last executing test programs: 10m55.935370871s ago: executing program 1 (id=6826): r0 = socket(0x10, 0x803, 0x0) r1 = socket$nl_route(0x10, 0x3, 0x0) socket(0x1, 0x803, 0x0) r2 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r1, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000400)=ANY=[@ANYBLOB="440000001000010400"/20, @ANYRES32=0x0, @ANYRES32=r0, @ANYRES64=r2], 0x44}}, 0x884) ioctl$XFS_IOC_PATH_TO_HANDLE(r0, 0xc0385869, &(0x7f0000000140)={r1, &(0x7f0000000040)=')\x00', 0x840, &(0x7f0000000080)={@align=0x7, {0x0, 0xe7, 0x0, 0xfffffffff7f77fe8}}, 0x230, &(0x7f00000000c0), &(0x7f0000000100)=0x2}) ioctl$sock_SIOCGIFVLAN_DEL_VLAN_CMD(r3, 0x8982, &(0x7f0000000180)={0x1, 'veth1_to_hsr\x00', {}, 0x9}) 10m55.872862678s ago: executing program 1 (id=6829): r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000100), 0x0, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x2}) r1 = openat$tun(0xffffffffffffff9c, &(0x7f0000000400), 0x0, 0x0) close(r1) unshare(0x20040600) r2 = socket$inet6_sctp(0xa, 0x801, 0x84) setsockopt$inet_sctp6_SCTP_STREAM_SCHEDULER_VALUE(r2, 0x84, 0x7c, &(0x7f0000000940)={0x0, 0x9}, 0xfc6d) r3 = socket$nl_generic(0x10, 0x3, 0x10) r4 = syz_genetlink_get_family_id$tipc(&(0x7f00000000c0), r3) sendmsg$TIPC_CMD_ENABLE_BEARER(r3, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000680)=ANY=[@ANYBLOB='8\x00\x00\x00', @ANYRES16=r4, @ANYBLOB="010000000d0000000000010000000000000001410000001c001700000000000000006574683a73797a6b616c6c657230"], 0x38}}, 0x0) ioctl$SIOCSIFHWADDR(r1, 0x8914, &(0x7f0000002280)={'syzkaller0\x00', @multicast}) r5 = openat$tun(0xffffffffffffff9c, &(0x7f0000000080), 0x100, 0x0) close(r5) r6 = socket$unix(0x1, 0x2, 0x0) r7 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r6, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) r9 = socket$inet6_icmp(0xa, 0x2, 0x3a) r10 = bpf$BPF_PROG_GET_FD_BY_ID(0xd, &(0x7f0000000140), 0x4) r11 = socket$nl_route(0x10, 0x3, 0x0) getsockopt$inet_sctp6_SCTP_STREAM_SCHEDULER_VALUE(r2, 0x84, 0x7c, &(0x7f0000000240)={0x0, 0x1, 0x3}, &(0x7f0000000300)=0x8) setsockopt$inet_sctp6_SCTP_STREAM_SCHEDULER_VALUE(r2, 0x84, 0x7c, &(0x7f0000000340)={r12, 0xfff9, 0xfffe}, 0x8) r13 = socket$nl_route(0x10, 0x3, 0x0) setsockopt$netlink_NETLINK_TX_RING(r13, 0x10e, 0xc, &(0x7f0000000040)={0x80}, 0x10) sendmsg$nl_route(r13, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000080)=ANY=[@ANYBLOB="240000001a00010000000000000000000a8000000000000000000000080001"], 0x24}}, 0x0) sendmsg$nl_route_sched(r11, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000080)=@getchain={0x17, 0x66, 0xfcd66a900070b359}, 0x24}}, 0x0) setsockopt$sock_attach_bpf(r9, 0x1, 0x32, &(0x7f0000000180)=r10, 0x4) sendmsg$nl_route_sched(r7, &(0x7f0000000000)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f00000004c0)=@newqdisc={0x64, 0x24, 0x4ee4e6a52ff56541, 0x0, 0x8000000, {0x0, 0x0, 0x0, r8, {0x0, 0xe}, {0xffff, 0xffff}, {0xfff2}}, [@qdisc_kind_options=@q_netem={{0xa}, {0x34, 0x2, {{0xe, 0x7, 0x6361, 0x1, 0xfffffffd, 0x6}, [@TCA_NETEM_LOSS={0x18, 0x5, 0x0, 0x1, [@NETEM_LOSS_GE={0x14, 0x2, {0xffffffff, 0xffffffff, 0x2, 0x1}}]}]}}}]}, 0x64}, 0x1, 0x0, 0x0, 0x20008001}, 0x24004880) ioctl$SIOCSIFHWADDR(r5, 0x8922, &(0x7f0000002280)={'syzkaller0\x00', @random="2b0100004ec6"}) 10m55.525967442s ago: executing program 1 (id=6836): r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000040), 0x1c1341, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f00000000c0)={'syzkaller0\x00', 0x84aebfbd6349b7f2}) r1 = socket(0x10, 0x803, 0x0) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r1, &(0x7f00000012c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000a40)=@newqdisc={0x2c, 0x24, 0x4ee4e6a52ff5653f, 0x70bd2d, 0x25dfdbfc, {0x0, 0x0, 0x0, r2, {0x0, 0x9}, {0xffff, 0xffff}}, [@qdisc_kind_options=@q_drr={0x8}]}, 0x2c}, 0x1, 0x0, 0x0, 0x81}, 0x0) socket$netlink(0x10, 0x3, 0xc) sendmsg$nl_route_sched(r1, &(0x7f0000006040)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000140)=@newtfilter={0x44, 0x2c, 0xd27, 0x70bd2a, 0x25dfdbfc, {0x0, 0x0, 0x0, r2, {0xc}, {0x0, 0x9}, {0xffff, 0x9}}, [@filter_kind_options=@f_flower={{0xb}, {0x14, 0x2, [@TCA_FLOWER_KEY_ETH_TYPE={0x6, 0x8, 0x8848}, @TCA_FLOWER_KEY_MPLS_LABEL={0x8, 0x46, 0x5e41}]}}]}, 0x44}, 0x1, 0x0, 0x0, 0x8881}, 0x0) 10m55.07018314s ago: executing program 1 (id=6845): r0 = socket$inet6_sctp(0xa, 0x5, 0x84) r1 = socket$inet6_sctp(0xa, 0x5, 0x84) shutdown(r1, 0x0) close(0x3) getsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX3(r1, 0x84, 0x6f, &(0x7f0000000200)={0x0, 0x1c, &(0x7f00000001c0)=[@in6={0xa, 0x0, 0x0, @private0={0xfc, 0x0, '\x00', 0x1}, 0xfffffffb}]}, &(0x7f0000000140)=0x10) getsockopt$inet_sctp6_SCTP_PRIMARY_ADDR(r1, 0x84, 0x7a, &(0x7f0000000340)={r2, @in6={{0xa, 0x3, 0x0, @dev={0xfe, 0x80, '\x00', 0x36}, 0xee81}}}, &(0x7f0000000040)=0x84) setsockopt$inet_sctp6_SCTP_ASSOCINFO(r0, 0x84, 0x1, &(0x7f0000000040)={0x0, 0x0, 0x5, 0x5, 0x5}, 0x14) 10m54.971924903s ago: executing program 1 (id=6847): bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000080)={&(0x7f0000000300)=ANY=[@ANYBLOB="9feb0100180000ea000000001c000000dd00000002000000000000002200000f0300000063d038000000000000000f01000000de00009bde3b0607069061a1c006fed59d6d52dc195dc84783df52bd4235fd096a78cbef30dcb22e8245433a39e72daa8e1f293d856cebeeefae7d4e6d086cebed1f94051ebba9a7236046c52ae6950665f6b547992e17af8a7daa14d25a504d1d0626b72162d6fed5a4a157a5"], 0x0, 0x36}, 0x28) r0 = socket(0xa, 0x3, 0x4) ioctl$sock_SIOCBRDELBR(r0, 0x89a2, &(0x7f0000000000)='bridge0\x00') sendmmsg$inet6(0xffffffffffffffff, &(0x7f0000000dc0)=[{{&(0x7f0000000140)={0xa, 0x4e21, 0xf, @initdev={0xfe, 0x88, '\x00', 0x0, 0x0}, 0x401}, 0x1c, &(0x7f00000004c0)=[{&(0x7f00000000c0)="0dcffca9d82f59eb01997e073ee69e36dcd50f96449d1eb9e59030b8a91b2218e8f2d0058c0c57c80cdd0ac29f39c4347165e0ecbb4c5c81ae7e0c981ba86a2b1764305a0f2e2cfbdb4d654ced7f2b38e3a9d2e4bd49d3caef8d3be4ce9337c68087e567dedd43ca87fba99c5794bd7829916d9d9dd3deed1d17", 0x7a}], 0x1}}, {{&(0x7f0000000500)={0xa, 0x4e23, 0x6, @ipv4={'\x00', '\xff\xff', @empty}, 0xb94}, 0x1c, &(0x7f0000000040)}}], 0x1, 0x20000800) shutdown(0xffffffffffffffff, 0x1) setsockopt$inet_sctp6_SCTP_PEER_ADDR_THLDS(0xffffffffffffffff, 0x84, 0x85, &(0x7f00000001c0)={0x0, @in={{0x2, 0x4e24, @empty}}, 0xffff, 0xffc0}, 0x90) 10m54.932774085s ago: executing program 1 (id=6849): r0 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) ioctl$sock_bt_hci(r0, 0x400448de, &(0x7f00000000c0)) (async) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f00000012c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000001c0)=@newqdisc={0x58, 0x24, 0x4ee4e6a52ff56541, 0x70bd2b, 0xffffffff, {0x0, 0x0, 0x0, 0x0, {0x0, 0xfff1}, {0xffff, 0xffff}}, [@qdisc_kind_options=@q_sfb={{0x8}, {0x2c, 0x2, @TCA_SFB_PARMS={0x28, 0x1, {0x5, 0x5, 0x2, 0x3, 0x4, 0x0, 0xfffffff6, 0x8, 0x5}}}}]}, 0x58}}, 0x20040084) (async) r1 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r1, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000180)={&(0x7f00000001c0)=ANY=[@ANYBLOB="bc1b0000400007012bbd700000000000017c00000400c2800c00018006000600843b0000971b0280540214"], 0x1bbc}, 0x1, 0x0, 0x0, 0x4048011}, 0x20008054) 10m39.909471053s ago: executing program 32 (id=6849): r0 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) ioctl$sock_bt_hci(r0, 0x400448de, &(0x7f00000000c0)) (async) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f00000012c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000001c0)=@newqdisc={0x58, 0x24, 0x4ee4e6a52ff56541, 0x70bd2b, 0xffffffff, {0x0, 0x0, 0x0, 0x0, {0x0, 0xfff1}, {0xffff, 0xffff}}, [@qdisc_kind_options=@q_sfb={{0x8}, {0x2c, 0x2, @TCA_SFB_PARMS={0x28, 0x1, {0x5, 0x5, 0x2, 0x3, 0x4, 0x0, 0xfffffff6, 0x8, 0x5}}}}]}, 0x58}}, 0x20040084) (async) r1 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r1, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000180)={&(0x7f00000001c0)=ANY=[@ANYBLOB="bc1b0000400007012bbd700000000000017c00000400c2800c00018006000600843b0000971b0280540214"], 0x1bbc}, 0x1, 0x0, 0x0, 0x4048011}, 0x20008054) 3m3.896805523s ago: executing program 3 (id=11947): r0 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r0, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000740)={0x14, 0x34, 0x701, 0x0, 0x0, {0x3}}, 0x14}, 0x1, 0x0, 0x0, 0x4044840}, 0x0) r1 = socket$nl_generic(0x10, 0x3, 0x10) r2 = syz_genetlink_get_family_id$devlink(&(0x7f0000000300), r0) sendmsg$DEVLINK_CMD_PORT_GET(r1, &(0x7f0000000600)={&(0x7f0000000200)={0x10, 0x0, 0x0, 0x8000}, 0xc, &(0x7f00000005c0)={&(0x7f0000000500)={0x64, r2, 0x1, 0x70bd28, 0x25dfdbfb, {}, [{{@nsim={{0xe}, {0xf, 0x2, {'netdevsim', 0x0}}}, {0x8, 0x3, 0x2}}}, {{@nsim={{0xe}, {0xf, 0x2, {'netdevsim', 0x0}}}, {0x8, 0x3, 0x3}}}]}, 0x64}, 0x1, 0x0, 0x0, 0x24004800}, 0x40088d0) r3 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX_80211(r3, 0x8933, &(0x7f0000000000)={'wlan0\x00', 0x0}) r5 = syz_genetlink_get_family_id$nl80211(&(0x7f00000000c0), r3) r6 = socket$nl_generic(0x10, 0x3, 0x10) r7 = syz_genetlink_get_family_id$ethtool(&(0x7f0000000040), 0xffffffffffffffff) sendmsg$ETHTOOL_MSG_LINKMODES_GET(r6, &(0x7f0000000140)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000600)={0x2c, r7, 0x1, 0x0, 0x25dfdbfc, {0x24}, [@HEADER={0x18, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'lo\x00'}]}]}, 0x2c}, 0x1, 0x0, 0x0, 0x80}, 0x0) bpf$PROG_LOAD(0x5, &(0x7f0000000440)={0xe, 0x6, &(0x7f0000000680)=ANY=[@ANYBLOB="ebde00000000000071119b00e9ff000085100000020000008500000000000000950000280bbeed00275e99280a159ca5779c00000000009500a50500000000"], &(0x7f0000000080)='GPL\x00', 0xc, 0x29e, &(0x7f000000cf3d)=""/195, 0x0, 0x0, '\x00', 0x0, @sk_skb, 0xffffffffffffffff, 0x6}, 0x70) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000580)={0xffffffffffffffff, 0xffffffffffffffff}) r9 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r9, &(0x7f0000000180)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f00000002c0)=@updpolicy={0x1fc, 0x19, 0x1, 0x0, 0x3, {{@in=@multicast2, @in6=@local, 0x0, 0x0, 0x0, 0x0, 0xa, 0x0, 0x80}, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2}, {}, 0x0, 0x200}, [@tmpl={0x144, 0x5, [{{@in=@multicast1, 0x4d6, 0x3c}, 0x2, @in=@local, 0x3507, 0x4, 0x3, 0x7, 0x8, 0x4, 0x1}, {{@in6=@dev={0xfe, 0x80, '\x00', 0xc}, 0x4d3, 0x6c}, 0x8, @in6=@private0={0xfc, 0x0, '\x00', 0x1}, 0x3501, 0x2, 0x0, 0x73, 0x8001, 0x4, 0x7}, {{@in6=@mcast2, 0x4d3, 0x3c}, 0x2, @in6=@remote, 0x3506, 0x2, 0x3, 0x7, 0x5, 0x3, 0x7}, {{@in6=@loopback, 0x4d4, 0x32}, 0x2, @in6=@remote, 0x3502, 0x3, 0x1, 0x7, 0x5, 0x3, 0x2}, {{@in6=@dev={0xfe, 0x80, '\x00', 0x12}, 0x80000001, 0x3c}, 0xa, @in=@remote, 0x0, 0x1, 0x1, 0x9, 0x8, 0xe7, 0xfffffff9}]}]}, 0x1fc}}, 0x0) connect$can_bcm(0xffffffffffffffff, &(0x7f0000000000), 0x10) sendmsg$can_bcm(0xffffffffffffffff, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000240)={&(0x7f00000003c0)=ANY=[@ANYBLOB="04"], 0x48}}, 0x0) ioctl$sock_SIOCGIFINDEX(r8, 0x8933, &(0x7f0000000080)={'bridge_slave_1\x00', 0x0}) r11 = openat$tun(0xffffffffffffff9c, &(0x7f0000000640), 0x141040, 0x0) r12 = openat$tun(0xffffffffffffff9c, &(0x7f0000000040), 0x1c1341, 0x0) ioctl$TUNSETIFF(r12, 0x400454ca, &(0x7f00000000c0)={'syzkaller0\x00', 0x84aebfbd6349b7f2}) r13 = socket(0x10, 0x803, 0x0) ioctl$sock_SIOCGIFINDEX(r13, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r13, &(0x7f00000012c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000a40)=@newqdisc={0x2c, 0x24, 0x4ee4e6a52ff5653f, 0x70bd2d, 0x25dfdbfc, {0x0, 0x0, 0x0, r14, {0x0, 0x9}, {0xffff, 0xffff}}, [@qdisc_kind_options=@q_drr={0x8}]}, 0x2c}, 0x1, 0x0, 0x0, 0x81}, 0x0) sendmsg$nl_route_sched(r13, &(0x7f0000006040)={0x0, 0x0, &(0x7f0000000300)={&(0x7f00000001c0)=@newtfilter={0x44, 0x2c, 0xd27, 0x70bd2a, 0x25dfdbfb, {0x0, 0x0, 0x0, r14, {0x2, 0xa}, {0x0, 0x9}, {0xffff, 0x9}}, [@filter_kind_options=@f_flower={{0xb}, {0x14, 0x2, [@TCA_FLOWER_KEY_ETH_TYPE={0x6, 0x8, 0x8848}, @TCA_FLOWER_KEY_MPLS_LABEL={0x8, 0x46, 0x5c7e2865}]}}]}, 0x44}, 0x1, 0x0, 0x0, 0x4010}, 0x0) ioctl$TUNSETLINK(r11, 0x400454cd, 0x322) sendmsg$NL80211_CMD_SET_INTERFACE(r3, &(0x7f00000001c0)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x4000000}, 0xc, &(0x7f0000000100)={&(0x7f0000000780)={0x78, r5, 0x2, 0x70bd2d, 0x25dfdbfb, {{}, {@val={0x8, 0x3, r4}, @val={0xc, 0x99, {0xba89, 0x5d}}}}, [@NL80211_ATTR_IFTYPE={0x8}, @mon_options, @NL80211_ATTR_IFTYPE={0x8}, @mon_options=[@NL80211_ATTR_MU_MIMO_GROUP_DATA={0x1c, 0xe7, "ea0804ccab319698e2935b76562678dc2b9bfcc100b70988"}, @NL80211_ATTR_MNTR_FLAGS={0x8, 0x17, 0x0, 0x1, [@NL80211_MNTR_FLAG_ACTIVE={0x4}]}], @NL80211_ATTR_4ADDR={0x5, 0x53, 0x1}, @NL80211_ATTR_MESH_ID={0xa}, @NL80211_ATTR_IFTYPE={0x8, 0x5, 0x7}]}, 0x78}, 0x1, 0x0, 0x0, 0x28084084}, 0x0) r15 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r15, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000340)={&(0x7f0000000000)=ANY=[@ANYBLOB="440000001000010400"/20, @ANYRES32=r10, @ANYBLOB="000000000000000024001280110001006272696467655f736c617665000000000c000580050027"], 0x44}}, 0x0) sendmsg$NL80211_CMD_FRAME(r3, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000380)={&(0x7f0000000140)=ANY=[@ANYBLOB='H\x00\x00\x00', @ANYRES16=r5, @ANYBLOB="01002cbd7000000000000200000008000300", @ANYRES32=r4, @ANYBLOB="0c0099000200000025000000080026003c14000008009f00060000000a00cd0002c99583031b367f33000800"], 0x48}, 0x1, 0x0, 0x0, 0x9d26f8fcf5795660}, 0x4040000) 3m3.063802693s ago: executing program 3 (id=11956): r0 = socket$nl_rdma(0x10, 0x3, 0x14) sendmsg$RDMA_NLDEV_CMD_SET(r0, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000240)={&(0x7f00000000c0)=ANY=[@ANYBLOB="180000000010"], 0x18}, 0x1, 0x0, 0x0, 0x4048811}, 0x0) r1 = socket$key(0xf, 0x3, 0x2) sendmsg$key(r1, &(0x7f0000000040)={0x3, 0x0, &(0x7f0000000340)={&(0x7f0000000100)={0x2, 0x5, 0x0, 0x6, 0xa, 0x0, 0x0, 0x0, [@sadb_address={0x3, 0x6, 0x0, 0x0, 0x0, @in={0x2, 0x0, @empty}}, @sadb_sa={0x2}, @sadb_address={0x3, 0x5, 0x0, 0x0, 0x0, @in={0x2, 0x0, @local}}]}, 0x50}, 0x1, 0x7}, 0x0) write(r0, &(0x7f0000000540)="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", 0x1000) r2 = syz_init_net_socket$bt_hidp(0x1f, 0x3, 0x6) ioctl$sock_bt_hidp_HIDPGETCONNLIST(r2, 0x800448d2, &(0x7f0000000000)={0x1, &(0x7f0000001880)=[{@fixed}]}) r3 = socket$inet_sctp(0x2, 0x5, 0x84) setsockopt$inet_sctp_SCTP_RECONFIG_SUPPORTED(r3, 0x84, 0x75, &(0x7f0000000000)={0x0, 0x6}, 0x8) r4 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r4, &(0x7f00000003c0)={0x0, 0x0, &(0x7f0000000500)={&(0x7f0000000100)=@newlink={0x40, 0x10, 0x439, 0x0, 0x3, {0x0, 0x0, 0x0, 0x0, 0x9801}, [@IFLA_LINKINFO={0x18, 0x12, 0x0, 0x1, @gre={{0x8}, {0xc, 0x2, 0x0, 0x1, [@IFLA_GRE_REMOTE={0x8, 0x7, @local}]}}}, @IFLA_MTU={0x8, 0x4, 0x101}]}, 0x40}, 0x1, 0x0, 0x0, 0x2000c801}, 0x4) 3m2.895965474s ago: executing program 3 (id=11960): r0 = socket(0x10, 0x803, 0x0) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000100)={0x1f, 0x3, &(0x7f0000000540)=@framed={{0x18, 0x0, 0x0, 0x0, 0xfffffeff, 0x0, 0x0, 0x0, 0x9}}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x11}, 0x94) r1 = socket(0x1, 0x803, 0x0) getsockname$packet(r1, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) socket$inet6_udp(0xa, 0x2, 0x0) sendmsg$nl_route(r0, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000340)=@ipv6_newaddr={0x2c, 0x14, 0x9535393fea6295b5, 0x0, 0x0, {0xa, 0x40, 0x0, 0x0, r2}, [@IFA_LOCAL={0x14, 0x2, @ipv4}]}, 0x2c}}, 0x0) socket(0x0, 0x803, 0x0) sendmsg$nl_route(r1, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000080)=@ipv6_newaddr={0xfffffffffffffea3, 0x14, 0x9535393fea6295b5, 0x0, 0x0, {0xa, 0x0, 0x0, 0x0, r2}, [@IFA_ADDRESS={0x0, 0x1, @local}, @IFA_LOCAL={0x14, 0x2, @loopback}]}, 0x40}}, 0x0) 3m2.648448791s ago: executing program 3 (id=11965): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r0, &(0x7f000000c2c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000340)=ANY=[@ANYBLOB="140000001000010000000000000000010000000a28000000000a0101000000005e1affd5020000000900010073797a300000000008000240000000032c000000030a01030000e6ff00000000020000000900010073797a30000000000900030073797a320000000014000000110001"], 0x7c}}, 0x0) r1 = socket$nl_generic(0x10, 0x3, 0x10) r2 = socket$alg(0x26, 0x5, 0x0) bind$alg(r2, &(0x7f00000007c0)={0x26, 'skcipher\x00', 0x0, 0x0, 'cbc(sm4)\x00'}, 0x58) setsockopt$ALG_SET_KEY(r2, 0x117, 0x1, &(0x7f0000001280)="b7f2288a911993f08d3aaea2bc0000de", 0x10) r3 = accept$alg(r2, 0x0, 0x0) r4 = socket$inet_tcp(0x2, 0x1, 0x0) listen(r4, 0x0) ioctl$sock_SIOCSPGRP(r4, 0x541b, 0x0) sendmmsg$alg(r3, &(0x7f00000011c0)=[{0x0, 0x0, &(0x7f0000001140)=[{&(0x7f00000022c0)="2c2b74fddbc858e42edcd12037e5751c680f2e3099edf8f9d5a3a3e83d9a78c4b9e8c4324c327477723fc69642803d0ed4f42e83d068a0cbe1038c574676809bcd3eb9c8abe84cf07e74bc76c679f56293ca909551c6bc396200608271a4cc09e0c90c686fe2d3b5ecbcffbcde51f51ef184793dccaa40c9a0edc00a09274506ec60853df9ca40b59166853c6019bd046e19", 0x92}, {&(0x7f0000003cc0)="d815e2824b383e261b12ce3a276e935d9986635f19c4b0948ee16149f775c7e07f69d10707f39808df56bb79714ecd16b02c599a348b6710a7ace4b076f60b38de91432fc21315ff8424db7d2154f90a5d3905406ec9917ed492ce25009fb11319a03b0ca1dbcde7b8b727d1923f8a6ebdac05c5e63f7555904e28f84a5af5a79036eb141e2cee5802fd9b6db3fd6f787832ce5d7f1763be7751c54ff6a16b25f62dfd73d961869a40ce5c4a7546917e1706ffbbca7627c5793c5a4671ff7703e3a5cd20719c366b6c940f47f8db42ee7e5330ce31bb58357fa076bc9471149ee9e293ed5336414c91d8be4c65badab4a4f7511c1f6d5155d6a40d71524441c99188b3364863f3b4279677e0bd70f6d23ab55f2383901d8fee5e7bee380c113c2a03267a953020764fe8e2cb76e2eca0e51bf8314e20f5e947e4bc47e5c1a549b55311c0bdbed1d4da4af4682373556df0e4f45e297f66e09a0e38e61b5882f225ce59d604c2dd68414eb4748d8d3cd768a0313583c65da303a15c64333a5405f629ca5b9bb6bdbfad550e5d9fde4c4bc710f1ee77eaf2273740c80ac59aa93b78c5550737186cf63ccc4f6a794e27e455829cf79ce9db4e3f0316ad3ac19c55c464a4d7a68ada9aaa0b6885ba6edb3f5bc8d3aaf191d31be189fc1e76297430e67828d3711af9f2ad445a5e80c6bd47126054d2b3ea79c289a0acb37ae88b425470d955a877b4c8d571714b2a1bf02a16810628f3be2a6caa892a427152c2bd8e74175f840501c25cf73e44fba17cf310dfefe279520f726b6dd96644b4ae97e1afbbe6f2592a1d2e4dd01dcc23bb708a6ae57746f91eea92dfb90d43d6a82e83d3663f9768a682f269486054aeb61c78892d739ab4566c49a297abe9556ebb4139a838281bce3cf9be1bceb3005004314fc3ffe703c7656c92058453aa162add0a40b3018cea774b12bee95fbfa507757d06c3d1c89741890bf250092a624185908f3ed369d0930667d5a9ecc52f5a01ca2a8b171ce06be9d204b3e0af166b7546dcf1d7e0e9d5197cf6b01ce5a2ed62b4d5a8ead5d8704373935100ececb3750fd42d343984ba90e6ea22f90c67a248532ba4cbd03c2d042fb7e34aa11ed3cfe3a177c429299600b9d1231db4414110be42481bdd3a8162d2b4d3b5104065d5a4cd4319bb9fa04a29b93f211f68538e33cbdb5443ae01c13bbe23620eec4cf83ea12ddb39ad468109c0777e39a8e2e3e2f7ead0b5f894e06d58816c66ebe01f9e03c3a4bb2aa5542b6e0e8ed6f653d73a6bf7591d041621b606018f594a0657421081bdb8d8a2b060fa28f7a817070fd1696933686c858584f8d942e2b1cad5ce530a85ae30d8903d7f7fdd4602cbe2b6c61304300dd43562cc08e341ca2583cc25c642d5db8dc0f72fa3912dfadd7c663554dcc9072015e187bc4ac6211ab2b8bc0cc157cc143d93dd0d9f27d04136120770161088c4bda79324e395622b07ed2bd22ea56be7396db5725125e0799ba28e920897440b1ffdd8474c92e527b93991b46214d0e8c5bd30359a735853c62977812e927d2841f7dc3427ad61bdc368887452080c84723387e83e523802cdff6694eb05a658cfab4b31ca41f73757fa417cefd277548c1fb25423e959fbc00f817c15b32d96132e92b2c33c6dd70293215e51843a3363f1d3d3244ac9d5713dba567adba36a81696e3dfe9fd69ada751101d2daeb5fefcee44d87f8fe29530341eebfdc1b797b28e968d54b0143058aeeee2fd36d069351307f093445fb7547cb0dc90a3a4820c67b824ea857d7e8bc1a37e0c6405333d3cbe77befcd9697b87b8dd45899551f2fe3e737026855d2c650dadae7a48f2b925080e913f064f5327942ee0e1154b93e209621689156c078946572f26c5e8715adf42def7f48dc8ee27c8a3a84145c580e30218626ce639b56abbbb24d0d0f2b1ad6408e50aa11ef0c53448f3610b42a16d28a5d2507e56e762abe159ca712a1cf69e50b8207f69a425c592a53da2641f26864634e2e9f8d529a37b45478bfcc6db4d22c90fc0ace6e75a20085fc6f221536e11097c113126a96902821247341e1ed77a782ba7dd160e1b6ca6fcbcc474f50b372d81ec856c6e6a9ea8170a5e937773fcc9ed97e7082480c34e98ebd9952c0d8543a9d3e85c889c5a1aceaa81aee732b66af67a952254ea04d4cc6d72cac0dc92cbaa365eac3013c053029939eafc02d3acd4a0c98d9540be7bbd9f1f79b34c2b43874301bf8bb18ca9cd14ce9e1b2c31c460dbdf6cc702f7a13823f0fd2f8ba4e093100989ba3d4564fc1a73965ae58f2c85de06a0c6dbb43760ab5a34ffe6ba2ba57983cc13af9af76707d6a9d67f86ad7c1aa73017fc10320bca4eae81bfbcb333b41884fa5702912189757768cdbbdb61558170f802db4dd95709c01956133e953649342c07eae84f82ff70b54881a1364c179a7569c3780f1d0bf73ab2e6eded9b4be4d4fb42d1efbea7e9c733a0c6e982d49d3dc9ad780949e379cfab4aca3a16c9fcfd3cc47674c80916d770ba12aacdaf8db4365690b2d541758ed1202018adcbb53f7288bac3b94bb793405c8550da7a7d983dd577eac527c07840b2f7ed2d5fa87082778ee4e2b2277a56807afadbbfc28c1c55312bc97c76c305a1bf42fc9d72ead3770cd47560af64de888e4a1ea7b2670fc6dac6ef08a219db1c1489b233045e6545fd2a29d052439115c07af8a117fb0490a0430ae9e00bed089c197393ed974722e61a8d152df160b7a130fca2304d9e0f53d6e71a6889813028b19b0afc2ca337ac2edc18a724224b1defa4270e6874fb4be392245c995b1ae22f9d337a4666b38de92929f2859b6b176d473f71aa7790707453ddde600d6893b0e267fe40b91ef5040610ceb6e2744a9ae6fda1471d35143d76e95c74f88a2633dbf448f6c6b878d7f6f3504d09495bd7e5b3c9c0ac298577983e40c2ca7dee61d646d8d826d5ec7249589f34650aa08fc435843933c1007ace87de34ff9a3a5ed338486ee62713ebbd7863a98960a829d81ef26cefb8336a5730317c079a22c4a8cae7d62762d963f0d9f4b4ed87e0b5434fc8451ce1039c49a393ae6ed4ad037ca83cd977be5dc50199050c3db16967e8e06af08ee86b1a0b7a44b996415ac13a866c7d8302fb6e4a8d754e08adc5f6b84bc1c7e0da98577901189dee5de09773704abe037c6243ca3bfadc100886fcc6dd5b766698cf4837d7bbb2424e9ecb75cc39d8bd18c209f9db36ac2bd8d9e9325360011bf6f85c1dd63a24da210970e41b29b9220584a72ce79e94f699b0724b7679a2ba3eb785d3ee2e1333f736f713ca98c5137e09442f71f57463915771367374a275aeef3665b3184a7f3f44b749c132c0fdaa45d873d55f5eff1244f7fe60fc7eb576e9f92d330734d9a97945e58d5e74f5aa8bfca61ec371d89cfafd3f165315ab9f5d9e9bc1524577d5651e14fbb05abc9bd5f64e711dea2ed9df88c34f34493ea8ea2731885c0abdecf456056bcb4e678bccd07abaef1332249b6968fced7c345dc9ea76fc97506a1d378839bcaa371dde04c237db44a9a3aec8d9389b6b5f4eb3cf6d3daa37e7d4ac11fa90b46492994cb34c6d65c92c69e37f9b7db619c7d800efa9246254b7dc449a64f42e800338c825c464c50a5c6fe800bda7f2839ea47de916cb7970f9afe8c94da5c5bcd0664827e0bfd673b97e4b547e369575106583f26d11fde202dcf75249e934b42db16ab2f557347a0abec9da3bb4fb08400611d7bcc1d04a47d9155610fc4767b3272e5ed0fc8d80108e35715ef9bf5dfa9e7b12143af6d19dffb6fed14417ee89fb981196f72af5c75018553953a924f42bcd16948e2cb61d846928b2b10bbe1a705284a79f9531d56b5606dc74f7c8baf6aaf61400ac36e6ad64e9342440c304df1dc1cac47ba174d84ad27ac80201b718216a5e65cb79a38e50b245816564e30dac78c10632b665a93e140aeb0ba4f37af456cec6a21f5f6db4a4ba21ea239ccad37f3a36a9b05d65a24b42b0c5f660edd12faec57d52e8aa407f843df2a0971b16c1b352c64580f226e5801b014c137935906fb87b88b5f81d16da4a607e3229379dfc3848aa1debb6e094ad4945c024a9b6c0cb9159442bc84abe56dea43a458ab904a4606540e19997a19765fa11e1eeb422cf2a90b407c52c952992846178a7bf4186206b453f57383544c8ba6438eade775a1f75750694dfaefa866a229e61958a69dd7ba52fc9612713ad7a63916a4bb1daa6da0b8ee49bfc69c37cce5572a79c22d42e0f73a862284a87667ea42cac5d8c16c1195a4d68f776885cbe42fe17b8cf83b5a88d5dd97594b5be938be7d3aa49523d64429d941966a64a1c7f47d4d179a5c55184092e1da71f5667fa94cde636cdfa1a7aad2a74ff5afd044ee2a3577a0a2706977329b81f9941ff4ada83ff6d8abe2a3d142176448f93e5602c820dc57197e2a977b894805428563318e0c25e8d008652762bd4c32d4c7e985a6e2b85c5edb93c3c85e2a0ea7d58b83ea1848e255a1529aad74d675436605a19cf640932d41f0f6c43533a9eb2f9f57b14c14f7833484c91911179f8e67bceebd035abc41a243ed0c0949a02d66044762e675ab42554ca75ea5d6e7b50a181e03b484f5ab76831004395bbb7ce1b496786d28304721dc67279a64039016206b5b3938881ee1131bf86cc90ab8c788b6982a5d575913a11a6009a7142d03ee6109f734f7b37a8ba596a09113f5140c7655bd58da09c62c67d3d426e7a242575cc5f8261d842d2654d27f27701021535a9310922f3bda55749b8ab2d747c4fabb39b8a3213f05758411f1c71e9730ee9c6eb48bfe4d105a75e21da7eb3f0f329b253176c0eea7628adb8dc9ab99e2a5fb7f93398d8be9809bbb0b3d55171886f89f1f45ad3b64c4c0f3af24eb367af95fa7987ef81f8dc2c16368db3a8d0dc2193674d19e9861eff2d264e5abfc91b1585acabc7051835fc898f17634e4d2bfb0d7ac2c7cff516ee521771b3689d42803612fa62e01ebf3d6da56d38302936b2f8a91d02fe49a1750eb7be6f0a9d3a4cd53d0da2fe06e4b6115e71430ace1aea20e3fc83412ab10372dd2437fba6619931d26a1a2986c68d5645d3dc8dfdb6b36f018eb9abb0101b289587d9d4e8c8522229eba922f19d2fce349e8ad3bf55035d52009cd8ac3af330bf4d60ec1808377f6de4ec6f8842f4fc6a75c2cc05f246be9854fe7546550ec57bd8e9d52bfb87f79889e5561955235322b83797cddd1cf31f733dbfef560b2373c05d2740cc52e3895f8f18fde3607d857f71d298d7dc17f83ef97774a253d4bac6e1ec0f03f50255c5da2a6fe8851b01e96ba73e616583b13271a4be5462726c3ff1d096f56a9c81f8e811e52ec1b59f8ec5f9c8f76c5faa1c3d46ff1e2b70b0d00beb3a2ea1c7c9e89536469633161021b755766c262d0ae8d1cd2245b576a5f884297b129108884ea0b895e536edd04baf989d3841c47a11c4d191c7c6c0ebf18b9aa9472e4a4194832bc9768284dee5b0eb36ff8e15c5a27d9734234ca68", 0xf6e}], 0x2, &(0x7f00000024c0)=ANY=[@ANYBLOB="18000000000000001701000004000000fcffffff00000000180000000000000017010000030000000100000000000000e0000000"], 0x110, 0x4000}], 0x1, 0x8081) recvmmsg(r3, &(0x7f0000003c80)=[{{0x0, 0x0, &(0x7f0000000080)=[{&(0x7f00000012c0)=""/4096, 0x1000}], 0x1}, 0xffffff0b}], 0x1, 0x2001, 0x0) sendmsg$NL80211_CMD_SET_MCAST_RATE(r1, 0x0, 0x86292f7944bda9ad) sendmsg$NFT_MSG_GETSETELEM(r0, &(0x7f00000002c0)={&(0x7f0000000140)={0x10, 0x0, 0x0, 0x8000000}, 0xc, &(0x7f0000000240)={&(0x7f00000006c0)={0xbf4, 0xd, 0xa, 0x101, 0x0, 0x0, {0x3, 0x0, 0x8}, [@NFTA_SET_ELEM_LIST_SET={0x9, 0x2, 'syz0\x00'}, @NFTA_SET_ELEM_LIST_SET_ID={0x8, 0x4, 0x1, 0x0, 0x1}, @NFTA_SET_ELEM_LIST_SET_ID={0x8}, @NFTA_SET_ELEM_LIST_TABLE={0x9, 0x1, 'syz1\x00'}, @NFTA_SET_ELEM_LIST_SET={0x9, 0x2, 'syz1\x00'}, @NFTA_SET_ELEM_LIST_SET_ID={0x8, 0x4, 0x1, 0x0, 0x1}, @NFTA_SET_ELEM_LIST_SET_ID={0x8}, @NFTA_SET_ELEM_LIST_SET={0x9, 0x2, 'syz2\x00'}, @NFTA_SET_ELEM_LIST_ELEMENTS={0xb90, 0x3, 0x0, 0x1, [{0x5c8, 0x0, 0x0, 0x1, [@NFTA_SET_ELEM_USERDATA={0xb2, 0x6, 0x1, 0x0, "4b67e950298b90582dcc617cfca5ea8846ec6a0f581c63af4e8bdd36244bf8938347fb7a1da2c973a34a5ab240c0ee1111734e2aa70b04a3fb9dec0220914c2126c016ab39327892f1318302aee0243b032fb81aa31edea93951821b21dada2ecb873e6dc04dab68281e3314220edb1ef753debe1a9ca951e2989cd543a00defb99360f9fc61cc043f268f351d3673afa9e3d267c80de455f785beed2f1f858bb5f7d86e7910de31be20412ca632"}, @NFTA_SET_ELEM_EXPIRATION={0xc, 0x5, 0x1, 0x0, 0x5}, @NFTA_SET_ELEM_EXPRESSIONS={0x144, 0xb, 0x0, 0x1, [{0xc, 0x1, 0x0, 0x1, @ct={{0x7}, @void}}, {0xc, 0x1, 0x0, 0x1, @fwd={{0x8}, @void}}, {0x48, 0x1, 0x0, 0x1, @rt={{0x7}, @val={0x3c, 0x2, 0x0, 0x1, [@NFTA_RT_KEY={0x8, 0x2, 0x1, 0x0, 0x1}, @NFTA_RT_DREG={0x8, 0x1, 0x1, 0x0, 0x1}, @NFTA_RT_KEY={0x8}, @NFTA_RT_KEY={0x8, 0x2, 0x1, 0x0, 0x3}, @NFTA_RT_KEY={0x8, 0x2, 0x1, 0x0, 0x4}, @NFTA_RT_KEY={0x8, 0x2, 0x1, 0x0, 0x2}, @NFTA_RT_KEY={0x8, 0x2, 0x1, 0x0, 0x4}]}}}, {0x9c, 0x1, 0x0, 0x1, @bitwise={{0xc}, @val={0x8c, 0x2, 0x0, 0x1, [@NFTA_BITWISE_OP={0x8}, @NFTA_BITWISE_MASK={0x80, 0x4, 0x0, 0x1, [@NFTA_DATA_VERDICT={0x18, 0x2, 0x0, 0x1, [@NFTA_VERDICT_CHAIN_ID={0x8, 0x3, 0x1, 0x0, 0x1}, @NFTA_VERDICT_CHAIN={0x9, 0x2, 'syz1\x00'}]}, @NFTA_DATA_VERDICT={0x58, 0x2, 0x0, 0x1, [@NFTA_VERDICT_CHAIN_ID={0x8, 0x3, 0x1, 0x0, 0x4}, @NFTA_VERDICT_CHAIN={0x9, 0x2, 'syz0\x00'}, @NFTA_VERDICT_CHAIN={0x9, 0x2, 'syz1\x00'}, @NFTA_VERDICT_CODE={0x8}, @NFTA_VERDICT_CODE={0x8, 0x1, 0x0, 0x1, 0xfffffffffffffffc}, @NFTA_VERDICT_CHAIN={0x9, 0x2, 'syz1\x00'}, @NFTA_VERDICT_CHAIN={0x9, 0x2, 'syz0\x00'}, @NFTA_VERDICT_CHAIN={0x9, 0x2, 'syz0\x00'}]}, @NFTA_DATA_VERDICT={0xc, 0x2, 0x0, 0x1, [@NFTA_VERDICT_CHAIN_ID={0x8, 0x3, 0x1, 0x0, 0x1}]}]}]}}}, {0x10, 0x1, 0x0, 0x1, @notrack={{0xc}, @void}}, {0x14, 0x1, 0x0, 0x1, @synproxy={{0xd}, @void}}, {0x14, 0x1, 0x0, 0x1, @byteorder={{0xe}, @void}}, {0xc, 0x1, 0x0, 0x1, @cmp={{0x8}, @void}}]}, @NFTA_SET_ELEM_TIMEOUT={0xc, 0x4, 0x1, 0x0, 0xfffffffffffff801}, @NFTA_SET_ELEM_DATA={0x188, 0x2, 0x0, 0x1, [@NFTA_DATA_VALUE={0xe, 0x1, "22f5951543ae75e44f62"}, @NFTA_DATA_VERDICT={0x30, 0x2, 0x0, 0x1, [@NFTA_VERDICT_CHAIN_ID={0x8, 0x3, 0x1, 0x0, 0x2}, @NFTA_VERDICT_CODE={0x8, 0x1, 0x0, 0x1, 0xfffffffffffffffe}, @NFTA_VERDICT_CHAIN_ID={0x8, 0x3, 0x1, 0x0, 0x2}, @NFTA_VERDICT_CHAIN_ID={0x8, 0x3, 0x1, 0x0, 0x4}, @NFTA_VERDICT_CHAIN={0x9, 0x2, 'syz0\x00'}]}, @NFTA_DATA_VERDICT={0x30, 0x2, 0x0, 0x1, [@NFTA_VERDICT_CHAIN={0x9, 0x2, 'syz2\x00'}, @NFTA_VERDICT_CHAIN_ID={0x8, 0x3, 0x1, 0x0, 0x2}, @NFTA_VERDICT_CODE={0x8, 0x1, 0x0, 0x1, 0xffffffffffffffff}, @NFTA_VERDICT_CHAIN_ID={0x8, 0x3, 0x1, 0x0, 0x1}, @NFTA_VERDICT_CODE={0x8, 0x1, 0x0, 0x1, 0xfffffffffffffffc}]}, @NFTA_DATA_VERDICT={0x14, 0x2, 0x0, 0x1, [@NFTA_VERDICT_CODE={0x8, 0x1, 0x0, 0x1, 0xfffffffffffffffb}, @NFTA_VERDICT_CODE={0x8, 0x1, 0x0, 0x1, 0xfffffffffffffffb}]}, @NFTA_DATA_VALUE={0xeb, 0x1, "7be15ba83b95b2e54893a55ee995bd43c45f057b88290d68e51806387747a948ca69b28c204ef79224fdacebfd83b1f9e173f4e5d3cbd9c8db34a2cb47d71a0f66cad76021c995466e70c9cbd4c221b22395e0c5da264dd524586c586aef66e9621fde003e25d2ea6bb9e61f32bf921417e7b50b792954054026d970be8a7104f455588115ab7dd19e78e7aa7683c9a45a8a70652762dd35981fd6c7e668fb2b9a3926b90f769e1da2156699c892e34a16d52abb54b60e8f50400ef8188d285885b8e4527da3d375a54753180b8b90a6c2657bf6e342175bf1116137131bfbea571a73df70506b"}, @NFTA_DATA_VALUE={0x14, 0x1, "72b93c88409f923026a715c4731cdf9c"}]}, @NFTA_SET_ELEM_KEY={0xb4, 0x1, 0x0, 0x1, [@NFTA_DATA_VALUE={0xae, 0x1, "98ece58811c3b56b37943538eef7884979986298c5b295c3acb89f032e95277ad27d6d2e2a8b01fc253ee7d056ffe8f4b53383b5cea3dc8485c33c957515ed336f81576f15d6252f099309c6287ecb3b82bd0141246938f5db68fabddaaf891ee0e2b211383e1785413cff6c09bf395d482d0e5ecd88a5691cfb99ef9721dec89161347e123cff0a5751c841f22016bee24eaa8bed7f6d0d010443bcd8cebbad6382c9788267a3fcd686"}]}, @NFTA_SET_ELEM_KEY={0x16c, 0x1, 0x0, 0x1, [@NFTA_DATA_VERDICT={0x38, 0x2, 0x0, 0x1, [@NFTA_VERDICT_CHAIN_ID={0x8, 0x3, 0x1, 0x0, 0x3}, @NFTA_VERDICT_CHAIN_ID={0x8, 0x3, 0x1, 0x0, 0x2}, @NFTA_VERDICT_CHAIN_ID={0x8, 0x3, 0x1, 0x0, 0x2}, @NFTA_VERDICT_CHAIN={0x9, 0x2, 'syz2\x00'}, @NFTA_VERDICT_CODE={0x8, 0x1, 0x0, 0x1, 0xfffffffffffffffc}, @NFTA_VERDICT_CODE={0x8, 0x1, 0x0, 0x1, 0xfffffffffffffffb}]}, @NFTA_DATA_VALUE={0xfd, 0x1, "4988cd7c233cfd3068728880933c08c38df5b507b286f8a107ccc9dfb61d99a1443de318fec37c1d7968d313f5ea4a42c0fc98dd6e6ff8edc051076f6c7e7b63f2edcfbc89d1d4041bf4d286359ebfa4b1a30b507afb98d2e13001f27e5a383a5af5ff77a3c7efbda010643b445bdb6313cf271bebd7e1adfc55e1e483e6e7176f37e71b2959e186e2eff4c820bb00515e5af5180be27f8286dd10e06cbb71eabafd332d7b562c4b66d42fb1ea0b8766852eab197f4e0f3291a3e2c91ee226a3df06d0da3368e951051cb586946383c557bc0c24604a14a0df18195785dc576f7dc7e236c1c10e1c37ac7b52c604da7237e272936d4cc6ff49"}, @NFTA_DATA_VALUE={0x2e, 0x1, "c2bd602f1165224f3a924ef59f922f0a659c5fee6644b62048463d9c44d44a4b9814cd03ae203faf5126"}]}, @NFTA_SET_ELEM_EXPIRATION={0xc, 0x5, 0x1, 0x0, 0x23}]}, {0x5c4, 0x0, 0x0, 0x1, [@NFTA_SET_ELEM_EXPIRATION={0xc, 0x5, 0x1, 0x0, 0x3}, @NFTA_SET_ELEM_FLAGS={0x8, 0x3, 0x1, 0x0, 0x1}, @NFTA_SET_ELEM_EXPRESSIONS={0x90, 0xb, 0x0, 0x1, [{0x50, 0x1, 0x0, 0x1, @osf={{0x8}, @val={0x44, 0x2, 0x0, 0x1, [@NFTA_OSF_DREG={0x8, 0x1, 0x1, 0x0, 0xc}, @NFTA_OSF_DREG={0x8, 0x1, 0x1, 0x0, 0x12}, @NFTA_OSF_DREG={0x8, 0x1, 0x1, 0x0, 0x11}, @NFTA_OSF_FLAGS={0x8}, @NFTA_OSF_DREG={0x8, 0x1, 0x1, 0x0, 0xc}, @NFTA_OSF_FLAGS={0x8}, @NFTA_OSF_TTL={0x5, 0x2, 0xfe}, @NFTA_OSF_TTL={0x5, 0x2, 0xf}]}}}, {0xc, 0x1, 0x0, 0x1, @dup_ipv6={{0x8}, @void}}, {0x30, 0x1, 0x0, 0x1, @fib={{0x8}, @val={0x24, 0x2, 0x0, 0x1, [@NFTA_FIB_DREG={0x8, 0x1, 0x1, 0x0, 0x11}, @NFTA_FIB_FLAGS={0x8, 0x3, 0x1, 0x0, 0x18}, @NFTA_FIB_FLAGS={0x8, 0x3, 0x1, 0x0, 0x8}, @NFTA_FIB_DREG={0x8}]}}}]}, @NFTA_SET_ELEM_KEY_END={0x184, 0xa, 0x0, 0x1, [@NFTA_DATA_VERDICT={0x4}, @NFTA_DATA_VERDICT={0x34, 0x2, 0x0, 0x1, [@NFTA_VERDICT_CHAIN_ID={0x8, 0x3, 0x1, 0x0, 0x1}, @NFTA_VERDICT_CHAIN={0x9, 0x2, 'syz0\x00'}, @NFTA_VERDICT_CODE={0x8, 0x1, 0x0, 0x1, 0xfffffffffffffffb}, @NFTA_VERDICT_CHAIN={0x9, 0x2, 'syz1\x00'}, @NFTA_VERDICT_CHAIN_ID={0x8, 0x3, 0x1, 0x0, 0x1}]}, @NFTA_DATA_VERDICT={0x20, 0x2, 0x0, 0x1, [@NFTA_VERDICT_CHAIN={0x9, 0x2, 'syz0\x00'}, @NFTA_VERDICT_CODE={0x8, 0x1, 0x0, 0x1, 0xffffffffffffffff}, @NFTA_VERDICT_CODE={0x8}]}, @NFTA_DATA_VERDICT={0x48, 0x2, 0x0, 0x1, [@NFTA_VERDICT_CODE={0x8, 0x1, 0x0, 0x1, 0xfffffffffffffffb}, @NFTA_VERDICT_CHAIN={0x9, 0x2, 'syz0\x00'}, @NFTA_VERDICT_CHAIN={0x9, 0x2, 'syz1\x00'}, @NFTA_VERDICT_CHAIN_ID={0x8, 0x3, 0x1, 0x0, 0x1}, @NFTA_VERDICT_CODE={0x8, 0x1, 0x0, 0x1, 0xfffffffffffffffe}, @NFTA_VERDICT_CHAIN={0x9, 0x2, 'syz0\x00'}, @NFTA_VERDICT_CHAIN_ID={0x8, 0x3, 0x1, 0x0, 0x3}]}, @NFTA_DATA_VALUE={0xdd, 0x1, "fcc39533955e20b55fd84b0684f6c2c9483b87757da42175889f30d88b2cf6612461638e7c014fb9a92ee61bba76d27fa80b63dfc4549812e258a67f81a034083c97008ebc039958b3f76a310f1d6cb9352250b5cce993105e1cc42095835aeedf21868be5db7d6bdee23af4f9625e860b3cdd90a5fb3b039dd74d716b765bcdbb1fc55f91751d340c77b8754927eda33a5fc7cc4ca0c7ff9f0b4d911f4c77e3188166a0f6bbdff61b5d107d1eca69c69e3896d43373cb97c4edc2fd715d6bc6e8ce2d9eae05b4841192fd5a54b9b2ee4a370d526f293c0cc3"}]}, @NFTA_SET_ELEM_KEY_END={0x144, 0xa, 0x0, 0x1, [@NFTA_DATA_VALUE={0x46, 0x1, "471ba22f8eb638743813cea6caf0ad5d8c5292989f665ea91271302059b072ed5933a1cecc4db22136c9d395f5591d8642dcebb1b183629f2964d5a6924074891bb0"}, @NFTA_DATA_VALUE={0x9f, 0x1, "bbd007bb47041e4cb0e7a6d4057629712c46d166e45f67a8b42e7a58fdd059b19890bd4180d78c19728f4a73e03c5ee78c0552b2565f5e34daa994c4d03fb930c5ef394fd3f23994edd0c82281259895d1a583344b2b5d8085ac8c19ae84860c7572c0747311a16d04ebb071d84ec935d19f20cb9815c89e9034e3f8eddef3d4962d471483bb4ed3e57b7e98d72ecf90ecb00d85e82e8c34b541f7"}, @NFTA_DATA_VERDICT={0x3c, 0x2, 0x0, 0x1, [@NFTA_VERDICT_CODE={0x8, 0x1, 0x0, 0x1, 0xfffffffffffffffe}, @NFTA_VERDICT_CHAIN_ID={0x8, 0x3, 0x1, 0x0, 0x1}, @NFTA_VERDICT_CHAIN={0x9, 0x2, 'syz1\x00'}, @NFTA_VERDICT_CHAIN={0x9, 0x2, 'syz1\x00'}, @NFTA_VERDICT_CHAIN_ID={0x8, 0x3, 0x1, 0x0, 0x1}, @NFTA_VERDICT_CHAIN_ID={0x8, 0x3, 0x1, 0x0, 0x3}]}, @NFTA_DATA_VERDICT={0x1c, 0x2, 0x0, 0x1, [@NFTA_VERDICT_CHAIN_ID={0x8, 0x3, 0x1, 0x0, 0x3}, @NFTA_VERDICT_CODE={0x8, 0x1, 0x0, 0x1, 0xfffffffffffffffe}, @NFTA_VERDICT_CODE={0x8}]}]}, @NFTA_SET_ELEM_KEY_END={0xb4, 0xa, 0x0, 0x1, [@NFTA_DATA_VALUE={0xae, 0x1, "02db89a57f1147a9c4d2cb1b2ec8956977ab1b6dfc65399a2bd57f5a1fc87d8e405464b05cad8e861f877b7f4ca7cb6fb6fcc37e69ba05150a21789345aa4c2c43e2dd4ece9beeded4dbd9fb1f1d640118445dbb505db03681b5953d8a72506840520ca3242b40ae0a22d51ebe6f72540307acaa7bfc0c73a05e719d4364684380d9523d5856eee9ca958723454214b1ff8858f01b2636094734ae63e75c7b1222c8f24a3718c2c5be31"}]}, @NFTA_SET_ELEM_KEY_END={0x12c, 0xa, 0x0, 0x1, [@NFTA_DATA_VALUE={0x101, 0x1, "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"}, @NFTA_DATA_VALUE={0x23, 0x1, "4543debc0af319f45c9eb3e84a7006df023bf10e4dbc3ef1d3a078072d0592"}]}, @NFTA_SET_ELEM_KEY={0x74, 0x1, 0x0, 0x1, [@NFTA_DATA_VALUE={0x70, 0x1, "29f51fe5e43b02bb86d6923ba4f9788d53d6aff8f937a4a4d334ceb26ee287ffd8728554c3be85fd4de33e647994c5e7a43002439b98d4ac8ae9e6f4153b14fcffaefdb270e6a60778483a22e003cc9efaeb5cede2b4b064ce1b31054667b73311c90e41564dfa4e73ca8e56"}]}]}]}]}, 0xbf4}, 0x1, 0x0, 0x0, 0x4000040}, 0x40810) setsockopt$XDP_RX_RING(0xffffffffffffffff, 0x11b, 0x2, 0x0, 0x0) ioctl$ifreq_SIOCGIFINDEX_vcan(r1, 0x8933, &(0x7f00000004c0)={'vxcan1\x00', 0x0}) r6 = socket$can_j1939(0x1d, 0x2, 0x7) bind$can_j1939(r6, &(0x7f0000000280)={0x1d, r5, 0xffffffffffffffff, {0x0, 0x1}}, 0x18) r7 = socket$inet_sctp(0x2, 0x1, 0x84) getsockopt$inet_sctp_SCTP_MAX_BURST(r7, 0x84, 0xd, 0x0, &(0x7f0000000040)=0xffd2) sendmsg$NFT_BATCH(r0, &(0x7f0000000100)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x1}, 0xc, &(0x7f00000000c0)={&(0x7f0000000500)={{0x14, 0x10, 0x1, 0x0, 0x0, {0xa}}, [@NFT_MSG_NEWCHAIN={0x70, 0x3, 0xa, 0x401, 0x0, 0x0, {0x7, 0x0, 0x2}, [@NFTA_CHAIN_HOOK={0x20, 0x4, 0x0, 0x1, [@NFTA_HOOK_DEV={0x14, 0x3, 'gre0\x00'}, @NFTA_HOOK_PRIORITY={0x8, 0x2, 0x1, 0x0, 0x2ae06549}]}, @NFTA_CHAIN_TABLE={0x9, 0x1, 'syz0\x00'}, @NFTA_CHAIN_TYPE={0xa, 0x7, 'route\x00'}, @NFTA_CHAIN_USERDATA={0x19, 0xc, "9cdbaac7001614092a0d5a7bbb56711e89cf858a55"}, @NFTA_CHAIN_TYPE={0x8, 0x7, 'nat\x00'}]}, @NFT_MSG_NEWSET={0x24, 0x9, 0xa, 0x5, 0x0, 0x0, {0x1, 0x0, 0x2}, [@NFTA_SET_POLICY={0x8}, @NFTA_SET_DATA_LEN={0x8, 0x7, 0x1, 0x0, 0x3c}]}, @NFT_MSG_DELTABLE={0x20, 0x2, 0xa, 0x201, 0x0, 0x0, {0x7, 0x0, 0x3}, [@NFTA_TABLE_HANDLE={0xc, 0x4, 0x1, 0x0, 0x5}]}, @NFT_MSG_DELSETELEM={0x2c, 0xe, 0xa, 0x201, 0x0, 0x0, {0x3, 0x0, 0x4}, [@NFTA_SET_ELEM_LIST_SET_ID={0x8}, @NFTA_SET_ELEM_LIST_SET_ID={0x8, 0x4, 0x1, 0x0, 0x3}, @NFTA_SET_ELEM_LIST_SET_ID={0x8}]}, @NFT_MSG_NEWCHAIN={0x8c, 0x3, 0xa, 0x5, 0x0, 0x0, {0x5, 0x0, 0x8}, [@NFTA_CHAIN_HOOK={0x78, 0x4, 0x0, 0x1, [@NFTA_HOOK_DEV={0x14, 0x3, 'xfrm0\x00'}, @NFTA_HOOK_HOOKNUM={0x8, 0x1, 0x1, 0x0, 0x2}, @NFTA_HOOK_PRIORITY={0x8, 0x2, 0x1, 0x0, 0x7c49ba1}, @NFTA_HOOK_PRIORITY={0x8, 0x2, 0x1, 0x0, 0x2b116610}, @NFTA_HOOK_HOOKNUM={0x8}, @NFTA_HOOK_PRIORITY={0x8, 0x2, 0x1, 0x0, 0x48af7bb2}, @NFTA_HOOK_DEV={0x14, 0x3, 'geneve0\x00'}, @NFTA_HOOK_PRIORITY={0x8, 0x2, 0x1, 0x0, 0x7cd16b52}, @NFTA_HOOK_HOOKNUM={0x8}, @NFTA_HOOK_DEV={0x14, 0x3, 'veth0_to_bridge\x00'}]}]}], {0x14, 0x11, 0x1, 0x0, 0x0, {0x5}}}, 0x194}}, 0x4000) sendmsg$can_j1939(r6, &(0x7f00000001c0)={&(0x7f0000000040)={0x1d, 0x0, 0xffffffffeffffffe, {0x2, 0x0, 0x1}, 0xff}, 0x18, &(0x7f0000000180)={0x0}}, 0xaa) sendmsg$NFT_BATCH(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000480)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a3c000000060a0104000000000000000002000000100004800c000180080001006f7366000c00058008000240000000010900020073797a3200000000140020001100010000000000000000000000000a"], 0x64}}, 0x0) 3m2.268102737s ago: executing program 3 (id=11968): r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0) ioctl$TUNSETIFF(r1, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x7101}) r2 = socket(0x400000000010, 0x3, 0x0) r3 = socket$unix(0x1, 0x1, 0x0) ioctl$sock_SIOCGIFINDEX(r3, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r2, &(0x7f00000012c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000005c0)=@newqdisc={0x38, 0x24, 0x4ee4e6a52ff56541, 0x70bd2a, 0x25dfdbfb, {0x0, 0x0, 0x0, r4, {0x0, 0x1}, {0xffff, 0xffff}, {0xffff, 0x9}}, [@qdisc_kind_options=@q_multiq={{0xb}, {0x8}}]}, 0x38}, 0x1, 0x0, 0x0, 0x40004}, 0x4000) sendmsg$nl_route_sched(r2, &(0x7f0000000580)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000080)=@newtfilter={0x4c, 0x2c, 0xd27, 0x70bd2d, 0x25dfdbfc, {0x0, 0x0, 0x0, r4, {0x0, 0x2}, {}, {0x7, 0x9}}, [@filter_kind_options=@f_flower={{0xb}, {0x1c, 0x2, [@TCA_FLOWER_KEY_ETH_TYPE={0x6, 0x8, 0x8100}, @TCA_FLOWER_KEY_VLAN_ETH_TYPE={0x6, 0x19, 0x8100}, @TCA_FLOWER_KEY_CVLAN_ID={0x6, 0x4d, 0x2f2}]}}]}, 0x4c}, 0x1, 0x0, 0x0, 0x24000850}, 0x20084084) r5 = bpf$BPF_PROG_WITH_BTFID_LOAD(0x5, &(0x7f0000000180)=@bpf_lsm={0x6, 0x3, &(0x7f0000000040)=ANY=[@ANYBLOB="18000000003f000000000000000000f195"], &(0x7f00000000c0)='syzkaller\x00', 0x0, 0x0, 0x0, 0x40f00}, 0x94) sendmsg$nl_route(r0, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000080)=@newlink={0x3c, 0x10, 0x801, 0x41, 0x25dfdbfb, {0x0, 0x0, 0x0, 0x0, 0x2202e, 0xa200}, [@IFLA_XDP={0x14, 0x2b, 0x0, 0x1, [@IFLA_XDP_FLAGS={0x8, 0x3, 0x3}, @IFLA_XDP_EXPECTED_FD={0x8, 0x8, r5}]}, @IFLA_GROUP={0x8}]}, 0x3c}, 0x1, 0x0, 0x0, 0x20048050}, 0x40014) 3m1.523463472s ago: executing program 3 (id=11977): socket$inet(0x2, 0x4000000000000001, 0x0) socket$inet_sctp(0x2, 0x1, 0x84) socket$inet6_sctp(0xa, 0x1, 0x84) socket$nl_route(0x10, 0x3, 0x0) openat$nci(0xffffffffffffff9c, &(0x7f0000000080), 0x2, 0x0) r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) socket$nl_route(0x10, 0x3, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) sendmsg$inet(r2, &(0x7f0000001b00)={0x0, 0x0, 0x0, 0x0, &(0x7f0000001d80)=ANY=[@ANYBLOB="28010000000000000100000001"], 0x128}, 0x0) recvmsg$unix(r1, &(0x7f0000000000)={0x0, 0x0, 0x0, 0x0, &(0x7f0000000f40)=[@cred={{0x1c}}, @cred={{0x1c}}, @cred={{0x1c}}, @rights={{0x18, 0x1, 0x1, [0xffffffffffffffff, 0xffffffffffffffff]}}], 0x78}, 0x0) bpf$MAP_CREATE(0x0, &(0x7f0000000000)=ANY=[@ANYBLOB="0b0000001f00000002040000ff03000001000000", @ANYRES32], 0x48) r4 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='blkio.bfq.io_wait_time\x00', 0x26e1, 0x0) close(r4) socket(0x10, 0x803, 0x0) ioctl$SIOCSIFHWADDR(r4, 0x8b14, &(0x7f0000000000)={'wlan1\x00', @random="0100ffffffff"}) sendmsg$NFC_CMD_DEV_UP(r0, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000140)=ANY=[@ANYBLOB="1c000000", @ANYRES16=r3, @ANYBLOB="010028bd70000700000002000000080001"], 0x1c}, 0x1, 0x0, 0x0, 0x40089}, 0x8004) 2m46.315226505s ago: executing program 33 (id=11977): socket$inet(0x2, 0x4000000000000001, 0x0) socket$inet_sctp(0x2, 0x1, 0x84) socket$inet6_sctp(0xa, 0x1, 0x84) socket$nl_route(0x10, 0x3, 0x0) openat$nci(0xffffffffffffff9c, &(0x7f0000000080), 0x2, 0x0) r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) socket$nl_route(0x10, 0x3, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) sendmsg$inet(r2, &(0x7f0000001b00)={0x0, 0x0, 0x0, 0x0, &(0x7f0000001d80)=ANY=[@ANYBLOB="28010000000000000100000001"], 0x128}, 0x0) recvmsg$unix(r1, &(0x7f0000000000)={0x0, 0x0, 0x0, 0x0, &(0x7f0000000f40)=[@cred={{0x1c}}, @cred={{0x1c}}, @cred={{0x1c}}, @rights={{0x18, 0x1, 0x1, [0xffffffffffffffff, 0xffffffffffffffff]}}], 0x78}, 0x0) bpf$MAP_CREATE(0x0, &(0x7f0000000000)=ANY=[@ANYBLOB="0b0000001f00000002040000ff03000001000000", @ANYRES32], 0x48) r4 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='blkio.bfq.io_wait_time\x00', 0x26e1, 0x0) close(r4) socket(0x10, 0x803, 0x0) ioctl$SIOCSIFHWADDR(r4, 0x8b14, &(0x7f0000000000)={'wlan1\x00', @random="0100ffffffff"}) sendmsg$NFC_CMD_DEV_UP(r0, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000140)=ANY=[@ANYBLOB="1c000000", @ANYRES16=r3, @ANYBLOB="010028bd70000700000002000000080001"], 0x1c}, 0x1, 0x0, 0x0, 0x40089}, 0x8004) 2m42.856148666s ago: executing program 2 (id=12241): r0 = socket$nl_route(0x10, 0x3, 0x0) (async) r1 = socket$packet(0x11, 0x2, 0x300) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000080)={'bridge_slave_0\x00', 0x0}) sendmsg$nl_route(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000000c0)=ANY=[@ANYBLOB="3000000070000100000000000000000007000003", @ANYRES32=r2, @ANYBLOB="0c00018008000100000003000c0001"], 0x30}}, 0x0) (async) r3 = socket(0x10, 0x6, 0x0) r4 = openat$tun(0xffffffffffffff9c, &(0x7f0000000040), 0x1c1341, 0x0) ioctl$TUNSETIFF(r4, 0x400454ca, &(0x7f00000000c0)={'syzkaller0\x00', 0x84aebfbd6349b7f2}) (async) r5 = socket(0x400000000010, 0x3, 0x0) r6 = socket$unix(0x1, 0x5, 0x0) ioctl$sock_SIOCGIFINDEX(r6, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r5, &(0x7f00000012c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000005c0)=@newqdisc={0x38, 0x24, 0x4ee4e6a52ff56541, 0x70bd2a, 0xffffffff, {0x0, 0x0, 0x0, r7, {0x0, 0xfff1}, {0xffff, 0xffff}, {0x0, 0xf}}, [@qdisc_kind_options=@q_multiq={{0xb}, {0x8}}]}, 0x38}, 0x1, 0x0, 0x0, 0x50}, 0x0) (async) sendmsg$nl_route_sched(r5, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000002a00)=@newtfilter={0x40, 0x2c, 0xd27, 0x70bd27, 0x0, {0x0, 0x0, 0x0, r7, {0x0, 0x7}, {}, {0x7, 0xe}}, [@filter_kind_options=@f_matchall={{0xd}, {0xc, 0x2, [@TCA_MATCHALL_CLASSID={0x8, 0x1, {0x1, 0xf}}]}}]}, 0x40}, 0x1, 0x0, 0x0, 0x84}, 0x8800) ioctl$sock_SIOCGIFINDEX(0xffffffffffffffff, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) r9 = socket(0xa, 0x3, 0x3a) setsockopt$MRT6_DEL_MIF(r9, 0x29, 0xc8, 0x0, 0xc000000) (async) setsockopt$MRT6_ADD_MFC(r9, 0x29, 0xcc, &(0x7f0000000280)={{0xa, 0x0, 0x0, @loopback}, {0xa, 0x0, 0x0, @mcast2}}, 0x5c) setsockopt$MRT6_ADD_MFC_PROXY(r9, 0x29, 0xd2, &(0x7f0000000300)={{0xa, 0x0, 0x0, @initdev={0xfe, 0x88, '\x00', 0x0, 0x0}}, {0xa, 0x4e20, 0xc0, @mcast2}, 0x1, {[0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10000]}}, 0x5c) (async) r10 = socket(0xa, 0x3, 0x3a) setsockopt$MRT6_ADD_MFC(r10, 0x29, 0xcc, 0x0, 0x0) (async) setsockopt$MRT6_FLUSH(r10, 0x29, 0xd4, &(0x7f0000000240)=0x2, 0x4) r11 = socket(0x1d, 0x2, 0x6) getsockopt$sock_buf(r11, 0x1, 0x1c, 0x0, &(0x7f0000000040)) (async) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f00000012c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000a40)=@newqdisc={0x2c, 0x24, 0x4ee4e6a52ff5653f, 0x70bd2d, 0x25dfdbfc, {0x0, 0x0, 0x0, r8, {0x0, 0x9}, {0xffff, 0xffff}}, [@qdisc_kind_options=@q_drr={0x8}]}, 0x2c}, 0x1, 0x0, 0x0, 0x81}, 0x0) sendmsg$kcm(r3, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000080)=[{&(0x7f0000000000)="2e00000010008188040f80ec59acbc0413a1f8480d0000005e140602000000000e000a000f00000002800000121f", 0x2e}], 0x1}, 0x0) 2m42.424974755s ago: executing program 2 (id=12244): r0 = socket$inet6_tcp(0xa, 0x1, 0x0) r1 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r2 = syz_genetlink_get_family_id$netlbl_mgmt(&(0x7f0000000240), r1) sendmsg$NLBL_MGMT_C_ADDDEF(r1, &(0x7f0000000300)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f0000000280)={0x1c, r2, 0x1, 0x70bd25, 0x25dfdbfc, {}, [@NLBL_MGMT_A_PROTOCOL={0x8, 0x2, 0x5}]}, 0x1c}, 0x1, 0x0, 0x0, 0x40c0}, 0x4000) setsockopt$inet6_tcp_int(r0, 0x6, 0x13, &(0x7f0000000040)=0x100000001, 0x4) setsockopt$inet6_tcp_TCP_REPAIR_QUEUE(r0, 0x6, 0x14, &(0x7f0000000280)=0x1, 0x4) connect$inet6(r0, &(0x7f0000000080)={0xa, 0x0, 0x9, @ipv4={'\x00', '\xff\xff', @loopback}, 0x16}, 0x1c) r3 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) bind$bt_hci(r3, &(0x7f0000000000)={0x1f, 0xffffffffffffffff, 0x3}, 0x6) ioctl$FS_IOC_SETFLAGS(0xffffffffffffffff, 0x40086602, &(0x7f0000000040)=0x20) write$bt_hci(r3, &(0x7f0000000040)=ANY=[], 0x6) sendto$inet6(r0, &(0x7f00000001c0)="a6e2976b5c4383036d32dadd2e144d8645ca8d1b230e105614396838da83c754887e7bea2f35d4ea667817d90d532af065f2e398dd9081ea16f8b371a202a6f9e505bbc964a0d3880bf0104a0a0a2f0d311efee1637e85a0125b38f961918f99bf9c2c146e42327f178dc2b3d4936e7f7f0a79f74ba464d83ab41742d1186776dc1779b5c50ac82d0fa8f9e42074b5b6079207fb21e718080907964669be539791e3e98687ee059853", 0xfffffffffffffcc1, 0x840, 0x0, 0x56) mmap(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x43eae5a61608ca7, 0x12, r0, 0x604ab000) getsockopt$inet6_tcp_TCP_ZEROCOPY_RECEIVE(r0, 0x6, 0x23, &(0x7f0000000140)={&(0x7f0000ffc000/0x1000)=nil, 0x1000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, &(0x7f0000000000)=0x40) 2m42.21633535s ago: executing program 2 (id=12246): bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000140)={0x1e, 0x4, &(0x7f0000000000)=ANY=[@ANYBLOB="180000f6000000000000950000008b5002159d46000000000000000000000000000000cab8"], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x24}, 0x80) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0xe, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="180000000000000000000000000000008500000022000000180100002020702500000000002020207b0af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000007200000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x15, '\x00', 0x0, @fallback=0x2b, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3}, 0x94) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000023c0)={0x0, 0x4, &(0x7f0000000480)=ANY=[@ANYBLOB="1500000000"], 0x0}, 0x90) r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000300)=@base={0x12, 0x4, 0x4, 0xa}, 0x50) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0x14, &(0x7f0000000400)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b7040000000000008500000001"], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000180)='cgroup.controllers\x00', 0x275a, 0x0) close(r1) syz_init_net_socket$bt_hci(0x1f, 0x2, 0x1) connect$unix(r1, &(0x7f0000000940)=@abs={0x0, 0x0, 0x4e21}, 0x6e) bpf$BPF_GET_MAP_INFO(0xf, &(0x7f00000000c0)={0xffffffffffffffff, 0x58, &(0x7f0000000040)}, 0x10) r2 = socket$vsock_stream(0x28, 0x1, 0x0) connect$vsock_stream(r2, &(0x7f0000000100)={0x28, 0x0, 0x0, @local}, 0x10) socket$inet_mptcp(0x2, 0x1, 0x106) r3 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='memory.events\x00', 0x275a, 0x0) r4 = socket$packet(0x11, 0x3, 0x300) bind$bt_l2cap(0xffffffffffffffff, 0x0, 0x0) bpf$MAP_CREATE(0x0, 0x0, 0x48) r5 = socket(0x1d, 0x2, 0x6) getsockopt$nfc_llcp(r5, 0x6a, 0x4, 0x0, 0x200000af) setsockopt$packet_fanout(r4, 0x107, 0x12, &(0x7f00000000c0)={0x3, 0x1000}, 0x4) r6 = socket$packet(0x11, 0x2, 0x300) setsockopt$packet_fanout(r6, 0x107, 0x12, &(0x7f0000000040)={0x3, 0x1000}, 0x4) r7 = bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000480)={0x6, 0x3, &(0x7f0000000680)=ANY=[@ANYBLOB="1800000002000000000000000000000095"], &(0x7f0000000040)='syzkaller\x00'}, 0x90) r8 = socket$kcm(0x10, 0x2, 0x10) sendmsg$kcm(r8, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000480)=[{&(0x7f0000000000)="1400000010003507d25a806f8c6394f90324fc60", 0x14}], 0x1}, 0x0) recvmmsg(r8, &(0x7f0000000980)=[{{0x0, 0x0, &(0x7f0000000bc0)=[{&(0x7f0000000b00)=""/136, 0x88}, {&(0x7f0000001340)=""/4094, 0xffe}, {&(0x7f0000000040)=""/109, 0x6d}, {&(0x7f0000000200)=""/144, 0x90}], 0x4}, 0x1}, {{0x0, 0x0, 0x0}}], 0x2, 0x0, 0x0) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000140)={r7, 0x5, 0x14, 0x0, &(0x7f00000000c0)="259a53f271a76d2608004c6588a80a38667d2f15", 0x0, 0xd0e, 0x2a0, 0x0, 0x0, 0x0, 0x0, 0x2}, 0x50) write$cgroup_subtree(r3, &(0x7f0000000000)=ANY=[], 0x3261e) mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x2000001, 0x12, r3, 0x0) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000540)={0x0, 0x1f, &(0x7f00000006c0)=ANY=[@ANYBLOB="1834000004000000000000000018120000", @ANYRESOCT, @ANYBLOB="0000000000000000b703000000000000850000000c000000b70000000000000018120000", @ANYRES32=r1, @ANYBLOB="0000000000000000b703000000000000850000000c000000b7000000000000001846000005000000000000000000000018010000786c6c2500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000001000000850000000600000018110000", @ANYRES32=r1, @ANYBLOB="0000000000000000b7080000040000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b7040000020000008500000082000000"], &(0x7f0000000340)='syzkaller\x00', 0x0, 0x98, &(0x7f0000000380)=""/152, 0x41000, 0x23, '\x00', 0x0, 0x0, r1, 0x8, &(0x7f0000000440)={0x7, 0x3}, 0x8, 0x10, &(0x7f0000000480)={0x4, 0xc, 0x84f7}, 0x10, 0x0, 0x0, 0x2, &(0x7f00000004c0)=[r1, r1, r1], &(0x7f0000000500)=[{0x1, 0x5, 0x6, 0x7}, {0x3, 0x1, 0x5}], 0x10, 0x80}, 0x94) 2m41.948840692s ago: executing program 2 (id=12252): r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000040), 0x20702, 0x0) r1 = syz_init_net_socket$netrom(0x6, 0x5, 0x0) bind$netrom(r1, &(0x7f0000000000)={{0x6, @rose, 0x1}, [@netrom={0xbb, 0xbb, 0xbb, 0xbb, 0xbb, 0x0, 0x0}, @null, @remote={0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0x1}, @remote={0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0x0}, @default, @netrom={0xbb, 0xbb, 0xbb, 0xbb, 0xbb, 0x0, 0x0}, @netrom={0xbb, 0xbb, 0xbb, 0xbb, 0xbb, 0x0, 0x0}, @null]}, 0x48) (async) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000080)={'syzkaller0\x00', 0xca58c30f81b6079f}) (async) r2 = openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0x1c1842, 0x0) ioctl$TUNSETIFF(r2, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x7101}) r3 = openat$tun(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) r4 = socket(0x10, 0x80002, 0x0) (async) sendmsg$nl_route(0xffffffffffffffff, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000180)={0x0, 0x48}}, 0x400400c0) (async) sendmsg$nl_route(0xffffffffffffffff, &(0x7f00000018c0)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000540)=ANY=[@ANYBLOB="280000001e0001"], 0x28}}, 0x0) sendmmsg$alg(r4, &(0x7f00000000c0), 0x492492492492627, 0x0) (async) close(r3) socket$nl_netfilter(0x10, 0x3, 0xc) (async) ioctl$SIOCSIFHWADDR(r3, 0x8914, &(0x7f00000004c0)={'syzkaller0\x00', @link_local}) (async) write$tun(r2, &(0x7f00000002c0)=ANY=[], 0xc2) (async) write$cgroup_devices(r2, &(0x7f0000000280)=ANY=[], 0xffdd) (async) r5 = socket$nl_netfilter(0x10, 0x3, 0xc) r6 = accept4(r5, &(0x7f0000000080)=@ax25={{0x3, @netrom}, [@bcast, @null, @rose, @netrom, @rose, @bcast, @default, @rose]}, &(0x7f0000000100)=0x80, 0x0) (async) r7 = socket$nl_route(0x10, 0x3, 0x0) r8 = socket$unix(0x1, 0x5, 0x0) ioctl$sock_SIOCGIFINDEX(r8, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) ioctl$EXT4_IOC_GETSTATE(r5, 0x40046629, &(0x7f0000000900)) (async) sendmsg$nl_route_sched(r7, &(0x7f00000012c0)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000140)=@newqdisc={0x2c, 0x24, 0x4ee4e6a52ff56541, 0x70bd2a, 0xffffffff, {0x0, 0x0, 0x0, r9, {0x0, 0xfff1}, {0xffff, 0xffff}, {0xffe0}}, [@qdisc_kind_options=@q_mq={0x7}]}, 0x2c}}, 0x20040084) (async) sendmsg$nl_route_sched_retired(r6, &(0x7f00000001c0)={&(0x7f0000000140)={0x10, 0x0, 0x0, 0x4000}, 0xc, &(0x7f0000000180)={&(0x7f0000000480)=@newqdisc={0x1dc, 0x24, 0x702, 0x70bd26, 0x25dfdbfd, {0x0, 0x0, 0x0, r9, {0x10, 0xb}, {0xe, 0xfff8}, {0xf, 0xfff1}}, [@q_dsmark={{0xb}, {0x40, 0x2, [@TCA_DSMARK_SET_TC_INDEX={0x4}, @TCA_DSMARK_INDICES={0x6, 0x1, 0x24}, @TCA_DSMARK_DEFAULT_INDEX={0x6, 0x2, 0x1}, @TCA_DSMARK_INDICES={0x6, 0x1, 0x8}, @TCA_DSMARK_SET_TC_INDEX={0x4}, @TCA_DSMARK_SET_TC_INDEX={0x4}, @TCA_DSMARK_INDICES={0x6, 0x1, 0x2d}, @TCA_DSMARK_DEFAULT_INDEX={0x6, 0x2, 0x401}, @TCA_DSMARK_DEFAULT_INDEX={0x6, 0x2, 0x1473}]}}, @q_dsmark={{0xb}, {0x14, 0x2, [@TCA_DSMARK_SET_TC_INDEX={0x4}, @TCA_DSMARK_DEFAULT_INDEX={0x6, 0x2, 0x3}, @TCA_DSMARK_SET_TC_INDEX={0x4}]}}, @q_dsmark={{0xb}, {0x3c, 0x2, [@TCA_DSMARK_INDICES={0x6, 0x1, 0x20}, @TCA_DSMARK_INDICES={0x6, 0x1, 0x38}, @TCA_DSMARK_DEFAULT_INDEX={0x6, 0x2, 0x5}, @TCA_DSMARK_DEFAULT_INDEX={0x6, 0x2, 0x7}, @TCA_DSMARK_DEFAULT_INDEX={0x0, 0x2, 0xfffc}, @TCA_DSMARK_INDICES={0x6, 0x1, 0x6}, @TCA_DSMARK_SET_TC_INDEX={0x4}, @TCA_DSMARK_DEFAULT_INDEX={0x6, 0x2, 0xfffa}]}}, @q_dsmark={{0x4f}, {0x20, 0x2, [@TCA_DSMARK_DEFAULT_INDEX={0x6, 0x2, 0x7}, @TCA_DSMARK_DEFAULT_INDEX={0x0, 0x2, 0xfbff}, @TCA_DSMARK_INDICES={0x6, 0x1, 0x25}, @TCA_DSMARK_DEFAULT_INDEX={0x6, 0x2, 0x2}]}}, @q_dsmark={{0xb}, {0x14, 0x2, [@TCA_DSMARK_SET_TC_INDEX, @TCA_DSMARK_SET_TC_INDEX={0x4}, @TCA_DSMARK_SET_TC_INDEX={0x4}]}}, @q_dsmark={{0xb}, {0x20, 0x2, [@TCA_DSMARK_SET_TC_INDEX={0x4}, @TCA_DSMARK_INDICES={0xfffffffffffffda7, 0x1, 0xa}, @TCA_DSMARK_DEFAULT_INDEX={0x6, 0x2, 0xb}, @TCA_DSMARK_INDICES={0x6, 0x1, 0xe}]}}, @q_dsmark={{0xb}, {0x14, 0x2, [@TCA_DSMARK_INDICES={0x6, 0x1, 0x22}, @TCA_DSMARK_INDICES={0x6, 0x1, 0x2f}]}}, @q_dsmark={{0xb}, {0x8, 0x2, [@TCA_DSMARK_SET_TC_INDEX={0x4}]}}, @q_dsmark={{0xb}, {0xc, 0x2, [@TCA_DSMARK_INDICES={0x6, 0x1, 0x6}]}}, @q_dsmark={{0xb}, {0x34, 0x2, [@TCA_DSMARK_SET_TC_INDEX={0x4}, @TCA_DSMARK_SET_TC_INDEX, @TCA_DSMARK_INDICES={0x6, 0x1, 0x6}, @TCA_DSMARK_INDICES={0x6, 0x1, 0x2}, @TCA_DSMARK_INDICES={0x6}, @TCA_DSMARK_SET_TC_INDEX={0x4}, @TCA_DSMARK_SET_TC_INDEX]}}]}, 0x1dc}, 0x1, 0x0, 0x0, 0x40}, 0x44000) (async) sendmsg$RDMA_NLDEV_CMD_SET(r6, &(0x7f0000000a40)={&(0x7f0000000940)={0x10, 0x0, 0x0, 0xc0000020}, 0xc, &(0x7f0000000a00)={&(0x7f0000000980)=ANY=[@ANYBLOB="440000000214200029bd70004618df250900020073797e32000000000900020073797a310000000008000100000000000900020073797a32000000000800010000000000"], 0x44}, 0x1, 0x0, 0x0, 0x44}, 0x0) recvmsg(r8, &(0x7f00000008c0)={&(0x7f0000000240)=@in6={0xa, 0x0, 0x0, @mcast1}, 0x80, &(0x7f0000000780)=[{&(0x7f0000000680)=""/215, 0xd7}, {&(0x7f00000002c0)=""/66, 0x42}], 0x2, &(0x7f00000007c0)=""/240, 0xf0}, 0x2041) (async) sendmsg$NFT_BATCH(r5, &(0x7f000000c2c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000340)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a28000000000a0101000000005e1affd5020000000900010073797a300000000008000240000000032c000000030a01030000e6ff00000000020000000900010073797a30000000000900030073797a320000000014000000110001"], 0x7c}}, 0x0) (async) r10 = socket(0x10, 0x3, 0x0) sendmsg$nl_route(r10, &(0x7f0000000100)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000080)=@ipv4_getrule={0x1c, 0x22, 0x201}, 0x1c}}, 0x0) (async) sendmsg$NFT_BATCH(r5, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000003c0)={{0x14}, [@NFT_MSG_NEWRULE={0x6c, 0x6, 0xa, 0x40b, 0x0, 0x0, {0x2}, [@NFTA_RULE_EXPRESSIONS={0x40, 0x4, 0x0, 0x1, [{0x3c, 0x1, 0x0, 0x1, @cmp={{0x8}, @val={0x30, 0x2, 0x0, 0x1, [@NFTA_CMP_SREG={0x8, 0x1, 0x1, 0x0, 0x8}, @NFTA_CMP_OP={0x8, 0x2, 0x1, 0x0, 0x1}, @NFTA_CMP_DATA={0x1c, 0x3, 0x0, 0x1, [@NFTA_DATA_VALUE={0x15, 0x1, "3f25378bcaaee148996b36d592161073a2"}]}]}}}]}, @NFTA_RULE_TABLE={0x9, 0x1, 'syz0\x00'}, @NFTA_RULE_CHAIN={0x9, 0x2, 'syz2\x00'}]}], {0x14}}, 0x94}}, 0x0) 2m38.936521579s ago: executing program 2 (id=12262): r0 = socket$rds(0x15, 0x5, 0x0) bind$rds(r0, &(0x7f0000000040)={0x2, 0x4e21, @local}, 0x10) (async) sendmsg$inet(r0, &(0x7f0000000480)={&(0x7f0000000000)={0x2, 0x4e22, @initdev={0xac, 0x1e, 0x1, 0x0}}, 0x10, 0x0}, 0x0) (async) r1 = socket(0x2000000015, 0x80005, 0x0) bind$inet6(r1, &(0x7f0000000180)={0xa, 0x0, 0x6, @empty, 0x3}, 0x1c) (async) r2 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r2, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000240)=ANY=[@ANYBLOB="140000001000010000000000000000000500000a28000000000a030000000000000000000a00000708000240000000020900010073797a31000000002c000000030a010100000000000000000a0000070900010073797a31000000000900030073797a320000000014000000110001"], 0x7c}, 0x1, 0x0, 0x0, 0x4000}, 0x0) (async) sendmsg$NFT_BATCH(r2, &(0x7f0000009b40)={0x0, 0x0, &(0x7f0000009b00)={&(0x7f0000002100)=ANY=[@ANYBLOB="140000001000010000000000000000000500000a5c000000090a010400000000000000000a0000040900010073797a310000000008000540000000040900020073797a310000000008000a40fffffffc200011800e000100636f6e6e6c696d69740000000c00028008000140fffff27414000000110001"], 0x84}, 0x1, 0x0, 0x0, 0x4000850}, 0x40) (async) sendmsg$NFT_MSG_GETSETELEM(r2, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000009b80)=ANY=[@ANYBLOB="3c0000000d0a010800000000000000000a0000010900020073797a31000000000900010073797a3100000000100003"], 0x3c}, 0x1, 0x0, 0x0, 0x24000801}, 0x8000) (async) sendmsg$rds(r0, &(0x7f0000000140)={&(0x7f0000000240)={0x2, 0x4e20, @initdev={0xac, 0x1e, 0xff, 0x0}}, 0x10, 0x0, 0x0, 0x0, 0x0, 0x40040}, 0x0) (async) socketpair(0x21, 0x0, 0x7f, &(0x7f00000002c0)={0xffffffffffffffff, 0xffffffffffffffff}) sendmsg$can_raw(r4, &(0x7f0000000200)={&(0x7f0000000100), 0x10, &(0x7f00000001c0)={&(0x7f0000000180)=@can={{0x1, 0x0, 0x1}, 0x5, 0x0, 0x0, 0x0, "4a8d60ce2daa3ab4"}, 0x10}}, 0x80) (async) ioctl$AUTOFS_IOC_FAIL(r3, 0x9361, 0x8000000000000000) 2m38.883453486s ago: executing program 2 (id=12264): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r0, &(0x7f000000c2c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f00000008c0)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a28000000000a0101000000005e1affd5020000000900010073797a300000000008000240000000032c000000030a01030000e6ff00000000020000000900010073797a30000000000900030073797a320000000014000000110001"], 0x7c}}, 0x0) sendmsg$NFT_BATCH(r0, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000300)={{0x14}, [@NFT_MSG_NEWRULE={0x78, 0x6, 0xa, 0x40b, 0x0, 0x0, {0x2}, [@NFTA_RULE_EXPRESSIONS={0x4c, 0x4, 0x0, 0x1, [{0x24, 0x1, 0x0, 0x1, @socket={{0xb}, @val={0x14, 0x2, 0x0, 0x1, [@NFTA_SOCKET_DREG={0x8, 0x2, 0x1, 0x0, 0x3}, @NFTA_SOCKET_KEY={0x8, 0x1, 0x1, 0x0, 0x2}]}}}, {0x24, 0x1, 0x0, 0x1, @queue={{0xa}, @val={0x14, 0x2, 0x0, 0x1, [@NFTA_QUEUE_SREG_QNUM={0x8, 0x4, 0x1, 0x0, 0x10}, @NFTA_QUEUE_FLAGS={0x6, 0x3, 0x1, 0x0, 0x2}]}}}]}, @NFTA_RULE_TABLE={0x9, 0x1, 'syz0\x00'}, @NFTA_RULE_CHAIN={0x9, 0x2, 'syz2\x00'}]}], {0x14}}, 0xa0}}, 0x0) openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000000c0)='memory.events\x00', 0x26e1, 0x3a0ffffffff) r1 = socket$nl_generic(0x10, 0x3, 0x10) bpf$PROG_LOAD(0x5, &(0x7f00000017c0)={0x1, 0xe, &(0x7f0000001880)=ANY=[@ANYBLOB="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"], &(0x7f00000001c0)='GPL\x00', 0x7, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0x0, 0x10, &(0x7f0000000000), 0xfffffffffffffd64}, 0x48) sendmsg$nl_generic(r1, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000001ac0)={&(0x7f0000000240)=ANY=[@ANYBLOB="140000002600010026bdf000fcdbdf2507080000"], 0x14}, 0x1, 0x0, 0x0, 0x200480c9}, 0x20048000) openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='memory.events\x00', 0x275a, 0x0) 2m23.806852177s ago: executing program 34 (id=12264): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r0, &(0x7f000000c2c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f00000008c0)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a28000000000a0101000000005e1affd5020000000900010073797a300000000008000240000000032c000000030a01030000e6ff00000000020000000900010073797a30000000000900030073797a320000000014000000110001"], 0x7c}}, 0x0) sendmsg$NFT_BATCH(r0, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000300)={{0x14}, [@NFT_MSG_NEWRULE={0x78, 0x6, 0xa, 0x40b, 0x0, 0x0, {0x2}, [@NFTA_RULE_EXPRESSIONS={0x4c, 0x4, 0x0, 0x1, [{0x24, 0x1, 0x0, 0x1, @socket={{0xb}, @val={0x14, 0x2, 0x0, 0x1, [@NFTA_SOCKET_DREG={0x8, 0x2, 0x1, 0x0, 0x3}, @NFTA_SOCKET_KEY={0x8, 0x1, 0x1, 0x0, 0x2}]}}}, {0x24, 0x1, 0x0, 0x1, @queue={{0xa}, @val={0x14, 0x2, 0x0, 0x1, [@NFTA_QUEUE_SREG_QNUM={0x8, 0x4, 0x1, 0x0, 0x10}, @NFTA_QUEUE_FLAGS={0x6, 0x3, 0x1, 0x0, 0x2}]}}}]}, @NFTA_RULE_TABLE={0x9, 0x1, 'syz0\x00'}, @NFTA_RULE_CHAIN={0x9, 0x2, 'syz2\x00'}]}], {0x14}}, 0xa0}}, 0x0) openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000000c0)='memory.events\x00', 0x26e1, 0x3a0ffffffff) r1 = socket$nl_generic(0x10, 0x3, 0x10) bpf$PROG_LOAD(0x5, &(0x7f00000017c0)={0x1, 0xe, &(0x7f0000001880)=ANY=[@ANYBLOB="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"], &(0x7f00000001c0)='GPL\x00', 0x7, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0x0, 0x10, &(0x7f0000000000), 0xfffffffffffffd64}, 0x48) sendmsg$nl_generic(r1, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000001ac0)={&(0x7f0000000240)=ANY=[@ANYBLOB="140000002600010026bdf000fcdbdf2507080000"], 0x14}, 0x1, 0x0, 0x0, 0x200480c9}, 0x20048000) openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='memory.events\x00', 0x275a, 0x0) 2.027053545s ago: executing program 0 (id=13477): socket$inet6_sctp(0xa, 0x5, 0x84) (async) r0 = socket$inet6_sctp(0xa, 0x5, 0x84) r1 = socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$nl80211(&(0x7f0000001840), r1) (async) r2 = syz_genetlink_get_family_id$nl80211(&(0x7f0000001840), r1) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f0000001880)={'wlan0\x00', 0x0}) socket$nl_netfilter(0x10, 0x3, 0xc) (async) r4 = socket$nl_netfilter(0x10, 0x3, 0xc) bpf$MAP_CREATE(0x0, 0x0, 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000017c0)={0x1, 0xe, &(0x7f0000000800)=ANY=[@ANYBLOB="b700000081000000bfa30000000000000703000000feffff720af0fff8ffffff71a4f0ff0000000071100000000000001d400500000000004704000001ed00000f030000000000001d44000000000000620a5cfe000000007203000000000000b5000000000000009500000000000000023bc065b58111c6dfa041b63af4a3912435f1a864a710aad58db6a693002e7f"], 0x0}, 0x94) r5 = bpf$MAP_CREATE(0x0, &(0x7f0000000440)=@base={0x9, 0x1b, 0x8, 0x40, 0x42, 0x1, 0x99}, 0x50) bpf$MAP_UPDATE_BATCH(0x1a, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000100), &(0x7f0000000580), 0x1000, r5}, 0x38) bpf$MAP_DELETE_ELEM(0x3, &(0x7f0000000bc0)={r5, &(0x7f0000000880)}, 0x20) sendmsg$NFNL_MSG_ACCT_DEL(r4, &(0x7f0000000640)={0x0, 0x0, &(0x7f0000000600)={&(0x7f0000000a80)={0x20, 0x3, 0x7, 0x201, 0x0, 0x0, {0x5, 0x0, 0xfffc}, [@NFACCT_NAME={0x9, 0x1, 'syz1\x00'}]}, 0x20}, 0x1, 0x0, 0x0, 0x40}, 0x0) (async) sendmsg$NFNL_MSG_ACCT_DEL(r4, &(0x7f0000000640)={0x0, 0x0, &(0x7f0000000600)={&(0x7f0000000a80)={0x20, 0x3, 0x7, 0x201, 0x0, 0x0, {0x5, 0x0, 0xfffc}, [@NFACCT_NAME={0x9, 0x1, 'syz1\x00'}]}, 0x20}, 0x1, 0x0, 0x0, 0x40}, 0x0) sendmsg$NL80211_CMD_SET_TID_CONFIG(r1, &(0x7f0000001a00)={0x0, 0x0, &(0x7f00000019c0)={&(0x7f00000018c0)={0x34, r2, 0x27594df03360d53b, 0x70bd25, 0x25dfdbfd, {{}, {@val={0x8, 0x3, r3}, @void}}, [@NL80211_ATTR_TID_CONFIG={0x18, 0x11d, 0x0, 0x1, [{0x14, 0x0, 0x0, 0x1, [@NL80211_TID_CONFIG_ATTR_TIDS={0x6, 0x5, 0x28}, @NL80211_TID_CONFIG_ATTR_RETRY_SHORT={0x5, 0x7, 0x96}]}]}]}, 0x34}, 0x1, 0x0, 0x0, 0x44040015}, 0x20000000) 1.872449929s ago: executing program 0 (id=13480): r0 = socket$nl_sock_diag(0x10, 0x3, 0x4) r1 = accept4(r0, &(0x7f00000000c0)=@alg, &(0x7f0000000000)=0x80, 0x80800) ioctl$IMSETDEVNAME(r1, 0x80184947, &(0x7f0000000140)={0x3, 'syz0\x00'}) sendmsg$SOCK_DIAG_BY_FAMILY(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000003c0)={0x14, 0x14, 0x7a3cc0df0763377f, 0x0, 0x0, {0x10, 0x24}}, 0x14}}, 0x0) r2 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000340)='memory.events.local\x00', 0x26e1, 0x0) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000180)={r2, 0x2000000, 0xd, 0x0, &(0x7f0000000200)="63eced8e46dc3f0adf33c9f7b9", 0x0, 0x3800, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2}, 0xb2) r3 = bpf$MAP_CREATE(0x0, &(0x7f0000000200)=ANY=[@ANYBLOB="220000000400000010000000"], 0x48) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000540)={{r3}, &(0x7f00000004c0), &(0x7f0000000500)=r2}, 0x20) bpf$BPF_MAP_CONST_STR_FREEZE(0x16, &(0x7f00000000c0)={r3, 0xffffffffffffffff}, 0x4) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000580)={0x11, 0x10, &(0x7f0000000100)=ANY=[@ANYBLOB="18000000000000000000000000000000b7080000000000007b8af8ff00000000b7080000643200007b8af0ff00000000bfa100000000000007010000f8ffffffbfa400000000000007041af64090aac40d6600000800000018230000", @ANYRES32=r4, @ANYBLOB="0000000000000000b70500000800000085000000a500000095"], &(0x7f0000000080)='GPL\x00', 0x5, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0xfffffffe}, 0x94) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000a40)={0x2, 0x2, &(0x7f0000000180)=@raw=[@call={0x85, 0x0, 0x0, 0xae}, @exit], &(0x7f0000000840)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2a}, 0x94) getsockopt$inet_sctp6_SCTP_ASSOCINFO(r1, 0x84, 0x1, &(0x7f00000001c0)={0x0, 0x0, 0xffff, 0xf, 0x9e33, 0x3ff}, &(0x7f0000000200)=0x14) getsockopt$inet_sctp6_SCTP_RTOINFO(r1, 0x84, 0x0, &(0x7f0000000240)={r5, 0x4, 0x58, 0xbb7}, &(0x7f0000000280)=0x10) 1.790069899s ago: executing program 0 (id=13481): r0 = syz_init_net_socket$bt_l2cap(0x1f, 0x1, 0x3) bind$bt_l2cap(r0, &(0x7f0000000280)={0x1f, 0xfffe}, 0xffffffc6) listen(r0, 0x0) r1 = accept4(r0, 0x0, 0x0, 0x80000) r2 = bpf$MAP_CREATE(0x0, &(0x7f0000000080)=ANY=[], 0x48) ioctl$ifreq_SIOCGIFINDEX_wireguard(r0, 0x8933, &(0x7f0000000380)={'wg1\x00', 0x0}) bpf$BPF_GET_BTF_INFO(0xf, &(0x7f0000000880)={0xffffffffffffffff, 0x20, &(0x7f0000000700)={&(0x7f00000005c0)=""/155, 0x9b, 0x0, &(0x7f0000000780)=""/195, 0xc3}}, 0x10) r5 = bpf$BPF_BTF_LOAD(0x12, &(0x7f00000000c0)={&(0x7f00000008c0)={{0xeb9f, 0x1, 0x0, 0x18, 0x0, 0x80, 0x80, 0x4, [@decl_tag={0xf, 0x0, 0x0, 0x11, 0x3, 0x3}, @struct={0x0, 0x6, 0x0, 0x4, 0x0, 0xa75, [{0x1, 0x3, 0x8}, {0x0, 0x3, 0x8}, {0xd, 0x3, 0x31f}, {0xa, 0x4, 0x5}, {0x1, 0x3, 0x5}, {0x8, 0x3, 0x25000000}]}, @volatile={0xd, 0x0, 0x0, 0x9, 0x1}, @var={0x9, 0x0, 0x0, 0xe, 0x2, 0x1}]}, {0x0, [0x5f, 0x61]}}, &(0x7f0000000980)=""/239, 0x9c, 0xef, 0x1, 0x9, 0x10000}, 0x28) r6 = bpf$PROG_LOAD(0x5, &(0x7f00000002c0)={0x3, 0xc, &(0x7f0000000080)=ANY=[@ANYRES32=r1], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x40f00, 0x60, '\x00', r3, @sched_cls=0x2e, r5, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, r4, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000440)={0x5, 0xa, &(0x7f0000000680)=ANY=[@ANYBLOB="18080000000000000000000000000000851000000600000018100000", @ANYRES32=r2, @ANYBLOB="00000000000000004e800000000000001800000000000000000000000000000095000000000000009500000000000000"], &(0x7f0000000000)='GPL\x00', 0x4, 0xfe, &(0x7f00000004c0)=""/254}, 0x80) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000240)={{r2}, &(0x7f0000000180), &(0x7f00000001c0)=r6}, 0x20) r7 = syz_init_net_socket$802154_dgram(0x24, 0x2, 0x0) bpf$PROG_LOAD_XDP(0x5, &(0x7f00000003c0)={0x12, 0x4, &(0x7f0000000740)=@framed={{0x18, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x6}, [@ldst={0x1, 0x0, 0x3, 0x0, 0x1, 0x4}]}, &(0x7f0000000040)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0xa}, 0x90) r8 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a) setsockopt$inet6_buf(r8, 0x29, 0xcd, &(0x7f0000000100)="339fa6d300d77add2c233966072f85aec8a8a81753269416add12259134f696b9b19882c69b53053359ce3b4a9eb3db323e7b02d68a254cb13ff5f3db7ad1d97861dd1800935b0f95a3559b81492f09e15aafd6ea57db0c745cfb0f4", 0x5c) bind$802154_dgram(r7, &(0x7f0000000000)={0x24, @long={0x3, 0x3, {0xaaaaaaaaaaaa0102}}}, 0x14) connect$802154_dgram(r7, &(0x7f0000000040)={0x24, @none={0x0, 0x1}}, 0x14) sendmsg$802154_dgram(r7, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000140)={0x0}}, 0x4010) syz_emit_ethernet(0x36, &(0x7f0000001800)={@link_local, @random="50a245d5cde0", @void, {@ipv4={0x800, @icmp={{0x5, 0x4, 0x0, 0x0, 0x28, 0x68, 0x0, 0x0, 0x2, 0x0, @private=0xa010101, @broadcast}, @timestamp_reply={0x11, 0xe0, 0x0, 0x0, 0x0, 0x62ea0000}}}}}, 0x0) 1.491607019s ago: executing program 7 (id=13484): r0 = socket$nl_route(0x10, 0x3, 0x0) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000640)={0xe, 0x4, &(0x7f0000000040)=ANY=[@ANYBLOB="1800000000000000000000000000000071187f000000000095"], &(0x7f0000000000)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x24}, 0x90) (async, rerun: 32) sendmsg$nl_route(0xffffffffffffffff, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000480)=ANY=[], 0x18}}, 0x20004000) (async, rerun: 32) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000100)=ANY=[@ANYBLOB="4800000010000d0428bd7000fcdbff2500008000", @ANYRES32=0x0, @ANYBLOB="1000000000000000280012800b0001006272696467650000180002"], 0x48}, 0x1, 0x0, 0x0, 0x10}, 0x0) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000140)=@newtaction={0x70, 0x30, 0x0, 0x0, 0x0, {0x9}, [{0x5c, 0x1, [@m_sample={0x58, 0x0, 0x0, 0x0, {{0xb}, {0x2c, 0x2, 0x0, 0x1, [@TCA_SAMPLE_PSAMPLE_GROUP={0x8}, @TCA_SAMPLE_RATE={0x8}, @TCA_SAMPLE_PARMS={0x18, 0x2, {0x0, 0x0, 0x0, 0x0, 0x80000}}]}, {0x4}, {0xc, 0x7, {0x1}}, {0x1, 0x8, {0x4}}}}]}]}, 0x70}, 0x1, 0x0, 0x0, 0x4008085}, 0x20040000) r1 = socket$nl_route(0x10, 0x3, 0x0) (async) r2 = socket$nl_route(0x10, 0x3, 0x0) (async, rerun: 64) r3 = socket$nl_route(0x10, 0x3, 0x0) (rerun: 64) sendmsg$nl_route(r3, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000140)=ANY=[@ANYBLOB="9000000010000305000000000000000000000700", @ANYRES32=0x0, @ANYBLOB="996e06004d4c0700540012800800010068737200480002800500030008000000050003000500000005000300fd00000008000200", @ANYRES32=r1, @ANYBLOB="08000100", @ANYRES32=r2], 0x90}}, 0x0) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000100)=ANY=[@ANYBLOB="500000001000010425bbe5ad600027842cf52300", @ANYRES32=0x0, @ANYBLOB="0300000000000000280012800a00010076786c616e00"], 0x50}, 0x1, 0x0, 0x0, 0x13d33d22cca65c15}, 0x20008091) r4 = socket$netlink(0x10, 0x3, 0x0) sendmmsg(r4, &(0x7f00000002c0), 0x40000000000009f, 0x0) (async, rerun: 32) sendmsg$nl_route(r0, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000780)={&(0x7f0000000000)=ANY=[@ANYBLOB="300000001800dd8d0000800000000000020000e03c5f0000000006001500040000000c0016800800040000000000"], 0x30}}, 0x0) (rerun: 32) r5 = socket$alg(0x26, 0x5, 0x0) bind$alg(r5, &(0x7f0000000000)={0x26, 'aead\x00', 0x0, 0x0, 'aegis128-generic\x00'}, 0x58) (async) setsockopt$ALG_SET_KEY(r5, 0x117, 0x1, &(0x7f0000000140)="2c385aa3d49100dc6626c892b6bc436a", 0x10) (async) r6 = accept4(r5, 0x0, 0x0, 0x0) sendmsg$nl_route_sched_retired(r6, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000012100)=@newqdisc={0x24}, 0x24}}, 0x0) (async) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0xd, 0x0, 0x0, 0x0}, 0x94) r7 = socket$alg(0x26, 0x5, 0x0) bind$alg(r7, &(0x7f0000000000)={0x26, 'aead\x00', 0x0, 0x0, 'aegis128-aesni\x00'}, 0x58) setsockopt$ALG_SET_KEY(r7, 0x117, 0x1, &(0x7f0000000140)="2c385aa3d49100dc6626c892b6bc436a", 0x10) (async) r8 = accept4(r7, 0x0, 0x0, 0x0) sendmsg$alg(r8, &(0x7f0000000100)={0x0, 0x0, 0x0, 0x0, &(0x7f0000000080)=[@assoc={0x18, 0x117, 0x4, 0x9}], 0x18}, 0x0) (async) sendmsg$nl_route_sched_retired(r8, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000012100)=@newqdisc={0x24}, 0x24}, 0x1, 0x0, 0x0, 0x10}, 0x0) (async) syz_emit_ethernet(0x3e, &(0x7f00000003c0)=ANY=[@ANYBLOB="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"], 0x0) r9 = bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000300)={0x6, 0x3, &(0x7f00000000c0)=ANY=[@ANYBLOB="1800000002000000000000000008082295"], &(0x7f00000002c0)='GPL\x00'}, 0x94) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000240)={r9, 0x5, 0xb68, 0xfffffffffffffeb9, &(0x7f0000000000)="ff", 0x0, 0x149c, 0x503, 0x0, 0x0, 0x0, 0x0, 0x2, 0xffff80fe, 0xe}, 0x48) r10 = syz_init_net_socket$x25(0x9, 0x5, 0x0) ioctl$SIOCX25SCUDMATCHLEN(r10, 0x89e7, 0x0) 1.47539698s ago: executing program 0 (id=13485): r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = socket(0x2, 0x80805, 0x0) getsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX3(r1, 0x84, 0x6f, &(0x7f0000000000)={0x0, 0x10, &(0x7f00000010c0)=[@in={0x2, 0x0, @initdev={0xac, 0x1e, 0x0, 0x0}}]}, &(0x7f0000000180)=0x10) sendmsg$kcm(0xffffffffffffffff, &(0x7f0000000000)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8100000}, 0x0) getsockopt$bt_hci(r1, 0x84, 0x6d, &(0x7f0000000000)=""/4102, &(0x7f0000001040)=0x1006) r2 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000380), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f00000001c0)={'wlan0\x00', 0x0}) sendmsg$NL80211_CMD_FRAME(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000fc0)={&(0x7f0000000600)=ANY=[@ANYBLOB='@\x00\x00\x00', @ANYRES16=r2, @ANYBLOB="010000000000000000000200000008000300", @ANYRES32=r3, @ANYBLOB="0c00990000000000000000000800a000ea15000008009f0003000000080026000816"], 0x40}}, 0x0) r4 = socket$kcm(0x10, 0x2, 0x10) sendmsg$kcm(r4, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000480)=[{&(0x7f0000000000)="1400000010003507d25a806f8c6394f90324fc60", 0x14}], 0x1}, 0x0) recvmmsg(r4, &(0x7f0000002a80)=[{{0x0, 0x0, &(0x7f0000000080)=[{&(0x7f0000001100)=""/158, 0x98}, {&(0x7f0000001340)=""/4091, 0x8f4d3d90ff03756e}, {&(0x7f0000000380)=""/121, 0x79}, {&(0x7f00000011c0)=""/140, 0x90}], 0x4}, 0x1}, {{0x0, 0x0, 0x0}}, {{&(0x7f0000001280)=@rxrpc=@in4={0x21, 0x0, 0x2, 0x0, {0x2, 0x0, @multicast2}}, 0x0, &(0x7f0000002540)=[{&(0x7f0000001080)=""/56}, {&(0x7f0000002340)=""/88}, {&(0x7f0000001300)=""/25}, {&(0x7f00000023c0)=""/162}, {&(0x7f0000002480)=""/77}, {&(0x7f0000002500)}], 0x0, &(0x7f0000002bc0)=""/83}, 0x36}, {{&(0x7f0000002640)=@hci, 0x0, &(0x7f0000002800)=[{&(0x7f00000026c0)=""/221}, {&(0x7f00000027c0)=""/17}], 0x0, &(0x7f0000002840)=""/137}, 0x7}, {{&(0x7f0000002900)=@rxrpc=@in4={0x21, 0x0, 0x2, 0x0, {0x2, 0x0, @empty}}, 0x0, &(0x7f0000002a40)=[{&(0x7f0000002980)=""/138}]}, 0x2a}], 0x2, 0x2001, 0x0) 1.378698695s ago: executing program 5 (id=13487): r0 = socket$packet(0x11, 0x2, 0x300) setsockopt$packet_int(r0, 0x107, 0x17, &(0x7f0000000040)=0x9, 0x4) r1 = socket(0x10, 0x803, 0x0) sendmsg$nl_route_sched(r1, &(0x7f0000000380)={0x0, 0x0, &(0x7f0000000340)={&(0x7f0000000400)=@getchain={0x24, 0x66, 0x0, 0x0, 0x2000}, 0x24}}, 0x0) getsockname$packet(r1, &(0x7f0000000740)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000900)=0x14) syz_emit_ethernet(0x56, &(0x7f0000000940)={@remote, @broadcast, @void, {@canfd={0xd, {{0x3, 0x0, 0x1}, 0x9, 0x2, 0x0, 0x0, "57c883f4c5bd43e35ead97d92a3834e873466b21097d37b40d40478f456bd3ef3821e8f16b569b3e0b8fe436b8c0f10b759f43c44b59c7de713fbec24e7fdea5"}}}}, &(0x7f00000009c0)={0x0, 0x4, [0x214, 0x70c, 0xbc, 0x3dd]}) sendmsg$IPCTNL_MSG_CT_GET_CTRZERO(r1, &(0x7f0000000180)={&(0x7f0000000100)={0x10, 0x0, 0x0, 0x20000}, 0xc, &(0x7f0000000140)={&(0x7f0000000680)={0x1e0, 0x3, 0x1, 0x201, 0x0, 0x0, {0xf, 0x0, 0x2}, [@CTA_TUPLE_ORIG={0x38, 0x1, 0x0, 0x1, [@CTA_TUPLE_IP={0x2c, 0x1, 0x0, 0x1, @ipv6={{0x14, 0x3, @private2={0xfc, 0x2, '\x00', 0x1}}, {0x14, 0x4, @remote}}}, @CTA_TUPLE_ZONE={0x6, 0x3, 0x1, 0x0, 0x3}]}, @CTA_STATUS={0x8, 0x3, 0x1, 0x0, 0x1}, @CTA_TUPLE_MASTER={0x70, 0xe, 0x0, 0x1, [@CTA_TUPLE_PROTO={0xc, 0x2, 0x0, 0x1, {0x5, 0x1, 0x1}}, @CTA_TUPLE_PROTO={0xc, 0x2, 0x0, 0x1, {0x5, 0x1, 0x2f}}, @CTA_TUPLE_ZONE={0x6, 0x3, 0x1, 0x0, 0x3}, @CTA_TUPLE_ZONE={0x6, 0x3, 0x1, 0x0, 0x3}, @CTA_TUPLE_ZONE={0x6, 0x3, 0x1, 0x0, 0x4}, @CTA_TUPLE_PROTO={0xc, 0x2, 0x0, 0x1, {0x5, 0x1, 0x84}}, @CTA_TUPLE_ZONE={0x6, 0x3, 0x1, 0x0, 0x4}, @CTA_TUPLE_IP={0x14, 0x1, 0x0, 0x1, @ipv4={{0x8, 0x1, @dev={0xac, 0x14, 0x14, 0x23}}, {0x8, 0x2, @empty}}}, @CTA_TUPLE_PROTO={0xc, 0x2, 0x0, 0x1, {0x5, 0x1, 0x84}}, @CTA_TUPLE_ZONE={0x6, 0x3, 0x1, 0x0, 0x1}]}, @CTA_TUPLE_ORIG={0x18, 0x1, 0x0, 0x1, [@CTA_TUPLE_IP={0x14, 0x1, 0x0, 0x1, @ipv4={{0x8, 0x1, @loopback}, {0x8, 0x2, @broadcast}}}]}, @CTA_LABELS_MASK={0xc, 0x17, [0xa, 0x5]}, @CTA_TUPLE_ORIG={0x3c, 0x1, 0x0, 0x1, [@CTA_TUPLE_PROTO={0xc, 0x2, 0x0, 0x1, {0x5, 0x1, 0x11}}, @CTA_TUPLE_IP={0x14, 0x1, 0x0, 0x1, @ipv4={{0x8, 0x1, @rand_addr=0x64010100}, {0x8, 0x2, @initdev={0xac, 0x1e, 0x1, 0x0}}}}, @CTA_TUPLE_ZONE={0x6, 0x3, 0x1, 0x0, 0x3}, @CTA_TUPLE_ZONE={0x6}, @CTA_TUPLE_ZONE={0x6}]}, @CTA_LABELS={0x10, 0x16, 0x1, 0x0, [0x7ff, 0x401, 0x1]}, @CTA_TUPLE_MASTER={0x4c, 0xe, 0x0, 0x1, [@CTA_TUPLE_PROTO={0xc, 0x2, 0x0, 0x1, {0x5, 0x1, 0x11}}, @CTA_TUPLE_IP={0x2c, 0x1, 0x0, 0x1, @ipv6={{0x14, 0x3, @private1={0xfc, 0x1, '\x00', 0x1}}, {0x14, 0x4, @mcast2}}}, @CTA_TUPLE_ZONE={0x6, 0x3, 0x1, 0x0, 0x2}, @CTA_TUPLE_ZONE={0x6, 0x3, 0x1, 0x0, 0x1}]}, @CTA_MARK_MASK={0x8}, @CTA_NAT_DST={0x58, 0xd, 0x0, 0x1, [@CTA_NAT_V4_MINIP={0x8, 0x1, @multicast1}, @CTA_NAT_PROTO={0x1c, 0x3, 0x0, 0x1, [@CTA_PROTONAT_PORT_MIN={0x6, 0x1, 0x4e20}, @CTA_PROTONAT_PORT_MIN={0x6, 0x1, 0x4e24}, @CTA_PROTONAT_PORT_MIN={0x6, 0x1, 0x4e22}]}, @CTA_NAT_PROTO={0x14, 0x3, 0x0, 0x1, [@CTA_PROTONAT_PORT_MAX={0x6, 0x2, 0x4e22}, @CTA_PROTONAT_PORT_MIN={0x6, 0x1, 0x4e22}]}, @CTA_NAT_V6_MAXIP={0x14, 0x5, @local}, @CTA_NAT_V4_MAXIP={0x8, 0x2, @multicast1}]}]}, 0x1e0}, 0x1, 0x0, 0x0, 0x1}, 0x200008c0) r2 = socket$netlink(0x10, 0x3, 0x0) r3 = socket(0x10, 0x803, 0x0) sendmsg$NL80211_CMD_CRIT_PROTOCOL_START(r3, &(0x7f0000000580)={0x0, 0x0, &(0x7f0000000540)={0x0, 0x1c}}, 0x0) getsockname$packet(r3, &(0x7f0000000600)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000080)=0x14) sendmsg$nl_route(r2, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000640)=ANY=[@ANYBLOB="3c0000001000850600000000ff6122314a000800", @ANYRES32=r4, @ANYBLOB="f5ff0f00252155b21c0012000c000100626f6e64000000000c0002000800010001"], 0x3c}}, 0x40000) r5 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r5, 0x8933, &(0x7f0000000040)={'ip6gretap0\x00', 0x0}) sendmsg$nl_route(r5, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000000c0)=@newlink={0x40, 0x10, 0x1, 0x0, 0x2, {0x0, 0x0, 0x0, r6, 0x18f40, 0x22008}, [@IFLA_LINKINFO={0x20, 0x12, 0x0, 0x1, @ip6gretap={{0xe}, {0xc, 0x2, 0x0, 0x1, [@IFLA_GRE_ENCAP_FLAGS={0x6, 0xf, 0x2}]}}}]}, 0x40}}, 0x0) sendmsg$nl_route(r2, &(0x7f0000000240)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000340)=@ipv4_newaddr={0x20, 0x14, 0x1, 0x70bd28, 0x25dfdbfc, {0x2, 0x20, 0x1, 0xc8, r4}, [@IFA_LOCAL={0x8, 0x2, @local}]}, 0x20}}, 0x40000c0) r7 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r8 = syz_genetlink_get_family_id$nfc(&(0x7f00000004c0), r7) sendmsg$nl_route(r3, &(0x7f0000000280)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000380)=@newlink={0x40, 0x10, 0x503, 0x70bd2a, 0x700, {0x0, 0x0, 0x0, 0x0, 0x0, 0x3806}, [@IFLA_LINKINFO={0x18, 0x12, 0x0, 0x1, @vti={{0x8}, {0xc, 0x2, 0x0, 0x1, [@IFLA_VTI_REMOTE={0x8, 0x5, @private=0xa010102}]}}}, @IFLA_MASTER={0x8, 0xa, r4}]}, 0x40}}, 0x440b0) r9 = openat$nci(0xffffffffffffff9c, &(0x7f0000000080), 0x2, 0x0) ioctl$IOCTL_GET_NCIDEV_IDX(r9, 0x0, &(0x7f0000000000)=0x0) r11 = syz_init_net_socket$nfc_llcp(0x27, 0x3, 0x1) bind$nfc_llcp(r11, &(0x7f0000000140)={0x27, r10, 0x1, 0x3, 0x1, 0x8, "78f2ebf955259167998611dbf4cd5eacffc1248a431b2e630eb3484cc0f08cd6f302d61e6443937bb2c9fdf08765a7446e8d362146518347155c6b4ec50365", 0x8}, 0x60) sendmsg$NFC_CMD_DEP_LINK_UP(r7, &(0x7f00000008c0)={&(0x7f0000000500)={0x10, 0x0, 0x0, 0x80005}, 0xc, &(0x7f0000000880)={&(0x7f00000005c0)={0x2c, r8, 0x1, 0x70bd25, 0x25dfdbfd, {}, [@NFC_ATTR_TARGET_INDEX={0x8, 0x4, 0x1}, @NFC_ATTR_COMM_MODE={0x5}, @NFC_ATTR_DEVICE_INDEX={0x8, 0x1, r10}]}, 0x2c}}, 0x44) r12 = socket$nl_generic(0x10, 0x3, 0x10) r13 = syz_genetlink_get_family_id$wireguard(&(0x7f00000002c0), r3) sendmsg$WG_CMD_GET_DEVICE(r12, &(0x7f00000003c0)={&(0x7f0000000200)={0x10, 0x0, 0x0, 0x20000}, 0xc, &(0x7f0000000300)={&(0x7f0000000440)={0x4c, r13, 0x1, 0x70bd2a, 0x25dfdbfc, {}, [@WGDEVICE_A_IFNAME={0x14, 0x2, 'wg2\x00'}, @WGDEVICE_A_PRIVATE_KEY={0x24, 0x3, @c}]}, 0x4c}, 0x1, 0x0, 0x0, 0x4000005}, 0x24000001) 1.325373911s ago: executing program 0 (id=13488): r0 = socket(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000080)={'ip6tnl0\x00', 0x0}) sendmsg$nl_route_sched(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000e40)=@newqdisc={0x40, 0x24, 0x3fe3aa0262d8c583, 0x70bd27, 0x0, {0x0, 0x0, 0x0, r1, {0x0, 0xf}, {0xffff, 0xffff}, {0x6}}, [@qdisc_kind_options=@q_pfifo_head_drop={{0x14}, {0x6}}]}, 0x40}, 0x1, 0x0, 0x0, 0xc083}, 0x2000400c) r2 = socket$nl_rdma(0x10, 0x3, 0x14) read(r2, &(0x7f0000000580)=""/63, 0x3f) sendmsg$RDMA_NLDEV_CMD_RES_GET(r2, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000380)=ANY=[@ANYBLOB="100000000914e73f"], 0x4e}}, 0x20008000) r3 = syz_genetlink_get_family_id$devlink(&(0x7f0000000140), 0xffffffffffffffff) r4 = socket$netlink(0x10, 0x3, 0x8000000004) writev(r4, &(0x7f0000000140)=[{&(0x7f0000000080)="580000001400192340834b80040d8c560a067f0200ff000000000000000058000b4824ca945f64009400ff0325010ebc000000000000008000f0fffeffe809005300fff5dd00000010000100080c10000000000000000000", 0x58}], 0x1) sendmsg$DEVLINK_CMD_SB_TC_POOL_BIND_GET(r4, &(0x7f00000002c0)={&(0x7f0000000100)={0x10, 0x0, 0x0, 0x8000}, 0xc, &(0x7f0000000280)={&(0x7f0000000180)={0x50, r3, 0x800, 0x70bd29, 0x25dfdbfb, {}, [{{@pci={{0x8}, {0x11}}, {0x8, 0x3, 0x2}}, {0x8, 0xb, 0x1ff}, {0x6, 0x16, 0xff68}, {0x5}}]}, 0x50}, 0x1, 0x0, 0x0, 0x20000000}, 0x44000) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000140)={0xe, 0x4, &(0x7f0000000680)=ANY=[@ANYBLOB="1800000000000000000000000000000071104100000000009500000000000000a33272ed07fecfa683c7db3a353f62d6cfc9f7a93de571a3e372c15e5efd1aafec45bfe8a03162160ecd007a26716cbf193c6f3e2d6921d1f60d156a5a9e83a4275bc6907fafa1f757d59b4d122826dfe325ee09338dc4cd824bdae8019d0f53af8c9ac607489002211905f67e6c4bec5de4116b3b00bd4ac77c682fc23e8dfb7e512729ec0e9e05dc"], &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x24}, 0x80) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000002b80)={0x6, 0x4, &(0x7f0000001a00)=@framed={{0x18, 0x0, 0x0, 0x0, 0x1}, [@alu={0x7, 0x0, 0x9, 0x0, 0x0, 0x1, 0xffffffffffffffff}]}, &(0x7f0000001a40)='GPL\x00', 0x7}, 0x94) r5 = socket$inet6(0xa, 0x5, 0x0) setsockopt$sock_int(r5, 0x1, 0xf, &(0x7f0000fee000)=0x3fa, 0x4) listen(r5, 0x50) sendmsg$inet(r5, &(0x7f00000019c0)={&(0x7f0000000340)={0x2, 0x4e20, @local}, 0x10, &(0x7f00000017c0)=[{&(0x7f0000000380)="8cefbb785a23", 0x6}], 0x1}, 0x4000) r6 = bpf$PROG_LOAD(0x5, &(0x7f000000e000)={0x10, 0x4, &(0x7f0000000040)=ANY=[@ANYBLOB="b4000000000000007910480000000000610400000000000095000000"], &(0x7f0000003ff6)='GPL\x00', 0x2, 0xfd90, &(0x7f000000cf3d)=""/195, 0x0, 0x0, '\x00', 0x0, @sk_msg}, 0x48) r7 = bpf$MAP_CREATE(0x0, &(0x7f0000000200)=@base={0xf, 0x4, 0x4, 0x12}, 0x48) setsockopt$packet_int(0xffffffffffffffff, 0x107, 0xf, &(0x7f0000000100)=0x9, 0x4) syz_genetlink_get_family_id$nl802154(0x0, 0xffffffffffffffff) r8 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r8, &(0x7f0000000200)={0x0, 0x29, &(0x7f0000000180)={&(0x7f0000000000)=ANY=[@ANYBLOB="300000001000010029bd7000fddbdf2500040000", @ANYRES32=0x0, @ANYBLOB="211000000300000008001b00000000000800040001800000"], 0x30}, 0x1, 0x0, 0x0, 0x801}, 0x4000000) ioctl$sock_SIOCGIFINDEX(0xffffffffffffffff, 0x8933, &(0x7f0000000000)={'geneve0\x00', 0x0}) sendto$packet(0xffffffffffffffff, &(0x7f0000000180)="0b0312002e0064000200475400f6a13bb1000000086086dd4803", 0x100a6, 0x88a8ffff, &(0x7f0000000140)={0x11, 0x88a8, r9}, 0x14) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f00000000c0)={{r7}, &(0x7f0000000000), &(0x7f0000000080)=r6}, 0x20) 1.124492015s ago: executing program 7 (id=13489): r0 = syz_init_net_socket$llc(0x1a, 0x2, 0x0) setsockopt$llc_int(r0, 0x10c, 0x6, &(0x7f0000000bc0)=0x8001, 0x4) r1 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r1, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000240)=ANY=[@ANYBLOB="140000001000010000000000000000000500000a28000000000a030000000000000000000a00000708000240000000020900010073797a31000000002c000000030a010100000000000000000a0000070900010073797a31000000000900030073797a320000000014000000110001"], 0x7c}, 0x1, 0x0, 0x0, 0x4000}, 0x0) sendmsg$NFT_BATCH(r1, &(0x7f0000009b40)={0x0, 0x0, &(0x7f0000009b00)={&(0x7f00000002c0)={{0x14, 0x10, 0x1, 0x0, 0x0, {0x1}}, [@NFT_MSG_NEWSET={0x88, 0x9, 0xa, 0x401, 0x0, 0x0, {0xa}, [@NFTA_SET_NAME={0x9, 0x2, 'syz1\x00'}, @NFTA_SET_TABLE={0x9, 0x1, 'syz0\x00'}, @NFTA_SET_TABLE={0x9, 0x1, 'syz1\x00'}, @NFTA_SET_KEY_LEN={0x8, 0x5, 0x1, 0x0, 0xb}, @NFTA_SET_EXPRESSIONS={0x40, 0x12, 0x0, 0x1, [{0x10, 0x1, 0x0, 0x1, @dynset={{0xb}, @void}}, {0x2c, 0x1, 0x0, 0x1, @counter={{0xc}, @val={0x1c, 0x2, 0x0, 0x1, [@NFTA_COUNTER_PACKETS={0xc, 0x2, 0x1, 0x0, 0xb07}, @NFTA_COUNTER_BYTES={0xc, 0x1, 0x1, 0x0, 0x9}]}}}]}, @NFTA_SET_FLAGS={0x8, 0x3, 0x1, 0x0, 0x130}]}], {0x14, 0x11, 0x1, 0x0, 0x0, {0x1}}}, 0xb0}, 0x1, 0x0, 0x0, 0x4044050}, 0x40) r2 = socket$nl_netfilter(0x10, 0x3, 0xc) r3 = openat$tun(0xffffffffffffff9c, &(0x7f0000000200), 0x8202, 0x0) ioctl$TUNSETIFF(r3, 0x400454ca, &(0x7f00000000c0)={'syzkaller0\x00', 0x84aebfbd6349b7f2}) ioctl$TUNSETQUEUE(r3, 0x400454d9, &(0x7f0000000040)={'ip6gre0\x00', 0x400}) ioctl$TUNSETQUEUE(r3, 0x400454d9, &(0x7f0000000100)={'wlan0\x00', 0x400}) r4 = socket$inet_tcp(0x2, 0x1, 0x0) getsockopt$ARPT_SO_GET_INFO(r4, 0x0, 0x60, 0x0, &(0x7f0000000540)=0x44) bpf$PROG_LOAD(0x5, &(0x7f000000e000)={0xa, 0x4, &(0x7f0000000040)=@framed={{0xffffffb4, 0x5, 0x0, 0x0, 0x0, 0x71, 0x10, 0x6b}, [@ldst={0x6}]}, &(0x7f0000003ff6)='GPL\x00', 0x5, 0xfd96, &(0x7f0000000080)=""/201, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0xfffffffffffffd56, 0x10, &(0x7f0000000000), 0x1dd}, 0x48) r5 = syz_init_net_socket$bt_l2cap(0x1f, 0x3, 0x4) ioctl$AUTOFS_IOC_READY(r5, 0x400442c9, 0x200000f3) r6 = socket$inet_tcp(0x2, 0x1, 0x0) r7 = socket$nl_generic(0x10, 0x3, 0x10) setsockopt$netlink_NETLINK_LISTEN_ALL_NSID(r7, 0x10e, 0x8, &(0x7f0000000000)=0x3, 0x4) syz_emit_ethernet(0x5a, &(0x7f0000000240)={@local, @link_local, @void, {@ipv4={0x800, @tcp={{0x5, 0x4, 0x0, 0x0, 0x4c, 0x0, 0x0, 0x0, 0x6, 0x0, @remote, @local}, {{0x0, 0x4e22, 0x41424344, 0x41424344, 0x0, 0x6, 0xe, 0x0, 0x0, 0x0, 0x0, {[@md5sig={0x1d, 0x12, "d285b6853bc4dc54c6910c1d66f8841a"}, @md5sig={0x1d, 0x12, "adf059fd789278e2fb03dc15d356998a"}]}}}}}}}, 0x0) r8 = socket$nl_route(0x10, 0x3, 0x0) r9 = syz_init_net_socket$bt_l2cap(0x1f, 0x5, 0x0) bind$bt_l2cap(r9, &(0x7f0000000100)={0x1f, 0x4, @none, 0x0, 0x1}, 0xe) getsockopt$bt_BT_RCVMTU(r9, 0x112, 0xf, &(0x7f0000000000), &(0x7f0000000080)=0x2) sendmsg$nl_route(r8, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000140)={&(0x7f00000000c0)=@newlink={0x50, 0x10, 0x401, 0x0, 0x0, {}, [@IFLA_IFNAME={0x14, 0x3, 'ip6tnl0\x00'}, @IFLA_LINKINFO={0x1c, 0x12, 0x0, 0x1, @ipip6={{0xb}, {0xc, 0x2, 0x0, 0x1, [@IFLA_IPTUN_ENCAP_TYPE={0x6}]}}}]}, 0x50}}, 0x0) sendto$inet(r6, 0x0, 0x0, 0x20000800, &(0x7f0000000080)={0x2, 0x0, @dev}, 0x1) socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_MSG_GETSET(r2, &(0x7f0000000680)={0x0, 0x0, &(0x7f0000000640)={&(0x7f00000005c0)={0x14, 0xa, 0xa, 0x101}, 0x14}}, 0x0) 1.123821615s ago: executing program 6 (id=13490): r0 = socket(0x2b, 0x1, 0x0) connect$inet6(r0, &(0x7f0000000180)={0xa, 0x4e20, 0x6, @initdev={0xfe, 0x88, '\x00', 0x1, 0x0}, 0x8}, 0x1c) r1 = socket$inet_udp(0x2, 0x2, 0x0) bind$inet(r1, &(0x7f0000000040)={0x2, 0x4e20, @empty}, 0x10) r2 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000040)='cpuacct.usage_sys\x00', 0x275a, 0x0) mmap(&(0x7f0000000000/0x400000)=nil, 0x400000, 0x1, 0x10012, r2, 0x0) r3 = socket$packet(0x11, 0x3, 0x300) setsockopt$packet_int(r3, 0x107, 0x17, &(0x7f0000000080)=0x1, 0x4) r4 = bpf$PROG_LOAD(0x5, &(0x7f00002a0fb8)={0x16, 0x4, &(0x7f0000000f00)=ANY=[@ANYBLOB="8500000008000000350000000000000085000000050000009500000000000000fed023000000c71adb30be7d75fa1f32f08a23ce3220b0cc9505d72768b8242dd90d17e4c52505756ca2b009546a0900000000000000d3df2bd87184446d165ae3939bbca322a415a98c8801000000000000800859362ed862b3c47fa8ce7c69adfd2f16af3a00000000000000000000009a317aa34f0c50f99eedac26048ab915e1be5aa845be00de14683ee4e859d65564a9c79d20e5a011e966388cd0bb39f45d6c508b8a0f7f2d48be0e2a8137c6741775428abf2ddfd2a473f5b271701e22f8cb42198906e1107fa780c435083cac323838727a606495803509f84729f3e8a2fbfb995f99b82df3b363a9cf6ba87fdfbf5a3dd0dde49b4193520e5e946687634c04000000000000bfbcd911eba0dee5e5ce6434f86fe82ee02f0e8e3173a97d85e232e584ace13387693614f3a7ef88709f4d552c7b3a7903e14dc418e58f3e98933b2c93fae25ec2dd190231e2531e1ffeff33676a4383a918cba3ad8318ea29f164563a42cdb596f255a251add2d2ae2fac0a0e7428e4bf07fc884be5721bdffe58c6a4b57014ce976ce8b9cddfa50175c53253d7659f0e88913d4fa7f37feb40337fada4363c0698510730725e23bdad60ceaeecfeeccc397565f204b82d6d4458d77a1b4abeadf350c21027d314237a9d448b82827ff3f29cc9b46c8fcfbb30d1fc18707c252b596cdbf4e77836adc1f59f9d1280333d135fdcdcee8eb817388666e02ff1b148b6bc3c283e71c0ad9c683c6bb6fea2d2d54af3ad488f0cc2e54a70c19ceac518adbe917652c34019d7478c716ab23d4a863b4dcd08d89f6cec674e9fd379d71e06357d207984e885ace8a0dbaffef403aff01d5f2f0e644b61cd8bd72a59f2d7cf67815aeb8761412d68c40dbed08b7eeda96b3856a519a71b83c19b2e8f88d92b66abec165663819a87e7cd8c082cb011051789c283eecfe08f0799f6c7023353b6d3af7177d6b56549616bfede82c598301c98b0420b1784b53238b39c0db1da864e593d45fd297e4d34e749bc737e0bcf36fd955a40124c00d40c3f21d26e6e276152412b4ef3f52dc416bb2d7463a93ee6c0b20c5749a44677a3c3a7aa9a47c7cd7bb52fbb2c8d63166f4ad1038f33258736b2224a66726f1fd4dce0eb6043a55fbdd341baba95cc5838a860068e0f3e73d992403455b03b25bd5414628d7325a6b25986666b336851d9c623c405bf608d4bd9347c83cb693aebab072be479705b0c6c9bb9728d131f8320b966898de1a16407692b57b6f7333eac0d2ed0a7a4457d9c70089fcf9aa553929a65777f3bbf6d0bdc6a11371a138c6d4b0fefc655716e4486f5c7a88e80b2fb0efb579333bef98ded75abfb982b1fb92f003a6aefb8bf25eacb848d8ed1c1162d000000000000000000000000e87dffd60f123527781805434d210bb72ac2c097c45b27dde4980bc85b43614d266a9d403c320f80646c7df8bdd1cf380000"], &(0x7f0000000140)='GPL\x00', 0x0, 0x99, &(0x7f0000000180)=""/148, 0x0, 0x0, '\x00', 0x0, @flow_dissector, 0xffffffffffffffff, 0x8, 0x0, 0xffffffffffffff79}, 0x16) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000440)={r4, 0x0, 0x83, 0x0, &(0x7f0000000e40)="04d31fcd275bfc58188e699fa7c9aa904991771e83b702f3717cf38ed0e92e83ae490758991fa1174a75fa8c45db732026d3de611ffbd09b683e2f08812d695dd9b87f08711c02bb5d2cbac05022bee8aee5339fb6eba21e534e43b9960f470bf9c075368c6a7ee0b6ef641feb6967490ae07547819adcf47330679551ae2bd7009b31", 0x0, 0x375, 0x0, 0x1b, 0x4b, &(0x7f0000000000), &(0x7f0000000e00)="2fda8e7aa8d9cecae13bcbb35230d1cf1f1b23e33fcbd1aa1bea454b04650cecef80daa9a0a349a8e46d661af6e7ee8cdb5e97e738fe54"}, 0x50) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000300)=ANY=[@ANYBLOB='$\x00'], 0x24}}, 0x0) r5 = bpf$MAP_CREATE(0x0, &(0x7f0000000540)=ANY=[@ANYBLOB="0b00000000010000000100000900000001"], 0x48) getsockname$unix(r2, &(0x7f0000000240)=@abs, &(0x7f0000000340)=0x6e) bpf$MAP_UPDATE_BATCH(0x1a, &(0x7f0000000640)={0x0, 0x0, &(0x7f0000000000), &(0x7f00000002c0), 0x8, r5}, 0x38) bpf$MAP_LOOKUP_BATCH(0x1b, &(0x7f0000000440)={0x0, 0x0, &(0x7f0000000100), 0x0, 0x3, r5}, 0x38) syz_emit_ethernet(0xbe, &(0x7f00000006c0)=ANY=[@ANYBLOB="aaaaaaaaaa050080c20000000800450800b40000000000119078e00000020000004e20009c907801000000000000007b4b143b7461fd777b1c0122d14efb9f49fcdb8f080c26a04883ad5c8c82b8af584cbfad49a50f2dc6c0a2267d0fa68ab0c7512abc43efa8698d0a881c51852e4451b57d037ad3c045942824251d7d17b5191584bcd4fbe40a23424dbcfd56f1375461caaa71f9a77b699600000000649a3b19c2d19cb307b3472ab9cdb042d200000000000000000000000019b91121233507846635a65a3121f8"], 0x0) r6 = syz_init_net_socket$nl_rdma(0x10, 0x3, 0x10) sendmsg$RDMA_NLDEV_CMD_STAT_GET(r6, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={0x0}}, 0x0) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000140)={0x6, 0x3, &(0x7f0000000680)=ANY=[@ANYBLOB="1800000002000000000000000000000095"], 0x0, 0x3, 0x0, 0x0, 0x41000}, 0x94) r7 = bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000480)={0x6, 0x3, &(0x7f0000000680)=ANY=[], &(0x7f00000002c0)='syzkaller\x00', 0x7}, 0x94) r8 = syz_init_net_socket$bt_l2cap(0x1f, 0x3, 0x3) sendmmsg$inet(r8, &(0x7f0000002300)=[{{0x0, 0x0, 0x0}}], 0x1, 0x4c001) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000600)={r7, 0x5, 0xb68, 0x0, &(0x7f0000000000)='%', 0x0, 0xd01, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2}, 0x48) recvmmsg(r1, &(0x7f0000002a40)=[{{0x0, 0x0, 0x0}, 0x5}], 0x1, 0x202, 0x0) 1.005700522s ago: executing program 6 (id=13492): r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0) r1 = socket$inet_udp(0x2, 0x2, 0x0) setsockopt$SO_TIMESTAMPING(r1, 0x1, 0x25, &(0x7f0000000200)=0x474c, 0x4) (async) bind$inet(r1, &(0x7f00000001c0)={0x2, 0x0, @local}, 0x10) (async) connect$inet(r1, &(0x7f0000000480)={0x2, 0x0, @multicast1}, 0x10) sendmmsg(r1, &(0x7f0000007fc0), 0x800001d, 0x0) (async) setsockopt$inet_int(r1, 0x0, 0xc, &(0x7f0000000040)=0xfffffffc, 0x4) (async) recvmmsg(r1, &(0x7f0000000580)=[{{0x0, 0x0, 0x0}, 0x102}], 0x1, 0x45833af92e4b38bf, 0x0) (async) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x7101}) (async) r2 = socket$inet(0x2, 0x1, 0x0) setsockopt$inet_opts(r2, 0x0, 0x4, &(0x7f0000000000)="8907040400", 0x5) (async) connect$inet(r2, &(0x7f0000000080)={0x2, 0x0, @empty}, 0x10) ioctl$TUNSETLINK(r0, 0x400454cd, 0x306) r3 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r4 = syz_genetlink_get_family_id$nfc(&(0x7f0000000140), 0xffffffffffffffff) ioctl$IOCTL_GET_NCIDEV_IDX(0xffffffffffffffff, 0x0, &(0x7f0000000180)=0x0) ioctl$IOCTL_GET_NCIDEV_IDX(0xffffffffffffffff, 0x0, &(0x7f00000001c0)=0x0) sendmsg$NFC_CMD_DEV_UP(r3, &(0x7f0000000300)={&(0x7f0000000100)={0x10, 0x0, 0x0, 0x200}, 0xc, &(0x7f00000002c0)={&(0x7f0000000280)={0x24, r4, 0x761c1b47b20aa2e1, 0x70bd2c, 0x25dfdbfe, {}, [@NFC_ATTR_DEVICE_INDEX={0x8, 0x1, r5}, @NFC_ATTR_DEVICE_INDEX={0x8, 0x1, r6}]}, 0x24}, 0x1, 0x0, 0x0, 0x10}, 0x28080) (async) openat$tun(0xffffffffffffff9c, 0x0, 0x0, 0x0) r7 = openat$tun(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) close(r7) (async) socketpair(0x1, 0x1, 0x0, &(0x7f0000000200)) (async) ioctl$SIOCSIFHWADDR(r7, 0x8914, &(0x7f00000000c0)={'syzkaller0\x00', @broadcast}) 952.282258ms ago: executing program 5 (id=13493): r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r0, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000140)={&(0x7f00000000c0)=@deltaction={0x54, 0x18, 0x1, 0x70bd2a, 0x25dfdc00, {0xa}, [@TCA_ACT_TAB={0x40, 0x1, [{0xc, 0x8f, 0x0, 0x0, @TCA_ACT_INDEX={0x8}}, {0x14, 0x5, 0x0, 0x0, @TCA_ACT_KIND={0xf, 0x1, 'tunnel_key\x00'}}, {0xc, 0x9, 0x0, 0x0, @TCA_ACT_INDEX={0x8, 0x3, 0x37}}, {0x10, 0x8, 0x0, 0x0, @TCA_ACT_KIND={0xc, 0x1, 'skbedit\x00'}}]}]}, 0x54}, 0x1, 0x0, 0x0, 0x44000}, 0x20040844) pipe(&(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) vmsplice(r2, &(0x7f00000000c0)=[{&(0x7f0000000180)="77690addcfbe1fbb66ec", 0xff3b}], 0x1, 0x1) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000a00)={0xffffffffffffffff, 0xffffffffffffffff}) splice(r3, 0x0, r2, 0x0, 0x10000008ebc, 0x0) splice(r1, 0x0, r4, 0x0, 0x25a5, 0x0) syz_emit_ethernet(0x66, &(0x7f0000000600)=ANY=[@ANYBLOB="aaaaaaaaaaaa00000000000086dd60fca33f00306700fe800000000000000000000000000000fe8000000000000000000000000000aa2100000000000000000300000000000000170ce3c4989ea1a39290312280e6398bb3012ab2f6fcb2ba00000000000000"], 0x0) ioctl$sock_SIOCOUTQ(0xffffffffffffffff, 0x5411, &(0x7f0000000000)) 934.070681ms ago: executing program 7 (id=13494): sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f0000009b40)={0x0, 0x0, &(0x7f0000009b00)={&(0x7f0000000100)=ANY=[@ANYBLOB="140000001000010000000000000000000500000a3c000000090a010400000000000026040a0000040900010073797a3100000000080005400000002b0900020073797a310000000008000a40ffff"], 0x64}, 0x1, 0x0, 0x0, 0x4000850}, 0x24000000) socket(0x400000000010, 0x3, 0x0) bpf$PROG_LOAD(0x5, &(0x7f00000017c0)={0xa, 0xe, &(0x7f0000000200)=ANY=[@ANYBLOB="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"], &(0x7f00000001c0)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0xffffffffffffff97, 0x10, &(0x7f00000000c0), 0xffffffffffffffc2}, 0x48) r0 = socket$igmp6(0xa, 0x3, 0x2) getsockopt$MRT6(r0, 0x29, 0x1f, 0x0, &(0x7f0000000080)) ioctl$sock_SIOCETHTOOL(r0, 0x89ff, &(0x7f0000001440)={'bridge0\x00', &(0x7f0000000400)=@ethtool_ringparam={0x10, 0x0, 0x20040001, 0x0, 0xfffffffd}}) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000100)=ANY=[@ANYBLOB="4800000010000d0428bd7000fcdbff2500008000", @ANYRES32=0x0, @ANYBLOB="1000000000000000280012800b000100627269646765000018000280050019008400"], 0x48}, 0x1, 0x0, 0x0, 0x10}, 0x4000000) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000100)=ANY=[@ANYBLOB="500000001000010425bbe5ad600027842cf52300", @ANYRES32=0x0, @ANYBLOB="030000000000000028005cceb3fb685bbd336c616e00"], 0x50}, 0x1, 0x0, 0x0, 0x13d33d22cca61c54}, 0x4008840) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000240)=@newqdisc={0x24, 0x24, 0x1, 0x70bd2a, 0x25dfdbfb, {0x0, 0x0, 0x0, 0x0, {0xffe0}, {0xf, 0x9}, {0x5}}}, 0x24}, 0x1, 0x0, 0x0, 0x40}, 0x0) r1 = socket$netlink(0x10, 0x3, 0x0) sendmmsg(r1, &(0x7f00000002c0), 0x40000000000009f, 0x0) 849.63816ms ago: executing program 5 (id=13495): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) socket(0x26, 0x5, 0x10001) sendmsg$NFT_BATCH(r0, &(0x7f000000c2c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000340)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a28000000000a0101000000005e1affd5020000000900010073797a300000000008000240000000032c000000030a01030000e6ff00000000020000000900010073797a30000000000900030073797a320000000014000000110001"], 0x7c}}, 0x0) sendmsg$NFT_BATCH(r0, &(0x7f00000002c0)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000780)={{0x14}, [@NFT_MSG_DELRULE={0x2c, 0x6, 0xa, 0x301, 0x0, 0x0, {0x2}, [@NFTA_RULE_CHAIN={0x9, 0x2, 'syz2\x00'}, @NFTA_RULE_TABLE={0x9, 0x1, 'syz0\x00'}]}], {0x14}}, 0x54}}, 0x4800) ioctl$F2FS_IOC_SET_PIN_FILE(r0, 0x4004f50d, &(0x7f0000000000)=0x1) 744.378379ms ago: executing program 5 (id=13496): bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f00000002c0)={0xffffffffffffffff, 0x2f00020b, 0xd, 0x0, &(0x7f0000000200)="63eced8e46dc3f0adf33c9f7b9", 0x0, 0x7515, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x50) r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000200)=ANY=[@ANYBLOB="220000000400000010000000"], 0x48) r1 = bpf$MAP_CREATE(0x0, &(0x7f0000000240)=ANY=[@ANYRESHEX=r0], 0x48) r2 = socket$inet6(0x10, 0x3, 0x0) sendmsg$nl_route(0xffffffffffffffff, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000d40)={&(0x7f0000000000)=ANY=[@ANYBLOB="480000001400090527bd7000fddbdf25022040cb", @ANYRES32, @ANYBLOB="080004006401010208000400ac1414bb08000200ac14143d080002"], 0x48}}, 0x0) getsockname$packet(0xffffffffffffffff, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @link_local}, &(0x7f0000000140)=0x14) r4 = bpf$BPF_BTF_GET_FD_BY_ID(0x13, &(0x7f00000001c0)=0xffffffffffffffff, 0x4) r5 = bpf$TOKEN_CREATE(0x24, &(0x7f0000000340)={0x0, r1}, 0x8) r6 = bpf$MAP_CREATE(0x0, &(0x7f0000000380)=ANY=[@ANYBLOB="1e00000006000000050000000900000002f00100", @ANYRES32=r0, @ANYBLOB="0100008000"/20, @ANYRES32=r3, @ANYRES32, @ANYRES64=r3, @ANYRES32=r4, @ANYBLOB, @ANYRES32=r5, @ANYBLOB], 0x50) sendto$inet6(r2, &(0x7f0000000000)='s', 0x10a73, 0x800, 0x0, 0x4b6ae4f95a5de35b) bpf$BPF_MAP_CONST_STR_FREEZE(0x16, &(0x7f00000000c0)={r1}, 0x4) pipe(&(0x7f0000000480)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$FS_IOC_GETFSUUID(r6, 0x80111500, &(0x7f0000000440)) r8 = socket$inet_tcp(0x2, 0x1, 0x0) setsockopt$inet_opts(r8, 0x0, 0xd, &(0x7f00000001c0)="01", 0x1) setsockopt$inet_opts(r8, 0x0, 0xc, &(0x7f0000000000)="c1", 0x1) getsockopt$inet_opts(r8, 0x0, 0x9, &(0x7f0000000680)=""/17, &(0x7f00000000c0)=0x11) r9 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r9, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000180)={&(0x7f00000001c0)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a20000000000a05000000000000000000050000000900010073797a30000000002c000000030a01010000000000000000050000000900010073797a30000000000900030073797a300000000054000000060a010400000000000000000500000408000b40000000002c0004802800018008000100667764001c000280080002400000000a080003400000000808000140000000170900010073797a3000"], 0xc8}}, 0x0) vmsplice(r7, &(0x7f00000000c0)=[{&(0x7f0000000180)="77690addcfbe1fbb66ec", 0xff3b}], 0x1, 0x1) getsockopt$netrom_NETROM_IDLE(r7, 0x103, 0x7, &(0x7f0000000040)=0x8, &(0x7f0000000080)=0x4) bpf$BPF_MAP_CONST_STR_FREEZE(0x16, &(0x7f0000000640)={r0}, 0x4) r10 = socket$rxrpc(0x21, 0x2, 0x2) ioctl$F2FS_IOC_GET_PIN_FILE(r10, 0x8004f50e, &(0x7f0000000280)) r11 = socket$nl_route(0x10, 0x3, 0x0) r12 = socket$unix(0x1, 0x1, 0x0) ioctl$sock_SIOCGIFINDEX(r12, 0x8933, &(0x7f00000005c0)={'geneve1\x00', 0x0}) sendmsg$nl_route_sched(r11, &(0x7f00000012c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000280)=@newqdisc={0x2c, 0x24, 0x4ee4e6a52ff56541, 0x70bd26, 0xffffffff, {0x0, 0x0, 0x0, r13, {0x0, 0x6}, {0xffff, 0xffff}}, [@qdisc_kind_options=@q_qfg={0x8}]}, 0x2c}}, 0x24040084) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000540)={&(0x7f0000000400)=@newqdisc={0x34, 0x28, 0x4ee4e6a52ff56541, 0x4001, 0xfffffdfc, {0x0, 0x0, 0x0, r13, {0xffff}, {0xffff, 0xffff}, {0x2, 0xa}}, [@qdisc_kind_options=@q_taprio={{0xb}, {0x4}}]}, 0x34}, 0x1, 0x0, 0x0, 0x400dc}, 0x0) ioctl$sock_ipv4_tunnel_SIOCGETTUNNEL(r7, 0x89f0, &(0x7f0000000540)={'tunl0\x00', &(0x7f00000004c0)={'gre0\x00', r13, 0x8000, 0x10, 0x9, 0xc74, {{0xc, 0x4, 0x1, 0xc, 0x30, 0x66, 0x0, 0xf, 0x4, 0x0, @multicast1, @remote, {[@rr={0x7, 0x17, 0xf5, [@remote, @local, @initdev={0xac, 0x1e, 0x1, 0x0}, @dev={0xac, 0x14, 0x14, 0x2b}, @private=0xa010102]}, @noop, @end, @noop, @end]}}}}}) 742.473217ms ago: executing program 7 (id=13497): r0 = socket(0x10, 0x3, 0x0) setsockopt$netlink_NETLINK_TX_RING(r0, 0x10e, 0xc, &(0x7f0000000280)={0xffffffff}, 0x10) r1 = socket$nl_generic(0x10, 0x3, 0x10) r2 = syz_genetlink_get_family_id$tipc(&(0x7f00000000c0), 0xffffffffffffffff) sendmsg$TIPC_CMD_SET_LINK_TOL(r1, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000100)=ANY=[@ANYBLOB='h\x00\x00\x00', @ANYRES16=r2, @ANYBLOB="0100000000000000000001000000000000000741000300000018"], 0x68}}, 0x0) sendmsg$TIPC_CMD_DISABLE_BEARER(r0, &(0x7f00000004c0)={&(0x7f00000002c0)={0x10, 0x0, 0x0, 0x200000}, 0xc, &(0x7f0000000480)={&(0x7f0000000440)={0x2c, r2, 0x100, 0x70bd2d, 0x25dfdbfb, {{}, {}, {0x10, 0x13, @udp='udp:syz0\x00'}}, ["", ""]}, 0x2c}, 0x1, 0x0, 0x0, 0x4}, 0x4044000) ioctl$ifreq_SIOCGIFINDEX_wireguard(r0, 0x8933, &(0x7f0000000240)={'wg1\x00'}) getsockopt$IP_SET_OP_GET_BYNAME(r0, 0x1, 0x53, &(0x7f00000000c0)={0x6, 0x7, 'syz0\x00'}, &(0x7f0000000100)=0x28) r3 = bpf$BPF_PROG_WITH_BTFID_LOAD(0x5, &(0x7f0000000300)=@bpf_lsm={0xb, 0x4, &(0x7f0000000040)=@framed={{0x66, 0xa, 0x0, 0x0, 0x0, 0x61, 0x11, 0x4c}, [@call={0x85, 0x0, 0x0, 0x1c}]}, &(0x7f0000000000)='GPL\x00'}, 0x80) r4 = socket$inet6(0x10, 0x3, 0x0) sendto$inet6(r4, &(0x7f00000000c0)="900000001c001f4d154a817393278bff0a80a578020000000104740014000100ac1414bb0542d6401051a2d708f37ac8da1a297e0099c5ac0000c5b068d0bf46d323456536016466fcb78dcaaf6c3efed495a46215be0000760700c0c80cefd28581d158ba86c9d2896c6d3bca2d0000000b0015009e49a6560641263da4de1df32c1739d7fbee9aa241731ae9e0b390", 0x90, 0x0, 0x0, 0x0) sendto$inet6(r4, &(0x7f0000000180)="900000001d001f4d154a817393278bff0a80a578020000000404840014000100ac1414bb0542d6401051a2d708f37ac8da1a297e0099c5ac0000c5b068d0bf46d323456536016466fcb78dcaaf6c3efed495a46215be0000766436c0c80cefd28581d158ba86c9d2896c6d3bca2d0000000b0015009e49a6560641263da4de1df32c1739d7fbee9aa241731ae9e0b390", 0x90, 0x0, 0x0, 0x0) sendmsg$nl_generic(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000080)=ANY=[@ANYBLOB="200000001200010a4fdd7a6ccb2535880a0d"], 0x26}}, 0x0) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000300)={0x6, 0x1c, &(0x7f0000000680)=ANY=[@ANYBLOB="1800000002000000000000000000000095"], 0x0}, 0x94) r5 = bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000200)={0x6, 0x3, &(0x7f0000000680)=ANY=[], &(0x7f00000002c0)='syzkaller\x00'}, 0x94) write$cgroup_subtree(0xffffffffffffffff, &(0x7f0000000000)=ANY=[@ANYBLOB="8fedcb7902009875f37538e486dd6317ce62667f2c00fe80000000000000875a65969ff57b00000000000000000000000000ac1414aa88"], 0xfdef) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000600)={r5, 0x5, 0xb68, 0x0, &(0x7f0000000000)='%', 0x0, 0xd01, 0x88be, 0x0, 0x0, 0x0, 0x0, 0x2}, 0x48) r6 = socket$packet(0x11, 0x2, 0x300) setsockopt$packet_fanout(r6, 0x107, 0x12, &(0x7f0000000040)={0x0, 0x6}, 0x4) setsockopt$packet_fanout_data(r6, 0x107, 0x16, &(0x7f0000000100)={0x2, &(0x7f0000000180)=[{0x28, 0x0, 0x0, 0xfffff034}, {0x6}]}, 0x10) write(r3, &(0x7f00000003c0)="f70d494d4f6f0e7eae4578a6131ac53284a4f35cc2e657fde495cb2b6f86e653332ebcbf5c6fd120c14e3cde3cc013f5bac167268f31442a674c091f981322af35e90c703f5f5c600b721545db4a82f728088307a1a3e7e786e6517406714527885347", 0x63) 724.331902ms ago: executing program 4 (id=13498): r0 = syz_init_net_socket$802154_raw(0x24, 0x3, 0x0) setsockopt$SO_TIMESTAMP(r0, 0x1, 0x3e, &(0x7f0000000000)=0x4, 0x4) (async) writev(r0, &(0x7f00000002c0)=[{0x0}, {&(0x7f00000000c0)="4c08c559bd", 0x5}, {0x0}], 0x3) socket$nl_route(0x10, 0x3, 0x0) 713.796933ms ago: executing program 6 (id=13499): r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = socket$inet6_sctp(0xa, 0x801, 0x84) setsockopt$inet_sctp6_SCTP_STREAM_SCHEDULER(r1, 0x84, 0x7b, &(0x7f00000000c0)={0x0, 0x3}, 0x8) sendto$inet6(r1, &(0x7f00000002c0)="882e", 0x2, 0x0, &(0x7f0000000100)={0xa, 0x0, 0x0, @remote, 0xa}, 0x1c) setsockopt$inet_sctp6_SCTP_STREAM_SCHEDULER_VALUE(r1, 0x84, 0x7c, &(0x7f0000000080)={0x0, 0x5, 0x2}, 0x8) sendmsg$nl_route_sched(r0, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000280)=@newtaction={0x6c, 0x30, 0x1, 0x0, 0x0, {}, [{0x58, 0x1, [@m_mpls={0x54, 0x1, 0x0, 0x0, {{0x9}, {0x28, 0x2, 0x0, 0x1, [@TCA_MPLS_PARMS={0x1c, 0x2, {{}, 0x4}}, @TCA_MPLS_PROTO={0x6, 0x4, 0x9}]}, {0x4, 0x4}, {0xc}, {0xc}}}]}]}, 0x6c}}, 0x0) 660.785145ms ago: executing program 5 (id=13500): r0 = socket$inet_icmp_raw(0x2, 0x3, 0x1) r1 = socket$inet_sctp(0x2, 0x5, 0x84) setsockopt$EBT_SO_SET_COUNTERS(r1, 0x0, 0x81, 0x0, 0x78) setsockopt$inet_int(r0, 0x0, 0x8, &(0x7f0000000300)=0x1, 0x4) connect$inet(r1, &(0x7f0000000040)={0x2, 0x4e22, @initdev={0xac, 0x1e, 0x0, 0x0}}, 0x10) r2 = bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000540)={0x6, 0x3, &(0x7f0000000680)=ANY=[@ANYBLOB="1800000002000000000000000000000095"], 0x0, 0x0, 0x0, 0x0, 0x100}, 0x94) syz_emit_ethernet(0x3e, &(0x7f0000000000)=ANY=[@ANYBLOB="0380c2000000ea657668115908002d0400300000000000019078ac1e0001ac1414aa030190781200183f25000000000000000001008b71c5589b6238a8dd"], 0x0) r3 = bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000080)={0x6, 0x3, &(0x7f0000000680)=ANY=[], &(0x7f00000002c0)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x3}, 0x94) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000600)={r3, 0x5, 0xb68, 0xf5ffffff, &(0x7f0000000000)='%', 0x0, 0xd01, 0xbe02, 0x0, 0x0, 0x0, 0x0, 0x2, 0x31}, 0x48) ioctl$XFS_IOC_ATTRLIST_BY_HANDLE(r3, 0x4058587a, &(0x7f0000000340)={{r2, &(0x7f0000000140)='\x00', 0xa0001, &(0x7f0000000180)={@align=0x1ed8, {0xa126, 0xd, 0x9, 0x4000000000000}}, 0x5, &(0x7f00000001c0)={@_ha_fsid}, &(0x7f0000000200)=0x7742}, {[0x3, 0x5, 0x8000, 0x8]}, 0x7, 0x45, &(0x7f0000000240)=""/69}) ioctl$sock_bt_bnep_BNEPGETSUPPFEAT(r4, 0x800442d4, &(0x7f00000003c0)=0x4) accept(r0, &(0x7f0000000400)=@sco, &(0x7f0000000480)=0x80) socket$inet_icmp_raw(0x2, 0x3, 0x1) (async) socket$inet_sctp(0x2, 0x5, 0x84) (async) setsockopt$EBT_SO_SET_COUNTERS(r1, 0x0, 0x81, 0x0, 0x78) (async) setsockopt$inet_int(r0, 0x0, 0x8, &(0x7f0000000300)=0x1, 0x4) (async) connect$inet(r1, &(0x7f0000000040)={0x2, 0x4e22, @initdev={0xac, 0x1e, 0x0, 0x0}}, 0x10) (async) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000540)={0x6, 0x3, &(0x7f0000000680)=ANY=[@ANYBLOB="1800000002000000000000000000000095"], 0x0, 0x0, 0x0, 0x0, 0x100}, 0x94) (async) syz_emit_ethernet(0x3e, &(0x7f0000000000)=ANY=[@ANYBLOB="0380c2000000ea657668115908002d0400300000000000019078ac1e0001ac1414aa030190781200183f25000000000000000001008b71c5589b6238a8dd"], 0x0) (async) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000080)={0x6, 0x3, &(0x7f0000000680)=ANY=[], &(0x7f00000002c0)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x3}, 0x94) (async) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000600)={r3, 0x5, 0xb68, 0xf5ffffff, &(0x7f0000000000)='%', 0x0, 0xd01, 0xbe02, 0x0, 0x0, 0x0, 0x0, 0x2, 0x31}, 0x48) (async) ioctl$XFS_IOC_ATTRLIST_BY_HANDLE(r3, 0x4058587a, &(0x7f0000000340)={{r2, &(0x7f0000000140)='\x00', 0xa0001, &(0x7f0000000180)={@align=0x1ed8, {0xa126, 0xd, 0x9, 0x4000000000000}}, 0x5, &(0x7f00000001c0)={@_ha_fsid}, &(0x7f0000000200)=0x7742}, {[0x3, 0x5, 0x8000, 0x8]}, 0x7, 0x45, &(0x7f0000000240)=""/69}) (async) ioctl$sock_bt_bnep_BNEPGETSUPPFEAT(r4, 0x800442d4, &(0x7f00000003c0)=0x4) (async) accept(r0, &(0x7f0000000400)=@sco, &(0x7f0000000480)=0x80) (async) 625.370878ms ago: executing program 6 (id=13501): socket$nl_route(0x10, 0x3, 0x0) r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000180)=@newlink={0x34, 0x10, 0x801, 0x0, 0x0, {0x0, 0x0, 0x300, 0x0, 0x150}, [@IFLA_BROADCAST={0xa, 0x2, @broadcast}, @IFLA_GROUP={0x8}]}, 0x34}}, 0x0) r1 = socket$inet_tcp(0x2, 0x1, 0x0) r2 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='memory.events\x00', 0x275a, 0x0) write$cgroup_subtree(r2, &(0x7f0000000080)=ANY=[], 0x10448) mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x2000001, 0x12, r2, 0x0) r3 = socket$inet_sctp(0x2, 0x5, 0x84) getsockopt$inet_sctp_SCTP_DEFAULT_SEND_PARAM(r3, 0x84, 0xa, &(0x7f0000000080)={0x10, 0x3, 0x1, 0x7fff, 0x4, 0x5, 0xffffffff, 0x3}, &(0x7f0000000140)=0x20) pipe(&(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) setsockopt$sock_attach_bpf(r1, 0x1, 0x49, &(0x7f0000000040)=r4, 0x4) 604.995867ms ago: executing program 4 (id=13502): r0 = socket$igmp(0x2, 0x3, 0x2) setsockopt$MRT_ADD_VIF(r0, 0x0, 0xca, &(0x7f0000000140)={0x1, 0xc, 0x0, 0x0, @vifc_lcl_addr=@rand_addr=0xc0586300, @dev={0xac, 0x14, 0x14, 0xdc}}, 0x10) (async) r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='cgroup.controllers\x00', 0x275a, 0x0) ioctl$FS_IOC_SETFLAGS(r1, 0x40086602, &(0x7f0000000040)=0x20) (async, rerun: 32) r2 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='cgroup.controllers\x00', 0xb00000000065808, 0x0) (async, rerun: 32) r3 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r3, &(0x7f0000000380)={0x0, 0x0, &(0x7f0000000340)={&(0x7f0000000100)=ANY=[@ANYBLOB="800100001000010000000000000000ac141400000000000000000000000000ac14140000000000000000000000000000000000000000000a0000000000000000", @ANYRES32=0x0, @ANYRES32=0x0, @ANYBLOB="ff020000000000000000000000000001000000006c000000e000000100000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000a0000000000000000000000480002006374722873657270656e74290000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000480003"], 0x180}}, 0x0) (async) mmap(&(0x7f0000ff2000/0xd000)=nil, 0xd000, 0x2000004, 0x4001011, r2, 0x34da2000) (async) r4 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000600)={0x11, 0x3, &(0x7f00000005c0)=ANY=[@ANYBLOB="1800000000000000000000000000000095"], &(0x7f0000000000)='GPL\x00'}, 0x94) r5 = socket$alg(0x26, 0x5, 0x0) bind$alg(r5, &(0x7f0000000000)={0x26, 'skcipher\x00', 0x0, 0x0, 'ecb-twofish-3way\x00'}, 0x58) (async, rerun: 32) r6 = accept4(r5, 0x0, 0x0, 0x0) (rerun: 32) syz_genetlink_get_family_id$tipc(&(0x7f0000000300), r6) (async) bpf$BPF_GET_PROG_INFO(0xf, &(0x7f0000000480)={r4, 0xe0, &(0x7f0000000380)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, ""/16, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, &(0x7f0000000200)=[0x0], 0xfffffffffffffffe, 0x0, 0x8, &(0x7f0000000540)=[{}], 0x8, 0x0, 0x0, 0x0, 0x0, 0x10, 0x8, 0x0, 0x0}}, 0x10) (async) r7 = syz_init_net_socket$bt_l2cap(0x1f, 0x3, 0x0) getsockopt$sock_cred(r2, 0x1, 0x11, &(0x7f00000000c0)={0x0}, &(0x7f0000000100)=0xc) ioctl$sock_FIOSETOWN(0xffffffffffffffff, 0x8901, &(0x7f0000000180)=r8) bind$bt_l2cap(r7, &(0x7f0000000000)={0x1f, 0xfffc, @any, 0x4, 0x1}, 0xe) (async) ioctl$PPPOEIOCSFWD(r6, 0x4008b100, &(0x7f0000000340)={0x18, 0x0, {0x0, @link_local={0x1, 0x80, 0xc2, 0x0, 0x0, 0x1}, 'erspan0\x00'}}) 482.821547ms ago: executing program 4 (id=13503): openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='memory.events\x00', 0x275a, 0x0) (async, rerun: 32) r0 = socket$unix(0x1, 0x2, 0x0) (rerun: 32) bind$unix(r0, &(0x7f0000000100)=@abs={0x1}, 0x6e) bind$unix(r0, &(0x7f0000000840)=@file={0x1, './file0\x00'}, 0x6e) (async) r1 = socket(0x11, 0x3, 0x0) close(r0) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000040)={'bridge_slave_1\x00', 0x0}) bind$packet(r1, &(0x7f0000000080)={0x11, 0x0, r2, 0x1, 0x0, 0x6, @link_local}, 0x14) (async) r3 = socket$kcm(0x10, 0x2, 0x0) sendmsg$kcm(r3, &(0x7f0000000600)={0x0, 0xfffffffe, &(0x7f0000000080)=[{&(0x7f0000000000)="2e00000010008188040f80ec59acbc0413a1f8481f0000005e140604000000000e000a000f00000002800000121f", 0x2e}], 0x1}, 0x0) 436.671447ms ago: executing program 4 (id=13504): r0 = accept(0xffffffffffffffff, &(0x7f0000000040)=@rxrpc=@in6={0x21, 0x0, 0x2, 0x1c, {0xa, 0x0, 0x0, @ipv4={""/10, ""/2, @dev}}}, &(0x7f00000000c0)=0x80) getsockopt$inet_sctp_SCTP_GET_ASSOC_ID_LIST(0xffffffffffffffff, 0x84, 0x1d, &(0x7f0000000140)={0x1, [0x0]}, &(0x7f0000000180)=0x8) getsockopt$inet_sctp6_SCTP_DEFAULT_SNDINFO(r0, 0x84, 0x22, &(0x7f00000001c0)={0x4f2, 0x10e, 0x1dd, 0x4, r1}, &(0x7f0000000200)=0x10) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000300)={0x10, 0x2, &(0x7f0000000100)=ANY=[@ANYBLOB="91100b000000000095"], &(0x7f0000000000)='GPL\x00'}, 0x94) 417.562485ms ago: executing program 7 (id=13505): r0 = socket$netlink(0x10, 0x3, 0x0) socket(0x10, 0x803, 0x0) (async) r1 = socket(0x10, 0x803, 0x0) sendmsg$IPVS_CMD_SET_INFO(r1, &(0x7f0000000b00)={0x0, 0x0, &(0x7f0000000ac0)={0x0, 0x14}}, 0x0) getsockname$packet(r1, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000380)=ANY=[@ANYBLOB="3c0000001000850600"/20, @ANYRES32=r2, @ANYBLOB="01000000000000001c0012000c000100626f6e64000000000c0002000800010006"], 0x3c}}, 0x0) r3 = socket$inet_udp(0x2, 0x2, 0x0) ioctl$sock_ipv4_tunnel_SIOCCHGTUNNEL(r3, 0x89f3, &(0x7f0000000500)={'tunl0\x00', &(0x7f0000000400)={'ip_vti0\x00', 0x0, 0x700, 0x700, 0x4, 0xfffff801, {{0x6, 0x4, 0x3, 0x4, 0x18, 0x68, 0x0, 0x8, 0x4, 0x0, @rand_addr=0x64010100, @local, {[@ssrr={0x89, 0x3, 0xc3}]}}}}}) (async) ioctl$sock_ipv4_tunnel_SIOCCHGTUNNEL(r3, 0x89f3, &(0x7f0000000500)={'tunl0\x00', &(0x7f0000000400)={'ip_vti0\x00', 0x0, 0x700, 0x700, 0x4, 0xfffff801, {{0x6, 0x4, 0x3, 0x4, 0x18, 0x68, 0x0, 0x8, 0x4, 0x0, @rand_addr=0x64010100, @local, {[@ssrr={0x89, 0x3, 0xc3}]}}}}}) sendmsg$nl_route(r0, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000140)=@newlink={0x60, 0x10, 0xffffff1f, 0x0, 0x1, {0x0, 0x0, 0x0, 0x0, 0x0, 0x4408}, [@IFLA_LINKINFO={0x38, 0x12, 0x0, 0x1, @geneve={{0xb}, {0x28, 0x2, 0x0, 0x1, [@IFLA_GENEVE_REMOTE6={0x14, 0x7, @loopback}, @IFLA_GENEVE_TTL={0x5, 0x3, 0x8}, @IFLA_GENEVE_UDP_ZERO_CSUM6_RX={0x5, 0xa, 0x1}]}}}, @IFLA_MASTER={0x8, 0xa, r2}]}, 0x60}, 0x1, 0x0, 0x0, 0x40000}, 0x0) 344.480861ms ago: executing program 5 (id=13506): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r0, &(0x7f000000c2c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000340)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a28000000000a0101000000005e1affd5020000000900010073797a300000000008000240000000032c000000030a01030000e6ff00000000020000000900010073797a30000000000900030073797a320000000014000000110001"], 0x7c}}, 0x0) sendmsg$NFT_BATCH(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000005c0)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a8c000000060a0b040000000000000000020000003c000480380001800e000100627974656f72646572000000240002800800054000000000080004400000000008000140000000140800014000040000000004801c0001800b00010074756e6e656c00000c000280080002400000001210000180090001007866726d0000b6edec2e020073797a3200000000140000001100010000000000000000000000000a"], 0xb4}}, 0x0) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000900)={0x2, 0x5, &(0x7f00000000c0)=ANY=[@ANYBLOB="18f8ffff"], 0x0, 0x4, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x61e5cc96}, 0x90) r1 = socket$inet6_tcp(0xa, 0x1, 0x0) bind$inet6(r1, &(0x7f0000000280)={0xa, 0x4e22, 0x9, @loopback, 0x6}, 0x1c) r2 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_int(r2, 0x29, 0x4e, &(0x7f0000000000)=0x6, 0x4) bpf$PROG_LOAD(0x5, 0x0, 0x0) bpf$PROG_LOAD(0x5, 0x0, 0x0) bpf$PROG_LOAD(0x5, 0x0, 0x0) bind$inet6(r2, &(0x7f0000000040)={0xa, 0x4e22, 0xfe1d, @loopback={0xe0}, 0x9371}, 0x1c) sendto$inet6(r2, 0x0, 0x0, 0x20004000, &(0x7f0000000080)={0xa, 0x4e22, 0x40000000, @empty, 0x6}, 0x1c) r3 = socket$nl_generic(0x10, 0x3, 0x10) r4 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000080), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r3, 0x8933, &(0x7f0000000e40)={'wlan0\x00', 0x0}) r6 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r6, 0x8933, &(0x7f0000000040)={'tunl0\x00', 0x0}) sendmsg$nl_route_sched(r6, &(0x7f0000001200)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000440)=@newqdisc={0x48, 0x24, 0x4ee4e6a52ff56541, 0x0, 0x0, {0x0, 0x0, 0x0, r7, {}, {0xffff, 0xffff}}, [@TCA_STAB={0x24, 0x8, 0x0, 0x1, [{{0x1c, 0x1, {0x0, 0x0, 0x0, 0x0, 0x2, 0x1}}, {0x4}}]}]}, 0x48}, 0x1, 0x0, 0x0, 0x4000000}, 0x0) sendmsg$NL80211_CMD_GET_SCAN(r3, &(0x7f0000000f00)={0x0, 0x0, &(0x7f0000000ec0)={&(0x7f0000000180)=ANY=[@ANYBLOB="1c000000", @ANYRES16=r4, @ANYBLOB="210f00000000000000002000000008000300", @ANYRES32=r5, @ANYBLOB="804049ce8dd92b14e846d261b1d6f0fbcc547e8a5819b0d0e9bed507be123e78b0effc6d9ec2c62ef2a9366a044e760802647e6bda9d040000000000000003debcccdd9ae803a6ecd2697cce1df0a7"], 0x1c}, 0x1, 0x0, 0x0, 0x20000015}, 0x44000) connect$inet6(r1, &(0x7f0000000140)={0xa, 0x4e22, 0x23, @loopback, 0x23}, 0x1c) r8 = syz_init_net_socket$x25(0x9, 0x5, 0x0) ioctl$SIOCX25GSUBSCRIP(r8, 0x89e0, &(0x7f00000004c0)={'dvmrp0\x00', 0xe, 0xfffffffc}) socket$netlink(0x10, 0x3, 0x8000000004) close(0x3) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0xd, 0x4, &(0x7f0000000000)=@framed={{}, [@ldst={0x1, 0x0, 0x3, 0x2, 0x1, 0x74}]}, 0x0, 0x4}, 0x94) r9 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX_80211(r9, 0x8b18, &(0x7f0000000000)={'wlan0\x00'}) socket$inet_mptcp(0x2, 0x1, 0x106) 343.746238ms ago: executing program 0 (id=13507): r0 = openat$tcp_congestion(0xffffffffffffff9c, &(0x7f0000000000), 0x35c, 0x0) preadv(r0, &(0x7f0000000080)=[{&(0x7f00000014c0)=""/4081, 0xff1}], 0x1, 0x5, 0x45) pselect6(0x40, &(0x7f0000000000)={0x0, 0x40000000002, 0x1, 0x8000e, 0x2, 0x0, 0x100, 0x10001000}, 0x0, 0x0, 0x0, 0x0) r1 = socket$inet(0x2, 0x2, 0x0) ioctl$sock_SIOCGIFINDEX_80211(r1, 0x8b04, &(0x7f0000000000)={'wlan1\x00'}) sendmsg$nl_xfrm(0xffffffffffffffff, &(0x7f0000000540)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x100}, 0xc, &(0x7f0000000040)={&(0x7f0000000680)=ANY=[@ANYBLOB="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"], 0x10c}, 0x1, 0x0, 0x0, 0x800}, 0xbfe42bc0a6245cbe) r2 = socket$inet(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f0000000300)={'bond0\x00', 0x0}) r4 = socket(0x2, 0x80805, 0x0) r5 = socket(0x2, 0x80805, 0x0) getsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX3(r5, 0x84, 0x6f, 0x0, 0x0) r6 = socket$nl_route(0x10, 0x3, 0x0) socket$l2tp6(0xa, 0x2, 0x73) r7 = socket$l2tp6(0xa, 0x2, 0x73) setsockopt$inet6_int(r7, 0x29, 0x3, 0x0, 0x0) r8 = socket(0x10, 0x803, 0x0) bind$netlink(r8, &(0x7f0000000100)={0x10, 0x0, 0x25dfdbfd, 0x400}, 0xc) getsockname$packet(r8, &(0x7f0000000600)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000080)=0x14) sendmsg$nl_route(r6, &(0x7f0000024c80)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000024d40)=ANY=[@ANYBLOB="3c00000010000d042abd70000000000000000030", @ANYRES32=r9, @ANYBLOB="01000000000000001c00128009000100626f6e64000000000c0002800500010006000000"], 0x3c}, 0x1, 0x0, 0x0, 0x200400c1}, 0x0) socket$nl_route(0x10, 0x3, 0x0) r10 = socket$inet6(0xa, 0x1, 0x0) socket$key(0xf, 0x3, 0x2) setsockopt$inet6_IPV6_XFRM_POLICY(r10, 0x29, 0x23, &(0x7f0000000180)={{{@in=@private, @in6=@dev, 0x0, 0x0, 0x0, 0x0, 0x2}, {}, {}, 0x0, 0x0, 0x1}, {{@in=@local, 0x0, 0x6c}, 0x0, @in6=@loopback, 0x0, 0x0, 0x0, 0x4}}, 0xe8) r11 = socket(0x1, 0x803, 0x0) getsockname$packet(r11, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f00000002c0)=0x14) sendmsg$nl_route(r6, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000001400)=@newlink={0x44, 0x10, 0x401, 0x0, 0x0, {}, [@IFLA_LINKINFO={0x14, 0x12, 0x0, 0x1, @macvlan={{0xc}, {0x4}}}, @IFLA_LINK={0x8, 0x5, r3}, @IFLA_MASTER={0x8, 0xa, r12}]}, 0x44}, 0x1, 0x0, 0x0, 0x60040044}, 0x0) socket$nl_rdma(0x10, 0x3, 0x14) sendmsg$nl_generic(r4, &(0x7f0000000580)={&(0x7f0000000500)={0x10, 0x0, 0x0, 0x40}, 0xc, 0x0, 0x1, 0x0, 0x0, 0x9c97e3edff7aea80}, 0x4000000) r13 = socket(0x11, 0x3, 0x0) recvmsg(r13, &(0x7f0000000880)={&(0x7f00000002c0)=@in, 0x80, &(0x7f0000000780)=[{&(0x7f00000003c0)=""/226, 0xe2}], 0x1}, 0x40) 342.362612ms ago: executing program 4 (id=13508): sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f0000009b40)={0x0, 0x0, &(0x7f0000009b00)={&(0x7f0000000100)=ANY=[@ANYBLOB="140000011000010000000000000002000500000a3c000000090a010400000000000000000a000000080005400000002b09fffffffc1400000011000100e9ffffff000000000100a7ef28bbade5b4826d00"/100], 0x64}, 0x1, 0x0, 0x0, 0x4000850}, 0x24000000) (async) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000100)=ANY=[@ANYBLOB="4800000010000d0428bd7000fcdbff2500008000", @ANYRES32=0x0, @ANYBLOB="1000000000000000280012800b00010062726964676500001800028005001900840000000c001e"], 0x48}, 0x1, 0x0, 0x0, 0x10}, 0x4000000) (async) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000100)=ANY=[@ANYBLOB="500000001000010425bbe5ad600027842cf52300", @ANYRES32=0x0, @ANYBLOB="0300000000000000280012800a00010076786c616e00"], 0x50}, 0x1, 0x0, 0x0, 0x13d33d22cca65c15}, 0x4008840) (async) r0 = socket$nl_netfilter(0x10, 0x3, 0xc) (async) bind$xdp(0xffffffffffffffff, &(0x7f0000000100)={0x2c, 0x2}, 0x10) sendmsg$NFT_BATCH(r0, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000040)=ANY=[@ANYBLOB="140000001000040000000000000000000000000a20000000000a01020000000000000000010000000900010073797a300000000058000000160a01000000000000000000010000000900010073797a30000000000900020073797a30000000002c0003800800014000000000080002400000000018000380140001007465616d3000000000000000000000005c000000160a0101000b000000000000010000000900020073797a30000000000900010073797a3000000000300003802c00038014"], 0xfc}}, 0x0) (async) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000240)=@newqdisc={0x24, 0x24, 0x1, 0x70bd2a, 0x25dfdbfb, {0x0, 0x0, 0x0, 0x0, {0xffe0}, {0xf, 0x9}, {0x5}}}, 0x24}, 0x1, 0x0, 0x0, 0x40}, 0x0) (async) r1 = socket(0x28, 0x5, 0x0) (async) r2 = socket$alg(0x26, 0x5, 0x0) sendmsg$AUDIT_SET_FEATURE(r1, &(0x7f0000000340)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x400}, 0xc, &(0x7f0000000200)={&(0x7f00000000c0)={0x20, 0x3fa, 0x100, 0x70bd2a, 0x25dfdbfb, {0x1, 0x1, 0x1}, ["", "", "", ""]}, 0x20}, 0x1, 0x0, 0x0, 0x24000080}, 0x4000080) (async, rerun: 32) bind$alg(r2, &(0x7f0000000180)={0x26, 'aead\x00', 0x0, 0x0, 'authencesn(wp512-generic,cbc-camellia-aesni-avx2)\x00'}, 0x58) (rerun: 32) close(0x4) (async) r3 = socket$netlink(0x10, 0x3, 0x0) sendmmsg(r3, &(0x7f00000002c0), 0x40000000000009f, 0x0) 288.855915ms ago: executing program 6 (id=13509): sendmsg$netlink(0xffffffffffffffff, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000000)=[{0x0, 0x114}], 0x1}, 0x80) r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000280)='blkio.bfq.io_serviced\x00', 0x26e1, 0x0) mmap(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0xd, 0x12, r0, 0x1f4d2000) (async) r1 = socket(0x400000000010, 0x3, 0x0) r2 = socket$unix(0x1, 0x5, 0x0) ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r1, &(0x7f00000012c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000180)=@newqdisc={0x38, 0x24, 0x4ee4e6a52ff56541, 0x70bd2a, 0x25dfdbfd, {0x0, 0x0, 0x0, r3, {0x0, 0xfff1}, {0xffff, 0xffff}, {0x0, 0xf}}, [@qdisc_kind_options=@q_multiq={{0xb}, {0x8, 0x2, {0x42}}}]}, 0x38}}, 0x0) (async) sendmsg$nl_route_sched(r1, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000001300)=@newtfilter={0x38, 0x2c, 0xd27, 0x70bd24, 0x25dfdbfc, {0x0, 0x0, 0x0, r3, {0x4, 0xc}, {}, {0xfff1, 0x2}}, [@filter_kind_options=@f_matchall={{0xd}, {0x4}}]}, 0x38}, 0x1, 0x0, 0x0, 0x8848}, 0x80) (async) sendmsg$nl_route_sched(r1, &(0x7f0000006040)={0x0, 0x0, &(0x7f0000000140)={&(0x7f00000000c0)=@gettfilter={0x24, 0x2e, 0x1, 0x70bd28, 0x25dfdbfd, {0x0, 0x0, 0x0, r3, {0xfff2, 0xffe0}, {0x0, 0xfff1}, {0x7, 0x2}}}, 0x24}, 0x1, 0x0, 0x0, 0x20000801}, 0x4041080) (async) bpf$MAP_CREATE(0x0, &(0x7f0000000440)=@bloom_filter={0x1e, 0x5, 0xffffffff, 0x80000001, 0x4, 0xffffffffffffffff, 0x0, '\x00', r3, r0, 0x5, 0x5, 0x0, 0xa}, 0x50) r4 = socket(0x28, 0x5, 0x0) (async) r5 = socket(0x28, 0x5, 0x0) bind$vsock_stream(r5, &(0x7f0000000040)={0x28, 0x0, 0x0, @local}, 0x10) (async) listen(r5, 0x4) (async) connect$vsock_stream(r4, &(0x7f0000000080)={0x28, 0x0, 0x0, @local}, 0x10) sendmmsg(r4, &(0x7f0000000100)=[{{0x0, 0x2d, &(0x7f00000000c0)=[{&(0x7f0000000000)="1b", 0x40000}], 0x1}}], 0x51, 0x0) r6 = accept4$unix(r5, 0x0, 0x0, 0x800) (async) r7 = syz_genetlink_get_family_id$batadv(&(0x7f0000000280), r5) sendmsg$BATADV_CMD_GET_VLAN(r4, &(0x7f0000000380)={&(0x7f0000000240)={0x10, 0x0, 0x0, 0x8}, 0xc, &(0x7f0000000340)={&(0x7f0000000300)={0x2c, r7, 0x1, 0x70bd26, 0x25dfdbfc, {}, [@BATADV_ATTR_THROUGHPUT_OVERRIDE={0x8, 0x3b, 0x2}, @BATADV_ATTR_FRAGMENTATION_ENABLED={0x5}, @BATADV_ATTR_MULTICAST_FANOUT={0x8}]}, 0x2c}, 0x1, 0x0, 0x0, 0x4004811}, 0x10) (async) recvfrom$unix(r6, &(0x7f0000000140)=""/248, 0xf8, 0x40, 0x0, 0x0) (async) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000100)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f0000000000)=@newtaction={0x14, 0x30, 0xb}, 0x14}, 0x1, 0x0, 0x0, 0x4008000}, 0x0) 249.043814ms ago: executing program 4 (id=13510): r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r1 = openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0) ioctl$TUNSETIFF(r1, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x7101}) r2 = socket(0x400000000010, 0x3, 0x0) r3 = socket$unix(0x1, 0x1, 0x0) ioctl$sock_SIOCGIFINDEX(r3, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) socket$inet_icmp_raw(0x2, 0x3, 0x1) syz_init_net_socket$bt_hci(0x1f, 0x3, 0x5) close(0x4) syz_open_procfs$namespace(0x0, &(0x7f0000000040)='ns/uts\x00') unshare(0x6a040000) socket(0x8, 0x3, 0x0) r5 = socket(0x11, 0x3, 0x1) ioctl$sock_inet_SIOCSIFADDR(r5, 0x8916, &(0x7f00000003c0)={'wlan1\x00', {0x2, 0x0, @empty=0xcf05fdfd}}) sendmsg$nl_route_sched(r2, &(0x7f00000012c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000005c0)=@newqdisc={0x38, 0x24, 0x4ee4e6a52ff56541, 0x70bd2a, 0xffffffff, {0x0, 0x0, 0x0, r4, {0x0, 0xfff1}, {0xffff, 0xffff}}, [@qdisc_kind_options=@q_multiq={{0xb}, {0x8}}]}, 0x38}}, 0x0) sendmsg$nl_route_sched(r2, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000001500)=@newtfilter={0x74, 0x2c, 0xd27, 0x1070bd25, 0x25dfdbff, {0x0, 0x0, 0x0, r4, {0x0, 0xe}, {}, {0x8, 0xc}}, [@filter_kind_options=@f_flow={{0x9}, {0x44, 0x2, [@TCA_FLOW_EMATCHES={0x40, 0xb, 0x0, 0x1, [@TCA_EMATCH_TREE_LIST={0x34, 0x2, 0x0, 0x1, [@TCF_EM_U32={0x1c, 0x1, 0x0, 0x0, {{0x8, 0x3, 0x67e6}, {0x9, 0x3, 0x5, 0x9}}}, @TCF_EM_CANID={0x14, 0x2, 0x0, 0x0, {{0xf4d6, 0x7, 0x4}, {{0x3, 0x0, 0x1}, {0x1}}}}]}, @TCA_EMATCH_TREE_HDR={0x8, 0x1, {0x2}}]}]}}]}, 0x74}, 0x1, 0x0, 0x0, 0x400}, 0x0) syz_genetlink_get_family_id$netlbl_calipso(&(0x7f0000000000), r0) r6 = syz_genetlink_get_family_id$ieee802154(&(0x7f0000000800), r0) sendmsg$IEEE802154_SCAN_REQ(r0, &(0x7f0000000b40)={0x0, 0x0, &(0x7f0000000b00)={&(0x7f0000000ac0)={0x2c, r6, 0xd5c15c672e322a81, 0x0, 0x0, {}, [@IEEE802154_ATTR_CHANNELS={0x8}, @IEEE802154_ATTR_DURATION={0x5}, @IEEE802154_ATTR_SCAN_TYPE={0x5}]}, 0x2c}}, 0x0) 4.527928ms ago: executing program 7 (id=13511): r0 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$NL80211_CMD_GET_COALESCE(r0, &(0x7f0000000200)={&(0x7f0000000140)={0x10, 0x0, 0x0, 0x100}, 0xc, &(0x7f00000001c0)={&(0x7f0000000180)={0x14, 0x0, 0x100, 0x70bd25, 0x25dfdbfc, {{}, {@void, @void, @void}}, ["", ""]}, 0x14}, 0x1, 0x0, 0x0, 0x10}, 0x80) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) bind$unix(r1, &(0x7f0000000000)=@file={0x1, './file0\x00'}, 0x6e) connect$unix(r2, &(0x7f00000000c0)=@file={0x1, './file0\x00'}, 0x6e) r3 = syz_genetlink_get_family_id$nl80211(&(0x7f0000001ac0), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f0000001b00)={'wlan0\x00', 0x0}) sendmsg$NL80211_CMD_GET_MPP(r0, &(0x7f0000001c00)={&(0x7f0000001a80)={0x10, 0x0, 0x0, 0x80}, 0xc, &(0x7f0000001bc0)={&(0x7f0000001b40)={0x1c, r3, 0x5, 0x70bd25, 0x25dfdbfb, {{}, {@val={0x8, 0x3, r4}, @void}}}, 0x1c}, 0x1, 0x0, 0x0, 0x8010}, 0x40040) socket$nl_generic(0x10, 0x3, 0x10) (async) sendmsg$NL80211_CMD_GET_COALESCE(r0, &(0x7f0000000200)={&(0x7f0000000140)={0x10, 0x0, 0x0, 0x100}, 0xc, &(0x7f00000001c0)={&(0x7f0000000180)={0x14, 0x0, 0x100, 0x70bd25, 0x25dfdbfc, {{}, {@void, @void, @void}}, ["", ""]}, 0x14}, 0x1, 0x0, 0x0, 0x10}, 0x80) (async) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)) (async) bind$unix(r1, &(0x7f0000000000)=@file={0x1, './file0\x00'}, 0x6e) (async) connect$unix(r2, &(0x7f00000000c0)=@file={0x1, './file0\x00'}, 0x6e) (async) syz_genetlink_get_family_id$nl80211(&(0x7f0000001ac0), 0xffffffffffffffff) (async) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f0000001b00)={'wlan0\x00'}) (async) sendmsg$NL80211_CMD_GET_MPP(r0, &(0x7f0000001c00)={&(0x7f0000001a80)={0x10, 0x0, 0x0, 0x80}, 0xc, &(0x7f0000001bc0)={&(0x7f0000001b40)={0x1c, r3, 0x5, 0x70bd25, 0x25dfdbfb, {{}, {@val={0x8, 0x3, r4}, @void}}}, 0x1c}, 0x1, 0x0, 0x0, 0x8010}, 0x40040) (async) 0s ago: executing program 6 (id=13512): r0 = socket$kcm(0x10, 0x2, 0x10) r1 = socket$nl_netfilter(0x10, 0x3, 0xc) (async) r2 = socket$nl_generic(0x10, 0x3, 0x10) r3 = syz_genetlink_get_family_id$devlink(&(0x7f0000000140), 0xffffffffffffffff) sendmsg$DEVLINK_CMD_PORT_UNSPLIT(r2, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000480)={0x3c, r3, 0x731, 0x0, 0x20, {0x38}, [{{@nsim={{0xe}, {0xf, 0x2, {'netdevsim', 0x0}}}, {0x8, 0x3, 0x4}}}]}, 0x3c}, 0x1, 0x2}, 0x0) (async) sendmsg$NFQNL_MSG_CONFIG(r1, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000180)={0x1c, 0x2, 0x3, 0x3, 0x0, 0x0, {0x2, 0x0, 0xffff}, [@NFQA_CFG_CMD={0x8, 0x1, {0x1}}]}, 0x1c}}, 0x0) (async) r4 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFQNL_MSG_CONFIG(r4, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000080)={0x14, 0x2, 0x3, 0x401}, 0x14}}, 0x0) (async) sendmsg$NFT_BATCH(r4, &(0x7f0000000b80)={&(0x7f0000000b00)={0x10, 0x0, 0x0, 0x100}, 0xc, &(0x7f0000000b40)={&(0x7f0000002340)={{0x14, 0x10, 0x1, 0x0, 0x0, {0xa}}, [@NFT_MSG_NEWSET={0x288, 0x9, 0xa, 0x401, 0x0, 0x0, {0x0, 0x0, 0x1}, [@NFTA_SET_EXPR={0x23c, 0x11, 0x0, 0x1, @range={{0xa}, @val={0x22c, 0x2, 0x0, 0x1, [@NFTA_RANGE_TO_DATA={0x228, 0x4, 0x0, 0x1, [@NFTA_DATA_VERDICT={0x24, 0x2, 0x0, 0x1, [@NFTA_VERDICT_CODE={0x8, 0x1, 0x0, 0x1, 0xffffffffffffffff}, @NFTA_VERDICT_CODE={0x8, 0x1, 0x0, 0x1, 0xfffffffffffffffb}, @NFTA_VERDICT_CHAIN_ID={0x8, 0x3, 0x1, 0x0, 0x3}, @NFTA_VERDICT_CHAIN_ID={0x8, 0x3, 0x1, 0x0, 0x2}]}, @NFTA_DATA_VERDICT={0x28, 0x2, 0x0, 0x1, [@NFTA_VERDICT_CHAIN_ID={0x8, 0x3, 0x1, 0x0, 0x4}, @NFTA_VERDICT_CODE={0x8, 0x1, 0x0, 0x1, 0xfffffffffffffffb}, @NFTA_VERDICT_CODE={0x8, 0x1, 0x0, 0x1, 0xfffffffffffffffb}, @NFTA_VERDICT_CHAIN={0x9, 0x2, 'syz0\x00'}]}, @NFTA_DATA_VALUE={0xaa, 0x1, "37da6248a4f2fb8618ec323e9603bfb12d5e767c3d92c4935de96383377a536b69042aff798c6378655227bdbdecefe24be314fec4a5d4c62f700b07d45ed85ded47935deeae022171482bbd5c5bedeebd8cbced537ac18c6c86b6d6b9c9b87a4c24e595783ea113cf945640be8a92164757dd177a99c8dfe1e25cb469037f9559e33b816d8f8079456f3507cbffb5197c9b84a2d7ece25e3b746ed24eeb547e253c833dcc08"}, @NFTA_DATA_VERDICT={0x4}, @NFTA_DATA_VERDICT={0x18, 0x2, 0x0, 0x1, [@NFTA_VERDICT_CODE={0x8, 0x1, 0x0, 0x1, 0xfffffffffffffffd}, @NFTA_VERDICT_CHAIN={0x9, 0x2, 'syz1\x00'}]}, @NFTA_DATA_VERDICT={0x20, 0x2, 0x0, 0x1, [@NFTA_VERDICT_CODE={0x8, 0x1, 0x0, 0x1, 0xfffffffffffffffc}, @NFTA_VERDICT_CHAIN_ID={0x8, 0x3, 0x1, 0x0, 0x1}, @NFTA_VERDICT_CHAIN={0x9, 0x2, 'syz0\x00'}]}, @NFTA_DATA_VALUE={0xee, 0x1, "9d5820ae64b755608118aa3bad93b1aa87f3b68297e4e8953705fc9e3e3c9ffa2d1eba7b7a692d05285544fa3a3624133afab0d26ff72d4c3f89096156238d0591cdb0858c8f304b5ba6df081d16fc5e16039f7faca03355eae69f7738f8e435407b12453c9b25c41cef6dfbc8ed643228ddbaf94749cafcc4a79643177a44e935a9ea4b0fb9ac11a99fd5d6b86a0e541a666eb271640301146040aaccf123a31aaed6fe894165c87cd0a4ea4ed386f96c839842e00529d294c30857c4300282e43f3698cf10828f415f8d73d0ced8f63957dc35d3699afa669642d256b1262a6bc0d1e47b9ee4912410"}]}]}}}, @NFTA_SET_DATA_TYPE={0x8, 0x6, 0x1, 0x0, 0xffffff00}, @NFTA_SET_EXPR={0x10, 0x11, 0x0, 0x1, @lookup={{0xb}, @void}}, @NFTA_SET_POLICY={0x8}, @NFTA_SET_HANDLE={0xc, 0x10, 0x1, 0x0, 0x5}, @NFTA_SET_NAME={0x9, 0x2, 'syz0\x00'}]}, @NFT_MSG_NEWSET={0x120, 0x9, 0xa, 0x101, 0x0, 0x0, {0x2, 0x0, 0xa}, [@NFTA_SET_TIMEOUT={0xc, 0xb, 0x1, 0x0, 0x56a}, @NFTA_SET_EXPRESSIONS={0x78, 0x12, 0x0, 0x1, [{0xc, 0x1, 0x0, 0x1, @dup_ipv6={{0x8}, @void}}, {0x1c, 0x1, 0x0, 0x1, @meta={{0x9}, @val={0xc, 0x2, 0x0, 0x1, [@NFTA_META_DREG={0x8, 0x1, 0x1, 0x0, 0x14}]}}}, {0x4c, 0x1, 0x0, 0x1, @hash={{0x9}, @val={0x3c, 0x2, 0x0, 0x1, [@NFTA_HASH_DREG={0x8, 0x2, 0x1, 0x0, 0x12}, @NFTA_HASH_MODULUS={0x8, 0x4, 0x1, 0x0, 0x9}, @NFTA_HASH_MODULUS={0x8, 0x4, 0x1, 0x0, 0x4}, @NFTA_HASH_OFFSET={0x8, 0x6, 0x1, 0x0, 0x5}, @NFTA_HASH_TYPE={0x8}, @NFTA_HASH_MODULUS={0x8, 0x4, 0x1, 0x0, 0x7}, @NFTA_HASH_LEN={0x8, 0x3, 0x1, 0x0, 0x9}]}}}]}, @NFTA_SET_TABLE={0x9, 0x1, 'syz0\x00'}, @NFTA_SET_NAME={0x9, 0x2, 'syz2\x00'}, @NFTA_SET_EXPRESSIONS={0x70, 0x12, 0x0, 0x1, [{0x10, 0x1, 0x0, 0x1, @dynset={{0xb}, @void}}, {0x10, 0x1, 0x0, 0x1, @lookup={{0xb}, @void}}, {0x14, 0x1, 0x0, 0x1, @masq={{0x9}, @val={0x4}}}, {0x28, 0x1, 0x0, 0x1, @connlimit={{0xe}, @val={0x14, 0x2, 0x0, 0x1, [@NFTA_CONNLIMIT_COUNT={0x8, 0x1, 0x1, 0x0, 0x400}, @NFTA_CONNLIMIT_COUNT={0x8, 0x1, 0x1, 0x0, 0x4}]}}}, {0x10, 0x1, 0x0, 0x1, @redir={{0xa}, @void}}]}]}, @NFT_MSG_DELFLOWTABLE={0x44, 0x18, 0xa, 0x301, 0x0, 0x0, {0x7, 0x0, 0x3}, [@NFTA_FLOWTABLE_NAME={0x9, 0x2, 'syz2\x00'}, @NFTA_FLOWTABLE_TABLE={0x9, 0x1, 'syz1\x00'}, @NFTA_FLOWTABLE_HANDLE={0xc, 0x5, 0x1, 0x0, 0x1}, @NFTA_FLOWTABLE_NAME={0x9, 0x2, 'syz2\x00'}]}], {0x14, 0x11, 0x1, 0x0, 0x0, {0x2}}}, 0x414}, 0x1, 0x0, 0x0, 0x20004905}, 0x20000000) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) sendmsg$inet(r6, &(0x7f0000001b00)={0x0, 0x0, 0x0, 0x0, &(0x7f0000001d80)=ANY=[@ANYBLOB="28010000000000000100000001"], 0x128}, 0x0) recvmsg$unix(r5, &(0x7f0000000000)={0x0, 0x0, 0x0, 0x0, &(0x7f0000000080), 0x100}, 0x0) (async) r7 = socket$nl_route(0x10, 0x3, 0x0) (async) socketpair$unix(0x1, 0x2, 0x0, &(0x7f00000001c0)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$ifreq_SIOCGIFINDEX_batadv_hard(r8, 0x8933, &(0x7f0000000840)={'batadv_slave_0\x00', 0x0}) r10 = bpf$BPF_PROG_WITH_BTFID_LOAD(0x5, &(0x7f0000000280)=@bpf_lsm={0x6, 0x3, &(0x7f00000003c0)=ANY=[@ANYBLOB="18000000003f000000000000000000f195"], &(0x7f0000000140)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x40, '\x00', r9}, 0x90) sendmsg$nl_route(r7, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000580)={&(0x7f0000000380)=ANY=[@ANYBLOB="340000001000010027bd70000000000000000000", @ANYRES32=r8, @ANYBLOB="004100000000000014002b8008000100", @ANYRES32=r10], 0x34}}, 0x4008000) close(0x4) (async) sendmsg$kcm(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000480)=[{&(0x7f0000000000)="1400000010003507d25a806f8c6394f90324fc60", 0x14}], 0x1}, 0x0) (async) recvmmsg(r0, &(0x7f0000000980)=[{{0x0, 0x0, &(0x7f00000003c0)=[{&(0x7f0000000ec0)=""/136, 0x88}, {&(0x7f0000001340)=""/4094, 0xffe}, {&(0x7f0000000040)=""/114, 0x72}, {&(0x7f00000001c0)=""/60, 0x3c}, {&(0x7f0000000200)=""/144, 0xdd}], 0x5}, 0x1}, {{0x0, 0x0, 0x0}}, {{&(0x7f0000000a80)=@in6={0xa, 0x0, 0x0, @mcast2}, 0x0, &(0x7f0000000180)=[{&(0x7f00000002c0)=""/131}], 0x0, &(0x7f00000004c0)=""/205}, 0x2}, {{&(0x7f00000005c0)=@pppoe={0x18, 0x0, {0x0, @broadcast}}, 0x0, &(0x7f0000000900)=[{&(0x7f0000000380)=""/20}, {&(0x7f0000000640)=""/194}, {&(0x7f0000000440)=""/50}, {&(0x7f0000000740)=""/206}, {&(0x7f0000000840)=""/55}, {&(0x7f0000000880)=""/111}]}, 0x2}], 0x2, 0x0, 0x0) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x200000d, 0x4008031, 0xffffffffffffffff, 0x0) (async) r11 = openat$tun(0xffffffffffffff9c, &(0x7f0000000040), 0xc2300, 0x0) ioctl$TUNSETIFF(r11, 0x400454ca, &(0x7f00000000c0)={'syzkaller0\x00', 0x84aebfbd6349b7f2}) (async) r12 = bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000300)={0x6, 0x3, &(0x7f0000000240)=@framed={{0x18, 0x0, 0x0, 0x0, 0x4}}, &(0x7f00000001c0)='syzkaller\x00'}, 0x94) (async) r13 = socket$packet(0x11, 0x3, 0x300) ioctl$sock_SIOCGIFINDEX(r13, 0x8933, &(0x7f0000000080)={'syz_tun\x00', 0x0}) bpf$BPF_LINK_CREATE_XDP(0x1c, &(0x7f0000000500)={r12, r14, 0x25, 0x4, @val=@tcx={@void, @value=r12}}, 0x1c) (async) setsockopt$sock_attach_bpf(r1, 0x1, 0x32, &(0x7f0000000c00)=r12, 0x4) r15 = socket(0x10, 0x803, 0x0) ioctl$sock_SIOCGIFINDEX(r15, 0x8933, &(0x7f0000000100)={'syzkaller0\x00'}) kernel console output (not intermixed with test programs): 75] Bluetooth: hci3: command tx timeout [ 1161.997545][T17287] __nla_validate_parse: 3 callbacks suppressed [ 1161.997563][T17287] netlink: 52 bytes leftover after parsing attributes in process `syz.4.11856'. [ 1162.105367][T17288] netlink: 'syz.4.11856': attribute type 17 has an invalid length. [ 1162.122493][T17288] netlink: 4 bytes leftover after parsing attributes in process `syz.4.11856'. [ 1162.134151][T17288] netlink: 28 bytes leftover after parsing attributes in process `syz.4.11856'. [ 1163.524093][T17088] team0: Port device team_slave_1 added [ 1163.596439][T17088] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 1163.603418][T17088] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 1163.640011][T17088] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 1163.704198][T17088] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 1163.716947][T17088] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 1163.755537][T17305] netlink: 4 bytes leftover after parsing attributes in process `syz.4.11861'. [ 1163.774741][T17088] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 1163.803346][T17306] netlink: 8 bytes leftover after parsing attributes in process `syz.3.11860'. [ 1163.958379][T17088] hsr_slave_0: entered promiscuous mode [ 1163.965495][T17088] hsr_slave_1: entered promiscuous mode [ 1163.972904][T17088] debugfs: 'hsr0' already exists in 'hsr' [ 1164.036484][T17088] Cannot create hsr debugfs directory [ 1164.077103][T22375] Bluetooth: hci3: command tx timeout [ 1164.086768][T17314] netlink: 12 bytes leftover after parsing attributes in process `syz.5.11862'. [ 1164.137769][T17317] netlink: 10 bytes leftover after parsing attributes in process `syz.2.11864'. [ 1164.225154][T17327] netlink: 4 bytes leftover after parsing attributes in process `syz.3.11865'. [ 1164.247200][T17327] : renamed from hsr0 (while UP) [ 1164.265324][T17327] netlink: 4 bytes leftover after parsing attributes in process `syz.3.11865'. [ 1164.621919][T17347] netlink: 4 bytes leftover after parsing attributes in process `syz.5.11871'. [ 1164.992463][T17378] netlink: 'syz.4.11880': attribute type 11 has an invalid length. [ 1165.111260][T17383] netlink: 'syz.3.11883': attribute type 1 has an invalid length. [ 1165.209753][T17383] 8021q: adding VLAN 0 to HW filter on device bond12 [ 1165.279723][T17389] bond12: (slave gretap1): making interface the new active one [ 1165.297738][T17389] bond12: (slave gretap1): Enslaving as an active interface with an up link [ 1165.315865][T17088] netdevsim netdevsim0 netdevsim0: renamed from eth0 [ 1165.340800][T17088] netdevsim netdevsim0 netdevsim1: renamed from eth1 [ 1165.365467][T17088] netdevsim netdevsim0 netdevsim2: renamed from eth2 [ 1165.385026][T17088] netdevsim netdevsim0 netdevsim3: renamed from eth3 [ 1165.586433][T17088] 8021q: adding VLAN 0 to HW filter on device bond0 [ 1165.627442][T17088] 8021q: adding VLAN 0 to HW filter on device team0 [ 1165.643792][T30493] bridge0: port 1(bridge_slave_0) entered blocking state [ 1165.651011][T30493] bridge0: port 1(bridge_slave_0) entered forwarding state [ 1165.721192][T30493] bridge0: port 2(bridge_slave_1) entered blocking state [ 1165.728433][T30493] bridge0: port 2(bridge_slave_1) entered forwarding state [ 1165.850269][T17418] openvswitch: netlink: Missing key (keys=40, expected=10000000) [ 1166.059299][T17432] delete_channel: no stack [ 1166.157539][T22375] Bluetooth: hci3: command tx timeout [ 1166.395140][T17088] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 1166.402686][ C0] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1166.413626][ C0] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1166.432393][T30512] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1166.441603][ C0] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1166.614329][T17088] veth0_vlan: entered promiscuous mode [ 1166.636428][T22145] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1166.649181][T17088] veth1_vlan: entered promiscuous mode [ 1166.870946][T17088] veth0_macvtap: entered promiscuous mode [ 1166.912950][T17088] veth1_macvtap: entered promiscuous mode [ 1166.991324][T17088] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 1167.028367][T17088] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 1167.083460][T30509] netdevsim netdevsim0 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 1167.124454][T30509] netdevsim netdevsim0 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 1167.168266][T30509] netdevsim netdevsim0 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 1167.190937][T30509] netdevsim netdevsim0 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 1167.548083][T30509] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 1167.571525][T30509] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 1167.579074][T17519] __nla_validate_parse: 6 callbacks suppressed [ 1167.579095][T17519] netlink: 4 bytes leftover after parsing attributes in process `syz.2.11910'. [ 1167.647042][T17521] netlink: 28 bytes leftover after parsing attributes in process `syz.3.11912'. [ 1167.686271][ T47] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1167.748561][T30506] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 1167.759182][T30506] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 1167.908686][T17529] netlink: 8 bytes leftover after parsing attributes in process `syz.2.11913'. [ 1167.941509][T17529] netlink: 12 bytes leftover after parsing attributes in process `syz.2.11913'. [ 1167.951257][T17531] ksmbd: Daemon and kernel module version mismatch. ksmbd: 124, kernel module: 1. User-space ksmbd should terminate. [ 1168.011021][T17534] netlink: 12 bytes leftover after parsing attributes in process `syz.3.11914'. [ 1168.227071][T17548] bond4: option mode: unable to set because the bond device is up [ 1168.248464][T17546] netlink: 4 bytes leftover after parsing attributes in process `syz.5.11917'. [ 1168.260658][T17548] bond4: (slave lo): enslaved VLAN challenged slave. Adding VLANs will be blocked as long as it is part of bond. [ 1168.285704][T17546] netlink: 24 bytes leftover after parsing attributes in process `syz.5.11917'. [ 1168.315131][T17548] 8021q: adding VLAN 0 to HW filter on device bond4 [ 1168.317248][T17546] netlink: 4 bytes leftover after parsing attributes in process `syz.5.11917'. [ 1168.361430][T17546] netlink: 24 bytes leftover after parsing attributes in process `syz.5.11917'. [ 1168.436323][T17548] bond4: (slave lo): making interface the new active one [ 1168.462551][T17099] Bluetooth: hci1: unexpected cc 0x0c03 length: 249 > 1 [ 1168.476684][T17099] Bluetooth: hci1: unexpected cc 0x1003 length: 249 > 9 [ 1168.486651][T17099] Bluetooth: hci1: unexpected cc 0x1001 length: 249 > 9 [ 1168.496571][T17099] Bluetooth: hci1: unexpected cc 0x0c23 length: 249 > 4 [ 1168.505892][T17099] Bluetooth: hci1: unexpected cc 0x0c38 length: 249 > 2 [ 1168.537773][T17548] bond4: (slave lo): Enslaving as an active interface with an up link [ 1168.579328][T17548] A link change request failed with some changes committed already. Interface tunl0 may have been left with an inconsistent configuration, please check. [ 1168.601553][T17552] netlink: 24 bytes leftover after parsing attributes in process `syz.5.11919'. [ 1168.612508][T17500] vxcan1 speed is unknown, defaulting to 1000 [ 1168.716730][T22145] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1168.879971][T17560] netlink: 'syz.3.11920': attribute type 1 has an invalid length. [ 1169.360209][T17579] tc_dump_action: action bad kind [ 1169.378269][T17581] batadv1: entered allmulticast mode [ 1169.429370][T17579] tc_dump_action: action bad kind [ 1169.569641][T17581] xt_CT: You must specify a L4 protocol and not use inversions on it [ 1169.596128][ C0] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1169.657084][T17549] vxcan1 speed is unknown, defaulting to 1000 [ 1169.949324][T17613] xt_CT: No such helper "pptp" [ 1170.561814][T17099] Bluetooth: hci1: command tx timeout [ 1170.812285][T17549] chnl_net:caif_netlink_parms(): no params data found [ 1170.884515][T30493] net_ratelimit: 2 callbacks suppressed [ 1170.884533][T30493] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1170.899164][ C0] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1171.151597][T17671] netlink: 'syz.0.11950': attribute type 10 has an invalid length. [ 1171.231179][T17671] batman_adv: batadv0: Adding interface: netdevsim0 [ 1171.240442][T17671] batman_adv: batadv0: The MTU of interface netdevsim0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 1171.267552][T17671] batman_adv: batadv0: Not using interface netdevsim0 (retrying later): interface not active [ 1171.355489][T17680] netlink: 'syz.5.11952': attribute type 1 has an invalid length. [ 1171.364259][T17680] netlink: 'syz.5.11952': attribute type 2 has an invalid length. [ 1171.432848][T17549] bridge0: port 1(bridge_slave_0) entered blocking state [ 1171.441434][T17549] bridge0: port 1(bridge_slave_0) entered disabled state [ 1171.451789][T17549] bridge_slave_0: entered allmulticast mode [ 1171.459738][T17549] bridge_slave_0: entered promiscuous mode [ 1171.474784][T17549] bridge0: port 2(bridge_slave_1) entered blocking state [ 1171.484383][T17549] bridge0: port 2(bridge_slave_1) entered disabled state [ 1171.492204][T17549] bridge_slave_1: entered allmulticast mode [ 1171.515065][T17549] bridge_slave_1: entered promiscuous mode [ 1171.620463][T17549] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 1171.663421][T17549] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 1171.740209][T17549] team0: Port device team_slave_0 added [ 1171.752196][T17549] team0: Port device team_slave_1 added [ 1171.829868][T17549] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 1171.838388][T22145] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1171.873125][T17549] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 1171.955076][T17549] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 1172.011854][T17549] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 1172.028543][T17549] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 1172.070371][T17549] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 1172.162764][T30493] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1172.171204][ C0] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1172.235746][T17549] hsr_slave_0: entered promiscuous mode [ 1172.243119][T17549] hsr_slave_1: entered promiscuous mode [ 1172.251271][T17549] debugfs: 'hsr0' already exists in 'hsr' [ 1172.260481][T17549] Cannot create hsr debugfs directory [ 1172.325363][T17732] veth7: entered promiscuous mode [ 1172.333518][T17732] veth7: entered allmulticast mode [ 1172.461096][T17740] ip6gre0: left allmulticast mode [ 1172.490592][T17740] team_slave_0: left allmulticast mode [ 1172.594185][T17740] vlan2: left allmulticast mode [ 1172.608699][T17740] hsr_slave_1: left allmulticast mode [ 1172.624376][T17740] bond3: left allmulticast mode [ 1172.637155][T17099] Bluetooth: hci1: command tx timeout [ 1172.646743][T17740] ipvlan2: left allmulticast mode [ 1172.659631][T17740] batadv_slave_1: left allmulticast mode [ 1172.681570][T17740] macvtap1: left allmulticast mode [ 1172.687326][T17740] veth0_macvtap: left allmulticast mode [ 1172.708406][T17740] vlan4: left allmulticast mode [ 1172.713491][T17740] bond7: left allmulticast mode [ 1172.740377][T17740] gtp0: left allmulticast mode [ 1172.760663][T17740] geneve3: left allmulticast mode [ 1172.767927][T17740] macvtap2: left allmulticast mode [ 1172.780782][T17740] veth1_vlan: left allmulticast mode [ 1172.880771][T22145] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1172.917384][T17752] __nla_validate_parse: 13 callbacks suppressed [ 1172.917405][T17752] netlink: 4 bytes leftover after parsing attributes in process `syz.5.11972'. [ 1172.955774][T17749] netlink: 200 bytes leftover after parsing attributes in process `syz.5.11972'. [ 1172.980246][T17763] x_tables: ip6_tables: tcp match: only valid for protocol 6 [ 1173.190373][T17777] netlink: 12 bytes leftover after parsing attributes in process `syz.0.11976'. [ 1173.388759][T17549] netdevsim netdevsim2 netdevsim3 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 1173.412202][T17549] netdevsim netdevsim2 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1173.438074][T17549] netdevsim netdevsim2 netdevsim3 (unregistering): unset [1, 1] type 2 family 0 port 256 - 0 [ 1173.587325][T17549] netdevsim netdevsim2 netdevsim2 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 1173.606545][T17549] netdevsim netdevsim2 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1173.619401][T17549] netdevsim netdevsim2 netdevsim2 (unregistering): unset [1, 1] type 2 family 0 port 256 - 0 [ 1173.704532][T17549] netdevsim netdevsim2 netdevsim1 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 1173.715283][T17549] netdevsim netdevsim2 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1173.730582][T17549] netdevsim netdevsim2 netdevsim1 (unregistering): unset [1, 1] type 2 family 0 port 256 - 0 [ 1173.792201][T17800] netlink: 4 bytes leftover after parsing attributes in process `syz.0.11983'. [ 1173.847055][T17549] netdevsim netdevsim2  (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 1173.858893][T17549] netdevsim netdevsim2  (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1173.870324][T17549] netdevsim netdevsim2  (unregistering): unset [1, 1] type 2 family 0 port 256 - 0 [ 1173.921751][T17802] netlink: 40 bytes leftover after parsing attributes in process `syz.5.11984'. [ 1173.932924][ T47] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1173.945917][T17809] x_tables: duplicate underflow at hook 2 [ 1174.061339][T17816] IPVS: set_ctl: invalid protocol: 22 172.30.0.1:20000 [ 1174.198334][T17549] netdevsim netdevsim2 netdevsim0: renamed from eth0 [ 1174.229207][T17549] netdevsim netdevsim2 netdevsim1: renamed from eth1 [ 1174.244500][T17549] netdevsim netdevsim2 netdevsim2: renamed from eth2 [ 1174.260812][T17549] netdevsim netdevsim2 netdevsim3: renamed from eth3 [ 1174.446524][T17549] 8021q: adding VLAN 0 to HW filter on device bond0 [ 1174.485272][T17549] 8021q: adding VLAN 0 to HW filter on device team0 [ 1174.512484][T30512] bridge0: port 1(bridge_slave_0) entered blocking state [ 1174.519734][T30512] bridge0: port 1(bridge_slave_0) entered forwarding state [ 1174.543335][T30506] bridge0: port 2(bridge_slave_1) entered blocking state [ 1174.550684][T30506] bridge0: port 2(bridge_slave_1) entered forwarding state [ 1174.716252][T17099] Bluetooth: hci1: command tx timeout [ 1174.869032][T17549] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 1174.951025][T17549] veth0_vlan: entered promiscuous mode [ 1174.957241][T22145] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1174.974210][T17549] veth1_vlan: entered promiscuous mode [ 1175.038771][T17549] veth0_macvtap: entered promiscuous mode [ 1175.063325][T17549] veth1_macvtap: entered promiscuous mode [ 1175.112550][T17549] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 1175.141002][T17549] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 1175.162438][T30505] netdevsim netdevsim2 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 1175.177431][T30505] netdevsim netdevsim2 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 1175.201803][T30505] netdevsim netdevsim2 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 1175.211443][T30505] netdevsim netdevsim2 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 1175.227782][T17837] vxcan1 speed is unknown, defaulting to 1000 [ 1175.350283][T30506] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 1175.356881][ T796] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1175.367993][T30506] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 1175.443727][T30505] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 1175.452582][T30505] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 1175.520909][T17857] netlink: 104 bytes leftover after parsing attributes in process `syz.5.11996'. [ 1175.537685][T17857] netlink: 'syz.5.11996': attribute type 3 has an invalid length. [ 1175.754461][T17866] syzkaller0: entered promiscuous mode [ 1175.762714][T17866] syzkaller0: entered allmulticast mode [ 1175.791326][T14174] lec:lec_start_xmit: lec0:No lecd attached [ 1175.996100][T22135] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1176.617140][T17886] netlink: 4 bytes leftover after parsing attributes in process `syz.5.12004'. [ 1176.636419][T30510] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1176.645029][ C0] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1176.797794][T17099] Bluetooth: hci1: command tx timeout [ 1176.810280][T17898] netlink: 40 bytes leftover after parsing attributes in process `syz.0.12007'. [ 1177.036138][ T9373] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1177.108399][T17911] netlink: 276 bytes leftover after parsing attributes in process `syz.2.12012'. [ 1177.285981][ T1299] aoe: packet could not be sent on bond0. consider increasing tx_queue_len [ 1177.300247][ T1299] aoe: packet could not be sent on ipvlan1. consider increasing tx_queue_len [ 1177.429244][T17940] netlink: 12 bytes leftover after parsing attributes in process `syz.0.12020'. [ 1177.572919][T17955] netlink: 'syz.4.12024': attribute type 9 has an invalid length. [ 1177.582942][T17955] netlink: 'syz.4.12024': attribute type 11 has an invalid length. [ 1177.590716][T17940] netdevsim netdevsim0 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1177.592294][T17955] netlink: 'syz.4.12024': attribute type 12 has an invalid length. [ 1177.615158][T17957] netlink: 'syz.5.12023': attribute type 2 has an invalid length. [ 1177.690612][T17960] Can not set IPV6_FL_F_REFLECT if flowlabel_consistency sysctl is enable [ 1177.699969][T17960] netlink: 'syz.4.12026': attribute type 7 has an invalid length. [ 1177.699969][T17961] netlink: 'syz.4.12026': attribute type 7 has an invalid length. [ 1177.921886][T30505] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1177.930436][ C1] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1178.029548][T17940] netdevsim netdevsim0 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1178.076868][T22135] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1178.138101][T17966] IPVS: length: 71 != 8 [ 1178.152765][T17940] netdevsim netdevsim0 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1178.233962][T17968] netdevsim netdevsim4: Firmware load for './file0/file0/../file0' refused, path contains '..' component [ 1178.278442][T17940] batman_adv: batadv0: Removing interface: netdevsim0 [ 1178.288848][T17968] __nla_validate_parse: 7 callbacks suppressed [ 1178.288865][T17968] netlink: 8 bytes leftover after parsing attributes in process `syz.4.12029'. [ 1178.306667][T17940] netdevsim netdevsim0 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1178.324016][T17972] netlink: 'syz.5.12031': attribute type 4 has an invalid length. [ 1178.329953][T17968] macsec1: entered promiscuous mode [ 1178.349049][T17972] netlink: 'syz.5.12031': attribute type 4 has an invalid length. [ 1178.489374][T30493] netdevsim netdevsim0 eth0: set [1, 0] type 2 family 0 port 6081 - 0 [ 1178.543283][T30505] netdevsim netdevsim0 eth1: set [1, 0] type 2 family 0 port 6081 - 0 [ 1178.574398][T30506] netdevsim netdevsim0 eth2: set [1, 0] type 2 family 0 port 6081 - 0 [ 1178.589415][T17987] Bluetooth: hci1: Opcode 0x0c20 failed: -4 [ 1178.612884][T30506] netdevsim netdevsim0 eth3: set [1, 0] type 2 family 0 port 6081 - 0 [ 1178.690847][T17993] netlink: 28 bytes leftover after parsing attributes in process `syz.5.12037'. [ 1178.703125][T17993] netlink: 28 bytes leftover after parsing attributes in process `syz.5.12037'. [ 1178.758429][T17999] netlink: 'syz.2.12038': attribute type 6 has an invalid length. [ 1178.837929][T17999] netlink: 'syz.2.12038': attribute type 6 has an invalid length. [ 1179.086715][T18023] syzkaller0: entered promiscuous mode [ 1179.095117][T18023] syzkaller0: entered allmulticast mode [ 1179.191804][T18031] syzkaller0: entered promiscuous mode [ 1179.198223][T18031] syzkaller0: entered allmulticast mode [ 1179.210235][T18031] tipc: Started in network mode [ 1179.215157][T18031] tipc: Node identity bace2eb86d97, cluster identity 4711 [ 1179.223317][T18031] tipc: Enabled bearer , priority 0 [ 1179.232567][T18030] tipc: Resetting bearer [ 1179.252136][T18030] tipc: Disabling bearer [ 1180.054540][ T29] audit: type=1107 audit(1771949571.930:24): pid=18072 uid=0 auid=4294967295 ses=4294967295 subj=unconfined msg='~v F]' [ 1180.154999][T18077] bond5: option lacp_rate: mode dependency failed, not supported in mode active-backup(1) [ 1180.191123][T18077] bond5 (unregistering): Released all slaves [ 1180.340680][T18092] ip6tnl0: entered allmulticast mode [ 1180.432280][T18096] netlink: 8 bytes leftover after parsing attributes in process `syz.2.12069'. [ 1180.536918][T18105] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 1180.640950][T17099] block nbd7: Receive control failed (result -107) [ 1180.648779][T22375] Bluetooth: hci1: command 0x0c20 tx timeout [ 1180.686109][T18109] nbd7: detected capacity change from 0 to 127 [ 1180.693903][T17337] block nbd7: Dead connection, failed to find a fallback [ 1180.701848][T17337] block nbd7: shutting down sockets [ 1180.717488][T17337] blk_print_req_error: 138 callbacks suppressed [ 1180.717504][T17337] I/O error, dev nbd7, sector 0 op 0x0:(READ) flags 0x800000 phys_seg 1 prio class 2 [ 1180.736521][T17337] buffer_io_error: 138 callbacks suppressed [ 1180.736537][T17337] Buffer I/O error on dev nbd7, logical block 0, async page read [ 1180.752572][T17337] I/O error, dev nbd7, sector 2 op 0x0:(READ) flags 0x800000 phys_seg 1 prio class 2 [ 1180.762927][T17337] Buffer I/O error on dev nbd7, logical block 1, async page read [ 1180.771677][T17337] I/O error, dev nbd7, sector 4 op 0x0:(READ) flags 0x800000 phys_seg 1 prio class 2 [ 1180.774695][T18113] netlink: 20 bytes leftover after parsing attributes in process `syz.2.12074'. [ 1180.781392][T17337] Buffer I/O error on dev nbd7, logical block 2, async page read [ 1180.781504][T17337] I/O error, dev nbd7, sector 6 op 0x0:(READ) flags 0x800000 phys_seg 1 prio class 2 [ 1180.813185][T17337] Buffer I/O error on dev nbd7, logical block 3, async page read [ 1180.825116][T17337] I/O error, dev nbd7, sector 0 op 0x0:(READ) flags 0x800000 phys_seg 1 prio class 2 [ 1180.835018][T17337] Buffer I/O error on dev nbd7, logical block 0, async page read [ 1180.842997][T17337] I/O error, dev nbd7, sector 2 op 0x0:(READ) flags 0x800000 phys_seg 1 prio class 2 [ 1180.853301][T17337] Buffer I/O error on dev nbd7, logical block 1, async page read [ 1180.863031][T17337] I/O error, dev nbd7, sector 4 op 0x0:(READ) flags 0x800000 phys_seg 1 prio class 2 [ 1180.874167][T17337] Buffer I/O error on dev nbd7, logical block 2, async page read [ 1180.875855][ C0] lec0: NETDEV WATCHDOG: CPU: 0: transmit queue 0 timed out 5080 ms [ 1180.883569][T17337] I/O error, dev nbd7, sector 6 op 0x0:(READ) flags 0x800000 phys_seg 1 prio class 2 [ 1180.890029][ C0] lec:lec_tx_timeout: lec0 [ 1180.899729][T17337] Buffer I/O error on dev nbd7, logical block 3, async page read [ 1180.905762][ C0] lec:lec_start_xmit: lec0:No lecd attached [ 1180.912380][T17337] I/O error, dev nbd7, sector 0 op 0x0:(READ) flags 0x800000 phys_seg 1 prio class 2 [ 1180.936405][T17337] Buffer I/O error on dev nbd7, logical block 0, async page read [ 1180.944228][T17337] I/O error, dev nbd7, sector 2 op 0x0:(READ) flags 0x800000 phys_seg 1 prio class 2 [ 1180.953943][T17337] Buffer I/O error on dev nbd7, logical block 1, async page read [ 1180.964514][T17337] ldm_validate_partition_table(): Disk read failed. [ 1180.972204][T17337] Dev nbd7: unable to read RDB block 0 [ 1180.978422][T17337] nbd7: unable to read partition table [ 1180.990980][T17337] ldm_validate_partition_table(): Disk read failed. [ 1181.006265][T17337] Dev nbd7: unable to read RDB block 0 [ 1181.012674][T17337] nbd7: unable to read partition table [ 1181.076112][T18118] net_ratelimit: 6 callbacks suppressed [ 1181.076127][T18118] ICMPv6: RA: ndisc_router_discovery failed to add default route [ 1181.089898][T18118] ICMPv6: RA: ndisc_router_discovery failed to add default route [ 1181.097848][T18118] ICMPv6: RA: ndisc_router_discovery failed to add default route [ 1181.105751][T18118] ICMPv6: RA: ndisc_router_discovery failed to add default route [ 1181.113593][T18118] ICMPv6: RA: ndisc_router_discovery failed to add default route [ 1181.121493][T18118] ICMPv6: RA: ndisc_router_discovery failed to add default route [ 1181.129396][T18118] ICMPv6: RA: ndisc_router_discovery failed to add default route [ 1181.137330][T18118] ICMPv6: RA: ndisc_router_discovery failed to add default route [ 1181.145150][T18118] ICMPv6: RA: ndisc_router_discovery failed to add default route [ 1181.153078][T18118] ICMPv6: RA: ndisc_router_discovery failed to add default route [ 1183.099978][T18161] validate_nla: 2 callbacks suppressed [ 1183.099996][T18161] netlink: 'syz.4.12089': attribute type 9 has an invalid length. [ 1183.210923][T18173] delete_channel: no stack [ 1183.387952][T18186] netlink: 'syz.5.12096': attribute type 1 has an invalid length. [ 1183.400468][T18186] nbd: error processing sock list [ 1183.891304][T18219] netlink: 8 bytes leftover after parsing attributes in process `syz.4.12108'. [ 1183.910553][T18219] tipc: Enabled bearer , priority 0 [ 1183.927107][T18214] netlink: 'syz.0.12106': attribute type 29 has an invalid length. [ 1183.936200][T18214] netlink: 'syz.0.12106': attribute type 29 has an invalid length. [ 1183.947960][T18214] netlink: 500 bytes leftover after parsing attributes in process `syz.0.12106'. [ 1184.171247][T18238] netlink: 52 bytes leftover after parsing attributes in process `syz.0.12115'. [ 1184.261868][T18245] netlink: 8 bytes leftover after parsing attributes in process `syz.0.12117'. [ 1184.271990][T18243] netlink: 'syz.2.12116': attribute type 1 has an invalid length. [ 1184.272530][T18245] netlink: 80 bytes leftover after parsing attributes in process `syz.0.12117'. [ 1184.850168][T18271] netlink: 8 bytes leftover after parsing attributes in process `syz.5.12120'. [ 1184.944319][T18277] netlink: 12 bytes leftover after parsing attributes in process `syz.4.12121'. [ 1184.979495][T18277] vxcan4: entered allmulticast mode [ 1185.377980][T18307] mac80211_hwsim hwsim127 syzkaller0: left promiscuous mode [ 1185.385924][T18307] mac80211_hwsim hwsim127 syzkaller0: left allmulticast mode [ 1185.408438][T18308] syzkaller0: entered promiscuous mode [ 1185.424434][T18308] syzkaller0: entered allmulticast mode [ 1185.600643][T18320] netlink: 'syz.0.12130': attribute type 10 has an invalid length. [ 1185.612579][T18320] team0: Device ipvlan1 failed to register rx_handler [ 1185.646028][T18320] netlink: 24 bytes leftover after parsing attributes in process `syz.0.12130'. [ 1185.656967][T18320] netlink: 4 bytes leftover after parsing attributes in process `syz.0.12130'. [ 1185.921131][T18350] netlink: 12 bytes leftover after parsing attributes in process `syz.4.12139'. [ 1185.925658][ C0] lec0: NETDEV WATCHDOG: CPU: 0: transmit queue 0 timed out 5010 ms [ 1185.938349][ C0] lec:lec_tx_timeout: lec0 [ 1186.397028][ T47] net_ratelimit: 112 callbacks suppressed [ 1186.397047][ T47] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1186.562526][ C1] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1186.571045][ C1] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1186.579485][ C1] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1186.587941][ C1] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1186.596401][ C1] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1186.604945][ C1] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1186.613401][ C1] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1186.621858][ C1] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1186.630323][ C1] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1186.970434][T18425] xt_HMARK: proto mask must be zero with L3 mode [ 1186.996979][T18424] xt_HMARK: proto mask must be zero with L3 mode [ 1187.585887][T18465] netlink: 'syz.5.12170': attribute type 1 has an invalid length. [ 1187.963272][T18485] netlink: 'syz.0.12176': attribute type 1 has an invalid length. [ 1187.963272][T18486] netlink: 'syz.0.12176': attribute type 1 has an invalid length. [ 1188.037882][T18486] 8021q: adding VLAN 0 to HW filter on device bond1 [ 1188.286884][T22375] Bluetooth: hci5: unexpected cc 0x0c03 length: 249 > 1 [ 1188.296798][T22375] Bluetooth: hci5: unexpected cc 0x1003 length: 249 > 9 [ 1188.307906][T22375] Bluetooth: hci5: unexpected cc 0x1001 length: 249 > 9 [ 1188.336930][T22375] Bluetooth: hci5: unexpected cc 0x0c23 length: 249 > 4 [ 1188.344679][T22375] Bluetooth: hci5: unexpected cc 0x0c38 length: 249 > 2 [ 1188.618015][T18522] 8021q: adding VLAN 0 to HW filter on device bond5 [ 1188.661121][T18524] netlink: 'syz.5.12186': attribute type 2 has an invalid length. [ 1188.971185][T18535] __nla_validate_parse: 18 callbacks suppressed [ 1188.971205][T18535] netlink: 60 bytes leftover after parsing attributes in process `syz.4.12190'. [ 1188.996461][T18533] netlink: 212368 bytes leftover after parsing attributes in process `syz.5.12188'. [ 1189.107378][T18543] netlink: 24 bytes leftover after parsing attributes in process `syz.4.12191'. [ 1189.282430][T18550] netlink: 96 bytes leftover after parsing attributes in process `syz.0.12194'. [ 1189.306725][T18550] 8021q: VLANs not supported on ip6tnl0 [ 1189.325089][T18505] vxcan1 speed is unknown, defaulting to 1000 [ 1189.425891][T18559] bond0: entered promiscuous mode [ 1189.431556][T18559] bond_slave_0: entered promiscuous mode [ 1189.446034][T18559] bond_slave_1: entered promiscuous mode [ 1189.744762][T18576] netlink: 14 bytes leftover after parsing attributes in process `syz.0.12203'. [ 1189.952132][T18586] netlink: 16 bytes leftover after parsing attributes in process `syz.0.12206'. [ 1189.980236][T18586] netlink: 6 bytes leftover after parsing attributes in process `syz.0.12206'. [ 1189.991880][T18591] x_tables: duplicate underflow at hook 1 [ 1190.107805][T18599] netlink: 24 bytes leftover after parsing attributes in process `syz.0.12211'. [ 1190.117806][T18600] netlink: 'syz.0.12211': attribute type 21 has an invalid length. [ 1190.142841][T18600] netlink: 'syz.0.12211': attribute type 6 has an invalid length. [ 1190.153769][T18600] netlink: 132 bytes leftover after parsing attributes in process `syz.0.12211'. [ 1190.341650][T18505] chnl_net:caif_netlink_parms(): no params data found [ 1190.371980][T18615] netlink: 24 bytes leftover after parsing attributes in process `syz.0.12215'. [ 1190.396284][T17099] Bluetooth: hci5: command tx timeout [ 1190.610868][T18629] syzkaller1: entered promiscuous mode [ 1190.617217][T18629] syzkaller1: entered allmulticast mode [ 1190.641085][T18505] bridge0: port 1(bridge_slave_0) entered blocking state [ 1190.661630][T18505] bridge0: port 1(bridge_slave_0) entered disabled state [ 1190.669726][T18505] bridge_slave_0: entered allmulticast mode [ 1190.678807][T18505] bridge_slave_0: entered promiscuous mode [ 1190.734082][T18505] bridge0: port 2(bridge_slave_1) entered blocking state [ 1190.741570][T18505] bridge0: port 2(bridge_slave_1) entered disabled state [ 1190.750195][T18505] bridge_slave_1: entered allmulticast mode [ 1190.760782][T18505] bridge_slave_1: entered promiscuous mode [ 1190.867276][T18505] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 1190.889163][T18505] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 1190.954162][T18505] team0: Port device team_slave_0 added [ 1190.963651][T18505] team0: Port device team_slave_1 added [ 1190.985160][T18654] veth0: entered promiscuous mode [ 1190.991767][T18654] veth0: left promiscuous mode [ 1191.032858][T18505] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 1191.052664][T18505] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 1191.087423][T18505] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 1191.114616][T18656] nbd: must specify at least one socket [ 1191.142181][T18660] : renamed from veth1_vlan (while UP) [ 1191.159655][T18505] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 1191.176824][T18505] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 1191.266377][T18505] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 1191.383711][T18505] hsr_slave_0: entered promiscuous mode [ 1191.393883][T18505] hsr_slave_1: entered promiscuous mode [ 1191.404153][T18505] debugfs: 'hsr0' already exists in 'hsr' [ 1191.410734][T18505] Cannot create hsr debugfs directory [ 1191.511033][T18678] netlink: 'syz.5.12237': attribute type 11 has an invalid length. [ 1191.606085][T22145] net_ratelimit: 13 callbacks suppressed [ 1191.606103][T22145] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1191.627763][T18686] mac80211_hwsim hwsim132 : renamed from wlan1 [ 1191.723624][T18689] netlink: 'syz.5.12240': attribute type 12 has an invalid length. [ 1191.858299][T18689] bond11: option primary_reselect: invalid value (255) [ 1191.882731][T18689] bond11 (unregistering): Released all slaves [ 1192.069896][T18706] netlink: 'syz.4.12243': attribute type 10 has an invalid length. [ 1192.090832][T18706] bond0: (slave wlan1): Enslaving as an active interface with an up link [ 1192.174540][T18505] netdevsim netdevsim6 netdevsim0: renamed from eth0 [ 1192.225061][T18505] netdevsim netdevsim6 netdevsim1: renamed from eth1 [ 1192.284378][T18505] netdevsim netdevsim6 netdevsim2: renamed from eth2 [ 1192.328877][T18719] netdevsim netdevsim4 netdevsim0: entered promiscuous mode [ 1192.345355][T18719] A link change request failed with some changes committed already. Interface netdevsim0 may have been left with an inconsistent configuration, please check. [ 1192.373446][T18505] netdevsim netdevsim6 netdevsim3: renamed from eth3 [ 1192.420596][T18729] team0 (unregistering): Port device team_slave_0 removed [ 1192.462237][T18729] team0 (unregistering): Port device team_slave_1 removed [ 1192.477203][T17099] Bluetooth: hci5: command tx timeout [ 1192.628563][T18747] tipc: Enabling of bearer rejected, failed to enable media [ 1192.674643][T18749] openvswitch: netlink: IP tunnel attribute has 4 unknown bytes. [ 1192.692416][T18747] x_tables: unsorted entry at hook 1 [ 1192.708803][T18751] openvswitch: netlink: IP tunnel attribute has 4 unknown bytes. [ 1192.724421][T18749] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 1192.737596][T18751] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 1193.541102][T18795] netlink: 'syz.0.12260': attribute type 1 has an invalid length. [ 1193.682299][T22145] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1193.922160][T30509] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1193.930675][ C1] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1194.556676][T30506] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1194.566790][T17099] Bluetooth: hci5: command tx timeout [ 1195.542697][T18795] bond2: entered promiscuous mode [ 1195.549914][T18795] 8021q: adding VLAN 0 to HW filter on device bond2 [ 1195.587307][T18796] bond2: (slave bridge2): making interface the new active one [ 1195.594862][T18796] bridge2: entered promiscuous mode [ 1195.609473][T18796] bond2: (slave bridge2): Enslaving as an active interface with an up link [ 1195.642121][T18797] bond2: (slave gretap1): Enslaving as a backup interface with an up link [ 1195.659279][T18798] macvlan2: entered promiscuous mode [ 1195.665227][T18798] macvlan2: entered allmulticast mode [ 1195.673337][T18798] 8021q: adding VLAN 0 to HW filter on device macvlan2 [ 1195.705086][T18505] 8021q: adding VLAN 0 to HW filter on device bond0 [ 1195.799459][T18505] 8021q: adding VLAN 0 to HW filter on device team0 [ 1195.809047][T18821] __nla_validate_parse: 16 callbacks suppressed [ 1195.809067][T18821] netlink: 40 bytes leftover after parsing attributes in process `syz.0.12266'. [ 1195.826183][T18821] netlink: 40 bytes leftover after parsing attributes in process `syz.0.12266'. [ 1195.886648][T30493] bridge0: port 1(bridge_slave_0) entered blocking state [ 1195.893814][T30493] bridge0: port 1(bridge_slave_0) entered forwarding state [ 1195.934294][T30493] bridge0: port 2(bridge_slave_1) entered blocking state [ 1195.941516][T30493] bridge0: port 2(bridge_slave_1) entered forwarding state [ 1196.044026][T18831] xt_ecn: cannot match TCP bits for non-tcp packets [ 1196.147993][T18841] netlink: 12 bytes leftover after parsing attributes in process `syz.0.12270'. [ 1196.443892][T18831] bond_slave_0: left promiscuous mode [ 1196.452562][T18831] bond_slave_1: left promiscuous mode [ 1196.623874][T18831] bond0: (slave bond_slave_0): Releasing backup interface [ 1196.635816][T17099] Bluetooth: hci5: command tx timeout [ 1196.657015][T18831] bond0: (slave bond_slave_1): Releasing backup interface [ 1196.697754][T18831] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 1196.718416][T18831] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 1196.760744][T18831] net_ratelimit: 4 callbacks suppressed [ 1196.760758][T18831] A link change request failed with some changes committed already. Interface hsr_slave_0 may have been left with an inconsistent configuration, please check. [ 1196.885134][T18848] netlink: 8 bytes leftover after parsing attributes in process `syz.0.12271'. [ 1197.005041][T18505] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 1197.034885][T18856] netlink: 14 bytes leftover after parsing attributes in process `syz.5.12274'. [ 1197.404719][T18880] netlink: 12 bytes leftover after parsing attributes in process `syz.0.12280'. [ 1197.429472][T18505] veth0_vlan: entered promiscuous mode [ 1197.443142][T18505] veth1_vlan: entered promiscuous mode [ 1197.497955][T18505] veth0_macvtap: entered promiscuous mode [ 1197.518142][T18505] veth1_macvtap: entered promiscuous mode [ 1197.568927][T18505] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 1197.603123][T18888] netlink: 104 bytes leftover after parsing attributes in process `syz.4.12283'. [ 1197.609489][T18505] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 1197.663193][T21656] netdevsim netdevsim6 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 1197.684282][T21656] netdevsim netdevsim6 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 1197.714243][T21656] netdevsim netdevsim6 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 1197.729286][T21656] netdevsim netdevsim6 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 1197.860119][T18905] syzkaller0: entered promiscuous mode [ 1197.869072][T18905] syzkaller0: entered allmulticast mode [ 1197.936292][T21656] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 1197.944136][T21656] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 1198.085041][T18918] veth3: entered promiscuous mode [ 1198.093495][T18918] veth3: entered allmulticast mode [ 1198.143501][T18923] netlink: 240 bytes leftover after parsing attributes in process `syz.0.12291'. [ 1198.390073][T18931] syzkaller0: entered promiscuous mode [ 1198.402157][T18931] syzkaller0: entered allmulticast mode [ 1198.704734][T18907] nci: __nci_request: wait_for_completion_interruptible_timeout failed -512 [ 1198.792092][T30509] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 1198.811263][T30509] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 1198.927303][T18945] netlink: 'syz.4.12297': attribute type 10 has an invalid length. [ 1198.951603][T18945] team0: Port device dummy0 added [ 1199.313450][T18970] pimreg: left allmulticast mode [ 1199.334821][T18972] netlink: 4 bytes leftover after parsing attributes in process `syz.0.12303'. [ 1199.357560][T18972] netlink: 12 bytes leftover after parsing attributes in process `syz.0.12303'. [ 1199.391632][T18976] netlink: 'syz.5.12305': attribute type 1 has an invalid length. [ 1199.515319][T18985] IPVS: set_ctl: invalid protocol: 103 0.0.0.0:20001 [ 1199.961268][T19015] netlink: 'syz.4.12316': attribute type 10 has an invalid length. [ 1199.992455][T19015] team0 (unregistering): Port device team_slave_0 removed [ 1200.018604][T19015] team0 (unregistering): Port device team_slave_1 removed [ 1200.062769][T19015] team0 (unregistering): Port device dummy0 removed [ 1200.562164][T19057] netlink: 'syz.6.12326': attribute type 4 has an invalid length. [ 1200.584656][T19048] netlink: 'syz.6.12326': attribute type 4 has an invalid length. [ 1201.351690][T19067] syzkaller0: entered promiscuous mode [ 1201.359626][T19067] syzkaller0: entered allmulticast mode [ 1201.554344][T19070] bond1: (slave lo): enslaved VLAN challenged slave. Adding VLANs will be blocked as long as it is part of bond. [ 1201.570997][T19070] bond1: (slave lo): Enslaving as an active interface with an up link [ 1201.581235][T19070] A link change request failed with some changes committed already. Interface tunl0 may have been left with an inconsistent configuration, please check. [ 1203.324456][T19044] nci: __nci_request: wait_for_completion_interruptible_timeout failed -512 [ 1203.585483][T19088] x_tables: ip6_tables: rpfilter match: used from hooks OUTPUT, but only valid from PREROUTING [ 1203.682290][T19094] __nla_validate_parse: 7 callbacks suppressed [ 1203.682308][T19094] netlink: 8 bytes leftover after parsing attributes in process `syz.0.12341'. [ 1203.719964][T19094] netlink: 8 bytes leftover after parsing attributes in process `syz.0.12341'. [ 1203.729880][T19094] netlink: 24 bytes leftover after parsing attributes in process `syz.0.12341'. [ 1203.746797][T19094] netlink: 8 bytes leftover after parsing attributes in process `syz.0.12341'. [ 1203.768347][T19094] netlink: 24 bytes leftover after parsing attributes in process `syz.0.12341'. [ 1204.170756][T19117] netlink: 32 bytes leftover after parsing attributes in process `syz.5.12351'. [ 1204.235457][T19119] bridge1: entered allmulticast mode [ 1204.407917][T19133] mac80211_hwsim hwsim127 syzkaller0: entered promiscuous mode [ 1204.415570][T19133] mac80211_hwsim hwsim127 syzkaller0: entered allmulticast mode [ 1204.472089][T19133] 8021q: adding VLAN 0 to HW filter on device bond6 [ 1204.536523][T19141] sch_tbf: burst 127 is lower than device syzkaller0 mtu (1514) ! [ 1204.561542][T19141] tipc: Enabled bearer , priority 0 [ 1204.572266][T19141] ipvlan1: entered promiscuous mode [ 1204.732973][T19153] bond7 (unregistering): Released all slaves [ 1204.752322][T19156] openvswitch: netlink: nsh attribute has 4 unknown bytes. [ 1204.761110][T19156] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 1204.818934][T19160] tipc: Resetting bearer [ 1204.837335][T19160] netlink: 4 bytes leftover after parsing attributes in process `syz.5.12359'. [ 1204.899086][T19167] netlink: 'syz.6.12368': attribute type 1 has an invalid length. [ 1204.921921][T19169] syzkaller0: entered promiscuous mode [ 1204.928370][T19169] syzkaller0: entered allmulticast mode [ 1204.946341][T19167] netlink: 72 bytes leftover after parsing attributes in process `syz.6.12368'. [ 1205.307358][T19182] netlink: 'syz.6.12373': attribute type 1 has an invalid length. [ 1205.420115][T19140] tipc: Disabling bearer [ 1205.602247][T19193] netlink: 32 bytes leftover after parsing attributes in process `syz.6.12376'. [ 1206.081776][T19219] netlink: 20 bytes leftover after parsing attributes in process `syz.6.12387'. [ 1206.645217][T19256] openvswitch: netlink: Flow key attr not present in new flow. [ 1206.967931][T19275] netlink: 'syz.5.12407': attribute type 1 has an invalid length. [ 1207.068901][T19275] bond12 (unregistering): Released all slaves [ 1207.308159][T19291] can: request_module (can-proto-0) failed. [ 1207.437141][T19312] netlink: 'syz.5.12418': attribute type 1 has an invalid length. [ 1207.445374][T19312] netlink: 'syz.5.12418': attribute type 2 has an invalid length. [ 1207.682375][T19338] netlink: 'syz.5.12425': attribute type 1 has an invalid length. [ 1207.735230][T19342] netlink: zone id is out of range [ 1207.779448][T19342] netlink: zone id is out of range [ 1207.781632][T19347] netlink: 'syz.5.12429': attribute type 39 has an invalid length. [ 1207.784888][T19342] netlink: zone id is out of range [ 1207.793822][T19344] netlink: 'syz.6.12428': attribute type 1 has an invalid length. [ 1207.795159][T19348] xt_hashlimit: max too large, truncated to 1048576 [ 1207.822543][T19342] netlink: zone id is out of range [ 1207.828073][T19342] netlink: zone id is out of range [ 1207.833288][T19342] netlink: zone id is out of range [ 1207.839884][T19342] netlink: zone id is out of range [ 1207.872057][T19350] bridge0: port 2(bridge_slave_1) entered disabled state [ 1207.879478][T19350] bridge0: port 1(bridge_slave_0) entered disabled state [ 1207.898901][T19350] tipc: Failed to obtain node identity [ 1207.904474][T19350] tipc: Enabling of bearer rejected, failed to enable media [ 1208.019755][T19359] Cannot find add_set index 0 as target [ 1208.137707][T19365] sch_tbf: burst 127 is lower than device syzkaller0 mtu (1514) ! [ 1208.154837][T19374] netlink: 'syz.6.12436': attribute type 1 has an invalid length. [ 1208.168503][T19365] tipc: Enabled bearer , priority 0 [ 1208.179652][T19365] syzkaller0: entered promiscuous mode [ 1208.185241][T19365] syzkaller0: entered allmulticast mode [ 1208.214562][T19365] tipc: Resetting bearer [ 1208.237689][T19364] tipc: Resetting bearer [ 1208.280696][T19364] tipc: Disabling bearer [ 1208.689785][T19394] __nla_validate_parse: 14 callbacks suppressed [ 1208.689800][T19394] netlink: 12 bytes leftover after parsing attributes in process `syz.0.12443'. [ 1209.061600][T19411] l2tp_mt_check: 1 callbacks suppressed [ 1209.061613][T19411] xt_l2tp: invalid flags combination: 0 [ 1209.106063][T19414] bridge0: port 2(bridge_slave_1) entered disabled state [ 1209.113549][T19414] bridge0: port 1(bridge_slave_0) entered disabled state [ 1209.121684][T19414] bridge0: entered allmulticast mode [ 1209.179270][T19416] netlink: 16 bytes leftover after parsing attributes in process `syz.6.12450'. [ 1209.190728][T19416] netlink: 13 bytes leftover after parsing attributes in process `syz.6.12450'. [ 1209.210427][T19416] veth3: entered promiscuous mode [ 1209.217154][T19416] lo: entered promiscuous mode [ 1209.227012][T19416] netlink: 'syz.6.12450': attribute type 2 has an invalid length. [ 1209.347806][T19423] SET target dimension over the limit! [ 1209.374495][T19423] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 1209.411093][T19432] x_tables: ip_tables: TCPOPTSTRIP target: only valid in mangle table, not security [ 1209.494775][T19438] netlink: 16 bytes leftover after parsing attributes in process `syz.4.12457'. [ 1209.588070][T19440] bond2: option mode: unable to set because the bond device has slaves [ 1209.600349][T19440] bond2: (slave lo): enslaved VLAN challenged slave. Adding VLANs will be blocked as long as it is part of bond. [ 1209.706983][T19445] netlink: 228 bytes leftover after parsing attributes in process `syz.4.12460'. [ 1209.763393][T19442] syzkaller0: entered allmulticast mode [ 1210.032245][T19466] netlink: 20 bytes leftover after parsing attributes in process `syz.6.12466'. [ 1210.049541][T19467] xt_bpf: check failed: parse error [ 1210.065245][T19463] netlink: 20 bytes leftover after parsing attributes in process `syz.6.12466'. [ 1210.151228][T19472] xt_hashlimit: max too large, truncated to 1048576 [ 1210.199026][T19474] netlink: 16 bytes leftover after parsing attributes in process `syz.4.12468'. [ 1210.274392][T19478] netlink: 112 bytes leftover after parsing attributes in process `syz.6.12470'. [ 1210.334976][T19480] netlink: 32 bytes leftover after parsing attributes in process `syz.0.12471'. [ 1210.365200][T19480] validate_nla: 1 callbacks suppressed [ 1210.365218][T19480] netlink: 'syz.0.12471': attribute type 5 has an invalid length. [ 1210.612109][T19497] netlink: 'syz.6.12477': attribute type 64 has an invalid length. [ 1210.654540][T19501] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 1210.675305][T19502] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 1210.759961][T19510] netlink: 'syz.5.12481': attribute type 1 has an invalid length. [ 1210.944059][T22375] Bluetooth: hci6: unexpected cc 0x0c03 length: 249 > 1 [ 1210.961510][T22375] Bluetooth: hci6: unexpected cc 0x1003 length: 249 > 9 [ 1210.973103][T22375] Bluetooth: hci6: unexpected cc 0x1001 length: 249 > 9 [ 1210.981277][T22375] Bluetooth: hci6: unexpected cc 0x0c23 length: 249 > 4 [ 1210.990655][T22375] Bluetooth: hci6: unexpected cc 0x0c38 length: 249 > 2 [ 1211.392406][T19542] bond3: option xmit_hash_policy: invalid value (64) [ 1211.401539][T19542] bond3 (unregistering): Released all slaves [ 1211.533181][T19550] netlink: 'syz.6.12493': attribute type 21 has an invalid length. [ 1211.553568][T19550] IPv6: NLM_F_CREATE should be specified when creating new route [ 1211.556014][ T29] audit: type=1107 audit(1771949603.430:25): pid=19548 uid=0 auid=4294967295 ses=4294967295 subj=unconfined msg='' [ 1211.753511][T19519] vxcan1 speed is unknown, defaulting to 1000 [ 1211.838883][T19566] net_ratelimit: 10 callbacks suppressed [ 1211.838902][T19566] 0: reclassify loop, rule prio 0, protocol 700 [ 1212.115850][T19579] tipc: Failed to obtain node identity [ 1212.121494][T19579] tipc: Enabling of bearer rejected, failed to enable media [ 1212.225317][T19582] x_tables: unsorted entry at hook 3 [ 1212.566328][T19605] openvswitch: netlink: Key type 31 is not supported [ 1212.720649][T19519] chnl_net:caif_netlink_parms(): no params data found [ 1212.931987][T19519] bridge0: port 1(bridge_slave_0) entered blocking state [ 1212.948071][T19519] bridge0: port 1(bridge_slave_0) entered disabled state [ 1212.967091][T19519] bridge_slave_0: entered allmulticast mode [ 1212.977393][T19519] bridge_slave_0: entered promiscuous mode [ 1212.987185][T19519] bridge0: port 2(bridge_slave_1) entered blocking state [ 1212.994574][T19519] bridge0: port 2(bridge_slave_1) entered disabled state [ 1213.002597][T19519] bridge_slave_1: entered allmulticast mode [ 1213.011764][T19519] bridge_slave_1: entered promiscuous mode [ 1213.036377][T17099] Bluetooth: hci6: command tx timeout [ 1213.074105][T19519] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 1213.089585][T19519] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 1213.149635][T19519] team0: Port device team_slave_0 added [ 1213.164567][T19519] team0: Port device team_slave_1 added [ 1213.202047][T19519] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 1213.209550][T19519] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 1213.239309][T19519] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 1213.251714][T19642] bridge_slave_1: left allmulticast mode [ 1213.258358][T19642] bridge_slave_1: left promiscuous mode [ 1213.267966][T19642] bridge0: port 2(bridge_slave_1) entered disabled state [ 1213.278280][T19642] bridge_slave_0: left allmulticast mode [ 1213.284458][T19642] bridge_slave_0: left promiscuous mode [ 1213.290804][T19642] bridge0: port 1(bridge_slave_0) entered disabled state [ 1213.327528][T19519] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 1213.334506][T19519] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 1213.368482][T19519] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 1213.487611][T19519] hsr_slave_0: entered promiscuous mode [ 1213.508103][T19519] hsr_slave_1: entered promiscuous mode [ 1213.523752][T19519] debugfs: 'hsr0' already exists in 'hsr' [ 1213.538518][T19519] Cannot create hsr debugfs directory [ 1213.605321][T19653] syz.6.12519: vmalloc error: size 8589938688, exceeds total pages, mode:0xdc0(GFP_KERNEL|__GFP_ZERO), nodemask=(null),cpuset=/,mems_allowed=0-1 [ 1213.634352][T19653] CPU: 0 UID: 0 PID: 19653 Comm: syz.6.12519 Not tainted syzkaller #0 PREEMPT(full) [ 1213.634378][T19653] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 02/12/2026 [ 1213.634389][T19653] Call Trace: [ 1213.634396][T19653] [ 1213.634404][T19653] dump_stack_lvl+0xe8/0x150 [ 1213.634435][T19653] warn_alloc+0x249/0x340 [ 1213.634456][T19653] ? stack_trace_save+0xa9/0x100 [ 1213.634478][T19653] ? __pfx_warn_alloc+0x10/0x10 [ 1213.634504][T19653] ? kasan_save_track+0x4f/0x80 [ 1213.634522][T19653] ? kasan_save_track+0x3e/0x80 [ 1213.634538][T19653] ? __kasan_kmalloc+0x93/0xb0 [ 1213.634555][T19653] ? __kmalloc_cache_noprof+0x31c/0x660 [ 1213.634572][T19653] ? xskq_create+0x56/0x170 [ 1213.634595][T19653] ? xsk_setsockopt+0x54c/0x990 [ 1213.634703][T19653] ? do_sock_setsockopt+0x17c/0x1b0 [ 1213.634738][T19653] ? __x64_sys_setsockopt+0x13d/0x1b0 [ 1213.634759][T19653] ? do_syscall_64+0x14d/0xf80 [ 1213.634788][T19653] __vmalloc_node_range_noprof+0x132/0x1730 [ 1213.634839][T19653] ? __pfx___vmalloc_node_range_noprof+0x10/0x10 [ 1213.634865][T19653] ? __kasan_kmalloc+0x93/0xb0 [ 1213.634901][T19653] vmalloc_user_noprof+0xad/0xe0 [ 1213.634922][T19653] ? xskq_create+0xbf/0x170 [ 1213.634946][T19653] xskq_create+0xbf/0x170 [ 1213.634978][T19653] xsk_init_queue+0x8a/0xe0 [ 1213.635003][T19653] xsk_setsockopt+0x54c/0x990 [ 1213.635026][T19653] ? __pfx_xsk_setsockopt+0x10/0x10 [ 1213.635047][T19653] ? __pfx_aa_sk_perm+0x10/0x10 [ 1213.635070][T19653] ? aa_sock_opt_perm+0xff/0x1a0 [ 1213.635093][T19653] ? bpf_lsm_socket_setsockopt+0x9/0x20 [ 1213.635111][T19653] ? __pfx_xsk_setsockopt+0x10/0x10 [ 1213.635132][T19653] do_sock_setsockopt+0x17c/0x1b0 [ 1213.635158][T19653] __x64_sys_setsockopt+0x13d/0x1b0 [ 1213.635188][T19653] do_syscall_64+0x14d/0xf80 [ 1213.635210][T19653] ? trace_irq_disable+0x3b/0x150 [ 1213.635230][T19653] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1213.635247][T19653] ? clear_bhb_loop+0x40/0x90 [ 1213.635267][T19653] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1213.635284][T19653] RIP: 0033:0x7f3eead9c629 [ 1213.635302][T19653] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 1213.635316][T19653] RSP: 002b:00007f3eebd1e028 EFLAGS: 00000246 ORIG_RAX: 0000000000000036 [ 1213.635333][T19653] RAX: ffffffffffffffda RBX: 00007f3eeb016090 RCX: 00007f3eead9c629 [ 1213.635347][T19653] RDX: 0000000000000006 RSI: 000000000000011b RDI: 0000000000000007 [ 1213.635357][T19653] RBP: 00007f3eeae32b39 R08: 0000000000000004 R09: 0000000000000000 [ 1213.635368][T19653] R10: 0000200000000000 R11: 0000000000000246 R12: 0000000000000000 [ 1213.635379][T19653] R13: 00007f3eeb016128 R14: 00007f3eeb016090 R15: 00007ffc60a66e88 [ 1213.635406][T19653] [ 1213.807124][T19653] Mem-Info: [ 1213.932262][T19519] netdevsim netdevsim7 netdevsim0: renamed from eth0 [ 1213.949026][T19653] active_anon:7512 inactive_anon:0 isolated_anon:0 [ 1213.949026][T19653] active_file:3539 inactive_file:40387 isolated_file:0 [ 1213.949026][T19653] unevictable:768 dirty:116 writeback:0 [ 1213.949026][T19653] slab_reclaimable:15620 slab_unreclaimable:174392 [ 1213.949026][T19653] mapped:40023 shmem:1438 pagetables:3816 [ 1213.949026][T19653] sec_pagetables:0 bounce:0 [ 1213.949026][T19653] kernel_misc_reclaimable:0 [ 1213.949026][T19653] free:1193954 free_pcp:25537 free_cma:0 [ 1214.009709][T19653] Node 0 active_anon:30448kB inactive_anon:0kB active_file:14156kB inactive_file:161344kB unevictable:1536kB isolated(anon):0kB isolated(file):0kB mapped:41808kB dirty:464kB writeback:0kB shmem:4716kB shmem_thp:0kB shmem_pmdmapped:0kB anon_thp:0kB kernel_stack:18548kB pagetables:15220kB sec_pagetables:0kB all_unreclaimable? no Balloon:0kB [ 1214.055216][T19519] netdevsim netdevsim7 netdevsim1: renamed from eth1 [ 1214.081883][T19519] netdevsim netdevsim7 netdevsim2: renamed from eth2 [ 1214.085677][T19653] Node 1 active_anon:0kB inactive_anon:0kB active_file:0kB inactive_file:204kB unevictable:1536kB isolated(anon):0kB isolated(file):0kB mapped:118784kB dirty:0kB writeback:0kB shmem:1536kB shmem_thp:0kB shmem_pmdmapped:0kB anon_thp:0kB kernel_stack:32kB pagetables:144kB sec_pagetables:0kB all_unreclaimable? no Balloon:0kB [ 1214.109204][T19673] netlink: 'syz.0.12523': attribute type 10 has an invalid length. [ 1214.134178][T19519] netdevsim netdevsim7 netdevsim3: renamed from eth3 [ 1214.145010][T19671] __nla_validate_parse: 23 callbacks suppressed [ 1214.145029][T19671] netlink: 8 bytes leftover after parsing attributes in process `syz.0.12523'. [ 1214.155955][T19653] Node 0 [ 1214.173770][T19667] netlink: 256 bytes leftover after parsing attributes in process `syz.5.12522'. [ 1214.182357][T19653] DMA free:11240kB boost:0kB min:208kB low:260kB high:312kB reserved_highatomic:0KB free_highatomic:0KB active_anon:0kB inactive_anon:0kB active_file:0kB inactive_file:0kB unevictable:0kB writepending:0kB zspages:0kB present:15992kB managed:15360kB mlocked:0kB bounce:0kB free_pcp:24kB local_pcp:24kB free_cma:0kB [ 1214.217719][T19673] netlink: 4 bytes leftover after parsing attributes in process `syz.0.12523'. [ 1214.249744][T19653] lowmem_reserve[]: 0 2493 2493 2493 2493 [ 1214.256414][T19653] Node 0 DMA32 free:1190856kB boost:0kB min:34200kB low:42748kB high:51296kB reserved_highatomic:0KB free_highatomic:0KB active_anon:34748kB inactive_anon:0kB active_file:14156kB inactive_file:161344kB unevictable:1536kB writepending:464kB zspages:0kB present:3129332kB managed:2552852kB mlocked:0kB bounce:0kB free_pcp:29852kB local_pcp:12268kB free_cma:0kB [ 1214.311458][T19653] lowmem_reserve[]: 0 0 0 0 0 [ 1214.334778][T19653] Node 0 Normal free:0kB boost:0kB min:8kB low:8kB high:8kB reserved_highatomic:0KB free_highatomic:0KB active_anon:0kB inactive_anon:0kB active_file:0kB inactive_file:0kB unevictable:0kB writepending:0kB zspages:0kB present:1048580kB managed:884kB mlocked:0kB bounce:0kB free_pcp:4kB local_pcp:0kB free_cma:0kB [ 1214.394592][T19653] lowmem_reserve[]: 0 0 0 0 0 [ 1214.419975][T19653] Node 1 Normal free:3571648kB boost:0kB min:55688kB low:69608kB high:83528kB reserved_highatomic:0KB free_highatomic:0KB active_anon:0kB inactive_anon:0kB active_file:0kB inactive_file:204kB unevictable:1536kB writepending:0kB zspages:0kB present:4194300kB managed:4111100kB mlocked:0kB bounce:0kB free_pcp:68608kB local_pcp:34256kB free_cma:0kB [ 1214.473575][T19519] 8021q: adding VLAN 0 to HW filter on device bond0 [ 1214.482014][T19653] lowmem_reserve[]: 0 0 0 0 0 [ 1214.489368][T19653] Node 0 DMA: 0*4kB 1*8kB (U) 0*16kB 1*32kB (U) 1*64kB (U) 1*128kB (U) 1*256kB (U) 1*512kB (U) 2*1024kB (U) 2*2048kB (UM) 1*4096kB (M) = 11240kB [ 1214.526397][T19653] Node 0 DMA32: 6655*4kB (UE) 10158*8kB (UME) 5586*16kB (UME) 666*32kB (UM) 312*64kB (UM) 248*128kB (UME) 599*256kB (UM) 322*512kB (UME) 316*1024kB (UM) 136*2048kB (UM) 0*4096kB = 1190604kB [ 1214.547727][T19653] Node 0 Normal: 0*4kB 0*8kB 0*16kB 0*32kB 0*64kB 0*128kB 0*256kB 0*512kB 0*1024kB 0*2048kB 0*4096kB = 0kB [ 1214.560346][T19653] Node 1 Normal: 8*4kB (UME) 16*8kB (UME) 24*16kB (UME) 13*32kB (UME) 14*64kB (UME) 13*128kB (UM) 12*256kB (UME) 11*512kB (UME) 6*1024kB (UM) 5*2048kB (UE) 865*4096kB (UM) = 3571648kB [ 1214.612090][T19653] Node 0 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=1048576kB [ 1214.641037][T19519] 8021q: adding VLAN 0 to HW filter on device team0 [ 1214.667720][T21656] bridge0: port 1(bridge_slave_0) entered blocking state [ 1214.675020][T21656] bridge0: port 1(bridge_slave_0) entered forwarding state [ 1214.687451][T19653] Node 0 hugepages_total=2 hugepages_free=2 hugepages_surp=0 hugepages_size=2048kB [ 1214.706974][T19653] Node 1 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=1048576kB [ 1214.730500][T19683] netlink: 8 bytes leftover after parsing attributes in process `syz.0.12524'. [ 1214.747766][T30509] bridge0: port 2(bridge_slave_1) entered blocking state [ 1214.754957][T30509] bridge0: port 2(bridge_slave_1) entered forwarding state [ 1214.759326][T19653] Node 1 hugepages_total=2 hugepages_free=2 hugepages_surp=0 hugepages_size=2048kB [ 1214.772067][T19692] netlink: 8 bytes leftover after parsing attributes in process `syz.4.12526'. [ 1214.825788][T19653] 45337 total pagecache pages [ 1214.842267][T19653] 5 pages in swap cache [ 1214.882418][T19653] Free swap = 124976kB [ 1214.893269][T19699] bond2: option mode: unable to set because the bond device has slaves [ 1214.909857][T19653] Total swap = 124996kB [ 1214.914045][T19653] 2097051 pages RAM [ 1214.937078][T19699] bond2: (slave lo): enslaved VLAN challenged slave. Adding VLANs will be blocked as long as it is part of bond. [ 1214.949476][T19653] 0 pages HighMem/MovableOnly [ 1214.949491][T19653] 427002 pages reserved [ 1214.949499][T19653] 0 pages cma reserved [ 1215.009668][T19699] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check. [ 1215.031235][T19705] netlink: 212344 bytes leftover after parsing attributes in process `syz.5.12530'. [ 1215.044788][T19519] hsr0: Slave A (hsr_slave_0) is not up; please bring it up to get a fully working HSR network [ 1215.075316][T19519] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 1215.118979][T17099] Bluetooth: hci6: command tx timeout [ 1215.350355][T19519] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 1215.371990][T19725] bond2: option mode: unable to set because the bond device has slaves [ 1215.383658][T19725] bond2: (slave lo): enslaved VLAN challenged slave. Adding VLANs will be blocked as long as it is part of bond. [ 1215.404662][T19725] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check. [ 1215.424374][T19728] netlink: 666 bytes leftover after parsing attributes in process `syz.0.12537'. [ 1215.779760][T19755] netlink: 92 bytes leftover after parsing attributes in process `syz.4.12544'. [ 1215.800028][T19519] veth0_vlan: entered promiscuous mode [ 1215.822327][T19519] veth1_vlan: entered promiscuous mode [ 1215.883438][T19519] veth0_macvtap: entered promiscuous mode [ 1215.908916][T19519] veth1_macvtap: entered promiscuous mode [ 1215.950184][T19519] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 1215.998211][T19519] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 1216.029529][T30509] netdevsim netdevsim7 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 1216.050535][T30509] netdevsim netdevsim7 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 1216.106344][T30509] netdevsim netdevsim7 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 1216.135720][T30509] netdevsim netdevsim7 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 1216.279624][T19775] lo: entered promiscuous mode [ 1216.291847][T19775] tunl0: entered promiscuous mode [ 1216.312586][T19775] gre0: entered promiscuous mode [ 1216.326810][T19775] gretap0: entered promiscuous mode [ 1216.340337][T19775] erspan0: entered promiscuous mode [ 1216.354447][T19775] ip_vti0: entered promiscuous mode [ 1216.446066][T30509] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 1216.461522][T30509] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 1216.542030][T30512] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 1216.570845][T30512] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 1217.061420][T19807] netlink: 8 bytes leftover after parsing attributes in process `syz.5.12561'. [ 1217.136631][T19812] netlink: 8 bytes leftover after parsing attributes in process `syz.7.12560'. [ 1217.198316][T17099] Bluetooth: hci6: command tx timeout [ 1217.233167][T22375] Bluetooth: hci7: unexpected cc 0x0c03 length: 249 > 1 [ 1217.247010][T22375] Bluetooth: hci7: unexpected cc 0x1003 length: 249 > 9 [ 1217.258991][T22375] Bluetooth: hci7: unexpected cc 0x1001 length: 249 > 9 [ 1217.286967][T22375] Bluetooth: hci7: unexpected cc 0x0c23 length: 249 > 4 [ 1217.304908][T22375] Bluetooth: hci7: unexpected cc 0x0c38 length: 249 > 2 [ 1217.534711][T19763] vxcan1 speed is unknown, defaulting to 1000 [ 1217.763660][ T8859] syz_tun (unregistering): left allmulticast mode [ 1217.771693][ T8859] syz_tun (unregistering): left promiscuous mode [ 1217.794940][ T8859] bridge0: port 1(syz_tun) entered disabled state [ 1218.394967][T19859] netlink: 'syz.7.12573': attribute type 11 has an invalid length. [ 1218.600071][T19814] vxcan1 speed is unknown, defaulting to 1000 [ 1218.900329][T19879] vlan2: entered allmulticast mode [ 1218.905501][T19879] mac80211_hwsim hwsim159 wlan0: entered allmulticast mode [ 1218.954540][T19878] gtp4: entered promiscuous mode [ 1218.974282][T19878] gtp4: entered allmulticast mode [ 1219.275918][T17099] Bluetooth: hci6: command tx timeout [ 1219.294532][T19890] __nla_validate_parse: 12 callbacks suppressed [ 1219.294552][T19890] netlink: 12 bytes leftover after parsing attributes in process `syz.5.12580'. [ 1219.311127][T19890] netlink: 12 bytes leftover after parsing attributes in process `syz.5.12580'. [ 1219.320941][T19890] netlink: 12 bytes leftover after parsing attributes in process `syz.5.12580'. [ 1219.359873][T17099] Bluetooth: hci7: command tx timeout [ 1219.693916][T19901] netlink: 212048 bytes leftover after parsing attributes in process `syz.6.12583'. [ 1219.881366][T19906] syzkaller0: entered promiscuous mode [ 1219.887511][T19906] syzkaller0: entered allmulticast mode [ 1220.018970][T19814] chnl_net:caif_netlink_parms(): no params data found [ 1220.386653][T19935] netlink: 140 bytes leftover after parsing attributes in process `syz.5.12594'. [ 1220.410243][T19814] bridge0: port 1(bridge_slave_0) entered blocking state [ 1220.417624][T19814] bridge0: port 1(bridge_slave_0) entered disabled state [ 1220.424948][T19814] bridge_slave_0: entered allmulticast mode [ 1220.438799][T19814] bridge_slave_0: entered promiscuous mode [ 1220.461016][T19814] bridge0: port 2(bridge_slave_1) entered blocking state [ 1220.462079][T19937] netlink: 12 bytes leftover after parsing attributes in process `syz.0.12595'. [ 1220.478184][T19814] bridge0: port 2(bridge_slave_1) entered disabled state [ 1220.485528][T19814] bridge_slave_1: entered allmulticast mode [ 1220.514524][T19814] bridge_slave_1: entered promiscuous mode [ 1220.600206][T19814] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 1220.626178][T19814] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 1220.684739][T19814] team0: Port device team_slave_0 added [ 1220.704187][T19814] team0: Port device team_slave_1 added [ 1220.806079][T19814] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 1220.813055][T19814] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 1220.844096][T19970] netlink: 8 bytes leftover after parsing attributes in process `syz.7.12605'. [ 1220.855794][T19814] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 1220.869984][T19962] hsr0: entered allmulticast mode [ 1220.875038][T19962] hsr_slave_0: entered allmulticast mode [ 1220.882106][T19962] hsr_slave_1: entered allmulticast mode [ 1220.909221][T19973] netlink: 4 bytes leftover after parsing attributes in process `syz.7.12605'. [ 1220.942571][T19980] netlink: 'syz.0.12606': attribute type 13 has an invalid length. [ 1220.947942][T19981] netlink: 'syz.0.12606': attribute type 13 has an invalid length. [ 1221.022871][T19814] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 1221.030659][T19814] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 1221.059089][T19814] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 1221.071676][T19973] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 1221.093408][T19973] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 1221.170522][T19983] netlink: 8 bytes leftover after parsing attributes in process `syz.6.12608'. [ 1221.264759][T19814] hsr_slave_0: entered promiscuous mode [ 1221.267135][T19992] netlink: 12 bytes leftover after parsing attributes in process `syz.7.12609'. [ 1221.292770][T19814] hsr_slave_1: entered promiscuous mode [ 1221.300266][T19814] debugfs: 'hsr0' already exists in 'hsr' [ 1221.306324][T19814] Cannot create hsr debugfs directory [ 1221.424551][T19998] ipt_REJECT: TCP_RESET invalid for non-tcp [ 1221.437355][T17099] Bluetooth: hci7: command tx timeout [ 1221.664208][T20010] netlink: 'syz.6.12617': attribute type 29 has an invalid length. [ 1221.789969][T20015] netlink: 'syz.5.12618': attribute type 4 has an invalid length. [ 1222.239422][T19814] netdevsim netdevsim4 netdevsim0: renamed from eth0 [ 1222.267001][T19814] netdevsim netdevsim4 netdevsim1: renamed from eth1 [ 1222.292026][T19814] netdevsim netdevsim4 netdevsim2: renamed from eth2 [ 1222.340078][T19814] netdevsim netdevsim4 netdevsim3: renamed from eth3 [ 1222.705152][T19814] 8021q: adding VLAN 0 to HW filter on device bond0 [ 1222.739061][T19814] 8021q: adding VLAN 0 to HW filter on device team0 [ 1222.760110][ T78] bridge0: port 1(bridge_slave_0) entered blocking state [ 1222.767410][ T78] bridge0: port 1(bridge_slave_0) entered forwarding state [ 1222.819522][T30509] bridge0: port 2(bridge_slave_1) entered blocking state [ 1222.827258][T30509] bridge0: port 2(bridge_slave_1) entered forwarding state [ 1223.459920][T19814] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 1223.519099][T17099] Bluetooth: hci7: command tx timeout [ 1223.907606][T20134] netlink: 'syz.0.12653': attribute type 10 has an invalid length. [ 1223.922399][T20134] dummy0: entered promiscuous mode [ 1223.928409][T20134] A link change request failed with some changes committed already. Interface dummy0 may have been left with an inconsistent configuration, please check. [ 1224.201685][T19814] veth0_vlan: entered promiscuous mode [ 1224.267874][T19814] veth1_vlan: entered promiscuous mode [ 1224.364745][T19814] veth0_macvtap: entered promiscuous mode [ 1224.402177][T19814] veth1_macvtap: entered promiscuous mode [ 1224.465418][T19814] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 1224.515959][T19814] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 1224.555127][ T78] netdevsim netdevsim4 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 1224.573586][ T78] netdevsim netdevsim4 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 1224.596310][ T78] netdevsim netdevsim4 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 1224.597505][T20169] __nla_validate_parse: 13 callbacks suppressed [ 1224.597521][T20169] netlink: 12 bytes leftover after parsing attributes in process `syz.7.12666'. [ 1224.623974][ T78] netdevsim netdevsim4 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 1224.824012][T20184] xt_TCPMSS: Only works on TCP SYN packets [ 1224.884275][T20186] netlink: 24 bytes leftover after parsing attributes in process `syz.0.12671'. [ 1224.917512][T20186] netlink: 24 bytes leftover after parsing attributes in process `syz.0.12671'. [ 1224.944884][T30512] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 1224.996033][T30512] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 1225.068604][ T78] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 1225.094951][ T78] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 1225.596307][T17099] Bluetooth: hci7: command tx timeout [ 1225.653659][T20210] netlink: 12 bytes leftover after parsing attributes in process `syz.6.12679'. [ 1225.667497][T20208] netlink: 168 bytes leftover after parsing attributes in process `syz.7.12678'. [ 1225.697517][T20212] netlink: 212348 bytes leftover after parsing attributes in process `syz.0.12677'. [ 1225.844579][T20221] xt_nfacct: accounting object `\$9ZM#mU|^c\F9YⳈ' does not exist [ 1225.867998][T20220] mac80211_hwsim hwsim159 wlan0: entered promiscuous mode [ 1238.719643][ T1299] aoe: packet could not be sent on bond0. consider increasing tx_queue_len [ 1238.732389][ T1299] lec:lec_start_xmit: lec0:No lecd attached [ 1238.739340][ T1299] aoe: packet could not be sent on ipvlan1. consider increasing tx_queue_len [ 1243.836940][ C0] lec0: NETDEV WATCHDOG: CPU: 0: transmit queue 0 timed out 5100 ms [ 1243.844964][ C0] lec:lec_tx_timeout: lec0 [ 1243.850024][ C0] lec:lec_start_xmit: lec0:No lecd attached [ 1248.875805][ C0] lec0: NETDEV WATCHDOG: CPU: 0: transmit queue 0 timed out 5020 ms [ 1248.883830][ C0] lec:lec_tx_timeout: lec0 [ 1281.756463][T22375] Bluetooth: hci3: command 0x0406 tx timeout [ 1285.370052][T20240] netlink: 'syz.4.12688': attribute type 3 has an invalid length. [ 1285.447638][T20248] netlink: 4 bytes leftover after parsing attributes in process `syz.6.12687'. [ 1285.498820][T20236] netlink: 'syz.6.12687': attribute type 10 has an invalid length. [ 1285.532965][T20251] netlink: 4 bytes leftover after parsing attributes in process `syz.0.12689'. [ 1285.574757][T20253] No such timeout policy "syz0" [ 1285.714374][T20258] netlink: 12 bytes leftover after parsing attributes in process `syz.6.12692'. [ 1285.988753][T20274] netlink: 4 bytes leftover after parsing attributes in process `syz.7.12698'. [ 1286.038133][T20274] netlink: 'syz.7.12698': attribute type 30 has an invalid length. [ 1286.093195][T20277] netlink: 284 bytes leftover after parsing attributes in process `syz.0.12699'. [ 1286.121883][T20277] ip6tnl0: Caught tx_queue_len zero misconfig [ 1286.171606][T20279] sctp: [Deprecated]: syz.5.12700 (pid 20279) Use of int in maxseg socket option. [ 1286.171606][T20279] Use struct sctp_assoc_value instead [ 1286.368453][T20295] tipc: Started in network mode [ 1286.369238][T20294] x_tables: ip_tables: DNAT target: used from hooks POSTROUTING, but only usable from PREROUTING/OUTPUT [ 1286.373354][T20295] tipc: Node identity 4ebc2d2e595d, cluster identity 4711 [ 1286.373529][T20295] tipc: Enabled bearer , priority 0 [ 1286.444684][T20299] IPv6: RTM_NEWROUTE with no NLM_F_CREATE or NLM_F_REPLACE [ 1286.450039][T20298] netlink: 12 bytes leftover after parsing attributes in process `syz.0.12706'. [ 1286.451957][T20299] IPv6: NLM_F_CREATE should be set when creating new route [ 1286.468255][T20299] IPv6: NLM_F_CREATE should be set when creating new route [ 1286.482450][T20300] syzkaller0: entered promiscuous mode [ 1286.488502][T20300] syzkaller0: entered allmulticast mode [ 1286.579914][T20304] netlink: 'syz.4.12708': attribute type 4 has an invalid length. [ 1286.590756][T20304] netlink: 17 bytes leftover after parsing attributes in process `syz.4.12708'. [ 1287.014993][T20308] tipc: Resetting bearer [ 1287.032929][T20310] netlink: 8 bytes leftover after parsing attributes in process `syz.4.12708'. [ 1287.075287][T20332] x_tables: ip_tables: TPROXY target: used from hooks FORWARD, but only usable from PREROUTING [ 1287.088481][T20310] netlink: 44 bytes leftover after parsing attributes in process `syz.4.12708'. [ 1287.291728][T20291] tipc: Resetting bearer [ 1287.301886][T20341] netlink: 'syz.6.12717': attribute type 3 has an invalid length. [ 1287.871017][T20291] tipc: Disabling bearer [ 1288.091555][ T9] tipc: Node number set to 400633134 [ 1288.189430][T20350] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 1288.233058][T20356] tun0: tun_chr_ioctl cmd 1074025675 [ 1288.239403][T20356] tun0: persist disabled [ 1288.244151][T20356] netlink: 'syz.4.12721': attribute type 10 has an invalid length. [ 1288.254486][T20356] netlink: 228 bytes leftover after parsing attributes in process `syz.4.12721'. [ 1288.791814][T20396] netlink: 'syz.0.12732': attribute type 1 has an invalid length. [ 1288.803787][T30506] wlan1: Trigger new scan to find an IBSS to join [ 1288.818266][T20396] netlink: 'syz.0.12732': attribute type 3 has an invalid length. [ 1288.922639][T20411] tls_set_device_offload: netdev not found [ 1288.940015][T20411] netlink: 'syz.0.12736': attribute type 26 has an invalid length. [ 1289.171598][T20424] bond0: Caught tx_queue_len zero misconfig [ 1289.556477][T20448] batman_adv: Cannot find parent device. Skipping batadv-on-batadv check for gretap1 [ 1289.590374][T20448] gretap1: default qdisc (pfifo_fast) fail, fallback to noqueue [ 1289.611025][T20448] gretap1: entered promiscuous mode [ 1289.624482][T20448] gretap1: entered allmulticast mode [ 1289.689849][T20451] bond3: option fail_over_mac: invalid value (16) [ 1289.701203][T20451] bond3 (unregistering): Released all slaves [ 1290.372338][T20496] xt_ecn: cannot match TCP bits for non-tcp packets [ 1290.421197][T20494] xt_addrtype: input interface limitation not valid in POSTROUTING and OUTPUT [ 1290.472153][T20507] __nla_validate_parse: 17 callbacks suppressed [ 1290.472174][T20507] netlink: 8 bytes leftover after parsing attributes in process `syz.0.12760'. [ 1290.684496][T20511] bond2: invalid ARP target 0.0.0.0 specified for addition [ 1290.691510][T20520] netlink: 12 bytes leftover after parsing attributes in process `syz.6.12768'. [ 1290.729160][T20511] bond2: option arp_ip_target: invalid value (0) [ 1290.738132][T20511] bond2 (unregistering): Released all slaves [ 1290.754431][T20524] netlink: 8 bytes leftover after parsing attributes in process `syz.6.12768'. [ 1290.786936][T20530] netlink: 13 bytes leftover after parsing attributes in process `syz.0.12769'. [ 1290.906591][T20524] netdevsim netdevsim6 netdevsim0: entered promiscuous mode [ 1290.950831][T20542] netlink: 40 bytes leftover after parsing attributes in process `syz.7.12772'. [ 1291.005234][T20550] netlink: 64138 bytes leftover after parsing attributes in process `syz.4.12773'. [ 1291.154583][T20561] netlink: 44 bytes leftover after parsing attributes in process `syz.4.12773'. [ 1291.239505][T20567] netlink: 24 bytes leftover after parsing attributes in process `syz.0.12777'. [ 1291.276108][T20561] bond1: option primary: mode dependency failed, not supported in mode balance-rr(0) [ 1291.303371][T20572] netlink: 108 bytes leftover after parsing attributes in process `syz.7.12778'. [ 1291.315402][T20561] bond1 (unregistering): Released all slaves [ 1291.511048][T20582] netlink: 8 bytes leftover after parsing attributes in process `syz.7.12782'. [ 1291.613528][T20591] netlink: 'syz.0.12786': attribute type 1 has an invalid length. [ 1291.624428][T20592] netlink: 'syz.0.12786': attribute type 1 has an invalid length. [ 1292.079769][T20620] netlink: 'syz.4.12796': attribute type 12 has an invalid length. [ 1292.210156][T20630] netlink: 'syz.4.12799': attribute type 83 has an invalid length. [ 1292.220086][T20632] xt_hashlimit: size too large, truncated to 1048576 [ 1292.271259][T20628] syzkaller0: entered promiscuous mode [ 1292.279075][T20628] syzkaller0: entered allmulticast mode [ 1292.414366][T20644] netlink: 'syz.7.12804': attribute type 1 has an invalid length. [ 1292.825044][ T9373] IPVS: starting estimator thread 0... [ 1292.916010][T20672] IPVS: using max 34 ests per chain, 81600 per kthread [ 1292.922242][T20679] netlink: 'syz.7.12817': attribute type 1 has an invalid length. [ 1293.080308][T20687] netlink: 'syz.6.12819': attribute type 39 has an invalid length. [ 1293.837652][T21656] wlan1: Trigger new scan to find an IBSS to join [ 1295.648090][T20679] workqueue: Failed to create a rescuer kthread for wq "bond2": -EINTR [ 1295.741467][T20713] __nla_validate_parse: 6 callbacks suppressed [ 1295.741486][T20713] netlink: 8 bytes leftover after parsing attributes in process `syz.4.12821'. [ 1295.805911][T20713] netlink: 24 bytes leftover after parsing attributes in process `syz.4.12821'. [ 1295.892369][T20719] veth0: entered promiscuous mode [ 1295.921734][T20716] veth0: left promiscuous mode [ 1296.067229][T17099] Bluetooth: hci7: link tx timeout [ 1296.072792][T17099] Bluetooth: hci7: killing stalled connection 11:aa:aa:aa:aa:aa [ 1296.105739][T22375] Bluetooth: hci7: link tx timeout [ 1296.113037][T22375] Bluetooth: hci7: killing stalled connection 11:aa:aa:aa:aa:aa [ 1296.125339][T20733] netlink: 408 bytes leftover after parsing attributes in process `syz.6.12824'. [ 1296.159815][T20734] sctp: [Deprecated]: syz.4.12827 (pid 20734) Use of int in max_burst socket option. [ 1296.159815][T20734] Use struct sctp_assoc_value instead [ 1296.177334][T30512] wlan1: Creating new IBSS network, BSSID 46:25:6e:9b:8b:d4 [ 1296.457302][T20750] netlink: 'syz.4.12831': attribute type 10 has an invalid length. [ 1296.475583][T20750] netlink: 4 bytes leftover after parsing attributes in process `syz.4.12831'. [ 1296.564228][T20748] netlink: 8 bytes leftover after parsing attributes in process `syz.7.12830'. [ 1297.029101][T20766] netlink: 8 bytes leftover after parsing attributes in process `syz.0.12838'. [ 1297.036401][T20768] syzkaller0: entered promiscuous mode [ 1297.043566][T20768] syzkaller0: entered allmulticast mode [ 1297.085468][T20772] netlink: 'syz.5.12841': attribute type 1 has an invalid length. [ 1297.252284][T20782] netlink: 4 bytes leftover after parsing attributes in process `syz.5.12845'. [ 1297.419059][T20798] netlink: 'syz.5.12851': attribute type 10 has an invalid length. [ 1297.428236][T20798] netlink: 228 bytes leftover after parsing attributes in process `syz.5.12851'. [ 1297.474685][T20802] netlink: 8 bytes leftover after parsing attributes in process `syz.0.12852'. [ 1297.608766][T20810] netlink: 'syz.0.12856': attribute type 3 has an invalid length. [ 1297.613331][T20812] netlink: 12 bytes leftover after parsing attributes in process `syz.4.12854'. [ 1297.864797][T20830] rdma_op ffff8880436ce1f0 conn xmit_rdma 0000000000000000 [ 1298.156692][T22375] Bluetooth: hci7: command 0x0406 tx timeout [ 1298.537289][T20878] net veth1_virt_wifi virt_wifi0: default qdisc (pfifo_fast) fail, fallback to noqueue [ 1298.563399][T20878] net veth1_virt_wifi virt_wifi0: entered promiscuous mode [ 1298.586414][T20878] net veth1_virt_wifi virt_wifi0: entered allmulticast mode [ 1299.003557][T20912] netlink: 'syz.0.12884': attribute type 1 has an invalid length. [ 1299.041389][T20912] netlink: 'syz.0.12884': attribute type 1 has an invalid length. [ 1299.067585][T20916] syzkaller1: entered promiscuous mode [ 1299.073102][T20916] syzkaller1: entered allmulticast mode [ 1299.077573][T20912] netlink: 'syz.0.12884': attribute type 8 has an invalid length. [ 1299.102884][T20823] vxcan1 speed is unknown, defaulting to 1000 [ 1299.120499][T17504] IPVS: starting estimator thread 0... [ 1299.181184][T20923] IPVS: sh: FWM 3 0x00000003 - no destination available [ 1299.218447][T20920] IPVS: using max 40 ests per chain, 96000 per kthread [ 1299.421364][T20934] netlink: 'syz.4.12889': attribute type 4 has an invalid length. [ 1300.161174][ T1299] aoe: packet could not be sent on bond0. consider increasing tx_queue_len [ 1300.187056][ T1299] lec:lec_start_xmit: lec0:No lecd attached [ 1300.193700][ T1299] aoe: packet could not be sent on ipvlan1. consider increasing tx_queue_len [ 1301.711552][T20946] __nla_validate_parse: 6 callbacks suppressed [ 1301.711564][T20946] netlink: 12 bytes leftover after parsing attributes in process `syz.4.12893'. [ 1301.861755][T20952] netlink: 32 bytes leftover after parsing attributes in process `syz.6.12895'. [ 1301.908926][T20952] netlink: 32 bytes leftover after parsing attributes in process `syz.6.12895'. [ 1302.104359][T20965] netlink: 'syz.6.12900': attribute type 2 has an invalid length. [ 1302.113020][T20965] netlink: 12 bytes leftover after parsing attributes in process `syz.6.12900'. [ 1302.175910][T20965] netlink: 260 bytes leftover after parsing attributes in process `syz.6.12900'. [ 1302.239442][T16664] Bluetooth: hci1: command 0x0c20 tx timeout [ 1302.381368][T20976] netlink: 12 bytes leftover after parsing attributes in process `syz.7.12903'. [ 1302.421431][T20979] pim6reg1: entered promiscuous mode [ 1302.438364][T20983] netlink: 24 bytes leftover after parsing attributes in process `syz.7.12903'. [ 1302.446705][T20979] pim6reg1: entered allmulticast mode [ 1302.463700][T20981] sch_tbf: burst 127 is lower than device syzkaller0 mtu (1514) ! [ 1302.525389][T20981] tipc: Started in network mode [ 1302.531600][T20981] tipc: Node identity 4eeff891e291, cluster identity 4711 [ 1302.540185][T20981] tipc: Enabled bearer , priority 0 [ 1302.614490][T20985] syzkaller0: entered promiscuous mode [ 1302.620546][T20985] syzkaller0: entered allmulticast mode [ 1302.628464][T20983] netlink: 32 bytes leftover after parsing attributes in process `syz.7.12903'. [ 1302.645108][T20981] netlink: 44 bytes leftover after parsing attributes in process `syz.6.12904'. [ 1302.658473][T20981] tipc: Resetting bearer [ 1302.679824][T20980] tipc: Resetting bearer [ 1302.720532][T20980] tipc: Disabling bearer [ 1302.747264][T20987] netlink: 'syz.7.12906': attribute type 1 has an invalid length. [ 1302.755113][T20987] netlink: 228 bytes leftover after parsing attributes in process `syz.7.12906'. [ 1302.774725][T20987] lo: entered promiscuous mode [ 1302.784396][T20987] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check. [ 1302.801534][T20989] lo: Caught tx_queue_len zero misconfig [ 1302.917644][T20995] 8021q: adding VLAN 0 to HW filter on device batadv1 [ 1302.928186][T20995] team0: Failed to send port change of device batadv1 via netlink (err -105) [ 1302.939272][T20995] team0: Failed to send options change via netlink (err -105) [ 1302.948219][T20995] team0: Port device batadv1 added [ 1303.109338][T21006] sctp: [Deprecated]: syz.6.12912 (pid 21006) Use of int in max_burst socket option. [ 1303.109338][T21006] Use struct sctp_assoc_value instead [ 1303.364462][T21032] netlink: 'syz.4.12920': attribute type 1 has an invalid length. [ 1303.375521][T21032] netlink: 'syz.4.12920': attribute type 4 has an invalid length. [ 1303.676887][T16664] Bluetooth: hci4: unexpected cc 0x0c03 length: 249 > 1 [ 1303.690187][T16664] Bluetooth: hci4: unexpected cc 0x1003 length: 249 > 9 [ 1303.700047][T16664] Bluetooth: hci4: unexpected cc 0x1001 length: 249 > 9 [ 1303.715196][T16664] Bluetooth: hci4: unexpected cc 0x0c23 length: 249 > 4 [ 1303.724859][T16664] Bluetooth: hci4: unexpected cc 0x0c38 length: 249 > 2 [ 1303.864938][T21054] bond0: option ad_select: unable to set because the bond device is up [ 1304.342906][T30509] netdevsim netdevsim5 eth3 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 1304.372754][T30509] netdevsim netdevsim5 eth3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1304.411258][T30509] netdevsim netdevsim5 eth3 (unregistering): unset [1, 1] type 2 family 0 port 42660 - 0 [ 1304.442376][T21071] netdevsim netdevsim7 netdevsim0: entered promiscuous mode [ 1304.459318][T21071] A link change request failed with some changes committed already. Interface netdevsim0 may have been left with an inconsistent configuration, please check. [ 1304.511210][T30509] netdevsim netdevsim5 eth2 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 1304.526137][T30509] netdevsim netdevsim5 eth2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1304.538083][T30509] netdevsim netdevsim5 eth2 (unregistering): unset [1, 1] type 2 family 0 port 42660 - 0 [ 1304.603204][T30509] netdevsim netdevsim5 eth1 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 1304.646086][T30509] netdevsim netdevsim5 eth1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1304.657144][T30509] netdevsim netdevsim5 eth1 (unregistering): unset [1, 1] type 2 family 0 port 42660 - 0 [ 1304.729818][T21043] vxcan1 speed is unknown, defaulting to 1000 [ 1304.798865][T30509] netdevsim netdevsim5 eth0 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 1304.833930][T30509] netdevsim netdevsim5 eth0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1304.856231][T30509] netdevsim netdevsim5 eth0 (unregistering): unset [1, 1] type 2 family 0 port 42660 - 0 [ 1305.179147][T21114] netlink: 'syz.0.12946': attribute type 1 has an invalid length. [ 1305.188200][T21114] netlink: 'syz.0.12946': attribute type 1 has an invalid length. [ 1305.199807][T21114] netlink: 'syz.0.12946': attribute type 2 has an invalid length. [ 1305.210118][T21115] siw: device registration error -23 [ 1305.215889][T30510] netdevsim netdevsim5 eth5: set [0, 0] type 1 family 0 port 8472 - 0 [ 1305.252341][T30512] netdevsim netdevsim5 eth6: set [0, 0] type 1 family 0 port 8472 - 0 [ 1305.334868][T30512] netdevsim netdevsim5 eth7: set [0, 0] type 1 family 0 port 8472 - 0 [ 1305.453451][T21119] vlan2: entered allmulticast mode [ 1305.459444][T21119] mac80211_hwsim hwsim146 wlan0: entered allmulticast mode [ 1305.472289][T30506] netdevsim netdevsim5 eth8: set [0, 0] type 1 family 0 port 8472 - 0 [ 1305.637746][T21140] netlink: 'syz.0.12952': attribute type 1 has an invalid length. [ 1305.756049][T16664] Bluetooth: hci4: command tx timeout [ 1305.845744][ C0] lec0: NETDEV WATCHDOG: CPU: 0: transmit queue 0 timed out 5660 ms [ 1305.853806][ C0] lec:lec_tx_timeout: lec0 [ 1305.859911][ C0] lec:lec_start_xmit: lec0:No lecd attached [ 1306.045092][T30509] bond3 (unregistering): (slave ip6gretap1): Releasing active interface [ 1306.278244][T30509] bond1 (unregistering): (slave gretap1): Releasing backup interface [ 1306.440059][T30509] bond1 (unregistering): (slave bridge2): Releasing backup interface [ 1306.448410][T30509] bridge2 (unregistering): left promiscuous mode [ 1306.771791][T30509] bond6 (unregistering): (slave macvlan2): Releasing active interface [ 1306.789310][T30509] bond0 (unregistering): Released all slaves [ 1306.799307][T30509] bond1 (unregistering): Released all slaves [ 1306.813481][T30509] bond2 (unregistering): Released all slaves [ 1306.827556][T30509] bond3 (unregistering): Released all slaves [ 1306.842112][T30509] bond4 (unregistering): Released all slaves [ 1306.863627][T30509] bond5 (unregistering): Released all slaves [ 1306.879178][T30509] bond6 (unregistering): Released all slaves [ 1306.893138][T30509] bond7 (unregistering): Released all slaves [ 1306.911869][T30509] bond8 (unregistering): Released all slaves [ 1306.925002][T30509] bond9 (unregistering): Released all slaves [ 1306.939645][T30509] bond10 (unregistering): Released all slaves [ 1306.958941][T30509] bond11 (unregistering): Released all slaves [ 1306.975889][T30509] bond12 (unregistering): Released all slaves [ 1307.009989][T21139] bridge0: port 3(gretap0) entered blocking state [ 1307.020814][T21139] bridge0: port 3(gretap0) entered disabled state [ 1307.040986][T21139] gretap0: entered allmulticast mode [ 1307.051877][T21139] gretap0: entered promiscuous mode [ 1307.058635][T21139] bridge0: port 3(gretap0) entered blocking state [ 1307.065234][T21139] bridge0: port 3(gretap0) entered forwarding state [ 1307.095881][T21146] __nla_validate_parse: 12 callbacks suppressed [ 1307.095902][T21146] netlink: 8 bytes leftover after parsing attributes in process `syz.0.12952'. [ 1307.137379][T21166] openvswitch: netlink: Duplicate or invalid key (type 0). [ 1307.144649][T21166] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 1307.287899][T30509] 9: left promiscuous mode [ 1307.364987][T30509] tipc: Left network mode [ 1307.480607][T21043] chnl_net:caif_netlink_parms(): no params data found [ 1307.614615][T21190] netlink: 'syz.4.12960': attribute type 2 has an invalid length. [ 1307.650562][T21193] x_tables: duplicate underflow at hook 3 [ 1307.718736][T21190] 9: entered promiscuous mode [ 1307.724598][T21200] netlink: 'syz.4.12960': attribute type 4 has an invalid length. [ 1307.837166][T16664] Bluetooth: hci4: command tx timeout [ 1307.973557][T21214] team0: Cannot enslave team device to itself [ 1308.097692][T21220] netlink: 104 bytes leftover after parsing attributes in process `syz.0.12965'. [ 1308.225301][T21226] xt_TPROXY: Can be used only with -p tcp or -p udp [ 1308.254454][T21043] bridge0: port 1(bridge_slave_0) entered blocking state [ 1308.291044][T21043] bridge0: port 1(bridge_slave_0) entered disabled state [ 1308.311895][T21043] bridge_slave_0: entered allmulticast mode [ 1308.333271][T21043] bridge_slave_0: entered promiscuous mode [ 1308.358529][T21043] bridge0: port 2(bridge_slave_1) entered blocking state [ 1308.376313][T21043] bridge0: port 2(bridge_slave_1) entered disabled state [ 1308.384896][T21238] netlink: 12 bytes leftover after parsing attributes in process `syz.6.12968'. [ 1308.431144][T21043] bridge_slave_1: entered allmulticast mode [ 1308.458668][T21043] bridge_slave_1: entered promiscuous mode [ 1308.715293][T21043] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 1308.752080][T21252] netlink: 28 bytes leftover after parsing attributes in process `syz.7.12975'. [ 1308.769339][T21043] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 1308.876991][T21043] team0: Port device team_slave_0 added [ 1308.919897][T21043] team0: Port device team_slave_1 added [ 1308.952756][T21257] netlink: 48 bytes leftover after parsing attributes in process `syz.4.12974'. [ 1309.012217][T21273] RDS: rds_bind could not find a transport for ::ffff:172.20.20.170, load rds_tcp or rds_rdma? [ 1309.095089][T21043] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 1309.107120][T21043] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 1309.138289][T21043] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 1309.160390][T21043] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 1309.185290][T21043] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 1309.241040][T21043] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 1309.300020][T21289] netlink: 12 bytes leftover after parsing attributes in process `syz.6.12981'. [ 1309.451465][T21043] hsr_slave_0: entered promiscuous mode [ 1309.471324][T21043] hsr_slave_1: entered promiscuous mode [ 1309.508274][T21043] debugfs: 'hsr0' already exists in 'hsr' [ 1309.521971][T21043] Cannot create hsr debugfs directory [ 1309.838484][T21305] netlink: 'syz.7.12988': attribute type 2 has an invalid length. [ 1309.853259][T21043] netdevsim netdevsim5 eth8 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 1309.909426][T21306] veth1_to_bond: entered allmulticast mode [ 1309.916387][T17099] Bluetooth: hci4: command tx timeout [ 1309.950926][T21043] netdevsim netdevsim5 eth7 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 1310.001220][T21279] vxcan1 speed is unknown, defaulting to 1000 [ 1310.069302][T21043] netdevsim netdevsim5 eth6 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 1310.223642][T21043] netdevsim netdevsim5 eth5 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 1310.660073][T21304] veth1_to_bond: left allmulticast mode [ 1310.876197][ C0] lec0: NETDEV WATCHDOG: CPU: 0: transmit queue 0 timed out 5010 ms [ 1310.884354][ C0] lec:lec_tx_timeout: lec0 [ 1310.892867][T30509] hsr_slave_0: left promiscuous mode [ 1310.899680][T30509] hsr_slave_1: left promiscuous mode [ 1310.911900][T30509] veth1_vlan: left allmulticast mode [ 1310.917926][T30509] veth1_vlan: left promiscuous mode [ 1310.923257][T30509] veth0_macvtap: left promiscuous mode [ 1310.928972][T30509] veth0_vlan: left promiscuous mode [ 1311.463112][T30509] IPVS: stop unused estimator thread 0... [ 1311.661892][T21250] nci: __nci_request: wait_for_completion_interruptible_timeout failed -512 [ 1311.682778][T21308] netlink: 'syz.7.12989': attribute type 1 has an invalid length. [ 1311.711977][T21308] netlink: 'syz.7.12989': attribute type 1 has an invalid length. [ 1311.807187][T21043] netdevsim netdevsim5 netdevsim0: renamed from eth0 [ 1311.847035][T21043] netdevsim netdevsim5 netdevsim1: renamed from eth1 [ 1311.877079][T21043] netdevsim netdevsim5 netdevsim2: renamed from eth2 [ 1311.918276][T21314] batman_adv: Cannot find parent device. Skipping batadv-on-batadv check for gretap2 [ 1311.963359][T21043] netdevsim netdevsim5 netdevsim3: renamed from eth3 [ 1311.983874][T21317] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 1311.996400][T17099] Bluetooth: hci4: command tx timeout [ 1312.373407][T21344] netlink: 4 bytes leftover after parsing attributes in process `syz.7.12998'. [ 1312.412532][T21344] netlink: 4 bytes leftover after parsing attributes in process `syz.7.12998'. [ 1312.421250][T21043] 8021q: adding VLAN 0 to HW filter on device bond0 [ 1312.475269][T21043] 8021q: adding VLAN 0 to HW filter on device team0 [ 1312.532980][ T78] bridge0: port 1(bridge_slave_0) entered blocking state [ 1312.540229][ T78] bridge0: port 1(bridge_slave_0) entered forwarding state [ 1312.611726][ T78] bridge0: port 2(bridge_slave_1) entered blocking state [ 1312.618928][ T78] bridge0: port 2(bridge_slave_1) entered forwarding state [ 1313.086924][T21378] netlink: 12 bytes leftover after parsing attributes in process `syz.4.13005'. [ 1313.126300][T21378] netlink: 4 bytes leftover after parsing attributes in process `syz.4.13005'. [ 1313.150176][T21380] netlink: 'syz.6.13004': attribute type 11 has an invalid length. [ 1313.314249][T21377] netlink: 8 bytes leftover after parsing attributes in process `syz.6.13004'. [ 1313.431630][T21656] netdevsim netdevsim4 netdevsim0: set [0, 0] type 1 family 0 port 8472 - 0 [ 1313.453262][T21656] netdevsim netdevsim4 netdevsim1: set [0, 0] type 1 family 0 port 8472 - 0 [ 1313.611193][T21656] netdevsim netdevsim4 netdevsim2: set [0, 0] type 1 family 0 port 8472 - 0 [ 1313.628209][T21656] netdevsim netdevsim4 netdevsim3: set [0, 0] type 1 family 0 port 8472 - 0 [ 1313.663136][T21043] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 1314.564035][T21043] veth0_vlan: entered promiscuous mode [ 1314.574201][T21454] netlink: 16 bytes leftover after parsing attributes in process `syz.6.13020'. [ 1314.591557][T21043] veth1_vlan: entered promiscuous mode [ 1314.596906][T21453] netlink: 'syz.7.13019': attribute type 1 has an invalid length. [ 1314.674300][T21043] veth0_macvtap: entered promiscuous mode [ 1314.701840][T21043] veth1_macvtap: entered promiscuous mode [ 1314.802590][T21043] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 1314.819126][T21462] sctp: [Deprecated]: syz.4.13021 (pid 21462) Use of struct sctp_assoc_value in delayed_ack socket option. [ 1314.819126][T21462] Use struct sctp_sack_info instead [ 1314.872869][T21043] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 1314.924049][ T78] netdevsim netdevsim5 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 1314.943591][ T78] netdevsim netdevsim5 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 1314.982608][ T78] netdevsim netdevsim5 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 1315.003551][ T6763] netdevsim netdevsim5 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 1315.093135][T21475] netlink: 'syz.6.13024': attribute type 2 has an invalid length. [ 1315.222743][T30506] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 1315.252570][T30506] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 1315.373803][T30509] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 1315.384663][T21485] netlink: 'syz.0.13025': attribute type 1 has an invalid length. [ 1315.405082][T30509] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 1315.433790][T21485] netlink: 88 bytes leftover after parsing attributes in process `syz.0.13025'. [ 1315.461413][T21485] netlink: 1 bytes leftover after parsing attributes in process `syz.0.13025'. [ 1315.499010][T21485] netlink: 'syz.0.13025': attribute type 1 has an invalid length. [ 1315.535981][T21485] netlink: 634 bytes leftover after parsing attributes in process `syz.0.13025'. [ 1315.837959][T21512] IPVS: set_ctl: invalid protocol: 50 255.255.255.255:20001 [ 1315.846003][ T47] IPVS: starting estimator thread 0... [ 1315.922716][T21467] vxcan1 speed is unknown, defaulting to 1000 [ 1315.946508][T21513] IPVS: using max 36 ests per chain, 86400 per kthread [ 1316.032279][T21525] netlink: 212 bytes leftover after parsing attributes in process `syz.5.13033'. [ 1316.149473][T21531] syzkaller0: entered promiscuous mode [ 1316.177262][T21531] syzkaller0: entered allmulticast mode [ 1316.410855][T21539] tipc: Enabling of bearer rejected, failed to enable media [ 1316.579651][T21553] netlink: 'syz.0.13042': attribute type 12 has an invalid length. [ 1316.919135][T21572] bond2: Unable to set peer notification delay as MII monitoring is disabled [ 1316.932494][T21572] bond2 (unregistering): Released all slaves [ 1317.128409][T21587] openvswitch: netlink: Unexpected mask (mask=200440, allowed=10048) [ 1317.442848][T21602] 0: reclassify loop, rule prio 0, protocol 700 [ 1317.539397][T21608] Cannot find add_set index 2 as target [ 1317.561439][T21608] x_tables: duplicate underflow at hook 2 [ 1317.581163][T21613] netlink: 'syz.0.13052': attribute type 21 has an invalid length. [ 1317.659404][T21613] netlink: 'syz.0.13052': attribute type 6 has an invalid length. [ 1317.713831][T21613] __nla_validate_parse: 2 callbacks suppressed [ 1317.713850][T21613] netlink: 132 bytes leftover after parsing attributes in process `syz.0.13052'. [ 1317.843389][T21619] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check. [ 1318.070186][T21630] netlink: 20 bytes leftover after parsing attributes in process `syz.7.13058'. [ 1318.109540][T21639] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 1318.353564][T21661] netlink: 'syz.7.13065': attribute type 2 has an invalid length. [ 1318.359578][T21654] sit0: entered promiscuous mode [ 1318.368721][T21649] netlink: 'syz.5.13062': attribute type 13 has an invalid length. [ 1318.371992][T21654] netlink: 'syz.6.13063': attribute type 1 has an invalid length. [ 1318.396617][T21654] netlink: 1 bytes leftover after parsing attributes in process `syz.6.13063'. [ 1318.438838][T21658] dvmrp0: entered allmulticast mode [ 1318.598176][T21671] netlink: 'syz.6.13067': attribute type 1 has an invalid length. [ 1318.629861][T21661] 9: entered promiscuous mode [ 1318.769001][T21673] bond2: (slave ip6gretap1): making interface the new active one [ 1318.784258][T21673] bond2: (slave ip6gretap1): Enslaving as an active interface with an up link [ 1318.981346][T21697] netlink: 24 bytes leftover after parsing attributes in process `syz.0.13071'. [ 1319.089483][T21701] netlink: 20 bytes leftover after parsing attributes in process `syz.6.13072'. [ 1319.100706][T21701] IPv6: NLM_F_CREATE should be specified when creating new route [ 1319.496241][T21714] netlink: 129 bytes leftover after parsing attributes in process `syz.0.13074'. [ 1319.688049][T21722] netlink: 16 bytes leftover after parsing attributes in process `syz.0.13077'. [ 1319.933634][T21734] netlink: 8 bytes leftover after parsing attributes in process `syz.4.13079'. [ 1319.984657][T21736] netlink: 40 bytes leftover after parsing attributes in process `syz.4.13079'. [ 1320.110365][T21746] bond0: (slave rose0): Error: Device is in use and cannot be enslaved [ 1320.513607][T21771] netlink: 12 bytes leftover after parsing attributes in process `syz.0.13088'. [ 1320.599608][T21771] netlink: 'syz.0.13088': attribute type 1 has an invalid length. [ 1320.756751][T21785] bond2: entered promiscuous mode [ 1320.762370][T21785] 8021q: adding VLAN 0 to HW filter on device bond2 [ 1320.902630][T21785] 8021q: adding VLAN 0 to HW filter on device bond2 [ 1320.934322][T21785] bond2: (slave sit1): The slave device specified does not support setting the MAC address [ 1320.958490][T21785] bond2: (slave sit1): Error -95 calling set_mac_address [ 1321.017961][T21800] netdevsim netdevsim4: loading /lib/firmware/. failed with error -22 [ 1321.043415][T21802] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 1321.051851][T21802] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 1321.054423][T21800] netdevsim netdevsim4: Direct firmware load for . failed with error -22 [ 1321.070086][T21800] netdevsim netdevsim4: Falling back to sysfs fallback for: . [ 1321.081720][T21802] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 1321.098126][T21802] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 1321.111062][T21807] netlink: 'syz.5.13094': attribute type 1 has an invalid length. [ 1321.563454][ T78] netdevsim netdevsim7 netdevsim0: set [0, 0] type 1 family 0 port 8472 - 0 [ 1321.587778][ T78] netdevsim netdevsim7 netdevsim1: set [0, 0] type 1 family 0 port 8472 - 0 [ 1321.615178][ T78] netdevsim netdevsim7 netdevsim2: set [0, 0] type 1 family 0 port 8472 - 0 [ 1321.646950][ T78] netdevsim netdevsim7 netdevsim3: set [0, 0] type 1 family 0 port 8472 - 0 [ 1321.666874][T21833] lo: Caught tx_queue_len zero misconfig [ 1322.023618][T21852] vlan0: Caught tx_queue_len zero misconfig [ 1322.131426][T21852] vlan3: entered promiscuous mode [ 1322.139378][T21852] bridge0: entered promiscuous mode [ 1322.144790][T21852] vlan3: entered allmulticast mode [ 1322.182656][T21852] bridge0: entered allmulticast mode [ 1322.228349][T21773] vxcan1 speed is unknown, defaulting to 1000 [ 1322.268845][T21856] 8021q: adding VLAN 0 to HW filter on device batadv1 [ 1322.282550][T21856] team0: Port device batadv1 added [ 1322.348417][T21862] xt_policy: too many policy elements [ 1322.988881][T21907] __nla_validate_parse: 4 callbacks suppressed [ 1322.988900][T21907] netlink: 36 bytes leftover after parsing attributes in process `syz.4.13119'. [ 1323.182538][T21919] netlink: 'syz.5.13121': attribute type 21 has an invalid length. [ 1323.202958][T21912] netlink: 40 bytes leftover after parsing attributes in process `syz.7.13120'. [ 1323.423649][T21916] bond1: ARP target 1.0.0.0 is already present [ 1323.447226][T21916] bond1: option arp_ip_target: invalid value (1) [ 1323.474243][T21916] bond1 (unregistering): Released all slaves [ 1323.606635][T21923] netlink: 84 bytes leftover after parsing attributes in process `syz.7.13123'. [ 1323.692482][T21948] netlink: 12 bytes leftover after parsing attributes in process `syz.0.13125'. [ 1323.822439][T21953] netlink: 'syz.4.13126': attribute type 27 has an invalid length. [ 1323.854597][T21955] netlink: 16 bytes leftover after parsing attributes in process `syz.0.13125'. [ 1324.216091][T21966] netlink: 12 bytes leftover after parsing attributes in process `syz.0.13129'. [ 1324.290695][T21972] x_tables: duplicate underflow at hook 1 [ 1324.423553][T21978] netlink: 164 bytes leftover after parsing attributes in process `syz.0.13132'. [ 1324.487048][T21978] netlink: 164 bytes leftover after parsing attributes in process `syz.0.13132'. [ 1324.528002][T21989] netlink: 8 bytes leftover after parsing attributes in process `syz.5.13134'. [ 1324.559135][T21978] netlink: 60 bytes leftover after parsing attributes in process `syz.0.13132'. [ 1325.388952][T22031] delete_channel: no stack [ 1326.093364][T22058] netlink: 'syz.7.13154': attribute type 21 has an invalid length. [ 1326.229953][T30505] wlan1: No active IBSS STAs - trying to scan for other IBSS networks with same SSID (merge) [ 1326.280521][T22077] bond3: option tlb_dynamic_lb: mode dependency failed, not supported in mode balance-xor(2) [ 1326.367092][T22077] bond3 (unregistering): Released all slaves [ 1326.607021][T22096] netlink: 'syz.0.13161': attribute type 1 has an invalid length. [ 1327.163480][T22138] ip6gre0: Caught tx_queue_len zero misconfig [ 1327.272254][T22140] netlink: 'syz.0.13173': attribute type 7 has an invalid length. [ 1327.293294][T22146] netem: change failed [ 1327.386966][T22103] lec:lec_atm_close: lec0: Shut down! [ 1327.699120][T22168] netlink: 'syz.0.13180': attribute type 1 has an invalid length. [ 1327.799545][T22169] netlink: zone id is out of range [ 1327.804703][T22169] netlink: zone id is out of range [ 1327.810283][T22176] netlink: zone id is out of range [ 1327.815502][T22176] netlink: zone id is out of range [ 1327.831049][T22168] bond3: entered promiscuous mode [ 1327.854901][T22169] netlink: zone id is out of range [ 1327.864223][T22168] 8021q: adding VLAN 0 to HW filter on device bond3 [ 1327.889705][T22176] netlink: zone id is out of range [ 1327.895038][T22169] netlink: zone id is out of range [ 1327.901624][T22176] netlink: zone id is out of range [ 1327.946470][T22169] netlink: zone id is out of range [ 1327.951617][T22169] netlink: zone id is out of range [ 1328.049811][T22192] __nla_validate_parse: 13 callbacks suppressed [ 1328.049840][T22192] netlink: 24 bytes leftover after parsing attributes in process `syz.4.13187'. [ 1328.210983][T22198] netlink: 'syz.0.13190': attribute type 29 has an invalid length. [ 1328.234207][T22198] netlink: 'syz.0.13190': attribute type 29 has an invalid length. [ 1328.259281][T22198] netlink: 508 bytes leftover after parsing attributes in process `syz.0.13190'. [ 1328.780277][T22195] lec:lec_atm_close: lec0: Shut down! [ 1328.781054][T22228] tipc: Started in network mode [ 1328.794646][T22228] tipc: Node identity 82f5888cd536, cluster identity 4711 [ 1328.804028][T22228] tipc: Enabled bearer , priority 0 [ 1328.836716][T22233] netlink: 'syz.6.13199': attribute type 4 has an invalid length. [ 1329.011147][T22227] tipc: Disabling bearer [ 1329.026374][T22243] netlink: 13 bytes leftover after parsing attributes in process `syz.6.13202'. [ 1329.108553][T22248] netlink: 4 bytes leftover after parsing attributes in process `syz.6.13203'. [ 1329.340758][T22263] bridge0: port 3(syz_tun) entered blocking state [ 1329.349773][T22263] bridge0: port 3(syz_tun) entered disabled state [ 1329.365316][T22263] syz_tun: entered allmulticast mode [ 1329.383069][T22263] syz_tun: entered promiscuous mode [ 1329.391042][T22263] bridge0: port 3(syz_tun) entered blocking state [ 1329.397645][T22263] bridge0: port 3(syz_tun) entered forwarding state [ 1329.448712][T22269] tipc: Enabled bearer , priority 0 [ 1329.556871][T22278] netlink: 4 bytes leftover after parsing attributes in process `syz.6.13212'. [ 1329.640397][T22279] tipc: Resetting bearer [ 1329.693633][T22284] netlink: 24 bytes leftover after parsing attributes in process `syz.4.13213'. [ 1329.832538][T22269] mac80211_hwsim hwsim146 wlan0: entered promiscuous mode [ 1329.910377][T22268] tipc: Disabling bearer [ 1330.296632][T22314] netlink: 4 bytes leftover after parsing attributes in process `syz.7.13222'. [ 1330.335528][T22318] xt_l2tp: wrong L2TP version: 0 [ 1330.343637][T22314] veth0: entered promiscuous mode [ 1330.381214][T22313] veth0: left promiscuous mode [ 1330.454247][T22329] netlink: 'syz.4.13226': attribute type 4 has an invalid length. [ 1330.464215][T22327] netlink: 56 bytes leftover after parsing attributes in process `syz.6.13225'. [ 1330.515417][T22328] bond1 (unregistering): Released all slaves [ 1331.364421][T22386] netlink: 27 bytes leftover after parsing attributes in process `syz.5.13243'. [ 1331.398075][T22391] netlink: 8 bytes leftover after parsing attributes in process `syz.0.13244'. [ 1331.639618][T22407] netlink: 'syz.4.13249': attribute type 9 has an invalid length. [ 1331.677045][T22407] netlink: 'syz.4.13249': attribute type 11 has an invalid length. [ 1331.695416][T22403] tipc: Resetting bearer [ 1331.722375][T22407] netlink: 'syz.4.13249': attribute type 12 has an invalid length. [ 1332.370251][T22428] syzkaller0: entered promiscuous mode [ 1332.379768][T22428] syzkaller0: entered allmulticast mode [ 1332.470985][T22444] netlink: 'syz.5.13258': attribute type 1 has an invalid length. [ 1332.532289][T22444] 8021q: adding VLAN 0 to HW filter on device bond1 [ 1332.661570][T22455] netlink: 'syz.4.13260': attribute type 1 has an invalid length. [ 1332.838563][T20935] block nbd8: Receive control failed (result -32) [ 1332.966717][T20935] Bluetooth: hci5: command 0x0406 tx timeout [ 1333.027732][T22473] SET target dimension over the limit! [ 1333.062519][T22476] __nla_validate_parse: 12 callbacks suppressed [ 1333.062537][T22476] netlink: 44 bytes leftover after parsing attributes in process `syz.4.13265'. [ 1333.110893][T22476] netlink: 40 bytes leftover after parsing attributes in process `syz.4.13265'. [ 1333.135996][T22476] bridge0: port 2(bridge_slave_1) entered disabled state [ 1333.153589][T22481] netlink: 20 bytes leftover after parsing attributes in process `syz.7.13264'. [ 1333.845981][ C0] lec0: NETDEV WATCHDOG: CPU: 0: transmit queue 0 timed out 5070 ms [ 1333.846014][T22403] Bluetooth: hci3: Opcode 0x0c1a failed: -110 [ 1333.854069][ C0] lec:lec_tx_timeout: lec0 [ 1333.856254][T17099] Bluetooth: hci3: command 0x0406 tx timeout [ 1333.860513][T22403] Bluetooth: hci3: Error when powering off device on rfkill (-110) [ 1334.330648][T22493] netlink: 'syz.4.13269': attribute type 1 has an invalid length. [ 1334.562456][T22403] Bluetooth: hci1: Opcode 0x0c1a failed: -4 [ 1334.576475][T22403] Bluetooth: hci1: Error when powering off device on rfkill (-4) [ 1334.614071][T22403] Bluetooth: hci5: Opcode 0x0c1a failed: -4 [ 1334.621181][T22403] Bluetooth: hci5: Error when powering off device on rfkill (-4) [ 1334.675300][T22403] Bluetooth: hci6: Opcode 0x0c1a failed: -4 [ 1334.684504][T22403] Bluetooth: hci6: Error when powering off device on rfkill (-4) [ 1334.709353][T22403] Bluetooth: hci7: Opcode 0x0c1a failed: -4 [ 1334.715547][T22403] Bluetooth: hci7: Error when powering off device on rfkill (-4) [ 1334.770218][T22403] Bluetooth: hci4: Opcode 0x0c1a failed: -4 [ 1334.785780][T22403] Bluetooth: hci4: Error when powering off device on rfkill (-4) [ 1335.094068][T22514] veth0: entered promiscuous mode [ 1335.120153][T22513] veth0: left promiscuous mode [ 1335.168927][T22508] scsi_nl_rcv_msg: discarding partial skb [ 1335.347614][T22501] vxcan1 speed is unknown, defaulting to 1000 [ 1335.731266][T22505] lec:lec_atm_close: lec0: Shut down! [ 1336.222816][T22560] netlink: 12 bytes leftover after parsing attributes in process `syz.5.13287'. [ 1336.414625][T22569] 8021q: VLANs not supported on ip6_vti0 [ 1336.658451][T22582] netlink: 4 bytes leftover after parsing attributes in process `syz.6.13291'. [ 1336.703505][T22588] netlink: 12 bytes leftover after parsing attributes in process `syz.7.13293'. [ 1336.800424][T22593] ip6t_rpfilter: unknown options [ 1336.801006][T22594] ip6t_rpfilter: unknown options [ 1337.221364][T22606] net_ratelimit: 276 callbacks suppressed [ 1337.221386][T22606] ICMPv6: Received fragmented ndisc packet. Carefully consider disabling suppress_frag_ndisc. [ 1337.263467][T22582] ip6tnl0: Caught tx_queue_len zero misconfig [ 1337.272238][T22609] netlink: 4 bytes leftover after parsing attributes in process `syz.0.13297'. [ 1337.289964][T22609] netlink: 20 bytes leftover after parsing attributes in process `syz.0.13297'. [ 1337.431241][T22613] tunl0: Caught tx_queue_len zero misconfig [ 1337.670217][T22621] netlink: 32 bytes leftover after parsing attributes in process `syz.0.13301'. [ 1337.707497][T22621] netlink: 32 bytes leftover after parsing attributes in process `syz.0.13301'. [ 1337.797287][T22630] openvswitch: netlink: Key type 11191 is out of range max 32 [ 1338.052152][T22654] xt_ecn: cannot match TCP bits for non-tcp packets [ 1338.324726][T22671] netlink: 'syz.5.13317': attribute type 4 has an invalid length. [ 1338.325525][T22666] __nla_validate_parse: 2 callbacks suppressed [ 1338.325542][T22666] netlink: 24 bytes leftover after parsing attributes in process `syz.7.13315'. [ 1338.380481][T22677] netlink: 'syz.5.13317': attribute type 4 has an invalid length. [ 1338.589400][T22688] netlink: 8 bytes leftover after parsing attributes in process `syz.7.13320'. [ 1338.651160][T22690] netlink: 12 bytes leftover after parsing attributes in process `syz.6.13321'. [ 1338.784993][T22696] xt_connbytes: Forcing CT accounting to be enabled [ 1338.827585][T22698] IPVS: set_ctl: invalid protocol: 94 255.255.255.255:20003 [ 1338.920682][T22705] IPVS: set_ctl: invalid protocol: 98 100.1.1.2:20003 [ 1338.994637][T22707] bridge0: received packet on syz_tun with own address as source address (addr:aa:aa:aa:aa:aa:aa, vlan:0) [ 1339.350140][T22734] netlink: 12 bytes leftover after parsing attributes in process `syz.0.13335'. [ 1339.613271][T22759] netlink: 8 bytes leftover after parsing attributes in process `syz.0.13342'. [ 1339.629308][T22762] netlink: 84 bytes leftover after parsing attributes in process `syz.6.13343'. [ 1339.687595][T22765] netlink: 84 bytes leftover after parsing attributes in process `syz.6.13343'. [ 1339.819053][T22773] netlink: 16 bytes leftover after parsing attributes in process `syz.7.13346'. [ 1339.871960][T22777] netlink: 32 bytes leftover after parsing attributes in process `syz.0.13347'. [ 1339.932364][T22777] 8021q: adding VLAN 0 to HW filter on device bond4 [ 1339.985310][T22788] netlink: 'syz.7.13349': attribute type 1 has an invalid length. [ 1339.993470][T22788] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 1340.043110][T22790] netlink: 'syz.6.13351': attribute type 24 has an invalid length. [ 1340.049700][T22792] openvswitch: netlink: IP tunnel dst address not specified [ 1340.193420][T22803] erspan0: entered promiscuous mode [ 1340.208339][T22800] erspan0: left promiscuous mode [ 1340.422150][T22812] netlink: 24 bytes leftover after parsing attributes in process `syz.4.13356'. [ 1340.448818][T22813] IPVS: set_ctl: invalid protocol: 136 172.20.20.38:20001 [ 1340.822455][T22836] bond0: entered promiscuous mode [ 1340.834201][T22836] bond_slave_0: entered promiscuous mode [ 1340.845075][T22836] bond_slave_1: entered promiscuous mode [ 1340.875873][ C0] lec0: NETDEV WATCHDOG: CPU: 0: transmit queue 0 timed out 5150 ms [ 1340.883962][ C0] lec:lec_tx_timeout: lec0 [ 1340.889546][T22836] bond0: left promiscuous mode [ 1340.894352][T22836] bond_slave_0: left promiscuous mode [ 1340.927820][T22836] bond_slave_1: left promiscuous mode [ 1341.011583][T22841] netlink: 'syz.0.13367': attribute type 13 has an invalid length. [ 1341.212588][T22861] netlink: 'syz.0.13367': attribute type 2 has an invalid length. [ 1341.410845][T22870] netlink: 'syz.6.13374': attribute type 7 has an invalid length. [ 1341.418971][T22870] netlink: 'syz.6.13374': attribute type 8 has an invalid length. [ 1341.705517][T22882] netlink: 'syz.5.13379': attribute type 61 has an invalid length. [ 1344.040318][T22902] __nla_validate_parse: 6 callbacks suppressed [ 1344.040338][T22902] netlink: 16 bytes leftover after parsing attributes in process `syz.6.13386'. [ 1344.212145][T22917] erspan0: entered promiscuous mode [ 1344.263039][T22917] netlink: 8 bytes leftover after parsing attributes in process `syz.7.13390'. [ 1344.542516][T22931] netlink: 12 bytes leftover after parsing attributes in process `syz.0.13395'. [ 1344.686887][T22931] 8021q: adding VLAN 0 to HW filter on device bond5 [ 1344.757910][T22949] netlink: 'syz.7.13402': attribute type 33 has an invalid length. [ 1344.782279][T22949] netlink: 152 bytes leftover after parsing attributes in process `syz.7.13402'. [ 1344.787872][T22952] netlink: 'syz.4.13401': attribute type 1 has an invalid length. [ 1344.870381][T22952] bond2: entered promiscuous mode [ 1344.881690][T22952] 8021q: adding VLAN 0 to HW filter on device bond2 [ 1344.919423][T22962] bond2: (slave bridge2): making interface the new active one [ 1344.940543][T22962] bridge2: entered promiscuous mode [ 1344.949357][T22962] bond2: (slave bridge2): Enslaving as an active interface with an up link [ 1344.959953][T22963] netlink: 4 bytes leftover after parsing attributes in process `syz.0.13404'. [ 1345.545871][T22992] netlink: 8 bytes leftover after parsing attributes in process `syz.7.13412'. [ 1345.573722][T22992] netlink: 24 bytes leftover after parsing attributes in process `syz.7.13412'. [ 1345.627493][T23001] nbd: couldn't find device at index 5 [ 1345.686091][T23001] netlink: 8 bytes leftover after parsing attributes in process `syz.5.13414'. [ 1345.729207][T23001] netlink: 4 bytes leftover after parsing attributes in process `syz.5.13414'. [ 1345.928269][T23007] netlink: 1 bytes leftover after parsing attributes in process `syz.4.13417'. [ 1346.210921][T23029] netlink: 'syz.4.13423': attribute type 1 has an invalid length. [ 1346.279487][T23029] bond3: (slave ipvlan2): enslaved VLAN challenged slave. Adding VLANs will be blocked as long as it is part of bond. [ 1346.297712][T23029] bond3: (slave ipvlan2): The slave device specified does not support setting the MAC address [ 1346.338699][T23029] bond3: (slave ipvlan2): Setting fail_over_mac to active for active-backup mode [ 1346.434561][T23030] bond3: (slave ipvlan2): enslaved VLAN challenged slave. Adding VLANs will be blocked as long as it is part of bond. [ 1346.485201][T23030] bond3: (slave ipvlan2): The slave device specified does not support setting the MAC address [ 1346.619299][T23043] syzkaller0: entered promiscuous mode [ 1346.633993][T23043] syzkaller0: entered allmulticast mode [ 1346.686845][T23044] batman_adv: Cannot find parent device. Skipping batadv-on-batadv check for gretap2 [ 1349.293803][T23057] veth0: entered promiscuous mode [ 1349.316274][T23056] veth0: entered promiscuous mode [ 1349.321401][T23056] veth0: left promiscuous mode [ 1349.346677][T23058] veth0: left promiscuous mode [ 1349.468453][T23077] __nla_validate_parse: 2 callbacks suppressed [ 1349.468473][T23077] netlink: 116 bytes leftover after parsing attributes in process `syz.0.13434'. [ 1349.594430][T23079] syzkaller0: entered promiscuous mode [ 1349.602172][T23079] syzkaller0: entered allmulticast mode [ 1349.649670][T23088] veth0: entered promiscuous mode [ 1349.703480][T23088] netlink: 4 bytes leftover after parsing attributes in process `syz.4.13437'. [ 1349.766702][T23040] vxcan1 speed is unknown, defaulting to 1000 [ 1349.805524][T23097] netlink: 28 bytes leftover after parsing attributes in process `syz.5.13440'. [ 1349.815072][T23097] netlink: 28 bytes leftover after parsing attributes in process `syz.5.13440'. [ 1349.893917][T23097] gretap0: entered promiscuous mode [ 1349.916994][T23097] gretap0: left promiscuous mode [ 1350.138420][T23109] netlink: 'syz.7.13444': attribute type 1 has an invalid length. [ 1350.159823][T23109] netlink: 224 bytes leftover after parsing attributes in process `syz.7.13444'. [ 1350.535339][T23126] netlink: 4 bytes leftover after parsing attributes in process `syz.5.13449'. [ 1350.552331][T23128] netlink: 'syz.7.13450': attribute type 1 has an invalid length. [ 1350.636430][T23128] netlink: 8 bytes leftover after parsing attributes in process `syz.7.13450'. [ 1350.758675][T23103] vxcan1 speed is unknown, defaulting to 1000 [ 1350.843448][T23136] netlink: 'syz.0.13453': attribute type 4 has an invalid length. [ 1350.868981][T23138] netlink: 'syz.5.13451': attribute type 4 has an invalid length. [ 1350.888766][T23136] netlink: 17 bytes leftover after parsing attributes in process `syz.0.13453'. [ 1350.980847][T23138] netlink: 12 bytes leftover after parsing attributes in process `syz.5.13451'. [ 1351.046244][T23142] netlink: 'syz.5.13451': attribute type 3 has an invalid length. [ 1351.062374][T23142] netlink: 32 bytes leftover after parsing attributes in process `syz.5.13451'. [ 1351.087705][T23145] lo: Caught tx_queue_len zero misconfig [ 1351.394486][T23160] netlink: 'syz.5.13459': attribute type 16 has an invalid length. [ 1351.405176][T23157] netlink: 'syz.7.13458': attribute type 1 has an invalid length. [ 1351.521278][T23162] netlink: 'syz.0.13460': attribute type 21 has an invalid length. [ 1351.941685][T23185] bridge0: Caught tx_queue_len zero misconfig [ 1352.059562][T23191] netlink: 'syz.5.13468': attribute type 10 has an invalid length. [ 1352.825497][T23228] A link change request failed with some changes committed already. Interface bond0 may have been left with an inconsistent configuration, please check. [ 1353.154502][T23245] syzkaller1: entered promiscuous mode [ 1353.168089][T23245] syzkaller1: entered allmulticast mode [ 1353.177398][T23242] netlink: 'syz.7.13484': attribute type 7 has an invalid length. [ 1353.234157][T23248] netlink: 'syz.5.13487': attribute type 1 has an invalid length. [ 1353.248495][T23242] gretap0: entered promiscuous mode [ 1353.254819][T23242] hsr1: Slave A (erspan0) is not up; please bring it up to get a fully working HSR network [ 1353.304622][T23250] ip6tnl0: Caught tx_queue_len zero misconfig [ 1353.585982][T23269] IPv6: NLM_F_CREATE should be specified when creating new route [ 1353.640676][T23250] 8021q: adding VLAN 0 to HW filter on device bond0 [ 1353.666352][T23250] A link change request failed with some changes committed already. Interface caif0 may have been left with an inconsistent configuration, please check. [ 1353.801421][T23280] geneve1: Caught tx_queue_len zero misconfig [ 1353.988226][T23291] tunl0: entered promiscuous mode [ 1353.999982][T23291] gre0: entered promiscuous mode [ 1354.057721][T23291] gretap0: entered promiscuous mode [ 1354.128748][T23291] erspan0: entered promiscuous mode [ 1354.147364][T23291] ip_vti0: entered promiscuous mode [ 1354.209181][T23309] netlink: 'syz.7.13505': attribute type 1 has an invalid length. [ 1354.287079][T23309] 8021q: adding VLAN 0 to HW filter on device bond5 [ 1354.329914][T23310] bond5: (slave geneve2): making interface the new active one [ 1354.359105][T23310] bond5: (slave geneve2): Enslaving as an active interface with an up link [ 1354.455910][T23331] 8021q: adding VLAN 0 to HW filter on device bond6 [ 1354.511386][T23340] 8021q: adding VLAN 0 to HW filter on device macvlan2 [ 1354.543292][T23340] bond6: (slave macvlan2): making interface the new active one [ 1354.563554][ T30] INFO: task syz.2.12264:18813 blocked for more than 143 seconds. [ 1354.567176][T23340] bond6: (slave macvlan2): Enslaving as an active interface with an up link [ 1354.576142][ T30] Not tainted syzkaller #0 [ 1354.585083][ T30] "echo 0 > /proc/sys/kernel/hung_task_timeout_secs" disables this message. [ 1354.616931][ T30] task:syz.2.12264 state:D stack:25336 pid:18813 tgid:18812 ppid:17549 task_flags:0x400140 flags:0x00080002 [ 1354.641269][ T30] Call Trace: [ 1354.644705][ T30] [ 1354.650793][ T30] __schedule+0x1585/0x5340 [ 1354.660307][ T30] ? preempt_schedule_notrace_thunk+0x16/0x30 [ 1354.667951][ T30] ? __pfx___schedule+0x10/0x10 [ 1354.672974][ T30] ? schedule+0x90/0x360 [ 1354.677842][ T30] schedule+0x164/0x360 [ 1354.682292][ T30] schedule_preempt_disabled+0x13/0x30 [ 1354.688882][ T30] __mutex_lock+0x7fe/0x1300 [ 1354.693589][ T30] ? __mutex_lock+0x5ac/0x1300 [ 1354.701109][ T30] ? nfsd_nl_listener_get_doit+0x10a/0x5e0 [ 1354.707832][ T30] ? __pfx___mutex_lock+0x10/0x10 [ 1354.712953][ T30] ? __nlmsg_put+0xef/0x1b0 [ 1354.719375][ T30] ? genlmsg_put+0x137/0x2e0 [ 1354.724073][ T30] nfsd_nl_listener_get_doit+0x10a/0x5e0 [ 1354.729994][ T30] ? dev_hard_start_xmit+0x802/0x870 [ 1354.735378][ T30] ? genl_family_rcv_msg_attrs_parse+0x13b/0x2a0 [ 1354.742780][ T30] genl_family_rcv_msg_doit+0x22a/0x330 [ 1354.749844][ T30] ? __asan_memcpy+0x40/0x70 [ 1354.754555][ T30] ? __pfx_genl_family_rcv_msg_doit+0x10/0x10 [ 1354.763034][ T30] ? __dev_queue_xmit+0x274/0x38a0 [ 1354.772147][ T30] genl_rcv_msg+0x61c/0x7a0 [ 1354.778428][ T30] ? __pfx_genl_rcv_msg+0x10/0x10 [ 1354.783580][ T30] ? __pfx_nfsd_nl_listener_get_doit+0x10/0x10 [ 1354.790555][ T30] ? __lock_acquire+0x6b5/0x2cf0 [ 1354.798723][ T30] netlink_rcv_skb+0x232/0x4b0 [ 1354.803587][ T30] ? __pfx_genl_rcv_msg+0x10/0x10 [ 1354.811330][ T30] ? __pfx_netlink_rcv_skb+0x10/0x10 [ 1354.816934][ T30] ? down_read+0x272/0x2e0 [ 1354.821516][ T30] ? genl_rcv+0xd/0x40 [ 1354.826068][ T30] genl_rcv+0x28/0x40 [ 1354.830160][ T30] netlink_unicast+0x80f/0x9b0 [ 1354.835011][ T30] ? __pfx_netlink_unicast+0x10/0x10 [ 1354.841033][ T30] ? netlink_sendmsg+0x650/0xb40 [ 1354.847547][ T30] ? skb_put+0x11b/0x210 [ 1354.851889][ T30] netlink_sendmsg+0x813/0xb40 [ 1354.857854][ T30] ? __pfx_netlink_sendmsg+0x10/0x10 [ 1354.863316][ T30] ? trace_sched_set_need_resched_tp+0x3e/0x160 [ 1354.872543][ T30] ? aa_sock_msg_perm+0xf1/0x1b0 [ 1354.885087][ T30] ? bpf_lsm_socket_sendmsg+0x9/0x20 [ 1354.891827][ T30] ? __pfx_netlink_sendmsg+0x10/0x10 [ 1354.897866][ T30] ____sys_sendmsg+0xa68/0xad0 [ 1354.902823][ T30] ? __pfx_____sys_sendmsg+0x10/0x10 [ 1354.908476][ T30] ? import_iovec+0x73/0xa0 [ 1354.913087][ T30] ___sys_sendmsg+0x2a5/0x360 [ 1354.920557][ T30] ? __pfx____sys_sendmsg+0x10/0x10 [ 1354.927196][ T30] ? futex_wake+0x4ac/0x580 [ 1354.931820][ T30] ? __fget_files+0x2a/0x420 [ 1354.937310][ T30] ? __fget_files+0x3a0/0x420 [ 1354.942192][ T30] __x64_sys_sendmsg+0x1bd/0x2a0 [ 1354.947412][ T30] ? __pfx___x64_sys_sendmsg+0x10/0x10 [ 1354.953052][ T30] ? rcu_is_watching+0x15/0xb0 [ 1354.960332][ T30] do_syscall_64+0x14d/0xf80 [ 1354.965023][ T30] ? trace_irq_disable+0x3b/0x150 [ 1354.970290][ T30] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1354.979340][ T30] ? clear_bhb_loop+0x40/0x90 [ 1354.984115][ T30] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1354.994877][ T30] RIP: 0033:0x7fe34dd9c629 [ 1355.001028][ T30] RSP: 002b:00007fe34ed20028 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 1355.009730][ T30] RAX: ffffffffffffffda RBX: 00007fe34e015fa0 RCX: 00007fe34dd9c629 [ 1355.018533][ T30] RDX: 0000000020048000 RSI: 0000200000000000 RDI: 0000000000000005 [ 1355.028731][ T30] RBP: 00007fe34de32b39 R08: 0000000000000000 R09: 0000000000000000 [ 1355.038346][ T30] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 1355.048240][ T30] R13: 00007fe34e016038 R14: 00007fe34e015fa0 R15: 00007ffeaba9f878 [ 1355.056447][ T30] [ 1355.060672][T23329] vxcan1 speed is unknown, defaulting to 1000 [ 1355.068826][ T30] [ 1355.068826][ T30] Showing all locks held in the system: [ 1355.102459][ T30] 1 lock held by khungtaskd/30: [ 1355.115118][ T30] #0: ffffffff8e7602e0 (rcu_read_lock){....}-{1:3}, at: debug_show_all_locks+0x2e/0x180 [ 1355.139719][ T30] 2 locks held by getty/5581: [ 1355.144452][ T30] #0: ffff8880363910a0 (&tty->ldisc_sem){++++}-{0:0}, at: tty_ldisc_ref_wait+0x25/0x70 [ 1355.154534][ T30] #1: ffffc9000332b2f0 (&ldata->atomic_read_lock){+.+.}-{4:4}, at: n_tty_read+0x45c/0x13c0 [ 1355.164961][ T30] 2 locks held by syz.3.11977/17771: [ 1355.171052][ T30] #0: ffffffff8fc394f0 (cb_lock){++++}-{4:4}, at: genl_rcv+0x19/0x40 [ 1355.180419][ T30] #1: ffffffff8ea86928 (nfsd_mutex){+.+.}-{4:4}, at: nfsd_nl_threads_set_doit+0x2c4/0xa30 [ 1355.191140][ T30] 2 locks held by syz.2.12264/18813: [ 1355.210534][ T30] #0: ffffffff8fc394f0 (cb_lock){++++}-{4:4}, at: genl_rcv+0x19/0x40 [ 1355.219785][ T30] #1: ffffffff8ea86928 (nfsd_mutex){+.+.}-{4:4}, at: nfsd_nl_listener_get_doit+0x10a/0x5e0 [ 1355.230706][ T30] 2 locks held by syz.4.13510/23325: [ 1355.236757][ T30] #0: ffff88805b5cc148 (&sb->s_type->i_mutex_key#14){+.+.}-{4:4}, at: sock_close+0x9b/0x240 [ 1355.248143][ T30] #1: ffffffff8e766578 (rcu_state.exp_mutex){+.+.}-{4:4}, at: synchronize_rcu_expedited+0x2d0/0x770 [ 1355.261677][ T30] 5 locks held by syz.4.13510/23329: [ 1355.267695][ T30] [ 1355.270062][ T30] ============================================= [ 1355.270062][ T30] [ 1355.280343][ T30] NMI backtrace for cpu 1 [ 1355.280363][ T30] CPU: 1 UID: 0 PID: 30 Comm: khungtaskd Not tainted syzkaller #0 PREEMPT(full) [ 1355.280382][ T30] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 02/12/2026 [ 1355.280393][ T30] Call Trace: [ 1355.280401][ T30] [ 1355.280409][ T30] dump_stack_lvl+0xe8/0x150 [ 1355.280439][ T30] nmi_cpu_backtrace+0x274/0x2d0 [ 1355.280461][ T30] ? __pfx_nmi_raise_cpu_backtrace+0x10/0x10 [ 1355.280486][ T30] nmi_trigger_cpumask_backtrace+0x17a/0x300 [ 1355.280510][ T30] sys_info+0x135/0x170 [ 1355.280528][ T30] watchdog+0xfd9/0x1030 [ 1355.280558][ T30] ? watchdog+0x21a/0x1030 [ 1355.280590][ T30] kthread+0x388/0x470 [ 1355.280609][ T30] ? __pfx_watchdog+0x10/0x10 [ 1355.280631][ T30] ? __pfx_kthread+0x10/0x10 [ 1355.280649][ T30] ret_from_fork+0x51e/0xb90 [ 1355.280674][ T30] ? __pfx_ret_from_fork+0x10/0x10 [ 1355.280694][ T30] ? __switch_to+0xc7d/0x1450 [ 1355.280736][ T30] ? __pfx_kthread+0x10/0x10 [ 1355.280755][ T30] ret_from_fork_asm+0x1a/0x30 [ 1355.280794][ T30] [ 1355.280801][ T30] Sending NMI from CPU 1 to CPUs 0: [ 1355.398345][ C0] NMI backtrace for cpu 0 [ 1355.398361][ C0] CPU: 0 UID: 0 PID: 0 Comm: swapper/0 Not tainted syzkaller #0 PREEMPT(full) [ 1355.398378][ C0] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 02/12/2026 [ 1355.398388][ C0] RIP: 0010:pv_native_safe_halt+0xf/0x20 [ 1355.398414][ C0] Code: 8e 6d 02 c3 cc cc cc cc cc cc cc 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 f3 0f 1e fa 66 90 0f 00 2d 43 4d 1c 00 fb f4 7c ea 02 00 cc cc cc cc cc cc cc cc cc cc cc cc 90 90 90 90 90 [ 1355.398427][ C0] RSP: 0018:ffffffff8e407dc0 EFLAGS: 00000242 [ 1355.398442][ C0] RAX: 00000000004d1301 RBX: ffffffff819a80dd RCX: 0000000080000001 [ 1355.398453][ C0] RDX: 0000000000000001 RSI: ffffffff8def1859 RDI: ffffffff8c27a480 [ 1355.398463][ C0] RBP: ffffffff8e407eb0 R08: ffff8880b863395b R09: 1ffff110170c672b [ 1355.398474][ C0] R10: dffffc0000000000 R11: ffffed10170c672c R12: ffffffff901172b0 [ 1355.398485][ C0] R13: 1ffffffff1c929d8 R14: 0000000000000000 R15: 0000000000000000 [ 1355.398494][ C0] FS: 0000000000000000(0000) GS:ffff888125466000(0000) knlGS:0000000000000000 [ 1355.398507][ C0] CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033 [ 1355.398517][ C0] CR2: 00007f4dbf3e82f8 CR3: 0000000045686000 CR4: 00000000003526f0 [ 1355.398531][ C0] Call Trace: [ 1355.398538][ C0] [ 1355.398545][ C0] default_idle+0x9/0x20 [ 1355.398560][ C0] default_idle_call+0x72/0xb0 [ 1355.398578][ C0] do_idle+0x1bd/0x500 [ 1355.398597][ C0] ? asm_sysvec_apic_timer_interrupt+0x1a/0x20 [ 1355.398617][ C0] ? __pfx_do_idle+0x10/0x10 [ 1355.398639][ C0] cpu_startup_entry+0x43/0x60 [ 1355.398659][ C0] rest_init+0x2de/0x300 [ 1355.398676][ C0] start_kernel+0x385/0x3d0 [ 1355.398696][ C0] x86_64_start_reservations+0x24/0x30 [ 1355.398712][ C0] x86_64_start_kernel+0x143/0x1c0 [ 1355.398730][ C0] common_startup_64+0x13e/0x147 [ 1355.398754][ C0] [ 1355.590679][ T30] Kernel panic - not syncing: hung_task: blocked tasks [ 1355.597562][ T30] CPU: 1 UID: 0 PID: 30 Comm: khungtaskd Not tainted syzkaller #0 PREEMPT(full) [ 1355.606657][ T30] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 02/12/2026 [ 1355.616700][ T30] Call Trace: [ 1355.619964][ T30] [ 1355.622884][ T30] vpanic+0x56c/0xa60 [ 1355.626880][ T30] ? __pfx___schedule+0x10/0x10 [ 1355.631739][ T30] ? __pfx_vpanic+0x10/0x10 [ 1355.636257][ T30] ? __pfx_console_unlock+0x10/0x10 [ 1355.641563][ T30] panic+0xc5/0xd0 [ 1355.645290][ T30] ? __pfx_panic+0x10/0x10 [ 1355.649727][ T30] ? preempt_schedule_thunk+0x16/0x30 [ 1355.655106][ T30] ? nmi_trigger_cpumask_backtrace+0x2bb/0x300 [ 1355.661258][ T30] watchdog+0x1023/0x1030 [ 1355.665691][ T30] ? watchdog+0x21a/0x1030 [ 1355.670114][ T30] kthread+0x388/0x470 [ 1355.674178][ T30] ? __pfx_watchdog+0x10/0x10 [ 1355.678942][ T30] ? __pfx_kthread+0x10/0x10 [ 1355.683542][ T30] ret_from_fork+0x51e/0xb90 [ 1355.688152][ T30] ? __pfx_ret_from_fork+0x10/0x10 [ 1355.693279][ T30] ? __switch_to+0xc7d/0x1450 [ 1355.697962][ T30] ? __pfx_kthread+0x10/0x10 [ 1355.702551][ T30] ret_from_fork_asm+0x1a/0x30 [ 1355.707321][ T30] [ 1355.710722][ T30] Kernel Offset: disabled [ 1355.715034][ T30] Rebooting in 86400 seconds..