000200)=ANY=[@ANYBLOB="2c0000001d00070f000000000000000007000000", @ANYRES32=r5, @ANYBLOB="000052000600050001000000080008"], 0x2c}}, 0x4000000) sendmsg$NFT_MSG_GETSETELEM(r2, &(0x7f00000002c0)={&(0x7f00000001c0)={0x10, 0x0, 0x0, 0x100000}, 0xc, &(0x7f0000000280)={&(0x7f0000000200)=ANY=[@ANYBLOB="440000000d0a000500000000000000000a00000a0900010073797a3100000000097af6ff5a253edb0d0000000900020073797a31000000000900020073797a3000000000"], 0x44}, 0x1, 0x0, 0x0, 0x20000000}, 0x20000004) socket$can_j1939(0x1d, 0x2, 0x7) r6 = socket$nl_generic(0x10, 0x3, 0x10) r7 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000580), r6) ioctl$sock_SIOCGIFINDEX_80211(r3, 0x8933, &(0x7f00000005c0)={'wlan0\x00', 0x0}) r9 = syz_init_net_socket$x25(0x9, 0x5, 0x0) sendmsg$NL80211_CMD_SET_QOS_MAP(r6, &(0x7f0000002a40)={0x0, 0x0, &(0x7f0000002a00)={&(0x7f0000002900)={0x1c, r7, 0x1, 0x70bd2d, 0x25dfdbff, {{}, {@val={0x8, 0x3, r8}, @void}}}, 0x1c}, 0x1, 0x0, 0x0, 0x40000}, 0x4000) r10 = syz_genetlink_get_family_id$nl80211(&(0x7f00000002c0), 0xffffffffffffffff) r11 = socket$nl_generic(0x10, 0x3, 0x10) getsockopt$X25_QBITINCL(r9, 0x106, 0x1, &(0x7f0000000300), &(0x7f0000000340)=0x4) ioctl$sock_SIOCGIFINDEX_80211(r11, 0x8933, &(0x7f0000000100)={'wlan0\x00', 0x0}) sendmsg$NL80211_CMD_REGISTER_FRAME(r11, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000001500)=ANY=[@ANYBLOB="40120000", @ANYRES16=r10, @ANYBLOB="010029c07000fedbdf253a00000008000300", @ANYRES32=r12, @ANYBLOB="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"], 0x1240}}, 0x4810) sendmsg$NL80211_CMD_SET_INTERFACE(0xffffffffffffffff, &(0x7f0000000180)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x10000000}, 0xc, &(0x7f00000000c0)={&(0x7f0000000080)={0x24, r7, 0x400, 0x70bd25, 0x25dfdbff, {{}, {@val={0x8}, @void}}, [@NL80211_ATTR_IFTYPE={0x8}]}, 0x24}, 0x1, 0x0, 0x0, 0x24044054}, 0x20000000) sendmsg$IPSET_CMD_CREATE(r2, &(0x7f0000000040)={0x0, 0x0, &(0x7f00000044c0)={&(0x7f0000000100)={0x64, 0x2, 0x6, 0x5, 0x0, 0x0, {}, [@IPSET_ATTR_DATA={0x14, 0x7, 0x0, 0x1, [@IPSET_ATTR_CADT_FLAGS={0x8, 0x8, 0x0}, @IPSET_ATTR_TIMEOUT={0x8}]}, @IPSET_ATTR_PROTOCOL={0x5, 0x1, 0x6}, @IPSET_ATTR_FAMILY={0x5, 0x5, 0x2}, @IPSET_ATTR_REVISION={0x5}, @IPSET_ATTR_SETNAME={0x9, 0x2, 'syz1\x00'}, @IPSET_ATTR_TYPENAME={0x15, 0x3, 'hash:ip,port,net\x00'}]}, 0x64}}, 0x0) 2m23.007023005s ago: executing program 32 (id=796): sendmsg$NFNL_MSG_ACCT_GET(0xffffffffffffffff, &(0x7f0000000140)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x2000}, 0xc, &(0x7f0000000100)={&(0x7f0000000040)={0xb0, 0x1, 0x7, 0x801, 0x0, 0x0, {0x5, 0x0, 0x1}, [@NFACCT_PKTS={0xc, 0x2, 0x1, 0x0, 0x1ff}, @NFACCT_PKTS={0xc, 0x2, 0x1, 0x0, 0x60000}, @NFACCT_QUOTA={0xc, 0x6, 0x1, 0x0, 0x8}, @NFACCT_FLAGS={0x8, 0x5, 0x1, 0x0, 0x2}, @NFACCT_FILTER={0x4c, 0x7, 0x0, 0x1, [@NFACCT_FILTER_VALUE={0x8, 0x2, 0x1, 0x0, 0x52}, @NFACCT_FILTER_VALUE={0x8, 0x2, 0x1, 0x0, 0xffff}, @NFACCT_FILTER_MASK={0x8, 0x1, 0x1, 0x0, 0x401}, @NFACCT_FILTER_VALUE={0x8, 0x2, 0x1, 0x0, 0xfffffffd}, @NFACCT_FILTER_VALUE={0x8, 0x2, 0x1, 0x0, 0x6}, @NFACCT_FILTER_MASK={0x8, 0x1, 0x1, 0x0, 0x8000000}, @NFACCT_FILTER_MASK={0x8, 0x1, 0x1, 0x0, 0xfffffffd}, @NFACCT_FILTER_VALUE={0x8, 0x2, 0x1, 0x0, 0x5}, @NFACCT_FILTER_MASK={0x8, 0x1, 0x1, 0x0, 0xe}]}, @NFACCT_PKTS={0xc, 0x2, 0x1, 0x0, 0xf}, @NFACCT_PKTS={0xc, 0x2, 0x1, 0x0, 0xd3e}, @NFACCT_NAME={0x9, 0x1, 'syz1\x00'}]}, 0xb0}, 0x1, 0x0, 0x0, 0x810}, 0x40001) r0 = socket$kcm(0x29, 0x4, 0x0) r1 = bpf$ITER_CREATE(0x21, &(0x7f0000000180), 0x8) sendmsg$NFT_MSG_GETCHAIN(r1, &(0x7f0000000280)={&(0x7f00000001c0)={0x10, 0x0, 0x0, 0x20000000}, 0xc, &(0x7f0000000240)={&(0x7f0000000200)={0x28, 0x4, 0xa, 0x201, 0x0, 0x0, {0x5, 0x0, 0x8}, [@NFTA_CHAIN_TABLE={0x9, 0x1, 'syz0\x00'}, @NFTA_CHAIN_FLAGS={0x8, 0xa, 0x1, 0x0, 0x4}]}, 0x28}, 0x1, 0x0, 0x0, 0x1}, 0x40880) getsockopt$inet_sctp6_SCTP_PRIMARY_ADDR(0xffffffffffffffff, 0x84, 0x6, &(0x7f00000002c0)={0x0, @in6={{0xa, 0x4e23, 0x8, @private2, 0x7}}}, &(0x7f0000000380)=0x84) setsockopt$inet_sctp6_SCTP_DEFAULT_SEND_PARAM(r1, 0x84, 0xa, &(0x7f00000003c0)={0x3, 0xa0b, 0x8001, 0x1, 0x7, 0x6, 0x4, 0xffffffff, r2}, 0x20) r3 = socket(0x1a, 0x1, 0x3ff) getsockopt$inet6_IPV6_IPSEC_POLICY(r3, 0x29, 0x22, &(0x7f0000000400)={{{@in=@loopback, @in6=@dev, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}, {{@in6=@private2}, 0x0, @in6=@private1}}, &(0x7f0000000500)=0xe8) sendmsg$sock(r0, &(0x7f0000000a00)={0x0, 0x0, &(0x7f0000000980)=[{&(0x7f0000000540)="6e176549e983631954e60334ceb292b5edfb7a22d6abd6b5d6905c9cdcacebe7d6f1cd1dbb1d09de045b1e30943821916e7193c3323586946432325749527a069877cf341f38598da47e973d5b5e0b7214de8dd00963d7579e97707174897f2741e640b6ad33338114afd2f4de4b3ad4126cac5f20e4523b079dbfdbf73a690835485c90a8dee1157b24a2a993d6f5f36719f57b137648f01be80db1cb4578cb", 0xa0}, {&(0x7f0000000600)="be1d3421d4584d2cdd", 0x9}, {&(0x7f0000000640)="49745d2e23e9541ef635e4fb951f251b8435692d4c38cde2be31bc35c28a02ffc72b47043dd171643121940aec7f2a1d5cf6111c32d8201d7b25c644b1bc5ee00ad5e22e567c1c569525a3f1cd3b9b44f97e8b6eb61001a0dadeb7a3b0f0e115d42f941d56f07b01fbf30812d7bf5dd52c907e7a001ae2bbfcab7cf8544e286a18b46c95ca30ea5e42aa850ee7d47326a62366c42607a89d76cf9c3ac4fa79f5c97eb3213e0deb8a87c3f100925feca39d8c138aecf5e2cd453216082470ecd6e52045f38cc1e70b9ac6a6c458f6c23717a3afb439fb54d80c6d1b53171fe61a6391d6279fdc548bcf7acb657b12af807889206f7db19d2bb5d135fe", 0xfc}, {&(0x7f0000000740)="50a28d13ced623a5b59dcba1e8c1446f662fa6c1d6b200b9e7a82aebf1f3e2a4bc04d20adc6e4531901c982b98e2e1bb781f12b3586a7fe83ce78c17a99074399e482853ae17cfce492494b7ebe881f8d7bd41b7d7205624229ed88552db424d943a220fb2cd2eb141769e87d21424337b7471964efe710cc3cc03c4b9bd485ef7effc3081433c8c4d28cf46444cb608936dac258b3368128bbe7ee33d8aa0e4cdf32a71eab51a38330e62ca3d85de1e1963e1e3fd0ac27104de6ec725cf45f1a2909806366098cb97a3d58fb2e5d05cd4add7ed62", 0xd5}, {&(0x7f0000000840)="c50ff6e4d659901754a5893672e66f81e83d3f9f729c699aedb3db610a46d735e12f4e1208c1da1d22955616f179e089f5ca4d41a6730151fc9288cdca7b095626c94c9d95c60c7e43799b5321f79753f5ee46eac6e82d4cacf14c2f9a854d26460c413bd52cb8d7aedf38072e6ce1c8d957cf9ac975d5ec047c603211cc4bf0a3a171c09515ee7e424b1b6fdbc175751b5882d41b72005ed2caa3505bea9b106f7332d4495d1624fba6bc75d31f70d53ee5600db139e865baee0118625a63590772ef13f800aa9712694f", 0xcb}, {&(0x7f0000000940)="50bfa7b1626fb0", 0x7}], 0x6}, 0x40000) recvmsg$unix(r1, &(0x7f0000000c40)={0x0, 0x0, &(0x7f0000000c00)=[{&(0x7f0000000a40)=""/254, 0xfe}, {&(0x7f0000000b40)=""/133, 0x85}], 0x2}, 0x2122) ioctl$sock_ipv6_tunnel_SIOCDELTUNNEL(r1, 0x89f2, &(0x7f0000000d00)={'syztnl1\x00', &(0x7f0000000c80)={'ip6_vti0\x00', r4, 0x29, 0xa9, 0x2, 0x7, 0x4, @initdev={0xfe, 0x88, '\x00', 0x1, 0x0}, @remote, 0x40, 0x8, 0x0, 0x401}}) ioctl$SIOCPNGETOBJECT(r3, 0x89e0, &(0x7f0000000d40)=0x80) r6 = socket$nl_rdma(0x10, 0x3, 0x14) sendmsg$RDMA_NLDEV_CMD_DELLINK(r6, &(0x7f0000000e40)={&(0x7f0000000d80)={0x10, 0x0, 0x0, 0x200000}, 0xc, &(0x7f0000000e00)={&(0x7f0000000dc0)={0x30, 0x1404, 0x11, 0x70bd2b, 0x25dfdbfd, "", [@RDMA_NLDEV_ATTR_DEV_INDEX={0x8, 0x1, 0x2}, @RDMA_NLDEV_ATTR_DEV_INDEX={0x8, 0x1, 0x2}, @RDMA_NLDEV_ATTR_DEV_INDEX={0x8, 0x1, 0x1}, @RDMA_NLDEV_ATTR_DEV_INDEX={0x8}]}, 0x30}, 0x1, 0x0, 0x0, 0x48001}, 0x40) getsockopt$IP_VS_SO_GET_SERVICE(r6, 0x0, 0x483, &(0x7f0000000e80), &(0x7f0000000f00)=0x68) sendmsg$sock(r0, &(0x7f0000002580)={&(0x7f0000000f40)=@isdn={0x22, 0x9, 0xa0, 0xf7, 0x5c}, 0x80, &(0x7f0000002480)=[{&(0x7f0000000fc0)="09a1a921aea4a020a525c68c52d3906c909aa9e8e9f70378b1c21b5a8117ff428b2fc2464f6507618937412b6c451ee95a500d53b4df419bb2f351a4b8923b377234850d0a3a2b04562725e8d1466a86a3dde9201e9a37fb9d34ad9f037b366a81bcfc8b9fd2baa6acba0845d3e0689005fecfa64ef121656a00d7cbed334213ec47b8186059ab128b98cada0cd81f8e58c9ce493c2ee9b92e70", 0x9a}, {&(0x7f0000001080)="0a5cf44ac3aeaed470050cc762386e4474f66f02c66d7c158881c11ce1048c65c680731277030e16527b7b23cc4fef", 0x2f}, {&(0x7f00000010c0)="ebf83bcd70c3fce7714846cce05453264c519785c351b71b02671c6c6385e2f531c35d8925d9b3666e813a2ef17d6eda264dfd110a33c6ebbb9ce4036bab8264c5321b0af8fc2aacf0df4dd729fc034bb6526ee7288111f2bb33c4d4e161fc4567367d78bb448a538c25f62f28ac0b2a4a0378831c67bb3085f07b3671739c934873e8bd9e7ac2cec50c6496bbed9df2373c6155f66e7c13c70895ec871967e84cc9e52863883eeaec086a5f29947749160ebfac788752d87d133928b7215349a2eb22659094bae40d277d853aec0263a9d2efb0f69ac84a35298fd354fd30f12c3dfa027622a3e7dee5be231015fa5cd2a951fe6e249a698cce9a8d905b7761cb99a20a923e1f87ed7cb13a9249df987640a524db62e6d762ce658c10541b513d09b43d5b431058362e94240c2d3c0d0dc0076ae33ab9066e1b3e052afc1b944cadfbe153ba63f914681a812d46a8fc5d47876f2b1ef8fdd8633dcd0fdd47f61171716f435ae8679eb464766c7a7b9ba74a9fe1580242354fd6b566ecc8eaf26d6d0d92e6adbeff0d156c13c0d58e369ce91c096b431ae273ebd3f1e98e7d0a82d2e6493eed72f4c58a24f06d9f19a9737b8b2b78c88fa073234a96cb6fb260a3671b136157c9ee8b7165dde0495c8abcd670306fcac0be3b354d66568156880686bc0fcf90d1c4e869d72ed6d0349b72e83985a148dd4a9499ee03f6f17e8b61d078f84d5f4600d38ca5667ac39d8b4d1352ba6aebe9311385478c476a696ef03f0eef61094ba006d219c9bb1bb1109b01b76211cb481d20986703688124ab10d42e837f6cbc7b23501fcb6af07c8fa6c4b00af8a536df1ce0b70adeec3693f59815f833270669451e2f1d2162049348a9f735c1fa75eacfbb21c7fb4f6fad5f04d3c5bb0c68b0b78904a7e45ba3113f6b7f18c6ac99799bf218d8bf43395369b8f4140696f00ac2c1c2fcedecd9345cf0b90fca4fdf2d278a5e06516ae480e0f1f44670021c1cc669537242d69afc641bea387a1c874ede06a8d6517cdda5fda4940eab329885cb9fcc0853f4738ec568dbb27e4ba499cd7e555e473db9806458119d0ee033c952fef817976d3a9499217cf07f9f37c3140cb55c87cd0d3f767078e24f24d0f759900a827849ce1241dff004892a5481ca95a66ec7ec0cdd4d95032d84b4b32703debc781863def65562d39ca81ad54949bdddaf27e252472948ce4348172d245cce1b4954be84acd39bbdf05a1aff6837abab3f713db3429cfce65278d253ac1963e02df4385d7d6d666fb6ff7412d7cbf68e2fa300efefbf3b4dd2d32aa5ade2b673461e6740969bf0271f33ff93c86eff8ed2da35e2eba5ce60fc69b2b67ee28c00cb80cd068cca80d24d48b3386bf27cd03f3b2cc8076a71aed0e6391c94644b1a69abdfb3798f19ae0052c5140c709e91b596d1fff560abb119a0f1406a23f26ec3fd60e72cfcf08389669e81a7ed9c94c3864acdddfbb534dd48488dc23579ea96a6e457ca16e6a1e8ad0fe30b2da7f66104cfd1d598fdefbf955aee3ceaa1c47d3ffb887ec6861ba57661fe47c0f1e2b26996ef3fc7ce5a20fbee1aa9d5ee235873c46e9f5b7b03382f324940aaa45a62b4be2c75ece28a1ffaa6ba053b5174675a224d4f43545ff81ec1ef7445806749af19e46d519beaef22bcef3628ebc2f9201f8f95b370454578090ac28d9ac1523255fa352fb1e85b473968d8e79d1cb034dec82b949d0321f7df9d853a0353fc1aef7a66919d458e59b164f0f4f623b49ade3e0873ea89747d7fb2b8877d23d9ace5331d31832eb59642d0d6cd329b7ea170055be619bb7c687f1e68f481f8bf2ee2e1c81df137f48b82bb4711410fd79a204631f9e6edaffacf976cc9dd503b138489556faaf54c1a4594aeabf9af4a56775d963d74b06d0a3af3bcba40000bbbf87cecd6d7232985a92b5146b8097a1fa42b896144bed9c033b22eb68b4bab258104e410d45e535d0029a3d1b527d3ab82d06d54dce713494e27859be2bf3c5467009be44782e4acd1e8f35301f87fac8d0f39cf2537920af80539f3069ae9db7267b9de81b38e5da62d6691a8e31611b601ced1eda2437546a2a08392dd8deee82065287bf07bf34b8cb6e91a314835786de8cd015445036c8930e68326c6b48acdfd43c1bd5d9f232c956ffac34241ec7bcf0d59a361b4290a3ed55c0575b3845bab2a4616242e1ffe00f4f54c788d346fab48f03f80a8c4eeadc3e1804a046328b1a3a7b7d4e81664fbb7e346fb1bc6fe186f1daa47122f52054d3caf461c556dbd42ee8d505e4ba417ae2804fe6ca32479dd5a6089c8065019eedb7c90c4ed82273e952207224df5e7a8a021f28f7d4b1bcab1bc0b63400c564ac8162ba27c57696b439b7c6e378a12275f60fe38dce5c621ffecf846ab19a8e435b362169ccdd7072945338024a1db28175e0eae4a11c234e2bae2c0a7e6d80beb0a97d43d2cedb05b0c9ce9304bdef2f8f938b03b3764ba88730e3ce3bfd1365163e06119e6bf84b7f17701f2a2b11ba97c46e64420816d89073566a9e6ba2f304df5973c22ab80f6b5ea9b1d02f2dcf20d3a547cb0f0482d680d04cca5380347f26768079b01498d7f99310cb4e3a4e6961b28426c9c9b2d1c34539aceeb78dbbdf2e14fe42f9c9dd3408ae2062038e8bb51b621b153d7fd6af5d07db39898a6e832e14d6b426b144fec0c834e625afeb217b10b1e7b0d2c441dd6b9babfc4f8dc347718d3bbc5bffdd751f8efb750fa136da2ff1394dd1cb1a6b662f34552286b1bf7b5c9bc9d452972a272fd6061eeb0d30642252e1bc60305663353586674c2838fb32e2197933517e2ea4ab88d32bfb61aa5ab80ca976f55eb11b6e7c0b1354d9fb1d61cab3c6c20e025d612d32fd0106d7152b5e4bc49fb6f062c96b8b69258b84efdfe03201865dc9410776213475eac990af499233a2b303dbe8584b980fb2275e2d86b38a95c5890828e52359027e0d5f068039dd38206ba3c9a66caad4aa5f63fb05e588abb587f303de63b1dfedf5d1ef1893ffe876a9521dc7d3d5d6fd512ccdb9aed229914cf7ea78de51f756751f9b433aa94f7b0fa311143db48b77adabdc223c5002d343ab471a20af4f8fb753142d970070f06a4fd3df4ff402fc210bd55836b6d10f15a79a26e5626d7be1b2ea617fecff179f38bec3bdd7e75c0886a63c33ecd25535c1afbf887665101dbcef9d3539e9858ef419580a45e6133710e17c46514dd8d7623dd4620b06d298577f81b9834b2ccfacdbb488791e7ac3b485adf29efca1f11e154ad16c441a2ca1132e1bd03d90cc26c1b626dab1b9cd886ba4fa5c0235b7c1bb07e7ef231375ad99c60df47e63f1862b9dfb615f140c694741ff415d475a86c5843e211948fc678ad39658ef1643e395f6e3331b43b02089fe83e2999a56d87fdce8a77b2eb8503150902fb2665ba0781ef804d877d02534242b243c60364ded6f8d9f770f9e67758ef3ff953c803262c4c60fdd547dfa4cddfacb192f20cc43525b050f75073639452ee603d8da4f31249578908252a5e99bb66eadb75c755e6eaeef53081de04778f085ba4de0d1bdff3d5bcdd69d49693b9d02aef9048a6918f931101614606ec33750cca4081bb7605b13ca722f341153e450ad624c95a2ea9f85a982ad1696421e22f56fd726948c86f9a54f4d0eca8c516d5e6c3577afa4e2224c5c048595152bffbab351163dc61b3cb91e20e7685d8cdff270c152a35e8b0c68363937c783069ef85dba13f240ed63ac9e28dc47bcd51ca6a8575b59c72b592de4d45f6a2c2226a5ad763f20cb74e869a27ce5e6f4db35f54b7e8495ab77fa72d5c6d6a56e01534498140fe44a1a5249d673996d5b179fb52d3f8410c68695fdd3266d12e0dde341b2713e94272831f260a1d4ffe817588750c0b4c81f868cdf05a1ede92434f5d9ad6a6d899c133a5700a3ea1283c90358fdf927fbeeae7ceb7539b166f03c1e031938e859b91d0c2d3111e9b8a57a086fe25b9232acd2c89fbc3519958140d3783cab0b6960c286d1a2194352da2ef0882b2186e62cf2fc09c30c2cabffb64af2ed504ecfb9eac835737cf601db6669d882259efaafd1221f5165a07921d0d80cb22d9d172bc7a9872beabee5ba21f330e97bdf5ec3bd317dc94f3bfa639d12ad62df291180a1ed12fb7d40046478346c5d6f313718aa97fbef4006bbf4e959a9e6c19a12811cc71e8f4f0e28a4af5e9a9f2ee984226b239b463dfe6d03b3f6a60900d58af3f9a1e9adf3b05b96d3778d989af10b7cde9350bac0d3258017c9bed30148d3b0145ef4af3ad612144871561feb47cd072b8a49f568196906736e3fe9205bfcb1ee7bd1597f769f61cb553d23e58c3aa4be1c7134775b2ee78b8de14a318cc6c815635af2521ea54bffee8ac4a1f96a1840158eff9250cc536fd93e690cdf862388b0d2a70c7568390265440767c967c8fafaee59d3ebc9393c331dd09ddcff45c3ab943e8586f45d827e4a5957c087b6b1612c34427100f3ed17530810105be5cd6280bad809b85bd0fb8ee2ea8ecdf3a2ee3927810255205432e7bd73ad07524563b62cc6b85448c4dbca6b4964e89d9d750d47b706912f3397bc54a3112a718617b1c41275bb42205aaf0d546aaca65d2796bdfd6ddc8dcd791503d7cbbc80653835cd90a7d800c60d152d5796f44bba8734bb85e04413679d097a2fdf81d7697550bd9ed57470a6389b6f6d31128357ec4ef7b682676d550d07ae5279a352e6b08d23096733463002eeb1fef9ac4d44e478fce04b42ea41d98bf5222b858d42a71632d9a4d49556c8c73790f8ce249074360c5873759447058e8cffb18274c5183bf0339c8143419c156972d089c20e6357d9582b184520faaae554b1215a3d93133577a55b2fe46542849f063d5ed1c7258ce773f97ea6c3d8ef31aa48a8cbe861b61d82edcb9a3cb50d5c6e5ce88464c51bcd3fea3510c18de8085090b03724a0e8069cc0b3226481282401e4e7a303d0f0f01ce95864ddcd7e3665eb4e937023040e01c254b229d684450ed45718611785d45cacb15a6fe3d6c76a180112c90673c9ae84e372023c3853a3f1fcfb04bb8ebbfbe928775c419c44e8351c35418a42b812294ae4e295a2af6df671f6476b4e063ef74b1ffee5e00ad2b9b0ac4993a3d3025f8b5ba7f9774cff32b1078cac8e5c42bb580396a1f7839dbaaca071cda582e7e530e9743964092a664091465ca34b62840cd122e646f639989f356955b9f7fd771823bbbf5cdeced9717fcc82a59643f8bb0922de5f541529c61fb47e22024fbd0be3eadb40a8996333a3aa324591e6cc29fea80d52ea4bb4108428935aa2c19d6ca36b1ad5b8800742215358f3690790adda857ca1387ff7a24a33ceb90ab878ba43e3b0a80cf4699e3ccc97a41653322687a9e74a314c6129cace8dee4e3895619d24cb2d4ba007b5861010cd8a5addc88b3e56ef597e258804bcc8de04674e0973266995f6e19e9243cc0f87a0949fe6b409f66d6e5bee5bba3c050bf5de4fcd58252c4d870f2e6447d0f529941715c72865121946dec69c26684a3b63c0c351909f060f2896211288ff798437ea554a4df1229bedbc8d5cf11e69661a8eb8c41fcfe4e5409286ed83ae5645f53ae7b8e1bfa0e188644c1c28960f5c5a7ad95f73c05a7f581239ca3a45b0c6a577e404117267caf22b0e385bdfaa75d2133a0dc614118023741dc273dbf1eb75bb06be575e507f96e9da44d53498d098b4378", 0x1000}, {&(0x7f00000020c0)="a0bb775cec9796fc0a63d04371f8e1cc2e25245ad35869e72b526f42ecc534cb733b88e24f58e8fea4b2e286db6332b1cc38ddc603eea2708276a4b1e003d1c568ae13e65c88be5bdc8eaedbfa2e740a4900be220220266d00d8972e952108a9e3b7c32b306ccd1c1e958929faa2d3c0be3b7af00413d4e54cec8190a97d954ad65cd38cbc190e1f6f6375ce93abdd23b4af76db25654133221a651253a3ce3a3c1f9e43e73946c6c6f9511d9c8c305bfefb7fa5323272752294854c64350db26fdd0bb1553a8c5245b9f05c2dce615c", 0xd0}, {&(0x7f00000021c0)="2ceea3c07fb33be8ab8dd884ae670f5686b9f7ea882e5e866200b30ac5b17c9cc13432bd995e9e8ecc32a7a16bb2f3e606b5a1157ea2f14917f30a7f17c6e20d13bee8de791c2e5ea002afa595d7b7bb57940dfb8d4149be31e1d74509fa18f6caeb91e21da8d1cbb9511115e00d553952e8192431a713efaf8f885a9cd9efad8d0b00c4aaeb8716397f39697f8a19475706cfe9a0ae660cb9970fbf7d4cf77ed5c7dc55ac00011fdf43ccef8694793bf5486615e1bdf29a5e185c62033f6e3e2c0d08e69cffb6d75666c611778322c85f", 0xd1}, {&(0x7f00000022c0)="3aae2b63637e9342351022de84ff8bfa968524de4df21fdef4336eee65e9b042c40e6406e2", 0x25}, {&(0x7f0000002300)="2e47dcca7574bbbf2f0981c6267637bec14f0742e2557d9a59c232e13d4f6deaad6c43d72c56cbdd80ead74912a3fcb15819baa40a996f1721f9b24c0a5b4ea1af833937a8c83e020b43499fdf0e3010260d4806a9b76243ebe374ac9ee119d62245fa689fdc5207a3eb627c5f0d43185e0b315ad2f1295001d40481379fc7f61cda7bf3de9f", 0x86}, {&(0x7f00000023c0)="3b33566700c159fb57504c9a24a1fcce0dbbcb8731610598a4ae731aaf6fb714f31ea8f97ecbda33b9d5dacd2eafdbf95ee388fa43757ebcbf723f3fe4ebd7975762a47a61ea22cbb252549bb4cb63c22bae91d184dad05a784145cb7f26cf2613455af985873c26ecd34d0ef0cca7182c0e4dd8f0c6df9d2fad5ff279be958eb190f4b05f53345c8b1b68878f83da2f927e4f5ad1535a7270c5e3684897b1bd73274534e01da727cd0a86bf659c91a37a", 0xb1}], 0x8, &(0x7f0000002500)=[@mark={{0x14, 0x1, 0x24, 0xbb49}}, @txtime={{0x18, 0x1, 0x3d, 0x1}}, @mark={{0x14, 0x1, 0x24, 0x7}}], 0x48}, 0x0) getsockopt$IP_SET_OP_VERSION(r1, 0x1, 0x53, &(0x7f00000025c0), &(0x7f0000002600)=0x8) ioctl$IMHOLD_L1(r1, 0x80044948, &(0x7f0000002640)=0x101) getsockopt$inet_sctp_SCTP_RECVRCVINFO(r1, 0x84, 0x20, &(0x7f0000002680), &(0x7f00000026c0)=0x4) ioctl$sock_FIOGETOWN(r0, 0x8903, &(0x7f0000002700)) getsockopt$netrom_NETROM_IDLE(r1, 0x103, 0x7, &(0x7f0000002740)=0x5, &(0x7f0000002780)=0x4) sendmsg$NFT_MSG_GETSETELEM(r3, &(0x7f0000002880)={&(0x7f00000027c0)={0x10, 0x0, 0x0, 0x200}, 0xc, &(0x7f0000002840)={&(0x7f0000002800)={0x20, 0xd, 0xa, 0x101, 0x0, 0x0, {0x2bddf7cd95d1c514, 0x0, 0x7}, [@NFTA_SET_ELEM_LIST_TABLE={0x9, 0x1, 'syz1\x00'}]}, 0x20}}, 0x20040000) r7 = socket$inet6_sctp(0xa, 0x5, 0x84) setsockopt$inet_sctp6_SCTP_EVENTS(r7, 0x84, 0xb, &(0x7f00000028c0)={0x9, 0x40, 0xcc, 0x7, 0xd, 0xc, 0x0, 0x0, 0x2, 0x0, 0x1, 0x4, 0xc, 0x27}, 0xe) r8 = syz_genetlink_get_family_id$ethtool(&(0x7f0000002940), r3) sendmsg$ETHTOOL_MSG_COALESCE_GET(r3, &(0x7f0000002a00)={&(0x7f0000002900)={0x10, 0x0, 0x0, 0x4000000}, 0xc, &(0x7f00000029c0)={&(0x7f0000002980)={0x28, r8, 0x20, 0x70bd2d, 0x25dfdbfc, {}, [@HEADER={0x14, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x1}, @ETHTOOL_A_HEADER_FLAGS={0x8}]}]}, 0x28}, 0x1, 0x0, 0x0, 0x100}, 0x0) setsockopt$TIPC_GROUP_JOIN(r1, 0x10f, 0x87, &(0x7f0000002a40)={0x41, 0x1}, 0x10) sendmsg$IPCTNL_MSG_CT_DELETE(r1, &(0x7f0000002b80)={&(0x7f0000002a80)={0x10, 0x0, 0x0, 0x10}, 0xc, &(0x7f0000002b40)={&(0x7f0000002ac0)={0x80, 0x2, 0x1, 0xa05, 0x0, 0x0, {0x7, 0x0, 0x6}, [@CTA_TUPLE_REPLY={0x1c, 0x2, 0x0, 0x1, [@CTA_TUPLE_PROTO={0xc, 0x2, 0x0, 0x1, {0x5, 0x1, 0x88}}, @CTA_TUPLE_PROTO={0xc, 0x2, 0x0, 0x1, {0x5, 0x1, 0x2f}}]}, @CTA_SEQ_ADJ_ORIG={0x44, 0xf, 0x0, 0x1, [@CTA_SEQADJ_CORRECTION_POS={0x8, 0x1, 0x1, 0x0, 0xfffffffb}, @CTA_SEQADJ_OFFSET_BEFORE={0x8, 0x2, 0x1, 0x0, 0x4}, @CTA_SEQADJ_CORRECTION_POS={0x8, 0x1, 0x1, 0x0, 0x9115}, @CTA_SEQADJ_CORRECTION_POS={0x8, 0x1, 0x1, 0x0, 0x9}, @CTA_SEQADJ_OFFSET_AFTER={0x8, 0x3, 0x1, 0x0, 0x41}, @CTA_SEQADJ_OFFSET_AFTER={0x8, 0x3, 0x1, 0x0, 0x10001}, @CTA_SEQADJ_CORRECTION_POS={0x8, 0x1, 0x1, 0x0, 0xe32}, @CTA_SEQADJ_CORRECTION_POS={0x8, 0x1, 0x1, 0x0, 0xfe}]}, @CTA_SEQ_ADJ_REPLY={0xc, 0x10, 0x0, 0x1, [@CTA_SEQADJ_CORRECTION_POS={0x8}]}]}, 0x80}, 0x1, 0x0, 0x0, 0x4}, 0x4000061) r9 = socket$kcm(0x29, 0x0, 0x0) sendmsg$kcm(r9, &(0x7f0000003000)={&(0x7f0000002bc0)=@can={0x1d, r5}, 0x80, &(0x7f0000002e80)=[{&(0x7f0000002c40)="e13e07c92e747f17c3010231223bd274c4bce455f098e356873a619cae9504917d44cdd54c9f78ca8632f61012c80611adc4ddd75b944fbd15cbace482a4ae4b2dda58da95ab3566515a1f572476d6b3fd88f9358741b15fb0055901407dd3ab84f189ae571a1ec15ddefd4a2191cd7c9441b1127d081cb144ef67e3fff16bedd75f10ef02f5b84ada", 0x89}, {&(0x7f0000002d00)="e94291b8c56effbe97e7914a0a02287c518a5cafae05ab7f0490b1aed03dc658c90b7c2b4869a67f0074b843828c71884748eb4cb202b8269f0cd0182203a335d955518f67aa34ada4c4ca9992ab14a5d65afa593363dc268e07a6708fcd729f79836844eeecabcc6e0903feb782eecf05103b3c74dbc55c7d7733828e1d5734050ede06d38dcd8d148ea796df1b8be936a0035e9306bb2ddd6f68d7f5439b1e38752d4c7ed5482d1eef241293118d12157efae2a7f785a8494365f4e71dd51b", 0xc0}, {&(0x7f0000002dc0)="e2cc37a32fc809f3fb749dde87d2e8e6f9387b3b8533a3126cc19d748604c16e898ecc5ad395dadb1c11a04356c4a437b3e47850cd8044f61b3eeffaa6ca0deca8c4905ff44a3245a0a5b57f4a8ed26471bf6bf091ad47f933d35764641d53ff8cb6b3dd10e2c04a0a61d1ecd84d26c25a785064ac8098bc3b4e98558afc57cfea5699dd01e1f0888bb5571c21f1bcce0fee60e30b716b04a22435f147acfaf607408a0e64babe2d9d26b593c196a911710a0d51a60e6241", 0xb8}], 0x3, &(0x7f0000002ec0)=[{0xe8, 0xfe, 0x7, "ed687f0b581d916b474cdf060607bcf44d05961bbcfb97123c3334fa7eea5b87b05c2f08984fb0d4b4dc1041c13c2badf7ba82745d9c8320a98e0a6ce8aac0575ac0a7da6d9a21d400d1a34721b6fc77ce00c3a45daab51cd12c1e17fa99a6223a221b0852eccd5ca2a7730ea4614e07b1551fcab5e578c250ab61d0010be7ebd37d4a785819831c6af59f7f9996fac40da3c0658662fab8a077d25ea7a9392c59a5e2f1fe847e4062342a0182a8e95e1c0e6a1aa2569c2963e1b49d49002bb67b557c6744a74a6788dff7993b63f9a21805"}, {0x20, 0x10d, 0x7, "a44cb142d108aaa40ceb0912f46c"}], 0x108}, 0x4c800) 2m22.591665228s ago: executing program 0 (id=1009): socket$inet6_tcp(0xa, 0x1, 0x0) r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000280), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f00000003c0)={'wlan0\x00', 0x0}) sendmsg$NL80211_CMD_SET_MCAST_RATE(r0, &(0x7f00000007c0)={0x0, 0x0, &(0x7f0000000540)={&(0x7f00000000c0)={0x24, r1, 0x1, 0x70bd2a, 0x25dfdbfb, {{}, {@val={0x8, 0x3, r2}, @void}}, [@NL80211_ATTR_MCAST_RATE={0x8, 0x6b, 0x1b2}]}, 0x24}, 0x1, 0x0, 0x0, 0x44890}, 0x2004c800) r3 = socket$inet(0xa, 0x801, 0x84) connect$inet(r3, &(0x7f0000004cc0)={0x2, 0x0, @multicast2}, 0x10) listen(r3, 0x8) r4 = accept4(r3, 0x0, 0x0, 0x0) write(r4, &(0x7f0000000000)="ea", 0x1) setsockopt$inet_sctp6_SCTP_DEFAULT_SNDINFO(r4, 0x84, 0x22, &(0x7f0000000100)={0x3}, 0x10) sendto$inet6(r4, &(0x7f0000000200)='y', 0x1, 0x0, 0x0, 0x0) setsockopt$inet_sctp6_SCTP_STREAM_SCHEDULER(r4, 0x84, 0x7b, &(0x7f0000000040)={0x0, 0x2}, 0x8) close(r4) r5 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000080), 0xffffffffffffffff) sendmsg$NL80211_CMD_GET_MPATH(r4, &(0x7f00000001c0)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x10}, 0xc, &(0x7f0000000140)={&(0x7f00000000c0)=ANY=[@ANYBLOB='(\x00\b\x00', @ANYRES16=r5, @ANYBLOB="08002abd7000fddbdf25150000000a001a0008021100000100000a0006000802110000010000"], 0x2c}, 0x1, 0x0, 0x0, 0x20004000}, 0x20008880) r6 = socket$nl_generic(0x10, 0x3, 0x10) r7 = socket$inet_udp(0x2, 0x2, 0x0) bind$inet(r7, &(0x7f0000000040)={0x2, 0x4e20, @empty}, 0x10) syz_emit_ethernet(0x3a, &(0x7f0000002a40)={@local, @dev={'\xaa\xaa\xaa\xaa\xaa', 0x15}, @void, {@ipv4={0x800, @udp={{0x5, 0x4, 0x0, 0x0, 0x2c, 0x0, 0x0, 0x0, 0x11, 0x0, @empty, @multicast1}, {0x0, 0x4e20, 0x18, 0x0, @wg=@data={0x4, 0x4, 0x81}}}}}}, 0x0) setsockopt$sock_int(r7, 0x1, 0x2a, &(0x7f0000000100)=0x5, 0x4) recvmsg(r7, &(0x7f0000001a00)={0x0, 0x0, 0x0}, 0x20) sendmsg$nl_generic(r6, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000180)=ANY=[@ANYBLOB="5c0300002e00090027bd70000000000005000000480311802ef98b714dffa173852588e2235c84b85c1a63f3a0d3a193b7e3708707eb5b60"], 0x35c}, 0x1, 0x0, 0x0, 0x42804}, 0x4000010) 2m21.643753997s ago: executing program 0 (id=1017): r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) bind$bt_hci(0xffffffffffffffff, &(0x7f0000000000)={0x1f, 0xffffffffffffffff, 0x3}, 0x6) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000007940)={0x0, 0x0, &(0x7f00000000c0)={0x0, 0x33f}, 0x1, 0x0, 0x0, 0xc0d0}, 0x0) r1 = socket$inet_udp(0x2, 0x2, 0x0) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000005000)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000003c0)=@newtaction={0x64, 0x30, 0xeaa3ef926154ef0f, 0x0, 0x0, {}, [{0x50, 0x1, [@m_vlan={0xa9bde1e9ea9dee26, 0x1, 0x0, 0x0, {{0x9}, {0x20, 0x2, 0x0, 0x1, [@TCA_VLAN_PARMS={0x1c, 0x2, {{0x8001, 0x6, 0x8, 0x7, 0x10001}, 0x1}}]}, {0x4}, {0xc}, {0xc}}}]}]}, 0x64}}, 0x0) r2 = socket$pppl2tp(0x18, 0x1, 0x1) connect$pppl2tp(r2, &(0x7f0000000280)=@pppol2tpin6={0x18, 0x1, {0x0, r1, 0x0, 0x3, 0x0, 0x2, {0xa, 0x4e24, 0xb22, @mcast2, 0x8}}}, 0x32) r3 = socket$inet_tcp(0x2, 0x1, 0x0) setsockopt$inet_tcp_TCP_MD5SIG(r3, 0x6, 0xe, &(0x7f0000000100)={@in={{0x2, 0x0, @rand_addr=0x64010103}}, 0x0, 0x0, 0x39, 0x0, "c3218d82c5890101d7cdb23c72887c897926a8856263b50c57bfccf9f362f16f21f5c8facc1d1518103bbde1a9fe13f6545bbdff9c1351ba69e297337d6a5e4a94bd192900"}, 0xd8) setsockopt$inet_tcp_TCP_MD5SIG(r3, 0x6, 0xe, &(0x7f00000002c0)={@in={{0x2, 0x0, @empty}}, 0x0, 0x0, 0x1c, 0x0, "246575a4000000004fb62fe6bce0eef5607264c7f28557a8046964d292934c2a2bb1dcc5a80c0107040000000000001e0000009000000000000800"}, 0xf0) setsockopt$inet_tcp_int(r3, 0x6, 0x20, &(0x7f0000000040)=0x2, 0xf6) sendmmsg$inet(r2, &(0x7f0000005f80)=[{{0x0, 0x0, &(0x7f0000005dc0)}}], 0x1, 0x8040) bind$inet(0xffffffffffffffff, &(0x7f0000000240)={0x2, 0x4e24, @local}, 0x10) write$bt_hci(0xffffffffffffffff, &(0x7f0000000580)=ANY=[@ANYBLOB="3000000002"], 0x8) syz_init_net_socket$llc(0x1a, 0x0, 0x0) r4 = socket$igmp6(0xa, 0x3, 0x2) getsockopt$inet6_int(r4, 0x29, 0x7, 0x0, &(0x7f0000000040)) r5 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) socket$inet_icmp_raw(0x2, 0x3, 0x1) syz_init_net_socket$bt_hci(0x1f, 0x3, 0x5) close(0x4) syz_open_procfs$namespace(0x0, &(0x7f0000000080)='ns/ipc\x00') unshare(0x6a040000) r6 = socket(0x8, 0x3, 0x0) ioctl$IMGETCOUNT(r6, 0x40106183, &(0x7f0000000000)) syz_emit_ethernet(0x1d7, &(0x7f00000005c0)=ANY=[@ANYBLOB="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"], 0x0) r7 = syz_genetlink_get_family_id$netlbl_unlabel(&(0x7f00000001c0), r5) socket$igmp(0x2, 0x3, 0x2) sendmsg$NLBL_UNLABEL_C_STATICREMOVEDEF(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000200)=ANY=[@ANYBLOB, @ANYRES16=r7, @ANYBLOB="000200000000000000000474090608000200ac1e00010800040000000000080004007f00000114000300ff020000000000000000000000000001"], 0x40}, 0x1, 0xffffffff00000003}, 0x0) ioctl$sock_inet_SIOCADDRT(0xffffffffffffffff, 0x890b, &(0x7f0000000500)={0x0, {0x2, 0x4e24, @empty}, {0x2, 0x4e23, @broadcast}, {0x2, 0x4e23, @empty}, 0x118, 0x0, 0x0, 0x0, 0x1, &(0x7f0000000440)='wlan1\x00', 0x2, 0x6}) 2m6.573541914s ago: executing program 33 (id=1017): r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) bind$bt_hci(0xffffffffffffffff, &(0x7f0000000000)={0x1f, 0xffffffffffffffff, 0x3}, 0x6) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000007940)={0x0, 0x0, &(0x7f00000000c0)={0x0, 0x33f}, 0x1, 0x0, 0x0, 0xc0d0}, 0x0) r1 = socket$inet_udp(0x2, 0x2, 0x0) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000005000)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000003c0)=@newtaction={0x64, 0x30, 0xeaa3ef926154ef0f, 0x0, 0x0, {}, [{0x50, 0x1, [@m_vlan={0xa9bde1e9ea9dee26, 0x1, 0x0, 0x0, {{0x9}, {0x20, 0x2, 0x0, 0x1, [@TCA_VLAN_PARMS={0x1c, 0x2, {{0x8001, 0x6, 0x8, 0x7, 0x10001}, 0x1}}]}, {0x4}, {0xc}, {0xc}}}]}]}, 0x64}}, 0x0) r2 = socket$pppl2tp(0x18, 0x1, 0x1) connect$pppl2tp(r2, &(0x7f0000000280)=@pppol2tpin6={0x18, 0x1, {0x0, r1, 0x0, 0x3, 0x0, 0x2, {0xa, 0x4e24, 0xb22, @mcast2, 0x8}}}, 0x32) r3 = socket$inet_tcp(0x2, 0x1, 0x0) setsockopt$inet_tcp_TCP_MD5SIG(r3, 0x6, 0xe, &(0x7f0000000100)={@in={{0x2, 0x0, @rand_addr=0x64010103}}, 0x0, 0x0, 0x39, 0x0, "c3218d82c5890101d7cdb23c72887c897926a8856263b50c57bfccf9f362f16f21f5c8facc1d1518103bbde1a9fe13f6545bbdff9c1351ba69e297337d6a5e4a94bd192900"}, 0xd8) setsockopt$inet_tcp_TCP_MD5SIG(r3, 0x6, 0xe, &(0x7f00000002c0)={@in={{0x2, 0x0, @empty}}, 0x0, 0x0, 0x1c, 0x0, "246575a4000000004fb62fe6bce0eef5607264c7f28557a8046964d292934c2a2bb1dcc5a80c0107040000000000001e0000009000000000000800"}, 0xf0) setsockopt$inet_tcp_int(r3, 0x6, 0x20, &(0x7f0000000040)=0x2, 0xf6) sendmmsg$inet(r2, &(0x7f0000005f80)=[{{0x0, 0x0, &(0x7f0000005dc0)}}], 0x1, 0x8040) bind$inet(0xffffffffffffffff, &(0x7f0000000240)={0x2, 0x4e24, @local}, 0x10) write$bt_hci(0xffffffffffffffff, &(0x7f0000000580)=ANY=[@ANYBLOB="3000000002"], 0x8) syz_init_net_socket$llc(0x1a, 0x0, 0x0) r4 = socket$igmp6(0xa, 0x3, 0x2) getsockopt$inet6_int(r4, 0x29, 0x7, 0x0, &(0x7f0000000040)) r5 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) socket$inet_icmp_raw(0x2, 0x3, 0x1) syz_init_net_socket$bt_hci(0x1f, 0x3, 0x5) close(0x4) syz_open_procfs$namespace(0x0, &(0x7f0000000080)='ns/ipc\x00') unshare(0x6a040000) r6 = socket(0x8, 0x3, 0x0) ioctl$IMGETCOUNT(r6, 0x40106183, &(0x7f0000000000)) syz_emit_ethernet(0x1d7, &(0x7f00000005c0)=ANY=[@ANYBLOB="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"], 0x0) r7 = syz_genetlink_get_family_id$netlbl_unlabel(&(0x7f00000001c0), r5) socket$igmp(0x2, 0x3, 0x2) sendmsg$NLBL_UNLABEL_C_STATICREMOVEDEF(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000200)=ANY=[@ANYBLOB, @ANYRES16=r7, @ANYBLOB="000200000000000000000474090608000200ac1e00010800040000000000080004007f00000114000300ff020000000000000000000000000001"], 0x40}, 0x1, 0xffffffff00000003}, 0x0) ioctl$sock_inet_SIOCADDRT(0xffffffffffffffff, 0x890b, &(0x7f0000000500)={0x0, {0x2, 0x4e24, @empty}, {0x2, 0x4e23, @broadcast}, {0x2, 0x4e23, @empty}, 0x118, 0x0, 0x0, 0x0, 0x1, &(0x7f0000000440)='wlan1\x00', 0x2, 0x6}) 48.4039437s ago: executing program 3 (id=2415): r0 = socket$rxrpc(0x21, 0x2, 0xa) bind$rxrpc(r0, &(0x7f0000000180)=@in4={0x21, 0x1, 0x2, 0x10, {0x2, 0x0, @broadcast}}, 0x24) listen(r0, 0x0) sendmmsg(r0, &(0x7f00000057c0)=[{{0x0, 0x0, 0x0}}], 0x1, 0x0) r1 = socket$nl_route(0x10, 0x3, 0x0) r2 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a) ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f0000000000)={'bridge0\x00', 0x0}) sendmsg$nl_route(r1, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000580)={&(0x7f0000000200)=@newlink={0x3c, 0x10, 0x403, 0x0, 0x0, {0x0, 0x0, 0x0, 0x0, 0x13314}, [@IFLA_LINKINFO={0x14, 0x12, 0x0, 0x1, @bridge={{0xb}, {0x4}}}, @IFLA_MASTER={0x8, 0xa, r3}]}, 0x3c}, 0x1, 0xba01}, 0x0) r4 = socket(0xa, 0x1, 0x0) ioctl$SIOCSIFMTU(r4, 0x8922, &(0x7f0000000000)={'veth1_vlan\x00', 0xe}) 48.136625968s ago: executing program 3 (id=2421): r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000140)={'pim6reg1\x00', 0x1}) ioctl$F2FS_IOC_ABORT_ATOMIC_WRITE(0xffffffffffffffff, 0xf505, 0x0) 47.776451374s ago: executing program 3 (id=2425): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r0, &(0x7f000000c2c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000340)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a28000000000a0101000000005e1affd5020000000900010073797a300000000008000240000000032c000000030a01030000e6ff00000000020000000900010073797a30000000000900030073797a320000000014000000110001"], 0x7c}}, 0x0) (async) sendmsg$NFT_BATCH(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000740)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a70000000060a010400000000000000000200994f525564a9ce37fb27e927e270b4000044000480400001800e000100627974656f726465720000002c000280080001400000000508000240000000000800044000000000080003400000000008000540000000020900010073797a30000000000900020073797a3200000000140000001100010000000000000000000000000a"], 0x98}}, 0x0) (async) sendmsg$IPSET_CMD_LIST(r0, &(0x7f0000000540)={&(0x7f0000000440)={0x10, 0x0, 0x0, 0x8000}, 0xc, &(0x7f0000000500)={&(0x7f00000003c0)=ANY=[@ANYBLOB="6000000007060104040000000000000007000008080006400000000508000640000000070900020073797a300000000008000640000000030900020073797a320000000008000640000000070900020073797a310000000005000100070000001f26fcf344"], 0x60}, 0x1, 0x0, 0x0, 0x8000}, 0x4000000) (async) socket$inet6_udp(0xa, 0x2, 0x0) (async) r1 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r2 = syz_genetlink_get_family_id$netlbl_unlabel(&(0x7f0000000040), r1) sendmsg$NLBL_UNLABEL_C_STATICREMOVEDEF(r1, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000480)={0x50, r2, 0x1, 0x0, 0x0, {}, [@NLBL_UNLABEL_A_IPV4ADDR={0x8, 0x4, @empty}, @NLBL_UNLABEL_A_SECCTX={0x29, 0x7, 'system_u:object_r:usbmon_device_t:s0\x00'}, @NLBL_UNLABEL_A_IPV4MASK={0x8, 0x5, @private=0xa010101}]}, 0x50}}, 0x0) (async) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000140)={0x10, 0x4, &(0x7f0000000000)=@framed={{0x18, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffd}, [@ldst={0x1, 0x2, 0x3, 0x0, 0x6, 0x32}]}, &(0x7f0000000040)='GPL\x00', 0x4000000, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x24}, 0x94) (async) r3 = bpf$PROG_LOAD(0x5, &(0x7f0000000180)={0x13, 0x4, &(0x7f0000000640)=ANY=[@ANYBLOB="181d000000000005000000000000e3ff7012510000000000952c43dd43626bcf01ce6543ee69d6fec1b643f978da708a7d6a0f3f0c4a71229012f7d5d868e5d95ed9bac36925d017ae15d4cac789cb0a11b841a9618aa80e9d07e4b5f0ebd514cce8564567b4a27a03bc8b7f4869d6e33b534d0594117a9618787eba196bdcdb47f2fc81cc7d992fc9937e72f1687f32455d75a5b8e846bf378202e478f26a8cb645b909e8c65aef182a2486bde3000000001c1ba1729efec92fd97b104bec8193e7110b2f3a07ca83dee85ce66b125fecdd67654844446e9b95ab9df7e4373a9ebeed8f69ae939c649c29f95123d7bfe78066fb697808b3bab806efddd5"], &(0x7f00000005c0)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) (async) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x3000001, 0x8031, 0xffffffffffffffff, 0x0) (async) r4 = socket$inet6(0xa, 0x2, 0x0) setsockopt$inet6_IPV6_FLOWLABEL_MGR(r4, 0x29, 0x20, &(0x7f0000000280)={@mcast2, 0x800, 0x0, 0x2, 0x1}, 0x20) (async) mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000)='./cgroup.net/syz0\x00', 0x1ff) bpf$BPF_PROG_WITH_BTFID_LOAD(0x5, &(0x7f0000000300)=@bpf_lsm={0xd, 0x5, &(0x7f0000000040)=ANY=[@ANYBLOB="5600f7ffff0000001000000000"], &(0x7f0000000000)='GPL\x00'}, 0x80) (async) r5 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000600)='./cgroup/syz0\x00', 0x200002, 0x0) openat$cgroup_int(r5, &(0x7f0000000200)='blkio.throttle.read_iops_device\x00', 0x2, 0x0) (async) r6 = socket$alg(0x26, 0x5, 0x0) bind$alg(r6, &(0x7f0000000240)={0x26, 'hash\x00', 0x0, 0x0, 'michael_mic-generic\x00'}, 0x58) (async) setsockopt$ALG_SET_KEY(r6, 0x117, 0x1, &(0x7f0000000040)="4dc07f947163300c", 0x8) (async) r7 = accept4(r6, 0x0, 0x0, 0x0) sendmmsg$inet(r7, &(0x7f0000000e40)=[{{0x0, 0x0, &(0x7f0000000580)=[{&(0x7f0000000100)='K', 0x1}], 0x1}}], 0x1, 0x8000) (async) r8 = accept$unix(r7, 