last executing test programs: 4m54.0653324s ago: executing program 1 (id=2522): socket$vsock_stream(0x28, 0x1, 0x0) (async) r0 = socket$vsock_stream(0x28, 0x1, 0x0) socket$nl_route(0x10, 0x3, 0x0) (async) r1 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r1, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000009c0)=@newtaction={0x6c, 0x30, 0x1, 0x0, 0x0, {}, [{0x58, 0x1, [@m_mpls={0x54, 0x1, 0x0, 0x0, {{0x9}, {0x28, 0x2, 0x0, 0x1, [@TCA_MPLS_PARMS={0x1c, 0x2, {{}, 0x4}}, @TCA_MPLS_BOS={0x5}]}, {0x4, 0x4}, {0xc}, {0xc}}}]}]}, 0x6c}}, 0x0) bind$vsock_stream(r0, &(0x7f0000000040)={0x28, 0x0, 0x2710, @local}, 0x10) (async) bind$vsock_stream(r0, &(0x7f0000000040)={0x28, 0x0, 0x2710, @local}, 0x10) listen(r0, 0x0) r2 = socket$vsock_stream(0x28, 0x1, 0x0) r3 = openat$tcp_congestion(0xffffffffffffff9c, &(0x7f00000000c0), 0x1, 0x0) write$tcp_congestion(r3, &(0x7f0000000000)='yeah\x00', 0x5) connect$vsock_stream(r2, &(0x7f0000000640)={0x28, 0x0, 0x2710}, 0x10) listen(r2, 0x401) mmap(&(0x7f0000001000/0xc00000)=nil, 0xc00000, 0x3000004, 0x3032, 0xffffffffffffffff, 0x0) (async) mmap(&(0x7f0000001000/0xc00000)=nil, 0xc00000, 0x3000004, 0x3032, 0xffffffffffffffff, 0x0) pselect6(0x0, 0x0, &(0x7f0000000080)={0x7, 0x1, 0x6537, 0x9, 0x339, 0x9, 0x3, 0x6}, 0x0, &(0x7f0000000140), 0x0) r4 = openat$tcp_congestion(0xffffffffffffff9c, &(0x7f0000000000), 0x35c, 0x0) preadv(r4, &(0x7f0000000080)=[{&(0x7f00000014c0)=""/4096, 0x1000}], 0x1, 0x2, 0x5) bpf$PROG_LOAD(0x5, &(0x7f000000e000)={0x15, 0x4, &(0x7f0000000280)=ANY=[@ANYBLOB="b4050000feff1fff79102800000000001eb44edb8354fbfeac0000002100000078c7817a3f696d63034644738ce13b0b9ab9b77e97c9c6c93ff1c0fffbefb1436ca1bfa06813b9b3465f13afe462bf0e886d0425941c92d162382a3d37"], &(0x7f0000000080)='syzkaller\x00', 0x5, 0xc3, &(0x7f000000cf3d)=""/195, 0x0, 0x0, '\x00', 0x0, @sk_reuseport, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0x8, 0x10, &(0x7f0000000000)={0x0, 0x0, 0xfffffffe}, 0x10}, 0x94) (async) bpf$PROG_LOAD(0x5, &(0x7f000000e000)={0x15, 0x4, &(0x7f0000000280)=ANY=[@ANYBLOB="b4050000feff1fff79102800000000001eb44edb8354fbfeac0000002100000078c7817a3f696d63034644738ce13b0b9ab9b77e97c9c6c93ff1c0fffbefb1436ca1bfa06813b9b3465f13afe462bf0e886d0425941c92d162382a3d37"], &(0x7f0000000080)='syzkaller\x00', 0x5, 0xc3, &(0x7f000000cf3d)=""/195, 0x0, 0x0, '\x00', 0x0, @sk_reuseport, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0x8, 0x10, &(0x7f0000000000)={0x0, 0x0, 0xfffffffe}, 0x10}, 0x94) r5 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r5, 0x8933, &(0x7f0000000240)={'vlan0\x00', 0x0}) r7 = socket$netlink(0x10, 0x3, 0x0) setsockopt$netlink_NETLINK_PKTINFO(r7, 0x10e, 0x3, &(0x7f0000000140)=0x6, 0x4) r8 = syz_init_net_socket$x25(0x9, 0x5, 0x0) setsockopt$X25_QBITINCL(r8, 0x106, 0x1, &(0x7f0000000400), 0x4) (async) setsockopt$X25_QBITINCL(r8, 0x106, 0x1, &(0x7f0000000400), 0x4) sendmsg$nl_route(r7, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000180)={&(0x7f00000001c0)=@newlink={0x48, 0x10, 0x503, 0x0, 0x0, {0x0, 0x0, 0x0, 0x0, 0xe315}, [@IFLA_LINKINFO={0x14, 0x12, 0x0, 0x1, @macvtap={{0xc}, {0x4}}}, @IFLA_LINK={0x8, 0x5, r6}, @IFLA_ADDRESS={0xa, 0x1, @remote}]}, 0x48}}, 0x4) setsockopt$sock_timeval(r0, 0x1, 0x14, &(0x7f0000000100)={0x77359400}, 0x10) (async) setsockopt$sock_timeval(r0, 0x1, 0x14, &(0x7f0000000100)={0x77359400}, 0x10) 4m53.768822185s ago: executing program 1 (id=2528): r0 = socket$kcm(0x11, 0x3, 0x0) sendmsg$kcm(r0, &(0x7f0000000200)={&(0x7f0000000100)=@phonet={0x23, 0xfe, 0x0, 0x14}, 0x80, &(0x7f0000000000)=[{&(0x7f0000000080)="270502001c00140007008100050088a8e9d9053728", 0x15}, {&(0x7f0000000040)="e5948596cb05000000000000001bf6ac0400c26cfc1e8338", 0x18}, {&(0x7f0000000740)="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", 0x5c2}], 0x3}, 0x20000800) r1 = socket(0xa, 0x3, 0x3a) setsockopt$MRT6_ADD_MIF(r1, 0x29, 0xca, &(0x7f0000000000)={0x2, 0x1, 0x0, 0x0, 0x200}, 0x3a) setsockopt$MRT6_FLUSH(r1, 0x29, 0xd4, &(0x7f0000000080)=0x9, 0x4) socket$kcm(0x11, 0x3, 0x0) (async) sendmsg$kcm(r0, &(0x7f0000000200)={&(0x7f0000000100)=@phonet={0x23, 0xfe, 0x0, 0x14}, 0x80, &(0x7f0000000000)=[{&(0x7f0000000080)="270502001c00140007008100050088a8e9d9053728", 0x15}, {&(0x7f0000000040)="e5948596cb05000000000000001bf6ac0400c26cfc1e8338", 0x18}, {&(0x7f0000000740)="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", 0x5c2}], 0x3}, 0x20000800) (async) socket(0xa, 0x3, 0x3a) (async) setsockopt$MRT6_ADD_MIF(r1, 0x29, 0xca, &(0x7f0000000000)={0x2, 0x1, 0x0, 0x0, 0x200}, 0x3a) (async) setsockopt$MRT6_FLUSH(r1, 0x29, 0xd4, &(0x7f0000000080)=0x9, 0x4) (async) 4m53.626305236s ago: executing program 3 (id=2533): syz_emit_ethernet(0x56, &(0x7f0000000200)={@local, @broadcast, @void, {@ipv6={0x86dd, @tcp={0x0, 0x6, "4dd318", 0x20, 0x6, 0x0, @initdev={0xfe, 0x88, '\x00', 0x0, 0x0}, @local, {[], {{0x0, 0x4001, 0x41424344, 0x41424344, 0x0, 0x0, 0x8, 0xc2, 0x0, 0x0, 0x0, {[@exp_fastopen={0xfe, 0x9, 0xf989, "45ee4f42ed"}, @fastopen={0x22, 0x2}]}}}}}}}}, 0x0) bpf$PROG_LOAD(0x5, &(0x7f000000e000)={0x10, 0x4, &(0x7f0000000040)=ANY=[@ANYBLOB="b4000000000000007910480000000000710425000000000095000000"], &(0x7f0000003ff6)='GPL\x00', 0x2, 0xfd90, &(0x7f000000cf3d)=""/195, 0x0, 0x0, '\x00', 0x0, @sk_msg}, 0x48) 4m53.497399082s ago: executing program 3 (id=2535): r0 = socket(0x2, 0x80805, 0x0) getsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX3(r0, 0x84, 0x6f, &(0x7f00000000c0)={0x0, 0x1c, &(0x7f0000000140)=[@in6={0xa, 0x4e22, 0x2, @private2={0xfc, 0x2, '\x00', 0x1}, 0xfffffffc}]}, &(0x7f0000000180)=0x10) getsockopt$inet_sctp_SCTP_GET_ASSOC_ID_LIST(r0, 0x84, 0x1d, &(0x7f0000000000)={0x1, [0x0]}, &(0x7f0000000040)=0x8) (async) getsockopt$inet_sctp_SCTP_AUTH_ACTIVE_KEY(r0, 0x84, 0x18, &(0x7f0000000d40)={r1, 0x6}, &(0x7f0000000d80)=0x8) (async) r3 = syz_genetlink_get_family_id$devlink(&(0x7f0000000040), 0xffffffffffffffff) sendmsg$DEVLINK_CMD_PORT_UNSPLIT(r0, &(0x7f00000000c0)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x800}, 0xc, &(0x7f0000000080)={&(0x7f0000000240)={0x190, r3, 0x200, 0x70bd28, 0x25dfdbfb, {}, [{{@pci={{0x8}, {0x11}}, {0x8, 0x3, 0x3}}}, {{@pci={{0x8}, {0x11}}, {0x8, 0x3, 0x1}}}, {{@pci={{0x8}, {0x11}}, {0x8, 0x3, 0x3}}}, {{@nsim={{0xe}, {0xf, 0x2, {'netdevsim', 0x0}}}, {0x8, 0x3, 0x3}}}, {{@pci={{0x8}, {0x11}}, {0x8, 0x3, 0x3}}}, {{@nsim={{0xe}, {0xf, 0x2, {'netdevsim', 0x0}}}, {0x8}}}, {{@nsim={{0xe}, {0xf, 0x2, {'netdevsim', 0x0}}}, {0x8, 0x3, 0x3}}}, {{@pci={{0x8}, {0x11}}, {0x8, 0x3, 0x2}}}, {{@nsim={{0xe}, {0xf, 0x2, {'netdevsim', 0x0}}}, {0x8}}}, {{@nsim={{0xe}, {0xf, 0x2, {'netdevsim', 0x0}}}, {0x8}}}]}, 0x190}, 0x1, 0x0, 0x0, 0x4}, 0x4000000) syz_emit_ethernet(0x56, &(0x7f0000000640)={@multicast, @random="ffc5a70572c2", @void, {@ipv6={0x86dd, @icmpv6={0x0, 0x6, "f4adf7", 0x20, 0x2c, 0xff, @private2, @mcast2, {[@hopopts={0x3a}], @ndisc_na={0x88, 0x0, 0x0, 0x6, '\x00', @ipv4={'\x00', '\xff\xff', @initdev={0xac, 0x1e, 0x1, 0x0}}}}}}}}, 0x0) (async) syz_emit_ethernet(0xda, &(0x7f00000006c0)=ANY=[@ANYBLOB="bbbbbbbbbbbbb01356c4c4fa0805010df356910d951dfbe9e6fcc6124bc8ccf0a3fb999b25c937b1294ceaf2c074d00ef928455d7a047c7716ae8ba89d651e841f76610b1b8296601eeae796e1eee75401695446f639f2269bea4216895bca99cf435d3f3ddac13d1a59d6b1b2c2c0060fff592cd454e25f40af3a0683f0da62ec18bf4487cdd94bb935ed395409f03f78a43e29a4a49fe12b4d8b8f5360e40eac35908e9d181a7a2587e9a4afcd81ef3aa9a53198535ae4b38cc555b648f32839dc7bd6dd7300"/218], &(0x7f0000000500)={0x0, 0x2, [0xa89, 0x404, 0xbe1, 0x301]}) (async) r4 = socket$nl_generic(0x10, 0x3, 0x10) (async) r5 = socket$nl_generic(0x10, 0x3, 0x10) r6 = syz_genetlink_get_family_id$ipvs(&(0x7f0000000200), r5) (async) sendmsg$TIPC_NL_MON_SET(r4, &(0x7f0000000d00)={&(0x7f00000008c0)={0x10, 0x0, 0x0, 0x1000}, 0xc, &(0x7f0000000900)={&(0x7f0000001140)=ANY=[@ANYBLOB="49c3418025859ea5e2114d435cc1ebd50d70ed60a06b00aa4a10a7efa2c12a279e81f7ed4ff84782548c95af169689dee979330cd5705941cf9d5fdb81983f71c1a89045436c73ea54c0dda616fe73c5536cef39e77ed3901c1e221e64ad14e6092bc2806a210bde1d24d242855f5aba2e92e65cf18d38d0aa524d05cf4c947729cf3b3de392dd64b2d95f85d52d68f768a29e02d80af2634a8c56dc4520c3c92a735dd58fe11776a38ed0db3d9c1041a1bc5d4fac3bd5c616bc97", @ANYRES16=0x0, @ANYBLOB="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"], 0x378}, 0x1, 0x0, 0x0, 0x801}, 0x20000080) sendmsg$IPVS_CMD_SET_CONFIG(r5, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000300)={0x24, r6, 0x1, 0x70bd26, 0x25dfdbfd, {}, [@IPVS_CMD_ATTR_TIMEOUT_TCP_FIN={0x8}, @IPVS_CMD_ATTR_TIMEOUT_UDP={0x8, 0x6, 0xfffffff8}]}, 0x24}, 0x1, 0x0, 0x0, 0x44000}, 0x40000) (async) r7 = socket$nl_netfilter(0x10, 0x3, 0xc) close(r7) r8 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r8, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000240)=ANY=[@ANYBLOB="140000001000010000000000000000000500000a28000000000a030000000000000000000a00000708000240000000020900010073797a31000000002c000000030a010100000000000000000a0000070900010073797a31000000000900030073797a320000000014000000110001"], 0x7c}, 0x1, 0x0, 0x0, 0x4000}, 0x0) (async) sendmsg$OSF_MSG_ADD(r8, &(0x7f0000000a40)={&(0x7f00000009c0)={0x10, 0x0, 0x0, 0x100}, 0xc, &(0x7f0000000a00)={&(0x7f0000001580)={0x1060, 0x0, 0x5, 0x3, 0x0, 0x0, {0x0, 0x0, 0x3}, [{{0x254, 0x1, {{0x1, 0xffffffff}, 0x5, 0x9, 0x2, 0x6, 0x0, 'syz0\x00', "1dda3b6e546fbc7c90e3d04f4d73d0adea51a2a1698bb3e10f8a5113224e0dac", "0b8393b33578f593b9b5747aca2c964f41f8db2defdc08322d68568d3bacc518", [{0x8, 0x8, {0x1, 0x8001}}, {0x4, 0x400, {0x1, 0x7}}, {0x5, 0x8, {0x3}}, {0x4, 0x1ff, {0x3, 0x5}}, {0xff, 0x7ff, {0x0, 0x10000}}, {0xa, 0xffff, {0x1, 0x1ff}}, {0x3c, 0x7f, {0x1, 0xaa5}}, {0x2b2, 0x1, {0x3, 0x1}}, {0x82, 0x0, {0x1, 0x1}}, {0xfffb, 0xf450, {0x1, 0xfffeffff}}, {0x3ff, 0x566e, {0x14e83f233037bd86, 0xffffff19}}, {0x7fff, 0x2, {0x1, 0x2}}, {0x0, 0x0, {0x1, 0x9}}, {0x504e, 0x5, {0x1, 0x5}}, {0xe, 0x1}, {0x9, 0x1ff, {0x1, 0x11d6}}, {0x5, 0x0, {0x0, 0x7}}, {0xfffc, 0x1ff, {0x2, 0x100}}, {0xd, 0x7ff, {0x3, 0x2}}, {0x8, 0xd5a2, {0x1, 0x6}}, {0x8000, 0x5, {0x0, 0x8}}, {0x9, 0x3, {0x2, 0x8001}}, {0x1ff, 0xefb, {0x2, 0x49d}}, {0x5fa, 0x6fa, {0x1, 0x5}}, {0x3, 0x0, {0x3, 0x7fff}}, {0x2, 0x1, {0x1, 0xdd4}}, {0x9, 0x3, {0x2, 0x8}}, {0x8, 0x7ff, {0x0, 0x4}}, {0x4, 0x8, {0x2, 0xffff}}, {0x8, 0xfff, {0x0, 0x8}}, {0xa, 0x9, {0x3, 0x3}}, {0x85cb, 0x7, {0x1, 0x101}}, {0xfffe, 0x9, {0x0, 0x25ae}}, {0xe, 0xfff, {0x2, 0xfffffffd}}, {0x1, 0x81, {0x2, 0x9}}, {0x0, 0x4, {0x0, 0xb}}, {0x5, 0xa00, {0x2, 0x2}}, {0x93, 0xd2c, {0x2, 0x5}}, {0x39b, 0x7, {0x3, 0xff}}, {0x0, 0x2, {0x3, 0xc}}]}}}, {{0x254, 0x1, {{0x3, 0x5}, 0xd, 0x4, 0x7, 0xff4d, 0xe, 'syz0\x00', "d3f0773404e304d31b4fd128698438f07032649a459642c2f42d409ac4bcf7bd", "77f3ada928674226fbbbaefecd783d9086be7c3bda1a4a2b8a24b3acf0c1d1b5", [{0xff73, 0x100, {0x0, 0x5}}, {0x8, 0x0, {0x3, 0x7}}, {0x2, 0xff65, {0x2, 0xbf}}, {0x9, 0x4, {0x1, 0x1}}, {0xfff, 0x4, {0x3, 0x80}}, {0x81, 0xb, {0x0, 0xf5}}, {0x5, 0xb, {0x3, 0x5}}, {0x7, 0x3ff, {0x3, 0x8}}, {0xc7f6, 0x7, {0x3, 0x6}}, {0x1, 0x4, {0x1, 0x3}}, {0xb, 0x2, {0x1, 0x4}}, {0x2, 0x3124, {0x7, 0x33}}, {0x1, 0x0, {0x1, 0x8}}, {0xffff, 0xe7f, {0x3, 0x1}}, {0x29e, 0x4, {0x7, 0xaf}}, {0x81, 0x76b9, {0x3, 0xffffffff}}, {0x6, 0x1, {0xae65cb3323921fa9, 0x81}}, {0x29, 0x7}, {0x4, 0x74dd, {0x1, 0x2}}, {0x8, 0x4, {0x1, 0x200}}, {0x6, 0x1, {0x3, 0x5}}, {0xff80, 0x9, {0x0, 0x10000}}, {0x9, 0x7, {0x0, 0x3}}, {0xa, 0x7, {0x1, 0x8b}}, {0x5, 0x6, {0x1, 0xfff}}, {0x4, 0x0, {0x2, 0x48000000}}, {0x2, 0x6, {0x2, 0x7}}, {0x7, 0x2, {0x3, 0x7}}, {0x4, 0x1, {0x1, 0xb}}, {0x505, 0x6f, {0x0, 0xc9}}, {0x9, 0x8001, {0x0, 0x14}}, {0x0, 0x2, {0x0, 0xff}}, {0x3, 0x1ff, {0x2, 0x3}}, {0xa, 0xfffe, {0x0, 0x800}}, {0x9, 0x4, {0x0, 0x1}}, {0x85, 0x6, {0x0, 0x1}}, {0x8, 0x6, {0x2}}, {0x27, 0x8, {0x0, 0x401}}, {0x2, 0x18, {0x1, 0xe}}, {0x5, 0x8, {0x3, 0x8000}}]}}}, {{0x254, 0x1, {{0x2, 0xa60}, 0xc, 0x0, 0x86ea, 0x1ff, 0x23, 'syz0\x00', "5c878a98b9fd4337aea20027aa7518001071ebefe932652e76e842808b41a1ed", "8c22265891ce1e0e07673a9e279611d41ff87fadf4a983bd979ec2aed8609519", [{0xc, 0x3, {0x1, 0x2}}, {0x7f, 0x7, {0x2, 0x81}}, {0xfffb, 0x4, {0x1, 0x6}}, {0xbc, 0x9, {0x2, 0xe}}, {0x1, 0x9, {0x3, 0x3}}, {0x5, 0x9, {0x0, 0x4}}, {0x4, 0x0, {0x3, 0x3}}, {0x7f, 0x5, {0x2, 0x2}}, {0x1, 0x3, {0x1, 0x400}}, {0x3, 0x1}, {0x3, 0xc43d, {0x2, 0x5}}, {0x1c8f, 0x3, {0x1, 0x5}}, {0x1ff, 0x1000, {0x3, 0xf3}}, {0x5, 0x8, {0xc11734e50d8038c3, 0xa}}, {0x3ff, 0x1, {0x0, 0x76b1}}, {0x7, 0x6, {0x1, 0x3}}, {0x5, 0x1ff, {0x0, 0x1}}, {0x7ff, 0x4, {0x2, 0x1}}, {0xd9, 0xb, {0x3, 0x5}}, {0x2b48, 0x1, {0x3, 0x4}}, {0x1, 0x7827, {0x1, 0x10}}, {0xe6ec, 0x1, {0x2, 0x18}}, {0x3, 0x5, {0x0, 0x2}}, {0x101, 0x9, {0x1, 0x1000}}, {0xfc5, 0xfbff, {0x2, 0x8000}}, {0x4, 0x9, {0x3, 0x7fffffff}}, {0x3, 0x2, {0x0, 0x7fffffff}}, {0x4c, 0x769f, {0x2}}, {0x4, 0x100, {0x1, 0x9}}, {0xd3, 0x9, {0x0, 0x7b}}, {0xd, 0x3, {0x3, 0x94a5}}, {0x9d7e, 0x89, {0x3, 0x7ff}}, {0x4, 0x0, {0x0, 0xf}}, {0x4003, 0xfc00, {0x0, 0x81}}, {0x4, 0x7, {0x3, 0x2}}, {0xd, 0xc78, {0x1, 0x9}}, {0x1d, 0x9, {0x1, 0x7}}, {0x101, 0xa565, {0x0, 0x1}}, {0x9, 0x1, {0x2, 0x7}}, {0x6, 0x7, {0x2, 0x6}}]}}}, {{0x254, 0x1, {{}, 0x0, 0x7f, 0xff, 0x5, 0x1d, 'syz1\x00', "8a1239775c4cdaddf84bac941a885235119efeec6b0380aeaf386dafddb30d4b", "e96bed658167f626bc9ebc551042a9c2d504054f09e5b9cf17da25c2831af504", [{0x9, 0x8001, {0x3, 0x20f2}}, {0x5, 0x8, {0x2, 0x7}}, {0x4, 0x3, {0x1, 0x8}}, {0x8, 0x1, {0x0, 0xf}}, {0x7f, 0x7, {0x2, 0x40}}, {0x5, 0x0, {0x3}}, {0x8001, 0x51a2, {0x0, 0x7ff}}, {0x9, 0x1, {0x3, 0x3}}, {0x8, 0x0, {0x0, 0x2}}, {0x8001, 0x7, {0x2, 0xfffffff7}}, {0xea9, 0x1, {0x1, 0x6}}, {0xf0dd, 0xa, {0x2, 0xffffffff}}, {0xfff7, 0xb, {0x0, 0x4}}, {0x3da9, 0x40, {0x3, 0x5}}, {0x5, 0x10, {0x2, 0x4b}}, {0x8, 0x4, {0x1, 0xfffffff8}}, {0xd, 0x7, {0x1, 0x7}}, {0xe4f, 0x3, {0x3, 0x4}}, {0x8, 0x3082, {0x0, 0x5}}, {0x6eb, 0x101, {0x0, 0xa8}}, {0xfbff, 0x6, {0x0, 0x7}}, {0x5, 0x8, {0x1, 0x40}}, {0x81, 0x10f, {0x1, 0x5}}, {0x8, 0x6, {0x0, 0x5}}, {0x4, 0x6, {0x2, 0xdfd}}, {0x5, 0x7, {0x2, 0x7}}, {0x7b9, 0x200, {0x3, 0x7ff}}, {0x0, 0x10, {0x0, 0xffffffea}}, {0x8, 0xcc22, {0x0, 0xe}}, {0x2, 0xe, {0x3, 0x8}}, {0x1, 0x9, {0x2, 0x80000000}}, {0x9, 0x7f, {0x7dc7baa3c404e7c8, 0x8}}, {0x6, 0xa, {0x1, 0xfffffffd}}, {0x6, 0x9, {0x0, 0x1}}, {0x10, 0x0, {0x3, 0x7}}, {0x7, 0x3, {0x1, 0xc7e}}, {0x9, 0x1, {0x3, 0x1}}, {0x4, 0x5, {0x0, 0x100}}, {0x7a13, 0x1ff, {0x1, 0x2}}, {0x3, 0x3, {0x3, 0x8}}]}}}, {{0x254, 0x1, {{0x1, 0xfffffff7}, 0x4, 0x8, 0x8, 0x19, 0x1, 'syz0\x00', "909231e5bf11ec8eec45db3f5ff2b65cd13a34dac689a6e87a45370318fa804f", "f9b116053961cefa38082f0dce0502b0c7253656d51c4c22d991b2019a896688", [{0x4, 0x4, {0x0, 0x9}}, {0x8, 0x8, {0x3, 0x8000}}, {0x6, 0x6, {0x0, 0xa}}, {0x4, 0x8, {0x0, 0x80000000}}, {0x7, 0xfffe, {0x1, 0x3}}, {0x3, 0xc5df, {0x0, 0x8001}}, {0x1, 0x4, {0x3, 0x8}}, {0x1, 0x3, {0x3, 0xe0}}, {0x1000, 0x1, {0x2, 0x8}}, {0x7, 0x2, {0x2, 0xfffff801}}, {0x64, 0x4, {0x1, 0xfffff97b}}, {0xbd5, 0x5, {0x3, 0xfffff801}}, {0x6, 0x4, {0x2, 0x8}}, {0x99e, 0xfffd, {0x1, 0x1}}, {0xd, 0x8000, {0x3, 0x2}}, {0x101, 0x1, {0x0, 0x80}}, {0x6, 0x3, {0x3, 0x7fffffff}}, {0x1, 0x5, {0x2, 0x9}}, {0x4, 0x35, {0x3, 0x3}}, {0xfff, 0x400, {0x1, 0x100}}, {0x13, 0xf9db, {0x3, 0x7fffffff}}, {0x9, 0x86aa, {0x3, 0xfff}}, {0x6, 0x81, {0x3, 0x81}}, {0x2, 0x9, {0x3, 0x3}}, {0x2, 0x6, {0x2, 0x875e}}, {0x4, 0x0, {0x3, 0xff}}, {0x0, 0xb, {0x0, 0x9}}, {0x1c, 0xffff, {0x1, 0x2}}, {0x0, 0x8, {0x1, 0x2}}, {0x3, 0x46, {0x3, 0xff}}, {0x9, 0xdec, {0x1, 0xbd}}, {0x180, 0x9, {0x3, 0xad53}}, {0x100, 0x6, {0x1, 0x8001}}, {0xffff, 0x1630, {0x0, 0x2}}, {0x4, 0x6, {0x2, 0x2}}, {0x0, 0x9, {0x3, 0x5}}, {0x9, 0x8001, {0x2}}, {0x5, 0x5, {0x0, 0x3}}, {0x7, 0x257, {0x1, 0x80000001}}, {0x5d2, 0xb, {0x0, 0xcad}}]}}}, {{0x254, 0x1, {{0x1, 0x5}, 0x40, 0x5, 0xa52, 0x800, 0x14, 'syz0\x00', "269e715936ace179c7d243090186e1a2f04c70a74cad56aa64695a7f06dcbeb9", "00556dc47d5ae24ca1ff6a2a42d685a148eb159ff9a5b8284278c3f0fe02a088", [{0x9, 0x3, {0x0, 0x6}}, {0x7ff, 0x1, {0x2, 0x8}}, {0x3, 0x3, {0x2, 0xf}}, {0x1, 0x6, {0x3, 0xff}}, {0x6, 0x7, {0x0, 0xd}}, {0x6, 0xff, {0x2, 0x4b0d29a}}, {0x1, 0xb, {0x2, 0x1}}, {0xff, 0x3e, {0x1, 0x5}}, {0x2, 0xff, {0x0, 0xffffffff}}, {0x8, 0x4, {0x1, 0x9}}, {0x8, 0x0, {0x0, 0xfffffffb}}, {0x2, 0x7979, {0x1, 0x6}}, {0xbb03, 0x6, {0x2, 0xd75f}}, {0x6, 0x5, {0x1, 0x40}}, {0x64, 0x94c, {0x1, 0x2}}, {0x2, 0x7, {0x2, 0x401}}, {0x5, 0x2, {0x3, 0x7}}, {0x9, 0x3ff, {0x1, 0x6}}, {0x6, 0x6, {0x3, 0x4}}, {0x4, 0x0, {0x2, 0x6}}, {0x18d3, 0xf2cc, {0x2, 0xbb}}, {0x3, 0xe63d, {0x1, 0x80000001}}, {0x4, 0x2, {0x2, 0x4}}, {0xffff, 0x3, {0x2, 0x7}}, {0x1ff, 0x90b, {0x1, 0x5}}, {0xfe, 0x5, {0x0, 0x7}}, {0x18b, 0x4, {0x2, 0xb}}, {0xffff, 0x7, {0x3, 0x6}}, {0xf6d8, 0x8, {0x3, 0x24000}}, {0x1, 0x1, {0x0, 0x64fd}}, {0x1, 0x6, {0x3}}, {0x800, 0x55, {0x1, 0x6}}, {0x5, 0x5, {0x1, 0x7ff}}, {0x5, 0x5, {0x2, 0x1000}}, {0x2, 0x8, {0x2, 0x2}}, {0x5, 0x7, {0x2, 0x6}}, {0x7, 0x29, {0x3, 0x7}}, {0xfffb, 0x5, {0x0, 0x9}}, {0x7d55, 0xf9, {0x0, 0xe92}}, {0x8, 0x4, {0x2, 0xfff}}]}}}, {{0x254, 0x1, {{0x2, 0x3}, 0x4, 0x2, 0x100, 0x2, 0x1b, 'syz1\x00', "c1053eb82c0ae119feff77cd27959cd3eba358b4049e512ca221d7e919d6ccce", "251a044efce44223a796a1d51cd253bc6a17e593fd26c074fa49c5d54b995a7b", [{0x684, 0x3, {0x0, 0x5}}, {0x1ff, 0x1, {0x2, 0x9}}, {0x94, 0x7d8b, {0x0, 0x3}}, {0x3, 0xff01, {0x3}}, {0x4, 0x8, {0x2, 0xc}}, {0x7fff, 0x2, {0x1, 0x101}}, {0x6, 0xfff9, {0x3, 0x4}}, {0x536, 0xa, {0x0, 0xff000000}}, {0x2b71, 0x81, {0x0, 0x2}}, {0xe1f, 0x1000, {0x1, 0x7}}, {0x900, 0x0, {0x1, 0x2}}, {0x5, 0x5, {0x3, 0x800}}, {0xf4bd, 0x1, {0x3, 0x5}}, {0x0, 0x9c1e, {0x2, 0x9}}, {0x620, 0x9e, {0x0, 0x6}}, {0x1, 0x3, {0x2, 0xff}}, {0x8, 0x3, {0x0, 0x7}}, {0x8, 0x1, {0x3, 0x2}}, {0x6, 0x80, {0x0, 0x8}}, {0x9, 0x1, {0x1, 0x3ff}}, {0x6, 0x9889, {0x0, 0x2}}, {0x8, 0x3, {0x1, 0x7f}}, {0x4, 0x4, {0x0, 0x1}}, {0x6, 0xfffc}, {0x7, 0x4, {0x3, 0x1}}, {0xb, 0x217, {0x3, 0x200}}, {0x2, 0x4, {0x0, 0xbd}}, {0x3, 0x7bb4, {0x2}}, {0x48c7, 0xb, {0x3, 0x1}}, {0xeec, 0x7, {0x0, 0x2}}, {0x9eb, 0x7fe2, {0x1, 0x26}}, {0x5b9, 0xafb6, {0x1, 0x3b0}}, {0x4, 0x3, {0x3, 0x36e097e7}}, {0xf, 0xffc0, {0x0, 0x2}}, {0x8, 0x8000, {0x1, 0x1}}, {0x2, 0x3, {0x1, 0x5}}, {0xfffc, 0x6, {0x1, 0xfffffff8}}, {0x3f, 0x0, {0x0, 0xfffffffc}}, {0x4, 0x2, {0x1, 0x3}}, {0x3, 0xe, {0x2, 0xe}}]}}}]}, 0x1060}, 0x1, 0x0, 0x0, 0x44}, 0x1) (async) sendmsg$NFT_BATCH(r8, &(0x7f0000009b40)={0x0, 0x0, &(0x7f0000009b00)={&(0x7f0000000100)=ANY=[@ANYBLOB="140000001000010000000000000000000500000a4c000000090a010400000000000000000a0000040900010073797a310000000008000540000000020900020073797a310000000008000a40fffffffc080003400000001408000c4000000e45400000000c0a010100000000000000000a0000060900020073797a31000000000900010073797a310000000014000380100000800c00018006000100d103000014000000110001"], 0xb4}, 0x1, 0x0, 0x0, 0x4000850}, 0x40) sendmsg$NFT_BATCH(r7, &(0x7f0000009b40)={0x0, 0x0, &(0x7f0000009b00)={&(0x7f00000001c0)=ANY=[@ANYBLOB="140000001000010000000000000000000500000a480000000c0a010100000000000000000a0000060900020073797a31000000000900010073797a31000000001c000380180000800c000180060001"], 0x70}, 0x1, 0x0, 0x0, 0x4451099e661a63b1}, 0x0) r9 = syz_genetlink_get_family_id$ipvs(&(0x7f0000000980), r0) sendmsg$IPVS_CMD_SET_CONFIG(r4, &(0x7f0000000600)={&(0x7f0000000540)={0x10, 0x0, 0x0, 0x4000000}, 0xc, &(0x7f0000000580)={&(0x7f00000007c0)={0xd4, r9, 0x300, 0x70bd25, 0x25dfdbfd, {}, [@IPVS_CMD_ATTR_DAEMON={0xc, 0x3, 0x0, 0x1, [@IPVS_DAEMON_ATTR_STATE={0x8}]}, @IPVS_CMD_ATTR_TIMEOUT_TCP={0x8, 0x4, 0x5}, @IPVS_CMD_ATTR_TIMEOUT_TCP_FIN={0x8, 0x5, 0x6}, @IPVS_CMD_ATTR_SERVICE={0xc, 0x1, 0x0, 0x1, [@IPVS_SVC_ATTR_PROTOCOL={0x6, 0x2, 0x6}]}, @IPVS_CMD_ATTR_DEST={0x48, 0x2, 0x0, 0x1, [@IPVS_DEST_ATTR_TUN_FLAGS={0x6, 0xf, 0xfffc}, @IPVS_DEST_ATTR_PORT={0x6, 0x2, 0x4e20}, @IPVS_DEST_ATTR_L_THRESH={0x8, 0x6, 0x1}, @IPVS_DEST_ATTR_ADDR={0x14, 0x1, @ipv6=@ipv4={'\x00', '\xff\xff', @rand_addr=0x64010101}}, @IPVS_DEST_ATTR_INACT_CONNS={0x8, 0x8, 0x8}, @IPVS_DEST_ATTR_WEIGHT={0x8, 0x4, 0x5}, @IPVS_DEST_ATTR_FWD_METHOD={0x8, 0x3, 0x4}]}, @IPVS_CMD_ATTR_DAEMON={0x50, 0x3, 0x0, 0x1, [@IPVS_DAEMON_ATTR_MCAST_PORT={0x6, 0x7, 0x4e23}, @IPVS_DAEMON_ATTR_MCAST_GROUP={0x8, 0x5, @empty}, @IPVS_DAEMON_ATTR_STATE={0x8, 0x1, 0x1}, @IPVS_DAEMON_ATTR_SYNC_MAXLEN={0x6, 0x4, 0x1f}, @IPVS_DAEMON_ATTR_MCAST_TTL={0x5, 0x8, 0x6}, @IPVS_DAEMON_ATTR_STATE={0x8, 0x1, 0x1}, @IPVS_DAEMON_ATTR_SYNC_ID={0x8}, @IPVS_DAEMON_ATTR_MCAST_IFN={0x14, 0x2, 'vcan0\x00'}]}]}, 0xd4}, 0x1, 0x0, 0x0, 0x4000000}, 0x0) syz_emit_ethernet(0x6c, &(0x7f00000001c0)={@local, @link_local, @void, {@ipv4={0x800, @gre={{0x6, 0x4, 0x3, 0x0, 0x5e, 0x64, 0x0, 0xda, 0x2f, 0x0, @dev={0xac, 0x14, 0x14, 0x18}, @multicast2, {[@rr={0x7, 0x3, 0xbc}]}}, {{0x0, 0x0, 0x1, 0x0, 0x0, 0x1, 0x0, 0x1, 0x880b, 0x2, 0x3, [], "c1c3"}, {0x1, 0x0, 0x1}, {0x0, 0x0, 0x1}, {0x8, 0x88be, 0x1, {{0x9, 0x1, 0x0, 0x3, 0x0, 0x2, 0x4, 0x4}, 0x1, {0xfffffffd}}}, {0x8, 0x22eb, 0x1, {{0x1, 0x2, 0x1, 0x1, 0x0, 0x1, 0x3, 0x5}, 0x2, {0x6, 0x1000, 0x2, 0x1c, 0x0, 0x0, 0x1}}}}}}}}, 0x0) (async) bpf$BPF_BTF_LOAD(0x12, &(0x7f00000005c0)={&(0x7f0000000940)=ANY=[@ANYBLOB="9feb010018000000000000090000000018000000020000000000faff00000000f3d932e8876f801a00"/50], 0x0, 0x32}, 0x20) (async) getsockopt$inet_sctp6_SCTP_GET_ASSOC_STATS(r0, 0x84, 0x70, &(0x7f0000000400)={r2, @in={{0x2, 0x4e24, @local}}, [0xfd, 0x9, 0x7, 0x8, 0x0, 0x2, 0x6, 0xd35, 0x3, 0x8, 0x1000, 0x4, 0x8, 0x1, 0x2]}, &(0x7f0000000100)=0x100) 4m53.454716482s ago: executing program 3 (id=2537): r0 = socket$alg(0x26, 0x5, 0x0) writev(r0, &(0x7f0000000000)=[{&(0x7f0000000280)="276141d86d70a9b325d27cac162ff92943db2010dde69953c76542c771cf95930818a53cc4cfb3a1d52998389c7bc63ce0fe2892cc634a3701e01675af6a39bc54777265b3d0692e5959f43dffe4535991de5104518cdbb5101b4713e3d75b847967cc5f16589464980f9831ed54f42f7f58c1c4a7e61021d23ed959e1bc4daeab20704371338df103a5d883f0bdcaee6326a3e76e2e22785e4fcaf3791174a184395dede084d7d54d1e53d7b0d90a15009a71822cb85a25", 0xb8}, {&(0x7f0000000600)="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", 0x107}, {&(0x7f0000000740)="c4f172af0a373eab23fe59b9269a0edbbc3de79634a61afbde7cd17905e46b82ceb390310892f644827db0d86a62058941bd129640d2b7d3c7b98bfbefd6d8a122abc844bd5f052f3c780a1178d1369b7e7fa93e468cd84a12e536d7ac1913781f7f985c095a64493ff65e6d841393dd7efbc213302bd40d4793f2344c26c477a5fb3d3def4572b1ea073eab3ba475c8f35b15488135919bacdc7a91bd8910f976c4bc956678d81a91505149dabdf2c67270acdf0bf13320aad6fdd39c2ba33cbaa3b042a31f369ce347d050f3d19857a28066f99bb1b06b51386132b0102470d1710a40500abc87", 0xe8}, {&(0x7f0000000480)="5b4ee44405f9d6b8121d2d5d3a4ac6cd8f4a05082371253b38f1dce7b6bc3f83163f6ff0d17b9054bce70c175520d26992767a1280406f0d50c48eff0f38de6024d397c3bc8620406ce618ad3e5766540c5de4cad1e85715a7fad8e24f04b40e7f2a6f2f9966c991d8658f9ede881d3458c024f1a6deefb2362f4a31b0cd03a301c50f40b75f8eadbbd568a92e3cb808d30f084cf1ca5e809ae97d4a28e4f86dfd4a4cc036f9d1b498623092376a80045fad0484da267acb460e7a51b91d562adde26d266d5d977d87b15a68a1c0caab858037d55d4f00385d19c83a20d445e426f055269adfa32a547f", 0xffffffffffffff19}], 0x4) r1 = socket$kcm(0x10, 0x2, 0x0) sendmsg$kcm(r1, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000180)=[{&(0x7f0000000040)="d8000000100081044e81f782db44b904021d006a0f000000e8fe55a1290015000600142603600e120900040044000000a80016000a0003400260000000000000b94dcf5c0461c1d67f6f94007134cf6ee08000a0e408e8d8ef52a985162f7ce06bbace8017cbec4c2ee5a7cef4090000001fb791643a5ee4ce1b14d6d930dfe1d9d3220a7c9f8775730d16a4683f1aeb4edbb57a5025ccca9e00360db70100000040fad95667e006dcdf63951f215ce3bb9ad809d5e1cace81ed0bffece0b42a9ecbee5de6ccd40dd6e4edef3d93452a92954b43370e9701", 0xd8}], 0x1}, 0x60044804) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000100)={0x5, 0x4, &(0x7f0000000000)=@framed={{}, [@ldst={0x1, 0x0, 0x3, 0x0, 0x1}]}, &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0xa}, 0x80) r2 = socket$nl_route(0x10, 0x3, 0x0) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) r4 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r4, 0x8933, &(0x7f0000000080)={'geneve1\x00', 0x0}) sendmsg$nl_route(r4, &(0x7f0000000440)={0x0, 0x0, &(0x7f0000000580)={&(0x7f00000000c0)=@newlink={0x6c, 0x10, 0x403, 0x0, 0x0, {0x0, 0x0, 0x4, 0x0, 0x300, 0x8002}, [@IFLA_LINKINFO={0x44, 0x12, 0x0, 0x1, @vlan={{0x9}, {0x34, 0x2, 0x0, 0x1, [@IFLA_VLAN_ID={0x6, 0x1, 0x2}, @IFLA_VLAN_EGRESS_QOS={0x28, 0x3, 0x0, 0x1, [@IFLA_VLAN_QOS_MAPPING={0xc, 0x1, {0x0, 0x5}}, @IFLA_VLAN_QOS_MAPPING={0xc, 0x1, {0x0, 0x80}}, @IFLA_VLAN_QOS_MAPPING={0xc, 0x1, {0x3, 0x101}}]}]}}}, @IFLA_LINK={0x8, 0x5, r5}]}, 0x6c}}, 0x0) ioctl$sock_SIOCGIFINDEX(r3, 0x8933, &(0x7f0000000040)={'wlan1\x00', 0x0}) sendmsg$nl_route(r2, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000140)={&(0x7f00000000c0)=@ipv6_newaddr={0x34, 0x14, 0x1, 0x0, 0x0, {0xa, 0x0, 0x0, 0x0, r6}, [@IFA_ADDRESS={0x14, 0x1, @mcast1}, @IFA_FLAGS={0x8, 0x8, 0x402}]}, 0x34}}, 0x0) bpf$LINK_GET_NEXT_ID(0x1f, &(0x7f00000005c0)={0x8}, 0x8) r7 = socket$kcm(0x2a, 0x2, 0x0) sendmsg$kcm(r7, &(0x7f0000000000)={&(0x7f0000001d00)=@qipcrtr, 0x80, 0x0}, 0x0) sendmsg$kcm(r7, &(0x7f0000001540)={&(0x7f0000000040)=@qipcrtr={0x2a, 0xffffffff, 0xfffffffe}, 0x80, 0x0}, 0x0) setsockopt$sock_int(r0, 0x1, 0x2e, &(0x7f0000000580)=0xfb0, 0x4) 4m53.329415693s ago: executing program 1 (id=2539): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) syz_open_procfs$namespace(0x0, &(0x7f00000000c0)='ns/net\x00') r1 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x16, 0xb, &(0x7f0000000580)=ANY=[@ANYBLOB="18000000000000000000000000000000180000002020702500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000000000000b703000000000000850000007000000095"], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x41100, 0x0, '\x00', 0x0, @flow_dissector, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_PROG_TEST_RUN(0x1c, &(0x7f00000004c0)={r1, 0x3, 0x11, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8}, 0x44) bpf$PROG_LOAD(0x5, 0x0, 0x0) bpf$MAP_CREATE(0x0, 0x0, 0x0) bpf$MAP_UPDATE_BATCH(0x1a, 0x0, 0x0) r2 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000340)={0x11, 0x3, &(0x7f0000000080)=ANY=[@ANYBLOB="180000000000000000000000000000009500000000000000"], &(0x7f0000000000)='syzkaller\x00'}, 0x80) r3 = bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000200)={&(0x7f00000001c0)='sched_process_wait\x00', r2}, 0x10) r4 = bpf$ITER_CREATE(0xb, &(0x7f0000000100)={r3}, 0x8) r5 = bpf$PROG_LOAD(0x5, &(0x7f00002a0fb8)={0x16, 0x4, &(0x7f0000000080)=@framed={{0xffffff85, 0x0, 0x0, 0x0, 0x7, 0x6a, 0xa, 0xff00}, [@call={0xc}, @exit, @map_fd, @jmp]}, &(0x7f0000000140)='GPL\x00', 0x2, 0xffa0, &(0x7f0000000180)=""/149, 0x0, 0x0, '\x00', 0x0, @flow_dissector, 0xffffffffffffffff, 0x8, 0x0, 0x1e, 0x10, 0x0, 0x1e}, 0x2d) r6 = socket(0x1e, 0x1, 0x0) setsockopt$sock_int(r6, 0x1, 0x35, &(0x7f0000000340)=0x2, 0x4) bpf$BPF_GET_PROG_INFO(0xf, &(0x7f0000000980)={r5, 0xe0, &(0x7f0000000880)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, &(0x7f0000000240)=[0x0, 0x0, 0x0], ""/16, 0x0, 0x0, 0x0, 0x0, 0x4, 0xa, &(0x7f0000000700)=[0x0, 0x0, 0x0, 0x0], &(0x7f0000000740)=[0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0], 0x0, 0x55, &(0x7f0000000780)=[{}], 0x8, 0x10, &(0x7f00000007c0), &(0x7f0000000800), 0x8, 0xe0, 0x8, 0x8, &(0x7f0000000840)}}, 0x10) bpf$BPF_PROG_QUERY(0x10, &(0x7f0000000ac0)={@cgroup=r4, 0x26, 0x1, 0x9d80, &(0x7f00000009c0)=[0x0, 0x0, 0x0, 0x0], 0x4, 0x0, &(0x7f0000000a00)=[0x0, 0x0, 0x0], &(0x7f0000000a40)=[0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0], &(0x7f0000000a80)=[0x0, 0x0, 0x0, 0x0, 0x0], 0x0}, 0x40) bpf$BPF_PROG_DETACH(0x8, &(0x7f00000002c0)={@map=r4, r5, 0x22, 0x10, 0x0, @void, @value=r4, @void, @void, r7}, 0x20) r8 = bpf$BPF_MAP_GET_FD_BY_ID(0xe, &(0x7f0000000300)={0x0, 0x6, 0x10}, 0xc) bpf$MAP_UPDATE_BATCH(0x1a, &(0x7f0000000540)={&(0x7f0000000400)="c68a9cb1e983cadf0b4dc7ad761c95f75411b4625cbd65e3f9d6376403f9f10e9310599cbabe41d45b0a2eb3dd0b86befd68e2ab094aff8daed092de7617a66f2ab6fac41a7c4ec961af9adef120e1c727e5f969b6f4817be481de83cf2f101053f651ab109fb1a409666a34d82153d8260d53bee4edc1a0f5e4f16be1563fba14778599fc288d6f4430b863f62acfa29dfcf4e8846088c331cd1d03ecab886859976c89bd68a40abf52705e30837d9338dc6982fff3", &(0x7f0000000240), &(0x7f0000000600)="05891433db91eb20e963e66ce619035b5fc789ae3a0baed164fa570d5b98242d9f18bf4438fbf848edd4c771893bf66740a4514005d5cf767be5f5a2a4513233d53ffcf97e836fd8f719467d57f40037311a0e4019c69837a6578dfb2f5fb14ef3790a2c8627e87c33fafc1eb3a839b73983b9dcf68293f4afa89135430ec28a922dabd4a4479319e1fcaf8b81558ad504db1529f75895db1256dd0c408a340cb44e5f2b68afba4545abec1d7320b90bc54050cb14ac235bb42824111851cce68cf1dcf19bfceeb2c56ed0e8bbdd9aa91d7170fa3ef5ea0cedd90a762cee18e55d88be9315", &(0x7f0000000280)="b7f1bbe1c9cb56265e895c9fc624e9daf2aad95c514f064e71204ded", 0xfffffffa, r8, 0x4}, 0x38) sendmsg$NFT_MSG_GETRULE(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000040)={0x14, 0x19, 0xa, 0x101, 0x0, 0x0, {0x7, 0x0, 0x6}}, 0x14}, 0x1, 0x0, 0x0, 0x44851}, 0x4000080) socket$nl_netfilter(0x10, 0x3, 0xc) (async) syz_open_procfs$namespace(0x0, &(0x7f00000000c0)='ns/net\x00') (async) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x16, 0xb, &(0x7f0000000580)=ANY=[@ANYBLOB="18000000000000000000000000000000180000002020702500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000000000000b703000000000000850000007000000095"], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x41100, 0x0, '\x00', 0x0, @flow_dissector, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) (async) bpf$BPF_PROG_TEST_RUN(0x1c, &(0x7f00000004c0)={r1, 0x3, 0x11, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8}, 0x44) (async) bpf$PROG_LOAD(0x5, 0x0, 0x0) (async) bpf$MAP_CREATE(0x0, 0x0, 0x0) (async) bpf$MAP_UPDATE_BATCH(0x1a, 0x0, 0x0) (async) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000340)={0x11, 0x3, &(0x7f0000000080)=ANY=[@ANYBLOB="180000000000000000000000000000009500000000000000"], &(0x7f0000000000)='syzkaller\x00'}, 0x80) (async) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000200)={&(0x7f00000001c0)='sched_process_wait\x00', r2}, 0x10) (async) bpf$ITER_CREATE(0xb, &(0x7f0000000100)={r3}, 0x8) (async) bpf$PROG_LOAD(0x5, &(0x7f00002a0fb8)={0x16, 0x4, &(0x7f0000000080)=@framed={{0xffffff85, 0x0, 0x0, 0x0, 0x7, 0x6a, 0xa, 0xff00}, [@call={0xc}, @exit, @map_fd, @jmp]}, &(0x7f0000000140)='GPL\x00', 0x2, 0xffa0, &(0x7f0000000180)=""/149, 0x0, 0x0, '\x00', 0x0, @flow_dissector, 0xffffffffffffffff, 0x8, 0x0, 0x1e, 0x10, 0x0, 0x1e}, 0x2d) (async) socket(0x1e, 0x1, 0x0) (async) setsockopt$sock_int(r6, 0x1, 0x35, &(0x7f0000000340)=0x2, 0x4) (async) bpf$BPF_GET_PROG_INFO(0xf, &(0x7f0000000980)={r5, 0xe0, &(0x7f0000000880)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, &(0x7f0000000240)=[0x0, 0x0, 0x0], ""/16, 0x0, 0x0, 0x0, 0x0, 0x4, 0xa, &(0x7f0000000700)=[0x0, 0x0, 0x0, 0x0], &(0x7f0000000740)=[0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0], 0x0, 0x55, &(0x7f0000000780)=[{}], 0x8, 0x10, &(0x7f00000007c0), &(0x7f0000000800), 0x8, 0xe0, 0x8, 0x8, &(0x7f0000000840)}}, 0x10) (async) bpf$BPF_PROG_QUERY(0x10, &(0x7f0000000ac0)={@cgroup=r4, 0x26, 0x1, 0x9d80, &(0x7f00000009c0)=[0x0, 0x0, 0x0, 0x0], 0x4, 0x0, &(0x7f0000000a00)=[0x0, 0x0, 0x0], &(0x7f0000000a40)=[0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0], &(0x7f0000000a80)=[0x0, 0x0, 0x0, 0x0, 0x0]}, 0x40) (async) bpf$BPF_PROG_DETACH(0x8, &(0x7f00000002c0)={@map=r4, r5, 0x22, 0x10, 0x0, @void, @value=r4, @void, @void, r7}, 0x20) (async) bpf$BPF_MAP_GET_FD_BY_ID(0xe, &(0x7f0000000300)={0x0, 0x6, 0x10}, 0xc) (async) bpf$MAP_UPDATE_BATCH(0x1a, &(0x7f0000000540)={&(0x7f0000000400)="c68a9cb1e983cadf0b4dc7ad761c95f75411b4625cbd65e3f9d6376403f9f10e9310599cbabe41d45b0a2eb3dd0b86befd68e2ab094aff8daed092de7617a66f2ab6fac41a7c4ec961af9adef120e1c727e5f969b6f4817be481de83cf2f101053f651ab109fb1a409666a34d82153d8260d53bee4edc1a0f5e4f16be1563fba14778599fc288d6f4430b863f62acfa29dfcf4e8846088c331cd1d03ecab886859976c89bd68a40abf52705e30837d9338dc6982fff3", &(0x7f0000000240), &(0x7f0000000600)="05891433db91eb20e963e66ce619035b5fc789ae3a0baed164fa570d5b98242d9f18bf4438fbf848edd4c771893bf66740a4514005d5cf767be5f5a2a4513233d53ffcf97e836fd8f719467d57f40037311a0e4019c69837a6578dfb2f5fb14ef3790a2c8627e87c33fafc1eb3a839b73983b9dcf68293f4afa89135430ec28a922dabd4a4479319e1fcaf8b81558ad504db1529f75895db1256dd0c408a340cb44e5f2b68afba4545abec1d7320b90bc54050cb14ac235bb42824111851cce68cf1dcf19bfceeb2c56ed0e8bbdd9aa91d7170fa3ef5ea0cedd90a762cee18e55d88be9315", &(0x7f0000000280)="b7f1bbe1c9cb56265e895c9fc624e9daf2aad95c514f064e71204ded", 0xfffffffa, r8, 0x4}, 0x38) (async) sendmsg$NFT_MSG_GETRULE(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000040)={0x14, 0x19, 0xa, 0x101, 0x0, 0x0, {0x7, 0x0, 0x6}}, 0x14}, 0x1, 0x0, 0x0, 0x44851}, 0x4000080) (async) 4m53.296916358s ago: executing program 3 (id=2542): r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_HEADER(r1, &(0x7f0000003c00)={0x0, 0x0, &(0x7f0000003bc0)={&(0x7f0000003b80)={0x1c, 0xc, 0x6, 0x301, 0x0, 0x0, {}, [@IPSET_ATTR_PROTOCOL={0x5}]}, 0x1c}}, 0x0) r2 = socket$inet6_udp(0xa, 0x2, 0x0) bind$inet6(r2, &(0x7f0000000500)={0xa, 0x4e20, 0xffffffff, @mcast2, 0x1}, 0x1c) r3 = socket$pppoe(0x18, 0x1, 0x0) connect$pppoe(r3, &(0x7f0000000400)={0x18, 0x0, {0x2, @dev={'\xaa\xaa\xaa\xaa\xaa', 0xa}, 'lo\x00'}}, 0x1e) socket$nl_route(0x10, 0x3, 0x0) socket(0x2, 0x80805, 0x0) r4 = socket$pppoe(0x18, 0x1, 0x0) connect$pppoe(r4, &(0x7f0000000040)={0x18, 0x0, {0x1, @remote, 'ip6gre0\x00'}}, 0x1e) ioctl$PPPOEIOCSFWD(r4, 0x4008b100, &(0x7f00000000c0)={0x18, 0x0, {0x1, @broadcast, 'veth0_to_team\x00'}}) connect$inet6(r2, &(0x7f0000000300)={0xa, 0x4e24, 0xd, @remote, 0x1}, 0x1c) syz_emit_ethernet(0x7e, &(0x7f0000000340)=ANY=[@ANYBLOB="aaaaaaaaaaaabbbbbbbbbbbb86dd6a33180000481100fe800000000000000000d500000000bbff0200000000000000000000000000014e204e20"], 0x0) r5 = socket$nl_generic(0x10, 0x3, 0x10) r6 = syz_genetlink_get_family_id$tipc2(&(0x7f0000000140), 0xffffffffffffffff) sendmsg$TIPC_NL_BEARER_GET(r5, &(0x7f00000001c0)={&(0x7f0000000080)={0x10, 0x0, 0x0, 0x400000}, 0xc, &(0x7f0000000180)={&(0x7f0000000300)={0x23c, r6, 0x10, 0x70bd2c, 0x25dfdbfb, {}, [@TIPC_NLA_BEARER={0x114, 0x1, 0x0, 0x1, [@TIPC_NLA_BEARER_PROP={0x54, 0x2, 0x0, 0x1, [@TIPC_NLA_PROP_TOL={0x8, 0x2, 0x5}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0xb}, @TIPC_NLA_PROP_TOL={0x8, 0x2, 0x3}, @TIPC_NLA_PROP_MTU={0x8, 0x4, 0x72fb}, @TIPC_NLA_PROP_MTU={0x8, 0x4, 0xffffffd5}, @TIPC_NLA_PROP_WIN={0x8, 0x3, 0x5}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0xe}, @TIPC_NLA_PROP_WIN={0x8, 0x3, 0x3}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x1d}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x11}]}, @TIPC_NLA_BEARER_DOMAIN={0x8, 0x3, 0x7}, @TIPC_NLA_BEARER_DOMAIN={0x8, 0x3, 0x4}, @TIPC_NLA_BEARER_UDP_OPTS={0x38, 0x4, {{0x20, 0x1, @in6={0xa, 0x4e22, 0x1, @initdev={0xfe, 0x88, '\x00', 0x1, 0x0}, 0x40}}, {0x14, 0x2, @in={0x2, 0x4e24, @multicast2}}}}, @TIPC_NLA_BEARER_PROP={0xc, 0x2, 0x0, 0x1, [@TIPC_NLA_PROP_TOL={0x8, 0x2, 0x28d}]}, @TIPC_NLA_BEARER_DOMAIN={0x8, 0x3, 0x4}, @TIPC_NLA_BEARER_UDP_OPTS={0x38, 0x4, {{0x20, 0x1, @in6={0xa, 0x4e24, 0xc, @ipv4={'\x00', '\xff\xff', @remote}, 0x10001}}, {0x14, 0x2, @in={0x2, 0x4e21, @private=0xa010100}}}}, @TIPC_NLA_BEARER_NAME={0xd, 0x1, @udp='udp:syz2\x00'}, @TIPC_NLA_BEARER_NAME={0x15, 0x1, @l2={'ib', 0x3a, 'veth1_to_team\x00'}}]}, @TIPC_NLA_MEDIA={0xe8, 0x5, 0x0, 0x1, [@TIPC_NLA_MEDIA_PROP={0xc, 0x2, 0x0, 0x1, [@TIPC_NLA_PROP_WIN={0x8, 0x3, 0x6}]}, @TIPC_NLA_MEDIA_PROP={0x54, 0x2, 0x0, 0x1, [@TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x1a}, @TIPC_NLA_PROP_MTU={0x8, 0x4, 0x1ff}, @TIPC_NLA_PROP_MTU={0x8, 0x4, 0x10}, @TIPC_NLA_PROP_TOL={0x8, 0x2, 0xd}, @TIPC_NLA_PROP_WIN={0x8, 0x3, 0x101}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x5}, @TIPC_NLA_PROP_TOL={0x8, 0x2, 0x3}, @TIPC_NLA_PROP_TOL={0x8, 0x2, 0x2}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x12}, @TIPC_NLA_PROP_MTU={0x8, 0x4, 0x1}]}, @TIPC_NLA_MEDIA_PROP={0x24, 0x2, 0x0, 0x1, [@TIPC_NLA_PROP_WIN={0x8, 0x3, 0xe37}, @TIPC_NLA_PROP_WIN={0x8, 0x3, 0x1522}, @TIPC_NLA_PROP_WIN={0x8, 0x3, 0x5}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x7}]}, @TIPC_NLA_MEDIA_NAME={0x7, 0x1, 'ib\x00'}, @TIPC_NLA_MEDIA_PROP={0x14, 0x2, 0x0, 0x1, [@TIPC_NLA_PROP_PRIO={0x8, 0x1, 0xb}, @TIPC_NLA_PROP_MTU={0x8, 0x4, 0x10000}]}, @TIPC_NLA_MEDIA_PROP={0x3c, 0x2, 0x0, 0x1, [@TIPC_NLA_PROP_PRIO={0x8, 0x1, 0xe}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x14}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x12}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0xd}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x4}, @TIPC_NLA_PROP_WIN={0x8}, @TIPC_NLA_PROP_WIN={0x8, 0x3, 0x1}]}, @TIPC_NLA_MEDIA_NAME={0x8, 0x1, 'eth\x00'}]}, @TIPC_NLA_MON={0x2c, 0x9, 0x0, 0x1, [@TIPC_NLA_MON_REF={0x8}, @TIPC_NLA_MON_ACTIVATION_THRESHOLD={0x8, 0x1, 0x7ff}, @TIPC_NLA_MON_REF={0x8, 0x2, 0x1}, @TIPC_NLA_MON_REF={0x8, 0x2, 0x4}, @TIPC_NLA_MON_ACTIVATION_THRESHOLD={0x8, 0x1, 0x9}]}]}, 0x23c}}, 0x4080) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f00000000c0)={'bridge0\x00', 0x0}) ioctl$BTRFS_IOC_SPACE_INFO(r0, 0xc0109414, &(0x7f000000c300)={0x5dd, 0xbdd, ['\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00']}) bpf$MAP_CREATE(0x0, &(0x7f00000005c0)=@bloom_filter={0x1e, 0xffff652f, 0x5, 0x800, 0x88, 0xffffffffffffffff, 0x1, '\x00', r7, 0xffffffffffffffff, 0x4, 0x2, 0x5, 0x8}, 0x50) r8 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0xc, 0x12, &(0x7f0000000280)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000002c0)={0x0, r8, 0x0, 0x7}, 0x18) socket$nl_netfilter(0x10, 0x3, 0xc) r9 = openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0) ioctl$TUNSETIFF(r9, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x7101}) r10 = socket(0x400000000010, 0x3, 0x0) r11 = socket$unix(0x1, 0x1, 0x0) ioctl$sock_SIOCGIFINDEX(r11, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r10, &(0x7f00000012c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000001c0)=@newqdisc={0x78, 0x24, 0x4ee4e6a52ff56541, 0x70bd2a, 0xffffffff, {0x0, 0x0, 0x0, r12, {0x0, 0x3}, {0xffff, 0xffff}, {0xffe0, 0xf}}, [@qdisc_kind_options=@q_sfq={{0x8}, {0x4c, 0x2, {{0x6, 0x3, 0xc06a2f6, 0x1, 0x7}, 0x6, 0x0, 0xa, 0x4, 0x6, 0x0, 0x18, 0x9, 0x3, 0x4, {0x0, 0x2, 0x9, 0x800, 0x8704, 0x27000000}}}}]}, 0x78}}, 0x0) sendmsg$nl_route_sched(r10, &(0x7f0000006040)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000280)=@newtfilter={0x48, 0x2c, 0xd2b, 0x801, 0x25dfdbfb, {0x0, 0x0, 0x0, r12, {0x9, 0x6}, {}, {0x7, 0xffff}}, [@filter_kind_options=@f_flower={{0xb}, {0x18, 0x2, [@TCA_FLOWER_KEY_ETH_SRC_MASK={0xa, 0x7, [0x0, 0x0, 0xff, 0x0, 0x0, 0xff]}, @TCA_FLOWER_KEY_IP_TOS_MASK={0x5, 0x4a, 0xb5}]}}]}, 0x48}}, 0x24044094) 4m53.294883756s ago: executing program 1 (id=2543): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) r1 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r1, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000f80)={0x2c, 0x2c, 0x107, 0x0, 0x25dfdbff, {0x3, 0x7c}, [@nested={0x8, 0x1, 0x0, 0x1, [@typed={0x4, 0x6}]}, @nested={0x10, 0x2, 0x0, 0x1, [@nested={0xc, 0x1, 0x0, 0x1, [@nested={0x8, 0x8e, 0x0, 0x1, [@nested={0x4, 0xe9}]}]}]}]}, 0x2c}, 0x1, 0x0, 0x0, 0xc000}, 0xc010) sendmsg$NFT_BATCH(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000340)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a28000000000a0101000000005e1affd5020000000900010073797a300000000008000240000000032c000000030a01030000e6ff00000000020000000900010073797a30000000000900030073797a320000000014000000110001"], 0x7c}}, 0x10) sendmsg$NFT_BATCH(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000003c0)={{0x14}, [@NFT_MSG_NEWRULE={0x80, 0x6, 0xa, 0x40b, 0x0, 0x0, {0x2}, [@NFTA_RULE_EXPRESSIONS={0x54, 0x4, 0x0, 0x1, [{0x50, 0x1, 0x0, 0x1, @inner={{0xa}, @val={0x40, 0x2, 0x0, 0x1, [@NFTA_INNER_TYPE={0x8, 0x2, 0x1, 0x0, 0x84}, @NFTA_INNER_FLAGS={0x8, 0x3, 0x1, 0x0, 0x7}, @NFTA_INNER_HDRSIZE={0x8, 0x4, 0x1, 0x0, 0xf}, @NFTA_INNER_NUM={0x8}, @NFTA_INNER_EXPR={0x1c, 0x5, 0x0, 0x1, @payload={{0xc}, @val={0xc, 0x2, 0x0, 0x1, [@NFTA_PAYLOAD_BASE={0x8, 0x2, 0x1, 0x0, 0x5}]}}}]}}}]}, @NFTA_RULE_TABLE={0x9, 0x1, 'syz0\x00'}, @NFTA_RULE_TABLE={0x9, 0x1, 'syz0\x00'}]}], {0x14}}, 0xa8}}, 0x0) 4m53.176995754s ago: executing program 1 (id=2544): r0 = socket$unix(0x1, 0x1, 0x0) r1 = openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0) ioctl$TUNSETIFF(r1, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x7101}) r2 = socket(0x400000000010, 0x3, 0x0) r3 = socket$unix(0x1, 0x1, 0x0) ioctl$sock_SIOCGIFINDEX(r3, 0x8933, &(0x7f0000000340)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r2, &(0x7f0000000bc0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000440)=@newqdisc={0x48, 0x24, 0x4ee4e6a52ff56541, 0x70bd2a, 0xffffffff, {0x0, 0x0, 0x0, r4, {0x0, 0xfff1}, {0xffff, 0xffff}, {0x0, 0x2}}, [@qdisc_kind_options=@q_htb={{0x8}, {0x1c, 0x2, [@TCA_HTB_INIT={0x18, 0x2, {0x3, 0x0, 0x7}}]}}]}, 0x48}}, 0x0) sendmsg$nl_route_sched(r2, &(0x7f0000000580)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000640)=@newtfilter={0x38, 0x2c, 0xd27, 0x30bd29, 0x25dfdc00, {0x0, 0x0, 0x0, r4, {0x0, 0x4}, {}, {0x8, 0xf}}, [@filter_kind_options=@f_matchall={{0xd}, {0x4}}]}, 0x38}, 0x1, 0x0, 0x0, 0x20000010}, 0x20000000) r5 = socket$kcm(0x11, 0x3, 0x0) r6 = openat$tun(0xffffffffffffff9c, &(0x7f0000000400), 0x0, 0x0) close(r6) socket$nl_generic(0x10, 0x3, 0x10) ioctl$SIOCSIFHWADDR(r6, 0x8914, &(0x7f0000002280)={'syzkaller0\x00', @multicast}) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) setsockopt$sock_attach_bpf(r5, 0x107, 0xf, &(0x7f0000000600), 0x56) sendmsg$kcm(r5, &(0x7f0000000280)={&(0x7f0000000380)=@xdp={0x2c, 0x0, r7, 0x3e}, 0x80, &(0x7f00000001c0)=[{&(0x7f0000000180)="27030200000214000e00002fb96dffff1144ee163cddcb00"/38, 0x26}, {&(0x7f00000004c0)="f058fe7dad777f8f", 0x300}], 0x2}, 0x5) 4m53.065717039s ago: executing program 3 (id=2545): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) r1 = socket$kcm(0x1e, 0x4, 0x0) r2 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r3 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r4 = syz_init_net_socket$bt_l2cap(0x1f, 0x2, 0x0) setsockopt$bt_BT_SECURITY(r4, 0x112, 0x4, 0x0, 0x0) r5 = syz_genetlink_get_family_id$ieee802154(&(0x7f0000000540), r3) sendmsg$IEEE802154_LLSEC_SETPARAMS(r2, &(0x7f0000000780)={0x0, 0x0, &(0x7f0000000740)={&(0x7f0000000700)={0x14, r5, 0x1, 0x0, 0x0, {0x22}}, 0x14}}, 0x0) setsockopt$sock_attach_bpf(r1, 0x10f, 0x87, &(0x7f00000008c0), 0x43) r6 = syz_init_net_socket$rose(0xb, 0x5, 0x0) recvfrom$rose(r6, 0x0, 0x0, 0x0, 0x0, 0x0) r7 = socket$kcm(0x1e, 0x4, 0x0) setsockopt$sock_attach_bpf(r7, 0x10f, 0x87, &(0x7f00000008c0), 0x43) r8 = socket(0x2, 0x80805, 0x0) r9 = bpf$MAP_CREATE(0x0, &(0x7f0000000440)=@base={0x1, 0x40, 0x6, 0x6, 0x0, 0xffffffffffffffff, 0x20}, 0x50) bpf$MAP_CREATE(0x0, &(0x7f0000000580)=ANY=[@ANYBLOB="0c007171c5a8f5bb700ec200000400000004000000f8ffffff00000000", @ANYRES32=r9, @ANYBLOB='\x00'/20, @ANYBLOB="318dbbbd0ffc5d458d24d79e411f4320af828d6a00751842284c841bf76012a42edf0c1342619ff5cf759dbcb8f1952dda4400938ec45fd9228aaebfd2af2d2d3903f25941a511e73c59df39dedee58bea67d78b42a758130b2588f77a7ed20f8d1d252dcd16add02587b518370c1e12503e72cb9946c60e7668ffd3f4b8abc43d120f368026786f56208d1b5199ac5d7f95e3c15625feabecefe83f9cc4448c296c282569af45f92922823a982aa3595941949fcd61cccdc56f415b0675d78eee4055edcbad78c9946dd699ccb951a820fd5bc7c34a25a08bf3dd693cef5d6fdc442bad3604d688511c816f", @ANYRES32, @ANYBLOB='\x00'/28], 0x48) setsockopt$IP_VS_SO_SET_STOPDAEMON(r8, 0x0, 0x48c, &(0x7f0000000080)={0x0, 'veth1_to_hsr\x00', 0x4}, 0x18) write$cgroup_subtree(r7, &(0x7f0000000040)=ANY=[], 0xfdef) close(r7) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) sendmsg$nl_netfilter(r0, &(0x7f0000000280)={&(0x7f0000000200)={0x10, 0x0, 0x0, 0x88}, 0xc, &(0x7f0000000240)={&(0x7f0000000940)=ANY=[@ANYBLOB="d00100000e04010126bd7000fbdbdf2503000000c7000980dc2894ad9981ae900a285beaff9a21235a0136a0dd2cf874e53c1e68b16e00852c560f7f53928b58fdac4738f005a6f591a870c0053fd7c9aaa6e44685049182254f8e6ae7e7e764dd565633e0e44669f9f13dd68cb3546f3140cb9306c80a6fdfa710fbbce5ae42e1c0a01eb94431d21cdd0c203706e52f4213b6f3dc7bad820acbd2cc8691c966cb3ac8cb517a3984f8fc643abb2560252d04db86ca161b86da13f9d588a5f8a773fa3b0b6e850a4c799b40a2692229744160d41e5019fdc9656e89c2704e3ed7cb36c65650fef90eaf4d6fa2d13783e700df8dc693f8eb907256e80461783836be224227b632f07a355eb4b7a932529ec451634fe2de6de21fdb830400e9000800868004000e80bb009f0060e6ae7c62006cc8c403a099ad483c9048c84392aeae6824c95ddc43472db3f5e84c0752e3fb200aeaf08ed88fa9d1139b3fb4a1f0bf96306e725b364164d00c055925bd62b4b3a87d8302001257ac557335fad882a95ca36f8e664e22ace939932548f610c7fa1e675310b92596736e8bb6d8494273475cbccd850997b861aa7ce05e253c18c4b1514031806f7ed61076a981db3d5d0da069db532485fb72d9ceca9202f7b9deabdd7fd29a235d0a6002e2deecf1c62e0000001a25a9350640633e89d782034ca50384ae0bb365b6b7887af0b769b561fd5bb7b92685fef624167d43bcc0b74074a9374d9f9789e8d9c64aaf3f94b499de0e27479f6ff8878d51e3239e91b22269aaeda3ad237928f88317b2944bfea47f66efe2a701118b9db017d02020c6254c67fbdbecadbd09ab636dff22df2609890d064d25c63d64b1a7b31e8f2a223fe6dc367df683134e5e7b9e0e175cd8c3eef351e91c165d5eef57c7f96a97315e3cc0df3ed00b"], 0x1d0}, 0x1, 0x0, 0x0, 0x10}, 0x8895) r12 = socket$nl_generic(0x10, 0x3, 0x10) r13 = syz_genetlink_get_family_id$mptcp(&(0x7f0000000280), r12) sendmsg$MPTCP_PM_CMD_SET_FLAGS(0xffffffffffffffff, &(0x7f0000000200)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000140)={0x20, r13, 0x1, 0x70bd2b, 0x25dfdbfd, {}, [@MPTCP_PM_ATTR_ADDR={0x4}, @MPTCP_PM_ATTR_TOKEN={0x8, 0x4, 0xea}]}, 0x20}, 0x1, 0x0, 0x0, 0x40000}, 0x20040000) sendmsg$inet(r11, &(0x7f0000001600)={0x0, 0x0, &(0x7f0000000880)=[{&(0x7f0000000900)='T', 0x1}], 0x1}, 0x4048841) recvmsg(0xffffffffffffffff, &(0x7f0000000840)={0x0, 0xfffffffffffffded, 0x0, 0x0, 0x0, 0x24}, 0x40010041) sendmsg$inet(r11, &(0x7f0000000700)={0x0, 0x0, &(0x7f0000000180)=[{&(0x7f00000001c0)="04", 0x1}], 0x1}, 0x1) recvmsg(r10, &(0x7f0000000100)={0x0, 0x0, 0x0}, 0x1) recvmsg(r1, &(0x7f0000000300)={0x0, 0x0, &(0x7f00000002c0)=[{&(0x7f0000003a80)=""/4101, 0x1005}], 0x1}, 0x2101) sendmsg$NFT_BATCH(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000780)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a20000000000a01020000000000000000070000000900010073797a30000000004c000000090a010400000000000000000700000008000a40000000000900020073797a31000000000900010073797a3000000000080005400000000d08000640ffffff000800034000000038580000000c0a01010000000000000000070000000900020073797a31000000000900010073797a30000000002c000380280000800800034000000002040002800c0004400000000000000d9d0c0005400097"], 0xec}}, 0x0) 4m53.059137233s ago: executing program 1 (id=2546): r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r0, &(0x7f00000003c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000004300)=@newtaction={0x88, 0x30, 0xffff, 0x0, 0x0, {0x0, 0x0, 0x1300}, [{0x74, 0x1, [@m_mirred={0x70, 0x1, 0x0, 0x0, {{0xb}, {0x44, 0x2, 0x0, 0x1, [@TCA_MIRRED_PARMS={0x20, 0x4, {{0x6}}}, @TCA_MIRRED_PARMS={0x20, 0x2, {{0x0, 0x0, 0xffffffffffffffff}, 0x3}}]}, {0x4}, {0xc}, {0xc, 0x8, {0x0, 0x1}}}}]}]}, 0x88}}, 0x0) r1 = socket$nl_rdma(0x10, 0x3, 0x14) sendmsg$RDMA_NLDEV_CMD_NEWLINK(r1, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000040)=ANY=[@ANYBLOB="387f7500031400032af36100fedbdf250900020073797a310000000008004100736977001400330076657468315f766972745f7769666900"], 0x38}, 0x1, 0x0, 0x0, 0x800}, 0x200040c4) sendmsg$RDMA_NLDEV_CMD_STAT_SET(r1, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000000)={0x38, 0x1410, 0x8b7fbbc5948fecd9, 0x70bd29, 0x25dfd9fc, "", [@RDMA_NLDEV_ATTR_PORT_INDEX={0x8, 0x3, 0x1}, @RDMA_NLDEV_ATTR_DEV_INDEX={0x8}, @RDMA_NLDEV_ATTR_STAT_RES={0x8}, @RDMA_NLDEV_ATTR_STAT_MODE={0x8, 0x4a, 0x1}, @RDMA_NLDEV_ATTR_STAT_AUTO_MODE_MASK={0x8, 0x4c, 0x1}]}, 0x38}, 0x1, 0x0, 0x0, 0x20004085}, 0x4004080) 4m52.777646065s ago: executing program 32 (id=2546): r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r0, &(0x7f00000003c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000004300)=@newtaction={0x88, 0x30, 0xffff, 0x0, 0x0, {0x0, 0x0, 0x1300}, [{0x74, 0x1, [@m_mirred={0x70, 0x1, 0x0, 0x0, {{0xb}, {0x44, 0x2, 0x0, 0x1, [@TCA_MIRRED_PARMS={0x20, 0x4, {{0x6}}}, @TCA_MIRRED_PARMS={0x20, 0x2, {{0x0, 0x0, 0xffffffffffffffff}, 0x3}}]}, {0x4}, {0xc}, {0xc, 0x8, {0x0, 0x1}}}}]}]}, 0x88}}, 0x0) r1 = socket$nl_rdma(0x10, 0x3, 0x14) sendmsg$RDMA_NLDEV_CMD_NEWLINK(r1, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000040)=ANY=[@ANYBLOB="387f7500031400032af36100fedbdf250900020073797a310000000008004100736977001400330076657468315f766972745f7769666900"], 0x38}, 0x1, 0x0, 0x0, 0x800}, 0x200040c4) sendmsg$RDMA_NLDEV_CMD_STAT_SET(r1, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000000)={0x38, 0x1410, 0x8b7fbbc5948fecd9, 0x70bd29, 0x25dfd9fc, "", [@RDMA_NLDEV_ATTR_PORT_INDEX={0x8, 0x3, 0x1}, @RDMA_NLDEV_ATTR_DEV_INDEX={0x8}, @RDMA_NLDEV_ATTR_STAT_RES={0x8}, @RDMA_NLDEV_ATTR_STAT_MODE={0x8, 0x4a, 0x1}, @RDMA_NLDEV_ATTR_STAT_AUTO_MODE_MASK={0x8, 0x4c, 0x1}]}, 0x38}, 0x1, 0x0, 0x0, 0x20004085}, 0x4004080) 4m52.73328861s ago: executing program 3 (id=2551): r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$netlbl_cipso(&(0x7f0000000240), r0) r2 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r3 = syz_genetlink_get_family_id$net_dm(&(0x7f0000000140), r2) bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000200)={&(0x7f0000001080)=ANY=[@ANYBLOB="9feb010018000000000000002400000024000000050000000000000001000084000000000300000002000000000000210000000000000005000000000000005f"], &(0x7f0000000280)=""/265, 0x41, 0x109, 0x1}, 0x20) sendmsg$NET_DM_CMD_STOP(r2, &(0x7f0000000300)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f0000000280)={0x14, r3, 0x1, 0x70bd2c, 0x25dfdbff}, 0x14}}, 0x800) r4 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r5 = syz_genetlink_get_family_id$netlbl_mgmt(&(0x7f0000000340), r0) sendmsg$NLBL_MGMT_C_LISTALL(r4, &(0x7f0000000400)={&(0x7f00000001c0)={0x10, 0x0, 0x0, 0x100000}, 0xc, &(0x7f00000003c0)={&(0x7f0000000380)={0x30, r5, 0x8, 0x70bd2c, 0x25dfdbfb, {}, [@NLBL_MGMT_A_IPV4MASK={0x8, 0x8, @rand_addr=0x64010100}, @NLBL_MGMT_A_IPV6MASK={0x14, 0x6, @initdev={0xfe, 0x88, '\x00', 0x1, 0x0}}]}, 0x30}, 0x1, 0x0, 0x0, 0x4c080}, 0x40040) sendmsg$NET_DM_CMD_START(r0, &(0x7f0000000480)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x40000}, 0xc, &(0x7f0000000440)={&(0x7f0000000100)={0x14, r3, 0x20, 0x70bd2b, 0x25dfdbfd, {}, ["", "", "", ""]}, 0x14}, 0x1, 0x0, 0x0, 0x20044085}, 0x400c011) sendmsg$NLBL_CIPSOV4_C_ADD(r0, &(0x7f0000000200)={0x0, 0x9000000, &(0x7f0000000040)={&(0x7f0000000080)=ANY=[@ANYBLOB='P\x00\x00\x00', @ANYRES16=r1, @ANYBLOB="010000000000000000000100000008000100040000002c0004800500030080ff00000500030080ffffff05000380ff0000000400030080ffffff0500030080ffffff0800020003"], 0x50}}, 0x0) 4m52.584973816s ago: executing program 33 (id=2551): r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$netlbl_cipso(&(0x7f0000000240), r0) r2 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r3 = syz_genetlink_get_family_id$net_dm(&(0x7f0000000140), r2) bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000200)={&(0x7f0000001080)=ANY=[@ANYBLOB="9feb010018000000000000002400000024000000050000000000000001000084000000000300000002000000000000210000000000000005000000000000005f"], &(0x7f0000000280)=""/265, 0x41, 0x109, 0x1}, 0x20) sendmsg$NET_DM_CMD_STOP(r2, &(0x7f0000000300)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f0000000280)={0x14, r3, 0x1, 0x70bd2c, 0x25dfdbff}, 0x14}}, 0x800) r4 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r5 = syz_genetlink_get_family_id$netlbl_mgmt(&(0x7f0000000340), r0) sendmsg$NLBL_MGMT_C_LISTALL(r4, &(0x7f0000000400)={&(0x7f00000001c0)={0x10, 0x0, 0x0, 0x100000}, 0xc, &(0x7f00000003c0)={&(0x7f0000000380)={0x30, r5, 0x8, 0x70bd2c, 0x25dfdbfb, {}, [@NLBL_MGMT_A_IPV4MASK={0x8, 0x8, @rand_addr=0x64010100}, @NLBL_MGMT_A_IPV6MASK={0x14, 0x6, @initdev={0xfe, 0x88, '\x00', 0x1, 0x0}}]}, 0x30}, 0x1, 0x0, 0x0, 0x4c080}, 0x40040) sendmsg$NET_DM_CMD_START(r0, &(0x7f0000000480)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x40000}, 0xc, &(0x7f0000000440)={&(0x7f0000000100)={0x14, r3, 0x20, 0x70bd2b, 0x25dfdbfd, {}, ["", "", "", ""]}, 0x14}, 0x1, 0x0, 0x0, 0x20044085}, 0x400c011) sendmsg$NLBL_CIPSOV4_C_ADD(r0, &(0x7f0000000200)={0x0, 0x9000000, &(0x7f0000000040)={&(0x7f0000000080)=ANY=[@ANYBLOB='P\x00\x00\x00', @ANYRES16=r1, @ANYBLOB="010000000000000000000100000008000100040000002c0004800500030080ff00000500030080ffffff05000380ff0000000400030080ffffff0500030080ffffff0800020003"], 0x50}}, 0x0) 9.533854286s ago: executing program 0 (id=6229): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) r1 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r1, &(0x7f000000c2c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000002f40)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a28000000000a0101000000005e1affd5020000000900010073797a300000000008000240000000032c000000030a01030000e6ff00000000020000000900010073797a30000000000900030073797a320000000014000000110001"], 0x7c}}, 0x0) (async) sendmsg$NFT_BATCH(r1, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000002c40)={{0x14}, [@NFT_MSG_NEWRULE={0x58, 0x6, 0xa, 0x409, 0x0, 0x0, {0x2}, [@NFTA_RULE_CHAIN={0x9, 0x2, 'syz2\x00'}, @NFTA_RULE_TABLE={0x9, 0x1, 'syz0\x00'}, @NFTA_RULE_EXPRESSIONS={0x2c, 0x4, 0x0, 0x1, [{0x28, 0x1, 0x0, 0x1, @nat={{0x8}, @val={0x1c, 0x2, 0x0, 0x1, [@NFTA_NAT_TYPE={0x8}, @NFTA_NAT_FAMILY={0x8, 0x2, 0x1, 0x0, 0xa}, @NFTA_NAT_REG_ADDR_MIN={0x8, 0x3, 0x1, 0x0, 0x16}]}}}]}]}], {0x14}}, 0x80}}, 0x0) (async) sendmsg$NFT_BATCH(r0, &(0x7f000000c2c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000340)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a28000000000a0101000000005e1affd5020000000900010073797a300000000008000240000000032c000000030a01030000e6ff00000000020000000900010073797a30000000000900030073797a320000000014000000110001"], 0x7c}}, 0x0) sendmsg$NFT_BATCH(r0, &(0x7f0000000000)={0x0, 0xfffffffffffffd5e, &(0x7f0000000040)={&(0x7f0000000240)={{0x14}, [@NFT_MSG_NEWRULE={0x50, 0x6, 0xa, 0x40b, 0x0, 0x0, {0xa}, [@NFTA_RULE_EXPRESSIONS={0x24}, @NFTA_RULE_TABLE={0x9, 0x1, 'syz0\x00'}, @NFTA_RULE_CHAIN={0x9, 0x2, 'syz2\x00'}]}], {0x14}}, 0x78}}, 0x0) socket$nl_generic(0x10, 0x3, 0x10) (async) syz_genetlink_get_family_id$nl80211(&(0x7f0000000080), 0xffffffffffffffff) (async) r2 = socket$inet6_udplite(0xa, 0x2, 0x88) ioctl$sock_SIOCGIFINDEX_80211(r2, 0x8933, &(0x7f0000000040)={'wlan0\x00'}) r3 = openat$tun(0xffffffffffffff9c, &(0x7f0000000140), 0x0, 0x0) ioctl$TUNSETIFF(r3, 0x400454ca, &(0x7f0000000080)={'pimreg0\x00', 0x7c2}) (async) ioctl$TUNATTACHFILTER(r3, 0x401054d5, &(0x7f0000000040)={0x1, &(0x7f0000000000)=[{0x6}]}) (async) r4 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000340)={0x11, 0x3, &(0x7f0000000080)=ANY=[@ANYBLOB="1800000000000000000000000000000095"], &(0x7f0000000000)='syzkaller\x00'}, 0x94) r5 = bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000004c0)={&(0x7f0000000440)='ext4_fc_track_inode\x00', r4, 0x0, 0x204}, 0x18) r6 = bpf$ITER_CREATE(0xb, &(0x7f0000000100)={r5}, 0x8) (async) r7 = bpf$PROG_LOAD(0x5, &(0x7f00002a0fb8)={0x16, 0x4, &(0x7f0000000300)=ANY=[@ANYBLOB="85000000070000006a0a00ff000000220c00000000000000950000000000000018100000", @ANYRES32, @ANYBLOB="0000002100000000050000000000000095c333d4c0a3ecdd69086b8e4c36439a8808b90ea579cdf8bd475a470064827701f4169ebebecb5bba94f06f020fb64e5594a86f5f00000000000008c7533dc98a94008d7d2a7d2c23bc3f4cc1992aebd29fd21e95b3c7c49de340c24cb6ba1a33740825c424ecd87a3b02ae7840be900964b6948074a8f2ed867fd6601b0ca02215f4c2a5157135575fa1903abe92246853cb7cb868a3b2524a92bfa8aaeaf3ff3f08fb97ec0c126bfea903ef567bdf48aecb23342c8102732b7257f65b1f7d82adec836fd77d2f5c6e6c18ae428531d9e4d906b0a19827bffab9ced1e24e8f063d44fb76dd59e75486"], &(0x7f0000000140)='GPL\x00', 0x2, 0xffa0, &(0x7f0000000180)=""/149, 0x0, 0x0, '\x00', 0x0, @flow_dissector, 0xffffffffffffffff, 0x8, 0x0, 0x1e, 0x10, 0x0, 0x1e}, 0x2d) bpf$BPF_PROG_DETACH(0x9, &(0x7f00000002c0)={@ifindex, r7, 0x11, 0x0, 0x0, @void, @value=r6}, 0x20) (async) ioctl$TUNDETACHFILTER(r3, 0x401054d6, 0x0) sendmsg$IPSET_CMD_CREATE(0xffffffffffffffff, 0x0, 0x0) (async) r8 = socket(0x2a, 0x2, 0x0) (async) sendmsg$TIPC_NL_LINK_GET(0xffffffffffffffff, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000000280)={0x0, 0x24}}, 0x0) getsockname$packet(r8, &(0x7f0000000200)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000001480)=0xd) (async) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000480)=@gettfilter={0x24, 0x2e, 0x0, 0x70bd29, 0x25dfdbfc, {0x0, 0x0, 0x0, 0x0, {0xe, 0x7}, {0xc}, {0xb, 0xffe0}}}, 0x24}}, 0x40000) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000500)={&(0x7f00000000c0)=@newtfilter={0x4c, 0x2c, 0xd27, 0xffffffff, 0x25dfd9ff, {0x0, 0x0, 0x0, r9, {0x10, 0xa}, {}, {0x1c, 0xffff}}, [@filter_kind_options=@f_flower={{0xb}, {0x1c, 0x2, [@TCA_FLOWER_KEY_ETH_TYPE={0x6, 0x8, 0x8847}, @TCA_FLOWER_KEY_MPLS_OPTS={0x10, 0x63, 0x0, 0x1, @TCA_FLOWER_KEY_MPLS_OPTS_LSE={0xc, 0x1, 0x0, 0x1, [@TCA_FLOWER_KEY_MPLS_OPT_LSE_DEPTH={0x5, 0x1, 0xfe}]}}]}}]}, 0x4c}, 0x1, 0x0, 0x0, 0x20004081}, 0x24000085) (async) r10 = socket$netlink(0x10, 0x3, 0x0) sendmmsg$inet6(0xffffffffffffffff, &(0x7f0000000800)=[{{&(0x7f0000000100)={0xa, 0x4e21, 0x5, @mcast2, 0x40}, 0x1c, 0x0}}], 0x1, 0x4008800) (async) socket$pppl2tp(0x18, 0x1, 0x1) (async) sendmmsg(r10, &(0x7f00000002c0), 0x40000000000009f, 0x0) openat$tun(0xffffffffffffff9c, &(0x7f0000002a00), 0x800, 0x0) 9.273845257s ago: executing program 0 (id=6233): mmap(&(0x7f0000000000/0xfbe000)=nil, 0xfbe000, 0x2, 0x31, 0xffffffffffffffff, 0x0) r0 = socket$inet_udp(0x2, 0x2, 0x0) setsockopt$inet_IP_XFRM_POLICY(r0, 0x0, 0x11, 0x0, 0x0) sendmmsg(r0, &(0x7f0000007fc0), 0x800001d, 0x0) r1 = socket$rds(0x15, 0x5, 0x0) r2 = socket$nl_rdma(0x10, 0x3, 0x14) sendmsg$RDMA_NLDEV_CMD_STAT_SET(r2, &(0x7f00000028c0)={0x0, 0x0, &(0x7f0000002880)={&(0x7f0000000040)=ANY=[@ANYBLOB="38000000101401002cbd7000fddbdf250800150005000000080001000000000008004a000000000008000300013f000008004b00"], 0x38}, 0x1, 0x0, 0x0, 0x40000}, 0x24001850) ioctl$TUNSETLINK(0xffffffffffffffff, 0x400454cd, 0x0) bind$rds(r1, &(0x7f0000000040)={0x2, 0x0, @loopback}, 0x10) sendmsg$rds(r1, &(0x7f0000001600)={&(0x7f0000000000)={0x2, 0x0, @remote}, 0x10, 0x0, 0x0, &(0x7f0000000780)=[@rdma_args={0x48, 0x114, 0x1, {{}, {0x0, 0x2c}, &(0x7f00000006c0)=[{&(0x7f0000000100)=""/44, 0x410200}], 0x1}}], 0x1f}, 0x0) 9.126706759s ago: executing program 0 (id=6236): r0 = socket$isdn(0x22, 0x3, 0x21) bind$isdn(r0, &(0x7f0000000000)={0x22, 0x73, 0xf3, 0x7a, 0x2}, 0x6) (async) ioctl$FS_IOC_GETFSLABEL(r0, 0x81009431, &(0x7f0000000040)) close(r0) (async) r1 = socket$unix(0x1, 0x2, 0x0) ioctl$sock_kcm_SIOCKCMCLONE(0xffffffffffffffff, 0x89e2, &(0x7f0000000140)={r1}) setsockopt$ALG_SET_KEY(r2, 0x117, 0x1, &(0x7f0000000180), 0x0) (async) ioctl$sock_SIOCBRADDBR(r2, 0x89a0, &(0x7f00000001c0)) (async) r3 = epoll_create1(0x80000) ioctl$FS_IOC_FSGETXATTR(r3, 0x801c581f, &(0x7f0000000200)={0x5, 0x8, 0x39c, 0x2, 0x5}) ioctl$SIOCPNENABLEPIPE(0xffffffffffffffff, 0x89ed, 0x0) r4 = socket$inet_udp(0x2, 0x2, 0x0) ioctl$sock_ipv6_tunnel_SIOCDEL6RD(r4, 0x89fa, &(0x7f0000000280)={'sit0\x00', &(0x7f0000000240)={@ipv4={'\x00', '\xff\xff', @multicast2}, @remote, 0x16, 0x1e}}) (async) sendmsg$nl_netfilter(r2, &(0x7f0000000540)={&(0x7f00000002c0)={0x10, 0x0, 0x0, 0x1000}, 0xc, &(0x7f0000000500)={&(0x7f0000000300)={0x1fc, 0x13, 0x1, 0x5, 0x70bd2c, 0x25dfdbfb, {0x7, 0x0, 0x4}, [@nested={0xf0, 0x102, 0x0, 0x1, [@nested={0x4, 0xa}, @generic="6ec9dc8fd361ecd5a4c74e4568bb7d84ae9c85040527eb41cbfa038ec843fc039438a5aa29d4c60bfc05bf702c67913e2c0f9af0c41a9a7436cfc739b506de0ca72f502b8bfa26cd9e1c2e4633ab8121c5cd6d8d1f4395a0b0df34e6b16e14d11446be0e99ff3ba240bf6cac22f3bd9fd98d4102f7983d18012532a8018b604ba0fa5d27e5527652262da5f25d3511ea5b2d54a5b9d70c5df220fc7c8436b143abf280ab12a2dbea8a326a41156a325c98d195a5c9243859a6e255e59d12e08af2db13013279f566d86274f86c12333d029d652c56509b4f1e32dc29c2fc8604549c711f1a9b0360"]}, @nested={0xf5, 0x92, 0x0, 0x1, [@generic="e2a432c205ba4f1d53d9cbc1d845331f72564652db5b86de689022656798f6bb7d5a231a557dacc335b4b516a67c98bae6bfdf8da66d5cc4ec0e879fabb6e9d972f73165df370c839938dce16104967103d384f3f0d5b079e0c7242f8366860e52fe3f67db215a62980b7a4000c3d2d6c2da", @generic="a9d14663a62c0a3d8a29afe5d5a6134519726b595ff4f1f16406ae01f3947d3d393693b1e667c70257bb02c5007ee0f4674f68b295096edbc43d3ed97d282a89c0e83f216c73b3af1bf297773b8fef6540fe65c18f9bfc7f2ec8325b5df4b764747a5f6cfd0b71da80134bd77a9c0077c5ce252f804522050e73f7d1946f27"]}]}, 0x1fc}, 0x1, 0x0, 0x0, 0x4000045}, 0x20000000) ioctl$sock_ipv4_tunnel_SIOCGETTUNNEL(r2, 0x89f0, &(0x7f0000000840)={'syztnl2\x00', &(0x7f0000000780)={'sit0\x00', 0x0, 0x80, 0x8, 0x0, 0x800, {{0x1f, 0x4, 0x0, 0x1, 0x7c, 0x67, 0xde8, 0x59, 0x29, 0x0, @private=0xa010101, @private=0xa010101, {[@ssrr={0x89, 0xf, 0x13, [@broadcast, @rand_addr=0x64010100, @rand_addr=0x64010100]}, @timestamp_addr={0x44, 0x2c, 0xdc, 0x1, 0x1, [{@local, 0x200}, {@dev={0xac, 0x14, 0x14, 0x27}, 0x7fff}, {@multicast2, 0xa}, {@initdev={0xac, 0x1e, 0x1, 0x0}, 0x5}, {@broadcast, 0x8000}]}, @timestamp_prespec={0x44, 0x2c, 0xc9, 0x3, 0x7, [{@broadcast, 0x7f}, {@broadcast, 0x32c}, {@rand_addr=0x64010100, 0x5}, {@remote, 0x6}, {@multicast1, 0x1}]}]}}}}}) (async) r6 = bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000900)={0x2, 0x4, 0x8, 0x1, 0x80, 0x1, 0x3, '\x00', 0x0, 0xffffffffffffffff, 0x2, 0x1, 0x3}, 0x50) (async) bpf$BPF_MAP_CONST_STR_FREEZE(0x16, &(0x7f0000000980)={0xffffffffffffffff, 0xffffffffffffffff}, 0x4) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000a40)={{0x1, 0xffffffffffffffff}, &(0x7f00000009c0), &(0x7f0000000a00)}, 0x20) bpf$PROG_LOAD(0x5, &(0x7f0000000b00)={0xf, 0x18, &(0x7f0000000580)=@ringbuf={{0x18, 0x0, 0x0, 0x0, 0xfff, 0x0, 0x0, 0x0, 0xf}, {}, {}, [@btf_id={0x18, 0xb, 0x3, 0x0, 0x2}, @ldst={0x1, 0x5fa236d0da99c0c, 0x1, 0x6, 0xb, 0x3e, 0x1}, @ldst={0x2, 0x2, 0x4, 0x8, 0x7, 0x18, 0xfffffffffffffffc}, @map_idx_val={0x18, 0x1, 0x6, 0x0, 0x9, 0x0, 0x0, 0x0, 0x6}, @alu={0x7, 0x1, 0xa, 0x4, 0x8, 0xffffffffffffffe0, 0x4}, @exit, @exit], {{}, {0x7, 0x0, 0xb, 0x2, 0x0, 0x0, 0x1}, {0x85, 0x0, 0x0, 0x85}}}, &(0x7f0000000640)='GPL\x00', 0xebb3, 0xfd, &(0x7f0000000680)=""/253, 0x41000, 0x18, '\x00', r5, @fallback=0x1b, 0xffffffffffffffff, 0x8, &(0x7f0000000880)={0x6, 0x4}, 0x8, 0x10, &(0x7f00000008c0)={0x3, 0x2, 0x7, 0x8}, 0x10, 0x0, 0xffffffffffffffff, 0x3, &(0x7f0000000a80)=[r6, r7, r8], &(0x7f0000000ac0)=[{0x2, 0x2, 0x0, 0x4}, {0x5, 0x1, 0x2, 0x3}, {0x1, 0x4, 0x4}], 0x10, 0x9cfb}, 0x94) (async) bind$netlink(r2, &(0x7f0000000bc0)={0x10, 0x0, 0x25dfdbfd, 0x40}, 0xc) (async) ioctl$SIOCX25SCALLUSERDATA(r2, 0x89e5, &(0x7f0000000c00)={0x63, "258f227e1d9fda737d0e151943be68433d988d4a7ddb3bdf187fac209ef3670ccaaac7e02e106efda3b1c84186f83ded8bdbf1c9e90c03d5e2e9ffa8753eb0b72fd7c1fe8b63e96a455497e31de15c8042f00903fd64fc753f0f403f70a3570063a0c1a773a71f686011623f5b7f653fe4a2d2c10365da3fd590f96bdbf95e63"}) (async) ioctl$sock_ipv4_tunnel_SIOCCHGTUNNEL(r2, 0x89f3, &(0x7f0000000d80)={'syztnl2\x00', &(0x7f0000000cc0)={'gretap0\x00', r5, 0x0, 0x7, 0x0, 0x100, {{0x28, 0x4, 0x1, 0x2a, 0xa0, 0x68, 0x0, 0x3, 0x4, 0x0, @multicast1, @broadcast, {[@cipso={0x86, 0x39, 0x0, [{0x0, 0x10, "7a5b1ce6ec4219f02c716df520c1"}, {0x2, 0x9, "b517a0c7a09787"}, {0x1, 0xe, "c454308677b738e3e2faee2d"}, {0x0, 0xc, "96b86966a53071abbad4"}]}, @timestamp={0x44, 0xc, 0xcb, 0x0, 0x2, [0x1ff, 0x101]}, @timestamp={0x44, 0x8, 0x21, 0x0, 0x2, [0xe65]}, @timestamp_prespec={0x44, 0x3c, 0x6d, 0x3, 0x8, [{@local, 0x5}, {@initdev={0xac, 0x1e, 0x1, 0x0}, 0x80000000}, {@remote, 0x12}, {@remote, 0x9}, {@empty, 0xfffffffb}, {@dev={0xac, 0x14, 0x14, 0x3f}, 0x5}, {@local, 0x80000000}]}]}}}}}) socket$nl_netfilter(0x10, 0x3, 0xc) (async) sendmsg$NFT_MSG_GETSET(r2, &(0x7f0000000f80)={&(0x7f0000000dc0)={0x10, 0x0, 0x0, 0x2000000}, 0xc, &(0x7f0000000f40)={&(0x7f0000000e00)={0x104, 0xa, 0xa, 0x101, 0x0, 0x0, {0x2, 0x0, 0x8}, [@NFTA_SET_DATA_TYPE={0x8, 0x6, 0x1, 0x0, 0xffffff00}, @NFTA_SET_EXPR={0x10, 0x11, 0x0, 0x1, @quota={{0xa}, @void}}, @NFTA_SET_NAME={0x9, 0x2, 'syz1\x00'}, @NFTA_SET_OBJ_TYPE={0x8, 0xf, 0x1, 0x0, 0x2}, @NFTA_SET_USERDATA={0xb3, 0xd, 0x1, 0x0, "2f8af63a1def2ff621d960cc2ea550bf3e41dd41e1c45975ccdba6ef503d8808cf985cd792c579af516f48c543d7ed74ffb81a3b420dbf455d6e5010c0890d7684acb09bcfdb3874157c9a51377432244df02d0f1fe3ff5e19edb075a81c8f5197db436407bf295ca90cefe2f81df98ed45fa4de43afd8412b9501150e6948d9673b71eae4cfaf9d9235bf789d6f8a906a9c4f010174e240e7302338d26672e0af7ec4920981a7f8d9cc210d89c9b2"}, @NFTA_SET_OBJ_TYPE={0x8, 0xf, 0x1, 0x0, 0x5}, @NFTA_SET_KEY_TYPE={0x8, 0x4, 0x1, 0x0, 0x2}]}, 0x104}, 0x1, 0x0, 0x0, 0x104}, 0x20004000) (async) ioctl$SIOCGSTAMP(0xffffffffffffffff, 0x8906, &(0x7f0000000fc0)) (async) syz_genetlink_get_family_id$tipc(&(0x7f0000001000), r2) (async) r9 = socket$nl_rdma(0x10, 0x3, 0x14) sendmsg$RDMA_NLDEV_CMD_RES_QP_GET(r9, &(0x7f0000001100)={&(0x7f0000001040)={0x10, 0x0, 0x0, 0x20000000}, 0xc, &(0x7f00000010c0)={&(0x7f0000001080)={0x40, 0x140a, 0x4, 0x70bd2a, 0x25dfdbfd, "", [@RDMA_NLDEV_ATTR_DEV_INDEX={0x8}, @RDMA_NLDEV_ATTR_RES_LQPN={0x8, 0x15, 0x4}, @RDMA_NLDEV_ATTR_DEV_INDEX={0x8, 0x1, 0x1}, @RDMA_NLDEV_ATTR_PORT_INDEX={0x8, 0x3, 0x1}, @RDMA_NLDEV_ATTR_DEV_INDEX={0x8}, @RDMA_NLDEV_ATTR_RES_LQPN={0x8, 0x15, 0x5}]}, 0x40}, 0x1, 0x0, 0x0, 0x800}, 0x4012) (async) r10 = accept4$x25(r4, 0x0, &(0x7f0000001140), 0x80800) setsockopt$SO_BINDTODEVICE(r10, 0x1, 0x19, &(0x7f0000001180)='bond0\x00', 0x10) 8.912091581s ago: executing program 0 (id=6239): r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000000300)={&(0x7f0000000100)={0x10, 0x0, 0x0, 0x400000}, 0xc, &(0x7f0000000180)={&(0x7f0000000140)=@ipv4_getnexthop={0x2c, 0x6a, 0x20, 0x70bd2d, 0x25dfdbfd, {}, [@NHA_MASTER={0x8, 0xa, 0x1}, @NHA_GROUPS={0x4}, @NHA_ID={0x8}]}, 0x2c}, 0x1, 0x0, 0x0, 0x4000000}, 0x40002) (async) r1 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r1, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000000c0)=@can_delroute={0x1c, 0x19, 0x1, 0x0, 0x0, {}, [@CGW_SRC_IF={0x8}]}, 0x1c}}, 0x0) r2 = socket$packet(0x11, 0x3, 0x300) (async) r3 = socket$key(0xf, 0x3, 0x2) sendmsg$key(r3, &(0x7f0000000200)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000240)=ANY=[@ANYBLOB="0218000019000000000000000000000005000600000000000a0000000000000000000000000000000000ffffac1e00010000000000000000080012000000000000000000000000000600000000000000000000000000000000000000000000000000000000000000ffffffff00000000000000000000000005000500000000000a00000000000000ff02000000000000000000479e00a84bb27c00000000000005001900000000000a"], 0xc8}}, 0x0) (async) ioctl$sock_SIOCGIFINDEX_80211(r2, 0x8b04, &(0x7f0000000000)={'wlan1\x00'}) (async, rerun: 64) syz_init_net_socket$bt_hidp(0x1f, 0x3, 0x6) (rerun: 64) 8.589192153s ago: executing program 0 (id=6244): r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) bpf$BPF_BTF_LOAD(0x12, &(0x7f00000000c0)={&(0x7f0000000240)={{0xeb9f, 0x1, 0x0, 0x18, 0x0, 0x18, 0x18, 0x5, [@union={0x0, 0x1, 0x0, 0x5, 0x0, 0x0, [{0x3, 0x3, 0x40}]}]}, {0x0, [0x0, 0x0, 0x5f]}}, 0x0, 0x35}, 0x20) r1 = syz_genetlink_get_family_id$nl802154(&(0x7f0000002880), 0xffffffffffffffff) sendmsg$NL802154_CMD_SET_SEC_PARAMS(r0, &(0x7f0000000200)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000780)={0x28, r1, 0x1, 0x70bd2c, 0x25dfdbfd, {}, [@NL802154_ATTR_SEC_ENABLED={0x5, 0x29, 0x5e}, @NL802154_ATTR_WPAN_DEV={0xc, 0x6, 0x100000001}]}, 0x28}, 0x1, 0x0, 0x0, 0x20008000}, 0x40080) 8.374251989s ago: executing program 0 (id=6248): bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000100000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) (async) socket$nl_route(0x10, 0x3, 0x0) (async) r0 = socket(0xa, 0x3, 0x3a) (async) r1 = socket$netlink(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f00000003c0)={'bridge0\x00', 0x0}) setsockopt$MRT6_ADD_MIF(r0, 0x29, 0xca, &(0x7f0000000000)={0x4, 0x0, 0x0, r2}, 0xc) (async) r3 = socket$nl_route(0x10, 0x3, 0x0) getsockopt$sock_buf(r3, 0x1, 0x3b, 0x0, &(0x7f00000000c0)) bpf$PROG_LOAD(0x5, &(0x7f0000000100)={0x13, 0x4, &(0x7f0000000040)=@framed={{}, [@ldst={0x3, 0x2, 0x3, 0x1, 0x0, 0x9b}]}, &(0x7f00000001c0)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) r4 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r5 = syz_genetlink_get_family_id$netlbl_cipso(&(0x7f00000002c0), r4) (async) pselect6(0x40, &(0x7f0000000300)={0x2d42, 0x100, 0x9, 0xfffffffffffffff7, 0x9, 0x40, 0x9, 0x7e4000000000}, &(0x7f0000000340)={0x597c, 0x8, 0xcd89, 0x9, 0x7, 0x2, 0x80000000, 0xa}, &(0x7f0000000380)={0x100000000, 0xc9, 0x1, 0x3, 0x7, 0x3262, 0x1, 0xf}, &(0x7f0000000400)={0x0, 0x3938700}, &(0x7f0000000580)={&(0x7f0000000540)={[0x3]}, 0x8}) (async, rerun: 32) r6 = socket$nl_netfilter(0x10, 0x3, 0xc) (rerun: 32) sendmsg$NFT_BATCH(r6, &(0x7f00000004c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000240)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a28000000000a010400000000000000000100000008000240000000020900010073797a300000000014000000110001"], 0x50}}, 0x0) (async, rerun: 64) sendmsg$NFT_BATCH(r6, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000180)={{0x14, 0x10, 0x9000, 0x6}, [@NFT_MSG_NEWSET={0x44, 0x9, 0xa, 0x605, 0x0, 0x0, {0x1}, [@NFTA_SET_ID={0x8}, @NFTA_SET_NAME={0x9, 0x2, 'syz1\x00'}, @NFTA_SET_TABLE={0x9, 0x1, 'syz0\x00'}, @NFTA_SET_KEY_LEN={0x8, 0x5, 0x1, 0x0, 0x14}, @NFTA_SET_POLICY={0x8, 0x8, 0x1, 0x0, 0x1}]}], {0x14, 0x11, 0x1, 0x0, 0x0, {0x0, 0x84}}}, 0x6c}}, 0x0) (async, rerun: 64) sendmsg$NLBL_CIPSOV4_C_ADD(r4, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000004c0)={0x40, r5, 0x1, 0x0, 0x0, {}, [@NLBL_CIPSOV4_A_DOI={0x8, 0x1, 0x3}, @NLBL_CIPSOV4_A_TAGLST={0x1c, 0x4, 0x0, 0x1, [{0x5, 0x3, 0x1}, {0x5}, {0x5, 0x3, 0x80}]}, @NLBL_CIPSOV4_A_MTYPE={0x8, 0x2, 0x2}]}, 0x40}}, 0xc000) (async) setsockopt$MRT6_ADD_MIF(r0, 0x29, 0xca, &(0x7f0000000040)={0x1, 0x0, 0x5, r2, 0xffffff8f}, 0xc) (async) setsockopt$MRT6_ADD_MFC_PROXY(r0, 0x29, 0xd2, &(0x7f00000000c0)={{0xa, 0x0, 0xd, @remote}, {0xa, 0x4e22, 0x0, @mcast1}, 0x0, {[0x7b3, 0x0, 0xd]}}, 0x5c) (async) r7 = bpf$MAP_CREATE(0x0, &(0x7f0000000180)=ANY=[@ANYBLOB="0b00000005000000000400000900000001"], 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000800000000000000000000018110000", @ANYRES32=r7], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x30, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) (async, rerun: 32) r8 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f00000001c0)='GPL\x00', 0x0, 0x0, 0x0, 0x41100, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) (rerun: 32) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={&(0x7f0000000500)='page_pool_state_release\x00', r8}, 0x10) (async) r9 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f00000005c0)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x58, '\x00', 0x0, @fallback=0x1b, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={&(0x7f0000000500)='page_pool_state_release\x00', r9}, 0x10) (async) syz_emit_ethernet(0x2a, &(0x7f0000000000)={@link_local, @multicast, @void, {@ipv4={0x800, @icmp={{0x5, 0x4, 0x0, 0x0, 0x1c, 0x0, 0x0, 0x0, 0x1, 0x0, @empty, @multicast1}, @address_request}}}}, 0x0) (async) r10 = bpf$PROG_LOAD(0x5, &(0x7f0000000800)={0x6, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, @fallback=0x4, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000000)={r10, 0x2000000, 0xe, 0x0, &(0x7f00000004c0)="630b008646dc3f0adf33c9f7b986", 0x0, 0x1ff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x2}, 0x50) 4.308761521s ago: executing program 6 (id=6311): r0 = socket$igmp(0x2, 0x3, 0x2) ioctl$SIOCGETSGCNT(r0, 0x89e1, &(0x7f0000000000)={@local, @empty}) pipe(&(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) setsockopt$MRT_INIT(r2, 0x0, 0xc8, &(0x7f0000000080), 0x4) setsockopt$sock_void(r1, 0x1, 0x0, 0x0, 0x0) ioctl$EXT4_IOC_CHECKPOINT(r0, 0x4004662b, &(0x7f00000000c0)=0x3) r3 = syz_genetlink_get_family_id$tipc2(&(0x7f0000000140), r1) sendmsg$TIPC_NL_NAME_TABLE_GET(r1, &(0x7f0000000300)={&(0x7f0000000100)={0x10, 0x0, 0x0, 0x200000}, 0xc, &(0x7f00000002c0)={&(0x7f0000000180)={0x120, r3, 0x200, 0x70bd25, 0x25dfdbfb, {}, [@TIPC_NLA_LINK={0xb8, 0x4, 0x0, 0x1, [@TIPC_NLA_LINK_NAME={0x9, 0x1, 'syz0\x00'}, @TIPC_NLA_LINK_NAME={0x9, 0x1, 'syz0\x00'}, @TIPC_NLA_LINK_NAME={0x9, 0x1, 'syz1\x00'}, @TIPC_NLA_LINK_PROP={0x1c, 0x7, 0x0, 0x1, [@TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x20}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x17}, @TIPC_NLA_PROP_MTU={0x8}]}, @TIPC_NLA_LINK_PROP={0x14, 0x7, 0x0, 0x1, [@TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x16}, @TIPC_NLA_PROP_TOL={0x8, 0x2, 0x200}]}, @TIPC_NLA_LINK_NAME={0x9, 0x1, 'syz1\x00'}, @TIPC_NLA_LINK_NAME={0x13, 0x1, 'broadcast-link\x00'}, @TIPC_NLA_LINK_NAME={0x9, 0x1, 'syz1\x00'}, @TIPC_NLA_LINK_PROP={0x34, 0x7, 0x0, 0x1, [@TIPC_NLA_PROP_TOL={0x8, 0x2, 0x40}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x1e}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x1b}, @TIPC_NLA_PROP_WIN={0x8, 0x3, 0x8}, @TIPC_NLA_PROP_TOL={0x8, 0x2, 0x20dd}, @TIPC_NLA_PROP_WIN={0x8, 0x3, 0x6}]}]}, @TIPC_NLA_BEARER={0x54, 0x1, 0x0, 0x1, [@TIPC_NLA_BEARER_DOMAIN={0x8, 0x3, 0x5}, @TIPC_NLA_BEARER_PROP={0x1c, 0x2, 0x0, 0x1, [@TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x2}, @TIPC_NLA_PROP_TOL={0x8, 0x2, 0x5c6}, @TIPC_NLA_PROP_MTU={0x8, 0x4, 0x6}]}, @TIPC_NLA_BEARER_UDP_OPTS={0x2c, 0x4, {{0x14, 0x1, @in={0x2, 0x4e22, @multicast2}}, {0x14, 0x2, @in={0x2, 0x4e24, @private=0xa010102}}}}]}]}, 0x120}, 0x1, 0x0, 0x0, 0x7f3b9b3b74e6cf0d}, 0x20008044) getsockopt$sock_int(r1, 0x1, 0x7, &(0x7f0000000340), &(0x7f0000000380)=0x4) ioctl$sock_rose_SIOCADDRT(r2, 0x890b, &(0x7f00000003c0)={@dev={0xbb, 0xbb, 0xbb, 0x1, 0x0}, 0x1, @rose={0xbb, 0xbb, 0xbb, 0x1, 0x0}, @netrom={'nr', 0x0}, 0x4, [@default, @null, @remote={0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0x2}, @bcast, @bcast, @bcast, @remote={0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0x0}, @null]}) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f00000004c0)={{0xffffffffffffffff, 0xffffffffffffffff}, &(0x7f0000000440), &(0x7f0000000480)=r2}, 0x20) r5 = bpf$BPF_PROG_WITH_BTFID_LOAD(0x5, &(0x7f00000006c0)=@bpf_tracing={0x1a, 0x1, &(0x7f0000000540)=@raw=[@generic={0x0, 0xc, 0x0, 0x9, 0x9}], &(0x7f0000000580)='GPL\x00', 0x0, 0x69, &(0x7f00000005c0)=""/105, 0x41000, 0x8, '\x00', 0x0, 0x0, r2, 0x8, &(0x7f0000000640)={0x6, 0x5}, 0x8, 0x10, &(0x7f0000000680)={0x5, 0xa, 0x4, 0x9}, 0x10, 0x16ac, r2, 0x0, 0x0, 0x0, 0x10, 0x3000000}, 0x94) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f00000007c0)={{r4, 0xffffffffffffffff}, &(0x7f0000000500), &(0x7f0000000780)=r5}, 0x20) ioctl$BTRFS_IOC_START_SYNC(r2, 0x80089418, &(0x7f0000000800)) ioctl$sock_ipv6_tunnel_SIOCADDTUNNEL(r1, 0x89f1, &(0x7f0000000a00)={'syztnl1\x00', &(0x7f0000000980)={'ip6tnl0\x00', 0x0, 0x2f, 0xe, 0x3, 0x6ba2, 0x2c, @dev={0xfe, 0x80, '\x00', 0x3a}, @private1, 0x7, 0x1, 0x6, 0x6}}) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000b00)={{r1, 0xffffffffffffffff}, &(0x7f0000000a80), &(0x7f0000000ac0)=r1}, 0x20) r9 = bpf$OBJ_GET_MAP(0x7, &(0x7f0000000b80)=@o_path={&(0x7f0000000b40)='./file0\x00', 0x0, 0x4010}, 0x18) r10 = bpf$BPF_PROG_WITH_BTFID_LOAD(0x5, &(0x7f0000000c40)=@bpf_ext={0x1c, 0x20, &(0x7f0000000840)=@raw=[@ringbuf_output={{0x18, 0x1, 0x1, 0x0, r1}, {0x7, 0x0, 0xb, 0x8, 0x0, 0x0, 0x3}, {}, {}, {}, {}, {0x7, 0x0, 0xb, 0x4, 0x0, 0x0, 0x1}}, @ringbuf_output={{0x18, 0x1, 0x1, 0x0, r2}, {0x7, 0x0, 0xb, 0x8, 0x0, 0x0, 0x8}, {}, {}, {}, {}, {0x7, 0x0, 0xb, 0x4, 0x0, 0x0, 0x1}}, @jmp={0x5, 0x0, 0x0, 0x1, 0x5, 0xffffffffffffffc0, 0x17}, @ringbuf_query={{0x18, 0x1, 0x1, 0x0, r2}}, @printk={@s, {}, {}, {}, {}, {0x7, 0x0, 0xb, 0x3, 0x0, 0x0, 0x9}}, @ldst={0x0, 0x2, 0x3, 0x0, 0xa, 0x10, 0x8}], &(0x7f0000000940)='syzkaller\x00', 0x1ff, 0x0, 0x0, 0x40f00, 0x0, '\x00', r7, 0x0, r1, 0x8, 0x0, 0x0, 0x10, &(0x7f0000000a40)={0x4, 0xa, 0x1, 0x2}, 0x10, 0x80c1, r5, 0x2, &(0x7f0000000bc0)=[r2, r2, r8, r1, r9], &(0x7f0000000c00)=[{0x3, 0x4, 0xb, 0x4}, {0x2, 0x5, 0xf, 0x1}], 0x10, 0x451}, 0x94) getsockopt$MRT6(r1, 0x29, 0xce, &(0x7f0000000d00), &(0x7f0000000d40)=0x4) ioctl$BTRFS_IOC_DEFRAG_RANGE(r2, 0x40309410, &(0x7f0000000d80)={0x3, 0x9, 0x3, 0x1, 0x1, [0x4, 0x0, 0x7f, 0x4]}) ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f0000000dc0)={'pimreg\x00', 0x0}) r12 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000e40), r2) sendmsg$NL80211_CMD_SET_COALESCE(r1, &(0x7f00000010c0)={&(0x7f0000000e00)={0x10, 0x0, 0x0, 0x8002}, 0xc, &(0x7f0000001080)={&(0x7f0000000e80)={0x1c4, r12, 0x1, 0x70bd27, 0x25dfdbfe, {{}, {@void, @val={0xc, 0x99, {0x1c, 0x36}}}}, [@NL80211_ATTR_COALESCE_RULE_PKT_PATTERN={0xd0, 0x3, 0x0, 0x1, [{0xcc, 0x0, 0x0, 0x1, @NL80211_PKTPAT_MASK={0xc7, 0x1, "31e57608850c433e67e12cd662ed86fde947112136b0fd8727edf58c38cce73c6817c14cb55d7be5db825fbb49ff8e30ac94fb1ead811355accfb749e49d6e0cb8d2da86307d9fd8aea64994df6882a2e36ea12e8b1a7b1136f233dedbcaf2dd9db6db75369dd4ba6530d9240fb47c46b5ae70ecdf862024f70c7fd5581594c83bceef9de0bd9ac9c1a6862e5282f9da68b6c7df66c8c879a87918b70a42ec8a59b30c860adb17c8b362d75b921b23f8e85b6f2a9a4ab385bc5ed1b737f98124319afc"}}]}, @NL80211_ATTR_COALESCE_RULE_CONDITION={0x8}, @NL80211_ATTR_COALESCE_RULE_PKT_PATTERN={0xc4, 0x3, 0x0, 0x1, [{0x50, 0x0, 0x0, 0x1, @NL80211_PKTPAT_PATTERN={0x4a, 0x2, "b3217a90274330fe33ee8db0bae9cb4d61d52f0b4e3b71ee75f5ded72f9043e19fe88b5e90a5346468fbe2b88f7be03be8e5a0dc2d0014f34ea5a0a49d571edb8f83ff5042ee"}}, {0x70, 0x0, 0x0, 0x1, @NL80211_PKTPAT_PATTERN={0x6b, 0x2, "47ffcf2b0e51d9fc53f8f8177cb265ab52b1613d0e9f1c0cd91fb753caecd3371771572de1d605e8d87880975aad1ff9e5c1d791c6c96d11ffa6f8a2b4035b8e67670e73d982346d04a4315fa077c5cafea4eebe1ed049ad10a470145e80e33ad75d2ec7770629"}}]}, @NL80211_ATTR_COALESCE_RULE_DELAY={0x8, 0x1, 0x10001}]}, 0x1c4}, 0x1, 0x0, 0x0, 0x20000084}, 0x0) r13 = syz_genetlink_get_family_id$ethtool(&(0x7f0000001140), r10) ioctl$sock_ipv6_tunnel_SIOCADDTUNNEL(r2, 0x89f1, &(0x7f0000001200)={'ip6gre0\x00', &(0x7f0000001180)={'syztnl2\x00', r11, 0x29, 0xf4, 0x76, 0x2, 0x40, @dev={0xfe, 0x80, '\x00', 0x22}, @remote, 0x7, 0x40, 0x80, 0x6b509d7}}) sendmsg$ETHTOOL_MSG_RINGS_GET(r1, &(0x7f00000014c0)={&(0x7f0000001100)={0x10, 0x0, 0x0, 0x800000}, 0xc, &(0x7f0000001480)={&(0x7f0000001240)={0x238, r13, 0x200, 0x70bd27, 0x25dfdbfe, {}, [@HEADER={0x7c, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r11}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r11}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'veth1_to_hsr\x00'}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'macvlan1\x00'}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'veth1_to_bond\x00'}, @ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x3}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r11}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r11}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'batadv0\x00'}]}, @HEADER={0x34, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r14}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'veth0_vlan\x00'}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'veth0_to_hsr\x00'}]}, @HEADER={0x14, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r11}, @ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x1}]}, @HEADER={0x3c, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'wg0\x00'}, @ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x3}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'caif0\x00'}, @ETHTOOL_A_HEADER_FLAGS={0x8}]}, @HEADER={0x38, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'veth1_to_bond\x00'}, @ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x1}, @ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x2}, @ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x1}, @ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x1}]}, @HEADER={0x94, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'nicvf0\x00'}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r11}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r7}, @ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x3}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'veth1\x00'}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'ip6gretap0\x00'}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'veth0_virt_wifi\x00'}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'dummy0\x00'}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'syz_tun\x00'}]}, @HEADER={0x58, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'ip6_vti0\x00'}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'veth0_to_team\x00'}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r11}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'ipvlan0\x00'}, @ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x1}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r11}]}]}, 0x238}}, 0x1) r15 = accept4$unix(r1, &(0x7f0000001500)=@abs, &(0x7f0000001580)=0x6e, 0x80000) ioctl$sock_FIOGETOWN(r2, 0x8903, &(0x7f0000001840)=0x0) getsockopt$inet_IP_IPSEC_POLICY(r1, 0x0, 0x10, &(0x7f0000001880)={{{@in=@dev, @in6=@mcast1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}, {{@in=@empty}, 0x0, @in6}}, &(0x7f0000001980)=0xe8) sendmmsg$unix(r15, &(0x7f0000005840)=[{{&(0x7f00000015c0)=@abs={0x1, 0x0, 0x4e23}, 0x6e, &(0x7f0000001800)=[{&(0x7f0000001640)="62f56abbc2b744ae883d9bb1e1640271d35b63aed150d80878bfe0405f0366d3a69fabe7d5dd57478d78d31157e5f30f0e1b32ed41782ece9deb491bd6864ee37ba0bcfc43cfecdd95444eb674d85a1372e0817d2e6d9fa7df1e692b3191f5b993a7daa095e98d818032c0515a6b7882587771e6b2d67ff7b994deac696708d33907a37863fe3437806cb9dbf02f55090d025dfd23d31a28f7cd4b1fb7012c0648", 0xa1}, {&(0x7f0000001700)="2139c30531da07a9531e4c3964763754f8186f6c583779e088b3437bcb5e238365a540840df09961389d81cffd3765b12f541683f1631b633514cc49cd25426e6a53498e80ca8b97ee1d46e96aee3ec763fef389c86299e0", 0x58}, {&(0x7f0000001780)="f7f0a0e67fda502f257668296b4c471063cd855c0ea8960192341c9b012e238136c2bd4c62141f735439e14362eb9fd52b4e38ac99794ab67203de4f8a961a154e315485b14e81d36e5ddde4fe6f2b8376730b36b121be47c5ed329a5d64fb8a8cf164ddc79110bfc68fcef1a654", 0x6e}], 0x3, &(0x7f00000019c0)=[@cred={{0x1c, 0x1, 0x2, {r16, r17, 0xffffffffffffffff}}}], 0x20, 0x48080}}, {{&(0x7f0000001a00)=@file={0x0, './file0\x00'}, 0x6e, &(0x7f0000001e00)=[{&(0x7f0000001a80)="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", 0xfd}, {&(0x7f0000001b80)="5e1ca76c7d161edb338b54fdf4332aafa155b192f4e08dba19d2be3c905a5c01c622bc7d9aaefa02bba1230d3d0f6f782c548dc4a45a17caa8242f2d3aa62c30abcd63757fb666bfff99a99a23ccfc04ba8f60e1635fae16bb66a98c69d3b2789681853cdd997a88a1bbc3b217c3333b768837c9b62d99cf6a47abd61f64c3d50259e397917da9dc270f1d97d354f65c446e43ad77cda71203e1526679609a6bc8ec6f8f6bf8a2ec9e8b129f439d2f1b35b7", 0xb2}, {&(0x7f0000001c40)="be5219c8d2faf07fe7b560eb85fc8b4a02fead1bf39e93df5524e07d9fdd9bab2a56a9c3f83db1703dab9e443835656c0d8291f2bd561827b41db5dde91a6beb913beb078bbe92fd32d248d44e130ff4617de96794625a3888d1058abea9d39b70c6d08b9802a81461fd4112f6b0685b08f0c863dd9fd61aaffa682d854dc0bb912a38cfa63ffc26ffcda9", 0x8b}, {&(0x7f0000001d00)="f237b74914e7f757c2397592622542cc82dac50a45aa9585098bcbcad9524e4f09eeb1bfa5e4c8a1fadb683cd61040010c3f120afcf3adccccd80e032fa7016a8cafa6ce13ab7935199fdad83d415f692da5180363fc0fef6ec779ec015780921d4e9cefac83f2ca561bba916ac2b0b385198f7efa7b3cd58d0559d149e8ab24c7e7919d02d782ac754a66aa48e18423f06cc3902c299058fc989bb31349dae784cb5603ccafe161397e56a889643da29bd33c100b756e7fbc85859c72c88c0184842316abfa583579f92571becb15e3a30ac42ee6f1", 0xd6}], 0x4, &(0x7f0000002200)=[@rights={{0x14, 0x1, 0x1, [r1]}}, @cred={{0x1c}}, @cred={{0x1c, 0x1, 0x2, {0x0, 0xee01}}}, @rights={{0x18, 0x1, 0x1, [r6, r0]}}, @rights={{0x38, 0x1, 0x1, [0xffffffffffffffff, r6, r4, r0, r10, r8, r8, r2, r9, r8]}}, @cred={{0x1c}}, @rights={{0x30, 0x1, 0x1, [r6, r5, 0xffffffffffffffff, r4, r0, r10, r4, r5]}}], 0xf8, 0x44045}}, {{&(0x7f0000002300)=@abs={0x1, 0x0, 0x4e21}, 0x6e, &(0x7f0000002580)=[{&(0x7f0000002380)="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", 0xfd}, {&(0x7f0000002480)="51d5f616b390b1a3b5720e745ed03e0127c4293eb72193757e0d42aefe7622bfa8502c21802bfdecec5a71cdd4d723accd12151b3978e67c9106699d1025891066b8f02f22898de60f8284ed70104b92ecf13acbe628ee5bc4b1355822e1f5d4cda5757643713eefb324e42106db0b27d3afec321a78ad8131c75370cc0dbb797ab43225e3da5a654db074d0a9f42aadc27ee72497bbf543a257b7992cfd1a262391ed71e1015edd9bd16a077a60a6477e02999fc13bf6af5b0d208a7ebe6cbb67edc52249d04f27d2caebbdd97493d44ffd9ed0b451853b08cdd464aff2c4e1bcd4be1695b92cee765408c7a795891d91c31cdb430250a311", 0xf9}], 0x2, &(0x7f0000002780)=[@rights={{0x20, 0x1, 0x1, [r1, r4, r5, 0xffffffffffffffff]}}, @rights={{0x20, 0x1, 0x1, [r10, r8, r5, r5]}}, @cred={{0x1c}}, @rights={{0x14, 0x1, 0x1, [r10]}}, @cred={{0x1c, 0x1, 0x2, {0x0, 0x0, 0xee00}}}], 0x98, 0xec7c2b1969a2c388}}, {{&(0x7f0000002840)=@abs={0x0, 0x0, 0x4e22}, 0x6e, &(0x7f0000002dc0)=[{&(0x7f00000028c0)="690c92b7b2b42a1200fa1ee5a0460035b5ca6700b617f26f974921c60660fb42e10e9da023af828310f758459b52263ff0db0155c8f57405c1c5de05fc732f923975318b97c7f2d58b64526df92f26b9025a46bb", 0x54}, {&(0x7f0000002940)="3f6fa53376bb2a87571639650c73e740d9bc5e91ae2225e6332d5286aa0c1db2132ffe132f205935c3bc2b4296ef8bedef50edc0d9210a9e75a67b879934d6eb0501caeefa87e1f0a1e172530939f4ee40a839f6df9477661fc9b12574f9c5799180d8cebe645050731ae0e6319f17933be28935d5b2d73ea45dce58e7059dac227091928f784d2a47f7a49af38d8d0e147126db85", 0x95}, {&(0x7f0000002a00)="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", 0xfe}, {&(0x7f0000002b00)="7841353fb5acb51c0d64cdf87af61dd850efeadab08297d4b84bde0f82a55ee9ad7f87cef52b", 0x26}, {&(0x7f0000002b40)="642f3f7ee90986af5277e2b1d0bb05f2dd708c5777ccc13f8072cd27c176b901e58aab198ff8ae1ee379566ebc14da3a5ee97ae3803bb3649754518a93476c26ac768058a91ac8f8fe65bbba05a667bea8c38ad476fcb855d0f5d53f69154ff5f7efd882e853145c9d4ce63120ba141375044b86e6f6163d0fe71f5b0755dfb1021dcfe2fa5db11a945b991229da9be4b9d198a605acbdbbc769bc0588ae6e493de99239", 0xa4}, {&(0x7f0000002c00)="1cde8da61969852e50c67d2ef6ecad8b8d52b5d1b3af1fd645d86290f0bf5aab6e9b4e6e28166805de0af017d80328c664748f104095d2e9206def21472d0c1198cb4a6f34a4ec5d560343616fe115e7897664e4a02a1317ad87094260d31979c994b027e58967608ad93ae117bd8e665408397d805ef32c97846de8da81bfc466da73005b35d5e8dfdc6b2ed418dd1f6d452f84a7e38d1ee500f9b9ce11d09901d4e9740f8a8fbdf91071a89c1f4b18262f3fdfec5754", 0xb7}, {&(0x7f0000002cc0)="0a4b82d3105e6c3a5e1a1c44ce65e89cf651b14eea105611826b0b7a43ff5f027da6f4f896b5c585cca4d5169ea371c708f59641e7c95f239a372e79ed6479ce47485faa9015b2daefe163bd3483971b5fd6a26deeff63df602bdd1d85a2eefffa3de51b4ebb1de5b74821d09b43ee18472d5b6964bd7b70e684733896cf697e81cf0a9364a9754e80817e4038db5cf67b09c9e80f8591cbfc731ba696212d62d34adbce1ce1f24e0b60f04771d9", 0xae}, {&(0x7f0000002d80)="93d94f1671314831d9a09a7ab17880a79f9436a67b5c3073e24a68b3722131", 0x1f}], 0x8, &(0x7f0000003180)=[@rights={{0x20, 0x1, 0x1, [r9, r8, r6, r0]}}, @cred={{0x1c}}, @cred={{0x1c, 0x1, 0x2, {0x0, 0x0, 0xee01}}}, @rights={{0x1c, 0x1, 0x1, [r2, r9, r0]}}, @rights={{0x30, 0x1, 0x1, [r9, 0xffffffffffffffff, 0xffffffffffffffff, r1, r2, r0, r9, r4]}}, @rights={{0x20, 0x1, 0x1, [r2, 0xffffffffffffffff, 0xffffffffffffffff, r8]}}], 0xd0, 0x4014010}}, {{&(0x7f0000003280)=@abs={0x1, 0x0, 0x4e20}, 0x6e, &(0x7f0000003340)=[{&(0x7f0000003300)="ef1a20144f007e6c10817ba3ec0e38729bb24c4ad08376d266cd03fa60c06f443eb0479c781b2b2198", 0x29}], 0x1, &(0x7f0000003c80)=[@rights={{0x18, 0x1, 0x1, [r10, r1]}}, @cred={{0x1c}}, @cred={{0x1c}}, @rights={{0x20, 0x1, 0x1, [r1, r10, r0, r8]}}, @cred={{0x1c}}, @cred={{0x1c, 0x1, 0x2, {0x0, 0x0, 0xee01}}}, @rights={{0x38, 0x1, 0x1, [r10, r0, 0xffffffffffffffff, r10, r10, r4, r2, 0xffffffffffffffff, 0xffffffffffffffff, r6]}}, @cred={{0x1c}}, @cred={{0x1c, 0x1, 0x2, {0xffffffffffffffff}}}, @cred={{0x1c}}], 0x150, 0x40040}}, {{&(0x7f0000003e00)=@file={0x0, './file0\x00'}, 0x6e, &(0x7f0000005200)=[{&(0x7f0000003e80)="8f32019f2a3977120330dfe85bf02f1931cc13b109ce47a6c10cb9fbc32c21ae7dfba1502196050317e8d5bc2cc985aedf7ec2353385db471db35c401f2c3789694773b823e5c087c2f73ecc50371c61eec916bd564d29b3dc004c615d53b04a0d3a235c35e6cde78859178d67190093e5a3da177fd03bc262f15b7021582270f4da9c1b1f40ddd62e1c08f62ace41", 0x8f}, {&(0x7f0000003f40)="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", 0x1000}, {&(0x7f0000004f40)="c4ea13c71210cbf1ee8361aca40ebaa6d0f15c948ea2144cecf292d27341caefe993bef94661002f844edd90570ff5baed2b7b1f87f893f3ba32202e5d28f1c1926e7227e25e1626b35963647c02684461f46499597779c90ee097b47c9c10d208ddb3c98a93cbadb6a8028375d2a2daf95bcb5641ff10a70b01c47a743d23f3fcc6a12dd15c55ea19bdc1d5916c82bd49f1fbb8fcc5067d415dee24e5e2c38299a4288e79bb49b220335aa24ea9880cf289dbe0ed38809b", 0xb8}, {&(0x7f0000005000)="719d8d6b18f9f934d52976eef30439f089cc07d5f7fd90cb51c2539e328380a9d458ca379e945a2f8340742c8b1618341267e91f98478581f451a28a4422c3f4b8cabf3dd446dfadc031d581e1579a04ff6261a56a4424373942a869f01f02234d1696eee1b5340e60aaab57cccf25b12e9f098d51a03ac0f96745aaa078729c278329236d30d8a7e2cc8574fb3e779b9e03296fc044d46d3ce852e7852e2d2ec5b6aaa530a9472182e04254f5599bb550e3311fe44bd1faa5fec1b4812a839f9c3279d2d7a9bf81d20c6a41585dd92bdee444", 0xd3}, {&(0x7f0000005100)="0595c02580a3118084811950a8a9eaeb96b56cedcee44d50f2917a1bf4fff865110ace98fd90b0e6c2b8ff8f899603f890b82e96c6b08f9f1d1cf0561c49d75c1a5831c90898f6f8b26d184f83d31c398e3d4a90b1b830225200fdae602c02f71d3bccbb3eec83d5cf6043c549d1f8b424660f892736b1d6ed70751f5f7baba1ea30c0afaa7a35d1270e91afb8eb8da77a9885cabcbf947edb227cdc4a9da2ed9b38e14055688a65766878e1632298e05ace8893688d987d1244bd0292db4c9785e3135efa23efaf680e723f8fe234aa579c804db444d50890dad3d47151762206dcaf24f48e40e7ec6d2891ae2009780acb4006fef039cf08", 0xf9}], 0x5, &(0x7f0000005280)=[@rights={{0x14, 0x1, 0x1, [r6]}}, @rights={{0x1c, 0x1, 0x1, [r5, r8, r0]}}, @rights={{0x24, 0x1, 0x1, [r10, r10, r8, r1, r5]}}, @cred={{0x1c, 0x1, 0x2, {0xffffffffffffffff, 0x0, 0xee01}}}, @rights={{0x28, 0x1, 0x1, [r4, r9, r0, r6, r9, r4]}}], 0xa8, 0x40}}, {{&(0x7f0000005340)=@abs={0x1, 0x0, 0x4e24}, 0x6e, &(0x7f00000057c0)=[{&(0x7f00000053c0)="e832fd1d1f79566ce07ea29a88cf6100fb691e61", 0x14}, {&(0x7f0000005400)="1eadaf5c72cb0f7c3f67212b454614e8e0dc7a89b36770d3e4fa2659e190de29b7a464d82cdef16ac253", 0x2a}, {&(0x7f0000005440)="67865b7cc05d66981b0d311effc14438043285b09f69ac6c2f961fcf966598aa07ab8e3f9b9c73251c0bb27695494a39", 0x30}, {&(0x7f0000005480)="06c1d58499aa9fa8c1e99652ffd11051395cf18ee3388a40371012d9d0bed95516e5d5c9f98578a8a4090d4fe096f3656ffecb95bc417bd511d70a4b33bf6daa3130733636d3d8a72dbb2bb3c3a13408f4e57feb1f8c92dadf6a48d7b1ee44b318b6d7cf702f013884514e5439be9b1af89962fc379ab52b4c62d48ffd078963cf949632dbda005e6ca1e9775bbc5c0b9199119515255eda7316df4f39e9dbb843efb54e03de4d1833f9b08e8471d84761d0849ccde7eb6ef7eb080c5c05f5bf6315ada297451628be71", 0xca}, {&(0x7f0000005580)="675b9ae84c233ffaa9ba3b076540a2e312a7dbc30626d3ce11fd7053b6e01c12c0979b13491d7cf1293228fb1c2deb7bbe66a5b22e4a0481975b9b94ab40a0e6b9f6c90fdcca655f6d7e10f9370c9c2eaff604e07a44defb0cc9386141891da511c5d84550b5ddddef31a1dc640c312ee96093c36b88499d454851da86a37677aadea951889b581f34ef9194389a7ae3d2859ca0e61367922ea4bea1e74161b34550a95e5e10c0159e01329c13af123b34ed4288b42ac694c8c92f3c9200d3d72795a855814850bada5fd29e8aae1dbe95ccf43a8b27220bfb04d0be38bdfffbee72e0a950a7e6c0b2cc9b6ef77a4093d8", 0xf1}, {&(0x7f0000005680)="40eb2efbdbe976e66c91dd", 0xb}, {&(0x7f00000056c0)="935de2846f5473de9bd9a88f146d4b40c4892b614bef75f0ce233a635ec15c6913bb42a9c15b9e72fe6cbdd5426b32ebb648c2a68f4700a5728f1d48", 0x3c}, {&(0x7f0000005700)="a746812db8fe6cf16b3f95bb042231c4e2ae6e73b4f64350d7416300e23c03b50b72c53de1ddf9093ee8382385c121d7967678affc210d730f013742fdb739d9779f2e5fdeae65a9f7bfe723d1dc1f8c74e46b260d3503bedcb17a2a8b9a4cf324bff99274f7a01c6fdbceb4c1111f8c9b678e342809468d46a53ca9628fa92f995d41534ae707109eda0646dd339245", 0x90}], 0x8, 0x0, 0x0, 0x40}}], 0x7, 0x4044001) 4.091043879s ago: executing program 6 (id=6314): r0 = bpf$MAP_CREATE(0x0, &(0x7f00000002c0)=ANY=[@ANYBLOB="02000000040000000400000022bf000080040000", @ANYRES32, @ANYBLOB="9e3d000000437821945c0b469bf5f223b14260823bbb230bc05cc78e6def40f739c2e37f2f78fa83052742f205a378ce24582fd85a942ef5652c8276c470aec8c828bb35d50794661aeee7c760cbba61d706f3f00e96cb26ea539a0e7fefe2f96ae6b8cd2103f8b592e46b45934c20aea56569417801c2f0e562a49c3bbed0db0daf96987455ff13abd485a32b1c8cdb11eb912a16b7c1848371876470cf", @ANYRES32=0x0, @ANYRES32, @ANYBLOB='\x00'/28], 0x48) r1 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r2 = syz_genetlink_get_family_id$nfc(&(0x7f0000000100), r1) sendmsg$NFC_CMD_FW_DOWNLOAD(r1, &(0x7f0000002ec0)={0x0, 0x0, &(0x7f0000002e80)={&(0x7f0000002e00)=ANY=[@ANYBLOB='(\x00\x00\x00', @ANYRES16=r2, @ANYBLOB="192c2cbd7000ffdbdf251500000003000000", @ANYRES32=0x0, @ANYBLOB="0900140023292e2d21000000"], 0x28}, 0x1, 0x0, 0x0, 0x100040c0}, 0x80) r3 = syz_genetlink_get_family_id$nfc(&(0x7f0000000040), 0xffffffffffffffff) ioctl$IOCTL_GET_NCIDEV_IDX(0xffffffffffffffff, 0x0, &(0x7f0000000080)=0x0) r5 = syz_init_net_socket$rose(0xb, 0x5, 0x0) connect$rose(r5, &(0x7f0000000040)=@short={0xb, @remote={0xcc, 0xcc, 0xcc, 0xcc, 0x1}, @netrom={0xbb, 0xbb, 0xbb, 0xbb, 0xbb, 0x0, 0x0}, 0x1, @default}, 0x1c) write(r5, 0x0, 0x0) pipe(&(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) r8 = openat$nci(0xffffffffffffff9c, &(0x7f0000000080), 0x2, 0x0) r9 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r10 = syz_genetlink_get_family_id$nfc(&(0x7f0000000100), r9) ioctl$IOCTL_GET_NCIDEV_IDX(r8, 0x0, &(0x7f00000000c0)=0x0) sendmsg$NFC_CMD_DEV_UP(r9, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000500)=ANY=[@ANYBLOB="1c000000", @ANYRES16=r10, @ANYBLOB="010026bd7000fcdbdf250200000008000100", @ANYRES32=r11], 0x1c}}, 0x0) sendmsg$nfc_llcp(r6, &(0x7f0000000440)={&(0x7f00000003c0)={0x27, r11, 0xffffffffffffffff, 0x742a7a2a86a482ac, 0x4, 0x0, "f0039c77e6a62740468225f18b2e934f08a4b1a5827faef87ef244f1187fa050297418072caa3f26eaf3ab497cfa1a9ad5f0cf9a0cda3ddb22bd29ec0113ac", 0x26}, 0x60, &(0x7f00000009c0)=[{0x0}, {&(0x7f0000000280)="f6fe63b6f9b2c01a8d5a4f1b6810d024394b24cb029381d4fedb9bdda34f13035776763a302df3fcc4dbc682399860df0fd0ae03116bbb02e1", 0x39}, {&(0x7f0000000940)="ba9faf1e35ce56c01ff5a8f34f2bda0de93dc4c28bdea8718b5866bb73ac7bf296deffd6cf9be3fb6aec7e088ce7ee9dcec45a215d920affda43030c305f2074f4208f9aca45dc4c053dc31e6d1dfe7056751adb26c0ed2f4556d2d89d8922add1990ed25a471010bbb1aa697425f83ffd7f7cf594", 0x75}], 0x3, 0x0, 0xf8, 0x20008048}, 0x800) socket$unix(0x1, 0x2, 0x0) ioctl$IOCTL_GET_NCIDEV_IDX(0xffffffffffffffff, 0x0, &(0x7f00000000c0)) ioctl$IOCTL_GET_NCIDEV_IDX(0xffffffffffffffff, 0x0, &(0x7f0000000100)=0x0) r13 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r13, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000240)=ANY=[@ANYBLOB="140000001000010000000000000000000500000a28000000000a030000000000000000000a00000708000240000000020900010073797a31000000002c000000030a010100000000000000000a0000070900010073797a31000000000900030073797a320000000014000000110001"], 0x7c}, 0x1, 0x0, 0x0, 0x4000}, 0x0) sendmsg$NFT_BATCH(r13, &(0x7f0000009b40)={0x0, 0x0, &(0x7f0000009b00)={&(0x7f0000000400)=ANY=[@ANYBLOB="1400000010000100f7000000000000000500000a44000000090a010400000000000000000a0000040900010073797a310000000008000540000000020900020073797a310000000008000a40fffffffc08000340000000144c0000000c0a010100000000000000000a0000060900020073797a31000000000900010073797a3100000000200003801c0000800c00018006000100d10300000c000440000000000000000114000000110001"], 0xb8}, 0x1, 0x0, 0x0, 0x4000850}, 0x40) sendmsg$NFC_CMD_FW_DOWNLOAD(r1, &(0x7f0000000200)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x80000000}, 0xc, &(0x7f00000001c0)={&(0x7f0000000140)={0x44, r3, 0x300, 0x70bd2b, 0x25dfdbfd, {}, [@NFC_ATTR_FIRMWARE_NAME={0x5, 0x14, '('}, @NFC_ATTR_DEVICE_INDEX={0x8, 0x1, r4}, @NFC_ATTR_DEVICE_INDEX={0x8, 0x1, r11}, @NFC_ATTR_FIRMWARE_NAME={0x8, 0x14, 'nfc\x00'}, @NFC_ATTR_FIRMWARE_NAME={0x6, 0x14, '.-'}, @NFC_ATTR_DEVICE_INDEX={0x75, 0x1, r12}]}, 0x44}, 0x1, 0x0, 0x0, 0x40804}, 0x1) mmap(&(0x7f0000fa2000/0x4000)=nil, 0x4000, 0x2, 0x82011, r0, 0x0) r14 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000480), r6) ioctl$sock_SIOCGIFINDEX_80211(0xffffffffffffffff, 0x8933, &(0x7f00000004c0)={'wlan0\x00', 0x0}) sendmsg$NL80211_CMD_CANCEL_REMAIN_ON_CHANNEL(r7, &(0x7f00000005c0)={&(0x7f0000000240)={0x10, 0x0, 0x0, 0x8000}, 0xc, &(0x7f0000000580)={&(0x7f0000000540)={0x34, r14, 0x20, 0x70bd27, 0x25dfdbfd, {{}, {@val={0x8, 0x3, r15}, @void}}, [@NL80211_ATTR_COOKIE={0xc, 0x58, 0x45}, @NL80211_ATTR_COOKIE={0xc, 0x58, 0x19}]}, 0x34}, 0x1, 0x0, 0x0, 0x4008004}, 0x4000814) 2.761098359s ago: executing program 6 (id=6325): r0 = openat$tun(0xffffffffffffff9c, &(0x7f00000003c0), 0x1c1341, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f00000000c0)={'syzkaller0\x00', 0x84aebfbd6349b7f2}) socket(0x400000000010, 0x3, 0x0) socket$nl_generic(0x10, 0x3, 0x10) bpf$BPF_TASK_FD_QUERY(0x14, &(0x7f0000000180)={0x0, 0xffffffffffffffff, 0x0, 0xfffffffffffffd20, &(0x7f0000000000)='cgr\x00\x00\x00\xf9'}, 0x6a) openat$cgroup_root(0xffffffffffffff9c, 0x0, 0x200002, 0x0) r1 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000), 0x200002, 0x0) r2 = socket$unix(0x1, 0x1, 0x0) r3 = openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0) ioctl$TUNSETIFF(r3, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x10}) socket(0x400000000010, 0xa, 0xfffffff8) r4 = socket$unix(0x1, 0x1, 0x0) ioctl$sock_SIOCGIFINDEX(r4, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000bc0)={0x0, 0x0, &(0x7f0000000140)={&(0x7f00000005c0)=@newqdisc={0x2c, 0x24, 0x100, 0x71bd2a, 0xfffdffef, {0x0, 0x0, 0x0, r5, {0x0, 0xfff1}, {0xfff1, 0xffff}, {0x0, 0x2}}, [@TCA_RATE={0x6, 0x5, {0xcf, 0x3}}]}, 0x2c}}, 0x0) r6 = socket$kcm(0x11, 0x3, 0x0) r7 = socket(0x400000000010, 0x3, 0x0) r8 = socket$unix(0x1, 0x5, 0x0) ioctl$sock_SIOCGIFINDEX(r8, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r7, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000380)={&(0x7f00000001c0)=@newtfilter={0x40, 0x2c, 0xe785ff707d021b12, 0x70bd24, 0x25dfdbfc, {0x0, 0x0, 0x0, r9, {0xfff3, 0x8}, {0x0, 0x8}, {0x5, 0xffe0}}, [@filter_kind_options=@f_flower={{0xb}, {0x10, 0x2, [@TCA_FLOWER_KEY_ETH_DST={0xa, 0x4, @random="9399c9adfec4"}]}}]}, 0x40}, 0x1, 0x0, 0x0, 0x8848}, 0x20004804) r10 = openat$tun(0xffffffffffffff9c, &(0x7f00000002c0), 0x0, 0x0) close(r10) socket$nl_generic(0x10, 0x3, 0x10) ioctl$SIOCSIFHWADDR(r10, 0x8914, &(0x7f0000002280)={'syzkaller0\x00', @multicast}) ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f0000000100)={'lo\x00', 0x0}) sendmsg$kcm(r6, &(0x7f00000000c0)={&(0x7f0000000380)=@xdp={0x2c, 0x7, r11, 0x3e}, 0x80, &(0x7f0000000080)=[{&(0x7f0000000180)='\'', 0x1}], 0x1}, 0x40840) r12 = openat$cgroup_procs(r1, &(0x7f0000000040)='cgroup.threads\x00', 0x2, 0x0) sendfile(r12, r12, 0x0, 0x1) mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000280)='./cgroup/syz0\x00', 0x1ff) r13 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000), 0x200002, 0x0) openat$cgroup_procs(r13, &(0x7f0000000200)='cgroup.procs\x00', 0x2, 0x0) 2.760668361s ago: executing program 4 (id=6326): r0 = socket$qrtr(0x2a, 0x2, 0x0) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000a40)={0x2, 0x2, &(0x7f0000000080)=@raw=[@call={0x85, 0x0, 0x0, 0xae}, @exit], &(0x7f0000000840)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2a}, 0x90) ioctl$sock_qrtr_TIOCINQ(r0, 0x541b, &(0x7f0000000840)) 2.758121285s ago: executing program 4 (id=6328): r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000140), 0x0, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f00000000c0)={'syzkaller1\x00', 0x4c02}) (async) setsockopt$SO_TIMESTAMPING(0xffffffffffffffff, 0x1, 0x25, &(0x7f0000000080)=0x1000, 0x4) (async) readv(r0, &(0x7f00000001c0)=[{&(0x7f0000001400)=""/227, 0x10}], 0x4) sendmmsg(0xffffffffffffffff, 0x0, 0x0, 0x200448c0) (async) r1 = socket$kcm(0x2, 0xa, 0x2) ioctl$SIOCSIFHWADDR(r0, 0x8924, &(0x7f0000000040)={'vlan1\x00', @link_local={0x1, 0x80, 0xc2, 0x0, 0x0, 0xe}}) ioctl$TUNSETVNETHDRSZ(r0, 0x400454d8, &(0x7f0000000100)=0xc) ioctl$SIOCSIFHWADDR(r1, 0x8914, &(0x7f0000000000)={'syzkaller1\x00', @link_local}) (async) recvmmsg(r1, &(0x7f0000000a80)=[{{&(0x7f0000000200)=@vsock, 0x80, &(0x7f0000000180)=[{&(0x7f0000000280)=""/99, 0x63}, {&(0x7f0000000300)=""/71, 0x47}], 0x2, &(0x7f0000000380)=""/33, 0x21}, 0xfffff56d}, {{&(0x7f00000003c0)=@hci, 0x80, &(0x7f0000000640)=[{&(0x7f0000000440)=""/219, 0xdb}, {&(0x7f0000001500)=""/4096, 0x1000}, {&(0x7f0000000540)=""/194, 0xc2}], 0x3, &(0x7f0000000680)=""/100, 0x64}, 0x4919}, {{&(0x7f0000000700)=@pppoe={0x18, 0x0, {0x0, @link_local}}, 0x80, &(0x7f0000000780), 0x0, &(0x7f00000007c0)=""/231, 0xe7}, 0xc}, {{&(0x7f00000008c0)=@x25, 0x80, &(0x7f0000000a00)=[{&(0x7f0000002500)=""/4096, 0x1000}, {&(0x7f0000000940)=""/91, 0x5b}, {&(0x7f00000009c0)}], 0x3, &(0x7f0000000a40)=""/25, 0x19}, 0x23e}], 0x4, 0x40012141, &(0x7f0000000b80)={0x0, 0x3938700}) (async) r2 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f0000000780)={'rose0\x00'}) ioctl$sock_inet_SIOCSIFPFLAGS(0xffffffffffffffff, 0x8934, &(0x7f0000000040)={'virt_wifi0\x00', 0x6}) (async) ioctl(r2, 0x8b23, &(0x7f0000000040)) sendmsg$nl_route(0xffffffffffffffff, 0x0, 0x400c844) (async) sendmsg$NFT_BATCH(0xffffffffffffffff, 0x0, 0x24044054) 2.73043232s ago: executing program 5 (id=6331): syz_emit_ethernet(0x4e, &(0x7f0000000380)={@local, @link_local, @void, {@ipv6={0x86dd, @tcp={0x0, 0x6, '\x00', 0x18, 0x6, 0x1, @empty, @local, {[], {{0x400, 0x4e22, 0x41424344, 0x41424344, 0x0, 0x4, 0x6, 0xc2, 0x0, 0x0, 0x0, {[@generic={0x4, 0x2}]}}}}}}}}, 0x0) r0 = socket(0x1e, 0x4, 0x0) ioctl$sock_ipv4_tunnel_SIOCCHGTUNNEL(r0, 0x89f3, &(0x7f0000000240)={'syztnl0\x00', &(0x7f0000000400)={'syztnl1\x00', 0x0, 0x10, 0x8, 0xfb, 0x8001, {{0x5, 0x4, 0x3, 0x5, 0x14, 0x65, 0x0, 0x2, 0x29, 0x0, @multicast2, @initdev={0xac, 0x1e, 0x0, 0x0}}}}}) (async) ioctl$sock_ipv6_tunnel_SIOCADDTUNNEL(r0, 0x89f1, &(0x7f0000000480)={'ip6gre0\x00', &(0x7f0000000400)={'syztnl0\x00', 0x0, 0x4, 0x9, 0x8, 0x803, 0x1, @private1={0xfc, 0x1, '\x00', 0x1}, @dev={0xfe, 0x80, '\x00', 0x2e}, 0x10, 0x8, 0xe7, 0x2}}) r1 = socket$nl_generic(0x10, 0x3, 0x10) r2 = syz_genetlink_get_family_id$mptcp(&(0x7f0000000000), r1) sendmsg$MPTCP_PM_CMD_ADD_ADDR(r1, &(0x7f0000000400)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000004c0)=ANY=[@ANYBLOB='<\x00\x00\x00', @ANYRES16=r2, @ANYBLOB="0100000000000000000007000000280001801400040000000000000000000000ffffac1414aa060001000a"], 0x3c}, 0x1, 0x0, 0x0, 0x4000000}, 0x4000000) (async) socket$inet_icmp_raw(0x2, 0x3, 0x1) (async) r3 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX_80211(r3, 0x8933, &(0x7f0000000000)={'wlan1\x00', 0x0}) (async) r5 = socket(0x2, 0x2, 0x1) (async) socket$nl_generic(0x10, 0x3, 0x10) bind$alg(r0, &(0x7f0000000600)={0x26, 'skcipher\x00', 0x0, 0x0, 'cbc-aes-neonbs\x00'}, 0x58) ioctl$sock_SIOCGIFINDEX_80211(r3, 0x8933, &(0x7f00000005c0)={'wlan0\x00'}) (async) syz_genetlink_get_family_id$tipc(&(0x7f0000000540), r5) (async) sendmsg$NL80211_CMD_REMAIN_ON_CHANNEL(r3, &(0x7f0000000200)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000240)={0x34, 0x0, 0x1, 0x0, 0xffffffff, {{0x2}, {@val={0x8, 0x3, r4}, @void}}, [@chandef_params=[@NL80211_ATTR_CENTER_FREQ1={0x8, 0xa0, 0x7}, @NL80211_ATTR_CHANNEL_WIDTH={0x8, 0x9f, 0x7}], @chandef_params=[@NL80211_ATTR_WIPHY_FREQ={0x8, 0x26, @random=0x1685}]]}, 0x34}}, 0x10) ioctl$sock_SIOCGIFINDEX_80211(r1, 0x8933, &(0x7f00000000c0)={'wlan1\x00', 0x0}) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000140)={0x1e, 0x4, &(0x7f0000000400)=ANY=[@ANYBLOB="1800000000000000000000000000000071120800000000009500"], &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x24, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x2}, 0x94) (async) sendmsg$NL80211_CMD_TDLS_OPER(r1, &(0x7f0000000180)={&(0x7f0000000080)={0x10, 0x0, 0x0, 0x1000000}, 0xc, &(0x7f0000000140)={&(0x7f0000000500)=ANY=[@ANYBLOB='(\x00\x00\x00', @ANYRES16, @ANYBLOB="020025bd7000ff0300005100000008000300", @ANYRES32=r6, @ANYBLOB="0a000b405c5c4eb787b4bf43df32710600ffffffffffff0000"], 0x28}, 0x1, 0x0, 0x0, 0x10}, 0x8) (async) sendmsg$MPTCP_PM_CMD_ANNOUNCE(r1, &(0x7f0000000340)={&(0x7f0000000280)={0x10, 0x0, 0x0, 0x20000}, 0xc, &(0x7f0000000300)={&(0x7f00000002c0)={0x1c, r2, 0x2, 0x70bd27, 0x25dfdbfe, {}, [@MPTCP_PM_ATTR_LOC_ID={0x5, 0x5, 0x1}]}, 0x1c}}, 0x800) (async) getsockopt$inet_sctp_SCTP_PEER_AUTH_CHUNKS(r0, 0x84, 0x1a, &(0x7f0000000680)={0x0, 0xf0, "c4a5ab6addc4d5be77a060f510a0b28c99ed669577a5156673dce09a08a3eefcd6d4cbdf96516817fb3ee275e67b6394b315ce35ba1b17ead7b5070321b6013878963913ff8c04eb80c2e0fe0bee1644d1a991aa5a928088c2d8da638271a5e0a8292940d5bbf524a504902fd45d25b20834524b44f9174b717b673ab0cdc642038917758b4f703495fc7343e6e04f20653c72afb8a9609807312e6118e9caf48c670d000efa06a1c9c2d3feb22e29c76ffad43300b9a48a52ae5a9930df2a39a4c8777b27c0f6e4dc09caf7a26522c6c0bfcd9c459f584510a37c3acdbbd80c8d455f142549f3cf933e376768404851"}, &(0x7f0000000780)=0xf8) setsockopt$inet_sctp6_SCTP_DELAYED_SACK(r5, 0x84, 0x10, &(0x7f0000000100)=@assoc_value={r7, 0x2}, 0x8) (async) ioctl$sock_SIOCGIFINDEX_80211(r3, 0x8933, &(0x7f0000000580)={'wlan0\x00'}) bpf$PROG_LOAD(0x5, &(0x7f000000e000)={0xd, 0x4, &(0x7f0000000040)=ANY=[@ANYBLOB="b4000000000002007911d8000000007400"/32], &(0x7f0000003ff6)='GPL\x00', 0x2, 0x11, &(0x7f000000cf3d)=""/195, 0x0, 0x0, '\x00', 0x0, @sock_ops}, 0x48) 2.335645565s ago: executing program 2 (id=6333): r0 = socket(0x10, 0x803, 0x0) r1 = socket(0x18, 0x0, 0x2) bpf$PROG_LOAD(0x5, &(0x7f0000000100)={0x1, 0x4, &(0x7f0000000040)=@framed={{0xffffffb4, 0x8, 0x0, 0x0, 0x0, 0x61, 0x10, 0x78}, [@ldst={0x6, 0x0, 0x5}]}, &(0x7f0000003ff6)='GPL\x00', 0x5, 0xfd90, &(0x7f000000cf3d)=""/195, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x8, &(0x7f00000000c0), 0x0, 0x10, &(0x7f0000000080), 0xffffffffffffffb2}, 0x48) bind$netlink(r1, 0x0, 0x0) sendmsg$nl_route_sched(r0, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000140)={&(0x7f00000004c0)=@getchain={0x54, 0x66, 0x109, 0x0, 0x0, {}, [{0x8}, {0x4}, {0x8}, {0x8}, {0x8}, {0x8}]}, 0x54}}, 0x0) bpf$BPF_PROG_WITH_BTFID_LOAD(0x5, &(0x7f0000000300)=@bpf_lsm={0x4, 0x4, &(0x7f0000000280)=@framed={{0x66, 0xa, 0x0, 0x0, 0x0, 0x61, 0x11, 0x8c}, [@call={0x85, 0x0, 0x0, 0x6b}]}, &(0x7f0000000000)='syzkaller\x00'}, 0x90) r2 = socket$inet_sctp(0x2, 0x5, 0x84) r3 = socket$nl_generic(0x10, 0x3, 0x10) r4 = syz_genetlink_get_family_id$nl80211(&(0x7f0000002e40), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r2, 0x8933, &(0x7f0000002e80)={'wlan0\x00', 0x0}) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) r7 = epoll_create1(0x0) epoll_ctl$EPOLL_CTL_ADD(r7, 0x1, r6, &(0x7f0000000040)={0xa0000004}) epoll_ctl$EPOLL_CTL_MOD(r7, 0x3, r6, &(0x7f0000000100)={0x2}) epoll_ctl$EPOLL_CTL_MOD(r7, 0x3, r6, &(0x7f0000000140)={0x20000004}) epoll_pwait(r7, &(0x7f0000000180)=[{}], 0x1, 0xc, 0x0, 0x0) sendmsg$NL80211_CMD_TDLS_MGMT(r3, &(0x7f0000002f40)={0x0, 0x0, &(0x7f0000002f00)={&(0x7f0000002ec0)={0x24, r4, 0x1, 0x70bd2b, 0x25dfdbfb, {{}, {@val={0x8, 0x3, r5}, @void}}, [@NL80211_ATTR_TDLS_ACTION={0x5, 0x88, 0x8}]}, 0x24}}, 0x40000) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f0000000080)={'wlan1\x00'}) sendmsg$NL80211_CMD_LEAVE_IBSS(r1, &(0x7f0000000180)={&(0x7f0000000040), 0xc, &(0x7f0000000100)={&(0x7f00000000c0)={0x20, r4, 0x4, 0x70bd2a, 0x25dfdbfc, {{}, {@void, @val={0xc, 0x99, {0xffff, 0x32}}}}, ["", ""]}, 0x20}}, 0x8) 694.509123ms ago: executing program 5 (id=6334): r0 = socket$nl_generic(0x10, 0x3, 0x10) (async, rerun: 32) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000280)=@newtaction={0x64, 0x30, 0x1, 0x0, 0x0, {}, [{0x50, 0x1, [@m_vlan={0x4c, 0x1, 0x0, 0x0, {{0x9}, {0x20, 0x2, 0x0, 0x1, [@TCA_VLAN_PARMS={0x1c, 0x2, {{0xffffde56, 0x0, 0x0, 0x80000008}, 0x4}}]}, {0x4}, {0xc}, {0xc}}}]}]}, 0x64}}, 0x0) (rerun: 32) r1 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_route(r1, &(0x7f0000000240)={0x0, 0x0, &(0x7f00000000c0)={0x0}, 0x9}, 0x0) (async) r2 = syz_genetlink_get_family_id$mptcp(&(0x7f0000000300), 0xffffffffffffffff) sendmsg$MPTCP_PM_CMD_GET_ADDR(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000c40)={&(0x7f0000000340)={0x14, r2, 0xffffffffffffffff, 0x70bd2a, 0x25dfdbf8}, 0x14}, 0x1, 0x0, 0x0, 0x4005c}, 0x400c084) (async) syz_genetlink_get_family_id$nl80211(&(0x7f0000000480), r0) 665.580947ms ago: executing program 2 (id=6335): r0 = socket$pppl2tp(0x18, 0x1, 0x1) (async) r1 = socket$inet6_udp(0xa, 0x2, 0x0) (async) r2 = socket$alg(0x26, 0x5, 0x0) bind$alg(r2, &(0x7f0000000240)={0x26, 'hash\x00', 0x0, 0x0, 'michael_mic-generic\x00'}, 0x58) setsockopt$ALG_SET_KEY(r2, 0x117, 0x1, &(0x7f0000000040)="4dc07f947163300c", 0x8) (async) r3 = accept4(r2, 0x0, 0x0, 0x0) sendmmsg$inet(r3, &(0x7f0000000e40)=[{{0x0, 0x0, &(0x7f0000000580)=[{&(0x7f0000000100)='K', 0x1}], 0x1}}], 0x1, 0x8000) r4 = accept$unix(r3, 0x0, 0x0) recvmmsg$unix(r4, &(0x7f0000002380)=[{{0x0, 0x0, 0x0}}], 0x1, 0x62, 0x0) (async) connect$pppl2tp(r0, &(0x7f0000000000)=@pppol2tpv3={0x18, 0x1, {0x3, r1, {0x2, 0x0, @dev}, 0x2}}, 0x2e) (async) setsockopt$inet6_IPV6_XFRM_POLICY(r1, 0x29, 0x23, &(0x7f0000000bc0)={{{@in=@rand_addr=0x4, @in6=@private0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x20}, {0x0, 0x0, 0x2, 0x0, 0x8, 0x8, 0x4}, {0x4, 0x0, 0x0, 0xffffffffffffffff}, 0x0, 0x0, 0x0, 0x0, 0x1}, {{@in6=@remote, 0x4d3, 0x32}, 0x0, @in6=@empty, 0x0, 0x0, 0x0, 0x8, 0x2}}, 0xe8) (async) r5 = syz_genetlink_get_family_id$l2tp(&(0x7f00000008c0), 0xffffffffffffffff) (async) r6 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$L2TP_CMD_SESSION_DELETE(r6, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000100)={&(0x7f00000001c0)={0x34, r5, 0x1, 0x1070bd2c, 0x4, {0x5}, [@L2TP_ATTR_PW_TYPE={0x6, 0x1, 0x5}, @L2TP_ATTR_CONN_ID={0x8, 0x9, 0x2}, @L2TP_ATTR_SESSION_ID={0x8}, @L2TP_ATTR_PEER_SESSION_ID={0x8, 0xc, 0xaa8}]}, 0x34}, 0x1, 0x0, 0x0, 0x20008000}, 0x30) 610.307713ms ago: executing program 6 (id=6336): syz_genetlink_get_family_id$ipvs(&(0x7f0000000040), 0xffffffffffffffff) r0 = bpf$ITER_CREATE(0x21, &(0x7f0000000100), 0x8) getsockname$packet(r0, &(0x7f0000000240)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @local}, &(0x7f0000000280)=0x14) r1 = socket$nl_generic(0x10, 0x3, 0x10) r2 = socket(0x10, 0x3, 0x0) getpeername$packet(r2, &(0x7f0000000080)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @remote}, &(0x7f00000002c0)=0x14) sendmsg$nl_route(r2, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000001c0)=@newlink={0x78, 0x10, 0x403, 0x6101, 0x0, {0x0, 0x0, 0x0, 0x0, 0xff7f}, [@IFLA_LINKINFO={0x14, 0x12, 0x0, 0x1, @macsec={{0xb}, {0x4}}}, @IFLA_VF_PORTS={0x44, 0x18, 0x0, 0x1, [{0x18, 0x1, 0x0, 0x1, [@IFLA_PORT_PROFILE={0x9, 0x2, 'IPVS\x00'}, @IFLA_PORT_VF={0x8, 0x1, 0x3}]}, {0x10, 0x1, 0x0, 0x1, [@IFLA_PORT_PROFILE={0x9, 0x2, 'IPVS\x00'}]}, {0x18, 0x1, 0x0, 0x1, [@IFLA_PORT_INSTANCE_UUID={0x14, 0x4, "5bc0c77af6d8ae168554c8b402dec554"}]}]}]}, 0x78}}, 0x0) sendmsg$IPVS_CMD_NEW_SERVICE(r1, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000140)={&(0x7f00000006c0)=ANY=[], 0x54}}, 0x0) 608.901993ms ago: executing program 4 (id=6337): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) syz_emit_ethernet(0x3e, &(0x7f0000000f00)={@local, @broadcast, @void, {@ipv6={0x86dd, @generic={0x0, 0x6, "9fbbb0", 0x8, 0x0, 0x0, @private1, @local, {[@fragment={0x0, 0x0, 0x76}]}}}}}, 0x0) sendmsg$NFT_BATCH(r0, &(0x7f0000000200)={0x0, 0x0, &(0x7f00000004c0)={&(0x7f0000000100)={{0x14}, [@NFT_MSG_NEWTABLE={0x20, 0x0, 0xa, 0x101, 0x0, 0x0, {0x1, 0x0, 0x20}, [@NFTA_TABLE_NAME={0x9, 0x1, 'syz0\x00'}]}, @NFT_MSG_NEWFLOWTABLE={0x4c, 0x16, 0xa, 0x101, 0x0, 0x0, {0x1}, [@NFTA_FLOWTABLE_NAME={0x9, 0x2, 'syz2\x00'}, @NFTA_FLOWTABLE_NAME={0x9, 0x2, 'syz0\x00'}, @NFTA_FLOWTABLE_HOOK={0x14, 0x3, 0x0, 0x1, [@NFTA_FLOWTABLE_HOOK_NUM={0x8}, @NFTA_FLOWTABLE_HOOK_PRIORITY={0x8}]}, @NFTA_FLOWTABLE_NAME={0x9, 0x2, 'syz0\x00'}]}, @NFT_MSG_NEWRULE={0x4c, 0x6, 0xa, 0x101, 0x0, 0x0, {0x5, 0x0, 0x803}, [@NFTA_RULE_COMPAT={0x1c, 0x5, 0x0, 0x1, [@NFTA_RULE_COMPAT_PROTO_IPV6={0x8, 0x1, 0x1, 0x0, 0x5e}, @NFTA_RULE_COMPAT_PROTO_IPV4={0x8, 0x1, 0x1, 0x0, 0x2}, @NFTA_RULE_COMPAT_PROTO_IPV4={0x8, 0x1, 0x1, 0x0, 0x6c}]}, @NFTA_RULE_HANDLE={0xc, 0x3, 0x1, 0x0, 0x1}, @NFTA_RULE_ID={0x8, 0x9, 0x1, 0x0, 0x1}, @NFTA_RULE_POSITION_ID={0x8, 0xa, 0x1, 0x0, 0x1}]}], {0x14, 0x10}}, 0xe0}, 0x1, 0x0, 0x0, 0x1}, 0x0) 539.822481ms ago: executing program 2 (id=6338): r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000000400)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000040)=@bridge_newvlan={0x24, 0x76, 0x709, 0x2, 0x0, {0x7, 0x2}, [@BRIDGE_VLANDB_ENTRY={0xc, 0xd, 0x0, 0x1, @BRIDGE_VLANDB_ENTRY_STATE={0x5, 0x3, 0x4}}]}, 0x24}, 0x1, 0x5502000000000000}, 0x4000) (async) r1 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_CREATE(r1, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000580)=ANY=[], 0x58}, 0x1, 0x0, 0x0, 0x20008000}, 0x4000040) (async) ioctl$FS_IOC_GET_ENCRYPTION_POLICY_EX(0xffffffffffffffff, 0xc0096616, 0x0) (async) r2 = socket$packet(0x11, 0x3, 0x300) setsockopt$packet_int(r2, 0x107, 0x8, &(0x7f0000000100)=0x40049, 0x4) recvmmsg(r2, &(0x7f0000000480)=[{{0x0, 0x0, 0x0}}], 0x1, 0x0, 0x0) (async, rerun: 32) r3 = socket$tipc(0x1e, 0x5, 0x0) (rerun: 32) sendmsg$tipc(r3, &(0x7f0000000980)={&(0x7f0000000580)=@nameseq={0x1e, 0x1, 0x1, {0x1, 0x0, 0x2}}, 0x10, 0x0, 0x0, 0x0, 0x0, 0xc001}, 0x800) openat$tun(0xffffffffffffff9c, 0x0, 0x0, 0x0) (async) r4 = bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000340)=ANY=[@ANYBLOB="0200000004000000080000000100000080000000", @ANYRES32=0x0, @ANYBLOB='\x00'/20, @ANYRES32=0x0, @ANYRES32=0x0, @ANYBLOB="0000001a0015d5000000000000000000000000020001000000000000"], 0x48) bpf$BPF_MAP_CONST_STR_FREEZE(0x16, &(0x7f0000000480)={r4, 0xffffffffffffffff}, 0x4) r6 = bpf$PROG_LOAD(0x5, &(0x7f00000004c0)={0xa, 0x10, &(0x7f0000000740)=ANY=[@ANYBLOB="18000000000000000000000000000000b7080000020000007b8a00fe0000000087080000000000007b8af0ff00000000bda100000000000027000000f8ffffffbfa400000000000007040000f0ffffffb70200000000000018230000", @ANYRES32=r5, @ANYBLOB="0000000000000000b704000008000000850000004900000095"], &(0x7f0000000440)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000900)={r6, 0x18000000000002a0, 0xe, 0x0, &(0x7f0000000040)="76389e6a65585578f830e9000000", 0x0, 0x0, 0x60000000, 0x0, 0x0, 0x0, 0x0}, 0x50) r7 = socket$nl_generic(0x10, 0x3, 0x10) (async) r8 = socket(0x2000000000000021, 0x2, 0x10000000000002) connect$rxrpc(r8, &(0x7f0000000140)=@in4={0x21, 0x0, 0x2, 0x10, {0x2, 0x8, @multicast2}}, 0x24) sendmmsg(r8, &(0x7f0000000000)=[{{0x0, 0x0, 0x0, 0x0, &(0x7f00000000c0)=ANY=[@ANYBLOB="18000000000000001001000001"], 0x18, 0xe000}, 0x5}], 0x1, 0x0) recvmmsg(r8, &(0x7f00000059c0)=[{{0x0, 0x0, 0x0}, 0xfffffffb}], 0x1, 0x10002, 0x0) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000140)={0x10, 0x4, &(0x7f0000000000)=@framed={{}, [@ldst={0x1, 0x2, 0x3, 0x0, 0x1, 0x37}]}, &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x24}, 0x80) r9 = syz_genetlink_get_family_id$ethtool(&(0x7f0000000340), r7) sendmsg$ETHTOOL_MSG_COALESCE_SET(r7, &(0x7f0000000540)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f00000002c0)={0x3c, r9, 0x1, 0x70bd2e, 0x0, {}, [@ETHTOOL_A_COALESCE_PKT_RATE_LOW={0x8, 0xd, 0x3cf}, @ETHTOOL_A_COALESCE_HEADER={0x18, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_NAME={0x3, 0x2, 'netdevsim0\x00'}]}, @ETHTOOL_A_COALESCE_RX_USECS={0x8, 0x2, 0x3}]}, 0x3c}, 0x1, 0x0, 0x0, 0x104}, 0x20000001) (async) bpf$PROG_LOAD(0x5, &(0x7f0000000440)={0x0, 0x4, &(0x7f0000000200)=ANY=[@ANYBLOB="18000000000000000000000000000000850000002e00000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) (async) r10 = bpf$PROG_LOAD(0x5, &(0x7f0000000100)={0xe, 0x4, &(0x7f0000000200)=ANY=[], &(0x7f00000001c0)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @sk_skb, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x80) bpf$BPF_PROG_DETACH(0x8, &(0x7f0000000400)={@map, r10, 0x5}, 0x10) socket$nl_netfilter(0x10, 0x3, 0xc) 511.503725ms ago: executing program 5 (id=6339): r0 = socket$alg(0x26, 0x5, 0x0) bind$alg(r0, &(0x7f00000001c0)={0x26, 'skcipher\x00', 0x0, 0x0, 'xchacha20\x00'}, 0x58) setsockopt$ALG_SET_KEY(r0, 0x117, 0x1, &(0x7f0000000300)="c99b57381801238c09d0ff0f1d0dbd301e5a47b2f3caa73dcd2a6a370554375a", 0x20) (async) recvmmsg(0xffffffffffffffff, &(0x7f00000080c0)=[{{0x0, 0x0, &(0x7f00000042c0)=[{&(0x7f0000001d80)=""/51, 0x33}, {&(0x7f0000001dc0)=""/207, 0xcf}, {&(0x7f0000003040)=""/110, 0x6e}, {&(0x7f00000030c0)=""/66, 0x42}, {&(0x7f0000003140)=""/4096, 0x1000}], 0x5}, 0x1}, {{0x0, 0x0, &(0x7f0000005480)=[{&(0x7f0000004480)=""/4096, 0x1000}], 0x1}, 0xc82}], 0x2, 0x40000001, 0x0) r1 = socket(0x18, 0x1, 0x1) (async) r2 = socket$inet_tcp(0x2, 0x1, 0x0) bind$inet(r2, &(0x7f0000000380)={0x2, 0x4e22, @multicast1}, 0x10) setsockopt$sock_int(r2, 0x1, 0x800000000f, &(0x7f0000000080)=0x7, 0x4) (async) r3 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$sock_int(r3, 0x1, 0xf, &(0x7f0000000000)=0x2, 0x4) (async, rerun: 32) bind$inet6(r3, &(0x7f0000000240)={0xa, 0x4e22, 0x0, @ipv4={'\x00', '\xff\xff', @multicast2}, 0x10000000}, 0x1c) (async, rerun: 32) listen(r2, 0x0) getsockopt$inet_int(r1, 0x111, 0x32, 0x0, &(0x7f0000000380)) (async) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000000)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000b40), 0x2328}}, 0x0) (async) r4 = socket$nl_route(0x10, 0x3, 0x0) setsockopt$netlink_NETLINK_TX_RING(r4, 0x10e, 0xc, &(0x7f0000000040)={0x80}, 0x10) sendmsg$nl_route(r4, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000940)={&(0x7f0000000100)=ANY=[@ANYBLOB="2c0000001600010000000000fcffffff0a000000f8407ec0edb8db05660e32bed9e303c5fdbc4a4a3901518c58b3e892ad2f9747cf8607b283f94f6bf8ddac52bbdb736fa300c7e1dd668e6be25a67062b1375a06676a45464dede3fd5abe0fb10fa075b357e9abfde7e5db31d44a7e6e0f9dd85e0c5ab901a641dbc81a219a6f6b95662f1563ffd", @ANYRES32=0x0, @ANYBLOB="140006000400000003000000ff7f0000ffffffff"], 0x2c}}, 0x0) 412.734286ms ago: executing program 6 (id=6340): r0 = socket$inet_sctp(0x2, 0x1, 0x84) getsockopt$inet_sctp_SCTP_MAX_BURST(r0, 0x84, 0xc, &(0x7f0000000240)=@assoc_value={0x0}, &(0x7f0000000080)=0x8) r2 = socket$inet6_sctp(0xa, 0x5, 0x84) setsockopt$inet_sctp6_SCTP_PEER_ADDR_THLDS(r2, 0x84, 0x1f, &(0x7f0000000180)={r1, @in={{0x2, 0x4e22, @broadcast}}, 0x7ff, 0x8}, 0x90) getsockopt$inet_sctp_SCTP_LOCAL_AUTH_CHUNKS(r0, 0x84, 0x1b, &(0x7f0000000140)={r1}, &(0x7f0000000040)=0x8) r3 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=@base={0xe, 0x4, 0x8, 0x7}, 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000004c0)={0xc, 0xd, &(0x7f0000000340)=ANY=[@ANYBLOB="1800000000000000000000000000000018150000", @ANYRES32=r3, @ANYBLOB="0000000000000000b7080000000000007b5af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000001e000000850000009a00000095"], &(0x7f0000000000)='syzkaller\x00', 0x0, 0x0, 0x0, 0x41100, 0x2f, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) 412.087482ms ago: executing program 4 (id=6341): socket$nl_netfilter(0x10, 0x3, 0xc) (async) r0 = socket$nl_netfilter(0x10, 0x3, 0xc) socket$nl_netfilter(0x10, 0x3, 0xc) r1 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_CREATE(r1, &(0x7f00000002c0)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000000)={0x58, 0x2, 0x6, 0x3, 0x0, 0x0, {}, [@IPSET_ATTR_PROTOCOL={0x5}, @IPSET_ATTR_SETNAME={0x9, 0x2, 'syz1\x00'}, @IPSET_ATTR_DATA={0xc, 0x7, 0x0, 0x1, [@IPSET_ATTR_MAXELEM={0x8, 0x13, 0x0}]}, @IPSET_ATTR_FAMILY={0x5, 0x5, 0x2}, @IPSET_ATTR_REVISION={0x5}, @IPSET_ATTR_TYPENAME={0x11, 0x3, 'hash:ip,port\x00'}]}, 0x58}}, 0x0) (async) sendmsg$IPSET_CMD_CREATE(r1, &(0x7f00000002c0)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000000)={0x58, 0x2, 0x6, 0x3, 0x0, 0x0, {}, [@IPSET_ATTR_PROTOCOL={0x5}, @IPSET_ATTR_SETNAME={0x9, 0x2, 'syz1\x00'}, @IPSET_ATTR_DATA={0xc, 0x7, 0x0, 0x1, [@IPSET_ATTR_MAXELEM={0x8, 0x13, 0x0}]}, @IPSET_ATTR_FAMILY={0x5, 0x5, 0x2}, @IPSET_ATTR_REVISION={0x5}, @IPSET_ATTR_TYPENAME={0x11, 0x3, 'hash:ip,port\x00'}]}, 0x58}}, 0x0) close(r0) r2 = socket$nl_netfilter(0x10, 0x3, 0xc) r3 = socket$nl_route(0x10, 0x3, 0x0) socket$inet_udp(0x2, 0x2, 0x0) (async) r4 = socket$inet_udp(0x2, 0x2, 0x0) sendmsg$nl_route(r3, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000001140)={&(0x7f0000000000)=@newlink={0x4c, 0x10, 0x503, 0x70bd29, 0x0, {0x0, 0x0, 0x0, 0x0, 0x0, 0x6230}, [@IFLA_LINKINFO={0x20, 0x12, 0x0, 0x1, @gtp={{0x8}, {0x14, 0x2, 0x0, 0x1, [@IFLA_GTP_ROLE={0x8, 0x4, 0x1}, @IFLA_GTP_FD0={0x8, 0x1, @udp=r4}]}}}, @IFLA_ADDRESS={0xa, 0x3, @random="3a712f0756b8"}]}, 0x4c}}, 0x0) r5 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r5, &(0x7f00000035c0)={0x0, 0x0, &(0x7f0000003580)={&(0x7f0000000a40)=@newsa={0x140, 0x10, 0x1, 0x0, 0x0, {{@in=@empty, @in6=@remote, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff}, {@in, 0x0, 0x6c}, @in=@remote, {}, {}, {}, 0x0, 0x0, 0x2}, [@algo_comp={0x48, 0x3, {{'deflate\x00'}}}, @extra_flags={0x8, 0x18, 0x8}]}, 0x140}}, 0x0) (async) sendmsg$nl_xfrm(r5, &(0x7f00000035c0)={0x0, 0x0, &(0x7f0000003580)={&(0x7f0000000a40)=@newsa={0x140, 0x10, 0x1, 0x0, 0x0, {{@in=@empty, @in6=@remote, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff}, {@in, 0x0, 0x6c}, @in=@remote, {}, {}, {}, 0x0, 0x0, 0x2}, [@algo_comp={0x48, 0x3, {{'deflate\x00'}}}, @extra_flags={0x8, 0x18, 0x8}]}, 0x140}}, 0x0) sendmsg$NFT_BATCH(r2, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000240)=ANY=[@ANYBLOB="140000001000010000000000000000000500000a28000000000a030000000000000000000a00000708000240000000020900010073797a31000000002c000000030a010100000000000000000a0000070900010073797a31000000000900030073797a320000000014000000110001"], 0x7c}, 0x1, 0x0, 0x0, 0x4000}, 0x0) sendmsg$NFT_BATCH(r2, &(0x7f0000009b40)={0x0, 0x0, &(0x7f0000009b00)={&(0x7f0000000100)=ANY=[@ANYBLOB="140000001000010000000000000000000500000a4c000000090a010400000000000000000a0000040900010073797a310000000008000540000000020900020073797a310000000008000a40fffffffc080003400000001408000c4000000e45400000000c0a010100000000000000000a0000060900020073797a31000000000900010073797a310000000014000380100000800c00018006000100d103000014000000110001"], 0xb4}, 0x1, 0x0, 0x0, 0x4000850}, 0x40) sendmsg$NFT_BATCH(r0, &(0x7f0000009b40)={0x0, 0x0, &(0x7f0000009b00)={&(0x7f00000001c0)=ANY=[@ANYBLOB="140000001000010000000000000000000500000a480000001e0a010100000000000000000a0000060900020073797a31000000000900010073797a31000000001c000380180000800c000180060001"], 0x70}, 0x1, 0x0, 0x0, 0x4451099e661a63b1}, 0x0) 352.650954ms ago: executing program 5 (id=6342): bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000280)={&(0x7f0000000080)=ANY=[@ANYBLOB="9feb010018000000000000003000000030000000050000000000000001000004080000000000000003000000100000000000000000000002000000000300000000000011"], 0x0, 0x4d}, 0x20) r0 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r0, &(0x7f0000000180)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000200)=ANY=[@ANYBLOB="c4000000190001000000000000000000e0000002000000000000000000000000ff02000000000000000000000000000100000000200000000a00000087000000", @ANYRES32=0x0, @ANYRES32=0x0, @ANYBLOB="0000000000000000000000000000000000000000000000000000000000000000000000000000000000000000082000000000000000000000fbffffffffffffff0000000000000000000000000000000000000000000000020000000000000000000000000000000000000000000000000c001500590735008200d9"], 0xc4}}, 0x2c000010) r1 = socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$tipc(&(0x7f0000000100), r1) sendmsg$nl_xfrm(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000000)=ANY=[@ANYBLOB="b80000001500010000000000fddbdf25fe88000000000000000000000000010100000000000000000000000000000001000000004e2300000a00100000000000", @ANYRES32=0x0, @ANYRES32=0x0, @ANYBLOB='\b'], 0xb8}}, 0x0) syz_emit_ethernet(0x4a, &(0x7f0000000280)={@local, @remote, @void, {@ipv6={0x86dd, @tcp={0x0, 0x6, "8a37f2", 0x14, 0x2c, 0x0, @remote, @local, {[], {{0x600, 0x3, 0x41424344, 0x41424344, 0x0, 0x0, 0x5}}}}}}}, 0x0) bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000280)={&(0x7f0000000080)=ANY=[@ANYBLOB="9feb010018000000000000003000000030000000050000000000000001000004080000000000000003000000100000000000000000000002000000000300000000000011"], 0x0, 0x4d}, 0x20) (async) socket$nl_xfrm(0x10, 0x3, 0x6) (async) sendmsg$nl_xfrm(r0, &(0x7f0000000180)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000200)=ANY=[@ANYBLOB="c4000000190001000000000000000000e0000002000000000000000000000000ff02000000000000000000000000000100000000200000000a00000087000000", @ANYRES32=0x0, @ANYRES32=0x0, @ANYBLOB="0000000000000000000000000000000000000000000000000000000000000000000000000000000000000000082000000000000000000000fbffffffffffffff0000000000000000000000000000000000000000000000020000000000000000000000000000000000000000000000000c001500590735008200d9"], 0xc4}}, 0x2c000010) (async) socket$nl_generic(0x10, 0x3, 0x10) (async) syz_genetlink_get_family_id$tipc(&(0x7f0000000100), r1) (async) sendmsg$nl_xfrm(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000000)=ANY=[@ANYBLOB="b80000001500010000000000fddbdf25fe88000000000000000000000000010100000000000000000000000000000001000000004e2300000a00100000000000", @ANYRES32=0x0, @ANYRES32=0x0, @ANYBLOB='\b'], 0xb8}}, 0x0) (async) syz_emit_ethernet(0x4a, &(0x7f0000000280)={@local, @remote, @void, {@ipv6={0x86dd, @tcp={0x0, 0x6, "8a37f2", 0x14, 0x2c, 0x0, @remote, @local, {[], {{0x600, 0x3, 0x41424344, 0x41424344, 0x0, 0x0, 0x5}}}}}}}, 0x0) (async) 332.193353ms ago: executing program 2 (id=6343): r0 = socket(0xa, 0x3, 0x3a) setsockopt$inet6_int(r0, 0x29, 0x7, &(0x7f0000000040)=0x20f, 0x4) (async) setsockopt$MRT6_ADD_MIF(r0, 0x29, 0xca, &(0x7f0000000140)={0x0, 0x1}, 0xc) 193.806041ms ago: executing program 4 (id=6344): r0 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f00000018c0)={'team0\x00', 0x0}) sendmsg$nl_route(r0, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000022780)=@newlink={0x40, 0x10, 0x49920d862a92153b, 0xc, 0x0, {0x0, 0x0, 0x0, r1, 0x90c1, 0x5c81}, [@IFLA_LINKINFO={0x18, 0x12, 0x0, 0x1, @gtp={{0x8}, {0xc, 0x2, 0x0, 0x1, [@IFLA_GTP_FD1={0x8}]}}}, @IFLA_MASTER={0x8, 0xa, r1}]}, 0x40}}, 0x48010) ioctl$BTRFS_IOC_QGROUP_LIMIT(r0, 0x8030942b, &(0x7f0000000040)={0x0, {0xa, 0x80007a, 0x1, 0x3b5, 0xcd}}) 191.708233ms ago: executing program 2 (id=6345): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r0, &(0x7f000000c2c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000340)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a28000000000a0101000000005e1affd5020000000900010073797a300000000008000240000000032c000000030a01030000e6ff00000000020000000900010073797a300000001f0900030073797a320000000014000000110001"], 0x7c}}, 0x0) sendmsg$NFT_MSG_GETOBJ(r0, &(0x7f0000000300)={&(0x7f0000000000), 0xc, &(0x7f0000000280)={&(0x7f0000000440)={0x130, 0x13, 0xa, 0x201, 0x0, 0x0, {0x2}, [@NFTA_OBJ_TABLE={0x9, 0x1, 'syz0\x00'}, @NFTA_OBJ_TABLE={0x9, 0x1, 'syz0\x00'}, @NFTA_OBJ_NAME={0x9, 0x2, 'syz2\x00'}, @NFTA_OBJ_HANDLE={0xc, 0x6, 0x1, 0x0, 0x2}, @NFTA_OBJ_TABLE={0x9, 0x1, 'syz1\x00'}, @NFTA_OBJ_TABLE={0x9, 0x1, 'syz0\x00'}, @NFTA_OBJ_USERDATA={0xd2, 0x8, "a32e5fde9d3599ee2734469646898d56660928b1338e73ca06c0010e127714f1a5b865a2200c854195e66c6c9b0de451fd3bb2dddbe25b4bce84fe676fcd96bddf38900fde36cae7a70cf60f12bf201f214422adc9797333fe65268bc0d6e3a70dd238635371bbee4c742189e33da1638f77b5f3e122f809cdf236aa96de79f10f0ff4b92abbc172aa1a489b99ffd0d024bfbb11bb27062725e739582e55bc6d5e05286d3ced24d5e0ab088d589a23383220915ca53aacfa0b04b2d55510e98127ac5012d2d5db84d4521c3f867a"}]}, 0x130}, 0x1, 0x0, 0x0, 0x14}, 0x4000000) sendmsg$NFT_BATCH(r0, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000003c0)={{0x14}, [@NFT_MSG_NEWRULE={0x2c, 0x6, 0xa, 0x401, 0x0, 0x0, {0x2}, [@NFTA_RULE_TABLE={0x9, 0x1, 'syz0\x00'}, @NFTA_RULE_CHAIN={0x9, 0x2, 'syz2\x00'}]}], {0x14}}, 0x54}}, 0x0) sendmsg$NFT_BATCH(r0, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000240)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a2c000000050a09e1ffffff000000001d020000000900010073797a30000000000900030073797a32"], 0x54}}, 0x0) sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f000000c2c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f00000008c0)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a28000000000a0101000000005e1affd5020000000900010073797a300000000008000240000000032c000000030a01030000e6ff00000000020000000900010073797a30000000000900030073797a320000000014000000110001"], 0x7c}}, 0x0) socket$inet_udplite(0x2, 0x2, 0x88) sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000080)={{0x14}, [@NFT_MSG_NEWRULE={0x68, 0x6, 0xa, 0x40b, 0x0, 0x0, {0x2}, [@NFTA_RULE_EXPRESSIONS={0x3c, 0x4, 0x0, 0x1, [{0x1c, 0x1, 0x0, 0x1, @tproxy={{0xb}, @val={0xc, 0x2, 0x0, 0x1, [@NFTA_TPROXY_FAMILY={0x8, 0x1, 0x1, 0x0, 0x1}]}}}, {0x10, 0x1, 0x0, 0x1, @masq={{0x9}, @void}}, {0xc, 0x1, 0x0, 0x1, @nat={{0x8}, @void}}]}, @NFTA_RULE_TABLE={0x9, 0x1, 'syz0\x00'}, @NFTA_RULE_CHAIN={0x9, 0x2, 'syz2\x00'}]}], {0x14, 0x11, 0x1, 0x0, 0x0, {0x7}}}, 0xfffffffffffffec5}}, 0x0) 188.538667ms ago: executing program 5 (id=6346): r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r1 = socket$caif_stream(0x25, 0x1, 0x0) setsockopt$SO_BINDTODEVICE(r1, 0x1, 0x19, &(0x7f0000005980)='ip6gre0\x00', 0x10) connect$caif(r1, &(0x7f00000059c0)=@dgm={0x25, 0x5, 0x9d}, 0x18) r2 = syz_genetlink_get_family_id$netlbl_unlabel(&(0x7f00000002c0), r0) sendmsg$NLBL_UNLABEL_C_STATICADD(r0, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000040)={0x4c, r2, 0x201, 0x0, 0x0, {0x3, 0x0, 0x26}, [@NLBL_UNLABEL_A_IPV4ADDR={0x5, 0x4, @initdev={0xac, 0x35, 0x0, 0x0}}, @NLBL_UNLABEL_A_IFACE={0x14, 0x6, 'sit0\x00'}, @NLBL_UNLABEL_A_IPV6ADDR={0x14, 0x7, @ipv4={'\x00', '\xff\xff', @dev}}, @NLBL_UNLABEL_A_IPV4MASK={0x8, 0x5, @dev}]}, 0x4c}, 0x8, 0x3000000000002}, 0x0) r3 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_CREATE(r3, &(0x7f0000000080)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000940)=ANY=[@ANYBLOB="58000000020601080000000000000000030000000900020073797a31000000000500010007000000050005000a0000000c000780080006400000040111000300686173683a6e65742c6e657400000000050004"], 0x58}, 0x1, 0x0, 0x0, 0x20008000}, 0x0) r4 = socket$packet(0x11, 0x2, 0x300) ioctl$sock_TIOCOUTQ(r4, 0x5411, &(0x7f00000002c0)) sendmsg$IPCTNL_MSG_EXP_GET_STATS_CPU(r3, &(0x7f0000000140)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x10}, 0xc, &(0x7f0000000100)={&(0x7f0000000040)={0x14, 0x3, 0x2, 0x3, 0x0, 0x0, {0xa, 0x0, 0x3}, [""]}, 0x14}, 0x1, 0x0, 0x0, 0x4c080}, 0x24048840) 153.662521ms ago: executing program 6 (id=6347): r0 = bpf$PROG_LOAD(0x5, &(0x7f0000000000)={0x1, 0x8, 0x0, 0x0, 0x4, 0x0, 0x0, 0x0, 0x2}, 0x94) socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(0xffffffffffffffff, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000180)=ANY=[@ANYRESHEX=r0, @ANYRESDEC=r0, @ANYBLOB="a032dd2b4b74dc20400003006e657464657673696d30002800babc00005c0016805800018054000c8000000000000000"], 0x98}, 0x1, 0x0, 0x0, 0x2404e854}, 0x20004000) 57.295881ms ago: executing program 4 (id=6348): r0 = syz_init_net_socket$bt_sco(0x1f, 0x5, 0x2) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000180)={0xffffffffffffffff, 0xffffffffffffffff}) socket$inet_mptcp(0x2, 0x1, 0x106) r2 = syz_init_net_socket$ax25(0x3, 0x2, 0x0) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000000)={'batadv_slave_0\x00'}) r3 = syz_init_net_socket$bt_sco(0x1f, 0x5, 0x2) setsockopt$ax25_SO_BINDTODEVICE(0xffffffffffffffff, 0x101, 0x19, &(0x7f0000000000)=@bpq0, 0x10) ioctl$sock_netdev_private(r3, 0x8914, &(0x7f0000000000)) setsockopt$ax25_SO_BINDTODEVICE(r2, 0x101, 0x19, &(0x7f0000000240)=@bpq0, 0x10) ioctl$sock_netrom_SIOCADDRT(0xffffffffffffffff, 0x890b, &(0x7f0000000000)={0x0, @remote={0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0x1}, @bpq0, 0x1, 'syz1\x00', @default, 0x1, 0x0, [@null, @default, @netrom={0xbb, 0xbb, 0xbb, 0xbb, 0xbb, 0x0, 0x0}, @rose={0xbb, 0xbb, 0xbb, 0x1, 0x0}, @bcast, @remote={0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0x3}, @remote={0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0x2}, @default]}) setsockopt$ax25_SO_BINDTODEVICE(0xffffffffffffffff, 0x101, 0x19, &(0x7f0000000000)=@bpq0, 0xfffffffffffffe1d) ioctl$sock_netdev_private(r0, 0x8914, &(0x7f0000000000)) 1.825142ms ago: executing program 2 (id=6349): r0 = socket$nl_xfrm(0x10, 0x3, 0x6) bind$netlink(r0, &(0x7f00000000c0)={0x10, 0x0, 0x0, 0x400}, 0xc) setsockopt$netlink_NETLINK_ADD_MEMBERSHIP(r0, 0x10e, 0x1, &(0x7f0000000000)=0x2005, 0x4) r1 = socket(0x10, 0x3, 0x0) r2 = socket$inet6_udp(0xa, 0x2, 0x0) r3 = socket$pppl2tp(0x18, 0x1, 0x1) r4 = socket$inet6_udp(0xa, 0x2, 0x0) connect$pppl2tp(r3, &(0x7f0000000740)=@pppol2tpv3={0x18, 0x1, {0x3, r4, {0x2, 0x4e24, @broadcast}, 0x2, 0x0, 0x4}}, 0x2e) r5 = syz_genetlink_get_family_id$l2tp(&(0x7f0000000040), 0xffffffffffffffff) r6 = socket$nl_route(0x10, 0x3, 0x0) setsockopt$netlink_NETLINK_TX_RING(r6, 0x10e, 0xc, &(0x7f0000000040)={0x80, 0x3, 0x0, 0xfffffffd}, 0x10) sendmsg$nl_route(r6, &(0x7f00000003c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000180)=@ipv4_newroute={0x1c, 0x1a, 0x1, 0x0, 0x0, {0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1}}, 0x1c}}, 0x0) r7 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$L2TP_CMD_SESSION_DELETE(r7, &(0x7f0000000640)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000080)={0x34, r5, 0x1, 0x70bd26, 0x4, {0x5}, [@L2TP_ATTR_CONN_ID={0x8, 0x9, 0x2}, @L2TP_ATTR_PEER_SESSION_ID={0x8, 0xc, 0xaa5}, @L2TP_ATTR_SESSION_ID={0x8}, @L2TP_ATTR_PW_TYPE={0x6, 0x1, 0x7}]}, 0x34}}, 0x20) r8 = socket$pppl2tp(0x18, 0x1, 0x1) connect$pppl2tp(r8, &(0x7f0000000100)=@pppol2tpv3={0x18, 0x1, {0x0, r2, {0x2, 0x0, @loopback}, 0x4}}, 0x2e) sendmsg$nl_route(r1, &(0x7f0000000100)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000080)=@ipv4_getrule={0x1c, 0x22, 0x201}, 0x1c}}, 0x0) 0s ago: executing program 5 (id=6350): r0 = socket$nl_xfrm(0x10, 0x3, 0x6) setsockopt$netlink_NETLINK_ADD_MEMBERSHIP(r0, 0x10e, 0x1, &(0x7f0000000400)=0x1, 0x4) r1 = socket$inet6(0xa, 0x3, 0x1) setsockopt$inet6_IPV6_XFRM_POLICY(r1, 0x29, 0x23, &(0x7f0000000140)={{{@in6=@empty, @in=@multicast2, 0x0, 0x20, 0x0, 0x0, 0xa}, {0x1, 0x20000000, 0x20005, 0x8, 0x3, 0xfffffffffffffffa, 0x0, 0x5}, {0x2, 0x7fffffffffffffff, 0x1}, 0xc24, 0x6e6bb1, 0x1, 0x0, 0x0, 0x3}, {{@in=@multicast2, 0x4d3, 0x32}, 0x2, @in6=@initdev={0xfe, 0x88, '\x00', 0x0, 0x0}, 0x0, 0x4, 0x0, 0x0, 0x0, 0x101}}, 0xe8) connect$inet6(r1, &(0x7f0000000240)={0xa, 0x12, 0x0, @initdev={0xfe, 0x88, '\x00', 0x1, 0x0}}, 0x1c) r2 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r2, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000200)=ANY=[@ANYBLOB="24000000200001032abd7000ffdbdf250a0000000000000800000000080018004e214e24"], 0x24}, 0x1, 0x0, 0x0, 0x240080d4}, 0x0) r3 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r3, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000540)=@newtaction={0x9e, 0x30, 0x871a15abc695fb3d, 0x0, 0x0, {}, [{0x6c, 0x1, [@m_tunnel_key={0x68, 0x1, 0x0, 0x0, {{0xf}, {0x38, 0x2, 0x0, 0x1, [@TCA_TUNNEL_KEY_PARMS={0x1c, 0x2, {{}, 0x1}}, @TCA_TUNNEL_KEY_NO_CSUM={0x5, 0xe}, @TCA_TUNNEL_KEY_ENC_IPV4_SRC={0x8, 0x3, @empty}, @TCA_TUNNEL_KEY_ENC_IPV4_DST={0x8, 0x4, @private=0xa010102}]}, {0x4}, {0xc}, {0xc}}}]}]}, 0x80}}, 0x10) r4 = socket$nl_route(0x10, 0x3, 0x0) r5 = socket$kcm(0xa, 0x2, 0x88) sendmsg$inet(r5, &(0x7f0000000000)={&(0x7f0000000080)={0x2, 0x8000, @multicast1}, 0x10, 0x0, 0x0, &(0x7f0000000040)=[@ip_pktinfo={{0x1c, 0x0, 0x34, {0x0, @local, @local}}}], 0x20}, 0x0) sendmsg$nl_route(r4, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000200)=ANY=[@ANYBLOB="2800000021000100"], 0x28}}, 0x0) r6 = syz_init_net_socket$bt_l2cap(0x1f, 0x3, 0x3) getsockopt$bt_BT_DEFER_SETUP(r6, 0x112, 0x4, 0x0, &(0x7f0000000040)) r7 = socket$inet_smc(0x2b, 0x1, 0x0) setsockopt$ARPT_SO_SET_ADD_COUNTERS(r7, 0x0, 0x61, &(0x7f0000000080)={'filter\x00', 0x4}, 0x68) kernel console output (not intermixed with test programs): 9 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 480.178127][T21773] RSP: 002b:00007ff4d8ff6038 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 480.178145][T21773] RAX: ffffffffffffffda RBX: 00007ff4dafe6090 RCX: 00007ff4dad8f749 [ 480.178157][T21773] RDX: 0000000000000000 RSI: 0000200000000000 RDI: 0000000000000003 [ 480.178167][T21773] RBP: 00007ff4d8ff6090 R08: 0000000000000000 R09: 0000000000000000 [ 480.178177][T21773] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 480.178187][T21773] R13: 00007ff4dafe6128 R14: 00007ff4dafe6090 R15: 00007ffc2ef0cd58 [ 480.178216][T21773] [ 480.837286][T21773] A link change request failed with some changes committed already. Interface caif0 may have been left with an inconsistent configuration, please check. [ 480.918012][T21791] siw: device registration error -23 [ 481.145874][T21802] __nla_validate_parse: 2 callbacks suppressed [ 481.145893][T21802] netlink: 24 bytes leftover after parsing attributes in process `syz.2.4711'. [ 481.375427][T21820] netlink: 8 bytes leftover after parsing attributes in process `syz.2.4716'. [ 481.679908][T21835] netlink: 'syz.4.4720': attribute type 83 has an invalid length. [ 481.770842][T21840] A link change request failed with some changes committed already. Interface vet0_virt_wifi may have been left with an inconsistent configuration, please check. [ 481.793882][T21844] netlink: 4 bytes leftover after parsing attributes in process `syz.4.4724'. [ 482.097810][T21865] netlink: 'syz.6.4729': attribute type 16 has an invalid length. [ 482.126284][T21865] netlink: 'syz.6.4729': attribute type 17 has an invalid length. [ 482.267862][T21880] netlink: 8 bytes leftover after parsing attributes in process `syz.5.4735'. [ 482.280938][T21865] 8021q: adding VLAN 0 to HW filter on device bond0 [ 482.294040][T21865] 8021q: adding VLAN 0 to HW filter on device team0 [ 482.308134][T21865] A link change request failed with some changes committed already. Interface caif0 may have been left with an inconsistent configuration, please check. [ 482.334143][T21877] bridge6: entered promiscuous mode [ 482.340256][T21877] bridge6: entered allmulticast mode [ 482.607249][T21900] netlink: 24 bytes leftover after parsing attributes in process `syz.5.4742'. [ 482.608164][T21902] netlink: 'syz.2.4741': attribute type 2 has an invalid length. [ 482.648284][T21903] netlink: 'syz.2.4741': attribute type 2 has an invalid length. [ 482.669529][T21904] netlink: 224 bytes leftover after parsing attributes in process `syz.2.4741'. [ 482.692397][T21902] netlink: 224 bytes leftover after parsing attributes in process `syz.2.4741'. [ 482.715594][T21906] netlink: 8 bytes leftover after parsing attributes in process `syz.6.4743'. [ 482.726103][T21896] netlink: 8 bytes leftover after parsing attributes in process `syz.4.4740'. [ 483.086110][ T5831] Bluetooth: hci1: command 0x0406 tx timeout [ 483.133625][T21930] netlink: 20 bytes leftover after parsing attributes in process `syz.0.4749'. [ 483.167393][ T5840] Bluetooth: hci3: command 0x0405 tx timeout [ 483.292970][T21945] tipc: Enabled bearer , priority 0 [ 483.337336][T21945] syzkaller0: entered promiscuous mode [ 483.353167][T21945] syzkaller0: entered allmulticast mode [ 483.395215][T21944] tipc: Resetting bearer [ 483.450679][T21944] tipc: Disabling bearer [ 483.626328][T21960] validate_nla: 4 callbacks suppressed [ 483.626346][T21960] netlink: 'syz.4.4761': attribute type 1 has an invalid length. [ 483.660014][T21960] netlink: 'syz.4.4761': attribute type 1 has an invalid length. [ 483.679188][T21961] netlink: 'syz.5.4759': attribute type 11 has an invalid length. [ 483.799411][T21968] tipc: Enabled bearer , priority 0 [ 483.838515][T21968] syzkaller0: entered promiscuous mode [ 483.844039][T21968] syzkaller0: entered allmulticast mode [ 483.906535][T21974] : entered promiscuous mode [ 483.932931][T21968] sch_tbf: burst 127 is lower than device syzkaller0 mtu (1514) ! [ 484.098502][T21968] tipc: Resetting bearer [ 484.149149][T21967] tipc: Resetting bearer [ 484.188831][T21967] tipc: Disabling bearer [ 484.199065][T21992] x_tables: duplicate underflow at hook 3 [ 484.387929][T21994] A link change request failed with some changes committed already. Interface vlan0 may have been left with an inconsistent configuration, please check. [ 484.407108][T21996] IPVS: Unknown mcast interface: syzkaller0 [ 484.456220][T22008] IPVS: sync thread started: state = BACKUP, mcast_ifn = vcan0, syncid = 0, id = 0 [ 485.322661][T22073] bond3: invalid ARP target 0.0.0.0 specified for addition [ 485.330769][T22073] bond3: option arp_ip_target: invalid value (0) [ 485.347320][T22073] bond3 (unregistering): Released all slaves [ 485.596528][T22089] netlink: 'syz.6.4795': attribute type 32 has an invalid length. [ 485.626711][T22089] bond3: option coupled_control: invalid value (52) [ 485.635725][T22089] bond3 (unregistering): Released all slaves [ 485.754804][T22097] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check. [ 485.849359][T22107] netlink: 'syz.4.4800': attribute type 1 has an invalid length. [ 485.882585][T22108] bond5 (unregistering): Released all slaves [ 485.998810][T22116] syzkaller0: entered promiscuous mode [ 486.004320][T22116] syzkaller0: entered allmulticast mode [ 486.160401][T22124] tipc: Trying to set illegal importance in message [ 486.304756][T22128] netlink: 'syz.4.4808': attribute type 2 has an invalid length. [ 486.313424][T22128] __nla_validate_parse: 44 callbacks suppressed [ 486.313443][T22128] netlink: 244 bytes leftover after parsing attributes in process `syz.4.4808'. [ 486.343079][T22136] netlink: 14 bytes leftover after parsing attributes in process `syz.2.4810'. [ 486.530912][T22146] netlink: 4 bytes leftover after parsing attributes in process `syz.4.4812'. [ 486.557741][T22149] netlink: 'syz.6.4811': attribute type 16 has an invalid length. [ 486.572803][T22149] netlink: 'syz.6.4811': attribute type 17 has an invalid length. [ 486.593023][T22149] netlink: 'syz.6.4811': attribute type 27 has an invalid length. [ 486.659022][T22153] x_tables: ip6_tables: icmp6 match: only valid for protocol 58 [ 486.738004][T22136] bond0 (unregistering): Released all slaves [ 487.019250][T22165] raw_sendmsg: syz.6.4818 forgot to set AF_INET. Fix it! [ 487.038102][T22161] syzkaller0: entered promiscuous mode [ 487.043610][T22161] syzkaller0: entered allmulticast mode [ 487.177050][T22175] netlink: 16 bytes leftover after parsing attributes in process `syz.0.4821'. [ 487.206739][T22178] netlink: 'syz.6.4822': attribute type 6 has an invalid length. [ 487.479221][T22187] : renamed from bridge_slave_0 [ 487.570034][T22195] geneve0: entered promiscuous mode [ 487.603536][ T50] netdevsim netdevsim6 netdevsim1: unset [1, 0] type 2 family 0 port 6081 - 0 [ 487.632259][ T50] netdevsim netdevsim6 netdevsim2: unset [1, 0] type 2 family 0 port 6081 - 0 [ 487.651761][ T50] netdevsim netdevsim6 netdevsim3: unset [1, 0] type 2 family 0 port 6081 - 0 [ 488.287243][T22214] netlink: 8 bytes leftover after parsing attributes in process `syz.0.4830'. [ 488.363549][T22216] syzkaller0: entered promiscuous mode [ 488.376909][T22216] syzkaller0: entered allmulticast mode [ 488.549623][T22224] netlink: 44 bytes leftover after parsing attributes in process `syz.4.4837'. [ 489.011483][T22245] netlink: 20 bytes leftover after parsing attributes in process `syz.6.4844'. [ 489.162247][T22250] bond0: Unable to set peer notification delay as MII monitoring is disabled [ 489.227143][T22250] bond0 (unregistering): Released all slaves [ 489.660833][T22284] netlink: 'syz.5.4855': attribute type 16 has an invalid length. [ 489.673770][T22284] netlink: 'syz.5.4855': attribute type 17 has an invalid length. [ 489.732024][T22284] A link change request failed with some changes committed already. Interface caif0 may have been left with an inconsistent configuration, please check. [ 489.771618][T22287] netlink: 4 bytes leftover after parsing attributes in process `syz.4.4858'. [ 489.800745][T22290] A link change request failed with some changes committed already. Interface gre0 may have been left with an inconsistent configuration, please check. [ 489.833541][T22293] A link change request failed with some changes committed already. Interface gre0 may have been left with an inconsistent configuration, please check. [ 490.088878][T22311] netlink: 408 bytes leftover after parsing attributes in process `syz.2.4865'. [ 490.238050][T22323] netlink: 'syz.6.4870': attribute type 62 has an invalid length. [ 490.305441][T22325] netlink: 'syz.2.4871': attribute type 16 has an invalid length. [ 490.325878][T22325] netlink: 'syz.2.4871': attribute type 17 has an invalid length. [ 490.381706][T22325] sit0: left promiscuous mode [ 490.388301][T22325] sit0: left allmulticast mode [ 490.410138][T22325] 8021q: adding VLAN 0 to HW filter on device team0 [ 490.429396][T22325] batman_adv: batadv0: Interface activated: dummy0 [ 490.436406][T22325] batadv0: mtu less than device minimum [ 490.443951][T22325] batman_adv: batadv0: Forced to purge local tt entries to fit new maximum fragment MTU (-320) [ 490.453925][T22331] netlink: 64 bytes leftover after parsing attributes in process `syz.0.4874'. [ 490.456234][T22325] batman_adv: batadv0: Forced to purge local tt entries to fit new maximum fragment MTU (-320) [ 490.476037][T22325] batman_adv: batadv0: Forced to purge local tt entries to fit new maximum fragment MTU (-320) [ 490.487921][T22325] batman_adv: batadv0: Forced to purge local tt entries to fit new maximum fragment MTU (-320) [ 490.499825][T22325] batman_adv: batadv0: Forced to purge local tt entries to fit new maximum fragment MTU (-320) [ 490.511588][T22325] batman_adv: batadv0: Forced to purge local tt entries to fit new maximum fragment MTU (-320) [ 491.771392][T22414] bridge0: port 1(bridge_slave_0) entered disabled state [ 491.775634][T22419] netlink: 'syz.5.4899': attribute type 1 has an invalid length. [ 491.953673][T22432] netlink: 'syz.5.4902': attribute type 8 has an invalid length. [ 492.176325][T22444] __nla_validate_parse: 1 callbacks suppressed [ 492.176342][T22444] netlink: 212376 bytes leftover after parsing attributes in process `syz.4.4906'. [ 492.218864][T22442] netlink: 212376 bytes leftover after parsing attributes in process `syz.4.4906'. [ 492.262511][T22449] netlink: 4 bytes leftover after parsing attributes in process `syz.0.4908'. [ 492.362903][T22457] netlink: 8 bytes leftover after parsing attributes in process `syz.4.4910'. [ 492.375299][T22456] netlink: 8 bytes leftover after parsing attributes in process `syz.4.4910'. [ 492.462683][T22456] netlink: 100 bytes leftover after parsing attributes in process `syz.4.4910'. [ 492.511554][T22466] syzkaller1: entered promiscuous mode [ 492.521559][T22466] syzkaller1: entered allmulticast mode [ 492.639241][T22470] netlink: 4 bytes leftover after parsing attributes in process `syz.0.4914'. [ 492.763295][T22484] netlink: 12 bytes leftover after parsing attributes in process `syz.5.4918'. [ 492.905827][T22488] netlink: 12 bytes leftover after parsing attributes in process `syz.5.4918'. [ 492.988522][T22498] netlink: 4 bytes leftover after parsing attributes in process `syz.0.4923'. [ 493.276452][T22515] macvtap1: entered allmulticast mode [ 493.291447][T22515] veth0_macvtap: entered allmulticast mode [ 493.311010][T22518] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 493.314230][T22514] netlink: 'syz.2.4929': attribute type 4 has an invalid length. [ 493.329696][ T5831] Bluetooth: hci2: command 0x0406 tx timeout [ 493.702536][T22546] netlink: 'syz.4.4939': attribute type 2 has an invalid length. [ 493.741950][T22546] syzkaller1: tun_chr_ioctl cmd 1074025677 [ 493.749567][T22546] syzkaller1: Refused to change device type [ 494.248163][T22584] sctp: [Deprecated]: syz.0.4954 (pid 22584) Use of struct sctp_assoc_value in delayed_ack socket option. [ 494.248163][T22584] Use struct sctp_sack_info instead [ 494.265202][T22583] sctp: [Deprecated]: syz.0.4954 (pid 22583) Use of struct sctp_assoc_value in delayed_ack socket option. [ 494.265202][T22583] Use struct sctp_sack_info instead [ 494.541861][T22605] xt_hashlimit: overflow, rate too high: 0 [ 494.759503][T22613] wlan0 speed is unknown, defaulting to 1000 [ 494.911078][T22621] vlan0: entered promiscuous mode [ 494.925834][T22621] vlan0: entered allmulticast mode [ 494.931452][T22621] hsr_slave_1: entered allmulticast mode [ 495.283188][T22613] lo speed is unknown, defaulting to 1000 [ 495.367847][T22644] input: Bluetooth HID Boot Protocol Device as /devices/virtual/bluetooth/hci3/hci3:200/input5 [ 495.403289][T22648] netlink: 'syz.0.4973': attribute type 1 has an invalid length. [ 495.585984][T22653] netlink: 'syz.5.4974': attribute type 12 has an invalid length. [ 495.612497][T22653] netlink: 'syz.5.4974': attribute type 13 has an invalid length. [ 495.637282][T22653] veth0_macvtap: left promiscuous mode [ 495.646533][T22653] macvtap0: entered allmulticast mode [ 495.696134][T22653] macvtap0: refused to change device tx_queue_len [ 496.471683][T22696] bond6: invalid ARP target 0.0.0.0 specified for addition [ 496.479472][T22696] bond6: option arp_ip_target: invalid value (0) [ 496.488956][T22696] bond6 (unregistering): Released all slaves [ 496.788064][T22710] netlink: 'syz.5.4988': attribute type 4 has an invalid length. [ 496.856731][T22708] netlink: 'syz.5.4988': attribute type 4 has an invalid length. [ 496.993095][T22724] x_tables: ip_tables: rpfilter match: used from hooks OUTPUT, but only valid from PREROUTING [ 497.009399][T22724] netlink: 'syz.0.4993': attribute type 10 has an invalid length. [ 497.429371][T22710] bond_slave_0: left promiscuous mode [ 497.437123][T22710] bond_slave_1: left promiscuous mode [ 497.442922][T22710] netdevsim netdevsim5 netdevsim0: left promiscuous mode [ 498.229896][T22724] veth1_macvtap: left promiscuous mode [ 498.281755][T22725] team0 (unregistering): Port device team_slave_0 removed [ 498.309287][T22725] team0 (unregistering): Port device team_slave_1 removed [ 498.362912][T22725] team0 (unregistering): Port device veth0_virt_wifi removed [ 498.415011][T16060] netdevsim netdevsim5 netdevsim0: unset [1, 0] type 2 family 0 port 6081 - 0 [ 498.433955][T16060] netdevsim netdevsim5 netdevsim1: unset [1, 0] type 2 family 0 port 6081 - 0 [ 498.460494][T16060] netdevsim netdevsim5 netdevsim2: unset [1, 0] type 2 family 0 port 6081 - 0 [ 498.513127][T16060] netdevsim netdevsim5 netdevsim3: unset [1, 0] type 2 family 0 port 6081 - 0 [ 498.682533][T22744] __nla_validate_parse: 19 callbacks suppressed [ 498.682551][T22744] netlink: 8 bytes leftover after parsing attributes in process `syz.6.4998'. [ 498.966868][T22757] netlink: 12 bytes leftover after parsing attributes in process `syz.4.5002'. [ 498.985723][T22733] vlan0: entered promiscuous mode [ 499.001322][T22733] vlan0: entered allmulticast mode [ 499.015050][T22733] bond1: entered allmulticast mode [ 499.049888][T22733] netlink: 8 bytes leftover after parsing attributes in process `syz.0.4996'. [ 499.174010][T22770] netlink: 8 bytes leftover after parsing attributes in process `syz.4.5006'. [ 499.197425][T22770] netlink: 12 bytes leftover after parsing attributes in process `syz.4.5006'. [ 499.210664][T22770] netlink: 8 bytes leftover after parsing attributes in process `syz.4.5006'. [ 499.224114][T22770] netlink: 12 bytes leftover after parsing attributes in process `syz.4.5006'. [ 499.248622][T22772] syzkaller0: entered promiscuous mode [ 499.254138][T22772] syzkaller0: entered allmulticast mode [ 499.380418][T22778] tipc: Enabling of bearer rejected, failed to enable media [ 499.393637][T22778] netlink: 4 bytes leftover after parsing attributes in process `syz.4.5009'. [ 499.505226][T22781] veth0_to_bridge: entered promiscuous mode [ 499.512552][T22781] netlink: 'syz.4.5009': attribute type 5 has an invalid length. [ 499.538668][T22777] veth0_to_bridge: left promiscuous mode [ 499.657558][T22789] netlink: 11 bytes leftover after parsing attributes in process `syz.2.5015'. [ 499.675050][T22789] netlink: 11 bytes leftover after parsing attributes in process `syz.2.5015'. [ 499.919969][T22806] net_ratelimit: 27 callbacks suppressed [ 499.919988][T22806] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 500.168232][T22821] netlink: 'syz.6.5027': attribute type 1 has an invalid length. [ 500.232682][T22821] 8021q: adding VLAN 0 to HW filter on device bond3 [ 500.250085][T22829] gre2: entered promiscuous mode [ 500.255769][T22829] gre2: entered allmulticast mode [ 500.276678][T22825] bond3: (slave geneve2): making interface the new active one [ 500.287445][T22825] bond3: (slave geneve2): Enslaving as an active interface with an up link [ 500.300089][T22827] x_tables: duplicate underflow at hook 2 [ 500.303450][T10435] netdevsim netdevsim6 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 500.318170][T10435] netdevsim netdevsim6 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 500.328435][T10435] netdevsim netdevsim6 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 500.490814][T22840] syzkaller0: entered promiscuous mode [ 500.497946][T22840] syzkaller0: entered allmulticast mode [ 500.522974][T22840] netlink: 'syz.6.5034': attribute type 1 has an invalid length. [ 500.600729][T22844] sch_tbf: burst 127 is lower than device syzkaller0 mtu (1514) ! [ 501.008211][T22874] bridge0: entered promiscuous mode [ 501.013527][T22874] bridge0: entered allmulticast mode [ 501.481131][T22899] netlink: 'syz.0.5050': attribute type 4 has an invalid length. [ 501.886343][T22925] xt_CT: You must specify a L4 protocol and not use inversions on it [ 502.216121][T22946] syzkaller0: entered promiscuous mode [ 502.252980][T22946] syzkaller0: entered allmulticast mode [ 503.137778][T22992] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 503.199093][T22996] netlink: 'syz.5.5076': attribute type 23 has an invalid length. [ 504.585371][T22997] tipc: Enabled bearer , priority 0 [ 504.595422][T22998] syzkaller0: entered promiscuous mode [ 504.603288][T22998] syzkaller0: entered allmulticast mode [ 504.727619][T23001] tipc: Resetting bearer [ 504.845740][T23018] netlink: 'syz.5.5079': attribute type 2 has an invalid length. [ 504.853518][T23018] __nla_validate_parse: 12 callbacks suppressed [ 504.853536][T23018] netlink: 8 bytes leftover after parsing attributes in process `syz.5.5079'. [ 504.886351][T23001] tipc: Resetting bearer [ 504.918912][T23022] netlink: 4 bytes leftover after parsing attributes in process `syz.6.5081'. [ 504.942118][T23001] tipc: Disabling bearer [ 504.958044][T23023] xt_CT: You must specify a L4 protocol and not use inversions on it [ 505.109347][T23028] netlink: 4 bytes leftover after parsing attributes in process `syz.2.5084'. [ 505.319376][T23033] netlink: 'syz.6.5085': attribute type 1 has an invalid length. [ 505.395161][T23043] netlink: 'syz.4.5087': attribute type 6 has an invalid length. [ 505.416638][T23044] netlink: 'syz.4.5087': attribute type 6 has an invalid length. [ 505.677901][T23061] veth0: entered promiscuous mode [ 505.705481][T23060] veth0: left promiscuous mode [ 505.968050][T23078] nbd: nbd5 already in use [ 505.973036][T23078] block nbd5: NBD_DISCONNECT [ 505.977902][T23078] block nbd5: Send disconnect failed -32 [ 505.988863][T23078] block nbd5: shutting down sockets [ 506.303733][T23097] netlink: 'syz.5.5102': attribute type 1 has an invalid length. [ 506.420278][T23106] IPVS: Error connecting to the multicast addr [ 506.466577][T23109] netlink: 8 bytes leftover after parsing attributes in process `syz.2.5106'. [ 506.679498][T23123] netlink: 16 bytes leftover after parsing attributes in process `syz.5.5109'. [ 506.707322][T23122] netlink: 'syz.4.5112': attribute type 9 has an invalid length. [ 506.717565][T23122] netlink: 8 bytes leftover after parsing attributes in process `syz.4.5112'. [ 506.727310][T23122] tc_dump_action: action bad kind [ 506.795148][T23126] netlink: 8 bytes leftover after parsing attributes in process `syz.6.5113'. [ 506.806430][T23126] netlink: 'syz.6.5113': attribute type 9 has an invalid length. [ 506.978040][T23141] netlink: 'syz.2.5118': attribute type 29 has an invalid length. [ 507.009056][T23143] syzkaller1: entered promiscuous mode [ 507.035547][T23143] syzkaller1: entered allmulticast mode [ 507.064049][T23150] netlink: 'syz.2.5118': attribute type 29 has an invalid length. [ 507.749291][T23134] netlink: 4 bytes leftover after parsing attributes in process `syz.0.5116'. [ 507.921241][T23164] netlink: 8 bytes leftover after parsing attributes in process `syz.2.5122'. [ 507.947012][T23164] netlink: 8 bytes leftover after parsing attributes in process `syz.2.5122'. [ 508.130451][T23168] syzkaller1: entered allmulticast mode [ 508.254712][T23178] wlan0 speed is unknown, defaulting to 1000 [ 508.470026][T23178] lo speed is unknown, defaulting to 1000 [ 509.893400][T23261] bond0: down delay (33554432) is not a multiple of miimon (640), value rounded to 33553920 ms [ 509.926528][T23261] bond0: option ad_actor_sys_prio: mode dependency failed, not supported in mode balance-rr(0) [ 509.968047][T23261] bond0 (unregistering): Released all slaves [ 510.202807][T23291] xt_hashlimit: size too large, truncated to 1048576 [ 510.422822][T23297] xt_addrtype: ipv6 BLACKHOLE matching not supported [ 510.455751][T23297] netlink: 'syz.6.5164': attribute type 1 has an invalid length. [ 510.484333][T23297] __nla_validate_parse: 6 callbacks suppressed [ 510.484352][T23297] netlink: 16 bytes leftover after parsing attributes in process `syz.6.5164'. [ 510.607960][T23258] Bluetooth: hci1: Opcode 0x0c1a failed: -4 [ 510.614312][T23258] Bluetooth: hci1: Error when powering off device on rfkill (-4) [ 510.668971][T23258] Bluetooth: hci5: Opcode 0x0c1a failed: -4 [ 510.685223][T23258] Bluetooth: hci5: Error when powering off device on rfkill (-4) [ 510.698855][T23258] Bluetooth: hci2: Opcode 0x0c1a failed: -4 [ 510.717125][T23258] Bluetooth: hci2: Error when powering off device on rfkill (-4) [ 510.739367][T23258] Bluetooth: hci3: Opcode 0x0c1a failed: -4 [ 510.750239][T23258] Bluetooth: hci3: Error when powering off device on rfkill (-4) [ 511.048669][T23326] netlink: 12 bytes leftover after parsing attributes in process `syz.0.5173'. [ 511.291421][T23326] netlink: 40 bytes leftover after parsing attributes in process `syz.0.5173'. [ 511.314915][T23336] netlink: 16 bytes leftover after parsing attributes in process `syz.5.5177'. [ 511.345614][T23336] xt_TCPMSS: Only works on TCP SYN packets [ 511.652324][T23346] netlink: 8 bytes leftover after parsing attributes in process `syz.6.5180'. [ 511.662571][T23346] netlink: 12 bytes leftover after parsing attributes in process `syz.6.5180'. [ 511.683442][T23350] netlink: 92 bytes leftover after parsing attributes in process `syz.5.5182'. [ 511.879622][T23363] netlink: 'syz.5.5185': attribute type 1 has an invalid length. [ 511.890226][T23363] netlink: 228 bytes leftover after parsing attributes in process `syz.5.5185'. [ 511.902487][T23357] bridge3: entered promiscuous mode [ 511.908424][T23357] bridge3: entered allmulticast mode [ 511.948363][T23363] netlink: 4 bytes leftover after parsing attributes in process `syz.5.5185'. [ 511.956524][T23364] netlink: 12 bytes leftover after parsing attributes in process `syz.2.5184'. [ 512.384588][T23385] netlink: 'syz.4.5193': attribute type 4 has an invalid length. [ 512.435677][T23390] netlink: 'syz.5.5195': attribute type 11 has an invalid length. [ 512.479781][T23385] `: renamed from bond0 (while UP) [ 512.668266][T23401] vlan1: entered allmulticast mode [ 512.986125][T23422] TCP: TCP_TX_DELAY enabled [ 513.003445][T23419] bond6: peer notification delay (1164) is not a multiple of miimon (100), value rounded to 1100 ms [ 513.019510][T23419] bond6: entered promiscuous mode [ 513.025323][T23419] bond6: entered allmulticast mode [ 513.031127][T23419] 8021q: adding VLAN 0 to HW filter on device bond6 [ 513.037204][T23426] netlink: 'syz.6.5206': attribute type 1 has an invalid length. [ 513.050252][T23425] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check. [ 513.156071][T23425] bond4: (slave ipvlan2): enslaved VLAN challenged slave. Adding VLANs will be blocked as long as it is part of bond. [ 513.206298][T23425] bond4: (slave ipvlan2): The slave device specified does not support setting the MAC address [ 513.217360][T23425] bond4: (slave ipvlan2): Setting fail_over_mac to active for active-backup mode [ 513.323186][T23436] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check. [ 513.572622][T23455] netlink: 'syz.6.5213': attribute type 10 has an invalid length. [ 513.642026][T23457] netlink: 'syz.5.5214': attribute type 4 has an invalid length. [ 513.676511][T23457] netlink: 'syz.5.5214': attribute type 1 has an invalid length. [ 513.733684][T23461] netlink: 'syz.4.5216': attribute type 3 has an invalid length. [ 513.858631][ T13] netdevsim netdevsim5 netdevsim0: set [0, 0] type 1 family 0 port 8472 - 0 [ 513.879640][ T13] netdevsim netdevsim5 netdevsim1: set [0, 0] type 1 family 0 port 8472 - 0 [ 513.919254][ T13] netdevsim netdevsim5 netdevsim2: set [0, 0] type 1 family 0 port 8472 - 0 [ 513.935641][ T13] netdevsim netdevsim5 netdevsim3: set [0, 0] type 1 family 0 port 8472 - 0 [ 513.949126][T23468] tipc: Enabled bearer , priority 0 [ 514.160536][T23482] syzkaller0: entered promiscuous mode [ 514.166493][T23482] syzkaller0: entered allmulticast mode [ 514.230910][T23468] sch_tbf: burst 127 is lower than device syzkaller0 mtu (1514) ! [ 514.299684][T23468] tipc: Resetting bearer [ 514.321036][T23467] tipc: Resetting bearer [ 514.391607][T23467] tipc: Disabling bearer [ 514.427130][T23504] netlink: 'syz.4.5227': attribute type 4 has an invalid length. [ 514.723600][T23521] bond0: option ad_actor_sys_prio: mode dependency failed, not supported in mode balance-rr(0) [ 514.739054][T23521] bond0 (unregistering): Released all slaves [ 514.806745][T23529] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 515.031636][T23539] bond5: Invalid ad_actor_system MAC address. [ 515.040901][T23539] bond5: option ad_actor_system: invalid value (1) [ 515.064106][T23539] bond5 (unregistering): Released all slaves [ 515.225509][T23553] veth1_macvtap: left promiscuous mode [ 515.243142][T23553] macsec0: entered promiscuous mode [ 515.256016][T23553] macsec0: entered allmulticast mode [ 515.278016][T23557] veth1_macvtap: entered promiscuous mode [ 515.290790][T23557] veth1_macvtap: entered allmulticast mode [ 515.306208][T23557] macsec0: left promiscuous mode [ 515.311592][T23557] macsec0: left allmulticast mode [ 515.325364][T23557] veth1_macvtap: left allmulticast mode [ 515.418225][T23558] tap0: tun_chr_ioctl cmd 1074025676 [ 515.423564][T23558] tap0: owner set to 0 [ 515.692990][T23587] Unsupported ieee802154 address type: 0 [ 515.789470][T23587] netlink: 'syz.0.5252': attribute type 32 has an invalid length. [ 515.793720][T23590] x_tables: ip6_tables: icmp6 match: only valid for protocol 58 [ 515.798126][T23587] __nla_validate_parse: 27 callbacks suppressed [ 515.798142][T23587] netlink: 8 bytes leftover after parsing attributes in process `syz.0.5252'. [ 515.847464][T23587] bond7: option coupled_control: invalid value (255) [ 515.857383][T23587] bond7 (unregistering): Released all slaves [ 516.038682][T23601] netlink: 64 bytes leftover after parsing attributes in process `syz.4.5256'. [ 516.122839][T23606] xfrm0: entered allmulticast mode [ 516.261902][T23615] netlink: 4 bytes leftover after parsing attributes in process `syz.5.5259'. [ 516.282124][T23616] tc_dump_action: action bad kind [ 516.289391][T23614] tc_dump_action: action bad kind [ 516.408774][T23627] tipc: Enabled bearer , priority 0 [ 516.417456][T23627] syzkaller0: entered promiscuous mode [ 516.422956][T23627] syzkaller0: entered allmulticast mode [ 516.465616][T23627] tipc: Resetting bearer [ 516.492223][T23627] `: (slave batadv0): Releasing backup interface [ 516.517135][T23627] bridge_slave_0: left promiscuous mode [ 516.533139][T23627] bridge0: port 1(bridge_slave_0) entered disabled state [ 516.549167][T23627] `: (slave bridge_slave_1): Releasing backup interface [ 516.573001][T23635] netlink: 12 bytes leftover after parsing attributes in process `syz.5.5264'. [ 516.583960][T23627] `: (slave bond_slave_0): Releasing backup interface [ 516.609663][T23627] `: (slave bond_slave_1): Releasing backup interface [ 516.638552][T23627] team0: Port device C removed [ 516.657579][T23627] team0: Port device team_slave_1 removed [ 516.669437][T23627] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 516.692443][T23627] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 516.706805][T23627] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 516.714317][T23627] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 516.727278][T23627] A link change request failed with some changes committed already. Interface hsr_slave_0 may have been left with an inconsistent configuration, please check. [ 516.756459][T23641] xt_cluster: you have exceeded the maximum number of cluster nodes (37482740 > 32) [ 516.766809][T23626] tipc: Resetting bearer [ 516.798099][T23626] tipc: Disabling bearer [ 516.856861][T23646] netlink: 5 bytes leftover after parsing attributes in process `syz.5.5267'. [ 516.866020][T23646] openvswitch: netlink: IP tunnel attribute has 1026 unknown bytes. [ 517.031111][T23652] openvswitch: netlink: IP tunnel dst address not specified [ 517.042092][T23656] netlink: 'syz.6.5273': attribute type 21 has an invalid length. [ 517.051106][T23658] xt_l2tp: v2 tid > 0xffff: 1114244 [ 517.055506][T23654] netlink: 8 bytes leftover after parsing attributes in process `syz.5.5272'. [ 517.056504][T23656] netlink: 4 bytes leftover after parsing attributes in process `syz.6.5273'. [ 517.076022][T23656] netlink: 'syz.6.5273': attribute type 21 has an invalid length. [ 517.084225][T23656] netlink: 4 bytes leftover after parsing attributes in process `syz.6.5273'. [ 517.266560][T23668] netlink: 'syz.4.5276': attribute type 4 has an invalid length. [ 517.282093][T23668] netlink: 152 bytes leftover after parsing attributes in process `syz.4.5276'. [ 517.346751][T23661] syz.5.5274 (23661) used greatest stack depth: 17832 bytes left [ 517.568412][T23688] x_tables: ip6_tables: mh match: only valid for protocol 135 [ 517.859554][T23707] netlink: 168 bytes leftover after parsing attributes in process `syz.6.5289'. [ 517.878732][T23710] netlink: 'syz.4.5290': attribute type 11 has an invalid length. [ 517.889929][T23710] netlink: 'syz.4.5290': attribute type 4 has an invalid length. [ 517.908842][T23710] netlink: 'syz.4.5290': attribute type 11 has an invalid length. [ 517.917134][T23710] netlink: 'syz.4.5290': attribute type 4 has an invalid length. [ 518.007869][T23719] bridge4: trying to set multicast query interval above maximum, setting to 8640000 (86400000ms) [ 518.052835][T23721] netlink: 'syz.4.5294': attribute type 32 has an invalid length. [ 518.091324][T23721] bond0: option coupled_control: invalid value (16) [ 518.101110][T23721] bond0 (unregistering): Released all slaves [ 518.235876][T23729] syzkaller0: entered promiscuous mode [ 518.241527][T23729] syzkaller0: entered allmulticast mode [ 518.900226][T23781] netlink: 'syz.6.5311': attribute type 1 has an invalid length. [ 518.966050][T23778] tipc: Enabling of bearer rejected, failed to enable media [ 519.056402][T23774] syzkaller0: entered promiscuous mode [ 519.062036][T23774] syzkaller0: entered allmulticast mode [ 519.395305][T23801] netlink: 'syz.4.5316': attribute type 13 has an invalid length. [ 520.872440][T23798] mac80211_hwsim hwsim23 syzkaller0: entered promiscuous mode [ 520.880407][T23798] mac80211_hwsim hwsim23 syzkaller0: entered allmulticast mode [ 520.986008][T23801] 8021q: adding VLAN 0 to HW filter on device ` [ 521.019714][T23801] A link change request failed with some changes committed already. Interface caif0 may have been left with an inconsistent configuration, please check. [ 521.199490][T23825] __nla_validate_parse: 9 callbacks suppressed [ 521.199510][T23825] netlink: 12 bytes leftover after parsing attributes in process `syz.4.5322'. [ 521.255114][T23825] tc_dump_action: action bad kind [ 521.426329][T23833] netlink: 4 bytes leftover after parsing attributes in process `syz.4.5328'. [ 521.436376][T23834] netlink: 4 bytes leftover after parsing attributes in process `syz.4.5328'. [ 521.468292][T23837] netlink: 'syz.2.5327': attribute type 4 has an invalid length. [ 521.498705][T23836] netlink: 'syz.2.5327': attribute type 4 has an invalid length. [ 521.852636][T23854] syzkaller0: entered promiscuous mode [ 521.858974][T23854] syzkaller0: entered allmulticast mode [ 521.872879][T23862] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check. [ 521.894158][T23864] IPv6: NLM_F_CREATE should be specified when creating new route [ 522.283902][T23888] netlink: 44 bytes leftover after parsing attributes in process `syz.2.5344'. [ 522.321031][T23890] team0: Device ip6gre1 is up. Set it down before adding it as a team port [ 522.404126][T23894] netlink: 72 bytes leftover after parsing attributes in process `syz.6.5346'. [ 522.419080][T23894] netlink: 72 bytes leftover after parsing attributes in process `syz.6.5346'. [ 522.438730][T23894] syzkaller0: entered allmulticast mode [ 522.523029][T23902] syzkaller0: entered promiscuous mode [ 522.528830][T23902] syzkaller0: entered allmulticast mode [ 522.733254][T23913] syzkaller0: entered promiscuous mode [ 522.740472][T23913] syzkaller0: entered allmulticast mode [ 524.480692][T23932] wg1: entered allmulticast mode [ 524.723371][T23957] netlink: 412 bytes leftover after parsing attributes in process `syz.5.5365'. [ 525.105649][T23978] Cannot find add_set index 0 as target [ 525.155544][T23983] netlink: 12 bytes leftover after parsing attributes in process `syz.4.5374'. [ 525.168457][T23983] netlink: 'syz.4.5374': attribute type 2 has an invalid length. [ 525.348135][T23990] netlink: 44 bytes leftover after parsing attributes in process `syz.6.5378'. [ 525.396416][T23997] workqueue: Failed to create a rescuer kthread for wq "nfc2_nci_cmd_wq": -EINTR [ 525.612190][T24015] netlink: 'syz.6.5381': attribute type 5 has an invalid length. [ 525.865631][T24028] netlink: 8 bytes leftover after parsing attributes in process `syz.0.5386'. [ 526.251424][T24044] syzkaller0: entered promiscuous mode [ 526.262673][T24044] syzkaller0: entered allmulticast mode [ 526.413680][T24067] netlink: 'syz.5.5397': attribute type 1 has an invalid length. [ 526.580621][T24087] __nla_validate_parse: 4 callbacks suppressed [ 526.580639][T24087] netlink: 12 bytes leftover after parsing attributes in process `syz.2.5401'. [ 526.603907][T24087] netlink: 4 bytes leftover after parsing attributes in process `syz.2.5401'. [ 528.212661][T24098] netlink: 'syz.2.5406': attribute type 4 has an invalid length. [ 528.340254][T24098] batman_adv: batadv0: Interface deactivated: dummy0 [ 528.476868][T24098] veth0_macvtap: left allmulticast mode [ 528.495080][T10435] netdevsim netdevsim2 netdevsim0: unset [0, 0] type 1 family 0 port 8472 - 0 [ 528.513362][T10435] netdevsim netdevsim2 netdevsim0: unset [1, 0] type 2 family 0 port 6081 - 0 [ 528.541862][T10435] netdevsim netdevsim2 netdevsim0: unset [1, 1] type 2 family 0 port 20002 - 0 [ 528.554838][T10435] netdevsim netdevsim2 netdevsim1: unset [0, 0] type 1 family 0 port 8472 - 0 [ 528.575321][T10435] netdevsim netdevsim2 netdevsim1: unset [1, 0] type 2 family 0 port 6081 - 0 [ 528.596034][T10435] netdevsim netdevsim2 netdevsim1: unset [1, 1] type 2 family 0 port 20002 - 0 [ 528.609428][T10435] netdevsim netdevsim2 netdevsim2: unset [0, 0] type 1 family 0 port 8472 - 0 [ 528.623371][T10435] netdevsim netdevsim2 netdevsim2: unset [1, 0] type 2 family 0 port 6081 - 0 [ 528.633986][T10435] netdevsim netdevsim2 netdevsim2: unset [1, 1] type 2 family 0 port 20002 - 0 [ 528.649659][T10435] netdevsim netdevsim2 netdevsim3: unset [0, 0] type 1 family 0 port 8472 - 0 [ 528.660340][T10435] netdevsim netdevsim2 netdevsim3: unset [1, 0] type 2 family 0 port 6081 - 0 [ 528.670797][T10435] netdevsim netdevsim2 netdevsim3: unset [1, 1] type 2 family 0 port 20002 - 0 [ 528.682140][T24119] netlink: 'syz.5.5408': attribute type 2 has an invalid length. [ 528.716801][T24121] netlink: 20 bytes leftover after parsing attributes in process `syz.2.5410'. [ 528.809621][T24125] netlink: 'syz.6.5412': attribute type 4 has an invalid length. [ 528.811146][T24127] netlink: 'syz.6.5412': attribute type 4 has an invalid length. [ 528.926144][T24137] sctp: [Deprecated]: syz.0.5415 (pid 24137) Use of int in max_burst socket option. [ 528.926144][T24137] Use struct sctp_assoc_value instead [ 529.112310][T24145] ip6gre1: entered promiscuous mode [ 529.133730][T24145] ip6gre1: entered allmulticast mode [ 529.582531][T24180] dvmrp0: entered allmulticast mode [ 529.696485][T24182] netlink: 4 bytes leftover after parsing attributes in process `syz.5.5427'. [ 529.738993][T24189] netlink: 'syz.4.5430': attribute type 1 has an invalid length. [ 529.751117][T24190] netlink: 8 bytes leftover after parsing attributes in process `syz.0.5429'. [ 529.754492][T24182] A link change request failed with some changes committed already. Interface bond0 may have been left with an inconsistent configuration, please check. [ 529.795341][T24187] netlink: 'syz.2.5431': attribute type 6 has an invalid length. [ 529.805421][T24196] netlink: 12 bytes leftover after parsing attributes in process `syz.4.5430'. [ 529.822215][T24196] netlink: 12 bytes leftover after parsing attributes in process `syz.4.5430'. [ 529.853797][T24189] bond5: entered promiscuous mode [ 529.872082][T24189] 8021q: adding VLAN 0 to HW filter on device bond5 [ 529.883565][T24200] netlink: 'syz.5.5433': attribute type 13 has an invalid length. [ 529.930443][T24198] bond5: (slave bridge5): making interface the new active one [ 529.939416][T24198] bridge5: entered promiscuous mode [ 529.947701][T24198] bond5: (slave bridge5): Enslaving as an active interface with an up link [ 529.970263][T24200] macvtap0: refused to change device tx_queue_len [ 530.047142][T24206] netlink: 12 bytes leftover after parsing attributes in process `syz.0.5434'. [ 530.216865][T24221] validate_nla: 1 callbacks suppressed [ 530.216884][T24221] netlink: 'syz.4.5439': attribute type 10 has an invalid length. [ 530.232810][T24221] netlink: 228 bytes leftover after parsing attributes in process `syz.4.5439'. [ 530.665599][T24250] netlink: 'syz.6.5446': attribute type 5 has an invalid length. [ 530.685864][T24250] netlink: 140 bytes leftover after parsing attributes in process `syz.6.5446'. [ 531.320981][T24274] bridge_slave_0: left allmulticast mode [ 531.328460][T24274] bridge_slave_0: left promiscuous mode [ 531.337951][T24274] bridge0: port 1(bridge_slave_0) entered disabled state [ 531.357448][T24274] bridge_slave_1: left allmulticast mode [ 531.363400][T24274] bridge_slave_1: left promiscuous mode [ 531.369462][T24274] bridge0: port 2(bridge_slave_1) entered disabled state [ 531.382116][T24274] bond0: (slave bond_slave_0): Releasing backup interface [ 531.394076][T24274] bond0: (slave bond_slave_1): Releasing backup interface [ 531.407742][T24274] team0: Port device team_slave_0 removed [ 531.418449][T24274] team0: Port device team_slave_1 removed [ 531.426735][T24274] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 531.435917][T24274] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 531.448506][T24274] A link change request failed with some changes committed already. Interface hsr_slave_0 may have been left with an inconsistent configuration, please check. [ 531.465139][T24272] A link change request failed with some changes committed already. Interface hsr_slave_0 may have been left with an inconsistent configuration, please check. [ 531.621744][T24293] __nla_validate_parse: 8 callbacks suppressed [ 531.621765][T24293] netlink: 8 bytes leftover after parsing attributes in process `syz.4.5456'. [ 531.680365][T24293] netlink: 'syz.4.5456': attribute type 5 has an invalid length. [ 531.705031][T24293] netlink: 20 bytes leftover after parsing attributes in process `syz.4.5456'. [ 531.766226][T24293] geneve3: entered promiscuous mode [ 531.773365][T24293] geneve3: entered allmulticast mode [ 531.815538][ T50] netdevsim netdevsim4 netdevsim0: set [1, 1] type 2 family 0 port 256 - 0 [ 531.836847][ T50] netdevsim netdevsim4 netdevsim1: set [1, 1] type 2 family 0 port 256 - 0 [ 531.855918][ T50] netdevsim netdevsim4 netdevsim2: set [1, 1] type 2 family 0 port 256 - 0 [ 531.868563][T24310] netlink: 8 bytes leftover after parsing attributes in process `syz.2.5461'. [ 531.878326][T24310] netlink: 8 bytes leftover after parsing attributes in process `syz.2.5461'. [ 531.922669][T24313] netlink: 8 bytes leftover after parsing attributes in process `syz.6.5464'. [ 531.937802][ T50] netdevsim netdevsim4 netdevsim3: set [1, 1] type 2 family 0 port 256 - 0 [ 531.975425][T11268] ip6_tunnel: ip6gre1 xmit: Local address not yet configured! [ 532.534291][T24353] netlink: 4 bytes leftover after parsing attributes in process `syz.4.5475'. [ 532.592472][T24360] netlink: 32 bytes leftover after parsing attributes in process `syz.2.5477'. [ 532.845831][T11268] ip6_tunnel: ip6gre1 xmit: Local address not yet configured! [ 532.981489][T24388] syzkaller1: entered promiscuous mode [ 533.005637][T24388] syzkaller1: entered allmulticast mode [ 533.023688][T24391] netlink: 'syz.5.5488': attribute type 21 has an invalid length. [ 533.062758][T24391] netlink: 132 bytes leftover after parsing attributes in process `syz.5.5488'. [ 533.113118][T24396] 8021q: VLANs not supported on ip6tnl0 [ 533.119965][T24391] tun0: tun_chr_ioctl cmd 1074025675 [ 533.126123][T24391] tun0: persist disabled [ 533.244596][ C1] ip6_tunnel: ip6gre1 xmit: Local address not yet configured! [ 533.445530][T24415] netlink: 2 bytes leftover after parsing attributes in process `syz.4.5496'. [ 533.498865][T24417] netlink: 232 bytes leftover after parsing attributes in process `syz.5.5499'. [ 533.781754][T24433] sctp: [Deprecated]: syz.5.5503 (pid 24433) Use of struct sctp_assoc_value in delayed_ack socket option. [ 533.781754][T24433] Use struct sctp_sack_info instead [ 534.041518][T24452] netlink: 'syz.2.5510': attribute type 1 has an invalid length. [ 534.097888][T24452] 8021q: adding VLAN 0 to HW filter on device bond0 [ 534.562116][T24485] sctp: [Deprecated]: syz.5.5521 (pid 24485) Use of int in max_burst socket option. [ 534.562116][T24485] Use struct sctp_assoc_value instead [ 535.000938][T24513] netlink: 'syz.0.5525': attribute type 1 has an invalid length. [ 535.440508][T24541] netlink: 'syz.0.5535': attribute type 10 has an invalid length. [ 535.487780][T24541] bond0: (slave dummy0): Enslaving as an active interface with an up link [ 536.511789][T24611] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 536.525219][T24610] netlink: 'syz.0.5556': attribute type 11 has an invalid length. [ 536.785799][T24624] tipc: Enabled bearer , priority 0 [ 536.793521][T24624] syzkaller0: entered promiscuous mode [ 536.800623][T24624] syzkaller0: entered allmulticast mode [ 536.827579][T24626] __nla_validate_parse: 9 callbacks suppressed [ 536.827597][T24626] netlink: 24 bytes leftover after parsing attributes in process `syz.4.5560'. [ 536.867168][ T6772] netdevsim netdevsim4 netdevsim0: set [0, 0] type 1 family 0 port 8472 - 0 [ 536.885726][ T6772] netdevsim netdevsim4 netdevsim1: set [0, 0] type 1 family 0 port 8472 - 0 [ 536.927594][ T6772] netdevsim netdevsim4 netdevsim2: set [0, 0] type 1 family 0 port 8472 - 0 [ 536.949158][ T6772] netdevsim netdevsim4 netdevsim3: set [0, 0] type 1 family 0 port 8472 - 0 [ 537.002496][T24624] tipc: Resetting bearer [ 537.015776][T24623] tipc: Resetting bearer [ 537.036386][T24623] tipc: Disabling bearer [ 537.103738][T24646] netlink: 'syz.0.5565': attribute type 1 has an invalid length. [ 537.309486][T24658] IPv6: sit4: Disabled Multicast RS [ 537.320926][T24658] sit4: entered allmulticast mode [ 537.515833][T24671] netlink: 'syz.6.5573': attribute type 4 has an invalid length. [ 537.559018][T24674] netlink: 'syz.5.5575': attribute type 1 has an invalid length. [ 537.650699][T24674] 8021q: adding VLAN 0 to HW filter on device bond8 [ 537.690626][T24678] bond8: (slave veth7): Enslaving as an active interface with a down link [ 537.718991][T24674] vlan0: renamed from bond8 (while UP) [ 537.754190][T24674] vlan0: entered promiscuous mode [ 537.767162][T24674] vlan0: entered allmulticast mode [ 537.773708][T24687] netlink: 40 bytes leftover after parsing attributes in process `syz.6.5579'. [ 537.792829][T24686] netlink: 'syz.6.5579': attribute type 1 has an invalid length. [ 537.945539][T24691] tipc: Enabling of bearer rejected, failed to enable media [ 537.972231][T24693] netlink: 16 bytes leftover after parsing attributes in process `syz.4.5581'. [ 538.198186][T24710] A link change request failed with some changes committed already. Interface gre3 may have been left with an inconsistent configuration, please check. [ 538.464291][T24730] ip6gre1: entered allmulticast mode [ 538.579787][T24740] syzkaller0: entered promiscuous mode [ 538.590365][T24740] syzkaller0: entered allmulticast mode [ 538.838863][T24754] netlink: 8 bytes leftover after parsing attributes in process `syz.2.5601'. [ 538.920739][T24763] netlink: 36 bytes leftover after parsing attributes in process `syz.0.5602'. [ 539.176049][T24778] block nbd6: not configured, cannot reconfigure [ 539.344513][T24795] netlink: 16 bytes leftover after parsing attributes in process `syz.4.5614'. [ 539.354093][T24790] netlink: 28 bytes leftover after parsing attributes in process `syz.0.5613'. [ 539.427194][T24792] ip6t_rpfilter: unknown options [ 539.430846][T24801] openvswitch: netlink: Flow set message rejected, Key attribute missing. [ 539.671621][T24811] wlan0 speed is unknown, defaulting to 1000 [ 539.969577][T24834] netlink: 8 bytes leftover after parsing attributes in process `syz.6.5625'. [ 540.077591][T24841] netlink: 'syz.4.5627': attribute type 18 has an invalid length. [ 540.340364][T24811] lo speed is unknown, defaulting to 1000 [ 540.468505][T24864] IPVS: set_ctl: invalid protocol: 117 172.20.20.170:20000 [ 540.493458][T24864] bridge6: entered promiscuous mode [ 540.525804][T24864] bridge6: entered allmulticast mode [ 540.637577][T24877] netlink: 4 bytes leftover after parsing attributes in process `syz.0.5638'. [ 540.739607][T24880] netlink: 4 bytes leftover after parsing attributes in process `syz.0.5640'. [ 540.762066][T24880] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 540.785031][T24880] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 541.245075][T24902] workqueue: Failed to create a rescuer kthread for wq "nfc7_nci_tx_wq": -EINTR [ 541.507514][T24928] workqueue: Failed to create a rescuer kthread for wq "bond6": -EINTR [ 541.804641][ C1] ip6_tunnel: ip6gre1 xmit: Local address not yet configured! [ 541.841443][T24950] __nla_validate_parse: 3 callbacks suppressed [ 541.841461][T24950] netlink: 4 bytes leftover after parsing attributes in process `syz.6.5653'. [ 542.161773][T24959] netlink: 'syz.0.5657': attribute type 12 has an invalid length. [ 542.185719][T24959] netlink: 'syz.0.5657': attribute type 12 has an invalid length. [ 542.194090][T24959] netlink: 'syz.0.5657': attribute type 12 has an invalid length. [ 542.206520][T24959] netlink: 'syz.0.5657': attribute type 12 has an invalid length. [ 542.216773][T24961] openvswitch: netlink: Invalid MD length 60718 for MD type 0 [ 542.226024][T24957] openvswitch: netlink: Invalid MD length 60718 for MD type 0 [ 542.233717][T24957] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 542.244056][T24959] netlink: 'syz.0.5657': attribute type 12 has an invalid length. [ 542.256366][T24959] netlink: 'syz.0.5657': attribute type 12 has an invalid length. [ 542.265622][T24961] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 542.276014][T24959] netlink: 'syz.0.5657': attribute type 12 has an invalid length. [ 542.285313][T24959] netlink: 'syz.0.5657': attribute type 12 has an invalid length. [ 542.293756][T24959] netlink: 'syz.0.5657': attribute type 12 has an invalid length. [ 542.343591][T24959] netlink: 'syz.0.5657': attribute type 12 has an invalid length. [ 542.697374][T24976] netlink: 28 bytes leftover after parsing attributes in process `syz.6.5662'. [ 542.769979][T24975] veth9: entered allmulticast mode [ 543.917116][T25008] netlink: 204 bytes leftover after parsing attributes in process `syz.2.5671'. [ 544.069718][T25018] veth1_macvtap: entered promiscuous mode [ 544.076755][T25018] macsec0: entered promiscuous mode [ 544.088355][T25018] veth1_macvtap: left promiscuous mode [ 544.298494][T25030] netlink: 64 bytes leftover after parsing attributes in process `syz.6.5678'. [ 545.332077][ T5831] Bluetooth: hci4: unexpected cc 0x0c03 length: 249 > 1 [ 545.342417][ T5831] Bluetooth: hci4: unexpected cc 0x1003 length: 249 > 9 [ 545.351271][ T5831] Bluetooth: hci4: unexpected cc 0x1001 length: 249 > 9 [ 545.362284][ T5831] Bluetooth: hci4: unexpected cc 0x0c23 length: 249 > 4 [ 545.370865][ T5831] Bluetooth: hci4: unexpected cc 0x0c38 length: 249 > 2 [ 545.423428][T25065] wlan0 speed is unknown, defaulting to 1000 [ 545.963547][T25079] bond11: (slave bridge9): making interface the new active one [ 545.976013][T25079] bond11: (slave bridge9): Enslaving as an active interface with an up link [ 545.988227][T25086] x_tables: duplicate underflow at hook 2 [ 545.998111][T25065] lo speed is unknown, defaulting to 1000 [ 546.109967][T10437] netdevsim netdevsim5 netdevsim3 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 546.290420][T25098] xt_l2tp: missing protocol rule (udp|l2tpip) [ 546.349867][T10437] netdevsim netdevsim5 netdevsim2 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 546.369063][T25099] netlink: 4 bytes leftover after parsing attributes in process `syz.2.5695'. [ 546.473655][T10437] netdevsim netdevsim5 netdevsim1 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 546.711097][T25103] macvtap2: entered promiscuous mode [ 546.716986][T25103] macvtap2: entered allmulticast mode [ 546.723110][T25109] veth0_to_bond: entered allmulticast mode [ 546.767222][T10437] bond0: (slave netdevsim0): Releasing backup interface [ 546.813103][T10437] netdevsim netdevsim5 netdevsim0 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 546.875915][T25114] netlink: 52 bytes leftover after parsing attributes in process `syz.4.5702'. [ 546.933596][T25116] netlink: 52 bytes leftover after parsing attributes in process `syz.4.5702'. [ 547.068967][T25120] macvtap2: entered promiscuous mode [ 547.081047][T25120] vlan0: entered promiscuous mode [ 547.096430][T25120] macvtap2: entered allmulticast mode [ 547.103065][T25120] vlan0: entered allmulticast mode [ 547.123733][T25120] veth0_vlan: entered allmulticast mode [ 547.417731][ T5840] Bluetooth: hci4: command tx timeout [ 547.689061][T25144] netlink: 28 bytes leftover after parsing attributes in process `syz.2.5712'. [ 547.709105][T25146] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 547.725761][T25146] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 547.788924][T10437] bond1 (unregistering): (slave geneve2): Releasing active interface [ 548.192140][T10437] bond4 (unregistering): (slave macvlan3): Removing an active aggregator [ 548.203092][T10437] bond4 (unregistering): (slave macvlan3): Releasing backup interface [ 548.218429][T10437] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 548.228920][T10437] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 548.238955][T10437] bond0 (unregistering): Released all slaves [ 548.388663][T10437] bond1 (unregistering): Released all slaves [ 548.572360][T10437] bond2 (unregistering): Released all slaves [ 548.716022][T10437] bond3 (unregistering): (slave veth3): Releasing active interface [ 548.725607][T10437] bond3 (unregistering): Released all slaves [ 548.832704][T10437] bond4 (unregistering): Released all slaves [ 548.846502][T10437] bond5 (unregistering): Released all slaves [ 548.958968][T10437] bond6 (unregistering): Released all slaves [ 548.971563][T10437] bond7 (unregistering): Released all slaves [ 549.080037][T10437] vlan0 (unregistering): (slave veth7): Releasing active interface [ 549.090252][T10437] vlan0 (unregistering): Released all slaves [ 549.459232][T25183] netlink: 4 bytes leftover after parsing attributes in process `syz.4.5719'. [ 549.489444][T25183] netlink: 24 bytes leftover after parsing attributes in process `syz.4.5719'. [ 549.500477][ T5840] Bluetooth: hci4: command tx timeout [ 551.032020][T10437] tipc: Left network mode [ 551.442077][T25218] validate_nla: 27 callbacks suppressed [ 551.442096][T25218] netlink: 'syz.4.5730': attribute type 33 has an invalid length. [ 551.497512][T25218] netlink: 152 bytes leftover after parsing attributes in process `syz.4.5730'. [ 551.552484][T25226] : renamed from hsr0 [ 551.552775][T25225] netlink: 12 bytes leftover after parsing attributes in process `syz.6.5732'. [ 551.585350][ T5840] Bluetooth: hci4: command tx timeout [ 551.626017][T25228] netlink: 48 bytes leftover after parsing attributes in process `syz.6.5732'. [ 551.695050][T25225] netlink: 32 bytes leftover after parsing attributes in process `syz.6.5732'. [ 551.716204][T25065] chnl_net:caif_netlink_parms(): no params data found [ 551.756699][T25228] netlink: 212408 bytes leftover after parsing attributes in process `syz.6.5732'. [ 551.809714][T25232] netlink: 'syz.0.5734': attribute type 7 has an invalid length. [ 552.150356][ T6764] netdevsim netdevsim0 netdevsim1: set [0, 0] type 1 family 0 port 8472 - 0 [ 552.165365][ T6764] netdevsim netdevsim0 netdevsim2: set [0, 0] type 1 family 0 port 8472 - 0 [ 552.364241][ T6764] netdevsim netdevsim0 netdevsim3: set [0, 0] type 1 family 0 port 8472 - 0 [ 552.417125][T25266] __nla_validate_parse: 3 callbacks suppressed [ 552.417144][T25266] netlink: 36 bytes leftover after parsing attributes in process `syz.4.5742'. [ 552.669617][T25267] syzkaller0: entered promiscuous mode [ 552.740466][T25267] syzkaller0: entered allmulticast mode [ 552.878332][T25284] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 552.906182][T25065] bridge0: port 1(bridge_slave_0) entered blocking state [ 552.913504][T25065] bridge0: port 1(bridge_slave_0) entered disabled state [ 552.923484][T25285] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 552.936886][T25065] bridge_slave_0: entered allmulticast mode [ 552.961614][T25065] bridge_slave_0: entered promiscuous mode [ 553.010872][T25270] wlan0 speed is unknown, defaulting to 1000 [ 553.017485][T25065] bridge0: port 2(bridge_slave_1) entered blocking state [ 553.032291][T25065] bridge0: port 2(bridge_slave_1) entered disabled state [ 553.040359][T25065] bridge_slave_1: entered allmulticast mode [ 553.048790][T25065] bridge_slave_1: entered promiscuous mode [ 553.074273][T10437] hsr_slave_0: left promiscuous mode [ 553.081409][T10437] hsr_slave_1: left promiscuous mode [ 553.130282][T25294] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 553.262127][T25295] netlink: 56 bytes leftover after parsing attributes in process `syz.6.5750'. [ 553.658516][ T5840] Bluetooth: hci4: command tx timeout [ 553.762553][T25299] netlink: 248 bytes leftover after parsing attributes in process `syz.2.5751'. [ 554.030709][T25310] netlink: 8 bytes leftover after parsing attributes in process `syz.2.5755'. [ 554.132931][T25316] netlink: 60 bytes leftover after parsing attributes in process `syz.2.5757'. [ 554.168323][T25270] lo speed is unknown, defaulting to 1000 [ 554.212364][T25065] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 554.238318][T25065] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 554.342703][T25065] team0: Port device team_slave_0 added [ 554.369588][T25065] team0: Port device team_slave_1 added [ 554.474191][T25327] FAULT_INJECTION: forcing a failure. [ 554.474191][T25327] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 554.515269][T25327] CPU: 1 UID: 0 PID: 25327 Comm: syz.4.5762 Not tainted syzkaller #0 PREEMPT(full) [ 554.515297][T25327] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/25/2025 [ 554.515310][T25327] Call Trace: [ 554.515318][T25327] [ 554.515327][T25327] dump_stack_lvl+0x189/0x250 [ 554.515358][T25327] ? __pfx____ratelimit+0x10/0x10 [ 554.515385][T25327] ? __pfx_dump_stack_lvl+0x10/0x10 [ 554.515410][T25327] ? __pfx__printk+0x10/0x10 [ 554.515434][T25327] ? __might_fault+0xb0/0x130 [ 554.515474][T25327] should_fail_ex+0x414/0x560 [ 554.515509][T25327] _copy_from_iter+0x1de/0x1790 [ 554.515538][T25327] ? rcu_is_watching+0x15/0xb0 [ 554.515566][T25327] ? kmalloc_reserve+0xbd/0x290 [ 554.515586][T25327] ? __pfx__copy_from_iter+0x10/0x10 [ 554.515610][T25327] ? __build_skb_around+0x262/0x3f0 [ 554.515633][T25327] ? netlink_sendmsg+0x642/0xb30 [ 554.515651][T25327] ? skb_put+0x11b/0x210 [ 554.515674][T25327] netlink_sendmsg+0x6b2/0xb30 [ 554.515705][T25327] ? __pfx_netlink_sendmsg+0x10/0x10 [ 554.515727][T25327] ? trace_irq_disable+0x37/0x110 [ 554.515745][T25327] ? aa_sock_msg_perm+0xf1/0x1d0 [ 554.515777][T25327] ? bpf_lsm_socket_sendmsg+0x9/0x20 [ 554.515796][T25327] ? __pfx_netlink_sendmsg+0x10/0x10 [ 554.515818][T25327] __sock_sendmsg+0x21c/0x270 [ 554.515848][T25327] ____sys_sendmsg+0x505/0x830 [ 554.515876][T25327] ? __pfx_____sys_sendmsg+0x10/0x10 [ 554.515908][T25327] ? import_iovec+0x74/0xa0 [ 554.515943][T25327] ___sys_sendmsg+0x21f/0x2a0 [ 554.515967][T25327] ? __pfx____sys_sendmsg+0x10/0x10 [ 554.516029][T25327] ? __fget_files+0x2a/0x420 [ 554.516047][T25327] ? __fget_files+0x3a0/0x420 [ 554.516077][T25327] __x64_sys_sendmsg+0x19b/0x260 [ 554.516102][T25327] ? __pfx___x64_sys_sendmsg+0x10/0x10 [ 554.516134][T25327] ? __pfx_ksys_write+0x10/0x10 [ 554.516166][T25327] ? do_syscall_64+0xbe/0xfa0 [ 554.516198][T25327] do_syscall_64+0xfa/0xfa0 [ 554.516224][T25327] ? lockdep_hardirqs_on+0x9c/0x150 [ 554.516251][T25327] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 554.516271][T25327] ? clear_bhb_loop+0x60/0xb0 [ 554.516295][T25327] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 554.516313][T25327] RIP: 0033:0x7ff4dad8f749 [ 554.516331][T25327] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 554.516348][T25327] RSP: 002b:00007ff4dbb52038 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 554.516369][T25327] RAX: ffffffffffffffda RBX: 00007ff4dafe5fa0 RCX: 00007ff4dad8f749 [ 554.516385][T25327] RDX: 0000000000000000 RSI: 0000200000000140 RDI: 0000000000000003 [ 554.516397][T25327] RBP: 00007ff4dbb52090 R08: 0000000000000000 R09: 0000000000000000 [ 554.516410][T25327] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 554.516421][T25327] R13: 00007ff4dafe6038 R14: 00007ff4dafe5fa0 R15: 00007ffc2ef0cd58 [ 554.516455][T25327] [ 554.909282][T25065] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 554.922311][T25065] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 554.979951][T25065] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 555.008758][T25065] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 555.016493][T25065] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 555.047762][T25065] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 555.113324][T25341] netlink: 96 bytes leftover after parsing attributes in process `syz.6.5764'. [ 555.123006][T25341] netlink: 96 bytes leftover after parsing attributes in process `syz.6.5764'. [ 555.142752][T25344] netlink: 14 bytes leftover after parsing attributes in process `syz.2.5766'. [ 555.153668][T25347] netlink: 8 bytes leftover after parsing attributes in process `syz.6.5764'. [ 555.207470][T25334] veth0_to_bridge: entered promiscuous mode [ 555.252164][T25333] veth0_to_bridge: left promiscuous mode [ 555.323579][T25065] hsr_slave_0: entered promiscuous mode [ 555.378003][T25065] hsr_slave_1: entered promiscuous mode [ 555.401739][T25356] netlink: 'syz.6.5769': attribute type 12 has an invalid length. [ 555.410314][T25356] netlink: 132 bytes leftover after parsing attributes in process `syz.6.5769'. [ 555.445903][T25358] tipc: Cannot configure node identity twice [ 555.468789][T10437] IPVS: stop unused estimator thread 0... [ 555.798006][ T13] netdevsim netdevsim6 netdevsim1: unset [1, 0] type 2 family 0 port 6081 - 0 [ 555.812924][ T13] netdevsim netdevsim6 netdevsim2: unset [1, 0] type 2 family 0 port 6081 - 0 [ 555.863455][T25367] No such timeout policy "syz0" [ 555.869634][T25368] No such timeout policy "syz0" [ 555.982552][ T13] netdevsim netdevsim6 netdevsim3: unset [1, 0] type 2 family 0 port 6081 - 0 [ 555.993863][T25374] FAULT_INJECTION: forcing a failure. [ 555.993863][T25374] name failslab, interval 1, probability 0, space 0, times 0 [ 556.012002][T25374] CPU: 1 UID: 0 PID: 25374 Comm: syz.2.5774 Not tainted syzkaller #0 PREEMPT(full) [ 556.012029][T25374] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/25/2025 [ 556.012040][T25374] Call Trace: [ 556.012047][T25374] [ 556.012055][T25374] dump_stack_lvl+0x189/0x250 [ 556.012085][T25374] ? __pfx____ratelimit+0x10/0x10 [ 556.012112][T25374] ? __pfx_dump_stack_lvl+0x10/0x10 [ 556.012135][T25374] ? __pfx__printk+0x10/0x10 [ 556.012156][T25374] ? __pfx___might_resched+0x10/0x10 [ 556.012177][T25374] ? fs_reclaim_acquire+0x7d/0x100 [ 556.012211][T25374] should_fail_ex+0x414/0x560 [ 556.012244][T25374] should_failslab+0xa8/0x100 [ 556.012263][T25374] __kmalloc_cache_noprof+0x6f/0x6f0 [ 556.012289][T25374] ? rtnl_newlink+0xfb/0x1c80 [ 556.012322][T25374] rtnl_newlink+0xfb/0x1c80 [ 556.012361][T25374] ? __pfx_rtnl_newlink+0x10/0x10 [ 556.012395][T25374] ? is_bpf_text_address+0x26/0x2b0 [ 556.012422][T25374] ? is_bpf_text_address+0x292/0x2b0 [ 556.012445][T25374] ? is_bpf_text_address+0x26/0x2b0 [ 556.012470][T25374] ? __lock_acquire+0xab9/0xd20 [ 556.012502][T25374] ? __lock_acquire+0xab9/0xd20 [ 556.012542][T25374] ? is_bpf_text_address+0x26/0x2b0 [ 556.012568][T25374] ? is_bpf_text_address+0x292/0x2b0 [ 556.012588][T25374] ? is_bpf_text_address+0x26/0x2b0 [ 556.012619][T25374] ? __lock_acquire+0xab9/0xd20 [ 556.012664][T25374] ? __pfx_rtnl_newlink+0x10/0x10 [ 556.012692][T25374] rtnetlink_rcv_msg+0x7cf/0xb70 [ 556.012720][T25374] ? __lock_acquire+0xab9/0xd20 [ 556.012741][T25374] ? rtnetlink_rcv_msg+0x1ab/0xb70 [ 556.012769][T25374] ? __pfx_rtnetlink_rcv_msg+0x10/0x10 [ 556.012816][T25374] netlink_rcv_skb+0x208/0x470 [ 556.012833][T25374] ? __lock_acquire+0xab9/0xd20 [ 556.012852][T25374] ? __pfx_rtnetlink_rcv_msg+0x10/0x10 [ 556.012890][T25374] ? __pfx_netlink_rcv_skb+0x10/0x10 [ 556.012922][T25374] ? netlink_deliver_tap+0x2e/0x1b0 [ 556.012949][T25374] netlink_unicast+0x82f/0x9e0 [ 556.012987][T25374] ? __pfx_netlink_unicast+0x10/0x10 [ 556.013017][T25374] ? netlink_sendmsg+0x642/0xb30 [ 556.013035][T25374] ? skb_put+0x11b/0x210 [ 556.013059][T25374] netlink_sendmsg+0x805/0xb30 [ 556.013089][T25374] ? __pfx_netlink_sendmsg+0x10/0x10 [ 556.013112][T25374] ? aa_sock_msg_perm+0xf1/0x1d0 [ 556.013141][T25374] ? bpf_lsm_socket_sendmsg+0x9/0x20 [ 556.013161][T25374] ? __pfx_netlink_sendmsg+0x10/0x10 [ 556.013182][T25374] __sock_sendmsg+0x21c/0x270 [ 556.013212][T25374] ____sys_sendmsg+0x505/0x830 [ 556.013238][T25374] ? __pfx_____sys_sendmsg+0x10/0x10 [ 556.013270][T25374] ? import_iovec+0x74/0xa0 [ 556.013300][T25374] ___sys_sendmsg+0x21f/0x2a0 [ 556.013324][T25374] ? __pfx____sys_sendmsg+0x10/0x10 [ 556.013385][T25374] ? __fget_files+0x2a/0x420 [ 556.013403][T25374] ? __fget_files+0x3a0/0x420 [ 556.013434][T25374] __x64_sys_sendmsg+0x19b/0x260 [ 556.013459][T25374] ? __pfx___x64_sys_sendmsg+0x10/0x10 [ 556.013491][T25374] ? __pfx_ksys_write+0x10/0x10 [ 556.013522][T25374] ? do_syscall_64+0xbe/0xfa0 [ 556.013555][T25374] do_syscall_64+0xfa/0xfa0 [ 556.013581][T25374] ? lockdep_hardirqs_on+0x9c/0x150 [ 556.013609][T25374] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 556.013628][T25374] ? clear_bhb_loop+0x60/0xb0 [ 556.013652][T25374] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 556.013671][T25374] RIP: 0033:0x7fbb6ab8f749 [ 556.013688][T25374] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 556.013705][T25374] RSP: 002b:00007fbb6ba3b038 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 556.013725][T25374] RAX: ffffffffffffffda RBX: 00007fbb6ade5fa0 RCX: 00007fbb6ab8f749 [ 556.013739][T25374] RDX: 0000000000000000 RSI: 0000200000000140 RDI: 0000000000000003 [ 556.013752][T25374] RBP: 00007fbb6ba3b090 R08: 0000000000000000 R09: 0000000000000000 [ 556.013764][T25374] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 556.013775][T25374] R13: 00007fbb6ade6038 R14: 00007fbb6ade5fa0 R15: 00007fff3decbf38 [ 556.013808][T25374] [ 556.034906][T25370] netlink: 'syz.4.5775': attribute type 16 has an invalid length. [ 556.653828][T25396] veth0: entered promiscuous mode [ 556.703229][T25396] veth0: left promiscuous mode [ 556.716736][T25404] netlink: 'syz.6.5784': attribute type 1 has an invalid length. [ 556.809462][T25409] FAULT_INJECTION: forcing a failure. [ 556.809462][T25409] name failslab, interval 1, probability 0, space 0, times 0 [ 556.823813][T25409] CPU: 0 UID: 0 PID: 25409 Comm: syz.4.5786 Not tainted syzkaller #0 PREEMPT(full) [ 556.823840][T25409] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/25/2025 [ 556.823852][T25409] Call Trace: [ 556.823860][T25409] [ 556.823868][T25409] dump_stack_lvl+0x189/0x250 [ 556.823899][T25409] ? __pfx____ratelimit+0x10/0x10 [ 556.823926][T25409] ? __pfx_dump_stack_lvl+0x10/0x10 [ 556.823952][T25409] ? __pfx__printk+0x10/0x10 [ 556.823982][T25409] ? __pfx___might_resched+0x10/0x10 [ 556.824003][T25409] ? fs_reclaim_acquire+0x7d/0x100 [ 556.824038][T25409] should_fail_ex+0x414/0x560 [ 556.824072][T25409] should_failslab+0xa8/0x100 [ 556.824093][T25409] __kmalloc_cache_noprof+0x6f/0x6f0 [ 556.824121][T25409] ? rtnl_newlink+0xfb/0x1c80 [ 556.824150][T25409] ? kasan_save_track+0x4f/0x80 [ 556.824180][T25409] rtnl_newlink+0xfb/0x1c80 [ 556.824205][T25409] ? netlink_deliver_tap+0x19c/0x1b0 [ 556.824222][T25409] ? netlink_unicast+0x7fa/0x9e0 [ 556.824247][T25409] ? netlink_sendmsg+0x805/0xb30 [ 556.824265][T25409] ? __sock_sendmsg+0x21c/0x270 [ 556.824288][T25409] ? ____sys_sendmsg+0x505/0x830 [ 556.824307][T25409] ? ___sys_sendmsg+0x21f/0x2a0 [ 556.824324][T25409] ? __x64_sys_sendmsg+0x19b/0x260 [ 556.824348][T25409] ? do_syscall_64+0xfa/0xfa0 [ 556.824370][T25409] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 556.824394][T25409] ? __pfx_rtnl_newlink+0x10/0x10 [ 556.824450][T25409] ? kasan_quarantine_put+0xdd/0x220 [ 556.824476][T25409] ? lockdep_hardirqs_on+0x9c/0x150 [ 556.824511][T25409] ? nlmon_xmit+0xb0/0x100 [ 556.824533][T25409] ? kmem_cache_free+0x19b/0x690 [ 556.824571][T25409] ? __local_bh_enable_ip+0x12d/0x1c0 [ 556.824593][T25409] ? lockdep_hardirqs_on+0x9c/0x150 [ 556.824622][T25409] ? __local_bh_enable_ip+0x12d/0x1c0 [ 556.824643][T25409] ? __pfx___local_bh_enable_ip+0x10/0x10 [ 556.824669][T25409] ? __dev_queue_xmit+0x27b/0x3b50 [ 556.824693][T25409] ? __dev_queue_xmit+0x27b/0x3b50 [ 556.824715][T25409] ? __dev_queue_xmit+0x27b/0x3b50 [ 556.824738][T25409] ? __dev_queue_xmit+0x1d79/0x3b50 [ 556.824760][T25409] ? kasan_save_track+0x3e/0x80 [ 556.824785][T25409] ? __kasan_slab_alloc+0x6c/0x80 [ 556.824818][T25409] ? __lock_acquire+0xab9/0xd20 [ 556.824881][T25409] ? __pfx_rtnl_newlink+0x10/0x10 [ 556.824910][T25409] rtnetlink_rcv_msg+0x7cf/0xb70 [ 556.824942][T25409] ? rtnetlink_rcv_msg+0x1ab/0xb70 [ 556.824974][T25409] ? __pfx_rtnetlink_rcv_msg+0x10/0x10 [ 556.824998][T25409] ? ref_tracker_free+0x63a/0x7d0 [ 556.825016][T25409] ? __asan_memcpy+0x40/0x70 [ 556.825040][T25409] ? __pfx_ref_tracker_free+0x10/0x10 [ 556.825070][T25409] netlink_rcv_skb+0x208/0x470 [ 556.825092][T25409] ? __pfx_rtnetlink_rcv_msg+0x10/0x10 [ 556.825123][T25409] ? __pfx_netlink_rcv_skb+0x10/0x10 [ 556.825155][T25409] ? netlink_deliver_tap+0x2e/0x1b0 [ 556.825184][T25409] netlink_unicast+0x82f/0x9e0 [ 556.825221][T25409] ? __pfx_netlink_unicast+0x10/0x10 [ 556.825252][T25409] ? netlink_sendmsg+0x642/0xb30 [ 556.825269][T25409] ? skb_put+0x11b/0x210 [ 556.825292][T25409] netlink_sendmsg+0x805/0xb30 [ 556.825322][T25409] ? __pfx_netlink_sendmsg+0x10/0x10 [ 556.825345][T25409] ? aa_sock_msg_perm+0xf1/0x1d0 [ 556.825372][T25409] ? bpf_lsm_socket_sendmsg+0x9/0x20 [ 556.825389][T25409] ? __pfx_netlink_sendmsg+0x10/0x10 [ 556.825410][T25409] __sock_sendmsg+0x21c/0x270 [ 556.825440][T25409] ____sys_sendmsg+0x505/0x830 [ 556.825468][T25409] ? __pfx_____sys_sendmsg+0x10/0x10 [ 556.825500][T25409] ? import_iovec+0x74/0xa0 [ 556.825529][T25409] ___sys_sendmsg+0x21f/0x2a0 [ 556.825553][T25409] ? __pfx____sys_sendmsg+0x10/0x10 [ 556.825614][T25409] ? __fget_files+0x2a/0x420 [ 556.825632][T25409] ? __fget_files+0x3a0/0x420 [ 556.825662][T25409] __x64_sys_sendmsg+0x19b/0x260 [ 556.825687][T25409] ? __pfx___x64_sys_sendmsg+0x10/0x10 [ 556.825719][T25409] ? __pfx_ksys_write+0x10/0x10 [ 556.825751][T25409] ? do_syscall_64+0xbe/0xfa0 [ 556.825782][T25409] do_syscall_64+0xfa/0xfa0 [ 556.825808][T25409] ? lockdep_hardirqs_on+0x9c/0x150 [ 556.825835][T25409] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 556.825854][T25409] ? clear_bhb_loop+0x60/0xb0 [ 556.825878][T25409] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 556.825896][T25409] RIP: 0033:0x7ff4dad8f749 [ 556.825914][T25409] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 556.825932][T25409] RSP: 002b:00007ff4dbb52038 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 556.825953][T25409] RAX: ffffffffffffffda RBX: 00007ff4dafe5fa0 RCX: 00007ff4dad8f749 [ 556.825973][T25409] RDX: 0000000000000000 RSI: 0000200000000140 RDI: 0000000000000003 [ 556.825985][T25409] RBP: 00007ff4dbb52090 R08: 0000000000000000 R09: 0000000000000000 [ 556.825998][T25409] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 556.826009][T25409] R13: 00007ff4dafe6038 R14: 00007ff4dafe5fa0 R15: 00007ffc2ef0cd58 [ 556.826044][T25409] [ 557.308685][T25404] bond5: entered promiscuous mode [ 557.314148][T25404] 8021q: adding VLAN 0 to HW filter on device bond5 [ 557.621648][T25416] __nla_validate_parse: 2 callbacks suppressed [ 557.621666][T25416] netlink: 12 bytes leftover after parsing attributes in process `syz.4.5788'. [ 557.661583][T25419] netlink: 176 bytes leftover after parsing attributes in process `syz.6.5791'. [ 557.683437][T25420] netlink: 12 bytes leftover after parsing attributes in process `syz.2.5790'. [ 557.696858][T25422] netlink: 176 bytes leftover after parsing attributes in process `syz.6.5791'. [ 557.833900][T25420] 8021q: adding VLAN 0 to HW filter on device bond13 [ 557.897109][T25426] 8021q: adding VLAN 0 to HW filter on device bond0 [ 557.910428][T25426] bond13: (slave bond0): Enslaving as an active interface with an up link [ 558.026760][T25430] netlink: 32 bytes leftover after parsing attributes in process `syz.6.5793'. [ 558.142068][T25428] bond13 (unregistering): (slave bond0): Releasing backup interface [ 558.152869][T25428] bond13 (unregistering): Released all slaves [ 558.355202][T25442] netlink: 8 bytes leftover after parsing attributes in process `syz.6.5798'. [ 558.413296][T25065] netdevsim netdevsim5 netdevsim0: renamed from eth0 [ 558.469625][T25065] netdevsim netdevsim5 netdevsim1: renamed from eth1 [ 558.489793][T25065] netdevsim netdevsim5 netdevsim2: renamed from eth2 [ 558.522985][T25065] netdevsim netdevsim5 netdevsim3: renamed from eth3 [ 558.630020][T25465] netlink: 4 bytes leftover after parsing attributes in process `syz.4.5804'. [ 558.764139][T25065] 8021q: adding VLAN 0 to HW filter on device bond0 [ 558.793454][T25065] 8021q: adding VLAN 0 to HW filter on device team0 [ 558.828209][ T6772] bridge0: port 1(bridge_slave_0) entered blocking state [ 558.835429][ T6772] bridge0: port 1(bridge_slave_0) entered forwarding state [ 558.847774][ T6772] bridge0: port 2(bridge_slave_1) entered blocking state [ 558.855076][ T6772] bridge0: port 2(bridge_slave_1) entered forwarding state [ 559.111606][T25065] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 559.307158][T25065] veth0_vlan: entered promiscuous mode [ 559.319714][T25065] veth1_vlan: entered promiscuous mode [ 559.349402][T25065] veth0_macvtap: entered promiscuous mode [ 559.359180][T25065] veth1_macvtap: entered promiscuous mode [ 559.380225][T25065] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 559.396319][T25065] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 559.410077][ T6764] netdevsim netdevsim5 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 559.419587][ T6764] netdevsim netdevsim5 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 559.430105][ T6764] netdevsim netdevsim5 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 559.440674][ T6764] netdevsim netdevsim5 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 559.563825][T25505] netlink: 28 bytes leftover after parsing attributes in process `syz.0.5810'. [ 559.573736][T25505] netlink: 28 bytes leftover after parsing attributes in process `syz.0.5810'. [ 559.711361][ T6772] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 559.742711][ T6772] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 559.777422][T25513] x_tables: duplicate underflow at hook 4 [ 559.786340][T25512] netlink: 'syz.4.5814': attribute type 2 has an invalid length. [ 559.813836][ T6764] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 559.815095][T25512] netlink: 'syz.4.5814': attribute type 11 has an invalid length. [ 559.832818][T25510] syzkaller1: entered promiscuous mode [ 559.842260][T25510] syzkaller1: entered allmulticast mode [ 559.849322][T25512] netlink: 132 bytes leftover after parsing attributes in process `syz.4.5814'. [ 559.854741][ T6764] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 560.248622][T25534] netlink: 'syz.2.5819': attribute type 4 has an invalid length. [ 560.658515][ T5831] Bluetooth: hci0: unexpected cc 0x0c03 length: 249 > 1 [ 560.671083][ T5831] Bluetooth: hci0: unexpected cc 0x1003 length: 249 > 9 [ 560.681770][ T5831] Bluetooth: hci0: unexpected cc 0x1001 length: 249 > 9 [ 560.692782][ T5831] Bluetooth: hci0: unexpected cc 0x0c23 length: 249 > 4 [ 560.702627][ T5831] Bluetooth: hci0: unexpected cc 0x0c38 length: 249 > 2 [ 560.763214][T25548] wlan0 speed is unknown, defaulting to 1000 [ 561.038909][T25548] lo speed is unknown, defaulting to 1000 [ 561.565745][T25591] vlan3: entered promiscuous mode [ 561.573059][T25591] bond0: entered promiscuous mode [ 561.580324][T25591] bond_slave_0: entered promiscuous mode [ 561.587091][T25591] bond_slave_1: entered promiscuous mode [ 561.592934][T25591] team0: entered promiscuous mode [ 561.599153][T25591] team_slave_0: entered promiscuous mode [ 561.606219][T25591] team_slave_1: entered promiscuous mode [ 561.612413][T25591] dummy0: entered promiscuous mode [ 561.843202][T25597] macvlan2: entered promiscuous mode [ 561.850358][T25597] macvlan2: entered allmulticast mode [ 561.942369][T25606] hsr_slave_0 (unregistering): left promiscuous mode [ 562.132501][T25616] tipc: Enabled bearer , priority 0 [ 562.280421][T25616] syzkaller0: entered promiscuous mode [ 562.287201][T25616] syzkaller0: entered allmulticast mode [ 562.293711][T25616] tipc: Resetting bearer [ 562.336053][T25614] tipc: Resetting bearer [ 562.771131][ T5840] Bluetooth: hci0: command tx timeout [ 564.131711][T25614] tipc: Disabling bearer [ 564.239865][T25650] __nla_validate_parse: 12 callbacks suppressed [ 564.239882][T25650] netlink: 8 bytes leftover after parsing attributes in process `syz.0.5855'. [ 564.340292][T25650] unsupported nlmsg_type 40 [ 564.371861][T25660] netlink: 'syz.2.5859': attribute type 18 has an invalid length. [ 564.382195][T25660] netlink: 'syz.2.5859': attribute type 18 has an invalid length. [ 564.391625][T25660] netlink: 'syz.2.5859': attribute type 18 has an invalid length. [ 564.633419][T25548] chnl_net:caif_netlink_parms(): no params data found [ 564.700218][T25681] netlink: 4 bytes leftover after parsing attributes in process `syz.0.5863'. [ 564.724656][T25682] netlink: 4 bytes leftover after parsing attributes in process `syz.0.5863'. [ 564.813548][T25691] bridge0: port 1(bridge_slave_0) entered disabled state [ 564.823636][T25693] netlink: 'syz.2.5865': attribute type 11 has an invalid length. [ 564.824190][T25691] bridge0: port 2(bridge_slave_1) entered disabled state [ 564.831868][T25693] netlink: 224 bytes leftover after parsing attributes in process `syz.2.5865'. [ 564.851421][ T5840] Bluetooth: hci0: command tx timeout [ 564.858873][T25693] netlink: 312 bytes leftover after parsing attributes in process `syz.2.5865'. [ 564.989724][T25699] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 565.012108][T25699] netlink: 'syz.0.5868': attribute type 1 has an invalid length. [ 565.022102][T25700] netlink: 'syz.5.5867': attribute type 21 has an invalid length. [ 565.039953][T25700] IPv6: NLM_F_CREATE should be specified when creating new route [ 565.143401][T25548] bridge0: port 1(bridge_slave_0) entered blocking state [ 565.151633][T25548] bridge0: port 1(bridge_slave_0) entered disabled state [ 565.159409][T25548] bridge_slave_0: entered allmulticast mode [ 565.167970][T25548] bridge_slave_0: entered promiscuous mode [ 565.179693][T25548] bridge0: port 2(bridge_slave_1) entered blocking state [ 565.187222][T25548] bridge0: port 2(bridge_slave_1) entered disabled state [ 565.194760][T25548] bridge_slave_1: entered allmulticast mode [ 565.202768][T25548] bridge_slave_1: entered promiscuous mode [ 565.415738][T25548] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 565.429902][T25548] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 565.592316][T25548] team0: Port device team_slave_0 added [ 565.777123][T25548] team0: Port device team_slave_1 added [ 565.913868][T25732] team0: Device ipvlan1 failed to register rx_handler [ 565.930001][T25548] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 565.942813][T25548] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 566.025718][T25548] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 566.090500][T25752] netlink: 12 bytes leftover after parsing attributes in process `syz.2.5883'. [ 566.121838][T25548] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 566.136425][T25548] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 566.167074][T25548] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 566.180713][T25748] netlink: 32 bytes leftover after parsing attributes in process `syz.0.5879'. [ 566.417798][T25771] netlink: 12 bytes leftover after parsing attributes in process `syz.0.5887'. [ 566.421170][T25548] hsr_slave_0: entered promiscuous mode [ 566.447453][T25548] hsr_slave_1: entered promiscuous mode [ 566.454104][T25548] debugfs: 'hsr0' already exists in 'hsr' [ 566.461073][T25548] Cannot create hsr debugfs directory [ 566.878410][T25805] netlink: 'syz.0.5893': attribute type 4 has an invalid length. [ 566.929376][T25808] netlink: 'syz.0.5893': attribute type 4 has an invalid length. [ 566.932410][ T5840] Bluetooth: hci0: command tx timeout [ 567.082661][T25803] syzkaller1: entered promiscuous mode [ 567.089613][T25803] syzkaller1: entered allmulticast mode [ 567.389105][T25828] netlink: 16 bytes leftover after parsing attributes in process `syz.2.5898'. [ 567.730929][T25854] syzkaller0: entered promiscuous mode [ 567.753470][T25854] syzkaller0: entered allmulticast mode [ 567.762639][T25852] netlink: 132 bytes leftover after parsing attributes in process `syz.5.5903'. [ 567.828066][T25854] sch_tbf: burst 127 is lower than device syzkaller0 mtu (1514) ! [ 567.884082][T25865] A link change request failed with some changes committed already. Interface netdevsim0 may have been left with an inconsistent configuration, please check. [ 567.986399][T25548] netdevsim netdevsim6 netdevsim0: renamed from eth0 [ 567.999290][T25548] netdevsim netdevsim6 netdevsim1: renamed from eth1 [ 568.023915][T25548] netdevsim netdevsim6 netdevsim2: renamed from eth2 [ 568.039873][T25548] netdevsim netdevsim6 netdevsim3: renamed from eth3 [ 568.299585][T25548] 8021q: adding VLAN 0 to HW filter on device bond0 [ 568.350713][T25548] 8021q: adding VLAN 0 to HW filter on device team0 [ 568.368391][ T6772] bridge0: port 1(bridge_slave_0) entered blocking state [ 568.375629][ T6772] bridge0: port 1(bridge_slave_0) entered forwarding state [ 568.416255][ T5932] bridge0: port 2(bridge_slave_1) entered blocking state [ 568.423423][ T5932] bridge0: port 2(bridge_slave_1) entered forwarding state [ 569.007427][ T5840] Bluetooth: hci0: command tx timeout [ 570.617756][T25548] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 570.731213][T25936] netdevsim netdevsim4 netdevsim3 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 570.765221][T25936] netdevsim netdevsim4 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 570.786255][T25936] netdevsim netdevsim4 netdevsim3 (unregistering): unset [1, 1] type 2 family 0 port 256 - 0 [ 570.958573][T25936] netdevsim netdevsim4 netdevsim2 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 570.985622][T25936] netdevsim netdevsim4 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 571.014634][T25936] netdevsim netdevsim4 netdevsim2 (unregistering): unset [1, 1] type 2 family 0 port 256 - 0 [ 571.141539][ T5932] nci: nci_rf_discover_ntf_packet: unsupported rf_tech_and_mode 0x60 [ 571.141756][T25936] netdevsim netdevsim4 netdevsim1 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 571.161931][T25936] netdevsim netdevsim4 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 571.176020][T25936] netdevsim netdevsim4 netdevsim1 (unregistering): unset [1, 1] type 2 family 0 port 256 - 0 [ 571.291079][T25936] netdevsim netdevsim4 netdevsim0 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 571.304538][T25936] netdevsim netdevsim4 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 571.351536][T25936] netdevsim netdevsim4 netdevsim0 (unregistering): unset [1, 1] type 2 family 0 port 256 - 0 [ 571.468482][T25548] veth0_vlan: entered promiscuous mode [ 571.524554][ T6774] netdevsim netdevsim4 eth0: set [0, 0] type 1 family 0 port 8472 - 0 [ 571.536586][ T6774] netdevsim netdevsim4 eth0: set [1, 0] type 2 family 0 port 256 - 0 [ 571.545088][ T6774] netdevsim netdevsim4 eth0: set [1, 1] type 2 family 0 port 6081 - 0 [ 571.564167][ T7886] netdevsim netdevsim4 eth1: set [0, 0] type 1 family 0 port 8472 - 0 [ 571.573198][ T7886] netdevsim netdevsim4 eth1: set [1, 0] type 2 family 0 port 256 - 0 [ 571.582689][ T7886] netdevsim netdevsim4 eth1: set [1, 1] type 2 family 0 port 6081 - 0 [ 571.593036][T25548] veth1_vlan: entered promiscuous mode [ 571.620322][ T7886] netdevsim netdevsim4 eth2: set [0, 0] type 1 family 0 port 8472 - 0 [ 571.629343][ T7886] netdevsim netdevsim4 eth2: set [1, 0] type 2 family 0 port 256 - 0 [ 571.638062][ T7886] netdevsim netdevsim4 eth2: set [1, 1] type 2 family 0 port 6081 - 0 [ 571.667607][T25984] __nla_validate_parse: 3 callbacks suppressed [ 571.667630][T25984] netlink: 28 bytes leftover after parsing attributes in process `syz.0.5936'. [ 571.688399][ T13] netdevsim netdevsim4 eth3: set [0, 0] type 1 family 0 port 8472 - 0 [ 571.707504][ T13] netdevsim netdevsim4 eth3: set [1, 0] type 2 family 0 port 256 - 0 [ 571.727550][ T13] netdevsim netdevsim4 eth3: set [1, 1] type 2 family 0 port 6081 - 0 [ 571.803023][T25988] netlink: 14 bytes leftover after parsing attributes in process `syz.0.5937'. [ 571.809466][T25548] veth0_macvtap: entered promiscuous mode [ 571.923855][T25988] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 571.942377][T25988] bond_slave_0: left promiscuous mode [ 571.973535][T25988] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 571.983064][T25988] bond_slave_1: left promiscuous mode [ 572.003765][T25988] bond0 (unregistering): (slave team0): Releasing backup interface [ 572.017152][T25988] team0: left promiscuous mode [ 572.021965][T25988] team_slave_0: left promiscuous mode [ 572.035155][T25988] team_slave_1: left promiscuous mode [ 572.055006][T25988] bond0 (unregistering): (slave dummy0): Releasing backup interface [ 572.063834][T25988] dummy0: left promiscuous mode [ 572.087299][T25988] bond0 (unregistering): Released all slaves [ 572.417792][T25994] veth0_to_hsr: left promiscuous mode [ 572.507200][T25994] gtp0: left promiscuous mode [ 572.561619][T25994] vlan0: left promiscuous mode [ 572.566720][T25994] bond1: left promiscuous mode [ 572.583016][T25994] gtp1: left promiscuous mode [ 572.593582][T25994] gretap2: left promiscuous mode [ 572.601326][T25994] bridge6: left promiscuous mode [ 572.627179][T25548] veth1_macvtap: entered promiscuous mode [ 572.642564][ T6774] netdevsim netdevsim0 netdevsim1: unset [0, 0] type 1 family 0 port 8472 - 0 [ 572.660557][ T6774] netdevsim netdevsim0 netdevsim1: unset [1, 0] type 2 family 0 port 6081 - 0 [ 572.687824][ T6774] netdevsim netdevsim0 netdevsim2: unset [0, 0] type 1 family 0 port 8472 - 0 [ 572.710891][ T6774] netdevsim netdevsim0 netdevsim2: unset [1, 0] type 2 family 0 port 6081 - 0 [ 572.808968][ T6774] netdevsim netdevsim0 netdevsim3: unset [0, 0] type 1 family 0 port 8472 - 0 [ 572.822833][ T6774] netdevsim netdevsim0 netdevsim3: unset [1, 0] type 2 family 0 port 6081 - 0 [ 572.890147][T25548] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 572.949425][T25548] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 572.978604][ T13] netdevsim netdevsim6 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 573.005765][ T13] netdevsim netdevsim6 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 573.016494][ T13] netdevsim netdevsim6 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 573.035306][ T13] netdevsim netdevsim6 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 573.099624][T26030] gre0: entered promiscuous mode [ 573.104914][T26030] gre0: entered allmulticast mode [ 573.177051][T26034] netlink: 28 bytes leftover after parsing attributes in process `syz.0.5952'. [ 573.678148][T26064] netlink: 40 bytes leftover after parsing attributes in process `syz.0.5961'. [ 573.687673][T26064] netlink: 40 bytes leftover after parsing attributes in process `syz.0.5961'. [ 573.697981][T26064] netlink: 40 bytes leftover after parsing attributes in process `syz.0.5961'. [ 573.966451][ T5932] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 573.974307][ T5932] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 574.040199][T26073] netlink: 8 bytes leftover after parsing attributes in process `syz.5.5964'. [ 574.080082][T26078] vlan2: entered promiscuous mode [ 574.128111][ T6772] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 574.145486][ T6772] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 574.167480][T26082] x_tables: duplicate entry at hook 1 [ 574.178549][ T5899] IPVS: starting estimator thread 0... [ 574.193484][T26083] netlink: 64 bytes leftover after parsing attributes in process `syz.0.5968'. [ 574.284479][T26084] IPVS: using max 26 ests per chain, 62400 per kthread [ 574.306956][T26087] Bluetooth: MGMT ver 1.23 [ 574.435219][T26102] netlink: 8 bytes leftover after parsing attributes in process `syz.0.5973'. [ 574.441227][T26095] bond0: entered promiscuous mode [ 574.444233][T26102] netlink: 12 bytes leftover after parsing attributes in process `syz.0.5973'. [ 574.466924][T26102] netlink: 'syz.0.5973': attribute type 18 has an invalid length. [ 574.661665][T26113] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 574.708929][T26112] bond13: option lp_interval: invalid value (0) [ 574.715964][T26112] bond13: option lp_interval: allowed values 1 - 2147483647 [ 574.757572][T26112] bond13 (unregistering): Released all slaves [ 575.087122][T26134] siw: device registration error -23 [ 575.209798][T26136] netlink: 'syz.6.5983': attribute type 2 has an invalid length. [ 575.254879][T26136] 9: entered promiscuous mode [ 575.491980][T26142] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check. [ 575.518818][ T5831] Bluetooth: hci1: unexpected cc 0x0c03 length: 249 > 1 [ 575.531144][ T5831] Bluetooth: hci1: unexpected cc 0x1003 length: 249 > 9 [ 575.540180][ T5831] Bluetooth: hci1: unexpected cc 0x1001 length: 249 > 9 [ 575.548614][ T5831] Bluetooth: hci1: unexpected cc 0x0c23 length: 249 > 4 [ 575.556537][ T5831] Bluetooth: hci1: unexpected cc 0x0c38 length: 249 > 2 [ 575.651583][T16060] netdevsim netdevsim4 eth3 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 575.663873][T16060] netdevsim netdevsim4 eth3 (unregistering): unset [1, 0] type 2 family 0 port 256 - 0 [ 575.694577][T16060] netdevsim netdevsim4 eth3 (unregistering): unset [1, 1] type 2 family 0 port 6081 - 0 [ 575.790489][T26152] wlan0 speed is unknown, defaulting to 1000 [ 575.820582][T16060] netdevsim netdevsim4 eth2 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 575.835795][T16060] netdevsim netdevsim4 eth2 (unregistering): unset [1, 0] type 2 family 0 port 256 - 0 [ 575.848331][T16060] netdevsim netdevsim4 eth2 (unregistering): unset [1, 1] type 2 family 0 port 6081 - 0 [ 575.995784][T16060] netdevsim netdevsim4 eth1 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 576.015610][T26177] netlink: 'syz.0.5996': attribute type 1 has an invalid length. [ 576.023534][T16060] netdevsim netdevsim4 eth1 (unregistering): unset [1, 0] type 2 family 0 port 256 - 0 [ 576.038873][T16060] netdevsim netdevsim4 eth1 (unregistering): unset [1, 1] type 2 family 0 port 6081 - 0 [ 576.149359][T26177] 8021q: adding VLAN 0 to HW filter on device bond8 [ 576.169112][T26179] bond8: option lacp_active: mode dependency failed, not supported in mode balance-alb(6) [ 576.208204][T16060] netdevsim netdevsim4 eth0 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 576.249434][T16060] netdevsim netdevsim4 eth0 (unregistering): unset [1, 0] type 2 family 0 port 256 - 0 [ 576.301799][T16060] netdevsim netdevsim4 eth0 (unregistering): unset [1, 1] type 2 family 0 port 6081 - 0 [ 576.357854][T26183] dvmrp6: entered allmulticast mode [ 576.378754][T26152] lo speed is unknown, defaulting to 1000 [ 576.658755][T26208] wg1: left allmulticast mode [ 576.689491][T26208] veth0_to_hsr: left allmulticast mode [ 576.695257][T26214] netlink: 'syz.5.6004': attribute type 1 has an invalid length. [ 576.698262][T26208] vlan0: left allmulticast mode [ 576.718575][T26208] bond1: left allmulticast mode [ 576.723972][T26208] bond2: left allmulticast mode [ 576.735218][T26208] ip6gretap1: left allmulticast mode [ 576.741454][T26208] gtp1: left allmulticast mode [ 576.747838][T26208] vlan2: left allmulticast mode [ 576.747970][T26217] __nla_validate_parse: 5 callbacks suppressed [ 576.747984][T26217] netlink: 40 bytes leftover after parsing attributes in process `syz.6.6005'. [ 576.754094][T26208] hsr0: left allmulticast mode [ 576.777047][T26208] hsr_slave_0: left allmulticast mode [ 576.782462][T26208] hsr_slave_1: left allmulticast mode [ 576.789239][T26208] gretap2: left allmulticast mode [ 576.790294][T26217] netlink: 12 bytes leftover after parsing attributes in process `syz.6.6005'. [ 576.795714][T26208] bridge6: left allmulticast mode [ 576.811233][T26208] veth9: left allmulticast mode [ 576.811291][T26217] netlink: 8 bytes leftover after parsing attributes in process `syz.6.6005'. [ 576.817488][T26208] bond0: left promiscuous mode [ 576.865680][T26214] workqueue: Failed to create a rescuer kthread for wq "bond1": -EINTR [ 577.142680][T26231] netlink: 20 bytes leftover after parsing attributes in process `syz.2.6009'. [ 577.191333][T26235] netlink: 'syz.5.6010': attribute type 1 has an invalid length. [ 577.318163][T26237] netlink: 20 bytes leftover after parsing attributes in process `syz.2.6009'. [ 577.346441][T26237] nbd: device at index 64 is going down [ 577.528216][T16060] bond4 (unregistering): (slave gretap1): Releasing active interface [ 577.641678][T16060] team0: Port device geneve0 removed [ 577.645159][ T5840] Bluetooth: hci1: command tx timeout [ 577.966766][T16060] bond5 (unregistering): (slave bridge5): Releasing backup interface [ 577.974963][T16060] bridge5 (unregistering): left promiscuous mode [ 578.111176][T16060] ` (unregistering): Released all slaves [ 578.123684][T16060] bond1 (unregistering): Released all slaves [ 578.137041][T16060] bond2 (unregistering): Released all slaves [ 578.149678][T16060] bond3 (unregistering): Released all slaves [ 578.166048][T16060] bond4 (unregistering): Released all slaves [ 578.185532][T16060] bond0 (unregistering): Released all slaves [ 578.307728][T16060] bond5 (unregistering): Released all slaves [ 578.331093][T26229] bridge0: port 1(bridge_slave_0) entered disabled state [ 578.340224][T26229] bridge0: port 2(bridge_slave_1) entered disabled state [ 578.500926][T26244] netlink: 12 bytes leftover after parsing attributes in process `syz.0.6011'. [ 578.590745][T26248] netlink: 48 bytes leftover after parsing attributes in process `syz.2.6013'. [ 578.762819][T26255] netlink: 'syz.6.6016': attribute type 12 has an invalid length. [ 578.791960][T26257] netlink: 32 bytes leftover after parsing attributes in process `syz.5.6017'. [ 578.949497][T26263] syzkaller1: entered promiscuous mode [ 578.956227][T26263] syzkaller1: entered allmulticast mode [ 579.025252][T26269] IPv6: sit3: Disabled Multicast RS [ 579.031688][T26269] sit3: entered allmulticast mode [ 579.107020][T26276] netlink: 80 bytes leftover after parsing attributes in process `syz.0.6024'. [ 579.153028][T26276] ip_vti0: entered promiscuous mode [ 579.195665][T26286] netlink: 8 bytes leftover after parsing attributes in process `syz.5.6025'. [ 579.241105][T26286] gtp0: entered promiscuous mode [ 579.258486][T26286] gtp0: entered allmulticast mode [ 579.333314][T26292] gtp2: entered promiscuous mode [ 579.362658][T26292] gtp2: entered allmulticast mode [ 579.510847][T26152] chnl_net:caif_netlink_parms(): no params data found [ 579.570645][T26305] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 579.580109][ C0] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 579.727755][ T5840] Bluetooth: hci1: command tx timeout [ 579.740394][T26152] bridge0: port 1(bridge_slave_0) entered blocking state [ 579.751385][T26152] bridge0: port 1(bridge_slave_0) entered disabled state [ 579.758865][T26152] bridge_slave_0: entered allmulticast mode [ 579.766931][T26152] bridge_slave_0: entered promiscuous mode [ 579.776343][T26152] bridge0: port 2(bridge_slave_1) entered blocking state [ 579.783585][T26152] bridge0: port 2(bridge_slave_1) entered disabled state [ 579.791114][T26152] bridge_slave_1: entered allmulticast mode [ 579.799913][T26152] bridge_slave_1: entered promiscuous mode [ 579.897349][T26152] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 579.910726][T26152] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 580.019199][T26152] team0: Port device team_slave_0 added [ 580.035465][T16060] : left promiscuous mode [ 580.066596][T26152] team0: Port device team_slave_1 added [ 580.221471][T16060] tipc: Disabling bearer [ 580.234114][T26152] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 580.244423][T16060] tipc: Left network mode [ 580.251643][T26152] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 580.279671][T26152] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 580.303640][T26152] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 580.325853][T26152] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 580.353874][T26152] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 580.366012][T11274] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 580.496668][T26152] hsr_slave_0: entered promiscuous mode [ 580.513681][T26152] hsr_slave_1: entered promiscuous mode [ 580.528483][T26152] debugfs: 'hsr0' already exists in 'hsr' [ 580.543317][T26152] Cannot create hsr debugfs directory [ 580.715813][T26367] netlink: 'syz.5.6047': attribute type 12 has an invalid length. [ 580.777023][T26367] bond1: option primary_reselect: invalid value (255) [ 580.787359][T26367] bond1 (unregistering): Released all slaves [ 581.257914][T26389] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 581.267570][ C0] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 581.342194][T26397] rdma_rxe: rxe_newlink: failed to add lo [ 581.405163][T11517] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 581.740762][T26418] netlink: 'syz.5.6061': attribute type 1 has an invalid length. [ 581.751475][T26418] nbd: error processing sock list [ 581.814805][ T5840] Bluetooth: hci1: command tx timeout [ 581.898638][T26420] __nla_validate_parse: 2 callbacks suppressed [ 581.898657][T26420] netlink: 36 bytes leftover after parsing attributes in process `syz.0.6062'. [ 581.948966][T26423] netlink: 36 bytes leftover after parsing attributes in process `syz.0.6062'. [ 581.964879][ T1223] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 582.059692][T26152] netdevsim netdevsim4 netdevsim0: renamed from eth0 [ 582.100039][T26152] netdevsim netdevsim4 netdevsim1: renamed from eth1 [ 582.161182][T26152] netdevsim netdevsim4 netdevsim2: renamed from eth2 [ 582.202882][T26152] netdevsim netdevsim4 netdevsim3: renamed from eth3 [ 582.268670][T26434] workqueue: Failed to create a rescuer kthread for wq "nfc2_nci_rx_wq": -EINTR [ 582.271715][T26436] workqueue: Failed to create a rescuer kthread for wq "nfc2_nci_cmd_wq": -EINTR [ 582.399795][T26447] tipc: Enabled bearer , priority 0 [ 582.445548][T11274] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 582.462994][T26452] syzkaller0: entered promiscuous mode [ 582.482389][T26452] syzkaller0: entered allmulticast mode [ 582.562496][T26457] bridge0: port 1(bridge_slave_0) entered blocking state [ 582.569747][T26457] bridge0: port 1(bridge_slave_0) entered forwarding state [ 582.603573][T26457] bridge0: port 2(bridge_slave_1) entered blocking state [ 582.610824][T26457] bridge0: port 2(bridge_slave_1) entered forwarding state [ 582.723975][T26463] tipc: Resetting bearer [ 582.736844][ T1223] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 582.774757][T26470] netlink: 8 bytes leftover after parsing attributes in process `syz.2.6076'. [ 582.795678][T16060] hsr_slave_0: left promiscuous mode [ 582.861415][T26473] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 582.867427][T16060] veth0_macvtap: left allmulticast mode [ 582.870244][ C0] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 582.887570][T16060] veth1_macvtap: left promiscuous mode [ 582.893162][T16060] veth0_macvtap: left promiscuous mode [ 582.914126][T26477] netlink: 40 bytes leftover after parsing attributes in process `syz.5.6079'. [ 582.955376][T26477] netlink: 8 bytes leftover after parsing attributes in process `syz.5.6079'. [ 583.197314][T26488] netlink: 'syz.2.6081': attribute type 1 has an invalid length. [ 583.327277][T11261] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 583.896882][ T5840] Bluetooth: hci1: command tx timeout [ 584.209237][T16060] pimreg (unregistering): left allmulticast mode [ 584.230714][T16060] pimreg3 (unregistering): left allmulticast mode [ 584.912823][T26446] tipc: Resetting bearer [ 584.932429][T26446] tipc: Disabling bearer [ 584.956011][T26488] workqueue: Failed to create a rescuer kthread for wq "bond13": -EINTR [ 584.971854][T26490] gretap2: entered promiscuous mode [ 585.008962][T11274] tipc: Node number set to 2886997007 [ 585.150203][T26498] netlink: 65039 bytes leftover after parsing attributes in process `syz.5.6083'. [ 585.209092][T26498] xt_hashlimit: max too large, truncated to 1048576 [ 585.221094][T26501] bridge0: port 1(bridge_slave_0) entered disabled state [ 585.276204][T26501] bridge0: port 2(bridge_slave_1) entered disabled state [ 585.390280][T26152] 8021q: adding VLAN 0 to HW filter on device bond0 [ 585.416787][T26517] net veth1_virt_wifi .: renamed from virt_wifi0 [ 585.527742][ T30] audit: type=1107 audit(1764041725.710:7): pid=26521 uid=0 auid=4294967295 ses=4294967295 subj=unconfined msg='\!GFyW wlY{H ^!ձM7^[ 5(rWDZSO7kOL0ub8J{!Q90S TM1w0BNSlz83R^Ee 샃&b *˃D' [ 585.565725][T11274] net_ratelimit: 4 callbacks suppressed [ 585.565745][T11274] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 585.721053][T26152] 8021q: adding VLAN 0 to HW filter on device team0 [ 585.765716][T10437] bridge0: port 1(bridge_slave_0) entered blocking state [ 585.772909][T10437] bridge0: port 1(bridge_slave_0) entered forwarding state [ 585.824329][T26530] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 585.853493][T26528] syzkaller0: entered promiscuous mode [ 585.861350][T26528] syzkaller0: entered allmulticast mode [ 585.903784][ T6766] bridge0: port 2(bridge_slave_1) entered blocking state [ 585.911030][ T6766] bridge0: port 2(bridge_slave_1) entered forwarding state [ 585.929350][T26535] xt_ipcomp: unknown flags 1D [ 585.970828][ T5907] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 586.072075][T16060] IPVS: stop unused estimator thread 0... [ 586.464250][T26562] netlink: 140 bytes leftover after parsing attributes in process `syz.5.6105'. [ 586.496226][T26564] netlink: 140 bytes leftover after parsing attributes in process `syz.5.6105'. [ 586.538684][T26152] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 586.604806][ C1] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 586.617569][T11273] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 587.209078][T26600] netlink: 8 bytes leftover after parsing attributes in process `syz.2.6117'. [ 587.218477][T26601] netlink: 'syz.6.6115': attribute type 21 has an invalid length. [ 587.226812][T26600] netlink: 8 bytes leftover after parsing attributes in process `syz.2.6117'. [ 587.229362][T26152] veth0_vlan: entered promiscuous mode [ 587.235991][T26601] netlink: 156 bytes leftover after parsing attributes in process `syz.6.6115'. [ 587.274056][T26152] veth1_vlan: entered promiscuous mode [ 587.317045][T26152] veth0_macvtap: entered promiscuous mode [ 587.343764][T26152] veth1_macvtap: entered promiscuous mode [ 587.362296][T26605] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 587.427880][ C0] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 587.456853][T26605] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 587.475005][T26152] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 587.488271][T26152] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 587.539250][ C1] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 587.548798][T26601] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 587.642745][ T6774] netdevsim netdevsim4 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 587.658497][ T6774] netdevsim netdevsim4 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 587.686906][ T6774] netdevsim netdevsim4 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 587.742004][ T6774] netdevsim netdevsim4 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 587.789254][T26614] netlink: 12 bytes leftover after parsing attributes in process `syz.0.6120'. [ 587.830762][ T6772] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 587.861723][ T6772] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 587.966183][ T7886] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 587.984252][ T7886] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 588.050963][T26633] netlink: 277 bytes leftover after parsing attributes in process `syz.5.6125'. [ 588.245938][T26646] netlink: 1 bytes leftover after parsing attributes in process `syz.4.6127'. [ 588.397274][T26652] netlink: 12 bytes leftover after parsing attributes in process `syz.6.6130'. [ 588.579213][T26657] bridge8: trying to set multicast startup query interval above maximum, setting to 8640000 (86400000ms) [ 589.270835][T26691] netlink: 48 bytes leftover after parsing attributes in process `syz.6.6141'. [ 589.270999][ T5831] Bluetooth: hci2: unexpected cc 0x0c03 length: 249 > 1 [ 589.294146][ T5831] Bluetooth: hci2: unexpected cc 0x1003 length: 249 > 9 [ 589.303293][ T5831] Bluetooth: hci2: unexpected cc 0x1001 length: 249 > 9 [ 589.311517][ T5831] Bluetooth: hci2: unexpected cc 0x0c23 length: 249 > 4 [ 589.320442][ T5831] Bluetooth: hci2: unexpected cc 0x0c38 length: 249 > 2 [ 590.765032][T11274] net_ratelimit: 17 callbacks suppressed [ 590.765052][T11274] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 590.778824][ T5907] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 591.046986][T26688] wlan0 speed is unknown, defaulting to 1000 [ 591.185739][T26715] netlink: 'syz.5.6148': attribute type 1 has an invalid length. [ 591.306979][T26719] team0: Device ip6gre2 is of different type [ 591.405359][ T5831] Bluetooth: hci2: command tx timeout [ 591.454928][T26722] 8021q: adding VLAN 0 to HW filter on device bond2 [ 591.463743][T26722] bond1: (slave bond2): making interface the new active one [ 591.471840][T26722] bond1: (slave bond2): Enslaving as an active interface with an up link [ 591.493198][T26725] tipc: Started in network mode [ 591.503234][T26725] tipc: Node identity 6e7b41a98d9c, cluster identity 4711 [ 591.511335][T26725] tipc: Enabled bearer , priority 0 [ 591.518518][T26688] lo speed is unknown, defaulting to 1000 [ 591.525698][T26715] +: renamed from syzkaller0 [ 591.578910][T26715] tipc: Disabling bearer [ 591.601937][T26715] bond1: (slave ipvlan2): enslaved VLAN challenged slave. Adding VLANs will be blocked as long as it is part of bond. [ 591.651852][T26715] bond1: (slave ipvlan2): The slave device specified does not support setting the MAC address [ 591.666942][T26739] netlink: 16 bytes leftover after parsing attributes in process `syz.0.6158'. [ 591.677997][T26740] netlink: 56 bytes leftover after parsing attributes in process `syz.6.6157'. [ 591.805522][T11274] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 592.255428][T26773] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 592.279049][T26776] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 592.745184][T26802] __nla_validate_parse: 3 callbacks suppressed [ 592.745203][T26802] netlink: 36 bytes leftover after parsing attributes in process `syz.5.6179'. [ 592.781420][T26800] netlink: 4 bytes leftover after parsing attributes in process `syz.4.6177'. [ 592.783580][T26804] Cannot find add_set index 0 as target [ 592.847296][T11274] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 593.152724][T26688] chnl_net:caif_netlink_parms(): no params data found [ 593.163871][T26824] netlink: 20 bytes leftover after parsing attributes in process `syz.0.6186'. [ 593.255790][T26828] netlink: 8 bytes leftover after parsing attributes in process `syz.5.6188'. [ 593.273694][T26834] xt_addrtype: input interface limitation not valid in POSTROUTING and OUTPUT [ 593.300933][T26833] netlink: 24 bytes leftover after parsing attributes in process `syz.4.6189'. [ 593.469240][T26845] tipc: Failed to obtain node identity [ 593.479360][T26845] tipc: Enabling of bearer rejected, failed to enable media [ 593.492091][T26851] netlink: 'syz.5.6194': attribute type 1 has an invalid length. [ 593.494793][ T5831] Bluetooth: hci2: command tx timeout [ 593.508412][T26688] bridge0: port 1(bridge_slave_0) entered blocking state [ 593.517121][T26688] bridge0: port 1(bridge_slave_0) entered disabled state [ 593.525499][T26688] bridge_slave_0: entered allmulticast mode [ 593.533828][T26688] bridge_slave_0: entered promiscuous mode [ 593.582361][T26688] bridge0: port 2(bridge_slave_1) entered blocking state [ 593.590932][T26688] bridge0: port 2(bridge_slave_1) entered disabled state [ 593.599327][T26688] bridge_slave_1: entered allmulticast mode [ 593.613637][T26688] bridge_slave_1: entered promiscuous mode [ 593.629340][T26853] gretap1: entered promiscuous mode [ 593.731007][T26688] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 593.751313][T26688] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 593.787801][T26865] netlink: 212368 bytes leftover after parsing attributes in process `syz.4.6198'. [ 593.811703][T11261] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 593.829952][T26863] netlink: 8 bytes leftover after parsing attributes in process `syz.5.6197'. [ 593.832227][T26688] team0: Port device team_slave_0 added [ 593.853495][T26863] gtp1: entered promiscuous mode [ 593.859454][T26863] gtp1: entered allmulticast mode [ 593.869015][T26688] team0: Port device team_slave_1 added [ 593.885372][T11517] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 593.934224][T26688] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 593.941696][T26688] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 593.989045][T26688] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 594.001609][T26874] netlink: 'syz.5.6200': attribute type 2 has an invalid length. [ 594.002795][T26688] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 594.017353][T26688] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 594.044852][T26688] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 594.100803][T26878] netlink: 'syz.5.6202': attribute type 1 has an invalid length. [ 594.110792][T26879] netlink: 'syz.5.6202': attribute type 1 has an invalid length. [ 594.119766][T26878] netlink: 'syz.5.6202': attribute type 4 has an invalid length. [ 594.128762][T26879] netlink: 'syz.5.6202': attribute type 4 has an invalid length. [ 594.132084][T26878] netlink: 9462 bytes leftover after parsing attributes in process `syz.5.6202'. [ 594.146889][T26879] netlink: 9462 bytes leftover after parsing attributes in process `syz.5.6202'. [ 594.161138][T26688] hsr_slave_0: entered promiscuous mode [ 594.168448][T26688] hsr_slave_1: entered promiscuous mode [ 594.176238][T26688] debugfs: 'hsr0' already exists in 'hsr' [ 594.182115][T26688] Cannot create hsr debugfs directory [ 594.219090][T26881] netlink: 'syz.4.6203': attribute type 1 has an invalid length. [ 594.244592][T26881] netlink: 'syz.4.6203': attribute type 4 has an invalid length. [ 594.252554][T26881] netlink: 9462 bytes leftover after parsing attributes in process `syz.4.6203'. [ 594.498121][T26898] netlink: 'syz.0.6207': attribute type 32 has an invalid length. [ 594.579665][T26898] bond9: Setting coupled_control to off (0) [ 594.925513][T11274] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 595.163701][T11274] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 595.564654][ T5831] Bluetooth: hci2: command tx timeout [ 595.965199][T11274] net_ratelimit: 1 callbacks suppressed [ 595.965219][T11274] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 596.010176][T26688] netdevsim netdevsim2 netdevsim0: renamed from eth0 [ 596.053220][T26688] netdevsim netdevsim2 netdevsim1: renamed from eth1 [ 596.097231][T26688] netdevsim netdevsim2 netdevsim2: renamed from eth2 [ 596.146740][T26688] netdevsim netdevsim2 netdevsim3: renamed from eth3 [ 596.560631][T26688] 8021q: adding VLAN 0 to HW filter on device bond0 [ 596.670263][T26688] 8021q: adding VLAN 0 to HW filter on device team0 [ 596.767196][ T6764] bridge0: port 1(bridge_slave_0) entered blocking state [ 596.774405][ T6764] bridge0: port 1(bridge_slave_0) entered forwarding state [ 596.837185][ T6764] bridge0: port 2(bridge_slave_1) entered blocking state [ 596.844404][ T6764] bridge0: port 2(bridge_slave_1) entered forwarding state [ 597.007758][T11517] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 597.648285][ T5831] Bluetooth: hci2: command tx timeout [ 597.770879][T26688] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 597.948821][T26688] veth0_vlan: entered promiscuous mode [ 598.007839][T26688] veth1_vlan: entered promiscuous mode [ 598.065106][T11273] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 598.174882][T26688] veth0_macvtap: entered promiscuous mode [ 598.206338][T11261] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 598.249282][T26688] veth1_macvtap: entered promiscuous mode [ 598.336441][T26688] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 598.369300][T26688] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 598.435678][ T6766] netdevsim netdevsim2 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 598.474541][ T6766] netdevsim netdevsim2 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 598.483306][ T6766] netdevsim netdevsim2 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 598.554559][ T6766] netdevsim netdevsim2 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 598.786963][ T6764] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 598.799371][ T6764] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 598.842607][T26972] netlink: 'syz.0.6223': attribute type 1 has an invalid length. [ 598.874487][ T6764] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 598.882340][ T6764] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 598.920604][T26972] 8021q: adding VLAN 0 to HW filter on device bond10 [ 598.978198][T26976] bond10: (slave veth11): Enslaving as an active interface with a down link [ 599.053658][T26974] bridge1: the hash_elasticity option has been deprecated and is always 16 [ 599.087434][T11274] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 599.113207][T26972] bond10: (slave veth0_to_bond): Enslaving as an active interface with a down link [ 599.135108][T26993] __nla_validate_parse: 4 callbacks suppressed [ 599.135126][T26993] netlink: 4 bytes leftover after parsing attributes in process `syz.5.6227'. [ 599.182084][T26995] netlink: 8 bytes leftover after parsing attributes in process `syz.6.6228'. [ 599.209375][T26976] bond10: (slave veth13): Enslaving as an active interface with a down link [ 599.284234][T26996] bond4: option miimon: invalid value (18446744073709551585) [ 599.293826][T26996] bond4: option miimon: allowed values 0 - 2147483647 [ 599.301543][T27003] netlink: 5 bytes leftover after parsing attributes in process `syz.0.6229'. [ 599.302913][T26996] bond4 (unregistering): Released all slaves [ 599.311377][T27003] netlink: 5 bytes leftover after parsing attributes in process `syz.0.6229'. [ 599.327935][T27003] netlink: 24 bytes leftover after parsing attributes in process `syz.0.6229'. [ 599.360515][T26995] sch_fq: defrate 0 ignored. [ 599.412593][ T5906] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 599.549166][T27020] netlink: 1 bytes leftover after parsing attributes in process `syz.6.6232'. [ 600.063239][T27053] bond0: entered allmulticast mode [ 600.083473][T27053] bond_slave_0: entered allmulticast mode [ 600.097373][T27053] bond_slave_1: entered allmulticast mode [ 600.127710][T11273] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 600.131474][T27053] syzkaller1: entered promiscuous mode [ 600.143645][T27053] syzkaller1: entered allmulticast mode [ 600.180568][T27058] netlink: 40 bytes leftover after parsing attributes in process `syz.6.6243'. [ 600.190636][T27058] netlink: 40 bytes leftover after parsing attributes in process `syz.6.6243'. [ 600.204990][T27058] A link change request failed with some changes committed already. Interface vcan0 may have been left with an inconsistent configuration, please check. [ 600.320603][T27067] netlink: 28 bytes leftover after parsing attributes in process `syz.4.6246'. [ 600.429463][T27072] netlink: 12 bytes leftover after parsing attributes in process `syz.6.6247'. [ 600.689286][ T5907] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 600.729646][T27088] block nbd0: reconnected socket [ 600.752193][ T5831] block nbd0: Receive control failed (result -32) [ 601.079833][T27106] netlink: 'syz.2.6258': attribute type 12 has an invalid length. [ 601.115045][T27106] netlink: 'syz.2.6258': attribute type 29 has an invalid length. [ 601.165590][T11273] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 601.384025][ T5840] Bluetooth: hci3: unexpected cc 0x0c03 length: 249 > 1 [ 601.395405][ T5840] Bluetooth: hci3: unexpected cc 0x1003 length: 249 > 9 [ 601.411237][ T5840] Bluetooth: hci3: unexpected cc 0x1001 length: 249 > 9 [ 601.420460][ T5840] Bluetooth: hci3: unexpected cc 0x0c23 length: 249 > 4 [ 601.428362][ T5840] Bluetooth: hci3: unexpected cc 0x0c38 length: 249 > 2 [ 601.526839][T27114] wlan0 speed is unknown, defaulting to 1000 [ 601.608140][T27127] dvmrp0: entered allmulticast mode [ 601.944137][T27141] bridge: RTM_NEWNEIGH bridge0 without NUD_PERMANENT [ 602.021174][T27114] lo speed is unknown, defaulting to 1000 [ 602.031185][T27152] workqueue: Failed to create a rescuer kthread for wq "nfc3_nci_cmd_wq": -EINTR [ 602.211663][T11273] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 602.380069][T27168] syzkaller0: entered promiscuous mode [ 602.386191][T27168] syzkaller0: entered allmulticast mode [ 602.486040][T27173] delete_channel: no stack [ 602.500533][T27171] Bluetooth: hci0: Opcode 0x0c03 failed: -4 [ 602.521370][T27174] Bluetooth: hci0: Opcode 0x0c03 failed: -4 [ 602.606648][ T5907] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 603.139306][T27203] netlink: 'syz.5.6285': attribute type 6 has an invalid length. [ 603.244879][ C1] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 603.254312][T11274] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 603.374267][T27208] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 603.485893][ T5840] Bluetooth: hci3: command tx timeout [ 603.613041][T27217] openvswitch: netlink: Missing key (keys=40, expected=200000) [ 603.667566][T27228] 8021q: VLANs not supported on gre0 [ 603.712320][T27114] chnl_net:caif_netlink_parms(): no params data found [ 603.740941][ T5907] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 604.124585][T27114] bridge0: port 1(bridge_slave_0) entered blocking state [ 604.136652][T27254] netlink: 'syz.2.6305': attribute type 11 has an invalid length. [ 604.144968][T27114] bridge0: port 1(bridge_slave_0) entered disabled state [ 604.152829][T27114] bridge_slave_0: entered allmulticast mode [ 604.159368][T27254] __nla_validate_parse: 21 callbacks suppressed [ 604.159387][T27254] netlink: 224 bytes leftover after parsing attributes in process `syz.2.6305'. [ 604.161246][T27114] bridge_slave_0: entered promiscuous mode [ 604.198596][T27243] netlink: 8 bytes leftover after parsing attributes in process `syz.6.6301'. [ 604.210930][T27114] bridge0: port 2(bridge_slave_1) entered blocking state [ 604.223306][T27114] bridge0: port 2(bridge_slave_1) entered disabled state [ 604.232698][T27114] bridge_slave_1: entered allmulticast mode [ 604.244011][T27114] bridge_slave_1: entered promiscuous mode [ 604.274736][T27255] nbd5: detected capacity change from 0 to 127 [ 604.285266][T11274] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 604.374628][T27263] nbd6: detected capacity change from 0 to 127 [ 604.439594][T27114] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 604.450239][ T5840] block nbd5: Receive control failed (result -32) [ 604.451015][ T5831] block nbd6: Receive control failed (result -32) [ 604.471054][T27114] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 604.480338][T27270] netlink: 8 bytes leftover after parsing attributes in process `syz.5.6308'. [ 604.515452][T27270] netlink: 4 bytes leftover after parsing attributes in process `syz.5.6308'. [ 604.538004][T27270] netlink: 'syz.5.6308': attribute type 12 has an invalid length. [ 604.557019][T27270] netlink: 'syz.5.6308': attribute type 11 has an invalid length. [ 604.598686][T27114] team0: Port device team_slave_0 added [ 604.665633][T27114] team0: Port device team_slave_1 added [ 604.812682][T27286] netlink: 20 bytes leftover after parsing attributes in process `syz.6.6314'. [ 604.836817][T27114] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 604.875385][T27114] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 604.909659][T27114] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 604.923838][T27114] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 604.931363][T27114] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 604.957817][T27114] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 605.005160][T27295] netlink: 4 bytes leftover after parsing attributes in process `syz.5.6315'. [ 605.118231][T27303] netlink: 56 bytes leftover after parsing attributes in process `syz.4.6316'. [ 605.127601][T27114] hsr_slave_0: entered promiscuous mode [ 605.137093][T27114] hsr_slave_1: entered promiscuous mode [ 605.143925][T27114] debugfs: 'hsr0' already exists in 'hsr' [ 605.150618][T27114] Cannot create hsr debugfs directory [ 605.182779][T27303] bond1: (slave ip6_vti0): Device is not bonding slave [ 605.189965][T27303] bond1: option active_slave: invalid value (ip6_vti0) [ 605.200874][T27303] bond1 (unregistering): Released all slaves [ 605.325571][T11274] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 605.552208][T27316] netlink: 20 bytes leftover after parsing attributes in process `syz.4.6321'. [ 605.566165][ T5831] Bluetooth: hci3: command tx timeout [ 605.910963][T27114] netdevsim netdevsim0 netdevsim0: renamed from eth0 [ 605.946757][T27114] netdevsim netdevsim0 netdevsim1: renamed from eth1 [ 606.062803][T27323] syzkaller0: entered promiscuous mode [ 606.068470][T27323] syzkaller0: entered allmulticast mode [ 606.075379][T27114] netdevsim netdevsim0 netdevsim2: renamed from eth2 [ 606.165757][T27347] netlink: 8 bytes leftover after parsing attributes in process `syz.5.6331'. [ 606.194570][T27347] netlink: 8 bytes leftover after parsing attributes in process `syz.5.6331'. [ 606.197603][T27336] bridge0: port 2(bridge_slave_1) entered disabled state [ 606.211008][T27336] bridge0: port 1(bridge_slave_0) entered disabled state [ 606.365521][T11274] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 606.780890][ T1223] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 607.407829][ T5899] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 607.648679][ T5831] Bluetooth: hci3: command tx timeout [ 608.041234][T27114] netdevsim netdevsim0 netdevsim3: renamed from eth3 [ 608.058449][T27356] netlink: 'syz.2.6333': attribute type 11 has an invalid length. [ 608.322566][T27114] 8021q: adding VLAN 0 to HW filter on device bond0 [ 608.369766][T27114] 8021q: adding VLAN 0 to HW filter on device team0 [ 608.388566][T27380] netlink: 'syz.2.6338': attribute type 3 has an invalid length. [ 608.417155][ T7886] bridge0: port 1(bridge_slave_0) entered blocking state [ 608.424312][ T7886] bridge0: port 1(bridge_slave_0) entered forwarding state [ 608.445178][T11274] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 608.490624][ T7886] bridge0: port 2(bridge_slave_1) entered blocking state [ 608.497861][ T7886] bridge0: port 2(bridge_slave_1) entered forwarding state [ 608.547196][T27400] pim6reg: entered allmulticast mode [ 608.808459][T27412] [ 608.810827][T27412] ====================================================== [ 608.817848][T27412] WARNING: possible circular locking dependency detected [ 608.824879][T27412] syzkaller #0 Not tainted [ 608.829291][T27412] ------------------------------------------------------ [ 608.836309][T27412] syz.4.6348/27412 is trying to acquire lock: [ 608.842362][T27412] ffffffff8f426ab8 (nr_node_list_lock){+...}-{3:3}, at: nr_rt_device_down+0xa9/0x720 [ 608.851855][T27412] [ 608.851855][T27412] but task is already holding lock: [ 608.859242][T27412] ffffffff8f426a58 (nr_neigh_list_lock){+...}-{3:3}, at: nr_rt_device_down+0x28/0x720 [ 608.869090][T27412] [ 608.869090][T27412] which lock already depends on the new lock. [ 608.869090][T27412] [ 608.879569][T27412] [ 608.879569][T27412] the existing dependency chain (in reverse order) is: [ 608.888588][T27412] [ 608.888588][T27412] -> #2 (nr_neigh_list_lock){+...}-{3:3}: [ 608.896501][T27412] lock_acquire+0x120/0x360 [ 608.901522][T27412] _raw_spin_lock_bh+0x36/0x50 [ 608.906808][T27412] nr_rt_ioctl+0x390/0xd50 [ 608.911750][T27412] sock_do_ioctl+0xdc/0x300 [ 608.916783][T27412] sock_ioctl+0x576/0x790 [ 608.921636][T27412] __se_sys_ioctl+0xfc/0x170 [ 608.926744][T27412] do_syscall_64+0xfa/0xfa0 [ 608.931774][T27412] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 608.938181][T27412] [ 608.938181][T27412] -> #1 (&nr_node->node_lock){+...}-{3:3}: [ 608.946173][T27412] lock_acquire+0x120/0x360 [ 608.951216][T27412] _raw_spin_lock_bh+0x36/0x50 [ 608.956506][T27412] nr_rt_ioctl+0x193/0xd50 [ 608.961443][T27412] sock_do_ioctl+0xdc/0x300 [ 608.966465][T27412] sock_ioctl+0x576/0x790 [ 608.971314][T27412] __se_sys_ioctl+0xfc/0x170 [ 608.976420][T27412] do_syscall_64+0xfa/0xfa0 [ 608.981454][T27412] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 608.987864][T27412] [ 608.987864][T27412] -> #0 (nr_node_list_lock){+...}-{3:3}: [ 608.995720][T27412] validate_chain+0xb9b/0x2140 [ 609.001008][T27412] __lock_acquire+0xab9/0xd20 [ 609.006246][T27412] lock_acquire+0x120/0x360 [ 609.011310][T27412] _raw_spin_lock_bh+0x36/0x50 [ 609.016599][T27412] nr_rt_device_down+0xa9/0x720 [ 609.021971][T27412] nr_device_event+0x137/0x150 [ 609.027270][T27412] notifier_call_chain+0x1b6/0x3e0 [ 609.032903][T27412] __dev_notify_flags+0x18d/0x2e0 [ 609.038444][T27412] netif_change_flags+0xe8/0x1a0 [ 609.043902][T27412] dev_change_flags+0x130/0x260 [ 609.049265][T27412] dev_ioctl+0x7b4/0x1150 [ 609.054126][T27412] sock_do_ioctl+0x22c/0x300 [ 609.059235][T27412] sock_ioctl+0x576/0x790 [ 609.064101][T27412] __se_sys_ioctl+0xfc/0x170 [ 609.069212][T27412] do_syscall_64+0xfa/0xfa0 [ 609.074245][T27412] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 609.080656][T27412] [ 609.080656][T27412] other info that might help us debug this: [ 609.080656][T27412] [ 609.090886][T27412] Chain exists of: [ 609.090886][T27412] nr_node_list_lock --> &nr_node->node_lock --> nr_neigh_list_lock [ 609.090886][T27412] [ 609.104716][T27412] Possible unsafe locking scenario: [ 609.104716][T27412] [ 609.112275][T27412] CPU0 CPU1 [ 609.117643][T27412] ---- ---- [ 609.123003][T27412] lock(nr_neigh_list_lock); [ 609.127681][T27412] lock(&nr_node->node_lock); [ 609.134960][T27412] lock(nr_neigh_list_lock); [ 609.142167][T27412] lock(nr_node_list_lock); [ 609.146754][T27412] [ 609.146754][T27412] *** DEADLOCK *** [ 609.146754][T27412] [ 609.154887][T27412] 2 locks held by syz.4.6348/27412: [ 609.160068][T27412] #0: ffffffff8f2cbd88 (rtnl_mutex){+.+.}-{4:4}, at: dev_ioctl+0x7a4/0x1150 [ 609.168869][T27412] #1: ffffffff8f426a58 (nr_neigh_list_lock){+...}-{3:3}, at: nr_rt_device_down+0x28/0x720 [ 609.178883][T27412] [ 609.178883][T27412] stack backtrace: [ 609.184762][T27412] CPU: 0 UID: 0 PID: 27412 Comm: syz.4.6348 Not tainted syzkaller #0 PREEMPT(full) [ 609.184788][T27412] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/25/2025 [ 609.184801][T27412] Call Trace: [ 609.184808][T27412] [ 609.184817][T27412] dump_stack_lvl+0x189/0x250 [ 609.184848][T27412] ? __pfx_dump_stack_lvl+0x10/0x10 [ 609.184871][T27412] ? __pfx__printk+0x10/0x10 [ 609.184888][T27412] ? print_lock_name+0xde/0x100 [ 609.184905][T27412] print_circular_bug+0x2ee/0x310 [ 609.184928][T27412] check_noncircular+0x134/0x160 [ 609.184951][T27412] validate_chain+0xb9b/0x2140 [ 609.184972][T27412] ? rt6_disable_ip+0x6b3/0x720 [ 609.185005][T27412] ? __queue_work+0xc56/0xfb0 [ 609.185026][T27412] ? __lock_acquire+0xab9/0xd20 [ 609.185042][T27412] __lock_acquire+0xab9/0xd20 [ 609.185061][T27412] ? nr_rt_device_down+0xa9/0x720 [ 609.185080][T27412] lock_acquire+0x120/0x360 [ 609.185094][T27412] ? nr_rt_device_down+0xa9/0x720 [ 609.185118][T27412] ? nr_rt_device_down+0xa9/0x720 [ 609.185136][T27412] _raw_spin_lock_bh+0x36/0x50 [ 609.185157][T27412] ? nr_rt_device_down+0xa9/0x720 [ 609.185176][T27412] nr_rt_device_down+0xa9/0x720 [ 609.185195][T27412] ? do_raw_spin_unlock+0x122/0x240 [ 609.185219][T27412] nr_device_event+0x137/0x150 [ 609.185238][T27412] notifier_call_chain+0x1b6/0x3e0 [ 609.185260][T27412] __dev_notify_flags+0x18d/0x2e0 [ 609.185279][T27412] ? __pfx___dev_notify_flags+0x10/0x10 [ 609.185294][T27412] ? __dev_change_flags+0x4cc/0x6d0 [ 609.185313][T27412] ? __pfx___dev_change_flags+0x10/0x10 [ 609.185330][T27412] ? full_name_hash+0x92/0xe0 [ 609.185350][T27412] netif_change_flags+0xe8/0x1a0 [ 609.185368][T27412] dev_change_flags+0x130/0x260 [ 609.185386][T27412] dev_ioctl+0x7b4/0x1150 [ 609.185412][T27412] sock_do_ioctl+0x22c/0x300 [ 609.185433][T27412] ? __pfx_sock_do_ioctl+0x10/0x10 [ 609.185460][T27412] sock_ioctl+0x576/0x790 [ 609.185481][T27412] ? __pfx_sock_ioctl+0x10/0x10 [ 609.185502][T27412] ? __fget_files+0x3a0/0x420 [ 609.185517][T27412] ? __fget_files+0x2a/0x420 [ 609.185533][T27412] ? bpf_lsm_file_ioctl+0x9/0x20 [ 609.185551][T27412] ? __pfx_sock_ioctl+0x10/0x10 [ 609.185571][T27412] __se_sys_ioctl+0xfc/0x170 [ 609.185593][T27412] do_syscall_64+0xfa/0xfa0 [ 609.185616][T27412] ? lockdep_hardirqs_on+0x9c/0x150 [ 609.185638][T27412] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 609.185654][T27412] ? clear_bhb_loop+0x60/0xb0 [ 609.185672][T27412] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 609.185688][T27412] RIP: 0033:0x7f513a58f749 [ 609.185704][T27412] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 609.185719][T27412] RSP: 002b:00007f513b392038 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 609.185737][T27412] RAX: ffffffffffffffda RBX: 00007f513a7e5fa0 RCX: 00007f513a58f749 [ 609.185749][T27412] RDX: 0000200000000000 RSI: 0000000000008914 RDI: 0000000000000004 [ 609.185760][T27412] RBP: 00007f513a613f91 R08: 0000000000000000 R09: 0000000000000000 [ 609.185771][T27412] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 609.185780][T27412] R13: 00007f513a7e6038 R14: 00007f513a7e5fa0 R15: 00007fffc18dc188 [ 609.185800][T27412] [ 609.497373][T11273] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 609.538673][T27415] __nla_validate_parse: 4 callbacks suppressed [ 609.538691][T27415] netlink: 4 bytes leftover after parsing attributes in process `syz.5.6350'. [ 609.633023][T27114] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 609.664090][T27114] veth0_vlan: entered promiscuous mode [ 609.673503][T27114] veth1_vlan: entered promiscuous mode [ 609.695930][T27114] veth0_macvtap: entered promiscuous mode [ 609.703804][T27114] veth1_macvtap: entered promiscuous mode [ 609.717908][T27114] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 609.727290][ T5831] Bluetooth: hci3: command tx timeout [ 609.740699][T27114] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 609.752458][T16060] netdevsim netdevsim0 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 609.761843][T16060] netdevsim netdevsim0 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 609.771703][ T6774] netdevsim netdevsim0 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 609.785007][ T6774] netdevsim netdevsim0 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 609.804424][T27114] ieee80211 phy52: Selected rate control algorithm 'minstrel_ht' [ 609.817610][ T5906] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 609.834169][T10437] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 609.836347][T27114] ieee80211 phy53: Selected rate control algorithm 'minstrel_ht' [ 609.842126][T10437] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 609.869874][ T6774] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 609.878019][ T6774] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 610.525915][T11274] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 610.935409][T11274] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 611.566001][ T5899] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 612.205279][ T5907] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 612.605067][T11273] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 613.646326][T11273] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 613.968245][ T5907] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 614.686345][T11273] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 615.725416][T11273] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 616.766513][T11274] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 617.005676][ T1223] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 617.806232][T11274] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog