last executing test programs: 3m53.695563027s ago: executing program 3 (id=2159): bpf$PROG_LOAD_XDP(0x5, &(0x7f00000001c0)={0xa, 0x2188, &(0x7f0000001300)=@framed={{}, [@func={0x85, 0x0, 0x1, 0x0, 0xfffffffffffffff9}]}, &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0xe}, 0x94) 3m53.468964131s ago: executing program 3 (id=2164): socket$inet6_icmp_raw(0xa, 0x3, 0x3a) r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = socket$inet6_udp(0xa, 0x2, 0x0) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000c80)={'lo\x00'}) sendmsg$nl_route_sched(r0, &(0x7f0000001200)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000040)=@gettaction={0x30, 0x32, 0xf378c23ae291ef24, 0x70bd2a, 0x25dfdbff, {}, [@action_gd=@TCA_ACT_TAB={0x10, 0x1, [{0xc, 0x7, 0x0, 0x0, @TCA_ACT_INDEX={0x8, 0x3, 0x5}}]}, @action_dump_flags=@TCA_ROOT_FLAGS={0xc, 0x2, {0x1}}]}, 0x30}}, 0x0) socket$nl_generic(0x10, 0x3, 0x10) socket$nl_netfilter(0x10, 0x3, 0xc) socket$nl_route(0x10, 0x3, 0x0) socket$nl_route(0x10, 0x3, 0x0) socket$nl_netfilter(0x10, 0x3, 0xc) r2 = socket$inet_udp(0x2, 0x2, 0x0) r3 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r3, &(0x7f0000000680)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000500)=ANY=[@ANYBLOB="380000001800010000000000000000000a000000000000000000000008000400", @ANYRES32=r3, @ANYBLOB="06001500070000000c00168008000100", @ANYRES64=r2], 0x38}}, 0x10) 3m53.155535183s ago: executing program 3 (id=2170): r0 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) pipe(&(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) bind$bt_hci(r1, &(0x7f0000000040)={0x1f, 0xffffffffffffffff, 0x3}, 0x6) r3 = socket$nl_generic(0x10, 0x3, 0x10) r4 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000100), r2) r5 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000080), 0xffffffffffffffff) r6 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX_80211(r6, 0x8933, &(0x7f0000000540)={'wlan0\x00', 0x0}) sendmsg$NL80211_CMD_NEW_KEY(r6, &(0x7f00000006c0)={0x0, 0x0, &(0x7f0000000680)={&(0x7f0000000100)=ANY=[@ANYBLOB='H\x00\x00\x00', @ANYRES16=r5, @ANYBLOB="230800000000030000000b00000008000300", @ANYRES32=r7, @ANYBLOB="0a0006000802110000010000200050800500020002000000090001007ee5d52ffd0000000800030001ac0f00"], 0x48}}, 0x40000) bpf$PROG_LOAD(0x5, &(0x7f0000002400)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x1, 0x0, &(0x7f0000002680)=[{0x0, 0x2}]}, 0x90) r8 = bpf$BPF_BTF_LOAD(0x12, &(0x7f0000001280)={&(0x7f00000000c0)=ANY=[@ANYBLOB="9feb010018000000000000000c0000000c000000020000000000000000000004"], 0x0, 0x26}, 0x20) bpf$BPF_GET_MAP_INFO(0xf, &(0x7f0000000080)={r8, 0x86, &(0x7f0000002600)}, 0x10) sendmsg$NL80211_CMD_UNEXPECTED_FRAME(r3, &(0x7f00000001c0)={&(0x7f00000000c0)={0x10, 0x0, 0x0, 0x20000}, 0xc, &(0x7f0000000180)={&(0x7f0000000140)={0x28, r4, 0x800, 0x70bd2c, 0x25dfdbfb, {{}, {@val={0x8, 0x3, r7}, @val={0xc, 0x99, {0xfffffff9, 0x6e}}}}, ["", "", "", ""]}, 0x28}, 0x1, 0x0, 0x0, 0x40}, 0x24000000) ioctl$SIOCX25SFACILITIES(0xffffffffffffffff, 0x89e3, &(0x7f0000000080)={0x3d, 0x800000, 0x8, 0x7, 0x2, 0x81}) write$bt_hci(r0, &(0x7f0000000080)=ANY=[], 0x6) 3m50.836191647s ago: executing program 3 (id=2172): r0 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_ipv4_tunnel_SIOCDELTUNNEL(0xffffffffffffffff, 0x89f2, &(0x7f0000000080)={'gre0\x00', &(0x7f0000000000)={'syztnl0\x00', 0x0, 0x700, 0x40, 0x1ff, 0xf43, {{0x17, 0x4, 0x1, 0x1c, 0x5c, 0x68, 0x0, 0x57, 0x29, 0x0, @local, @dev={0xac, 0x14, 0x14, 0x2e}, {[@timestamp={0x44, 0x28, 0x8b, 0x0, 0x7, [0x1, 0xffffff01, 0x81, 0x7, 0xcb8c5c2d, 0x8, 0x2c, 0xb18, 0x4]}, @ra={0x94, 0x4, 0x1}, @cipso={0x86, 0x1a, 0x1, [{0x6, 0x11, "924716ec509abcf803eea15671d482"}, {0x0, 0x3, '\\'}]}]}}}}}) r2 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r2, &(0x7f000000c2c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000340)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a28000000000a0101000000005e1affd5020000000900010073797a300000000008000240000000032c000000030a01030000e6ff00000000020000000900010073797a30000000000900030073797a320000000014000000110001"], 0x7c}}, 0x0) sendmsg$NFT_BATCH(r2, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000000c0)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a58000000060a0b040000000000000000020000002c0004802800018007000100637400001c0002800800014000000002080002400000000b05000300000000000900010073797a30000000000900020073797a320000000014000000110001"], 0x80}}, 0x0) r3 = openat$tun(0xffffffffffffff9c, &(0x7f0000000000), 0x40241, 0x0) ioctl$TUNSETIFF(r3, 0x400454ca, &(0x7f0000000200)={'syzkaller1\x00', 0xc201}) r4 = socket$kcm(0x2, 0xa, 0x2) ioctl$SIOCSIFHWADDR(r4, 0x8914, &(0x7f0000000180)={'syzkaller1\x00', @link_local}) write$tun(r3, &(0x7f0000000280)={@val={0x6f01, 0x800}, @val={0x1, 0x0, 0x0, 0x0, 0x14}, @mpls={[], @ipv4=@tcp={{0x6, 0x4, 0x0, 0x0, 0x24, 0x0, 0x0, 0x0, 0x84, 0x0, @empty=0x3fffffff, @local}, {{0x0, 0x0, 0x41424344, 0x41424344, 0x0, 0x5, 0xb, 0x0, 0x0, 0x0, 0x18, {[@window={0x9, 0xfffffffffffffec4}, @timestamp={0x5, 0x2}, @generic={0x0, 0x2, "d58838068b91"}]}}}}}}, 0xfd6c) sendmsg$nl_route_sched(r0, &(0x7f0000001040)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f0000001080)=@newchain={0x1c0c, 0x64, 0x800, 0x70bd2d, 0x25dfdbfc, {0x0, 0x0, 0x0, r1, {0xffff, 0x9}, {0xc, 0xa}, {0xfff2, 0x8}}, [@filter_kind_options=@f_u32={{0x8}, {0x1bc8, 0x2, [@TCA_U32_POLICE={0x424, 0x6, [@TCA_POLICE_RATE={0x404, 0x2, [0xfffffff7, 0x5, 0x10000000, 0x2, 0x3, 0x10000, 0x3, 0x9, 0x7ff, 0x2, 0xffff8000, 0xffffffff, 0xfffffffb, 0x4, 0xcf07, 0x200, 0x1, 0xa, 0x7ff, 0x8, 0x7, 0x3, 0x401, 0x1, 0x6c11, 0xb, 0x1d5, 0x7, 0x3, 0x471f, 0xffffff2f, 0x0, 0x80000001, 0x6, 0xc, 0x9, 0x2, 0x8, 0x2, 0x9, 0x8, 0xffffffff, 0x3, 0x48000000, 0x6, 0xc, 0x3, 0xfff, 0x1, 0x8, 0x8000, 0x1, 0x4, 0x1, 0x8, 0x0, 0x3128, 0x1, 0x4, 0x80, 0x5, 0x9, 0x4, 0x8, 0x4, 0x2, 0x7, 0x5, 0x4a1, 0xfffff2d6, 0x7, 0x4d3c462d, 0x8, 0x5, 0x400, 0xb0, 0x800, 0x3, 0x800, 0x8, 0x1, 0x9, 0xfffffff8, 0x2, 0x0, 0x8, 0x1ff, 0xb, 0x6, 0x7fffffff, 0x3d, 0x782b5268, 0x4, 0xffffffff, 0x7, 0x10000, 0x5, 0x1, 0x6, 0x10001, 0x25b, 0x9, 0x980, 0xc4, 0x6, 0x9, 0x9, 0x5, 0xfffffffe, 0x8, 0x6, 0xa90, 0x1, 0x12000, 0xff, 0x7, 0xffff, 0x3, 0x3, 0x1f, 0x8, 0x89d9, 0xfffff000, 0x6, 0x7f, 0x5, 0x2c33, 0x4, 0x7, 0x401, 0x40, 0x3, 0x3, 0xffffffff, 0x401, 0x7f, 0x4, 0xffffff3b, 0x1, 0x10001, 0xfe, 0x7, 0x101, 0x56, 0xf, 0x45, 0xd, 0x50cd, 0xfffffffe, 0x4, 0xc, 0x4, 0x7fff, 0x1, 0x5, 0x7, 0x4, 0xaf, 0x9, 0x0, 0xb, 0x2, 0x800, 0x3f0, 0x1ff, 0x6, 0x3, 0xffff01e5, 0x4, 0xfff, 0xffffff81, 0x2, 0x10001, 0x5, 0x7, 0x41, 0x1, 0xa6, 0xeadd, 0x1, 0x3, 0x400, 0x0, 0xfffffffa, 0x7f, 0x3, 0xaaa, 0x401, 0xfffff000, 0x4, 0x0, 0x97, 0xe, 0x1, 0xffff, 0xffff, 0x1, 0x9, 0x1000, 0x9, 0xa, 0xa, 0x7, 0xffffffff, 0xf, 0x3, 0x0, 0x81, 0x5e, 0x7bba1d2e, 0x0, 0x7, 0x1, 0x2, 0xb, 0x9, 0x10000, 0x8, 0xff, 0x800, 0xbbd, 0x500f, 0x6, 0xbb94, 0x3, 0x9, 0x5, 0x6, 0x8, 0x629, 0x9, 0x3, 0x0, 0x9, 0x6, 0x6, 0x2, 0xf, 0x0, 0xfffffffe, 0x7, 0x2, 0x9, 0x7fff, 0x0, 0x0, 0x8, 0x0, 0x9, 0x1000, 0x8, 0x200, 0xe, 0xfff, 0x8000, 0x10000]}, @TCA_POLICE_AVRATE={0x8, 0x4, 0x1}, @TCA_POLICE_PEAKRATE64={0xc, 0x9, 0x8000000000000001}, @TCA_POLICE_AVRATE={0x8, 0x4, 0x120}]}, @TCA_U32_DIVISOR={0x8, 0x4, 0x52}, @TCA_U32_ACT={0x1774, 0x7, [@m_mpls={0xb0, 0x5, 0x0, 0x0, {{0x9}, {0x60, 0x2, 0x0, 0x1, [@TCA_MPLS_LABEL={0x8, 0x5, 0xaf835}, @TCA_MPLS_TC={0x5, 0x6, 0x6}, @TCA_MPLS_TC={0x5, 0x6, 0x7}, @TCA_MPLS_TC={0x5, 0x6, 0x3}, @TCA_MPLS_TTL={0x5, 0x7, 0xa5}, @TCA_MPLS_PROTO={0x6, 0x4, 0x800}, @TCA_MPLS_PARMS={0x1c, 0x2, {{0x8000, 0x0, 0x5, 0x2, 0xfffffffc}, 0x1}}, @TCA_MPLS_BOS={0x5}, @TCA_MPLS_LABEL={0x8, 0x5, 0xc7d15}]}, {0x27, 0x6, "8c628322754351055c97c8d2cbaf039dfb647bd7b8fb91764c843fe3fd6186b6cb48ac"}, {0xc, 0x7, {0x1}}, {0xc, 0x8, {0x1, 0x1}}}}, @m_csum={0x19c, 0x17, 0x0, 0x0, {{0x9}, {0xc8, 0x2, 0x0, 0x1, [@TCA_CSUM_PARMS={0x1c, 0x1, {{0x4, 0x80000000, 0x10000000, 0x9, 0xe3}, 0x55}}, @TCA_CSUM_PARMS={0x1c, 0x1, {{0xffffff00, 0x5f1a, 0x3, 0x6a, 0x4}, 0x6}}, @TCA_CSUM_PARMS={0x1c, 0x1, {{0x1ff, 0x2, 0x20000000, 0x2, 0xc0a}, 0x2b}}, @TCA_CSUM_PARMS={0x1c, 0x1, {{0x3, 0x1, 0xffffffffffffffff, 0x7, 0x7fff}, 0x3d}}, @TCA_CSUM_PARMS={0x1c, 0x1, {{0x2, 0x40, 0xffffffffffffffff, 0x6a, 0xfff}, 0x6e}}, @TCA_CSUM_PARMS={0x1c, 0x1, {{0xc06, 0x2, 0x6, 0x8, 0x2e}, 0x70}}, @TCA_CSUM_PARMS={0x1c, 0x1, {{0x5, 0x2, 0xffffffffffffffff, 0x1, 0x40}, 0x4b}}]}, {0xaa, 0x6, "fac1292db29792b2568bf0a339b24bd747276abc9dead1a58e249b64c6778dd70307facdbe049bbfbf18a114140ce5c8115463eecb510031743aa3e299764bb4ee84ed7f3262e949e214d4a35146d57bac5ed5584292a4f98d930297648b5df521753ee6b6bf7d02b21f768effd11565bd8dce7365331dda2095f437332fac1baed650d57a6eb86a03e8ebf05761df9900e5d2dd16b554e211cfc6bdbca0665e9c9583e568a6"}, {0xc, 0x7, {0x1}}, {0xc, 0x8, {0x1, 0x3}}}}, @m_csum={0x1084, 0x1c, 0x0, 0x0, {{0x9}, {0x58, 0x2, 0x0, 0x1, [@TCA_CSUM_PARMS={0x1c, 0x1, {{0x5, 0x2, 0x1, 0x5, 0x7f}, 0x7a}}, @TCA_CSUM_PARMS={0x1c, 0x1, {{0x3, 0x8000, 0x3, 0x3ff, 0x33}, 0x4f}}, @TCA_CSUM_PARMS={0x1c, 0x1, {{0xb, 0x1ff, 0x1, 0x1, 0x9}, 0x59}}]}, {0x1004, 0x6, "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"}, {0xc, 0x7, {0x0, 0x1}}, {0xc, 0x8, {0x1, 0x1}}}}, @m_sample={0x170, 0x1, 0x0, 0x0, {{0xb}, {0x74, 0x2, 0x0, 0x1, [@TCA_SAMPLE_TRUNC_SIZE={0x8, 0x4, 0xff}, @TCA_SAMPLE_PARMS={0x18, 0x2, {0xffff8000, 0x0, 0x20000008, 0x2, 0x6}}, @TCA_SAMPLE_TRUNC_SIZE={0x8, 0x4, 0xffff}, @TCA_SAMPLE_PARMS={0x18, 0x2, {0x9, 0xffffff3c, 0x2, 0x0, 0x7}}, @TCA_SAMPLE_PARMS={0x18, 0x2, {0x7, 0xfffffff2, 0x5, 0x80, 0xaa1}}, @TCA_SAMPLE_RATE={0x8, 0x3, 0x3}, @TCA_SAMPLE_RATE={0x8, 0x3, 0xfffffffa}, @TCA_SAMPLE_PSAMPLE_GROUP={0x8, 0x5, 0x5}]}, {0xd1, 0x6, "e27abcc4578703c8717d949590d38b2a9d468831423e074b2e399417663a819c40380e60187b8e504270c6c307119d11c89ba3c057e425055c0d570fcc8a1751e66912b8c000afe765e2f9882163727e7aaa548ea6e756740cd980a7c3a314cad42891ba4d606f3090019fc3a6591bbd38f6c81de0feabfd21de4e06b6346cecc61c08df0b459991c853e07da0c231244590e3d2e2dd4f68d192e31eb43457275b42efcd1e03d967eac2a07df65f020e1ff1b30daa1205d7ed609d7ab664b22a7bec3be2f15ba3a5e0ede7d8f3"}, {0xc, 0x7, {0x1}}, {0xc, 0x8, {0x1, 0x2}}}}, @m_csum={0x1e8, 0xf, 0x0, 0x0, {{0x9}, {0xc8, 0x2, 0x0, 0x1, [@TCA_CSUM_PARMS={0x1c, 0x1, {{0xa17, 0x100, 0xffffffffffffffff, 0x1, 0x80}, 0x61}}, @TCA_CSUM_PARMS={0x1c, 0x1, {{0x7, 0x9, 0xffffffffffffffff, 0x1, 0x8000}, 0x2d}}, @TCA_CSUM_PARMS={0x1c, 0x1, {{0x7, 0xedf9, 0x3, 0x0, 0x10}, 0x5c}}, @TCA_CSUM_PARMS={0x1c, 0x1, {{0x5, 0x6, 0x1, 0x4, 0x60}, 0x1a}}, @TCA_CSUM_PARMS={0x1c, 0x1, {{0x2, 0x0, 0x5, 0xbc, 0x9}, 0x6a}}, @TCA_CSUM_PARMS={0x1c, 0x1, {{0x757, 0x29, 0xffffffffffffffff, 0x4, 0x3554}, 0x45}}, @TCA_CSUM_PARMS={0x1c, 0x1, {{0x0, 0xfffffffb, 0x20000000, 0xba}, 0x39}}]}, {0xf5, 0x6, "d40a0038baabf56b37f2614ad925720d97fab9aace33641ee724d04259b7b35a87352207995f57e189f164733c79008e54a7183097bb9b29cb1378a019dc344cb719941ab33680d2a6c66f3a0a3c36ed6077b227993ff01bc7a781aaf9d115400fa5d29ef72a2918ad4dfb495bfeb808f1633554f257e4da6a077c5d4cb15dafddb270058bc40706f9480f90b35a65960e971634663a34ded8372dd531a35753642a19302cd33174101777fde8fbc5598c5de8fa8ff5426d1018ddb21cb09d1795b1db4e8be31e102e447f0e0281d8cf6e386fb81576547b2ef2e4127f56b505e4ece7a357e4127e4cec16bd16c922b7a5"}, {0xc}, {0xc, 0x8, {0x2, 0x2}}}}, @m_csum={0x148, 0x10, 0x0, 0x0, {{0x9}, {0xac, 0x2, 0x0, 0x1, [@TCA_CSUM_PARMS={0x1c, 0x1, {{0x6, 0x9, 0x3, 0x5, 0x3}, 0x7d}}, @TCA_CSUM_PARMS={0x1c, 0x1, {{0xfffffff9, 0xffffffff, 0xffffffffffffffff, 0xafa, 0xe}, 0x1e}}, @TCA_CSUM_PARMS={0x1c, 0x1, {{0xfff, 0x0, 0x3, 0x4}, 0x4e}}, @TCA_CSUM_PARMS={0x1c, 0x1, {{0x10000, 0xe, 0x2, 0x2, 0x7}, 0x5}}, @TCA_CSUM_PARMS={0x1c, 0x1, {{0x8, 0x4, 0xffffffffffffffff, 0x9, 0x7}, 0x23}}, @TCA_CSUM_PARMS={0x1c, 0x1, {{0x2, 0x3ff, 0x6, 0x7, 0x1}, 0x7d}}]}, {0x71, 0x6, "0892d75697d71bc7d9b9494b70bb0f5a203b52957015eedc23c1fce1203ff4719e4fe6db430902e4c9f10c98727c3dcf47428c81e6ad725af350f94e711ced7d6da082cd77977fe6301991daa34a365237895798f9a24da8d1bdb752efebf9225dd281814f5f75e0e159217b8a"}, {0xc, 0x7, {0x1, 0x1}}, {0xc, 0x8, {0x1, 0x1}}}}]}, @TCA_U32_DIVISOR={0x8, 0x4, 0x9d}, @TCA_U32_CLASSID={0x8, 0x1, {0x10, 0xfff2}}, @TCA_U32_INDEV={0x14, 0x8, 'pim6reg\x00'}]}}, @TCA_RATE={0x6, 0x5, {0x4, 0x1e}}, @filter_kind_options=@f_basic={{0xa}, {0x4}}]}, 0x1c0c}}, 0x0) 3m50.508687438s ago: executing program 3 (id=2180): socket$nl_generic(0x10, 0x3, 0x10) (async, rerun: 64) r0 = socket$nl_route(0x10, 0x3, 0x0) (rerun: 64) sendmsg$nl_route(r0, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000200)=ANY=[@ANYBLOB="2c0000001e000100fdffffff00000000020000000100000700000000080006000200000008000100"], 0x2c}, 0x1, 0x0, 0x0, 0x42816}, 0x0) r1 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPCTNL_MSG_CT_NEW(r1, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000180)={0x50, 0x0, 0x1, 0x101, 0x0, 0x0, {0x2, 0x0, 0x5}, [@CTA_TUPLE_ORIG={0x3c, 0x1, 0x0, 0x1, [@CTA_TUPLE_IP={0x2c, 0x1, 0x0, 0x1, @ipv6={{0x14, 0x3, @dev={0xfe, 0x80, '\x00', 0x3a}}, {0x14, 0x4, @mcast1}}}, @CTA_TUPLE_PROTO={0xc, 0x2, 0x0, 0x1, {0x5, 0x1, 0x84}}]}]}, 0x50}}, 0x0) (async) r2 = socket$nl_generic(0x10, 0x3, 0x10) r3 = syz_genetlink_get_family_id$mptcp(&(0x7f00000002c0), 0xffffffffffffffff) sendmsg$MPTCP_PM_CMD_ADD_ADDR(r2, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000440)={&(0x7f0000000200)={0x28, r3, 0x1, 0x0, 0x0, {0x7}, [@MPTCP_PM_ATTR_ADDR={0x14, 0x1, 0x0, 0x1, [@MPTCP_PM_ADDR_ATTR_ID={0x5, 0x2, 0x1}, @MPTCP_PM_ADDR_ATTR_FLAGS={0x8, 0x6, 0x1a}]}]}, 0x28}, 0x1, 0x0, 0x0, 0x80}, 0x8) (async) r4 = syz_init_net_socket$bt_l2cap(0x1f, 0x2, 0x0) setsockopt$bt_l2cap_L2CAP_CONNINFO(r4, 0x6, 0x2, &(0x7f0000000240)={0x7, "0f3fe8"}, 0x6) (async) bpf$PROG_LOAD(0x5, &(0x7f000000e000)={0x10, 0x4, &(0x7f0000000040)=ANY=[@ANYBLOB="b400000000000000791048000000000071041d000000000095000000"], &(0x7f0000003ff6)='GPL\x00', 0x2, 0xc3, &(0x7f0000000080)=""/195, 0x0, 0x0, '\x00', 0x0, @sk_msg}, 0x94) 3m50.291133236s ago: executing program 3 (id=2185): sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000180)=@newqdisc={0x24, 0x24, 0x1, 0x70bd2a, 0x25dfdbfe, {0x0, 0x0, 0x0, 0x0, {}, {0xffff, 0xffff}, {0x5}}}, 0x24}, 0x1, 0x0, 0x0, 0x40}, 0x0) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000000080)={0x0, 0x48}, 0x1, 0x0, 0x0, 0x10010}, 0x0) sendmsg$nl_route(0xffffffffffffffff, 0x0, 0x4008840) r0 = socket$netlink(0x10, 0x3, 0x0) sendmmsg(r0, &(0x7f00000002c0), 0x4000000000001b8, 0x0) r1 = socket$inet6_mptcp(0xa, 0x1, 0x106) getsockopt$inet6_tcp_int(r1, 0x6, 0x6, &(0x7f0000000000), &(0x7f0000000080)=0xffffffffffffff5e) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32, @ANYBLOB="0000000000000000b70800000d0000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000100000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r2 = socket(0x10, 0x3, 0x0) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000240)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$sock_SIOCGIFINDEX(r3, 0x8933, &(0x7f0000000000)={'lo\x00', 0x0}) sendmsg$nl_route_sched(r2, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000780)={&(0x7f0000000080)=@newqdisc={0x60, 0x24, 0xd0f, 0x70bd2d, 0x0, {0x60, 0x0, 0x0, r4, {0x0, 0xa}, {0xffff, 0xffff}, {0x0, 0xfff3}}, [@qdisc_kind_options=@q_tbf={{0x8}, {0x34, 0x2, [@TCA_TBF_PARMS={0x28, 0x1, {{0xea, 0x0, 0xfffd, 0x0, 0x9, 0x5}, {0x12, 0x2, 0x0, 0x401, 0x8001, 0x1400}, 0xa5, 0x5, 0x10000000}}, @TCA_TBF_BURST={0x8, 0x6, 0x8057}]}}]}, 0x60}}, 0x44080) r5 = socket$inet6(0xa, 0x80002, 0x0) connect$inet6(r5, &(0x7f00000001c0)={0xa, 0x4e23, 0x0, @ipv4={'\x00', '\xff\xff', @dev={0xac, 0x14, 0x14, 0x20}}}, 0x1c) setsockopt$sock_linger(r5, 0x1, 0x3c, &(0x7f0000000180)={0x200000000000001}, 0x8) sendmmsg$inet6(r5, &(0x7f0000003cc0)=[{{0x0, 0x0, &(0x7f0000003980), 0x171}}], 0x400000000000172, 0x4001c00) r6 = bpf$MAP_CREATE(0x0, &(0x7f0000000740)=ANY=[], 0x48) r7 = syz_init_net_socket$nl_rdma(0x10, 0x3, 0x10) sendmsg$netlink(r7, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000002580)=[{&(0x7f0000000180)=ANY=[@ANYBLOB="1400000026000100000000000000000006"], 0x14}], 0x1}, 0x0) ioctl$XFS_IOC_FD_TO_HANDLE(r6, 0xc038586a, &(0x7f00000002c0)={r7, &(0x7f0000000000)='drbg_nopr_ctr_aes128\x00', 0xc01, &(0x7f0000000080)={@align=0x3, {0x2, 0x1, 0xcf85, 0xfffffffffffffffc}}, 0x38000000, &(0x7f0000000200), &(0x7f0000000280)=0x50}) bpf$PROG_LOAD(0x5, &(0x7f0000000580)={0xa, 0x4, &(0x7f0000000480)=ANY=[@ANYBLOB="18000000000000000000000000000000850000006d"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x4, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r8 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000d80)={0x18, 0x5, &(0x7f0000000480)=ANY=[@ANYBLOB="1801000021"], 0x0, 0x40, 0x0, 0x0, 0x0, 0xb4a02fe0ce239f93, '\x00', 0x0, 0x2}, 0x94) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x2, 0x0, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000800000000000000000000018110000", @ANYRES32=r6], 0x0, 0x0, 0x0, 0x0, 0x41100, 0x59, '\x00', 0x0, @fallback=0x4, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, r8, 0x0, 0x0, 0x0, 0x0}, 0x94) r9 = bpf$PROG_LOAD(0x5, &(0x7f0000000300)={0x6, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, @fallback=0x4, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r10 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$ifreq_SIOCGIFINDEX_team(r10, 0x8933, &(0x7f0000004700)={'team0\x00', 0x0}) r12 = syz_genetlink_get_family_id$team(&(0x7f00000044c0), 0xffffffffffffffff) sendmsg$TEAM_CMD_OPTIONS_SET(r10, &(0x7f0000004bc0)={0x0, 0x0, &(0x7f0000004b80)={&(0x7f00000004c0)=ANY=[@ANYBLOB='`\x00\x00\x00', @ANYRES16=r12, @ANYBLOB="050423bd7000fedbdf250100000008000100fae78d4ba19be563791f14c7306c6ed46807a5c91aac526e4b19ead7e92786e85b1a2e19a54c42fc79a391ac06f1be7194c47f99eb3373a42cc0eff7368d3a504337ad6a35ae88929323", @ANYRES32=r11, @ANYBLOB="4400028040000100240001006d6f6465000000000000000000000000000000000000000000000000000000000500030005000000100004006c6f616462616c616e636500"], 0x60}, 0x1, 0x0, 0x0, 0x4000401}, 0x44084) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000180)={r9, 0x2000000, 0xe, 0x0, &(0x7f0000000040)="630b008646dc3f0adf33c9f7b986", 0x0, 0xcf25, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x80}, 0x50) bind$alg(0xffffffffffffffff, &(0x7f0000000140)={0x26, 'rng\x00', 0x0, 0x0, 'drbg_nopr_ctr_aes128\x00'}, 0x58) 3m35.144885707s ago: executing program 32 (id=2185): sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000180)=@newqdisc={0x24, 0x24, 0x1, 0x70bd2a, 0x25dfdbfe, {0x0, 0x0, 0x0, 0x0, {}, {0xffff, 0xffff}, {0x5}}}, 0x24}, 0x1, 0x0, 0x0, 0x40}, 0x0) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000000080)={0x0, 0x48}, 0x1, 0x0, 0x0, 0x10010}, 0x0) sendmsg$nl_route(0xffffffffffffffff, 0x0, 0x4008840) r0 = socket$netlink(0x10, 0x3, 0x0) sendmmsg(r0, &(0x7f00000002c0), 0x4000000000001b8, 0x0) r1 = socket$inet6_mptcp(0xa, 0x1, 0x106) getsockopt$inet6_tcp_int(r1, 0x6, 0x6, &(0x7f0000000000), &(0x7f0000000080)=0xffffffffffffff5e) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32, @ANYBLOB="0000000000000000b70800000d0000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000100000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r2 = socket(0x10, 0x3, 0x0) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000240)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$sock_SIOCGIFINDEX(r3, 0x8933, &(0x7f0000000000)={'lo\x00', 0x0}) sendmsg$nl_route_sched(r2, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000780)={&(0x7f0000000080)=@newqdisc={0x60, 0x24, 0xd0f, 0x70bd2d, 0x0, {0x60, 0x0, 0x0, r4, {0x0, 0xa}, {0xffff, 0xffff}, {0x0, 0xfff3}}, [@qdisc_kind_options=@q_tbf={{0x8}, {0x34, 0x2, [@TCA_TBF_PARMS={0x28, 0x1, {{0xea, 0x0, 0xfffd, 0x0, 0x9, 0x5}, {0x12, 0x2, 0x0, 0x401, 0x8001, 0x1400}, 0xa5, 0x5, 0x10000000}}, @TCA_TBF_BURST={0x8, 0x6, 0x8057}]}}]}, 0x60}}, 0x44080) r5 = socket$inet6(0xa, 0x80002, 0x0) connect$inet6(r5, &(0x7f00000001c0)={0xa, 0x4e23, 0x0, @ipv4={'\x00', '\xff\xff', @dev={0xac, 0x14, 0x14, 0x20}}}, 0x1c) setsockopt$sock_linger(r5, 0x1, 0x3c, &(0x7f0000000180)={0x200000000000001}, 0x8) sendmmsg$inet6(r5, &(0x7f0000003cc0)=[{{0x0, 0x0, &(0x7f0000003980), 0x171}}], 0x400000000000172, 0x4001c00) r6 = bpf$MAP_CREATE(0x0, &(0x7f0000000740)=ANY=[], 0x48) r7 = syz_init_net_socket$nl_rdma(0x10, 0x3, 0x10) sendmsg$netlink(r7, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000002580)=[{&(0x7f0000000180)=ANY=[@ANYBLOB="1400000026000100000000000000000006"], 0x14}], 0x1}, 0x0) ioctl$XFS_IOC_FD_TO_HANDLE(r6, 0xc038586a, &(0x7f00000002c0)={r7, &(0x7f0000000000)='drbg_nopr_ctr_aes128\x00', 0xc01, &(0x7f0000000080)={@align=0x3, {0x2, 0x1, 0xcf85, 0xfffffffffffffffc}}, 0x38000000, &(0x7f0000000200), &(0x7f0000000280)=0x50}) bpf$PROG_LOAD(0x5, &(0x7f0000000580)={0xa, 0x4, &(0x7f0000000480)=ANY=[@ANYBLOB="18000000000000000000000000000000850000006d"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x4, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r8 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000d80)={0x18, 0x5, &(0x7f0000000480)=ANY=[@ANYBLOB="1801000021"], 0x0, 0x40, 0x0, 0x0, 0x0, 0xb4a02fe0ce239f93, '\x00', 0x0, 0x2}, 0x94) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x2, 0x0, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000800000000000000000000018110000", @ANYRES32=r6], 0x0, 0x0, 0x0, 0x0, 0x41100, 0x59, '\x00', 0x0, @fallback=0x4, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, r8, 0x0, 0x0, 0x0, 0x0}, 0x94) r9 = bpf$PROG_LOAD(0x5, &(0x7f0000000300)={0x6, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, @fallback=0x4, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r10 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$ifreq_SIOCGIFINDEX_team(r10, 0x8933, &(0x7f0000004700)={'team0\x00', 0x0}) r12 = syz_genetlink_get_family_id$team(&(0x7f00000044c0), 0xffffffffffffffff) sendmsg$TEAM_CMD_OPTIONS_SET(r10, &(0x7f0000004bc0)={0x0, 0x0, &(0x7f0000004b80)={&(0x7f00000004c0)=ANY=[@ANYBLOB='`\x00\x00\x00', @ANYRES16=r12, @ANYBLOB="050423bd7000fedbdf250100000008000100fae78d4ba19be563791f14c7306c6ed46807a5c91aac526e4b19ead7e92786e85b1a2e19a54c42fc79a391ac06f1be7194c47f99eb3373a42cc0eff7368d3a504337ad6a35ae88929323", @ANYRES32=r11, @ANYBLOB="4400028040000100240001006d6f6465000000000000000000000000000000000000000000000000000000000500030005000000100004006c6f616462616c616e636500"], 0x60}, 0x1, 0x0, 0x0, 0x4000401}, 0x44084) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000180)={r9, 0x2000000, 0xe, 0x0, &(0x7f0000000040)="630b008646dc3f0adf33c9f7b986", 0x0, 0xcf25, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x80}, 0x50) bind$alg(0xffffffffffffffff, &(0x7f0000000140)={0x26, 'rng\x00', 0x0, 0x0, 'drbg_nopr_ctr_aes128\x00'}, 0x58) 2m43.557918856s ago: executing program 0 (id=2924): r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = socket$nl_rdma(0x10, 0x3, 0x14) (async) ioctl$XFS_IOC_ATTRMULTI_BY_HANDLE(r0, 0x4048587b, &(0x7f0000001d00)={{r0, &(0x7f0000000900)='\x00', 0x1800c1, &(0x7f0000000940)={@align=0x9, {0xb4af, 0xe89c, 0x8}}, 0x0, &(0x7f0000000980)={@_ha_fsid}, &(0x7f00000009c0)=0x4}, 0x5, &(0x7f0000001c40)=[{0x3, 0x655, &(0x7f0000000a00)='mptcp_pm\x00', &(0x7f0000000a40)="8c", 0x1}, {0x2, 0xfff, &(0x7f0000000a80)=',.$\\}\x00', &(0x7f0000000ac0)="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", 0x1000, 0x32}, {0x2, 0x9, &(0x7f0000001ac0)='TIPC\x00', &(0x7f0000001b00)="2d6aa510f1fb7657fe9625a4d75231cd5c50594b2806e7d70fbb343881c85708b1830166d0ac195a8b3a7ddad1a276b29c", 0x31, 0x8}, {0x2, 0x2, &(0x7f0000001b40)='\'\x00', &(0x7f0000001b80)="72220cded0fbc225460592d82c023af06645229abe1f", 0x16}, {0x1, 0x6be4, &(0x7f0000001bc0)='TIPC\x00', &(0x7f0000001c00)="8f3062d4c1c3984bb248d2f75a1ce3072e", 0x11, 0x2}]}) (async, rerun: 64) r3 = syz_open_procfs$namespace(0xffffffffffffffff, &(0x7f0000001d80)='ns/mnt\x00') (async, rerun: 64) ioctl$sock_FIOGETOWN(r0, 0x8903, &(0x7f0000001dc0)=0x0) sendmsg$NL80211_CMD_SET_WIPHY_NETNS(r0, &(0x7f0000001f00)={&(0x7f00000008c0)={0x10, 0x0, 0x0, 0x100}, 0xc, &(0x7f0000001ec0)={&(0x7f0000001e00)={0x84, 0x0, 0x200, 0x70bd29, 0x25dfdbfe, {{}, {@val={0x8, 0x1, 0x64}, @void, @val={0xc, 0x99, {0x10, 0x6b}}}}, [@NL80211_ATTR_WDEV={0xc, 0x99, {0x1, 0x22}}, @NL80211_ATTR_NETNS_FD={0x8, 0xdb, r2}, @NL80211_ATTR_WIPHY={0x8, 0x1, 0x56}, @NL80211_ATTR_WIPHY={0x8}, @NL80211_ATTR_WDEV={0xc, 0x99, {0x1, 0xe}}, @NL80211_ATTR_NETNS_FD={0x8, 0xdb, r0}, @NL80211_ATTR_PID={0x8, 0x52, r4}, @NL80211_ATTR_NETNS_FD={0x8, 0xdb, r3}, @NL80211_ATTR_WDEV={0xc, 0x99, {0x2, 0x1}}, @NL80211_ATTR_PID={0x8, 0x52, r4}]}, 0x84}, 0x1, 0x0, 0x0, 0x40}, 0x0) sendmsg$RDMA_NLDEV_CMD_GET_CHARDEV(r1, &(0x7f0000000380)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000140)={0x24, 0x140f, 0x1, 0x70bd26, 0x25dfdbfc, "", [@RDMA_NLDEV_ATTR_CHARDEV_TYPE={0x9, 0x45, 'umad\x00'}, @RDMA_NLDEV_ATTR_DEV_INDEX={0x8}]}, 0x24}, 0x1, 0x0, 0x0, 0x20000000}, 0x4000) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x3000001, 0x8031, 0xffffffffffffffff, 0xfffff000) (async, rerun: 32) r5 = socket$inet_tcp(0x2, 0x1, 0x0) (rerun: 32) getsockopt$inet_tcp_buf(r5, 0x6, 0x1c, 0x0, &(0x7f0000000140)) (async, rerun: 32) r6 = socket$nl_generic(0x10, 0x3, 0x10) (rerun: 32) sendmsg$nl_generic(r6, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000040)={0x18, 0x43, 0x9, 0xffffffff, 0x25dfdbfb, {0x2}, [@typed={0x4, 0x11f}]}, 0x18}, 0x1, 0x0, 0x0, 0x8000}, 0x40) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000040)={0x5, 0x0, 0x0, &(0x7f0000000540)='GPL\x00', 0x200005, 0x0, 0x0, 0x40f00, 0x0, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0xfffffffc}, 0x94) pipe(&(0x7f0000000880)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$sock_SIOCGIFINDEX_80211(r7, 0x8933, &(0x7f0000000040)={'wlan1\x00'}) (async, rerun: 64) r8 = syz_init_net_socket$bt_l2cap(0x1f, 0x1, 0x0) (rerun: 64) sendmsg$inet(r8, &(0x7f0000002440)={0x0, 0x0, 0x0}, 0x40001) (async) r9 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r9, &(0x7f00000005c0)={&(0x7f00000001c0)={0x10, 0x0, 0x0, 0x80000}, 0xc, &(0x7f0000000580)={&(0x7f0000001f80)={{0x14, 0x10, 0x1, 0x0, 0x0, {0x5}}, [@NFT_MSG_NEWCHAIN={0x11c, 0x3, 0xa, 0x401, 0x0, 0x0, {0x9, 0x0, 0x2}, [@NFTA_CHAIN_NAME={0x9, 0x3, 'syz0\x00'}, @NFTA_CHAIN_USERDATA={0x97, 0xc, "6a7089cb57acfc7cb50802195a6a1c77028cd4458915e6a9352949e1af3e6f2f85f95177df39ffcaba979a088506dff20ac6880e20ee3c801d5308b691c72cf612fb5c6c7adafbf59980b0fc0b23013bf46adc230aaf2343ab2491b6c894a0a469145a54fb18fe2d8a14699399bee85c63d9f888f00bc705ca6b419c5e8836682566e558225badcb9a32a356b5c7eff7514162"}, @NFTA_CHAIN_TABLE={0x9, 0x1, 'syz1\x00'}, @NFTA_CHAIN_ID={0x8, 0xb, 0x1, 0x0, 0x2}, @NFTA_CHAIN_HANDLE={0xc, 0x2, 0x1, 0x0, 0x2}, @NFTA_CHAIN_TYPE={0xa, 0x7, 'route\x00'}, @NFTA_CHAIN_HOOK={0x38, 0x4, 0x0, 0x1, [@NFTA_HOOK_HOOKNUM={0x8, 0x1, 0x1, 0x0, 0x4}, @NFTA_HOOK_HOOKNUM={0x8, 0x1, 0x1, 0x0, 0x3}, @NFTA_HOOK_PRIORITY={0x8, 0x2, 0x1, 0x0, 0x577147d}, @NFTA_HOOK_DEV={0x14, 0x3, 'dummy0\x00'}, @NFTA_HOOK_PRIORITY={0x8, 0x2, 0x1, 0x0, 0x667bfe4b}]}]}, @NFT_MSG_DELCHAIN={0x50, 0x5, 0xa, 0x301, 0x0, 0x0, {0x2, 0x0, 0x7}, [@NFTA_CHAIN_COUNTERS={0x4}, @NFTA_CHAIN_HANDLE={0xc, 0x2, 0x1, 0x0, 0x1}, @NFTA_CHAIN_USERDATA={0x16, 0xc, "cd69f667be2584a82df60b31e529cf3dff71"}, @NFTA_CHAIN_NAME={0x9, 0x3, 'syz2\x00'}, @NFTA_CHAIN_ID={0x8, 0xb, 0x1, 0x0, 0x2}]}, @NFT_MSG_DELSETELEM={0x20, 0xe, 0xa, 0x181, 0x0, 0x0, {0x5, 0x0, 0x1}, [@NFTA_SET_ELEM_LIST_TABLE={0x9, 0x1, 'syz0\x00'}]}], {0x14, 0x11, 0x1, 0x0, 0x0, {0xa}}}, 0x1b4}, 0x1, 0x0, 0x0, 0x4}, 0x44040) setsockopt$sock_linger(r0, 0x1, 0xd, &(0x7f0000000000)={0x1, 0x80}, 0x8) (async) r10 = socket$nl_route(0x10, 0x3, 0x0) getsockname(r5, &(0x7f0000000300)=@xdp, &(0x7f0000000380)=0x80) ioctl(r10, 0x8b2a, &(0x7f0000000040)) r11 = syz_genetlink_get_family_id$tipc(&(0x7f0000000200), 0xffffffffffffffff) (async, rerun: 64) ioctl$XFS_IOC_PATH_TO_FSHANDLE(r1, 0xc0385868, &(0x7f0000000700)={r1, &(0x7f0000000600)=']\'}[%\x00', 0x111401, &(0x7f0000000640)={@align=0x5, {0xa, 0x7fff, 0x6, 0xc}}, 0xfff, &(0x7f0000000680)={@_ha_fsid}, &(0x7f00000006c0)=0x7}) (rerun: 64) r13 = syz_genetlink_get_family_id$mptcp(&(0x7f0000001f40), r6) sendmsg$MPTCP_PM_CMD_ANNOUNCE(r12, &(0x7f0000000840)={&(0x7f0000000740)={0x10, 0x0, 0x0, 0xa82bb2febb65fc0}, 0xc, &(0x7f0000000800)={&(0x7f00000007c0)={0x1c, r13, 0x200, 0x70bd2a, 0x25dfdbfb, {}, [@MPTCP_PM_ATTR_RCV_ADD_ADDRS={0x8}]}, 0x1c}, 0x1, 0x0, 0x0, 0x4044000}, 0x10) (async, rerun: 64) r14 = socket$inet6_sctp(0xa, 0x5, 0x84) (rerun: 64) setsockopt$inet_sctp6_SCTP_AUTH_KEY(r14, 0x84, 0x17, 0x0, 0x0) (async) sendmsg$TIPC_CMD_ENABLE_BEARER(r0, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000100)=ANY=[@ANYBLOB='8\x00\x00\x00', @ANYRES16=r11, @ANYBLOB="01000000010000000000010000000000000001410000001c001700000000000000006574683a7379a4bee846fe4814f3348345"], 0x38}}, 0x0) 2m43.324047134s ago: executing program 0 (id=2926): r0 = socket$nl_generic(0x10, 0x3, 0x10) pipe(&(0x7f0000000600)={0xffffffffffffffff, 0xffffffffffffffff}) write(r1, 0x0, 0x0) (async) write(r1, 0x0, 0x0) socket$netlink(0x10, 0x3, 0xc) (async) r2 = socket$netlink(0x10, 0x3, 0xc) bind$netlink(r2, &(0x7f0000514ff4)={0x10, 0x0, 0x0, 0x2ffffffff}, 0xc) (async) bind$netlink(r2, &(0x7f0000514ff4)={0x10, 0x0, 0x0, 0x2ffffffff}, 0xc) r3 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPCTNL_MSG_CT_NEW(r3, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000100)=ANY=[@ANYBLOB="640000000001010400000000141a000002000000240001801400018008000100e000000108000200e00000010c00028005000100000000002400028014000180080001000000000008000200ac1e00010c00028005000100000000000800074000000001"], 0x64}}, 0x0) mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000080)='./cgroup.net/syz0\x00', 0x1ff) setsockopt$IPT_SO_SET_REPLACE(r1, 0x0, 0x40, &(0x7f0000000640)=@nat={'nat\x00', 0x1b, 0x5, 0x3f0, 0x1d0, 0xa8, 0xffffffff, 0x1d0, 0x278, 0x358, 0x358, 0xffffffff, 0x358, 0x358, 0x5, &(0x7f00000001c0), {[{{@uncond, 0x0, 0x70, 0xa8}, @NETMAP={0x38, 'NETMAP\x00', 0x0, {0x1, {0xe, @broadcast, @dev={0xac, 0x14, 0x14, 0x42}, @icmp_id=0x67, @gre_key=0x7}}}}, {{@ip={@remote, @loopback, 0xffffff00, 0xff000000, 'vlan0\x00', 'veth0_vlan\x00', {0xff}, {}, 0x8, 0x0, 0x2}, 0x0, 0xc8, 0x128, 0x0, {}, [@common=@icmp={{0x28}, {0xf, "00b4"}}, @common=@inet=@ipcomp={{0x30}, {[0x4d2, 0x4d2]}}]}, @common=@SET={0x60, 'SET\x00', 0x0, {{0x3, [0x1, 0x4, 0x3, 0x0, 0x4, 0x2], 0x3, 0x4}, {0xffffffffffffffff, [0x1, 0x0, 0x0, 0x9, 0x1], 0x4, 0x1}}}}, {{@ip={@private=0xa010100, @rand_addr=0x64010101, 0xff, 0x8000007f, 'xfrm0\x00', 'veth1_to_bond\x00', {}, {0xff}, 0x88, 0x1, 0x49}, 0x0, 0x70, 0xa8}, @REDIRECT={0x38, 'REDIRECT\x00', 0x0, {0x1, {0x4, @local, @broadcast, @port=0x4e24, @gre_key=0x9}}}}, {{@uncond, 0x0, 0x98, 0xe0, 0x0, {}, [@common=@ttl={{0x28}, {0x1, 0x5}}]}, @unspec=@SNAT1={0x48, 'SNAT\x00', 0x1, {0x0, @ipv6=@private0={0xfc, 0x0, '\x00', 0x7}, @ipv4=@loopback, @port=0x4e22, @port=0x4e22}}}], {{'\x00', 0x0, 0x70, 0x98}, {0x28}}}}, 0x450) r4 = socket$nl_netfilter(0x10, 0x3, 0xc) r5 = syz_genetlink_get_family_id$tipc2(&(0x7f0000000280), 0xffffffffffffffff) sendmsg$TIPC_NL_BEARER_ENABLE(r0, &(0x7f0000001cc0)={&(0x7f00000000c0)={0x10, 0x0, 0x0, 0x48004}, 0xc, &(0x7f0000001c80)={&(0x7f0000000ac0)={0x11ac, r5, 0x20, 0x70bd2b, 0x25dfdbfb, {}, [@TIPC_NLA_BEARER={0xd8, 0x1, 0x0, 0x1, [@TIPC_NLA_BEARER_DOMAIN={0x8, 0x3, 0x40}, @TIPC_NLA_BEARER_NAME={0xf, 0x1, @l2={'ib', 0x3a, 'pimreg0\x00'}}, @TIPC_NLA_BEARER_UDP_OPTS={0x38, 0x4, {{0x20, 0x1, @in6={0xa, 0x4e22, 0x6, @private2={0xfc, 0x2, '\x00', 0x1}, 0x9}}, {0x14, 0x2, @in={0x2, 0x4e24, @multicast2}}}}, @TIPC_NLA_BEARER_NAME={0xd, 0x1, @udp='udp:syz2\x00'}, @TIPC_NLA_BEARER_UDP_OPTS={0x38, 0x4, {{0x14, 0x1, @in={0x2, 0x4e21, @remote}}, {0x20, 0x2, @in6={0xa, 0x4e22, 0x1, @private1, 0x3}}}}, @TIPC_NLA_BEARER_PROP={0x2c, 0x2, 0x0, 0x1, [@TIPC_NLA_PROP_TOL={0x8, 0x2, 0x6}, @TIPC_NLA_PROP_TOL={0x8, 0x2, 0xf9a}, @TIPC_NLA_PROP_TOL={0x8, 0x2, 0x3}, @TIPC_NLA_PROP_TOL={0x8, 0x2, 0x98}, @TIPC_NLA_PROP_TOL={0x8, 0x2, 0x7ff}]}, @TIPC_NLA_BEARER_NAME={0x10, 0x1, @l2={'eth', 0x3a, 'ip_vti0\x00'}}]}, @TIPC_NLA_NODE={0x10c0, 0x6, 0x0, 0x1, [@TIPC_NLA_NODE_KEY={0x45, 0x4, {'gcm(aes)\x00', 0x1d, "d3a5b6b93183c68ce7c39c5dd4eac772f6c8680b0a1929e0e0cb7f0c79"}}, @TIPC_NLA_NODE_ID={0x1004, 