last executing test programs: 23m36.151230346s ago: executing program 32 (id=2956): r0 = socket$inet_sctp(0x2, 0x1, 0x84) setsockopt$inet_sctp_SCTP_EVENTS(r0, 0x84, 0xb, &(0x7f0000000200)={0x4, 0x0, 0x1, 0x1, 0x74, 0x81, 0x8, 0x40, 0x8, 0x9, 0x0, 0x7, 0x9, 0x7}, 0xe) sendmmsg$inet(r0, &(0x7f0000000680)=[{{&(0x7f0000000300)={0x2, 0x4e21, @dev={0xac, 0x14, 0x14, 0x1e}}, 0x10, &(0x7f0000000400)=[{&(0x7f0000000340)="81ec", 0x2}], 0x1}}], 0x1, 0x4008010) listen(r0, 0x7) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x3, 0x4, &(0x7f0000000240)=ANY=[@ANYBLOB="1800000000000000000000000000000085000000110000009500000000000000edd0e4636351323fee038f42b58088696d00723f089573142208d0fcd006a848cbfa56db5afd24153da76427b4c088c8a43b9935cf376ceec2c6f3e1ee313332e91985adf12a75cf02ca4588d69c77dcc3e4e4f18479b8763cc8ed135e1919d0ebede6b88fe207914e455e2df36cf4fcb1a740acf070401f45c1958f6f3cc4d7dc3078b7f5e25f000ed656aadec8e20d7cfc236b569ee7267446664419e09802c848d0447d77cabd5a4842b88c79d3f96ce9aa546ecc4d1ad162f468a9d1388fad4509c0b7ccafccf569d9714937c629957f61cdf1492ada752962ae94f95963bf815ae801065357a3b82a9371c8b5852cec70a766c9f670543dcabd095c1edfb203dec151c446465eabe95285bea12f9c69cea908acff7b21bfdd51031f24ab462fd7"], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @sched_cls, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) 23m35.968220328s ago: executing program 33 (id=2923): r0 = socket$kcm(0x10, 0x7, 0x10) (async) sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000200)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a20000000000a03000000000000000000070000040900010073797a30000000009c000000090a010400000000000000000700000308000a40000000000900020073797a30000000000900010073797a3000000000080005400000000d58001280200001800e000100636f6e6e6c696d69740000000c0002800800014000000008200001800e000100636f6e6e6c696d69740000000c000280080001400000000014000180090001006cdbf80789f3f947dd000280080003"], 0xe4}, 0x1, 0x0, 0x0, 0x40004}, 0x20050840) sendmsg$kcm(r0, &(0x7f0000000000)={0x0, 0xd18c9b25, &(0x7f0000000080)=[{&(0x7f0000000040)="e03f030041000b05d25a806c8c6394f90324fc60100000000a000200053582c137153e3704020180fc5409000c00", 0x33fe0}], 0x1}, 0x0) (async, rerun: 32) ioctl$sock_kcm_SIOCKCMATTACH(r0, 0x89e0, 0xfffffffffffffffe) (rerun: 32) 23m35.950134287s ago: executing program 34 (id=2957): r0 = socket$netlink(0x10, 0x3, 0x14) r1 = bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f00000004c0)=ANY=[@ANYBLOB="02002653a44bb1190ff70000040000000800000001000000800000009ae927c7ac664adc1dfc150984c572b0f21f8a7f17bef734dd3ca5c228b2e757cadf6456572abd785947266fc8a575122ddac1f8956e2f392c14e8a8f2ada2f3717e85e395dae8cf4cba08d15546647adab18a159bf97a6e33edb2837b4c90f68e96f90ce009fb047a0acdb14c65ebbabf8a43e2bb131ef373dbfa5bc571c5ca0b84340a5e53e2cb36cd8450f6e3baabe7439908003bd1e726e919ea52849fdcde9d4605252a8033cf704d3970e6aebfcd3cb5eeaad0c7db780df5a21a7bf120b1f9c708e860b7", @ANYRES32=0x0, @ANYBLOB='\x00'/20, @ANYRES32=0x0, @ANYRES32=0x0, @ANYBLOB='\x00'/28], 0x48) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000400)={0xd, 0x10, &(0x7f0000000000)=ANY=[@ANYBLOB="18000000000000000000000000000000b7080000000000007b8af8ff00000000b7080000000000007b8af0ff00000000bf8100000000000007080000f8ffffffbfa400000000000007040000f0ffffffb70200000800000018210000", @ANYRES32=r1, @ANYBLOB="0000000002000000b705000008000000850000005d00000095"], &(0x7f0000000300)='GPL\x00', 0x2, 0xff6, &(0x7f0000001e00)=""/4086}, 0x90) r2 = socket$phonet(0x23, 0x2, 0x1) r3 = socket$alg(0x26, 0x5, 0x0) bind$alg(r3, &(0x7f0000000200)={0x26, 'hash\x00', 0x0, 0x0, 'sha224\x00'}, 0x58) r4 = accept4(r3, 0x0, 0x0, 0x0) sendmsg$nl_route_sched_retired(r4, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000280)=@newtclass={0x24, 0x28, 0x100, 0x70bd29, 0x25dfdbfb, {0x0, 0x0, 0x0, 0x0, {0xf, 0x3}, {0xb}, {0x6, 0xd}}}, 0x24}, 0x1, 0x0, 0x0, 0xc1}, 0x4000) r5 = socket$netlink(0x10, 0x3, 0xc) getsockopt$sock_cred(r2, 0x1, 0x11, &(0x7f0000002840)={0x0, 0x0}, &(0x7f0000002880)=0xc) sendmsg$netlink(r5, &(0x7f0000002980)={0x0, 0x0, &(0x7f0000002780)=[{&(0x7f0000000980)={0x10, 0x32, 0x4, 0x70bd25, 0x25dfdbff}, 0x10}], 0x1, &(0x7f0000002900)=[@cred={{0x1c, 0x1, 0x2, {0x0, r6}}}], 0x20, 0x50}, 0x40880) sendmsg$RDMA_NLDEV_CMD_NEWLINK(r0, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000001200)={&(0x7f00000001c0)=ANY=[@ANYBLOB="10000000031401060000000000000000"], 0x10}}, 0x0) socketpair$unix(0x1, 0x5, 0x0, &(0x7f00000001c0)={0xffffffffffffffff, 0xffffffffffffffff}) r9 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r9, &(0x7f0000000140)={&(0x7f0000000080)={0x10, 0x0, 0x0, 0x800000}, 0xc, &(0x7f00000000c0)={&(0x7f0000000200)=@newlinkprop={0x20, 0x6c, 0x800, 0x70bd25, 0x25dfdbff, {0x0, 0x0, 0x0, 0x0, 0x400, 0x1a8}}, 0x20}, 0x1, 0x0, 0x0, 0x24040010}, 0x4000095) pipe(&(0x7f0000001f40)={0xffffffffffffffff, 0xffffffffffffffff}) ppoll(&(0x7f0000002000)=[{r10, 0x400}], 0x1, 0x0, 0x0, 0x0) write$bt_hci(r11, &(0x7f00000025c0)={0x1, @le_create_cis={{0x2064, 0x1}}}, 0x5) write$cgroup_subtree(r11, &(0x7f0000002980)={[{0x2b, 'cpuset'}]}, 0x8) socket$rds(0x15, 0x5, 0x0) sendmsg$IPSET_CMD_TEST(r11, &(0x7f0000000340)={&(0x7f0000000240)={0x10, 0x0, 0x0, 0x4000}, 0xc, &(0x7f0000000280)={&(0x7f00000009c0)=ANY=[@ANYBLOB="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"], 0x138}, 0x1, 0x0, 0x0, 0x1}, 0x1) r12 = socket$inet_sctp(0x2, 0x1, 0x84) setsockopt$inet_int(r12, 0x0, 0x33, &(0x7f0000000000)=0x80000002, 0x4) r13 = socket$inet_sctp(0x2, 0x1, 0x84) setsockopt$inet_int(r11, 0x0, 0x14, &(0x7f0000000000)=0x80000002, 0x4) connect$inet(r12, &(0x7f0000000400)={0x2, 0x4e24, @dev={0xac, 0x14, 0x14, 0x29}}, 0x10) listen(r13, 0x7fffffff) setsockopt$SO_ATTACH_FILTER(r8, 0x1, 0x1a, &(0x7f0000000000)={0x2, &(0x7f0000000040)=[{0x28, 0x0, 0x0, 0x8002}, {0x6}]}, 0x10) sendmmsg$unix(r7, &(0x7f0000001480)=[{{0x0, 0x0, &(0x7f0000001400)=[{&(0x7f0000000100)="9cdfa98e", 0xdf9c}], 0x1}}], 0x1, 0x0) syz_genetlink_get_family_id$mptcp(&(0x7f0000000180), r10) 11m9.508914212s ago: executing program 35 (id=12136): r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r1, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000400)=@newlink={0x48, 0x10, 0x1, 0x70bd2f, 0x25dfdbfd, {0x0, 0x0, 0x0, 0x0, 0x42302, 0x1400}, [@IFLA_IFNAME={0x14, 0x3, 'netdevsim0\x00'}, @IFLA_VFINFO_LIST={0x14, 0x16, 0x0, 0x1, [{0x10, 0x1, 0x0, 0x1, [@IFLA_VF_SPOOFCHK={0xc, 0x4, {0x8, 0x5c00000}}]}]}]}, 0x48}}, 0x24040800) r2 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r2, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000180)={&(0x7f00000001c0)=ANY=[@ANYBLOB="140000002c0007014c76b0d89f2396532bbd700000000000097c0000"], 0x14}, 0x1, 0x0, 0x0, 0x24048011}, 0xc000) ioctl$sock_ipv4_tunnel_SIOCADDTUNNEL(0xffffffffffffffff, 0x89f1, &(0x7f0000000080)={'ip_vti0\x00', &(0x7f0000000000)={'syztnl0\x00', 0x0, 0x0, 0x20, 0x497f015, 0x2, {{0x12, 0x4, 0x2, 0x32, 0x48, 0x66, 0x0, 0x6, 0x4, 0x0, @multicast2, @multicast2, {[@rr={0x7, 0x17, 0x2d, [@broadcast, @empty, @broadcast, @empty, @remote]}, @generic={0x88, 0x5, "10213f"}, @rr={0x7, 0x17, 0xa, [@multicast2, @multicast2, @multicast2, @loopback, @multicast2]}]}}}}}) sendmsg$nl_route(r0, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000140)={&(0x7f00000000c0)=@newlink={0x60, 0x10, 0x609, 0xfffffffc, 0x25dfdbff, {0x0, 0x0, 0x0, 0x0, 0x4}, [@IFLA_LINKINFO={0x28, 0x12, 0x0, 0x1, @veth={{0x9}, {0x18, 0x2, 0x0, 0x1, @val=@VETH_INFO_PEER={0x14, 0x1, {{0x0, 0x0, 0x0, r3, 0x41000, 0x4a202}}}}}}, @IFLA_LINK={0x8, 0x5, r3}, @IFLA_LINKMODE={0x5, 0x11, 0x2}, @IFLA_EVENT={0x8, 0x2c, 0xffffffff}]}, 0x60}}, 0x0) r4 = socket$nl_generic(0x10, 0x3, 0x10) r5 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000240), r2) ioctl$sock_SIOCGIFINDEX_80211(0xffffffffffffffff, 0x8933, &(0x7f00000002c0)={'wlan0\x00', 0x0}) sendmsg$NL80211_CMD_STOP_P2P_DEVICE(r4, &(0x7f0000000380)={&(0x7f0000000200)={0x10, 0x0, 0x0, 0x1000}, 0xc, &(0x7f0000000340)={&(0x7f0000000300)={0x28, r5, 0x800, 0x70bd25, 0x25dfdbfd, {{}, {@val={0x8, 0x3, r6}, @val={0xc, 0x99, {0x4, 0x4a}}}}, ["", "", "", "", "", "", ""]}, 0x28}, 0x1, 0x0, 0x0, 0x24000005}, 0x10) 11m9.331767171s ago: executing program 36 (id=12138): r0 = bpf$PROG_LOAD(0x5, &(0x7f0000000640)={0x1, 0x4, &(0x7f0000000000)=@framed={{}, [@ldst={0x1, 0x0, 0x3, 0x0, 0x1, 0x2c}]}, &(0x7f0000000600)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x40, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x1}, 0x90) ioctl$AUTOFS_IOC_EXPIRE(r0, 0x810c9365, &(0x7f0000000040)={{0xf4, 0x8001}, 0x100, './file0\x00'}) 11m9.290212293s ago: executing program 37 (id=12139): r0 = socket$inet_sctp(0x2, 0x5, 0x84) sendmsg$inet_sctp(r0, &(0x7f00000009c0)={&(0x7f0000000140)=@in={0x2, 0x4e23, @loopback}, 0x10, &(0x7f00000008c0)=[{&(0x7f0000000200)="7da5c1", 0x3}], 0x1, &(0x7f0000000980), 0x0, 0x4040081}, 0x90f0) 11m9.290075635s ago: executing program 38 (id=12101): r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000000)=@base={0x9, 0x23, 0x3, 0x1, 0x0, 0xffffffffffffffff, 0x37}, 0x48) socket$vsock_stream(0x28, 0x1, 0x0) bpf$MAP_LOOKUP_ELEM(0x1, &(0x7f0000000080)={r0, &(0x7f0000000100), 0x0}, 0x20) r1 = socket$kcm(0x10, 0x2, 0x4) sendmsg$kcm(r1, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000140)=[{&(0x7f0000000040)="89000000120081ae08060cdc030ec0007f03e3f70000000000e2ffca1b1f0000000004c00e72f750375ed08a56331dbf9ed7815e381ad6e747033a0093b837dc6cc01e32efaec8c7a6ec08123d000200080001400400446b9bbc7a46e3988285dcdf12f21308f868fece01955fed0009d78f0a947ee2b49e33538afa8af92347514f0b56a20ff27fff", 0x89}], 0x1}, 0x0) 10m14.019002424s ago: executing program 39 (id=12741): r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000080), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f00000000c0)={'wlan0\x00', 0x0}) sendmsg$NL80211_CMD_SET_INTERFACE(r0, 0x0, 0x0) r3 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r3, &(0x7f0000000100)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x4000}, 0xc, &(0x7f0000000040)={&(0x7f0000000380)={{0x14, 0x10, 0x1, 0x0, 0x0, {0x5}}, [@NFT_MSG_DELTABLE={0x38, 0x2, 0xa, 0x801, 0x0, 0x0, {0x1, 0x0, 0xa}, [@NFTA_TABLE_HANDLE={0xc, 0x4, 0x1, 0x0, 0x4}, @NFTA_TABLE_NAME={0x9, 0x1, 'syz1\x00'}, @NFTA_TABLE_HANDLE={0xc, 0x4, 0x1, 0x0, 0x4}]}, @NFT_MSG_DELTABLE={0x28, 0x2, 0xa, 0x101, 0x0, 0x0, {0x2, 0x0, 0x8}, [@NFTA_TABLE_HANDLE={0xc, 0x4, 0x1, 0x0, 0x5}, @NFTA_TABLE_FLAGS={0x8}]}, @NFT_MSG_DELTABLE={0x130, 0x2, 0xa, 0x401, 0x0, 0x0, {0x7, 0x0, 0x3}, [@NFTA_TABLE_FLAGS={0x8, 0x2, 0x1, 0x0, 0x2}, @NFTA_TABLE_NAME={0x9, 0x1, 'syz1\x00'}, @NFTA_TABLE_NAME={0x9, 0x1, 'syz0\x00'}, @NFTA_TABLE_USERDATA={0x24, 0x6, "12ccd5ec7443f4eaa18b5ee5e97a228d6c0d32bf0cd46b947e9b74f453bd4cf1"}, @NFTA_TABLE_USERDATA={0xd0, 0x6, "14d06a49826c61b60623fa3c0163de932165dd7fafdbb430a9b078b09dfe73059d0d5361d2edadeb9e6ce876edb2611648ad963a99576a09229579e5bd27f31a7b6363bc4f74e4c4763d713a4a472604ac0e164665ad24fdecb5cf14e58995aa9fdb30a25ed05b21d9efbdeba1c12e1d0743b36a281a54b08542eda4b017a7756ac5f66e6f21895703e28025736464912b17d4a8ae8be4005663637c3c8f80223791bd592787376aa686bb3a5868ca0dc70d7d386a71e2defdadf755cf4dfb61ab1c607e4045cfd7e62c2fd2"}, @NFTA_TABLE_FLAGS={0x8, 0x2, 0x1, 0x0, 0x1}]}, @NFT_MSG_NEWOBJ={0x20, 0x12, 0xa, 0x5, 0x0, 0x0, {0xa, 0x0, 0x5}, @NFT_OBJECT_LIMIT=@NFTA_OBJ_NAME={0x9, 0x2, 'syz2\x00'}}, @NFT_MSG_NEWFLOWTABLE={0x114, 0x16, 0xa, 0x201, 0x0, 0x0, {0x7, 0x0, 0x8}, [@NFTA_FLOWTABLE_FLAGS={0x8}, @NFTA_FLOWTABLE_HOOK={0xd0, 0x3, 0x0, 0x1, [@NFTA_FLOWTABLE_HOOK_NUM={0x8}, @NFTA_FLOWTABLE_HOOK_DEVS={0x90, 0x3, 0x0, 0x1, [{0x14, 0x1, 'veth1_to_hsr\x00'}, {0x14, 0x1, 'batadv_slave_1\x00'}, {0x14, 0x1, 'vlan0\x00'}, {0x14, 0x1, 'syzkaller1\x00'}, {0x14, 0x1, 'veth1_macvtap\x00'}, {0x14, 0x1, 'veth0\x00'}, {0x14, 0x1, 'macvlan0\x00'}]}, @NFTA_FLOWTABLE_HOOK_DEVS={0x2c, 0x3, 0x0, 0x1, [{0x14, 0x1, 'bond_slave_0\x00'}, {0x14, 0x1, 'batadv_slave_0\x00'}]}, @NFTA_FLOWTABLE_HOOK_NUM={0x8}]}, @NFTA_FLOWTABLE_FLAGS={0x8, 0x7, 0x1, 0x0, 0x2}, @NFTA_FLOWTABLE_NAME={0x9, 0x2, 'syz0\x00'}, @NFTA_FLOWTABLE_NAME={0x9, 0x2, 'syz1\x00'}, @NFTA_FLOWTABLE_FLAGS={0x8, 0x7, 0x1, 0x0, 0x1}]}, @NFT_MSG_DELOBJ={0x1a0, 0x14, 0xa, 0x301, 0x0, 0x0, {0xa, 0x0, 0x9}, [@NFTA_OBJ_USERDATA={0x56, 0x8, "444bdce73d694ecc0c28bb32562016dabdd581740461b400f5776af68e6dbf1b249aa58b1f02f5d168864f4abfb832005608337af807a3e166e1f9e172caaeb16a897abf6d7089097721fe7f746decd05355"}, @NFTA_OBJ_TABLE={0x9, 0x1, 'syz0\x00'}, @NFTA_OBJ_TABLE={0x9, 0x1, 'syz0\x00'}, @NFTA_OBJ_USERDATA={0xe6, 0x8, "2101ae2a8c0b0439a6fd6deb49ee6c2a52f71555d43e89490b55b47a2257a4fc84cda2658b062973aec5efebe728570ab6cd0df2b78854b84a7d19402c9fff3f86a986dfe0e024a87540d624e3b708daf441cb040ab6654716d631945a4f8d844583123c079909177b694c305b46fa039723d1a48615c7b02f45573363bbf487b3c8e1767eb96934c34a8cf433cd0cb3a9e04c538d1d0a09b3cb7a24e83568e22ad626f3475ec2e2134279283016145fc171d313eea73dcb1902b241efca7bc12236337fbc43a9e19211e31e455e113f55a3c67860975ff4be6c480f35e2d72da7de"}, @NFTA_OBJ_TABLE={0x9, 0x1, 'syz1\x00'}, @NFTA_OBJ_TYPE={0x8, 0x3, 0x1, 0x0, 0x4}, @NFTA_OBJ_USERDATA={0x1d, 0x8, "357a2607abd793560e90c985c15eb5101dd363c1422987944b"}]}, @NFT_MSG_NEWRULE={0x18c, 0x6, 0xa, 0x201, 0x0, 0x0, {0x1, 0x0, 0x9}, [@NFTA_RULE_HANDLE={0xc, 0x3, 0x1, 0x0, 0x3}, @NFTA_RULE_CHAIN_ID={0x8, 0xb, 0x1, 0x0, 0x3}, @NFTA_RULE_EXPRESSIONS={0x6c, 0x4, 0x0, 0x1, [{0x10, 0x1, 0x0, 0x1, @lookup={{0xb}, @void}}, {0x3c, 0x1, 0x0, 0x1, @exthdr={{0xb}, @val={0x2c, 0x2, 0x0, 0x1, [@NFTA_EXTHDR_TYPE={0x5, 0x2, 0x89}, @NFTA_EXTHDR_OFFSET={0x8, 0x3, 0x1, 0x0, 0x64}, @NFTA_EXTHDR_TYPE={0x5, 0x2, 0xa}, @NFTA_EXTHDR_TYPE={0x5, 0x2, 0x7}, @NFTA_EXTHDR_OP={0x8, 0x6, 0x1, 0x0, 0x4}]}}}, {0xc, 0x1, 0x0, 0x1, @rt={{0x7}, @void}}, {0x10, 0x1, 0x0, 0x1, @hash={{0x9}, @void}}]}, @NFTA_RULE_CHAIN_ID={0x8, 0xb, 0x1, 0x0, 0x3}, @NFTA_RULE_POSITION_ID={0x8}, @NFTA_RULE_CHAIN_ID={0x8, 0xb, 0x1, 0x0, 0x4}, @NFTA_RULE_USERDATA={0xd2, 0x7, 0x1, 0x0, "52b66e9c037e211bb21349c9988fb5811fadfbb68a1edf4006dec3662d9679ad446aa7d0dfd2b1b70f50f1b5421f9dba9fe95667d1461d869568d783942b3ac1542d7a1462d0815e4d2239d6f9c264ce785df8b742331ecd9cdaa8973728523ebd5f1f8782f80a284d129c015f1516bf9d31586aadc756a17e76362992522ea2b303a11c4997fbb6069dd9b2fd52f78966f0c0d0df1d39aaa3be3429761ab14436faaeb4eda06a5c3518971a92986d427471a8507d6cab658a139ac721db87a941c198c5d9698d112a25af093bc0"}, @NFTA_RULE_TABLE={0x9, 0x1, 'syz1\x00'}]}], {0x14}}, 0x618}, 0x1, 0x0, 0x0, 0x4000000}, 0x24000881) sendmsg$NL80211_CMD_START_AP(r0, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000300)={0x70, r1, 0x5, 0x0, 0x0, {{}, {@val={0x8, 0x3, r2}, @void}}, [@beacon=[@NL80211_ATTR_BEACON_HEAD={0x3d, 0xe, {{{}, {}, @broadcast, @device_a, @from_mac=@broadcast, {0x0, 0xc}}, 0xfffffffffffffffe, @random=0x7, 0x1, @void, @void, @void, @val={0x4, 0x6, {0xf0, 0x2, 0x7f, 0xa706}}, @void, @void, @val={0x25, 0x3, {0x1, 0x8c, 0x8}}, @void, @void, @void, @val={0x72, 0x6}, @void, @void}}, @NL80211_ATTR_BEACON_TAIL={0x4}], @NL80211_ATTR_BEACON_INTERVAL={0x8}, @NL80211_ATTR_DTIM_PERIOD={0x8}]}, 0x70}, 0x1, 0x0, 0x0, 0x94}, 0x0) 7m9.508584593s ago: executing program 9 (id=15410): bpf$PROG_LOAD(0x5, &(0x7f0000000180)={0xd, 0x4, &(0x7f0000000000)=@framed={{}, [@ldst={0x1, 0x0, 0x3, 0x0, 0x1, 0xac}]}, &(0x7f0000000100)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @sock_ops, 0xffffffffffffffff, 0xf00, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) r0 = socket(0x400000000010, 0x3, 0x0) ioctl$sock_SIOCETHTOOL(r0, 0x89f0, &(0x7f0000001440)={'bridge0\x00', &(0x7f0000000100)=@ethtool_ringparam={0xa, 0x0, 0x300, 0x80, 0x0, 0x5}}) r1 = bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000340), 0x48) r2 = bpf$PROG_LOAD(0x5, &(0x7f00000004c0)={0x6, 0x18, &(0x7f00000001c0)=ANY=[@ANYBLOB="18000000000000000000000000000000b7080000000000007b8af8ff00000000b7080000000000007b8af0ff00000000bfa100000000000007010000f8ffffffbfa400000000000007040000f0ffffffb70200000000000018230000", @ANYRES32=r1, @ANYBLOB="0000000000000000b7050000080000008500000056000000180100002020640500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b70300000000000085000000a000000095"], &(0x7f0000000600)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @xdp, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$BPF_GET_PROG_INFO(0xf, &(0x7f0000000580)={r2, 0xe0, &(0x7f0000000640)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7, &(0x7f0000000280)=[0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0], ""/16, 0x0, 0x0, 0x0, 0x0, 0x1, 0x7, &(0x7f00000002c0)=[0x0], &(0x7f0000000300)=[0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0], 0x0, 0xa8, &(0x7f00000003c0)=[{}, {}, {}, {}], 0x20, 0x10, &(0x7f0000000400), &(0x7f0000000440), 0x8, 0x63, 0x8, 0x8, &(0x7f0000000480)}}, 0x10) bpf$PROG_LOAD(0x5, &(0x7f0000000740)={0x40e6c6fc25ec8688, 0x13, &(0x7f0000000000)=@framed={{0x18, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x1}, [@snprintf={{}, {}, {0x7, 0x0, 0xb, 0x8, 0x0, 0x0, 0xcb6}, {}, {}, {}, {}, {}, {}, {0x18, 0x3, 0x2, 0x0, r1}}, @kfunc={0x85, 0x0, 0x2, 0x0, 0x5}, @initr0={0x18, 0x0, 0x0, 0x0, 0xfffffff1, 0x0, 0x0, 0x0, 0x2}]}, &(0x7f00000000c0)='syzkaller\x00', 0x6, 0x0, &(0x7f0000000100), 0x41100, 0x40, '\x00', 0x0, @fallback=0x1c, 0xffffffffffffffff, 0x8, &(0x7f0000000140)={0x1, 0x2}, 0x8, 0x10, &(0x7f0000000180)={0x4, 0x2, 0xfffff800, 0x401}, 0x10, r4, 0xffffffffffffffff, 0x2, 0x0, &(0x7f00000005c0)=[{0x2, 0x7, 0x9, 0xa}, {0x4, 0x2, 0x9, 0x4}]}, 0x94) r5 = bpf$MAP_CREATE(0x0, &(0x7f0000000800)=@bloom_filter={0x1e, 0x0, 0x10000, 0x4, 0x82d0, r1, 0x5, '\x00', 0x0, r1, 0x1, 0x2, 0x4, 0xb}, 0x50) r6 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000280)='memory.events\x00', 0x275a, 0x0) ioctl$TUNSETQUEUE(r6, 0x400454d9, &(0x7f0000000900)={'veth0\x00', 0x400}) writev(r6, &(0x7f0000000400)=[{&(0x7f00000002c0)="a609a89c9edd34187123b5adceb3968557f4e107445a53c0815c9636d00f896d1e8cd8de77a79f1e3e2c53ddf1bb9f8ac5cb5257ff4e8b960026bc4244c4b09179a97dffdf02563e23546d3e78f944e7e2fee2a00b6313048fe354223318badb21d8c086669c5f7772f4a6d90d0997babdf79f7d557e055b3e6f2e4f41ec06a39a57b9ccc00bbca22395e41f9e9652af665f0e1603fb85d4799d54d44c706ff8df9bb805b182a1260b5936ae44f649b5e2fdca240984dcd0033ec28aeaaa686608c5c50538eea153", 0xc8}, {&(0x7f00000004c0)="7ee25c099579d92f8da721f68a8100b6adf04e0cd543f7d26019d57e6a3ecf7ef34486da35c482845d517dc801cca9e4f248b15413a7e252b0", 0x39}], 0x2) mmap(&(0x7f0000000000/0x4000)=nil, 0x4000, 0x1, 0x10012, r6, 0x0) bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000880)={0x2, 0x4, 0x8, 0x1, 0x80, r5, 0x0, '\x00', r3, r6, 0x5, 0x5, 0x3}, 0x50) 7m9.394032785s ago: executing program 2 (id=15411): socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) r2 = bpf$MAP_CREATE(0x0, &(0x7f0000000140)=ANY=[@ANYBLOB="0f000000040000000400000015"], 0x50) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000740)={{r2, 0xffffffffffffffff}, &(0x7f00000006c0), &(0x7f0000000700)=r1}, 0x20) r4 = socket$pppl2tp(0x18, 0x1, 0x1) r5 = socket$inet6_udp(0xa, 0x2, 0x0) connect$pppl2tp(r4, &(0x7f0000000000)=@pppol2tpv3={0x18, 0x1, {0x3, r5, {0x2, 0x0, @dev}, 0x2}}, 0x2e) r6 = bpf$BPF_BTF_GET_FD_BY_ID(0x13, &(0x7f0000000300)=0xffffffffffffffff, 0x4) bpf$PROG_LOAD_XDP(0x5, &(0x7f00000000c0)={0x3, 0x4, &(0x7f0000000880)=ANY=[@ANYBLOB="dbf59647031d40ca156c8ad2946c7e276f104e1f10411100f8f7b0b3571bf9ade715a11a193aa42d31b78493bcd2094d0d9e", @ANYRES16=r6], &(0x7f00000002c0)='GPL\x00', 0xffff8258, 0x0, 0x0, 0x41100, 0x0, '\x00', 0x0, 0xf}, 0x94) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000007c0)={0x18, 0x3, &(0x7f00000002c0)=ANY=[], &(0x7f00000000c0)='GPL\x00', 0xfffffffc, 0x0, 0x0, 0x0, 0x10, '\x00', 0x0, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0xd6f1}, 0x94) socket$inet_icmp_raw(0x2, 0x3, 0x1) syz_init_net_socket$bt_hci(0x1f, 0x3, 0x5) close(0x4) syz_open_procfs$namespace(0x0, &(0x7f0000000080)='ns/ipc\x00') mmap(&(0x7f0000001000/0xc00000)=nil, 0xc00000, 0xc, 0x3032, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x5, 0x0, 0x0) setsockopt$MRT_PIM(0xffffffffffffffff, 0x0, 0xd1, &(0x7f0000000140)=0xfffffffb, 0x4) r7 = socket(0x2b, 0x80801, 0x1) getsockopt$EBT_SO_GET_INFO(r7, 0x0, 0x80, &(0x7f0000000140)={'filter\x00', 0x0, 0x0, 0x0, [0x8, 0x401, 0x7, 0x10000003, 0x1000000000, 0x100000001]}, &(0x7f0000000080)=0x78) r8 = socket$pppl2tp(0x18, 0x1, 0x1) connect$pppl2tp(r8, &(0x7f0000000000)=@pppol2tpv3={0x18, 0x1, {0x0, 0xffffffffffffffff, {0x2, 0x0, @dev={0xac, 0x14, 0x14, 0x18}}, 0x2, 0x1}}, 0x2e) getsockopt(r8, 0x111, 0x5, 0x0, &(0x7f0000000080)=0x5a) recvmsg$unix(r1, &(0x7f0000000940)={0x0, 0x20, &(0x7f00000001c0)=[{&(0x7f0000000840)=""/170, 0xaa}], 0x1}, 0x0) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000100)={{r3}, &(0x7f0000000000), &(0x7f00000000c0)=r0}, 0x20) sendmsg$inet(r0, &(0x7f0000000080)={0x0, 0x0, 0x0}, 0x4000000) 7m9.339410083s ago: executing program 9 (id=15413): r0 = socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$batadv(&(0x7f0000000040), r0) sendmsg$BATADV_CMD_GET_NEIGHBORS(r0, &(0x7f0000004340)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000200)=ANY=[], 0x1c}, 0x1, 0x0, 0x0, 0x4008000}, 0x4000000) 7m9.170080386s ago: executing program 9 (id=15415): syz_emit_ethernet(0x3e, &(0x7f0000001480)={@local, @multicast, @void, {@ipv4={0x800, @udp={{0x8, 0x4, 0x0, 0x3, 0x30, 0x67, 0x0, 0x5, 0x11, 0x0, @private=0xa010101, @local, {[@generic={0x44, 0x5, "ff6852"}, @ra={0x94, 0x4}]}}, {0x4e23, 0x4e22, 0x10, 0x0, @gue={{0x2, 0x0, 0x0, 0x6, 0x0, @val=0x80}}}}}}}, 0x0) r0 = socket$nl_netfilter(0x10, 0x3, 0xc) r1 = syz_init_net_socket$nl_rdma(0x10, 0x3, 0x10) sendmsg$netlink(r1, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)=[{&(0x7f0000000340)=ANY=[@ANYBLOB="180000002e000100000000000000000004001980040010"], 0x18}], 0x1, 0x0, 0x0, 0x84}, 0x300) syz_genetlink_get_family_id$nl802154(&(0x7f0000000280), 0xffffffffffffffff) sendmsg$IPSET_CMD_GET_BYINDEX(r0, &(0x7f0000000140)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000200)=ANY=[@ANYBLOB="240000000f06010400000000000000000700000405000100"], 0x24}, 0x1, 0x0, 0x0, 0x40000}, 0x4000810) syz_emit_ethernet(0x3e, &(0x7f0000001480)={@local, @multicast, @void, {@ipv4={0x800, @udp={{0x8, 0x4, 0x0, 0x3, 0x30, 0x67, 0x0, 0x5, 0x11, 0x0, @private=0xa010101, @local, {[@generic={0x44, 0x5, "ff6852"}, @ra={0x94, 0x4}]}}, {0x4e23, 0x4e22, 0x10, 0x0, @gue={{0x2, 0x0, 0x0, 0x6, 0x0, @val=0x80}}}}}}}, 0x0) (async) socket$nl_netfilter(0x10, 0x3, 0xc) (async) syz_init_net_socket$nl_rdma(0x10, 0x3, 0x10) (async) sendmsg$netlink(r1, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)=[{&(0x7f0000000340)=ANY=[@ANYBLOB="180000002e000100000000000000000004001980040010"], 0x18}], 0x1, 0x0, 0x0, 0x84}, 0x300) (async) syz_genetlink_get_family_id$nl802154(&(0x7f0000000280), 0xffffffffffffffff) (async) sendmsg$IPSET_CMD_GET_BYINDEX(r0, &(0x7f0000000140)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000200)=ANY=[@ANYBLOB="240000000f06010400000000000000000700000405000100"], 0x24}, 0x1, 0x0, 0x0, 0x40000}, 0x4000810) (async) 7m9.169459334s ago: executing program 2 (id=15416): r0 = socket(0xe, 0x3, 0x401) r1 = socket$nl_route(0x10, 0x3, 0x0) r2 = socket(0x10, 0x803, 0x2) syz_genetlink_get_family_id$mptcp(&(0x7f00000000c0), r2) getsockname$packet(r2, &(0x7f0000000680)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f00000003c0)=0x14) sendmsg$nl_route(r1, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000040)=ANY=[@ANYBLOB="3c0000001000010400eeffff11ffffffff000000", @ANYRES32=r3, @ANYBLOB="01000000010000001c0012000c000100627269646765"], 0x3c}}, 0x0) sendmsg$nl_route_sched(r0, &(0x7f0000005840)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000200)=@newqdisc={0x2c, 0x24, 0x5820a61ca228651, 0x0, 0x25dfdbfb, {0x0, 0x0, 0x0, r3, {}, {0xffff, 0xffff}, {0x0, 0xfff1}}, [@qdisc_kind_options=@q_drr={0x8}]}, 0x2c}}, 0x0) sendmsg$nl_route_sched(r1, &(0x7f0000000140)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f00000008c0)=@newtfilter={0x24, 0x28, 0x1, 0x70bd2d, 0x4, {0x0, 0x0, 0x0, r3, {0x10}, {0xffe0}, {0xfff1, 0x40}}}, 0x24}, 0x1, 0x0, 0x0, 0x11}, 0x40) 7m8.919414669s ago: executing program 2 (id=15417): r0 = bpf$PROG_LOAD(0x5, &(0x7f0000000080)={0x3, 0x3, &(0x7f0000000200)=ANY=[@ANYBLOB="85000000130000005d0000000000000095000000000000000a621cf434b9eaafdc0a00e9bfde908990817b364e51afe9c81a97f0570759f1cae63487ff68fffffffffffe8e3932e2b7185a25a4cf8a9456aa8a701c318c67edb6e9330b53c0eeba8644311ba75411890700000000000000d8e5b1dc91c5499bea0977"], &(0x7f0000000000)='GPL\x00', 0x5, 0x487, &(0x7f000000cf3d)=""/195, 0x0, 0x0, '\x00', 0x0, @sched_cls}, 0x48) write$tun(0xffffffffffffffff, &(0x7f0000000280)=ANY=[@ANYBLOB="0a000000aaaaaaaaaa26bbbbbbbbbbbb88a800008100000008004500002400006000002f9078ac1e0001ac1414aa000086dd00109078c205000180000000624ceebe5d0c96ec03d3348f5b622b72df6a7cd84dc44192decae1fd"], 0x3e) (async) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000180)={r0, 0x0, 0xd00, 0x0, &(0x7f0000000380)="263abd030e98ff4dc870bd6688a8640888a8", 0x0, 0x1200}, 0x28) (async) r1 = socket$packet(0x11, 0x2, 0x300) setsockopt$SO_ATTACH_FILTER(r1, 0x1, 0x1a, &(0x7f0000000000)={0x2, &(0x7f0000000100)=[{0x30, 0x0, 0x0, 0xfffff024}, {0x80000006}]}, 0x10) (async, rerun: 32) syz_genetlink_get_family_id$batadv(&(0x7f0000000140), 0xffffffffffffffff) (rerun: 32) 7m8.661757707s ago: executing program 2 (id=15419): socket$nl_route(0x10, 0x3, 0x0) (async) r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = socket$nl_route(0x10, 0x3, 0x0) r2 = socket$inet6_sctp(0xa, 0x1, 0x84) ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f0000000200)={'macvtap0\x00', 0x0}) socket$nl_route(0x10, 0x3, 0x0) (async) r4 = socket$nl_route(0x10, 0x3, 0x0) r5 = socket$nl_generic(0x10, 0x3, 0x10) r6 = syz_genetlink_get_family_id$team(&(0x7f00000001c0), r5) socket(0x18, 0x0, 0xc18895e) ioctl$ifreq_SIOCGIFINDEX_team(r5, 0x8933, &(0x7f0000000fc0)) (async) ioctl$ifreq_SIOCGIFINDEX_team(r5, 0x8933, &(0x7f0000000fc0)={'team0\x00', 0x0}) sendmsg$TEAM_CMD_OPTIONS_SET(r5, &(0x7f0000001d40)={0x0, 0x0, &(0x7f0000001d00)={&(0x7f0000000200)=ANY=[@ANYBLOB='`\x00\x00\x00', @ANYRES16=r6, @ANYBLOB="01002dbd7000fddbdf250100000008000100", @ANYRES32=r7, @ANYBLOB="4400028040000100240001006c625f686173685f73746174730000000000007cd6df1dbb1a48fe0000000000050003"], 0x60}, 0x1, 0x0, 0x0, 0x40004}, 0x884) (async) sendmsg$TEAM_CMD_OPTIONS_SET(r5, &(0x7f0000001d40)={0x0, 0x0, &(0x7f0000001d00)={&(0x7f0000000200)=ANY=[@ANYBLOB='`\x00\x00\x00', @ANYRES16=r6, @ANYBLOB="01002dbd7000fddbdf250100000008000100", @ANYRES32=r7, @ANYBLOB="4400028040000100240001006c625f686173685f73746174730000000000007cd6df1dbb1a48fe0000000000050003"], 0x60}, 0x1, 0x0, 0x0, 0x40004}, 0x884) sendmsg$nl_route(r4, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000100)={&(0x7f00000002c0)=@mpls_delroute={0x54, 0x18, 0x9, 0x0, 0x0, {0x1c, 0x14, 0x0, 0x0, 0xfe, 0x0, 0x0, 0x1}, [@RTA_VIA={0x14, 0x12, {0x0, "f1b9a81697008d68a0328c49d2ee"}}, @RTA_OIF={0x8, 0x4, r3}, @RTA_DST={0x8, 0x1, {0x1000}}, @RTA_DST={0x8, 0x1, {0x401, 0x0, 0x1}}, @RTA_MULTIPATH={0xc, 0x9, {0x1, 0x21, 0x5, r7}}]}, 0x54}}, 0x0) sendmsg$nl_route(r1, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000001140)={&(0x7f0000000040)=ANY=[@ANYBLOB="680000001000030500"/20, @ANYRES32=0x0, @ANYBLOB="0000000000000000400012800c0001006d6163766c616e00300002800800010010000000100005800a000400aaaaaaaaaabb000008000300030000000a000400aaaaaaaab1aa000008000500", @ANYRES32=r3], 0x68}}, 0x0) sendmsg$nl_route_sched(r0, &(0x7f00000003c0)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000140)=@getchain={0x24, 0x11, 0x839, 0x70bd28, 0x0, {0x0, 0x0, 0x0, r3, {0x1, 0x6}, {0xd}, {0x11, 0xfff1}}}, 0x24}, 0x1, 0x0, 0x0, 0x84}, 0x0) (async) sendmsg$nl_route_sched(r0, &(0x7f00000003c0)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000140)=@getchain={0x24, 0x11, 0x839, 0x70bd28, 0x0, {0x0, 0x0, 0x0, r3, {0x1, 0x6}, {0xd}, {0x11, 0xfff1}}}, 0x24}, 0x1, 0x0, 0x0, 0x84}, 0x0) r8 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r8, 0x8933, &(0x7f0000000080)={'veth1_to_batadv\x00', 0x0}) sendmsg$nl_route(r8, &(0x7f0000000200)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000140)=@bridge_newvlan={0x18, 0x71, 0x1, 0x0, 0x0, {0x7, 0x0, 0x0, r9}}, 0x18}}, 0x20008000) sendmsg$nl_route(r4, &(0x7f0000000180)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x10}, 0xc, &(0x7f00000000c0)={&(0x7f0000000340)=@ipv6_getnetconf={0x44, 0x52, 0x100, 0x70bd2b, 0x25dfdbff, {}, [@NETCONFA_PROXY_NEIGH={0x8, 0x5, 0x2}, @NETCONFA_FORWARDING={0x8, 0x2, 0xff}, @NETCONFA_IFINDEX={0x8, 0x1, r9}, @NETCONFA_PROXY_NEIGH={0x8, 0x5, 0x40}, @NETCONFA_PROXY_NEIGH={0x8}, @NETCONFA_FORWARDING={0x8, 0x2, 0xb}]}, 0x44}, 0x1, 0x0, 0x0, 0x20000040}, 0x4000000) 7m8.526050062s ago: executing program 9 (id=15422): r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x7101}) (async) r1 = socket$inet6(0xa, 0x2, 0x0) r2 = socket(0x10, 0x803, 0x0) ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) (async) ioctl$F2FS_IOC_MOVE_RANGE(r0, 0xc020f509, &(0x7f0000000140)={r1, 0x8001, 0x0, 0x1}) (async) r5 = socket$vsock_stream(0x28, 0x1, 0x0) getsockopt(r5, 0x28, 0x2, &(0x7f0000001100)=""/4109, &(0x7f00000000c0)=0x100d) (async) ioctl$TUNGETVNETHDRSZ(r4, 0x800454d7, &(0x7f0000000180)) (async) sendmsg$nl_route_sched(r2, &(0x7f00000012c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000a40)=@newqdisc={0x38, 0x24, 0x4ee4e6a52ff56541, 0x70bd28, 0xffffffff, {0x0, 0x0, 0x0, r3, {0x0, 0x9}, {0xffff, 0xffff}}, [@qdisc_kind_options=@q_fq_codel={{0xd}, {0x4}}]}, 0x38}}, 0x0) (async) r6 = socket(0x400000000010, 0x3, 0x0) (async) r7 = socket$unix(0x1, 0x1, 0x0) ioctl$sock_SIOCGIFINDEX(r7, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r6, &(0x7f0000000580)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000027c0)=@newtfilter={0x4ac, 0x2c, 0xd27, 0x30bd29, 0x25dfdc00, {0x0, 0x0, 0x0, r8, {0x0, 0x4}, {}, {0x8}}, [@filter_kind_options=@f_matchall={{0xd}, {0x478, 0x2, [@TCA_MATCHALL_ACT={0x474, 0x2, [@m_police={0x470, 0x1, 0x0, 0x0, {{0xb}, {0x444, 0x2, 0x0, 0x1, [[@TCA_POLICE_RATE={0x404, 0x2, [0x1ff, 0xffffffff, 0x10000, 0x81, 0x107f, 0xfffffffb, 0x4, 0x2, 0xffffffc0, 0x7, 0x2234, 0xca0, 0x81b, 0x800, 0x5, 0x0, 0x3, 0x7ed53619, 0x1, 0x2, 0x9644, 0x5, 0x58b, 0x2, 0x1003ff, 0x9, 0x2, 0xffffff37, 0x0, 0x80000004, 0x10001, 0x790, 0x5, 0xab2, 0xfffffff9, 0x1a77, 0x9, 0x3, 0x400, 0x63c, 0x4, 0xfffffffb, 0x1, 0x5, 0x1, 0x5b1f, 0x5, 0x7, 0xfffffff9, 0x100006, 0xd, 0xff, 0x3, 0x10000, 0x6, 0x6b7, 0x1ff, 0x4, 0x4, 0x3, 0x3, 0xa14, 0x3, 0x2, 0x80000000, 0x81, 0x7, 0x8, 0x5, 0xffff, 0xf7, 0x3, 0xfffffff9, 0x9, 0x4, 0x8, 0xfff, 0x3, 0x1, 0x6, 0x7, 0x8, 0x100, 0xc0000000, 0x6, 0x4, 0x6, 0x5, 0x80000001, 0x8, 0x1d24, 0x2, 0x5, 0x1, 0x7f, 0x7, 0x863c, 0xff, 0x24, 0x5, 0x7, 0x6, 0x7a, 0x8, 0x0, 0x7, 0x470, 0x7f, 0x6, 0x0, 0x1, 0x0, 0x4, 0x9, 0x61, 0x200, 0x6, 0x2, 0x2, 0x6, 0x10001, 0x8, 0x7, 0xf, 0xda5a, 0x7ffffffe, 0x9, 0x2f0cb955, 0x7, 0xfed, 0xf, 0x6ae, 0x2, 0x3e, 0x9, 0x8001, 0x0, 0xec000, 0x0, 0x1, 0x2, 0xfffffffb, 0x7, 0x8, 0x4, 0x1, 0xf7ffcf1b, 0x282, 0x5517bc7b, 0x4, 0x4, 0xb6b, 0x5, 0x0, 0xac, 0x9, 0x6, 0x10, 0x9, 0x8, 0x80000001, 0x3, 0x74, 0x2, 0x7fffffff, 0x0, 0xa, 0x6, 0xffffffff, 0x9, 0x10001, 0x7, 0x7f, 0x5, 0x3, 0x200000a, 0x1, 0x0, 0x9, 0x300, 0x5, 0x3, 0x6, 0xffffffff, 0xffb, 0xff, 0x5, 0x8, 0x3, 0x2, 0x5, 0xfca, 0x8000399d, 0x6, 0x8ab6, 0x18000, 0x2, 0xfffffff9, 0x2, 0x2, 0x528c, 0x5, 0x200, 0xac, 0xf, 0xd05, 0x9a2ce73, 0x4, 0x6, 0xe074, 0x6b10, 0x5, 0x1, 0x6, 0xb, 0xa26, 0xaf6, 0x0, 0xec, 0x8, 0xde16, 0xc418, 0xffffffff, 0x4, 0x9, 0x400, 0x80001, 0x5, 0x354d, 0x5, 0x2, 0x1, 0x2007, 0x1, 0x177, 0x7, 0x0, 0x80, 0x5, 0x8, 0xfffffffb, 0x9, 0xe7b, 0x1, 0x7, 0x42bf, 0x10000, 0x9, 0x9, 0x6, 0x4b75, 0x80000001, 0x4, 0x5, 0x10001, 0x1]}], [@TCA_POLICE_TBF={0x3c, 0x1, {0xfffffe00, 0x5, 0x5, 0x1, 0xdbec, {0x8, 0x1, 0x8001, 0x5, 0x7, 0x9}, {0x6, 0x0, 0xd, 0x5, 0x1}, 0x8, 0xffffffff, 0xf}}]]}, {0x4}, {0xc}, {0xc, 0x8, {0x0, 0x3}}}}]}]}}]}, 0x4ac}, 0x1, 0x0, 0x0, 0x4000040}, 0x0) (async, rerun: 32) r9 = openat$tun(0xffffffffffffff9c, &(0x7f0000000400), 0x0, 0x0) (rerun: 32) close(r9) (async) socket$inet6_tcp(0xa, 0x1, 0x0) ioctl$SIOCSIFHWADDR(r9, 0x8914, &(0x7f00000000c0)={'syzkaller0\x00', @link_local={0x1, 0x80, 0xc2, 0x0, 0x0, 0x2}}) r10 = socket$unix(0x1, 0x2, 0x0) ioctl$sock_SIOCGIFINDEX(r10, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) getsockopt$netlink(r4, 0x10e, 0x3, &(0x7f0000000280)=""/189, &(0x7f00000001c0)=0xbd) (async, rerun: 32) sendmmsg$inet(r1, &(0x7f0000000b80)=[{{&(0x7f0000000040)={0x2, 0x4e21, @local}, 0x10, 0x0, 0x0, &(0x7f00000006c0)=[@ip_pktinfo={{0x1c, 0x0, 0x8, {r11, @dev={0xac, 0x14, 0x14, 0x41}, @empty}}}], 0x20}}], 0x1, 0x0) (rerun: 32) 7m8.411946829s ago: executing program 9 (id=15423): sendmsg$inet(0xffffffffffffffff, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000000bc0)=[{&(0x7f0000000780)='}', 0x1}], 0x1}, 0x0) r0 = socket$nl_netfilter(0x10, 0x3, 0xc) r1 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r1, &(0x7f00000003c0)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000680)=@ipv6_newroute={0x30, 0x18, 0x1, 0x70bd26, 0x25dfdbff, {0xa, 0x0, 0x80, 0x0, 0xfd, 0x4, 0xfd, 0xa, 0x500}, [@RTA_GATEWAY={0x14, 0x5, @loopback}]}, 0x30}, 0x1, 0x0, 0x0, 0x40010}, 0x4800) sendmsg$IPCTNL_MSG_CT_DELETE(r0, &(0x7f00000003c0)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000b40)=ANY=[@ANYBLOB="e40000000201010800000000000000000a000000d00001800c000280050001000000000014000180080001000000000008000200000000002c00018014000300ff01000000000000000000000000000114000400ff0100000000000000000000000000010c00028005000100000000004700028005000100010000000600064000000000060005"], 0xe4}}, 0x0) 7m8.404599508s ago: executing program 2 (id=15425): r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000000), 0xc0041, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000200)={'syzkaller1\x00', 0xc201}) (async) ioctl$TUNSETVNETHDRSZ(r0, 0x400454d8, &(0x7f0000000140)=0x90) (async) r1 = bpf$MAP_CREATE(0x0, &(0x7f0000000200)=@base={0x5, 0x5, 0x9fd, 0x84, 0x1}, 0x48) bpf$MAP_UPDATE_BATCH(0x1a, &(0x7f0000000300)={0xffffffffffffffff, 0x0, 0x0, 0x0, 0x800, r1}, 0x38) (async) write$tun(r0, &(0x7f0000000040)=ANY=[@ANYRESDEC], 0xfdef) 7m7.580577909s ago: executing program 40 (id=15427): r0 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$IPVS_CMD_NEW_DAEMON(0xffffffffffffffff, 0x0, 0x0) r1 = syz_genetlink_get_family_id$tipc2(&(0x7f0000000d40), 0xffffffffffffffff) sendmsg$TIPC_NL_PEER_REMOVE(r0, &(0x7f0000000f80)={0x0, 0x0, &(0x7f0000000f40)={&(0x7f0000000d80)=ANY=[@ANYBLOB, @ANYRES16=r1, @ANYBLOB="0100000000000000000014000000240007800c00030000000000000000000c00040000000000000000000800020001010000"], 0x38}}, 0x0) 7m7.487145178s ago: executing program 41 (id=15372): r0 = bpf$PROG_LOAD(0x5, &(0x7f000000e000)={0x10, 0x4, &(0x7f0000000040)=ANY=[@ANYBLOB="b4000000000000007910480000000000610400000000000095000080"], &(0x7f0000003ff6)='GPL\x00', 0x2, 0xfd90, &(0x7f000000cf3d)=""/195, 0x0, 0x0, '\x00', 0x0, @sk_msg}, 0x48) close(r0) r1 = socket$inet6(0xa, 0x2, 0x0) bind$inet6(r1, &(0x7f0000f5dfe4)={0xa, 0x4e20}, 0x1c) socket$nl_route(0x10, 0x3, 0x0) r2 = bpf$MAP_CREATE(0x0, &(0x7f0000000200)=@base={0xf, 0x4, 0x4, 0x12}, 0x48) r3 = bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000340)={0xe, 0x4, &(0x7f0000000400)=ANY=[@ANYBLOB="18020000801000000000000004000000850000002700000095"], &(0x7f0000000000)='syzkaller\x00', 0x0, 0x0, 0x0, 0x40f00}, 0x80) r4 = socket$netlink(0x10, 0x3, 0x0) r5 = bpf$PROG_LOAD(0x5, &(0x7f0000000100)={0x4, 0x4, &(0x7f0000000240)=ANY=[@ANYBLOB="18000000000000000000000000000008850000007600000095"], &(0x7f00000001c0)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x80) sendmsg$nl_route_sched(r4, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000480)={&(0x7f00000004c0)=@newtaction={0x94, 0x30, 0xffffffffffffffff, 0x0, 0x40002, {}, [{0x80, 0x1, [@m_bpf={0x4c, 0x1, 0x0, 0x0, {{0x8}, {0x24, 0x2, 0x0, 0x1, [@TCA_ACT_BPF_PARMS={0x18, 0x2, {0x64, 0x7, 0x8, 0x1}}, @TCA_ACT_BPF_FD={0x8, 0x5, r5}]}, {0x4}, {0xc}, {0xc}}}, @m_police={0x30, 0x2, 0x0, 0x0, {{0xb}, {0x4}, {0x4}, {0xc}, {0xc, 0x8, {0x3, 0x3}}}}]}]}, 0x94}, 0x1, 0x0, 0x0, 0x4000000}, 0x0) bpf$BPF_PROG_DETACH(0x8, &(0x7f0000000080)={@map=r2, r3, 0x5}, 0x10) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f00000001c0)={{r2}, &(0x7f0000000140), &(0x7f0000000180)=r0}, 0x20) syz_emit_ethernet(0x53, &(0x7f0000000700)={@link_local={0x1, 0x80, 0xc2, 0x0, 0x0, 0x2}, @empty, @void, {@ipv4={0x800, @udp={{0x5, 0x4, 0x0, 0x0, 0x45, 0x0, 0x0, 0x0, 0x11, 0x0, @empty, @empty}, {0x4e21, 0x4e20, 0x31, 0x0, @opaque="604889d37ccf5a9a3e2b8f19a3b0a58a55e33190841acd6f75d284b2f0a14885459c534e6bfc65fc88"}}}}}, 0x0) 7m7.461246494s ago: executing program 9 (id=15430): bpf$PROG_LOAD_XDP(0x5, &(0x7f00000000c0)={0x3, 0x4, &(0x7f0000000980)=ANY=[@ANYBLOB="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"], &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0xf}, 0x94) r0 = openat$cgroup_procs(0xffffffffffffffff, &(0x7f0000000000)='cgroup.threads\x00', 0x2, 0x0) r1 = getpid() r2 = bpf$ITER_CREATE(0xb, &(0x7f00000004c0), 0x8) r3 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r3, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000040)=@newlink={0x3c, 0x10, 0x403, 0x0, 0x0, {}, [@IFLA_LINKINFO={0x1c, 0x12, 0x0, 0x1, @bond={{0x9}, {0xc, 0x2, 0x0, 0x1, [@IFLA_BOND_UPDELAY={0x8}]}}}]}, 0x3c}, 0x1, 0x2000000000000000}, 0x0) close(r2) r4 = bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000000)={&(0x7f00000000c0)=ANY=[@ANYBLOB="9feb010018000000000000001c0000001c00000003000000010000000000000e0200000000000000000000000000000604000000002e"], 0x0, 0x37}, 0x28) unshare(0x26020480) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000180)={0x11, 0x3, &(0x7f0000000040)=@framed={{0x18, 0x0, 0x3, 0x0, 0x1001, 0x0, 0x0, 0x0, 0x3}}, &(0x7f0000000080)='syzkaller\x00', 0x8, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, 0x0, r4}, 0x94) bpf$BPF_TASK_FD_QUERY(0x14, &(0x7f0000000200)={r1, r2, 0x0, 0x4, &(0x7f00000001c0)='GPL\x00'}, 0x30) bpf$BPF_PROG_TEST_RUN(0x1c, &(0x7f0000000240)={0xffffffffffffffff, 0x8, 0x25, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x40) bpf$LINK_DETACH(0x22, 0x0, 0x0) bpf$BPF_GET_MAP_INFO(0xf, &(0x7f0000000600)={r2, 0x0, 0x0}, 0x10) write$cgroup_pid(r0, &(0x7f0000000180)=r1, 0x12) r5 = socket$nl_rdma(0x10, 0x3, 0x14) sendmsg$RDMA_NLDEV_CMD_STAT_GET(r5, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000100)=ANY=[@ANYBLOB="30000000001401"], 0x30}}, 0x0) r6 = bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000640)={0x6, 0x15, &(0x7f0000000800)=ANY=[], &(0x7f0000000380)='syzkaller\x00', 0x0, 0xec, &(0x7f00000003c0)=""/236, 0x41000, 0x60, '\x00', 0x0, 0x25, r2, 0x8, &(0x7f0000000500)={0x7, 0xfff}, 0x8, 0x10, &(0x7f0000000540)={0x5, 0x5, 0x7fffffff}, 0x10, 0x0, 0x0, 0x3, &(0x7f0000000580)=[r2, r2, r2], &(0x7f00000005c0)=[{0x4, 0x2, 0xf, 0x9}, {0x5, 0x3, 0x4, 0x5}, {0x2, 0x3, 0x5, 0x6}], 0x10, 0xd113}, 0x94) bpf$BPF_GET_MAP_INFO(0xf, &(0x7f0000000780)={r2, 0x58, &(0x7f0000000700)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, ""/16, 0x0}}, 0x10) bpf$BPF_LINK_CREATE_XDP(0x1c, &(0x7f00000007c0)={r6, r7, 0x25, 0x19, @void}, 0x10) bpf$BPF_BTF_GET_NEXT_ID(0x17, &(0x7f00000002c0)={0x8, 0x0}, 0x8) bpf$BPF_LINK_CREATE_XDP(0x1c, &(0x7f0000000300)={r2, r7, 0x25, 0x4, @val=@target_btf_id=r8}, 0x14) 7m7.458389379s ago: executing program 42 (id=15430): bpf$PROG_LOAD_XDP(0x5, &(0x7f00000000c0)={0x3, 0x4, &(0x7f0000000980)=ANY=[@ANYBLOB="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"], &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0xf}, 0x94) r0 = openat$cgroup_procs(0xffffffffffffffff, &(0x7f0000000000)='cgroup.threads\x00', 0x2, 0x0) r1 = getpid() r2 = bpf$ITER_CREATE(0xb, &(0x7f00000004c0), 0x8) r3 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r3, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000040)=@newlink={0x3c, 0x10, 0x403, 0x0, 0x0, {}, [@IFLA_LINKINFO={0x1c, 0x12, 0x0, 0x1, @bond={{0x9}, {0xc, 0x2, 0x0, 0x1, [@IFLA_BOND_UPDELAY={0x8}]}}}]}, 0x3c}, 0x1, 0x2000000000000000}, 0x0) close(r2) r4 = bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000000)={&(0x7f00000000c0)=ANY=[@ANYBLOB="9feb010018000000000000001c0000001c00000003000000010000000000000e0200000000000000000000000000000604000000002e"], 0x0, 0x37}, 0x28) unshare(0x26020480) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000180)={0x11, 0x3, &(0x7f0000000040)=@framed={{0x18, 0x0, 0x3, 0x0, 0x1001, 0x0, 0x0, 0x0, 0x3}}, &(0x7f0000000080)='syzkaller\x00', 0x8, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, 0x0, r4}, 0x94) bpf$BPF_TASK_FD_QUERY(0x14, &(0x7f0000000200)={r1, r2, 0x0, 0x4, &(0x7f00000001c0)='GPL\x00'}, 0x30) bpf$BPF_PROG_TEST_RUN(0x1c, &(0x7f0000000240)={0xffffffffffffffff, 0x8, 0x25, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x40) bpf$LINK_DETACH(0x22, 0x0, 0x0) bpf$BPF_GET_MAP_INFO(0xf, &(0x7f0000000600)={r2, 0x0, 0x0}, 0x10) write$cgroup_pid(r0, &(0x7f0000000180)=r1, 0x12) r5 = socket$nl_rdma(0x10, 0x3, 0x14) sendmsg$RDMA_NLDEV_CMD_STAT_GET(r5, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000100)=ANY=[@ANYBLOB="30000000001401"], 0x30}}, 0x0) r6 = bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000640)={0x6, 0x15, &(0x7f0000000800)=ANY=[], &(0x7f0000000380)='syzkaller\x00', 0x0, 0xec, &(0x7f00000003c0)=""/236, 0x41000, 0x60, '\x00', 0x0, 0x25, r2, 0x8, &(0x7f0000000500)={0x7, 0xfff}, 0x8, 0x10, &(0x7f0000000540)={0x5, 0x5, 0x7fffffff}, 0x10, 0x0, 0x0, 0x3, &(0x7f0000000580)=[r2, r2, r2], &(0x7f00000005c0)=[{0x4, 0x2, 0xf, 0x9}, {0x5, 0x3, 0x4, 0x5}, {0x2, 0x3, 0x5, 0x6}], 0x10, 0xd113}, 0x94) bpf$BPF_GET_MAP_INFO(0xf, &(0x7f0000000780)={r2, 0x58, &(0x7f0000000700)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, ""/16, 0x0}}, 0x10) bpf$BPF_LINK_CREATE_XDP(0x1c, &(0x7f00000007c0)={r6, r7, 0x25, 0x19, @void}, 0x10) bpf$BPF_BTF_GET_NEXT_ID(0x17, &(0x7f00000002c0)={0x8, 0x0}, 0x8) bpf$BPF_LINK_CREATE_XDP(0x1c, &(0x7f0000000300)={r2, r7, 0x25, 0x4, @val=@target_btf_id=r8}, 0x14) 7m7.406857911s ago: executing program 2 (id=15431): r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000000), 0x40241, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000200)={'syzkaller1\x00', 0xc201}) write$tun(r0, &(0x7f0000000380)=ANY=[@ANYBLOB="1c0000f500000000000000862dfdff00000002"], 0x78) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000040)={'veth0_macvtap\x00', 0x2}) r1 = openat$tcp_mem(0xffffffffffffff9c, &(0x7f00000002c0)='/proc/sys/net/ipv4/tcp_rmem\x00', 0x1, 0x0) r2 = socket$nl_generic(0x10, 0x3, 0x10) r3 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000080), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r2, 0x8933, &(0x7f00000000c0)={'wlan0\x00', 0x0}) sendmsg$NL80211_CMD_SET_INTERFACE(r2, &(0x7f0000000880)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000240)=ANY=[@ANYBLOB='`\x00\x00\x00', @ANYRES16=r3, @ANYBLOB="050000000000000000000600000008000300", @ANYRES32=r4, @ANYBLOB="0800050006000000140017800400050004000400060001"], 0x60}}, 0x0) r5 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$IP6T_SO_SET_REPLACE(r5, 0x29, 0x40, &(0x7f0000000980)=@filter={'filter\x00', 0x4, 0x4, 0x340, 0xffffffff, 0x0, 0x0, 0xd0, 0xfeffffff, 0xffffffff, 0x270, 0x270, 0x270, 0xffffffff, 0x4, 0x0, {[{{@uncond, 0x2f2, 0xa8, 0xd0}, @REJECT={0x28, 'REJECT\x00', 0x0, {0x5}}}, {{@uncond, 0x0, 0xa8, 0xd0}, @common=@unspec=@STANDARD={0x28, '\x00', 0x0, 0xd0}}, {{@ipv6={@private0, @loopback, [0xff, 0x0, 0xff000000], [0x0, 0xff, 0xff000000, 0xffffff00], 'team0\x00', 'batadv_slave_0\x00', {0xff}, {}, 0xff, 0xe7, 0x4, 0x44}, 0x0, 0xa8, 0xd0}, @common=@unspec=@NFQUEUE3={0x28, 'NFQUEUE\x00', 0x3, {0x9, 0x8, 0x1}}}], {{'\x00', 0x0, 0xa8, 0xd0}, {0x28}}}}, 0x3a0) write$cgroup_subtree(0xffffffffffffffff, &(0x7f0000000000)=ANY=[@ANYRES32=r1, @ANYRESDEC=r5], 0x56) r6 = socket$isdn(0x22, 0x3, 0x24) shutdown(r6, 0x0) 7m7.320288356s ago: executing program 43 (id=15431): r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000000), 0x40241, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000200)={'syzkaller1\x00', 0xc201}) write$tun(r0, &(0x7f0000000380)=ANY=[@ANYBLOB="1c0000f500000000000000862dfdff00000002"], 0x78) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000040)={'veth0_macvtap\x00', 0x2}) r1 = openat$tcp_mem(0xffffffffffffff9c, &(0x7f00000002c0)='/proc/sys/net/ipv4/tcp_rmem\x00', 0x1, 0x0) r2 = socket$nl_generic(0x10, 0x3, 0x10) r3 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000080), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r2, 0x8933, &(0x7f00000000c0)={'wlan0\x00', 0x0}) sendmsg$NL80211_CMD_SET_INTERFACE(r2, &(0x7f0000000880)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000240)=ANY=[@ANYBLOB='`\x00\x00\x00', @ANYRES16=r3, @ANYBLOB="050000000000000000000600000008000300", @ANYRES32=r4, @ANYBLOB="0800050006000000140017800400050004000400060001"], 0x60}}, 0x0) r5 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$IP6T_SO_SET_REPLACE(r5, 0x29, 0x40, &(0x7f0000000980)=@filter={'filter\x00', 0x4, 0x4, 0x340, 0xffffffff, 0x0, 0x0, 0xd0, 0xfeffffff, 0xffffffff, 0x270, 0x270, 0x270, 0xffffffff, 0x4, 0x0, {[{{@uncond, 0x2f2, 0xa8, 0xd0}, @REJECT={0x28, 'REJECT\x00', 0x0, {0x5}}}, {{@uncond, 0x0, 0xa8, 0xd0}, @common=@unspec=@STANDARD={0x28, '\x00', 0x0, 0xd0}}, {{@ipv6={@private0, @loopback, [0xff, 0x0, 0xff000000], [0x0, 0xff, 0xff000000, 0xffffff00], 'team0\x00', 'batadv_slave_0\x00', {0xff}, {}, 0xff, 0xe7, 0x4, 0x44}, 0x0, 0xa8, 0xd0}, @common=@unspec=@NFQUEUE3={0x28, 'NFQUEUE\x00', 0x3, {0x9, 0x8, 0x1}}}], {{'\x00', 0x0, 0xa8, 0xd0}, {0x28}}}}, 0x3a0) write$cgroup_subtree(0xffffffffffffffff, &(0x7f0000000000)=ANY=[@ANYRES32=r1, @ANYRESDEC=r5], 0x56) r6 = socket$isdn(0x22, 0x3, 0x24) shutdown(r6, 0x0) 4m44.424224468s ago: executing program 5 (id=17373): r0 = socket$kcm(0x10, 0x5, 0x10) r1 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) setsockopt$bt_hci_HCI_DATA_DIR(r1, 0x0, 0x1, 0x0, 0x0) ioctl$F2FS_IOC_MOVE_RANGE(r0, 0xc020f509, &(0x7f0000000000)={r0, 0x6, 0xfffffffffffffffb, 0xffffffffffffffff}) r3 = socket$inet_mptcp(0x2, 0x1, 0x106) r4 = socket$isdn_base(0x22, 0x3, 0x0) getsockopt$sock_buf(r4, 0x1, 0x2d, 0x0, &(0x7f0000000e40)) setsockopt$IP_VS_SO_SET_STOPDAEMON(r3, 0x0, 0x48c, &(0x7f0000000040)={0x0, 'ipvlan1\x00', 0x2}, 0x18) sendmsg$kcm(r2, &(0x7f00000000c0)={0x0, 0x0, &(0x7f00000008c0)}, 0x30000881) bpf$MAP_CREATE(0x1900000000000000, &(0x7f0000000500)=@base={0xe, 0x0, 0x0, 0x202000, 0x841}, 0x50) sendmsg$RDMA_NLDEV_CMD_NEWLINK(r0, &(0x7f0000000200)={&(0x7f0000000080)={0x10, 0x0, 0x0, 0x80}, 0xc, &(0x7f00000001c0)={&(0x7f0000000100)={0x88, 0x1403, 0x100, 0x70bd27, 0x25dfdbfd, "", [{{0x9, 0x2, 'syz1\x00'}, {0x8, 0x41, 'rxe\x00'}, {0x14, 0x33, 'pim6reg0\x00'}}, {{0x9, 0x2, 'syz2\x00'}, {0x8, 0x41, 'siw\x00'}, {0x14, 0x33, 'veth1_virt_wifi\x00'}}, {{0x9, 0x2, 'syz1\x00'}, {0x8, 0x41, 'siw\x00'}, {0x14, 0x33, 'bond_slave_0\x00'}}]}, 0x88}, 0x1, 0x0, 0x0, 0x4010045}, 0x0) 4m44.349518033s ago: executing program 5 (id=17376): sendmsg$NL80211_CMD_SET_INTERFACE(0xffffffffffffffff, &(0x7f0000001140)={0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x4000080}, 0x0) r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000000)=@base={0xa, 0x8, 0x42, 0x40, 0x42}, 0x50) bpf$MAP_UPDATE_BATCH(0x1a, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000080), &(0x7f0000000880), 0x1006, r0, 0x0, 0xd88d02a0}, 0x38) bpf$MAP_LOOKUP_ELEM(0x1, &(0x7f0000000240)={r0, &(0x7f0000000100), &(0x7f0000002240)=""/99}, 0x20) r1 = socket(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX_80211(r1, 0x8933, &(0x7f0000000140)={'wlan1\x00', 0x0}) sendmsg$NL80211_CMD_SET_PMK(r1, &(0x7f0000000280)={&(0x7f0000000100)={0x10, 0x0, 0x0, 0x4040204}, 0xc, &(0x7f00000001c0)={&(0x7f0000000180)={0x40, 0x0, 0x400, 0x70bd2a, 0x25dfdbfb, {{}, {@val={0x8, 0x3, r2}, @void}}, [@NL80211_ATTR_MAC={0xa, 0x6, @broadcast}, @NL80211_ATTR_MAC={0xa}, @NL80211_ATTR_MAC={0xa}]}, 0x40}, 0x1, 0x0, 0x0, 0x4010}, 0x4000) ioctl$ifreq_SIOCGIFINDEX_vcan(r1, 0x8933, &(0x7f0000000000)={'vcan0\x00', 0x0}) connect$can_j1939(r1, &(0x7f0000000080)={0x1d, r3, 0x0, {0x1, 0xf0}, 0xff}, 0x18) sendmsg$nl_generic(r1, &(0x7f0000000040)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000003140)=ANY=[@ANYBLOB="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", @ANYRES32=0x0, @ANYBLOB="08001a00", @ANYRES32=0x0, @ANYBLOB="06003800d8510000040049800400e0801a165c80f928efeadc95a00c88d81d8d36eb021f05e357ce0cc80496d946a14b733a0b75dc0e0fe7ec451e3304efabb148cf7740d92633549fc799efeffbb500bf6a3db52cb6551af05b9d13a338392b5a8a8a21422903ac79280ba0651419590f6126813018282ea112a8c697e421a55ef2aac7340a5736e3d51504d8c7f023ee72b55ab9a1a1195cf9edf01e30447d1e000ce0ec914a9a6ae232498e74bcd19c01b7086e3fec56b754ab12185fda15b9525dec81f973a9c4bc9e3346f077651b64733a62e0536a41b5d896c07d71bb8b256ff30493694ca27c654b9cdfd0721dcef4726d97a2974dc7d8e373b0a60174bb0800ee00", @ANYRES32=0x0, @ANYBLOB="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", @ANYRES32, @ANYBLOB="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", @ANYRES32, @ANYRES32, @ANYBLOB="08001b"], 0x18c0}}, 0x0) 4m44.030713293s ago: executing program 5 (id=17382): r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$SEG6(&(0x7f0000000040), 0xffffffffffffffff) sendmsg$SEG6_CMD_GET_TUNSRC(r0, &(0x7f0000000100)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x4000000}, 0xc, &(0x7f00000000c0)={&(0x7f0000000080)={0x28, r1, 0x400, 0x70bd2d, 0x25dfdbfb, {}, [@SEG6_ATTR_DST={0x14, 0x1, @dev={0xfe, 0x80, '\x00', 0x19}}]}, 0x28}, 0x1, 0x0, 0x0, 0x14}, 0x4004) r2 = syz_genetlink_get_family_id$tipc(&(0x7f0000000180), r0) sendmsg$TIPC_CMD_GET_BEARER_NAMES(r0, &(0x7f0000000240)={&(0x7f0000000140)={0x10, 0x0, 0x0, 0x40}, 0xc, &(0x7f0000000200)={&(0x7f00000001c0)={0x1c, r2, 0x100, 0x70bd2a, 0x25dfdbff, {}, ["", "", "", "", "", "", ""]}, 0x1c}}, 0x4000000) r3 = socket$inet6_sctp(0xa, 0x5, 0x84) setsockopt$inet6_IPV6_DSTOPTS(r3, 0x29, 0x3b, &(0x7f0000000280)={0xc1, 0x2d, '\x00', [@generic={0x63, 0xc6, "6b78bc1b99593be46f2c61d9c0cd1e1927bf83f33db0ea65238fe97501a314c339fbfb485e465773ad973f44aabed29d6d5a83a4bf4017517e683e4e8b65df711310b4e61973bbd2a1f2d5c7f814fa47f1c4108b8fcaf042c68c785ccd6bbc738474527e9cd5e6ba5194142dc52b6de9b3ba07870d369e8eea99894394a56296e6c66979163591627b9b94327f140770afdd7a63bf3824a4be741b6b95dd4755d7553dda034236aa6714e4ebc8f15fdd85c454802ff98d672a2d2743127cea7202bbb10ee598"}, @pad1, @jumbo={0xc2, 0x4, 0x9}, @enc_lim={0x4, 0x1, 0xf8}, @calipso={0x7, 0x20, {0x1, 0x6, 0x3, 0x9, [0x6, 0xa9, 0x1]}}, @enc_lim={0x4, 0x1, 0x21}, @generic={0x0, 0x70, "4c28351799d59a71eedde2d1a015cdecb855d963bbb950fa3a4b6bbe915979bfe8fd3b0703b9f1845490eec360fbd354e08ec65fc5992ba514945556dd7c4a943e0dc3f6c749d9eb754c359a3214eaef1eb9c4c64890d042dc7fb4c3004881250a3cfbd3bdb452a1300c891a9994aa59"}, @padn={0x1, 0x2, [0x0, 0x0]}]}, 0x178) sendmsg$TIPC_NL_MEDIA_SET(r0, &(0x7f00000006c0)={&(0x7f0000000400)={0x10, 0x0, 0x0, 0x2}, 0xc, &(0x7f0000000680)={&(0x7f0000000440)={0x224, 0x0, 0x398a86c6b0793702, 0x70bd28, 0x25dfdbfb, {}, [@TIPC_NLA_BEARER={0x84, 0x1, 0x0, 0x1, [@TIPC_NLA_BEARER_DOMAIN={0x8, 0x3, 0x8}, @TIPC_NLA_BEARER_DOMAIN={0x8, 0x3, 0x8}, @TIPC_NLA_BEARER_DOMAIN={0x8, 0x3, 0x6}, @TIPC_NLA_BEARER_NAME={0xd, 0x1, @udp='udp:syz1\x00'}, @TIPC_NLA_BEARER_DOMAIN={0x8, 0x3, 0x6}, @TIPC_NLA_BEARER_DOMAIN={0x8, 0x3, 0x6}, @TIPC_NLA_BEARER_UDP_OPTS={0x38, 0x4, {{0x20, 0x1, @in6={0xa, 0x4e24, 0x80000001, @initdev={0xfe, 0x88, '\x00', 0x1, 0x0}, 0xfff}}, {0x14, 0x2, @in={0x2, 0x4e21, @initdev={0xac, 0x1e, 0x0, 0x0}}}}}, @TIPC_NLA_BEARER_NAME={0xd, 0x1, @udp='udp:syz2\x00'}]}, @TIPC_NLA_SOCK={0x14, 0x2, 0x0, 0x1, [@TIPC_NLA_SOCK_ADDR={0x8, 0x1, 0x40}, @TIPC_NLA_SOCK_REF={0x8, 0x2, 0xffff}]}, @TIPC_NLA_LINK={0x74, 0x4, 0x0, 0x1, [@TIPC_NLA_LINK_NAME={0x9, 0x1, 'syz1\x00'}, @TIPC_NLA_LINK_PROP={0x14, 0x7, 0x0, 0x1, [@TIPC_NLA_PROP_MTU={0x8, 0x4, 0x4}, @TIPC_NLA_PROP_WIN={0x8, 0x3, 0x3ff}]}, @TIPC_NLA_LINK_NAME={0x9, 0x1, 'syz0\x00'}, @TIPC_NLA_LINK_PROP={0xc, 0x7, 0x0, 0x1, [@TIPC_NLA_PROP_WIN={0x8, 0x3, 0x1}]}, @TIPC_NLA_LINK_PROP={0x2c, 0x7, 0x0, 0x1, [@TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x5}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0xf}, @TIPC_NLA_PROP_WIN={0x8}, @TIPC_NLA_PROP_TOL={0x8, 0x2, 0x2}, @TIPC_NLA_PROP_WIN={0x8, 0x3, 0xe2}]}, @TIPC_NLA_LINK_NAME={0x9, 0x1, 'syz0\x00'}]}, @TIPC_NLA_LINK={0x30, 0x4, 0x0, 0x1, [@TIPC_NLA_LINK_PROP={0x2c, 0x7, 0x0, 0x1, [@TIPC_NLA_PROP_TOL={0x8, 0x2, 0x40}, @TIPC_NLA_PROP_WIN={0x8, 0x3, 0x5}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x1b}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x15}, @TIPC_NLA_PROP_TOL={0x8, 0x2, 0x3}]}]}, @TIPC_NLA_MEDIA={0x3c, 0x5, 0x0, 0x1, [@TIPC_NLA_MEDIA_PROP={0x14, 0x2, 0x0, 0x1, [@TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x1}, @TIPC_NLA_PROP_TOL={0x8, 0x2, 0x1}]}, @TIPC_NLA_MEDIA_NAME={0x8, 0x1, 'udp\x00'}, @TIPC_NLA_MEDIA_NAME={0x8, 0x1, 'udp\x00'}, @TIPC_NLA_MEDIA_PROP={0x14, 0x2, 0x0, 0x1, [@TIPC_NLA_PROP_WIN={0x8, 0x3, 0x1}, @TIPC_NLA_PROP_MTU={0x8}]}]}, @TIPC_NLA_BEARER={0x98, 0x1, 0x0, 0x1, [@TIPC_NLA_BEARER_UDP_OPTS={0x38, 0x4, {{0x14, 0x1, @in={0x2, 0x4e21, @dev={0xac, 0x14, 0x14, 0x38}}}, {0x20, 0x2, @in6={0xa, 0x4e22, 0xfb, @rand_addr=' \x01\x00', 0x5}}}}, @TIPC_NLA_BEARER_NAME={0xd, 0x1, @udp='udp:syz2\x00'}, @TIPC_NLA_BEARER_PROP={0x34, 0x2, 0x0, 0x1, [@TIPC_NLA_PROP_MTU={0x8, 0x4, 0xfffffff0}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x6}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x8}, @TIPC_NLA_PROP_MTU={0x8, 0x4, 0x40}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x13}, @TIPC_NLA_PROP_MTU={0x8, 0x4, 0xc5d}]}, @TIPC_NLA_BEARER_DOMAIN={0x8, 0x3, 0xa5e}, @TIPC_NLA_BEARER_NAME={0x10, 0x1, @l2={'ib', 0x3a, 'macvtap0\x00'}}]}]}, 0x224}, 0x1, 0x0, 0x0, 0x4008080}, 0x44000) getsockname$packet(0xffffffffffffffff, &(0x7f0000000700)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000740)=0x14) bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000780)={0x2, 0x4, 0x8, 0x1, 0x80, 0xffffffffffffffff, 0x2, '\x00', r4, 0xffffffffffffffff, 0x0, 0x4, 0x1}, 0x50) r5 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r5, &(0x7f00000008c0)={&(0x7f0000000800)={0x10, 0x0, 0x0, 0x400000}, 0xc, &(0x7f0000000880)={&(0x7f0000000840)=@ipv6_delroute={0x24, 0x19, 0x400, 0x70bd28, 0x25dfdbfc, {0xa, 0x20, 0x0, 0x5, 0xfd, 0x4, 0xfd, 0x3, 0xc00}, [@RTA_PRIORITY={0x8, 0x6, 0x6f7}]}, 0x24}, 0x1, 0x0, 0x0, 0x44}, 0x40010) r6 = syz_genetlink_get_family_id$ethtool(&(0x7f0000000940), r0) ioctl$ifreq_SIOCGIFINDEX_wireguard(r5, 0x8933, &(0x7f0000000980)={'wg2\x00', 0x0}) bpf$BPF_GET_PROG_INFO(0xf, &(0x7f0000000c80)={0xffffffffffffffff, 0xe0, &(0x7f0000000b80)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7, &(0x7f00000009c0)=[0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0], ""/16, 0x0, 0x0, 0x0, 0x0, 0x5, 0x6, &(0x7f0000000a00)=[0x0, 0x0, 0x0, 0x0, 0x0], &(0x7f0000000a40)=[0x0, 0x0, 0x0, 0x0, 0x0, 0x0], 0x0, 0x6, &(0x7f0000000a80)=[{}, {}, {}, {}, {}], 0x28, 0x10, &(0x7f0000000ac0), &(0x7f0000000b00), 0x8, 0xdd, 0x8, 0x8, &(0x7f0000000b40)}}, 0x10) ioctl$ifreq_SIOCGIFINDEX_wireguard(r0, 0x8933, &(0x7f0000000cc0)={'wg1\x00', 0x0}) sendmsg$ETHTOOL_MSG_PRIVFLAGS_GET(r0, &(0x7f0000000e00)={&(0x7f0000000900), 0xc, &(0x7f0000000dc0)={&(0x7f0000000d00)={0x98, r6, 0x4a2, 0x70bd27, 0x25dfdbfc, {}, [@HEADER={0x28, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'batadv_slave_1\x00'}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r4}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r7}]}, @HEADER={0x50, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'vlan0\x00'}, @ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x3}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'pimreg\x00'}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'wlan0\x00'}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r8}]}, @HEADER={0xc, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r9}]}]}, 0x98}, 0x1, 0x0, 0x0, 0x4041}, 0x54) r10 = accept$unix(0xffffffffffffffff, 0x0, &(0x7f0000000e40)) recvmsg$unix(r10, &(0x7f0000002380)={&(0x7f0000000e80)=@abs, 0x6e, &(0x7f0000002200)=[{&(0x7f0000000f00)=""/254, 0xfe}, {&(0x7f0000001000)=""/206, 0xce}, {&(0x7f0000001100)=""/194, 0xc2}, {&(0x7f0000001200)=""/4096, 0x1000}], 0x4, &(0x7f0000002240)=[@cred={{0x1c}}, @cred={{0x1c}}, @cred={{0x1c}}, @rights={{0x20, 0x1, 0x1, [0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff]}}, @cred={{0x1c}}, @cred={{0x1c}}, @cred={{0x1c}}, @cred={{0x1c}}, @cred={{0x1c}}], 0x120}, 0xa56fa7233688f0fe) socketpair(0xf, 0x0, 0x4, &(0x7f00000023c0)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$SIOCAX25DELFWD(r13, 0x89eb, &(0x7f0000002400)={@bcast, @bcast}) r14 = accept(r11, &(0x7f0000002440)=@nfc_llcp, &(0x7f00000024c0)=0x80) r15 = syz_genetlink_get_family_id$wireguard(&(0x7f0000002540), r0) sendmsg$WG_CMD_GET_DEVICE(r14, &(0x7f0000002600)={&(0x7f0000002500)={0x10, 0x0, 0x0, 0x8}, 0xc, &(0x7f00000025c0)={&(0x7f0000002580)={0x1c, r15, 0x100, 0x70bd2c, 0x25dfdbfb, {}, [@WGDEVICE_A_LISTEN_PORT={0x6, 0x6, 0x4e23}]}, 0x1c}, 0x1, 0x0, 0x0, 0x4000}, 0x0) getsockopt$sock_linger(r10, 0x1, 0xd, &(0x7f0000002640), &(0x7f0000002680)=0x8) sendmsg$nl_route(r12, &(0x7f0000002780)={&(0x7f00000026c0)={0x10, 0x0, 0x0, 0x4}, 0xc, &(0x7f0000002740)={&(0x7f0000002700)=@mpls_getroute={0x40, 0x1a, 0x10, 0x70bd27, 0x25dfdbfc, {0x1c, 0x14, 0x20, 0x4, 0xff, 0x3, 0xff, 0xb, 0xc00}, [@RTA_OIF={0x8, 0x4, r7}, @RTA_OIF={0x8, 0x4, r7}, @RTA_MULTIPATH={0xc, 0x9, {0x2, 0xb, 0x7, r7}}, @RTA_TTL_PROPAGATE={0x5, 0x1a, 0x9}]}, 0x40}, 0x1, 0x0, 0x0, 0x4000000}, 0xc000) socket$nl_generic(0x10, 0x3, 0x10) r16 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r17 = syz_genetlink_get_family_id$ieee802154(&(0x7f0000002800), 0xffffffffffffffff) sendmsg$IEEE802154_LLSEC_LIST_SECLEVEL(r16, &(0x7f00000028c0)={&(0x7f00000027c0)={0x10, 0x0, 0x0, 0x40}, 0xc, &(0x7f0000002880)={&(0x7f0000002840)={0x14, r17, 0x10, 0x70bd27, 0x25dfdbfb, {}, ["", "", "", "", "", ""]}, 0x14}, 0x1, 0x0, 0x0, 0xedf27b71377b52e1}, 0x40) 4m43.90922745s ago: executing program 5 (id=17384): sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000280)={&(0x7f00000001c0)=@newqdisc={0x24, 0x24, 0x1, 0x70bd2a, 0x25dfdbfe, {0x0, 0x0, 0x0, 0x0, {}, {0xffff, 0xffff}, {0x5}}}, 0x24}, 0x1, 0x0, 0x0, 0x40}, 0x0) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000000080)={0x0, 0x48}, 0x1, 0x0, 0x0, 0x10}, 0x0) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000080)={0x0, 0x50}, 0x1, 0x0, 0x0, 0x13d33d22cca6dc15}, 0x400884c) r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000100), 0x0, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x2}) r1 = socket$unix(0x1, 0x1, 0x0) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f00000012c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000380)=@newqdisc={0x4c, 0x24, 0x4ee4e6a52ff56541, 0x70bd2d, 0xffffffff, {0x0, 0x0, 0x0, r2, {0x0, 0xfff1}, {0xffff, 0xffff}, {0x1, 0xf}}, [@qdisc_kind_options=@q_gred={{0x9}, {0x1c, 0x2, [@TCA_GRED_LIMIT={0x8}, @TCA_GRED_DPS={0x10, 0x3, {0x6, 0x1, 0x1, 0x2}}]}}]}, 0x4c}}, 0x0) r3 = socket$netlink(0x10, 0x3, 0x15) r4 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a) ioctl$sock_SIOCGIFINDEX(r4, 0x8933, &(0x7f0000000000)={'bridge0\x00', 0x0}) r6 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r6, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000400)=ANY=[@ANYBLOB="4c0000001000030400000000fedbdf2500007400", @ANYRES32=r5, @ANYBLOB="0008000b00010062726964676500001c000280060009000900000006002700010000000500240001000000bf009961eae99116e9bd9d44db89b1d9d4fc79685a4c777f2e67bf00a48a582b41ff5cbecf7a552172db5ebc062820ffc67267385f8aaa96d136366d657b7355dfc5e0de5a8ad3e5f4aa80041300"/136], 0x4c}, 0x1, 0x0, 0x0, 0x800}, 0x44040) sendmmsg(r3, &(0x7f00000002c0), 0x40000000000009f, 0x0) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000280)={&(0x7f00000001c0)=@newqdisc={0x24, 0x24, 0x1, 0x70bd2a, 0x25dfdbfe, {0x0, 0x0, 0x0, 0x0, {}, {0xffff, 0xffff}, {0x5}}}, 0x24}, 0x1, 0x0, 0x0, 0x40}, 0x0) (async) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000000080)={0x0, 0x48}, 0x1, 0x0, 0x0, 0x10}, 0x0) (async) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000080)={0x0, 0x50}, 0x1, 0x0, 0x0, 0x13d33d22cca6dc15}, 0x400884c) (async) openat$tun(0xffffffffffffff9c, &(0x7f0000000100), 0x0, 0x0) (async) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x2}) (async) socket$unix(0x1, 0x1, 0x0) (async) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000100)={'syzkaller0\x00'}) (async) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f00000012c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000380)=@newqdisc={0x4c, 0x24, 0x4ee4e6a52ff56541, 0x70bd2d, 0xffffffff, {0x0, 0x0, 0x0, r2, {0x0, 0xfff1}, {0xffff, 0xffff}, {0x1, 0xf}}, [@qdisc_kind_options=@q_gred={{0x9}, {0x1c, 0x2, [@TCA_GRED_LIMIT={0x8}, @TCA_GRED_DPS={0x10, 0x3, {0x6, 0x1, 0x1, 0x2}}]}}]}, 0x4c}}, 0x0) (async) socket$netlink(0x10, 0x3, 0x15) (async) socket$inet6_icmp_raw(0xa, 0x3, 0x3a) (async) ioctl$sock_SIOCGIFINDEX(r4, 0x8933, &(0x7f0000000000)={'bridge0\x00'}) (async) socket$nl_route(0x10, 0x3, 0x0) (async) sendmsg$nl_route(r6, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000400)=ANY=[@ANYBLOB="4c0000001000030400000000fedbdf2500007400", @ANYRES32=r5, @ANYBLOB="0008000b00010062726964676500001c000280060009000900000006002700010000000500240001000000bf009961eae99116e9bd9d44db89b1d9d4fc79685a4c777f2e67bf00a48a582b41ff5cbecf7a552172db5ebc062820ffc67267385f8aaa96d136366d657b7355dfc5e0de5a8ad3e5f4aa80041300"/136], 0x4c}, 0x1, 0x0, 0x0, 0x800}, 0x44040) (async) sendmmsg(r3, &(0x7f00000002c0), 0x40000000000009f, 0x0) (async) 4m43.454236275s ago: executing program 5 (id=17390): r0 = socket$inet6(0xa, 0x80002, 0x0) setsockopt$sock_linger(r0, 0x1, 0x3c, &(0x7f0000000180)={0x200000000000001}, 0x8) connect$inet6(r0, &(0x7f0000002140)={0xa, 0x4e25, 0xb3, @mcast2, 0x2}, 0x1c) r1 = socket$nl_generic(0x10, 0x3, 0x10) r2 = socket$nl_generic(0x10, 0x3, 0x10) r3 = socket$nl_route(0x10, 0x3, 0x0) r4 = socket$inet6_udp(0xa, 0x2, 0x0) ioctl$sock_SIOCGIFINDEX(r4, 0x8933, &(0x7f0000000c80)={'lo\x00', 0x0}) bpf$PROG_LOAD(0x5, 0x0, 0x0) bpf$BPF_LINK_CREATE_XDP(0x1c, 0x0, 0x0) r6 = socket$alg(0x26, 0x5, 0x0) bind$alg(r6, &(0x7f00000003c0)={0x26, 'skcipher\x00', 0x0, 0x0, 'xts(serpent)\x00'}, 0x58) setsockopt$ALG_SET_KEY(r6, 0x117, 0x1, 0x0, 0x0) r7 = accept4(r6, 0x0, 0x0, 0x80000) syz_genetlink_get_family_id$fou(&(0x7f0000000040), r7) sendto$l2tp6(r7, &(0x7f0000000000)="fd2e", 0x2, 0x88c0, 0x0, 0x0) sendmsg$alg(r7, &(0x7f0000000380)={0x0, 0x0, 0x0, 0x0, &(0x7f0000000700)=[@op={0x18, 0x117, 0x3, 0x1}], 0x18, 0x80}, 0x4004080) r8 = socket$nl_route(0x10, 0x3, 0x0) sendmmsg$inet6(0xffffffffffffffff, 0x0, 0x0, 0x20000010) ioctl$sock_SIOCGIFINDEX(r8, 0x8933, &(0x7f0000000080)={'team_slave_0\x00', 0x0}) sendmsg$nl_route(r8, &(0x7f0000000200)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000280)=ANY=[@ANYBLOB="20000000110001002cbd700000dcdf2500000000", @ANYRES32=r9], 0x20}}, 0x2000e844) sendmsg$nl_route_sched(r3, &(0x7f0000001200)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000800)=@newqdisc={0x38, 0x24, 0x4ee4e6a52ff56541, 0x0, 0x0, {0x0, 0x0, 0x0, r5, {}, {0xffff, 0xffff}}, [@qdisc_kind_options=@q_pie={{0x8}, {0xc, 0x2, [@TCA_PIE_BETA={0x4}]}}]}, 0x38}}, 0x0) r10 = syz_genetlink_get_family_id$tipc(&(0x7f0000000200), 0xffffffffffffffff) r11 = bpf$MAP_CREATE(0x0, &(0x7f0000000100)=@base={0xa, 0x1, 0x7fe2, 0x1, 0x12}, 0x48) bpf$BPF_MAP_LOOKUP_AND_DELETE_ELEM(0x15, &(0x7f0000000640)={r11, 0x0, 0x0, 0x4}, 0x20) sendmsg$TIPC_CMD_ENABLE_BEARER(r2, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000680)=ANY=[@ANYBLOB='8\x00\x00\x00', @ANYRES16=r10, @ANYBLOB="010000000d0000000000010000000000000001410000001c001700000000000000006574683a73797a6b616c6c657230"], 0x38}}, 0x0) sendmsg$TIPC_CMD_GET_REMOTE_MNG(r1, &(0x7f00000000c0)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x80}, 0xc, &(0x7f0000000080)={&(0x7f0000000040)={0x1c, r10, 0x300, 0x70bd25, 0x25dfdbff, {}, ["", "", ""]}, 0x1c}, 0x1, 0x0, 0x0, 0x4}, 0x0) setsockopt$inet6_buf(r0, 0x29, 0x14, &(0x7f0000000300)="7779950c1cf349c25cba41181a28ba0930735fdb3b3f903a8269ed86cb10f1c1cf7b2b9395fc5f3d1f01fa75725a5919b0fdc5b64ce282ad5bd996e594a9f5b2ae44b731e7a9bb9f5259587c319c4b3c57ed78a2f77382154faefc0a2c6d28ca4904622e25d3d71b10447ea05ccd26d47f88f96107c540f3d9351efcfb2379e990212c3134e87f4a33ed8406a14711fe6d74a33435fe663b8ab528363404a138b5c4966659e2066d93f4fe3c31f99fdcf47df0b85d829c077d19948495099a8c1b1773db0b945bf78a56123d03b7460ec17b1b55134f1181f94d324edda4027dc2e174156f2e1db767bc10f619f203a901151e", 0xf3) sendmmsg$inet6(r0, &(0x7f0000001500)=[{{&(0x7f0000000140)={0xa, 0x4e20, 0x10, @ipv4={'\x00', '\xff\xff', @local}, 0x5}, 0x1c, &(0x7f00000013c0)=[{&(0x7f00000011c0)="c2fb8e9521", 0x5}], 0x1}}], 0x1, 0x4001c00) 4m43.075399173s ago: executing program 5 (id=17400): openat$ppp(0xffffffffffffff9c, &(0x7f0000000000), 0x40082, 0x0) socket$nl_route(0x10, 0x3, 0x0) socket$inet(0x2, 0x4000000000000001, 0x0) socket$inet_sctp(0x2, 0x1, 0x84) socket$inet6_sctp(0xa, 0x1, 0x84) socket$nl_route(0x10, 0x3, 0x0) openat$nci(0xffffffffffffff9c, &(0x7f0000000080), 0x2, 0x0) r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) sendmsg$inet(r2, &(0x7f0000001b00)={0x0, 0x0, 0x0, 0x0, &(0x7f0000001d80)=ANY=[@ANYBLOB="28010000000000000100000001"], 0x128}, 0x0) recvmsg$unix(r1, &(0x7f0000000000)={0x0, 0x0, 0x0, 0x0, &(0x7f0000000f40)=[@cred={{0x1c}}, @cred={{0x1c}}, @cred={{0x1c}}, @rights={{0x18, 0x1, 0x1, [0xffffffffffffffff, 0xffffffffffffffff]}}], 0x78}, 0x0) ioctl$IMCLEAR_L2(r3, 0x80044946, &(0x7f00000000c0)=0xd2) sendmsg$NFC_CMD_DEV_UP(r0, &(0x7f0000000180)={0x0, 0x3e, &(0x7f0000000280)={&(0x7f0000000140)=ANY=[@ANYBLOB="1c000000", @ANYRES16=r4, @ANYBLOB="010028bd70000700000002000000080001"], 0x1c}, 0x1, 0x0, 0x0, 0x40089}, 0x8004) 4m27.771371473s ago: executing program 44 (id=17400): openat$ppp(0xffffffffffffff9c, &(0x7f0000000000), 0x40082, 0x0) socket$nl_route(0x10, 0x3, 0x0) socket$inet(0x2, 0x4000000000000001, 0x0) socket$inet_sctp(0x2, 0x1, 0x84) socket$inet6_sctp(0xa, 0x1, 0x84) socket$nl_route(0x10, 0x3, 0x0) openat$nci(0xffffffffffffff9c, &(0x7f0000000080), 0x2, 0x0) r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) sendmsg$inet(r2, &(0x7f0000001b00)={0x0, 0x0, 0x0, 0x0, &(0x7f0000001d80)=ANY=[@ANYBLOB="28010000000000000100000001"], 0x128}, 0x0) recvmsg$unix(r1, &(0x7f0000000000)={0x0, 0x0, 0x0, 0x0, &(0x7f0000000f40)=[@cred={{0x1c}}, @cred={{0x1c}}, @cred={{0x1c}}, @rights={{0x18, 0x1, 0x1, [0xffffffffffffffff, 0xffffffffffffffff]}}], 0x78}, 0x0) ioctl$IMCLEAR_L2(r3, 0x80044946, &(0x7f00000000c0)=0xd2) sendmsg$NFC_CMD_DEV_UP(r0, &(0x7f0000000180)={0x0, 0x3e, &(0x7f0000000280)={&(0x7f0000000140)=ANY=[@ANYBLOB="1c000000", @ANYRES16=r4, @ANYBLOB="010028bd70000700000002000000080001"], 0x1c}, 0x1, 0x0, 0x0, 0x40089}, 0x8004) 2m25.167556364s ago: executing program 6 (id=18778): syz_emit_ethernet(0xae, &(0x7f00000002c0)=ANY=[@ANYBLOB="0180c200000050a245d5cde081002e0008004200009c000000000002907800000000ffffffff940400008317f1ac1414aaac1414aa640101007f0000010a01010294040000830b05ac1414447f00000194040100070b53ac141443ac1414bb440c4d73e00000020000000394040000862100000003060f867d300852813e383e42ac53470208c24d8a27c8040704832c82079a4dd10af100000012009078e00000020000000000000000000000000e12c9922236907b850b1bda7f3b3cc992fb64454097a9d068b39d5f64c8b7e2a30497953e51ecc3472aaa54301bc58c850dfbb100"], 0x0) syz_open_procfs$namespace(0x0, &(0x7f0000000280)='ns/net\x00') r0 = syz_init_net_socket$netrom(0x6, 0x5, 0x0) r1 = socket$alg(0x26, 0x5, 0x0) bind$alg(r1, &(0x7f00000000c0)={0x26, 'aead\x00', 0x0, 0x0, 'ccm(aes)\x00'}, 0x58) setsockopt$ALG_SET_AEAD_AUTHSIZE(r1, 0x117, 0x5, 0x0, 0xd) r2 = socket(0x10, 0x803, 0x0) ioctl$sock_SIOCGIFINDEX_802154(0xffffffffffffffff, 0x8933, &(0x7f0000000080)={'wpan1\x00', 0x0}) sendmsg$NL802154_CMD_DEL_SEC_DEVKEY(0xffffffffffffffff, &(0x7f0000000e40)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000200)=ANY=[@ANYBLOB=' \x00\x00\x00', @ANYRES16=0x0, @ANYBLOB="ac3a27bd7000fedbdf251e00000008000300", @ANYRES32=r3, @ANYBLOB="04002f80"], 0x20}, 0x1, 0x0, 0x0, 0x20000041}, 0x1) getsockname$packet(r2, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x9) sendmsg$nl_route(r2, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000200)=ANY=[@ANYBLOB="a000000010003b0e2a1a86eb2636037f00000000", @ANYRES32=r4, @ANYBLOB="0200000000008000800012000800010076746936740002"], 0xa0}}, 0x0) r5 = socket(0x10, 0x3, 0x0) sendmsg$nl_route(r5, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000300)={&(0x7f00000014c0)=ANY=[@ANYBLOB="780000001000010400"/20, @ANYRES32=0x0, @ANYBLOB="0020000000060000580012800b00010067726574617000004800028006000e0002000000050017000100000006000300070000000800050008002200050008148000000005001600010000000500080005000000040012"], 0x78}}, 0x0) socket$rxrpc(0x21, 0x2, 0xa) ioctl$sock_netrom_SIOCDELRT(r0, 0x890c, &(0x7f0000000000)={0x5e38b282e414372c, @default, @bpq0, 0x4, 'syz0\x00', @bcast, 0x5, 0x4, [@rose={0xbb, 0xbb, 0xbb, 0x1, 0x0}, @null, @netrom={0xbb, 0xbb, 0xbb, 0xbb, 0xbb, 0x0, 0x0}, @remote={0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0x2}, @bcast, @default, @remote={0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0x3}, @netrom={0xbb, 0xbb, 0xbb, 0xbb, 0xbb, 0x0, 0x0}]}) syz_extract_tcp_res$synack(&(0x7f0000000000), 0x1, 0x0) 2m24.940545115s ago: executing program 6 (id=18783): r0 = socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$ethtool(&(0x7f0000000240), 0xffffffffffffffff) r1 = socket(0x25, 0x5, 0x0) setsockopt$EBT_SO_SET_ENTRIES(r1, 0x0, 0x80, 0x0, 0x3c0) r2 = openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0) ioctl$TUNSETIFF(r2, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x7101}) r3 = socket(0x400000000010, 0x3, 0x0) r4 = socket$unix(0x1, 0x5, 0x0) ioctl$sock_SIOCGIFINDEX(r4, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r3, &(0x7f00000012c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000005c0)=@newqdisc={0x38, 0x24, 0x4ee4e6a52ff56541, 0x70bd2d, 0x25dfdbfd, {0x0, 0x0, 0x0, r5, {0x0, 0xfff1}, {0xffff, 0xffff}, {0x1, 0xf}}, [@qdisc_kind_options=@q_multiq={{0xb}, {0x8, 0x2, {0x28}}}]}, 0x38}}, 0x0) sendmsg$nl_route_sched(r3, &(0x7f00000003c0)={0x0, 0x0, &(0x7f0000000440)={&(0x7f0000001300)=@newtfilter={0x44, 0x2c, 0xd27, 0x70bd28, 0x8000, {0x0, 0x0, 0x0, r5, {0x10, 0xffe0}, {}, {0xa, 0xfff3}}, [@filter_kind_options=@f_bpf={{0x8}, {0x18, 0x2, [@TCA_BPF_OPS={{0x6}, {0x4}}, @TCA_BPF_FLAGS_GEN={0x8, 0x9, 0x6}]}}]}, 0x44}, 0x1, 0x0, 0x0, 0x22040028}, 0x40040) sendmsg$ETHTOOL_MSG_LINKMODES_SET(r0, &(0x7f0000000280)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000000)=ANY=[@ANYRES32=r0, @ANYRES8=r0, @ANYBLOB="0100fdffffff001bcaf2bd7f03000005000000180001801400020073797a5f74756e00000000e4ffffffff070009000a0000000500026540bcdffdf96ab90dd53a449d85d77996fa83fd8d819af3b144c70a4dc3450d31674ac90aec99db0e83d851e0dca2b9c64f66843395c971371d"], 0x3c}}, 0x0) socket$nl_generic(0x10, 0x3, 0x10) (async) syz_genetlink_get_family_id$ethtool(&(0x7f0000000240), 0xffffffffffffffff) (async) socket(0x25, 0x5, 0x0) (async) setsockopt$EBT_SO_SET_ENTRIES(r1, 0x0, 0x80, 0x0, 0x3c0) (async) openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0) (async) ioctl$TUNSETIFF(r2, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x7101}) (async) socket(0x400000000010, 0x3, 0x0) (async) socket$unix(0x1, 0x5, 0x0) (async) ioctl$sock_SIOCGIFINDEX(r4, 0x8933, &(0x7f0000000100)={'syzkaller0\x00'}) (async) sendmsg$nl_route_sched(r3, &(0x7f00000012c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000005c0)=@newqdisc={0x38, 0x24, 0x4ee4e6a52ff56541, 0x70bd2d, 0x25dfdbfd, {0x0, 0x0, 0x0, r5, {0x0, 0xfff1}, {0xffff, 0xffff}, {0x1, 0xf}}, [@qdisc_kind_options=@q_multiq={{0xb}, {0x8, 0x2, {0x28}}}]}, 0x38}}, 0x0) (async) sendmsg$nl_route_sched(r3, &(0x7f00000003c0)={0x0, 0x0, &(0x7f0000000440)={&(0x7f0000001300)=@newtfilter={0x44, 0x2c, 0xd27, 0x70bd28, 0x8000, {0x0, 0x0, 0x0, r5, {0x10, 0xffe0}, {}, {0xa, 0xfff3}}, [@filter_kind_options=@f_bpf={{0x8}, {0x18, 0x2, [@TCA_BPF_OPS={{0x6}, {0x4}}, @TCA_BPF_FLAGS_GEN={0x8, 0x9, 0x6}]}}]}, 0x44}, 0x1, 0x0, 0x0, 0x22040028}, 0x40040) (async) sendmsg$ETHTOOL_MSG_LINKMODES_SET(r0, &(0x7f0000000280)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000000)=ANY=[@ANYRES32=r0, @ANYRES8=r0, @ANYBLOB="0100fdffffff001bcaf2bd7f03000005000000180001801400020073797a5f74756e00000000e4ffffffff070009000a0000000500026540bcdffdf96ab90dd53a449d85d77996fa83fd8d819af3b144c70a4dc3450d31674ac90aec99db0e83d851e0dca2b9c64f66843395c971371d"], 0x3c}}, 0x0) (async) 2m24.593815248s ago: executing program 6 (id=18790): r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = socket(0x1e, 0x4, 0x0) setsockopt$packet_tx_ring(r1, 0x10f, 0x87, &(0x7f0000004500)=@req={0xf3b, 0x8, 0x3, 0x7fffffff}, 0x10) recvfrom(r1, &(0x7f0000000140)=""/104, 0x68, 0x12020, 0x0, 0x0) syz_genetlink_get_family_id$ipvs(&(0x7f00000000c0), 0xffffffffffffffff) sendmsg$IPVS_CMD_NEW_SERVICE(r0, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000180)=ANY=[@ANYBLOB='D\x00\b\x00', @ANYBLOB="c9547f6e7780367de5aa235f438fb1", @ANYBLOB="01000000ffdce5d9b77e000002000000010000293e4d076de0a6a2e5d2b7899f5e656f00000800080000000000060001009edb881ffa0210000008000500000000000c000700000000000000000008"], 0x54}}, 0x20000004) r2 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r2, &(0x7f000000c2c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000340)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a28000000000a0101000000005e1affd5020000000900010073797a300000000008000240000000032c000000030a01030000e6ff00000000020000000900010073797a30000000000900030073797a320000000014000000110001"], 0x7c}}, 0x0) sendmsg$NFT_BATCH(r2, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000003c0)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a5c000000060a0b040000000000000000020000002c0004802800018007000100637400001c0002800800014000000002080002400000000105000300030000000900010073797a30000000000900020073797a32"], 0x84}}, 0x0) 2m24.362994202s ago: executing program 6 (id=18792): r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000012c0)={0x3, 0xc, &(0x7f0000000100)=@framed={{}, [@call={0x85, 0x0, 0x0, 0x61}, @printk={@i}]}, &(0x7f0000000200)='GPL\x00'}, 0x90) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000080)={r0, 0x27, 0xe, 0x0, &(0x7f0000000040)="f8ad48cc02cb29fcc800775b86dd", 0x0, 0x7f, 0xf2ffffff, 0x0, 0x0, 0x0, 0x0}, 0x50) r1 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPCTNL_MSG_TIMEOUT_DEFAULT_SET(r1, &(0x7f0000000540)={0x0, 0x0, &(0x7f0000000500)={&(0x7f0000000480)={0x24, 0x4, 0x8, 0x101, 0x0, 0x0, {}, [@CTA_TIMEOUT_L3PROTO={0x6}, @CTA_TIMEOUT_L4PROTO={0x5, 0x3, 0x1}]}, 0x24}}, 0x0) 2m24.296066402s ago: executing program 6 (id=18795): openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000300)='./cgroup.net/syz1\x00', 0x200002, 0x0) r0 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$NL80211_CMD_JOIN_OCB(r0, &(0x7f0000000100)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x2000}, 0xc, &(0x7f00000000c0)={&(0x7f0000000040)={0x64, 0x0, 0x100, 0x70bd26, 0x25dfdbfc, {{}, {@void, @void}}, [@NL80211_ATTR_CENTER_FREQ2={0x8, 0xa1, 0xffff}, @NL80211_ATTR_WIPHY_EDMG_CHANNELS={0x5, 0x118, 0xa}, @NL80211_ATTR_WIPHY_FREQ={0x8, 0x26, @random=0x976}, @NL80211_ATTR_WIPHY_FREQ={0x8, 0x26, @random=0x99e}, @NL80211_ATTR_CENTER_FREQ1={0x8, 0xa0, 0xfff}, @NL80211_ATTR_WIPHY_FREQ_OFFSET={0x8, 0x122, 0x24a}, @NL80211_ATTR_WIPHY_EDMG_CHANNELS={0x5, 0x118, 0x2b}, @NL80211_ATTR_WIPHY_EDMG_CHANNELS={0x5, 0x118, 0x23}, @NL80211_ATTR_WIPHY_FREQ_OFFSET={0x8, 0x122, 0x1fe}, @NL80211_ATTR_WIPHY_CHANNEL_TYPE={0x8, 0x27, 0x1}]}, 0x64}}, 0x8000) r1 = socket$inet_tcp(0x2, 0x1, 0x0) r2 = socket(0x10, 0x80002, 0x0) sendmsg$nl_route(0xffffffffffffffff, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000280)=ANY=[@ANYBLOB="480000001000030500"/20, @ANYRES32=0x0, @ANYBLOB="15e3000000000000140012800c0001006d61637674617000", @ANYRES32, @ANYBLOB="0a0001"], 0x48}}, 0x0) sendmmsg$alg(r2, &(0x7f00000000c0), 0x492492492492627, 0x0) setsockopt$sock_int(r1, 0x1, 0x3c, &(0x7f0000000040)=0x1, 0x4) setsockopt$inet_udp_int(r2, 0x11, 0x0, &(0x7f00000003c0)=0x6, 0x4) setsockopt$inet_tcp_TCP_REPAIR(r1, 0x6, 0x13, &(0x7f00000000c0)=0x1, 0x4) connect$inet(r1, &(0x7f0000000080)={0x2, 0x0, @loopback}, 0x10) setsockopt$inet_tcp_TCP_REPAIR(r1, 0x6, 0x13, &(0x7f00000001c0)=0xffffffffffffffff, 0x4) sendmmsg$inet(r1, &(0x7f0000000d00)=[{{0x0, 0x0, &(0x7f0000002c00)=[{&(0x7f0000001500)='\x00', 0x1}, {&(0x7f0000002800)="cf", 0x1}, {&(0x7f0000000380)="08e0", 0x80002}, {&(0x7f0000000180)="8a", 0x1}, {&(0x7f0000000700)="af278d5dce87b01dcbd67184e298d36f", 0x10}], 0x5}}, {{0x0, 0x0, &(0x7f0000002f00)=[{&(0x7f0000001580)="ce", 0x1}, {&(0x7f00000007c0)="f2", 0x1}, {&(0x7f0000002e40)="d4", 0x1}], 0x3}}, {{0x0, 0x0, &(0x7f0000000440)=[{&(0x7f0000003000)="e1", 0x1}, {&(0x7f00000010c0)="fa", 0x1}, {&(0x7f00000004c0)="d8ace0ee77", 0x5}, {&(0x7f0000001600)="f2", 0x1}, {&(0x7f0000000500)="ffe2", 0x2}, {&(0x7f00000006c0)="7940e900e0", 0x5}, {&(0x7f0000000100)="f009982057", 0x5}], 0x7}}, {{0x0, 0x0, &(0x7f0000000200)=[{&(0x7f0000000880)="87", 0x1}, {&(0x7f00000005c0)="1121f722fe", 0x5}, {&(0x7f0000000280)="e3a00a47e0", 0x5}], 0x3}}], 0x4, 0x4000000) setsockopt$sock_int(r1, 0x1, 0x20, &(0x7f0000000000)=0x7fffffff, 0x4) r3 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPCTNL_MSG_EXP_NEW(r3, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000300)={&(0x7f00000001c0)={0x50, 0x2, 0x2, 0x101, 0x0, 0x0, {0xa}, [@CTA_EXPECT_TUPLE={0x3c, 0x2, 0x0, 0x1, [@CTA_TUPLE_PROTO={0xc, 0x2, 0x0, 0x1, {0x5}}, @CTA_TUPLE_IP={0x2c, 0x1, 0x0, 0x1, @ipv6={{0x14, 0x3, @initdev={0xfe, 0x88, '\x00', 0x0, 0x0}}, {0x14, 0x4, @dev}}}]}]}, 0x50}}, 0x0) syz_emit_ethernet(0x66, &(0x7f00000005c0)={@local, @link_local, @void, {@ipv6={0x86dd, @icmpv6={0x0, 0x6, "02adf7", 0x30, 0x3a, 0x0, @initdev={0xfe, 0x88, '\x00', 0x0, 0x0}, @mcast2, {[], @param_prob={0x4, 0x0, 0x0, 0x0, {0x0, 0x6, "a92fb2", 0x0, 0x3b, 0x0, @ipv4={'\x00', '\xff\xff', @broadcast}, @loopback}}}}}}}, 0x0) pipe(&(0x7f0000000140)={0xffffffffffffffff}) sendmsg$IPCTNL_MSG_EXP_NEW(r4, &(0x7f00000002c0)={&(0x7f0000000180)={0x10, 0x0, 0x0, 0x20000}, 0xc, &(0x7f0000000280)={&(0x7f00000001c0)={0x98, 0x0, 0x2, 0x5, 0x0, 0x0, {0x2, 0x0, 0x6}, [@CTA_EXPECT_CLASS={0x8, 0x9, 0x1, 0x0, 0x3}, @CTA_EXPECT_TIMEOUT={0x8, 0x4, 0x1, 0x0, 0x7f}, @CTA_EXPECT_TUPLE={0x28, 0x2, 0x0, 0x1, [@CTA_TUPLE_PROTO={0xc, 0x2, 0x0, 0x1, {0x5, 0x1, 0x1}}, @CTA_TUPLE_PROTO={0xc, 0x2, 0x0, 0x1, {0x5, 0x1, 0x3a}}, @CTA_TUPLE_PROTO={0xc, 0x2, 0x0, 0x1, {0x5, 0x1, 0x3a}}]}, @CTA_EXPECT_ID={0x8, 0x5, 0x1, 0x0, 0x5}, @CTA_EXPECT_ID={0x8, 0x5, 0x1, 0x0, 0x2}, @CTA_EXPECT_CLASS={0x8, 0x9, 0x1, 0x0, 0x200}, @CTA_EXPECT_FN={0x13, 0xb, 'callforwarding\x00'}, @CTA_EXPECT_FN={0x8, 0xb, 'sip\x00'}, @CTA_EXPECT_ZONE={0x6, 0x7, 0x1, 0x0, 0x4}, @CTA_EXPECT_HELP_NAME={0xe, 0x6, 'sip-20000\x00'}]}, 0x98}, 0x1, 0x0, 0x0, 0x9010}, 0x80) 2m24.143346846s ago: executing program 6 (id=18799): r0 = bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000380)={&(0x7f0000000080)=ANY=[@ANYBLOB="9feb010018000000000000001c0000001c00000003000000010000000000000e0200000000000000000000000000001304000000002e"], 0x0, 0x37}, 0x20) r1 = bpf$PROG_LOAD(0x5, &(0x7f0000008000)={0x15, 0x3, &(0x7f0000000100)=ANY=[@ANYBLOB="b700000000000000070000000000000095000000000000001e5286574356940658273ad1326fc65be4b1037a74cfb5af100fc4e94d123d9b22a7561b8850821bc1f8b5b0a3e3b79b0d96030000000000000004bfffe68fe46421a161eedd1a5cee316f68f7617859f06c8efd5da6abe446649c322209b1af93c6c999058168ad0a70992124d19c7c9cc22ff9a6b1a058039ab938480e8697f8715bcb18e1fd0773909464a783148e0e7b604a6c47b33c43a3ffff92ec8bbde1af40f29cfcf0836a70a2f6b1192ab8f24ca363492393e1c2a3b190180caafbf8cfca720074bdcc7cbd978efd846ac8f823402eea2bdeaf5e99514e64e36cad5eba82010b2d149aa72e5f070000000000000000000000002904000000003a4a00009d5df0e0dbb9821d9c5402474d5866ce5eb60188d83ac741b45aeacac594cf09de9b460f48b96ae8a0ee478e46c8ca3e4c5d2b3cb4ad480100000000000000dcbf36b7e8be59ca4b46266cf75bea8a22ab71895d954dc6d28864144c73391770690a9301cbe97565d5000000000000000455355d5d55f551df82ea475a711ec56d00000000507c093f4fad7095fbec5b005ebb710d87"], &(0x7f0000003ff6)='syzkaller\x00', 0x1, 0xc3, &(0x7f00000002c0)=""/195, 0x0, 0x0, '\x00', 0x0, @sk_reuseport}, 0x48) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000d00)={0xffffffffffffffff, 0xffffffffffffffff}) setsockopt$sock_attach_bpf(r2, 0x1, 0x34, &(0x7f00000000c0)=r1, 0x4) bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f0000000940)={0x1b, 0x0, 0x0, 0x1000, 0x0, 0x1, 0x7, '\x00', 0x0, r0, 0x1, 0x1}, 0x50) r3 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x16, 0xb, &(0x7f0000000580)=ANY=[@ANYBLOB="18000000000000000000000000000000180000002020702500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000000000000b703000000000000850000007000000095"], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x41100, 0x0, '\x00', 0x0, @flow_dissector, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_PROG_TEST_RUN(0x1c, &(0x7f00000004c0)={r3, 0x3, 0x11, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8}, 0x44) socketpair(0x27, 0x6, 0x0, &(0x7f00000003c0)={0xffffffffffffffff, 0xffffffffffffffff}) getsockopt$inet_pktinfo(0xffffffffffffffff, 0x0, 0x8, &(0x7f0000000440)={0x0, @multicast2, @dev}, &(0x7f0000000480)=0xc) ioctl$sock_ipv6_tunnel_SIOCDELTUNNEL(r4, 0x89f2, &(0x7f0000000540)={'ip6_vti0\x00', &(0x7f0000000600)={'syztnl1\x00', r5, 0x29, 0xb, 0x5, 0x3, 0x1, @private2={0xfc, 0x2, '\x00', 0x1}, @mcast2, 0x10, 0x20, 0xc5, 0x1}}) bpf$TOKEN_CREATE(0x24, &(0x7f0000000040)={0x0, r3}, 0xfffffffffffffdd6) r6 = bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000300)={&(0x7f0000000380)={{0xeb9f, 0x1, 0x0, 0x18, 0x0, 0xc, 0xc, 0x2, [@struct]}}, 0x0, 0x26, 0x0, 0x1}, 0x28) bpf$BPF_GET_BTF_INFO(0xf, &(0x7f0000000340)={r6, 0x20, &(0x7f0000000100)={0x0, 0x0, 0x0, 0x0}}, 0x10) bpf$BPF_BTF_GET_FD_BY_ID(0x13, &(0x7f0000000400)=r7, 0x4) r8 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r8, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000180)={&(0x7f00000001c0)={0x14, 0x26, 0x9, 0x0, 0x0, {0x3}}, 0x14}}, 0x0) r9 = socket$inet6_sctp(0xa, 0x4, 0x84) setsockopt$inet_sctp6_SCTP_PARTIAL_DELIVERY_POINT(r9, 0x84, 0x13, &(0x7f0000000280)=0x6, 0x4) bpf$BPF_BTF_GET_FD_BY_ID(0x13, &(0x7f0000000240)=r7, 0x4) bpf$PROG_LOAD(0x5, &(0x7f0000000180)={0x1, 0x0, &(0x7f0000000880)=ANY=[@ANYBLOB="b4050000000000007110630000000000060000000000000095000000000000001f3d4eb3edc86c04e323b24d9426e5339e162b4915ca4c92ec3a4a3935b6d581c304908f84d3f0e99ac4402141407b980e454bd575dd0dc0f1a682f6ba574e0700000000000000515ec25d0b1f1c8c9cd8eb72385ad6136789dcd5a694d3cfb4cec510d0d4d980e649aa4492032c5888f5f9b246b9f5117cb89f3ff246280a1ab186bbd42370e30e9a2028d82bd071a329b281c4393e1e8ce723f67552961cd23f056542399289825a0d3e13b1401cda214d8f87ba4e8a5fff7be68fe15f3c1df84f2086f79ab69bbb072848357dc3bbc144cca554fdf459a2b6dd58c29bafe29a5b1d630a94c14753a1b0d26203185b5735d393c9a6367767ff9f9edf5e6e7e94aefd0d49ad707a4a7027185086a66c0a321f386bc40caed35d63967e3809ad3187a72972c5c22c085f0a481e7ce9458e8c21647d100c9fc91eb8fe87d05e6545dcbe6cd28444fcdaac12f6469abc71af781f79c7aeafcdcadda97413e2539860ae46370405f742edd486fc26697c52d18f7adeaf79101b3da624ef12673df25d15d6f3f0be93636d8ea88eaafe20257812496258c87d3e97c35fbf3967e1ae86639489758fa8759006669c0d7ed1710d80bf8424e190cb78e36dd7e2e01034991761ff243405d75021155bf4e831208f0a845897ac198e36dc9e0928727ea3a6dc3f2f64aa4007cf52c41ffff9c7a51dc635d7d34f509725530e2f1d1f5ba90c325591f90c2ea96668506002589df1c948237f1533f3157fec94ebf2ce6347f6516a00"/594], &(0x7f0000003ff6)='GPL\x00', 0x5, 0xffffffffffffff6d, &(0x7f0000000080)=""/201, 0x0, 0x1, '\x00', 0x0, @fallback=0x33, 0xffffffffffffffff, 0x8, &(0x7f0000000000)={0xfffffffd}, 0x8, 0x10, &(0x7f0000000000), 0x10}, 0x94) 2m8.705692705s ago: executing program 45 (id=18799): r0 = bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000380)={&(0x7f0000000080)=ANY=[@ANYBLOB="9feb010018000000000000001c0000001c00000003000000010000000000000e0200000000000000000000000000001304000000002e"], 0x0, 0x37}, 0x20) r1 = bpf$PROG_LOAD(0x5, &(0x7f0000008000)={0x15, 0x3, &(0x7f0000000100)=ANY=[@ANYBLOB="b700000000000000070000000000000095000000000000001e5286574356940658273ad1326fc65be4b1037a74cfb5af100fc4e94d123d9b22a7561b8850821bc1f8b5b0a3e3b79b0d96030000000000000004bfffe68fe46421a161eedd1a5cee316f68f7617859f06c8efd5da6abe446649c322209b1af93c6c999058168ad0a70992124d19c7c9cc22ff9a6b1a058039ab938480e8697f8715bcb18e1fd0773909464a783148e0e7b604a6c47b33c43a3ffff92ec8bbde1af40f29cfcf0836a70a2f6b1192ab8f24ca363492393e1c2a3b190180caafbf8cfca720074bdcc7cbd978efd846ac8f823402eea2bdeaf5e99514e64e36cad5eba82010b2d149aa72e5f070000000000000000000000002904000000003a4a00009d5df0e0dbb9821d9c5402474d5866ce5eb60188d83ac741b45aeacac594cf09de9b460f48b96ae8a0ee478e46c8ca3e4c5d2b3cb4ad480100000000000000dcbf36b7e8be59ca4b46266cf75bea8a22ab71895d954dc6d28864144c73391770690a9301cbe97565d5000000000000000455355d5d55f551df82ea475a711ec56d00000000507c093f4fad7095fbec5b005ebb710d87"], &(0x7f0000003ff6)='syzkaller\x00', 0x1, 0xc3, &(0x7f00000002c0)=""/195, 0x0, 0x0, '\x00', 0x0, @sk_reuseport}, 0x48) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000d00)={0xffffffffffffffff, 0xffffffffffffffff}) setsockopt$sock_attach_bpf(r2, 0x1, 0x34, &(0x7f00000000c0)=r1, 0x4) bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f0000000940)={0x1b, 0x0, 0x0, 0x1000, 0x0, 0x1, 0x7, '\x00', 0x0, r0, 0x1, 0x1}, 0x50) r3 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x16, 0xb, &(0x7f0000000580)=ANY=[@ANYBLOB="18000000000000000000000000000000180000002020702500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000000000000b703000000000000850000007000000095"], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x41100, 0x0, '\x00', 0x0, @flow_dissector, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_PROG_TEST_RUN(0x1c, &(0x7f00000004c0)={r3, 0x3, 0x11, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8}, 0x44) socketpair(0x27, 0x6, 0x0, &(0x7f00000003c0)={0xffffffffffffffff, 0xffffffffffffffff}) getsockopt$inet_pktinfo(0xffffffffffffffff, 0x0, 0x8, &(0x7f0000000440)={0x0, @multicast2, @dev}, &(0x7f0000000480)=0xc) ioctl$sock_ipv6_tunnel_SIOCDELTUNNEL(r4, 0x89f2, &(0x7f0000000540)={'ip6_vti0\x00', &(0x7f0000000600)={'syztnl1\x00', r5, 0x29, 0xb, 0x5, 0x3, 0x1, @private2={0xfc, 0x2, '\x00', 0x1}, @mcast2, 0x10, 0x20, 0xc5, 0x1}}) bpf$TOKEN_CREATE(0x24, &(0x7f0000000040)={0x0, r3}, 0xfffffffffffffdd6) r6 = bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000300)={&(0x7f0000000380)={{0xeb9f, 0x1, 0x0, 0x18, 0x0, 0xc, 0xc, 0x2, [@struct]}}, 0x0, 0x26, 0x0, 0x1}, 0x28) bpf$BPF_GET_BTF_INFO(0xf, &(0x7f0000000340)={r6, 0x20, &(0x7f0000000100)={0x0, 0x0, 0x0, 0x0}}, 0x10) bpf$BPF_BTF_GET_FD_BY_ID(0x13, &(0x7f0000000400)=r7, 0x4) r8 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r8, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000180)={&(0x7f00000001c0)={0x14, 0x26, 0x9, 0x0, 0x0, {0x3}}, 0x14}}, 0x0) r9 = socket$inet6_sctp(0xa, 0x4, 0x84) setsockopt$inet_sctp6_SCTP_PARTIAL_DELIVERY_POINT(r9, 0x84, 0x13, &(0x7f0000000280)=0x6, 0x4) bpf$BPF_BTF_GET_FD_BY_ID(0x13, &(0x7f0000000240)=r7, 0x4) bpf$PROG_LOAD(0x5, &(0x7f0000000180)={0x1, 0x0, &(0x7f0000000880)=ANY=[@ANYBLOB="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"/594], &(0x7f0000003ff6)='GPL\x00', 0x5, 0xffffffffffffff6d, &(0x7f0000000080)=""/201, 0x0, 0x1, '\x00', 0x0, @fallback=0x33, 0xffffffffffffffff, 0x8, &(0x7f0000000000)={0xfffffffd}, 0x8, 0x10, &(0x7f0000000000), 0x10}, 0x94) 37.683875299s ago: executing program 7 (id=20279): sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000100)=@gettaction={0x50, 0x32, 0x20, 0x70bd25, 0x25dfdbfe, {}, [@action_gd=@TCA_ACT_TAB={0x1c, 0x1, [{0xc, 0x1c, 0x0, 0x0, @TCA_ACT_KIND={0x8, 0x1, 'bpf\x00'}}, {0xc, 0x1d, 0x0, 0x0, @TCA_ACT_KIND={0x8, 0x1, 'ife\x00'}}]}, @action_gd=@TCA_ACT_TAB={0x20, 0x1, [{0x10, 0xc, 0x0, 0x0, @TCA_ACT_KIND={0xb, 0x1, 'mirred\x00'}}, {0xc, 0x17, 0x0, 0x0, @TCA_ACT_INDEX={0x8, 0x3, 0x40}}]}]}, 0x50}, 0x1, 0x0, 0x0, 0x8000000}, 0x4048840) (async) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000180)=@newqdisc={0x24, 0x24, 0x1, 0x70bd2a, 0x25dfdbfe, {0x0, 0x0, 0x0, 0x0, {}, {0xffff, 0xffff}, {0x5}}}, 0x24}, 0x1, 0x0, 0x0, 0x40}, 0x0) (async) r0 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f00000004c0)={0x0, 0x20, &(0x7f0000000000)={&(0x7f0000000500)=ANY=[@ANYBLOB="240000001800110101000000000000000a000000fe0200080000000008001720ffffffff"], 0x24}, 0x1, 0x0, 0x0, 0x20008000}, 0x4) r1 = socket$netlink(0x10, 0x3, 0x0) r2 = socket(0x10, 0x803, 0x0) sendmsg$nl_route_sched(r2, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000000240)={0x0, 0x24}}, 0x0) getsockname$packet(r2, &(0x7f00000000c0)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000440)=0xfe3b) sendmsg$nl_route(r1, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000080)=ANY=[@ANYBLOB="480000001000050700"/20, @ANYRES32=r3, @ANYBLOB="0000000000000000280012000900010076657468"], 0x48}}, 0x0) (async) sendmsg$nl_route_sched(r2, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000180)={&(0x7f00000003c0)=@newqdisc={0x40, 0x24, 0xf0b, 0x70bd2a, 0x0, {0x0, 0x0, 0x0, r3, {0x0, 0xfff1}, {0xffff, 0xffff}, {0xa}}, [@qdisc_kind_options=@q_pfifo_head_drop={{0x14}, {0x8, 0x2, 0xd}}]}, 0x40}, 0x1, 0x0, 0x0, 0x4040001}, 0x4000004) (async) sendmsg$nl_route_sched(r1, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000380)=@delchain={0x24, 0x25, 0x1, 0x0, 0x0, {0x0, 0x0, 0x0, r3, {}, {0x0, 0xfff1}, {0xe, 0xd}}}, 0x24}}, 0x4040840) (async) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000100)=ANY=[@ANYBLOB="4800000010000d0428bd7000fcdbff2500008000", @ANYRES32=0x0, @ANYBLOB="1000000000000000280012800b0001006272696467650000180002"], 0x48}, 0x1, 0x0, 0x0, 0x10}, 0x0) (async) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000100)=ANY=[@ANYBLOB="500000001000010425bbe5ad600027842cf52300", @ANYRES32=0x0, @ANYBLOB="0300000000000000280012800a00010076786c616e00"], 0x50}, 0x1, 0x0, 0x0, 0x13d33d22cca6dc15}, 0x400884c) bpf$PROG_LOAD(0x5, &(0x7f000000e000)={0x1, 0x4, &(0x7f0000000040)=ANY=[@ANYBLOB="b40500000000000079107b00000000000500000000000000950000000000"], &(0x7f0000003ff6)='GPL\x00', 0x5, 0xfd90, &(0x7f000000cf3d)=""/195, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0x22e, 0x10, &(0x7f0000000000), 0x1dd}, 0x48) r4 = socket$netlink(0x10, 0x3, 0x0) sendmmsg(r4, &(0x7f00000002c0), 0x40000000000009f, 0x0) 37.566388652s ago: executing program 7 (id=20282): bpf$MAP_CREATE(0x0, &(0x7f0000000080)=ANY=[], 0x48) r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000440)={&(0x7f0000000480)=@newlink={0x70, 0x10, 0x401, 0x0, 0x3, {0x0, 0x0, 0x0, 0x0, 0xd126a8577c57125b, 0xc574450d1af3b5bc}, [@IFLA_LINKINFO={0x3c, 0x12, 0x0, 0x1, @bridge_slave={{0x11}, {0x24, 0x5, 0x0, 0x1, [@IFLA_BRPORT_PROXYARP_WIFI={0x5, 0xc, 0x1}, @IFLA_BRPORT_BCAST_FLOOD={0x5}, @IFLA_BRPORT_PRIORITY={0x6, 0x2, 0x3}, @IFLA_BRPORT_LEARNING={0x5, 0x8, 0x3}]}}}, @IFLA_IFNAME={0x14, 0x3, 'bridge_slave_0\x00'}]}, 0x70}, 0x1, 0x0, 0x0, 0x20044010}, 0x40000) recvmsg$can_raw(0xffffffffffffffff, &(0x7f0000000240)={0x0, 0x0, &(0x7f00000001c0)=[{&(0x7f0000000000)=""/236, 0xec}, {&(0x7f0000000500)=""/4096, 0x1000}, {&(0x7f0000000100)=""/71, 0x47}, {&(0x7f0000001500)=""/4096, 0x1000}], 0x4, &(0x7f0000000200)=""/21, 0x15}, 0x0) 37.194366626s ago: executing program 7 (id=20288): r0 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_tcp_int(r0, 0x6, 0x1e, &(0x7f0000000180)=0x400000001, 0xc2) setsockopt$inet6_tcp_int(r0, 0x6, 0x2000000000000022, &(0x7f0000000040)=0x1, 0x4) connect$inet6(r0, &(0x7f0000000000)={0xa, 0x0, 0x0, @ipv4={'\x00', '\xff\xff', @remote}}, 0x1c) setsockopt$inet6_IPV6_DSTOPTS(r0, 0x29, 0x3b, 0x0, 0x0) setsockopt$inet6_int(r0, 0x29, 0x4b, &(0x7f0000000080)=0x49e1, 0x4) sendto$inet6(r0, 0x0, 0x0, 0x800, 0x0, 0x0) r1 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r1, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000140)=@newlink={0x40, 0x10, 0x44b, 0x0, 0x0, {0x7a}, [@IFLA_LINKINFO={0x20, 0x12, 0x0, 0x1, @bond={{0x9}, {0x10, 0x2, 0x0, 0x1, [@IFLA_BOND_ARP_IP_TARGET={0xc}, @IFLA_BOND_ARP_INTERVAL={0x8}]}}}]}, 0x40}}, 0x0) 36.253976748s ago: executing program 7 (id=20304): r0 = socket$inet_tcp(0x2, 0x1, 0x0) (async) r1 = socket$inet_tcp(0x2, 0x1, 0x0) recvmmsg(r1, &(0x7f00000098c0)=[{{0x0, 0x0, 0x0}, 0x80}], 0x1, 0x10002, 0x0) ioctl$sock_inet_SIOCADDRT(r0, 0x890b, &(0x7f0000000000)={0x4000000, {}, {0x2, 0x4e20, @local}, {0x2, 0x4e21, @empty}, 0xa2, 0x0, 0x0, 0x0, 0xfffc, 0x0, 0xfff}) r2 = socket$inet_tcp(0x2, 0x1, 0x0) r3 = socket$inet6(0xa, 0x3, 0x3a) bind$inet6(r3, &(0x7f0000000300)={0xa, 0x0, 0x0, @dev={0xfe, 0x80, '\x00', 0x3f}}, 0x1c) (async) ioctl$sock_SIOCSIFBR(r2, 0x890c, &(0x7f0000000000)=@generic={0x0, 0x2}) 36.173315045s ago: executing program 7 (id=20305): r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r1, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000040)=ANY=[@ANYBLOB="240000001e00010000d2c1138d6f949a1b0c"], 0x24}}, 0x0) epoll_create1(0x80000) r2 = socket$inet6(0xa, 0x80002, 0x0) setsockopt$inet6_mtu(r2, 0x29, 0x17, &(0x7f0000000040), 0xc96d) sendto$inet6(r2, 0x0, 0x0, 0x200c8004, &(0x7f0000000000)={0xa, 0x4e22, 0x0, @mcast2}, 0x1c) sendmsg$nl_route(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000540)=ANY=[@ANYBLOB="3c0000001000010400"/20, @ANYRES32=0x0, @ANYBLOB="00000000000000001400128009000100626f6e640000000004000280080003"], 0x3c}}, 0x0) 35.973616133s ago: executing program 7 (id=20308): r0 = bpf$PROG_LOAD(0x5, &(0x7f0000000040)={0x2, 0x4, &(0x7f0000000200)=ANY=[@ANYBLOB="180000000300000000000000feffff10850000000700000095"], &(0x7f0000000000)='GPL\x00', 0x0, 0x0, 0x0, 0x100, 0x70, '\x00', 0x0, @fallback=0x30, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r1 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r1, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000001ac0)={&(0x7f00000001c0)={0x14, 0x26, 0x1, 0x70bd25, 0x25dfdbfc, {0x5}}, 0x14}}, 0x20006004) bpf$BPF_LINK_CREATE_XDP(0x1c, &(0x7f0000000180)={r0, 0x0, 0x30, 0x11, @val=@uprobe_multi={&(0x7f00000002c0)='./cgroup/cgroup.procs\x00', &(0x7f0000000300)=[0x0], 0x0, 0xfffffffffffffffe, 0x1}}, 0x40) mmap(&(0x7f0000000000/0x95c000)=nil, 0x95c000, 0x200000b, 0x8c4b815a5465c2b2, 0xffffffffffffffff, 0x0) clock_gettime(0x0, &(0x7f0000001980)={0x0, 0x0}) recvmmsg(r1, &(0x7f0000001900)=[{{&(0x7f0000000240)=@ll={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @dev}, 0x80, &(0x7f0000001580)=[{&(0x7f0000000340)=""/237, 0xed}, {&(0x7f0000000440)=""/4096, 0x1000}, {&(0x7f0000001440)}, {&(0x7f0000001480)=""/107, 0x6b}, {&(0x7f0000001b00)=""/4096, 0x1000}, {&(0x7f0000001500)=""/98, 0x62}], 0x6, &(0x7f0000002b00)=""/4096, 0x1000}, 0x5}, {{&(0x7f0000001600)=@pptp={0x18, 0x2, {0x0, @multicast2}}, 0x80, &(0x7f00000018c0)=[{&(0x7f0000001680)=""/253, 0xfd}, {&(0x7f0000001780)=""/152, 0x98}, {&(0x7f0000001840)=""/77, 0x4d}], 0x3}, 0x4}], 0x2, 0x0, &(0x7f00000019c0)={r2, r3+10000000}) r4 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='memory.events\x00', 0x275a, 0x0) write$cgroup_subtree(r4, &(0x7f0000000000)=ANY=[], 0x3261e) mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x9, 0x13, r4, 0x0) openat$cgroup_ro(r4, &(0x7f0000000100)='cpuacct.usage_all\x00', 0x0, 0x0) mmap(&(0x7f0000000000/0xc00000)=nil, 0xc00000, 0x2000002, 0x42073, 0xffffffffffffffff, 0xaba00000) 20.915146018s ago: executing program 46 (id=20308): r0 = bpf$PROG_LOAD(0x5, &(0x7f0000000040)={0x2, 0x4, &(0x7f0000000200)=ANY=[@ANYBLOB="180000000300000000000000feffff10850000000700000095"], &(0x7f0000000000)='GPL\x00', 0x0, 0x0, 0x0, 0x100, 0x70, '\x00', 0x0, @fallback=0x30, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r1 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r1, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000001ac0)={&(0x7f00000001c0)={0x14, 0x26, 0x1, 0x70bd25, 0x25dfdbfc, {0x5}}, 0x14}}, 0x20006004) bpf$BPF_LINK_CREATE_XDP(0x1c, &(0x7f0000000180)={r0, 0x0, 0x30, 0x11, @val=@uprobe_multi={&(0x7f00000002c0)='./cgroup/cgroup.procs\x00', &(0x7f0000000300)=[0x0], 0x0, 0xfffffffffffffffe, 0x1}}, 0x40) mmap(&(0x7f0000000000/0x95c000)=nil, 0x95c000, 0x200000b, 0x8c4b815a5465c2b2, 0xffffffffffffffff, 0x0) clock_gettime(0x0, &(0x7f0000001980)={0x0, 0x0}) recvmmsg(r1, &(0x7f0000001900)=[{{&(0x7f0000000240)=@ll={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @dev}, 0x80, &(0x7f0000001580)=[{&(0x7f0000000340)=""/237, 0xed}, {&(0x7f0000000440)=""/4096, 0x1000}, {&(0x7f0000001440)}, {&(0x7f0000001480)=""/107, 0x6b}, {&(0x7f0000001b00)=""/4096, 0x1000}, {&(0x7f0000001500)=""/98, 0x62}], 0x6, &(0x7f0000002b00)=""/4096, 0x1000}, 0x5}, {{&(0x7f0000001600)=@pptp={0x18, 0x2, {0x0, @multicast2}}, 0x80, &(0x7f00000018c0)=[{&(0x7f0000001680)=""/253, 0xfd}, {&(0x7f0000001780)=""/152, 0x98}, {&(0x7f0000001840)=""/77, 0x4d}], 0x3}, 0x4}], 0x2, 0x0, &(0x7f00000019c0)={r2, r3+10000000}) r4 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='memory.events\x00', 0x275a, 0x0) write$cgroup_subtree(r4, &(0x7f0000000000)=ANY=[], 0x3261e) mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x9, 0x13, r4, 0x0) openat$cgroup_ro(r4, &(0x7f0000000100)='cpuacct.usage_all\x00', 0x0, 0x0) mmap(&(0x7f0000000000/0xc00000)=nil, 0xc00000, 0x2000002, 0x42073, 0xffffffffffffffff, 0xaba00000) 2.114397321s ago: executing program 1 (id=20783): r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000000)=@base={0x10, 0x4, 0x4, 0x2, 0x0, 0x1}, 0x48) setsockopt$sock_int(0xffffffffffffffff, 0x1, 0xb, &(0x7f0000000240)=0x5da2333f, 0x4) bpf$MAP_GET_NEXT_KEY(0x3, &(0x7f00000001c0)={r0, &(0x7f0000000240), 0x0}, 0x20) r1 = socket$inet_udp(0x2, 0x2, 0x0) ioctl$sock_ipv4_tunnel_SIOCADDTUNNEL(r1, 0x89f1, &(0x7f0000001040)={'ip_vti0\x00', &(0x7f0000001000)={'syztnl2\x00', 0x0, 0x0, 0xa000, 0x0, 0x0, {{0x5, 0x4, 0x0, 0x0, 0x12, 0x64, 0x0, 0x0, 0x4, 0x0, @empty, @rand_addr=0x64010100}}}}) r3 = socket$pptp(0x18, 0x1, 0x2) ioctl$BTRFS_IOC_DEV_INFO(r1, 0xd000941e, &(0x7f0000001080)={0x0, "3ecfdce2914f5a8ed38cef81da5e23fc"}) ioctl$BTRFS_IOC_SNAP_DESTROY_V2(r1, 0x5000943f, &(0x7f0000002080)={{r3}, 0x0, 0x4, @unused=[0x5, 0x8000, 0x0, 0xd], @devid=r4}) ioctl$sock_ipv4_tunnel_SIOCDELTUNNEL(r1, 0x89f2, &(0x7f0000000780)={'syztnl2\x00', &(0x7f0000000340)={'syztnl2\x00', r2, 0x7, 0x1, 0x8, 0x6, {{0x5, 0x4, 0x1, 0x3b, 0x14, 0x65, 0x0, 0xea, 0x2f, 0x0, @broadcast, @dev={0xac, 0x14, 0x14, 0xd}}}}}) 2.111221131s ago: executing program 3 (id=20785): r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = socket$inet6_udp(0xa, 0x2, 0x0) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000c80)={'lo\x00', 0x0}) sendmsg$nl_route_sched(r0, &(0x7f0000001200)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000002c0)=@newqdisc={0x40, 0x24, 0x4ee4e6a52ff56541, 0x0, 0x0, {0x0, 0x0, 0x0, r2, {}, {0xffff, 0xffff}}, [@qdisc_kind_options=@q_fq={{0x7}, {0x14, 0x2, [@TCA_FQ_FLOW_DEFAULT_RATE={0x10, 0x11, 0x4000}, @TCA_FQ_QUANTUM={0x8}]}}]}, 0x40}}, 0x0) bpf$TOKEN_CREATE(0x24, &(0x7f0000000080)={0x0, r0}, 0x8) r3 = socket$alg(0x26, 0x5, 0x0) bind$alg(r3, &(0x7f0000000540)={0x26, 'skcipher\x00', 0x0, 0x0, 'ecb-twofish-avx\x00'}, 0x58) setsockopt$ALG_SET_KEY(r3, 0x117, 0x1, &(0x7f0000c18000)="ad56b6c5820fae9d6dcd3292ea54c7beef915d564c90c200", 0x18) r4 = accept4(r3, 0x0, 0x0, 0x80800) sendmmsg$alg(r4, &(0x7f00000035c0)=[{0x0, 0x0, 0x0, 0x0, &(0x7f00000001c0)=[@op={0x18, 0x117, 0x3, 0x1}], 0x18, 0x810}], 0x1, 0x84) recvmsg$can_raw(r4, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000c00)=[{&(0x7f0000000440)=""/127, 0x7f}], 0x1}, 0x40) bind$rds(r4, &(0x7f0000000200)={0x2, 0x4e24, @dev={0xac, 0x14, 0x14, 0x14}}, 0x10) r5 = bpf$PROG_LOAD(0x5, &(0x7f0000000140)={0x10, 0x4, &(0x7f0000000040)=ANY=[@ANYBLOB="b4000000000000007910480000000000610400000000000095000000"], &(0x7f0000003ff6)='GPL\x00', 0x2, 0xc3, &(0x7f000000cf3d)=""/195, 0x0, 0x0, '\x00', r2, @sk_msg}, 0x94) close(r5) socketpair$unix(0x1, 0x1, 0x0, &(0x7f00000029c0)={0xffffffffffffffff, 0xffffffffffffffff}) sendmsg$inet(r7, &(0x7f0000001080)={0x0, 0x0, &(0x7f00000004c0)=[{&(0x7f0000000380)='L', 0x1}], 0x1}, 0xc4) r8 = bpf$MAP_CREATE(0x0, &(0x7f0000000700)=ANY=[@ANYBLOB="0f000000040000000400000012"], 0x48) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f00000000c0)={{r8}, &(0x7f0000000000), &(0x7f00000002c0)=r5}, 0x20) recvmsg$unix(r6, &(0x7f0000000480)={0x0, 0x0, &(0x7f0000000100)=[{&(0x7f0000000800)=""/231, 0xe7}], 0x1}, 0x42) 2.031030071s ago: executing program 3 (id=20786): r0 = socket$nl_rdma(0x10, 0x3, 0x14) sendmsg$RDMA_NLDEV_CMD_NEWLINK(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000040)={0x38, 0x1403, 0x1, 0x70bd2a, 0x25dfdbfe, "", [{{0x9, 0x2, 'syz1\x00'}, {0x8, 0x41, 'siw\x00'}, {0x14, 0x33, 'bond0\x00'}}]}, 0x38}, 0x1, 0x0, 0x0, 0x800}, 0x20000800) sendmsg$RDMA_NLDEV_CMD_STAT_SET(r0, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000000)=ANY=[@ANYBLOB="400000001014d9ec29bd7000fcd9df250800030001000000080001000000000008004b001300000008004a00b70e0000000000000300000008004f0001000000"], 0x40}, 0x1, 0x0, 0x0, 0x20004085}, 0x4004080) 1.982718412s ago: executing program 0 (id=20788): r0 = socket$nl_route(0x10, 0x3, 0x0) epoll_create1(0x0) ioctl$ifreq_SIOCGIFINDEX_wireguard(r0, 0x8933, &(0x7f0000000040)={'wg1\x00', 0x0}) sendmsg$nl_route(r0, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000400)=@newlink={0x38, 0x10, 0x401, 0x2000000, 0x25dfdbfd, {0x0, 0x0, 0x0, r1, 0x0, 0x1084}, [@IFLA_LINKINFO={0x18, 0x12, 0x0, 0x1, @wireguard={{0xe}, {0x4}}}]}, 0x38}}, 0x20044840) 1.914141863s ago: executing program 1 (id=20789): r0 = socket$kcm(0x2b, 0x4, 0x0) sendmsg$inet(r0, &(0x7f0000000240)={&(0x7f00000000c0)={0x2, 0x4001, @dev={0xac, 0x14, 0x14, 0x43}}, 0x10, 0x0, 0x0, 0x0, 0x0, 0x300}, 0x2000c08d) r1 = openat$tun(0xffffffffffffff9c, &(0x7f0000000100), 0x0, 0x0) ioctl$TUNSETIFF(r1, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x2}) r2 = socket$kcm(0x10, 0x400000002, 0x0) write$cgroup_subtree(r2, &(0x7f0000000100)=ANY=[@ANYBLOB="0007000042009103"], 0xfe33) readv(r2, &(0x7f0000000580)=[{&(0x7f0000003700)=""/4081, 0xff1}, {&(0x7f0000000300)=""/104, 0x68}, {&(0x7f0000000a80)=""/237, 0xed}, {&(0x7f00000000c0)=""/15, 0xf}, {&(0x7f0000000380)=""/20, 0x14}, {&(0x7f00000003c0)=""/52, 0x34}], 0x6) r3 = openat$tun(0xffffffffffffff9c, &(0x7f00000001c0), 0x102, 0x0) close(r3) socket$nl_generic(0x10, 0x3, 0x10) ioctl$SIOCSIFHWADDR(r3, 0x8914, &(0x7f0000002280)={'syzkaller0\x00', @multicast}) r4 = socket$nl_route(0x10, 0x3, 0x0) r5 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r4, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r5, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000380)=@newqdisc={0x58, 0x24, 0x4ee4e6a52ff56541, 0x0, 0x0, {0x0, 0x0, 0x0, r6, {0x0, 0xb}, {0xffff, 0xffff}, {0x7, 0xfff3}}, [@qdisc_kind_options=@q_netem={{0xa}, {0x28, 0x2, {{0x100, 0x7, 0x6361, 0x4, 0xc9, 0x6}, [@TCA_NETEM_LATENCY64={0xc, 0xa, 0x6}]}}}]}, 0x58}, 0x1, 0x0, 0x0, 0x20000001}, 0x0) sendmsg$nl_route_sched(r4, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000300)=@newqdisc={0x40, 0x24, 0x4ee4e6a52ff56541, 0x70b923, 0x80000, {0x0, 0x0, 0x0, r6, {0x0, 0xd}, {0xb, 0xb}, {0xa, 0xb}}, [@qdisc_kind_options=@q_fq={{0x7}, {0x14, 0x2, [@TCA_FQ_FLOW_MAX_RATE={0x8, 0x7, 0x9}, @TCA_FQ_CE_THRESHOLD={0x8, 0xc, 0x9}]}}]}, 0x40}, 0x1, 0x0, 0x0, 0x4010865}, 0x4008000) r7 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r7, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) r9 = socket$packet(0x11, 0x2, 0x300) sendto$packet(r9, 0x0, 0x0, 0x40, &(0x7f00000001c0)={0x11, 0x8100, r8, 0x1, 0xd9, 0x6, @random="98c8ca7122df"}, 0x14) shutdown(r0, 0x1) 1.822779739s ago: executing program 3 (id=20791): r0 = socket$inet6_tcp(0xa, 0x1, 0x0) bpf$PROG_LOAD(0x5, &(0x7f0000000080)={0x16, 0xe, &(0x7f00000017c0)=ANY=[@ANYBLOB="b702000000000000bfa30000000000000703000000feffff7a0af0ff1100001f79a4f0ff00000000b706000000000081ad64020000000000450404000100ff0f1704000001130a00b7040000050000006a0af2fe0000000085000000c4000000b700000000000000950000000000000000e154cd844a954b26c933f7ffffffffffffff55bb2007ee51050512b5b42128aa090a79507df719af36349f298129da4871307b534bf901115e17392ac66ad022186a8929d1c000006146001e04aeacea799a22a2fa030000c412f6cae80043eb27d53319d0ad229e5752548300000000dbc2777df150dd488318b5790bee7e6c8bd03acdd77b85b941092314fd085f028f4e09d6378198a6097a670838337af2abd55a87ac0394b2f92ffab7d153d62058d0a413b217369ca8b6712f000000001b1df65b3e1b9bf115646914ce53d13d0ccacda1ef16fdcceaede3faedc51d29a47fc813ce3d32cfc7a53ac271d6d6f4ea6bf97f2f1be2ea2e534300bcb3fdc4b4861004eefbda7f54f82a804d4a69bf9bc5fa77ee293fbd165a5a68488e40b030166565a097b1b44b451de7940b0000db8db03d4b7745fef1d04ec633dee254a6d491b8496da787e814c4fdf0b4a387b4c8149d18c1020029a18986252a70f8f92eb6f0e8c7db000068fbaa2e2a27efd9104297f2c58159f02d1b72183aacf4a84f9130b775dd4e9e3070756f97ad791fa909ac06b57479321a0574fb304bc2a1681989328c8ddc20ea011bf5742e0ef94234db1f00000000000000c20fb4791ec85821d0c48fb657c29b309c73f0977e7cde65a82b94c461d7962b35f421c3552772ca7f3e2c25a65f75ca13fb7c8bbd8b6e7dac1aba4b20dc7de058a4dfa7e85a8bdf1d41aad8bda74d66f47cc17d8ba3eec0fd80f82c5f573c6d294d366505000000da0fde0745db06753a7ac7fe13cab6692422a46e9ffe2d4a2d32f7528751313694bf5700b20ef0c248ddd3da323947004cacadcaff2066bb5d4045c9585638c2153a6eee01738b0c10671f4f559b7dcb98a6273b8c5f1e24d9f679e4fbe948dfb4cc4a389469608241730459f012b060e7d23fd39206000000000000eb55d001623258a141bd587cc9dad46de56ef907b059b99a79ae5498f6589880ed6eea7b9c670012f80cd6a1397953ba5870786554df26236ebced9390cb6941b8365d936a7d2120eca291963eb2d537d87cbb54e588ee5d6944ee4de5c183c960119451c31539b22809e1d7f0cda06a9fa87d64cb77872a0aa9a104e16b3b8c6e64836ac3f32f53c9a2bae513464ca03aff14b9fd8cd9539f5096412b92012e095b84c202060098df3314f0e399d1b9f27e3c33269c0e153b28b2d4410572bc45b9d3fa02208d304d455c363000000000223201780200c6ed7966130b547dbf8b497af0a77f52f2cd39000000200000e81c23cf14156951210001c800000000001500000000000928ee53595a779d243a48cea769470424d28804c026ab7f4a5c81921e0128dfd70b438af60b060000000000000056642b49b745f3bf2c01808b6d7d748308eea09f0161b4735efbf3411738d6ee7aebf9ef40662d7836d252c566e1ee938a9a6804ed3a1079b0282a12043408cd60b9e53978c81839be0000000000456f7d2a42cb13da2022f23eaec61854f640f701db0276652f6c74f20675eb781925441578e93046aaddea394cd8ffd3d628293e591dc6f71c2710a7ea8a4fdc214e1cc275b26adfa892e6de9200000000e50e5bafecea4d4134f9d006c8d6883eca5c9c58c9e93311ab50fe82d5a96b09c68c73de2f04f15d005387577f480000ea65559eb00e014df20fa209bcbb5c252b11a60ca770663da451790cc36000906d5a9fad98c308e39bd5ffb6151d79c1cee1cdfba05e3633be3f00000015762e5f5a3a0bc33fdbe28a5ffc83f2f085185cc92fe7f791e8f6429309d6adab4b7e508e5bf024ed8f8a005f2bbf96c89739f5d81e750d50515a59a3ad09e8802e8f4f535447dc0fc9d5f99a145dfcedad69da9cd4b75c624600e78f4458542b14f29611f95d4a31838eeb20c20bb82aa31771cd379ec83554cea5e6539db7384e1f58d81f2f2653c4d9818708e27c89b552d583f436137a3c5dc714c9402c21d181aae59efb28d4f91652f6750b9195729d60c534ee8e8ff0755b67fe4c25edb85bcff24c757aa80900000000b6638c420eb4304f66e3a37aaf000000c42a570f0e9d76fd545470f862f8c3c14fa9ecd1e877b0d8ca84c044859e85e6158f9184bc61a9a284df80e4636c25b96174327d82761c26e329555f9290af40000000000000100000fd3763655500344bae34347f5ab0d534b8d63e4ca3b671f2de1cdf519192c6b59a601fd419a5c16e2055b85058099448430587a49bed2ee9647c5d3bbb47bc00edf5e9020c09ab004321610b857e8717974b633b21cb32f0e03280e09758bd445ab91d201782d656ab09f508bbbaca005452b79d7b574a247f1d2fe45b3c4e93da3d51de647c10dd49944dc87c92b32af00f191b66b6a6f732a91f0a2e9120be61e58c79d497247d278888901d44bf77e8246605a644e9e3d769db497c3960df05caee994adc38a436367a54b9e182b78e9a0ceb9a2c4f63902c1ad1a7c5a08d0920a23c2a86abbdf357849a651733e57f3101985602688888ccb85c87b4f8ffffff7f000000002c331fca0e541b7ca2119ff0d61c5224550346115b43f8b1894c8fa8a14dc4810f61ae01000000000000000000000102000000000000000000000027c9585c0cead5d619d18475ccde2857279a9375de5858818f3c4a4fa6ce46f4d42b07199de8b99231ace58c77a23b0000e49666c464d35ca9b50f3ed3e535b3da8c17a23692759ccf5a205311b7d122532697b861dfb54609fd88e6043bd52ae84c1bb0c8a6c769f952b3d42c68a3102fa1296dfff4a979369b0e8ebc62887aa46e820a74f91381dcc198e353047db70686d147357024eb3cb94f1e8918a0d6e2949affcacb5ba0a56aa063b4dc521a3d9356b4b8b5917c4c860495b240e80063bde261fd00000000007271e28ef6806bc8e139c49b91c76b0d3958f7f05b47d3e519f1634e8fbd8d31330d89069f9448a2ff93060ff073b3a113e47edf76f7d1b8b90bc0df4cfb0b9c8c80158b44ecae9420654f7016b0aac117087406d343e27b372d6027ab2aec2bcad7fe6bb932bc5751d2974e95455a277fa3b472bc7bbdd2ac5a1ea608e8137ace03361607cc1a84be659355629ab13ad49008c3fcfa2423439a3607961d5b59da48a0155e8e42cc13c702cc40c99cf86c2021d72f9f4ab1b00de555a5a39593c93871ff7eb5ecadb64837a2d88723ef65aa5152e3d5864e57581b61f2b0960600000000000000265f091e7bce17d20604c5ab751773a5cf8a719a7ada06ed03832bf274707c7c970edc20f4a1eaa3b610450d2025cae6d2cb639ecd58709b05a20097208d03f7a146a6901913618738679d4e0af53eae997eecfa0dc3dcec19d3d9205450765d659220c92701ee75c8710470d9eb6f62c5c721883f1544ba66271c8dab05a933746c16b6e93294b561c6715a32a394ed1e6c01670c931bfa52c58c6f34d64e758a7a7f7d33c49336d4cba2cbb170ad7539a45774dfcc55257215c8ae719dc1c232fc6699ef01005887d04a543030b4328ab48744ac23ff56fd2da52eb9fb2eefcdd2d92d73ac1b111ea8b5e1fec36a3579879acfe366d393f1fa9cbe08d9ba57a443643e9cd251dc88e91a5e458e66ea1e822d55d4dd919a95eb4c25a08cb6e1070000003a0fd07a4ad9df240e00006aaa2db0dfe416146840d88bd08365e547c970e2983200703864a3b9e1682cb479dad6d34d211b05267eb1355520e9ec0c5014b0832f7fb35782fdbfcbf5e23a7f5d51ea480371748d18d8e10608ab8261fe058d1732f28814a9981d84a04a2bb36c89bdd245e3293a14df1ac567301a79514f103abd387d6ef2d9d94508ac0f6135c8921279573eefd5d4e33b9ef585980789a94d9848906f545559d30000b5040f0776703363249ca984cbb09752f099efbb9e7362e4999594c1086d8958e9469db01d85fb0b9b3148663e9ea2e755d96c70e540b4200e4cf82986712dd733b26d00e947d03c42215118426d548cb2077b43b89e4163d260faea1db53e2cf3427c90aefa2662a1c2b28b0e020e872bda1d39da508de5dbc37d03ee056b2579a1d16799589a2600000000aa00006c94bcaf115fbbcb216e3cb7fd9afe16d1fff2d047e508aa5f6de0ea4e9ec1b3a4ab1f8b5f312fc50000000000000000000000000042709db6de7e969ac0ce18b47280fb1b1b1531648122fed3e25edecb5200f5000000000000166f7d36b2966c19af7ffa6afa69e50821c9aa3ae60fbc196cf8ad2f7f86d79db1bb0ecbf9c3d0d3d407574def838e4def26ed9c7e6c69858f7813be8ffc565583663bebfe7485660b67e1436cbc6d4d3c48ab7b033d7d1195173edb16643f69cb779802839d490a4df94e5ea89c192af2ae83876edd59c9a7140e12ba591f073ec604f7e8f1e100cd414e9237ecfc052d9a73a868cd0e4b06da0435af72fb0d25657e8f5464b19fa83f977e6900000000367871fa37420e7a232ef9b440bb0639994c655d144c5786939d6a187b8182ddd2bec36cd28371b1754cb6c53697fb23576ee0d3fd0a5803c9be9fe384f1a7a9a8eb64d17d238fa3238a001aa8ed040a69e9ec0a627e3b3ca64d4680d819c14c71684581000000000000000000000000000000000000c6a6587715865fe14558960bc936bc83abd1f2a00b17a407457681d0760000000000000040000000000000000000004faeabea6de40ae30291662594c993099ef041c264a64d77d69e0cdfa620a191704cef91e269044acf752b55690075fa844de65a099200265e13c2a8f9b717886dea8e79407e34bc268a17965033ca1d000000000000000046595642f9fc008875ddb7aebda7a16b1d20dd8b65bcdac8cdc75a173fd2e57a9c37bf5a52ea001ec981dd7ad4e5944575ced39233ada8f3c1b856644812828bb79536a5188d14fe537250dc107121534cbbc7598f48aa2335616ae8eb72acf6982048e568e37f1f58e9714343587734c7ec0fa5c44d13165d6384bf9500757b4b0275950d6e7c451eef3fd353d47c54c4c2cf7318e6c24583ba0966225284d1abac80786519c563ddf0e6c023d537ca6e0d6d4e072c98f45415d13f0dcea174f162ebd00b42264f6fa3dccd09f4101dd254e54423b30e06713eccfacb6ffb38afff920980af938a4d78f4b9a6b5c7424e91121cda789104ee490d25843f1622bba93257cc23e45cd7ed42abdb991d51804e674e507dfd53b5ab6944df33f4f494b9ae0d2de410539828e82a939ad82b385e66809d7d4d3630b6f22c2f41fdaa0fadeea09fa4f7005813643c2d6307d55689faf6f656327ac5872a3bd4c11363909a8b9f30e5401993a0f6e1a9b42287542647d1e86b02b7e36319414629ac1f35572a9cc1e98ce1457f922da0c2de76c9e97944efad0a3ad78cda81c5b82709d696e85bbf4595ef9664a6aff8cf96446cb6c26595f4eb659d26c846471f6551dbb24fc6c03a01e33efcd5939472b687d31be9bd9bd1bcda45bd2236f06c000000007d348ebcb9d810d4dc3c55bbe4055ce9c45267daeec7a7d8b498f56ee933cc02fb53c2c28fa09ce5ada5687889357599971a8c794f8ce23c1f7add4f65280ab446ea2d130000000000000000000000d1a0313ff63bc4e4463688db1d6ac7f4595a02c89349a973f118d936f33ea18e69d7739f4532e1b8580ef125b47cf5b402b6f2beffed6cc9afe2b548c4dbc78363118818d9473f29d52444685c41620eeaeb1f8786e87aeaf287fb9b63b30e6761507503dcd47b64f0b6157d970a989844f9b7dbe83211cd7999c82bd151bee0c67f3e6642ef1772d759df9ec9b4197383f9a66217e180e434e650dd560aa3ed42acddd44d6f45807a3c63e15929cfbebc7eef1a219d3147a6c06bd974168ac689392fa851ebdf524ca2331148ff7e855cccc106074ca92153734d5c5e3f9efc6592b08e0c07c7b5d42ec71484bb2a4c0f4293138369f39f9fa4a9cc607b42ba6102f918ce4e76d66fba450e94849962fae5059bda419fd2a170ea387c10a4ada5893f38486069ef1bfdbb432ab322ce87d7a94fa967135833157bafbed3b48bb267fc3aa56d1e5b66417a673b40884fc91ec9558eab6a08222dfe37767095b2d94cda881290d6017137595cdd53972353f485adfde8015cac0e1acd64ca97d67023f75a54b1ebe55053652ad16292a15e79dc58ba080f795f1a753d1c5c85475e286c548da6f669e5c34afc272e5a32f27264d9210acec3b65a264fd5e85d5f44979431eab3fcd8d33d5476e070d2e20e6156ad9c964ebbfe7d9096461b72530295b3603bf85b0c8f9921e9ca95d744bf5c03d60f7364f3fd9d98f7acc80cabd02d061818d028056c68805ee4783aa4b90d39e9b29085429de28c615668e4b4f4dd77b3a55a8058b99f3adff03294e01da549dd64cacd59382466e562a3f67ef5d042426659574ed041bc19ed625b7c0633154a290f69437f43065795d3ae5b11ee8e935b9969f5291a32ce3adca268162efcee3898e823affe0f50f7efe763d47288004a2b310e2a79115160b8e0e09067f26a7653a3a0886691fe44a307f8f344eb9512b632bc132c26220ec86dbf788f4fadd493c37e38f782fc1c0e64f7d3e6a04aa1918796fa53353ab58cfc4505147ed35624871b085e507c90b991a675bf2b6393a732f4a69c3859dbeca89140ba5b3f47d457877d327fa9b936"], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @flow_dissector, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0x0, 0x10, &(0x7f0000000000), 0xffffff1e}, 0x48) socket$inet(0x2, 0x0, 0x100) ioctl$ifreq_SIOCGIFINDEX_team(r0, 0x8933, &(0x7f0000000040)={'team0\x00', 0x0}) r2 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r2, &(0x7f0000000700)={0x0, 0x0, &(0x7f00000006c0)={&(0x7f00000004c0)=ANY=[@ANYBLOB="3401000017000100000000000000000000000000000000000000ffffffffffff0000000000000000ac141400000000000000000000000000fe8000000000000000000000000000bbac1414bb00"/104, @ANYRES32=0x0, @ANYRES32=0x0, @ANYBLOB="fc0000000000000000000000000000000000000000000000000000000000000100000000000000000200000000000000", @ANYRES32=0x0, @ANYRES32=0x0, @ANYBLOB="00000000000000000000000000000000fdffffffffffffff00000000000000000000000000000000fcffffffffffffff00000000000000000000000000000000000000000000000000000000000000000000000000000000289c62833e5e259c44c9913ad9"], 0x134}}, 0x0) ioctl$sock_inet6_SIOCSIFADDR(r0, 0x8916, &(0x7f0000000140)={@private1, 0x48, r1}) 1.749857362s ago: executing program 0 (id=20792): r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000080), r0) sendmsg$NL80211_CMD_GET_MESH_CONFIG(r0, &(0x7f0000000200)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x4}, 0xc, &(0x7f00000001c0)={&(0x7f0000000100)={0x20, r1, 0x100, 0x70bd28, 0x25dfdbfe, {{}, {@void, @val={0xc, 0x99, {0x6, 0x5c}}}}, ["", "", "", "", ""]}, 0x20}, 0x1, 0x0, 0x0, 0x200c8048}, 0x0) sendmsg$nl_generic(r0, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000240)=ANY=[@ANYRESOCT=r0], 0x14}}, 0x0) syz_genetlink_get_family_id$l2tp(&(0x7f0000001040), r0) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) r4 = bpf$MAP_CREATE(0x0, &(0x7f0000000200)=@base={0xf, 0x4, 0x4, 0x12}, 0x48) r5 = bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000340)={0xe, 0x4, &(0x7f0000000400)=ANY=[@ANYBLOB="18020000801000000000000004000000850000002700000095"], &(0x7f0000000000)='syzkaller\x00', 0x0, 0x0, 0x0, 0x40f00}, 0x80) bpf$BPF_PROG_DETACH(0x8, &(0x7f0000000080)={@map=r4, r5, 0x5}, 0x10) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000740)={{r4}, &(0x7f00000006c0), &(0x7f0000000700)=r3}, 0x20) sendmsg$inet(r2, &(0x7f0000000980)={0x0, 0x6000, &(0x7f0000000900)=[{&(0x7f0000000640)='U', 0xa00120}], 0x1}, 0x3) r6 = syz_init_net_socket$x25(0x9, 0x5, 0x0) ioctl$SIOCX25SFACILITIES(r6, 0x89e3, &(0x7f0000000000)={0x43, 0x8000, 0xa, 0xc, 0xb, 0x81}) 1.695640257s ago: executing program 8 (id=20794): r0 = socket$netlink(0x10, 0x3, 0x0) (async) r1 = socket$netlink(0x10, 0x3, 0x0) (async) r2 = socket(0x10, 0x803, 0x0) sendmsg$IPVS_CMD_SET_INFO(r2, &(0x7f0000000b00)={0x0, 0x0, &(0x7f0000000ac0)={0x0, 0x14}}, 0x0) getsockname$packet(r2, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route(r1, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000380)=ANY=[@ANYBLOB="3c0000001000850600"/20, @ANYRES32=r3, @ANYBLOB="01000000020000001c0012000c000100626f6e64000000000c0002000800010005"], 0x3c}}, 0x0) sendmsg$nl_route(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000900)=ANY=[@ANYBLOB="4c00000010001fff000000008000000000000000", @ANYRES32=0x0, @ANYBLOB="0000003f000024001267726574617000001400208008000700641c0000000000000000238875e7f1df43befa521296da116498bd586997990542baedec23646b44dac6e85966593b3ea3a4ec000000000000000000400000000000", @ANYRES32=r3, @ANYBLOB], 0x4c}}, 0x0) sendmsg$inet6(r2, &(0x7f0000000340)={&(0x7f0000000040)={0xa, 0x4e20, 0x9, @private2, 0x3ff}, 0x1c, &(0x7f0000000880)=[{&(0x7f00000003c0)="03151a275901985d8fc6c6cc66143463ebf6dac760f6a732f225483c84a142c8d397bfbfb22d275057346b378aa6bb0f66d508103db23cbb428e7702038618f1d28e7a4d62a46fa4447e1340886454362bd3706bcf8119c8dc83fa4693dae31d1675b839d6b760d9528eb6fd83b53e19c6bff40aade079e2f8a6f6df0b863ebce2923753b2ad3676731633de95eea3bd04957c94f162ba10f2736d521727ab81097c4f1dd2ff9a128cb6788bcd0b45e42aca5d476bd1b2a1bac674405eb2374abc91331f2cc64dba8015de599a7adf25b53777", 0xd3}, {&(0x7f00000001c0)}, {&(0x7f0000000240)="e71f381a874b87c730c66c193d04e400ea71e72ac0df2266e118bcbc2f79c86e9a6a56cb77726a70509bdcd94bfe9f6b2dcb4befddfcb592b9eca8dcd562d4dbbd6c66e44d5d663863f97cf207b35773e1fc86225f40298f483c3d25b9", 0x5d}, {&(0x7f00000004c0)="673abc7d5767b4d8a8f67f9ee76162d74ebb14ec87c6318f57a5f9ede7bdf8b6124cecc6435e9326b664a95314c7df04f859578554cf51dcb564cdea685ae550ac3174364d869db66cd9dfd4598fa9c70136ec39728c1bb8ca691b4426b204fc27f2ccb6bbed4fcf56acff582cdd5038128b2bad36285d8d97ee738a0ec0afaaec6123573b353fc2ee20", 0x8a}, {&(0x7f0000000580)="7cef49bd7590b2d632d1fa08e7dcf809730d73506dd8f2818378bf7d2564b8d59d40b695a2785e0062e32c3e4c1b463d34672463ca889ebacbbdffb3ca36afe0b498386d28478f2ded16666b03147445499dba1acbcb566b695a6d0147160a0d46054396dea279d5efa096e85c4944457c260395a20d1b651a3de2c6669253ed29bbc07574a9d7b71a85e00a5aa7f405e5931f611a64b7eb5bc946aa7efffa85454cbe7cdeb201fba64a8a017ec49ffa47b9044d34ddf9c71ca3e99c7417fa12b9b119bbe3bc1bf15ded73be7c17921014d1383e043a7351645ea93317ccbfb4cbf68310687a310bf2182340c27b", 0xee}, {&(0x7f0000000680)="b9d332591e0590543fd245d0c42aeae7123e60eae4d99554fbfeb7f9cd912ed17496409c8016f0921464325c998a2f7fe623a62e02c7963f870e3c1217c672e68fb424e7ba9f0a826b5f7c5c1f1ae150c11e9def9794e49ef6875cfa350861826f5eadad87f9c778a9a79a8a2fdac2ffcab39973654635911e92e4cb02dfa7fea3ec62cef82ac45db6d05c547586492a7d10747dcdcefb88801efa8323c1cdb697552acc3f204a218ad57ce734f3f3a550c1eaac0941b4a1ed8232525bd45d59200a2ae3c2ff5f61dfae837e71cb5352bb9b00d3563c39f1aceb26d99ad1c66f44195478611383a636966a3e1bfef372ec20f353", 0xf4}, {&(0x7f00000002c0)="82f3b64e2c04b47cad8109cffc2fbd909f18cf88ea15904852f9b22c8ade72d5e131f43712ba2d84d037bf6fd520325f330b67d896cd2720d8", 0x39}, {&(0x7f0000000780)="2dd6f3a20c4bdfcd4da1c03c347c0e1573e4beb4e60fdeba3c6b44a3c21fa23f4f95f1c7680f024eefe62ddb90fbad7fc046d2c92361e4a70db0248551cc2cd33e5f5d2c9972b28e7783394ecf731b207166e7c9ae519cb84883d77ce7b4398eda2df98ca889f51c779bb3bbb14fe1dbfd1c8799b88734e83132037665ef047e725c6d0d6188f6d9915c793d90606a8cb60375ab0f0eefca485d691a639db7e8cd5c98effff8c80bccc2b6487955513e0eeebc5777d37351b82d87fa812fba8dfd50182d088741f0113221e4", 0xcc}], 0x8, &(0x7f0000000b40)=[@flowinfo={{0x14, 0x29, 0xb, 0x5}}, @dstopts={{0x20, 0x29, 0x37, {0x8, 0x0, '\x00', [@jumbo={0xc2, 0x4, 0x57b02a57}]}}}, @flowinfo={{0x14, 0x29, 0xb, 0x7ff}}, @hoplimit_2292={{0x14, 0x29, 0x8, 0x8}}, @dstopts_2292={{0xa8, 0x29, 0x4, {0x62, 0x11, '\x00', [@calipso={0x7, 0x8, {0x2, 0x0, 0x2, 0x5}}, @ra={0x5, 0x2, 0x7}, @generic={0x8, 0x50, "a036bddd395d9552fb5d552545073b55d2121ad115edce5b986499dc27c52218de759edef6fae70cc9545450f040fda40f2801b3b835f21a492339fc2751bc8eafcf0ff6be0c9bd821497a377cf80805"}, @pad1, @ra={0x5, 0x2, 0xc}, @generic={0xae, 0x1e, "399486e5c39cb2066c23e5b7082281096c1e790743f9def2fc3907c9a1f3"}, @pad1]}}}, @hopopts={{0xd0, 0x29, 0x36, {0x3a, 0x16, '\x00', [@pad1, @generic={0x7, 0x1c, "80530ce1c68acace0bdcea45d796cef6757afa3e91d75a86cd1e9b3a"}, @generic={0x0, 0x25, "c735497dfb449ac07c0a85fbf0902285e41ad496e0aa815d8c4488ac97be18dd62939e571a"}, @calipso={0x7, 0x50, {0x0, 0x12, 0x2, 0xe, [0x3, 0x0, 0x40000000000, 0x8000000000000003, 0x5, 0x8a, 0xa, 0xfffffffffffffffc, 0x3be]}}, @padn={0x1, 0x8, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0]}, @hao={0xc9, 0x10, @private1={0xfc, 0x1, '\x00', 0x1}}]}}}], 0x1e0}, 0x800) 1.330086827s ago: executing program 0 (id=20795): r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000200), 0x0, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x7101}) r1 = socket(0x400000000010, 0x3, 0x0) r2 = socket$unix(0x1, 0x1, 0x0) ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) r4 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$sock_int(r4, 0x1, 0xf, &(0x7f0000000180)=0x20800001, 0x4) bind$inet6(r4, &(0x7f0000000080)={0xa, 0x4e22, 0x0, @empty}, 0x1c) r5 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$sock_int(r5, 0x1, 0xf, &(0x7f0000000180)=0x800001, 0x4) bind$inet6(r5, &(0x7f0000000140)={0xa, 0x4e22, 0xfffffffd, @empty}, 0x1c) listen(r5, 0x0) r6 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$sock_int(r6, 0x1, 0xf, &(0x7f0000000180)=0x800001, 0x4) bind$inet6(r6, &(0x7f0000000140)={0xa, 0x4e22, 0x0, @ipv4={'\x00', '\xff\xff', @empty}}, 0x1c) shutdown(r5, 0x0) sendmsg$nl_route_sched(r1, &(0x7f00000012c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000005c0)=@newqdisc={0x38, 0x24, 0x4ee4e6a52ff56541, 0x70bd2a, 0xffffffff, {0x0, 0x0, 0x0, r3, {0x0, 0xe}, {0xffff, 0xffff}, {0x0, 0x5}}, [@qdisc_kind_options=@q_multiq={{0xb}, {0x8}}]}, 0x38}, 0x1, 0x0, 0x0, 0x4001}, 0x0) sendmsg$nl_route_sched(r1, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000180)=@newtfilter={0x38, 0x2c, 0xd27, 0x70bd2c, 0x0, {0x0, 0x0, 0x0, r3, {0xa, 0x9}, {}, {0xc, 0x8}}, [@filter_kind_options=@f_fw={{0x7}, {0xc, 0x2, [@TCA_FW_CLASSID={0x8, 0x1, {0x1, 0x9}}]}}]}, 0x38}, 0x1, 0x0, 0x0, 0x60000080}, 0x20000000) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff}) r8 = socket(0x10, 0x803, 0x0) ioctl$sock_SIOCGIFINDEX(r7, 0x8933, &(0x7f0000000140)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r8, &(0x7f00000012c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000005c0)=@newqdisc={0x38, 0x24, 0x4ee4e6a52ff56541, 0x70bd2b, 0xffffffff, {0x0, 0x0, 0x0, r9, {0x0, 0xffff}, {0xffff, 0xffff}}, [@qdisc_kind_options=@q_multiq={{0xb}, {0x8, 0x2, {0xfffd}}}]}, 0x38}}, 0x0) r10 = socket$inet_tcp(0x2, 0x1, 0x0) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000a40)={0x2, 0x2, &(0x7f0000000080)=@raw=[@call={0x85, 0x0, 0x0, 0xae}, @exit], &(0x7f0000000840)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2a}, 0x90) getsockopt$inet_tcp_int(r10, 0x6, 0x4, 0x0, &(0x7f0000001640)) 1.322960584s ago: executing program 4 (id=20796): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) r1 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r1, &(0x7f000000c2c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000340)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a28000000000a0101000000005e1affd5020000000900010073797a300000000008000240000000032c000000030a01030000e6ff00000000020000000900010073797a30000000000900030073797a320000000014000000110001"], 0x7c}}, 0x0) sendmsg$NFT_BATCH(r1, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000140)={{0x14}, [@NFT_MSG_NEWRULE={0x58, 0x6, 0xa, 0x40b, 0x0, 0x0, {0x2}, [@NFTA_RULE_EXPRESSIONS={0x2c, 0x4, 0x0, 0x1, [{0x28, 0x1, 0x0, 0x1, @lookup={{0xb}, @val={0x18, 0x2, 0x0, 0x1, [@NFTA_LOOKUP_SREG={0x8, 0x2, 0x1, 0x0, 0x13}, @NFTA_LOOKUP_SET={0x9, 0x1, 'syz0\x00'}]}}}]}, @NFTA_RULE_TABLE={0x9, 0x1, 'syz0\x00'}, @NFTA_RULE_CHAIN={0x9, 0x2, 'syz2\x00'}]}], {0x14}}, 0x80}}, 0x0) sendmsg$IPCTNL_MSG_CT_NEW(r0, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000100)=ANY=[@ANYBLOB="640000000001010400000000141a000002000000240001801400018008000100e000000108000200e00000010c00028005000100000000002400028014000180080001000000000008000200ac1e00010c00028005000100000000000800074000000001"], 0x64}}, 0x0) r2 = socket$nl_netfilter(0x10, 0x3, 0xc) r3 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r3, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000001680)=ANY=[@ANYBLOB="3000000040000701feffffff00000000017c0000040042800c00018006000600800a00000c00028008000c"], 0x30}, 0x1, 0x0, 0x0, 0x48815}, 0xc000) syz_genetlink_get_family_id$ethtool(&(0x7f0000000080), r3) sendmsg$IPCTNL_MSG_CT_NEW(r2, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000280)={0x40, 0x0, 0x1, 0x401, 0x0, 0x0, {0x2}, [@CTA_LABELS_MASK={0x4}, @CTA_TUPLE_ORIG={0x24, 0x1, 0x0, 0x1, [@CTA_TUPLE_IP={0x14, 0x1, 0x0, 0x1, @ipv4={{0x8, 0x1, @multicast1}, {0x8, 0x2, @multicast1}}}, @CTA_TUPLE_PROTO={0xc, 0x2, 0x0, 0x1, {0x5}}]}, @CTA_LABELS={0x4}]}, 0x40}}, 0x0) 1.175747149s ago: executing program 8 (id=20797): r0 = bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f00000002c0)={0x2, 0x4, 0x8, 0x1, 0x80, 0x0, 0x80000001, '\x00', 0x0, 0x0}, 0x48) bpf$PROG_LOAD(0x5, &(0x7f0000000040)={0xa, 0x1c, &(0x7f0000000d80)=@ringbuf={{0x18, 0x8}, {{0x18, 0x1, 0x1, 0x0, r0}, {}, {}, {0x85, 0x0, 0x0, 0x5}, {0x4}}, {{0x5, 0x0, 0x3}}, [@snprintf={{0x7, 0x0, 0xb, 0x2}, {0x3, 0x3, 0x3, 0xa, 0x9}, {0x5, 0x0, 0xb, 0x9, 0x0, 0xb}, {0x3, 0x3, 0x3, 0xa, 0xa}, {0x7, 0x1, 0xb, 0x7, 0x8}, {0x7, 0x0, 0x0, 0x8, 0x0, 0x0, 0xfffffdff}, {0x4}, {0x7, 0x0, 0xa}, {0x4, 0x0, 0x7, 0x2, 0x0, 0x0, 0x1d}, {0x18, 0x9, 0x2, 0x0, r0}, {}, {0x46, 0x8, 0xfff0, 0x76}}], {{0x7, 0x1, 0xc, 0x9, 0x4}, {0x6, 0x0, 0x5, 0x8}}}, &(0x7f0000000980)='GPL\x00', 0x4, 0x0, 0x0, 0x0, 0x2e, '\x00', 0x0, @fallback=0x20, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x6}, 0x94) socket$inet_icmp(0x2, 0x2, 0x1) r1 = socket$key(0xf, 0x3, 0x2) sendmsg$key(r1, &(0x7f00000014c0)={0x0, 0x0, &(0x7f0000001480)={&(0x7f0000000000)=ANY=[@ANYBLOB="02090002020000000000000000606777e59737b65b8cc839f29053c5000000"], 0x10}}, 0x0) syz_emit_ethernet(0x3e, &(0x7f0000000040)=ANY=[@ANYBLOB="aaaaaaaaaaaa08c82553c54d00084700000000000000000690780a010102ac1414aa010707040200020000000000", @ANYRES32=0x41424344, @ANYRES32=0x41424344, @ANYRESDEC=r1], 0x0) 1.163426764s ago: executing program 3 (id=20798): bpf$TOKEN_CREATE(0x24, &(0x7f00000004c0), 0x8) (async) r0 = bpf$PROG_LOAD(0x5, &(0x7f0000000600)={0x17, 0xe, &(0x7f0000001480)=ANY=[@ANYBLOB="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"/686], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @cgroup_sysctl, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0x8, 0x10, &(0x7f0000000340), 0x10}, 0x94) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f00000002c0)={r0, 0x0, 0xfffffffffffffe32, 0x0, &(0x7f0000000080)="05804ab382844306d758e620b9dc", 0x0, 0x12c4, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x40) r1 = socket$nl_xfrm(0x10, 0x3, 0x6) r2 = socket(0x2b, 0x80801, 0x1) r3 = openat$tun(0xffffffffffffff9c, &(0x7f0000000000), 0x48241, 0x0) ioctl$TUNSETIFF(r3, 0x400454ca, &(0x7f00000000c0)={'syzkaller1\x00', 0x6bf1c2d5adba8c12}) (async) r4 = socket$kcm(0x2, 0xa, 0x2) ioctl$SIOCSIFHWADDR(r4, 0x8914, &(0x7f0000000240)={'syzkaller1\x00', @link_local}) (async) writev(r3, &(0x7f00000002c0)=[{&(0x7f0000000a40)="2e9b3d0007e03dd65193dfb6c575963f86dd", 0x12}], 0x1) r5 = bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000440)=ANY=[@ANYBLOB="02000000040000000800000001"], 0x48) bpf$PROG_LOAD(0x5, &(0x7f0000000700)={0x0, 0x10, &(0x7f0000000580)=ANY=[@ANYBLOB="18050000000000000000000000000000b7080000000000007b8af8ff00000000b7080000000000007b8af0ff00000000bfa100000000000007010000f8ffffffbfa400000000000007040000f0ffffffb70200000800000018230000", @ANYRES32=r5, @ANYBLOB="0000000000000000b704000001000000850000007800000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x48, '\x00', 0x0, @fallback=0x14, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) (async, rerun: 32) r6 = bpf$PROG_LOAD(0x5, &(0x7f00000007c0)={0x11, 0x10, &(0x7f0000000580)=ANY=[], &(0x7f0000000340)='GPL\x00', 0x0, 0x0, 0x0, 0x41100, 0x0, '\x00', 0x0, @fallback=0x37, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) (rerun: 32) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000006c0)={&(0x7f0000000700)='kfree\x00', r6}, 0x10) (async) r7 = socket$inet_udp(0x2, 0x2, 0x0) sendmsg$inet(r7, &(0x7f0000000300)={0x0, 0x0, 0x0}, 0x4080) (async, rerun: 64) connect$inet6(r2, &(0x7f0000000000)={0xa, 0x0, 0x10000, @empty}, 0x1c) (rerun: 64) connect$l2tp6(r2, &(0x7f0000000080)={0xa, 0x0, 0x292, @ipv4={'\x00', '\xff\xff', @local}, 0x0, 0x2}, 0x20) r8 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_GET_BYINDEX(r8, &(0x7f0000000140)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000200)=ANY=[@ANYBLOB="240000000f06010400000000000000000700000405000100"], 0x24}, 0x1, 0x0, 0x0, 0x40000}, 0x4000810) (async) sendmsg$IPSET_CMD_TYPE(r8, &(0x7f00000003c0)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x240543}, 0xc, &(0x7f0000000380)={&(0x7f0000000280)={0x20, 0xd, 0x6, 0x201, 0x0, 0x0, {0x3, 0x0, 0x8}, [@IPSET_ATTR_TYPENAME={0xc, 0x3, 'hash:ip\x00'}]}, 0x20}, 0x1, 0x0, 0x0, 0x4008004}, 0x0) (async) setsockopt$netlink_NETLINK_ADD_MEMBERSHIP(r1, 0x10e, 0x1, &(0x7f0000000400)=0x1, 0x4) (async) bind$inet(r7, &(0x7f0000000480)={0x2, 0x4e21, @rand_addr=0x64010101}, 0x10) (async) r9 = socket$inet6(0xa, 0x3, 0x1) (async) r10 = socket$inet_sctp(0x2, 0x5, 0x84) sendmsg$inet_sctp(r10, &(0x7f0000000400)={&(0x7f0000000000)=@in={0x2, 0x4e23, @remote}, 0x10, &(0x7f0000000080)=[{&(0x7f0000000280)='+', 0x1}], 0x1, &(0x7f0000000180)=[@prinfo={0x18, 0x84, 0x5, {0x30}}], 0x18, 0x4014}, 0x2c0408d0) (async) sendmsg$AUDIT_SIGNAL_INFO(r2, &(0x7f00000008c0)={&(0x7f0000000500)={0x10, 0x0, 0x0, 0xf763cd939d18b656}, 0xc, &(0x7f0000000880)={&(0x7f0000000540)={0x10, 0x3f2, 0x4, 0x70bd2b, 0x25dfdbfd, "", [""]}, 0x10}, 0x1, 0x0, 0x0, 0x20000001}, 0x4000) (async) setsockopt$inet6_IPV6_XFRM_POLICY(r9, 0x29, 0x23, &(0x7f0000000140)={{{@in6=@empty, @in=@multicast2, 0x0, 0x20, 0x0, 0x0, 0xa}, {0x1, 0x20000000, 0x20005, 0xc, 0x3, 0xfffffffffffffffa, 0x0, 0x5}, {0x2, 0xfffffffffffffffc, 0xffffffffffffffff}, 0xc24, 0x0, 0x1, 0x0, 0x0, 0x3}, {{@in=@multicast2, 0x0, 0x32}, 0x2, @in6=@initdev={0xfe, 0x88, '\x00', 0x0, 0x0}, 0x0, 0x4, 0x0, 0x0, 0x0, 0x101}}, 0xe8) (async, rerun: 64) connect$inet6(r9, &(0x7f0000000240)={0xa, 0x12, 0x0, @empty}, 0x1c) (rerun: 64) 1.078906326s ago: executing program 1 (id=20799): r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f00000000c0), 0xffffffffffffffff) r2 = openat$tun(0xffffffffffffff9c, &(0x7f0000000100), 0x0, 0x0) ioctl$TUNSETIFF(r2, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x2}) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, 0x0, 0x0) r3 = openat$tun(0xffffffffffffff9c, &(0x7f0000000400), 0x0, 0x0) close(r3) socket$nl_generic(0x10, 0x3, 0x10) ioctl$SIOCSIFHWADDR(r3, 0x8914, &(0x7f0000002280)={'syzkaller0\x00', @multicast}) r4 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r4, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r4, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000580)={&(0x7f0000000340)=@newqdisc={0x4c, 0x24, 0x4ee4e6a52ff56541, 0x70bd25, 0x25dfdbfd, {0x0, 0x0, 0x0, r5, {0x0, 0xb}, {0xffff, 0xffff}, {0xfff2}}, [@qdisc_kind_options=@q_netem={{0xa}, {0x1c, 0x2, {{0x3, 0x3, 0x6361, 0x7, 0xffffffff, 0x3}}}}]}, 0x4c}}, 0x0) sendmsg$nl_route_sched(r4, &(0x7f00000003c0)={0x0, 0x0, &(0x7f0000000300)={&(0x7f00000005c0)=@newqdisc={0x3c, 0x24, 0x4ee4e6a52ff56541, 0x70b926, 0x25dfdbfc, {0x0, 0x0, 0x0, r5, {0x0, 0xd}, {0x6, 0x6}, {0xffff, 0xffe0}}, [@qdisc_kind_options=@q_cake={{0x9}, {0xc, 0x2, [@TCA_CAKE_ACK_FILTER={0x8, 0x10, 0x2}]}}]}, 0x3c}, 0x1, 0x0, 0x0, 0x240040e0}, 0x4890) r6 = socket$packet(0x11, 0x3, 0x300) sendto$packet(r6, &(0x7f0000000240)="800000800000210ee7decd7a000000008100", 0x36, 0x40, &(0x7f00000001c0)={0x11, 0x8100, r5, 0x1, 0xd8, 0x6, @broadcast}, 0x14) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f0000000100)={'wlan0\x00', 0x0}) sendmsg$NL80211_CMD_SET_TX_BITRATE_MASK(r0, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000000)={0x38, r1, 0x1, 0x0, 0x0, {{}, {@val={0x8, 0x3, r7}, @void}}, [@NL80211_ATTR_TX_RATES={0x1c, 0x5a, 0x0, 0x1, [@NL80211_BAND_5GHZ={0x18, 0x1, 0x0, 0x1, [@NL80211_TXRATE_VHT={0x14, 0x3, {[0x24, 0x7, 0x8, 0x1, 0x8, 0x4b4, 0x5, 0xf]}}]}]}]}, 0x38}}, 0x0) r8 = socket(0x10, 0x803, 0x0) r9 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000040), r8) sendmsg$NL80211_CMD_DEL_PMKSA(r8, &(0x7f0000000180)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x800}, 0xc, &(0x7f0000000140)={&(0x7f00000001c0)={0x48, r9, 0x400, 0x70bd2c, 0x25dfdbfe, {{}, {@void, @val={0xc, 0x99, {0x8df, 0x78}}}}, [@NL80211_ATTR_SSID={0xa, 0x34, @default_ibss_ssid}, @NL80211_ATTR_PMK={0x14, 0xfe, "9c557231f95ef88ecdd4a8edf8e48c53"}, @NL80211_ATTR_PMK_REAUTH_THRESHOLD={0x5, 0x120, 0x4d}]}, 0x48}, 0x1, 0x0, 0x0, 0x800}, 0x4000004) 1.048350253s ago: executing program 4 (id=20800): r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000000)=@base={0x11, 0x4, 0x4, 0xff}, 0x48) (async) r1 = socket(0x40000000015, 0x5, 0x0) bind$inet(r1, &(0x7f0000000340)={0x2, 0x0, @loopback}, 0x10) (async) write$bt_hci(r1, &(0x7f0000001140)={0x1, @read_remote_features={{0x41b, 0x2}, {0xc8}}}, 0x6) (async) sendmsg(r1, &(0x7f0000000200)={&(0x7f0000000040)=@in={0x2, 0x0, @private=0xa010101}, 0x80, 0x0, 0x0, &(0x7f0000019580)=ANY=[@ANYBLOB="1000000000000000040000000000000010000000000000001401000003"], 0x20}, 0x0) (async) bpf$MAP_DELETE_ELEM(0x3, &(0x7f00000002c0)={r0, &(0x7f0000000200)}, 0x20) r2 = socket$kcm(0xa, 0x2, 0x73) sendmsg$inet(r2, &(0x7f0000001180)={&(0x7f0000000000)={0xa, 0x0, @empty}, 0x10, &(0x7f0000001080)=[{&(0x7f0000000040)="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", 0x1000}, {&(0x7f0000001040)="9d7fcf3efc63f4a6a555ba8b4726d7ccaf8a207100e69cfac4377876021d7131b838059f96bd206d4776368ed2a92432e5af71", 0x33}], 0x2, &(0x7f00000010c0)=[@ip_tos_int={{0x14, 0x29, 0x2}}, @ip_retopts={{0x30, 0x8, 0x7, {[@ssrr={0x89, 0x13, 0x15, [@remote, @rand_addr=0x64010100, @initdev={0xac, 0x1e, 0x0, 0x0}, @initdev={0xac, 0x1e, 0x0, 0x0}]}, @generic={0x0, 0xc, "34366567f22197875664"}, @end]}}}, @ip_pktinfo={{0x1c, 0x0, 0x8, {0x0, @private, @loopback}}}], 0x68}, 0x0) 881.675445ms ago: executing program 4 (id=20801): r0 = socket$inet_udplite(0x2, 0x2, 0x88) r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000000)='cpuacct.usage_percpu_sys\x00', 0x275a, 0x0) mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x5, 0x10012, r1, 0xffffe000) r2 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r2, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000180)={&(0x7f00000009c0)={0x30, 0x40, 0x107, 0x70bd2b, 0x0, {0x1, 0x7c}, [@nested={0x4, 0x142}, @nested={0xc, 0x1, 0x0, 0x1, [@typed={0x6, 0x6, 0x0, 0x0, @str='\x80\n'}]}, @nested={0xc, 0x2, 0x0, 0x1, [@nested={0x5, 0x17, 0x0, 0x1, [@generic="b0"]}]}]}, 0x30}, 0x1, 0x0, 0x0, 0x48815}, 0xc020) r3 = socket$tipc(0x1e, 0x5, 0x0) setsockopt$TIPC_GROUP_JOIN(r3, 0x10f, 0x87, &(0x7f0000000100)={0x41}, 0x10) socket$inet_tcp(0x2, 0x1, 0x0) openat$tun(0xffffffffffffff9c, 0x0, 0x40a01, 0x0) socket$nl_generic(0x10, 0x3, 0x10) getsockopt$inet_sctp_SCTP_PARTIAL_DELIVERY_POINT(0xffffffffffffffff, 0x84, 0x13, &(0x7f0000000040)={0x0, 0xe}, &(0x7f0000000080)=0x8) setsockopt$inet_sctp_SCTP_AUTOCLOSE(0xffffffffffffffff, 0x84, 0x4, &(0x7f0000000240)=0xf1e5, 0x4) socket$alg(0x26, 0x5, 0x0) socket$nl_generic(0x10, 0x3, 0x10) socket$nl_netfilter(0x10, 0x3, 0xc) r4 = socket$netlink(0x10, 0x3, 0x0) socketpair$unix(0x1, 0x5, 0x0, &(0x7f00000000c0)) r5 = socket$packet(0x11, 0x2, 0x300) getsockname$packet(r5, &(0x7f00000000c0)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @random}, &(0x7f0000000140)) sendmsg$nl_route(r4, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000280)=@newlink={0xe8, 0x10, 0x801, 0x0, 0x0, {0x0, 0x0, 0x0, r6, 0x4}, [@IFLA_AF_SPEC={0xc8, 0x1a, 0x0, 0x1, [@AF_INET6={0x18, 0x2, 0x0, 0x1, [@IFLA_INET6_TOKEN={0x14, 0x7, @local}]}, @AF_INET={0x30, 0x2, 0x0, 0x1, {0x2c, 0x1, 0x0, 0x1, [{0x8}, {0x8}, {0x8}, {0x8}, {0x8}]}}, @AF_INET={0x18, 0x2, 0x0, 0x1, {0x14, 0x1, 0x0, 0x1, [{0x8}, {0x8}]}}, @AF_INET={0x28, 0x2, 0x0, 0x1, {0x24, 0x1, 0x0, 0x1, [{0x8, 0x1a, 0x0, 0x0, 0xc95addb6}, {0x8, 0x1, 0x0, 0x0, 0x2}, {0x8, 0x1a, 0x0, 0x0, 0x1}, {0x8, 0x1f, 0x0, 0x0, 0x7}]}}, @AF_INET={0x28, 0x2, 0x0, 0x1, {0x24, 0x1, 0x0, 0x1, [{0x8, 0x5}, {0x8}, {0x8, 0x6}, {0x8}]}}, @AF_INET6={0xc, 0xa, 0x0, 0x1, [@IFLA_INET6_ADDR_GEN_MODE={0x5, 0x8, 0x7}]}, @AF_BRIDGE={0x4}, @AF_MPLS={0x4}]}]}, 0xe8}, 0x1, 0x0, 0x0, 0x40000}, 0x0) getsockopt$IPT_SO_GET_REVISION_MATCH(r0, 0x0, 0x42, &(0x7f0000000140)={'ah\x00'}, &(0x7f0000000200)=0x1e) getsockopt$CAN_RAW_FD_FRAMES(0xffffffffffffffff, 0x65, 0x5, &(0x7f00000000c0), &(0x7f0000000100)=0x4) mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x1, 0x10012, 0xffffffffffffffff, 0x0) r7 = socket$inet6_tcp(0xa, 0x1, 0x0) ioctl$sock_SIOCETHTOOL(r7, 0x8946, &(0x7f00000001c0)={'wlan0\x00', &(0x7f0000000180)=@ethtool_cmd={0x37, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x4}}) r8 = socket$inet_udplite(0x2, 0x2, 0x88) setsockopt$inet_mreqn(r8, 0x0, 0x20, &(0x7f00000003c0)={@initdev={0xac, 0x1e, 0x0, 0x0}, @remote}, 0xc) r9 = syz_init_net_socket$bt_l2cap(0x1f, 0x1, 0x0) setsockopt$bt_BT_POWER(r9, 0x112, 0x9, &(0x7f00000008c0)=0x6, 0x1) ioctl$sock_inet_SIOCSIFADDR(r0, 0x8916, &(0x7f0000000080)={'wlan1\x00', {0x2, 0x4e23, @private=0xfffffffc}}) 786.484438ms ago: executing program 0 (id=20802): socket(0x3, 0x6, 0x0) r0 = socket$alg(0x26, 0x5, 0x0) bind$alg(r0, &(0x7f0000000180)={0x26, 'aead\x00', 0x0, 0x0, 'authencesn(wp512-generic,cbc-camellia-aesni-avx2)\x00'}, 0x58) close(0x4) 704.74348ms ago: executing program 4 (id=20803): r0 = socket$nl_generic(0x10, 0x3, 0x10) (async) ioctl$sock_SIOCGIFINDEX_80211(0xffffffffffffffff, 0x8933, &(0x7f0000000140)={'wlan1\x00', 0x0}) sendmsg$NL80211_CMD_DEL_PMK(r0, &(0x7f0000000200)={&(0x7f0000000100)={0x10, 0x0, 0x0, 0x4000000}, 0xc, &(0x7f00000001c0)={&(0x7f0000000180)={0x40, 0x0, 0x100, 0x70bd2d, 0x25dfdbfc, {{}, {@val={0x8, 0x3, r1}, @void}}, [@NL80211_ATTR_MAC={0xa}, @NL80211_ATTR_MAC={0xa, 0x6, @broadcast}, @NL80211_ATTR_MAC={0xa}]}, 0x40}, 0x1, 0x0, 0x0, 0x40000}, 0x80) r2 = socket$nl_netfilter(0x10, 0x3, 0xc) r3 = syz_genetlink_get_family_id$batadv(&(0x7f00000002c0), r0) sendmsg$BATADV_CMD_GET_ROUTING_ALGOS(0xffffffffffffffff, &(0x7f0000000380)={&(0x7f0000000280)={0x10, 0x0, 0x0, 0x4000}, 0xc, &(0x7f0000000340)={&(0x7f0000000300)={0x1c, r3, 0x200, 0x70bd27, 0x25dfdbff, {}, [@BATADV_ATTR_GW_BANDWIDTH_UP={0x8, 0x32, 0x2}]}, 0x1c}, 0x1, 0x0, 0x0, 0x80}, 0x8100) (async) r4 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r4, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000780)={&(0x7f0000000240)=@ipv4_newroute={0x38, 0x18, 0x35f32a6dfa748ddd, 0x0, 0x0, {0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5}, [@RTA_ENCAP_TYPE={0x6, 0x15, 0x2}, @RTA_ENCAP={0x14, 0x16, 0x0, 0x1, @LWTUNNEL_IP_OPTS={0x10, 0x8, 0x0, 0x1, @LWTUNNEL_IP_OPTS_ERSPAN={0xc, 0x3, 0x0, 0x1, @LWTUNNEL_IP_OPT_ERSPAN_VER={0x5, 0x1, 0x1}}}}]}, 0x38}}, 0x0) (async) sendmsg$NFT_BATCH(r2, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000700)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a20000000000a01030000000000000000010000000900010073797a310000000054000000030a01020000000000000000010000000900030073797a310000000028000480080002400000000008000140000000051400030076657468315f6d6163767461700000000900010073797a310000000058000000050a01020000000000000000010020000c00024000000000000000010900010073797a3100000000200004800600030076657468315f6d61637674617000000008000140000000050b00070066696c746572"], 0xf4}}, 0x0) socket(0xa, 0x3, 0x3a) (async) r5 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r5, &(0x7f0000000540)={0x0, 0x0, &(0x7f0000000500)={&(0x7f0000000780)=ANY=[@ANYBLOB="48010000100001000000000000000000e00000020000000000000000000000000a010101000000000000000000000000000000004e2100"/64, @ANYRES32=0x0, @ANYRES32=0x0, @ANYBLOB="ffffdfff0000000000000000000000000000000033000000fe8000000000000000000000010000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000fcffffffffffffff000000000000000000000000000004000000010000000000000000000a000000000000000000000048000100736861323536000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000048460000000000000000000000000008001d00000000000800220003"], 0x148}}, 0x0) (async) bpf$PROG_LOAD(0x5, &(0x7f000000e000)={0x1, 0x4, &(0x7f0000000080)=ANY=[@ANYBLOB="b405000000000000611068000000000020000000000000009500000000000000"], &(0x7f0000003ff6)='GPL\x00', 0xa, 0xfd90, &(0x7f000000cf3d)=""/195, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x8, &(0x7f00000000c0), 0x366, 0x10, &(0x7f0000000000), 0x2b2}, 0x48) 700.249239ms ago: executing program 0 (id=20804): r0 = socket$nl_route(0x10, 0x3, 0x0) setsockopt$netlink_NETLINK_TX_RING(r0, 0x10e, 0xc, &(0x7f0000000040)={0x80}, 0x213) openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000002c0)='memory.events.local\x00', 0x275a, 0x0) mmap(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x600000a, 0x8032, 0xffffffffffffffff, 0x0) r1 = socket$packet(0x11, 0x3, 0x300) getpeername$packet(r1, 0x0, 0x0) sendmsg$nl_route(r0, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000000940)={&(0x7f0000000080)=ANY=[@ANYBLOB="180100001f000100000000000000ff000dd3900a00c3ff967f6eb6895342d1fff5149895fefcfbed1dd8b03192e61898d5415b76f88951aab0b3f490"], 0x18}}, 0x0) 626.670583ms ago: executing program 3 (id=20805): r0 = socket$nl_route(0x10, 0x3, 0x0) (async) r1 = socket(0x2, 0x80805, 0x0) getsockopt$inet_sctp_SCTP_GET_PEER_ADDRS(r1, 0x84, 0x7a, &(0x7f0000000080)={0x0, 0x4, "179da51e"}, &(0x7f00000000c0)=0xc) (async) r2 = openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0) ioctl$TUNSETIFF(r2, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x7101}) r3 = socket(0x400000000010, 0x3, 0x0) (async) r4 = socket$unix(0x1, 0x5, 0x0) r5 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000340), r1) sendmsg$NL80211_CMD_STOP_SCHED_SCAN(r3, &(0x7f0000000480)={&(0x7f0000000300)={0x10, 0x0, 0x0, 0x2000}, 0xc, &(0x7f0000000400)={&(0x7f0000000380)={0x44, r5, 0x36, 0x70bd27, 0x25dfdbfb, {{}, {@void, @void}}, [@NL80211_ATTR_COOKIE={0xc, 0x58, 0x21}, @NL80211_ATTR_COOKIE={0xc, 0x58, 0x3d}, @NL80211_ATTR_COOKIE={0xc, 0x58, 0x61}, @NL80211_ATTR_COOKIE={0xc, 0x58, 0x3c}]}, 0x44}, 0x1, 0x0, 0x0, 0x20000014}, 0x40050) (async) r6 = socket(0x400000000010, 0x3, 0x0) (async) socket$nl_generic(0x10, 0x3, 0x10) (async) r7 = socket$unix(0x1, 0x1, 0x0) ioctl$sock_SIOCGIFINDEX(r7, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r6, &(0x7f00000012c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000005c0)=@newqdisc={0x38, 0x24, 0x4ee4e6a52ff56541, 0x70bd2d, 0xffffffff, {0x0, 0x0, 0x0, r8, {0x0, 0xfff1}, {0xffff, 0xffff}, {0x1, 0xf}}, [@qdisc_kind_options=@q_multiq={{0xb}, {0x8, 0x2, {0x28}}}]}, 0x38}}, 0x0) (async) sendmsg$nl_route_sched(r6, &(0x7f0000001180)={0x0, 0x0, &(0x7f0000000440)={&(0x7f0000000600)=@newtfilter={0x34, 0x2c, 0xd27, 0x70bd28, 0x25dfdbfd, {0x0, 0x0, 0x0, r8, {0x6, 0x7}, {}, {0xa, 0x1}}, [@filter_kind_options=@f_cgroup={{0xb}, {0x4}}]}, 0x34}, 0x1, 0x0, 0x0, 0x80}, 0x40010) (async) r9 = openat$tcp_mem(0xffffffffffffff9c, &(0x7f0000000000)='/proc/sys/net/ipv4/tcp_wmem\x00', 0x1, 0x0) write$cgroup_int(r9, &(0x7f0000001480)=0x80000000003, 0x12) (async) ioctl$sock_SIOCGIFINDEX(r4, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) pipe(&(0x7f00000004c0)={0xffffffffffffffff}) bind$xdp(r11, &(0x7f0000000500)={0x2c, 0x9, r10, 0x26}, 0x10) (async) sendmsg$nl_route_sched(r3, &(0x7f0000006040)={0x0, 0x0, &(0x7f0000000140)={&(0x7f00000002c0)=@gettfilter={0x24, 0x2e, 0x205, 0x70bd2c, 0x25dfdafd, {0x0, 0x0, 0x0, r10, {0xc, 0xc}, {0x0, 0xfff1}}}, 0x24}, 0x1, 0x0, 0x0, 0x20000801}, 0x4041080) setsockopt$netlink_NETLINK_TX_RING(r1, 0x10e, 0x7, &(0x7f0000000100)={0x80000001, 0x7fff, 0x7, 0x9}, 0x10) (async) r12 = socket$nl_route(0x10, 0x3, 0x0) bpf$BPF_GET_MAP_INFO(0xf, &(0x7f0000000240)={0x1, 0x58, &(0x7f0000000180)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, ""/16, 0x0}}, 0x10) (async) r14 = bpf$OBJ_GET_PROG(0x7, &(0x7f00000002c0)=@generic={&(0x7f0000000280)='./file0\x00', 0x0, 0x8}, 0x18) sendmsg$nl_route_sched(r12, &(0x7f0000001540)={&(0x7f0000000c80)={0x10, 0x0, 0x0, 0x20000000}, 0xc, &(0x7f0000001500)={&(0x7f0000001580)=@deltfilter={0x998, 0x2d, 0x200, 0x70bd2d, 0x25dfdbfc, {0x0, 0x0, 0x0, r13, {0xfff2}, {0x8, 0xf}, {0xb, 0xd}}, [@TCA_CHAIN={0x8, 0xb, 0x49b26fe1}, @filter_kind_options=@f_bpf={{0x8}, {0x498, 0x2, [@TCA_BPF_NAME={0xc, 0x7, './file0\x00'}, @TCA_BPF_FLAGS={0x8}, @TCA_BPF_FD={0x8, 0x6, r14}, @TCA_BPF_CLASSID={0x8, 0x3, {0x10, 0x10}}, @TCA_BPF_POLICE={0x470, 0x2, [@TCA_POLICE_RESULT={0x8, 0x5, 0x278}, @TCA_POLICE_RATE64={0xc, 0x8, 0x9}, @TCA_POLICE_TBF={0x3c, 0x1, {0x0, 0xffffffffdffffffc, 0x1, 0x1, 0x10001, {0x8d, 0x0, 0x7, 0x1, 0x200, 0x3}, {0xfe, 0x2, 0x7, 0xfff, 0x3}, 0x81, 0x5, 0x7}}, @TCA_POLICE_PEAKRATE64={0xc, 0x9, 0x4}, @TCA_POLICE_PEAKRATE={0x404, 0x3, [0x3, 0x5, 0xb75, 0x8, 0x8, 0x7ff, 0x9, 0xff, 0x1, 0x4, 0x1, 0x1, 0x2ca1, 0xb6b, 0x1000, 0x89bb, 0x8, 0x4, 0x0, 0x8cbe, 0x9, 0x7f, 0x2, 0xaf2, 0x7, 0x8, 0x9, 0x8, 0xff, 0x5, 0x7fff, 0x4, 0x10000, 0xb, 0xf354, 0xffff, 0x9, 0x7, 0x7, 0x3, 0x7fff, 0x7, 0x4, 0x1, 0x0, 0x6, 0x0, 0x3, 0x6, 0xfffffff9, 0x6, 0x0, 0xcbb, 0x0, 0xb0, 0x8, 0xe, 0x0, 0xd, 0x8d, 0x7, 0xe8, 0x3, 0xf, 0x7, 0x5, 0x74d, 0x2, 0x1ff, 0x8, 0x3, 0x0, 0x8, 0x100, 0x401, 0xfff, 0x8, 0x1c000, 0x8, 0xfffffffb, 0x975, 0x1d31, 0x28, 0x1, 0x5, 0x24000, 0x9, 0x8593, 0x5, 0xe000000, 0x7, 0x2, 0xfffff1c8, 0xfffffff9, 0x7, 0x4b, 0x30ab, 0x8, 0x73, 0xc000000, 0xa5fa, 0x8000, 0x2, 0x2, 0x9, 0x5, 0x1, 0x3800000, 0x5, 0xafe, 0x43, 0xfffffe01, 0x1, 0xffff, 0x3, 0x2, 0xba, 0x6aa, 0x4ba, 0x2, 0x5, 0x6, 0xffffffff, 0x4, 0xfffffff9, 0x7, 0x0, 0x4, 0x1, 0x0, 0x4, 0x8, 0x8, 0xffff, 0x6, 0x10001, 0xfffffffd, 0x7fffffff, 0xf, 0x5, 0x4, 0x5, 0x5, 0x2, 0x5, 0x7fffffff, 0xa79, 0x217, 0x5, 0x8, 0x0, 0xfffffff8, 0x40, 0x7, 0xf, 0x6, 0x1623, 0x4, 0x3991, 0x5, 0xe, 0xffffd26b, 0x3, 0xe67, 0xffffff08, 0x7, 0xffff721f, 0xe, 0x4, 0xffff, 0xf2, 0x2, 0x1, 0x3, 0x0, 0x633, 0x3, 0x6, 0x1, 0x8000, 0x9, 0xd01, 0x2, 0x5, 0xf, 0x7, 0x7, 0xd, 0x1, 0xe82, 0x1, 0x0, 0x4, 0x1ff, 0x7, 0x4, 0x7, 0x7fff, 0x285, 0x45980000, 0x0, 0xffffff81, 0x6, 0xc847, 0x10, 0xec, 0x4, 0x0, 0xfffffffa, 0x9, 0x7, 0x10000, 0x5, 0xc10, 0x3, 0x1000, 0x8, 0x7d, 0x1, 0x3, 0x80, 0x662, 0x4, 0xff, 0x5, 0x4, 0xf, 0x8, 0x3, 0xffffff17, 0x2, 0x4, 0xb76a, 0x10001, 0x0, 0x2e4, 0x3, 0x0, 0x7f, 0x101, 0x0, 0xfff, 0x7fff, 0x40, 0x2, 0x7, 0x7ff, 0x7, 0x8, 0x2, 0xb, 0x100, 0x7, 0xa, 0x6, 0x7ff]}, @TCA_POLICE_PEAKRATE64={0xc}]}]}}, @TCA_RATE={0x6, 0x5, {0x0, 0x5}}, @TCA_CHAIN={0x8, 0xb, 0x1}, @filter_kind_options=@f_flower={{0xb}, {0x1c, 0x2, [@TCA_FLOWER_KEY_SCTP_DST_MASK={0x6}, @TCA_FLOWER_KEY_ARP_SIP_MASK={0x8, 0x3a, 0xffffff00}, @TCA_FLOWER_KEY_SCTP_SRC={0x67}]}}, @TCA_CHAIN={0x8, 0xb, 0xcd}, @filter_kind_options=@f_fw={{0x7}, {0x30, 0x2, [@TCA_FW_MASK={0x8, 0x5, 0x8}, @TCA_FW_INDEV={0x14, 0x3, 'tunl0\x00'}, @TCA_FW_MASK={0x8, 0x5, 0xc1f}, @TCA_FW_MASK={0x8, 0x5, 0x8}]}}, @TCA_RATE={0x6, 0x5, {0x6, 0x3}}, @filter_kind_options=@f_bpf={{0x8}, {0x444, 0x2, [@TCA_BPF_OPS={{0x6, 0x4, 0x5}, {0x2c, 0x5, [{0xfffb, 0x5, 0xf1, 0x3}, {0x7f, 0x4, 0xc, 0x1000}, {0x4, 0x7f, 0x3b, 0x5}, {0xb298, 0xd, 0xfb, 0x10}, {0x873, 0x7, 0x8, 0x6}]}}, @TCA_BPF_CLASSID={0x8, 0x3, {0x7, 0xd}}, @TCA_BPF_FLAGS={0x8}, @TCA_BPF_ACT={0x3ec, 0x1, [@m_skbmod={0x80, 0x11, 0x0, 0x0, {{0xb}, {0x4}, {0x53, 0x6, "9a3bde94a2eafc327d9cb31f7346abcfffd0ce239365b5b12a077c06652f197bad942dd8b7eb534ee95130f7b60c99d65c865228ebd77de11847294d222f164f081cd166ad5dc6e4bb7343362d9acc"}, {0xc, 0x7, {0x1, 0x1}}, {0xc, 0x8, {0x0, 0x1}}}}, @m_mpls={0x124, 0xd, 0x0, 0x0, {{0x9}, {0x3c, 0x2, 0x0, 0x1, [@TCA_MPLS_TC={0x5, 0x6, 0x5}, @TCA_MPLS_TTL={0x5, 0x7, 0x2}, @TCA_MPLS_BOS={0x5}, @TCA_MPLS_TC={0x5, 0x6, 0x3}, @TCA_MPLS_BOS={0x5, 0x8, 0x1}, @TCA_MPLS_PROTO={0x6, 0x4, 0x809b}, @TCA_MPLS_TC={0x5, 0x6, 0x4}]}, {0xbd, 0x6, "b202020557e7c3023403e0c177f8c386c87fba9fad260d9acb3aec33811f6680e2e2546b43c26fdb45a9fedc106017500a2247a031935ebdd06ecb80ce1b3ef79adf9f3924c6a521c468aac7371a1affff95acfb6e992485f38fa5e25b3ac0598a8c5250b1d3b8d40eb0427dd424dec4e5b0ea8638b8f1a68cf141ddc3019302c928a7c50afaaa30b56f7b055014db73cdd2a9a379c1d847380fb65d44f882978699be409fa26ecf2485f09947c7f9980cfe2985fb162b9e17"}, {0xc, 0x7, {0x1}}, {0xc, 0x8, {0x2, 0x2}}}}, @m_ctinfo={0x138, 0x5, 0x0, 0x0, {{0xb}, {0x54, 0x2, 0x0, 0x1, [@TCA_CTINFO_PARMS_CPMARK_MASK={0x8, 0x7, 0x4}, @TCA_CTINFO_PARMS_DSCP_STATEMASK={0x8, 0x6, 0x3}, @TCA_CTINFO_ACT={0x18, 0x3, {0xcb, 0x3, 0x7, 0xd, 0x80000001}}, @TCA_CTINFO_PARMS_CPMARK_MASK={0x8, 0x7, 0x5}, @TCA_CTINFO_ACT={0x18, 0x3, {0x2790, 0xffffffff, 0x2, 0x40, 0x5}}, @TCA_CTINFO_PARMS_DSCP_MASK={0x8, 0x5, 0xc1b}]}, {0xbc, 0x6, "b2db08812d833352cb9fc1f6becb81ee22ffa3eaf3a4a0cc85e3fec11943699d33a1bea4d75764adc9a1f392f384f1cfbe39639f182029b00790caa08cf26f15b7cedb201574f7ba7fbb855c14c6a52aec4f706aa61e7434549e6b46dbf4d250f751786f4c472254236cd3821eda71030fa01ea3f866da62a1ac8ccd0e5a72ffdf023066b414f004e39c8c64a313e356916fcfb683f0aabe2d2d2780ed067c92928044c92b6ef36b4cc121431ad39c6c6d489dc17c2108ab"}, {0xc}, {0xc, 0x8, {0x2}}}}, @m_sample={0x10c, 0x1c, 0x0, 0x0, {{0xb}, {0xc, 0x2, 0x0, 0x1, [@TCA_SAMPLE_TRUNC_SIZE={0x8, 0x4, 0x401}]}, {0xd8, 0x6, "0654fc21c12f973a852c6aef17f00b50110c71f4a8420d7351882f8ec74f6d3ffe20e15c3ead64438e426659cee94aca62f45ed96a4e8be5d4d251029427d2784a700fd1ea1fd16ff75d2a453ae5925bcec7e5bb8bf204c1b33c74459b6887606116bf1d6d51317d3d0043237a2d2477d27390249fd9823a7d8a3060f3d31395012fd51520a39aaad4aa184d281c49dda7fca1a9822745a8827bf13efb4c00ba40e184e63b9a7c15d10e712452142faec775ee7985127abb187c5af5ca85c6687259a98d310abfa9f7f9db4ebb939de84e1c1c18"}, {0xc, 0x7, {0x1, 0x1}}, {0xc, 0x8, {0x0, 0x2}}}}]}, @TCA_BPF_CLASSID={0x8, 0x3, {0xf, 0xf}}, @TCA_BPF_FLAGS_GEN={0x8, 0x9, 0x3}]}}]}, 0x998}, 0x1, 0x0, 0x0, 0x1}, 0x40000) (async) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000200)={'geneve1\x00', 0x0}) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000080)=ANY=[@ANYBLOB="28000000100001000000000000000000e5ea59971430651d78f54f6c0d8ec5014b62977e4c37629d83aa17cea54ce75d0f90c07dd5", @ANYRES32=r15, @ANYBLOB="000000000000000008001a8004000a80"], 0x28}}, 0x0) 607.875368ms ago: executing program 8 (id=20806): bpf$BPF_PROG_WITH_BTFID_LOAD(0x5, &(0x7f00000003c0)=@bpf_lsm={0x1e, 0x3, &(0x7f00000000c0)=ANY=[@ANYBLOB="180000000000000000000000b1"], 0x0, 0x8000, 0x0, 0x0, 0x41100, 0x0, '\x00', 0x0, 0x24}, 0x94) (async) r0 = bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000340)={0x6, 0x3, &(0x7f0000000d80)=ANY=[@ANYBLOB="1800000003000000000000000000000095"], &(0x7f0000000000)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x20000000}, 0x94) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000040)={r0, 0x0, 0x94, 0x0, 0x0, 0x0, 0x0, 0x0, 0x63, 0x0, &(0x7f00000000c0)='\x00', 0x0}, 0x48) r1 = bpf$MAP_CREATE(0x0, &(0x7f00000004c0)=@base={0x1, 0x4, 0x4, 0x8}, 0x48) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000340)={0x2, 0x6, &(0x7f0000000540)=ANY=[@ANYBLOB="1802000000000000000000000000000018110000", @ANYRES32=r1, @ANYBLOB="0000000000000000850000009d00000095"], &(0x7f0000000000)='syzkaller\x00'}, 0x90) 592.552746ms ago: executing program 4 (id=20807): r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = bpf$BPF_PROG_WITH_BTFID_LOAD(0x5, &(0x7f00000003c0)=@bpf_lsm={0x1e, 0x3, &(0x7f0000000040)=@framed, &(0x7f0000000280)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x24}, 0x80) bpf$BPF_PROG_ATTACH(0x8, &(0x7f0000000340)={@cgroup, r1, 0x24}, 0x14) r2 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a) ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f0000000000)={'bridge0\x00', 0x0}) sendmsg$nl_route(r0, &(0x7f0000000100)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000080)=ANY=[@ANYBLOB="2400000070000100000000000000000007000000", @ANYRES32=r3, @ANYBLOB="0c000280f5"], 0x24}}, 0x0) 510.122934ms ago: executing program 8 (id=20808): sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, &(0x7f00000003c0)={&(0x7f00000002c0)=@ipv6_getroute={0x34, 0x1a, 0x10, 0x70bd29, 0x0, {0xa, 0x0, 0x0, 0x0, 0x0, 0x0, 0xff}, [@RTA_PRIORITY={0x8, 0x6, 0x4}, @RTA_OIF={0x8}, @RTA_MARK={0x8}]}, 0x34}}, 0x20000000) r0 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000180)={&(0x7f00000002c0)=ANY=[@ANYBLOB="3400000040000701fcffffff00000100017c0000040042800c0001800600060065580000100002800c0003"], 0x34}, 0x1, 0x0, 0x0, 0x4048011}, 0xc000) r1 = socket(0x10, 0x803, 0x0) ioctl$PPPIOCSMRU(r1, 0x40047452, &(0x7f0000000000)=0x4) sendmsg$IPVS_CMD_SET_INFO(r1, &(0x7f0000000b00)={0x0, 0x0, &(0x7f0000000ac0)={0x0, 0x14}, 0x1, 0x0, 0x0, 0x400c050}, 0x0) r2 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r1, &(0x7f0000000340)={&(0x7f0000000180)={0x10, 0x0, 0x0, 0x40000}, 0xc, &(0x7f00000002c0)={&(0x7f0000000240)=@deltaction={0x74, 0x31, 0x10, 0x70bd2a, 0x25dfdbfc, {}, [@TCA_ACT_TAB={0x3c, 0x1, [{0x10, 0x19, 0x0, 0x0, @TCA_ACT_KIND={0x9, 0x1, 'vlan\x00'}}, {0x10, 0xc, 0x0, 0x0, @TCA_ACT_KIND={0xb, 0x1, 'mirred\x00'}}, {0xc, 0x16, 0x0, 0x0, @TCA_ACT_KIND={0x7, 0x1, 'xt\x00'}}, {0xc, 0xc, 0x0, 0x0, @TCA_ACT_INDEX={0x8, 0x3, 0x1ff}}]}, @TCA_ACT_TAB={0x24, 0x1, [{0xc, 0xd, 0x0, 0x0, @TCA_ACT_INDEX={0x8, 0x3, 0x2}}, {0x14, 0xe, 0x0, 0x0, @TCA_ACT_KIND={0xd, 0x1, 'connmark\x00'}}]}]}, 0x74}, 0x1, 0x0, 0x0, 0x4000}, 0x90) recvmsg(r2, &(0x7f0000000680)={&(0x7f0000000440)=@sco={0x1f, @none}, 0x80, &(0x7f0000000540)=[{&(0x7f0000000b40)=""/4096, 0x1000}, {&(0x7f0000000380)=""/54, 0x36}], 0x2, &(0x7f0000000580)=""/240, 0xf0}, 0x23) sendmsg$nl_route(r2, &(0x7f0000000080)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f00000004c0)=ANY=[@ANYBLOB="50000000010400000000fedbdf25000000000000", @ANYRES32=0x0, @ANYBLOB="00000000000000001c0012800b00010067656e65766500000c00028005000800010000001400030067656e65766531000000000000000000"], 0x50}}, 0x4000000) getsockname$packet(r1, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route(r1, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000300)={&(0x7f00000003c0)=@newlink={0x44, 0x10, 0xfffffd1f, 0xfffffffc, 0x80, {0x0, 0x0, 0x0, 0x0, 0x0, 0x3f00}, [@IFLA_LINKINFO={0x1c, 0x12, 0x0, 0x1, @ip6gretap={{0xe}, {0x8, 0x2, 0x0, 0x1, [@IFLA_GRE_COLLECT_METADATA={0x4}]}}}, @IFLA_MASTER={0x8, 0xa, r3}]}, 0x44}, 0x1, 0x0, 0x0, 0x2000c0c1}, 0x40000) r4 = openat$cgroup_ro(0xffffffffffffffff, &(0x7f0000000040)='blkio.bfq.io_queued\x00', 0x0, 0x0) socket$nl_route(0x10, 0x3, 0x0) r5 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r6 = syz_genetlink_get_family_id$nl802154(&(0x7f00000006c0), 0xffffffffffffffff) r7 = socket$l2tp(0x2, 0x2, 0x73) setsockopt$IPT_SO_SET_REPLACE(r7, 0x0, 0x40, &(0x7f0000000440)=@mangle={'mangle\x00', 0x44, 0x6, 0x3c8, 0x1c8, 0x1c8, 0x98, 0x0, 0x98, 0x330, 0x330, 0x330, 0x330, 0x330, 0x6, 0x0, {[{{@ip={@multicast1, @dev={0xac, 0x14, 0x14, 0x13}, 0xff, 0xff000000, 'pim6reg1\x00', 'bridge_slave_0\x00', {}, {0xff}, 0x88, 0x3}, 0x0, 0x70, 0x98}, @TTL={0x28, 'TTL\x00', 0x0, {0x1, 0x9}}}, {{@ip={@private=0xa010100, @local, 0x7fffff80, 0x0, 'vcan0\x00', 'veth0_virt_wifi\x00', {}, {0xff}, 0x6}, 0x0, 0x70, 0x98}, @ECN={0x28, 'ECN\x00', 0x0, {0x10, 0x0, 0x2}}}, {{@uncond, 0x0, 0x70, 0x98}, @unspec=@CHECKSUM={0x28}}, {{@ip={@private=0xa010102, @multicast1, 0x0, 0xffffff00, 'syzkaller0\x00', 'bond0\x00'}, 0x0, 0x70, 0x98}, @unspec=@CHECKSUM={0x28}}, {{@uncond, 0x0, 0x70, 0xd0}, @common=@CLUSTERIP={0x60, 'CLUSTERIP\x00', 0x0, {0x0, @link_local={0x1, 0x80, 0xc2, 0x0, 0x0, 0x3}, 0xff, 0x2, [0x4, 0x36, 0x1d, 0x1c, 0x23, 0x1e, 0x2c, 0x7, 0x1e, 0x7, 0x2d, 0x37, 0x30, 0x9, 0x3b, 0x16], 0x0, 0x6, 0x2}}}], {{'\x00', 0x0, 0x70, 0x98}, {0x28}}}}, 0x428) ioctl$sock_SIOCGIFINDEX_802154(0xffffffffffffffff, 0x8933, &(0x7f0000000700)={'wpan4\x00', 0x0}) openat$nci(0xffffffffffffff9c, &(0x7f0000000080), 0x2, 0x0) sendmsg$NL802154_CMD_SET_TX_POWER(r5, &(0x7f0000000800)={&(0x7f0000000140)={0x10, 0x0, 0x0, 0x1}, 0xc, &(0x7f00000007c0)={&(0x7f0000000740)={0x54, r6, 0x400, 0x70bd2c, 0x25dfdbfc, {}, [@NL802154_ATTR_WPAN_PHY={0x8}, @NL802154_ATTR_WPAN_PHY={0x8}, @NL802154_ATTR_TX_POWER={0x8, 0xb, 0x2}, @NL802154_ATTR_IFINDEX={0x8}, @NL802154_ATTR_IFINDEX={0x8, 0x3, r8}, @NL802154_ATTR_TX_POWER={0x8, 0xb, 0x4}, @NL802154_ATTR_WPAN_PHY={0x8, 0x1, 0x2}, @NL802154_ATTR_TX_POWER={0x8, 0xb, 0x7fffffff}]}, 0x54}, 0x1, 0x0, 0x0, 0x800}, 0x20000800) r9 = socket$xdp(0x2c, 0x3, 0x0) setsockopt$XDP_RX_RING(r9, 0x11b, 0x2, 0x0, 0x0) write$nci(r4, &(0x7f0000000080)=@NCI_OP_CORE_RESET_NTF={0x0, 0x0, 0x3, 0x0, 0xc, {0x2, 0xa8, 0x20, 0xe8, 0xfe, 0x8}}, 0xc) 503.804586ms ago: executing program 0 (id=20809): sendmsg$nl_generic(0xffffffffffffffff, 0x0, 0xc000) r0 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="0e000000040000000800000005"], 0x48) close(0x3) r1 = bpf$MAP_CREATE(0x0, &(0x7f0000000080)=ANY=[@ANYBLOB="11000000040000000400000001"], 0x48) socket$kcm(0x2c, 0x3, 0x0) ioctl$F2FS_IOC_MOVE_RANGE(r0, 0xc020f509, &(0x7f0000000440)={0xffffffffffffffff, 0x1000, 0xfffffffffffffffb, 0x6}) r3 = socket$inet6_tcp(0xa, 0x1, 0x0) r4 = socket$inet6_sctp(0xa, 0x801, 0x84) sendto$inet6(r4, 0x0, 0x0, 0x0, &(0x7f0000000100)={0xa, 0x0, 0x0, @dev, 0x4}, 0x1c) shutdown(r4, 0x1) getsockopt$inet_sctp6_SCTP_MAXSEG(r4, 0x84, 0xd, &(0x7f0000000240), &(0x7f0000000280)=0x4) r5 = socket(0x10, 0x80002, 0x0) sendmsg$nl_route(r5, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000002c0)=ANY=[@ANYBLOB="1c0000005e00679a3601ffc4910710007e570966f4366ec9d4"], 0x1c}, 0x1, 0x0, 0x0, 0x4004}, 0x0) r6 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r6, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000200)=ANY=[@ANYBLOB="3000000010000100"/20, @ANYRES32=0x0, @ANYBLOB='\x00\x00\x00\x00\x00\x00\x00\x00\b\x00\n\x00', @ANYRES32=0x0, @ANYBLOB="08001b"], 0x30}}, 0x0) r7 = openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0) ioctl$TUNSETIFF(r7, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x1}) sendmsg$nl_route_sched(0xffffffffffffffff, 0x0, 0x4008000) recvmmsg$unix(r5, &(0x7f0000002380)=[{{0x0, 0x0, 0x0}}], 0x1, 0x0, 0x0) setsockopt$IP6T_SO_SET_ADD_COUNTERS(r3, 0x29, 0x41, &(0x7f0000000340)=ANY=[], 0x78) bpf$BPF_GET_BTF_INFO(0xf, &(0x7f00000008c0)={r2, 0x20, &(0x7f00000006c0)={&(0x7f0000000600)=""/172, 0xac, 0x0, &(0x7f0000000800)=""/172, 0xac}}, 0x10) bpf$PROG_LOAD(0x5, &(0x7f0000000200)={0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x10, 0xffffffff}, 0x94) bpf$MAP_GET_NEXT_KEY(0x2, &(0x7f0000000000)={r1, &(0x7f0000000140), &(0x7f0000000200)=""/221}, 0x20) r8 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x6, 0xc, &(0x7f00000001c0)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bc82000000000000a6020000f8ffffffb703000008000000b703000000000000850000003300000095"], &(0x7f0000000180)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @xdp, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000300)={r8, 0x18000000000002a0, 0xe, 0x0, &(0x7f0000000280)="b9ff03076804268c989e14f088a8", 0x0, 0x2, 0x60000000, 0x0, 0x0, 0x0, 0x0, 0x2}, 0x50) r9 = socket$nl_route(0x10, 0x3, 0x0) ioctl$FS_IOC_FIEMAP(0xffffffffffffffff, 0xc020660b, &(0x7f0000000a00)={0x8, 0x4, 0x4, 0x5, 0x4, 0x0, [{0x255, 0xaf, 0x3, '\x00', 0x44a}, {0x10000, 0x98, 0xffffffffffffff7f, '\x00', 0x1d00}, {0x9, 0xfffffffffffffffb, 0x7, '\x00', 0xb85}, {0x2, 0x1, 0x5, '\x00', 0x800}]}) sendmsg$nl_route(r9, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000080)=ANY=[@ANYRES8=r1], 0x20}, 0x1, 0x0, 0x0, 0x400c087}, 0x4040800) recvmmsg(0xffffffffffffffff, &(0x7f0000005ac0)=[{{0x0, 0x0, &(0x7f00000000c0)=[{&(0x7f0000000700)=""/218, 0xda}, {&(0x7f0000002680)=""/4138, 0x102a}, {&(0x7f0000000480)=""/99, 0x63}, {&(0x7f0000000500)=""/233, 0xe9}, {&(0x7f00000036c0)=""/247, 0xf7}, {&(0x7f0000000340)=""/250, 0xfa}], 0x6}, 0x5}], 0x1, 0x40000002, 0x0) recvmmsg(r9, &(0x7f0000005840), 0x4000000000000ef, 0x20dc, 0x0) 393.346312ms ago: executing program 4 (id=20810): r0 = socket$inet6_sctp(0xa, 0x1, 0x84) setsockopt(r0, 0x84, 0x81, &(0x7f00000002c0)="1a00000002000000", 0x8) getsockopt$inet_sctp6_SCTP_AUTH_ACTIVE_KEY(r0, 0x84, 0x18, &(0x7f0000000080), &(0x7f0000000100)=0x8) (async) r1 = socket$nl_route(0x10, 0x3, 0x0) mmap(&(0x7f0000000000/0x400000)=nil, 0x400000, 0x1, 0x41071, 0xffffffffffffffff, 0x0) r2 = socket$inet(0x2, 0x1, 0x0) setsockopt$MRT_DONE(r2, 0x0, 0xc9, 0x0, 0x0) (async) setsockopt$sock_int(r2, 0x1, 0xf, &(0x7f0000356ffc)=0xffffffffffffff40, 0x4) (async, rerun: 64) socket$kcm(0x10, 0x2, 0x4) (rerun: 64) r3 = socket$alg(0x26, 0x5, 0x0) bind$alg(r3, &(0x7f00000004c0)={0x26, 'skcipher\x00', 0x0, 0x0, 'cbc-twofish-3way\x00'}, 0x58) (async) r4 = accept4(r3, 0x0, 0x0, 0x80800) close(0x4) (async) close(r4) (async) r5 = socket(0xb, 0xa, 0x1) (async, rerun: 32) r6 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='memory.events\x00', 0x275a, 0x0) (rerun: 32) ioctl$sock_inet_sctp_SIOCINQ(r6, 0x541b, &(0x7f0000000040)) (async, rerun: 64) r7 = socket$nl_generic(0x10, 0x3, 0x10) (rerun: 64) r8 = syz_genetlink_get_family_id$ethtool(&(0x7f0000000240), 0xffffffffffffffff) (async) r9 = accept$packet(r5, &(0x7f0000000000)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @local}, &(0x7f00000000c0)=0x14) (async) r10 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) (async) r11 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r12 = syz_genetlink_get_family_id$ieee802154(&(0x7f0000000080), r11) sendmsg$IEEE802154_LLSEC_ADD_DEVKEY(r10, &(0x7f0000000180)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000080)={0x14, r12, 0x1, 0x70bd2a, 0x25dfdbfe}, 0x14}, 0x1, 0x0, 0x0, 0x200408c5}, 0x4004800) (async) ioctl$sock_SIOCADDRT(r9, 0x890b, &(0x7f0000000180)={0x0, @hci={0x1f, 0x1}, @hci={0x1f, 0x9, 0x1}, @ax25={0x3, @bcast, 0x3}, 0x55, 0x0, 0x0, 0x0, 0x8, &(0x7f0000000140)='veth0_to_hsr\x00', 0x9, 0x5, 0x8}) (async) r13 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r13, 0x0, 0xc000) (async) sendmsg$ETHTOOL_MSG_LINKINFO_SET(r7, &(0x7f0000000500)={0x0, 0x0, &(0x7f00000004c0)={&(0x7f0000000080)={0x3c, r8, 0x1, 0x70bd24, 0x25dfdbfe, {}, [@ETHTOOL_A_LINKINFO_HEADER={0x18, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'syz_tun\x00'}]}, @ETHTOOL_A_LINKINFO_PHYADDR={0x5, 0x3, 0x9}, @ETHTOOL_A_LINKINFO_TP_MDIX_CTRL={0x5, 0x5, 0x39}]}, 0x3c}, 0x1, 0x0, 0x0, 0x20009005}, 0x4000080) (async) sendmsg$nl_route(r1, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000340)={&(0x7f0000000540)=ANY=[@ANYBLOB="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", @ANYRES32=0x0], 0x18}, 0x1, 0x0, 0x0, 0x4040041}, 0x0) 387.153516ms ago: executing program 1 (id=20811): bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000600)={0x3, 0x3, &(0x7f0000000000)=ANY=[@ANYBLOB="7a0a00ff000000007110bc000000000095"], &(0x7f0000000480)='syzkaller\x00'}, 0x90) r0 = socket$alg(0x26, 0x5, 0x0) r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000200)={0x4, 0xe, &(0x7f0000001700)=ANY=[@ANYBLOB="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"], &(0x7f0000000340)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0x0, 0x10, &(0x7f0000000000), 0xfffffffffffffffe}, 0x48) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000080)={r1, 0x702, 0xe, 0x0, &(0x7f0000000100)="e4604f89ecdb33440008d4800800", 0x0, 0x8009, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x50) bind$alg(r0, &(0x7f0000000200)={0x26, 'skcipher\x00', 0x0, 0x0, 'cbc-serpent-sse2\x00'}, 0x58) setsockopt$ALG_SET_KEY(r0, 0x117, 0x1, 0x0, 0x0) r2 = accept4(r0, 0x0, 0x0, 0x0) sendmmsg$alg(r2, &(0x7f00000040c0)=[{0x0, 0x0, &(0x7f0000000900)=[{&(0x7f0000000280)="816154c6e71d9c750363f342744911ca45e32f393e977df3b37b8f315e8271e2", 0x20}, {&(0x7f0000002780)="1412db33722627433eac166190a979b24a252d244af8b27292b4576fc3b3806e0347778024e08aeabd5095bcb6435b0784bc039c894fdbad65262479b27ec7824d174849499dfdd7339b8a7aa1af2aa9354c0987bfc33778c11962190161c89b", 0x60}], 0x2, &(0x7f0000000540)=[@op={0x18, 0x117, 0x3, 0x1}], 0x18, 0x40088d5}], 0x1, 0x40) recvmmsg(r2, &(0x7f0000000980)=[{{0x0, 0x0, 0x0}, 0x7fff}, {{0x0, 0x0, &(0x7f0000000480)=[{&(0x7f0000000840)=""/116, 0x74}, {&(0x7f00000003c0)=""/129, 0x81}], 0x2}, 0x9}], 0x2, 0x10000, 0x0) 234.585316ms ago: executing program 3 (id=20812): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r0, &(0x7f000000c2c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000340)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a28000000000a0101000000005e1affd5020000000900010073797a300000000008000240000000032c000000030a01030000e6ff00000000020000000900010073797a30000000000900030073797a320000000014000000110001"], 0x7c}}, 0x0) r1 = socket(0x40000000015, 0x5, 0x0) bind$inet6(r1, &(0x7f0000000040)={0xa, 0x0, 0x0, @loopback}, 0x1c) bpf$MAP_CREATE(0x0, &(0x7f0000000000)=@base={0x10, 0xcb, 0x4, 0x8}, 0x50) connect$l2tp6(r1, &(0x7f0000000200)={0xa, 0x0, 0x8, @local, 0x200000, 0x2}, 0x20) sendto$inet6(r1, 0x0, 0x0, 0x0, &(0x7f0000000240)={0xa, 0x0, 0x0, @dev, 0xfffffffc}, 0x1c) sendmsg$NFT_BATCH(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000140)={{0x14, 0x10, 0x1, 0x0, 0x0, {0x7}}, [@NFT_MSG_NEWRULE={0x3c, 0x6, 0xa, 0xc0b, 0x0, 0x0, {0x2}, [@NFTA_RULE_CHAIN={0x9, 0x2, 'syz2\x00'}, @NFTA_RULE_TABLE={0x9, 0x1, 'syz0\x00'}, @NFTA_RULE_EXPRESSIONS={0x10, 0x4, 0x0, 0x1, [{0xc, 0x1, 0x0, 0x1, @dup={{0x8}, @void}}]}]}], {0x14}}, 0x64}}, 0x0) r2 = socket$kcm(0x10, 0x2, 0x10) sendmsg$kcm(r2, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000140)=[{&(0x7f0000000100)="1400000016000b63d25a80648c2594f90424fc60", 0x14}], 0x1, 0x0, 0x0, 0x600}, 0x0) socket$nl_netfilter(0x10, 0x3, 0xc) (async) sendmsg$NFT_BATCH(r0, &(0x7f000000c2c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000340)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a28000000000a0101000000005e1affd5020000000900010073797a300000000008000240000000032c000000030a01030000e6ff00000000020000000900010073797a30000000000900030073797a320000000014000000110001"], 0x7c}}, 0x0) (async) socket(0x40000000015, 0x5, 0x0) (async) bind$inet6(r1, &(0x7f0000000040)={0xa, 0x0, 0x0, @loopback}, 0x1c) (async) bpf$MAP_CREATE(0x0, &(0x7f0000000000)=@base={0x10, 0xcb, 0x4, 0x8}, 0x50) (async) connect$l2tp6(r1, &(0x7f0000000200)={0xa, 0x0, 0x8, @local, 0x200000, 0x2}, 0x20) (async) sendto$inet6(r1, 0x0, 0x0, 0x0, &(0x7f0000000240)={0xa, 0x0, 0x0, @dev, 0xfffffffc}, 0x1c) (async) sendmsg$NFT_BATCH(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000140)={{0x14, 0x10, 0x1, 0x0, 0x0, {0x7}}, [@NFT_MSG_NEWRULE={0x3c, 0x6, 0xa, 0xc0b, 0x0, 0x0, {0x2}, [@NFTA_RULE_CHAIN={0x9, 0x2, 'syz2\x00'}, @NFTA_RULE_TABLE={0x9, 0x1, 'syz0\x00'}, @NFTA_RULE_EXPRESSIONS={0x10, 0x4, 0x0, 0x1, [{0xc, 0x1, 0x0, 0x1, @dup={{0x8}, @void}}]}]}], {0x14}}, 0x64}}, 0x0) (async) socket$kcm(0x10, 0x2, 0x10) (async) sendmsg$kcm(r2, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000140)=[{&(0x7f0000000100)="1400000016000b63d25a80648c2594f90424fc60", 0x14}], 0x1, 0x0, 0x0, 0x600}, 0x0) (async) 233.932695ms ago: executing program 8 (id=20813): r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f00000000c0), 0xffffffffffffffff) (async) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f0000000100)={'wlan0\x00', 0x0}) sendmsg$NL80211_CMD_SET_TX_BITRATE_MASK(r0, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000240)={&(0x7f00000002c0)=ANY=[@ANYBLOB="d27e1eea", @ANYRES16=r1, @ANYBLOB="010000000000000000003900000008000300", @ANYRES32=r2, @ANYBLOB="24005a8020000180140005000b00fdff02000300ff0f0600010404000500040002000000"], 0x40}}, 0x0) 107.371306ms ago: executing program 8 (id=20814): r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000040)='blkio.bfq.idle_time\x00', 0x26e1, 0x0) r1 = socket$kcm(0x2, 0x3, 0x2) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000140)={0x0, 0x0, &(0x7f00000001c0)={0x0}}, 0x0) r2 = socket(0x10, 0x3, 0x0) r3 = socket(0x10, 0x803, 0x0) sendmsg$NL802154_CMD_DEL_SEC_DEVKEY(0xffffffffffffffff, &(0x7f0000000e40)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000200)=ANY=[@ANYBLOB='8\x00\x00\x00', @ANYRES16=0x0, @ANYBLOB="0187b3ec0ef92e66bf00", @ANYRES32=0x0, @ANYBLOB="1c002f800c00020000000000000000000c0003800800010000000000"], 0x38}, 0x1, 0x0, 0x0, 0x20000041}, 0xc890) getsockname$packet(r3, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x9) sendmsg$nl_route(r3, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000200)=ANY=[@ANYBLOB="a000000010003b0e2a1a86eb2636037f00000000", @ANYRES32=r4, @ANYBLOB="0200000000008000800012000800010076746936740002"], 0xa0}}, 0x0) unshare(0x6060600) r5 = bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000780)={0x2, 0x4, 0x8, 0x1, 0x80, 0x0, 0x0, '\x00', 0x0, 0x0, 0x0, 0x0, 0x1}, 0x50) bpf$BPF_MAP_LOOKUP_AND_DELETE_ELEM(0x15, &(0x7f0000000080)={r5, 0x0, 0x0, 0x4}, 0x20) bpf$PROG_LOAD(0x5, &(0x7f0000000440)={0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x40f00, 0x28, '\x00', 0x0, @sched_cls=0x2f, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x1, 0x0, &(0x7f00000002c0)=[{0x5, 0x3, 0xa, 0xa}], 0x10, 0x7ff}, 0x94) r6 = socket$netlink(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r6, 0x8933, &(0x7f00000000c0)={'bridge0\x00', 0x0}) sendmsg$nl_route(r6, &(0x7f0000000200)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000280)=ANY=[@ANYBLOB="480000001c00110c0000001400000f0007000000", @ANYRES32=r7, @ANYBLOB="800202000a000200577f0000aabb000020000e80050001008f000000050001000100000004000200050001"], 0x48}}, 0x0) sendmsg$inet(0xffffffffffffffff, &(0x7f0000000500)={0x0, 0x0, &(0x7f0000000000)=[{&(0x7f0000000540)="f478e54fa1f303d644f8f0aa7d25964cfbafa83a5afba8d55d196c2ef53ecc679093a61c037376120fe92c739898c900fa33dbb111804d4cae66adcf3826c63de1748f304e745f190d65fd3df00813ba2f2cb10b8259bfa76e862964a19e29217a7c5104e63e95cc6c41a59a32de41ae20a17a2eda65cca7854ca9803a41ed7d2e0eada0cc8063d22a21ee1a8306a6a37989ee5aff0c6d670ab4e0a4c289717ed88d74f1c11af2c0663e81f4bf1fe86adc6745ebbf80d8a331550781e62b1e4b", 0xc0}, {&(0x7f00000003c0)="5bd1694934b374819022b31158a31e0173edb894421e78af4a5d978c9436b4c76e1cbfe3430d073b492cce1f2e5d01553f2b56de9417be2269e1bd0b14a8b2e098f2c55ec388f5323479b4ea31f19957e87900666b5f9d1b3a08d542ab0539bd4c3e37f1e7029990b676e4", 0x6b}, {&(0x7f0000000600)="5d7c5a1fff5ac90a17f9a75eb68fc79734d5821eb4824b8170cfc895f2ec8310bffe5111914616b1ac7eafb0b55da320bdfb7fda7b05d7fe1367d52b195a5a5c8db346d1d2d33646bc89834315d170c8e82c980279939efea01837c606791bd1f7d8f94a094612fb976021d39eb9c3", 0x6f}, {&(0x7f0000000680)="2ce563142efeff0bdf35cd79fdbc0de1ddd3d366d041bc14588cb4cbbdd6122ff65b622201710b0ade01605c9c921ce99e70bc7d1ba303fec01b5099ab61b5270b7f470d447044de89f86475989105fbf6e09fda1fe1e9cedc4a7baa9bb411497e16ad305d102b5f36acafaee48dcd7178540574ff", 0x75}], 0x4}, 0x0) r8 = syz_genetlink_get_family_id$tipc2(&(0x7f0000000700), r3) sendmsg$TIPC_NL_SOCK_GET(r2, &(0x7f0000000a00)={&(0x7f0000000240)={0x10, 0x0, 0x0, 0x20000}, 0xc, &(0x7f0000000740)={&(0x7f0000000880)={0x13c, r8, 0x1, 0x70bd28, 0x25dfdbfe, {}, [@TIPC_NLA_BEARER={0x18, 0x1, 0x0, 0x1, [@TIPC_NLA_BEARER_PROP={0xc, 0x2, 0x0, 0x1, [@TIPC_NLA_PROP_WIN={0x8, 0x3, 0x94}]}, @TIPC_NLA_BEARER_DOMAIN={0x8, 0x3, 0xffffff00}]}, @TIPC_NLA_LINK={0x74, 0x4, 0x0, 0x1, [@TIPC_NLA_LINK_NAME={0x13, 0x1, 'broadcast-link\x00'}, @TIPC_NLA_LINK_PROP={0x2c, 0x7, 0x0, 0x1, [@TIPC_NLA_PROP_WIN={0x8, 0x3, 0x2}, @TIPC_NLA_PROP_MTU={0x8, 0x4, 0x401}, @TIPC_NLA_PROP_MTU={0x8, 0x4, 0x3}, @TIPC_NLA_PROP_TOL={0x8, 0x2, 0x4}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x11}]}, @TIPC_NLA_LINK_NAME={0x9, 0x1, 'syz1\x00'}, @TIPC_NLA_LINK_PROP={0x24, 0x7, 0x0, 0x1, [@TIPC_NLA_PROP_MTU={0x8, 0x4, 0x3}, @TIPC_NLA_PROP_MTU={0x8, 0x4, 0x7}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x12}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x18}]}]}, @TIPC_NLA_NET={0xc, 0x7, 0x0, 0x1, [@TIPC_NLA_NET_ADDR={0x8, 0x2, 0x4}]}, @TIPC_NLA_LINK={0x4}, @TIPC_NLA_SOCK={0x18, 0x2, 0x0, 0x1, [@TIPC_NLA_SOCK_ADDR={0x8}, @TIPC_NLA_SOCK_ADDR={0x8, 0x1, 0x6}, @TIPC_NLA_SOCK_HAS_PUBL={0x4}]}, @TIPC_NLA_MEDIA={0x74, 0x5, 0x0, 0x1, [@TIPC_NLA_MEDIA_PROP={0x1c, 0x2, 0x0, 0x1, [@TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x1e}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x16}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x18}]}, @TIPC_NLA_MEDIA_NAME={0x8, 0x1, 'eth\x00'}, @TIPC_NLA_MEDIA_NAME={0x8, 0x1, 'udp\x00'}, @TIPC_NLA_MEDIA_PROP={0x44, 0x2, 0x0, 0x1, [@TIPC_NLA_PROP_MTU={0x8, 0x4, 0x9}, @TIPC_NLA_PROP_MTU={0x8, 0x4, 0x9}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0xc}, @TIPC_NLA_PROP_TOL={0x8, 0x2, 0x7}, @TIPC_NLA_PROP_WIN={0x8, 0x3, 0x3}, @TIPC_NLA_PROP_MTU={0x8, 0x4, 0x4}, @TIPC_NLA_PROP_TOL={0x8, 0x2, 0x2}, @TIPC_NLA_PROP_WIN={0x8, 0x3, 0x6}]}]}]}, 0x13c}, 0x1, 0x0, 0x0, 0x4004041}, 0x0) openat$tun(0xffffffffffffff9c, 0x0, 0x410001, 0x0) sendmmsg$alg(r2, &(0x7f0000000140), 0x4924b68, 0x0) setsockopt$sock_attach_bpf(r1, 0x1, 0x3e, &(0x7f00000002c0)=r0, 0x4) r9 = socket$kcm(0x10, 0x2, 0x4) r10 = socket$inet(0xa, 0x801, 0x84) connect$inet(r10, &(0x7f0000000340)={0x2, 0x0, @remote={0xac, 0x14, 0xffffffffffffffff}}, 0x10) listen(r10, 0xffffffff) r11 = accept4(r10, 0x0, 0x0, 0x0) getsockopt$inet_sctp6_SCTP_PR_SUPPORTED(r11, 0x84, 0x71, &(0x7f0000000300)={0x0, 0xa}, &(0x7f0000000380)=0x8) bpf$MAP_CREATE(0x0, &(0x7f0000000800)=@bloom_filter={0x1e, 0x4, 0xffffffe4, 0x2, 0x2001, 0x1, 0x1, '\x00', r7, 0xffffffffffffffff, 0x5, 0x0, 0x0, 0x6}, 0x50) sendmsg$kcm(r9, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000080)=[{&(0x7f0000000100)="4c000000140097f87059ae08060c040002ff0f0200000000000001870182fa73a69d35a2cca84708f7abca1b4e7d06a6bd7c493872f750375ed08a560400000003c48f93b82a03000000461e", 0x4c}], 0x1}, 0x0) 104.143421ms ago: executing program 1 (id=20815): r0 = socket$inet6(0xa, 0x80001, 0x0) r1 = socket$inet6_tcp(0xa, 0x1, 0x0) r2 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) ioctl$HCIINQUIRY(r2, 0x800448d4, &(0x7f0000000200)={0xffffffffffffffff, 0x200, "00fa00"}) bind$inet6(r1, &(0x7f0000000000)={0xa, 0x4e22, 0x0, @local, 0xb}, 0x18) setsockopt$inet6_MCAST_JOIN_GROUP(r0, 0x29, 0x2a, &(0x7f0000fca000)={0x100000001, {{0xa, 0x0, 0x0, @mcast1}}}, 0x88) setsockopt$inet6_MCAST_MSFILTER(r0, 0x29, 0x30, &(0x7f00000000c0)=ANY=[@ANYBLOB="12000000000000000a00000000000000ff010000000000000000000000000001000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000001"], 0x90) setsockopt$MRT_INIT(0xffffffffffffffff, 0x0, 0xc8, &(0x7f0000000040), 0x4) 0s ago: executing program 1 (id=20816): sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000040)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000200)=@newtaction={0x48, 0x30, 0x871a15abc695f839, 0x3, 0x0, {}, [{0x34, 0x1, [@m_ctinfo={0x30, 0x1, 0x0, 0x0, {{0xb}, {0x4}, {0x4}, {0xc, 0x7, {0x1, 0x1}}, {0xc, 0x8, {0x0, 0x1}}}}]}]}, 0x48}}, 0x8000) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000340)={0x18, 0x4, &(0x7f0000000000)=@framed={{}, [@generic={0x81, 0xb}]}, 0x0}, 0x94) r0 = socket$inet6_udp(0xa, 0x2, 0x0) bind$inet6(r0, &(0x7f0000000000)={0xa, 0xe22, 0x0, @empty}, 0x1c) connect$inet6(r0, &(0x7f0000000140)={0xa, 0x4e20, 0x8, @remote, 0xb}, 0x1c) syz_emit_ethernet(0xfef3, &(0x7f0000000200)=ANY=[@ANYBLOB="aaaaaaaaaaaaaaaaaaaaaaaa86dd60010b0300641100fe8000000000000000000000000000bbfe8000000000000000000000000000aa4e200e22"], 0x0) kernel console output (not intermixed with test programs): link: 'syz.7.18779': attribute type 1 has an invalid length. [ 1536.050872][ T7436] netlink: 'syz.7.18779': attribute type 2 has an invalid length. [ 1536.146296][ T7456] IPv6: RTM_NEWROUTE with no NLM_F_CREATE or NLM_F_REPLACE [ 1536.153602][ T7456] IPv6: NLM_F_CREATE should be set when creating new route [ 1536.160861][ T7456] IPv6: NLM_F_CREATE should be set when creating new route [ 1536.174782][ T7456] IPv6: RTM_NEWROUTE with no NLM_F_CREATE or NLM_F_REPLACE [ 1536.394426][ T7466] sctp: [Deprecated]: syz.1.18787 (pid 7466) Use of struct sctp_assoc_value in delayed_ack socket option. [ 1536.394426][ T7466] Use struct sctp_sack_info instead [ 1536.475596][T18610] net_ratelimit: 27 callbacks suppressed [ 1536.475612][T18610] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1536.650025][ T7148] netdevsim netdevsim4 eth8 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 1536.753737][ T7148] netdevsim netdevsim4 eth7 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 1536.882648][ T7148] netdevsim netdevsim4 eth6 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 1537.029967][ T7148] netdevsim netdevsim4 eth5 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 1537.194721][T18597] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1537.416524][ T7148] netdevsim netdevsim4 netdevsim0: renamed from eth0 [ 1537.454927][ T7148] netdevsim netdevsim4 netdevsim1: renamed from eth1 [ 1537.477651][ T7148] netdevsim netdevsim4 netdevsim2: renamed from eth2 [ 1537.509293][ T7148] netdevsim netdevsim4 netdevsim3: renamed from eth3 [ 1537.791914][ T7148] 8021q: adding VLAN 0 to HW filter on device bond0 [ 1537.870284][ T7148] 8021q: adding VLAN 0 to HW filter on device team0 [ 1537.901370][T30242] bridge0: port 1(bridge_slave_0) entered blocking state [ 1537.908561][T30242] bridge0: port 1(bridge_slave_0) entered forwarding state [ 1537.945962][T30242] bridge0: port 2(bridge_slave_1) entered blocking state [ 1537.953190][T30242] bridge0: port 2(bridge_slave_1) entered forwarding state [ 1538.240952][ T5877] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1538.367464][ T7148] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 1538.925264][ T7148] veth0_vlan: entered promiscuous mode [ 1538.957993][ T7148] veth1_vlan: entered promiscuous mode [ 1539.031154][ T7148] veth0_macvtap: entered promiscuous mode [ 1539.059881][ T7588] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1539.069249][ C1] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1539.099889][ T7588] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1539.109435][ C1] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1539.129541][ T7148] veth1_macvtap: entered promiscuous mode [ 1539.185759][ T7148] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 1539.245897][ T7148] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 1539.285981][ T5877] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1539.300848][T11211] netdevsim netdevsim4 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 1539.314107][T11211] netdevsim netdevsim4 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 1539.324731][T11211] netdevsim netdevsim4 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 1539.338981][T11211] netdevsim netdevsim4 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 1539.543962][ T7071] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1539.560375][T24531] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 1539.579702][T24531] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 1539.692260][ T7616] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 1539.701682][ T7616] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 1539.726564][ T7616] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 1539.738731][ T7616] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 1539.756694][ T7618] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1539.841028][ T3010] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 1539.853783][ T3010] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 1539.974751][ T7623] sctp: [Deprecated]: syz.4.18684 (pid 7623) Use of struct sctp_assoc_value in delayed_ack socket option. [ 1539.974751][ T7623] Use struct sctp_sack_info instead [ 1540.355323][ T7644] netlink: 'syz.4.18838': attribute type 9 has an invalid length. [ 1540.408104][ T7647] netlink: 'syz.1.18840': attribute type 1 has an invalid length. [ 1541.051110][ T7700] bond0: (slave rose0): Error: Device is in use and cannot be enslaved [ 1541.192590][ T7713] __nla_validate_parse: 18 callbacks suppressed [ 1541.192608][ T7713] netlink: 4 bytes leftover after parsing attributes in process `syz.7.18858'. [ 1541.215751][ T7713] netlink: 68 bytes leftover after parsing attributes in process `syz.7.18858'. [ 1541.228707][ T7713] netlink: 8 bytes leftover after parsing attributes in process `syz.7.18858'. [ 1541.238953][ T7713] netlink: 12 bytes leftover after parsing attributes in process `syz.7.18858'. [ 1541.239442][ T7715] netlink: 'syz.4.18860': attribute type 1 has an invalid length. [ 1541.258208][ T7715] netlink: 24 bytes leftover after parsing attributes in process `syz.4.18860'. [ 1541.328148][ T7717] netlink: 256 bytes leftover after parsing attributes in process `syz.1.18861'. [ 1541.360983][ T7723] netlink: 212368 bytes leftover after parsing attributes in process `syz.4.18860'. [ 1541.427454][ T7720] netlink: 4 bytes leftover after parsing attributes in process `syz.7.18862'. [ 1541.448560][ T7720] bridge_slave_0: left allmulticast mode [ 1541.456729][ T7720] bridge_slave_0: left promiscuous mode [ 1541.462796][ T7720] bridge0: port 1(bridge_slave_0) entered disabled state [ 1542.088735][T18595] net_ratelimit: 22 callbacks suppressed [ 1542.088753][T18595] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1542.117282][ T7750] 8021q: VLANs not supported on syzkaller1 [ 1542.173840][ T7757] netlink: 'syz.4.18869': attribute type 3 has an invalid length. [ 1542.406267][ T7768] netlink: 12 bytes leftover after parsing attributes in process `syz.4.18872'. [ 1542.466097][ T7771] netlink: 20 bytes leftover after parsing attributes in process `syz.8.18873'. [ 1542.555795][ T7071] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1543.200471][T18595] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1544.002428][T18596] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1544.245881][T18597] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1545.135419][ T7787] tc_dump_action: action bad kind [ 1545.278249][T18597] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1545.324177][ T7799] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 1545.347033][ T7799] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 1545.597632][T18596] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1545.828536][ T7821] netlink: 'syz.4.18889': attribute type 2 has an invalid length. [ 1545.884808][ T7799] netdevsim netdevsim8 netdevsim0: left promiscuous mode [ 1545.961215][ T7799] mac80211_hwsim hwsim159 wlan1: left allmulticast mode [ 1545.970449][ T7799] gtp0: left promiscuous mode [ 1545.975870][ T7799] gtp0: left allmulticast mode [ 1545.994913][ T7799] gretap1: left promiscuous mode [ 1545.999884][ T7799] gretap1: left allmulticast mode [ 1546.009818][ T7799] bond1: left promiscuous mode [ 1546.017951][ T7799] tipc: Resetting bearer [ 1546.025331][ T7799] syzkaller0: left promiscuous mode [ 1546.030537][ T7799] syzkaller0: left allmulticast mode [ 1546.059533][ T7799] bridge4: left promiscuous mode [ 1546.065326][ T7799] bridge4: left allmulticast mode [ 1546.135832][T15345] netdevsim netdevsim8 netdevsim0: unset [0, 0] type 1 family 0 port 8472 - 0 [ 1546.151545][T15345] netdevsim netdevsim8 netdevsim0: unset [1, 0] type 2 family 0 port 6081 - 0 [ 1546.189261][T15345] netdevsim netdevsim8 netdevsim1: unset [0, 0] type 1 family 0 port 8472 - 0 [ 1546.216565][T15345] netdevsim netdevsim8 netdevsim1: unset [1, 0] type 2 family 0 port 6081 - 0 [ 1546.246659][T15345] netdevsim netdevsim8 netdevsim2: unset [0, 0] type 1 family 0 port 8472 - 0 [ 1546.259099][T15345] netdevsim netdevsim8 netdevsim2: unset [1, 0] type 2 family 0 port 6081 - 0 [ 1546.319227][T15345] netdevsim netdevsim8 netdevsim3: unset [0, 0] type 1 family 0 port 8472 - 0 [ 1546.325415][ T7833] __nla_validate_parse: 3 callbacks suppressed [ 1546.325433][ T7833] netlink: 212408 bytes leftover after parsing attributes in process `syz.7.18891'. [ 1546.341603][T15345] netdevsim netdevsim8 netdevsim3: unset [1, 0] type 2 family 0 port 6081 - 0 [ 1546.347016][T18597] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1546.374656][ T7835] veth0: entered promiscuous mode [ 1546.381005][ T7835] netlink: 36 bytes leftover after parsing attributes in process `syz.4.18893'. [ 1546.464972][ T7839] netlink: 12 bytes leftover after parsing attributes in process `syz.4.18893'. [ 1546.481228][ T7839] block nbd0: Unsupported socket: should be TCP or UNIX. [ 1546.553708][ C0] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1546.580450][ T7843] netlink: 4 bytes leftover after parsing attributes in process `syz.1.18896'. [ 1546.672073][ T7848] netlink: 'syz.8.18898': attribute type 4 has an invalid length. [ 1546.680979][ T7848] netlink: 'syz.8.18898': attribute type 4 has an invalid length. [ 1546.815111][ T7834] veth0: left promiscuous mode [ 1546.834799][ T7851] ksmbd: Unknown IPC event: 3, ignore. [ 1546.965455][ T7853] netlink: 1044 bytes leftover after parsing attributes in process `syz.1.18901'. [ 1547.007407][ T7854] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1547.080670][ T7861] netlink: 28 bytes leftover after parsing attributes in process `syz.1.18902'. [ 1547.121164][ T7861] netlink: 28 bytes leftover after parsing attributes in process `syz.1.18902'. [ 1547.246365][ T7874] netlink: 8 bytes leftover after parsing attributes in process `syz.7.18907'. [ 1547.354480][T18593] net_ratelimit: 3 callbacks suppressed [ 1547.354498][T18593] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1547.375795][ T7884] netlink: 'syz.7.18907': attribute type 83 has an invalid length. [ 1547.521083][ T7890] netlink: 8 bytes leftover after parsing attributes in process `syz.1.18909'. [ 1547.536354][ T7890] netlink: 'syz.1.18909': attribute type 1 has an invalid length. [ 1547.587048][ T7890] bond1: entered promiscuous mode [ 1547.594898][ T7890] bond1: entered allmulticast mode [ 1547.600562][ T7890] 8021q: adding VLAN 0 to HW filter on device bond1 [ 1547.670954][ T7892] netlink: 28 bytes leftover after parsing attributes in process `syz.8.18910'. [ 1547.689983][ T7892] bridge0: entered promiscuous mode [ 1547.703566][ T7892] syz_tun: entered promiscuous mode [ 1547.713278][ T7892] debugfs: 'hsr1' already exists in 'hsr' [ 1547.719035][ T7892] Cannot create hsr debugfs directory [ 1547.732424][ T7892] hsr1: Slave A (bridge0) is not up; please bring it up to get a fully working HSR network [ 1547.743292][ T7892] hsr1: Slave B (syz_tun) is not up; please bring it up to get a fully working HSR network [ 1547.973099][ T7908] xt_AUDIT: Audit type out of range (valid range: 0..2) [ 1548.394149][T18593] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1548.394780][ T7930] vlan3: entered promiscuous mode [ 1548.430326][ T7930] vlan3: entered allmulticast mode [ 1548.448844][ T7930] hsr_slave_1: entered allmulticast mode [ 1548.536367][ T7944] Cannot find add_set index 65532 as target [ 1548.653755][T18596] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1549.060622][ T7980] netlink: 'syz.7.18938': attribute type 12 has an invalid length. [ 1549.299962][ T7999] tipc: Started in network mode [ 1549.306132][ T7999] tipc: Node identity 72e41cfc5a0d, cluster identity 4711 [ 1549.313938][ T7999] tipc: Enabled bearer , priority 0 [ 1549.382726][ T7999] syzkaller0: entered promiscuous mode [ 1549.389000][ T7999] syzkaller0: entered allmulticast mode [ 1549.396133][ T7999] tipc: Resetting bearer [ 1549.402636][ T8008] openvswitch: netlink: Flow set message rejected, Key attribute missing. [ 1549.405377][ T8009] openvswitch: netlink: Flow set message rejected, Key attribute missing. [ 1549.421682][ T7998] tipc: Resetting bearer [ 1549.439822][T18595] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1549.669547][ T8017] Bluetooth: MGMT ver 1.23 [ 1550.489066][T18593] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1551.518479][T18597] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1551.679118][T18596] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1552.011265][ T7998] tipc: Disabling bearer [ 1552.164525][T18610] tipc: Node number set to 686365948 [ 1552.358134][ T8045] __nla_validate_parse: 8 callbacks suppressed [ 1552.358153][ T8045] netlink: 156 bytes leftover after parsing attributes in process `syz.7.18958'. [ 1552.388845][ T8050] netlink: 'syz.4.18956': attribute type 1 has an invalid length. [ 1552.396820][ T8049] netlink: 12 bytes leftover after parsing attributes in process `syz.1.18957'. [ 1552.560722][T18595] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1552.625937][ T8043] bond1: (slave gretap1): making interface the new active one [ 1552.658503][ T8043] bond1: (slave gretap1): Enslaving as an active interface with an up link [ 1552.712407][ T5152] Bluetooth: hci4: unexpected cc 0x0c03 length: 249 > 1 [ 1552.715905][ T8048] tipc: Enabling of bearer rejected, already enabled [ 1552.730358][ T5152] Bluetooth: hci4: unexpected cc 0x1003 length: 249 > 9 [ 1552.743940][ T5152] Bluetooth: hci4: unexpected cc 0x1001 length: 249 > 9 [ 1552.752024][ T5152] Bluetooth: hci4: unexpected cc 0x0c23 length: 249 > 4 [ 1552.761232][ T5152] Bluetooth: hci4: unexpected cc 0x0c38 length: 249 > 2 [ 1552.767607][ T8048] syzkaller0: entered promiscuous mode [ 1552.797488][ T8048] syzkaller0: entered allmulticast mode [ 1552.894755][ T8061] wlan0 speed is unknown, defaulting to 1000 [ 1552.904503][ T8061] ÿÿÿÿÿÿ speed is unknown, defaulting to 1000 [ 1552.942135][ T8069] netlink: 8 bytes leftover after parsing attributes in process `syz.4.18962'. [ 1552.971961][ T8069] netlink: 4 bytes leftover after parsing attributes in process `syz.4.18962'. [ 1553.097409][ T8074] netlink: 12 bytes leftover after parsing attributes in process `syz.7.18964'. [ 1553.140473][ T8074] smc: net device geneve0 erased user defined pnetid SYZ0 [ 1553.369525][ T8094] sctp: [Deprecated]: syz.4.18973 (pid 8094) Use of int in maxseg socket option. [ 1553.369525][ T8094] Use struct sctp_assoc_value instead [ 1553.398318][ T8061] lo speed is unknown, defaulting to 1000 [ 1553.603506][T18595] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1553.611764][T18610] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1554.450939][ T8061] chnl_net:caif_netlink_parms(): no params data found [ 1554.579749][ T8168] netlink: 8 bytes leftover after parsing attributes in process `syz.1.18989'. [ 1554.595502][ T8168] netlink: 4 bytes leftover after parsing attributes in process `syz.1.18989'. [ 1554.597301][ T8173] netlink: 14 bytes leftover after parsing attributes in process `syz.8.18991'. [ 1554.621896][ T8175] netlink: 288 bytes leftover after parsing attributes in process `syz.4.18992'. [ 1554.650812][T18593] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1554.717652][T18596] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1554.718232][ T8179] netlink: 'syz.4.18993': attribute type 1 has an invalid length. [ 1554.877424][ T5468] Bluetooth: hci4: command tx timeout [ 1554.887415][ T8061] bridge0: port 1(bridge_slave_0) entered blocking state [ 1554.895347][ T8061] bridge0: port 1(bridge_slave_0) entered disabled state [ 1554.902897][ T8061] bridge_slave_0: entered allmulticast mode [ 1554.911004][ T8061] bridge_slave_0: entered promiscuous mode [ 1554.922372][ T8061] bridge0: port 2(bridge_slave_1) entered blocking state [ 1554.930188][ T8061] bridge0: port 2(bridge_slave_1) entered disabled state [ 1554.938085][ T8061] bridge_slave_1: entered allmulticast mode [ 1554.946930][ T8061] bridge_slave_1: entered promiscuous mode [ 1555.005629][ T8198] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 1555.011571][ T8195] netlink: 'syz.8.18997': attribute type 17 has an invalid length. [ 1555.082190][ T8061] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 1555.117371][ T8061] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 1555.260869][ T8061] team0: Port device team_slave_0 added [ 1555.320165][ T8061] team0: Port device team_slave_1 added [ 1555.327483][ T8212] netlink: 'syz.4.19004': attribute type 21 has an invalid length. [ 1555.344673][ T8212] netlink: 152 bytes leftover after parsing attributes in process `syz.4.19004'. [ 1555.396849][ T8061] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 1555.416463][ T8061] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 1555.452352][ T8061] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 1555.479112][ T8061] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 1555.488144][ T8061] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 1555.521042][ T8061] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 1555.548498][ T8226] vlan4: entered allmulticast mode [ 1555.554056][ T8226] hsr0: entered allmulticast mode [ 1555.559202][ T8226] hsr_slave_0: entered allmulticast mode [ 1555.651340][ T8061] hsr_slave_0: entered promiscuous mode [ 1555.667005][ T8061] hsr_slave_1: entered promiscuous mode [ 1555.684262][T18597] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1555.701567][ T8061] debugfs: 'hsr0' already exists in 'hsr' [ 1555.720864][ T8061] Cannot create hsr debugfs directory [ 1555.876390][ T8237] tipc: Enabled bearer , priority 0 [ 1555.895203][ T8237] syzkaller0: entered promiscuous mode [ 1555.900896][ T8237] syzkaller0: entered allmulticast mode [ 1555.951355][ T8237] tipc: Resetting bearer [ 1555.992686][ T8235] tipc: Resetting bearer [ 1556.052234][ T8235] tipc: Disabling bearer [ 1556.069688][ T8249] netlink: 'syz.1.19018': attribute type 1 has an invalid length. [ 1556.239157][ T8061] netdevsim netdevsim3 netdevsim3 (unregistering): unset [0, 0] type 1 family 0 port 256 - 0 [ 1556.255465][ T8061] netdevsim netdevsim3 netdevsim3 (unregistering): unset [0, 1] type 1 family 0 port 8472 - 0 [ 1556.306077][ T8255] dvmrp0: entered allmulticast mode [ 1556.312008][ T8258] tap0: tun_chr_ioctl cmd 1074025672 [ 1556.318926][ T8258] tap0: ignored: set checksum disabled [ 1556.404282][ T8265] netlink: 'syz.8.19023': attribute type 4 has an invalid length. [ 1556.448110][ T8061] netdevsim netdevsim3 netdevsim2 (unregistering): unset [0, 0] type 1 family 0 port 256 - 0 [ 1556.466272][ T8266] netlink: 'syz.8.19023': attribute type 4 has an invalid length. [ 1556.498920][ T8061] netdevsim netdevsim3 netdevsim2 (unregistering): unset [0, 1] type 1 family 0 port 8472 - 0 [ 1556.710903][ T8061] netdevsim netdevsim3 netdevsim1 (unregistering): unset [0, 0] type 1 family 0 port 256 - 0 [ 1556.736318][T18593] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1556.746373][ T8061] netdevsim netdevsim3 netdevsim1 (unregistering): unset [0, 1] type 1 family 0 port 8472 - 0 [ 1556.790121][ T8279] netlink: 'syz.1.19029': attribute type 33 has an invalid length. [ 1556.848367][ T8275] bond2: (slave lo): enslaved VLAN challenged slave. Adding VLANs will be blocked as long as it is part of bond. [ 1556.889412][ T8275] bond2: (slave lo): Enslaving as a backup interface with an up link [ 1556.906145][ T8275] A link change request failed with some changes committed already. Interface tunl0 may have been left with an inconsistent configuration, please check. [ 1556.961594][ T8061] netdevsim netdevsim3 netdevsim0 (unregistering): unset [0, 0] type 1 family 0 port 256 - 0 [ 1556.963313][ T5152] Bluetooth: hci4: command tx timeout [ 1556.986057][ T8061] netdevsim netdevsim3 netdevsim0 (unregistering): unset [0, 1] type 1 family 0 port 8472 - 0 [ 1557.006184][ T8287] netlink: 'syz.7.19031': attribute type 22 has an invalid length. [ 1557.025873][T11211] netdevsim netdevsim7 netdevsim0: set [0, 0] type 1 family 0 port 8472 - 0 [ 1557.036159][ T8287] netlink: 'syz.7.19031': attribute type 22 has an invalid length. [ 1557.045125][T11211] netdevsim netdevsim7 netdevsim1: set [0, 0] type 1 family 0 port 8472 - 0 [ 1557.054572][T11211] netdevsim netdevsim7 netdevsim2: set [0, 0] type 1 family 0 port 8472 - 0 [ 1557.064555][T11211] netdevsim netdevsim7 netdevsim3: set [0, 0] type 1 family 0 port 8472 - 0 [ 1557.239297][ T8298] IPv6: RTM_NEWROUTE with no NLM_F_CREATE or NLM_F_REPLACE [ 1557.246608][ T8298] IPv6: NLM_F_CREATE should be set when creating new route [ 1557.253876][ T8298] IPv6: NLM_F_CREATE should be set when creating new route [ 1557.265615][ T8298] IPv6: RTM_NEWROUTE with no NLM_F_CREATE or NLM_F_REPLACE [ 1557.290372][ T8061] netdevsim netdevsim3 netdevsim0: renamed from eth0 [ 1557.319259][ T8061] netdevsim netdevsim3 netdevsim1: renamed from eth1 [ 1557.331329][ T8061] netdevsim netdevsim3 netdevsim2: renamed from eth2 [ 1557.375464][ T8061] netdevsim netdevsim3 netdevsim3: renamed from eth3 [ 1557.465117][ T8303] __nla_validate_parse: 8 callbacks suppressed [ 1557.465136][ T8303] netlink: 24 bytes leftover after parsing attributes in process `syz.7.19039'. [ 1557.507791][ T8303] netlink: 16 bytes leftover after parsing attributes in process `syz.7.19039'. [ 1557.636116][T18595] IPVS: starting estimator thread 0... [ 1557.687097][ T8061] 8021q: adding VLAN 0 to HW filter on device bond0 [ 1557.731755][ T8061] 8021q: adding VLAN 0 to HW filter on device team0 [ 1557.744490][ T8321] IPVS: using max 35 ests per chain, 84000 per kthread [ 1557.757417][T18610] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1557.770678][T18597] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1557.793649][ T8325] netlink: 8 bytes leftover after parsing attributes in process `syz.7.19045'. [ 1557.811753][ T36] bridge0: port 1(bridge_slave_0) entered blocking state [ 1557.818953][ T36] bridge0: port 1(bridge_slave_0) entered forwarding state [ 1557.830361][ T8325] netlink: 48 bytes leftover after parsing attributes in process `syz.7.19045'. [ 1557.867858][ T36] bridge0: port 2(bridge_slave_1) entered blocking state [ 1557.875094][ T36] bridge0: port 2(bridge_slave_1) entered forwarding state [ 1557.900223][ T8332] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1557.909103][ C1] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1558.118978][ T8339] netlink: 26 bytes leftover after parsing attributes in process `syz.4.19049'. [ 1558.406355][ T8061] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 1558.499264][ T8061] veth0_vlan: entered promiscuous mode [ 1558.521484][ T8362] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1558.528334][ T8061] veth1_vlan: entered promiscuous mode [ 1558.533656][ T8362] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1558.544980][ T8362] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1558.584290][ T8061] veth0_macvtap: entered promiscuous mode [ 1558.588765][ T8362] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1558.597136][ T8061] veth1_macvtap: entered promiscuous mode [ 1558.603861][ T8362] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1558.658564][ T8061] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 1558.681344][ T8061] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 1558.701319][T27514] netdevsim netdevsim3 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 1558.712307][T27514] netdevsim netdevsim3 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 1558.732667][ T8366] bridge0: port 1(bridge_slave_0) entered disabled state [ 1558.747924][T27514] netdevsim netdevsim3 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 1558.759221][T27514] netdevsim netdevsim3 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 1558.813015][T18597] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1558.941333][ T3010] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 1558.975530][ T3010] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 1559.034343][ T5152] Bluetooth: hci4: command tx timeout [ 1559.074069][T27501] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 1559.081963][T27501] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 1559.125861][ T8382] netlink: 'syz.1.19065': attribute type 13 has an invalid length. [ 1559.312585][ T8395] netlink: 8 bytes leftover after parsing attributes in process `syz.3.19069'. [ 1559.448423][ T8404] netlink: 'syz.3.19072': attribute type 3 has an invalid length. [ 1559.496141][ T8403] bond2: entered allmulticast mode [ 1559.501941][ T8403] 8021q: adding VLAN 0 to HW filter on device bond2 [ 1559.521046][ T8405] ip6gre1: entered allmulticast mode [ 1559.528256][ T8408] netlink: 'syz.4.19073': attribute type 4 has an invalid length. [ 1559.649681][ T8411] 8021q: adding VLAN 0 to HW filter on device bond1 [ 1559.698695][ T8411] bond_slave_0: entered promiscuous mode [ 1559.704455][ T8411] bond_slave_1: entered promiscuous mode [ 1559.715834][ T8411] 8021q: adding VLAN 0 to HW filter on device macvlan2 [ 1559.731855][ T8411] bond1: (slave macvlan2): Enslaving as a backup interface with an up link [ 1559.809904][ T8424] FAULT_INJECTION: forcing a failure. [ 1559.809904][ T8424] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 1559.845538][ T8424] CPU: 1 UID: 0 PID: 8424 Comm: syz.7.19077 Not tainted syzkaller #0 PREEMPT(full) [ 1559.845563][ T8424] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/25/2025 [ 1559.845575][ T8424] Call Trace: [ 1559.845583][ T8424] [ 1559.845593][ T8424] dump_stack_lvl+0x189/0x250 [ 1559.845619][ T8424] ? __pfx____ratelimit+0x10/0x10 [ 1559.845640][ T8424] ? __pfx_dump_stack_lvl+0x10/0x10 [ 1559.845657][ T8424] ? __pfx__printk+0x10/0x10 [ 1559.845679][ T8424] ? __might_fault+0xb0/0x130 [ 1559.845707][ T8424] should_fail_ex+0x414/0x560 [ 1559.845737][ T8424] _copy_from_user+0x2d/0xb0 [ 1559.845759][ T8424] ___sys_recvmsg+0x12e/0x510 [ 1559.845782][ T8424] ? __pfx____sys_recvmsg+0x10/0x10 [ 1559.845821][ T8424] ? __fget_files+0x3a0/0x420 [ 1559.845847][ T8424] do_recvmmsg+0x307/0x770 [ 1559.845869][ T8424] ? __pfx_do_recvmmsg+0x10/0x10 [ 1559.845894][ T8424] ? __pfx___mutex_unlock_slowpath+0x10/0x10 [ 1559.845929][ T8424] __x64_sys_recvmmsg+0x190/0x240 [ 1559.845947][ T8424] ? __pfx___x64_sys_recvmmsg+0x10/0x10 [ 1559.845965][ T8424] ? do_syscall_64+0xbe/0xf80 [ 1559.845987][ T8424] do_syscall_64+0xfa/0xf80 [ 1559.846008][ T8424] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1559.846024][ T8424] ? clear_bhb_loop+0x60/0xb0 [ 1559.846044][ T8424] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1559.846060][ T8424] RIP: 0033:0x7f7bd7d8f749 [ 1559.846075][ T8424] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 1559.846088][ T8424] RSP: 002b:00007f7bd8bad038 EFLAGS: 00000246 ORIG_RAX: 000000000000012b [ 1559.846107][ T8424] RAX: ffffffffffffffda RBX: 00007f7bd7fe6090 RCX: 00007f7bd7d8f749 [ 1559.846118][ T8424] RDX: 0000000000000002 RSI: 00002000000057c0 RDI: 0000000000000003 [ 1559.846130][ T8424] RBP: 00007f7bd8bad090 R08: 0000000000000000 R09: 0000000000000000 [ 1559.846139][ T8424] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 1559.846149][ T8424] R13: 00007f7bd7fe6128 R14: 00007f7bd7fe6090 R15: 00007ffecf2dee98 [ 1559.846178][ T8424] [ 1560.069604][ T8426] netlink: 324 bytes leftover after parsing attributes in process `syz.4.19078'. [ 1560.454219][ T8443] netlink: 112 bytes leftover after parsing attributes in process `syz.8.19081'. [ 1560.761366][ T8460] netlink: 8 bytes leftover after parsing attributes in process `syz.7.19085'. [ 1560.827736][ T8468] netlink: 20 bytes leftover after parsing attributes in process `syz.8.19086'. [ 1561.054608][ T8477] 8021q: adding VLAN 0 to HW filter on device bond3 [ 1561.091914][ T8478] bond3: (slave geneve2): Enslaving as an active interface with an up link [ 1561.119794][ T5152] Bluetooth: hci4: command tx timeout [ 1561.159214][ T6015] netdevsim netdevsim8 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 1561.181268][ T6015] netdevsim netdevsim8 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 1561.219355][ T6015] netdevsim netdevsim8 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 1561.246093][ T6015] netdevsim netdevsim8 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 1561.266543][ T8490] tipc: Started in network mode [ 1561.271960][ T8490] tipc: Node identity 32328b1a177d, cluster identity 4711 [ 1561.297173][ T8490] tipc: Enabled bearer , priority 0 [ 1561.376004][ T8505] FAULT_INJECTION: forcing a failure. [ 1561.376004][ T8505] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 1561.396360][ T8505] CPU: 1 UID: 0 PID: 8505 Comm: syz.1.19095 Not tainted syzkaller #0 PREEMPT(full) [ 1561.396387][ T8505] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/25/2025 [ 1561.396398][ T8505] Call Trace: [ 1561.396406][ T8505] [ 1561.396414][ T8505] dump_stack_lvl+0x189/0x250 [ 1561.396439][ T8505] ? __pfx____ratelimit+0x10/0x10 [ 1561.396460][ T8505] ? __pfx_dump_stack_lvl+0x10/0x10 [ 1561.396486][ T8505] ? __pfx__printk+0x10/0x10 [ 1561.396508][ T8505] ? __might_fault+0xb0/0x130 [ 1561.396540][ T8505] should_fail_ex+0x414/0x560 [ 1561.396564][ T8505] _copy_from_user+0x2d/0xb0 [ 1561.396588][ T8505] ___sys_recvmsg+0x12e/0x510 [ 1561.396612][ T8505] ? __pfx____sys_recvmsg+0x10/0x10 [ 1561.396659][ T8505] ? __might_fault+0xb0/0x130 [ 1561.396684][ T8505] do_recvmmsg+0x307/0x770 [ 1561.396710][ T8505] ? __pfx_do_recvmmsg+0x10/0x10 [ 1561.396739][ T8505] ? __pfx___mutex_unlock_slowpath+0x10/0x10 [ 1561.396779][ T8505] __x64_sys_recvmmsg+0x190/0x240 [ 1561.396799][ T8505] ? __pfx___x64_sys_recvmmsg+0x10/0x10 [ 1561.396821][ T8505] ? do_syscall_64+0xbe/0xf80 [ 1561.396845][ T8505] do_syscall_64+0xfa/0xf80 [ 1561.396867][ T8505] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1561.396883][ T8505] ? clear_bhb_loop+0x60/0xb0 [ 1561.396901][ T8505] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1561.396918][ T8505] RIP: 0033:0x7fc91b18f749 [ 1561.396934][ T8505] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 1561.396949][ T8505] RSP: 002b:00007fc91c090038 EFLAGS: 00000246 ORIG_RAX: 000000000000012b [ 1561.396968][ T8505] RAX: ffffffffffffffda RBX: 00007fc91b3e6090 RCX: 00007fc91b18f749 [ 1561.396980][ T8505] RDX: 0000000000000002 RSI: 00002000000057c0 RDI: 0000000000000003 [ 1561.396991][ T8505] RBP: 00007fc91c090090 R08: 0000000000000000 R09: 0000000000000000 [ 1561.397002][ T8505] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 1561.397012][ T8505] R13: 00007fc91b3e6128 R14: 00007fc91b3e6090 R15: 00007ffd9a8457d8 [ 1561.397040][ T8505] [ 1562.142259][ T8484] syzkaller0: default qdisc (pfifo_fast) fail, fallback to noqueue [ 1562.170154][ T8484] syzkaller0: entered promiscuous mode [ 1562.178493][ T8484] syzkaller0: entered allmulticast mode [ 1562.189787][ T8484] tipc: Resetting bearer [ 1562.289804][ T8526] netlink: 'syz.4.19099': attribute type 1 has an invalid length. [ 1562.359293][T24511] tipc: Resetting bearer [ 1562.376981][ T8484] tipc: Resetting bearer [ 1562.552492][ T8529] __nla_validate_parse: 6 callbacks suppressed [ 1562.552510][ T8529] netlink: 4 bytes leftover after parsing attributes in process `syz.3.19100'. [ 1563.049107][T18593] net_ratelimit: 4 callbacks suppressed [ 1563.049126][T18593] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1563.202167][ T523] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1563.840191][T18612] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1564.092486][T18595] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1564.888108][ T8484] tipc: Disabling bearer [ 1564.898111][ T8526] workqueue: Failed to create a rescuer kthread for wq "bond3": -EINTR [ 1564.900951][T18604] tipc: Node number set to 625969946 [ 1565.090881][ T8537] netlink: 'syz.8.19103': attribute type 1 has an invalid length. [ 1565.100851][ T8537] netlink: 'syz.8.19103': attribute type 7 has an invalid length. [ 1565.121034][T18597] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1565.132212][ T8537] netlink: 'syz.8.19103': attribute type 8 has an invalid length. [ 1565.143897][ T8537] netlink: 208 bytes leftover after parsing attributes in process `syz.8.19103'. [ 1565.182107][ T8537] NCSI netlink: No device for ifindex 65584 [ 1565.202490][ T8540] netlink: 224 bytes leftover after parsing attributes in process `syz.3.19102'. [ 1565.236334][ T8540] ksmbd: Unknown IPC event: 3, ignore. [ 1565.422073][ T8556] netlink: 8 bytes leftover after parsing attributes in process `syz.1.19110'. [ 1565.451463][ T8555] netlink: 28 bytes leftover after parsing attributes in process `syz.7.19111'. [ 1565.485933][ T8562] netlink: 4 bytes leftover after parsing attributes in process `syz.3.19109'. [ 1565.694507][ T8577] netlink: 16 bytes leftover after parsing attributes in process `syz.1.19117'. [ 1565.804582][ T8585] netlink: 'syz.4.19120': attribute type 1 has an invalid length. [ 1565.812465][ T8585] netlink: 236 bytes leftover after parsing attributes in process `syz.4.19120'. [ 1566.047222][ T8596] netlink: 20 bytes leftover after parsing attributes in process `syz.1.19121'. [ 1566.064228][ T8598] netlink: 20 bytes leftover after parsing attributes in process `syz.1.19121'. [ 1566.164703][T18593] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1566.408912][ T8621] IPVS: set_ctl: invalid protocol: 60 172.20.20.22:20003 [ 1566.538484][ T8626] netlink: 'syz.8.19131': attribute type 10 has an invalid length. [ 1566.668528][ T8640] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1566.677427][ C1] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1566.697786][ T8642] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1566.706714][ C0] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1566.721929][ T8637] netlink: 'syz.8.19133': attribute type 58 has an invalid length. [ 1566.770626][ T8646] netlink: 'syz.1.19135': attribute type 1 has an invalid length. [ 1566.850236][ T8646] 8021q: adding VLAN 0 to HW filter on device bond4 [ 1566.860712][ T8646] bond3: (slave bond4): making interface the new active one [ 1566.869201][ T8646] bond3: (slave bond4): Enslaving as an active interface with an up link [ 1566.901325][ T8646] bond3: (slave gretap1): Enslaving as a backup interface with an up link [ 1566.922463][ T8646] 8021q: adding VLAN 0 to HW filter on device bond3 [ 1567.098984][ T8665] syzkaller0: entered promiscuous mode [ 1567.106966][ T8665] syzkaller0: entered allmulticast mode [ 1567.392221][ T8675] bond3: entered promiscuous mode [ 1567.423876][ T8675] bond3: entered allmulticast mode [ 1567.439957][ T8675] 8021q: adding VLAN 0 to HW filter on device bond3 [ 1567.568503][ T8695] netlink: 'syz.4.19150': attribute type 29 has an invalid length. [ 1567.639682][ T8692] Bluetooth: MGMT ver 1.23 [ 1567.654356][ T8702] tipc: Started in network mode [ 1567.663618][ T8702] tipc: Node identity ac14140f, cluster identity 4711 [ 1567.677783][ T8702] tipc: Enabling of bearer rejected, failed to enable media [ 1567.886864][ T8713] x_tables: ip6_tables: CLASSIFY target: used from hooks PREROUTING, but only usable from FORWARD/OUTPUT/POSTROUTING [ 1568.044676][ T8723] __nla_validate_parse: 4 callbacks suppressed [ 1568.044694][ T8723] netlink: 4 bytes leftover after parsing attributes in process `syz.1.19160'. [ 1568.161551][ T8728] netlink: 8 bytes leftover after parsing attributes in process `syz.4.19162'. [ 1568.229012][ T8730] netlink: 12 bytes leftover after parsing attributes in process `syz.1.19163'. [ 1568.243972][T18597] net_ratelimit: 3 callbacks suppressed [ 1568.243990][T18597] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1568.447496][ T8737] netlink: 24 bytes leftover after parsing attributes in process `syz.7.19164'. [ 1568.473611][ T5152] Bluetooth: hci5: command 0x0406 tx timeout [ 1568.620778][ T8748] netlink: 32 bytes leftover after parsing attributes in process `syz.3.19168'. [ 1568.665345][ T8750] netlink: 12 bytes leftover after parsing attributes in process `syz.1.19169'. [ 1568.760052][ T8750] netlink: 12 bytes leftover after parsing attributes in process `syz.1.19169'. [ 1568.760150][T27501] netdevsim netdevsim1 eth0: set [0, 0] type 1 family 0 port 8472 - 0 [ 1568.796675][T27501] netdevsim netdevsim1 eth1: set [0, 0] type 1 family 0 port 8472 - 0 [ 1568.815528][T27501] netdevsim netdevsim1 eth2: set [0, 0] type 1 family 0 port 8472 - 0 [ 1568.837033][T27501] netdevsim netdevsim1 eth3: set [0, 0] type 1 family 0 port 8472 - 0 [ 1568.864047][ T8758] syzkaller0: entered promiscuous mode [ 1568.872044][ T8758] syzkaller0: entered allmulticast mode [ 1568.939822][ T8761] tipc: Enabling of bearer rejected, failed to enable media [ 1569.037979][ T8765] netlink: 4 bytes leftover after parsing attributes in process `syz.8.19173'. [ 1569.470353][ T8788] nci: __nci_request: wait_for_completion_interruptible_timeout failed -512 [ 1570.047821][ T8803] netlink: 8 bytes leftover after parsing attributes in process `syz.7.19183'. [ 1570.189384][ T8814] netlink: 12 bytes leftover after parsing attributes in process `syz.3.19187'. [ 1570.211076][ T8814] block nbd0: Unsupported socket: should be TCP or UNIX. [ 1570.927584][ T8847] bond0: (slave rose0): Error: Device is in use and cannot be enslaved [ 1571.097059][ T8851] wlan0 speed is unknown, defaulting to 1000 [ 1571.122473][ T8851] ÿÿÿÿÿÿ speed is unknown, defaulting to 1000 [ 1571.248912][ T8860] IPVS: set_ctl: invalid protocol: 58 0.0.0.0:20000 [ 1571.582368][ T8851] lo speed is unknown, defaulting to 1000 [ 1571.844244][ T8887] bridge: RTM_NEWNEIGH bridge0 without NUD_PERMANENT [ 1572.240123][ T8897] netlink: 'syz.1.19212': attribute type 11 has an invalid length. [ 1572.458013][ T8907] openvswitch: netlink: Missing key (keys=40, expected=80) [ 1572.840300][ T8897] A link change request failed with some changes committed already. Interface bridge_slave_0 may have been left with an inconsistent configuration, please check. [ 1572.968318][ T8918] xt_CHECKSUM: unsupported CHECKSUM operation 68 [ 1573.064859][ T8920] netlink: 'syz.1.19221': attribute type 1 has an invalid length. [ 1573.083991][ T8920] __nla_validate_parse: 13 callbacks suppressed [ 1573.084011][ T8920] netlink: 224 bytes leftover after parsing attributes in process `syz.1.19221'. [ 1573.232412][ T8927] netlink: 'syz.1.19223': attribute type 33 has an invalid length. [ 1573.408513][ T8933] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check. [ 1573.425924][ T8933] netlink: 4 bytes leftover after parsing attributes in process `syz.1.19225'. [ 1573.440203][ T8933] netlink: 4 bytes leftover after parsing attributes in process `syz.1.19225'. [ 1573.770987][ T8956] netlink: 27 bytes leftover after parsing attributes in process `syz.8.19229'. [ 1573.840122][ T8961] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 1573.885126][ T8965] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 1573.926796][ T8964] openvswitch: netlink: Multiple metadata blocks provided [ 1573.944160][ T8970] netlink: 16 bytes leftover after parsing attributes in process `syz.8.19234'. [ 1574.547125][ T9011] IPVS: set_ctl: invalid protocol: 47 255.255.255.255:20004 [ 1574.560588][ T9010] IPVS: set_ctl: invalid protocol: 47 255.255.255.255:20004 [ 1574.606075][ T9013] netlink: 12 bytes leftover after parsing attributes in process `syz.8.19247'. [ 1574.637574][ T9018] netlink: 'syz.7.19249': attribute type 1 has an invalid length. [ 1574.646070][ T9017] netlink: 'syz.7.19249': attribute type 1 has an invalid length. [ 1574.749056][ T9028] netlink: 12 bytes leftover after parsing attributes in process `syz.4.19251'. [ 1574.880099][ T9037] netlink: 'syz.3.19255': attribute type 1 has an invalid length. [ 1575.061339][ T9047] netlink: 212368 bytes leftover after parsing attributes in process `syz.7.19257'. [ 1575.095682][ T9043] syzkaller0: entered promiscuous mode [ 1575.101423][ T9043] syzkaller0: entered allmulticast mode [ 1575.211198][ T9058] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 1575.647396][ T9077] netlink: 312 bytes leftover after parsing attributes in process `syz.1.19265'. [ 1578.125748][ T9091] netlink: 'syz.1.19268': attribute type 1 has an invalid length. [ 1578.186939][ T9099] syz_tun: entered allmulticast mode [ 1578.187065][ T9097] netlink: 128 bytes leftover after parsing attributes in process `syz.7.19269'. [ 1578.206313][ T9091] workqueue: Failed to create a rescuer kthread for wq "bond5": -EINTR [ 1578.449708][ T9122] netlink: 32 bytes leftover after parsing attributes in process `syz.7.19276'. [ 1578.479699][ T9128] netlink: 24 bytes leftover after parsing attributes in process `syz.8.19280'. [ 1578.741235][ T9149] IPv6: NLM_F_CREATE should be specified when creating new route [ 1578.785060][ T9149] bridge5: trying to set multicast startup query interval above maximum, setting to 8640000 (86400000ms) [ 1578.797733][ T5152] Bluetooth: hci6: command 0x0406 tx timeout [ 1578.929909][ T9161] netlink: 7064 bytes leftover after parsing attributes in process `syz.1.19287'. [ 1578.952157][ T9161] openvswitch: netlink: Missing key (keys=40, expected=100) [ 1579.001491][ T9164] veth0: entered promiscuous mode [ 1579.030055][ T9166] veth0: left promiscuous mode [ 1579.037058][ T9170] netlink: 4 bytes leftover after parsing attributes in process `syz.1.19289'. [ 1579.091523][ T9172] netlink: 44 bytes leftover after parsing attributes in process `syz.3.19290'. [ 1579.267638][ T9183] syzkaller1: entered promiscuous mode [ 1579.296267][ T9183] syzkaller1: entered allmulticast mode [ 1579.674612][ T9204] netlink: 4 bytes leftover after parsing attributes in process `syz.7.19295'. [ 1579.704597][ T9209] netlink: 40 bytes leftover after parsing attributes in process `syz.3.19297'. [ 1579.727431][ T9207] netlink: 8 bytes leftover after parsing attributes in process `syz.8.19296'. [ 1579.895051][ T9228] netlink: 4 bytes leftover after parsing attributes in process `syz.1.19299'. [ 1580.375783][ T9255] 8021q: adding VLAN 0 to HW filter on device bond5 [ 1580.407981][ T9257] bond5: option mode: unable to set because the bond device is up [ 1580.441768][ T9265] 8021q: adding VLAN 0 to HW filter on device bond0 [ 1580.482502][ T9265] bond5: (slave bond0): making interface the new active one [ 1580.510592][ T9265] bond5: (slave bond0): Enslaving as an active interface with an up link [ 1580.911103][ T9297] netlink: 'syz.8.19322': attribute type 1 has an invalid length. [ 1580.962978][ T9297] 8021q: adding VLAN 0 to HW filter on device bond4 [ 1581.023091][ T9297] bond4: (slave ip6gretap1): making interface the new active one [ 1581.037883][ T9297] bond4: (slave ip6gretap1): Enslaving as an active interface with an up link [ 1581.578266][ T9332] netlink: 'syz.1.19330': attribute type 1 has an invalid length. [ 1581.628752][ T9337] Cannot find del_set index 49151 as target [ 1581.754368][ T9344] 8021q: VLANs not supported on syzkaller1 [ 1581.788269][ T2365] svc: failed to register nfsdv3 RPC service (errno 512). [ 1581.804429][ T2365] svc: failed to register nfsaclv3 RPC service (errno 512). [ 1581.924864][ T9354] netlink: 'syz.1.19335': attribute type 9 has an invalid length. [ 1582.031357][ T9360] netlink: 'syz.8.19336': attribute type 4 has an invalid length. [ 1582.057817][ T9361] netlink: 'syz.4.19337': attribute type 12 has an invalid length. [ 1582.108325][ T9366] netlink: 'syz.1.19338': attribute type 24 has an invalid length. [ 1582.117417][ T9365] netlink: 'syz.1.19338': attribute type 24 has an invalid length. [ 1582.550431][ T9396] netlink: 'syz.7.19346': attribute type 2 has an invalid length. [ 1582.694988][ T9378] team0 (unregistering): Port device team_slave_0 removed [ 1582.710144][ T9378] team0 (unregistering): Port device team_slave_1 removed [ 1582.807202][ T9401] veth1_vlan: mtu greater than device maximum [ 1583.176298][ T9426] netlink: 'syz.1.19356': attribute type 1 has an invalid length. [ 1583.344207][T18595] IPVS: starting estimator thread 0... [ 1583.436107][ T9437] IPVS: using max 27 ests per chain, 64800 per kthread [ 1583.593818][ T9455] __nla_validate_parse: 10 callbacks suppressed [ 1583.593838][ T9455] netlink: 16 bytes leftover after parsing attributes in process `syz.8.19365'. [ 1584.049804][ T9484] netlink: 104 bytes leftover after parsing attributes in process `syz.7.19371'. [ 1584.197743][ T9487] netlink: 56 bytes leftover after parsing attributes in process `syz.1.19372'. [ 1584.276684][ T9487] bond7: (slave sit0): Device is not bonding slave [ 1584.288047][ T9487] bond7: option active_slave: invalid value (sit0) [ 1584.300435][ T9487] bond7 (unregistering): Released all slaves [ 1584.355843][ T9506] netlink: 'syz.4.19375': attribute type 1 has an invalid length. [ 1584.371709][ T9506] netlink: 224 bytes leftover after parsing attributes in process `syz.4.19375'. [ 1584.504621][ T9506] xt_cluster: node mask cannot exceed total number of nodes [ 1584.536903][ T9515] netlink: 'syz.8.19376': attribute type 27 has an invalid length. [ 1584.581204][ T9515] netlink: 165212 bytes leftover after parsing attributes in process `syz.8.19376'. [ 1584.613086][ T9515] netlink: 8 bytes leftover after parsing attributes in process `syz.8.19376'. [ 1584.620368][ T9523] netlink: 20 bytes leftover after parsing attributes in process `syz.1.19379'. [ 1584.642274][ T9523] netlink: 8 bytes leftover after parsing attributes in process `syz.1.19379'. [ 1584.784583][ T9530] netlink: 8 bytes leftover after parsing attributes in process `syz.7.19383'. [ 1584.897275][ T9537] netlink: 40 bytes leftover after parsing attributes in process `syz.3.19386'. [ 1585.050418][ T9551] geneve3: entered promiscuous mode [ 1585.063859][ T9551] geneve3: entered allmulticast mode [ 1585.328296][ T9570] netlink: 'syz.3.19396': attribute type 1 has an invalid length. [ 1585.503808][ T9586] delete_channel: no stack [ 1585.912396][ T9618] netlink: 'syz.7.19411': attribute type 8 has an invalid length. [ 1585.919417][ T9620] x_tables: (null)_tables: SNAT target: only valid in nat table, not syz0 [ 1586.000461][ T9627] IPVS: sync thread started: state = MASTER, mcast_ifn = veth1_to_team, syncid = 4, id = 0 [ 1586.293722][ T9645] netlink: 'syz.4.19422': attribute type 4 has an invalid length. [ 1586.517786][ T9662] netlink: 'syz.1.19428': attribute type 17 has an invalid length. [ 1586.725604][ T9678] netlink: 'syz.1.19431': attribute type 10 has an invalid length. [ 1586.737783][ T9678] dummy0: entered promiscuous mode [ 1586.750521][ T9678] bridge0: port 2(dummy0) entered blocking state [ 1586.761998][ T9678] bridge0: port 2(dummy0) entered disabled state [ 1586.776617][ T9678] dummy0: entered allmulticast mode [ 1587.030913][ T9697] dvmrp0: entered allmulticast mode [ 1587.180923][ T9709] can-isotp: isotp_sendmsg: can_send_ret -ENETDOWN [ 1587.294703][ T9715] netlink: 'syz.8.19443': attribute type 18 has an invalid length. [ 1587.850131][ T9751] ip6t_REJECT: TCP_RESET illegal for non-tcp [ 1590.720732][ T9784] netlink: 'syz.3.19459': attribute type 10 has an invalid length. [ 1590.781947][ T9784] netdevsim netdevsim3 netdevsim0: entered promiscuous mode [ 1590.808366][ T9784] bond0: (slave netdevsim0): Enslaving as an active interface with an up link [ 1591.038622][ T9807] netlink: 'syz.4.19468': attribute type 30 has an invalid length. [ 1591.141251][ T9807] bond4: option arp_missed_max: invalid value (0) [ 1591.159144][ T9807] bond4: option arp_missed_max: allowed values 1 - 255 [ 1591.204186][ T9807] bond4 (unregistering): Released all slaves [ 1591.325555][ T9821] __nla_validate_parse: 17 callbacks suppressed [ 1591.325576][ T9821] netlink: 8 bytes leftover after parsing attributes in process `syz.7.19471'. [ 1591.417777][ T9826] openvswitch: netlink: ct_state flags 010000e0 unsupported [ 1591.481144][ T9829] SET target dimension over the limit! [ 1591.556696][ T9843] netlink: 8 bytes leftover after parsing attributes in process `syz.4.19478'. [ 1591.579425][ T9843] bridge0: port 2(bridge_slave_1) entered disabled state [ 1591.587229][ T9843] bridge0: port 1(bridge_slave_0) entered disabled state [ 1591.917554][ T9865] netlink: 'syz.4.19484': attribute type 10 has an invalid length. [ 1592.183995][ T9873] netlink: 'syz.8.19486': attribute type 1 has an invalid length. [ 1592.194582][ T9873] netlink: 'syz.8.19486': attribute type 2 has an invalid length. [ 1592.308760][ T9880] netlink: 28 bytes leftover after parsing attributes in process `syz.3.19488'. [ 1592.319979][ T9880] netlink: 28 bytes leftover after parsing attributes in process `syz.3.19488'. [ 1592.374974][ T9885] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 1592.387530][ T9885] netlink: 4 bytes leftover after parsing attributes in process `syz.8.19489'. [ 1592.399422][ T9885] openvswitch: netlink: Flow actions attr not present in new flow. [ 1592.521626][ T9894] netlink: 12 bytes leftover after parsing attributes in process `syz.8.19492'. [ 1592.550345][ T9902] netlink: 12 bytes leftover after parsing attributes in process `syz.8.19492'. [ 1592.550348][ T9894] netlink: 12 bytes leftover after parsing attributes in process `syz.8.19492'. [ 1592.557999][ T9894] bridge0: port 3(vlan2) entered blocking state [ 1592.600895][ T9902] netlink: 12 bytes leftover after parsing attributes in process `syz.8.19492'. [ 1592.623979][ T9894] bridge0: port 3(vlan2) entered disabled state [ 1592.630819][ T9894] vlan2: entered allmulticast mode [ 1592.639367][ T9894] bridge0: entered allmulticast mode [ 1592.652615][ T9894] vlan2: left allmulticast mode [ 1592.659037][ T9894] bridge0: left allmulticast mode [ 1592.688247][ T9902] bridge0: port 3(vlan2) entered blocking state [ 1592.700695][ T9902] bridge0: port 3(vlan2) entered disabled state [ 1592.710604][ T9902] vlan2: entered allmulticast mode [ 1592.718231][ T9902] bridge0: entered allmulticast mode [ 1592.729461][ T9902] vlan2: left allmulticast mode [ 1592.734764][ T9902] bridge0: left allmulticast mode [ 1592.800765][ T9909] netlink: 'syz.1.19496': attribute type 1 has an invalid length. [ 1592.880626][ T9916] netlink: 4 bytes leftover after parsing attributes in process `syz.1.19496'. [ 1592.900143][ T9909] 8021q: adding VLAN 0 to HW filter on device bond7 [ 1593.163690][ T9929] syzkaller0: entered promiscuous mode [ 1593.169209][ T9929] syzkaller0: entered allmulticast mode [ 1593.421898][ T9950] netlink: 'syz.8.19506': attribute type 5 has an invalid length. [ 1593.480772][ T9944] bridge0: entered allmulticast mode [ 1593.790433][ T9972] wlan0 speed is unknown, defaulting to 1000 [ 1593.809773][ T9972] ÿÿÿÿÿÿ speed is unknown, defaulting to 1000 [ 1594.027687][ T9988] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 1594.120538][ T9972] lo speed is unknown, defaulting to 1000 [ 1594.727435][T10009] 8021q: adding VLAN 0 to HW filter on device bond8 [ 1594.760977][T10010] bond8: (slave geneve2): Enslaving as an active interface with an up link [ 1594.790957][T10011] pim6reg1: entered promiscuous mode [ 1594.799838][T10011] pim6reg1: entered allmulticast mode [ 1594.831403][T10016] netdevsim netdevsim1 eth3 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 1594.844419][T10016] netdevsim netdevsim1 eth3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1594.973584][T10014] bond4: (slave lo): enslaved VLAN challenged slave. Adding VLANs will be blocked as long as it is part of bond. [ 1594.987662][T10030] netlink: 'syz.8.19527': attribute type 178 has an invalid length. [ 1595.056845][T10014] bond4: (slave lo): Enslaving as a backup interface with an up link [ 1595.101078][T10014] A link change request failed with some changes committed already. Interface tunl0 may have been left with an inconsistent configuration, please check. [ 1595.229159][T10016] netdevsim netdevsim1 eth2 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 1595.262899][T10016] netdevsim netdevsim1 eth2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1595.479510][T10016] netdevsim netdevsim1 eth1 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 1595.502006][T10016] netdevsim netdevsim1 eth1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1595.569302][T10016] netdevsim netdevsim1 eth0 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 1595.592073][T10016] netdevsim netdevsim1 eth0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1595.651716][T10047] netlink: 'syz.3.19534': attribute type 1 has an invalid length. [ 1595.734795][T10047] bond2: entered promiscuous mode [ 1595.740427][T10047] 8021q: adding VLAN 0 to HW filter on device bond2 [ 1595.801739][T10049] bond2: (slave bridge2): making interface the new active one [ 1595.816285][T10049] bridge2: entered promiscuous mode [ 1595.830692][T10049] bond2: (slave bridge2): Enslaving as an active interface with an up link [ 1595.911216][T10057] sctp: [Deprecated]: syz.4.19536 (pid 10057) Use of int in max_burst socket option deprecated. [ 1595.911216][T10057] Use struct sctp_assoc_value instead [ 1596.049860][T27516] netdevsim netdevsim1 eth0: set [0, 0] type 1 family 0 port 8472 - 0 [ 1596.059948][T27516] netdevsim netdevsim1 eth0: set [1, 0] type 2 family 0 port 6081 - 0 [ 1596.085357][T10072] syzkaller0: entered allmulticast mode [ 1596.133817][ T8441] netdevsim netdevsim1 eth1: set [0, 0] type 1 family 0 port 8472 - 0 [ 1596.142128][ T8441] netdevsim netdevsim1 eth1: set [1, 0] type 2 family 0 port 6081 - 0 [ 1596.169099][ T8441] netdevsim netdevsim1 eth2: set [0, 0] type 1 family 0 port 8472 - 0 [ 1596.178231][ T8441] netdevsim netdevsim1 eth2: set [1, 0] type 2 family 0 port 6081 - 0 [ 1596.219371][T19462] netdevsim netdevsim1 eth3: set [0, 0] type 1 family 0 port 8472 - 0 [ 1596.246957][T19462] netdevsim netdevsim1 eth3: set [1, 0] type 2 family 0 port 6081 - 0 [ 1596.572512][T10109] netlink: 'syz.7.19546': attribute type 1 has an invalid length. [ 1596.903516][T10124] __nla_validate_parse: 13 callbacks suppressed [ 1596.903535][T10124] netlink: 40 bytes leftover after parsing attributes in process `syz.4.19552'. [ 1597.381290][T10155] IPVS: set_ctl: invalid protocol: 4 224.0.0.1:20002 [ 1597.404750][T10154] netlink: 20 bytes leftover after parsing attributes in process `syz.4.19559'. [ 1597.480577][T10160] netlink: 336 bytes leftover after parsing attributes in process `syz.8.19561'. [ 1597.503631][T10160] netlink: 24 bytes leftover after parsing attributes in process `syz.8.19561'. [ 1597.648853][T10174] IPVS: set_ctl: invalid protocol: 51 172.20.20.16:20004 [ 1597.749107][T10181] bond5: option packets_per_slave: invalid value (18446744073709551615) [ 1597.767115][T10181] bond5: option packets_per_slave: allowed values 0 - 65535 [ 1597.771130][T10183] Bluetooth: hci1: expected 19 bytes, got 2 bytes [ 1597.791194][T10181] bond5 (unregistering): Released all slaves [ 1597.939695][T10184] Can not set IPV6_FL_F_REFLECT if flowlabel_consistency sysctl is enable [ 1598.188502][T10212] netlink: 36 bytes leftover after parsing attributes in process `syz.4.19570'. [ 1598.307168][T10218] bond5: entered allmulticast mode [ 1598.312463][T10212] netlink: 8 bytes leftover after parsing attributes in process `syz.4.19570'. [ 1598.652182][T10244] netlink: 27 bytes leftover after parsing attributes in process `syz.8.19587'. [ 1598.783613][T10256] netlink: 12 bytes leftover after parsing attributes in process `syz.1.19589'. [ 1598.895073][T10264] netlink: 8 bytes leftover after parsing attributes in process `syz.7.19592'. [ 1598.914503][T10264] netlink: 24 bytes leftover after parsing attributes in process `syz.7.19592'. [ 1599.988237][T10337] netlink: 'syz.3.19613': attribute type 7 has an invalid length. [ 1600.015135][T10337] netlink: 'syz.3.19613': attribute type 8 has an invalid length. [ 1600.271688][T10362] Unsupported ieee802154 address type: 0 [ 1600.435621][T10379] macsec1: entered promiscuous mode [ 1600.506210][T10382] netlink: 'syz.4.19625': attribute type 8 has an invalid length. [ 1600.672460][T10388] bond9: option xmit_hash_policy: invalid value (64) [ 1600.684015][T10388] bond9 (unregistering): Released all slaves [ 1601.382710][T10433] ip6gre1: entered allmulticast mode [ 1601.598301][T10445] syzkaller1: entered promiscuous mode [ 1601.604582][T10445] syzkaller1: entered allmulticast mode [ 1601.635207][T10448] ipvlan3: entered promiscuous mode [ 1601.949204][T10473] __nla_validate_parse: 13 callbacks suppressed [ 1601.949222][T10473] netlink: 8 bytes leftover after parsing attributes in process `syz.4.19655'. [ 1601.968174][T10473] netlink: 'syz.4.19655': attribute type 30 has an invalid length. [ 1602.006689][ T6015] netdevsim netdevsim4 netdevsim0: set [0, 0] type 1 family 0 port 8472 - 0 [ 1602.018741][ T6015] netdevsim netdevsim4 netdevsim1: set [0, 0] type 1 family 0 port 8472 - 0 [ 1602.038763][ T6015] netdevsim netdevsim4 netdevsim2: set [0, 0] type 1 family 0 port 8472 - 0 [ 1602.060223][ T6015] netdevsim netdevsim4 netdevsim3: set [0, 0] type 1 family 0 port 8472 - 0 [ 1602.158645][T10486] syzkaller1: entered promiscuous mode [ 1602.164560][ T7071] IPVS: starting estimator thread 0... [ 1602.164635][T10486] syzkaller1: entered allmulticast mode [ 1602.284192][T10488] IPVS: using max 33 ests per chain, 79200 per kthread [ 1602.411321][T10490] bridge0: port 2(bridge_slave_1) entered disabled state [ 1602.418793][T10490] bridge0: port 1(bridge_slave_0) entered disabled state [ 1602.562559][T10507] netlink: 'syz.8.19664': attribute type 9 has an invalid length. [ 1602.590410][T10506] netlink: 44 bytes leftover after parsing attributes in process `syz.4.19666'. [ 1602.634576][T10506] macvtap1: entered allmulticast mode [ 1602.640224][T10506] veth0_macvtap: entered allmulticast mode [ 1602.649161][T10513] netlink: 212408 bytes leftover after parsing attributes in process `syz.7.19668'. [ 1602.697805][T10516] tipc: Enabling of bearer rejected, failed to enable media [ 1602.710438][T10516] netlink: 'syz.3.19669': attribute type 4 has an invalid length. [ 1602.725004][T10516] netlink: 152 bytes leftover after parsing attributes in process `syz.3.19669'. [ 1602.757792][T10516] `: renamed from bond0 (while UP) [ 1602.800306][T10516] bond_slave_0: left promiscuous mode [ 1602.807588][T10516] bond_slave_1: left promiscuous mode [ 1602.813969][T10516] netdevsim netdevsim3 netdevsim0: left promiscuous mode [ 1602.841155][T10516] netlink: 12 bytes leftover after parsing attributes in process `syz.3.19669'. [ 1603.006266][T10535] netlink: 'syz.7.19674': attribute type 13 has an invalid length. [ 1603.031436][T10535] gretap0: refused to change device tx_queue_len [ 1603.047446][T10535] A link change request failed with some changes committed already. Interface gretap0 may have been left with an inconsistent configuration, please check. [ 1603.066077][T10537] netlink: 8 bytes leftover after parsing attributes in process `syz.3.19675'. [ 1603.079125][T10537] netlink: 8 bytes leftover after parsing attributes in process `syz.3.19675'. [ 1603.124019][T10541] netlink: 32 bytes leftover after parsing attributes in process `syz.4.19677'. [ 1603.156458][T10541] syzkaller0: entered promiscuous mode [ 1603.238809][T10553] IPv6: RTM_NEWROUTE with no NLM_F_CREATE or NLM_F_REPLACE [ 1603.246147][T10553] IPv6: NLM_F_CREATE should be set when creating new route [ 1603.253436][T10553] IPv6: NLM_F_CREATE should be set when creating new route [ 1603.295611][T10553] IPv6: RTM_NEWROUTE with no NLM_F_CREATE or NLM_F_REPLACE [ 1603.431164][T10566] netlink: 16 bytes leftover after parsing attributes in process `syz.7.19683'. [ 1603.477065][T10563] netlink: 'syz.1.19682': attribute type 11 has an invalid length. [ 1603.628118][T10582] netlink: 'syz.7.19686': attribute type 1 has an invalid length. [ 1603.635755][T10584] netlink: 104 bytes leftover after parsing attributes in process `syz.1.19688'. [ 1603.681558][T10582] bond5: entered promiscuous mode [ 1603.703973][T10582] 8021q: adding VLAN 0 to HW filter on device bond5 [ 1603.830238][T10582] bond5: (slave bridge4): making interface the new active one [ 1603.886789][T10582] bridge4: entered promiscuous mode [ 1603.911090][T10582] bridge4: left promiscuous mode [ 1604.233614][T10607] netlink: 'syz.1.19692': attribute type 1 has an invalid length. [ 1604.371187][T10607] 8021q: adding VLAN 0 to HW filter on device bond9 [ 1604.436152][T10617] bond9: (slave veth5): Enslaving as an active interface with a down link [ 1604.460329][T10620] netlink: 'syz.3.19696': attribute type 29 has an invalid length. [ 1604.517666][T10623] bond9: (slave veth0_to_bond): making interface the new active one [ 1604.542631][T10623] veth0_to_bond: entered promiscuous mode [ 1604.565703][T10623] bond9: (slave veth0_to_bond): Enslaving as an active interface with an up link [ 1604.594802][T10634] siw: device registration error -23 [ 1604.601554][T10607] bond9: entered promiscuous mode [ 1604.608038][T10607] bond9: entered allmulticast mode [ 1604.613892][T10607] veth0_to_bond: entered allmulticast mode [ 1604.807822][T10650] netlink: 'syz.1.19703': attribute type 2 has an invalid length. [ 1605.547865][T10707] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 1605.746830][T10720] tipc: Enabled bearer , priority 0 [ 1605.773867][T10720] syzkaller0: entered allmulticast mode [ 1605.888745][T10732] tipc: Resetting bearer [ 1605.894219][T10725] nbd0: detected capacity change from 0 to 127 [ 1605.929539][T10719] tipc: Resetting bearer [ 1606.004494][ T5468] block nbd0: Receive control failed (result -32) [ 1606.032514][T10719] tipc: Disabling bearer [ 1606.117840][T10743] bridge0: Device is already in use. [ 1606.138000][T10746] lo: entered promiscuous mode [ 1606.152598][T10746] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check. [ 1606.212318][T10748] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check. [ 1606.551063][T10768] tipc: Enabling of bearer rejected, failed to enable media [ 1607.081496][T10810] IPVS: set_ctl: invalid protocol: 104 255.255.255.255:20002 [ 1607.320840][T10824] batadv_slave_1: entered promiscuous mode [ 1607.341073][T10828] sch_tbf: burst 19872 is lower than device lo mtu (65550) ! [ 1607.423324][T10825] batadv_slave_1: left promiscuous mode [ 1607.636526][T10848] xt_CT: You must specify a L4 protocol and not use inversions on it [ 1607.671684][T10854] netlink: 'syz.7.19763': attribute type 10 has an invalid length. [ 1607.966705][T10870] netlink: 'syz.3.19767': attribute type 1 has an invalid length. [ 1607.984326][T10870] __nla_validate_parse: 13 callbacks suppressed [ 1607.984344][T10870] netlink: 4 bytes leftover after parsing attributes in process `syz.3.19767'. [ 1608.050794][T10875] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 1608.236546][T10885] netlink: 100 bytes leftover after parsing attributes in process `syz.7.19777'. [ 1608.254873][T10887] netlink: 'syz.3.19776': attribute type 11 has an invalid length. [ 1608.291712][T10889] xt_l2tp: v2 doesn't support IP mode [ 1608.310038][T10889] syzkaller0: entered promiscuous mode [ 1608.317334][T10889] syzkaller0: entered allmulticast mode [ 1608.380924][T10895] netlink: 12 bytes leftover after parsing attributes in process `syz.8.19779'. [ 1608.404702][T10898] netlink: 12 bytes leftover after parsing attributes in process `syz.8.19779'. [ 1608.595484][T10912] netlink: 36 bytes leftover after parsing attributes in process `syz.1.19784'. [ 1608.624525][T18595] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1608.743840][T18595] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1608.848547][T10930] netlink: 68 bytes leftover after parsing attributes in process `syz.1.19789'. [ 1608.924196][T10934] netlink: 24 bytes leftover after parsing attributes in process `syz.4.19791'. [ 1608.960905][T10932] netlink: 28 bytes leftover after parsing attributes in process `syz.7.19790'. [ 1608.971649][T10934] gretap0: entered allmulticast mode [ 1609.037780][T10932] netlink: 'syz.7.19790': attribute type 7 has an invalid length. [ 1609.056737][T10932] netlink: 'syz.7.19790': attribute type 8 has an invalid length. [ 1609.066952][T10932] netlink: 4 bytes leftover after parsing attributes in process `syz.7.19790'. [ 1609.184664][T10953] netlink: 'syz.4.19796': attribute type 10 has an invalid length. [ 1609.229258][T10953] netlink: 2 bytes leftover after parsing attributes in process `syz.4.19796'. [ 1609.316068][T10953] team0: entered promiscuous mode [ 1609.321256][T10953] team_slave_0: entered promiscuous mode [ 1609.350915][T10953] team_slave_1: entered promiscuous mode [ 1609.362407][T10953] bridge0: port 3(team0) entered blocking state [ 1609.375984][T10953] bridge0: port 3(team0) entered disabled state [ 1609.382686][T10953] team0: entered allmulticast mode [ 1609.388694][T10953] team_slave_0: entered allmulticast mode [ 1609.398866][T10953] team_slave_1: entered allmulticast mode [ 1609.879445][T10999] netlink: 'syz.8.19807': attribute type 30 has an invalid length. [ 1609.963208][T11001] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 1610.011741][T11001] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 1610.031583][T11003] xt_bpf: check failed: parse error [ 1610.219998][T11022] netlink: 'syz.4.19815': attribute type 10 has an invalid length. [ 1610.258290][T11022] dummy0: entered promiscuous mode [ 1610.267650][T11022] dummy0: entered allmulticast mode [ 1610.275493][T11022] team0: Port device dummy0 added [ 1610.275614][T11025] netlink: 'syz.4.19815': attribute type 10 has an invalid length. [ 1610.296136][T11024] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1610.317116][T11025] dummy0: left promiscuous mode [ 1610.322177][T11025] dummy0: left allmulticast mode [ 1610.329407][T11025] team0: Port device dummy0 removed [ 1610.342228][T11025] bond0: (slave dummy0): Enslaving as an active interface with an up link [ 1610.419560][T11027] syzkaller0: entered promiscuous mode [ 1610.440130][T11027] syzkaller0: entered allmulticast mode [ 1610.511946][T11031] netlink: 'syz.8.19820': attribute type 19 has an invalid length. [ 1610.524260][T11031] netlink: 'syz.8.19820': attribute type 19 has an invalid length. [ 1610.580985][T11034] xt_TCPMSS: Only works on TCP SYN packets [ 1610.665147][T11038] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1610.745620][T11048] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 1610.860330][T11048] IPVS: persistence engine module ip_vs_pe_À not found [ 1611.076627][T11072] vlan2: entered promiscuous mode [ 1611.082147][T11072] geneve1: entered promiscuous mode [ 1611.107833][T11072] vlan2: entered allmulticast mode [ 1611.141535][T11072] geneve1: entered allmulticast mode [ 1611.495097][T11037] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 1611.752982][ C1] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1612.476008][ C0] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1612.898791][T11188] validate_nla: 1 callbacks suppressed [ 1612.898809][T11188] netlink: 'syz.3.19870': attribute type 21 has an invalid length. [ 1613.095222][T11199] batman_adv: Cannot find parent device. Skipping batadv-on-batadv check for gretap2 [ 1613.109563][T11199] gretap2: default qdisc (pfifo_fast) fail, fallback to noqueue [ 1613.127964][T11201] netlink: 'syz.3.19872': attribute type 1 has an invalid length. [ 1613.146895][T11199] gretap2: entered promiscuous mode [ 1613.163297][T11199] gretap2: entered allmulticast mode [ 1613.179779][T11203] __nla_validate_parse: 16 callbacks suppressed [ 1613.179791][T11203] netlink: 8 bytes leftover after parsing attributes in process `syz.3.19872'. [ 1613.198643][T11203] netlink: 16 bytes leftover after parsing attributes in process `syz.3.19872'. [ 1613.335310][T11201] 8021q: adding VLAN 0 to HW filter on device bond0 [ 1613.467940][T11194] bond0: (slave veth0_to_bond): making interface the new active one [ 1613.487041][T11194] bond0: (slave veth0_to_bond): Enslaving as an active interface with an up link [ 1613.627394][T11239] netlink: 8 bytes leftover after parsing attributes in process `syz.3.19880'. [ 1613.638487][T11239] netlink: 4 bytes leftover after parsing attributes in process `syz.3.19880'. [ 1613.658805][T11239] netlink: 'syz.3.19880': attribute type 15 has an invalid length. [ 1613.692177][T11243] IPVS: set_ctl: invalid protocol: 43 127.0.0.1:20004 [ 1613.712621][T27516] netdevsim netdevsim3 netdevsim0: set [0, 0] type 1 family 0 port 256 - 0 [ 1613.724176][T27516] netdevsim netdevsim3 netdevsim1: set [0, 0] type 1 family 0 port 256 - 0 [ 1613.734453][T11239] netlink: 8 bytes leftover after parsing attributes in process `syz.3.19880'. [ 1613.758368][T27516] netdevsim netdevsim3 netdevsim2: set [0, 0] type 1 family 0 port 256 - 0 [ 1613.768726][T11239] netlink: 4 bytes leftover after parsing attributes in process `syz.3.19880'. [ 1613.776691][T27516] netdevsim netdevsim3 netdevsim3: set [0, 0] type 1 family 0 port 256 - 0 [ 1613.779660][T11239] netlink: 'syz.3.19880': attribute type 15 has an invalid length. [ 1613.896107][T11250] netlink: 36 bytes leftover after parsing attributes in process `syz.4.19882'. [ 1613.965878][T11252] sctp: [Deprecated]: syz.3.19884 (pid 11252) Use of struct sctp_assoc_value in delayed_ack socket option. [ 1613.965878][T11252] Use struct sctp_sack_info instead [ 1614.067205][T11259] netlink: 8 bytes leftover after parsing attributes in process `syz.3.19884'. [ 1614.085641][T11257] bond0: option ad_select: unable to set because the bond device is up [ 1614.386415][T11278] IPVS: set_ctl: invalid protocol: 60 255.255.255.255:20001 [ 1614.417913][T11280] Bluetooth: MGMT ver 1.23 [ 1614.429294][T11279] IPVS: set_ctl: invalid protocol: 60 255.255.255.255:20001 [ 1614.458441][T11280] netlink: 'syz.7.19894': attribute type 11 has an invalid length. [ 1614.490097][T11287] netlink: 'syz.7.19894': attribute type 11 has an invalid length. [ 1614.721256][T11293] netlink: 12 bytes leftover after parsing attributes in process `syz.4.19898'. [ 1614.791726][T11309] netlink: 40 bytes leftover after parsing attributes in process `syz.7.19902'. [ 1614.916669][T11315] syzkaller1: entered promiscuous mode [ 1614.922177][T11315] syzkaller1: entered allmulticast mode [ 1614.999899][T11320] º: renamed from veth1_vlan (while UP) [ 1615.265127][T11325] bond3: (slave bridge3): Enslaving as an active interface with an up link [ 1615.401577][T11337] pim6reg1: entered promiscuous mode [ 1615.414682][T11337] pim6reg1: entered allmulticast mode [ 1615.436941][T11352] openvswitch: netlink: Flow actions attr not present in new flow. [ 1615.704172][T11366] xt_l2tp: missing protocol rule (udp|l2tpip) [ 1616.968525][T11452] netlink: 'syz.4.19948': attribute type 1 has an invalid length. [ 1617.012422][T11452] geneve2: entered promiscuous mode [ 1617.426116][T11484] v: renamed from vlan0 (while UP) [ 1618.655378][T11556] __nla_validate_parse: 10 callbacks suppressed [ 1618.655397][T11556] netlink: 12 bytes leftover after parsing attributes in process `syz.3.19980'. [ 1618.666260][T11560] netlink: 16 bytes leftover after parsing attributes in process `syz.4.19981'. [ 1618.833745][T11563] nci: __nci_request: wait_for_completion_interruptible_timeout failed -512 [ 1618.929830][T11582] netlink: 'syz.1.19986': attribute type 17 has an invalid length. [ 1618.957785][T11582] netlink: 4 bytes leftover after parsing attributes in process `syz.1.19986'. [ 1618.997603][T11582] netlink: 28 bytes leftover after parsing attributes in process `syz.1.19986'. [ 1619.016306][T11585] netlink: 60 bytes leftover after parsing attributes in process `syz.3.19987'. [ 1619.088221][T11582] gretap0: entered promiscuous mode [ 1619.126458][T11586] netlink: 8 bytes leftover after parsing attributes in process `syz.7.19988'. [ 1619.185348][T11582] gretap0: left promiscuous mode [ 1619.207370][T11594] netlink: 8 bytes leftover after parsing attributes in process `syz.8.19990'. [ 1619.327676][T11598] Bluetooth: hci1: too big key_count value 32778 [ 1619.348261][T11602] netlink: 8 bytes leftover after parsing attributes in process `syz.7.19993'. [ 1619.416961][T11610] netlink: 12 bytes leftover after parsing attributes in process `syz.4.19991'. [ 1619.444690][T11612] netlink: 4 bytes leftover after parsing attributes in process `syz.7.19993'. [ 1619.455063][T11605] netlink: 'syz.8.19994': attribute type 33 has an invalid length. [ 1619.526015][T11617] netlink: 'syz.8.19994': attribute type 33 has an invalid length. [ 1620.391317][T11671] openvswitch: netlink: IP tunnel dst address not specified [ 1620.580944][T11692] netlink: 'syz.3.20020': attribute type 15 has an invalid length. [ 1620.588077][T11683] gre0: entered promiscuous mode [ 1620.594435][T11683] gre0: entered allmulticast mode [ 1620.602438][T11692] netlink: 'syz.3.20020': attribute type 15 has an invalid length. [ 1621.557744][T11724] netlink: 'syz.7.20028': attribute type 1 has an invalid length. [ 1621.570459][T11724] netlink: 'syz.7.20028': attribute type 11 has an invalid length. [ 1621.667963][T11737] xt_TCPMSS: Only works on TCP SYN packets [ 1621.740576][T11740] hsr_slave_0: hsr_addr_subst_dest: Unknown node [ 1621.747072][T11740] hsr_slave_1: hsr_addr_subst_dest: Unknown node [ 1621.772417][T11743] veth0: entered promiscuous mode [ 1621.898474][T11754] veth0: left promiscuous mode [ 1622.101431][T11772] xt_NFQUEUE: number of queues (27568) out of range (got 68779) [ 1622.325751][T11786] bridge4: trying to set multicast startup query interval below minimum, setting to 100 (1000ms) [ 1622.566352][T11803] x_tables: (null)_tables: SNAT target: only valid in nat table, not syz0 [ 1622.670822][T11803] netlink: 'syz.8.20051': attribute type 15 has an invalid length. [ 1623.754466][T11881] __nla_validate_parse: 39 callbacks suppressed [ 1623.754485][T11881] netlink: 28 bytes leftover after parsing attributes in process `syz.3.20075'. [ 1623.786044][T11883] netlink: 'syz.8.20076': attribute type 10 has an invalid length. [ 1623.852414][T11881] syzkaller0: entered promiscuous mode [ 1623.863650][T11881] syzkaller0: entered allmulticast mode [ 1623.870918][T11885] netlink: 72 bytes leftover after parsing attributes in process `syz.7.20077'. [ 1623.887500][T11881] tipc: Enabling of bearer rejected, media not registered [ 1623.904474][T11888] netlink: 32 bytes leftover after parsing attributes in process `syz.8.20078'. [ 1623.927265][T11881] dvmrp0: left allmulticast mode [ 1623.990381][T11891] netlink: 8 bytes leftover after parsing attributes in process `syz.7.20080'. [ 1624.009857][T11891] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 1624.193371][T11905] netlink: 4 bytes leftover after parsing attributes in process `syz.1.20079'. [ 1624.215404][T11905] netlink: 4 bytes leftover after parsing attributes in process `syz.1.20079'. [ 1624.807981][T21982] Bluetooth: hci1: command 0x0406 tx timeout [ 1626.313068][ T5152] Bluetooth: hci4: command 0x0405 tx timeout [ 1626.459332][T11897] wlan0 speed is unknown, defaulting to 1000 [ 1626.468085][T11897] ÿÿÿÿÿÿ speed is unknown, defaulting to 1000 [ 1626.627979][T11918] netlink: 312 bytes leftover after parsing attributes in process `syz.7.20084'. [ 1626.807374][T11929] netlink: 'syz.3.20088': attribute type 11 has an invalid length. [ 1626.816299][T11925] xt_TPROXY: Can be used only with -p tcp or -p udp [ 1626.835314][T11931] nbd: must specify a size in bytes for the device [ 1627.097246][T11897] lo speed is unknown, defaulting to 1000 [ 1627.157744][T11948] netlink: 28 bytes leftover after parsing attributes in process `syz.7.20094'. [ 1627.188424][T11948] netlink: 8 bytes leftover after parsing attributes in process `syz.7.20094'. [ 1627.188424][T11951] netlink: 8 bytes leftover after parsing attributes in process `syz.7.20094'. [ 1627.188458][T11948] netlink: 'syz.7.20094': attribute type 5 has an invalid length. [ 1627.261218][T11951] netlink: 'syz.7.20094': attribute type 5 has an invalid length. [ 1627.280678][T11956] netlink: 'syz.3.20097': attribute type 4 has an invalid length. [ 1627.288836][T11959] block nbd0: reconnected socket [ 1627.306607][ T5468] block nbd0: Receive control failed (result -32) [ 1627.692650][ T30] audit: type=1800 audit(1765427581.085:20): pid=11976 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.3.20103" name=4996AE17DFFC2E43C8174B54B620636894AAACF28FF62616363C70A440AEC4014CAF28C0ADC04308 dev="tmpfs" ino=1122 res=0 errno=0 [ 1627.870465][T11987] team0: Device gtp0 is up. Set it down before adding it as a team port [ 1627.931009][T11988] netlink: 'syz.1.20108': attribute type 1 has an invalid length. [ 1628.585162][T12019] syzkaller1: entered promiscuous mode [ 1628.599474][T12019] syzkaller1: entered allmulticast mode [ 1629.762508][T12074] __nla_validate_parse: 7 callbacks suppressed [ 1629.762528][T12074] netlink: 24 bytes leftover after parsing attributes in process `syz.8.20128'. [ 1629.827504][T12076] netlink: 16 bytes leftover after parsing attributes in process `syz.8.20128'. [ 1629.956573][T12079] tipc: Enabled bearer , priority 0 [ 1629.976208][T12079] sch_tbf: burst 127 is lower than device syzkaller0 mtu (1514) ! [ 1630.007518][T12079] tipc: Resetting bearer [ 1630.054383][T12090] syz_tun: entered allmulticast mode [ 1630.226850][T12103] macvtap1: entered allmulticast mode [ 1630.232274][T12103] veth0_macvtap: entered allmulticast mode [ 1630.287915][T12106] netlink: 'syz.4.20139': attribute type 1 has an invalid length. [ 1630.411098][T12111] netlink: 24 bytes leftover after parsing attributes in process `syz.3.20141'. [ 1630.441066][T12112] netlink: 24 bytes leftover after parsing attributes in process `syz.3.20141'. [ 1630.471716][T12111] netlink: 'syz.3.20141': attribute type 4 has an invalid length. [ 1630.646732][T12124] netlink: 8 bytes leftover after parsing attributes in process `syz.1.20147'. [ 1630.655286][T12118] syzkaller0: entered promiscuous mode [ 1630.663989][T12118] syzkaller0: entered allmulticast mode [ 1630.679019][T12122] sch_tbf: burst 127 is lower than device syzkaller0 mtu (313) ! [ 1630.887966][T12139] rdma_op ffff8880906f49f0 conn xmit_rdma 0000000000000000 [ 1630.899557][T12139] netlink: 28 bytes leftover after parsing attributes in process `syz.8.20152'. [ 1631.681528][T12142] xt_hashlimit: Unknown mode mask C4, kernel too old? [ 1633.342361][T12152] geneve4: entered promiscuous mode [ 1633.351108][T12156] netlink: 72 bytes leftover after parsing attributes in process `syz.7.20158'. [ 1633.356294][T12159] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 1633.385089][T12152] geneve4: entered allmulticast mode [ 1633.395263][T12156] netlink: 36 bytes leftover after parsing attributes in process `syz.7.20158'. [ 1633.409732][ T3010] netdevsim netdevsim8 netdevsim0: set [1, 1] type 2 family 0 port 19999 - 0 [ 1633.476668][ T3010] netdevsim netdevsim8 netdevsim1: set [1, 1] type 2 family 0 port 19999 - 0 [ 1633.500869][ T3010] netdevsim netdevsim8 netdevsim2: set [1, 1] type 2 family 0 port 19999 - 0 [ 1633.523384][T11222] netdevsim netdevsim8 netdevsim3: set [1, 1] type 2 family 0 port 19999 - 0 [ 1633.578360][T12171] netlink: 28 bytes leftover after parsing attributes in process `syz.4.20162'. [ 1633.638065][T12179] netlink: 212368 bytes leftover after parsing attributes in process `syz.8.20166'. [ 1634.362499][T12233] 0ªî{X¹¦: renamed from gretap0 [ 1634.403880][T12233] 0ªî{X¹¦: entered allmulticast mode [ 1634.420483][T12233] A link change request failed with some changes committed already. Interface 30ªî{X¹¦ may have been left with an inconsistent configuration, please check. [ 1634.514515][T12242] netlink: 'syz.4.20183': attribute type 1 has an invalid length. [ 1634.522499][T12242] netlink: 'syz.4.20183': attribute type 3 has an invalid length. [ 1634.532519][T12242] NCSI netlink: No device for ifindex 813332851 [ 1634.567108][T12242] netlink: 'syz.4.20183': attribute type 9 has an invalid length. [ 1634.797297][T12261] __nla_validate_parse: 6 callbacks suppressed [ 1634.797315][T12261] netlink: 8 bytes leftover after parsing attributes in process `syz.1.20189'. [ 1634.802036][T12262] xt_ipcomp: unknown flags 1D [ 1634.976821][T12278] netlink: 'syz.3.20193': attribute type 1 has an invalid length. [ 1635.106670][T12286] netlink: 20 bytes leftover after parsing attributes in process `syz.3.20196'. [ 1635.178741][T12293] netlink: 4 bytes leftover after parsing attributes in process `syz.1.20198'. [ 1635.190160][T12293] netlink: 8 bytes leftover after parsing attributes in process `syz.1.20198'. [ 1635.353923][T12298] netlink: 8 bytes leftover after parsing attributes in process `syz.1.20200'. [ 1635.496144][T12302] tipc: Enabled bearer , priority 0 [ 1635.511746][T12302] syzkaller0: entered promiscuous mode [ 1635.534573][T12302] syzkaller0: entered allmulticast mode [ 1635.625617][T12308] tipc: Resetting bearer [ 1635.760588][T12311] tipc: Enabled bearer , priority 2 [ 1635.988707][T12321] netlink: 8 bytes leftover after parsing attributes in process `syz.4.20207'. [ 1636.010659][T12301] tipc: Resetting bearer [ 1636.026285][T12321] netlink: 48 bytes leftover after parsing attributes in process `syz.4.20207'. [ 1636.059568][T12301] tipc: Disabling bearer [ 1636.132018][T12329] netlink: 'syz.8.20208': attribute type 1 has an invalid length. [ 1636.193049][T12325] netlink: 164 bytes leftover after parsing attributes in process `syz.8.20208'. [ 1636.218498][T12321] netlink: 8 bytes leftover after parsing attributes in process `syz.4.20207'. [ 1636.228433][T12325] netlink: 164 bytes leftover after parsing attributes in process `syz.8.20208'. [ 1636.276363][T12333] sit0: entered promiscuous mode [ 1636.281662][T12333] netlink: 'syz.3.20209': attribute type 1 has an invalid length. [ 1636.512069][T12338] syzkaller0: entered promiscuous mode [ 1636.519090][T12338] syzkaller0: entered allmulticast mode [ 1640.077015][T12402] netlink: 'syz.1.20227': attribute type 13 has an invalid length. [ 1640.094083][T12401] syzkaller0: left promiscuous mode [ 1640.146613][T12401] syzkaller0: left allmulticast mode [ 1640.422354][T12418] openvswitch: netlink: IP tunnel attribute has 4 unknown bytes. [ 1640.449583][T12418] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 1640.481927][T12431] batadv0: entered promiscuous mode [ 1640.487658][T12431] batadv0: entered allmulticast mode [ 1640.496746][T12423] __nla_validate_parse: 5 callbacks suppressed [ 1640.496763][T12423] netlink: 12 bytes leftover after parsing attributes in process `syz.4.20239'. [ 1640.501304][T12434] netlink: 'syz.1.20238': attribute type 1 has an invalid length. [ 1640.618847][T12439] netlink: 12 bytes leftover after parsing attributes in process `syz.1.20238'. [ 1640.669986][T12434] netlink: 12 bytes leftover after parsing attributes in process `syz.1.20238'. [ 1640.672096][T12439] xfrm1: entered promiscuous mode [ 1640.752516][T12439] xfrm1: entered allmulticast mode [ 1640.775083][T12451] netlink: 12 bytes leftover after parsing attributes in process `syz.7.20242'. [ 1640.796924][T12458] netlink: 12 bytes leftover after parsing attributes in process `syz.7.20242'. [ 1641.072166][T12477] netlink: 76 bytes leftover after parsing attributes in process `syz.8.20248'. [ 1641.095256][T12478] : renamed from bridge_slave_0 (while UP) [ 1641.245007][T12486] netlink: 65039 bytes leftover after parsing attributes in process `syz.4.20252'. [ 1641.371464][T12498] netlink: 32 bytes leftover after parsing attributes in process `syz.8.20256'. [ 1641.413845][T12498] netlink: 'syz.8.20256': attribute type 1 has an invalid length. [ 1641.449093][T12505] netlink: 12 bytes leftover after parsing attributes in process `syz.1.20258'. [ 1641.659224][T12518] netlink: 'syz.1.20262': attribute type 4 has an invalid length. [ 1641.667712][T12518] netlink: 240 bytes leftover after parsing attributes in process `syz.1.20262'. [ 1641.873186][T12524] wlan0 speed is unknown, defaulting to 1000 [ 1641.880962][T12524] ÿÿÿÿÿÿ speed is unknown, defaulting to 1000 [ 1642.392005][T12524] lo speed is unknown, defaulting to 1000 [ 1643.318481][T12583] IPv6: NLM_F_REPLACE set, but no existing node found! [ 1643.806678][T12615] lo: entered promiscuous mode [ 1643.823387][T12615] netlink: 'syz.3.20286': attribute type 2 has an invalid length. [ 1643.837180][T12615] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check. [ 1643.891235][T12623] bond10: invalid ARP target 0.0.0.0 specified for addition [ 1643.899765][T12623] bond10: option arp_ip_target: invalid value (0) [ 1643.922364][T12623] bond10 (unregistering): Released all slaves [ 1643.985179][T12627] netlink: 'syz.1.20290': attribute type 83 has an invalid length. [ 1643.996531][T12632] vlan2: entered promiscuous mode [ 1644.021471][T12626] netlink: 'syz.1.20290': attribute type 83 has an invalid length. [ 1644.158066][T12641] xt_l2tp: invalid flags combination: 0 [ 1644.194967][T12644] netlink: 'syz.1.20296': attribute type 1 has an invalid length. [ 1644.211056][T12646] openvswitch: netlink: IP tunnel attribute has 1026 unknown bytes. [ 1644.227270][T12647] openvswitch: netlink: IP tunnel attribute has 1026 unknown bytes. [ 1644.301240][T12652] netlink: 'syz.8.20298': attribute type 5 has an invalid length. [ 1644.331980][T12652] geneve5: entered promiscuous mode [ 1644.340265][T12652] geneve5: entered allmulticast mode [ 1644.366527][ T8445] netdevsim netdevsim8 netdevsim0: set [1, 2] type 2 family 0 port 256 - 0 [ 1644.385344][ T8445] netdevsim netdevsim8 netdevsim1: set [1, 2] type 2 family 0 port 256 - 0 [ 1644.407549][ T8445] netdevsim netdevsim8 netdevsim2: set [1, 2] type 2 family 0 port 256 - 0 [ 1644.422944][ T8445] netdevsim netdevsim8 netdevsim3: set [1, 2] type 2 family 0 port 256 - 0 [ 1644.851393][T12680] IPv6: sit2: Disabled Multicast RS [ 1644.858956][T12680] sit2: entered allmulticast mode [ 1645.080492][T12687] bond4: option all_slaves_active: invalid value (222) [ 1645.095087][T12687] bond4 (unregistering): Released all slaves [ 1645.224417][T12698] IPVS: sync thread started: state = BACKUP, mcast_ifn = virt_wifi0, syncid = 3, id = 0 [ 1645.664262][T12726] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check. [ 1645.999578][T12749] netlink: 'syz.3.20326': attribute type 24 has an invalid length. [ 1646.380665][T12777] netlink: zone id is out of range [ 1646.386319][T12777] netlink: zone id is out of range [ 1646.391507][T12777] netlink: zone id is out of range [ 1646.403944][T12777] netlink: get zone limit has 4 unknown bytes [ 1646.484499][T12781] xt_TCPMSS: path-MTU clamping only supported in FORWARD, OUTPUT and POSTROUTING hooks [ 1646.558216][T12783] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 1646.854874][T12788] __nla_validate_parse: 15 callbacks suppressed [ 1646.854894][T12788] netlink: 16 bytes leftover after parsing attributes in process `syz.1.20339'. [ 1647.078824][T12812] netlink: 148 bytes leftover after parsing attributes in process `syz.8.20346'. [ 1647.204411][T12814] netlink: 4 bytes leftover after parsing attributes in process `syz.4.20347'. [ 1647.225197][T12817] netlink: 'syz.3.20348': attribute type 1 has an invalid length. [ 1647.268573][T12826] netlink: 8 bytes leftover after parsing attributes in process `syz.1.20350'. [ 1647.282472][T12825] IPVS: set_ctl: invalid protocol: 45071 255.255.255.255:20000 [ 1647.419425][T12835] netlink: 36 bytes leftover after parsing attributes in process `syz.8.20354'. [ 1647.431285][T12833] syzkaller0: entered promiscuous mode [ 1647.437884][T12835] netlink: 24 bytes leftover after parsing attributes in process `syz.8.20354'. [ 1647.455462][T12836] netlink: 20 bytes leftover after parsing attributes in process `syz.4.20352'. [ 1647.469366][T12833] syzkaller0: entered allmulticast mode [ 1647.475146][T12836] netlink: 8 bytes leftover after parsing attributes in process `syz.4.20352'. [ 1647.488304][T12835] netlink: 48 bytes leftover after parsing attributes in process `syz.8.20354'. [ 1647.662332][T12842] netlink: 12 bytes leftover after parsing attributes in process `syz.3.20356'. [ 1647.696208][T12844] netlink: 'syz.8.20357': attribute type 1 has an invalid length. [ 1647.929160][T12867] ip6t_srh: unknown srh match flags 5F28 [ 1648.120832][T12880] bridge0: entered allmulticast mode [ 1648.176487][T12887] 8021q: VLANs not supported on ip6_vti0 [ 1648.431881][T12910] Cannot find set identified by id 1 to match [ 1649.135949][T12942] bond0: entered promiscuous mode [ 1649.141128][T12942] bond_slave_0: entered promiscuous mode [ 1649.147719][T12942] bond_slave_1: entered promiscuous mode [ 1649.155172][T12942] bond0: left promiscuous mode [ 1649.160039][T12942] bond_slave_0: left promiscuous mode [ 1649.166205][T12942] bond_slave_1: left promiscuous mode [ 1649.464114][T12957] bridge: RTM_NEWNEIGH bridge0 without NUD_PERMANENT [ 1649.719190][T12978] macsec1: entered promiscuous mode [ 1649.724936][T12978] bridge0: entered promiscuous mode [ 1649.731199][T12978] macsec1: entered allmulticast mode [ 1649.738052][T12978] bridge0: entered allmulticast mode [ 1649.744758][T12978] bridge0: port 3(macsec1) entered blocking state [ 1649.751424][T12978] bridge0: port 3(macsec1) entered disabled state [ 1649.765539][T12978] bridge0: left allmulticast mode [ 1649.770814][T12978] bridge0: left promiscuous mode [ 1649.890155][T12985] ip6gre1: entered promiscuous mode [ 1650.207488][T13014] netlink: 'syz.4.20406': attribute type 12 has an invalid length. [ 1650.397146][ T5152] Bluetooth: hci3: command 0x0406 tx timeout [ 1650.850471][T13048] xt_hashlimit: size too large, truncated to 1048576 [ 1650.991156][T13055] netlink: 'syz.1.20417': attribute type 1 has an invalid length. [ 1651.018837][T13055] bond10 (unregistering): Released all slaves [ 1651.059432][T13057] ip6tnl3: entered promiscuous mode [ 1651.065128][T13057] ip6tnl3: entered allmulticast mode [ 1651.315057][T13070] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 1651.758531][T13098] bond10: up delay (5) is not a multiple of miimon (4), value rounded to 4 ms [ 1651.867124][T13107] xt_hashlimit: invalid rate [ 1652.054869][T13127] __nla_validate_parse: 24 callbacks suppressed [ 1652.054888][T13127] netlink: 20 bytes leftover after parsing attributes in process `syz.4.20443'. [ 1652.190797][T13137] netlink: 'syz.8.20446': attribute type 12 has an invalid length. [ 1652.576504][T13157] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 1652.597674][T13157] netlink: 8 bytes leftover after parsing attributes in process `syz.8.20454'. [ 1652.884402][ T5468] Bluetooth: hci4: command 0x0405 tx timeout [ 1652.949164][T13167] netlink: 300 bytes leftover after parsing attributes in process `syz.3.20457'. [ 1653.146990][T13179] netlink: 4 bytes leftover after parsing attributes in process `syz.8.20460'. [ 1653.269406][T13184] netlink: 'syz.3.20464': attribute type 9 has an invalid length. [ 1653.448762][T13194] netlink: 32 bytes leftover after parsing attributes in process `syz.1.20468'. [ 1653.674719][T13211] netlink: 8 bytes leftover after parsing attributes in process `syz.1.20471'. [ 1653.901264][T13219] netlink: 'syz.4.20475': attribute type 7 has an invalid length. [ 1654.018863][T13229] netlink: 'syz.4.20478': attribute type 1 has an invalid length. [ 1654.028862][T13229] netlink: 'syz.4.20478': attribute type 4 has an invalid length. [ 1654.037777][T13229] netlink: 9422 bytes leftover after parsing attributes in process `syz.4.20478'. [ 1654.205409][T13241] netlink: 12 bytes leftover after parsing attributes in process `syz.1.20483'. [ 1654.320135][T13241] netlink: 'syz.1.20483': attribute type 5 has an invalid length. [ 1654.352019][T13241] netlink: 4 bytes leftover after parsing attributes in process `syz.1.20483'. [ 1654.533569][T13254] netlink: 32 bytes leftover after parsing attributes in process `syz.3.20489'. [ 1654.687046][T13260] openvswitch: netlink: Flow key attr not present in new flow. [ 1654.880105][T13265] netlink: 'syz.1.20493': attribute type 1 has an invalid length. [ 1654.891604][T21982] Bluetooth: hci7: unexpected cc 0x0c03 length: 249 > 1 [ 1654.916665][T21982] Bluetooth: hci7: unexpected cc 0x1003 length: 249 > 9 [ 1654.928209][T21982] Bluetooth: hci7: unexpected cc 0x1001 length: 249 > 9 [ 1654.947084][T21982] Bluetooth: hci7: unexpected cc 0x0c23 length: 249 > 4 [ 1654.956294][T21982] Bluetooth: hci7: unexpected cc 0x0c38 length: 249 > 2 [ 1655.039815][T13271] wlan0 speed is unknown, defaulting to 1000 [ 1655.055505][T13271] ÿÿÿÿÿÿ speed is unknown, defaulting to 1000 [ 1655.190590][ T2994] syz_tun (unregistering): left promiscuous mode [ 1655.321057][T13271] lo speed is unknown, defaulting to 1000 [ 1655.739760][T13271] chnl_net:caif_netlink_parms(): no params data found [ 1656.010418][T13271] bridge0: port 1(bridge_slave_0) entered blocking state [ 1656.023667][T13271] bridge0: port 1(bridge_slave_0) entered disabled state [ 1656.031195][T13271] bridge_slave_0: entered allmulticast mode [ 1656.040484][T13271] bridge_slave_0: entered promiscuous mode [ 1656.064836][T13271] bridge0: port 2(bridge_slave_1) entered blocking state [ 1656.083283][T13271] bridge0: port 2(bridge_slave_1) entered disabled state [ 1656.090768][T13271] bridge_slave_1: entered allmulticast mode [ 1656.101750][T13271] bridge_slave_1: entered promiscuous mode [ 1656.146905][T13326] x_tables: duplicate underflow at hook 2 [ 1656.154841][T13328] x_tables: duplicate underflow at hook 2 [ 1656.162649][T13321] bond11: Unable to set up delay as MII monitoring is disabled [ 1656.177787][T13321] bond11 (unregistering): Released all slaves [ 1656.231306][T13271] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 1656.247959][T13271] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 1656.307387][T13332] nbd: must specify at least one socket [ 1656.329613][T13271] team0: Port device team_slave_0 added [ 1656.355706][T13271] team0: Port device team_slave_1 added [ 1656.419211][T13271] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 1656.431117][T13271] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 1656.460071][T13271] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 1656.487103][T13271] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 1656.495084][T13271] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 1656.524724][T13271] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 1656.564963][ T5468] Bluetooth: hci2: Opcode 0x0401 failed: -110 [ 1656.570221][ T5152] Bluetooth: hci2: command 0x0406 tx timeout [ 1656.645510][T13271] hsr_slave_0: entered promiscuous mode [ 1656.652637][T13271] hsr_slave_1: entered promiscuous mode [ 1656.660823][T13271] debugfs: 'hsr0' already exists in 'hsr' [ 1656.668272][T13271] Cannot create hsr debugfs directory [ 1656.860425][T13361] netlink: 'syz.1.20519': attribute type 2 has an invalid length. [ 1656.956016][T13271] netdevsim netdevsim8 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1656.979994][T13271] netdevsim netdevsim8 netdevsim3 (unregistering): unset [1, 1] type 2 family 0 port 19999 - 0 [ 1656.991084][T13271] netdevsim netdevsim8 netdevsim3 (unregistering): unset [1, 2] type 2 family 0 port 256 - 0 [ 1657.044517][ T5152] Bluetooth: hci7: command tx timeout [ 1657.096749][T13271] netdevsim netdevsim8 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1657.115994][T13271] netdevsim netdevsim8 netdevsim2 (unregistering): unset [1, 1] type 2 family 0 port 19999 - 0 [ 1657.135327][T13271] netdevsim netdevsim8 netdevsim2 (unregistering): unset [1, 2] type 2 family 0 port 256 - 0 [ 1657.238970][T13271] netdevsim netdevsim8 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1657.253966][T13271] netdevsim netdevsim8 netdevsim1 (unregistering): unset [1, 1] type 2 family 0 port 19999 - 0 [ 1657.264097][T13383] __nla_validate_parse: 5 callbacks suppressed [ 1657.264115][T13383] netlink: 28 bytes leftover after parsing attributes in process `syz.3.20525'. [ 1657.265566][T13271] netdevsim netdevsim8 netdevsim1 (unregistering): unset [1, 2] type 2 family 0 port 256 - 0 [ 1657.270769][T13383] netlink: 28 bytes leftover after parsing attributes in process `syz.3.20525'. [ 1657.337221][T13383] erspan0: entered promiscuous mode [ 1657.346720][T13383] batadv_slave_1: entered promiscuous mode [ 1657.352781][T13383] batadv_slave_1: left promiscuous mode [ 1657.358668][T13383] erspan0: left promiscuous mode [ 1657.497208][T13271] netdevsim netdevsim8 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1657.508041][T13271] netdevsim netdevsim8 netdevsim0 (unregistering): unset [1, 1] type 2 family 0 port 19999 - 0 [ 1657.526569][T13271] netdevsim netdevsim8 netdevsim0 (unregistering): unset [1, 2] type 2 family 0 port 256 - 0 [ 1657.566454][T13389] netlink: 'syz.3.20527': attribute type 2 has an invalid length. [ 1657.576353][T13389] netlink: 'syz.3.20527': attribute type 2 has an invalid length. [ 1657.742062][T13381] netlink: 'syz.4.20524': attribute type 5 has an invalid length. [ 1657.889873][T13397] netlink: 'syz.1.20530': attribute type 11 has an invalid length. [ 1657.900498][T13398] netlink: 'syz.4.20529': attribute type 1 has an invalid length. [ 1657.901178][T13397] netlink: 224 bytes leftover after parsing attributes in process `syz.1.20530'. [ 1657.934704][T13271] netdevsim netdevsim8 netdevsim0: renamed from eth0 [ 1657.957238][T13271] netdevsim netdevsim8 netdevsim1: renamed from eth1 [ 1657.969897][T13271] netdevsim netdevsim8 netdevsim2: renamed from eth2 [ 1658.012444][T13271] netdevsim netdevsim8 netdevsim3: renamed from eth3 [ 1658.152463][T13421] netlink: 'syz.1.20532': attribute type 2 has an invalid length. [ 1658.168299][T13420] netlink: 'syz.4.20533': attribute type 17 has an invalid length. [ 1658.190316][T13271] 8021q: adding VLAN 0 to HW filter on device bond0 [ 1658.222230][T13271] 8021q: adding VLAN 0 to HW filter on device team0 [ 1658.245039][ T8437] bridge0: port 1(bridge_slave_0) entered blocking state [ 1658.252279][ T8437] bridge0: port 1(bridge_slave_0) entered forwarding state [ 1658.307365][ T8437] bridge0: port 2(bridge_slave_1) entered blocking state [ 1658.314564][ T8437] bridge0: port 2(bridge_slave_1) entered forwarding state [ 1658.417640][T13428] netdevsim netdevsim4: Direct firmware load for . failed with error -2 [ 1658.454750][T13428] netdevsim netdevsim4: Falling back to sysfs fallback for: . [ 1658.515313][T13440] netlink: 'syz.3.20537': attribute type 1 has an invalid length. [ 1658.636254][T13446] netlink: 'syz.4.20538': attribute type 10 has an invalid length. [ 1658.657669][T13446] bridge_slave_1: left allmulticast mode [ 1658.672396][T13446] bridge_slave_1: left promiscuous mode [ 1658.682595][T13446] bridge0: port 2(bridge_slave_1) entered disabled state [ 1658.709890][T13446] bond0: (slave bridge_slave_1): Enslaving as an active interface with an up link [ 1658.797177][T13271] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 1658.940645][T13466] netlink: 'syz.4.20543': attribute type 1 has an invalid length. [ 1659.005716][T13470] netlink: 28 bytes leftover after parsing attributes in process `syz.1.20544'. [ 1659.028479][T13470] netlink: 28 bytes leftover after parsing attributes in process `syz.1.20544'. [ 1659.042048][T13470] netlink: 28 bytes leftover after parsing attributes in process `syz.1.20544'. [ 1659.082461][T13470] netlink: 28 bytes leftover after parsing attributes in process `syz.1.20544'. [ 1659.114325][ T5152] Bluetooth: hci7: command tx timeout [ 1659.321704][T13486] netlink: 'syz.1.20548': attribute type 10 has an invalid length. [ 1659.415848][T13271] veth0_vlan: entered promiscuous mode [ 1659.461042][T13271] veth1_vlan: entered promiscuous mode [ 1659.550748][T13271] veth0_macvtap: entered promiscuous mode [ 1659.559456][T13494] netlink: 8 bytes leftover after parsing attributes in process `syz.1.20550'. [ 1659.588326][T13271] veth1_macvtap: entered promiscuous mode [ 1659.652559][T13271] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 1659.688427][T13271] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 1659.722200][T14150] netdevsim netdevsim8 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 1659.747050][T14150] netdevsim netdevsim8 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 1659.765229][T14150] netdevsim netdevsim8 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 1659.788646][T14150] netdevsim netdevsim8 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 1659.969607][T15307] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 1660.008980][T15307] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 1660.125353][T14150] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 1660.144630][T14150] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 1660.259208][T13517] netlink: 4 bytes leftover after parsing attributes in process `syz.1.20559'. [ 1660.287320][T13517] tipc: Enabled bearer , priority 0 [ 1660.316440][T13517] syzkaller0: entered allmulticast mode [ 1660.415637][T13517] tipc: Resetting bearer [ 1660.444565][T13516] tipc: Resetting bearer [ 1660.474628][T13526] netlink: 8 bytes leftover after parsing attributes in process `syz.8.20562'. [ 1660.491945][T13516] tipc: Disabling bearer [ 1660.571833][T13526] bond1: option xmit_hash_policy: invalid value (64) [ 1660.581173][ T5468] Bluetooth: hci5: unexpected cc 0x0c03 length: 249 > 1 [ 1660.592522][ T5468] Bluetooth: hci5: unexpected cc 0x1003 length: 249 > 9 [ 1660.615706][ T5468] Bluetooth: hci5: unexpected cc 0x1001 length: 249 > 9 [ 1660.625068][ T5468] Bluetooth: hci5: unexpected cc 0x0c23 length: 249 > 4 [ 1660.626671][T13526] bond1 (unregistering): Released all slaves [ 1660.646173][ T5468] Bluetooth: hci5: unexpected cc 0x0c38 length: 249 > 2 [ 1660.688043][T13535] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 1660.719080][T13535] batman_adv: batadv0: Adding interface: dummy0 [ 1660.726259][T13535] batman_adv: batadv0: The MTU of interface dummy0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 1660.753445][T13535] batman_adv: batadv0: Interface activated: dummy0 [ 1660.854665][T13536] 8021q: adding VLAN 0 to HW filter on device bond11 [ 1660.870149][T13538] batadv0: mtu less than device minimum [ 1660.889414][T13538] batman_adv: batadv0: Forced to purge local tt entries to fit new maximum fragment MTU (-320) [ 1660.901280][T13538] batman_adv: batadv0: Forced to purge local tt entries to fit new maximum fragment MTU (-320) [ 1660.913144][T13538] batman_adv: batadv0: Forced to purge local tt entries to fit new maximum fragment MTU (-320) [ 1660.924893][T13538] batman_adv: batadv0: Forced to purge local tt entries to fit new maximum fragment MTU (-320) [ 1660.936734][T13538] batman_adv: batadv0: Forced to purge local tt entries to fit new maximum fragment MTU (-320) [ 1660.948569][T13538] batman_adv: batadv0: Forced to purge local tt entries to fit new maximum fragment MTU (-320) [ 1660.960414][T13538] batman_adv: batadv0: Forced to purge local tt entries to fit new maximum fragment MTU (-320) [ 1660.972278][T13538] batman_adv: batadv0: Forced to purge local tt entries to fit new maximum fragment MTU (-320) [ 1661.089419][T13546] IPv6: sit2: Disabled Multicast RS [ 1661.100474][T13546] sit2: entered allmulticast mode [ 1661.191745][T13530] wlan0 speed is unknown, defaulting to 1000 [ 1661.198752][ T5152] Bluetooth: hci7: command tx timeout [ 1661.209508][T13530] ÿÿÿÿÿÿ speed is unknown, defaulting to 1000 [ 1661.555821][T13530] lo speed is unknown, defaulting to 1000 [ 1662.385637][T13530] chnl_net:caif_netlink_parms(): no params data found [ 1662.536980][T13530] bridge0: port 1(bridge_slave_0) entered blocking state [ 1662.545370][T13530] bridge0: port 1(bridge_slave_0) entered disabled state [ 1662.553960][T13530] bridge_slave_0: entered allmulticast mode [ 1662.562287][T13530] bridge_slave_0: entered promiscuous mode [ 1662.583230][T13530] bridge0: port 2(bridge_slave_1) entered blocking state [ 1662.590838][T13530] bridge0: port 2(bridge_slave_1) entered disabled state [ 1662.599120][T13530] bridge_slave_1: entered allmulticast mode [ 1662.608805][T13530] bridge_slave_1: entered promiscuous mode [ 1662.674410][T13530] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 1662.689189][T13530] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 1662.720310][ T5152] Bluetooth: hci5: command tx timeout [ 1662.767745][T13530] team0: Port device team_slave_0 added [ 1662.777858][T13530] team0: Port device team_slave_1 added [ 1662.822461][T13530] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 1662.830091][T13530] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 1662.857180][T13530] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 1662.875147][T13530] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 1662.882124][T13530] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 1662.910147][T13530] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 1662.972279][T13530] hsr_slave_0: entered promiscuous mode [ 1662.980104][T13530] hsr_slave_1: entered promiscuous mode [ 1662.987656][T13530] debugfs: 'hsr0' already exists in 'hsr' [ 1662.998739][T13530] Cannot create hsr debugfs directory [ 1663.141436][T13640] syzkaller1: entered promiscuous mode [ 1663.148881][T13640] syzkaller1: entered allmulticast mode [ 1663.166673][T13635] __nla_validate_parse: 3 callbacks suppressed [ 1663.166685][T13635] netlink: 24 bytes leftover after parsing attributes in process `syz.1.20593'. [ 1663.273455][ T5152] Bluetooth: hci7: command tx timeout [ 1663.312504][T13530] netdevsim netdevsim0 eth3 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 1663.325074][T13530] netdevsim netdevsim0 eth3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1663.336317][T13530] netdevsim netdevsim0 eth3 (unregistering): unset [1, 1] type 2 family 0 port 19999 - 0 [ 1663.429522][T13530] netdevsim netdevsim0 eth2 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 1663.444441][T13530] netdevsim netdevsim0 eth2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1663.461578][T13530] netdevsim netdevsim0 eth2 (unregistering): unset [1, 1] type 2 family 0 port 19999 - 0 [ 1663.529362][T13530] netdevsim netdevsim0 eth1 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 1663.545670][T13530] netdevsim netdevsim0 eth1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1663.577236][T13530] netdevsim netdevsim0 eth1 (unregistering): unset [1, 1] type 2 family 0 port 19999 - 0 [ 1663.662345][T13530] netdevsim netdevsim0 eth0 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 1663.685044][T13530] netdevsim netdevsim0 eth0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1663.697365][T13530] netdevsim netdevsim0 eth0 (unregistering): unset [1, 1] type 2 family 0 port 19999 - 0 [ 1663.793883][T13654] syzkaller0: entered promiscuous mode [ 1663.799373][T13654] syzkaller0: entered allmulticast mode [ 1664.776145][T13530] netdevsim netdevsim0 netdevsim0: renamed from eth0 [ 1664.804039][ T5152] Bluetooth: hci5: command tx timeout [ 1664.838368][T13530] netdevsim netdevsim0 netdevsim1: renamed from eth1 [ 1664.900118][T13530] netdevsim netdevsim0 netdevsim2: renamed from eth2 [ 1664.981348][T13530] netdevsim netdevsim0 netdevsim3: renamed from eth3 [ 1665.108174][T13707] netlink: 4 bytes leftover after parsing attributes in process `syz.4.20606'. [ 1665.350019][T13720] validate_nla: 2 callbacks suppressed [ 1665.350036][T13720] netlink: 'syz.4.20609': attribute type 2 has an invalid length. [ 1665.351409][T13716] wlan0 speed is unknown, defaulting to 1000 [ 1665.360120][T13720] netlink: 'syz.4.20609': attribute type 2 has an invalid length. [ 1665.396493][T13530] 8021q: adding VLAN 0 to HW filter on device bond0 [ 1665.403911][T13720] netlink: 'syz.4.20609': attribute type 2 has an invalid length. [ 1665.452051][T13530] 8021q: adding VLAN 0 to HW filter on device team0 [ 1665.466694][T13716] ÿÿÿÿÿÿ speed is unknown, defaulting to 1000 [ 1665.480044][T30242] bridge0: port 1(bridge_slave_0) entered blocking state [ 1665.487337][T30242] bridge0: port 1(bridge_slave_0) entered forwarding state [ 1665.517135][T19462] bridge0: port 2(bridge_slave_1) entered blocking state [ 1665.524320][T19462] bridge0: port 2(bridge_slave_1) entered forwarding state [ 1665.553814][T13725] netlink: 4 bytes leftover after parsing attributes in process `syz.4.20610'. [ 1665.578701][T13725] netlink: 4 bytes leftover after parsing attributes in process `syz.4.20610'. [ 1665.724653][T13732] netlink: 'syz.8.20612': attribute type 10 has an invalid length. [ 1665.785403][T13725] hsr_slave_0 (unregistering): left promiscuous mode [ 1665.890569][T13716] lo speed is unknown, defaulting to 1000 [ 1666.343686][T13757] tipc: Enabling of bearer rejected, failed to enable media [ 1666.425136][T13763] netlink: 20 bytes leftover after parsing attributes in process `syz.8.20621'. [ 1666.462410][T13530] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 1666.638308][T13773] netlink: 28 bytes leftover after parsing attributes in process `syz.4.20624'. [ 1666.652059][T13774] bond0: (slave rose0): Error: Device is in use and cannot be enslaved [ 1666.656758][T13770] netlink: 'syz.8.20623': attribute type 9 has an invalid length. [ 1666.686921][T13530] veth0_vlan: entered promiscuous mode [ 1666.716240][T13777] netlink: 24 bytes leftover after parsing attributes in process `syz.4.20624'. [ 1666.762429][T13530] veth1_vlan: entered promiscuous mode [ 1666.788048][T13777] sch_tbf: burst 88 is lower than device veth7 mtu (1514) ! [ 1666.874336][ T5468] Bluetooth: hci5: command tx timeout [ 1666.888760][T13530] veth0_macvtap: entered promiscuous mode [ 1666.902056][T13530] veth1_macvtap: entered promiscuous mode [ 1666.927705][T13530] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 1666.967424][T13530] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 1667.016555][T30242] netdevsim netdevsim0 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 1667.045099][T30242] netdevsim netdevsim0 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 1667.061008][T13787] netlink: 12 bytes leftover after parsing attributes in process `syz.1.20628'. [ 1667.081635][T30242] netdevsim netdevsim0 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 1667.109848][T30242] netdevsim netdevsim0 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 1667.239416][T13784] tipc: Enabled bearer , priority 11 [ 1667.610421][T13798] block nbd8: Unsupported socket: should be TCP or UNIX. [ 1667.620991][T13798] netlink: 8 bytes leftover after parsing attributes in process `syz.1.20631'. [ 1667.635935][ T8446] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 1667.644841][T13798] netlink: 12 bytes leftover after parsing attributes in process `syz.1.20631'. [ 1667.654644][ T8446] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 1667.778986][T27516] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 1667.796295][T27516] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 1668.046847][T13811] net_ratelimit: 13 callbacks suppressed [ 1668.046865][T13811] openvswitch: netlink: nsh attribute has 4 unknown bytes. [ 1668.354274][T13823] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 1668.378323][T13821] batman_adv: Cannot find parent device. Skipping batadv-on-batadv check for gretap2 [ 1668.425398][T13825] netlink: 'syz.3.20638': attribute type 11 has an invalid length. [ 1668.435277][T13821] gretap2: default qdisc (pfifo_fast) fail, fallback to noqueue [ 1668.457325][T13821] gretap2: entered promiscuous mode [ 1668.464725][T13821] gretap2: entered allmulticast mode [ 1668.499022][T13823] __nla_validate_parse: 2 callbacks suppressed [ 1668.499042][T13823] netlink: 4 bytes leftover after parsing attributes in process `syz.0.20639'. [ 1668.674505][T13833] netlink: 'syz.4.20640': attribute type 9 has an invalid length. [ 1668.695965][T13833] netlink: 'syz.4.20640': attribute type 6 has an invalid length. [ 1668.946090][ T4769] syz_tun (unregistering): left allmulticast mode [ 1668.953703][ T5152] Bluetooth: hci5: command tx timeout [ 1669.016156][ T5468] Bluetooth: hci6: unexpected cc 0x0c03 length: 249 > 1 [ 1669.028495][ T5468] Bluetooth: hci6: unexpected cc 0x1003 length: 249 > 9 [ 1669.039712][ T5468] Bluetooth: hci6: unexpected cc 0x1001 length: 249 > 9 [ 1669.049993][ T5468] Bluetooth: hci6: unexpected cc 0x0c23 length: 249 > 4 [ 1669.057731][ T5468] Bluetooth: hci6: unexpected cc 0x0c38 length: 249 > 2 [ 1669.132010][T13837] wlan0 speed is unknown, defaulting to 1000 [ 1669.156108][T13837] ÿÿÿÿÿÿ speed is unknown, defaulting to 1000 [ 1669.266268][T13843] xt_hashlimit: max too large, truncated to 1048576 [ 1669.289642][T13843] openvswitch: netlink: IP tunnel dst address not specified [ 1669.429091][T13843] x_tables: duplicate underflow at hook 1 [ 1669.437691][T13837] lo speed is unknown, defaulting to 1000 [ 1669.610789][T13850] netlink: 24 bytes leftover after parsing attributes in process `syz.3.20646'. [ 1670.301814][T13879] netlink: 4 bytes leftover after parsing attributes in process `syz.0.20655'. [ 1670.376902][T13884] netlink: 28 bytes leftover after parsing attributes in process `syz.0.20655'. [ 1670.485482][T13885] netlink: 16 bytes leftover after parsing attributes in process `syz.4.20654'. [ 1670.494584][T13882] netlink: 88 bytes leftover after parsing attributes in process `syz.4.20654'. [ 1670.579887][T13837] chnl_net:caif_netlink_parms(): no params data found [ 1670.956564][T13921] netlink: 244 bytes leftover after parsing attributes in process `syz.3.20661'. [ 1671.125400][ T5468] Bluetooth: hci6: command tx timeout [ 1671.579412][T13837] bridge0: port 1(bridge_slave_0) entered blocking state [ 1671.597425][T13837] bridge0: port 1(bridge_slave_0) entered disabled state [ 1671.609257][T13837] bridge_slave_0: entered allmulticast mode [ 1671.631930][T13837] bridge_slave_0: entered promiscuous mode [ 1671.698246][T13837] bridge0: port 2(bridge_slave_1) entered blocking state [ 1671.742330][T13837] bridge0: port 2(bridge_slave_1) entered disabled state [ 1671.761501][T13837] bridge_slave_1: entered allmulticast mode [ 1671.777901][T13837] bridge_slave_1: entered promiscuous mode [ 1671.838791][T13970] netlink: 8 bytes leftover after parsing attributes in process `syz.4.20671'. [ 1671.886674][T13971] netlink: 4 bytes leftover after parsing attributes in process `syz.4.20671'. [ 1671.944273][T13972] netlink: 12 bytes leftover after parsing attributes in process `syz.4.20671'. [ 1672.021120][T13837] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 1672.082426][T13837] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 1672.264769][T13988] netlink: 'syz.4.20675': attribute type 83 has an invalid length. [ 1672.280383][T13837] team0: Port device team_slave_0 added [ 1672.300616][T13837] team0: Port device team_slave_1 added [ 1672.419186][T13837] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 1672.427360][T13837] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 1672.496770][T13837] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 1672.589685][T13837] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 1672.597612][T13837] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 1672.625923][T13837] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 1673.045228][T18606] IPVS: starting estimator thread 0... [ 1673.050946][T14033] IPVS: ip_vs_edit_dest(): lower threshold is higher than upper threshold [ 1673.059656][T13837] hsr_slave_0: entered promiscuous mode [ 1673.061054][T13837] hsr_slave_1: entered promiscuous mode [ 1673.084432][T13837] debugfs: 'hsr0' already exists in 'hsr' [ 1673.097884][T13837] Cannot create hsr debugfs directory [ 1673.163593][T14034] IPVS: using max 38 ests per chain, 91200 per kthread [ 1673.193800][ T5468] Bluetooth: hci6: command tx timeout [ 1673.448593][T14046] tipc: Enabling of bearer rejected, already enabled [ 1673.458872][T14046] tunl0: entered promiscuous mode [ 1673.469299][T14046] netlink: 'syz.4.20696': attribute type 3 has an invalid length. [ 1673.536136][T14056] __nla_validate_parse: 2 callbacks suppressed [ 1673.536156][T14056] netlink: 24 bytes leftover after parsing attributes in process `syz.3.20699'. [ 1673.579387][T13837] netdevsim netdevsim1 eth3 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 1673.591306][T13837] netdevsim netdevsim1 eth3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1673.687852][T14058] netlink: 8 bytes leftover after parsing attributes in process `syz.4.20700'. [ 1673.695555][T14063] netlink: 88 bytes leftover after parsing attributes in process `syz.0.20701'. [ 1673.717440][T13837] netdevsim netdevsim1 eth2 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 1673.739442][T13837] netdevsim netdevsim1 eth2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1673.849820][T13837] netdevsim netdevsim1 eth1 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 1673.866344][T13837] netdevsim netdevsim1 eth1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1673.878176][T14071] netlink: 20 bytes leftover after parsing attributes in process `syz.0.20703'. [ 1674.024588][T13837] netdevsim netdevsim1 eth0 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 1674.038345][T13837] netdevsim netdevsim1 eth0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1674.062471][T14080] netlink: 'syz.0.20705': attribute type 9 has an invalid length. [ 1674.078724][T14080] netlink: 'syz.0.20705': attribute type 6 has an invalid length. [ 1674.092403][T14081] netlink: 'syz.0.20705': attribute type 9 has an invalid length. [ 1674.101792][T14081] netlink: 'syz.0.20705': attribute type 6 has an invalid length. [ 1674.128704][T14068] syzkaller0: entered promiscuous mode [ 1674.136763][T14068] syzkaller0: entered allmulticast mode [ 1674.215467][T14090] openvswitch: netlink: Message has 536 unknown bytes. [ 1674.224770][T14090] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 1674.304085][T14087] netlink: 8 bytes leftover after parsing attributes in process `syz.0.20708'. [ 1674.325839][T14087] netlink: 'syz.0.20708': attribute type 1 has an invalid length. [ 1674.337113][T14087] netlink: 'syz.0.20708': attribute type 2 has an invalid length. [ 1674.457696][T14096] netlink: 212 bytes leftover after parsing attributes in process `syz.3.20710'. [ 1674.540957][T14098] syzkaller0: entered promiscuous mode [ 1674.563545][T14098] syzkaller0: entered allmulticast mode [ 1674.570258][T14103] SET target dimension over the limit! [ 1674.685924][T13837] netdevsim netdevsim1 netdevsim0: renamed from eth0 [ 1674.733148][T13837] netdevsim netdevsim1 netdevsim1: renamed from eth1 [ 1674.761861][T13837] netdevsim netdevsim1 netdevsim2: renamed from eth2 [ 1674.797680][T13837] netdevsim netdevsim1 netdevsim3: renamed from eth3 [ 1674.824084][T14112] netlink: 12 bytes leftover after parsing attributes in process `syz.8.20717'. [ 1674.887887][T14122] netlink: 'syz.4.20719': attribute type 1 has an invalid length. [ 1674.910219][T14122] netlink: 'syz.4.20719': attribute type 2 has an invalid length. [ 1674.985610][T14127] netlink: 11 bytes leftover after parsing attributes in process `syz.8.20721'. [ 1675.004946][T14127] netlink: 11 bytes leftover after parsing attributes in process `syz.8.20721'. [ 1675.149941][T13837] 8021q: adding VLAN 0 to HW filter on device bond0 [ 1675.239353][T13837] 8021q: adding VLAN 0 to HW filter on device team0 [ 1675.291790][ T5468] Bluetooth: hci6: command tx timeout [ 1675.294912][ T8438] bridge0: port 1(bridge_slave_0) entered blocking state [ 1675.304386][ T8438] bridge0: port 1(bridge_slave_0) entered forwarding state [ 1675.401875][T27515] bridge0: port 2(bridge_slave_1) entered blocking state [ 1675.409083][T27515] bridge0: port 2(bridge_slave_1) entered forwarding state [ 1675.470781][T14159] netlink: 24 bytes leftover after parsing attributes in process `syz.3.20730'. [ 1675.642193][T13837] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 1675.697407][T14167] netdevsim netdevsim8 netdevsim0: entered promiscuous mode [ 1675.760400][ T8437] netdevsim netdevsim0 netdevsim0: set [0, 0] type 1 family 0 port 8472 - 0 [ 1675.796252][ T8437] netdevsim netdevsim0 netdevsim1: set [0, 0] type 1 family 0 port 8472 - 0 [ 1675.827865][ T8437] netdevsim netdevsim0 netdevsim2: set [0, 0] type 1 family 0 port 8472 - 0 [ 1675.870555][ T8437] netdevsim netdevsim0 netdevsim3: set [0, 0] type 1 family 0 port 8472 - 0 [ 1676.181264][T13837] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 1676.262339][T13837] veth0_vlan: entered promiscuous mode [ 1676.291648][T13837] veth1_vlan: entered promiscuous mode [ 1676.340045][T13837] veth0_macvtap: entered promiscuous mode [ 1676.354418][T13837] veth1_macvtap: entered promiscuous mode [ 1676.399733][T13837] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 1676.435289][T13837] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 1676.458239][ T8438] netdevsim netdevsim1 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 1676.493187][ T8438] netdevsim netdevsim1 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 1676.512171][ T8438] netdevsim netdevsim1 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 1676.526050][ T8438] netdevsim netdevsim1 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 1676.804616][T14213] tipc: Enabled bearer , priority 10 [ 1676.817865][T27516] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 1676.844372][T27516] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 1676.991570][T27516] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 1677.010384][T27516] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 1677.047060][T14226] block nbd8: Unsupported socket: should be TCP or UNIX. [ 1677.353773][ T5468] Bluetooth: hci6: command tx timeout [ 1677.462419][T14239] validate_nla: 2 callbacks suppressed [ 1677.462437][T14239] netlink: 'syz.0.20751': attribute type 2 has an invalid length. [ 1677.533515][T14239] netlink: 'syz.0.20751': attribute type 8 has an invalid length. [ 1677.667339][T14263] nft_compat: unsupported protocol 0 [ 1677.736979][T14270] netlink: 'syz.1.20762': attribute type 2 has an invalid length. [ 1678.575503][T14328] __nla_validate_parse: 11 callbacks suppressed [ 1678.575524][T14328] netlink: 8 bytes leftover after parsing attributes in process `syz.0.20779'. [ 1678.699679][T14334] netlink: 4 bytes leftover after parsing attributes in process `syz.3.20781'. [ 1678.851410][T14339] netlink: 'syz.0.20782': attribute type 7 has an invalid length. [ 1678.968890][T14347] siw: device registration error -23 [ 1678.996027][T14347] netlink: 16 bytes leftover after parsing attributes in process `syz.3.20786'. [ 1679.187316][T14356] syzkaller0: entered promiscuous mode [ 1679.224573][T14356] syzkaller0: entered allmulticast mode [ 1679.337477][T14373] netlink: 12 bytes leftover after parsing attributes in process `syz.3.20791'. [ 1679.360362][T14369] netlink: 'syz.8.20794': attribute type 1 has an invalid length. [ 1679.391629][T14378] openvswitch: netlink: Unknown VXLAN extension attribute 0 [ 1679.394598][T14376] openvswitch: netlink: Unknown VXLAN extension attribute 0 [ 1679.438014][T14370] netlink: 44 bytes leftover after parsing attributes in process `syz.8.20794'. [ 1679.682583][T14387] netlink: ct family unspecified [ 1679.714715][T14387] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 1680.026600][T14403] syzkaller0: entered promiscuous mode [ 1680.041162][T14403] syzkaller0: entered allmulticast mode [ 1680.454118][T14427] netlink: 8 bytes leftover after parsing attributes in process `syz.4.20807'. [ 1680.463579][T14429] openvswitch: netlink: IP tunnel attribute has 4 unknown bytes. [ 1680.463616][T14429] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 1680.477224][T14431] sctp: [Deprecated]: syz.0.20809 (pid 14431) Use of int in maxseg socket option. [ 1680.477224][T14431] Use struct sctp_assoc_value instead [ 1680.616958][T14431] bridge_slave_0: left allmulticast mode [ 1680.642916][T14431] bridge_slave_0: left promiscuous mode [ 1680.648890][T14431] bridge0: port 1(bridge_slave_0) entered disabled state [ 1680.703746][T14431] bridge_slave_1: left allmulticast mode [ 1680.724172][T14431] bridge_slave_1: left promiscuous mode [ 1680.729988][T14431] bridge0: port 2(bridge_slave_1) entered disabled state [ 1680.815389][T14431] bond0: (slave bond_slave_0): Releasing backup interface [ 1680.877999][T14431] bond0: (slave bond_slave_1): Releasing backup interface [ 1680.879912][T14460] netlink: 112 bytes leftover after parsing attributes in process `syz.8.20814'. [ 1680.910422][T14431] team0: Port device team_slave_0 removed [ 1680.926725][T14431] team0: Port device team_slave_1 removed [ 1680.935650][T14431] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 1680.945569][T14431] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 1680.960221][T14431] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 1680.961004][ T31] INFO: task syz.6.18799:7497 blocked for more than 143 seconds. [ 1680.969303][T14431] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 1680.990113][ T31] Not tainted syzkaller #0 [ 1680.995573][ T31] "echo 0 > /proc/sys/kernel/hung_task_timeout_secs" disables this message. [ 1681.005805][ T31] task:syz.6.18799 state:D stack:25984 pid:7497 tgid:7494 ppid:6677 task_flags:0x400140 flags:0x00080002 [ 1681.019240][ T31] Call Trace: [ 1681.022607][ T31] [ 1681.031774][ T31] __schedule+0x14bc/0x5000 [ 1681.038321][ T31] ? __pfx___schedule+0x10/0x10 [ 1681.044825][ T31] ? schedule+0x91/0x360 [ 1681.049095][ T31] schedule+0x165/0x360 [ 1681.053424][ T31] schedule_preempt_disabled+0x13/0x30 [ 1681.058909][ T31] __mutex_lock+0x7e6/0x1350 [ 1681.064283][ T31] ? __mutex_lock+0x5bb/0x1350 [ 1681.069062][ T31] ? nfsd_nl_threads_get_doit+0x1b6/0x6f0 [ 1681.076462][ T31] ? __pfx___mutex_lock+0x10/0x10 [ 1681.081517][ T31] ? __nlmsg_put+0xef/0x1b0 [ 1681.086254][ T31] ? genlmsg_put+0x137/0x2e0 [ 1681.090848][ T31] nfsd_nl_threads_get_doit+0x1b6/0x6f0 [ 1681.097408][ T31] ? __pfx_nfsd_nl_threads_get_doit+0x10/0x10 [ 1681.104163][ T31] ? __local_bh_enable_ip+0x12d/0x1c0 [ 1681.109584][ T31] ? lockdep_hardirqs_on+0x98/0x140 [ 1681.115972][ T31] genl_family_rcv_msg_doit+0x215/0x300 [ 1681.121544][ T31] ? __pfx_genl_family_rcv_msg_doit+0x10/0x10 [ 1681.128260][ T31] genl_rcv_msg+0x60e/0x790 [ 1681.132948][ T31] ? __pfx_genl_rcv_msg+0x10/0x10 [ 1681.137989][ T31] ? __pfx_nfsd_nl_threads_get_doit+0x10/0x10 [ 1681.144653][ T31] netlink_rcv_skb+0x208/0x470 [ 1681.149623][ T31] ? __pfx_genl_rcv_msg+0x10/0x10 [ 1681.157662][ T31] ? __pfx_netlink_rcv_skb+0x10/0x10 [ 1681.163353][ T31] ? down_read+0x274/0x2e0 [ 1681.168133][ T31] ? genl_rcv+0xd/0x40 [ 1681.172257][ T31] genl_rcv+0x28/0x40 [ 1681.177927][ T31] netlink_unicast+0x82f/0x9e0 [ 1681.183694][ T31] ? __pfx_netlink_unicast+0x10/0x10 [ 1681.189005][ T31] ? netlink_sendmsg+0x642/0xb30 [ 1681.194115][ T31] ? skb_put+0x11b/0x210 [ 1681.198380][ T31] netlink_sendmsg+0x805/0xb30 [ 1681.203692][ T31] ? __pfx_netlink_sendmsg+0x10/0x10 [ 1681.209012][ T31] ? aa_sock_msg_perm+0xf1/0x1b0 [ 1681.215282][ T31] ? bpf_lsm_socket_sendmsg+0x9/0x20 [ 1681.220821][ T31] ? __pfx_netlink_sendmsg+0x10/0x10 [ 1681.226841][ T31] __sock_sendmsg+0x21c/0x270 [ 1681.231542][ T31] ____sys_sendmsg+0x505/0x820 [ 1681.236545][ T31] ? __pfx_____sys_sendmsg+0x10/0x10 [ 1681.241857][ T31] ? import_iovec+0x74/0xa0 [ 1681.247222][ T31] ___sys_sendmsg+0x21f/0x2a0 [ 1681.251910][ T31] ? __pfx____sys_sendmsg+0x10/0x10 [ 1681.257221][ T31] ? futex_wake+0x4b2/0x560 [ 1681.261736][ T31] ? __fget_files+0x2a/0x420 [ 1681.266690][ T31] ? __fget_files+0x3a0/0x420 [ 1681.271460][ T31] __x64_sys_sendmsg+0x19b/0x260 [ 1681.282636][ T31] ? __pfx___x64_sys_sendmsg+0x10/0x10 [ 1681.288419][ T31] ? do_syscall_64+0xbe/0xf80 [ 1681.293269][ T31] do_syscall_64+0xfa/0xf80 [ 1681.297868][ T31] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1681.304868][ T31] ? clear_bhb_loop+0x60/0xb0 [ 1681.309607][ T31] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1681.316850][ T31] RIP: 0033:0x7f8eb518f749 [ 1681.321279][ T31] RSP: 002b:00007f8eb6102038 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 1681.330963][ T31] RAX: ffffffffffffffda RBX: 00007f8eb53e5fa0 RCX: 00007f8eb518f749 [ 1681.339418][ T31] RDX: 0000000000000000 RSI: 0000200000000000 RDI: 000000000000000a [ 1681.347583][ T31] RBP: 00007f8eb5213f91 R08: 0000000000000000 R09: 0000000000000000 [ 1681.357386][ T31] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 1681.366050][ T31] R13: 00007f8eb53e6038 R14: 00007f8eb53e5fa0 R15: 00007ffde475a9e8 [ 1681.374519][ T31] [ 1681.379499][T14431] A link change request failed with some changes committed already. Interface hsr_slave_0 may have been left with an inconsistent configuration, please check. [ 1681.397314][ T31] [ 1681.397314][ T31] Showing all locks held in the system: [ 1681.405828][ T31] 1 lock held by khungtaskd/31: [ 1681.410691][ T31] #0: ffffffff8df41cc0 (rcu_read_lock){....}-{1:3}, at: debug_show_all_locks+0x2e/0x180 [ 1681.420668][ T31] 2 locks held by getty/5584: [ 1681.426514][ T31] #0: ffff8880306a90a0 (&tty->ldisc_sem){++++}-{0:0}, at: tty_ldisc_ref_wait+0x25/0x70 [ 1681.438165][ T31] #1: ffffc9000332b2f0 (&ldata->atomic_read_lock){+.+.}-{4:4}, at: n_tty_read+0x43e/0x1400 [ 1681.448708][ T31] 3 locks held by kworker/0:6/18593: [ 1681.454855][ T31] #0: ffff88801a055948 ((wq_completion)events){+.+.}-{0:0}, at: process_scheduled_works+0x9b4/0x1770 [ 1681.465969][ T31] #1: ffffc9000c02fb80 (deferred_process_work){+.+.}-{0:0}, at: process_scheduled_works+0x9ef/0x1770 [ 1681.476981][ T31] #2: ffffffff8f2f5608 (rtnl_mutex){+.+.}-{4:4}, at: switchdev_deferred_process_work+0xe/0x20 [ 1681.490377][ T31] 2 locks held by syz.5.17400/2365: [ 1681.495643][ T31] #0: ffffffff8f35d1b0 (cb_lock){++++}-{4:4}, at: genl_rcv+0x19/0x40 [ 1681.504069][ T31] #1: ffffffff8e233a08 (nfsd_mutex){+.+.}-{4:4}, at: nfsd_nl_threads_set_doit+0x2cb/0x960 [ 1681.515226][ T31] 2 locks held by syz.6.18799/7497: [ 1681.520440][ T31] #0: ffffffff8f35d1b0 (cb_lock){++++}-{4:4}, at: genl_rcv+0x19/0x40 [ 1681.528765][ T31] #1: ffffffff8e233a08 (nfsd_mutex){+.+.}-{4:4}, at: nfsd_nl_threads_get_doit+0x1b6/0x6f0 [ 1681.539174][ T31] 3 locks held by kworker/u8:43/8438: [ 1681.546616][ T31] #0: ffff88801a069948 ((wq_completion)events_unbound#2){+.+.}-{0:0}, at: process_scheduled_works+0x9b4/0x1770 [ 1681.558614][ T31] #1: ffffc9000e2a7b80 ((work_completion)(&map->work)){+.+.}-{0:0}, at: process_scheduled_works+0x9ef/0x1770 [ 1681.570457][ T31] #2: ffffffff8df477f8 (rcu_state.exp_mutex){+.+.}-{4:4}, at: synchronize_rcu_expedited+0x3b9/0x730 [ 1681.581768][ T31] 3 locks held by kworker/u8:47/8444: [ 1681.588736][ T31] #0: ffff88801a069948 ((wq_completion)events_unbound#2){+.+.}-{0:0}, at: process_scheduled_works+0x9b4/0x1770 [ 1681.604229][ T31] #1: ffffc9000ee5fb80 ((linkwatch_work).work){+.+.}-{0:0}, at: process_scheduled_works+0x9ef/0x1770 [ 1681.616624][ T31] #2: ffffffff8f2f5608 (rtnl_mutex){+.+.}-{4:4}, at: linkwatch_event+0xe/0x60 [ 1681.625804][ T31] 2 locks held by syz.7.20308/12685: [ 1681.631085][ T31] #0: ffffffff8f35d1b0 (cb_lock){++++}-{4:4}, at: genl_rcv+0x19/0x40 [ 1681.639838][ T31] #1: ffffffff8e233a08 (nfsd_mutex){+.+.}-{4:4}, at: nfsd_nl_version_get_doit+0x16e/0xb60 [ 1681.650031][ T31] 2 locks held by syz.0.20809/14437: [ 1681.657031][ T31] #0: ffffffff8f2f5608 (rtnl_mutex){+.+.}-{4:4}, at: tun_chr_close+0x3e/0x1c0 [ 1681.666932][ T31] #1: ffffffff8df477f8 (rcu_state.exp_mutex){+.+.}-{4:4}, at: synchronize_rcu_expedited+0x2f6/0x730 [ 1681.679119][ T31] 2 locks held by syz.0.20809/14445: [ 1681.684621][ T31] #0: ffff88805c1446f0 (nlk_cb_mutex-ROUTE){+.+.}-{4:4}, at: netlink_dump+0xbd/0xe90 [ 1681.695914][ T31] #1: ffffffff8f2f5608 (rtnl_mutex){+.+.}-{4:4}, at: rtnl_dumpit+0x92/0x200 [ 1681.705138][ T31] 1 lock held by syz.4.20810/14439: [ 1681.710364][ T31] #0: ffffffff8f2f5608 (rtnl_mutex){+.+.}-{4:4}, at: ip_mroute_setsockopt+0x107/0xf60 [ 1681.720413][ T31] 3 locks held by syz.3.20812/14449: [ 1681.726232][ T31] #0: ffffffff8f35d1b0 (cb_lock){++++}-{4:4}, at: genl_rcv+0x19/0x40 [ 1681.734458][ T31] #1: ffff888081d766f0 (nlk_cb_mutex-GENERIC){+.+.}-{4:4}, at: __netlink_dump_start+0xfe/0x7e0 [ 1681.745040][ T31] #2: ffffffff8f2f5608 (rtnl_mutex){+.+.}-{4:4}, at: ethnl_default_dump_one+0x151/0x7e0 [ 1681.756755][ T31] 2 locks held by syz.8.20814/14460: [ 1681.762056][ T31] #0: ffffffff8f8227d8 (&ops->srcu#2){.+.+}-{0:0}, at: rtnl_link_ops_get+0x23/0x250 [ 1681.771780][ T31] #1: ffffffff8f2f5608 (rtnl_mutex){+.+.}-{4:4}, at: rtnl_newlink+0x8ec/0x1c90 [ 1681.780956][ T31] 1 lock held by syz.8.20814/14462: [ 1681.786822][ T31] #0: ffffffff8f2f5608 (rtnl_mutex){+.+.}-{4:4}, at: rtnetlink_rcv_msg+0x71c/0xb70 [ 1681.797576][ T31] 1 lock held by syz.8.20814/14465: [ 1681.803057][ T31] #0: ffffffff8f2f5608 (rtnl_mutex){+.+.}-{4:4}, at: rtnl_newlink+0x8ec/0x1c90 [ 1681.812141][ T31] 1 lock held by syz.8.20814/14466: [ 1681.817942][ T31] #0: ffffffff8f2f5608 (rtnl_mutex){+.+.}-{4:4}, at: rtnetlink_rcv_msg+0x71c/0xb70 [ 1681.827492][ T31] [ 1681.829835][ T31] ============================================= [ 1681.829835][ T31] [ 1681.841477][ T31] NMI backtrace for cpu 0 [ 1681.841496][ T31] CPU: 0 UID: 0 PID: 31 Comm: khungtaskd Not tainted syzkaller #0 PREEMPT(full) [ 1681.841516][ T31] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/25/2025 [ 1681.841526][ T31] Call Trace: [ 1681.841534][ T31] [ 1681.841542][ T31] dump_stack_lvl+0x189/0x250 [ 1681.841567][ T31] ? __pfx_dump_stack_lvl+0x10/0x10 [ 1681.841586][ T31] ? __pfx__printk+0x10/0x10 [ 1681.841617][ T31] nmi_cpu_backtrace+0x39e/0x3d0 [ 1681.841638][ T31] ? __pfx_nmi_cpu_backtrace+0x10/0x10 [ 1681.841659][ T31] ? __pfx__printk+0x10/0x10 [ 1681.841685][ T31] ? __pfx_nmi_raise_cpu_backtrace+0x10/0x10 [ 1681.841711][ T31] nmi_trigger_cpumask_backtrace+0x17a/0x300 [ 1681.841731][ T31] watchdog+0xf3c/0xf80 [ 1681.841758][ T31] ? watchdog+0x1e2/0xf80 [ 1681.841783][ T31] kthread+0x711/0x8a0 [ 1681.841806][ T31] ? __pfx_watchdog+0x10/0x10 [ 1681.841826][ T31] ? __pfx_kthread+0x10/0x10 [ 1681.841847][ T31] ? _raw_spin_unlock_irq+0x23/0x50 [ 1681.841867][ T31] ? lockdep_hardirqs_on+0x98/0x140 [ 1681.841885][ T31] ? __pfx_kthread+0x10/0x10 [ 1681.841906][ T31] ret_from_fork+0x599/0xb30 [ 1681.841932][ T31] ? __pfx_ret_from_fork+0x10/0x10 [ 1681.841966][ T31] ? __switch_to_asm+0x39/0x70 [ 1681.841984][ T31] ? __switch_to_asm+0x33/0x70 [ 1681.842002][ T31] ? __pfx_kthread+0x10/0x10 [ 1681.842032][ T31] ret_from_fork_asm+0x1a/0x30 [ 1681.842068][ T31] [ 1681.842075][ T31] Sending NMI from CPU 0 to CPUs 1: [ 1681.994640][ C1] NMI backtrace for cpu 1 [ 1681.994657][ C1] CPU: 1 UID: 0 PID: 0 Comm: swapper/1 Not tainted syzkaller #0 PREEMPT(full) [ 1681.994677][ C1] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/25/2025 [ 1681.994688][ C1] RIP: 0010:pie_calculate_probability+0x144/0x7e0 [ 1681.994715][ C1] Code: 38 31 ff 48 89 74 24 10 e8 b9 fa 60 f8 31 ff 89 6c 24 2c 89 ee e8 0c fa 60 f8 48 8d 7b 10 48 89 f8 48 c1 e8 03 42 0f b6 04 30 <84> c0 0f 85 a6 05 00 00 4c 89 6c 24 08 4c 89 7c 24 58 44 8b 7b 10 [ 1681.994730][ C1] RSP: 0018:ffffc90000a08a90 EFLAGS: 00000a06 [ 1681.994745][ C1] RAX: 0000000000000000 RBX: ffff888078dc72c0 RCX: 0000000000000100 [ 1681.994762][ C1] RDX: ffff88801ca95b80 RSI: 0000000000000000 RDI: ffff888078dc72d0 [ 1681.994774][ C1] RBP: 0000000000000000 R08: 0000000000000003 R09: 0000000000000004 [ 1681.994784][ C1] R10: dffffc0000000000 R11: fffff52000141154 R12: ffff888069f75318 [ 1681.994797][ C1] R13: ffff888069f75310 R14: dffffc0000000000 R15: ffff888078dc72da [ 1681.994810][ C1] FS: 0000000000000000(0000) GS:ffff8881261b1000(0000) knlGS:0000000000000000 [ 1681.994824][ C1] CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033 [ 1681.994836][ C1] CR2: 000000110c35aeaf CR3: 0000000085b20000 CR4: 00000000003526f0 [ 1681.994851][ C1] Call Trace: [ 1681.994858][ C1] [ 1681.994874][ C1] fq_pie_timer+0x288/0x5b0 [ 1681.994897][ C1] ? fq_pie_timer+0x4d/0x5b0 [ 1681.994921][ C1] call_timer_fn+0x16e/0x590 [ 1681.994939][ C1] ? __pfx_fq_pie_timer+0x10/0x10 [ 1681.994959][ C1] ? call_timer_fn+0xbe/0x590 [ 1681.994976][ C1] ? __pfx_call_timer_fn+0x10/0x10 [ 1681.994998][ C1] ? _raw_spin_unlock_irq+0x23/0x50 [ 1681.995017][ C1] ? lockdep_hardirqs_on+0x98/0x140 [ 1681.995036][ C1] ? __pfx_fq_pie_timer+0x10/0x10 [ 1681.995058][ C1] __run_timer_base+0x61a/0x860 [ 1681.995082][ C1] ? __pfx___run_timer_base+0x10/0x10 [ 1681.995097][ C1] ? seqcount_lockdep_reader_access+0x15e/0x1c0 [ 1681.995129][ C1] run_timer_softirq+0xb7/0x180 [ 1681.995145][ C1] handle_softirqs+0x27d/0x850 [ 1681.995163][ C1] ? __irq_exit_rcu+0xca/0x1f0 [ 1681.995182][ C1] ? __pfx_handle_softirqs+0x10/0x10 [ 1681.995200][ C1] ? irqtime_account_irq+0xb6/0x1c0 [ 1681.995223][ C1] __irq_exit_rcu+0xca/0x1f0 [ 1681.995238][ C1] ? __pfx___irq_exit_rcu+0x10/0x10 [ 1681.995257][ C1] irq_exit_rcu+0x9/0x30 [ 1681.995271][ C1] sysvec_apic_timer_interrupt+0xa6/0xc0 [ 1681.995290][ C1] [ 1681.995296][ C1] [ 1681.995303][ C1] asm_sysvec_apic_timer_interrupt+0x1a/0x20 [ 1681.995320][ C1] RIP: 0010:pv_native_safe_halt+0x13/0x20 [ 1681.995340][ C1] Code: 53 ec 02 00 cc cc cc 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 f3 0f 1e fa 66 90 0f 00 2d 53 0d 1f 00 f3 0f 1e fa fb f4 cc cc cc cc cc cc cc cc cc cc cc cc 90 90 90 90 90 90 90 90 90 [ 1681.995354][ C1] RSP: 0018:ffffc90000197de0 EFLAGS: 000002c6 [ 1681.995367][ C1] RAX: b76d63affcea7a00 RBX: ffffffff8197438a RCX: b76d63affcea7a00 [ 1681.995380][ C1] RDX: 0000000000000001 RSI: ffffffff8d76be2c RDI: ffffffff8bbfc660 [ 1681.995392][ C1] RBP: ffffc90000197f10 R08: ffff8880b893359b R09: 1ffff110171266b3 [ 1681.995404][ C1] R10: dffffc0000000000 R11: ffffed10171266b4 R12: ffffffff8f805a70 [ 1681.995416][ C1] R13: 1ffff11003952b70 R14: 0000000000000001 R15: 0000000000000001 [ 1681.995430][ C1] ? do_idle+0x1ea/0x520 [ 1681.995451][ C1] default_idle+0x13/0x20 [ 1681.995472][ C1] default_idle_call+0x73/0xb0 [ 1681.995494][ C1] do_idle+0x1ea/0x520 [ 1681.995509][ C1] ? irqentry_exit+0x5ba/0x660 [ 1681.995531][ C1] ? __pfx_do_idle+0x10/0x10 [ 1681.995556][ C1] cpu_startup_entry+0x44/0x60 [ 1681.995572][ C1] start_secondary+0x101/0x110 [ 1681.995594][ C1] common_startup_64+0x13e/0x147 [ 1681.995620][ C1] [ 1682.445243][T14466] netlink: 52 bytes leftover after parsing attributes in process `syz.8.20814'.