last executing test programs: 2m44.21224082s ago: executing program 0 (id=1725): r0 = socket$inet(0x2, 0x4000000000000001, 0x0) ioctl$sock_inet_SIOCADDRT(r0, 0x890b, &(0x7f0000000540)={0x0, {0x2, 0x4e23, @multicast1}, {0x2, 0x4e20, @multicast1}, {0x2, 0x4e23, @remote}, 0x19, 0x0, 0x0, 0x0, 0x0, &(0x7f0000000040)='xfrm0\x00', 0x2, 0x8, 0x7f}) setsockopt$inet_tcp_int(r0, 0x6, 0x80000000000002, &(0x7f00000004c0)=0x79, 0x4) bind$inet(r0, &(0x7f0000000080)={0x2, 0x4e23, @multicast1}, 0x10) r1 = socket$inet(0x2, 0x2, 0x0) setsockopt$inet_mreqn(r0, 0x0, 0x27, &(0x7f0000000500)={@broadcast, @initdev={0xac, 0x1e, 0xff, 0x0}}, 0xc) r2 = socket$netlink(0x10, 0x3, 0x0) writev(r2, &(0x7f00000003c0)=[{&(0x7f0000000180)="390000001300034700bb65e1c3e4ffff01000000010000005600000025000000190004000400000007fd17e5ffff0800040000000000000000", 0x39}], 0x1) writev(r2, &(0x7f0000000100)=[{&(0x7f0000000400)="390000001300034700bb5be1c3e4feff06000000010000004500000025000000190004000400ad000200000000000006040000000000f93132", 0x39}], 0x1) setsockopt$inet_msfilter(r1, 0x0, 0x29, 0x0, 0x0) r3 = socket$kcm(0x29, 0x5, 0x0) bpf$PROG_LOAD(0x5, &(0x7f0000000780)={0x1e, 0x7, &(0x7f00000001c0)=@framed={{0x18, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x80}, [@cb_func={0x18, 0x3, 0x4, 0x0, 0xfffffffffffffff9}, @jmp={0x5, 0x0, 0x7, 0x0, 0x5, 0x4, 0x10}, @generic={0x8, 0x2, 0x2, 0xd4, 0x8000}]}, 0x0, 0x9, 0xf, &(0x7f00000002c0)=""/15, 0x41100, 0x20, '\x00', 0x0, @sk_lookup, 0xffffffffffffffff, 0x8, &(0x7f0000000340)={0x7, 0x5}, 0x8, 0x10, &(0x7f0000000380)={0x0, 0xa, 0x9, 0xfff}, 0x10, 0xffffffffffffffff, 0xffffffffffffffff, 0x1, 0x0, &(0x7f0000000440)=[{0x5, 0x3, 0x10, 0xb}], 0x10, 0x2}, 0x94) ioctl$sock_kcm_SIOCKCMATTACH(r3, 0x89e0, 0x0) setsockopt$SO_ATTACH_FILTER(r0, 0x1, 0x1a, &(0x7f0000000000)={0x1, &(0x7f0000000280)=[{0x6, 0xfa, 0x0, 0xe4}]}, 0x10) sendto$inet(r0, 0x0, 0x0, 0x200007fd, &(0x7f0000e68000)={0x2, 0x4e23, @local}, 0x10) setsockopt$inet_tcp_TCP_CONGESTION(r0, 0x6, 0xd, &(0x7f0000000100)='bbr', 0x3) sendmmsg$inet(r0, &(0x7f0000001240)=[{{0x0, 0x0, &(0x7f00000005c0)=[{&(0x7f0000000b80)="f77d2b5dd5f7d74f0748cf3d2cf218d644566a14103b1c7dd35fd2951bd022f10f2dc7f4ce0d8ac5f4abaca4b97b706153756913b7dd48248b5bfb10460019248bf238743fa2aeb5bef21ce832db670920dc5e911ef2ad63e849901d1001129dbacbfd4924d7545517fd18b5d29978f32a5b5c81755cb89cc0490958ba3211eb99df5cdbbc0f9c941aaa1495893dada02d8188acd26b5afd7476413f322c8f79de769debb56343f3eded2dca93ed6641e50fe595e1e0dbe84ed0f70abb4ed2dfb6648df7db", 0xc5}], 0x1}}, {{0x0, 0x0, &(0x7f0000000a00)=[{&(0x7f0000000640)="42e013913edbeb683c44e18a52b5a2462064ddd92caaba941de80d06047dedb7eeeff3a27eacf4c416b6979d6c918608807c44d01535dbaab3b390086e4fd43c6b5931187023646d6beac2340fdc7a0d81214ac76a818f64d287311e8828dfd3e3dd67efdb129a6e52745d1540e570891f6bf411cc16a18c4d34e522a1", 0x7d}], 0x1}}], 0x2, 0x2090) socket(0x2, 0x80805, 0x0) r4 = socket$inet6_sctp(0xa, 0x5, 0x84) r5 = bpf$MAP_CREATE(0x0, &(0x7f000000a180)=ANY=[@ANYBLOB="0e000000040000000800000008"], 0x50) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x16, 0x22d3, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000001070000000000000000000018110000", @ANYRES32=r5, @ANYBLOB="0000000000000000b7080000001900007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000100000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r6 = bpf$PROG_LOAD(0x5, &(0x7f00000010c0)={0x16, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x19, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000300)={r6, 0x2000000, 0xe, 0x0, &(0x7f0000000600)="c9f7b98600"/14, 0x0, 0x7ffd, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x50) r7 = socket$inet(0x2, 0x4000000000000001, 0x0) setsockopt$inet_tcp_int(r7, 0x6, 0x1e, &(0x7f00000004c0)=0x1, 0x4) sendto$inet(r7, 0x0, 0x0, 0x200007fd, &(0x7f0000e68000)={0x2, 0x4e23, @local}, 0x10) shutdown(r4, 0x0) close(0x3) 2m43.078332337s ago: executing program 0 (id=1741): r0 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r0, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000400)={&(0x7f0000000880)=ANY=[@ANYBLOB="180000002f00090028bd70000000000004000000040010"], 0x18}, 0x1, 0x0, 0x0, 0x42804}, 0x20000004) mmap(&(0x7f0000000000/0xfbe000)=nil, 0xfbe000, 0x2, 0x21031, 0xffffffffffffffff, 0x21d63000) r1 = bpf$MAP_CREATE(0x0, &(0x7f0000000780)=ANY=[@ANYBLOB="0e00000007000000800000000900000020580082a6227ae4fd747688fc94b4562ed6d400", @ANYRES32, @ANYBLOB="0400"/20, @ANYRES32=0x0, @ANYRES32, @ANYBLOB="04000000000000000100"/28], 0x50) r2 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000001070000000000000000260018110000", @ANYRES32=r1, @ANYBLOB="0000000000000000b7080000000800007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000100000095"], 0x0, 0x0, 0x0, 0x0, 0x41000, 0x26, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$OBJ_PIN_MAP(0x6, &(0x7f0000000340)=@generic={&(0x7f0000000300)='./file0\x00', r1}, 0x18) r4 = syz_init_net_socket$nfc_raw(0x27, 0x5, 0x0) r5 = syz_init_net_socket$bt_l2cap(0x1f, 0x1, 0x3) close(r5) r6 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='memory.events\x00', 0x275a, 0x0) mmap(&(0x7f0000200000/0x4000)=nil, 0x4000, 0x4, 0x200000006c832, 0xffffffffffffffff, 0x0) socket$inet6_udp(0xa, 0x2, 0x0) shutdown(r5, 0x0) recvmmsg(r5, &(0x7f0000000b40)=[{{&(0x7f0000000800)=@in6={0xa, 0x0, 0x0, @mcast2}, 0x80, &(0x7f0000000ac0)=[{&(0x7f0000000a00)=""/176, 0xb0}], 0x1, &(0x7f0000000b00)=""/31, 0x1f}, 0xfffffffa}], 0x1, 0x40000302, 0x0) r7 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPCTNL_MSG_CT_DELETE(r7, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000280)=ANY=[@ANYBLOB="34000000020103000088e000000000000200000014001700009d000a00070c000002000000000047220ad8248a0856c89a03d468450f63cc066b90a02e46356556ea975ead1609a4f46aa826df8722521b2e59386919b4f374a8a0e01dc51949483442e0c5364d433547f06d78050400"/121], 0x34}}, 0x4) r8 = bpf$MAP_CREATE(0x0, &(0x7f0000000b80)=ANY=[@ANYRES64=r3, @ANYRES32=r4, @ANYRESHEX=r2, @ANYRES8=r1], 0x50) r9 = socket$l2tp(0x2, 0x2, 0x73) setsockopt$IPT_SO_SET_REPLACE(r9, 0x0, 0x40, &(0x7f0000000380)=@filter={'filter\x00', 0x42, 0x4, 0x311, 0xffffffff, 0x1d8, 0x98, 0x98, 0xffffffff, 0xffffffff, 0x2a8, 0x2a8, 0x2a8, 0xffffffff, 0x5, 0x0, {[{{@ip={@multicast2, @multicast2, 0x0, 0x0, 'netpci0\x00', 'nr0\x00', {0xff}}, 0x74000002, 0x70, 0x98, 0x1ba, {0x46010000, 0x2c000000000000}}, @REJECT={0x28}}, {{@ip={@private=0xa010101, @multicast2, 0xff, 0x0, 'netpci0\x00', 'team_slave_1\x00'}, 0x287, 0xe0, 0x140, 0x0, {}, [@common=@unspec=@addrtype1={{0x28}, {0x4}}, @common=@unspec=@limit={{0x48}, {0xfffffffa, 0xb, 0x0, 0x0, 0x0, 0xfffffffc}}]}, @common=@SET={0x60, 'SET\x00', 0x0, {{0x0, [0x1278]}, {0xffff, [0x5]}}}}, {{@ip={@dev, @remote, 0x0, 0xff000000, 'veth1_to_team\x00', 'veth1_to_batadv\x00'}, 0x0, 0x70, 0xd0}, @common=@SET={0x60, 'SET\x00', 0x0, {{0x2, [0x0, 0x3, 0x1, 0x2, 0x0, 0x5], 0x1, 0x4}, {0xffffffffffffffff, [0x7, 0x4, 0x4, 0x5], 0x6, 0x1}}}}], {{'\x00', 0x0, 0x70, 0x98}, {0x28}}}}, 0x3a0) getsockopt$inet_opts(0xffffffffffffffff, 0x0, 0x16, &(0x7f0000000180)=""/171, &(0x7f0000000740)=0xab) bpf$MAP_LOOKUP_BATCH(0x18, &(0x7f00000000c0)={0x0, &(0x7f0000000980)=""/103, &(0x7f00000025c0), &(0x7f0000000600), 0x80, r8, 0x0, 0x7}, 0x38) ioctl$OCFS2_IOC_MOVE_EXT(r0, 0x40406f06, &(0x7f0000000140)={0x33, 0x4, 0x7, 0x4}) r10 = socket$inet(0x2, 0x3, 0x6) setsockopt$inet_buf(r10, 0x0, 0xa, &(0x7f0000000200)="b531", 0x2) syz_genetlink_get_family_id$mptcp(&(0x7f0000000240), r6) sendmsg$kcm(0xffffffffffffffff, 0x0, 0x0) close(0x3) r11 = socket(0x8, 0x800, 0xdf5) sendmsg$IPCTNL_MSG_CT_NEW(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f00000008c0)=ANY=[@ANYBLOB="ac0100000001010400000000000000000a0000003c0001802c00018014000300fe8000000000000000000000000000aa1400040000000000000000000000ffff0a0101020c00028005000100000000003c0002802c00018014000300fc02000000000000000000000000000014000400fe8000000000000000000000000000aa0c0002800500010000000000080007400000000044000f800800034000000006080002400000000108000340000000ce08000240000000030800034058696a8c0800024000000001080001400000000008000140000000040c000680080002000000000010000d80080001006401010004000380140018"], 0x1ac}, 0x1, 0x0, 0x0, 0x40}, 0x0) sendmsg$RDMA_NLDEV_CMD_GET_CHARDEV(r11, &(0x7f00000000c0)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x40}, 0xc, &(0x7f0000000080)={&(0x7f0000000040)=ANY=[@ANYBLOB="280000000f030004000000080800030004000000"], 0x28}, 0x1, 0x0, 0x0, 0x80}, 0x4000000) 2m42.14479773s ago: executing program 0 (id=1750): socket$inet6_tcp(0xa, 0x1, 0x0) syz_init_net_socket$x25(0x9, 0x5, 0x0) r0 = socket$inet6(0xa, 0x3, 0x8000000003c) connect$inet6(r0, &(0x7f0000000200)={0xa, 0x4ea3, 0x0, @loopback, 0x3}, 0x1c) r1 = socket$netlink(0x10, 0x3, 0x0) bind$netlink(r1, &(0x7f0000514ff4)={0x10, 0x0, 0x0, 0x2ffffffff}, 0xc) setsockopt$netlink_NETLINK_ADD_MEMBERSHIP(r1, 0x10e, 0x1, &(0x7f0000000040)=0xe, 0x4) r2 = socket(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f0000000000)={'lo\x00', 0x0}) sendmsg$nl_route_sched(r2, &(0x7f0000000740)={0x0, 0x0, &(0x7f0000000780)={&(0x7f0000000300)=@newqdisc={0xac, 0x24, 0xd0f, 0x1, 0x0, {0x60, 0x0, 0x0, r3, {0x3, 0x3}, {0xffff, 0xffff}, {0x5, 0x6}}, [@qdisc_kind_options=@q_fq_codel={{0xd}, {0x54, 0x2, [@TCA_FQ_CODEL_CE_THRESHOLD_MASK={0x5, 0xb, 0xf}, @TCA_FQ_CODEL_INTERVAL={0x8, 0x3, 0xffffffff}, @TCA_FQ_CODEL_LIMIT={0x8, 0x2, 0x8}, @TCA_FQ_CODEL_FLOWS={0x8, 0x5, 0x1}, @TCA_FQ_CODEL_MEMORY_LIMIT={0x8, 0x9, 0x6}, @TCA_FQ_CODEL_CE_THRESHOLD={0x8, 0x7, 0x4}, @TCA_FQ_CODEL_CE_THRESHOLD={0x8, 0x7, 0x7}, @TCA_FQ_CODEL_CE_THRESHOLD={0x8, 0x7, 0x1}, @TCA_FQ_CODEL_ECN={0x8, 0x4, 0x6}, @TCA_FQ_CODEL_CE_THRESHOLD_SELECTOR={0x5, 0xa, 0x7}]}}, @TCA_STAB={0x24, 0x8, 0x0, 0x1, [{{0x1c, 0x1, {0x6, 0x1d, 0x407, 0x2, 0x0, 0x3, 0x4}}, {0x4}}]}]}, 0xac}, 0x1, 0x0, 0x0, 0x200001d4}, 0x8840) bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=@base={0xa, 0x4, 0xfff, 0x7}, 0x50) bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[], 0x50) r4 = socket$alg(0x26, 0x5, 0x0) bind$alg(r4, &(0x7f00000002c0)={0x26, 'hash\x00', 0x0, 0x0, 'xcbc(twofish-generic)\x00'}, 0x58) r5 = bpf$MAP_CREATE(0x0, &(0x7f00000003c0)=@base={0x6, 0x4, 0xfff, 0x7, 0x9000}, 0x50) close(0x3) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000001c0)={0x1, 0x3, &(0x7f00000004c0)=ANY=[@ANYBLOB="181000000300000000007b2aa4f80a675d5d000000000000f8bef4b8cd0c1434cac65b85f3df5154589cc0d7d1be07fd1384d1fa05e984cc1a8cfb2939279d81bd6baca87f153c304562cb6501ab163a58b1425f91f2b2537fe53ff5adb9ab4e0a602dfff722dc1b927a4c06ca36d7ddac9f14b973ee0ead479b6a4211556cc078613875d706000000000000b3ccf10944"], 0x0, 0x0, 0x0, 0x0, 0x41000}, 0x94) bpf$PROG_LOAD(0x5, &(0x7f0000000580)={0x11, 0xd, &(0x7f00000002c0)=ANY=[@ANYBLOB="18000000000000000000", @ANYRES32, @ANYBLOB], 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r6 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0x15, &(0x7f0000000280)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa20000000000000702", @ANYRES32=r5, @ANYBLOB], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_GET_PROG_INFO(0xa, &(0x7f00000021c0)={r6, 0x0, 0x0}, 0x10) r7 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r7, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000002c0)=@newlink={0x30, 0x10, 0x801, 0x0, 0x0, {}, [@IFLA_OPERSTATE={0x5, 0x10, 0x4}, @IFLA_GROUP={0x8}]}, 0x30}}, 0x0) r8 = socket$inet_tcp(0x2, 0x1, 0x0) r9 = socket$nl_xfrm(0x10, 0x3, 0x6) socket$key(0xf, 0x3, 0x2) sendmsg$nl_xfrm(r9, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000980)=@newsa={0x1a0, 0x10, 0x1, 0x0, 0x0, {{@in6=@private2, @in6=@private2, 0x0, 0xecdf, 0x0, 0x3}, {@in=@broadcast, 0x0, 0x32}, @in=@rand_addr=0x640100fe, {0x0, 0x0, 0x1, 0x0, 0x0, 0xfffffffffffffffc}, {0x0, 0x1, 0x80000000}, {0x0, 0x0, 0x2}, 0x0, 0x0, 0x2, 0x0, 0x73, 0x4c}, [@algo_auth_trunc={0x4c, 0x14, {{'hmac(sha256)\x00'}, 0x0, 0x80}}, @algo_crypt={0x48, 0x2, {{'cbc(serpent)\x00'}}}, @encap={0x1c, 0x4, {0x2, 0x4e24, 0x4e23, @in=@rand_addr=0x64010100}}]}, 0x1a0}}, 0x0) ioctl$sock_SIOCGIFINDEX(r8, 0x8933, &(0x7f0000000180)={'syz_tun\x00', 0x0}) r11 = bpf$PROG_LOAD(0x5, &(0x7f00000002c0)={0x6, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x40f00, 0x0, '\x00', 0x0, @fallback=0x2, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_LINK_CREATE_XDP(0x1c, &(0x7f0000000000)={r11, r10, 0x25, 0x0, @void}, 0x10) socket$inet_smc(0x2b, 0x1, 0x0) 2m41.363629287s ago: executing program 0 (id=1758): openat$ppp(0xffffffffffffff9c, 0x0, 0x0, 0x0) r0 = openat$tun(0xffffffffffffff9c, &(0x7f00000004c0), 0x40180, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x7101}) r1 = openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0) ioctl$TUNSETIFF(r1, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x7101}) r2 = socket$unix(0x1, 0x1, 0x0) ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) r4 = socket(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r4, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000300)=@newqdisc={0x2c, 0x24, 0xf0b, 0x70bd26, 0x0, {0x0, 0x0, 0x0, r3, {0x0, 0xffff}, {0xfff7, 0xffff}}, [@TCA_EGRESS_BLOCK={0x8, 0xe, 0x5}]}, 0x2c}}, 0x20000000) r5 = openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0xa8442, 0x0) ioctl$TUNSETIFF(r5, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x7101}) ioctl$TUNSETLINK(r5, 0x400454cd, 0x6) r6 = socket$netlink(0x10, 0x3, 0x14) sendmsg$RDMA_NLDEV_CMD_NEWLINK(r6, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000001200)={&(0x7f0000001080)={0x38, 0x1403, 0x1, 0x0, 0x0, "", [{{0x9, 0x2, 'syz2\x00'}, {0x8, 0x41, 'siw\x00'}, {0x14, 0x33, 'syzkaller0\x00'}}]}, 0x38}, 0x1, 0x0, 0x0, 0x5}, 0x100) r7 = socket$unix(0x1, 0x1, 0x0) ioctl$sock_SIOCGIFINDEX(r7, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) r9 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r9, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000140)={&(0x7f00000001c0)=@gettclass={0x24, 0x2a, 0x129, 0x4, 0xfffffffd, {0x0, 0x0, 0x0, r8, {0x4, 0xd}, {}, {0x3, 0xfff1}}}, 0x24}}, 0x40004) socket$unix(0x1, 0x2, 0x0) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f00000012c0)={0x0, 0x0, 0x0}, 0x4000) recvmmsg(r9, &(0x7f00000056c0)=[{{0x0, 0x0, &(0x7f0000004f40)=[{&(0x7f0000001a00)=""/4096, 0x1000}, {&(0x7f0000005780)=""/4096, 0x1000}, {&(0x7f0000003f40)=""/4080, 0xff0}], 0x3, 0x0, 0xfffffc5a}, 0xfff}, {{0x0, 0x0, 0x0}, 0x6}, {{0x0, 0x0, 0x0}, 0x7}], 0x3, 0x10022, 0x0) ioctl$F2FS_IOC_MOVE_RANGE(0xffffffffffffffff, 0xc020f509, &(0x7f0000000340)={r7, 0x4, 0x81}) bind$llc(r10, &(0x7f00000000c0)={0x1a, 0x206, 0x2, 0x8, 0x8, 0xff, @link_local={0x1, 0x80, 0xc2, 0x0, 0x0, 0x3}}, 0x10) r11 = openat$tun(0xffffffffffffff9c, &(0x7f0000000400), 0x0, 0x0) close(r11) r12 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r12, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) socketpair(0x0, 0x800, 0x0, 0x0) sendmsg$nl_route_sched(r12, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000580)={&(0x7f0000000180)=@newqdisc={0x48, 0x24, 0x4ee4e6a52ff56541, 0x1, 0x25dfdbfd, {0x0, 0x0, 0x0, r13, {0x0, 0xb}, {0xffff, 0xffff}, {0xfff2}}, [@qdisc_kind_options=@q_cbs={{0x8}, {0x1c, 0x2, @TCA_CBS_PARMS={0x18, 0x1, {0x0, '\x00', 0x80, 0x7fffffff, 0x8, 0x1}}}}]}, 0x48}, 0x1, 0x0, 0x0, 0x40088c1}, 0x4040840) sendmsg$nl_route_sched(r12, &(0x7f00000003c0)={0x0, 0x0, &(0x7f0000000500)={&(0x7f0000000080)=@newqdisc={0x34, 0x24, 0x4ee4e6a52ff56541, 0x70b926, 0x25dfdbff, {0x0, 0x0, 0x0, r13, {0x0, 0x8}, {0xc, 0xb}, {0x7, 0xffe0}}, [@qdisc_kind_options=@q_cake={{0x9}, {0x4}}]}, 0x34}, 0x1, 0x0, 0x0, 0x24008000}, 0x2000c080) 2m40.907144479s ago: executing program 0 (id=1764): r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000200)=@base={0xe, 0x4, 0x8, 0x7}, 0x50) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000002c0)={0xc, 0x14, &(0x7f0000000800)=@framed={{0x18, 0x0, 0x0, 0x0, 0x4, 0x0, 0x0, 0x0, 0xaa99}, [@ringbuf_output={{0x18, 0x5, 0x1, 0x0, r0}, {0x7, 0x0, 0xb, 0x8, 0x0, 0x0, 0x80000000}, {0x3, 0x3, 0x3, 0xa, 0x5}, {}, {}, {}, {}, {0x85, 0x0, 0x0, 0x15}}, @printk={@lx, {}, {}, {}, {}, {0x7, 0x0, 0xb, 0x3, 0x0, 0x0, 0x3837}}]}, &(0x7f0000000180)='GPL\x00', 0x0, 0x0, 0x0, 0x40f00, 0x0, '\x00', 0x0, @fallback=0x38, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000d80)={r1, 0x18000000000002a0, 0xe, 0x0, &(0x7f0000000040)="76ea090000000000029ba56a88ca", 0x0, 0x6400, 0x60000000, 0x0, 0x0, 0x0, 0x0}, 0x50) 2m40.509221285s ago: executing program 0 (id=1769): r0 = socket(0x10, 0x3, 0x0) r1 = socket$inet6_sctp(0xa, 0x5, 0x84) r2 = socket$inet_sctp(0x2, 0x1, 0x84) getsockopt$inet_sctp_SCTP_MAX_BURST(r2, 0x84, 0xd, &(0x7f0000000000)=@assoc_value={0x0}, &(0x7f0000000040)=0x8) setsockopt$inet_sctp6_SCTP_PEER_ADDR_PARAMS(r1, 0x84, 0x9, &(0x7f00000001c0)={r3, @in={{0x2, 0x0, @empty}}, 0x0, 0x0, 0xfffffffc, 0x0, 0xd4}, 0x9c) ioctl$XFS_IOC_PATH_TO_FSHANDLE(r0, 0xc0385868, &(0x7f00000002c0)={0xffffffffffffffff, &(0x7f0000000100)='\'&+(\x00', 0x200180, &(0x7f0000000140)={@_ha_fsid={[0x3, 0x8]}, {0xd7d9, 0xfffe, 0x8, 0x8000000000000000}}, 0xb4, &(0x7f0000000180)={@_ha_fsid}, &(0x7f0000000280)=0x5}) setsockopt$packet_int(r4, 0x107, 0x9, &(0x7f0000000300)=0x1, 0x4) getsockopt$inet_sctp_SCTP_DEFAULT_PRINFO(r0, 0x84, 0x72, &(0x7f0000000080)={r3, 0x4, 0x30}, &(0x7f00000000c0)=0xc) bpf$MAP_CREATE(0x0, &(0x7f0000000840)=ANY=[@ANYBLOB="230000000800000002000000ffff000005"], 0x48) socket$nl_route(0x10, 0x3, 0x0) r5 = socket$inet_smc(0x2b, 0x1, 0x0) connect$inet(r5, &(0x7f0000000000)={0x2, 0x4001, @remote}, 0x10) getsockname$packet(r4, &(0x7f0000000380), &(0x7f00000003c0)=0x14) r6 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r6, &(0x7f0000000640)={0x0, 0x0, &(0x7f0000001ac0)={&(0x7f0000000340)={0x14, 0x27, 0x1, 0x70bd29, 0x25dfdbff, {0x6}}, 0x14}}, 0x0) r7 = bpf$MAP_CREATE(0x0, &(0x7f0000000000)=@base={0xa, 0xc, 0x4, 0x2, 0x0, 0x1}, 0x48) bpf$MAP_UPDATE_ELEM(0x2, &(0x7f00000007c0)={r7, &(0x7f0000000680), &(0x7f0000000740), 0x2}, 0x20) r8 = socket$kcm(0x2, 0x3, 0x84) sendmsg$inet(r8, &(0x7f0000001000)={&(0x7f0000000000)={0x2, 0x4e23, @multicast1}, 0x10, 0x0, 0x0, &(0x7f0000000040)=[@ip_pktinfo={{0x1c, 0x0, 0x8, {0x0, @dev={0xac, 0x14, 0x14, 0x2a}, @dev={0xac, 0x14, 0x14, 0x40}}}}], 0x20}, 0x0) sendmmsg(r0, &(0x7f0000000000), 0x4000000000001f2, 0xfc) 2m33.757823972s ago: executing program 4 (id=1821): r0 = socket$netlink(0x10, 0x3, 0x0) r1 = socket$inet_udp(0x2, 0x2, 0x0) socket$inet_sctp(0x2, 0x1, 0x84) bpf$BPF_BTF_LOAD(0x12, 0x0, 0x0) bpf$PROG_LOAD(0x5, 0x0, 0x0) r2 = bpf$MAP_CREATE(0x0, &(0x7f00000006c0)=ANY=[@ANYBLOB="170000000000000004000000ff"], 0x50) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000a40)={0x3, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r2], 0x0}, 0x94) bpf$PROG_LOAD_XDP(0x5, &(0x7f00000003c0)={0x6, 0x5, &(0x7f0000000100)=ANY=[@ANYBLOB="180000000000000000000000000000001850000000000020000000000000000095"], &(0x7f0000000000)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0xfffffff0, 0x0, 0x0, 0x0, &(0x7f0000000080)}, 0x9a) bind$inet(r1, &(0x7f00000001c0)={0x2, 0x0, @local}, 0x16) connect$inet(r1, &(0x7f0000000000)={0x2, 0x0, @multicast2}, 0x10) socket$nl_netfilter(0x10, 0x3, 0xc) setsockopt$inet_IP_XFRM_POLICY(r1, 0x0, 0x11, &(0x7f00000002c0)={{{@in6=@mcast1, @in=@multicast2, 0x0, 0x0, 0x4e24, 0x0, 0x2}, {0x200000010000, 0x3, 0x1, 0x0, 0xfffffffffffffffc, 0x0, 0x0, 0x9}, {0x0, 0x5, 0xfffffffffffffff8, 0x8}, 0x0, 0x0, 0x1}, {{@in=@empty, 0x2, 0x6c}, 0x2, @in=@empty, 0x0, 0x5, 0x0, 0xb7}}, 0xe8) r3 = socket$nl_route(0x10, 0x3, 0x0) r4 = socket$inet6_udp(0xa, 0x2, 0x0) ioctl$sock_SIOCGIFINDEX(r4, 0x8933, &(0x7f0000000040)={'lo\x00', 0x0}) sendmsg$nl_route_sched(r3, &(0x7f00000012c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000080)=@newqdisc={0x48, 0x24, 0x4ee4e6a52ff56541, 0x0, 0x0, {0x0, 0x0, 0x0, r5, {0x0, 0x4}, {0xffff, 0xffff}}, [@qdisc_kind_options=@q_prio={{0x9}, {0x18, 0x2, {0xf, "0000000000000000000100000e00"}}}]}, 0x48}, 0x1, 0x0, 0x0, 0x2000000}, 0x0) syz_emit_ethernet(0x22, &(0x7f00000000c0)=ANY=[@ANYBLOB="5ad2a94d55"], 0x0) getsockopt$inet6_tcp_int(0xffffffffffffffff, 0x6, 0x19, 0x0, &(0x7f00000000c0)) sendmmsg$inet(r3, &(0x7f0000005200)=[{{0x0, 0x4b, &(0x7f0000000000), 0x1}}], 0x1, 0x0) sendmmsg(r1, &(0x7f0000007fc0), 0x800001d, 0x0) sendmsg$netlink(r0, &(0x7f0000000740)={0x0, 0x0, &(0x7f00000002c0)=[{&(0x7f0000000040)={0x20, 0x11, 0x1, 0x0, 0x25dfdbff, "", [@nested={0x10, 0x0, 0x0, 0x0, [@typed={0xb, 0x0, 0x0, 0x0, @binary="56ccabd869c203"}]}]}, 0x20}], 0x1, 0x0, 0x0, 0xc010}, 0x40080) 2m32.86503842s ago: executing program 4 (id=1828): sendmsg$nl_route(0xffffffffffffffff, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000480)=ANY=[], 0x18}}, 0x20004000) setsockopt$kcm_KCM_RECV_DISABLE(0xffffffffffffffff, 0x119, 0x1, 0x0, 0x0) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000180)=@gettaction={0x50, 0x32, 0x20, 0x70bd25, 0x25dfdbfe, {}, [@action_gd=@TCA_ACT_TAB={0x1c, 0x1, [{0xc, 0x5, 0x0, 0x0, @TCA_ACT_INDEX={0x8, 0x3, 0xf}}, {0xc, 0xa, 0x0, 0x0, @TCA_ACT_KIND={0xfffffffffffffeb9, 0x1, 'ife\x00'}}, {0x0, 0x3, 0x0, 0x0, @TCA_ACT_INDEX={0x0, 0x3, 0x5}}, {0x0, 0x1a, 0x0, 0x0, @TCA_ACT_KIND={0x0, 0x1, 'ipt\x00'}}]}, @action_gd=@TCA_ACT_TAB={0x20, 0x1, [{0x10, 0xe, 0x0, 0x0, @TCA_ACT_KIND={0xa, 0x1, 'pedit\x00'}}, {0xc, 0x0, 0x0, 0x0, @TCA_ACT_INDEX={0x8, 0x3, 0x40}}]}]}, 0x50}, 0x1, 0x0, 0x0, 0x40000}, 0x4048840) (async) r0 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r0, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000000)=ANY=[@ANYBLOB="1c0000003a004dcefaff070004000000010000000800ecff04"], 0x1c}, 0x1, 0x0, 0x0, 0x400c080}, 0x4008094) (async) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000100)=ANY=[@ANYBLOB="4800000010000d0428bd7000fcdbff2500008000", @ANYRES32=0x0, @ANYBLOB="1000000000000000280012800b0001006272696467650000180002"], 0x48}, 0x1, 0x0, 0x0, 0x10}, 0x0) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000100)=ANY=[@ANYBLOB="500000001000010425bbe5ad600027842cf52300", @ANYRES32=0x0, @ANYBLOB="0300000000000000280012800a00010076786c616e00"], 0x50}, 0x1, 0x0, 0x0, 0x13d33d22cca65c15}, 0x4000840) r1 = socket$netlink(0x10, 0x3, 0x0) sendmmsg(r1, &(0x7f00000002c0), 0x40000000000009f, 0x0) 2m32.792555311s ago: executing program 4 (id=1831): r0 = socket$l2tp(0x2, 0x2, 0x73) bind$inet(r0, &(0x7f00000002c0)={0x2, 0x4e20, @empty}, 0x10) r1 = socket$nl_route(0x10, 0x3, 0x0) r2 = socket$inet6_udp(0xa, 0x2, 0x0) syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) socket$inet6_sctp(0xa, 0x5, 0x84) r3 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r3, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000240)=ANY=[@ANYBLOB="140000001000010000000000000000000500000a28000000000a030000000000000000000a00000708000240000000020900010073797a31000000002c000000030a010100000000000000000a0000070900010073797a31000000000900030073797a320000000014000000110001"], 0x7c}, 0x1, 0x0, 0x0, 0x4000}, 0x0) sendmsg$NFT_BATCH(r3, &(0x7f0000009b40)={0x0, 0x0, &(0x7f0000009b00)={&(0x7f0000001400)={{0x14, 0x10, 0x1, 0x0, 0x0, {0x5}}, [@NFT_MSG_NEWSET={0x3c, 0x9, 0xa, 0x401, 0x0, 0x0, {0xa, 0x0, 0x4}, [@NFTA_SET_TABLE={0x9, 0x1, 'syz1\x00'}, @NFTA_SET_KEY_LEN={0x8, 0x5, 0x1, 0x0, 0x2}, @NFTA_SET_NAME={0x9, 0x2, 'syz1\x00'}, @NFTA_SET_ID={0x8, 0xa, 0x1, 0x0, 0xfffffffc}]}, @NFT_MSG_NEWSETELEM={0x40, 0xc, 0xa, 0x101, 0x0, 0x0, {0xa, 0x0, 0x6}, [@NFTA_SET_ELEM_LIST_SET={0x9, 0x2, 'syz1\x00'}, @NFTA_SET_ELEM_LIST_TABLE={0x9, 0x1, 'syz1\x00'}, @NFTA_SET_ELEM_LIST_ELEMENTS={0x14, 0x3, 0x0, 0x1, [{0x10, 0x0, 0x0, 0x1, [@NFTA_SET_ELEM_KEY={0xc, 0x1, 0x0, 0x1, [@NFTA_DATA_VALUE={0x6, 0x1, "d103"}]}]}]}]}], {0x14, 0x11, 0x1, 0x0, 0x0, {0x1}}}, 0xa4}, 0x1, 0x0, 0x0, 0x4000850}, 0x40) r4 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_MSG_GETSETELEM(r4, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000140)=ANY=[@ANYBLOB="2c0000000d0a010300000000000000000a00000109000272f4dc61b80073797a31000000000966009f35cb0045a14f00010073797a"], 0x2c}, 0x1, 0x0, 0x0, 0x24000801}, 0x4008880) close(r3) r5 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r5, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000180)=ANY=[@ANYBLOB="140000001000010000000000000000000500000a28000000000a030000000000000000000a00000708000240000000020900010073797a31000000002c000000030a010100000000000000000a0000070900010073797a31000000000900030073797a320000000014000000110001"], 0x7c}, 0x1, 0x0, 0x0, 0x8080}, 0x20004450) recvfrom(r4, 0x0, 0x0, 0x40002062, 0x0, 0x0) ioctl$PPPIOCNEWUNIT(0xffffffffffffffff, 0xc004743e, &(0x7f00000000c0)) r6 = socket(0x40000000015, 0x5, 0x0) socket$inet6_mptcp(0xa, 0x1, 0x106) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000240)={0x0}}, 0x2000000) ioctl$sock_SIOCGIFINDEX_80211(r6, 0x8933, &(0x7f00000004c0)={'wlan1\x00', 0x0}) sendmsg$NL80211_CMD_GET_WOWLAN(r6, &(0x7f00000005c0)={&(0x7f0000000280)={0x10, 0x0, 0x0, 0x20000}, 0xc, &(0x7f0000000580)={&(0x7f0000000540)={0x1c, 0x0, 0x200, 0x70bd25, 0x25dfdbfd, {{}, {@void, @val={0x8, 0x3, r7}, @void}}, ["", "", "", "", "", "", "", "", "", ""]}, 0x1c}, 0x1, 0x0, 0x0, 0x8000}, 0x44895) pselect6(0x40, &(0x7f00000001c0)={0x0, 0x0, 0x3, 0xfffffffffffffffd}, 0x0, &(0x7f00000002c0)={0x3ff, 0x0, 0x0, 0x9, 0x0, 0x0, 0x7fffffff}, 0x0, 0x0) connect$inet(r0, &(0x7f0000000200)={0x2, 0x0, @local}, 0x10) sendmmsg$inet(r0, &(0x7f0000000e40)=[{{0x0, 0x0, 0x0, 0xffffffffffffffca}}, {{&(0x7f0000000100)={0x2, 0x4e20, @rand_addr=0x64010101}, 0x0, &(0x7f0000000880)=[{&(0x7f0000000300)="b0d0f84673b9b093899d90b347910c0b93f4b06b228d3075db447a7352e3aeae00e18659e4a8a5c6df94ce478d86bcf68b39e7c22d263de7e8e9c481c186b2e08dd38693dcbd3a77620b3a09c0f37269d64c9040f3ed4c5b63e7c3d88ec167f038d058e8a66f84d9cf28f1aab8d380df444f3dca93c04a63325b21fb6147ebd232e7cb90323b485ce4692235bca633a4fae24d861439abd4fa32b2019ab870f7e4339903f1f71507c1e0fb4e819e969fa671ee8f871e0c986868cb80c131f7d57bee37ce01ef7d85cf24a1a1bb4b447ec4556b68e65d979047c02c448c11a3c7f88563c159c60775762d6013de9c37fccd899cda5b1a986e"}, {&(0x7f0000000600)="c992b408271114164282c6b2d013ce29988f9eb6cc9eaa132b213760c1a0524e09e73787b5445e1944365a0ffa08ac31955038820fd6357395864d8ee03ac5aa471f1def42c9e29f9f472bbe0cf07c95c7c658283d9460942f690d90762767ec4ae059b1b4aeafc91fb58d1e651d06e17b369b4c356c785ec92ea39049dd001f7007d77fc9bd9a950004"}, {&(0x7f00000006c0)="1f51ccc199102ce1c77b31e7c2848a96032c3f5b9e207dd3d7ae50b1c8ee90e6ca9de435572e26d2c236a406709e65069c4390e8f21149119e792e09d8fd2993cdd1a44a884a955c5f71dc6096e3ca09723f78b9997e120d749798f98ae6a445e1e1e0a49c103c5c33b05d3521938041c8fbc927ffc163f893d3779d53658e1915ec8ee5fdd615393705417aa0be54d08d3078e2fae53c4554c2b670fc4c9b98947ac66fbad673bd06b79b2cf2b872c8a550333dcca66352f7f40dd8d0169226b91ed5fe7ca25fc5147c"}, {&(0x7f00000007c0)="d0ed3a586c1d16cac850d90e8da607e81aa11913b71a33dced6444a95e1bebace603faa9977a335fe5494c17f2d24371d46a6fdeac48adf7c3cd0a03a55cc32641ce4ab3e3d28e484cf1bab54d0f0da5fdfceda23e35004e1189541f67ef449e154af4ce8e7573f6be1e5ea31b1f4a76f478352e8eed49bc72f18d61dc44c1ca22605ceeeecc0591741cc7442b020f9cdf3fae7295743560cc220cefc11eac3336bb9e7894e27b5c0c082090cdb34e2d369b4122"}], 0x0, &(0x7f0000000940)=[@ip_pktinfo={{0x0, 0x0, 0x8, {0x0, @local, @dev={0xac, 0x14, 0x14, 0x44}}}}, @ip_tos_int={{0x0, 0x0, 0x1, 0x4}}, @ip_tos_int={{0x0, 0x0, 0x1, 0x8}}, @ip_retopts={{0x0, 0x0, 0x7, {[@lsrr={0x83, 0x0, 0x34, [@remote, @loopback, @broadcast, @remote, @empty, @loopback, @loopback]}, @ra, @timestamp_prespec={0x44, 0x0, 0xaa, 0x3, 0xc, [{@empty, 0xfffff8e5}, {@local}, {@initdev={0xac, 0x1e, 0x0, 0x0}, 0x35}]}]}}}, @ip_ttl={{0x0, 0x0, 0x2, 0x9}}]}}, {{&(0x7f0000000a00)={0x2, 0x4e20, @loopback}, 0x0, &(0x7f0000000b00)=[{&(0x7f0000000a40)="828a885991ffb4a43589f467cbe60697eda244a4eee44ebec648ab99e6708a86"}, {&(0x7f0000000a80)="781b357323548e891559ffc53803e986a4d1bd7a68fbaf0aac0e43f48ad702e44eee063e56364efef5203b3caf28f7dc48a92bed7fadbbaf6616be55e3427613c594277643dab2f11356dd9ff9bb4072e69bc31c863b5cc939a982dfcb5734d424ed933c3884b3ad3b5c0ea70083988c3afce5f4cac7252cf69aac51"}], 0x0, &(0x7f0000000b40)=[@ip_tos_int={{0x0, 0x0, 0x1, 0x2}}, @ip_retopts={{0x0, 0x0, 0x7, {[@timestamp_addr={0x44, 0x0, 0xec, 0x1, 0x0, [{@private=0xa010102, 0x80000000}, {@rand_addr=0x64010102, 0x8}]}, @ssrr={0x89, 0x0, 0xc8, [@multicast1, @loopback, @empty, @dev={0xac, 0x14, 0x14, 0x1d}, @initdev={0xac, 0x1e, 0x0, 0x0}, @local]}, @ra={0x94, 0x0, 0x1}, @cipso={0x86, 0x0, 0x3, [{0x6, 0x0, "0ab984855bda19f970"}, {0x7, 0x0, 'o#&m'}, {0x2, 0x0, "1b147e2bf874dc1ea62be45f75"}, {0x6, 0x0, 'e'}, {0x7, 0x0, "6503be446f971ed533"}]}, @noop]}}}, @ip_tos_u8={{0x0, 0x0, 0x1, 0xc3}}, @ip_tos_u8, @ip_retopts={{0x0, 0x0, 0x7, {[@ssrr={0x89, 0x0, 0x88, [@private=0xa010100]}, @ra, @end, @timestamp_prespec={0x44, 0x0, 0x4d, 0x3, 0x6, [{@rand_addr=0x64010100, 0x2}, {@dev={0xac, 0x14, 0x14, 0x17}, 0x4}, {@empty, 0x3}]}, @lsrr={0x83, 0x0, 0x4, [@empty, @multicast2, @local, @remote, @initdev={0xac, 0x1e, 0x1, 0x0}, @rand_addr=0x64010100, @local]}, @ra, @generic={0x88, 0x0, "5153a6b5c2696cdd4b9ed0eecd"}, @ra={0x94, 0x0, 0x1}]}}}]}}, {{&(0x7f0000000c80)={0x2, 0x4e22, @dev={0xac, 0x14, 0x14, 0x22}}, 0x0, &(0x7f0000000d40)=[{&(0x7f0000000cc0)="4b5f0f7d16c72d5c04b4923ef5f261a9dcd86149f2bd3a317c8552da754a6313d934e28e38a27a8bbeedf3fd13ff1080e4f854c2f5366bb1ab733af5d49c8646d391795f14dd2629309013f6f626cdbbcd8890ad6effbbe99b712dc9a667e7313a711bee6be05eff2d3f4e4b87781196"}], 0x0, &(0x7f0000000d80)=[@ip_tos_int={{0x0, 0x0, 0x1, 0x5}}, @ip_retopts, @ip_ttl={{0x0, 0x0, 0x2, 0xc}}, @ip_retopts={{0x0, 0x0, 0x7, {[@cipso={0x86, 0x0, 0x2, [{0x0, 0x0, "adcaa0ee36b46aa7"}, {0x5, 0x0, "a8e84f56cd764db39a1f5dde"}, {0x6, 0x0, "6d5057bcffb8c4671ca5ebfcc4"}, {0x6, 0x0, "fb427cbf9ab60d"}, {0x5, 0x0, 'L'}]}]}}}, @ip_ttl={{0x0, 0x0, 0x2, 0x8}}, @ip_tos_int={{0x0, 0x0, 0x1, 0x6}}]}}], 0x1, 0x24004010) setsockopt$inet_sctp6_SCTP_INITMSG(0xffffffffffffffff, 0x84, 0x2, &(0x7f0000000040)={0x3ad1, 0x200, 0x0, 0x6}, 0x8) r8 = socket$nl_generic(0x10, 0x3, 0x10) r9 = bpf$MAP_CREATE(0x0, &(0x7f00000014c0)=ANY=[@ANYRESHEX, @ANYBLOB="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", @ANYRES32=0x0, @ANYRESHEX=r1, @ANYRES8=r8, @ANYRESOCT=r2, @ANYRES32=r2, @ANYBLOB="f32d635d3c8e1ebc1daab862559e8f"], 0x48) bpf$MAP_UPDATE_BATCH(0x1a, &(0x7f0000000400)={0x0, 0x0, 0x0, 0x0, 0x0, r9}, 0x38) r10 = socket$packet(0x11, 0x2, 0x300) bind$packet(r10, 0x0, 0x0) 2m31.798658861s ago: executing program 4 (id=1840): socket$inet6_sctp(0xa, 0x1, 0x84) socket$inet6_tcp(0xa, 0x1, 0x0) socket$nl_route(0x10, 0x3, 0x0) r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x7101}) r1 = socket$nl_route(0x10, 0x3, 0x0) r2 = socket$unix(0x1, 0x1, 0x0) ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r1, &(0x7f0000000740)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000001c0)=@newqdisc={0x48, 0x24, 0x4ee4e6a52ff56541, 0x70bd2a, 0x25dfdbfe, {0x0, 0x0, 0x0, r3, {0x0, 0xfff1}, {0xffff, 0xffff}, {0x0, 0x10}}, [@qdisc_kind_options=@q_prio={{0x9}, {0x18, 0x2, {0x9}}}]}, 0x48}, 0x1, 0x0, 0x0, 0x40480c0}, 0x20040084) sendmsg$nl_route_sched(r1, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000140)={&(0x7f00000002c0)=@gettfilter={0x24, 0x2e, 0x12d, 0x70bd2c, 0x6, {0x0, 0x0, 0x0, r3, {0xfff3, 0xfffe}, {0xfff3, 0xfff1}, {0xd, 0x5}}}, 0x24}, 0x1, 0x0, 0x0, 0x4}, 0x4041880) r4 = socket$netlink(0x10, 0x3, 0xc) bind$netlink(r4, &(0x7f0000514ff4)={0x10, 0x0, 0x0, 0x2ffffffff}, 0xc) r5 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r5, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000300)={{0x14}, [], {0x14, 0x11, 0x1, 0x0, 0x0, {0x7}}}, 0x28}}, 0x0) 2m31.414437911s ago: executing program 4 (id=1844): clock_gettime(0x0, &(0x7f0000000000)) 2m31.22927992s ago: executing program 4 (id=1847): r0 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000380)={&(0x7f00000006c0)=@newsa={0x184, 0x1a, 0x1, 0xfffffffe, 0x100, {{@in=@initdev={0xac, 0x1e, 0x1, 0x0}, @in6=@private1={0xfc, 0x1, '\x00', 0x1}, 0x1, 0x717, 0x4e23, 0x5, 0xa, 0x0, 0x20, 0x3a}, {@in6=@mcast2, 0x4d4, 0x6c}, @in6=@private1={0xfc, 0x1, '\x00', 0x1}, {0xfe, 0x1000000000000192, 0x8, 0xfffffffffffffffc, 0x8251c, 0x5, 0xfffffffffffffffc, 0x4}, {0xffffffffffffffff, 0x0, 0x1f, 0xfffffffffffffffe}, {0xfffffffe, 0x3f9}, 0x7e, 0x0, 0x2, 0x1, 0x0, 0x66}, [@algo_comp={0x48, 0x3, {{'deflate\x00'}}}, @algo_aead={0x4c, 0x12, {{'ccm(blowfish-asm)\x00'}}}]}, 0x184}}, 0x20000844) r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000000)={0x3, 0xc, &(0x7f0000000740)=ANY=[@ANYBLOB="1800000000000000000000000000000085000000610000001801000020786c2500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b7030000110b0008850000006d00000095"], &(0x7f0000000500)='GPL\x00', 0x7, 0x0, 0x0, 0x0, 0x1, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r2 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_kcm_SIOCKCMCLONE(0xffffffffffffffff, 0x89e2, &(0x7f0000000200)={r0}) r4 = socket$nl_generic(0x10, 0x3, 0x10) r5 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000000), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r4, 0x8933, &(0x7f0000000040)={'wlan1\x00', 0x0}) r7 = openat$tun(0xffffffffffffff9c, &(0x7f0000000000), 0x40241, 0x0) r8 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r9 = syz_genetlink_get_family_id$netlbl_cipso(&(0x7f0000000480), r8) sendmsg$NLBL_CIPSOV4_C_ADD(r8, &(0x7f0000000000)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000600)=ANY=[@ANYBLOB="ac000000", @ANYRES16=r9, @ANYBLOB="0702000000000000000001000000840008803c00078008000600ce0003000800050030f8433308000500fda9a47d080006004100000008000600f0000000020006000300000008000600b40000001c00078008000500ef12443c000005002e164530080006005d00000014000780480005006db6d1210800050025590b6d1400078008000600870000000800050025bb6a230400048008000100030000000800020001"], 0xac}, 0x1, 0x0, 0x0, 0x80}, 0x0) ioctl$TUNSETIFF(r7, 0x400454ca, &(0x7f00000000c0)={'syzkaller1\x00', 0x6bf1c2d5adba8c32}) writev(r7, &(0x7f0000000280)=[{&(0x7f0000000200)="2e9b3d0007e03dd65193dfb6c575963f4305f0671271e31c2f8d", 0x1a}, {&(0x7f0000000240)="d26319afcf07e69edb08", 0xa}, {&(0x7f0000000300)="d9a0f0481ae7", 0x6}], 0x3) sendmsg$NL80211_CMD_JOIN_IBSS(r4, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000000580)={&(0x7f0000000180)={0x1c, r5, 0x101, 0x70bd28, 0x0, {{}, {@val={0x8, 0x3, r6}, @void}}}, 0x1c}, 0x1, 0x0, 0x0, 0xf040}, 0x20004800) socket$nl_generic(0x10, 0x3, 0x10) sendmsg$NL80211_CMD_CRIT_PROTOCOL_START(r3, &(0x7f0000000340)={&(0x7f0000000240)={0x10, 0x0, 0x0, 0x1000}, 0xc, &(0x7f0000000300)={&(0x7f0000000280)={0x70, r5, 0x910, 0x70bd27, 0x25dfdbfc, {{}, {@void, @val={0xc, 0x99, {0x8, 0x4a}}}}, [@NL80211_ATTR_MAX_CRIT_PROT_DURATION={0x6, 0xb4, 0x131f}, @NL80211_ATTR_CRIT_PROT_ID={0x6}, @NL80211_ATTR_CRIT_PROT_ID={0x6}, @NL80211_ATTR_MAX_CRIT_PROT_DURATION={0x6, 0xb4, 0xadc}, @NL80211_ATTR_CRIT_PROT_ID={0x6}, @NL80211_ATTR_CRIT_PROT_ID={0x6, 0xb3, 0x1}, @NL80211_ATTR_MAX_CRIT_PROT_DURATION={0x6, 0xb4, 0x5c6}, @NL80211_ATTR_CRIT_PROT_ID={0x6, 0xb3, 0x1}, @NL80211_ATTR_MAX_CRIT_PROT_DURATION={0x6, 0xb4, 0x1277}, @NL80211_ATTR_MAX_CRIT_PROT_DURATION={0x6, 0xb4, 0x87c}]}, 0x70}}, 0x64044080) sendmsg$nl_generic(r2, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000100)={0x1c, 0x27, 0x9, 0x70bd25, 0x25dfdbfd, {0x12}, [@typed={0x5, 0x1, 0x0, 0x0, @str='\x00'}]}, 0x1c}, 0x1, 0x0, 0x0, 0x1}, 0x4000080) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000180)={r1, 0x0, 0x36, 0x0, &(0x7f0000000140)="c1188e99b95d02ff4284860186dd8a2cd3818eeedc37a2c4c1480c309b3db488eb304bafbae18b852d7840ee363e02c019d905b4f1d7", 0x0, 0x2002, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0xfffffffd}, 0x50) r10 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r10, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000180)=@newlink={0x58, 0x10, 0x401, 0x0, 0x0, {0x0, 0x0, 0x0, 0x0, 0x3}, [@IFLA_LINKINFO={0x38, 0x12, 0x0, 0x1, @ip6gre={{0xb}, {0x28, 0x2, 0x0, 0x1, [@IFLA_GRE_ENCAP_FLAGS={0x6, 0xf, 0x80}, @IFLA_GRE_REMOTE={0x77, 0x7, @mcast1}, @IFLA_GRE_ENCAP_SPORT={0x6, 0x10, 0x4e21}]}}}]}, 0x58}}, 0x0) 2m25.503710574s ago: executing program 32 (id=1769): r0 = socket(0x10, 0x3, 0x0) r1 = socket$inet6_sctp(0xa, 0x5, 0x84) r2 = socket$inet_sctp(0x2, 0x1, 0x84) getsockopt$inet_sctp_SCTP_MAX_BURST(r2, 0x84, 0xd, &(0x7f0000000000)=@assoc_value={0x0}, &(0x7f0000000040)=0x8) setsockopt$inet_sctp6_SCTP_PEER_ADDR_PARAMS(r1, 0x84, 0x9, &(0x7f00000001c0)={r3, @in={{0x2, 0x0, @empty}}, 0x0, 0x0, 0xfffffffc, 0x0, 0xd4}, 0x9c) ioctl$XFS_IOC_PATH_TO_FSHANDLE(r0, 0xc0385868, &(0x7f00000002c0)={0xffffffffffffffff, &(0x7f0000000100)='\'&+(\x00', 0x200180, &(0x7f0000000140)={@_ha_fsid={[0x3, 0x8]}, {0xd7d9, 0xfffe, 0x8, 0x8000000000000000}}, 0xb4, &(0x7f0000000180)={@_ha_fsid}, &(0x7f0000000280)=0x5}) setsockopt$packet_int(r4, 0x107, 0x9, &(0x7f0000000300)=0x1, 0x4) getsockopt$inet_sctp_SCTP_DEFAULT_PRINFO(r0, 0x84, 0x72, &(0x7f0000000080)={r3, 0x4, 0x30}, &(0x7f00000000c0)=0xc) bpf$MAP_CREATE(0x0, &(0x7f0000000840)=ANY=[@ANYBLOB="230000000800000002000000ffff000005"], 0x48) socket$nl_route(0x10, 0x3, 0x0) r5 = socket$inet_smc(0x2b, 0x1, 0x0) connect$inet(r5, &(0x7f0000000000)={0x2, 0x4001, @remote}, 0x10) getsockname$packet(r4, &(0x7f0000000380), &(0x7f00000003c0)=0x14) r6 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r6, &(0x7f0000000640)={0x0, 0x0, &(0x7f0000001ac0)={&(0x7f0000000340)={0x14, 0x27, 0x1, 0x70bd29, 0x25dfdbff, {0x6}}, 0x14}}, 0x0) r7 = bpf$MAP_CREATE(0x0, &(0x7f0000000000)=@base={0xa, 0xc, 0x4, 0x2, 0x0, 0x1}, 0x48) bpf$MAP_UPDATE_ELEM(0x2, &(0x7f00000007c0)={r7, &(0x7f0000000680), &(0x7f0000000740), 0x2}, 0x20) r8 = socket$kcm(0x2, 0x3, 0x84) sendmsg$inet(r8, &(0x7f0000001000)={&(0x7f0000000000)={0x2, 0x4e23, @multicast1}, 0x10, 0x0, 0x0, &(0x7f0000000040)=[@ip_pktinfo={{0x1c, 0x0, 0x8, {0x0, @dev={0xac, 0x14, 0x14, 0x2a}, @dev={0xac, 0x14, 0x14, 0x40}}}}], 0x20}, 0x0) sendmmsg(r0, &(0x7f0000000000), 0x4000000000001f2, 0xfc) 2m16.141945806s ago: executing program 33 (id=1847): r0 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000380)={&(0x7f00000006c0)=@newsa={0x184, 0x1a, 0x1, 0xfffffffe, 0x100, {{@in=@initdev={0xac, 0x1e, 0x1, 0x0}, @in6=@private1={0xfc, 0x1, '\x00', 0x1}, 0x1, 0x717, 0x4e23, 0x5, 0xa, 0x0, 0x20, 0x3a}, {@in6=@mcast2, 0x4d4, 0x6c}, @in6=@private1={0xfc, 0x1, '\x00', 0x1}, {0xfe, 0x1000000000000192, 0x8, 0xfffffffffffffffc, 0x8251c, 0x5, 0xfffffffffffffffc, 0x4}, {0xffffffffffffffff, 0x0, 0x1f, 0xfffffffffffffffe}, {0xfffffffe, 0x3f9}, 0x7e, 0x0, 0x2, 0x1, 0x0, 0x66}, [@algo_comp={0x48, 0x3, {{'deflate\x00'}}}, @algo_aead={0x4c, 0x12, {{'ccm(blowfish-asm)\x00'}}}]}, 0x184}}, 0x20000844) r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000000)={0x3, 0xc, &(0x7f0000000740)=ANY=[@ANYBLOB="1800000000000000000000000000000085000000610000001801000020786c2500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b7030000110b0008850000006d00000095"], &(0x7f0000000500)='GPL\x00', 0x7, 0x0, 0x0, 0x0, 0x1, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r2 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_kcm_SIOCKCMCLONE(0xffffffffffffffff, 0x89e2, &(0x7f0000000200)={r0}) r4 = socket$nl_generic(0x10, 0x3, 0x10) r5 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000000), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r4, 0x8933, &(0x7f0000000040)={'wlan1\x00', 0x0}) r7 = openat$tun(0xffffffffffffff9c, &(0x7f0000000000), 0x40241, 0x0) r8 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r9 = syz_genetlink_get_family_id$netlbl_cipso(&(0x7f0000000480), r8) sendmsg$NLBL_CIPSOV4_C_ADD(r8, &(0x7f0000000000)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000600)=ANY=[@ANYBLOB="ac000000", @ANYRES16=r9, @ANYBLOB="0702000000000000000001000000840008803c00078008000600ce0003000800050030f8433308000500fda9a47d080006004100000008000600f0000000020006000300000008000600b40000001c00078008000500ef12443c000005002e164530080006005d00000014000780480005006db6d1210800050025590b6d1400078008000600870000000800050025bb6a230400048008000100030000000800020001"], 0xac}, 0x1, 0x0, 0x0, 0x80}, 0x0) ioctl$TUNSETIFF(r7, 0x400454ca, &(0x7f00000000c0)={'syzkaller1\x00', 0x6bf1c2d5adba8c32}) writev(r7, &(0x7f0000000280)=[{&(0x7f0000000200)="2e9b3d0007e03dd65193dfb6c575963f4305f0671271e31c2f8d", 0x1a}, {&(0x7f0000000240)="d26319afcf07e69edb08", 0xa}, {&(0x7f0000000300)="d9a0f0481ae7", 0x6}], 0x3) sendmsg$NL80211_CMD_JOIN_IBSS(r4, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000000580)={&(0x7f0000000180)={0x1c, r5, 0x101, 0x70bd28, 0x0, {{}, {@val={0x8, 0x3, r6}, @void}}}, 0x1c}, 0x1, 0x0, 0x0, 0xf040}, 0x20004800) socket$nl_generic(0x10, 0x3, 0x10) sendmsg$NL80211_CMD_CRIT_PROTOCOL_START(r3, &(0x7f0000000340)={&(0x7f0000000240)={0x10, 0x0, 0x0, 0x1000}, 0xc, &(0x7f0000000300)={&(0x7f0000000280)={0x70, r5, 0x910, 0x70bd27, 0x25dfdbfc, {{}, {@void, @val={0xc, 0x99, {0x8, 0x4a}}}}, [@NL80211_ATTR_MAX_CRIT_PROT_DURATION={0x6, 0xb4, 0x131f}, @NL80211_ATTR_CRIT_PROT_ID={0x6}, @NL80211_ATTR_CRIT_PROT_ID={0x6}, @NL80211_ATTR_MAX_CRIT_PROT_DURATION={0x6, 0xb4, 0xadc}, @NL80211_ATTR_CRIT_PROT_ID={0x6}, @NL80211_ATTR_CRIT_PROT_ID={0x6, 0xb3, 0x1}, @NL80211_ATTR_MAX_CRIT_PROT_DURATION={0x6, 0xb4, 0x5c6}, @NL80211_ATTR_CRIT_PROT_ID={0x6, 0xb3, 0x1}, @NL80211_ATTR_MAX_CRIT_PROT_DURATION={0x6, 0xb4, 0x1277}, @NL80211_ATTR_MAX_CRIT_PROT_DURATION={0x6, 0xb4, 0x87c}]}, 0x70}}, 0x64044080) sendmsg$nl_generic(r2, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000100)={0x1c, 0x27, 0x9, 0x70bd25, 0x25dfdbfd, {0x12}, [@typed={0x5, 0x1, 0x0, 0x0, @str='\x00'}]}, 0x1c}, 0x1, 0x0, 0x0, 0x1}, 0x4000080) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000180)={r1, 0x0, 0x36, 0x0, &(0x7f0000000140)="c1188e99b95d02ff4284860186dd8a2cd3818eeedc37a2c4c1480c309b3db488eb304bafbae18b852d7840ee363e02c019d905b4f1d7", 0x0, 0x2002, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0xfffffffd}, 0x50) r10 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r10, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000180)=@newlink={0x58, 0x10, 0x401, 0x0, 0x0, {0x0, 0x0, 0x0, 0x0, 0x3}, [@IFLA_LINKINFO={0x38, 0x12, 0x0, 0x1, @ip6gre={{0xb}, {0x28, 0x2, 0x0, 0x1, [@IFLA_GRE_ENCAP_FLAGS={0x6, 0xf, 0x80}, @IFLA_GRE_REMOTE={0x77, 0x7, @mcast1}, @IFLA_GRE_ENCAP_SPORT={0x6, 0x10, 0x4e21}]}}}]}, 0x58}}, 0x0) 56.326365589s ago: executing program 2 (id=2548): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) (async) r1 = socket$inet(0xa, 0x801, 0x84) connect$inet(r1, &(0x7f0000004cc0)={0x2, 0x0, @remote={0xac, 0x14, 0xffffffffffffffff}}, 0x10) listen(r1, 0x8) r2 = accept4(r1, 0x0, 0x0, 0x0) sendto$inet(r2, &(0x7f00000002c0)="cc", 0x1, 0x0, 0x0, 0x0) (async) setsockopt$inet_sctp6_SCTP_DEFAULT_SNDINFO(r2, 0x84, 0x22, &(0x7f0000000580)={0x2, 0x0, 0x6, 0xffffffff}, 0x10) setsockopt$inet_sctp6_SCTP_STREAM_SCHEDULER(r2, 0x84, 0x7b, &(0x7f00000000c0)={0x0, 0x2}, 0x8) (async) sendmsg$NFT_BATCH(r2, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000780)=ANY=[], 0x118}}, 0x0) (async) r3 = syz_genetlink_get_family_id$tipc2(&(0x7f00000002c0), 0xffffffffffffffff) sendmsg$TIPC_NL_KEY_SET(r2, &(0x7f0000000700)={&(0x7f0000000280)={0x10, 0x0, 0x0, 0x1000}, 0xc, &(0x7f0000000680)={&(0x7f00000004c0)={0x190, r3, 0x200, 0x70bd28, 0x25dfdbfb, {}, [@TIPC_NLA_MEDIA={0x4c, 0x5, 0x0, 0x1, [@TIPC_NLA_MEDIA_NAME={0x8, 0x1, 'eth\x00'}, @TIPC_NLA_MEDIA_NAME={0x8, 0x1, 'eth\x00'}, @TIPC_NLA_MEDIA_NAME={0x8, 0x1, 'eth\x00'}, @TIPC_NLA_MEDIA_NAME={0x7, 0x1, 'ib\x00'}, @TIPC_NLA_MEDIA_PROP={0xc, 0x2, 0x0, 0x1, [@TIPC_NLA_PROP_WIN={0x8, 0x3, 0x5}]}, @TIPC_NLA_MEDIA_NAME={0x8, 0x1, 'eth\x00'}, @TIPC_NLA_MEDIA_PROP={0xc, 0x2, 0x0, 0x1, [@TIPC_NLA_PROP_TOL={0x8, 0x2, 0x8}]}, @TIPC_NLA_MEDIA_NAME={0x8, 0x1, 'eth\x00'}]}, @TIPC_NLA_NODE={0xd8, 0x6, 0x0, 0x1, [@TIPC_NLA_NODE_KEY_MASTER={0x4}, @TIPC_NLA_NODE_ADDR={0x8, 0x1, 0xba5}, @TIPC_NLA_NODE_ID={0x19, 0x3, "295e0336675764721243a15c0c65112df63a0343b7"}, @TIPC_NLA_NODE_UP={0x4}, @TIPC_NLA_NODE_ID={0x5a, 0x3, "855ae047445fe575190a383fee01a8eee066ab54686c54bfd304c29e1761e0c5e701f7d45e55123742d75dddb0df36941f4714a6270d33e372f4483ed2f0cc3849b47330664c7a03d4fce1f9e77c14de82ead28b5398"}, @TIPC_NLA_NODE_REKEYING={0x8, 0x6, 0x101}, @TIPC_NLA_NODE_KEY={0x41, 0x4, {'gcm(aes)\x00', 0x19, "4a838b1243d76064892ad3649f6f58e82848d3459757283064"}}]}, @TIPC_NLA_MON={0x14, 0x9, 0x0, 0x1, [@TIPC_NLA_MON_ACTIVATION_THRESHOLD={0x8, 0x1, 0x8}, @TIPC_NLA_MON_REF={0x8, 0x2, 0x9}]}, @TIPC_NLA_NET={0x28, 0x7, 0x0, 0x1, [@TIPC_NLA_NET_NODEID={0xc, 0x3, 0xe2}, @TIPC_NLA_NET_NODEID={0xc}, @TIPC_NLA_NET_NODEID={0xc, 0x3, 0x7}]}, @TIPC_NLA_NET={0x1c, 0x7, 0x0, 0x1, [@TIPC_NLA_NET_NODEID={0xc, 0x3, 0xd0f2}, @TIPC_NLA_NET_NODEID_W1={0xc, 0x4, 0x100}]}]}, 0x190}, 0x1, 0x0, 0x0, 0x801}, 0x4480) sendmsg$NFNL_MSG_COMPAT_GET(r0, &(0x7f0000000480)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000000)=ANY=[@ANYBLOB="2c000000000b050000000000000000000200000908000100753332000800024000000001080003"], 0x2c}, 0x1, 0x0, 0x0, 0x20004045}, 0xc0) (async) ioctl$sock_SIOCETHTOOL(0xffffffffffffffff, 0x8946, &(0x7f00000006c0)={'pim6reg0\x00', &(0x7f0000000000)=@ethtool_stats={0x11}}) ioctl$XFS_IOC_ATTRLIST_BY_HANDLE(r0, 0x4058587a, &(0x7f00000001c0)={{r0, &(0x7f0000000080)=']#$\'/]\x00', 0x418042, &(0x7f00000000c0)={@align=0x7, {0x3, 0x10, 0x2, 0x3}}, 0x3, &(0x7f0000000100), &(0x7f0000000140)=0x2}, {[0x80000000, 0x180, 0xac, 0xbd4a]}, 0x6, 0x10, &(0x7f0000000180)=""/16}) openat$cgroup_ro(r4, &(0x7f0000000240)='freezer.parent_freezing\x00', 0x0, 0x0) 56.186630039s ago: executing program 6 (id=2551): socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000380)={0xffffffffffffffff, 0xffffffffffffffff}) setsockopt$SO_ATTACH_FILTER(r0, 0x1, 0x1a, &(0x7f0000000ac0)={0x2, &(0x7f0000000a80)=[{0x40}, {0x16, 0x0, 0x6, 0x1}]}, 0x10) r1 = socket$inet6_tcp(0xa, 0x1, 0x0) bind$inet6(r1, &(0x7f0000000080)={0xa, 0x2, 0x200, @loopback, 0x7}, 0x1c) setsockopt$inet6_tcp_int(r1, 0x6, 0x2000000000000022, &(0x7f0000000200)=0x1, 0x4) sendto$inet6(r1, &(0x7f0000000380)="4e81", 0x2, 0x24000045, &(0x7f00000001c0)={0xa, 0x2, 0xffff, @loopback, 0x9}, 0x1c) setsockopt$inet6_tcp_TCP_CONGESTION(r1, 0x6, 0xd, &(0x7f0000000000)='highspeed', 0x9) r2 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r3 = syz_genetlink_get_family_id$nfc(&(0x7f0000000100), r2) sendmsg$NFC_CMD_START_POLL(r2, &(0x7f0000000440)={0x0, 0x0, &(0x7f0000000480)={&(0x7f00000004c0)=ANY=[@ANYBLOB="14000000", @ANYRES16=r3, @ANYBLOB="01c4408288ec9fcdb70007"], 0x14}}, 0x0) shutdown(r1, 0x1) epoll_ctl$EPOLL_CTL_ADD(0xffffffffffffffff, 0x1, r1, &(0x7f0000000000)={0x2}) 56.090206988s ago: executing program 2 (id=2553): r0 = bpf$PROG_LOAD(0x5, &(0x7f0000000180)={0x3, 0x3, &(0x7f0000000240)=ANY=[@ANYRES64], &(0x7f0000000100)='syzkaller\x00', 0x0, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, @sched_cls=0x37, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x6}, 0x94) r1 = bpf$BPF_LINK_CREATE(0x1c, &(0x7f0000000000)={r0, r0, 0x2f, 0x0, @void}, 0x10) r2 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_MSG_GETOBJ(r2, &(0x7f0000000200)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f00000000c0)={0x14, 0x13, 0xa, 0x101, 0x0, 0x0, {0x1, 0x0, 0x5}}, 0x14}, 0x1, 0x0, 0x0, 0x4040081}, 0x4004) bpf$BPF_LINK_UPDATE(0x1d, &(0x7f00000017c0)={r1, r0, 0x4, r0}, 0x10) 55.972366858s ago: executing program 6 (id=2556): bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000040)={0x11, 0x15, &(0x7f0000000200)=ANY=[@ANYBLOB="18000000000000000a00000000000500180100002020692500000000002020206b1a00fe00000000bfa100000000000007010000f8fffdffb702000008000000b703000000000000650000000600000085100000010000009500000000000000180100002020782500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000000600000095"], &(0x7f0000000100)='GPL\x00', 0xf}, 0x94) 55.921019839s ago: executing program 2 (id=2557): bpf$PROG_LOAD(0x5, &(0x7f0000000200)={0x6, 0xc, &(0x7f0000000140)=ANY=[@ANYBLOB="18020000040000000000000000000000850000002c000000180100002020732500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000007500000095"], 0x0, 0x5, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, @xdp, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r0 = bpf$PROG_LOAD(0x5, &(0x7f0000000240)={0x6, 0xc, &(0x7f0000000140)=ANY=[@ANYBLOB="18020000fcffffff00000000000000008500000036"], &(0x7f00000001c0)='GPL\x00', 0x7, 0x0, 0x0, 0x0, 0x1, '\x00', 0x0, @xdp, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000000)={r0, 0x5, 0xe, 0x0, &(0x7f0000000300)="259a00f2710010000000000000a8", 0x0, 0xd11, 0x2a0, 0x0, 0x0, 0x0, 0x0}, 0x50) r1 = syz_init_net_socket$bt_l2cap(0x1f, 0x5, 0x0) bind$bt_l2cap(r1, &(0x7f0000000000)={0x1f, 0x0, @any, 0x0, 0x1}, 0xe) setsockopt$bt_BT_RCVMTU(r1, 0x112, 0xd, 0x0, 0x0) bpf$PROG_LOAD(0x5, &(0x7f0000000440)={0x4, 0x6, &(0x7f0000000000)=@framed={{0xffffffb4, 0x8, 0x0, 0x0, 0x0, 0x73, 0x11, 0x3b}, [@func={0x85, 0x0, 0x1, 0x0, 0x2}, @call={0xb7}, @exit={0x95, 0x0, 0xc2}], {0x95, 0x0, 0x1200}}, &(0x7f0000000080)='GPL\x00', 0x4, 0xc3, &(0x7f000000cf3d)=""/195}, 0x70) 55.768564515s ago: executing program 6 (id=2558): syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) (async) r0 = socket(0x10, 0x3, 0x0) setsockopt$netlink_NETLINK_TX_RING(r0, 0x10e, 0xc, &(0x7f0000000180)={0x1, 0x5, 0xfffffffb}, 0x10) write(r0, &(0x7f0000000000)="240000001a005f0214f9f407000901000000000000000005000000000800040001000000", 0x24) (async) ioctl$ifreq_SIOCGIFINDEX_team(0xffffffffffffffff, 0x8933, 0x0) (async, rerun: 32) r1 = bpf$MAP_CREATE(0x0, 0x0, 0x48) (async, rerun: 32) r2 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r2, &(0x7f00000029c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000100)={0x20, 0x10, 0x701, 0x0, 0x0, {0xa}, [@typed={0xc, 0x2, 0x0, 0x0, @str='nl80211\x00'}]}, 0x20}}, 0x0) (async) socket$alg(0x26, 0x5, 0x0) (async) r3 = socket$inet6(0xa, 0x1, 0x8010000000000084) bind$inet6(r3, &(0x7f00000000c0)={0xa, 0x4e21, 0xb, @empty}, 0x1c) sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000140)={&(0x7f00000004c0)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a2c000000050a03000000000000000000000000000c00024000000000000000010900010073797a300000000020000000030a01020000000000000000020000020900030073797a32000000000d000000120a010100000000000000000300000904000480140000001100010000000000000000000000000ab680c0f9df90c544c97ac3eebea27089ee9f94eb96bbdf"], 0x8c}}, 0x0) (async, rerun: 32) syz_genetlink_get_family_id$mptcp(&(0x7f0000000480), r2) (async, rerun: 32) sendmsg$netlink(0xffffffffffffffff, &(0x7f0000000740)={0x0, 0x0, &(0x7f0000000000)=[{&(0x7f0000000080)={0x28, 0x10, 0x1, 0x0, 0x0, "", [@nested={0xffffffffffffff85, 0x0, 0x0, 0x0, [@typed={0x3f, 0x0, 0x0, 0x0, @u64}, @typed={0x8, 0x1c, 0x0, 0x0, @u32=0xc9}]}]}, 0x28}], 0x1, 0x0, 0x0, 0xb305e06d8ab48277}, 0x0) (async) sendmsg$NL80211_CMD_CHANNEL_SWITCH(r0, &(0x7f0000000780)={&(0x7f00000002c0)={0x10, 0x0, 0x0, 0x45000110}, 0xc, &(0x7f0000000700)={&(0x7f0000000680)={0x64, 0x0, 0x120, 0x70bd2a, 0x25dfdbff, {{}, {@val={0x8}, @void}}, [@chandef_params=[@NL80211_ATTR_WIPHY_FREQ={0x8, 0x26, @random=0x1608}, @NL80211_ATTR_WIPHY_FREQ={0x8}, @NL80211_ATTR_CHANNEL_WIDTH={0x8, 0x9f, 0x7}, @NL80211_ATTR_CENTER_FREQ2={0x8, 0xa1, 0x8}, @NL80211_ATTR_CHANNEL_WIDTH={0x8}, @NL80211_ATTR_CENTER_FREQ2={0x8, 0xa1, 0x8}, @NL80211_ATTR_WIPHY_EDMG_CHANNELS={0x5, 0x118, 0xe}, @NL80211_ATTR_WIPHY_EDMG_CHANNELS={0x5, 0x118, 0x37}, @NL80211_ATTR_WIPHY_FREQ_OFFSET={0x8, 0x122, 0x2d8}]]}, 0x64}, 0x1, 0x0, 0x0, 0x10}, 0x40800) (async) bpf$MAP_UPDATE_BATCH(0x1a, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000080), &(0x7f0000000880), 0x1006, r1, 0x0, 0xd88d02a0}, 0x38) sendto$llc(r0, &(0x7f0000000040)="5ced3a1428214b50b59b429a500e6236b95666b9d5be34ff255c91dc0f33301675a719a244a6514b2ad8491eae879c3daad5d8419867e9", 0x37, 0x41, &(0x7f00000001c0)={0x1a, 0x30b, 0x5, 0x14, 0x6, 0x5, @local}, 0x10) (async) ioctl$sock_SIOCBRDELBR(0xffffffffffffffff, 0x89a2, &(0x7f0000000200)='bridge0\x00') 55.750948373s ago: executing program 6 (id=2559): sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f00000010c0)={0x0, 0x0, &(0x7f0000001080)={&(0x7f0000000a00)={{0x14, 0x10, 0x1, 0x0, 0x0, {0x5}}, [@NFT_MSG_DELFLOWTABLE={0x2c, 0x18, 0xa, 0x3, 0x0, 0x0, {0x0, 0x0, 0x2}, [@NFTA_FLOWTABLE_HANDLE={0xc, 0x5, 0x1, 0x0, 0x4}, @NFTA_FLOWTABLE_HANDLE={0xc, 0x5, 0x1, 0x0, 0x5}]}, @NFT_MSG_NEWSET={0x13c, 0x9, 0xa, 0x3, 0x0, 0x0, {0xa, 0x0, 0x8}, [@NFTA_SET_GC_INTERVAL={0x8, 0xc, 0x1, 0x0, 0xfffffffc}, @NFTA_SET_EXPR={0x10, 0x11, 0x0, 0x1, @meta={{0x9}, @void}}, @NFTA_SET_TIMEOUT={0xc, 0xb, 0x1, 0x0, 0x8}, @NFTA_SET_ID={0x8, 0xa, 0x1, 0x0, 0x1}, @NFTA_SET_USERDATA={0xfa, 0xd, 0x1, 0x0, "ba44f2b1b8ea85d62324be6acd5f78e213bc655f1aaf370974aeebd87b82ffab972541197819112f7752b33671d58cd7b5e8eb69d6079fd3dee707fd65e818d9a7c77db5ccc08f118ca3ec1ea369c0d21725f32fef4fed80440311383aafdd27cdbc830a2569f8ea0c22ebfbbd74f9fb0a6b08d62a17b2beda35a6739126b29ddf1d39ea0e10ba8384aebf63c6f58aa372a6e579d147d00b6d913a3a94fb7c50dd7022ff39afc4d2430f54bf43821df098bd600980155a940e16511fc52548448fb0c64099577a700f9b6f13ff8f3f1902f56735c4a426f29f4c76b5513f7942981bbab4ba4dfbd08d00e903b21d10f5c890092af8a6"}]}, @NFT_MSG_NEWRULE={0x1b0, 0x6, 0xa, 0x801, 0x0, 0x0, {0x1, 0x0, 0x4}, [@NFTA_RULE_COMPAT={0x54, 0x5, 0x0, 0x1, [@NFTA_RULE_COMPAT_PROTO_IPV4={0x8, 0x1, 0x1, 0x0, 0x11}, @NFTA_RULE_COMPAT_PROTO_BRIDGE={0x8, 0x1, 0x1, 0x0, 0x6005}, @NFTA_RULE_COMPAT_PROTO_BRIDGE={0x8, 0x1, 0x1, 0x0, 0xf5}, @NFTA_RULE_COMPAT_PROTO_IPV4={0x8, 0x1, 0x1, 0x0, 0x8}, @NFTA_RULE_COMPAT_PROTO_IPV6={0x8, 0x1, 0x1, 0x0, 0x2b}, @NFTA_RULE_COMPAT_PROTO_IPV6={0x8, 0x1, 0x1, 0x0, 0x1}, @NFTA_RULE_COMPAT_PROTO_IPV6={0x8, 0x1, 0x1, 0x0, 0x3c}, @NFTA_RULE_COMPAT_PROTO_BRIDGE={0x8, 0x1, 0x1, 0x0, 0xfbfb}, @NFTA_RULE_COMPAT_PROTO_IPV6={0x8, 0x1, 0x1, 0x0, 0x29}, @NFTA_RULE_COMPAT_PROTO_BRIDGE={0x8, 0x1, 0x1, 0x0, 0x4}]}, @NFTA_RULE_CHAIN_ID={0x8, 0xb, 0x1, 0x0, 0x2}, @NFTA_RULE_POSITION_ID={0x8, 0xa, 0x1, 0x0, 0x2}, @NFTA_RULE_CHAIN={0x9, 0x2, 'syz1\x00'}, @NFTA_RULE_USERDATA={0xfd, 0x7, 0x1, 0x0, "08ce189b0b9aa30166f6cdea04e47ad36712428c91dc7cb2e226083814097d56b5b8022147876b11d36d84f4218f666cdf45f6e2c80f00edb4032c38deebc2401696cb2a653af88ab6c6b66fe95bdf2db906a17852a0a0d5cb7ae35f2c05f0d3bb8d2dbfab1066effcf0bc6803127e5a34983e95dc469f2281cb8c1b8b3b9bf2313e869f924f2370b64764ffee664821ca3b79f015967529273b27701af980697906cdb2e484d7afa5b4b9d25d94ef54826b4bdd2ef06a468fc70a9cfebf852bf0945086f26740e0ff105ea856768067d936443dedbd1610522bb47ccb26085b513b38b589359e47cb20be8c43126012383e08b0ad223cce5b"}, @NFTA_RULE_TABLE={0x9, 0x1, 'syz1\x00'}, @NFTA_RULE_HANDLE={0xc, 0x3, 0x1, 0x0, 0x3}, @NFTA_RULE_POSITION_ID={0x8, 0xa, 0x1, 0x0, 0x3}, @NFTA_RULE_POSITION={0xc, 0x6, 0x1, 0x0, 0x1}]}, @NFT_MSG_NEWFLOWTABLE={0x168, 0x16, 0xa, 0x301, 0x0, 0x0, {0x3, 0x0, 0x1}, [@NFTA_FLOWTABLE_FLAGS={0x8, 0x7, 0x1, 0x0, 0x2}, @NFTA_FLOWTABLE_NAME={0x9, 0x2, 'syz2\x00'}, @NFTA_FLOWTABLE_FLAGS={0x8, 0x7, 0x1, 0x0, 0x1}, @NFTA_FLOWTABLE_NAME={0x9, 0x2, 'syz0\x00'}, @NFTA_FLOWTABLE_HOOK={0x4c, 0x3, 0x0, 0x1, [@NFTA_FLOWTABLE_HOOK_DEVS={0x40, 0x3, 0x0, 0x1, [{0x14, 0x1, 'macsec0\x00'}, {0x14, 0x1, 'wlan0\x00'}, {0x14, 0x1, 'nr0\x00'}]}, @NFTA_FLOWTABLE_HOOK_NUM={0x8}]}, @NFTA_FLOWTABLE_HOOK={0xbc, 0x3, 0x0, 0x1, [@NFTA_FLOWTABLE_HOOK_NUM={0x8}, @NFTA_FLOWTABLE_HOOK_DEVS={0x18, 0x3, 0x0, 0x1, [{0x14, 0x1, 'netpci0\x00'}]}, @NFTA_FLOWTABLE_HOOK_PRIORITY={0x8, 0x2, 0x1, 0x0, 0x4}, @NFTA_FLOWTABLE_HOOK_DEVS={0x90, 0x3, 0x0, 0x1, [{0x14, 0x1, 'veth0_to_bond\x00'}, {0x14, 0x1, 'batadv_slave_0\x00'}, {0x14, 0x1, 'veth1_to_hsr\x00'}, {0x14, 0x1, 'veth1_virt_wifi\x00'}, {0x14}, {0x14, 0x1, 'pim6reg1\x00'}, {0x14, 0x1, 'veth1_to_team\x00'}]}]}, @NFTA_FLOWTABLE_HANDLE={0xc, 0x5, 0x1, 0x0, 0x4}, @NFTA_FLOWTABLE_NAME={0x9, 0x2, 'syz1\x00'}, @NFTA_FLOWTABLE_TABLE={0x9, 0x1, 'syz0\x00'}]}, @NFT_MSG_DELOBJ={0x78, 0x14, 0xa, 0x5, 0x0, 0x0, {0x0, 0x0, 0x2}, [@NFTA_OBJ_USERDATA={0x3f, 0x8, "b6c88d8d7235f58bc7099048c267ea510f67753ee97b2da23f4577aab904e06880b8e280c3204c79bf3953bf99ae0f3452c13e029879eaf9e16376"}, @NFTA_OBJ_USERDATA={0xc, 0x8, "5ff0bd3d64b3e27e"}, @NFTA_OBJ_HANDLE={0xc, 0x6, 0x1, 0x0, 0x3}, @NFTA_OBJ_TABLE={0x9, 0x1, 'syz0\x00'}]}, @NFT_MSG_NEWCHAIN={0x20, 0x3, 0xa, 0x201, 0x0, 0x0, {0x3, 0x0, 0x3}, [@NFTA_CHAIN_TABLE={0x9, 0x1, 'syz0\x00'}]}, @NFT_MSG_DELOBJ={0x48, 0x14, 0xa, 0x201, 0x0, 0x0, {0x0, 0x0, 0x1}, [@NFTA_OBJ_HANDLE={0xc, 0x6, 0x1, 0x0, 0x1}, @NFTA_OBJ_TYPE={0x8, 0x3, 0x1, 0x0, 0xa}, @NFTA_OBJ_TYPE={0x8, 0x3, 0x1, 0x0, 0x7}, @NFTA_OBJ_HANDLE={0xc, 0x6, 0x1, 0x0, 0x4}, @NFTA_OBJ_HANDLE={0xc, 0x6, 0x1, 0x0, 0x1}]}, @NFT_MSG_DELSET={0x9c, 0xb, 0xa, 0x101, 0x0, 0x0, {0x7, 0x0, 0xa}, [@NFTA_SET_OBJ_TYPE={0x8, 0xf, 0x1, 0x0, 0x6}, @NFTA_SET_OBJ_TYPE={0x8, 0xf, 0x1, 0x0, 0x44c627213cc5b38b}, @NFTA_SET_DESC={0x70, 0x9, 0x0, 0x1, [@NFTA_SET_DESC_CONCAT={0x10, 0x2, 0x0, 0x1, [{0xc, 0x1, 0x0, 0x1, [@NFTA_SET_FIELD_LEN={0x8, 0x1, 0x1, 0x0, 0xfffffff8}]}]}, @NFTA_SET_DESC_CONCAT={0x3c, 0x2, 0x0, 0x1, [{0xc, 0x1, 0x0, 0x1, [@NFTA_SET_FIELD_LEN={0x8, 0x1, 0x1, 0x0, 0x100}]}, {0x2c, 0x1, 0x0, 0x1, [@NFTA_SET_FIELD_LEN={0x8, 0x1, 0x1, 0x0, 0x13}, @NFTA_SET_FIELD_LEN={0x8, 0x1, 0x1, 0x0, 0x9}, @NFTA_SET_FIELD_LEN={0x8, 0x1, 0x1, 0x0, 0x9}, @NFTA_SET_FIELD_LEN={0x8, 0x1, 0x1, 0x0, 0x7}, @NFTA_SET_FIELD_LEN={0x8, 0x1, 0x1, 0x0, 0xa12}]}]}, @NFTA_SET_DESC_CONCAT={0x18, 0x2, 0x0, 0x1, [{0x14, 0x1, 0x0, 0x1, [@NFTA_SET_FIELD_LEN={0x8, 0x1, 0x1, 0x0, 0x80000000}, @NFTA_SET_FIELD_LEN={0x8, 0x1, 0x1, 0x0, 0xa}]}]}, @NFTA_SET_DESC_SIZE={0x8, 0x1, 0x1, 0x0, 0x7}]}, @NFTA_SET_FLAGS={0x8, 0x3, 0x1, 0x0, 0x4}]}, @NFT_MSG_DELOBJ={0x14, 0x14, 0xa, 0x101, 0x0, 0x0, {0x2, 0x0, 0x2}}], {0x14, 0x11, 0x1, 0x0, 0x0, {0x7}}}, 0x638}, 0x1, 0x0, 0x0, 0x2800}, 0x4800) r0 = socket$inet_tcp(0x2, 0x1, 0x0) sendmmsg(r0, &(0x7f0000006c80)=[{{0x0, 0x0, &(0x7f0000000600)=[{&(0x7f00000003c0)=':4', 0x2}], 0x1, &(0x7f0000001040)=ANY=[], 0x78}}], 0x1, 0x4044805) 55.671724573s ago: executing program 6 (id=2560): r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000100)=@bloom_filter={0x1e, 0x4, 0x2a, 0xf, 0x8, 0x1, 0x2, '\x00', 0x0, 0xffffffffffffffff, 0x5, 0x0, 0x2, 0xd}, 0x50) r1 = bpf$MAP_CREATE(0x0, &(0x7f0000000080)=ANY=[@ANYBLOB="0400000004000000f80000000006000000000000e640d3bed55afc579487faee77ec75c41954d0af6df415ce3b8ed6732c1984911ab877a0d0c72ce8145018", @ANYRES32=r0, @ANYBLOB='\x00'/20, @ANYRES32=0x0, @ANYRES32, @ANYBLOB='\x00'/28], 0x50) r2 = socket$alg(0x26, 0x5, 0x0) ioctl$XFS_IOC_ATTRMULTI_BY_HANDLE(r2, 0x4048587b, &(0x7f0000000980)={{r1, &(0x7f0000000000)='skcipher\x00', 0x80, &(0x7f00000003c0)={@align=0x7, {0x5, 0x1ff, 0x1a26, 0x7fff}}, 0xff, &(0x7f0000000400), &(0x7f0000000440)=0x3}, 0x3, &(0x7f0000000900)=[{0x3, 0x5ad, &(0x7f0000000480)='TIPCv2\x00', &(0x7f0000000580)="6fa3a71f16ffd9a527fc493fa982c9749b6de656f4a314b29ff3b30dd155fa5405164d2e296344253642421a2afdb538103f72eea480d59966c2c8fa131a5c591d0e8db5125fb4352da12c14d4893b83016b557f2b5ac5f906a0bd07", 0x5c, 0x18}, {0x3, 0x7, &(0x7f0000000600)='&^-\x00', &(0x7f0000000640)="41bcb26d2c84ce130f945b9c08f63b4e8d14f682f7fbf0bac4ac23a840cde26c629a51049dcbfb43e09ef146df263b6ef2327ca5e444b9df9957d9228c1a72a67d4f7093a21719a4aaf580a3e1348b545ad3678373398af3545301b66bb46e912c0cf19006243a927e5148c9fa117dcdacd9a658d1af586867636cfd21b923b230acfd4ee857b038f7d8f43d17e7532edbb3aec791af30f1873b76ec7903b1328c028d4efa0286f75a8d24beb6a2e0cf0ea03b3b158ada0f0ebc70319fbe5e79689c4b453d", 0xc5, 0x10}, {0x1, 0x3, &(0x7f0000000740)='].{\x00', &(0x7f0000000880)="d8abd4dc07b54c3305ee67258f2dc912e2c05af0a093b265c69ab6d36377e1512499a153647fc70ddc49f6a67db22c7a345d1373e00fbbc8f9e4c163a809065e9b90e88f93774e5aaf2450b2e7b93816f81b86af7bb67051cc7997eb441492746876318202735b456453a96dea379f139322e2f568fba8b76dde64823bea", 0x7e, 0x20}]}) r4 = syz_genetlink_get_family_id$mptcp(&(0x7f0000000a40), 0xffffffffffffffff) sendmsg$MPTCP_PM_CMD_GET_LIMITS(r3, &(0x7f0000000b00)={&(0x7f0000000a00)={0x10, 0x0, 0x0, 0x2}, 0xc, &(0x7f0000000ac0)={&(0x7f0000000a80)={0x34, r4, 0x400, 0x70bd28, 0x25dfdbfb, {}, [@MPTCP_PM_ATTR_LOC_ID={0x5, 0x5, 0x3}, @MPTCP_PM_ATTR_LOC_ID={0x5, 0x5, 0xc0}, @MPTCP_PM_ATTR_TOKEN={0x8, 0x4, 0xfffffffb}, @MPTCP_PM_ATTR_RCV_ADD_ADDRS={0x8, 0x2, 0x6}]}, 0x34}, 0x1, 0x0, 0x0, 0x40}, 0x8001) bind$alg(r2, &(0x7f00000004c0)={0x26, 'skcipher\x00', 0x0, 0x0, 'ecb-camellia-asm\x00'}, 0x58) setsockopt$ALG_SET_KEY(r2, 0x117, 0x1, &(0x7f0000000280)="ad56b6c5820fae9d6dcd3292ea54c7beef915d564c90c200", 0x18) r5 = accept4(r2, 0x0, 0x0, 0x800) clock_gettime(0xe2d1b348b6c14161, 0x0) sendmmsg$alg(r5, &(0x7f0000000040)=[{0x0, 0x0, 0x0, 0x0, &(0x7f0000000380)=[@op={0x18, 0x117, 0x3, 0x1}], 0x18}], 0x1, 0x40800) recvmsg(r5, 0x0, 0x2000) syz_genetlink_get_family_id$tipc2(&(0x7f0000000240), r5) ioctl$XFS_IOC_FD_TO_HANDLE(r0, 0xc038586a, &(0x7f0000000340)={r5, &(0x7f0000000180)='-^[-}\x00', 0x241, &(0x7f00000001c0)={@align=0x8, {0x1, 0x9, 0x3}}, 0x36, &(0x7f00000002c0)={@_ha_fsid}, &(0x7f0000000300)=0x401}) setsockopt$inet_tcp_TCP_REPAIR_WINDOW(0xffffffffffffffff, 0x6, 0x25, &(0x7f0000000000)={0x200, 0x0, 0x4bb8, 0x965f, 0x8}, 0x14) r6 = bpf$PROG_LOAD(0x5, &(0x7f0000000740)={0x6, 0x4, &(0x7f0000000100)=@framed={{0x18, 0x2, 0x0, 0x0, 0x8000000a, 0x0, 0x0, 0x0, 0x3}, [@call={0x85, 0x0, 0x0, 0x41}]}, &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x20, '\x00', 0x0, @xdp=0x25, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x101}, 0x94) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000600)={r6, 0x0, 0x2107, 0x0, &(0x7f0000000100), 0x0, 0x1008, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x9}, 0x50) r7 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x3, 0xc, &(0x7f00000003c0)=ANY=[@ANYBLOB="1800000000000000000000000000000085000000610000001801000020646c2500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b70300000000000085000000b000000095"], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x5, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000a40)={r7, 0x27, 0x71, 0x0, &(0x7f0000000000)="f8ad1dcc02cb29b76b0032008100", 0x0, 0x4000, 0xf2ffffff, 0x0, 0x0, 0x0, 0x0, 0x4}, 0x50) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000007c0)={0x18, 0x3, &(0x7f0000000540)=ANY=[@ANYBLOB="18000000d90000b4e280bffb61a38a009500c50000000000"], &(0x7f0000000200)='syzkaller\x00', 0x4, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x4}, 0x94) 55.543765759s ago: executing program 2 (id=2561): r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$ieee802154(&(0x7f0000000040), 0xffffffffffffffff) sendmsg$IEEE802154_SET_MACPARAMS(r0, &(0x7f0000000100)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x880020}, 0xc, &(0x7f00000000c0)={&(0x7f0000000080)={0x20, r1, 0x20, 0x70bd28, 0x25dfdbff, {}, [@IEEE802154_ATTR_DEV_NAME={0xa, 0x1, 'wpan1\x00'}]}, 0x20}, 0x1, 0x0, 0x0, 0x4000040}, 0x20040050) r2 = syz_init_net_socket$nl_rdma(0x10, 0x3, 0x10) close(r2) r3 = bpf$BPF_PROG_GET_FD_BY_ID(0xd, &(0x7f0000000140), 0x4) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000400)={r3, 0x0, 0x53, 0xaa, &(0x7f0000000180)="63695dc0c55ccfc46d06a1202f30402826adcdc00a813ef90caa62d6aad806c1edabaf1af58bf78e6fbf19d496db922c6ead85695dce00e572cbb0774fe257126376b466bba132011dd32c75b1cb7a10e601db", &(0x7f0000000200)=""/170, 0x5, 0x0, 0x20, 0xec, &(0x7f00000002c0)="d8353a5319346f57996c7e25de1d06465da334bf992c5bf887f4eb3ada92d8e7", &(0x7f0000000300)="0e966535ba279cdcebf2db07246db9a94f801a94ce2c0c45af5f0761bca0e1ec3bde7f1d0d3d9b5fdb2492de759be9184ea45ef736e6ec16a545739ad13b8320de3e398e26200032b01218dfd3d8353c0d2ddaa5bf8026af5cda2eee2f15994b5fa9508fccdf3913a9c4b7003b5f1cdab1b45b98bce3d13b9dbbdafe3827e0c48760b257ea8702091e3231de6e0ba0c2ff55db99202e2d6aa5f218d1be85a132e4619e22b69116521fb84f3756e1318ec4b1c9e45dbea7a0ccf6dcc5ed1f02711c94a47c10c532dad8d2912a0b2b7f43a4dd8003f5e203920ca665ef86e893d5cd7867ff8e88725510537aa7", 0x7, 0x0, 0x8000}, 0x50) (async) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000400)={r3, 0x0, 0x53, 0xaa, &(0x7f0000000180)="63695dc0c55ccfc46d06a1202f30402826adcdc00a813ef90caa62d6aad806c1edabaf1af58bf78e6fbf19d496db922c6ead85695dce00e572cbb0774fe257126376b466bba132011dd32c75b1cb7a10e601db", &(0x7f0000000200)=""/170, 0x5, 0x0, 0x20, 0xec, &(0x7f00000002c0)="d8353a5319346f57996c7e25de1d06465da334bf992c5bf887f4eb3ada92d8e7", &(0x7f0000000300)="0e966535ba279cdcebf2db07246db9a94f801a94ce2c0c45af5f0761bca0e1ec3bde7f1d0d3d9b5fdb2492de759be9184ea45ef736e6ec16a545739ad13b8320de3e398e26200032b01218dfd3d8353c0d2ddaa5bf8026af5cda2eee2f15994b5fa9508fccdf3913a9c4b7003b5f1cdab1b45b98bce3d13b9dbbdafe3827e0c48760b257ea8702091e3231de6e0ba0c2ff55db99202e2d6aa5f218d1be85a132e4619e22b69116521fb84f3756e1318ec4b1c9e45dbea7a0ccf6dcc5ed1f02711c94a47c10c532dad8d2912a0b2b7f43a4dd8003f5e203920ca665ef86e893d5cd7867ff8e88725510537aa7", 0x7, 0x0, 0x8000}, 0x50) r4 = socket$inet6_udp(0xa, 0x2, 0x0) getsockopt$inet6_IPV6_FLOWLABEL_MGR(r4, 0x29, 0x20, &(0x7f0000000480)={@mcast2, 0x0, 0x1, 0x1, 0xc, 0x2, 0xe2}, &(0x7f00000004c0)=0x20) ioctl$NILFS_IOCTL_SET_ALLOC_RANGE(r3, 0x40106e8c, &(0x7f0000000500)=[0x25, 0x71a]) ioctl$F2FS_IOC_ABORT_ATOMIC_WRITE(r2, 0xf505, 0x0) ioctl$SIOCGETLINKNAME(0xffffffffffffffff, 0x89e0, &(0x7f0000000540)={0x3, 0x3}) socket$nl_netfilter(0x10, 0x3, 0xc) (async) r5 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_TEST(r5, &(0x7f0000000740)={&(0x7f00000005c0)={0x10, 0x0, 0x0, 0x100000}, 0xc, &(0x7f0000000700)={&(0x7f0000000600)={0xd0, 0xb, 0x6, 0x401, 0x0, 0x0, {0x0, 0x0, 0x8}, [@IPSET_ATTR_SETNAME={0x9, 0x2, 'syz1\x00'}, @IPSET_ATTR_SETNAME={0x9, 0x2, 'syz2\x00'}, @IPSET_ATTR_ADT={0x44, 0x8, 0x0, 0x1, [{0x10, 0x7, 0x0, 0x1, @IPSET_ATTR_SKBMARK={0xc, 0x1b, 0x1, 0x0, 0x8000000000000000}}, {0x10, 0x7, 0x0, 0x1, @IPSET_ATTR_IP={0xc, 0x1, 0x0, 0x1, @IPSET_ATTR_IPADDR_IPV4={0x8, 0x1, 0x1, 0x0, @rand_addr=0x64010102}}}, {0x10, 0x7, 0x0, 0x1, @IPSET_ATTR_BYTES={0xc, 0x18, 0x1, 0x0, 0x4}}, {0x10, 0x7, 0x0, 0x1, @IPSET_ATTR_IP_TO={0xc, 0x2, 0x0, 0x1, @IPSET_ATTR_IPADDR_IPV4={0x8, 0x1, 0x1, 0x0, @broadcast}}}]}, @IPSET_ATTR_DATA={0x60, 0x7, 0x0, 0x1, [@IPSET_ATTR_MARKMASK={0x8, 0xb, 0x1, 0x0, 0x6}, @IPSET_ATTR_SKBMARK={0xc, 0x1b, 0x1, 0x0, 0xfffffffffffffffc}, @IPSET_ATTR_SKBQUEUE={0x6, 0x1d, 0x1, 0x0, 0x6}, @IPSET_ATTR_IP={0xc, 0x1, 0x0, 0x1, @IPSET_ATTR_IPADDR_IPV4={0x8, 0x1, 0x1, 0x0, @rand_addr=0x64010100}}, @IPSET_ATTR_LINENO={0x8, 0x9, 0x1, 0x0, 0x6}, @IPSET_ATTR_MARK={0x8, 0xa, 0x1, 0x0, 0x5}, @IPSET_ATTR_IP2_TO={0x18, 0x16, 0x0, 0x1, @IPSET_ATTR_IPADDR_IPV6={0x14, 0x2, 0x1, 0x0, @loopback}}, @IPSET_ATTR_NAMEREF={0x9, 0x13, 'syz0\x00'}]}]}, 0xd0}, 0x1, 0x0, 0x0, 0x1}, 0x40004) (async) sendmsg$IPSET_CMD_TEST(r5, &(0x7f0000000740)={&(0x7f00000005c0)={0x10, 0x0, 0x0, 0x100000}, 0xc, &(0x7f0000000700)={&(0x7f0000000600)={0xd0, 0xb, 0x6, 0x401, 0x0, 0x0, {0x0, 0x0, 0x8}, [@IPSET_ATTR_SETNAME={0x9, 0x2, 'syz1\x00'}, @IPSET_ATTR_SETNAME={0x9, 0x2, 'syz2\x00'}, @IPSET_ATTR_ADT={0x44, 0x8, 0x0, 0x1, [{0x10, 0x7, 0x0, 0x1, @IPSET_ATTR_SKBMARK={0xc, 0x1b, 0x1, 0x0, 0x8000000000000000}}, {0x10, 0x7, 0x0, 0x1, @IPSET_ATTR_IP={0xc, 0x1, 0x0, 0x1, @IPSET_ATTR_IPADDR_IPV4={0x8, 0x1, 0x1, 0x0, @rand_addr=0x64010102}}}, {0x10, 0x7, 0x0, 0x1, @IPSET_ATTR_BYTES={0xc, 0x18, 0x1, 0x0, 0x4}}, {0x10, 0x7, 0x0, 0x1, @IPSET_ATTR_IP_TO={0xc, 0x2, 0x0, 0x1, @IPSET_ATTR_IPADDR_IPV4={0x8, 0x1, 0x1, 0x0, @broadcast}}}]}, @IPSET_ATTR_DATA={0x60, 0x7, 0x0, 0x1, [@IPSET_ATTR_MARKMASK={0x8, 0xb, 0x1, 0x0, 0x6}, @IPSET_ATTR_SKBMARK={0xc, 0x1b, 0x1, 0x0, 0xfffffffffffffffc}, @IPSET_ATTR_SKBQUEUE={0x6, 0x1d, 0x1, 0x0, 0x6}, @IPSET_ATTR_IP={0xc, 0x1, 0x0, 0x1, @IPSET_ATTR_IPADDR_IPV4={0x8, 0x1, 0x1, 0x0, @rand_addr=0x64010100}}, @IPSET_ATTR_LINENO={0x8, 0x9, 0x1, 0x0, 0x6}, @IPSET_ATTR_MARK={0x8, 0xa, 0x1, 0x0, 0x5}, @IPSET_ATTR_IP2_TO={0x18, 0x16, 0x0, 0x1, @IPSET_ATTR_IPADDR_IPV6={0x14, 0x2, 0x1, 0x0, @loopback}}, @IPSET_ATTR_NAMEREF={0x9, 0x13, 'syz0\x00'}]}]}, 0xd0}, 0x1, 0x0, 0x0, 0x1}, 0x40004) ioctl$XFS_IOC_PATH_TO_HANDLE(r4, 0xc0385869, &(0x7f0000000880)={0xffffffffffffffff, &(0x7f0000000780)='802.15.4 MAC\x00', 0x0, &(0x7f00000007c0)={@_ha_fsid={[0x800, 0x91a0]}, {0x7, 0xe, 0x0, 0x80}}, 0x40, &(0x7f0000000800), &(0x7f0000000840)=0x8}) (async) ioctl$XFS_IOC_PATH_TO_HANDLE(r4, 0xc0385869, &(0x7f0000000880)={0xffffffffffffffff, &(0x7f0000000780)='802.15.4 MAC\x00', 0x0, &(0x7f00000007c0)={@_ha_fsid={[0x800, 0x91a0]}, {0x7, 0xe, 0x0, 0x80}}, 0x40, &(0x7f0000000800), &(0x7f0000000840)=0x8}) ioctl$SIOCPNGETOBJECT(r6, 0x89e0, &(0x7f00000008c0)=0xe) syz_genetlink_get_family_id$ieee802154(&(0x7f0000000900), r0) ioctl$F2FS_IOC_RELEASE_COMPRESS_BLOCKS(r6, 0x8008f512, &(0x7f0000000940)) (async) ioctl$F2FS_IOC_RELEASE_COMPRESS_BLOCKS(r6, 0x8008f512, &(0x7f0000000940)) ioctl$ifreq_SIOCGIFINDEX_batadv_mesh(r6, 0x8933, &(0x7f0000000980)) (async) ioctl$ifreq_SIOCGIFINDEX_batadv_mesh(r6, 0x8933, &(0x7f0000000980)) socketpair$tipc(0x1e, 0x2, 0x0, &(0x7f00000009c0)={0xffffffffffffffff, 0xffffffffffffffff}) setsockopt$TIPC_SRC_DROPPABLE(r7, 0x10f, 0x80, &(0x7f0000000a00)=0xffffffff, 0x4) (async) setsockopt$TIPC_SRC_DROPPABLE(r7, 0x10f, 0x80, &(0x7f0000000a00)=0xffffffff, 0x4) syz_genetlink_get_family_id$tipc(&(0x7f0000000a80), r6) (async) r8 = syz_genetlink_get_family_id$tipc(&(0x7f0000000a80), r6) sendmsg$TIPC_CMD_ENABLE_BEARER(r6, &(0x7f0000000b40)={&(0x7f0000000a40)={0x10, 0x0, 0x0, 0x4d377a91235e866e}, 0xc, &(0x7f0000000b00)={&(0x7f0000000ac0)={0x34, r8, 0x200, 0x70bd27, 0x25dfdbfe, {{}, {}, {0x18, 0x17, {0x12, 0x6, @udp='udp:syz0\x00'}}}, ["", "", "", "", "", ""]}, 0x34}, 0x1, 0x0, 0x0, 0x40000}, 0x40000) ioctl$sock_SIOCGIFINDEX_80211(r7, 0x8933, &(0x7f0000000b80)={'wlan1\x00'}) (async) ioctl$sock_SIOCGIFINDEX_80211(r7, 0x8933, &(0x7f0000000b80)={'wlan1\x00'}) sendmsg$IPSET_CMD_CREATE(r5, &(0x7f0000000c80)={&(0x7f0000000bc0)={0x10, 0x0, 0x0, 0x4000000}, 0xc, &(0x7f0000000c40)={&(0x7f0000000c00)={0x2c, 0x2, 0x6, 0x0, 0x0, 0x0, {0x5, 0x0, 0x6}, [@IPSET_ATTR_TYPENAME={0xd, 0x3, 'list:set\x00'}, @IPSET_ATTR_PROTOCOL={0x5}]}, 0x2c}, 0x1, 0x0, 0x0, 0xfbc75dc921a54f4c}, 0x4008000) r9 = socket$nl_generic(0x10, 0x3, 0x10) r10 = syz_genetlink_get_family_id$devlink(&(0x7f0000000d00), r6) sendmsg$DEVLINK_CMD_RATE_GET(r9, &(0x7f0000000dc0)={&(0x7f0000000cc0)={0x10, 0x0, 0x0, 0x80000000}, 0xc, &(0x7f0000000d80)={&(0x7f0000000d40)={0x30, r10, 0x100, 0x70bd2c, 0x25dfdbfe, {}, [@handle=@pci={{0x8}, {0x11}}]}, 0x30}, 0x1, 0x0, 0x0, 0x6041}, 0x0) (async) sendmsg$DEVLINK_CMD_RATE_GET(r9, &(0x7f0000000dc0)={&(0x7f0000000cc0)={0x10, 0x0, 0x0, 0x80000000}, 0xc, &(0x7f0000000d80)={&(0x7f0000000d40)={0x30, r10, 0x100, 0x70bd2c, 0x25dfdbfe, {}, [@handle=@pci={{0x8}, {0x11}}]}, 0x30}, 0x1, 0x0, 0x0, 0x6041}, 0x0) write(r3, &(0x7f0000000e00)="0d85b88f0c467e8cca4720c489f1ca2be94956aafe34075982cd1d576ae32152f61022db3b66451700b9171b79c99e7cda57c263eaf4c226d953f773a202c40ef907a8fd03a450db19d23d3ce5da1aa867a4344c0a2fc27351ecc919271c6e1a22377565753b6ad013cc62e305e4363ebc846e54850bdb603c21854a", 0x7c) ioctl$XFS_IOC_FD_TO_HANDLE(r7, 0xc038586a, &(0x7f0000000f80)={r3, &(0x7f0000000e80)='wlan1\x00', 0x0, &(0x7f0000000ec0)={@align=0x17, {0x4, 0x9f, 0x80000001, 0x2}}, 0x2, &(0x7f0000000f00)={@_ha_fsid}, &(0x7f0000000f40)=0xc0}) 55.489202498s ago: executing program 6 (id=2563): r0 = socket$packet(0x11, 0x3, 0x300) r1 = socket$inet6_sctp(0xa, 0x1, 0x84) r2 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r2, &(0x7f000000c2c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000400)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a28000000000a0101000000005e1affd5020000000900010073797a300000000008000240000000032c000000030a01030000e6ff000000000200"], 0x7c}}, 0x0) sendmsg$NFT_BATCH(r2, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000100)=ANY=[@ANYBLOB="140000001000010000000000000000000004000a98000000060a0b040000000000000000020000006c00048018000180080001006f7366000c000280080001400000000424000180090001006d6574610000000014000280080002400000000c08000340000000042c0001800a0001006c696d69740000001c0002800c00014000000000000000230c00024000000000000000010900010073797a3000000000090002"], 0xc0}}, 0x0) write$cgroup_subtree(0xffffffffffffffff, &(0x7f0000000000)=ANY=[@ANYBLOB="8fedcb7907001175f37538e486dd637f4b22667f2f00db5b686158bbcfe8875a65969ff57b00000000000000000000000000ac1414"], 0xfdef) socketpair$tipc(0x1e, 0x2, 0x0, &(0x7f0000000280)={0xffffffffffffffff}) setsockopt$TIPC_GROUP_JOIN(r3, 0x10f, 0x87, &(0x7f00000002c0)={0x40, 0x0, 0x1}, 0x10) r4 = socket(0x10, 0x2, 0x0) sendmsg$NFT_MSG_GETCHAIN(0xffffffffffffffff, &(0x7f0000000740)={0x0, 0x0, &(0x7f0000000700)={&(0x7f0000000600)={0x14, 0x4, 0xa, 0x201, 0x0, 0x0, {0x0, 0x0, 0xa}}, 0x14}, 0x1, 0x0, 0x0, 0x40}, 0x20000004) setsockopt$netlink_NETLINK_TX_RING(r4, 0x10e, 0xc, &(0x7f0000000080)={0x8, 0x6, 0x2}, 0x10) write(r4, &(0x7f0000000480)="1c0000001a009b8a140000003b00"/28, 0x1c) recvmmsg(r4, &(0x7f0000000ec0), 0x0, 0x2, &(0x7f00000001c0)) r5 = bpf$PROG_LOAD(0x5, &(0x7f0000000740)={0xc, 0x8, &(0x7f0000000d80)=ANY=[@ANYBLOB="1800000000000000000000000000000018020000", @ANYRES32=r1, @ANYBLOB="0000000000000000b703000000000000850000000d000000b70000000000000095"], &(0x7f00000000c0)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x1b, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2}, 0x94) sendmsg$RDMA_NLDEV_CMD_RES_CM_ID_GET(r4, &(0x7f0000000500)={&(0x7f0000000300)={0x10, 0x0, 0x0, 0x800}, 0xc, &(0x7f00000004c0)={&(0x7f0000000340)={0x50, 0x140b, 0x100, 0x70bd28, 0x25dfdbff, "", [@RDMA_NLDEV_ATTR_RES_CM_IDN={0x8, 0x3f, 0x3}, @RDMA_NLDEV_ATTR_RES_CM_IDN={0x8, 0x3f, 0x4}, @RDMA_NLDEV_ATTR_DEV_INDEX={0x8, 0x1, 0x2}, @RDMA_NLDEV_ATTR_RES_CM_IDN={0x8, 0x3f, 0x5}, @RDMA_NLDEV_ATTR_RES_CM_IDN={0x8, 0x3f, 0x4}, @RDMA_NLDEV_ATTR_PORT_INDEX={0x8}, @RDMA_NLDEV_ATTR_PORT_INDEX={0x8, 0x3, 0x4}, @RDMA_NLDEV_ATTR_RES_CM_IDN={0x8, 0x3f, 0x4}]}, 0x50}, 0x1, 0x0, 0x0, 0x800}, 0x4000080) sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f0000000000)={0x0, 0x0, 0x0}, 0x0) r6 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r6, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000280)={0x14, 0x27, 0x301, 0x2270bd24, 0x25dfdbff, {0xd}}, 0x14}, 0x1, 0x0, 0x0, 0x4008}, 0x4044810) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f00000003c0)={r5, 0x3e8, 0xe80, 0x0, &(0x7f0000000000)="c1df07000000d30a298ee68886dd87", 0x0, 0x3ff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4}, 0x50) setsockopt$SO_ATTACH_FILTER(r0, 0x1, 0x1a, &(0x7f0000000240)={0x3, &(0x7f0000000140)=[{0x20, 0x2, 0x81, 0xfffff034}, {0x20, 0x0, 0x8, 0xfffff010}, {0x6, 0xba, 0x2, 0xefff}]}, 0x10) syz_emit_ethernet(0x32, &(0x7f0000000240)=ANY=[@ANYBLOB="aaaaaaaaaaaabbbb8b5cbbbb0800450000a70000000200119078000000000000000000000000010000000000060080000000"], 0x0) ioctl$sock_SIOCGIFINDEX(0xffffffffffffffff, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000001f00)=@newtfilter={0x4c, 0x2c, 0xd27, 0x70bd24, 0x25dfdbfd, {0x0, 0x0, 0x0, r7, {0xfff1, 