0x3, "796af0eedb7587d9dfe61ef2910950558128071cb2d70ff72e63e91e56233e3b1425614d4f3c890e17760d3b98c3c82142cbe92936540497c6a0fa67effe5b50cb027cd57f57832653c49bc47ce38934afce562311fd65a9f427fb9ab0663664373badb3001e341de272964326d330a92235f46271a8143f6b16dbe91d23837678866ded74fef1ba7b04544680e4cbd4c18d866e087358a81dd46959a9378cd5248f74b7a416e659d8c624b814ad2e1a1afaf7ca1500e279d34e19691a26a0b1dcfd7ff777188cba067e284a6825ac4914b76448d4d7aabb640939e6f25a5b47067bfbc20e0a98d099c01cd1471f8cf566c785f3104d1906175b944d0b7215526cdb10b835c93a318ba2cf2a505ed70c9fcfc9370dc85c9cec3e30a6dfb8ace89912fef071142bdd18d019de27b9a7d3828f469aee197ee160f318864f49b8853e7a2492d490d6b3c0dcebd9573b20c482de4ffd35f793573c7bc9117f78236ee64f7f21f02ee9eea40082dbf5943df436621f49feb97279fba845e146f6be4b0d785670e2fd1f40584b6d032ded77e46e47ccf0cdfcef9425ceaf7bcb9f82f6f8be53af38e2e97891c03c05874c9b883dbd8f06256519909d1350237c55fa9659dde251ba792988adc546577c197c62c995ef4fa6b00520e5cfb20d16d565c5c1510f8ad21bf9ee0d1e7f941fa886aa4dbcaa4966966309e28f30ef946f3a32b5a323150f0c7dc9d621fd1e42f171a2da734dc4e2fb4ecb6c90338e287ba7f2f310bf91922e69dc33bbfa4412e18c06ac3e78a1066e89c1ef98adf9b2cd7060040555d281b2b5dcb54aba8a7c17b2c49057a40573a010e32d85b2d5bbf5e7992f73cd2b72bdd0733e5b6d5a1acfcda496ed6c32f8002617528e1fd8fe34d0511a97b06e8688c88aef09e3dda50f170116f7a28dc4e694e5e153b25d01893e42e6ea1c4c4851224259c1932b5f54d431c54ee165ac9d8cde9f8c5aec6bbdb1d3c4eb7190245983fc02345677f6adfe1dcc4e4053facfb9959f89af647a008ff5e93683644d976b8024391532f2e2a9275347bf18fe2ac416c3777828ccac7daa3ac1744f5f4df03bd00748449cc289542cad6e3915f2865018f08a1845e2a34ea05a6ac4dc6eb5554a94db9cb3d4c5bba9575993683de9cde56da2ed9e6e299281a80186ac9e3f23810c69f4183ec2d6288af8651f9bb9cd374a97c6fd916a1ea0a010d9cfadd19c85fcb0023493018668f9aadbf3ce5abdb26e014c12c7b867b795ddde4624dd3ee76c6d4692a60752e060319f880469287d088f32275e94557c3b89771e9b9a55c1cc2c0a98214ec02136e85244dba95fbe22d212a382c3ba81446fd294958c30de22675081a9b1e735e335704a96d37ea447159d6db5f80b9523be2251190f11e00c8cdc51f1e4fe3cb52651603d2b914fd3b5e0d175d9a1e5a6f6f8fae7a356d6ff7cff756835bb68cac799b479dd8e4f202ac49a9759e3320ffe29b23f7a34165e480631c2446ce48fa91075e18f9a24fca2f271199a860db9e22caf612bf7ec6402c1952418764e2cf1671d10a822b2b2fbfd635371787a4c9f08729d6590ee3468d9b76e344591ed64f2d51e793d2cb98bd97edb85f497278a3d095dab8e78acb2132e9fcd64a62f37e34dd0e5cdd795651f1302070c573633b3513de11f7238920c4ad92225ad2040fc172f7ec7db73a2e8ff7fbb7d34ee625a10144ee7ba2b7cede2712759a7ed7768d2baaddebffdfb668451fbcc7ee652bbf81220c3878825baac84b60e0237b18308e6fff06493698e668f34cbe859016fa283808452e2ff1435a5a79eefc70ba39686c543e331ece8bc263bfaa6da5aebf33875e0c2a598207198b425317262f9f86cd419bdc5c2c306c1b72da267f3f7a8e162b3d4392e95d41a41edcecdd1e0577478ef6e648dce6e12cf5237c37b51b40d4c7829fbf798c0eda89e25e885b5faf9ed7e80784daebb5bbdd49ffcb240618b73c3d207553fad43972e4cf1bbf37af22a90fb1a99518157314f0da7b6e3828df367d940897e5ed6d92f97509c534f0b0a186909ff8f9db4f8c3c5befa0faae8cb04c48c76d67b01062376dfc955296bd20055bc788fb59ad9deef84ccbd8db0f9954a2d438d0d8ca4dc2db085dac0613a9ecc17ba4c1941da33498caecf1fa23bc1bd909d02afb4505501d1ac454a4be33ea725f5a396f95f28e35f9a9f3922b7a4654b816e916e0d70dedb4aa482c7b71928d84205d569a44a49f094b312087db4264aa214b5ebbff4e3c9b85435d472b287891aff0aaebc2693c5c5cbc8faca4eefea640236a3cd371cff5c30ca929c9b9954bf91301ad1daad241138f4742d03dcc97f7f7000c7a163490d2722f02598bf74f9c75847caa5e72e1d6a55a6ea17f5fedc2e769ace807cfe0fd3f32aafa61ad53eedd1cf4e537c37580ff1b59bf94dd2e3b6fed2f98ab02ab1d02d2326f7bd4f65f4b201f69d4b011cd2b3d5f94bad08cfa62e83ff800e2667198d737dd02ab04c57901499fc126164d718a180acd75e2305263c6688548a88c6fe9e6917345f799d826b328543632bbd5a98339e6a2312d815be5306165ac86c59e60177a160b106bf8d3b8c57309643b6a38b3fa14e92ef8a8c78a782fa749d9a12f9e14790d808a4e9b6a84ee5385bd8b559c495879d50a5b14cacee9f685b518e3dad80dbd32128729e741177eb50693f735e403174312ae53f024d101d0aa4c98eebc99f8d8640282d6a085741b50885a4f9d2ee09cee199359872b80f75dfcd95587c82cd4a4145ed0543f74fc4e13fa3d8a2126effda796e733c01ed5208de331c719a809f11bba79986636a125ba1e7f8ff128e1338492f438e07f496c5dd65f565465951fe5fd20c28c409e9a681da5610b42eab2d6944314caeb4b4e223b9eab6d6eec1b91fff2c464f9933aec9a22ea4ab35f49f888ea8650cb955282d99885ae2b2c872ee9c428ae217551c537c4ba4e5eebf936469683ddc0b56a5f14157565c9aab3165c0c23430ca9340d6d3b672e59388bcf53eb779fb2b83a7bbf400e98a2a344904d92f0c883fa17e0932a3f80149659035e37c4f5c1b6d1720599b3683374a9acf2f89f3e1c43013227db5356bb44271ff1c1134c1ab76897b372b83ecee137c9ec0c95d3884d86fa91b8443e08404ee0f7d0905a0281a567ddb3c2d61a49e19ab541b984e3ae2c736e210e6f119f19fd95d0ae2938a8d038139a76df9d9e75a02ef1772ac72493caff55bf34275cfebcce04f0b3797fd145628f52c4fa1007b7cbdc068a5bea6697e1d06bc9a8dec93b3aab056f71fc756d5c1607d09a0e8f69625daaa81df6c2a217846902a89e14b726fab68f2fca5c89a23a7fcf13d7ed42c607bc9a1b424f7269e19b57a61c1e798ed144cbcf7c831aaed0815eb8315f3ee7b821ba5b8851cda595e23fc6340f29c0bf089d4f599887f80d403aa0809f2cbc23aace59fd211a35ffbe9c973c1d71377b183677f5e420c04c5460d74592c27a76bf66d1c832be23fccb3203d93c4c94aaf68c694d667ad579b601602ac768c838f81f0f09159c9dc1b6ea292ce8359aea12bb559deab5621acb073775a19cd43666223499312a87b0c9576c8bb818f9a62d081215116d20871ddc08db715d8d223465bfb783db72fca079a4e7c79e9f0f9c255f8c6859c9b8ea03c399ea83a4d3113c10a7b683ecdc1720c1cd83125d9b4e19e18a54a9017de8dea7b88411e7e976f71dca327a3f1345b2a9c6ae8195dad2a7e559748b01055efa43b1be1e7c43364e6efa592d4d891b34be0239d8197e08ed5fae0b2b562b440d6c5d52f8fde95d3a12a12ec04cb24b9f2699b6e5b33ff17b83c44c352fab6578475a42698d6abe24dfbbf3415c276abd995314e6bdf216621f0c33f20e22957dd5586989ef85637a76813df99504f9daa7b92e25908d3eb9d5d08b1b265139fa5ed2d9eb3e2a283efe56c00290c571864b6e85936de78270d9ad20e49d4fef9838a445a4258f89a545a90fa32564b5262c47bc692e2d7c36f7552f618f45c2cab396828cd048848fc38c0fd67ad8180ba2dd978054530c59e4e0dfca2e53bba4cf477da213d4b6053e855543fec0a2003ba6754216d8ace076ff0f94f991d84fd2a17e7a5dac653e824bf1565b7ccef7c91cfcf8b971b2a83ae467b5434569b5433d7b9c35c42616e4125022afcf3decab710489e3b4687cf46f3ac10abc715f6713ec7ced7fda1cbdd336a616cb030b9465d3c13ac2268d9162d6a211ed8622eef891fcaedfbc61fa70d9d997e0626ba1d4823a38e822b2c40f0925f6d54f9a5b46d5ea493b5b98a6f6eab11ad4fdd1266c44016646609024d287804ef52658cbee31001a1d4e54491c6b54e16871e36174f0da4f1c1bf2f2bc13d52ceb661540f3b084a2164c8b300ce1cd23462febe7abdc1d66f303da1dbe3161e145df4f71447a6bc6ba7540e3261b577af7ab18308760775830dcd81a4fe275cb1c9cbadbacf402744b4e5ca7fada8281aa1b8d279a401d79f9c1c4bafa95cb0f45808291b390a1cbdabdc34ff17844815a762b82d65fc92773de07a138cb6190989dd5a52f82ec635aab864736d979d4506f1b2615957257c027bf76225e47ab65b546bd5274501471109587fa90142b3d22343528d0ab7aa7cd0c1005ac2004dbfdceb904dd701386123553e2df45e832746634122c991a4aa6ef5cf33c1a6c705d352b68d5c16c147b304c2823e3a7b9a2cfbbd0d4eef2208f6d608d0e698776d6574bdafed06fb296927420a5b8ea16b61dce7f194111d0d0125bcb28181e5d307ebec1970a479f220230ddc0c23762cc2abe06e7d853493b5eee140aa8975a8fe3cc862b9606e1e6227129f317ea8042c9029806223ff07235a1c76c59c85464cf13ba172065fe799540bac11093274123602933f504c82492b42fbba6a83d0f4573008863aded890c8cf68cca224298d97c2a61a9c5004b127546dbd30bac9041cca49fe31ebcfeb9fb6788a9c46a6d7e63ba4b3dc1c7195b79efafd36984f26571a0b5066f90cea12e60385bff32c8994fbd8eb1348c0316a48eb3da025991eb7a109f0a08f45764b2939952d56f7bf1ab0f3a009392920ca322ca35c12dec91b84ddd73cebe9289de3a569649e9e2882bce0527c882656a917d569c9e29b11154a459628c6d698719467c32ed0c3e56eb02d2fd50a83f46d4c85e1fb75dbb8808ef0701f591ad746b4968ec11094de158bd607aa212d4d8ee950f1ff3509593bcb32ca8487c7bb24293848f9fe8305c7affc78e1369d89753722cb2567266b277da84fabf7a0917b8cf77369e43553fdcd387d0948ab5a35c7f7c57d6cefd7476702ce5e5036ce31d4fd96d7d1729c7dc0cb209ece081a9a4912297ff44fcff31f45c17087f9a694cf234313ddfb0853bc179ec8a4da86fd9e9d1c8e49d187db8d2a9f21bd0024a5d7e08882a7174b8011f92e6da30a3cd9700eb44c89ab629442f5f4e71a4382a073336f572f36221ba88f9581b8bbaa28f7a6a6b7237b89b8d094e18bdeac7c95d70c33edf128ff523713d73ad334cb67a5560d8a34a4159cfb0c43f01cbd87b7ef8bc05d96a1d7768ddde0932850f0df169a2e062e75089bc578dc02d48a55909844de936b96e6402d5f43e89188ed77d6aaba2ecd066ef1e01fa0f2d356c196524445425129d14c96fb2d843fad8f72bc3781e811e3711b608698ec28abd36dd5f8756d81998001c8c925cd667390eba79a991b1e1e64d71f32d1808568"}, @TIPC_NLA_NODE_ID={0x5f, 0x3, "f30786d1865f950ef3d125e88f898dc7e3d253395b43527da134a356656a4041b7d6694982a7c6f0256f2879129510434bab3315c90f2b1a3c8eaaf352fbaafbf361919e39f5d21159affb219a706a08a7558d3c27f8f68e8ea2cd"}, @TIPC_NLA_NODE_UP={0x4}, @TIPC_NLA_NODE_UP={0x4}, @TIPC_NLA_NODE_ADDR={0x8, 0x1, 0x889}]}]}, 0x11ac}, 0x1, 0x0, 0x0, 0x4040004}, 0x810) (async) sendmsg$TIPC_NL_BEARER_ENABLE(r0, &(0x7f0000001cc0)={&(0x7f00000000c0)={0x10, 0x0, 0x0, 0x48004}, 0xc, &(0x7f0000001c80)={&(0x7f0000000ac0)={0x11ac, r5, 0x20, 0x70bd2b, 0x25dfdbfb, {}, [@TIPC_NLA_BEARER={0xd8, 0x1, 0x0, 0x1, [@TIPC_NLA_BEARER_DOMAIN={0x8, 0x3, 0x40}, @TIPC_NLA_BEARER_NAME={0xf, 0x1, @l2={'ib', 0x3a, 'pimreg0\x00'}}, @TIPC_NLA_BEARER_UDP_OPTS={0x38, 0x4, {{0x20, 0x1, @in6={0xa, 0x4e22, 0x6, @private2={0xfc, 0x2, '\x00', 0x1}, 0x9}}, {0x14, 0x2, @in={0x2, 0x4e24, @multicast2}}}}, @TIPC_NLA_BEARER_NAME={0xd, 0x1, @udp='udp:syz2\x00'}, @TIPC_NLA_BEARER_UDP_OPTS={0x38, 0x4, {{0x14, 0x1, @in={0x2, 0x4e21, @remote}}, {0x20, 0x2, @in6={0xa, 0x4e22, 0x1, @private1, 0x3}}}}, @TIPC_NLA_BEARER_PROP={0x2c, 0x2, 0x0, 0x1, [@TIPC_NLA_PROP_TOL={0x8, 0x2, 0x6}, @TIPC_NLA_PROP_TOL={0x8, 0x2, 0xf9a}, @TIPC_NLA_PROP_TOL={0x8, 0x2, 0x3}, @TIPC_NLA_PROP_TOL={0x8, 0x2, 0x98}, @TIPC_NLA_PROP_TOL={0x8, 0x2, 0x7ff}]}, @TIPC_NLA_BEARER_NAME={0x10, 0x1, @l2={'eth', 0x3a, 'ip_vti0\x00'}}]}, @TIPC_NLA_NODE={0x10c0, 0x6, 0x0, 0x1, [@TIPC_NLA_NODE_KEY={0x45, 0x4, {'gcm(aes)\x00', 0x1d, "d3a5b6b93183c68ce7c39c5dd4eac772f6c8680b0a1929e0e0cb7f0c79"}}, @TIPC_NLA_NODE_ID={0x1004, 0x3, "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"}, @TIPC_NLA_NODE_ID={0x5f, 0x3, "f30786d1865f950ef3d125e88f898dc7e3d253395b43527da134a356656a4041b7d6694982a7c6f0256f2879129510434bab3315c90f2b1a3c8eaaf352fbaafbf361919e39f5d21159affb219a706a08a7558d3c27f8f68e8ea2cd"}, @TIPC_NLA_NODE_UP={0x4}, @TIPC_NLA_NODE_UP={0x4}, @TIPC_NLA_NODE_ADDR={0x8, 0x1, 0x889}]}]}, 0x11ac}, 0x1, 0x0, 0x0, 0x4040004}, 0x810) sendmsg$IPCTNL_MSG_CT_NEW(r4, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000180)={0x38, 0x0, 0x1, 0x401, 0x0, 0x0, {0x2}, [@CTA_TUPLE_ORIG={0x24, 0x2, 0x0, 0x1, [@CTA_TUPLE_IP={0x14, 0x1, 0x0, 0x1, @ipv4={{0x8, 0x1, @multicast1}, {0x8, 0x2, @multicast1}}}, @CTA_TUPLE_PROTO={0xc, 0x2, 0x0, 0x1, {0x5}}]}]}, 0x38}}, 0x0) sendmsg$nl_generic(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000340)=ANY=[@ANYBLOB="3000000040000701feffffff00000000047c0000040042801400018006000600800a000008001c00", @ANYBLOB="a319fc1971479eec7cf7cbe0a822d843aa2b1ec6d5fc67b34951b09cabfc593d673178c6e244492a84e29a8d0d98a6d018ee2b8c53cc639c0ab51156a35830b8c87e80e50bf9fb3216adfc8152c7e00228073c9be57f4ca96fef80ac"], 0x30}, 0x1, 0x0, 0x0, 0x4048854}, 0xc000) 2m42.976829143s ago: executing program 0 (id=2931): syz_emit_ethernet(0x6a, &(0x7f0000000840)=ANY=[@ANYBLOB="aaaaaaaaaaaa00000000000008004510005c0000000000119078000000000000000000004e22004890780300000002000000a0fcc73b5ef32a884b2033728e956f3f20d16734af14637c85eff9728117c4c62162a8a6a5340ad7eccbe4a1c68802028d6ef0a4df21f4a9abcae85292eccbfa7c07be7ca1d8d9be3964f28f732bfd2e134ea8eda3edef0ce2c1a98ae45cf95fd0188f1d80aeeaa940b650"], 0x0) r0 = socket$inet6(0xa, 0x4, 0xff) ioctl$XFS_IOC_EXCHANGE_RANGE(0xffffffffffffffff, 0x40285881, &(0x7f0000000000)={r0, 0x0, 0x1, 0xffffffffffffff80, 0x7, 0x4}) r1 = openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0) ioctl$TUNSETIFF(r1, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x7101}) r2 = socket$nl_route(0x10, 0x3, 0x0) r3 = socket$unix(0x1, 0x1, 0x0) ioctl$sock_SIOCGIFINDEX(r3, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r2, &(0x7f0000000740)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000006c0)=@newqdisc={0x48, 0x24, 0x4ee4e6a52ff56541, 0x70bd2a, 0xffffffff, {0x0, 0x0, 0x0, r4, {0x0, 0xfff1}, {0xffff, 0xffff}, {0x0, 0x10}}, [@qdisc_kind_options=@q_prio={{0x9}, {0x18, 0x2, {0x8}}}]}, 0x48}, 0x1, 0x0, 0x0, 0x4000000}, 0x20040084) (async) r5 = socket$unix(0x1, 0x1, 0x0) (async) r6 = socket$kcm(0x11, 0x3, 0x0) (async) r7 = socket$nl_route(0x10, 0x3, 0x0) (async) r8 = socket$inet6_udp(0xa, 0x2, 0x0) ioctl$sock_SIOCGIFINDEX(r8, 0x8933, &(0x7f0000000100)={'bond0\x00', 0x0}) sendmsg$nl_route_sched(r7, &(0x7f0000001200)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000480)=@newqdisc={0x48, 0x24, 0x4ee4e6a52ff56541, 0x0, 0x0, {0x0, 0x0, 0x0, r9, {}, {0xffff, 0xffff}}, [@qdisc_kind_options=@q_cbs={{0x8}, {0xa, 0x2, @TCA_CBS_PARMS={0x18}}}]}, 0x48}}, 0x0) r10 = openat$tun(0xffffffffffffff9c, &(0x7f0000000400), 0x0, 0x0) close(r10) socket$inet_tcp(0x2, 0x1, 0x0) (async) ioctl$SIOCSIFHWADDR(r10, 0x8914, &(0x7f0000002280)={'syzkaller0\x00', @multicast}) (async) r11 = socket$unix(0x1, 0x1, 0x0) ioctl$sock_SIOCGIFINDEX(r11, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r2, &(0x7f0000000580)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000640)=@newtfilter={0x8c, 0x2c, 0xd27, 0x70bd26, 0x25dfdc00, {0x0, 0x0, 0x0, r12, {0x0, 0x4}, {}, {0x8, 0xfff2}}, [@filter_kind_options=@f_matchall={{0xd}, {0x58, 0x2, [@TCA_MATCHALL_ACT={0x54, 0x2, [@m_tunnel_key={0x50, 0x1, 0x0, 0x0, {{0xf}, {0x20, 0x2, 0x0, 0x1, [@TCA_TUNNEL_KEY_PARMS={0x1c, 0x2, {{0x7cff, 0xbd, 0x8, 0x6, 0x1ff}, 0x2}}]}, {0x4}, {0xc, 0x7, {0x1, 0x1}}, {0xc, 0x8, {0x0, 0x3}}}}]}]}}]}, 0x8c}, 0x1, 0x0, 0x0, 0x8000}, 0x20000000) (async) ioctl$sock_SIOCGIFINDEX(r5, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) (async) setsockopt$sock_attach_bpf(r6, 0x107, 0xf, &(0x7f0000000600), 0x56) sendmsg$kcm(r6, &(0x7f0000000280)={&(0x7f0000000380)=@xdp={0x2c, 0x0, r13, 0x3e}, 0x80, &(0x7f00000001c0)=[{&(0x7f0000000180)="27030200000214000e00002fb96dffff1144ee163cddcb000000800000827600000000000000", 0x26}, {&(0x7f0000000800)="f058050000007f8f", 0x8}], 0x2}, 0x5) r14 = socket$inet_mptcp(0x2, 0x1, 0x106) setsockopt$IP_VS_SO_SET_EDIT(r14, 0x0, 0x483, &(0x7f0000000040)={0x1, @rand_addr=0x64010100, 0x4e24, 0x0, 'nq\x00', 0x0, 0xb, 0x2c}, 0x2c) 2m42.147754307s ago: executing program 0 (id=2938): r0 = openat$rfkill(0xffffffffffffff9c, &(0x7f0000000040), 0x801, 0x0) r1 = socket(0x2, 0x80805, 0x0) socket$nl_route(0x10, 0x3, 0x0) socket$netlink(0x10, 0x3, 0x2) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000340)=@newtaction={0x60, 0x30, 0x105, 0x70bd28, 0x0, {}, [{0x4c, 0x1, [@m_simple={0x48, 0x1, 0x0, 0x0, {{0xb}, {0x1c, 0x2, 0x0, 0x1, [@TCA_DEF_PARMS={0x18, 0x2, {0x2, 0xfffffff8, 0x1, 0x9, 0x7}}]}, {0x4}, {0xc, 0x7, {0x1, 0x1}}, {0xc, 0x8, {0x2, 0x3}}}}]}]}, 0x60}, 0x1, 0x0, 0x0, 0x8004}, 0x2000000) socket$inet_tcp(0x2, 0x1, 0x0) r2 = syz_init_net_socket$bt_l2cap(0x1f, 0x3, 0x0) r3 = openat$tun(0xffffffffffffff9c, &(0x7f0000000040), 0x1c1341, 0x0) ioctl$TUNSETIFF(r3, 0x400454ca, &(0x7f00000000c0)={'syzkaller0\x00', 0x84aebfbd6349b7f2}) r4 = socket(0x10, 0x803, 0x0) ioctl$sock_SIOCGIFINDEX(r4, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r4, &(0x7f00000012c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000a40)=@newqdisc={0x2c, 0x24, 0x800, 0x70bd2d, 0x25dfdbfc, {0x0, 0x0, 0x0, r5, {0x0, 0x9}, {0xffff, 0xffff}}, [@qdisc_kind_options=@q_drr={0x8}]}, 0x2c}, 0x1, 0x0, 0x0, 0x81}, 0x0) sendmsg$nl_route_sched(r4, &(0x7f0000006040)={0x0, 0x0, &(0x7f0000000300)={&(0x7f00000001c0)=@newtfilter={0x4c, 0x2c, 0xd27, 0x70bd2a, 0x25dfdbfb, {0x0, 0x0, 0x0, r5, {0xc, 0xffe0}, {0x0, 0x9}, {0xfff3, 0x9}}, [@filter_kind_options=@f_flower={{0xb}, {0x1c, 0x2, [@TCA_FLOWER_KEY_ETH_TYPE={0x6, 0x8, 0x8848}, @TCA_FLOWER_KEY_MPLS_OPTS={0x8, 0x63, 0x0, 0x1, @TCA_FLOWER_KEY_MPLS_OPTS_LSE={0x4}}, @TCA_FLOWER_KEY_MPLS_BOS={0x5, 0x44, 0x6}]}}]}, 0x4c}}, 0x2000a100) connect$bt_l2cap(r2, &(0x7f0000000040)={0x1f, 0x0, @fixed={'\xaa\xaa\xaa\xaa\xaa', 0x10}, 0x240}, 0xe) setsockopt$bt_BT_SECURITY(r2, 0x112, 0x4, &(0x7f0000000000)={0x2, 0x8}, 0x2) poll(&(0x7f0000000000), 0x20000000000000b5, 0x9) getsockopt$bt_hci(r1, 0x84, 0x6d, 0x0, &(0x7f0000001040)) write$rfkill(r0, &(0x7f0000000000)={0x1, 0x5, 0x2, 0x0, 0x1}, 0x8) r6 = socket$nl_netfilter(0x10, 0x3, 0xc) r7 = socket$vsock_stream(0x28, 0x1, 0x0) setsockopt$SO_VM_SOCKETS_BUFFER_MIN_SIZE(r7, 0x28, 0x1, 0x0, 0x0) r8 = socket$nl_generic(0x10, 0x3, 0x10) r9 = syz_genetlink_get_family_id$devlink(&(0x7f0000000040), 0xffffffffffffffff) sendmsg$DEVLINK_CMD_RATE_GET(r8, &(0x7f0000000080)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000280)={0x2c, r9, 0x1, 0x0, 0x0, {0x30}, [@DEVLINK_ATTR_PORT_INDEX={0x8, 0x3, 0x1}, @DEVLINK_ATTR_RATE_NODE_NAME={0xe}]}, 0x2c}}, 0x48800) sendmsg$NFT_BATCH(r6, &(0x7f000000c2c0)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000340)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a28000000000a0101000000005e1affd5020000000900010073797a300000000008000240000000032c000000030a01030000e6ff00000000020000000900010073797a30000000000900030073797a320000000014000000110001"], 0x7c}}, 0x0) setsockopt$RDS_GET_MR_FOR_DEST(r1, 0x114, 0x7, &(0x7f00000001c0)={@pppol2tpv3in6={0x18, 0x1, {0x0, r7, 0x1, 0x3, 0x4, 0x4, {0xa, 0x4e21, 0x8, @initdev={0xfe, 0x88, '\x00', 0x1, 0x0}, 0xef4}}}, {&(0x7f0000000100)=""/106, 0x6a}, &(0x7f0000000180), 0x51}, 0xa0) r10 = socket$inet6(0xa, 0x2, 0x0) bind$inet6(r10, &(0x7f0000000040)={0xa, 0xe22}, 0x1c) connect$inet6(r10, &(0x7f00000001c0)={0xa, 0x0, 0x75040e60, @empty, 0x2}, 0x1c) socket$netlink(0x10, 0x3, 0x8000000004) 2m41.708170788s ago: executing program 0 (id=2943): setsockopt$netlink_NETLINK_NO_ENOBUFS(0xffffffffffffffff, 0x10e, 0xc, 0x0, 0x0) sendmsg$nl_route(0xffffffffffffffff, 0x0, 0x0) sendmsg$nl_xfrm(0xffffffffffffffff, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000000c0)=ANY=[@ANYBLOB="500100001000130400000000fbdbdf25fe8000000000000000000000000000bb00000000000000000000000000000000000000004e2400000200002000000000", @ANYRES32=0x0, @ANYRES32=0xee00, @ANYBLOB="00000000000000000000ffffac0f14bb"], 0x150}, 0x1, 0x0, 0x0, 0x80c0}, 0x0) r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000000), 0x48241, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f00000000c0)={'syzkaller1\x00', 0x6bf1c2d5adba8c32}) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000001140)={&(0x7f0000000100)=ANY=[@ANYRES8, @ANYRES32, @ANYBLOB="0000000000000000400012800c0001"], 0x68}}, 0x0) r1 = socket$igmp6(0xa, 0x3, 0x2) r2 = socket$kcm(0x2, 0xa, 0x2) ioctl$SIOCSIFHWADDR(r2, 0x8914, &(0x7f0000000380)={'syzkaller1\x00', @link_local}) ioctl$sock_SIOCSIFVLAN_ADD_VLAN_CMD(r1, 0x8983, &(0x7f0000000300)={0x0, 'syzkaller1\x00', {0x2}}) write$tun(r0, &(0x7f0000000100)=ANY=[@ANYBLOB="06000000bbbbbbbbbbbbaaaaaaaaaabb88f5"], 0x72) r3 = openat$tun(0xffffffffffffff9c, &(0x7f0000000040), 0x1c1341, 0x0) ioctl$TUNSETIFF(r3, 0x400454ca, &(0x7f00000000c0)={'syzkaller0\x00', 0x84aebfbd6349b7f2}) bpf$ENABLE_STATS(0x20, 0x0, 0x0) r4 = socket(0x10, 0x803, 0x0) ioctl$sock_SIOCGIFINDEX(r4, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r4, &(0x7f00000012c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000a40)=@newqdisc={0x2c, 0x24, 0x4ee4e6a52ff5653f, 0x70bd2d, 0x25dfdbfc, {0x0, 0x0, 0x0, r5, {0x0, 0x9}, {0xffff, 0xffff}}, [@qdisc_kind_options=@q_drr={0x8}]}, 0x2c}, 0x1, 0x0, 0x0, 0x81}, 0x0) sendmsg$nl_route_sched(r4, &(0x7f0000006040)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000140)=@newtfilter={0x54, 0x2c, 0xd27, 0x70bd2a, 0x25ffdbfc, {0x0, 0x0, 0x0, r5, {0xc, 0xa}, {0x0, 0x9}, {0xffff, 0x9}}, [@filter_kind_options=@f_flower={{0xb}, {0x24, 0x2, [@TCA_FLOWER_KEY_ETH_TYPE={0x6, 0x8, 0x8848}, @TCA_FLOWER_KEY_MPLS_OPTS={0x18, 0x63, 0x0, 0x1, @TCA_FLOWER_KEY_MPLS_OPTS_LSE={0x14, 0x1, 0x0, 0x1, [@TCA_FLOWER_KEY_MPLS_OPT_LSE_BOS={0x5, 0x3, 0x40}, @TCA_FLOWER_KEY_MPLS_OPT_LSE_DEPTH={0x5, 0x1, 0x2}]}}]}}]}, 0x54}, 0x1, 0x0, 0x0, 0x4010}, 0x0) 2m41.252099124s ago: executing program 0 (id=2948): r0 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r0, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000001ac0)={&(0x7f0000000000)={0x14, 0x26, 0x1, 0xf0bd26, 0x25dfdbfd, {0x5}}, 0x14}, 0x1, 0x0, 0x0, 0x4000d}, 0x20000000) r1 = socket$nl_route(0x10, 0x3, 0x0) r2 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000040)='cpuset.effective_cpus\x00', 0x275a, 0x0) ioctl$FS_IOC_SETFLAGS(r2, 0x40086602, &(0x7f0000000080)=0x20) r3 = socket$packet(0x11, 0x3, 0x300) ioctl$SIOCGSTAMPNS(r3, 0x8907, 0x0) recvmmsg(r3, &(0x7f00000021c0)=[{{0x0, 0x0, 0x0}, 0x9}], 0x1, 0x0, 0x0) openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000040)='cpuset.effective_cpus\x00', 0x275a, 0x0) r4 = socket(0x10, 0x803, 0x0) sendmsg$nl_route(r1, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000380)=ANY=[@ANYBLOB="500000001000810500"/20, @ANYRES32=0x0, @ANYBLOB="01000000000000002800128009000100766c616e000000001800028006000100030000000c0002001c0000000f49000008000500", @ANYRES32=r4], 0x50}}, 0xc0) 2m26.152061803s ago: executing program 33 (id=2948): r0 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r0, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000001ac0)={&(0x7f0000000000)={0x14, 0x26, 0x1, 0xf0bd26, 0x25dfdbfd, {0x5}}, 0x14}, 0x1, 0x0, 0x0, 0x4000d}, 0x20000000) r1 = socket$nl_route(0x10, 0x3, 0x0) r2 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000040)='cpuset.effective_cpus\x00', 0x275a, 0x0) ioctl$FS_IOC_SETFLAGS(r2, 0x40086602, &(0x7f0000000080)=0x20) r3 = socket$packet(0x11, 0x3, 0x300) ioctl$SIOCGSTAMPNS(r3, 0x8907, 0x0) recvmmsg(r3, &(0x7f00000021c0)=[{{0x0, 0x0, 0x0}, 0x9}], 0x1, 0x0, 0x0) openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000040)='cpuset.effective_cpus\x00', 0x275a, 0x0) r4 = socket(0x10, 0x803, 0x0) sendmsg$nl_route(r1, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000380)=ANY=[@ANYBLOB="500000001000810500"/20, @ANYRES32=0x0, @ANYBLOB="01000000000000002800128009000100766c616e000000001800028006000100030000000c0002001c0000000f49000008000500", @ANYRES32=r4], 0x50}}, 0xc0) 4.176016498s ago: executing program 5 (id=3972): r0 = accept4$alg(0xffffffffffffffff, 0x0, 0x0, 0x800) readv(r0, &(0x7f0000000280)=[{&(0x7f0000000000)=""/198, 0xc6}, {&(0x7f0000000100)=""/129, 0x81}, {&(0x7f00000001c0)=""/157, 0x9d}], 0x3) r1 = socket$inet_udp(0x2, 0x2, 0x0) getsockopt$inet_IP_IPSEC_POLICY(r1, 0x0, 0x10, &(0x7f00000002c0)={{{@in=@multicast1, @in6=@initdev, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}, {{@in6}, 0x0, @in6=@loopback}}, &(0x7f00000003c0)=0xe8) ioctl$BTRFS_IOC_START_SYNC(r1, 0x80089418, &(0x7f0000000400)=0x0) ioctl$BTRFS_IOC_SUBVOL_CREATE_V2(r0, 0x50009418, &(0x7f0000000440)={{r0}, r4, 0xe, @unused=[0x0, 0x7, 0x8000000000000000, 0x4], @name="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"}) recvfrom$inet(r1, &(0x7f0000001440), 0x0, 0x100, &(0x7f0000001480)={0x2, 0x4e24, @loopback}, 0x10) ioctl$PPPIOCSNPMODE(0xffffffffffffffff, 0x4008744b, &(0x7f00000014c0)={0xc023}) ioctl$NILFS_IOCTL_SYNC(r1, 0x80086e8a, &(0x7f0000001500)) r5 = socket$nl_xfrm(0x10, 0x3, 0x6) getsockopt$PNPIPE_IFINDEX(0xffffffffffffffff, 0x113, 0x2, &(0x7f0000001580)=0x0, &(0x7f00000015c0)=0x4) sendmsg$nl_xfrm(r5, &(0x7f0000001840)={&(0x7f0000001540)={0x10, 0x0, 0x0, 0x400000}, 0xc, &(0x7f0000001800)={&(0x7f0000001600)=@migrate={0x1e8, 0x21, 0x300, 0x70bd28, 0x25dfdbfe, {{@in6=@initdev={0xfe, 0x88, '\x00', 0x0, 0x0}, @in=@multicast1, 0x4e20, 0x8a, 0x4e24, 0x2, 0x2, 0x20, 0x80, 0x0, r2, r3}, 0x6e6bb2}, [@algo_crypt={0xb3, 0x2, {{'xts-camellia-aesni-avx2\x00'}, 0x358, "89db19f33eedc400334afc35b0ea6b48084c032003d894a604b818991188f0899ea5e4c5f0151ffe2da43c99849dbed7a69f835cfef96924c4dd2f532c078c773cc49f2d61b6e60deec11dde401249c5d5180eba39df68b241b8cd6957c61ad90462f8f96bd63060783ada"}}, @sa={0xe4, 0x6, {{@in=@rand_addr=0x64010102, @in6=@remote, 0x4e21, 0x1, 0x4e24, 0x6, 0x0, 0x80, 0x0, 0x3c, r6, r3}, {@in6=@mcast2, 0x4d3}, @in=@loopback, {0x200, 0x6, 0xe1, 0xe1c, 0x8001, 0x5, 0x3, 0x7fff}, {0x8001, 0x4, 0xfff, 0x5}, {0xffff8001, 0x4, 0xa}, 0x70bd29, 0x3502, 0x2, 0x3, 0x0, 0x50}}]}, 0x1e8}}, 0x60000080) write(r1, &(0x7f0000001880)="c203211ff7c5f0ba86dfb07b00b1e8c106f0ac25e3017fcbd88ee87fcfe04e3ad0f8a498695aefd7b60b3f94e3c30d4a130b05d64793e07d4c63aa7661262d902096a84692e0d8f9db88792bff4676b2e2136ce5ebd7bc52a1ef9c147e599c00796b822eec79b185f3acbd1813ecd6d1c21c20d34fb8a7b7fd5da50334e02a11ac77a04438ba5bc7b1", 0x89) r7 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r7, &(0x7f0000001a40)={&(0x7f0000001940)={0x10, 0x0, 0x0, 0x1000}, 0xc, &(0x7f0000001a00)={&(0x7f0000001980)=@newtclass={0x58, 0x28, 0x10, 0x70bd29, 0x25dfdbfc, {0x0, 0x0, 0x0, r6, {0xffff, 0xf}, {0xd, 0x9}, {0x4, 0x4}}, [@tclass_kind_options=@c_ingress={0xc}, @TCA_RATE={0x6, 0x5, {0xf9, 0x1}}, @tclass_kind_options=@c_mqprio={0xb}, @tclass_kind_options=@c_mqprio={0xb}, @TCA_RATE={0x6, 0x5, {0x5, 0x7}}]}, 0x58}, 0x1, 0x0, 0x0, 0x20000004}, 0x2004c0c5) ioctl$FS_IOC_GETFLAGS(r1, 0x80086601, &(0x7f0000001a80)) recvmsg(r0, &(0x7f0000001d80)={&(0x7f0000001ac0)=@pptp={0x18, 0x2, {0x0, @local}}, 0x80, &(0x7f0000001cc0)=[{&(0x7f0000001b40)=""/144, 0x90}, {&(0x7f0000001c00)=""/150, 0x96}], 0x2, &(0x7f0000001d00)=""/86, 0x56}, 0x40000001) ioctl$F2FS_IOC_RESERVE_COMPRESS_BLOCKS(r1, 0x8008f513, &(0x7f0000001dc0)) bpf$BPF_MAP_CONST_STR_FREEZE(0x16, &(0x7f0000001e00)={0x1, 0xffffffffffffffff}, 0x4) r9 = openat$cgroup_ro(0xffffffffffffffff, &(0x7f0000001ec0)='memory.swap.events\x00', 0x0, 0x0) ioctl$XFS_IOC_PATH_TO_FSHANDLE(r7, 0xc0385868, &(0x7f0000002000)={r5, &(0x7f0000001f00)='mqprio\x00', 0x359000, &(0x7f0000001f40)={@_ha_fsid={[0x6, 0x8]}, {0x4c3, 0xe, 0x5}}, 0x9, &(0x7f0000001f80), &(0x7f0000001fc0)=0xf1}) bpf$MAP_CREATE(0x0, &(0x7f0000001e40)=@base={0x6f8864fa5a0d0004, 0x4, 0x0, 0x4f2d, 0x19a86, r8, 0x38c6, '\x00', r6, 0xffffffffffffffff, 0x2, 0x3, 0x2, 0x0, @value=r9, @void, @value=r10}, 0x50) r11 = socket$inet_icmp(0x2, 0x2, 0x1) setsockopt$IPT_SO_SET_REPLACE(r11, 0x0, 0x40, &(0x7f0000002080)=@filter={'filter\x00', 0xe, 0x4, 0x278, 0xffffffff, 0x130, 0x98, 0x130, 0xffffffff, 0xffffffff, 0x1e0, 0x1e0, 0x1e0, 0xffffffff, 0x4, &(0x7f0000002040), {[{{@uncond, 0x0, 0x70, 0x98}, @REJECT={0x28, 'REJECT\x00', 0x0, {0x2}}}, {{@uncond, 0x0, 0x70, 0x98}, @REJECT={0x28, 'REJECT\x00', 0x0, {0x8}}}, {{@ip={@remote, @multicast1, 0x0, 0xff000000, 'veth1_vlan\x00', 'sit0\x00', {}, {}, 0x11, 0x3, 0x42}, 0x0, 0x70, 0xb0}, @common=@unspec=@ERROR={0x40, 'ERROR\x00', 0x0, "977ab6362a0ce5f680983f553011740b2af3de2d1d1a405b4207cae84a14"}}], {{'\x00', 0x0, 0x70, 0x98}, {0x28}}}}, 0x2d8) recvfrom$inet(r1, &(0x7f0000002380)=""/4096, 0x1000, 0x0, &(0x7f0000003380)={0x2, 0x4e23, @multicast2}, 0x10) getsockopt$inet_sctp6_SCTP_SOCKOPT_PEELOFF(r9, 0x84, 0x66, &(0x7f00000033c0)={0x0, 0x7}, &(0x7f0000003400)=0x8) setsockopt$inet_sctp_SCTP_ASSOCINFO(r10, 0x84, 0x1, &(0x7f0000003440)={r12, 0x4, 0x7, 0x4, 0x7f}, 0x14) sendmsg$RDMA_NLDEV_CMD_RES_QP_GET(r10, &(0x7f0000003580)={&(0x7f0000003480)={0x10, 0x0, 0x0, 0x200}, 0xc, &(0x7f0000003540)={&(0x7f00000034c0)={0x48, 0x140a, 0x20, 0x70bd2c, 0x25dfdbfc, "", [@RDMA_NLDEV_ATTR_RES_LQPN={0x8, 0x15, 0x2}, @RDMA_NLDEV_ATTR_DEV_INDEX={0x8, 0x1, 0x2}, @RDMA_NLDEV_ATTR_RES_LQPN={0x8, 0x15, 0x2}, @RDMA_NLDEV_ATTR_PORT_INDEX={0x8}, @RDMA_NLDEV_ATTR_PORT_INDEX={0x8, 0x3, 0x1}, @RDMA_NLDEV_ATTR_RES_LQPN={0x8, 0x15, 0x4}, @RDMA_NLDEV_ATTR_PORT_INDEX={0x8, 0x3, 0x4}]}, 0x48}, 0x1, 0x0, 0x0, 0x40080}, 0x4000180) connect$vsock_stream(r10, &(0x7f00000035c0)={0x28, 0x0, 0x2711, @my=0x1}, 0x10) setsockopt(r7, 0xd, 0x32f1437e, &(0x7f0000003600)="d97de41534e2f11053ff0637c2863c7a3d7532bccff7d7b9e0ee055b3727e494ab1c18e376dcf4d609b28ed1f7049854ba43e0f39cbb021ef5fd34cf86403314879e8cd55d957eb29ef833e822313d64b8e5a5d343fec9c56f66c060dc30e5bd357cb9d59baef030173dadd20ca408e053c2c640ff6cca1f7f9213427edc0aaa04d4359c52c487a42e35fdcf202ddf0e07fcd7f18847e164b824b805dd679f61e1ae06a1f1d26c5bb0a4cd125ff843ac", 0xb0) 3.590329757s ago: executing program 4 (id=3977): r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000540)={&(0x7f0000000000)=ANY=[@ANYRESOCT=r0, @ANYRESHEX=r0, @ANYRES8=r0, @ANYRESDEC=r0, @ANYRESHEX=r0, @ANYRES8=r0, @ANYRES32=r0], 0x40}}, 0x0) socket$nl_route(0x10, 0x3, 0x0) (async) sendmsg$nl_route(r0, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000540)={&(0x7f0000000000)=ANY=[@ANYRESOCT=r0, @ANYRESHEX=r0, @ANYRES8=r0, @ANYRESDEC=r0, @ANYRESHEX=r0, @ANYRES8=r0, @ANYRES32=r0], 0x40}}, 0x0) (async) 3.313320495s ago: executing program 4 (id=3982): r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000500)=@base={0x6, 0x4, 0x8, 0x6}, 0x50) r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000000)={0x6, 0xc, &(0x7f00000000c0)=ANY=[@ANYRES8=r0, @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000019007b8af8ff00800000bfa200000000000007020000fbffffffb703000008000000b7040000000000008500000001000000955f4e76de04895f6e8c85498d11eebb1c0626e5e4d820efa028b502b993c8173c6c3653c7"], &(0x7f0000000900)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @xdp, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_GET_PROG_INFO(0xa, &(0x7f0000000580)={r1, 0x0, 0x0}, 0x10) bpf$BPF_BTF_LOAD(0x12, 0x0, 0x0) 3.092121257s ago: executing program 5 (id=3983): r0 = bpf$MAP_CREATE(0x0, &(0x7f00000000c0)=ANY=[@ANYBLOB="1b00000000000000000000000080"], 0x50) r1 = socket$alg(0x26, 0x5, 0x0) bind$alg(r1, &(0x7f0000000300)={0x26, 'skcipher\x00', 0x0, 0x0, 'ecb-serpent-avx\x00'}, 0x58) setsockopt$ALG_SET_KEY(r1, 0x117, 0x1, 0x0, 0x0) r2 = accept4(r1, 0x0, 0x0, 0x0) syz_genetlink_get_family_id$ethtool(&(0x7f00000004c0), r2) sendmsg$alg(r2, &(0x7f0000000080)={0x0, 0x0, 0x0, 0x0, &(0x7f0000000100)=[@op={0x18, 0x117, 0x3, 0x1}], 0x18, 0x840}, 0x4040880) sendmsg$nl_route_sched(r2, &(0x7f0000000540)={0x0, 0x0, &(0x7f0000000500)={&(0x7f0000001dc0)=@newchain={0x80, 0x64, 0xf09d2fbf8b68c555, 0x70bd27, 0x25dfdbfe, {0x0, 0x0, 0x0, 0x0, {0xffff, 0x8}, {0xfff1, 0xd}, {0x9, 0xfff1}}, [@filter_kind_options=@f_flow={{0x9}, {0xc, 0x2, [@TCA_FLOW_BASECLASS={0x8, 0x3, {0x7, 0xa}}]}}, @filter_kind_options=@f_flower={{0xb}, {0x38, 0x2, [@TCA_FLOWER_KEY_IPV6_SRC={0x14, 0xe, @loopback}, @TCA_FLOWER_KEY_ETH_DST_MASK={0xa, 0x5, [0xff, 0x0, 0xff]}, @TCA_FLOWER_KEY_ENC_IPV6_DST_MASK={0x14, 0x22, [0xffffffff, 0x0, 0xffffff00, 0xffffff00]}]}}]}, 0x80}, 0x1, 0x0, 0x0, 0x80}, 0x44000) bpf$PROG_LOAD(0x5, &(0x7f0000000400)={0x1, 0x2a, &(0x7f0000000280)=ANY=[@ANYBLOB="1800000097000000000000000000001818110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007baaf8fe00000000bfa200000000000007020000f8fdffffb703000000000000b704000000000000b5001c008200000018120000", @ANYRES32=r0, @ANYBLOB="0000000000000000b702000014000000b7030000000000008500000083000000bf090000000000005509010000000000950000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000070000008200000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8a00fe00000000bfa200000000000007020000f8ffffffb703000008000000b7040000010000008500000082000000bf91000000000000b7020000010000008500000085000000b70000000000000095"], &(0x7f0000000040)='syzkaller\x00', 0xf, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) syz_emit_ethernet(0x32, &(0x7f0000000040)=ANY=[@ANYBLOB="aaaaaaaaaaaa97c4864ef7a30800490000240064000000879078ac14e43dac14140c8907efe000000d860600000000000000010337f56dff7b5f4673b7133f40a8aee2695f8f6d71bbed670b781cbb73ba5905ba3cf53c0e0e2e749f2e86256df9031a36b2154b33380e77ed946159eaa0925c4976e30d80a3d2ea456da0bd03d5c55757f18f0ffd88072fbe0609c9b7feadb33119616f2b606df8658688b97e43b87af1de2168bf375033f94c0075f9193a9f062724f7deb697477999a9fc37"], 0x0) 3.052813824s ago: executing program 4 (id=3984): r0 = syz_init_net_socket$802154_dgram(0x24, 0x2, 0x0) r1 = syz_init_net_socket$bt_rfcomm(0x1f, 0x1, 0x3) connect$bt_rfcomm(r1, &(0x7f0000000040)={0x1f, @fixed={'\xaa\xaa\xaa\xaa\xaa', 0x10}, 0x3}, 0xa) r2 = socket$inet6_udp(0xa, 0x2, 0x0) ioctl$sock_ipv6_tunnel_SIOCGET6RD(0xffffffffffffffff, 0x89f8, &(0x7f0000000240)={'syztnl2\x00', &(0x7f0000000100)={'syztnl2\x00', 0x0, 0x20, 0x7, 0x8b86, 0xfa, {{0x2c, 0x4, 0x3, 0x0, 0xb0, 0x64, 0x0, 0x10, 0x2f, 0x0, @dev={0xac, 0x14, 0x14, 0x28}, @multicast1, {[@timestamp_prespec={0x44, 0x54, 0x1a, 0x3, 0x8, [{@remote, 0x400}, {@loopback, 0x4da7}, {@loopback, 0xa}, {@private=0xa010102, 0x8}, {@local, 0x4}, {@broadcast, 0x9d0}, {@broadcast, 0x6}, {@dev={0xac, 0x14, 0x14, 0x3f}, 0x1}, {@multicast2, 0x3}, {@multicast2, 0x8}]}, @noop, @ssrr={0x89, 0xb, 0x26, [@multicast2, @remote]}, @lsrr={0x83, 0xf, 0xb9, [@empty, @remote, @dev={0xac, 0x14, 0x14, 0x36}]}, @lsrr={0x83, 0x13, 0x8d, [@multicast1, @initdev={0xac, 0x1e, 0x1, 0x0}, @initdev={0xac, 0x1e, 0x0, 0x0}, @empty]}, @ssrr={0x89, 0x17, 0x5, [@multicast1, @initdev={0xac, 0x1e, 0x1, 0x0}, @broadcast, @multicast1, @remote]}]}}}}}) ioctl$sock_ipv6_tunnel_SIOCGETTUNNEL(r2, 0x89f0, &(0x7f0000000380)={'ip6_vti0\x00', &(0x7f0000000280)={'ip6_vti0\x00', r3, 0x29, 0xa2, 0x9, 0x9, 0x11, @mcast2, @private2, 0x7, 0x7847, 0x7, 0x85ea}}) shutdown(r1, 0x1) ioctl$sock_SIOCSIFVLAN_ADD_VLAN_CMD(r0, 0x8983, &(0x7f0000001340)={0x0, 'lo\x00', {0x4}, 0x5}) r4 = bpf$BPF_BTF_LOAD(0x12, &(0x7f0000001340)={&(0x7f00000000c0)=ANY=[@ANYBLOB="9febfee2cf00000000000000000002000000000000000000200100"/36], 0x0, 0x2a}, 0x20) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000400)={0x11, 0xe, &(0x7f0000000300)=ANY=[@ANYBLOB="180000000000000000000000fcffff203a4098b605be1800000400"/36, @ANYRES32, @ANYBLOB="0000000000000000b703000000000000850000000c000000b7000000000000009500000000000000950000000000000018400000feffffff480000000000000095"], &(0x7f0000000040)='GPL\x00', 0x3, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, r4, 0x9, 0x0, 0x0, 0x10, &(0x7f0000000200), 0x10}, 0x90) 2.808525543s ago: executing program 6 (id=3987): r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000140)={&(0x7f00000003c0)=@can_delroute={0x40, 0x19, 0x1, 0x70bd2a, 0x25dfdbff, {0x1d, 0x1, 0x6}, [@CGW_MOD_SET={0x15, 0x4, {{{0x3, 0x1, 0x1, 0x1}, 0x8, 0x1, 0x0, 0x0, "6698c13a70ca67e7"}, 0x2}}, @CGW_FILTER={0xc, 0xb, {{0x4, 0x1}, {0x2, 0x0, 0x0, 0x1}}}, @CGW_CS_XOR={0x8, 0x5, {0x4, 0xfffffffffffffffa, 0xfffffffffffffff8, 0xc}}]}, 0x40}, 0x1, 0x0, 0x0, 0x800}, 0x0) bpf$PROG_LOAD(0x5, &(0x7f00000017c0)={0x3, 