last executing test programs: 2m36.793390938s ago: executing program 4 (id=2484): r0 = socket$netlink(0x10, 0x3, 0x0) sendmsg$netlink(r0, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000000)=[{&(0x7f0000000700)=ANY=[@ANYBLOB="380000002e000100000000000000000008000000", @ANYRES32, @ANYBLOB="0b000080976b6408686030001400018099"], 0x38}], 0x1}, 0x0) r1 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000013c0)={0x18, 0x3, &(0x7f0000000140)=ANY=[@ANYBLOB="1800000000000000000000000000000095"], &(0x7f0000000000)='syzkaller\x00'}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000000c0)={&(0x7f0000000040)='contention_end\x00', r1}, 0x10) r2 = socket(0x10, 0x3, 0x0) r3 = socket$packet(0x11, 0x3, 0x300) ioctl$sock_SIOCGIFINDEX(r3, 0x8933, &(0x7f0000000080)={'ip6tnl0\x00', 0x0}) sendmsg$nl_route_sched(r2, &(0x7f00000007c0)={0x0, 0x0, &(0x7f0000004640)={&(0x7f0000000540)=@newqdisc={0x78, 0x24, 0xf0b, 0x0, 0x0, {0x0, 0x0, 0x0, r4, {0x0, 0x2}, {0xffff, 0xffff}, {0x0, 0x7}}, [@qdisc_kind_options=@q_sfq={{0x8}, {0x4c, 0x2, {{0x6, 0x80000001, 0x0, 0x0, 0xffffffff}, 0x0, 0x0, 0x4, 0x9, 0x80000001, 0x8, 0x0, 0x0, 0x0, 0x0, {0x0, 0x0, 0x5, 0x6739, 0x3}}}}]}, 0x78}}, 0x0) 2m36.650693098s ago: executing program 4 (id=2486): r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r1 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r1, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000340)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a28000000000a0101000000005e1affd5020000000900010073797a300000000008000240000000032c000000030a01030000e6ff00000000020000000900010073797a30000000000900030073797a320000000014000000110001"], 0x7c}}, 0x10) sendmsg$NFT_BATCH(r1, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000003c0)={{0x14}, [@NFT_MSG_NEWRULE={0x54, 0x6, 0xa, 0x40b, 0x0, 0x0, {0x2}, [@NFTA_RULE_EXPRESSIONS={0x28, 0x4, 0x0, 0x1, [{0x24, 0x1, 0x0, 0x1, @inner={{0xa}, @val={0x14, 0x2, 0x0, 0x1, [@NFTA_INNER_FLAGS={0x8, 0x3, 0x1, 0x0, 0x7}, @NFTA_INNER_NUM={0x8}]}}}]}, @NFTA_RULE_TABLE={0x9, 0x1, 'syz0\x00'}, @NFTA_RULE_CHAIN={0x9, 0x2, 'syz2\x00'}]}], {0x14}}, 0x7c}}, 0x0) r2 = syz_genetlink_get_family_id$netlbl_cipso(&(0x7f00000002c0), r0) r3 = socket(0x10, 0x3, 0x0) setsockopt$netlink_NETLINK_TX_RING(r3, 0x10e, 0xc, &(0x7f0000000040)={0x5}, 0x10) sendmsg$nl_route(r3, &(0x7f0000000380)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000000)=@ipv6_getroute={0x1c, 0x1a, 0x1, 0x0, 0x0, {0x2, 0x0, 0x0, 0x0, 0xfe}}, 0x1c}}, 0x0) sendmsg$NLBL_CIPSOV4_C_ADD(r0, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000300)={0x38, r2, 0x1, 0x0, 0x0, {}, [@NLBL_CIPSOV4_A_DOI={0x8, 0x1, 0x3}, @NLBL_CIPSOV4_A_TAGLST={0x14, 0x4, 0x0, 0x1, [{0x5, 0x3, 0x1}, {0x5, 0x3, 0x80}]}, @NLBL_CIPSOV4_A_MTYPE={0x8, 0x2, 0x2}]}, 0x38}}, 0x0) bpf$BPF_BTF_LOAD(0x12, &(0x7f00000000c0)={&(0x7f0000000280)=ANY=[@ANYBLOB="9feb010018000000000000003c0000003c0000000a000000000000000000000b02000000000000000300000d000000000300000003000000000000000300000004000000030000000000000000000005000000000000005f5f"], &(0x7f0000000b80)=""/4090, 0x5e, 0xffa, 0x1}, 0x20) 2m36.376867431s ago: executing program 4 (id=2490): r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0) syz_emit_ethernet(0x2a, &(0x7f0000000000)={@link_local, @dev, @void, {@ipv4={0x800, @igmp={{0x5, 0x4, 0x0, 0x0, 0x1c, 0x0, 0x0, 0x0, 0x2, 0x0, @initdev={0xac, 0x1e, 0x0, 0x0}, @dev={0xac, 0x14, 0x14, 0x22}}, {0x0, 0x0, 0x0, @rand_addr=0x64010101}}}}}, 0x0) r1 = syz_init_net_socket$802154_dgram(0x24, 0x2, 0x0) accept(r1, 0x0, 0x0) r2 = syz_open_procfs$namespace(0x0, &(0x7f0000000000)) r3 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000100)='blkio.bfq.dequeue\x00', 0x275a, 0x0) sendfile(r2, r3, 0x0, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x7101}) recvmsg$unix(r3, &(0x7f0000000200)={&(0x7f0000000140)=@abs, 0x6e, &(0x7f00000000c0)=[{&(0x7f0000001300)=""/4096, 0x1000}], 0x1, &(0x7f00000001c0)=[@cred={{0x1c}}, @cred={{0x1c}}], 0x40}, 0x123) r4 = socket(0x400000000010, 0x3, 0x0) bpf$ENABLE_STATS(0x20, &(0x7f0000000280), 0x4) r5 = socket$unix(0x1, 0x5, 0x0) ioctl$sock_SIOCGIFINDEX(r5, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r4, &(0x7f00000012c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000005c0)=@newqdisc={0x38, 0x24, 0x4ee4e6a52ff56541, 0x70bd2a, 0xffffffff, {0x0, 0x0, 0x0, r6, {0x0, 0xfff1}, {0xffff, 0xffff}, {0x0, 0xf}}, [@qdisc_kind_options=@q_multiq={{0xb}, {0x8}}]}, 0x38}}, 0x0) sendmsg$nl_route_sched(r4, &(0x7f0000006040)={0x0, 0xfffffffffffffdcb, &(0x7f0000000000)={&(0x7f0000000780)=@newtfilter={0x54, 0x2c, 0xd27, 0x70bd28, 0x2000000, {0x0, 0x0, 0x0, r6, {0x0, 0xfff1}, {}, {0x9, 0xffff}}, [@filter_kind_options=@f_basic={{0xa}, {0x24, 0x2, [@TCA_BASIC_EMATCHES={0x20, 0x2, 0x0, 0x1, [@TCA_EMATCH_TREE_HDR={0x8, 0x1, {0x3}}, @TCA_EMATCH_TREE_LIST={0x14, 0x2, 0x0, 0x1, [@TCF_EM_IPSET={0xfffffe6c, 0x1, 0x0, 0x0, {{0x3, 0x8, 0x2}, {0x0, 0x1}}}]}]}]}}]}, 0x54}, 0x1, 0x0, 0x0, 0x1404c885}, 0x2000d8d0) syz_emit_ethernet(0x7e, &(0x7f0000000440)=ANY=[@ANYBLOB="ffffffffffff000000000000080045000063f64f6fc9700000000000019078ac1e0001ac1414aaf400907803000000450000000000000000890000000000000a010100441c4001ac1414aa000000007f000001000000007f00000100000000861e00000000001200000000000000963d096612e35232da00044eb8000289"], 0x0) 2m36.120688863s ago: executing program 4 (id=2493): r0 = syz_init_net_socket$llc(0x1a, 0x2, 0x0) listen(r0, 0x0) ioctl$sock_SIOCSIFVLAN_SET_VLAN_INGRESS_PRIORITY_CMD(r0, 0x8983, &(0x7f0000000000)={0x2, 'veth1_to_bond\x00', {0x493}, 0x969d}) 2m35.836373599s ago: executing program 4 (id=2495): r0 = socket$pppl2tp(0x18, 0x1, 0x1) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x19, 0xf, &(0x7f0000000000)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32, @ANYBLOB="0007000000000000030000000000008500000083000000bf0900000000000055000000000000009500000000000000bf91000000000000b702000040000000850000008500f43824a30db490200000950000f2ff0000000000"], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x30, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) ioctl$SIOCSIFMTU(r0, 0x8922, &(0x7f0000000280)={'ip6tnl0\x00', 0x7f}) getsockopt(0xffffffffffffffff, 0x0, 0x52, &(0x7f0000000000)=""/90, &(0x7f0000000080)=0x5a) 2m35.698703251s ago: executing program 4 (id=2498): recvmsg$kcm(0xffffffffffffffff, &(0x7f0000000340)={&(0x7f0000000000)=@can={0x1d, 0x0}, 0x80, &(0x7f0000000280)=[{&(0x7f0000000080)=""/150, 0x96}, {&(0x7f0000000140)=""/176, 0xb0}, {&(0x7f0000000200)=""/77, 0x4d}], 0x3, &(0x7f00000002c0)=""/81, 0x51}, 0x1) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f00000003c0), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(0xffffffffffffffff, 0x8933, &(0x7f0000000400)={'wlan0\x00', 0x0}) sendmsg$NL80211_CMD_TRIGGER_SCAN(0xffffffffffffffff, &(0x7f0000000640)={&(0x7f0000000380)={0x10, 0x0, 0x0, 0x200000}, 0xc, &(0x7f0000000600)={&(0x7f0000000440)={0x184, r1, 0x8, 0x70bd27, 0x25dfdbfe, {{}, {@val={0x8, 0x3, r2}, @val={0xc, 0x99, {0x0, 0x7e}}}}, [@NL80211_ATTR_SCHED_SCAN_MULTI={0x4}, @NL80211_ATTR_SCAN_SUPP_RATES={0xe4, 0x7d, 0x0, 0x1, [@NL80211_BAND_6GHZ={0x93, 0x3, "0f33eec1a8942aae0f0bcd1fc89eb2157529bce906765281070b157278b42b8f61a7a705ea41cb1cccda746c1b0fe92e1588ca6d4217644cd616f674d4e286dd1b248ce36ee7590b2a9440c992e8f906412babb315a70093ba42884581e4ab5c0840c003a993c04b0ce3441d29b8bd6038b39e906f3e689a96c13a89e3bd8e579084133ed65dafc3b34f3283e5c8b7"}, @NL80211_BAND_2GHZ={0x4c, 0x0, "744a57203d2ad4250474f857badee8267b738873c7872291da370c0ebaca4efbc25abd265125583b067b51478b8972aeeb5303ba893d5fcbd9680e1749b0c8cb95edc4bb206fa2d4"}]}, @NL80211_ATTR_SCHED_SCAN_MULTI={0x4}, @NL80211_ATTR_SCAN_FREQUENCIES={0x3c, 0x2c, 0x0, 0x1, [{0x8, 0x0, 0x4}, {0x8, 0x0, 0x101}, {0x8, 0x0, 0x1}, {0x8, 0x0, 0x4}, {0x8, 0x0, 0x1}, {0x8, 0x0, 0x80}, {0x8, 0x0, 0x1}]}, @NL80211_ATTR_SCHED_SCAN_RSSI_ADJUST={0x6, 0xf7, {0x1, 0xcf}}, @NL80211_ATTR_SCHED_SCAN_RELATIVE_RSSI={0x5, 0xf6, 0x7f}, @NL80211_ATTR_BSSID={0xa}, @NL80211_ATTR_MEASUREMENT_DURATION={0x6, 0xeb, 0x6}, @NL80211_ATTR_SCHED_SCAN_INTERVAL={0x8, 0x77, 0x423}, @NL80211_ATTR_SCHED_SCAN_RSSI_ADJUST={0x6, 0xf7, {0x5, 0x5}}]}, 0x184}, 0x1, 0x0, 0x0, 0x10}, 0x8c0) r3 = socket$nl_generic(0x10, 0x3, 0x10) getsockopt$sock_cred(0xffffffffffffffff, 0x1, 0x11, &(0x7f00000006c0)={0x0, 0x0}, &(0x7f0000000700)=0xc) sendmsg$nl_generic(r3, &(0x7f0000000a00)={&(0x7f0000000680)={0x10, 0x0, 0x0, 0x1}, 0xc, &(0x7f00000009c0)={&(0x7f0000000740)={0x280, 0x2b, 0x100, 0x70bd2b, 0x25dfdbfe, {0x10}, [@typed={0x8, 0xeb, 0x0, 0x0, @uid=r4}, @nested={0x24f, 0x3f, 0x0, 0x1, [@generic="f7bf28a80e32b999491fe97ab40c38a4f100cbb6d08a874e5cde5b8c983285699efd5f10943e2224bab23030baf7fdb93339f248a1a6631fe9099757d08a204705b20397a4bcfb52a7143ef965787c307f1eb1684f857d9d35366a3578b3faff4e65ac4d64a2dd46a2e3d72e4215b09945014b05584e99b7d27f17f8348f5d87f5ed0496041ad20df046f29b33663bdd527798d8cf82bac19896508c0068d2", @typed={0xa, 0x12b, 0x0, 0x0, @str='wlan0\x00'}, @typed={0x14, 0xfb, 0x0, 0x0, @ipv6=@mcast1}, @typed={0xcf, 0xf7, 0x0, 0x0, @binary="8173ee2549cab0240d6a3484eafde5bb8985d5649909f4c45bfb53cf90d2d0cf8f994bef3dcdfd04734f1feee3da60228de0ffa74984ed43f314e025d0d7a60b5e2ef9e2b081160e965921c57233b11bd6badb2b2357f5886fd787a0b35a88dc22b0e089635aadd423bcf818895162ca1d7c81f0941a3e4803a8c684c827b704c11505f49863d569da69a2bf4f63e7315162c9f31d692932920eea879fc3274490c3b624b9ac9000d330bef0bf7d8691748759e89a37791c2e06afdb32f9b2d78a195ca3456cc0be221179"}, @typed={0x8, 0x109, 0x0, 0x0, @fd}, @typed={0x4, 0xcf}, @generic="74f774bd8b22199f4295c03a335cce4a396f38866a8da5aade4a16560266f905b5311a8944fc75a0003feda52b10050d3cc383eafca22c469851de41a55113f89fdc6c25a14243dfbc4b7c0a892d", @typed={0x14, 0x8d, 0x0, 0x0, @ipv6=@private0}, @generic="bf3e71b05d6021d8f2d3119a28bfafff524ccf28f0d6ec28e79e2e301e2fd749e9b53b4223b5f98f1047dffd4ec46853ea66e10454d2b348ba287ec211114f3f50a2796161e8f87219eaeaabe9dc"]}, @generic, @typed={0x14, 0x67, 0x0, 0x0, @ipv6=@rand_addr=' \x01\x00'}]}, 0x280}}, 0x40090) r5 = socket$nl_rdma(0x10, 0x3, 0x14) sendmsg$RDMA_NLDEV_CMD_DELLINK(r5, &(0x7f0000000b00)={&(0x7f0000000a40)={0x10, 0x0, 0x0, 0x8000000}, 0xc, &(0x7f0000000ac0)={&(0x7f0000000a80)={0x38, 0x1404, 0x1, 0x70bd2a, 0x25dfdbfe, "", [@RDMA_NLDEV_ATTR_DEV_INDEX={0x8, 0x1, 0x1}, @RDMA_NLDEV_ATTR_DEV_INDEX={0x8, 0x1, 0x1}, @RDMA_NLDEV_ATTR_DEV_INDEX={0x8, 0x1, 0x2}, @RDMA_NLDEV_ATTR_DEV_INDEX={0x8, 0x1, 0x1}, @RDMA_NLDEV_ATTR_DEV_INDEX={0x8}]}, 0x38}, 0x1, 0x0, 0x0, 0x20000000}, 0x4) r6 = bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000e40)={0x6, 0x9, &(0x7f0000000b40)=@framed={{0x18, 0x0, 0x0, 0x0, 0x4, 0x0, 0x0, 0x0, 0xe}, [@map_fd={0x18, 0x1}, @ringbuf_query={{0x18, 0x1, 0x1, 0x0, 0x1}}]}, &(0x7f0000000bc0)='syzkaller\x00', 0x5, 0xe9, &(0x7f0000000c00)=""/233, 0x41100, 0x8c2356bd74a25d60, '\x00', r0, 0x25, 0xffffffffffffffff, 0x8, &(0x7f0000000d00)={0x9, 0x4}, 0x8, 0x10, 0x0, 0x0, 0x0, 0x0, 0x9, &(0x7f0000000d40)=[0x1, 0xffffffffffffffff, 0xffffffffffffffff, 0x1, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff], &(0x7f0000000d80)=[{0x4, 0x2, 0x7, 0x4}, {0x4, 0x4, 0x10, 0x4}, {0x5, 0x3, 0x5, 0xb}, {0x2, 0x5, 0x4, 0x2}, {0x5, 0x4, 0x4, 0x5}, {0x4, 0x2, 0x4, 0xe050b4379b2b333c}, {0x3, 0x5, 0xe, 0x7}, {0x0, 0x1, 0xc, 0xa}, {0x5, 0x2, 0x1, 0x5}], 0x10, 0x57fdc321}, 0x94) setsockopt$sock_attach_bpf(r3, 0x1, 0x32, &(0x7f0000000f00)=r6, 0x4) r7 = socket$inet6_udp(0xa, 0x2, 0x0) bpf$BPF_PROG_QUERY(0x10, &(0x7f0000001040)={@map=0x1, 0x20, 0x1, 0x1000, &(0x7f0000000f40)=[0x0, 0x0, 0x0], 0x3, 0x0, &(0x7f0000000f80)=[0x0, 0x0, 0x0, 0x0, 0x0, 0x0], &(0x7f0000000fc0)=[0x0, 0x0, 0x0], &(0x7f0000001000)=[0x0, 0x0, 0x0], 0x0}, 0x40) bpf$BPF_PROG_DETACH(0x9, &(0x7f0000001080)={@map=0x1, r6, 0x34, 0x0, 0x0, @void, @value=r6, @void, @void, r8}, 0x20) getsockopt$inet_sctp6_SCTP_DEFAULT_SNDINFO(0xffffffffffffffff, 0x84, 0x22, &(0x7f00000010c0)={0x8001, 0x2, 0x3, 0x7, 0x0}, &(0x7f0000001100)=0x10) getsockopt$inet_sctp_SCTP_PEER_AUTH_CHUNKS(0xffffffffffffffff, 0x84, 0x1a, &(0x7f0000001140)={r9, 0x3b, "791099cbbb5636b2039f90b3a281826f442be3d8934cb74cb42424a5d352a423dffa64da1015d2571b7d343e110f3bf57de6d1d00590d0a22088f3"}, &(0x7f00000011c0)=0x43) r11 = socket$inet6_sctp(0xa, 0x5, 0x84) getsockopt$inet_sctp6_SCTP_PR_SUPPORTED(r11, 0x84, 0x71, &(0x7f0000001200)={r10}, &(0x7f0000001240)=0x8) mmap(&(0x7f0000ffd000/0x2000)=nil, 0x2000, 0xa, 0x100010, r7, 0xd037b000) r12 = socket$packet(0x11, 0x3, 0x300) connect$packet(r12, &(0x7f0000001280)={0x11, 0xf7, r0, 0x1, 0x9, 0x6, @broadcast}, 0x14) r13 = syz_genetlink_get_family_id$tipc2(&(0x7f0000001300), r3) sendmsg$TIPC_NL_BEARER_DISABLE(r3, &(0x7f0000001540)={&(0x7f00000012c0)={0x10, 0x0, 0x0, 0x40}, 0xc, &(0x7f0000001500)={&(0x7f0000001340)={0x1a4, r13, 0x800, 0x70bd25, 0x25dfdbfc, {}, [@TIPC_NLA_SOCK={0x5c, 0x2, 0x0, 0x1, [@TIPC_NLA_SOCK_CON={0x3c, 0x3, 0x0, 0x1, [@TIPC_NLA_CON_FLAG={0x8, 0x1, 0x21}, @TIPC_NLA_CON_FLAG={0x8, 0x1, 0xcb}, @TIPC_NLA_CON_FLAG={0x8, 0x1, 0x40}, @TIPC_NLA_CON_FLAG={0x8, 0x1, 0x9}, @TIPC_NLA_CON_FLAG={0x8, 0x1, 0x2a0c}, @TIPC_NLA_CON_NODE={0x8, 0x2, 0xa}, @TIPC_NLA_CON_FLAG={0x8, 0x1, 0x6}]}, @TIPC_NLA_SOCK_REF={0x8, 0x2, 0x6}, @TIPC_NLA_SOCK_CON={0x14, 0x3, 0x0, 0x1, [@TIPC_NLA_CON_NODE={0x8, 0x2, 0x80}, @TIPC_NLA_CON_FLAG={0x8, 0x1, 0x423}]}]}, @TIPC_NLA_LINK={0xc8, 0x4, 0x0, 0x1, [@TIPC_NLA_LINK_PROP={0x54, 0x7, 0x0, 0x1, [@TIPC_NLA_PROP_MTU={0x8, 0x4, 0x3}, @TIPC_NLA_PROP_WIN={0x8, 0x3, 0x2d60}, @TIPC_NLA_PROP_WIN={0x8, 0x3, 0xfffffbff}, @TIPC_NLA_PROP_WIN={0x8, 0x3, 0x1}, @TIPC_NLA_PROP_TOL={0x8, 0x2, 0x8}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x1e}, @TIPC_NLA_PROP_MTU={0x8, 0x4, 0x1}, @TIPC_NLA_PROP_MTU={0x8, 0x4, 0x7}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x7}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0xf}]}, @TIPC_NLA_LINK_NAME={0x9, 0x1, 'syz1\x00'}, @TIPC_NLA_LINK_NAME={0x13, 0x1, 'broadcast-link\x00'}, @TIPC_NLA_LINK_NAME={0x9, 0x1, 'syz0\x00'}, @TIPC_NLA_LINK_NAME={0x13, 0x1, 'broadcast-link\x00'}, @TIPC_NLA_LINK_PROP={0xc, 0x7, 0x0, 0x1, [@TIPC_NLA_PROP_MTU={0x8, 0x4, 0x9}]}, @TIPC_NLA_LINK_PROP={0x24, 0x7, 0x0, 0x1, [@TIPC_NLA_PROP_WIN={0x8, 0x3, 0x9}, @TIPC_NLA_PROP_MTU={0x8}, @TIPC_NLA_PROP_TOL={0x8, 0x2, 0x8}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x18}]}]}, @TIPC_NLA_LINK={0x48, 0x4, 0x0, 0x1, [@TIPC_NLA_LINK_PROP={0x44, 0x7, 0x0, 0x1, [@TIPC_NLA_PROP_MTU={0x8, 0x4, 0xcb}, @TIPC_NLA_PROP_WIN={0x8, 0x3, 0x2b87}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x1a}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x16}, @TIPC_NLA_PROP_WIN={0x8, 0x3, 0x6}, @TIPC_NLA_PROP_TOL={0x8, 0x2, 0x7}, @TIPC_NLA_PROP_TOL={0x8, 0x2, 0x80}, @TIPC_NLA_PROP_MTU={0x8, 0x4, 0x80000000}]}]}, @TIPC_NLA_PUBL={0x24, 0x3, 0x0, 0x1, [@TIPC_NLA_PUBL_UPPER={0x8, 0x3, 0x6}, @TIPC_NLA_PUBL_UPPER={0x8, 0x3, 0x3}, @TIPC_NLA_PUBL_UPPER={0x8, 0x3, 0xc44a}, @TIPC_NLA_PUBL_UPPER={0x8, 0x3, 0x8000}]}]}, 0x1a4}, 0x1, 0x0, 0x0, 0x4840}, 0x20040020) r14 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_MSG_GETRULE(r14, &(0x7f0000001640)={&(0x7f0000001580)={0x10, 0x0, 0x0, 0x400000}, 0xc, &(0x7f0000001600)={&(0x7f00000015c0)={0x20, 0x7, 0xa, 0x201, 0x0, 0x0, {0x5, 0x0, 0x7}, [@NFTA_RULE_CHAIN={0x9, 0x2, 'syz0\x00'}]}, 0x20}, 0x1, 0x0, 0x0, 0x40000}, 0x8041) syz_genetlink_get_family_id$tipc(&(0x7f0000001680), r3) r15 = syz_init_net_socket$ax25(0x3, 0x5, 0x8) ioctl$sock_SIOCGIFINDEX_80211(r15, 0x8933, &(0x7f00000016c0)={'wlan1\x00'}) syz_genetlink_get_family_id$ieee802154(&(0x7f0000001700), 0xffffffffffffffff) sendmsg$RDMA_NLDEV_CMD_RES_CM_ID_GET(r5, &(0x7f0000001800)={&(0x7f0000001740)={0x10, 0x0, 0x0, 0x80}, 0xc, &(0x7f00000017c0)={&(0x7f0000001780)={0x40, 0x140b, 0x1, 0x70bd27, 0x25dfdbfd, "", [@RDMA_NLDEV_ATTR_PORT_INDEX={0x8, 0x3, 0x4}, @RDMA_NLDEV_ATTR_RES_CM_IDN={0x8, 0x3f, 0x3}, @RDMA_NLDEV_ATTR_RES_CM_IDN={0x8}, @RDMA_NLDEV_ATTR_RES_CM_IDN={0x8, 0x3f, 0x2}, @RDMA_NLDEV_ATTR_DEV_INDEX={0x8, 0x1, 0x2}, @RDMA_NLDEV_ATTR_DEV_INDEX={0x8, 0x1, 0x2}]}, 0x40}, 0x1, 0x0, 0x0, 0x80}, 0x40880) 2m20.634970042s ago: executing program 32 (id=2498): recvmsg$kcm(0xffffffffffffffff, &(0x7f0000000340)={&(0x7f0000000000)=@can={0x1d, 0x0}, 0x80, &(0x7f0000000280)=[{&(0x7f0000000080)=""/150, 0x96}, {&(0x7f0000000140)=""/176, 0xb0}, {&(0x7f0000000200)=""/77, 0x4d}], 0x3, &(0x7f00000002c0)=""/81, 0x51}, 0x1) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f00000003c0), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(0xffffffffffffffff, 0x8933, &(0x7f0000000400)={'wlan0\x00', 0x0}) sendmsg$NL80211_CMD_TRIGGER_SCAN(0xffffffffffffffff, &(0x7f0000000640)={&(0x7f0000000380)={0x10, 0x0, 0x0, 0x200000}, 0xc, &(0x7f0000000600)={&(0x7f0000000440)={0x184, r1, 0x8, 0x70bd27, 0x25dfdbfe, {{}, {@val={0x8, 0x3, r2}, @val={0xc, 0x99, {0x0, 0x7e}}}}, [@NL80211_ATTR_SCHED_SCAN_MULTI={0x4}, @NL80211_ATTR_SCAN_SUPP_RATES={0xe4, 0x7d, 0x0, 0x1, [@NL80211_BAND_6GHZ={0x93, 0x3, "0f33eec1a8942aae0f0bcd1fc89eb2157529bce906765281070b157278b42b8f61a7a705ea41cb1cccda746c1b0fe92e1588ca6d4217644cd616f674d4e286dd1b248ce36ee7590b2a9440c992e8f906412babb315a70093ba42884581e4ab5c0840c003a993c04b0ce3441d29b8bd6038b39e906f3e689a96c13a89e3bd8e579084133ed65dafc3b34f3283e5c8b7"}, @NL80211_BAND_2GHZ={0x4c, 0x0, "744a57203d2ad4250474f857badee8267b738873c7872291da370c0ebaca4efbc25abd265125583b067b51478b8972aeeb5303ba893d5fcbd9680e1749b0c8cb95edc4bb206fa2d4"}]}, @NL80211_ATTR_SCHED_SCAN_MULTI={0x4}, @NL80211_ATTR_SCAN_FREQUENCIES={0x3c, 0x2c, 0x0, 0x1, [{0x8, 0x0, 0x4}, {0x8, 0x0, 0x101}, {0x8, 0x0, 0x1}, {0x8, 0x0, 0x4}, {0x8, 0x0, 0x1}, {0x8, 0x0, 0x80}, {0x8, 0x0, 0x1}]}, @NL80211_ATTR_SCHED_SCAN_RSSI_ADJUST={0x6, 0xf7, {0x1, 0xcf}}, @NL80211_ATTR_SCHED_SCAN_RELATIVE_RSSI={0x5, 0xf6, 0x7f}, @NL80211_ATTR_BSSID={0xa}, @NL80211_ATTR_MEASUREMENT_DURATION={0x6, 0xeb, 0x6}, @NL80211_ATTR_SCHED_SCAN_INTERVAL={0x8, 0x77, 0x423}, @NL80211_ATTR_SCHED_SCAN_RSSI_ADJUST={0x6, 0xf7, {0x5, 0x5}}]}, 0x184}, 0x1, 0x0, 0x0, 0x10}, 0x8c0) r3 = socket$nl_generic(0x10, 0x3, 0x10) getsockopt$sock_cred(0xffffffffffffffff, 0x1, 0x11, &(0x7f00000006c0)={0x0, 0x0}, &(0x7f0000000700)=0xc) sendmsg$nl_generic(r3, &(0x7f0000000a00)={&(0x7f0000000680)={0x10, 0x0, 0x0, 0x1}, 0xc, &(0x7f00000009c0)={&(0x7f0000000740)={0x280, 0x2b, 0x100, 0x70bd2b, 0x25dfdbfe, {0x10}, [@typed={0x8, 0xeb, 0x0, 0x0, @uid=r4}, @nested={0x24f, 0x3f, 0x0, 0x1, [@generic="f7bf28a80e32b999491fe97ab40c38a4f100cbb6d08a874e5cde5b8c983285699efd5f10943e2224bab23030baf7fdb93339f248a1a6631fe9099757d08a204705b20397a4bcfb52a7143ef965787c307f1eb1684f857d9d35366a3578b3faff4e65ac4d64a2dd46a2e3d72e4215b09945014b05584e99b7d27f17f8348f5d87f5ed0496041ad20df046f29b33663bdd527798d8cf82bac19896508c0068d2", @typed={0xa, 0x12b, 0x0, 0x0, @str='wlan0\x00'}, @typed={0x14, 0xfb, 0x0, 0x0, @ipv6=@mcast1}, @typed={0xcf, 0xf7, 0x0, 0x0, @binary="8173ee2549cab0240d6a3484eafde5bb8985d5649909f4c45bfb53cf90d2d0cf8f994bef3dcdfd04734f1feee3da60228de0ffa74984ed43f314e025d0d7a60b5e2ef9e2b081160e965921c57233b11bd6badb2b2357f5886fd787a0b35a88dc22b0e089635aadd423bcf818895162ca1d7c81f0941a3e4803a8c684c827b704c11505f49863d569da69a2bf4f63e7315162c9f31d692932920eea879fc3274490c3b624b9ac9000d330bef0bf7d8691748759e89a37791c2e06afdb32f9b2d78a195ca3456cc0be221179"}, @typed={0x8, 0x109, 0x0, 0x0, @fd}, @typed={0x4, 0xcf}, @generic="74f774bd8b22199f4295c03a335cce4a396f38866a8da5aade4a16560266f905b5311a8944fc75a0003feda52b10050d3cc383eafca22c469851de41a55113f89fdc6c25a14243dfbc4b7c0a892d", @typed={0x14, 0x8d, 0x0, 0x0, @ipv6=@private0}, @generic="bf3e71b05d6021d8f2d3119a28bfafff524ccf28f0d6ec28e79e2e301e2fd749e9b53b4223b5f98f1047dffd4ec46853ea66e10454d2b348ba287ec211114f3f50a2796161e8f87219eaeaabe9dc"]}, @generic, @typed={0x14, 0x67, 0x0, 0x0, @ipv6=@rand_addr=' \x01\x00'}]}, 0x280}}, 0x40090) r5 = socket$nl_rdma(0x10, 0x3, 0x14) sendmsg$RDMA_NLDEV_CMD_DELLINK(r5, &(0x7f0000000b00)={&(0x7f0000000a40)={0x10, 0x0, 0x0, 0x8000000}, 0xc, &(0x7f0000000ac0)={&(0x7f0000000a80)={0x38, 0x1404, 0x1, 0x70bd2a, 0x25dfdbfe, "", [@RDMA_NLDEV_ATTR_DEV_INDEX={0x8, 0x1, 0x1}, @RDMA_NLDEV_ATTR_DEV_INDEX={0x8, 0x1, 0x1}, @RDMA_NLDEV_ATTR_DEV_INDEX={0x8, 0x1, 0x2}, @RDMA_NLDEV_ATTR_DEV_INDEX={0x8, 0x1, 0x1}, @RDMA_NLDEV_ATTR_DEV_INDEX={0x8}]}, 0x38}, 0x1, 0x0, 0x0, 0x20000000}, 0x4) r6 = bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000e40)={0x6, 0x9, &(0x7f0000000b40)=@framed={{0x18, 0x0, 0x0, 0x0, 0x4, 0x0, 0x0, 0x0, 0xe}, [@map_fd={0x18, 0x1}, @ringbuf_query={{0x18, 0x1, 0x1, 0x0, 0x1}}]}, &(0x7f0000000bc0)='syzkaller\x00', 0x5, 0xe9, &(0x7f0000000c00)=""/233, 0x41100, 0x8c2356bd74a25d60, '\x00', r0, 0x25, 0xffffffffffffffff, 0x8, &(0x7f0000000d00)={0x9, 0x4}, 0x8, 0x10, 0x0, 0x0, 0x0, 0x0, 0x9, &(0x7f0000000d40)=[0x1, 0xffffffffffffffff, 0xffffffffffffffff, 0x1, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff], &(0x7f0000000d80)=[{0x4, 0x2, 0x7, 0x4}, {0x4, 0x4, 0x10, 0x4}, {0x5, 0x3, 0x5, 0xb}, {0x2, 0x5, 0x4, 0x2}, {0x5, 0x4, 0x4, 0x5}, {0x4, 0x2, 0x4, 0xe050b4379b2b333c}, {0x3, 0x5, 0xe, 0x7}, {0x0, 0x1, 0xc, 0xa}, {0x5, 0x2, 0x1, 0x5}], 0x10, 0x57fdc321}, 0x94) setsockopt$sock_attach_bpf(r3, 0x1, 0x32, &(0x7f0000000f00)=r6, 0x4) r7 = socket$inet6_udp(0xa, 0x2, 0x0) bpf$BPF_PROG_QUERY(0x10, &(0x7f0000001040)={@map=0x1, 0x20, 0x1, 0x1000, &(0x7f0000000f40)=[0x0, 0x0, 0x0], 0x3, 0x0, &(0x7f0000000f80)=[0x0, 0x0, 0x0, 0x0, 0x0, 0x0], &(0x7f0000000fc0)=[0x0, 0x0, 0x0], &(0x7f0000001000)=[0x0, 0x0, 0x0], 0x0}, 0x40) bpf$BPF_PROG_DETACH(0x9, &(0x7f0000001080)={@map=0x1, r6, 0x34, 0x0, 0x0, @void, @value=r6, @void, @void, r8}, 0x20) getsockopt$inet_sctp6_SCTP_DEFAULT_SNDINFO(0xffffffffffffffff, 0x84, 0x22, &(0x7f00000010c0)={0x8001, 0x2, 0x3, 0x7, 0x0}, &(0x7f0000001100)=0x10) getsockopt$inet_sctp_SCTP_PEER_AUTH_CHUNKS(0xffffffffffffffff, 0x84, 0x1a, &(0x7f0000001140)={r9, 0x3b, "791099cbbb5636b2039f90b3a281826f442be3d8934cb74cb42424a5d352a423dffa64da1015d2571b7d343e110f3bf57de6d1d00590d0a22088f3"}, &(0x7f00000011c0)=0x43) r11 = socket$inet6_sctp(0xa, 0x5, 0x84) getsockopt$inet_sctp6_SCTP_PR_SUPPORTED(r11, 0x84, 0x71, &(0x7f0000001200)={r10}, &(0x7f0000001240)=0x8) mmap(&(0x7f0000ffd000/0x2000)=nil, 0x2000, 0xa, 0x100010, r7, 0xd037b000) r12 = socket$packet(0x11, 0x3, 0x300) connect$packet(r12, &(0x7f0000001280)={0x11, 0xf7, r0, 0x1, 0x9, 0x6, @broadcast}, 0x14) r13 = syz_genetlink_get_family_id$tipc2(&(0x7f0000001300), r3) sendmsg$TIPC_NL_BEARER_DISABLE(r3, &(0x7f0000001540)={&(0x7f00000012c0)={0x10, 0x0, 0x0, 0x40}, 0xc, &(0x7f0000001500)={&(0x7f0000001340)={0x1a4, r13, 0x800, 0x70bd25, 0x25dfdbfc, {}, [@TIPC_NLA_SOCK={0x5c, 0x2, 0x0, 0x1, [@TIPC_NLA_SOCK_CON={0x3c, 0x3, 0x0, 0x1, [@TIPC_NLA_CON_FLAG={0x8, 0x1, 0x21}, @TIPC_NLA_CON_FLAG={0x8, 0x1, 0xcb}, @TIPC_NLA_CON_FLAG={0x8, 0x1, 0x40}, @TIPC_NLA_CON_FLAG={0x8, 0x1, 0x9}, @TIPC_NLA_CON_FLAG={0x8, 0x1, 0x2a0c}, @TIPC_NLA_CON_NODE={0x8, 0x2, 0xa}, @TIPC_NLA_CON_FLAG={0x8, 0x1, 0x6}]}, @TIPC_NLA_SOCK_REF={0x8, 0x2, 0x6}, @TIPC_NLA_SOCK_CON={0x14, 0x3, 0x0, 0x1, [@TIPC_NLA_CON_NODE={0x8, 0x2, 0x80}, @TIPC_NLA_CON_FLAG={0x8, 0x1, 0x423}]}]}, @TIPC_NLA_LINK={0xc8, 0x4, 0x0, 0x1, [@TIPC_NLA_LINK_PROP={0x54, 0x7, 0x0, 0x1, [@TIPC_NLA_PROP_MTU={0x8, 0x4, 0x3}, @TIPC_NLA_PROP_WIN={0x8, 0x3, 0x2d60}, @TIPC_NLA_PROP_WIN={0x8, 0x3, 0xfffffbff}, @TIPC_NLA_PROP_WIN={0x8, 0x3, 0x1}, @TIPC_NLA_PROP_TOL={0x8, 0x2, 0x8}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x1e}, @TIPC_NLA_PROP_MTU={0x8, 0x4, 0x1}, @TIPC_NLA_PROP_MTU={0x8, 0x4, 0x7}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x7}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0xf}]}, @TIPC_NLA_LINK_NAME={0x9, 0x1, 'syz1\x00'}, @TIPC_NLA_LINK_NAME={0x13, 0x1, 'broadcast-link\x00'}, @TIPC_NLA_LINK_NAME={0x9, 0x1, 'syz0\x00'}, @TIPC_NLA_LINK_NAME={0x13, 0x1, 'broadcast-link\x00'}, @TIPC_NLA_LINK_PROP={0xc, 0x7, 0x0, 0x1, [@TIPC_NLA_PROP_MTU={0x8, 0x4, 0x9}]}, @TIPC_NLA_LINK_PROP={0x24, 0x7, 0x0, 0x1, [@TIPC_NLA_PROP_WIN={0x8, 0x3, 0x9}, @TIPC_NLA_PROP_MTU={0x8}, @TIPC_NLA_PROP_TOL={0x8, 0x2, 0x8}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x18}]}]}, @TIPC_NLA_LINK={0x48, 0x4, 0x0, 0x1, [@TIPC_NLA_LINK_PROP={0x44, 0x7, 0x0, 0x1, [@TIPC_NLA_PROP_MTU={0x8, 0x4, 0xcb}, @TIPC_NLA_PROP_WIN={0x8, 0x3, 0x2b87}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x1a}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x16}, @TIPC_NLA_PROP_WIN={0x8, 0x3, 0x6}, @TIPC_NLA_PROP_TOL={0x8, 0x2, 0x7}, @TIPC_NLA_PROP_TOL={0x8, 0x2, 0x80}, @TIPC_NLA_PROP_MTU={0x8, 0x4, 0x80000000}]}]}, @TIPC_NLA_PUBL={0x24, 0x3, 0x0, 0x1, [@TIPC_NLA_PUBL_UPPER={0x8, 0x3, 0x6}, @TIPC_NLA_PUBL_UPPER={0x8, 0x3, 0x3}, @TIPC_NLA_PUBL_UPPER={0x8, 0x3, 0xc44a}, @TIPC_NLA_PUBL_UPPER={0x8, 0x3, 0x8000}]}]}, 0x1a4}, 0x1, 0x0, 0x0, 0x4840}, 0x20040020) r14 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_MSG_GETRULE(r14, &(0x7f0000001640)={&(0x7f0000001580)={0x10, 0x0, 0x0, 0x400000}, 0xc, &(0x7f0000001600)={&(0x7f00000015c0)={0x20, 0x7, 0xa, 0x201, 0x0, 0x0, {0x5, 0x0, 0x7}, [@NFTA_RULE_CHAIN={0x9, 0x2, 'syz0\x00'}]}, 0x20}, 0x1, 0x0, 0x0, 0x40000}, 0x8041) syz_genetlink_get_family_id$tipc(&(0x7f0000001680), r3) r15 = syz_init_net_socket$ax25(0x3, 0x5, 0x8) ioctl$sock_SIOCGIFINDEX_80211(r15, 0x8933, &(0x7f00000016c0)={'wlan1\x00'}) syz_genetlink_get_family_id$ieee802154(&(0x7f0000001700), 0xffffffffffffffff) sendmsg$RDMA_NLDEV_CMD_RES_CM_ID_GET(r5, &(0x7f0000001800)={&(0x7f0000001740)={0x10, 0x0, 0x0, 0x80}, 0xc, &(0x7f00000017c0)={&(0x7f0000001780)={0x40, 0x140b, 0x1, 0x70bd27, 0x25dfdbfd, "", [@RDMA_NLDEV_ATTR_PORT_INDEX={0x8, 0x3, 0x4}, @RDMA_NLDEV_ATTR_RES_CM_IDN={0x8, 0x3f, 0x3}, @RDMA_NLDEV_ATTR_RES_CM_IDN={0x8}, @RDMA_NLDEV_ATTR_RES_CM_IDN={0x8, 0x3f, 0x2}, @RDMA_NLDEV_ATTR_DEV_INDEX={0x8, 0x1, 0x2}, @RDMA_NLDEV_ATTR_DEV_INDEX={0x8, 0x1, 0x2}]}, 0x40}, 0x1, 0x0, 0x0, 0x80}, 0x40880) 2m15.614438067s ago: executing program 0 (id=2839): r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = socket$nl_generic(0x10, 0x3, 0x10) r2 = syz_genetlink_get_family_id$devlink(&(0x7f0000000740), 0xffffffffffffffff) sendmsg$DEVLINK_CMD_RATE_NEW(r1, &(0x7f0000002200)={0x0, 0x0, &(0x7f00000021c0)={&(0x7f0000002080)={0x44, r2, 0x1, 0x0, 0x0, {}, [@handle=@nsim={{0xe}, {0xf, 0x2, {'netdevsim', 0x0}}}, @DEVLINK_ATTR_RATE_NODE_NAME={0xf, 0xb2, @name2}]}, 0x44}}, 0x0) sendmsg$DEVLINK_CMD_TRAP_GET(r0, &(0x7f0000000280)={&(0x7f0000000100)={0x10, 0x0, 0x0, 0x2}, 0xc, &(0x7f0000000240)={&(0x7f0000000480)={0x174, r2, 0x800, 0x70bd29, 0x25dfdbfe, {}, [{@nsim={{0xe}, {0xf, 0x2, {'netdevsim', 0x0}}}, {0x1c}}, {@nsim={{0xe}, {0xf, 0x2, {'netdevsim', 0x0}}}, {0x1c}}, {@nsim={{0xe}, {0xf, 0x2, {'netdevsim', 0x0}}}, {0x1c}}, {@nsim={{0xe}, {0xf, 0x2, {'netdevsim', 0x0}}}, {0x1c}}, {@pci={{0x8}, {0x11}}, {0x1c}}, {@pci={{0x8}, {0x11}}, {0x1c}}]}, 0x174}}, 0x8000040) syz_genetlink_get_family_id$batadv(&(0x7f0000000000), r0) bpf$BPF_MAP_GET_FD_BY_ID(0xe, &(0x7f0000000040)={0x0, 0x9, 0x20}, 0xc) setsockopt$netlink_NETLINK_ADD_MEMBERSHIP(r0, 0x10e, 0x1, 0x0, 0x0) r3 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000200), 0xffffffffffffffff) sendmsg$NL80211_CMD_UNEXPECTED_FRAME(r0, &(0x7f00000002c0)={0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x24000040}, 0x4044004) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f0000000340)={'wlan0\x00', 0x0}) sendmsg$NL80211_CMD_CANCEL_REMAIN_ON_CHANNEL(r0, &(0x7f0000000440)={0x0, 0x0, &(0x7f0000000400)={&(0x7f0000000380)={0x40, r3, 0x1, 0x70bd28, 0x25dfdbfd, {{}, {@val={0x8, 0x3, r4}, @void}}, [@NL80211_ATTR_COOKIE={0xc, 0x58, 0x2f}, @NL80211_ATTR_COOKIE={0xc, 0x58, 0x32}, @NL80211_ATTR_COOKIE={0xc, 0x58, 0x58}]}, 0x40}}, 0x0) r5 = socket$nl_route(0x10, 0x3, 0x0) r6 = socket$nl_generic(0x10, 0x3, 0x10) r7 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000d40), r6) ioctl$sock_SIOCGIFINDEX_80211(r6, 0x8933, &(0x7f0000000ec0)={'wlan0\x00', 0x0}) sendmsg$NL80211_CMD_SET_PMKSA(r6, &(0x7f0000000fc0)={0x0, 0x0, &(0x7f0000000f80)={&(0x7f0000000f00)={0x1c, r7, 0x1, 0x70bd29, 0x25dfdbfd, {{}, {@val={0x8, 0x3, r8}, @void}}}, 0x1c}, 0x1, 0x0, 0x0, 0x40800}, 0x8010) r9 = bpf$BPF_PROG_WITH_BTFID_LOAD(0x5, &(0x7f0000000180)=@bpf_lsm={0x6, 0x3, &(0x7f0000000040)=ANY=[@ANYRES8=r8], &(0x7f00000000c0)='syzkaller\x00', 0x0, 0x0, 0x0, 0x40f00}, 0x94) sendmsg$nl_route(r5, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000080)=@newlink={0x34, 0x10, 0x801, 0x41, 0x25dfdbfb, {0x0, 0x0, 0x0, 0x0, 0x2202e}, [@IFLA_XDP={0xc, 0x2b, 0x0, 0x1, [@IFLA_XDP_FD={0x8, 0x1, r9}]}, @IFLA_GROUP={0x8}]}, 0x34}, 0x1, 0x0, 0x0, 0x20048050}, 0x40014) 2m14.894819925s ago: executing program 0 (id=2843): r0 = openat$tun(0xffffffffffffff9c, &(0x7f00000004c0), 0x0, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000080)={'pimreg0\x00', 0x7c2}) (async) ioctl$TUNSETQUEUE(r0, 0x400454d9, &(0x7f00000000c0)={'macsec0\x00', 0x400}) (async) r1 = openat$tun(0xffffffffffffff9c, &(0x7f0000000180), 0x0, 0x0) ioctl$TUNSETIFF(r1, 0x400454ca, &(0x7f0000000080)={'pimreg0\x00', 0x7c2}) (async) r2 = socket$inet6_mptcp(0xa, 0x1, 0x106) setsockopt$inet6_int(r2, 0x29, 0x19, 0x0, 0x0) (async) setsockopt$inet6_tcp_int(r2, 0x6, 0x3, &(0x7f0000000040)=0x66, 0x4) ioctl$TUNSETQUEUE(r1, 0x400454d9, &(0x7f00000000c0)={'veth0_to_bridge\x00', 0x400}) (async) r3 = socket$inet_tcp(0x2, 0x1, 0x0) ioctl$sock_SIOCGIFINDEX(r3, 0x8933, &(0x7f0000000180)={'pimreg0\x00', 0x0}) r5 = bpf$PROG_LOAD(0x5, &(0x7f00000002c0)={0x6, 0x3, &(0x7f0000000440)=ANY=[@ANYBLOB="1800001c0001000000000000000000009500000000000000"], &(0x7f0000000080)='syzkaller\x00', 0x0, 0x0, 0x0, 0x40f00, 0x0, '\x00', 0x0, @xdp, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r6 = socket$nl_route(0x10, 0x3, 0x0) (async) r7 = socket$inet_udp(0x2, 0x2, 0x0) ioctl$sock_SIOCGIFINDEX(r7, 0x8933, &(0x7f0000000000)={'bridge_slave_1\x00', 0x0}) sendmmsg$inet(0xffffffffffffffff, &(0x7f0000005e00)=[{{0x0, 0x0, 0x0}}, {{0x0, 0x0, &(0x7f00000028c0)=[{&(0x7f00000027c0)="c4", 0x1}], 0x1}}], 0x2, 0x40095) (async) sendmsg$nl_route(r6, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000002780)=ANY=[@ANYBLOB="4c0000001000010025bd7000fddbdf2500000000", @ANYRES32=r8, @ANYBLOB="18080400430001002c0012801100010062726964676500006c6176650000000014000580060002"], 0x4c}, 0x1, 0x0, 0x0, 0x38f54add4fcfee77}, 0x4000000) (async) bpf$BPF_LINK_CREATE_XDP(0x1c, &(0x7f0000000000)={r5, r4, 0x25, 0x0, @void}, 0x10) 2m14.478783727s ago: executing program 0 (id=2849): r0 = syz_init_net_socket$ax25(0x3, 0x5, 0xce) r1 = socket$inet6_udplite(0xa, 0x2, 0x88) setsockopt$IP6T_SO_SET_REPLACE(r1, 0x29, 0x40, &(0x7f0000000980)=@security={'security\x00', 0xe, 0x4, 0x420, 0xffffffff, 0x278, 0x0, 0x118, 0xffffffff, 0xffffffff, 0x378, 0x378, 0x378, 0xffffffff, 0x4, 0x0, {[{{@uncond, 0x0, 0xd8, 0xa8, 0x0, {}, [@common=@frag={{0x30}, {[0x8, 0x1ff], 0x3, 0x10, 0x1}}]}, @common=@inet=@TCPOPTSTRIP={0x40, 'TCPOPTSTRIP\x00', 0x0, {[0xa067, 0x8, 0x80000001, 0x1ff, 0x0, 0x52, 0x0, 0x5]}}}, {{@uncond, 0x0, 0x118, 0x160, 0x0, {}, [@common=@icmp6={{0x28}, {0x11, "4dd4", 0x1}}, @common=@hbh={{0x48}, {0x6043, 0x2, 0x1, [0x2, 0x4, 0x4f, 0x0, 0x3, 0x5, 0x7ff, 0x1, 0x6, 0x401, 0x9, 0x7, 0x3ff, 0x3, 0x0, 0x800], 0x3}}]}, @common=@unspec=@IDLETIMER={0x48, 'IDLETIMER\x00', 0x0, {0x7, 'syz1\x00', {0xfffffffffffffffe}}}}, {{@uncond, 0x0, 0xa8, 0xd8}, @common=@inet=@SET2={0x30, 'SET\x00', 0x2, {{0x3, 0x4, 0x2}, {0x1, 0x4, 0x5}, 0x6f17, 0x1}}}], {{'\x00', 0x0, 0xa8, 0xd0}, {0x28}}}}, 0x60) ioctl$sock_SIOCINQ(r0, 0x541b, &(0x7f0000001780)) r2 = socket(0x10, 0x3, 0x0) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$sock_SIOCGIFINDEX(r3, 0x8933, &(0x7f0000000000)={'lo\x00', 0x0}) sendmsg$nl_route_sched(r2, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000780)={&(0x7f00000003c0)=@newqdisc={0x78, 0x24, 0xd0f, 0x0, 0x0, {0x60, 0x0, 0x0, r4, {}, {0xffff, 0xffff}}, [@qdisc_kind_options=@q_sfq={{0x8}, {0x4c, 0x2, {{0xca9, 0x0, 0x0, 0x0, 0xf407}, 0x0, 0x0, 0x0, 0xfffffffd, 0x0, 0x0, 0x0, 0x10, 0x6, 0x1ff, {0x0, 0x0, 0x0, 0x3}}}}]}, 0x78}}, 0x0) r5 = socket$can_j1939(0x1d, 0x2, 0x7) close(r5) 2m14.228972925s ago: executing program 0 (id=2854): r0 = socket$inet6(0xa, 0x3, 0x1) connect$inet6(r0, &(0x7f0000000000)={0xa, 0x4e22, 0x0, @dev={0xfe, 0x80, '\x00', 0x1}, 0x5}, 0x1c) (async) setsockopt$inet6_IPV6_HOPOPTS(r0, 0x29, 0x36, &(0x7f0000001440)=ANY=[], 0xc0) (async) bpf$PROG_LOAD(0x5, &(0x7f00000017c0)={0x1a, 0xe, &(0x7f0000000200)=ANY=[@ANYBLOB="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"], &(0x7f00000001c0)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0x8, 0x10, &(0x7f0000000000)={0x0, 0x7ffffffd, 0x400}, 0x10}, 0x94) sendmmsg$inet6(r0, &(0x7f0000003cc0)=[{{0x0, 0x0, &(0x7f0000003980), 0x171}}], 0x40000000000018e, 0x4000000) (async) setsockopt$inet6_IPV6_RTHDR(r0, 0x29, 0x39, 0x0, 0x0) 2m14.106839562s ago: executing program 0 (id=2856): r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$devlink(&(0x7f0000000180), r0) sendmsg$DEVLINK_CMD_TRAP_POLICER_SET(r0, &(0x7f0000000200)={&(0x7f0000000140)={0x10, 0x0, 0x0, 0x400000}, 0xc, &(0x7f00000001c0)={&(0x7f0000000480)={0x1c0, r1, 0xe, 0x70bd2c, 0x25dfdbfc, {}, [{@pci={{0x8}, {0x11}}, {0x8}, {0xc, 0x8f, 0x3440}, {0xc, 0x90, 0x1}}, {@pci={{0x8}, {0x11}}, {0x8, 0x8e, 0x1}, {0xc, 0x8f, 0xfffffffffffffffb}, {0xc}}, {@pci={{0x8}, {0x11}}, {0x8, 0x8e, 0x2}, {0xc}, {0xc}}, {@pci={{0x8}, {0x11}}, {0x8, 0x8e, 0x3}, {0xc, 0x8f, 0x9}, {0xc, 0x90, 0xb}}, {@nsim={{0xe}, {0xf, 0x2, {'netdevsim', 0x0}}}, {0x8}, {0xc, 0x8f, 0x9}, {0xc, 0x90, 0x1000}}, {@nsim={{0xe}, {0xf, 0x2, {'netdevsim', 0x0}}}, {0x8}, {0xc, 0x8f, 0x2}, {0xc, 0x90, 0x1ff}}, {@pci={{0x8}, {0x11}}, {0x8}, {0xc, 0x8f, 0x1}, {0xc, 0x90, 0x4}}]}, 0x1c0}, 0x1, 0x0, 0x0, 0x20044000}, 0x40) r2 = bpf$MAP_CREATE(0x0, &(0x7f0000000300)=@base={0x1, 0x9, 0x10001, 0x9, 0x1}, 0x50) sendmmsg(r0, &(0x7f0000004400)=[{{&(0x7f0000000240)=@in6={0xa, 0x4e23, 0x5, @dev={0xfe, 0x80, '\x00', 0x38}, 0x2}, 0x80, &(0x7f00000002c0)=[{&(0x7f0000000640)="56783dae1373e35833f3f1f78bd538264507a1ded2d4fb271963bdd5577f6dedb9310ce8eadf8d7e895334b1dabfcd1294d76588ead182199b37f358173e27e1646368ef6f8f7e4d21a392cbbe6ab55df67f17bbfa279c531ef1eca640b5e58680971453646381f3394650c44e7127ca79adfbb5d73e3e119a0527ac1e399e5686f1bfe322ee9ee18c8b9c58cf74cb5df5e2e785e4c45d2a52d875304382a662a6819efed96f6925fb1a3fd693ecef9fb437cb1f01fffce587124e95ec1ee3797573efde318e152da4d9925bf8e45c1354f52ee5dcfc3f171a8d9bd8", 0xdc}, {&(0x7f0000000380)="7c4d5a7e806f5bd752309c41953b29cd61caf98792523b622ef204e0de7c5a40a2644568f42aa129c8947c60dd55a007b437d993382a0579d4d47affdaff3bff21e524ce0031e19f51d210fbc55edf46ca752072388071dcfa554ce7b3dc7514094e4b55975a68cedf", 0x69}, {&(0x7f0000000780)="f940bb9f20c69617302854389f5e2908e42b628baecbdc2e1439d0c22270e657f12a14c575951c5d995b2c3bf217cfaddd0f35e1804989a70e71264a263d0eb703358b26a40e30d7610a3f9097e2eb923ae66fe2e22ea55f6fbd", 0x5a}, {&(0x7f0000000800)="7f830cd6e1924dd59b346fb4dd6ac744292c33f62b2630801e639325a772e26ed8100bc81f3de32dc367605619d8bc36f18a343872025ed6e6bd599fda108beae9fdf913720226a73a13e17bb9ed505229dbbd3e35a06b14b7ba45a028be84e8a8d6c91dc0d9e9e6ab0b70d2c24e4a4409b36eb8fca114203caca252eaf92a7e1828c695efb3b053d86a27f8b9e099b29c2e4981eb6466d7dfbe1f541e27a2cff869f065d43a4ec063edcb7eb900df590ca6682dbf6a97f69803442ba30bad6c93502094b96488d0b66cbb", 0xcb}], 0x4, &(0x7f0000000900)=[{0x90, 0x10d, 0x3, "a7a1044778e9aac4464b81879cdd487558af1291dff340e55e3067ce415c6c8a07762047f0888db23a75b750a59bccd9614660599659541abd6b2a4c8bc718cd6daf88d4185e5e018a7af0826853f1a92d1a196a63e6837d73ffbd2901bd94691e824a8245b7ba48c28ee203ad3e6053b8ce423d63373bdec35f2e3d961865"}], 0x90}}, {{&(0x7f0000000a00)=@phonet={0x23, 0x9, 0xfa}, 0x80, &(0x7f0000000c00)=[{&(0x7f0000000b00)="0cfaf66bb53ca3535f5a9beaa260d87bee1d9b0f669c58b469166a927f4f2a11450cb400889b592ffeae57eb96549033c94fdec484aab8c630d06650718f815594d4d8486dc014ddb205cbe2f620e2c973d66d84becdc71ecfcf2b3c6f301ddf82e7922a20cfb9856df5846dede28786caec80f41a8eb762779f19d984b954e300112eff5dfdb1e697c0ad476cfaaed30371b82aa789e17c32211fa6489b2828ebdc4359", 0xa4}, {&(0x7f0000000bc0)="4a97b68f5a9a2a597cc501145c5561503dade9ca49e400545175d0375700b749d33a33d5288a91ae0dc18c2b03f2b527", 0x30}], 0x2}}, {{&(0x7f0000000c40)=@l2tp6={0xa, 0x0, 0xba4, @initdev={0xfe, 0x88, '\x00', 0x1, 0x0}, 0x8001, 0x1}, 0x80, &(0x7f0000000e00)=[{&(0x7f0000000cc0)="b1673c79a15fdd775aa45e82dfa882b882937c1c05be8af31fd016c7baf2047a1c0e6d7851", 0x25}, {&(0x7f0000000d00)="fb2f9b266f096c90db15fa4206c8728bc1006a1190d3a484a4e35ca40c1cf92415cd7deb150679301469fd6b9df60846aafb88be769ea5446a27d2274425805fe2e85a7c727e26695a9bf8aaad2819d3800d5ed81c7d26cd7b3a23f83502df7ff48e4135bf6ef8ab5c", 0x69}, {&(0x7f0000000d80)="0293d4984b714a848c2c006dd907e0a9d9e5e91121d81536664a4a544995bc3bfdd713473a010104729043ce213501f3bdc3ceed62d0e44fee12c1ceab1998c151bff4dd00bf2bea4567087ed2936bf1f3fa444f21b26919ba3cd4de4f888a12eba46d643e6982d55972", 0x6a}], 0x3, &(0x7f0000001300)=[{0xa0, 0x102, 0x7, "6ca64d84b3f1b66a23c7306804d2789b4a0c683cff077bda2ebf488788ef99123c37bb3564d1fb5b5480c0c94ee76968ad6da4cbb9d85970435e8bf08d2942234bbdc796f150c5575c471e64351901c55ca69fd42163f3d65332ac99095624a918fe7dc059446d36abc2d9144bfec50ef2ce507a9fa7acaa35c372037ebbb6c3b2d1b701448901bcb9"}, {0x90, 0x10b, 0x0, "01f1f8b4b26f53e975fe771667824ce3364dde4d2d97b3b030f1a74072d67a6734cb7c4f661da7cccca8f685715f72cb55eb2182e8d851854fda70fe2873cc16b1ac2ac6c1afbca6c49780d931b161b652d504231b9a8326cb54d489c003d8fc073b64cd6bce579eafd6201230f39c2ed6587bd481e17d1213"}, {0x1010, 0x111, 0xee37, "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"}, {0xe0, 0x113, 0x3, "00b0b5008dbe7d1452acd4cc5234bf9818a2db91884a69925dcda309c18b4753cd6b457e5a45c5fcee732c0cee3050cd9f38e8af8c61a5fc1dab75d5b0cdebbd09fbc1fdb15777c4b533c5d44d05d80f2587b5548503674af05eeccfa2d44402242e04d7e9cba36a701a4897d65707f8cd308f238572f89cecc28e9d340da9c8f10539fc1ea1b7e6738db2f5a102c2fb47cc6003837c701b74d9a4a9d466ccbfbe117ecbc54c994f455d21710b994e9d282e5801ded208d39f5e5cfb1a6aa3b7be338f8c715ba64e0ef11e"}, {0x78, 0x119, 0x5, "20a8e9fe1698cf0e9cb5010886d08b1b4f6af35c94748febf99cd706bb71bbe4c66e25f4433832f10fa955257c2c3197b2d182bc72ffb906eb5ce3ae46f9733024e369a3db97912688c3882d76d95c5f85ab576516bd143219a9dc1332ae5ee008e046507468"}, {0x108, 0x113, 0x6, "830b12e13ca7e8b3a35f815e30b758167ac67eff7801968b720bc87c8d9e9a490b827d9d929f552c1e743042d7e2f647d91db0d238c174690e6a8571da893271f6dcecf738f371fae8018fbd1990789091b9ceb6cfa02b53c2f635f65d0a24232dd98b6145b442d54716904c23322acbd6cf3932edcfa44f283f2f8ecfe4f674182f3262047c95be4a517ba601f7a0b415c22d1e53d66f1e12c9130db9751c84e8dc53d6deb36cc87f048fe4762190233fe40d8443eff50b26cbbcf1b6b28a1946c8197f2880dd0ced096fc3c4d316b69ffd741cf80c4808024d56566bfb9be32a4ee417ea585c15518aa8b5d487338c35689a73cf"}, {0x98, 0x111, 0xc, "84106635ac66cf50b590af478ad36aa726d024bb6fd242ae6e5f3214314416938e182bd44454ca4b0b236a571f26e4b29ddf4a409c60e17371429b87563c3c0dd50c23ff44b0a5b9dc0abd5989159417f2fa976c0da43ee5a50a8b7f1741cf08566f027ca3ee302cd11cbcabb18f278a78cae94e1556161a4a3abe51fa1cf56e4040547b84a6fb57"}], 0x1438}}, {{&(0x7f0000000e40)=@nl=@unspec, 0x80, &(0x7f0000002740)=[{&(0x7f0000000ec0)="1cf4f1a1b0a267124281e0fe16416bfb36bbd1487871e00d10df6ebcf999f403502d7b8888d2943fc3a16242e6ddbd8e296ba6b5fa8e5ac4f4ea49b8905d22196877db239a48afa5c8a2535044725ced0c663bd763d86c9941b05a1762bc8c134dfaafba67f8ca52922f855fa383f628c52ee85f2bdffea38c9e0079ab8597ad78549f679d7679a5da0cdb7921863c2ae243247575bd9f911da62b886168fafd31f4c3656bdd8ed4389944b37eac8f0a03f50755cf", 0xb5}, {&(0x7f0000000f80)="857449e536451c5426808c1c4e09b7668a6cba3e7f99a029d4363e55c1489e66043a42d72ebc968756e703122f603cf44da95a46fb9baa07155d88a341748a4a8c12a14842f5131f137816efeeb566dc", 0x50}, {&(0x7f0000001000)="5064604459ac54e8629b99a4f7d05c12588ea8fb3ab1055bfc9c3a6815046de992e027737f6596e1bd5dcfe9248ce6d48c0dbdadf7c1173a4a0423ce8952c3cf3f2ca88d547b6df370e2e59a2b4bca9af30459348a0c5f3daaf675a280a7fa26779b4a98e0ea2bad1c82e7fd5a3708501683e26704ad081edd6a52abbb9542508b93f24db02da1d47d738b80e9699fdff12fc084b047db4f6c7e780af5e888a2c76c8bb7de141c4d1f7abc6736890c217740b4142a7ed336edb89bff6ddf433b070ebec92dbb5b2cf3ec9ebe4716d1f68ea927bf704e8fa510976fb7fe99196c87edc24aafb22a2b58", 0xe9}, {&(0x7f0000001100)="5f5fa5c9812bad39895156f9e984b5e6cce51468dd844fca1f4313bcc694a891709aea70ffe47b523ef018628da1813fae824f74542897fe6a3c2ea9492dc80c84d2b01f79ba6a9f3d69b3ac37d4771a23e3dde1f0827bfeed4b3c9ce1465b44daea70b63aa79a5ea9496c", 0x6b}, {&(0x7f0000001180)="49f7dcad2cc8b03470546a45dda8b51bd683b2", 0x13}, {&(0x7f00000011c0)="1f10904ee90d66b336ef1627c1fb9a4a37f44171916f54bd196cc5169fa6defae1e8b50bb62709c56fc62330488bbcf024648cad911782b3b345ea114ba542a00483f89f04d8c4d6b518450ffa660f6cc4fa36dcda59663262ccb73f8c0bdfbde78ca56c42815ac2ca6965449954f14a1715e551a2b373051bce3701d4a4c4a2cdefe7bf7ca3758f97366b4fa3f9a359482dbbb83c7f59acc9630f056b402efa9e22a1a3f0a0d02f0bcf4c0f1bdd5529ef9884a427742e", 0xb7}], 0x6, &(0x7f00000027c0)=[{0x1010, 0x10a, 0x7, "54514040d9aa69bd5a2e2df61a156472b59af256edac5ec1a636852623e5959b1265612b8a97ac38d5c1d3c01a9aecf30afe32cfaa3eb741c739bf84575930aa0670a1da45ef84ec871f49a897478310b380ee241105d83bb3a8cf2757f5a13832a9aa9fc23c3a4f6963761e278a760a87231b7aa754604f7c1225aff57d9917baf1542ca928e76ab846cbba3b4e1cd98a2f86e0599c159f4603b625f0a6623a8ae278449db47772d4ce5c6b50d9da559ae355d73655ea4ead3834e37ad89996987d03e08393d92ce95d468b0e59a7c6d499f1940a539ea2d9b01a1b9afc42e63610b5466465637ce4af7c36085deccf5f4ccdc31baa8d9325edd4e4d31657f4f3b71a3f05948d3e815e554c14645a6dd07e7d981d5415c91d00f7ae22c84eeec40b94dcdba2922aa7ba9e62ab73b0b5de252227c033281cd2c031d2a495ed2ae32361c0702c7d66c317ad13adee579ae7351aeb080efc08bf373ec36202e6c179662c26f8891ffc1f9189c0a9d3f38f846e458be51e801539d919b0c6c1e81f54f432c08ef14c3cfca8dad6e465d2035c989a094880ac9acacdfdebcbcc9d05e6f0e3bccf70c3d69be04dee1a3117f4aadea091b162cb1718b3c93d5306e5907ca3a9c49d5a8532da6928584706852bae1b31b6266ea524d22cfd4b0f07f8ab9e996fa6ac4f639808e81ddf16d0d81c3f9d4217121ca5ef88c46c63c3adc92e50b90e972d81ee27e81637ebf9b868f9a866bc350d3c9561e24500233cfc24d711450e14ce88a4b9c3c1593fdcdd808a6d1db75e3feba7fe6bd6b43d854d17a155af552df60c4244fa27ea206b283a149f12918596b014c150883d50246b0cacec2775f39571cc5637ec2e59d8c7749c5b6cbd19d2564bc632a4b7ada63f6e06f4e599d022925656d60c99344ab2b5f31e86c3dcfe46321476bc2d312f1410d974fd72dff9cc6d34b9147595324fdc5086d514f4c2a8ab777e6a08a5e3bb6a4a9d547d62ceecb1347a8fd2f1c7ca106cb3981e5119fea9014400181ed6e11e401c0247dadf0ed95d6b9ee639992be083db257ac943c2efa99bbf0e0e86790b63ffb7e2e0cc8a8e7abee52fbd3d9e026412a69145ec17d09b601df9b1c4934f0177ac4640c9e6697fbf29d10e7ce3c2f97003da19686c2a7e6addddf33c1fc3b79b23631cc3a3688cade70cbc9a711c76ed227370d784a06731ce0cbd37c21d2ecbb952971923ee951fa5d451b57fd9dc2b6abf9248ab3be9562f9a502226b539a7f04899bc6581f281d007622156f44d2b160d5a034bae291707df3eca37dd98167f4734097bacf62b23d0da1f87aef70e8ee87aedf5d52c6bf8d7d898191056b7b2fc0c7ee2a4ca08082bb179d74aeeb8e3e063804f01ea0d943f99b2afe96460e558ac42663ba6a91ed7fc83a9e47ad8b60c905b8ca8a32b698ab1053631c673bfe1493907998a8ae9ad283f9e6eb6419f49934297a2a72d872283c4222e7e07bb6b2f9f724aaa05897541b849befd1ca8636dae6e0b3cabbc74e015758f6092e0aa8769cb05326687bdf3c4153c0355dd3a76386893f0501a4bd06964a06c30fcbaa0f2c6ab887e69ba05769fbcc69588ef60d4af85d1db1fc9114dd956eb22397e8e1aed64feabb06e762ea2b123565f4e88846364ecc8350e8caf38f849fd814404664690a85101284b66044c7caba804dde41e3dfc7f6874f4462c339b1e83827eecb94c0d189a52b0a00db66cc274cccf63c9a8d66fbfb5d1f1e8dd3fd452b403f5d7a6d7f7a7c8894c68a308eb24c256f2757ab162d7500610948259784a95055dc8c061b8a1ffbc00e287b79c87b3a4f2e47e18f5928f91e4aae80c0abf011880f4cb1d360079ea4dd48fe217260c842d49748eab1ea74c22d689da006483427b87cc77da91f60e0cf5f86a860ca9ed495875a0f17595436dd0783bbb38be0600c7e351d580d8896e6cc8b213c142a7b8c2620ba5781b7e98c5a13372dcc8b8473e2e44faac2e46f410d3c6eefc53e7fb446bcfdc88a4ab96f25a4c46b97c112becf011d4d5f2a8fecbafe66c70f21c8906adc2765dbf5f0e84331735fe401e01d3b35ca254ba29731f085e05de16cb2928a3a23cb3eb74d755465d5c0a0e8834e4bb29a77621d628e5360956e1acb74fa400bddfd7e593c12901b9873258ccd29f6ca5d533b1708dbf8c91e861c583fb32f42b5a8f7a97d611383e6a9894318696af8620214408682f98a0efeb23826881dfd9b176992c9a3739f0c86fd24fea68ef1ead821b2af5075162910cf5dece232bf7e06443fc443ebc6c296856e2f5e3e3008a9f9dd5e1db86badb05cc009ea36f11d9f8039cac9debd06e7ef0e119036d67941bb9d4c757c3bddcd5497727537ad9016e8d43bb837165a69884bcb30077d257997c68c0d2f6b02a8030b57abedd412c20a55c0d9f38dfe32611e4e2358f2c2b316235ffca4ac8a0245e15ce86a48f7c6c650802c90b2b98846d30b88e274e53ab2a191788789cbdaa9292ec98d1835fb503d10f202f338a9be612fddf4d51bf08234c970da5ac628b103dea0f9ceb0e4927f79cc15aab156adfb23d473f0dc6ac401aa48c7dfab33667f7fa2e6d1e45d6f235f0466f6cf2a3ee18590e59d7807a00e5943d3f25148bc6c5c4651952f5fe892cbf7861caad261252a78f85e399df2143deccf658f4dd0c49c773fbd99319308280c9e79179dd1d4cf469c0a61152e351703b8002f67b021e2b8d9119863b67dcab5132c3225f18c4fef3ca556bf77c9939b4edf7725086ce1528a16847eddde939380db1e8e887307d5d10b3c104aa13c8d6514ba025cdcaa7454035a446affbfba0febda469dda553fccb9e3cabb25918d690f928eb6b6875245d03d6f756c00c71d5bf563abcbe7fdcaaa658525e019dbe079ba37cb76f19aba1c4af7e6831d0cb25dbaba2aa11119e6c3f40c8729b17a51f5f892b3509dae0e97bc0b120176febead904c1be9cdcb658159567ad1a1b2650c54e9f5b3dbc5acb39ae650dc10f95f7c6576d579865300aef85a66e16eb4b09492c72aa0d859cbbdf731377f854160a60f0880f93df77f91cfad82199b1186ad77c9c5f85cdd442711cab7e7d88aa2b4872c9caed871aac3f9ba1665ce4fdb4c3cf173ee7e72aebabbaaef4c1d7f520175fc9337bb1f8292b07e4c2bec5c0f2e8b7b4e925d3ec6fe9acc5a056b0b3a6c0ca9106e7cd15add5505e1b7653be5eda92ede005f9ced6cc0dc9ef6ddd893c3792aca71e69ecf6b49d536016920221ff4086ef367d5d1dd6c7fdaf6ca0d59eeac2b4619aa4a8d8ccf512b467fb1b93c6ff09b87898b52de9aba5d1756523d1b7e3f75cee97022f3c26eaca37a0e887a8839754ab35ae3ab8cb9839bd3b4a5ada6034b2591d09ac8b41d2b2a5cfb441595267aa41a8011c1938ad9e0bd746f61eb30b25e754c4a9818cb42d1b85d111bd9757800ac24d963ff3ed0d12df20855d7a6bb5b99426abc2ec1c9112bac8cf3fd4388f8f52a16da13d24cd26d445c761eae169e6766c0e848adbf2d28dce4e14f46c12faefadd2bc4538664288ac516cc6d400de8f9493803c8f16119130b69d3bcdb031755e2e3311b83ac6c88581803aaab1dff9c32342c48a632822cb80ae87197abc470b543da17a3c994e9fb30ae8c7b76c948d11dfdb71117742f2213f0f907e09dfe5de7c13a40eaf08fad8382fddaf0b75635469945dffe94bf51cf9a24f5fd112f40506347daad6a975a7dee23f55d387df54920a2a9ad67c42e6fd5718a4cb05bece5b09a9038270f58fedfcfd79bbe014415ce2ab48b6b1f7a5804ae91500c83e406a32adcb9d0770aa167f55f45cc01a622ba7a10728392fe6d3fcd6a97213605f5a28fadea0a7b28e27ad2bd1f4bf5d90f348ac3bb872de8ef3d494eeef82314c819702d446e9982e3e9c04fff271e9c9cd9466d1185bf283ce08255acdb2d106b02cbb0c9fbbbd79286606ba374c219ec9d478141fc37c49519878929909e46eddf0b84c3b1e42e2e078ba952bb570375c226439015940886bbed1ed8b590377bda47bc7c22be9b3ebd116774b1e8cbb2edb2e1b616d66d46b260fe3a8d94c30623383cbdc72882cafa54a6ec9bd09a9a35994933cd9cb75e865d276d331a5b61b90b9963bac1a2ca8b2b9b24874dd8bc36dbd10ff9e04bb8ff6b47511710efded01b321add983ae8977a6d8ac02f87b6754fde46c868e182eaed301290afad32dc3e15e4273930a4608ae2fc67cc0eba12cda9fae55e90be18e576d79f6db77c9a0e7b813ff68fd42fff97c43b32cb3d835c51d5918fb56c5961d0ec13f0828bdbaa279b038e04ffe39bedfeef45d94f2cdbdcec7678bfd4d61f6950dd8bac3dbeea19fe9648ade3332025f08061769f9b9e38bd9096c56d74c8bb584d8882d7c9489a7c1aeabac4e3fbeaf7c1fed84b34cba8c59f3e286eeb88148ecaa4cbfcce616f5e4e7efe70e16d8eedc6cfd8ef4ec96aceea8f337b4c82006b5d412474b1e962de1dc8dd55eaf1d3f0a604284918ca231d92ece593c3831c2922e525a9f677b6c18f9763cea6da6c0eb75c577914b019c6da3f67c51d9d778eba108feafe4ffd48ee22e6dfb6d04a788085f8ddd575eb7da855990625fad7a34844a1bf44a2f5d10a4e4d608de08134d8e38385974e99e6a0aa5e9472c14fa4581f496e685016225cac311d51b8a7acfdba133d05ec2cbb2e01eb44bd5e230f34e54b7bdecab5e7679f6b2aa7932eb546b69ad0b882a5a11c7f27eb2c821f1e13a529901fb8e29757237abf3dc4b7d276da255c2e366a102b33279b5749a8c624e269db06f595948166c0aedf473b9940d48169445fb35b86030408087a871f8c1dada7fad38d1ca308ad3af6f5d4bbc260b6f69af5797872265f8932f9da8990ed800280d54645dc2e1b92a52b07ce01fe98135ce82ddda7fcde263fa504e9a37a528ab1516dd0ff5d0a6229b47a135f44aab5843783cad595716d3cde3d7d82dbf7b1e97ee9964f4b202431b12f6ef12100d89b25b2efb155f74cdbd5319845b8c25390d969778edb92e61ee04c0fc3dfd5ceae36a6ee8b3e2f1bfa81cb385caaecff7b1bc043e45ea65bdfa04a9acb339f5e4978c5ab35f85d74102e7ace130e2324ef3403d597ac5347dab4465a50ded2bcfc619e84270c8fd4111ea0cbd2f965f10645c17dae30331b373548981bfe3186a6e3d21c1d414ba6be48a80914fd0240536e4e599433e637382e6b077102bd494623812da3687621f3a24e22444548804f256184633cfb43852df1ac886938b4ce39aad584049d072ac9a9c272ddfb6684cc366c4c966dcf83be82dbb97c6991441c10585022c856f42a2fd75483b95c9ee7159183a2fb5c5f00cee371bb25108c0c9c7c7324eee3b74dda424416cb074051f742772524ae2737e3f8e4ad31e703aaa033b6f690b083966f062043cac41eab8f8501621dd5fc34fa5bce4588c265569968a98d64dc56b74392ef6cf2e4013f59dfe98368eb54a15353a1a683ba73891ab48fe630c6092a589e79aa3d3b1d1283eb206829d19cc8bbae85e6266bdd22f0ff7f8984e0695a447d7d677a00516cdb39bb787be339ecfdeecfafcdcac2f90f5ac8cc2f12b9474c8ebcaa92ccf228cad8412e27b3e6bb84b4fc79a166b6a9459cc78ac8429d2df4169ee2444fba63de2c4c54a37c5e6652faa6f4473fb63817cc7f509e664a0ace1ef957245474d138b3510d6dcf4cc8d5e2481b7a5452186f97c7e33c3e56399a5fd0f1bda5f5c25278aa8ec7841"}, {0x108, 0x10e, 0xf, "f554b54532c2187633727f338718b9f90b158ca64fda9ce5acb094f0b9266652a72cf4aa439b28d37c5f762414eece8b3c9b1968d761634c3e0358e19b42f1b25e0d044c09639a91c63fa2493dcf0998022dc5fb6552a2c7e4f78eb71b3f11f294f8414536801084972d59187ad76e54e25e55490b3f50fb11cc5b3892718113208ec9c11a4ab10fce2d4bcfed6cea6f71c0409c70fa1ad5d9f579f3e90acf1e4d10248c2978757be626aa7ac8816e3dcfa95ff87d5b60014c078eb338c7feb7d87fb61b4f66f67e7b9449a9e0481bc006597c694a5124f11a6a07a87f60eec2bd73f61719afb2a27809bc989c3acc2c4b326b"}, {0x90, 0x113, 0x10000, "67d4795f24dc8818eca3c42bef425ea7c35ad14cf02d607eb03dcd87c1f58c9ebc269184ce484d50e521427a8262133ea1825df2e4b731d24485ce6737eddbb600d92bd68d467c86a5b8ee785e010f6a6304a9ef78ca48f2e564e5afddf3410b79020d35fe6255b5a70391387870148f271372570595db3df5dc2454af82"}, {0x50, 0x116, 0x8, "0c6f2e2f70194aaf4413d64f85cb780ad4836198b5e8d37e21d242f9e1b479ada64a1c27bcd5a0ea29f018e460d4dd4ce47caad77966d51eb0f59cc5333679ed"}, {0x68, 0x101, 0xfffffffa, "40793ad6f5a783f78511de133cee9b473a29352de500a539b261cf65fe793c8f75262cf50745d9d05b3df507e6504fd5960efbdcce43b10b3e45890b33883016c08f71bf269dcd4135ed9d0f4f14228314d5d481c2af9202"}], 0x1260}}, {{&(0x7f0000003a40)=@un=@file={0x0, './file0\x00'}, 0x80, &(0x7f0000003d40)=[{&(0x7f0000003ac0)="43567d5c2fe25f602dc45d15665fed526dc27e044094695b6d7041fb035fb8baee223be2bf2557e41836f6ac3b178e8eb385d8ff3a61589781f29ed6673754081d9ba0beaf", 0x45}, {&(0x7f0000003b40)="48689e509c9ea14498fa222191ab4a2321a8b11fe1cf274efb4d7671e14c0a1a5311536a30b716987a8725e5c1c5ab0864c28a2d1a51cee1305f712868f80237655f54182b5cc52b67bb34edc04502d4259f17", 0x53}, {&(0x7f0000003bc0)="440758ce9f9c3d211ec6282ee624466768c394f50bf8e816e4143a2334044b3210c9c6dcd945e0e5a0e70a3da89a33d6ef39c8d99955093358de88cfd6fa93a6c368278dac808aaf1c7abfa0d88c802cf64aab803ec1006a7e292b9435c2437f2388199f000e49eadb595e24d6d588daef3f5b09d4df88c07ec71e26cedb7c3ad84c77", 0x83}, {&(0x7f0000003c80)="f0e359944aafcee8bf5d3105aa1c82b992fcf3dfa50dc3956961a8135cfcd228e45ca4d21ae405dd77e99547edd4cc73023487bd8a3644545176ca78d2de77a8c6499ac38123b81b83e67916c7c59669564531baf846535ee333c44c97ddddda8cc456e480d4d719552ec426e7c63bae1e451c57e7e770b51f568ce8ec2400a2348b850f4453ce871b4833881a2f1e2467b62cf24989c6", 0x97}], 0x4, &(0x7f0000003d80)=[{0x68, 0x1, 0x800, "4af1daeb1c3ab9dec03a1abd318564b414210108f59f2e659ecd8c8220658408ba39afd13e77bc12bbff7205085df3f977ce3403247b5c89937bb09bb1b85360c11bc3e8b9d5eae904ff888679517f8a1add1b61ab4b"}, {0x30, 0x111, 0x6, "039c1f2e45169101557f1f21f91924bc6ef4858c9f67f2472bd2"}, {0x110, 0x10f, 0x0, "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"}, {0x40, 0x102, 0x2, "3c4cdfab9cea3cd20568857dcd65c8ed2fd6db805145fac86f898a8ae2714ab8bbd529b4db4fc4c8e58c8a40"}, {0x30, 0x107, 0xda3, "ac414a84bcbc3b52828ecf58b4835cef1e851e75a498c174e0"}], 0x218}}, {{&(0x7f0000003fc0)=@in6={0xa, 0x4e23, 0x5, @private1}, 0x80, &(0x7f0000004240)=[{&(0x7f0000004040)="422fca7011f696cf595ff46dfaf845a22cc9c657fbd82b176f4a3eee954974093cebfc2503d99307ceb413d5d9256e4f73dc7f556eec970aaf1f815b0586eb989e9b9ad3232502f07df4c6648015af4d8415b952752bd71c275d9060552edf54200f4226793ff86a0e6c5e71fe49a216afd138a3492655a9a9c9d9c3e4329d0fee3b269ee5c4688159537f5f3cf4e437988fb331cb7df245f734d37badb9c7ee04330b5e05ffbbbe3d6f67d1655173a8285b0b6b23152a1bd507daf32c7b9051ea00cedeece3f62ba31c41d50607f593afe9ac25f7316ab8133492b08e8af1d18b4249e63ac85853", 0xe8}, {&(0x7f0000004140)="18e99343960d269bfc70976d57bf8e8fe68952e9b4a4b10ce7b08ec74c5574c0e511f53d81ef76f2e92b8c31373792619dc389a66fec1db7b9e6704aec8f41ba1a06d12ed1e2130ba7645583cae88f3c97bf419807b43362b762c2ad332e922ec7ec5305994056910c837a68991e54866763f18780cc88b1ad4ac74f897d38184d110887497c6ff9c58bbce7c5b7a797659a306697ae948a05e3c8ed8905042d2c23f6c2f455f3d73058a2b941189faf2d585d85b0682469d1ee001ab9fe689c54f83e4e77dae0bb706c52d36d3eef3396b6497ae12cb6", 0xd7}], 0x2, &(0x7f0000004280)=[{0x80, 0x117, 0x3, "ceace3752fc68d984659c3b43543914d6ae6f51318ad4202fb659bdccbd6d07c282d85b93f31ded1194fa006186a1f175e6c95c4e021f8e1a200da9e452712688001d0af951b528cd5faa8b9ab8b0271a6799dc645387382bc4e1ed8150c353f44d13b16d58ecf0b04e553dc7ab2"}, {0x30, 0x114, 0x2, "381ede30c92b50393d40e5e0e7a130ede6d4c73b48c90ac6a2031a49c1"}, {0x98, 0x101, 0xfffffff4, "75debed4bb27ae968612c3357894fc9f1fc3b67aca7d708b097fda742de9f8f27ad29ca8865f33b30e8f6190efc7fa555a923636de03304208aa09c52176dffdc51d42168fc9f283d7936f861c0634b064bde1d99c6132e058602ab3645acd570e80c98e68bd02b3ab2af382946d92a7ddb120e117a696b7996ddc21009bb173065ea476d5"}], 0x148}}], 0x6, 0x48000) r3 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r3, &(0x7f0000000440)={0x0, 0x0, &(0x7f0000000400)={&(0x7f0000000300)=@RTM_DELMDB={0x38, 0x55, 0x701, 0x0, 0x0, {}, [@MDBA_SET_ENTRY={0x20, 0x1, {0x0, 0x0, 0x3, 0x0, {@ip4=@empty}}}]}, 0x38}}, 0x0) bpf$MAP_GET_NEXT_KEY(0x2, &(0x7f0000000740)={r2, &(0x7f00000003c0), &(0x7f00000000c0)=""/109}, 0x20) bpf$MAP_UPDATE_ELEM(0x2, &(0x7f0000000ac0)={r2, &(0x7f0000000980), &(0x7f00000009c0)=@tcp6, 0x1}, 0x20) r4 = syz_genetlink_get_family_id$tipc2(&(0x7f0000000a80), 0xffffffffffffffff) sendmsg$TIPC_NL_PEER_REMOVE(r0, &(0x7f00000012c0)={0x0, 0x0, &(0x7f0000001280)={&(0x7f0000000000)={0x90, r4, 0x1, 0x0, 0x0, {}, [@TIPC_NLA_LINK={0x7c, 0x4, 0x0, 0x1, [@TIPC_NLA_LINK_NAME={0x9, 0x1, 'syz1\x00'}, @TIPC_NLA_LINK_NAME={0x9, 0x1, 'syz1\x00'}, @TIPC_NLA_LINK_PROP={0x54, 0x7, 0x0, 0x1, [@TIPC_NLA_PROP_MTU={0x8, 0x4, 0x3}, @TIPC_NLA_PROP_WIN={0x8}, @TIPC_NLA_PROP_MTU={0x8, 0x4, 0x7}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0xc}, @TIPC_NLA_PROP_MTU={0x8, 0x4, 0x1}, @TIPC_NLA_PROP_MTU={0x8}, @TIPC_NLA_PROP_WIN={0x8, 0x3, 0x8000}, @TIPC_NLA_PROP_MTU={0x8, 0x4, 0x8}, @TIPC_NLA_PROP_TOL={0x8, 0x2, 0x2}, @TIPC_NLA_PROP_MTU={0x8, 0x4, 0x4}]}, @TIPC_NLA_LINK_NAME={0x9, 0x1, 'syz0\x00'}]}]}, 0x90}}, 0x0) socket$nl_xfrm(0x10, 0x3, 0x6) 2m13.857397281s ago: executing program 0 (id=2861): unshare(0x6a040000) (async) r0 = socket$inet6_udp(0xa, 0x2, 0x0) ioctl$ifreq_SIOCGIFINDEX_batadv_mesh(r0, 0x8933, &(0x7f0000000040)={'batadv0\x00', 0x0}) sendmmsg$inet6(r0, &(0x7f00000004c0)=[{{&(0x7f0000000000)={0xa, 0x4e23, 0x0, @ipv4={'\x00', '\xff\xff', @multicast1}}, 0x1c, 0x0, 0x0, &(0x7f00000000c0)=ANY=[@ANYBLOB="2400000000000000290000003200000000000000000000000000ffffac1414aa", @ANYRES32=r1, @ANYBLOB="0000000028000000000000002993"], 0x50}}], 0x1, 0x0) (async) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x3, 0x8031, 0xffffffffffffffff, 0x0) r2 = socket$kcm(0x2, 0x3, 0x2) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000001900)={0x6, 0x4, &(0x7f0000001500)=@framed={{}, [@call={0x85, 0x0, 0x0, 0x6e}]}, &(0x7f0000001600)='syzkaller\x00'}, 0x90) (async) ioctl$SIOCSIFHWADDR(r2, 0x8914, &(0x7f0000000040)={'lo\x00', @broadcast}) 1m58.827196313s ago: executing program 33 (id=2861): unshare(0x6a040000) (async) r0 = socket$inet6_udp(0xa, 0x2, 0x0) ioctl$ifreq_SIOCGIFINDEX_batadv_mesh(r0, 0x8933, &(0x7f0000000040)={'batadv0\x00', 0x0}) sendmmsg$inet6(r0, &(0x7f00000004c0)=[{{&(0x7f0000000000)={0xa, 0x4e23, 0x0, @ipv4={'\x00', '\xff\xff', @multicast1}}, 0x1c, 0x0, 0x0, &(0x7f00000000c0)=ANY=[@ANYBLOB="2400000000000000290000003200000000000000000000000000ffffac1414aa", @ANYRES32=r1, @ANYBLOB="0000000028000000000000002993"], 0x50}}], 0x1, 0x0) (async) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x3, 0x8031, 0xffffffffffffffff, 0x0) r2 = socket$kcm(0x2, 0x3, 0x2) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000001900)={0x6, 0x4, &(0x7f0000001500)=@framed={{}, [@call={0x85, 0x0, 0x0, 0x6e}]}, &(0x7f0000001600)='syzkaller\x00'}, 0x90) (async) ioctl$SIOCSIFHWADDR(r2, 0x8914, &(0x7f0000000040)={'lo\x00', @broadcast}) 1.922569694s ago: executing program 3 (id=4678): r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_xfrm(0xffffffffffffffff, &(0x7f0000000380)={0x0, 0x0, &(0x7f0000000340)={&(0x7f0000000080)=@migrate={0x50, 0x21, 0x1, 0x0, 0x0, {{@in6=@private2, @in6=@private2, 0x0, 0x0, 0x0, 0x0, 0xa}}}, 0x50}}, 0x0) setsockopt$netlink_NETLINK_NO_ENOBUFS(r0, 0x10e, 0xc, &(0x7f0000000040)=0x7f, 0x4) r1 = socket$caif_stream(0x25, 0x1, 0x0) sendmsg$sock(r1, &(0x7f00000002c0)={&(0x7f0000000140)=@pppol2tpv3={0x18, 0x1, {0x0, 0xffffffffffffffff, {0x2, 0x0, @loopback}, 0x0, 0xffffffff}}, 0x80, 0x0, 0xfffffffffffffe87}, 0x0) sendmsg$nl_route(r0, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000080)=ANY=[@ANYBLOB="380000001a0001000000000000000a0080"], 0x38}}, 0x0) syz_emit_ethernet(0xde, &(0x7f0000000000)={@remote, @dev={'\xaa\xaa\xaa\xaa\xaa', 0x8}, @val={@val={0x88a8, 0x0, 0x1, 0x3}, {0x8100, 0x7, 0x1, 0x1}}, {@ipv6={0x86dd, @tcp={0x0, 0x6, "4dd708", 0xa8, 0x6, 0x0, @remote, @initdev={0xfe, 0x88, '\x00', 0x1, 0x0}, {[@srh={0x3b, 0x6, 0x4, 0x3, 0xd0, 0x0, 0xb0, [@private2={0xfc, 0x2, '\x00', 0x1}, @private0, @mcast1]}, @routing={0x87, 0x2, 0x0, 0x40, 0x0, [@mcast2]}, @routing={0xca, 0x2, 0x1, 0xba, 0x0, [@initdev={0xfe, 0x88, '\x00', 0x1, 0x0}]}, @dstopts={0x0, 0x0, '\x00', [@jumbo={0xc2, 0x4, 0x9}, @jumbo={0xc2, 0x4, 0x4}]}, @routing={0x1d, 0x2, 0x0, 0x6, 0x0, [@local]}], {{0x0, 0x4001, 0x41424344, 0x41424344, 0x0, 0x0, 0x6, 0x40, 0x0, 0x0, 0x0, {[@window={0x3, 0x47, 0x96}]}}}}}}}}, 0x0) r2 = socket$nl_audit(0x10, 0x3, 0x9) sendmsg$AUDIT_GET(r2, &(0x7f0000000200)={&(0x7f0000000140)={0x10, 0x0, 0x0, 0x800}, 0xc, &(0x7f00000001c0)={&(0x7f0000000180)={0x10, 0x3e8, 0x800, 0x70bd2b, 0x25dfdbfb, "", ["", "", "", ""]}, 0x10}, 0x1, 0x0, 0x0, 0x40}, 0x20000004) syz_extract_tcp_res(&(0x7f0000000100), 0x7fff, 0x10) 1.835239668s ago: executing program 3 (id=4683): r0 = socket$alg(0x26, 0x5, 0x0) bind$alg(r0, &(0x7f00000003c0)={0x26, 'skcipher\x00', 0x0, 0x0, 'xts(serpent)\x00'}, 0x58) setsockopt$ALG_SET_KEY(r0, 0x117, 0x1, 0x0, 0x0) connect(r0, &(0x7f0000000080)=@phonet={0x23, 0x2, 0xfb, 0x6}, 0x80) r1 = bpf$MAP_CREATE(0x0, &(0x7f0000000440)=ANY=[@ANYBLOB="3414dc2b0501a743ba23060e00000004002a32a6", @ANYRES32=0x1, @ANYBLOB='\x00'/20, @ANYRES32=0x0, @ANYRES32, @ANYBLOB='\x00'/28], 0x48) bpf$MAP_UPDATE_ELEM(0x2, &(0x7f0000000380)={r1, &(0x7f00000007c0)="0ff764", &(0x7f00000002c0)=@tcp6, 0x1}, 0x20) r2 = accept4(r0, 0x0, 0x0, 0x80000) syz_genetlink_get_family_id$fou(&(0x7f0000000040), r2) sendto$l2tp6(r2, &(0x7f0000000000)="fd2e", 0x2, 0x88c0, 0x0, 0x0) sendmsg$alg(r2, &(0x7f0000000380)={0x0, 0x0, 0x0, 0x0, &(0x7f0000000700)=[@op={0x18, 0x117, 0x3, 0x1}], 0x18, 0x80}, 0x4004080) 1.729332765s ago: executing program 6 (id=4685): r0 = bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000340)=ANY=[@ANYBLOB="0200000004000000080000000100000080"], 0x50) bpf$PROG_LOAD(0x5, &(0x7f000000e000)={0x1, 0x4, &(0x7f0000000040)=@framed={{0xffffffb4, 0x5, 0x0, 0x0, 0x0, 0x71, 0x10, 0xb9}, [@ldst={0x6}]}, &(0x7f0000003ff6)='GPL\x00', 0x5, 0xc9, &(0x7f0000000080)=""/201, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0x8, 0x10, &(0x7f0000000000), 0x10}, 0x94) bpf$MAP_UPDATE_CONST_STR(0x2, &(0x7f0000000400)={{r0, 0xffffffffffffffff}, &(0x7f0000000040), &(0x7f00000003c0)='%pI4 \x00'}, 0x20) r2 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r2, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000a00)={{0x14}, [@NFT_MSG_NEWTABLE={0x20, 0x0, 0xa, 0x401, 0x0, 0x0, {0x1, 0x0, 0x3}, [@NFTA_TABLE_NAME={0x9, 0x1, 'syz0\x00'}]}, @NFT_MSG_DELRULE={0x120, 0x8, 0xa, 0x101, 0x0, 0x0, {0x3, 0x0, 0x9}, [@NFTA_RULE_EXPRESSIONS={0x10c, 0x4, 0x0, 0x1, [{0x10, 0x1, 0x0, 0x1, @socket={{0xb}, @void}}, {0x14, 0x1, 0x0, 0x1, @byteorder={{0xe}, @void}}, {0x38, 0x1, 0x0, 0x1, @cmp={{0x8}, @val={0x2c, 0x2, 0x0, 0x1, [@NFTA_CMP_OP={0x8, 0x2, 0x1, 0x0, 0x2}, @NFTA_CMP_SREG={0x8, 0x1, 0x1, 0x0, 0x1d}, @NFTA_CMP_SREG={0x8, 0x1, 0x1, 0x0, 0x15}, @NFTA_CMP_OP={0x8, 0x2, 0x1, 0x0, 0x1}, @NFTA_CMP_SREG={0x8, 0x1, 0x1, 0x0, 0x4}]}}}, {0x2c, 0x1, 0x0, 0x1, @payload={{0xc}, @val={0x1c, 0x2, 0x0, 0x1, [@NFTA_PAYLOAD_LEN={0x8, 0x4, 0x1, 0x0, 0x7}, @NFTA_PAYLOAD_CSUM_TYPE={0x8, 0x6, 0x1, 0x0, 0x2}, @NFTA_PAYLOAD_DREG={0x8, 0x1, 0x1, 0x0, 0x16}]}}}, {0x18, 0x1, 0x0, 0x1, @flow_offload={{0x11}, @void}}, {0x4c, 0x1, 0x0, 0x1, @redir={{0xa}, @val={0x3c, 0x2, 0x0, 0x1, [@NFTA_REDIR_REG_PROTO_MIN={0x8, 0x1, 0x1, 0x0, 0x2}, @NFTA_REDIR_FLAGS={0x8, 0x3, 0x1, 0x0, 0x5a}, @NFTA_REDIR_REG_PROTO_MIN={0x8, 0x1, 0x1, 0x0, 0xb}, @NFTA_REDIR_REG_PROTO_MAX={0x8, 0x2, 0x1, 0x0, 0x8}, @NFTA_REDIR_REG_PROTO_MIN={0x8, 0x1, 0x1, 0x0, 0x14}, @NFTA_REDIR_REG_PROTO_MAX={0x8, 0x2, 0x1, 0x0, 0x3}, @NFTA_REDIR_REG_PROTO_MAX={0x8, 0x2, 0x1, 0x0, 0x16}]}}}, {0xc, 0x1, 0x0, 0x1, @dup={{0x8}, @void}}, {0x10, 0x1, 0x0, 0x1, @queue={{0xa}, @void}}]}]}, @NFT_MSG_NEWRULE={0x94, 0x6, 0xa, 0x401, 0x0, 0x0, {0x1, 0x0, 0x8}, [@NFTA_RULE_CHAIN_ID={0x8}, @NFTA_RULE_EXPRESSIONS={0x6c, 0x4, 0x0, 0x1, [{0x34, 0x1, 0x0, 0x1, @exthdr={{0xb}, @val={0x24, 0x2, 0x0, 0x1, [@NFTA_EXTHDR_DREG={0x8, 0x1, 0x1, 0x0, 0xc}, @NFTA_EXTHDR_OFFSET={0x8, 0x3, 0x1, 0x0, 0x2}, @NFTA_EXTHDR_LEN={0x8, 0x4, 0x1, 0x0, 0x22}, @NFTA_EXTHDR_TYPE={0x5, 0x2, 0x7}]}}}, {0x34, 0x1, 0x0, 0x1, @bitwise={{0xc}, @val={0x24, 0x2, 0x0, 0x1, [@NFTA_BITWISE_LEN={0x8, 0x3, 0x1, 0x0, 0x2}, @NFTA_BITWISE_SREG={0x8, 0x1, 0x1, 0x0, 0x14}, @NFTA_BITWISE_DREG={0x8, 0x2, 0x1, 0x0, 0x12}, @NFTA_BITWISE_OP={0x8, 0x6, 0x1, 0x0, 0x2}]}}}]}, @NFTA_RULE_TABLE={0x9, 0x1, 'syz0\x00'}]}, @NFT_MSG_DELOBJ={0xf4, 0x14, 0xa, 0x203, 0x0, 0x0, {0x1, 0x0, 0x8}, [@NFTA_OBJ_HANDLE={0xc, 0x6, 0x1, 0x0, 0x4}, @NFTA_OBJ_TABLE={0x9, 0x1, 'syz0\x00'}, @NFTA_OBJ_NAME={0x9, 0x2, 'syz1\x00'}, @NFTA_OBJ_TABLE={0x9, 0x1, 'syz0\x00'}, @NFTA_OBJ_USERDATA={0x7a, 0x8, "91e83462485d3642f6566845ac05bd950156d8436271e775774f9bcf45ebe401c3128a359c1c058cecce0f0035cffd4563933097c30f9ade0bf176bbced9c9c44a865a3ffeaddc24b9f2c581d3c3932db9d6a6d0183df9298789752badbd9d733c6989e280c14d7c9fcbd2d446da9e6294dc6f004f77"}, @NFTA_OBJ_TYPE={0x8, 0x3, 0x1, 0x0, 0x1}, @NFTA_OBJ_USERDATA={0xb, 0x8, "54810eacc90d24"}, @NFTA_OBJ_TYPE={0x8, 0x3, 0x1, 0x0, 0x5}, @NFTA_OBJ_NAME={0x9, 0x2, 'syz2\x00'}, @NFTA_OBJ_HANDLE={0xc, 0x6, 0x1, 0x0, 0x5}]}, @NFT_MSG_NEWSETELEM={0x17bc, 0xc, 0xa, 0x401, 0x0, 0x0, {0x7, 0x0, 0x8}, [@NFTA_SET_ELEM_LIST_ELEMENTS={0x1384, 0x3, 0x0, 0x1, [{0x6c, 0x0, 0x0, 0x1, [@NFTA_SET_ELEM_EXPR={0x68, 0x7, 0x0, 0x1, @counter={{0xc}, @val={0x58, 0x2, 0x0, 0x1, [@NFTA_COUNTER_BYTES={0xc, 0x1, 0x1, 0x0, 0x7}, @NFTA_COUNTER_BYTES={0xc, 0x1, 0x1, 0x0, 0x8}, @NFTA_COUNTER_BYTES={0xc, 0x1, 0x1, 0x0, 0x3}, @NFTA_COUNTER_BYTES={0xc, 0x1, 0x1, 0x0, 0x5}, @NFTA_COUNTER_BYTES={0xc, 0x1, 0x1, 0x0, 0x100}, @NFTA_COUNTER_BYTES={0xc, 0x1, 0x1, 0x0, 0xfffffffffffffffb}, @NFTA_COUNTER_PACKETS={0xc, 0x2, 0x1, 0x0, 0x9}]}}}]}, {0x1198, 0x0, 0x0, 0x1, [@NFTA_SET_ELEM_EXPIRATION={0xc, 0x5, 0x1, 0x0, 0x7f}, @NFTA_SET_ELEM_KEY={0x1188, 0x1, 0x0, 0x1, [@NFTA_DATA_VALUE={0xcb, 0x1, "9a3e141d6466a9aa7f161be39e097bf80aa4784cbfeb27e57d7d0ece145ce092546cdf1df67f6f1f44adfbc427eaeb7e6762d19686fb8373f15830bbbb0fbb92b40c4c05b80b3aa76fabd58bc9030850eae5465ed724b560320216d1ff0aa1c8043ea97b8eaf43ebd4c726c0e73ced66134796f733a56e3b64deaab3db8286d55e0e9fb33271418a5745d3e7529a2712d103385398c60e5809ad6824b3bfd91ebaafd3742316ae405a9fabe2e9a11db3ee2261245c10c6d781f09338bdfde56a982c27a2a77d4e"}, @NFTA_DATA_VERDICT={0x18, 0x2, 0x0, 0x1, [@NFTA_VERDICT_CHAIN_ID={0x8, 0x3, 0x1, 0x0, 0x4}, @NFTA_VERDICT_CHAIN={0x9, 0x2, 'syz1\x00'}]}, @NFTA_DATA_VALUE={0x99, 0x1, "bf826b50cdbbb6ba7d30c2942d24e4d9401fd734efeb6ea673b606c3739e407f1a80471159be93a8867070da768099b66bc5189d3379c35f61039b856b7a4c7c63b4087c1923c885d9e271c399686288616ffd6db3e6332ca283a73d99fb0c71d20cdd0ec305d98c92031946fd890a7591b2bec8d0a9c58418ed3beb7dc7398116a4c209b624458d4c6d1c102eb5d24ea9b15ead89"}, @NFTA_DATA_VALUE={0x1004, 0x1, "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"}]}]}, {0x17c, 0x0, 0x0, 0x1, [@NFTA_SET_ELEM_EXPRESSIONS={0x7c, 0xb, 0x0, 0x1, [{0xc, 0x1, 0x0, 0x1, @dup={{0x8}, @void}}, {0x2c, 0x1, 0x0, 0x1, @quota={{0xa}, @val={0x1c, 0x2, 0x0, 0x1, [@NFTA_QUOTA_BYTES={0xc, 0x1, 0x1, 0x0, 0x10001}, @NFTA_QUOTA_BYTES={0xc, 0x1, 0x1, 0x0, 0x4}]}}}, {0xc, 0x1, 0x0, 0x1, @dup={{0x8}, @void}}, {0x24, 0x1, 0x0, 0x1, @queue={{0xa}, @val={0x14, 0x2, 0x0, 0x1, [@NFTA_QUEUE_NUM={0x6, 0x1, 0x1, 0x0, 0x3}, @NFTA_QUEUE_SREG_QNUM={0x8, 0x4, 0x1, 0x0, 0x17}]}}}, {0x10, 0x1, 0x0, 0x1, @limit={{0xa}, @void}}]}, @NFTA_SET_ELEM_EXPIRATION={0xc, 0x5, 0x1, 0x0, 0x4}, @NFTA_SET_ELEM_OBJREF={0x9, 0x9, 'syz0\x00'}, @NFTA_SET_ELEM_EXPR={0x44, 0x7, 0x0, 0x1, @quota={{0xa}, @val={0x34, 0x2, 0x0, 0x1, [@NFTA_QUOTA_BYTES={0xc, 0x1, 0x1, 0x0, 0x8000}, @NFTA_QUOTA_BYTES={0xc, 0x1, 0x1, 0x0, 0x8000000000000000}, @NFTA_QUOTA_BYTES={0xc, 0x1, 0x1, 0x0, 0x8000}, @NFTA_QUOTA_CONSUMED={0xc, 0x4, 0x1, 0x0, 0x7d18}]}}}, @NFTA_SET_ELEM_EXPIRATION={0xc, 0x5, 0x1, 0x0, 0x7fffffffffffffff}, @NFTA_SET_ELEM_EXPRESSIONS={0x94, 0xb, 0x0, 0x1, [{0x10, 0x1, 0x0, 0x1, @range={{0xa}, @void}}, {0x10, 0x1, 0x0, 0x1, @hash={{0x9}, @void}}, {0x10, 0x1, 0x0, 0x1, @inner={{0xa}, @void}}, {0x10, 0x1, 0x0, 0x1, @reject={{0xb}, @void}}, {0xc, 0x1, 0x0, 0x1, @dup_ipv6={{0x8}, @void}}, {0x44, 0x1, 0x0, 0x1, @numgen={{0xb}, @val={0x34, 0x2, 0x0, 0x1, [@NFTA_NG_MODULUS={0x8, 0x2, 0x1, 0x0, 0x4}, @NFTA_NG_TYPE={0x8, 0x3, 0x1, 0x0, 0x3}, @NFTA_NG_DREG={0x8, 0x1, 0x1, 0x0, 0x9}, @NFTA_NG_MODULUS={0x8, 0x2, 0x1, 0x0, 0x8}, @NFTA_NG_OFFSET={0x8}, @NFTA_NG_MODULUS={0x8, 0x2, 0x1, 0x0, 0x9e}]}}}]}]}]}, @NFTA_SET_ELEM_LIST_SET_ID={0x8, 0x4, 0x1, 0x0, 0x3}, @NFTA_SET_ELEM_LIST_SET={0x9, 0x2, 'syz1\x00'}, @NFTA_SET_ELEM_LIST_SET={0x9, 0x2, 'syz1\x00'}, @NFTA_SET_ELEM_LIST_SET_ID={0x8, 0x4, 0x1, 0x0, 0x3}, @NFTA_SET_ELEM_LIST_TABLE={0x9, 0x1, 'syz1\x00'}, @NFTA_SET_ELEM_LIST_ELEMENTS={0x3e4, 0x3, 0x0, 0x1, [{0x128, 0x0, 0x0, 0x1, [@NFTA_SET_ELEM_KEY={0xac, 0x1, 0x0, 0x1, [@NFTA_DATA_VALUE={0x99, 0x1, "7055b5c5a90090322b34c302c0d83f743d15b180c0f51e3fc5ae4fb7cae26a1fbce0397f7197799e9cb30e122e59f36702dc2b818547d85e11e361b2de414f4057ebac7e1fe00d53e68d4cb1cd804ee10bf955be0c7af8659beeddd73925b28c1afc79f6a026f4fbb1f9b933f877498f9e0a5b66b37d9852d27568391706daa195774f03855ebf96bd503fc3a02c7fd713712a1100"}, @NFTA_DATA_VERDICT={0xc, 0x2, 0x0, 0x1, [@NFTA_VERDICT_CODE={0x8, 0x1, 0x0, 0x1, 0xfffffffffffffffc}]}]}, @NFTA_SET_ELEM_USERDATA={0x70, 0x6, 0x1, 0x0, "158989d6bd408f2413f43a63a7899a3a0d6d312c8ef7bb187715ee7eef10e3a05b76299e05c3a773415540c61b2b07e9b0b57ad69ca97052b2bbd3f9588b23d343a9995ce9520a3e553f9161efbd90fd85c6ca0d762665b8febd2998f029f493b490c5373bc0811d525eacfa"}, @NFTA_SET_ELEM_FLAGS={0x8, 0x3, 0x1, 0x0, 0x2}]}, {0x11c, 0x0, 0x0, 0x1, [@NFTA_SET_ELEM_EXPR={0x54, 0x7, 0x0, 0x1, @payload={{0xc}, @val={0x44, 0x2, 0x0, 0x1, [@NFTA_PAYLOAD_OFFSET={0x8, 0x3, 0x1, 0x0, 0x58}, @NFTA_PAYLOAD_CSUM_OFFSET={0x8, 0x7, 0x1, 0x0, 0xe}, @NFTA_PAYLOAD_CSUM_TYPE={0x8, 0x6, 0x1, 0x0, 0x2}, @NFTA_PAYLOAD_OFFSET={0x8, 0x3, 0x1, 0x0, 0x74}, @NFTA_PAYLOAD_LEN={0x8, 0x4, 0x1, 0x0, 0xea}, @NFTA_PAYLOAD_DREG={0x8, 0x1, 0x1, 0x0, 0xc}, @NFTA_PAYLOAD_OFFSET={0x8, 0x3, 0x1, 0x0, 0x28}, @NFTA_PAYLOAD_LEN={0x8, 0x4, 0x1, 0x0, 0xdd}]}}}, @NFTA_SET_ELEM_OBJREF={0x9, 0x9, 'syz0\x00'}, @NFTA_SET_ELEM_KEY={0xa8, 0x1, 0x0, 0x1, [@NFTA_DATA_VERDICT={0x10, 0x2, 0x0, 0x1, [@NFTA_VERDICT_CHAIN={0x9, 0x2, 'syz2\x00'}]}, @NFTA_DATA_VALUE={0x92, 0x1, "5652c84326d046c47601962b97b6a7540c80ba25e1c6e07f6588e84113d79905b8b22b74a291fb0721759f6ef69e0cfa89e929aa695740075c598176e06e511f8d97e7cc8982c1e698621463bab6a9fe1b32b9b143e6a49eedc44304e4e8b922102ce470f4a5b5836f2998ab14f4d5b10ede189bcb3ed7da4221361c7781123f71300d750a0373380b18e25c2716"}]}, @NFTA_SET_ELEM_KEY_END={0x4}, @NFTA_SET_ELEM_OBJREF={0x9, 0x9, 'syz0\x00'}]}, {0x10c, 0x0, 0x0, 0x1, [@NFTA_SET_ELEM_EXPR={0x40, 0x7, 0x0, 0x1, @fwd={{0x8}, @val={0x34, 0x2, 0x0, 0x1, [@NFTA_FWD_SREG_DEV={0x8, 0x1, 0x1, 0x0, 0x17}, @NFTA_FWD_NFPROTO={0x8, 0x3, 0x1, 0x0, 0x2}, @NFTA_FWD_SREG_DEV={0x8, 0x1, 0x1, 0x0, 0x13}, @NFTA_FWD_SREG_ADDR={0x8, 0x2, 0x1, 0x0, 0x11}, @NFTA_FWD_SREG_DEV={0x8, 0x1, 0x1, 0x0, 0x4}, @NFTA_FWD_SREG_ADDR={0x8, 0x2, 0x1, 0x0, 0x4}]}}}, @NFTA_SET_ELEM_DATA={0xc8, 0x2, 0x0, 0x1, [@NFTA_DATA_VERDICT={0xc, 0x2, 0x0, 0x1, [@NFTA_VERDICT_CODE={0x8, 0x1, 0x0, 0x1, 0xfffffffffffffffc}]}, @NFTA_DATA_VALUE={0xa4, 0x1, "b3c65e9ae32cf3b9d3e40af176efbdab4d04383c54c6567dd312bc88ac11d5bd1f36e1b353d9cf504a43c25185765a4bd5c192781ebbe1b95d6738101419def23ae3cd7d8aaeb775d140a172d8ecaf0928edfd579b1d21a35f466491b7a9e8a8155f8d0628554b1d4d6a3c02b700b9012492195f2896588d6dbf7762a050f7642e095c0c0964a518452164a8c9f68fb0babdc7ea26c29292a020180318a44eca"}, @NFTA_DATA_VALUE={0x4}, @NFTA_DATA_VERDICT={0x10, 0x2, 0x0, 0x1, [@NFTA_VERDICT_CHAIN={0x9, 0x2, 'syz0\x00'}]}]}]}, {0x90, 0x0, 0x0, 0x1, [@NFTA_SET_ELEM_FLAGS={0x8, 0x3, 0x1, 0x0, 0x2}, @NFTA_SET_ELEM_KEY={0x28, 0x1, 0x0, 0x1, [@NFTA_DATA_VALUE={0xa, 0x1, "f4e8be11bb5f"}, @NFTA_DATA_VERDICT={0x18, 0x2, 0x0, 0x1, [@NFTA_VERDICT_CHAIN={0x9, 0x2, 'syz1\x00'}, @NFTA_VERDICT_CHAIN_ID={0x8, 0x3, 0x1, 0x0, 0x2}]}]}, @NFTA_SET_ELEM_KEY={0x5c, 0x1, 0x0, 0x1, [@NFTA_DATA_VALUE={0x49, 0x1, "201dd04a9f469d7f0fb161d0428ad5f440bd4b4052fefac01f97358a35f84ee74ef4246d4e957ef285e6ae533278e11a10c14a4bbd14b0df59dd9be026ef8f6e0adb51d34d"}, @NFTA_DATA_VALUE={0xa, 0x1, "a4c8922b5e40"}]}]}]}, @NFTA_SET_ELEM_LIST_TABLE={0x9, 0x1, 'syz0\x00'}]}, @NFT_MSG_NEWOBJ={0x1c, 0x12, 0xa, 0x3, 0x0, 0x0, {0x3, 0x0, 0x7}, @NFT_OBJECT_QUOTA=@NFTA_OBJ_TYPE={0x8}}], {0x14, 0x11, 0x1, 0x0, 0x0, {0x7}}}, 0x1ac8}}, 0x0) bpf$BPF_MAP_CONST_STR_FREEZE(0x16, &(0x7f00000000c0)={r1, 0xffffffffffffffff}, 0x4) r4 = bpf$PROG_LOAD(0x5, &(0x7f00000004c0)={0x16, 0x10, &(0x7f0000000100)=ANY=[@ANYBLOB="18000000000000000000000000000000b7080000000000007b8af8ff00000000b7080000ffff0b867b8af0ff00000000bfa100000000000007010000f8ffffffbfa400000000000007040000f0ffffffb70200000000000018230000", @ANYRES32=r3, @ANYBLOB="0000000000000000b70500000800000085000000a500000095"], &(0x7f0000000600)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000640)={r4, 0x0, 0xe, 0x0, &(0x7f0000000300)="40f0532ef047b21fb60068305500", 0x0, 0x1d, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x50) 1.627311201s ago: executing program 3 (id=4688): r0 = socket$inet6_sctp(0xa, 0x1, 0x84) r1 = socket$netlink(0x10, 0x3, 0x0) r2 = openat$ppp(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) r3 = socket$unix(0x1, 0x1, 0x0) r4 = openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0) ioctl$TUNSETIFF(r4, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x7101}) r5 = socket(0x400000000010, 0x3, 0x0) r6 = socket$unix(0x1, 0x1, 0x0) ioctl$sock_SIOCGIFINDEX(r6, 0x8933, &(0x7f0000000340)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r5, &(0x7f0000000bc0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000005c0)=@newqdisc={0x38, 0x24, 0x4ee4e6a52ff56541, 0x70bd2a, 0xffffffff, {0x0, 0x0, 0x0, r7, {0x0, 0xfff1}, {0xffff, 0xffff}, {0x0, 0x2}}, [@qdisc_kind_options=@q_multiq={{0xb}, {0x8, 0x2, {0x0, 0x3}}}]}, 0x38}}, 0x0) sendmsg$nl_route_sched(r5, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000740)=@newtfilter={0x84, 0x2c, 0xd27, 0x30bd25, 0x25dfdc00, {0x0, 0x0, 0x0, r7, {0x0, 0x4}, {}, {0x8, 0xfffd}}, [@filter_kind_options=@f_matchall={{0xd}, {0x50, 0x2, [@TCA_MATCHALL_ACT={0x4c, 0x2, [@m_gact={0x48, 0x1, 0x0, 0x0, {{0x9}, {0x1c, 0x2, 0x0, 0x1, [@TCA_GACT_PARMS={0x18, 0x2, {0x6, 0x1000, 0x2, 0xfffffffc, 0xa}}]}, {0x4}, {0xc, 0x7, {0x1, 0x1}}, {0xc, 0x8, {0x3, 0x3}}}}]}]}}]}, 0x84}, 0x1, 0x0, 0x0, 0x20000010}, 0x20000000) r8 = socket$kcm(0x11, 0x3, 0x0) r9 = openat$tun(0xffffffffffffff9c, &(0x7f0000000400), 0x0, 0x0) close(r9) socket$nl_generic(0x10, 0x3, 0x10) ioctl$SIOCSIFHWADDR(r9, 0x8914, &(0x7f0000002280)={'syzkaller0\x00', @multicast}) ioctl$sock_SIOCGIFINDEX(r3, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) setsockopt$sock_attach_bpf(r8, 0x107, 0xf, &(0x7f0000000600), 0x56) sendmsg$kcm(r8, &(0x7f0000000280)={&(0x7f0000000380)=@xdp={0x2c, 0x0, r10, 0x3e}, 0x80, &(0x7f00000001c0)=[{&(0x7f0000000180)="27030200000214000e00002fb96dffff1144ee163cddcb00"/38, 0x26}, {&(0x7f00000004c0)="f058fe7dad777f8f", 0x300}], 0x2}, 0x5) sendmsg$nl_route(r1, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000080)=ANY=[@ANYBLOB="4c00000010003df600"/20, @ANYRES32=0x0, @ANYBLOB="000000e8ff070000140003002e000000000000d700000000000000001800128008000100707070000c00028008000100", @ANYRES32=r2], 0x4c}, 0x1, 0x0, 0x0, 0x11}, 0x0) bpf$PROG_LOAD(0x5, &(0x7f000000e000)={0x10, 0x4, &(0x7f0000000040)=ANY=[@ANYBLOB="b4000000000000007910480000000000610418000000000095000000"], &(0x7f0000003ff6)='GPL\x00', 0x2, 0xfd90, &(0x7f000000cf3d)=""/195, 0x0, 0x1, '\x00', 0x0, @sk_msg, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0xfffffffffffffd8b, 0xffffffffffffffff}, 0x48) sendmmsg$inet6(r0, &(0x7f0000004b40)=[{{&(0x7f0000001140)={0xa, 0x4e23, 0x10, @private2, 0x8}, 0x1c, &(0x7f00000013c0)=[{&(0x7f00000016c0)="99", 0x1}], 0x1}}, {{&(0x7f0000000000)={0xa, 0x4e24, 0x9b5d, @private2={0xfc, 0x2, '\x00', 0x1}, 0x80}, 0x1c, &(0x7f00000015c0)=[{&(0x7f0000001700)="92", 0x1}], 0x1}}], 0x2, 0x4000090) mmap(&(0x7f0000001000/0xc00000)=nil, 0xc00000, 0x0, 0x3032, 0xffffffffffffffff, 0x0) connect$pppl2tp(0xffffffffffffffff, 0x0, 0x0) sendmsg$NL80211_CMD_START_AP(0xffffffffffffffff, &(0x7f0000000040)={0x0, 0x0, 0x0}, 0x0) r11 = syz_init_net_socket$nfc_llcp(0x27, 0x2, 0x1) bind$bt_hci(r11, &(0x7f0000000000)={0x27}, 0x74) sendmmsg$unix(r11, &(0x7f0000000b00)=[{{&(0x7f00000000c0)=@file={0x0, './file0\x00'}, 0x6e, 0x0}}, {{&(0x7f0000000e80)=@file={0x0, './file0\x00'}, 0x6e, &(0x7f0000000740)=[{&(0x7f0000001dc0)="bb", 0x1}], 0x1}}], 0x2, 0x0) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={0x0, 0x48}}, 0x0) shutdown(r0, 0x1) 1.442093945s ago: executing program 6 (id=4690): socket$kcm(0x10, 0x400000002, 0x0) (async) r0 = socket$kcm(0x10, 0x400000002, 0x0) r1 = bpf$BPF_PROG_WITH_BTFID_LOAD(0x5, &(0x7f0000000300)=@bpf_lsm={0x3, 0x4, &(0x7f0000000040)=ANY=[@ANYBLOB="660a0000000000006111520000000000850000000000000095"], &(0x7f0000000000)='GPL\x00'}, 0x90) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000000)={0x0}, 0x1, 0x0, 0x0, 0x4000811}, 0x20040010) (async) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000000)={0x0}, 0x1, 0x0, 0x0, 0x4000811}, 0x20040010) r2 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000000000)={&(0x7f000000ef00)=@newtaction={0x68, 0x30, 0x1, 0x70bd27, 0x25dfdbfe, {}, [{0x54, 0x1, [@m_connmark={0x50, 0x1, 0x0, 0x0, {{0xd}, {0x20, 0x2, 0x0, 0x1, [@TCA_CONNMARK_PARMS={0x1c, 0x1, {{0x5, 0x2, 0x6, 0x3, 0x1}, 0x9}}]}, {0x4}, {0xc, 0x7, {0x0, 0x1}}, {0xc, 0x8, {0x1, 0x3}}}}]}]}, 0x68}}, 0x4) sendmmsg(r2, &(0x7f00000002c0), 0x40000000000009f, 0x0) openat$tun(0xffffffffffffff9c, &(0x7f00000000c0), 0x20201, 0x0) (async) r3 = openat$tun(0xffffffffffffff9c, &(0x7f00000000c0), 0x20201, 0x0) ioctl$TUNSETFILTEREBPF(r3, 0x800454e1, &(0x7f0000000140)=r1) sendmsg$inet(r0, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000080)=[{&(0x7f00000005c0)="1c0000005e007f029e3b47feffffffffffffffd956c07dead6792e01", 0x1c}], 0x1}, 0x0) 1.339637763s ago: executing program 6 (id=4695): r0 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000000)={'veth1_macvtap\x00', 0x0}) r2 = socket$netlink(0x10, 0x3, 0x0) r3 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x11, 0x4, &(0x7f00000002c0)=ANY=[@ANYBLOB="180100001c0000000000000000000000850000006d00000095"], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x41000, 0x20, '\x00', 0x0, 0x2}, 0x94) clock_gettime(0x0, &(0x7f0000000340)={0x0, 0x0}) nanosleep(&(0x7f0000000380)={r4, r5+60000000}, &(0x7f0000000400)) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000100)={&(0x7f00000003c0)='sys_enter\x00', r3}, 0x18) nanosleep(&(0x7f0000000bc0)={0x0, 0x3938700}, 0x0) r6 = socket$isdn(0x22, 0x3, 0x24) getsockopt$IP_SET_OP_GET_FNAME(r6, 0x1, 0x53, 0x0, 0x0) r7 = socket$kcm(0x29, 0x5, 0x0) r8 = socket$packet(0x11, 0xa, 0x300) setsockopt$SO_ATTACH_FILTER(r8, 0x1, 0x1a, &(0x7f0000fbe000)={0x2, &(0x7f0000000100)=[{0x2c}, {0x80000006}]}, 0x10) r9 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r9, &(0x7f0000000140)={0x0, 0x0, &(0x7f00000005c0)={&(0x7f0000000380)=ANY=[@ANYBLOB="280000001200230b000000000000000000000200", @ANYRES32=0x0, @ANYBLOB="0000000000000000080012800400"], 0x28}}, 0x0) clock_gettime(0x0, &(0x7f0000000480)={0x0, 0x0}) ppoll(&(0x7f0000000440)=[{r6, 0x10}, {r9, 0x24c}, {r7, 0x2144}], 0x3, &(0x7f00000004c0)={r10, r11+10000000}, &(0x7f0000000500), 0x8) r12 = syz_genetlink_get_family_id$nfc(&(0x7f0000000180), 0xffffffffffffffff) sendmsg$NFC_CMD_LLC_SET_PARAMS(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000400)={&(0x7f00000000c0)={0x24, r12, 0x1, 0x70bd25, 0x25dfdbfe, {}, [@NFC_ATTR_DEVICE_INDEX={0x8}, @NFC_ATTR_LLC_PARAM_RW={0x5, 0x10, 0xf}]}, 0x24}, 0x1, 0x0, 0x0, 0x4040850}, 0x20040880) sendmsg$kcm(r7, &(0x7f00000007c0)={&(0x7f0000000240)=@x25, 0x80, &(0x7f0000000880)}, 0x40000d0) r13 = syz_genetlink_get_family_id$tipc(&(0x7f00000000c0), r2) sendmsg$TIPC_CMD_SET_LINK_WINDOW(r2, &(0x7f0000000200)={&(0x7f0000000040), 0xc, &(0x7f0000000180)={&(0x7f0000000100)={0x68, r13, 0x8, 0x70bd25, 0x25dfdbfd, {{}, {}, {0x4c, 0x18, {0x8, @link='broadcast-link\x00'}}}, ["", "", "", "", "", "", "", ""]}, 0x68}, 0x1, 0x0, 0x0, 0x4040}, 0x4b4085b8dde5918b) bind$packet(r8, &(0x7f00000001c0)={0x11, 0x1b, r1, 0x1, 0x6, 0x6, @broadcast}, 0x14) r14 = socket$inet_sctp(0x2, 0x1, 0x84) setsockopt$IPT_SO_SET_REPLACE(r14, 0x0, 0x40, &(0x7f0000000700)=@mangle={'mangle\x00', 0x1f, 0x6, 0x3e8, 0xa0, 0xa0, 0x1d8, 0xa0, 0x138, 0xa0, 0x380, 0x380, 0x380, 0x380, 0x6, 0x0, {[{{@uncond, 0x0, 0x70, 0xa0}, @TPROXY={0x30, 'TPROXY\x00', 0x0, {0x3, 0x7, @multicast1, 0x4e22}}}, {{@uncond, 0x0, 0x70, 0x98}, @common=@unspec=@NFQUEUE3={0x28, 'NFQUEUE\x00', 0x3, {0xe, 0x4, 0x2}}}, {{@ip={@dev={0xac, 0x14, 0x14, 0x36}, @loopback, 0x1fffffffe, 0xff, 'pimreg1\x00', 'dummy0\x00', {0xff}, {}, 0x2, 0x1, 0x40}, 0x0, 0x70, 0xa0}, @TPROXY={0x30, 'TPROXY\x00', 0x0, {0x0, 0x4, @remote, 0x4e21}}}, {{@ip={@remote, @multicast1, 0xff, 0x0, 'virt_wifi0\x00', 'team_slave_0\x00', {0xff}, {0xff}, 0x6c, 0x2, 0x59}, 0x0, 0x70, 0x98}, @common=@inet=@SET1={0x28, 'SET\x00', 0x1, {{0x1, 0x3, 0x2}, {0x3, 0x0, 0x4}}}}, {{@ip={@local, @remote, 0xffffff00, 0xff, 'gretap0\x00', 'batadv0\x00', {}, {}, 0x84, 0x1, 0x5}, 0x0, 0x70, 0xe0}, @common=@unspec=@NFLOG={0x70, 'NFLOG\x00', 0x0, {0x1, 0x0, 0x46c5, 0x0, 0x0, "2b4e84400af0c61fe4b77d62d90d10d33fce7dc71425d4209d84f086ee827a4b064c417320a5f57e2dcc64d51dd574bd8c47cabfe9f21364d0c1a47f3240e300"}}}], {{'\x00', 0x0, 0x70, 0x98}, {0x28}}}}, 0x448) sendmsg$nl_route(r2, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000001140)={&(0x7f0000000800)=@newlink={0x44, 0x10, 0x503, 0x70bd2a, 0x4, {0x0, 0x0, 0x0, 0x0, 0x0, 0x201a0}, [@IFLA_LINKINFO={0x1c, 0x12, 0x0, 0x1, @macsec={{0xb}, {0xc, 0x2, 0x0, 0x1, [@IFLA_MACSEC_PORT={0x6, 0x2, 0x1, 0x0, 0x4e24}]}}}, @IFLA_LINK={0x8, 0x5, r1}]}, 0x44}}, 0x800) getpeername$packet(r7, &(0x7f00000002c0)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @link_local}, &(0x7f0000000300)=0x14) 1.287810609s ago: executing program 2 (id=4696): socket$inet(0xa, 0x801, 0x84) socket$nl_generic(0x10, 0x3, 0x10) socket$nl_route(0x10, 0x3, 0x0) socket$nl_route(0x10, 0x3, 0x0) r0 = socket$packet(0x11, 0x3, 0x300) socketpair(0x1, 0x5, 0x0, &(0x7f0000000000)={0xffffffffffffffff}) getpeername$packet(r1, &(0x7f0000000000)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @dev}, &(0x7f0000000040)=0x14) socket$nl_route(0x10, 0x3, 0x0) socket$inet6_udp(0xa, 0x2, 0x0) r3 = bpf$MAP_CREATE(0x0, &(0x7f00000002c0)=ANY=[@ANYBLOB="0a00000004000000ff0f000006"], 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r3, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000100000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) r4 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x5, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) socket$nl_netfilter(0x10, 0x3, 0xc) socket$inet(0x2, 0x3, 0x8d) socket$inet6_udplite(0xa, 0x2, 0x88) socket(0xa, 0x1, 0x0) pipe(&(0x7f00000001c0)) r5 = bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000200)={&(0x7f0000000500)='percpu_free_percpu\x00', r4}, 0x10) r6 = socket$nl_generic(0x10, 0x3, 0x10) r7 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX_80211(r7, 0x8933, &(0x7f0000000640)={'wlan0\x00', 0x0}) r9 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000540), 0xffffffffffffffff) sendmsg$NL80211_CMD_JOIN_MESH(r6, &(0x7f00000007c0)={0x0, 0x0, &(0x7f0000000400)={&(0x7f0000000000)={0x28, r9, 0x1, 0x70bd26, 0x25dfdbff, {{}, {@val={0x8, 0x3, r8}, @void}}, [@NL80211_ATTR_MESH_CONFIG={0xc, 0x23, 0x0, 0x1, [@NL80211_MESHCONF_HWMP_PERR_MIN_INTERVAL={0x6, 0x12, 0x7}]}]}, 0x28}, 0x1, 0x0, 0x0, 0x200408c1}, 0x400c0) bpf$PROG_LOAD(0x5, &(0x7f0000000540)={0x0, 0x4, &(0x7f0000000480)=ANY=[@ANYRES64=r5], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0xb, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1}, 0x94) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) sendmmsg(r0, &(0x7f0000000440)=[{{&(0x7f0000000700)=@xdp={0x2c, 0x4788, r2}, 0x80, &(0x7f00000004c0)=[{&(0x7f0000000180)='O', 0x36}], 0x1}}], 0x1, 0x0) r10 = syz_init_net_socket$netrom(0x6, 0x5, 0x0) bind$netrom(r10, &(0x7f0000000080)={{0x3, @bcast}, [@bcast, @rose={0xbb, 0xbb, 0xbb, 0x1, 0x0}, @netrom={0xbb, 0xbb, 0xbb, 0xbb, 0xbb, 0x0, 0x0}, @null, @default, @rose={0xbb, 0xbb, 0xbb, 0x1, 0x0}, @bcast, @rose={0xbb, 0xbb, 0xbb, 0x1, 0x0}]}, 0x48) socket$l2tp6(0xa, 0x2, 0x73) bpf$PROG_LOAD(0x5, &(0x7f0000000440)={0x3, 0x4, &(0x7f0000000300)=ANY=[@ANYBLOB="b4000000f3b80000009503000000000000ad590b55f73d8b653b73ba8ae033e78f931fe1251c7c20c583f19b24265d8eefa54205a5eb7525ee4f576228b060644c57a56cb4a5811c15faabd28dc20100000000000000dc1b0b0aef"], &(0x7f0000000080)='GPL\x00', 0x4, 0x3e0, &(0x7f000000cf3d)=""/195, 0x0, 0x0, '\x00', 0x0, @sched_cls, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0x0, 0x10, &(0x7f0000000000), 0x76}, 0x48) 1.208510861s ago: executing program 3 (id=4697): r0 = socket$nl_xfrm(0x10, 0x3, 0x6) r1 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r1, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000640)=@newlink={0x40, 0x10, 0x421, 0x0, 0x25dfdbfe, {0x0, 0x0, 0x0, 0x0, 0x88a8ffad, 0x60e1}, [@IFLA_LINKINFO={0x14, 0x12, 0x0, 0x1, @vlan={{0x9}, {0x4}}}, @IFLA_ADDRESS={0xa, 0x1, @multicast}]}, 0x40}}, 0x2) pipe(&(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) writev(r2, &(0x7f0000000200)=[{&(0x7f00000000c0)='X', 0x1}], 0x1) syz_genetlink_get_family_id$smc(&(0x7f0000000000), r2) sendmsg$nl_xfrm(r0, &(0x7f0000000480)={0x0, 0x0, &(0x7f0000000200)={&(0x7f00000004c0)=@updpolicy={0x23c, 0x19, 0x1, 0x0, 0x10, {{@in=@multicast1, @in=@remote, 0x0, 0x0, 0xffff, 0x0, 0xa, 0x80, 0x0, 0x0, 0x0, 0xffffffffffffffff}, {}, {0x1, 0x0, 0x80}}, [@tmpl={0x184, 0x5, [{{@in=@local, 0x0, 0x3c}, 0x0, @in=@broadcast}, {{@in=@local, 0x0, 0x3c}, 0x0, @in6=@dev, 0x0, 0x0, 0x0, 0x0, 0x800}, {{@in=@loopback, 0x0, 0x32}, 0x0, @in=@multicast1, 0x800000, 0x3}, {{@in6=@mcast1, 0x0, 0x33}, 0x0, @in=@private=0xa010101, 0x3504, 0x0, 0x0, 0x1, 0x0, 0xabf}, {{@in6=@local, 0x4d4, 0x6c}, 0x0, @in=@multicast1, 0x3, 0x2, 0x0, 0x0, 0x2}, {{@in6=@private0={0xfc, 0x0, '\x00', 0x1}, 0x0, 0x3c}, 0xa, @in6=@private1, 0x0, 0x1, 0x0, 0x0, 0x1}]}]}, 0x23c}}, 0x0) 1.123032564s ago: executing program 2 (id=4699): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) close(r0) r1 = socket$nl_netfilter(0x10, 0x3, 0xc) r2 = socket$kcm(0x10, 0x2, 0x0) sendmsg$kcm(r2, &(0x7f0000000040)={0x0, 0x0, &(0x7f00000009c0)=[{&(0x7f00000008c0)="d800000018007b29e00212ba0d8105040a601800fe0f040b067c55a1bc000900b80006990600000015000500fe800000000000000300014002000c0901ac04000bd67f6f94007100a007a290457f0189b316277ce06bbace8017cbec4c2ee5a7cef4090000001fb791643a5ee4b11602b2a10c11ce1b14d6d930dfe1d9d322fe04fb95cae8c9010000730d7a5025ccca262f3d40fad95667e04adcdf634c1f215ce3bb9ad8ffd5e1cace81ccd40dd601edef3d93452a92307ff0ff0e97031e9f05e9f16e9cb500"/216, 0xd8}], 0x1, 0x0, 0x0, 0x2663}, 0x0) close(r1) r3 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r3, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000240)=ANY=[@ANYBLOB="140000001000010000000000000000000500000a28000000000a030000000000000000000a00000708000240000000020900010073797a31000000002c000000030a010100000000000000000a0000070900010073797a31000000000900030073797a320000000014000000110001"], 0x7c}, 0x1, 0x0, 0x0, 0x4000}, 0x0) sendmsg$NFT_BATCH(r3, &(0x7f0000009b40)={0x0, 0x0, &(0x7f0000009b00)={&(0x7f0000000100)=ANY=[@ANYBLOB="140000001000010000000000000000000500000a4c000000090a010400000000000000000a0000040900010073797a310000000008000540000000020900020073797a310000000008000a40fffffffc080003400000001408000c4000000e45400000000c0a010100000000000000000a0000060900020073797a31000000000900010073797a310000000014000380100000800c00018006000100d103000014000000110001"], 0xb4}, 0x1, 0x0, 0x0, 0x4000850}, 0x40) sendmsg$NFT_BATCH(r1, &(0x7f0000009b40)={0x0, 0x0, &(0x7f0000009b00)={&(0x7f00000002c0)={{0x14, 0x10, 0x1, 0x0, 0x0, {0x5}}, [@NFT_MSG_NEWSETELEM={0x48, 0xc, 0xa, 0x101, 0x0, 0x0, {0xa, 0x0, 0x6}, [@NFTA_SET_ELEM_LIST_SET={0x9, 0x2, 'syz1\x00'}, @NFTA_SET_ELEM_LIST_TABLE={0x9, 0x1, 'syz1\x00'}, @NFTA_SET_ELEM_LIST_ELEMENTS={0x1c, 0x3, 0x0, 0x1, [{0x18, 0x0, 0x0, 0x1, [@NFTA_SET_ELEM_KEY={0xc, 0x1, 0x0, 0x1, [@NFTA_DATA_VALUE={0x6, 0x1, "d103"}]}, @NFTA_SET_ELEM_FLAGS={0x8, 0x3, 0x1, 0x0, 0x1}]}]}]}], {0x14, 0x11, 0x1, 0x0, 0x0, {0x3}}}, 0x70}, 0x1, 0x0, 0x0, 0x4000850}, 0x40) sendmsg$NFT_BATCH(r0, &(0x7f0000009b40)={0x0, 0x0, &(0x7f0000009b00)={&(0x7f00000002c0)=ANY=[@ANYBLOB="140000001000010000000000000000000500000a400000000c0a010100000000000000000a0000060900020073797a31000000000900010073797a310000000014000380100000800c00018006000100d100"], 0x68}, 0x1, 0x0, 0x0, 0x4000850}, 0x40) 1.0720816s ago: executing program 3 (id=4700): r0 = bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000240)={&(0x7f0000000000)={{0xeb9f, 0x1, 0x0, 0x18, 0x0, 0xc, 0xc, 0x2, [@union]}}, 0x0, 0x26}, 0x20) r1 = socket(0xa, 0x3, 0x3a) setsockopt$MRT6_ADD_MFC(r1, 0x29, 0xcc, &(0x7f0000000000)={{0xa, 0x0, 0x0, @private2}, {0xa, 0x0, 0x0, @empty}}, 0x5c) r2 = socket$inet6_sctp(0xa, 0x801, 0x84) getsockopt$bt_hci(r2, 0x84, 0x84, 0x0, &(0x7f0000001080)) ioctl$FS_IOC_READ_VERITY_METADATA(r0, 0xc0286687, &(0x7f0000000080)={0x1, 0x7, 0x69, &(0x7f0000000100)=""/105}) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000300)={0x18, 0x3, &(0x7f0000000040)=ANY=[@ANYBLOB="180000000500000000000000000000009500000800000000"], &(0x7f00000000c0)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, r0, 0x8, 0x0, 0xed000000, 0x10, &(0x7f0000000200), 0x10}, 0x80) 1.06465037s ago: executing program 5 (id=4701): r0 = socket$kcm(0x21, 0x2, 0x2) sendmsg$inet(r0, &(0x7f0000000000)={0x0, 0x0, 0x0}, 0x4014011) (async, rerun: 64) r1 = socket$inet6(0xa, 0x2, 0x0) (rerun: 64) setsockopt$inet6_int(r1, 0x29, 0x1a, &(0x7f0000000080)=0x9, 0x4) (async, rerun: 64) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000900)={0x2, 0x5, &(0x7f00000000c0)=ANY=[@ANYBLOB="1800000000000000000000000000000004000000ffff1700c4000000000028009500000000000000"], &(0x7f0000000000)='syzkaller\x00', 0x4, 0x93, &(0x7f0000000100)=""/147, 0x0, 0x0, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x17, 0x10, 0x0, 0x0, 0x61e5cc96}, 0x22) (async, rerun: 64) sendto$inet6(r1, 0x0, 0x0, 0x0, &(0x7f0000000300)={0xa, 0x4e20, 0x0, @mcast1}, 0x1c) 972.112522ms ago: executing program 3 (id=4703): r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = socket$nl_generic(0x10, 0x3, 0x10) r2 = syz_genetlink_get_family_id$tipc(&(0x7f00000018c0), r0) sendmsg$TIPC_CMD_ENABLE_BEARER(r1, &(0x7f0000001980)={&(0x7f0000001880)={0x10, 0x0, 0x0, 0x10000000}, 0xc, &(0x7f0000001940)={&(0x7f0000000340)=ANY=[@ANYBLOB="09b00860fad8ff5a4a0dcbf2a4e24b025fba0abe70a8d49de794ee801ac29807b1712d91ec2c3e4b824f87e669c3c82f584dddd9f94884625d0781ab129969ba4ceee7105c54da2a99c3690794c0af5b4b7b2c4398206c1e96e13eaf1df200361639582565e00164adc9e26f2e19a7993ab2018b10f34855f2adf8b8b04fae4b14707b40897f206ec9462cc5804168a3ea55bf71057fcf", @ANYRES16=r2, @ANYBLOB="010028bd7000fddbdf25010000000000000001410000001800170000000d0000000569623a636169663000000000"], 0x34}, 0x1, 0x0, 0x0, 0x4004}, 0x80) r3 = socket$inet(0x10, 0x3, 0x0) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000200)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000100)=@gettfilter={0x34, 0x2e, 0x10, 0x70bd27, 0x25dfdbfe, {0x0, 0x0, 0x0, 0x0, {0xa}, {0x0, 0x6}, {0x8, 0xfff1}}, [{0x8, 0xb, 0x6}, {0x8, 0xb, 0x9}]}, 0x34}}, 0x0) r4 = openat$tun(0xffffffffffffff9c, &(0x7f0000000040), 0x1c1341, 0x0) ioctl$TUNSETIFF(r4, 0x400454ca, &(0x7f0000000000)={'syzkaller0\x00', 0x84aebfbd6349b7f2}) r5 = openat$tun(0xffffffffffffff9c, &(0x7f0000000280), 0x0, 0x0) socket$nl_generic(0x10, 0x3, 0x10) syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) socket(0x18, 0x0, 0x1) openat$tun(0xffffffffffffff9c, &(0x7f0000000000), 0x40241, 0x0) socket$kcm(0x2, 0x3, 0x2) r6 = socket$xdp(0x2c, 0x3, 0x0) setsockopt$XDP_UMEM_REG(r6, 0x11b, 0x4, &(0x7f00000000c0)={&(0x7f0000000000)=""/74, 0x328000, 0x1000}, 0x1c) setsockopt$XDP_UMEM_COMPLETION_RING(r6, 0x11b, 0x6, &(0x7f0000000080)=0x1, 0x4) r7 = socket$inet6_udplite(0xa, 0x2, 0x88) setsockopt$XDP_RX_RING(r6, 0x11b, 0x2, &(0x7f0000001980)=0x100, 0x4) ioctl$ifreq_SIOCGIFINDEX_batadv_hard(r7, 0x8933, &(0x7f0000000180)={'batadv_slave_0\x00', 0x0}) setsockopt$XDP_UMEM_FILL_RING(r6, 0x11b, 0x5, &(0x7f0000000140)=0x1, 0x4) bind$xdp(r6, &(0x7f0000000100)={0x2c, 0x2, r8}, 0x10) pselect6(0x40, &(0x7f00000001c0)={0x0, 0x40000000000, 0x3, 0x4, 0x8, 0xdc, 0x800003}, 0x0, &(0x7f0000000280)={0x3ff, 0x0, 0x2b, 0x9, 0x0, 0x0, 0x7fffffff}, 0x0, 0x0) syz_emit_ethernet(0x2a, &(0x7f0000000100)={@link_local={0x1, 0x80, 0xc2, 0x0, 0x0, 0x1}, @link_local, @void, {@ipv4={0x800, @udp={{0x5, 0x4, 0x0, 0x0, 0x1c, 0x0, 0x0, 0x0, 0x11, 0x0, @private=0x800001c, @multicast1}, {0x0, 0x17c1, 0x8}}}}}, 0x0) close(r5) socket$nl_generic(0x10, 0x3, 0x10) ioctl$SIOCSIFHWADDR(r5, 0x8914, &(0x7f0000002280)={'syzkaller0\x00', @link_local={0x1, 0x80, 0xc2, 0x0, 0x0, 0xe}}) write$cgroup_subtree(r4, &(0x7f0000000100)=ANY=[], 0x280) ioctl$sock_SIOCGIFINDEX(r3, 0x8933, &(0x7f0000000300)={'bond0\x00'}) ioctl$TUNSETCARRIER(r5, 0x400454e2, &(0x7f0000000080)=0x1) 964.983927ms ago: executing program 2 (id=4704): r0 = openat$tun(0xffffffffffffff9c, &(0x7f00000003c0), 0x1c1341, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f00000000c0)={'syzkaller0\x00', 0x8000}) close(0xffffffffffffffff) r1 = socket$nl_generic(0x10, 0x3, 0x10) r2 = syz_genetlink_get_family_id$tipc(&(0x7f0000000200), 0xffffffffffffffff) sendmsg$TIPC_CMD_ENABLE_BEARER(r1, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000680)=ANY=[@ANYBLOB='8\x00\x00\x00', @ANYRES16=r2, @ANYBLOB="010000000d0000000000010000000000000001410000001c001700000000000000006574683a73797a6b616c6c657230"], 0x38}}, 0x0) ioctl$SIOCSIFHWADDR(0xffffffffffffffff, 0x8914, &(0x7f0000002280)={'syzkaller0\x00', @multicast}) r3 = accept$phonet_pipe(0xffffffffffffffff, &(0x7f0000000000), &(0x7f0000000040)=0x10) writev(r3, &(0x7f0000000100)=[{&(0x7f0000000080)="f577bec21747", 0x6}], 0x1) 820.64076ms ago: executing program 1 (id=4706): r0 = socket$nl_route(0x10, 0x3, 0x0) socket(0x10, 0x803, 0x0) (async) r1 = socket(0x10, 0x803, 0x0) r2 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r1, &(0x7f0000000140)={0x0, 0xffffffffffffff34, &(0x7f0000000080)={0x0, 0xb8}}, 0x0) (async) sendmsg$nl_route_sched(r1, &(0x7f0000000140)={0x0, 0xffffffffffffff34, &(0x7f0000000080)={0x0, 0xb8}}, 0x0) getsockname$packet(r1, &(0x7f0000000340)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000000)=0x14) (async) getsockname$packet(r1, &(0x7f0000000340)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000000)=0x14) sendmsg$nl_route(r2, &(0x7f0000000180)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000240)=ANY=[@ANYBLOB="34000000100081eee80000040000000010000000", @ANYRES32=r3, @ANYBLOB="ddfffffdff000000140012000c000100627269646765"], 0x34}}, 0x0) sendmsg$nl_route(r0, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000140)=@ipv4_newaddr={0x20, 0x14, 0x1, 0x0, 0x0, {0x2, 0x0, 0x0, 0xff, r3}, [@IFA_LOCAL={0x8, 0x2, @local}]}, 0x20}}, 0x0) r4 = socket$inet(0x2, 0x3, 0x2) setsockopt$inet_mreqsrc(r4, 0x0, 0x27, &(0x7f0000000040)={@multicast2, @local}, 0xc) r5 = socket(0x10, 0x803, 0x4) sendmsg$nl_route(r5, &(0x7f0000000300)={0x0, 0x0, &(0x7f00000002c0)={0x0, 0x1c}, 0x1, 0x0, 0x0, 0x20088814}, 0x0) (async) sendmsg$nl_route(r5, &(0x7f0000000300)={0x0, 0x0, &(0x7f00000002c0)={0x0, 0x1c}, 0x1, 0x0, 0x0, 0x20088814}, 0x0) socket$inet_icmp_raw(0x2, 0x3, 0x1) (async) r6 = socket$inet_icmp_raw(0x2, 0x3, 0x1) setsockopt$inet_mreq(r6, 0x0, 0x23, &(0x7f0000000000)={@multicast1=0xe0000300, @local}, 0x8) getsockname$packet(r5, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000080)=0x14) sendmsg$nl_route_sched(r0, &(0x7f0000000280)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000400)=@gettaction={0x90, 0x32, 0x400, 0x70bd2d, 0x25dfdbfd, {}, [@action_dump_flags=@TCA_ROOT_FLAGS={0xc, 0x2, {0x0, 0x1}}, @action_gd=@TCA_ACT_TAB={0x10, 0x1, [{0x1, 0xe, 0x0, 0x0, @TCA_ACT_INDEX={0x8, 0x3, 0x10001}}]}, @action_gd=@TCA_ACT_TAB={0x30, 0x1, [{0xc, 0x1a, 0x0, 0x0, @TCA_ACT_INDEX={0x8, 0x3, 0x3}}, {0x10, 0x8, 0x0, 0x0, @TCA_ACT_KIND={0x9, 0x1, 'csum\x00'}}, {0x10, 0x4, 0x0, 0x0, @TCA_ACT_KIND={0xc, 0x1, 'skbedit\x00'}}]}, @action_gd=@TCA_ACT_TAB={0x30, 0x1, [{0x10, 0xa, 0x0, 0x0, @TCA_ACT_KIND={0xa, 0x1, 'pedit\x00'}}, {0xc, 0x16, 0x0, 0x0, @TCA_ACT_INDEX={0x8, 0x3, 0x8}}, {0x10, 0x1, 0x0, 0x0, @TCA_ACT_KIND={0x9, 0x1, 'vlan\x00'}}]}]}, 0x90}}, 0x0) 749.954837ms ago: executing program 5 (id=4707): socket$nl_route(0x10, 0x3, 0x0) r0 = socket(0x1e, 0x4, 0x0) setsockopt$packet_tx_ring(r0, 0x10f, 0x87, &(0x7f0000000140)=@req3={0x7813, 0x3, 0x0, 0x81, 0x1ff, 0x1, 0x1}, 0x1c) bind$tipc(r0, 0x0, 0x0) r1 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_ipv4_tunnel_SIOCGETTUNNEL(r0, 0x89f0, &(0x7f00000001c0)={'erspan0\x00', &(0x7f0000000180)={'gre0\x00', 0x0, 0x7810, 0x20, 0xfffffff8, 0x5, {{0x7, 0x4, 0x3, 0x20, 0x1c, 0x66, 0x0, 0x2, 0x2f, 0x0, @broadcast, @private=0xa010101, {[@timestamp={0x44, 0x8, 0x97, 0x0, 0xa, [0xfe4]}]}}}}}) sendmsg$nl_route_sched(r0, &(0x7f00000002c0)={&(0x7f0000000080)={0x10, 0x0, 0x0, 0x1000000}, 0xc, &(0x7f0000000280)={&(0x7f0000000200)=@getchain={0x34, 0x66, 0x200, 0x70bd2d, 0x25dfdbff, {0x0, 0x0, 0x0, r2, {0x10, 0xe}, {0x7, 0xfff2}, {0xfff3, 0x4}}, [{0x8}, {0x8, 0xb, 0x7}]}, 0x34}, 0x1, 0x0, 0x0, 0x4004}, 0x20008000) sendmsg$MPTCP_PM_CMD_SET_FLAGS(r1, 0x0, 0x20040000) ioctl$sock_ipv4_tunnel_SIOCADDTUNNEL(0xffffffffffffffff, 0x89f1, 0x0) r3 = socket(0x840000000002, 0x3, 0x100) setsockopt$WPAN_SECURITY_LEVEL(r3, 0x0, 0x2, 0x0, 0x0) connect$inet(r3, &(0x7f0000000000)={0x2, 0x0, @remote}, 0x10) r4 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$IP6T_SO_SET_REPLACE(r4, 0x29, 0x40, &(0x7f0000000980)=@filter={'filter\x00', 0x4, 0x4, 0x340, 0xffffffff, 0x0, 0x0, 0xd0, 0xfeffffff, 0xffffffff, 0x270, 0x270, 0x270, 0xffffffff, 0x4, 0x0, {[{{@uncond, 0x2f2, 0xa8, 0xd0}, @REJECT={0x28, 'REJECT\x00', 0x0, {0x5}}}, {{@uncond, 0x0, 0xa8, 0xd0}, @common=@unspec=@STANDARD={0x28, '\x00', 0x0, 0x270}}, {{@ipv6={@private0, @loopback, [0xff, 0x0, 0xff000000], [0x0, 0xff, 0xff000000, 0xffffff00], 'team0\x00', 'batadv_slave_0\x00', {0xff}, {}, 0xff, 0xe7, 0x4, 0x44}, 0x0, 0xa8, 0xd0}, @common=@unspec=@NFQUEUE3={0x28, 'NFQUEUE\x00', 0x3, {0x9, 0x8, 0x1}}}], {{'\x00', 0x0, 0xa8, 0xd0}, {0x28}}}}, 0x3a0) syz_emit_ethernet(0x34, &(0x7f00000004c0)={@local, @random="99879e18f3ff", @void, {@generic={0x8906, "434b5682f8682ed45b171376ad6a4e38b7aea7854bdfacbcb6245fd5539d8ffe6a8f98cecd73"}}}, 0x0) sendmmsg$inet(r3, &(0x7f0000003f80)=[{{0x0, 0x0, 0x0}}], 0x1, 0x0) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000000)=@newqdisc={0x34, 0x24, 0x3fe3aa0262d8c583, 0x70bd2c, 0x0, {0x0, 0x0, 0x0, 0x0, {0x0, 0xfff3}, {0xffff, 0xffff}, {0x6}}, [@qdisc_kind_options=@q_fq_pie={{0xb}, {0x4, 0x8002}}]}, 0x34}, 0x1, 0x0, 0x0, 0x2}, 0x2000400c) sendmsg$MPTCP_PM_CMD_SET_FLAGS(r0, 0x0, 0x24044000) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000cc0)={0x3, 0x11, 0x0, 0x0, 0x3, 0x0, 0x0, 0x1f00}, 0x94) ioctl$sock_ipv4_tunnel_SIOCGETTUNNEL(0xffffffffffffffff, 0x89f0, &(0x7f00000000c0)={'syztnl2\x00', 0x0}) r5 = socket$inet_sctp(0x2, 0x1, 0x84) setsockopt$IP_VS_SO_SET_ADD(r5, 0x0, 0x482, &(0x7f0000000040)={0x84, @remote, 0x4e24, 0x3, 'lblcr\x00', 0x1, 0x1, 0x8}, 0x2c) r6 = socket$kcm(0xa, 0x2, 0x0) sendmsg$NFT_BATCH(0xffffffffffffffff, 0x0, 0x10) sendmsg$NFT_MSG_GETCHAIN(0xffffffffffffffff, &(0x7f00000003c0)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000240)=ANY=[@ANYBLOB="2c000000040a020000020900010073797a30000000000900030073797a3200000000ef000000000000000000"], 0x2c}, 0x1, 0x0, 0x0, 0x8080}, 0x4004000) r7 = socket$inet_sctp(0x2, 0x1, 0x84) setsockopt$IP_VS_SO_SET_ADDDEST(r5, 0x0, 0x487, &(0x7f0000000000)={{0x84, @private=0xa010101, 0x4e21, 0x3, 'wrr\x00', 0x23, 0x81, 0x5}, {@dev={0xac, 0x14, 0x14, 0x3c}, 0x4e23, 0x10000, 0x1cb, 0x12d61, 0x12d58}}, 0x44) setsockopt$IP_VS_SO_SET_ADDDEST(r7, 0x0, 0x487, &(0x7f0000000000)={{0x84, @rand_addr=0x64010100, 0x4e24, 0x3, 'lc\x00', 0x8, 0x323b, 0x55}, {@remote, 0x4e23, 0x10000, 0x0, 0x12d5c, 0x12d5c}}, 0x44) sendmsg$sock(r6, &(0x7f0000000400)={&(0x7f0000000580)=@in6={0x2, 0x4e22, 0x0, @dev, 0xfffffffc}, 0x80, 0x0, 0x0, &(0x7f0000000000)=[@mark={{0x14, 0x1, 0x24, 0x3}}], 0x18}, 0x0) 684.305974ms ago: executing program 2 (id=4708): r0 = bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f00000007c0)=ANY=[@ANYBLOB="1b0000000000000000000000000004"], 0x48) r1 = openat$tcp_mem(0xffffffffffffff9c, &(0x7f00000002c0)='/proc/sys/net/ipv4/tcp_wmem\x00', 0x1, 0x0) epoll_ctl$EPOLL_CTL_MOD(0xffffffffffffffff, 0x3, 0xffffffffffffffff, &(0x7f00000000c0)={0x2}) ioctl$BTRFS_IOC_QGROUP_LIMIT(r1, 0x8030942b, &(0x7f0000000300)={0x7680000000, {0x31, 0x0, 0x3, 0xffffffffd7b5b349, 0x6}}) bpf$BPF_BTF_GET_NEXT_ID(0x17, &(0x7f0000000040)={0xb11}, 0x8) (async) bpf$BPF_BTF_GET_NEXT_ID(0x17, &(0x7f0000000040)={0xb11, 0x0}, 0x8) r3 = bpf$BPF_BTF_LOAD(0x12, &(0x7f00000001c0)={&(0x7f0000000080)={{0xeb9f, 0x1, 0x0, 0x18, 0x0, 0x30, 0x30, 0x3, [@volatile={0xa, 0x0, 0x0, 0x9, 0x3}, @restrict={0xb, 0x0, 0x0, 0xb, 0x2}, @restrict={0xe, 0x0, 0x0, 0xb, 0x2}, @fwd={0xc}]}, {0x0, [0x5f]}}, &(0x7f0000000100)=""/143, 0x4b, 0x8f, 0x0, 0x248e, 0x10000}, 0x28) bpf$PROG_LOAD(0x5, &(0x7f0000000200)={0x15, 0xf, &(0x7f0000000000)=ANY=[@ANYRES32=r0], &(0x7f0000000980)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x28, '\x00', 0x0, @sk_reuseport, r3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, r2, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) (async) bpf$PROG_LOAD(0x5, &(0x7f0000000200)={0x15, 0xf, &(0x7f0000000000)=ANY=[@ANYRES32=r0], &(0x7f0000000980)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x28, '\x00', 0x0, @sk_reuseport, r3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, r2, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) 680.75054ms ago: executing program 1 (id=4709): r0 = socket(0x10, 0x3, 0x0) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000a00)={0xffffffffffffffff}) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000000)={'vlan0\x00', 0x0}) sendmsg$nl_route_sched(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000002c0)=@newqdisc={0x44, 0x24, 0xd0f, 0x0, 0x0, {0x60, 0x0, 0x0, r2, {0x0, 0xe}, {0xffff, 0xffff}}, [@qdisc_kind_options=@q_gred={{0x9}, {0x14, 0x2, [@TCA_GRED_DPS={0x10, 0x3, {0x100012, 0x10000000, 0x1, 0x7}}]}}]}, 0x44}}, 0x0) 617.617518ms ago: executing program 2 (id=4710): syz_emit_ethernet(0xfdef, &(0x7f0000000180)={@local, @empty, @void, {@ipv4={0x800, @udp={{0x5, 0x4, 0x0, 0x0, 0xfde1, 0x0, 0x0, 0x0, 0x11, 0x0, @empty=0x700, @empty}, {0x0, 0x4e22, 0x18, 0x0, @wg=@data}}}}}, 0x0) r0 = openat$ppp(0xffffffffffffff9c, &(0x7f0000001740), 0x0, 0x0) ioctl$PPPIOCNEWUNIT(r0, 0xc004743e, &(0x7f00000001c0)=0x1) ioctl$PPPIOCSMRRU(r0, 0x4004743b, &(0x7f0000000000)=0xc) ioctl$PPPIOCSACTIVE(r0, 0x40107446, &(0x7f00000003c0)={0xfd58, 0x0}) r1 = socket$netlink(0x10, 0x3, 0x0) r2 = socket(0x10, 0x803, 0x0) syz_genetlink_get_family_id$tipc2(&(0x7f00000002c0), r2) getsockname$packet(r2, &(0x7f0000000380)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route(r1, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000008c0)=ANY=[@ANYBLOB="480000001000050700"/20, @ANYRES32=r3, @ANYBLOB="0000000000000000280012000c00010076657468"], 0x48}}, 0x0) sendmsg$nl_route_sched(r1, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000100)={&(0x7f00000000c0)=@newqdisc={0x38, 0x24, 0xf1d, 0x0, 0x25dfdbfe, {0x0, 0x0, 0x0, r3, {}, {0xffff, 0xffff}}, [@qdisc_kind_options=@q_skbprio={{0xc}, {0x8, 0x2, 0x1}}]}, 0x38}}, 0x0) r4 = socket$inet_udp(0x2, 0x2, 0x0) setsockopt$inet_group_source_req(r4, 0x0, 0x29, &(0x7f0000000340)={0x1000, {{0x2, 0x0, @initdev={0xac, 0x1e, 0x0, 0x0}}}, {{0x2, 0x0, @multicast2}}}, 0x108) getsockopt$inet_buf(r4, 0x0, 0x30, &(0x7f0000000340)=""/225, &(0x7f0000000180)=0xe1) r5 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000040)='blkio.bfq.sectors\x00', 0x275a, 0x0) r6 = socket$nl_netfilter(0x10, 0x3, 0xc) r7 = bpf$PROG_LOAD(0x5, 0x0, 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000480)={&(0x7f0000000000)='kmem_cache_free\x00', r7, 0x0, 0xd4}, 0x18) bpf$MAP_CREATE(0x0, 0x0, 0x48) r8 = socket$nl_route(0x10, 0x3, 0x0) bpf$MAP_CREATE(0xe4ffffff00000000, &(0x7f0000004440)=@base={0x14, 0x4, 0x4, 0x7, 0x0, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x2, 0x1}, 0x48) sendmsg$nl_route(r8, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000200)=ANY=[@ANYBLOB="3000000010000100"/20, @ANYRES32=0x0, @ANYBLOB='\x00\x00\x00\x00\x00\x00\x00\x00\b\x00\n\x00', @ANYRES32=0x0, @ANYBLOB="08001b"], 0x30}}, 0x0) r9 = socket$nl_generic(0x10, 0x3, 0x10) r10 = syz_genetlink_get_family_id$team(&(0x7f00000044c0), 0xffffffffffffffff) ioctl$ifreq_SIOCGIFINDEX_team(r9, 0x8933, &(0x7f0000004700)={'team0\x00', 0x0}) sendmsg$TEAM_CMD_OPTIONS_SET(r9, &(0x7f0000004bc0)={0x0, 0x0, &(0x7f0000004b80)={&(0x7f0000000100)={0x60, r10, 0x405, 0x70bd27, 0x25dfdbfe, {}, [{{0x8, 0x1, r11}, {0x44, 0x2, 0x0, 0x1, [{0x40, 0x1, @name={{0x24}, {0x5}, {0x10, 0x4, 'loadbalance\x00'}}}]}}]}, 0x60}, 0x1, 0x0, 0x0, 0x4000431}, 0x4040084) sendmsg$IPSET_CMD_CREATE(r6, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000003c0)={0x4c, 0x2, 0x6, 0x5, 0x0, 0x0, {}, [@IPSET_ATTR_REVISION={0x5}, @IPSET_ATTR_SETNAME={0x9, 0x2, 'syz2\x00'}, @IPSET_ATTR_FAMILY={0x5}, @IPSET_ATTR_PROTOCOL={0x5, 0x1, 0x6}, @IPSET_ATTR_TYPENAME={0x13, 0x3, 'hash:net,iface\x00'}]}, 0x4c}}, 0x0) recvmsg(r5, 0x0, 0x0) sendmsg$nl_route_sched(r2, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000340)=@gettclass={0x24, 0x2a, 0x129, 0x870bd2c, 0x0, {0x0, 0x0, 0x0, r3, {0x0, 0x3}, {}, {0x0, 0xe}}}, 0x24}}, 0x40004) read(0xffffffffffffffff, &(0x7f0000000080)=""/219, 0xdb) 598.900675ms ago: executing program 5 (id=4711): r0 = socket(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000000b80)={0x0, 0x0, &(0x7f0000000b40)={&(0x7f00000008c0)=@setlink={0x30, 0x13, 0x709, 0x0, 0x0, {}, [@IFLA_NET_NS_PID={0x8}, @IFLA_TARGET_NETNSID={0x8}]}, 0x30}}, 0x0) r1 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r1, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000001140)={&(0x7f00000000c0)=@newlink={0x38, 0x10, 0x503, 0x0, 0x0, {}, [@IFLA_LINKINFO={0x18, 0x12, 0x0, 0x1, @vti={{0x10}, {0xc, 0x2, 0x0, 0x1, [@vti_common_policy=[@IFLA_VTI_IKEY={0x8}]]}}}]}, 0x38}, 0x1, 0x7500}, 0x0) socket(0x10, 0x3, 0x0) (async) sendmsg$nl_route(r0, &(0x7f0000000b80)={0x0, 0x0, &(0x7f0000000b40)={&(0x7f00000008c0)=@setlink={0x30, 0x13, 0x709, 0x0, 0x0, {}, [@IFLA_NET_NS_PID={0x8}, @IFLA_TARGET_NETNSID={0x8}]}, 0x30}}, 0x0) (async) socket$nl_route(0x10, 0x3, 0x0) (async) sendmsg$nl_route(r1, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000001140)={&(0x7f00000000c0)=@newlink={0x38, 0x10, 0x503, 0x0, 0x0, {}, [@IFLA_LINKINFO={0x18, 0x12, 0x0, 0x1, @vti={{0x10}, {0xc, 0x2, 0x0, 0x1, [@vti_common_policy=[@IFLA_VTI_IKEY={0x8}]]}}}]}, 0x38}, 0x1, 0x7500}, 0x0) (async) 527.667078ms ago: executing program 1 (id=4712): r0 = socket$nl_route(0x10, 0x3, 0x0) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000600)={0x3, 0x3, &(0x7f0000000000)=@framed={{0x62, 0xa, 0x0, 0xffc4, 0x0, 0x71, 0x10, 0x76}}, &(0x7f0000000480)='GPL\x00'}, 0x90) r1 = socket(0x10, 0x3, 0x0) sendmsg$nl_generic(r1, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000780)={0x12, 0x4f, 0x1}, 0x14}}, 0x0) sendmsg$nl_route(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000001c0)=ANY=[@ANYBLOB="08010000100001002dbd7000fddbdf2500000000", @ANYRES32=0x0, @ANYBLOB="0221000000000000140003006e657464657673696d300000", @ANYRES32=0x0, @ANYBLOB="cc001680c80001800c0005"], 0x108}}, 0x24040800) 428.724797ms ago: executing program 1 (id=4713): r0 = socket$inet_mptcp(0x2, 0x1, 0x106) ioctl$int_in(r0, 0x5452, 0x0) r1 = socket$nl_route(0x10, 0x3, 0x0) r2 = socket$nl_generic(0x10, 0x3, 0x10) r3 = syz_genetlink_get_family_id$tipc(&(0x7f00000000c0), 0xffffffffffffffff) r4 = socket$nl_generic(0x10, 0x3, 0x10) r5 = syz_genetlink_get_family_id$nl80211(&(0x7f00000000c0), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r4, 0x8933, &(0x7f0000000100)={'wlan0\x00', 0x0}) sendmsg$NL80211_CMD_SET_TX_BITRATE_MASK(r4, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000440)={0x38, r5, 0x1, 0x0, 0x0, {{}, {@val={0x8, 0x3, r6}, @void}}, [@NL80211_ATTR_TX_RATES={0x1c, 0x5a, 0x0, 0x1, [@NL80211_BAND_6GHZ={0x18, 0x3, 0x0, 0x1, [@NL80211_TXRATE_HE={0x14, 0x5, {[0x0, 0x4, 0x0, 0xfff9, 0x81, 0x80, 0x2, 0x4]}}]}]}]}, 0x38}}, 0x0) sendmsg$TIPC_CMD_RESET_LINK_STATS(r2, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000140)={&(0x7f00000003c0)=ANY=[@ANYBLOB="240f8d63113931d7c299ebcbdb3c7a27d2c883fba4d00f806ecc8a50adc3e396de08ec99a10e91f4561c7517f89d854ef8b81dcfd4fe0445467fe8abe4372c71d51c444675f7ccf9da93fd78cfb07360dafcc583936afbd1c8c644cf936d38cf9cebaabdaf3369c6674ea017290f41a333512ad8b8ba5d84b67a3cf102ddb98155f7a0a900b9e7c0606804bb7daf2626619f54219b3534553a9f429318724c6e0dd85225591a", @ANYRES16=r3, @ANYBLOB="0100000000000000000001000000000000000c4100000014001462726f6164636173742d6c696e6b0000"], 0x30}}, 0x0) sendmsg$netlink(r1, &(0x7f00000047c0)={0x0, 0x0, &(0x7f0000000040)=[{&(0x7f0000000000)=ANY=[@ANYBLOB="140000005f0001"], 0x14}, {&(0x7f00000004c0)=ANY=[@ANYBLOB="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"], 0x1fc}], 0x2}, 0x0) 360.843178ms ago: executing program 6 (id=4714): syz_emit_ethernet(0x3b6, &(0x7f0000000200)={@local, @dev={'\xaa\xaa\xaa\xaa\xaa', 0x22}, @void, {@ipv6={0x86dd, @icmpv6={0x0, 0x6, "cabf00", 0x380, 0x3a, 0xff, @remote, @mcast2, {[], @ndisc_ra={0x86, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, [{0x0, 0xa, "a78ce54006598080a8030037004023493b87aafaffffffffffffff23732472eefa45ad96579269748e254c1e4a8a8b3f0ab0c430d3be27df3e34066d42ca0a5c15b37adac15084dbaf736b41e5af2502"}, {0x0, 0x1, "000000050000000026000400"}, {0x0, 0x18, "fe906d26efe39393fe08f73eabc5977b1190a3a6ad8338f1511cdd10c35d8f6de79fc7fd175f75649fa368a32c829af02d7f44d92324a7051e460a13ddde25a5b85b9d930914625d8a049b4cf0d129806a610ad8477a2499a9a0527f75b655a6653d0363a979acf93f88eea07d68423e90280409de1657275f716a2bf2915d1783e8eb477b0d1170f0ecbdef4c23e1b76e9ab3d2fbe4b34438d2a77577edd0ebed9682b851b380ae0cab282af9d7ebe668177704c5fd4698c934de4731f3f61effc978"}, {0x0, 0x1d, "06aa85616177c41bc943afcb84619755403946b0730a18d5c38cf7dcad830f2dc8674b87ba8b58f81ece27975cc39e595e9af90b4fe92a38d25551c2d9ebfc5dfc5a2a501b7e483de3f808895c5f4a1a2367bc591dd8b094822ff0dea07c9a1f643c822a18b79f7c5eba31fb68b2d734a6671e27182aee96f24a4a5cf390dab23b500b0c0272479611e4f7f4299ec4d926d443367b105185e6ecd9602ba95392343e9bbd047ef6bc1ba42399907ccd0a562db212baa39eb8164e240069f656d3a05fecf894222a141123f5ac010000000000000090aa235a670670ffc5dc49dfb58d00000000000000"}, {0x4, 0xb, "17dcea46805d4809c20547406b18901b0aeff04c0300f3c75dc2d227a83b89483be298af1084743475671545e65eb2e9ac946a3f0e2bc4619f91394c02bcfbbb7d71138537d68e2d2c6393a9f3becd1a9f51a948b5b303"}, {0x21, 0x7, "b8a3e100908f61640000000200fe80ffff00000000000000ff0bc0fe00000000008879e66485201a0015ca83747357a027450004000000"}, {0x0, 0x14, "5e14f0e74d2d42cfb3f27fafb60845f90b6dfc2e37bc87c6905bbc94d33e1ea71a28105f543e868a8a53b360a9d33e2b1e26eb1d18065daa7628cf9ef083611c9f6ae2e1eb3d8bf9c6ab2642c4808288e62afbf03269f1f98aea6ab3beb5fdc5fdaabc2c676d8800871a6aa54155dea2d995cb22c9924e0ad38c6967052cc7786d779b8353aac33a57d79b05613a12328f61129017fb632dbf04542188b196e213408c"}, {0x0, 0x5, "d5170000dce9674a36da018dff16e70b8b14c4b7a94fe18e88605aa6be1a02a326a6bce65f81ed"}]}}}}}}, 0x0) bpf$PROG_LOAD(0x5, &(0x7f000000e000)={0x4, 0x4, &(0x7f00000008c0)=ANY=[@ANYRES64=0x0], &(0x7f0000000040)='GPL\x00', 0x5, 0xc3, &(0x7f000000cf3d)=""/195, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x19, &(0x7f0000000000), 0x8, 0x10, &(0x7f0000000000), 0x10}, 0x94) 356.696661ms ago: executing program 1 (id=4715): pipe(&(0x7f0000019480)={0xffffffffffffffff, 0xffffffffffffffff}) close(r0) r1 = socket(0x2a, 0x2, 0x0) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000000400)={&(0x7f00000005c0)=@newqdisc={0x24, 0x24, 0x0, 0x0, 0x0, {0x0, 0x0, 0x0, 0x0, {0x0, 0xe}, {0x0, 0xfff3}}}, 0x24}}, 0x0) getsockname$packet(r1, &(0x7f0000000200)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000040)=0x14) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000440)=@newqdisc={0x44, 0x24, 0xf0b, 0x0, 0x0, {0x0, 0x0, 0x0, r2, {}, {0xffff, 0xffff}}, [@qdisc_kind_options=@q_hfsc={{0x9}, {0x14, 0x2, @TCA_HFSC_FSC={0x10, 0x2, {0x9, 0x1}}}}]}, 0x44}}, 0x0) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000680)=@newtfilter={0x44, 0x2c, 0xd27, 0x0, 0x0, {0x0, 0x0, 0x0, r2, {0x0, 0x9}, {}, {0x1, 0xfff1}}, [@filter_kind_options=@f_bpf={{0x8}, {0x18, 0x2, [@TCA_BPF_OPS={{0x6}, {0x4}}, @TCA_BPF_FLAGS={0x8, 0x8, 0xb}]}}]}, 0x44}}, 0x1) r3 = socket$netlink(0x10, 0x3, 0x0) sendmmsg(r3, &(0x7f00000002c0), 0x40000000000009f, 0x0) setsockopt$inet_tcp_TCP_REPAIR(r0, 0x6, 0x13, &(0x7f0000000300)=0x1, 0x4) sendmsg$nl_generic(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000280)=ANY=[], 0x14}}, 0x0) sendto$inet(r0, &(0x7f0000000340)="1bbf", 0x2, 0x14, 0x0, 0x0) ioctl$ifreq_SIOCGIFINDEX_wireguard(0xffffffffffffffff, 0x8933, &(0x7f0000000080)={'wg2\x00', 0x0}) sendmsg$xdp(r0, &(0x7f00000001c0)={&(0x7f00000000c0)={0x2c, 0x6, r4, 0x2c}, 0x10, &(0x7f0000000100)=[{&(0x7f0000001580)="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", 0x1000}, {&(0x7f0000000280)="80ab1228cd97a75e4418f955b07ed0da7d4b733c6cc43e91d88821cd440bbb9a4053521711111c531f4417bb0eed4aa7b767bb0c612f23cf1db8c0e4dbdbe481c662232b30c03cf4ddfe24f57e17d382553bbe677ad5ca7db3265b9728770ef2cb65da3775978d85b1898d1570bee5a792cfcd3989529985dc091459986616b4ebaee466cffcf70e2e3c7240f075edb198ac", 0x92}, {&(0x7f0000002580)="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", 0x1000}, {&(0x7f0000000400)="544e945bbd584594e99a9d000b46856d8181883b5f634a700041e028221a796226b35a3cd59f6399a76e6d12f4df56f4636f7fd13bd1a103998b919c6c75dd8b3c82107eedc645868912d92d7ff2c533a13e9b628e5bccbd241dc775f4d61b154f036c6d3bd150b7dbddb9c7609dc20fb2c947c2af1cb10a8b5c5d47e7a263346f382ad8abe876bd0e6435ff6cab2e70cd11b5d14fd7ff94d4f4f59c22a00551514fec2ac563c6d03ad0b5af0208f93a93e1c528114fe0a4de32ed0f7cd9c82aac2ea82617d06dedcd90ef57", 0xcc}], 0x4, 0x0, 0x0, 0x40000}, 0x0) ioctl$sock_SIOCGPGRP(r0, 0x8904, &(0x7f0000000200)=0x0) r6 = openat$tun(0xffffffffffffff9c, &(0x7f0000000000), 0x48241, 0x0) ioctl$TUNSETIFF(r6, 0x400454ca, &(0x7f00000000c0)={'syzkaller1\x00', 0x6bf1c2d5adba8c32}) r7 = socket$kcm(0x2, 0xa, 0x2) ioctl$SIOCSIFHWADDR(r7, 0x8914, &(0x7f0000000180)={'syzkaller1\x00', @link_local}) r8 = socket$nl_netfilter(0x10, 0x3, 0xc) r9 = socket$alg(0x26, 0x5, 0x0) bind$alg(r9, &(0x7f0000000040)={0x26, 'aead\x00', 0x0, 0x0, 'generic-gcm-aesni\x00'}, 0x58) setsockopt$ALG_SET_KEY(r9, 0x117, 0x1, &(0x7f0000000000)="adcd1a9a3fc36e961ed00fe41b0cd695", 0x20) r10 = accept4$alg(r9, 0x0, 0x0, 0x0) sendmmsg$alg(r10, &(0x7f00000021c0)=[{0x0, 0x0, &(0x7f0000001000)=[{&(0x7f0000000100)="a92e81d0991808e33c2330164cf023df", 0x10}], 0x1, 0x0, 0x0, 0x880}], 0x1, 0x80001) recvmmsg(r10, &(0x7f0000000b00)=[{{0x0, 0x0, &(0x7f00000007c0)=[{&(0x7f0000001080)=""/4096, 0x1000}], 0x1}, 0x40}], 0x1, 0x102, 0x0) sendmsg$NFT_BATCH(r8, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000240)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a20000000000a03000000000000000000010000000900010073797a30000000006c000000160a01020000000000000000010000000900010073797a30000000000900020073797a3000000000400003802c00038004000100766c616e31000000000000000000000014000100776c616e3100000000000000000000000800014000000000080002"], 0xfc}}, 0x0) write$tun(r6, &(0x7f0000000200)={@val, @void, @eth={@multicast, @multicast, @val={@val={0x88a8, 0x5, 0x1, 0x4}, {0x8100, 0x6, 0x0, 0x6}}, {@ipv4={0x800, @generic={{0x5, 0x4, 0x1, 0x6, 0x14, 0xe4, 0x0, 0x8, 0x11, 0x0, @dev={0xac, 0x14, 0x14, 0x29}, @loopback}}}}}}, 0x2e) syz_open_procfs$namespace(r5, &(0x7f0000000380)='ns/user\x00') sendmsg$NBD_CMD_CONNECT(0xffffffffffffffff, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000003c0)=ANY=[@ANYBLOB='h\x00\x00\x00', @ANYRES16, @ANYBLOB="0100000000000000000001"], 0x6c}, 0x1, 0x0, 0x0, 0x4000885}, 0x0) 356.26306ms ago: executing program 5 (id=4716): r0 = socket$nl_rdma(0x10, 0x3, 0x14) sendmsg$RDMA_NLDEV_CMD_RES_CM_ID_GET(r0, &(0x7f0000013c00)={0x0, 0x0, &(0x7f0000013bc0)={&(0x7f00000002c0)=ANY=[@ANYBLOB="30280000001b140100000000000d000000080004"], 0x28}, 0x1, 0x0, 0x0, 0x4855}, 0x0) bpf$BPF_MAP_CONST_STR_FREEZE(0x16, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}, 0x4) socketpair$nbd(0x1, 0x1, 0x0, 0x0) r2 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000013c0)={0x11, 0x3, &(0x7f0000000080)=@framed, &(0x7f0000000000)='syzkaller\x00'}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000000c0)={&(0x7f0000000040)='contention_end\x00', r2}, 0x10) r3 = socket$inet6(0xa, 0x2, 0x0) setsockopt$inet6_IPV6_XFRM_POLICY(r3, 0x29, 0x23, &(0x7f00000004c0)={{{@in=@empty, @in6=@dev, 0x0, 0x0, 0x0, 0x0, 0xa}}, {{@in=@multicast1, 0x0, 0x2b}, 0x0, @in6=@initdev={0xfe, 0x88, '\x00', 0x0, 0x0}, 0x0, 0x3}}, 0xe8) r4 = socket$key(0xf, 0x3, 0x2) setsockopt$sock_int(r4, 0x1, 0x8, &(0x7f00000001c0), 0x4) sendmsg$key(r4, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000005c0)=ANY=[@ANYBLOB="020b000102"], 0x10}}, 0x0) sendmsg$key(r4, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000380)={&(0x7f0000000240)=ANY=[@ANYBLOB="0212000002"], 0x10}}, 0x0) sendmsg$key(r4, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000380)={&(0x7f0000000240)=ANY=[], 0x10}}, 0x0) bpf$MAP_UPDATE_BATCH(0x1a, &(0x7f0000000240)={&(0x7f0000000040)="fa658489c48f29", &(0x7f0000000080)=""/232, &(0x7f0000000180)="1ce0b86427083043ce6f1d4733803f7466627924240061509c68053f", &(0x7f00000001c0)="44ca2b002e0c994617a926880dc587e0327d72e3c23b7699218ea5d1aafabf9ddfc70a98bfade11f4b98704c985ed4a74e0dccd7d3f1a8a2792eaa6bba0084cc", 0x0, r1}, 0x38) r5 = socket$nl_generic(0x10, 0x3, 0x10) bpf$PROG_LOAD(0x5, &(0x7f00000017c0)={0x1, 0xe, &(0x7f0000001880)=ANY=[@ANYBLOB="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"], &(0x7f0000000080)='GPL\x00', 0x7, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0x0, 0x10, &(0x7f0000000000), 0xffffffffffffff11, 0x0, 0xffffffffffffffff, 0xfffffffffffffea5}, 0x48) r6 = syz_genetlink_get_family_id$nl80211(&(0x7f00000003c0), r5) sendmsg$NL80211_CMD_AUTHENTICATE(0xffffffffffffffff, &(0x7f0000000380)={&(0x7f0000000280)={0x10, 0x0, 0x0, 0x800000}, 0xc, &(0x7f0000000340)={&(0x7f0000000300)={0x24, r6, 0x400, 0x70bd26, 0x25dfdbff, {{}, {@val={0x8}, @void}}, [@NL80211_ATTR_AUTH_TYPE={0x8, 0x35, 0x7}]}, 0x24}, 0x1, 0x0, 0x0, 0x40810}, 0x20000040) 236.695557ms ago: executing program 6 (id=4717): r0 = socket$igmp6(0xa, 0x3, 0x2) setsockopt$sock_int(r0, 0x1, 0x29, &(0x7f0000000100)=0x3ff, 0x4) setsockopt$SO_TIMESTAMPING(r0, 0x1, 0x41, &(0x7f0000000040)=0x297f, 0x4) r1 = socket$kcm(0x21, 0x2, 0xa) r2 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r2, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000140)={&(0x7f00000002c0)=@newlink={0x44, 0x10, 0x403, 0x70bd2a, 0x0, {0x0, 0x0, 0x74}, [@IFLA_LINKINFO={0x24, 0x12, 0x0, 0x1, @bridge={{0xb}, {0x14, 0x2, 0x0, 0x1, [@IFLA_BR_VLAN_STATS_ENABLED={0x5, 0x29, 0x1}, @IFLA_BR_VLAN_DEFAULT_PVID={0x6, 0x27, 0x4}]}}}]}, 0x44}}, 0x0) sendmsg$kcm(r1, &(0x7f0000000080)={&(0x7f0000000000)=@rxrpc=@in6={0x21, 0xfffc, 0x2, 0x1c, {0xa, 0x0, 0x4, @dev}}, 0x80, 0x0, 0x0, &(0x7f00000000c0)=[{0x18, 0x110, 0x1, "dc"}], 0x18}, 0xfc00) (async) sendmsg$kcm(r1, &(0x7f0000000080)={&(0x7f0000000000)=@rxrpc=@in6={0x21, 0xfffc, 0x2, 0x1c, {0xa, 0x0, 0x4, @dev}}, 0x80, 0x0, 0x0, &(0x7f00000000c0)=[{0x18, 0x110, 0x1, "dc"}], 0x18}, 0xfc00) r3 = socket$kcm(0x21, 0x2, 0xa) sendmsg$kcm(r3, &(0x7f0000000080)={&(0x7f0000000000)=@rxrpc=@in6={0x21, 0xfffc, 0x2, 0x1c, {0xa, 0x0, 0x4, @dev}}, 0x80, 0x0, 0x0, &(0x7f00000000c0)=[{0x18, 0x110, 0x1, "dc"}], 0x18}, 0xfc00) sendmmsg$inet6(r0, &(0x7f00000000c0)=[{{&(0x7f00000001c0)={0xa, 0x0, 0x0, @mcast2}, 0x1c, 0x0}}], 0x1, 0x0) (async) sendmmsg$inet6(r0, &(0x7f00000000c0)=[{{&(0x7f00000001c0)={0xa, 0x0, 0x0, @mcast2}, 0x1c, 0x0}}], 0x1, 0x0) recvmmsg(r0, &(0x7f0000000000)=[{{0x0, 0x0, 0x0}, 0x1}], 0x1, 0x2060, 0x0) socket$nl_route(0x10, 0x3, 0x0) (async) r4 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r4, 0x8933, &(0x7f00000018c0)={'team0\x00', 0x0}) sendmsg$nl_route(r4, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000040)=@newlink={0x58, 0x10, 0x49920d862a92153b, 0xc, 0x0, {0x0, 0x0, 0x0, 0x0, 0x90c1, 0x5c81}, [@IFLA_LINKINFO={0x30, 0x12, 0x0, 0x1, @ip6gre={{0xb}, {0x20, 0x2, 0x0, 0x1, [@IFLA_GRE_TTL={0x5, 0x8, 0x3}, @IFLA_GRE_REMOTE={0x14, 0x7, @private0={0xfc, 0x0, '\x00', 0x3}}]}}}, @IFLA_MASTER={0x8, 0xa, r5}]}, 0x58}}, 0x48010) (async) sendmsg$nl_route(r4, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000040)=@newlink={0x58, 0x10, 0x49920d862a92153b, 0xc, 0x0, {0x0, 0x0, 0x0, 0x0, 0x90c1, 0x5c81}, [@IFLA_LINKINFO={0x30, 0x12, 0x0, 0x1, @ip6gre={{0xb}, {0x20, 0x2, 0x0, 0x1, [@IFLA_GRE_TTL={0x5, 0x8, 0x3}, @IFLA_GRE_REMOTE={0x14, 0x7, @private0={0xfc, 0x0, '\x00', 0x3}}]}}}, @IFLA_MASTER={0x8, 0xa, r5}]}, 0x58}}, 0x48010) 232.964171ms ago: executing program 5 (id=4718): r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r1 = socket$inet(0xa, 0x801, 0x84) connect$inet(r1, &(0x7f0000000340)={0x2, 0x0, @remote={0xac, 0x14, 0xffffffffffffffff}}, 0x10) listen(r1, 0x8) (async) r2 = accept4(r1, 0x0, 0x0, 0x0) getsockopt$inet_sctp_SCTP_DELAYED_SACK(r2, 0x84, 0x10, &(0x7f00000000c0)=@assoc_value={0x0, 0xfffff801}, &(0x7f0000000100)=0x8) (async) getsockopt$inet6_mreq(r2, 0x29, 0x15, &(0x7f0000000140)={@local, 0x0}, &(0x7f00000001c0)=0x14) bpf$BPF_LINK_CREATE_XDP(0x1c, &(0x7f0000000280)={0xffffffffffffffff, r3, 0x25, 0x1, @void}, 0x10) (async) mmap(&(0x7f0000001000/0xc00000)=nil, 0xc00000, 0x0, 0x3032, 0xffffffffffffffff, 0x0) r4 = socket(0x400000000010, 0x3, 0x0) r5 = openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0) ioctl$TUNSETIFF(r5, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x7101}) (async) r6 = socket(0x400000000010, 0x3, 0x0) (async) r7 = socket$unix(0x1, 0x1, 0x0) ioctl$sock_SIOCGIFINDEX(r7, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r6, &(0x7f00000012c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000001c0)=@newqdisc={0x2c, 0x24, 0x4ee4e6a52ff56541, 0x70bd0a, 0x25dfdbff, {0x0, 0x0, 0x0, r8, {0x0, 0xfff1}, {0xffff, 0xffff}, {0xffe0, 0xf}}, [@qdisc_kind_options=@q_drr={0x8}]}, 0x2c}, 0x1, 0x0, 0x0, 0x8001}, 0x20008850) r9 = socket$unix(0x1, 0x1, 0x0) ioctl$sock_SIOCGIFINDEX(r9, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r4, &(0x7f0000000900)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000300)=@newtfilter={0x3c, 0x2c, 0xd27, 0x70bd28, 0xfffff000, {0x0, 0x0, 0x0, r10, {0xf000, 0xffff}, {}, {0x7, 0xa}}, [@filter_kind_options=@f_route={{0xa}, {0xc, 0x2, [@TCA_ROUTE4_TO={0x8, 0x2, 0x48}]}}]}, 0x3c}, 0x1, 0x0, 0x0, 0x80}, 0x20000800) r11 = bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000140)={&(0x7f0000000040)={{0xeb9f, 0x1, 0x0, 0x18, 0x0, 0xc, 0xc, 0x2, [@func_proto]}}, 0x0, 0x26}, 0x28) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x18, 0xf, &(0x7f00000005c0)=@ringbuf={{0x18, 0x0, 0x0, 0x0, 0x8, 0x0, 0x0, 0x0, 0xffff8001}, {}, {}, [], {{}, {0x7, 0x0, 0xb, 0x2, 0x0, 0x0, 0x1}, {0x85, 0x0, 0x0, 0x85}}}, &(0x7f0000000000)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, r11, 0xc, &(0x7f0000001200)={0x0, 0x1}, 0x8}, 0x94) r12 = syz_genetlink_get_family_id$netlbl_unlabel(&(0x7f0000000000), r0) r13 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r13, &(0x7f000000c2c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000340)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a28000000000a0101000000005e1affd5020000000900010073797a300000000008000240000000032c000000030a01030000e6ff00000000020000000900010073797a30000000000900030073797a320000000014000000110001"], 0x7c}}, 0x0) (async) sendmsg$NFT_BATCH(r13, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000000c0)={{0x14}, [@NFT_MSG_NEWRULE={0x58, 0x6, 0xa, 0x401, 0x0, 0x0, {0x2}, [@NFTA_RULE_EXPRESSIONS={0x2c, 0x4, 0x0, 0x1, [{0x28, 0x1, 0x0, 0x1, @byteorder={{0xe}, @val={0x14, 0x2, 0x0, 0x1, [@NFTA_BYTEORDER_SREG={0x8}, @NFTA_BYTEORDER_DREG={0x8, 0x2, 0x1, 0x0, 0x8}]}}}]}, @NFTA_RULE_TABLE={0x9, 0x1, 'syz0\x00'}, @NFTA_RULE_CHAIN={0x9, 0x2, 'syz2\x00'}]}], {0x14}}, 0x80}}, 0x0) (async) sendmsg$NLBL_UNLABEL_C_STATICADD(r0, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000040)=ANY=[@ANYBLOB='L\x00\x00\x00', @ANYRES16=r12, @ANYBLOB="01020000010000ecffff0300260005000400ac35000114000600626f6e643000000000000000000000001400070000000000000d00000000ffffac1e0001050005"], 0x4c}, 0x8, 0x3000000000002}, 0x0) (async) r14 = socket$nl_route(0x10, 0x3, 0x0) (async) r15 = socket$pppoe(0x18, 0x1, 0x0) setsockopt$SO_ATTACH_FILTER(r15, 0x1, 0x1a, &(0x7f0000000080)={0x1, &(0x7f0000000000)=[{0xffff, 0xf8, 0x4, 0x456}]}, 0x10) (async) ioctl$sock_SIOCGIFINDEX(r14, 0x8933, &(0x7f0000000180)={'bond0\x00'}) 138.444575ms ago: executing program 2 (id=4719): r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0) ioctl$TUNSETIFF(r1, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x7101}) r2 = socket(0x400000000010, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f0000000340)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r2, &(0x7f00000012c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000005c0)=@newqdisc={0x24, 0x24, 0x4ee4e6a52ff56541, 0x70bd2d, 0xffffffff, {0x0, 0x0, 0x0, r3, {0x0, 0xfff1}, {0xffff, 0xffff}, {0x1, 0xf}}}, 0x24}}, 0x0) r4 = socket(0x400000000010, 0x3, 0x0) r5 = socket$unix(0x1, 0x1, 0x0) ioctl$sock_SIOCGIFINDEX(r5, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r4, &(0x7f0000006040)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000006100)=@delchain={0x24, 0x66, 0x1, 0x70bd2e, 0x25dfdbfd, {0x0, 0x0, 0x0, r6, {0x0, 0xfff3}, {}, {0xb}}}, 0x24}, 0x1, 0x0, 0x0, 0x8848}, 0x20004804) sendmsg$nl_route(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000040)=ANY=[@ANYRES8=r0, @ANYRESDEC=r0, @ANYRESHEX=r0], 0x2c}}, 0x0) 99.569912ms ago: executing program 5 (id=4720): r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000040)=@ipmr_newroute={0xb8, 0x18, 0x1, 0x70bd2b, 0x25dfdbff, {0x80, 0x14, 0x20, 0x7, 0xfe, 0x1, 0xfe, 0x8, 0x100}, [@RTA_SPORT={0x6, 0x1c, 0x4e23}, @RTA_FLOW={0x8, 0xb, 0xffff}, @RTA_METRICS={0x6c, 0x8, 0x0, 0x1, "7ddca6c15819d2eb1a03c8de22fbf165c1d229911ac46df8ae8c95e362023dd5bd4488eb09e0d74edaf8a4e39c3526c34038ec10e25d7827c282b17860314d03f162e5413d98adb2925ab5b65121f792b9041aaa31858eb4a2f5ed0d2b868b5814d6c4e45ba95f5a"}, @RTA_GATEWAY={0x8, 0x5, @broadcast}, @RTA_NH_ID={0x8}, @RTA_FLOW={0x8, 0xb, 0x1e3f962c}, @RTA_PREFSRC={0x8, 0x7, @private=0xa010101}]}, 0xb8}, 0x1, 0x0, 0x0, 0x44080}, 0x0) r1 = socket$nl_generic(0x10, 0x3, 0x10) bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000700)={&(0x7f0000000580)={{0xeb9f, 0x1, 0x0, 0x18, 0x0, 0xc, 0xc, 0x3, [@func_proto={0x2}]}, {0x0, [0x0]}}, 0x0, 0x27, 0x0, 0x1}, 0x28) r2 = socket$nl_generic(0x10, 0x3, 0x10) r3 = syz_genetlink_get_family_id$tipc2(&(0x7f0000000080), 0xffffffffffffffff) sendmsg$TIPC_NL_LINK_GET(r2, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000240)={0x24, r3, 0x351d4d5b9375e359, 0x0, 0x0, {}, [@TIPC_NLA_LINK={0x10, 0x4, 0x0, 0x1, [@TIPC_NLA_LINK_NAME={0x9, 0x5, 'syz0\x00'}]}]}, 0x24}}, 0x0) sendmsg$TIPC_NL_BEARER_ENABLE(r1, &(0x7f00000002c0)={&(0x7f0000000100)={0x10, 0x0, 0x0, 0x10000000}, 0xc, &(0x7f0000000280)={&(0x7f0000000180)={0xc4, r3, 0x2, 0x70bd2d, 0x25dfdbfb, {}, [@TIPC_NLA_LINK={0x4}, @TIPC_NLA_NODE={0xac, 0x6, 0x0, 0x1, [@TIPC_NLA_NODE_KEY={0x44, 0x4, {'gcm(aes)\x00', 0x1c, "97df3b5a617ac2996365bab9cd2dc4701850adcf3ec283406334bf72"}}, @TIPC_NLA_NODE_UP={0x4}, @TIPC_NLA_NODE_ID={0x4a, 0x3, "f08a1bc45a52ccaa513d3305272348f1f56827460b882324c17babd01d6a2f159d4ab307c2c96a9d18dfa98aa388df5146aae5a258ed925dae87491995cb97fee780bcf0a395"}, @TIPC_NLA_NODE_REKEYING={0x8, 0x6, 0x3}, @TIPC_NLA_NODE_ADDR={0x8, 0x1, 0x6}, @TIPC_NLA_NODE_UP={0x4}]}]}, 0xc4}, 0x1, 0x0, 0x0, 0x24000891}, 0x0) 747.953µs ago: executing program 1 (id=4721): r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0xa8442, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000000)={'syzkaller0\x00', 0x7101}) ioctl$TUNSETLINK(r0, 0x400454cd, 0x6) write$tun(r0, 0x0, 0x110) r1 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000080)={'geneve1\x00', 0x0}) r3 = socket(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r3, &(0x7f00000007c0)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000001540)=@newqdisc={0x40, 0x24, 0xf0b, 0x0, 0x0, {0x0, 0x0, 0x0, r2, {}, {0xffff, 0xffff}}, [@qdisc_kind_options=@q_etf={{0x8}, {0x14, 0x2, @TCA_ETF_PARMS={0x10, 0x1, {0x0, 0xb, 0x2}}}}]}, 0x40}}, 0xc0) r4 = socket$netlink(0x10, 0x3, 0x14) r5 = syz_init_net_socket$bt_l2cap(0x1f, 0x2, 0x0) bind$bt_l2cap(r5, &(0x7f0000000000)={0x1f, 0x0, @any, 0xfffc, 0x1}, 0xe) socket$nl_generic(0x11, 0x3, 0x10) r6 = socket$kcm(0x10, 0x2, 0x0) sendmsg$kcm(r6, &(0x7f0000000100)={0x0, 0x0, &(0x7f00000005c0)}, 0x6) r7 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='devices.list\x00', 0x275a, 0x0) write$tcp_mem(r7, &(0x7f0000000140)={0x5, 0x20, 0x6, 0x20, 0xe4bb}, 0x48) r8 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r9 = syz_genetlink_get_family_id$nl802154(&(0x7f0000000980), r8) sendmsg$NL802154_CMD_DEL_SEC_LEVEL(r8, &(0x7f0000000b00)={0x0, 0x0, &(0x7f0000000440)={&(0x7f0000000500)={0x3c, r9, 0x1, 0x70bd28, 0x25dfdbfe, {}, [@NL802154_ATTR_WPAN_DEV={0xc, 0x6, 0x1}, @NL802154_ATTR_SEC_LEVEL={0x1c, 0x2d, 0x0, 0x1, [@NL802154_SECLEVEL_ATTR_DEV_OVERRIDE={0x5, 0x4, 0x1}, @NL802154_SECLEVEL_ATTR_LEVELS={0x5, 0x1, 0x8}, @NL802154_SECLEVEL_ATTR_DEV_OVERRIDE={0x5}]}]}, 0x3c}, 0x1, 0x0, 0x0, 0x40040d0}, 0xc0) syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r10 = syz_init_net_socket$bt_l2cap(0x1f, 0x1, 0x0) bind$bt_l2cap(r10, &(0x7f0000000000)={0x1f, 0x0, @fixed}, 0xe) mmap(&(0x7f0000000000/0x400000)=nil, 0x400000, 0xb, 0xc3072, 0xffffffffffffffff, 0x4000) setsockopt$bt_BT_DEFER_SETUP(r10, 0x112, 0x7, &(0x7f00000000c0)=0x4, 0x4) r11 = socket$inet_smc(0x2b, 0x1, 0x0) setsockopt$IP_VS_SO_SET_STARTDAEMON(r11, 0x0, 0x48b, &(0x7f0000000200)={0x2, 'veth0_virt_wifi\x00', 0x4}, 0xffffffffffffff57) setsockopt$IP_VS_SO_SET_STOPDAEMON(r11, 0x0, 0x48c, &(0x7f00000002c0)={0x1, 'ipvlan1\x00', 0x100}, 0x18) syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) sendmsg$RDMA_NLDEV_CMD_NEWLINK(r4, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000001200)={&(0x7f0000001080)={0x38, 0x1403, 0x1, 0x0, 0x0, "", [{{0x9, 0x2, 'syz2\x00'}, {0x8, 0x41, 'siw\x00'}, {0x14, 0x33, 'syzkaller0\x00'}}]}, 0x38}, 0x1, 0x0, 0x0, 0x5}, 0x100) 0s ago: executing program 6 (id=4722): r0 = socket$alg(0x26, 0x5, 0x0) r1 = socket$nl_generic(0x10, 0x3, 0x10) (async) r2 = syz_genetlink_get_family_id$nl80211(&(0x7f00000006c0), 0xffffffffffffffff) (async) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f00000004c0)={'wlan1\x00', 0x0}) sendmsg$NL80211_CMD_SET_TID_CONFIG(r1, &(0x7f0000000c00)={0x0, 0x0, &(0x7f0000000bc0)={&(0x7f0000000040)=ANY=[@ANYBLOB="1b79705f", @ANYRES16=r2, @ANYBLOB="010000000000000000008900000008000300", @ANYRES32=r3, @ANYBLOB="04001d80"], 0x20}}, 0x0) sendmsg$nl_generic(r1, &(0x7f0000000300)={&(0x7f0000000180)={0x10, 0x0, 0x0, 0x80000}, 0xc, &(0x7f00000002c0)={&(0x7f0000000480)=ANY=[@ANYBLOB="1c0000421700040024bd7000fedbdf1f8734ebb46c3b61b8e42efad9b62513000000080001800400bd8038b3010d"], 0x1c}, 0x1, 0x0, 0x0, 0x4008804}, 0xa800) bind$alg(r0, &(0x7f0000000000)={0x26, 'aead\x00', 0x0, 0x0, 'rfc4106-gcm-aesni\x00'}, 0x58) (async) setsockopt$ALG_SET_KEY(r0, 0x117, 0x1, &(0x7f00000009c0)="ad56b6c5820fae9d6dcd3292ea54c7be8bbdadbb1632ea5704cae881ef915d374c90c200", 0x24) (async) r4 = bpf$BPF_RAW_TRACEPOINT_OPEN_UNNAMED(0x11, &(0x7f0000000080), 0x10) (async) openat$cgroup_root(0xffffffffffffff9c, &(0x7f00000000c0)='./cgroup/syz0\x00', 0x200002, 0x0) (async) r5 = socket(0x3, 0x3, 0x404) setsockopt$netlink_NETLINK_TX_RING(r5, 0x10e, 0xc, &(0x7f0000000040)={0x4001}, 0xfea3) (async) getsockopt$inet_mreqn(r5, 0x0, 0x24, &(0x7f0000000400)={@private, @empty, 0x0}, &(0x7f0000000680)=0xc) (async) r7 = syz_genetlink_get_family_id$tipc(&(0x7f0000000740), r5) sendmsg$TIPC_CMD_SHOW_NAME_TABLE(0xffffffffffffffff, &(0x7f0000000800)={&(0x7f0000000700)={0x10, 0x0, 0x0, 0x4000000}, 0xc, &(0x7f00000007c0)={&(0x7f0000000780)={0x30, r7, 0x1, 0x70bd29, 0x27dfdbfb, {{}, {}, {0x14, 0x19, {0x7, 0x804, 0x0, 0x8}}}, ["", "", "", "", ""]}, 0x30}, 0x1, 0x0, 0x0, 0x20000800}, 0x4000000) (async) sendmsg$nl_route(r5, &(0x7f0000000200)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000840)=ANY=[@ANYBLOB="180000001600080000000000000000000af9000355232f9b3e4906d16f909c2ebf2836d042cc138c0846d9a14ca31bb4fd722f8796dd8451e7beeaacbaca8f8f08a41a613df0372aa0eb839ce4189263d5124842e3131b92507179030e8eb127bb95a3525414ea000000", @ANYRES32=r6], 0x18}}, 0x0) (async) r8 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r8, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000080)=@newlink={0x20, 0x10, 0x49920d862a92153b, 0x0, 0x25dfdc01, {0x0, 0x0, 0x0, 0x0, 0x800a, 0x8980}}, 0x20}, 0x1, 0x0, 0x0, 0x20048000}, 0x40000) (async) close(r4) r9 = accept4(r0, 0x0, 0x0, 0x800) (async) r10 = socket$alg(0x26, 0x5, 0x0) bind$alg(r10, &(0x7f00000001c0)={0x26, 'skcipher\x00', 0x0, 0x0, 'ecb(aes-generic)\x00'}, 0x58) (async) bpf$BPF_BTF_LOAD(0x12, &(0x7f00000003c0)={&(0x7f00000008c0)=ANY=[@ANYBLOB="9feb0100180000000000000074000000740000000300000009000000000000110400000006000000020000000000000e05000000000000000f000000000000090500000008f447a0e1df0d34ae0000000100000000000010080000000f0000000000000200000000040000000000001c020000000700000000000009000000000f0000000000000700000000002e00b900bc38"], &(0x7f0000000540)=""/216, 0x8f, 0xd8, 0x1, 0x3}, 0x28) (async) setsockopt$ALG_SET_KEY(r10, 0x117, 0x1, &(0x7f0000000440)="a502d54984f531d9ed2146f0c11430c139ed4d98d51e09c2", 0x18) (async) r11 = accept$alg(r10, 0x0, 0x0) sendmmsg$alg(r11, &(0x7f0000000140)=[{0x0, 0x0, &(0x7f00000000c0)=[{&(0x7f0000000240)="3f5e978e345482212cf7cd37be", 0xd}, {&(0x7f0000000000)="ece600", 0x3}], 0x2, &(0x7f0000000640)=[@op={0x18, 0x117, 0x3, 0x1}], 0x18, 0x8000}], 0x1, 0x804) (async) recvmmsg(r11, &(0x7f0000002e80)=[{{0x0, 0x0, &(0x7f0000000100)=[{&(0x7f0000000340)=""/82, 0x52}], 0x1}, 0x5}], 0x1, 0x2140, 0x0) (async) sendmmsg$alg(r9, &(0x7f0000000c00)=[{0x0, 0x0, 0x0, 0xffffffffffffff7f, &(0x7f0000000a00)=ANY=[@ANYBLOB="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"/296], 0x48, 0x40040}], 0x1, 0x8040) r12 = socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$devlink(&(0x7f0000000100), r12) kernel console output (not intermixed with test programs): entered promiscuous mode [ 284.838134][T16766] syzkaller1: entered allmulticast mode [ 285.085425][T16536] netdevsim netdevsim3 netdevsim0: renamed from eth0 [ 285.115615][ C0] bridge0: port 1(bridge_slave_0) entered learning state [ 285.133876][T16785] netlink: 4 bytes leftover after parsing attributes in process `syz.1.3104'. [ 285.155820][T16536] netdevsim netdevsim3 netdevsim1: renamed from eth1 [ 285.174916][T16783] netlink: 8 bytes leftover after parsing attributes in process `syz.5.3103'. [ 285.213193][T16536] netdevsim netdevsim3 netdevsim2: renamed from eth2 [ 285.340392][T16536] netdevsim netdevsim3 netdevsim3: renamed from eth3 [ 285.542315][ T7027] Bluetooth: hci4: command tx timeout [ 285.598474][T16570] netdevsim netdevsim6 netdevsim0: renamed from eth0 [ 285.650827][T16570] netdevsim netdevsim6 netdevsim1: renamed from eth1 [ 285.708106][T16570] netdevsim netdevsim6 netdevsim2: renamed from eth2 [ 285.761047][T16570] netdevsim netdevsim6 netdevsim3: renamed from eth3 [ 286.022150][T16830] netlink: 8 bytes leftover after parsing attributes in process `syz.5.3111'. [ 286.050714][T16830] netlink: 'syz.5.3111': attribute type 1 has an invalid length. [ 286.060282][T16830] netlink: 'syz.5.3111': attribute type 2 has an invalid length. [ 286.110191][T16536] 8021q: adding VLAN 0 to HW filter on device bond0 [ 286.189531][T16536] 8021q: adding VLAN 0 to HW filter on device team0 [ 286.301506][ T36] bridge0: port 1(bridge_slave_0) entered blocking state [ 286.308754][ T36] bridge0: port 1(bridge_slave_0) entered forwarding state [ 286.324867][ T7027] Bluetooth: hci2: command tx timeout [ 286.375435][ T36] bridge0: port 2(bridge_slave_1) entered blocking state [ 286.382648][ T36] bridge0: port 2(bridge_slave_1) entered forwarding state [ 286.408964][T16570] 8021q: adding VLAN 0 to HW filter on device bond0 [ 286.423628][T16839] syzkaller1: entered promiscuous mode [ 286.429949][T16839] syzkaller1: entered allmulticast mode [ 286.488258][T16843] netlink: 64 bytes leftover after parsing attributes in process `syz.5.3115'. [ 286.504923][T16843] netlink: 64 bytes leftover after parsing attributes in process `syz.5.3115'. [ 286.650828][T16570] 8021q: adding VLAN 0 to HW filter on device team0 [ 286.730457][ T13] bridge0: port 1(bridge_slave_0) entered blocking state [ 286.737677][ T13] bridge0: port 1(bridge_slave_0) entered forwarding state [ 286.801021][ T13] bridge0: port 2(bridge_slave_1) entered blocking state [ 286.808239][ T13] bridge0: port 2(bridge_slave_1) entered forwarding state [ 286.855985][T16858] netlink: 'syz.5.3120': attribute type 1 has an invalid length. [ 286.864654][T16858] netlink: 'syz.5.3120': attribute type 2 has an invalid length. [ 287.228827][T16536] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 287.289949][T16883] netlink: 'syz.5.3126': attribute type 1 has an invalid length. [ 287.332653][T16883] netlink: 'syz.5.3126': attribute type 7 has an invalid length. [ 287.335505][T16881] netlink: 'syz.1.3125': attribute type 2 has an invalid length. [ 287.340414][T16883] netlink: 'syz.5.3126': attribute type 8 has an invalid length. [ 287.382201][T16883] NCSI netlink: No device for ifindex 65584 [ 287.384410][T16536] veth0_vlan: entered promiscuous mode [ 287.433546][T16570] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 287.470460][T16536] veth1_vlan: entered promiscuous mode [ 287.557690][T16897] xt_addrtype: both incoming and outgoing interface limitation cannot be selected [ 287.593646][ T7027] Bluetooth: hci4: command tx timeout [ 287.612169][T16536] veth0_macvtap: entered promiscuous mode [ 287.650042][T16536] veth1_macvtap: entered promiscuous mode [ 287.675079][ T60] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 287.683261][T10278] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 287.691366][T10278] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 287.731438][T16536] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 287.780677][T16536] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 287.821008][T16907] netlink: 'syz.1.3132': attribute type 1 has an invalid length. [ 287.831638][T10275] netdevsim netdevsim3 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 287.854809][T16908] netlink: 'syz.2.3131': attribute type 1 has an invalid length. [ 287.921221][T16907] 8021q: adding VLAN 0 to HW filter on device bond1 [ 287.936259][T10275] netdevsim netdevsim3 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 287.972591][T10275] netdevsim netdevsim3 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 287.981828][T10275] netdevsim netdevsim3 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 288.178737][T16924] team0: entered promiscuous mode [ 288.206519][T16924] team_slave_0: entered promiscuous mode [ 288.218678][T16924] team_slave_1: entered promiscuous mode [ 288.227326][T16924] bridge0: port 3(team0) entered blocking state [ 288.235224][T16924] bridge0: port 3(team0) entered disabled state [ 288.241828][T16924] team0: entered allmulticast mode [ 288.249961][T16924] team_slave_0: entered allmulticast mode [ 288.260095][T16924] team_slave_1: entered allmulticast mode [ 288.271558][T16924] bridge0: port 3(team0) entered blocking state [ 288.278030][T16924] bridge0: port 3(team0) entered forwarding state [ 288.317879][ T13] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 288.332936][T10278] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 288.341516][T10275] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 288.380615][ T3437] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 288.394574][ T7027] Bluetooth: hci2: command tx timeout [ 288.405406][ T3437] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 288.521362][T16933] bond1: entered promiscuous mode [ 288.528979][T16933] 8021q: adding VLAN 0 to HW filter on device bond1 [ 288.565180][T16940] bond1: (slave bridge1): making interface the new active one [ 288.575509][T16940] bridge1: entered promiscuous mode [ 288.583437][T16940] bond1: (slave bridge1): Enslaving as an active interface with an up link [ 288.592646][T16570] veth0_vlan: entered promiscuous mode [ 288.619800][T10279] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 288.630205][T16939] veth1_to_bond: entered allmulticast mode [ 288.641341][T16570] veth1_vlan: entered promiscuous mode [ 288.655799][T10279] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 288.658924][T16939] __nla_validate_parse: 8 callbacks suppressed [ 288.658945][T16939] netlink: 4 bytes leftover after parsing attributes in process `syz.1.3140'. [ 288.786050][T16939] bond0: (slave bond_slave_1): Releasing backup interface [ 288.810148][T16949] ip6t_srh: unknown srh match flags 5F28 [ 288.817781][T16949] x_tables: duplicate underflow at hook 2 [ 288.843373][T16939] veth1_to_bond (unregistering): left allmulticast mode [ 288.859738][T16946] netlink: 8 bytes leftover after parsing attributes in process `syz.5.3143'. [ 288.874862][T16951] netlink: 12 bytes leftover after parsing attributes in process `syz.2.3144'. [ 288.944054][T16570] veth0_macvtap: entered promiscuous mode [ 288.985722][T16570] veth1_macvtap: entered promiscuous mode [ 289.041852][T16570] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 289.066367][T16570] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 289.100936][T10272] netdevsim netdevsim6 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 289.120127][T16965] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 289.120565][T10272] netdevsim netdevsim6 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 289.145877][T10272] netdevsim netdevsim6 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 289.161637][T10272] netdevsim netdevsim6 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 289.261321][T16971] netlink: 60 bytes leftover after parsing attributes in process `syz.2.3150'. [ 289.289737][T16968] netlink: 4 bytes leftover after parsing attributes in process `syz.1.3149'. [ 289.380459][T16976] netlink: 300 bytes leftover after parsing attributes in process `syz.5.3151'. [ 289.411185][T16968] hsr_slave_1 (unregistering): left promiscuous mode [ 289.555943][T16982] workqueue: name exceeds WQ_NAME_LEN. Truncating to: .qMs%#\\cӡp[ [ 289.570845][T10272] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 289.583561][T10272] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 289.637454][T16992] x_tables: unsorted entry at hook 2 [ 289.711253][T10275] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 289.725848][T10275] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 289.801664][T16996] netlink: 60 bytes leftover after parsing attributes in process `syz.2.3156'. [ 289.943460][T17003] netlink: 8 bytes leftover after parsing attributes in process `syz.6.3033'. [ 289.955917][T17004] wg1 speed is unknown, defaulting to 1000 [ 289.981336][T17004] wg1 speed is unknown, defaulting to 1000 [ 289.988076][T17004] wg1 speed is unknown, defaulting to 1000 [ 290.025315][T17009] syzkaller1: entered promiscuous mode [ 290.029530][T17004] infiniband syz2: RDMA CMA: cma_listen_on_dev, error -98 [ 290.034779][T17009] syzkaller1: entered allmulticast mode [ 290.068214][T17009] netlink: 60 bytes leftover after parsing attributes in process `syz.2.3159'. [ 290.105409][T17004] wg1 speed is unknown, defaulting to 1000 [ 290.135485][T17012] netlink: 4 bytes leftover after parsing attributes in process `syz.3.3160'. [ 290.159652][T17004] wg1 speed is unknown, defaulting to 1000 [ 290.160885][T17012] team1 (uninitialized): Failed to send options change via netlink (err -105) [ 290.193367][T17012] team1: entered promiscuous mode [ 290.198531][T17012] team1: entered allmulticast mode [ 290.230186][T17004] wg1 speed is unknown, defaulting to 1000 [ 290.241158][T17004] wg1 speed is unknown, defaulting to 1000 [ 290.250922][T17004] wg1 speed is unknown, defaulting to 1000 [ 290.259216][T17004] wg1 speed is unknown, defaulting to 1000 [ 290.284486][T17004] wg1 speed is unknown, defaulting to 1000 [ 290.294302][T17004] wg1 speed is unknown, defaulting to 1000 [ 290.301232][T17004] wg1 speed is unknown, defaulting to 1000 [ 290.385563][T17004] wg1 speed is unknown, defaulting to 1000 [ 290.399063][T17018] tipc: Started in network mode [ 290.415243][T17018] tipc: Node identity ac14140f, cluster identity 4711 [ 290.433148][T17018] tipc: New replicast peer: 255.255.255.255 [ 290.439739][T17018] tipc: Enabled bearer , priority 10 [ 290.709448][T17035] 8021q: adding VLAN 0 to HW filter on device bond1 [ 290.799259][T17042] bond2: Setting coupled_control to off (0) [ 290.923369][T17055] sch_tbf: burst 127 is lower than device syzkaller0 mtu (1514) ! [ 291.068769][T17064] tipc: Started in network mode [ 291.097720][T17064] tipc: Node identity c6a6, cluster identity 4711 [ 291.295732][T17085] validate_nla: 14 callbacks suppressed [ 291.295747][T17085] netlink: 'syz.2.3181': attribute type 1 has an invalid length. [ 291.410782][T17087] netlink: 'syz.2.3182': attribute type 1 has an invalid length. [ 291.569462][T17092] macvtap1: entered promiscuous mode [ 291.576660][T17092] vlan0: entered promiscuous mode [ 291.582718][T17092] macvtap1: entered allmulticast mode [ 291.589210][T17092] vlan0: entered allmulticast mode [ 291.600884][T17092] veth0_vlan: entered allmulticast mode [ 291.610691][ T10] tipc: Node number set to 2886997007 [ 292.097604][T17113] ICMPv6: RA: ndisc_router_discovery failed to add default route [ 292.105614][T17113] ICMPv6: RA: ndisc_router_discovery failed to add default route [ 292.113580][T17113] ICMPv6: RA: ndisc_router_discovery failed to add default route [ 292.714273][ T13] net_ratelimit: 53 callbacks suppressed [ 292.714295][ T13] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 292.745967][T17139] debugfs: 'netdev@ffff888045574618' already exists in 'ref_tracker' [ 293.017560][T17154] veth0_to_bond: entered allmulticast mode [ 293.056549][T17155] syzkaller0: entered promiscuous mode [ 293.062065][T17155] syzkaller0: entered allmulticast mode [ 293.223156][T17161] netlink: 'syz.6.3207': attribute type 4 has an invalid length. [ 293.242118][T17161] `: renamed from bond0 (while UP) [ 293.436270][T10275] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 293.447552][ T13] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 293.666938][T17179] netdevsim netdevsim6 netdevsim0: unset [1, 0] type 2 family 0 port 6081 - 0 [ 293.933017][T17188] syzkaller1: entered promiscuous mode [ 293.952521][T17188] syzkaller1: entered allmulticast mode [ 293.970425][T17188] team0: Cannot enslave team device to itself [ 294.024994][T17195] __nla_validate_parse: 9 callbacks suppressed [ 294.025015][T17195] netlink: 60 bytes leftover after parsing attributes in process `syz.2.3218'. [ 294.091663][ T60] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 294.100413][ T1164] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 294.112947][ T13] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 294.195013][T17203] netlink: 'syz.5.3219': attribute type 1 has an invalid length. [ 294.316747][T17203] 8021q: adding VLAN 0 to HW filter on device bond2 [ 294.438412][T17211] bond2: (slave geneve2): making interface the new active one [ 294.465197][T17211] bond2: (slave geneve2): Enslaving as an active interface with an up link [ 294.888400][T17230] netlink: 8 bytes leftover after parsing attributes in process `syz.6.3225'. [ 295.054662][T17241] netlink: 'syz.5.3227': attribute type 1 has an invalid length. [ 295.199981][T17243] bond3: (slave ipvlan2): enslaved VLAN challenged slave. Adding VLANs will be blocked as long as it is part of bond. [ 295.205164][T17241] netlink: 'syz.5.3227': attribute type 1 has an invalid length. [ 295.218307][T17243] bond3: (slave ipvlan2): The slave device specified does not support setting the MAC address [ 295.231558][T17243] bond3: (slave ipvlan2): Setting fail_over_mac to active for active-backup mode [ 295.246924][T17253] netlink: 'syz.3.3230': attribute type 13 has an invalid length. [ 295.539794][T17249] syzkaller0: default qdisc (pfifo_fast) fail, fallback to noqueue [ 295.558095][T17249] syzkaller0: entered promiscuous mode [ 295.593098][T17249] syzkaller0: entered allmulticast mode [ 295.653196][T17253] tipc: Enabled bearer , priority 0 [ 295.700373][T17246] tipc: Resetting bearer [ 295.723539][T17269] netlink: 60 bytes leftover after parsing attributes in process `syz.6.3233'. [ 295.760227][T17246] tipc: Disabling bearer [ 295.771699][T17266] netlink: 28 bytes leftover after parsing attributes in process `syz.5.3232'. [ 295.846217][T17272] netlink: 8 bytes leftover after parsing attributes in process `syz.2.3234'. [ 295.950883][T17274] netlink: 'syz.3.3237': attribute type 1 has an invalid length. [ 296.102298][T17274] netlink: 56 bytes leftover after parsing attributes in process `syz.3.3237'. [ 296.144772][T17292] netlink: 24 bytes leftover after parsing attributes in process `syz.6.3236'. [ 296.299793][T17296] netlink: 4 bytes leftover after parsing attributes in process `syz.6.3236'. [ 296.511586][T17309] netlink: 60 bytes leftover after parsing attributes in process `syz.3.3244'. [ 296.723159][T17313] netlink: 'syz.3.3247': attribute type 16 has an invalid length. [ 296.753331][T17313] netlink: 8 bytes leftover after parsing attributes in process `syz.3.3247'. [ 296.790662][T17319] xfrm1: entered promiscuous mode [ 296.796790][T17318] netlink: 'syz.6.3248': attribute type 1 has an invalid length. [ 296.808212][T17319] xfrm1: entered allmulticast mode [ 297.003939][T17325] "syz.3.3250" (17325) uses obsolete ecb(arc4) skcipher [ 297.037249][T17328] team0: No ports can be present during mode change [ 297.182938][T17332] xt_l2tp: missing protocol rule (udp|l2tpip) [ 298.415856][T17385] netlink: 'syz.2.3269': attribute type 1 has an invalid length. [ 298.424036][T17385] netlink: 'syz.2.3269': attribute type 2 has an invalid length. [ 298.564362][T16914] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 298.807158][T17409] netlink: 'syz.2.3277': attribute type 1 has an invalid length. [ 298.881149][T17409] 8021q: adding VLAN 0 to HW filter on device bond2 [ 299.002030][T17420] netlink: 'syz.5.3279': attribute type 11 has an invalid length. [ 299.042064][T17422] __nla_validate_parse: 12 callbacks suppressed [ 299.042088][T17422] netlink: 240 bytes leftover after parsing attributes in process `syz.3.3280'. [ 299.118766][T17409] bond2: (slave ip6gretap1): making interface the new active one [ 299.140560][T17409] bond2: (slave ip6gretap1): Enslaving as an active interface with an up link [ 299.186281][T17431] netlink: 60 bytes leftover after parsing attributes in process `syz.5.3282'. [ 299.201152][ T25] block nbd10: Possible stuck request ffff888025677000: control (read@0,1024B). Runtime 180 seconds [ 299.213336][ T25] block nbd10: Possible stuck request ffff8880256771c0: control (read@1024,1024B). Runtime 180 seconds [ 299.213990][T10272] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 299.225891][ T25] block nbd10: Possible stuck request ffff888025677380: control (read@2048,1024B). Runtime 180 seconds [ 299.233055][ T2952] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 299.270437][ T25] block nbd10: Possible stuck request ffff888025677540: control (read@3072,1024B). Runtime 180 seconds [ 299.270584][ T11] block nbd11: Possible stuck request ffff8880256de000: control (read@0,1024B). Runtime 180 seconds [ 299.307792][ T11] block nbd11: Possible stuck request ffff8880256de1c0: control (read@1024,1024B). Runtime 180 seconds [ 299.319131][ T11] block nbd11: Possible stuck request ffff8880256de380: control (read@2048,1024B). Runtime 180 seconds [ 299.350235][ T11] block nbd11: Possible stuck request ffff8880256de540: control (read@3072,1024B). Runtime 180 seconds [ 299.467891][T17441] netlink: 244 bytes leftover after parsing attributes in process `syz.2.3286'. [ 299.841939][T17460] netlink: 'syz.1.3292': attribute type 10 has an invalid length. [ 299.842001][ T2952] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 299.859693][T10275] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 299.861456][T17460] netlink: 40 bytes leftover after parsing attributes in process `syz.1.3292'. [ 299.868539][ T36] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 299.888740][T17460] dummy0: entered promiscuous mode [ 299.907174][T17460] bridge0: port 3(dummy0) entered blocking state [ 299.936519][T17460] bridge0: port 3(dummy0) entered disabled state [ 299.952812][T17460] dummy0: entered allmulticast mode [ 299.960646][T17460] bridge0: port 3(dummy0) entered blocking state [ 299.967177][T17460] bridge0: port 3(dummy0) entered forwarding state [ 300.388769][T17479] syzkaller1: entered promiscuous mode [ 300.432431][T17479] syzkaller1: entered allmulticast mode [ 300.542997][T17486] netlink: 60 bytes leftover after parsing attributes in process `syz.6.3299'. [ 300.581325][T17487] netlink: 'syz.2.3298': attribute type 2 has an invalid length. [ 300.623263][T17487] netlink: 244 bytes leftover after parsing attributes in process `syz.2.3298'. [ 300.647603][T17482] netlink: 248 bytes leftover after parsing attributes in process `syz.2.3298'. [ 300.769167][T17498] netlink: 44 bytes leftover after parsing attributes in process `syz.1.3302'. [ 300.937576][T17503] openvswitch: netlink: ct_state flags 010000e0 unsupported [ 300.946969][T17507] netlink: 'syz.5.3306': attribute type 2 has an invalid length. [ 300.966103][T17507] netlink: 119 bytes leftover after parsing attributes in process `syz.5.3306'. [ 301.217815][T17523] netlink: 12 bytes leftover after parsing attributes in process `syz.6.3305'. [ 301.479620][T17533] ip6t_srh: unknown srh invflags 4000 [ 302.119286][T17532] syzkaller1: entered promiscuous mode [ 302.132450][T17532] syzkaller1: entered allmulticast mode [ 302.584863][T17556] tap0: tun_chr_ioctl cmd 1074025678 [ 302.598387][T17556] tap0: group set to 0 [ 302.788614][T17561] IPVS: set_ctl: invalid protocol: 115 172.30.0.2:20000 [ 302.824685][T17569] IPVS: sync thread started: state = BACKUP, mcast_ifn = vcan0, syncid = 0, id = 0 [ 302.826111][T17566] netlink: 'syz.6.3324': attribute type 64 has an invalid length. [ 302.989183][T17576] netlink: 'syz.5.3325': attribute type 10 has an invalid length. [ 303.027593][T17571] netlink: 'syz.1.3326': attribute type 2 has an invalid length. [ 303.096981][T17576] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 303.169899][T17576] bond0: (slave batadv0): Enslaving as an active interface with an up link [ 303.232690][T17573] netlink: 'syz.5.3325': attribute type 29 has an invalid length. [ 303.254760][T17586] netlink: 'syz.5.3325': attribute type 29 has an invalid length. [ 303.283478][T17573] openvswitch: netlink: nsh attribute has 4 unknown bytes. [ 303.409893][T17587] syzkaller1: entered promiscuous mode [ 303.419114][T17587] syzkaller1: entered allmulticast mode [ 303.462054][T17598] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 303.585219][T17601] bridge_slave_1: left allmulticast mode [ 303.604246][T17601] bridge_slave_1: left promiscuous mode [ 303.622677][T17601] bridge0: port 2(bridge_slave_1) entered disabled state [ 303.643996][T17601] bridge_slave_0: left allmulticast mode [ 303.649785][T17601] bridge_slave_0: left promiscuous mode [ 303.680781][T17601] bridge0: port 1(bridge_slave_0) entered disabled state [ 303.897979][T17607] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check. [ 304.066907][T17615] __nla_validate_parse: 11 callbacks suppressed [ 304.066930][T17615] netlink: 80 bytes leftover after parsing attributes in process `syz.3.3337'. [ 304.320344][T16914] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 304.393304][T10275] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 304.568916][T17631] netlink: 4 bytes leftover after parsing attributes in process `syz.1.3343'. [ 304.579713][T17640] : renamed from hsr0 (while UP) [ 304.842052][T17650] netlink: 'syz.1.3348': attribute type 1 has an invalid length. [ 304.947003][T17661] netlink: 4 bytes leftover after parsing attributes in process `syz.1.3348'. [ 304.969289][T17444] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 305.144413][T17666] netlink: 60 bytes leftover after parsing attributes in process `syz.3.3351'. [ 305.156916][T17661] bond3 (unregistering): Released all slaves [ 305.203247][T17673] workqueue: Failed to create a rescuer kthread for wq "nfc2_nci_rx_wq": -EINTR [ 305.411066][T17686] netlink: 8 bytes leftover after parsing attributes in process `syz.6.3355'. [ 305.506774][T17686] netlink: 'syz.6.3355': attribute type 1 has an invalid length. [ 305.552824][T17686] netlink: 'syz.6.3355': attribute type 2 has an invalid length. [ 305.593450][ T12] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 305.601598][ T12] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 305.609727][T10276] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 305.916946][T17716] netlink: 8 bytes leftover after parsing attributes in process `syz.5.3362'. [ 306.287449][T17725] syzkaller1: entered promiscuous mode [ 306.303236][T17725] syzkaller1: entered allmulticast mode [ 306.393385][T17729] netlink: 36 bytes leftover after parsing attributes in process `syz.6.3368'. [ 306.646373][T17739] ipt_REJECT: ECHOREPLY no longer supported. [ 306.820816][T17743] netlink: 60 bytes leftover after parsing attributes in process `syz.5.3371'. [ 306.918106][T17745] netlink: 8 bytes leftover after parsing attributes in process `syz.6.3372'. [ 306.973474][T17745] netlink: 'syz.6.3372': attribute type 1 has an invalid length. [ 307.001568][T17745] netlink: 'syz.6.3372': attribute type 2 has an invalid length. [ 307.249909][T17750] bond3: Unable to set down delay as MII monitoring is disabled [ 307.322693][T17750] bond3 (unregistering): Released all slaves [ 307.650060][T17769] IPVS: wrr: FWM 3 0x00000003 - no destination available [ 307.661671][ C1] IPVS: wrr: FWM 3 0x00000003 - no destination available [ 307.850161][T17777] netlink: 'syz.6.3380': attribute type 11 has an invalid length. [ 307.858550][T17777] netlink: 'syz.6.3380': attribute type 4 has an invalid length. [ 307.866887][T17777] netlink: 'syz.6.3380': attribute type 5 has an invalid length. [ 307.885081][T17777] netlink: 'syz.6.3380': attribute type 6 has an invalid length. [ 307.916659][T17783] netlink: 8 bytes leftover after parsing attributes in process `syz.1.3384'. [ 308.409285][T17814] xt_hashlimit: Unknown mode mask C4, kernel too old? [ 309.223375][T17841] __nla_validate_parse: 6 callbacks suppressed [ 309.223397][T17841] netlink: 8 bytes leftover after parsing attributes in process `syz.2.3399'. [ 309.245758][T17841] netlink: 12 bytes leftover after parsing attributes in process `syz.2.3399'. [ 309.256088][T17843] netlink: 108 bytes leftover after parsing attributes in process `syz.5.3402'. [ 309.285201][T17843] netlink: 108 bytes leftover after parsing attributes in process `syz.5.3402'. [ 309.295768][T17847] netlink: 48 bytes leftover after parsing attributes in process `syz.3.3403'. [ 309.307546][T17843] netlink: 108 bytes leftover after parsing attributes in process `syz.5.3402'. [ 309.339821][T17846] netlink: 44 bytes leftover after parsing attributes in process `syz.1.3404'. [ 309.378610][T17843] netlink: 8 bytes leftover after parsing attributes in process `syz.5.3402'. [ 309.459894][T17854] x_tables: ip6_tables: SNAT target: only valid in nat table, not syz1 [ 309.550621][T17854] !: renamed from dummy0 (while UP) [ 309.886924][T17879] syzkaller1: entered promiscuous mode [ 309.897578][T17879] syzkaller1: entered allmulticast mode [ 310.058920][T17890] netlink: 4 bytes leftover after parsing attributes in process `syz.1.3416'. [ 310.069886][T17890] netlink: 128 bytes leftover after parsing attributes in process `syz.1.3416'. [ 310.083444][T16914] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 310.100557][ T3551] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 310.113084][T17890] netlink: 'syz.1.3416': attribute type 5 has an invalid length. [ 310.137065][T17891] netlink: 'syz.1.3416': attribute type 5 has an invalid length. [ 310.269065][T17902] openvswitch: netlink: Geneve opt len 17 is not a multiple of 4. [ 310.421402][T17907] syzkaller0: entered promiscuous mode [ 310.442703][T17907] syzkaller0: entered allmulticast mode [ 310.715563][T10275] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 310.724933][ T3551] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 310.789757][T17929] syzkaller1: entered promiscuous mode [ 310.816609][T17929] syzkaller1: entered allmulticast mode [ 311.271650][T17953] netlink: 'syz.2.3439': attribute type 1 has an invalid length. [ 311.354450][ T60] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 311.364485][ T36] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 311.464711][T17966] netlink: 'syz.2.3442': attribute type 1 has an invalid length. [ 311.588214][T17966] bond3: entered promiscuous mode [ 311.637606][T17966] bond3: entered allmulticast mode [ 311.661028][T17966] 8021q: adding VLAN 0 to HW filter on device bond3 [ 311.694681][T17974] tipc: Enabling of bearer rejected, failed to enable media [ 311.757279][T17975] macvlan2: entered promiscuous mode [ 311.794521][T17975] macvlan2: entered allmulticast mode [ 311.816364][T17975] 8021q: adding VLAN 0 to HW filter on device macvlan2 [ 312.001676][T17988] 8021q: VLANs not supported on ip_vti0 [ 313.035279][T18075] hsr_slave_0: hsr_addr_subst_dest: Unknown node [ 313.041790][T18075] hsr_slave_1: hsr_addr_subst_dest: Unknown node [ 313.119106][T18084] netlink: 'syz.5.3470': attribute type 3 has an invalid length. [ 313.154340][T18084] netlink: 'syz.5.3470': attribute type 3 has an invalid length. [ 313.639256][T18121] netlink: 'syz.5.3480': attribute type 1 has an invalid length. [ 313.658105][T18121] netlink: 'syz.5.3480': attribute type 2 has an invalid length. [ 313.781675][T18123] bond4: option lacp_active: mode dependency failed, not supported in mode balance-rr(0) [ 313.810326][T18123] bond4 (unregistering): Released all slaves [ 314.319918][T18173] __nla_validate_parse: 21 callbacks suppressed [ 314.319940][T18173] netlink: 60 bytes leftover after parsing attributes in process `syz.5.3493'. [ 314.641610][T18191] netlink: 32 bytes leftover after parsing attributes in process `syz.6.3497'. [ 314.814869][T18198] C: renamed from lo (while UP) [ 314.819455][T18205] netlink: 4 bytes leftover after parsing attributes in process `syz.2.3499'. [ 314.837610][T18198] A link change request failed with some changes committed already. Interface C may have been left with an inconsistent configuration, please check. [ 315.020024][T18214] netlink: 8 bytes leftover after parsing attributes in process `syz.3.3500'. [ 315.041610][T18214] netlink: 12 bytes leftover after parsing attributes in process `syz.3.3500'. [ 315.193371][ C0] bridge0: port 1(bridge_slave_0) entered forwarding state [ 315.200684][ C0] bridge0: topology change detected, propagating [ 315.630381][T18245] netlink: 32 bytes leftover after parsing attributes in process `syz.5.3508'. [ 315.708183][T18246] netlink: 'syz.5.3508': attribute type 10 has an invalid length. [ 315.715588][T18250] netlink: 8 bytes leftover after parsing attributes in process `syz.3.3509'. [ 315.733995][T18250] netlink: 'syz.3.3509': attribute type 1 has an invalid length. [ 315.741881][T18250] netlink: 'syz.3.3509': attribute type 2 has an invalid length. [ 315.795924][T18254] ipt_ECN: cannot use operation on non-tcp rule [ 315.836624][ T3551] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 315.844897][T10279] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 316.069355][T18264] netlink: 'syz.6.3513': attribute type 9 has an invalid length. [ 316.226960][T18272] syzkaller0: entered promiscuous mode [ 316.254901][T18272] syzkaller0: entered allmulticast mode [ 316.293473][T18276] syzkaller1: entered promiscuous mode [ 316.303187][T18276] syzkaller1: entered allmulticast mode [ 316.466156][T18297] syzkaller0: entered promiscuous mode [ 316.471942][T18297] syzkaller0: entered allmulticast mode [ 316.479766][T17444] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 316.490653][ T2952] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 316.498795][ T2952] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 316.521245][T18297] netlink: 36 bytes leftover after parsing attributes in process `syz.3.3518'. [ 317.116979][ T2952] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 317.400767][T18329] netlink: 60 bytes leftover after parsing attributes in process `syz.5.3522'. [ 317.401182][T18333] netlink: 'syz.6.3525': attribute type 13 has an invalid length. [ 317.462149][T18333] veth0_macvtap: left promiscuous mode [ 317.506069][T18333] macvtap0: entered allmulticast mode [ 317.547596][T18333] macvtap0: refused to change device tx_queue_len [ 317.760606][ T1306] ieee802154 phy1 wpan1: encryption failed: -22 [ 317.761711][T18341] netlink: 4 bytes leftover after parsing attributes in process `syz.6.3525'. [ 317.857662][T18341] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 317.881530][T18341] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 317.927680][T18341] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 317.953035][T18341] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 318.491180][T18413] IPVS: length: 239 != 24 [ 318.562652][T18411] bond4: entered allmulticast mode [ 318.665476][T18421] netlink: 'syz.1.3542': attribute type 1 has an invalid length. [ 318.708620][T18421] netlink: 'syz.1.3542': attribute type 2 has an invalid length. [ 319.035737][T18444] Cannot find add_set index 2 as target [ 319.042627][T18436] netlink: 'syz.6.3546': attribute type 5 has an invalid length. [ 319.107134][T18449] netlink: 'syz.3.3547': attribute type 13 has an invalid length. [ 319.186779][T18435] syzkaller0: entered promiscuous mode [ 319.203532][T18453] netlink: 'syz.2.3551': attribute type 23 has an invalid length. [ 319.213122][T18435] syzkaller0: entered allmulticast mode [ 319.231982][T18450] pim6reg1: entered promiscuous mode [ 319.242577][T18450] pim6reg1: entered allmulticast mode [ 319.551285][T18473] __nla_validate_parse: 6 callbacks suppressed [ 319.551307][T18473] netlink: 8 bytes leftover after parsing attributes in process `syz.2.3555'. [ 319.644616][T18473] netlink: 'syz.2.3555': attribute type 1 has an invalid length. [ 319.658348][T18473] netlink: 'syz.2.3555': attribute type 2 has an invalid length. [ 319.691897][T18477] lo: Caught tx_queue_len zero misconfig [ 319.796141][T18488] netlink: 'syz.6.3558': attribute type 1 has an invalid length. [ 319.809228][T18488] openvswitch: netlink: Missing key (keys=40, expected=100) [ 320.689707][T18531] ip6erspan0: entered promiscuous mode [ 320.707209][T18531] ip6erspan0: entered allmulticast mode [ 320.734546][T18534] sctp: [Deprecated]: syz.3.3564 (pid 18534) Use of int in maxseg socket option. [ 320.734546][T18534] Use struct sctp_assoc_value instead [ 320.813487][T18541] netlink: 'syz.3.3564': attribute type 3 has an invalid length. [ 320.821268][T18541] netlink: 666 bytes leftover after parsing attributes in process `syz.3.3564'. [ 321.047769][T18556] netlink: 'syz.1.3570': attribute type 10 has an invalid length. [ 321.107659][T18556] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 321.121820][T18556] bond0: (slave batadv0): Enslaving as an active interface with an up link [ 321.155156][T18562] netlink: 12 bytes leftover after parsing attributes in process `syz.2.3571'. [ 321.244001][T18566] netlink: 8 bytes leftover after parsing attributes in process `syz.5.3573'. [ 321.593839][T16914] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 321.603003][ T3551] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 321.951648][T18590] netlink: 8 bytes leftover after parsing attributes in process `syz.1.3578'. [ 322.238881][ T7307] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 322.249052][T18601] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 322.249206][T16914] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 322.268652][T10272] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 322.831236][T18631] netlink: 12 bytes leftover after parsing attributes in process `syz.3.3588'. [ 322.886314][ T60] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 322.962521][T18642] sctp: [Deprecated]: syz.2.3591 (pid 18642) Use of int in max_burst socket option deprecated. [ 322.962521][T18642] Use struct sctp_assoc_value instead [ 323.047024][T18636] macvlan2: entered promiscuous mode [ 323.086181][T18651] netlink: 8 bytes leftover after parsing attributes in process `syz.2.3593'. [ 323.098625][T18636] macvlan2: entered allmulticast mode [ 323.106061][T18636] bond3: entered promiscuous mode [ 323.112040][T18636] 8021q: adding VLAN 0 to HW filter on device macvlan2 [ 323.127353][T18636] bond3: left promiscuous mode [ 323.615928][T18681] netlink: 12 bytes leftover after parsing attributes in process `syz.1.3598'. [ 323.815544][T18685] netlink: 60 bytes leftover after parsing attributes in process `syz.5.3601'. [ 323.930849][T18692] Cannot find add_set index 65532 as target [ 323.954157][T18692] netlink: 8 bytes leftover after parsing attributes in process `syz.1.3602'. [ 324.045336][T18695] Freezing with imperfect legacy cgroup freezer. See cgroup.freeze of cgroup v2 [ 324.227096][T18702] syzkaller1: entered promiscuous mode [ 324.245716][T18702] syzkaller1: entered allmulticast mode [ 324.692088][T18731] __nla_validate_parse: 1 callbacks suppressed [ 324.692108][T18731] netlink: 68 bytes leftover after parsing attributes in process `syz.5.3612'. [ 324.714536][T18731] netlink: 12 bytes leftover after parsing attributes in process `syz.5.3612'. [ 324.735343][ T9] IPVS: starting estimator thread 0... [ 324.836021][T18742] validate_nla: 2 callbacks suppressed [ 324.836041][T18742] netlink: 'syz.1.3614': attribute type 2 has an invalid length. [ 324.852470][T18739] IPVS: using max 36 ests per chain, 86400 per kthread [ 324.859528][T18741] netlink: 'syz.1.3614': attribute type 2 has an invalid length. [ 325.120192][T18755] v: renamed from vlan0 [ 325.325382][T18769] netlink: 20 bytes leftover after parsing attributes in process `syz.2.3622'. [ 325.384454][T18773] netlink: 8 bytes leftover after parsing attributes in process `syz.5.3621'. [ 325.402493][T18773] netlink: 'syz.5.3621': attribute type 1 has an invalid length. [ 325.410427][T18773] netlink: 'syz.5.3621': attribute type 2 has an invalid length. [ 325.565905][T18784] FAULT_INJECTION: forcing a failure. [ 325.565905][T18784] name failslab, interval 1, probability 0, space 0, times 0 [ 325.605077][T18784] CPU: 0 UID: 0 PID: 18784 Comm: syz.1.3624 Not tainted syzkaller #0 PREEMPT(full) [ 325.605123][T18784] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/25/2025 [ 325.605151][T18784] Call Trace: [ 325.605159][T18784] [ 325.605168][T18784] dump_stack_lvl+0x189/0x250 [ 325.605195][T18784] ? __pfx____ratelimit+0x10/0x10 [ 325.605216][T18784] ? __pfx_dump_stack_lvl+0x10/0x10 [ 325.605234][T18784] ? __pfx__printk+0x10/0x10 [ 325.605263][T18784] ? __pfx___might_resched+0x10/0x10 [ 325.605286][T18784] should_fail_ex+0x414/0x560 [ 325.605312][T18784] should_failslab+0xa8/0x100 [ 325.605338][T18784] __kmalloc_noprof+0xcb/0x800 [ 325.605359][T18784] ? tomoyo_realpath_from_path+0xe3/0x5d0 [ 325.605385][T18784] tomoyo_realpath_from_path+0xe3/0x5d0 [ 325.605405][T18784] ? tomoyo_domain+0xd8/0x130 [ 325.605428][T18784] ? tomoyo_path_number_perm+0x1bc/0x5a0 [ 325.605451][T18784] tomoyo_path_number_perm+0x1e8/0x5a0 [ 325.605482][T18784] ? __pfx_tomoyo_path_number_perm+0x10/0x10 [ 325.605523][T18784] ? __mutex_unlock_slowpath+0x1a1/0x730 [ 325.605565][T18784] ? __fget_files+0x2a/0x420 [ 325.605586][T18784] ? __fget_files+0x3a0/0x420 [ 325.605600][T18784] ? __fget_files+0x2a/0x420 [ 325.605619][T18784] security_file_ioctl+0xcb/0x2d0 [ 325.605644][T18784] __se_sys_ioctl+0x47/0x170 [ 325.605667][T18784] do_syscall_64+0xfa/0xf80 [ 325.605689][T18784] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 325.605705][T18784] ? clear_bhb_loop+0x60/0xb0 [ 325.605725][T18784] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 325.605741][T18784] RIP: 0033:0x7f040ab8f749 [ 325.605756][T18784] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 325.605769][T18784] RSP: 002b:00007f040babe038 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 325.605787][T18784] RAX: ffffffffffffffda RBX: 00007f040ade5fa0 RCX: 00007f040ab8f749 [ 325.605799][T18784] RDX: 0000200000000040 RSI: 0000000000008922 RDI: 0000000000000003 [ 325.605808][T18784] RBP: 00007f040babe090 R08: 0000000000000000 R09: 0000000000000000 [ 325.605817][T18784] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 325.605827][T18784] R13: 00007f040ade6038 R14: 00007f040ade5fa0 R15: 00007ffd0834bc58 [ 325.605856][T18784] [ 325.605864][T18784] ERROR: Out of memory at tomoyo_realpath_from_path. [ 325.855700][T18789] netlink: 4 bytes leftover after parsing attributes in process `syz.5.3626'. [ 325.974307][T18799] netlink: 'syz.2.3627': attribute type 1 has an invalid length. [ 326.005454][T18799] netlink: 224 bytes leftover after parsing attributes in process `syz.2.3627'. [ 326.097180][T18800] netlink: 36 bytes leftover after parsing attributes in process `syz.5.3628'. [ 326.308391][T18819] netlink: 4 bytes leftover after parsing attributes in process `syz.3.3631'. [ 326.357884][T18819] netlink: 'syz.3.3631': attribute type 1 has an invalid length. [ 326.401307][T18827] netlink: 24 bytes leftover after parsing attributes in process `syz.1.3635'. [ 326.655226][T18844] x_tables: duplicate underflow at hook 1 [ 326.718290][ T244] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 326.847513][T18857] netlink: 'syz.6.3643': attribute type 1 has an invalid length. [ 326.858848][T18843] bridge0: port 3(dummy0) entered disabled state [ 326.864235][T18857] netlink: 228 bytes leftover after parsing attributes in process `syz.6.3643'. [ 326.865451][T18843] bridge0: port 2(bridge_slave_1) entered disabled state [ 326.882428][T18843] bridge0: port 1(bridge_slave_0) entered disabled state [ 326.929534][T18843] dummy0: left allmulticast mode [ 326.937227][T18843] bridge0: port 3(dummy0) entered disabled state [ 326.975761][T18843] bond0: (slave batadv0): Releasing backup interface [ 327.010016][T18843] bridge_slave_0: left allmulticast mode [ 327.016038][T18843] bridge_slave_0: left promiscuous mode [ 327.021756][T18843] bridge0: port 1(bridge_slave_0) entered disabled state [ 327.047781][T18843] bridge_slave_1: left allmulticast mode [ 327.054619][T18843] bridge_slave_1: left promiscuous mode [ 327.060339][T18843] bridge0: port 2(bridge_slave_1) entered disabled state [ 327.077209][T18843] bond0: (slave bond_slave_0): Releasing backup interface [ 327.094176][T18843] team0: Port device team_slave_0 removed [ 327.108519][T18843] team0: Port device team_slave_1 removed [ 327.118396][T18843] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 327.130574][T18843] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 327.143728][T18843] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 327.155658][T18843] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 327.173455][T18843] A link change request failed with some changes committed already. Interface hsr_slave_0 may have been left with an inconsistent configuration, please check. [ 327.190215][T18840] A link change request failed with some changes committed already. Interface hsr_slave_0 may have been left with an inconsistent configuration, please check. [ 327.207023][T18853] netlink: 'syz.2.3641': attribute type 2 has an invalid length. [ 327.259398][T18859] syzkaller1: entered promiscuous mode [ 327.266685][T18859] syzkaller1: entered allmulticast mode [ 327.281837][T18853] netlink: 'syz.2.3641': attribute type 2 has an invalid length. [ 327.292138][T18866] xt_ecn: cannot match TCP bits for non-tcp packets [ 327.298276][T18853] netlink: 'syz.2.3641': attribute type 2 has an invalid length. [ 327.359793][ T2952] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 327.374032][ T244] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 327.568807][T18877] bond5: Unable to set peer notification delay as MII monitoring is disabled [ 327.581750][T18877] bond5 (unregistering): Released all slaves [ 327.601391][T18884] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 327.737322][T18889] openvswitch: netlink: Missing key (keys=40, expected=10000000) [ 327.766444][T18891] FAULT_INJECTION: forcing a failure. [ 327.766444][T18891] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 327.810989][T18891] CPU: 1 UID: 0 PID: 18891 Comm: syz.3.3652 Not tainted syzkaller #0 PREEMPT(full) [ 327.811018][T18891] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/25/2025 [ 327.811029][T18891] Call Trace: [ 327.811037][T18891] [ 327.811051][T18891] dump_stack_lvl+0x189/0x250 [ 327.811076][T18891] ? __pfx____ratelimit+0x10/0x10 [ 327.811099][T18891] ? __pfx_dump_stack_lvl+0x10/0x10 [ 327.811116][T18891] ? __pfx__printk+0x10/0x10 [ 327.811139][T18891] ? __might_fault+0xb0/0x130 [ 327.811170][T18891] should_fail_ex+0x414/0x560 [ 327.811194][T18891] _copy_from_user+0x2d/0xb0 [ 327.811219][T18891] sock_do_ioctl+0x182/0x300 [ 327.811242][T18891] ? __pfx_sock_do_ioctl+0x10/0x10 [ 327.811275][T18891] sock_ioctl+0x576/0x790 [ 327.811296][T18891] ? __pfx_sock_ioctl+0x10/0x10 [ 327.811315][T18891] ? __fget_files+0x3a0/0x420 [ 327.811330][T18891] ? __fget_files+0x2a/0x420 [ 327.811349][T18891] ? bpf_lsm_file_ioctl+0x9/0x20 [ 327.811365][T18891] ? __pfx_sock_ioctl+0x10/0x10 [ 327.811382][T18891] __se_sys_ioctl+0xfc/0x170 [ 327.811405][T18891] do_syscall_64+0xfa/0xf80 [ 327.811428][T18891] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 327.811445][T18891] ? clear_bhb_loop+0x60/0xb0 [ 327.811465][T18891] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 327.811481][T18891] RIP: 0033:0x7ffaaa98f749 [ 327.811498][T18891] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 327.811516][T18891] RSP: 002b:00007ffaab7a7038 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 327.811535][T18891] RAX: ffffffffffffffda RBX: 00007ffaaabe5fa0 RCX: 00007ffaaa98f749 [ 327.811547][T18891] RDX: 0000200000000040 RSI: 0000000000008922 RDI: 0000000000000003 [ 327.811558][T18891] RBP: 00007ffaab7a7090 R08: 0000000000000000 R09: 0000000000000000 [ 327.811569][T18891] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 327.811578][T18891] R13: 00007ffaaabe6038 R14: 00007ffaaabe5fa0 R15: 00007ffe2101ed88 [ 327.811609][T18891] [ 327.923823][ T2952] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 328.027844][T10278] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 328.035988][T10278] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 328.228688][T18902] geneve2: entered promiscuous mode [ 328.259475][ T2952] netdevsim netdevsim1 netdevsim0: set [1, 1] type 2 family 0 port 20002 - 0 [ 328.351476][ T2952] netdevsim netdevsim1 netdevsim1: set [1, 1] type 2 family 0 port 20002 - 0 [ 328.384633][ T2952] netdevsim netdevsim1 netdevsim2: set [1, 1] type 2 family 0 port 20002 - 0 [ 328.435211][ T2952] netdevsim netdevsim1 netdevsim3: set [1, 1] type 2 family 0 port 20002 - 0 [ 329.094609][T18949] FAULT_INJECTION: forcing a failure. [ 329.094609][T18949] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 329.121017][T18950] syzkaller1: entered promiscuous mode [ 329.126553][T18949] CPU: 1 UID: 0 PID: 18949 Comm: syz.2.3668 Not tainted syzkaller #0 PREEMPT(full) [ 329.126578][T18949] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/25/2025 [ 329.126588][T18949] Call Trace: [ 329.126595][T18949] [ 329.126601][T18949] dump_stack_lvl+0x189/0x250 [ 329.126625][T18949] ? __pfx____ratelimit+0x10/0x10 [ 329.126646][T18949] ? __pfx_dump_stack_lvl+0x10/0x10 [ 329.126662][T18949] ? __pfx__printk+0x10/0x10 [ 329.126698][T18949] should_fail_ex+0x414/0x560 [ 329.126723][T18949] _copy_to_user+0x31/0xb0 [ 329.126749][T18949] simple_read_from_buffer+0xe1/0x170 [ 329.126778][T18949] proc_fail_nth_read+0x1b3/0x220 [ 329.126804][T18949] ? __pfx_proc_fail_nth_read+0x10/0x10 [ 329.126828][T18949] ? rw_verify_area+0x2a6/0x4d0 [ 329.126849][T18949] ? __pfx_proc_fail_nth_read+0x10/0x10 [ 329.126870][T18949] vfs_read+0x200/0xa30 [ 329.126890][T18949] ? fdget_pos+0x247/0x320 [ 329.126909][T18949] ? __pfx___mutex_lock+0x10/0x10 [ 329.126931][T18949] ? __pfx_vfs_read+0x10/0x10 [ 329.126952][T18949] ? __fget_files+0x2a/0x420 [ 329.126972][T18949] ? __fget_files+0x3a0/0x420 [ 329.126986][T18949] ? __fget_files+0x2a/0x420 [ 329.127010][T18949] ksys_read+0x145/0x250 [ 329.127038][T18949] ? __pfx_ksys_read+0x10/0x10 [ 329.127059][T18949] ? do_syscall_64+0xbe/0xf80 [ 329.127083][T18949] do_syscall_64+0xfa/0xf80 [ 329.127104][T18949] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 329.127120][T18949] ? clear_bhb_loop+0x60/0xb0 [ 329.127140][T18949] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 329.127156][T18949] RIP: 0033:0x7f5b93b8e15c [ 329.127173][T18949] Code: ec 28 48 89 54 24 18 48 89 74 24 10 89 7c 24 08 e8 99 93 02 00 48 8b 54 24 18 48 8b 74 24 10 41 89 c0 8b 7c 24 08 31 c0 0f 05 <48> 3d 00 f0 ff ff 77 34 44 89 c7 48 89 44 24 08 e8 ef 93 02 00 48 [ 329.127187][T18949] RSP: 002b:00007f5b94a9d030 EFLAGS: 00000246 ORIG_RAX: 0000000000000000 [ 329.127204][T18949] RAX: ffffffffffffffda RBX: 00007f5b93de5fa0 RCX: 00007f5b93b8e15c [ 329.127216][T18949] RDX: 000000000000000f RSI: 00007f5b94a9d0a0 RDI: 0000000000000004 [ 329.127226][T18949] RBP: 00007f5b94a9d090 R08: 0000000000000000 R09: 0000000000000000 [ 329.127236][T18949] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 329.127246][T18949] R13: 00007f5b93de6038 R14: 00007f5b93de5fa0 R15: 00007ffd054fde18 [ 329.127276][T18949] [ 329.361926][ T25] block nbd10: Possible stuck request ffff888025677000: control (read@0,1024B). Runtime 210 seconds [ 329.376603][ T25] block nbd10: Possible stuck request ffff8880256771c0: control (read@1024,1024B). Runtime 210 seconds [ 329.393975][ T25] block nbd10: Possible stuck request ffff888025677380: control (read@2048,1024B). Runtime 210 seconds [ 329.422508][ T25] block nbd10: Possible stuck request ffff888025677540: control (read@3072,1024B). Runtime 210 seconds [ 329.443527][T18950] syzkaller1: entered allmulticast mode [ 329.815712][T18983] __nla_validate_parse: 2 callbacks suppressed [ 329.815730][T18983] netlink: 60 bytes leftover after parsing attributes in process `syz.1.3679'. [ 329.922774][ T11] block nbd11: Possible stuck request ffff8880256de000: control (read@0,1024B). Runtime 210 seconds [ 329.933973][ T11] block nbd11: Possible stuck request ffff8880256de1c0: control (read@1024,1024B). Runtime 210 seconds [ 329.946006][ T11] block nbd11: Possible stuck request ffff8880256de380: control (read@2048,1024B). Runtime 210 seconds [ 329.957403][ T11] block nbd11: Possible stuck request ffff8880256de540: control (read@3072,1024B). Runtime 210 seconds [ 330.093316][T18997] netlink: 8 bytes leftover after parsing attributes in process `syz.3.3684'. [ 330.762616][T19029] nbd13: detected capacity change from 0 to 130292127891583 [ 330.791111][T19034] netlink: 64 bytes leftover after parsing attributes in process `syz.3.3692'. [ 330.817405][T19034] block nbd0: reconnected socket [ 330.828061][ T7027] block nbd13: Receive control failed (result -104) [ 330.850625][ T7033] block nbd0: Receive control failed (result -32) [ 331.136050][T19056] netlink: 56 bytes leftover after parsing attributes in process `syz.1.3700'. [ 331.148644][T19047] bond0: (slave bond_slave_0): Releasing backup interface [ 331.170259][T19059] netlink: 56 bytes leftover after parsing attributes in process `syz.2.3697'. [ 331.184420][T19047] bond0: (slave bond_slave_1): Releasing backup interface [ 331.212120][T19047] team0: Port device team_slave_0 removed [ 331.261418][T19047] team0: Port device team_slave_1 removed [ 331.280040][T19047] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 331.290053][T19047] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 331.301686][T19047] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 331.325964][T19047] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 331.493969][T19064] netem: unknown loss type 0 [ 331.505422][T19064] netem: change failed [ 331.611862][T19075] bond0 (unregistering): Released all slaves [ 331.644803][T19080] delete_channel: no stack [ 331.662958][T19085] netlink: 16 bytes leftover after parsing attributes in process `syz.5.3706'. [ 331.727110][T19078] bond0 (unregistering): Released all slaves [ 331.773035][T19087] netlink: 72 bytes leftover after parsing attributes in process `syz.1.3707'. [ 332.121994][T19100] net_ratelimit: 1 callbacks suppressed [ 332.122017][T19100] A link change request failed with some changes committed already. Interface C may have been left with an inconsistent configuration, please check. [ 332.491636][ T36] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 332.501550][T17444] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 332.770191][T19102] wg1 speed is unknown, defaulting to 1000 [ 333.118958][ T60] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 333.130351][ T3437] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 333.140407][T19108] netlink: 8 bytes leftover after parsing attributes in process `syz.1.3711'. [ 333.181504][T19108] netdevsim netdevsim1 netdevsim0: entered promiscuous mode [ 333.201307][T19147] netlink: 212408 bytes leftover after parsing attributes in process `syz.5.3722'. [ 333.224071][T19149] validate_nla: 32 callbacks suppressed [ 333.224087][T19149] netlink: 'syz.6.3723': attribute type 9 has an invalid length. [ 333.241119][T19146] sch_tbf: burst 127 is lower than device syzkaller0 mtu (1514) ! [ 333.251269][T19146] syzkaller0: entered promiscuous mode [ 333.257675][T19146] syzkaller0: entered allmulticast mode [ 333.298715][T19150] veth5: entered allmulticast mode [ 333.755862][T10276] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 333.764095][ T140] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 334.016436][T19183] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 334.027357][T19183] netlink: 'syz.6.3732': attribute type 21 has an invalid length. [ 334.037931][T19183] netlink: 'syz.6.3732': attribute type 6 has an invalid length. [ 334.064691][T19183] netlink: 132 bytes leftover after parsing attributes in process `syz.6.3732'. [ 334.090652][ T11] block nbd13: Connection timed out, retrying (0/1 alive) [ 334.099039][ T11] block nbd13: Connection timed out, retrying (0/1 alive) [ 334.108156][ T11] block nbd13: Connection timed out, retrying (0/1 alive) [ 334.115759][ T11] block nbd13: Connection timed out, retrying (0/1 alive) [ 334.123782][T19187] block nbd13: Dead connection, failed to find a fallback [ 334.135050][T19187] block nbd13: shutting down sockets [ 334.141931][T19187] I/O error, dev nbd13, sector 4 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 2 [ 334.153478][T19187] Buffer I/O error on dev nbd13, logical block 2, async page read [ 334.161530][T19187] I/O error, dev nbd13, sector 2 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 2 [ 334.171164][T19187] Buffer I/O error on dev nbd13, logical block 1, async page read [ 334.179931][T19187] I/O error, dev nbd13, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 2 [ 334.189985][T19187] Buffer I/O error on dev nbd13, logical block 0, async page read [ 334.198488][T19187] I/O error, dev nbd13, sector 6 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 2 [ 334.208046][T19187] Buffer I/O error on dev nbd13, logical block 3, async page read [ 334.218107][T11667] I/O error, dev nbd13, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 2 [ 334.229158][T11667] Buffer I/O error on dev nbd13, logical block 0, async page read [ 334.237703][T11667] I/O error, dev nbd13, sector 2 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 2 [ 334.251229][T11667] Buffer I/O error on dev nbd13, logical block 1, async page read [ 334.267175][T11667] I/O error, dev nbd13, sector 4 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 2 [ 334.286057][T11667] Buffer I/O error on dev nbd13, logical block 2, async page read [ 334.316751][T11667] I/O error, dev nbd13, sector 6 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 2 [ 334.341283][T11667] Buffer I/O error on dev nbd13, logical block 3, async page read [ 334.365436][T11667] I/O error, dev nbd13, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 2 [ 334.374933][T11667] Buffer I/O error on dev nbd13, logical block 0, async page read [ 334.410707][T11667] I/O error, dev nbd13, sector 2 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 2 [ 334.438938][T11667] Buffer I/O error on dev nbd13, logical block 1, async page read [ 334.452813][T19206] openvswitch: netlink: Unexpected mask (mask=20040, allowed=10048) [ 334.455734][T11667] ldm_validate_partition_table(): Disk read failed. [ 334.469086][T19207] Bluetooth: MGMT ver 1.23 [ 334.494398][T11667] Dev nbd13: unable to read RDB block 0 [ 334.534830][T11667] nbd13: unable to read partition table [ 334.559640][T11667] ldm_validate_partition_table(): Disk read failed. [ 334.569396][T11667] Dev nbd13: unable to read RDB block 0 [ 334.577637][T11667] nbd13: unable to read partition table [ 334.629483][T19215] netlink: 'syz.6.3742': attribute type 30 has an invalid length. [ 334.770478][T19228] netlink: 'syz.1.3744': attribute type 13 has an invalid length. [ 334.815471][T19228] gretap0: refused to change device tx_queue_len [ 334.829869][T19228] A link change request failed with some changes committed already. Interface gretap0 may have been left with an inconsistent configuration, please check. [ 334.961583][T19239] xt_ecn: cannot match TCP bits for non-tcp packets [ 335.011422][T19239] __nla_validate_parse: 2 callbacks suppressed [ 335.011446][T19239] netlink: 12 bytes leftover after parsing attributes in process `syz.6.3749'. [ 335.045703][T19246] netlink: 14 bytes leftover after parsing attributes in process `syz.5.3750'. [ 335.168332][T19258] xt_TCPMSS: Only works on TCP SYN packets [ 335.357638][T19267] Bluetooth: MGMT ver 1.23 [ 335.393392][T19265] No such timeout policy "syz0" [ 335.442000][T19272] set match dimension is over the limit! [ 335.514933][T19272] netlink: 576 bytes leftover after parsing attributes in process `syz.1.3756'. [ 335.564840][T19272] netlink: 'syz.1.3756': attribute type 2 has an invalid length. [ 335.731872][T19282] netlink: 8 bytes leftover after parsing attributes in process `syz.5.3759'. [ 335.775868][T19251] lec:lec_atm_close: lec0: Shut down! [ 336.244605][T19315] netlink: 8 bytes leftover after parsing attributes in process `syz.5.3768'. [ 336.292050][T19315] workqueue: Failed to create a rescuer kthread for wq "bond4": -EINTR [ 336.724376][T19349] syzkaller1: entered promiscuous mode [ 336.762406][T19349] syzkaller1: entered allmulticast mode [ 337.109412][T19367] xt_CT: You must specify a L4 protocol and not use inversions on it [ 337.162944][T19369] netlink: 60 bytes leftover after parsing attributes in process `syz.1.3779'. [ 337.165326][ T60] lec:lec_start_xmit: lec0:No lecd attached [ 337.249934][T19374] netlink: 52 bytes leftover after parsing attributes in process `syz.6.3780'. [ 337.363633][T19380] netlink: 'syz.6.3780': attribute type 27 has an invalid length. [ 337.374482][T19383] netlink: 20 bytes leftover after parsing attributes in process `syz.3.3782'. [ 337.597478][T16914] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 337.628979][T19396] x_tables: unsorted entry at hook 3 [ 337.653158][T19391] netlink: 24 bytes leftover after parsing attributes in process `syz.5.3785'. [ 337.684505][T19400] tipc: Enabled bearer , priority 13 [ 337.876081][T19413] xt_hashlimit: overflow, rate too high: 0 [ 337.990564][T19424] netlink: 12 bytes leftover after parsing attributes in process `syz.6.3794'. [ 338.010101][T19424] xfrm1: entered promiscuous mode [ 338.015517][T19424] xfrm1: entered allmulticast mode [ 338.153502][T10275] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 338.239937][T10275] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 338.456896][T19449] syzkaller1: entered promiscuous mode [ 338.467778][T19449] syzkaller1: entered allmulticast mode [ 338.684708][ T9] tipc: Node number set to 3332767744 [ 338.890762][T16914] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 339.200490][T19495] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 339.421549][T19510] netlink: 'syz.2.3816': attribute type 4 has an invalid length. [ 339.448912][T19510] netlink: 'syz.2.3816': attribute type 4 has an invalid length. [ 339.515410][T10272] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 339.525071][ T3437] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 340.113281][T19544] __nla_validate_parse: 10 callbacks suppressed [ 340.113308][T19544] netlink: 8 bytes leftover after parsing attributes in process `syz.3.3828'. [ 340.227709][T19552] netlink: 8 bytes leftover after parsing attributes in process `syz.3.3828'. [ 340.237012][T19552] netlink: 20 bytes leftover after parsing attributes in process `syz.3.3828'. [ 340.282867][T19552] geneve2: entered promiscuous mode [ 340.292384][T19552] geneve2: entered allmulticast mode [ 340.454410][T19561] syzkaller1: entered promiscuous mode [ 340.463861][T19561] syzkaller1: entered allmulticast mode [ 340.561370][T19568] bridge0: adding interface bridge0 with same address as a received packet (addr:aa:aa:aa:aa:aa:1c, vlan:0) [ 340.579788][T19568] bridge0: entered allmulticast mode [ 340.617311][T19571] syzkaller0: entered promiscuous mode [ 340.628902][T19571] syzkaller0: entered allmulticast mode [ 340.839051][T19583] netlink: 56 bytes leftover after parsing attributes in process `syz.2.3839'. [ 340.863821][T19587] netlink: 4 bytes leftover after parsing attributes in process `syz.6.3840'. [ 340.898473][T19587] openvswitch: netlink: Key type 54 is out of range max 32 [ 341.307157][T19621] syzkaller1: entered promiscuous mode [ 341.333196][T19623] netlink: 60 bytes leftover after parsing attributes in process `syz.1.3848'. [ 341.342422][T19621] syzkaller1: entered allmulticast mode [ 341.623761][T19638] ip6tnl0: Caught tx_queue_len zero misconfig [ 341.888911][T19661] netlink: 20 bytes leftover after parsing attributes in process `syz.1.3857'. [ 341.915955][T19663] netlink: 12 bytes leftover after parsing attributes in process `syz.2.3858'. [ 341.957542][T19663] netlink: 'syz.2.3858': attribute type 23 has an invalid length. [ 341.999551][T19670] delete_channel: no stack [ 342.109642][T19674] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 342.131333][T19677] netlink: 8 bytes leftover after parsing attributes in process `syz.5.3855'. [ 342.427732][T19688] netlink: 60 bytes leftover after parsing attributes in process `syz.3.3862'. [ 342.442698][T19677] 8021q: adding VLAN 0 to HW filter on device bond4 [ 342.712280][ C1] lec0: NETDEV WATCHDOG: CPU: 1: transmit queue 0 timed out 5540 ms [ 342.721129][ C1] lec:lec_tx_timeout: lec0 [ 342.727676][ C1] lec:lec_start_xmit: lec0:No lecd attached [ 342.839153][T19693] syzkaller1: entered promiscuous mode [ 342.871178][T19693] syzkaller1: entered allmulticast mode [ 343.274518][T19736] netlink: 'syz.3.3872': attribute type 4 has an invalid length. [ 343.359406][ T60] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 343.375375][T19742] netlink: 'syz.5.3876': attribute type 1 has an invalid length. [ 343.392366][T19742] netlink: 'syz.5.3876': attribute type 2 has an invalid length. [ 343.427181][T19736] `: renamed from bond0 (while UP) [ 343.913236][ T36] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 343.996631][T10275] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 344.008148][ T36] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 344.070451][T19790] nbd: nbd5 already in use [ 344.081926][T19790] block nbd5: NBD_DISCONNECT [ 344.089055][T19790] block nbd5: Send disconnect failed -32 [ 344.108227][T19790] block nbd5: shutting down sockets [ 344.321811][T19799] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 344.340253][T19806] netlink: 'syz.6.3896': attribute type 12 has an invalid length. [ 344.368473][T19806] netlink: 'syz.6.3896': attribute type 29 has an invalid length. [ 344.423959][T19799] bridge_slave_0: left allmulticast mode [ 344.429635][T19799] bridge_slave_0: left promiscuous mode [ 344.449209][T19799] bridge0: port 1(bridge_slave_0) entered disabled state [ 344.467386][T19799] bridge_slave_1: left allmulticast mode [ 344.476275][T19799] bridge_slave_1: left promiscuous mode [ 344.482292][T19799] bridge0: port 2(bridge_slave_1) entered disabled state [ 344.505768][T19799] `: (slave bond_slave_0): Releasing backup interface [ 344.521496][T19799] `: (slave bond_slave_1): Releasing backup interface [ 344.535017][T19818] netlink: 'syz.2.3901': attribute type 5 has an invalid length. [ 344.545595][T19818] netlink: 'syz.2.3901': attribute type 6 has an invalid length. [ 344.560728][T19799] team0: Port device team_slave_0 removed [ 344.573359][T19799] team0: Port device team_slave_1 removed [ 344.580052][T19799] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 344.588058][T19799] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 344.597118][T19799] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 344.605000][T19799] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 344.620587][T19822] netlink: 'syz.5.3900': attribute type 1 has an invalid length. [ 344.625504][T19799] A link change request failed with some changes committed already. Interface hsr_slave_0 may have been left with an inconsistent configuration, please check. [ 344.646495][T16914] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 344.654681][ T4104] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 344.665775][T19811] netlink: 'syz.6.3896': attribute type 12 has an invalid length. [ 344.675943][T19811] netlink: 'syz.6.3896': attribute type 29 has an invalid length. [ 344.765801][T19826] netlink: 'syz.1.3902': attribute type 1 has an invalid length. [ 344.811538][T19826] bond3: entered promiscuous mode [ 344.853385][T19826] 8021q: adding VLAN 0 to HW filter on device bond3 [ 344.863246][T19831] netlink: 'syz.3.3905': attribute type 1 has an invalid length. [ 344.877997][T19831] netlink: 'syz.3.3905': attribute type 2 has an invalid length. [ 344.891333][T19837] IPVS: rr: FWM 3 0x00000003 - no destination available [ 345.069495][T19847] macvlan0: entered promiscuous mode [ 345.131366][T19847] __nla_validate_parse: 24 callbacks suppressed [ 345.131390][T19847] netlink: 24 bytes leftover after parsing attributes in process `syz.3.3907'. [ 345.473101][T19862] team0: Caught tx_queue_len zero misconfig [ 345.778514][T19883] netlink: 8 bytes leftover after parsing attributes in process `syz.5.3917'. [ 345.874525][T19883] netlink: 'syz.5.3917': attribute type 1 has an invalid length. [ 345.903291][T19883] netlink: 'syz.5.3917': attribute type 2 has an invalid length. [ 345.935549][T19893] tipc: Started in network mode [ 345.954294][T19893] tipc: Node identity 080211, cluster identity 4711 [ 345.956798][T19895] netlink: 44 bytes leftover after parsing attributes in process `syz.3.3924'. [ 345.970219][T19893] tipc: Enabled bearer , priority 0 [ 346.024221][T19895] netlink: 43 bytes leftover after parsing attributes in process `syz.3.3924'. [ 346.040837][T19896] A link change request failed with some changes committed already. Interface geneve0 may have been left with an inconsistent configuration, please check. [ 346.056984][T19895] netlink: 43 bytes leftover after parsing attributes in process `syz.3.3924'. [ 346.141730][T19910] netlink: 40 bytes leftover after parsing attributes in process `syz.6.3927'. [ 346.229694][T19919] netlink: 16 bytes leftover after parsing attributes in process `syz.3.3929'. [ 346.298778][T19921] netlink: 64 bytes leftover after parsing attributes in process `syz.2.3930'. [ 346.363109][T19924] netlink: 211856 bytes leftover after parsing attributes in process `syz.1.3932'. [ 346.448201][T19939] syz_tun: entered allmulticast mode [ 346.503935][T19941] bridge2: entered promiscuous mode [ 346.509518][T19941] bridge2: entered allmulticast mode [ 346.519102][T19941] team0: Port device bridge2 added [ 346.559200][T19941] bridge0: port 1(team0) entered blocking state [ 346.579647][T19941] bridge0: port 1(team0) entered disabled state [ 346.589787][T19941] team0: entered allmulticast mode [ 346.597925][T19941] team0: entered promiscuous mode [ 346.627224][T19941] bridge3: entered promiscuous mode [ 346.634353][T19941] bridge3: entered allmulticast mode [ 346.645498][T19941] team0: Port device bridge3 added [ 346.655714][T19947] netlink: 256 bytes leftover after parsing attributes in process `syz.3.3939'. [ 346.786957][T19961] syzkaller0: entered promiscuous mode [ 346.804047][T19961] syzkaller0: entered allmulticast mode [ 347.083054][ T181] tipc: Node number set to 134353152 [ 347.182906][ T5205] udevd[5205]: worker [5851] /devices/virtual/block/nbd10 timeout; kill it [ 347.192161][ T5205] udevd[5205]: seq 12699 '/devices/virtual/block/nbd10' killed [ 347.212968][ T5205] udevd[5205]: worker [5836] /devices/virtual/block/nbd11 timeout; kill it [ 347.224896][ T5205] udevd[5205]: seq 12700 '/devices/virtual/block/nbd11' killed [ 347.465645][T19986] xt_CT: No such helper "snmp_trap" [ 347.473276][T19987] x_tables: duplicate underflow at hook 4 [ 347.653796][T19995] syzkaller0: entered promiscuous mode [ 347.659324][T19995] syzkaller0: entered allmulticast mode [ 348.015552][T20014] mac80211_hwsim hwsim29 syzkaller0: entered promiscuous mode [ 348.027007][T20014] mac80211_hwsim hwsim29 syzkaller0: entered allmulticast mode [ 348.473484][ C1] lec0: NETDEV WATCHDOG: CPU: 1: transmit queue 0 timed out 5740 ms [ 348.481554][ C1] lec:lec_tx_timeout: lec0 [ 348.488199][ C1] lec:lec_start_xmit: lec0:No lecd attached [ 348.774731][T20053] sctp: [Deprecated]: syz.5.3973 (pid 20053) Use of struct sctp_assoc_value in delayed_ack socket option. [ 348.774731][T20053] Use struct sctp_sack_info instead [ 348.839222][T20057] sctp: [Deprecated]: syz.5.3973 (pid 20057) Use of struct sctp_assoc_value in delayed_ack socket option. [ 348.839222][T20057] Use struct sctp_sack_info instead [ 348.955990][ T2952] net_ratelimit: 5 callbacks suppressed [ 348.956011][ T2952] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 349.077277][T20070] sock: sock_set_timeout: `syz.5.3977' (pid 20070) tries to set negative timeout [ 349.114834][ T4104] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 349.309767][T20087] veth0: entered promiscuous mode [ 349.380476][T20087] syzkaller0: entered promiscuous mode [ 349.395842][T20087] syzkaller0: entered allmulticast mode [ 349.586146][T20097] syzkaller1: entered promiscuous mode [ 349.608094][T20097] syzkaller1: entered allmulticast mode [ 349.711699][T20112] validate_nla: 6 callbacks suppressed [ 349.711720][T20112] netlink: 'syz.2.3987': attribute type 10 has an invalid length. [ 349.755561][ T12] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 349.763768][ T3027] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 349.855643][T20112] veth0_virt_wifi: entered allmulticast mode [ 349.910978][T20112] team0: Port device veth0_virt_wifi added [ 349.984946][T20121] sctp: [Deprecated]: syz.1.3990 (pid 20121) Use of int in maxseg socket option. [ 349.984946][T20121] Use struct sctp_assoc_value instead [ 350.115274][T20129] netlink: 'syz.2.3991': attribute type 1 has an invalid length. [ 350.216039][T20135] netlink: 'syz.6.3992': attribute type 4 has an invalid length. [ 350.269677][T20138] sctp: [Deprecated]: syz.2.3991 (pid 20138) Use of int in maxseg socket option. [ 350.269677][T20138] Use struct sctp_assoc_value instead [ 350.285383][T20139] __nla_validate_parse: 13 callbacks suppressed [ 350.285406][T20139] netlink: 64 bytes leftover after parsing attributes in process `syz.1.3993'. [ 350.376541][T20138] netlink: 8 bytes leftover after parsing attributes in process `syz.2.3991'. [ 350.403640][T20148] netlink: 24 bytes leftover after parsing attributes in process `syz.1.3993'. [ 350.405623][T10272] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 350.426823][ T140] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 350.463900][T20129] 8021q: adding VLAN 0 to HW filter on device bond5 [ 350.508705][T20134] bond5: (slave geneve2): making interface the new active one [ 350.519067][T20134] bond5: (slave geneve2): Enslaving as an active interface with an up link [ 350.590963][T20142] syzkaller1: entered promiscuous mode [ 350.600197][T20142] syzkaller1: entered allmulticast mode [ 350.661097][T20160] netlink: 'syz.5.3996': attribute type 1 has an invalid length. [ 351.556472][T20214] netlink: 'syz.5.4011': attribute type 2 has an invalid length. [ 351.575670][T20214] netlink: 244 bytes leftover after parsing attributes in process `syz.5.4011'. [ 351.601197][T20214] netlink: 'syz.5.4011': attribute type 21 has an invalid length. [ 351.639257][T20214] netlink: 4 bytes leftover after parsing attributes in process `syz.5.4011'. [ 351.689074][ T13] netdevsim netdevsim5 netdevsim0: set [0, 0] type 1 family 0 port 8472 - 0 [ 351.689211][T20214] netlink: 'syz.5.4011': attribute type 21 has an invalid length. [ 351.721679][ T13] netdevsim netdevsim5 netdevsim1: set [0, 0] type 1 family 0 port 8472 - 0 [ 351.727470][T20214] netlink: 4 bytes leftover after parsing attributes in process `syz.5.4011'. [ 351.750152][ T13] netdevsim netdevsim5 netdevsim2: set [0, 0] type 1 family 0 port 8472 - 0 [ 351.773425][ T13] netdevsim netdevsim5 netdevsim3: set [0, 0] type 1 family 0 port 8472 - 0 [ 351.905711][T20236] netlink: 60 bytes leftover after parsing attributes in process `syz.5.4016'. [ 352.053005][T20244] netlink: 'syz.3.4020': attribute type 13 has an invalid length. [ 352.064106][T20244] netlink: 'syz.3.4020': attribute type 58 has an invalid length. [ 352.072086][T20244] netlink: 152 bytes leftover after parsing attributes in process `syz.3.4020'. [ 352.088678][T20245] netlink: zone id is out of range [ 352.095294][T20245] netlink: zone id is out of range [ 352.100806][T20245] netlink: zone id is out of range [ 352.206326][T20250] bond6: option primary: mode dependency failed, not supported in mode balance-rr(0) [ 352.233464][T20254] atomic_op ffff888053958198 conn xmit_atomic 0000000000000000 [ 352.276606][T20250] bond6 (unregistering): Released all slaves [ 352.536413][T20273] netlink: 'syz.6.4028': attribute type 18 has an invalid length. [ 352.596323][T10276] netdevsim netdevsim6 netdevsim1: set [0, 0] type 1 family 0 port 8472 - 0 [ 352.613830][T10276] netdevsim netdevsim6 netdevsim2: set [0, 0] type 1 family 0 port 8472 - 0 [ 352.639372][T20280] netlink: 60 bytes leftover after parsing attributes in process `syz.1.4031'. [ 352.658675][T10276] netdevsim netdevsim6 netdevsim3: set [0, 0] type 1 family 0 port 8472 - 0 [ 353.003715][T20311] ieee802154 phy1 wpan1: encryption failed: -22 [ 353.021749][T20311] netlink: 8 bytes leftover after parsing attributes in process `syz.1.4040'. [ 353.502555][ C1] lec0: NETDEV WATCHDOG: CPU: 1: transmit queue 0 timed out 5010 ms [ 353.510641][ C1] lec:lec_tx_timeout: lec0 [ 353.515488][ C1] lec:lec_start_xmit: lec0:No lecd attached [ 354.244693][ T140] net_ratelimit: 51 callbacks suppressed [ 354.244714][ T140] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 354.379454][T20366] wg1 speed is unknown, defaulting to 1000 [ 354.747634][T20418] xt_socket: unknown flags 0xe4 [ 354.884179][ T7307] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 354.894578][ T140] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 354.904284][T20424] mac80211_hwsim hwsim29 syzkaller0: left promiscuous mode [ 354.911698][T20424] mac80211_hwsim hwsim29 syzkaller0: left allmulticast mode [ 355.349588][T20451] netlink: 'syz.6.4077': attribute type 7 has an invalid length. [ 355.393049][T20456] __nla_validate_parse: 36 callbacks suppressed [ 355.393068][T20456] netlink: 8 bytes leftover after parsing attributes in process `syz.3.4079'. [ 355.414589][T20455] netlink: 20 bytes leftover after parsing attributes in process `syz.5.4078'. [ 355.425471][T20455] netlink: 'syz.5.4078': attribute type 1 has an invalid length. [ 355.436610][T20453] openvswitch: netlink: IP tunnel dst address not specified [ 355.464367][T20455] "syz.5.4078" (20455) uses obsolete ecb(arc4) skcipher [ 355.513645][ C1] bridge0: received packet on bridge_slave_1 with own address as source address (addr:aa:aa:aa:aa:aa:1c, vlan:1) [ 355.513943][T10272] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 355.543279][ T7307] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 355.894724][T20476] netlink: 'syz.3.4084': attribute type 32 has an invalid length. [ 355.906431][T20476] netlink: 8 bytes leftover after parsing attributes in process `syz.3.4084'. [ 355.956686][T20476] bond0: option coupled_control: invalid value (52) [ 355.996616][T20476] bond0 (unregistering): Released all slaves [ 356.047147][T20482] ip6gre1: entered allmulticast mode [ 356.067520][T20484] netlink: 8 bytes leftover after parsing attributes in process `syz.2.4087'. [ 356.157221][T16914] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 356.317290][T20495] netlink: 12 bytes leftover after parsing attributes in process `syz.6.4094'. [ 356.338817][T20498] netlink: 20 bytes leftover after parsing attributes in process `syz.5.4093'. [ 356.345533][T20495] netlink: 'syz.6.4094': attribute type 6 has an invalid length. [ 356.360529][T20497] netlink: 'syz.2.4092': attribute type 17 has an invalid length. [ 356.370702][T20497] netlink: 4 bytes leftover after parsing attributes in process `syz.2.4092'. [ 356.412728][T20497] netlink: 28 bytes leftover after parsing attributes in process `syz.2.4092'. [ 356.610884][T20512] xt_l2tp: v2 sid > 0xffff: 1114112 [ 356.620502][T20509] tipc: Started in network mode [ 356.640546][T20509] tipc: Node identity 080211000001, cluster identity 4711 [ 356.671775][T20509] tipc: Enabled bearer , priority 0 [ 356.697678][T20524] mac80211_hwsim hwsim26 syzkaller0: entered promiscuous mode [ 356.736993][T20524] mac80211_hwsim hwsim26 syzkaller0: entered allmulticast mode [ 356.763774][T20524] tipc: Resetting bearer [ 356.817964][T20533] wireguard: wg2: Could not create IPv4 socket [ 356.830857][T20535] ieee802154 phy1 wpan1: encryption failed: -22 [ 356.854628][T20509] tipc: Resetting bearer [ 356.957229][T20538] netlink: 48 bytes leftover after parsing attributes in process `syz.6.4107'. [ 356.970793][T20545] workqueue: Failed to create a rescuer kthread for wq "nfc2_nci_cmd_wq": -EINTR [ 357.001942][T20544] netlink: 12 bytes leftover after parsing attributes in process `syz.1.4108'. [ 357.110207][T20555] sctp: [Deprecated]: syz.2.4105 (pid 20555) Use of struct sctp_assoc_value in delayed_ack socket option. [ 357.110207][T20555] Use struct sctp_sack_info instead [ 357.493074][T20576] nbd5: detected capacity change from 0 to 127 [ 357.503289][T20584] block nbd0: reconnected socket [ 357.533444][ T7033] block nbd5: Receive control failed (result -104) [ 357.545230][ T7027] block nbd0: Receive control failed (result -32) [ 357.712619][ T10] tipc: Node number set to 134418688 [ 357.898671][T20612] xt_bpf: check failed: parse error [ 358.369619][T20627] RDS: rds_bind could not find a transport for ::ffff:172.30.0.6, load rds_tcp or rds_rdma? [ 358.403334][T20633] netlink: 'syz.2.4130': attribute type 12 has an invalid length. [ 358.412955][T20634] sit2: entered promiscuous mode [ 358.417992][T20634] sit2: entered allmulticast mode [ 358.470272][T20633] bond6: option primary_reselect: invalid value (255) [ 358.486113][T20633] bond6 (unregistering): Released all slaves [ 358.522309][ C1] lec0: NETDEV WATCHDOG: CPU: 1: transmit queue 0 timed out 5010 ms [ 358.530414][ C1] lec:lec_tx_timeout: lec0 [ 358.535319][ C1] lec:lec_start_xmit: lec0:No lecd attached [ 358.555543][T20641] netlink: 'syz.6.4135': attribute type 10 has an invalid length. [ 358.574726][T20641] bridge0: port 2(bridge_slave_1) entered disabled state [ 358.584176][T20641] bridge_slave_1: left allmulticast mode [ 358.589837][T20641] bridge_slave_1: left promiscuous mode [ 358.603410][T20641] bridge0: port 2(bridge_slave_1) entered disabled state [ 358.630877][T20641] `: (slave bridge_slave_1): Enslaving as an active interface with an up link [ 358.682017][T20654] "syz.2.4138" (20654) uses obsolete ecb(arc4) skcipher [ 359.365060][T20705] netlink: 'syz.1.4154': attribute type 1 has an invalid length. [ 359.430643][T20708] tipc: New replicast peer: 255.255.255.255 [ 359.440124][T20708] tipc: Enabled bearer , priority 10 [ 359.554278][T20720] netlink: 'syz.1.4159': attribute type 4 has an invalid length. [ 359.765144][T20735] xt_socket: unknown flags 0x50 [ 359.998270][ T25] block nbd10: Possible stuck request ffff888025677000: control (read@0,1024B). Runtime 240 seconds [ 360.005673][ T1090] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 360.010659][ T25] block nbd10: Possible stuck request ffff8880256771c0: control (read@1024,1024B). Runtime 240 seconds [ 360.018991][ T3027] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 360.030363][ T25] block nbd10: Possible stuck request ffff888025677380: control (read@2048,1024B). Runtime 240 seconds [ 360.048910][ T25] block nbd10: Possible stuck request ffff888025677540: control (read@3072,1024B). Runtime 240 seconds [ 360.049377][T19187] block nbd11: Possible stuck request ffff8880256de000: control (read@0,1024B). Runtime 240 seconds [ 360.075070][T19187] block nbd11: Possible stuck request ffff8880256de1c0: control (read@1024,1024B). Runtime 240 seconds [ 360.088802][T19187] block nbd11: Possible stuck request ffff8880256de380: control (read@2048,1024B). Runtime 240 seconds [ 360.111006][T19187] block nbd11: Possible stuck request ffff8880256de540: control (read@3072,1024B). Runtime 240 seconds [ 360.171349][T20755] netlink: 'syz.6.4167': attribute type 1 has an invalid length. [ 360.284393][T20764] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 360.304510][T20764] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 360.305814][ T6218] hid-generic 0005:15C2:0009.0003: unknown main item tag 0x0 [ 360.325487][T20764] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 360.336620][T20764] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 360.368704][T20764] bond0: (slave batadv0): Releasing backup interface [ 360.401868][ T6218] hid-generic 0005:15C2:0009.0003: hidraw0: BLUETOOTH HID v0.09 Device [syz1] on aa:aa:aa:aa:aa:aa [ 360.477401][T20768] __nla_validate_parse: 14 callbacks suppressed [ 360.477423][T20768] netlink: 24 bytes leftover after parsing attributes in process `syz.3.4169'. [ 360.577560][T20773] netlink: 104 bytes leftover after parsing attributes in process `syz.1.4171'. [ 360.640028][ T13] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 360.759312][T20795] netlink: 4 bytes leftover after parsing attributes in process `syz.6.4174'. [ 360.792678][T19187] block nbd5: Connection timed out, retrying (0/1 alive) [ 360.799939][T19187] block nbd5: Connection timed out, retrying (0/1 alive) [ 360.807189][T19187] block nbd5: Connection timed out, retrying (0/1 alive) [ 360.814917][T19187] block nbd5: Connection timed out, retrying (0/1 alive) [ 360.822167][T19187] block nbd5: Dead connection, failed to find a fallback [ 360.831357][T19187] block nbd5: shutting down sockets [ 360.837113][T19187] blk_print_req_error: 123 callbacks suppressed [ 360.837130][T19187] I/O error, dev nbd5, sector 6 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 2 [ 360.856030][T19187] buffer_io_error: 122 callbacks suppressed [ 360.856049][T19187] Buffer I/O error on dev nbd5, logical block 3, async page read [ 360.871199][T19187] I/O error, dev nbd5, sector 4 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 2 [ 360.881153][T19187] Buffer I/O error on dev nbd5, logical block 2, async page read [ 360.889384][T19187] I/O error, dev nbd5, sector 2 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 2 [ 360.898551][T19187] Buffer I/O error on dev nbd5, logical block 1, async page read [ 360.906983][T19187] I/O error, dev nbd5, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 2 [ 360.909002][T20800] validate_nla: 1 callbacks suppressed [ 360.909019][T20800] netlink: 'syz.5.4175': attribute type 2 has an invalid length. [ 360.916209][T19187] Buffer I/O error on dev nbd5, logical block 0, async page read [ 360.916511][T11667] I/O error, dev nbd5, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 2 [ 360.963627][T20800] netlink: 188 bytes leftover after parsing attributes in process `syz.5.4175'. [ 361.025958][T11667] Buffer I/O error on dev nbd5, logical block 0, async page read [ 361.033727][T20808] x_tables: duplicate underflow at hook 3 [ 361.075093][T11667] I/O error, dev nbd5, sector 2 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 2 [ 361.123649][T11667] Buffer I/O error on dev nbd5, logical block 1, async page read [ 361.131720][T11667] I/O error, dev nbd5, sector 4 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 2 [ 361.145527][T20810] netlink: 'syz.2.4179': attribute type 1 has an invalid length. [ 361.152479][T11667] Buffer I/O error on dev nbd5, logical block 2, async page read [ 361.188148][T11667] I/O error, dev nbd5, sector 6 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 2 [ 361.213605][T20818] netlink: 4 bytes leftover after parsing attributes in process `syz.1.4182'. [ 361.245439][T20810] 8021q: adding VLAN 0 to HW filter on device bond6 [ 361.246162][T11667] Buffer I/O error on dev nbd5, logical block 3, async page read [ 361.274447][ T2952] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 361.288046][ T1090] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 361.293451][T20824] bond6: (slave geneve3): making interface the new active one [ 361.325067][T11667] I/O error, dev nbd5, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 2 [ 361.343738][T11667] Buffer I/O error on dev nbd5, logical block 0, async page read [ 361.366893][T11667] I/O error, dev nbd5, sector 2 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 2 [ 361.381097][T11667] Buffer I/O error on dev nbd5, logical block 1, async page read [ 361.396334][T11667] ldm_validate_partition_table(): Disk read failed. [ 361.397249][T20824] bond6: (slave geneve3): Enslaving as an active interface with an up link [ 361.405547][T11667] Dev nbd5: unable to read RDB block 0 [ 361.420297][T11667] nbd5: unable to read partition table [ 361.450112][T11667] ldm_validate_partition_table(): Disk read failed. [ 361.467192][ T12] netdevsim netdevsim2 netdevsim0: set [1, 1] type 2 family 0 port 20000 - 0 [ 361.469041][T11667] Dev nbd5: unable to read RDB block 0 [ 361.476316][ T12] netdevsim netdevsim2 netdevsim1: set [1, 1] type 2 family 0 port 20000 - 0 [ 361.496102][T11667] nbd5: unable to read partition table [ 361.529063][T20836] netlink: 9036 bytes leftover after parsing attributes in process `syz.3.4186'. [ 361.547525][ T12] netdevsim netdevsim2 netdevsim2: set [1, 1] type 2 family 0 port 20000 - 0 [ 361.586791][ T12] netdevsim netdevsim2 netdevsim3: set [1, 1] type 2 family 0 port 20000 - 0 [ 361.621217][T20839] x_tables: duplicate underflow at hook 1 [ 361.729209][T20849] openvswitch: netlink: Duplicate key (type 1). [ 361.814295][T20849] netlink: 'syz.5.4185': attribute type 1 has an invalid length. [ 361.822299][T20849] netlink: 'syz.5.4185': attribute type 2 has an invalid length. [ 361.880448][T20859] netlink: 'syz.5.4185': attribute type 1 has an invalid length. [ 361.889802][T20859] netlink: 'syz.5.4185': attribute type 2 has an invalid length. [ 361.921608][T20860] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 361.961932][T20862] netlink: 4 bytes leftover after parsing attributes in process `syz.2.4188'. [ 362.126450][T20873] netlink: 'syz.1.4191': attribute type 42 has an invalid length. [ 362.135963][T20872] netlink: 8 bytes leftover after parsing attributes in process `syz.6.4192'. [ 362.177449][T20876] netlink: 4 bytes leftover after parsing attributes in process `syz.1.4191'. [ 362.182287][T20873] netlink: 28 bytes leftover after parsing attributes in process `syz.1.4191'. [ 362.272683][T20881] netlink: 'syz.5.4194': attribute type 32 has an invalid length. [ 362.449557][T20881] bond5: option coupled_control: invalid value (52) [ 362.479978][T20881] bond5 (unregistering): Released all slaves [ 362.702619][T20906] mac80211_hwsim hwsim29 syzkaller0: entered promiscuous mode [ 362.750793][T20906] mac80211_hwsim hwsim29 syzkaller0: entered allmulticast mode [ 363.508201][T20961] workqueue: Failed to create a rescuer kthread for wq "nfc2_nci_tx_wq": -EINTR [ 363.542370][ C1] lec0: NETDEV WATCHDOG: CPU: 1: transmit queue 0 timed out 5010 ms [ 363.559506][ C1] lec:lec_tx_timeout: lec0 [ 363.564754][ C1] lec:lec_start_xmit: lec0:No lecd attached [ 363.868118][T20989] Cannot find del_set index 4 as target [ 364.020320][T21001] netlink: 'syz.5.4220': attribute type 1 has an invalid length. [ 364.043737][T21001] netlink: 'syz.5.4220': attribute type 2 has an invalid length. [ 364.374924][T21018] erspan0: refused to change device tx_queue_len [ 364.395237][T21018] A link change request failed with some changes committed already. Interface erspan0 may have been left with an inconsistent configuration, please check. [ 364.436967][T21020] tipc: Enabling of bearer rejected, failed to enable media [ 364.551948][T21029] can: request_module (can-proto-3) failed. [ 364.585730][T21034] dvmrp0: entered allmulticast mode [ 365.190483][T21084] smc: net device team0 applied user defined pnetid SYZ2 [ 365.227083][T21087] tipc: Enabling of bearer rejected, already enabled [ 365.567366][T21106] netlink: 'syz.1.4247': attribute type 11 has an invalid length. [ 365.614824][T21106] netlink: 'syz.1.4247': attribute type 11 has an invalid length. [ 365.669709][T21106] __nla_validate_parse: 18 callbacks suppressed [ 365.669728][T21106] netlink: 204 bytes leftover after parsing attributes in process `syz.1.4247'. [ 366.026812][T21132] ip6t_srh: unknown srh invflags 4000 [ 366.242987][T21144] netlink: 56 bytes leftover after parsing attributes in process `syz.2.4255'. [ 366.295800][T21148] netlink: 24 bytes leftover after parsing attributes in process `syz.2.4255'. [ 367.033451][ T4104] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 367.042220][T10276] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 367.298161][T21198] sctp: [Deprecated]: syz.1.4268 (pid 21198) Use of struct sctp_assoc_value in delayed_ack socket option. [ 367.298161][T21198] Use struct sctp_sack_info instead [ 367.575031][T21207] netlink: 4 bytes leftover after parsing attributes in process `syz.1.4270'. [ 367.677397][ T60] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 368.148567][T21240] validate_nla: 4 callbacks suppressed [ 368.148590][T21240] netlink: 'syz.6.4278': attribute type 1 has an invalid length. [ 368.278984][T21240] workqueue: Failed to create a rescuer kthread for wq "bond1": -EINTR [ 368.372745][T21251] netlink: 60 bytes leftover after parsing attributes in process `syz.1.4280'. [ 368.561590][T21266] netlink: 24 bytes leftover after parsing attributes in process `syz.2.4283'. [ 368.580170][ C1] lec0: NETDEV WATCHDOG: CPU: 1: transmit queue 0 timed out 5010 ms [ 368.580256][ C1] lec:lec_tx_timeout: lec0 [ 368.588456][ C1] lec:lec_start_xmit: lec0:No lecd attached [ 368.630036][T21265] netlink: 8 bytes leftover after parsing attributes in process `syz.1.4285'. [ 368.737710][T21263] netdevsim netdevsim6 netdevsim3 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 368.774748][T21274] netlink: 8 bytes leftover after parsing attributes in process `syz.3.4286'. [ 368.782503][T21263] netdevsim netdevsim6 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 368.976172][T21263] netdevsim netdevsim6 netdevsim2 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 368.987351][T21263] netdevsim netdevsim6 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 369.071422][T21283] openvswitch: netlink: ERSPAN option length err (len 256, max 255). [ 369.117663][T21263] netdevsim netdevsim6 netdevsim1 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 369.150163][T21263] netdevsim netdevsim6 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 369.324033][T21292] netlink: 830 bytes leftover after parsing attributes in process `syz.1.4290'. [ 369.369154][T21292] netlink: 'syz.1.4290': attribute type 83 has an invalid length. [ 369.546298][ T7307] netdevsim netdevsim6 eth0: set [0, 0] type 1 family 0 port 8472 - 0 [ 369.564157][ T7307] netdevsim netdevsim6 eth0: set [1, 0] type 2 family 0 port 6081 - 0 [ 369.596464][ T7307] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 369.626008][ T1109] netdevsim netdevsim6 eth1: set [0, 0] type 1 family 0 port 8472 - 0 [ 369.637393][T21312] netlink: 12 bytes leftover after parsing attributes in process `syz.2.4294'. [ 369.643797][ T1109] netdevsim netdevsim6 eth1: set [1, 0] type 2 family 0 port 6081 - 0 [ 369.719396][ T1109] netdevsim netdevsim6 eth2: set [0, 0] type 1 family 0 port 8472 - 0 [ 369.745666][ T1109] netdevsim netdevsim6 eth2: set [1, 0] type 2 family 0 port 6081 - 0 [ 369.819427][ T1109] netdevsim netdevsim6 eth3: set [0, 0] type 1 family 0 port 8472 - 0 [ 369.846865][ T1109] netdevsim netdevsim6 eth3: set [1, 0] type 2 family 0 port 6081 - 0 [ 369.878092][T10276] netdevsim netdevsim1 netdevsim0: set [0, 0] type 1 family 0 port 8472 - 0 [ 369.914489][T10276] netdevsim netdevsim1 netdevsim1: set [0, 0] type 1 family 0 port 8472 - 0 [ 369.936494][T10276] netdevsim netdevsim1 netdevsim2: set [0, 0] type 1 family 0 port 8472 - 0 [ 369.971605][ T12] netdevsim netdevsim1 netdevsim3: set [0, 0] type 1 family 0 port 8472 - 0 [ 370.159503][T21334] ieee802154 phy1 wpan1: encryption failed: -22 [ 370.440780][T21356] vlan2: entered promiscuous mode [ 370.453006][T21356] geneve1: entered promiscuous mode [ 370.461933][T21356] vlan2: entered allmulticast mode [ 370.504153][T21356] geneve1: entered allmulticast mode [ 370.505574][T21372] IPVS: length: 239 != 24 [ 370.565188][T21377] syz.3.4309: vmalloc error: size 8589938688, exceeds total pages, mode:0xdc0(GFP_KERNEL|__GFP_ZERO), nodemask=(null),cpuset=/,mems_allowed=0-1 [ 370.615625][T21377] CPU: 1 UID: 0 PID: 21377 Comm: syz.3.4309 Not tainted syzkaller #0 PREEMPT(full) [ 370.615652][T21377] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/25/2025 [ 370.615663][T21377] Call Trace: [ 370.615669][T21377] [ 370.615677][T21377] dump_stack_lvl+0x189/0x250 [ 370.615705][T21377] ? __pfx_rcu_read_unlock_special+0x10/0x10 [ 370.615731][T21377] ? __pfx_dump_stack_lvl+0x10/0x10 [ 370.615747][T21377] ? __pfx__printk+0x10/0x10 [ 370.615768][T21377] ? cpuset_print_current_mems_allowed+0x1f/0x360 [ 370.615794][T21377] ? cpuset_print_current_mems_allowed+0x1f/0x360 [ 370.615824][T21377] warn_alloc+0x214/0x310 [ 370.615847][T21377] ? stack_depot_save_flags+0x40/0x850 [ 370.615871][T21377] ? __pfx_warn_alloc+0x10/0x10 [ 370.615892][T21377] ? kasan_save_track+0x3e/0x80 [ 370.615911][T21377] ? __kasan_kmalloc+0x93/0xb0 [ 370.615931][T21377] ? xsk_setsockopt+0x4dc/0x8d0 [ 370.615951][T21377] ? do_sock_setsockopt+0x17c/0x1b0 [ 370.615972][T21377] ? __x64_sys_setsockopt+0x13f/0x1b0 [ 370.615992][T21377] ? do_syscall_64+0xfa/0xf80 [ 370.616011][T21377] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 370.616036][T21377] __vmalloc_node_range_noprof+0x125/0x12d0 [ 370.616086][T21377] ? __pfx___vmalloc_node_range_noprof+0x10/0x10 [ 370.616110][T21377] ? __kasan_kmalloc+0x93/0xb0 [ 370.616146][T21377] vmalloc_user_noprof+0xad/0xf0 [ 370.616167][T21377] ? xskq_create+0xbf/0x170 [ 370.616186][T21377] xskq_create+0xbf/0x170 [ 370.616207][T21377] xsk_init_queue+0xb0/0x110 [ 370.616228][T21377] xsk_setsockopt+0x4dc/0x8d0 [ 370.616248][T21377] ? __pfx_xsk_setsockopt+0x10/0x10 [ 370.616268][T21377] ? __pfx_aa_sk_perm+0x10/0x10 [ 370.616296][T21377] ? aa_sock_opt_perm+0xff/0x1a0 [ 370.616316][T21377] ? bpf_lsm_socket_setsockopt+0x9/0x20 [ 370.616337][T21377] ? __pfx_xsk_setsockopt+0x10/0x10 [ 370.616356][T21377] do_sock_setsockopt+0x17c/0x1b0 [ 370.616383][T21377] __x64_sys_setsockopt+0x13f/0x1b0 [ 370.616412][T21377] do_syscall_64+0xfa/0xf80 [ 370.616433][T21377] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 370.616448][T21377] ? clear_bhb_loop+0x60/0xb0 [ 370.616470][T21377] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 370.616486][T21377] RIP: 0033:0x7ffaaa98f749 [ 370.616503][T21377] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 370.616518][T21377] RSP: 002b:00007ffaab786038 EFLAGS: 00000246 ORIG_RAX: 0000000000000036 [ 370.616538][T21377] RAX: ffffffffffffffda RBX: 00007ffaaabe6090 RCX: 00007ffaaa98f749 [ 370.616550][T21377] RDX: 0000000000000006 RSI: 000000000000011b RDI: 0000000000000003 [ 370.616561][T21377] RBP: 00007ffaaaa13f91 R08: 0000000000000004 R09: 0000000000000000 [ 370.616572][T21377] R10: 0000200000000000 R11: 0000000000000246 R12: 0000000000000000 [ 370.616582][T21377] R13: 00007ffaaabe6128 R14: 00007ffaaabe6090 R15: 00007ffe2101ed88 [ 370.616612][T21377] [ 370.617792][T21377] Mem-Info: [ 370.739995][T21386] xt_hashlimit: size too large, truncated to 1048576 [ 370.779588][T21377] active_anon:9886 inactive_anon:0 isolated_anon:0 [ 370.779588][T21377] active_file:4399 inactive_file:40041 isolated_file:0 [ 370.779588][T21377] unevictable:768 dirty:93 writeback:0 [ 370.779588][T21377] slab_reclaimable:13280 slab_unreclaimable:131883 [ 370.779588][T21377] mapped:43666 shmem:4247 pagetables:1726 [ 370.779588][T21377] sec_pagetables:0 bounce:0 [ 370.779588][T21377] kernel_misc_reclaimable:0 [ 370.779588][T21377] free:1255157 free_pcp:13240 free_cma:0 [ 370.966311][T21377] Node 0 active_anon:39444kB inactive_anon:0kB active_file:17596kB inactive_file:159964kB unevictable:1536kB isolated(anon):0kB isolated(file):0kB mapped:174664kB dirty:372kB writeback:0kB shmem:15452kB shmem_thp:0kB shmem_pmdmapped:0kB anon_thp:0kB kernel_stack:17496kB pagetables:6872kB sec_pagetables:0kB all_unreclaimable? no Balloon:0kB [ 370.999767][T21377] Node 1 active_anon:0kB inactive_anon:0kB active_file:0kB inactive_file:200kB unevictable:1536kB isolated(anon):0kB isolated(file):0kB mapped:0kB dirty:0kB writeback:0kB shmem:1536kB shmem_thp:0kB shmem_pmdmapped:0kB anon_thp:0kB kernel_stack:48kB pagetables:132kB sec_pagetables:0kB all_unreclaimable? no Balloon:0kB [ 371.050288][T21377] Node 0 DMA free:15360kB boost:0kB min:204kB low:252kB high:300kB reserved_highatomic:0KB free_highatomic:0KB active_anon:0kB inactive_anon:0kB active_file:0kB inactive_file:0kB unevictable:0kB writepending:0kB zspages:0kB present:15992kB managed:15360kB mlocked:0kB bounce:0kB free_pcp:0kB local_pcp:0kB free_cma:0kB [ 371.082068][T21377] lowmem_reserve[]: 0 2504 2504 2504 2504 [ 371.133336][T21377] Node 0 DMA32 free:1114284kB boost:0kB min:34308kB low:42884kB high:51460kB reserved_highatomic:0KB free_highatomic:0KB active_anon:39444kB inactive_anon:0kB active_file:17596kB inactive_file:159964kB unevictable:1536kB writepending:372kB zspages:0kB present:3129332kB managed:2564516kB mlocked:0kB bounce:0kB free_pcp:35540kB local_pcp:20504kB free_cma:0kB [ 371.181496][T21377] lowmem_reserve[]: 0 0 0 0 0 [ 371.186934][T21377] Node 0 Normal free:0kB boost:0kB min:0kB low:0kB high:0kB reserved_highatomic:0KB free_highatomic:0KB active_anon:0kB inactive_anon:0kB active_file:0kB inactive_file:0kB unevictable:0kB writepending:0kB zspages:0kB present:1048580kB managed:108kB mlocked:0kB bounce:0kB free_pcp:0kB local_pcp:0kB free_cma:0kB [ 371.250806][T21402] netlink: 'syz.2.4315': attribute type 21 has an invalid length. [ 371.256756][T21377] lowmem_reserve[]: 0 0 0 0 0 [ 371.266165][T21402] netlink: 'syz.2.4315': attribute type 22 has an invalid length. [ 371.275462][T21402] netlink: 'syz.2.4315': attribute type 23 has an invalid length. [ 371.284244][T21402] netlink: 'syz.2.4315': attribute type 25 has an invalid length. [ 371.294608][T21402] netlink: 96 bytes leftover after parsing attributes in process `syz.2.4315'. [ 371.298827][T21377] Node 1 Normal free:3890984kB boost:0kB min:55592kB low:69488kB high:83384kB reserved_highatomic:0KB free_highatomic:0KB active_anon:0kB inactive_anon:0kB active_file:0kB inactive_file:200kB unevictable:1536kB writepending:0kB zspages:0kB present:4194300kB managed:4111100kB mlocked:0kB bounce:0kB free_pcp:17472kB local_pcp:6208kB free_cma:0kB [ 371.345397][T21377] lowmem_reserve[]: 0 0 0 0 0 [ 371.350147][T21377] Node 0 DMA: 0*4kB 0*8kB 0*16kB 0*32kB 0*64kB 0*128kB 0*256kB 0*512kB 1*1024kB (U) 1*2048kB (M) 3*4096kB (M) = 15360kB [ 371.370560][T21377] Node 0 DMA32: 938*4kB (UME) 1233*8kB (UME) 814*16kB (UME) 691*32kB (UME) 531*64kB (UME) 439*128kB (UM) 414*256kB (UM) 304*512kB (UM) 155*1024kB (U) 5*2048kB (UME) 133*4096kB (UM) = 1114288kB [ 371.446529][T21377] Node 0 Normal: 0*4kB 0*8kB 0*16kB 0*32kB 0*64kB 0*128kB 0*256kB 0*512kB 0*1024kB 0*2048kB 0*4096kB = 0kB [ 371.478231][T21377] Node 1 Normal: 192*4kB (UE) 63*8kB (UME) 41*16kB (UME) 97*32kB (UME) 30*64kB (UME) 6*128kB (UM) 3*256kB (ME) 3*512kB (UM) 2*1024kB (ME) 2*2048kB (UE) 946*4096kB (M) = 3890984kB [ 371.485018][T21413] netlink: 28 bytes leftover after parsing attributes in process `syz.2.4317'. [ 371.508895][T21377] Node 0 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=1048576kB [ 371.526764][T21377] Node 0 hugepages_total=2 hugepages_free=2 hugepages_surp=0 hugepages_size=2048kB [ 371.527605][T21415] netlink: 'syz.1.4318': attribute type 29 has an invalid length. [ 371.536521][T21377] Node 1 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=1048576kB [ 371.554352][T21377] Node 1 hugepages_total=2 hugepages_free=2 hugepages_surp=0 hugepages_size=2048kB [ 371.564592][T21417] netlink: 'syz.5.4319': attribute type 1 has an invalid length. [ 371.565295][T21377] 48682 total pagecache pages [ 371.577572][T21377] 0 pages in swap cache [ 371.581819][T21377] Free swap = 124996kB [ 371.587562][T21377] Total swap = 124996kB [ 371.591806][T21377] 2097051 pages RAM [ 371.597302][T21377] 0 pages HighMem/MovableOnly [ 371.602159][T21377] 424280 pages reserved [ 371.642579][T21417] netlink: 212 bytes leftover after parsing attributes in process `syz.5.4319'. [ 371.651746][T21417] netlink: 5 bytes leftover after parsing attributes in process `syz.5.4319'. [ 371.674764][T21377] 0 pages cma reserved [ 371.817249][T21425] syzkaller0: entered promiscuous mode [ 371.838886][T21425] syzkaller0: entered allmulticast mode [ 371.889766][T21425] tipc: Enabled bearer , priority 0 [ 371.916965][T21437] syzkaller1: entered promiscuous mode [ 371.936302][T21437] syzkaller1: entered allmulticast mode [ 372.000464][T21423] tipc: Resetting bearer [ 372.058864][T21423] tipc: Disabling bearer [ 372.098374][T21447] netlink: 120 bytes leftover after parsing attributes in process `syz.6.4328'. [ 372.381627][T21454] netlink: 'syz.2.4330': attribute type 27 has an invalid length. [ 372.627086][T21463] netlink: 4 bytes leftover after parsing attributes in process `syz.2.4334'. [ 372.787462][T21471] netlink: 16 bytes leftover after parsing attributes in process `syz.2.4335'. [ 372.798312][ T140] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 372.807340][T20860] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 372.894745][T21475] netlink: 28 bytes leftover after parsing attributes in process `syz.5.4337'. [ 372.933146][T21476] netlink: 64 bytes leftover after parsing attributes in process `syz.2.4339'. [ 373.120086][T21488] netlink: 16 bytes leftover after parsing attributes in process `syz.3.4341'. [ 373.266743][T21496] Cannot find add_set index 3 as target [ 373.283632][T21497] netlink: 'syz.1.4345': attribute type 1 has an invalid length. [ 373.317121][T21502] syzkaller0: entered promiscuous mode [ 373.323019][T21502] syzkaller0: entered allmulticast mode [ 373.331068][T21502] PF_CAN: dropped non conform CAN FD skbuff: dev type 65534, len 65487 [ 373.344136][T21496] xfrm3: entered promiscuous mode [ 373.363089][T21496] xfrm3: entered allmulticast mode [ 373.448244][ T3027] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 373.459508][T21511] x_tables: unsorted entry at hook 1 [ 373.562681][T21517] openvswitch: netlink: ufid size 17 bytes exceeds the range (1, 16) [ 373.587559][T21517] openvswitch: netlink: Flow get message rejected, Key attribute missing. [ 373.596361][ C1] lec0: NETDEV WATCHDOG: CPU: 1: transmit queue 0 timed out 5010 ms [ 373.596389][ C1] lec:lec_tx_timeout: lec0 [ 373.604958][ C1] lec:lec_start_xmit: lec0:No lecd attached [ 373.638720][T21518] workqueue: Failed to create a rescuer kthread for wq "nfc2_nci_rx_wq": -EINTR [ 373.640644][T21525] netlink: 'syz.3.4353': attribute type 18 has an invalid length. [ 373.661306][T21521] tipc: Enabled bearer , priority 0 [ 373.673454][T21521] syzkaller0: entered promiscuous mode [ 373.680501][T21521] syzkaller0: entered allmulticast mode [ 373.703958][T21521] sch_tbf: burst 127 is lower than device syzkaller0 mtu (1514) ! [ 373.789459][T21527] tipc: Resetting bearer [ 373.837373][T21520] tipc: Resetting bearer [ 373.869921][T21520] tipc: Disabling bearer [ 374.409454][T21571] openvswitch: netlink: Flow key attr not present in new flow. [ 374.603997][T21579] netlink: 'syz.6.4371': attribute type 1 has an invalid length. [ 374.618339][T21577] netlink: 'syz.1.4370': attribute type 1 has an invalid length. [ 374.855330][T21594] netlink: 'syz.3.4376': attribute type 10 has an invalid length. [ 375.071237][ T7027] Bluetooth: hci2: link tx timeout [ 375.077399][ T7027] Bluetooth: hci2: killing stalled connection 11:aa:aa:aa:aa:aa [ 375.360558][ T140] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 375.392116][T21630] syzkaller0: entered promiscuous mode [ 375.404048][T21630] syzkaller0: entered allmulticast mode [ 375.592168][T21641] tun0: tun_chr_ioctl cmd 1074025675 [ 375.614394][T21641] tun0: persist disabled [ 375.635267][T21646] A link change request failed with some changes committed already. Interface C may have been left with an inconsistent configuration, please check. [ 376.001331][T10275] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 376.214660][T21674] netlink: 'syz.5.4395': attribute type 1 has an invalid length. [ 376.280926][T21674] 8021q: adding VLAN 0 to HW filter on device bond5 [ 376.288616][T21675] bond5: up delay (35976) is not a multiple of miimon (100), value rounded to 35900 ms [ 376.315798][T21688] netlink: 'syz.2.4399': attribute type 1 has an invalid length. [ 376.337872][T21675] bond5: entered allmulticast mode [ 376.499074][T21689] bond7: (slave geneve4): making interface the new active one [ 376.548093][T21702] __nla_validate_parse: 22 callbacks suppressed [ 376.548116][T21702] netlink: 8 bytes leftover after parsing attributes in process `syz.3.4400'. [ 376.600157][T21689] bond7: (slave geneve4): Enslaving as an active interface with an up link [ 376.727792][T17444] netdevsim netdevsim2 netdevsim0: set [1, 2] type 2 family 0 port 20004 - 0 [ 376.761138][T21718] team0: Device ipvlan1 failed to register rx_handler [ 376.832449][T17444] netdevsim netdevsim2 netdevsim1: set [1, 2] type 2 family 0 port 20004 - 0 [ 376.871440][T17444] netdevsim netdevsim2 netdevsim2: set [1, 2] type 2 family 0 port 20004 - 0 [ 376.910391][T17444] netdevsim netdevsim2 netdevsim3: set [1, 2] type 2 family 0 port 20004 - 0 [ 377.063026][ T7033] block nbd14: Receive control failed (result -32) [ 377.115680][ T7033] Bluetooth: hci2: command 0x0406 tx timeout [ 377.116771][T21738] syzkaller0: entered promiscuous mode [ 377.171164][T21738] syzkaller0: entered allmulticast mode [ 377.217829][T21747] netlink: 60 bytes leftover after parsing attributes in process `syz.1.4409'. [ 377.521869][T21761] xt_hashlimit: overflow, try lower: 3/0 [ 377.559335][T21768] netlink: 24 bytes leftover after parsing attributes in process `syz.2.4418'. [ 377.576734][T21767] netlink: 40 bytes leftover after parsing attributes in process `syz.2.4418'. [ 377.607317][T21769] tipc: Enabled bearer , priority 11 [ 377.718720][T21780] netlink: 60 bytes leftover after parsing attributes in process `syz.6.4422'. [ 377.913479][T16914] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 377.921715][T10276] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 378.164672][T21810] netlink: 32 bytes leftover after parsing attributes in process `syz.3.4428'. [ 378.201868][T21808] netlink: 28 bytes leftover after parsing attributes in process `syz.2.4430'. [ 378.485588][T21820] netdevsim netdevsim5: loading /lib/firmware/. failed with error -22 [ 378.506316][T21820] netdevsim netdevsim5: Direct firmware load for . failed with error -22 [ 378.517347][T21820] netdevsim netdevsim5: Falling back to sysfs fallback for: . [ 378.540986][T21823] netlink: 4 bytes leftover after parsing attributes in process `syz.1.4436'. [ 378.561477][T21821] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 378.612552][ C1] lec0: NETDEV WATCHDOG: CPU: 1: transmit queue 0 timed out 5010 ms [ 378.620657][ C1] lec:lec_tx_timeout: lec0 [ 378.625573][ C1] lec:lec_start_xmit: lec0:No lecd attached [ 378.739115][T21830] IPv6: sit3: Disabled Multicast RS [ 378.746303][T21830] sit3: entered allmulticast mode [ 379.024388][T21847] A link change request failed with some changes committed already. Interface C may have been left with an inconsistent configuration, please check. [ 379.080081][T21847] syzkaller0: entered promiscuous mode [ 379.092066][T21847] syzkaller0: entered allmulticast mode [ 379.183025][T21847] tipc: Started in network mode [ 379.190492][T21847] tipc: Node identity 8e1c17c799b, cluster identity 4711 [ 379.206243][T21832] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 379.208247][ T1306] ieee802154 phy1 wpan1: encryption failed: -22 [ 379.229584][ T4104] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 379.244226][T21847] tipc: Enabled bearer , priority 0 [ 379.255104][T21860] netlink: 212048 bytes leftover after parsing attributes in process `syz.2.4444'. [ 379.275231][T21846] tipc: Resetting bearer [ 379.380843][T21865] netlink: 24 bytes leftover after parsing attributes in process `syz.5.4449'. [ 379.413329][T21846] tipc: Disabling bearer [ 379.571064][T21877] x_tables: duplicate underflow at hook 3 [ 379.643619][T21877] x_tables: ip6_tables: CLASSIFY target: used from hooks INPUT, but only usable from FORWARD/OUTPUT/POSTROUTING [ 379.905571][T21908] netlink: 'syz.2.4462': attribute type 1 has an invalid length. [ 379.927694][T21908] netlink: 'syz.2.4462': attribute type 2 has an invalid length. [ 380.234842][T21933] netlink: 'syz.1.4469': attribute type 10 has an invalid length. [ 380.415641][T21944] xt_TCPMSS: Only works on TCP SYN packets [ 380.681024][T21963] bridge0: port 1(bridge_slave_0) entered disabled state [ 380.711205][T21963] bridge0: left allmulticast mode [ 380.961076][T21977] x_tables: duplicate underflow at hook 1 [ 380.999630][T21979] netlink: 'syz.5.4483': attribute type 23 has an invalid length. [ 381.118126][ T1090] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 381.288116][ T5846] Bluetooth: hci5: command 0x0406 tx timeout [ 381.383556][T21987] netlink: 'syz.3.4484': attribute type 2 has an invalid length. [ 381.754087][ T244] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 382.489276][T22000] __nla_validate_parse: 16 callbacks suppressed [ 382.489295][T22000] netlink: 224 bytes leftover after parsing attributes in process `syz.6.4488'. [ 382.512038][T22000] ksmbd: Unknown IPC event: 3, ignore. [ 382.621135][T22011] netlink: 8 bytes leftover after parsing attributes in process `syz.1.4491'. [ 382.807374][T22021] netdevsim netdevsim2: Direct firmware load for  failed with error -2 [ 382.833426][T22028] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check. [ 382.849669][T22021] netdevsim netdevsim2: Falling back to sysfs fallback for:  [ 382.955224][ T1318] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 383.047407][T20860] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 383.054168][T22042] netlink: 4 bytes leftover after parsing attributes in process `syz.2.4501'. [ 383.150795][T22050] netlink: 'syz.5.4504': attribute type 2 has an invalid length. [ 383.171133][T22050] 9: entered promiscuous mode [ 383.187662][T22050] Bluetooth: hci0: Opcode 0x080f failed: -22 [ 383.403284][T22061] netlink: 8 bytes leftover after parsing attributes in process `syz.2.4507'. [ 383.412879][T22061] netlink: 'syz.2.4507': attribute type 1 has an invalid length. [ 383.420658][T22061] netlink: 'syz.2.4507': attribute type 2 has an invalid length. [ 383.632303][ C1] lec0: NETDEV WATCHDOG: CPU: 1: transmit queue 0 timed out 5010 ms [ 383.640428][ C1] lec:lec_tx_timeout: lec0 [ 383.645214][ C1] lec:lec_start_xmit: lec0:No lecd attached [ 383.752904][T22081] netlink: 'syz.6.4511': attribute type 2 has an invalid length. [ 383.760831][T22081] netlink: 'syz.6.4511': attribute type 2 has an invalid length. [ 384.099649][T22104] netlink: 12 bytes leftover after parsing attributes in process `syz.5.4518'. [ 384.191639][T22110] bond0: entered promiscuous mode [ 384.201561][T22110] bond0: entered allmulticast mode [ 384.210536][T22111] netlink: 8 bytes leftover after parsing attributes in process `syz.1.4520'. [ 384.220256][T22110] 8021q: adding VLAN 0 to HW filter on device bond0 [ 384.259675][T22116] netlink: 12 bytes leftover after parsing attributes in process `syz.5.4522'. [ 384.317708][ T854] IPVS: starting estimator thread 0... [ 384.318230][ T2952] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 384.422872][T22119] IPVS: using max 34 ests per chain, 81600 per kthread [ 384.468015][T22127] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 384.576570][T22136] netlink: 60 bytes leftover after parsing attributes in process `syz.1.4529'. [ 384.805120][T22142] netlink: 40 bytes leftover after parsing attributes in process `syz.5.4532'. [ 384.836910][T22144] netlink: 224 bytes leftover after parsing attributes in process `syz.2.4533'. [ 384.953734][ T1090] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 385.268943][T22170] netem: unknown loss type 0 [ 385.277120][T22170] netem: change failed [ 385.384862][T22176] validate_nla: 2 callbacks suppressed [ 385.384878][T22176] netlink: 'syz.1.4540': attribute type 1 has an invalid length. [ 385.399602][T22176] nbd: error processing sock list [ 385.407025][T22176] block nbd15: shutting down sockets [ 385.492680][T22175] netlink: 'syz.1.4540': attribute type 1 has an invalid length. [ 385.500499][T22175] nbd: error processing sock list [ 385.506020][T22175] block nbd15: shutting down sockets [ 385.776373][T22192] ipt_REJECT: TCP_RESET invalid for non-tcp [ 385.890081][T22197] syzkaller1: entered promiscuous mode [ 385.902816][T22197] syzkaller1: entered allmulticast mode [ 386.002745][T22208] netlink: 'syz.1.4552': attribute type 33 has an invalid length. [ 386.042779][T22208] ieee802154 phy1 wpan1: encryption failed: -22 [ 386.298671][T10276] nci: nci_add_new_protocol: the target found does not have the desired protocol [ 386.384797][T22229] syz_tun (unregistering): left allmulticast mode [ 386.392100][T22222] nci: __nci_request: wait_for_completion_interruptible_timeout failed -512 [ 386.422607][T22235] syzkaller0: entered promiscuous mode [ 386.428357][T22235] syzkaller0: entered allmulticast mode [ 386.897263][ T3551] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 386.950617][T22259] netlink: 'syz.6.4567': attribute type 1 has an invalid length. [ 387.112802][ T7027] Bluetooth: hci2: command 0x0406 tx timeout [ 387.554727][T20860] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 387.783800][T22266] smc: removing net device team0 with user defined pnetid SYZ2 [ 387.845451][T22266] team0 (unregistering): Port device team_slave_0 removed [ 387.880605][T22266] team0 (unregistering): Port device team_slave_1 removed [ 387.911935][T22270] workqueue: Failed to create a rescuer kthread for wq "wg-crypt-": -EINTR [ 388.072772][T22280] syzkaller0: entered promiscuous mode [ 388.091468][T22280] syzkaller0: entered allmulticast mode [ 388.108589][T22294] netlink: 'syz.5.4575': attribute type 4 has an invalid length. [ 388.180974][ T140] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 388.193464][T22294] netlink: 'syz.5.4575': attribute type 1 has an invalid length. [ 388.204960][T22294] __nla_validate_parse: 5 callbacks suppressed [ 388.204979][T22294] netlink: 228 bytes leftover after parsing attributes in process `syz.5.4575'. [ 388.652362][ C1] lec0: NETDEV WATCHDOG: CPU: 1: transmit queue 0 timed out 5010 ms [ 388.660501][ C1] lec:lec_tx_timeout: lec0 [ 388.665650][ C1] lec:lec_start_xmit: lec0:No lecd attached [ 388.803501][ T1109] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 389.998793][ T244] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 390.075822][ T12] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 390.084647][ T25] block nbd10: Possible stuck request ffff888025677000: control (read@0,1024B). Runtime 270 seconds [ 390.098110][ T25] block nbd10: Possible stuck request ffff8880256771c0: control (read@1024,1024B). Runtime 270 seconds [ 390.109963][ T25] block nbd10: Possible stuck request ffff888025677380: control (read@2048,1024B). Runtime 270 seconds [ 390.121722][ T25] block nbd10: Possible stuck request ffff888025677540: control (read@3072,1024B). Runtime 270 seconds [ 390.354207][T22254] Set syz1 is full, maxelem 65536 reached [ 390.722417][T19187] block nbd11: Possible stuck request ffff8880256de000: control (read@0,1024B). Runtime 270 seconds [ 390.733466][T19187] block nbd11: Possible stuck request ffff8880256de1c0: control (read@1024,1024B). Runtime 270 seconds [ 390.745040][T19187] block nbd11: Possible stuck request ffff8880256de380: control (read@2048,1024B). Runtime 270 seconds [ 390.756181][T19187] block nbd11: Possible stuck request ffff8880256de540: control (read@3072,1024B). Runtime 270 seconds [ 391.291061][T22318] team0: left allmulticast mode [ 391.312924][T22318] team0: left promiscuous mode [ 391.318279][T22318] bridge0: port 1(team0) entered disabled state [ 391.361490][T22318] A link change request failed with some changes committed already. Interface hsr_slave_0 may have been left with an inconsistent configuration, please check. [ 391.426809][T22325] workqueue: Failed to create a rescuer kthread for wq "nfc2_nci_rx_wq": -EINTR [ 391.460669][T22335] netlink: 108 bytes leftover after parsing attributes in process `syz.2.4585'. [ 391.493547][T22335] netlink: 8 bytes leftover after parsing attributes in process `syz.2.4585'. [ 391.517926][ T7027] Bluetooth: hci6: command 0x0406 tx timeout [ 391.609122][T22346] A link change request failed with some changes committed already. Interface hsr_slave_0 may have been left with an inconsistent configuration, please check. [ 391.699686][T22344] ieee802154 phy1 wpan1: encryption failed: -22 [ 391.738552][T22344] netlink: 24 bytes leftover after parsing attributes in process `syz.1.4586'. [ 391.754853][T22353] netlink: 8 bytes leftover after parsing attributes in process `syz.6.4590'. [ 391.814524][T22356] netlink: 212368 bytes leftover after parsing attributes in process `syz.3.4595'. [ 391.816454][T22361] netlink: 8 bytes leftover after parsing attributes in process `syz.2.4593'. [ 391.845254][T22364] netlink: 8 bytes leftover after parsing attributes in process `syz.6.4590'. [ 391.981314][T22367] netlink: 'syz.5.4594': attribute type 1 has an invalid length. [ 392.055056][T22376] bond6: (slave ipvlan2): enslaved VLAN challenged slave. Adding VLANs will be blocked as long as it is part of bond. [ 392.087844][T22376] bond6: (slave ipvlan2): The slave device specified does not support setting the MAC address [ 392.099074][T22376] bond6: (slave ipvlan2): Setting fail_over_mac to active for active-backup mode [ 392.194859][T22388] netlink: 12 bytes leftover after parsing attributes in process `syz.1.4600'. [ 392.205346][T22384] netdevsim netdevsim2 netdevsim0: entered promiscuous mode [ 392.249781][T22384] netlink: 8 bytes leftover after parsing attributes in process `syz.2.4598'. [ 392.476071][T22407] netlink: 'syz.1.4605': attribute type 30 has an invalid length. [ 392.633841][ T244] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 393.069158][T22452] netlink: 'syz.5.4619': attribute type 12 has an invalid length. [ 393.077712][T22452] netlink: 'syz.5.4619': attribute type 29 has an invalid length. [ 393.119401][T22458] sctp: [Deprecated]: syz.6.4620 (pid 22458) Use of int in max_burst socket option deprecated. [ 393.119401][T22458] Use struct sctp_assoc_value instead [ 393.273852][T21832] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 393.353414][T22476] __nla_validate_parse: 13 callbacks suppressed [ 393.353434][T22476] netlink: 16 bytes leftover after parsing attributes in process `syz.6.4627'. [ 393.355684][T22473] netlink: 4 bytes leftover after parsing attributes in process `syz.1.4625'. [ 393.462066][T22479] netlink: 152 bytes leftover after parsing attributes in process `syz.5.4628'. [ 393.734431][T22494] netlink: 40 bytes leftover after parsing attributes in process `syz.5.4633'. [ 393.745482][T22494] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 393.915375][ T1109] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 394.305252][T22531] netlink: 8 bytes leftover after parsing attributes in process `syz.6.4645'. [ 394.454654][T22541] openvswitch: netlink: Key type 31 is not supported [ 394.531581][T22546] netlink: 'syz.6.4650': attribute type 1 has an invalid length. [ 394.547348][T22546] netlink: 'syz.6.4650': attribute type 2 has an invalid length. [ 394.554842][ C1] lec0: NETDEV WATCHDOG: CPU: 1: transmit queue 0 timed out 5890 ms [ 394.563145][ C1] lec:lec_tx_timeout: lec0 [ 394.567080][ T140] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 394.570630][ C1] lec:lec_start_xmit: lec0:No lecd attached [ 394.792869][T22555] nbd15: detected capacity change from 0 to 127 [ 394.806806][ T5846] block nbd15: Receive control failed (result -32) [ 394.808217][T11667] block nbd15: Send control failed (result -32) [ 394.847014][T11667] block nbd15: Request send failed, requeueing [ 394.886257][T19187] block nbd15: Dead connection, failed to find a fallback [ 394.894887][T19187] block nbd15: shutting down sockets [ 394.900209][T19187] blk_print_req_error: 138 callbacks suppressed [ 394.900226][T19187] I/O error, dev nbd15, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 2 [ 394.916367][T19187] buffer_io_error: 138 callbacks suppressed [ 394.916386][T19187] Buffer I/O error on dev nbd15, logical block 0, async page read [ 394.934427][T11667] I/O error, dev nbd15, sector 2 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 2 [ 394.946676][T11667] Buffer I/O error on dev nbd15, logical block 1, async page read [ 394.955504][T11667] I/O error, dev nbd15, sector 4 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 2 [ 394.964907][T11667] Buffer I/O error on dev nbd15, logical block 2, async page read [ 394.974555][T11667] I/O error, dev nbd15, sector 6 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 2 [ 394.980911][T22568] netlink: 4 bytes leftover after parsing attributes in process `syz.1.4654'. [ 394.985401][T11667] Buffer I/O error on dev nbd15, logical block 3, async page read [ 395.002740][T11667] I/O error, dev nbd15, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 2 [ 395.011883][T11667] Buffer I/O error on dev nbd15, logical block 0, async page read [ 395.020466][T11667] I/O error, dev nbd15, sector 2 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 2 [ 395.031133][T11667] Buffer I/O error on dev nbd15, logical block 1, async page read [ 395.040624][T11667] I/O error, dev nbd15, sector 4 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 2 [ 395.050145][T11667] Buffer I/O error on dev nbd15, logical block 2, async page read [ 395.062778][T11667] I/O error, dev nbd15, sector 6 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 2 [ 395.071925][T11667] Buffer I/O error on dev nbd15, logical block 3, async page read [ 395.086755][T11667] I/O error, dev nbd15, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 2 [ 395.095981][T11667] Buffer I/O error on dev nbd15, logical block 0, async page read [ 395.106602][T11667] I/O error, dev nbd15, sector 2 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 2 [ 395.120450][T11667] Buffer I/O error on dev nbd15, logical block 1, async page read [ 395.131170][T11667] ldm_validate_partition_table(): Disk read failed. [ 395.183130][T11667] Dev nbd15: unable to read RDB block 0 [ 395.203707][T11667] nbd15: unable to read partition table [ 395.262968][T11667] ldm_validate_partition_table(): Disk read failed. [ 395.294857][T11667] Dev nbd15: unable to read RDB block 0 [ 395.302014][T11667] nbd15: unable to read partition table [ 395.319014][T22572] netlink: 'syz.2.4656': attribute type 28 has an invalid length. [ 395.335250][T22572] netlink: 'syz.2.4656': attribute type 3 has an invalid length. [ 395.349083][T22572] netlink: 132 bytes leftover after parsing attributes in process `syz.2.4656'. [ 395.411897][T22584] netlink: 8 bytes leftover after parsing attributes in process `syz.3.4662'. [ 395.435887][T22584] netlink: 12 bytes leftover after parsing attributes in process `syz.3.4662'. [ 395.455955][T22587] netlink: 'syz.2.4663': attribute type 1 has an invalid length. [ 395.506666][T22587] 8021q: adding VLAN 0 to HW filter on device bond9 [ 395.622847][T22596] netlink: 4 bytes leftover after parsing attributes in process `syz.5.4666'. [ 395.642637][T22596] bridge0: port 2(bridge_slave_1) entered disabled state [ 395.695712][T22596] bridge_slave_1 (unregistering): left allmulticast mode [ 395.707659][T22596] bridge_slave_1 (unregistering): left promiscuous mode [ 395.718923][T22596] bridge0: port 2(bridge_slave_1) entered disabled state [ 395.835091][ T1164] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 395.848611][T10276] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 395.906631][T22618] xt_TPROXY: Can be used only with -p tcp or -p udp [ 396.276927][T22643] openvswitch: netlink: Missing key (keys=40, expected=100) [ 396.340719][T22647] team0: No ports can be present during mode change [ 396.579474][T22663] syzkaller0: entered promiscuous mode [ 396.606489][T22663] syzkaller0: entered allmulticast mode [ 396.636135][ T5846] Bluetooth: hci3: command 0x0406 tx timeout [ 396.757682][T22677] tls_set_device_offload_rx: netdev not found [ 397.084862][T22698] IPv6: Can't replace route, no match found [ 397.124857][T22702] Cannot find add_set index 2 as target [ 397.281511][T22713] tipc: Enabling of bearer rejected, failed to enable media [ 397.435199][T22721] ip6t_REJECT: ECHOREPLY is not supported [ 397.451435][ T854] IPVS: starting estimator thread 0... [ 397.552776][T22725] IPVS: using max 31 ests per chain, 74400 per kthread [ 397.707386][T22728] A link change request failed with some changes committed already. Interface hsr_slave_0 may have been left with an inconsistent configuration, please check. [ 397.755597][T21832] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 397.771683][T22728] team0: No ports can be present during mode change [ 399.033083][ T1164] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 399.585809][ C1] lec0: NETDEV WATCHDOG: CPU: 1: transmit queue 0 timed out 5010 ms [ 399.593853][ C1] lec:lec_tx_timeout: lec0 [ 399.598570][ C1] lec:lec_start_xmit: lec0:No lecd attached [ 399.680677][ T31] INFO: task syz.4.2498:14666 blocked for more than 143 seconds. [ 399.689254][ T1164] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 399.696221][ T31] Not tainted syzkaller #0 [ 399.702586][ T31] "echo 0 > /proc/sys/kernel/hung_task_timeout_secs" disables this message. [ 399.711305][ T31] task:syz.4.2498 state:D stack:25368 pid:14666 tgid:14665 ppid:5839 task_flags:0x400140 flags:0x00080002 [ 399.723886][ T31] Call Trace: [ 399.727183][ T31] [ 399.730110][ T31] __schedule+0x14bc/0x5000 [ 399.735306][ T31] ? lockdep_unlock+0x89/0x120 [ 399.740101][ T31] ? __pfx___schedule+0x10/0x10 [ 399.745281][ T31] ? schedule+0x91/0x360 [ 399.749556][ T31] schedule+0x165/0x360 [ 399.754692][ T31] schedule_timeout+0x9a/0x270 [ 399.759464][ T31] ? __pfx_schedule_timeout+0x10/0x10 [ 399.765001][ T31] ? preempt_schedule_thunk+0x16/0x30 [ 399.770394][ T31] ? wait_for_completion+0x267/0x5d0 [ 399.776229][ T31] wait_for_completion+0x2bf/0x5d0 [ 399.781350][ T31] ? __pfx_wait_for_completion+0x10/0x10 [ 399.787769][ T31] ? disable_device+0x137/0x320 [ 399.793074][ T31] ? remove_client_context+0xc0/0x1e0 [ 399.798466][ T31] disable_device+0x1c6/0x320 [ 399.803282][ T31] ? __pfx_disable_device+0x10/0x10 [ 399.808509][ T31] __ib_unregister_device+0x2cb/0x3f0 [ 399.814399][ T31] ? __pfx_ib_device_get_by_index+0x10/0x10 [ 399.820292][ T31] ib_unregister_device_and_put+0xb8/0xf0 [ 399.826157][ T31] nldev_dellink+0x2d1/0x320 [ 399.830759][ T31] ? __pfx_nldev_dellink+0x10/0x10 [ 399.836191][ T31] ? apparmor_capable+0x137/0x1a0 [ 399.841227][ T31] ? bpf_lsm_capable+0x9/0x20 [ 399.846420][ T31] ? security_capable+0x7e/0x2e0 [ 399.851363][ T31] ? __pfx_nldev_dellink+0x10/0x10 [ 399.856554][ T31] rdma_nl_rcv+0x6ae/0x980 [ 399.860994][ T31] ? __pfx_rdma_nl_rcv+0x10/0x10 [ 399.866653][ T31] ? netlink_deliver_tap+0x2e/0x1b0 [ 399.871882][ T31] netlink_unicast+0x82f/0x9e0 [ 399.878179][ T31] ? __pfx_netlink_unicast+0x10/0x10 [ 399.884145][ T31] ? netlink_sendmsg+0x642/0xb30 [ 399.889090][ T31] netlink_sendmsg+0x805/0xb30 [ 399.894102][ T31] ? __pfx_netlink_sendmsg+0x10/0x10 [ 399.899398][ T31] ? aa_sock_msg_perm+0xf1/0x1b0 [ 399.905712][ T31] ? bpf_lsm_socket_sendmsg+0x9/0x20 [ 399.911019][ T31] ? __pfx_netlink_sendmsg+0x10/0x10 [ 399.916478][ T31] __sock_sendmsg+0x21c/0x270 [ 399.921188][ T31] ____sys_sendmsg+0x505/0x820 [ 399.926237][ T31] ? __pfx_____sys_sendmsg+0x10/0x10 [ 399.931614][ T31] ? import_iovec+0x74/0xa0 [ 399.936544][ T31] ___sys_sendmsg+0x21f/0x2a0 [ 399.941226][ T31] ? __pfx____sys_sendmsg+0x10/0x10 [ 399.946627][ T31] ? futex_wait+0x285/0x360 [ 399.951173][ T31] ? __fget_files+0x2a/0x420 [ 399.955797][ T31] ? __fget_files+0x3a0/0x420 [ 399.960496][ T31] __x64_sys_sendmsg+0x19b/0x260 [ 399.965877][ T31] ? __pfx___x64_sys_sendmsg+0x10/0x10 [ 399.971352][ T31] ? do_syscall_64+0xbe/0xf80 [ 399.976154][ T31] do_syscall_64+0xfa/0xf80 [ 399.980671][ T31] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 399.986994][ T31] ? clear_bhb_loop+0x60/0xb0 [ 399.992881][ T31] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 399.998805][ T31] RIP: 0033:0x7fbfad18f749 [ 400.003359][ T31] RSP: 002b:00007fbfae104038 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 400.011786][ T31] RAX: ffffffffffffffda RBX: 00007fbfad3e5fa0 RCX: 00007fbfad18f749 [ 400.019881][ T31] RDX: 0000000000000004 RSI: 0000200000000b00 RDI: 0000000000000004 [ 400.028786][ T31] RBP: 00007fbfad213f91 R08: 0000000000000000 R09: 0000000000000000 [ 400.037125][ T31] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 400.045262][ T31] R13: 00007fbfad3e6038 R14: 00007fbfad3e5fa0 R15: 00007fffbfeec458 [ 400.054017][ T31] [ 400.057239][ T31] [ 400.057239][ T31] Showing all locks held in the system: [ 400.065508][ T31] 3 locks held by kworker/1:0/24: [ 400.070582][ T31] #0: ffff88801a055948 ((wq_completion)events){+.+.}-{0:0}, at: process_scheduled_works+0x9b4/0x1770 [ 400.082790][ T31] #1: ffffc900001e7b80 ((work_completion)(&pool->work)){+.+.}-{0:0}, at: process_scheduled_works+0x9ef/0x1770 [ 400.095984][ T31] #2: ffffffff8f2f5608 (rtnl_mutex){+.+.}-{4:4}, at: xp_release_deferred+0x29/0x180 [ 400.105620][ T31] 1 lock held by khungtaskd/31: [ 400.110479][ T31] #0: ffffffff8df41cc0 (rcu_read_lock){....}-{1:3}, at: debug_show_all_locks+0x2e/0x180 [ 400.120529][ T31] 4 locks held by kworker/u8:3/42: [ 400.125922][ T31] #0: ffff88801aedf148 ((wq_completion)netns){+.+.}-{0:0}, at: process_scheduled_works+0x9b4/0x1770 [ 400.137084][ T31] #1: ffffc90000b37b80 (net_cleanup_work){+.+.}-{0:0}, at: process_scheduled_works+0x9ef/0x1770 [ 400.147986][ T31] #2: ffffffff8f2e8550 (pernet_ops_rwsem){++++}-{4:4}, at: cleanup_net+0xf7/0x7a0 [ 400.158027][ T31] #3: ffff8880286cc700 (&device->unregistration_lock){+.+.}-{4:4}, at: rdma_dev_change_netns+0x39/0x300 [ 400.169439][ T31] 3 locks held by kworker/u8:6/244: [ 400.174926][ T31] #0: ffff88814cc38948 ((wq_completion)ipv6_addrconf){+.+.}-{0:0}, at: process_scheduled_works+0x9b4/0x1770 [ 400.187079][ T31] #1: ffffc90003037b80 ((work_completion)(&(&ifa->dad_work)->work)){+.+.}-{0:0}, at: process_scheduled_works+0x9ef/0x1770 [ 400.200633][ T31] #2: ffffffff8f2f5608 (rtnl_mutex){+.+.}-{4:4}, at: addrconf_dad_work+0x112/0x14b0 [ 400.210880][ T31] 1 lock held by syslogd/5187: [ 400.216001][ T31] #0: ffff8880b893a7d8 (&rq->__lock){-.-.}-{2:2}, at: raw_spin_rq_lock_nested+0x2a/0x140 [ 400.226063][ T31] 2 locks held by getty/5597: [ 400.230743][ T31] #0: ffff88814df250a0 (&tty->ldisc_sem){++++}-{0:0}, at: tty_ldisc_ref_wait+0x25/0x70 [ 400.240735][ T31] #1: ffffc9000332e2f0 (&ldata->atomic_read_lock){+.+.}-{4:4}, at: n_tty_read+0x43e/0x1400 [ 400.251391][ T31] 1 lock held by udevd/5836: [ 400.256223][ T31] #0: ffff888025583358 (&disk->open_mutex){+.+.}-{4:4}, at: bdev_open+0xe0/0xd30 [ 400.265647][ T31] 1 lock held by udevd/5851: [ 400.270237][ T31] #0: ffff888142fa5358 (&disk->open_mutex){+.+.}-{4:4}, at: bdev_open+0xe0/0xd30 [ 400.280341][ T31] 3 locks held by kworker/u9:8/7027: [ 400.286083][ T31] #0: ffff8880512b9148 ((wq_completion)hci4){+.+.}-{0:0}, at: process_scheduled_works+0x9b4/0x1770 [ 400.297093][ T31] #1: ffffc9001c167b80 ((work_completion)(&hdev->cmd_sync_work)){+.+.}-{0:0}, at: process_scheduled_works+0x9ef/0x1770 [ 400.310146][ T31] #2: ffff88805bb20ec0 (&hdev->req_lock){+.+.}-{4:4}, at: hci_cmd_sync_work+0x1d4/0x3a0 [ 400.320983][ T1164] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 400.329223][ T31] 3 locks held by kworker/u8:21/10279: [ 400.335261][ T31] #0: ffff88801a069948 ((wq_completion)events_unbound#2){+.+.}-{0:0}, at: process_scheduled_works+0x9b4/0x1770 [ 400.347244][ T31] #1: ffffc9000b957b80 ((linkwatch_work).work){+.+.}-{0:0}, at: process_scheduled_works+0x9ef/0x1770 [ 400.358381][ T31] #2: ffffffff8f2f5608 (rtnl_mutex){+.+.}-{4:4}, at: linkwatch_event+0xe/0x60 [ 400.367951][ T31] 2 locks held by syz.4.2498/14666: [ 400.373289][ T31] #0: ffffffff99befc98 (&rdma_nl_types[idx].sem){.+.+}-{4:4}, at: rdma_nl_rcv+0x302/0x980 [ 400.384357][ T31] #1: ffff8880286cc700 (&device->unregistration_lock){+.+.}-{4:4}, at: __ib_unregister_device+0x284/0x3f0 [ 400.397999][ T31] 2 locks held by syz.0.2861/15922: [ 400.403268][ T31] #0: ffffffff8f2e8550 (pernet_ops_rwsem){++++}-{4:4}, at: copy_net_ns+0x3cc/0x570 [ 400.412809][ T31] #1: ffff8880286cc700 (&device->unregistration_lock){+.+.}-{4:4}, at: rdma_dev_change_netns+0x39/0x300 [ 400.424694][ T31] 2 locks held by syz.3.4703/22706: [ 400.429900][ T31] #0: ffffffff8f2f5608 (rtnl_mutex){+.+.}-{4:4}, at: tun_chr_close+0x3e/0x1c0 [ 400.439033][ T31] #1: ffffffff8df477f8 (rcu_state.exp_mutex){+.+.}-{4:4}, at: synchronize_rcu_expedited+0x2f6/0x730 [ 400.449994][ T31] 1 lock held by syz.2.4719/22759: [ 400.455570][ T31] #0: ffffffff8f2f5608 (rtnl_mutex){+.+.}-{4:4}, at: __tun_chr_ioctl+0x37a/0x1df0 [ 400.464977][ T31] 1 lock held by syz.2.4719/22773: [ 400.470138][ T31] #0: ffffffff8f2f5608 (rtnl_mutex){+.+.}-{4:4}, at: rtnetlink_rcv_msg+0x71c/0xb70 [ 400.480257][ T31] 1 lock held by syz.2.4719/22778: [ 400.485907][ T31] #0: ffffffff8f2f5608 (rtnl_mutex){+.+.}-{4:4}, at: rtnetlink_rcv_msg+0x71c/0xb70 [ 400.495690][ T31] 1 lock held by syz.5.4720/22761: [ 400.500805][ T31] #0: ffffffff8f2f5608 (rtnl_mutex){+.+.}-{4:4}, at: rtnetlink_rcv_msg+0x71c/0xb70 [ 400.510325][ T31] 1 lock held by syz.6.4722/22764: [ 400.516124][ T31] #0: ffffffff8f2f5608 (rtnl_mutex){+.+.}-{4:4}, at: rtnl_newlink+0x8ec/0x1c90 [ 400.525432][ T31] 1 lock held by syz.1.4721/22770: [ 400.530545][ T31] #0: ffffffff8f2f5608 (rtnl_mutex){+.+.}-{4:4}, at: __tun_chr_ioctl+0x37a/0x1df0 [ 400.540156][ T31] 1 lock held by syz.1.4721/22774: [ 400.546080][ T31] #0: ffffffff8f2f5608 (rtnl_mutex){+.+.}-{4:4}, at: __tun_chr_ioctl+0x37a/0x1df0 [ 400.556439][ T31] 1 lock held by syz.1.4721/22776: [ 400.561558][ T31] #0: ffffffff8f2f5608 (rtnl_mutex){+.+.}-{4:4}, at: rtnetlink_rcv_msg+0x71c/0xb70 [ 400.571828][ T31] 3 locks held by syz.1.4721/22779: [ 400.577485][ T31] #0: ffffffff8f35d1b0 (cb_lock){++++}-{4:4}, at: genl_rcv+0x19/0x40 [ 400.585912][ T31] #1: ffffffff8f35cfc8 (genl_mutex){+.+.}-{4:4}, at: genl_rcv_msg+0x10d/0x790 [ 400.595060][ T31] #2: ffffffff8f2f5608 (rtnl_mutex){+.+.}-{4:4}, at: nl802154_pre_doit+0xbc/0x9c0 [ 400.605711][ T31] [ 400.608051][ T31] ============================================= [ 400.608051][ T31] [ 400.617354][ T31] NMI backtrace for cpu 0 [ 400.617373][ T31] CPU: 0 UID: 0 PID: 31 Comm: khungtaskd Not tainted syzkaller #0 PREEMPT(full) [ 400.617392][ T31] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/25/2025 [ 400.617403][ T31] Call Trace: [ 400.617410][ T31] [ 400.617417][ T31] dump_stack_lvl+0x189/0x250 [ 400.617445][ T31] ? __pfx_dump_stack_lvl+0x10/0x10 [ 400.617462][ T31] ? __pfx__printk+0x10/0x10 [ 400.617498][ T31] nmi_cpu_backtrace+0x39e/0x3d0 [ 400.617519][ T31] ? __pfx_nmi_cpu_backtrace+0x10/0x10 [ 400.617539][ T31] ? __pfx__printk+0x10/0x10 [ 400.617564][ T31] ? __pfx_nmi_raise_cpu_backtrace+0x10/0x10 [ 400.617588][ T31] nmi_trigger_cpumask_backtrace+0x17a/0x300 [ 400.617606][ T31] watchdog+0xf3c/0xf80 [ 400.617628][ T31] ? watchdog+0x1e2/0xf80 [ 400.617653][ T31] kthread+0x711/0x8a0 [ 400.617674][ T31] ? __pfx_watchdog+0x10/0x10 [ 400.617693][ T31] ? __pfx_kthread+0x10/0x10 [ 400.617710][ T31] ? _raw_spin_unlock_irq+0x23/0x50 [ 400.617727][ T31] ? lockdep_hardirqs_on+0x98/0x140 [ 400.617745][ T31] ? __pfx_kthread+0x10/0x10 [ 400.617762][ T31] ret_from_fork+0x599/0xb30 [ 400.617785][ T31] ? __pfx_ret_from_fork+0x10/0x10 [ 400.617813][ T31] ? __switch_to_asm+0x39/0x70 [ 400.617831][ T31] ? __switch_to_asm+0x33/0x70 [ 400.617848][ T31] ? __pfx_kthread+0x10/0x10 [ 400.617868][ T31] ret_from_fork_asm+0x1a/0x30 [ 400.617904][ T31] [ 400.617910][ T31] Sending NMI from CPU 0 to CPUs 1: [ 400.765064][ C1] NMI backtrace for cpu 1 [ 400.765083][ C1] CPU: 1 UID: 0 PID: 0 Comm: swapper/1 Not tainted syzkaller #0 PREEMPT(full) [ 400.765103][ C1] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/25/2025 [ 400.765118][ C1] RIP: 0010:pv_native_safe_halt+0x13/0x20 [ 400.765146][ C1] Code: 53 ec 02 00 cc cc cc 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 f3 0f 1e fa 66 90 0f 00 2d 53 0d 1f 00 f3 0f 1e fa fb f4 cc cc cc cc cc cc cc cc cc cc cc cc 90 90 90 90 90 90 90 90 90 [ 400.765161][ C1] RSP: 0018:ffffc90000197de0 EFLAGS: 000002c6 [ 400.765176][ C1] RAX: e99b511f376e2200 RBX: ffffffff8197438a RCX: e99b511f376e2200 [ 400.765189][ C1] RDX: 0000000000000001 RSI: ffffffff8d76be8f RDI: ffffffff8bbfc660 [ 400.765201][ C1] RBP: ffffc90000197f10 R08: ffff8880b893359b R09: 1ffff110171266b3 [ 400.765213][ C1] R10: dffffc0000000000 R11: ffffed10171266b4 R12: ffffffff8f805a70 [ 400.765226][ C1] R13: 1ffff11003951b70 R14: 0000000000000001 R15: 0000000000000001 [ 400.765237][ C1] FS: 0000000000000000(0000) GS:ffff8881261b1000(0000) knlGS:0000000000000000 [ 400.765251][ C1] CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033 [ 400.765269][ C1] CR2: 0000555560c605c8 CR3: 0000000074cd4000 CR4: 00000000003526f0 [ 400.765284][ C1] Call Trace: [ 400.765293][ C1] [ 400.765300][ C1] default_idle+0x13/0x20 [ 400.765323][ C1] default_idle_call+0x73/0xb0 [ 400.765348][ C1] do_idle+0x1ea/0x520 [ 400.765366][ C1] ? irqentry_exit+0x5ba/0x660 [ 400.765388][ C1] ? __pfx_do_idle+0x10/0x10 [ 400.765412][ C1] cpu_startup_entry+0x44/0x60 [ 400.765429][ C1] start_secondary+0x101/0x110 [ 400.765451][ C1] common_startup_64+0x13e/0x147 [ 400.765478][ C1] [ 400.954832][ T1090] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 401.594622][ T1109] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 401.753199][ T5846] Bluetooth: hci4: command 0x0406 tx timeout [ 403.523341][ T1318] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 404.163264][ T1318] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 404.622693][ C1] lec0: NETDEV WATCHDOG: CPU: 1: transmit queue 0 timed out 5020 ms [ 404.630741][ C1] lec:lec_tx_timeout: lec0 [ 404.635532][ C1] lec:lec_start_xmit: lec0:No lecd attached [ 405.436104][T21832] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 406.076219][T21832] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 406.642953][T10279] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 406.725199][ T1090] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 409.273787][T21832] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 409.642474][ C1] lec0: NETDEV WATCHDOG: CPU: 1: transmit queue 0 timed out 5010 ms [ 409.650602][ C1] lec:lec_tx_timeout: lec0 [ 409.655581][ C1] lec:lec_start_xmit: lec0:No lecd attached