0x0, 0x0) recvmmsg$unix(r8, &(0x7f0000002380)=[{{0x0, 0x0, 0x0}}], 0x1, 0x62, 0x0) (async) r9 = socket$packet(0x11, 0x3, 0x300) setsockopt$packet_int(r9, 0x107, 0xf, &(0x7f0000000040)=0x46c, 0x4) (async) r10 = socket(0x2, 0x2, 0x1) ioctl$sock_SIOCGIFINDEX(r10, 0x8933, &(0x7f0000000080)={'bridge0\x00', 0x0}) sendto$packet(r7, &(0x7f0000000140)="280320000a00140000007ef506be00000000000000000000000000143baa111f1f858ce632f47042195e", 0x2a, 0x2400c004, &(0x7f0000000080)={0x11, 0x1, r11, 0x1, 0xe5, 0x6, @link_local={0x1, 0x80, 0xc2, 0x0, 0x0, 0x3}}, 0x14) splice(0xffffffffffffffff, &(0x7f0000000340)=0x8000, r3, &(0x7f0000000380)=0x1, 0x6, 0x1) 47.584016167s ago: executing program 3 (id=2429): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) (async) r1 = socket$inet6_sctp(0xa, 0x1, 0x84) bind$inet6(r1, &(0x7f0000000000)={0xa, 0x4e23, 0x4, @loopback}, 0x1c) sendto$inet6(r1, &(0x7f0000000180)="1a", 0x1, 0x40, &(0x7f0000000200)={0xa, 0x4e23, 0x0, @loopback, 0x4}, 0x1c) (async, rerun: 32) sendto$inet6(r1, &(0x7f0000000340)="84", 0x1, 0xc010, 0x0, 0x0) (rerun: 32) sendmsg$NFT_BATCH(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000002180)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a20000000000a01030000000000000000010000000900010073797a300000000048000000030a010200000000000000000100000009000300735a7a320000000014000480080002400000000408000140000000000900010073797a300000000008000a400000000228000000060a010400000000000000000100000008000b40000000000900010073797a30"], 0xb8}}, 0x0) (async, rerun: 32) r2 = socket$nl_generic(0x10, 0x3, 0x10) (async, rerun: 32) bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000200)={&(0x7f0000000000)={{0xeb9f, 0x1, 0x0, 0x18, 0x0, 0x18, 0x18, 0x3, [@struct={0x1, 0x1, 0x0, 0x11, 0x0, 0x0, [{}]}]}, {0x0, [0x5f]}}, 0x0, 0x33}, 0x20) (async) r3 = syz_genetlink_get_family_id$tipc2(&(0x7f0000000100), 0xffffffffffffffff) sendmsg$TIPC_NL_BEARER_ENABLE(r2, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000080)=ANY=[@ANYBLOB='(\x00\x00\x00', @ANYRES16=r3, @ANYBLOB="0100000000000000000003000000140001800d00010075cba93a73"], 0x28}}, 0x0) 47.508285431s ago: executing program 3 (id=2431): r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000a00), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f0000000480)={'wlan0\x00', 0x0}) sendmsg$NL80211_CMD_SET_WIPHY(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000440)={&(0x7f0000000040)=ANY=[@ANYBLOB='$\x00\x00\x00', @ANYRES16=r1, @ANYBLOB="000224bd7000fbdbdf250200000005003d000600008008000b01"], 0x24}, 0x1, 0x0, 0x0, 0x4008091}, 0x20040000) r3 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r3, &(0x7f0000000480)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f0000000640)=@newlink={0x40, 0x10, 0x437, 0x0, 0x0, {0x0, 0x0, 0x0, 0x0, 0x4440b}, [@IFLA_LINKINFO={0x20, 0x12, 0x0, 0x1, @sit={{0x8}, {0x14, 0x2, 0x0, 0x1, [@IFLA_IPTUN_REMOTE={0x8, 0x3, @broadcast}, @IFLA_IPTUN_6RD_RELAY_PREFIX={0x8}]}}}]}, 0x40}, 0x1, 0x0, 0x0, 0x40004}, 0x0) sendmsg$NL80211_CMD_SET_COALESCE(r0, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000b00)={&(0x7f00000000c0)=ANY=[@ANYRES64, @ANYRES16=r1, @ANYBLOB="010000000000000000000200000008000300", @ANYRES32=r2, @ANYRESDEC], 0x28}}, 0x0) 47.160683023s ago: executing program 3 (id=2435): r0 = socket$igmp6(0xa, 0x3, 0x2) setsockopt$IP6T_SO_SET_REPLACE(r0, 0x29, 0x40, &(0x7f0000000180)=@filter={'filter\x00', 0xe, 0x4, 0x410, 0xffffffff, 0x240, 0x158, 0x240, 0xffffffff, 0xffffffff, 0x340, 0x340, 0x340, 0xffffffff, 0x4, &(0x7f0000000040), {[{{@ipv6={@private1={0xfc, 0x1, '\x00', 0x1}, @remote, [0xffffffff, 0xffffff00, 0xff], [0xffffffff, 0xffff00, 0xffffff00, 0xffffff00], 'veth1_to_hsr\x00', 'veth0_to_batadv\x00', {}, {}, 0x2f, 0x4, 0x0, 0x68}, 0x0, 0xf8, 0x158, 0x0, {}, [@common=@icmp6={{0x28}, {0xd, "1f7b"}}, @common=@icmp6={{0x28}, {0x8, "e0af"}}]}, @common=@inet=@HMARK={0x60, 'HMARK\x00', 0x0, {@ipv6=@empty, [0xff000000, 0x0, 0xffff00], 0x4e21, 0x4e22, 0x4e23, 0x4e21, 0x1, 0x6680, 0x3, 0x2, 0x81}}}, {{@ipv6={@private1={0xfc, 0x1, '\x00', 0x1}, @dev={0xfe, 0x80, '\x00', 0x14}, [0xff000000, 0x0, 0xff], [0xff000000, 0xffffff00, 0xffffff00, 0xff000000], 'vlan0\x00', 'dvmrp1\x00', {}, {}, 0xc, 0xa8, 0x5, 0x5}, 0x0, 0xa8, 0xe8}, @common=@inet=@LOG={0x40, 'LOG\x00', 0x0, {0x4, 0x37, "4de6a5810323dfc50fb8c0777970468a0dcacc2eb3d44aba560ec4915722"}}}, {{@ipv6={@ipv4={'\x00', '\xff\xff', @local}, @local, [0xff, 0xff, 0xffffff00, 0xff], [0xffffffff, 0xffffffff, 0x0, 0xff], 'geneve1\x00', 'bridge_slave_0\x00', {0xff}, {}, 0x16, 0xbb, 0x0, 0xc}, 0x0, 0xd8, 0x100, 0x0, {}, [@common=@srh={{0x30}, {0x46e5814556b85033, 0x1, 0x8, 0x81, 0x5, 0x4, 0x120}}]}, @common=@unspec=@NFQUEUE2={0x28, 'NFQUEUE\x00', 0x2, {0xc, 0x0, 0x1}}}], {{'\x00', 0x0, 0xa8, 0xd0}, {0x28}}}}, 0x470) socket$inet_icmp_raw(0x2, 0x3, 0x1) syz_init_net_socket$bt_hci(0x1f, 0x3, 0x5) (async) close(0x4) (async, rerun: 64) syz_emit_ethernet(0x82, &(0x7f0000000100)=ANY=[@ANYRES64=r0], 0x0) (async, rerun: 64) syz_open_procfs$namespace(0x0, &(0x7f0000000080)='ns/ipc\x00') unshare(0x6a040000) (async) bpf$MAP_CREATE(0x0, &(0x7f0000003940)=@base={0x21, 0x0, 0x0, 0x100000, 0x400, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x18000000}, 0x48) r1 = socket(0x8, 0x3, 0x0) ioctl$IMGETCOUNT(r1, 0x40106183, &(0x7f0000000000)) unshare(0x800) 31.973601481s ago: executing program 34 (id=2435): r0 = socket$igmp6(0xa, 0x3, 0x2) setsockopt$IP6T_SO_SET_REPLACE(r0, 0x29, 0x40, &(0x7f0000000180)=@filter={'filter\x00', 0xe, 0x4, 0x410, 0xffffffff, 0x240, 0x158, 0x240, 0xffffffff, 0xffffffff, 0x340, 0x340, 0x340, 0xffffffff, 0x4, &(0x7f0000000040), {[{{@ipv6={@private1={0xfc, 0x1, '\x00', 0x1}, @remote, [0xffffffff, 0xffffff00, 0xff], [0xffffffff, 0xffff00, 0xffffff00, 0xffffff00], 'veth1_to_hsr\x00', 'veth0_to_batadv\x00', {}, {}, 0x2f, 0x4, 0x0, 0x68}, 0x0, 0xf8, 0x158, 0x0, {}, [@common=@icmp6={{0x28}, {0xd, "1f7b"}}, @common=@icmp6={{0x28}, {0x8, "e0af"}}]}, @common=@inet=@HMARK={0x60, 'HMARK\x00', 0x0, {@ipv6=@empty, [0xff000000, 0x0, 0xffff00], 0x4e21, 0x4e22, 0x4e23, 0x4e21, 0x1, 0x6680, 0x3, 0x2, 0x81}}}, {{@ipv6={@private1={0xfc, 0x1, '\x00', 0x1}, @dev={0xfe, 0x80, '\x00', 0x14}, [0xff000000, 0x0, 0xff], [0xff000000, 0xffffff00, 0xffffff00, 0xff000000], 'vlan0\x00', 'dvmrp1\x00', {}, {}, 0xc, 0xa8, 0x5, 0x5}, 0x0, 0xa8, 0xe8}, @common=@inet=@LOG={0x40, 'LOG\x00', 0x0, {0x4, 0x37, "4de6a5810323dfc50fb8c0777970468a0dcacc2eb3d44aba560ec4915722"}}}, {{@ipv6={@ipv4={'\x00', '\xff\xff', @local}, @local, [0xff, 0xff, 0xffffff00, 0xff], [0xffffffff, 0xffffffff, 0x0, 0xff], 'geneve1\x00', 'bridge_slave_0\x00', {0xff}, {}, 0x16, 0xbb, 0x0, 0xc}, 0x0, 0xd8, 0x100, 0x0, {}, [@common=@srh={{0x30}, {0x46e5814556b85033, 0x1, 0x8, 0x81, 0x5, 0x4, 0x120}}]}, @common=@unspec=@NFQUEUE2={0x28, 'NFQUEUE\x00', 0x2, {0xc, 0x0, 0x1}}}], {{'\x00', 0x0, 0xa8, 0xd0}, {0x28}}}}, 0x470) socket$inet_icmp_raw(0x2, 0x3, 0x1) syz_init_net_socket$bt_hci(0x1f, 0x3, 0x5) (async) close(0x4) (async, rerun: 64) syz_emit_ethernet(0x82, &(0x7f0000000100)=ANY=[@ANYRES64=r0], 0x0) (async, rerun: 64) syz_open_procfs$namespace(0x0, &(0x7f0000000080)='ns/ipc\x00') unshare(0x6a040000) (async) bpf$MAP_CREATE(0x0, &(0x7f0000003940)=@base={0x21, 0x0, 0x0, 0x100000, 0x400, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x18000000}, 0x48) r1 = socket(0x8, 0x3, 0x0) ioctl$IMGETCOUNT(r1, 0x40106183, &(0x7f0000000000)) unshare(0x800) 2.602853086s ago: executing program 6 (id=2968): r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000180), 0x0, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000080)={'pimreg0\x00', 0x7c2}) ioctl$TUNSETQUEUE(r0, 0x400454d9, &(0x7f00000000c0)={'veth0_to_bridge\x00', 0x400}) r1 = socket$inet_tcp(0x2, 0x1, 0x0) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000180)={'pimreg0\x00', 0x0}) r3 = bpf$PROG_LOAD(0x5, &(0x7f00000002c0)={0x6, 0x3, &(0x7f0000000440)=@framed={{0x18, 0x0, 0x0, 0x0, 0x100}}, &(0x7f0000000080)='syzkaller\x00', 0x0, 0x0, 0x0, 0x40f00, 0x0, '\x00', 0x0, @xdp, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r4 = bpf$BPF_LINK_CREATE_XDP(0x1c, &(0x7f0000000140)={r3, r2, 0x25, 0x0, @val=@netfilter={0x1, 0x0, 0x7}}, 0x20) bpf$LINK_DETACH(0x22, &(0x7f0000000100)=r4, 0x4) r5 = socket$netlink(0x10, 0x3, 0x1) r6 = socket$inet_tcp(0x2, 0x1, 0x0) bind$inet(r6, &(0x7f0000000040)={0x2, 0x4e21, @local}, 0x10) connect$inet(r6, &(0x7f0000000180)={0x2, 0x4e21, @local}, 0x10) setsockopt$inet_tcp_TCP_REPAIR(r6, 0x6, 0x13, &(0x7f00000001c0), 0x4) r7 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r8 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r9 = syz_genetlink_get_family_id$netlbl_calipso(&(0x7f0000000140), r8) sendmsg$NLBL_CALIPSO_C_ADD(r7, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000140)={0x1c, r9, 0x90d, 0x0, 0x0, {}, [@NLBL_CALIPSO_A_DOI={0x8}]}, 0x1c}}, 0x0) r10 = socket$inet_tcp(0x2, 0x1, 0x0) getsockopt$inet_tcp_buf(r10, 0x6, 0x1c, 0x0, &(0x7f0000000140)) sendmsg(r5, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000300)=[{&(0x7f00000001c0)="5500000018007f5f00fe01b2a4a2809302060000ff41fd01040400000a00120002002800000019002d4400009b84136ef75afb83de066a5900e1baac341b61130000f2ff00000100"/85, 0x55}], 0x1, 0x0, 0x0, 0x7a000000}, 0x0) 2.147985421s ago: executing program 5 (id=2972): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r0, &(0x7f000000c2c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000080)=ANY=[@ANYBLOB="394290748cf54a62136048c92a1ce84c75e784a879458681", @ANYRESOCT=r0], 0x7c}}, 0x24040080) (async) sendmsg$NFT_BATCH(r0, &(0x7f0000000500)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000240)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a50000000060a0b0400000000cb4dc72fb4fe7116240004802000018007000100637400fa90c898016c901300028008f9014000000014080001df000040000900010073797a30000000000900020073797a32000000001400000011ee0000000000000000e1d8602a4c61ba71cf019ae916c30a52468e4d1adbcb5f9bb1dda7bf5e72d360c49e245d033ff4fd9211ce2d84f9c2f77e5da2cf217a174af64dc4d5c69b3a7868dfabfa0a3c38431e70f08126d2e27018136916adf08dcaba54b7c798f32114dffbbf566f5d17662a5cc1a5ceb212f3aac0f93a239105e6e5a9ee430ffd64d8c44592b7f044abdc7d1cb9b6f9d407758ca70c03ec54f2849f73876af8869fa1fd5734f9d9ebf2b1815161833b58fb9d767004d3b8352657f53f1687e174aa71878c9db8aa85ad9cd7bc742c72d7d8a325309131fa9a63dc0afc7081922241aeaf1ef755fbd6d7f2c93c127d70f7c17d84f5a0686baf5dd6fe107c01fc42cb598f76c922350d3e8f7e042d815bdb5d667b475c4ffd52d53be6adf920ad005afd537b6fdc66ca79243349391097e22998109c1eb3c618cda2f021386bfbe6bc85502ed6fe26326cd7c742766cef6a69a835603a7a7a4c96a8d8febf1066e102f73dba73f929b4d3e4bfd66529932448c7dc2c113695cb916391b0ff96cdb1d9d0902022cdb310d1436254a2502b210fbc7c9bb318cf74c00960c965fb49e811dc5c6a318d779c5f980ca35d2c2c1579c26fb1d5d2d23ebabf77546c48ac09baaa27a65a96c53f7ba6c9c92625"], 0x78}}, 0x0) 1.949369219s ago: executing program 5 (id=2975): r0 = syz_init_net_socket$nfc_llcp(0x27, 0x2, 0x1) sendmmsg(r0, &(0x7f0000001440)=[{{0x0, 0x0, 0x0}}], 0x1, 0x4005) bpf$PROG_LOAD(0x5, &(0x7f0000000080)={0x11, 0x0, 0x0, 0x0, 0x0, 0xfffffffffffffe1f, 0x0, 0x0, 0x11, '\x00', 0x0, @fallback=0x4}, 0x94) sendmsg$nl_xfrm(0xffffffffffffffff, &(0x7f0000000900)={0x0, 0x0, &(0x7f00000008c0)={&(0x7f0000000000)=ANY=[@ANYBLOB="d80000001b00010000000000fdfffffffc000000000000000000000000000000200100000000000000000000000000004e240000000000010000000000000000", @ANYRES32=0x0, @ANYRES32, @ANYBLOB="0000000000000000ffffffffffffff7ffcffffffffffffff04000000000000000000000000000000fdffffffffffffff00000000000000000000000000000000050000000000000000000000000000000000000000000000000000000000000006fcffff00000000000003000000000000000000000000000c0008"], 0xd8}}, 0x20008004) r1 = socket$nl_route(0x10, 0x3, 0x0) r2 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r2, &(0x7f0000000000)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f0000000180)=@newtaction={0x60, 0x30, 0x871a15abc695fa3d, 0x0, 0x0, {}, [{0x4c, 0x1, [@m_ctinfo={0x42, 0x1, 0x0, 0x0, {{0xb}, {0x38, 0x2, 0x0, 0x1, [@TCA_CTINFO_ACT={0x18}]}, {0x4}, {0xc}, {0xc}}}]}]}, 0x60}}, 0x0) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000200)={'bond0\x00', 0x0}) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000140)={'ip6gretap0\x00', 0x0}) sendmsg$nl_route(r1, &(0x7f0000000300)={&(0x7f0000000180)={0x10, 0x0, 0x0, 0x200}, 0xc, &(0x7f00000001c0)={&(0x7f0000000240)=@ipv4_newaddr={0x48, 0x14, 0x10, 0x70bd29, 0x25dfdbfc, {0x2, 0x1f, 0x8, 0xfd, r3}, [@IFA_LOCAL={0x8, 0x2, @loopback}, @IFA_LOCAL={0x8, 0x2, @multicast2}, @IFA_TARGET_NETNSID={0x8, 0xa, 0x1}, @IFA_ADDRESS={0x8, 0x1, @rand_addr=0x64010101}, @IFA_LOCAL={0x8, 0x2, @broadcast}, @IFA_ADDRESS={0x8, 0x1, @empty}]}, 0x48}, 0x1, 0x0, 0x0, 0x400}, 0x20004000) r5 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r5, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000580)=ANY=[@ANYBLOB="5801000040000701feffffff00000000017c0000040042800c00018006000600800a0000340102802e011480080018"], 0x158}, 0x1, 0x0, 0x0, 0x48815}, 0xc000) sendmsg$nl_route(r1, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000080)=ANY=[@ANYBLOB="500000001000010400"/20, @ANYRES32=0x0, @ANYBLOB="400d0000000000003000128008000100687372002400028008000200", @ANYRES32=r4, @ANYBLOB="08000100", @ANYRES32=r3], 0x50}, 0x1, 0x0, 0x0, 0x40000}, 0x8000) syz_init_net_socket$nfc_llcp(0x27, 0x2, 0x1) (async) sendmmsg(r0, &(0x7f0000001440)=[{{0x0, 0x0, 0x0}}], 0x1, 0x4005) (async) bpf$PROG_LOAD(0x5, &(0x7f0000000080)={0x11, 0x0, 0x0, 0x0, 0x0, 0xfffffffffffffe1f, 0x0, 0x0, 0x11, '\x00', 0x0, @fallback=0x4}, 0x94) (async) sendmsg$nl_xfrm(0xffffffffffffffff, &(0x7f0000000900)={0x0, 0x0, &(0x7f00000008c0)={&(0x7f0000000000)=ANY=[@ANYBLOB="d80000001b00010000000000fdfffffffc000000000000000000000000000000200100000000000000000000000000004e240000000000010000000000000000", @ANYRES32=0x0, @ANYRES32, @ANYBLOB="0000000000000000ffffffffffffff7ffcffffffffffffff04000000000000000000000000000000fdffffffffffffff00000000000000000000000000000000050000000000000000000000000000000000000000000000000000000000000006fcffff00000000000003000000000000000000000000000c0008"], 0xd8}}, 0x20008004) (async) socket$nl_route(0x10, 0x3, 0x0) (async) socket$nl_route(0x10, 0x3, 0x0) (async) sendmsg$nl_route_sched(r2, &(0x7f0000000000)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f0000000180)=@newtaction={0x60, 0x30, 0x871a15abc695fa3d, 0x0, 0x0, {}, [{0x4c, 0x1, [@m_ctinfo={0x42, 0x1, 0x0, 0x0, {{0xb}, {0x38, 0x2, 0x0, 0x1, [@TCA_CTINFO_ACT={0x18}]}, {0x4}, {0xc}, {0xc}}}]}]}, 0x60}}, 0x0) (async) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000200)={'bond0\x00'}) (async) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000140)={'ip6gretap0\x00'}) (async) sendmsg$nl_route(r1, &(0x7f0000000300)={&(0x7f0000000180)={0x10, 0x0, 0x0, 0x200}, 0xc, &(0x7f00000001c0)={&(0x7f0000000240)=@ipv4_newaddr={0x48, 0x14, 0x10, 0x70bd29, 0x25dfdbfc, {0x2, 0x1f, 0x8, 0xfd, r3}, [@IFA_LOCAL={0x8, 0x2, @loopback}, @IFA_LOCAL={0x8, 0x2, @multicast2}, @IFA_TARGET_NETNSID={0x8, 0xa, 0x1}, @IFA_ADDRESS={0x8, 0x1, @rand_addr=0x64010101}, @IFA_LOCAL={0x8, 0x2, @broadcast}, @IFA_ADDRESS={0x8, 0x1, @empty}]}, 0x48}, 0x1, 0x0, 0x0, 0x400}, 0x20004000) (async) socket$nl_generic(0x10, 0x3, 0x10) (async) sendmsg$nl_generic(r5, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000580)=ANY=[@ANYBLOB="5801000040000701feffffff00000000017c0000040042800c00018006000600800a0000340102802e011480080018"], 0x158}, 0x1, 0x0, 0x0, 0x48815}, 0xc000) (async) sendmsg$nl_route(r1, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000080)=ANY=[@ANYBLOB="500000001000010400"/20, @ANYRES32=0x0, @ANYBLOB="400d0000000000003000128008000100687372002400028008000200", @ANYRES32=r4, @ANYBLOB="08000100", @ANYRES32=r3], 0x50}, 0x1, 0x0, 0x0, 0x40000}, 0x8000) (async) 1.753499676s ago: executing program 1 (id=2978): r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000180)='blkio.bfq.empty_time\x00', 0x26e1, 0x0) splice(r0, &(0x7f0000000080), r0, &(0x7f00000000c0)=0x6edb, 0x76, 0x0) close(r0) ioctl$SIOCSIFHWADDR(r0, 0x8b14, &(0x7f0000000000)={'wlan1\x00', @random="01ff8d00"}) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000140)={0x1e, 0x4, &(0x7f0000000000)=ANY=[@ANYBLOB="1800000000000000000000000000000071123e000000000095"], &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x24, r0}, 0x94) 1.671819782s ago: executing program 1 (id=2980): getsockopt$IP_SET_OP_GET_FNAME(0xffffffffffffffff, 0x1, 0x53, &(0x7f0000000000)={0x8, 0x7, 0x0, 'syz0\x00'}, &(0x7f0000000040)=0x2c) r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_MSG_GETSET(r0, &(0x7f0000000180)={&(0x7f0000000080), 0xc, &(0x7f0000000140)={&(0x7f00000000c0)={0x48, 0xa, 0xa, 0x201, 0x0, 0x0, {0xa, 0x0, 0x7}, [@NFTA_SET_EXPRESSIONS={0x20, 0x12, 0x0, 0x1, [{0x1c, 0x1, 0x0, 0x1, @quota={{0xa}, @val={0xc, 0x2, 0x0, 0x1, [@NFTA_QUOTA_FLAGS={0x8, 0x2, 0x1, 0x0, 0x1}]}}}]}, @NFTA_SET_OBJ_TYPE={0x8, 0xf, 0x1, 0x0, 0x5}, @NFTA_SET_TABLE={0x9, 0x1, 'syz0\x00'}]}, 0x48}, 0x1, 0x0, 0x0, 0x15}, 0x20040000) r1 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r2 = syz_genetlink_get_family_id$ieee802154(&(0x7f0000000200), 0xffffffffffffffff) sendmsg$IEEE802154_LIST_IFACE(r1, &(0x7f00000002c0)={&(0x7f00000001c0)={0x10, 0x0, 0x0, 0x80000000}, 0xc, &(0x7f0000000280)={&(0x7f0000000240)={0x2c, r2, 0x200, 0x70bd25, 0x25dfdbff, {}, [@IEEE802154_ATTR_DEV_NAME={0xa, 0x1, 'wpan0\x00'}, @IEEE802154_ATTR_DEV_NAME={0xa, 0x1, 'wpan1\x00'}]}, 0x2c}, 0x1, 0x0, 0x0, 0x4000}, 0x20004000) sendmsg$IEEE802154_DISASSOCIATE_REQ(r1, &(0x7f0000000400)={&(0x7f0000000300)={0x10, 0x0, 0x0, 0x20}, 0xc, &(0x7f00000003c0)={&(0x7f0000000340)={0x44, r2, 0x400, 0x70bd27, 0x25dfdbfb, {}, [@IEEE802154_ATTR_REASON={0x5, 0x12, 0x7}, @IEEE802154_ATTR_REASON={0x5, 0x12, 0x6}, @IEEE802154_ATTR_COORD_HW_ADDR={0xc}, @IEEE802154_ATTR_COORD_HW_ADDR={0xc, 0x9, {0xaaaaaaaaaaaa0002}}, @IEEE802154_ATTR_REASON={0x5}]}, 0x44}, 0x1, 0x0, 0x0, 0x80}, 0x40004) unshare(0x2000180) r3 = syz_genetlink_get_family_id$nfc(&(0x7f0000000480), r1) ioctl$IOCTL_GET_NCIDEV_IDX(0xffffffffffffffff, 0x0, &(0x7f00000004c0)=0x0) sendmsg$NFC_CMD_SE_IO(r1, &(0x7f00000005c0)={&(0x7f0000000440)={0x10, 0x0, 0x0, 0x9205a091}, 0xc, &(0x7f0000000580)={&(0x7f0000000500)={0x74, r3, 0x10, 0x70bd2c, 0x25dfdbfc, {}, [@NFC_ATTR_SE_APDU={0x58, 0x19, "cbbcd3bc456047331219336f93f6fda7828f18435e368b257c95104c00326f5c884c52cecad5b717ede2538c142cd51652214aa9f80a0b7b648758812d0e0dd5e9bbd68ea8ab523118da41a0bf925e0695165fba"}, @NFC_ATTR_DEVICE_INDEX={0x8, 0x1, r4}]}, 0x74}, 0x1, 0x0, 0x0, 0x20008010}, 0x4040804) r5 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX_802154(r1, 0x8933, &(0x7f0000000640)={'wpan1\x00', 0x0}) sendmsg$IEEE802154_LLSEC_DEL_SECLEVEL(r5, &(0x7f0000000740)={&(0x7f0000000600)={0x10, 0x0, 0x0, 0x4000}, 0xc, &(0x7f0000000700)={&(0x7f0000000680)={0x60, 0x0, 0x400, 0x70bd28, 0x25dfdbfe, {}, [@IEEE802154_ATTR_LLSEC_CMD_FRAME_ID={0x5, 0x34, 0x9}, @IEEE802154_ATTR_DEV_NAME={0xa, 0x1, 'wpan1\x00'}, @IEEE802154_ATTR_LLSEC_FRAME_TYPE={0x5}, @IEEE802154_ATTR_LLSEC_CMD_FRAME_ID={0x5, 0x34, 0xa}, @IEEE802154_ATTR_DEV_INDEX={0x8, 0x2, r6}, @IEEE802154_ATTR_LLSEC_CMD_FRAME_ID={0x5, 0x34, 0x8}, @IEEE802154_ATTR_LLSEC_FRAME_TYPE={0x5, 0x33, 0x1}, @IEEE802154_ATTR_LLSEC_CMD_FRAME_ID={0x5, 0x34, 0x57}, @IEEE802154_ATTR_LLSEC_SECLEVELS={0x5, 0x35, 0xe}]}, 0x60}, 0x1, 0x0, 0x0, 0x4004004}, 0x40884) r7 = socket$can_j1939(0x1d, 0x2, 0x7) setsockopt$SO_J1939_SEND_PRIO(r7, 0x6b, 0x3, &(0x7f0000000780)=0x4, 0x4) socket$can_bcm(0x1d, 0x2, 0x2) sendmsg$IPSET_CMD_FLUSH(r0, &(0x7f0000000880)={&(0x7f00000007c0)={0x10, 0x0, 0x0, 0x8000000}, 0xc, &(0x7f0000000840)={&(0x7f0000000800)={0x1c, 0x4, 0x6, 0x101, 0x0, 0x0, {0xa, 0x0, 0x6}, [@IPSET_ATTR_PROTOCOL={0x5}]}, 0x1c}, 0x1, 0x0, 0x0, 0x48885}, 0x40) r8 = syz_genetlink_get_family_id$nl802154(&(0x7f0000000900), r5) ioctl$sock_SIOCGIFINDEX_802154(r1, 0x8933, &(0x7f0000000940)={'wpan4\x00', 0x0}) sendmsg$NL802154_CMD_DEL_SEC_KEY(r5, &(0x7f0000000a00)={&(0x7f00000008c0)={0x10, 0x0, 0x0, 0x20000000}, 0xc, &(0x7f00000009c0)={&(0x7f0000000980)={0x24, r8, 0x100, 0x70bd27, 0x25dfdbfc, {}, [@NL802154_ATTR_IFINDEX={0x8, 0x3, r6}, @NL802154_ATTR_IFINDEX={0x8, 0x3, r9}]}, 0x24}}, 0x20008815) syz_emit_ethernet(0x32f, &(0x7f0000000a40)={@link_local={0x1, 0x80, 0xc2, 0x0, 0x0, 0x3}, @broadcast, @val={@val={0x88a8, 0x5, 0x0, 0x7f}, {0x8100, 0x6, 0x1, 0x3}}, {@mpls_uc={0x8847, {[{0xd4}, {0x5, 0x0, 0x1}, {0x9, 0x0, 0x1}, {0x7f}, {0x772}], @ipv4=@gre={{0x2e, 0x4, 0x1, 0x1, 0x305, 0x68, 0x0, 0x39, 0x2f, 0x0, @broadcast, @empty, {[@end, @timestamp={0x44, 0x24, 0xf3, 0x0, 0x5, [0x8, 0x2, 0x7, 0x1, 0xe, 0x8, 0x1, 0x80000000]}, @cipso={0x86, 0x32, 0x3, [{0x1, 0x11, "f841bd161758f604730ea018a65e8c"}, {0x1, 0xe, "83467a63507b56aeb81f6e6a"}, {0x1, 0xd, "d5f7920d19e7dcab8684ed"}]}, @rr={0x7, 0xf, 0x53, [@multicast1, @multicast2, @private=0xa010102]}, @end, @timestamp_prespec={0x44, 0x3c, 0xf, 0x3, 0x9, [{@local, 0x7fffffff}, {@private=0xa010100, 0x2}, {@dev={0xac, 0x14, 0x14, 0x13}, 0x6}, {@multicast1, 0x4a}, {@local, 0x5}, {@broadcast, 0x5}, {@rand_addr=0x64010100, 0x80}]}]}}, {{0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x1, 0x880b, 0xe8, 0x3, [0x1], "2cc883fd7dfcdfda1af79eb448d221575b4ed0a58299c210cd2898438632a998d4b668cce62969da1d9d9337ad74d82e1032838f73e70f4835b32288b3c51d3519db71e8d0b07a1cc9a30580b454b286d87e02ded0e9dfc22a54f36fd4defaaf7b6aecd2c012949a6d5bb6e3e0ef2217d853b86386d61b35736aff9b4ddd38a09fcbc07908bde7bda3d231e77c3cecaef976967b9606f967a9d1f0461e82eb9b5eecb281d917b30aaf7c6726ba36fc32c88863297258489c427446bfed39dee98768c0ac4765d04ca5183ee54ff8fabc73b2376bc24f51ce522fadbb87813e9d3a9ac6fe4f685599"}, {0x1, 0x0, 0x0, 0x1, 0x0, 0x0, 0x800, [0x3, 0x8, 0x2], "567cb88adf9832fefa9c65ac88b5a5d9cb64c6ce652c4a37af2d3e85"}, {0x1, 0x0, 0x0, 0x1, 0x0, 0x0, 0x86dd, [], "2147e493d080ccb3517ec3"}, {0x8, 0x88be, 0x0, {{0x7, 0x1, 0x8, 0x0, 0x0, 0x1, 0x0, 0x7}, 0x1, {0x5}}}, {0x8, 0x22eb, 0x3, {{0xf, 0x2, 0x8f, 0x0, 0x0, 0x1, 0x0, 0x2}, 0x2, {0x9, 0x5, 0x0, 0x7, 0x1}}}, {0x8, 0x6558, 0x4, "fe58f1fa70898204f3297a10d0f269dfd768f93625f817597d38e166e31b3590afff61771d4f3665c574be5148595905d0b9e85b0675b678a9f21d78f2c6a81d17485811caee76564a9676a5f8dcdb781982336ae0b33dddc8451887d1f608de287c504fd3d5e26ccc7c09ed650714a6cbff3b0f7bd64c257a305d57cc9e4dcc44c6fbf0aeb1d119a961cdc503041be9a5a7153788f741cf67104b4a87e4928260f3475c5f406f5d6948e3a7ccf4d46e55872b11a3505234038c831471655559ad32553a75aa2787bbd6749106052467c6aab5ccd82e7c03b4ab95f667e9ecf616212346547afef085e0a464e447facdc7a5"}}}}}}}, &(0x7f0000000d80)={0x0, 0x4, [0xd4b, 0xe02, 0xa67, 0xb90]}) unshare(0x4000200) getsockopt$SO_J1939_ERRQUEUE(r0, 0x6b, 0x4, &(0x7f0000000dc0), &(0x7f0000000e00)=0x4) sendmsg$IEEE802154_ASSOCIATE_REQ(r5, &(0x7f0000000f00)={&(0x7f0000000e40)={0x10, 0x0, 0x0, 0x1}, 0xc, &(0x7f0000000ec0)={&(0x7f0000000e80)={0x34, r2, 0x200, 0x70bd25, 0x25dfdbfe, {}, [@IEEE802154_ATTR_COORD_HW_ADDR={0xc}, @IEEE802154_ATTR_COORD_HW_ADDR={0xc}, @IEEE802154_ATTR_CHANNEL={0x5, 0x7, 0x16}]}, 0x34}, 0x1, 0x0, 0x0, 0x40800}, 0x4000083) r10 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000f80), 0xffffffffffffffff) sendmsg$NL80211_CMD_SET_MPATH(0xffffffffffffffff, &(0x7f0000001080)={&(0x7f0000000f40)={0x10, 0x0, 0x0, 0x10}, 0xc, &(0x7f0000001040)={&(0x7f0000000fc0)={0x80, r10, 0x200, 0x70bd25, 0x25dfdbfb, {{}, {@void, @void}}, [@NL80211_ATTR_MAC={0xa, 0x6, @device_b}, @NL80211_ATTR_MAC={0xa, 0x6, @broadcast}, @NL80211_ATTR_MAC={0xa, 0x6, @broadcast}, @NL80211_ATTR_MAC={0xa, 0x6, @broadcast}, @NL80211_ATTR_MPATH_NEXT_HOP={0xa, 0x1a, @broadcast}, @NL80211_ATTR_MAC={0xa, 0x6, @device_b}, @NL80211_ATTR_MAC={0xa}, @NL80211_ATTR_MPATH_NEXT_HOP={0xa, 0x1a, @device_b}, @NL80211_ATTR_MAC={0xa, 0x6, @device_b}]}, 0x80}, 0x1, 0x0, 0x0, 0x10000040}, 0x4000010) r11 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl$sock_ipv4_tunnel_SIOCDELTUNNEL(0xffffffffffffffff, 0x89f2, &(0x7f0000001180)={'sit0\x00', &(0x7f00000010c0)={'erspan0\x00', 0x0, 0x7800, 0x80, 0x8, 0x0, {{0x25, 0x4, 0x1, 0x3e, 0x94, 0x64, 0x0, 0x8, 0x4, 0x0, @empty, @multicast1, {[@noop, @timestamp_addr={0x44, 0xc, 0x22, 0x1, 0x1, [{@initdev={0xac, 0x1e, 0x0, 0x0}, 0x4}]}, @timestamp={0x44, 0x14, 0x1c, 0x0, 0xa, [0x5, 0x3, 0xfffff53c, 0x1ff]}, @noop, @rr={0x7, 0x27, 0x39, [@private=0xa010102, @rand_addr=0x64010101, @broadcast, @rand_addr=0x64010100, @broadcast, @rand_addr=0x64010100, @rand_addr=0x64010101, @dev={0xac, 0x14, 0x14, 0x30}, @remote]}, @timestamp_addr={0x44, 0xc, 0x4e, 0x1, 0x0, [{@rand_addr=0x64010100}]}, @generic={0x94, 0x4, "fed8"}, @timestamp_prespec={0x44, 0x24, 0x30, 0x3, 0xe, [{@initdev={0xac, 0x1e, 0x1, 0x0}, 0x1}, {@empty, 0x8}, {@empty, 0x5}, {@private=0xa010102, 0xffff0000}]}]}}}}}) ioctl$sock_ipv4_tunnel_SIOCGETTUNNEL(r11, 0x89f0, &(0x7f0000001240)={'erspan0\x00', &(0x7f00000011c0)={'sit0\x00', r12, 0x0, 0x7, 0x823, 0x3, {{0xa, 0x4, 0x0, 0x28, 0x28, 0x66, 0x0, 0xe, 0x4, 0x0, @loopback, @remote, {[@timestamp_addr={0x44, 0x14, 0x36, 0x1, 0x6, [{@multicast1, 0x7fffffff}, {@dev={0xac, 0x14, 0x14, 0x28}, 0x8}]}]}}}}}) 1.487049175s ago: executing program 5 (id=2981): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r0, &(0x7f000000c2c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000340)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a28000000000a0101000000005e1affd5020000000900010073797a300000000008000240000000032c000000030a01030000e6ff00000000020000000900010073797a30000000000900030073797a320000000014000000110001"], 0x7c}}, 0x0) r1 = socket$inet(0x2, 0x4000000000000001, 0x0) getsockopt$IP_VS_SO_GET_DESTS(r1, 0x0, 0x484, &(0x7f00000000c0)=""/24, &(0x7f0000000340)=0x18) syz_init_net_socket$netrom(0x6, 0x5, 0x0) (async) r2 = syz_init_net_socket$netrom(0x6, 0x5, 0x0) getsockopt$netrom_NETROM_T1(r2, 0x103, 0x1, 0x0, 0x0) r3 = bpf$MAP_CREATE(0x0, &(0x7f0000000680)=ANY=[@ANYBLOB="1b000000000000000000000000800000000008"], 0x50) r4 = bpf$PROG_LOAD(0x5, &(0x7f0000000040)={0x6, 0x8, &(0x7f00000002c0)=ANY=[@ANYBLOB="18020000fc0803ff0000000000200000850000004100000018110000", @ANYRES32=r3, @ANYBLOB="0000000000000000b702000000000000850000008600000095"], &(0x7f0000000280)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @xdp, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000600)={r4, 0x0, 0xe, 0x0, &(0x7f0000000000)="b5e379a5389bcfd05ad9ca72d507", 0x0, 0x500, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x9}, 0x50) (async) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000600)={r4, 0x0, 0xe, 0x0, &(0x7f0000000000)="b5e379a5389bcfd05ad9ca72d507", 0x0, 0x500, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x9}, 0x50) sendmsg$NFT_BATCH(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000080)=ANY=[], 0x1b8}, 0x1, 0x0, 0x0, 0x8010}, 0x20008000) (async) sendmsg$NFT_BATCH(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000080)=ANY=[], 0x1b8}, 0x1, 0x0, 0x0, 0x8010}, 0x20008000) 1.481164632s ago: executing program 6 (id=2983): r0 = socket(0x2, 0x3, 0xff) sendmmsg$inet(r0, &(0x7f000000b4c0)=[{{&(0x7f00000000c0)={0x2, 0x4e24, @empty}, 0x10, &(0x7f0000000100)=[{&(0x7f0000000340)="8fab14410848dd95e7b8523bfbf4a6cbcc911b443e673a8fa77ce58a13432ac99ea3cd5ff04b301590fb45a74a588fdabe427ade9b1ed53f450ce6c2", 0x3c}], 0x1}}, {{&(0x7f0000000140)={0x2, 0x4e24, @empty}, 0x10, &(0x7f0000000700)=[{&(0x7f00000028c0)="c7bace4ebe919d2a7bf8f86453e0ec420e051dc8", 0x14}], 0x1}}], 0x2, 0x200088c4) sendmsg$NLBL_UNLABEL_C_ACCEPT(0xffffffffffffffff, &(0x7f0000000140)={0x0, 0x0, &(0x7f00000000c0)={0x0, 0x1c}, 0x1, 0x0, 0x0, 0x24008851}, 0x40040) r1 = socket$l2tp(0x2, 0x2, 0x73) setsockopt$IPT_SO_SET_ADD_COUNTERS(r1, 0x0, 0x41, &(0x7f0000000080)=ANY=[@ANYBLOB="66696c740e0000000000000000000000000000000000000000000000000000000500"], 0x78) r2 = socket(0x10, 0x3, 0x0) sendmsg$nl_route(r2, &(0x7f0000000180)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000f00)=ANY=[@ANYBLOB="300000001800dd8d0000000000000000020000000000000900000000060015000a0000000c00168008000100bc"], 0x30}}, 0x0) sendmmsg$alg(r2, &(0x7f0000000140), 0x4924b68, 0x0) bpf$PROG_LOAD(0x5, &(0x7f000000e000)={0x10, 0x4, &(0x7f0000000040)=ANY=[@ANYBLOB="b4000000000014007910480000000000690046000000000095000000"], &(0x7f0000003ff6)='GPL\x00', 0x8, 0xfd90, &(0x7f000000cf3d)=""/195, 0x0, 0x0, '\x00', 0x0, @sk_msg, 0xffffffffffffffff, 0x8, 0x0, 0xa3}, 0x21) socketpair(0x2b, 0x1, 0x0, &(0x7f0000000040)={0x0, 0x0}) 1.28791783s ago: executing program 2 (id=2984): r0 = socket$inet6_tcp(0xa, 0x1, 0x0) listen(r0, 0x0) ioctl$sock_inet6_tcp_SIOCOUTQ(r0, 0x5411, 0x0) pipe(&(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$ifreq_SIOCGIFINDEX_wireguard(0xffffffffffffffff, 0x8933, &(0x7f0000000140)={'wg2\x00', 0x0}) getsockname$packet(0xffffffffffffffff, &(0x7f0000000180)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @local}, &(0x7f00000001c0)=0x14) sendmsg$nl_route(r1, &(0x7f0000000240)={&(0x7f00000000c0)={0x10, 0x0, 0x0, 0x20}, 0xc, &(0x7f0000000200)={&(0x7f00000002c0)=ANY=[@ANYBLOB="03000000000000002bace7ca49e31099b0100000", @ANYRES32=r2, @ANYBLOB="a10004090800090029200000080001007f00000108000b000700000005000c000600000014000100fc0100000000000000000000000000011c000e80050001007f00000004000200040002000500010009000000"], 0x6c}, 0x1, 0x0, 0x0, 0x1}, 0x0) openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000280)='cgroup.controllers\x00', 0x275a, 0x0) pipe(&(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) r4 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r4, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000440)={&(0x7f00000004c0)=@ipv4_newroute={0x28, 0x18, 0x1, 0x0, 0x0, {0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x9}, [@RTA_METRICS={0x4}, @RTA_NH_ID={0x8, 0x1e, 0x3}]}, 0x28}}, 0x0) r5 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='cgroup.controllers\x00', 0xb00000000065808, 0x0) r6 = socket$inet6(0xa, 0x2, 0x0) r7 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r7, &(0x7f0000000540)={0x0, 0x0, &(0x7f0000000500)={&(0x7f0000000d80)=@newsa={0x140, 0x10, 0x1, 0x0, 0x25dfdbfd, {{@in=@local, @in6=@empty, 0x4000, 0x0, 0x3, 0x3}, {@in=@broadcast, 0x0, 0x33}, @in6=@mcast2, {0x0, 0x0, 0x0, 0x401, 0x0, 0x0, 0x4}, {}, {}, 0x0, 0x0, 0xa, 0x1}, [@tfcpad={0x8, 0x23, 0xd19}, @algo_auth={0x48, 0x1, {{'sha256\x00'}}}]}, 0x140}}, 0x20000000) bind$inet6(r6, &(0x7f0000000040)={0xa, 0xe22}, 0x1c) connect$inet6(r6, &(0x7f0000000600)={0x2, 0x4e23, 0x0, @dev}, 0x1c) r8 = socket$netlink(0x10, 0x3, 0x8000000004) writev(r8, &(0x7f0000000280)=[{&(0x7f0000000080)="580000001400add4050000000000000002117fffffff81004e230e227f000501925aa80020007b00090080007f000001e809000000ffff0100f5c71002000000ffffffffffffffffffe7ee00000000000000000200000000", 0x58}], 0x1) sendfile(r3, r5, 0x0, 0x7feff000) 1.275328835s ago: executing program 6 (id=2985): socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0x14, &(0x7f0000000400)=ANY=[@ANYBLOB="18000004001000820000000034bc50b573f20e0a", @ANYRES32, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b70400000000000085000000010000001801000020756c2500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000020850000000400000095"], 0x0, 0xfffffffc, 0x0, 0x0, 0x0, 0x40, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="180000000000000000000000000000008500000007"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x2f, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r2 = socket(0x10, 0x3, 0x0) setsockopt$netlink_NETLINK_TX_RING(r2, 0x10e, 0xc, &(0x7f0000000180)={0x80000001}, 0x10) write(r2, &(0x7f0000000000)="240000001a005f0214f9f407000904ff81000000fe0000000000000008000f00fd000000", 0x24) r3 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000580)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x1, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={&(0x7f0000000000)='consume_skb\x00', r3}, 0x10) setsockopt$SO_ATTACH_FILTER(r1, 0x1, 0x1a, &(0x7f0000ab9ff0)={0x1, &(0x7f0000000000)=[{0x6}]}, 0x10) sendmmsg$inet(r0, &(0x7f0000002c40)=[{{0x0, 0x0, &(0x7f0000000e80)=[{&(0x7f0000000a80)="2a73ed35", 0x4}], 0x1, 0x0, 0xffffffffffffff3a}}], 0x1, 0x8080) 1.257834677s ago: executing program 5 (id=2986): r0 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f00000003c0)={'wlan0\x00', 0x0}) r2 = socket$nl_generic(0x10, 0x3, 0x10) r3 = bpf$BPF_PROG_GET_FD_BY_ID(0xd, &(0x7f0000000000), 0x4) sendmsg$NL80211_CMD_GET_MPP(r0, &(0x7f00000001c0)={&(0x7f0000000080)={0x10, 0x0, 0x0, 0x8}, 0xc, &(0x7f0000000180)={&(0x7f00000000c0)={0x68, 0x0, 0x8, 0x70bd2b, 0x25dfdbfc, {{}, {@void, @void}}, [@NL80211_ATTR_MAC={0xa, 0x6, @device_b}, @NL80211_ATTR_MAC={0xa, 0x6, @broadcast}, @NL80211_ATTR_MPATH_NEXT_HOP={0xa, 0x1a, @device_b}, @NL80211_ATTR_MPATH_NEXT_HOP={0xa}, @NL80211_ATTR_MAC={0xa}, @NL80211_ATTR_MPATH_NEXT_HOP={0xa, 0x1a, @broadcast}, @NL80211_ATTR_MAC={0xa, 0x6, @broadcast}]}, 0x68}, 0x1, 0x0, 0x0, 0x1}, 0x4000) ioctl$F2FS_IOC_GET_COMPRESS_OPTION(r3, 0x8002f515, &(0x7f0000000040)) r4 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000280), 0xffffffffffffffff) sendmsg$NL80211_CMD_FRAME(r2, &(0x7f0000000c00)={0x0, 0x0, &(0x7f0000000640)={&(0x7f0000000140)={0x3c, r4, 0x1, 0x0, 0x25dfdbff, {{}, {@val={0x8, 0x3, r1}, @void}}, [@NL80211_ATTR_FRAME={0x15, 0x33, @disassoc={{{0x0, 0x0, 0xa, 0x0, 0x0, 0x0, 0x1}, {0x5}, @broadcast, @device_a, @initial, {0x2, 0x6ae}}, 0x3b, @void}}]}, 0x3c}, 0x1, 0x0, 0x0, 0xc0}, 0x200c40d0) 1.131323969s ago: executing program 6 (id=2987): r0 = socket$kcm(0x10, 0x2, 0x0) r1 = socket$key(0xf, 0x3, 0x2) sendmsg$key(r1, &(0x7f0000000000)={0x500, 0x0, &(0x7f0000000040)={&(0x7f0000000080)={0x2, 0x4, 0x0, 0x9, 0xe, 0x0, 0x0, 0x0, [@sadb_address={0x5, 0x6, 0x0, 0x0, 0x0, @in6={0xa, 0x0, 0x0, @empty}}, @sadb_sa={0x2}, @sadb_address={0x5, 0x5, 0x0, 0x0, 0x0, @in6={0xa, 0x0, 0x0, @mcast1}}]}, 0x70}}, 0x0) r2 = socket(0x10, 0x3, 0x0) setsockopt$netlink_NETLINK_TX_RING(r2, 0x10e, 0xc, &(0x7f0000000040)={0x802}, 0x10) sendmsg$nl_generic(r2, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000300)={0x14, 0x52, 0x3ab3666c4349b199, 0x0, 0x0, {0x6}}, 0x14}}, 0x0) r3 = socket$alg(0x26, 0x5, 0x0) r4 = socket$inet6_tcp(0xa, 0x1, 0x0) bind$inet6(r4, &(0x7f0000000280)={0xa, 0x4e22, 0x9, @loopback, 0x6}, 0x1c) connect$inet6(r4, &(0x7f0000000080)={0xa, 0x4e22, 0x23, @loopback, 0x8}, 0x1c) r5 = bpf$PROG_LOAD(0x5, &(0x7f0000000200)={0xc, 