0xa}, {}, {0x7, 0x2}}, [@filter_kind_options=@f_bpf={{0x8}, {0x20, 0x2, [@TCA_BPF_OPS={{0x6, 0x4, 0x1}, {0xc, 0x5, [{0x6, 0xd, 0x5, 0x4}]}}, @TCA_BPF_CLASSID={0x8, 0x3, {0xd, 0xa}}]}}]}, 0x4c}, 0x1, 0x0, 0x0, 0x8848}, 0x20004804) r8 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r8, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) r10 = socket$packet(0x11, 0x3, 0x300) sendto$packet(r10, &(0x7f00000005c0)="bad330fbc9b55400040000ea0756", 0xe, 0x40, &(0x7f00000001c0)={0x11, 0x8100, r9, 0x1, 0xd8, 0x6, @multicast}, 0x14) ioctl$sock_ipv6_tunnel_SIOCGETTUNNEL(r4, 0x89f0, &(0x7f0000000b00)={'ip6_vti0\x00', &(0x7f0000000a80)={'syztnl0\x00', 0x0, 0x2f, 0x3, 0x40, 0xdd, 0x20, @private2={0xfc, 0x2, '\x00', 0x1}, @empty, 0x7800, 0x7800, 0xbf, 0x9}}) sendmsg$ETHTOOL_MSG_CHANNELS_GET(0xffffffffffffffff, &(0x7f0000000d00)={&(0x7f0000000540)={0x10, 0x0, 0x0, 0x10000000}, 0xc, &(0x7f0000000cc0)={&(0x7f0000000940)=ANY=[@ANYRES8, @ANYRES16=0x0, @ANYBLOB="00042bbd7000fddbdf251100000020000180140002007665746831000000000000000000000008000100", @ANYRES32=0x0, @ANYBLOB="1800018014000200767863616e31000000000000000000001c00018008000100", @ANYRES32=0x0, @ANYBLOB="08000100", @ANYRES32=0x0, @ANYBLOB="08000100", @ANYRES32=0x0, @ANYBLOB="34000180080003000200000014000200766c616e30000000000000000000000014000200697036746e6c30000000000000000000780001801400020076657468305f746f5f627269646765000800030002000000080003000000000008000100", @ANYRES32=r9, @ANYRES32=r3, @ANYRES32=r7, @ANYBLOB="08000100", @ANYRES32=r11, @ANYRESDEC=r4, @ANYRES32=r11, @ANYBLOB="1400020070696d367265673000000000000000000c00018008000100", @ANYRES32=0x0, @ANYBLOB="0c00018008000100", @ANYRES32=0x0, @ANYBLOB="1400018004080001", @ANYRES16=r1, @ANYBLOB="08000100", @ANYRES32=r11, @ANYBLOB], 0x140}, 0x1, 0x0, 0x0, 0x404c000}, 0x20000000) 55.344265967s ago: executing program 2 (id=2565): socket$inet6_sctp(0xa, 0x1, 0x84) r0 = bpf$PROG_LOAD(0x5, &(0x7f00000004c0)={0x16, 0x10, &(0x7f0000000100)=ANY=[@ANYRES32], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @flow_dissector, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r1 = socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$ipvs(&(0x7f0000000040), 0xffffffffffffffff) r2 = socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$nl80211(&(0x7f0000000080), r2) sendmsg$IPVS_CMD_NEW_SERVICE(r2, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000140)={&(0x7f00000006c0)=ANY=[], 0x54}}, 0x0) sendmsg$nl_generic(r1, &(0x7f0000001240)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000140)=ANY=[@ANYBLOB="4000000043000701fefffffffbdbdf25027c000004004580"], 0x40}}, 0x810) bpf$PROG_LOAD(0x5, &(0x7f0000000180)={0x6, 0x4, &(0x7f0000000680)=ANY=[@ANYBLOB="18020000000000000000000000000030850000002c00000095000000000000002b4003fe37a077ae55f52c0d80a2649baca85309be96d5a45bbbdb5ff7ffffffd075b3eee14473f51be98db7efbb059842badcfc81364470e8e04acb807fbbabc68abdcce9"], &(0x7f00000000c0)='GPL\x00', 0x0, 0x100a, &(0x7f0000001400)=""/4106, 0x0, 0x0, '\x00', 0x0, @xdp, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, r0}, 0x94) r3 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r3, &(0x7f0000000140)={0x0, 0xfffffffffffffdfd, &(0x7f0000000080)={&(0x7f0000000000)=@newlink={0x30, 0x10, 0x801, 0x0, 0x0, {0x0, 0x0, 0x0, 0x0, 0x0, 0x2004}, [@IFLA_GSO_MAX_SEGS={0x0, 0x28, 0x39fa}, @IFLA_GROUP={0x8}]}, 0x30}}, 0x0) r4 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r4, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000000)=ANY=[], 0x3c}}, 0x0) r5 = openat$tun(0xffffffffffffff9c, &(0x7f00000004c0), 0x0, 0x0) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000300)={{}, &(0x7f0000000240), &(0x7f0000000280)}, 0x20) ioctl$TUNSETIFF(r5, 0x400454ca, &(0x7f0000000080)={'ipvlan1\x00', 0x200}) socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$mptcp(&(0x7f0000000000), 0xffffffffffffffff) r6 = socket$nl_generic(0x10, 0x3, 0x10) r7 = syz_genetlink_get_family_id$mptcp(&(0x7f00000002c0), 0xffffffffffffffff) sendmsg$MPTCP_PM_CMD_ADD_ADDR(r6, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000440)={&(0x7f0000000200)={0x28, r7, 0x1, 0x0, 0x0, {0x7}, [@MPTCP_PM_ATTR_ADDR={0x14, 0x1, 0x0, 0x1, [@MPTCP_PM_ADDR_ATTR_ID={0x5, 0x2, 0x1}, @MPTCP_PM_ADDR_ATTR_FLAGS={0x8, 0x6, 0x1a}]}]}, 0x28}, 0x1, 0x0, 0x0, 0x80}, 0x8) 55.217981245s ago: executing program 2 (id=2567): bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000080)={&(0x7f0000000000)={{0xeb9f, 0x1, 0x0, 0x18, 0x0, 0x28, 0x28, 0x2, [@array={0x0, 0x0, 0x0, 0x3, 0x0, {0x3, 0x2}}, @int={0x0, 0x0, 0x0, 0x1, 0x5, 0x28, 0x0, 0x0, 0x2}]}}, 0x0, 0x42, 0x0, 0x1}, 0x28) r0 = socket(0x10, 0x803, 0x0) sendmsg$nl_route(0xffffffffffffffff, 0x0, 0x4048844) ioctl$sock_SIOCETHTOOL(r0, 0x8946, &(0x7f00000002c0)={'veth0_to_team\x00', &(0x7f0000000000)=@ethtool_channels={0x3d, 0x0, 0x0, 0x0, 0x0, 0x1, 0x2}}) r1 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r1, &(0x7f0000000100)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000040)={0x14, 0x27, 0x1, 0x70bd2b, 0x25dfdbfc, {0x7}}, 0x14}, 0x1, 0x0, 0x0, 0x10}, 0x4) r2 = socket(0x10, 0x803, 0x0) ioctl$sock_SIOCETHTOOL(r2, 0x8946, &(0x7f0000000140)={'veth0_virt_wifi\x00', &(0x7f0000000040)=@ethtool_channels={0x3d, 0x3, 0x9, 0x0, 0x4, 0x1afa, 0x1, 0x1}}) bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000080)={&(0x7f0000000000)={{0xeb9f, 0x1, 0x0, 0x18, 0x0, 0x28, 0x28, 0x2, [@array={0x0, 0x0, 0x0, 0x3, 0x0, {0x3, 0x2}}, @int={0x0, 0x0, 0x0, 0x1, 0x5, 0x28, 0x0, 0x0, 0x2}]}}, 0x0, 0x42, 0x0, 0x1}, 0x28) (async) socket(0x10, 0x803, 0x0) (async) sendmsg$nl_route(0xffffffffffffffff, 0x0, 0x4048844) (async) ioctl$sock_SIOCETHTOOL(r0, 0x8946, &(0x7f00000002c0)={'veth0_to_team\x00', &(0x7f0000000000)=@ethtool_channels={0x3d, 0x0, 0x0, 0x0, 0x0, 0x1, 0x2}}) (async) socket$nl_generic(0x10, 0x3, 0x10) (async) sendmsg$nl_generic(r1, &(0x7f0000000100)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000040)={0x14, 0x27, 0x1, 0x70bd2b, 0x25dfdbfc, {0x7}}, 0x14}, 0x1, 0x0, 0x0, 0x10}, 0x4) (async) socket(0x10, 0x803, 0x0) (async) ioctl$sock_SIOCETHTOOL(r2, 0x8946, &(0x7f0000000140)={'veth0_virt_wifi\x00', &(0x7f0000000040)=@ethtool_channels={0x3d, 0x3, 0x9, 0x0, 0x4, 0x1afa, 0x1, 0x1}}) (async) 40.390057985s ago: executing program 34 (id=2563): r0 = socket$packet(0x11, 0x3, 0x300) r1 = socket$inet6_sctp(0xa, 0x1, 0x84) r2 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r2, &(0x7f000000c2c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000400)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a28000000000a0101000000005e1affd5020000000900010073797a300000000008000240000000032c000000030a01030000e6ff000000000200"], 0x7c}}, 0x0) sendmsg$NFT_BATCH(r2, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000100)=ANY=[@ANYBLOB="140000001000010000000000000000000004000a98000000060a0b040000000000000000020000006c00048018000180080001006f7366000c000280080001400000000424000180090001006d6574610000000014000280080002400000000c08000340000000042c0001800a0001006c696d69740000001c0002800c00014000000000000000230c00024000000000000000010900010073797a3000000000090002"], 0xc0}}, 0x0) write$cgroup_subtree(0xffffffffffffffff, &(0x7f0000000000)=ANY=[@ANYBLOB="8fedcb7907001175f37538e486dd637f4b22667f2f00db5b686158bbcfe8875a65969ff57b00000000000000000000000000ac1414"], 0xfdef) socketpair$tipc(0x1e, 0x2, 0x0, &(0x7f0000000280)={0xffffffffffffffff}) setsockopt$TIPC_GROUP_JOIN(r3, 0x10f, 0x87, &(0x7f00000002c0)={0x40, 0x0, 0x1}, 0x10) r4 = socket(0x10, 0x2, 0x0) sendmsg$NFT_MSG_GETCHAIN(0xffffffffffffffff, &(0x7f0000000740)={0x0, 0x0, &(0x7f0000000700)={&(0x7f0000000600)={0x14, 0x4, 0xa, 0x201, 0x0, 0x0, {0x0, 0x0, 0xa}}, 0x14}, 0x1, 0x0, 0x0, 0x40}, 0x20000004) setsockopt$netlink_NETLINK_TX_RING(r4, 0x10e, 0xc, &(0x7f0000000080)={0x8, 0x6, 0x2}, 0x10) write(r4, &(0x7f0000000480)="1c0000001a009b8a140000003b00"/28, 0x1c) recvmmsg(r4, &(0x7f0000000ec0), 0x0, 0x2, &(0x7f00000001c0)) r5 = bpf$PROG_LOAD(0x5, &(0x7f0000000740)={0xc, 0x8, &(0x7f0000000d80)=ANY=[@ANYBLOB="1800000000000000000000000000000018020000", @ANYRES32=r1, @ANYBLOB="0000000000000000b703000000000000850000000d000000b70000000000000095"], &(0x7f00000000c0)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x1b, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2}, 0x94) sendmsg$RDMA_NLDEV_CMD_RES_CM_ID_GET(r4, &(0x7f0000000500)={&(0x7f0000000300)={0x10, 0x0, 0x0, 0x800}, 0xc, &(0x7f00000004c0)={&(0x7f0000000340)={0x50, 0x140b, 0x100, 0x70bd28, 0x25dfdbff, "", [@RDMA_NLDEV_ATTR_RES_CM_IDN={0x8, 0x3f, 0x3}, @RDMA_NLDEV_ATTR_RES_CM_IDN={0x8, 0x3f, 0x4}, @RDMA_NLDEV_ATTR_DEV_INDEX={0x8, 0x1, 0x2}, @RDMA_NLDEV_ATTR_RES_CM_IDN={0x8, 0x3f, 0x5}, @RDMA_NLDEV_ATTR_RES_CM_IDN={0x8, 0x3f, 0x4}, @RDMA_NLDEV_ATTR_PORT_INDEX={0x8}, @RDMA_NLDEV_ATTR_PORT_INDEX={0x8, 0x3, 0x4}, @RDMA_NLDEV_ATTR_RES_CM_IDN={0x8, 0x3f, 0x4}]}, 0x50}, 0x1, 0x0, 0x0, 0x800}, 0x4000080) sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f0000000000)={0x0, 0x0, 0x0}, 0x0) r6 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r6, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000280)={0x14, 0x27, 0x301, 0x2270bd24, 0x25dfdbff, {0xd}}, 0x14}, 0x1, 0x0, 0x0, 0x4008}, 0x4044810) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f00000003c0)={r5, 0x3e8, 0xe80, 0x0, &(0x7f0000000000)="c1df07000000d30a298ee68886dd87", 0x0, 0x3ff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4}, 0x50) setsockopt$SO_ATTACH_FILTER(r0, 0x1, 0x1a, &(0x7f0000000240)={0x3, &(0x7f0000000140)=[{0x20, 0x2, 0x81, 0xfffff034}, {0x20, 0x0, 0x8, 0xfffff010}, {0x6, 0xba, 0x2, 0xefff}]}, 0x10) syz_emit_ethernet(0x32, &(0x7f0000000240)=ANY=[@ANYBLOB="aaaaaaaaaaaabbbb8b5cbbbb0800450000a70000000200119078000000000000000000000000010000000000060080000000"], 0x0) ioctl$sock_SIOCGIFINDEX(0xffffffffffffffff, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000001f00)=@newtfilter={0x4c, 0x2c, 0xd27, 0x70bd24, 0x25dfdbfd, {0x0, 0x0, 0x0, r7, {0xfff1, 0xa}, {}, {0x7, 0x2}}, [@filter_kind_options=@f_bpf={{0x8}, {0x20, 0x2, [@TCA_BPF_OPS={{0x6, 0x4, 0x1}, {0xc, 0x5, [{0x6, 0xd, 0x5, 0x4}]}}, @TCA_BPF_CLASSID={0x8, 0x3, {0xd, 0xa}}]}}]}, 0x4c}, 0x1, 0x0, 0x0, 0x8848}, 0x20004804) r8 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r8, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) r10 = socket$packet(0x11, 0x3, 0x300) sendto$packet(r10, &(0x7f00000005c0)="bad330fbc9b55400040000ea0756", 0xe, 0x40, &(0x7f00000001c0)={0x11, 0x8100, r9, 0x1, 0xd8, 0x6, @multicast}, 0x14) ioctl$sock_ipv6_tunnel_SIOCGETTUNNEL(r4, 0x89f0, &(0x7f0000000b00)={'ip6_vti0\x00', &(0x7f0000000a80)={'syztnl0\x00', 0x0, 0x2f, 0x3, 0x40, 0xdd, 0x20, @private2={0xfc, 0x2, '\x00', 0x1}, @empty, 0x7800, 0x7800, 0xbf, 0x9}}) sendmsg$ETHTOOL_MSG_CHANNELS_GET(0xffffffffffffffff, &(0x7f0000000d00)={&(0x7f0000000540)={0x10, 0x0, 0x0, 0x10000000}, 0xc, &(0x7f0000000cc0)={&(0x7f0000000940)=ANY=[@ANYRES8, @ANYRES16=0x0, @ANYBLOB="00042bbd7000fddbdf251100000020000180140002007665746831000000000000000000000008000100", @ANYRES32=0x0, @ANYBLOB="1800018014000200767863616e31000000000000000000001c00018008000100", @ANYRES32=0x0, @ANYBLOB="08000100", @ANYRES32=0x0, @ANYBLOB="08000100", @ANYRES32=0x0, @ANYBLOB="34000180080003000200000014000200766c616e30000000000000000000000014000200697036746e6c30000000000000000000780001801400020076657468305f746f5f627269646765000800030002000000080003000000000008000100", @ANYRES32=r9, @ANYRES32=r3, @ANYRES32=r7, @ANYBLOB="08000100", @ANYRES32=r11, @ANYRESDEC=r4, @ANYRES32=r11, @ANYBLOB="1400020070696d367265673000000000000000000c00018008000100", @ANYRES32=0x0, @ANYBLOB="0c00018008000100", @ANYRES32=0x0, @ANYBLOB="1400018004080001", @ANYRES16=r1, @ANYBLOB="08000100", @ANYRES32=r11, @ANYBLOB], 0x140}, 0x1, 0x0, 0x0, 0x404c000}, 0x20000000) 39.820540392s ago: executing program 35 (id=2567): bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000080)={&(0x7f0000000000)={{0xeb9f, 0x1, 0x0, 0x18, 0x0, 0x28, 0x28, 0x2, [@array={0x0, 0x0, 0x0, 0x3, 0x0, {0x3, 0x2}}, @int={0x0, 0x0, 0x0, 0x1, 0x5, 0x28, 0x0, 0x0, 0x2}]}}, 0x0, 0x42, 0x0, 0x1}, 0x28) r0 = socket(0x10, 0x803, 0x0) sendmsg$nl_route(0xffffffffffffffff, 0x0, 0x4048844) ioctl$sock_SIOCETHTOOL(r0, 0x8946, &(0x7f00000002c0)={'veth0_to_team\x00', &(0x7f0000000000)=@ethtool_channels={0x3d, 0x0, 0x0, 0x0, 0x0, 0x1, 0x2}}) r1 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r1, &(0x7f0000000100)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000040)={0x14, 0x27, 0x1, 0x70bd2b, 0x25dfdbfc, {0x7}}, 0x14}, 0x1, 0x0, 0x0, 0x10}, 0x4) r2 = socket(0x10, 0x803, 0x0) ioctl$sock_SIOCETHTOOL(r2, 0x8946, &(0x7f0000000140)={'veth0_virt_wifi\x00', &(0x7f0000000040)=@ethtool_channels={0x3d, 0x3, 0x9, 0x0, 0x4, 0x1afa, 0x1, 0x1}}) bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000080)={&(0x7f0000000000)={{0xeb9f, 0x1, 0x0, 0x18, 0x0, 0x28, 0x28, 0x2, [@array={0x0, 0x0, 0x0, 0x3, 0x0, {0x3, 0x2}}, @int={0x0, 0x0, 0x0, 0x1, 0x5, 0x28, 0x0, 0x0, 0x2}]}}, 0x0, 0x42, 0x0, 0x1}, 0x28) (async) socket(0x10, 0x803, 0x0) (async) sendmsg$nl_route(0xffffffffffffffff, 0x0, 0x4048844) (async) ioctl$sock_SIOCETHTOOL(r0, 0x8946, &(0x7f00000002c0)={'veth0_to_team\x00', &(0x7f0000000000)=@ethtool_channels={0x3d, 0x0, 0x0, 0x0, 0x0, 0x1, 0x2}}) (async) socket$nl_generic(0x10, 0x3, 0x10) (async) sendmsg$nl_generic(r1, &(0x7f0000000100)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000040)={0x14, 0x27, 0x1, 0x70bd2b, 0x25dfdbfc, {0x7}}, 0x14}, 0x1, 0x0, 0x0, 0x10}, 0x4) (async) socket(0x10, 0x803, 0x0) (async) ioctl$sock_SIOCETHTOOL(r2, 0x8946, &(0x7f0000000140)={'veth0_virt_wifi\x00', &(0x7f0000000040)=@ethtool_channels={0x3d, 0x3, 0x9, 0x0, 0x4, 0x1afa, 0x1, 0x1}}) (async) 10.70506393s ago: executing program 3 (id=2828): r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000380)={&(0x7f00000000c0)=ANY=[@ANYRES64=r0], 0x24}, 0x1, 0x0, 0x0, 0x5}, 0x80) 10.550919634s ago: executing program 3 (id=2830): r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000200)=@base={0xe, 0x4, 0x8, 0x7}, 0x50) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000002c0)={0xc, 0x14, &(0x7f0000000800)=@framed={{0x18, 0x0, 0x0, 0x0, 0x4, 0x0, 0x0, 0x0, 0xaa99}, [@ringbuf_output={{0x18, 0x5, 0x1, 0x0, r0}, {0x7, 0x0, 0xb, 0x8, 0x0, 0x0, 0x80000000}, {0x3, 0x3, 0x3, 0xa, 0x5}, {}, {}, {}, {}, {0x85, 0x0, 0x0, 0x15}}, @printk={@lx, {}, {}, {}, {}, {0x7, 0x0, 0xb, 0x3, 0x0, 0x0, 0x3837}}]}, &(0x7f0000000180)='GPL\x00', 0x0, 0x0, 0x0, 0x40f00, 0x0, '\x00', 0x0, @fallback=0x38, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000d80)={r1, 0x18000000000002a0, 0xe, 0x0, &(0x7f0000000040)="76ea090000000000009ba56a88ca", 0x0, 0x6400, 0x60000000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x300}, 0x50) 10.224900391s ago: executing program 3 (id=2831): socket$nl_generic(0x10, 0x3, 0x10) syz_init_net_socket$bt_hci(0x1f, 0x3, 0x5) close(0x4) syz_open_procfs$namespace(0x0, &(0x7f0000000180)='ns/cgroup\x00') r0 = socket$phonet(0x23, 0x2, 0x1) ioctl$SIOCPNDELRESOURCE(r0, 0x89ef, &(0x7f0000000340)=0x8) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f07ebbeef, 0x10, 0xffffffffffffffff, 0x215e9000) r1 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a) r2 = socket$inet6_mptcp(0xa, 0x1, 0x106) setsockopt$inet6_tcp_TCP_ULP(r2, 0x6, 0x1f, &(0x7f0000000000), 0x3) r3 = socket$inet6_sctp(0xa, 0xf, 0x84) getsockopt$inet_sctp_SCTP_STATUS(0xffffffffffffffff, 0x84, 0xe, &(0x7f00000001c0)={0x0, 0x20000000, 0x4, 0x1cba, 0x8, 0x6, 0x5, 0xe161, {0x0, @in={{0x2, 0x4e21, @rand_addr=0x64010102}}, 0x2, 0x10001, 0xffff, 0x81, 0x2}}, &(0x7f0000000280)=0xb0) getsockopt$inet_sctp6_SCTP_PEER_ADDR_THLDS(r3, 0x84, 0x1f, 0x0, &(0x7f0000000380)) setsockopt$IP6T_SO_SET_ADD_COUNTERS(r1, 0x29, 0x41, &(0x7f00000000c0)={'raw\x00', 0x3, [{}, {}, {}]}, 0x58) r4 = socket$nl_route(0x10, 0x3, 0x0) ioctl$ifreq_SIOCGIFINDEX_team(r4, 0x8933, &(0x7f0000000040)={'team0\x00', 0x0}) r6 = socket$packet(0x11, 0x3, 0x300) setsockopt$SO_ATTACH_FILTER(r6, 0x1, 0x1a, &(0x7f0000000000)={0x3, &(0x7f0000000040)=[{0x20, 0x28, 0x81, 0xfffff034}, {0x20, 0x0, 0x0, 0xfffbf00c}, {0x6, 0x0, 0xb, 0x63552b74}]}, 0x10) syz_emit_ethernet(0x3e, &(0x7f00000000c0)={@broadcast, @empty, @void, {@ipv4={0x800, @icmp={{0x5, 0x4, 0x0, 0x0, 0x27, 0x300, 0x0, 0x0, 0x1, 0x0, @initdev={0xac, 0x1e, 0x0, 0x0}, @local}, @time_exceeded={0x4, 0x0, 0x0, 0x3, 0x0, 0x0, {0x5, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @rand_addr, @broadcast}}}}}}, 0x0) getsockname$packet(0xffffffffffffffff, 0x0, 0x0) sendmsg$nl_route(r4, &(0x7f0000000440)={0x0, 0x0, &(0x7f0000000580)={&(0x7f00000001c0)=ANY=[@ANYBLOB="54000000100003040007057007c78d9292cb0000", @ANYRES32=0x0, @ANYBLOB="00030000000000002c0012800b00010062726964676500001c00028008000500010000000500250001000000050029000000000008000a00", @ANYRES32=r5], 0x54}, 0x1, 0x0, 0x0, 0x4}, 0x8044) socket$pppl2tp(0x18, 0x1, 0x1) r7 = socket$nl_route(0x10, 0x3, 0x0) getsockopt$inet_sctp_SCTP_STREAM_SCHEDULER(r7, 0x84, 0x7b, &(0x7f00000003c0)={0x0, 0x4}, &(0x7f0000000400)=0x8) sendmsg$nl_route(r7, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000080)={0x0}}, 0x0) 9.657762031s ago: executing program 3 (id=2835): r0 = socket$inet_sctp(0x2, 0x5, 0x84) getsockopt$inet_sctp_SCTP_CONTEXT(r0, 0x84, 0x11, &(0x7f0000000000)={0x0, 0x8000d}, &(0x7f0000000040)=0x8) (async) r1 = socket$nl_generic(0x10, 0x3, 0x10) (async) r2 = socket$packet(0x11, 0x2, 0x300) ioctl$sock_SIOCGSKNS(r2, 0x894c, &(0x7f0000000180)=0x3) (async) setsockopt$inet6_int(0xffffffffffffffff, 0x29, 0xb, 0x0, 0x0) (async) ioctl$sock_SIOCGIFVLAN_SET_VLAN_INGRESS_PRIORITY_CMD(0xffffffffffffffff, 0x8982, 0x0) syz_init_net_socket$nfc_raw(0x27, 0x3, 0x0) (async) r3 = socket$unix(0x1, 0x1, 0x0) ioctl$sock_SIOCGIFINDEX(r3, 0x8933, 0x0) (async) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f00000012c0)={0x0, 0x0, 0x0}, 0x0) (async) r4 = bpf$PROG_LOAD(0x5, &(0x7f0000000000)={0x1, 0x8, &(0x7f0000000780)=ANY=[@ANYBLOB="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"], &(0x7f0000000100)='GPL\x00'}, 0x48) (async) r5 = syz_init_net_socket$nfc_raw(0x27, 0x3, 0x0) setsockopt$sock_attach_bpf(r5, 0x1, 0x32, &(0x7f0000000500)=r4, 0x4) (async) r6 = openat$nci(0xffffffffffffff9c, &(0x7f0000000080), 0x2, 0x0) (async) r7 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r8 = syz_genetlink_get_family_id$nfc(&(0x7f0000000100), r7) (async) ioctl$IOCTL_GET_NCIDEV_IDX(r6, 0x0, &(0x7f00000000c0)=0x0) sendmsg$NFC_CMD_DEV_UP(r7, &(0x7f0000000200)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000d80)=ANY=[@ANYBLOB="1c000000", @ANYRES16=r8, @ANYBLOB="010426bd7000f8dbdf250200000008000100", @ANYRES32=r9], 0x1c}}, 0x4008054) ioctl$IOCTL_GET_NCIDEV_IDX(0xffffffffffffffff, 0x0, 0x0) r10 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000200), 0xffffffffffffffff) (async) r11 = socket$nl_netfilter(0x10, 0x3, 0xc) (async) r12 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX_80211(r12, 0x8933, &(0x7f0000000240)={'wlan1\x00'}) (async) clock_gettime(0x7, &(0x7f0000000140)) (async) sendmsg$IPCTNL_MSG_EXP_GET(r11, &(0x7f0000000440)={0x0, 0x0, &(0x7f0000000340)={&(0x7f0000000080)={0x40, 0x1, 0x2, 0x201, 0x0, 0x0, {0xa, 0x0, 0x1}, [@CTA_EXPECT_MASTER={0x2c, 0x1, 0x0, 0x1, [@CTA_TUPLE_PROTO={0xc, 0x2, 0x0, 0x1, {0x5}}, @CTA_TUPLE_ZONE={0x6, 0x3, 0x1, 0x0, 0x4}, @CTA_TUPLE_IP={0x14, 0x1, 0x0, 0x1, @ipv4={{0x8, 0x1, @remote}, {0x8, 0x2, @remote}}}]}]}, 0x40}, 0x1, 0x0, 0x0, 0x40054}, 0x0) (async) ioctl$sock_SIOCGIFINDEX_80211(r1, 0x8933, &(0x7f0000000700)={'wlan1\x00', 0x0}) sendmsg$NL80211_CMD_TRIGGER_SCAN(r1, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000100)=ANY=[@ANYBLOB="80000000", @ANYRES16=r10, @ANYBLOB="050000000000000000002100000008000300", @ANYRES32=r13, @ANYBLOB="10002d800a000000020202020202000004002a0040002d800a"], 0x80}}, 0x0) 9.157016273s ago: executing program 3 (id=2838): r0 = socket(0x10, 0x3, 0x0) setsockopt$netlink_NETLINK_TX_RING(r0, 0x10e, 0xc, &(0x7f0000000040)={0x9, 0xffffffff, 0x4e, 0x567}, 0x10) sendmsg$nl_generic(r0, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000001400)={0x20, 0x12, 0xa01, 0x0, 0xfffffffe, {0x6, 0x0, 0x300}, [@generic="43bca8637ab51224cc"]}, 0x20}, 0x1, 0x0, 0x0, 0xc002}, 0x0) r1 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r1, &(0x7f0000000e00)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000200)=ANY=[@ANYBLOB="2400000019000100040000000000000080200009000400050000000008000300038e"], 0x24}, 0x1, 0x0, 0x0, 0x80}, 0x0) 8.776180638s ago: executing program 3 (id=2841): r0 = socket$nl_route(0x10, 0x3, 0x0) ioctl$XFS_IOC_ATTRMULTI_BY_HANDLE(r0, 0x4048587b, &(0x7f0000002700)={{r0, &(0x7f0000000100)='(]]\x00', 0xb001, &(0x7f0000000140)={@align=0x7, {0xfff9, 0x20, 0x11, 0x7219}}, 0xfffffffa, &(0x7f0000000180), &(0x7f00000001c0)=0x1000}, 0x7, &(0x7f0000002600)=[{0x3, 0x400, &(0x7f0000000200)='].-\x00', &(0x7f00000003c0)="2ced957270460f3d9d249f76e65518e6dec4e3ecc6e4ca46a59d3aab8c89477a303eed7a7d13ada9f3e7f895b2e0cd368a1d68979384ce2994f6f2c95b769fa169003838ae3156cd14e751ddc698e17263b387e54ec277e17927927ae6b7ad13bea3feb34f5af899556f7d0190601eb5c402d8c9cdcbd56c05e54870b8f6252ac85b8622359548c5370757280546309a0f56f3f928e1741550667bce564599ddfbcfaaadbda393a46815", 0xaa}, {0x3, 0x2, &(0x7f0000000480)='wpan0\x00', &(0x7f00000004c0)="51fdab1de4641d13d1050358966292664f9eb8610eadf31099a4597a88255f8b625b4537f842ceccaf9977d0252c4cda6d216635406663736caa7ccffb0796ab78620bd0eba0609348e9082f572394135187c48e1dee7d0590c4061b21fb6ba0711d5caee46d9071", 0x68, 0x8}, {0x2, 0x7, &(0x7f0000000540)='netdevsim0\x00', &(0x7f0000001240)="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", 0xffc}, {0x1, 0x3dd, &(0x7f0000002240)='wpan0\x00', 0x0}, {0x1, 0x8, &(0x7f0000002300)='{\x00', &(0x7f0000002340)="20efb8f927157db83ea96d3a4e56fc527bb7719c18f0c91e640205626f2f83345a21e306f4a0203b90ae7db0db05b6da39d2126bccbda88f048ffb7d261cf3862a53772e33e5d1c203736b687c6f4734a92f60bea7f5a8211b40eec32d39f1dee3d996dc2118f4556741dd32a45ff362aaa38a71524c76e4204a8b6c1c980df34a7c55e8292a72f10a08a0a657872dae00f31afbc3f0b2c84051957a68d178536d034f41fc741861e4dfc6d5e18fab7ba61dc8beb2dd9c7c0b70723e0b5a888816fce9ef33bff6bf505bd21c3d185a7e9aead7d1084ea840cbd38cf5692305db89f6daea586262c101cc9a99", 0xec, 0x8}, {0x2, 0x7fff, &(0x7f0000002440)='netdevsim0\x00', &(0x7f0000002480)="bfcfc80ce713a7db8095be9b3cff323ffe5205fafd3e6aebcfed29b00327e1696e42a60ef01337162e32cdf4ff07734d638460ad44685465a1d26584085f511559323a591645901b46dead06252cafa8fa61d96b508c78fae1bce146c9935b98689d0e1439ff7c9d1a10e88eb450b89a759718dc0dd9d03f4a646ef0", 0x7c}, {0x3, 0x3ff, &(0x7f0000002500)='wpan0\x00', &(0x7f0000002540)="6ff53f260c46fe697ff57a9b6a7e70227bcedd5c39051066c2a1ebf7c0fa29aa2def2ba3a563e9c9b26abb8439c9eee6549c902ebdb7bd0fe12539a1b632c3c54b04c82490ffa2ffa06c7f8826979cc1e35d1ff49b814a3ed74b6ae32101718c1d3a5fb42d8b64bb6795797f83e4690298716bb6cba0e59c0df114d413fe1986c33833158e2b5d8ea95300f8f353bd0d4d6f5cefdeceaa46215d320cb1ba", 0x9e, 0xa}]}) sendmsg$qrtr(r1, &(0x7f0000002880)={0x0, 0x0, &(0x7f0000002840)=[{0xffffffffffffffff}, {&(0x7f0000002780)="f7167cbd840ffc60bf9cdfcd5ecafd1970c1519cb9ec3f3a2127e3a253e020ee19cf97b35b0181cd45b7a44ef62f9dc5e5d64fda3a2704021de0a01f7358be378512bb599d0c7c2e1461eec8144af55c57027c879c31c30d1b65dbbd599c1a92f51f929e3b79e43a42f8ee06d3fbe06aaf770dbcf8ac060ee3bc2be58327629c0cd3043a828501bd08d1fd626c6d4ddab64734b92f090986c546842d234f5cd33e4e447a7829cc7192778828cc", 0xad}], 0x2, 0x0, 0x0, 0x1}, 0x38) sendmsg$nl_route(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000000)=ANY=[@ANYBLOB="2c0000001000010828bd70000000000000000000", @ANYRES32=0x0, @ANYBLOB="000b00000420040004002b8008001b0000000000"], 0x2c}, 0x1, 0x0, 0x0, 0x200068a0}, 0x400c080) r2 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r2, &(0x7f0000000100)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000040)={0x14, 0x27, 0x1, 0x70bd2b, 0x25dfdbfc, {0x7}}, 0x14}, 0x1, 0x0, 0x0, 0x10}, 0x4) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000240)={0xffffffffffffffff, 0xffffffffffffffff}) r4 = bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f00000000c0)=ANY=[@ANYBLOB="0200000004000000080000000100000080000000", @ANYRES32=0x0, @ANYBLOB='\x00'/20, @ANYRES32=0x0, @ANYRES32=0x0, @ANYBLOB='\x00'/28], 0x50) r5 = bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f00000007c0)=ANY=[@ANYBLOB], 0x48) bpf$PROG_LOAD(0x5, &(0x7f0000000200)={0x18, 0x1c, &(0x7f0000000500)=ANY=[@ANYBLOB="69d53f82b64dfc77000000000040000018110000", @ANYRES32=r5, @ANYBLOB="0000000000000000b702000014000000b7030000000000008500000005000000bca900000000000035090100000000009500000000000000b7020000000000007baaf8ff00000000b6090000e4b00000dbaaf8ffa0000000bf8600000000000007080000f8ffffffbfa400000000000007040000f0ffffffc702000008000000182200", @ANYRES32=r4, @ANYBLOB="0000000000000000b7050000080000004608f0ff76000000bf9800000000000056080000020000008500000007000000b7000000000000009500000000000000"], &(0x7f0000001140)='GPL\x00', 0x2, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x6, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffc}, 0x94) ioctl$sock_SIOCETHTOOL(r3, 0x8946, &(0x7f0000000080)={'netdevsim0\x00', &(0x7f0000000380)=@ethtool_channels={0x3c, 0x1, 0x9, 0xb8f8, 0x54, 0x2, 0x836e, 0x3, 0x4}}) r6 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r7 = syz_genetlink_get_family_id$ieee802154(&(0x7f0000000000), r6) sendmsg$IEEE802154_LLSEC_ADD_DEVKEY(r6, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000001200)={&(0x7f0000000a40)={0x2c, r7, 0x607, 0x70bd2b, 0x25dfdbfc, {}, [@IEEE802154_ATTR_DEV_NAME={0xa, 0x1, 'wpan0\x00'}, @IEEE802154_ATTR_HW_ADDR={0xc, 0x5, {0xaaaaaaaaaaaa0102}}]}, 0x2c}}, 0x20048840) socketpair(0x23, 0x3, 0x18, &(0x7f0000000000)={0xffffffffffffffff}) r9 = socket$alg(0x26, 0x5, 0x0) bind$alg(r9, &(0x7f00000004c0)={0x26, 'skcipher\x00', 0x0, 0x0, 'ecb-twofish-3way\x00'}, 0x58) r10 = accept4(r9, 0x0, 0x0, 0x800) recvmmsg(r10, &(0x7f00000014c0)=[{{0x0, 0x0, &(0x7f0000000480)}, 0x4}], 0x1, 0x0, 0x0) mmap(&(0x7f0000001000/0x3000)=nil, 0x3000, 0x8, 0x32, 0xffffffffffffffff, 0x0) r11 = bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f0000000540)=ANY=[@ANYBLOB="1b0000000000000000000000000004"], 0x50) syz_emit_ethernet(0xfdef, &(0x7f0000000140)={@random="5b1a033f2511", @remote, @void, {@ipv4={0x800, @udp={{0x6, 0x4, 0x0, 0x0, 0x4578, 0x0, 0x0, 0x0, 0x11, 0x0, @empty, @empty}, {0x0, 0x0, 0x64, 0x0, @wg=@response={0x10, 0x0, 0x0, "fdcdae25a7a296872a8a5290e48e30acf8afc7e67d70a62c979cefa10a0028bd", "ae0000000000000000e400", {"35f3c07eeca4a20a9858ac1500", "63081fe8fe001a08ed082ad7121d696f"}}}}}}}, 0x0) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000001c0)={0x18, 0x1f, &(0x7f0000000380)=@ringbuf={{0x18, 0x0, 0x0, 0x0, 0x6, 0x0, 0x0, 0x0, 0x6}, {{0x18, 0x1, 0x1, 0x0, r11}, {}, {0x7, 0x0, 0xb, 0x3, 0x0, 0x0, 0xfeff}, {0x85, 0x0, 0x0, 0x86}}, {{0x5, 0x0, 0x5, 0x9, 0x0, 0x1, 0x80000000}}, [@printk={@x, {}, {}, {}, {}, {0x7, 0x0, 0xb, 0x3, 0x0, 0x0, 0xfffffffb}}, @printk={@i, {}, {0x7, 0x1, 0xb, 0x1, 0xa, 0x20}, {}, {}, {0x7, 0x0, 0xb, 0x3, 0x0, 0x0, 0xf}}], {{}, {0x7, 0x0, 0xb, 0x2, 0x0, 0x0, 0x3}, {0x85, 0x0, 0x0, 0x84}, {0x7, 0x0, 0xb, 0x0, 0x0, 0x0, 0x500}}}, &(0x7f0000000040)='syzkaller\x00', 0x7, 0xff8, &(0x7f0000000780)=""/4088, 0x40f00, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x6}, 0x94) bpf$MAP_LOOKUP_ELEM(0x1, &(0x7f0000000740)={0x1, &(0x7f0000000600)="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", &(0x7f0000000700)=""/64}, 0x20) getpeername$packet(r8, 0x0, &(0x7f0000000040)) sendmsg$IPSET_CMD_LIST(r8, &(0x7f0000000340)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x1000000}, 0xc, &(0x7f0000000300)={&(0x7f0000000280)={0x1c, 0x7, 0x6, 0x401, 0x0, 0x0, {0x0, 0x0, 0x9}, [@IPSET_ATTR_FLAGS={0x8}]}, 0x1c}, 0x1, 0x0, 0x0, 0x24004000}, 0x800) 3.717996519s ago: executing program 5 (id=2881): r0 = bpf$BPF_BTF_LOAD(0x12, &(0x7f00000003c0)={&(0x7f0000000180)=ANY=[@ANYBLOB="9feb010018000000000000000c0000000c000000020000000000000000000004"], 0x0, 0x26}, 0x20) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000140)={0x1e, 0x4, &(0x7f0000000000)=ANY=[@ANYBLOB="1800000010000000000000000000000071120e31ec0000009500000000000000"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x24}, 0x94) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0x3, &(0x7f0000000d40)=ANY=[@ANYBLOB="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"], &(0x7f0000000080)='GPL\x00', 0x0, 0x1f6, &(0x7f00000002c0)=""/168, 0x0, 0x0, '\x00', 0x0, @fallback, r0, 0x8, 0x0, 0x0, 0x10, &(0x7f0000000200), 0x1, 0x0, 0xffffffffffffffff, 0xf5010000}, 0x6d) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000680)={0xffffffffffffffff, 0xffffffffffffffff}) setsockopt$sock_attach_bpf(r1, 0x1, 0x4c, &(0x7f0000000000), 0x4) recvmsg$unix(r1, &(0x7f00000002c0)={0x0, 0x0, 0x0, 0x0, &(0x7f0000000300)=[@rights={{0x14, 0x1, 0x1, [0xffffffffffffffff]}}], 0x18}, 0x20) sendmsg$nl_generic(0xffffffffffffffff, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000080)=ANY=[@ANYBLOB="3800000041000701fefffffffeffffff017c0000040042800c00018006000600800a000014000280"], 0x38}, 0x1, 0x0, 0x0, 0x4048011}, 0xc000) r3 = socket$nl_route(0x10, 0x3, 0x0) r4 = socket$alg(0x26, 0x5, 0x0) bind$alg(r4, &(0x7f0000000040)={0x26, 'skcipher\x00', 0x0, 0x0, 'xts(aes)\x00'}, 0x58) r5 = accept4$alg(r4, 0x0, 0x0, 0x0) read$alg(r5, &(0x7f0000003180)=""/4116, 0x1014) socket$nl_route(0x10, 0x3, 0x0) r6 = socket$nl_generic(0x10, 0x3, 0x10) r7 = syz_genetlink_get_family_id$mptcp(&(0x7f0000000000), 0xffffffffffffffff) sendmsg$MPTCP_PM_CMD_ADD_ADDR(r6, &(0x7f0000000400)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000180)={0x30, r7, 0x1, 0x0, 0x0, {}, [@MPTCP_PM_ATTR_ADDR={0x1c, 0x1, 0x0, 0x1, [@MPTCP_PM_ADDR_ATTR_FAMILY={0x6, 0x1, 0x2}, @MPTCP_PM_ADDR_ATTR_ADDR4={0x8, 0x3, @local}, @MPTCP_PM_ADDR_ATTR_FLAGS={0x8, 0x6, 0x6}]}]}, 0x30}, 0x1, 0x0, 0x0, 0xaa34a4cfdf933201}, 0x10) r8 = socket$inet6_tcp(0xa, 0x1, 0x0) close(r8) r9 = socket$inet6_mptcp(0xa, 0x1, 0x106) bind$inet6(r8, &(0x7f0000000040)={0xa, 0x4e22, 0x8, @empty, 0x2}, 0x1c) listen(r9, 0x6f6) r10 = socket$inet_mptcp(0x2, 0x1, 0x106) connect$inet(r10, &(0x7f0000000000)={0x2, 0x4e22, @dev={0xac, 0x14, 0x14, 0x2d}}, 0x10) syz_genetlink_get_family_id$nl80211(&(0x7f00000000c0), r10) r11 = socket$nl_generic(0x10, 0x3, 0x10) r12 = syz_genetlink_get_family_id$mptcp(&(0x7f00000002c0), 0xffffffffffffffff) sendmsg$MPTCP_PM_CMD_ADD_ADDR(r11, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000440)={&(0x7f0000000200)={0x20, r12, 0x1, 0x0, 0x1000000, {0x7}, [@MPTCP_PM_ATTR_ADDR={0xc, 0x1, 0x0, 0x1, [@MPTCP_PM_ADDR_ATTR_ID={0x5, 0x2, 0x1}]}]}, 0x20}, 0x1, 0x0, 0x0, 0x80}, 0x8) sendmsg$nl_route(r3, &(0x7f00000001c0)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000080)=ANY=[@ANYBLOB="2800000076000d0b2000ed00ffdbdf25030000000100000008000a0002000000080005"], 0x28}}, 0x0) ioctl$TUNSETNOCSUM(r2, 0xc040ff0b, 0x200000000013) getsockname$packet(r2, &(0x7f0000000240)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000280)=0x14) 2.691588306s ago: executing program 5 (id=2886): bpf$BPF_BTF_LOAD(0x12, 0x0, 0x0) getsockopt$bt_l2cap_L2CAP_OPTIONS(0xffffffffffffffff, 0x6, 0x1, &(0x7f00000000c0), &(0x7f0000000280)=0xc) r0 = socket$netlink(0x10, 0x3, 0x10) bind$netlink(r0, &(0x7f0000514ff4)={0x10, 0x0, 0x0, 0x2ffffffff}, 0xc) r1 = socket$nl_generic(0x10, 0x3, 0x10) r2 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000240), 0xffffffffffffffff) r3 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX_80211(r3, 0x8933, &(0x7f00000013c0)={'wlan1\x00', 0x0}) sendmsg$NL80211_CMD_SET_POWER_SAVE(r1, &(0x7f00000004c0)={0x0, 0x0, &(0x7f0000000480)={&(0x7f0000000140)={0x34, r2, 0x1, 0x70bd2d, 0x25dfdbff, {{}, {@val={0x8, 0x3, r4}, @void}}, [@NL80211_ATTR_PS_STATE={0x8}, @NL80211_ATTR_PS_STATE={0x8}, @NL80211_ATTR_PS_STATE={0x8}]}, 0x34}, 0x1, 0x0, 0x0, 0x804}, 0x4c880) r5 = socket$netlink(0x10, 0x3, 0x10) bind$netlink(r5, &(0x7f0000514ff4)={0x10, 0x0, 0x0, 0x2ffffffff}, 0xc) setsockopt$sock_int(r5, 0x1, 0x8, &(0x7f0000000300), 0x4) syz_genetlink_get_family_id$ethtool(&(0x7f0000000040), r5) syz_genetlink_get_family_id$nl80211(&(0x7f0000000180), r5) r6 = socket$nl_route(0x10, 0x3, 0x0) setsockopt$RXRPC_UPGRADEABLE_SERVICE(0xffffffffffffffff, 0x110, 0x5, &(0x7f0000000080)=[0x2, 0x4], 0x2) ioctl$sock_SIOCGIFINDEX(r6, 0x8933, &(0x7f0000000040)={'geneve0\x00', 0x0}) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000240)={&(0x7f00000001c0)=ANY=[@ANYBLOB="4800000010000104000000000007000000000000", @ANYBLOB="b9dcecaaa15d51db06c26fdb2a62229f4c2d52a829e81134098725ee39527785975adecf4b34f7a6057017ae667fff52dcf4009f50eed4e708a292195adf7608e4499c4df83ea42e04fbbbba90779d8f932b35dae034239d03"], 0x48}, 0x1, 0x0, 0x0, 0x4c0c0}, 0x0) sendmsg$nl_route(r6, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000500)=@newlink={0xbc, 0x10, 0x401, 0x70bd28, 0x1, {0x0, 0x0, 0x0, 0x0, 0x8, 0x10002}, [@IFLA_LINKINFO={0x80, 0x12, 0x0, 0x1, @ip6vti={{0xb}, {0x70, 0x2, 0x0, 0x1, [@vti_common_policy=[@IFLA_VTI_IKEY={0x8, 0x2, 0xfaeb}], @vti_common_policy=[@IFLA_VTI_LINK={0x8, 0x1, r7}, @IFLA_VTI_LINK={0x8, 0x1, r7}, @IFLA_VTI_IKEY={0x8}, @IFLA_VTI_FWMARK={0x8, 0x6, 0x3}, @IFLA_VTI_OKEY={0x8, 0x3, 0x2a}], @IFLA_VTI_LOCAL={0x14, 0x4, @rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x02'}, @IFLA_VTI_LOCAL={0x14, 0x4, @initdev={0xfe, 0x88, '\x00', 0x1, 0x0}}, @IFLA_VTI_REMOTE={0x14, 0x5, @local}]}}}, @IFLA_LINK={0x8, 0x5, r7}, @IFLA_IFNAME={0x14, 0x3, 'netpci0\x00'}]}, 0xbc}, 0x1, 0x0, 0x0, 0x240008c4}, 0x20008004) 2.532835654s ago: executing program 1 (id=2888): r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000200)=@base={0xe, 0x4, 0x8, 0x7}, 0x50) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000002c0)={0xc, 0x14, &(0x7f0000000800)=@framed={{0x18, 0x0, 0x0, 0x0, 0x4, 0x0, 0x0, 0x0, 0xaa99}, [@ringbuf_output={{0x18, 0x5, 0x1, 0x0, r0}, {0x7, 0x0, 0xb, 0x8, 0x0, 0x0, 0x80000000}, {0x3, 0x3, 0x3, 0xa, 0x5}, {}, {}, {}, {}, {0x85, 0x0, 0x0, 0x15}}, @printk={@lx, {}, {}, {}, {}, {0x7, 0x0, 0xb, 0x3, 0x0, 0x0, 0x3837}}]}, &(0x7f0000000180)='GPL\x00', 0x0, 0x0, 0x0, 0x40f00, 0x0, '\x00', 0x0, @fallback=0x38, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000d80)={r1, 0x18000000000002a0, 0xe, 0x0, &(0x7f0000000040)="76ea090000000000009ba56a88ca", 0x0, 0x6400, 0x60000000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1000000}, 0x50) 2.422819743s ago: executing program 1 (id=2890): r0 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$ifreq_SIOCGIFINDEX_batadv_mesh(r0, 0x8933, &(0x7f0000000140)={'batadv0\x00', 0x0}) r2 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r2, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000300)=@newtfilter={0x24, 0x11, 0x1, 0x691522eb, 0xf0ffffff, {0x0, 0x0, 0x74, r1, {0x10, 0x7}, {}, {0x5}}}, 0x24}, 0x1, 0xf0ffffffffffff, 0x0, 0x80}, 0x0) r3 = socket$kcm(0x29, 0x2, 0x0) r4 = bpf$PROG_LOAD(0x5, &(0x7f0000000080)={0x1, 0x5, &(0x7f0000001dc0)=ANY=[@ANYBLOB="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"], &(0x7f0000000140)='GPL\x00'}, 0x48) r5 = socket$kcm(0x2, 0x1, 0x0) sendmsg$inet(r5, &(0x7f0000000fc0)={&(0x7f0000000000)={0x2, 0x4001, @remote}, 0x10, 0x0}, 0x20000811) ioctl$sock_kcm_SIOCKCMATTACH(r3, 0x89e0, &(0x7f0000000040)={r5, r4}) r6 = openat$tun(0xffffffffffffff9c, &(0x7f0000000100), 0x0, 0x0) ioctl$TUNSETIFF(r6, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x2}) write$tun(r6, &(0x7f0000002800)={@void, @void, @ipv4=@igmp={{0x6, 0x4, 0x3, 0x7, 0x1020, 0x66, 0x0, 0xab, 0x2, 0x0, @remote, @remote, {[@noop]}}, {0x22, 0x0, 0x0, @remote, "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"}}}, 0x1020) clock_gettime(0x0, &(0x7f00000001c0)={0x0, 0x0}) setsockopt$sock_timeval(r0, 0x1, 0x42, &(0x7f0000000200)={r7, r8/1000+10000}, 0x10) r9 = socket$inet_udp(0x2, 0x2, 0x0) bind$inet(r9, &(0x7f0000000100)={0x2, 0x0, @dev={0xac, 0x14, 0x14, 0x13}}, 0x10) connect$inet(r9, &(0x7f0000000040)={0x2, 0x0, @broadcast}, 0x10) setsockopt$sock_int(r5, 0x1, 0x20, &(0x7f0000000180)=0x1c4, 0x4) r10 = syz_genetlink_get_family_id$tipc2(&(0x7f0000000040), r0) sendmsg$TIPC_NL_NODE_GET(r0, &(0x7f0000000580)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x20}, 0xc, &(0x7f0000000540)={&(0x7f0000000340)={0x1fc, r10, 0x400, 0x70bd2c, 0x25dfdbfd, {}, [@TIPC_NLA_NET={0x1c, 0x7, 0x0, 0x1, [@TIPC_NLA_NET_ADDR={0x8, 0x2, 0xf}, @TIPC_NLA_NET_ADDR={0x8, 0x2, 0x5}, @TIPC_NLA_NET_ID={0x8, 0x1, 0x5bfeec08}]}, @TIPC_NLA_NET={0x14, 0x7, 0x0, 0x1, [@TIPC_NLA_NET_ADDR={0x8, 0x2, 0x9}, @TIPC_NLA_NET_ID={0x8, 0x1, 0x10000}]}, @TIPC_NLA_MEDIA={0x20, 0x5, 0x0, 0x1, [@TIPC_NLA_MEDIA_NAME={0x8, 0x1, 'udp\x00'}, @TIPC_NLA_MEDIA_PROP={0x14, 0x2, 0x0, 0x1, [@TIPC_NLA_PROP_TOL={0x8, 0x2, 0x9}, @TIPC_NLA_PROP_TOL={0x8, 0x2, 0x5}]}]}, @TIPC_NLA_LINK={0xf0, 0x4, 0x0, 0x1, [@TIPC_NLA_LINK_PROP={0x1c, 0x7, 0x0, 0x1, [@TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x13}, @TIPC_NLA_PROP_MTU={0x8, 0x4, 0x400}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x2}]}, @TIPC_NLA_LINK_PROP={0x3c, 0x7, 0x0, 0x1, [@TIPC_NLA_PROP_WIN={0x8, 0x3, 0x400}, @TIPC_NLA_PROP_MTU={0x8, 0x4, 0x3}, @TIPC_NLA_PROP_TOL={0x8, 0x2, 0x7}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x18}, @TIPC_NLA_PROP_WIN={0x8, 0x3, 0xa}, @TIPC_NLA_PROP_MTU={0x8, 0x4, 0x239}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x16}]}, @TIPC_NLA_LINK_NAME={0x13, 0x1, 