0xe, &(0x7f0000003540)=ANY=[@ANYBLOB="b7000000d00000d0bca30000000000002403000040feffff7b1af0ff0000000079a4f0ff000000001f030000000000002e030200000000002604fdffffff000e61141800000000001d430000000000007a0a00fe0000001f6114140000000000b503f7fff80000009500000000000000033bc065b78111c6dfa041b63af4a3912435f1a864a7aad58db6a693002e7f3be361917adef6ee1c8a2a4f8ef1e50becb19bc461e91a7168e5181554a090f30002af51efd601b6bf01c8e8b1fee5bef7af9aa0d7d600c095199fe3ff3128e599b0eaebbdbd732c9cc00eec363e4a8f6456e2cc21557c0afc646cb7798b3e6440c2fbdb00a3e35208b0bb0d2cd829e65440000000000000000028610643a98d9ec21ead2ed51b104d4d91af25b845b9f7d08d123deda88c658d42ecbf28bf7076c15b463bebc72f526dd70252e79166d858fcd0e06dd31af9612fa402d0b11008e59a5923906f88b53987ad1714e72ba7a54f0c33d39000d06a59ff616236fd9aa58f0177184b6a89adaf17b0a6041bdef728f5089048ddff6da40f9411fe7226a40409d6e37c4f46756d31cb467600ade70063e5291569b33d21dae356e1c51f03a801be8189679a16da18ec0ae564162a27afea62d84f3a10076443d643649393bf52d2105bd901128c7e0ec82701c8204a1deeed4155617572652d950ad31928b0b036dc2869f478341d02d0f5ad94b081fcd507acb4b9c67382f13d000000225d85ae49cee383dc5049076b98fb6853ab39a21514da60d2ae20cfb91d6a49964757cdf538f9ce2bdbb9893a5de817101ab062cd54e67051d355d84ce97bb0c6b6a595e487a2cc47c0efbb2d71cde2c10f0bc6980fe78683ac5c0c31032599dd273863be9261eee52216d009f4c52048ef8c126aeef5f510a8f1aded94a129e4aec6e8d9ab06faffc3a15d91c2ea3e2e04cfe031b287539d0540059fe6c7fe7cd8697502c7596566de74e425da5e7f009602a9f61d3804b3e0a1053abdc31282dfb15eb6841bb64a1b3045024a982f3c48b936e6f9e0fcda88fe4413537528fd79153baae244e7bf573eac34b781337ad5901a4cad2422ee965a38f7defbd2960242b104e20dc2d9b0c35608d402ccdd9069bd50b994fda7a9de44022a579dfc0229cc0dc98816106dec28eaeb883418f562ae00003ea96d10f172c0374d6eed826416050000000bfe9b4a9c5a90ff59d54d1f92ecc48899b212c55318294270a1ad10c80fef7c24d47afcc829ba0f85da6d888f18ea40ab959f6074ab2a40d85d1501783a7ab51380d7b4ead35a385e0b4a26b602396df7e0c1e02b88c114f2440000eedcf2ba1a9508f9d6aba582a896a9f1ffa968eacea75caf822a7a63ba3401e6a52acb1188883ad2a3b1832371fe5bc621426d1ed01b389708165b9cdbae2ed9dc7358f0ebadde0b727f27feeb7464dcc536cbae2f5c7d951680f6f2f9a6a8346962a350845ffa0d82884f79adc287906943408e6df3c391e97ba48db0a5adbfd03aac93df8866fb010ae20e92bed1fe39af169d2a466f0db6f3d9436a7d55fc30511d00000000c95265b2bd83d648532869d701723fedcbada1ee7baa19faf67256b56a41fd355b6a686b50f0937f778af083e055f6138a757ebd0ed91124a6b244f9acf41ac5d73a008364e0606a594817031fc2654026c6ea08b83b123145ab5703dad844ceb201efeb6dc5f6a9037d2283c42efc54dd84323afc4c10eff462c8843187f1dd48ef0900000000000000ff0f4000000000f00700003c17888e1cdba94a6ea80c33ead5722c3293a493f1479531dd88261458f40d31fe8df15efaaeea831555877f9538c6ee6ba65893ff1f908ba7554ba583ec7932f5954f31a878e2fae6691d1aee1da02ba516467df3e7d1daac43738612e4fee18a22da19fcdb4c1011e32f808890205f0e6da2819d2f9e77c7c64affa54fec0136cbafa5f62e96753b639a924599c1f69219927ea5301fff0a6063d427180d61542c2571f983e96635600000554f327a3535e7c7542799493c31ac05a7b57f03ca91a01ba2a30ca99e969d6fd09dc28ebc15edb4d91675767999d146aef7799738b292fd64bbca48568325b2969e2b15f36b788bce5ccdbaf75c9494963442aece449a0d80010f5c653d22d49030a8c2a4ab595bf4238f18ca428dafc7ac96d404607a0000000051a2104f22e6db5a62b5089c1b45282d38864daa3ae81d6b0968d1d2869291b7d12096833d6864da40b54783a17aaeb6737c323f9f98e354cc98dcfe23ad01bd1c61563e69ffe1c2c73e16e637d4219ef7ec61261173f359e93d2c5e424c17998809ec8f0232b3955e052a4cecd89008f70314a0bdd491ecab5d232f89fe0120f64c62e8e3ed8bcb45202c204bbec8d722824c0ebca8db1ea4a05e41f6016ab5bbe4fe7ff5d785d0128171c90d9900ca2532b0f9d01c4b45294fbba468df3e1b393cb4e62e753b4172ba7ac1f2b51c94bc5d047899fd219f448bf9189c65c9d91eda6b52a373803a9efe44f86909bc90addbc4b3093c91b8068c5adfcb0d7fd849904568916694d461b76a58d88cf0f520310a1e9fdc18cde98d662eee077515d0a881192292ffff5392ab3d1311b82432662806add87047f601fa888400000000000000000000000000006acc19808d7cf29bc974b0ea92499a41b9b9a7c2bca311a28ee4952f2d325a56397c78f12205db653a536f0100e0eda300a43a13bd1b9f3322405d1efd78e578dc6b3fb84f3738a4b6caa800000087efa51c5d95ecba4e50e529d1e8c89600e809dc3d0a2f65579e23457949a50f2d0455cf699b3746979f99f6a1527f004f37e84fb478199dc1020f4beb98b8074bf7df8b5e783637daf121f175a81cffff4ac55a4385e9a617aa6c8e10d4202c5afeb06e2f9115558ea12f92d7ae633d44086b3f03b20d546fa66a72e38207c9d20035abc46271a30f1240de52536941242d23896ab74a3c6670fdc49c14f34fc4eadd6db8d80eba439772bf60a1db18c472dafc5569adc282928d2a1ffe29f1a57d3f18f4edaeb5d37918e6fddcd821da67a0785585a4443440dc65600e64a4a274000000000000000000000000000000000000000000000009dd14b38f2f5426d7cf5075047c31f6ce6adddfe3ac649c0643c8bfbeb14ba1fd7a485aa893915cf81e29aaf375e904bbe52691a4120260ffcd030000006d291ebcef893e1b9ccb6797d0646fe0e7274434f28efb43e06e64f0698caca42f4e6018a455736c482a017e2b13dac4a90faa109f0e87cc94e3efb649692456463ca74aa6ad4bf50c1acb3928143be1c1023a375e528285544d0064b98646f3109e9a4942ce42c6e7ec84b664f6c2770803f10b0a1fcbfc309381aeba191950bae71f37f1eb7ceeffb3c0547ac6571603adbfde4c8b5f8d7f4b854441613633b48865b65bdc415e1e0dcf672d68cf4cebf04f4bc1eebf560a26d3b332240d450fdb0a9a69f432e277f3a0386eb2bd1305c88629a6c921c64757f786b79fef54dbe64c67d73934bc80b2133fb3c04cc7ea48bf97a6243c9f95dcbddecf45f008f1822c7868e1ff5a3cff5d6b6898335792749df7b1f51e91f8c1c3b1b93b33aaa3fab69cef08a9f6f6cf39dea3d878b2ed42545421970cc426e644332bc956d1c6adefdf0ede2c5c94aa632646ae225accdf031f611d01622921f1b922a5ac887cca3136133dce8d9f5f4da7bed2ea5d94362200000000000000000000f296b0c1484e5f781ad26bff696b05ff0a5e2270e07e18b04273bd4075ea38ab463bfa6a38e7c537498ba3e4df8dfc9e8c0a0d213c3ffad44d2a376def42e41e9fc3167a257e040fa7cf32c221aaac6cfdeb33c27500001a0000000000000000000017350000c11ae694b0c69c2c03f6790044a357e785af6e153d5f1ea460af92c7cbbd6295afe740f5e154346d483e0d10522a7a945b93fbf05b95b6aae27a8fab1e6984c8bdc12360627137ab6737b68ab08acb29a74dc36b51209cfbc87f61182bbeb2772e9d5a1ffc477179be481ffe46a4ce86be0b1f8eee42a611a3d44ca450b14586ed63dd92005c79e4a8ab8a94f0b74903580ac98708007c80d6c7d0de4614195e40d797c0348dd70f36a220e8b3710fb5358c27e90793bcb9ee6319342c4b239ca8cbc6fc83d32e6eb62ad92e43991f2447be9c2a1ae1119eafb901a43d57e885116d19aa152bfb89f8d0b2516f80120a1cddff771657f3d0288ec3899f1e3ba0151c4037148fb479de703fc52b6573349c28d1b107d859b4961324c17756dde99de1924a1d2b7095d34a55060f47f4407d89acf9f285b20c2e6b3d0491d0d3591b0d94713332b6b79c8297117b0d14eff64e0aca8a4b4aa773d8fba1217e9519952419bb9dd998d0ec870ff00b6d556018602738fbc6cec89d6dd13cf55b96f6fe9a137d2d6a56ad78e52c23ed080000000000002bc261a781fd14126c146a0aac4221839a4b9bbf61e4bba695a41e2109eba8e40c370267cc51ffadbd15cafc97a4d3edfdcb9b5729307c6bdaf7b69325fb05fa8a9869de0600ee477d71ca3e36d1d9019edfa27aae24b632f251df210c86a18fae731ecb8b0d48357378caf2b6789509b1bacfd4fa812dc341875cfa5e798bbf59770000000000000000c8a594ea3c3347962d9113b1fecdfad5a8da641053f02e49456f5d21674521e67a5b18ea451eccf69dd6af928d2d68da9304a296c22fdcea26498d26229110b1aade386b113045033a6188d56e675564d8cb8d5b40114b0f5bf15dd64c9ece60b8588ee8777d0ea8f4713b258427c7d90f9e93348e17723ba9ab8ae790f74cc41ae5795835f3cec40dff485d2802c08611454d9ea784a205bcc07ec26f906f3cf45bb37014ab6f22af6213618e242b283ea9d3f0677ee598072ec06f7170009d92bb7ed9d12c378dfd3e74ec056ee83eef666423d934fc5908c9ff98715218a5964f1e00000000426ac9588e27aefe307f49662990ee823568bbc2f89596ced7c6c52d76b8096f1848410843b93fd404f535be474f456778b5ef85abb8fc2336abd5ea64a6efea8a5aca0015499b88ae780a7bae4df603bd3c72808cf300440b1b638a6640f7de8d0d82f359ca2f779cd48cd8d3603f4f69e47f386988c9b7b5d6dd3d48a1fdca780049d7c87bea42161a4c0d7cf0125b43dc9d8845f3c05a08acda647e7143d0e0aee2949a45e2848890522c2288072467d2afe269f589fb7e034b92d3ca245b16b71998711bfe206c9690b6d0eebb06a29349229eb45ff15c63aa2c82c56d7420738cd1b04eb16e87cb524315d7361ea3635d3799bb7fcc56aa5e1dbe031a7a12554dee6754b72f43a6fddf427f32ec3df274a88097725679769beebf1aa6eb09d5154e4900000000000d0f7160a05911d969879953d3d4702b2676c07bb0fd14020a66718378825d5ed789711b77d40dc31e0b8fc651b45559da463f0000000000000000000000000052d42124e9c26aba885015e69d42ecd710342ac597ebea576ae15fdf611356f622e831741ab15549e0d7a2bd0324e2b3b48a10551607492c19eaf58485feb4cab19c303b30ba2ddea0d792d77724c9fa4ed58b93668fc20484f141ee2b6a0029e88fdc853189b4dafd36ff23b11967090e508f45e3f10857038a52ef275cf9e3e4b5d30b12d138dfa70930c603b5e3f4b7be67be3dba3cbd8d4d143195af0697d779445d67dcfbd922d12a8b49f93eac7a72faacf80346b3b60f132a2bf8a858392f34072d99aee0ec70aa6d75096e608d97ac4b7bfa2e0ae3e59718e7a7691a98b1334e34553300000000000000000000000000000000062c7cf52e9624806a4833e1c0059e5a703ab9c2e9b38779270dc5e80af75d509b1a31fe6ed3f8c0172659256dc88de4e377c8a07e95ec5549ae47dc43b93a159a201be254048b9e0857ea3c736c761e686f9b3d0690f035617a12055b2cb3a03794d67b95e7f4fc6af323120c09d0503c8ce92e869e22bb2590299ad76d541f844d32f96184f74d433793bbd75ec15fb1497ce835445212421cb4e3ce08395c9055a2"], &(0x7f00000001c0)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @sched_cls, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0xffffffffffffff97, 0x10, &(0x7f00000000c0), 0xffffffffffffffc2}, 0x48) 2.638027738s ago: executing program 2 (id=3989): r0 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r0, &(0x7f0000000180)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f00000002c0)=@updpolicy={0x1fc, 0x19, 0x1, 0x0, 0x3, {{@in=@multicast2, @in6=@local, 0x0, 0x0, 0x0, 0x0, 0xa, 0x0, 0x80}, {}, {}, 0x0, 0x200}, [@tmpl={0x144, 0x5, [{{@in=@multicast1, 0x4d6, 0x3c}, 0x2, @in=@multicast1, 0x3507, 0x4, 0x3, 0x7, 0x8, 0x4, 0x1}, {{@in6=@dev={0xfe, 0x80, '\x00', 0xc}, 0x4d3, 0x6c}, 0x2, @in6=@private0={0xfc, 0x0, '\x00', 0x1}, 0x3501, 0x2, 0x0, 0x73, 0x8001, 0x4, 0x7}, {{@in6=@mcast2, 0x4d3, 0x3c}, 0x2, @in=@multicast1, 0x3506, 0x2, 0x3, 0x7, 0x5, 0xfffff001, 0x7}, {{@in6=@loopback, 0x4d4, 0x32}, 0x2, @in6=@mcast1, 0x3502, 0x3, 0x1, 0x7, 0x5, 0x3, 0x7}, {{@in6=@dev={0xfe, 0x80, '\x00', 0x12}, 0x80000001, 0x3c}, 0xa, @in=@remote, 0x0, 0x1, 0x1, 0x9, 0x8, 0xe7, 0x7}]}]}, 0x1fc}, 0x1, 0x0, 0x0, 0x84756e37c05a3587}, 0x0) bpf$PROG_LOAD(0x5, &(0x7f00000054c0)={0xc, 0x16, &(0x7f00000003c0)=ANY=[@ANYBLOB="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"], &(0x7f0000000100)='GPL\x00'}, 0x27) (async) sendmsg$ETHTOOL_MSG_CHANNELS_SET(0xffffffffffffffff, &(0x7f0000000100)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000000)=ANY=[@ANYBLOB='<\x00\x00\x00', @ANYBLOB="010000000000fcdbdf251200000018000180140002007665746830000000000000000800000008"], 0x3c}, 0x1, 0x0, 0x0, 0x400c000}, 0x2004c0a0) (async) r1 = socket$inet6(0x10, 0x3, 0x0) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000000)=ANY=[@ANYBLOB="2c000000190001000000000000000000021800000000fd000000ed0008000100ac1414003400080004"], 0x2c}}, 0x0) sendto$inet6(r1, &(0x7f0000000000)='s', 0x10a73, 0x800, 0x0, 0x4b6ae4f95a5de35b) (async, rerun: 32) r2 = accept4(r0, 0x0, &(0x7f0000000000), 0x800) (rerun: 32) r3 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000080), 0xffffffffffffffff) (async) r4 = socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$nl80211(&(0x7f0000002500), 0xffffffffffffffff) (async) ioctl$sock_SIOCGIFINDEX_80211(r4, 0x8933, &(0x7f0000002540)={'wlan1\x00', 0x0}) (async) sendmsg$NL80211_CMD_GET_STATION(r4, &(0x7f0000002600)={0x0, 0x0, &(0x7f00000025c0)={&(0x7f0000000240)=ANY=[], 0x1c}, 0x1, 0x0, 0x0, 0x8001}, 0x80) (async) ioctl$TUNSETTXFILTER(0xffffffffffffffff, 0x400454d1, &(0x7f0000000240)={0x0, 0x2, [@local, @broadcast]}) sendmsg$NL80211_CMD_LEAVE_IBSS(r2, &(0x7f0000000200)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x20000000}, 0xc, &(0x7f0000000140)={&(0x7f00000000c0)={0x1c, r3, 0x104, 0x70bd27, 0x25dfdbfd, {{}, {@val={0x8, 0x3, r5}, @void}}, ["", "", ""]}, 0x1c}, 0x1, 0x0, 0x0, 0x20000c1}, 0x4000040) 2.53666396s ago: executing program 6 (id=3990): r0 = openat$tun(0xffffffffffffff9c, &(0x7f00000000c0), 0x0, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x7101}) r1 = socket$nl_route(0x10, 0x3, 0x0) r2 = socket$unix(0x1, 0x1, 0x0) ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r1, &(0x7f0000000740)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000006c0)=@newqdisc={0x48, 0x24, 0x4ee4e6a52ff56541, 0x70bd2a, 0xffffffff, {0x0, 0x0, 0x0, r3, {0x0, 0xfff1}, {0xffff, 0xffff}, {0x0, 0x10}}, [@qdisc_kind_options=@q_prio={{0x9}, {0x18, 0x2, {0x8}}}]}, 0x48}, 0x1, 0x0, 0x0, 0x4000000}, 0x20040084) r4 = socket$unix(0x1, 0x1, 0x0) r5 = socket$kcm(0x11, 0x3, 0x0) r6 = openat$tun(0xffffffffffffff9c, &(0x7f0000000400), 0x0, 0x0) close(r6) socket$tipc(0x1e, 0x2, 0x0) ioctl$SIOCSIFHWADDR(r6, 0x8914, &(0x7f0000002280)={'syzkaller0\x00', @multicast}) r7 = socket$unix(0x1, 0x1, 0x0) ioctl$sock_SIOCGIFINDEX(r7, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r1, &(0x7f0000000580)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000a80)=@newtfilter={0xb4, 0x2c, 0xd27, 0x70bd26, 0x25dfdbfd, {0x0, 0x0, 0x0, r8, {0x0, 0x4}, {}, {0x8, 0xfff2}}, [@filter_kind_options=@f_matchall={{0xd}, {0x80, 0x2, [@TCA_MATCHALL_ACT={0x7c, 0x2, [@m_tunnel_key={0x78, 0x1, 0x0, 0x0, {{0xf}, {0x48, 0x2, 0x0, 0x1, [@TCA_TUNNEL_KEY_ENC_IPV6_SRC={0x14, 0x5, @remote}, @TCA_TUNNEL_KEY_ENC_IPV6_DST={0x14, 0x6, @ipv4={'\x00', '\xff\xff', @remote}}, @TCA_TUNNEL_KEY_PARMS={0x1c, 0x2, {{0x3, 0x0, 0x0, 0x7fff, 0x7}, 0x1}}]}, {0x4}, {0xc, 0x7, {0x1, 0x1}}, {0xc}}}]}]}}]}, 0xb4}, 0x1, 0x0, 0x0, 0x8000}, 0x20000000) ioctl$sock_SIOCGIFINDEX(r4, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) setsockopt$sock_attach_bpf(r5, 0x107, 0xf, &(0x7f0000000600), 0x56) sendmsg$kcm(r5, &(0x7f0000000280)={&(0x7f0000000380)=@xdp={0x2c, 0x0, r9, 0x3e}, 0x80, &(0x7f00000001c0)=[{&(0x7f0000000000)="27030200000214000e00002fb96dffff1144ee163cddcb000000800000827600000002000100", 0x26}, {&(0x7f00000004c0)="f058050000007f8f", 0x300}], 0x2}, 0x5) 2.410567637s ago: executing program 2 (id=3992): r0 = socket$netlink(0x10, 0x3, 0x0) r1 = socket(0x2a, 0x2, 0x0) bpf$MAP_CREATE(0x100000000000000, &(0x7f0000000440)=ANY=[@ANYBLOB="1400000004000000080000000a0000000c100000", @ANYRES32=0x1, @ANYBLOB='\x00'/20, @ANYRES32=0x0, @ANYRES32, @ANYBLOB="00000000000000000000f3ff0000c7e9d84a00"/28], 0x48) getsockname$packet(r1, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000001480)=0x14) sendmsg$nl_route(r0, &(0x7f0000000100)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000340)=ANY=[@ANYBLOB="4c00000010001fff00"/20, @ANYRES32=0x0, @ANYBLOB="0000000012620400240012800b000100697036746e6c000014000280050009000400000000000100", @ANYRES32=r2, @ANYBLOB="0800040000050040"], 0x4c}}, 0x0) 2.185312555s ago: executing program 6 (id=3994): r0 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) bind$bt_hci(r0, &(0x7f0000000040)={0x1f, 0xffffffffffffffff, 0x3}, 0x6) (async) write$bt_hci(r0, &(0x7f0000000080)=ANY=[], 0x6) (async) r1 = socket$inet6(0xa, 0x3, 0x2) (async) r2 = socket$packet(0x11, 0x3, 0x300) setsockopt$packet_int(r2, 0x107, 0xf, &(0x7f0000000100)=0x9, 0x4) (async) ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f0000000000)={'batadv0\x00', 0x0}) sendto$packet(r2, &(0x7f0000000180)="0b0312002e0064000200475400f6a13bb1000000086086dd4803", 0x100a6, 0x88a8ffff, &(0x7f0000000140)={0x11, 0x88a8, r3}, 0x14) (async) setsockopt$inet6_IPV6_IPSEC_POLICY(r1, 0x29, 0x48, &(0x7f0000000080)={{{@in6=@private1={0xfc, 0x1, '\x00', 0xfd}, @in6=@loopback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, r3}, {0x3, 0x4, 0x0, 0x0, 0xfffffffffffffffd}}, {{@in=@broadcast}, 0x0, @in=@multicast1}}, 0xe8) (async) bpf$PROG_LOAD(0x5, &(0x7f000000e000)={0x3, 0x4, &(0x7f0000000040)=ANY=[@ANYBLOB="b400000000000000731139000000000020000000000000009500200000000000"], &(0x7f0000003ff6)='GPL\x00', 0x2, 0xfd90, &(0x7f000000cf3d)=""/195, 0x0, 0x0, '\x00', 0x0, @sched_cls, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0x1f2, 0x10, &(0x7f0000000000), 0xfffffe51}, 0x48) 2.184400824s ago: executing program 2 (id=3996): r0 = socket(0x2b, 0x80801, 0x1) r1 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r1, &(0x7f0000000340)={0x0, 0x0, &(0x7f00000006c0)={&(0x7f0000002fc0)=ANY=[@ANYBLOB="440000001000010400"/20, @ANYRES32=0x0, @ANYBLOB="00000000000000002400128009000100626f6e64000000001400028008000300070000000800090001"], 0x44}}, 0x0) connect$inet6(r0, &(0x7f00000001c0)={0xa, 0x4e23, 0x3ff, @ipv4={'\x00', '\xff\xff', @dev={0xac, 0x14, 0x14, 0x1b}}, 0xfffffffe}, 0x1c) r2 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX_80211(r2, 0x8933, &(0x7f0000000040)={'wlan1\x00', 0x0}) r4 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000000), 0xffffffffffffffff) r5 = socket$nl_generic(0x10, 0x3, 0x10) r6 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000040), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r5, 0x8933, &(0x7f0000000740)={'wlan1\x00', 0x0}) r8 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r8, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000240)=ANY=[@ANYBLOB="140000001000010000000000000000000500000a28000000000a030000000000000000000a00000708000240000000020900010073797a31000000002c000000030a010100000000000000000a0000070900010073797a31000000000900030073797a320000000014000000110001"], 0x7c}, 0x1, 0x0, 0x0, 0x4000}, 0x0) sendmsg$NFT_BATCH(r8, &(0x7f0000009b40)={0x0, 0x0, &(0x7f0000009b00)={&(0x7f0000000a00)={{0x14, 0x10, 0x7c, 0x0, 0x6000, {0x5}}, [@NFT_MSG_NEWSET={0x3c, 0x9, 0xa, 0x401, 0x0, 0x0, {0xa, 0x0, 0x4}, [@NFTA_SET_TABLE={0x9, 0x1, 'syz1\x00'}, @NFTA_SET_KEY_LEN={0x8, 0x5, 0x1, 0x0, 0x1}, @NFTA_SET_NAME={0x9, 0x2, 'syz1\x00'}, @NFTA_SET_ID={0x8, 0xa, 0x1, 0x0, 0xfffffffc}]}, @NFT_MSG_NEWSETELEM={0x40, 0xc, 0xa, 0x101, 0x0, 0x0, {0xa, 0x0, 0x6}, [@NFTA_SET_ELEM_LIST_SET={0x9, 0x2, 'syz1\x00'}, @NFTA_SET_ELEM_LIST_TABLE={0x9, 0x1, 'syz1\x00'}, @NFTA_SET_ELEM_LIST_ELEMENTS={0x14, 0x3, 0x0, 0x1, [{0x10, 0x0, 0x0, 0x1, [@NFTA_SET_ELEM_KEY={0xc, 0x1, 0x0, 0x1, [@NFTA_DATA_VALUE={0x5, 0x1, "d1"}]}]}]}]}], {0x14, 0x11, 0x1, 0x0, 0x0, {0x1}}}, 0xa4}}, 0x40) r9 = socket$nl_generic(0x10, 0x3, 0x10) r10 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000240), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r9, 0x8933, &(0x7f0000000100)={'wlan1\x00', 0x0}) r12 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$NL80211_CMD_REGISTER_FRAME(r12, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000580)={&(0x7f0000000040)={0x28, r10, 0x1, 0x0, 0x0, {{}, {@val={0x8, 0x3, r11}, @void}}, [@NL80211_ATTR_FRAME_MATCH={0x4}, @NL80211_ATTR_FRAME_TYPE={0x6, 0x65, 0x40}]}, 0x28}}, 0x0) r13 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$NL80211_CMD_REGISTER_FRAME(r13, &(0x7f00000005c0)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000c80)=ANY=[@ANYBLOB='$\x00\x00\x00', @ANYRES16=r6, @ANYBLOB="010000000000000000003a00000008000300", @ANYRES32=r7, @ANYBLOB="05005b"], 0x24}}, 0x0) sendmsg$NL80211_CMD_TRIGGER_SCAN(r2, &(0x7f0000000200)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000780)={0x384, r4, 0x1, 0x0, 0x0, {{0x8}, {@val={0x8, 0x3, r3}, @void}}, [@NL80211_ATTR_SCAN_SUPP_RATES={0x5a, 0x7d, 0x0, 0x1, [@NL80211_BAND_6GHZ={0xd7, 0x3, "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"}, @NL80211_BAND_2GHZ={0xfffffffffffffc5a, 0x0, "380264a259f7f29df9188e4e2e336ce88b8a4f87a32f99752b01a0bb7e2ef82f0cddc9cda28abb2aa5377a94c827e1897321417559d03f010f48c1c94f723ef16925a927d80ac884fbe42134b8943129412d1800ea3548443ec8c5bb9fd304c20870d1e8141d0d8b5f1767ed"}, @NL80211_BAND_2GHZ={0xb1, 0x0, "8cd08a5bfe50cba5ed50cc1a96f8bae179475d6cfd08ecfe553994014eccf826e4b542a9cc0286c6d4a2b99e38eafecac868d6fa613bfca2280773cc785f26667144e4b7b76a47aec1085650d22625560f152250f34bd26a72d9eceb289a118b961e2f336252705bcb64d3a4d9b84c6484ad795db23d0231106c81178fe215d86dd7da4a7de66c10bb3a9a9c7e7c20ffd59b50ac7372ab8b675d9ff90a5813baeb56458e56a5b1dbee3e885ca3"}]}, @NL80211_ATTR_MEASUREMENT_DURATION={0x6, 0xeb, 0xfffa}, @NL80211_ATTR_MEASUREMENT_DURATION_MANDATORY, @NL80211_ATTR_SCAN_SUPP_RATES={0x158, 0x7d, 0x0, 0x1, [@NL80211_BAND_6GHZ={0x50, 0x3, "452f0363babed406115f7d243ef6216562163442d7179259d2ede2fe7e2ae9ec621b0cc1f214ba89a1c6a54ae47f0f4b9027ce2662d7e3d8719e87d86ef31ddc929d4693769721b3e73ab39c"}, @NL80211_BAND_5GHZ={0x102, 0x1, "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"}]}]}, 0x384}, 0x1, 0x0, 0x0, 0x40440e5}, 0x0) listen(r0, 0x8f1) 2.076706023s ago: executing program 4 (id=3997): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) r1 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f00000002c0)={'bridge0\x00', 0x0}) sendmsg$nl_route(r1, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000040)=@newlink={0x2c, 0x10, 0x44b, 0x0, 0x0, {0x7a, 0x0, 0x0, r2}, [@IFLA_ADDRESS={0xa, 0x1, @link_local={0x1, 0x80, 0xc2, 0x0, 0x0, 0xe}}]}, 0x2c}}, 0x0) r3 = socket$nl_generic(0x10, 0x3, 0x10) r4 = syz_genetlink_get_family_id$ethtool(&(0x7f0000000040), 0xffffffffffffffff) sendmsg$ETHTOOL_MSG_PAUSE_SET(r3, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000480)=ANY=[@ANYBLOB='T\x00\x00\x00', @ANYRES16=r4, @ANYBLOB="831008000000fcdb9f251608000018000180140002006e657464657673696d300000000000000500030001001300050004000100000005000400010000000500020001000000050002"], 0x54}, 0x1, 0x0, 0x0, 0x24000085}, 0x20000000) r5 = openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0xa8442, 0x0) ioctl$TUNSETIFF(r5, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x7101}) r6 = socket(0x400000000010, 0x3, 0x0) sendmsg$nl_route_sched(r1, &(0x7f00000004c0)={&(0x7f0000000100)={0x10, 0x0, 0x0, 0x20000000}, 0xc, &(0x7f0000000480)={&(0x7f00000003c0)=@newqdisc={0x90, 0x24, 0x10, 0x70bd2b, 0x25dfdbfb, {0x0, 0x0, 0x0, r2, {0xa, 0xb}, {0xf, 0x2}, {0x3, 0x10}}, [@TCA_INGRESS_BLOCK={0x8, 0xd, 0x3}, @TCA_INGRESS_BLOCK={0x8, 0xd, 0x3}, @TCA_INGRESS_BLOCK={0x8, 0xd, 0x14}, @TCA_INGRESS_BLOCK={0x8, 0xd, 0x3}, @TCA_EGRESS_BLOCK={0x8, 0xe, 0x5}, @TCA_RATE={0x6, 0x5, {0x9, 0x7}}, @qdisc_kind_options=@q_hhf={{0x8}, {0x14, 0x2, [@TCA_HHF_NON_HH_WEIGHT={0x8, 0x7, 0x1ff}, @TCA_HHF_HH_FLOWS_LIMIT={0x8, 0x3, 0x6d1}]}}, @qdisc_kind_options=@q_hfsc={{0x9}, {0x14, 0x2, @TCA_HFSC_RSC={0x10, 0x1, {0x1, 0x3ff, 0x5}}}}]}, 0x90}, 0x1, 0x0, 0x0, 0x4080}, 0x40040000) r7 = socket$inet_sctp(0x2, 0x1, 0x84) getsockopt$inet_sctp_SCTP_PR_ASSOC_STATUS(r7, 0x84, 0x73, &(0x7f00000004c0)={0x0, 0x0, 0x10, 0x0, 0x2}, &(0x7f0000000500)=0x18) ioctl$sock_SIOCGIFINDEX(r6, 0x8933, &(0x7f0000000380)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r6, &(0x7f00000012c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000005c0)=@newqdisc={0x38, 0x24, 0x4ee4e6a52ff56541, 0x70bd2a, 0xffffffff, {0x0, 0x0, 0x0, r8, {0x0, 0xfff1}, {0xffff, 0xffff}}, [@qdisc_kind_options=@q_multiq={{0xb}, {0x8}}]}, 0x38}}, 0x0) sendmsg$nl_route_sched(r6, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000640)=@newtfilter={0x4c, 0x2c, 0xd27, 0x70bd2b, 0x2, {0x0, 0x0, 0x0, r8, {0x0, 0x10}, {}, {0x8, 0x4}}, [@filter_kind_options=@f_flow={{0x9}, {0x1c, 0x2, [@TCA_FLOW_MODE={0x8, 0x2, 0x1}, @TCA_FLOW_KEYS={0x8, 0x1, 0x1e3a9}, @TCA_FLOW_RSHIFT={0x8, 0x4, 0x1}]}}]}, 0x4c}}, 0x2) 2.037841631s ago: executing program 5 (id=3998): r0 = socket$inet_sctp(0x2, 0x1, 0x84) setsockopt$inet_sctp_SCTP_SOCKOPT_BINDX_ADD(r0, 0x84, 0x64, &(0x7f0000000000)=[@in={0x2, 0x4e24, @loopback}, @in={0x2, 0x4e23, @private=0xa010101}, @in6={0xa, 0x4e22, 0x8, @mcast1, 0xa0000}, @in={0x2, 0x4e22, @empty}, @in={0x2, 0x4d, @local}, @in={0x2, 0x4e21, @remote}], 0x6c) r1 = bpf$PROG_LOAD(0x5, &(0x7f000000e000)={0x18, 0x4, &(0x7f00000002c0)=ANY=[@ANYBLOB="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"], &(0x7f0000003ff6)='GPL\x00', 0x2, 0xfd90, &(0x7f000000cf3d)=""/195}, 0x48) (async) socket$inet_tcp(0x2, 0x1, 0x0) (async, rerun: 32) r2 = socket$inet6_udp(0xa, 0x2, 0x0) (async, rerun: 32) getsockopt$inet6_mreq(0xffffffffffffffff, 0x29, 0x1c, &(0x7f0000000840)={@private1, 0x0}, &(0x7f0000000880)=0x14) ioctl$sock_ipv6_tunnel_SIOCADDTUNNEL(r2, 0x89f1, &(0x7f0000000940)={'syztnl0\x00', &(0x7f00000008c0)={'ip6tnl0\x00', r3, 0x2f, 0x4, 0x8f, 0x5e3d, 0x20, @mcast1, @rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x01', 0x8, 0x8000, 0x396, 0xf}}) (async) r4 = socket(0x2, 0x80805, 0x0) setsockopt$inet_sctp6_SCTP_PEER_ADDR_PARAMS(r4, 0x84, 0x9, &(0x7f0000000680)={0x0, @in={{0x2, 0x0, @empty}}, 0x0, 0x5, 0x0, 0x0, 0xc, 0xfffffffc}, 0x9c) (async) ioctl$sock_SIOCGIFVLAN_SET_VLAN_EGRESS_PRIORITY_CMD(r0, 0x8982, &(0x7f0000000800)={0x3, 'macvtap0\x00', {0x5}, 0xcc}) setsockopt$inet_tcp_int(r4, 0x6, 0x0, &(0x7f00000007c0)=0x9, 0x4) socket$inet6_tcp(0xa, 0x1, 0x0) (async) ioctl$XFS_IOC_ATTRMULTI_BY_HANDLE(0xffffffffffffffff, 0x4048587b, &(0x7f0000000d80)={{r1, &(0x7f0000000080)='+\x00', 0x193800, &(0x7f00000000c0)={@_ha_fsid={[0x721e, 0x1]}, {0x8, 0x6, 0x9}}, 0xb00d, &(0x7f0000000100), &(0x7f0000000140)=0x5}, 0x6, &(0x7f0000000cc0)=[{0x2, 0x13c, &(0x7f0000000180)=':\x00', &(0x7f00000001c0)="333dd1404fadcd61900c8094f9feae3d938ca93387650902a22bd04f1170ccdb1a3e01962b1028c694cf9048e60b99fd2123ddac32d9d39539a63dc70ec8b8361a92245e7bfc14321df9d8a9ec77eb950a72bc190490227a", 0x58, 0x2}, {0x3, 0x3, &(0x7f0000000240)='nat\x00', &(0x7f0000000280)="cb7b8aea736dfc8f9cdf2f26c8504fae71cd6d853bac4aff787587e1a25e30d3b112f2c263deeadc1f6c", 0x2a}, {0x0, 0x2, &(0x7f0000000980)='REDIRECT\x00', &(0x7f0000000480)="6c57bff814964d2280f26aca61bc7e8e1442885faa5cb238167136ec73afdfc97a1431af66f4532dd62aab07d6b554544e0436f79a25c1a9f58c94bc4caf7bf9e325cf13c8bd859ec9613512bb74063215ec1ad202e3a1de82e4d0af6efd5dab3314a70e4900e1f8464468b58fc5a9331f389b4f23062872eeca2d2006c46dd0b817528037988ac3c5194ad67d3e2325a3d787ae627f15b7ffc5d40f134dfb0def78ec20e6645c3354945913ed23338bdfd607f037395799dbad4b095ee80f79ecfcfe444ae8f0565c03980618ac34b09795fcedc69fd925f7db86c963811d9913042e084d5c71a53e44fbd733e885d97650a05f7f02", 0xf6, 0x12}, {0x1, 0x6, &(0x7f0000000700)='/\xe4\x89\x00 \x1fE0\v\x9fcg\xc7\x81\xed\x1b\xa2\xba\x84\xd3\x00\x10\x11\xc3\nz\xb0fP\x88f4\xd0\x83\x9e\xd4\xf0\x0e]\xe1\xe2\xbalc\xe5\xf3\xea\xc4\r\xe0&{\x8f%\x1b\xbc\x87(p\xdb\n\xac\xc2\xd3\x83\xb9\x9c\xaeC\xeb[k/\xa6y\xb1\xd5\xcb\x00\xf6f\xc0\xff\x15_:4\xf2\x9c\xc3Hrl\x82\x94\xad\xfac)\x7fW\xc7\xd9\xd2\x89 \xee\x84\x89US\x10\xc8\x1b\xe8\x8c\xe9\xa6\xb1\xc4\x96\xbb\xcet7w\xd6/I8\xdbe\xae\t\xda\b\xd8\xda\x95', &(0x7f0000000b00)="f006315839b1ae95a49865d3c8d1fc28b3f049bf41209bc67c78de04c987f987918fd37ba8b28e927996551ed143cd743875315941b936738b1ab3784b34167278396683f0dd1d454a63bd56d78a6fe7b70b49a977be6280e356e9e8f43e86f961e5306ce15e47d95277276e3bc484b55f35ad69f27910faeed796234bc40aabb7631eb7834e41f3dd6bef761df89b4439600719d90303ccf8d74483019128ce174ede6dc78c6d6c206004cc2e83d451c745d82dd4abf947f1", 0xb9, 0x2a}, {0x2, 0x8, &(0x7f0000000bc0)='nat\x00', &(0x7f0000000c00), 0x0, 0x8}, {0x2, 0x4, &(0x7f0000000580)='DNAT\x00`\a\xf0\n\xd1\x05\x01\x97\xd9\x1d]\n\xdaT\x19\xb7fXf\bTW\x02\x8d\xff\x97\xb1\t<\x0e\xe0{u\x81\x1dWm\xaa=\xc3\xbb\x9c\xec4\x05\x10(\xa4&\x1d)27\xd0\x0f\xf4\xce\xac\x05h\xb5A\x06\xd0,G2G\xb9\xf3E\x06\x15&Whj\x139\xb7\xce\xbehG\xf0\x95Ss\fJ4q\x8d\x18v\xa9\xc3\xfal\x89\xec\xb2\xc6\x12I\xbfw\"\xe2\x8c\xa9|\xc7)\xbd\x87\xd3I\x00\xa99q\xb2\x7fX\x1d4b\xd0 \xc7\xea\x9f\x102~\xeeiV\xf7w=\x17Q\xafS\x86\x9d\xd6\x16.\xb7\xe3\x16\xa7n\xaf/l\'\xd6J\x1e\xfb\xdb+7\xc2;*{\x920x0}) sendmsg$nl_route_sched(r7, &(0x7f00000012c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000080)=@newqdisc={0x48, 0x24, 0x4ee4e6a52ff56541, 0x0, 0x0, {0x0, 0x0, 0x0, r9, {0x0, 0x4}, {0xffff, 0xffff}}, [@qdisc_kind_options=@q_prio={{0x9}, {0x18, 0x2, {0xf, "00000000000000ce830100000f00"}}}]}, 0x48}, 0x1, 0x0, 0x0, 0x2000000}, 0x0) ioctl$SIOCSIFHWADDR(r5, 0x8914, &(0x7f0000000180)={'syzkaller1\x00', @link_local}) write$tun(r3, &(0x7f0000000040)={@val={0x0, 0x88e5}, @val={0x3, 0x3, 0x1000, 0x3ff, 0x39, 0xd9af}, @mpls={[{0x950f}, {0x5}, {0x6}, {0x9}, {0x2, 0x0, 0x1}, {0x1ff, 0x0, 0x1}, {0x8, 0x0, 0x1}, {0xc, 0x0, 0x1}, {0x75c}], @generic="60229e61aa651a30b2ef534add454dcdc3f8879aaaa4664995a3fd86682640296666533ed65d027ac8c85f0bcbafd268a0610514c1893d93ff56c3eb808485998497cefea32177a415f53fd341fd8de9e8f3602f1dc116176b8757ce7bf9c93833b8841db70b170f8a39d36fd4dcfa6216c8efde6c30b9b50d77deb9b7bec6b5f568aa80c7ecc6bdce4d8898b99be3cc2c3b262a938d33cec55f7be87c2e2e477f3971e744f28bbc243f2e33a23bc9954139e344126225bdb21f01fb355f51f183bdad13a2bb9e92e4a9ebfbe0a45b04f95c8d1ad8662010793aa425bef950bac55e5b1cbf569149f1ae"}}, 0x11c) r10 = socket(0x28, 0x5, 0x0) bind$vsock_stream(r10, &(0x7f0000000040), 0x10) listen(r10, 0x0) r11 = socket(0x28, 0x5, 0x0) connect$vsock_stream(r11, &(0x7f0000000080), 0x10) r12 = accept4$unix(r10, 0x0, 0x0, 0x0) recvfrom$unix(r12, &(0x7f0000000140)=""/263, 0x107, 0x0, 0x0, 0x0) 1.379414313s ago: executing program 5 (id=4001): r0 = socket(0x10, 0x3, 0x0) openat$tun(0xffffffffffffff9c, &(0x7f0000000040), 0x0, 0x0) r1 = openat$tun(0xffffffffffffff9c, &(0x7f0000000000), 0xc00, 0x0) ioctl$TUNSETTXFILTER(r1, 0x400454ca, &(0x7f0000000000)=ANY=[]) r2 = socket$packet(0x11, 0x3, 0x300) ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f0000000080)={'ip6tnl0\x00', 0x0}) sendmsg$nl_route_sched(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000280)=@newqdisc={0x80, 0x24, 0x3fe3aa0262d8c783, 0x0, 0x0, {0x0, 0x0, 0x0, r3, {}, {0xffff, 0xffff}, {0x8}}, [@qdisc_kind_options=@q_choke={{0xa}, {0x4}}, @TCA_STAB={0x4c, 0x8, 0x0, 0x1, [{{0x1c, 0x1, {0x40, 0x26, 0xffff, 0x9, 0x2, 0x2, 0x8, 0x2}}, {0x8, 0x2, [0x6, 0x6]}}, {{0x1c, 0x1, {0x4, 0xc, 0x7f, 0x8, 0x0, 0x10, 0x3, 0x1}}, {0x6, 0x2, [0x5fd]}}]}]}, 0x80}, 0x1, 0x0, 0x0, 0x8800}, 0x0) 1.086092745s ago: executing program 2 (id=4004): r0 = syz_init_net_socket$nl_rdma(0x10, 0x3, 0x10) sendmsg$netlink(r0, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000000)=[{&(0x7f0000000600)=ANY=[@ANYBLOB="180100003500010000000000fcdbdf250701f2800c0004000bac0f0000000000140001"], 0x118}], 0x1, 0x0, 0x0, 0x1}, 0x0) r1 = syz_init_net_socket$802154_dgram(0x24, 0x2, 0x0) bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000280)={&(0x7f0000000080)={{0xeb9f, 0x1, 0x0, 0x18, 0x0, 0x24, 0x24, 0x2, [@struct={0x0, 0x1, 0x0, 0x4, 0x1, 0xffffffff, [{0x0, 0x2, 0xc1}]}, @restrict={0x0, 0x0, 0x0, 0x6, 0x2}]}}, 0x0, 0x3e}, 0x20) bind$802154_dgram(r1, &(0x7f0000000080)={0x24, @long={0x3, 0xfffd, {0xaaaaaaaaaaaa0202}}}, 0x14) socket$inet6_sctp(0xa, 0x5, 0x84) r2 = syz_open_procfs$namespace(0x0, &(0x7f0000006180)='ns/pid_for_children\x00') ioctl$NS_GET_PARENT(r2, 0xb702, 0x0) mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000040)='./cgroup/syz0\x00', 0x1ff) r3 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000040), 0x200002, 0x0) r4 = bpf$MAP_CREATE(0x0, &(0x7f00000002c0)=ANY=[@ANYBLOB="08000000040000000400000008"], 0x48) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f00000001c0)={{r4}, &(0x7f00000000c0), &(0x7f0000000100)=r3}, 0x20) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000280)={{r4}, &(0x7f0000000200), &(0x7f0000000240)=r3}, 0x20) r5 = socket(0x840000000002, 0x3, 0xff) sendmmsg$inet(r5, &(0x7f0000000280)=[{{&(0x7f00000001c0)={0x2, 0x4e20, @initdev={0xac, 0x1e, 0x0, 0x0}}, 0x10, &(0x7f0000000400)=[{&(0x7f0000000240)="00000000e5c06417e58f2aaa43f325e4ae709296", 0x14}], 0x1}}, {{&(0x7f0000000040)={0x2, 0x4e22, @loopback}, 0x10, 0x0}}], 0x2, 0x20004086) bind$inet6(r5, &(0x7f00000000c0)={0xa, 0x4e20, 0x7, @local, 0x3}, 0x1c) 977.159296ms ago: executing program 4 (id=4005): r0 = openat$tun(0xffffffffffffff9c, &(0x7f00000000c0), 0x0, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x7101}) r1 = socket$nl_route(0x10, 0x3, 0x0) r2 = socket$unix(0x1, 0x1, 0x0) ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r1, &(0x7f0000000740)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000006c0)=@newqdisc={0x48, 0x24, 0x4ee4e6a52ff56541, 0x70bd2a, 0xffffffff, {0x0, 0x0, 0x0, r3, {0x0, 0xfff1}, {0xffff, 0xffff}, {0x0, 0x10}}, [@qdisc_kind_options=@q_prio={{0x9}, {0x18, 0x2, {0x8}}}]}, 0x48}, 0x1, 0x0, 0x0, 0x4000000}, 0x20040084) r4 = socket$unix(0x1, 0x1, 0x0) r5 = socket$kcm(0x11, 0x3, 0x0) r6 = openat$tun(0xffffffffffffff9c, &(0x7f0000000400), 0x0, 0x0) close(r6) socket$tipc(0x1e, 0x2, 0x0) ioctl$SIOCSIFHWADDR(r6, 0x8914, &(0x7f0000002280)={'syzkaller0\x00', @multicast}) r7 = socket$unix(0x1, 0x1, 0x0) ioctl$sock_SIOCGIFINDEX(r7, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r1, &(0x7f0000000580)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000a80)=@newtfilter={0xb4, 0x2c, 0xd27, 0x70bd26, 0x25dfdbfd, {0x0, 0x0, 0x0, r8, {0x0, 0x4}, {}, {0x8, 0xfff2}}, [@filter_kind_options=@f_matchall={{0xd}, {0x80, 0x2, [@TCA_MATCHALL_ACT={0x7c, 0x2, [@m_tunnel_key={0x78, 0x1, 0x0, 0x0, {{0xf}, {0x48, 0x2, 0x0, 0x1, [@TCA_TUNNEL_KEY_ENC_IPV6_SRC={0x14, 0x5, @remote}, @TCA_TUNNEL_KEY_ENC_IPV6_DST={0x14, 0x6, @ipv4={'\x00', '\xff\xff', @remote}}, @TCA_TUNNEL_KEY_PARMS={0x1c, 0x2, {{0x3, 0x0, 0x0, 0x7fff, 0x7}, 0x1}}]}, {0x4}, {0xc, 0x7, {0x1, 0x1}}, {0xc}}}]}]}}]}, 0xb4}, 0x1, 0x0, 0x0, 0x8000}, 0x20000000) ioctl$sock_SIOCGIFINDEX(r4, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) setsockopt$sock_attach_bpf(r5, 0x107, 0xf, &(0x7f0000000600), 0x56) sendmsg$kcm(r5, &(0x7f0000000280)={&(0x7f0000000380)=@xdp={0x2c, 0x0, r9, 0x3e}, 0x80, &(0x7f00000001c0)=[{&(0x7f0000000000)="27030200000214000e00002fb96dffff1144ee163cddcb000000800000827600000000002000", 0x26}, {&(0x7f00000004c0)="f058050000007f8f", 0x300}], 0x2}, 0x5) 976.572554ms ago: executing program 5 (id=4006): r0 = socket$netlink(0x10, 0x3, 0x0) socketpair(0x1, 0x100000005, 0x0, &(0x7f0000000000)={0xffffffffffffffff}) getpeername$packet(r1, &(0x7f0000000000)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @dev}, &(0x7f0000000040)=0x14) bpf$TOKEN_CREATE(0x24, &(0x7f0000000280)={0x0, r1}, 0x8) bpf$BPF_GET_PROG_INFO(0xf, &(0x7f0000000880)={0xffffffffffffffff, 0xe0, &(0x7f0000000780)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, &(0x7f00000002c0)=[0x0], ""/16, 0x0, 0x0, 0x0, 0x0, 0x3, 0x1, &(0x7f00000003c0)=[0x0, 0x0, 0x0], &(0x7f0000000400)=[0x0], 0x0, 0x8c, &(0x7f0000000580)=[{}, {}, {}, {}, {}, {}, {}], 0x38, 0x10, &(0x7f00000005c0), &(0x7f0000000600), 0x8, 0x45, 0x8, 0x8, &(0x7f0000000640)}}, 0x10) r3 = openat$tun(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) ioctl$TUNSETIFF(r3, 0x400454ca, &(0x7f0000000200)={'syzkaller1\x00', 0xc201}) ioctl$TUNSETLINK(r3, 0x400454cd, 0x7) r4 = socket$kcm(0x2, 0xa, 0x2) ioctl$SIOCSIFHWADDR(r4, 0x8914, &(0x7f0000000180)={'syzkaller1\x00', @link_local}) r5 = openat$tcp_congestion(0xffffffffffffff9c, &(0x7f0000005280), 0x1, 0x0) poll(&(0x7f00000052c0)=[{r5, 0x24}], 0x1, 0x9) bpf$PROG_LOAD(0x5, &(0x7f00000004c0)={0x0, 0xc, &(0x7f0000000580)=ANY=[], 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, '\x00', 0x0, @fallback=0x22, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, r2, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r6 = bpf$MAP_CREATE(0x0, &(0x7f0000000740)=ANY=[@ANYBLOB="0b00000005000000000400000900000001"], 0x48) bpf$PROG_LOAD(0x5, &(0x7f0000000cc0)={0xa, 0x4, &(0x7f0000000480)=ANY=[@ANYBLOB="18000000000000000000000000000000850000006d"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) openat$tun(0xffffffffffffff9c, 0x0, 0x0, 0x0) r7 = openat$nci(0xffffffffffffff9c, &(0x7f0000000080), 0x2, 0x0) r8 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r9 = syz_genetlink_get_family_id$nfc(&(0x7f0000000300), r8) ioctl$IOCTL_GET_NCIDEV_IDX(r7, 0x0, &(0x7f00000000c0)=0x0) sendmsg$NFC_CMD_DEV_UP(r8, &(0x7f0000000200)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000d80)=ANY=[@ANYBLOB="1c000000", @ANYRES16=r9, @ANYBLOB="010426bd7000f8dbdf250200000008000100", @ANYRES32=r10], 0x1c}}, 0x4008054) write$nci(r7, &(0x7f0000000240)=ANY=[@ANYBLOB='p\x00\t'], 0xc) sendmsg$kcm(0xffffffffffffffff, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000080)=[{&(0x7f0000000040)="e03f03", 0x3}], 0x1}, 0x0) write$nci(r7, &(0x7f0000000040)=ANY=[@ANYBLOB="5001"], 0x14) r11 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000d80)={0x18, 0x5, &(0x7f0000000480)=ANY=[@ANYBLOB="1801000021"], 0x0, 0x40, 0x0, 0x0, 0x0, 0xb4a02fe0ce239f93, '\x00', 0x0, 0x2}, 0x94) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0xe, 0x0, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000800000000000000000000018110000", @ANYRES32=r6], 0x0, 0x0, 0x0, 0x0, 0x41100, 0x59, '\x00', 0x0, @fallback=0x2a, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, r11, 0x0, 0x0, 0x0, 0x0}, 0x94) r12 = bpf$PROG_LOAD(0x5, &(0x7f0000000300)={0x6, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, @fallback=0x4, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000180)={r12, 0x2000000, 0xe, 0x0, &(0x7f0000000040)="630b008646dc3f0adf33c9f7b986", 0x0, 0xcf25, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x80}, 0x50) sendmsg$kcm(r1, &(0x7f0000002380)={&(0x7f0000000680)=@un=@abs={0x0, 0x0, 0x4e21}, 0x80, &(0x7f00000022c0)=[{&(0x7f00000008c0)="12dce12a1c8325d5dfd3b1e5d41ad7c44b105dc8715fbc0afcc91737e4547070000e09ac5fb60cb44b9e8dbdebe1febcc82c58ad92566a9b10b2733fc379351b5e5c1ee3d03a8e05fef3552d04b74f3b7cdabf24e43a6f596b0ac382acd0a7da342af5397d5f6984d50fc17f718acdb973122114c9d24d9a283a67f1f945eea58da6df", 0x83}, {&(0x7f0000000980)="6aa0809227eee986758b885451e2d7e2f8814f7c334226261d6b3e680e52e220f416455ee7cbca14ae857796190d80f3f0acb2627285049640c2e7cd710289cc4f452ce94610255a4090be931d1cb6782bc2b31d3fcba64c200025b589f4e814ee19985a9188036470bfa2be305dec831acbe0cca8f5a776279a9980467b7a3b6b29c3464bca8e041157d58e8896d772da5f1f56e22d88e54b6aaa74014772fb726095794b46f8c49315565eda7368e5b51dd508bcd6372bcf05003bff763bb242502dcf6baebc8ac44357b3ee715a67d5c0cb76caf010e7a8420362edc7835147f7bea233866b15a68a0c70", 0xec}, {&(0x7f0000000a80)="ccca296c51856b0e383022134deb49555e042cea5d173f5166971a59a35a6cda1b85382c2af3e29348d42be4ff7af2442c808329df8b0bcbced30987076ada6b3573a867403372f8780238f369b7582b824b78016391c5878cc16f109b279e3aa98da4de2d8fe194b586b4cd7402e8a3b5cee56169e4e0b1f6253b6633fea64990e8", 0x82}, {&(0x7f0000000b40)="a3fef2d8a055909d3c12c3f3009944bb784dca2da579813bfb1717a6762bc6907d7fd045114e193e061681833f2890e416c782f26eb0dedc699dcd", 0x3b}, {&(0x7f0000000b80)="1f3cba9adbfa2bb5ff8dd9730862b2a863ebddfc89dc7b54892f572a5a378981b7cbb30284220dd72039dd0bf47f3cb4937d5b9e0ae7acf352602a5e27405c43c1d6d917dadb86a699151c76ea8e8115c8f90e704d0df5f84f6cfb7ea0c0fa15de5d9cdbb88681f67678872aa66920842c8258f89ae3845006a3235f2cb486ec8dec6138db73a908337d41e839d5ba49b828bfa5fcc531754b157e", 0x9b}, {&(0x7f0000000c40)="1d74b368548b0b76314e16f02ce88ba44a0e37061c786809400e081e56d9ca9b371e6294ab0a07cf6264a37486e1c63da72da014076d12a05e18ecaaabbc05b4a0b3fcb6417de40bf08d46f23d85e466eba2150ca0a3da11d6cfe2365bbd8fad46f345d0afbc13a3f2946568d052b1bb2634f5b1c5befe4b", 0x78}, {&(0x7f00000023c0)="30ebc5f6232d93740be18573b07615d5d0aad165c6614cc7039542069679e265a8d0b57ecfde5c0b76aae3835652576854a89d599aa0f1bd0c1cd2db6ef0dd057488845b9fab561e85cf459b1c12f5344fe33630e21027e44a0b59667ccad9a965e9e1917c29ecfaf77268df422587b3f36ba7b174ac448ec073cd4e82fdb5784ab0c3b404ff269a3d94cede2ce845c3365ed4e02fa507d1cba7a6f1a2908bf1305d070310dd76392be9afc13c35240d82119b054b1e60fdeda077d9dad8ea6b0d4ff2163ae50e6dd486ffe614d95182a302d63f512ca2168d7cc909a57a01286d91772f720bcacfa4ee345860c5a344e41efe735e93a75c2ab161b339de59c8640f19e399fe537099afb7979fa14a6bb042afb9f6bc724fed59abb2182af750d1e8c178dbf127dd4582668718e592216cbf5239bef76f40213d2dd5f2073133d1f175aaf635bf2d77a7f7cc0624ef6bdee791e70e470f41fc81592217719b258c793d6eba64c8f2984c907b7353ea138770dd61cd30bd6955957d4f8c3678e8de5293e70db86e1b68d74da8d42896cb95c19b51361ac71fa8ade1dbd32538b1beb4fe94da4484646ea6602c73980703799a037024940af991238393458d3bc831e13e508b38ac4c5f267cea83e20b67acf688c7d1839d372d7982c5188a246600252c4f5dc6e00b6b18873f3bf490f255561c1b798142d1eb1c573e996fcdc29bbee999aa7df53c0834b830169e81cd4e45d5578ac79f677707c257f5b78df4166d48635aaab829906a3db7a3a670ea8d56cc28647e06347de95d775de8c7c97c294fff7fb13d40f0de51d0c8866d990424a231d12a2b70f235a54385d4982057a4ddb414a1bc1a2281f409992c466bcf5dde03d0072bcb88da5326f556b993e43ceeac40293b33143819d4a2e39ecc907cac2d87ff757a373ab3bc99b22e0a53191d3bfd8c384cefee49fdeec9598794f4e5e1a50229ce70c70ddcf74c426cec5a2b809a108e016bf903c5b8cd412e34d992b3fdd0c76dc02c74fee7395b56186faa8dc6f71edbcbfb57afad5e4d5bc5d5055cf46497abb3110a2ad0c6e6004f5c592cf8f0ba6dba9bdd9473bd7c4fd336b735b80a7ae3dc7f0e930800098f1d405c103d993573ed76eed731473931f6ecad9a90fcc046a55a73e331a4cfde7c04863e332e4eaa23b241be3d012cace77a9cae93260d67f151928bae214fd1a81d073c2f249bc420aacd44e4d03f4862065dd47187f0a974ce340d34907c175491d6baf5f7e4704eee626c0b887825523676aca4b06a5d71410e0cdbd31770bd0627a262472ded212f06bae0881d0df1e5012b820ccd35cd4811616f89eee501d263a0456ef5c21b0043802fdf60cadccabcf8b15779e497e8498ffc31b51f81c7c0a06b6beb2f440dd549277e04f017b3c0e0a78e17c689add72bd5e60f0b0fc36ae0a179c90552133e7dc3d7caae3112874f6d6557da09586992761467b685a6082d93dbd062ec6f3b060600000056233c0a6071072c5f2d9aafd7c29624349820ffbf76ff3ac77af0da2d0ac3c86ad114472b8863159caa82a92a2fef9d167e759204cf8b12cce201c2fc71c455b6ab6ab77e2ab08113b285d7b3a47b0a6e20b93a38fb2c6259ab66c054d351f44ea236f55de2f05a3cc311d693486d1b946038f8cd8db72023c7728c8e78a874b1ce9a16cd3e27f0b6c251aa8db6f5bd43dfd633a770397d9d6f2639d7e9744406cb77fd22ec8b8d1cb1bdeb739afd469b2ef4489fe1e6226af8ca6efc5588580a35eebe6de0da06b5d3abc5f42f6da400f5a410e2cb4839cd5fef35ca0543b7bac6d3668f500455449404e7f063ddbb87c3c5841f35d217067e5651cbd26a80253033cf25b1b69c5e441fe964afb073105c7f316ff71cba3d69576b76bdc3e6808ec519f079e4bad5a50e6398aa5a97fe2d07cd52a66b3f95ab3d8aa933be0cde728eb22c39427889baba330936a3ba426445fbb43e7056dc8795b77c8283f70ff55fed6886a64f149b69a3c2817f396feb50c91c6b4ae1abce4fc0f7e21916399c9d681c6952d8caf00b565ccdc10b7b0fa20b9dbee89bbeebcf863b0ace494f199acb2b8ce1886c00db32c14f0ec77a7c781bad8c4afccf2abd98bf8a0abb4dc3d15690cdce085170b2abf719627a3d0b6071ca3b15a84ec7341a4fe2146f776395e97ed88d633910e01f162acf208176bf84be08349c3e8d230018a6825e82486331ef0b641725dcc87dd0cfc28233e611da5d3c783f49366ff4cf74bbc0367a3c21aa38fd6fcd7be61a42401c5e394d0d871cd9c575f804c830111f588baa867d7533a9817597ff3db49f11ea44b2e79f228dfd9b2fe8c5c11c89b770f9de7f6ea56cbb6acf8376376c7a13a7b8902ff51f6368c06dca057697ae8649ea0b84337c517f81e78b2d7779f0e6803095ae2ea137a87c1fbaccb207c8202378b7e5c720354d40fb4e44c2832ab6143d6a0853d3c657ee3b34d3c0300513445d69b072d6fe9ee686c0e10050e12ca69f1c85bb9ee447edf1cfc4fc41249f8e1449d8212db0f12bcc6ba071c2d045a0584e4d963c5ab8552ad3604ab7088b6fd6ecf874e1714996504dfb79969a16ed1e8c77910312d52ece0ff04ac4d35927cdb822a57eba38432e12f4bb63233d19bbb5da8a1fecf271cbcebdb1b12086f8d6250cb49cd7212f0a09fcecb994eedae04f6f0a9caa05c187f3ee5108860a911074e5b6c4d44399fa7407af26cc3a2a81565eb0de9d8975a838dae2ad2a3df927475549e59948229612d8680f41081e481812528523bdbe1692c9b826adaff25fa224615bdb792005d975ffbc3d6bdb66ddfce17b5fa6a41c83e3fb3f06aeae2332c9f6bc5a6ca703d79d7683b2854db349ba7a8f41487f92550fa1f833fb43e03bbaedd8073720b7e1db1b590ee6ab0923ebe3bfec988deab73a26accc9e8fef72e918c1c83b40c22baf930b071753e9536414226ebb45667b0b933821a5d23ae15dce21d0e0dd7f3fc29b41dd35d365d818936fb9d0e091f5470f4b4638ac901f4bc409f77a56abdcafddc8dbefa7794de49072a50bbd6d972cfc055f164d5d28b3a0f9a70e1ce763bb6c21d8498cc5f785c013014d83e330e3fc7f9b87fa61fb927f5a169bf843241ff424ee479c327554dc66bf5ebd1b9bdb097a2e9a94c8ce9587852ea4325615cf7e573397f3a5464246ee5876a909cb9b918874ae65b9e54ba24d37ca752793ba507552ad663e5327e859251bda71094d352509fc6f58387c37cb0ec22f0bc0cd8991deb32bd88f6a5b24808356db8394e3e37a325f63efeb0c190d2c94db2e7abe5163e1dbf9f8c6bcdf19b7767495ece0991f4b74bd9ac63a12c0554205477c5c7465c844efbf9dfcb269bdd2ad443c03bfe16c4a1c3dfa464461e59d4b326709df90e691fbddb5871ec14da5290b2666e5544ac69372c2c602bb3c5b0b6811c3971c4c35dad4bab6b2cfd5dd2cd7ae803f7a001644e79c037b4b447b96d72b471fbdb443b03c86b26b4c8766c600d5d014abe61ec13f29f1b387ee68c61788959d69097ae337d932318af02c264566d80461c4a8678bfc071b32f1711d117ac15dc29f30bb17962940d6ac73ae0175687bb34cd5ae949d0d81a148b2ed4a725c762e2745876b8a015a88cdd9c2d579ef3640d113cefcf0c5369ea1892f508351214f55993c60d1666bbfb14818bf29bac4ff11050ec3ef83164cc0bb4e120c6f921e6cffbd7714557c5b40e79715e8748f6fa8a87fa9ad7504e98975b4885f9512a68c766e0821b932dceecf55865813d67e1fd603e4f676505a020fd0d99f316dfda7341af886e434bd01a2d716fc49e53dee871738a2db8793ad551cee73ef5e754e66ee5d7b0bbd4c2cd671dde7778e586a4462fb008fa9e6a3334276dd9eac0453606ca5d09b96be455b00f3148ef4b4b666a396d8d2d940a7d790e2b188b04dee8a9fed4b100868b5d5a1000dfa5ce5bd012c4e97f040dbcff097cdf69a56c24f7e4a037003cde05f634ec854ec8b10c2ef131df21030febb24ef9153d022ce3477591043de1dad47aa55cbe20bc5d0b50f7f88021e9d3635d8dcd2109f0c72664f5935ac48a8312731c49b4731798f8ec43739afe0643f8b4ba8659e7a53439b8037ea05d1f6884064f9486b430f4505ef6559153bc75f71cafed045aa76b75a18cfcaa1d69008d030a3c8a43851b97164cfe03399a4890007e9547271aeae81de46b434554445665a9a58f233d0cabf6ba3e9a4c06ca2e97808d8e7c60774e9652217831f50f78bcd3f68dcc3f2f7cbe7d22e6bd257d21a50c411b7acaa41ea903b5d4d8aa2af1dd4af3e62f002b06333723bf0c75b4ce34c6f15f1edb064ae29f310e6f046a3b2accd482db711286d3db200033dc84296f06d9e0a463ce010d373f4248bbb48267bd65df256958ba627ed4f249b202ae16956695832e7769c0256175e110f1e64bbd08d40ce6500712715b243f54aa9e3da513b8b52594715e3f6432eeaf0e3147c36f8be5fa0d4162fc23b096832194d212154d5bb2556697d28af3c70981170b47c998c9364de415036bf81fb78a78989288a09aa88bd68dcbe4db82250c31e89b12b4c56bdb82fdce436b0f5e471971cd1c802e157560187f42a393fceba1ae2f9ee04d95d402d73c5a3d79c5b723efe61ebbd45264bed4a188ed37953065ba6de9a4ac0992ce5df5913a0905874f267c05b9de999c901c9dd39d41e4f053ac3222dc06650165291ee47ae138723542a9444d68521558a683e42aae9e0fb840cce0b4a0f999c4cb68e0f8be3d0174919906552a60cfb2e3cffbf296443f8bac31ade1aa6207115894e661fc6c6e4c065c9caea258b662cbfbe06f21fc43a40b1d0ec914da1d7921854fa100e4a5431ddd02384ce2290e83322d26b08245608de75f276a3ef9db079c007cce9b743673b96885f5c48745dc953555db73050845c99c7977c11d7169e8807f6e9498288bad1e3a4dbe582f0698cc49aef80301afdbb4bd00a00008eeb8cc621c17f32b4624e3cfd49de4da68789016a360e25700e430b62759f3f1bb7ecef1edc4acaac175f16eb0432fefbc613f2b72a905f5d46da310a4b6b7710b6fd337e1984a99f92b556fd8a26bbba3c35aeb350fc002b2d115a4b4b6f8777a2ec5d93a174ad3aede992fd42da806e7b2260665dfe21dc5bd13c0f94919d378c898a62d98217a8f9250be0cb0a54e3517a15c26caa13918dadf681fb4df8a3dec0c143ba615a2bae50db32cd2eb295060d7985cc5770d0083ac279195ac8b8d582466e8c3205c05eff37c8d656c55db99b737b964ba860142ad697241af0c426bb0de1b7f2e6cd5efebfb38f4345affcb2b3a4952dcd08cd523b519007429ce554b79bc836b9d3efe631fcdacf6228209ddd470afce2de97af98984db6ea33081bda05a4116f9f69535d42ab6da8bd61dbdffcc3e89c9b287c2f0fdc1261a26dff04e036724cd49e8b9980ba2f5bca542f80df0d4a0fc33bfe8d18cfa072975dd29031bfd6e6a8cf31a3873353976ec060c88ec2f0bed2f0899cb66e26a95e926615c55ea9b1debcdacb26e57131e25de5d19828284a8fff3d25d1847ca350d861e2206baa24b6e667fab99aeacc6a7a682315985c56e3a089606d8d6986158805b795acabb185edc8db3c637445cf3015ee6db0e5dec0c881c801b2fce12b897959796db610e3a1c6fbc22972bbc8563f1007f1c53c3bff3bcfe2375e65d6972fd45f9d1bf5e771498236a2e288a89b5f473fe1235cfe2072299bbb8f4bcce600000000000000000000000000000000aea1844d743ac84c015cb3c9c326808d8b61dbedeba863e9a3f90dd2584f11db7e851ab82b7aac8e307727b43c26fe223cb189a5c5e1defdd2080ab1c1c2611bd68172e4e6e4a1be366c7504fce266423346025fc6a521be1ebfac580997f57f986dc1a018b505848bc473a651f24e1e4bcb72d33d8f30c40859fcb5e036e7e52d8e5f7a21111d5bf5bfc90e14e903ce7fb2e87f9a2388cce2e71f3efc794e0ad3a3a6", 0x10c2}, {&(0x7f0000002180)="512411acc72dc734f6df4c5f15be68b2edfc3a2a7db95c3718d685e9f032a4c12d3362f448602fcac7c249a6a4e2fb8e5bf128242540e786532badca67a496b268cdb625377b2c218f3931598bca01f8f27e8801dad57e030ea871dbb88149435934334942997b453fb1b214bf7f4f9c21b054e6b42f72388596698673ba45ec801e303763cec1ba91216e48644843772d5a7e4f9021247098ed9d991b", 0x9d}, {&(0x7f0000002240)="244abb2c4f801cd0ec2bc87a4d3fb40d1ed2f0d3508cb7dcc54dd9f68a847bf55b78bffc5b9d7d22fb244c158f42f7852dc82de6ede61d2e7e99b3819003301d8ff252552fbf83ad4adacf683a1bbc28176b0e5016d6f5f6a06e5d5c4c898dbd1dac0c0876925c51b92e8e6db21bf49cd056e46ff59552254e", 0x79}], 0x9}, 0x4000) sendmsg$nl_route(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000001140)={&(0x7f0000000e40)=@newlink={0x17c, 0x10, 0x600, 0xfffffffc, 0x0, {0x0, 0x0, 0x0, 0x0, 0x20991, 0x11c05}, [@IFLA_LINKINFO={0x1c, 0x12, 0x0, 0x1, @macsec={{0xb}, {0xc, 0x2, 0x0, 0x1, [@IFLA_MACSEC_ICV_LEN={0x5, 0x3, 0xc}]}}}, @IFLA_VF_PORTS={0x140, 0x18, 0x0, 0x1, [{0x54, 0x1, 0x0, 0x1, [@IFLA_PORT_PROFILE={0x10, 0x2, '\x93\xd4($-\xc2**-+\'\x00'}, @IFLA_PORT_REQUEST={0x5, 0x6, 0x8}, @IFLA_PORT_VF={0x8}, @IFLA_PORT_PROFILE={0x5, 0x2, '\x00'}, @IFLA_PORT_INSTANCE_UUID={0x14, 0x4, "341a3242f13cae759904663250c568ba"}, @IFLA_PORT_HOST_UUID={0x14, 0x5, "9c89f13db2e4b4cfd12295c18e860f3b"}]}, {0x40, 0x1, 0x0, 0x1, [@IFLA_PORT_REQUEST={0x5, 0x6, 0x81}, @IFLA_PORT_VF={0x8, 0x1, 0x5}, @IFLA_PORT_INSTANCE_UUID={0x14, 0x4, "8830a8002870f1bda7a757dabb83f653"}, @IFLA_PORT_PROFILE={0x8, 0x2, 'nfc\x00'}, @IFLA_PORT_VF={0x8, 0x1, 0x7}, @IFLA_PORT_VF={0x8, 0x1, 0x3}]}, {0x44, 0x1, 0x0, 0x1, [@IFLA_PORT_INSTANCE_UUID={0x14, 0x4, "4bfcce5ec4d67da0c1f8b3780037847d"}, @IFLA_PORT_VF={0x8, 0x1, 0x8}, @IFLA_PORT_PROFILE={0x8, 0x2, '^*@\x00'}, @IFLA_PORT_INSTANCE_UUID={0x14, 0x4, "3d1d3f240421d6bf7da541cf30449a5e"}, @IFLA_PORT_REQUEST={0x5}]}, {0x18, 0x1, 0x0, 0x1, [@IFLA_PORT_HOST_UUID={0x14, 0x5, "6efaea981dee8e14743d8c1c3126dea8"}]}, {0x20, 0x1, 0x0, 0x1, [@IFLA_PORT_PROFILE={0xb, 0x2, 'macsec\x00'}, @IFLA_PORT_REQUEST={0x5, 0x6, 0xc}, @IFLA_PORT_REQUEST={0x5, 0x6, 0x6}]}, {0x2c, 0x1, 0x0, 0x1, [@IFLA_PORT_PROFILE={0xa, 0x2, '(&&@\xc2\x00'}, @IFLA_PORT_HOST_UUID={0x14, 0x5, "d2eb72501f489708d768d2dad92ba675"}, @IFLA_PORT_VF={0x8, 0x1, 0x7fffffff}]}]}]}, 0x17c}, 0x1, 0x0, 0x0, 0x48890}, 0x0) 797.294056ms ago: executing program 1 (id=4007): r0 = socket$packet(0x11, 0x3, 0x300) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000140)={'veth1_macvtap\x00', 0x0}) setsockopt$packet_add_memb(r0, 0x107, 0x1, &(0x7f0000000100)={r1, 0x2, 0x6, @remote}, 0x10) r2 = bpf$PROG_LOAD(0x5, &(0x7f000000e000)={0x16, 0x4, &(0x7f0000000540)=ANY=[@ANYBLOB="b4000000000000007910900000000000620000000000000095000000000000009e574bffff1729aba9b39a58e3cd8757e44cf3611b8e327a0279acba1f7791408d1efa42123972"], &(0x7f0000003ff6)='GPL\x00', 0x5, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @flow_dissector}, 0x94) (async) r3 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r3, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000000)=@deltaction={0x34, 0x18, 0x1, 0x70bd2a, 0x25dfdc00, {0xa}, [@TCA_ACT_TAB={0x20, 0x1, [{0xc, 0x8f, 0x0, 0x0, @TCA_ACT_INDEX={0x8}}, {0x10, 0x14, 0x0, 0x0, @TCA_ACT_KIND={0x9, 0x1, 'csum\x00'}}]}]}, 0x34}, 0x1, 0x0, 0x0, 0x44000}, 0x20040844) (async, rerun: 64) r4 = socket(0x10, 0x3, 0x0) (async, rerun: 64) r5 = bpf$PROG_LOAD(0x5, &(0x7f0000000a40)={0x1, 0x4, &(0x7f0000000340)=ANY=[@ANYBLOB="1800000000000000000000000f000000850000002e00000095"], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, @fallback=0x35, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) (async) r6 = socket$kcm(0x11, 0x20000000000000a, 0x300) setsockopt$sock_attach_bpf(r6, 0x1, 0x32, &(0x7f0000000040)=r5, 0x4) r7 = bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000440)={&(0x7f0000000680)={{0xeb9f, 0x1, 0x0, 0x18, 0x0, 0x1b, 0x30, 0xb, [@enum={0x9, 0x0, 0x0, 0x6, 0x4, [{0x1, 0x507a}, {0xc, 0x7}, {0x4, 0xd3}, {0x4, 0x7}, {0xc, 0x2}, {0xb, 0xa6}, {0xe}, {0xb, 0xff}]}, @const={0x7, 0x0, 0x0, 0xa, 0x40004}, @func={0x2, 0x0, 0x0, 0xc, 0x2}, @const={0xe, 0x0, 0x0, 0xa, 0x1}]}, {0x0, [0x2e, 0x2e, 0x5f, 0x61, 0x0, 0x0, 0x5f, 0x30, 0x61]}}, &(0x7f0000000380)=""/187, 0x53, 0xbb, 0x1, 0x4}, 0x28) r8 = bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000480)={0x6, 0x3, &(0x7f00000000c0)=ANY=[@ANYRES16=r6], &(0x7f0000000040)='syzkaller\x00', 0x0, 0x0, 0x0, 0x40f00, 0x0, '\x00', 0x0, 0x25, r7}, 0x94) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000600)={r8, 0x1f4, 0xe, 0x0, &(0x7f00000001c0)="ffffffff7f833e9762a536c801d7", 0x0, 0x304, 0x300, 0x0, 0x0, 0x0, 0x0, 0x2, 0xffff80fe, 0x8}, 0x50) (async) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000001080)={&(0x7f0000000080)=ANY=[@ANYBLOB="4800000010000305000000000000000000cf0000", @ANYBLOB="03000000000000002000128008000100677265001400028008000600ac14142e08000700e000030a08000a00", @ANYRES32=0x0, @ANYRES16=r2], 0x48}, 0x1, 0x0, 0x0, 0x24040000}, 0x2000800) sendmmsg(r4, &(0x7f0000000000), 0x4000000000001f2, 0x0) (async, rerun: 64) socket(0x2b, 0x1, 0x1) (rerun: 64) r9 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r9, &(0x7f0000000040)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000180)=@getchain={0x24, 0x11, 0x43d, 0x70bd2b, 0x0, {0x0, 0x0, 0x0, r1, {}, {0x0, 0xfff1}, {0x0, 0xa}}}, 0x24}, 0x1, 0x0, 0x0, 0xc015}, 0x0) (async) close(r0) 769.155221ms ago: executing program 2 (id=4008): pipe(&(0x7f0000000080)={0xffffffffffffffff}) readv(r0, &(0x7f0000000000)=[{&(0x7f00000000c0)=""/243, 0xfffffdef}], 0x1) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32, @ANYBLOB="0000000000000000b70800000d0000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000100000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) (async, rerun: 32) r1 = bpf$MAP_CREATE(0x0, &(0x7f0000000740)=ANY=[@ANYBLOB="0b00000005000000000400000900000001"], 0x48) (rerun: 32) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0xa, 0x4, &(0x7f0000000480)=ANY=[@ANYBLOB="18000000000000000000000000000000850000006d"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r2 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000d80)={0x18, 0x5, &(0x7f0000000480)=ANY=[@ANYBLOB="1801000021"], 0x0, 0x40, 0x0, 0x0, 0x0, 0xb4a02fe0ce239f93, '\x00', 0x0, 0x2}, 0x94) (async) r3 = socket$inet_udp(0x2, 0x2, 0x0) r4 = bpf$MAP_CREATE(0x0, &(0x7f0000000700)=ANY=[@ANYBLOB="0f000000040000000400000012"], 0x50) bpf$MAP_UPDATE_ELEM(0x2, &(0x7f0000000440)={r4, &(0x7f0000000440), &(0x7f0000000040)=@udp=r3}, 0x20) (async) ioctl$sock_SIOCINQ(r3, 0x541b, &(0x7f00000000c0)) (async, rerun: 32) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0xe, 0x0, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000800000000000000000000018110000", @ANYRES32=r1], 0x0, 0x0, 0x0, 0x0, 0x41100, 0x59, '\x00', 0x0, @fallback=0x2a, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, r2, 0x0, 0x0, 0x0, 0x0}, 0x94) (rerun: 32) r5 = bpf$PROG_LOAD(0x5, &(0x7f0000000300)={0x6, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, @fallback=0x4, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000180)={r5, 0x2000000, 0xe, 0x0, &(0x7f0000000040)="630b008646dc3f0adf33c9f7b986", 0x0, 0xcf25, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x80}, 0x50) 652.354975ms ago: executing program 1 (id=4009): writev(0xffffffffffffffff, &(0x7f0000000140)=[{&(0x7f0000000000)="286437065da0b43fa34d1be961b6babaf591113d5fd5e19dc14bae08e86502ecda1c043517df693f6adf4dea9ef41abff121a7313c4f6a", 0x37}, {&(0x7f0000000040)="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", 0xff}], 0x2) getsockopt$SO_J1939_PROMISC(0xffffffffffffffff, 0x6b, 0x2, &(0x7f0000000180), &(0x7f00000001c0)=0x4) r0 = openat$cgroup_subtree(0xffffffffffffffff, &(0x7f0000000200), 0x2, 0x0) write$cgroup_subtree(r0, &(0x7f0000000240)={[{0x2b, 'pids'}, {0x2d, 'net_cls'}, {0x2b, 'rlimit'}, {0x2b, 'rlimit'}]}, 0x1f) ioctl$XFS_IOC_AG_GEOMETRY(r0, 0xc080583d, &(0x7f0000000280)={0x9, 0x800, 0xfffffffe, 0x2, 0xfffffffe, 0x0, 0x7fff, 0x8}) r1 = socket$l2tp6(0xa, 0x2, 0x73) shutdown(r1, 0x0) r2 = socket$qrtr(0x2a, 0x2, 0x0) connect$qrtr(r2, &(0x7f0000000300)={0x2a, 0x2}, 0xc) r3 = accept(r2, 0x0, &(0x7f0000000340)) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000380)={'ipvlan1\x00', 0x0}) ioctl$sock_ipv4_tunnel_SIOCDELTUNNEL(r3, 0x89f2, &(0x7f0000000480)={'syztnl2\x00', &(0x7f00000003c0)={'syztnl2\x00', r4, 0x20, 0x1, 0xd, 0xe, {{0x27, 0x4, 0x1, 0x9, 0x9c, 0x66, 0x0, 0x5, 0x2f, 0x0, @dev={0xac, 0x14, 0x14, 0x31}, @broadcast, {[@end, @timestamp_addr={0x44, 0x34, 0x63, 0x1, 0x1, [{@rand_addr=0x64010100, 0x1}, {@broadcast, 0x571b2c5b}, {@private=0xa010100, 0x5}, {@multicast2, 0x1}, {@loopback, 0x6}, {@dev={0xac, 0x14, 0x14, 0x34}, 0x5}]}, @generic={0x86, 0x12, "d8a97ee88d0165a23957d1824698519d"}, @end, @noop, @timestamp_prespec={0x44, 0x14, 0x45, 0x3, 0x9, [{@rand_addr=0x64010101, 0x5}, {@loopback, 0x5}]}, @timestamp_prespec={0x44, 0x14, 0x43, 0x3, 0x1, [{@remote, 0x1ff}, {@empty, 0xb123}]}, @generic={0x89, 0xb, "dbed22e67cfa6ca51b"}, @generic={0x94, 0x9, "11c2a9b4420b61"}, @noop]}}}}}) sendmsg(r1, &(0x7f00000007c0)={&(0x7f00000004c0)=@in={0x2, 0x4e24, @broadcast}, 0x80, &(0x7f0000000780)=[{&(0x7f0000000540)="52897530118f7a1d96272fa6c222dcecd1254c478c4e30fffebb6450a9714dcf5a29c11e2af537c4bea2946549c1b6a522b1144aaf1a5ad91d369cc5ffee88da08b68e1199c31fd1426259cea0b56b4e9d2473062a35b500883b05257ea9baf52f95cf661da972222172b6366218f4c5b9b1c172ccc45334c6", 0x79}, {&(0x7f00000005c0)="af11568ee1706fc67d379dcf769e9a484171461edd48cdd597bd5b189a52218fdae8f9fe7f0ab5d2c11e16c426eae196694aaf68bc48b6273fe5a2e171e4340e37c01e558cb523ae7fc88826f3ee988946d3b87237d8bd9f9ef462afe829284960cad24d885261e30c02e2fc6550fd7534caf2c548c05ba94bad9b25f86d769eb59b9363e31d7d39e311c694be2226e4060464768fba8c5e4f2d26a30dc55441c16844f9319ac1b295c67dc3480a9c79fa17f71463259cdfb911a1ee82cd5acc43abe3b9fafcc9c80125ee7aea50aa43c116579f77294e3f5dbdf0fd06f046dde64f069fe385eb1dc91c2a04d480e3518c03", 0xf2}, {&(0x7f00000006c0)="c6e65617b51b8fd69ecbcde946208069eaad74613294895c53a946f3a976c08da7a4d561284560a68181a3112a9bd83606f21dedea33b567962dffb0de97c67b69b5dee73f31699faa03b7673d6bbc63c867b558c9d2ad67bbe6a4f8ac2a52f958dd36e55772060e80effe2b7f2b89f57e710e3d8887d0165d47ffcefb87ecf3fe8ba30a9d75b0374662c6f102d18d093a3e3b46defee2", 0x97}], 0x3}, 0x0) ioctl$XFS_IOC_AG_GEOMETRY(r1, 0xc080583d, &(0x7f0000000800)={0x6, 0xffff498e, 0x4, 0x101, 0x7, 0x7f, 0xff}) ioctl$F2FS_IOC_MOVE_RANGE(r1, 0xc020f509, &(0x7f0000000880)={r1, 0x6, 0x6, 0xc}) sendmsg$IPCTNL_MSG_TIMEOUT_DELETE(r5, &(0x7f0000000a00)={&(0x7f00000008c0)={0x10, 0x0, 0x0, 0x10000}, 0xc, &(0x7f00000009c0)={&(0x7f0000000900)={0x88, 0x2, 0x8, 0x301, 0x0, 0x0, {0xa, 0x0, 0x8}, [@CTA_TIMEOUT_NAME={0x9, 0x1, 'syz0\x00'}, @CTA_TIMEOUT_L4PROTO={0x5, 0x3, 0x6}, @CTA_TIMEOUT_L4PROTO={0x5, 0x3, 0xa9}, @CTA_TIMEOUT_NAME={0x9, 0x1, 'syz1\x00'}, @CTA_TIMEOUT_L3PROTO={0x6, 0x2, 0x1, 0x0, 0x4e32035a2786aef}, @CTA_TIMEOUT_DATA={0x44, 0x4, 0x0, 0x1, @tcp=[@CTA_TIMEOUT_TCP_SYN_SENT2={0x8, 0x9, 0x1, 0x0, 0x6}, @CTA_TIMEOUT_TCP_RETRANS={0x8, 0xa, 0x1, 0x0, 0xc}, @CTA_TIMEOUT_TCP_SYN_SENT={0x8, 0x1, 0x1, 0x0, 0x3}, @CTA_TIMEOUT_TCP_FIN_WAIT={0x8, 0x4, 0x1, 0x0, 0x9}, @CTA_TIMEOUT_TCP_CLOSE={0x8, 0x8, 0x1, 0x0, 0xfffffe01}, @CTA_TIMEOUT_TCP_RETRANS={0x8, 0xa, 0x1, 0x0, 0x8}, @CTA_TIMEOUT_TCP_ESTABLISHED={0x8, 0x3, 0x1, 0x0, 0x7fff}, @CTA_TIMEOUT_TCP_SYN_RECV={0x8, 0x2, 0x1, 0x0, 0x9}]}]}, 0x88}, 0x1, 0x0, 0x0, 0x4000000}, 0x40010) setsockopt$SO_ATTACH_FILTER(r3, 0x1, 0x1a, &(0x7f0000000a80)={0x7, &(0x7f0000000a40)=[{0xc583, 0x1, 0x9d, 0x401}, {0x6, 0x5, 0x4, 0x6}, {0x3, 0xc, 0x35, 0x3}, {0x3, 0xe, 0x7e, 0xffffffff}, {0x8, 0x8, 0x2, 0x4}, {0x0, 0x0, 0xe}, {0x7ff, 0x7, 0x2, 0x852}]}, 0x10) socket$alg(0x26, 0x5, 0x0) ioctl$FS_IOC_SETVERSION(r0, 0x40087602, &(0x7f0000000ac0)=0x7) close(r2) getsockopt$inet_sctp6_SCTP_RTOINFO(r3, 0x84, 0x0, &(0x7f0000000b00)={0x0, 0xf2, 0x7ff, 0xffff}, &(0x7f0000000b40)=0x10) setsockopt$inet_sctp6_SCTP_CONTEXT(r3, 0x84, 0x11, &(0x7f0000000b80)={r6, 0x1}, 0x8) ioctl$ifreq_SIOCGIFINDEX_vcan(r5, 0x8933, &(0x7f0000000bc0)={'vxcan1\x00'}) getsockopt$inet_sctp_SCTP_STREAM_SCHEDULER(r3, 0x84, 0x7b, &(0x7f0000000c00)={r6, 0x80000000}, &(0x7f0000000c40)=0x8) ioctl$int_in(r0, 0x5421, &(0x7f0000000c80)=0xaa7) ioctl$sock_SIOCGIFVLAN_SET_VLAN_FLAG_CMD(r3, 0x8982, &(0x7f0000000cc0)={0x7, 'virt_wifi0\x00', {0x7fff}, 0x8d}) r7 = syz_init_net_socket$bt_hidp(0x1f, 0x3, 0x6) poll(&(0x7f0000000d00)=[{r7, 0x300}, {r3, 0x200}, {r0, 0x8482}, {r0, 0x30}], 0x4, 0x4) r8 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$NL80211_CMD_GET_PROTOCOL_FEATURES(r8, &(0x7f0000000e40)={&(0x7f0000000d40)={0x10, 0x0, 0x0, 0x1000000}, 0xc, &(0x7f0000000e00)={&(0x7f0000000dc0)={0x14, 0x0, 0x100, 0x70bd29, 0x25dfdbfd, {}, [""]}, 0x14}, 0x1, 0x0, 0x0, 0x4000081}, 0x40000d4) 533.662534ms ago: executing program 2 (id=4010): r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$devlink(&(0x7f0000000040), r0) sendmsg$DEVLINK_CMD_SB_TC_POOL_BIND_SET(r0, &(0x7f00000002c0)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x40}, 0xc, &(0x7f0000000280)={&(0x7f0000000080)={0x1ec, r1, 0x400, 0x70bd29, 0x25dfdbfd, {}, [{{@nsim={{0xe}, {0xf, 0x2, {'netdevsim', 0x0}}}, {0x8}}, {0x8, 0xb, 0xfffffffd}, {0x6, 0x16, 0xa0a}, {0x5}, {0x6, 0x11, 0x7b}, {0x8, 0xb, 0x3}}, {{@pci={{0x8}, {0x11}}, {0x8}}, {0x8, 0xb, 0x8}, {0x6, 0x16, 0x1}, {0x5}, {0x6, 0x11, 0x9cd}, {0x8, 0xb, 0x4c36}}, {{@nsim={{0xe}, {0xf, 0x2, {'netdevsim', 0x0}}}, {0x8, 0x3, 0x2}}, {0x8, 0xb, 0x2}, {0x6, 0x16, 0xf}, {0x5}, {0x6, 0x11, 0x7f}, {0x8, 0xb, 0x20d}}, {{@nsim={{0xe}, {0xf, 0x2, {'netdevsim', 0x0}}}, {0x8, 0x3, 0x1}}, {0x8, 0xb, 0x5417e545}, {0x6, 0x16, 0x5}, {0x5}, {0x6, 0x11, 0x6}, {0x8}}, {{@pci={{0x8}, {0x11}}, {0x8, 0x3, 0x3}}, {0x8, 0xb, 0xffffff00}, {0x6, 0x16, 0x5}, {0x5, 0x12, 0x1}, {0x6, 0x11, 0x40}, {0x8, 0xb, 0x1}}, {{@nsim={{0xe}, {0xf, 0x2, {'netdevsim', 0x0}}}, {0x8}}, {0x8, 0xb, 0x1}, {0x6, 0x16, 0x9}, {0x5, 0x12, 0x1}, {0x6, 0x11, 0x4}, {0x8, 0xb, 0x9}}]}, 0x1ec}, 0x1, 0x0, 0x0, 0x4000011}, 0x10004882) r2 = syz_genetlink_get_family_id$wireguard(&(0x7f0000000600), 0xffffffffffffffff) sendmsg$WG_CMD_SET_DEVICE(r0, &(0x7f0000001000)={0x0, 0x0, &(0x7f0000000fc0)={&(0x7f00000010c0)=ANY=[@ANYBLOB='|\x00\x00\x00', @ANYRES16=r2, @ANYBLOB="01000000000000000000010000004c00088048000080200009801c000080060001000200007f0f000200ac1414aa05000300020000002400010000000000000000000000000000000000000000000000000000000000000000000800050001000000140002007767310000"], 0x7c}, 0x1, 0x0, 0x0, 0x4084}, 0x20008040) 459.01448ms ago: executing program 6 (id=4011): syz_init_net_socket$bt_l2cap(0x1f, 0x1, 0x0) socketpair(0x1, 0x1, 0x0, &(0x7f0000000000)) openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0) socketpair(0x1, 0x1, 0x0, &(0x7f0000000000)) openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0) bpf$PROG_LOAD(0x5, &(0x7f00000005c0)={0x6, 0xc, &(0x7f00000001c0)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bc82000000000000a6020000f8ffffffb703000008900000b70300001a000000850000003300000095"], 0x0, 0x0, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, @xdp, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r0 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="0e000000040000000800000005"], 0x48) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x6, 0xc, &(0x7f00000001c0)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r0], &(0x7f0000000180)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @xdp=0xedf0e51957efc755, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000540)={{r0}, &(0x7f0000000400), &(0x7f0000000500)=r1}, 0x20) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000000)={r1, 0x18000000000002a0, 0x5ee, 0xf00, &(0x7f0000000580)="b9ff03076804268c989e14f088a8", 0x0, 0x500, 0x60000000, 0x0, 0x0, 0x0, 0x0, 0x2}, 0x50) r2 = socket$kcm(0xf, 0x3, 0x2) sendmsg$inet(r2, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000000)=[{&(0x7f0000000040)="0207000a02000000e4a17c45c8d260c9", 0x10}], 0x1}, 0x0) r3 = socket$key(0xf, 0x3, 0x2) sendmsg$key(r3, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000000)=ANY=[@ANYBLOB="020a000307000000000000000000000005001a00ac1e0001000000000000000000000000e000000100ff03000000000000000000f4fdbf"], 0x38}}, 0x0) r4 = syz_init_net_socket$bt_sco(0x1f, 0x5, 0x2) ioctl$int_in(r4, 0x5421, 0x0) connect$bt_sco(r4, &(0x7f0000000040)={0x1f, @fixed={'\xaa\xaa\xaa\xaa\xaa', 0x10}}, 0x8) 360.280367ms ago: executing program 1 (id=4012): bpf$MAP_CREATE(0x100000000000000, 0x0, 0x0) (async) r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) write$bt_hci(r1, &(0x7f0000000080)=ANY=[], 0x6) (async) ioctl$sock_SIOCGIFINDEX_80211(0xffffffffffffffff, 0x8933, &(0x7f0000000100)={'wlan1\x00'}) (async) bpf$PROG_LOAD(0x5, &(0x7f0000000200)={0x4, 0xe, 0x0, 0x0}, 0x94) (async) r2 = socket(0x1, 0x803, 0x0) getsockname$packet(r2, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f00000001c0)=0x14) sendmsg$nl_route(r0, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000140)={&(0x7f00000002c0)=@newlink={0x4c, 0x10, 0x403, 0x0, 0x0, {0x0, 0x0, 0x0, 0x0, 0x90646}, [@IFLA_LINKINFO={0x1c, 0x12, 0x0, 0x1, @vlan={{0x9}, {0xc, 0x2, 0x0, 0x1, [@IFLA_VLAN_ID={0x6, 0x1, 0x1}]}}}, @IFLA_LINK={0x8, 0x5, r3}, @IFLA_NUM_TX_QUEUES={0x8, 0x1f, 0x9}]}, 0x4c}, 0x1, 0x0, 0x0, 0x600}, 0x0) (async) bpf$PROG_LOAD(0x5, &(0x7f0000000180)={0x1, 0x4, &(0x7f0000000000)=ANY=[@ANYBLOB="00009ca10000993eabeeb974ce93aa7857bf006110fcc342ca7f1443f5000000"], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x20001}, 0x94) 303.933602ms ago: executing program 4 (id=4013): r0 = openat$tun(0xffffffffffffff9c, &(0x7f00000000c0), 0x0, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x7101}) r1 = socket$nl_route(0x10, 0x3, 0x0) r2 = socket$unix(0x1, 0x1, 0x0) ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r1, &(0x7f0000000740)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000006c0)=@newqdisc={0x24, 0x24, 0x4ee4e6a52ff56541, 0x70bd2a, 0xffffffff, {0x0, 0x0, 0x0, r3, {0x0, 0xfff1}, {0xffff, 0xffff}, {0x0, 0x10}}}, 0x24}, 0x1, 0x0, 0x0, 0x4000000}, 0x20040084) r4 = socket$unix(0x1, 0x1, 0x0) r5 = socket$kcm(0x11, 0x3, 0x0) r6 = openat$tun(0xffffffffffffff9c, &(0x7f0000000400), 0x0, 0x0) close(r6) socket$tipc(0x1e, 0x2, 0x0) ioctl$SIOCSIFHWADDR(r6, 0x8914, &(0x7f0000002280)={'syzkaller0\x00', @multicast}) r7 = socket$unix(0x1, 0x1, 0x0) ioctl$sock_SIOCGIFINDEX(r7, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r1, &(0x7f0000000580)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000a80)=@newtfilter={0xb4, 0x2c, 0xd27, 0x70bd26, 0x25dfdbfd, {0x0, 0x0, 0x0, r8, {0x0, 0x4}, {}, {0x8, 0xfff2}}, [@filter_kind_options=@f_matchall={{0xd}, {0x80, 0x2, [@TCA_MATCHALL_ACT={0x7c, 0x2, [@m_tunnel_key={0x78, 0x1, 0x0, 0x0, {{0xf}, {0x48, 0x2, 0x0, 0x1, [@TCA_TUNNEL_KEY_ENC_IPV6_SRC={0x14, 0x5, @remote}, @TCA_TUNNEL_KEY_ENC_IPV6_DST={0x14, 0x6, @ipv4={'\x00', '\xff\xff', @remote}}, @TCA_TUNNEL_KEY_PARMS={0x1c, 0x2, {{0x3, 0x0, 0x5, 0x7fff, 0x7}, 0x1}}]}, {0x26}, {0xc, 0x7, {0x1, 0x1}}, {0xc}}}]}]}}]}, 0xb4}, 0x1, 0x0, 0x0, 0x8000}, 0x20000000) ioctl$sock_SIOCGIFINDEX(r4, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) setsockopt$sock_attach_bpf(r5, 0x107, 0xf, &(0x7f0000000600), 0x56) sendmsg$kcm(r5, &(0x7f0000000280)={&(0x7f0000000380)=@xdp={0x2c, 0x0, r9, 0x3e}, 0x80, &(0x7f00000001c0)=[{&(0x7f0000000000)="27030200000214000e00002fb96dffff1144ee163cddcb000000800000827600000000000000", 0x26}, {&(0x7f00000004c0)="f058050000007f8f", 0x300}], 0x2}, 0x5) 251.363797ms ago: executing program 1 (id=4014): r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000000c0)=@ipv6_getnetconf={0x2c, 0x52, 0x10, 0x70bd2a, 0x25dfdbfb, {}, [@NETCONFA_IFINDEX={0x8}, @NETCONFA_FORWARDING={0x8, 0x2, 0x5}, @NETCONFA_PROXY_NEIGH={0x8, 0x5, 0xc}]}, 0x2c}, 0x1, 0x0, 0x0, 0x20044010}, 0x4840) 140.505366ms ago: executing program 6 (id=4015): sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000100)=@gettaction={0x50, 0x32, 0x20, 0x70bd25, 0x25dfdbfe, {}, [@action_gd=@TCA_ACT_TAB={0x1c, 0x1, [{0xc, 0x1c, 0x0, 0x0, @TCA_ACT_KIND={0x8, 0x1, 'bpf\x00'}}, {0xc, 0x1d, 0x0, 0x0, @TCA_ACT_KIND={0x8, 0x1, 'ipt\x00'}}]}, @action_gd=@TCA_ACT_TAB={0x20, 0x1, [{0x10, 0xe, 0x0, 0x0, @TCA_ACT_KIND={0xb, 0x1, 'mirred\x00'}}, {0xc, 0x17, 0x0, 0x0, @TCA_ACT_INDEX={0x8, 0x3, 0x40}}]}]}, 0x50}, 0x1, 0x0, 0x0, 0x40000}, 0x4048840) (async) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000180)=@newqdisc={0x24, 0x24, 0x1, 0x70bd2a, 0x25dfdbfe, {0x0, 0x0, 0x0, 0x0, {}, {0xffff, 0xffff}, {0x5}}}, 0x24}, 0x1, 0x0, 0x0, 0xc0}, 0x0) (async) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000100)=ANY=[@ANYBLOB="4800000010000d0428bd7000fcdbff2500008000", @ANYRES32=0x0, @ANYBLOB="1000000000000000280012800b0001006272696467650000180002"], 0x48}, 0x1, 0x0, 0x0, 0x10}, 0x0) (async) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000100)=ANY=[@ANYBLOB="500000001000010425bbe5ad600027842cf52300", @ANYRES32=0x0, @ANYBLOB="0300000000000000280012800a00010076786c616e00"], 0x50}, 0x1, 0x0, 0x0, 0x13d33d22cca65c15}, 0x4008840) (async) r0 = socket$nl_generic(0x10, 0x3, 0x10) (async) r1 = syz_genetlink_get_family_id$ethtool(&(0x7f00000000c0), 0xffffffffffffffff) sendmsg$ETHTOOL_MSG_FEATURES_SET(r0, &(0x7f00000035c0)={0x0, 0x0, &(0x7f0000003580)={&(0x7f0000000240)={0x40, r1, 0x1, 0x0, 0x0, {}, [@ETHTOOL_A_FEATURES_HEADER={0x18, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'ip6gre0\x00'}]}, @ETHTOOL_A_FEATURES_WANTED={0x14, 0x3, 0x0, 0x1, [@ETHTOOL_A_BITSET_SIZE={0x8}, @ETHTOOL_A_BITSET_MASK={0x4}, @ETHTOOL_A_BITSET_VALUE={0x4}]}]}, 0x40}}, 0x0) (async) r2 = socket$netlink(0x10, 0x3, 0x0) sendmmsg(r2, &(0x7f00000002c0), 0x40000000000009f, 0x0) 85.287549ms ago: executing program 1 (id=4016): syz_emit_ethernet(0x2a, &(0x7f0000000100)=ANY=[@ANYBLOB="bbbbbbbbbbbb0180c200000008060001080006040002aaaaaaaaa68322ec14bbaaaaaaaaaa00ac1414aa"], 0x0) r0 = socket$packet(0x11, 0x3, 0x300) r1 = socket$inet_mptcp(0x2, 0x1, 0x106) ioctl$ifreq_SIOCGIFINDEX_batadv_mesh(r1, 0x8933, &(0x7f0000000140)={'batadv0\x00', 0x0}) sendto$packet(r0, &(0x7f0000000100)="f257a8ea7bc273dfaeab96850806", 0x2a, 0x0, &(0x7f0000000200)={0x11, 0x0, r2, 0x1, 0x0, 0x6, @link_local}, 0x14) r3 = socket$nl_route(0x10, 0x3, 0x0) r4 = socket(0x40000000015, 0x5, 0x0) setsockopt$sock_int(r4, 0x1, 0x3c, &(0x7f0000000000)=0x1, 0x4) recvmmsg(r4, &(0x7f0000003a80)=[{{0x0, 0x0, 0x0, 0x0, &(0x7f0000000780)=""/223, 0xdf}, 0x8}], 0x1, 0x20010060, 0x0) bind$x25(r4, &(0x7f0000000080), 0x12) setsockopt$inet_sctp_SCTP_PARTIAL_DELIVERY_POINT(r4, 0x84, 0x13, &(0x7f0000000040)=0x8316, 0x4) ioctl$ifreq_SIOCGIFINDEX_wireguard(r3, 0x8933, &(0x7f0000000000)={'wg1\x00'}) 0s ago: executing program 1 (id=4017): socket$nl_route(0x10, 0x3, 0x0) (async) r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000280)=ANY=[@ANYBLOB="4000000010001b1d00000000ffdbdf2500000000", @ANYRES64=r0, @ANYBLOB="0400000000000000180012730b000100697036746e6c0000080002800400130008001f0005000000"], 0x40}}, 0x0) (async) sendmsg$nl_route(r0, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000280)=ANY=[@ANYBLOB="4000000010001b1d00000000ffdbdf2500000000", @ANYRES64=r0, @ANYBLOB="0400000000000000180012730b000100697036746e6c0000080002800400130008001f0005000000"], 0x40}}, 0x0) r1 = socket$kcm(0xa, 0x2, 0x0) r2 = socket(0x2, 0x80805, 0x0) setsockopt$IP_VS_SO_SET_ADD(r2, 0x0, 0x482, &(0x7f0000000240)={0x84, @rand_addr=0x64010102, 0x4e20, 0x3, 'nq\x00', 0x0, 0x660f537f, 0x70}, 0x2c) setsockopt$IP_VS_SO_SET_ADDDEST(r2, 0x0, 0x487, 0x0, 0x0) r3 = socket$nl_route(0x10, 0x3, 0x0) r4 = socket$inet6_udp(0xa, 0x2, 0x0) socket$netlink(0x10, 0x3, 0x4) (async) r5 = socket$netlink(0x10, 0x3, 0x4) syz_emit_ethernet(0xa6, &(0x7f0000000000)={@broadcast, @empty, @void, {@ipv6={0x86dd, @icmpv6={0x0, 0x6, "120008", 0x70, 0x3a, 0xff, @remote, @mcast2, {[], @ndisc_ra={0x86, 0x0, 0x0, 0xff, 0x0, 0x0, 0x0, 0x0, [{0x0, 0xa, "a78ce54006598080a8030037004023493b87aafaffffffffffffff23732472eefa45ad96579269748e254c1e4a8a8b3f0ab0c430d3be27df3e34066d42ca0a5c15b37adac15084dbaf736b41e5af1802"}, {0x0, 0x1, "ffffffffff60000000000000"}]}}}}}}, 0x0) sendmsg$nl_route(r5, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000001140)={&(0x7f0000000140)=ANY=[@ANYBLOB="440000001000030500"/20, @ANYRES32=0x0, @ANYBLOB="0000000000000000240012800b0001006d616373656300001400028005000d000000000005000c"], 0x44}}, 0x0) ioctl$sock_SIOCGIFINDEX(r4, 0x8933, &(0x7f0000000c80)={'lo\x00'}) (async) ioctl$sock_SIOCGIFINDEX(r4, 0x8933, &(0x7f0000000c80)={'lo\x00', 0x0}) sendmsg$nl_route_sched(r3, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000340)=@newqdisc={0x44, 0x24, 0x4ee4e6a52ff56541, 0x70bd2d, 0x0, {0x0, 0x0, 0x0, r6, {0x0, 0xffe0}, {0xffff, 0xffff}, {0x10, 0x3}}, [@qdisc_kind_options=@q_gred={{0x9}, {0x14, 0x2, [@TCA_GRED_DPS={0x10, 0x3, {0x4, 0x3, 0x0, 0x1}}]}}]}, 0x44}, 0x1, 0x0, 0x0, 0x51}, 0x0) bpf$PROG_LOAD_XDP(0x5, &(0x7f00000001c0)={0x10, 0x4, &(0x7f0000001300)=ANY=[@ANYBLOB="1800000000000000000000000000000071103500000000009500000000000000"], &(0x7f0000000040)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x9}, 0x80) (async) bpf$PROG_LOAD_XDP(0x5, &(0x7f00000001c0)={0x10, 0x4, &(0x7f0000001300)=ANY=[@ANYBLOB="1800000000000000000000000000000071103500000000009500000000000000"], &(0x7f0000000040)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x9}, 0x80) sendmsg$nl_route_sched(r3, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000140)={&(0x7f00000003c0)=@newqdisc={0x138, 0x24, 0xd0f, 0x200003, 0x0, {0x60, 0x0, 0x0, r6, {0x0, 0xffe0}, {0xffff, 0xffff}, {0xfff3, 0xfff3}}, [@qdisc_kind_options=@q_gred={{0x9}, {0x108, 0x2, [@TCA_GRED_STAB={0x104, 0x2, "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"}]}}]}, 0x138}, 0x1, 0x0, 0x0, 0x240400d0}, 0x24008004) sendmsg$sock(r1, &(0x7f0000000400)={&(0x7f0000000580)=@in6={0x2, 0x4e20, 0x0, @dev={0xfe, 0x80, '\x00', 0xfd}}, 0x80, 0x0, 0x0, &(0x7f0000000000)=[@mark={{0x14, 0x1, 0x24, 0x3}}], 0x18}, 0x0) kernel console output (not intermixed with test programs): 891'. [ 307.884399][T16510] netlink: 'syz.5.2893': attribute type 2 has an invalid length. [ 307.909798][T16510] netlink: 'syz.5.2893': attribute type 2 has an invalid length. [ 308.059016][ T5642] Bluetooth: hci1: command tx timeout [ 308.077436][T16517] netlink: 'syz.4.2895': attribute type 83 has an invalid length. [ 308.344802][T16528] macsec1: entered promiscuous mode [ 308.604226][T16544] netlink: 'syz.5.2904': attribute type 2 has an invalid length. [ 308.714777][T16454] bridge0: port 1(bridge_slave_0) entered blocking state [ 308.722737][T16454] bridge0: port 1(bridge_slave_0) entered disabled state [ 308.736161][T16454] bridge_slave_0: entered allmulticast mode [ 308.746103][T16454] bridge_slave_0: entered promiscuous mode [ 308.764084][T16454] bridge0: port 2(bridge_slave_1) entered blocking state [ 308.774271][T16454] bridge0: port 2(bridge_slave_1) entered disabled state [ 308.797171][T16454] bridge_slave_1: entered allmulticast mode [ 308.811242][T16454] bridge_slave_1: entered promiscuous mode [ 308.912094][T16454] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 308.925913][T16454] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 308.978910][T16557] veth1_macvtap: left promiscuous mode [ 309.072461][T16454] team0: Port device team_slave_0 added [ 309.131729][T16454] team0: Port device team_slave_1 added [ 309.196459][T16454] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 309.228651][T16454] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 309.302893][T16454] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 309.349303][T16454] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 309.370752][T16454] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 309.454026][T16454] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 309.499618][T16581] __nla_validate_parse: 4 callbacks suppressed [ 309.499638][T16581] netlink: 260 bytes leftover after parsing attributes in process `syz.2.2917'. [ 309.511546][T16585] openvswitch: netlink: IP tunnel attribute has 40 unknown bytes. [ 309.523074][T16584] netlink: 12 bytes leftover after parsing attributes in process `syz.0.2916'. [ 309.643460][T16454] hsr_slave_0: entered promiscuous mode [ 309.667458][T16454] hsr_slave_1: entered promiscuous mode [ 309.691444][T16454] debugfs: 'hsr0' already exists in 'hsr' [ 309.712728][T16454] Cannot create hsr debugfs directory [ 309.800076][T16592] netlink: 20 bytes leftover after parsing attributes in process `syz.2.2920'. [ 309.818325][T16592] tipc: Invalid UDP bearer configuration [ 309.818382][T16592] tipc: Enabling of bearer rejected, failed to enable media [ 310.142800][ T5642] Bluetooth: hci1: command tx timeout [ 310.153996][T16618] netlink: 4 bytes leftover after parsing attributes in process `syz.0.2926'. [ 310.178412][T16618] openvswitch: netlink: nsh attribute has 4 unknown bytes. [ 310.201985][T16622] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 310.344415][T16630] syz.2.2930: vmalloc error: size 8589938688, exceeds total pages, mode:0xdc0(GFP_KERNEL|__GFP_ZERO), nodemask=(null),cpuset=/,mems_allowed=0-1 [ 310.368870][T16630] CPU: 1 UID: 0 PID: 16630 Comm: syz.2.2930 Not tainted syzkaller #0 PREEMPT(full) [ 310.368899][T16630] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 04/18/2026 [ 310.368926][T16630] Call Trace: [ 310.368934][T16630] [ 310.368947][T16630] dump_stack_lvl+0xe8/0x150 [ 310.368977][T16630] warn_alloc+0x249/0x340 [ 310.369007][T16630] ? stack_trace_save+0xa9/0x100 [ 310.369040][T16630] ? __pfx_warn_alloc+0x10/0x10 [ 310.369076][T16630] ? kasan_save_track+0x4f/0x80 [ 310.369101][T16630] ? kasan_save_track+0x3e/0x80 [ 310.369126][T16630] ? __kasan_kmalloc+0x93/0xb0 [ 310.369152][T16630] ? __kmalloc_cache_noprof+0x31c/0x660 [ 310.369178][T16630] ? xskq_create+0x56/0x170 [ 310.369203][T16630] ? xsk_setsockopt+0x54c/0x990 [ 310.369224][T16630] ? do_sock_setsockopt+0x17c/0x1b0 [ 310.369250][T16630] ? __x64_sys_setsockopt+0x13d/0x1b0 [ 310.369275][T16630] ? do_syscall_64+0x15f/0xf80 [ 310.369308][T16630] __vmalloc_node_range_noprof+0x132/0x1750 [ 310.369368][T16630] ? __pfx___vmalloc_node_range_noprof+0x10/0x10 [ 310.369404][T16630] ? __kasan_kmalloc+0x93/0xb0 [ 310.369437][T16630] vmalloc_user_noprof+0xad/0xe0 [ 310.369466][T16630] ? xskq_create+0xbf/0x170 [ 310.369491][T16630] xskq_create+0xbf/0x170 [ 310.369520][T16630] xsk_init_queue+0x8a/0xe0 [ 310.369547][T16630] xsk_setsockopt+0x54c/0x990 [ 310.369574][T16630] ? __pfx_xsk_setsockopt+0x10/0x10 [ 310.369597][T16630] ? __pfx_aa_sk_perm+0x10/0x10 [ 310.369626][T16630] ? aa_sock_opt_perm+0xff/0x1a0 [ 310.369656][T16630] ? bpf_lsm_socket_setsockopt+0x9/0x20 [ 310.369691][T16630] ? __pfx_xsk_setsockopt+0x10/0x10 [ 310.369716][T16630] do_sock_setsockopt+0x17c/0x1b0 [ 310.369749][T16630] __x64_sys_setsockopt+0x13d/0x1b0 [ 310.369779][T16630] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 310.369802][T16630] do_syscall_64+0x15f/0xf80 [ 310.369829][T16630] ? trace_irq_disable+0x3b/0x140 [ 310.369858][T16630] ? clear_bhb_loop+0x40/0x90 [ 310.369883][T16630] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 310.369903][T16630] RIP: 0033:0x7f4bfd59cdd9 [ 310.369923][T16630] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 310.369941][T16630] RSP: 002b:00007f4bfe454028 EFLAGS: 00000246 ORIG_RAX: 0000000000000036 [ 310.369963][T16630] RAX: ffffffffffffffda RBX: 00007f4bfd815fa0 RCX: 00007f4bfd59cdd9 [ 310.369978][T16630] RDX: 0000000000000006 RSI: 000000000000011b RDI: 0000000000000003 [ 310.369991][T16630] RBP: 00007f4bfd632d69 R08: 0000000000000004 R09: 0000000000000000 [ 310.370004][T16630] R10: 0000200000000000 R11: 0000000000000246 R12: 0000000000000000 [ 310.370017][T16630] R13: 00007f4bfd816038 R14: 00007f4bfd815fa0 R15: 00007ffe467db5e8 [ 310.370050][T16630] [ 310.370141][T16630] Mem-Info: [ 310.682771][T16630] active_anon:6569 inactive_anon:0 isolated_anon:0 [ 310.682771][T16630] active_file:3018 inactive_file:40052 isolated_file:0 [ 310.682771][T16630] unevictable:768 dirty:60 writeback:0 [ 310.682771][T16630] slab_reclaimable:11449 slab_unreclaimable:114573 [ 310.682771][T16630] mapped:35573 shmem:1297 pagetables:1368 [ 310.682771][T16630] sec_pagetables:0 bounce:0 [ 310.682771][T16630] kernel_misc_reclaimable:0 [ 310.682771][T16630] free:1295790 free_pcp:10419 free_cma:0 [ 310.728366][T16630] Node 0 active_anon:26176kB inactive_anon:0kB active_file:12072kB inactive_file:160004kB unevictable:1536kB isolated(anon):0kB isolated(file):0kB mapped:142292kB dirty:236kB writeback:0kB shmem:3652kB shmem_thp:0kB shmem_pmdmapped:0kB anon_thp:0kB kernel_stack:15044kB pagetables:5224kB sec_pagetables:0kB all_unreclaimable? no Balloon:0kB gpu_active:0kB gpu_reclaim:0kB [ 310.775202][T16630] Node 1 active_anon:0kB inactive_anon:0kB active_file:0kB inactive_file:204kB unevictable:1536kB isolated(anon):0kB isolated(file):0kB mapped:0kB dirty:4kB writeback:0kB shmem:1536kB shmem_thp:0kB shmem_pmdmapped:0kB anon_thp:0kB kernel_stack:32kB pagetables:148kB sec_pagetables:0kB all_unreclaimable? no Balloon:0kB gpu_active:0kB gpu_reclaim:0kB [ 310.830673][T16630] Node 0 DMA free:15360kB boost:0kB min:208kB low:260kB high:312kB reserved_highatomic:0KB free_highatomic:0KB active_anon:0kB inactive_anon:0kB active_file:0kB inactive_file:0kB unevictable:0kB writepending:0kB zspages:0kB present:15992kB managed:15360kB mlocked:0kB bounce:0kB free_pcp:0kB local_pcp:0kB free_cma:0kB [ 310.859783][T16454] netdevsim netdevsim1 eth3 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 310.863689][T16630] lowmem_reserve[]: 0 2492 2493 2493 2493 [ 310.890901][T16454] netdevsim netdevsim1 eth3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 310.893612][T16630] Node 0 DMA32 free:1228840kB boost:0kB min:34188kB low:42732kB high:51276kB reserved_highatomic:0KB free_highatomic:0KB active_anon:26212kB inactive_anon:0kB active_file:12072kB inactive_file:160004kB unevictable:1536kB writepending:244kB zspages:0kB present:3129332kB managed:2552620kB mlocked:0kB bounce:0kB free_pcp:41852kB local_pcp:20864kB free_cma:0kB [ 310.951534][T16630] lowmem_reserve[]: 0 0 0 0 0 [ 310.956906][T16630] Node 0 Normal free:0kB boost:0kB min:8kB low:8kB high:8kB reserved_highatomic:0KB free_highatomic:0KB active_anon:0kB inactive_anon:0kB active_file:0kB inactive_file:0kB unevictable:0kB writepending:0kB zspages:0kB present:1048580kB managed:668kB mlocked:0kB bounce:0kB free_pcp:4kB local_pcp:0kB free_cma:0kB [ 310.986597][T16630] lowmem_reserve[]: 0 0 0 0 0 [ 311.019016][T16630] Node 1 Normal free:3938448kB boost:0kB min:55704kB low:69628kB high:83552kB reserved_highatomic:0KB free_highatomic:0KB active_anon:0kB inactive_anon:0kB active_file:0kB inactive_file:204kB unevictable:1536kB writepending:4kB zspages:0kB present:4194300kB managed:4111100kB mlocked:0kB bounce:0kB free_pcp:500kB local_pcp:500kB free_cma:0kB [ 311.052012][T16630] lowmem_reserve[]: 0 0 0 0 0 [ 311.056820][T16630] Node 0 DMA: 0*4kB 0*8kB 0*16kB 0*32kB 0*64kB 0*128kB 0*256kB 0*512kB 1*1024kB (U) 1*2048kB (M) 3*4096kB (M) = 15360kB [ 311.057214][T16643] veth7: entered allmulticast mode [ 311.071132][T16630] Node 0 DMA32: 3376*4kB (UME) 4251*8kB (UME) 1365*16kB (UM) 328*32kB (UME) 125*64kB (UME) 58*128kB (UM) 90*256kB (UME) 88*512kB (UM) 54*1024kB (UM) 19*2048kB (UME) 237*4096kB (UM) = 1228328kB [ 311.161189][T16630] Node 0 Normal: 0*4kB 0*8kB 0*16kB 0*32kB 0*64kB 0*128kB 0*256kB 0*512kB 0*1024kB 0*2048kB 0*4096kB = 0kB [ 311.191259][T16630] Node 1 Normal: 0*4kB 2*8kB (UM) 2*16kB (UM) 1*32kB (M) 1*64kB (M) 2*128kB (UM) 3*256kB (UM) 2*512kB (M) 2*1024kB (UM) 1*2048kB (U) 960*4096kB (UM) = 3938448kB [ 311.241987][T16454] netdevsim netdevsim1 eth2 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 311.249906][T16654] netlink: 27 bytes leftover after parsing attributes in process `syz.5.2937'. [ 311.256548][T16630] Node 0 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=1048576kB [ 311.271409][T16454] netdevsim netdevsim1 eth2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 311.282562][T16630] Node 0 hugepages_total=2 hugepages_free=2 hugepages_surp=0 hugepages_size=2048kB [ 311.320704][T16630] Node 1 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=1048576kB [ 311.334111][T16630] Node 1 hugepages_total=2 hugepages_free=2 hugepages_surp=0 hugepages_size=2048kB [ 311.352715][T16630] 44363 total pagecache pages [ 311.357465][T16630] 0 pages in swap cache [ 311.365713][T16630] Free swap = 124996kB [ 311.378279][T16630] Total swap = 124996kB [ 311.388819][T16630] 2097051 pages RAM [ 311.399557][T16630] 0 pages HighMem/MovableOnly [ 311.422879][T16630] 427114 pages reserved [ 311.437597][T16454] netdevsim netdevsim1 eth1 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 311.442511][T16630] 0 pages cma reserved [ 311.459000][T16454] netdevsim netdevsim1 eth1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 311.618839][T16673] xt_hashlimit: size too large, truncated to 1048576 [ 311.687298][T16454] netdevsim netdevsim1 eth0 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 311.706349][T16454] netdevsim netdevsim1 eth0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 312.218195][ T5642] Bluetooth: hci1: command tx timeout [ 312.283250][T16454] netdevsim netdevsim1 netdevsim0: renamed from eth0 [ 312.312295][T16454] 8021q: adding VLAN 0 to HW filter on device netdevsim0 [ 312.321668][T16702] 8021q: VLANs not supported on ip6_vti0 [ 312.339796][T16454] netdevsim netdevsim1 netdevsim1: renamed from eth1 [ 312.371059][T16454] 8021q: adding VLAN 0 to HW filter on device netdevsim1 [ 312.452693][T16707] netlink: 8 bytes leftover after parsing attributes in process `syz.5.2951'. [ 312.466793][T16454] netdevsim netdevsim1 netdevsim2: renamed from eth2 [ 312.493592][T16454] 8021q: adding VLAN 0 to HW filter on device netdevsim2 [ 312.506417][T16454] netdevsim netdevsim1 netdevsim3: renamed from eth3 [ 312.528735][T16454] 8021q: adding VLAN 0 to HW filter on device netdevsim3 [ 312.740109][T16454] 8021q: adding VLAN 0 to HW filter on device bond0 [ 312.811422][T16454] 8021q: adding VLAN 0 to HW filter on device team0 [ 312.829771][ T8524] bridge0: port 1(bridge_slave_0) entered blocking state [ 312.836985][ T8524] bridge0: port 1(bridge_slave_0) entered forwarding state [ 312.888140][ T8524] bridge0: port 2(bridge_slave_1) entered blocking state [ 312.895363][ T8524] bridge0: port 2(bridge_slave_1) entered forwarding state [ 313.173490][T16760] netlink: 8 bytes leftover after parsing attributes in process `syz.2.2964'. [ 313.711186][T16454] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 313.827243][T16454] veth0_vlan: entered promiscuous mode [ 313.860543][T16454] veth1_vlan: entered promiscuous mode [ 313.949573][T16454] veth0_macvtap: entered promiscuous mode [ 313.989570][ T2214] block nbd1: Possible stuck request ffff888026f50000: control (read@0,1024B). Runtime 180 seconds [ 313.991647][T16454] veth1_macvtap: entered promiscuous mode [ 314.001314][ T2214] block nbd1: Possible stuck request ffff888026f501c0: control (read@1024,1024B). Runtime 180 seconds [ 314.018172][ T2214] block nbd1: Possible stuck request ffff888026f50380: control (read@2048,1024B). Runtime 180 seconds [ 314.029406][ T2214] block nbd1: Possible stuck request ffff888026f50540: control (read@3072,1024B). Runtime 180 seconds [ 314.056052][T16454] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 314.084026][T16454] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 314.105456][ T3303] netdevsim netdevsim1 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 314.115870][ T3303] netdevsim netdevsim1 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 314.148192][ T3303] netdevsim netdevsim1 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 314.167258][ T3303] netdevsim netdevsim1 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 314.308073][ T5642] Bluetooth: hci1: command tx timeout [ 314.428082][ T3303] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 314.458818][ T3303] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 314.509110][ T57] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 314.517399][ T57] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 314.575320][T16809] tipc: Resetting bearer [ 314.714730][T16817] netlink: 8 bytes leftover after parsing attributes in process `syz.1.2878'. [ 314.953687][T16825] lo speed is unknown, defaulting to 1000 [ 315.061388][T16827] bridge3: entered promiscuous mode [ 315.106739][T16827] bridge3: entered allmulticast mode [ 315.412450][ T50] Bluetooth: hci3: unexpected cc 0x0c03 length: 249 > 1 [ 315.432021][ T50] Bluetooth: hci3: unexpected cc 0x1003 length: 249 > 9 [ 315.436801][ T30] audit: type=1804 audit(1778603946.581:11): pid=16849 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=invalid_pcr cause=open_writers comm="syz.5.2981" name="/newroot/124/cgroup.controllers" dev="tmpfs" ino=649 res=1 errno=0 [ 315.464692][ T50] Bluetooth: hci3: unexpected cc 0x1001 length: 249 > 9 [ 315.492252][ T50] Bluetooth: hci3: unexpected cc 0x0c23 length: 249 > 4 [ 315.501698][ T50] Bluetooth: hci3: unexpected cc 0x0c38 length: 249 > 2 [ 315.547589][ T30] audit: type=1800 audit(1778603946.581:12): pid=16849 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.5.2981" name="cgroup.controllers" dev="tmpfs" ino=649 res=0 errno=0 [ 315.843648][T16863] netlink: 4 bytes leftover after parsing attributes in process `syz.1.2984'. [ 315.907198][T16863] hsr_slave_1 (unregistering): left promiscuous mode [ 315.971971][T16869] netlink: 8 bytes leftover after parsing attributes in process `syz.5.2986'. [ 315.984201][T16869] netlink: 8 bytes leftover after parsing attributes in process `syz.5.2986'. [ 316.367486][T16844] lo speed is unknown, defaulting to 1000 [ 316.379665][ T5642] Bluetooth: hci1: command tx timeout [ 316.573579][T16884] syzkaller0: entered promiscuous mode [ 316.585260][T16895] netlink: 'syz.5.2993': attribute type 64 has an invalid length. [ 316.595115][T16884] syzkaller0: entered allmulticast mode [ 316.597792][T16895] netlink: 5 bytes leftover after parsing attributes in process `syz.5.2993'. [ 316.736430][T16897] netlink: 48 bytes leftover after parsing attributes in process `syz.5.2994'. [ 317.194878][ T1312] ieee802154 phy0 wpan0: encryption failed: -22 [ 317.203049][ T1312] ieee802154 phy1 wpan1: encryption failed: -22 [ 317.585439][ T5642] Bluetooth: hci3: command tx timeout [ 319.443431][T16904] netlink: 20 bytes leftover after parsing attributes in process `syz.5.2996'. [ 319.534298][T16909] netlink: 'syz.4.2997': attribute type 1 has an invalid length. [ 319.548632][T16909] netlink: 16 bytes leftover after parsing attributes in process `syz.4.2997'. [ 319.561430][ T8528] netdevsim netdevsim2 netdevsim3 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 319.573555][ T8528] netdevsim netdevsim2 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 319.659116][ T5642] Bluetooth: hci3: command tx timeout [ 319.843328][T16922] netlink: 212348 bytes leftover after parsing attributes in process `syz.4.3001'. [ 319.853695][T16922] netlink: Unknown conntrack attr (0) [ 319.944142][ T8528] netdevsim netdevsim2 netdevsim2 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 319.955244][ T8528] netdevsim netdevsim2 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 320.112577][T16931] netlink: 28 bytes leftover after parsing attributes in process `syz.5.3003'. [ 320.124219][ T8528] netdevsim netdevsim2 netdevsim1 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 320.161784][ T8528] netdevsim netdevsim2 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 320.270482][T16936] : entered promiscuous mode [ 320.390415][ T8528] netdevsim netdevsim2 netdevsim0 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 320.407340][ T8528] netdevsim netdevsim2 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 320.501022][T16941] netlink: 12 bytes leftover after parsing attributes in process `syz.5.3007'. [ 320.997546][T16972] block nbd0: Unsupported socket: should be TCP or UNIX. [ 321.063526][T16844] bridge0: port 1(bridge_slave_0) entered blocking state [ 321.080821][T16844] bridge0: port 1(bridge_slave_0) entered disabled state [ 321.121845][T16844] bridge_slave_0: entered allmulticast mode [ 321.143691][T16844] bridge_slave_0: entered promiscuous mode [ 321.291946][T16984] netlink: 12 bytes leftover after parsing attributes in process `syz.4.3016'. [ 321.582791][ T8528] bond1 (unregistering): (slave ip6gre1): Releasing backup interface [ 321.738353][ T50] Bluetooth: hci3: command tx timeout [ 321.804952][ T8528] batman_adv: batadv0: Removing interface: gretap3 [ 321.834079][ T8528] bond13 (unregistering): (slave gretap4): Releasing backup interface [ 321.876867][ T8528] bond10 (unregistering): (slave geneve3): Releasing active interface [ 321.919990][ T8528] bond4 (unregistering): (slave bridge1): Releasing backup interface [ 321.933115][ T8528] bridge1 (unregistering): left promiscuous mode [ 321.981502][ T8528] bond5 (unregistering): (slave bridge2): Releasing active interface [ 321.989680][ T8528] bond5 (unregistering): (slave bridge2): the permanent HWaddr of slave - 7a:50:ac:5e:b6:65 - is still in use by bond - set the HWaddr of slave to a different address to avoid conflicts [ 322.051384][ T8528] bond5 (unregistering): (slave bridge3): Releasing active interface [ 322.271632][ T8528]  (unregistering): Released all slaves [ 322.282996][ T8528] bond1 (unregistering): Released all slaves [ 322.297306][ T8528] bond2 (unregistering): Released all slaves [ 322.321462][ T8528] bond3 (unregistering): Released all slaves [ 322.335308][ T8528] bond4 (unregistering): Released all slaves [ 322.355167][ T8528] bond5 (unregistering): Released all slaves [ 322.374494][ T8528] bond6 (unregistering): Released all slaves [ 322.388675][ T8528] bond7 (unregistering): Released all slaves [ 322.403459][ T8528] bond8 (unregistering): Released all slaves [ 322.417207][ T8528] bond9 (unregistering): Released all slaves [ 322.441667][ T8528] bond10 (unregistering): Released all slaves [ 322.472948][ T8528] bond0 (unregistering): Released all slaves [ 322.486310][ T8528] bond11 (unregistering): Released all slaves [ 322.510275][ T8528] bond12 (unregistering): Released all slaves [ 322.524957][ T8528] bond13 (unregistering): (slave bond14): Releasing backup interface [ 322.536469][ T8528] bond13 (unregistering): Released all slaves [ 322.555381][ T8528] bond14 (unregistering): Released all slaves [ 322.573263][ T8528] bond15 (unregistering): Released all slaves [ 322.586136][T16844] bridge0: port 2(bridge_slave_1) entered blocking state [ 322.593483][T16844] bridge0: port 2(bridge_slave_1) entered disabled state [ 322.604181][T16844] bridge_slave_1: entered allmulticast mode [ 322.615423][T16844] bridge_slave_1: entered promiscuous mode [ 322.755446][T16984] xfrm2: entered promiscuous mode [ 322.797195][T16984] xfrm2: entered allmulticast mode [ 322.820130][ T5291] 8021q: adding VLAN 0 to HW filter on device eth1 [ 322.859135][T17002] netlink: 156 bytes leftover after parsing attributes in process `syz.1.3017'. [ 322.864344][T17003] netlink: 156 bytes leftover after parsing attributes in process `syz.1.3017'. [ 322.889423][T17003] openvswitch: netlink: Message has 4096 unknown bytes. [ 322.944304][T17002] openvswitch: netlink: Message has 4096 unknown bytes. [ 322.984185][T16844] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 323.001978][ T8528] tipc: Disabling bearer [ 323.023597][ T8528] tipc: Left network mode [ 323.108654][T16844] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 323.151936][T16844] team0: Port device team_slave_0 added [ 323.162527][T16844] team0: Port device team_slave_1 added [ 323.197546][T16844] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 323.204744][T16844] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 323.243575][T16844] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 323.336436][T16844] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 323.386081][T16844] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 323.434038][T16844] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 323.697474][T16844] hsr_slave_0: entered promiscuous mode [ 323.722611][T16844] hsr_slave_1: entered promiscuous mode [ 323.749645][T16844] debugfs: 'hsr0' already exists in 'hsr' [ 323.755457][T16844] Cannot create hsr debugfs directory [ 323.816533][T17039] netlink: 32 bytes leftover after parsing attributes in process `syz.1.3024'. [ 323.827107][ T50] Bluetooth: hci3: command tx timeout [ 324.140210][T17049] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 324.356562][T17053] netlink: 'syz.4.3029': attribute type 1 has an invalid length. [ 324.420712][ T5291] 8021q: adding VLAN 0 to HW filter on device eth2 [ 325.065474][T17084] netlink: 'syz.1.3033': attribute type 1 has an invalid length. [ 325.166761][T17091] openvswitch: netlink: IP tunnel dst address not specified [ 325.292842][T17084] 8021q: adding VLAN 0 to HW filter on device bond1 [ 325.373689][T17088] netlink: 65047 bytes leftover after parsing attributes in process `syz.5.3035'. [ 325.528648][T17095] xt_ecn: cannot match TCP bits for non-tcp packets [ 325.554632][T17102] netlink: 40 bytes leftover after parsing attributes in process `syz.1.3036'. [ 325.651728][T17091] syzkaller0: entered promiscuous mode [ 325.665351][T17091] syzkaller0: entered allmulticast mode [ 325.692983][ T8528] hsr_slave_0: left promiscuous mode [ 325.699801][ T8528] hsr_slave_1: left promiscuous mode [ 325.718648][ T8528] veth1_macvtap: left promiscuous mode [ 325.724374][ T8528] veth0_macvtap: left promiscuous mode [ 325.791217][ T8528] pim6reg (unregistering): left allmulticast mode [ 325.976248][ T8524] smc: removing ib device syz1 [ 326.206994][T17110] netlink: 12 bytes leftover after parsing attributes in process `syz.1.3038'. [ 326.232388][T17110] netlink: 'syz.1.3038': attribute type 2 has an invalid length. [ 326.253439][T17110] netlink: 'syz.1.3038': attribute type 2 has an invalid length. [ 326.263375][T17110] netlink: 'syz.1.3038': attribute type 2 has an invalid length. [ 326.329796][T17115] netlink: 48 bytes leftover after parsing attributes in process `syz.1.3038'. [ 327.445507][ T5642] Bluetooth: hci4: unexpected cc 0x0c03 length: 249 > 1 [ 327.486355][ T5642] Bluetooth: hci4: unexpected cc 0x1003 length: 249 > 9 [ 327.501912][ T5642] Bluetooth: hci4: unexpected cc 0x1001 length: 249 > 9 [ 327.535808][ T5642] Bluetooth: hci4: unexpected cc 0x0c23 length: 249 > 4 [ 327.552271][ T5642] Bluetooth: hci4: unexpected cc 0x0c38 length: 249 > 2 [ 329.426940][T15086] syz1: Port: 1 Link DOWN [ 329.462880][T17110] netlink: 28 bytes leftover after parsing attributes in process `syz.1.3038'. [ 329.500048][T17110] netlink: 28 bytes leftover after parsing attributes in process `syz.1.3038'. [ 329.669629][ T50] Bluetooth: hci4: command tx timeout [ 329.680489][T17128] netlink: 60 bytes leftover after parsing attributes in process `syz.4.3041'. [ 329.710420][ T8524] smbdirect: ib_dev[syz1] removed [ 330.296804][T17152] xt_hashlimit: size too large, truncated to 1048576 [ 330.436750][T17160] xt_hashlimit: size too large, truncated to 1048576 [ 330.452903][T17163] netlink: 4 bytes leftover after parsing attributes in process `syz.4.3047'. [ 330.606697][T17158] veth1_macvtap: entered allmulticast mode [ 331.062229][T17163] veth1_macvtap (unregistering): left allmulticast mode [ 331.227075][T17187] netlink: 12 bytes leftover after parsing attributes in process `syz.5.3050'. [ 331.241312][T17187] netlink: 56 bytes leftover after parsing attributes in process `syz.5.3050'. [ 331.251133][T17187] netlink: 8 bytes leftover after parsing attributes in process `syz.5.3050'. [ 331.642068][T17192] netlink: 'syz.1.3051': attribute type 4 has an invalid length. [ 331.677121][T17196] netlink: 'syz.5.3052': attribute type 1 has an invalid length. [ 331.693100][T16844] netdevsim netdevsim2 netdevsim0: renamed from eth0 [ 331.721153][T16844] 8021q: adding VLAN 0 to HW filter on device netdevsim0 [ 331.753441][ T50] Bluetooth: hci4: command tx timeout [ 331.772019][T17197] netlink: 28 bytes leftover after parsing attributes in process `syz.5.3052'. [ 331.900957][ T2214] block nbd2: Possible stuck request ffff888026fc0000: control (read@0,1024B). Runtime 120 seconds [ 331.911903][ T2214] block nbd2: Possible stuck request ffff888026fc01c0: control (read@1024,1024B). Runtime 120 seconds [ 331.923098][ T2214] block nbd2: Possible stuck request ffff888026fc0380: control (read@2048,1024B). Runtime 120 seconds [ 331.937349][ T2214] block nbd2: Possible stuck request ffff888026fc0540: control (read@3072,1024B). Runtime 120 seconds [ 332.093898][T17196] bond2: entered promiscuous mode [ 332.101185][T17196] 8021q: adding VLAN 0 to HW filter on device bond2 [ 332.123915][T17119] lo speed is unknown, defaulting to 1000 [ 332.129750][T16844] netdevsim netdevsim2 netdevsim1: renamed from eth1 [ 332.155575][T17222] netlink: 4 bytes leftover after parsing attributes in process `syz.4.3055'. [ 332.177580][T16844] 8021q: adding VLAN 0 to HW filter on device netdevsim1 [ 332.196678][T16844] netdevsim netdevsim2 netdevsim2: renamed from eth2 [ 332.229341][T16844] 8021q: adding VLAN 0 to HW filter on device netdevsim2 [ 332.249082][T17197] bond2: entered allmulticast mode [ 332.619091][T17222] team1: entered promiscuous mode [ 332.624408][T17222] team1: entered allmulticast mode [ 332.644697][T16844] netdevsim netdevsim2 netdevsim3: renamed from eth3 [ 332.686729][T16844] 8021q: adding VLAN 0 to HW filter on device netdevsim3 [ 333.069218][T17252] nbd0: detected capacity change from 0 to 127 [ 333.180404][T17253] syzkaller1: entered promiscuous mode [ 333.197340][T17253] syzkaller1: entered allmulticast mode [ 333.225402][ T50] block nbd0: Receive control failed (result -104) [ 333.817953][ T50] Bluetooth: hci4: command tx timeout [ 333.884746][T17287] netlink: 16 bytes leftover after parsing attributes in process `syz.1.3069'. [ 334.051795][T17291] ieee802154 phy0 wpan0: encryption failed: -22 [ 334.127326][T17287] ip6erspan1: entered allmulticast mode [ 334.180667][T17284] netdevsim netdevsim4 eth3 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 334.203380][T17284] netdevsim netdevsim4 eth3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 334.356392][T17295] syzkaller1: entered promiscuous mode [ 334.381053][T17295] syzkaller1: entered allmulticast mode [ 334.548425][T17284] netdevsim netdevsim4 eth2 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 334.573017][T17284] netdevsim netdevsim4 eth2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 334.907059][T17284] netdevsim netdevsim4 eth1 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 334.924895][T17284] netdevsim netdevsim4 eth1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 334.960605][ T8528] IPVS: stop unused estimator thread 0... [ 335.073086][T16844] 8021q: adding VLAN 0 to HW filter on device bond0 [ 335.117422][T17284] netdevsim netdevsim4 eth0 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 335.147841][T17284] netdevsim netdevsim4 eth0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 335.190617][T17119] bridge0: port 1(bridge_slave_0) entered blocking state [ 335.216316][T17336] netlink: 44 bytes leftover after parsing attributes in process `syz.1.3076'. [ 335.227133][T17119] bridge0: port 1(bridge_slave_0) entered disabled state [ 335.236043][T17119] bridge_slave_0: entered allmulticast mode [ 335.243641][T17336] netlink: 35 bytes leftover after parsing attributes in process `syz.1.3076'. [ 335.256477][T17119] bridge_slave_0: entered promiscuous mode [ 335.277127][T17119] bridge0: port 2(bridge_slave_1) entered blocking state [ 335.285843][T17336] netlink: 'syz.1.3076': attribute type 5 has an invalid length. [ 335.294205][T17119] bridge0: port 2(bridge_slave_1) entered disabled state [ 335.302636][T17336] netlink: 'syz.1.3076': attribute type 6 has an invalid length. [ 335.311389][T17119] bridge_slave_1: entered allmulticast mode [ 335.319042][T17336] netlink: 35 bytes leftover after parsing attributes in process `syz.1.3076'. [ 335.329390][T17119] bridge_slave_1: entered promiscuous mode [ 335.368503][T16844] 8021q: adding VLAN 0 to HW filter on device team0 [ 335.425078][T17119] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 335.473504][T17119] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 335.520661][ T8528] bridge0: port 1(bridge_slave_0) entered blocking state [ 335.527890][ T8528] bridge0: port 1(bridge_slave_0) entered forwarding state [ 335.604538][ T8524] netdevsim netdevsim4 eth0: set [0, 0] type 1 family 0 port 8472 - 0 [ 335.623647][ T8524] netdevsim netdevsim4 eth0: set [1, 0] type 2 family 0 port 6081 - 0 [ 335.650626][ T8530] bridge0: port 2(bridge_slave_1) entered blocking state [ 335.657890][ T8530] bridge0: port 2(bridge_slave_1) entered forwarding state [ 335.774662][ T8528] netdevsim netdevsim4 eth1: set [0, 0] type 1 family 0 port 8472 - 0 [ 335.790402][ T8528] netdevsim netdevsim4 eth1: set [1, 0] type 2 family 0 port 6081 - 0 [ 335.808579][T17119] team0: Port device team_slave_0 added [ 335.829725][T17119] team0: Port device team_slave_1 added [ 335.914698][ T50] Bluetooth: hci4: command tx timeout [ 335.946474][ T8530] netdevsim netdevsim4 eth2: set [0, 0] type 1 family 0 port 8472 - 0 [ 335.958606][ T8530] netdevsim netdevsim4 eth2: set [1, 0] type 2 family 0 port 6081 - 0 [ 335.991191][T17119] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 336.007874][T17119] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 336.069392][T17119] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 336.076295][T17367] x_tables: ip6_tables: icmp6 match: only valid for protocol 58 [ 336.096566][T17119] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 336.118989][T17119] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 336.151791][T17119] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 336.167458][T17367] bridge0: port 2(bridge_slave_1) entered disabled state [ 336.178664][T17367] bridge0: port 1(bridge_slave_0) entered disabled state [ 336.205217][ T8524] netdevsim netdevsim4 eth3: set [0, 0] type 1 family 0 port 8472 - 0 [ 336.222055][ T8524] netdevsim netdevsim4 eth3: set [1, 0] type 2 family 0 port 6081 - 0 [ 336.362857][T17119] hsr_slave_0: entered promiscuous mode [ 336.380406][T17119] hsr_slave_1: entered promiscuous mode [ 336.486888][T17383] netlink: 12 bytes leftover after parsing attributes in process `syz.5.3085'. [ 336.565898][T17380] bond3 (unregistering): Released all slaves [ 336.930677][ T1230] IPVS: starting estimator thread 0... [ 337.003506][T17416] IPVS: sh: FWM 3 0x00000003 - no destination available [ 337.029172][T17412] IPVS: using max 31 ests per chain, 74400 per kthread [ 337.261325][T17423] syzkaller0: entered promiscuous mode [ 337.281785][T17423] syzkaller0: entered allmulticast mode [ 337.335909][T17423] tipc: Started in network mode [ 337.357080][T17423] tipc: Node identity 1e4b0d21980b, cluster identity 4711 [ 337.365121][T17423] tipc: Enabled bearer , priority 0 [ 337.385872][T17423] tipc: Resetting bearer [ 337.401467][T17423] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 337.410686][T17423] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 337.483283][T17422] tipc: Resetting bearer [ 337.524861][T17422] tipc: Disabling bearer [ 337.724744][T17441] netlink: 8 bytes leftover after parsing attributes in process `syz.4.3094'. [ 337.912796][T17119] netdevsim netdevsim6 netdevsim0: renamed from eth0 [ 337.954665][T17119] 8021q: adding VLAN 0 to HW filter on device netdevsim0 [ 337.978600][T17119] netdevsim netdevsim6 netdevsim1: renamed from eth1 [ 337.989329][T17453] siw: device registration error -23 [ 338.010948][T17119] 8021q: adding VLAN 0 to HW filter on device netdevsim1 [ 338.041039][T16844] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 338.077001][T17119] netdevsim netdevsim6 netdevsim2: renamed from eth2 [ 338.122530][T17119] 8021q: adding VLAN 0 to HW filter on device netdevsim2 [ 338.173810][T17119] netdevsim netdevsim6 netdevsim3: renamed from eth3 [ 338.212497][T17119] 8021q: adding VLAN 0 to HW filter on device netdevsim3 [ 338.403328][T16844] veth0_vlan: entered promiscuous mode [ 338.469456][T16844] veth1_vlan: entered promiscuous mode [ 338.542533][T17477] nbd: must specify at least one socket [ 338.652210][T16844] veth0_macvtap: entered promiscuous mode [ 338.701780][T17119] 8021q: adding VLAN 0 to HW filter on device bond0 [ 338.722299][T16844] veth1_macvtap: entered promiscuous mode [ 338.800745][T17119] 8021q: adding VLAN 0 to HW filter on device team0 [ 338.836138][T16844] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 338.854133][ T8528] bridge0: port 1(bridge_slave_0) entered blocking state [ 338.862277][ T8528] bridge0: port 1(bridge_slave_0) entered forwarding state [ 338.888374][T16844] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 338.914723][ T8528] bridge0: port 2(bridge_slave_1) entered blocking state [ 338.921991][ T8528] bridge0: port 2(bridge_slave_1) entered forwarding state [ 338.974412][ T8528] netdevsim netdevsim2 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 338.986850][ T8528] netdevsim netdevsim2 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 339.020790][ T8528] netdevsim netdevsim2 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 339.063432][ T8524] netdevsim netdevsim2 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 339.133416][T17500] netlink: 36 bytes leftover after parsing attributes in process `syz.1.3103'. [ 339.475729][ T8530] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 339.515896][ T8530] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 339.665539][ T8530] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 339.705309][ T8530] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 339.799999][T17522] netlink: 20 bytes leftover after parsing attributes in process `syz.5.3108'. [ 340.502927][T17564] netlink: 20 bytes leftover after parsing attributes in process `syz.2.3118'. [ 340.544697][T17564] netlink: 20 bytes leftover after parsing attributes in process `syz.2.3118'. [ 340.576840][T17562] netlink: 'syz.2.3118': attribute type 4 has an invalid length. [ 340.625761][T17562] netlink: 17 bytes leftover after parsing attributes in process `syz.2.3118'. [ 340.684426][T17564] netlink: 20 bytes leftover after parsing attributes in process `syz.2.3118'. [ 340.738422][T17564] netlink: 20 bytes leftover after parsing attributes in process `syz.2.3118'. [ 340.812094][T17564] netlink: 20 bytes leftover after parsing attributes in process `syz.2.3118'. [ 340.891584][T17119] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 341.327381][T17602] netlink: 'syz.4.3127': attribute type 6 has an invalid length. [ 341.435351][T17602] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 341.586905][T17609] 8021q: adding VLAN 0 to HW filter on device bond2 [ 341.608276][T17620] __nla_validate_parse: 63 callbacks suppressed [ 341.608292][T17620] netlink: 28 bytes leftover after parsing attributes in process `syz.5.3130'. [ 341.673149][T17620] netlink: 28 bytes leftover after parsing attributes in process `syz.5.3130'. [ 341.971658][T17119] veth0_vlan: entered promiscuous mode [ 342.014574][T17119] veth1_vlan: entered promiscuous mode [ 342.153723][T17646] netlink: 28 bytes leftover after parsing attributes in process `syz.1.3136'. [ 342.185070][T17646] netlink: 'syz.1.3136': attribute type 7 has an invalid length. [ 342.217855][T17646] netlink: 'syz.1.3136': attribute type 8 has an invalid length. [ 342.243176][T17649] netlink: 32 bytes leftover after parsing attributes in process `syz.1.3136'. [ 342.268676][T17646] netlink: 4 bytes leftover after parsing attributes in process `syz.1.3136'. [ 342.297084][T17650] netlink: 16 bytes leftover after parsing attributes in process `syz.4.3137'. [ 342.325917][T17119] veth0_macvtap: entered promiscuous mode [ 342.437391][T17119] veth1_macvtap: entered promiscuous mode [ 342.498967][T17119] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 342.533263][T17119] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 342.600679][ T8524] netdevsim netdevsim6 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 342.622314][ T8524] netdevsim netdevsim6 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 342.635784][T17656] netlink: 24 bytes leftover after parsing attributes in process `syz.2.3139'. [ 342.647055][T17658] netlink: 212368 bytes leftover after parsing attributes in process `syz.4.3140'. [ 342.664281][ T8524] netdevsim netdevsim6 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 342.694828][ T8524] netdevsim netdevsim6 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 342.966425][ T149] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 342.987527][ T149] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 343.115775][ T13] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 343.118583][T17670] netlink: 12 bytes leftover after parsing attributes in process `syz.4.3144'. [ 343.130162][ T13] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 343.275004][T17688] netlink: 8 bytes leftover after parsing attributes in process `syz.1.3149'. [ 343.556556][T17703] erspan0: entered promiscuous mode [ 343.571701][T17703] erspan0: entered allmulticast mode [ 343.587899][T17698] xt_hashlimit: size too large, truncated to 1048576 [ 344.061759][ T2214] block nbd1: Possible stuck request ffff888026f50000: control (read@0,1024B). Runtime 210 seconds [ 344.075940][ T2214] block nbd1: Possible stuck request ffff888026f501c0: control (read@1024,1024B). Runtime 210 seconds [ 344.089714][ T2214] block nbd1: Possible stuck request ffff888026f50380: control (read@2048,1024B). Runtime 210 seconds [ 344.102714][ T2214] block nbd1: Possible stuck request ffff888026f50540: control (read@3072,1024B). Runtime 210 seconds [ 344.280814][ T5642] Bluetooth: hci7: unexpected cc 0x0c03 length: 249 > 1 [ 344.301631][ T5642] Bluetooth: hci7: unexpected cc 0x1003 length: 249 > 9 [ 344.320449][ T5642] Bluetooth: hci7: unexpected cc 0x1001 length: 249 > 9 [ 344.340286][ T5642] Bluetooth: hci7: unexpected cc 0x0c23 length: 249 > 4 [ 344.352259][ T5642] Bluetooth: hci7: unexpected cc 0x0c38 length: 249 > 2 [ 344.418102][T17728] bond1: option resend_igmp: invalid value (32767) [ 344.475574][T17728] bond1: option resend_igmp: allowed values 0 - 255 [ 344.541974][T17728] bond1 (unregistering): Released all slaves [ 345.079068][T17761] xt_ecn: cannot match TCP bits for non-tcp packets [ 345.240710][T17774] netlink: 'syz.2.3172': attribute type 10 has an invalid length. [ 345.693575][T17730] lo speed is unknown, defaulting to 1000 [ 346.005292][T17813] xt_cgroup: path and classid specified [ 346.024674][T17806] netlink: 'syz.1.3178': attribute type 1 has an invalid length. [ 346.378229][ T5642] Bluetooth: hci7: command tx timeout [ 346.713575][T17848] __nla_validate_parse: 14 callbacks suppressed [ 346.713593][T17848] netlink: 8 bytes leftover after parsing attributes in process `syz.6.3187'. [ 346.728099][T17806] nci: __nci_request: wait_for_completion_interruptible_timeout failed -512 [ 346.795301][T17730] bridge0: port 1(bridge_slave_0) entered blocking state [ 346.802690][T17730] bridge0: port 1(bridge_slave_0) entered disabled state [ 346.810298][T17730] bridge_slave_0: entered allmulticast mode [ 346.825100][T17730] bridge_slave_0: entered promiscuous mode [ 346.846942][T17730] bridge0: port 2(bridge_slave_1) entered blocking state [ 346.875534][T17730] bridge0: port 2(bridge_slave_1) entered disabled state [ 346.912216][T17730] bridge_slave_1: entered allmulticast mode [ 346.962514][T17730] bridge_slave_1: entered promiscuous mode [ 347.291492][T17730] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 347.345820][T17860] bridge0: port 2(bridge_slave_1) entered disabled state [ 347.404138][T17730] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 347.701770][T17890] vcan1: entered promiscuous mode [ 347.717571][T17890] vcan1: entered allmulticast mode [ 347.804676][T17730] team0: Port device team_slave_0 added [ 347.845282][T17730] team0: Port device team_slave_1 added [ 347.956096][T17890] bond1: (slave gre0): Device is not bonding slave [ 347.978703][T17890] bond1: option active_slave: invalid value (gre0) [ 347.992753][T17890] bond1 (unregistering): Released all slaves [ 348.063912][T17730] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 348.071099][T17730] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 348.102257][T17730] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 348.126404][T17730] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 348.136952][T17730] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 348.180758][T17730] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 348.244164][T17915] netlink: 20 bytes leftover after parsing attributes in process `syz.6.3201'. [ 348.269641][T17916] netlink: 24 bytes leftover after parsing attributes in process `syz.5.3200'. [ 348.353114][T17730] hsr_slave_0: entered promiscuous mode [ 348.378971][T17730] hsr_slave_1: entered promiscuous mode [ 348.414987][T17730] debugfs: 'hsr0' already exists in 'hsr' [ 348.438334][T17730] Cannot create hsr debugfs directory [ 348.458640][ T5642] Bluetooth: hci7: command tx timeout [ 348.506830][T17923] netlink: 52 bytes leftover after parsing attributes in process `syz.5.3205'. [ 348.516574][T17928] netlink: 'syz.2.3206': attribute type 1 has an invalid length. [ 348.585050][T17928] netlink: 20 bytes leftover after parsing attributes in process `syz.2.3206'. [ 348.628451][T17928] bond3: (slave bridge1): making interface the new active one [ 348.639624][T17928] bond3: (slave bridge1): Enslaving as an active interface with an up link [ 348.686717][T17928] netlink: 28 bytes leftover after parsing attributes in process `syz.2.3206'. [ 348.751199][T17936] netlink: 'syz.2.3206': attribute type 1 has an invalid length. [ 348.773968][T17928] 8021q: adding VLAN 0 to HW filter on device bond3 [ 348.790218][T17936] netlink: 8 bytes leftover after parsing attributes in process `syz.2.3206'. [ 348.826545][T17936] netlink: 4 bytes leftover after parsing attributes in process `syz.2.3206'. [ 348.851101][T17936] netlink: 'syz.2.3206': attribute type 2 has an invalid length. [ 348.861709][T17936] netlink: 'syz.2.3206': attribute type 2 has an invalid length. [ 348.884176][T17936] netlink: 'syz.2.3206': attribute type 2 has an invalid length. [ 348.910299][T17944] netlink: 4 bytes leftover after parsing attributes in process `syz.6.3209'. [ 349.233812][T17730] netdevsim netdevsim4 eth3 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 349.248391][T17730] netdevsim netdevsim4 eth3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 349.328585][T17975] netlink: 20 bytes leftover after parsing attributes in process `syz.6.3217'. [ 349.390186][T17730] netdevsim netdevsim4 eth2 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 349.411271][T17730] netdevsim netdevsim4 eth2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 349.466345][T17977] bond3: (slave lo): enslaved VLAN challenged slave. Adding VLANs will be blocked as long as it is part of bond. [ 349.494939][T17977] bond3: (slave lo): Enslaving as an active interface with an up link [ 349.516343][T17977] A link change request failed with some changes committed already. Interface tunl0 may have been left with an inconsistent configuration, please check. [ 349.551700][T17730] netdevsim netdevsim4 eth1 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 349.561847][T17730] netdevsim netdevsim4 eth1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 349.676209][T17730] netdevsim netdevsim4 eth0 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 349.695831][T17730] netdevsim netdevsim4 eth0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 349.754842][T17998] syzkaller1: entered promiscuous mode [ 349.760842][T17998] syzkaller1: entered allmulticast mode [ 350.176750][T18010] syzkaller0: entered promiscuous mode [ 350.183543][T18010] syzkaller0: entered allmulticast mode [ 350.229695][T18008] xt_TCPMSS: Only works on TCP SYN packets [ 350.356345][ T5719] IPVS: starting estimator thread 0... [ 350.450565][T18020] IPVS: using max 32 ests per chain, 76800 per kthread [ 350.468906][ T24] IPVS: starting estimator thread 0... [ 350.548036][ T5642] Bluetooth: hci7: command tx timeout [ 350.559620][T18028] IPVS: using max 55 ests per chain, 132000 per kthread [ 352.610834][T17989] nci: __nci_request: wait_for_completion_interruptible_timeout failed -512 [ 352.650506][ T5642] Bluetooth: hci7: command tx timeout [ 352.659648][T17730] netdevsim netdevsim4 netdevsim0: renamed from eth0 [ 352.732106][T17730] 8021q: adding VLAN 0 to HW filter on device netdevsim0 [ 352.740485][T17730] netdevsim netdevsim4 netdevsim1: renamed from eth1 [ 352.776464][T17730] 8021q: adding VLAN 0 to HW filter on device netdevsim1 [ 352.809570][T17730] netdevsim netdevsim4 netdevsim2: renamed from eth2 [ 352.849399][T17730] 8021q: adding VLAN 0 to HW filter on device netdevsim2 [ 352.874865][T18047] batman_adv: Cannot find parent device. Skipping batadv-on-batadv check for gretap1 [ 352.892635][T18047] gretap1: default qdisc (pfifo_fast) fail, fallback to noqueue [ 352.901001][T18047] gretap1: entered promiscuous mode [ 352.916369][T18047] gretap1: entered allmulticast mode [ 352.956796][T17730] netdevsim netdevsim4 netdevsim3: renamed from eth3 [ 352.979930][T17730] 8021q: adding VLAN 0 to HW filter on device netdevsim3 [ 353.051932][T18056] __nla_validate_parse: 3 callbacks suppressed [ 353.051953][T18056] netlink: 12 bytes leftover after parsing attributes in process `syz.1.3240'. [ 353.076229][T18053] syzkaller0: entered promiscuous mode [ 353.084991][T18053] syzkaller0: entered allmulticast mode [ 353.449600][T17730] 8021q: adding VLAN 0 to HW filter on device bond0 [ 353.534748][T17730] 8021q: adding VLAN 0 to HW filter on device team0 [ 353.571906][ T8526] bridge0: port 1(bridge_slave_0) entered blocking state [ 353.579134][ T8526] bridge0: port 1(bridge_slave_0) entered forwarding state [ 353.641495][ T8524] bridge0: port 2(bridge_slave_1) entered blocking state [ 353.648721][ T8524] bridge0: port 2(bridge_slave_1) entered forwarding state [ 353.797417][T18102] netlink: 'syz.5.3251': attribute type 11 has an invalid length. [ 353.806160][T18102] netlink: 224 bytes leftover after parsing attributes in process `syz.5.3251'. [ 354.314577][T18130] openvswitch: netlink: Multiple metadata blocks provided [ 354.368868][T18131] syzkaller0: entered promiscuous mode [ 354.375662][T18131] syzkaller0: entered allmulticast mode [ 354.676501][T17730] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 354.720820][T18149] sch_tbf: burst 1023 is lower than device lo mtu (65550) ! [ 354.964280][T18151] xt_limit: Overflow, try lower: 271964/0 [ 355.020498][T18164] netlink: 'syz.5.3262': attribute type 1 has an invalid length. [ 355.032841][T18164] netlink: 224 bytes leftover after parsing attributes in process `syz.5.3262'. [ 355.163107][T18171] netlink: 20 bytes leftover after parsing attributes in process `syz.2.3264'. [ 355.345661][T18178] netlink: 212368 bytes leftover after parsing attributes in process `syz.5.3265'. [ 355.372720][T18184] syzkaller0: entered promiscuous mode [ 355.389084][T18184] syzkaller0: entered allmulticast mode [ 355.544538][T18188] netlink: 'syz.5.3268': attribute type 1 has an invalid length. [ 355.625369][T18192] bond4: (slave geneve2): making interface the new active one [ 355.635827][T18192] bond4: (slave geneve2): Enslaving as an active interface with an up link [ 355.660152][ T8528] netdevsim netdevsim5 netdevsim0: set [1, 1] type 2 family 0 port 20000 - 0 [ 355.735444][T18191] netlink: 20 bytes leftover after parsing attributes in process `syz.6.3269'. [ 355.753447][ T8528] netdevsim netdevsim5 netdevsim1: set [1, 1] type 2 family 0 port 20000 - 0 [ 355.772972][ T8528] netdevsim netdevsim5 netdevsim2: set [1, 1] type 2 family 0 port 20000 - 0 [ 355.804635][ T8528] netdevsim netdevsim5 netdevsim3: set [1, 1] type 2 family 0 port 20000 - 0 [ 355.914715][T18205] bond0: (slave bond_slave_1): Releasing backup interface [ 355.944726][T18204] tipc: Enabling of bearer rejected, failed to enable media [ 355.986687][T17730] veth0_vlan: entered promiscuous mode [ 356.037436][T17730] veth1_vlan: entered promiscuous mode [ 356.094549][T18212] netlink: 8 bytes leftover after parsing attributes in process `syz.6.3275'. [ 356.179314][T18214] mac80211_hwsim hwsim34 ÿ: renamed from wlan1 [ 356.269003][T18220] mac80211_hwsim hwsim29 ÿ: renamed from wlan1 [ 356.302231][T17730] veth0_macvtap: entered promiscuous mode [ 356.353642][T17730] veth1_macvtap: entered promiscuous mode [ 356.455489][T18227] syzkaller0: entered promiscuous mode [ 356.477402][T18227] syzkaller0: entered allmulticast mode [ 356.662764][T17730] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 356.710444][T17730] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 356.742726][ T149] netdevsim netdevsim4 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 356.784782][T18242] netlink: 8 bytes leftover after parsing attributes in process `syz.2.3285'. [ 356.791050][ T149] netdevsim netdevsim4 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 356.811831][ T149] netdevsim netdevsim4 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 356.830300][ T149] netdevsim netdevsim4 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 357.130329][ T57] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 357.168950][ T57] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 357.251731][T18258] netlink: 4 bytes leftover after parsing attributes in process `syz.2.3289'. [ 357.272996][ T8526] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 357.304628][ T8526] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 357.492526][T18269] netlink: 16 bytes leftover after parsing attributes in process `syz.2.3293'. [ 357.567497][T18271] syzkaller0: entered promiscuous mode [ 357.586086][T18271] syzkaller0: entered allmulticast mode [ 358.203657][T18301] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check. [ 358.480145][T18305] netlink: 'syz.1.3303': attribute type 11 has an invalid length. [ 358.768967][T18319] bond0: entered allmulticast mode [ 358.788012][T18319] bond_slave_0: entered allmulticast mode [ 358.800793][T18319] bond_slave_1: entered allmulticast mode [ 358.966733][T18327] __nla_validate_parse: 1 callbacks suppressed [ 358.966751][T18327] netlink: 28 bytes leftover after parsing attributes in process `syz.2.3309'. [ 359.082913][T18329] syzkaller0: entered promiscuous mode [ 359.090464][T18329] syzkaller0: entered allmulticast mode [ 359.101576][T18338] netlink: 112 bytes leftover after parsing attributes in process `syz.5.3313'. [ 359.495721][T18351] netlink: 8 bytes leftover after parsing attributes in process `syz.5.3319'. [ 359.524041][T18360] netlink: 48 bytes leftover after parsing attributes in process `syz.6.3321'. [ 359.705715][T18361] SET target dimension over the limit! [ 359.727071][T18368] netlink: 76 bytes leftover after parsing attributes in process `syz.4.3324'. [ 359.761772][T18376] netlink: 16 bytes leftover after parsing attributes in process `syz.6.3326'. [ 360.041783][T18397] netlink: 24 bytes leftover after parsing attributes in process `syz.2.3331'. [ 360.263258][T18408] netlink: 40 bytes leftover after parsing attributes in process `syz.4.3334'. [ 360.519429][T18433] netlink: 8 bytes leftover after parsing attributes in process `syz.1.3339'. [ 360.843312][T18447] netlink: 'syz.2.3343': attribute type 3 has an invalid length. [ 360.915447][T18447] netlink: 240 bytes leftover after parsing attributes in process `syz.2.3343'. [ 361.063385][T18453] geneve2: entered promiscuous mode [ 361.175358][T18459] netlink: 'syz.5.3347': attribute type 3 has an invalid length. [ 361.543020][T18475] netlink: 'syz.6.3350': attribute type 4 has an invalid length. [ 361.909240][T18487] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check. [ 361.981568][ T2214] block nbd2: Possible stuck request ffff888026fc0000: control (read@0,1024B). Runtime 150 seconds [ 361.994114][ T2214] block nbd2: Possible stuck request ffff888026fc01c0: control (read@1024,1024B). Runtime 150 seconds [ 362.006821][ T2214] block nbd2: Possible stuck request ffff888026fc0380: control (read@2048,1024B). Runtime 150 seconds [ 362.020157][ T2214] block nbd2: Possible stuck request ffff888026fc0540: control (read@3072,1024B). Runtime 150 seconds [ 362.375837][T18510] tipc: Started in network mode [ 362.402154][T18510] tipc: Node identity fe800000000000000000000000000016, cluster identity 4711 [ 362.529298][T18510] tipc: Enabling of bearer rejected, failed to enable media [ 362.763606][T18526] syzkaller1: entered allmulticast mode [ 362.785100][T18526] netlink: 'syz.6.3362': attribute type 13 has an invalid length. [ 362.849554][T18529] xt_CT: No such helper "snmp_trap" [ 363.300115][ T2214] block nbd0: Possible stuck request ffff888026f27000: control (read@0,1024B). Runtime 30 seconds [ 363.312116][ T2214] block nbd0: Possible stuck request ffff888026f271c0: control (read@1024,1024B). Runtime 30 seconds [ 363.324448][ T2214] block nbd0: Possible stuck request ffff888026f27380: control (read@2048,1024B). Runtime 30 seconds [ 363.341763][ T2214] block nbd0: Possible stuck request ffff888026f27540: control (read@3072,1024B). Runtime 30 seconds [ 363.706196][T18562] syzkaller0: entered promiscuous mode [ 363.733511][T18562] syzkaller0: entered allmulticast mode [ 363.786846][T18565] netdevsim netdevsim1 netdevsim2: entered promiscuous mode [ 363.854857][T18565] netdevsim netdevsim1 netdevsim2: left promiscuous mode [ 364.425108][T18584] xt_CT: You must specify a L4 protocol and not use inversions on it [ 364.566190][T18590] __nla_validate_parse: 10 callbacks suppressed [ 364.566306][T18590] netlink: 260 bytes leftover after parsing attributes in process `syz.5.3377'. [ 366.173508][T18604] IPVS: set_ctl: invalid protocol: 8 255.255.255.255:20001 [ 369.846851][T18623] IPVS: Unknown mcast interface: pim6reg1 [ 370.327162][T18667] netlink: 'syz.4.3390': attribute type 26 has an invalid length. [ 370.395091][T18667] netlink: 4 bytes leftover after parsing attributes in process `syz.4.3390'. [ 370.485466][T18674] mac80211_hwsim hwsim33 wlan0: entered promiscuous mode [ 370.612525][T18676] netlink: 20 bytes leftover after parsing attributes in process `syz.5.3393'. [ 370.660402][T18676] IPv6: NLM_F_CREATE should be specified when creating new route [ 371.086300][T18690] netlink: 8 bytes leftover after parsing attributes in process `syz.4.3398'. [ 371.153182][T18690] syzkaller0: entered promiscuous mode [ 371.172529][T18690] syzkaller0: entered allmulticast mode [ 371.207573][T18690] netlink: 32 bytes leftover after parsing attributes in process `syz.4.3398'. [ 371.285827][T18707] netlink: 12 bytes leftover after parsing attributes in process `syz.1.3402'. [ 371.385781][T18707] 8021q: adding VLAN 0 to HW filter on device bond2 [ 371.416549][T18710] bond2: entered promiscuous mode [ 371.423736][T18710] bond2: entered allmulticast mode [ 371.431569][T18710] 8021q: adding VLAN 0 to HW filter on device bond2 [ 371.444473][T18710] team0: Port device bond2 added [ 372.109076][T18737] netlink: 256 bytes leftover after parsing attributes in process `syz.5.3408'. [ 372.310764][T18743] veth3: entered allmulticast mode [ 372.411483][T18749] netlink: 'syz.1.3412': attribute type 1 has an invalid length. [ 372.492578][T18752] netlink: 24 bytes leftover after parsing attributes in process `syz.1.3412'. [ 372.501442][T18749] 8021q: adding VLAN 0 to HW filter on device bond3 [ 372.555915][T18758] netlink: 4 bytes leftover after parsing attributes in process `syz.4.3414'. [ 373.154422][T18764] netlink: 8 bytes leftover after parsing attributes in process `syz.5.3416'. [ 373.183056][T18764] netlink: 16 bytes leftover after parsing attributes in process `syz.5.3416'. [ 373.434421][T18773] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 373.505032][T18773] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 373.686638][T18777] 8021q: adding VLAN 0 to HW filter on device bond5 [ 373.782152][T18777] sch_tbf: burst 0 is lower than device syzkaller0 mtu (1500) ! [ 373.971629][T18798] ieee802154 phy0 wpan0: encryption failed: -22 [ 374.020913][T18777] syzkaller0: entered promiscuous mode [ 374.040068][T18777] syzkaller0: entered allmulticast mode [ 374.155330][ T2214] block nbd1: Possible stuck request ffff888026f50000: control (read@0,1024B). Runtime 240 seconds [ 374.167468][ T2214] block nbd1: Possible stuck request ffff888026f501c0: control (read@1024,1024B). Runtime 240 seconds [ 374.180146][ T2214] block nbd1: Possible stuck request ffff888026f50380: control (read@2048,1024B). Runtime 240 seconds [ 374.192693][ T2214] block nbd1: Possible stuck request ffff888026f50540: control (read@3072,1024B). Runtime 240 seconds [ 374.453794][T18812] netlink: 'syz.1.3427': attribute type 10 has an invalid length. [ 377.649258][ T4996] udevd[4996]: worker [5628] /devices/virtual/block/nbd1 timeout; kill it [ 377.677553][ T4996] udevd[4996]: seq 12743 '/devices/virtual/block/nbd1' killed [ 377.698590][ T4996] udevd[4996]: worker [7366] /devices/virtual/block/nbd2 is taking a long time [ 378.633253][ T1312] ieee802154 phy0 wpan0: encryption failed: -22 [ 378.647878][ T1312] ieee802154 phy1 wpan1: encryption failed: -22 [ 378.701278][T18819] __nla_validate_parse: 4 callbacks suppressed [ 378.701300][T18819] netlink: 20 bytes leftover after parsing attributes in process `syz.1.3427'. [ 379.106599][T18837] netlink: 16215 bytes leftover after parsing attributes in process `syz.2.3433'. [ 379.129362][T18844] bridge0: port 2(bridge_slave_1) entered disabled state [ 379.137135][T18844] bridge0: port 1(bridge_slave_0) entered disabled state [ 379.224870][T18845] syzkaller0: entered promiscuous mode [ 379.246363][T18845] syzkaller0: entered allmulticast mode [ 379.275258][T18849] syz_tun: entered allmulticast mode [ 379.289705][T18849] netlink: 4 bytes leftover after parsing attributes in process `syz.5.3436'. [ 379.302149][T18848] syz_tun: left allmulticast mode [ 379.451890][T18853] tipc: Enabled bearer , priority 10 [ 380.567867][ T5726] tipc: Node number set to 4269801494 [ 385.824347][ T50] Bluetooth: hci5: command 0x0405 tx timeout [ 391.842614][ T4996] udevd[4996]: worker [7366] /devices/virtual/block/nbd2 timeout; kill it [ 391.852567][ T4996] udevd[4996]: seq 16175 '/devices/virtual/block/nbd2' killed [ 392.060481][ T2214] block nbd2: Possible stuck request ffff888026fc0000: control (read@0,1024B). Runtime 180 seconds [ 392.073115][ T2214] block nbd2: Possible stuck request ffff888026fc01c0: control (read@1024,1024B). Runtime 180 seconds [ 392.085154][ T2214] block nbd2: Possible stuck request ffff888026fc0380: control (read@2048,1024B). Runtime 180 seconds [ 392.097298][ T2214] block nbd2: Possible stuck request ffff888026fc0540: control (read@3072,1024B). Runtime 180 seconds [ 392.590360][T18865] netlink: 8 bytes leftover after parsing attributes in process `syz.2.3443'. [ 392.622393][T18865] netlink: 8 bytes leftover after parsing attributes in process `syz.2.3443'. [ 392.678020][T18869] netdevsim netdevsim5: loading /lib/firmware/. failed with error -22 [ 392.716506][T18869] netdevsim netdevsim5: Direct firmware load for . failed with error -22 [ 392.742906][T18871] x_tables: ip6_tables: NETMAP.0 target: invalid size 40 (kernel) != (user) 0 [ 392.758988][T18869] netdevsim netdevsim5: Falling back to sysfs fallback for: . [ 392.788904][T18871] netlink: 8 bytes leftover after parsing attributes in process `syz.2.3443'. [ 392.803426][T18873] netlink: 'syz.1.3446': attribute type 1 has an invalid length. [ 392.981440][T18873] 8021q: adding VLAN 0 to HW filter on device bond4 [ 392.994337][T18877] workqueue: name exceeds WQ_NAME_LEN. Truncating to: KŠŸu ™crµ±K:‘£ÿˆÌ¥ÝBßÝ£| “¼Ú [ 393.011488][T18883] netlink: 28 bytes leftover after parsing attributes in process `syz.6.3448'. [ 393.026607][T18884] bond4: (slave gretap1): making interface the new active one [ 393.042791][T18884] bond4: (slave gretap1): Enslaving as an active interface with an up link [ 393.072375][T18888] ip6tnl0: Caught tx_queue_len zero misconfig [ 393.352692][ T2214] block nbd0: Possible stuck request ffff888026f27000: control (read@0,1024B). Runtime 60 seconds [ 393.367264][ T2214] block nbd0: Possible stuck request ffff888026f271c0: control (read@1024,1024B). Runtime 60 seconds [ 393.381191][ T2214] block nbd0: Possible stuck request ffff888026f27380: control (read@2048,1024B). Runtime 60 seconds [ 393.394461][ T2214] block nbd0: Possible stuck request ffff888026f27540: control (read@3072,1024B). Runtime 60 seconds [ 393.541221][T18902] syzkaller0: entered promiscuous mode [ 393.574550][T18902] syzkaller0: entered allmulticast mode [ 394.056080][T18928] netlink: 28 bytes leftover after parsing attributes in process `syz.1.3460'. [ 394.096807][T18928] netlink: 28 bytes leftover after parsing attributes in process `syz.1.3460'. [ 394.297390][T18938] bond3: (slave lo): Releasing backup interface [ 394.312834][T18938] bond3: (slave lo): last VLAN challenged slave left bond - VLAN blocking is removed [ 394.497321][T18938] bridge_slave_0: left allmulticast mode [ 394.521529][T18945] netlink: 7064 bytes leftover after parsing attributes in process `syz.4.3464'. [ 394.541997][T18938] bridge_slave_0: left promiscuous mode [ 394.571234][T18945] openvswitch: netlink: Missing key (keys=40, expected=10000000) [ 394.585343][T18938] bridge0: port 1(bridge_slave_0) entered disabled state [ 394.616536][T18938] bridge_slave_1: left allmulticast mode [ 394.634638][T18938] bridge_slave_1: left promiscuous mode [ 394.648895][T18938] bridge0: port 2(bridge_slave_1) entered disabled state [ 394.688655][T18938] bond0: (slave bond_slave_0): Releasing backup interface [ 394.726926][T18938] bond0: (slave bond_slave_1): Releasing backup interface [ 394.773090][T18938] team0: Port device team_slave_0 removed [ 394.792176][T18938] team0: Port device team_slave_1 removed [ 394.800584][T18938] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 394.810433][T18938] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 394.825168][T18938] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 394.834215][T18938] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 394.847224][T18938] A link change request failed with some changes committed already. Interface hsr_slave_0 may have been left with an inconsistent configuration, please check. [ 394.952858][T18951] syzkaller1: entered promiscuous mode [ 394.962851][T18951] syzkaller1: entered allmulticast mode [ 395.500600][ T809] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 395.612937][T18964] syzkaller0: entered promiscuous mode [ 395.628875][T18964] syzkaller0: entered allmulticast mode [ 396.555023][ T5362] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 397.188673][ T13] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 397.224986][ T809] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 397.246449][ T5726] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 397.604651][ T5362] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 398.638849][ T10] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 399.362068][ T4996] udevd[4996]: worker [5644] /devices/virtual/block/nbd0 is taking a long time [ 399.670359][ T10] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 400.244531][T18993] veth0: entered promiscuous mode [ 400.250198][T18993] veth0: left promiscuous mode [ 400.302820][ T5726] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 400.489280][T19010] ieee802154 phy0 wpan0: encryption failed: -22 [ 400.702670][ T5362] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 401.023610][ T5826] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 401.047034][T19036] netlink: 'syz.1.3487': attribute type 14 has an invalid length. [ 401.085488][T19043] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 401.157925][T19033] gretap1: entered promiscuous mode [ 401.182603][T19033] batman_adv: batadv0: Adding interface: gretap1 [ 401.199361][T19033] batman_adv: batadv0: The MTU of interface gretap1 is too small (1462) to handle the transport of batman-adv packets. If you experience problems getting traffic through try increasing the MTU to 1500. [ 401.239620][T19033] batman_adv: batadv0: Not using interface gretap1 (retrying later): interface not active [ 401.453601][T19057] vcan1: entered promiscuous mode [ 401.462158][T19057] vcan1: entered allmulticast mode [ 401.741520][ T5362] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 401.787455][T19059] bond1: option tlb_dynamic_lb: mode dependency failed, not supported in mode balance-xor(2) [ 401.806689][T19059] bond1 (unregistering): Released all slaves [ 402.120846][T19089] netlink: 4 bytes leftover after parsing attributes in process `syz.4.3503'. [ 402.147470][T19089] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 402.396859][T19089] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 402.534480][T19110] lo speed is unknown, defaulting to 1000 [ 402.555693][T19110] lo speed is unknown, defaulting to 1000 [ 402.602420][T19110] lo speed is unknown, defaulting to 1000 [ 402.607266][T19114] netlink: 212356 bytes leftover after parsing attributes in process `syz.2.3506'. [ 402.633744][T19110] smbdirect: ib_dev[syz0]: added: RNIC max_fast_reg_page_list_len=256 device_cap_flags=0x200000 kernel_cap_flags=0x10 page_size_cap=0x1000 [ 402.695958][T19116] netlink: 16 bytes leftover after parsing attributes in process `syz.5.3509'. [ 402.701971][T19110] smbdirect: ib_dev[syz0]: num_ports=1 max_qp_rd_atom=128 max_qp_init_rd_atom=128 max_sgl_rd=0 max_sge_rd=1 max_cqe=3276800 max_qp_wr=32768 max_send_sge=6 max_recv_sge=6 [ 402.778820][ T5362] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 402.793296][T19110] smbdirect: ib_dev[syz0]PORT[1]: iwarp=1 ib=0 roce=0 v1=0 v2=0 core_cap_flags=0x400008 [ 402.937087][T19110] infiniband syz0: RDMA CMA: cma_listen_on_dev, error -98 [ 402.969918][T19131] netlink: 248 bytes leftover after parsing attributes in process `syz.2.3511'. [ 402.980127][T19131] netlink: 'syz.2.3511': attribute type 1 has an invalid length. [ 403.108696][T19110] lo speed is unknown, defaulting to 1000 [ 403.142733][T19110] lo speed is unknown, defaulting to 1000 [ 403.150871][T19110] lo speed is unknown, defaulting to 1000 [ 403.162522][T19110] lo speed is unknown, defaulting to 1000 [ 403.215479][T19110] lo speed is unknown, defaulting to 1000 [ 403.222776][T19137] netlink: 12 bytes leftover after parsing attributes in process `syz.1.3513'. [ 403.252578][T19110] lo speed is unknown, defaulting to 1000 [ 403.284478][T19110] lo speed is unknown, defaulting to 1000 [ 403.299780][T19110] lo speed is unknown, defaulting to 1000 [ 403.322164][T19110] lo speed is unknown, defaulting to 1000 [ 403.333092][T19110] lo speed is unknown, defaulting to 1000 [ 403.411169][T19142] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 403.718099][T19159] syzkaller0: entered promiscuous mode [ 403.727343][T19162] netlink: 12 bytes leftover after parsing attributes in process `syz.6.3519'. [ 403.734650][T19159] syzkaller0: entered allmulticast mode [ 403.829781][ T5362] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 403.845540][T19169] netlink: 12 bytes leftover after parsing attributes in process `syz.6.3519'. [ 403.910523][T19169] 8021q: adding VLAN 0 to HW filter on device batadv1 [ 404.062405][ T5726] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 404.136176][T19174] netlink: 12 bytes leftover after parsing attributes in process `syz.6.3524'. [ 404.145803][T19172] netlink: 8 bytes leftover after parsing attributes in process `syz.5.3522'. [ 404.234089][ T2214] block nbd1: Possible stuck request ffff888026f50000: control (read@0,1024B). Runtime 270 seconds [ 404.235316][T19176] netlink: 8 bytes leftover after parsing attributes in process `syz.4.3523'. [ 404.246407][ T2214] block nbd1: Possible stuck request ffff888026f501c0: control (read@1024,1024B). Runtime 270 seconds [ 404.267782][ T2214] block nbd1: Possible stuck request ffff888026f50380: control (read@2048,1024B). Runtime 270 seconds [ 404.283408][ T2214] block nbd1: Possible stuck request ffff888026f50540: control (read@3072,1024B). Runtime 270 seconds [ 404.381201][T19176] macsec1: entered promiscuous mode [ 404.432867][T19185] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 404.526840][T19187] netlink: 'syz.5.3527': attribute type 83 has an invalid length. [ 404.591075][T19195] Cannot find add_set index 0 as target [ 404.611722][T19197] Cannot find add_set index 0 as target [ 404.863780][ T5362] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 404.909830][T19189] syzkaller0: entered promiscuous mode [ 404.940783][T19189] syzkaller0: entered allmulticast mode [ 405.912944][ T5362] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 406.960297][ T809] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 407.110473][ T5726] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 407.991438][ T5362] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 409.022195][ T809] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 409.131248][T19243] __nla_validate_parse: 5 callbacks suppressed [ 409.131268][T19243] netlink: 96 bytes leftover after parsing attributes in process `syz.2.3540'. [ 409.218089][T19248] netlink: 8 bytes leftover after parsing attributes in process `syz.1.3541'. [ 409.227227][T19248] netlink: 12 bytes leftover after parsing attributes in process `syz.1.3541'. [ 409.296093][T19249] netlink: 212348 bytes leftover after parsing attributes in process `syz.6.3536'. [ 409.307185][T19249] netlink: Conntrack attr has 3 unknown bytes [ 409.314756][T19232] A link change request failed with some changes committed already. Interface bond1 may have been left with an inconsistent configuration, please check. [ 409.414175][T19252] netlink: 8 bytes leftover after parsing attributes in process `syz.4.3542'. [ 409.425455][T19252] gretap0: entered promiscuous mode [ 409.719880][T19264] syzkaller0: entered promiscuous mode [ 409.725476][T19264] syzkaller0: entered allmulticast mode [ 409.791695][T19266] xt_hashlimit: size too large, truncated to 1048576 [ 410.068631][ T809] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 410.144621][ T5726] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 410.319411][T19288] sctp: [Deprecated]: syz.6.3554 (pid 19288) Use of int in maxseg socket option. [ 410.319411][T19288] Use struct sctp_assoc_value instead [ 410.332497][T19292] xt_limit: Overflow, try lower: 271964/0 [ 410.419265][T19298] netlink: 20 bytes leftover after parsing attributes in process `syz.4.3555'. [ 410.882654][T19312] syzkaller0: entered promiscuous mode [ 410.912346][T19312] syzkaller0: entered allmulticast mode [ 411.126950][ T809] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 411.391464][ T10] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 411.430146][ T5642] Bluetooth: hci6: command 0x0406 tx timeout [ 412.138452][ T5362] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 412.212446][T19368] netlink: 52 bytes leftover after parsing attributes in process `syz.2.3570'. [ 412.291687][T19368] bridge0: port 2(bridge_slave_1) entered disabled state [ 412.302523][T19368] bridge0: port 1(bridge_slave_0) entered disabled state [ 412.452970][T19368] netlink: 12 bytes leftover after parsing attributes in process `syz.2.3570'. [ 412.750137][T19392] block nbd6: NBD_DISCONNECT [ 412.773310][T19399] netlink: 104 bytes leftover after parsing attributes in process `syz.2.3576'. [ 412.936425][T19402] Freezing with imperfect legacy cgroup freezer. See cgroup.freeze of cgroup v2 [ 413.026458][T19406] syzkaller0: entered promiscuous mode [ 413.051181][T19406] syzkaller0: entered allmulticast mode [ 413.183195][ T5362] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 413.323189][T19418] sch_tbf: peakrate 5 is lower than or equals to rate 16783679728848008391 ! [ 413.406317][T19424] netlink: 8 bytes leftover after parsing attributes in process `syz.1.3585'. [ 413.651180][T19430] xt_nat: multiple ranges no longer supported [ 413.865009][T19443] vcan0: tx drop: invalid sa for name 0x0000000000000003 [ 413.878798][T19447] sctp: [Deprecated]: syz.6.3592 (pid 19447) Use of int in maxseg socket option. [ 413.878798][T19447] Use struct sctp_assoc_value instead [ 414.009830][T19454] sctp: [Deprecated]: syz.4.3593 (pid 19454) Use of int in max_burst socket option deprecated. [ 414.009830][T19454] Use struct sctp_assoc_value instead [ 414.161423][T19457] netlink: 'syz.2.3594': attribute type 49 has an invalid length. [ 414.230397][ T5362] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 414.385106][T19470] syzkaller0: entered promiscuous mode [ 414.411062][T19470] syzkaller0: entered allmulticast mode [ 414.432561][T19473] netlink: 'syz.2.3598': attribute type 1 has an invalid length. [ 414.471146][ T5726] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 414.696847][T19483] xt_CT: You must specify a L4 protocol and not use inversions on it [ 414.915841][T19492] netlink: 'syz.6.3604': attribute type 4 has an invalid length. [ 414.937755][T19492] __nla_validate_parse: 2 callbacks suppressed [ 414.937805][T19492] netlink: 224 bytes leftover after parsing attributes in process `syz.6.3604'. [ 415.030208][T19495] netlink: 8 bytes leftover after parsing attributes in process `syz.4.3606'. [ 415.267610][ T5362] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 415.334608][T19510] netlink: 12 bytes leftover after parsing attributes in process `syz.6.3611'. [ 415.822577][T19528] netlink: 12 bytes leftover after parsing attributes in process `syz.2.3617'. [ 415.960377][T19528] bond5: entered promiscuous mode [ 415.981547][T19528] 8021q: adding VLAN 0 to HW filter on device bond5 [ 416.126334][T19534] bridge4: entered promiscuous mode [ 416.144340][T19534] bond5: (slave bridge4): Enslaving as an active interface with an up link [ 416.156336][T19540] syzkaller0: entered promiscuous mode [ 416.172511][T19540] syzkaller0: entered allmulticast mode [ 416.308931][ T5362] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 416.364511][T19550] netlink: 72 bytes leftover after parsing attributes in process `syz.2.3622'. [ 416.864299][T19574] netlink: 'syz.4.3627': attribute type 4 has an invalid length. [ 416.887133][T19580] netlink: 52 bytes leftover after parsing attributes in process `syz.6.3630'. [ 416.985834][T19582] geneve1: entered promiscuous mode [ 417.280135][T19593] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check. [ 417.285502][T19596] netlink: 'syz.1.3634': attribute type 2 has an invalid length. [ 417.321682][ T1230] IPVS: starting estimator thread 0... [ 417.338924][ T809] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 417.365552][T19601] syzkaller0: entered promiscuous mode [ 417.391798][T19601] syzkaller0: entered allmulticast mode [ 417.437772][T19602] IPVS: using max 29 ests per chain, 69600 per kthread [ 417.468106][T19604] netlink: 4 bytes leftover after parsing attributes in process `syz.5.3637'. [ 417.497871][ T5726] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 417.811315][T19620] netlink: 'syz.2.3641': attribute type 1 has an invalid length. [ 417.836244][T19623] netlink: 'syz.4.3642': attribute type 11 has an invalid length. [ 417.860314][T19622] netlink: 'syz.2.3641': attribute type 1 has an invalid length. [ 417.883810][T19613] netlink: 32 bytes leftover after parsing attributes in process `syz.6.3636'. [ 418.029513][T19615] netdevsim netdevsim5 netdevsim3 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 418.069558][T19615] netdevsim netdevsim5 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 418.095500][T19615] netdevsim netdevsim5 netdevsim3 (unregistering): unset [1, 1] type 2 family 0 port 20000 - 0 [ 418.192062][T19630] netlink: 'syz.1.3644': attribute type 49 has an invalid length. [ 418.402966][ T5362] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 418.512304][T19633] netlink: 4 bytes leftover after parsing attributes in process `syz.2.3645'. [ 418.606264][T19630] ip6gretap0: entered promiscuous mode [ 418.620532][T19630] ip6gretap0: entered allmulticast mode [ 418.691067][T19636] netlink: 'syz.6.3647': attribute type 15 has an invalid length. [ 418.777361][T19615] netdevsim netdevsim5 netdevsim2 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 418.798394][T19615] netdevsim netdevsim5 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 418.811437][T19615] netdevsim netdevsim5 netdevsim2 (unregistering): unset [1, 1] type 2 family 0 port 20000 - 0 [ 419.128327][T19615] netdevsim netdevsim5 netdevsim1 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 419.168034][T19615] netdevsim netdevsim5 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 419.214600][T19615] netdevsim netdevsim5 netdevsim1 (unregistering): unset [1, 1] type 2 family 0 port 20000 - 0 [ 419.349733][T19668] netlink: 92 bytes leftover after parsing attributes in process `syz.4.3650'. [ 419.384007][T19668] netlink: 'syz.4.3650': attribute type 1 has an invalid length. [ 419.422483][ T809] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 419.460819][T19656] lo: entered allmulticast mode [ 419.528954][T19656] netlink: 'syz.4.3650': attribute type 11 has an invalid length. [ 419.664650][T19615] netdevsim netdevsim5 netdevsim0 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 419.693424][T19615] netdevsim netdevsim5 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 419.704179][T19615] netdevsim netdevsim5 netdevsim0 (unregistering): unset [1, 1] type 2 family 0 port 20000 - 0 [ 419.724480][T19684] netlink: 'syz.2.3655': attribute type 1 has an invalid length. [ 420.227350][ T5362] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 420.363007][ T8526] netdevsim netdevsim5 eth0: set [0, 0] type 1 family 0 port 8472 - 0 [ 420.395490][ T8526] netdevsim netdevsim5 eth0: set [1, 0] type 2 family 0 port 20000 - 0 [ 420.436094][ T8526] netdevsim netdevsim5 eth0: set [1, 1] type 2 family 0 port 6081 - 0 [ 420.538389][ T5726] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 420.676644][ T8526] netdevsim netdevsim5 eth1: set [0, 0] type 1 family 0 port 8472 - 0 [ 420.694140][T19722] netlink: 'syz.1.3663': attribute type 4 has an invalid length. [ 420.709253][ T8526] netdevsim netdevsim5 eth1: set [1, 0] type 2 family 0 port 20000 - 0 [ 420.733646][ T8526] netdevsim netdevsim5 eth1: set [1, 1] type 2 family 0 port 6081 - 0 [ 420.744138][T19722] __nla_validate_parse: 8 callbacks suppressed [ 420.744154][T19722] netlink: 156 bytes leftover after parsing attributes in process `syz.1.3663'. [ 420.763847][T19713] netlink: 'syz.4.3665': attribute type 3 has an invalid length. [ 420.801644][T19722] A link change request failed with some changes committed already. Interface bond0 may have been left with an inconsistent configuration, please check. [ 420.855960][T19725] tipc: Enabling of bearer rejected, failed to enable media [ 421.123191][T19723] bond7: option lacp_rate: mode dependency failed, not supported in mode active-backup(1) [ 421.161526][T19723] bond7 (unregistering): Released all slaves [ 421.196364][T19728] veth0_macvtap: Caught tx_queue_len zero misconfig [ 421.204467][ T8528] netdevsim netdevsim5 eth2: set [0, 0] type 1 family 0 port 8472 - 0 [ 421.238827][ T8528] netdevsim netdevsim5 eth2: set [1, 0] type 2 family 0 port 20000 - 0 [ 421.264104][ T8528] netdevsim netdevsim5 eth2: set [1, 1] type 2 family 0 port 6081 - 0 [ 421.313711][T19733] netlink: 'syz.6.3667': attribute type 4 has an invalid length. [ 421.418574][ T8528] netdevsim netdevsim5 eth3: set [0, 0] type 1 family 0 port 8472 - 0 [ 421.462491][ T8528] netdevsim netdevsim5 eth3: set [1, 0] type 2 family 0 port 20000 - 0 [ 421.472638][ T8528] netdevsim netdevsim5 eth3: set [1, 1] type 2 family 0 port 6081 - 0 [ 421.499864][ T5733] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 422.035776][T19773] netlink: 1024 bytes leftover after parsing attributes in process `syz.6.3675'. [ 422.126798][T19771] tipc: Started in network mode [ 422.143225][ T2214] block nbd2: Possible stuck request ffff888026fc0000: control (read@0,1024B). Runtime 210 seconds [ 422.157510][ T2214] block nbd2: Possible stuck request ffff888026fc01c0: control (read@1024,1024B). Runtime 210 seconds [ 422.168495][T19771] tipc: Node identity aaaaaaaaaa1a, cluster identity 4711 [ 422.171205][ T2214] block nbd2: Possible stuck request ffff888026fc0380: control (read@2048,1024B). Runtime 210 seconds [ 422.192052][ T2214] block nbd2: Possible stuck request ffff888026fc0540: control (read@3072,1024B). Runtime 210 seconds [ 422.204934][T19771] tipc: Enabled bearer , priority 0 [ 422.279291][T19757] syzkaller1: entered allmulticast mode [ 422.314175][T19774] tipc: Enabling of bearer rejected, failed to enable media [ 422.538346][ T10] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 422.552807][T19788] netlink: 4 bytes leftover after parsing attributes in process `syz.4.3677'. [ 422.593272][T19788] netlink: 4 bytes leftover after parsing attributes in process `syz.4.3677'. [ 422.675203][T19787] pim6reg: entered allmulticast mode [ 422.703056][T19794] netlink: 32 bytes leftover after parsing attributes in process `syz.2.3679'. [ 422.706880][T19793] netlink: 68 bytes leftover after parsing attributes in process `syz.6.3678'. [ 422.722963][T19795] pim6reg: left allmulticast mode [ 422.812348][T19794] netlink: 8 bytes leftover after parsing attributes in process `syz.2.3679'. [ 423.051836][T19804] netlink: 44 bytes leftover after parsing attributes in process `syz.4.3682'. [ 423.108578][T19807] netlink: 'syz.1.3684': attribute type 39 has an invalid length. [ 423.262193][T19809] tipc: New replicast peer: 255.255.255.255 [ 423.274141][T19809] tipc: Enabled bearer , priority 10 [ 423.428551][ T2214] block nbd0: Possible stuck request ffff888026f27000: control (read@0,1024B). Runtime 90 seconds [ 423.446416][ T2214] block nbd0: Possible stuck request ffff888026f271c0: control (read@1024,1024B). Runtime 90 seconds [ 423.458726][ T2214] block nbd0: Possible stuck request ffff888026f27380: control (read@2048,1024B). Runtime 90 seconds [ 423.471915][ T2214] block nbd0: Possible stuck request ffff888026f27540: control (read@3072,1024B). Runtime 90 seconds [ 423.579751][ T5733] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 423.588612][ T1230] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 423.629852][T19827] netlink: 'syz.1.3690': attribute type 12 has an invalid length. [ 423.756098][T19826] syzkaller0: entered promiscuous mode [ 423.778397][T19826] syzkaller0: entered allmulticast mode [ 424.006597][T19812] netlink: 4 bytes leftover after parsing attributes in process `syz.2.3686'. [ 424.016640][T19837] netlink: 4 bytes leftover after parsing attributes in process `syz.1.3694'. [ 424.087017][T19817] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 424.113535][T19817] openvswitch: netlink: EtherType 50a is less than min 600 [ 424.623348][ T10] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 424.666160][ T1230] tipc: Node number set to 11578026 [ 425.185987][T19873] xt_recent: Unsupported userspace flags (000000b1) [ 425.288642][T19875] syz.4.3703: vmalloc error: size 8589938688, exceeds total pages, mode:0xdc0(GFP_KERNEL|__GFP_ZERO), nodemask=(null),cpuset=/,mems_allowed=0-1 [ 425.321072][T19875] CPU: 0 UID: 0 PID: 19875 Comm: syz.4.3703 Not tainted syzkaller #0 PREEMPT(full) [ 425.321097][T19875] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 04/18/2026 [ 425.321114][T19875] Call Trace: [ 425.321124][T19875] [ 425.321134][T19875] dump_stack_lvl+0xe8/0x150 [ 425.321163][T19875] warn_alloc+0x249/0x340 [ 425.321194][T19875] ? stack_trace_save+0xa9/0x100 [ 425.321227][T19875] ? __pfx_warn_alloc+0x10/0x10 [ 425.321264][T19875] ? kasan_save_track+0x4f/0x80 [ 425.321289][T19875] ? kasan_save_track+0x3e/0x80 [ 425.321314][T19875] ? __kasan_kmalloc+0x93/0xb0 [ 425.321340][T19875] ? __kmalloc_cache_noprof+0x31c/0x660 [ 425.321366][T19875] ? xskq_create+0x56/0x170 [ 425.321391][T19875] ? xsk_setsockopt+0x54c/0x990 [ 425.321412][T19875] ? do_sock_setsockopt+0x17c/0x1b0 [ 425.321438][T19875] ? __x64_sys_setsockopt+0x13d/0x1b0 [ 425.321463][T19875] ? do_syscall_64+0x15f/0xf80 [ 425.321495][T19875] __vmalloc_node_range_noprof+0x132/0x1750 [ 425.321557][T19875] ? __pfx___vmalloc_node_range_noprof+0x10/0x10 [ 425.321591][T19875] ? __kasan_kmalloc+0x93/0xb0 [ 425.321624][T19875] vmalloc_user_noprof+0xad/0xe0 [ 425.321652][T19875] ? xskq_create+0xbf/0x170 [ 425.321677][T19875] xskq_create+0xbf/0x170 [ 425.321702][T19875] xsk_init_queue+0x8a/0xe0 [ 425.321725][T19875] xsk_setsockopt+0x54c/0x990 [ 425.321750][T19875] ? __pfx_xsk_setsockopt+0x10/0x10 [ 425.321773][T19875] ? __pfx_aa_sk_perm+0x10/0x10 [ 425.321808][T19875] ? aa_sock_opt_perm+0xff/0x1a0 [ 425.321839][T19875] ? bpf_lsm_socket_setsockopt+0x9/0x20 [ 425.321865][T19875] ? __pfx_xsk_setsockopt+0x10/0x10 [ 425.321890][T19875] do_sock_setsockopt+0x17c/0x1b0 [ 425.321920][T19875] __x64_sys_setsockopt+0x13d/0x1b0 [ 425.321949][T19875] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 425.321972][T19875] do_syscall_64+0x15f/0xf80 [ 425.321998][T19875] ? trace_irq_disable+0x3b/0x140 [ 425.322028][T19875] ? clear_bhb_loop+0x40/0x90 [ 425.322052][T19875] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 425.322072][T19875] RIP: 0033:0x7f56ef79cdd9 [ 425.322092][T19875] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 425.322110][T19875] RSP: 002b:00007f56f05c7028 EFLAGS: 00000246 ORIG_RAX: 0000000000000036 [ 425.322132][T19875] RAX: ffffffffffffffda RBX: 00007f56efa16090 RCX: 00007f56ef79cdd9 [ 425.322147][T19875] RDX: 0000000000000006 RSI: 000000000000011b RDI: 0000000000000008 [ 425.322160][T19875] RBP: 00007f56ef832d69 R08: 0000000000000004 R09: 0000000000000000 [ 425.322173][T19875] R10: 0000200000000000 R11: 0000000000000246 R12: 0000000000000000 [ 425.322186][T19875] R13: 00007f56efa16128 R14: 00007f56efa16090 R15: 00007ffff660ae38 [ 425.322220][T19875] [ 425.322374][T19875] Mem-Info: [ 425.668121][T19875] active_anon:7040 inactive_anon:0 isolated_anon:0 [ 425.668121][T19875] active_file:3018 inactive_file:40100 isolated_file:0 [ 425.668121][T19875] unevictable:768 dirty:68 writeback:0 [ 425.668121][T19875] slab_reclaimable:11823 slab_unreclaimable:119550 [ 425.668121][T19875] mapped:40720 shmem:1295 pagetables:1368 [ 425.668121][T19875] sec_pagetables:0 bounce:0 [ 425.668121][T19875] kernel_misc_reclaimable:0 [ 425.668121][T19875] free:1271835 free_pcp:12361 free_cma:0 [ 425.720379][T19875] Node 0 active_anon:28160kB inactive_anon:0kB active_file:12072kB inactive_file:160196kB unevictable:1536kB isolated(anon):0kB isolated(file):0kB mapped:162880kB dirty:272kB writeback:0kB shmem:3644kB shmem_thp:0kB shmem_pmdmapped:0kB anon_thp:0kB kernel_stack:16244kB pagetables:5324kB sec_pagetables:0kB all_unreclaimable? no Balloon:0kB gpu_active:0kB gpu_reclaim:0kB [ 425.729091][ T5733] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 425.757820][T19875] Node 1 active_anon:0kB inactive_anon:0kB active_file:0kB inactive_file:204kB unevictable:1536kB isolated(anon):0kB isolated(file):0kB mapped:0kB dirty:0kB writeback:0kB shmem:1536kB shmem_thp:0kB shmem_pmdmapped:0kB anon_thp:0kB kernel_stack:32kB pagetables:148kB sec_pagetables:0kB all_unreclaimable? no Balloon:0kB gpu_active:0kB gpu_reclaim:0kB [ 425.822295][T19885] __nla_validate_parse: 5 callbacks suppressed [ 425.822314][T19885] netlink: 8 bytes leftover after parsing attributes in process `syz.2.3706'. [ 425.861294][T19875] Node 0 DMA free:15360kB boost:0kB min:208kB low:260kB high:312kB reserved_highatomic:0KB free_highatomic:0KB active_anon:0kB inactive_anon:0kB active_file:0kB inactive_file:0kB unevictable:0kB writepending:0kB zspages:0kB present:15992kB managed:15360kB mlocked:0kB bounce:0kB free_pcp:0kB local_pcp:0kB free_cma:0kB [ 425.918937][T19875] lowmem_reserve[]: 0 2492 2493 2493 2493 [ 425.920909][T19889] netlink: 16 bytes leftover after parsing attributes in process `syz.1.3709'. [ 425.926441][T19875] Node 0 DMA32 free:1136260kB boost:0kB min:34188kB low:42732kB high:51276kB reserved_highatomic:0KB free_highatomic:0KB active_anon:28444kB inactive_anon:0kB active_file:12072kB inactive_file:160196kB unevictable:1536kB writepending:272kB zspages:0kB present:3129332kB managed:2552620kB mlocked:0kB bounce:0kB free_pcp:45256kB local_pcp:25876kB free_cma:0kB [ 425.980475][T19875] lowmem_reserve[]: 0 0 0 0 0 [ 425.986151][T19875] Node 0 Normal free:0kB boost:0kB min:8kB low:8kB high:8kB reserved_highatomic:0KB free_highatomic:0KB active_anon:0kB inactive_anon:0kB active_file:0kB inactive_file:0kB unevictable:0kB writepending:0kB zspages:0kB present:1048580kB managed:668kB mlocked:0kB bounce:0kB free_pcp:4kB local_pcp:4kB free_cma:0kB [ 426.028056][T19875] lowmem_reserve[]: 0 0 0 0 0 [ 426.031434][ T10] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 426.033164][T19875] Node 1 Normal free:3939136kB boost:0kB min:55704kB low:69628kB high:83552kB reserved_highatomic:0KB free_highatomic:0KB active_anon:0kB inactive_anon:0kB active_file:0kB inactive_file:204kB unevictable:1536kB writepending:0kB zspages:0kB present:4194300kB managed:4111100kB mlocked:0kB bounce:0kB free_pcp:0kB local_pcp:0kB free_cma:0kB [ 426.124599][T19875] lowmem_reserve[]: 0 0 0 0 0 [ 426.177728][T19875] Node 0 DMA: 0*4kB 0*8kB 0*16kB 0*32kB 0*64kB 0*128kB 0*256kB 0*512kB 1*1024kB (U) 1*2048kB (M) 3*4096kB (M) = 15360kB [ 426.204323][T19875] Node 0 DMA32: 5390*4kB (UM) 4578*8kB (UM) 1622*16kB (UME) 388*32kB (UM) 87*64kB (UME) 20*128kB (UM) 71*256kB (UME) 108*512kB (UME) 68*1024kB (UM) 26*2048kB (UM) 204*4096kB (M) = 1136616kB [ 426.231629][T19875] Node 0 Normal: 0*4kB 0*8kB 0*16kB 0*32kB 0*64kB 0*128kB 0*256kB 0*512kB 0*1024kB 0*2048kB 0*4096kB = 0kB [ 426.262685][T19894] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check. [ 426.278256][T19875] Node 1 Normal: 0*4kB 2*8kB (UM) 5*16kB (UM) 5*32kB (UM) 7*64kB (UM) 3*128kB (UM) 3*256kB (UM) 2*512kB (M) 2*1024kB (UM) 1*2048kB (U) 960*4096kB (UM) = 3939136kB [ 426.297389][T19875] Node 0 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=1048576kB [ 426.335024][T19898] syzkaller0: entered promiscuous mode [ 426.340831][T19875] Node 0 hugepages_total=2 hugepages_free=2 hugepages_surp=0 hugepages_size=2048kB [ 426.340858][T19875] Node 1 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=1048576kB [ 426.340876][T19875] Node 1 hugepages_total=2 hugepages_free=2 hugepages_surp=0 hugepages_size=2048kB [ 426.340894][T19875] 44409 total pagecache pages [ 426.340923][T19875] 0 pages in swap cache [ 426.340932][T19875] Free swap = 124996kB [ 426.340941][T19875] Total swap = 124996kB [ 426.340952][T19875] 2097051 pages RAM [ 426.340960][T19875] 0 pages HighMem/MovableOnly [ 426.340969][T19875] 427114 pages reserved [ 426.340978][T19875] 0 pages cma reserved [ 426.450681][T19898] syzkaller0: entered allmulticast mode [ 426.463477][T19901] netlink: 'syz.1.3714': attribute type 83 has an invalid length. [ 426.492467][T19896] syzkaller0: entered promiscuous mode [ 426.504510][T19896] syzkaller0: entered allmulticast mode [ 426.626514][ T1230] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 426.799832][ T5733] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 426.891722][T19923] netlink: 8 bytes leftover after parsing attributes in process `syz.1.3718'. [ 426.906001][T19919] netlink: 24 bytes leftover after parsing attributes in process `syz.2.3716'. [ 426.921744][T19924] netlink: 8 bytes leftover after parsing attributes in process `syz.1.3718'. [ 426.943043][T19923] netlink: 12 bytes leftover after parsing attributes in process `syz.1.3718'. [ 426.983116][T19924] netlink: 12 bytes leftover after parsing attributes in process `syz.1.3718'. [ 427.103963][T19932] lo: entered allmulticast mode [ 427.103999][T19923] netlink: 8 bytes leftover after parsing attributes in process `syz.1.3718'. [ 427.104018][T19923] netlink: 12 bytes leftover after parsing attributes in process `syz.1.3718'. [ 427.134630][ T3303] netdevsim netdevsim1 netdevsim0: set [0, 0] type 1 family 0 port 8472 - 0 [ 427.146338][ T3303] netdevsim netdevsim1 netdevsim1: set [0, 0] type 1 family 0 port 8472 - 0 [ 427.155533][T19924] netlink: 8 bytes leftover after parsing attributes in process `syz.1.3718'. [ 427.250245][ T3303] netdevsim netdevsim1 netdevsim2: set [0, 0] type 1 family 0 port 8472 - 0 [ 427.272354][ T10] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 427.287216][T19928] lo: left allmulticast mode [ 427.320118][ T3303] netdevsim netdevsim1 netdevsim3: set [0, 0] type 1 family 0 port 8472 - 0 [ 427.818643][ T5733] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 428.216739][T19975] netlink: 'syz.6.3731': attribute type 1 has an invalid length. [ 428.766099][ T5726] IPVS: starting estimator thread 0... [ 428.868086][T20003] IPVS: using max 32 ests per chain, 76800 per kthread [ 428.869056][ T10] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 428.909943][T20006] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 429.060227][T20008] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check. [ 429.077033][ T5726] lo speed is unknown, defaulting to 1000 [ 430.264364][T20048] netlink: 'syz.1.3757': attribute type 13 has an invalid length. [ 430.327099][T20048] netlink: 'syz.1.3757': attribute type 13 has an invalid length. [ 430.337534][T20050] ±ÿª¨úrBº“: renamed from lo (while UP) [ 430.831080][T20065] bond6: option packets_per_slave: invalid value (18446744073709551615) [ 430.910237][T20065] bond6: option packets_per_slave: allowed values 0 - 65535 [ 430.940448][ T5733] net_ratelimit: 3 callbacks suppressed [ 430.940477][ T5733] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 431.004856][T20065] bond6 (unregistering): Released all slaves [ 431.206729][T20082] __nla_validate_parse: 12 callbacks suppressed [ 431.206749][T20082] netlink: 32 bytes leftover after parsing attributes in process `syz.4.3764'. [ 431.228131][T20082] bridge: RTM_NEWNEIGH with invalid ether address [ 431.235239][T20083] netlink: 32 bytes leftover after parsing attributes in process `syz.4.3764'. [ 431.271437][T20083] bridge: RTM_NEWNEIGH with invalid ether address [ 431.370876][T20093] IPVS: ip_vs_add_dest(): lower threshold is higher than upper threshold [ 431.692482][T20105] vlan3: entered allmulticast mode [ 431.708003][T20105] bond0: entered allmulticast mode [ 431.865051][T20111] netlink: 7064 bytes leftover after parsing attributes in process `syz.1.3773'. [ 431.908084][T20111] openvswitch: netlink: Missing key (keys=40, expected=10000000) [ 431.988280][ T10] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 432.195292][T20126] netlink: 'syz.4.3778': attribute type 21 has an invalid length. [ 432.234511][T20126] netlink: 132 bytes leftover after parsing attributes in process `syz.4.3778'. [ 432.265439][T20129] netlink: 'syz.4.3778': attribute type 3 has an invalid length. [ 432.343528][T20134] ±ÿª¨úrBº“: entered allmulticast mode [ 432.365563][T20135] netlink: 'syz.5.3780': attribute type 1 has an invalid length. [ 432.425308][T20134] netlink: 12 bytes leftover after parsing attributes in process `syz.6.3781'. [ 432.502670][T20139] netlink: 8 bytes leftover after parsing attributes in process `syz.4.3782'. [ 432.675137][T20144] netlink: 8 bytes leftover after parsing attributes in process `syz.4.3782'. [ 432.688821][T20133] ±ÿª¨úrBº“: left allmulticast mode [ 432.701478][ T1230] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 432.763771][T20146] lo speed is unknown, defaulting to 1000 [ 432.798849][T20147] netlink: 45349 bytes leftover after parsing attributes in process `syz.5.3783'. [ 432.802006][T20146] ±ÿª¨úrBº“ speed is unknown, defaulting to 1000 [ 432.919927][T20147] 0ªX¹¦Dö»: renamed from gretap0 (while UP) [ 432.954523][T20147] 0ªX¹¦Dö»: entered allmulticast mode [ 433.024397][ T10] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 433.433824][T20169] tipc: Started in network mode [ 433.463252][T20169] tipc: Node identity 865b5234e897, cluster identity 4711 [ 433.523068][T20169] tipc: Enabled bearer , priority 0 [ 433.538300][T20174] netlink: 12 bytes leftover after parsing attributes in process `syz.2.3791'. [ 433.970091][T20195] rdma_rxe: rxe_newlink: rxe creation allowed on top of a real device only [ 434.058784][ T5733] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 434.096418][T20170] syzkaller0: entered promiscuous mode [ 434.121050][T20170] syzkaller0: entered allmulticast mode [ 434.130339][T20170] tipc: Resetting bearer [ 434.179246][T20197] netlink: 'syz.4.3795': attribute type 10 has an invalid length. [ 434.196837][T20167] tipc: Resetting bearer [ 434.208468][T20197] netlink: 40 bytes leftover after parsing attributes in process `syz.4.3795'. [ 434.301394][ T5733] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 434.314974][ T2214] block nbd1: Possible stuck request ffff888026f50000: control (read@0,1024B). Runtime 300 seconds [ 434.327440][ T2214] block nbd1: Possible stuck request ffff888026f501c0: control (read@1024,1024B). Runtime 300 seconds [ 434.353736][ T2214] block nbd1: Possible stuck request ffff888026f50380: control (read@2048,1024B). Runtime 300 seconds [ 434.366417][ T2214] block nbd1: Possible stuck request ffff888026f50540: control (read@3072,1024B). Runtime 300 seconds [ 435.125306][ T809] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 435.751015][ T24] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 436.156003][ T809] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 437.030651][ T5642] Bluetooth: hci1: command 0x0406 tx timeout [ 437.188708][ T809] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 438.236925][ T809] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 438.416643][T20167] tipc: Disabling bearer [ 438.437259][T20197] dummy0: entered promiscuous mode [ 438.443378][T20197] bridge0: port 3(dummy0) entered blocking state [ 438.450729][T20197] bridge0: port 3(dummy0) entered disabled state [ 438.457372][T20197] dummy0: entered allmulticast mode [ 438.530290][ T5826] tipc: Node number set to 1858884148 [ 438.810574][ T5719] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 439.259778][ T10] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 439.623908][T20250] netem: change failed [ 439.655893][T20250] netlink: 8 bytes leftover after parsing attributes in process `syz.2.3811'. [ 439.749600][T20258] netlink: 'syz.6.3813': attribute type 11 has an invalid length. [ 439.777922][T20258] netlink: 199820 bytes leftover after parsing attributes in process `syz.6.3813'. [ 440.076108][ T1312] ieee802154 phy0 wpan0: encryption failed: -22 [ 440.076270][ T10] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 440.083292][ T1312] ieee802154 phy1 wpan1: encryption failed: -22 [ 440.308283][ T10] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 440.372931][T20279] openvswitch: netlink: Missing valid actions attribute. [ 440.399978][T20279] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 440.449649][T20290] netlink: 40 bytes leftover after parsing attributes in process `syz.6.3821'. [ 440.699416][T20294] bond6 (unregistering): Released all slaves [ 440.731092][T20302] xt_TCPMSS: path-MTU clamping only supported in FORWARD, OUTPUT and POSTROUTING hooks [ 440.742228][T20305] xt_TCPMSS: path-MTU clamping only supported in FORWARD, OUTPUT and POSTROUTING hooks [ 440.755996][T20304] netlink: 28 bytes leftover after parsing attributes in process `syz.5.3822'. [ 440.776048][T20302] xt_hashlimit: size too large, truncated to 1048576 [ 440.923671][T20300] netlink: 'syz.2.3825': attribute type 20 has an invalid length. [ 440.960531][T20300] netlink: 4 bytes leftover after parsing attributes in process `syz.2.3825'. [ 441.094710][T20309] gretap1: entered promiscuous mode [ 441.117320][T20309] batman_adv: batadv0: Adding interface: gretap1 [ 441.127079][T20309] batman_adv: batadv0: The MTU of interface gretap1 is too small (1462) to handle the transport of batman-adv packets. If you experience problems getting traffic through try increasing the MTU to 1500. [ 441.154417][T20309] batman_adv: batadv0: Not using interface gretap1 (retrying later): interface not active [ 441.180300][T20315] syzkaller1: entered promiscuous mode [ 441.186862][T20315] syzkaller1: entered allmulticast mode [ 441.339916][ T10] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 441.352603][ T809] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 441.392667][T20297] syzkaller0: entered promiscuous mode [ 441.400581][T20297] syzkaller0: entered allmulticast mode [ 441.445467][T20300] netlink: 'syz.2.3825': attribute type 20 has an invalid length. [ 441.466144][T20300] netlink: 4 bytes leftover after parsing attributes in process `syz.2.3825'. [ 441.819865][ T5826] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 442.150526][T20271] Bluetooth: hci3: command 0x0406 tx timeout [ 442.396750][ T10] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 443.430619][ T10] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 444.479291][ T10] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 444.878983][ T5719] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 445.453991][ T82] netdevsim netdevsim2 netdevsim0: set [0, 0] type 1 family 0 port 8472 - 0 [ 445.463816][ T82] netdevsim netdevsim2 netdevsim1: set [0, 0] type 1 family 0 port 8472 - 0 [ 445.477226][ T82] netdevsim netdevsim2 netdevsim2: set [0, 0] type 1 family 0 port 8472 - 0 [ 445.499806][ T809] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 445.514100][ T82] netdevsim netdevsim2 netdevsim3: set [0, 0] type 1 family 0 port 8472 - 0 [ 445.679904][T20340] netlink: 36 bytes leftover after parsing attributes in process `syz.2.3833'. [ 445.705112][T20342] netlink: 'syz.1.3834': attribute type 2 has an invalid length. [ 445.791882][T20346] netlink: 'syz.5.3835': attribute type 1 has an invalid length. [ 445.845076][T20349] netlink: 8 bytes leftover after parsing attributes in process `syz.5.3835'. [ 445.943148][T20346] 8021q: adding VLAN 0 to HW filter on device bond6 [ 445.974536][T20349] bond6: up delay (136) is not a multiple of miimon (100), value rounded to 100 ms [ 445.995227][T20344] netlink: 28 bytes leftover after parsing attributes in process `syz.4.3832'. [ 446.043583][T20349] bond6: entered allmulticast mode [ 446.134273][T20355] bond6: (slave ip6gretap2): Enslaving as an active interface with an up link [ 446.187242][T20344] openvswitch: netlink: Duplicate key (type 2). [ 446.427239][T20378] netlink: 24 bytes leftover after parsing attributes in process `syz.6.3842'. [ 446.473074][T20378] netlink: 'syz.6.3842': attribute type 1 has an invalid length. [ 446.538594][ T809] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 446.842612][T20393] netlink: 'syz.4.3846': attribute type 2 has an invalid length. [ 446.931680][T20386] syzkaller0: entered promiscuous mode [ 446.952548][T20386] syzkaller0: entered allmulticast mode [ 447.020878][T20402] sctp: [Deprecated]: syz.6.3849 (pid 20402) Use of struct sctp_assoc_value in delayed_ack socket option. [ 447.020878][T20402] Use struct sctp_sack_info instead [ 447.081805][T20402] netlink: 4 bytes leftover after parsing attributes in process `syz.6.3849'. [ 447.352496][T20413] netlink: 104 bytes leftover after parsing attributes in process `syz.6.3849'. [ 447.594666][ T10] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 447.904128][ T5719] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 448.393562][ T10] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 448.628925][ T10] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 449.678175][ T10] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 450.727801][ T10] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 450.981046][ T5826] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 451.511251][T20419] RDS: rds_bind could not find a transport for 400:0:1200:0:1030:0:ffff:ffff, load rds_tcp or rds_rdma? [ 451.765503][ T10] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 451.823955][T20427] netlink: 12 bytes leftover after parsing attributes in process `syz.1.3855'. [ 451.881318][T20436] netlink: 8 bytes leftover after parsing attributes in process `syz.2.3859'. [ 452.136355][T20445] netlink: 4 bytes leftover after parsing attributes in process `syz.5.3861'. [ 452.192277][T20447] netlink: 'syz.2.3863': attribute type 1 has an invalid length. [ 452.205313][T20447] netlink: 224 bytes leftover after parsing attributes in process `syz.2.3863'. [ 452.218723][ T2214] block nbd2: Possible stuck request ffff888026fc0000: control (read@0,1024B). Runtime 240 seconds [ 452.231967][ T2214] block nbd2: Possible stuck request ffff888026fc01c0: control (read@1024,1024B). Runtime 240 seconds [ 452.244259][ T2214] block nbd2: Possible stuck request ffff888026fc0380: control (read@2048,1024B). Runtime 240 seconds [ 452.258118][ T2214] block nbd2: Possible stuck request ffff888026fc0540: control (read@3072,1024B). Runtime 240 seconds [ 452.546341][T20464] gtp1: entered promiscuous mode [ 452.555396][T20464] gtp1: entered allmulticast mode [ 452.781411][ T10] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 452.893924][T20467] gtp2: entered promiscuous mode [ 452.909319][T20467] gtp2: entered allmulticast mode [ 453.229753][T20487] netlink: 212408 bytes leftover after parsing attributes in process `syz.4.3873'. [ 453.498789][ T2214] block nbd0: Possible stuck request ffff888026f27000: control (read@0,1024B). Runtime 120 seconds [ 453.513832][ T2214] block nbd0: Possible stuck request ffff888026f271c0: control (read@1024,1024B). Runtime 120 seconds [ 453.526571][ T2214] block nbd0: Possible stuck request ffff888026f27380: control (read@2048,1024B). Runtime 120 seconds [ 453.542787][ T2214] block nbd0: Possible stuck request ffff888026f27540: control (read@3072,1024B). Runtime 120 seconds [ 453.818666][ T10] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 453.954069][ T8526] netdevsim netdevsim4 netdevsim0: set [0, 0] type 1 family 0 port 8472 - 0 [ 453.983993][ T8526] netdevsim netdevsim4 netdevsim1: set [0, 0] type 1 family 0 port 8472 - 0 [ 454.038227][ T8526] netdevsim netdevsim4 netdevsim2: set [0, 0] type 1 family 0 port 8472 - 0 [ 454.058491][ T5719] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 454.071485][ T8526] netdevsim netdevsim4 netdevsim3: set [0, 0] type 1 family 0 port 8472 - 0 [ 454.114516][T20515] x_tables: duplicate underflow at hook 2 [ 454.144302][ T809] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 454.313950][T20525] IPVS: ovf: SCTP 172.20.20.187:0 - no destination available [ 454.389644][T20525] netlink: 4 bytes leftover after parsing attributes in process `syz.4.3888'. [ 454.614022][T20537] veth0: entered promiscuous mode [ 454.669033][T20537] netlink: 190972 bytes leftover after parsing attributes in process `syz.1.3891'. [ 454.687503][T20542] bond0: Caught tx_queue_len zero misconfig [ 454.735136][T20542] netlink: 36 bytes leftover after parsing attributes in process `syz.6.3893'. [ 454.766850][T20542] openvswitch: netlink: Flow key attr not present in new flow. [ 454.859352][T20535] veth0: left promiscuous mode [ 454.864467][ T5733] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 454.954282][T20549] netlink: 4 bytes leftover after parsing attributes in process `syz.5.3896'. [ 454.980365][T20547] bridge_slave_0: left allmulticast mode [ 455.023406][T20547] bridge_slave_0: left promiscuous mode [ 455.055133][T20547] bridge0: port 1(bridge_slave_0) entered disabled state [ 455.099208][T20547] bridge_slave_1: left allmulticast mode [ 455.104906][T20547] bridge_slave_1: left promiscuous mode [ 455.180893][T20558] xt_socket: unknown flags 0xe4 [ 455.221418][T20547] bridge0: port 2(bridge_slave_1) entered disabled state [ 455.282195][T20550] block nbd3: server does not support multiple connections per device. [ 455.332024][T20547] bond0: (slave bond_slave_0): Releasing backup interface [ 455.360487][T20550] block nbd3: shutting down sockets [ 455.387145][T20547] bond0: (slave bond_slave_1): Releasing backup interface [ 455.436003][T20547] team0: Port device team_slave_0 removed [ 455.443630][ T5733] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 455.473819][T20547] team0: Port device team_slave_1 removed [ 455.491495][T20547] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 455.516441][T20547] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 455.537419][T20547] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 455.546096][T20547] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 455.557534][T20547] A link change request failed with some changes committed already. Interface hsr_slave_0 may have been left with an inconsistent configuration, please check. [ 455.598044][T20576] netlink: 'syz.6.3904': attribute type 1 has an invalid length. [ 455.994060][T20590] netlink: 'syz.1.3905': attribute type 16 has an invalid length. [ 456.186907][T20606] netlink: 'syz.6.3911': attribute type 1 has an invalid length. [ 456.473099][T20615] netlink: 32 bytes leftover after parsing attributes in process `syz.1.3913'. [ 456.574054][T20600] syzkaller0: entered promiscuous mode [ 456.598862][T20600] syzkaller0: entered allmulticast mode [ 456.941327][ T5733] net_ratelimit: 1 callbacks suppressed [ 456.941360][ T5733] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 457.057947][ C0] vcan0: j1939_tp_rxtimer: 0xffff888058820c00: rx timeout, send abort [ 457.099976][ T5719] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 457.551873][ C0] vcan0: j1939_tp_rxtimer: 0xffff88805ab85000: rx timeout, send abort [ 457.567053][ C0] vcan0: j1939_tp_rxtimer: 0xffff888058820c00: abort rx timeout. Force session deactivation [ 458.003400][ T5733] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 458.070737][ C0] vcan0: j1939_tp_rxtimer: 0xffff88805ab85000: abort rx timeout. Force session deactivation [ 458.210043][T20653] netlink: 'syz.4.3924': attribute type 18 has an invalid length. [ 459.028116][ T5733] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 460.062796][ T10] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 460.149549][ T24] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 461.101421][ T10] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 461.222372][T20660] __nla_validate_parse: 3 callbacks suppressed [ 461.222392][T20660] netlink: 112 bytes leftover after parsing attributes in process `syz.2.3927'. [ 461.343697][T20659] ip6_tunnel: non-ECT from fe88:a43d:e1a4:0000:0000:0000:0000:7d01 with DS=0x2 [ 461.826575][T20690] netlink: 48 bytes leftover after parsing attributes in process `syz.1.3936'. [ 462.151956][ T5733] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 462.161566][T20691] syzkaller0: entered promiscuous mode [ 462.175005][T20691] syzkaller0: entered allmulticast mode [ 462.469298][ T5733] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 462.492104][ T149] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 462.628939][T20271] Bluetooth: hci4: command 0x0406 tx timeout [ 462.698942][T20725] netlink: 24 bytes leftover after parsing attributes in process `syz.6.3946'. [ 463.178133][ T5719] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 463.186307][ T5719] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 464.244091][ T10] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 464.390475][ T2214] block nbd1: Possible stuck request ffff888026f50000: control (read@0,1024B). Runtime 330 seconds [ 464.402266][ T2214] block nbd1: Possible stuck request ffff888026f501c0: control (read@1024,1024B). Runtime 330 seconds [ 464.419277][ T2214] block nbd1: Possible stuck request ffff888026f50380: control (read@2048,1024B). Runtime 330 seconds [ 464.431863][ T2214] block nbd1: Possible stuck request ffff888026f50540: control (read@3072,1024B). Runtime 330 seconds [ 465.268813][ T10] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 465.681881][ T24] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 466.312405][ T809] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 466.885133][T20735] vti0: entered allmulticast mode [ 467.161925][T20742] netlink: 'syz.5.3950': attribute type 11 has an invalid length. [ 467.187526][T20741] netlink: 'syz.4.3952': attribute type 1 has an invalid length. [ 467.219840][T20741] netlink: 'syz.4.3952': attribute type 3 has an invalid length. [ 467.244982][T20741] netlink: 224 bytes leftover after parsing attributes in process `syz.4.3952'. [ 467.360192][ T10] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 467.423483][T20757] syzkaller0: entered promiscuous mode [ 467.452969][T20757] syzkaller0: entered allmulticast mode [ 467.581361][ T8528] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 467.645682][T20769] netlink: 28 bytes leftover after parsing attributes in process `syz.4.3958'. [ 467.659659][T20762] tc_dump_action: action bad kind [ 467.740166][T20770] netlink: 8 bytes leftover after parsing attributes in process `syz.4.3958'. [ 467.895700][T20770] bond1: Unable to set up delay as MII monitoring is disabled [ 467.910642][T20770] bond1 (unregistering): Released all slaves [ 468.121016][T20783] syzkaller0: entered promiscuous mode [ 468.143135][T20783] syzkaller0: entered allmulticast mode [ 468.219751][ T10] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 468.379437][ T5733] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 468.674138][T20800] openvswitch: netlink: IP tunnel dst address not specified [ 468.698668][ T24] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 468.880125][T20809] xt_CT: You must specify a L4 protocol and not use inversions on it [ 469.060131][T20818] netlink: 40 bytes leftover after parsing attributes in process `syz.4.3969'. [ 469.184314][T20820] netlink: 32 bytes leftover after parsing attributes in process `syz.2.3970'. [ 469.212560][T20823] netlink: 8 bytes leftover after parsing attributes in process `syz.6.3971'. [ 469.259980][T20823] batman_adv: Cannot find parent device. Skipping batadv-on-batadv check for gretap2 [ 469.293427][T20823] gretap2: default qdisc (pfifo_fast) fail, fallback to noqueue [ 469.321281][T20823] gretap2: entered promiscuous mode [ 469.330644][T20823] gretap2: entered allmulticast mode [ 469.381401][T20826] syzkaller0: entered promiscuous mode [ 469.389573][T20835] netlink: 12 bytes leftover after parsing attributes in process `syz.4.3974'. [ 469.403613][T20826] syzkaller0: entered allmulticast mode [ 469.419007][ T10] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 469.506822][T20835] 8021q: adding VLAN 0 to HW filter on device bond1 [ 469.591772][T20845] netlink: 'syz.2.3976': attribute type 4 has an invalid length. [ 469.602543][T20840] macvlan2: entered promiscuous mode [ 469.612275][T20840] macvlan2: entered allmulticast mode [ 469.621716][T20840] bond1: entered promiscuous mode [ 469.628560][T20840] 8021q: adding VLAN 0 to HW filter on device macvlan2 [ 469.643434][T20840] bond1: left promiscuous mode [ 469.697342][T20838] tipc: MTU too low for tipc bearer [ 469.916482][T20852] netlink: 'syz.6.3978': attribute type 1 has an invalid length. [ 470.084322][T20852] 8021q: adding VLAN 0 to HW filter on device bond3 [ 470.171229][T20871] nci: __nci_request: wait_for_completion_interruptible_timeout failed -512 [ 470.312275][T20872] bond3: (slave geneve2): making interface the new active one [ 470.353168][T20872] bond3: (slave geneve2): Enslaving as an active interface with an up link [ 470.459413][ T809] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 470.531029][T20882] 8021q: VLANs not supported on lo [ 470.885382][T20900] syzkaller0: entered promiscuous mode [ 470.903202][T20900] syzkaller0: entered allmulticast mode [ 470.937025][T20903] xt_TCPMSS: Only works on TCP SYN packets [ 471.041714][T20905] netlink: 8 bytes leftover after parsing attributes in process `syz.2.3992'. [ 471.215087][T20913] netlink: 'syz.1.3995': attribute type 1 has an invalid length. [ 471.241552][T20909] bond7 (unregistering): Released all slaves [ 471.351831][T20926] FAULT_INJECTION: forcing a failure. [ 471.351831][T20926] name failslab, interval 1, probability 0, space 0, times 0 [ 471.389822][T20926] CPU: 1 UID: 0 PID: 20926 Comm: syz.1.3995 Not tainted syzkaller #0 PREEMPT(full) [ 471.389847][T20926] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 04/18/2026 [ 471.389859][T20926] Call Trace: [ 471.389866][T20926] [ 471.389874][T20926] dump_stack_lvl+0xe8/0x150 [ 471.389901][T20926] should_fail_ex+0x412/0x560 [ 471.389930][T20926] should_failslab+0xa8/0x100 [ 471.389958][T20926] kmem_cache_alloc_node_noprof+0x8f/0x690 [ 471.389982][T20926] ? __alloc_skb+0x186/0x7d0 [ 471.390003][T20926] ? __alloc_skb+0x1d0/0x7d0 [ 471.390022][T20926] ? __local_bh_enable_ip+0xd0/0x130 [ 471.390044][T20926] __alloc_skb+0x1d0/0x7d0 [ 471.390065][T20926] ? bpf_lsm_socket_getpeersec_dgram+0x9/0x20 [ 471.390094][T20926] netlink_sendmsg+0x5d4/0xb40 [ 471.390131][T20926] ? __pfx_netlink_sendmsg+0x10/0x10 [ 471.390158][T20926] ? aa_sock_msg_perm+0xf1/0x1b0 [ 471.390182][T20926] ? bpf_lsm_socket_sendmsg+0x9/0x20 [ 471.390207][T20926] ____sys_sendmsg+0x972/0x9f0 [ 471.390231][T20926] ? __might_fault+0xaf/0x130 [ 471.390260][T20926] ? __pfx_____sys_sendmsg+0x10/0x10 [ 471.390293][T20926] ? import_iovec+0x73/0xa0 [ 471.390321][T20926] ___sys_sendmsg+0x2a5/0x360 [ 471.390344][T20926] ? __lock_acquire+0x6b5/0x2cf0 [ 471.390367][T20926] ? __pfx____sys_sendmsg+0x10/0x10 [ 471.390422][T20926] ? __fget_files+0x2a/0x420 [ 471.390449][T20926] ? __fget_files+0x3a0/0x420 [ 471.390479][T20926] __x64_sys_sendmsg+0x1bd/0x2a0 [ 471.390506][T20926] ? __pfx___x64_sys_sendmsg+0x10/0x10 [ 471.390539][T20926] ? __pfx_ksys_write+0x10/0x10 [ 471.390571][T20926] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 471.390590][T20926] do_syscall_64+0x15f/0xf80 [ 471.390614][T20926] ? trace_irq_disable+0x3b/0x140 [ 471.390639][T20926] ? clear_bhb_loop+0x40/0x90 [ 471.390661][T20926] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 471.390679][T20926] RIP: 0033:0x7f4e3319cdd9 [ 471.390696][T20926] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 471.390712][T20926] RSP: 002b:00007f4e33fe0028 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 471.390732][T20926] RAX: ffffffffffffffda RBX: 00007f4e33416180 RCX: 00007f4e3319cdd9 [ 471.390745][T20926] RDX: 0000000000000000 RSI: 0000200000000240 RDI: 0000000000000003 [ 471.390756][T20926] RBP: 00007f4e33fe0090 R08: 0000000000000000 R09: 0000000000000000 [ 471.390766][T20926] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 471.390777][T20926] R13: 00007f4e33416218 R14: 00007f4e33416180 R15: 00007fffd3b1d748 [ 471.390806][T20926] [ 471.648639][ T809] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 471.738630][ T5826] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 471.784963][T20913] 8021q: adding VLAN 0 to HW filter on device bond5 [ 471.824617][T20938] netlink: 780 bytes leftover after parsing attributes in process `syz.2.3996'. [ 472.350167][T20957] netlink: 'syz.2.4004': attribute type 4 has an invalid length. [ 472.369542][T20957] netlink: 'syz.2.4004': attribute type 1 has an invalid length. [ 472.410657][T20957] netlink: 228 bytes leftover after parsing attributes in process `syz.2.4004'. [ 472.563578][T20968] veth1_macvtap: entered allmulticast mode [ 472.616951][T20969] veth1_macvtap: left allmulticast mode [ 472.636445][T20966] syzkaller0: entered promiscuous mode [ 472.659964][T20966] syzkaller0: entered allmulticast mode [ 472.702831][ T809] net_ratelimit: 1 callbacks suppressed [ 472.702859][ T809] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 473.002080][T20989] vlan2: entered allmulticast mode [ 473.008123][T20989] veth1_virt_wifi: entered allmulticast mode [ 473.254854][T20993] syzkaller0: entered promiscuous mode [ 473.268522][T20993] syzkaller0: entered allmulticast mode [ 473.341679][ T8526] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 473.409613][T21004] netlink: 32 bytes leftover after parsing attributes in process `syz.1.4017'. [ 473.420682][T21005] netlink: 32 bytes leftover after parsing attributes in process `syz.1.4017'. [ 473.765327][ T10] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 474.787454][ T24] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 474.811234][ T10] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 475.281581][ T31] INFO: task syz.0.2948:16697 blocked for more than 143 seconds. [ 475.292904][ T31] Not tainted syzkaller #0 [ 475.299755][ T31] "echo 0 > /proc/sys/kernel/hung_task_timeout_secs" disables this message. [ 475.309062][ T31] task:syz.0.2948 state:D stack:27168 pid:16697 tgid:16694 ppid:15832 task_flags:0x400040 flags:0x00080002 [ 475.322435][ T31] Call Trace: [ 475.325865][ T31] [ 475.329097][ T31] __schedule+0x17b4/0x5680 [ 475.334251][ T31] ? __lock_acquire+0x6b5/0x2cf0 [ 475.339580][ T31] ? __pfx___schedule+0x10/0x10 [ 475.344657][ T31] ? schedule+0x90/0x360 [ 475.349869][ T31] schedule+0x164/0x360 [ 475.354100][ T31] schedule_preempt_disabled+0x13/0x30 [ 475.361087][ T31] __mutex_lock+0x7f7/0x1550 [ 475.366037][ T31] ? __mutex_lock+0x608/0x1550 [ 475.370917][ T31] ? nfsd_nl_version_get_doit+0x17c/0xc40 [ 475.377046][ T31] ? __pfx___mutex_lock+0x10/0x10 [ 475.382386][ T31] ? __nlmsg_put+0xef/0x1b0 [ 475.386946][ T31] ? genlmsg_put+0x137/0x2e0 [ 475.392452][ T31] nfsd_nl_version_get_doit+0x17c/0xc40 [ 475.399080][ T31] ? __nla_parse+0x40/0x60 [ 475.403564][ T31] ? __pfx_nfsd_nl_version_get_doit+0x10/0x10 [ 475.410110][ T31] ? genl_family_rcv_msg_attrs_parse+0x20b/0x2f0 [ 475.416460][ T31] ? genl_family_rcv_msg_attrs_parse+0x265/0x2f0 [ 475.418705][T20961] nci: __nci_request: wait_for_completion_interruptible_timeout failed -512 [ 475.424319][ T31] genl_family_rcv_msg_doit+0x22a/0x330 [ 475.438443][ T31] ? __asan_memcpy+0x40/0x70 [ 475.443315][ T31] ? __pfx_genl_family_rcv_msg_doit+0x10/0x10 [ 475.476216][ T31] genl_rcv_msg+0x61c/0x7a0 [ 475.481440][ T31] ? __pfx_genl_rcv_msg+0x10/0x10 [ 475.486647][ T31] ? __pfx_nfsd_nl_version_get_doit+0x10/0x10 [ 475.493812][ T31] ? __pfx_ref_tracker_free+0x10/0x10 [ 475.500142][ T31] netlink_rcv_skb+0x232/0x4b0 [ 475.505314][ T31] ? __pfx_genl_rcv_msg+0x10/0x10 [ 475.510708][ T31] ? __pfx_netlink_rcv_skb+0x10/0x10 [ 475.516403][ T31] ? down_read+0x270/0x2e0 [ 475.521734][ T31] ? genl_rcv+0xd/0x40 [ 475.537406][ T31] genl_rcv+0x28/0x40 [ 475.541681][ T31] netlink_unicast+0x75c/0x8e0 [ 475.546556][ T31] netlink_sendmsg+0x813/0xb40 [ 475.551611][ T31] ? __pfx_netlink_sendmsg+0x10/0x10 [ 475.557312][ T31] ? aa_sock_msg_perm+0xf1/0x1b0 [ 475.562557][ T31] ? bpf_lsm_socket_sendmsg+0x9/0x20 [ 475.568227][ T31] ____sys_sendmsg+0x972/0x9f0 [ 475.573115][ T31] ? __might_fault+0xaf/0x130 [ 475.581326][ T31] ? __pfx_____sys_sendmsg+0x10/0x10 [ 475.592467][ T31] ? import_iovec+0x73/0xa0 [ 475.597437][ T31] ___sys_sendmsg+0x2a5/0x360 [ 475.602675][ T31] ? __lock_acquire+0x6b5/0x2cf0 [ 475.607849][ T31] ? __pfx____sys_sendmsg+0x10/0x10 [ 475.613124][ T31] ? futex_wait+0x2a2/0x390 [ 475.617936][ T31] ? __fget_files+0x2a/0x420 [ 475.622548][ T31] ? __fget_files+0x3a0/0x420 [ 475.627266][ T31] __x64_sys_sendmsg+0x1bd/0x2a0 [ 475.634997][ T31] ? __pfx___x64_sys_sendmsg+0x10/0x10 [ 475.640992][ T31] ? rcu_is_watching+0x15/0xb0 [ 475.646170][ T31] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 475.652543][ T31] do_syscall_64+0x15f/0xf80 [ 475.658429][ T31] ? trace_irq_disable+0x3b/0x140 [ 475.663645][ T31] ? clear_bhb_loop+0x40/0x90 [ 475.668629][ T31] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 475.674580][ T31] RIP: 0033:0x7f482fb9cdd9 [ 475.679221][ T31] RSP: 002b:00007f4830afe028 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 475.688048][ T31] RAX: ffffffffffffffda RBX: 00007f482fe15fa0 RCX: 00007f482fb9cdd9 [ 475.696263][ T31] RDX: 0000000020000000 RSI: 0000200000000140 RDI: 0000000000000003 [ 475.709869][ T31] RBP: 00007f482fc32d69 R08: 0000000000000000 R09: 0000000000000000 [ 475.718142][ T31] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 475.726175][ T31] R13: 00007f482fe16038 R14: 00007f482fe15fa0 R15: 00007ffe215744c8 [ 475.734520][ T31] [ 475.771153][ T31] [ 475.771153][ T31] Showing all locks held in the system: [ 475.779193][ T31] 1 lock held by khungtaskd/31: [ 475.784190][ T31] #0: ffffffff8e95cd60 (rcu_read_lock){....}-{1:3}, at: debug_show_all_locks+0x2e/0x180 [ 475.794535][ T31] 2 locks held by getty/5388: [ 475.799617][ T31] #0: ffff8880369c00a0 (&tty->ldisc_sem){++++}-{0:0}, at: tty_ldisc_ref_wait+0x25/0x70 [ 475.813418][ T31] #1: ffffc900032332e8 (&ldata->atomic_read_lock){+.+.}-{4:4}, at: n_tty_read+0x45c/0x13a0 [ 475.825104][ T31] 1 lock held by udevd/5628: [ 475.829380][ T5733] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 475.831362][ T31] #0: ffff888026ef9350 (&disk->open_mutex){+.+.}-{4:4}, at: bdev_open+0xe0/0xd30 [ 475.849785][ T31] 1 lock held by udevd/5644: [ 475.854412][ T31] #0: ffff888026e25350 (&disk->open_mutex){+.+.}-{4:4}, at: bdev_open+0xe0/0xd30 [ 475.864072][ T31] 1 lock held by udevd/7366: [ 475.869276][ T31] #0: ffff888026efd350 (&disk->open_mutex){+.+.}-{4:4}, at: bdev_open+0xe0/0xd30 [ 475.879089][ T31] 3 locks held by kworker/u8:16/8530: [ 475.884620][ T31] #0: ffff88801ae84140 ((wq_completion)events_unbound){+.+.}-{0:0}, at: process_scheduled_works+0xa35/0x1860 [ 475.909353][ T31] #1: ffffc9000393fc40 ((linkwatch_work).work){+.+.}-{0:0}, at: process_scheduled_works+0xa70/0x1860 [ 475.922482][ T31] #2: ffffffff8fdcf900 (rtnl_mutex){+.+.}-{4:4}, at: linkwatch_event+0xe/0x60 [ 475.933664][ T31] 2 locks held by syz.3.2185/13759: [ 475.940228][ T31] #0: ffffffff8fe3f0e8 (cb_lock){++++}-{4:4}, at: genl_rcv+0x19/0x40 [ 475.948841][ T31] #1: ffffffff8ec8aca0 (nfsd_mutex){+.+.}-{4:4}, at: nfsd_nl_listener_set_doit+0x141/0x1670 [ 475.959870][ T31] 2 locks held by syz.0.2948/16697: [ 475.965136][ T31] #0: ffffffff8fe3f0e8 (cb_lock){++++}-{4:4}, at: genl_rcv+0x19/0x40 [ 475.973634][ T31] #1: ffffffff8ec8aca0 (nfsd_mutex){+.+.}-{4:4}, at: nfsd_nl_version_get_doit+0x17c/0xc40 [ 475.984143][ T31] 1 lock held by syz.5.4006/20959: [ 475.989565][ T31] #0: ffffffff8fdcf900 (rtnl_mutex){+.+.}-{4:4}, at: tun_chr_close+0x3e/0x1c0 [ 475.999205][ T31] 2 locks held by syz.4.4013/20992: [ 476.004530][ T31] #0: ffffffff8fdcf900 (rtnl_mutex){+.+.}-{4:4}, at: tun_chr_close+0x3e/0x1c0 [ 476.015362][ T31] #1: ffffffff8e963068 (rcu_state.exp_mutex){+.+.}-{4:4}, at: synchronize_rcu_expedited+0x38d/0x770 [ 476.026607][ T31] 1 lock held by syz.6.4015/21001: [ 476.032815][ T31] #0: ffffffff8fdcf900 (rtnl_mutex){+.+.}-{4:4}, at: rtnetlink_rcv_msg+0x722/0xbe0 [ 476.045154][ T31] 1 lock held by syz.1.4017/21004: [ 476.051629][ T31] #0: ffffffff8fdcf900 (rtnl_mutex){+.+.}-{4:4}, at: rtnl_newlink+0x883/0x1bb0 [ 476.061482][ T31] 1 lock held by syz.1.4017/21005: [ 476.066984][ T31] #0: ffffffff8fdcf900 (rtnl_mutex){+.+.}-{4:4}, at: rtnl_newlink+0x883/0x1bb0 [ 476.109687][ T31] [ 476.113051][ T31] ============================================= [ 476.113051][ T31] [ 476.123452][ T31] NMI backtrace for cpu 1 [ 476.123470][ T31] CPU: 1 UID: 0 PID: 31 Comm: khungtaskd Not tainted syzkaller #0 PREEMPT(full) [ 476.123486][ T31] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 04/18/2026 [ 476.123495][ T31] Call Trace: [ 476.123501][ T31] [ 476.123507][ T31] dump_stack_lvl+0xe8/0x150 [ 476.123529][ T31] nmi_cpu_backtrace+0x274/0x2d0 [ 476.123546][ T31] ? __pfx_nmi_raise_cpu_backtrace+0x10/0x10 [ 476.123562][ T31] nmi_trigger_cpumask_backtrace+0x17a/0x300 [ 476.123580][ T31] sys_info+0x135/0x170 [ 476.123593][ T31] watchdog+0xfd3/0x1030 [ 476.123619][ T31] ? watchdog+0x1c9/0x1030 [ 476.123643][ T31] kthread+0x388/0x470 [ 476.123661][ T31] ? __pfx_watchdog+0x10/0x10 [ 476.123678][ T31] ? __pfx_kthread+0x10/0x10 [ 476.123696][ T31] ret_from_fork+0x514/0xb70 [ 476.123713][ T31] ? __pfx_ret_from_fork+0x10/0x10 [ 476.123728][ T31] ? __switch_to+0xc79/0x1410 [ 476.123749][ T31] ? __pfx_kthread+0x10/0x10 [ 476.123767][ T31] ret_from_fork_asm+0x1a/0x30 [ 476.123795][ T31] [ 476.123801][ T31] Sending NMI from CPU 1 to CPUs 0: [ 476.236383][ C0] NMI backtrace for cpu 0 [ 476.236399][ C0] CPU: 0 UID: 0 PID: 0 Comm: swapper/0 Not tainted syzkaller #0 PREEMPT(full) [ 476.236416][ C0] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 04/18/2026 [ 476.236425][ C0] RIP: 0010:pv_native_safe_halt+0xf/0x20 [ 476.236451][ C0] Code: ab 7d 02 e9 93 f6 02 00 cc cc cc 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 f3 0f 1e fa 66 90 0f 00 2d 53 b1 20 00 fb f4 cc cc cc cc cc cc cc cc cc cc cc cc cc cc cc cc 90 90 90 90 90 [ 476.236465][ C0] RSP: 0018:ffffffff8e607dc0 EFLAGS: 00000246 [ 476.236478][ C0] RAX: 0000000000bbe61d RBX: ffffffff819a91ea RCX: 0000000080000001 [ 476.236489][ C0] RDX: 0000000000000001 RSI: ffffffff8dfa6868 RDI: ffffffff8c28ade0 [ 476.236500][ C0] RBP: ffffffff8e607eb0 R08: ffff8880b86339db R09: 1ffff110170c673b [ 476.236511][ C0] R10: dffffc0000000000 R11: ffffed10170c673c R12: 0000000000000000 [ 476.236521][ C0] R13: 1ffffffff1cd25d8 R14: 0000000000000000 R15: 1ffffffff1cd25d8 [ 476.236532][ C0] FS: 0000000000000000(0000) GS:ffff88812528d000(0000) knlGS:0000000000000000 [ 476.236544][ C0] CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033 [ 476.236554][ C0] CR2: 0000555591daa4e8 CR3: 000000005b51e000 CR4: 00000000003526f0 [ 476.236567][ C0] Call Trace: [ 476.236575][ C0] [ 476.236580][ C0] default_idle+0x9/0x20 [ 476.236594][ C0] default_idle_call+0x72/0xb0 [ 476.236611][ C0] do_idle+0x36a/0x5f0 [ 476.236631][ C0] ? __pfx_do_idle+0x10/0x10 [ 476.236653][ C0] cpu_startup_entry+0x43/0x60 [ 476.236669][ C0] rest_init+0x2de/0x300 [ 476.236685][ C0] start_kernel+0x38a/0x3e0 [ 476.236702][ C0] x86_64_start_reservations+0x24/0x30 [ 476.236722][ C0] x86_64_start_kernel+0x143/0x1c0 [ 476.236740][ C0] common_startup_64+0x13e/0x147 [ 476.236768][ C0] [ 476.418989][ T31] Kernel panic - not syncing: hung_task: blocked tasks [ 476.425887][ T31] CPU: 1 UID: 0 PID: 31 Comm: khungtaskd Not tainted syzkaller #0 PREEMPT(full) [ 476.435004][ T31] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 04/18/2026 [ 476.445072][ T31] Call Trace: [ 476.448358][ T31] [ 476.451291][ T31] vpanic+0x56c/0xa60 [ 476.455285][ T31] ? __pfx___schedule+0x10/0x10 [ 476.460145][ T31] ? __pfx_vpanic+0x10/0x10 [ 476.464657][ T31] ? nmi_trigger_cpumask_backtrace+0x1f4/0x300 [ 476.470833][ T31] panic+0xc5/0xd0 [ 476.474664][ T31] ? __pfx_panic+0x10/0x10 [ 476.479110][ T31] ? preempt_schedule_thunk+0x16/0x30 [ 476.484507][ T31] ? nmi_trigger_cpumask_backtrace+0x2bb/0x300 [ 476.490667][ T31] watchdog+0x102c/0x1030 [ 476.495006][ T31] ? watchdog+0x1c9/0x1030 [ 476.499430][ T31] kthread+0x388/0x470 [ 476.503498][ T31] ? __pfx_watchdog+0x10/0x10 [ 476.508175][ T31] ? __pfx_kthread+0x10/0x10 [ 476.512771][ T31] ret_from_fork+0x514/0xb70 [ 476.517357][ T31] ? __pfx_ret_from_fork+0x10/0x10 [ 476.522466][ T31] ? __switch_to+0xc79/0x1410 [ 476.527159][ T31] ? __pfx_kthread+0x10/0x10 [ 476.531758][ T31] ret_from_fork_asm+0x1a/0x30 [ 476.536547][ T31] [ 476.539962][ T31] Kernel Offset: disabled [ 476.544280][ T31] Rebooting in 86400 seconds..