0xe, &(0x7f0000000380)=ANY=[@ANYBLOB="b70200000a000000bfa30000000000000703000000feffff7a0af0ff0100000079a4f0ff00000000b70600007fffffff2d6405000000000065040400010000000404000001007d68b7030000000000006a0a00fe00000000850000000d000000b70000000000000095000000000000005ecefab8f2e85c6c1ca711fcd0cdfa146ec561750379585e6d839240d29c034055b67dafe6c8dc3d5d78c07fa1f7e655ce34e4d5b3185fec0e07004e60c08dc8b8dbf11e6e94d75938321a3aa502cd2424a66e6d2ef831ab7ea0c34f17e3946e0ebc622003b538dfd8e012e79578e51bc5f31e3106d1ddd6152f7cbdb9cd38bdb2209c67deca8eeb9c15ab3a14817ac61e4dd11183a13477bf01860e3670ef0e789f65f1328d6704902cbe7bc04b82d2789cb132b803000000661df28d9961b63e1a9cf6c2a660a1fe3c184b751c51160fb20b1c581e7b148ba532e6ea09c346dfebd38608b32a0080005d9a9500000000000000334d83239dd27080851dcac3c12233f9a1fb9c2aec61ce63a38d2fd50117b89a9ab359b4eea0c6e95767d42b4e14861d0227dbfd2e6d7f715a7f3deadd7130856f756436303767d2e24f29e5dad9796edb697aeea0182babd18cac1bd4f4390af9a9ceafd0002cab154ad029a1090000002780870014f51c3c975d5aec84222fd3a0ec4be3e563112f0b39501aafe234870072858dc06e7c337642d3e5a815232f5e16b089f37b3591a15c0a9be6eb18208404c1b30c3a6a71bc85018e5ff2c91018afc9ffc2cc788bee1b47683db01a469398685211dfbbae3e2ed0a50e7313bff5d4c391ddece00fc772dd6b4d4de2a41990f05ca3bdfc92c88c5b74cd36e748fafa447e2edfae4f390a8337841cef386e22cc22ee17476d738952229682e24b92533ac2a9f5a699593f0844307df70f532bcc97d3ae486aca54183fb01c73f979ca9857399537f5dc2a2d0e0000000000000578673f8b6e74ce23877a6b24db0e067345560942fa629fbef2461c96a088a22e8b15c3e233db7ab22e30d46a9d24d37cef099ece729aa218f9f44a3210223fda0f0a04935c3c90d3add8eebc8619d73415cda2130f50714600fb6241c6e955031795b2c2f56411e48455b5a8b90dfae158b94f50adab988dd8e12baf5cc9398fff00404d5d99f82e20ee6a8c88e18c2977aab37d9ac4cfc1c7b400000000000007ff57c39495c826b956ba859ac8e3c177b91bd7d5e41ff868f7ca1664fe2f3ced846891180604b6dd2499d16d7d9158ffffffff00000000ef069dc42749a89f854797f29d0001002d8c38a967c1bbe09315c298774009d8c6a16c7da308bcc87dc3addb08141bdee5d2780cfef663ddeedd005b3d96c7aabf4df517d90bdc01e73835d5a3e1a90800c66ee2b1ad76dff9f9000071414c99d4894ee7f8249dc1e3428d2129369ee1b85af6eb2eea0d0df414b315f651c8412392191fa83ee830548f11e1036a8debd64cbe359454a3f2239cfe00000000000042b8ff8c21ad702ccacad5b39eef213d1ca296d2a27798c8ce2a305c0c7d35cf4b22549a4bd92052188bd1f285f653b621491dc6aaee0200e2ff08644fb94c06006eff1be2f633c1d987591ec3db58a7bb3042ec3f771f7a1338a5c3dd35e926049fe86e09c58e273cd805deb28c13c1ed1c0d9cae846bcbfa8cce7b893ebc68578af7dc7d5e87d44ff80800000034c2b18660b080efc707e676e1fb4d5825c0ca177a4c7fbb4eda0545c00f576b2b5cc7f819abd0f885cc4806f40300966fcf1e54f5a2d38708294cd6f496e5dee734fe7da3770845cf442d488afdc0e17000000000000000000000000000000000000000000000000000005205000000dc1c568cda690d192a070886df42b27098773b45198b4a34ac977ebd4450e121d01342703f5bf030e935878a6d169c80aa4252d4ea6b8f6216ff202b5b5a182cb5e80339f9953c3093c3690d10ecb65dc5b47481edbf1f000000000000004d16d29c28eb5167e9936ed327fb237a56224e49d9ea955a5f0dec1b3ccd52364600000000000000000000000000000000000000000000000000000000000026ded4dd6fe1518cc7802043ecfe69f743f1213bf8179ecd9e5a225d67521dc728eac7d80a5656ac2cbde21d3ebfbf69ff861f4394836ddf128d6d19079e64336e7c676505c78ad67548f4b192be1827fcd95cf107753cb0a6a979d3db0c407081c6281e2d8429a863903ca75f4c7dcf050000000000001491ef060cd4403a099f32468f65bd06b4082d43e121861b5cc03f1a1561f0589e0d12969bc982ff5d8e9b986c0c6c747d9a1cc500bb892c3a16ff10feea20bdac0000000000000000ca06f256c8028e0f9b65f037b21f3289f86a6826c69fa35ba5cbc3f2db1516ffc5c6e3fa618b24a6ce16d6c78974e69115d33394e86e4b838297ba20f96936b7e4746e92dea6c5d1d33d84d96b50fb000000ae07c65b71088dd7d5d1e1bab9000000000000400000000000a5accf93bec833c13e3229432ad71d646218b5229dd88137fc7c59aa242af3bb4efb82055a3b61227ad40f52c9f2500579aca11033ec14bb9c46136a5755c47287eb00000000000000c4897e2795b6ff92e9a1e24b0b855c02f2b7add58ffb25f3390343c12aa51810134d3dfbf71f6516737be55c06d9cdcfb1e2bb10b50000eb4acff90756dba1ecf9f58afd3c19b5c4558ba9af6b7333d03fe28bc358684492aa771dbfe80745fe89ad349ffaad76ff9dd643796caffdf67af5dd476c37e7e9a84e2e5da2696e285a59b53f2fb0e16d8262c080c159ce40c14089c82759106f422582b42e3e8484ea5a6ad9aa52106eafe0e0caea1ad4cb23f3c2b8a0f455ba69ea284c268d54b43158a8b179509bd9f263b3dc1cab794c9ac57a2a7332f4d8764c302ccd5aac114482b619fca4d97a0ae75ccf11e29a854380e2f1e49db5a1517ec40bb3fa44f9959bad67ccaba76408da35e9f1534c8bd48bbd61627a2e0a74b5e6aefb7eee403502734137ff17320adda5867947257f164391c673b6079e65d7295eed164ca63e4ea26dce0fb3ce0f6591d80dfb8f386bb74b5589829b6b0679b5d65a927de6f4c09f4b742e037381c85d2ec7bb2a8152f0d6a99a0370e0cbd65744eb2efd7b65f04aa7e72588757b9612bb4253a63bb303c0c68a07f115d104f2007237a4f771416741bfd63fdfe3ae6f8bea755d8b7202c2bbae137dc1c3cf40db74a4c1c219d8ddec8f91dae2cdea1353fe062830fa1d233296ec9d8317872257e154665485e7f31cdbfbf435517faf93015b57417d84b8bc8662e097d5ba55d02d48e150695ffae3a676555b10da11751865126d19336116a1e58ab727dda6b343cc97f9479136a66f552abf8fe3d134f6d69df1cffe6740f90735f66ca54fd87800b4bda4db5e68aaccf44d24e09f8a769e3ae7bf246673f15e3d1adae4384bdb7cd30a33e30466b421feb96006c810fd3830a1c75af2580727ffc604d2b04f476acc21419fad9b1baec88974da2db29b80859bde08b85c8086e4b7f1fd568042ad5396d3179c71b1dc43291e450ce9b8d7d80fcb44966d7ad4691a378700000000000000000000000000631ffc86fe0c8124536afbfc6300ee2c00000000000000000000000000000000000000000083a5765d06da91165d24bc316607e2d69344aa1c07ff7cd7bc3d17f122478b6e81077782b9c298edc2546045feff90e7aa7da88d2489fb000a4aa838f911c1a869fa55e979e033b7707df75b93cf5b8d25242741a88f2d54a7107375b25911aa11efa3a4f87fc14f180e353615b3cb9a5cf5ea843014a277c3694a5a83266f73ef039dd739187923715548d58ff43be997e35776e37c2b7772d0873369ba559e4a9ce9a7878a9a46f2a68adae0f3f5c0715b169ff053d8f5ab73d5f738b0edc71a287418ba45a14fd1ab423d9c392d010af2cf1356c6f78d563822afd3e8fb693ef3e1f1c02289e94b15a0a2a58e9c77a6d388004396baf8af32d0bd7fef1597b20e2eec0273012e344628a8ea5bd0a9da43078b95af7186d5bf36a2e31c0ee3e1ec6accd94b7e3b47e52681128c5b6fb2afbffaa52d53080f7ef112fdffffffffffffff0c1f7b4673fc5202bcc1159ba59b9b5c996079b6c2b9cc011470ce48b53c7339135e0a1e7c90b91a84cfaf95af6edc881ca69cb3d869fcd87a294447e3eb627923970281e28528348f9d0157c80ffd70dd45fc9ae550e191e9f88a1f15c2d997c217bb6d5d24e88d07837851b391ffcf3aa2183952ef4d68757c7511179f0984960b907016a4ad6ba19f89794b545f983e94a980f83794c277dd644651d721a0d0546b3e69b8530d9391068d67cfb4fe879c23933ec59d3e728113fdf3a28800512b9cef65523490caa4f5ec30ad6ded9879843ade683b3263197964e752ca77b966ae22e73a0cbbe549306e49d0e11662cf8bcccd8198ef44911ed6b86792086cc6c758d8c4a872041e58685d4134a5ee5063b4bb7e8035442b1cba567cfee96b3b858c9086c907ddddd16414545f1b94b34f081f3e6248699060d62f236b5204993cf42c180f757938a62b5f302cae4a4a7be523be2db61b74bab36d0e63e4469969482ada533c54bdc9c2ad0b7dce02c869e6c853f92d24823036f8b5f4a6f6f89e1a9cd003c714814277f32bd6d535dcc08c992f2938b2e265ff6bfbf38694255c367867d64c50b6f7f2fd131b5b30059ea2ed6bd2b887f808dee79a76d600883085436d79381d7a4a09c4d73f8046c72b206ae3b76429c719f80ab8ff65494f35a75916d81ce89b94ed2e07540d855ebb2e78bfbb354e29d6b905f2573bec68e340472006f3738f004c24edd7c538ad9f25bda4c443bc816a8fb38081adbf5a80f5cd6fde3aadd56a9283dfdcbf7fdd1b44e717c0b405b3261f19b1c38df6331df8e84619ef307875c893a8f0a436ccfb6319000000000000000000000000001f1c8231baae9e6b907826aa7431ee8ee9deb4db6dca3e4fa3df5cd4015a3771c25bff7d305689ff0a71d821fc6ee9d2d0069a6f4cb434e8183796f89825de4d251bbf526adcf572bd39c9817a51b50859c77eebd37709f0d65667a71700006103120886e81241c7186011c6949a9ef5eadb3ca1ba74d055196c80fe796f3550eef858d924ba6a93ea687720ffe78f1e2c98686d85575fbabee88e97d4dea9b7d8416d62f962b9202528fcc38eea7d2b4efca4e14fcbcc15e8"], &(0x7f0000000340)='syzkaller\x00'}, 0x48) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000080)={r5, 0x18000000000002a0, 0x18, 0x6000002c, &(0x7f0000000100)="b9ff03316844268cb89e14f00800fee0050000000000002f77fbac141416e000030a44079f03b180006000000000845013f2325f003901050b038da1880b25181aa59d943be3f4aed50ea5a6b8686731cb89ef77123c899b699eeaa8eaa0073461119663906400f30c0600000000000059b6d3296e8ca31bce1d8392078b72f24996ae17dffc2e43c8174b54b620636894aaacf28ff62616363c70a440aec4014c0000c0adc043084617d7ecf41effff38cae870b9a1df48b238190da450296b0ac01496ace23eefc9d4246dd14afbf79a2283a0bb7e1d235f3df126c3acc240d7da058f6efa6d1f5f7ff400"/254, 0x0, 0xfe, 0x60000000, 0x0, 0xffffff23}, 0x2c) sendmmsg$inet6(r4, &(0x7f0000001cc0)=[{{0x0, 0x0, &(0x7f0000000240)=[{&(0x7f0000000780)="00dd91fce207bc368c188d5d467ac5e8a63b2bf1634a7497d9391ba4775d0dfa6888b6388d2b12f0baa83448480033bf0abd0776856627bce236487c4f", 0x3d}], 0x1}}], 0x1, 0x4000001) r6 = socket$inet6_tcp(0xa, 0x1, 0x0) connect$inet6(r6, &(0x7f0000000000)={0xa, 0x4e23, 0x9, @initdev={0xfe, 0x88, '\x00', 0x0, 0x0}, 0x4}, 0x1c) bind$inet6(r6, &(0x7f0000000140)={0xa, 0x4e22, 0x0, @ipv4={'\x00', '\xff\xff', @local}}, 0x1c) r7 = socket$netlink(0x10, 0x3, 0x8000000004) writev(r7, &(0x7f00000000c0)=[{&(0x7f0000000000)="580000001400192340834b80040d8c560a067fbc45ff810500000000000058000b480400945f6400947e570028925a01000000000000008000f0fffeffe809000000fff5dd0000001000010002081000418e00000a04fcff", 0x58}], 0x1) recvmmsg(r4, &(0x7f0000000700)=[{{&(0x7f0000000300)=@hci, 0x80, &(0x7f00000001c0)=[{&(0x7f0000000880)=""/194, 0xc2}], 0x1}, 0x5a76}], 0x1, 0x1, 0x0) ioctl$sock_kcm_SIOCKCMUNATTACH(r2, 0x89e1, &(0x7f0000000000)={r3}) sendmsg$inet(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f00000001c0), 0x0, 0x0, 0x0, 0x1f00c00e}, 0x0) r8 = socket$nl_generic(0x10, 0x3, 0x10) r9 = syz_genetlink_get_family_id$mptcp(&(0x7f0000000000), 0xffffffffffffffff) sendmsg$MPTCP_PM_CMD_ADD_ADDR(r8, &(0x7f00000006c0)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000180)={0x30, r9, 0x1, 0x0, 0x2, {}, [@MPTCP_PM_ATTR_ADDR={0x1c, 0x1, 0x0, 0x1, [@MPTCP_PM_ADDR_ATTR_FAMILY={0x6, 0x1, 0x2}, @MPTCP_PM_ADDR_ATTR_ADDR4={0x8, 0x3, @local}, @MPTCP_PM_ADDR_ATTR_IF_IDX={0x8}]}]}, 0x30}, 0x1, 0x0, 0x0, 0xaa34a4cfdf933201}, 0x10) sendmsg$MPTCP_PM_CMD_ADD_ADDR(r2, &(0x7f0000000200)={&(0x7f0000000080)={0x10, 0x0, 0x0, 0x100}, 0xc, &(0x7f00000000c0)={&(0x7f0000000140)={0xa4, r9, 0x800, 0x70bd28, 0x25dfdbfb, {}, [@MPTCP_PM_ATTR_SUBFLOWS={0x8, 0x3, 0x2}, @MPTCP_PM_ATTR_TOKEN={0x8, 0x4, 0x4}, @MPTCP_PM_ATTR_SUBFLOWS={0x8}, @MPTCP_PM_ATTR_SUBFLOWS={0x8, 0x3, 0x8}, @MPTCP_PM_ATTR_ADDR={0x3c, 0x1, 0x0, 0x1, [@MPTCP_PM_ADDR_ATTR_PORT={0x6, 0x5, 0x4e21}, @MPTCP_PM_ADDR_ATTR_ID={0x5, 0x2, 0x1a}, @MPTCP_PM_ADDR_ATTR_FAMILY={0x6, 0x1, 0xa}, @MPTCP_PM_ADDR_ATTR_ADDR4={0x8, 0x3, @rand_addr=0x64010100}, @MPTCP_PM_ADDR_ATTR_PORT={0x6, 0x5, 0x4e22}, @MPTCP_PM_ADDR_ATTR_ID={0x5, 0x2, 0x2b}, @MPTCP_PM_ADDR_ATTR_ID={0x5, 0x2, 0x4}]}, @MPTCP_PM_ATTR_ADDR={0x1c, 0x1, 0x0, 0x1, [@MPTCP_PM_ADDR_ATTR_FLAGS={0x8, 0x6, 0x11}, @MPTCP_PM_ADDR_ATTR_FAMILY={0x6, 0x1, 0x2}, @MPTCP_PM_ADDR_ATTR_FLAGS={0x8, 0x6, 0x3}]}, @MPTCP_PM_ATTR_TOKEN={0x8, 0x4, 0x7}, @MPTCP_PM_ATTR_RCV_ADD_ADDRS={0x8}, @MPTCP_PM_ATTR_LOC_ID={0x5, 0x5, 0x1}]}, 0xa4}, 0x1, 0x0, 0x0, 0x4}, 0x1) 1.130169444s ago: executing program 1 (id=2988): r0 = socket(0x23, 0x2, 0x53f0800) bpf$TOKEN_CREATE(0x24, &(0x7f0000000040)={0x0, r0}, 0x8) r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='memory.events\x00', 0x275a, 0x0) write$cgroup_subtree(r1, &(0x7f0000000100)=ANY=[], 0x32600) mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x2000001, 0x12, r1, 0x0) r2 = bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000100)={0x2, 0x4, 0x8, 0x1, 0x80, 0xffffffffffffffff, 0xfffffffd, '\x00', 0x0, 0xffffffffffffffff, 0x80, 0x0, 0x4}, 0x50) sendmsg$sock(r0, &(0x7f0000000a40)={&(0x7f0000000200)=@nl=@proc={0x10, 0x0, 0x25dfdbfd, 0x4000}, 0x80, &(0x7f00000009c0)=[{&(0x7f00000006c0)="9865d5f9adceefbc3c5c405bd58140bb1a0e58bb4f0291c5f1a96168fa71a28e89849cdebfd2138ac0d6ece68f65346daeacdfbd989a5d836b61b075f05e751159b729d14202222cd73a3871fdda5452314d0333d2476def407ca84142f58bef60a6b1187c2afddfe0e7b5238fd45b749a6c29c323b0b1831ef522b653208008339fdbbfd8f68d112bfb7de44611559ae665d8189a585ea36b0c991cfc86e9d301faea6648c8795b31b93591bdb0241bfe17c7d6dd02e24824b273d8c98778891042a7e10199e195c7966f66c8106bbe1687d2fec7f020663932", 0xda}, {&(0x7f0000000180)}, {&(0x7f0000000280)="a2c35699ea33df165221e2a002b97f4fd9b504cc3e52bed9d2e41763dfa5d9c2c27e302c19f65d1b55757e061c1a5af63d5760b371dcd6ddac2fd8cb9f9ff631f76776958488c67305bc458cc76117c8e4e95d6ff121a393af672d89567447c330f1bd1fa59071b8052d1e2e9d450e551dccd3475d3444481d0b13b2055e7022ad823a83b2735a71e0b555cd82515677e36b1473d090d183b79f864361546dc2d1276e6e", 0xa4}, {&(0x7f00000007c0)="ff7ec0f5394ac6b475cc3d9182f6b339c30685111af81fa74794adfb0a543ab259a1068bf32df237b994a02b72343861a2f85e4254333be4da11cb0d3f389ff7ac3b8a9f5eccb0aadee036ce9270fe6eb522a68de9d60213adcfdd418282f5a3b8ef3d6218dab0f4506538120f86426d9caf10c5157a292980f8f07a0894d7527bfe34fe87e1e39f96571e6b1f5cae027069", 0x92}, {&(0x7f0000000880)="0ecea7c5528daf76c02afd6531b3b834f53bc9e636b6768d74544900b380376444abc91be3f879453fa11d461b348388c5690ec2cad3897d8f2433f84b7c4bb5ff7c1fa7baf2c580164cf080a55d66e83445198b31053e898644394c1a411d503e24e0dffc804ad346e31b925aa38616a995c11b6eb0e50709d0ebfd612f35e598c0d70d2cf60ed38518e011fe3ff70ff54d72d99498e0cd52c12af3d54947cee9b8", 0xa2}, {&(0x7f0000000940)="45b9a79c3218418aad82d2298eaf7e473b8e30efea2316a15d40f27e4db8dd7dbcf5a689fe0f99b19f8bd4fb2b9df913a8f6dbdae0980ec4885a5e9fc483f64a4f9f5ad7ff9e9e56e5a282c59f452798bfc7580b771f762e720cc70e596cb0", 0x5f}], 0x6}, 0x0) r3 = socket$inet(0x2, 0x3, 0x8) setsockopt$IPT_SO_SET_REPLACE(r3, 0x0, 0x40, &(0x7f0000000340)=@raw={'raw\x00', 0x8, 0x3, 0x308, 0x1a0, 0xe138, 0x198, 0x1a0, 0x198, 0x270, 0x358, 0x358, 0x270, 0x358, 0x3, 0x0, {[{{@ip={@broadcast, @loopback, 0x0, 0x0, 'nicvf0\x00', 'veth0_to_bond\x00', {}, {}, 0x0, 0x0, 0x20}, 0x0, 0x158, 0x1a0, 0x0, {}, [@common=@unspec=@string={{0xc0}, {0x0, 0x0, 'fsm\x00', "0d0003000000000000000404fff0cf81dfd28c89544e14cd3e01dd24289831867846c88621039b284c3ff45c429955608b9952bed40ce4a8c1df6cdbdb7e2378d5afd35f4c16827f55b3af494e39e8fb330200000000000032b6a99a8d87298e88a94cb519f5c17631af916a0002000000000000000000000000000000080049", 0x4}}, @inet=@rpfilter={{0x28}}]}, @unspec=@CT0={0x48, 'CT\x00', 0x0, {0x1, 0x3, 0x3078, 0x5, 'syz1\x00', {0x5}}}}, {{@uncond, 0x0, 0x70, 0xd0}, @common=@CLUSTERIP={0x60, 'CLUSTERIP\x00', 0x0, {0x0, @local, 0xc, 0x6, [0x97f4, 0x15, 0x33, 0x29, 0x7, 0x3c, 0x4, 0x26, 0x9, 0xc, 0xf, 0x1d, 0x3e, 0x1e, 0x30], 0x0, 0x0, 0x3}}}], {{'\x00', 0x0, 0x70, 0x98}, {0x28, '\x00', 0x4}}}}, 0x368) bpf$PROG_LOAD(0x5, &(0x7f00000004c0)={0x1f, 0x10, &(0x7f0000000080)=ANY=[@ANYBLOB="18000000000000000000000000000000b7080000000000007b8af8ff00000000b5080000000000007b8af0ff00000000bfa100000000000007010000f8ffffffbfa400000000000007040000f0ffffffb70200000800000018020000", @ANYRES32=r2, @ANYBLOB="0000000000000000b71d000008000000850000008c0000009500000000000000"], &(0x7f0000000000)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) 1.068257283s ago: executing program 2 (id=2990): r0 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_tcp_int(r0, 0x6, 0x13, &(0x7f0000000040)=0x100000001, 0x4) setsockopt$inet6_tcp_TCP_REPAIR_QUEUE(r0, 0x6, 0x14, &(0x7f0000000280)=0x1, 0x4) connect$inet6(r0, &(0x7f0000000080)={0xa, 0x0, 0x0, @ipv4={'\x00', '\xff\xff', @multicast2}}, 0x1c) sendto$inet6(r0, &(0x7f00000001c0)="a6e2976b5c4383036d32dadd2e144d8645ca8d1b230e105614396838da83c754887e7bea2f35d4ea667817d90d532af065f2e398dd9081ea16f8b371a202a6f9e505bbc964a0d3880bf0104a0a0a2f0d311efee1637e85a0125b38f961918f99bf9c2c146e42327f178dc2b3d4936e7f7f0a79f74ba464d83ab41742d1186776dc1779b5c50ac82d0fa8f9e42074b5b6079207fb21e718080907964669be539791e3e98687ee059853", 0xfffffffffffffcc1, 0x840, 0x0, 0x56) mmap(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x0, 0x12, r0, 0x604ab000) getsockopt$inet6_tcp_TCP_ZEROCOPY_RECEIVE(r0, 0x6, 0x23, &(0x7f0000000140)={&(0x7f0000ffc000/0x1000)=nil, 0x1000, 0x0, 0x0, 0x0, &(0x7f0000001380)=""/4075, 0xfeb, 0x1, 0x0}, &(0x7f0000000000)=0x40) getsockopt$inet6_tcp_TCP_ZEROCOPY_RECEIVE(r0, 0x6, 0x23, &(0x7f0000000480)={&(0x7f0000ffd000/0x3000)=nil, 0x3000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, &(0x7f0000000300)=0x40) r1 = openat$tun(0xffffffffffffff9c, &(0x7f0000000000), 0x40241, 0x0) ioctl$TUNSETIFF(r1, 0x400454ca, &(0x7f0000000200)={'syzkaller1\x00', 0xc201}) pipe(&(0x7f00000000c0)={0xffffffffffffffff}) r3 = socket(0x2a, 0x2, 0x0) sendmsg$TIPC_NL_LINK_GET(0xffffffffffffffff, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000000280)={0x0, 0x24}}, 0x0) getsockname$packet(r3, &(0x7f0000000200)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000001480)=0x14) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000380)=@newqdisc={0x2c, 0x24, 0xf0b, 0x0, 0x0, {0x0, 0x0, 0x0, r4, {}, {0xffff, 0xffff}}, [@qdisc_kind_options=@q_drr={0x8}]}, 0x2c}}, 0x0) sendmsg$nl_route_sched(r3, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000500)={&(0x7f00000006c0)=@newtfilter={0x4c, 0x2c, 0xd27, 0x0, 0x0, {0x0, 0x0, 0x0, r4, {0xfffa, 0x2}, {}, {0xa, 0xfff9}}, [@TCA_CHAIN={0x8, 0xb, 0xec}, @filter_kind_options=@f_bpf={{0x8}, {0x18, 0x2, [@TCA_BPF_FD={0x8}, @TCA_BPF_OPS={{0x6}, {0x4}}]}}]}, 0x4c}}, 0x24004000) r5 = socket$netlink(0x10, 0x3, 0x0) sendmmsg(r5, &(0x7f00000002c0), 0x40000000000009f, 0x0) setsockopt$inet_sctp6_SCTP_SOCKOPT_BINDX_REM(r2, 0x84, 0x65, &(0x7f0000000340)=[@in={0x2, 0x4e23, @rand_addr=0x64010101}, @in6={0xa, 0x4e21, 0x0, @mcast2, 0x4}, @in6={0xa, 0x4e21, 0xffffffff, @private0, 0x9}, @in6={0xa, 0x4e22, 0x4, @mcast1, 0x7}, @in6={0xa, 0x4e20, 0xd, @ipv4={'\x00', '\xff\xff', @multicast2}, 0x8}, @in={0x2, 0x4e21, @rand_addr=0x64010102}], 0x90) r6 = socket$kcm(0x2, 0xa, 0x2) ioctl$SIOCSIFHWADDR(r6, 0x8914, &(0x7f0000000040)={'syzkaller1\x00', @broadcast}) write$tun(r1, &(0x7f0000000100)=ANY=[@ANYBLOB="03000800010009000000140000004619002000680000ff029078ac1e0101ac14141107038b0014019078ac1414aa"], 0x2e) r7 = socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$nl80211(&(0x7f0000003180), r7) sendmsg$NL80211_CMD_SET_TX_BITRATE_MASK(r7, 0x0, 0x10) syz_genetlink_get_family_id$tipc2(0x0, r7) getsockopt$inet6_mtu(r0, 0x29, 0x17, &(0x7f00000004c0), &(0x7f0000000500)=0x4) syz_genetlink_get_family_id$ipvs(0x0, r7) socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX_80211(r7, 0x8933, &(0x7f0000004640)={'wlan1\x00'}) 1.01158674s ago: executing program 5 (id=2991): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) close(r0) r1 = socket$inet6_udp(0xa, 0x2, 0x0) setsockopt$IP6T_SO_SET_REPLACE(r1, 0x29, 0x40, &(0x7f0000001280)=@nat={'nat\x00', 0x2, 0x5, 0x4b0, 0xf0, 0x220, 0xffffffff, 0x0, 0x220, 0x3e0, 0x3e0, 0xffffffff, 0x3e0, 0x3e0, 0x5, 0x0, {[{{@uncond, 0x0, 0xa8, 0xf0}, @REDIRECT={0x48, 'REDIRECT\x00', 0x0, {0x2, @ipv4=@multicast1, @ipv6=@empty, @icmp_id=0x65, @gre_key=0x732}}}, {{@uncond, 0x0, 0xe8, 0x130, 0x0, {}, [@common=@unspec=@connlimit={{0x40}, {[], 0x0, 0x2}}]}, @unspec=@SNAT1={0x48, 'SNAT\x00', 0x1, {0x0, @ipv4=@loopback, @ipv6=@private0, @icmp_id, @port=0x4e22}}}, {{@ipv6={@ipv4={'\x00', '\xff\xff', @multicast2}, @private0, [0xffffffff, 0xff000000, 0xffffff00, 0xffffff00], [0xffffffff, 0xffffffff, 0xffffffff, 0xffffffff], 'syzkaller1\x00', 'pim6reg1\x00', {0xff}, {0xff}, 0x33, 0x2, 0x5, 0x20}, 0x0, 0xa8, 0xf0}, @NETMAP={0x48, 'NETMAP\x00', 0x0, {0x0, @ipv6=@ipv4={'\x00', '\xff\xff', @multicast1}, @ipv6=@rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x02', @gre_key, @gre_key}}}, {{@ipv6={@remote, @mcast1, [], [0x0, 0xffffffff], 'ipvlan0\x00', 'pim6reg\x00'}, 0x0, 0xa8, 0xd0}, @common=@unspec=@NFQUEUE1={0x28}}], {{'\x00', 0x0, 0xa8, 0xd0}, {0x28}}}}, 0x510) r2 = socket$nl_netfilter(0x10, 0x3, 0xc) close(r2) r3 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r3, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000240)=ANY=[@ANYBLOB="140300001000010076466a03134452c70500000a28000000000a030000000000000000000a00000708000240000000020900010073797a31000000002c000000030a010100000000000000000a00000709fb000073797a31000000000900030073797a320000000014000000110001"], 0x7c}, 0x1, 0x0, 0x0, 0x1}, 0x0) r4 = socket$alg(0x26, 0x5, 0x0) bind$alg(r4, &(0x7f00000007c0)={0x26, 'skcipher\x00', 0x0, 0x0, 'cbc(sm4)\x00'}, 0x58) setsockopt$ALG_SET_KEY(r4, 0x117, 0x1, &(0x7f0000001280)="b7f2288a911993f08d3aaea2bc0000de", 0x10) r5 = accept$alg(r4, 0x0, 0x0) syz_genetlink_get_family_id$nl80211(&(0x7f0000000240), r5) getsockopt$SO_COOKIE(r3, 0x1, 0x39, &(0x7f0000000000), &(0x7f00000001c0)=0x8) sendmsg$NFT_BATCH(r3, &(0x7f0000009b40)={0x0, 0x0, &(0x7f0000009b00)={&(0x7f0000000100)=ANY=[@ANYBLOB="140000001000010000000000000000000500000a4c000000090a010400000000000000000a0000040900010073797a310000000008000540000000020900020073797a310000000008000a40fffffffc080003400000001408000c4000000e45400000000c0a010100000000000000000a0000060900020073797a31000000000900010073797a310000000014000380100000800c00018006000100d103000014000000110001"], 0xb4}, 0x1, 0x0, 0x0, 0x4000850}, 0x40) sendmsg$NFT_BATCH(r2, &(0x7f0000009b40)={0x0, 0x0, &(0x7f0000009b00)={&(0x7f00000004c0)=ANY=[@ANYBLOB="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"], 0x160}, 0x1, 0x0, 0x0, 0x4004850}, 0x40) sendmsg$NFT_BATCH(r0, &(0x7f0000009b40)={0x0, 0x0, &(0x7f0000009b00)={&(0x7f00000002c0)=ANY=[@ANYBLOB="140000001000010000000000000000000500000a480000000c0a010100000000000000000a0000060900020073797a31000000000900010073797a31000000001c000380180000800c0001800600010000"], 0x70}, 0x1, 0x0, 0x0, 0x4000850}, 0x40) 963.449622ms ago: executing program 7 (id=2992): r0 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_ipv6_tunnel_SIOCDELTUNNEL(0xffffffffffffffff, 0x89f2, &(0x7f0000001180)={'syztnl2\x00', &(0x7f0000001100)={'syztnl0\x00', 0x0, 0x29, 0x3, 0x2, 0x6, 0x8, @empty, @mcast2, 0x8, 0x80, 0x100, 0x5}}) sendmsg$nl_route(r0, &(0x7f0000001240)={&(0x7f00000010c0)={0x10, 0x0, 0x0, 0x280}, 0xc, &(0x7f0000001200)={&(0x7f0000001300)=ANY=[@ANYBLOB="900000001900000429bd7000fddbdf258014800bfe01fe022c8df2aa06001d00000400004200088006c2b1f06f9fdca1b90b2f5c2e000052624e82c5bfee5d15271c56402a558e16599ab4a49f2cb7b6ca5aa1090c94b87dd4c79f1b6052f731aa8f50daadc40000080007006401010106001c004e21000008000400", @ANYRES32=r1, @ANYBLOB="06001d004e24003fb7000100ac1e0101"], 0x90}}, 0x88) r2 = socket(0x2, 0x80805, 0x0) r3 = socket$l2tp(0x2, 0x2, 0x73) setsockopt$SO_BINDTODEVICE(r3, 0x1, 0x19, &(0x7f0000000200)='veth1_to_bridge\x00', 0x10) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$sock_SIOCGIFINDEX(r4, 0x8933, &(0x7f00000002c0)={'erspan0\x00', 0x0}) setsockopt$inet_mreqn(r3, 0x0, 0x20, &(0x7f0000000040)={@rand_addr=0x64010102, @empty, r5}, 0xc) getsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX3(r2, 0x84, 0x6f, &(0x7f0000000000)={0x0, 0x10, &(0x7f0000000380)=[@in={0x2, 0x0, @initdev={0xac, 0x1e, 0x0, 0x0}}]}, &(0x7f0000000180)=0x10) getsockopt$bt_hci(r2, 0x84, 0x80, &(0x7f0000000000)=""/4102, &(0x7f0000001080)=0x1006) getsockopt$IP_VS_SO_GET_INFO(r0, 0x0, 0x481, &(0x7f0000001280), &(0x7f00000012c0)=0xc) gettid() r6 = socket$nl_generic(0x10, 0x3, 0x10) setsockopt$netlink_NETLINK_ADD_MEMBERSHIP(r6, 0x10e, 0x1, &(0x7f0000000000)=0x4, 0x4) bpf$PROG_LOAD(0x5, &(0x7f00000054c0)={0x3, 0x16, &(0x7f0000000280)=ANY=[@ANYBLOB="7912b8000000000061138c0000000000bf2000000000000007000000080063033d030100000000009500003a000000006916000000000000bf6700000000000066060500fcff03006706000002000000760300000ee60060bf050000000000003c6500bf000000006507f9ff01000000070700004cdfffff1e75040000000000bf54000000000000070400000400f9ffad43010000000000d5000000000000000500000000000000950000000000000032410000000000000054bb12dc8c27df8ecfc7bdd2d17f2f1754558f22dd399703d6c4f6f3be0b369289aa6812b8e007e733a9a4f16d0a3e1282ee45a010fb94fe9de56c9d8a814261bdb94a05000000c6c60bf7a13ba1fcf1111ce4fc0d742a81762bab8395fa64810b5b40d893ea8fe0ffffff7f1b546cad3f1d5af65706fd4f68795cce6cf16ab689b555202da2e0ec2871a51445dc8da39e5b0ab71ca9b901627b562ed84b026002d4519af619e3cca4d69e0dee080006774a8f3e691700ec88158f02001b0000c81c8b297dff0445a13d0045fb3cda32a673a6bb55d8c80800dce431e56723888fb126a1403d2b63f16fb2ad9bc117aba7cbebe174aba210d739a018f9bbec63222d20cedbc4d03723f1c932b3a6aa57f1ad2e99e0e67a993716d20000009f0f53acbb40b401e3738270b3156268784f2af9e4bcf8b07a10d6735154be1602f9dd1d7d4301e00000000000460bcc5989ec85e3cbcb6bcfaf0000000000000000bc00f674629709e7e78f4ddc211bc3ebf0bd9d42ca019dd5d0861cd64722cf74686ebfbe2562671cd47840f81d2a8f8f9be3bcd19dc6840aa7afaab43176e65ec1118d50d1e827f3472f4445d253887a5ad103649afa17690884f800031e03a651bb96589a7eab049b1bd47287cd31cc43ea0ffb567b40407d000000000000000000000000005f37d83f84e98a523d80bd0d0d703f37ca363f601ae899a56715a0a62a26a0f6a5480a55c22fe394ae0000000000000000000000000000437d57defb79ea000500000000000000000000f014a4a318ba48d35ae9f438000000000000db894b62a614cb1fdd46619c5d2200000000000700000000000000000000006dcd2f421400f69947e4f26e099c9e8369080663c909b7e7c87e3b5e8e5a6df77c8f7338cd5a85f211a41b5d529d4243e47d7ab0d5991756b59d363ba30b18fc2ff189a4e8db38ab97c6a125e2785619e84c6a2b50f0e3ff83ef5149aff43dc899fdebdc2c496e6bdd4dd4d21f06fe133f4444272c5f0839ad663100452a6c6b6421f7e89a33b339401eee2cd466ab2a93a1ee7fb8a9e455ba1c6e17b02a1cd7bf35d36cf5b2a0f063469ae0d0b9fc042b48e98626eb0f9754d8cbbefa3079fe63063047baff09e9aaf7600000fba9a88db9ebef86f7cb522a784bb6d37e5f802757a15c6735138b493db9df53440a63fc565a0b190a710ae1e6807cbeb415ac841e94b706974160a60a14e571274f333d23186143b95514c79b50994cb39cda343bda8f01cf8ec7cdfdace0289e83ce50a57d68bfecfaf69fe7ff5b0375a47d3eb57b41d8a0589b82a1cf1149ba3f21ea2b65433321eb1a6f04ecc713c2b26d27baa49e54c2babec86335b9f418b5a5eb997bc9dd65197124b9aa80fc4aa8defb986bf05c41b919886bb81ecd3d24cf9ecc7004000000000000002c70d32f5d55ef2a2cf7560cb2884f46a92b3c25550f73e407fc5d514b2b7a6b690e290e676266addb7d96e723dec9c418eec8c48dffb6f432b4d5fef16e4f0051ba7efc690022c3f62b37cb5682d8bfdfc637ad3bf089ef0117bcd395322fcfb8e8e0a6e2babceb5f289b1d991770681192bcd0b584c3497e455f30ab918a690514a87a7d8e1d5f169a4e680e9c390071d26f2e0e26fc062f2785f14c0404fe01fb4000000000000000577dcb1698a9021a36d73ed03651c1937b2c84046023a1a0a87b208e33ad2d7c2892b176877264e1d699b7401eb917b289f6f67060fda0fa44b54bd87517a2bf09dba7209e41db4288b61bda5960952c45e5c55f2cd68bf9c6ff33e46109584bf42e8696ef1876564fef6f24cbbed0db8ab7fda1ffcc8c9fd4ab2cbe8f8df8e5535b12a942a948eacdaf308d48932064cfc3329da74f6f3e4409d6764a29680e312bf1a0143180e6493c9201ea916e6c9b2566c558ad88d9f7c0aebf82f5807eecefa97ada9bbd9e478e5d7748ee188bc719ca7a73dce5b6758a767c4c6b7572ab25eb2d73986379d5685cb438fe7091d097cc8f33fc0f83dee76603d6580f1c8fc4c37efd305ccc5a25678180425718bb9344e60dda8dae2677bb602d29aa0810616a2fdbca7020d72291b592b84223e2522ee01f5bdaa0fc4eb8d71d948a2baccf3ea2aa79d4d9069d8c0000000000000000000000321cd67859b4567badee56f158406f08683bdc5ffe2dedc916000c71f922fa2dfead7535999436a4aeb908781893479319b8b55e00d90ae6f09f06be2a0fc0bc17bef53331208112a0132350c0c5dd4607547079acc9471300dea6ae01742dccdae69f932cef80bca1bfcb57b9c852cf8358a580044772a80f20de36f707385380155be8907029d039a1d1447fc06b7020221e0d439f3f47edcf12f913dc8b6389a540340ae37804728ea65352e630c2e90424d58d72fdc1b28403e1dc7aad238b81df3b2d4166d656c6a9c73554bdf4f7312a4c0271e0eb45b4a596b7fa928ac3683f09fdaca46226c1df2c6c866cb4412d17d3d52c38cf0f7bd3b0eea2d4e06d061bb1b7c8c52f37f4036932d00028abd4527ffd639d7b16860033754ab13419429e5e39f290751ab6bd9392aef5519cd8c16e1f1cb1f225cc84a1a62497c1e436142fe28048a2b4d133905814a1808bc5b3e45eaa9eaebd946bee806968aeeb5a9eed87eba3d25d0b412a1b4cf2d419a58b09fc275c4395a0bd332eb538321465043e5967dd22459d0f52190a37f93ab823431a81fa6f54de61637fd473e19a6f567fead100e7d8cac149b66ebe9973af846146c62065a64854ed21e8b6f6fbe78474b753915a42efcb7da8ad18bacff8d69e0af1ca1f8174530a21820738412b100b54ee9b4a0dc22d5fe1cadecaea73fbfad087b19ce53177488d230539c5174f572a539d9d7c42698aa82bccf030ad393f25c10baa17e919f647d0e31877b7a6c1d8d86583f884a0c1da07b9b6dced06cdeb0094aa635a82f233b5993926b8970a0840ba116a7d20a40efb3bd03c4bdf380a2510a0a1ea69811ded68943c71218b42783b38959753978f222e1396b9b36dee2ce205122a000577cab29f48bff4f88c417e6bf5fb430d925596f29aca8677ca5a113aeaa5e0252ca17244d6c76e78ff1bbd81a71c4dfc72431d7f1126f8bdbf4056ee0f58a1bf83d53b1de07489541182dc4ee0f573c25b6c15dad930bc7a770b5a4f407d7a879db7185f15f80100000000000000739cc97db66ec6b925955d9a591808947fdd8d484ad27353230a449fdf87fc46c73b852fec931cfb6718acf3315bf5e577d00beb77c5514bc05d576a81345a03ad7aae74c5d2b77d45718348aed4fcbcd1441ff31b8f038824a989a9446a4a69367b228b3d174230b7320fc4d3c03368db573816dd0c04e65d6f8ce48283e76abdddbb965e0b2568e93c9cc5494a55421793f562c50c53f876cbde93c5cc7a3099c99d9775af010ba093f8a13b771782a3cfb24fbde6ef763e20c613164ab014d1906c4e098f1431b6b2886a155c4bac2911d7ee6a646f5913205ebd175e68975b93c330e4f9131788026b3b7cd5b6452c9e17452ac70000000000000000000000c71185f72436640fd4294fc3da230f9065095be47d7a848df12316c3c8b184fe110b061987fd79cf7d83443e69d08e2e839ae4fbe26ef7764f4870ef3bd0ec12eb45f60ca10dbfe329271f0bc93b28798e982e0dd32fc14bd4313c63b2dbb568f33fb45acad2dc7f438ea162c0709c0bbe1ea13e1e47399286e8143f400d7adf5f891f547c7e69e455706626814ee49274667f47769293451fd49885a152b8d2cf18febc7993f4a93893c6c7b7e46a230359ef2443e6bb9f50bb0faa5eaafd3ed6d551600c46b58a29fd7ccbbb0616f0be27302b683eccd742791d97f4a1daa0447f004426fd09b67d926f51525da63987bc73af35b28277879089b89fff6edab2fa1caf660a46a1a9f09e2d255b1c4be95c7c33dc81857f580e36c0a78d94dd879ee18de4a6475858d2ded2e3427ae007cc6f8e5e99aa146667f71ad83f3ddcf5db2dc396d7da499b65cd98125f20c284fc84d6a70be1de44b49c82022225292199c75cc26beab98dce4c331ed722f01d0d6314a72416814a565f4d90a5f8a255810f23541082f4b06f451e4724cd882f4d589600000000005854ca490d7df9cc293547c9a51aecc7a92f417f6a4d327737f1b198252358832dbe43507844a0cc112af4ce457c173fa64174ffd5ab9501eeb85508ebb60e169c0736c5960f2fe0879c77fff7b241439686cb4db435d6a7aa7c1f4a6433e77d3e547bbe6cf5b5d93a491ab4bba1ea7a1e6f37618b1d74cff3630d85a210092211be1ec12a30891eef590b19cdde055d626818c64e1c56b8918f33441a64b54946571b7bc70fb065d3bb1647f6f989ab8159e6d1cfa6c0ec7329d7d2263ca22144bf17d8692f03b592bd0f610096094da096233984e95b9a8216a6e60a104ae0bb5f77ac70b4390ea2cb6f6c40c928fae489f447240a25fd0a5bd9d5b6cd2a98f8804862922c11229c4e45c765e4d3348af3d3aadd5cc24b3943"], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @sched_cls}, 0x48) bind$netlink(r6, &(0x7f00000002c0), 0xc) setsockopt$inet_sctp6_SCTP_I_WANT_MAPPED_V4_ADDR(r2, 0x84, 0xc, &(0x7f0000001040)=0x7fff, 0x4) 892.482752ms ago: executing program 6 (id=2993): r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r1 = bpf$MAP_CREATE(0x0, &(0x7f0000000280)=@base={0xa, 0x4, 0xdd, 0xa}, 0x50) bpf$PROG_LOAD(0x5, &(0x7f00000007c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018010000", @ANYRES32, @ANYBLOB="0000000000000000b70800000000396f7b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000002400000095"], 0x0, 0xffffffff, 0x0, 0x0, 0x0, 0x43, '\x00', 0x0, @fallback=0xa, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$PROG_LOAD(0x5, &(0x7f0000000680)={0x4, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="18090000000000000000000000000000850000006d0000001801000020696c250000"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x8, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffc}, 0x94) r2 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0x14, &(0x7f0000000400)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r1, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704"], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000bc0)={&(0x7f0000000940)='percpu_alloc_percpu\x00', r2}, 0x10) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000003c0)={0x3, 0x4, &(0x7f0000000200)=ANY=[@ANYBLOB="18020000e41342a50f000000000000000000000000850000002a000000950000"], &(0x7f0000000080)='GPL\x00'}, 0x94) r3 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r4 = syz_genetlink_get_family_id$netlbl_unlabel(&(0x7f00000001c0), r3) sendmsg$NLBL_UNLABEL_C_STATICREMOVEDEF(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000200)={0x30, r4, 0x5, 0x0, 0x0, {0x7, 0x74, 0x600}, [@NLBL_UNLABEL_A_IPV4MASK={0x8, 0x2}, @NLBL_UNLABEL_A_IPV6MASK={0x14, 0x3, @loopback}]}, 0x30}, 0x1, 0xffffffff00000003}, 0x0) r5 = syz_init_net_socket$bt_l2cap(0x1f, 0x1, 0x0) getsockopt$bt_l2cap_L2CAP_LM(r5, 0x6, 0x3, &(0x7f0000000000), &(0x7f00000000c0)=0x4) 890.054262ms ago: executing program 1 (id=2994): r0 = socket$nl_route(0x10, 0x3, 0x0) socketpair$unix(0x1, 0x6, 0x0, &(0x7f0000000000)) sendmsg$nl_route(r0, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000580)={&(0x7f0000000740)=@newlink={0x40, 0x10, 0x403, 0x0, 0x1000000, {0x0, 0x0, 0x0, 0x0, 0x235, 0x2881}, [@IFLA_LINKINFO={0x18, 0x12, 0x0, 0x1, @wireguard={{0xe}, {0x4}}}, @IFLA_MTU={0x8, 0x4, 0x5}]}, 0x40}, 0x1, 0xba01, 0x0, 0x4000080}, 0x0) 805.116516ms ago: executing program 6 (id=2995): r0 = socket$alg(0x26, 0x5, 0x0) bind$alg(r0, &(0x7f0000000000)={0x26, 'skcipher\x00', 0x0, 0x0, 'cbc-serpent-sse2\x00'}, 0x58) setsockopt$ALG_SET_KEY(r0, 0x117, 0x1, 0x0, 0x0) accept(r0, &(0x7f0000000080)=@in6={0xa, 0x0, 0x0, @dev}, &(0x7f0000000140)=0x80) r1 = accept4(r0, 0x0, 0x0, 0x0) ioctl$IOCTL_GET_NCIDEV_IDX(0xffffffffffffffff, 0x0, &(0x7f0000000180)=0x0) sendmsg$nfc_llcp(r1, &(0x7f0000000540)={&(0x7f00000001c0)={0x27, r2, 0xffffffffffffffff, 0x0, 0xa, 0x7c, "e3e56705a690033ebd170e7d8b5c046ea637aa6e3725eb6c833b0cd16325a7328927c38184b9824ec2e2c3eb2ae225dc0aaaceffa2a591ea27c698ce1b1703", 0x32}, 0x60, &(0x7f0000000840)=[{&(0x7f0000000240)}, {&(0x7f0000000280)="468c68e72983924db4173de9d18021350d4b", 0x12}, {&(0x7f00000002c0)="ee3093c94cb9e7c72b4262d3b191b36017e24602ac3b4503f7453c1a8e833eb283638d815cba4789051e655604f4938d36f5a54ac29c4abd27b52c83fc34ac6c65b7c9f748608efd205ced62d9c9cb80c8c1ab6a20615fede93b9cec610c7027f779187ab55dfa5f2923e44fe32c678cd51c4dfbb02a039bf5d80d78d37e55270e052c24b6e5c22e7369e0344cb6e1b4c3c8bf2833d562c22f93a1fb44c5f645596ce022ec5a3ee03927a827c058a7685ba17bc4c52bc957a136673f2d7bb0dc9766fac84f0b", 0xc6}, {&(0x7f0000000600)="988c431ad71d9ab4455020d3c90c650aeba2fea5ef23e8cd748a1d0709a9157274311a46a98ea8c5786442452999bfd12003b48db53a642434ffbf602baadfff1589d4ac3b71497a44ffda65cc5dd46afec1fc40de282520febf3783619647b1ec6426987eedb6ad7e26788fd2bb7f22674490cc1c7c3832f8561e2aa616c22a7366979956972c6ef7dc48546c46891e208e3780362f6647", 0x98}, {&(0x7f00000003c0)="d1b6690340594ae2cdac28523516164001cbf80f6b9611661a35cbd60f2e0d4349ca05ed8439", 0x26}, {&(0x7f00000006c0)="13a4ad68613ce67e4f4e2e37053968e66efdfda60e870b8d2a6b09dbd8bda0691d77ad485d5e0bc0055969de9b4fdc1de8fa0d2b5605c083ebf69362f1f83401b6a2dff434e749c370dcbbba9b10a60e59ea0808296e912142b67c4784cf1e4708190d8bd848742ad3d0b33519f90a18298ef5ae6b0967810341a73d5c7c072333ede5d25b59ea2ce367b7b0623b3007366335cbfffe812828ae21c094e1e6d94b88f625c2a35021aa282f16cc0467d4030cb4fd1c6c", 0xb6}, {&(0x7f0000000780)="eef04d35add0f8b446ffcb7fac6d5c147797e35f80b2f69a1c855c02c128013b3371cc81f440c9339747488d0ec66117ba60497d74d9650c5fabb6c29873fa4854fe2ed1ed165baec302cbb579cfdf94872ca2b1bd6c9463800964315984460d4c6f8a25671331b2efc6bf5179a86ded18554577c41eadd9456f2660d71469bb64838dc2eb32088574cf2a7952b5eb8687eb6b6f69ccb357deb0e521599d2e869e50249ad05c", 0xa6}, {&(0x7f0000000400)="aed0c752a2668305e60fe88014e4", 0xe}], 0x8, &(0x7f00000008c0)={0xf0, 0x1, 0x2, "de41ba63bf92ea96292fce924a5ae2dea49caa83d30f844bcd24a9f64f5dff503da6550724d0187a1c20d24b358db80d629287d6fd34556aafdfab59cac09ba347e74a1063abd12c615eb26deb66c01050ea3b8633186a34ca3e0c9907f477ad6c342ded68e497ca5bdc26f45f0f9e708d7e351ef159b74508c49128f75f6b4dada30c5853c20d29dc3b2746b6c777657362ba33d7e6f5fa21d4a376f656b2a0084857c22c8fee014079adf08d966b8f185ce849611837d2d9784b5ed6f158ae8f5992cbd52c7a863da0d9df61cad01a9e290568d35b84fe37bc"}, 0xf0, 0x4011}, 0x1400c001) r3 = syz_genetlink_get_family_id$tipc2(&(0x7f0000000100), r1) sendmsg$TIPC_NL_PUBL_GET(r1, &(0x7f00000005c0)={0x0, 0x0, &(0x7f0000000580)={&(0x7f0000000440)={0x100, r3, 0x4, 0x70bd26, 0x25dfdbff, {}, [@TIPC_NLA_LINK={0xdc, 0x4, 0x0, 0x1, [@TIPC_NLA_LINK_PROP={0x44, 0x7, 0x0, 0x1, [@TIPC_NLA_PROP_WIN={0x8, 0x3, 0x9}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x11}, @TIPC_NLA_PROP_MTU={0x8, 0x4, 0x80000001}, @TIPC_NLA_PROP_MTU={0x8, 0x4, 0x5}, @TIPC_NLA_PROP_TOL={0x8, 0x2, 0x2}, @TIPC_NLA_PROP_MTU={0x8, 0x4, 0x4}, @TIPC_NLA_PROP_TOL={0x8, 0x2, 