'broadcast-link\x00'}, @TIPC_NLA_LINK_PROP={0x2c, 0x7, 0x0, 0x1, [@TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x14}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x1e}, @TIPC_NLA_PROP_TOL={0x8, 0x2, 0x81}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x1b}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x12}]}, @TIPC_NLA_LINK_PROP={0x14, 0x7, 0x0, 0x1, [@TIPC_NLA_PROP_MTU={0x8, 0x4, 0x5}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0xa}]}, @TIPC_NLA_LINK_PROP={0x14, 0x7, 0x0, 0x1, [@TIPC_NLA_PROP_TOL={0x8, 0x2, 0xfffffffd}, @TIPC_NLA_PROP_TOL={0x8, 0x2, 0x2}]}, @TIPC_NLA_LINK_NAME={0x9, 0x1, 'syz1\x00'}, @TIPC_NLA_LINK_NAME={0x13, 0x1, 'broadcast-link\x00'}, @TIPC_NLA_LINK_PROP={0xc, 0x7, 0x0, 0x1, [@TIPC_NLA_PROP_WIN={0x8, 0x3, 0x7}]}]}, @TIPC_NLA_BEARER={0x44, 0x1, 0x0, 0x1, [@TIPC_NLA_BEARER_NAME={0x13, 0x1, @l2={'eth', 0x3a, 'syzkaller0\x00'}}, @TIPC_NLA_BEARER_UDP_OPTS={0x2c, 0x4, {{0x14, 0x1, @in={0x2, 0x4e23, @broadcast}}, {0x14, 0x2, @in={0x2, 0x4e22, @dev={0xac, 0x14, 0x14, 0x30}}}}}]}, @TIPC_NLA_NET={0x14, 0x7, 0x0, 0x1, [@TIPC_NLA_NET_ID={0x8, 0x1, 0x8}, @TIPC_NLA_NET_ID={0x8, 0x1, 0x2}]}, @TIPC_NLA_SOCK={0x14, 0x2, 0x0, 0x1, [@TIPC_NLA_SOCK_REF={0x8, 0x2, 0xb}, @TIPC_NLA_SOCK_REF={0x8, 0x2, 0x7}]}, @TIPC_NLA_PUBL={0x3c, 0x3, 0x0, 0x1, [@TIPC_NLA_PUBL_LOWER={0x8, 0x2, 0xfffffffc}, @TIPC_NLA_PUBL_UPPER={0x8, 0x3, 0x9}, @TIPC_NLA_PUBL_UPPER={0x8, 0x3, 0x5}, @TIPC_NLA_PUBL_TYPE={0x8, 0x1, 0x5}, @TIPC_NLA_PUBL_TYPE={0x8, 0x1, 0x6}, @TIPC_NLA_PUBL_UPPER={0x8, 0x3, 0xb}, @TIPC_NLA_PUBL_UPPER={0x8, 0x3, 0x3d5}]}]}, 0x1fc}, 0x1, 0x0, 0x0, 0x4c000}, 0x4004881) 1.970758796s ago: executing program 7 (id=2892): r0 = socket$inet_udp(0x2, 0x2, 0x0) setsockopt$inet_int(r0, 0x0, 0x17, &(0x7f0000000440)=0xcd, 0x4) setsockopt$inet_int(r0, 0x0, 0x17, &(0x7f0000000040)=0xc8, 0x4) r1 = socket$nl_route(0x10, 0x3, 0x0) close(r1) r2 = openat$tun(0xffffffffffffff9c, &(0x7f0000000000), 0x40241, 0x0) ioctl$TUNSETIFF(r2, 0x400454ca, &(0x7f0000000200)={'syzkaller1\x00', 0xc201}) r3 = socket$kcm(0x2, 0xa, 0x2) ioctl$SIOCSIFHWADDR(r3, 0x8914, &(0x7f0000000180)={'syzkaller1\x00', @link_local}) socket(0x11, 0x3, 0x8) write$tun(r2, &(0x7f00000024c0)={@val={0x0, 0x800}, @val={0x0, 0x0, 0x3}, @ipv4=@icmp={{0x9, 0x4, 0x1, 0x16, 0x2c, 0x65, 0x0, 0x4, 0x1, 0x0, @remote, @broadcast, {[@generic={0x94, 0xf, "f00c8e76d0966f9a2b2407c08a"}]}}, @address_reply={0x12, 0x0, 0x0, 0xffff}}}, 0xff04) sendmsg$nl_route(r1, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000a40)=@newlink={0x3c, 0x10, 0x403, 0x70bd29, 0x0, {0x0, 0x0, 0x74, 0x0, 0x25236, 0x4010}, [@IFLA_LINKINFO={0x1c, 0x12, 0x0, 0x1, @bridge={{0xb}, {0xc, 0x2, 0x0, 0x1, [@IFLA_BR_VLAN_DEFAULT_PVID={0x6, 0x27, 0x1}]}}}]}, 0x3c}, 0x1, 0x0, 0x0, 0x4000}, 0x0) r4 = bpf$PROG_LOAD(0x5, &(0x7f0000000740)={0x6, 0x5, &(0x7f0000000100)=ANY=[@ANYBLOB="180200000a0000000000000003000000850000005000000085000000d000000095"], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x44, '\x00', 0x0, @xdp=0x25, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x101}, 0x94) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000600)={r4, 0x0, 0x2107, 0x0, &(0x7f0000000100), 0x0, 0x1008, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x9}, 0x50) r5 = socket$l2tp6(0xa, 0x2, 0x73) r6 = socket(0x10, 0x803, 0x0) ioctl$sock_SIOCGIFINDEX(r6, 0x8933, &(0x7f0000000400)={'veth1_to_bond\x00', 0x0}) sendmsg$nl_route_sched(r6, &(0x7f00000012c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000180)=@newqdisc={0x38, 0x24, 0x4ee4e6a52ff56541, 0x70bd25, 0x25dfdbfe, {0x0, 0x0, 0x0, r7, {0x0, 0xffe1}, {0xffff, 0xffff}, {0xffe0, 0xfff3}}, [@qdisc_kind_options=@q_multiq={{0xb}, {0x8, 0x2, {0x6, 0x2}}}]}, 0x38}}, 0xc840) sendmsg$nl_route_sched(r6, &(0x7f0000006040)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000280)=@newtfilter={0x24, 0x2c, 0xd2b, 0x70bd2b, 0x25dfdbfb, {0x0, 0x0, 0x0, r7, {0x6, 0xf}, {0x0, 0x2}, {0x7, 0xfff1}}}, 0x24}}, 0x24040084) ioctl$sock_inet6_SIOCADDRT(r5, 0x890b, &(0x7f0000000000)={@rand_addr=' \x01\x00', @ipv4={'\x00', '\xff\xff', @remote}, @private1, 0x10000, 0x5, 0x4, 0x0, 0x6, 0x40000, r7}) 1.774020577s ago: executing program 1 (id=2894): r0 = socket(0x2b, 0x1, 0x1) setsockopt$inet6_tcp_TCP_REPAIR(r0, 0x6, 0x13, &(0x7f0000000000)=0x1, 0x4) connect$inet6(r0, &(0x7f00000001c0)={0xa, 0x4e1f, 0x2, @ipv4={'\x00', '\xff\xff', @local}, 0x1}, 0x1c) r1 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="0e000000040000000800000005"], 0x48) r2 = bpf$PROG_LOAD(0x5, &(0x7f0000006080)={0x6, 0xc, &(0x7f00000001c0)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r1, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bc82000000000000a6020000f8ffffffb7030000080000547d03000000000000850000003300000095"], &(0x7f0000000780)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x28, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r3 = socket$inet_tcp(0x2, 0x1, 0x0) r4 = bpf$MAP_CREATE_TAIL_CALL(0x0, &(0x7f0000000740)={0x3, 0x4, 0x4, 0xa, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0}, 0x48) r5 = bpf$PROG_LOAD(0x5, &(0x7f0000000880)={0x3, 0xb, &(0x7f0000000240)=@framed={{0x18, 0x6}, [@printk={@lld, {}, {}, {}, {}, {0x7, 0x0, 0xb, 0x3, 0x0, 0x0, 0x1000}}]}, &(0x7f0000000980)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @sched_cls, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000200)={{r4}, &(0x7f0000000180), &(0x7f00000001c0)=r5}, 0x20) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000100)={{r4}, &(0x7f0000000080), &(0x7f00000000c0)=r5}, 0x20) ioctl$sock_SIOCGIFINDEX(r3, 0x8933, &(0x7f0000000180)={'syz_tun\x00', 0x0}) bpf$BPF_LINK_CREATE_XDP(0x1c, &(0x7f00000005c0)={r2, r6, 0x25, 0x0, @void}, 0x10) syz_emit_ethernet(0x36, &(0x7f00000001c0)={@local, @local, @void, {@ipv6={0x86dd, @generic={0x6, 0x6, "540500", 0x0, 0x6c, 0x0, @local, @local}}}}, 0x0) connect$inet6(r0, &(0x7f0000000080)={0xa, 0x4e20, 0x0, @initdev={0xfe, 0x88, '\x00', 0x0, 0x0}, 0x5}, 0x1c) setsockopt$inet6_tcp_int(r0, 0x6, 0x2, &(0x7f00000000c0)=0x81, 0x4) 1.648958949s ago: executing program 5 (id=2895): r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$ieee802154(&(0x7f0000000380), r0) sendmsg$IEEE802154_ADD_IFACE(r0, &(0x7f0000000480)={0x0, 0x0, &(0x7f0000000440)={&(0x7f0000000000)=ANY=[@ANYBLOB="df81a25e7d0c0a07000000eac3e563f9723940faacf8b3bef2aee6d3b0d84a67b1db1d341728c0dbdc0c808200000000000000000000000000000055020000000000000000", @ANYRES16=r1, @ANYBLOB="01002bbd7000fed3df2521000000"], 0x14}, 0x1, 0x0, 0x0, 0x20048855}, 0x200408c0) 1.562200372s ago: executing program 7 (id=2897): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_CREATE(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f00000044c0)={&(0x7f0000000180)={0x5c, 0x2, 0x6, 0x801, 0x0, 0x0, {0x7, 0x0, 0x1}, [@IPSET_ATTR_DATA={0xc, 0x7, 0x0, 0x1, [@IPSET_ATTR_BUCKETSIZE={0x5, 0x15, 0xff}]}, @IPSET_ATTR_PROTOCOL={0x5, 0x1, 0x6}, @IPSET_ATTR_FAMILY={0xffffffffffffff5b, 0x5, 0x2}, @IPSET_ATTR_REVISION={0x5, 0x4, 0x2}, @IPSET_ATTR_SETNAME={0x9, 0x2, 'syz0\x00'}, @IPSET_ATTR_TYPENAME={0x16, 0x3, 'hash:net,port,net\x00'}]}, 0x5c}, 0x1, 0x0, 0x0, 0x20008804}, 0x0) r1 = socket$inet6_udp(0xa, 0x2, 0x0) getsockopt$inet6_mreq(0xffffffffffffffff, 0x29, 0x1c, &(0x7f0000000000)={@private1, 0x0}, &(0x7f0000000080)=0x14) ioctl$sock_ipv6_tunnel_SIOCCHGTUNNEL(r1, 0x89f3, &(0x7f0000000140)={'syztnl0\x00', &(0x7f00000000c0)={'ip6_vti0\x00', r2, 0x2f, 0x6, 0x0, 0x7f, 0x4, @mcast2, @private2, 0x7, 0x7, 0x7fffffff, 0x663}}) 1.531665446s ago: executing program 1 (id=2898): bind$inet(0xffffffffffffffff, 0x0, 0x0) r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r0, &(0x7f0000009b40)={0x0, 0x0, &(0x7f0000009b00)={&(0x7f0000000100)=ANY=[@ANYBLOB="140000001000010000000000000000000a00000a54000000090a010400000000000000000a0000040900010073797a310000000008000540000000020900020073797a050000000008000a40ffffff78080008401000000108000c4000000005080003400000001014"], 0x7c}, 0x1, 0x0, 0x0, 0x4000850}, 0x24000000) bind$bt_l2cap(0xffffffffffffffff, 0x0, 0x0) r1 = syz_init_net_socket$bt_l2cap(0x1f, 0x1, 0x3) close(r1) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000400)={0xffffffffffffffff, 0xffffffffffffffff}) setsockopt$sock_int(r3, 0x1, 0x200000010, &(0x7f0000000000)=0x7, 0x4) sendto$unix(r2, &(0x7f0000000080)="008e", 0x2, 0xd1, 0x0, 0x0) recvmmsg(r1, &(0x7f00000055c0), 0x400023c, 0x300, 0x0) ioctl$BTRFS_IOC_TREE_SEARCH(0xffffffffffffffff, 0xd0009411, &(0x7f0000108000)={{0x0, 0x8, 0x100000000, 0xfffffffffffffffc, 0x0, 0x8, 0x9, 0x400, 0x3, 0x4, 0x36a58e4a, 0xd, 0x2, 0x75, 0x1}}) socket$inet_tcp(0x2, 0x1, 0x0) r4 = socket$nl_route(0x10, 0x3, 0x0) ioctl$AUTOFS_IOC_CATATONIC(0xffffffffffffffff, 0x9362, 0x0) r5 = socket$alg(0x26, 0x5, 0x0) bind$alg(r5, &(0x7f0000000000)={0x26, 'aead\x00', 0x0, 0x0, 'aegis128-generic\x00'}, 0x58) setsockopt$ALG_SET_KEY(r5, 0x117, 0x1, &(0x7f0000000140)="2c385aa3d49100dc6626c892b6bc436a", 0x10) r6 = accept4(r5, 0x0, 0x0, 0x0) sendmsg$alg(r6, &(0x7f0000000100)={0x0, 0x0, 0x0, 0x0, &(0x7f00000001c0)=[@op={0x18, 0x117, 0x3, 0x1}], 0x18}, 0x0) recvmmsg(r6, &(0x7f0000002a80)=[{{0x0, 0x0, &(0x7f0000000540)=[{&(0x7f0000001a80)=""/4096, 0x1000}, {&(0x7f00000006c0)=""/57, 0x39}, {&(0x7f0000000300)=""/171, 0xab}, {&(0x7f0000000200)=""/55, 0x37}, {&(0x7f00000003c0)=""/213, 0xd5}, {&(0x7f00000004c0)=""/11, 0xb}, {&(0x7f0000000500)=""/29, 0x1d}], 0x7}, 0x3}, {{0x0, 0x0, &(0x7f00000007c0)=[{&(0x7f0000000900)=""/210, 0xd2}], 0x1}}], 0x2, 0x10100, 0x0) sendmsg$nl_route_sched_retired(r6, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000012100), 0xe078}}, 0x0) sendmsg$nl_route(r4, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000280)=ANY=[@ANYBLOB="280000001000010029bd7000fddbdf2500000000c1234140e5cdabedfef7388a14df5cdd8595d1ebaf8467c623235e6c1b83d7bc5ecedb60fae5", @ANYRES32=0x0, @ANYBLOB="211000000300000008001b0000000000"], 0x28}, 0x1, 0x0, 0x0, 0x801}, 0x4000000) r7 = socket$inet_udp(0x2, 0x2, 0x0) bind$inet(r7, &(0x7f0000000240)={0x2, 0x0, @local}, 0x6f) bpf$BPF_PROG_WITH_BTFID_LOAD(0x5, &(0x7f0000000ac0)=@bpf_lsm={0x18, 0x4, &(0x7f0000000000)=ANY=[@ANYBLOB="18000000000000000000000000080000c300e0ff020000009500000000000000"], &(0x7f0000000100)='GPL\x00', 0x8, 0xd8, &(0x7f00000004c0)=""/216, 0x40f00, 0x0, '\x00', 0x0, 0x1b, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0xfffffffd}, 0x94) connect$inet(r7, &(0x7f0000000480)={0x2, 0x0, @multicast1}, 0x10) sendmmsg(r7, &(0x7f0000007fc0), 0x800001d, 0x300) setsockopt$inet_int(r7, 0x0, 0x13, &(0x7f0000000140)=0x2, 0x4) sendmsg$IPCTNL_MSG_EXP_DELETE(0xffffffffffffffff, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000140)={&(0x7f00000001c0)=ANY=[@ANYBLOB="4c000000f702010100000000000000000500ab930800044000005932280002800600034000010000060003400005000004000180080001000a010100080002"], 0x4c}, 0x1, 0x0, 0x0, 0x800}, 0x4040000) setsockopt$inet_int(r7, 0x0, 0x17, 0x0, 0x0) 1.422802128s ago: executing program 5 (id=2899): r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$ipvs(&(0x7f0000000080), 0xffffffffffffffff) r2 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r2, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000500)=@deltaction={0x168, 0x31, 0x100, 0x70bd2c, 0x25dfdbfe, {}, [@TCA_ACT_TAB={0x44, 0x1, [{0x10, 0x1e, 0x0, 0x0, @TCA_ACT_KIND={0x9, 0x1, 'vlan\x00'}}, {0xc, 0x14, 0x0, 0x0, @TCA_ACT_KIND={0x8, 0x1, 'bpf\x00'}}, {0xc, 0x19, 0x0, 0x0, @TCA_ACT_KIND={0x8, 0x1, 'ipt\x00'}}, {0xc, 0xb, 0x0, 0x0, @TCA_ACT_INDEX={0x8}}, {0xc, 0x1c, 0x0, 0x0, @TCA_ACT_INDEX={0x8, 0x3, 0x6}}]}, @TCA_ACT_TAB={0x24, 0x1, [{0x10, 0x7, 0x0, 0x0, @TCA_ACT_KIND={0xb, 0x1, 'mirred\x00'}}, {0x10, 0x11, 0x0, 0x0, @TCA_ACT_KIND={0xb, 0x1, 'mirred\x00'}}]}, @TCA_ACT_TAB={0x14, 0x1, [{0x10, 0x14, 0x0, 0x0, @TCA_ACT_KIND={0x9, 0x1, 'vlan\x00'}}]}, @TCA_ACT_TAB={0x14, 0x1, [{0x10, 0x2, 0x0, 0x0, @TCA_ACT_KIND={0x9, 0x1, 'csum\x00'}}]}, @TCA_ACT_TAB={0x5c, 0x1, [{0xc, 0x8, 0x0, 0x0, @TCA_ACT_INDEX={0x8, 0x3, 0xffffe7f6}}, {0x10, 0xa, 0x0, 0x0, @TCA_ACT_KIND={0xb, 0x1, 'skbmod\x00'}}, {0x10, 0x14, 0x0, 0x0, @TCA_ACT_KIND={0xa, 0x1, 'pedit\x00'}}, {0x10, 0x1, 0x0, 0x0, @TCA_ACT_KIND={0xb, 0x1, 'sample\x00'}}, {0xc, 0x13, 0x0, 0x0, @TCA_ACT_KIND={0x7, 0x1, 'xt\x00'}}, {0x10, 0xe, 0x0, 0x0, @TCA_ACT_KIND={0xb, 0x1, 'police\x00'}}]}, @TCA_ACT_TAB={0x14, 0x1, [{0x10, 0x1b, 0x0, 0x0, @TCA_ACT_KIND={0xb, 0x1, 'sample\x00'}}]}, @TCA_ACT_TAB={0x10, 0x1, [{0xc, 0x1a, 0x0, 0x0, @TCA_ACT_INDEX={0x8, 0x3, 0x5}}]}, @TCA_ACT_TAB={0x18, 0x1, [{0x14, 0x1a, 0x0, 0x0, @TCA_ACT_KIND={0xf, 0x1, 'tunnel_key\x00'}}]}, @TCA_ACT_TAB={0x2c, 0x1, [{0xc, 0x1, 0x0, 0x0, @TCA_ACT_INDEX={0x8, 0x3, 0x2}}, {0xc, 0x20, 0x0, 0x0, @TCA_ACT_KIND={0x8, 0x1, 'ife\x00'}}, {0x10, 0x2, 0x0, 0x0, @TCA_ACT_KIND={0xb, 0x1, 'mirred\x00'}}]}]}, 0x168}}, 0x0) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000200)={0x6, 0x3, 0x0, 0x0}, 0x94) r3 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_route(r3, &(0x7f0000000240)={0x0, 0x0, &(0x7f00000000c0)={0x0}, 0x9}, 0x0) r4 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r5 = syz_genetlink_get_family_id$ieee802154(&(0x7f0000000240), r4) sendmsg$IEEE802154_START_REQ(r4, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000000)=ANY=[@ANYBLOB='l\x00\x00\x00', @ANYRES16=r5, @ANYBLOB="010000000000000000000d0000000500070012000000050018007f00000006000800feff0000050017000000000005001a000000000006000a00ffff00000500190004000000050007000700000005001b00ff00000005001f0001000000060008"], 0x6c}, 0x1, 0x0, 0x0, 0x18000}, 0x0) syz_genetlink_get_family_id$nl802154(&(0x7f0000000040), r4) sendmsg$IPVS_CMD_SET_CONFIG(r0, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000280)=ANY=[@ANYBLOB="1cb669be", @ANYRES16=r1, @ANYBLOB="010000000000fcdbdf250c0000000800050000000000"], 0x1c}, 0x1, 0x0, 0x0, 0x1}, 0x90) socket$nl_generic(0x10, 0x3, 0x10) (async) syz_genetlink_get_family_id$ipvs(&(0x7f0000000080), 0xffffffffffffffff) (async) socket$nl_route(0x10, 0x3, 0x0) (async) sendmsg$nl_route_sched(r2, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000500)=@deltaction={0x168, 0x31, 0x100, 0x70bd2c, 0x25dfdbfe, {}, [@TCA_ACT_TAB={0x44, 0x1, [{0x10, 0x1e, 0x0, 0x0, @TCA_ACT_KIND={0x9, 0x1, 'vlan\x00'}}, {0xc, 0x14, 0x0, 0x0, @TCA_ACT_KIND={0x8, 0x1, 'bpf\x00'}}, {0xc, 0x19, 0x0, 0x0, @TCA_ACT_KIND={0x8, 0x1, 'ipt\x00'}}, {0xc, 0xb, 0x0, 0x0, @TCA_ACT_INDEX={0x8}}, {0xc, 0x1c, 0x0, 0x0, @TCA_ACT_INDEX={0x8, 0x3, 0x6}}]}, @TCA_ACT_TAB={0x24, 0x1, [{0x10, 0x7, 0x0, 0x0, @TCA_ACT_KIND={0xb, 0x1, 'mirred\x00'}}, {0x10, 0x11, 0x0, 0x0, @TCA_ACT_KIND={0xb, 0x1, 'mirred\x00'}}]}, @TCA_ACT_TAB={0x14, 0x1, [{0x10, 0x14, 0x0, 0x0, @TCA_ACT_KIND={0x9, 0x1, 'vlan\x00'}}]}, @TCA_ACT_TAB={0x14, 0x1, [{0x10, 0x2, 0x0, 0x0, @TCA_ACT_KIND={0x9, 0x1, 'csum\x00'}}]}, @TCA_ACT_TAB={0x5c, 0x1, [{0xc, 0x8, 0x0, 0x0, @TCA_ACT_INDEX={0x8, 0x3, 0xffffe7f6}}, {0x10, 0xa, 0x0, 0x0, @TCA_ACT_KIND={0xb, 0x1, 'skbmod\x00'}}, {0x10, 0x14, 0x0, 0x0, @TCA_ACT_KIND={0xa, 0x1, 'pedit\x00'}}, {0x10, 0x1, 0x0, 0x0, @TCA_ACT_KIND={0xb, 0x1, 'sample\x00'}}, {0xc, 0x13, 0x0, 0x0, @TCA_ACT_KIND={0x7, 0x1, 'xt\x00'}}, {0x10, 0xe, 0x0, 0x0, @TCA_ACT_KIND={0xb, 0x1, 'police\x00'}}]}, @TCA_ACT_TAB={0x14, 0x1, [{0x10, 0x1b, 0x0, 0x0, @TCA_ACT_KIND={0xb, 0x1, 'sample\x00'}}]}, @TCA_ACT_TAB={0x10, 0x1, [{0xc, 0x1a, 0x0, 0x0, @TCA_ACT_INDEX={0x8, 0x3, 0x5}}]}, @TCA_ACT_TAB={0x18, 0x1, [{0x14, 0x1a, 0x0, 0x0, @TCA_ACT_KIND={0xf, 0x1, 'tunnel_key\x00'}}]}, @TCA_ACT_TAB={0x2c, 0x1, [{0xc, 0x1, 0x0, 0x0, @TCA_ACT_INDEX={0x8, 0x3, 0x2}}, {0xc, 0x20, 0x0, 0x0, @TCA_ACT_KIND={0x8, 0x1, 'ife\x00'}}, {0x10, 0x2, 0x0, 0x0, @TCA_ACT_KIND={0xb, 0x1, 'mirred\x00'}}]}]}, 0x168}}, 0x0) (async) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000200)={0x6, 0x3, 0x0, 0x0}, 0x94) (async) socket$netlink(0x10, 0x3, 0x0) (async) sendmsg$nl_route(r3, &(0x7f0000000240)={0x0, 0x0, &(0x7f00000000c0)={0x0}, 0x9}, 0x0) (async) syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) (async) syz_genetlink_get_family_id$ieee802154(&(0x7f0000000240), r4) (async) sendmsg$IEEE802154_START_REQ(r4, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000000)=ANY=[@ANYBLOB='l\x00\x00\x00', @ANYRES16=r5, @ANYBLOB="010000000000000000000d0000000500070012000000050018007f00000006000800feff0000050017000000000005001a000000000006000a00ffff00000500190004000000050007000700000005001b00ff00000005001f0001000000060008"], 0x6c}, 0x1, 0x0, 0x0, 0x18000}, 0x0) (async) syz_genetlink_get_family_id$nl802154(&(0x7f0000000040), r4) (async) sendmsg$IPVS_CMD_SET_CONFIG(r0, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000280)=ANY=[@ANYBLOB="1cb669be", @ANYRES16=r1, @ANYBLOB="010000000000fcdbdf250c0000000800050000000000"], 0x1c}, 0x1, 0x0, 0x0, 0x1}, 0x90) (async) 1.37116748s ago: executing program 8 (id=2900): r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000200)=@base={0xe, 0x4, 0x8, 0x7}, 0x50) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000002c0)={0xc, 0x14, &(0x7f0000000800)=@framed={{0x18, 0x0, 0x0, 0x0, 0x4, 0x0, 0x0, 0x0, 0xaa99}, [@ringbuf_output={{0x18, 0x5, 0x1, 0x0, r0}, {0x7, 0x0, 0xb, 0x8, 0x0, 0x0, 0x80000000}, {0x3, 0x3, 0x3, 0xa, 0x5}, {}, {}, {}, {}, {0x85, 0x0, 0x0, 0x15}}, @printk={@lx, {}, {}, {}, {}, {0x7, 0x0, 0xb, 0x3, 0x0, 0x0, 0x3837}}]}, &(0x7f0000000180)='GPL\x00', 0x0, 0x0, 0x0, 0x40f00, 0x0, '\x00', 0x0, @fallback=0x38, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000d80)={r1, 0x18000000000002a0, 0xe, 0x0, &(0x7f0000000040)="76ea090000000000009ba56a88ca", 0x0, 0x6400, 0x60000000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2000000}, 0x50) 1.267459962s ago: executing program 5 (id=2901): r0 = bpf$MAP_CREATE_TAIL_CALL(0x0, &(0x7f0000000180)=ANY=[@ANYBLOB="0300000004000000040000000a"], 0x50) bpf$PROG_LOAD(0x5, &(0x7f0000000880)={0x3, 0x10, &(0x7f0000000000)=@framed={{0x18, 0x6, 0x0, 0x0, 0x40000}, [@tail_call={{0x18, 0x2, 0x1, 0x0, r0}, {}, {}, {0x7, 0x0, 0xb, 0x7}}, @printk]}, &(0x7f0000000980)='GPL\x00', 0x0, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, @sched_cls, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='memory.events\x00', 0x275a, 0x0) write$cgroup_subtree(r1, &(0x7f0000000000)=ANY=[], 0x3261e) mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x9, 0x13, r1, 0x0) bpf$PROG_LOAD(0x5, &(0x7f0000000880)={0x3, 0x8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @sched_cls, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r2 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_route(r2, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000540)=ANY=[@ANYBLOB="3c0000001000030500000000fbdbdf2500000000", @ANYRES32=0x0, @ANYBLOB="35030200000000001c00128009000100626f6e64000000000c00028008000200", @ANYRES32=0x0, @ANYBLOB="ef9b962173d760b11f0b776bad06876c057ee288dc7bd80bd9b91a76c1ae8f7b470c4460c7ea5616e03ea3e5cc9387fd238b2c299064a3ea29b9fe977cd0d3ad5e2fae165345e75d097a5c9c60e2ee33166fd12b693758a4dc0f6aaacf0cec5b4e863d4b398e9301b585b5ef968b877b1c6049853c30e0c1002638cb3d49e2217d07f27a6881ea86b603cbebfac28d54ff887c442f598142861b047809d5bd6f8f89"], 0x3c}}, 0x20008080) r3 = bpf$MAP_CREATE(0x0, &(0x7f0000000800)=@base={0x2, 0x4, 0x8, 0xf}, 0x50) close(0x3) bpf$MAP_CREATE(0x0, &(0x7f0000000840)=ANY=[@ANYBLOB="230000000800000002000000ffff000005"], 0x48) r4 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r4, &(0x7f0000000180)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000740)=@updpolicy={0xc0, 0x19, 0x1, 0x0, 0x10, {{@in=@multicast1=0xe0000002, @in=@rand_addr=0x64010102, 0x0, 0x0, 0x0, 0x0, 0xa, 0x0, 0x80, 0x6}, {0x0, 0x0, 0x1abe1019, 0x0, 0x0, 0x8, 0x0, 0xfffffffffffffffd}, {}, 0x0, 0x6e6bb8, 0x0, 0x1, 0x0, 0x1}, [@XFRMA_IF_ID={0x8, 0x1f, 0x1}]}, 0xc0}, 0x1, 0x0, 0x0, 0x4008011}, 0x0) r5 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r5, &(0x7f0000000480)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000c40)=ANY=[@ANYBLOB="d40000001b001d0328bd7000fcdbdf25ffffffff000000000000000000000000fe8000000000000000000000000000264e2000014e2404000200000087000000", @ANYRES32=0x0, @ANYRES32=0x0, @ANYBLOB="08000000000000000100010000000000f4ffffffffffffff04000000000000000200000000000000ba410000000091ad07000000000000000000008000000000ffffff7f0000000003000000000000000400000000000000080000000000000003000000b86b6e000000030100000000040000000000000008001f0001"], 0xd4}}, 0x0) r6 = bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000240)={0x2, 0x4, 0x8, 0x1, 0x80, 0x0, 0x0, '\x00', 0x0, 0x0}, 0x48) r7 = socket$nl_generic(0x10, 0x3, 0x10) r8 = socket$inet_udp(0x2, 0x2, 0x0) close(0x3) socket$igmp(0x2, 0x3, 0x2) setsockopt$inet_int(r8, 0x0, 0x32, &(0x7f0000000f00)=0x1000000, 0x4) ioctl$sock_SIOCGIFINDEX(r8, 0x8933, &(0x7f0000000140)={'veth0_macvtap\x00', 0x0}) sendmmsg$inet(r8, &(0x7f0000000000)=[{{&(0x7f0000000080)={0x2, 0x4e20, @broadcast}, 0x10, 0x0, 0x0, &(0x7f0000000040)=[@ip_pktinfo={{0x1c, 0x0, 0x8, {r9, @local, @loopback}}}], 0x20}}], 0x1, 0x0) sendmsg$nl_generic(r7, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000180)={&(0x7f00000016c0)={0x18, 0x3f, 0x107, 0x70bd27, 0x25dfdbfe, {0x3, 0x7c}, [@nested={0x4, 0x1c2}]}, 0x18}, 0x1, 0x0, 0x0, 0x20048092}, 0xc000) bpf$BPF_MAP_CONST_STR_FREEZE(0x16, &(0x7f0000000500)={r6}, 0x4) r10 = bpf$PROG_LOAD(0x5, &(0x7f0000000880)={0x11, 0x19, &(0x7f0000000300)=ANY=[@ANYBLOB="18000000020000000000000000000000b7080000000000007b8af8ff00000000b7080000040000007b8af0ff00000000bfa100000000000007010000f8ffffffbfa400000000000007040000f0ffffffb70200000800000018230000", @ANYRES32=r6, @ANYBLOB="0000000000000000b70500000000000085000000a500000018110000", @ANYRES32=r3, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000300000095"], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x1e, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r11 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r11, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000240)=ANY=[@ANYBLOB="140000001000010000000000000000000500000a28000000000a030000000000000000000a00000708000240000000020900010073797a31000000002c000000030a010100000000000000000a0000070900010073797a31000000000900030073797a320000000014000000110001"], 0x7c}, 0x1, 0x0, 0x0, 0x4000}, 0x4000000) sendmsg$NFT_BATCH(r11, &(0x7f0000009b40)={0x0, 0x0, &(0x7f0000009b00)={&(0x7f0000000dc0)={{0x14, 0x10, 0x1, 0x0, 0x0, {0x5}}, [@NFT_MSG_NEWRULE={0x58, 0x6, 0xa, 0x401, 0x0, 0x0, {0xa, 0x0, 0x1}, [@NFTA_RULE_TABLE={0x9, 0x1, 'syz1\x00'}, @NFTA_RULE_EXPRESSIONS={0x2c, 0x4, 0x0, 0x1, [{0x28, 0x1, 0x0, 0x1, @target={{0xb}, @val={0x18, 0x2, 0x0, 0x1, [@NFTA_TARGET_INFO={0x4}, @NFTA_TARGET_REV={0x8}, @NFTA_TARGET_NAME={0x8, 0x1, 'LED\x00'}]}}}]}, @NFTA_RULE_CHAIN={0x9, 0x2, 'syz2\x00'}]}], {0x14, 0x11, 0x1, 0x0, 0x0, {0x1}}}, 0x80}, 0x1, 0x0, 0x0, 0x4000850}, 0x20040040) bpf$PROG_BIND_MAP(0xa, &(0x7f0000000080)={r10, r3}, 0xc) 1.144933083s ago: executing program 8 (id=2902): r0 = bpf$PROG_LOAD(0x5, &(0x7f0000000440)={0x4, 0xc, &(0x7f0000000100)=ANY=[], &(0x7f0000000000)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x30, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) (async) r1 = socket$inet(0xa, 0x801, 0x84) connect$inet(r1, &(0x7f0000004cc0)={0x2, 0x0, @remote={0xac, 0x14, 0xffffffffffffffff}}, 0x10) (async) listen(r1, 0x8) (async) r2 = accept4(r1, 0x0, 0x0, 0x0) getsockopt$inet_sctp6_SCTP_AUTH_ACTIVE_KEY(r2, 0x84, 0x18, &(0x7f0000000000)={0x0, 0x6}, &(0x7f0000000040)=0x8) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000240)={r0, 0x2f, 0xe, 0x0, &(0x7f0000000400)="e4e647c9e0b8e9a2f2ab3026da58", 0x0, 0x2000000, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x50) (async) bpf$PROG_LOAD(0x5, &(0x7f0000000100)={0xb, 0x4, &(0x7f00000005c0)=@framed={{}, [@ldst={0x1, 0x2, 0x4, 0x0, 0x1, 0x9f}]}, &(0x7f0000000340)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x36, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) 1.110149191s ago: executing program 7 (id=2903): socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) setsockopt$SO_ATTACH_FILTER(r1, 0x1, 0x1a, &(0x7f0000000040)={0x3, &(0x7f0000000140)=[{0x20, 0xff, 0x0, 0xfffff038}, {0x28, 0x0, 0x10, 0xffeff024}, {0x6, 0x0, 0x83, 0xfffffffd}]}, 0x10) (async) sendmmsg(r0, &(0x7f0000001c00), 0x400000000000159, 0x40840) (async) mmap(&(0x7f0000000000/0xfbe000)=nil, 0xfbe000, 0x2000007, 0x31, 0xffffffffffffffff, 0x0) r2 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x2, 0x3, &(0x7f0000000640)=ANY=[@ANYBLOB="180000000000000000000000000a000095"], &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r3 = openat$tun(0xffffffffffffff9c, &(0x7f0000000040), 0x0, 0x0) ioctl$TUNSETTXFILTER(r3, 0x400454ca, &(0x7f0000000100)=ANY=[@ANYBLOB="2e42000c371303ed6a33f2ff8689b3f60e"]) (async) ioctl$TUNSETTXFILTER(r3, 0x400454d1, &(0x7f0000002300)=ANY=[@ANYBLOB="dccdd8706b7c29240dd5638785173e0f67930a3df41d07f764bad85e753a874e69b8b2c4dcd047fb1102873979b8752541de1b7c5fe069cdad5261"]) bpf$BPF_GET_PROG_INFO(0xf, &(0x7f0000000080)={r2, 0xe0, &(0x7f00000004c0)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, ""/16, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x200, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1b, 0x8, 0x8}}, 0x10) 983.69454ms ago: executing program 8 (id=2904): openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0) (async) socketpair(0x1, 0x1, 0x0, &(0x7f0000000000)) bpf$PROG_LOAD(0x5, &(0x7f0000000240)={0x12, 0x4, &(0x7f0000000000)=@framed={{0x18, 0x0, 0x0, 0x0, 0x1}, [@ldst={0x1, 0x2, 0x3, 0x2, 0x1, 0x8}]}, 0x0, 0x0, 0x0, 0x0, 0x41100, 0x28, '\x00', 0x0, @fallback=0x29, 0xffffffffffffffff, 0xf00, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) (async, rerun: 64) r0 = bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f00000000c0)=ANY=[@ANYBLOB="02000000040000000800000001"], 0x48) (rerun: 64) bpf$MAP_LOOKUP_ELEM(0x5, &(0x7f00000000c0)={r0, &(0x7f0000000000), &(0x7f0000000040)=""/73}, 0x70) (async) socket$inet(0x2, 0x4000000000000001, 0x0) (async) r1 = socket$inet_sctp(0x2, 0x5, 0x84) (async, rerun: 32) getsockopt$inet_sctp6_SCTP_RECONFIG_SUPPORTED(0xffffffffffffffff, 0x84, 0x75, &(0x7f0000000040)={0x0, 0xffff}, &(0x7f0000000080)=0x8) (rerun: 32) getsockopt$inet_sctp_SCTP_STREAM_SCHEDULER(r1, 0x84, 0x7b, &(0x7f00000000c0)={r2, 0x4}, &(0x7f0000000140)=0x8) socket$unix(0x1, 0x1, 0x0) socket$nl_route(0x10, 0x3, 0x0) socket$nl_generic(0x10, 0x3, 0x10) r3 = socket$packet(0x11, 0x3, 0x300) socket$inet_mptcp(0x2, 0x1, 0x106) (async, rerun: 64) setsockopt$packet_fanout(r3, 0x107, 0x12, &(0x7f0000000100)={0x3, 0x1000}, 0x4) (rerun: 64) setsockopt$packet_int(r3, 0x107, 0xa, &(0x7f00000003c0)=0x2, 0x4) (async) setsockopt$packet_rx_ring(r3, 0x107, 0x5, &(0x7f0000000000)=@req3={0x1000, 0x3a, 0x1000, 0x3a, 0x9, 0x0, 0xffffffff}, 0x1c) (async) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000540)={0x6, 0x3, &(0x7f0000000780)=ANY=[@ANYBLOB="1800000002000000000000000000000095"], 0x0, 0x0, 0x0, 0x0, 0x41000, 0x48}, 0x94) r4 = bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000480)={0x6, 0x3, &(0x7f0000000780)=ANY=[], &(0x7f00000002c0)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x6}, 0x94) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000600)={r4, 0x5, 0xe, 0x0, &(0x7f0000000380)="fc5cc45c490704289349a8af1d25", 0x0, 0xd01, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2}, 0x50) pselect6(0x40, &(0x7f00000001c0)={0x0, 0x0, 0x3, 0x0, 0x0, 0x4}, 0x0, &(0x7f00000002c0)={0x3ff, 0x0, 0x0, 0x0, 0x0, 0x8, 0x7fffffff}, 0x0, 0x0) 745.027658ms ago: executing program 7 (id=2905): socketpair$tipc(0x1e, 0x2, 0x0, &(0x7f0000000000)={0xffffffffffffffff}) sendmmsg$inet(r0, &(0x7f00000001c0), 0x0, 0x20048044) bpf$PROG_LOAD(0x5, &(0x7f000000e000)={0x10, 0x4, &(0x7f0000000040)=ANY=[@ANYBLOB="b400000000000000791000000000000062000000080000009500050000000000"], &(0x7f0000003ff6)='GPL\x00', 0x4, 0xc3, &(0x7f000000cf3d)=""/195, 0x0, 0x0, '\x00', 0x0, @sk_msg, 0xffffffffffffffff, 0x8, &(0x7f0000000000)={0x3}, 0x8, 0x10, &(0x7f0000000080), 0x10}, 0x94) setsockopt$TIPC_MCAST_REPLICAST(r0, 0x10f, 0x86) 744.221308ms ago: executing program 8 (id=2906): r0 = socket(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000180)={'wlan1\x00', 0x0}) sendmsg$nl_route_sched(r0, &(0x7f00000007c0)={0x0, 0x0, &(0x7f0000000780)={&(0x7f0000000080)=@newqdisc={0x48, 0x24, 0xf0b, 0x0, 0xfffffffc, {0x0, 0x0, 0x0, r1, {0x0, 0x4}, {0xffff, 0xffff}, {0x3, 0xffe5}}, [@qdisc_kind_options=@q_cake={{0x9}, {0x18, 0x2, [@TCA_CAKE_BASE_RATE64={0xc, 0x2, 0x8000000000000001}, @TCA_CAKE_AUTORATE={0x8, 0x9, 0x6}]}}]}, 0x48}, 0x1, 0x0, 0x0, 0xc0}, 0x0) r2 = socket$kcm(0x29, 0x3, 0x0) sendmsg$kcm(r2, &(0x7f0000000380)={&(0x7f0000000000)=@ll={0x11, 0x1, r1, 0x1, 0x2, 0x6, @random="3ae2a9e3b6a2"}, 0x80, &(0x7f0000000340)=[{&(0x7f0000000100)="19bcf90c148a941f2c2cb2bfdce6f4331e5097029e467778ae7ff855c83afca2dd7014ba69707d2e026cf0dfd5b368277d89c78b206d96be50b63b0591a4667b168dbbe9e6133e27600778e9ca2bd89020e270ca5317005b16bfee5561b64e635828f5afaee50bb2a6a8ad582e93cabb682a778f244d920c2b0864e9e2", 0x7d}, {&(0x7f00000001c0)="2db6700face8413d1a522f5481bf7fac33b6c754e46a8411a8c7a22ed872f524f2fedd27cefda6f91ee1e05a90b4412d255a0370430451c25aff0866401e63b7f18156e72e26f7b3cff812d4d5166edf15156f2e436c8d540fde2fd99f3ec48ed08f03246155d701254293d37d5ec3f0ab96122fc648f172f28041e12471181c3f46bb1a186c754fd864c38273baf41d72e6ead2e64fa1b027283aa4dd4f0b93f07992854a", 0xa5}, {&(0x7f0000000280)="b434116113a57ca3f3e659332bde7f346982aff18f78d96d9f6ea5efee009f621a26c0294a54821523a8f91e986620dbb235280313a712a5932329051db1d0935e5f90ccd4fb16fdeab5aa895fe332efb325f5750d4735389066def81658585a5ce889700eeaf138cf6e7b3b44c3ac2059ac06a881b2766a51f0b92ff94b45b4026376df97994cf77b02f20e7995bf14c10346810ff7209bb5c72a4c7d4405344734ce674a1ad5483c6bd0353b9e461095", 0xb1}], 0x3}, 0x4890) 696.116285ms ago: executing program 5 (id=2907): r0 = openat$tun(0xffffffffffffff9c, &(0x7f00000000c0), 0x422ac1, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000200)={'syzkaller1\x00', 0xc201}) r1 = socket$inet6_sctp(0xa, 0x5, 0x84) getsockopt$inet_sctp6_SCTP_RECVNXTINFO(r1, 0x84, 0x21, &(0x7f0000000140), &(0x7f0000000180)=0x4) socket$kcm(0x2, 0x3, 0x2) r2 = socket$packet(0x11, 0x3, 0x300) connect$inet(0xffffffffffffffff, &(0x7f0000000100)={0x2, 0x4e21, @multicast1}, 0x10) getsockopt$inet_sctp6_SCTP_AUTO_ASCONF(0xffffffffffffffff, 0x84, 0x1e, &(0x7f00000001c0), &(0x7f0000000240)=0x4) socket$nl_route(0x10, 0x3, 0x0) r3 = socket$inet6(0xa, 0x3, 0x94) setsockopt$inet6_IPV6_XFRM_POLICY(r3, 0x29, 0x23, &(0x7f0000000280)={{{@in=@multicast2, @in6=@ipv4={'\x00', '\xff\xff', @loopback}, 0x4e20, 0x56, 0x4e23, 0x7ff, 0x2}, {0x0, 0x8, 0x4, 0x5751a3bf, 0xfffffffffffffff6, 0x2000000, 0x1, 0xfffffffffffffffd}, {0x1ff, 0x800000000000, 0x4, 0xffffffffffffff7f}, 0x3, 0x0, 0x1, 0x0, 0x1}, {{@in=@dev={0xac, 0x14, 0x14, 0x37}, 0x0, 0x2b}, 0x2, @in=@remote, 0x3504, 0x4, 0x0, 0x0, 0xffffffff, 0x6, 0x4}}, 0xe8) connect$inet6(r3, &(0x7f0000000000)={0xa, 0x0, 0x0, @ipv4={'\x00', '\xff\xff', @dev={0xac, 0x14, 0x14, 0xff}}}, 0x1c) ioctl$TUNSETIFF(0xffffffffffffffff, 0x400454ca, 0x0) r4 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) bind$bt_hci(r4, &(0x7f0000000180)={0x1f, 0xffff, 0x3}, 0x6) r5 = socket$netlink(0x10, 0x3, 0x0) sendmsg$netlink(r5, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000000)=[{&(0x7f0000000080)=ANY=[@ANYBLOB="2800000010000100000000000000000085ff000035000000000000000000000008001c00c9"], 0x28}], 0x1, 0x0, 0x0, 0xb305e06d8ab48277}, 0x0) setsockopt$SO_ATTACH_FILTER(r2, 0x1, 0x1a, &(0x7f0000000000)={0x3, &(0x7f0000000440)=[{0x20, 0x2, 0x9a}, {0x20, 0x3, 0x9, 0xfffff00c}, {0x6, 0x6, 0x0, 0xfffffffe}]}, 0x10) r6 = openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0) ioctl$TUNSETIFF(r6, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x7101}) r7 = socket$unix(0x1, 0x1, 0x0) socket$kcm(0x11, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r7, 0x8933, &(0x7f0000000440)={'syzkaller0\x00'}) r8 = openat$tun(0xffffffffffffff9c, &(0x7f0000000400), 0x0, 0x0) close(r8) r9 = socket(0x400000000010, 0x2, 0x0) ioctl$sock_SIOCGIFINDEX(r9, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r9, &(0x7f00000012c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000380)=@newqdisc={0x78, 0x24, 0x4ee4e6a52ff56541, 0x70bd2a, 0xfffffff9, {0x0, 0x0, 0x0, r10, {0x0, 0x1}, {0xffff, 0xffff}, {0xffe0, 0x9}}, [@qdisc_kind_options=@q_sfq={{0x8}, {0x4c, 0x2, {{0x73fe7070, 0x9, 0xa0ee, 0xfffffffb, 0x6}, 0x3, 0x0, 0xfffffff7, 0x1000, 0x97, 0x1a, 0xe, 0x20, 0x3, 0x8, {0x5, 0x4, 0x2, 0xf, 0x0, 0x100}}}}]}, 0x78}}, 0x0) sendmsg$nl_route_sched(r9, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000580)={&(0x7f00000006c0)=@newtfilter={0x68, 0x2c, 0xf3f, 0x70fd2c, 0x25dddbbd, {0x0, 0x0, 0x0, r10, {0xd, 0x3da48c8682330ab8}, {}, {0x7, 0xfffa}}, [@filter_kind_options=@f_basic={{0xa}, {0x38, 0x2, [@TCA_BASIC_EMATCHES={0x34, 0x2, 0x0, 0x1, [@TCA_EMATCH_TREE_HDR={0x8, 0x1, {0x2}}, @TCA_EMATCH_TREE_LIST={0x28, 0x2, 0x0, 0x1, [@TCF_EM_CANID={0x14, 0x1, 0x0, 0x0, {{0x0, 0x7, 0x5}, {{0x1, 0x0, 0x0, 0x1}, {0x0, 0x0, 0x0, 0x1}}}}, @TCF_EM_NBYTE={0x10, 0x2, 0x0, 0x0, {{0x1, 0x2, 0x4}, {0x7}}}]}]}]}}]}, 0x68}, 0x1, 0x0, 0x0, 0x20045080}, 0x4880) ioctl$SIOCSIFHWADDR(r8, 0x8914, &(0x7f0000002280)={'syzkaller0\x00', @multicast}) 623.528709ms ago: executing program 7 (id=2908): r0 = socket(0x10, 0x3, 0x0) (async) shutdown(0xffffffffffffffff, 0x1) getsockopt$inet_sctp6_SCTP_PEER_ADDR_PARAMS(0xffffffffffffffff, 0x84, 0x9, 0x0, &(0x7f00000005c0)) r1 = openat$tun(0xffffffffffffff9c, 0x0, 0x0, 0x0) (async, rerun: 32) r2 = socket$inet6(0xa, 0x5, 0x0) (rerun: 32) setsockopt$inet6_int(r2, 0x29, 0x1000000000021, &(0x7f0000000180)=0x1, 0x4) (async, rerun: 64) connect$inet6(r2, &(0x7f0000000000)={0xa, 0x4e22, 0x380000, @rand_addr=' \x01\x00'}, 0x1c) (async, rerun: 64) ioctl$TUNSETIFF(r1, 0x400454ca, 0x0) r3 = socket$nl_route(0x10, 0x3, 0x0) (async) r4 = bpf$PROG_LOAD(0x5, 0x0, 0xfffffffffffffe62) pipe(&(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) close(r6) read$alg(r5, &(0x7f0000000b80)=""/237, 0xed) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000080)={r4, 0x18000000000002a0, 0xe, 0x0, &(0x7f0000000040)="b90103600040f000009e0ff00800", 0x0, 0x104, 0x6000000000000000, 0x61, 0x0, &(0x7f0000000400)="9209558f0c5fb25cd57f98113135c3171b8b331fbc04f0e6955a796ff8e3aae3cac46cec3030dfc999058aea01f0e6dcf2f9d480d328655aca003927bd50ed49d4843c8a0a2a4b26ceb747947200bd644c85e7a8a7d7cfce840c02a7d69c9e0bca", 0x0}, 0x50) ioctl$sock_SIOCGIFINDEX(0xffffffffffffffff, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r3, &(0x7f00000012c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000280)=@newqdisc={0x24, 0x24, 0x4ee4e6a52ff56541, 0x70bd26, 0xffffffff, {0x0, 0x0, 0x0, r7, {0x0, 0xfff1}, {0xffff, 0xffff}}}, 0x24}}, 0x20040084) (async, rerun: 32) r8 = socket$unix(0x1, 0x5, 0x0) (rerun: 32) ioctl$sock_SIOCGIFINDEX(r8, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r3, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000380)={&(0x7f0000000440)=@newtfilter={0x4c, 0x2c, 0xd3f, 0x70bd24, 0x25dfdbfc, {0x0, 0x0, 0x0, r9, {0xfff1, 0xffe0}, {}, {0x7, 0x2}}, [@filter_kind_options=@f_bpf={{0x8}, {0x20, 0x2, [@TCA_BPF_OPS={{0x6, 0x4, 0x1}, {0xc, 0x5, [{0x6, 0xd, 0x1, 0x6}]}}, @TCA_BPF_FLAGS_GEN={0x8, 0x9, 0x1}]}}]}, 0x4c}, 0x1, 0x0, 0x0, 0x8848}, 0x20004804) ioctl$XFS_IOC_PATH_TO_HANDLE(0xffffffffffffffff, 0xc0385869, &(0x7f0000000540)={0xffffffffffffffff, 0x0, 0x141081, &(0x7f0000000480)={@align=0x400000, {0xfff7, 0x3ff, 0x8, 0x2}}, 0x8, 0x0, 0x0}) r10 = socket(0x10, 0x3, 0x0) sendmmsg(r10, &(0x7f0000000000), 0x4000000000001f2, 0x0) (async, rerun: 64) sendmmsg(r0, &(0x7f0000000000), 0x4000000000001f2, 0x0) (rerun: 64) r11 = socket$nl_route(0x10, 0x3, 0x0) (async) getsockopt$inet_pktinfo(0xffffffffffffffff, 0x0, 0x8, &(0x7f0000000000)={0x0, @initdev, @remote}, &(0x7f0000000040)=0xc) sendmsg$nl_route(r11, &(0x7f0000000080)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000300)=@delneigh={0x3c, 0x1d, 0x200, 0x70bd23, 0x25dfdbfb, {0xa, 0x0, 0x0, r12, 0x80, 0x18, 0x3}, [@NDA_VLAN={0x6, 0x5, 0x4}, @NDA_SRC_VNI={0x8, 0xb, 0x7}, @NDA_VLAN={0x6}, @NDA_NH_ID={0x8, 0xd, 0x2}]}, 0x3c}, 0x1, 0xba01}, 0x0) 522.151523ms ago: executing program 8 (id=2909): bpf$BPF_GET_BTF_INFO(0xf, &(0x7f0000000280)={0xffffffffffffffff, 0x20, &(0x7f0000000240)={&(0x7f00000000c0)=""/111, 0x6f, 0x0, &(0x7f0000000200)=""/29, 0x1d}}, 0x10) r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000000)={0x3, 0xc, &(0x7f0000000740)=ANY=[@ANYBLOB="1800000000000000000000000000000085000000610000001801000020786c2500000000b4f0f2c4887c89002020208b6a48fd926ddfdcbfa100000000000007010000f8ffffffb702000008000000b7030000110b00088500"], &(0x7f0000000500)='GPL\x00', 0x7, 0x0, 0x0, 0x0, 0x1, '\x00', 0x0, @sched_cls=0x2e, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, r0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f00000003c0)={r1, 0x0, 0x36, 0x0, &(0x7f0000000180)="c1188e99b95d02ff4284860186dd8a2cd3818eeedc37a2c4c1480c309b3db488eb304bafbae18b852d7840ee363e02c019d905b4f1d7", 0x0, 0x7ff, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x50) r2 = socket$nl_route(0x10, 0x3, 0x0) socketpair$tipc(0x1e, 0x2, 0x0, &(0x7f00000002c0)={0xffffffffffffffff}) getsockopt$TIPC_SOCK_RECVQ_DEPTH(r3, 0x10f, 0x84, &(0x7f0000000300), &(0x7f0000000340)=0x4) r4 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r4, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000001ac0)={&(0x7f00000001c0)=ANY=[@ANYBLOB="140000002600010025bd7000fcdbdf2501000000"], 0x14}}, 0x20006004) r5 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r5, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000440)=ANY=[@ANYBLOB="3c0000001000030400"/20, @ANYRES32=0x0, @ANYBLOB="00000000008000001400128009000100586574a189e732ecb95dfdcb6a6d9328cedfd5c4e80c5573321724545b5245b13743e6b10900de7a8a6b7f071359ece956f79b42d591fbbf097b82d8a8a442eaaa7ace185dd52f2d00"/101], 0x3c}}, 0x0) sendmsg$nl_route_sched(r2, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000900)=@newtaction={0xa8, 0x30, 0xb, 0x5, 0x0, {}, [{0x94, 0x1, [@m_ct={0x90, 0x1, 0x0, 0x0, {{0x7}, {0x68, 0x2, 0x0, 0x1, [@TCA_CT_PARMS={0x18, 0x1, {0x80000001, 0x0, 0x0, 0x0, 0x400}}, @TCA_CT_ACTION={0x6, 0x3, 0x19}, @TCA_CT_NAT_IPV4_MIN={0x8, 0x9, @local}, @TCA_CT_NAT_IPV4_MAX={0x8, 0xa, @initdev={0xac, 0x1e, 0x1, 0x0}}, @TCA_CT_LABELS={0x14, 0x7, "e142a1dc6b3a3dd0aaeb9317676b63d2"}, @TCA_CT_MARK={0x8, 0x5, 0x9}, @TCA_CT_NAT_PORT_MIN={0x6, 0xd, 0x4e24}, @TCA_CT_NAT_PORT_MAX={0x6, 0xe, 0x4e22}, @TCA_CT_MARK_MASK={0x8, 0x6, 0x8000}]}, {0x4}, {0xc, 0x7, {0x0, 0x1}}, {0xc}}}]}]}, 0xa8}, 0x1, 0x0, 0x0, 0x8890}, 0x40) 217.623171ms ago: executing program 1 (id=2910): sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f00000010c0)={0x0, 0x0, &(0x7f0000001080)={&(0x7f0000000a00)={{0x14, 0x10, 0x1, 0x0, 0x0, {0x5}}, [@NFT_MSG_DELFLOWTABLE={0x2c, 0x18, 0xa, 0x3, 0x0, 0x0, {0x0, 0x0, 0x2}, [@NFTA_FLOWTABLE_HANDLE={0xc, 0x5, 0x1, 0x0, 0x4}, @NFTA_FLOWTABLE_HANDLE={0xc, 0x5, 0x1, 0x0, 0x5}]}, @NFT_MSG_NEWSET={0x13c, 0x9, 0xa, 0x3, 0x0, 0x0, {0xa, 0x0, 0x8}, [@NFTA_SET_GC_INTERVAL={0x8, 0xc, 0x1, 0x0, 0xfffffffc}, @NFTA_SET_EXPR={0x10, 0x11, 0x0, 0x1, @meta={{0x9}, @void}}, @NFTA_SET_TIMEOUT={0xc, 0xb, 0x1, 0x0, 0x8}, @NFTA_SET_ID={0x8, 0xa, 0x1, 0x0, 0x1}, @NFTA_SET_USERDATA={0xfa, 0xd, 0x1, 0x0, "ba44f2b1b8ea85d62324be6acd5f78e213bc655f1aaf370974aeebd87b82ffab972541197819112f7752b33671d58cd7b5e8eb69d6079fd3dee707fd65e818d9a7c77db5ccc08f118ca3ec1ea369c0d21725f32fef4fed80440311383aafdd27cdbc830a2569f8ea0c22ebfbbd74f9fb0a6b08d62a17b2beda35a6739126b29ddf1d39ea0e10ba8384aebf63c6f58aa372a6e579d147d00b6d913a3a94fb7c50dd7022ff39afc4d2430f54bf43821df098bd600980155a940e16511fc52548448fb0c64099577a700f9b6f13ff8f3f1902f56735c4a426f29f4c76b5513f7942981bbab4ba4dfbd08d00e903b21d10f5c890092af8a6"}]}, @NFT_MSG_NEWRULE={0x1b0, 0x6, 0xa, 0x801, 0x0, 0x0, {0x1, 0x0, 0x4}, [@NFTA_RULE_COMPAT={0x54, 0x5, 0x0, 0x1, [@NFTA_RULE_COMPAT_PROTO_IPV4={0x8, 0x1, 0x1, 0x0, 0x11}, @NFTA_RULE_COMPAT_PROTO_BRIDGE={0x8, 0x1, 0x1, 0x0, 0x6005}, @NFTA_RULE_COMPAT_PROTO_BRIDGE={0x8, 0x1, 0x1, 0x0, 0xf5}, @NFTA_RULE_COMPAT_PROTO_IPV4={0x8, 0x1, 0x1, 0x0, 0x8}, @NFTA_RULE_COMPAT_PROTO_IPV6={0x8, 0x1, 0x1, 0x0, 0x2b}, @NFTA_RULE_COMPAT_PROTO_IPV6={0x8, 0x1, 0x1, 0x0, 0x1}, @NFTA_RULE_COMPAT_PROTO_IPV6={0x8, 0x1, 0x1, 0x0, 0x3c}, @NFTA_RULE_COMPAT_PROTO_BRIDGE={0x8, 0x1, 0x1, 0x0, 0xfbfb}, @NFTA_RULE_COMPAT_PROTO_IPV6={0x8, 0x1, 0x1, 0x0, 0x29}, @NFTA_RULE_COMPAT_PROTO_BRIDGE={0x8, 0x1, 0x1, 0x0, 0x4}]}, @NFTA_RULE_CHAIN_ID={0x8, 0xb, 0x1, 0x0, 0x2}, @NFTA_RULE_POSITION_ID={0x8, 0xa, 0x1, 0x0, 0x2}, @NFTA_RULE_CHAIN={0x9, 0x2, 'syz1\x00'}, @NFTA_RULE_USERDATA={0xfd, 0x7, 0x1, 0x0, "08ce189b0b9aa30166f6cdea04e47ad36712428c91dc7cb2e226083814097d56b5b8022147876b11d36d84f4218f666cdf45f6e2c80f00edb4032c38deebc2401696cb2a653af88ab6c6b66fe95bdf2db906a17852a0a0d5cb7ae35f2c05f0d3bb8d2dbfab1066effcf0bc6803127e5a34983e95dc469f2281cb8c1b8b3b9bf2313e869f924f2370b64764ffee664821ca3b79f015967529273b27701af980697906cdb2e484d7afa5b4b9d25d94ef54826b4bdd2ef06a468fc70a9cfebf852bf0945086f26740e0ff105ea856768067d936443dedbd1610522bb47ccb26085b513b38b589359e47cb20be8c43126012383e08b0ad223cce5b"}, @NFTA_RULE_TABLE={0x9, 0x1, 'syz1\x00'}, @NFTA_RULE_HANDLE={0xc, 0x3, 0x1, 0x0, 0x3}, @NFTA_RULE_POSITION_ID={0x8, 0xa, 0x1, 0x0, 0x3}, @NFTA_RULE_POSITION={0xc, 0x6, 0x1, 0x0, 0x1}]}, @NFT_MSG_NEWFLOWTABLE={0x168, 0x16, 0xa, 0x301, 0x0, 0x0, {0x3, 0x0, 0x1}, [@NFTA_FLOWTABLE_FLAGS={0x8, 0x7, 0x1, 0x0, 0x2}, @NFTA_FLOWTABLE_NAME={0x9, 0x2, 'syz2\x00'}, @NFTA_FLOWTABLE_FLAGS={0x8, 0x7, 0x1, 0x0, 0x1}, @NFTA_FLOWTABLE_NAME={0x9, 0x2, 'syz0\x00'}, @NFTA_FLOWTABLE_HOOK={0x4c, 0x3, 0x0, 0x1, [@NFTA_FLOWTABLE_HOOK_DEVS={0x40, 0x3, 0x0, 0x1, [{0x14, 0x1, 'macsec0\x00'}, {0x14, 0x1, 'wlan0\x00'}, {0x14, 0x1, 'nr0\x00'}]}, @NFTA_FLOWTABLE_HOOK_NUM={0x8}]}, @NFTA_FLOWTABLE_HOOK={0xbc, 0x3, 0x0, 0x1, [@NFTA_FLOWTABLE_HOOK_NUM={0x8}, @NFTA_FLOWTABLE_HOOK_DEVS={0x18, 0x3, 0x0, 0x1, [{0x14, 0x1, 'netpci0\x00'}]}, @NFTA_FLOWTABLE_HOOK_PRIORITY={0x8, 0x2, 0x1, 0x0, 0x4}, @NFTA_FLOWTABLE_HOOK_DEVS={0x90, 0x3, 0x0, 0x1, [{0x14, 0x1, 'veth0_to_bond\x00'}, {0x14, 0x1, 'batadv_slave_0\x00'}, {0x14, 0x1, 'veth1_to_hsr\x00'}, {0x14, 0x1, 'veth1_virt_wifi\x00'}, {0x14}, {0x14, 0x1, 'pim6reg1\x00'}, {0x14, 0x1, 'veth1_to_team\x00'}]}]}, @NFTA_FLOWTABLE_HANDLE={0xc, 0x5, 0x1, 0x0, 0x4}, @NFTA_FLOWTABLE_NAME={0x9, 0x2, 'syz1\x00'}, @NFTA_FLOWTABLE_TABLE={0x9, 0x1, 'syz0\x00'}]}, @NFT_MSG_DELOBJ={0x6c, 0x14, 0xa, 0x5, 0x0, 0x0, {0x0, 0x0, 0x2}, [@NFTA_OBJ_USERDATA={0x3f, 0x8, "b6c88d8d7235f58bc7099048c267ea510f67753ee97b2da23f4577aab904e06880b8e280c3204c79bf3953bf99ae0f3452c13e029879eaf9e16376"}, @NFTA_OBJ_HANDLE={0xc, 0x6, 0x1, 0x0, 0x3}, @NFTA_OBJ_TABLE={0x9, 0x1, 'syz0\x00'}]}, @NFT_MSG_NEWCHAIN={0x20, 0x3, 0xa, 0x201, 0x0, 0x0, {0x3, 0x0, 0x3}, [@NFTA_CHAIN_TABLE={0x9, 0x1, 'syz0\x00'}]}, @NFT_MSG_DELOBJ={0x48, 0x14, 0xa, 0x201, 0x0, 0x0, {0x0, 0x0, 0x1}, [@NFTA_OBJ_HANDLE={0xc, 0x6, 0x1, 0x0, 0x1}, @NFTA_OBJ_TYPE={0x8, 0x3, 0x1, 0x0, 0xa}, @NFTA_OBJ_TYPE={0x8, 0x3, 0x1, 0x0, 0x7}, @NFTA_OBJ_HANDLE={0xc, 0x6, 0x1, 0x0, 0x4}, @NFTA_OBJ_HANDLE={0xc, 0x6, 0x1, 0x0, 0x1}]}, @NFT_MSG_DELSET={0xa8, 0xb, 0xa, 0x101, 0x0, 0x0, {0x7, 0x0, 0xa}, [@NFTA_SET_NAME={0x9, 0x2, 'syz1\x00'}, @NFTA_SET_OBJ_TYPE={0x8, 0xf, 0x1, 0x0, 0x6}, @NFTA_SET_OBJ_TYPE={0x8, 0xf, 0x1, 0x0, 0x44c627213cc5b38b}, @NFTA_SET_DESC={0x70, 0x9, 0x0, 0x1, [@NFTA_SET_DESC_CONCAT={0x10, 0x2, 0x0, 0x1, [{0xc, 0x1, 0x0, 0x1, [@NFTA_SET_FIELD_LEN={0x8, 0x1, 0x1, 0x0, 0xfffffff8}]}]}, @NFTA_SET_DESC_CONCAT={0x3c, 0x2, 0x0, 0x1, [{0xc, 0x1, 0x0, 0x1, [@NFTA_SET_FIELD_LEN={0x8, 0x1, 0x1, 0x0, 0x100}]}, {0x2c, 0x1, 0x0, 0x1, [@NFTA_SET_FIELD_LEN={0x8, 0x1, 0x1, 0x0, 0x13}, @NFTA_SET_FIELD_LEN={0x8, 0x1, 0x1, 0x0, 0x9}, @NFTA_SET_FIELD_LEN={0x8, 0x1, 0x1, 0x0, 0x9}, @NFTA_SET_FIELD_LEN={0x8, 0x1, 0x1, 0x0, 0x7}, @NFTA_SET_FIELD_LEN={0x8, 0x1, 0x1, 0x0, 0xa12}]}]}, @NFTA_SET_DESC_CONCAT={0x18, 0x2, 0x0, 0x1, [{0x14, 0x1, 0x0, 0x1, [@NFTA_SET_FIELD_LEN={0x8, 0x1, 0x1, 0x0, 0x80000000}, @NFTA_SET_FIELD_LEN={0x8, 0x1, 0x1, 0x0, 0xa}]}]}, @NFTA_SET_DESC_SIZE={0x8, 0x1, 0x1, 0x0, 0x7}]}, @NFTA_SET_FLAGS={0x8, 0x3, 0x1, 0x0, 0x4}]}, @NFT_MSG_DELOBJ={0x14, 0x14, 0xa, 0x101, 0x0, 0x0, {0x2, 0x0, 0x2}}], {0x14, 0x11, 0x1, 0x0, 0x0, {0x7}}}, 0x638}, 0x1, 0x0, 0x0, 0x2800}, 0x4800) r0 = socket$inet_tcp(0x2, 0x1, 0x0) sendmmsg(r0, &(0x7f0000006c80)=[{{0x0, 0x0, &(0x7f0000000600)=[{&(0x7f00000003c0)=':4', 0x2}], 0x1, &(0x7f0000001040)=ANY=[], 0x78}}], 0x1, 0x4044805) 189.535014ms ago: executing program 7 (id=2911): r0 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000080), 0xffffffffffffffff) sendmsg$NL80211_CMD_START_AP(0xffffffffffffffff, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000280)=ANY=[@ANYBLOB="1c000000", @ANYRES16=r0, @ANYBLOB="050000000000000000000f00289f713b92a492fe535d80ca00000008000300", @ANYRES32=0x0, @ANYBLOB], 0x1c}}, 0x0) sendmsg$IPCTNL_MSG_EXP_NEW(0xffffffffffffffff, &(0x7f0000000500)={0x0, 0x0, &(0x7f0000000440)={&(0x7f00000001c0)=ANY=[@ANYBLOB="840000000002010400000000000000000a00000004000180300003802c00018014000300fc00000000000000000000100000000014004400fe800000001f610000000000000000bb3c0002800c00028005000100000000002c00018014000300fc020000000000000000000000000000140004"], 0x84}}, 0x0) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000004c0)={0x1d, 0x6, 0x0, 0x0, 0x4, 0x0, 0x0, 0x0, 0x4a}, 0x94) r1 = openat$nci(0xffffffffffffff9c, &(0x7f0000000080), 0x2, 0x0) r2 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r3 = syz_genetlink_get_family_id$nfc(&(0x7f0000000300), r2) ioctl$IOCTL_GET_NCIDEV_IDX(r1, 0x0, &(0x7f00000000c0)=0x0) sendmsg$NFC_CMD_DEV_UP(r2, &(0x7f0000000200)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000d80)=ANY=[@ANYBLOB="1c000000", @ANYRES16=r3, @ANYBLOB="010426bd7000f8dbdf250200000008000100", @ANYRES32=r4], 0x1c}}, 0x488d0) write$nci(r1, &(0x7f00000004c0)=ANY=[@ANYBLOB="7103b3"], 0xb6) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32, @ANYBLOB="0000000000000000b70800000d0000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000100000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0xd, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r5 = socket(0x200000000000011, 0x2, 0x0) unshare(0x2000400) setsockopt$ARPT_SO_SET_ADD_COUNTERS(r5, 0x0, 0x61, 0x0, 0x0) r6 = bpf$MAP_CREATE(0x0, &(0x7f0000000740)=ANY=[@ANYBLOB="0b00000005000000000400000900000001"], 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000008c0)={0xa, 0x4, &(0x7f0000000480)=ANY=[@ANYBLOB="18000000000000000000000000000000850000006d"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0}, 0x94) r7 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000d80)={0x18, 0x5, &(0x7f00000002c0)=ANY=[@ANYBLOB="1801000021"], 0x0, 0x40, 0x0, 0x0, 0x0, 0xb4a02fe0ce239f93, '\x00', 0x0, 0x2}, 0x94) bpf$PROG_LOAD(0x5, &(0x7f0000000780)={0xe, 0x0, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000800000000000000000000018110000", @ANYRES32=r6], 0x0, 0x0, 0x0, 0x0, 0x41100, 0x59, '\x00', 0x0, @fallback=0x7, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, r7, 0x0, 0x0, 0x0, 0x0}, 0x94) r8 = bpf$PROG_LOAD(0x5, &(0x7f0000000300)={0x6, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, @fallback=0x4, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000180)={r8, 0x2000000, 0xe, 0x0, &(0x7f0000000040)="630b008646dc3f0adf33c9f7b986", 0x0, 0xcf25, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x80}, 0x50) socket$netlink(0x10, 0x3, 0x4) r9 = socket(0x10, 0x803, 0x0) getsockname$packet(r9, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x9) sendmsg$nl_route(r9, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000200)=ANY=[@ANYBLOB="a000000010003b0e2a1a86eb2636037f00000000", @ANYRES32=r10, @ANYBLOB="0200000000008000800012000800010076746936740002"], 0xa0}}, 0x0) 169.6177ms ago: executing program 8 (id=2912): r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='cgroup.controllers\x00', 0x275a, 0x0) close(0x3) r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000000c0)='memory.events\x00', 0x275a, 0x0) r2 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000140)='memory.events\x00', 0x7a05, 0x1700) write$cgroup_int(r2, &(0x7f0000000200), 0x806000) ioctl$FS_IOC_RESVSP(r2, 0x40305829, &(0x7f0000000380)={0x0, 0x0, 0x4000, 0x9ffffc}) socket$alg(0x26, 0x5, 0x0) unshare(0x14000100) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x2, 0x22052, r0, 0x0) socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX(0xffffffffffffffff, 0x8933, &(0x7f00000001c0)={'sit0\x00'}) sendmsg$nl_route_sched(0xffffffffffffffff, 0x0, 0x0) r3 = bpf$PROG_LOAD(0x5, &(0x7f0000000040)={0xd, 0x18, &(0x7f0000000240)=@ringbuf={{0x18, 0x0, 0x0, 0x0, 0x9}, {{0x18, 0x1, 0x1, 0x0, r0}}, {}, [@initr0={0x18, 0x0, 0x0, 0x0, 0x80000001, 0x0, 0x0, 0x0, 0x38}, @jmp={0x5, 0x0, 0x9, 0xa33acd35f9f67549, 0x2, 0x40, 0xfffffffffffffff0}, @call={0x85, 0x0, 0x0, 0x33}, @cb_func={0x18, 0x9, 0x4, 0x0, 0xfffffffffffffffe}, @btf_id={0x18, 0x8, 0x3, 0x0, 0x3}, @alu={0x7, 0x0, 0xb, 0x4, 0x1, 0xc}], {{}, {0x7, 0x0, 0xb, 0x2, 0x0, 0x0, 0x2}}}, &(0x7f0000000000)='GPL\x00', 0x3, 0x0, 0x0, 0x40f00, 0x0, '\x00', 0x0, @fallback=0x1d, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, r1, 0x0, 0x0, 0x0, 0x0, 0xfffffff9}, 0x94) r4 = socket$alg(0x26, 0x5, 0x0) unshare(0x26020480) pipe(&(0x7f0000001200)={0xffffffffffffffff, 0xffffffffffffffff}) splice(r5, &(0x7f00000064c0)=0x8, r6, 0x0, 0x2000000000000e, 0x0) bind$alg(r4, &(0x7f0000000100)={0x26, 'skcipher\x00', 0x0, 0x0, 'cts(cbc(serpent))\x00'}, 0x58) setsockopt$ALG_SET_KEY(r3, 0x117, 0x1, 0x0, 0x0) r7 = accept4(r4, 0x0, 0x0, 0x0) sendmsg$netlink(r7, &(0x7f00000047c0)={0x0, 0x0, &(0x7f0000004600)=[{&(0x7f0000004800)=ANY=[@ANYBLOB="100000003600cf67"], 0x10}], 0x1, 0x0, 0x0, 0x8040}, 0x40000) recvmmsg(r7, &(0x7f0000000180)=[{{0x0, 0x0, &(0x7f0000001680)=[{&(0x7f0000001fc0)=""/4115, 0x1013}], 0x1}}], 0x1, 0x41, 0x0) socket$inet6_sctp(0xa, 0x5, 0x84) r8 = socket$netlink(0x10, 0x3, 0x0) r9 = socket(0x10, 0x803, 0x0) sendmsg$IPVS_CMD_SET_INFO(r9, &(0x7f0000000b00)={0x0, 0x0, &(0x7f0000000ac0)={0x0, 0x14}}, 0x0) getsockname$packet(r9, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route(r8, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000380)=ANY=[@ANYBLOB="3c0000001000850600"/20, @ANYRES32=r10, @ANYBLOB="01000000000000001c0012000c000100626f6e64000000000c0002000800010005"], 0x3c}}, 0x0) socket$nl_route(0x10, 0x3, 0x0) socket(0x1, 0x803, 0x0) 0s ago: executing program 1 (id=2913): r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000200)=@base={0xe, 0x4, 0x8, 0x7}, 0x50) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000002c0)={0xc, 0x14, &(0x7f0000000800)=@framed={{0x18, 0x0, 0x0, 0x0, 0x4, 0x0, 0x0, 0x0, 0xaa99}, [@ringbuf_output={{0x18, 0x5, 0x1, 0x0, r0}, {0x7, 0x0, 0xb, 0x8, 0x0, 0x0, 0x80000000}, {0x3, 0x3, 0x3, 0xa, 0x5}, {}, {}, {}, {}, {0x85, 0x0, 0x0, 0x15}}, @printk={@lx, {}, {}, {}, {}, {0x7, 0x0, 0xb, 0x3, 0x0, 0x0, 0x3837}}]}, &(0x7f0000000180)='GPL\x00', 0x0, 0x0, 0x0, 0x40f00, 0x0, '\x00', 0x0, @fallback=0x38, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000d80)={r1, 0x18000000000002a0, 0xe, 0x0, &(0x7f0000000040)="76ea090000000000009ba56a88ca", 0x0, 0x6400, 0x60000000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3000000}, 0x50) kernel console output (not intermixed with test programs): rsing attributes in process `syz.4.1847'. [ 319.898865][T12947] bond6: (slave bridge3): making interface the new active one [ 319.929658][T12947] bridge3: entered promiscuous mode [ 319.946684][T12947] bridge3: entered allmulticast mode [ 319.976529][T12947] bond6: (slave bridge3): Enslaving as an active interface with an up link [ 320.017012][T12951] bridge0: port 2(bridge_slave_1) entered blocking state [ 320.024338][T12951] bridge0: port 2(bridge_slave_1) entered listening state [ 320.031995][T12951] bridge0: port 1(bridge_slave_0) entered blocking state [ 320.039291][T12951] bridge0: port 1(bridge_slave_0) entered listening state [ 320.058888][T12955] netlink: 24 bytes leftover after parsing attributes in process `syz.3.1848'. [ 320.075972][T12967] netlink: 28 bytes leftover after parsing attributes in process `syz.4.1847'. [ 320.356093][T12981] netlink: 11 bytes leftover after parsing attributes in process `syz.3.1852'. [ 320.449088][T12984] netlink: 8 bytes leftover after parsing attributes in process `syz.2.1853'. [ 320.461287][T12984] netlink: 40 bytes leftover after parsing attributes in process `syz.2.1853'. [ 320.472003][T12984] netlink: 16 bytes leftover after parsing attributes in process `syz.2.1853'. [ 320.590825][T12989] netlink: 52 bytes leftover after parsing attributes in process `syz.1.1856'. [ 320.602574][T12989] netlink: 160 bytes leftover after parsing attributes in process `syz.1.1856'. [ 320.626792][T12989] netlink: 'syz.1.1856': attribute type 11 has an invalid length. [ 321.136098][T13015] netlink: 'syz.2.1863': attribute type 10 has an invalid length. [ 321.731565][T13040] netlink: 'syz.3.1868': attribute type 1 has an invalid length. [ 321.776905][T13040] bond5: entered promiscuous mode [ 321.783561][T13040] 8021q: adding VLAN 0 to HW filter on device bond5 [ 322.173061][T13060] bond5: entered allmulticast mode [ 322.216378][T13063] xt_TCPMSS: Only works on TCP SYN packets [ 322.525171][T13074] syz_tun: left allmulticast mode [ 322.540765][T13074] bridge0: port 3(syz_tun) entered disabled state [ 322.568969][T13074] team0: left allmulticast mode [ 322.582951][T13074] team_slave_0: left allmulticast mode [ 322.602922][T13074] team_slave_1: left allmulticast mode [ 322.623223][T13074] team0: left promiscuous mode [ 322.629618][T13074] team_slave_0: left promiscuous mode [ 322.644743][T13074] team_slave_1: left promiscuous mode [ 322.663708][T13074] bridge0: port 4(team0) entered disabled state [ 322.705022][T13074] bridge_slave_0: left allmulticast mode [ 322.710730][T13074] bridge_slave_0: left promiscuous mode [ 322.742785][T13074] bridge0: port 1(bridge_slave_0) entered disabled state [ 322.751754][T13078] xt_time: invalid argument - start or stop time greater than 23:59:59 [ 322.768507][T13074] bridge_slave_1: left allmulticast mode [ 322.782892][T13074] bridge_slave_1: left promiscuous mode [ 322.794955][T13074] bridge0: port 2(bridge_slave_1) entered disabled state [ 322.852040][T13074] team0: Port device team_slave_0 removed [ 322.870767][T13074] team0: Port device team_slave_1 removed [ 322.883707][T13074] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 322.895392][T13074] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 322.904403][T13074] A link change request failed with some changes committed already. Interface hsr_slave_0 may have been left with an inconsistent configuration, please check. [ 322.930381][T13075] team0: Device xfrm0 is of different type [ 323.319075][T13101] netlink: 'syz.2.1882': attribute type 21 has an invalid length. [ 323.557497][T13109] lo speed is unknown, defaulting to 1000 [ 324.040150][T13131] __nla_validate_parse: 25 callbacks suppressed [ 324.040183][T13131] netlink: 8 bytes leftover after parsing attributes in process `syz.2.1890'. [ 324.058876][T13131] netlink: 40 bytes leftover after parsing attributes in process `syz.2.1890'. [ 324.069868][T13131] netlink: 16 bytes leftover after parsing attributes in process `syz.2.1890'. [ 324.080458][T13131] netlink: 16 bytes leftover after parsing attributes in process `syz.2.1890'. [ 324.368984][T13142] syzkaller0: entered promiscuous mode [ 324.375701][T13142] syzkaller0: entered allmulticast mode [ 324.388166][T13142] tipc: Enabled bearer , priority 0 [ 324.407264][T13142] tipc: Resetting bearer [ 324.424110][T13141] tipc: Resetting bearer [ 324.451541][T13141] tipc: Disabling bearer [ 324.555827][T13138] netlink: 8 bytes leftover after parsing attributes in process `syz.2.1893'. [ 324.742613][T13162] netlink: 8 bytes leftover after parsing attributes in process `syz.3.1900'. [ 324.841457][T13162] lo speed is unknown, defaulting to 1000 [ 325.016871][T13174] netlink: 8 bytes leftover after parsing attributes in process `syz.1.1903'. [ 325.034040][T13174] netlink: 16 bytes leftover after parsing attributes in process `syz.1.1903'. [ 325.058306][T13174] netlink: 16 bytes leftover after parsing attributes in process `syz.1.1903'. [ 325.256957][T13182] netlink: 12 bytes leftover after parsing attributes in process `syz.2.1906'. [ 325.263747][T13162] A link change request failed with some changes committed already. Interface gretap0 may have been left with an inconsistent configuration, please check. [ 325.296234][T13182] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 325.305788][T13180] openvswitch: netlink: Flow actions attr not present in new flow. [ 325.311638][T13182] bridge4: port 1(dummy0) entered blocking state [ 325.322661][T13182] bridge4: port 1(dummy0) entered disabled state [ 325.330440][T13182] dummy0: entered allmulticast mode [ 325.338460][T13182] dummy0: entered promiscuous mode [ 325.347650][T13182] netlink: 'syz.2.1906': attribute type 10 has an invalid length. [ 325.380150][T13182] bridge4: port 1(dummy0) entered blocking state [ 325.387972][T13182] bridge4: port 1(dummy0) entered forwarding state [ 325.398697][T13182] dummy0: left allmulticast mode [ 325.407998][T13182] bridge4: port 1(dummy0) entered disabled state [ 325.695099][ T5623] Bluetooth: hci5: unexpected cc 0x0c03 length: 249 > 1 [ 325.710205][ T5623] Bluetooth: hci5: unexpected cc 0x1003 length: 249 > 9 [ 325.721032][ T5623] Bluetooth: hci5: unexpected cc 0x1001 length: 249 > 9 [ 325.729842][ T5623] Bluetooth: hci5: unexpected cc 0x0c23 length: 249 > 4 [ 325.743596][ T5623] Bluetooth: hci5: unexpected cc 0x0c38 length: 249 > 2 [ 325.823658][ T5631] Bluetooth: hci5: unexpected cc 0x0c03 length: 249 > 1 [ 325.832480][ T5631] Bluetooth: hci5: unexpected cc 0x1003 length: 249 > 9 [ 325.848028][ T5631] Bluetooth: hci5: unexpected cc 0x1001 length: 249 > 9 [ 325.858662][ T5631] Bluetooth: hci5: unexpected cc 0x0c23 length: 249 > 4 [ 325.870489][ T5631] Bluetooth: hci5: unexpected cc 0x0c38 length: 249 > 2 [ 326.127971][T13213] netlink: 'syz.1.1913': attribute type 1 has an invalid length. [ 326.208428][T13213] netlink: 'syz.1.1913': attribute type 1 has an invalid length. [ 326.681322][T13232] netlink: 'syz.1.1917': attribute type 12 has an invalid length. [ 326.692062][T13232] netlink: 'syz.1.1917': attribute type 14 has an invalid length. [ 326.972275][T13241] IPVS: set_ctl: invalid protocol: 51 224.0.0.2:20000 [ 327.108379][T13245] netlink: 'syz.2.1920': attribute type 4 has an invalid length. [ 327.128217][T13232] syzkaller0: entered promiscuous mode [ 327.134195][T13232] syzkaller0: entered allmulticast mode [ 327.160015][T13246] netlink: 'syz.2.1920': attribute type 4 has an invalid length. [ 327.164373][T13196] lo speed is unknown, defaulting to 1000 [ 327.536919][ T12] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 327.558930][ T5353] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 327.587693][ T5353] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 327.618087][ T5353] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 328.014519][ T5631] Bluetooth: hci5: command tx timeout [ 328.657819][ T5723] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 329.323877][T13251] veth0_macvtap: left promiscuous mode [ 329.469941][T13264] ip6t_srh: unknown srh invflags 4000 [ 329.617910][T13268] __nla_validate_parse: 12 callbacks suppressed [ 329.617935][T13268] netlink: 8 bytes leftover after parsing attributes in process `syz.1.1926'. [ 329.636124][T13268] netlink: 16 bytes leftover after parsing attributes in process `syz.1.1926'. [ 329.656939][T13268] netlink: 16 bytes leftover after parsing attributes in process `syz.1.1926'. [ 329.659235][T13270] netlink: 36 bytes leftover after parsing attributes in process `syz.3.1925'. [ 329.693143][ T5353] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 329.928452][T13275] openvswitch: netlink: Missing key (keys=40, expected=100) [ 330.093074][ T5631] Bluetooth: hci5: command tx timeout [ 330.238964][T13196] bridge0: port 1(bridge_slave_0) entered blocking state [ 330.253549][T13196] bridge0: port 1(bridge_slave_0) entered disabled state [ 330.260965][T13196] bridge_slave_0: entered allmulticast mode [ 330.270101][T13196] bridge_slave_0: entered promiscuous mode [ 330.280173][T13196] bridge0: port 2(bridge_slave_1) entered blocking state [ 330.289972][T13196] bridge0: port 2(bridge_slave_1) entered disabled state [ 330.298238][T13196] bridge_slave_1: entered allmulticast mode [ 330.306658][T13196] bridge_slave_1: entered promiscuous mode [ 330.352668][T13196] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 330.366332][T13196] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 330.459057][T13196] team0: Port device team_slave_0 added [ 330.467749][T13296] netlink: 8 bytes leftover after parsing attributes in process `syz.1.1933'. [ 330.477866][T13196] team0: Port device team_slave_1 added [ 330.575740][T13196] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 330.593204][T13196] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 330.647023][T13196] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 330.682712][T13196] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 330.698961][T13303] netlink: 72 bytes leftover after parsing attributes in process `syz.1.1934'. [ 330.708212][T13196] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 330.732896][T13303] netlink: 12 bytes leftover after parsing attributes in process `syz.1.1934'. [ 330.734843][ T5353] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 330.759969][T13303] netlink: 4 bytes leftover after parsing attributes in process `syz.1.1934'. [ 330.786937][T13196] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 330.949645][T13196] hsr_slave_0: entered promiscuous mode [ 330.965658][T13196] hsr_slave_1: entered promiscuous mode [ 330.977825][T13196] debugfs: 'hsr0' already exists in 'hsr' [ 330.994090][T13196] Cannot create hsr debugfs directory [ 331.170184][T13320] netlink: 'syz.1.1938': attribute type 1 has an invalid length. [ 331.200086][T13320] netlink: 224 bytes leftover after parsing attributes in process `syz.1.1938'. [ 331.341389][T13330] netlink: 24 bytes leftover after parsing attributes in process `syz.3.1940'. [ 331.357588][T13329] xt_TCPMSS: Only works on TCP SYN packets [ 331.374848][ T12] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 331.730138][T13196] netdevsim netdevsim5 netdevsim0: renamed from eth0 [ 331.757192][T13196] 8021q: adding VLAN 0 to HW filter on device netdevsim0 [ 331.774811][ T5353] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 331.785064][T13196] netdevsim netdevsim5 netdevsim1: renamed from eth1 [ 331.811160][T13196] 8021q: adding VLAN 0 to HW filter on device netdevsim1 [ 331.820056][T13196] netdevsim netdevsim5 netdevsim2: renamed from eth2 [ 331.844288][T13196] 8021q: adding VLAN 0 to HW filter on device netdevsim2 [ 331.858430][T13196] netdevsim netdevsim5 netdevsim3: renamed from eth3 [ 331.874876][T13196] 8021q: adding VLAN 0 to HW filter on device netdevsim3 [ 332.039724][T13359] syzkaller1: entered promiscuous mode [ 332.046351][T13359] syzkaller1: entered allmulticast mode [ 332.117172][T13196] 8021q: adding VLAN 0 to HW filter on device bond0 [ 332.140076][T13196] 8021q: adding VLAN 0 to HW filter on device team0 [ 332.157788][ T7805] bridge0: port 1(bridge_slave_0) entered blocking state [ 332.165058][ T7805] bridge0: port 1(bridge_slave_0) entered forwarding state [ 332.173859][ T5631] Bluetooth: hci5: command tx timeout [ 332.192718][ T7805] bridge0: port 2(bridge_slave_1) entered blocking state [ 332.200004][ T7805] bridge0: port 2(bridge_slave_1) entered forwarding state [ 332.277564][T13366] netlink: 'syz.3.1949': attribute type 4 has an invalid length. [ 332.302507][T13366] netlink: 'syz.3.1949': attribute type 4 has an invalid length. [ 332.456194][ T7813] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 332.552105][T13374] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 332.573245][T13374] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 332.597012][T13374] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 332.724869][T13376] lo speed is unknown, defaulting to 1000 [ 333.442442][T13407] The dccp option matching is deprecated and scheduled to be removed in 2027. [ 333.442442][T13407] Please contact the netfilter-devel mailing list or update your nftables rules. [ 333.467119][T13196] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 333.857050][ T5723] net_ratelimit: 6 callbacks suppressed [ 333.857072][ T5723] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 334.041724][T13196] veth0_vlan: entered promiscuous mode [ 334.166298][T13196] veth1_vlan: entered promiscuous mode [ 334.253918][ T5631] Bluetooth: hci5: command tx timeout [ 334.275375][T13196] veth0_macvtap: entered promiscuous mode [ 334.321226][T13196] veth1_macvtap: entered promiscuous mode [ 334.334944][ C0] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 334.344796][T13196] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 334.376617][T13196] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 334.418786][ T7803] netdevsim netdevsim5 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 334.441782][ T7803] netdevsim netdevsim5 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 334.460578][ T7803] netdevsim netdevsim5 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 334.481597][ T7803] netdevsim netdevsim5 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 334.703389][ T1028] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 334.777745][ T7803] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 334.801303][ T7803] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 334.893460][ T5353] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 334.934400][ T7803] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 334.963671][ T7803] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 335.019675][T13470] __nla_validate_parse: 14 callbacks suppressed [ 335.019697][T13470] netlink: 8 bytes leftover after parsing attributes in process `syz.2.1976'. [ 335.159262][ T5623] Bluetooth: hci6: unexpected cc 0x0c03 length: 249 > 1 [ 335.174341][ T5623] Bluetooth: hci6: unexpected cc 0x1003 length: 249 > 9 [ 335.185972][ T5623] Bluetooth: hci6: unexpected cc 0x1001 length: 249 > 9 [ 335.197064][ T5623] Bluetooth: hci6: unexpected cc 0x0c23 length: 249 > 4 [ 335.207531][ T5623] Bluetooth: hci6: unexpected cc 0x0c38 length: 249 > 2 [ 335.285962][T13479] netlink: 43 bytes leftover after parsing attributes in process `syz.1.1977'. [ 335.340448][T13477] batman_adv: batadv0: Adding interface: vlan2 [ 335.366826][T13477] batman_adv: batadv0: The MTU of interface vlan2 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 335.440450][T13477] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 335.483100][T13477] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 335.515150][T13477] batman_adv: batadv0: Not using interface vlan2 (retrying later): interface not active [ 335.744761][T13496] netlink: 180 bytes leftover after parsing attributes in process `syz.3.1980'. [ 335.767545][T13496] netlink: 8 bytes leftover after parsing attributes in process `syz.3.1980'. [ 335.834158][ T13] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 335.933337][ T5353] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 336.697685][T13509] bond0: entered promiscuous mode [ 336.722032][T13509] bond_slave_0: entered promiscuous mode [ 336.744566][T13509] bond_slave_1: entered promiscuous mode [ 336.760645][T13509] ipvlan1: entered promiscuous mode [ 336.771209][T13517] netlink: 'syz.3.1986': attribute type 2 has an invalid length. [ 336.781137][T13509] ipvlan1: left promiscuous mode [ 336.791515][T13520] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 336.814934][T13509] bond0: left promiscuous mode [ 336.822438][T13520] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 336.841448][T13509] bond_slave_0: left promiscuous mode [ 336.847980][T13520] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 336.872515][T13509] bond_slave_1: left promiscuous mode [ 336.931980][T13515] bond0: entered promiscuous mode [ 336.943877][ T7805] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 336.946389][T13515] bond_slave_0: entered promiscuous mode [ 336.972006][T13515] bond_slave_1: entered promiscuous mode [ 336.995086][T13515] ipvlan1: entered promiscuous mode [ 337.002639][T13515] ipvlan1: left promiscuous mode [ 337.011597][T13515] bond0: left promiscuous mode [ 337.030821][T13515] bond_slave_0: left promiscuous mode [ 337.052348][T13515] bond_slave_1: left promiscuous mode [ 337.293466][ T5631] Bluetooth: hci6: command tx timeout [ 337.478790][T13473] lo speed is unknown, defaulting to 1000 [ 337.635672][T13555] netlink: 24 bytes leftover after parsing attributes in process `syz.5.1990'. [ 337.693162][T13557] netlink: 180 bytes leftover after parsing attributes in process `syz.3.1991'. [ 337.716634][T13557] netlink: 8 bytes leftover after parsing attributes in process `syz.3.1991'. [ 338.921164][T13584] netlink: 8 bytes leftover after parsing attributes in process `syz.3.1997'. [ 338.954341][T13584] netlink: 40 bytes leftover after parsing attributes in process `syz.3.1997'. [ 338.984913][T13584] netlink: 16 bytes leftover after parsing attributes in process `syz.3.1997'. [ 339.056579][ T24] net_ratelimit: 6 callbacks suppressed [ 339.056600][ T24] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 339.174818][ T7813] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 339.373084][ C0] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 339.381949][ T5631] Bluetooth: hci6: command tx timeout [ 339.411580][T13608] netlink: 'syz.2.2002': attribute type 32 has an invalid length. [ 339.533347][T13610] bridge0: port 1(vlan2) entered blocking state [ 339.539954][T13610] bridge0: port 1(vlan2) entered disabled state [ 339.549530][T13610] vlan2: entered allmulticast mode [ 339.555725][T13610] dummy0: entered allmulticast mode [ 339.567187][T13473] bridge0: port 1(bridge_slave_0) entered blocking state [ 339.583246][T13473] bridge0: port 1(bridge_slave_0) entered disabled state [ 339.600312][T13473] bridge_slave_0: entered allmulticast mode [ 339.625648][T13473] bridge_slave_0: entered promiscuous mode [ 339.669931][T13473] bridge0: port 2(bridge_slave_1) entered blocking state [ 339.703342][T13473] bridge0: port 2(bridge_slave_1) entered disabled state [ 339.731246][T13473] bridge_slave_1: entered allmulticast mode [ 339.764335][T13473] bridge_slave_1: entered promiscuous mode [ 339.901723][T13615] lo speed is unknown, defaulting to 1000 [ 339.917094][T13473] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 339.971739][T13473] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 340.065522][T13623] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 340.087088][T13623] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 340.096950][ T5353] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 340.099531][T13623] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 340.134829][T13623] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 340.147946][T13623] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 340.173348][T13623] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 340.237446][T13473] team0: Port device team_slave_0 added [ 340.269252][T13473] team0: Port device team_slave_1 added [ 340.379364][T13473] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 340.391416][T13473] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 340.420178][T13473] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 340.448610][T13473] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 340.477798][T13473] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 340.509435][T13473] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 340.598202][T13634] __nla_validate_parse: 1 callbacks suppressed [ 340.598223][T13634] netlink: 180 bytes leftover after parsing attributes in process `syz.2.2009'. [ 340.626182][T13634] netlink: 8 bytes leftover after parsing attributes in process `syz.2.2009'. [ 340.755577][T13473] hsr_slave_0: entered promiscuous mode [ 340.762600][T13473] hsr_slave_1: entered promiscuous mode [ 340.784358][T13473] debugfs: 'hsr0' already exists in 'hsr' [ 340.797058][T13473] Cannot create hsr debugfs directory [ 341.454449][ T5631] Bluetooth: hci6: command tx timeout [ 341.564480][T13473] netdevsim netdevsim6 netdevsim0: renamed from eth0 [ 341.580774][T13473] 8021q: adding VLAN 0 to HW filter on device netdevsim0 [ 341.607947][T13473] netdevsim netdevsim6 netdevsim1: renamed from eth1 [ 341.653985][T13473] 8021q: adding VLAN 0 to HW filter on device netdevsim1 [ 341.674676][T13473] netdevsim netdevsim6 netdevsim2: renamed from eth2 [ 341.687365][T13473] 8021q: adding VLAN 0 to HW filter on device netdevsim2 [ 341.709181][T13649] hsr0: A HSR master's MTU cannot be greater than the smallest MTU of its slaves minus the HSR Tag length (6 octets). [ 341.727316][T13473] netdevsim netdevsim6 netdevsim3: renamed from eth3 [ 341.766066][T13473] 8021q: adding VLAN 0 to HW filter on device netdevsim3 [ 341.939412][T13673] workqueue: name exceeds WQ_NAME_LEN. Truncating to: ç–½mÔ%A¯úÆÿAZøZ´”àIƺ¥þ àø§% [ 342.136057][T13679] netlink: 180 bytes leftover after parsing attributes in process `syz.3.2021'. [ 342.158419][T13679] netlink: 8 bytes leftover after parsing attributes in process `syz.3.2021'. [ 342.235473][T13473] 8021q: adding VLAN 0 to HW filter on device bond0 [ 342.290655][T13681] bridge0: port 1(bridge_slave_0) entered disabled state [ 342.311216][T13681] bridge0: port 2(bridge_slave_1) entered disabled state [ 342.380535][T13677] syzkaller0: entered promiscuous mode [ 342.395039][T13677] syzkaller0: entered allmulticast mode [ 343.249516][T13473] 8021q: adding VLAN 0 to HW filter on device team0 [ 343.279408][ T1122] bridge0: port 1(bridge_slave_0) entered blocking state [ 343.286663][ T1122] bridge0: port 1(bridge_slave_0) entered forwarding state [ 343.354965][ T1122] bridge0: port 2(bridge_slave_1) entered blocking state [ 343.358075][T13704] netlink: 8 bytes leftover after parsing attributes in process `syz.1.2027'. [ 343.362212][ T1122] bridge0: port 2(bridge_slave_1) entered forwarding state [ 343.418898][T13708] netlink: 4 bytes leftover after parsing attributes in process `syz.2.2028'. [ 343.464196][T13711] netlink: 4 bytes leftover after parsing attributes in process `syz.2.2028'. [ 343.483748][T13706] netdevsim netdevsim2 €Â: renamed from netdevsim0 (while UP) [ 343.536491][T13706] netlink: 'syz.2.2028': attribute type 2 has an invalid length. [ 343.536669][ T5631] Bluetooth: hci6: command tx timeout [ 343.631748][T13718] netlink: 16 bytes leftover after parsing attributes in process `syz.1.2029'. [ 343.672399][T13706] : entered promiscuous mode [ 343.985645][T13730] netlink: 8 bytes leftover after parsing attributes in process `syz.3.2032'. [ 344.165294][ T29] audit: type=1804 audit(1784363933.320:8): pid=13746 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=invalid_pcr cause=open_writers comm="syz.1.2035" name="/newroot/449/cgroup.controllers" dev="tmpfs" ino=2330 res=1 errno=0 [ 344.262585][ T29] audit: type=1800 audit(1784363933.320:9): pid=13746 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.1.2035" name="cgroup.controllers" dev="tmpfs" ino=2330 res=0 errno=0 [ 344.286541][ T24] net_ratelimit: 20 callbacks suppressed [ 344.286561][ T24] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 344.413112][ C0] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 344.665252][T13758] netlink: 40 bytes leftover after parsing attributes in process `syz.5.2039'. [ 344.688075][T13758] netlink: 'syz.5.2039': attribute type 4 has an invalid length. [ 344.770864][ T13] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 344.792433][T13758] A link change request failed with some changes committed already. Interface bond0 may have been left with an inconsistent configuration, please check. [ 344.869513][T13765] netlink: 'syz.1.2040': attribute type 58 has an invalid length. [ 344.896328][T13764] netlink: 'syz.1.2040': attribute type 58 has an invalid length. [ 345.085105][T13473] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 345.295830][ T5723] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 345.410003][T13784] lo speed is unknown, defaulting to 1000 [ 345.437120][T13788] sctp: [Deprecated]: syz.1.2046 (pid 13788) Use of struct sctp_assoc_value in delayed_ack socket option. [ 345.437120][T13788] Use struct sctp_sack_info instead [ 345.507141][T13786] can: request_module (can-proto-0) failed. [ 345.933600][ T7813] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 345.977698][T13804] netlink: 'syz.1.2049': attribute type 32 has an invalid length. [ 346.104026][T13473] veth0_vlan: entered promiscuous mode [ 346.168917][T13473] veth1_vlan: entered promiscuous mode [ 346.256771][T13473] veth0_macvtap: entered promiscuous mode [ 346.273509][T13473] veth1_macvtap: entered promiscuous mode [ 346.311424][T13473] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 346.334556][ T808] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 346.366947][T13473] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 346.406653][ T1122] netdevsim netdevsim6 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 346.426816][ T1122] netdevsim netdevsim6 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 346.453764][ T1122] netdevsim netdevsim6 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 346.475801][ T1122] netdevsim netdevsim6 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 346.509615][T13815] __nla_validate_parse: 6 callbacks suppressed [ 346.509636][T13815] netlink: 12 bytes leftover after parsing attributes in process `syz.3.2052'. [ 346.631592][ T7803] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 346.645809][ T7803] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 346.831124][ T7803] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 346.853452][ T7803] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 346.975190][ T5631] Bluetooth: hci0: Opcode 0x0c03 failed: -110 [ 347.074870][ T7803] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 347.250067][T13831] netlink: 'syz.1.2057': attribute type 24 has an invalid length. [ 347.263831][T13833] netlink: 4 bytes leftover after parsing attributes in process `syz.6.1974'. [ 347.284886][T13831] netlink: 8 bytes leftover after parsing attributes in process `syz.1.2057'. [ 347.314027][T13831] bond0: option ad_actor_sys_prio: mode dependency failed, not supported in mode balance-rr(0) [ 347.376585][ T808] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 347.392998][ C0] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 347.738528][T13846] netlink: 12 bytes leftover after parsing attributes in process `syz.3.2061'. [ 348.015314][T13852] netlink: 8 bytes leftover after parsing attributes in process `syz.1.2064'. [ 348.066719][T13852] macvlan3: entered allmulticast mode [ 348.080524][T13852] gretap0: entered allmulticast mode [ 348.281886][T13858] netlink: 4 bytes leftover after parsing attributes in process `syz.2.2067'. [ 348.651823][T13863] syzkaller0: entered promiscuous mode [ 348.678368][T13863] syzkaller0: entered allmulticast mode [ 348.937030][T13883] netlink: 96 bytes leftover after parsing attributes in process `syz.1.2074'. [ 349.260932][T13900] netlink: 4 bytes leftover after parsing attributes in process `syz.3.2077'. [ 349.308262][ T7813] net_ratelimit: 5 callbacks suppressed [ 349.308284][ T7813] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 349.453002][ C0] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 349.453263][ T808] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 350.433410][ T7813] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 350.498266][ T24] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 351.540357][ T808] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 351.573180][ T7813] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 352.178060][T13908] netlink: 8 bytes leftover after parsing attributes in process `syz.6.2080'. [ 352.310061][T13913] nbd: socks must be embedded in a SOCK_ITEM attr [ 352.434482][ C0] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 352.476781][T13919] nbd: couldn't find a device at index 0 [ 352.577258][ T24] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 352.708525][T13930] veth0_to_bond: left promiscuous mode [ 352.713421][ T1028] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 352.743292][T13930] veth0_to_bond: left allmulticast mode [ 352.809792][T13930] macvlan0: left promiscuous mode [ 352.863045][T13930] bridge2: left promiscuous mode [ 352.887175][T13930] bridge2: left allmulticast mode [ 352.928655][T13930] veth5: left allmulticast mode [ 352.941883][T13930] gretap0: left allmulticast mode [ 352.954492][T13930] macvlan3: left allmulticast mode [ 353.220018][T13954] netlink: 64 bytes leftover after parsing attributes in process `syz.6.2096'. [ 353.500696][T13965] netlink: 8 bytes leftover after parsing attributes in process `syz.1.2098'. [ 354.413764][ T13] net_ratelimit: 8 callbacks suppressed [ 354.413786][ T13] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 354.493072][ C0] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 354.654150][ T5723] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 354.943206][ T7803] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 355.693898][ T808] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 356.043170][ T1028] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 356.255755][T13961] nci: __nci_request: wait_for_completion_interruptible_timeout failed -512 [ 356.337578][T13951] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 356.456782][T13982] netlink: 24 bytes leftover after parsing attributes in process `syz.5.2103'. [ 356.481371][T13986] xt_CT: You must specify a L4 protocol and not use inversions on it [ 356.736801][ T808] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 356.750895][T13998] netlink: 'syz.1.2107': attribute type 4 has an invalid length. [ 357.010922][T14017] netlink: 'syz.1.2112': attribute type 1 has an invalid length. [ 357.084642][ T10] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 357.134859][T14021] bond6: (slave dummy0): making interface the new active one [ 357.145789][ T7803] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 357.160410][T14021] bond6: (slave dummy0): Enslaving as an active interface with an up link [ 357.186560][T14017] bond6: (slave dummy0): Releasing active interface [ 357.227476][T14017] bond0: (slave bond_slave_0): Releasing backup interface [ 357.252464][T14017] bond_slave_0: left promiscuous mode [ 357.279102][T14017] team0: Port device team_slave_0 removed [ 357.340166][T14030] IPVS: set_ctl: invalid protocol: 26 0.90.103.255:43690 [ 357.390917][T14017] team0: Port device team_slave_1 removed [ 357.392177][T14030] IPVS: set_ctl: invalid protocol: 25965 114.121.46.101:30309 [ 357.406550][T14017] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 357.485469][T14030] IPVS: set_ctl: invalid protocol: 76 0.1.1.4:0 [ 357.780674][T14038] netlink: 'syz.3.2117': attribute type 16 has an invalid length. [ 357.802980][T14038] netlink: 64138 bytes leftover after parsing attributes in process `syz.3.2117'. [ 357.866863][T14035] netlink: 36 bytes leftover after parsing attributes in process `syz.3.2117'. [ 357.938289][T14041] netlink: 16 bytes leftover after parsing attributes in process `syz.2.2118'. [ 357.992611][T14042] netlink: 36 bytes leftover after parsing attributes in process `syz.2.2118'. [ 358.016126][T14035] netlink: 36 bytes leftover after parsing attributes in process `syz.3.2117'. [ 358.040826][T14035] netlink: 36 bytes leftover after parsing attributes in process `syz.3.2117'. [ 358.064703][T14035] netlink: 36 bytes leftover after parsing attributes in process `syz.3.2117'. [ 358.110196][T14035] netlink: 36 bytes leftover after parsing attributes in process `syz.3.2117'. [ 358.169114][T14035] netlink: 36 bytes leftover after parsing attributes in process `syz.3.2117'. [ 358.208803][T14035] netlink: 36 bytes leftover after parsing attributes in process `syz.3.2117'. [ 358.247627][T14048] netlink: 'syz.5.2121': attribute type 28 has an invalid length. [ 358.272620][T14048] netlink: 'syz.5.2121': attribute type 3 has an invalid length. [ 358.350275][T14049] veth0: entered promiscuous mode [ 359.075617][T14072] syzkaller1: tun_chr_ioctl cmd 2147767506 [ 359.351649][T14088] syzkaller0: entered promiscuous mode [ 359.382004][T14088] syzkaller0: entered allmulticast mode [ 359.517737][T14095] net_ratelimit: 8 callbacks suppressed [ 359.517760][T14095] A link change request failed with some changes committed already. Interface gre1 may have been left with an inconsistent configuration, please check. [ 359.542644][ T1028] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 359.818024][T14104] x_tables: duplicate underflow at hook 3 [ 359.855000][ T5723] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 360.395989][T14124] syzkaller0: entered promiscuous mode [ 360.402098][T14124] syzkaller0: entered allmulticast mode [ 360.418659][T14124] sch_tbf: peakrate 11 is lower than or equals to rate 2048 ! [ 360.704985][T14128] xt_CT: No such helper "syz0" [ 360.896192][ T808] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 361.009440][T14143] erspan0: entered promiscuous mode [ 361.033277][T14143] gretap0: entered promiscuous mode [ 361.058944][T14143] gretap0: left promiscuous mode [ 361.079474][T14143] erspan0: left promiscuous mode [ 361.399937][T14154] syzkaller0: entered promiscuous mode [ 361.428478][T14154] syzkaller0: entered allmulticast mode [ 361.887436][T14172] geneve1: left promiscuous mode [ 361.934033][ T24] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 362.973888][ T808] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 363.031681][T14193] lo speed is unknown, defaulting to 1000 [ 363.169226][T14199] bond1: option active_slave: mode dependency failed, not supported in mode balance-xor(2) [ 363.231554][T14199] bond1 (unregistering): Released all slaves [ 363.508372][T14204] lo speed is unknown, defaulting to 1000 [ 363.581965][T14214] C: renamed from veth1_to_team (while UP) [ 363.640830][T14214] __nla_validate_parse: 149 callbacks suppressed [ 363.640852][T14214] netlink: 164 bytes leftover after parsing attributes in process `syz.5.2168'. [ 364.015601][ T808] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 364.133273][T14234] netlink: 276 bytes leftover after parsing attributes in process `syz.5.2172'. [ 364.257096][T14234] netlink: 28 bytes leftover after parsing attributes in process `syz.5.2172'. [ 364.340545][T14234] netlink: 16 bytes leftover after parsing attributes in process `syz.5.2172'. [ 364.417670][T14241] netlink: 8 bytes leftover after parsing attributes in process `syz.3.2173'. [ 364.540677][T14247] netlink: 8 bytes leftover after parsing attributes in process `syz.5.2175'. [ 364.628829][T14252] ipip1: entered promiscuous mode [ 365.056632][ T24] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 365.154847][T14269] netlink: 8 bytes leftover after parsing attributes in process `syz.1.2181'. [ 365.170728][T14272] syz.5.2183: vmalloc error: size 8589938688, exceeds total pages, mode:0xdc0(GFP_KERNEL|__GFP_ZERO), nodemask=(null),cpuset=/,mems_allowed=0-1 [ 365.193336][T14269] netlink: 12 bytes leftover after parsing attributes in process `syz.1.2181'. [ 365.193394][T14272] CPU: 0 UID: 0 PID: 14272 Comm: syz.5.2183 Not tainted syzkaller #0 PREEMPT(full) [ 365.193417][T14272] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/09/2026 [ 365.193428][T14272] Call Trace: [ 365.193435][T14272] [ 365.193445][T14272] dump_stack_lvl+0xe8/0x150 [ 365.193592][T14272] warn_alloc+0x24c/0x270 [ 365.193653][T14272] ? stack_depot_save_flags+0x33/0x800 [ 365.193751][T14272] ? __pfx_warn_alloc+0x10/0x10 [ 365.193776][T14272] ? kasan_save_track+0x3e/0x80 [ 365.193810][T14272] ? __kasan_kmalloc+0x93/0xb0 [ 365.193834][T14272] ? xsk_setsockopt+0x52a/0x960 [ 365.193946][T14272] ? do_sock_setsockopt+0x17c/0x1b0 [ 365.194052][T14272] ? __x64_sys_setsockopt+0x13d/0x1b0 [ 365.194077][T14272] ? do_syscall_64+0x174/0x580 [ 365.194142][T14272] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 365.194188][T14272] __vmalloc_node_range_noprof+0x12c/0x1730 [ 365.194241][T14272] ? __pfx___vmalloc_node_range_noprof+0x10/0x10 [ 365.194267][T14272] ? __kasan_kmalloc+0x93/0xb0 [ 365.194292][T14272] ? __kmalloc_cache_noprof+0x32d/0x660 [ 365.194316][T14272] ? __kmalloc_cache_noprof+0x150/0x660 [ 365.194343][T14272] vmalloc_user_noprof+0xad/0xe0 [ 365.194366][T14272] ? xskq_create+0xbf/0x170 [ 365.194391][T14272] xskq_create+0xbf/0x170 [ 365.194418][T14272] xsk_init_queue+0x8a/0xe0 [ 365.194446][T14272] xsk_setsockopt+0x52a/0x960 [ 365.194472][T14272] ? __pfx_xsk_setsockopt+0x10/0x10 [ 365.194495][T14272] ? __pfx_aa_sk_perm+0x10/0x10 [ 365.194588][T14272] ? aa_sock_opt_perm+0xff/0x1a0 [ 365.194611][T14272] ? bpf_lsm_socket_setsockopt+0x9/0x20 [ 365.194656][T14272] ? __pfx_xsk_setsockopt+0x10/0x10 [ 365.194682][T14272] do_sock_setsockopt+0x17c/0x1b0 [ 365.194715][T14272] __x64_sys_setsockopt+0x13d/0x1b0 [ 365.194745][T14272] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 365.194766][T14272] do_syscall_64+0x174/0x580 [ 365.194796][T14272] ? trace_irq_disable+0x3b/0x140 [ 365.194831][T14272] ? clear_bhb_loop+0x40/0x90 [ 365.194863][T14272] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 365.194882][T14272] RIP: 0033:0x7f7acb79de99 [ 365.194900][T14272] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 365.194916][T14272] RSP: 002b:00007f7acc69e028 EFLAGS: 00000246 ORIG_RAX: 0000000000000036 [ 365.194937][T14272] RAX: ffffffffffffffda RBX: 00007f7acba25fa0 RCX: 00007f7acb79de99 [ 365.194951][T14272] RDX: 0000000000000006 RSI: 000000000000011b RDI: 0000000000000003 [ 365.194962][T14272] RBP: 00007f7acb833eaf R08: 0000000000000004 R09: 0000000000000000 [ 365.194974][T14272] R10: 0000200000000000 R11: 0000000000000246 R12: 0000000000000000 [ 365.194986][T14272] R13: 00007f7acba26038 R14: 00007f7acba25fa0 R15: 00007ffd8ebe6a08 [ 365.195019][T14272] [ 365.195054][T14272] Mem-Info: [ 365.225821][T14269] netlink: 12 bytes leftover after parsing attributes in process `syz.1.2181'. [ 365.232671][T14272] active_anon:6972 inactive_anon:0 isolated_anon:0 [ 365.232671][T14272] active_file:0 inactive_file:43342 isolated_file:0 [ 365.232671][T14272] unevictable:768 dirty:149 writeback:0 [ 365.232671][T14272] slab_reclaimable:11296 slab_unreclaimable:111390 [ 365.232671][T14272] mapped:40951 shmem:1293 pagetables:1407 [ 365.232671][T14272] sec_pagetables:0 bounce:0 [ 365.232671][T14272] kernel_misc_reclaimable:0 [ 365.232671][T14272] free:1280713 free_pcp:11970 free_cma:0 [ 365.319960][ T1028] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 365.326556][T14272] Node 0 active_anon:27888kB inactive_anon:0kB active_file:0kB inactive_file:173172kB unevictable:1536kB isolated(anon):0kB isolated(file):0kB mapped:163804kB dirty:596kB writeback:0kB shmem:3636kB shmem_thp:0kB shmem_pmdmapped:0kB anon_thp:0kB kernel_stack:13856kB pagetables:5492kB sec_pagetables:0kB all_unreclaimable? no Balloon:0kB gpu_active:0kB gpu_reclaim:0kB [ 365.342701][T14270] tipc: Enabled bearer , priority 0 [ 365.346280][T14272] Node 1 active_anon:0kB inactive_anon:0kB active_file:0kB inactive_file:196kB unevictable:1536kB isolated(anon):0kB isolated(file):0kB mapped:0kB dirty:0kB writeback:0kB shmem:1536kB shmem_thp:0kB shmem_pmdmapped:0kB anon_thp:0kB kernel_stack:32kB pagetables:136kB sec_pagetables:0kB all_unreclaimable? no Balloon:0kB gpu_active:0kB gpu_reclaim:0kB [ 365.506451][T14270] syzkaller0: entered promiscuous mode [ 365.547812][T14272] Node 0 [ 365.552724][T14269] netlink: 12 bytes leftover after parsing attributes in process `syz.1.2181'. [ 365.589147][T14270] syzkaller0: entered allmulticast mode [ 365.655348][T14272] DMA free:15360kB boost:0kB min:208kB low:260kB high:312kB reserved_highatomic:0KB free_highatomic:0KB active_anon:0kB inactive_anon:0kB active_file:0kB inactive_file:0kB unevictable:0kB writepending:0kB zspages:0kB present:15992kB managed:15360kB mlocked:0kB bounce:0kB free_pcp:0kB local_pcp:0kB free_cma:0kB [ 365.687533][T14270] tipc: Resetting bearer [ 365.697408][T14272] lowmem_reserve[]: 0 2489 2489 2489 2489 [ 365.716653][T14272] Node 0 DMA32 free:1149736kB boost:0kB min:34160kB low:42700kB high:51240kB reserved_highatomic:0KB free_highatomic:0KB active_anon:28188kB inactive_anon:0kB active_file:0kB inactive_file:173172kB unevictable:1536kB writepending:596kB zspages:0kB present:3129332kB managed:2548764kB mlocked:0kB bounce:0kB free_pcp:46212kB local_pcp:21368kB free_cma:0kB [ 365.793426][T14272] lowmem_reserve[]: 0 0 0 0 0 [ 365.800643][T14272] Node 0 Normal free:0kB boost:0kB min:0kB low:0kB high:0kB reserved_highatomic:0KB free_highatomic:0KB active_anon:0kB inactive_anon:0kB active_file:0kB inactive_file:0kB unevictable:0kB writepending:0kB zspages:0kB present:1048580kB managed:268kB mlocked:0kB bounce:0kB free_pcp:0kB local_pcp:0kB free_cma:0kB [ 365.878619][T14272] lowmem_reserve[]: 0 0 0 0 0 [ 365.897248][T14272] Node 1 Normal free:3945312kB boost:0kB min:55736kB low:69668kB high:83600kB reserved_highatomic:0KB free_highatomic:0KB active_anon:0kB inactive_anon:0kB active_file:0kB inactive_file:196kB unevictable:1536kB writepending:0kB zspages:0kB present:4194300kB managed:4111100kB mlocked:0kB bounce:0kB free_pcp:0kB local_pcp:0kB free_cma:0kB [ 365.957876][T14272] lowmem_reserve[]: 0 0 0 0 0 [ 365.963798][T14272] Node 0 DMA: 0*4kB 0*8kB 0*16kB 0*32kB 0*64kB 0*128kB 0*256kB 0*512kB 1*1024kB (U) 1*2048kB (M) 3*4096kB (M) = 15360kB [ 365.974984][ T7805] tipc: Resetting bearer [ 365.977476][T14272] Node 0 DMA32: 301*4kB (UME) 603*8kB (UME) 390*16kB (UME) 29*32kB (UME) 7*64kB (ME) 1*128kB (E) 4*256kB (ME) 6*512kB (UM) 3*1024kB (M) 3*2048kB (UE) 274*4096kB (UM) = 1149388kB [ 366.009951][T14272] Node 0 Normal: 0*4kB 0*8kB 0*16kB 0*32kB 0*64kB 0*128kB 0*256kB 0*512kB 0*1024kB 0*2048kB 0*4096kB = 0kB [ 366.025750][T14272] Node 1 Normal: 2*4kB (U) 9*8kB (UM) 9*16kB (UM) 6*32kB (UM) 7*64kB (UM) 6*128kB (UM) 5*256kB (UM) 4*512kB (UM) 2*1024kB (UM) 1*2048kB (U) 961*4096kB (M) = 3945312kB [ 366.063022][T14272] Node 0 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=1048576kB [ 366.076774][T14272] Node 0 hugepages_total=2 hugepages_free=2 hugepages_surp=0 hugepages_size=2048kB [ 366.089399][T14272] Node 1 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=1048576kB [ 366.099399][ T808] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 366.100009][T14272] Node 1 hugepages_total=2 hugepages_free=2 hugepages_surp=0 hugepages_size=2048kB [ 366.117571][T14272] 44631 total pagecache pages [ 366.127192][T14272] 0 pages in swap cache [ 366.131480][T14272] Free swap = 124996kB [ 366.136419][T14270] tipc: Resetting bearer [ 366.146723][T14272] Total swap = 124996kB [ 366.154323][T14272] 2097051 pages RAM [ 366.184593][T14272] 0 pages HighMem/MovableOnly [ 366.189384][T14272] 428178 pages reserved [ 366.198719][T14272] 0 pages cma reserved [ 367.150699][ T5723] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 368.175551][ T5723] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 368.873675][T14270] tipc: Disabling bearer [ 368.903086][ T808] tipc: Node number set to 1447992710 [ 368.959750][T14308] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 369.202146][T14308] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 369.240697][T14325] __nla_validate_parse: 6 callbacks suppressed [ 369.240721][T14325] netlink: 40 bytes leftover after parsing attributes in process `syz.3.2193'. [ 369.278670][ T808] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 369.294902][T14325] netlink: 24 bytes leftover after parsing attributes in process `syz.3.2193'. [ 369.720883][T14335] netlink: 'syz.1.2196': attribute type 1 has an invalid length. [ 369.753555][T14335] netlink: 224 bytes leftover after parsing attributes in process `syz.1.2196'. [ 369.754318][T14340] netlink: 'syz.2.2199': attribute type 4 has an invalid length. [ 369.826053][T14347] netlink: 24 bytes leftover after parsing attributes in process `syz.6.2201'. [ 369.833759][T14344] netlink: 60 bytes leftover after parsing attributes in process `syz.2.2199'. [ 369.864182][T14344] netlink: 60 bytes leftover after parsing attributes in process `syz.2.2199'. [ 369.884873][T14344] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 370.204612][T14358] netlink: 16 bytes leftover after parsing attributes in process `syz.5.2204'. [ 370.232439][T14358] netlink: 8 bytes leftover after parsing attributes in process `syz.5.2204'. [ 370.266841][T14358] netlink: 8 bytes leftover after parsing attributes in process `syz.5.2204'. [ 370.333282][ T24] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 370.380414][T14364] netlink: 12 bytes leftover after parsing attributes in process `syz.2.2208'. [ 370.485269][T14367] netlink: 'syz.2.2208': attribute type 10 has an invalid length. [ 370.547715][T14365] dummy0: left promiscuous mode [ 370.590191][T14365] bridge6: port 1(dummy0) entered blocking state [ 370.625188][T14365] bridge6: port 1(dummy0) entered disabled state [ 370.645361][T14365] dummy0: entered allmulticast mode [ 370.674425][T14365] dummy0: entered promiscuous mode [ 370.720897][T14367] dummy0: left allmulticast mode [ 370.753557][T14367] bridge6: port 1(dummy0) entered disabled state [ 371.056141][ T1028] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 371.346695][T14401] pim6reg1: entered promiscuous mode [ 371.366949][T14401] pim6reg1: entered allmulticast mode [ 371.374626][ T808] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 372.213436][T14417] 8021q: adding VLAN 0 to HW filter on device ipvlan0 [ 372.277221][T14427] sch_tbf: burst 4 is lower than device lo mtu (82) ! [ 372.414021][ T808] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 372.912005][T14459] gre2: entered promiscuous mode [ 373.635636][T14473] A link change request failed with some changes committed already. Interface bridge_slave_0 may have been left with an inconsistent configuration, please check. [ 374.208664][T14517] netlink: 'syz.6.2246': attribute type 1 has an invalid length. [ 374.232612][T14517] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 374.653883][T14538] __nla_validate_parse: 9 callbacks suppressed [ 374.653969][T14538] netlink: 24 bytes leftover after parsing attributes in process `syz.1.2251'. [ 374.720642][T14542] netlink: 'syz.3.2253': attribute type 1 has an invalid length. [ 374.777935][T14542] 8021q: adding VLAN 0 to HW filter on device bond6 [ 374.924643][T14549] bond6: (slave geneve5): making interface the new active one [ 374.935853][T14549] bond6: (slave geneve5): Enslaving as an active interface with an up link [ 375.098739][T14556] netlink: 36 bytes leftover after parsing attributes in process `syz.5.2256'. [ 375.476917][T14567] netlink: 8 bytes leftover after parsing attributes in process `syz.5.2259'. [ 375.658917][T14573] syzkaller1: tun_chr_ioctl cmd 1074025677 [ 375.676568][T14573] syzkaller1: linktype set to 805 [ 375.721067][T14577] vlan4: entered allmulticast mode [ 375.743369][T14577] bridge_slave_0: entered allmulticast mode [ 375.757065][T14581] netlink: 8 bytes leftover after parsing attributes in process `syz.2.2264'. [ 375.772322][T14577] bridge0: port 2(vlan4) entered blocking state [ 375.782549][T14581] netlink: 40 bytes leftover after parsing attributes in process `syz.2.2264'. [ 375.808276][T14581] netlink: 16 bytes leftover after parsing attributes in process `syz.2.2264'. [ 375.809363][T14577] bridge0: port 2(vlan4) entered disabled state [ 375.836117][T14577] vlan4: entered promiscuous mode [ 375.841311][T14577] bridge_slave_0: entered promiscuous mode [ 375.848233][T14577] vlan2: entered promiscuous mode [ 375.854811][T14577] dummy0: entered promiscuous mode [ 375.862002][T14586] netlink: 16 bytes leftover after parsing attributes in process `syz.2.2264'. [ 376.079720][T14585] lo speed is unknown, defaulting to 1000 [ 376.668656][T14615] netlink: 24 bytes leftover after parsing attributes in process `syz.5.2270'. [ 378.635318][T14600] netlink: 28 bytes leftover after parsing attributes in process `syz.2.2267'. [ 378.644742][T14600] netlink: 28 bytes leftover after parsing attributes in process `syz.2.2267'. [ 378.736359][ T1317] ieee802154 phy0 wpan0: encryption failed: -22 [ 379.042680][T14635] batman_adv: batadv0: Adding interface: ip6gretap1 [ 379.062165][T14635] batman_adv: batadv0: The MTU of interface ip6gretap1 is too small (1434) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 379.116645][T14635] batman_adv: batadv0: Not using interface ip6gretap1 (retrying later): interface not active [ 379.370964][T14648] netlink: 'syz.6.2278': attribute type 12 has an invalid length. [ 379.460362][T14657] xt_hashlimit: size too large, truncated to 1048576 [ 379.467201][T14655] xt_hashlimit: size too large, truncated to 1048576 [ 379.469874][T14654] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 379.687658][T14677] __nla_validate_parse: 10 callbacks suppressed [ 379.687680][T14677] netlink: 76 bytes leftover after parsing attributes in process `syz.1.2284'. [ 379.710840][T14661] faux_driver regulatory: loading /lib/firmware/regulatory.db failed with error -4 [ 379.792982][T14661] faux_driver regulatory: Direct firmware load for regulatory.db failed with error -4 [ 379.821204][T14661] faux_driver regulatory: Falling back to sysfs fallback for: regulatory.db [ 380.315569][T14694] netlink: 'syz.5.2285': attribute type 29 has an invalid length. [ 380.346107][T14694] netlink: 'syz.5.2285': attribute type 1 has an invalid length. [ 380.562200][T14714] netlink: 8 bytes leftover after parsing attributes in process `syz.2.2287'. [ 380.625252][T14716] netlink: 8 bytes leftover after parsing attributes in process `syz.1.2289'. [ 380.718942][T14716] netlink: 40 bytes leftover after parsing attributes in process `syz.1.2289'. [ 380.748660][T14714] bond7: up delay (10) is not a multiple of miimon (7), value rounded to 7 ms [ 380.773493][T14725] netlink: 16 bytes leftover after parsing attributes in process `syz.1.2289'. [ 380.823730][T14716] netlink: 16 bytes leftover after parsing attributes in process `syz.1.2289'. [ 383.259019][T14714] bond7 (unregistering): Released all slaves [ 384.273451][T14758] bridge_slave_0: left allmulticast mode [ 384.300734][T14758] bridge_slave_0: left promiscuous mode [ 384.307026][T14758] bridge0: port 1(bridge_slave_0) entered disabled state [ 384.422166][T14758] bridge_slave_1: left allmulticast mode [ 384.428237][T14758] bridge_slave_1: left promiscuous mode [ 384.438837][T14758] bridge0: port 2(bridge_slave_1) entered disabled state [ 384.475833][T14772] netlink: 68 bytes leftover after parsing attributes in process `syz.1.2301'. [ 384.506224][T14758] bond0: (slave bond_slave_0): Releasing backup interface [ 384.553846][T14758] bond0: (slave bond_slave_1): Releasing backup interface [ 384.624444][T14758] team0: Port device team_slave_0 removed [ 384.679921][T14758] team0: Port device team_slave_1 removed [ 384.687271][T14778] netlink: 8 bytes leftover after parsing attributes in process `syz.2.2303'. [ 384.698855][T14778] netlink: 40 bytes leftover after parsing attributes in process `syz.2.2303'. [ 384.700307][T14758] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 384.709441][T14778] netlink: 16 bytes leftover after parsing attributes in process `syz.2.2303'. [ 384.725931][T14758] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 384.741602][T14758] A link change request failed with some changes committed already. Interface hsr_slave_0 may have been left with an inconsistent configuration, please check. [ 384.774018][T14780] netlink: 16 bytes leftover after parsing attributes in process `syz.2.2303'. [ 384.792242][T14769] bridge3: left promiscuous mode [ 384.801154][T14769] bridge3: left allmulticast mode [ 384.836639][T14769] erspan1: left allmulticast mode [ 384.856056][T14769] xfrm1: left promiscuous mode [ 384.875734][T14769] xfrm1: left allmulticast mode [ 384.895361][T14769] bridge4: left promiscuous mode [ 384.903062][T14769] bridge4: left allmulticast mode [ 384.926649][T14769] geneve3: left allmulticast mode [ 384.947885][T14769] bond0: left promiscuous mode [ 384.983707][T14769] bond5: left promiscuous mode [ 384.995727][T14769] bond5: left allmulticast mode [ 385.045184][T14769] ipip1: left promiscuous mode [ 385.063849][T14769] gre2: left promiscuous mode [ 385.081567][ T29] audit: type=1800 audit(1784363974.230:10): pid=14775 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="syz.1.2301" name="memory.events" dev="tmpfs" ino=2594 res=0 errno=0 [ 385.160649][ T7811] netdevsim netdevsim3 eth0: unset [1, 0] type 2 family 0 port 20000 - 0 [ 385.189965][ T7811] netdevsim netdevsim3 eth0: unset [1, 1] type 2 family 0 port 6081 - 0 [ 385.230337][ T7811] netdevsim netdevsim3 eth0: unset [1, 2] type 2 family 0 port 20004 - 0 [ 385.267806][ T7811] netdevsim netdevsim3 eth1: unset [1, 0] type 2 family 0 port 20000 - 0 [ 385.294133][ T7811] netdevsim netdevsim3 eth1: unset [1, 1] type 2 family 0 port 6081 - 0 [ 385.312436][ T7811] netdevsim netdevsim3 eth1: unset [1, 2] type 2 family 0 port 20004 - 0 [ 385.343482][ T7811] netdevsim netdevsim3 eth2: unset [1, 0] type 2 family 0 port 20000 - 0 [ 385.364546][ T7811] netdevsim netdevsim3 eth2: unset [1, 1] type 2 family 0 port 6081 - 0 [ 385.389581][T14797] netlink: 'syz.5.2308': attribute type 1 has an invalid length. [ 385.401527][ T7811] netdevsim netdevsim3 eth2: unset [1, 2] type 2 family 0 port 20004 - 0 [ 385.420413][ T7811] netdevsim netdevsim3 eth3: unset [1, 0] type 2 family 0 port 20000 - 0 [ 385.435763][T14797] netlink: 224 bytes leftover after parsing attributes in process `syz.5.2308'. [ 385.456075][ T7811] netdevsim netdevsim3 eth3: unset [1, 1] type 2 family 0 port 6081 - 0 [ 385.493252][ T7811] netdevsim netdevsim3 eth3: unset [1, 2] type 2 family 0 port 20004 - 0 [ 385.501486][T14797] netlink: 8 bytes leftover after parsing attributes in process `syz.5.2308'. [ 385.739240][T14813] syzkaller0: entered promiscuous mode [ 385.757486][T14813] syzkaller0: entered allmulticast mode [ 385.844416][T14818] netlink: 4 bytes leftover after parsing attributes in process `syz.2.2314'. [ 386.306733][T14833] Unsupported ieee802154 address type: 0 [ 386.586317][T14838] netlink: 16 bytes leftover after parsing attributes in process `syz.3.2317'. [ 386.769277][T14844] netlink: 8 bytes leftover after parsing attributes in process `syz.5.2319'. [ 386.780777][T14844] netlink: 40 bytes leftover after parsing attributes in process `syz.5.2319'. [ 386.791753][T14844] netlink: 16 bytes leftover after parsing attributes in process `syz.5.2319'. [ 389.644720][ T5631] Bluetooth: hci6: link tx timeout [ 389.651901][ T5631] Bluetooth: hci6: killing stalled connection 11:aa:aa:aa:aa:aa [ 389.663711][ T5631] Bluetooth: hci6: link tx timeout [ 389.668916][ T5631] Bluetooth: hci6: killing stalled connection 11:aa:aa:aa:aa:aa [ 389.692303][T14888] A link change request failed with some changes committed already. Interface hsr_slave_0 may have been left with an inconsistent configuration, please check. [ 390.005383][T14905] syzkaller1: entered promiscuous mode [ 390.022123][T14905] syzkaller1: entered allmulticast mode [ 390.520409][T14927] tipc: Started in network mode [ 390.533302][T14927] tipc: Node identity 8aac240fc4eb, cluster identity 4711 [ 390.542044][T14927] tipc: Enabled bearer , priority 0 [ 390.562410][T14927] syzkaller0: entered promiscuous mode [ 390.577817][T14927] syzkaller0: entered allmulticast mode [ 390.578383][T14932] __nla_validate_parse: 2 callbacks suppressed [ 390.578399][T14932] netlink: 52 bytes leftover after parsing attributes in process `syz.2.2343'. [ 390.593273][T14930] sch_tbf: burst 255 is lower than device syzkaller0 mtu (1514) ! [ 390.611450][T14935] netlink: 20 bytes leftover after parsing attributes in process `syz.1.2341'. [ 390.680275][T14932] netlink: 24 bytes leftover after parsing attributes in process `syz.2.2343'. [ 390.702279][T14932] tipc: Cannot configure node identity twice [ 390.713185][T14932] tipc: Cannot configure node identity twice [ 390.763701][T14939] gretap3: entered promiscuous mode [ 390.778820][T14933] tipc: Resetting bearer [ 390.817177][T14933] tipc: Disabling bearer [ 390.996884][T14917] Bluetooth: hci0: Opcode 0x0c03 failed: -4 [ 391.136784][T14947] syzkaller1: entered promiscuous mode [ 391.154456][T14947] syzkaller1: entered allmulticast mode [ 391.193893][T14955] netlink: 'syz.5.2347': attribute type 1 has an invalid length. [ 391.359220][T14955] bond1: entered promiscuous mode [ 391.387927][T14955] 8021q: adding VLAN 0 to HW filter on device bond1 [ 391.450758][T14959] ipvlan2: entered allmulticast mode [ 391.472989][T14959] bond1: entered allmulticast mode [ 391.596932][T14962] bond1: (slave bridge1): making interface the new active one [ 391.617943][T14962] bridge1: entered promiscuous mode [ 391.632762][T14962] bridge1: entered allmulticast mode [ 391.652078][T14962] bond1: (slave bridge1): Enslaving as an active interface with an up link [ 391.699978][ T5631] Bluetooth: hci6: command 0x0406 tx timeout [ 392.971326][T14991] netlink: 20 bytes leftover after parsing attributes in process `syz.6.2357'. [ 393.015949][T14998] netlink: 'syz.5.2360': attribute type 1 has an invalid length. [ 393.025886][T14998] netlink: 224 bytes leftover after parsing attributes in process `syz.5.2360'. [ 393.290582][T15010] netlink: 12 bytes leftover after parsing attributes in process `syz.5.2360'. [ 393.891059][T15023] netlink: 'syz.6.2366': attribute type 29 has an invalid length. [ 394.107900][T15028] bridge2: the hash_elasticity option has been deprecated and is always 16 [ 394.130113][T15028] bridge2: entered allmulticast mode [ 394.282121][T15034] openvswitch: netlink: VXLAN extension message has 4 unknown bytes. [ 394.346527][T15034] nbd: must specify at least one socket [ 394.391917][ T187] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 394.426262][T15043] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 394.497611][T15043] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 394.515960][T15043] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 394.546967][T15039] bond2 (unregistering): Released all slaves [ 394.578744][T15047] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 394.652205][T15047] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 394.728555][T15043] xt_recent: hitcount (4294967294) is larger than allowed maximum (65535) [ 394.807959][T15061] netlink: 12 bytes leftover after parsing attributes in process `syz.3.2372'. [ 394.850611][T15061] Unsupported ieee802154 address type: 0 [ 394.932164][T15053] ipip0: entered promiscuous mode [ 394.979108][T15043] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 395.117629][T15046] Bluetooth: hci5: Opcode 0x0c1a failed: -4 [ 395.148586][T15046] Bluetooth: hci5: Error when powering off device on rfkill (-4) [ 395.332339][T15071] netlink: 48 bytes leftover after parsing attributes in process `syz.2.2378'. [ 395.336301][T15046] Bluetooth: hci6: Opcode 0x0c1a failed: -4 [ 395.371977][T15046] Bluetooth: hci6: Error when powering off device on rfkill (-4) [ 395.453475][ T5752] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 395.736372][T15091] netlink: 292 bytes leftover after parsing attributes in process `syz.6.2384'. [ 395.898644][T15100] netlink: 28 bytes leftover after parsing