last executing test programs: 2.894817517s ago: executing program 0 (id=7937): socket$nl_generic(0x10, 0x3, 0x10) r0 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x5) close(0x4) syz_open_procfs$namespace(0x0, &(0x7f0000000040)='ns/cgroup\x00') mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f07ebbeef, 0x8031, r0, 0x215eb000) pipe(&(0x7f0000000740)={0xffffffffffffffff, 0xffffffffffffffff}) r2 = socket$pppl2tp(0x18, 0x1, 0x1) r3 = socket$inet_udp(0x2, 0x2, 0x0) connect$pppl2tp(r2, &(0x7f0000000240)=@pppol2tpin6={0x18, 0x1, {0x0, r3, 0x2, 0x0, 0x0, 0x0, {0xa, 0x0, 0x0, @rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x02'}}}, 0x32) r4 = openat$tun(0xffffffffffffff9c, &(0x7f0000000280), 0x0, 0x0) ioctl$TUNSETIFF(r4, 0x400454ca, &(0x7f0000000200)={'rose0\x00', 0x112}) r5 = openat$tun(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) ioctl$TUNSETIFF(r5, 0x400454ca, &(0x7f0000000180)={'rose0\x00', 0x112}) r6 = socket$packet(0x11, 0x3, 0x300) ioctl$sock_SIOCGIFINDEX(r6, 0x8933, &(0x7f0000000300)={'rose0\x00', 0x0}) r8 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r8, &(0x7f0000000240)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000100)=ANY=[@ANYBLOB="2000000011000100"/20, @ANYRES32=r7], 0x20}}, 0x0) r9 = syz_genetlink_get_family_id$l2tp(&(0x7f0000000040), 0xffffffffffffffff) r10 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$L2TP_CMD_SESSION_DELETE(r10, &(0x7f0000000640)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000100)={0x74, r9, 0x2, 0x70bd2f, 0x4, {0x5}, [@L2TP_ATTR_IP_SADDR={0x8, 0x18, @empty}, @L2TP_ATTR_MRU={0x6}, @L2TP_ATTR_PEER_COOKIE={0xc}, @L2TP_ATTR_DEBUG={0x8, 0x11, 0xe}, @L2TP_ATTR_UDP_ZERO_CSUM6_RX={0x5}, @L2TP_ATTR_ENCAP_TYPE={0x6}, @L2TP_ATTR_LNS_MODE={0x5, 0x14, 0x7}, @L2TP_ATTR_IFNAME={0x14, 0x8, 'wg0\x00'}, @L2TP_ATTR_L2SPEC_LEN={0x5, 0x6, 0x6}, @L2TP_ATTR_PROTO_VERSION={0x5, 0x7, 0x2}]}, 0x74}, 0x1, 0x0, 0x0, 0x8040}, 0xc020) r11 = socket(0x14, 0x2, 0x4) ioctl$sock_SIOCGIFINDEX(r11, 0x61d0, 0x0) sendmsg$NFT_BATCH(r11, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000240)=ANY=[@ANYRES8=r1], 0xa4}, 0x1, 0x0, 0x0, 0x48005}, 0x801) socket$alg(0x26, 0x5, 0x0) bind$inet6(0xffffffffffffffff, 0x0, 0x0) openat$tun(0xffffffffffffff9c, 0x0, 0x0, 0x0) socket$nl_route(0x10, 0x3, 0x0) 2.182291032s ago: executing program 1 (id=7947): mmap(&(0x7f0000000000/0xc00000)=nil, 0xc00000, 0x1, 0x42072, 0xffffffffffffffff, 0x0) mmap(&(0x7f0000000000/0x400000)=nil, 0x400000, 0x0, 0xc3072, 0xffffffffffffffff, 0x2000) r0 = socket$nl_audit(0x10, 0x3, 0x9) sendmsg$AUDIT_TRIM(r0, &(0x7f0000000400)={0x0, 0x0, &(0x7f00000003c0)={&(0x7f0000000380)={0x10, 0x3f6, 0x8, 0x70bd28, 0x25dfdbfb}, 0x10}, 0x1, 0x0, 0x0, 0x48000}, 0x40000) mmap(&(0x7f0000000000/0xff5000)=nil, 0xff5000, 0x0, 0x4ca31, 0xffffffffffffffff, 0x0) 2.083530635s ago: executing program 1 (id=7948): r0 = bpf$MAP_CREATE(0x0, &(0x7f00000000c0)=ANY=[@ANYBLOB="0e000000040000000400000003"], 0x48) r1 = bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000240)={0x2, 0x4, 0x8, 0x1, 0x80, 0x0, 0x0, '\x00', 0x0, 0x0}, 0x50) bpf$PROG_LOAD(0x5, &(0x7f0000000340)={0x15, 0x1c, &(0x7f0000000400)=ANY=[@ANYBLOB="1808000060000000000000000000008018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b702000014000000b7030000000000008500000005000000bc0908000000000035090100000000009500000000070000b7020000000000007b9a00fe000000006609000000000000dbaaf0ff50000000bf8620000000000007080000f8ffffffbfa400000000000007040000f0ffffff770000000800000018220000", @ANYRES32=r1, @ANYBLOB="0000000000000000b7050000180000084609f0ff76000000bf9800000000000056080000000000008500000007000000b70000000000000095"], &(0x7f0000000980)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x20, '\x00', 0x0, @sk_reuseport=0x27, 0x0, 0xf00, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) 1.921618606s ago: executing program 4 (id=7950): r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = socket$inet6_udp(0xa, 0x2, 0x0) r2 = syz_init_net_socket$rose(0xb, 0x5, 0x0) getsockopt$bt_sco_SCO_OPTIONS(r2, 0x11, 0x1, 0x0, 0x0) r3 = socket$nl_generic(0x10, 0x3, 0x10) r4 = syz_genetlink_get_family_id$nl80211(&(0x7f0000002500), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r3, 0x8933, &(0x7f0000002540)={'wlan1\x00', 0x0}) sendmsg$NL80211_CMD_GET_STATION(r3, &(0x7f0000002600)={0x0, 0x0, &(0x7f00000025c0)={&(0x7f0000002580)={0x1c, r4, 0x1, 0x70bd29, 0x25dfdbff, {{}, {@val={0x8, 0x3, r5}, @void}}}, 0x1c}, 0x1, 0x0, 0x0, 0x8001}, 0x80) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000c80)={'lo\x00', 0x0}) sendmsg$nl_route_sched(r0, &(0x7f0000001200)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000003c0)=@newqdisc={0xf4, 0x24, 0x4ee4e6a52ff56541, 0x70bd2d, 0x0, {0x0, 0x0, 0x0, r6, {0x0, 0xb}, {0xffff, 0xffff}}, [@qdisc_kind_options=@q_netem={{0xa}, {0xc4, 0x2, {{0x0, 0x2}, [@TCA_NETEM_LOSS={0x88, 0x5, 0x0, 0x1, [@NETEM_LOSS_GE={0x14, 0x2, {0x101, 0xfffffffc, 0x2, 0x5}}, @NETEM_LOSS_GE={0x14, 0x2, {0x7, 0xff, 0x7}}, @NETEM_LOSS_GE={0x14, 0x2, {0x2, 0x3, 0x3, 0x7}}, @NETEM_LOSS_GI={0x18, 0x1, {0x7ff, 0x3, 0xfffeffff, 0xc5, 0x401}}, @NETEM_LOSS_GI={0x18, 0x1, {0xffff, 0xb1, 0x7fffffff, 0xde9, 0x42}}, @NETEM_LOSS_GI={0x18, 0x1, {0xc, 0x4, 0x1, 0x0, 0x1000}}]}, @TCA_NETEM_RATE={0x14, 0xd}, @TCA_NETEM_CORRUPT={0xc, 0x2}]}}}]}, 0xf4}}, 0x0) ioctl$sock_FIOGETOWN(r1, 0x8903, &(0x7f0000000080)=0x0) sendmsg$nl_route(r0, &(0x7f0000000200)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x40000000}, 0xc, &(0x7f00000001c0)={&(0x7f00000000c0)=@newlinkprop={0xfc, 0x6c, 0x400, 0x70bd2d, 0x25dfdbfc, {0x0, 0x0, 0x0, 0x0, 0x8090, 0x41}, [@IFLA_CARRIER={0x5, 0x21, 0x46}, @IFLA_LINK={0x8, 0x5, r6}, @IFLA_VFINFO_LIST={0x8, 0x16, 0x0, 0x1, [{0x4}]}, @IFLA_NET_NS_PID={0x8, 0x13, r7}, @IFLA_VF_PORTS={0xb4, 0x18, 0x0, 0x1, [{0x20, 0x1, 0x0, 0x1, [@IFLA_PORT_PROFILE={0x7, 0x2, 'lo\x00'}, @IFLA_PORT_INSTANCE_UUID={0x14, 0x4, "5abc80d019d68d1ec1da4d8b8a55d8c5"}]}, {0x38, 0x1, 0x0, 0x1, [@IFLA_PORT_REQUEST={0x5, 0x6, 0x6}, @IFLA_PORT_REQUEST={0x5, 0x6, 0x80}, @IFLA_PORT_REQUEST={0x5, 0x6, 0x4}, @IFLA_PORT_HOST_UUID={0x14, 0x5, "7d42bcbe8929efb3d8c6b9fccf7c8f26"}, @IFLA_PORT_REQUEST={0x5, 0x6, 0x1}]}, {0x58, 0x1, 0x0, 0x1, [@IFLA_PORT_REQUEST={0x5, 0x6, 0x5}, @IFLA_PORT_VF={0x8, 0x1, 0x6}, @IFLA_PORT_VF={0x8, 0x1, 0x80000000}, @IFLA_PORT_INSTANCE_UUID={0x14, 0x4, "59233f5e650de658916bd696f57335ed"}, @IFLA_PORT_INSTANCE_UUID={0x14, 0x4, "e2c3f02e7ee095df9b361cc6226db1e0"}, @IFLA_PORT_INSTANCE_UUID={0x14, 0x4, "eb5c305a37c97d37411b831ca29d18bc"}]}]}, @IFLA_GSO_MAX_SEGS={0x8, 0x28, 0xe0}]}, 0xfc}, 0x1, 0x0, 0x0, 0x14}, 0x4000) 1.921083186s ago: executing program 0 (id=7951): r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nfc(&(0x7f0000000080), r0) sendmsg$NFC_CMD_VENDOR(r0, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000000)=ANY=[@ANYBLOB=',\x00\x00\x00', @ANYRES16=r1, @ANYBLOB="01052cbd7000fedbdf251d00000008001d000400000008001e00300b000008000100d3"], 0x2c}, 0x1, 0x0, 0x0, 0x4004005}, 0x8000) (async) bpf$ENABLE_STATS(0x20, 0x0, 0x0) (async) r2 = bpf$BPF_PROG_WITH_BTFID_LOAD(0x5, &(0x7f00000003c0)=@bpf_lsm={0x1e, 0x3, &(0x7f0000000080)=ANY=[@ANYBLOB="1800000001000000000000000000000095"], &(0x7f0000000280)='GPL\x00', 0x0, 0x0, 0x0, 0x40f00, 0x0, '\x00', 0x0, 0x24}, 0x94) bpf$MAP_CREATE(0x0, &(0x7f0000000000)=@base={0x0, 0x0, 0x2, 0x0, 0x4102, 0x1, 0x10000}, 0x50) (async) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000440)={r2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x600, 0x0, 0x48, 0x0, &(0x7f0000000000)='\x00', 0x0}, 0x48) (async) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xb, 0x0, &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r3 = bpf$BPF_PROG_WITH_BTFID_LOAD(0x5, &(0x7f00000003c0)=@bpf_lsm={0x1e, 0x3, &(0x7f0000000ac0)=ANY=[@ANYBLOB="1800000000000000000000000000000095"], &(0x7f0000000080)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x24}, 0x90) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000440)={r3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x48, 0x0, &(0x7f0000000000)='\x00', 0x0}, 0x48) (async) bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000200)={&(0x7f0000000000)=ANY=[@ANYBLOB="9feb01001800000000000000200000002006000007000000000000000100000d0000000003000000020000000000000002000000000000002e303000"], 0x0, 0x3f}, 0x20) 1.891343393s ago: executing program 1 (id=7952): r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$devlink(&(0x7f0000000040), 0xffffffffffffffff) sendmsg$DEVLINK_CMD_SB_OCC_SNAPSHOT(r0, &(0x7f0000000180)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x1000}, 0xc, &(0x7f0000000140)={&(0x7f0000000080)={0xa8, r1, 0x2, 0x70bd29, 0x25dfdbfd, {}, [{@pci={{0x8}, {0x11}}, {0x8, 0xb, 0xfffffffa}}, {@pci={{0x8}, {0x11}}, {0x8}}, {@pci={{0x8}, {0x11}}, {0x8, 0xb, 0x380000}}, {@nsim={{0xe}, {0xf, 0x2, {'netdevsim', 0x0}}}, {0x8, 0xb, 0x3}}]}, 0xa8}, 0x1, 0x0, 0x0, 0x10}, 0xc000) r2 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r3 = syz_genetlink_get_family_id$nl802154(&(0x7f0000000200), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_802154(0xffffffffffffffff, 0x8933, &(0x7f0000000240)={'wpan0\x00', 0x0}) ioctl$sock_SIOCGIFINDEX_802154(0xffffffffffffffff, 0x8933, &(0x7f0000000280)={'wpan0\x00', 0x0}) ioctl$sock_SIOCGIFINDEX_802154(0xffffffffffffffff, 0x8933, &(0x7f00000002c0)={'wpan4\x00', 0x0}) sendmsg$NL802154_CMD_DEL_SEC_KEY(r2, &(0x7f0000000380)={&(0x7f00000001c0)={0x10, 0x0, 0x0, 0x2000}, 0xc, &(0x7f0000000340)={&(0x7f0000000300)={0x40, r3, 0xb24, 0x70bd2b, 0x25dfdbfd, {}, [@NL802154_ATTR_SEC_KEY={0x14, 0x30, 0x0, 0x1, [@NL802154_KEY_ATTR_USAGE_FRAMES={0x5, 0x2, 0x2}, @NL802154_KEY_ATTR_USAGE_FRAMES={0x5, 0x2, 0x9}]}, @NL802154_ATTR_IFINDEX={0x8, 0x3, r4}, @NL802154_ATTR_IFINDEX={0x8, 0x3, r5}, @NL802154_ATTR_IFINDEX={0x8, 0x3, r6}]}, 0x40}, 0x1, 0x0, 0x0, 0x10}, 0x24000804) r7 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r8 = syz_genetlink_get_family_id$netlbl_cipso(&(0x7f0000000400), r2) sendmsg$NLBL_CIPSOV4_C_ADD(r7, &(0x7f00000004c0)={&(0x7f00000003c0)={0x10, 0x0, 0x0, 0x4}, 0xc, &(0x7f0000000480)={&(0x7f0000000440)={0x1c, r8, 0x200, 0x70bd27, 0x25dfdbfb, {}, [@NLBL_CIPSOV4_A_DOI={0x8, 0x1, 0x3}]}, 0x1c}, 0x1, 0x0, 0x0, 0x8000}, 0x41) sendmsg$NLBL_CIPSOV4_C_LISTALL(r7, &(0x7f0000000680)={&(0x7f0000000500)={0x10, 0x0, 0x0, 0x4000000}, 0xc, &(0x7f0000000640)={&(0x7f0000000540)={0xd4, r8, 0x2, 0x70bd2b, 0x25dfdbfd, {}, [@NLBL_CIPSOV4_A_MTYPE={0x8, 0x2, 0x1}, @NLBL_CIPSOV4_A_MLSCATLST={0x48, 0xc, 0x0, 0x1, [{0xc, 0xb, 0x0, 0x1, [@NLBL_CIPSOV4_A_MLSCATLOC={0x8, 0x9, 0x5168f974}]}, {0x2c, 0xb, 0x0, 0x1, [@NLBL_CIPSOV4_A_MLSCATREM={0x8, 0xa, 0x3f9}, @NLBL_CIPSOV4_A_MLSCATREM={0x8, 0xa, 0x21ce}, @NLBL_CIPSOV4_A_MLSCATLOC={0x8, 0x9, 0x3dc9b170}, @NLBL_CIPSOV4_A_MLSCATREM={0x8, 0xa, 0x8000}, @NLBL_CIPSOV4_A_MLSCATLOC={0x8, 0x9, 0x48e0dff8}]}, {0xc, 0xb, 0x0, 0x1, [@NLBL_CIPSOV4_A_MLSCATREM={0x8, 0xa, 0xd3cc}]}]}, @NLBL_CIPSOV4_A_TAGLST={0x24, 0x4, 0x0, 0x1, [{0x5, 0x3, 0x1}, {0x5, 0x3, 0x6}, {0x5, 0x3, 0x1}, {0x5}]}, @NLBL_CIPSOV4_A_TAGLST={0x4c, 0x4, 0x0, 0x1, [{0x5, 0x3, 0x1}, {0x5, 0x3, 0x7}, {0x5, 0x3, 0x6}, {0x5, 0x3, 0x6}, {0x5}, {0x5, 0x3, 0x1}, {0x5, 0x3, 0x2}, {0x5}, {0x5, 0x3, 0x6}]}]}, 0xd4}}, 0x0) socket$inet_smc(0x2b, 0x1, 0x0) r9 = syz_genetlink_get_family_id$ipvs(&(0x7f0000000700), r0) sendmsg$IPVS_CMD_NEW_SERVICE(r0, &(0x7f0000000840)={&(0x7f00000006c0)={0x10, 0x0, 0x0, 0x200}, 0xc, &(0x7f0000000800)={&(0x7f0000000740)={0x90, r9, 0x100, 0x70bd28, 0x25dfdbff, {}, [@IPVS_CMD_ATTR_TIMEOUT_UDP={0x8, 0x6, 0x597f}, @IPVS_CMD_ATTR_TIMEOUT_UDP={0x8, 0x6, 0xa}, @IPVS_CMD_ATTR_TIMEOUT_UDP={0x8, 0x6, 0x9}, @IPVS_CMD_ATTR_TIMEOUT_TCP_FIN={0x8, 0x5, 0x3329}, @IPVS_CMD_ATTR_DEST={0x3c, 0x2, 0x0, 0x1, [@IPVS_DEST_ATTR_FWD_METHOD={0x8}, @IPVS_DEST_ATTR_ADDR_FAMILY={0x6, 0xb, 0xa}, @IPVS_DEST_ATTR_WEIGHT={0x8, 0x4, 0x6}, @IPVS_DEST_ATTR_PERSIST_CONNS={0x8, 0x9, 0xd}, @IPVS_DEST_ATTR_TUN_PORT={0x6, 0xe, 0x4e23}, @IPVS_DEST_ATTR_L_THRESH={0x8, 0x6, 0x4}, @IPVS_DEST_ATTR_PERSIST_CONNS={0x8, 0x9, 0x8}]}, @IPVS_CMD_ATTR_TIMEOUT_UDP={0x8, 0x6, 0x9}, @IPVS_CMD_ATTR_TIMEOUT_TCP={0x8, 0x4, 0x2}, @IPVS_CMD_ATTR_TIMEOUT_TCP={0x8, 0x4, 0x7}, @IPVS_CMD_ATTR_TIMEOUT_UDP={0x8, 0x6, 0x1}]}, 0x90}, 0x1, 0x0, 0x0, 0x4000800}, 0x800) r10 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r11 = syz_genetlink_get_family_id$ieee802154(&(0x7f00000008c0), r2) sendmsg$IEEE802154_LLSEC_SETPARAMS(r10, &(0x7f00000009c0)={&(0x7f0000000880)={0x10, 0x0, 0x0, 0x200}, 0xc, &(0x7f0000000980)={&(0x7f0000000900)={0x54, r11, 0x200, 0x70bd25, 0x25dfdbfc, {}, [@IEEE802154_ATTR_LLSEC_FRAME_COUNTER={0x8, 0x2f, 0x1ff}, @IEEE802154_ATTR_LLSEC_KEY_SOURCE_SHORT={0x8, 0x2c, 0x1}, @IEEE802154_ATTR_HW_ADDR={0xc, 0x5, {0xaaaaaaaaaaaa0302}}, @IEEE802154_ATTR_DEV_INDEX={0x8, 0x2, r4}, @IEEE802154_ATTR_LLSEC_KEY_SOURCE_EXTENDED={0xc, 0x2d, {0xaaaaaaaaaaaa0302}}, @IEEE802154_ATTR_LLSEC_KEY_SOURCE_SHORT={0x8, 0x2c, 0x6}, @IEEE802154_ATTR_PAN_ID={0x6, 0x6, 0xffff}]}, 0x54}, 0x1, 0x0, 0x0, 0x84}, 0x20044805) r12 = accept4$rose(0xffffffffffffffff, 0x0, &(0x7f0000000a00), 0x800) ioctl$SIOCRSSL2CALL(r12, 0x89e2, &(0x7f0000000a40)=@default) r13 = syz_genetlink_get_family_id$l2tp(&(0x7f0000000ac0), r12) sendmsg$L2TP_CMD_SESSION_MODIFY(r0, &(0x7f0000000b80)={&(0x7f0000000a80)={0x10, 0x0, 0x0, 0x1000000}, 0xc, &(0x7f0000000b40)={&(0x7f0000000b00)={0x30, r13, 0x200, 0x70bd29, 0x25dfdbfc, {}, [@L2TP_ATTR_IFNAME={0x14, 0x8, 'veth0_to_bond\x00'}, @L2TP_ATTR_UDP_CSUM={0x5}]}, 0x30}, 0x1, 0x0, 0x0, 0xc0}, 0x8000) r14 = syz_genetlink_get_family_id$netlbl_calipso(&(0x7f0000000c00), r10) sendmsg$NLBL_CALIPSO_C_LIST(r7, &(0x7f0000000cc0)={&(0x7f0000000bc0)={0x10, 0x0, 0x0, 0x400000}, 0xc, &(0x7f0000000c80)={&(0x7f0000000c40)={0x34, r14, 0x20, 0x70bd2b, 0x25dfdbfd, {}, [@NLBL_CALIPSO_A_MTYPE={0x8}, @NLBL_CALIPSO_A_DOI={0x8, 0x1, 0x3}, @NLBL_CALIPSO_A_MTYPE={0x8}, @NLBL_CALIPSO_A_DOI={0x8, 0x1, 0x2}]}, 0x34}, 0x1, 0x0, 0x0, 0x20000081}, 0x80) sendmsg$NLBL_CIPSOV4_C_LIST(r7, &(0x7f0000000fc0)={&(0x7f0000000d00)={0x10, 0x0, 0x0, 0xa80000}, 0xc, &(0x7f0000000f80)={&(0x7f0000000d40)={0x21c, r8, 0x400, 0x70bd2a, 0x25dfdbfc, {}, [@NLBL_CIPSOV4_A_TAGLST={0x14, 0x4, 0x0, 0x1, [{0x5, 0x3, 0x1}, {0x5, 0x3, 0x2}]}, @NLBL_CIPSOV4_A_MTYPE={0x8}, @NLBL_CIPSOV4_A_MLSCATLST={0xc8, 0xc, 0x0, 0x1, [{0xc, 0xb, 0x0, 0x1, [@NLBL_CIPSOV4_A_MLSCATLOC={0x8, 0x9, 0x4fe15fe6}]}, {0x1c, 0xb, 0x0, 0x1, [@NLBL_CIPSOV4_A_MLSCATREM={0x8, 0xa, 0x8632}, @NLBL_CIPSOV4_A_MLSCATLOC={0x8, 0x9, 0x12c33610}, @NLBL_CIPSOV4_A_MLSCATREM={0x8, 0xa, 0x4cc3}]}, {0x24, 0xb, 0x0, 0x1, [@NLBL_CIPSOV4_A_MLSCATREM={0x8, 0xa, 0x8826}, @NLBL_CIPSOV4_A_MLSCATLOC={0x8, 0x9, 0x561e1c9e}, @NLBL_CIPSOV4_A_MLSCATLOC={0x8, 0x9, 0x54e973f7}, @NLBL_CIPSOV4_A_MLSCATREM={0x8, 0xa, 0xae07}]}, {0x44, 0xb, 0x0, 0x1, [@NLBL_CIPSOV4_A_MLSCATREM={0x8, 0xa, 0xb159}, @NLBL_CIPSOV4_A_MLSCATREM={0x8, 0xa, 0x3dc9}, @NLBL_CIPSOV4_A_MLSCATREM={0x8, 0xa, 0xf7a6}, @NLBL_CIPSOV4_A_MLSCATLOC={0x8, 0x9, 0x1a367a3e}, @NLBL_CIPSOV4_A_MLSCATREM={0x8, 0xa, 0xa330}, @NLBL_CIPSOV4_A_MLSCATLOC={0x8, 0x9, 0x45820bfc}, @NLBL_CIPSOV4_A_MLSCATLOC={0x8, 0x9, 0x55891a85}, @NLBL_CIPSOV4_A_MLSCATREM={0x8, 0xa, 0xd3c8}]}, {0x34, 0xb, 0x0, 0x1, [@NLBL_CIPSOV4_A_MLSCATLOC={0x8, 0x9, 0x2b4af7a}, @NLBL_CIPSOV4_A_MLSCATREM={0x8, 0xa, 0x7}, @NLBL_CIPSOV4_A_MLSCATREM={0x8, 0xa, 0x4d35}, @NLBL_CIPSOV4_A_MLSCATREM={0x8, 0xa, 0x1e27}, @NLBL_CIPSOV4_A_MLSCATREM={0x8, 0xa, 0xa7b0}, @NLBL_CIPSOV4_A_MLSCATREM={0x8, 0xa, 0xc4cd}]}]}, @NLBL_CIPSOV4_A_MLSLVLLST={0x98, 0x8, 0x0, 0x1, [{0x4}, {0x3c, 0x7, 0x0, 0x1, [@NLBL_CIPSOV4_A_MLSLVLLOC={0x8, 0x5, 0x75754793}, @NLBL_CIPSOV4_A_MLSLVLREM={0x8, 0x6, 0xe3}, @NLBL_CIPSOV4_A_MLSLVLREM={0x8, 0x6, 0x2}, @NLBL_CIPSOV4_A_MLSLVLREM={0x8, 0x6, 0xcd}, @NLBL_CIPSOV4_A_MLSLVLLOC={0x8, 0x5, 0x34e841d0}, @NLBL_CIPSOV4_A_MLSLVLREM={0x8, 0x6, 0xdc}, @NLBL_CIPSOV4_A_MLSLVLREM={0x8, 0x6, 0x52}]}, {0x1c, 0x7, 0x0, 0x1, [@NLBL_CIPSOV4_A_MLSLVLLOC={0x8, 0x5, 0x6773791b}, @NLBL_CIPSOV4_A_MLSLVLLOC={0x8, 0x5, 0x6c5231f1}, @NLBL_CIPSOV4_A_MLSLVLLOC={0x8, 0x5, 0x7481e016}]}, {0x1c, 0x7, 0x0, 0x1, [@NLBL_CIPSOV4_A_MLSLVLLOC={0x8, 0x5, 0x40fbf26b}, @NLBL_CIPSOV4_A_MLSLVLLOC={0x8, 0x5, 0x3f4ae8ff}, @NLBL_CIPSOV4_A_MLSLVLLOC={0x8, 0x5, 0xd0ccf55}]}, {0x1c, 0x7, 0x0, 0x1, [@NLBL_CIPSOV4_A_MLSLVLREM={0x8, 0x6, 0x2f}, @NLBL_CIPSOV4_A_MLSLVLLOC={0x8, 0x5, 0x5093413d}, @NLBL_CIPSOV4_A_MLSLVLLOC={0x8, 0x5, 0x489ebea}]}]}, @NLBL_CIPSOV4_A_MLSLVLLST={0x28, 0x8, 0x0, 0x1, [{0x24, 0x7, 0x0, 0x1, [@NLBL_CIPSOV4_A_MLSLVLLOC={0x8, 0x5, 0x60d71cda}, @NLBL_CIPSOV4_A_MLSLVLREM={0x8, 0x6, 0xa0}, @NLBL_CIPSOV4_A_MLSLVLLOC={0x8, 0x5, 0x711f110a}, @NLBL_CIPSOV4_A_MLSLVLLOC={0x8, 0x5, 0x2b75eb4c}]}]}, @NLBL_CIPSOV4_A_TAGLST={0x1c, 0x4, 0x0, 0x1, [{0x5, 0x3, 0x7}, {0x5}, {0x5}]}, @NLBL_CIPSOV4_A_TAGLST={0x4}, @NLBL_CIPSOV4_A_DOI={0x8, 0x1, 0x1}, @NLBL_CIPSOV4_A_TAGLST={0x34, 0x4, 0x0, 0x1, [{0x5, 0x3, 0x7}, {0x5, 0x3, 0x5}, {0x5, 0x3, 0x5}, {0x5, 0x3, 0x2}, {0x5, 0x3, 0x7}, {0x5}]}, @NLBL_CIPSOV4_A_DOI={0x8}]}, 0x21c}, 0x1, 0x0, 0x0, 0x20000000}, 0x80) syz_genetlink_get_family_id$nl80211(&(0x7f0000001000), r0) ioctl$sock_SIOCGIFINDEX_802154(r7, 0x8933, &(0x7f0000001080)={'wpan3\x00', 0x0}) sendmsg$NL802154_CMD_SET_SHORT_ADDR(r7, &(0x7f0000001180)={&(0x7f0000001040)={0x10, 0x0, 0x0, 0x4000}, 0xc, &(0x7f0000001140)={&(0x7f00000010c0)={0x60, r3, 0x200, 0x70bd2d, 0x25dfdbff, {}, [@NL802154_ATTR_SHORT_ADDR={0x6, 0xa, 0xaaa2}, @NL802154_ATTR_IFINDEX={0x8, 0x3, r6}, @NL802154_ATTR_SHORT_ADDR={0x6, 0xa, 0xaaa0}, @NL802154_ATTR_SHORT_ADDR={0x6, 0xa, 0xfffe}, @NL802154_ATTR_SHORT_ADDR={0x6}, @NL802154_ATTR_IFINDEX={0x8, 0x3, r6}, @NL802154_ATTR_IFINDEX={0x8, 0x3, r15}, @NL802154_ATTR_WPAN_DEV={0xc, 0x6, 0x3}, @NL802154_ATTR_SHORT_ADDR={0x6, 0xa, 0xaaa1}]}, 0x60}, 0x1, 0x0, 0x0, 0x1}, 0x800) write$tun(0xffffffffffffffff, &(0x7f0000001200)={@void, @val={0x3, 0x3, 0x1, 0x318, 0x0, 0x2}, @ipv4=@tcp={{0x20, 0x4, 0x0, 0x8, 0x10a8, 0x67, 0x0, 0xff, 0x6, 0x0, @dev={0xac, 0x14, 0x14, 0xa}, @local, {[@lsrr={0x83, 0x17, 0x35, [@local, @private=0xa010101, @private=0xa010101, @empty, @multicast2]}, @ssrr={0x89, 0xf, 0xfb, [@private=0xa010102, @loopback, @rand_addr=0x64010100]}, @generic={0x86, 0x9, "43d3e263c43cba"}, @generic={0x89, 0x6, "9803db77"}, @timestamp={0x44, 0x24, 0x29, 0x0, 0x5, [0xd, 0xff, 0x6, 0xc0, 0x101, 0x2, 0x83, 0x1]}, @generic={0x86, 0x12, "f911421139b5be3e4dce1e56f3468290"}]}}, {{0x4e20, 0x4e20, 0x41424344, 0x41424344, 0x0, 0x0, 0xa, 0x40, 0x268, 0x0, 0x401, {[@fastopen={0x22, 0x6, "14c52617"}, @mptcp=@generic={0x0, 0xd, "715c1054b8fc5f06918ab0"}, @nop]}}, {"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"}}}}, 0x10b2) 1.775109384s ago: executing program 0 (id=7953): r0 = syz_init_net_socket$nl_rdma(0x10, 0x3, 0x10) r1 = openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0) ioctl$TUNSETIFF(r1, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x7101}) r2 = socket$nl_generic(0x10, 0x3, 0x10) r3 = socket(0x400000000010, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r3, &(0x7f00000012c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000180)=@newqdisc={0x38, 0x24, 0x4ee4e6a52ff56541, 0x70bd2a, 0x25dfdbfd, {0x0, 0x0, 0x0, r4, {0x0, 0xfff1}, {0xffff, 0xffff}, {0x0, 0xf}}, [@qdisc_kind_options=@q_multiq={{0xb}, {0x8, 0x2, {0x2}}}]}, 0x38}}, 0x0) r5 = socket(0x400000000010, 0x3, 0x0) r6 = socket$unix(0x1, 0x1, 0x0) ioctl$sock_SIOCGIFINDEX(r6, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r5, &(0x7f0000006040)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000000)=@gettfilter={0x2c, 0x2e, 0x1, 0x70bd2c, 0x25dfdbfd, {0x0, 0x0, 0x0, r7, {0xc, 0xc}, {0x0, 0xfff1}, {0xfff2, 0x2}}, [{0x8, 0xb, 0x2}]}, 0x2c}, 0x1, 0x0, 0x0, 0x1}, 0x4041080) sendmsg$netlink(r0, &(0x7f00000001c0)={0x0, 0x0, &(0x7f00000000c0)=[{&(0x7f0000000000)=ANY=[@ANYRESHEX=r0], 0x14}], 0x1, 0x0, 0x0, 0x4000080}, 0x84) 1.717484772s ago: executing program 1 (id=7954): r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x7101}) socket$nl_route(0x10, 0x3, 0x0) r1 = socket$unix(0x1, 0x1, 0x0) setsockopt$inet_int(0xffffffffffffffff, 0x0, 0x19, &(0x7f0000000080)=0x3, 0x2) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) r3 = socket$netlink(0x10, 0x3, 0x0) r4 = socket$nl_route(0x10, 0x3, 0x0) socket$unix(0x1, 0x1, 0x0) ioctl$sock_SIOCGIFINDEX(r3, 0x8933, 0x0) r5 = socket$netlink(0x10, 0x3, 0xf) setsockopt$netlink_NETLINK_PKTINFO(r5, 0x10e, 0x3, 0x0, 0x0) r6 = socket$nl_route(0x10, 0x3, 0x0) r7 = bpf$MAP_CREATE(0x0, &(0x7f0000000300)=ANY=[@ANYRES16=r2, @ANYRES32, @ANYBLOB="000400"/20, @ANYRES32=0x0, @ANYRES32, @ANYBLOB="0500000001000000050000000900"/28], 0x50) r8 = bpf$PROG_LOAD(0x5, &(0x7f0000000000)={0xa, 0x8, &(0x7f0000000240)=ANY=[@ANYBLOB="1809000000000000000000000000000018120000", @ANYRES32=r7, @ANYBLOB="0000000000000000b7030000070000008500000021000000b70000000000000095"], &(0x7f0000000640)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000600)={r8, 0x0, 0xe, 0x0, &(0x7f0000000140)="e027c2e8684d85ff9782762fedff", 0x0, 0xe8a2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1}, 0x50) socket$can_bcm(0x1d, 0x2, 0x2) sendmsg$nl_route(r6, &(0x7f0000000040)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f00000000c0)=ANY=[@ANYBLOB="3800000010005fba00"/20, @ANYRES32=0x0, @ANYBLOB="800002010800000008001b000000000008000d"], 0x38}}, 0x0) sendmsg$nl_route_sched(r4, &(0x7f00000012c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000280)=@newqdisc={0x2c, 0x24, 0x4ee4e6a52ff56541, 0x70bd26, 0xffffffff, {0x0, 0x0, 0x0, 0x0, {0x0, 0x8}, {0xffff, 0xffff}}, [@qdisc_kind_options=@q_qfg={0x8}]}, 0x2c}}, 0x24040084) r9 = socket$nl_route(0x10, 0x3, 0x0) r10 = socket$nl_rdma(0x10, 0x3, 0x14) ioctl$ifreq_SIOCGIFINDEX_team(r10, 0x8933, &(0x7f00000000c0)={'team0\x00', 0x0}) sendmsg$nl_route(r9, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={&(0x7f00000000c0)=ANY=[@ANYBLOB="340000001400010029bd7000fddbdf250218c002", @ANYRES32=r11, @ANYBLOB="08000200ffffffff14000600bbff0048cb"], 0x34}, 0x1, 0x0, 0x0, 0x4000}, 0x4) r12 = socket$inet_icmp_raw(0x2, 0x3, 0x1) connect$inet(r12, &(0x7f0000000080)={0x2, 0x0, @private=0xa010102}, 0x10) r13 = socket$kcm(0x10, 0x2, 0x0) sendmsg$kcm(r13, &(0x7f0000000940)={0x0, 0x0, &(0x7f00000001c0)=[{&(0x7f0000000000)="d8000000100081046881f782db44b90402", 0x11}], 0x1}, 0x0) ioctl$XFS_IOC_ATTRMULTI_BY_HANDLE(r12, 0x4048587b, 0x0) syz_genetlink_get_family_id$nl80211(0x0, 0xffffffffffffffff) socket$nl_generic(0x10, 0x3, 0x10) 1.685710392s ago: executing program 2 (id=7955): r0 = socket$nl_generic(0x10, 0x3, 0x10) (async) r1 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000), 0x200002, 0x0) r2 = openat$cgroup_procs(r1, &(0x7f00000002c0)='tasks\x00', 0x2, 0x0) (async, rerun: 64) r3 = getpid() (async, rerun: 64) r4 = socket$nl_route(0x10, 0x3, 0x0) socket$netlink(0x10, 0x3, 0x0) (async, rerun: 32) sendmsg$nl_route(r4, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000000c0)=@newlink={0x60, 0x10, 0x401, 0xfffffffe, 0x4, {0x0, 0x0, 0x0, 0x0, 0xe59bca127d81a07e, 0xc574450d1af3b5bc}, [@IFLA_LINKINFO={0x2c, 0x12, 0x0, 0x1, @bridge_slave={{0x11}, {0x14, 0x5, 0x0, 0x1, [@IFLA_BRPORT_PROXYARP_WIFI={0x5, 0xc, 0x1}, @IFLA_BRPORT_BACKUP_PORT={0x8}]}}}, @IFLA_IFNAME={0x14, 0x3, 'bridge_slave_0\x00'}]}, 0x60}, 0x1, 0x0, 0x0, 0x20044010}, 0x4840) (async, rerun: 32) write$cgroup_pid(r2, &(0x7f0000000880)=r3, 0x12) (async) sendmsg$nl_generic(r0, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000300)=ANY=[@ANYBLOB="f40000002e00090027bd7000000000001e00000004001e80451f5bd16f448c4190011dc10581fdd2772b90610200000000009d100000bcdb6cd37b8389b3872a7646522749c3e99167f18a6a31b5f8cf3be4396d89207f4d29a980d250bd90437f7fa767f549825eb744a59e81248bbde9d5b64c54356fbaae054f4aad5e29e17a3c3bc1c783e9d5d631cf5243d910088a8de8599a8967fff961489b23655efffa57d2be2af002d97adf35d8b077be32060acb2d9a3dd47350ee40cab4443e2436615d94ad1098ec74aac5fcb930514d7fc40b72e0cb23c2c3c90a523870c9b05083dc9fc80993abda2af834faead8dad511ae2eb3a9e58278fae04115e83cade83d075b8b9e2444ce48e3162f8fe8e37d62d89a382af148f1fcaef0433054e2bbb434dd5b89ded42baaaeb77550809d3506d09cc2745430a336875b013534a137a513ba40da538c2bfbee2e6a7c2520e899329803"], 0xf4}, 0x1, 0x0, 0x0, 0x42804}, 0x84) 1.609796952s ago: executing program 0 (id=7956): r0 = socket$packet(0x11, 0x3, 0x300) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000080)={'veth0\x00', 0x0}) setsockopt$packet_add_memb(r0, 0x107, 0x1, &(0x7f00000004c0)={r1, 0x3, 0x6, @remote}, 0x10) (async) r2 = socket$nl_route(0x10, 0x3, 0x0) pipe(&(0x7f0000000040)={0xffffffffffffffff}) ioctl$int_in(r3, 0x5421, &(0x7f00000003c0)=0x3d49) read$alg(r3, &(0x7f0000000140)=""/116, 0x74) (async) socketpair(0x8, 0x3, 0x1, &(0x7f00000000c0)={0xffffffffffffffff, 0xffffffffffffffff}) setsockopt$packet_tx_ring(r4, 0x107, 0xd, &(0x7f0000000100)=@req={0x0, 0x0, 0x7, 0x80}, 0x10) (async) r6 = syz_genetlink_get_family_id$tipc2(&(0x7f0000000240), r4) sendmsg$TIPC_NL_NODE_GET(r5, &(0x7f0000000300)={&(0x7f00000001c0)={0x10, 0x0, 0x0, 0x8000000}, 0xc, &(0x7f00000002c0)={&(0x7f0000000280)={0x24, r6, 0x100, 0x70bd2b, 0x25dfdbff, {}, [@TIPC_NLA_SOCK={0x10, 0x2, 0x0, 0x1, [@TIPC_NLA_SOCK_HAS_PUBL={0x4}, @TIPC_NLA_SOCK_ADDR={0x8, 0x1, 0x3ff}]}]}, 0x24}, 0x1, 0x0, 0x0, 0x40}, 0x20000000) setsockopt$packet_add_memb(r0, 0x107, 0x1, &(0x7f0000000000)={r1, 0x1, 0x6, @random="790c7edd3d8d"}, 0x10) sendmsg$nl_route_sched(r2, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000400)={&(0x7f0000000440)=@getchain={0x24, 0x11, 0x1, 0x0, 0x2000001, {0x0, 0x0, 0x0, r1, {0x7}, {0xd, 0xc}, {0x8}}}, 0x24}, 0x1, 0x0, 0x0, 0x4000000}, 0x20048054) (async) r7 = socket$nl_generic(0x10, 0x3, 0x10) r8 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000080), r7) (async) ioctl$sock_SIOCGIFINDEX_80211(r7, 0x8933, &(0x7f0000000100)={'wlan0\x00', 0x0}) sendmsg$NL80211_CMD_SET_TX_BITRATE_MASK(r7, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000240)={&(0x7f00000004c0)={0x2c, r8, 0x1, 0x0, 0x0, {{}, {@val={0x8, 0x3, r9}, @void}}, [@NL80211_ATTR_TX_RATES={0x10, 0x5a, 0x0, 0x1, [@NL80211_BAND_2GHZ={0xc, 0x0, 0x0, 0x1, [@NL80211_TXRATE_LEGACY={0x5, 0x1, [0x36]}]}]}]}, 0x2c}, 0x1, 0x0, 0x0, 0x4004080}, 0x20008840) (async) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f0000000380)={'wlan0\x00', 0x0}) sendmsg$NL80211_CMD_SET_POWER_SAVE(r4, &(0x7f00000005c0)={&(0x7f0000000340)={0x10, 0x0, 0x0, 0x200000}, 0xc, &(0x7f0000000580)={&(0x7f0000000500)={0x4c, r8, 0x4, 0x70bd25, 0x25dfdbfe, {{}, {@val={0x8, 0x3, r10}, @void}}, [@NL80211_ATTR_PS_STATE={0x8, 0x5d, 0x1}, @NL80211_ATTR_PS_STATE={0x8, 0x5d, 0x1}, @NL80211_ATTR_PS_STATE={0x8, 0x5d, 0x1}, @NL80211_ATTR_PS_STATE={0x8}, @NL80211_ATTR_PS_STATE={0x8, 0x5d, 0x1}, @NL80211_ATTR_PS_STATE={0x8, 0x5d, 0x1}]}, 0x4c}, 0x1, 0x0, 0x0, 0xc0}, 0x40c0) 1.513219527s ago: executing program 4 (id=7957): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) ioctl$sock_SIOCGIFVLAN_GET_VLAN_REALDEV_NAME_CMD(r0, 0x8982, &(0x7f0000000000)={0x8, 'erspan0\x00', {'rose0\x00'}, 0x1}) sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f0000000500)={0x0, 0x0, &(0x7f00000004c0)={&(0x7f00000002c0)={{0x14, 0x10, 0x1, 0x0, 0x0, {0x5}}, [@NFT_MSG_DELFLOWTABLE={0x2c, 0x18, 0xa, 0x5, 0x0, 0x0, {0x2}, [@NFTA_FLOWTABLE_NAME={0x9, 0x2, 'syz0\x00'}, @NFTA_FLOWTABLE_TABLE={0x9, 0x1, 'syz0\x00'}]}], {0x14, 0x11, 0x1, 0x0, 0x0, {0x3}}}, 0x54}, 0x1, 0x0, 0x0, 0x40000}, 0x20008000) socket$nl_netfilter(0x10, 0x3, 0xc) (async) ioctl$sock_SIOCGIFVLAN_GET_VLAN_REALDEV_NAME_CMD(r0, 0x8982, &(0x7f0000000000)={0x8, 'erspan0\x00', {'rose0\x00'}, 0x1}) (async) sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f0000000500)={0x0, 0x0, &(0x7f00000004c0)={&(0x7f00000002c0)={{0x14, 0x10, 0x1, 0x0, 0x0, {0x5}}, [@NFT_MSG_DELFLOWTABLE={0x2c, 0x18, 0xa, 0x5, 0x0, 0x0, {0x2}, [@NFTA_FLOWTABLE_NAME={0x9, 0x2, 'syz0\x00'}, @NFTA_FLOWTABLE_TABLE={0x9, 0x1, 'syz0\x00'}]}], {0x14, 0x11, 0x1, 0x0, 0x0, {0x3}}}, 0x54}, 0x1, 0x0, 0x0, 0x40000}, 0x20008000) (async) 1.512751618s ago: executing program 3 (id=7958): r0 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000000)={'veth1_macvtap\x00', 0x0}) r2 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_route(r2, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000001140)={&(0x7f0000000100)=ANY=[@ANYBLOB="480000001000030526bd70000000000000000000", @ANYRES32=0x0, @ANYBLOB="000000000000000008000500", @ANYRES32=r1, @ANYBLOB="f37f09766c08000000000013fd02800600010004000380790c00000000000000"], 0x48}}, 0x0) mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000)='./cgroup.cpu/syz1\x00', 0x1ff) bpf$PROG_LOAD(0x5, &(0x7f0000001cc0)={0xc, 0x4, &(0x7f0000000000)=ANY=[@ANYBLOB="180000000000000000000000000000007110b100000000400000000000000000"], &(0x7f0000000100)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) r3 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000), 0x200002, 0x0) r4 = openat$cgroup_procs(r3, &(0x7f00000003c0)='cgroup.procs\x00', 0x2, 0x0) write$cgroup_pid(r4, &(0x7f0000000240), 0x12) r5 = openat$cgroup_procs(r3, &(0x7f0000000080)='tasks\x00', 0x2, 0x0) sendfile(r5, r5, 0x0, 0x9) r6 = socket$packet(0x11, 0x2, 0x300) ioctl$sock_SIOCGIFINDEX(r6, 0x8933, &(0x7f0000000080)={'ip6tnl0\x00', 0x0}) r8 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r8, &(0x7f00000007c0)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000380)=@newtfilter={0x34, 0x2c, 0x800, 0x70bd26, 0x25dfdbfb, {0x0, 0x0, 0x0, r7, {0xe, 0xe}, {0xe, 0x1}, {0xe, 0x6}}, [@TCA_CHAIN={0x8, 0xb, 0x7}, @TCA_RATE={0x6, 0x5, {0x8, 0x8}}]}, 0x17}}, 0x24048000) 1.484272035s ago: executing program 2 (id=7959): r0 = socket(0x10, 0x3, 0x0) sendmsg$nl_generic(r0, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000002c0)={0x14, 0x2e, 0x1, 0x0, 0xfffffffc, {0xa}}, 0x14}, 0x1, 0x0, 0x0, 0x800}, 0x0) (async) r1 = socket$packet(0x11, 0x2, 0x300) setsockopt$packet_int(r1, 0x107, 0x11, &(0x7f00000000c0)=0xfffffffe, 0x4) (async) setsockopt$packet_tx_ring(r1, 0x107, 0x5, &(0x7f0000000080)=@req3={0x8000, 0x6, 0x300, 0xfc}, 0x1c) (async) syz_genetlink_get_family_id$nl802154(&(0x7f0000000e00), 0xffffffffffffffff) r2 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000040), r0) (async) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f0000000100)={'wlan0\x00', 0x0}) sendmsg$NL80211_CMD_ASSOCIATE(r0, &(0x7f0000000240)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x100000}, 0xc, &(0x7f0000000200)={&(0x7f0000000140)={0x60, r2, 0x20, 0x70bd2a, 0x25dfdbfd, {{}, {@val={0x8, 0x3, r3}, @val={0xc, 0x99, {0x3, 0x5}}}}, [@NL80211_ATTR_VHT_CAPABILITY={0x10, 0x9d, {0x400, {0x4, 0xdc4, 0x3}}}, @NL80211_ATTR_USE_MFP={0x8, 0x42, 0x1}, @NL80211_ATTR_HT_CAPABILITY_MASK={0x1e, 0x94, {0x5001, 0x1, 0x4, 0x0, {0x0, 0x14bd, 0x0, 0x7f, 0x0, 0x1}, 0x1, 0x800, 0xe5}}]}, 0x60}, 0x1, 0x0, 0x0, 0x8001}, 0x4000000) 1.347642189s ago: executing program 4 (id=7960): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r0, &(0x7f000000c2c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000340)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a28000000000a0101000000005e1affd5020000000900010073797a300000000008000240000000032c000000030a01030000e6ff00000000020000000900010073797a30000000000900030073797a320000000014000000110001"], 0x7c}}, 0x0) r1 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_MSG_GETRULE(r1, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000440)={0x2c, 0x7, 0xa, 0x101, 0x0, 0x0, {0x2}, [@NFTA_RULE_CHAIN={0xfcf3, 0x2, 'syz2\x00'}, @NFTA_RULE_TABLE={0x9, 0x1, 'syz0\x00'}]}, 0x2c}}, 0x0) 1.300700994s ago: executing program 2 (id=7961): r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = socket$inet6_udp(0xa, 0x2, 0x0) setsockopt$IP6T_SO_SET_REPLACE(r1, 0x29, 0x40, &(0x7f0000002680)=@mangle={'mangle\x00', 0x2, 0x6, 0x778, 0x0, 0x478, 0x2a0, 0x1b0, 0x388, 0x6a8, 0x6a8, 0x6a8, 0x6a8, 0x6a8, 0x6, 0x0, {[{{@ipv6={@mcast1, @mcast1, [], [0x0, 0xff000000], 'team0\x00', 'vlan1\x00', {}, {}, 0x11}, 0x0, 0x188, 0x1b0, 0x0, {0x7a00000010000000}, [@common=@srh1={{0x90}, {0x5c, 0x0, 0x0, 0x0, 0x0, @empty, @mcast2, @private2, [0x0, 0xff], [0x0, 0xffffffff, 0xffffffff], [0x0, 0x0, 0x0, 0xff]}}, @common=@inet=@multiport={{0x50}, {0x0, 0xc, [0x1, 0x0, 0x0, 0x0, 0x2, 0x2, 0x0, 0x0, 0x0, 0x4e21, 0x0, 0x0, 0x4e20, 0x0, 0xfffd], [0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfe, 0xfd, 0xfd]}}]}, @HL={0x28}}, {{@uncond, 0x0, 0xa8, 0xf0}, @DNPT={0x48, 'DNPT\x00', 0x0, {@ipv6=@private2={0xfc, 0x2, '\x00', 0x1}, @ipv6=@initdev={0xfe, 0x88, '\x00', 0x0, 0x0}, 0x18, 0xff, 0x6}}}, {{@ipv6={@rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x01', @initdev={0xfe, 0x88, '\x00', 0x0, 0x0}, [], [0x0, 0x0, 0xff000000, 0xffffff00], '\x00', 'bond_slave_0\x00', {}, {}, 0x0, 0x0, 0x6}, 0x0, 0xa8, 0xe8, 0x48000000}, @inet=@TPROXY1={0x40, 'TPROXY\x00', 0x1, {0x8, 0x4, @ipv6=@private0, 0x4e23}}}, {{@ipv6={@dev={0xfe, 0x80, '\x00', 0x1c}, @mcast1, [0xff000000, 0xffffffff, 0xffffff00, 0xffffff00], [0xffffff00, 0xffffff00, 0xff], 'veth0_vlan\x00', 'veth1_to_bond\x00', {0x9865820c52afa8d5}, {0xff}, 0x84, 0x1, 0x0, 0x28}, 0x0, 0xa8, 0xf0}, @SNPT={0x48, 'SNPT\x00', 0x0, {@ipv4, @ipv6=@private2={0xfc, 0x2, '\x00', 0x1}, 0x0, 0x37}}}, {{@uncond, 0x0, 0x208, 0x230, 0x0, {}, [@inet=@rpfilter={{0x28}}, @common=@rt={{0x138}, {0x0, [], 0x9, 0x0, 0x0, [@private0, @initdev={0xfe, 0x88, '\x00', 0x0, 0x0}, @private0={0xfc, 0x0, '\x00', 0x1}, @empty, @initdev={0xfe, 0x88, '\x00', 0x0, 0x0}, @empty, @mcast2, @mcast2, @private0, @empty, @loopback, @ipv4={'\x00', '\xff\xff', @local}, @ipv4={'\x00', '\xff\xff', @dev={0xac, 0x14, 0x14, 0x2a}}, @private1, @rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x01', @mcast2]}}]}, @HL={0x28}}], {{'\x00', 0x0, 0xa8, 0xd0}, {0x28}}}}, 0x814) bpf$PROG_LOAD(0x5, &(0x7f00000002c0)={0xe, 0x4, &(0x7f0000000700)=@framed={{0x18, 0x0, 0x0, 0x0, 0x8, 0x0, 0x0, 0x0, 0x8}, [@generic={0x91, 0x1, 0x1, 0x7a}]}, &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1}, 0x94) r2 = socket(0x400000000010, 0x3, 0x0) write(r2, &(0x7f0000000040)="3a03000018002551075c0165ff0ffc02802000030004000500e1000c04001e001a030700", 0x33a) socketpair(0x1, 0x1, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) r4 = bpf$MAP_CREATE(0x0, &(0x7f00000000c0)=@base={0x12, 0x4, 0x4, 0x2}, 0x48) syz_init_net_socket$ax25(0x3, 0x5, 0x6) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000180)={{r4, 0xffffffffffffffff}, &(0x7f0000000040), &(0x7f0000000140)=r3}, 0x20) r6 = syz_init_net_socket$bt_sco(0x1f, 0x5, 0x2) ioctl$sock_ifreq(r6, 0x8910, &(0x7f0000000000)={'veth0_vlan\x00', @ifru_ivalue=0x7}) ioctl$sock_netdev_private(r6, 0x8943, &(0x7f0000000000)) r7 = socket$nl_route(0x10, 0x3, 0x0) r8 = socket$inet6_udp(0xa, 0x2, 0x0) ioctl$sock_SIOCGIFINDEX(r8, 0x8933, &(0x7f0000000c80)={'lo\x00', 0x0}) sendmsg$nl_route_sched(r7, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000340)=@newqdisc={0x44, 0x24, 0x4ee4e6a52ff56541, 0x70bd2d, 0x0, {0x0, 0x0, 0x0, r9, {0x0, 0xffe0}, {0xffff, 0xffff}, {0x10, 0x3}}, [@qdisc_kind_options=@q_gred={{0x9}, {0x14, 0x2, [@TCA_GRED_DPS={0x10, 0x3, {0x4, 0x3, 0x0, 0x1}}]}}]}, 0x44}, 0x1, 0x0, 0x0, 0x51}, 0x0) sendmsg$nl_route_sched(r7, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000140)={&(0x7f00000003c0)=@newqdisc={0x178, 0x24, 0xd0f, 0x200003, 0x0, {0x60, 0x0, 0x0, r9, {0x0, 0xffe0}, {0xffff, 0xffff}, {0x0, 0xfff3}}, [@qdisc_kind_options=@q_gred={{0x9}, {0x148, 0x2, [@TCA_GRED_PARMS={0x38, 0x1, {0xf, 0x4, 0x400, 0x0, 0x81, 0x101, 0x7, 0xc40, 0x7fffffff, 0xfffffffd, 0x20, 0xb, 0xff, 0x6, 0xca11, 0x6}}, @TCA_GRED_STAB={0x104, 0x2, "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"}, @TCA_GRED_LIMIT={0x8, 0x5, 0xae}]}}]}, 0x178}, 0x1, 0x0, 0x0, 0x240400d0}, 0x24008004) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000400)={0x15, 0xc, &(0x7f0000000100)=@framed={{}, [@ringbuf_output={{0x18, 0x1, 0x1, 0x0, r5}, {}, {}, {}, {}, {}, {}, {0x85, 0x0, 0x0, 0x3}}]}, &(0x7f0000000180)='syzkaller\x00', 0xb}, 0x90) sendmsg$nl_route(r0, &(0x7f00000006c0)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000040)=ANY=[@ANYBLOB="3c00000010000d04fcffffff0000000000000000", @ANYRES32=0x0, @ANYBLOB="cb840400000000001c00128009000100626f6e64000000000c00028008fa0e00ff7f950000"], 0x3c}}, 0x0) 1.300190768s ago: executing program 3 (id=7962): r0 = openat$tun(0xffffffffffffff9c, &(0x7f00000001c0), 0xa2f01, 0x0) r1 = socket(0x22, 0x2, 0x3) setsockopt$ALG_SET_KEY(r1, 0x117, 0x1, 0x0, 0x0) (async) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f00000000c0)={'syzkaller1\x00', 0x6bf1c2d5adba8c32}) r2 = socket$inet6(0xa, 0x2, 0x0) bind$inet6(r2, &(0x7f0000000100)={0xa, 0x4e20, 0x0, @empty}, 0x1c) setsockopt$inet6_udp_int(r2, 0x11, 0x68, &(0x7f0000000080)=0xa40, 0x4) (async) r3 = socket$kcm(0x2, 0xa, 0x2) (async) recvmsg(r2, &(0x7f00000005c0)={0x0, 0x0, 0x0}, 0x0) getsockopt$inet6_tcp_TCP_ZEROCOPY_RECEIVE(r2, 0x6, 0x23, &(0x7f00000003c0)={&(0x7f0000ffe000/0x1000)=nil, 0x1000, 0x0, 0x0, 0x0, &(0x7f0000000200)=""/156, 0x9c, 0x7a797dc1e0ec984a, &(0x7f00000002c0)=""/217, 0xd9}, &(0x7f0000000400)=0x40) (async) ioctl$SIOCSIFHWADDR(r3, 0x8914, &(0x7f0000000180)={'syzkaller1\x00', @link_local}) r4 = syz_init_net_socket$802154_dgram(0x24, 0x2, 0x0) setsockopt$WPAN_WANTLQI(r4, 0x0, 0x3, &(0x7f0000000000)=0x1, 0x4) (async) syz_genetlink_get_family_id$nl80211(&(0x7f0000000100), r4) (async) write$tun(r0, &(0x7f0000000600)={@val={0xa}, @void, @llc={@llc={0x0, 0xe, 'q', "b8a54c13d006b6a76fa6d7973979791c2c5d6ea46eb442556c82ad567d69d0080f9524dffc7cf3b4f1aabed32f21dd8b1db506724ced414ce48993c66e4d31327213802ee885c8e7217bacdb24b4376a98b8958dd070e42448f731f8d54e32a97afd9b82ca6f208326eafbb44aa802cfa40596348b9d581e679da426ad3b7e3428bd98a8407b"}}}, 0x8d) 1.225168003s ago: executing program 1 (id=7963): mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000000)='hugetlb.2MB.rsvd.usage_in_bytes\x00', 0x275a, 0x0) mmap(&(0x7f00005d3000/0x4000)=nil, 0x4000, 0x0, 0x12, r0, 0x0) sendmsg$NL802154_CMD_SET_SEC_PARAMS(0xffffffffffffffff, &(0x7f0000000040)={0x0, 0x0, 0x0}, 0x0) r1 = socket(0x10, 0x3, 0x0) setsockopt$netlink_NETLINK_TX_RING(r1, 0x10e, 0xc, &(0x7f0000000040)={0x7fffffff}, 0x10) sendmsg$kcm(r1, &(0x7f00000016c0)={0x0, 0x0, &(0x7f00000000c0)=[{&(0x7f0000000040)="2e0000004a008102e00f80ecdb4cb9020a", 0x4a}, {&(0x7f0000001700)="0c74c75350f4a590e15c61c7942348092734fe1863473bbce6798a60e9", 0x1d}], 0x2, 0x0, 0x0, 0x10}, 0x0) r2 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='cgroup.controllers\x00', 0x275a, 0x0) r3 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='cgroup.controllers\x00', 0x275a, 0x0) mmap(&(0x7f0000867000/0x2000)=nil, 0x2000, 0x0, 0x11, r3, 0x1000) mmap(&(0x7f00004a3000/0x1000)=nil, 0x1000, 0x0, 0x13, r2, 0x0) r4 = socket$xdp(0x2c, 0x3, 0x0) mmap$xdp(&(0x7f000042a000/0x800000)=nil, 0x800000, 0x0, 0x11, r4, 0x0) 1.222722884s ago: executing program 0 (id=7964): r0 = socket(0xa, 0x5, 0x0) setsockopt$inet_sctp_SCTP_SOCKOPT_BINDX_ADD(r0, 0x84, 0x64, &(0x7f0000000080)=[@in6={0xa, 0x4e24, 0xf1, @loopback, 0x19f49a9}], 0x1c) r1 = socket(0x10, 0x803, 0x0) ioctl$sock_SIOCETHTOOL(r1, 0x8946, &(0x7f0000000040)={'veth0_to_team\x00', &(0x7f0000000000)=@ethtool_cmd={0x24, 0x8, 0x4, 0x1ff, 0x0, 0x1, 0x0, 0x6, 0x7, 0x0, 0xa, 0x0, 0x0, 0x8, 0x0, 0x0, [0x0, 0x2]}}) r2 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r2, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000240)=ANY=[@ANYBLOB="140000001000010000000000000000000500000a28000000000a030000000000000000000a00000708000240000000020900010073797a31000000002c000000030a010100000000000000000a0000070900010073797a31000000000900030073797a320000000014000000110001"], 0x7c}, 0x1, 0x0, 0x0, 0x4000}, 0x0) sendmsg$NFT_BATCH(r2, &(0x7f0000009b40)={0x0, 0x0, &(0x7f0000009b00)={&(0x7f0000000440)={{0x14, 0x10, 0x1, 0x0, 0x0, {0x5}}, [@NFT_MSG_NEWSET={0x3c, 0x9, 0xa, 0x401, 0x0, 0x0, {0xa, 0x0, 0x4}, [@NFTA_SET_TABLE={0x9, 0x1, 'syz1\x00'}, @NFTA_SET_KEY_LEN={0x8, 0x5, 0x1, 0x0, 0x2}, @NFTA_SET_NAME={0x9, 0x2, 'syz1\x00'}, @NFTA_SET_ID={0x8, 0xa, 0x1, 0x0, 0xfffffffc}]}, @NFT_MSG_NEWSETELEM={0x50, 0xc, 0xa, 0x101, 0x0, 0x0, {0xa, 0x0, 0x6}, [@NFTA_SET_ELEM_LIST_SET={0x9, 0x2, 'syz1\x00'}, @NFTA_SET_ELEM_LIST_TABLE={0x9, 0x1, 'syz1\x00'}, @NFTA_SET_ELEM_LIST_ELEMENTS={0x24, 0x3, 0x0, 0x1, [{0x14, 0x0, 0x0, 0x1, [@NFTA_SET_ELEM_EXPR={0x10, 0x7, 0x0, 0x1, @objref={{0xb}, @void}}]}, {0xc, 0x0, 0x0, 0x1, [@NFTA_SET_ELEM_FLAGS={0x8, 0x3, 0x1, 0x0, 0x2}]}]}]}, @NFT_MSG_DELSETELEM={0x2c, 0xe, 0xa, 0x201, 0x0, 0x0, {0xa}, [@NFTA_SET_ELEM_LIST_TABLE={0x9, 0x1, 'syz1\x00'}, @NFTA_SET_ELEM_LIST_SET={0x9, 0x2, 'syz1\x00'}]}], {0x14, 0x11, 0x1, 0x0, 0x0, {0x1}}}, 0xe0}, 0x1, 0x0, 0x0, 0x4000850}, 0x40) sendmsg$inet_sctp(r0, &(0x7f00000000c0)={&(0x7f0000000000)=@in6={0xa, 0x4e24, 0xff, @loopback, 0x5}, 0x1c, &(0x7f0000000040)=[{&(0x7f0000000100)="e6", 0x1}], 0x1, &(0x7f0000000140)=ANY=[@ANYBLOB="18000000000000008400000007000000ac1414aa0020000020"], 0x38, 0x4855}, 0x24000052) socket$inet_icmp_raw(0x2, 0x3, 0x1) unshare(0x2c060000) syz_init_net_socket$bt_hci(0x1f, 0x3, 0x5) close(0x4) syz_open_procfs$namespace(0x0, &(0x7f0000000040)='ns/mnt\x00') r3 = bpf$PROG_LOAD(0x5, &(0x7f0000000040)={0x20, 0x3, &(0x7f0000000200)=@framed, &(0x7f0000000000)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @netfilter=0x2d, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x99ee}, 0x94) bpf$BPF_LINK_CREATE_XDP(0x1c, &(0x7f0000002380)={r3, 0x0, 0x2d, 0x0, @val=@netfilter={0xa, 0x1}}, 0x20) r4 = socket(0x10, 0x3, 0x0) ioctl$ifreq_SIOCGIFINDEX_batadv_hard(r4, 0x8933, &(0x7f0000000000)={'batadv_slave_1\x00', 0x0}) sendmsg$nl_route(r4, &(0x7f0000000100)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000040)=ANY=[@ANYBLOB="200000001100010028bd7000fedbdf2507000000", @ANYRES32=r5, @ANYBLOB='\x00\x00\x00\x00\x00\x00\x00\x00'], 0x20}}, 0x0) r6 = socket$can_j1939(0x1d, 0x2, 0x7) ioctl$ifreq_SIOCGIFINDEX_vcan(r6, 0x8933, &(0x7f0000000000)={'vcan0\x00', 0x0}) sendmsg$DCCPDIAG_GETSOCK(r0, &(0x7f0000003900)={&(0x7f0000000180)={0x10, 0x0, 0x0, 0x100}, 0xc, &(0x7f00000038c0)={&(0x7f00000023c0)=ANY=[@ANYBLOB="ec140000130002002abd7000fedbdf251e5507054e204e21030000000300000007000000010000802d000000120000000000cccf23072bed", @ANYRES32=r7, @ANYBLOB="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"], 0x14ec}, 0x1, 0x0, 0x0, 0x400}, 0x800) bind$can_j1939(r6, &(0x7f00000000c0)={0x1d, r7, 0x2, {0x0, 0x0, 0x4}, 0x1}, 0x18) r8 = bpf$PROG_LOAD(0x5, &(0x7f0000000240)={0x6, 0x5, &(0x7f0000000080)=@framed={{0x18, 0x2, 0x0, 0x0, 0xfffffffc}, [@initr0={0x18, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x1}]}, &(0x7f00000001c0)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x1, '\x00', 0x0, @xdp, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000600)={r8, 0x0, 0xe, 0x0, &(0x7f0000000100)="178d048604bf0bfb1945d7430008", 0x0, 0x501, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x9}, 0x50) r9 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r9, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000001ac0)={&(0x7f0000000000)=ANY=[@ANYBLOB="200000002e00010026bdf000fcdbdf2504"], 0x20}, 0x1, 0x0, 0x0, 0x4000d}, 0x20000000) r10 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r10, 0x0, 0x0) openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000002c0)='blkio.bfq.io_queued\x00', 0x275a, 0x0) setsockopt$EBT_SO_SET_COUNTERS(0xffffffffffffffff, 0x0, 0x81, 0x0, 0x0) 1.156094848s ago: executing program 4 (id=7965): r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='memory.events\x00', 0x275a, 0x0) mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x0, 0x12, r0, 0x0) r1 = syz_init_net_socket$bt_l2cap(0x1f, 0x2, 0x0) setsockopt$bt_BT_FLUSHABLE(r1, 0x112, 0x8, &(0x7f00000000c0), 0x4) r2 = socket$nl_netfilter(0x10, 0x3, 0xc) r3 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$IP6T_SO_SET_REPLACE(r3, 0x29, 0x40, &(0x7f00000003c0)=@filter={'filter\x00', 0x4, 0x4, 0x380, 0xffffffff, 0x1e0, 0x0, 0x1e0, 0xfeffffff, 0xffffffff, 0x2b0, 0x2b0, 0x2b0, 0xffffffff, 0x4, 0x0, {[{{@uncond, 0x2f2, 0xa8, 0xf0}, @common=@unspec=@LED={0x48, 'LED\x00', 0x0, {'syz0\x00', 0x1, 0x35, {0x3}}}}, {{@uncond, 0x0, 0xa8, 0xf0}, @common=@unspec=@LED={0x48, 'LED\x00', 0x0, {'syz0\x00', 0x1, 0x41, {0x6}}}}, {{@ipv6={@private0, @loopback, [0xff, 0x0, 0xff000000, 0xffffffff], [0x0, 0xff, 0xff000000, 0xffffff00], 'team0\x00', 'batadv_slave_0\x00', {0xff}, {}, 0xff, 0xe7, 0x4, 0x44}, 0x0, 0xa8, 0xd0}, @common=@unspec=@NFQUEUE3={0x28, 'NFQUEUE\x00', 0x3, {0x9, 0x8, 0x1}}}], {{'\x00', 0x0, 0xa8, 0xd0}, {0x28}}}}, 0x3e0) sendmsg$IPCTNL_MSG_CT_NEW(r2, &(0x7f0000000300)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000000)={0xa8, 0x0, 0x1, 0x401, 0x0, 0x0, {0x2}, [@CTA_TUPLE_ORIG={0x24, 0x1, 0x0, 0x1, [@CTA_TUPLE_IP={0x14, 0x1, 0x0, 0x1, @ipv4={{0x8, 0x1, @remote}, {0x8, 0x2, @remote={0xac, 0x3}}}}, @CTA_TUPLE_PROTO={0xc, 0x2, 0x0, 0x1, {0x5}}]}, @CTA_TUPLE_REPLY={0x40, 0x2, 0x0, 0x1, [@CTA_TUPLE_IP={0x14, 0x1, 0x0, 0x1, @ipv4={{0x8, 0x1, @empty}, {0x8, 0x2, @dev={0xac, 0x14, 0x14, 0x11}}}}, @CTA_TUPLE_PROTO={0xc, 0x2, 0x0, 0x1, {0x5, 0x1, 0x88}}, @CTA_TUPLE_ZONE={0x6, 0x3, 0x1, 0x0, 0x2}, @CTA_TUPLE_IP={0x14, 0x1, 0x0, 0x1, @ipv4={{0x8, 0x1, @private=0xa010100}, {0x8, 0x2, @initdev={0xac, 0x1e, 0x1, 0x0}}}}]}, @CTA_LABELS={0x10, 0x16, 0x1, 0x0, [0x6, 0x7, 0x1373e30d]}, @CTA_NAT_DST={0x20, 0xd, 0x0, 0x1, [@CTA_NAT_V6_MINIP={0x14, 0x4, @private1}, @CTA_NAT_V4_MINIP={0x8, 0x1, @multicast2}]}]}, 0xa8}}, 0x0) r4 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000140), r0) ioctl$sock_SIOCGIFINDEX_80211(0xffffffffffffffff, 0x8933, &(0x7f0000000180)={'wlan1\x00', 0x0}) sendmsg$NL80211_CMD_START_P2P_DEVICE(r0, &(0x7f0000000280)={&(0x7f0000000100)={0x10, 0x0, 0x0, 0x80000}, 0xc, &(0x7f0000000240)={&(0x7f0000000200)={0x1c, r4, 0x200, 0x70bd2d, 0x25dfdbfd, {{}, {@val={0x8, 0x3, r5}, @void}}, ["", ""]}, 0x1c}, 0x1, 0x0, 0x0, 0x4}, 0x24000000) 1.00464603s ago: executing program 2 (id=7966): bpf$MAP_CREATE(0x0, &(0x7f0000000000)=@base={0x11, 0x4, 0x4, 0xff, 0x4}, 0x48) (async) bpf$MAP_CREATE(0x0, &(0x7f0000000000)=@base={0x11, 0x4, 0x4, 0xff, 0x4}, 0x48) r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000000)=ANY=[@ANYBLOB="0200000004000000010000000100000000050000", @ANYRES32, @ANYBLOB='\x00'/20, @ANYRES32=0x0, @ANYRES32, @ANYBLOB='\x00'/12], 0x48) bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=@base={0xf, 0x4, 0x8, 0x8}, 0x48) (async) r1 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=@base={0xf, 0x4, 0x8, 0x8}, 0x48) r2 = socket(0x400000000010, 0x3, 0x0) r3 = socket$unix(0x1, 0x1, 0x0) ioctl$sock_SIOCGIFINDEX(r3, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r2, &(0x7f0000000bc0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000640)=@newqdisc={0x48, 0x24, 0x4ee4e6a52ff56541, 0x70bd29, 0xffffffff, {0x0, 0x0, 0x0, r4, {0x0, 0xfff1}, {0xffff, 0xffff}, {0x0, 0x2}}, [@qdisc_kind_options=@q_htb={{0x8}, {0x1c, 0x2, [@TCA_HTB_INIT={0x18, 0x2, {0x3, 0x100, 0xe}}]}}]}, 0x48}, 0x1, 0x0, 0x0, 0x4}, 0x0) ioctl$sock_inet6_SIOCSIFADDR(0xffffffffffffffff, 0x8916, &(0x7f0000000100)={@dev={0xfe, 0x80, '\x00', 0xa}}) (async) ioctl$sock_inet6_SIOCSIFADDR(0xffffffffffffffff, 0x8916, &(0x7f0000000100)={@dev={0xfe, 0x80, '\x00', 0xa}}) r5 = socket$inet6_mptcp(0xa, 0x1, 0x106) getsockopt$inet6_tcp_buf(r5, 0x6, 0xd, 0x0, 0x0) getsockopt$inet6_mptcp_buf(r5, 0x11c, 0x2, &(0x7f0000000100)=""/222, &(0x7f0000000000)=0x80fe) sendmsg$nl_route_sched(r2, &(0x7f0000000580)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000740)=@newtfilter={0x84, 0x2c, 0xd27, 0x70bd29, 0x25dfdc00, {0x0, 0x0, 0x0, r4, {0xfff5, 0x4}, {}, {0x8, 0xc}}, [@filter_kind_options=@f_matchall={{0xd}, {0x50, 0x2, [@TCA_MATCHALL_ACT={0x4c, 0x2, [@m_gact={0x48, 0x1, 0x0, 0x0, {{0x9}, {0x1c, 0x2, 0x0, 0x1, [@TCA_GACT_PARMS={0x18, 0x2, {0x7, 0x80, 0x1, 0x7, 0x8}}]}, {0x4}, {0xc, 0x7, {0x0, 0x1}}, {0xc, 0x8, {0x3, 0x3}}}}]}]}}]}, 0x84}, 0x1, 0x0, 0x0, 0x20000010}, 0x20000000) (async) sendmsg$nl_route_sched(r2, &(0x7f0000000580)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000740)=@newtfilter={0x84, 0x2c, 0xd27, 0x70bd29, 0x25dfdc00, {0x0, 0x0, 0x0, r4, {0xfff5, 0x4}, {}, {0x8, 0xc}}, [@filter_kind_options=@f_matchall={{0xd}, {0x50, 0x2, [@TCA_MATCHALL_ACT={0x4c, 0x2, [@m_gact={0x48, 0x1, 0x0, 0x0, {{0x9}, {0x1c, 0x2, 0x0, 0x1, [@TCA_GACT_PARMS={0x18, 0x2, {0x7, 0x80, 0x1, 0x7, 0x8}}]}, {0x4}, {0xc, 0x7, {0x0, 0x1}}, {0xc, 0x8, {0x3, 0x3}}}}]}]}}]}, 0x84}, 0x1, 0x0, 0x0, 0x20000010}, 0x20000000) r6 = socket$kcm(0x11, 0x3, 0x0) setsockopt$sock_attach_bpf(r6, 0x107, 0xf, &(0x7f0000000600), 0x4) sendmsg$kcm(r6, &(0x7f00000000c0)={&(0x7f0000000500)=@xdp={0x2c, 0x0, r4, 0xc}, 0x80, &(0x7f0000000340)=[{&(0x7f0000000180)="27030200590214000600002fb96dbcf706e10500000086ddffff1144ee163cd4b8bf", 0x22}, {&(0x7f0000000c00)='\x00\x00\'Q', 0x4}, {&(0x7f0000000800)="258d6ac381562407cea4d3e5092130c7e922ab9a89bcd856d7f9459fdd10974c51c97e41b980bccc094742796e60ec164f9a91f87da52f71393b2c6d408bdbd8973f8aa5fcad81a8aadebd14adb648485a39ca8a3aac7c3e5537c7d992deaa05b9f2b4642ec73aea7a143bed8469bc2e04d59776e2931b7fe131a2c3cbdc7442415511507cdeec64d381cbf50c08a888c0aedd71e26ba6679daaa11c6ef2956e1212e26638b4587a53d43768a2b4af6af7d23f39537113e06f36c779cd07098435e405d0d140e0c533bd337bfbef60bdba19ca423a6b5056bd53c74a3fc8df316e6822ee9c6ca6dcee234184bfcfa77c63e92aa6", 0xf4}, {&(0x7f00000009c0)="b1435c7b947125b263d85ac30cb7ffc7855292ba72d726851d9fb18d574c4aa8f894cd3602a01f09ba677fa14acb586e07ab13b1a014c9160756617d178a5dbfa122490cc0851b6ca0d5f91e82648608568b1043da588a3c75fd27ebceb994e892e07da952d99bbbcdb5a33c63aa05d3abba5970a9aae7448e356ebfc0bd7944ea9aa53d274367cf71ca1a4f72530e9a11629da0ff33b4d667dff6", 0x9b}, {&(0x7f0000000c40)="2bd4c5812005a616b58a605767f6c99ac4038e8661a4ad1fef7ff53a605c0111af3f354bf44a1f38659151648684b12ac5fc9859f6aa0eaeb459db0e24616333a4aa01dff64593257b06606b14fed386bd9123ed5a907e565a716479a7409252d80ab3631cea08c6f9b1337a17037dd32aac54e9127f49c321b183592fc9720d9da8eca7c4dc8177b1f9d83e8e68e81f38eeb66e4405c11e92aabd8e006392eac00f2fd6533356bddfef05fe6eafb6cd634bdd88baab2b0c9c15c5047d8fc82c6cdeb8", 0xc3}], 0x5}, 0x4) socket$nl_netfilter(0x10, 0x3, 0xc) (async) r7 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r7, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000240)=ANY=[@ANYBLOB="140000001000010000000000000000000500000a28000000000a030000000000000000000a00000708000240000000020900010073797a31000000002c000000030a010100000000000000000a0000070900010073797a31000000000900030073797a320000000014000000110001"], 0x7c}, 0x1, 0x0, 0x0, 0x4000}, 0x0) sendmsg$NFT_BATCH(r7, &(0x7f0000009b40)={0x0, 0x0, &(0x7f0000009b00)={&(0x7f00000003c0)=ANY=[@ANYBLOB="140000001000010000000000000000000500000a3c000000090a010400000000000000000a0000040900010073797a3100000000080005400000000209000200737997310000000008000a40fffffffc14000000110001"], 0x64}, 0x1, 0x0, 0x0, 0x4000850}, 0x24000000) sendmsg$NFT_BATCH(r7, &(0x7f0000009b40)={0x0, 0x0, &(0x7f0000009b00)={&(0x7f00000002c0)={{0x14, 0x10, 0x1, 0x0, 0x0, {0x1}}, [@NFT_MSG_NEWSET={0x3c, 0x9, 0xa, 0x401, 0x0, 0x0, {0xa, 0x0, 0x4}, [@NFTA_SET_NAME={0x9, 0x2, 'syz1\x00'}, @NFTA_SET_ID={0x8, 0xa, 0x1, 0x0, 0xfffffffc}, @NFTA_SET_TABLE={0x9, 0x1, 'syz1\x00'}, @NFTA_SET_KEY_LEN={0x8, 0x5, 0x1, 0x0, 0xb}]}], {0x14, 0x11, 0x1, 0x0, 0x0, {0x1}}}, 0x64}, 0x1, 0x0, 0x0, 0x4000850}, 0x40) close(0x3) bpf$MAP_CREATE_TAIL_CALL(0x0, &(0x7f0000000a80)=ANY=[@ANYBLOB="0300000004000000040000000a00000000000020795022729b232574b6b0fb35b1f22bc626658ed29b754c9000fd5ba986f1d774f762f9b20f90768866b2eb9ad61f3dd8e6a78a71ec53f9bd4932a5b1fcb138bcf7638f828728b25ae2d99a6a387f57c700bc599e78184de093fbe6e68e521f728a12b58c168690c8c02a954711d178b1ddb8ba89ab31fc", @ANYRES32=r0, @ANYBLOB="0500"/20, @ANYRES32=r4, @ANYRES32, @ANYBLOB="01000000040000000200"/28], 0x50) (async) bpf$MAP_CREATE_TAIL_CALL(0x0, &(0x7f0000000a80)=ANY=[@ANYBLOB="0300000004000000040000000a00000000000020795022729b232574b6b0fb35b1f22bc626658ed29b754c9000fd5ba986f1d774f762f9b20f90768866b2eb9ad61f3dd8e6a78a71ec53f9bd4932a5b1fcb138bcf7638f828728b25ae2d99a6a387f57c700bc599e78184de093fbe6e68e521f728a12b58c168690c8c02a954711d178b1ddb8ba89ab31fc", @ANYRES32=r0, @ANYBLOB="0500"/20, @ANYRES32=r4, @ANYRES32, @ANYBLOB="01000000040000000200"/28], 0x50) bpf$PROG_LOAD(0x5, &(0x7f00000005c0)={0x0, 0xc, &(0x7f0000000440)=@framed={{}, [@ringbuf_output={{0x18, 0x1, 0x1, 0x0, r1}, {}, {}, {}, {}, {}, {}, {0x85, 0x0, 0x0, 0x3}}]}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$PROG_LOAD(0x5, &(0x7f0000000500)={0x1e, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @sk_lookup=0x24, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) (async) bpf$PROG_LOAD(0x5, &(0x7f0000000500)={0x1e, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @sk_lookup=0x24, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) mmap(&(0x7f0000fa3000/0x2000)=nil, 0x2000, 0x0, 0x13, r0, 0x0) (async) mmap(&(0x7f0000fa3000/0x2000)=nil, 0x2000, 0x0, 0x13, r0, 0x0) 958.415179ms ago: executing program 4 (id=7967): r0 = socket$inet6_mptcp(0xa, 0x1, 0x106) connect$inet6(r0, &(0x7f0000000180)={0xa, 0x4001, 0xfffffffd, @loopback, 0x40003e}, 0x1c) ioctl$sock_SIOCINQ(r0, 0x541b, &(0x7f0000000080)) 816.600713ms ago: executing program 2 (id=7968): r0 = socket$inet6_udplite(0xa, 0x2, 0x88) getsockopt$sock_cred(r0, 0x1, 0x11, &(0x7f0000000000), &(0x7f0000000080)=0xc) getsockopt$inet_pktinfo(0xffffffffffffffff, 0x0, 0x8, &(0x7f00000000c0)={0x0, @empty, @loopback}, &(0x7f0000000100)=0xc) bpf$PROG_LOAD_XDP(0x5, &(0x7f00000001c0)={0x10, 0x4, &(0x7f0000001300)=@framed={{}, [@ldst={0x1, 0x0, 0x3, 0x0, 0x1, 0x2c}]}, &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', r1, 0xe}, 0x94) socket$inet6_udplite(0xa, 0x2, 0x88) (async) getsockopt$sock_cred(r0, 0x1, 0x11, &(0x7f0000000000), &(0x7f0000000080)=0xc) (async) getsockopt$inet_pktinfo(0xffffffffffffffff, 0x0, 0x8, &(0x7f00000000c0)={0x0, @empty, @loopback}, &(0x7f0000000100)=0xc) (async) bpf$PROG_LOAD_XDP(0x5, &(0x7f00000001c0)={0x10, 0x4, &(0x7f0000001300)=@framed={{}, [@ldst={0x1, 0x0, 0x3, 0x0, 0x1, 0x2c}]}, &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', r1, 0xe}, 0x94) (async) 748.665442ms ago: executing program 3 (id=7969): write$cgroup_devices(0xffffffffffffffff, &(0x7f0000000000)={'b', ' *:* ', 'm\x00'}, 0x8) r0 = socket$xdp(0x2c, 0x3, 0x0) ioctl$EXT4_IOC_CHECKPOINT(r0, 0x4004662b, &(0x7f0000000040)=0x2) ioctl$sock_ipv4_tunnel_SIOCADDTUNNEL(0xffffffffffffffff, 0x89f1, &(0x7f0000000140)={'gre0\x00', &(0x7f0000000080)={'ip_vti0\x00', 0x0, 0x8, 0x8000, 0x9, 0x4, {{0x22, 0x4, 0x1, 0x21, 0x88, 0x65, 0x0, 0x0, 0x4, 0x0, @broadcast, @empty, {[@end, @rr={0x7, 0xb, 0x7e, [@multicast1, @loopback]}, @timestamp_prespec={0x44, 0xc, 0xf2, 0x3, 0x4, [{@multicast2, 0x9}]}, @end, @cipso={0x86, 0x58, 0x0, [{0x6, 0x6, "6f52618b"}, {0x7, 0x11, "2fc475166ad6e82c1f912241fb2772"}, {0x7, 0x3, "b8"}, {0x0, 0x11, "d62844553a8c2f65dc40c251367941"}, {0x2, 0x12, "0cc21d02bc594824291d53b834c19cbd"}, {0x2, 0x5, "36ea1a"}, {0x7, 0x10, "1307aec4aa040ed5f0dd23c570c6"}]}]}}}}}) bind$xdp(r0, &(0x7f0000000180)={0x2c, 0x0, r1, 0x16, r0}, 0x10) r2 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r2, &(0x7f00000002c0)={&(0x7f00000001c0)={0x10, 0x0, 0x0, 0x2}, 0xc, &(0x7f0000000280)={&(0x7f0000000200)=@getchain={0x54, 0x66, 0x400, 0x70bd26, 0x25dfdbfe, {0x0, 0x0, 0x0, r1, {0x4, 0x7}, {0xfff1}, {0xffff, 0x6}}, [{0x8, 0xb, 0x4}, {0x8, 0xb, 0x2}, {0x8, 0xb, 0xfffff1b0}, {0x8, 0xb, 0x10000000}, {0x8, 0xb, 0x5}, {0x8, 0xb, 0x7}]}, 0x54}, 0x1, 0x0, 0x0, 0x4000800}, 0x16f118c17d057e9d) ioctl$FS_IOC_MEASURE_VERITY(r0, 0xc0046686, &(0x7f0000000300)={0x3, 0x4f, "feef4fc9f2a2c2964475d9fc4ec094ed3272a8ac44fa2bf7761fd238e65ce0106702141b097dac39a212a474063293063a3060732202e69b395ae6997039bf9501af993d56b000db5def13eeff96d6"}) r3 = socket$inet_udp(0x2, 0x2, 0x0) sendmsg$L2TP_CMD_TUNNEL_DELETE(r2, &(0x7f0000000480)={&(0x7f0000000380)={0x10, 0x0, 0x0, 0x1000}, 0xc, &(0x7f0000000440)={&(0x7f00000003c0)={0x74, 0x0, 0x100, 0x70bd25, 0x25dfdbfc, {}, [@L2TP_ATTR_MTU={0x6, 0x1c, 0x5}, @L2TP_ATTR_COOKIE={0xc, 0xf, 0x10}, @L2TP_ATTR_L2SPEC_TYPE={0x5}, @L2TP_ATTR_IP6_DADDR={0x14, 0x20, @remote}, @L2TP_ATTR_DATA_SEQ={0x5, 0x4, 0xfe}, @L2TP_ATTR_PROTO_VERSION={0x5, 0x7, 0x3}, @L2TP_ATTR_RECV_SEQ={0x5, 0x12, 0x83}, @L2TP_ATTR_PW_TYPE={0x6, 0x1, 0x2}, @L2TP_ATTR_FD={0x8, 0x17, @udp=r3}, @L2TP_ATTR_SEND_SEQ={0x5, 0x13, 0x1}]}, 0x74}, 0x1, 0x0, 0x0, 0x4048045}, 0x800) r4 = openat$tun(0xffffffffffffff9c, &(0x7f00000004c0), 0x84001, 0x0) ioctl$SIOCSIFHWADDR(r4, 0x8924, &(0x7f0000000500)={'dvmrp1\x00', @dev={'\xaa\xaa\xaa\xaa\xaa', 0x16}}) ioctl$INCFS_IOC_CREATE_FILE(r4, 0xc058671e, &(0x7f0000000900)={{'\x00', 0x3}, {0x768f}, 0x100, 0x0, 0x0, &(0x7f0000000540)='./file0\x00', &(0x7f0000000580)='./file0\x00', &(0x7f00000005c0)="f22879602fe8633b59e754abdf87be1ed7631601ad8d990a91e5286fdac7dc693929f9b4ff8cac78f56c8bbd620116f15b208ca7705f5332507fef31ebc9f7bc3026611f000bc8f9e1ede83604d8120f1e209eab9db8f9b43d712805d41b7d038a2c5450bd7e6439d077dc869346cbae152143ab074636c4f1602aed0e2aa5dce34a9e9236ce73dc82870bbe8303c7dc7aabbf2ad8b7f0e2257cd6c6599a495d949da351a5958dd66f172c98ee8ecdd99b997a50c484cd1a2be7fe5f", 0xbc, 0x0, &(0x7f0000000680)={0x2, 0x16f, {0x0, 0xc, 0x80, "6203280aa485f726e6e0b9b822de5d501ca70cc25a8253788a2462fe4889675922134a709edbdc4f9e4f033ce58906eba97ccbc2b7ca9cc71edc29a0d2a8181849e1db84449b6d283a438ea35f0545d9c85e1e372c2efba9eaf05461ba6d98f803332036454e8c111fe5fa9a1550950a091b02a0c7827219c46074a68af78eb3", 0xe2, "a1bfc75452668b6b46af902c69e5f620b0a4064f91eec494f4eb000fb5f6431887b8bc9bb1257ece00b841e6216427cbd95fb89ca9e30774404cb1af8e2dc6be77457f3ae147c2ad06a25b02f6888d57735618a18f6e90185f604cbd8c3e841b0f3b2bd43f3565e71de5d81050471a071abb00a520ba9540d833296786d1c60bd74116e136795e93916fcdbdd6498cf810fad5568bfa3af96c96996ad1f8b5f2c5e2cbe9bec8f15e36bbd92ca2b2f320b9c1cbff86ac44d084f88f7dadd8b684b78fe368f952eed48896f1e71ec520e631e76d9c250ef5e9f86f1194124269c91ba9"}, 0xcd, "bab9818e9e07b5a7b9fd8d2934f616d0d895ceaf1fce1c16c76c2ebfd28f9cce589def52df8994fd413949f8a05c3fdb62f7d74443b8a2b9a6ca14df84ebfeeda33dcd4b5313c36425b7a4d1b2924aa2c320ff45aa6af16ae0d563b377515425286645098b31a8d23c369e2511a995ff2913338ca4c2d28163158998206c37068ac573682a6e7f6c5b38dc3c14c4799dfd440a8164206f0564a005996b548b7781a64ddb0c87484aaa31d90c419c32770b248889396d53175c68805b6ced7c5c61497e3ec04910442afcd16de3"}, 0x248}) r5 = syz_init_net_socket$bt_rfcomm(0x1f, 0x1, 0x3) recvmsg(r5, &(0x7f0000001240)={&(0x7f0000000980)=@hci, 0x80, &(0x7f0000001100)=[{&(0x7f0000000a00)=""/210, 0xd2}, {&(0x7f0000000b00)=""/148, 0x94}, {&(0x7f0000000bc0)=""/253, 0xfd}, {&(0x7f0000000cc0)=""/81, 0x51}, {&(0x7f0000000d40)=""/202, 0xca}, {&(0x7f0000000e40)=""/199, 0xc7}, {&(0x7f0000000f40)=""/158, 0x9e}, {&(0x7f0000001000)=""/103, 0x67}, {&(0x7f0000001080)=""/72, 0x48}], 0x9, &(0x7f00000011c0)=""/100, 0x64}, 0x2140) ioctl$XFS_IOC_FSGETXATTRA(r4, 0x801c582d, &(0x7f0000001280)) bind$inet(r3, &(0x7f00000012c0)={0x2, 0x4e24, @local}, 0x10) ioctl$FAT_IOCTL_SET_ATTRIBUTES(r2, 0x40047211, &(0x7f0000001300)=0x10) setsockopt$inet_sctp_SCTP_AUTOCLOSE(0xffffffffffffffff, 0x84, 0x4, &(0x7f0000001340)=0x80, 0x4) r6 = socket$inet6_udp(0xa, 0x2, 0x0) ioctl$ifreq_SIOCGIFINDEX_wireguard(r0, 0x8933, &(0x7f0000001c80)={'wg0\x00', 0x0}) sendmmsg$inet6(r6, &(0x7f0000003600)=[{{&(0x7f0000001380)={0xa, 0x4e23, 0x8001, @rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x01', 0x3}, 0x1c, &(0x7f0000001a00)=[{&(0x7f00000013c0)="c7b9af15293686d0183fe4d8fee765b47f793c35ef3c675a363a3d26bbc8f44e5a67542b7d34639f5164f5d05f2ac27b130a39a50791698c6cdef824f1355a891b8e28bd36d67770ef5151c1d714beced18e2b956f49a0eac0f3b2848e0ccaf161dd9e0c069d83ae17e0a80e7d477e256d3f7181a4a0beeafc7244ae36519ec15f7306c7c41bfbbd08747b67b4f044c5eb5944b55c9dd5f479d943c52df85ffd055c453b851f679a21b058575feb7c38a3149f661234cff5fcca9966d2599f634869ca7b8304fbb8f5a08966f1538b844b03afe499507236724d0de9801ebbfa8633d5f937d12afc3843dc787e", 0xed}, {&(0x7f00000014c0)="1ccc2963b63a58ea531fbb1ec8ba6c819226c7fdd783f3a3", 0x18}, {&(0x7f0000001500)="f00e2c642e3fa64243136b6fcfc9b99c24b461df3df9c231deee95067c39ba253b135f06c19aae7a1790a2eb077003f63f72234bc2c1be752b10e767cc40e4304d4a199ca092a6bfd08f730d159501fae7c10127f25a7651fe17d35f2982e060e98a18d23d5a8c4b1e7962d55feb2ca521ac7a8c88a6d260e1860941c48367c6cf25b7f8eb9d6bfa4e126f4cd5ca4a10aedec014cd4e25c697cdb9055650e5c7c0228f41dd3bc5a55680b01b38070459609f1e719fc44ca8efdde228277eaa5aca4afe783b36e6c75fa57a0298f34673433158ab535934a2766f01d13b7f6323794e432aaba9294e23681d001572c4b8092cc41992", 0xf5}, {&(0x7f0000001600)="ba80b81669c1edf28e12e73151537f2c1f20d9f4dc9d2c4e4f29a4a3df47315974f029f68af4459e94d1b9fe19a4e265f0c681042eaf516b3f35aaed34e247bcfa73edccd6cc79fbd715250652bba17e30b286d15832942404148806635a42bce806154325557adaf8cf27b6a66b97ab403a7e2d9563c0071cb27e672ca4afb8c952dc0126c3e0fc044c6ef69f93e0786772ef96aea27c8cb8058040137ac52931258adf3c261c0ce8c29d8ee65c7aba36e1", 0xb2}, {&(0x7f00000016c0)="4a026a55ccec81a3bbdad2acf3045f3319b013d6a81d44dfde36cd4d909ccc259ac258901be8bfd8ae3cae8c7aa1380b0c6fad2734761e97ac9de9ff1445f64a15c3285171ae402f07ef65d442cfb722c5cb1b17f4a8fdbca69a0fc5ee4fad13335a54c5e7b14b79ba1efaaf231b92e97c26923fa3b429eee2f616f2c5636068d7012f1fb38db3844c79db9dc1f17e3c728cc9ea14e9c209000bab7235ccd81ff68798c49182a79978839e55b3a6297b1d2884323179b745099d86cf5376e50cdff29f8e59ae", 0xc6}, {&(0x7f00000017c0)="9d769ad541fb674f89fc1a7bb84001da1ec6496c3ee47229ba1f6f279830b75d080c894ed9bcd692d3c9d6d1a121d3b93995b9a532a0753e2103cde9ea8fe95cad78d109409726a6aaebf56e9e2adb3007f84b0ec8644a5fbed2bf5135a5ebb13f175356d1604f8d61", 0x69}, {&(0x7f0000001840)="13d45d44a98bc0fbc77603551d1d8ce749436cbc7234b7b81a9c4630dc834be0b38b7bf5ad45e6845d08bf271f2cba366547c1084f8aeda717772cbe8e259fc360ec8160827ea02a", 0x48}, {&(0x7f00000018c0)="2ff06ac4984f088222856d86f4969edfcbfb7b7e62dd385cae9a9d43bac206f1002a95f5af2d7bbeb2b2c62b2a4c35990de915aaabc2d3fa18a4a2be2fa882c7a86b78aed6d458fe77621276f84a00da527d87704858c80991cf8d3c1cd970aab8bbc931c568ec2249971939373815b1eb259135952deaec58dc39bf0f2032ef6bb6d7de5f", 0x85}, {&(0x7f0000001980)="1675229ccfe858f5f01819d3f49f91fa8007eeb35036d5fbe6adc79e74d5cbce8ae9d04b280fef282a5cc31f2e47d538cb2aa68943ec8003cc191997ff89274e226edbb14ada049d1f6105df2a762fa0e677a816245ce0e6489a324f3761564755c85939eae391226f3bf6d5d87a4426f7d69d1a89733d11ee161f", 0x7b}], 0x9, &(0x7f0000001ac0)=[@hoplimit={{0x14, 0x29, 0x34, 0x7fffffff}}], 0x18}}, {{&(0x7f0000001b00)={0xa, 0x4e23, 0x4, @local, 0xfffffffe}, 0x1c, &(0x7f0000001b40)}}, {{&(0x7f0000001b80)={0xa, 0x4e23, 0x5, @dev={0xfe, 0x80, '\x00', 0x17}, 0x2}, 0x1c, &(0x7f0000001c40)=[{&(0x7f0000001bc0)="f461aefd5cf73c8e181354c6dac191ffed3bab1b63ffc33bf58e55d7da58b2d8dc829c3afdfbdc14826d6c4f2d9a16e23782a6de1b8772ed2ef40a4f050f570b3884ea22b73cc66370f732ed65399c4f17efe90857161d0e189c457612b5f538e88fa77381594efa", 0x68}], 0x1, &(0x7f0000001cc0)=[@tclass={{0x14, 0x29, 0x43, 0x2}}, @pktinfo={{0x24, 0x29, 0x32, {@ipv4={'\x00', '\xff\xff', @dev={0xac, 0x14, 0x14, 0x2a}}, r7}}}, @hopopts_2292={{0x30, 0x29, 0x36, {0x16, 0x2, '\x00', [@hao={0xc9, 0x10, @loopback}, @padn={0x1, 0x2, [0x0, 0x0]}]}}}], 0x70}}, {{&(0x7f0000001d40)={0xa, 0x4e22, 0x5, @mcast1, 0x6}, 0x1c, &(0x7f0000002080)=[{&(0x7f0000001d80)="56bc838791348fa0ee613d874e4d1467014f2ef0e141fb470b7d65f6660f2af3eceac3ca72809568545ce07d4549d009c0b86586dd126a00e87e23a32754c33d9b67311091263f2da1b81d02ed91f9f33d1c310bebe9d679efe66ef372e3af1fcdf3041df71a00715d48789d1097b37eec8d47c1ef58ff436a6b81e5c163144a6d79387ed35700ff1835588baf1fb12711348b160dcc77550b9746249ff420359b3ba964f44e2e96e58a37de0813b66295e7", 0xb2}, {&(0x7f0000001e40)="8f9ebfddb01595712a133dc0138f48b56f00efcb4962e0ca2533be9d64f657e14f148dac44d6203d078b69749ebe6d3f737f6118a24b570f7a97c31695ef2ec9ae744fc23e9c7355aa54f7693ce0405bd8f6238d5bb4e1943c1299e92cb76a3458d30376b930c7701e983d77f177594da461298fe0b631210c996de06ced90e38b1894f17caa03eb21fa1be4c55585e8e3f29476181f0a1bd06ae8997c4e7aabc375778ef7ff73ca46cae3d7ce3fa146e1bfaef3340d66c90ffe", 0xba}, {&(0x7f0000001f00)="04f334165b88f596e436", 0xa}, {&(0x7f0000001f40)="f5e01d4e3c9e07f73afa5120a1f245e5df354e2ddb7220452da12575a49e1effc599f50048324f561601f6b99fe617aa9c0dfaa39dc6a34c8a8d221850f25cd9902327e6ee7f65aa01bfa0ec0a23c701ed9673eb6bca52aafdeba85ee54e37756158b3472ed9872d30151e31051547569178cbaaf7f12996379edf06bb4f4268fdfcb2e5061eb2b7cb66e04cb40f9a20", 0x90}, {&(0x7f0000002000)="75c9d0034c777cdc564cd8360006e587523d4dfd9b2ab74e5f1e19a35a224af90a59a3198f18888e14f709d502fc6da47fc426d37652b54e5c32bb13a1de06350813a817d1bc4ed7a46d696482c1a51c03dfae3a6463d9cb7f4ec1dfaecc33", 0x5f}], 0x5, &(0x7f0000002100)=[@pktinfo={{0x24, 0x29, 0x32, {@private0={0xfc, 0x0, '\x00', 0x1}, r1}}}, @rthdr_2292={{0x48, 0x29, 0x39, {0x4, 0x6, 0x1, 0x2, 0x0, [@initdev={0xfe, 0x88, '\x00', 0x1, 0x0}, @empty, @ipv4={'\x00', '\xff\xff', @private=0xa010100}]}}}, @flowinfo={{0x14, 0x29, 0xb, 0x45}}], 0x88}}, {{&(0x7f00000021c0)={0xa, 0x4e23, 0x9, @rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x01', 0x1}, 0x1c, &(0x7f0000003580)=[{&(0x7f0000002200)="29e7a5dac51e6be8d6467fa9156c4086ad6d37116f66cff1bfc3cb51c23343330e04ff5e8695e4c954fa51dd39c75b42d1fa357df1cc222f9f4620bf7cc2d6be0ece05a4fde5fdf79f95bc71947c7b75bedf22d8e17a3ba82a38d0f317c1debd20720cf59d6bdbdf348c618b476e8e6e9d25a50ccfc1096749cd237ba8bbd3e52472a19918925dd248729a23389051c1b2dd100a0b1be77564eb9e3b5f1702b938aa7bfd6cee5d863837813edb1d0a93ef6c591c25beaa5f0cc5446bb8abe2", 0xbf}, {&(0x7f00000022c0)="0e61e45811e6b8038c5e702c8fd8ff4b7a980d1603cb8c0f409d7ef7d7271019609f1bfd96e10a827729dcdee532f2a9017be90b216c48cdf1b7bc7b09d6b23c81ceca8194054cb1134f0a41b83c6c47779bbbe26ca787dd3db9a3678de178f2521747bd94aa64e008f9f3e7a9e8d22d04c5f87c962cfca45168de2f80fa28e9a4d28aec70bff54392ab4c9eda26b06ba795c824cceb770540bd313568869986e1106f5465a7737de2cddec01fc30b57e76e4e51b20ab9bcb991a065a09384e47c36859a6b005972645a1a87c18e3466da9e95cb7763f0fa29668918dd06d14dfe77b66a90b045683716b73c6d4f916eaa81e2f4419ad335d3acf6297c28ac92c77c661fc8040226545df446bfd99522820bcf88d7d50d8b79de14be88c29413ec599e421f1674a3e0fcec559b4590759c21443800759045e6db03a75d33f3d158ceaeefca41508af6bbe316a67c4ba63f6cf121560c791630c334e055e2bce970c848028698f590e51d72c15cd5d72f74d35fae1c53ab162eefdfb20f0c1e693f40a6c37d825e056d98644e18ad7dbe201b619d040b77bc583d7f525e040e56466db4330da231f6af562a71bb15f3d19750763e45246b3ecfa50122f42ec80bb56e03321b06040b99f258fba8718eba626d03a7ca0b477932e11cf045cf5c3a0bd88493c217f9ac6cbee2058e9be5f426dff1f213bbe8155b4fd796f98dc19e6348ecbed3752635c01a1b8598194e519f963d6f8611d225a1fd18c72be34c37bb9b9d2c5a1f47a7afb26f66803ba0a41df87485b8840212df4013ee0ed4ef0c720810a1bf38ad1283c2f80d3b4da04dee7e8c594fd70794f6ae66c5a1f3fc5a0824c402080e0f0674a0f0c3b8552d37817edf4bce12a7352e631549e96dee37ce90d1f59026d523400acdc4e502b620e5294bc830c64f4fbc2a136e24cbe9fe8cea9df6a351bd8b0c627e378fca4c85f1025020da94806fb052bdb753330846e9df0d0ae9a9057438c28daa0ac65bccd0aeea9a5f17ab56737822d9f6d15a328ced597367c04eda257e80f716f63b04cfd3fc507e3a1d3a6a9df34a8b2821c6049533579a8638cbe33910f75905e4a90cb1999fc88c31e0c76180bb191cfeca882531a970df843780bb84d956604a26d6516614904b1a710d39cb4c6c52889e1cd4630535fdec3a28967c813ea043998e55fc513c936e80be7aeb7535e8df67ca549d545e51fd5cf1eaf4269f37157f65d7ac9cd7159a89e5895f78864d681a911fc0ff6242b688311ab9b18e79e28b5912c9d16b206bbcfe43b22bf8d8d40eee9419160a8050450ba040baea7072286b7e0bf3021d67ed4f4042d31a4cb3bc4e3904d6b9d024658d22141a8d2b637d1a488e2a5e95c0336317759cb729309b0d7772681cbd1c18eed7c63b86748f7a4eee8a5e7fdf7da617a5d1dffb244c8172830709f2b030cc90940fae607ff9b9177bd4787c05c50871e45b052522119a1710e4b4a5cd97cad3205d282da7d660388bcdfcb5b859b6189caccaa9b39b55ff5ae4292c89f8862fef3e5ae85246af7d0dc776c01e13488aff2c750e003fa7e27a14cfc762c92f9bd9ff838f843a7ffe07c4236630779f5909b22009ec6ed11a020407bb1fbc493c54efe0b426f2861205a57883655495c84509c8857e86559369b4890a1932ef7ef650ed789926c28c7aee68ed111547f37266e2ade7ca7a4c308113021224dc8e3f04fb294784353a2d85d2e9600553c8a36bfd887c62310eeb3e1e5033b8003d31dc5a9f6d4916c5593fa22e6b0dd9420146eb076f731c65ece42db03d6b890995dd61a947aa3d83c2a4e19e7320e01f4e4c63e268c6e2992486bd228179fdcbfe8f66cc81efe24901aa43cb50240b42f5f953f987d9634d91ff35bc03927e359994c3c0e4b76a28fcaa626349c36224233ac98209194b44b06561fcf9eaf6819bf7867bf3a94b587b1add5cf94390901b95189f8d4ec2a52fb13503eb68f75bdee308815313442281179452d690c98208a05b323dc40e5b750bda76709f7d2c44c64869c81814ab8fbbf01c799af169696b86d55801f01729cf4cbaea6d0631e7980619c3663052f9cc59289c9b0965edb88a4991621554fb2ce815a0e9376e8254fa776b07bb44d7bdaa3fbcf0b643ef5cd433747b38abdf6f4a237fb0187983bb305c7998de9b70dfe64b172bbaca4c69f7ad5d04f87788995db2c3d8ad033369da8e45e6e12b274ee452e2b4dc14409b468ffd1dfc59bb6ac600e86912e3093080c889022751d8f07f153aaaaa23077890e80d652aee30069d13941554f734d19a497cc330c61929e167c1025bdbdda01da88c8ec15c3d2fbfabf4c416b0ee44c2bf76ee864e722b66ed5ca2819407a88cbb1ca8129e07ab441e4b5dc0b9c06288ae79ec411c22ebccf98ab8297d59bad548a86ffa8fbf5f8253e6a835cb68edfa0b0fd7fff8dc4d357c3189c710e307a1f28895813257008878e4e5d85e55cd6cb13b18741bf974b04d6a36b17c774ada79fdc19b25f861c8c372ab6eac94dcd46e5a3607b299475c5b38c6a48adf65691827f4e50f1c84e2f86ff4b9f9ce48923f31923f25fc5b83beb716a1506e30f157f177f4cd6a469f180ae2f20ef09b3ab3d913e256995d98320ec1ab1429f537f03ba567133506a0bc80c3b43f006822d7924be9ec9311a410337534a24497b4030f5f5c554dd74b62e0becd596b436c9f976ed7c30680fb10cfff070baa423e4a99d93c184ea7e86a80dbd71a29ca69707386d10e49690e8de1ae81e3f38ae592c7c431f28184e7c6e3813ac474df35c9f2f4c875a99dbb7b9676395160818d885ad17c2fa9115020e429e4a5f3ec89f505ccb7024aeb535f09ae68e0ffb000a9754973e926d4ea20ece762f643bfb3a391116c2be0e97d415d6314d8181bb22c6f4a4e3181e50247c93ef88b22e57f2d7f5747dfdc75ac7e94785aa6b1599124a146e73a52e57024a8ee8423a569a75d5fadbbcc8a14855b08c126e16ac5cfae2f11bec1c5e38117e2263b2ed05a52b1891a40d8f31c51b8e73a8d00a9f8167fdb8bc27186f0c367e8e178680b1f26f9eaf08b84a4312a2d17bdd20ef5b1d269bc94c8922dcd81e47ae1e2103c2b0ac74cc12b1409cdbc22152affdf93b9b276d69e750114e67da3a336a5b5b58ed46256f88b4a1b62eba9c83f5c17659288c257b35006a56948af3fac27279623410377e120ef5b10ffadc265bdec4d7fa8a59e186bbead8e0a9ebcca682942885e7995b76595d5f2ce74d91664bcb118075c138ba12c8a633c64e9932f7dc51327c1046e422a7eb76234d0904fdc93c4d808c2008a9edf65ee91646cd7af741e0acd3c1561e1ae0232da5a596bfc6e7fe3a51efad2b42d52d8f807776dbbbe3f3329e536c45809223fb9de87b11a943a7279a66e295d5cd614c0ada0345c493c3748121bb0bfcc09af7b7d8a32e799fd761771debef5ca4449351009cbc3aa2f65ac7d9fea62f0c5ff8fa525f60c06741b456db4d5611ba9893de6c96a0048b59045c1c08a0813b8f6b018d8d8ea4d6992e3c1b34dd82267c4cc689699c75ad13120302e765686a17a17af46b8d26ad46ddaddb3fa6e97437b80889a80e6b6b7f01c2c7026b428bc1ceb4d3ead5bb3281a263ec7aae719bdb9b1f513dbd99ce6e2fa50dc014ac946dfd3da23e58ffe529b8193819eec3ccfd7475db53642c81cb9ddd57a03d48a33c4f740cd4cd66074c88016b0ff88b699221fc2bd50afbb222274b78a25b39dab94365b1b4f86d7706ca2733368463d0b6909f8d713d3001467f1d0ed4d05d20854a9390747e6b5db60d98ef95502a43d2d576a02aed751415ad6c42caa480a509f52f637eb368879de95bd3b60b04571dde2b6e154c6665826a45fae8cc97d6c62717874ca14f85e356cd0843111f9d71fdf929040e40a73637cd44c37f20a4c95dc893ba48e792d3bedb5f9c1a4240885f4f99257f5fd749bb99b08c8033b546690aa877913a0682ec7baa1723a9ba55fbf21f3f363ea878a711ec912c649056681f0522a416b24a939ada0e2a7b312f61e80024b7bb23f561362b370f9fd3b7d9aac1ba184c271c258f54039b16394d280c1a8f68f5ebfed5e387c45d47b840efb36277901c8c37e360058b6b016da0f7dc98b991599fe327011b65ee7fd9f3f3a9947b3a698d81c2af25a8c2d6bc09ab91510b7bb04bfa89deff0db0405d61888b1d6fe1c5734e678d097e0d79be248a7c964f3a975bba2c4cc82936ad2852abc6967fbe900d8d2cc13890be89f922d0f12acd0145030a647878043fe1aa9539d6ac478d9e2818bd45a924202365481a6e555fe4ebddfd9b88c9f5bb26a23982b19f09e5e6a19ba096d7169e3adc5914d5a1587c1c830aef08745aa85f392567897fadd41cd7d6b4b246ca2342d0ed1ce17891a85129c45d96824f769492d2aa56538d4b54f201a33c65c21073c78bb05342d02583bb38deec81cf5626e80801fbe6f04aab779e52b25e2635f913435040f120015e8aabdce1202a280f6f5aee9a0ae1a9868357fc5f2afa39ab6d5e69df0d08a7cc352b6f1a5f62f16612fb8da8662e71730cc40be4eee79919d27f6da450285ba3e79a89d03f64a7e832f18a4c319eaca1ae15e16f834c8d1763c8e22937c3afcfd68caa2ba618fddf1f43b6717599386efb1093541dd83e83c4801bd9f189bc91a3d57500105db4c52d6a677ddd08b86c89c7497f3ed50a12347064e0c6eb604b791be1ab7fa3ae7500f3709c125298020fd9d7e74b956a45d1371e809d8dfe7b531f940985c5eac80c3ea5a0abc1894b24e8afad32ac81b71cf212437bd2ed12aebd9b63c8f605d5ba308668dae40a2c16a7a478f3a579008cd3fa212b2d2ee3242ea04f537a8ac64f8b626563a536c3a91e36b6ef4a95692ec142eebec2acdd7bf48e27962a8a0d6336f93b891544ded86aaac32dfa793ab33b079827cf245d71d2a783b94c3f415ab232c01bf044d7dbdafa8f5baa7605992ade22f5c2f83c94c526fcc561bc570b676286a4723d3d51993bdfc468efa9e8bae5178ce159746974ff8261ce188be54d1b3939e35f2fd01b528e7e2dd772f9a7d6fdcd07a00426a604019875722264e0470b50857b7dd895dd2a3c2e2d9797e1f49b692397ab0c64525ffb8b8714db0b1dbac81b2c168400554d2db5e95000269cfb0080bd6748c06179a2edc323f0afa3b14d51c99ebe4f44727a6730d23edf0637b157009d36f5a028c3ac04a225e46d79df0f4a06b9d8e0f71986bd6bb36c7cdb071bf66097f6b4c90655df384bc927a67c0a179edf2f30f3e9b6ae5189239a4c0bbe98f007a7473c9274115132b536fe98627aabebc49505a9ef355294aaf333e02d5ecf83b8bc2ab983a9d56077c4e914af497b84812441f70f1d29a575366f8f4c3e7258c0b39b32c5cf029566634b45fe6456486569de79fad7eb0b42f16b51958746ca59eb91f326060a7483f4088c69b94e2a1805875e158cd5fb57198edf0045520a72c173332a0d3ceb5e536a34919282bb9fc860282a0f4b94f6e51f4484acdfec091075aae28b16ba77a46a03b8fd372e823fa04eacfff7a455807aacbdad42aa9ffab41618dc31d5af6b288a595910770edcfbbe2de1e5e94474fb07cd8a9d165de266bd044ec99a590d18ac80672b4937a3e765981cfc2a5e0ca389691cb64c7a82f9e9ef8c68921f8c753015daafa7bc204ad20b849e353cd6621bc7559eca9c13f87034b584edf71066d916e0f7edba7fab655ee", 0x1000}, {&(0x7f00000032c0)="36683abb17cc57012a8ba7c710c7060aea0cf84c41b06dcf383d185bbf0724dad0e8b1a7a4bd638ffe9131aa94c22ad4e130d6b967d6311c4e9473c693baf3542b6e9cb74a64e134104daf90a6c984d5dddbdf11c3da6fb465285dc22c3e5f7c065d04b9e15fc07bb222", 0x6a}, {&(0x7f0000003340)="5f498a0202ef293b47ceb4", 0xb}, {&(0x7f0000003380)="3725574ce91656171a3cd23dd3293c815c0df64d7fb60e0f0183b75d877ba26e243b06413ca4ad45c21f46584c95ec8773542ccf0f70f4d0623e41ead7bab002ca6545ef027541da959e7affbaaa146d528cc0d9bde1f4a0542f7cb0590fcfd612ac1bb37a8474dcc40b3019547d4e3e6e6bdba8292b6a57165ce1f77ab832d7f3da078e15ac21782df8778fe9283760144872891ce49d28dc3505be4a10692612ad295a3fafabc7e1dc422ae14301655970d3337749b96fd8516279addf59302500bd0dda071f32aba65f12bddef92cad63e9c26fa3bcb8914f03adf37930bea0634121d73cd6d0a2", 0xe9}, {&(0x7f0000003480)="7aed1855bab25695c5b1bbbceaff45e5161899c25161bc1478a1b71c479da7ed6c6d07ab4a98cca08b299f1db2af1e73be2b9f1eda296cacbe17a3ff1457a35f899faed50ff80abb277347f65eeb4bff54d3976f28670d7b3d60653d1a2f3d017bde145e2a7b", 0x66}, {&(0x7f0000003500)="49167c6968116222b4afff3d52070632c48bc07a285926af05513163d5c976aa2c0d1a725512a0062439311d8cc970ef78dbe72fbf2d47d5a124021ce073ac1fe737ea7ea0ac0b09289e90e2e40a186ae71c34baa79acd667aaf081fd9364a530702ad248cd6beece6", 0x69}], 0x7}}], 0x5, 0x4) r8 = socket$nl_generic(0x10, 0x3, 0x10) r9 = syz_genetlink_get_family_id$batadv(&(0x7f0000003780), 0xffffffffffffffff) sendmsg$BATADV_CMD_GET_HARDIF(r8, &(0x7f0000003880)={&(0x7f0000003740)={0x10, 0x0, 0x0, 0x2}, 0xc, &(0x7f0000003840)={&(0x7f00000037c0)={0x64, r9, 0x8, 0x70bd27, 0x25dfdbfb, {}, [@BATADV_ATTR_MULTICAST_FORCEFLOOD_ENABLED={0x5, 0x37, 0x1}, @BATADV_ATTR_THROUGHPUT_OVERRIDE={0x8, 0x3b, 0x2}, @BATADV_ATTR_TPMETER_TEST_TIME={0x8, 0xb, 0x6e93}, @BATADV_ATTR_ORIG_INTERVAL={0x8, 0x39, 0x5}, @BATADV_ATTR_MULTICAST_FANOUT={0x8, 0x3c, 0x315}, @BATADV_ATTR_ELP_INTERVAL={0x8, 0x3a, 0x3}, @BATADV_ATTR_THROUGHPUT_OVERRIDE={0x8, 0x3b, 0x186515b7}, @BATADV_ATTR_HARD_IFINDEX={0x8, 0x6, r1}, @BATADV_ATTR_ISOLATION_MASK={0x8, 0x2c, 0x2}, @BATADV_ATTR_ELP_INTERVAL={0x8, 0x3a, 0x4d}]}, 0x64}, 0x1, 0x0, 0x0, 0x8000}, 0x20000014) sendmsg$IPCTNL_MSG_CT_GET(r6, &(0x7f0000003b40)={&(0x7f00000038c0)={0x10, 0x0, 0x0, 0x20000000}, 0xc, &(0x7f0000003b00)={&(0x7f0000003900)={0x1dc, 0x1, 0x1, 0x5, 0x0, 0x0, {0x1, 0x0, 0x9}, [@CTA_TUPLE_ORIG={0x94, 0x1, 0x0, 0x1, [@CTA_TUPLE_ZONE={0x6, 0x3, 0x1, 0x0, 0x1}, @CTA_TUPLE_IP={0x2c, 0x1, 0x0, 0x1, @ipv6={{0x14, 0x3, @mcast2}, {0x14, 0x4, @mcast2}}}, @CTA_TUPLE_ZONE={0x6, 0x3, 0x1, 0x0, 0x2}, @CTA_TUPLE_ZONE={0x6, 0x3, 0x1, 0x0, 0x3}, @CTA_TUPLE_IP={0x2c, 0x1, 0x0, 0x1, @ipv6={{0x14, 0x3, @dev={0xfe, 0x80, '\x00', 0x1d}}, {0x14, 0x4, @private0={0xfc, 0x0, '\x00', 0x1}}}}, @CTA_TUPLE_IP={0x14, 0x1, 0x0, 0x1, @ipv4={{0x8, 0x1, @remote}, {0x8, 0x2, @multicast2}}}, @CTA_TUPLE_PROTO={0xc, 0x2, 0x0, 0x1, {0x5, 0x1, 0x88}}]}, @CTA_HELP={0x14, 0x5, 0x0, 0x1, {0xf, 0x1, 'sane-20000\x00'}}, @CTA_LABELS_MASK={0xc, 0x17, [0x6, 0x8]}, @CTA_SYNPROXY={0x14, 0x18, 0x0, 0x1, [@CTA_SYNPROXY_ITS={0x8, 0x2, 0x1, 0x0, 0x547f000}, @CTA_SYNPROXY_TSOFF={0x8, 0x3, 0x1, 0x0, 0x100}]}, @CTA_SYNPROXY={0x44, 0x18, 0x0, 0x1, [@CTA_SYNPROXY_TSOFF={0x8, 0x3, 0x1, 0x0, 0x5}, @CTA_SYNPROXY_TSOFF={0x8, 0x3, 0x1, 0x0, 0x3}, @CTA_SYNPROXY_ISN={0x8, 0x1, 0x1, 0x0, 0x7}, @CTA_SYNPROXY_TSOFF={0x8, 0x3, 0x1, 0x0, 0x1}, @CTA_SYNPROXY_TSOFF={0x8, 0x3, 0x1, 0x0, 0x30af}, @CTA_SYNPROXY_ISN={0x8, 0x1, 0x1, 0x0, 0xe718}, @CTA_SYNPROXY_TSOFF={0x8, 0x3, 0x1, 0x0, 0x8}, @CTA_SYNPROXY_ITS={0x8, 0x2, 0x1, 0x0, 0x1}]}, @CTA_SEQ_ADJ_ORIG={0x4c, 0xf, 0x0, 0x1, [@CTA_SEQADJ_OFFSET_BEFORE={0x8, 0x2, 0x1, 0x0, 0xb441}, @CTA_SEQADJ_OFFSET_AFTER={0x8, 0x3, 0x1, 0x0, 0x4}, @CTA_SEQADJ_CORRECTION_POS={0x8, 0x1, 0x1, 0x0, 0xfff}, @CTA_SEQADJ_OFFSET_AFTER={0x8, 0x3, 0x1, 0x0, 0x9}, @CTA_SEQADJ_CORRECTION_POS={0x8, 0x1, 0x1, 0x0, 0x2}, @CTA_SEQADJ_OFFSET_AFTER={0x8, 0x3, 0x1, 0x0, 0x4}, @CTA_SEQADJ_OFFSET_BEFORE={0x8, 0x2, 0x1, 0x0, 0x1465}, @CTA_SEQADJ_OFFSET_AFTER={0x8, 0x3, 0x1, 0x0, 0x2}, @CTA_SEQADJ_OFFSET_BEFORE={0x8, 0x2, 0x1, 0x0, 0x9}]}, @CTA_NAT_SRC={0x54, 0x6, 0x0, 0x1, [@CTA_NAT_PROTO={0x14, 0x3, 0x0, 0x1, [@CTA_PROTONAT_PORT_MAX={0x6, 0x2, 0x4e22}, @CTA_PROTONAT_PORT_MAX={0x6, 0x2, 0x4e23}]}, @CTA_NAT_PROTO={0x14, 0x3, 0x0, 0x1, [@CTA_PROTONAT_PORT_MIN={0x6, 0x1, 0x4e21}, @CTA_PROTONAT_PORT_MIN={0x6, 0x1, 0x4e20}]}, @CTA_NAT_V6_MINIP={0x14, 0x4, @private2}, @CTA_NAT_V6_MAXIP={0x14, 0x5, @mcast2}]}, @CTA_SEQ_ADJ_REPLY={0xc, 0x10, 0x0, 0x1, [@CTA_SEQADJ_OFFSET_AFTER={0x8, 0x3, 0x1, 0x0, 0x4}]}, @CTA_MARK_MASK={0x8, 0x15, 0x1, 0x0, 0x2}, @CTA_STATUS_MASK={0x8, 0x1a, 0x1, 0x0, 0x2}]}, 0x1dc}}, 0x0) r10 = openat$ppp(0xffffffffffffff9c, &(0x7f0000003bc0), 0xc0003, 0x0) splice(r2, &(0x7f0000003b80)=0x1a5, r10, &(0x7f0000003c00)=0x8c, 0x8, 0x8) r11 = ioctl$NS_GET_PARENT(0xffffffffffffffff, 0xb702, 0x0) ioctl$BTRFS_IOC_INO_LOOKUP(r11, 0xd0009412, &(0x7f0000003c40)={0x0, 0x1e}) 680.261289ms ago: executing program 3 (id=7970): r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$ethtool(&(0x7f0000000040), 0xffffffffffffffff) ioctl$ifreq_SIOCGIFINDEX_vcan(0xffffffffffffffff, 0x8933, &(0x7f0000000080)={'vxcan1\x00', 0x0}) ioctl$ifreq_SIOCGIFINDEX_batadv_mesh(0xffffffffffffffff, 0x8933, &(0x7f00000000c0)={'batadv0\x00', 0x0}) ioctl$sock_ipv4_tunnel_SIOCDELTUNNEL(0xffffffffffffffff, 0x89f2, &(0x7f0000000180)={'syztnl1\x00', &(0x7f0000000100)={'syztnl2\x00', 0x0, 0x700, 0x7800, 0x1, 0x3, {{0xb, 0x4, 0x1, 0x1f, 0x2c, 0x68, 0x0, 0x5, 0x4, 0x0, @broadcast, @initdev={0xac, 0x1e, 0x0, 0x0}, {[@timestamp={0x44, 0x14, 0xf2, 0x0, 0x8, [0x1, 0xbc3, 0x0, 0x0]}, @end]}}}}}) sendmsg$ETHTOOL_MSG_FEATURES_GET(r0, &(0x7f0000000300)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x2000000}, 0xc, &(0x7f00000002c0)={&(0x7f00000001c0)={0xf0, r1, 0x400, 0x70bd25, 0x25dfdbfc, {}, [@HEADER={0x60, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'bond_slave_0\x00'}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r2}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'batadv_slave_0\x00'}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'batadv_slave_0\x00'}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r3}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r4}]}, @HEADER={0x7c, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x1}, @ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x5}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'lo\x00'}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'veth1_to_bridge\x00'}, @ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x2}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'vxcan1\x00'}, @ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x3}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'veth1_virt_wifi\x00'}]}]}, 0xf0}, 0x1, 0x0, 0x0, 0x4000080}, 0x0) r5 = bpf$ITER_CREATE(0x21, &(0x7f0000000380), 0x8) syz_genetlink_get_family_id$tipc2(&(0x7f0000000340), r5) r6 = syz_genetlink_get_family_id$devlink(&(0x7f0000000400), r5) sendmsg$DEVLINK_CMD_TRAP_POLICER_SET(r0, &(0x7f0000000600)={&(0x7f00000003c0), 0xc, &(0x7f00000005c0)={&(0x7f0000000440)={0x148, r6, 0xa29, 0x70bd26, 0x25dfdbfc, {}, [{@nsim={{0xe}, {0xf, 0x2, {'netdevsim', 0x0}}}, {0x8, 0x8e, 0x2}, {0xc, 0x8f, 0x1}, {0xc, 0x90, 0x2}}, {@pci={{0x8}, {0x11}}, {0x8, 0x8e, 0x3}, {0xc, 0x8f, 0x2}, {0xc, 0x90, 0x81}}, {@pci={{0x8}, {0x11}}, {0x8, 0x8e, 0x1}, {0xc, 0x8f, 0x8001}, {0xc, 0x90, 0xbf}}, {@nsim={{0xe}, {0xf, 0x2, {'netdevsim', 0x0}}}, {0x8}, {0xc, 0x8f, 0x4}, {0xc, 0x90, 0x2}}, {@pci={{0x8}, {0x11}}, {0x8, 0x8e, 0x3}, {0xc, 0x8f, 0x1}, {0xc, 0x90, 0x6}}]}, 0x148}, 0x1, 0x0, 0x0, 0x404c0d0}, 0x4048800) getsockopt$SO_TIMESTAMP(r5, 0x1, 0x23, &(0x7f0000000640), &(0x7f0000000680)=0x4) r7 = socket$nl_generic(0x10, 0x3, 0x10) r8 = syz_genetlink_get_family_id$batadv(&(0x7f0000000700), r0) sendmsg$BATADV_CMD_TP_METER(r7, &(0x7f00000007c0)={&(0x7f00000006c0)={0x10, 0x0, 0x0, 0x2000000}, 0xc, &(0x7f0000000780)={&(0x7f0000000740)={0x24, r8, 0x102, 0x70bd27, 0x25dfdbfc, {}, [@BATADV_ATTR_MULTICAST_FANOUT={0x8, 0x3c, 0x8}, @BATADV_ATTR_THROUGHPUT_OVERRIDE={0x8, 0x3b, 0x6}]}, 0x24}, 0x1, 0x0, 0x0, 0x20000005}, 0x0) ioctl$sock_SIOCGIFINDEX_80211(r7, 0x8933, &(0x7f0000000840)={'wlan1\x00', 0x0}) sendmsg$NL80211_CMD_NEW_KEY(r0, &(0x7f0000000940)={&(0x7f0000000800)={0x10, 0x0, 0x0, 0x8000}, 0xc, &(0x7f0000000900)={&(0x7f0000000880)={0x58, 0x0, 0x100, 0x70bd26, 0x25dfdbfd, {{}, {@val={0x8, 0x3, r9}, @val={0xc, 0x99, {0x5924, 0x35}}}}, [@NL80211_ATTR_KEY={0x24, 0x50, 0x0, 0x1, [@NL80211_KEY_CIPHER={0x8, 0x3, 0xfac01}, @NL80211_KEY_CIPHER={0x8, 0x3, 0x4}, @NL80211_KEY_TYPE={0x8}, @NL80211_KEY_DEFAULT_MGMT={0x4}, @NL80211_KEY_DEFAULT={0x4}]}, @NL80211_ATTR_KEY_CIPHER={0x8, 0x9, 0xfac05}, @NL80211_ATTR_KEY_DEFAULT_MGMT={0x4}]}, 0x58}, 0x1, 0x0, 0x0, 0x44}, 0x20008800) ioctl$F2FS_IOC_GET_COMPRESS_OPTION(r7, 0x8002f515, &(0x7f0000000980)) r10 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000a00), r5) sendmsg$NL80211_CMD_GET_SCAN(r5, &(0x7f0000000ac0)={&(0x7f00000009c0)={0x10, 0x0, 0x0, 0x4000000}, 0xc, &(0x7f0000000a80)={&(0x7f0000000a40)={0x14, r10, 0x500, 0x70bd28, 0x25dfdbfc, {{}, {@void, @void}}, ["", "", ""]}, 0x14}, 0x1, 0x0, 0x0, 0x40001}, 0x44) r11 = syz_genetlink_get_family_id$mptcp(&(0x7f0000000b40), r0) sendmsg$MPTCP_PM_CMD_FLUSH_ADDRS(r5, &(0x7f0000000c40)={&(0x7f0000000b00)={0x10, 0x0, 0x0, 0x800000}, 0xc, &(0x7f0000000c00)={&(0x7f0000000b80)={0x44, r11, 0x20, 0x70bd2a, 0x25dfdbfb, {}, [@MPTCP_PM_ATTR_ADDR_REMOTE={0x20, 0x6, 0x0, 0x1, [@MPTCP_PM_ADDR_ATTR_IF_IDX={0x8, 0x7, r3}, @MPTCP_PM_ADDR_ATTR_ADDR6={0x14, 0x4, @dev={0xfe, 0x80, '\x00', 0x12}}]}, @MPTCP_PM_ATTR_RCV_ADD_ADDRS={0x8, 0x2, 0x7}, @MPTCP_PM_ATTR_LOC_ID={0x5}]}, 0x44}, 0x1, 0x0, 0x0, 0x4004}, 0x4) sendmsg$NL80211_CMD_DEL_STATION(r0, &(0x7f0000000d40)={&(0x7f0000000c80)={0x10, 0x0, 0x0, 0x400}, 0xc, &(0x7f0000000d00)={&(0x7f0000000cc0)={0x2c, r10, 0x20, 0x70bd29, 0x25dfdbfe, {{}, {@void, @val={0xc, 0x99, {0x5, 0x9}}}}, [@NL80211_ATTR_STA_FLAGS2={0xc, 0x43, {0x69b, 0x4}}]}, 0x2c}, 0x1, 0x0, 0x0, 0x8000}, 0x8041) clock_gettime(0x0, &(0x7f0000004b80)={0x0, 0x0}) recvmmsg(r0, &(0x7f0000004900)=[{{&(0x7f0000000d80)=@pppol2tpv3={0x18, 0x1, {0x0, 0xffffffffffffffff}}, 0x80, &(0x7f00000010c0)=[{&(0x7f0000000e00)=""/28, 0x1c}, {&(0x7f0000000e40)=""/118, 0x76}, {&(0x7f0000000ec0)=""/147, 0x93}, {&(0x7f0000000f80)=""/62, 0x3e}, {&(0x7f0000000fc0)=""/111, 0x6f}, {&(0x7f0000001040)=""/68, 0x44}], 0x6, &(0x7f0000001140)=""/48, 0x30}, 0x5}, {{&(0x7f0000001180)=@isdn, 0x80, &(0x7f00000013c0)=[{&(0x7f0000001200)=""/41, 0x29}, {&(0x7f0000001240)=""/152, 0x98}, {&(0x7f0000001300)=""/191, 0xbf}], 0x3, &(0x7f0000001400)=""/73, 0x49}, 0x4}, {{&(0x7f0000001480)=@vsock={0x28, 0x0, 0x0, @my}, 0x80, &(0x7f0000001540)=[{&(0x7f0000001500)=""/39, 0x27}], 0x1}, 0x5}, {{0x0, 0x0, &(0x7f0000001900)=[{&(0x7f0000001580)=""/250, 0xfa}, {&(0x7f0000001680)=""/79, 0x4f}, {&(0x7f0000001700)=""/80, 0x50}, {&(0x7f0000001780)=""/136, 0x88}, {&(0x7f0000001840)=""/154, 0x9a}], 0x5}, 0x4}, {{&(0x7f0000001980)=@l2={0x1f, 0x0, @fixed}, 0x80, &(0x7f0000001d80)=[{&(0x7f0000001a00)=""/253, 0xfd}, {&(0x7f0000001b00)=""/250, 0xfa}, {&(0x7f0000001c00)=""/250, 0xfa}, {&(0x7f0000001d00)=""/75, 0x4b}], 0x4, &(0x7f0000001dc0)=""/26, 0x1a}, 0xffffffff}, {{&(0x7f0000001e00)=@llc={0x1a, 0x0, 0x0, 0x0, 0x0, 0x0, @broadcast}, 0x80, &(0x7f0000001e80), 0x0, &(0x7f0000001ec0)}, 0x7}, {{&(0x7f0000001f00)=@tipc=@id, 0x80, &(0x7f0000002240)=[{&(0x7f0000001f80)=""/90, 0x5a}, {&(0x7f0000002000)=""/239, 0xef}, {&(0x7f0000002100)=""/88, 0x58}, {&(0x7f0000002180)=""/192, 0xc0}], 0x4}, 0x7}, {{&(0x7f0000002280)=@pppol2tpin6={0x18, 0x1, {0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, {0xa, 0x0, 0x0, @empty}}}, 0x80, &(0x7f0000002400)=[{&(0x7f0000002300)=""/250, 0xfa}], 0x1, &(0x7f0000002440)=""/4096, 0x1000}, 0x8}, {{0x0, 0x0, &(0x7f0000003680)=[{&(0x7f0000003440)}, {&(0x7f0000003480)=""/76, 0x4c}, {&(0x7f0000003500)=""/40, 0x28}, {&(0x7f0000003540)=""/181, 0xb5}, {&(0x7f0000003600)=""/96, 0x60}], 0x5, &(0x7f0000003700)=""/4096, 0x1000}, 0x4}, {{&(0x7f0000004700)=@x25, 0x80, &(0x7f00000048c0)=[{&(0x7f0000004780)=""/122, 0x7a}, {&(0x7f0000004800)=""/170, 0xaa}], 0x2}, 0x3}], 0xa, 0x10040, &(0x7f0000004bc0)={r12, r13+10000000}) socket$unix(0x1, 0x2, 0x0) sendmsg$MPTCP_PM_CMD_SUBFLOW_DESTROY(r7, &(0x7f0000004cc0)={&(0x7f0000004c00)={0x10, 0x0, 0x0, 0x100000}, 0xc, &(0x7f0000004c80)={&(0x7f0000004c40)={0x24, r11, 0x20, 0x70bd25, 0x25dfdbfd, {}, [@MPTCP_PM_ATTR_LOC_ID={0x5, 0x5, 0x5}, @MPTCP_PM_ATTR_LOC_ID={0x5, 0x5, 0x6}]}, 0x24}, 0x1, 0x0, 0x0, 0x4000000}, 0x24008845) ioctl$sock_SIOCGIFCONF(r7, 0x8912, &(0x7f0000004dc0)=@buf={0x9a, &(0x7f0000004d00)="3203905471aa36cfc069151168e7174591559f81a4334733a2153c1f22e6f6cd90d53c8e1f98eea7a96c4f0b4d6da03b8e035d8ea779afa64bc77631d65dd5321d57df21dea4332f32e7d1f653fa88135ff11372b0e7304f80ac5519584c813a03c0f29f676feedfb9494263c4c1881e37c02c05548ea8ea45834f3eace30e35320f1700c436fafb3b32b9c9d51dc96b9b27edf76262bd91a01c"}) r15 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$nbd(&(0x7f0000004e00), r15) ioctl$SIOCSIFMTU(r14, 0x8922, &(0x7f0000004e40)={'wg0\x00', 0x7}) 646.981508ms ago: executing program 2 (id=7971): r0 = socket$netlink(0x10, 0x3, 0x0) r1 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r1, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000001140)={0x18, 0x40, 0x107, 0x70bd26, 0x0, {0x4, 0x7c}, [@nested={0x4, 0x1c2}]}, 0x18}, 0x1, 0x0, 0x0, 0x4048081}, 0xc000) r2 = socket$inet6(0xa, 0x5, 0x0) listen(r2, 0x50) bpf$MAP_CREATE(0x0, &(0x7f00000010c0)=ANY=[@ANYBLOB="05000000040000000400000004"], 0x50) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000780)={0x11, 0x0, 0x0, 0x0, 0x7c, 0x0, 0x0, 0x1f00, 0x9, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0xa, 0x0, &(0x7f00000005c0)=[{0x4, 0x1, 0xc, 0xc}, {0x0, 0x5, 0xe, 0xb}, {0x4, 0x5, 0xc, 0x5}, {0x7, 0x1, 0xf, 0xb}, {0x5, 0xb6, 0x5, 0x8}, {0x4, 0x1, 0x3, 0x8}, {0x2, 0x5, 0x2, 0x4}, {0x2, 0x5, 0xa, 0x1}, {0x3, 0x1, 0xc, 0x6}, {0x2, 0x1, 0xa, 0x6}], 0x10, 0x7}, 0x94) r3 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='memory.events\x00', 0x275a, 0x0) write$cgroup_subtree(r3, &(0x7f0000000140)=ANY=[], 0x32600) mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x2000001, 0x12, r3, 0x0) bpf$MAP_UPDATE_ELEM(0x2, &(0x7f0000000500)={0xffffffffffffffff, 0x0, 0x0}, 0x20) recvmsg(r2, &(0x7f0000001500)={0x0, 0x0, 0x0}, 0x20) r4 = socket(0x10, 0x803, 0x0) sendmsg$IPVS_CMD_SET_INFO(r4, &(0x7f0000000b00)={0x0, 0x0, &(0x7f0000000ac0)={0x0, 0x14}}, 0x0) unshare(0x22020400) socket$rds(0x15, 0x5, 0x0) socket$inet(0x2, 0x1, 0x0) sendmsg$nl_route(r4, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000380)=ANY=[@ANYBLOB="3c0000001000850600"/20, @ANYRES32, @ANYBLOB="01000000000000001c0012000c000100626f6e64000000000c0002000800010006"], 0x3c}}, 0x0) sendmsg$TEAM_CMD_OPTIONS_SET(r0, &(0x7f0000000800)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x40}, 0xc, &(0x7f00000007c0)={&(0x7f0000000580)={0x21c, 0x0, 0x8, 0x70bd26, 0x25dfdbff, {}, [{{0x8}, {0x200, 0x2, 0x0, 0x1, [{0x3c, 0x1, @user_linkup={{{0x24}, {0x5}, {0x4}}, {0x8}}}, {0x40, 0x1, @lb_hash_stats={{{0x24}, {0x5}, {0x8, 0x4, 0xb}}, {0x8}}}, {0x40, 0x1, @lb_tx_hash_to_port_mapping={{{0x24}, {0x5}, {0x8}}, {0x8}}}, {0x44, 0x1, @name={{0x24}, {0x5}, {0x11, 0x4, 'activebackup\x00'}}}, {0x40, 0x1, @lb_hash_stats={{{0x24}, {0x5}, {0x8, 0x4, 0x2}}, {0x8}}}, {0x3c, 0x1, @bpf_hash_func={{0x24}, {0x5}, {0xc, 0x4, [{0x7, 0x6, 0x9, 0x103}]}}}, {0x40, 0x1, @priority={{{0x24}, {0x5}, {0x8, 0x4, 0x1}}, {0x8}}}, {0x40, 0x1, @queue_id={{{0x24}, {0x5}, {0x8, 0x4, 0xfffffffb}}, {0x8}}}]}}]}, 0x21c}, 0x1, 0x0, 0x0, 0x4000}, 0x24000800) 596.91879ms ago: executing program 0 (id=7972): r0 = socket$alg(0x26, 0x5, 0x0) bind$alg(r0, &(0x7f0000000080)={0x26, 'skcipher\x00', 0x0, 0x0, 'xchacha12\x00'}, 0x58) setsockopt$ALG_SET_KEY(r0, 0x117, 0x1, &(0x7f0000001280)="b7f2288d3aaea2bc0000def1260a00"/32, 0x20) r1 = accept(r0, 0x0, 0x0) syz_genetlink_get_family_id$wireguard(&(0x7f00000013c0), r1) sendmsg$TIPC_NL_BEARER_DISABLE(r1, &(0x7f00000003c0)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000500)={0x50, 0x0, 0x400, 0x70bd26, 0x25dfdbff, {}, [@TIPC_NLA_BEARER={0x3c, 0x1, 0x0, 0x1, [@TIPC_NLA_BEARER_UDP_OPTS={0x38, 0x4, {{0x20, 0x1, @in6={0xa, 0x4e20, 0xbd78, @dev={0xfe, 0x80, '\x00', 0x24}, 0x5}}, {0x14, 0x2, @in={0x2, 0x4e24, @initdev={0xac, 0x1e, 0x1, 0x0}}}}}]}]}, 0x50}, 0x1, 0x0, 0x0, 0x4004004}, 0x40) 569.953793ms ago: executing program 1 (id=7973): r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = socket(0x10, 0x3, 0x0) sendmsg$nl_generic(r1, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000001240)={&(0x7f0000000640)=ANY=[@ANYBLOB="140000001900010000000000002f00001c010900"], 0x14}}, 0x0) r2 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r2, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000140)=@newlink={0x3c, 0x10, 0x401, 0x0, 0x0, {}, [@IFLA_LINKINFO={0x1c, 0x12, 0x0, 0x1, @bridge={{0xb}, {0xc, 0x2, 0x0, 0x1, [@IFLA_BR_MCAST_LAST_MEMBER_CNT={0x8, 0x14}]}}}]}, 0x3c}}, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000000)) r3 = openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0) ioctl$TUNSETIFF(r3, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x7101}) r4 = socket$unix(0x1, 0x1, 0x0) r5 = socket$kcm(0x11, 0x3, 0x0) r6 = openat$tun(0xffffffffffffff9c, &(0x7f0000000400), 0x0, 0x0) close(r6) socket$nl_generic(0x10, 0x3, 0x10) ioctl$SIOCSIFHWADDR(r6, 0x8914, &(0x7f0000002280)={'syzkaller0\x00', @multicast}) ioctl$sock_SIOCGIFINDEX(r4, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$kcm(r5, &(0x7f00000000c0)={&(0x7f0000000380)=@xdp={0x2c, 0x7, r7, 0x3e}, 0x80, &(0x7f0000000080)=[{&(0x7f0000000180)='\'', 0x5e0}], 0x1}, 0x4) sendmsg$nl_route(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000180)={&(0x7f00000003c0)=@newlink={0x54, 0x10, 0x401, 0x0, 0x0, {}, [@IFLA_LINKINFO={0x34, 0x12, 0x0, 0x1, @ip6erspan={{0xe}, {0x20, 0x2, 0x0, 0x1, [@IFLA_GRE_ERSPAN_VER={0x5, 0x16, 0x1}, @IFLA_GRE_COLLECT_METADATA={0x4}, @IFLA_GRE_ERSPAN_INDEX={0x8}, @IFLA_GRE_OKEY={0x8}]}}}]}, 0x54}}, 0x0) 525.808312ms ago: executing program 3 (id=7974): recvmsg(0xffffffffffffffff, &(0x7f0000001840)={0x0, 0x0, &(0x7f0000001700)=[{&(0x7f00000002c0)=""/205, 0xcd}, {&(0x7f00000003c0)=""/181, 0xb5}, {&(0x7f0000000480)=""/132, 0x84}, {&(0x7f0000000540)=""/229, 0xe5}, {&(0x7f0000000640)=""/117, 0x75}, {&(0x7f00000006c0)=""/22, 0x16}, {&(0x7f0000000700)=""/4096, 0x1000}], 0x7, &(0x7f0000001780)=""/161, 0xa1}, 0x101) r0 = socket$nl_route(0x10, 0x3, 0x0) (async) r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000200)={0xc, 0xe, &(0x7f0000000380)=ANY=[@ANYRES32=0x0], &(0x7f0000000340)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x19}, 0x94) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000080)={r1, 0xa002a0, 0x10, 0x18, &(0x7f0000000000)="5ae02efc441a80536af0d1d905c723fa", &(0x7f0000000040)=""/24, 0x6414}, 0x28) (async) sendmsg$nl_route(r0, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000200)=ANY=[@ANYRES32=r1, @ANYRES32=0x0, @ANYBLOB='\x00\x00\x00\x00\x00\x00\x00\x00\b\x00\n\x00', @ANYRES32=0x0, @ANYBLOB="08001b"], 0x30}}, 0x0) (async) r2 = socket$nl_generic(0x10, 0x3, 0x10) r3 = syz_genetlink_get_family_id$team(&(0x7f00000044c0), 0xffffffffffffffff) ioctl$ifreq_SIOCGIFINDEX_team(r2, 0x8933, &(0x7f0000004700)={'team0\x00', 0x0}) r5 = socket$netlink(0x10, 0x3, 0x10) bind$netlink(r5, &(0x7f0000514ff4)={0x10, 0x0, 0x0, 0x2ffffffff}, 0xc) (async) setsockopt$netlink_NETLINK_BROADCAST_ERROR(r5, 0x10e, 0x4, 0x0, 0x0) (async) mmap(&(0x7f0000000000/0xff5000)=nil, 0xff5000, 0x0, 0x20000000ec071, 0xffffffffffffffff, 0x4000) r6 = socket$vsock_stream(0x28, 0x1, 0x0) setsockopt$SO_VM_SOCKETS_BUFFER_MIN_SIZE(r6, 0x28, 0x1, &(0x7f0000000100)=0xfffffffffffffffe, 0x112) (async) sendmsg$TEAM_CMD_OPTIONS_SET(r2, &(0x7f0000004bc0)={0x0, 0x0, &(0x7f0000004b80)={&(0x7f00000000c0)={0x64, r3, 0x40d, 0x70bd27, 0x25dfdbfe, {}, [{{0x8, 0x1, r4}, {0x48, 0x2, 0x0, 0x1, [{0x44, 0x1, @name={{0x24}, {0x5}, {0x11, 0x4, 'activebackup\x00'}}}]}}]}, 0x64}, 0x1, 0x0, 0x0, 0x4000431}, 0x4040084) 317.270257ms ago: executing program 3 (id=7975): r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000080), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(0xffffffffffffffff, 0x8933, &(0x7f00000000c0)={'wlan0\x00', 0x0}) sendmsg$NL80211_CMD_STOP_P2P_DEVICE(r0, &(0x7f00000001c0)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x40}, 0xc, &(0x7f0000000180)={&(0x7f0000000140)={0x28, r1, 0x2, 0x70bd29, 0x25dfdbff, {{}, {@val={0x8, 0x3, r2}, @val={0xc, 0x99, {0xfffffe01, 0x35}}}}, ["", "", "", ""]}, 0x28}, 0x1, 0x0, 0x0, 0x20000000}, 0x20040800) r3 = socket$nl_route(0x10, 0x3, 0x0) r4 = socket$nl_route(0x10, 0x3, 0x0) socketpair$nbd(0x1, 0x1, 0x0, &(0x7f0000000000)={0xffffffffffffffff}) ioctl$sock_SIOCOUTQ(r5, 0x5411, &(0x7f0000000a80)) ioctl$ifreq_SIOCGIFINDEX_batadv_hard(r4, 0x8933, &(0x7f00000003c0)={'batadv_slave_1\x00', 0x0}) sendmsg$nl_route(r3, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000340)=@delneigh={0x28, 0x1d, 0x9, 0x70bd27, 0x25dfdbfb, {0x7, 0x0, 0x0, r6, 0x4, 0x2, 0x8}, [@NDA_LLADDR={0xa, 0x2, @multicast}]}, 0x28}}, 0x40000) 0s ago: executing program 4 (id=7976): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) setsockopt$netlink_NETLINK_CAP_ACK(r0, 0x10e, 0xa, &(0x7f0000000080)=0x651, 0x4) sendmsg$NFT_BATCH(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000005c0)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a14000000060a0904000000000000000002000000140000001100010000000000000000000000000aabbf698041546f851f3cee0bbc7f824f6e2dc40348ca7dd2b82a8cda65256ae18b5b196e1fd0a95eabd841181a4687571804fd65dae7df4b872c04b1598a7b6fdafe69fbaef3904f1629e4116a42a2cd0effbc427c73e80223c63adb31789c41b802788d2c7d71b238b45d6a74310917d27fe440289a4f47cb053188e5807cf4c06e2d05971b229fffefae065b467753f2688ed379e37bb60dc55e7da25be4b3ced2573647d4bb5b1de83e95989d708ca89e018ce8d5e30f7b0dfb070a2a46863c98903c95aa0751def8816e8a5ddabc7fb66fd556b01430f7adb9fcce3be8dc09a4bfaaf7495bbee23ed19e2aec11d818797118ea41e7c4a500000000000000052e312264c176c16d0d829e4c46cbd6b09d60c1e409168337ed0aa2c3e7a34a48fdacc8b98a6377b08d0a6f16b40c1aad13734488df3154162810e59e2396eb253d83a213a99aab48f6f924516ee83ec7bcb01a42e45b8d21e18c9c0a2bcee487ad392cfde20545cbd754f1c2cfcb687cf36eb701f48b10ed10427aac6aaec05566dad25990bb2eb2b0a574a390ec389064201b"], 0x3c}}, 0x0) r1 = openat$tun(0xffffffffffffff9c, &(0x7f00000001c0), 0x8200, 0x0) ioctl$SIOCSIFHWADDR(r1, 0x8924, &(0x7f00000007c0)={'netpci0\x00', @multicast}) socketpair(0x1, 0xa, 0x3, &(0x7f0000000280)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$sock_ipv4_tunnel_SIOCGETTUNNEL(0xffffffffffffffff, 0x89f0, &(0x7f0000000480)={'sit0\x00', &(0x7f00000003c0)={'erspan0\x00', 0x0, 0x80, 0x7, 0x1, 0x1, {{0x1a, 0x4, 0x1, 0x3c, 0x68, 0x64, 0x0, 0xa6, 0x4, 0x0, @local, @loopback, {[@lsrr={0x83, 0x17, 0x47, [@multicast2, @initdev={0xac, 0x1e, 0x0, 0x0}, @loopback, @broadcast, @empty]}, @lsrr={0x83, 0x13, 0x33, [@empty, @multicast1, @multicast2, @broadcast]}, @timestamp_prespec={0x44, 0x14, 0x26, 0x3, 0x0, [{@remote, 0x800}, {@dev={0xac, 0x14, 0x14, 0x2e}, 0x6}]}, @timestamp_prespec={0x44, 0xc, 0x2f, 0x3, 0x4, [{@loopback, 0x5}]}, @timestamp={0x44, 0x8, 0xec, 0x0, 0x7, [0x7]}]}}}}}) sendto$packet(r2, &(0x7f00000002c0)="75c0d16c9331653b6549ce387049ab717e9fe419ef5a949609648bc5dc8ae32a27bfa353083fdf59bbd9c7b1af91f9a31d38cabcdf9981705e9bd59018afdf106c68e2391546968a29e5a95e7a69d0170dae0eef173e7d97ed0e38d02ee7e81d35384729c4cfc871592eb4719dec474760fe6a86390e6c876088120806136672a15d308b0f0d859113bef6ad42b38f3c12e86b7200f7ae82f88b59c65842b22d14c4654263ff1214ff15adf7e6946ebe11358b5cb9cc441c7048fec5bfb5e18acf62a9889976b9994e22bcc1300953afe6d7cecfe49031", 0xd7, 0x4000000, &(0x7f00000004c0)={0x11, 0x1b, r3, 0x1, 0xfb, 0x6, @multicast}, 0x14) ioctl$sock_ipv4_tunnel_SIOCGETTUNNEL(0xffffffffffffffff, 0x89f0, &(0x7f0000000180)={'syztnl2\x00', &(0x7f0000000100)={'sit0\x00', 0x0, 0x7, 0x1, 0x2, 0x5, {{0x12, 0x4, 0x2, 0x8, 0x48, 0x64, 0x0, 0x5, 0x6, 0x0, @initdev={0xac, 0x1e, 0x0, 0x0}, @multicast2, {[@timestamp={0x44, 0xc, 0x59, 0x0, 0x1, [0x100, 0xffff]}, @timestamp={0x44, 0x24, 0xb, 0x0, 0x0, [0x200, 0x4, 0x0, 0x8e, 0x5, 0xffff19fa, 0xfffffffb, 0x8000]}, @generic={0x1c, 0x2}]}}}}}) r4 = socket(0x10, 0x3, 0x0) r5 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r5, &(0x7f000000c2c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f00000003c0)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a28000000000a0101000000005e1affd5020000000900010073797a300000000008000240000000032c000000030a01030000e6ff00000000020000000900010073797a30000000000900030073797a320000000014000000110001"], 0x7c}}, 0x0) sendmsg$NFT_BATCH(r5, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000b00)={&(0x7f00000000c0)={{0x14, 0x10, 0x1, 0x0, 0x0, {0xa}}, [@NFT_MSG_NEWRULE={0x78, 0x6, 0xa, 0x401, 0x0, 0x0, {0x2}, [@NFTA_RULE_EXPRESSIONS={0x38, 0x4, 0x0, 0x1, [{0x34, 0x1, 0x0, 0x1, @match={{0xa}, @val={0x24, 0x2, 0x0, 0x1, [@NFTA_MATCH_NAME={0x8, 0x1, 'udp\x00'}, @NFTA_MATCH_INFO={0xe, 0x3, "7acc6338a90000b03bd9"}, @NFTA_MATCH_REV={0x8}]}}}]}, @NFTA_RULE_TABLE={0x9, 0x1, 'syz0\x00'}, @NFTA_RULE_CHAIN={0x9, 0x2, 'syz2\x00'}, @NFTA_RULE_COMPAT={0x14, 0x5, 0x0, 0x1, [@NFTA_RULE_COMPAT_PROTO_IPV4={0x8, 0x1, 0x1, 0x0, 0x355c32cef104cbbc}, @NFTA_RULE_COMPAT_FLAGS={0x8}]}]}], {0x14}}, 0xa0}, 0x1, 0x0, 0x0, 0x20000000}, 0x0) setsockopt$netlink_NETLINK_TX_RING(r4, 0x10e, 0xc, &(0x7f0000000040)={0x802}, 0x10) sendmsg$nl_generic(r4, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000004700)=ANY=[@ANYRESDEC], 0x44a0}, 0x1, 0x0, 0x0, 0x4}, 0x0) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000240)={&(0x7f00000000c0)={0x10, 0x0, 0x0, 0x200000}, 0xc, &(0x7f0000000200)={&(0x7f0000000500)=@gettaction={0xa4, 0x32, 0x4, 0x70bd28, 0x25dfdbfb, {}, [@action_dump_flags=@TCA_ROOT_FLAGS={0xc, 0x2, {0x1, 0x1}}, @action_dump_flags=@TCA_ROOT_FLAGS={0xc}, @action_dump_flags=@TCA_ROOT_TIME_DELTA={0x8, 0x4, 0x3}, @action_gd=@TCA_ACT_TAB={0x60, 0x1, [{0x10, 0x9, 0x0, 0x0, @TCA_ACT_KIND={0x9, 0x1, 'gact\x00'}}, {0xc, 0x15, 0x0, 0x0, @TCA_ACT_INDEX={0x8, 0x3, 0x8}}, {0xc, 0xa, 0x0, 0x0, @TCA_ACT_INDEX={0x8, 0x3, 0x2}}, {0xc, 0x15, 0x0, 0x0, @TCA_ACT_INDEX={0x8, 0x3, 0x7}}, {0xc, 0x2, 0x0, 0x0, @TCA_ACT_INDEX={0x8, 0x3, 0x5}}, {0x10, 0x2, 0x0, 0x0, @TCA_ACT_KIND={0xb, 0x1, 'police\x00'}}, {0xc, 0x9, 0x0, 0x0, @TCA_ACT_INDEX={0x8, 0x3, 0x7}}]}, @action_gd=@TCA_ACT_TAB={0x10, 0x1, [{0xc, 0x13, 0x0, 0x0, @TCA_ACT_KIND={0x8, 0x1, 'bpf\x00'}}]}]}, 0xa4}, 0x1, 0x0, 0x0, 0x20004000}, 0x44120) kernel console output (not intermixed with test programs): fter parsing attributes in process `syz.1.6217'. [ 565.314865][T27392] netlink: 'syz.3.6220': attribute type 1 has an invalid length. [ 565.323788][T27392] netlink: 96 bytes leftover after parsing attributes in process `syz.3.6220'. [ 565.334035][ T5143] Bluetooth: hci3: command tx timeout [ 565.341241][T27392] netlink: 'syz.3.6220': attribute type 1 has an invalid length. [ 565.509377][T25842] Bluetooth: hci2: unexpected cc 0x0c03 length: 249 > 1 [ 565.532395][T27392] syzkaller1: entered promiscuous mode [ 565.537952][T27392] syzkaller1: entered allmulticast mode [ 565.544679][T25842] Bluetooth: hci2: unexpected cc 0x1003 length: 249 > 9 [ 565.557354][T25842] Bluetooth: hci2: unexpected cc 0x1001 length: 249 > 9 [ 565.581162][T25842] Bluetooth: hci2: unexpected cc 0x0c23 length: 249 > 4 [ 565.588992][T25842] Bluetooth: hci2: unexpected cc 0x0c38 length: 249 > 2 [ 565.845052][T27416] FAULT_INJECTION: forcing a failure. [ 565.845052][T27416] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 565.859620][T27416] CPU: 0 UID: 0 PID: 27416 Comm: syz.1.6226 Not tainted syzkaller #0 PREEMPT(full) [ 565.859648][T27416] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 03/18/2026 [ 565.859661][T27416] Call Trace: [ 565.859671][T27416] [ 565.859680][T27416] dump_stack_lvl+0xe8/0x150 [ 565.859715][T27416] should_fail_ex+0x412/0x560 [ 565.859752][T27416] _copy_from_iter+0x1d3/0x1670 [ 565.859804][T27416] ? __pfx__copy_from_iter+0x10/0x10 [ 565.859838][T27416] ? alloc_pages_noprof+0xbd/0x190 [ 565.859869][T27416] ? skb_page_frag_refill+0x199/0x310 [ 565.859905][T27416] kcm_sendmsg+0xe0c/0x2b60 [ 565.859975][T27416] ? __pfx_kcm_sendmsg+0x10/0x10 [ 565.860006][T27416] ? aa_sock_msg_perm+0xf1/0x1b0 [ 565.860040][T27416] ? bpf_lsm_socket_sendmsg+0x9/0x20 [ 565.860069][T27416] ____sys_sendmsg+0x972/0x9f0 [ 565.860104][T27416] ? __pfx_____sys_sendmsg+0x10/0x10 [ 565.860138][T27416] ? import_iovec+0x73/0xa0 [ 565.860165][T27416] ___sys_sendmsg+0x2a5/0x360 [ 565.860196][T27416] ? __pfx____sys_sendmsg+0x10/0x10 [ 565.860283][T27416] ? __fget_files+0x2a/0x420 [ 565.860316][T27416] ? __fget_files+0x3a0/0x420 [ 565.860361][T27416] __x64_sys_sendmsg+0x1bd/0x2a0 [ 565.860398][T27416] ? __pfx___x64_sys_sendmsg+0x10/0x10 [ 565.860437][T27416] ? __pfx_ksys_write+0x10/0x10 [ 565.860476][T27416] do_syscall_64+0x14d/0xf80 [ 565.860502][T27416] ? trace_irq_disable+0x3b/0x150 [ 565.860522][T27416] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 565.860545][T27416] ? clear_bhb_loop+0x40/0x90 [ 565.860572][T27416] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 565.860594][T27416] RIP: 0033:0x7f1dd919c819 [ 565.860615][T27416] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 565.860635][T27416] RSP: 002b:00007f1dda05d028 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 565.860659][T27416] RAX: ffffffffffffffda RBX: 00007f1dd9415fa0 RCX: 00007f1dd919c819 [ 565.860676][T27416] RDX: 0000000000000000 RSI: 0000200000002080 RDI: 0000000000000004 [ 565.860690][T27416] RBP: 00007f1dda05d090 R08: 0000000000000000 R09: 0000000000000000 [ 565.860704][T27416] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000002 [ 565.860718][T27416] R13: 00007f1dd9416038 R14: 00007f1dd9415fa0 R15: 00007ffe97c52108 [ 565.860756][T27416] [ 565.874316][T27412] netlink: 'syz.0.6224': attribute type 4 has an invalid length. [ 566.185507][T27399] lo speed is unknown, defaulting to 1000 [ 566.382372][T27426] : entered promiscuous mode [ 566.397153][T27426] netlink: 60 bytes leftover after parsing attributes in process `syz.1.6229'. [ 566.444944][T27429] netlink: 'syz.3.6231': attribute type 4 has an invalid length. [ 566.460729][T27426] netlink: 60 bytes leftover after parsing attributes in process `syz.1.6229'. [ 566.475194][T27429] netlink: 152 bytes leftover after parsing attributes in process `syz.3.6231'. [ 566.533464][T27429] .`: renamed from bond0 (while UP) [ 566.593010][T22961] netdevsim netdevsim2 eth3 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 566.620221][T22961] netdevsim netdevsim2 eth3 (unregistering): unset [1, 0] type 2 family 0 port 256 - 0 [ 566.661324][T22961] netdevsim netdevsim2 eth3 (unregistering): unset [1, 1] type 2 family 0 port 6081 - 0 [ 566.797881][T27450] netlink: 'syz.0.6235': attribute type 9 has an invalid length. [ 566.872008][T22961] netdevsim netdevsim2 eth2 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 566.915005][T22961] netdevsim netdevsim2 eth2 (unregistering): unset [1, 0] type 2 family 0 port 256 - 0 [ 566.938837][T22961] netdevsim netdevsim2 eth2 (unregistering): unset [1, 1] type 2 family 0 port 6081 - 0 [ 567.034449][T22961] netdevsim netdevsim2 eth1 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 567.046271][T22961] netdevsim netdevsim2 eth1 (unregistering): unset [1, 0] type 2 family 0 port 256 - 0 [ 567.058990][T22961] netdevsim netdevsim2 eth1 (unregistering): unset [1, 1] type 2 family 0 port 6081 - 0 [ 567.108938][T27463] syzkaller0: entered promiscuous mode [ 567.116880][T27463] syzkaller0: entered allmulticast mode [ 567.192904][T22961] netdevsim netdevsim2 eth0 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 567.208792][T22961] netdevsim netdevsim2 eth0 (unregistering): unset [1, 0] type 2 family 0 port 256 - 0 [ 567.234041][T22961] netdevsim netdevsim2 eth0 (unregistering): unset [1, 1] type 2 family 0 port 6081 - 0 [ 567.436002][T27443] infiniband syz1: set down [ 567.487964][T27399] chnl_net:caif_netlink_parms(): no params data found [ 567.497222][T27443] infiniband syz1: added ipvlan1 [ 567.593878][T27443] RDS/IB: syz1: added [ 567.601051][T27443] smc: adding ib device syz1 with port count 1 [ 567.607498][T27443] smc: ib device syz1 port 1 has no pnetid [ 567.640549][T25842] Bluetooth: hci2: command tx timeout [ 567.677516][T27479] lo speed is unknown, defaulting to 1000 [ 567.788126][T27491] netlink: 'syz.0.6245': attribute type 2 has an invalid length. [ 567.958050][T27497] l2tp_ppp: sess 2/0: no socket in recv [ 567.984473][T27399] bridge0: port 1(bridge_slave_0) entered blocking state [ 568.000168][T27399] bridge0: port 1(bridge_slave_0) entered disabled state [ 568.010404][T27399] bridge_slave_0: entered allmulticast mode [ 568.018232][T27399] bridge_slave_0: entered promiscuous mode [ 568.081586][T27399] bridge0: port 2(bridge_slave_1) entered blocking state [ 568.088773][T27399] bridge0: port 2(bridge_slave_1) entered disabled state [ 568.108410][T27399] bridge_slave_1: entered allmulticast mode [ 568.131297][T27399] bridge_slave_1: entered promiscuous mode [ 568.140418][ C0] lec0: NETDEV WATCHDOG: CPU: 0: transmit queue 0 timed out 5010 ms [ 568.148518][ C0] lec:lec_tx_timeout: lec0 [ 568.153836][ C0] lec:lec_start_xmit: lec0:No lecd attached [ 568.198856][T27501] ipt_ECN: cannot use operation on non-tcp rule [ 568.485984][T22961] bond6 (unregistering): (slave ip6gre3): Releasing backup interface [ 568.887153][T22961] bond9 (unregistering): (slave bridge5): Releasing active interface [ 568.956212][T22961] bond0 (unregistering): Released all slaves [ 568.968838][T22961] bond1 (unregistering): (slave veth3): Releasing active interface [ 568.979113][T22961] bond1 (unregistering): Released all slaves [ 568.996961][T22961] bond2 (unregistering): Released all slaves [ 569.014765][T22961] bond3 (unregistering): Released all slaves [ 569.039025][T22961] bond4 (unregistering): Released all slaves [ 569.055457][T22961] bond5 (unregistering): Released all slaves [ 569.076159][T22961] bond6 (unregistering): Released all slaves [ 569.093601][T22961] bond7 (unregistering): Released all slaves [ 569.108677][T22961] bond8 (unregistering): Released all slaves [ 569.127441][T22961] bond9 (unregistering): Released all slaves [ 569.251708][T27513] syzkaller0: entered promiscuous mode [ 569.259068][T27513] syzkaller0: entered allmulticast mode [ 569.306033][T27399] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 569.723123][T25842] Bluetooth: hci2: command tx timeout [ 570.988747][T22961] tipc: Disabling bearer [ 570.995149][T22961] tipc: Left network mode [ 571.002373][T27399] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 571.076865][T27537] __nla_validate_parse: 10 callbacks suppressed [ 571.076886][T27537] netlink: 92 bytes leftover after parsing attributes in process `syz.0.6255'. [ 571.228659][T27399] team0: Port device team_slave_0 added [ 571.257024][T27399] team0: Port device team_slave_1 added [ 571.373177][T27399] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 571.394371][T27542] netlink: 12 bytes leftover after parsing attributes in process `syz.0.6257'. [ 571.409930][T27399] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 571.443551][T27542] l2tp_ppp: sess 2/0: no socket in recv [ 571.478212][T27399] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 571.544814][T27544] netlink: 'syz.1.6258': attribute type 1 has an invalid length. [ 571.562526][T27544] netlink: 224 bytes leftover after parsing attributes in process `syz.1.6258'. [ 571.624372][T27399] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 571.644813][T27399] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 571.672820][T27399] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 571.800909][T25842] Bluetooth: hci2: command tx timeout [ 572.094818][T27399] hsr_slave_0: entered promiscuous mode [ 572.131811][T27399] hsr_slave_1: entered promiscuous mode [ 572.160886][T27399] debugfs: 'hsr0' already exists in 'hsr' [ 572.166779][T27399] Cannot create hsr debugfs directory [ 572.301339][T27574] netlink: 24 bytes leftover after parsing attributes in process `syz.0.6264'. [ 572.582233][T27586] netlink: 24 bytes leftover after parsing attributes in process `syz.0.6267'. [ 572.620511][T27586] netlink: 4 bytes leftover after parsing attributes in process `syz.0.6267'. [ 572.655184][T27588] netlink: 12 bytes leftover after parsing attributes in process `syz.1.6268'. [ 572.668902][T27588] l2tp_ppp: sess 2/0: no socket in recv [ 572.800738][T27591] openvswitch: netlink: Unexpected mask (mask=240040, allowed=10048) [ 573.007078][T27600] netlink: 12 bytes leftover after parsing attributes in process `syz.0.6272'. [ 573.035031][T27600] netlink: 12 bytes leftover after parsing attributes in process `syz.0.6272'. [ 573.044469][T22044] netdevsim netdevsim0 netdevsim0: set [0, 1] type 1 family 0 port 8472 - 0 [ 573.056933][T22044] netdevsim netdevsim0 netdevsim1: set [0, 1] type 1 family 0 port 8472 - 0 [ 573.077126][T22044] netdevsim netdevsim0 netdevsim2: set [0, 1] type 1 family 0 port 8472 - 0 [ 573.112256][T22044] netdevsim netdevsim0 netdevsim3: set [0, 1] type 1 family 0 port 8472 - 0 [ 573.170783][ C0] lec0: NETDEV WATCHDOG: CPU: 0: transmit queue 0 timed out 5010 ms [ 573.178935][ C0] lec:lec_tx_timeout: lec0 [ 573.184335][ C0] lec:lec_start_xmit: lec0:No lecd attached [ 573.433587][T27399] netdevsim netdevsim2 netdevsim0: renamed from eth0 [ 573.475842][T27399] netdevsim netdevsim2 netdevsim1: renamed from eth1 [ 573.493662][T27616] netlink: 16 bytes leftover after parsing attributes in process `syz.0.6276'. [ 573.526410][T27399] netdevsim netdevsim2 netdevsim2: renamed from eth2 [ 573.547435][T27399] netdevsim netdevsim2 netdevsim3: renamed from eth3 [ 573.831645][T27399] 8021q: adding VLAN 0 to HW filter on device bond0 [ 573.881260][T25842] Bluetooth: hci2: command tx timeout [ 573.903497][T27399] 8021q: adding VLAN 0 to HW filter on device team0 [ 573.921847][T11450] bridge0: port 1(bridge_slave_0) entered blocking state [ 573.929124][T11450] bridge0: port 1(bridge_slave_0) entered forwarding state [ 573.983731][T11450] bridge0: port 2(bridge_slave_1) entered blocking state [ 573.990975][T11450] bridge0: port 2(bridge_slave_1) entered forwarding state [ 574.144936][T27644] netlink: 'syz.0.6280': attribute type 4 has an invalid length. [ 574.286529][T27648] sctp: [Deprecated]: syz.1.6282 (pid 27648) Use of int in max_burst socket option deprecated. [ 574.286529][T27648] Use struct sctp_assoc_value instead [ 574.339234][T27648] Bluetooth: MGMT ver 1.23 [ 574.408032][T27654] sctp: [Deprecated]: syz.1.6282 (pid 27654) Use of int in max_burst socket option deprecated. [ 574.408032][T27654] Use struct sctp_assoc_value instead [ 574.776505][T27667] netlink: 'syz.1.6285': attribute type 11 has an invalid length. [ 574.831201][T27399] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 574.984237][T27399] veth0_vlan: entered promiscuous mode [ 575.023489][T27399] veth1_vlan: entered promiscuous mode [ 575.114613][T27399] veth0_macvtap: entered promiscuous mode [ 575.145669][T27399] veth1_macvtap: entered promiscuous mode [ 575.202172][T27399] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 575.236119][T27399] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 575.293600][T22959] netdevsim netdevsim2 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 575.352977][ T12] netdevsim netdevsim2 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 575.384703][ T12] netdevsim netdevsim2 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 575.416379][ T12] netdevsim netdevsim2 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 575.633016][ T36] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 575.671587][ T36] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 575.813813][T22044] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 575.842572][T22044] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 575.964201][T27705] netlink: 'syz.0.6296': attribute type 29 has an invalid length. [ 576.155663][T27714] __nla_validate_parse: 9 callbacks suppressed [ 576.155684][T27714] netlink: 16 bytes leftover after parsing attributes in process `syz.1.6297'. [ 576.182258][T27718] netlink: 24 bytes leftover after parsing attributes in process `syz.0.6298'. [ 576.404636][T25849] udevd[25849]: setting owner of /dev/rfcomm68 to uid=0, gid=18 failed: No such file or directory [ 576.699528][T27734] openvswitch: netlink: Flow set message rejected, Key attribute missing. [ 577.417067][T27754] netlink: 4 bytes leftover after parsing attributes in process `syz.2.6307'. [ 577.433277][T27756] netlink: 112 bytes leftover after parsing attributes in process `syz.1.6308'. [ 577.461016][T27754] veth0_macvtap: left promiscuous mode [ 577.543667][T27762] netlink: 16 bytes leftover after parsing attributes in process `syz.1.6309'. [ 577.749656][T27718] lo speed is unknown, defaulting to 1000 [ 577.838682][T27772] openvswitch: netlink: Multiple metadata blocks provided [ 577.918309][T27776] netlink: 'syz.4.6315': attribute type 4 has an invalid length. [ 578.148071][T27782] netlink: 'syz.1.6317': attribute type 1 has an invalid length. [ 578.177525][T27782] netlink: 96 bytes leftover after parsing attributes in process `syz.1.6317'. [ 578.216411][T27782] netlink: 1 bytes leftover after parsing attributes in process `syz.1.6317'. [ 578.239156][T27782] netlink: 'syz.1.6317': attribute type 1 has an invalid length. [ 578.248546][T27782] netlink: 'syz.1.6317': attribute type 8 has an invalid length. [ 578.257213][T27782] netlink: 606 bytes leftover after parsing attributes in process `syz.1.6317'. [ 578.558943][T22961] hsr_slave_0: left promiscuous mode [ 578.578449][T22961] veth1_macvtap: left promiscuous mode [ 578.592122][T22961] veth0_macvtap: left promiscuous mode [ 578.999806][ C0] lec0: NETDEV WATCHDOG: CPU: 0: transmit queue 0 timed out 5810 ms [ 579.007953][ C0] lec:lec_tx_timeout: lec0 [ 579.014190][ C0] lec:lec_start_xmit: lec0:No lecd attached [ 579.396228][T27817] netlink: 12 bytes leftover after parsing attributes in process `syz.1.6324'. [ 579.413056][T27818] netlink: 12 bytes leftover after parsing attributes in process `syz.1.6324'. [ 579.891073][T27833] netdevsim netdevsim1 netdevsim0: entered promiscuous mode [ 579.899479][T27837] netlink: 'syz.2.6331': attribute type 1 has an invalid length. [ 579.915428][T27837] netlink: 'syz.2.6331': attribute type 11 has an invalid length. [ 579.957845][T22961] IPVS: stop unused estimator thread 0... [ 579.976103][T27836] TC_ACT_REPEAT abuse ? [ 580.469043][T27854] debugfs: 'KŠŸu ™crµ±K:‘£ÿˆÌ¥ÝBßÝ£| “¼ÚÞlS·œ-!' already exists in 'ieee80211' [ 580.478954][T27871] netlink: 'syz.1.6338': attribute type 1 has an invalid length. [ 580.479167][T27871] netlink: 'syz.1.6338': attribute type 1 has an invalid length. [ 580.600654][ T5898] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 580.783961][T27882] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 580.794246][T27882] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 580.804931][T27882] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 580.834146][T27882] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 580.852598][T27882] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 580.933256][T27881] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 580.944697][T27881] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 581.087134][T27904] IPVS: set_ctl: invalid protocol: 41 172.20.20.187:20001 [ 581.108071][T27904] xt_TCPMSS: Only works on TCP SYN packets [ 581.385986][T27922] __nla_validate_parse: 7 callbacks suppressed [ 581.386007][T27922] netlink: 8 bytes leftover after parsing attributes in process `syz.2.6356'. [ 582.083403][T27946] netlink: 8 bytes leftover after parsing attributes in process `syz.3.6361'. [ 582.103890][T27949] bond1: option active_slave: mode dependency failed, not supported in mode balance-rr(0) [ 582.117311][T27949] bond1 (unregistering): Released all slaves [ 582.152228][T27946] ip6gre1: entered promiscuous mode [ 582.281896][T27955] netlink: 24 bytes leftover after parsing attributes in process `syz.0.6363'. [ 582.518322][T27953] delete_channel: no stack [ 582.692409][T27972] syzkaller0: entered promiscuous mode [ 582.709321][T27972] syzkaller0: entered allmulticast mode [ 582.786753][T27976] tipc: Started in network mode [ 582.802033][T27976] tipc: Node identity f6cc3ff380b8, cluster identity 4711 [ 582.823789][T27976] tipc: Enabled bearer , priority 0 [ 582.846359][T16574] net_ratelimit: 5 callbacks suppressed [ 582.846379][T16574] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 582.897804][T27975] syzkaller0: entered promiscuous mode [ 582.903714][T27975] syzkaller0: entered allmulticast mode [ 583.004540][T27976] syzkaller0: entered promiscuous mode [ 583.010209][T27976] syzkaller0: entered allmulticast mode [ 583.018757][T27976] tipc: Resetting bearer [ 583.046187][T27974] tipc: Resetting bearer [ 583.140089][T27992] netlink: 8 bytes leftover after parsing attributes in process `syz.4.6375'. [ 583.724531][ T5898] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 584.032454][ C0] lec0: NETDEV WATCHDOG: CPU: 0: transmit queue 0 timed out 5010 ms [ 584.040580][ C0] lec:lec_tx_timeout: lec0 [ 584.046106][ C0] lec:lec_start_xmit: lec0:No lecd attached [ 584.704961][T27974] tipc: Disabling bearer [ 584.716062][T28000] workqueue: Failed to create a rescuer kthread for wq "bond2": -EINTR [ 584.762315][ T5946] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 584.875590][T28007] netlink: 68 bytes leftover after parsing attributes in process `syz.4.6379'. [ 584.932656][T28007] ieee802154 phy1 wpan1: encryption failed: -22 [ 585.804169][T15368] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 585.884487][T16574] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 585.947724][ T5192] udevd[5192]: worker [20313] /devices/virtual/block/nbd2 timeout; kill it [ 585.956965][ T5192] udevd[5192]: seq 24320 '/devices/virtual/block/nbd2' killed [ 586.043948][ T5946] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 586.055262][ T25] block nbd2: Possible stuck request ffff8880273e8000: control (read@0,1024B). Runtime 180 seconds [ 586.066560][ T25] block nbd2: Possible stuck request ffff8880273e8200: control (read@1024,1024B). Runtime 180 seconds [ 586.077909][ T25] block nbd2: Possible stuck request ffff8880273e8400: control (read@2048,1024B). Runtime 180 seconds [ 586.091629][ T25] block nbd2: Possible stuck request ffff8880273e8600: control (read@3072,1024B). Runtime 180 seconds [ 586.684593][ T5912] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 586.697553][ T5898] tipc: Node number set to 1987330035 [ 586.858323][ T5898] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 586.883657][T28029] pimreg: entered allmulticast mode [ 587.207002][T28059] netlink: 56 bytes leftover after parsing attributes in process `syz.2.6395'. [ 587.234138][T28045] ±ÿ: renamed from lo (while UP) [ 587.387538][T28067] netlink: 'syz.2.6397': attribute type 1 has an invalid length. [ 587.427988][T28068] netlink: 'syz.0.6399': attribute type 17 has an invalid length. [ 587.437223][T28068] netlink: 4 bytes leftover after parsing attributes in process `syz.0.6399'. [ 587.448303][T28068] netlink: 28 bytes leftover after parsing attributes in process `syz.0.6399'. [ 587.468744][T28072] netlink: 56 bytes leftover after parsing attributes in process `syz.2.6397'. [ 587.473411][T28067] 8021q: adding VLAN 0 to HW filter on device bond1 [ 587.526840][T28071] bond2 (unregistering): Released all slaves [ 587.791073][T28088] netlink: 'syz.4.6404': attribute type 9 has an invalid length. [ 587.880215][T15368] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 587.960609][ C0] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 588.013978][T28099] netlink: 'syz.4.6408': attribute type 1 has an invalid length. [ 588.204093][ T5898] IPVS: starting estimator thread 0... [ 588.300826][T28115] IPVS: using max 28 ests per chain, 67200 per kthread [ 588.606008][ T5884] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 588.646418][T28137] netlink: 28 bytes leftover after parsing attributes in process `syz.1.6417'. [ 588.766769][T28138] netlink: 96 bytes leftover after parsing attributes in process `syz.1.6417'. [ 588.796994][T28138] 8021q: VLANs not supported on ip6gre0 [ 588.923440][ T5898] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 589.033662][T28155] netlink: 8 bytes leftover after parsing attributes in process `syz.2.6423'. [ 589.060431][ C0] lec0: NETDEV WATCHDOG: CPU: 0: transmit queue 0 timed out 5010 ms [ 589.068538][ C0] lec:lec_tx_timeout: lec0 [ 589.073717][ C0] lec:lec_start_xmit: lec0:No lecd attached [ 589.126513][T28157] netlink: 24 bytes leftover after parsing attributes in process `syz.3.6424'. [ 589.137553][T28157] netlink: 8 bytes leftover after parsing attributes in process `syz.3.6424'. [ 589.162625][T28157] netlink: 12 bytes leftover after parsing attributes in process `syz.3.6424'. [ 589.203349][T28159] mac80211_hwsim hwsim99 wlan0: entered promiscuous mode [ 589.244211][T16574] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 589.262032][T28159] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 589.285245][T28159] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 589.301704][T28161] tipc: Enabled bearer , priority 0 [ 589.310315][T28159] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 589.338906][T28164] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 589.358973][T28164] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 589.412619][T28161] syzkaller0: entered promiscuous mode [ 589.418237][T28161] syzkaller0: entered allmulticast mode [ 589.425434][T28161] tipc: Resetting bearer [ 589.566926][T28160] tipc: Resetting bearer [ 589.676966][T28177] ip6t_REJECT: TCP_RESET illegal for non-tcp [ 590.043937][T28186] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 591.340583][T28160] tipc: Disabling bearer [ 591.353304][T28175] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 591.362282][T28175] batadv_slave_0: entered promiscuous mode [ 591.418685][T28189] netlink: 'syz.2.6434': attribute type 12 has an invalid length. [ 591.437426][T28189] netlink: 'syz.2.6434': attribute type 29 has an invalid length. [ 591.461572][T28193] bridge0: port 3(gretap0) entered blocking state [ 591.477237][T28193] bridge0: port 3(gretap0) entered disabled state [ 591.494684][T28193] gretap0: entered allmulticast mode [ 591.516740][T28193] gretap0: entered promiscuous mode [ 591.534633][T28193] bridge0: port 3(gretap0) entered blocking state [ 591.541403][T28193] bridge0: port 3(gretap0) entered forwarding state [ 591.690445][T15368] IPVS: starting estimator thread 0... [ 591.711737][T28209] lo speed is unknown, defaulting to 1000 [ 591.874017][T28213] IPVS: using max 27 ests per chain, 64800 per kthread [ 592.142372][T28185] infiniband syz2: set active [ 592.148596][T28185] infiniband syz2: added veth0_macvtap [ 592.156984][T28185] workqueue: Failed to create a rescuer kthread for wq "ib_mad1": -EINTR [ 592.163523][T28185] infiniband syz2: Couldn't open port 1 [ 592.213422][T28185] RDS/IB: syz2: added [ 592.236693][T28185] smc: adding ib device syz2 with port count 1 [ 592.244271][T28185] smc: ib device syz2 port 1 has no pnetid [ 593.083341][ T5946] net_ratelimit: 237 callbacks suppressed [ 593.083365][ T5946] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 594.080821][ C0] lec0: NETDEV WATCHDOG: CPU: 0: transmit queue 0 timed out 5010 ms [ 594.088987][ C0] lec:lec_tx_timeout: lec0 [ 594.094306][ C0] lec:lec_start_xmit: lec0:No lecd attached [ 594.120237][ T5946] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 594.680735][T16574] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 595.160290][ T5898] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 596.202161][ T5898] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 597.240155][T15368] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 597.722566][ T5912] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 598.280192][T15368] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 598.847507][T16574] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 598.855704][T16574] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 599.110350][ C0] lec0: NETDEV WATCHDOG: CPU: 0: transmit queue 0 timed out 5010 ms [ 599.118486][ C0] lec:lec_tx_timeout: lec0 [ 599.123731][ C0] lec:lec_start_xmit: lec0:No lecd attached [ 599.320921][T15368] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 600.360826][ T5946] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 601.403224][T16574] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 601.411491][T16574] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 601.881556][T16574] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 602.440702][ T5946] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 602.690191][ C0] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 603.480417][ T5946] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 604.129903][ C0] lec0: NETDEV WATCHDOG: CPU: 0: transmit queue 0 timed out 5010 ms [ 604.137948][ C0] lec:lec_tx_timeout: lec0 [ 604.143235][ C0] lec:lec_start_xmit: lec0:No lecd attached [ 604.520883][ T5946] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 604.922412][T11433] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 605.570047][ T5946] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 605.884682][T11433] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 606.600796][ T5946] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 607.640128][ T5944] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 607.801789][T16574] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 608.688978][ T5944] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 608.925217][ T5884] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 609.150412][ C0] lec0: NETDEV WATCHDOG: CPU: 0: transmit queue 0 timed out 5010 ms [ 609.158516][ C0] lec:lec_tx_timeout: lec0 [ 609.724384][ T5944] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 610.760572][ T5944] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 611.802343][ T5944] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 611.961847][ T5912] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 612.840937][ T5944] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 613.710878][T28240] netlink: 'syz.1.6444': attribute type 10 has an invalid length. [ 613.725695][T28241] Cannot find map_set index 65533 as target [ 613.734079][T28240] hsr0: A HSR master's MTU cannot be greater than the smallest MTU of its slaves minus the HSR Tag length (6 octets). [ 613.748419][T28243] __nla_validate_parse: 3 callbacks suppressed [ 613.748439][T28243] netlink: 24 bytes leftover after parsing attributes in process `syz.4.6447'. [ 613.828694][T28241] 8021q: adding VLAN 0 to HW filter on device bond0 [ 613.880746][ T5946] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 613.946589][T28254] syzkaller0: entered promiscuous mode [ 613.952605][T28254] syzkaller0: entered allmulticast mode [ 613.966729][T28252] tipc: Enabled bearer , priority 0 [ 614.084568][T28252] syzkaller0: entered promiscuous mode [ 614.099327][T28252] syzkaller0: entered allmulticast mode [ 614.125485][T28265] workqueue: Failed to create a rescuer kthread for wq "nfc2_nci_cmd_wq": -EINTR [ 614.143506][T28252] tipc: Resetting bearer [ 614.277639][T28251] tipc: Resetting bearer [ 614.398994][T28282] netlink: 4 bytes leftover after parsing attributes in process `syz.1.6456'. [ 614.462420][T28286] netlink: 44 bytes leftover after parsing attributes in process `syz.0.6458'. [ 614.472844][T28288] netlink: 4 bytes leftover after parsing attributes in process `syz.1.6456'. [ 614.492153][T28286] netlink: 43 bytes leftover after parsing attributes in process `syz.0.6458'. [ 614.502008][T28286] netlink: 'syz.0.6458': attribute type 5 has an invalid length. [ 614.510294][T28286] netlink: 43 bytes leftover after parsing attributes in process `syz.0.6458'. [ 614.923157][ T5944] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 615.004233][ T5912] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 615.962472][T15368] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 616.093072][T28251] tipc: Disabling bearer [ 616.123069][ T5944] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 616.131590][ T25] block nbd2: Possible stuck request ffff8880273e8000: control (read@0,1024B). Runtime 210 seconds [ 616.142695][ T25] block nbd2: Possible stuck request ffff8880273e8200: control (read@1024,1024B). Runtime 210 seconds [ 616.145188][T28288] netlink: 4 bytes leftover after parsing attributes in process `syz.1.6456'. [ 616.160608][ T25] block nbd2: Possible stuck request ffff8880273e8400: control (read@2048,1024B). Runtime 210 seconds [ 616.175248][ T25] block nbd2: Possible stuck request ffff8880273e8600: control (read@3072,1024B). Runtime 210 seconds [ 616.191767][ T36] netdevsim netdevsim1 netdevsim0: set [0, 0] type 1 family 0 port 8472 - 0 [ 616.254546][ T36] netdevsim netdevsim1 netdevsim1: set [0, 0] type 1 family 0 port 8472 - 0 [ 616.281147][ T36] netdevsim netdevsim1 netdevsim2: set [0, 0] type 1 family 0 port 8472 - 0 [ 616.291040][T22963] netdevsim netdevsim1 netdevsim3: set [0, 0] type 1 family 0 port 8472 - 0 [ 616.409558][T28298] netlink: 8 bytes leftover after parsing attributes in process `syz.2.6460'. [ 616.831991][T28332] netlink: 24 bytes leftover after parsing attributes in process `syz.1.6472'. [ 616.843794][T28330] netlink: 24 bytes leftover after parsing attributes in process `syz.1.6472'. [ 616.916092][T28338] batadv_slave_0: entered promiscuous mode [ 616.984701][T28336] batadv_slave_0: left promiscuous mode [ 617.012412][ T5944] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 617.401846][ T5912] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 617.702029][T28384] netlink: 'syz.0.6486': attribute type 1 has an invalid length. [ 617.711143][T28385] netlink: 'syz.0.6486': attribute type 1 has an invalid length. [ 617.827021][T28385] bond1: entered promiscuous mode [ 617.861438][T28385] 8021q: adding VLAN 0 to HW filter on device bond1 [ 617.923474][T28395] vlan2: entered allmulticast mode [ 617.981503][T28403] netlink: 'syz.3.6490': attribute type 2 has an invalid length. [ 618.050374][T15368] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 618.841724][T28444] vlan2: entered promiscuous mode [ 618.883259][T28444] bridge0: entered promiscuous mode [ 619.081207][ T5944] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 619.143921][T28463] syzkaller1: entered promiscuous mode [ 619.149474][T28463] syzkaller1: entered allmulticast mode [ 619.161578][ T5912] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 619.215087][T28463] __nla_validate_parse: 8 callbacks suppressed [ 619.215110][T28463] netlink: 20 bytes leftover after parsing attributes in process `syz.0.6511'. [ 619.246364][T28470] netlink: 8 bytes leftover after parsing attributes in process `syz.2.6514'. [ 619.736512][T28476] workqueue: Failed to create a rescuer kthread for wq "nfc2_nci_cmd_wq": -EINTR [ 619.740995][T28482] Unsupported ieee802154 address type: 0 [ 619.781540][T28484] netlink: 128 bytes leftover after parsing attributes in process `syz.4.6518'. [ 619.810245][T28484] netlink: 128 bytes leftover after parsing attributes in process `syz.4.6518'. [ 620.054602][T28498] netdevsim netdevsim2 netdevsim2: entered allmulticast mode [ 620.120383][T15368] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 620.138861][T28497] netdevsim netdevsim2 netdevsim2: left allmulticast mode [ 621.167558][ T5946] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 621.417259][T28546] netlink: 20 bytes leftover after parsing attributes in process `syz.1.6537'. [ 621.488139][T28545] netlink: 20 bytes leftover after parsing attributes in process `syz.1.6537'. [ 621.518968][T28556] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 621.558814][T28558] netlink: 4 bytes leftover after parsing attributes in process `syz.4.6538'. [ 621.888639][T28573] tipc: Enabling of bearer rejected, failed to enable media [ 622.023669][T28578] bond1: (slave lo): enslaved VLAN challenged slave. Adding VLANs will be blocked as long as it is part of bond. [ 622.044002][T28578] bond1: (slave lo): Enslaving as an active interface with an up link [ 622.055120][T28578] A link change request failed with some changes committed already. Interface tunl0 may have been left with an inconsistent configuration, please check. [ 622.076219][T28583] netlink: 'syz.3.6546': attribute type 1 has an invalid length. [ 622.135531][T28584] bond1: option lacp_active: mode dependency failed, not supported in mode balance-rr(0) [ 622.151361][T28584] bond1 (unregistering): Released all slaves [ 622.202572][T16574] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 622.210777][T16574] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 622.223606][T28589] netlink: 12 bytes leftover after parsing attributes in process `syz.3.6549'. [ 622.317580][T28593] nbd: nbd2 already in use [ 622.327123][T28595] netlink: 44 bytes leftover after parsing attributes in process `syz.4.6551'. [ 622.348275][T28595] netlink: 43 bytes leftover after parsing attributes in process `syz.4.6551'. [ 622.364820][T28595] netlink: 'syz.4.6551': attribute type 5 has an invalid length. [ 622.825770][T28630] Cannot find set identified by id 0 to match [ 623.243653][T15368] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 623.252659][T28641] tipc: Started in network mode [ 623.268655][T28641] tipc: Node identity 5e8577e57028, cluster identity 4711 [ 623.286856][T28641] tipc: Enabled bearer , priority 0 [ 623.420650][T28637] syzkaller0: entered promiscuous mode [ 623.426262][T28637] syzkaller0: entered allmulticast mode [ 623.433782][T28637] tipc: Resetting bearer [ 623.472386][T28635] tipc: Resetting bearer [ 623.666739][T28628] lec:lec_atm_close: lec0: Shut down! [ 623.811892][ T5143] Bluetooth: hci2: command 0x0405 tx timeout [ 624.063882][T28672] siw: device registration error -23 [ 624.283774][ T5946] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 624.444051][ T1300] aoe: packet could not be sent on bond0. consider increasing tx_queue_len [ 624.456165][ T1300] ieee802154 phy1 wpan1: encryption failed: -22 [ 625.243673][T16574] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 625.325898][ T5898] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 625.681863][T28635] tipc: Disabling bearer [ 625.693615][T28645] syzkaller1: entered promiscuous mode [ 625.699245][T28645] syzkaller1: entered allmulticast mode [ 625.819367][T28678] vlan2: entered allmulticast mode [ 625.824934][T28678] erspan0: entered allmulticast mode [ 625.832744][T28679] bridge3: port 1(erspan0) entered blocking state [ 625.839352][T28679] bridge3: port 1(erspan0) entered disabled state [ 625.848353][T28679] erspan0: entered promiscuous mode [ 625.854940][T28679] bridge3: port 1(erspan0) entered blocking state [ 625.861595][T28679] bridge3: port 1(erspan0) entered forwarding state [ 625.902661][ T5946] tipc: Node number set to 783120357 [ 626.030371][T28686] __nla_validate_parse: 38 callbacks suppressed [ 626.030394][T28686] netlink: 100 bytes leftover after parsing attributes in process `syz.2.6577'. [ 626.337777][T28703] sock: sock_timestamping_bind_phc: sock not bind to device [ 626.362357][ T5946] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 626.501768][T28711] netlink: 8 bytes leftover after parsing attributes in process `syz.3.6585'. [ 626.526381][T28711] netlink: 12 bytes leftover after parsing attributes in process `syz.3.6585'. [ 626.538723][T28711] netlink: 64 bytes leftover after parsing attributes in process `syz.3.6585'. [ 626.767608][T28717] IPVS: set_ctl: invalid protocol: 58 172.20.20.187:20001 [ 627.003388][ T5912] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 627.273684][T28741] netlink: 16 bytes leftover after parsing attributes in process `syz.0.6593'. [ 627.402631][ T5944] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 628.297485][ T5912] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 628.440886][ T5944] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 628.737490][T28750] netlink: 16 bytes leftover after parsing attributes in process `syz.0.6593'. [ 628.898007][T28757] netlink: 24 bytes leftover after parsing attributes in process `syz.2.6596'. [ 628.999831][ C0] lec0: NETDEV WATCHDOG: CPU: 0: transmit queue 0 timed out 5340 ms [ 629.007928][ C0] lec:lec_tx_timeout: lec0 [ 629.013303][ C0] lec:lec_start_xmit: lec0:No lecd attached [ 629.067054][T28769] netlink: 'syz.4.6599': attribute type 1 has an invalid length. [ 629.259541][T28785] nft_compat: unsupported protocol 0 [ 629.274569][T28785] netlink: 4 bytes leftover after parsing attributes in process `syz.0.6605'. [ 629.310575][T28788] netlink: 24 bytes leftover after parsing attributes in process `syz.1.6606'. [ 629.374903][T28792] netlink: 8 bytes leftover after parsing attributes in process `syz.0.6607'. [ 629.390878][T28792] netlink: 'syz.0.6607': attribute type 2 has an invalid length. [ 629.480193][ T5946] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 629.660686][T28805] syzkaller1: entered promiscuous mode [ 629.676473][T28805] syzkaller1: entered allmulticast mode [ 630.229380][T28839] syzkaller0: entered promiscuous mode [ 630.238781][T28839] syzkaller0: entered allmulticast mode [ 630.482208][T28855] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 630.492502][ C0] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 630.523930][ T5944] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 630.643666][T28862] IPVS: sh: FWM 3 0x00000003 - no destination available [ 630.804264][T28870] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 630.997845][T28879] vlan2: entered allmulticast mode [ 631.004876][T28879] bridge0: entered allmulticast mode [ 631.012127][T28879] bridge0: port 3(vlan2) entered blocking state [ 631.018790][T28879] bridge0: port 3(vlan2) entered disabled state [ 631.088437][T28883] __nla_validate_parse: 8 callbacks suppressed [ 631.088460][T28883] netlink: 4 bytes leftover after parsing attributes in process `syz.3.6636'. [ 631.143138][T28886] netlink: 4 bytes leftover after parsing attributes in process `syz.3.6636'. [ 631.161946][T28886] netlink: 4 bytes leftover after parsing attributes in process `syz.3.6636'. [ 631.276950][T28890] netlink: 'syz.4.6638': attribute type 10 has an invalid length. [ 631.300141][T28890] netlink: 16154 bytes leftover after parsing attributes in process `syz.4.6638'. [ 631.321064][ T5884] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 631.348097][T28890] netlink: 'syz.4.6638': attribute type 1 has an invalid length. [ 631.370556][T28890] netlink: 228 bytes leftover after parsing attributes in process `syz.4.6638'. [ 631.393145][T28890] netlink: 8 bytes leftover after parsing attributes in process `syz.4.6638'. [ 631.484509][ T5884] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 631.543972][T28906] team0 (unregistering): Port device team_slave_0 removed [ 631.579977][ T5944] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 631.595256][T28906] team0 (unregistering): Port device team_slave_1 removed [ 631.631195][T28911] netlink: 'syz.1.6641': attribute type 12 has an invalid length. [ 631.640490][T28911] netlink: 'syz.1.6641': attribute type 29 has an invalid length. [ 631.652905][T28911] netlink: 148 bytes leftover after parsing attributes in process `syz.1.6641'. [ 631.692132][T28911] netlink: 59 bytes leftover after parsing attributes in process `syz.1.6641'. [ 631.708394][T28919] netlink: 32 bytes leftover after parsing attributes in process `syz.2.6643'. [ 632.004786][T28935] netlink: 20 bytes leftover after parsing attributes in process `syz.4.6649'. [ 632.057291][T28941] openvswitch: netlink: Flow key attribute not present in set flow. [ 632.131897][T28942] netlink: 'syz.3.6650': attribute type 3 has an invalid length. [ 632.831017][T28994] netlink: 'syz.3.6668': attribute type 12 has an invalid length. [ 632.895022][T28994] block nbd0: not configured, cannot reconfigure [ 632.978212][T29004] netlink: 'syz.4.6672': attribute type 15 has an invalid length. [ 633.058565][T28999] syzkaller0: entered promiscuous mode [ 633.084328][T28999] syzkaller0: entered allmulticast mode [ 633.939667][T29057] netlink: 'syz.3.6683': attribute type 1 has an invalid length. [ 634.020840][ C0] lec0: NETDEV WATCHDOG: CPU: 0: transmit queue 0 timed out 5010 ms [ 634.029034][ C0] lec:lec_tx_timeout: lec0 [ 634.684961][ T5944] net_ratelimit: 3 callbacks suppressed [ 634.684978][ T5944] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 635.387590][T29057] workqueue: Failed to create a rescuer kthread for wq "bond3": -EINTR [ 635.396866][ T5912] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 635.492951][ T5912] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 635.722938][ T5946] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 636.303632][T22963] bond8 (unregistering): (slave geneve3): Releasing active interface [ 636.324291][T22963] bond7 (unregistering): (slave geneve2): Releasing active interface [ 636.374503][T29099] x_tables: duplicate underflow at hook 2 [ 636.388112][T22963] bridge0 (unregistering): left allmulticast mode [ 636.446769][T29100] xt_CT: You must specify a L4 protocol and not use inversions on it [ 636.506921][T22963] bond2 (unregistering): (slave bridge2): Releasing backup interface [ 636.761825][ T5946] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 636.826251][T22963] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 636.836764][T22963] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 636.849231][T22963] bond0 (unregistering): (slave bridge_slave_1): Releasing backup interface [ 636.862397][T22963] bond0 (unregistering): Released all slaves [ 636.877484][T22963] bond1 (unregistering): Released all slaves [ 636.906000][T22963] bond2 (unregistering): Released all slaves [ 636.943882][T22963] bond3 (unregistering): (slave lo): Releasing backup interface [ 636.961625][T22963] bond3 (unregistering): (slave lo): last VLAN challenged slave left bond - VLAN blocking is removed [ 636.974917][T22963] bond3 (unregistering): Released all slaves [ 636.995865][T22963] bond4 (unregistering): Released all slaves [ 637.016235][T22963] bond5 (unregistering): (slave veth0_to_bond): Releasing active interface [ 637.029189][T22963] bond5 (unregistering): Released all slaves [ 637.046877][T22963] bond6 (unregistering): Released all slaves [ 637.068086][T22963] bond7 (unregistering): Released all slaves [ 637.093541][T22963] bond8 (unregistering): Released all slaves [ 637.108466][T29060] syzkaller1: entered promiscuous mode [ 637.115119][T29060] syzkaller1: entered allmulticast mode [ 637.122869][T29083] __nla_validate_parse: 7 callbacks suppressed [ 637.122889][T29083] netlink: 28 bytes leftover after parsing attributes in process `syz.0.6689'. [ 637.184120][T29104] syzkaller0: entered promiscuous mode [ 637.212018][T29104] syzkaller0: entered allmulticast mode [ 637.351391][T22963] tipc: Disabling bearer [ 637.367756][T22963] tipc: Left network mode [ 637.413912][ T5884] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 637.443027][T29119] netlink: 12 bytes leftover after parsing attributes in process `syz.0.6694'. [ 637.461197][T29124] netlink: 40 bytes leftover after parsing attributes in process `syz.2.6696'. [ 637.529892][T29119] netlink: 4 bytes leftover after parsing attributes in process `syz.0.6694'. [ 637.699682][T29119] netlink: 12 bytes leftover after parsing attributes in process `syz.0.6694'. [ 637.719437][T29119] netlink: 4 bytes leftover after parsing attributes in process `syz.0.6694'. [ 637.803159][ T5946] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 637.877635][T29143] netlink: 16 bytes leftover after parsing attributes in process `syz.1.6701'. [ 637.933414][T29143] netlink: 76 bytes leftover after parsing attributes in process `syz.1.6701'. [ 638.415966][T29174] netlink: 20 bytes leftover after parsing attributes in process `syz.3.6708'. [ 638.509194][T29181] netlink: 1828 bytes leftover after parsing attributes in process `syz.1.6710'. [ 638.562987][T29181] openvswitch: netlink: Flow key attr not present in new flow. [ 638.589298][T29186] netlink: 'syz.0.6711': attribute type 51 has an invalid length. [ 638.624001][T29186] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 638.638670][T29188] ieee802154 phy1 wpan1: encryption failed: -22 [ 638.840222][T15368] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 639.203271][T29186] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 639.215008][T29186] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 639.404560][T29192] ip6gre2: entered allmulticast mode [ 639.440672][T22963] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 639.464331][T22963] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 639.891547][T15368] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 639.900215][ C1] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 640.059608][T22963] team0 (unregistering): Port device team_slave_1 removed [ 640.114041][T22963] team0 (unregistering): Port device team_slave_0 removed [ 640.384860][T29236] syzkaller0: entered promiscuous mode [ 640.390593][T29236] syzkaller0: entered allmulticast mode [ 640.442472][T16574] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 640.451412][ C0] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 640.482122][T29225] Bluetooth: hci2: Opcode 0x0c1a failed: -4 [ 640.584264][T29248] openvswitch: netlink: Flow actions attr not present in new flow. [ 640.921104][T15368] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 641.082140][T16574] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 641.413147][T29294] x_tables: duplicate underflow at hook 3 [ 641.484924][T29299] netlink: 'syz.4.6731': attribute type 1 has an invalid length. [ 641.505961][T29296] IPVS: set_ctl: invalid protocol: 50 100.1.1.1:20000 [ 641.731878][ T5912] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 641.740224][T25842] Bluetooth: hci2: command 0x0405 tx timeout [ 641.964340][T15368] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 642.843720][T29299] workqueue: Failed to create a rescuer kthread for wq "bond2": -EINTR [ 643.001257][T16574] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 643.117089][T29316] netlink: 'syz.3.6735': attribute type 11 has an invalid length. [ 643.117275][T29320] __nla_validate_parse: 4 callbacks suppressed [ 643.117329][T29320] netlink: 96 bytes leftover after parsing attributes in process `syz.0.6736'. [ 643.212945][T29320] 8021q: VLANs not supported on gre0 [ 643.352056][T22963] IPVS: stop unused estimator thread 0... [ 643.392395][T29325] netlink: 16 bytes leftover after parsing attributes in process `syz.2.6738'. [ 643.435430][T29328] netlink: 220 bytes leftover after parsing attributes in process `syz.3.6741'. [ 643.573097][T29330] syzkaller0: entered promiscuous mode [ 643.578666][T29330] syzkaller0: entered allmulticast mode [ 643.582701][T29338] netlink: 4 bytes leftover after parsing attributes in process `syz.3.6743'. [ 643.594809][T29338] chnl_net:caif_netlink_parms(): no params data found [ 643.689722][T29343] netlink: 4 bytes leftover after parsing attributes in process `syz.2.6744'. [ 643.788017][T29346] syzkaller0: entered allmulticast mode [ 643.809125][T29345] syzkaller0: left allmulticast mode [ 643.877029][T29350] netlink: 48 bytes leftover after parsing attributes in process `syz.0.6747'. [ 643.982714][T29355] netlink: 8 bytes leftover after parsing attributes in process `syz.4.6749'. [ 643.983711][T29356] syzkaller0: entered promiscuous mode [ 644.017615][T29356] syzkaller0: entered allmulticast mode [ 644.022262][T29355] netlink: 4 bytes leftover after parsing attributes in process `syz.4.6749'. [ 644.166005][T29362] netlink: 'syz.3.6753': attribute type 5 has an invalid length. [ 644.218656][T29366] netlink: 'syz.0.6755': attribute type 1 has an invalid length. [ 644.339145][T29368] ±ÿ: entered promiscuous mode [ 644.389597][T29366] netlink: 28 bytes leftover after parsing attributes in process `syz.0.6755'. [ 644.398513][T29368] tunl0: entered promiscuous mode [ 644.415474][T29368] gre0: entered promiscuous mode [ 644.451825][T29368] gretap0: entered promiscuous mode [ 644.465561][T29382] netlink: 8 bytes leftover after parsing attributes in process `syz.1.6760'. [ 644.488730][T29368] bridge3: port 1(erspan0) entered disabled state [ 644.512844][T29368] ip_vti0: entered promiscuous mode [ 644.594556][T29371] bond2: (slave geneve2): making interface the new active one [ 644.609237][T29371] bond2: (slave geneve2): Enslaving as an active interface with an up link [ 644.622325][T29366] 8021q: adding VLAN 0 to HW filter on device bond2 [ 644.804013][T29398] SET target dimension over the limit! [ 644.825665][T29401] xt_CT: You must specify a L4 protocol and not use inversions on it [ 644.890381][T22049] netdevsim netdevsim0 netdevsim0: set [1, 1] type 2 family 0 port 20000 - 0 [ 644.907903][T22049] netdevsim netdevsim0 netdevsim1: set [1, 1] type 2 family 0 port 20000 - 0 [ 644.985618][T22049] netdevsim netdevsim0 netdevsim2: set [1, 1] type 2 family 0 port 20000 - 0 [ 644.995705][T22049] netdevsim netdevsim0 netdevsim3: set [1, 1] type 2 family 0 port 20000 - 0 [ 645.080499][ T5946] net_ratelimit: 7 callbacks suppressed [ 645.080520][ T5946] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 645.210687][T29416] syzkaller0: entered promiscuous mode [ 645.216343][T29416] syzkaller0: entered allmulticast mode [ 645.306968][T29426] IPv6: RTM_NEWROUTE with no NLM_F_CREATE or NLM_F_REPLACE [ 645.314417][T29426] IPv6: NLM_F_CREATE should be set when creating new route [ 645.321731][T29426] IPv6: NLM_F_CREATE should be set when creating new route [ 645.338428][T29418] siw: device registration error -23 [ 645.481626][T29406] Bluetooth: hci2: command 0x0405 tx timeout [ 645.513712][T29431] netlink: 'syz.4.6775': attribute type 1 has an invalid length. [ 645.558324][T29431] bond2: entered promiscuous mode [ 645.587740][T29431] 8021q: adding VLAN 0 to HW filter on device bond2 [ 646.008378][T29457] syzkaller0: entered promiscuous mode [ 646.015467][T29457] syzkaller0: entered allmulticast mode [ 646.123104][ T5944] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 646.206251][ T25] block nbd2: Possible stuck request ffff8880273e8000: control (read@0,1024B). Runtime 240 seconds [ 646.217301][ T25] block nbd2: Possible stuck request ffff8880273e8200: control (read@1024,1024B). Runtime 240 seconds [ 646.228956][ T25] block nbd2: Possible stuck request ffff8880273e8400: control (read@2048,1024B). Runtime 240 seconds [ 646.240378][ T25] block nbd2: Possible stuck request ffff8880273e8600: control (read@3072,1024B). Runtime 240 seconds [ 646.466110][ T30] audit: type=1800 audit(1775104101.642:8): pid=29487 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="syz.1.6793" name="memory.events" dev="tmpfs" ino=759 res=0 errno=0 [ 646.531718][ T5885] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 646.706494][T29507] netlink: 'syz.2.6799': attribute type 2 has an invalid length. [ 646.716804][T29507] netlink: 'syz.2.6799': attribute type 2 has an invalid length. [ 646.795361][T29512] openvswitch: netlink: Unexpected mask (mask=40040, allowed=10048) [ 647.000461][T25842] Bluetooth: hci0: command 0x0406 tx timeout [ 647.161976][ T5944] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 647.296207][T29541] syzkaller0: entered promiscuous mode [ 647.311284][T29541] syzkaller0: entered allmulticast mode [ 647.365183][T29547] ksmbd: Unknown IPC event: 3, ignore. [ 647.597928][T29563] netlink: 'syz.0.6818': attribute type 25 has an invalid length. [ 647.657472][T29563] bridge0: port 2(bridge_slave_1) entered disabled state [ 647.664945][T29563] bridge0: port 1(bridge_slave_0) entered disabled state [ 647.727110][T29569] xt_hashlimit: invalid interval [ 648.135778][T29586] __nla_validate_parse: 15 callbacks suppressed [ 648.135800][T29586] netlink: 16 bytes leftover after parsing attributes in process `syz.4.6824'. [ 648.155199][T29610] netlink: 12 bytes leftover after parsing attributes in process `syz.0.6830'. [ 648.170097][T29603] netlink: 16 bytes leftover after parsing attributes in process `syz.2.6827'. [ 648.184957][T29611] netlink: 12 bytes leftover after parsing attributes in process `syz.0.6830'. [ 648.201085][ T5898] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 648.258865][T29603] netlink: 16 bytes leftover after parsing attributes in process `syz.2.6827'. [ 648.302928][T29603] gretap0: left allmulticast mode [ 648.308128][T29603] gretap0: left promiscuous mode [ 648.320531][T29616] netlink: 27 bytes leftover after parsing attributes in process `syz.1.6831'. [ 648.322825][T29603] bridge0: port 3(gretap0) entered disabled state [ 648.388165][T29603] bridge_slave_0: left allmulticast mode [ 648.395415][T29603] bridge_slave_0: left promiscuous mode [ 648.403765][T29603] bridge0: port 1(bridge_slave_0) entered disabled state [ 648.417253][T29603] bridge_slave_1: left allmulticast mode [ 648.424926][T29603] bridge_slave_1: left promiscuous mode [ 648.431346][T29603] bridge0: port 2(bridge_slave_1) entered disabled state [ 648.453729][T29603] bond0: (slave bond_slave_0): Releasing backup interface [ 648.476804][T29603] bond0: (slave bond_slave_1): Releasing backup interface [ 648.495451][T29603] team0: Port device team_slave_0 removed [ 648.508525][T29603] team0: Port device team_slave_1 removed [ 648.519123][T29603] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 648.527377][T29603] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 648.542117][T29603] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 648.551342][T29603] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 648.561472][T29603] A link change request failed with some changes committed already. Interface hsr_slave_0 may have been left with an inconsistent configuration, please check. [ 648.599203][T29632] netlink: 'syz.0.6835': attribute type 1 has an invalid length. [ 648.681767][T29632] bond3: entered promiscuous mode [ 648.711856][T29632] 8021q: adding VLAN 0 to HW filter on device bond3 [ 648.754430][T29641] atomic_op ffff88807b21c198 conn xmit_atomic 0000000000000000 [ 648.788680][T29631] bond3: (slave bridge2): making interface the new active one [ 648.831184][T29631] bridge2: entered promiscuous mode [ 648.849031][T29643] xt_CT: No such helper "snmp_trap" [ 648.857860][T29631] bond3: (slave bridge2): Enslaving as an active interface with an up link [ 648.877581][T29651] netlink: 16 bytes leftover after parsing attributes in process `syz.4.6838'. [ 648.887159][T29651] netlink: 16 bytes leftover after parsing attributes in process `syz.4.6838'. [ 648.917489][T29647] ip_vti0: entered promiscuous mode [ 648.924156][T29647] ip_vti0: entered allmulticast mode [ 648.938356][T29646] syzkaller0: entered promiscuous mode [ 648.952988][T29646] syzkaller0: entered allmulticast mode [ 649.218439][T29670] openvswitch: netlink: Flow set message rejected, Key attribute missing. [ 649.241878][ T5946] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 649.283389][T29661] netlink: 16 bytes leftover after parsing attributes in process `syz.4.6843'. [ 649.507429][T29686] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 649.706019][T29692] bond3: entered allmulticast mode [ 649.733260][T29692] bridge4: entered promiscuous mode [ 649.738766][T29692] bridge4: entered allmulticast mode [ 649.756382][T29692] bond3: (slave bridge4): Enslaving as an active interface with an up link [ 649.946007][T29699] lec:lec_atm_send: lec0: Unknown message type 255 [ 649.966664][T29694] lec:lec_atm_close: lec0: Shut down! [ 650.044759][T29701] netlink: 'syz.1.6856': attribute type 21 has an invalid length. [ 650.281518][ T5944] net_ratelimit: 2 callbacks suppressed [ 650.281540][ T5944] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 650.452690][T29713] netlink: 16 bytes leftover after parsing attributes in process `syz.3.6860'. [ 650.463027][T29719] netlink: 'syz.0.6861': attribute type 1 has an invalid length. [ 650.732732][T29729] netlink: 'syz.1.6865': attribute type 1 has an invalid length. [ 650.777545][T29729] netlink: 'syz.1.6865': attribute type 1 has an invalid length. [ 650.983273][T29740] syzkaller0: entered promiscuous mode [ 650.988903][T29740] syzkaller0: entered allmulticast mode [ 651.320759][ T5944] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 651.396662][T29763] lec:lec_atm_send: lec0: Unknown message type 255 [ 651.490504][T29743] lec:lec_atm_close: lec0: Shut down! [ 651.673860][T29774] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 651.702855][T29779] netlink: 'syz.4.6878': attribute type 9 has an invalid length. [ 652.287257][T29808] veth3: entered promiscuous mode [ 652.292668][T29808] veth3: entered allmulticast mode [ 652.362383][ T5946] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 652.601193][T11436] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 652.609682][T16572] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 653.299422][T29868] xt_policy: too many policy elements [ 653.364893][T29871] netlink: 'syz.3.6903': attribute type 4 has an invalid length. [ 653.404252][ T5944] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 654.440286][ T5944] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 655.287506][T29811] nci: __nci_request: wait_for_completion_interruptible_timeout failed -512 [ 655.483128][ T5944] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 655.500361][T29884] netlink: 'syz.0.6907': attribute type 10 has an invalid length. [ 655.533902][T29889] smc: ib device syz2 ibport 2 applied user defined pnetid SYZ1 [ 655.640625][T11436] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 655.801471][T22956] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 655.844805][T16572] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 655.855639][T11435] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 655.989208][T29906] __nla_validate_parse: 9 callbacks suppressed [ 655.989230][T29906] netlink: 28 bytes leftover after parsing attributes in process `syz.1.6913'. [ 656.057205][T29905] netlink: 512 bytes leftover after parsing attributes in process `syz.1.6913'. [ 656.133194][T29879] lec:lec_atm_close: lec0: Shut down! [ 656.141207][T29921] FAULT_INJECTION: forcing a failure. [ 656.141207][T29921] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 656.170280][T29921] CPU: 1 UID: 0 PID: 29921 Comm: syz.0.6916 Not tainted syzkaller #0 PREEMPT(full) [ 656.170314][T29921] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 03/18/2026 [ 656.170329][T29921] Call Trace: [ 656.170338][T29921] [ 656.170349][T29921] dump_stack_lvl+0xe8/0x150 [ 656.170386][T29921] should_fail_ex+0x412/0x560 [ 656.170425][T29921] _copy_from_user+0x2d/0xb0 [ 656.170451][T29921] ___sys_recvmsg+0x175/0x590 [ 656.170486][T29921] ? __pfx____sys_recvmsg+0x10/0x10 [ 656.170538][T29921] ? __fget_files+0x3a0/0x420 [ 656.170582][T29921] do_recvmmsg+0x334/0x800 [ 656.170618][T29921] ? __pfx_do_recvmmsg+0x10/0x10 [ 656.170660][T29921] ? _copy_from_user+0x94/0xb0 [ 656.170697][T29921] __x64_sys_recvmmsg+0x1b7/0x250 [ 656.170729][T29921] ? __pfx___x64_sys_recvmmsg+0x10/0x10 [ 656.170770][T29921] do_syscall_64+0x14d/0xf80 [ 656.170797][T29921] ? trace_irq_disable+0x3b/0x150 [ 656.170816][T29921] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 656.170839][T29921] ? clear_bhb_loop+0x40/0x90 [ 656.170866][T29921] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 656.170889][T29921] RIP: 0033:0x7f114879c819 [ 656.170909][T29921] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 656.170929][T29921] RSP: 002b:00007f11496f8028 EFLAGS: 00000246 ORIG_RAX: 000000000000012b [ 656.170953][T29921] RAX: ffffffffffffffda RBX: 00007f1148a16090 RCX: 00007f114879c819 [ 656.170970][T29921] RDX: 0000000000000006 RSI: 000020000000c4c0 RDI: 0000000000000003 [ 656.170984][T29921] RBP: 00007f11496f8090 R08: 000020000000c6c0 R09: 0000000000000000 [ 656.171000][T29921] R10: 0000000000000002 R11: 0000000000000246 R12: 0000000000000001 [ 656.171013][T29921] R13: 00007f1148a16128 R14: 00007f1148a16090 R15: 00007ffea49a99b8 [ 656.171054][T29921] [ 656.542525][T29925] netlink: 16 bytes leftover after parsing attributes in process `syz.1.6918'. [ 656.552622][ T5944] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 656.709074][T29948] Cannot find add_set index 0 as target [ 656.715154][T29944] netlink: 'syz.4.6921': attribute type 3 has an invalid length. [ 656.775183][T29953] xt_cluster: node mask cannot exceed total number of nodes [ 656.911016][T29965] vlan3: entered allmulticast mode [ 657.240046][ T5143] Bluetooth: hci1: command 0x0406 tx timeout [ 657.560947][ T5944] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 658.096706][T29986] netlink: 20 bytes leftover after parsing attributes in process `syz.0.6935'. [ 658.106173][ C1] vxcan1: j1939_tp_rxtimer: 0xffff88803210ac00: rx timeout, send abort [ 658.111573][ C1] vxcan1: j1939_xtp_rx_abort_one: 0xffff88803210ac00: 0x40000: (3) A timeout occurred and this is the connection abort to close the session. [ 658.256353][T29992] netlink: 20 bytes leftover after parsing attributes in process `syz.1.6937'. [ 658.600084][ T5944] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 658.921325][T11435] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 659.642313][ T5944] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 659.675468][T29942] nci: __nci_request: wait_for_completion_interruptible_timeout failed -512 [ 659.884695][T30004] netlink: 104 bytes leftover after parsing attributes in process `syz.1.6940'. [ 659.898052][T30003] syzkaller1: entered promiscuous mode [ 659.904817][T30003] syzkaller1: entered allmulticast mode [ 659.917360][T30004] netlink: 256 bytes leftover after parsing attributes in process `syz.1.6940'. [ 659.940295][T30003] netlink: 'syz.3.6941': attribute type 30 has an invalid length. [ 659.957253][T30000] netlink: 72 bytes leftover after parsing attributes in process `syz.4.6939'. [ 660.022115][T30003] bond3: option arp_missed_max: invalid value (0) [ 660.028981][T30003] bond3: option arp_missed_max: allowed values 1 - 255 [ 660.048444][T30003] bond3 (unregistering): Released all slaves [ 660.187825][T30014] syzkaller1: entered promiscuous mode [ 660.198530][T30014] syzkaller1: entered allmulticast mode [ 660.220500][T30023] xt_addrtype: ipv6 BLACKHOLE matching not supported [ 660.481053][T30031] netlink: 'syz.0.6949': attribute type 13 has an invalid length. [ 660.681816][ T5944] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 661.142823][ C0] lec0: NETDEV WATCHDOG: CPU: 0: transmit queue 0 timed out 5010 ms [ 661.150953][ C0] lec:lec_tx_timeout: lec0 [ 661.561521][T22956] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 661.570979][ T5898] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 661.592928][T11435] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 661.726079][ T5898] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 662.208968][T11435] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 662.633071][T30038] netlink: 'syz.0.6949': attribute type 1 has an invalid length. [ 662.760577][ T5898] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 662.844254][T30066] bridge0: port 3(syz_tun) entered blocking state [ 662.870139][T30066] bridge0: port 3(syz_tun) entered disabled state [ 662.894747][T30066] syz_tun: entered allmulticast mode [ 662.916705][T30066] syz_tun: entered promiscuous mode [ 663.074658][T30082] netlink: 12 bytes leftover after parsing attributes in process `syz.4.6960'. [ 663.105091][T30073] syzkaller1: entered promiscuous mode [ 663.113400][T30083] netlink: 12 bytes leftover after parsing attributes in process `syz.4.6960'. [ 663.123829][T30073] syzkaller1: entered allmulticast mode [ 663.136012][T30088] netlink: 'syz.2.6962': attribute type 3 has an invalid length. [ 663.258306][T30091] syzkaller0: entered promiscuous mode [ 663.275323][T30091] syzkaller0: entered allmulticast mode [ 663.291806][T30093] netlink: 8 bytes leftover after parsing attributes in process `syz.4.6964'. [ 663.370511][T30099] netlink: 'syz.4.6964': attribute type 1 has an invalid length. [ 663.523897][T30093] netdevsim netdevsim4 netdevsim0: entered promiscuous mode [ 663.659525][T30107] netlink: 'syz.1.6967': attribute type 9 has an invalid length. [ 663.686105][T30107] netlink: 'syz.1.6967': attribute type 11 has an invalid length. [ 663.699105][T30107] netlink: 'syz.1.6967': attribute type 12 has an invalid length. [ 663.713554][T30107] netlink: 210020 bytes leftover after parsing attributes in process `syz.1.6967'. [ 663.725899][T30107] netlink: 4 bytes leftover after parsing attributes in process `syz.1.6967'. [ 663.771551][ T5946] IPVS: starting estimator thread 0... [ 663.803336][ T5946] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 663.864130][T30115] IPVS: using max 25 ests per chain, 60000 per kthread [ 663.874187][T30108] openvswitch: netlink: Key 6 has unexpected len 4 expected 2 [ 663.885755][T30120] netlink: 8 bytes leftover after parsing attributes in process `syz.3.6972'. [ 663.897757][T30120] netlink: 12 bytes leftover after parsing attributes in process `syz.3.6972'. [ 663.939049][T22959] netdevsim netdevsim3 netdevsim0: set [0, 0] type 1 family 0 port 8472 - 0 [ 663.950481][T30120] netlink: 8 bytes leftover after parsing attributes in process `syz.3.6972'. [ 663.996338][T30120] netlink: 12 bytes leftover after parsing attributes in process `syz.3.6972'. [ 664.008128][T22959] netdevsim netdevsim3 netdevsim1: set [0, 0] type 1 family 0 port 8472 - 0 [ 664.024323][T22959] netdevsim netdevsim3 netdevsim2: set [0, 0] type 1 family 0 port 8472 - 0 [ 664.055818][T22959] netdevsim netdevsim3 netdevsim3: set [0, 0] type 1 family 0 port 8472 - 0 [ 664.603958][T11436] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 664.639654][T30159] netlink: 'syz.0.6981': attribute type 4 has an invalid length. [ 664.765880][T30169] netlink: 12 bytes leftover after parsing attributes in process `syz.0.6981'. [ 664.803598][T30170] netlink: 'syz.2.6985': attribute type 1 has an invalid length. [ 664.830769][T30170] netlink: 'syz.2.6985': attribute type 3 has an invalid length. [ 664.864425][T30175] sctp: [Deprecated]: syz.3.6986 (pid 30175) Use of struct sctp_assoc_value in delayed_ack socket option. [ 664.864425][T30175] Use struct sctp_sack_info instead [ 664.923091][T30177] tc_dump_action: action bad kind [ 664.947932][T30175] sctp: [Deprecated]: syz.3.6986 (pid 30175) Use of int in max_burst socket option deprecated. [ 664.947932][T30175] Use struct sctp_assoc_value instead [ 665.028685][T30175] IPVS: set_ctl: invalid protocol: 103 0.0.0.0:20000 [ 665.805725][T30236] netlink: 'syz.1.7004': attribute type 1 has an invalid length. [ 665.880270][ T5944] net_ratelimit: 3 callbacks suppressed [ 665.880290][ T5944] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 665.955879][T30244] bond1: (slave vxcan3): The slave device specified does not support setting the MAC address [ 665.971467][T30244] bond1: (slave vxcan3): Error -95 calling set_mac_address [ 666.178791][T30263] erspan0: entered promiscuous mode [ 666.184508][T30263] vlan3: entered promiscuous mode [ 666.268787][T30260] 8021q: adding VLAN 0 to HW filter on device bond2 [ 666.303086][T30267] vlan2: entered allmulticast mode [ 666.308399][T30267] bond2: entered allmulticast mode [ 666.325226][T30260] bond2: (slave gretap1): making interface the new active one [ 666.333108][T30260] gretap1: entered allmulticast mode [ 666.344488][T30260] bond2: (slave gretap1): Enslaving as an active interface with an up link [ 666.419630][T30274] SET target dimension over the limit! [ 666.654022][T30287] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 666.662735][ C1] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 666.692938][T22957] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 666.702082][T11436] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 666.703391][T30288] bond4: option primary_reselect: invalid value (255) [ 666.714535][T16572] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 666.717834][T23685] lec:lec_start_xmit: lec0:No lecd attached [ 666.752732][T30288] bond4 (unregistering): Released all slaves [ 666.921120][ T5944] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 667.401200][T30319] IPVS: set_ctl: invalid protocol: 60 224.0.0.1:20000 [ 667.493699][T25842] Bluetooth: hci5: command 0x0406 tx timeout [ 667.838856][T30359] xt_policy: too many policy elements [ 667.961780][ T5944] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 668.123101][T30379] __nla_validate_parse: 13 callbacks suppressed [ 668.123123][T30379] netlink: 212368 bytes leftover after parsing attributes in process `syz.1.7044'. [ 668.302764][T30389] netlink: 36 bytes leftover after parsing attributes in process `syz.0.7046'. [ 668.312713][T30389] openvswitch: netlink: Flow get message rejected, Key attribute missing. [ 668.340921][T30332] nci: __nci_request: wait_for_completion_interruptible_timeout failed -512 [ 668.492249][T30392] netlink: 12 bytes leftover after parsing attributes in process `syz.3.7048'. [ 668.525004][T30394] netlink: 12 bytes leftover after parsing attributes in process `syz.3.7048'. [ 668.541202][T30397] netlink: 8 bytes leftover after parsing attributes in process `syz.1.7050'. [ 668.551541][T30397] netlink: 8 bytes leftover after parsing attributes in process `syz.1.7050'. [ 668.597836][T30401] netlink: 8 bytes leftover after parsing attributes in process `syz.2.7051'. [ 668.636954][T30401] netdevsim netdevsim2 netdevsim0: entered promiscuous mode [ 668.653417][T30401] netlink: 184 bytes leftover after parsing attributes in process `syz.2.7051'. [ 668.703531][T30405] validate_nla: 5 callbacks suppressed [ 668.703555][T30405] netlink: 'syz.1.7053': attribute type 21 has an invalid length. [ 668.733204][T30408] netlink: 24 bytes leftover after parsing attributes in process `syz.3.7054'. [ 668.760445][T30405] netlink: 156 bytes leftover after parsing attributes in process `syz.1.7053'. [ 668.774231][T30405] chnl_net:caif_netlink_parms(): no params data found [ 668.872205][T30413] bond3: option xmit_hash_policy: invalid value (64) [ 668.895769][T30413] bond3 (unregistering): Released all slaves [ 669.000172][ T5898] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 669.029163][T11449] ip6_tunnel: ip6gre1 xmit: Local address not yet configured! [ 669.037894][T11449] ip6_tunnel: ip6gre1 xmit: Local address not yet configured! [ 669.053300][T16572] ip6_tunnel: ip6gre1 xmit: Local address not yet configured! [ 669.610363][T30455] xt_TCPMSS: Only works on TCP SYN packets [ 669.618476][T30456] xt_CT: You must specify a L4 protocol and not use inversions on it [ 669.671183][T11436] ip6_tunnel: ip6gre1 xmit: Local address not yet configured! [ 669.806595][T16572] ip6_tunnel: ip6gre1 xmit: Local address not yet configured! [ 669.828013][T30470] lo: Caught tx_queue_len zero misconfig [ 670.758327][T30550] netlink: 'syz.0.7101': attribute type 2 has an invalid length. [ 670.792958][T30550] netlink: 'syz.0.7101': attribute type 2 has an invalid length. [ 670.960486][T30550] bond4: entered promiscuous mode [ 671.028194][T30573] bridge0: port 2(bridge_slave_1) entered disabled state [ 671.035682][T30573] bridge0: port 1(bridge_slave_0) entered disabled state [ 671.083917][ T5944] net_ratelimit: 2 callbacks suppressed [ 671.083939][ T5944] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 671.101067][T30573] bridge0: port 2(bridge_slave_1) entered blocking state [ 671.108353][T30573] bridge0: port 2(bridge_slave_1) entered forwarding state [ 671.116003][T30573] bridge0: port 1(bridge_slave_0) entered blocking state [ 671.123244][T30573] bridge0: port 1(bridge_slave_0) entered forwarding state [ 671.158984][T30573] bridge0: port 2(bridge_slave_1) entered disabled state [ 671.166430][T30573] bridge0: port 1(bridge_slave_0) entered disabled state [ 671.237293][T30581] syzkaller0: Caught tx_queue_len zero misconfig [ 671.412086][T30588] syzkaller0: entered promiscuous mode [ 671.418172][T30588] syzkaller0: entered allmulticast mode [ 671.776625][T30617] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 671.787253][T30619] xt_TCPMSS: Only works on TCP SYN packets [ 671.802010][ T5885] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 671.821529][T30617] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 671.851117][T30617] bond0 (unregistering): Released all slaves [ 671.878397][T30621] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 671.943432][T30621] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 671.960684][ C0] lec0: NETDEV WATCHDOG: CPU: 0: transmit queue 0 timed out 5230 ms [ 671.968821][ C0] lec:lec_tx_timeout: lec0 [ 672.122172][ T5898] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 672.157409][T30635] netlink: 'syz.0.7124': attribute type 9 has an invalid length. [ 672.441218][T22049] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 672.452513][ T5898] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 672.462554][ T5885] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 673.160292][ T5946] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 673.320047][ C0] ip6_tunnel: ip6gre1 xmit: Local address not yet configured! [ 673.969238][T30567] nci: __nci_request: wait_for_completion_interruptible_timeout failed -512 [ 673.989933][T30627] __nla_validate_parse: 16 callbacks suppressed [ 673.989955][T30627] netlink: 120 bytes leftover after parsing attributes in process `syz.0.7124'. [ 674.017595][T30627] netlink: 'syz.0.7124': attribute type 1 has an invalid length. [ 674.035573][T30627] netlink: 64 bytes leftover after parsing attributes in process `syz.0.7124'. [ 674.201058][ T5898] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 674.239305][T30664] xt_hashlimit: size too large, truncated to 1048576 [ 674.244582][T30668] netlink: 'syz.1.7137': attribute type 4 has an invalid length. [ 674.273865][T30668] netlink: 17 bytes leftover after parsing attributes in process `syz.1.7137'. [ 674.288801][T30665] netlink: 'syz.4.7135': attribute type 11 has an invalid length. [ 674.339147][T30668] netlink: 183700 bytes leftover after parsing attributes in process `syz.1.7137'. [ 674.477641][T30680] netlink: 'syz.0.7139': attribute type 11 has an invalid length. [ 674.527663][T30680] netlink: 4 bytes leftover after parsing attributes in process `syz.0.7139'. [ 674.558821][T30680] netlink: 'syz.0.7139': attribute type 11 has an invalid length. [ 674.598724][T30680] netlink: 4 bytes leftover after parsing attributes in process `syz.0.7139'. [ 674.844316][T30700] netlink: 16 bytes leftover after parsing attributes in process `syz.2.7141'. [ 674.962069][T30705] netlink: 8 bytes leftover after parsing attributes in process `syz.0.7144'. [ 674.983562][T30689] netlink: 'syz.2.7141': attribute type 10 has an invalid length. [ 674.991572][T30705] netlink: 8 bytes leftover after parsing attributes in process `syz.0.7144'. [ 675.036002][T30705] netlink: 28 bytes leftover after parsing attributes in process `syz.0.7144'. [ 675.083378][T30689] team0: Port device dummy0 added [ 675.132733][T30714] ip6tnl0: Caught tx_queue_len zero misconfig [ 675.240286][ T5898] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 675.480999][T16572] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 675.564589][T30736] netlink: 'syz.4.7154': attribute type 1 has an invalid length. [ 676.247480][T30774] netlink: 'syz.1.7162': attribute type 5 has an invalid length. [ 676.287644][ T5898] net_ratelimit: 1 callbacks suppressed [ 676.287666][ T5898] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 676.304346][ T25] block nbd2: Possible stuck request ffff8880273e8000: control (read@0,1024B). Runtime 270 seconds [ 676.315602][ T25] block nbd2: Possible stuck request ffff8880273e8200: control (read@1024,1024B). Runtime 270 seconds [ 676.326845][ T25] block nbd2: Possible stuck request ffff8880273e8400: control (read@2048,1024B). Runtime 270 seconds [ 676.337935][ T25] block nbd2: Possible stuck request ffff8880273e8600: control (read@3072,1024B). Runtime 270 seconds [ 676.416808][T30780] netlink: 'syz.1.7165': attribute type 1 has an invalid length. [ 676.529264][T30780] 8021q: adding VLAN 0 to HW filter on device bond3 [ 676.539511][T30787] netlink: 'syz.0.7166': attribute type 7 has an invalid length. [ 676.589608][T30786] netlink: 'syz.0.7166': attribute type 7 has an invalid length. [ 676.650156][T30786] bridge0: entered promiscuous mode [ 676.671789][T30786] ip6gretap0: entered promiscuous mode [ 676.690816][T30786] debugfs: 'hsr1' already exists in 'hsr' [ 676.706899][T30786] Cannot create hsr debugfs directory [ 676.718135][T30786] hsr1: Slave A (bridge0) is not up; please bring it up to get a fully working HSR network [ 676.751589][T30793] lo: Caught tx_queue_len zero misconfig [ 676.758606][T30793] netem: incorrect gi model size [ 676.767252][T30793] netem: change failed [ 676.782753][T30796] ±ÿ: left promiscuous mode [ 676.816568][T30796] tunl0: left promiscuous mode [ 676.853797][T30796] gre0: left promiscuous mode [ 676.927208][T30796] gretap0: left promiscuous mode [ 676.937528][T30796] bridge3: port 1(erspan0) entered blocking state [ 676.944266][T30796] bridge3: port 1(erspan0) entered forwarding state [ 676.954092][T30796] ip_vti0: left promiscuous mode [ 676.998438][T30796] A link change request failed with some changes committed already. Interface caif0 may have been left with an inconsistent configuration, please check. [ 677.027578][T30817] x_tables: duplicate underflow at hook 1 [ 677.321047][ T5946] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 677.714583][T30857] syzkaller0: entered promiscuous mode [ 677.722584][T30857] syzkaller0: entered allmulticast mode [ 678.363609][ T5898] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 678.527182][T11436] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 679.219566][T30964] openvswitch: netlink: IP tunnel attribute has 137 unknown bytes. [ 679.244187][T30964] __nla_validate_parse: 15 callbacks suppressed [ 679.244211][T30964] netlink: 40 bytes leftover after parsing attributes in process `syz.3.7216'. [ 679.400075][ T5944] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 679.561725][T30983] netlink: 8 bytes leftover after parsing attributes in process `syz.4.7222'. [ 679.606490][T30989] validate_nla: 7 callbacks suppressed [ 679.606515][T30989] netlink: 'syz.1.7224': attribute type 1 has an invalid length. [ 679.804994][T30998] netlink: 4 bytes leftover after parsing attributes in process `syz.2.7229'. [ 679.836699][T31001] tipc: Enabling of bearer rejected, already enabled [ 679.838739][T31000] netlink: 28 bytes leftover after parsing attributes in process `syz.4.7228'. [ 679.867731][T30998] hsr_slave_0: left promiscuous mode [ 679.874623][T31000] netlink: 'syz.4.7228': attribute type 7 has an invalid length. [ 679.886383][T31000] netlink: 16 bytes leftover after parsing attributes in process `syz.4.7228'. [ 679.898436][T30998] hsr_slave_1: left promiscuous mode [ 680.451174][ T5946] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 680.465168][T31039] netlink: 212336 bytes leftover after parsing attributes in process `syz.0.7240'. [ 680.783470][T31055] netlink: 'syz.0.7246': attribute type 10 has an invalid length. [ 680.819498][T31065] netlink: 12 bytes leftover after parsing attributes in process `syz.3.7248'. [ 680.908257][T31068] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 680.934089][T22957] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 680.965633][T22957] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 680.977925][T31068] syzkaller0: entered promiscuous mode [ 680.987386][T31068] syzkaller0: entered allmulticast mode [ 681.020696][T31063] lo speed is unknown, defaulting to 1000 [ 681.027017][T31055] syzkaller0: left promiscuous mode [ 681.038257][T31055] syzkaller0: left allmulticast mode [ 681.088470][T31074] syzkaller0: entered promiscuous mode [ 681.098003][T31074] syzkaller0: entered allmulticast mode [ 681.272028][T31083] vlan3: entered allmulticast mode [ 681.277463][T31083] hsr0: entered allmulticast mode [ 681.282981][T31083] hsr_slave_0: entered allmulticast mode [ 681.288931][T31083] hsr_slave_1: entered allmulticast mode [ 681.447746][T31088] lo speed is unknown, defaulting to 1000 [ 681.473003][T16572] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 681.488821][ T5898] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 681.567077][T16572] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 682.031322][T31113] netlink: 12 bytes leftover after parsing attributes in process `syz.1.7262'. [ 682.050146][ C0] ip6_tunnel: ip6gre1 xmit: Local address not yet configured! [ 682.523604][ T5898] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 682.732103][T31121] netlink: 4 bytes leftover after parsing attributes in process `syz.1.7263'. [ 682.741384][T31121] netlink: 176 bytes leftover after parsing attributes in process `syz.1.7263'. [ 682.851134][T25842] Bluetooth: hci3: command 0x0406 tx timeout [ 683.364807][T31148] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 683.391861][T31148] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 683.410105][T31148] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 683.436339][T31149] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 683.445407][T31149] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 683.566760][ T5946] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 684.281716][T31183] 8021q: adding VLAN 0 to HW filter on device bond3 [ 684.379006][T31189] __nla_validate_parse: 4 callbacks suppressed [ 684.379029][T31189] netlink: 8 bytes leftover after parsing attributes in process `syz.1.7279'. [ 684.412957][T31189] netlink: 7064 bytes leftover after parsing attributes in process `syz.1.7279'. [ 684.425965][T31189] netlink: 'syz.1.7279': attribute type 21 has an invalid length. [ 684.435431][T31189] netlink: 128 bytes leftover after parsing attributes in process `syz.1.7279'. [ 684.455652][T31191] veth0_virt_wifi: default FDB implementation only supports local addresses [ 684.477354][T31189] netlink: 'syz.1.7279': attribute type 5 has an invalid length. [ 684.490764][T31189] netlink: 3 bytes leftover after parsing attributes in process `syz.1.7279'. [ 684.669480][T31198] netlink: 256 bytes leftover after parsing attributes in process `syz.0.7283'. [ 684.755696][T31205] tipc: Failed to remove unknown binding: 66,0,0/2886997007:3901136742/3901136743 [ 684.773616][T31205] tipc: Failed to remove unknown binding: 66,0,0/2886997007:3901136742/3901136743 [ 684.836868][T31208] netlink: 24 bytes leftover after parsing attributes in process `syz.0.7285'. [ 684.875533][T31208] netlink: 24 bytes leftover after parsing attributes in process `syz.0.7285'. [ 684.939277][T31211] netlink: 56 bytes leftover after parsing attributes in process `syz.4.7286'. [ 684.949314][T31211] netlink: 12 bytes leftover after parsing attributes in process `syz.4.7286'. [ 684.959678][T31211] netlink: 31 bytes leftover after parsing attributes in process `syz.4.7286'. [ 684.970708][T31211] netlink: 'syz.4.7286': attribute type 2 has an invalid length. [ 685.541915][T31238] netlink: 'syz.4.7297': attribute type 1 has an invalid length. [ 685.896658][ T1300] ieee802154 phy1 wpan1: encryption failed: -22 [ 685.906235][ T1300] lec:lec_start_xmit: lec0:No lecd attached [ 686.159326][T31272] netlink: 'syz.2.7306': attribute type 16 has an invalid length. [ 686.318392][T31277] erspan0: entered promiscuous mode [ 686.328513][T31277] macvtap1: entered promiscuous mode [ 686.342404][T31277] macvtap1: entered allmulticast mode [ 686.358568][T31277] erspan0: entered allmulticast mode [ 686.681717][ T5946] net_ratelimit: 4 callbacks suppressed [ 686.681737][ T5946] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 686.754123][T31307] syzkaller0: entered promiscuous mode [ 686.768897][T31307] syzkaller0: entered allmulticast mode [ 686.788934][T31308] netlink: 'syz.2.7318': attribute type 1 has an invalid length. [ 686.815352][T31307] netlink: 'syz.3.7317': attribute type 1 has an invalid length. [ 686.850852][T31307] ksmbd: Unknown IPC event: 3, ignore. [ 687.094046][T31328] netlink: 'syz.0.7325': attribute type 1 has an invalid length. [ 687.257613][T31337] netlink: 'syz.3.7327': attribute type 1 has an invalid length. [ 687.280968][T31337] netlink: 'syz.3.7327': attribute type 2 has an invalid length. [ 687.289050][T31342] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 687.298544][ C0] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 687.307923][T31337] netlink: 'syz.3.7327': attribute type 2 has an invalid length. [ 687.331145][T31337] netlink: 'syz.3.7327': attribute type 2 has an invalid length. [ 687.641446][T11436] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 687.722051][ T5898] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 688.088345][T31392] bond0 (unregistering): Released all slaves [ 688.286727][T31408] syzkaller1: tun_chr_ioctl cmd 1074025673 [ 688.299298][T31408] syzkaller1: tun_chr_ioctl cmd 1074025677 [ 688.315083][T31408] syzkaller1: linktype set to 823 [ 688.341412][T31409] syzkaller1: tun_chr_ioctl cmd 1074025677 [ 688.357787][T31409] syzkaller1: linktype set to 823 [ 688.725023][T31432] veth0_macvtap: left promiscuous mode [ 688.761707][ T5946] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 689.156041][T31457] syzkaller0: entered promiscuous mode [ 689.175237][T31457] syzkaller0: entered allmulticast mode [ 689.378847][ T30] audit: type=1107 audit(1775104144.552:9): pid=31470 uid=0 auid=4294967295 ses=4294967295 subj=unconfined msg='Îë÷Õ&Vðô [ 689.378847][ T30] ͨõ„ô7]â*k ¿Ÿ]Å…ù.¬J¬=õ!ñIU77"cµ®NhNëUÝ¥MA' [ 689.438899][T31475] sctp: [Deprecated]: syz.4.7373 (pid 31475) Use of int in max_burst socket option deprecated. [ 689.438899][T31475] Use struct sctp_assoc_value instead [ 689.553334][T31483] ip6tnl0: Caught tx_queue_len zero misconfig [ 689.577422][T31478] syzkaller0: entered promiscuous mode [ 689.636207][T31485] hsr0: tun_chr_ioctl cmd 1074025677 [ 689.648363][T31485] hsr0: linktype set to 823 [ 689.801108][ T5946] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 689.957451][T31506] __nla_validate_parse: 29 callbacks suppressed [ 689.957474][T31506] netlink: 4 bytes leftover after parsing attributes in process `syz.1.7382'. [ 690.069371][T31510] validate_nla: 6 callbacks suppressed [ 690.069392][T31510] netlink: 'syz.0.7386': attribute type 1 has an invalid length. [ 690.087211][T31510] netlink: 4 bytes leftover after parsing attributes in process `syz.0.7386'. [ 690.098445][T31508] syzkaller0: entered promiscuous mode [ 690.105435][T31508] syzkaller0: entered allmulticast mode [ 690.258232][T31510] netlink: 'syz.0.7386': attribute type 1 has an invalid length. [ 690.267157][T31510] netlink: 'syz.0.7386': attribute type 1 has an invalid length. [ 690.606779][T31543] netlink: 8 bytes leftover after parsing attributes in process `syz.1.7395'. [ 690.627809][T31543] workqueue: Failed to create a rescuer kthread for wq "bond5": -EINTR [ 690.686509][ T5885] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 690.843186][ T5944] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 690.888946][T31558] netlink: 'syz.2.7398': attribute type 39 has an invalid length. [ 691.000204][ C0] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 691.011632][ C0] lec0: NETDEV WATCHDOG: CPU: 0: transmit queue 0 timed out 5100 ms [ 691.019688][ C0] lec:lec_tx_timeout: lec0 [ 691.072885][T31564] netlink: 'syz.3.7401': attribute type 11 has an invalid length. [ 691.083248][T31564] netlink: 173856 bytes leftover after parsing attributes in process `syz.3.7401'. [ 691.220592][T31572] netlink: 28 bytes leftover after parsing attributes in process `syz.4.7404'. [ 691.230573][T31568] netlink: 'syz.0.7402': attribute type 25 has an invalid length. [ 691.304958][T31577] netlink: 24 bytes leftover after parsing attributes in process `syz.2.7403'. [ 692.083351][T31613] bond0 (unregistering): Released all slaves [ 692.146145][T31619] batadv1: entered allmulticast mode [ 692.403805][T31638] netlink: 12 bytes leftover after parsing attributes in process `syz.3.7421'. [ 692.435295][T31638] l2tp_ppp: sess 2/0: no socket in recv [ 692.461101][T31641] netlink: 24 bytes leftover after parsing attributes in process `syz.0.7422'. [ 692.801573][T31659] dvmrp8: entered allmulticast mode [ 692.859413][T31667] netlink: 4 bytes leftover after parsing attributes in process `syz.2.7428'. [ 693.004622][T31677] netlink: 12 bytes leftover after parsing attributes in process `syz.2.7430'. [ 693.047189][T31677] Bluetooth: MGMT ver 1.23 [ 693.267975][T31690] l2tp_ppp: sess 2/0: no socket in recv [ 693.530585][T31711] netlink: 'syz.0.7441': attribute type 21 has an invalid length. [ 694.495940][T31775] bond0: (slave lo): enslaved VLAN challenged slave. Adding VLANs will be blocked as long as it is part of bond. [ 694.508618][T31775] bond0: (slave lo): Error: Device can not be enslaved while up [ 694.667667][T31783] bond3: (slave vlan0): Error -34 calling dev_set_mtu [ 695.126253][T31809] net_ratelimit: 1 callbacks suppressed [ 695.126275][T31809] A link change request failed with some changes committed already. Interface bond0 may have been left with an inconsistent configuration, please check. [ 695.471435][T31829] netlink: 'syz.0.7477': attribute type 4 has an invalid length. [ 695.522363][T31829] __nla_validate_parse: 10 callbacks suppressed [ 695.522386][T31829] netlink: 20 bytes leftover after parsing attributes in process `syz.0.7477'. [ 695.566766][T31833] netlink: 64 bytes leftover after parsing attributes in process `syz.2.7478'. [ 695.758337][T31842] netlink: 12 bytes leftover after parsing attributes in process `syz.3.7481'. [ 695.779300][T31842] l2tp_ppp: sess 2/0: no socket in recv [ 695.828622][T31837] netlink: 4 bytes leftover after parsing attributes in process `syz.1.7480'. [ 695.848469][T31837] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 695.897456][T31837] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 695.949023][T31855] netlink: 'syz.3.7485': attribute type 11 has an invalid length. [ 696.125921][T16572] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 696.260511][T31868] IPv6: Can't replace route, no match found [ 696.391794][T31878] netlink: 4 bytes leftover after parsing attributes in process `syz.4.7492'. [ 696.746960][T31895] netlink: 4 bytes leftover after parsing attributes in process `syz.4.7499'. [ 696.788776][T31895] bridge_slave_1: left allmulticast mode [ 696.813174][T31903] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 696.834459][T31904] netlink: 'syz.3.7495': attribute type 16 has an invalid length. [ 696.871890][T31895] bridge_slave_1: left promiscuous mode [ 696.881753][T31904] netlink: 'syz.3.7495': attribute type 17 has an invalid length. [ 696.881759][T31895] bridge0: port 2(bridge_slave_1) entered disabled state [ 696.891863][T31907] netlink: 'syz.2.7501': attribute type 1 has an invalid length. [ 696.929618][T31907] netlink: 96 bytes leftover after parsing attributes in process `syz.2.7501'. [ 696.938980][T31907] netlink: 1 bytes leftover after parsing attributes in process `syz.2.7501'. [ 696.956036][T31895] bridge_slave_0: left allmulticast mode [ 696.958195][T31907] netlink: 'syz.2.7501': attribute type 1 has an invalid length. [ 696.964717][T31895] bridge_slave_0: left promiscuous mode [ 696.981954][T31907] netlink: 618 bytes leftover after parsing attributes in process `syz.2.7501'. [ 696.994523][T31895] bridge0: port 1(bridge_slave_0) entered disabled state [ 697.042155][T31912] netlink: 7 bytes leftover after parsing attributes in process `syz.2.7501'. [ 697.072020][T31904] ip_vti0: left promiscuous mode [ 697.077055][T31904] ip_vti0: left allmulticast mode [ 697.203006][T31904] bridge0: port 2(bridge_slave_1) entered blocking state [ 697.210316][T31904] bridge0: port 2(bridge_slave_1) entered listening state [ 697.217791][T31904] bridge0: port 1(bridge_slave_0) entered blocking state [ 697.225053][T31904] bridge0: port 1(bridge_slave_0) entered listening state [ 697.259309][T31904] 8021q: adding VLAN 0 to HW filter on device .` [ 697.291574][T31904] A link change request failed with some changes committed already. Interface caif0 may have been left with an inconsistent configuration, please check. [ 697.350849][T31924] bridge0: trying to set multicast startup query interval above maximum, setting to 8640000 (86400000ms) [ 698.044154][T15368] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 698.053098][ C1] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 698.079502][T22960] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 698.089191][ C0] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 698.128286][T31957] netlink: 'syz.1.7516': attribute type 1 has an invalid length. [ 698.427675][T31979] ip6t_REJECT: ECHOREPLY is not supported [ 698.452746][T31979] ip6t_REJECT: ECHOREPLY is not supported [ 698.658529][T31992] netlink: 'syz.4.7526': attribute type 4 has an invalid length. [ 698.692007][T31992] openvswitch: netlink: Either Ethernet header or EtherType is required. [ 699.064192][T32013] openvswitch: netlink: Flow set message rejected, Key attribute missing. [ 699.329877][ C0] ip6_tunnel: ip6gre1 xmit: Local address not yet configured! [ 699.342652][T32025] syzkaller1: entered promiscuous mode [ 699.348186][T32025] syzkaller1: entered allmulticast mode [ 699.693012][T32038] netlink: 'syz.3.7541': attribute type 12 has an invalid length. [ 699.734733][T32040] h: entered promiscuous mode [ 699.746895][T32039] syzkaller0: entered promiscuous mode [ 699.761555][T32039] syzkaller0: entered allmulticast mode [ 700.163764][T32063] netlink: 'syz.4.7548': attribute type 8 has an invalid length. [ 700.479078][T32086] openvswitch: netlink: Flow set message rejected, Key attribute missing. [ 700.800732][T32103] bridge0: Device is already in use. [ 700.903975][T32108] netlink: 'syz.0.7564': attribute type 29 has an invalid length. [ 700.920960][T32106] ip6t_REJECT: TCP_RESET illegal for non-tcp [ 700.972510][T32108] netlink: 'syz.0.7564': attribute type 29 has an invalid length. [ 700.984844][T32108] netlink: 'syz.0.7564': attribute type 32 has an invalid length. [ 700.996045][T32108] __nla_validate_parse: 13 callbacks suppressed [ 700.996066][T32108] netlink: 500 bytes leftover after parsing attributes in process `syz.0.7564'. [ 701.153502][T32118] netlink: 76 bytes leftover after parsing attributes in process `syz.1.7566'. [ 701.210423][T32123] netlink: 16 bytes leftover after parsing attributes in process `syz.0.7568'. [ 701.221050][T32118] syzkaller0: entered promiscuous mode [ 701.226591][T32118] syzkaller0: entered allmulticast mode [ 701.270617][T32125] netlink: 'syz.4.7569': attribute type 16 has an invalid length. [ 701.278485][T32125] netlink: 'syz.4.7569': attribute type 3 has an invalid length. [ 701.323350][T32125] netlink: 132 bytes leftover after parsing attributes in process `syz.4.7569'. [ 701.340298][T32118] netlink: 104 bytes leftover after parsing attributes in process `syz.1.7566'. [ 701.409647][T32129] sctp: [Deprecated]: syz.2.7570 (pid 32129) Use of struct sctp_assoc_value in delayed_ack socket option. [ 701.409647][T32129] Use struct sctp_sack_info instead [ 701.592817][T32138] netlink: 20 bytes leftover after parsing attributes in process `syz.4.7573'. [ 701.926357][T32162] netlink: 12 bytes leftover after parsing attributes in process `syz.2.7579'. [ 701.943338][T32159] xt_hashlimit: max too large, truncated to 1048576 [ 701.963454][T32155] A link change request failed with some changes committed already. Interface caif0 may have been left with an inconsistent configuration, please check. [ 702.066662][T32168] openvswitch: netlink: Flow set message rejected, Key attribute missing. [ 702.576419][T32196] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check. [ 702.664476][T32206] syzkaller0: entered promiscuous mode [ 702.673938][T32206] syzkaller0: entered allmulticast mode [ 703.157247][T32240] netlink: 8 bytes leftover after parsing attributes in process `syz.1.7603'. [ 703.167751][T32237] netlink: 'syz.3.7602': attribute type 2 has an invalid length. [ 703.195067][T32238] IPv6: RTM_NEWROUTE with no NLM_F_CREATE or NLM_F_REPLACE [ 703.202410][T32238] IPv6: NLM_F_CREATE should be set when creating new route [ 703.215444][T32237] IPv6: sit5: Disabled Multicast RS [ 703.225363][T32237] sit5: entered allmulticast mode [ 703.259516][T32240] netlink: 4 bytes leftover after parsing attributes in process `syz.1.7603'. [ 703.297676][T32240] netlink: 8 bytes leftover after parsing attributes in process `syz.1.7603'. [ 703.485897][T32257] ipt_REJECT: TCP_RESET invalid for non-tcp [ 703.541674][T32261] .`: entered promiscuous mode [ 703.556757][T32261] bond_slave_0: entered promiscuous mode [ 703.567055][T32261] bond_slave_1: entered promiscuous mode [ 703.738258][T32271] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 703.802501][T32276] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 703.814857][T22960] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 703.824594][ C0] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 703.867296][T32271] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 703.972695][T32276] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 703.992979][T32271] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 704.044047][T32271] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 704.115466][T32286] netlink: 'syz.4.7616': attribute type 3 has an invalid length. [ 704.281465][T32295] netlink: 'syz.0.7619': attribute type 19 has an invalid length. [ 704.298468][T32294] netlink: 'syz.0.7619': attribute type 19 has an invalid length. [ 704.994946][T32301] lec:lec_atm_close: lec0: Shut down! [ 705.080468][ T5946] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 705.088923][ C1] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 705.601389][T32371] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 705.612262][T32371] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 705.621503][T32371] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 705.630299][T32371] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 705.638772][T32371] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 705.648701][T32371] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 705.652889][T32372] tipc: MTU too low for tipc bearer [ 705.657959][T32371] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 705.675515][T32371] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 705.688895][T32371] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 705.697827][T32371] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 706.364582][ T25] block nbd2: Possible stuck request ffff8880273e8000: control (read@0,1024B). Runtime 300 seconds [ 706.378455][ T25] block nbd2: Possible stuck request ffff8880273e8200: control (read@1024,1024B). Runtime 300 seconds [ 706.390075][ T25] block nbd2: Possible stuck request ffff8880273e8400: control (read@2048,1024B). Runtime 300 seconds [ 706.401358][ T25] block nbd2: Possible stuck request ffff8880273e8600: control (read@3072,1024B). Runtime 300 seconds [ 706.681807][T32429] __nla_validate_parse: 72 callbacks suppressed [ 706.681831][T32429] netlink: 8 bytes leftover after parsing attributes in process `syz.2.7660'. [ 706.716486][T32420] netlink: 'syz.3.7659': attribute type 25 has an invalid length. [ 706.724987][T32420] netlink: 4 bytes leftover after parsing attributes in process `syz.3.7659'. [ 706.868975][T32434] netlink: 8 bytes leftover after parsing attributes in process `syz.1.7662'. [ 706.886392][T32434] netlink: 24 bytes leftover after parsing attributes in process `syz.1.7662'. [ 706.938858][T32434] netlink: 8 bytes leftover after parsing attributes in process `syz.1.7662'. [ 706.967503][T32439] netlink: 'syz.4.7663': attribute type 2 has an invalid length. [ 706.982723][T32439] netlink: 100 bytes leftover after parsing attributes in process `syz.4.7663'. [ 706.992388][T32434] netlink: 24 bytes leftover after parsing attributes in process `syz.1.7662'. [ 707.052126][T32443] netlink: 24 bytes leftover after parsing attributes in process `syz.4.7663'. [ 707.062170][T32443] netlink: 24 bytes leftover after parsing attributes in process `syz.4.7663'. [ 707.321899][T32454] netlink: 'syz.1.7666': attribute type 24 has an invalid length. [ 707.723686][T32471] netlink: 28 bytes leftover after parsing attributes in process `syz.2.7670'. [ 707.783195][T32473] netlink: 'syz.3.7671': attribute type 1 has an invalid length. [ 707.928900][T32481] Unsupported ieee802154 address type: 0 [ 708.148109][T32495] netlink: 'syz.2.7679': attribute type 1 has an invalid length. [ 708.246359][T32495] 8021q: adding VLAN 0 to HW filter on device bond0 [ 708.821497][T32486] lec:lec_atm_close: lec0: Shut down! [ 708.933245][T32531] xt_limit: Overflow, try lower: 604147548/4200216962 [ 708.984028][T32531] bond4: entered promiscuous mode [ 708.999697][T32531] 8021q: adding VLAN 0 to HW filter on device bond4 [ 709.099567][T32537] netlink: 'syz.1.7690': attribute type 9 has an invalid length. [ 709.109572][T32537] netlink: 'syz.1.7690': attribute type 6 has an invalid length. [ 709.113480][T32531] 8021q: adding VLAN 0 to HW filter on device bond4 [ 709.138555][T32531] bond4: (slave sit3): The slave device specified does not support setting the MAC address [ 709.167302][T32531] bond4: (slave sit3): Error -95 calling set_mac_address [ 709.276207][T32541] batman_adv: Cannot find parent device. Skipping batadv-on-batadv check for gretap2 [ 709.297344][T32541] gretap2: default qdisc (pfifo_fast) fail, fallback to noqueue [ 709.325723][T32541] gretap2: entered promiscuous mode [ 709.333735][T32541] gretap2: entered allmulticast mode [ 709.996840][T32571] netlink: 'syz.3.7704': attribute type 5 has an invalid length. [ 710.008919][T32572] netlink: 'syz.3.7704': attribute type 5 has an invalid length. [ 710.022437][T32574] netlink: 'syz.4.7703': attribute type 83 has an invalid length. [ 710.063765][T32571] geneve2: entered promiscuous mode [ 710.079377][T32571] geneve2: entered allmulticast mode [ 710.100611][T22957] netdevsim netdevsim3 netdevsim0: set [1, 1] type 2 family 0 port 256 - 0 [ 710.138848][T22957] netdevsim netdevsim3 netdevsim1: set [1, 1] type 2 family 0 port 256 - 0 [ 710.173966][T22957] netdevsim netdevsim3 netdevsim2: set [1, 1] type 2 family 0 port 256 - 0 [ 710.211785][T22957] netdevsim netdevsim3 netdevsim3: set [1, 1] type 2 family 0 port 256 - 0 [ 710.288942][T32581] 8021q: adding VLAN 0 to HW filter on device bond4 [ 710.359006][T32581] bond4: (slave veth3): Enslaving as an active interface with a down link [ 710.416110][T32587] 8021q: adding VLAN 0 to HW filter on device batadv1 [ 710.496172][T32587] bond4: (slave batadv1): dev_set_mac_address on slave failed! ALB mode requires that the base driver support setting the hw address also when the network device's interface is open [ 710.679111][T32557] syzkaller0: entered promiscuous mode [ 710.688625][T32557] syzkaller0: entered allmulticast mode [ 712.131493][T22956] net_ratelimit: 14 callbacks suppressed [ 712.131517][T22956] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 712.148221][ T5946] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 712.158669][T16572] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 712.759877][ C1] bridge0: port 1(bridge_slave_0) entered learning state [ 712.767228][ C1] bridge0: port 2(bridge_slave_1) entered learning state [ 712.830078][T32556] lec:lec_atm_close: lec0: Shut down! [ 712.961978][T32644] validate_nla: 1 callbacks suppressed [ 712.961998][T32644] netlink: 'syz.4.7721': attribute type 10 has an invalid length. [ 712.988465][T32644] team0: Device ipvlan1 failed to register rx_handler [ 713.056613][T32651] __nla_validate_parse: 12 callbacks suppressed [ 713.056634][T32651] netlink: 212368 bytes leftover after parsing attributes in process `syz.1.7724'. [ 713.232539][T32660] netlink: 'syz.4.7726': attribute type 21 has an invalid length. [ 713.252263][T32660] netlink: 'syz.4.7726': attribute type 1 has an invalid length. [ 713.376360][T32669] netlink: 36 bytes leftover after parsing attributes in process `syz.2.7730'. [ 713.507272][T32678] netlink: 'syz.4.7732': attribute type 39 has an invalid length. [ 713.619482][T32678] hsr_slave_1 (unregistering): left promiscuous mode [ 713.652524][T32686] netlink: 'syz.2.7735': attribute type 2 has an invalid length. [ 713.661016][T32686] netlink: 119 bytes leftover after parsing attributes in process `syz.2.7735'. [ 713.713817][T32690] netlink: 28 bytes leftover after parsing attributes in process `syz.2.7735'. [ 713.803878][T32690] netlink: 28 bytes leftover after parsing attributes in process `syz.2.7735'. [ 713.866421][T32689] netlink: 'syz.0.7736': attribute type 2 has an invalid length. [ 713.883405][T32682] netlink: 8 bytes leftover after parsing attributes in process `syz.4.7732'. [ 713.907593][T32690] erspan0: entered promiscuous mode [ 713.920716][T32690] gretap0: entered promiscuous mode [ 713.948536][T32690] debugfs: 'hsr0' already exists in 'hsr' [ 713.987993][T32690] Cannot create hsr debugfs directory [ 714.042639][T22957] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 714.051694][ C0] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 714.576069][T32727] netlink: 24 bytes leftover after parsing attributes in process `syz.2.7744'. [ 714.619493][T32727] team0: Device gtp0 is up. Set it down before adding it as a team port [ 714.933563][T32707] lec:lec_atm_close: lec0: Shut down! [ 715.172683][T32749] netlink: 'syz.1.7750': attribute type 1 has an invalid length. [ 715.188460][T32749] netlink: 544 bytes leftover after parsing attributes in process `syz.1.7750'. [ 715.379421][T32763] bond1: (slave lo): Releasing backup interface [ 715.389148][T32763] bond1: (slave lo): last VLAN challenged slave left bond - VLAN blocking is removed [ 715.470402][T32763] bridge_slave_0: left promiscuous mode [ 715.476451][T32763] bridge0: port 1(bridge_slave_0) entered disabled state [ 715.528089][T32763] bridge_slave_1: left allmulticast mode [ 715.544189][T32763] bridge_slave_1: left promiscuous mode [ 715.554534][T32763] bridge0: port 2(bridge_slave_1) entered disabled state [ 715.570248][ T303] nci: __nci_request: wait_for_completion_interruptible_timeout failed -512 [ 715.589700][T32763] .`: (slave bond_slave_0): Releasing backup interface [ 715.606378][T32763] bond_slave_0: left promiscuous mode [ 715.616304][ T307] nci: __nci_request: wait_for_completion_interruptible_timeout failed -512 [ 715.635183][T32763] .`: (slave bond_slave_1): Releasing backup interface [ 715.652986][T32763] bond_slave_1: left promiscuous mode [ 715.667456][T32763] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 715.675703][T32763] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 715.697174][T32763] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 715.705422][T32763] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 715.732220][T32763] A link change request failed with some changes committed already. Interface hsr_slave_0 may have been left with an inconsistent configuration, please check. [ 716.052919][ T335] netlink: 12 bytes leftover after parsing attributes in process `syz.4.7763'. [ 716.083092][ T336] netlink: 12 bytes leftover after parsing attributes in process `syz.4.7763'. [ 716.115727][ T335] xfrm1: entered promiscuous mode [ 716.151147][ T335] xfrm1: entered allmulticast mode [ 716.423612][ T362] x_tables: duplicate underflow at hook 2 [ 716.488505][ T364] batman_adv: Cannot find parent device. Skipping batadv-on-batadv check for ip6erspan0 [ 716.532414][ T373] IPv6: NLM_F_CREATE should be specified when creating new route [ 716.555884][ T373] netlink: 'syz.3.7770': attribute type 1 has an invalid length. [ 716.587422][ T376] veth0: entered promiscuous mode [ 716.603197][T11436] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 716.609249][ T375] veth0: left promiscuous mode [ 717.134058][ T413] xt_CONNSECMARK: invalid mode: 0 [ 717.217138][ T419] x_tables: duplicate entry at hook 3 [ 717.383807][ T428] FAULT_INJECTION: forcing a failure. [ 717.383807][ T428] name failslab, interval 1, probability 0, space 0, times 0 [ 717.413068][ T428] CPU: 0 UID: 0 PID: 428 Comm: syz.0.7794 Not tainted syzkaller #0 PREEMPT(full) [ 717.413098][ T428] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 03/18/2026 [ 717.413111][ T428] Call Trace: [ 717.413120][ T428] [ 717.413129][ T428] dump_stack_lvl+0xe8/0x150 [ 717.413162][ T428] should_fail_ex+0x412/0x560 [ 717.413216][ T428] should_failslab+0xa8/0x100 [ 717.413246][ T428] __kmalloc_cache_noprof+0x88/0x660 [ 717.413271][ T428] ? net_generic+0x1e/0x240 [ 717.413303][ T428] ? ila_xlat_nl_dump_start+0xcf/0x180 [ 717.413331][ T428] ila_xlat_nl_dump_start+0xcf/0x180 [ 717.413355][ T428] genl_start+0x4c3/0x6c0 [ 717.413391][ T428] __netlink_dump_start+0x469/0x7e0 [ 717.413433][ T428] genl_family_rcv_msg_dumpit+0x213/0x310 [ 717.413465][ T428] ? __pfx_genl_family_rcv_msg_dumpit+0x10/0x10 [ 717.413490][ T428] ? genl_get_cmd+0x7f4/0x930 [ 717.413519][ T428] ? __pfx_stack_trace_consume_entry+0x10/0x10 [ 717.413544][ T428] ? __pfx_genl_start+0x10/0x10 [ 717.413567][ T428] ? __pfx_genl_dumpit+0x10/0x10 [ 717.413590][ T428] ? __pfx_genl_done+0x10/0x10 [ 717.413622][ T428] ? __lock_acquire+0x6b5/0x2cf0 [ 717.413657][ T428] genl_rcv_msg+0x5e8/0x7a0 [ 717.413699][ T428] ? __pfx_genl_rcv_msg+0x10/0x10 [ 717.413724][ T428] ? __pfx_ila_xlat_nl_dump_start+0x10/0x10 [ 717.413744][ T428] ? __pfx_ila_xlat_nl_dump+0x10/0x10 [ 717.413762][ T428] ? __pfx_ila_xlat_nl_dump_done+0x10/0x10 [ 717.413784][ T428] ? __lock_acquire+0x6b5/0x2cf0 [ 717.413824][ T428] netlink_rcv_skb+0x232/0x4b0 [ 717.413858][ T428] ? __pfx_genl_rcv_msg+0x10/0x10 [ 717.413886][ T428] ? __pfx_netlink_rcv_skb+0x10/0x10 [ 717.413939][ T428] ? down_read+0x272/0x2e0 [ 717.413966][ T428] ? genl_rcv+0xd/0x40 [ 717.413994][ T428] genl_rcv+0x28/0x40 [ 717.414017][ T428] netlink_unicast+0x80f/0x9b0 [ 717.414057][ T428] ? __pfx_netlink_unicast+0x10/0x10 [ 717.414090][ T428] ? netlink_sendmsg+0x650/0xb40 [ 717.414109][ T428] ? skb_put+0x11b/0x210 [ 717.414136][ T428] netlink_sendmsg+0x813/0xb40 [ 717.414168][ T428] ? __pfx_netlink_sendmsg+0x10/0x10 [ 717.414194][ T428] ? aa_sock_msg_perm+0xf1/0x1b0 [ 717.414228][ T428] ? bpf_lsm_socket_sendmsg+0x9/0x20 [ 717.414257][ T428] ____sys_sendmsg+0x972/0x9f0 [ 717.414294][ T428] ? __pfx_____sys_sendmsg+0x10/0x10 [ 717.414331][ T428] ? import_iovec+0x73/0xa0 [ 717.414359][ T428] ___sys_sendmsg+0x2a5/0x360 [ 717.414392][ T428] ? __pfx____sys_sendmsg+0x10/0x10 [ 717.414460][ T428] ? __fget_files+0x2a/0x420 [ 717.414492][ T428] ? __fget_files+0x3a0/0x420 [ 717.414537][ T428] __x64_sys_sendmsg+0x1bd/0x2a0 [ 717.414567][ T428] ? __pfx___x64_sys_sendmsg+0x10/0x10 [ 717.414605][ T428] ? __pfx_ksys_write+0x10/0x10 [ 717.414643][ T428] do_syscall_64+0x14d/0xf80 [ 717.414668][ T428] ? trace_irq_disable+0x3b/0x150 [ 717.414693][ T428] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 717.414715][ T428] ? clear_bhb_loop+0x40/0x90 [ 717.414742][ T428] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 717.414764][ T428] RIP: 0033:0x7f114879c819 [ 717.414784][ T428] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 717.414804][ T428] RSP: 002b:00007f1149719028 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 717.414828][ T428] RAX: ffffffffffffffda RBX: 00007f1148a15fa0 RCX: 00007f114879c819 [ 717.414844][ T428] RDX: 0000000000000084 RSI: 00002000000001c0 RDI: 0000000000000004 [ 717.414859][ T428] RBP: 00007f1149719090 R08: 0000000000000000 R09: 0000000000000000 [ 717.414873][ T428] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 717.414886][ T428] R13: 00007f1148a16038 R14: 00007f1148a15fa0 R15: 00007ffea49a99b8 [ 717.414923][ T428] [ 717.842123][ T433] team_slave_1: Caught tx_queue_len zero misconfig [ 718.140227][ T439] netlink: 'syz.0.7798': attribute type 1 has an invalid length. [ 718.148953][ T439] __nla_validate_parse: 7 callbacks suppressed [ 718.148973][ T439] netlink: 224 bytes leftover after parsing attributes in process `syz.0.7798'. [ 718.264506][ T454] openvswitch: netlink: Flow set message rejected, Key attribute missing. [ 718.463142][ T465] netlink: 8 bytes leftover after parsing attributes in process `syz.1.7803'. [ 718.919606][ T503] netlink: 'syz.0.7814': attribute type 1 has an invalid length. [ 718.941915][ T503] netlink: 'syz.0.7814': attribute type 2 has an invalid length. [ 718.951008][ T503] netlink: 'syz.0.7814': attribute type 1 has an invalid length. [ 718.970341][ T503] netlink: 16 bytes leftover after parsing attributes in process `syz.0.7814'. [ 719.075576][ T512] netlink: 'syz.1.7816': attribute type 1 has an invalid length. [ 719.099515][ T512] netlink: 232 bytes leftover after parsing attributes in process `syz.1.7816'. [ 719.150523][ T512] IPVS: Unknown mcast interface: pim6reg [ 719.167058][T15368] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 719.175606][ C1] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 719.262661][ T515] netlink: 212356 bytes leftover after parsing attributes in process `syz.0.7817'. [ 719.584863][ T530] syzkaller0: entered promiscuous mode [ 719.631339][ T530] syzkaller0: entered allmulticast mode [ 719.667096][ T532] netlink: 212 bytes leftover after parsing attributes in process `syz.4.7823'. [ 719.758667][ T537] lec:lec_atm_send: lec0: Unknown message type 1768777989 [ 719.767713][ T538] netlink: 8 bytes leftover after parsing attributes in process `syz.3.7824'. [ 719.800833][T22960] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 719.809191][ C1] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 719.877543][ T538] netlink: 65039 bytes leftover after parsing attributes in process `syz.3.7824'. [ 719.894974][ T534] netlink: 65039 bytes leftover after parsing attributes in process `syz.3.7824'. [ 719.923400][ T514] lec:lec_atm_close: lec0: Shut down! [ 720.148318][ T555] openvswitch: netlink: Flow set message rejected, Key attribute missing. [ 720.184286][ T557] netlink: 'syz.3.7830': attribute type 25 has an invalid length. [ 720.212602][ T557] netlink: 28 bytes leftover after parsing attributes in process `syz.3.7830'. [ 720.246314][ T560] xt_hashlimit: Unknown mode mask C4, kernel too old? [ 720.301965][T11435] IPVS: starting estimator thread 0... [ 720.375479][ T571] IPVS: sh: FWM 3 0x00000003 - no destination available [ 720.401529][ T567] IPVS: using max 29 ests per chain, 69600 per kthread [ 720.562499][ T581] netlink: 'syz.1.7838': attribute type 2 has an invalid length. [ 720.584232][ T583] netlink: 'syz.1.7838': attribute type 2 has an invalid length. [ 720.707172][ T593] netlink: 'syz.0.7840': attribute type 39 has an invalid length. [ 720.766120][ T593] hsr_slave_1 (unregistering): left promiscuous mode [ 721.172799][ T618] netlink: 'syz.2.7848': attribute type 1 has an invalid length. [ 721.208134][ T618] bond5: entered promiscuous mode [ 721.215038][ T618] bond5: entered allmulticast mode [ 721.221387][ T618] 8021q: adding VLAN 0 to HW filter on device bond5 [ 721.255134][ T618] macvlan4: entered promiscuous mode [ 721.261442][ T618] macvlan4: entered allmulticast mode [ 721.268478][ T618] 8021q: adding VLAN 0 to HW filter on device macvlan4 [ 721.361615][ T622] 8021q: VLANs not supported on sit0 [ 721.497794][ T628] bridge_slave_1: entered allmulticast mode [ 721.600898][ T630] bond0: entered promiscuous mode [ 721.606231][ T630] bond0: entered allmulticast mode [ 721.612666][ T630] 8021q: adding VLAN 0 to HW filter on device bond0 [ 721.666554][ T636] bond0: (slave rose0): Error: Device is in use and cannot be enslaved [ 721.692937][ T639] bond0: (slave rose0): Error: Device is in use and cannot be enslaved [ 721.950617][ T653] openvswitch: netlink: IP tunnel TTL not specified. [ 721.959551][ T653] openvswitch: netlink: IP tunnel TTL not specified. [ 722.130498][ T664] openvswitch: netlink: Flow set message rejected, Key attribute missing. [ 722.246354][ T662] syzkaller1: entered promiscuous mode [ 722.255351][ T662] syzkaller1: entered allmulticast mode [ 723.397761][ T698] nci: __nci_request: wait_for_completion_interruptible_timeout failed -512 [ 723.412615][ T741] __nla_validate_parse: 14 callbacks suppressed [ 723.412654][ T741] netlink: 20 bytes leftover after parsing attributes in process `syz.1.7881'. [ 723.679207][ T746] macvtap2: entered promiscuous mode [ 723.688282][ T746] macvtap2: entered allmulticast mode [ 723.713614][ T746] veth1_vlan: entered allmulticast mode [ 723.736762][ T754] macvtap3: entered promiscuous mode [ 723.745380][ T754] macvtap3: entered allmulticast mode [ 724.346451][ T772] lo: Caught tx_queue_len zero misconfig [ 724.404217][ T773] syzkaller1: entered promiscuous mode [ 724.427147][ T773] syzkaller1: entered allmulticast mode [ 724.448444][ T784] netlink: 12 bytes leftover after parsing attributes in process `syz.4.7892'. [ 724.764033][ T800] netlink: 44 bytes leftover after parsing attributes in process `syz.3.7897'. [ 724.894648][ T803] sctp: [Deprecated]: syz.0.7898 (pid 803) Use of struct sctp_assoc_value in delayed_ack socket option. [ 724.894648][ T803] Use struct sctp_sack_info instead [ 724.925900][ T5946] syz2: Port: 1 Link DOWN [ 724.948596][ T813] openvswitch: netlink: IP tunnel TTL not specified. [ 725.000399][ C0] lec0: NETDEV WATCHDOG: CPU: 0: transmit queue 0 timed out 5080 ms [ 725.008507][ C0] lec:lec_tx_timeout: lec0 [ 725.131962][ T822] validate_nla: 7 callbacks suppressed [ 725.131984][ T822] netlink: 'syz.2.7902': attribute type 2 has an invalid length. [ 725.260756][ T825] netlink: 112 bytes leftover after parsing attributes in process `syz.2.7904'. [ 725.296629][ T827] netlink: 12 bytes leftover after parsing attributes in process `syz.0.7905'. [ 725.333437][ T831] netlink: 'syz.1.7907': attribute type 33 has an invalid length. [ 725.399863][ T829] tipc: Invalid UDP bearer configuration [ 725.400013][ T829] tipc: Enabling of bearer rejected, failed to enable media [ 725.442353][ T836] s5ÿÿø: renamed from vlan1 (while UP) [ 725.560686][T22960] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 725.569111][ C1] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 725.893975][ T860] netlink: 12 bytes leftover after parsing attributes in process `syz.4.7914'. [ 726.084176][ T866] netem: incorrect gi model size [ 726.089626][ T866] netem: change failed [ 726.168436][ T866] openvswitch: netlink: Multiple metadata blocks provided [ 726.192885][ T868] netlink: 24 bytes leftover after parsing attributes in process `syz.1.7917'. [ 726.213049][ T5885] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 726.484077][ T881] netlink: 4 bytes leftover after parsing attributes in process `syz.4.7921'. [ 726.573872][ T888] netlink: 14 bytes leftover after parsing attributes in process `syz.0.7924'. [ 726.692049][ T898] netlink: 'syz.0.7927': attribute type 32 has an invalid length. [ 726.701851][ T898] netlink: 8 bytes leftover after parsing attributes in process `syz.0.7927'. [ 726.744699][ T898] bond5: option coupled_control: invalid value (192) [ 726.766565][ T898] bond5 (unregistering): Released all slaves [ 726.985325][ T915] netlink: 'syz.2.7929': attribute type 1 has an invalid length. [ 727.164143][ T934] team0: No ports can be present during mode change [ 727.384198][ T951] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 727.533384][ T956] netdevsim netdevsim2: Direct firmware load for .. @ failed with error -2 [ 727.546824][ T956] netdevsim netdevsim2: Falling back to sysfs fallback for: .. @ [ 727.598778][ T957] xt_policy: output policy not valid in PREROUTING and INPUT [ 727.718656][ T962] sctp: [Deprecated]: syz.3.7943 (pid 962) Use of int in max_burst socket option. [ 727.718656][ T962] Use struct sctp_assoc_value instead [ 727.780659][ C0] vxcan0: j1939_tp_rxtimer: 0xffff888031e61400: rx timeout, send abort [ 727.790660][ C0] vxcan0: j1939_xtp_rx_abort_one: 0xffff888031e61400: 0x00000: (3) A timeout occurred and this is the connection abort to close the session. [ 727.940442][ T968] syzkaller1: entered promiscuous mode [ 727.957701][ T968] syzkaller1: entered allmulticast mode [ 727.967659][ T972] veth0: entered promiscuous mode [ 728.035182][ T971] veth0: left promiscuous mode [ 728.531841][ T997] __nla_validate_parse: 11 callbacks suppressed [ 728.531863][ T997] netlink: 8 bytes leftover after parsing attributes in process `syz.1.7954'. [ 728.565397][ T1004] veth0: entered promiscuous mode [ 728.627097][ T1004] netlink: 4 bytes leftover after parsing attributes in process `syz.0.7956'. [ 728.628238][ T1013] netlink: 32 bytes leftover after parsing attributes in process `syz.3.7958'. [ 728.811595][ T1025] netlink: 24 bytes leftover after parsing attributes in process `syz.4.7960'. [ 728.849016][ T1028] netlink: 8 bytes leftover after parsing attributes in process `syz.2.7961'. [ 728.896025][ T1028] 8021q: adding VLAN 0 to HW filter on device bond6 [ 729.142048][ T1039] netlink: 12 bytes leftover after parsing attributes in process `syz.0.7964'. [ 729.533123][ T1072] openvswitch: netlink: Flow set message rejected, Key attribute missing. [ 729.715926][ T1084] syzkaller0: entered promiscuous mode [ 729.726809][ T1084] syzkaller0: entered allmulticast mode [ 730.040305][ T31] INFO: task udevd:20313 blocked for more than 143 seconds. [ 730.049422][ T31] Not tainted syzkaller #0 [ 730.072684][ T31] "echo 0 > /proc/sys/kernel/hung_task_timeout_secs" disables this message. [ 730.088560][ T31] task:udevd state:D stack:22456 pid:20313 tgid:20313 ppid:5192 task_flags:0x400140 flags:0x00080002 [ 730.102679][ T31] Call Trace: [ 730.106092][ T31] [ 730.109130][ T31] __schedule+0x15dd/0x52d0 [ 730.114570][ T31] ? __lock_acquire+0x6b5/0x2cf0 [ 730.119673][ T31] ? __pfx___schedule+0x10/0x10 [ 730.125518][ T31] ? schedule+0x90/0x360 [ 730.131371][ T31] schedule+0x164/0x360 [ 730.135710][ T31] io_schedule+0x7f/0xd0 [ 730.140791][ T31] folio_wait_bit_common+0x6d8/0xbc0 [ 730.146282][ T31] ? __pfx_folio_wait_bit_common+0x10/0x10 [ 730.153110][ T31] ? __pfx_wake_page_function+0x10/0x10 [ 730.158843][ T31] ? __filemap_get_folio_mpol+0x7a9/0xb00 [ 730.167149][ T31] do_read_cache_folio+0x1ad/0x590 [ 730.173048][ T31] ? __pfx_blkdev_read_folio+0x10/0x10 [ 730.178582][ T31] read_part_sector+0xb6/0x2b0 [ 730.184242][ T31] adfspart_check_POWERTEC+0x92/0xef0 [ 730.189694][ T31] ? __pfx_adfspart_check_ICS+0x10/0x10 [ 730.196978][ T31] ? __pfx_adfspart_check_POWERTEC+0x10/0x10 [ 730.205551][ T31] bdev_disk_changed+0x7ba/0x1550 [ 730.211919][ T31] ? bdev_open+0xe0/0xd30 [ 730.216331][ T31] ? __pfx_bdev_disk_changed+0x10/0x10 [ 730.223769][T23685] lec:lec_start_xmit: lec0:No lecd attached [ 730.230465][ T31] blkdev_get_whole+0x380/0x510 [ 730.235396][ T31] bdev_open+0x31e/0xd30 [ 730.239702][ T31] blkdev_open+0x470/0x610 [ 730.244927][ T31] ? __pfx_blkdev_open+0x10/0x10 [ 730.253639][ T31] do_dentry_open+0x785/0x14e0 [ 730.258638][ T31] vfs_open+0x3b/0x340 [ 730.264728][ T31] ? path_openat+0x2df0/0x3860 [ 730.269693][ T31] path_openat+0x2e08/0x3860 [ 730.275075][ T31] ? __pfx_stack_trace_save+0x10/0x10 [ 730.281741][ T31] ? stack_depot_save_flags+0x33/0x810 [ 730.287464][ T31] ? __pfx_path_openat+0x10/0x10 [ 730.293853][ T31] ? __x64_sys_openat+0x138/0x170 [ 730.299027][ T31] ? do_syscall_64+0x14d/0xf80 [ 730.305335][ T31] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 730.311614][ T31] ? __lock_acquire+0x6b5/0x2cf0 [ 730.316625][ T31] do_file_open+0x23e/0x4a0 [ 730.322690][ T31] ? __pfx_do_file_open+0x10/0x10 [ 730.327775][ T31] ? _raw_spin_unlock+0x28/0x50 [ 730.333405][ T31] ? alloc_fd+0x64b/0x6c0 [ 730.337791][ T31] do_sys_openat2+0x113/0x200 [ 730.343150][ T31] ? __pfx___x64_sys_recvmsg+0x10/0x10 [ 730.348683][ T31] ? __pfx_do_sys_openat2+0x10/0x10 [ 730.378772][ T31] ? rcu_is_watching+0x15/0xb0 [ 730.395463][ T31] __x64_sys_openat+0x138/0x170 [ 730.401083][ T31] do_syscall_64+0x14d/0xf80 [ 730.405804][ T31] ? trace_irq_disable+0x3b/0x150 [ 730.412603][ T31] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 730.418817][ T31] ? clear_bhb_loop+0x40/0x90 [ 730.424183][ T31] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 730.431010][ T31] RIP: 0033:0x7efd0c6a7407 [ 730.435485][ T31] RSP: 002b:00007fffedc7e2f0 EFLAGS: 00000202 ORIG_RAX: 0000000000000101 [ 730.445869][ T31] RAX: ffffffffffffffda RBX: 00007efd0ce90880 RCX: 00007efd0c6a7407 [ 730.454675][ T31] RDX: 00000000000a0800 RSI: 0000565492ccf480 RDI: ffffffffffffff9c [ 730.463613][ T31] RBP: 0000565492cce910 R08: 0000000000000000 R09: 0000000000000000 [ 730.474350][ T31] R10: 0000000000000000 R11: 0000000000000202 R12: 0000565492ce3830 [ 730.483970][ T31] R13: 0000565492cdc190 R14: 0000000000000000 R15: 0000565492ce3830 [ 730.492749][ T31] [ 730.502554][ T31] [ 730.502554][ T31] Showing all locks held in the system: [ 730.514263][ T31] 1 lock held by khungtaskd/31: [ 730.519433][ T31] #0: ffffffff8e75e620 (rcu_read_lock){....}-{1:3}, at: debug_show_all_locks+0x2e/0x180 [ 730.532107][ T31] 2 locks held by getty/5580: [ 730.537010][ T31] #0: ffff8880328e60a0 (&tty->ldisc_sem){++++}-{0:0}, at: tty_ldisc_ref_wait+0x25/0x70 [ 730.551498][ T31] #1: ffffc9000332b2f0 (&ldata->atomic_read_lock){+.+.}-{4:4}, at: n_tty_read+0x45c/0x13c0 [ 730.562097][ T31] 1 lock held by udevd/20313: [ 730.566799][ T31] #0: ffff88802730f358 (&disk->open_mutex){+.+.}-{4:4}, at: bdev_open+0xe0/0xd30 [ 730.578429][ T31] 4 locks held by kworker/u8:25/22049: [ 730.584124][ T31] 3 locks held by kworker/u8:35/22960: [ 730.590029][ T31] #0: ffff88813fe4c148 ((wq_completion)events_unbound){+.+.}-{0:0}, at: process_scheduled_works+0xa52/0x18c0 [ 730.602163][ T31] #1: ffffc9000f057c40 ((linkwatch_work).work){+.+.}-{0:0}, at: process_scheduled_works+0xa8d/0x18c0 [ 730.615383][ T31] #2: ffffffff8fbcf1c8 (rtnl_mutex){+.+.}-{4:4}, at: linkwatch_event+0xe/0x60 [ 730.624905][ T31] 2 locks held by syz.1.7973/1074: [ 730.630369][ T31] #0: ffffffff8fbcf1c8 (rtnl_mutex){+.+.}-{4:4}, at: tun_chr_close+0x3e/0x1c0 [ 730.639495][ T31] #1: ffffffff8e764938 (rcu_state.exp_mutex){+.+.}-{4:4}, at: synchronize_rcu_expedited+0x2d0/0x770 [ 730.651430][ T31] 1 lock held by syz.3.7975/1088: [ 730.656503][ T31] #0: ffffffff8fbcf1c8 (rtnl_mutex){+.+.}-{4:4}, at: rtnetlink_rcv_msg+0x722/0xbe0 [ 730.666203][ T31] 1 lock held by syz.4.7976/1091: [ 730.671555][ T31] #0: ffffffff8fbcf1c8 (rtnl_mutex){+.+.}-{4:4}, at: __tun_chr_ioctl+0x3bc/0x1e10 [ 730.684548][ T31] [ 730.686931][ T31] ============================================= [ 730.686931][ T31] [ 730.697707][ T31] NMI backtrace for cpu 1 [ 730.697728][ T31] CPU: 1 UID: 0 PID: 31 Comm: khungtaskd Not tainted syzkaller #0 PREEMPT(full) [ 730.697750][ T31] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 03/18/2026 [ 730.697763][ T31] Call Trace: [ 730.697770][ T31] [ 730.697779][ T31] dump_stack_lvl+0xe8/0x150 [ 730.697814][ T31] nmi_cpu_backtrace+0x274/0x2d0 [ 730.697846][ T31] ? __pfx_nmi_raise_cpu_backtrace+0x10/0x10 [ 730.697875][ T31] nmi_trigger_cpumask_backtrace+0x17a/0x300 [ 730.697908][ T31] sys_info+0x135/0x170 [ 730.697934][ T31] watchdog+0xfd9/0x1030 [ 730.697958][ T31] ? watchdog+0x21a/0x1030 [ 730.697984][ T31] kthread+0x388/0x470 [ 730.698003][ T31] ? __pfx_watchdog+0x10/0x10 [ 730.698019][ T31] ? __pfx_kthread+0x10/0x10 [ 730.698040][ T31] ret_from_fork+0x51e/0xb90 [ 730.698069][ T31] ? __pfx_ret_from_fork+0x10/0x10 [ 730.698094][ T31] ? __switch_to+0xc7d/0x1450 [ 730.698120][ T31] ? __pfx_kthread+0x10/0x10 [ 730.698141][ T31] ret_from_fork_asm+0x1a/0x30 [ 730.698187][ T31] [ 730.698195][ T31] Sending NMI from CPU 1 to CPUs 0: [ 730.810828][ C0] NMI backtrace for cpu 0 [ 730.810846][ C0] CPU: 0 UID: 0 PID: 0 Comm: swapper/0 Not tainted syzkaller #0 PREEMPT(full) [ 730.810866][ C0] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 03/18/2026 [ 730.810878][ C0] RIP: 0010:fq_pie_timer+0x28d/0x5b0 [ 730.810909][ C0] Code: c7 44 48 89 f8 48 c1 e8 03 0f b6 04 28 84 c0 75 48 4d 01 f7 41 8b 57 44 48 8b 7c 24 38 4c 89 fe e8 e8 67 ff ff 41 0f b6 04 2c <84> c0 75 3e 4c 8b 34 24 41 ff 06 41 83 ed 01 72 4a e8 fd 10 0f f8 [ 730.810926][ C0] RSP: 0018:ffffc90000007c28 EFLAGS: 00000296 [ 730.810943][ C0] RAX: 0000000000000000 RBX: ffff888077f47290 RCX: ffffffff8e494ec0 [ 730.810956][ C0] RDX: 0000000000000100 RSI: 0000000000000000 RDI: 0000000000000000 [ 730.810967][ C0] RBP: dffffc0000000000 R08: 0000000000000003 R09: 0000000000000004 [ 730.810979][ C0] R10: dffffc0000000000 R11: fffff52000000f74 R12: 1ffff1100efe8e5d [ 730.810992][ C0] R13: 0000000000000283 R14: 0000000000256640 R15: ffffc90017a56640 [ 730.811005][ C0] FS: 0000000000000000(0000) GS:ffff88812545a000(0000) knlGS:0000000000000000 [ 730.811020][ C0] CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033 [ 730.811032][ C0] CR2: 00007f53f47e9f00 CR3: 000000005aa18000 CR4: 00000000003526f0 [ 730.811048][ C0] Call Trace: [ 730.811056][ C0] [ 730.811066][ C0] ? fq_pie_timer+0x4d/0x5b0 [ 730.811096][ C0] call_timer_fn+0x192/0x640 [ 730.811120][ C0] ? __pfx_fq_pie_timer+0x10/0x10 [ 730.811144][ C0] ? call_timer_fn+0xd4/0x640 [ 730.811167][ C0] ? __pfx_call_timer_fn+0x10/0x10 [ 730.811196][ C0] ? _raw_spin_unlock_irq+0x23/0x50 [ 730.811215][ C0] ? __pfx_fq_pie_timer+0x10/0x10 [ 730.811241][ C0] __run_timer_base+0x652/0x8b0 [ 730.811263][ C0] ? ktime_get+0x45/0x200 [ 730.811288][ C0] ? __pfx___run_timer_base+0x10/0x10 [ 730.811314][ C0] ? sched_clock_cpu+0x74/0x440 [ 730.811342][ C0] run_timer_softirq+0xb7/0x170 [ 730.811364][ C0] handle_softirqs+0x22a/0x870 [ 730.811391][ C0] ? __irq_exit_rcu+0x5f/0x150 [ 730.811420][ C0] __irq_exit_rcu+0x5f/0x150 [ 730.811443][ C0] irq_exit_rcu+0x9/0x30 [ 730.811465][ C0] sysvec_apic_timer_interrupt+0xa6/0xc0 [ 730.811487][ C0] [ 730.811503][ C0] [ 730.811510][ C0] asm_sysvec_apic_timer_interrupt+0x1a/0x20 [ 730.811530][ C0] RIP: 0010:finish_task_switch+0x245/0x920 [ 730.811552][ C0] Code: 00 00 48 85 db 0f 85 e8 01 00 00 0f 1f 44 00 00 4c 8b 75 d0 49 83 c4 48 4c 89 e7 e8 d5 a5 1c 0a e8 70 8d 38 00 fb 4c 8b 65 c0 <49> 8d bc 24 80 16 00 00 48 89 f8 48 c1 e8 03 42 0f b6 04 28 84 c0 [ 730.811568][ C0] RSP: 0018:ffffffff8e407b58 EFLAGS: 00000202 [ 730.811583][ C0] RAX: 0000000000200ec7 RBX: 0000000000000000 RCX: 0000000080000001 [ 730.811595][ C0] RDX: 0000000000000000 RSI: ffffffff8def97c4 RDI: ffffffff8c27cb00 [ 730.811607][ C0] RBP: ffffffff8e407bb0 R08: ffffffff9011beb7 R09: 1ffffffff20237d6 [ 730.811621][ C0] R10: dffffc0000000000 R11: fffffbfff20237d7 R12: ffffffff8e494ec0 [ 730.811635][ C0] R13: dffffc0000000000 R14: ffff888078319e80 R15: ffff8880b863b998 [ 730.811660][ C0] ? finish_task_switch+0x240/0x920 [ 730.811686][ C0] __schedule+0x15e5/0x52d0 [ 730.811719][ C0] ? trace_irq_disable+0x3b/0x150 [ 730.811737][ C0] ? __pfx___schedule+0x10/0x10 [ 730.811754][ C0] ? lockdep_hardirqs_on+0x7a/0x110 [ 730.811780][ C0] ? tick_nohz_idle_exit+0x2e1/0x3a0 [ 730.811804][ C0] schedule_idle+0x51/0x90 [ 730.811824][ C0] do_idle+0x58a/0x5f0 [ 730.811852][ C0] ? __pfx_do_idle+0x10/0x10 [ 730.811884][ C0] cpu_startup_entry+0x43/0x60 [ 730.811909][ C0] rest_init+0x2de/0x300 [ 730.811937][ C0] start_kernel+0x385/0x3d0 [ 730.811963][ C0] x86_64_start_reservations+0x24/0x30 [ 730.811982][ C0] x86_64_start_kernel+0x143/0x1c0 [ 730.812001][ C0] common_startup_64+0x13e/0x147 [ 730.812030][ C0] [ 731.188561][ T31] Kernel panic - not syncing: hung_task: blocked tasks [ 731.195475][ T31] CPU: 1 UID: 0 PID: 31 Comm: khungtaskd Not tainted syzkaller #0 PREEMPT(full) [ 731.204628][ T31] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 03/18/2026 [ 731.214738][ T31] Call Trace: [ 731.218061][ T31] [ 731.221032][ T31] vpanic+0x56c/0xa60 [ 731.225069][ T31] ? __pfx___schedule+0x10/0x10 [ 731.229949][ T31] ? __pfx_vpanic+0x10/0x10 [ 731.234470][ T31] ? __pfx_console_unlock+0x10/0x10 [ 731.239688][ T31] panic+0xc5/0xd0 [ 731.243468][ T31] ? __pfx_panic+0x10/0x10 [ 731.247898][ T31] ? preempt_schedule_thunk+0x16/0x30 [ 731.253288][ T31] ? nmi_trigger_cpumask_backtrace+0x2bb/0x300 [ 731.259476][ T31] watchdog+0x1023/0x1030 [ 731.263828][ T31] ? watchdog+0x21a/0x1030 [ 731.268299][ T31] kthread+0x388/0x470 [ 731.272417][ T31] ? __pfx_watchdog+0x10/0x10 [ 731.277137][ T31] ? __pfx_kthread+0x10/0x10 [ 731.281763][ T31] ret_from_fork+0x51e/0xb90 [ 731.286389][ T31] ? __pfx_ret_from_fork+0x10/0x10 [ 731.291559][ T31] ? __switch_to+0xc7d/0x1450 [ 731.296270][ T31] ? __pfx_kthread+0x10/0x10 [ 731.300903][ T31] ret_from_fork_asm+0x1a/0x30 [ 731.305718][ T31] [ 731.308911][ T31] Kernel Offset: disabled [ 731.313243][ T31] Rebooting in 86400 seconds..