0x1}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x1f}]}, @TIPC_NLA_LINK_NAME={0x9, 0x1, 'syz1\x00'}, @TIPC_NLA_LINK_PROP={0x3c, 0x7, 0x0, 0x1, [@TIPC_NLA_PROP_TOL={0x8, 0x2, 0x1}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0xa}, @TIPC_NLA_PROP_TOL={0x8, 0x2, 0x4}, @TIPC_NLA_PROP_WIN={0x8, 0x3, 0xa87a089}, @TIPC_NLA_PROP_WIN={0x8, 0x3, 0x7fffffff}, @TIPC_NLA_PROP_MTU={0x8, 0x4, 0xd}, @TIPC_NLA_PROP_WIN={0x8, 0x3, 0x9}]}, @TIPC_NLA_LINK_PROP={0xc, 0x7, 0x0, 0x1, [@TIPC_NLA_PROP_TOL={0x8, 0x2, 0x5}]}, @TIPC_NLA_LINK_PROP={0x14, 0x7, 0x0, 0x1, [@TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x1}, @TIPC_NLA_PROP_TOL={0x8, 0x2, 0x9}]}, @TIPC_NLA_LINK_NAME={0x13, 0x1, 'broadcast-link\x00'}, @TIPC_NLA_LINK_NAME={0x9, 0x1, 'syz1\x00'}, @TIPC_NLA_LINK_NAME={0x9, 0x1, 'syz0\x00'}]}, @TIPC_NLA_NODE={0x10, 0x6, 0x0, 0x1, [@TIPC_NLA_NODE_KEY_MASTER={0x4}, @TIPC_NLA_NODE_REKEYING={0x8, 0x6, 0x1}]}]}, 0x100}, 0x1, 0x0, 0x0, 0x15}, 0x0) 790.131901ms ago: executing program 7 (id=2996): r0 = socket$netlink(0x10, 0x3, 0x0) bind$netlink(r0, &(0x7f0000514ff4)={0x10, 0x0, 0x0, 0x2ffffffff}, 0xc) r1 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r1, &(0x7f0000000080)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f00000006c0)=@newqdisc={0xa4, 0x24, 0xe0b, 0x0, 0x0, {0x0, 0x0, 0x0, 0x0, {}, {0xffff, 0xffff}}, [@qdisc_kind_options=@q_tbf={{0x4}, {0x4c, 0x2, [@TCA_TBF_PRATE64={0xc, 0x5, 0x13a260736e98a861}, @TCA_TBF_PBURST={0x8, 0x7, 0x1cdf}, @TCA_TBF_PARMS={0x28, 0x1, {{0x0, 0x2}, {0x0, 0x0, 0x0, 0x0, 0x0, 0x3}, 0x766c, 0x81}}, @TCA_TBF_PRATE64={0xc, 0x5, 0xcb59372f370e8465}]}}, @TCA_INGRESS_BLOCK={0x8, 0xd, 0x2}, @TCA_STAB={0x24, 0x8, 0x0, 0x1, [{{0x1c, 0x1, {0x2, 0x6, 0x3, 0x9, 0x1, 0x54, 0x101}}, {0x4}}]}]}, 0xa4}}, 0x24000814) r2 = openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0) ioctl$TUNSETIFF(r2, 0x400454ca, &(0x7f0000000080)={'syzkaller0\x00', 0x7101}) r3 = socket(0x400000000010, 0x3, 0x0) r4 = socket$unix(0x1, 0x1, 0x0) ioctl$sock_SIOCGIFINDEX(r4, 0x8933, &(0x7f00000003c0)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r3, &(0x7f00000012c0)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000400)=@newqdisc={0x44, 0x24, 0x4ee4e6a52ff56541, 0x70bd2a, 0xffffffff, {0x0, 0x0, 0x0, r5, {0x0, 0xfff1}, {0xffff, 0xffff}}, [@qdisc_kind_options=@q_hfsc={{0x9}, {0x14, 0x2, @TCA_HFSC_FSC={0x10, 0x2, {0x7, 0x2, 0x1}}}}]}, 0x44}, 0x1, 0x0, 0x0, 0x4040001}, 0x0) r6 = socket(0x400000000010, 0x3, 0x0) r7 = socket$unix(0x1, 0x1, 0x0) ioctl$sock_SIOCGIFINDEX(r7, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r6, &(0x7f0000006040)={0x0, 0x0, &(0x7f0000000440)={&(0x7f0000000280)=@newtfilter={0x4c, 0x2c, 0xd27, 0x70bd28, 0x25dfdbfd, {0x0, 0x0, 0x0, r8, {0x5, 0x4}, {}, {0x10}}, [@filter_kind_options=@f_flow={{0x9}, {0x1c, 0x2, [@TCA_FLOW_KEYS={0x8, 0x1, 0x9200}, @TCA_FLOW_XOR={0x8, 0x7, 0xfffffffb}, @TCA_FLOW_MODE={0x8, 0x2, 0x1}]}}]}, 0x4c}, 0x1, 0x0, 0x0, 0x10}, 0xc010) r9 = socket(0xa, 0x3, 0x3a) setsockopt$SO_RDS_TRANSPORT(r9, 0x114, 0x8, &(0x7f0000000000), 0x4) setsockopt$MRT6_ADD_MIF(r9, 0x29, 0xca, &(0x7f0000000140)={0x1, 0x1, 0x4, 0x0, 0x10001}, 0xc) socket$netlink(0x10, 0x3, 0x0) (async) bind$netlink(r0, &(0x7f0000514ff4)={0x10, 0x0, 0x0, 0x2ffffffff}, 0xc) (async) socket$nl_route(0x10, 0x3, 0x0) (async) sendmsg$nl_route_sched(r1, &(0x7f0000000080)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f00000006c0)=@newqdisc={0xa4, 0x24, 0xe0b, 0x0, 0x0, {0x0, 0x0, 0x0, 0x0, {}, {0xffff, 0xffff}}, [@qdisc_kind_options=@q_tbf={{0x4}, {0x4c, 0x2, [@TCA_TBF_PRATE64={0xc, 0x5, 0x13a260736e98a861}, @TCA_TBF_PBURST={0x8, 0x7, 0x1cdf}, @TCA_TBF_PARMS={0x28, 0x1, {{0x0, 0x2}, {0x0, 0x0, 0x0, 0x0, 0x0, 0x3}, 0x766c, 0x81}}, @TCA_TBF_PRATE64={0xc, 0x5, 0xcb59372f370e8465}]}}, @TCA_INGRESS_BLOCK={0x8, 0xd, 0x2}, @TCA_STAB={0x24, 0x8, 0x0, 0x1, [{{0x1c, 0x1, {0x2, 0x6, 0x3, 0x9, 0x1, 0x54, 0x101}}, {0x4}}]}]}, 0xa4}}, 0x24000814) (async) openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0) (async) ioctl$TUNSETIFF(r2, 0x400454ca, &(0x7f0000000080)={'syzkaller0\x00', 0x7101}) (async) socket(0x400000000010, 0x3, 0x0) (async) socket$unix(0x1, 0x1, 0x0) (async) ioctl$sock_SIOCGIFINDEX(r4, 0x8933, &(0x7f00000003c0)={'syzkaller0\x00'}) (async) sendmsg$nl_route_sched(r3, &(0x7f00000012c0)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000400)=@newqdisc={0x44, 0x24, 0x4ee4e6a52ff56541, 0x70bd2a, 0xffffffff, {0x0, 0x0, 0x0, r5, {0x0, 0xfff1}, {0xffff, 0xffff}}, [@qdisc_kind_options=@q_hfsc={{0x9}, {0x14, 0x2, @TCA_HFSC_FSC={0x10, 0x2, {0x7, 0x2, 0x1}}}}]}, 0x44}, 0x1, 0x0, 0x0, 0x4040001}, 0x0) (async) socket(0x400000000010, 0x3, 0x0) (async) socket$unix(0x1, 0x1, 0x0) (async) ioctl$sock_SIOCGIFINDEX(r7, 0x8933, &(0x7f0000000100)={'syzkaller0\x00'}) (async) sendmsg$nl_route_sched(r6, &(0x7f0000006040)={0x0, 0x0, &(0x7f0000000440)={&(0x7f0000000280)=@newtfilter={0x4c, 0x2c, 0xd27, 0x70bd28, 0x25dfdbfd, {0x0, 0x0, 0x0, r8, {0x5, 0x4}, {}, {0x10}}, [@filter_kind_options=@f_flow={{0x9}, {0x1c, 0x2, [@TCA_FLOW_KEYS={0x8, 0x1, 0x9200}, @TCA_FLOW_XOR={0x8, 0x7, 0xfffffffb}, @TCA_FLOW_MODE={0x8, 0x2, 0x1}]}}]}, 0x4c}, 0x1, 0x0, 0x0, 0x10}, 0xc010) (async) socket(0xa, 0x3, 0x3a) (async) setsockopt$SO_RDS_TRANSPORT(r9, 0x114, 0x8, &(0x7f0000000000), 0x4) (async) setsockopt$MRT6_ADD_MIF(r9, 0x29, 0xca, &(0x7f0000000140)={0x1, 0x1, 0x4, 0x0, 0x10001}, 0xc) (async) 672.07174ms ago: executing program 1 (id=2997): r0 = socket$tipc(0x1e, 0x5, 0x0) ioctl$sock_netdev_private(r0, 0x8947, &(0x7f0000000180)="83c8cfef3a") r1 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=@base={0x6, 0x4, 0x8, 0x8}, 0x48) r2 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r2, &(0x7f000000c2c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f00000000c0)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a28000000000a0101000000005e1affd5020000000900010073797a300000000008000240000000032c000000030a01030000e6ff00000000020000000900010073797a30000000000900030073797a320000000014000000110001"], 0x7c}}, 0x0) sendmsg$NFT_BATCH(r2, &(0x7f0000000380)={0x0, 0x0, &(0x7f0000000340)={&(0x7f00000003c0)={{0x14}, [@NFT_MSG_NEWCHAIN={0x30, 0x1b, 0xa, 0x801, 0x0, 0x0, {0x2}, [@NFTA_CHAIN_TABLE={0x9, 0x1, 'syz0\x00'}, @NFTA_CHAIN_HANDLE={0xc, 0x2, 0x1, 0x0, 0x1}, @NFTA_CHAIN_HOOK={0x4}]}], {0x14}}, 0x58}}, 0x0) bpf$PROG_LOAD(0x5, &(0x7f0000000180)={0x6, 0xc, &(0x7f0000000000)=@framed={{}, [@ringbuf_output={{0x18, 0x5, 0x1, 0x0, r1}, {}, {}, {}, {}, {}, {}, {0x85, 0x0, 0x0, 0x54}}]}, &(0x7f0000000540)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @xdp, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) 644.018732ms ago: executing program 2 (id=2998): r0 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a) ioctl$BTRFS_IOC_BALANCE_PROGRESS(r0, 0x84009422, &(0x7f00000002c0)={0x0, 0x0, {0x0, @usage, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @struct}, {0x0, @struct, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @struct}, {0x0, @struct}}) (async) r2 = socket$can_raw(0x1d, 0x3, 0x1) getsockopt$CAN_RAW_FILTER(r2, 0x65, 0x1, 0xffffffffffffffff, &(0x7f0000000040)=0x47) (async) ioctl$BTRFS_IOC_DEV_INFO(r0, 0xd000941e, &(0x7f0000001a80)={r1, "1fc59d55607dd28db37e6ed29a6296f6"}) r3 = socket$netlink(0x10, 0x3, 0x0) syz_emit_ethernet(0x21, &(0x7f0000001a40)=ANY=[@ANYBLOB="aaaaaaaaaaaa0000000000000011aa00e3dc094af13ffb3bbe3181fd3b87d0a0a7"], 0x0) ioctl$sock_kcm_SIOCKCMATTACH(0xffffffffffffffff, 0x89e0, &(0x7f00000000c0)={r3}) r4 = socket$can_raw(0x1d, 0x3, 0x1) (async) ioctl$sock_inet6_SIOCSIFDSTADDR(0xffffffffffffffff, 0x8918, 0x0) r5 = openat$tun(0xffffffffffffff9c, &(0x7f0000000140), 0x0, 0x0) ioctl$TUNSETIFF(r5, 0x400454ca, &(0x7f00000000c0)={'syzkaller1\x00', 0x4c02}) readv(r5, &(0x7f0000000080)=[{&(0x7f0000002140)=""/4096, 0x1000}], 0x1) (async) r6 = socket$kcm(0x2, 0xa, 0x2) ioctl$TUNSETVNETHDRSZ(r5, 0x400454d8, &(0x7f0000000100)=0x730) (async) ioctl$SIOCSIFHWADDR(r6, 0x8914, &(0x7f0000000000)={'syzkaller1\x00', @link_local}) setsockopt$CAN_RAW_FILTER(r4, 0x65, 0x1, &(0x7f0000000100)=[{{0x0, 0x0, 0x0, 0x1}, {0x1, 0x0, 0x1, 0x1}}, {{0x3, 0x0, 0x0, 0x1}, {0x4, 0x0, 0x1}}], 0x10) (async) ioctl$ifreq_SIOCGIFINDEX_vcan(r4, 0x8933, &(0x7f0000000000)={'vxcan1\x00', 0x0}) bind$can_raw(r4, &(0x7f0000000080)={0x1d, r7}, 0x10) (async) sendmsg$nl_route(r3, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000001140)={&(0x7f00000006c0)=@bridge_getlink={0x12c, 0x12, 0x100, 0x70bd2b, 0x25dfdbff, {0x7, 0x0, 0x0, r7, 0x8100, 0x40218}, [@IFLA_LINKINFO={0x14, 0x12, 0x0, 0x1, @vcan={{0x9}, {0x4}}}, @IFLA_IFALIASn={0x4}, @IFLA_PHYS_SWITCH_ID={0x1e, 0x24, "914471857d043bce5fab605c584a530b110744107d39837c8900"}, @IFLA_OPERSTATE={0x5}, @IFLA_AF_SPEC={0xb8, 0x1a, 0x0, 0x1, [@AF_MPLS={0x4}, @AF_INET6={0x48, 0xa, 0x0, 0x1, [@IFLA_INET6_TOKEN={0x14, 0x7, @dev={0xfe, 0x80, '\x00', 0x1e}}, @IFLA_INET6_TOKEN={0x14, 0x7, @rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x01'}, @IFLA_INET6_ADDR_GEN_MODE={0x5, 0x8, 0x3}, @IFLA_INET6_TOKEN={0x14, 0x7, @loopback}]}, @AF_BRIDGE={0x4}, @AF_INET6={0x64, 0xa, 0x0, 0x1, [@IFLA_INET6_TOKEN={0x14, 0x7, @private1={0xfc, 0x1, '\x00', 0x1}}, @IFLA_INET6_ADDR_GEN_MODE={0x5, 0x8, 0x5}, @IFLA_INET6_TOKEN={0x14, 0x7, @ipv4={'\x00', '\xff\xff', @empty}}, @IFLA_INET6_ADDR_GEN_MODE={0x5, 0x8, 0xd}, @IFLA_INET6_TOKEN={0x14, 0x7, @dev={0xfe, 0x80, '\x00', 0x30}}, @IFLA_INET6_TOKEN={0x14, 0x7, @rand_addr=' \x01\x00'}]}]}, @IFLA_ADDRESS={0xa, 0x1, @dev={'\xaa\xaa\xaa\xaa\xaa', 0x43}}, @IFLA_LINK_NETNSID={0x8}]}, 0x12c}}, 0x0) bpf$PROG_LOAD_XDP(0x5, &(0x7f00000001c0)={0x11, 0x4, &(0x7f0000000080)=ANY=[@ANYBLOB="1800000000000000000000000000000072619a000000010000de000000000000"], &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0xf}, 0x94) 552.421297ms ago: executing program 7 (id=2999): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) getsockopt$IP_SET_OP_GET_BYNAME(r0, 0x1, 0x53, &(0x7f0000000000)={0x6, 0x7, 'syz2\x00'}, &(0x7f0000000040)=0x28) sendmsg$NFT_BATCH(r0, &(0x7f000000c2c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000340)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a28000000000a0101000000005e1affd5020000000900010073797a300000000008000240000000032c000000030a01030000e6ff00000000020000000900010073797a30000000000900030073797a320000000014000000110001"], 0x7c}}, 0x0) r1 = socket$nl_netfilter(0x10, 0x3, 0xc) r2 = bpf$BPF_PROG_WITH_BTFID_LOAD(0x5, &(0x7f0000000280)=@bpf_lsm={0x6, 0x3, &(0x7f00000003c0)=ANY=[@ANYBLOB="18000000003f000000000000000000f195"], &(0x7f0000000140)='GPL\x00', 0x0, 0x0, 0x0, 0x40f00, 0x0, '\x00', 0x0, 0x1b, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x1}, 0x90) bpf$BPF_GET_PROG_INFO(0xf, &(0x7f0000001c00)={r2, 0xe0, &(0x7f0000001b00)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5, &(0x7f0000001940)=[0x0, 0x0, 0x0, 0x0, 0x0], ""/16, 0x0, 0x0, 0x0, 0x0, 0x0, 0xa, &(0x7f0000001980), &(0x7f00000019c0)=[0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0], 0x0, 0xdf, &(0x7f0000001580)=[{}, {}, {}], 0x18, 0x10, &(0x7f0000001a40), &(0x7f0000001a80), 0x8, 0x5a, 0x8, 0x8, &(0x7f0000000080)}}, 0x10) sendmsg$NFT_MSG_GETRULE(r1, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000440)={0x2c, 0x7, 0xa, 0x401, 0x0, 0x0, {0x2}, [@NFTA_RULE_CHAIN={0x9, 0x2, 'syz2\x00'}, @NFTA_RULE_TABLE={0x9, 0x1, 'syz0\x00'}]}, 0x2c}}, 0x0) 551.190999ms ago: executing program 1 (id=3000): r0 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000400)=@newtaction={0x50, 0x30, 0x400, 0x70bd26, 0x40000000, {}, [{0x3c, 0x1, [@m_ctinfo={0x38, 0xd, 0x0, 0x0, {{0xb}, {0xc, 0x2, 0x0, 0x1, [@TCA_CTINFO_PARMS_DSCP_MASK={0x8, 0x5, 0x9}]}, {0x4}, {0xc, 0x7, {0x1}}, {0xc}}}]}]}, 0x50}}, 0x481d5) sendmsg$nl_generic(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000400)=ANY=[@ANYBLOB="340000003e0007010000000000000000017c00000400fc800c0001800600060065580000080002"], 0x34}, 0x1, 0x0, 0x0, 0xc000}, 0xc010) r1 = socket$vsock_stream(0x28, 0x1, 0x0) bind$vsock_stream(r1, &(0x7f0000000440)={0x28, 0x0, 0x2710, @host}, 0x10) r2 = socket$alg(0x26, 0x5, 0x0) bind$alg(r2, &(0x7f0000000080)={0x26, 'skcipher\x00', 0x0, 0x0, 'cts(cbc(aes))\x00'}, 0x58) setsockopt$ALG_SET_KEY(r2, 0x117, 0x1, &(0x7f0000c18000)="ad56b6c5910fae9d6dcd3292ea54c7b6ef915d564c90c200", 0x18) r3 = accept4(r2, 0x0, 0x0, 0x0) syz_genetlink_get_family_id$gtp(&(0x7f00000007c0), r3) listen(r1, 0x0) r4 = accept4(r1, 0x0, 0x0, 0x0) recvfrom$rose(r4, 0x0, 0x0, 0x10161, 0x0, 0x0) getsockopt$inet_sctp_SCTP_LOCAL_AUTH_CHUNKS(r4, 0x84, 0x1b, &(0x7f0000000000)={0x0, 0x2e, "5f5ff99a153058b142cf62c32db6219c09c6af7e2d2c53433a393d6756a5f78855704f9db2989178732c8e0a6221"}, &(0x7f00000003c0)=0x36) bind$alg(0xffffffffffffffff, &(0x7f0000000040)={0x26, 'aead\x00', 0x0, 0x0, 'morus1280\x00'}, 0x58) r6 = syz_init_net_socket$nfc_llcp(0x27, 0x1, 0x1) bind$bt_hci(r6, &(0x7f0000000000)={0x27}, 0x62) ioctl$int_in(r6, 0x5421, &(0x7f0000000140)=0x6) listen(r6, 0x0) r7 = socket$inet6_sctp(0xa, 0x1, 0x84) setsockopt$inet_sctp6_SCTP_PR_SUPPORTED(r7, 0x84, 0x71, &(0x7f0000000400), 0x8) setsockopt$inet_sctp6_SCTP_RECONFIG_SUPPORTED(r7, 0x84, 0x75, &(0x7f0000000280)={0x0, 0x80000001}, 0x8) setsockopt$inet_sctp_SCTP_SOCKOPT_BINDX_ADD(r7, 0x84, 0x64, &(0x7f0000000000)=[@in6={0xa, 0x4e23, 0x401, @loopback}], 0x1c) sendto$inet6(r7, &(0x7f0000000080)="b1", 0xfffd, 0x400c0d4, &(0x7f0000000140)={0xa, 0x4e23, 0x0, @loopback, 0xffffffff}, 0x1c) accept4(r6, 0x0, 0x0, 0x80800) setsockopt$inet_sctp_SCTP_PRIMARY_ADDR(r4, 0x84, 0x6, &(0x7f00000004c0)={r5, @in={{0x2, 0x4e23, @loopback}}}, 0x84) setsockopt$MISDN_TIME_STAMP(r4, 0x0, 0x1, &(0x7f0000000400), 0x4) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0xe, 0xb, &(0x7f0000000240)=ANY=[@ANYBLOB="18000000000000000000000000000000180100002020f02500000000002020207b1af8ff00000000bfa1000000000000170100000bd42523073ae1bd08000000b703000000000020850000007000000095"], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x41100, 0x2, '\x00', 0x0, @fallback=0x1c, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xf07f}, 0x94) sendmsg$OSF_MSG_REMOVE(r4, &(0x7f0000000340)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x8}, 0xc, &(0x7f0000000300)={&(0x7f0000000080)={0x268, 0x1, 0x5, 0x201, 0x0, 0x0, {0x0, 0x0, 0x8}, [{{0x254, 0x1, {{0x1, 0x7}, 0x7, 0x6, 0xfffd, 0x8000, 0xd, 'syz1\x00', "7adea30afca91e2679796638898efd677cf92dcd9e65e94e5491cacd68c8c048", "25495f112e15d0f2805f63e4e4087f828e8ad6ad7f78e60fb1b547d06335ae07", [{0x7, 0x7, {0x0, 0x3}}, {0x8000, 0x1, {0x3, 0x7ff}}, {0x80, 0xe7, {0x1, 0x166}}, {0x9, 0xa, {0x3, 0x6}}, {0x5, 0xffff, {0x1, 0x4}}, {0x40, 0xcdf, {0x1, 0x3}}, {0x40, 0x7, {0x3, 0x80000000}}, {0x9, 0x9, {0x3, 0xd}}, {0x38d8, 0x407f, {0x0, 0x4}}, {0x3b92, 0xfff8, {0x2, 0x4e4}}, {0x7, 0x3, {0x3, 0x4a2}}, {0x7, 0xffff, {0x3, 0x7f}}, {0x7, 0x18, {0x0, 0x8}}, {0x4, 0x1c, {0x3, 0x400}}, {0x3, 0x400, {0x1, 0x7f}}, {0xb8c, 0xfff7, {0x0, 0x1ae}}, {0xd298, 0x8, {0x2, 0xfff7fffa}}, {0x3, 0xffff, {0x0, 0xe1d6}}, {0xfbff, 0x3, {0x0, 0x8}}, {0xad, 0x29f9, {0x0, 0x7fc}}, {0x5, 0x1, {0x0, 0x401}}, {0x6, 0x9, {0x2, 0x3}}, {0x200, 0xff23, {0x1, 0x5}}, {0x8, 0x6, {0x3, 0x4}}, {0x7fff, 0x8, {0x2, 0x1}}, {0xe72, 0xd67a, {0x3, 0x6}}, {0xa59e, 0xdff9, {0x3, 0x8}}, {0x7, 0x3, {0x0, 0x5}}, {0x1ff, 0x3, {0x3, 0x9}}, {0xffff, 0x4, {0x2, 0xf5f8}}, {0x59d, 0x3ff, {0x2, 0x8}}, {0x7, 0xc207, {0x2, 0x4}}, {0x9, 0xc, {0x0, 0x3ff}}, {0x1, 0x3, {0x2, 0x4}}, {0xb, 0x9, {0x0, 0x5}}, {0x2, 0x40, {0x1}}, {0x7ff, 0x5, {0x2, 0x2}}, {0x1, 0x1, {0x0, 0x8}}, {0x4, 0x6, {0x43682708c9c73fdd, 0xc}}, {0x7, 0x5, {0x1, 0xf}}]}}}]}, 0x268}, 0x1, 0x0, 0x0, 0x8041}, 0x40902) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000600)={0x15, 0x3, &(0x7f0000000380)=ANY=[@ANYBLOB="6a0ac4006910160087cf06183dd5fb00000095004c000000000000"], &(0x7f0000000480)='GPL\x00'}, 0x80) 479.408856ms ago: executing program 7 (id=3001): r0 = socket$inet_icmp_raw(0x2, 0x3, 0x1) socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$netlink(0xffffffffffffffff, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)=[{&(0x7f00000002c0)={0x330, 0x23, 0x10, 0x0, 0x0, "", [@generic="c9062132bfb840c88138b3f4def366140caf1e982ca479643d8fea47fc70396889141f2ac8f15381c2ac92c3824e0a2d318ee76f503596dca48c35abe845deaf8182d130961bae89ed4c6e11bc87355b563cbf899d1aad27730cef0acfeef57279a76fb524afcdf79292324ed408eea908ade32cc3e21998cd0d375f298423426d208361066df3e62d7c83503dd2145c4475fc398ccc1dfb8d943bdd93e7ac8fdd28c882e28f8d0d3f96a55f566723317765716d39fabb2e09f28e90ff291d7cf25e7a6dad2b7b73bf", @nested={0x1c4, 0x32, 0x0, 0x1, [@generic="60d393535423d41becc605516f64d613a82bfc578181bfaf11ea12abd410e1fe1b469aeb8fc5dfbc0e77e10d2c87a80d3372c66829f054b8ccc4fd1b7f61f3ba1ddd22a43890cb909bd99389d2d7229f49ad665e0da699125aed35d5cdc2eccf155a693bfd5fb32f631c803cc65243427d8b2f5452ebae20310ebebb9d5278097f0a53ca62379cdcfb7fb9410aede8eb2e75e4db5ad67fa3b9b845e097539583d8371e373f494669687fe165e1d92d9c850b590d72379a9d1c9cdd89cc81d6f692683415b053e6ea191cadc10d", @generic="89964f63fab5dc12dd6fcdbf862576af9b93512e7dff600d6ccedb6b76412f67dfc20e47ab796e04301fac30e7be4848ec7b70917e1d24307019a75d2683b0d3ac840ec1f03c46f8d45573541ee0e82eda03d4f43a99dc3ec1b78d360e33ae8a7a35af8773b02238372ab0a283ae1434f9812ef8413dceb9346e8a676291986127702e5cf827b6790dcd0561dee6da772d63c1079f932ddc29b29e9e4d3c1be87a0d16d585dde16e86f4d79a257e5f09b6c2da728b87492b6dfbd8c4dccf11304a478c8c7e57169043108c695fa21a8d6492b274c5a1d2f0dd21415a00c21b87d659f9cbca02cb947395b06f4c5029633361af"]}, @typed={0x8, 0x108, 0x0, 0x0, @fd=r0}, @nested={0xc, 0xe3, 0x0, 0x1, [@typed={0x8, 0x7e, 0x0, 0x0, @fd=r0}]}, @typed={0x8, 0x11, 0x0, 0x0, @ipv4=@local}, @generic="8f1c7f0aa3f227738ccdb349c5b53cd3a8ed15cf5bf644cc5d1d5a60107df0a711a2fdcecf2da463339b1ca0c378bce7436b9a99f04462f32ff3a77b6da946a83fa21603af4c56b31c0f1df15c40b06c407eff9fad507d5dedc0dce45ff934bac38380cc43a33f121f74c5b5f983a32abb43895f423fc7"]}, 0x330}], 0x1, 0x0, 0x0, 0x8000}, 0x0) r1 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX_80211(0xffffffffffffffff, 0x8933, &(0x7f0000000040)={'wlan0\x00'}) ioctl(r1, 0x8b1a, &(0x7f0000000040)) socket$nl_netfilter(0x10, 0x3, 0xc) r2 = socket$nl_generic(0x10, 0x3, 0x10) r3 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000080), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r2, 0x8933, &(0x7f00000000c0)={'wlan0\x00', 0x0}) sendmsg$NL80211_CMD_SET_INTERFACE(r2, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000180)={0x24, r3, 0x5, 0x0, 0x0, {{}, {@val={0x8, 0x3, r4}, @void}}, [@NL80211_ATTR_IFTYPE={0x8, 0x5, 0x3}]}, 0x24}}, 0x40040) setsockopt$MRT_DEL_VIF(r0, 0x0, 0x1a, 0x0, 0x0) r5 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$NL80211_CMD_SET_TX_BITRATE_MASK(0xffffffffffffffff, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000040)={0x1c, 0x0, 0x1, 0x0, 0x0, {{}, {@val={0x8}, @void}}}, 0x1c}}, 0x0) sendmsg$nl_route(r5, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000700)={&(0x7f0000000000)=ANY=[@ANYBLOB="5c0000001000090400"/20, @ANYRES32=0x0, @ANYBLOB="000000000000000028001280090001007665746800000000180002801400010000000000", @ANYRES32=0x0, @ANYBLOB='\x00\x00\x00\x00\x00\x00\x00\x00\n'], 0x5c}}, 0x0) 407.672693ms ago: executing program 2 (id=3002): bpf$MAP_CREATE(0x2000000000000000, &(0x7f0000000b00)=@base={0x6, 0x4, 0x70be, 0x5c, 0x0, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x2}, 0x48) sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000003c0)={{0x14}, [@NFT_MSG_NEWRULE={0x60, 0x6, 0xa, 0x40b, 0x0, 0x0, {0x2}, [@NFTA_RULE_EXPRESSIONS={0x4c, 0x4, 0x0, 0x1, [{0x24, 0x1, 0x0, 0x1, @socket={{0xb}, @val={0x14, 0x2, 0x0, 0x1, [@NFTA_SOCKET_DREG={0x8, 0x2, 0x1, 0x0, 0x3}, @NFTA_SOCKET_KEY={0x8, 0x1, 0x1, 0x0, 0x2}]}}}, {0x24, 0x1, 0x0, 0x1, @tproxy={{0xb}, @val={0x14, 0x2, 0x0, 0x1, [@NFTA_TPROXY_FAMILY={0x8, 0x1, 0x1, 0x0, 0x2}, @NFTA_TPROXY_FAMILY={0x8}]}}}]}]}], {0x14, 0x11, 0x1, 0x0, 0x0, {0xa}}}, 0x88}}, 0x40880) r0 = socket$netlink(0x10, 0x3, 0x0) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000001480)={0xffffffffffffffff, 0xffffffffffffffff}) pread64(0xffffffffffffffff, 0x0, 0x0, 0x0) r2 = socket$can_j1939(0x1d, 0x2, 0x7) r3 = socket$nl_route(0x10, 0x3, 0x0) r4 = socket$can_j1939(0x1d, 0x2, 0x7) r5 = socket$nl_route(0x10, 0x3, 0x0) ioctl$ifreq_SIOCGIFINDEX_vcan(r5, 0x8933, &(0x7f0000000380)={'vcan0\x00', 0x0}) bind$can_j1939(0xffffffffffffffff, 0x0, 0x0) bind$can_j1939(r4, &(0x7f0000001600)={0x1d, r6, 0x40000000000000, {0x2, 0xf0, 0x2}, 0xfd}, 0x18) ioctl$BTRFS_IOC_SET_FEATURES(0xffffffffffffffff, 0x40309439, 0x0) ioctl$ifreq_SIOCGIFINDEX_vcan(r3, 0x8933, &(0x7f0000000380)={'vcan0\x00', 0x0}) bind$can_j1939(r2, &(0x7f0000001600)={0x1d, r7, 0x40000000000000, {0x2, 0xf0, 0x2}, 0xfd}, 0x18) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000340)={'bridge_slave_0\x00', 0x0}) sendmsg$nl_route(r0, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000400)=ANY=[@ANYBLOB="3400000013000100000000000000000007000000", @ANYRES32=r8, @ANYBLOB="100a06000908010014001a80100004800c000680"], 0x34}, 0x1, 0x0, 0x0, 0x200080d0}, 0x14) r9 = bpf$BPF_BTF_LOAD(0x12, &(0x7f00000003c0)={&(0x7f00000005c0)=ANY=[@ANYBLOB="9feb010018000000000000000c0000000c00000002000000000000000000000604"], 0x0, 0x26}, 0x20) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000840)={0x11, 0xf, &(0x7f00000001c0)=ANY=[@ANYBLOB="000018110000000000000000000002a100000000000034c7d1646a1fef9e5362fa5d2fb4d0432e5386f5589fe432163a6c11eea9c39c04bfb18c77c56fd9940ec2241529c80d3f2cefd5619c393adcb0a40f5a0984e988823cce950d84bb52246e7cd61633a639fe5ca6c00a15d0ff037adf05f01dd3142b0c1df9e233780019815f7f29ec6f74bf49aa3dac9e1595e5", @ANYRES32, @ANYBLOB="0000000000000000b702000014000000b7030000000000008500000083000000bf0900000000000055090100000000009500000000000000bf91000000000000b7020000000000008500000000000000b7000000000000009500000000000000"], &(0x7f0000000580)='syzkaller\x00', 0x5, 0x20, &(0x7f00000000c0)=""/32, 0x0, 0x0, '\x00', 0x0, 0x0, r9, 0x8, &(0x7f0000000400)={0x0, 0x800000}, 0x8}, 0x90) 325.673593ms ago: executing program 7 (id=3003): socket$pppl2tp(0x18, 0x1, 0x1) openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0) syz_init_net_socket$nl_rdma(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX(0xffffffffffffffff, 0x8933, 0x0) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f00000012c0)={0x0, 0x0, 0x0}, 0x0) syz_init_net_socket$ax25(0x3, 0x2, 0xc4) r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000001c0)={{0x14}, [@NFT_MSG_NEWTABLE={0x20, 0x0, 0xa, 0x301, 0x0, 0x0, {0x3}, [@NFTA_TABLE_NAME={0x9, 0x1, 'syz0\x00'}]}, @NFT_MSG_NEWTABLE={0x28, 0x0, 0xa, 0x401, 0x0, 0x0, {0x3}, [@NFTA_TABLE_NAME={0x9, 0x1, 'syz0\x00'}, @NFTA_TABLE_FLAGS={0x8, 0x2, 0x1, 0x0, 0x1}]}, @NFT_MSG_NEWCHAIN={0x2c, 0x3, 0xa, 0x3, 0x0, 0x0, {0x3}, [@NFTA_CHAIN_NAME={0x9, 0x3, 'syz0\x00'}, @NFTA_CHAIN_TABLE={0x9, 0x1, 'syz0\x00'}]}], {0x14}}, 0x9c}}, 0x0) sendmsg$NFNL_MSG_ACCT_NEW(r0, &(0x7f0000000180)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x2000000}, 0xc, &(0x7f0000000100)={&(0x7f00000000c0)={0x20, 0x0, 0x7, 0x401, 0x0, 0x0, {0x1, 0x0, 0xa}, [@NFACCT_BYTES={0xc, 0x3, 0x1, 0x0, 0x8}]}, 0x20}, 0x1, 0x0, 0x0, 0x8000}, 0x4000800) r1 = socket$nl_route(0x10, 0x3, 0x0) r2 = socket$nl_route(0x10, 0x3, 0x0) r3 = socket$inet_udp(0x2, 0x2, 0x0) ioctl$sock_SIOCGIFINDEX(r3, 0x8933, &(0x7f0000000680)={'bridge0\x00', 0x0}) sendmsg$nl_route(r2, &(0x7f0000000000)={0x0, 0x300, &(0x7f0000000240)={&(0x7f00000002c0)=ANY=[@ANYBLOB="4800000010000104000000000007000000000000", @ANYRES32=r4, @ANYBLOB="3f00000006020400280012800b0001006272696467650000180002800c002e0003000000030000000500070008"], 0x48}, 0x1, 0x0, 0x0, 0x44000}, 0x0) sendmsg$nl_route(r1, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000000)=@newlink={0x30, 0x10, 0x801, 0x0, 0x0, {}, [@IFLA_MASTER={0x8}, @IFLA_GROUP={0x8}]}, 0x30}}, 0x0) 268.447518ms ago: executing program 2 (id=3004): r0 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000000)={0x0}, 0x1, 0x0, 0x0, 0x4000811}, 0x0) r1 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r1, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000140)=@newtaction={0x68, 0x30, 0x1, 0x0, 0x0, {}, [{0x54, 0x1, [@m_tunnel_key={0x50, 0x1, 0x0, 0x0, {{0xf}, {0x20, 0x2, 0x0, 0x1, [@TCA_TUNNEL_KEY_PARMS={0x1c, 0x2, {{0x1}, 0x2}}]}, {0x4}, {0xc}, {0xc}}}]}]}, 0x68}, 0x1, 0x0, 0x0, 0x4}, 0x0) r2 = accept$packet(0xffffffffffffffff, &(0x7f0000000080)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @local}, &(0x7f00000001c0)=0x14) getpeername$packet(r2, &(0x7f0000000200)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @local}, &(0x7f0000000240)=0x14) sendmsg$nl_xfrm(0xffffffffffffffff, &(0x7f0000000580)={0x0, 0x0, &(0x7f0000000180)={0x0}, 0x1, 0x0, 0x0, 0x48000}, 0x4) sendmmsg(r1, &(0x7f00000002c0), 0x40000000000009f, 0x0) r3 = syz_genetlink_get_family_id$tipc2(&(0x7f0000000400), 0xffffffffffffffff) sendmsg$TIPC_NL_BEARER_SET(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000100)=ANY=[@ANYBLOB="2800000016a56c8c9c749577783cf09809c90ce2b8d4a6dcabb9986de28270732113a1fda066903b7656b8a3b2c6a06a87c636792a75e745d128173416059c043f971d95e9209d0ed4869708148d71028c4fc124772a7d19f2f8992fa2d8ffe295e8238c7ae7770014026af8234ef125f3fe0e8c30b9d704a3b41d8ed5853c64de", @ANYRES16=r3, @ANYBLOB="010028bd7000fbdbdf2505000000140001800d0001007564703a73797a3200000000"], 0x28}, 0x1, 0x0, 0x0, 0x48c05}, 0x4040140) socket(0x2, 0x800, 0xfffffffe) 27.205976ms ago: executing program 5 (id=3005): r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0) r1 = socket$alg(0x26, 0x5, 0x0) bind$alg(r1, &(0x7f0000000000)={0x26, 'aead\x00', 0x0, 0x0, 'generic-gcm-aesni\x00'}, 0x58) setsockopt$ALG_SET_KEY(r1, 0x117, 0x1, &(0x7f0000000140)="2c385aa3d49100dc6626c892b6bc436a", 0x10) r2 = accept4(r1, 0x0, 0x0, 0x0) sendmsg$DEVLINK_CMD_SB_TC_POOL_BIND_SET(r2, &(0x7f0000000380)={0x0, 0x0, &(0x7f0000000340)={&(0x7f00000007c0)={0x150, 0x0, 0x10, 0x70bd29, 0x25dfdbfc, {}, [{{@nsim={{0xe}, {0xf, 0x2, {'netdevsim', 0x0}}}, {0x8, 0x3, 0x1}}, {0x8, 0xb, 0xe}, {0x6, 0x16, 0x9}, {0x5, 0x12, 0x1}, {0x6, 0x11, 0x8000}, {0x8, 0xb, 0x1}}, {{@pci={{0x8}, {0x11}}, {0x8, 0x3, 0x3}}, {0x8, 0xb, 0x80000000}, {0x6, 0x16, 0x6}, {0x5, 0x12, 0x1}, {0x6, 0x11, 0x9}, {0x8, 0xb, 0x7}}, {{@nsim={{0xe}, {0xf, 0x2, {'netdevsim', 0x0}}}, {0x8}}, {0x8, 0xb, 0x1}, {0x6, 0x16, 0x8}, {0x5, 0x12, 0x1}, {0x6, 0x11, 0x5}, {0x8, 0xb, 0x8}}, {{@nsim={{0xe}, {0xf, 0x2, {'netdevsim', 0x0}}}, {0x8, 0x3, 0x3}}, {0x8, 0xb, 0xff}, {0x6, 0x16, 0x9}, {0x5, 0x12, 0x1}, {0x6, 0x11, 0x2}, {0x8, 0xb, 0xffffff01}}]}, 0x150}, 0x1, 0x0, 0x0, 0x20000000}, 0x4084) recvmmsg(r2, &(0x7f0000002180)=[{{0x0, 0x0, &(0x7f0000000780)=[{&(0x7f0000000500)=""/254, 0xfe}, {&(0x7f00000000c0)=""/50, 0x32}], 0x2}, 0x3f}], 0x1, 0x60, 0x0) syz_emit_ethernet(0x6e, &(0x7f0000000040)=ANY=[@ANYBLOB="0180c2000002aaaaaaaaaaaa08004500006000000000002f9078640101000000000024806558000000000000000010000800000086dd"], 0x0) r3 = socket$kcm(0x10, 0x2, 0x10) sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000001c0)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a20000000000a03000000000000000000070000040900010073797a30000000009c000000090a010400000000000000000700000308000a40000000000900020073797a30000000000900010073797a3000000000080005400000000d58001280200001800e000100636f6e6e6c696d69740000000c0002800800014000000008200001800e000100636f6e6e6c696d69740000000c00028008000140000000001400017b090001006cdbf80789f3f947dd000280080003"], 0xe4}, 0x1, 0x0, 0x0, 0x8001}, 0x20050840) sendmsg$kcm(r3, &(0x7f0000000000)={0x0, 0xd18c9b25, &(0x7f0000000080)=[{&(0x7f0000000040)="e03f030041000b05d25a806c8c6394f90324fc60100000000a000200053582c137153e3704020180fc5409000c00", 0x33fe0}], 0x1}, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x7101}) r4 = socket(0x400000000010, 0x3, 0x0) r5 = socket$unix(0x1, 0x5, 0x0) bpf$BPF_BTF_LOAD(0x25, &(0x7f0000000040)={&(0x7f0000000140)=ANY=[@ANYBLOB="9feb0100180000000000000300000000000000000200000000007990a4cc24f72a198016d69d3ea1cd1c1881cd45100714f12996108942d85d60e129dead6cef76f2ca9943a2a23e9fd89df8f208000700"], 0x0, 0x1a}, 0x28) ioctl$sock_SIOCGIFINDEX(r5, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r4, &(0x7f00000012c0)={0x0, 0x4e, &(0x7f0000000080)={&(0x7f00000001c0)=@newqdisc={0x44, 0x24, 0x4ee4e6a52ff56541, 0x70bd2a, 0xffffffff, {0x0, 0x0, 0x0, r6, {0x0, 0xfff1}, {0xffff, 0xffff}, {0x0, 0xf}}, [@qdisc_kind_options=@q_hfsc={{0x9}, {0x14, 0x2, @TCA_HFSC_FSC={0x10, 0x2, {0xa30e, 0x1, 0xfffffffa}}}}]}, 0x44}}, 0x0) sendmsg$nl_route_sched(r4, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000380)={&(0x7f0000000280)=@newtfilter={0x4c, 0x2c, 0xd3f, 0x70b524, 0x25dfdbfa, {0x0, 0x0, 0x0, r6, {0xfff3, 0xffe0}, {}, {0x7, 0xfff2}}, [@filter_kind_options=@f_flow={{0x9}, {0x1c, 0x2, [@TCA_FLOW_PERTURB={0x8, 0xc, 0x6}, @TCA_FLOW_KEYS={0x8, 0x1, 0x18d0b}, @TCA_FLOW_MODE={0x8, 0x2, 0x1}]}}]}, 0x4c}, 0x1, 0x0, 0x0, 0x4008848}, 0xc884) openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0) (async) socket$alg(0x26, 0x5, 0x0) (async) bind$alg(r1, &(0x7f0000000000)={0x26, 'aead\x00', 0x0, 0x0, 'generic-gcm-aesni\x00'}, 0x58) (async) setsockopt$ALG_SET_KEY(r1, 0x117, 0x1, &(0x7f0000000140)="2c385aa3d49100dc6626c892b6bc436a", 0x10) (async) accept4(r1, 0x0, 0x0, 0x0) (async) sendmsg$DEVLINK_CMD_SB_TC_POOL_BIND_SET(r2, &(0x7f0000000380)={0x0, 0x0, &(0x7f0000000340)={&(0x7f00000007c0)={0x150, 0x0, 0x10, 0x70bd29, 0x25dfdbfc, {}, [{{@nsim={{0xe}, {0xf, 0x2, {'netdevsim', 0x0}}}, {0x8, 0x3, 0x1}}, {0x8, 0xb, 0xe}, {0x6, 0x16, 0x9}, {0x5, 0x12, 0x1}, {0x6, 0x11, 0x8000}, {0x8, 0xb, 0x1}}, {{@pci={{0x8}, {0x11}}, {0x8, 0x3, 0x3}}, {0x8, 0xb, 0x80000000}, {0x6, 0x16, 0x6}, {0x5, 0x12, 0x1}, {0x6, 0x11, 0x9}, {0x8, 0xb, 0x7}}, {{@nsim={{0xe}, {0xf, 0x2, {'netdevsim', 0x0}}}, {0x8}}, {0x8, 0xb, 0x1}, {0x6, 0x16, 0x8}, {0x5, 0x12, 0x1}, {0x6, 0x11, 0x5}, {0x8, 0xb, 0x8}}, {{@nsim={{0xe}, {0xf, 0x2, {'netdevsim', 0x0}}}, {0x8, 0x3, 0x3}}, {0x8, 0xb, 0xff}, {0x6, 0x16, 0x9}, {0x5, 0x12, 0x1}, {0x6, 0x11, 0x2}, {0x8, 0xb, 0xffffff01}}]}, 0x150}, 0x1, 0x0, 0x0, 0x20000000}, 0x4084) (async) recvmmsg(r2, &(0x7f0000002180)=[{{0x0, 0x0, &(0x7f0000000780)=[{&(0x7f0000000500)=""/254, 0xfe}, {&(0x7f00000000c0)=""/50, 0x32}], 0x2}, 0x3f}], 0x1, 0x60, 0x0) (async) syz_emit_ethernet(0x6e, &(0x7f0000000040)=ANY=[@ANYBLOB="0180c2000002aaaaaaaaaaaa08004500006000000000002f9078640101000000000024806558000000000000000010000800000086dd"], 0x0) (async) socket$kcm(0x10, 0x2, 0x10) (async) sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000001c0)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a20000000000a03000000000000000000070000040900010073797a30000000009c000000090a010400000000000000000700000308000a40000000000900020073797a30000000000900010073797a3000000000080005400000000d58001280200001800e000100636f6e6e6c696d69740000000c0002800800014000000008200001800e000100636f6e6e6c696d69740000000c00028008000140000000001400017b090001006cdbf80789f3f947dd000280080003"], 0xe4}, 0x1, 0x0, 0x0, 0x8001}, 0x20050840) (async) sendmsg$kcm(r3, &(0x7f0000000000)={0x0, 0xd18c9b25, &(0x7f0000000080)=[{&(0x7f0000000040)="e03f030041000b05d25a806c8c6394f90324fc60100000000a000200053582c137153e3704020180fc5409000c00", 0x33fe0}], 0x1}, 0x0) (async) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x7101}) (async) socket(0x400000000010, 0x3, 0x0) (async) socket$unix(0x1, 0x5, 0x0) (async) bpf$BPF_BTF_LOAD(0x25, &(0x7f0000000040)={&(0x7f0000000140)=ANY=[@ANYBLOB="9feb0100180000000000000300000000000000000200000000007990a4cc24f72a198016d69d3ea1cd1c1881cd45100714f12996108942d85d60e129dead6cef76f2ca9943a2a23e9fd89df8f208000700"], 0x0, 0x1a}, 0x28) (async) ioctl$sock_SIOCGIFINDEX(r5, 0x8933, &(0x7f0000000100)={'syzkaller0\x00'}) (async) sendmsg$nl_route_sched(r4, &(0x7f00000012c0)={0x0, 0x4e, &(0x7f0000000080)={&(0x7f00000001c0)=@newqdisc={0x44, 0x24, 0x4ee4e6a52ff56541, 0x70bd2a, 0xffffffff, {0x0, 0x0, 0x0, r6, {0x0, 0xfff1}, {0xffff, 0xffff}, {0x0, 0xf}}, [@qdisc_kind_options=@q_hfsc={{0x9}, {0x14, 0x2, @TCA_HFSC_FSC={0x10, 0x2, {0xa30e, 0x1, 0xfffffffa}}}}]}, 0x44}}, 0x0) (async) sendmsg$nl_route_sched(r4, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000380)={&(0x7f0000000280)=@newtfilter={0x4c, 0x2c, 0xd3f, 0x70b524, 0x25dfdbfa, {0x0, 0x0, 0x0, r6, {0xfff3, 0xffe0}, {}, {0x7, 0xfff2}}, [@filter_kind_options=@f_flow={{0x9}, {0x1c, 0x2, [@TCA_FLOW_PERTURB={0x8, 0xc, 0x6}, @TCA_FLOW_KEYS={0x8, 0x1, 0x18d0b}, @TCA_FLOW_MODE={0x8, 0x2, 0x1}]}}]}, 0x4c}, 0x1, 0x0, 0x0, 0x4008848}, 0xc884) (async) 25.921277ms ago: executing program 2 (id=3006): pipe(&(0x7f0000000180)) unshare(0xc020680) r0 = socket(0x10, 0x3, 0x0) write(r0, &(0x7f0000000140)="240000005a001f001007f4d655c63589ce9e04020800038005000000ffc8bbb86ec81ffd", 0x24) r1 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r1, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000180)=ANY=[@ANYBLOB="44000000190001090000000000000000021800000002fd010000000008000100ac14140008000500ac1e0101100016"], 0x44}}, 0x0) 0s ago: executing program 7 (id=3007): r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = bpf$MAP_CREATE_TAIL_CALL(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="db67dbe52a7f04c5ab9ba966441909d67099edfa166f629c2635f3ab528665ab63d74eef4777c0613b72669a28c3fefedbca", @ANYRES32, @ANYBLOB="05000000000000000000001300000000000000004d2abeb63661646aac9fe260b89aecf69dfea706f8260b68f956d97e19c89c9598c78e7f64e971e6ded9f61fc9591aa4ef4b6513fac6c48a43e98eecfab5e6c006a5e1cadfcca2d6ff573a099f3a6fd79ef63ecd67a4222657f32154d8dae2e3b2f3f60cb280a26af1b024d967b5f3310031d721b02980a60a132fc3fc00c6230a", @ANYRESDEC=r0, @ANYRES64=r0, @ANYRESOCT=r0], 0x50) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000680)={0xffffffffffffffff, 0xffffffffffffffff}) r3 = openat$tun(0xffffffffffffff9c, &(0x7f0000000000), 0x48241, 0x0) ioctl$TUNSETIFF(r3, 0x400454ca, &(0x7f00000000c0)={'syzkaller1\x00', 0x6bf1c2d5adba8c32}) ioctl$TUNSETVNETBE(r3, 0x400454de, 0x0) setsockopt$sock_attach_bpf(r0, 0x1, 0x4c, &(0x7f0000000200), 0x4) recvmsg$unix(r2, &(0x7f0000000080)={0x0, 0x0, 0x0, 0x0, &(0x7f00000001c0)=[@rights={{0x14, 0x1, 0x1, [0xffffffffffffffff]}}], 0x18}, 0x10022) ioctl$SIOCSIFHWADDR(r4, 0xff05, 0x0) r5 = bpf$MAP_CREATE(0x0, &(0x7f0000000b80)=ANY=[@ANYBLOB="1e0000000100010005000000051d482457c03900000000f1369fc194e55d264c2ca7532362a5f1bfeb21b092346ac844620fc14d8a864054d26ad12f8ab7d98d232251ae4946a4b0d6278aa169eb1baad968768315e5cddbde2ae7cc1d8cf85409b9d1eae17c8c6fb1e225170f352bf514d5791800030cb7b08803265d7b8cd38564d5529b9b7a4ef300"/158, @ANYRES32=r1, @ANYBLOB="010100"/20, @ANYRES32=0x0, @ANYRES32=r4, @ANYBLOB="0300000003000000050000000e00"/24, @ANYBLOB="992d5a1a0c408fc82ee4ec4f6e58d8a8e5f4f9a1991de1e469af28e3cff5fb1d00e0b212f2253c791ff7fa8300b2c08e1f015f44c41ca3905a1c045ecebfdaab0cc19498dbc5e4287c0e6ee749c3574d490a994f029cb369bddfa4d8f3e5e57b0a073144b10ae9c698828edc59ba09dd95c25e3ba8887cf47db8114eede4911dd4b4db4189856ad9e05d26af0b4db04aa32a355eb44153eec13c1aa99bbe3a8c21ecc0d9294fa42a74d2efe28b2c33c65e1cde71bcb37d2dfd04b81b7991e729cb9ed85f888e70929f6d84e98eed1921352a23ec71ab121f658467e31e1d46f17fc6f4579aca062eda", @ANYRES8=r2], 0x50) socket$nl_generic(0x10, 0x3, 0x10) r6 = socket$nl_generic(0x10, 0x3, 0x10) r7 = socket$pppl2tp(0x18, 0x1, 0x1) r8 = socket$inet6_udp(0xa, 0x2, 0x0) connect$pppl2tp(r7, &(0x7f0000000240)=@pppol2tpin6={0x18, 0x1, {0x0, r8, 0x8, 0x0, 0x1003, 0x0, {0xa, 0x0, 0x0, @rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x02'}}}, 0x32) r9 = socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$l2tp(&(0x7f0000000440), 0xffffffffffffffff) sendmsg$L2TP_CMD_SESSION_GET(r9, &(0x7f0000000600)={0x0, 0x0, &(0x7f00000004c0)={&(0x7f0000000d40)=ANY=[@ANYBLOB='0\x00\x00\x00', @ANYBLOB="9cadfb474af528845b2c129a2c677f9cf7ee45e3fe628b526c5b07529d5ad746f68e7fadca804e4ed0ae2b4b38edd42b89a3fd5ea85f97117e07d99f227f65f8bade9b73baa6f0bbe7459b09e08b5d1cb8837ce54d6f80f6b5878e82c5e0a132147163fe54ab741ac5fd17d792df642f1a53d21af4f6ba58b3ee8af5909f936cb727cc5947ee507be9e8fa6815c725ebc9dbebae0c33a1524af89445a6239a30674efd0d062ce3898c3f21cfb61aa9b080ec46b4fdedecc85d232d57931d03556c994245b4234dba8f09dfa85723680f440c176d85af9a06c18d4b167589c36bc9", @ANYBLOB="010829bd0100000000000000000014159401e300270200000000000000000000000007000008000000000c8de4b95e56c6df93d5981f72aa2c9e4918b6295630da32d55be7e38a0f2c9b9966c493b9a304d67347c865d1af0c9fd4be61ccfc467248f25d339a71fd8f7342b1bf4f3fc100a8cf1ca13df5", @ANYRES8=r7], 0x30}}, 0x8001) r10 = bpf$PROG_LOAD(0x5, 0x0, 0x0) close(r10) socket$inet6_sctp(0xa, 0x5, 0x84) socket(0x28, 0x5, 0x0) socket(0x28, 0x3, 0x800000) r11 = socket$inet6(0xa, 0x3, 0x5) sendmmsg(r11, &(0x7f0000001500)=[{{&(0x7f00000006c0)=@l2tp6={0xa, 0x0, 0x7080000, @remote, 0x7, 0x1}, 0x80, 0x0, 0x0, &(0x7f0000000100)=ANY=[@ANYRES64=r6, @ANYRES64=r11], 0x108}}, {{&(0x7f0000000180)=@ax25={{0x3, @default, 0x7}, [@remote={0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0x1}, @bcast, @bcast, @default, @null, @bcast, @bcast, @netrom={0xbb, 0xbb, 0xbb, 0xbb, 0xbb, 0x0, 0x0}]}, 0x80, 0x0}, 0x5b4}], 0x2, 0xc040) bpf$BPF_MAP_CONST_STR_FREEZE(0x16, &(0x7f0000000140)={r5}, 0x4) bpf$PROG_LOAD(0x5, &(0x7f0000000540)={0xe, 0x19, &(0x7f0000000240)=ANY=[@ANYBLOB="1800000041040000000000004fffffff18110000", @ANYRES8=r8, @ANYBLOB="0000000000000000b702000014000000b7030000000000008500000083000000bf0900000000000055090100000000009500000000000000185b000005000000000000000000000018420000fdffffff0000000000000000072d1300060000000b6eff7f010000001843000000000000000000000000000018230000", @ANYRES32=r4, @ANYBLOB="0000000009345b000000bf91950000670d00b7020038960000008500000084000000b70000000000000095000e000000"], &(0x7f0000000180)='syzkaller\x00', 0x5, 0xd2, &(0x7f0000000340)=""/210, 0x41000, 0x44, '\x00', 0x0, @sk_skb=0x5, r4, 0x8, &(0x7f0000000440)={0x4, 0x3}, 0x8, 0x10, 0x0, 0x0, 0xffffffffffffffff, r4, 0x2, &(0x7f0000000480)=[0x1], &(0x7f0000000500)=[{0x0, 0x1, 0x6, 0xc}, {0x2, 0x4, 0x9, 0x7}], 0x10, 0x2}, 0x94) ioctl$sock_ipv6_tunnel_SIOCCHGTUNNEL(r4, 0x89f3, &(0x7f0000000640)={'ip6_vti0\x00', &(0x7f00000007c0)={'syztnl1\x00', 0x0, 0x4, 0x4, 0xd, 0x0, 0x19, @ipv4={'\x00', '\xff\xff', @initdev={0xac, 0x1e, 0x0, 0x0}}, @dev={0xfe, 0x80, '\x00', 0x1d}, 0x20, 0x1, 0x731c, 0x6}}) openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='memory.events\x00', 0x275a, 0x0) kernel console output (not intermixed with test programs): tive interface with an up link [ 264.114821][ T25] block nbd0: Possible stuck request ffff888025215080: control (read@0,1024B). Runtime 30 seconds [ 264.136774][ T25] block nbd0: Possible stuck request ffff888025215240: control (read@1024,1024B). Runtime 30 seconds [ 264.148359][ T25] block nbd0: Possible stuck request ffff888025215400: control (read@2048,1024B). Runtime 30 seconds [ 264.160294][ T25] block nbd0: Possible stuck request ffff8880252155c0: control (read@3072,1024B). Runtime 30 seconds [ 264.504311][T10644] : renamed from bond_slave_0 (while UP) [ 264.687263][T10479] netdevsim netdevsim6 netdevsim0: renamed from eth0 [ 264.741300][T10479] netdevsim netdevsim6 netdevsim1: renamed from eth1 [ 264.761366][T10479] netdevsim netdevsim6 netdevsim2: renamed from eth2 [ 264.781738][T10479] netdevsim netdevsim6 netdevsim3: renamed from eth3 [ 265.003313][ T12] netdevsim netdevsim1 netdevsim0: set [0, 0] type 1 family 0 port 8472 - 0 [ 265.028586][ T12] netdevsim netdevsim1 netdevsim1: set [0, 0] type 1 family 0 port 8472 - 0 [ 265.088207][ T12] netdevsim netdevsim1 netdevsim2: set [0, 0] type 1 family 0 port 8472 - 0 [ 265.099714][ T5831] Bluetooth: hci6: command tx timeout [ 265.130817][ T12] netdevsim netdevsim1 netdevsim3: set [0, 0] type 1 family 0 port 8472 - 0 [ 265.196029][T10479] 8021q: adding VLAN 0 to HW filter on device bond0 [ 265.260801][T10680] syzkaller0: entered promiscuous mode [ 265.266320][T10680] syzkaller0: entered allmulticast mode [ 265.291097][T10479] 8021q: adding VLAN 0 to HW filter on device team0 [ 265.333981][T10683] netlink: 'syz.1.1280': attribute type 10 has an invalid length. [ 265.345889][ T1095] bridge0: port 1(bridge_slave_0) entered blocking state [ 265.353103][ T1095] bridge0: port 1(bridge_slave_0) entered forwarding state [ 265.369127][T10684] sctp: [Deprecated]: syz.5.1281 (pid 10684) Use of int in max_burst socket option. [ 265.369127][T10684] Use struct sctp_assoc_value instead [ 265.389655][T10683] netdevsim netdevsim1 netdevsim0: left promiscuous mode [ 265.421166][T10683] bond0: (slave netdevsim0): Enslaving as an active interface with an up link [ 265.443564][ T1095] bridge0: port 2(bridge_slave_1) entered blocking state [ 265.451018][ T1095] bridge0: port 2(bridge_slave_1) entered forwarding state [ 265.974043][T10715] x_tables: duplicate underflow at hook 3 [ 266.193965][T10479] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 266.405496][T10740] tipc: Can't bind to reserved service type 0 [ 266.564383][T10752] netlink: 'syz.1.1301': attribute type 1 has an invalid length. [ 266.612108][T10752] bond5: entered promiscuous mode [ 266.633733][T10752] 8021q: adding VLAN 0 to HW filter on device bond5 [ 266.725920][T10752] bond5: (slave bridge6): making interface the new active one [ 266.773355][T10752] bridge6: entered promiscuous mode [ 266.813285][T10752] bridge6: left promiscuous mode [ 267.171397][ T5831] Bluetooth: hci6: command tx timeout [ 267.225694][T10479] veth0_vlan: entered promiscuous mode [ 267.288190][T10790] netlink: 'syz.3.1309': attribute type 1 has an invalid length. [ 267.363869][T10790] bond8: (slave bridge2): making interface the new active one [ 267.394514][T10790] bond8: (slave bridge2): Enslaving as an active interface with an up link [ 267.407991][T10479] veth1_vlan: entered promiscuous mode [ 267.452285][T10790] bond8: (slave gretap1): Enslaving as an active interface with an up link [ 267.484334][T10796] dvmrp0: entered allmulticast mode [ 267.563921][T10479] veth0_macvtap: entered promiscuous mode [ 267.597166][T10479] veth1_macvtap: entered promiscuous mode [ 267.645070][T10479] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 267.663197][T10479] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 267.703088][T10806] netdevsim netdevsim2 eth3 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 267.714833][T10806] netdevsim netdevsim2 eth3 (unregistering): unset [0, 1] type 1 family 0 port 256 - 0 [ 267.725421][T10806] netdevsim netdevsim2 eth3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 267.775828][ T12] netdevsim netdevsim6 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 267.800364][ T12] netdevsim netdevsim6 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 267.854775][ T12] netdevsim netdevsim6 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 267.861355][T10812] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 267.882483][T10806] netdevsim netdevsim2 eth2 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 267.906253][T10809] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 267.930130][T10806] netdevsim netdevsim2 eth2 (unregistering): unset [0, 1] type 1 family 0 port 256 - 0 [ 267.942761][T10806] netdevsim netdevsim2 eth2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 267.951876][T10818] __nla_validate_parse: 83 callbacks suppressed [ 267.951895][T10818] netlink: 20 bytes leftover after parsing attributes in process `syz.3.1317'. [ 267.982326][ T12] netdevsim netdevsim6 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 268.085290][T10806] netdevsim netdevsim2 eth1 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 268.097271][T10806] netdevsim netdevsim2 eth1 (unregistering): unset [0, 1] type 1 family 0 port 256 - 0 [ 268.109525][T10806] netdevsim netdevsim2 eth1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 268.173570][T10806] netdevsim netdevsim2 eth0 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 268.184410][T10806] netdevsim netdevsim2 eth0 (unregistering): unset [0, 1] type 1 family 0 port 256 - 0 [ 268.195490][T10806] netdevsim netdevsim2 eth0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 268.211822][T10827] netlink: 'syz.1.1319': attribute type 1 has an invalid length. [ 268.250700][ T6379] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 268.258775][ T6379] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 268.290039][ T36] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 268.298063][ T36] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 268.335874][ T6379] netdevsim netdevsim2 eth0: set [0, 0] type 1 family 0 port 8472 - 0 [ 268.345769][ T6379] netdevsim netdevsim2 eth0: set [0, 1] type 1 family 0 port 256 - 0 [ 268.357356][ T6379] netdevsim netdevsim2 eth0: set [1, 0] type 2 family 0 port 6081 - 0 [ 268.386785][ T1095] netdevsim netdevsim2 eth1: set [0, 0] type 1 family 0 port 8472 - 0 [ 268.401274][ T1095] netdevsim netdevsim2 eth1: set [0, 1] type 1 family 0 port 256 - 0 [ 268.412008][ T1095] netdevsim netdevsim2 eth1: set [1, 0] type 2 family 0 port 6081 - 0 [ 268.436606][ T1095] netdevsim netdevsim2 eth2: set [0, 0] type 1 family 0 port 8472 - 0 [ 268.445061][ T1095] netdevsim netdevsim2 eth2: set [0, 1] type 1 family 0 port 256 - 0 [ 268.456035][ T1095] netdevsim netdevsim2 eth2: set [1, 0] type 2 family 0 port 6081 - 0 [ 268.488151][ T1095] netdevsim netdevsim2 eth3: set [0, 0] type 1 family 0 port 8472 - 0 [ 268.497943][ T1095] netdevsim netdevsim2 eth3: set [0, 1] type 1 family 0 port 256 - 0 [ 268.511774][ T1095] netdevsim netdevsim2 eth3: set [1, 0] type 2 family 0 port 6081 - 0 [ 268.608180][T10833] netlink: 4 bytes leftover after parsing attributes in process `syz.2.1321'. [ 268.623917][T10833] netlink: 'syz.2.1321': attribute type 1 has an invalid length. [ 268.633324][T10833] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 268.673371][T10837] netlink: 24 bytes leftover after parsing attributes in process `syz.2.1323'. [ 268.689268][T10838] openvswitch: netlink: ERSPAN option length err (len 256, max 255). [ 269.230410][T10865] netlink: 24 bytes leftover after parsing attributes in process `syz.3.1326'. [ 269.250641][ T5831] Bluetooth: hci6: command tx timeout [ 269.391980][T10872] netlink: 8 bytes leftover after parsing attributes in process `syz.3.1329'. [ 269.527298][T10880] netlink: 'syz.2.1330': attribute type 9 has an invalid length. [ 269.548533][T10880] netlink: 'syz.2.1330': attribute type 11 has an invalid length. [ 269.568095][T10882] netlink: 124 bytes leftover after parsing attributes in process `syz.3.1333'. [ 269.568677][T10880] netlink: 'syz.2.1330': attribute type 12 has an invalid length. [ 269.599147][T10880] netlink: 210020 bytes leftover after parsing attributes in process `syz.2.1330'. [ 269.626045][T10886] netlink: 20 bytes leftover after parsing attributes in process `syz.2.1330'. [ 269.633282][T10880] netlink: 4 bytes leftover after parsing attributes in process `syz.2.1330'. [ 269.652992][T10885] tipc: Resetting bearer [ 269.818766][T10891] netlink: 64 bytes leftover after parsing attributes in process `syz.3.1338'. [ 269.969223][T10901] syzkaller1: entered promiscuous mode [ 270.005959][T10901] syzkaller1: entered allmulticast mode [ 270.130817][T10912] netlink: 'syz.1.1340': attribute type 29 has an invalid length. [ 270.160213][T10912] netlink: 'syz.1.1340': attribute type 29 has an invalid length. [ 270.480408][T10929] clip:clip_setentry: non-CLIP VCC [ 270.809579][T10938] nbd1: detected capacity change from 0 to 511 [ 270.817924][T10939] block nbd0: reconnected socket [ 270.851292][ T5152] block nbd0: Receive control failed (result -32) [ 270.851398][ T5831] block nbd1: Receive control failed (result -32) [ 270.970672][T10944] netlink: 'syz.3.1353': attribute type 4 has an invalid length. [ 271.307372][T10942] bond0 (unregistering): (slave bridge_slave_1): Releasing backup interface [ 271.339440][ T5831] Bluetooth: hci6: command tx timeout [ 271.341078][T10954] IPv6: RTM_NEWROUTE with no NLM_F_CREATE or NLM_F_REPLACE [ 271.352348][T10954] IPv6: NLM_F_CREATE should be set when creating new route [ 271.360004][T10954] IPv6: NLM_F_CREATE should be set when creating new route [ 271.367264][T10954] IPv6: NLM_F_CREATE should be set when creating new route [ 271.388537][T10861] hid-generic 0005:4C4A:0009.0001: unknown main item tag 0x0 [ 271.431152][T10942] bond0 (unregistering): Released all slaves [ 271.451003][T10861] hid-generic 0005:4C4A:0009.0001: hidraw0: BLUETOOTH HID v0.09 Device [syz1] on aa:aa:aa:aa:aa:aa [ 271.465570][T10958] IPv6: RTM_NEWROUTE with no NLM_F_CREATE or NLM_F_REPLACE [ 271.781019][T10972] openvswitch: netlink: IP tunnel attribute has 4 unknown bytes. [ 271.820882][T10972] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 272.017750][T10978] delete_channel: no stack [ 272.586905][T11014] netlink: 'syz.2.1369': attribute type 11 has an invalid length. [ 272.629463][T11014] netlink: 'syz.2.1369': attribute type 11 has an invalid length. [ 272.826531][T11025] netlink: 'syz.5.1373': attribute type 2 has an invalid length. [ 273.078204][T11039] __nla_validate_parse: 9 callbacks suppressed [ 273.078224][T11039] netlink: 4 bytes leftover after parsing attributes in process `syz.5.1376'. [ 273.142901][T11045] netlink: 12 bytes leftover after parsing attributes in process `syz.1.1378'. [ 273.188119][T11039] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check. [ 273.463802][T11060] netlink: 'syz.2.1384': attribute type 37 has an invalid length. [ 273.527290][T11072] netlink: 212368 bytes leftover after parsing attributes in process `syz.6.1387'. [ 274.157133][T11109] netlink: 8 bytes leftover after parsing attributes in process `syz.2.1399'. [ 274.244527][T11109] macsec2: entered promiscuous mode [ 274.452558][T11126] netlink: 72 bytes leftover after parsing attributes in process `syz.2.1405'. [ 274.504250][T11129] bridge0: port 2(bridge_slave_1) entered disabled state [ 274.512082][T11129] bridge0: port 1(bridge_slave_0) entered disabled state [ 274.605006][T11132] netlink: 1 bytes leftover after parsing attributes in process `syz.3.1407'. [ 274.621787][T11137] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check. [ 275.107743][T11166] netlink: 12 bytes leftover after parsing attributes in process `syz.6.1417'. [ 275.132855][T11166] netlink: 28 bytes leftover after parsing attributes in process `syz.6.1417'. [ 275.224809][T11166] gretap0: entered promiscuous mode [ 275.234526][T11166] gretap0: left promiscuous mode [ 275.714069][T11203] netlink: 8 bytes leftover after parsing attributes in process `syz.5.1430'. [ 275.743925][T11203] netlink: 12 bytes leftover after parsing attributes in process `syz.5.1430'. [ 276.957659][T11246] batman_adv: Cannot find parent device. Skipping batadv-on-batadv check for gretap1 [ 276.982207][T11246] gretap1: default qdisc (pfifo_fast) fail, fallback to noqueue [ 277.033074][T11246] gretap1: entered promiscuous mode [ 277.043655][T11246] gretap1: entered allmulticast mode [ 277.107250][T11254] : renamed from bridge_slave_0 (while UP) [ 277.170595][T11256] netlink: 'syz.6.1444': attribute type 3 has an invalid length. [ 277.216369][T11261] netlink: 'syz.1.1446': attribute type 7 has an invalid length. [ 277.329586][T11265] ksmbd: Unknown IPC event: 3, ignore. [ 277.341719][T11261] netlink: 'syz.1.1446': attribute type 7 has an invalid length. [ 278.404142][T11340] openvswitch: netlink: Flow key attribute not present in set flow. [ 278.531360][T11347] __nla_validate_parse: 10 callbacks suppressed [ 278.531382][T11347] netlink: 20 bytes leftover after parsing attributes in process `syz.3.1468'. [ 278.582888][T11350] netlink: 20 bytes leftover after parsing attributes in process `syz.5.1471'. [ 279.373584][T11370] tipc: Enabling of bearer rejected, already enabled [ 279.424094][T11370] netlink: 20 bytes leftover after parsing attributes in process `syz.1.1480'. [ 279.622990][T11388] netlink: 'syz.1.1485': attribute type 1 has an invalid length. [ 279.631924][T11388] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 279.894794][T11402] netlink: 20 bytes leftover after parsing attributes in process `syz.6.1491'. [ 279.954703][T11406] openvswitch: netlink: Tunnel attr 195 out of range max 16 [ 280.128519][T11409] xt_l2tp: v2 tid > 0xffff: 1114244 [ 280.224451][T11416] netlink: 'syz.1.1495': attribute type 12 has an invalid length. [ 280.241032][T11416] netlink: 'syz.1.1495': attribute type 29 has an invalid length. [ 280.265191][T11419] netlink: 36 bytes leftover after parsing attributes in process `syz.6.1496'. [ 280.268593][T11416] netlink: 148 bytes leftover after parsing attributes in process `syz.1.1495'. [ 280.312317][T11425] netlink: 'syz.3.1497': attribute type 9 has an invalid length. [ 280.321447][T11416] netlink: 'syz.1.1495': attribute type 2 has an invalid length. [ 280.330031][T11416] netlink: 'syz.1.1495': attribute type 2 has an invalid length. [ 280.579606][T11438] netlink: 24 bytes leftover after parsing attributes in process `syz.6.1502'. [ 280.683129][T11441] netlink: 4 bytes leftover after parsing attributes in process `syz.6.1502'. [ 280.777875][T11444] netlink: 28 bytes leftover after parsing attributes in process `syz.5.1503'. [ 280.883790][T11449] vlan2: entered allmulticast mode [ 280.921735][T11444] netlink: 'syz.5.1503': attribute type 1 has an invalid length. [ 280.983932][T11458] netlink: 12 bytes leftover after parsing attributes in process `syz.5.1503'. [ 280.986993][T11444] bond2: entered promiscuous mode [ 281.011313][T11444] 8021q: adding VLAN 0 to HW filter on device bond2 [ 281.065401][T11444] bond2: (slave bridge2): making interface the new active one [ 281.074732][T11444] bridge2: entered promiscuous mode [ 281.083875][T11444] bond2: (slave bridge2): Enslaving as an active interface with an up link [ 281.215805][T11466] netlink: 'syz.3.1509': attribute type 1 has an invalid length. [ 281.276747][T11468] xt_TCPMSS: Only works on TCP SYN packets [ 281.316768][T11468] bond9: option ad_actor_sys_prio: mode dependency failed, not supported in mode balance-rr(0) [ 281.361743][T11468] bond9 (unregistering): Released all slaves [ 281.509278][T11476] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 282.346297][T11529] 8021q: adding VLAN 0 to HW filter on device bond0 [ 282.383163][ T30] audit: type=1107 audit(1765942008.464:4): pid=11538 uid=0 auid=4294967295 ses=4294967295 subj=unconfined msg='. [ 282.383163][ T30] /B‰·?í8ë÷!­' [ 282.425762][T11529] netdevsim netdevsim2 eth3 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 282.460132][T11529] netdevsim netdevsim2 eth3 (unregistering): unset [0, 1] type 1 family 0 port 256 - 0 [ 282.494072][T11529] netdevsim netdevsim2 eth3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 282.646047][T11529] netdevsim netdevsim2 eth2 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 282.667276][T11529] netdevsim netdevsim2 eth2 (unregistering): unset [0, 1] type 1 family 0 port 256 - 0 [ 282.682080][T11529] netdevsim netdevsim2 eth2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 282.775036][T11529] netdevsim netdevsim2 eth1 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 282.798161][T11529] netdevsim netdevsim2 eth1 (unregistering): unset [0, 1] type 1 family 0 port 256 - 0 [ 282.812388][T11529] netdevsim netdevsim2 eth1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 282.910906][T11556] openvswitch: netlink: Either Ethernet header or EtherType is required. [ 282.915095][T11529] netdevsim netdevsim2 eth0 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 282.939791][T11529] netdevsim netdevsim2 eth0 (unregistering): unset [0, 1] type 1 family 0 port 256 - 0 [ 282.950992][T11529] netdevsim netdevsim2 eth0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 283.243235][ T12] netdevsim netdevsim2 eth0: set [0, 0] type 1 family 0 port 8472 - 0 [ 283.272330][ T12] netdevsim netdevsim2 eth0: set [0, 1] type 1 family 0 port 256 - 0 [ 283.289727][ T12] netdevsim netdevsim2 eth0: set [1, 0] type 2 family 0 port 6081 - 0 [ 283.374519][ T12] netdevsim netdevsim2 eth1: set [0, 0] type 1 family 0 port 8472 - 0 [ 283.399559][ T12] netdevsim netdevsim2 eth1: set [0, 1] type 1 family 0 port 256 - 0 [ 283.422744][ T12] netdevsim netdevsim2 eth1: set [1, 0] type 2 family 0 port 6081 - 0 [ 283.480661][ T6372] netdevsim netdevsim2 eth2: set [0, 0] type 1 family 0 port 8472 - 0 [ 283.499726][ T6372] netdevsim netdevsim2 eth2: set [0, 1] type 1 family 0 port 256 - 0 [ 283.513650][T11588] openvswitch: netlink: Missing key (keys=40, expected=2000) [ 283.522153][ T6372] netdevsim netdevsim2 eth2: set [1, 0] type 2 family 0 port 6081 - 0 [ 283.563693][T11592] __nla_validate_parse: 18 callbacks suppressed [ 283.563714][T11592] netlink: 16 bytes leftover after parsing attributes in process `syz.1.1549'. [ 283.595310][ T6379] netdevsim netdevsim2 eth3: set [0, 0] type 1 family 0 port 8472 - 0 [ 283.605968][ T6379] netdevsim netdevsim2 eth3: set [0, 1] type 1 family 0 port 256 - 0 [ 283.616222][ T6379] netdevsim netdevsim2 eth3: set [1, 0] type 2 family 0 port 6081 - 0 [ 283.652223][T11598] netlink: 'syz.5.1550': attribute type 1 has an invalid length. [ 283.712215][T11599] netlink: 4 bytes leftover after parsing attributes in process `syz.5.1550'. [ 283.720105][T11598] 8021q: adding VLAN 0 to HW filter on device bond3 [ 283.730542][T11566] syz.6.1536 (11566) used greatest stack depth: 16864 bytes left [ 283.894218][T11604] netlink: 'syz.1.1553': attribute type 13 has an invalid length. [ 283.921987][T11604] veth0_macvtap: left promiscuous mode [ 283.936098][T11604] macvtap0: entered allmulticast mode [ 283.942893][T11613] delete_channel: no stack [ 283.959925][T11604] macvtap0: refused to change device tx_queue_len [ 284.003963][T11616] netlink: 212324 bytes leftover after parsing attributes in process `syz.1.1553'. [ 284.035102][T11616] netlink: 212324 bytes leftover after parsing attributes in process `syz.1.1553'. [ 284.048248][T11616] netlink: 212324 bytes leftover after parsing attributes in process `syz.1.1553'. [ 284.348498][T11618] bridge0: port 2(bridge_slave_1) entered disabled state [ 284.356502][T11618] bridge0: port 1(bridge_slave_0) entered disabled state [ 284.543327][T11618] bridge_slave_0: left promiscuous mode [ 284.555173][T11618] bridge0: port 1(bridge_slave_0) entered disabled state [ 284.586089][T11618] bridge_slave_1: left allmulticast mode [ 284.593580][T11618] bridge_slave_1: left promiscuous mode [ 284.600588][T11618] bridge0: port 2(bridge_slave_1) entered disabled state [ 284.625586][T11618] bond0: (slave bond_slave_0): Releasing backup interface [ 284.646199][T11618] bond0: (slave bond_slave_1): Releasing backup interface [ 284.680170][T11618] team0: Port device team_slave_0 removed [ 284.713751][T11618] team0: Port device team_slave_1 removed [ 284.727485][T11618] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 284.745644][T11618] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 284.764965][T11618] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 284.787401][T11618] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 284.832958][T11618] A link change request failed with some changes committed already. Interface hsr_slave_0 may have been left with an inconsistent configuration, please check. [ 284.853428][T11614] workqueue: Failed to create a rescuer kthread for wq "bond1": -EINTR [ 284.854418][ T13] netdevsim netdevsim5 netdevsim0: set [0, 0] type 1 family 0 port 8472 - 0 [ 284.877170][ T13] netdevsim netdevsim5 netdevsim1: set [0, 0] type 1 family 0 port 8472 - 0 [ 284.910100][ T13] netdevsim netdevsim5 netdevsim2: set [0, 0] type 1 family 0 port 8472 - 0 [ 284.920576][ T13] netdevsim netdevsim5 netdevsim3: set [0, 0] type 1 family 0 port 8472 - 0 [ 285.128603][T11648] netlink: 4 bytes leftover after parsing attributes in process `syz.1.1564'. [ 285.157247][T11642] bond7: option arp_interval: mode dependency failed, not supported in mode balance-tlb(5) [ 285.206274][T11642] bond7 (unregistering): Released all slaves [ 285.225152][T11645] netlink: 4 bytes leftover after parsing attributes in process `syz.1.1564'. [ 285.390744][T11667] netlink: 13 bytes leftover after parsing attributes in process `syz.6.1567'. [ 285.391533][T11671] validate_nla: 3 callbacks suppressed [ 285.391548][T11671] netlink: 'syz.5.1570': attribute type 21 has an invalid length. [ 285.412590][T11667] netlink: 72 bytes leftover after parsing attributes in process `syz.6.1567'. [ 285.465034][T11667] netlink: 'syz.6.1567': attribute type 10 has an invalid length. [ 285.486770][T11667] netlink: 228 bytes leftover after parsing attributes in process `syz.6.1567'. [ 285.634684][T11686] IPVS: set_ctl: invalid protocol: 8 172.30.1.2:20000 [ 285.742463][T11686] IPVS: set_ctl: invalid protocol: 44 10.1.1.0:20004 [ 286.380806][T11732] tipc: Enabled bearer , priority 0 [ 286.430524][T11732] tipc: Resetting bearer [ 286.597790][T11730] tipc: Disabling bearer [ 287.249460][ T5831] Bluetooth: hci1: command 0x0406 tx timeout [ 287.281221][T11799] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 287.355344][T11799] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 287.403983][T11799] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 287.442471][T11799] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 287.483669][T11799] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 287.513689][T11799] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 287.548006][T11799] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 287.570034][T11799] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 287.599888][T11799] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 288.286341][T11853] sctp: [Deprecated]: syz.3.1622 (pid 11853) Use of int in maxseg socket option. [ 288.286341][T11853] Use struct sctp_assoc_value instead [ 288.391422][T11855] bridge_slave_0: left allmulticast mode [ 288.397218][T11855] bridge_slave_0: left promiscuous mode [ 288.439722][T11855] bridge0: port 1(bridge_slave_0) entered disabled state [ 288.496566][T11855] bond0: (slave 32): Releasing backup interface [ 288.563918][T11855] bond0: (slave bond_slave_1): Releasing backup interface [ 288.643625][T11855] team0: Port device team_slave_0 removed [ 288.716525][T11855] team0: Port device team_slave_1 removed [ 288.746691][T11855] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 288.761358][T11855] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 288.784161][T11855] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 288.804123][T11855] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 289.014116][T11882] __nla_validate_parse: 6 callbacks suppressed [ 289.014136][T11882] netlink: 4 bytes leftover after parsing attributes in process `syz.5.1627'. [ 289.053349][T11882] bridge_slave_1: left allmulticast mode [ 289.079586][T11882] bridge_slave_1: left promiscuous mode [ 289.086493][T11882] bridge0: port 2(bridge_slave_1) entered disabled state [ 289.097206][T11882] bridge_slave_0: left allmulticast mode [ 289.142648][T11882] bridge_slave_0: left promiscuous mode [ 289.159620][T11882] bridge0: port 1(bridge_slave_0) entered disabled state [ 289.181601][T11894] netlink: 188 bytes leftover after parsing attributes in process `syz.1.1631'. [ 289.578369][T11922] netlink: 8 bytes leftover after parsing attributes in process `syz.6.1637'. [ 289.792228][T11935] netlink: 12 bytes leftover after parsing attributes in process `syz.6.1644'. [ 289.851364][T11939] netlink: 'syz.2.1646': attribute type 1 has an invalid length. [ 289.871033][T11942] netlink: 596 bytes leftover after parsing attributes in process `syz.5.1647'. [ 289.896917][T11938] netlink: 'syz.2.1646': attribute type 1 has an invalid length. [ 289.943550][T11944] bond8 (unregistering): Released all slaves [ 289.970994][T11948] bridge: RTM_NEWNEIGH bridge0 without NUD_PERMANENT [ 289.980270][T11948] netlink: 28 bytes leftover after parsing attributes in process `syz.6.1648'. [ 289.993407][T11948] netlink: 28 bytes leftover after parsing attributes in process `syz.6.1648'. [ 290.088535][T11957] netlink: 8 bytes leftover after parsing attributes in process `syz.6.1648'. [ 290.165037][T11961] netlink: 96 bytes leftover after parsing attributes in process `syz.3.1651'. [ 290.185191][T11961] netlink: 4 bytes leftover after parsing attributes in process `syz.3.1651'. [ 290.202618][T11958] netlink: 'syz.2.1650': attribute type 1 has an invalid length. [ 290.309343][T11970] netlink: 'syz.2.1653': attribute type 4 has an invalid length. [ 290.754629][T11995] netlink: 'syz.1.1659': attribute type 1 has an invalid length. [ 290.855276][T11995] 8021q: adding VLAN 0 to HW filter on device bond6 [ 291.080182][T12010] netdevsim netdevsim5 netdevsim0: entered promiscuous mode [ 291.204456][T12016] netlink: 'syz.6.1664': attribute type 1 has an invalid length. [ 291.708463][T12032] batman_adv: Cannot find parent device. Skipping batadv-on-batadv check for gretap1 [ 291.738587][T12033] netlink: 'syz.6.1667': attribute type 7 has an invalid length. [ 291.751140][T12033] netlink: 'syz.6.1667': attribute type 1 has an invalid length. [ 291.860260][T12035] net_ratelimit: 27 callbacks suppressed [ 291.860284][T12035] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 292.421527][T12050] netlink: 'syz.5.1674': attribute type 21 has an invalid length. [ 292.731519][T12060] x_tables: duplicate underflow at hook 3 [ 292.959695][T12065] gtp0: entered promiscuous mode [ 292.976605][T12065] gtp0: entered allmulticast mode [ 293.340737][T12088] Bluetooth: hci1: too big key_count value 32778 [ 293.565957][T12098] tipc: Enabling of bearer rejected, failed to enable media [ 293.687968][T12104] ÿÿÿÿÿÿ¤lòo¾k‰÷: renamed from lo [ 293.750322][T12110] xt_policy: neither incoming nor outgoing policy selected [ 293.884851][T12115] xfrm1: entered promiscuous mode [ 293.895310][T12115] xfrm1: entered allmulticast mode [ 294.095000][T12124] netlink: 'syz.1.1697': attribute type 1 has an invalid length. [ 294.349962][T12131] syzkaller0: entered promiscuous mode [ 294.355578][T12131] syzkaller0: entered allmulticast mode [ 294.399711][T12131] RDS: rds_bind could not find a transport for ::ffff:10.1.1.0, load rds_tcp or rds_rdma? [ 294.800374][ T25] block nbd0: Possible stuck request ffff888025215080: control (read@0,1024B). Runtime 60 seconds [ 294.813015][ T25] block nbd0: Possible stuck request ffff888025215240: control (read@1024,1024B). Runtime 60 seconds [ 294.829678][ T25] block nbd0: Possible stuck request ffff888025215400: control (read@2048,1024B). Runtime 60 seconds [ 294.842473][T12147] block nbd0: Dead connection, failed to find a fallback [ 294.851602][T12147] block nbd0: shutting down sockets [ 294.857492][T12147] I/O error, dev nbd0, sector 2 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 2 [ 294.868571][ T25] block nbd0: Possible stuck request ffff8880252155c0: control (read@3072,1024B). Runtime 60 seconds [ 294.880644][T12147] Buffer I/O error on dev nbd0, logical block 1, async page read [ 294.888560][T12147] I/O error, dev nbd0, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 2 [ 294.897759][T12147] Buffer I/O error on dev nbd0, logical block 0, async page read [ 294.906056][T12147] I/O error, dev nbd0, sector 6 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 2 [ 294.915604][T12147] Buffer I/O error on dev nbd0, logical block 3, async page read [ 294.924050][T12147] I/O error, dev nbd0, sector 4 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 2 [ 294.933769][T12147] Buffer I/O error on dev nbd0, logical block 2, async page read [ 294.943165][ T6448] I/O error, dev nbd0, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 2 [ 294.952652][ T6448] Buffer I/O error on dev nbd0, logical block 0, async page read [ 294.961061][ T6448] I/O error, dev nbd0, sector 2 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 2 [ 294.970448][ T6448] Buffer I/O error on dev nbd0, logical block 1, async page read [ 294.978499][ T6448] I/O error, dev nbd0, sector 4 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 2 [ 294.987938][ T6448] Buffer I/O error on dev nbd0, logical block 2, async page read [ 294.999489][ T6448] I/O error, dev nbd0, sector 6 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 2 [ 295.008562][ T6448] Buffer I/O error on dev nbd0, logical block 3, async page read [ 295.017309][ T6448] I/O error, dev nbd0, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 2 [ 295.027879][ T6448] Buffer I/O error on dev nbd0, logical block 0, async page read [ 295.036258][ T6448] I/O error, dev nbd0, sector 2 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 2 [ 295.045939][ T6448] Buffer I/O error on dev nbd0, logical block 1, async page read [ 295.058105][ T6448] ldm_validate_partition_table(): Disk read failed. [ 295.067621][ T6448] Dev nbd0: unable to read RDB block 0 [ 295.075676][ T6448] nbd0: unable to read partition table [ 295.113908][ T6448] ldm_validate_partition_table(): Disk read failed. [ 295.131836][ T6448] Dev nbd0: unable to read RDB block 0 [ 295.150418][ T6448] nbd0: unable to read partition table [ 295.213748][T12156] xt_CT: No such helper "pptp" [ 295.222340][ T6448] udevd[6448]: failed to send result of seq 13725 to main daemon: Connection refused [ 295.293475][T12165] syzkaller0: entered promiscuous mode [ 295.333231][T12165] syzkaller0: entered allmulticast mode [ 295.537747][T12175] bond4: invalid ARP target 0.0.0.0 specified for addition [ 295.545598][T12175] bond4: option arp_ip_target: invalid value (0) [ 295.557953][T12175] bond4 (unregistering): Released all slaves [ 295.665931][T12179] sctp: [Deprecated]: syz.3.1710 (pid 12179) Use of int in max_burst socket option. [ 295.665931][T12179] Use struct sctp_assoc_value instead [ 295.827639][T12200] __nla_validate_parse: 16 callbacks suppressed [ 295.827661][T12200] netlink: 16 bytes leftover after parsing attributes in process `syz.5.1714'. [ 295.978370][T12204] bond1: Unable to set down delay as MII monitoring is disabled [ 296.002634][T12204] bond1 (unregistering): Released all slaves [ 296.105068][T12207] A link change request failed with some changes committed already. Interface hsr_slave_0 may have been left with an inconsistent configuration, please check. [ 297.010164][T12236] syzkaller0: entered