attributes in process `syz.3.2386'. [ 396.070176][T15107] netlink: 1363 bytes leftover after parsing attributes in process `syz.2.2387'. [ 396.110681][ T5723] IPVS: starting estimator thread 0... [ 396.135702][T15109] syzkaller0: entered promiscuous mode [ 396.146947][T15109] syzkaller0: entered allmulticast mode [ 396.184238][T15109] syz_tun: entered allmulticast mode [ 396.210745][T15108] syz_tun: left allmulticast mode [ 396.216369][T15110] IPVS: using max 26 ests per chain, 62400 per kthread [ 396.231978][T15112] syzkaller0: entered promiscuous mode [ 396.241712][T15112] syzkaller0: entered allmulticast mode [ 396.497884][T15120] netlink: 4 bytes leftover after parsing attributes in process `syz.6.2393'. [ 396.514614][ T5752] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 396.606375][T15118] netdevsim netdevsim5 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 396.816852][T15118] netdevsim netdevsim5 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 396.870339][T15127] IPVS: set_ctl: invalid protocol: 43 100.1.1.0:20000 [ 396.878058][T15128] netlink: 11 bytes leftover after parsing attributes in process `syz.3.2395'. [ 396.996710][T15118] netdevsim netdevsim5 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 397.277956][T15142] bond0: (slave ip6tnl0): refused to change device type [ 397.362256][T15118] netdevsim netdevsim5 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 397.413855][T15148] netlink: 40 bytes leftover after parsing attributes in process `syz.2.2402'. [ 397.424516][T15148] netlink: 16 bytes leftover after parsing attributes in process `syz.2.2402'. [ 397.444843][T15148] netlink: 16 bytes leftover after parsing attributes in process `syz.2.2402'. [ 397.452640][T15150] netlink: 'syz.3.2403': attribute type 1 has an invalid length. [ 397.667930][ T1028] netdevsim netdevsim5 eth0: set [1, 0] type 2 family 0 port 6081 - 0 [ 397.695918][T15156] netlink: 4 bytes leftover after parsing attributes in process `syz.3.2406'. [ 397.730238][ T4348] netdevsim netdevsim5 eth1: set [1, 0] type 2 family 0 port 6081 - 0 [ 397.825261][T15159] netlink: 20 bytes leftover after parsing attributes in process `syz.2.2407'. [ 397.874448][ T4348] netdevsim netdevsim5 eth2: set [1, 0] type 2 family 0 port 6081 - 0 [ 397.894253][ T4348] netdevsim netdevsim5 eth3: set [1, 0] type 2 family 0 port 6081 - 0 [ 398.586505][T15206] xt_hashlimit: size too large, truncated to 1048576 [ 398.659714][T15213] vlan4 (unregistering): left allmulticast mode [ 398.689912][T15213] bridge_slave_0 (unregistering): left allmulticast mode [ 398.716672][T15213] vlan4 (unregistering): left promiscuous mode [ 398.740704][T15213] bridge_slave_0 (unregistering): left promiscuous mode [ 398.741834][T15218] netlink: 'syz.3.2418': attribute type 11 has an invalid length. [ 398.769968][T15213] bridge0: port 2(vlan4) entered disabled state [ 398.825203][T15217] netlink: 'syz.6.2422': attribute type 3 has an invalid length. [ 398.838885][T15213] vlan2: left promiscuous mode [ 398.868752][T15213] dummy0: left promiscuous mode [ 399.628228][ T5353] IPVS: starting estimator thread 0... [ 399.652733][ T10] net_ratelimit: 5 callbacks suppressed [ 399.652751][ T10] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 399.695936][ T808] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 399.755762][T15255] IPVS: using max 30 ests per chain, 72000 per kthread [ 400.356015][T15293] netlink: 'syz.3.2436': attribute type 23 has an invalid length. [ 400.372501][T15284] syzkaller1: entered promiscuous mode [ 400.389526][T15284] syzkaller1: entered allmulticast mode [ 400.569664][T15302] dummy0: left promiscuous mode [ 400.590053][T15302] bridge7: port 1(dummy0) entered blocking state [ 400.613972][T15302] bridge7: port 1(dummy0) entered disabled state [ 400.636438][T15303] netlink: 'syz.2.2437': attribute type 10 has an invalid length. [ 400.640945][T15302] dummy0: entered allmulticast mode [ 400.656950][ T10] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 400.684129][T15302] dummy0: entered promiscuous mode [ 400.728671][T15303] dummy0: left allmulticast mode [ 400.747657][T15303] bridge7: port 1(dummy0) entered disabled state [ 400.806994][T15309] mac80211_hwsim hwsim6 wlan0: entered promiscuous mode [ 400.827567][T15309] mac80211_hwsim hwsim6 wlan0: entered allmulticast mode [ 401.115728][T15322] __nla_validate_parse: 11 callbacks suppressed [ 401.115750][T15322] netlink: 256 bytes leftover after parsing attributes in process `syz.3.2444'. [ 401.693802][ T5752] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 401.826335][T15344] netlink: 'syz.3.2451': attribute type 1 has an invalid length. [ 401.981125][T15348] bond7: (slave dummy0): making interface the new active one [ 401.999252][T15348] bond7: (slave dummy0): Enslaving as an active interface with an up link [ 402.164231][T15362] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 402.186727][T15363] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 402.215727][T15362] netlink: 'syz.5.2454': attribute type 1 has an invalid length. [ 402.256879][T15362] netlink: 244 bytes leftover after parsing attributes in process `syz.5.2454'. [ 402.414195][ C1] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 402.424212][ C1] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 402.433577][ T5353] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 402.733157][ T10] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 402.849365][T15388] pim6reg1: entered promiscuous mode [ 402.867080][T15388] pim6reg1: entered allmulticast mode [ 403.110576][T15392] netlink: 8 bytes leftover after parsing attributes in process `syz.2.2462'. [ 403.430386][T15400] syzkaller0: entered promiscuous mode [ 403.458692][T15400] syzkaller0: entered allmulticast mode [ 404.826035][ T5752] net_ratelimit: 5 callbacks suppressed [ 404.826058][ T5752] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 405.855108][ T5752] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 406.068703][T15419] tipc: Enabled bearer , priority 0 [ 406.084451][T15422] syzkaller0: entered promiscuous mode [ 406.090165][T15422] syzkaller0: entered allmulticast mode [ 406.110493][T15410] tipc: Resetting bearer [ 406.170913][T15410] tipc: Disabling bearer [ 406.339711][T15444] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 406.357557][T15444] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 406.386024][T15444] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 406.438624][T15444] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 406.455242][T15444] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 406.511301][T15444] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 406.533296][T15444] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 406.554679][T15444] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 406.670018][T15456] netlink: 40 bytes leftover after parsing attributes in process `syz.6.2478'. [ 406.696934][T15456] netlink: 16 bytes leftover after parsing attributes in process `syz.6.2478'. [ 406.792261][T15460] netlink: 16 bytes leftover after parsing attributes in process `syz.6.2478'. [ 406.870436][T15465] netlink: 60 bytes leftover after parsing attributes in process `syz.3.2481'. [ 406.922476][T15462] lo speed is unknown, defaulting to 1000 [ 407.109024][T15468] netlink: 64 bytes leftover after parsing attributes in process `syz.1.2482'. [ 407.196503][T15471] syzkaller1: entered promiscuous mode [ 407.213606][T15471] syzkaller1: entered allmulticast mode [ 407.400245][T15481] netlink: 104 bytes leftover after parsing attributes in process `syz.3.2484'. [ 407.527107][T15486] netlink: 4 bytes leftover after parsing attributes in process `syz.1.2487'. [ 407.563844][T15483] netlink: 28 bytes leftover after parsing attributes in process `syz.5.2480'. [ 410.018970][ T10] net_ratelimit: 11 callbacks suppressed [ 410.018992][ T10] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 410.093331][ C0] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 410.103363][ C0] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 410.124666][T15496] netlink: 'syz.2.2490': attribute type 10 has an invalid length. [ 410.164091][T15496] 8021q: adding VLAN 0 to HW filter on device netdevsim1 [ 410.255122][T15506] netlink: 8 bytes leftover after parsing attributes in process `syz.1.2492'. [ 410.256366][T15497] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 410.275236][ C1] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 410.292366][T15504] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 410.302892][ C1] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 410.312541][ T4348] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 410.473482][T15512] netlink: 40 bytes leftover after parsing attributes in process `syz.5.2493'. [ 411.056286][ T5752] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 411.094513][T15543] lo speed is unknown, defaulting to 1000 [ 411.182675][T15545] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 412.034794][T15586] __nla_validate_parse: 8 callbacks suppressed [ 412.034813][T15586] netlink: 28 bytes leftover after parsing attributes in process `syz.2.2513'. [ 412.500987][T15609] netlink: 24 bytes leftover after parsing attributes in process `syz.2.2519'. [ 412.525763][T15603] batadv1: entered promiscuous mode [ 412.538474][T15603] batadv1: entered allmulticast mode [ 412.553515][T15603] 8021q: adding VLAN 0 to HW filter on device batadv1 [ 412.571941][T15602] batadv2: entered promiscuous mode [ 412.577415][T15602] batadv2: entered allmulticast mode [ 412.584651][T15602] 8021q: adding VLAN 0 to HW filter on device batadv2 [ 412.699050][T15617] netlink: 40 bytes leftover after parsing attributes in process `syz.6.2520'. [ 412.707169][T15613] sctp: [Deprecated]: syz.2.2519 (pid 15613) Use of struct sctp_assoc_value in delayed_ack socket option. [ 412.707169][T15613] Use struct sctp_sack_info instead [ 412.713755][T15617] netlink: 16 bytes leftover after parsing attributes in process `syz.6.2520'. [ 412.757854][T15619] netlink: 'syz.3.2521': attribute type 1 has an invalid length. [ 412.786096][T15617] netlink: 16 bytes leftover after parsing attributes in process `syz.6.2520'. [ 412.809727][T15619] bond8: entered promiscuous mode [ 412.816079][T15619] 8021q: adding VLAN 0 to HW filter on device bond8 [ 413.031405][T15626] netlink: 12 bytes leftover after parsing attributes in process `syz.1.2522'. [ 413.075654][T15634] netlink: 32 bytes leftover after parsing attributes in process `syz.2.2524'. [ 413.105496][T15626] netlink: 12 bytes leftover after parsing attributes in process `syz.1.2522'. [ 413.163334][T15626] netlink: 12 bytes leftover after parsing attributes in process `syz.1.2522'. [ 413.176872][T15632] netlink: 164 bytes leftover after parsing attributes in process `syz.5.2526'. [ 413.622085][T15658] Unsupported ieee802154 address type: 0 [ 413.644761][T15664] netlink: 'syz.1.2535': attribute type 1 has an invalid length. [ 413.719945][T15664] bond7: option mode: invalid value (7) [ 413.728985][T15664] bond7 (unregistering): Released all slaves [ 413.906616][T15669] bridge0: port 3(vlan4) entered blocking state [ 413.913758][T15669] bridge0: port 3(vlan4) entered disabled state [ 413.921985][T15669] vlan4: entered allmulticast mode [ 413.927717][T15669] geneve0: entered allmulticast mode [ 413.937447][T15669] vlan4: entered promiscuous mode [ 413.943469][T15669] geneve0: entered promiscuous mode [ 413.952561][T15671] : renamed from dummy0 [ 414.015112][T15680] bond7: (slave dummy0): Releasing active interface [ 414.526759][T15684] netlink: 'syz.6.2540': attribute type 21 has an invalid length. [ 414.539481][T15700] IPv6: sit1: Disabled Multicast RS [ 415.213229][ T5752] net_ratelimit: 58 callbacks suppressed [ 415.213252][ T5752] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 416.254655][ T10] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 416.677329][T15791] bond2: entered allmulticast mode [ 416.684864][T15795] sch_fq: defrate 8 ignored. [ 416.892398][T15791] smc: net device wlan0 erased user defined pnetid SYZ0 [ 416.976728][ T24] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 417.068592][T12492] udevd[12492]: inotify_add_watch(7, /dev/nbd64, 10) failed: No such file or directory [ 417.093590][T15805] __nla_validate_parse: 51 callbacks suppressed [ 417.093611][T15805] netlink: 4 bytes leftover after parsing attributes in process `syz.1.2576'. [ 417.201737][T15807] netlink: 40 bytes leftover after parsing attributes in process `syz.5.2577'. [ 417.227415][T15807] netlink: 16 bytes leftover after parsing attributes in process `syz.5.2577'. [ 417.249610][T15807] netlink: 16 bytes leftover after parsing attributes in process `syz.5.2577'. [ 417.294817][ T10] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 417.388088][T15811] ipip1: entered promiscuous mode [ 417.461131][T15815] IPVS: set_ctl: invalid protocol: 103 172.20.20.56:20004 [ 417.568380][T15820] netlink: 32 bytes leftover after parsing attributes in process `syz.5.2583'. [ 417.606860][T15822] netlink: 4 bytes leftover after parsing attributes in process `syz.1.2584'. [ 417.959533][T15845] netlink: 112 bytes leftover after parsing attributes in process `syz.5.2588'. [ 418.220588][T15855] tipc: Enabled bearer , priority 2 [ 418.333283][ T9] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 418.587560][T15872] ip6gre3: entered promiscuous mode [ 418.607747][T15872] ip6gre3: entered allmulticast mode [ 418.715481][T15872] smbdirect: ib_dev[syz2] removed [ 418.733762][T15867] netlink: 12 bytes leftover after parsing attributes in process `syz.3.2593'. [ 418.876034][T15882] netlink: 12 bytes leftover after parsing attributes in process `syz.5.2599'. [ 418.909761][T15883] netlink: 220 bytes leftover after parsing attributes in process `syz.1.2598'. [ 419.237461][T15891] 8021q: adding VLAN 0 to HW filter on device bond3 [ 419.270428][T15893] 8021q: adding VLAN 0 to HW filter on device bond3 [ 419.282500][T15893] bond3: (slave ip6gre0): The slave device specified does not support setting the MAC address [ 419.297628][T15893] bond3: (slave ip6gre0): Error -95 calling set_mac_address [ 419.393411][ T5752] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 419.419651][T15902] netlink: 'syz.1.2605': attribute type 1 has an invalid length. [ 419.527576][T15902] bond7: entered promiscuous mode [ 419.533494][T15902] 8021q: adding VLAN 0 to HW filter on device bond7 [ 419.654443][T15909] 8021q: adding VLAN 0 to HW filter on device bond7 [ 419.676306][T15909] bond7: (slave ipip2): The slave device specified does not support setting the MAC address [ 419.687347][T15909] bond7: (slave ipip2): Setting fail_over_mac to active for active-backup mode [ 419.705141][T15909] bond7: (slave ipip2): making interface the new active one [ 419.712630][T15909] ipip2: entered promiscuous mode [ 419.720673][T15909] bond7: (slave ipip2): Enslaving as an active interface with an up link [ 419.915418][T15921] netlink: 'syz.5.2611': attribute type 1 has an invalid length. [ 420.014621][ T5353] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 420.034851][T15921] bond4: entered promiscuous mode [ 420.049970][T15921] 8021q: adding VLAN 0 to HW filter on device bond4 [ 420.238124][T15937] netlink: 'syz.3.2617': attribute type 8 has an invalid length. [ 420.414070][ T10] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 420.433136][T15950] netlink: 'syz.1.2621': attribute type 1 has an invalid length. [ 420.526960][T15957] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 420.540679][T15957] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 420.542466][T15950] 8021q: adding VLAN 0 to HW filter on device bond8 [ 420.553765][T15957] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 420.564846][T15957] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 420.570252][T15953] bond8: (slave gretap1): Enslaving as a backup interface with an up link [ 420.582324][T15957] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 420.590678][T15957] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 420.599379][T15957] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 420.607944][T15957] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 420.616423][T15957] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 420.653283][T15959] bond8 (unregistering): (slave gretap1): Releasing backup interface [ 420.683027][T15959] bond8 (unregistering): Released all slaves [ 421.387417][T15995] netlink: 'syz.5.2635': attribute type 11 has an invalid length. [ 421.832122][T16021] netlink: 'syz.1.2642': attribute type 10 has an invalid length. [ 421.844239][T16021] netlink: 'syz.1.2642': attribute type 8 has an invalid length. [ 421.868101][T16021] geneve2: entered promiscuous mode [ 421.873780][T16021] geneve2: entered allmulticast mode [ 421.881072][ T4348] netdevsim netdevsim1 €Â: set [1, 0] type 2 family 0 port 6081 - 0 [ 421.897383][ T4348] netdevsim netdevsim1 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 421.912709][ T4348] netdevsim netdevsim1 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 422.911894][T16043] __nla_validate_parse: 17 callbacks suppressed [ 422.911914][T16043] netlink: 88 bytes leftover after parsing attributes in process `syz.1.2648'. [ 423.299227][T16057] netlink: 'syz.3.2655': attribute type 3 has an invalid length. [ 423.378615][T16063] netlink: 180 bytes leftover after parsing attributes in process `syz.5.2656'. [ 423.414899][T16063] netlink: 8 bytes leftover after parsing attributes in process `syz.5.2656'. [ 423.433776][T16066] netlink: 4 bytes leftover after parsing attributes in process `syz.1.2658'. [ 424.214733][T16098] netlink: 40 bytes leftover after parsing attributes in process `syz.5.2667'. [ 424.237506][T16098] netlink: 16 bytes leftover after parsing attributes in process `syz.5.2667'. [ 424.276283][T16098] netlink: 16 bytes leftover after parsing attributes in process `syz.5.2667'. [ 424.348590][ T5631] Bluetooth: hci7: unexpected cc 0x0c03 length: 249 > 1 [ 424.362495][ T5631] Bluetooth: hci7: unexpected cc 0x1003 length: 249 > 9 [ 424.372148][ T5631] Bluetooth: hci7: unexpected cc 0x1001 length: 249 > 9 [ 424.390778][ T5631] Bluetooth: hci7: unexpected cc 0x0c23 length: 249 > 4 [ 424.399170][ T5631] Bluetooth: hci7: unexpected cc 0x0c38 length: 249 > 2 [ 424.461079][T16107] netlink: 12 bytes leftover after parsing attributes in process `syz.5.2670'. [ 424.488841][ T5623] Bluetooth: hci7: unexpected cc 0x0c03 length: 249 > 1 [ 424.503459][ T5623] Bluetooth: hci7: unexpected cc 0x1003 length: 249 > 9 [ 424.523743][ T5623] Bluetooth: hci7: unexpected cc 0x1001 length: 249 > 9 [ 424.534351][ T5623] Bluetooth: hci7: unexpected cc 0x0c23 length: 249 > 4 [ 424.549674][ T5623] Bluetooth: hci7: unexpected cc 0x0c38 length: 249 > 2 [ 424.674195][T16107] 8021q: adding VLAN 0 to HW filter on device bond5 [ 425.616153][ T10] net_ratelimit: 26 callbacks suppressed [ 425.616174][ T10] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 425.647849][T16147] netlink: 44 bytes leftover after parsing attributes in process `syz.1.2679'. [ 425.657745][T16147] netlink: 40 bytes leftover after parsing attributes in process `syz.1.2679'. [ 425.669211][T16143] IPVS: lblc: FWM 3 0x00000003 - no destination available [ 425.681214][T16143] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 426.094097][ T24] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 426.129872][ T1169] vlan2: left allmulticast mode [ 426.150626][ T1169] dummy0: left allmulticast mode [ 426.158709][T16157] xt_ipcomp: unknown flags 1D [ 426.195734][ T1169] bridge0: port 1(vlan2) entered disabled state [ 426.654771][ T5631] Bluetooth: hci7: command tx timeout [ 426.674889][ T5752] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 426.828950][ T1169] bond6 (unregistering): (slave geneve5): Releasing active interface [ 426.848897][ T1169] bond4 (unregistering): (slave geneve4): Releasing active interface [ 426.861710][ T1169] bond3 (unregistering): (slave geneve3): Releasing backup interface [ 426.879729][ T1169] bond1 (unregistering): (slave geneve2): Releasing active interface [ 426.917802][ T1169] team0: Port device bridge3 removed [ 426.928235][ T1169] team0: Port device bridge4 removed [ 426.960080][ T1169] bond1 (unregistering): Released all slaves [ 426.976829][ T1169] bond2 (unregistering): Released all slaves [ 426.991327][ T1169] bond3 (unregistering): Released all slaves [ 427.019332][ T1169] bond0 (unregistering): Released all slaves [ 427.036087][ T1169] bond4 (unregistering): Released all slaves [ 427.051612][ T1169] bond5 (unregistering): Released all slaves [ 427.070996][ T1169] bond6 (unregistering): Released all slaves [ 427.087701][ T1169] bond7 (unregistering): Released all slaves [ 427.102020][ T1169] bond8 (unregistering): Released all slaves [ 427.137339][ T5282] 8021q: adding VLAN 0 to HW filter on device eth1 [ 427.339456][ T1169] : left promiscuous mode [ 427.506283][ T1169] þ: left promiscuous mode [ 427.592056][T16099] bridge0: port 1(bridge_slave_0) entered blocking state [ 427.609964][T16099] bridge0: port 1(bridge_slave_0) entered disabled state [ 427.638094][T16099] bridge_slave_0: entered allmulticast mode [ 427.647457][T16099] bridge_slave_0: entered promiscuous mode [ 427.669923][ T1169] tipc: Left network mode [ 427.672683][T16099] bridge0: port 2(bridge_slave_1) entered blocking state [ 427.686197][T16099] bridge0: port 2(bridge_slave_1) entered disabled state [ 427.693957][T16099] bridge_slave_1: entered allmulticast mode [ 427.702043][T16099] bridge_slave_1: entered promiscuous mode [ 427.711873][ T9] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 427.745883][T16187] syzkaller0: entered promiscuous mode [ 427.751780][T16187] syzkaller0: entered allmulticast mode [ 428.242501][T16099] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 428.362193][T16099] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 428.570112][T16212] netdevsim netdevsim5 eth3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 428.606526][T16099] team0: Port device team_slave_0 added [ 428.614740][ T5282] 8021q: adding VLAN 0 to HW filter on device eth2 [ 428.666359][T16099] team0: Port device team_slave_1 added [ 428.732947][ T5631] Bluetooth: hci7: command tx timeout [ 428.740731][ T9] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 428.774782][T16212] netdevsim netdevsim5 eth2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 428.812668][T16099] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 428.831181][T16099] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 428.881315][T16099] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 428.901694][T16099] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 428.914643][T16099] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 428.942111][T16099] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 428.966142][T16212] netdevsim netdevsim5 eth1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 429.119176][T16212] netdevsim netdevsim5 eth0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 429.135630][ T24] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 429.180582][T16099] hsr_slave_0: entered promiscuous mode [ 429.215400][T16099] hsr_slave_1: entered promiscuous mode [ 429.232562][T16099] debugfs: 'hsr0' already exists in 'hsr' [ 429.241839][T16099] Cannot create hsr debugfs directory [ 429.536543][ T4348] netdevsim netdevsim5 eth0: set [1, 0] type 2 family 0 port 6081 - 0 [ 429.632601][ T1169] hsr_slave_0: left promiscuous mode [ 429.647520][ T1169] hsr_slave_1: left promiscuous mode [ 429.751973][T16229] __nla_validate_parse: 5 callbacks suppressed [ 429.751997][T16229] netlink: 44 bytes leftover after parsing attributes in process `syz.1.2689'. [ 429.771967][T16229] netlink: 40 bytes leftover after parsing attributes in process `syz.1.2689'. [ 429.784874][ T187] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 429.795598][T16229] netlink: 16 bytes leftover after parsing attributes in process `syz.1.2689'. [ 429.867388][T16231] netlink: 16 bytes leftover after parsing attributes in process `syz.1.2689'. [ 430.135711][ T5282] 8021q: adding VLAN 0 to HW filter on device eth3 [ 430.171398][ T7803] netdevsim netdevsim5 eth1: set [1, 0] type 2 family 0 port 6081 - 0 [ 430.191576][ T7803] netdevsim netdevsim5 eth2: set [1, 0] type 2 family 0 port 6081 - 0 [ 430.309332][ T7803] netdevsim netdevsim5 eth3: set [1, 0] type 2 family 0 port 6081 - 0 [ 430.475578][T16241] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 430.707019][T16255] net_ratelimit: 4 callbacks suppressed [ 430.707041][T16255] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 430.813515][ T5631] Bluetooth: hci7: command tx timeout [ 430.824285][ T10] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 431.035103][ T5623] Bluetooth: hci3: unexpected cc 0x0c03 length: 249 > 1 [ 431.048466][ T5623] Bluetooth: hci3: unexpected cc 0x1003 length: 249 > 9 [ 431.061790][ T5623] Bluetooth: hci3: unexpected cc 0x1001 length: 249 > 9 [ 431.075968][ T5623] Bluetooth: hci3: unexpected cc 0x0c23 length: 249 > 4 [ 431.090042][ T5623] Bluetooth: hci3: unexpected cc 0x0c38 length: 249 > 2 [ 431.299059][ T1169] IPVS: stop unused estimator thread 0... [ 431.306875][T16270] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 431.317481][ C1] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 431.510119][ T5631] Bluetooth: hci8: unexpected cc 0x0c03 length: 249 > 1 [ 431.536179][ T5631] Bluetooth: hci8: unexpected cc 0x1003 length: 249 > 9 [ 431.547906][ T5631] Bluetooth: hci8: unexpected cc 0x1001 length: 249 > 9 [ 431.568970][ T5631] Bluetooth: hci8: unexpected cc 0x0c23 length: 249 > 4 [ 431.579053][ T5631] Bluetooth: hci8: unexpected cc 0x0c38 length: 249 > 2 [ 431.859278][ T24] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 431.871952][ T187] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 432.011140][T16297] netlink: 44 bytes leftover after parsing attributes in process `syz.1.2699'. [ 432.059251][T16297] netlink: 40 bytes leftover after parsing attributes in process `syz.1.2699'. [ 432.111852][T16302] netlink: 16 bytes leftover after parsing attributes in process `syz.1.2699'. [ 432.165887][T16297] netlink: 16 bytes leftover after parsing attributes in process `syz.1.2699'. [ 432.177494][ T808] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 432.222670][T16305] netlink: 'syz.5.2700': attribute type 12 has an invalid length. [ 432.324457][T16309] xt_hashlimit: size too large, truncated to 1048576 [ 432.412374][T16305] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 432.496999][ T5353] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 432.546639][T16099] netdevsim netdevsim3 netdevsim0: renamed from eth0 [ 432.597736][T16099] 8021q: adding VLAN 0 to HW filter on device netdevsim0 [ 432.618563][T16099] netdevsim netdevsim3 netdevsim1: renamed from eth1 [ 432.658588][T16099] 8021q: adding VLAN 0 to HW filter on device netdevsim1 [ 432.757731][T16099] netdevsim netdevsim3 netdevsim2: renamed from eth2 [ 432.808055][T16099] 8021q: adding VLAN 0 to HW filter on device netdevsim2 [ 432.871808][T16099] netdevsim netdevsim3 netdevsim3: renamed from eth3 [ 432.893196][ T5623] Bluetooth: hci7: command tx timeout [ 432.896380][T16099] 8021q: adding VLAN 0 to HW filter on device netdevsim3 [ 432.906058][ T10] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 433.212899][ T5623] Bluetooth: hci3: command tx timeout [ 433.693691][ T5623] Bluetooth: hci8: command tx timeout [ 434.598814][T16402] netlink: 24 bytes leftover after parsing attributes in process `syz.1.2708'. [ 434.609081][T16402] netlink: 40 bytes leftover after parsing attributes in process `syz.1.2708'. [ 434.730270][T16279] bridge0: port 1(bridge_slave_0) entered blocking state [ 434.739140][T16279] bridge0: port 1(bridge_slave_0) entered disabled state [ 434.747928][T16279] bridge_slave_0: entered allmulticast mode [ 434.756689][T16279] bridge_slave_0: entered promiscuous mode [ 434.768284][T16405] __nla_validate_parse: 2 callbacks suppressed [ 434.768324][T16405] netlink: 40 bytes leftover after parsing attributes in process `syz.5.2707'. [ 434.769614][T16279] bridge0: port 2(bridge_slave_1) entered blocking state [ 434.792124][T16279] bridge0: port 2(bridge_slave_1) entered disabled state [ 434.800832][T16279] bridge_slave_1: entered allmulticast mode [ 434.809541][T16279] bridge_slave_1: entered promiscuous mode [ 434.850232][T16262] bridge0: port 1(bridge_slave_0) entered blocking state [ 434.857614][T16262] bridge0: port 1(bridge_slave_0) entered disabled state [ 434.867153][T16262] bridge_slave_0: entered allmulticast mode [ 434.875531][T16262] bridge_slave_0: entered promiscuous mode [ 434.920805][T16262] bridge0: port 2(bridge_slave_1) entered blocking state [ 434.928890][T16262] bridge0: port 2(bridge_slave_1) entered disabled state [ 434.936757][T16262] bridge_slave_1: entered allmulticast mode [ 434.945273][T16262] bridge_slave_1: entered promiscuous mode [ 434.986618][T16279] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 435.001714][T16279] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 435.064513][T16099] 8021q: adding VLAN 0 to HW filter on device bond0 [ 435.095277][T16420] Bluetooth: hci1: too big key_count value 11566 [ 435.205503][T16262] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 435.218435][T16420] netlink: 830 bytes leftover after parsing attributes in process `syz.1.2709'. [ 435.254643][T16279] team0: Port device team_slave_0 added [ 435.267241][T16262] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 435.296221][ T5623] Bluetooth: hci3: command tx timeout [ 435.356016][T16279] team0: Port device team_slave_1 added [ 435.446387][T16262] team0: Port device team_slave_0 added [ 435.461952][T16279] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 435.480090][T16279] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 435.525228][T16279] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 435.551467][T16262] team0: Port device team_slave_1 added [ 435.605916][T16427] syzkaller0: entered promiscuous mode [ 435.611643][T16427] syzkaller0: entered allmulticast mode [ 435.627388][T16279] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 435.648226][T16279] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 435.690626][T16279] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 435.721787][T16440] netlink: 148 bytes leftover after parsing attributes in process `syz.5.2713'. [ 435.736809][T16262] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 435.746096][T16262] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 435.772566][T16440] netlink: 116 bytes leftover after parsing attributes in process `syz.5.2713'. [ 435.773278][ T5623] Bluetooth: hci8: command tx timeout [ 435.792687][T16440] netlink: 24 bytes leftover after parsing attributes in process `syz.5.2713'. [ 435.802163][T16262] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 435.818285][T16441] netlink: 'syz.5.2713': attribute type 1 has an invalid length. [ 435.829206][T16441] netlink: 'syz.5.2713': attribute type 3 has an invalid length. [ 435.838206][T16441] netlink: 132 bytes leftover after parsing attributes in process `syz.5.2713'. [ 436.018139][ T9] net_ratelimit: 4 callbacks suppressed [ 436.018160][ T9] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 436.623287][T16099] 8021q: adding VLAN 0 to HW filter on device team0 [ 436.640264][T16262] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 436.664323][T16262] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 436.741504][T16262] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 436.760276][T16463] netlink: 112 bytes leftover after parsing attributes in process `syz.1.2715'. [ 436.896967][T16471] netlink: 24 bytes leftover after parsing attributes in process `syz.1.2716'. [ 436.934867][T16471] netlink: 40 bytes leftover after parsing attributes in process `syz.1.2716'. [ 436.970078][ T13] bridge0: port 1(bridge_slave_0) entered blocking state [ 436.977389][ T13] bridge0: port 1(bridge_slave_0) entered forwarding state [ 436.993885][T16471] netlink: 16 bytes leftover after parsing attributes in process `syz.1.2716'. [ 437.032635][T16279] hsr_slave_0: entered promiscuous mode [ 437.079990][ T187] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 437.084463][T16279] hsr_slave_1: entered promiscuous mode [ 437.095651][T16279] debugfs: 'hsr0' already exists in 'hsr' [ 437.101455][T16279] Cannot create hsr debugfs directory [ 437.148374][ T13] bridge0: port 2(bridge_slave_1) entered blocking state [ 437.155699][ T13] bridge0: port 2(bridge_slave_1) entered forwarding state [ 437.200369][T16262] hsr_slave_0: entered promiscuous mode [ 437.207823][T16262] hsr_slave_1: entered promiscuous mode [ 437.224045][T16262] debugfs: 'hsr0' already exists in 'hsr' [ 437.230157][T16262] Cannot create hsr debugfs directory [ 437.373040][ T5623] Bluetooth: hci3: command tx timeout [ 437.528341][T16494] syzkaller0: entered promiscuous mode [ 437.541976][T16494] syzkaller0: entered allmulticast mode [ 437.854298][ T5623] Bluetooth: hci8: command tx timeout [ 437.991909][T16279] netdevsim netdevsim8 netdevsim0: renamed from eth0 [ 438.028458][T16279] 8021q: adding VLAN 0 to HW filter on device netdevsim0 [ 438.058021][T16279] netdevsim netdevsim8 netdevsim1: renamed from eth1 [ 438.086755][T16279] 8021q: adding VLAN 0 to HW filter on device netdevsim1 [ 438.096843][T16279] netdevsim netdevsim8 netdevsim2: renamed from eth2 [ 438.103858][ T10] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 438.124477][T16279] 8021q: adding VLAN 0 to HW filter on device netdevsim2 [ 438.148096][T16279] netdevsim netdevsim8 netdevsim3: renamed from eth3 [ 438.160290][T16279] 8021q: adding VLAN 0 to HW filter on device netdevsim3 [ 438.255892][ T5723] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 438.350163][T16262] netdevsim netdevsim7 netdevsim0: renamed from eth0 [ 438.372510][T16262] 8021q: adding VLAN 0 to HW filter on device netdevsim0 [ 438.391177][T16262] netdevsim netdevsim7 netdevsim1: renamed from eth1 [ 438.415136][T16262] 8021q: adding VLAN 0 to HW filter on device netdevsim1 [ 438.426546][T16262] netdevsim netdevsim7 netdevsim2: renamed from eth2 [ 438.438450][T16262] 8021q: adding VLAN 0 to HW filter on device netdevsim2 [ 438.455227][T16262] netdevsim netdevsim7 netdevsim3: renamed from eth3 [ 438.473924][T16262] 8021q: adding VLAN 0 to HW filter on device netdevsim3 [ 438.721112][T16279] 8021q: adding VLAN 0 to HW filter on device bond0 [ 438.841975][T16279] 8021q: adding VLAN 0 to HW filter on device team0 [ 438.919172][ T1028] bridge0: port 1(bridge_slave_0) entered blocking state [ 438.926429][ T1028] bridge0: port 1(bridge_slave_0) entered forwarding state [ 438.988852][ T7805] bridge0: port 2(bridge_slave_1) entered blocking state [ 438.996134][ T7805] bridge0: port 2(bridge_slave_1) entered forwarding state [ 439.020872][T16099] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 439.084922][T16262] 8021q: adding VLAN 0 to HW filter on device bond0 [ 439.134340][ T9] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 439.176846][T16262] 8021q: adding VLAN 0 to HW filter on device team0 [ 439.219089][ T1028] bridge0: port 1(bridge_slave_0) entered blocking state [ 439.226352][ T1028] bridge0: port 1(bridge_slave_0) entered forwarding state [ 439.263915][ T1028] bridge0: port 2(bridge_slave_1) entered blocking state [ 439.271191][ T1028] bridge0: port 2(bridge_slave_1) entered forwarding state [ 439.337558][T16099] veth0_vlan: entered promiscuous mode [ 439.380840][T16099] veth1_vlan: entered promiscuous mode [ 439.453263][ T5623] Bluetooth: hci3: command tx timeout [ 439.551377][T16099] veth0_macvtap: entered promiscuous mode [ 439.582229][T16099] veth1_macvtap: entered promiscuous mode [ 439.636382][T16099] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 439.684603][T16099] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 439.719040][ T7805] netdevsim netdevsim3 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 439.742307][ T7805] netdevsim netdevsim3 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 439.765278][ T7809] netdevsim netdevsim3 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 439.789111][ T1028] netdevsim netdevsim3 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 439.933609][ T5623] Bluetooth: hci8: command tx timeout [ 440.065521][ T7809] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 440.115631][ T7809] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 440.174915][ T1317] ieee802154 phy0 wpan0: encryption failed: -22 [ 440.206580][ T9] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 440.270114][T16588] __nla_validate_parse: 9 callbacks suppressed [ 440.270135][T16588] netlink: 8 bytes leftover after parsing attributes in process `syz.1.2737'. [ 440.297426][T16590] set match dimension is over the limit! [ 440.341824][ T1122] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 440.370877][ T1122] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 440.640324][T16279] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 441.064990][T16262] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 441.219935][ T5752] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 441.221798][T16623] netlink: 16 bytes leftover after parsing attributes in process `syz.5.2741'. [ 441.296559][ T5842] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 441.341028][T16626] netlink: 'syz.5.2741': attribute type 1 has an invalid length. [ 441.496076][T16631] netlink: 16 bytes leftover after parsing attributes in process `syz.1.2742'. [ 441.506149][T16631] netlink: 40 bytes leftover after parsing attributes in process `syz.1.2742'. [ 441.525920][T16631] netlink: 16 bytes leftover after parsing attributes in process `syz.1.2742'. [ 441.535897][T16626] 8021q: adding VLAN 0 to HW filter on device bond6 [ 441.579397][T16633] netlink: 16 bytes leftover after parsing attributes in process `syz.1.2742'. [ 441.650291][T16636] syzkaller0: entered promiscuous mode [ 441.663622][T16636] syzkaller0: entered allmulticast mode [ 441.855646][T16640] netlink: 8 bytes leftover after parsing attributes in process `syz.1.2744'. [ 441.856518][T16279] veth0_vlan: entered promiscuous mode [ 441.867072][T16640] netlink: 'syz.1.2744': attribute type 1 has an invalid length. [ 441.926440][T16279] veth1_vlan: entered promiscuous mode [ 442.030490][T16262] veth0_vlan: entered promiscuous mode [ 442.070299][T16643] netlink: 8 bytes leftover after parsing attributes in process `syz.3.2745'. [ 442.095230][ T5842] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 442.107253][T16262] veth1_vlan: entered promiscuous mode [ 442.122385][T16279] veth0_macvtap: entered promiscuous mode [ 442.159612][T16279] veth1_macvtap: entered promiscuous mode [ 442.257362][ T9] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 442.266817][T16262] veth0_macvtap: entered promiscuous mode [ 442.292586][T16279] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 442.372118][T16262] veth1_macvtap: entered promiscuous mode [ 442.387522][T16279] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 442.424099][T16652] netlink: 12 bytes leftover after parsing attributes in process `syz.1.2748'. [ 442.452248][ T1122] netdevsim netdevsim8 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 442.472535][ T1122] netdevsim netdevsim8 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 442.563466][ T1122] netdevsim netdevsim8 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 442.582486][ T1122] netdevsim netdevsim8 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 442.660392][T16262] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 442.697392][T16262] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 442.764553][ T7809] netdevsim netdevsim7 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 442.780783][ T7809] netdevsim netdevsim7 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 442.821686][T16656] netlink: 5 bytes leftover after parsing attributes in process `syz.3.2750'. [ 442.835715][ T7809] netdevsim netdevsim7 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 442.853625][ T7809] netdevsim netdevsim7 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 442.881484][T16656] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check. [ 443.179363][ T7805] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 443.218719][ T7805] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 443.251525][ T1028] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 443.281347][ T1028] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 443.293868][ T5752] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 443.395570][ T13] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 443.425606][ T13] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 443.506330][ T13] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 443.517696][ T13] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 444.089299][ T7809] netdevsim netdevsim7 netdevsim0: set [0, 0] type 1 family 0 port 8472 - 0 [ 444.140306][ T7809] netdevsim netdevsim7 netdevsim1: set [0, 0] type 1 family 0 port 8472 - 0 [ 444.178124][ T7809] netdevsim netdevsim7 netdevsim2: set [0, 0] type 1 family 0 port 8472 - 0 [ 444.214589][ T7809] netdevsim netdevsim7 netdevsim3: set [0, 0] type 1 family 0 port 8472 - 0 [ 444.334424][ T5731] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 444.342621][ T5731] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 444.491821][ T5631] Bluetooth: hci9: unexpected cc 0x0c03 length: 249 > 1 [ 444.515838][ T5631] Bluetooth: hci9: unexpected cc 0x1003 length: 249 > 9 [ 444.527101][ T5631] Bluetooth: hci9: unexpected cc 0x1001 length: 249 > 9 [ 444.539992][ T5631] Bluetooth: hci9: unexpected cc 0x0c23 length: 249 > 4 [ 444.552083][ T5631] Bluetooth: hci9: unexpected cc 0x0c38 length: 249 > 2 [ 444.637597][T16686] batman_adv: Cannot find parent device. Skipping batadv-on-batadv check for gretap1 [ 444.659361][T16686] batman_adv: batadv0: Adding interface: gretap1 [ 444.678968][T16686] batman_adv: batadv0: The MTU of interface gretap1 is too small (1462) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 444.726297][T16686] batman_adv: batadv0: Interface activated: gretap1 [ 444.928898][T16701] netlink: 'syz.3.2760': attribute type 1 has an invalid length. [ 445.325277][T16712] __nla_validate_parse: 7 callbacks suppressed [ 445.325301][T16712] netlink: 16 bytes leftover after parsing attributes in process `syz.7.2761'. [ 445.353849][ T1028] netdevsim netdevsim1 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 445.366275][T16712] netlink: 40 bytes leftover after parsing attributes in process `syz.7.2761'. [ 445.376672][ T5731] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 445.410399][T16712] netlink: 16 bytes leftover after parsing attributes in process `syz.7.2761'. [ 445.493120][T16712] netlink: 16 bytes leftover after parsing attributes in process `syz.7.2761'. [ 445.895098][ T1028] netdevsim netdevsim1 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 446.061043][T16737] netlink: 4 bytes leftover after parsing attributes in process `syz.7.2765'. [ 446.152047][ T1028] netdevsim netdevsim1 €Â (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 446.235415][T16727] syzkaller0: entered promiscuous mode [ 446.272937][T16727] syzkaller0: entered allmulticast mode [ 446.415657][ T5752] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 446.663016][ T5631] Bluetooth: hci9: command tx timeout [ 446.959149][T16760] netlink: 180 bytes leftover after parsing attributes in process `syz.7.2772'. [ 447.042446][T16764] netlink: 16 bytes leftover after parsing attributes in process `syz.3.2773'. [ 447.065485][T16764] netlink: 40 bytes leftover after parsing attributes in process `syz.3.2773'. [ 447.079174][T16761] gre1: entered promiscuous mode [ 447.092430][T16764] netlink: 16 bytes leftover after parsing attributes in process `syz.3.2773'. [ 447.093805][T16761] gre1: entered allmulticast mode [ 447.150514][T16766] netlink: 16 bytes leftover after parsing attributes in process `syz.3.2773'. [ 447.382230][ T24] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 447.454069][ T5752] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 447.734781][ T1028] tipc: Disabling bearer [ 447.768543][ T5752] IPVS: starting estimator thread 0... [ 447.896135][T16791] IPVS: using max 32 ests per chain, 76800 per kthread [ 448.263378][ T1028] bond7 (unregistering): (slave ipip2): Releasing backup interface [ 448.276008][ T1028] ipip2 (unregistering): left promiscuous mode [ 448.358326][ T1028] team0: Port device bridge2 removed [ 448.382981][ T1028] bond0 (unregistering): Released all slaves [ 448.399370][ T1028] bond1 (unregistering): Released all slaves [ 448.431704][ T1028] bond2 (unregistering): Released all slaves [ 448.460643][ T1028] bond3 (unregistering): (slave veth3): Releasing active interface [ 448.469883][ T1028] bond3 (unregistering): Released all slaves [ 448.498381][ T5752] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 448.500134][ T1028] bond4 (unregistering): Released all slaves [ 448.531466][ T1028] bond5 (unregistering): Released all slaves [ 448.553062][ T1028] bond6 (unregistering): Released all slaves [ 448.579921][ T1028] bond7 (unregistering): Released all slaves [ 448.622122][ T5282] 8021q: adding VLAN 0 to HW filter on device eth1 [ 448.733709][ T5631] Bluetooth: hci9: command tx timeout [ 448.943102][ T1028] tipc: Left network mode [ 449.235576][T16815] netlink: 'syz.7.2781': attribute type 4 has an invalid length. [ 449.534911][ T5752] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 450.017065][T16824] openvswitch: netlink: IPv6 tunnel dst address is zero [ 450.419418][ T808] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 450.583466][ T10] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 450.638111][T16687] bridge0: port 1(bridge_slave_0) entered blocking state [ 450.654263][T16687] bridge0: port 1(bridge_slave_0) entered disabled state [ 450.673854][T16687] bridge_slave_0: entered allmulticast mode [ 450.694870][T16687] bridge_slave_0: entered promiscuous mode [ 450.711842][T16687] bridge0: port 2(bridge_slave_1) entered blocking state [ 450.740298][T16687] bridge0: port 2(bridge_slave_1) entered disabled state [ 450.758456][T16687] bridge_slave_1: entered allmulticast mode [ 450.782729][T16687] bridge_slave_1: entered promiscuous mode [ 450.814854][ T5631] Bluetooth: hci9: command tx timeout [ 450.937342][T16871] netlink: 'syz.8.2788': attribute type 1 has an invalid length. [ 451.057890][ T24] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 451.111263][T16875] __nla_validate_parse: 1 callbacks suppressed [ 451.111284][T16875] netlink: 164 bytes leftover after parsing attributes in process `syz.5.2790'. [ 451.159539][ T5282] 8021q: adding VLAN 0 to HW filter on device eth2 [ 451.256141][T16687] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 451.278008][T16687] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 451.336759][ T1028] hsr_slave_0: left promiscuous mode [ 451.343581][ T1028] hsr_slave_1: left promiscuous mode [ 451.374480][ T24] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 451.618037][ T5752] net_ratelimit: 1 callbacks suppressed [ 451.618059][ T5752] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 451.698126][ T24] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 451.706837][ T5723] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 452.071290][T16687] team0: Port device team_slave_0 added [ 452.081641][T16687] team0: Port device team_slave_1 added [ 452.192735][T16687] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 452.201478][T16687] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 452.229665][T16687] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 452.246638][T16687] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 452.254823][T16687] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 452.282294][T16687] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 452.395685][ T1028] IPVS: stop unused estimator thread 0... [ 452.408583][T16687] hsr_slave_0: entered promiscuous mode [ 452.414879][ T10] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 452.435552][T16687] hsr_slave_1: entered promiscuous mode [ 452.453014][T16687] debugfs: 'hsr0' already exists in 'hsr' [ 452.459098][T16687] Cannot create hsr debugfs directory [ 452.653918][ T5752] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 452.896781][ T5631] Bluetooth: hci9: command tx timeout [ 453.370955][T16859] nci: __nci_request: wait_for_completion_interruptible_timeout failed -512 [ 453.422503][T16687] netdevsim netdevsim1 netdevsim0: renamed from eth0 [ 453.461927][ T5353] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 453.489604][ T10] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 453.518999][T16687] 8021q: adding VLAN 0 to HW filter on device netdevsim0 [ 453.585307][T16687] netdevsim netdevsim1 netdevsim1: renamed from eth1 [ 453.615352][ C0] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 453.624913][ T24] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 453.697913][T16687] 8021q: adding VLAN 0 to HW filter on device netdevsim1 [ 453.705244][ T5752] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 453.746667][T16687] netdevsim netdevsim1 netdevsim2: renamed from eth2 [ 453.772457][T16887] xt_hashlimit: size too large, truncated to 1048576 [ 453.843055][T16687] 8021q: adding VLAN 0 to HW filter on device netdevsim2 [ 453.878609][T16687] netdevsim netdevsim1 netdevsim3: renamed from eth3 [ 453.887529][T16886] netlink: 16 bytes leftover after parsing attributes in process `syz.3.2793'. [ 453.938079][T16687] 8021q: adding VLAN 0 to HW filter on device netdevsim3 [ 453.966861][T16895] netlink: 8 bytes leftover after parsing attributes in process `syz.7.2794'. [ 454.116260][T16895] netlink: 72 bytes leftover after parsing attributes in process `syz.7.2794'. [ 454.156728][T16895] netlink: 12 bytes leftover after parsing attributes in process `syz.7.2794'. [ 454.198619][T16895] netlink: 4 bytes leftover after parsing attributes in process `syz.7.2794'. [ 454.557521][T16687] 8021q: adding VLAN 0 to HW filter on device bond0 [ 454.644126][T16917] netlink: 'syz.5.2797': attribute type 1 has an invalid length. [ 454.698458][T16687] 8021q: adding VLAN 0 to HW filter on device team0 [ 454.700823][T16917] netlink: 'syz.5.2797': attribute type 2 has an invalid length. [ 454.715638][T16916] netlink: 'syz.7.2796': attribute type 3 has an invalid length. [ 454.761210][ T1028] bridge0: port 1(bridge_slave_0) entered blocking state [ 454.768455][ T1028] bridge0: port 1(bridge_slave_0) entered forwarding state [ 454.850108][T16917] netlink: 20 bytes leftover after parsing attributes in process `syz.5.2797'. [ 454.853408][ T1122] bridge0: port 2(bridge_slave_1) entered blocking state [ 454.866437][ T1122] bridge0: port 2(bridge_slave_1) entered forwarding state [ 455.671182][T16943] PF_CAN: dropped non conform CAN XL skbuff: dev type 280, len 40 [ 456.651103][T16985] netlink: 24 bytes leftover after parsing attributes in process `syz.3.2808'. [ 456.744768][T16985] netlink: 12 bytes leftover after parsing attributes in process `syz.3.2808'. [ 456.818441][ T9] net_ratelimit: 18 callbacks suppressed [ 456.818463][ T9] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 457.439526][T16687] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 457.452451][T17010] netlink: 144 bytes leftover after parsing attributes in process `syz.7.2813'. [ 457.614928][ T10] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 457.694144][ T9] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 457.773210][ T5353] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 457.853413][ T9] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 457.880579][T16687] veth0_vlan: entered promiscuous mode [ 458.093638][ C0] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 458.653656][ T9] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 458.736386][ T9] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 458.908589][ T10] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 458.933552][T16687] veth1_vlan: entered promiscuous mode [ 459.012677][T17050] netlink: 12 bytes leftover after parsing attributes in process `syz.3.2822'. [ 459.113968][T17054] IPVS: sed: FWM 3 0x00000003 - no destination available [ 459.121231][ T24] IPVS: starting estimator thread 0... [ 459.265507][T17058] IPVS: using max 24 ests per chain, 57600 per kthread [ 459.270875][T17050] netlink: 4 bytes leftover after parsing attributes in process `syz.3.2822'. [ 459.299072][T17037] syzkaller0: entered promiscuous mode [ 459.311746][T17037] syzkaller0: entered allmulticast mode [ 459.336281][T17054] netlink: 16 bytes leftover after parsing attributes in process `syz.3.2822'. [ 460.239976][T17083] netlink: 'syz.5.2827': attribute type 2 has an invalid length. [ 460.271701][T17083] netlink: 'syz.5.2827': attribute type 1 has an invalid length. [ 460.314643][T16687] veth0_macvtap: entered promiscuous mode [ 460.599940][T17083] 8021q: adding VLAN 0 to HW filter on device bond7 [ 460.721105][T17087] bond7: (slave dummy0): making interface the new active one [ 460.766541][T17087] bond7: (slave dummy0): Enslaving as an active interface with an up link [ 460.799960][T17092] : renamed from dummy0 (while UP) [ 460.996353][T16687] veth1_macvtap: entered promiscuous mode [ 461.065780][T17107] bridge2: entered promiscuous mode [ 461.083224][T17107] bridge2: entered allmulticast mode [ 461.112181][T17107] team0: Port device bridge2 added [ 461.285056][T16687] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 461.380960][T16687] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 461.448363][T16950] netdevsim netdevsim1 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 461.498357][T17131] netlink: 12 bytes leftover after parsing attributes in process `syz.7.2836'. [ 461.512396][T17130] workqueue: Failed to create a rescuer kthread for wq "nfc2_nci_tx_wq": -EINTR [ 461.528250][T16950] netdevsim netdevsim1 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 461.552122][T16950] netdevsim netdevsim1 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 461.562413][T16949] netdevsim netdevsim1 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 461.571145][T17131] block nbd2: Unsupported socket: should be TCP or UNIX. [ 461.855476][ T10] net_ratelimit: 10 callbacks suppressed [ 461.855499][ T10] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 461.936089][ T9] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 462.007692][T17150] netlink: 8 bytes leftover after parsing attributes in process `syz.8.2839'. [ 462.020109][ T9] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 462.031341][ T1169] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 462.062241][T17150] netlink: 4 bytes leftover after parsing attributes in process `syz.8.2839'. [ 462.079629][ T1169] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 462.396350][ T9] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 462.457612][T16950] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 462.497228][T16950] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 462.523668][ T10] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 462.576585][ T24] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 462.894110][ T9] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 463.055484][ T9] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 463.236332][ T24] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 463.266655][T17192] netlink: 72 bytes leftover after parsing attributes in process `syz.7.2846'. [ 463.855805][ T808] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 464.231852][T17218] pimreg: entered allmulticast mode [ 464.491325][T17234] netlink: 16 bytes leftover after parsing attributes in process `syz.7.2856'. [ 464.730484][T17245] netlink: 'syz.5.2857': attribute type 1 has an invalid length. [ 464.739365][T17242] netlink: 284 bytes leftover after parsing attributes in process `syz.1.2854'. [ 464.989654][T17245] bond8: option mode: invalid value (22) [ 465.063544][T17245] bond8 (unregistering): Released all slaves [ 465.756937][T17279] block nbd2: server does not support multiple connections per device. [ 465.785116][T17279] block nbd2: shutting down sockets [ 466.109169][T17296] netlink: 8 bytes leftover after parsing attributes in process `syz.1.2866'. [ 466.129793][T17296] netlink: 24 bytes leftover after parsing attributes in process `syz.1.2866'. [ 466.140236][T17296] netlink: 24 bytes leftover after parsing attributes in process `syz.1.2866'. [ 466.260130][T17296] IPv6: RTM_NEWROUTE with no NLM_F_CREATE or NLM_F_REPLACE [ 466.267509][T17296] IPv6: NLM_F_CREATE should be set when creating new route [ 466.326937][T17300] netlink: 12 bytes leftover after parsing attributes in process `syz.8.2868'. [ 466.707357][T17320] syzkaller0: entered promiscuous mode [ 466.737407][T17320] syzkaller0: entered allmulticast mode [ 466.842490][T17320] netlink: 12 bytes leftover after parsing attributes in process `syz.5.2873'. [ 467.065729][ T9] net_ratelimit: 15 callbacks suppressed [ 467.065753][ T9] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 467.080936][ T5723] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 467.083658][ T10] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 467.207761][T17349] __nla_validate_parse: 2 callbacks suppressed [ 467.207783][T17349] netlink: 224 bytes leftover after parsing attributes in process `syz.7.2880'. [ 467.223059][ T10] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 467.276158][T17349] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 467.311419][T17349] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 467.337438][T17349] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 467.380426][T17349] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 467.399237][T17359] syzkaller1: entered promiscuous mode [ 467.410344][T17359] syzkaller1: entered allmulticast mode [ 467.413282][T17349] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 467.421688][T17359] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 468.159620][T17383] netlink: 36 bytes leftover after parsing attributes in process `syz.8.2884'. [ 468.374719][T17390] IPVS: set_ctl: invalid protocol: 43 255.255.255.255:20003 [ 468.640843][T17403] netlink: 4 bytes leftover after parsing attributes in process `syz.1.2890'. [ 468.642710][T17402] netlink: 'syz.7.2889': attribute type 4 has an invalid length. [ 468.703718][T17403] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 468.712529][T17402] netlink: 152 bytes leftover after parsing attributes in process `syz.7.2889'. [ 468.747850][T17403] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 468.773971][T17403] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 468.796610][T17403] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 468.814537][T17409] netlink: 4 bytes leftover after parsing attributes in process `syz.8.2891'. [ 468.847219][T17402] .`: renamed from bond0 (while UP) [ 468.868720][T17411] netlink: 4 bytes leftover after parsing attributes in process `syz.8.2891'. [ 469.466411][T17431] netlink: 52 bytes leftover after parsing attributes in process `syz.7.2897'. [ 469.659650][T17444] netlink: 8 bytes leftover after parsing attributes in process `syz.1.2898'. [ 470.501814][T17476] netlink: 8 bytes leftover after parsing attributes in process `syz.8.2909'. [ 470.530169][T17476] netlink: 4 bytes leftover after parsing attributes in process `syz.8.2909'. [ 470.541543][T17468] syzkaller0: entered promiscuous mode [ 470.562286][T17468] syzkaller0: entered allmulticast mode [ 470.897903][ T30] INFO: task syz.4.1847:12965 blocked for more than 143 seconds. [ 470.908873][ T30] Not tainted syzkaller #0 [ 470.924480][ T30] "echo 0 > /proc/sys/kernel/hung_task_timeout_secs" disables this message. [ 470.936823][ T30] task:syz.4.1847 state:D stack:27288 pid:12965 tgid:12950 ppid:5620 task_flags:0x400140 flags:0x00080002 [ 470.948912][ T1028] nci: nci_add_new_protocol: the target found does not have the desired protocol [ 470.958580][ T30] Call Trace: [ 470.958596][ T30] [ 470.958610][ T30] __schedule+0x17d9/0x56c0 [ 470.970326][ T30] ? __lock_acquire+0x683/0x2cf0 [ 470.976829][ T30] ? __lock_acquire+0x683/0x2cf0 [ 470.982405][ T30] ? __pfx___schedule+0x10/0x10 [ 470.987811][ T30] ? schedule+0x90/0x2b0 [ 470.992151][ T30] schedule+0x164/0x2b0 [ 470.997002][ T30] schedule_preempt_disabled+0x13/0x30 [ 471.002541][ T30] __mutex_lock+0x7bf/0x1550 [ 471.008386][ T30] ? __mutex_lock+0x5d4/0x1550 [ 471.013567][ T30] ? nfsd_nl_unlock_export_doit+0x2cf/0x530 [ 471.019682][ T30] ? __pfx___mutex_lock+0x10/0x10 [ 471.024878][ T30] ? lockdep_hardirqs_on+0x7a/0x110 [ 471.030738][ T30] ? kern_path+0xd1/0x150 [ 471.035532][ T30] nfsd_nl_unlock_export_doit+0x2cf/0x530 [ 471.041443][ T30] ? __nla_parse+0x40/0x60 [ 471.047313][ T30] ? __pfx_nfsd_nl_unlock_export_doit+0x10/0x10 [ 471.053958][ T30] ? genl_family_rcv_msg_attrs_parse+0x20b/0x2f0 [ 471.060489][ T30] ? genl_family_rcv_msg_attrs_parse+0x265/0x2f0 [ 471.067225][ T30] genl_family_rcv_msg_doit+0x233/0x340 [ 471.073069][ T30] ? __pfx_genl_family_rcv_msg_doit+0x10/0x10 [ 471.079341][ T30] ? bpf_lsm_capable+0x9/0x20 [ 471.084746][ T30] ? security_capable+0x7e/0x2c0 [ 471.090023][ T30] genl_rcv_msg+0x614/0x7a0 [ 471.094773][ T30] ? __pfx_genl_rcv_msg+0x10/0x10 [ 471.099871][ T30] ? __pfx_nfsd_nl_unlock_export_doit+0x10/0x10 [ 471.106422][ T30] netlink_rcv_skb+0x226/0x4a0 [ 471.111274][ T30] ? __pfx_genl_rcv_msg+0x10/0x10 [ 471.117008][ T30] ? __pfx_netlink_rcv_skb+0x10/0x10 [ 471.122399][ T30] ? down_read+0x2be/0x330 [ 471.127069][ T30] genl_rcv+0x28/0x40 [ 471.131299][ T30] netlink_unicast+0x7bb/0x940 [ 471.137835][ T30] netlink_sendmsg+0x813/0xb40 [ 471.142681][ T30] ? __pfx_clockevents_program_event+0x10/0x10 [ 471.150606][ T30] ? __pfx_netlink_sendmsg+0x10/0x10 [ 471.156117][ T30] ? aa_sock_msg_perm+0xf1/0x1b0 [ 471.161251][ T30] ? __pfx_netlink_sendmsg+0x10/0x10 [ 471.166711][ T30] sock_sendmsg_nosec+0x13a/0x180 [ 471.171919][ T30] ____sys_sendmsg+0x54e/0x850 [ 471.174713][T17486] netlink: 'syz.8.2912': attribute type 1 has an invalid length. [ 471.177330][ T30] ? __pfx_____sys_sendmsg+0x10/0x10 [ 471.190330][ T30] ? import_iovec+0x73/0xa0 [ 471.195071][ T30] ___sys_sendmsg+0x2a5/0x360 [ 471.199759][ T30] ? __lock_acquire+0x683/0x2cf0 [ 471.204796][ T30] ? __pfx____sys_sendmsg+0x10/0x10 [ 471.210024][ T30] ? futex_wait+0x2a2/0x390 [ 471.214737][ T30] ? __fget_files+0x2a/0x420 [ 471.219373][ T30] ? __fget_files+0x3a2/0x420 [ 471.224178][ T30] __x64_sys_sendmsg+0x1b1/0x290 [ 471.229286][ T30] ? __pfx___x64_sys_sendmsg+0x10/0x10 [ 471.235579][ T30] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 471.241720][ T30] do_syscall_64+0x174/0x580 [ 471.246568][ T30] ? trace_irq_disable+0x3b/0x140 [ 471.251624][ T30] ? clear_bhb_loop+0x40/0x90 [ 471.256720][ T30] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 471.262682][ T30] RIP: 0033:0x7fc3f2d9de99 [ 471.267226][ T30] RSP: 002b:00007fc3f3bf0028 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 471.275716][ T30] RAX: ffffffffffffffda RBX: 00007fc3f3026180 RCX: 00007fc3f2d9de99 [ 471.283754][ T30] RDX: 0000000004000080 RSI: 00002000000000c0 RDI: 0000000000000004 [ 471.292002][ T30] RBP: 00007fc3f2e33eaf R08: 0000000000000000 R09: 0000000000000000 [ 471.300233][ T30] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 471.308473][ T30] R13: 00007fc3f3026218 R14: 00007fc3f3026180 R15: 00007ffc643fcb48 [ 471.316592][ T30] [ 471.319768][ T30] [ 471.319768][ T30] Showing all locks held in the system: [ 471.328311][ T30] 1 lock held by khungtaskd/30: [ 471.333919][ T30] #0: ffffffff8eb59c60 (rcu_read_lock){....}-{1:3}, at: debug_show_all_locks+0x2e/0x180 [ 471.344362][ T30] 3 locks held by kworker/u8:6/1028: [ 471.349786][ T30] #0: ffff88802c2f9140 ((wq_completion)nfc2_nci_rx_wq){+.+.}-{0:0}, at: process_scheduled_works+0xa20/0x14e0 [ 471.362613][ T30] #1: ffffc90005077c40 ((work_completion)(&ndev->rx_work)){+.+.}-{0:0}, at: process_scheduled_works+0xa20/0x14e0 [ 471.375369][ T30] #2: ffff888029f1b140 (&dev->mutex){....}-{4:4}, at: nfc_targets_found+0x206/0x550 [ 471.385495][ T30] 3 locks held by kworker/u8:7/1122: [ 471.391350][ T30] #0: ffff88801b06c140 ((wq_completion)events_unbound){+.+.}-{0:0}, at: process_scheduled_works+0xa20/0x14e0 [ 471.404117][ T30] #1: ffffc90005087c40 ((linkwatch_work).work){+.+.}-{0:0}, at: process_scheduled_works+0xa20/0x14e0 [ 471.418221][ T30] #2: ffffffff9002c340 (rtnl_mutex){+.+.}-{4:4}, at: linkwatch_event+0xe/0x60 [ 471.427925][ T30] 3 locks held by kworker/u8:8/1169: [ 471.433645][ T30] #0: ffff88801b06c140 ((wq_completion)events_unbound){+.+.}-{0:0}, at: process_scheduled_works+0xa20/0x14e0 [ 471.446317][ T30] #1: ffffc900055d7c40 ((work_completion)(&map->work)){+.+.}-{0:0}, at: process_scheduled_works+0xa20/0x14e0 [ 471.458933][ T30] #2: ffffffff8eb5ff68 (rcu_state.exp_mutex){+.+.}-{4:4}, at: synchronize_rcu_expedited+0x38d/0x770 [ 471.470621][ T30] 2 locks held by syslogd/4969: [ 471.475830][ T30] 2 locks held by getty/5376: [ 471.480672][ T30] #0: ffff888036b8f0a0 (&tty->ldisc_sem){++++}-{0:0}, at: tty_ldisc_ref_wait+0x25/0x70 [ 471.491282][ T30] #1: ffffc900032332e8 (&ldata->atomic_read_lock){+.+.}-{4:4}, at: n_tty_read+0x45a/0x1360 [ 471.502325][ T30] 2 locks held by syz.0.1769/12583: [ 471.508270][ T30] #0: ffffffff9009cba8 (cb_lock){++++}-{4:4}, at: genl_rcv+0x19/0x40 [ 471.516919][ T30] #1: ffffffff8ee8e620 (nfsd_mutex){+.+.}-{4:4}, at: nfsd_nl_listener_set_doit+0x135/0x1750 [ 471.527567][ T30] 2 locks held by syz.4.1847/12965: [ 471.540091][ T30] #0: ffffffff9009cba8 (cb_lock){++++}-{4:4}, at: genl_rcv+0x19/0x40 [ 471.550175][ T30] #1: ffffffff8ee8e620 (nfsd_mutex){+.+.}-{4:4}, at: nfsd_nl_unlock_export_doit+0x2cf/0x530 [ 471.560666][ T30] 3 locks held by syz.6.2563/15756: [ 471.566075][ T30] #0: ffffffff9009cba8 (cb_lock){++++}-{4:4}, at: genl_rcv+0x19/0x40 [ 471.574446][ T30] #1: ffff888032cfd6e8 (nlk_cb_mutex-GENERIC){+.+.}-{4:4}, at: __netlink_dump_start+0xf4/0x7b0 [ 471.585076][ T30] #2: ffffffff8ee8e620 (nfsd_mutex){+.+.}-{4:4}, at: nfsd_nl_expkey_get_reqs_dumpit+0xfd/0xd40 [ 471.596336][ T30] 2 locks held by syz.2.2567/15771: [ 471.601581][ T30] #0: ffffffff9009cba8 (cb_lock){++++}-{4:4}, at: genl_rcv+0x19/0x40 [ 471.609981][ T30] #1: ffffffff8ee8e620 (nfsd_mutex){+.+.}-{4:4}, at: nfsd_nl_listener_get_doit+0x104/0x610 [ 471.620285][ T30] 2 locks held by syz.3.2841/17157: [ 471.625755][ T30] #0: ffffffff9009cba8 (cb_lock){++++}-{4:4}, at: genl_rcv+0x19/0x40 [ 471.634136][ T30] #1: ffffffff8ee8e620 (nfsd_mutex){+.+.}-{4:4}, at: nfsd_nl_listener_get_doit+0x104/0x610 [ 471.644453][ T30] 2 locks held by syz.5.2907/17467: [ 471.649696][ T30] #0: ffffffff9002c340 (rtnl_mutex){+.+.}-{4:4}, at: tun_chr_close+0x3e/0x1c0 [ 471.658891][ T30] #1: ffffffff8eb5ff68 (rcu_state.exp_mutex){+.+.}-{4:4}, at: synchronize_rcu_expedited+0x2d0/0x770 [ 471.671027][ T30] 4 locks held by syz.7.2911/17485: [ 471.676418][ T30] #0: ffffffff9009cba8 (cb_lock){++++}-{4:4}, at: genl_rcv+0x19/0x40 [ 471.677791][T17485] nci: __nci_request: wait_for_completion_interruptible_timeout failed -512 [ 471.684878][ T30] #1: ffffffff9009c9e0 (genl_mutex){+.+.}-{4:4}, at: genl_rcv_msg+0x10b/0x7a0 [ 471.684952][ T30] #2: ffff888029f1b140 (&dev->mutex){....}-{4:4}, at: nfc_dev_up+0x3c/0x350 [ 471.685014][ T30] #3: ffff888058a40348 (&ndev->req_lock){+.+.}-{4:4}, at: nci_dev_up+0xa3/0xdc0 [ 471.685127][ T30] 1 lock held by syz.7.2911/17491: [ 471.685142][ T30] #0: ffffffff9002fc40 (bpf_dispatcher_xdp.mutex){+.+.}-{4:4}, at: bpf_dispatcher_change_prog+0xc2/0xf20 [ 471.738455][ T30] 2 locks held by syz.7.2911/17495: [ 471.744060][ T30] #0: ffffffff90592428 (&ops->srcu#2){.+.+}-{0:0}, at: rtnl_link_ops_get+0x23/0x250 [ 471.754684][ T30] #1: ffffffff9002c340 (rtnl_mutex){+.+.}-{4:4}, at: rtnl_newlink+0xc10/0x1c30 [ 471.763889][ T30] 2 locks held by syz.8.2912/17486: [ 471.769121][ T30] #0: ffffffff9057b0c0 (&ops->srcu#2){.+.+}-{0:0}, at: rtnl_link_ops_get+0x23/0x250 [ 471.779258][ T30] #1: ffffffff9002c340 (rtnl_mutex){+.+.}-{4:4}, at: rtnl_newlink+0xc10/0x1c30 [ 471.788803][ T30] [ 471.791847][ T30] ============================================= [ 471.791847][ T30] [ 471.802523][ T30] NMI backtrace for cpu 1 [ 471.802543][ T30] CPU: 1 UID: 0 PID: 30 Comm: khungtaskd Not tainted syzkaller #0 PREEMPT(full) [ 471.802565][ T30] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/09/2026 [ 471.802577][ T30] Call Trace: [ 471.802585][ T30] [ 471.802593][ T30] dump_stack_lvl+0xe8/0x150 [ 471.802630][ T30] nmi_cpu_backtrace+0x274/0x2d0 [ 471.802760][ T30] ? __pfx_nmi_raise_cpu_backtrace+0x10/0x10 [ 471.802802][ T30] nmi_trigger_cpumask_backtrace+0x17a/0x380 [ 471.802831][ T30] sys_info+0x135/0x170 [ 471.802853][ T30] watchdog+0xfd7/0x1030 [ 471.802894][ T30] ? watchdog+0x1c7/0x1030 [ 471.802926][ T30] kthread+0x388/0x470 [ 471.802954][ T30] ? __pfx_watchdog+0x10/0x10 [ 471.802975][ T30] ? __pfx_kthread+0x10/0x10 [ 471.803002][ T30] ret_from_fork+0x514/0xb70 [ 471.803054][ T30] ? __pfx_ret_from_fork+0x10/0x10 [ 471.803081][ T30] ? __switch_to+0xc89/0x1420 [ 471.803109][ T30] ? __pfx_kthread+0x10/0x10 [ 471.803138][ T30] ret_from_fork_asm+0x1a/0x30 [ 471.803175][ T30] [ 471.908208][ T30] Sending NMI from CPU 1 to CPUs 0: [ 471.913683][ C0] NMI backtrace for cpu 0 [ 471.913702][ C0] CPU: 0 UID: 0 PID: 7814 Comm: kworker/u8:16 Not tainted syzkaller #0 PREEMPT(full) [ 471.913722][ C0] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/09/2026 [ 471.913732][ C0] Workqueue: events_unbound nsim_dev_trap_report_work [ 471.913859][ C0] RIP: 0010:filter_irq_stacks+0x32/0xa0 [ 471.913883][ C0] Code: 41 55 41 54 53 85 f6 74 70 49 89 fe 41 89 f4 31 db 49 bd 00 00 00 00 00 fc ff df 49 89 ff 4c 89 f8 48 c1 e8 03 42 80 3c 28 00 <74> 08 4c 89 ff e8 d4 88 82 00 49 8b 04 de 48 3d 30 02 00 81 0f 93 [ 471.913897][ C0] RSP: 0018:ffffc90003b3f678 EFLAGS: 00000246 [ 471.913910][ C0] RAX: 1ffff92000767ee3 RBX: 0000000000000003 RCX: 0000000000000001 [ 471.913922][ C0] RDX: 0000000000082800 RSI: 000000000000000a RDI: ffffc90003b3f700 [ 471.913933][ C0] RBP: ffffc90003b3f928 R08: 0000000000000007 R09: 0000000000000000 [ 471.913944][ C0] R10: 0000000000000000 R11: ffffffff8eb59c60 R12: 000000000000000a [ 471.913955][ C0] R13: dffffc0000000000 R14: ffffc90003b3f700 R15: ffffc90003b3f718 [ 471.913966][ C0] FS: 0000000000000000(0000) GS:ffff888124f5e000(0000) knlGS:0000000000000000 [ 471.913980][ C0] CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033 [ 471.913991][ C0] CR2: 0000001b2db0bff8 CR3: 000000005b3d4000 CR4: 00000000003526f0 [ 471.914012][ C0] Call Trace: [ 471.914018][ C0] [ 471.914027][ C0] stack_depot_save_flags+0x33/0x800 [ 471.914051][ C0] kasan_save_track+0x4f/0x80 [ 471.914071][ C0] ? kasan_save_track+0x3e/0x80 [ 471.914089][ C0] ? __kasan_kmalloc+0x93/0xb0 [ 471.914107][ C0] ? __kmalloc_node_track_caller_noprof+0x4c3/0x730 [ 471.914128][ C0] ? __alloc_skb+0x2bd/0x7a0 [ 471.914173][ C0] ? nsim_dev_trap_report_work+0x25f/0xb40 [ 471.914189][ C0] ? process_scheduled_works+0xa8e/0x14e0 [ 471.914210][ C0] ? worker_thread+0xa47/0xfb0 [ 471.914226][ C0] ? kthread+0x388/0x470 [ 471.914246][ C0] ? ret_from_fork+0x514/0xb70 [ 471.914266][ C0] ? ret_from_fork_asm+0x1a/0x30 [ 471.914303][ C0] __kasan_kmalloc+0x93/0xb0 [ 471.914324][ C0] __kmalloc_node_track_caller_noprof+0x4c3/0x730 [ 471.914344][ C0] ? kmem_cache_alloc_node_noprof+0x1f5/0x610 [ 471.914362][ C0] ? __kmalloc_node_track_caller_noprof+0x2fd/0x730 [ 471.914381][ C0] ? nsim_dev_trap_report_work+0x25f/0xb40 [ 471.914397][ C0] ? nsim_dev_trap_report_work+0x25f/0xb40 [ 471.914416][ C0] __alloc_skb+0x2bd/0x7a0 [ 471.914439][ C0] nsim_dev_trap_report_work+0x25f/0xb40 [ 471.914463][ C0] ? process_scheduled_works+0xa20/0x14e0 [ 471.914480][ C0] process_scheduled_works+0xa8e/0x14e0 [ 471.914511][ C0] ? __pfx_process_scheduled_works+0x10/0x10 [ 471.914532][ C0] ? assign_work+0x3cf/0x5d0 [ 471.914551][ C0] worker_thread+0xa47/0xfb0 [ 471.914576][ C0] ? __kthread_parkme+0x71/0x1f0 [ 471.914599][ C0] kthread+0x388/0x470 [ 471.914620][ C0] ? __pfx_worker_thread+0x10/0x10 [ 471.914637][ C0] ? __pfx_kthread+0x10/0x10 [ 471.914657][ C0] ret_from_fork+0x514/0xb70 [ 471.914680][ C0] ? __pfx_ret_from_fork+0x10/0x10 [ 471.914701][ C0] ? __switch_to+0xc89/0x1420 [ 471.914722][ C0] ? __pfx_kthread+0x10/0x10 [ 471.914744][ C0] ret_from_fork_asm+0x1a/0x30 [ 471.914766][ C0] [ 472.235002][ T24] net_ratelimit: 154 callbacks suppressed [ 472.235021][ T24] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 472.259503][ T24] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 472.269061][ T10] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 472.269369][ T30] Kernel panic - not syncing: hung_task: blocked tasks [ 472.269387][ T30] CPU: 1 UID: 0 PID: 30 Comm: khungtaskd Not tainted syzkaller #0 PREEMPT(full) [ 472.269408][ T30] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/09/2026 [ 472.269420][ T30] Call Trace: [ 472.269428][ T30] [ 472.269436][ T30] vpanic+0x56c/0xa60 [ 472.269469][ T30] ? __pfx___schedule+0x10/0x10 [ 472.269496][ T30] ? __pfx_vpanic+0x10/0x10 [ 472.269523][ T30] ? nmi_trigger_cpumask_backtrace+0x207/0x380 [ 472.269554][ T30] panic+0xc5/0xd0 [ 472.269580][ T30] ? __pfx_panic+0x10/0x10 [ 472.269603][ T30] ? preempt_schedule_common+0x82/0xd0 [ 472.269628][ T30] ? preempt_schedule_thunk+0x16/0x40 [ 472.269650][ T30] ? nmi_trigger_cpumask_backtrace+0x314/0x380 [ 472.269685][ T30] ? nmi_trigger_cpumask_backtrace+0x319/0x380 [ 472.269713][ T30] watchdog+0x1030/0x1030 [ 472.269743][ T30] ? watchdog+0x1c7/0x1030 [ 472.269771][ T30] kthread+0x388/0x470 [ 472.269794][ T30] ? __pfx_watchdog+0x10/0x10 [ 472.269812][ T30] ? __pfx_kthread+0x10/0x10 [ 472.269835][ T30] ret_from_fork+0x514/0xb70 [ 472.269863][ T30] ? __pfx_ret_from_fork+0x10/0x10 [ 472.269889][ T30] ? __switch_to+0xc89/0x1420 [ 472.269913][ T30] ? __pfx_kthread+0x10/0x10 [ 472.269937][ T30] ret_from_fork_asm+0x1a/0x30 [ 472.269968][ T30] [ 472.277397][ T30] Kernel Offset: disabled