promiscuous mode [ 297.026255][T12236] syzkaller0: entered allmulticast mode [ 297.350431][T12249] netlink: 'syz.6.1730': attribute type 3 has an invalid length. [ 297.377435][T12249] netlink: 666 bytes leftover after parsing attributes in process `syz.6.1730'. [ 297.627319][T12261] bond1: Unable to set peer notification delay as MII monitoring is disabled [ 297.641394][T12261] bond1 (unregistering): Released all slaves [ 297.965031][T12273] IPVS: set_ctl: invalid protocol: 2 172.20.20.50:20001 [ 298.038400][T12280] netlink: 8 bytes leftover after parsing attributes in process `syz.3.1739'. [ 298.077420][T12280] netlink: 4 bytes leftover after parsing attributes in process `syz.3.1739'. [ 298.121817][T12285] netlink: 4 bytes leftover after parsing attributes in process `syz.1.1740'. [ 298.132003][T12281] A link change request failed with some changes committed already. Interface hsr_slave_0 may have been left with an inconsistent configuration, please check. [ 298.438279][T12297] netlink: 32 bytes leftover after parsing attributes in process `syz.1.1744'. [ 298.458476][T12297] netlink: 32 bytes leftover after parsing attributes in process `syz.1.1744'. [ 298.494553][T12304] netlink: 8 bytes leftover after parsing attributes in process `syz.6.1745'. [ 298.503790][T12299] netlink: 'syz.3.1743': attribute type 15 has an invalid length. [ 298.503815][T12299] netlink: 24 bytes leftover after parsing attributes in process `syz.3.1743'. [ 298.692930][T12314] netlink: 'syz.6.1748': attribute type 1 has an invalid length. [ 298.752450][T12319] netlink: 20 bytes leftover after parsing attributes in process `syz.1.1747'. [ 298.840781][T12318] bond1: (slave geneve2): making interface the new active one [ 298.854715][T12318] bond1: (slave geneve2): Enslaving as an active interface with an up link [ 298.883181][ T1095] netdevsim netdevsim6 netdevsim0: set [1, 1] type 2 family 0 port 20004 - 0 [ 298.909790][ T1095] netdevsim netdevsim6 netdevsim1: set [1, 1] type 2 family 0 port 20004 - 0 [ 298.949660][ T1095] netdevsim netdevsim6 netdevsim2: set [1, 1] type 2 family 0 port 20004 - 0 [ 298.975794][ T1095] netdevsim netdevsim6 netdevsim3: set [1, 1] type 2 family 0 port 20004 - 0 [ 299.261008][T12340] netlink: 'syz.1.1753': attribute type 21 has an invalid length. [ 299.642227][T12358] netlink: 'syz.5.1760': attribute type 10 has an invalid length. [ 299.655006][T12358] netdevsim netdevsim5 netdevsim0: left promiscuous mode [ 299.675445][T12358] bond0: (slave netdevsim0): Enslaving as an active interface with an up link [ 299.952683][T12368] syzkaller0: entered promiscuous mode [ 299.958776][T12368] syzkaller0: entered allmulticast mode [ 300.378770][T12392] veth0: entered promiscuous mode [ 300.468781][T12390] veth0: left promiscuous mode [ 300.908202][T12420] __nla_validate_parse: 6 callbacks suppressed [ 300.908222][T12420] netlink: 8 bytes leftover after parsing attributes in process `syz.1.1779'. [ 301.217794][T12431] netlink: 96 bytes leftover after parsing attributes in process `syz.3.1783'. [ 301.265041][T12431] netlink: 44 bytes leftover after parsing attributes in process `syz.3.1783'. [ 301.315701][T12436] openvswitch: netlink: IP tunnel dst address not specified [ 301.331508][T12431] netlink: 'syz.3.1783': attribute type 1 has an invalid length. [ 301.436242][T12445] netlink: 48 bytes leftover after parsing attributes in process `syz.5.1786'. [ 301.658254][T12458] netlink: 12 bytes leftover after parsing attributes in process `syz.3.1789'. [ 301.946279][T12469] netlink: 'syz.3.1793': attribute type 1 has an invalid length. [ 302.058604][T12473] tipc: Started in network mode [ 302.074402][T12473] tipc: Node identity 7, cluster identity 4711 [ 302.089409][T12473] tipc: Node number set to 7 [ 302.188013][T12477] netlink: 8 bytes leftover after parsing attributes in process `syz.3.1797'. [ 302.242154][T12477] : entered promiscuous mode [ 302.325473][T12489] netlink: 24 bytes leftover after parsing attributes in process `syz.5.1799'. [ 302.340042][T12488] netlink: 44 bytes leftover after parsing attributes in process `syz.6.1800'. [ 302.390943][T12488] netlink: 43 bytes leftover after parsing attributes in process `syz.6.1800'. [ 302.422964][T12494] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check. [ 302.439703][T12488] netlink: 'syz.6.1800': attribute type 6 has an invalid length. [ 302.448096][T12488] netlink: 'syz.6.1800': attribute type 5 has an invalid length. [ 302.464570][T12488] netlink: 43 bytes leftover after parsing attributes in process `syz.6.1800'. [ 303.630395][T12551] bond0: (slave macvlan3): Opening slave failed [ 303.927575][T12572] netdevsim netdevsim3: Direct firmware load for failed with error -2 [ 303.960943][T12572] netdevsim netdevsim3: Falling back to sysfs fallback for: [ 304.963477][T12605] wireguard0: entered promiscuous mode [ 304.977554][T12605] wireguard0: entered allmulticast mode [ 305.008799][T12605] team0: Port device wireguard0 added [ 306.590491][T12676] sctp: [Deprecated]: syz.5.1854 (pid 12676) Use of int in max_burst socket option. [ 306.590491][T12676] Use struct sctp_assoc_value instead [ 306.851880][T12691] __nla_validate_parse: 10 callbacks suppressed [ 306.851905][T12691] netlink: 8 bytes leftover after parsing attributes in process `syz.1.1858'. [ 306.868583][T12691] netlink: 4 bytes leftover after parsing attributes in process `syz.1.1858'. [ 307.022133][T12701] netlink: 4 bytes leftover after parsing attributes in process `syz.3.1864'. [ 307.032575][T12704] xt_nat: multiple ranges no longer supported [ 307.174325][T12711] tipc: Enabling of bearer rejected, failed to enable media [ 307.390365][T12726] x_tables: ip6_tables: NETMAP.0 target: invalid size 40 (kernel) != (user) 0 [ 307.422877][T12727] netlink: 8 bytes leftover after parsing attributes in process `syz.5.1873'. [ 307.983298][T12766] netlink: 'syz.3.1882': attribute type 8 has an invalid length. [ 308.136247][T12774] netlink: 36 bytes leftover after parsing attributes in process `syz.6.1885'. [ 308.511150][T12800] netlink: 8 bytes leftover after parsing attributes in process `syz.3.1893'. [ 308.613580][T12796] sctp: [Deprecated]: syz.5.1891 (pid 12796) Use of int in max_burst socket option. [ 308.613580][T12796] Use struct sctp_assoc_value instead [ 308.823933][T12817] netlink: 'syz.1.1898': attribute type 21 has an invalid length. [ 308.852374][T12817] netlink: 152 bytes leftover after parsing attributes in process `syz.1.1898'. [ 308.950513][T12824] netlink: 4 bytes leftover after parsing attributes in process `syz.5.1900'. [ 308.991917][T12824] netlink: 12 bytes leftover after parsing attributes in process `syz.5.1900'. [ 309.017532][T12815] netlink: 8 bytes leftover after parsing attributes in process `syz.1.1898'. [ 309.329925][T12842] bond10: entered allmulticast mode [ 309.361896][T12842] ip6gretap2: entered allmulticast mode [ 309.368092][T12842] bond10: (slave ip6gretap2): Enslaving as an active interface with an up link [ 310.086714][T12884] netlink: 'syz.5.1919': attribute type 21 has an invalid length. [ 310.358498][T12899] netlink: 'syz.6.1922': attribute type 1 has an invalid length. [ 310.408568][T12899] bond3: entered promiscuous mode [ 310.414860][T12899] 8021q: adding VLAN 0 to HW filter on device bond3 [ 310.483518][T12902] bond3: (slave bridge3): making interface the new active one [ 310.492054][T12902] bridge3: entered promiscuous mode [ 310.498681][T12902] bond3: (slave bridge3): Enslaving as an active interface with an up link [ 311.347364][T12950] netlink: 'syz.1.1934': attribute type 2 has an invalid length. [ 311.364550][T12950] netlink: 'syz.1.1934': attribute type 8 has an invalid length. [ 311.378354][T12953] pim6reg1: entered promiscuous mode [ 311.389890][T12953] pim6reg1: entered allmulticast mode [ 311.439530][T12956] bond0: entered promiscuous mode [ 311.447464][T12956] batadv0: entered promiscuous mode [ 311.457851][T12956] hsr1: Slave A (bond0) is not up; please bring it up to get a fully working HSR network [ 311.480740][T12956] hsr1: Slave B (batadv0) is not up; please bring it up to get a fully working HSR network [ 311.502993][T12956] 8021q: adding VLAN 0 to HW filter on device hsr1 [ 311.514905][T12956] bond0: left promiscuous mode [ 311.522450][T12956] batadv0: left promiscuous mode [ 311.556426][T12963] sch_tbf: burst 127 is lower than device syzkaller0 mtu (313) ! [ 311.571860][T12967] sch_tbf: burst 127 is lower than device syzkaller0 mtu (313) ! [ 311.895603][T12982] x_tables: ip6_tables: CLASSIFY target: used from hooks PREROUTING, but only usable from FORWARD/OUTPUT/POSTROUTING [ 311.905871][T12985] __nla_validate_parse: 9 callbacks suppressed [ 311.905891][T12985] netlink: 20 bytes leftover after parsing attributes in process `syz.1.1947'. [ 312.016998][T12982] xt_l2tp: missing protocol rule (udp|l2tpip) [ 312.028112][T12982] netlink: 24 bytes leftover after parsing attributes in process `syz.2.1945'. [ 312.325531][T13011] netlink: 'syz.3.1957': attribute type 1 has an invalid length. [ 312.337415][T13015] sctp: [Deprecated]: syz.1.1956 (pid 13015) Use of struct sctp_assoc_value in delayed_ack socket option. [ 312.337415][T13015] Use struct sctp_sack_info instead [ 312.478616][T13011] 8021q: adding VLAN 0 to HW filter on device bond11 [ 312.511406][T13024] netlink: 4 bytes leftover after parsing attributes in process `syz.3.1957'. [ 312.558567][T13027] xt_l2tp: missing protocol rule (udp|l2tpip) [ 312.590097][T13027] delete_channel: no stack [ 312.758412][T13034] netlink: 4 bytes leftover after parsing attributes in process `syz.1.1962'. [ 312.865010][T13034] bond0: (slave dummy0): Releasing backup interface [ 313.031473][T13051] bond4: entered promiscuous mode [ 313.037605][T13051] bond4: entered allmulticast mode [ 313.046901][T13051] 8021q: adding VLAN 0 to HW filter on device bond4 [ 313.055896][T13058] netlink: 24 bytes leftover after parsing attributes in process `syz.3.1969'. [ 313.196842][T13066] netlink: 'syz.1.1971': attribute type 10 has an invalid length. [ 313.251950][T13066] netlink: 'syz.1.1971': attribute type 10 has an invalid length. [ 313.280219][T13070] netlink: 'syz.6.1972': attribute type 1 has an invalid length. [ 313.300286][T13066] netlink: 12 bytes leftover after parsing attributes in process `syz.1.1971'. [ 313.319488][T13066] netlink: 12 bytes leftover after parsing attributes in process `syz.1.1971'. [ 313.410445][T13070] netlink: 28 bytes leftover after parsing attributes in process `syz.6.1972'. [ 313.443719][T13076] bond5: (slave veth4): Enslaving as an active interface with a down link [ 313.466368][T13070] 8021q: adding VLAN 0 to HW filter on device bond5 [ 313.580826][T13090] netlink: 4 bytes leftover after parsing attributes in process `syz.6.1979'. [ 313.607818][T13092] wlan0 speed is unknown, defaulting to 1000 [ 313.659564][T13092] wlan0 speed is unknown, defaulting to 1000 [ 313.667165][T13092] wlan0 speed is unknown, defaulting to 1000 [ 313.694599][T13092] iwpm_register_pid: Unable to send a nlmsg (client = 2) [ 313.721525][T13094] netlink: 8 bytes leftover after parsing attributes in process `syz.3.1981'. [ 313.727196][T13092] infiniband syz0: RDMA CMA: cma_listen_on_dev, error -98 [ 313.791732][T13098] netlink: 'syz.1.1983': attribute type 4 has an invalid length. [ 313.834284][T13105] netlink: 'syz.6.1984': attribute type 23 has an invalid length. [ 313.843120][T13107] netlink: 'syz.1.1983': attribute type 4 has an invalid length. [ 313.925794][T13092] wlan0 speed is unknown, defaulting to 1000 [ 313.953482][T13098] openvswitch: netlink: Flow key attr not present in new flow. [ 313.969575][ C1] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 313.980728][ C1] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 313.993068][T13092] wlan0 speed is unknown, defaulting to 1000 [ 314.031607][T13092] wlan0 speed is unknown, defaulting to 1000 [ 314.064999][T13092] wlan0 speed is unknown, defaulting to 1000 [ 314.107191][T13092] wlan0 speed is unknown, defaulting to 1000 [ 314.130750][T10858] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 314.157668][T13092] wlan0 speed is unknown, defaulting to 1000 [ 314.204120][T13092] wlan0 speed is unknown, defaulting to 1000 [ 314.211299][ C1] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 314.244053][T13092] wlan0 speed is unknown, defaulting to 1000 [ 314.266009][T13092] wlan0 speed is unknown, defaulting to 1000 [ 314.414045][T13128] mac80211_hwsim hwsim5 syzkaller0: left promiscuous mode [ 314.421764][T13128] mac80211_hwsim hwsim5 syzkaller0: left allmulticast mode [ 314.651438][T13141] input: Bluetooth HID Boot Protocol Device as /devices/virtual/bluetooth/hci6/hci6:200/input5 [ 314.697970][T13149] openvswitch: netlink: Flow key attr not present in new flow. [ 314.728087][T13148] nbd: device at index 2 is going down [ 314.780752][T13156] nbd: device at index 2 is going down [ 315.083678][T13174] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check. [ 315.150229][T13180] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 315.194498][T13181] netlink: 'syz.5.2009': attribute type 10 has an invalid length. [ 315.681472][T10861] IPVS: starting estimator thread 0... [ 315.779112][T13206] IPVS: using max 27 ests per chain, 64800 per kthread [ 315.952298][T13221] syzkaller0: entered promiscuous mode [ 315.957840][T13221] syzkaller0: entered allmulticast mode [ 316.023542][T13230] netlink: ct family unspecified [ 316.050966][T13230] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 316.489834][T13241] netlink: 'syz.5.2026': attribute type 6 has an invalid length. [ 317.152447][T13292] __nla_validate_parse: 15 callbacks suppressed [ 317.152470][T13292] netlink: 4 bytes leftover after parsing attributes in process `syz.3.2035'. [ 317.239363][T13296] netlink: 4 bytes leftover after parsing attributes in process `syz.6.2039'. [ 317.404278][T13296] hsr_slave_0 (unregistering): left promiscuous mode [ 317.414030][T13308] netlink: 4464 bytes leftover after parsing attributes in process `syz.3.2040'. [ 317.614526][T13320] netlink: 'syz.2.2041': attribute type 58 has an invalid length. [ 317.641569][T13320] netlink: 20 bytes leftover after parsing attributes in process `syz.2.2041'. [ 318.122463][T13355] netlink: 12 bytes leftover after parsing attributes in process `syz.5.2052'. [ 318.304433][T13363] netlink: 24 bytes leftover after parsing attributes in process `syz.6.2055'. [ 318.314655][T13366] x_tables: ip6_tables: CLASSIFY target: used from hooks INPUT, but only usable from FORWARD/OUTPUT/POSTROUTING [ 318.341304][T13363] netlink: 'syz.6.2055': attribute type 1 has an invalid length. [ 318.350014][T13364] netlink: 'syz.6.2055': attribute type 1 has an invalid length. [ 318.470701][T13374] netlink: 8 bytes leftover after parsing attributes in process `syz.2.2058'. [ 318.543955][T13378] netlink: 8 bytes leftover after parsing attributes in process `syz.6.2059'. [ 318.562208][T13378] netlink: 4 bytes leftover after parsing attributes in process `syz.6.2059'. [ 318.606506][T13381] netlink: 60 bytes leftover after parsing attributes in process `syz.5.2062'. [ 318.621404][T13381] netlink: 'syz.5.2062': attribute type 1 has an invalid length. [ 319.214052][T13411] pimreg3: entered allmulticast mode [ 319.253842][ T24] net_ratelimit: 5 callbacks suppressed [ 319.253864][ T24] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 319.306863][T13420] IPv6: RTM_NEWROUTE with no NLM_F_CREATE or NLM_F_REPLACE [ 319.314285][T13420] IPv6: NLM_F_CREATE should be set when creating new route [ 319.355851][T13423] netlink: 'syz.5.2076': attribute type 13 has an invalid length. [ 319.405312][T13423] netlink: 'syz.5.2076': attribute type 11 has an invalid length. [ 319.989503][T13465] bond0: (slave rose0): Error: Device can not be enslaved while up [ 320.022076][T13467] siw: device registration error -23 [ 320.210459][T10858] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 320.299864][ T5911] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 320.507237][T13495] mac80211_hwsim hwsim8 syzkaller0: entered promiscuous mode [ 320.515671][T13495] mac80211_hwsim hwsim8 syzkaller0: entered allmulticast mode [ 320.856685][T13513] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 320.865825][ C1] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 321.071140][T13508] veth3: left allmulticast mode [ 321.082374][T13508] mac80211_hwsim hwsim8 syzkaller0: left promiscuous mode [ 321.094588][T13508] mac80211_hwsim hwsim8 syzkaller0: left allmulticast mode [ 321.112604][T13508] A link change request failed with some changes committed already. Interface bond1 may have been left with an inconsistent configuration, please check. [ 321.145148][ T36] netdevsim netdevsim2 eth0: unset [0, 0] type 1 family 0 port 8472 - 0 [ 321.197128][ T36] netdevsim netdevsim2 eth0: unset [1, 0] type 2 family 0 port 6081 - 0 [ 321.216967][ T36] netdevsim netdevsim2 eth1: unset [0, 0] type 1 family 0 port 8472 - 0 [ 321.242859][ T36] netdevsim netdevsim2 eth1: unset [1, 0] type 2 family 0 port 6081 - 0 [ 321.280924][ T6373] netdevsim netdevsim2 eth2: unset [0, 0] type 1 family 0 port 8472 - 0 [ 321.298951][ T6373] netdevsim netdevsim2 eth2: unset [1, 0] type 2 family 0 port 6081 - 0 [ 321.320556][ T6373] netdevsim netdevsim2 eth3: unset [0, 0] type 1 family 0 port 8472 - 0 [ 321.330203][ T5918] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 321.351383][ T6373] netdevsim netdevsim2 eth3: unset [1, 0] type 2 family 0 port 6081 - 0 [ 321.650625][T10858] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 321.917756][T13582] mac80211_hwsim hwsim8 syzkaller0: entered promiscuous mode [ 321.943122][T13582] mac80211_hwsim hwsim8 syzkaller0: entered allmulticast mode [ 322.011269][T13581] netlink: 'syz.6.2121': attribute type 1 has an invalid length. [ 322.022816][T13581] nbd: error processing sock list [ 322.027949][T13581] block nbd3: shutting down sockets [ 322.197410][T13593] __nla_validate_parse: 14 callbacks suppressed [ 322.197431][T13593] netlink: 12 bytes leftover after parsing attributes in process `syz.3.2126'. [ 322.245841][T13592] x_tables: ip6_tables: icmp6 match: only valid for protocol 58 [ 322.369960][ T5918] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 322.420202][T13611] netlink: 12 bytes leftover after parsing attributes in process `syz.3.2130'. [ 322.456157][T13611] netlink: 4 bytes leftover after parsing attributes in process `syz.3.2130'. [ 322.462025][T13615] netlink: 28 bytes leftover after parsing attributes in process `syz.6.2132'. [ 322.491556][T13615] netlink: 28 bytes leftover after parsing attributes in process `syz.6.2132'. [ 322.745525][T13626] netlink: 'syz.1.2135': attribute type 3 has an invalid length. [ 322.754841][T13626] netlink: 'syz.1.2135': attribute type 3 has an invalid length. [ 322.779452][T13626] netlink: 'syz.1.2135': attribute type 3 has an invalid length. [ 322.806092][T13626] netlink: 'syz.1.2135': attribute type 3 has an invalid length. [ 322.824703][T13637] netlink: 100 bytes leftover after parsing attributes in process `syz.2.2139'. [ 322.831699][T13629] netlink: 24 bytes leftover after parsing attributes in process `syz.5.2137'. [ 322.993480][T13644] netlink: 32 bytes leftover after parsing attributes in process `syz.5.2137'. [ 323.148542][T13656] netlink: 28 bytes leftover after parsing attributes in process `syz.2.2143'. [ 323.260279][ T981] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 323.317896][T13666] netlink: 112 bytes leftover after parsing attributes in process `syz.2.2146'. [ 323.910847][T13703] macsec3: entered allmulticast mode [ 323.921555][T13710] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 323.948712][T13710] gre0: entered promiscuous mode [ 323.975630][T13714] validate_nla: 34 callbacks suppressed [ 323.975652][T13714] netlink: 'syz.2.2162': attribute type 2 has an invalid length. [ 324.030339][T13716] xt_time: invalid argument - start or stop time greater than 23:59:59 [ 324.460559][ T5918] net_ratelimit: 1 callbacks suppressed [ 324.460581][ T5918] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 324.887835][ T30] audit: type=1107 audit(1765942050.964:5): pid=13764 uid=0 auid=4294967295 ses=4294967295 subj=unconfined msg='Ù‹5ž÷Œ•%èÍUýAÊÃËÙ ë0ä™l…t¿Ý•/Öÿ Ž6òЍŠç›' [ 325.176435][T13779] sctp: [Deprecated]: syz.1.2180 (pid 13779) Use of int in max_burst socket option. [ 325.176435][T13779] Use struct sctp_assoc_value instead [ 325.432397][T13797] netlink: 'syz.1.2186': attribute type 11 has an invalid length. [ 325.502948][T13797] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 325.512361][ C1] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 325.521429][ T5918] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 325.544531][T13801] team0: Cannot enslave team device to itself [ 325.842709][T13827] netlink: 'syz.6.2194': attribute type 21 has an invalid length. [ 326.120990][T13838] x_tables: unsorted underflow at hook 3 [ 326.230667][T13844] gre0: left promiscuous mode [ 326.253085][T13852] netlink: 'syz.1.2204': attribute type 1 has an invalid length. [ 326.314927][ T981] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 326.565179][ T5918] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 326.663761][T13844] bond3: left promiscuous mode [ 326.668703][T13844] bridge3: left promiscuous mode [ 326.709687][T13844] bond4: left promiscuous mode [ 326.824287][T13852] bond7: entered promiscuous mode [ 326.840780][T13852] 8021q: adding VLAN 0 to HW filter on device bond7 [ 326.875622][ T6053] netdevsim netdevsim6 netdevsim0: unset [1, 0] type 2 family 0 port 6081 - 0 [ 326.910992][ T6053] netdevsim netdevsim6 netdevsim0: unset [1, 1] type 2 family 0 port 20004 - 0 [ 326.933809][ T6053] netdevsim netdevsim6 netdevsim1: unset [1, 0] type 2 family 0 port 6081 - 0 [ 326.952881][ T6053] netdevsim netdevsim6 netdevsim1: unset [1, 1] type 2 family 0 port 20004 - 0 [ 326.988464][T13866] bond7: (slave bridge7): making interface the new active one [ 326.999323][T13866] bridge7: entered promiscuous mode [ 327.007523][T13866] bridge7: left promiscuous mode [ 327.086216][ T6053] netdevsim netdevsim6 netdevsim2: unset [1, 0] type 2 family 0 port 6081 - 0 [ 327.096501][ T6053] netdevsim netdevsim6 netdevsim2: unset [1, 1] type 2 family 0 port 20004 - 0 [ 327.110475][ T6053] netdevsim netdevsim6 netdevsim3: unset [1, 0] type 2 family 0 port 6081 - 0 [ 327.120925][ T6053] netdevsim netdevsim6 netdevsim3: unset [1, 1] type 2 family 0 port 20004 - 0 [ 327.133948][T13883] 8021q: VLANs not supported on ipvlan0 [ 327.291264][T13888] __nla_validate_parse: 15 callbacks suppressed [ 327.291287][T13888] netlink: 8 bytes leftover after parsing attributes in process `syz.5.2211'. [ 327.321294][T13892] netlink: 48 bytes leftover after parsing attributes in process `syz.1.2210'. [ 327.572129][ T24] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 327.772831][T13913] netlink: 28 bytes leftover after parsing attributes in process `syz.2.2218'. [ 327.949539][T13927] netlink: 'syz.2.2218': attribute type 10 has an invalid length. [ 327.960325][T13927] netlink: 40 bytes leftover after parsing attributes in process `syz.2.2218'. [ 328.036371][T13926] netlink: 8 bytes leftover after parsing attributes in process `syz.1.2224'. [ 328.091156][T13940] netlink: 4 bytes leftover after parsing attributes in process `syz.2.2226'. [ 328.225124][T13943] netlink: 8 bytes leftover after parsing attributes in process `syz.5.2227'. [ 328.610337][ T24] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 328.698358][ T5831] Bluetooth: hci6: link tx timeout [ 328.705121][ T5831] Bluetooth: hci6: killing stalled connection 11:aa:aa:aa:aa:aa [ 328.720299][ T5831] Bluetooth: hci6: link tx timeout [ 328.725560][ T5831] Bluetooth: hci6: killing stalled connection 11:aa:aa:aa:aa:aa [ 328.733547][ T5831] Bluetooth: hci6: link tx timeout [ 328.738940][ T5831] Bluetooth: hci6: killing stalled connection 11:aa:aa:aa:aa:aa [ 328.746709][ T5831] Bluetooth: hci6: link tx timeout [ 328.752192][ T5831] Bluetooth: hci6: killing stalled connection 11:aa:aa:aa:aa:aa [ 328.761630][ T5831] Bluetooth: hci6: link tx timeout [ 328.766861][ T5831] Bluetooth: hci6: killing stalled connection 11:aa:aa:aa:aa:aa [ 328.936133][T13989] wg1: entered promiscuous mode [ 328.942545][T13989] wg1: entered allmulticast mode [ 328.954390][T13983] net veth1_virt_wifi .: renamed from virt_wifi0 [ 329.077435][T13997] netlink: 'syz.1.2244': attribute type 12 has an invalid length. [ 329.086663][T13997] netlink: 'syz.1.2244': attribute type 29 has an invalid length. [ 329.095594][T13997] netlink: 148 bytes leftover after parsing attributes in process `syz.1.2244'. [ 329.106377][T13997] netlink: 'syz.1.2244': attribute type 1 has an invalid length. [ 329.114830][T13997] netlink: 'syz.1.2244': attribute type 2 has an invalid length. [ 329.123492][T13997] netlink: 31 bytes leftover after parsing attributes in process `syz.1.2244'. [ 329.302282][T14011] netlink: 48 bytes leftover after parsing attributes in process `syz.6.2247'. [ 329.335150][ T5969] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 329.362120][T14014] netlink: 'syz.2.2248': attribute type 1 has an invalid length. [ 329.371878][T14015] netlink: 'syz.2.2248': attribute type 1 has an invalid length. [ 329.649908][ T5911] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 329.929991][T14046] netlink: 'syz.2.2258': attribute type 3 has an invalid length. [ 329.973906][T14047] netlink: 'syz.3.2257': attribute type 11 has an invalid length. [ 330.087930][T14058] bridge5: entered promiscuous mode [ 330.109050][T14058] bridge5: entered allmulticast mode [ 330.132364][T14058] team0: Device bridge5 is of different type [ 330.493566][T14093] x_tables: duplicate underflow at hook 2 [ 330.689386][ T5918] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 330.769108][ T5831] Bluetooth: hci6: command 0x0405 tx timeout [ 331.250469][ T5991] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 331.731674][ T5911] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 331.980176][T14187] IPVS: set_ctl: invalid protocol: 12 10.1.1.2:20002 [ 332.374297][ T5969] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 332.401966][T14216] __nla_validate_parse: 26 callbacks suppressed [ 332.401990][T14216] netlink: 68 bytes leftover after parsing attributes in process `syz.2.2314'. [ 332.546672][ T5991] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 332.578618][T14223] vxlan0: entered promiscuous mode [ 332.614496][T14223] vxlan0: entered allmulticast mode [ 332.633251][T14233] netlink: 8 bytes leftover after parsing attributes in process `syz.1.2318'. [ 332.699194][ C1] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 332.791742][ T5918] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 333.060837][T14250] netlink: 'syz.1.2321': attribute type 1 has an invalid length. [ 333.156366][T14257] netlink: 'syz.5.2324': attribute type 1 has an invalid length. [ 333.348637][T14255] bond5: (slave ipvlan2): enslaved VLAN challenged slave. Adding VLANs will be blocked as long as it is part of bond. [ 333.371042][T14255] bond5: (slave ipvlan2): The slave device specified does not support setting the MAC address [ 333.386922][T14255] bond5: (slave ipvlan2): Setting fail_over_mac to active for active-backup mode [ 333.640786][T14283] netlink: 8 bytes leftover after parsing attributes in process `syz.1.2329'. [ 333.692904][T14283] netlink: 12 bytes leftover after parsing attributes in process `syz.1.2329'. [ 333.725461][T14283] netlink: 'syz.1.2329': attribute type 20 has an invalid length. [ 333.762665][T14283] netlink: 8 bytes leftover after parsing attributes in process `syz.1.2329'. [ 333.779049][T14283] netlink: 12 bytes leftover after parsing attributes in process `syz.1.2329'. [ 333.787147][T14289] netlink: 24 bytes leftover after parsing attributes in process `syz.5.2332'. [ 333.839068][ T24] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 333.924091][T14291] netlink: 4 bytes leftover after parsing attributes in process `syz.6.2333'. [ 334.150821][T14307] netlink: 4 bytes leftover after parsing attributes in process `syz.5.2340'. [ 334.227219][T14315] netlink: 8 bytes leftover after parsing attributes in process `syz.1.2341'. [ 334.849421][ T24] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 335.402004][T14353] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 335.446968][T14353] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 335.538646][T14353] bond6 (unregistering): Released all slaves [ 335.569292][ T5969] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 335.807769][T14368] validate_nla: 1 callbacks suppressed [ 335.807792][T14368] netlink: 'syz.2.2357': attribute type 3 has an invalid length. [ 335.889519][ T24] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 335.977662][T14380] openvswitch: netlink: Message has 592 unknown bytes. [ 335.985821][T14380] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 336.013437][T14378] netlink: 'syz.2.2360': attribute type 1 has an invalid length. [ 336.214675][T14378] 8021q: adding VLAN 0 to HW filter on device bond10 [ 336.327587][T14394] veth0: entered promiscuous mode [ 336.364183][T14393] veth0: left promiscuous mode [ 336.593070][T14412] netlink: 'syz.2.2370': attribute type 7 has an invalid length. [ 336.626473][T14417] bond0: entered promiscuous mode [ 336.649752][T14417] bond_slave_0: entered promiscuous mode [ 336.667715][T14417] bond_slave_1: entered promiscuous mode [ 336.685956][T14417] mac80211_hwsim hwsim7 wlan1: entered promiscuous mode [ 336.708072][T14417] netdevsim netdevsim1 netdevsim0: entered promiscuous mode [ 336.737597][T14417] bond0: entered allmulticast mode [ 336.758252][T14417] bond_slave_0: entered allmulticast mode [ 336.787499][T14417] bond_slave_1: entered allmulticast mode [ 336.809949][T14417] mac80211_hwsim hwsim7 wlan1: entered allmulticast mode [ 336.817189][T14417] netdevsim netdevsim1 netdevsim0: entered allmulticast mode [ 336.876526][T14432] openvswitch: netlink: Flow key attr not present in new flow. [ 336.930786][ T24] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 337.003333][T14441] IPVS: sync thread started: state = BACKUP, mcast_ifn = vcan0, syncid = 0, id = 0 [ 337.037924][T14445] netlink: 'syz.5.2378': attribute type 1 has an invalid length. [ 337.128423][T14453] netlink: 'syz.2.2379': attribute type 2 has an invalid length. [ 337.282594][T14461] netlink: 'syz.6.2383': attribute type 11 has an invalid length. [ 337.295686][T14462] netlink: 'syz.6.2383': attribute type 11 has an invalid length. [ 337.652880][ C0] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 337.674355][T14490] netlink: 'syz.5.2392': attribute type 5 has an invalid length. [ 337.975027][ T24] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 338.000656][T14508] __nla_validate_parse: 8 callbacks suppressed [ 338.000679][T14508] netlink: 28 bytes leftover after parsing attributes in process `syz.1.2397'. [ 338.045857][T14508] netlink: 28 bytes leftover after parsing attributes in process `syz.1.2397'. [ 338.065795][T14508] netlink: 28 bytes leftover after parsing attributes in process `syz.1.2397'. [ 338.085425][T14508] netlink: 28 bytes leftover after parsing attributes in process `syz.1.2397'. [ 338.186289][T14519] tipc: Enabling of bearer rejected, failed to enable media [ 338.410202][T14531] netlink: 232 bytes leftover after parsing attributes in process `syz.2.2409'. [ 338.496616][T14541] netlink: 25 bytes leftover after parsing attributes in process `syz.3.2413'. [ 338.507629][T14541] gretap0: entered allmulticast mode [ 338.610054][T10860] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 338.637942][T14545] bridge9: entered promiscuous mode [ 338.649937][T14545] bridge9: entered allmulticast mode [ 338.702101][T14556] netlink: 'syz.5.2417': attribute type 1 has an invalid length. [ 338.714796][T14557] netlink: 44 bytes leftover after parsing attributes in process `syz.2.2416'. [ 338.727136][T14557] netlink: 44 bytes leftover after parsing attributes in process `syz.2.2416'. [ 338.894646][T14551] 8021q: adding VLAN 0 to HW filter on device bond7 [ 338.921982][T14551] bond6: (slave bond7): making interface the new active one [ 338.941642][T14551] bond6: (slave bond7): Enslaving as an active interface with an up link [ 339.180034][T14585] syzkaller1: entered promiscuous mode [ 339.194313][T14585] syzkaller1: entered allmulticast mode [ 339.215061][T14587] netlink: 92 bytes leftover after parsing attributes in process `syz.3.2425'. [ 339.226740][T14585] netlink: 'syz.5.2423': attribute type 1 has an invalid length. [ 339.281261][T14597] netlink: 4 bytes leftover after parsing attributes in process `syz.5.2423'. [ 339.872300][T14637] x_tables: duplicate underflow at hook 2 [ 340.006459][T14640] syzkaller0: entered promiscuous mode [ 340.029276][T14640] syzkaller0: entered allmulticast mode [ 340.043628][T14647] wlan0 speed is unknown, defaulting to 1000 [ 340.054285][ T5918] net_ratelimit: 3 callbacks suppressed [ 340.054307][ T5918] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 340.179844][T14655] tipc: Enabling not permitted [ 340.185594][T14655] tipc: Enabling of bearer rejected, failed to enable media [ 340.256611][T14654] syzkaller1: entered promiscuous mode [ 340.268666][T14654] syzkaller1: entered allmulticast mode [ 340.433115][T14676] ip6t_REJECT: TCP_RESET illegal for non-tcp [ 340.483838][T14670] syzkaller1: entered promiscuous mode [ 340.497852][T14670] syzkaller1: entered allmulticast mode [ 340.580044][T14679] erspan0: entered allmulticast mode [ 340.678739][ T30] audit: type=1107 audit(1765942066.754:6): pid=14688 uid=0 auid=4294967295 ses=4294967295 subj=unconfined msg='aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa [ 340.847346][T14691] bond11: entered promiscuous mode [ 340.946439][T10860] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 340.958760][T14691] 8021q: adding VLAN 0 to HW filter on device bond11 [ 340.996172][T14694] syzkaller1: entered promiscuous mode [ 341.003256][T14694] syzkaller1: entered allmulticast mode [ 341.099865][ T24] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 341.136558][T14697] bond11: (slave bridge6): making interface the new active one [ 341.144763][T14697] bridge6: entered promiscuous mode [ 341.152320][T14697] bond11: (slave bridge6): Enslaving as an active interface with an up link [ 341.650255][ T5969] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 341.787751][T14731] sock: sock_timestamping_bind_phc: sock not bind to device [ 341.945999][T14736] can: request_module (can-proto-0) failed. [ 342.133022][ T5911] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 342.779120][ T5918] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 342.808680][ T9493] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 342.818608][T10860] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 342.829375][ T24] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 343.110413][T14811] syzkaller0: entered promiscuous mode [ 343.147718][T14811] syzkaller0: entered allmulticast mode [ 343.169933][ T5911] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 343.237145][T14824] __nla_validate_parse: 19 callbacks suppressed [ 343.237167][T14824] netlink: 24 bytes leftover after parsing attributes in process `syz.5.2495'. [ 343.350797][T14822] netlink: 24 bytes leftover after parsing attributes in process `syz.1.2494'. [ 343.361684][T14822] netlink: 8 bytes leftover after parsing attributes in process `syz.1.2494'. [ 343.376148][T14822] netlink: 12 bytes leftover after parsing attributes in process `syz.1.2494'. [ 343.696863][T14841] netlink: 8 bytes leftover after parsing attributes in process `syz.1.2500'. [ 343.763625][T14852] netlink: 212408 bytes leftover after parsing attributes in process `syz.2.2502'. [ 343.902995][T14862] netlink: 14 bytes leftover after parsing attributes in process `syz.2.2504'. [ 344.003749][T14869] batadv0: entered promiscuous mode [ 344.031237][T14869] debugfs: 'hsr0' already exists in 'hsr' [ 344.037112][T14869] Cannot create hsr debugfs directory [ 344.064110][T14869] 8021q: adding VLAN 0 to HW filter on device hsr0 [ 344.583365][T14895] mac80211_hwsim hwsim5 syzkaller0: entered promiscuous mode [ 344.596136][T14895] mac80211_hwsim hwsim5 syzkaller0: entered allmulticast mode [ 344.763954][T14907] netlink: 24 bytes leftover after parsing attributes in process `syz.5.2515'. [ 344.936753][T14907] can: request_module (can-proto-4) failed. [ 345.095622][T14911] syzkaller0: entered promiscuous mode [ 345.103180][T14911] syzkaller0: entered allmulticast mode [ 345.260288][ T5911] net_ratelimit: 34 callbacks suppressed [ 345.260310][ T5911] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 345.895826][T10860] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 346.291343][ T5911] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 346.772094][ C1] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 346.989274][T14930] workqueue: Failed to create a rescuer kthread for wq "bond9": -EINTR [ 347.158597][T14965] netlink: 4 bytes leftover after parsing attributes in process `syz.2.2522'. [ 347.190115][T14965] netlink: 4 bytes leftover after parsing attributes in process `syz.2.2522'. [ 347.201147][T14968] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 347.318223][T14977] validate_nla: 2 callbacks suppressed [ 347.318243][T14977] netlink: 'syz.2.2525': attribute type 10 has an invalid length. [ 347.342854][ T5918] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 347.378177][T14968] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 347.934591][ C0] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 347.946074][ C0] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 348.374951][ T5911] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 348.500884][T15040] RDS: rds_bind could not find a transport for 400:0:1200:0:1030:0:ffff:ffff, load rds_tcp or rds_rdma? [ 348.525439][T15041] xt_HMARK: spi-set and port-set can't be combined [ 348.533674][ T6372] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 348.544134][ T5911] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 349.289204][T15071] netlink: 'syz.1.2544': attribute type 64 has an invalid length. [ 349.319155][T15071] __nla_validate_parse: 5 callbacks suppressed [ 349.319176][T15071] netlink: 20 bytes leftover after parsing attributes in process `syz.1.2544'. [ 349.389327][T15077] netem: change failed [ 349.462209][T15079] vlan2: entered promiscuous mode [ 349.551767][T15084] netlink: 'syz.5.2550': attribute type 21 has an invalid length. [ 349.632486][T15091] netlink: 4 bytes leftover after parsing attributes in process `syz.1.2552'. [ 349.648147][T15093] netlink: 165 bytes leftover after parsing attributes in process `syz.2.2553'. [ 349.764449][T15098] netlink: 4 bytes leftover after parsing attributes in process `syz.2.2555'. [ 349.775047][T15098] netlink: 8 bytes leftover after parsing attributes in process `syz.2.2555'. [ 349.997822][T15114] netlink: 16 bytes leftover after parsing attributes in process `syz.6.2559'. [ 350.050677][ T5152] Bluetooth: hci4: command 0x0406 tx timeout [ 350.057393][T15125] netlink: 16 bytes leftover after parsing attributes in process `syz.5.2563'. [ 350.134065][T15127] netlink: 96 bytes leftover after parsing attributes in process `syz.2.2564'. [ 350.146375][T15127] netlink: 20 bytes leftover after parsing attributes in process `syz.2.2564'. [ 350.146700][T15129] syz_tun: entered allmulticast mode [ 350.156621][T15127] netlink: 8 bytes leftover after parsing attributes in process `syz.2.2564'. [ 350.268001][T15128] syz_tun: left allmulticast mode [ 350.407141][T15143] sctp: [Deprecated]: syz.5.2572 (pid 15143) Use of struct sctp_assoc_value in delayed_ack socket option. [ 350.407141][T15143] Use struct sctp_sack_info instead [ 350.428364][T15143] sctp: [Deprecated]: syz.5.2572 (pid 15143) Use of struct sctp_assoc_value in delayed_ack socket option. [ 350.428364][T15143] Use struct sctp_sack_info instead [ 350.451099][ T5969] net_ratelimit: 3 callbacks suppressed [ 350.451118][ T5969] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 350.465471][ T5969] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 350.988798][T15169] bond8: (slave geneve3): Enslaving as an active interface with an up link [ 351.011990][ T6367] netdevsim netdevsim6 netdevsim0: set [1, 0] type 2 family 0 port 20000 - 0 [ 351.029437][ T9493] netdevsim netdevsim6 netdevsim1: set [1, 0] type 2 family 0 port 20000 - 0 [ 351.038467][ T9493] netdevsim netdevsim6 netdevsim2: set [1, 0] type 2 family 0 port 20000 - 0 [ 351.125946][ T9493] netdevsim netdevsim6 netdevsim3: set [1, 0] type 2 family 0 port 20000 - 0 [ 351.225330][T15185] siw: device registration error -23 [ 351.241797][T15186] bridge0: entered allmulticast mode [ 351.417267][T15198] xt_TPROXY: Can be used only with -p tcp or -p udp [ 351.425185][T15199] netlink: 'syz.2.2589': attribute type 12 has an invalid length. [ 351.489477][ T5911] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 351.543941][T15199] bond12: option primary_reselect: invalid value (255) [ 351.571613][T15199] bond12 (unregistering): Released all slaves [ 351.668822][T10860] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 351.883340][T15228] x_tables: duplicate underflow at hook 1 [ 351.965298][T15224] bond8 (unregistering): Released all slaves [ 352.008446][T15233] netlink: 'syz.6.2598': attribute type 13 has an invalid length. [ 352.027079][T15233] macvtap0: entered allmulticast mode [ 352.087039][T15233] macvtap0: refused to change device tx_queue_len [ 352.152948][T15235] pim6reg: entered allmulticast mode [ 352.200599][T15243] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 352.209010][ C1] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 352.331955][T15248] sctp: [Deprecated]: syz.2.2602 (pid 15248) Use of int in max_burst socket option. [ 352.331955][T15248] Use struct sctp_assoc_value instead [ 352.490116][T15257] netlink: 'syz.6.2605': attribute type 11 has an invalid length. [ 352.529715][ T5918] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 352.804809][T15278] tipc: New replicast peer: 255.255.255.255 [ 352.834766][T15278] tipc: Enabled bearer , priority 10 [ 353.089177][ C0] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 353.485852][T15318] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 353.678478][ T5911] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 353.778299][T15325] xfrm1: entered promiscuous mode [ 353.784560][T15325] xfrm1: entered allmulticast mode [ 353.903388][T15327] openvswitch: netlink: Message has 4 unknown bytes. [ 354.036092][T15332] netdevsim netdevsim6 netdevsim0: entered promiscuous mode [ 354.075328][T15335] netlink: 'syz.2.2630': attribute type 24 has an invalid length. [ 354.834734][T15370] __nla_validate_parse: 7 callbacks suppressed [ 354.834759][T15370] netlink: 8 bytes leftover after parsing attributes in process `syz.6.2640'. [ 354.860122][T15370] netlink: 12 bytes leftover after parsing attributes in process `syz.6.2640'. [ 354.971834][T15370] netlink: 8 bytes leftover after parsing attributes in process `syz.6.2640'. [ 355.030049][T15370] netlink: 12 bytes leftover after parsing attributes in process `syz.6.2640'. [ 355.367658][ T5152] Bluetooth: hci7: unexpected cc 0x0c03 length: 249 > 1 [ 355.396100][ T5152] Bluetooth: hci7: unexpected cc 0x1003 length: 249 > 9 [ 355.402900][T15384] netlink: 8 bytes leftover after parsing attributes in process `syz.6.2644'. [ 355.421532][ T5152] Bluetooth: hci7: unexpected cc 0x1001 length: 249 > 9 [ 355.432133][ T5152] Bluetooth: hci7: unexpected cc 0x0c23 length: 249 > 4 [ 355.440197][ T5152] Bluetooth: hci7: unexpected cc 0x0c38 length: 249 > 2 [ 355.590825][T15381] wlan0 speed is unknown, defaulting to 1000 [ 355.662334][ T5831] Bluetooth: hci0: unexpected cc 0x0c03 length: 249 > 1 [ 355.672086][ T5831] Bluetooth: hci0: unexpected cc 0x1003 length: 249 > 9 [ 355.681251][ T5831] Bluetooth: hci0: unexpected cc 0x1001 length: 249 > 9 [ 355.689581][ T5831] Bluetooth: hci0: unexpected cc 0x0c23 length: 249 > 4 [ 355.698445][ T5831] Bluetooth: hci0: unexpected cc 0x0c38 length: 249 > 2 [ 355.730703][ T5918] net_ratelimit: 6 callbacks suppressed [ 355.730723][ T5918] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 355.803815][T15394] netlink: 8 bytes leftover after parsing attributes in process `syz.2.2646'. [ 355.816867][T15390] wlan0 speed is unknown, defaulting to 1000 [ 355.869651][T15394] netlink: 'syz.2.2646': attribute type 1 has an invalid length. [ 355.883912][T15394] netlink: 'syz.2.2646': attribute type 2 has an invalid length. [ 356.032440][T15394] netdevsim netdevsim2 eth3 (unregistering): unset [0, 1] type 1 family 0 port 256 - 0 [ 356.050048][T15405] geneve4: entered promiscuous mode [ 356.074377][T15407] netlink: 220 bytes leftover after parsing attributes in process `syz.5.2650'. [ 356.105195][T15394] netdevsim netdevsim2 eth2 (unregistering): unset [0, 1] type 1 family 0 port 256 - 0 [ 356.126292][T15407] netlink: 32 bytes leftover after parsing attributes in process `syz.5.2650'. [ 356.142647][T15407] netlink: 8 bytes leftover after parsing attributes in process `syz.5.2650'. [ 356.207516][T15394] netdevsim netdevsim2 eth1 (unregistering): unset [0, 1] type 1 family 0 port 256 - 0 [ 356.263596][T15381] chnl_net:caif_netlink_parms(): no params data found [ 356.290757][T15394] netdevsim netdevsim2 eth0 (unregistering): unset [0, 1] type 1 family 0 port 256 - 0 [ 356.359176][T15416] nbd3: detected capacity change from 0 to 127 [ 356.590104][ T9500] netdevsim netdevsim2 eth0: set [0, 0] type 1 family 0 port 256 - 0 [ 356.616901][ T5831] block nbd3: Receive control failed (result -32) [ 356.676241][T15381] bridge0: port 1(bridge_slave_0) entered blocking state [ 356.685267][T15381] bridge0: port 1(bridge_slave_0) entered disabled state [ 356.693362][T15381] bridge_slave_0: entered allmulticast mode [ 356.700914][T15381] bridge_slave_0: entered promiscuous mode [ 356.708292][T15390] chnl_net:caif_netlink_parms(): no params data found [ 356.725657][ T9500] netdevsim netdevsim2 eth1: set [0, 0] type 1 family 0 port 256 - 0 [ 356.735033][T15381] bridge0: port 2(bridge_slave_1) entered blocking state [ 356.751474][T15381] bridge0: port 2(bridge_slave_1) entered disabled state [ 356.758967][T15381] bridge_slave_1: entered allmulticast mode [ 356.768220][T15381] bridge_slave_1: entered promiscuous mode [ 356.774749][ T24] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 356.805234][ T6053] netdevsim netdevsim2 eth2: set [0, 0] type 1 family 0 port 256 - 0 [ 356.882760][ T9500] netdevsim netdevsim2 eth3: set [0, 0] type 1 family 0 port 256 - 0 [ 356.903726][T15381] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 356.980795][T15381] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 356.984299][T15445] netlink: 212304 bytes leftover after parsing attributes in process `syz.2.2658'. [ 357.008411][T15445] openvswitch: netlink: Message has 6 unknown bytes. [ 357.078238][T15390] bridge0: port 1(bridge_slave_0) entered blocking state [ 357.095354][T15390] bridge0: port 1(bridge_slave_0) entered disabled state [ 357.103129][T15390] bridge_slave_0: entered allmulticast mode [ 357.120151][T15390] bridge_slave_0: entered promiscuous mode [ 357.143009][T15381] team0: Port device team_slave_0 added [ 357.161451][ T5911] hid-generic 0005:0C45:1013.0002: ignoring exceeding usage max [ 357.181831][T15390] bridge0: port 2(bridge_slave_1) entered blocking state [ 357.201208][ T5911] hid-generic 0005:0C45:1013.0002: unknown main item tag 0x4 [ 357.217260][T15390] bridge0: port 2(bridge_slave_1) entered disabled state [ 357.231535][T15390] bridge_slave_1: entered allmulticast mode [ 357.238789][ T5911] hid-generic 0005:0C45:1013.0002: unknown main item tag 0x5 [ 357.282362][T15390] bridge_slave_1: entered promiscuous mode [ 357.289300][ T5911] hid-generic 0005:0C45:1013.0002: unknown main item tag 0x0 [ 357.324104][T15381] team0: Port device team_slave_1 added [ 357.330366][ T5911] hid-generic 0005:0C45:1013.0002: unknown main item tag 0x0 [ 357.337892][ T5911] hid-generic 0005:0C45:1013.0002: unknown main item tag 0x0 [ 357.369677][ T5911] hid-generic 0005:0C45:1013.0002: unknown main item tag 0x0 [ 357.386219][ T5911] hid-generic 0005:0C45:1013.0002: unknown main item tag 0x0 [ 357.407548][ T5911] hid-generic 0005:0C45:1013.0002: unknown main item tag 0x0 [ 357.425202][ T5911] hid-generic 0005:0C45:1013.0002: unknown main item tag 0x0 [ 357.449384][ T5911] hid-generic 0005:0C45:1013.0002: hidraw0: BLUETOOTH HID v0.02 Device [syz1] on aa:aa:aa:aa:aa:aa [ 357.489446][ T5831] Bluetooth: hci7: command tx timeout [ 357.515929][T15390] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 357.541355][T15381] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 357.548323][T15381] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 357.583822][T15381] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 357.628659][T15390] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 357.665719][T15381] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 357.679007][T15381] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 357.725692][T15381] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 357.736592][ T5831] Bluetooth: hci0: command tx timeout [ 357.743976][ T5969] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 357.810740][ T5911] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 357.857844][T15477] ksmbd: Unknown IPC event: 3, ignore. [ 357.866239][T15390] team0: Port device team_slave_0 added [ 357.918337][T15390] team0: Port device team_slave_1 added [ 357.938176][T15381] hsr_slave_0: entered promiscuous mode [ 357.946881][T15381] hsr_slave_1: entered promiscuous mode [ 357.954306][T15381] debugfs: 'hsr0' already exists in 'hsr' [ 357.961796][T15381] Cannot create hsr debugfs directory [ 358.091196][T15390] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 358.098608][T15390] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 358.138464][T15390] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 358.154491][T15390] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 358.162432][T15390] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 358.195510][T15390] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 358.317666][T15495] netlink: 'syz.2.2672': attribute type 1 has an invalid length. [ 358.369827][T15495] 8021q: adding VLAN 0 to HW filter on device bond12 [ 358.394176][T15499] bond12: (slave veth9): Enslaving as an active interface with a down link [ 358.454625][T15495] bond12: (slave veth0_to_bond): Enslaving as an active interface with a down link [ 358.484068][T15390] hsr_slave_0: entered promiscuous mode [ 358.494379][T15390] hsr_slave_1: entered promiscuous mode [ 358.502135][T15390] debugfs: 'hsr0' already exists in 'hsr' [ 358.507960][T15390] Cannot create hsr debugfs directory [ 358.557783][T15499] bond12: (slave veth11): Enslaving as an active interface with a down link [ 358.725872][T15508] delete_channel: no stack [ 358.742406][T15514] netlink: 'syz.5.2678': attribute type 1 has an invalid length. [ 358.836933][T15514] 8021q: adding VLAN 0 to HW filter on device bond9 [ 358.850109][ T5918] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 358.881326][T15515] bond9: (slave geneve3): making interface the new active one [ 358.891320][T15515] bond9: (slave geneve3): Enslaving as an active interface with an up link [ 359.077745][T15381] netdevsim netdevsim1 netdevsim3 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 359.096128][T15381] netdevsim netdevsim1 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 359.131492][T15533] xt_cgroup: invalid path, errno=-2 [ 359.131774][T15528] IPv6: Can't replace route, no match found [ 359.147142][T15533] xt_cgroup: invalid path, errno=-2 [ 359.200911][T15537] 8021q: adding VLAN 0 to HW filter on device bond0 [ 359.212496][T15537] bond7: (slave bond0): Enslaving as a backup interface with a down link [ 359.261936][T15539] bond12: (slave veth0_to_bond): Releasing active interface [ 359.274826][T15539] A link change request failed with some changes committed already. Interface hsr_slave_0 may have been left with an inconsistent configuration, please check. [ 359.308798][T15381] netdevsim netdevsim1 netdevsim2 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 359.322890][T15381] netdevsim netdevsim1 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 359.359974][T15548] netlink: 'syz.6.2687': attribute type 1 has an invalid length. [ 359.422907][T15548] 8021q: adding VLAN 0 to HW filter on device bond9 [ 359.446717][T15381] netdevsim netdevsim1 netdevsim1 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 359.457852][T15381] netdevsim netdevsim1 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 359.495646][T15550] 8021q: adding VLAN 0 to HW filter on device bond9 [ 359.503673][T15550] bond9: (slave vxcan3): The slave device specified does not support setting the MAC address [ 359.517134][T15550] bond9: (slave vxcan3): Error -95 calling set_mac_address [ 359.552493][T15548] veth6: entered promiscuous mode [ 359.561442][T15548] bond9: (slave veth6): Enslaving as an active interface with a down link [ 359.570801][ T5831] Bluetooth: hci7: command tx timeout [ 359.593585][T15381] bond0: (slave netdevsim0): Releasing backup interface [ 359.602245][T15381] netdevsim netdevsim1 netdevsim0 (unregistering): left promiscuous mode [ 359.611004][T15381] netdevsim netdevsim1 netdevsim0 (unregistering): left allmulticast mode [ 359.621754][T15381] netdevsim netdevsim1 netdevsim0 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 359.632722][T15381] netdevsim netdevsim1 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 359.657055][T15548] vlan2: entered allmulticast mode [ 359.662887][T15548] bond9: entered allmulticast mode [ 359.809545][ T5831] Bluetooth: hci0: command tx timeout [ 359.890366][ T5918] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 360.056927][ T5969] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 360.482761][T15567] netlink: 'syz.2.2690': attribute type 1 has an invalid length. [ 360.777897][ T5969] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 360.942032][ T5918] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 361.351486][T15554] __nla_validate_parse: 7 callbacks suppressed [ 361.351509][T15554] netlink: 4 bytes leftover after parsing attributes in process `syz.6.2688'. [ 361.370973][T15567] workqueue: Failed to create a rescuer kthread for wq "bond13": -EINTR [ 361.372509][T15568] workqueue: Failed to create a rescuer kthread for wq "bond13": -EINTR [ 361.559898][T15577] netlink: 204 bytes leftover after parsing attributes in process `syz.6.2692'. [ 361.618189][T15381] netdevsim netdevsim1 netdevsim0: renamed from eth0 [ 361.649712][ T5831] Bluetooth: hci7: command tx timeout [ 361.680406][T15381] netdevsim netdevsim1 netdevsim1: renamed from eth1 [ 361.714174][T15584] netlink: 16 bytes leftover after parsing attributes in process `syz.6.2694'. [ 361.796699][T15381] netdevsim netdevsim1 netdevsim2: renamed from eth2 [ 361.841479][T15381] netdevsim netdevsim1 netdevsim3: renamed from eth3 [ 361.899661][ T5831] Bluetooth: hci0: command tx timeout [ 361.904186][T15390] netdevsim netdevsim7 netdevsim0: renamed from eth0 [ 361.932183][T15590] netlink: 16 bytes leftover after parsing attributes in process `syz.5.2696'. [ 361.950067][T15390] netdevsim netdevsim7 netdevsim1: renamed from eth1 [ 361.970405][ T24] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 361.987813][T15390] netdevsim netdevsim7 netdevsim2: renamed from eth2 [ 362.012812][T15390] netdevsim netdevsim7 netdevsim3: renamed from eth3 [ 362.134834][T15607] netlink: 8 bytes leftover after parsing attributes in process `syz.6.2698'. [ 362.158138][T15608] netlink: 20 bytes leftover after parsing attributes in process `syz.6.2698'. [ 362.172014][T15609] netlink: 20 bytes leftover after parsing attributes in process `syz.6.2698'. [ 362.202200][T15607] netlink: 60 bytes leftover after parsing attributes in process `syz.6.2698'. [ 362.268566][T15381] 8021q: adding VLAN 0 to HW filter on device bond0 [ 362.326851][T15390] 8021q: adding VLAN 0 to HW filter on device bond0 [ 362.364234][T15381] 8021q: adding VLAN 0 to HW filter on device team0 [ 362.394318][ T6053] bridge0: port 1(bridge_slave_0) entered blocking state [ 362.401765][ T6053] bridge0: port 1(bridge_slave_0) entered forwarding state [ 362.445573][ T6053] bridge0: port 2(bridge_slave_1) entered blocking state [ 362.452985][ T6053] bridge0: port 2(bridge_slave_1) entered forwarding state [ 362.467185][T15620] syz.6.2702: vmalloc error: size 8589938688, exceeds total pages, mode:0xdc0(GFP_KERNEL|__GFP_ZERO), nodemask=(null),cpuset=/,mems_allowed=0-1 [ 362.473457][T15390] 8021q: adding VLAN 0 to HW filter on device team0 [ 362.512367][T15620] CPU: 0 UID: 0 PID: 15620 Comm: syz.6.2702 Not tainted syzkaller #0 PREEMPT(full) [ 362.512391][T15620] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/25/2025 [ 362.512400][T15620] Call Trace: [ 362.512405][T15620] [ 362.512411][T15620] dump_stack_lvl+0x189/0x250 [ 362.512433][T15620] ? __pfx_rcu_read_unlock_special+0x10/0x10 [ 362.512458][T15620] ? __pfx_dump_stack_lvl+0x10/0x10 [ 362.512476][T15620] ? __pfx__printk+0x10/0x10 [ 362.512494][T15620] ? cpuset_print_current_mems_allowed+0x1f/0x360 [ 362.512514][T15620] ? cpuset_print_current_mems_allowed+0x1f/0x360 [ 362.512540][T15620] warn_alloc+0x214/0x310 [ 362.512568][T15620] ? stack_depot_save_flags+0x40/0x850 [ 362.512590][T15620] ? __pfx_warn_alloc+0x10/0x10 [ 362.512619][T15620] ? kasan_save_track+0x3e/0x80 [ 362.512640][T15620] ? __kasan_kmalloc+0x93/0xb0 [ 362.512666][T15620] ? xsk_setsockopt+0x4dc/0x8d0 [ 362.512684][T15620] ? do_sock_setsockopt+0x17c/0x1b0 [ 362.512709][T15620] ? __x64_sys_setsockopt+0x13f/0x1b0 [ 362.512733][T15620] ? do_syscall_64+0xfa/0xf80 [ 362.512756][T15620] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 362.512785][T15620] __vmalloc_node_range_noprof+0x125/0x12d0 [ 362.512836][T15620] ? __pfx___vmalloc_node_range_noprof+0x10/0x10 [ 362.512863][T15620] ? __kasan_kmalloc+0x93/0xb0 [ 362.512894][T15620] vmalloc_user_noprof+0xad/0xf0 [ 362.512916][T15620] ? xskq_create+0xbf/0x170 [ 362.512938][T15620] xskq_create+0xbf/0x170 [ 362.512964][T15620] xsk_init_queue+0xb0/0x110 [ 362.512989][T15620] xsk_setsockopt+0x4dc/0x8d0 [ 362.513013][T15620] ? __pfx_xsk_setsockopt+0x10/0x10 [ 362.513038][T15620] ? __pfx_aa_sk_perm+0x10/0x10 [ 362.513069][T15620] ? aa_sock_opt_perm+0xff/0x1a0 [ 362.513091][T15620] ? bpf_lsm_socket_setsockopt+0x9/0x20 [ 362.513113][T15620] ? __pfx_xsk_setsockopt+0x10/0x10 [ 362.513134][T15620] do_sock_setsockopt+0x17c/0x1b0 [ 362.513167][T15620] __x64_sys_setsockopt+0x13f/0x1b0 [ 362.513202][T15620] do_syscall_64+0xfa/0xf80 [ 362.513227][T15620] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 362.513246][T15620] ? clear_bhb_loop+0x60/0xb0 [ 362.513269][T15620] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 362.513287][T15620] RIP: 0033:0x7f997af8f749 [ 362.513305][T15620] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 362.513321][T15620] RSP: 002b:00007f997bd49038 EFLAGS: 00000246 ORIG_RAX: 0000000000000036 [ 362.513343][T15620] RAX: ffffffffffffffda RBX: 00007f997b1e5fa0 RCX: 00007f997af8f749 [ 362.513358][T15620] RDX: 0000000000000006 RSI: 000000000000011b RDI: 0000000000000004 [ 362.513369][T15620] RBP: 00007f997b013f91 R08: 0000000000000004 R09: 0000000000000000 [ 362.513381][T15620] R10: 0000200000000000 R11: 0000000000000246 R12: 0000000000000000 [ 362.513393][T15620] R13: 00007f997b1e6038 R14: 00007f997b1e5fa0 R15: 00007ffedc371208 [ 362.513429][T15620] [ 362.513437][T15620] Mem-Info: [ 362.518628][ T6372] bridge0: port 1(bridge_slave_0) entered blocking state [ 362.527682][T15620] active_anon:5644 inactive_anon:0 isolated_anon:0 [ 362.527682][T15620] active_file:2439 inactive_file:39972 isolated_file:0 [ 362.527682][T15620] unevictable:768 dirty:80 writeback:0 [ 362.527682][T15620] slab_reclaimable:12491 slab_unreclaimable:121965 [ 362.527682][T15620] mapped:44375 shmem:1341 pagetables:1396 [ 362.527682][T15620] sec_pagetables:0 bounce:0 [ 362.527682][T15620] kernel_misc_reclaimable:0 [ 362.527682][T15620] free:1263416 free_pcp:17429 free_cma:0 [ 362.533823][ T6372] bridge0: port 1(bridge_slave_0) entered forwarding state [ 362.561755][T15381] hsr0: Slave A (hsr_slave_0) is not up; please bring it up to get a fully working HSR network [ 362.623831][T15624] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 362.627254][T15620] Node 0 active_anon:22576kB inactive_anon:0kB active_file:9756kB inactive_file:159688kB unevictable:1536kB isolated(anon):0kB isolated(file):0kB mapped:177500kB dirty:320kB writeback:0kB shmem:3828kB shmem_thp:0kB shmem_pmdmapped:0kB anon_thp:0kB kernel_stack:16380kB pagetables:5452kB sec_pagetables:0kB all_unreclaimable? no Balloon:0kB [ 362.645806][T15381] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 362.660688][T15620] Node 1 active_anon:0kB inactive_anon:0kB active_file:0kB inactive_file:200kB unevictable:1536kB isolated(anon):0kB isolated(file):0kB mapped:0kB dirty:0kB writeback:0kB shmem:1536kB shmem_thp:0kB shmem_pmdmapped:0kB anon_thp:0kB kernel_stack:48kB pagetables:132kB sec_pagetables:0kB all_unreclaimable? no Balloon:0kB [ 362.660748][T15620] Node 0 DMA free:15360kB boost:0kB min:204kB low:252kB high:300kB reserved_highatomic:0KB free_highatomic:0KB active_anon:0kB inactive_anon:0kB active_file:0kB inactive_file:0kB unevictable:0kB writepending:0kB zspages:0kB present:15992kB managed:15360kB mlocked:0kB bounce:0kB free_pcp:0kB local_pcp:0kB free_cma:0kB [ 362.660811][T15620] lowmem_reserve[]: 0 2504 2504 2504 2504 [ 362.660859][T15620] Node 0 DMA32 free:1152040kB boost:0kB min:34308kB low:42884kB high:51460kB reserved_highatomic:0KB free_highatomic:0KB active_anon:22576kB inactive_anon:0kB active_file:9756kB inactive_file:159688kB unevictable:1536kB writepending:320kB zspages:0kB present:3129332kB managed:2564516kB mlocked:0kB bounce:0kB free_pcp:46156kB local_pcp:25304kB free_cma:0kB [ 362.660921][T15620] lowmem_reserve[]: 0 0 0 0 0 [ 362.660963][T15620] Node 0 Normal free:0kB boost:0kB min:0kB low:0kB high:0kB reserved_highatomic:0KB free_highatomic:0KB active_anon:0kB inactive_anon:0kB active_file:0kB inactive_file:0kB unevictable:0kB writepending:0kB zspages:0kB present:1048580kB managed:108kB mlocked:0kB bounce:0kB free_pcp:0kB local_pcp:0kB free_cma:0kB [ 362.661020][T15620] lowmem_reserve[]: 0 0 0 0 0 [ 362.661063][T15620] Node 1 Normal free:3886040kB boost:0kB min:55592kB low:69488kB high:83384kB reserved_highatomic:0KB free_highatomic:0KB active_anon:0kB inactive_anon:0kB active_file:0kB inactive_file:200kB unevictable:1536kB writepending:0kB zspages:0kB present:4194300kB managed:4111100kB mlocked:0kB bounce:0kB free_pcp:22864kB local_pcp:11184kB free_cma:0kB [ 362.661123][T15620] lowmem_reserve[]: 0 0 0 0 0 [ 362.661165][T15620] Node 0 DMA: 0*4kB [ 363.101928][T15390] hsr0: Slave A (hsr_slave_0) is not up; please bring it up to get a fully working HSR network [ 363.158426][ T5936] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 363.170683][T15620] 0*8kB 0*16kB 0*32kB 0*64kB 0*128kB 0*256kB 0*512kB 1*1024kB (U) 1*2048kB (M) 3*4096kB (M) = 15360kB [ 363.190624][T15620] Node 0 DMA32: 79*4kB (UME) 5*8kB (UME) 3*16kB (UME) 67*32kB (UM) 14*64kB (ME) 533*128kB (UM) 405*256kB (UM) 260*512kB (UME) 150*1024kB (U) 2*2048kB (UM) 168*4096kB (UM) = 1154292kB [ 363.209655][T15390] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 363.238425][T15620] Node 0 Normal: 0*4kB 0*8kB 0*16kB 0*32kB 0*64kB 0*128kB 0*256kB 0*512kB 0*1024kB 0*2048kB 0*4096kB = 0kB [ 363.260231][T10859] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 363.268637][ T5969] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 363.286412][ T9498] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 363.295591][ T6372] bridge0: port 2(bridge_slave_1) entered blocking state [ 363.301947][T15620] Node 1 Normal: 49*4kB (UME) 55*8kB (UME) 41*16kB (UME) 114*32kB (UME) 37*64kB (UME) [ 363.303073][ T6372] bridge0: port 2(bridge_slave_1) entered forwarding state [ 363.303079][T15620] 13*128kB [ 363.304792][ T5911] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 363.315618][T15620] (UME) [ 363.333840][T10860] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 363.352906][T15620] 7*256kB (UME) 5*512kB (UME) 2*1024kB (UM) 2*2048kB (UE) 944*4096kB (M) = 3886092kB [ 363.363748][T15620] Node 0 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=1048576kB [ 363.374912][T15620] Node 0 hugepages_total=2 hugepages_free=2 hugepages_surp=0 hugepages_size=2048kB [ 363.419140][T15620] Node 1 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=1048576kB [ 363.465988][T15381] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 363.473305][T15620] Node 1 hugepages_total=2 hugepages_free=2 hugepages_surp=0 hugepages_size=2048kB [ 363.473335][T15620] 43763 total pagecache pages [ 363.473345][T15620] 0 pages in swap cache [ 363.473353][T15620] Free swap = 124996kB [ 363.473362][T15620] Total swap = 124996kB [ 363.473372][T15620] 2097051 pages RAM [ 363.473381][T15620] 0 pages HighMem/MovableOnly [ 363.473389][T15620] 424280 pages reserved [ 363.473398][T15620] 0 pages cma reserved [ 363.646983][T15381] veth0_vlan: entered promiscuous mode [ 363.677815][T15381] veth1_vlan: entered promiscuous mode [ 363.733395][ T5831] Bluetooth: hci7: command tx timeout [ 363.743657][T15646] netlink: 4 bytes leftover after parsing attributes in process `syz.5.2708'. [ 363.922412][T15657] netlink: 104 bytes leftover after parsing attributes in process `syz.2.2709'. [ 363.947179][T15653] 8021q: adding VLAN 0 to HW filter on device bond13 [ 363.971308][T15381] veth0_macvtap: entered promiscuous mode [ 363.979311][ T5831] Bluetooth: hci0: command tx timeout [ 363.983164][T15652] gre0: entered promiscuous mode [ 363.998361][T15381] veth1_macvtap: entered promiscuous mode [ 364.113285][T15381] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 364.210181][T15381] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 364.228439][T15390] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 364.315011][ T6372] netdevsim netdevsim1 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 364.340486][ T6372] netdevsim netdevsim1 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 364.411321][ T6372] netdevsim netdevsim1 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 364.471776][ T6372] netdevsim netdevsim1 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 364.842698][ T1095] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 364.864027][ T1095] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 364.982938][ T6367] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 364.999713][ T6367] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 365.128833][T15709] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 365.239660][T15711] netlink: 'syz.1.2641': attribute type 1 has an invalid length. [ 365.285736][T15390] veth0_vlan: entered promiscuous mode [ 365.308373][T15390] veth1_vlan: entered promiscuous mode [ 365.353160][T15390] veth0_macvtap: entered promiscuous mode [ 365.380656][T15390] veth1_macvtap: entered promiscuous mode [ 365.437702][T15390] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 365.506810][T15390] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 365.580720][ T6379] netdevsim netdevsim7 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 365.618188][ T6379] netdevsim netdevsim7 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 365.658095][ T6379] netdevsim netdevsim7 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 365.681750][ T6379] netdevsim netdevsim7 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 366.063767][ T9496] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 366.085841][ T9496] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 366.161176][T15742] netlink: 'syz.6.2728': attribute type 10 has an invalid length. [ 366.191595][T15742] netdevsim netdevsim6 netdevsim0: left promiscuous mode [ 366.231980][T15742] bond0: (slave netdevsim0): Enslaving as an active interface with an up link [ 366.273486][ T4531] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 366.281892][ T4531] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 366.329596][ T5918] net_ratelimit: 4 callbacks suppressed [ 366.329616][ T5918] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 366.351664][T15746] wg1: left promiscuous mode [ 366.358566][T15746] xfrm1: left promiscuous mode [ 366.364886][T15746] geneve4: left promiscuous mode [ 366.377267][T15746] veth6: left promiscuous mode [ 366.395606][T15748] __nla_validate_parse: 2 callbacks suppressed [ 366.395626][T15748] netlink: 24 bytes leftover after parsing attributes in process `syz.2.2729'. [ 366.552764][T15748] netlink: 4 bytes leftover after parsing attributes in process `syz.2.2729'. [ 366.853123][ T5969] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 366.900854][T15770] netlink: 'syz.5.2738': attribute type 1 has an invalid length. [ 367.011149][T15779] netlink: 'syz.2.2741': attribute type 1 has an invalid length. [ 367.035786][T15777] bond10: (slave gretap2): making interface the new active one [ 367.044912][T15777] bond10: (slave gretap2): Enslaving as an active interface with an up link [ 367.055398][T15779] netlink: 228 bytes leftover after parsing attributes in process `syz.2.2741'. [ 367.140078][T15782] netlink: 4 bytes leftover after parsing attributes in process `syz.6.2742'. [ 367.204393][T15787] syz_tun: entered allmulticast mode [ 367.300390][T15791] netlink: 28 bytes leftover after parsing attributes in process `syz.6.2742'. [ 367.320915][T15784] syz_tun: left allmulticast mode [ 367.424523][ T5936] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 367.445631][T15800] netlink: 8 bytes leftover after parsing attributes in process `syz.5.2747'. [ 367.501956][T15804] netlink: 4 bytes leftover after parsing attributes in process `syz.1.2748'. [ 367.540009][T15804] netlink: 12 bytes leftover after parsing attributes in process `syz.1.2748'. [ 367.677003][T15813] wlan0 speed is unknown, defaulting to 1000 [ 367.792453][T15817] dvmrp6: entered allmulticast mode [ 367.844048][T15822] batman_adv: Cannot find parent device. Skipping batadv-on-batadv check for gretap1 [ 367.877340][T15822] gretap1: default qdisc (pfifo_fast) fail, fallback to noqueue [ 368.000921][T15822] gretap1: entered promiscuous mode [ 368.006208][T15822] gretap1: entered allmulticast mode [ 368.466753][ T5936] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 368.498459][T15853] netlink: 24 bytes leftover after parsing attributes in process `syz.5.2761'. [ 368.508487][T15853] netlink: 80 bytes leftover after parsing attributes in process `syz.5.2761'. [ 368.994223][T15891] sctp: [Deprecated]: syz.2.2774 (pid 15891) Use of int in max_burst socket option deprecated. [ 368.994223][T15891] Use struct sctp_assoc_value instead [ 369.498499][ T5918] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 369.554718][T15916] netlink: 'syz.6.2781': attribute type 2 has an invalid length. [ 369.655768][T15921] netlink: 'syz.7.2785': attribute type 16 has an invalid length. [ 369.739556][T10859] IPVS: starting estimator thread 0... [ 369.849143][T15925] IPVS: using max 28 ests per chain, 67200 per kthread [ 369.897711][ T5969] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 370.027398][T15933] netlink: 'syz.7.2789': attribute type 30 has an invalid length. [ 370.114122][T15933] bond1: option arp_missed_max: invalid value (0) [ 370.149678][T15933] bond1: option arp_missed_max: allowed values 1 - 255 [ 370.183882][T15933] bond1 (unregistering): Released all slaves [ 370.488407][ T5152] Bluetooth: hci3: unexpected cc 0x0c03 length: 249 > 1 [ 370.513033][ T5152] Bluetooth: hci3: unexpected cc 0x1003 length: 249 > 9 [ 370.522993][ T5152] Bluetooth: hci3: unexpected cc 0x1001 length: 249 > 9 [ 370.531998][ T5152] Bluetooth: hci3: unexpected cc 0x0c23 length: 249 > 4 [ 370.543893][ T5152] Bluetooth: hci3: unexpected cc 0x0c38 length: 249 > 2 [ 370.548166][ T5911] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 370.933431][T15953] wlan0 speed is unknown, defaulting to 1000 [ 371.081213][T15973] netlink: 'syz.7.2799': attribute type 1 has an invalid length. [ 371.239400][T15985] x_tables: duplicate underflow at hook 3 [ 371.474621][T15953] chnl_net:caif_netlink_parms(): no params data found [ 371.523681][T15994] syzkaller0: entered promiscuous mode [ 371.539837][T15994] syzkaller0: entered allmulticast mode [ 371.581619][ T5918] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 371.764130][T16003] wlan0 speed is unknown, defaulting to 1000 [ 371.901862][T16026] __nla_validate_parse: 8 callbacks suppressed [ 371.901884][T16026] netlink: 8 bytes leftover after parsing attributes in process `syz.7.2812'. [ 371.958064][T16020] netdevsim netdevsim7 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 372.034809][T15953] bridge0: port 1(bridge_slave_0) entered blocking state [ 372.045189][T15953] bridge0: port 1(bridge_slave_0) entered disabled state [ 372.054228][T15953] bridge_slave_0: entered allmulticast mode [ 372.064572][T15953] bridge_slave_0: entered promiscuous mode [ 372.089433][T16028] syzkaller0: entered promiscuous mode [ 372.095423][T16028] syzkaller0: entered allmulticast mode [ 372.126508][T16020] netdevsim netdevsim7 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 372.149829][T15953] bridge0: port 2(bridge_slave_1) entered blocking state [ 372.157056][T15953] bridge0: port 2(bridge_slave_1) entered disabled state [ 372.168476][T15953] bridge_slave_1: entered allmulticast mode [ 372.180152][T15953] bridge_slave_1: entered promiscuous mode [ 372.282972][T16020] netdevsim netdevsim7 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 372.352183][T16035] netlink: 8 bytes leftover after parsing attributes in process `syz.1.2815'. [ 372.370102][T15953] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 372.403519][T16039] netlink: 'syz.5.2816': attribute type 21 has an invalid length. [ 372.422820][T16020] netdevsim netdevsim7 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 372.451465][T15953] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 372.460934][T16039] netlink: 4 bytes leftover after parsing attributes in process `syz.5.2816'. [ 372.585560][T15953] team0: Port device team_slave_0 added [ 372.598386][T15953] team0: Port device team_slave_1 added [ 372.617676][ T5831] Bluetooth: hci3: command tx timeout [ 372.629498][ T5936] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 372.704114][T16043] netdevsim netdevsim1 netdevsim0: entered promiscuous mode [ 372.753378][T15953] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 372.759984][T16049] block nbd0: NBD_DISCONNECT [ 372.771145][T15953] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 372.812873][T16049] block nbd0: Send disconnect failed -32 [ 372.833636][T15953] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 372.851016][T10859] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 372.860856][ T9501] netdevsim netdevsim7 eth0: set [1, 0] type 2 family 0 port 6081 - 0 [ 372.874038][T15953] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 372.900607][T15953] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 372.935542][ T5991] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 372.960351][T15953] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 372.996711][ T9496] netdevsim netdevsim7 eth1: set [1, 0] type 2 family 0 port 6081 - 0 [ 373.186351][T15953] hsr_slave_0: entered promiscuous mode [ 373.209686][T16069] netlink: 8 bytes leftover after parsing attributes in process `syz.1.2823'. [ 373.220557][T15953] hsr_slave_1: entered promiscuous mode [ 373.227222][T15953] debugfs: 'hsr0' already exists in 'hsr' [ 373.233183][T16069] netlink: 4 bytes leftover after parsing attributes in process `syz.1.2823'. [ 373.242552][T15953] Cannot create hsr debugfs directory [ 373.248535][ T9501] netdevsim netdevsim7 eth2: set [1, 0] type 2 family 0 port 6081 - 0 [ 373.333378][ T9498] netdevsim netdevsim7 eth3: set [1, 0] type 2 family 0 port 6081 - 0 [ 373.399187][T16074] netlink: 4 bytes leftover after parsing attributes in process `syz.6.2825'. [ 373.657558][ T5936] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 373.814847][T15953] netdevsim netdevsim2 eth3 (unregistering): unset [0, 0] type 1 family 0 port 256 - 0 [ 373.904793][T15953] netdevsim netdevsim2 eth2 (unregistering): unset [0, 0] type 1 family 0 port 256 - 0 [ 373.972379][T16103] netlink: 8 bytes leftover after parsing attributes in process `syz.1.2833'. [ 373.991705][T16103] netlink: 8 bytes leftover after parsing attributes in process `syz.1.2833'. [ 374.024595][T15953] netdevsim netdevsim2 eth1 (unregistering): unset [0, 0] type 1 family 0 port 256 - 0 [ 374.133320][T15953] netdevsim netdevsim2 eth0 (unregistering): unset [0, 0] type 1 family 0 port 256 - 0 [ 374.367840][T16118] Bluetooth: MGMT ver 1.23 [ 374.462836][T15953] netdevsim netdevsim2 netdevsim0: renamed from eth0 [ 374.492334][T15953] netdevsim netdevsim2 netdevsim1: renamed from eth1 [ 374.521662][T15953] netdevsim netdevsim2 netdevsim2: renamed from eth2 [ 374.545547][T15953] netdevsim netdevsim2 netdevsim3: renamed from eth3 [ 374.689641][ T5831] Bluetooth: hci3: command tx timeout [ 374.709417][ T5936] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 374.732174][T16144] netlink: 'syz.6.2844': attribute type 1 has an invalid length. [ 374.748783][T16144] netlink: 212 bytes leftover after parsing attributes in process `syz.6.2844'. [ 374.760681][T16144] netlink: 5 bytes leftover after parsing attributes in process `syz.6.2844'. [ 374.790180][T16141] veth0_macvtap: left promiscuous mode [ 374.961484][T16149] bond1: option xmit_hash_policy: invalid value (64) [ 374.970594][T16149] bond1 (unregistering): Released all slaves [ 375.017210][T15953] 8021q: adding VLAN 0 to HW filter on device bond0 [ 375.094143][ T6135] netdevsim netdevsim1 netdevsim0: set [0, 0] type 1 family 0 port 8472 - 0 [ 375.124309][ T6135] netdevsim netdevsim1 netdevsim1: set [0, 0] type 1 family 0 port 8472 - 0 [ 375.155676][T15953] 8021q: adding VLAN 0 to HW filter on device team0 [ 375.190776][ T6135] netdevsim netdevsim1 netdevsim2: set [0, 0] type 1 family 0 port 8472 - 0 [ 375.212345][ T6135] netdevsim netdevsim1 netdevsim3: set [0, 0] type 1 family 0 port 8472 - 0 [ 375.247943][ T6135] bridge0: port 1(bridge_slave_0) entered blocking state [ 375.255211][ T6135] bridge0: port 1(bridge_slave_0) entered forwarding state [ 375.274450][T16164] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 375.293994][T16164] netlink: 'syz.6.2851': attribute type 7 has an invalid length. [ 375.312771][ T6135] bridge0: port 2(bridge_slave_1) entered blocking state [ 375.320226][ T6135] bridge0: port 2(bridge_slave_1) entered forwarding state [ 375.403726][T16170] 8021q: adding VLAN 0 to HW filter on device bond1 [ 375.436196][T16166] gtp0: entered promiscuous mode [ 375.473739][T16176] tipc: Invalid UDP bearer configuration [ 375.473801][T16176] tipc: Enabling of bearer rejected, failed to enable media [ 375.746238][ T5936] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 375.970001][ T5991] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 376.010775][T16208] netlink: 'syz.1.2860': attribute type 32 has an invalid length. [ 376.666138][T16217] delete_channel: no stack [ 376.769600][ T5831] Bluetooth: hci3: command tx timeout [ 376.784196][ T5918] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 377.681345][T16208] workqueue: Failed to create a rescuer kthread for wq "bond1": -EINTR [ 377.829680][ T5936] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 377.901715][T16236] net veth1_virt_wifi virt_wifi0: entered promiscuous mode [ 377.925585][T16236] net veth1_virt_wifi virt_wifi0: entered allmulticast mode [ 378.002172][T15953] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 378.025556][T16244] __nla_validate_parse: 7 callbacks suppressed [ 378.025576][T16244] netlink: 24 bytes leftover after parsing attributes in process `syz.6.2870'. [ 378.061570][T16246] netlink: 16 bytes leftover after parsing attributes in process `syz.7.2871'. [ 378.192792][T15953] veth0_vlan: entered promiscuous mode [ 378.222348][T15953] veth1_vlan: entered promiscuous mode [ 378.287695][T16258] ip6gre1: entered promiscuous mode [ 378.294899][T16258] ip6gre1: entered allmulticast mode [ 378.330758][T15953] veth0_macvtap: entered promiscuous mode [ 378.358810][T15953] veth1_macvtap: entered promiscuous mode [ 378.363102][T16255] can: request_module (can-proto-0) failed. [ 378.396187][T15953] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 378.431832][T15953] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 378.481484][ T9501] netdevsim netdevsim2 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 378.512810][ T9501] netdevsim netdevsim2 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 378.548735][ T9501] netdevsim netdevsim2 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 378.576500][ T9501] netdevsim netdevsim2 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 378.676253][T16273] netlink: 24 bytes leftover after parsing attributes in process `syz.1.2878'. [ 378.809911][ T9501] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 378.826040][ T9501] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 378.853877][ T5152] Bluetooth: hci3: command tx timeout [ 378.862812][ T5936] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 378.954912][ T6135] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 378.966334][ T6135] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 379.010580][ T5969] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 379.048200][T16294] netlink: 'syz.1.2883': attribute type 10 has an invalid length. [ 379.090539][T16294] bridge0: port 2(bridge_slave_1) entered disabled state [ 379.128552][T16294] bridge_slave_1: left allmulticast mode [ 379.138254][T16294] bridge_slave_1: left promiscuous mode [ 379.145491][T16294] bridge0: port 2(bridge_slave_1) entered disabled state [ 379.165551][T16294] bond0: (slave bridge_slave_1): Enslaving as an active interface with an up link [ 379.314181][T16311] wg1 speed is unknown, defaulting to 1000 [ 379.315145][T16312] siw: device registration error -23 [ 379.355009][T16311] wg1 speed is unknown, defaulting to 1000 [ 379.383198][T16311] wg1 speed is unknown, defaulting to 1000 [ 379.427321][T16311] infiniband syz2: RDMA CMA: cma_listen_on_dev, error -98 [ 379.464940][T16311] wg1 speed is unknown, defaulting to 1000 [ 379.474160][T16311] wg1 speed is unknown, defaulting to 1000 [ 379.484777][T16311] wg1 speed is unknown, defaulting to 1000 [ 379.495139][ T5969] IPVS: starting estimator thread 0... [ 379.503291][T16311] wg1 speed is unknown, defaulting to 1000 [ 379.511911][T16311] wg1 speed is unknown, defaulting to 1000 [ 379.535448][T16311] wg1 speed is unknown, defaulting to 1000 [ 379.549484][T16311] wg1 speed is unknown, defaulting to 1000 [ 379.570524][T16323] bridge1: the hash_elasticity option has been deprecated and is always 16 [ 379.580609][T16311] wg1 speed is unknown, defaulting to 1000 [ 379.596601][T16311] wg1 speed is unknown, defaulting to 1000 [ 379.604721][T16323] netlink: 36 bytes leftover after parsing attributes in process `syz.7.2891'. [ 379.613990][T16320] IPVS: using max 29 ests per chain, 69600 per kthread [ 379.625480][T16311] wg1 speed is unknown, defaulting to 1000 [ 379.646528][T16311] wg1 speed is unknown, defaulting to 1000 [ 379.674814][T16311] wg1 speed is unknown, defaulting to 1000 [ 379.682194][T16327] netlink: 8 bytes leftover after parsing attributes in process `syz.5.2894'. [ 379.743069][T16311] wg1 speed is unknown, defaulting to 1000 [ 379.767405][T16311] wg1 speed is unknown, defaulting to 1000 [ 379.898577][ T5927] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 380.058371][T16345] x_tables: unsorted underflow at hook 3 [ 380.070841][T16345] netlink: 8 bytes leftover after parsing attributes in process `syz.2.2902'. [ 380.103562][T16342] bond10 (unregistering): Released all slaves [ 380.294482][T16364] openvswitch: netlink: Either Ethernet header or EtherType is required. [ 380.345279][T16342] syzkaller1: entered promiscuous mode [ 380.352058][T16342] syzkaller1: entered allmulticast mode [ 380.395250][T16363] netlink: 'syz.5.2905': attribute type 1 has an invalid length. [ 380.428341][T16364] faux_driver regulatory: loading /lib/firmware/regulatory.db failed with error -12 [ 380.444454][T16364] faux_driver regulatory: Direct firmware load for regulatory.db failed with error -12 [ 380.457144][T16364] faux_driver regulatory: Falling back to sysfs fallback for: regulatory.db [ 380.569243][T16363] 8021q: adding VLAN 0 to HW filter on device bond11 [ 380.583513][T16374] netlink: 216 bytes leftover after parsing attributes in process `syz.1.2908'. [ 380.694277][ T5152] Bluetooth: hci5: command 0x0406 tx timeout [ 380.777458][T16385] xt_socket: unknown flags 0x50 [ 380.843077][T16388] netlink: 100 bytes leftover after parsing attributes in process `syz.1.2915'. [ 380.935621][ T5936] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 380.964054][T16399] netlink: 12 bytes leftover after parsing attributes in process `syz.5.2916'. [ 381.086702][T16403] netdevsim netdevsim2 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 381.134577][T16405] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check. [ 381.160206][T16412] netlink: 1044 bytes leftover after parsing attributes in process `syz.6.2920'. [ 381.244146][T16403] netdevsim netdevsim2 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 381.473240][T16403] netdevsim netdevsim2 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 381.641730][T16403] netdevsim netdevsim2 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 381.677119][T16438] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check. [ 381.781008][ T9498] netdevsim netdevsim2 eth0: set [1, 0] type 2 family 0 port 6081 - 0 [ 381.845496][ T6372] netdevsim netdevsim2 eth1: set [1, 0] type 2 family 0 port 6081 - 0 [ 381.917829][ T9500] netdevsim netdevsim2 eth2: set [1, 0] type 2 family 0 port 6081 - 0 [ 381.983875][ T9501] netdevsim netdevsim2 eth3: set [1, 0] type 2 family 0 port 6081 - 0 [ 381.993997][ T5927] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 382.051549][ T5969] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 382.181398][T16463] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check. [ 382.281186][T16465] vlan2: entered promiscuous mode [ 382.286531][T16465] vlan2: entered allmulticast mode [ 382.310872][T16465] hsr_slave_1: entered allmulticast mode [ 382.450674][T10859] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 382.627211][T16491] netdevsim netdevsim6 netdevsim0: IPsec offload requires 128 bit authentication [ 383.016320][T16511] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check. [ 383.160409][ T5936] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 383.261127][T16516] netlink: 'syz.1.2952': attribute type 18 has an invalid length. [ 383.267283][T16518] __nla_validate_parse: 12 callbacks suppressed [ 383.267302][T16518] netlink: 36 bytes leftover after parsing attributes in process `syz.5.2953'. [ 383.863758][T16560] netlink: 8 bytes leftover after parsing attributes in process `syz.7.2961'. [ 383.889630][ T6135] wlan0: Trigger new scan to find an IBSS to join [ 384.217010][ T5936] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 384.294378][T16580] openvswitch: netlink: Flow actions attr not present in new flow. [ 384.502285][T16595] netlink: 12 bytes leftover after parsing attributes in process `syz.5.2967'. [ 384.544707][T16595] netlink: 56 bytes leftover after parsing attributes in process `syz.5.2967'. [ 384.613614][T16595] netlink: 8 bytes leftover after parsing attributes in process `syz.5.2967'. [ 384.645907][T16601] netlink: 'syz.7.2970': attribute type 1 has an invalid length. [ 384.790176][T16601] 8021q: adding VLAN 0 to HW filter on device bond2 [ 384.834723][T16616] netlink: 20 bytes leftover after parsing attributes in process `syz.5.2972'. [ 384.848333][T16616] netlink: 24 bytes leftover after parsing attributes in process `syz.5.2972'. [ 385.090144][ T5969] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 385.116450][T16623] netlink: 4 bytes leftover after parsing attributes in process `syz.5.2975'. [ 385.125649][T16623] netlink: 50 bytes leftover after parsing attributes in process `syz.5.2975'. [ 385.134757][T16623] netlink: 50 bytes leftover after parsing attributes in process `syz.5.2975'. [ 385.145971][T16623] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 385.155616][T16623] netlink: 'syz.5.2975': attribute type 8 has an invalid length. [ 385.176450][T16623] bond0: entered promiscuous mode [ 385.205619][T16623] bond_slave_0: entered promiscuous mode [ 385.232750][T16623] netdevsim netdevsim5 netdevsim0: entered promiscuous mode [ 385.270774][T16623] ip6gretap0: entered promiscuous mode [ 385.281483][T16623] gretap0: entered promiscuous mode [ 385.317226][T16623] hsr1: entered promiscuous mode [ 386.062940][T16677] syzkaller1: entered promiscuous mode [ 386.085333][T16677] syzkaller1: entered allmulticast mode [ 386.254174][T16692] pim6reg: entered allmulticast mode [ 386.462242][T16708] : entered promiscuous mode [ 386.717369][T16718] bridge_slave_0: left allmulticast mode [ 386.723974][T16718] bridge_slave_0: left promiscuous mode [ 386.732831][T16718] bridge0: port 1(bridge_slave_0) entered disabled state [ 386.745389][T16718] bridge_slave_1: left allmulticast mode [ 386.752497][T16718] bridge_slave_1: left promiscuous mode [ 386.758541][T16718] bridge0: port 2(bridge_slave_1) entered disabled state [ 386.773943][T16718] bond0: (slave bond_slave_0): Releasing backup interface [ 386.784790][T16718] bond0: (slave bond_slave_1): Releasing backup interface [ 386.797873][T16718] team0: Port device team_slave_0 removed [ 386.808598][T16718] team0: Port device team_slave_1 removed [ 386.816053][T16718] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 386.824366][T16718] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 386.833870][T16718] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 386.841800][T16718] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 386.936957][ T31] INFO: task kworker/u8:15:6107 blocked for more than 143 seconds. [ 386.948379][ T31] Not tainted syzkaller #0 [ 386.959027][ T31] "echo 0 > /proc/sys/kernel/hung_task_timeout_secs" disables this message. [ 386.968704][ T31] task:kworker/u8:15 state:D stack:21880 pid:6107 tgid:6107 ppid:2 task_flags:0x4208060 flags:0x00080000 [ 387.003261][ T31] Workqueue: netns cleanup_net [ 387.009297][ T31] Call Trace: [ 387.012747][ T31] [ 387.017593][ T31] __schedule+0x14bc/0x5000 [ 387.023548][ T31] ? __pfx___schedule+0x10/0x10 [ 387.029098][ T31] ? schedule+0x91/0x360 [ 387.033697][ T31] schedule+0x165/0x360 [ 387.037994][ T31] schedule_preempt_disabled+0x13/0x30 [ 387.044575][ T31] __mutex_lock+0x7e6/0x1350 [ 387.049613][ T31] ? __mutex_lock+0x5bb/0x1350 [ 387.054499][ T31] ? rdma_dev_change_netns+0x39/0x300 [ 387.060712][ T31] ? __pfx___mutex_lock+0x10/0x10 [ 387.065886][ T31] ? __mutex_unlock_slowpath+0x1a1/0x730 [ 387.072539][ T31] ? __pfx___mutex_unlock_slowpath+0x10/0x10 [ 387.078524][ T31] ? do_raw_spin_unlock+0x122/0x240 [ 387.083959][ T31] ? _raw_spin_unlock+0x28/0x50 [ 387.089465][ T31] rdma_dev_change_netns+0x39/0x300 [ 387.096390][ T31] rdma_dev_exit_net+0x203/0x340 [ 387.102214][ T31] ? __pfx___might_resched+0x10/0x10 [ 387.107517][ T31] ? __pfx_rdma_dev_exit_net+0x10/0x10 [ 387.113191][ T31] ? net_generic+0x1e/0x240 [ 387.117811][ T31] ? mutex_is_locked+0x17/0x50 [ 387.123141][ T31] ? rtnl_is_locked+0x15/0x20 [ 387.127909][ T31] ops_undo_list+0x49a/0x990 [ 387.133059][ T31] ? __pfx_ops_undo_list+0x10/0x10 [ 387.138210][ T31] ? do_raw_spin_unlock+0x122/0x240 [ 387.144146][ T31] cleanup_net+0x4d8/0x7a0 [ 387.148573][ T31] ? __pfx_cleanup_net+0x10/0x10 [ 387.153713][ T31] ? _raw_spin_unlock_irq+0x23/0x50 [ 387.159407][ T31] ? process_scheduled_works+0x9ef/0x1770 [ 387.165149][ T31] ? process_scheduled_works+0x9ef/0x1770 [ 387.171554][ T31] process_scheduled_works+0xad1/0x1770 [ 387.177143][ T31] ? __pfx_process_scheduled_works+0x10/0x10 [ 387.183842][ T31] worker_thread+0x8a0/0xda0 [ 387.188657][ T31] ? __pfx__raw_spin_unlock_irqrestore+0x10/0x10 [ 387.196453][ T31] ? __kthread_parkme+0x7b/0x200 [ 387.204300][ T31] kthread+0x711/0x8a0 [ 387.208407][ T31] ? __pfx_worker_thread+0x10/0x10 [ 387.214584][ T31] ? __pfx_kthread+0x10/0x10 [ 387.219426][ T31] ? _raw_spin_unlock_irq+0x23/0x50 [ 387.224623][ T31] ? lockdep_hardirqs_on+0x98/0x140 [ 387.230227][ T31] ? __pfx_kthread+0x10/0x10 [ 387.234820][ T31] ret_from_fork+0x599/0xb30 [ 387.239554][ T31] ? __pfx_ret_from_fork+0x10/0x10 [ 387.244794][ T31] ? __switch_to_asm+0x39/0x70 [ 387.250167][ T31] ? __switch_to_asm+0x33/0x70 [ 387.255023][ T31] ? __pfx_kthread+0x10/0x10 [ 387.259858][ T31] ret_from_fork_asm+0x1a/0x30 [ 387.264767][ T31] [ 387.267820][ T31] INFO: task syz.4.796:8866 blocked for more than 143 seconds. [ 387.275927][ T31] Not tainted syzkaller #0 [ 387.281580][ T31] "echo 0 > /proc/sys/kernel/hung_task_timeout_secs" disables this message. [ 387.291750][ T31] task:syz.4.796 state:D stack:23104 pid:8866 tgid:8863 ppid:5850 task_flags:0x400140 flags:0x00080002 [ 387.305546][ T31] Call Trace: [ 387.312305][ T31] [ 387.315297][ T31] __schedule+0x14bc/0x5000 [ 387.321314][ T31] ? lockdep_unlock+0x89/0x120 [ 387.326147][ T31] ? __ib_unregister_device+0x2cb/0x3f0 [ 387.335377][ T5936] net_ratelimit: 3 callbacks suppressed [ 387.335396][ T5936] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 387.349528][ T31] ? ib_unregister_device_and_put+0xb8/0xf0 [ 387.355597][ T31] ? __pfx___schedule+0x10/0x10 [ 387.360538][ T31] ? schedule+0x91/0x360 [ 387.364904][ T31] schedule+0x165/0x360 [ 387.369247][ T31] schedule_timeout+0x9a/0x270 [ 387.374240][ T31] ? __pfx_schedule_timeout+0x10/0x10 [ 387.379843][ T31] ? _raw_spin_unlock_irq+0x23/0x50 [ 387.385162][ T31] ? lockdep_hardirqs_on+0x98/0x140 [ 387.390803][ T31] ? wait_for_completion+0x267/0x5d0 [ 387.396234][ T31] wait_for_completion+0x2bf/0x5d0 [ 387.403456][ T31] ? __pfx_wait_for_completion+0x10/0x10 [ 387.409408][ T31] ? remove_client_context+0x19c/0x1e0 [ 387.415014][ T31] disable_device+0x1c6/0x320 [ 387.421367][ T31] ? __pfx_disable_device+0x10/0x10 [ 387.427211][ T31] __ib_unregister_device+0x2cb/0x3f0 [ 387.432819][ T31] ? __pfx_ib_device_get_by_index+0x10/0x10 [ 387.439747][ T31] ib_unregister_device_and_put+0xb8/0xf0 [ 387.445690][ T31] nldev_dellink+0x2d1/0x320 [ 387.450448][ T31] ? __pfx_nldev_dellink+0x10/0x10 [ 387.455801][ T31] ? apparmor_capable+0x137/0x1a0 [ 387.460885][ T31] ? bpf_lsm_capable+0x9/0x20 [ 387.465754][ T31] ? security_capable+0x7e/0x2e0 [ 387.470985][ T31] ? __pfx_nldev_dellink+0x10/0x10 [ 387.476259][ T31] rdma_nl_rcv+0x6ae/0x980 [ 387.480776][ T31] ? __pfx_rdma_nl_rcv+0x10/0x10 [ 387.486109][ T31] ? netlink_deliver_tap+0x2e/0x1b0 [ 387.491789][ T31] netlink_unicast+0x82f/0x9e0 [ 387.496764][ T31] ? __pfx_netlink_unicast+0x10/0x10 [ 387.502871][ T31] ? netlink_sendmsg+0x642/0xb30 [ 387.507847][ T31] netlink_sendmsg+0x805/0xb30 [ 387.513105][ T31] ? __pfx_netlink_sendmsg+0x10/0x10 [ 387.518728][ T31] ? aa_sock_msg_perm+0xf1/0x1b0 [ 387.523721][ T31] ? bpf_lsm_socket_sendmsg+0x9/0x20 [ 387.530758][ T31] ? __pfx_netlink_sendmsg+0x10/0x10 [ 387.536090][ T31] __sock_sendmsg+0x21c/0x270 [ 387.542339][ T31] ____sys_sendmsg+0x505/0x820 [ 387.547144][ T31] ? __pfx_____sys_sendmsg+0x10/0x10 [ 387.553073][ T31] ? import_iovec+0x74/0xa0 [ 387.557582][ T31] ___sys_sendmsg+0x21f/0x2a0 [ 387.562419][ T31] ? __pfx____sys_sendmsg+0x10/0x10 [ 387.567647][ T31] ? futex_wait+0x285/0x360 [ 387.574063][ T31] ? __fget_files+0x2a/0x420 [ 387.578680][ T31] ? __fget_files+0x3a0/0x420 [ 387.583447][ T31] __x64_sys_sendmsg+0x19b/0x260 [ 387.588415][ T31] ? __pfx___x64_sys_sendmsg+0x10/0x10 [ 387.594102][ T31] ? do_syscall_64+0xbe/0xf80 [ 387.599105][ T31] do_syscall_64+0xfa/0xf80 [ 387.604304][ T31] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 387.610550][ T31] ? clear_bhb_loop+0x60/0xb0 [ 387.615336][ T31] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 387.621417][ T31] RIP: 0033:0x7ffb7518f749 [ 387.625844][ T31] RSP: 002b:00007ffb7609f038 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 387.634583][ T31] RAX: ffffffffffffffda RBX: 00007ffb753e5fa0 RCX: 00007ffb7518f749 [ 387.642736][ T31] RDX: 0000000000000040 RSI: 0000200000000e40 RDI: 0000000000000003 [ 387.651630][ T31] RBP: 00007ffb75213f91 R08: 0000000000000000 R09: 0000000000000000 [ 387.659994][ T31] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 387.668171][ T31] R13: 00007ffb753e6038 R14: 00007ffb753e5fa0 R15: 00007ffeebe129b8 [ 387.676572][ T31] [ 387.680069][ T31] [ 387.680069][ T31] Showing all locks held in the system: [ 387.688083][ T31] 2 locks held by rcu_exp_gp_kthr/18: [ 387.696250][ T31] #0: ffff8880b883a7d8 (&rq->__lock){-.-.}-{2:2}, at: raw_spin_rq_lock_nested+0x2a/0x140 [ 387.707212][ T31] #1: ffff8880b8824448 (psi_seq){-.-.}-{0:0}, at: psi_task_switch+0x53/0x880 [ 387.716391][ T31] 1 lock held by khungtaskd/31: [ 387.721325][ T31] #0: ffffffff8df41cc0 (rcu_read_lock){....}-{1:3}, at: debug_show_all_locks+0x2e/0x180 [ 387.731813][ T31] 3 locks held by kworker/u8:7/1095: [ 387.737199][ T31] #0: ffff88801a069948 ((wq_completion)events_unbound#2){+.+.}-{0:0}, at: process_scheduled_works+0x9b4/0x1770 [ 387.749501][ T31] #1: ffffc90003adfb80 ((linkwatch_work).work){+.+.}-{0:0}, at: process_scheduled_works+0x9ef/0x1770 [ 387.761128][ T31] #2: ffffffff8f2f5608 (rtnl_mutex){+.+.}-{4:4}, at: linkwatch_event+0xe/0x60 [ 387.770422][ T31] 2 locks held by getty/5592: [ 387.775093][ T31] #0: ffff88802f81f0a0 (&tty->ldisc_sem){++++}-{0:0}, at: tty_ldisc_ref_wait+0x25/0x70 [ 387.784901][ T31] #1: ffffc9000332b2f0 (&ldata->atomic_read_lock){+.+.}-{4:4}, at: n_tty_read+0x43e/0x1400 [ 387.795397][ T31] 4 locks held by kworker/u8:15/6107: [ 387.801054][ T31] #0: ffff88801aedf148 ((wq_completion)netns){+.+.}-{0:0}, at: process_scheduled_works+0x9b4/0x1770 [ 387.814035][ T31] #1: ffffc9000b2f7b80 (net_cleanup_work){+.+.}-{0:0}, at: process_scheduled_works+0x9ef/0x1770 [ 387.824991][ T31] #2: ffffffff8f2e8550 (pernet_ops_rwsem){++++}-{4:4}, at: cleanup_net+0xf7/0x7a0 [ 387.834502][ T31] #3: ffff888032848700 (&device->unregistration_lock){+.+.}-{4:4}, at: rdma_dev_change_netns+0x39/0x300 [ 387.845891][ T31] 2 locks held by syz.4.796/8866: [ 387.851119][ T31] #0: ffffffff99befc98 (&rdma_nl_types[idx].sem){.+.+}-{4:4}, at: rdma_nl_rcv+0x302/0x980 [ 387.862544][ T31] #1: ffff888032848700 (&device->unregistration_lock){+.+.}-{4:4}, at: __ib_unregister_device+0x284/0x3f0 [ 387.874257][ T31] 2 locks held by syz.0.1017/9698: [ 387.879694][ T31] #0: ffffffff8f2e8550 (pernet_ops_rwsem){++++}-{4:4}, at: copy_net_ns+0x3cc/0x570 [ 387.889551][ T31] #1: ffff888032848700 (&device->unregistration_lock){+.+.}-{4:4}, at: rdma_dev_change_netns+0x39/0x300 [ 387.900989][ T31] 2 locks held by syz.3.2435/14647: [ 387.906181][ T31] #0: ffffffff8f2e8550 (pernet_ops_rwsem){++++}-{4:4}, at: copy_net_ns+0x3cc/0x570 [ 387.916388][ T31] #1: ffff888032848700 (&device->unregistration_lock){+.+.}-{4:4}, at: rdma_dev_change_netns+0x39/0x300 [ 387.928241][ T31] 1 lock held by syz-executor/15390: [ 387.933768][ T31] #0: ffff8880b883a7d8 (&rq->__lock){-.-.}-{2:2}, at: raw_spin_rq_lock_nested+0x2a/0x140 [ 387.944188][ T31] 2 locks held by syz.5.3005/16724: [ 387.949766][ T31] #0: ffffffff8f2f5608 (rtnl_mutex){+.+.}-{4:4}, at: tun_chr_close+0x3e/0x1c0 [ 387.958778][ T31] #1: ffffffff8df477f8 (rcu_state.exp_mutex){+.+.}-{4:4}, at: synchronize_rcu_expedited+0x2f6/0x730 [ 387.970562][ T31] 1 lock held by syz.2.3006/16730: [ 387.975872][ T31] #0: ffffffff8f2f5608 (rtnl_mutex){+.+.}-{4:4}, at: inet_rtm_delroute+0x107/0x2f0 [ 387.985436][ T31] 1 lock held by syz.7.3007/16731: [ 387.990678][ T31] #0: ffffffff8f2f5608 (rtnl_mutex){+.+.}-{4:4}, at: __tun_chr_ioctl+0x37a/0x1df0 [ 388.000030][ T31] 1 lock held by syz.7.3007/16732: [ 388.005211][ T31] #0: ffffffff8f2f5608 (rtnl_mutex){+.+.}-{4:4}, at: __tun_chr_ioctl+0x37a/0x1df0 [ 388.016718][ T31] [ 388.023815][ T31] ============================================= [ 388.023815][ T31] [ 388.035992][ T31] NMI backtrace for cpu 0 [ 388.036010][ T31] CPU: 0 UID: 0 PID: 31 Comm: khungtaskd Not tainted syzkaller #0 PREEMPT(full) [ 388.036031][ T31] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/25/2025 [ 388.036051][ T31] Call Trace: [ 388.036059][ T31] [ 388.036067][ T31] dump_stack_lvl+0x189/0x250 [ 388.036096][ T31] ? __pfx_dump_stack_lvl+0x10/0x10 [ 388.036115][ T31] ? __pfx__printk+0x10/0x10 [ 388.036146][ T31] nmi_cpu_backtrace+0x39e/0x3d0 [ 388.036163][ T31] ? __pfx_nmi_cpu_backtrace+0x10/0x10 [ 388.036180][ T31] ? __pfx__printk+0x10/0x10 [ 388.036201][ T31] ? __pfx_nmi_raise_cpu_backtrace+0x10/0x10 [ 388.036230][ T31] nmi_trigger_cpumask_backtrace+0x17a/0x300 [ 388.036250][ T31] watchdog+0xf3c/0xf80 [ 388.036274][ T31] ? watchdog+0x1e2/0xf80 [ 388.036302][ T31] kthread+0x711/0x8a0 [ 388.036328][ T31] ? __pfx_watchdog+0x10/0x10 [ 388.036349][ T31] ? __pfx_kthread+0x10/0x10 [ 388.036374][ T31] ? _raw_spin_unlock_irq+0x23/0x50 [ 388.036395][ T31] ? lockdep_hardirqs_on+0x98/0x140 [ 388.036416][ T31] ? __pfx_kthread+0x10/0x10 [ 388.036440][ T31] ret_from_fork+0x599/0xb30 [ 388.036468][ T31] ? __pfx_ret_from_fork+0x10/0x10 [ 388.036505][ T31] ? __switch_to_asm+0x39/0x70 [ 388.036524][ T31] ? __switch_to_asm+0x33/0x70 [ 388.036543][ T31] ? __pfx_kthread+0x10/0x10 [ 388.036564][ T31] ret_from_fork_asm+0x1a/0x30 [ 388.036604][ T31] [ 388.036612][ T31] Sending NMI from CPU 0 to CPUs 1: [ 388.188530][ C1] NMI backtrace for cpu 1 [ 388.188544][ C1] CPU: 1 UID: 0 PID: 0 Comm: swapper/1 Not tainted syzkaller #0 PREEMPT(full) [ 388.188558][ C1] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/25/2025 [ 388.188565][ C1] RIP: 0010:pv_native_safe_halt+0x13/0x20 [ 388.188585][ C1] Code: 53 ec 02 00 cc cc cc 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 f3 0f 1e fa 66 90 0f 00 2d 53 0d 1f 00 f3 0f 1e fa fb f4 cc cc cc cc cc cc cc cc cc cc cc cc 90 90 90 90 90 90 90 90 90 [ 388.188596][ C1] RSP: 0018:ffffc90000197de0 EFLAGS: 000002c6 [ 388.188607][ C1] RAX: e3146cc17b439900 RBX: ffffffff8197438a RCX: e3146cc17b439900 [ 388.188616][ C1] RDX: 0000000000000001 RSI: ffffffff8d76be8f RDI: ffffffff8bbfc660 [ 388.188624][ C1] RBP: ffffc90000197f10 R08: ffff8880b893359b R09: 1ffff110171266b3 [ 388.188632][ C1] R10: dffffc0000000000 R11: ffffed10171266b4 R12: ffffffff8f805a70 [ 388.188640][ C1] R13: 1ffff110039ddb70 R14: 0000000000000001 R15: 0000000000000001 [ 388.188648][ C1] FS: 0000000000000000(0000) GS:ffff8881261b1000(0000) knlGS:0000000000000000 [ 388.188657][ C1] CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033 [ 388.188665][ C1] CR2: 0000000000000000 CR3: 0000000075142000 CR4: 00000000003526f0 [ 388.188676][ C1] Call Trace: [ 388.188683][ C1] [ 388.188688][ C1] default_idle+0x13/0x20 [ 388.188704][ C1] default_idle_call+0x73/0xb0 [ 388.188721][ C1] do_idle+0x1ea/0x520 [ 388.188732][ C1] ? ct_nmi_exit+0x14b/0x1d0 [ 388.188748][ C1] ? __pfx_do_idle+0x10/0x10 [ 388.188765][ C1] cpu_startup_entry+0x44/0x60 [ 388.188777][ C1] start_secondary+0x101/0x110 [ 388.188793][ C1] common_startup_64+0x13e/0x147 [ 388.188812][ C1] [ 388.190239][T10859] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 388.384181][ T5927] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 388.929749][ T3424] wlan0: Trigger new scan to find an IBSS to join [ 389.422646][ T5927] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 389.830222][ T3424] wlan0: Creating new IBSS network, BSSID 5a:13:a7:c8:69:57 [ 390.454707][ T5936] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 391.249491][T10860] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 391.492861][ T5927] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 392.053073][T10859] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 392.533122][ T5911] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 393.576327][ T5911] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 394.289349][T10860] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 394.617596][ T5936] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 395.654467][ T5911] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 396.695909][ T5936] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog