last executing test programs: 6m58.625446529s ago: executing program 4 (id=4698): r0 = socket$igmp(0x2, 0x3, 0x2) r1 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r1, &(0x7f0000002c40)={0x0, 0x0, &(0x7f0000002c00)={&(0x7f0000000bc0)=@newsa={0x184, 0x10, 0x1, 0x0, 0x0, {{@in6=@mcast2, @in6=@private2, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0xee01}, {@in=@empty, 0x0, 0x6c}, @in6=@remote, {}, {}, {}, 0x0, 0x0, 0x2}, [@algo_comp={0x48, 0x3, {{'deflate\x00'}}}, @algo_auth_trunc={0x4c, 0x14, {{'vmac(tnepres-generic)\x00'}}}]}, 0x184}}, 0x0) setsockopt$MRT_ADD_VIF(r0, 0x0, 0xca, &(0x7f0000000140)={0x1, 0xc, 0x0, 0x0, @vifc_lcl_addr=@rand_addr=0xc0586300, @dev={0xac, 0x14, 0x14, 0xdc}}, 0x10) 6m58.497975554s ago: executing program 4 (id=4702): r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000200)=@base={0x11, 0x4, 0x4, 0x12}, 0x48) bpf$MAP_GET_NEXT_KEY(0x4, &(0x7f0000000000)={r0, &(0x7f0000000300), &(0x7f00000003c0)=""/174}, 0x20) r1 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$IP6T_SO_SET_ADD_COUNTERS(r1, 0x29, 0x41, &(0x7f0000000340)={'filter\x00', 0x4, [{}, {}, {}, {}]}, 0x68) r2 = socket(0x40000000015, 0x5, 0x0) bind$inet6(r2, &(0x7f0000000080)={0xa, 0x0, 0x0, @loopback}, 0x1c) sendto$inet6(r2, 0x0, 0x0, 0x0, &(0x7f0000000040)={0xa, 0x1, 0x0, @local, 0xe7a}, 0x1c) 6m58.368181406s ago: executing program 4 (id=4703): socket$nl_netfilter(0x10, 0x3, 0xc) ioctl$XFS_IOC_SCRUB_METADATA(0xffffffffffffffff, 0xc040583c, &(0x7f0000000000)={0x21, 0x1, 0x7fff, 0x2, 0x1}) r0 = bpf$MAP_CREATE(0x2000000000000000, &(0x7f0000000080)=ANY=[@ANYBLOB="0a00000004000000008000005c00000000000000", @ANYRES32, @ANYBLOB="00000000000000000000000000000000000010009e1b79e1d10af0e787d87c33c2856a95c78f636a5dff20e57a9d161735eb5432ad7fb33f3e2218f28e8212b811fe8231a2ae8dae84fb57683898dbcce2c8bbb912096d63f6551cdc536934ae694e6209cc6071498dbe6d0f790638da2628801622a1084b775ce0e5075de72a66d70a028cd83e1f2e72207f6ff05bc932dd3e8f4643f64a57d7295e3eb3cc14c9fd47ac2d43e7fdd1b0d8df810df70de7359539e9f68d971aa7e6311d7c6cfbaf139e18c9d4d80dd36024e336a58a3e7882567b4d68f139c2611c71a061dcbc85b0cbbd9d68ab165cbd49f0c5ff55ab000ab8ae1b440000", @ANYRES32=0x0, @ANYRES32, @ANYBLOB="00000000feffffff00"/28], 0x50) r1 = bpf$PROG_LOAD_XDP(0x5, &(0x7f00000003c0)={0x6, 0x9, &(0x7f00000001c0)=@raw=[@exit, @map_idx_val={0x18, 0x8, 0x6, 0x0, 0x6, 0x0, 0x0, 0x0, 0x7}, @btf_id={0x18, 0xb, 0x3, 0x0, 0x1}, @exit, @ldst={0x2, 0x0, 0x4, 0x8, 0x7, 0x40}, @map_idx={0x18, 0x1, 0x5, 0x0, 0x8}], &(0x7f0000000240)='GPL\x00', 0xa, 0x80, &(0x7f0000000280)=""/128, 0x40f00, 0x11, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, &(0x7f0000000300)={0x4, 0x7, 0xc8, 0x9}, 0x10, 0x0, 0x0, 0x3, &(0x7f0000000340)=[r0, r0], &(0x7f0000000380)=[{0x1, 0x3, 0x5, 0x7}, {0x4, 0x3, 0x3, 0x1}, {0x4, 0x4, 0x4, 0x6}], 0x10, 0x1ff}, 0x94) r2 = socket$inet6_udp(0xa, 0x2, 0x0) ioctl$sock_SIOCETHTOOL(r2, 0x8946, &(0x7f0000000400)={'bridge0\x00', &(0x7f00000005c0)=@ethtool_drvinfo={0x3, "261fb8015d98811f95d67e56c19071109e19ce3d8127268ae6c1f29c4e997824", "05c416cda3ad0f1ddbfbdf7f5c850c416dde223a04eb0a60dddeb169c69d40e7", "0c56532d2059ab029020049fe949e33e2e4bcfc8e729e1c4946326266333db29", "b940e41498e58c1e7e8b9b027bdce31b1b05c1e67d7f3d640b351a7b1ef4d685", "dbbe5f08bd16ef9bd85cb76fd4cb6114c358f303384988d679edde213943742b", "9e454a3da848a57a3bf37c85", 0x0, 0x0, 0x23a7235a, 0x5, 0xd2}}) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f00000004c0)={{r0}, &(0x7f0000000040), &(0x7f0000000480)=r1}, 0x20) 6m58.32907044s ago: executing program 4 (id=4706): getsockopt$inet_sctp6_SCTP_GET_ASSOC_STATS(0xffffffffffffffff, 0x84, 0x70, &(0x7f0000000100)={0x0, @in6={{0xa, 0x0, 0x0, @dev}}}, &(0x7f0000000000)=0x100) r0 = socket$inet(0x2, 0x3, 0x33) r1 = socket$inet6_sctp(0xa, 0x1, 0x84) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xc, 0x8031, 0xffffffffffffffff, 0x0) pselect6(0x517, 0x0, 0x0, &(0x7f00000001c0)={0x0, 0x0, 0x0, 0x700}, &(0x7f0000000240)={0x0, 0x989680}, &(0x7f00000002c0)={&(0x7f0000000280), 0x8}) setsockopt$inet_sctp6_SCTP_DELAYED_SACK(r1, 0x84, 0x10, &(0x7f0000000000)=@sack_info={0x0, 0x0, 0x6}, 0xc) getsockopt$inet_mreqsrc(r0, 0x0, 0x53, &(0x7f0000000000)={@dev, @local, @broadcast}, &(0x7f0000000040)=0x8) setsockopt$packet_int(0xffffffffffffffff, 0x107, 0x8, 0x0, 0x0) sendmsg$nl_xfrm(0xffffffffffffffff, &(0x7f0000000480)={0x0, 0x0, &(0x7f0000001f40)={&(0x7f0000000780)=ANY=[@ANYBLOB="fc000000190001000000000000000000e00000020000000000000000000000000000000000000000000000000000000100000008000000000a00000000000000", @ANYRES32=0x0, @ANYRES32, @ANYBLOB="0000000000000000a900000000000000000000000000000000000000000000000000000000000000ffffffffffffffff000000000000000000000000000000000000000000000000000a000000000000000000000080400002000000000000080000000000000000000100000000000044000500ac1414aa000000000000000000000000000000003c00000000000000ffffffff0000000000000000000000000200000004"], 0xfc}}, 0x0) r2 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r2, &(0x7f0000000380)={0x0, 0x0, &(0x7f0000000340)={&(0x7f0000001100)=ANY=[@ANYBLOB="a00000002100010000000000fbdbdf25fc020000000040000000000000000001fe800000000000000000000000000020000100004e2200000a0000a02e000000", @ANYRES32=0x0, @ANYRES32=0x0, @ANYBLOB="030000000000000050001100ffffffff000000000000000000000000ac1e0101000000000000000000000000ac14142c000000000000000000000000200100000000000000000000000000003c0400000000000008000a00"], 0xa0}, 0x1, 0x0, 0x0, 0x40000}, 0x0) r3 = socket$packet(0x11, 0x3, 0x300) setsockopt$packet_int(r3, 0x107, 0xf, &(0x7f0000000100)=0x9, 0x4) r4 = syz_init_net_socket$llc(0x1a, 0x1, 0x0) connect$llc(r4, &(0x7f00000001c0)={0x1a, 0x0, 0x0, 0x8, 0x0, 0x0, @dev}, 0x10) getpeername$llc(r4, 0x0, 0x0) getsockopt$inet_sctp6_SCTP_STREAM_SCHEDULER(r1, 0x84, 0x7b, &(0x7f00000000c0)={0x0, 0x6}, &(0x7f0000000200)=0x8) getsockopt$inet_mtu(0xffffffffffffffff, 0x0, 0xa, &(0x7f0000000040), &(0x7f0000000080)=0x4) sendto$packet(0xffffffffffffffff, 0x0, 0x0, 0x4000040, &(0x7f00000001c0)={0x11, 0x1a, 0x0, 0x1, 0xd8, 0x6, @random="32b40c6fc44c"}, 0x14) ioctl$sock_SIOCGIFINDEX(r3, 0x8933, &(0x7f0000000000)={'geneve1\x00', 0x0}) sendto$packet(r3, &(0x7f0000000180)="0b0312002e0064000200475400f6a13bb1000000086086dd4803", 0x100a6, 0x88a8ffff, &(0x7f0000000140)={0x11, 0x88a8, r5}, 0x14) 6m57.558913056s ago: executing program 4 (id=4720): socket$nl_route(0x10, 0x3, 0x0) r0 = socket$inet_tcp(0x2, 0x1, 0x0) bind$inet(r0, &(0x7f0000000240)={0x2, 0x4e20, @multicast1}, 0x10) connect$inet(r0, &(0x7f00000004c0)={0x2, 0x4e20, @dev={0xac, 0x14, 0x14, 0x23}}, 0x10) r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000100)={0x1, 0x3, &(0x7f0000001a00)=ANY=[@ANYBLOB="18000000030000000000000026d0000095002b000000000093adff012255f674412d02000000880b5f04596a5e99fce658be2f200c699223886d8be4b50000005ab527ee3697f98125f30e6326996a3cfee33025a30b45bdcf2c69d105e5e55a1d273683623f1a5dc6e3c7e20eb7a98ecf3bd2cf898e924abe26ac296f660e69ba982fd76e00dcff7f0000ca6b78ad833488cfe4109eaf009eddcf21f5c63cde2f00150200000001000000520a0000151d010000000100bf00000000cc587424363da52001a3cdf2000000db74596fd72c002a60c1bc7dc8c38b7d2e13c50424b9dd1145d03ff45f70685c6bd9ff41c69b7de406e89dcbb7677e65a88a8407a9e7f9c0e91028b0856eb1ed9474480737a55ebb0bd701f7fb21135c6172eba7eb8a341f07e5a2d1e88b3cfc22df01e4bac9d97328fa2a82b5e8741e02056d93a433f50479387467824262852c7939db5672d07cdbe8e14abf56497e5d56dbe37551b870b2851c3f0a1a9ebfcba105a6ccdd01b0f04edb256c0200000073f6db43661bd7f0e2536ffbfe5ca31b4083145531458b7d1e341c6b351ebc5223f54d6bec93f4ef088e5d1be2515226988d664709ff03f1aa3dc7f1580ace9bf2afd28d0700000000000000d6eb372713255012e028cb2654d493a0b43bf21375709f348f5eda2967199cc936859a538100070000000000dc10e13ef227f627a40000ad1fa253d33fa74f172d3407ae4e1e347c0c6ef9dd2b6bb700000000000000000c586272c3f4d79bc36315745cb149f3cb385e6add14652003c7cdd3324f07d134d3a6c718bbd1aafe1140cff0be4c6f8df084c5e9734ae30aa9af030025f01ab03a9b1074407136bc506031f0916a39d3057d55183612b39e73ae8e6dc30356886a831836469e2051d937eb85f3f2d5ae2c1dca476b97419a3b76ed62409d004d7fbe362145d19605d760df4c5124ca325d374b371867a79b35c6617fc3327191fbf514573f0e30d1d60be2168fffc2f3dccd599a2cb77f124e22f87673675805494db821f39b50d938d5fd8c6b2a3a324c257bc9110971b749ccd74089ed6b86f81ca3ba47d8f71d290ed1b1a11f7a67125170c88c3b6a50692cc0064fc6bbd312536ac15016c85c6332226401b110da9c786eeca22debc99335587b54c13c3107008fa069af8223b38ced735c2d906551004d8dc10d88738488da01ffa4add56474573c964a270000f2f16625c0c10200000000c7a5ca60fdad159f2e44171f39638410020000004825d081f2d987f05c534187738655d7dc958f2046fa0c1619a6554b82d9c162eb61ca74f1ffdaccf0ea5f06e0fca8b27ff3983ab74fd3d560700a1fab44e77e312b3b129e000302d613916c9bcf9f0000fac73a5b6bfb27f88dba816020be760f7b45e001efada8000000000000fdaf4660402f7b3b79a433e08074ea2462974a00040000eb01352638f56dae0249d15ba8767259658878b7492cfbacde9b57cf4de00788adce638190f3570e0b4c80ef682df22201270955afb6008846557ee3bc09fda6dbb6550d597300eb82a184c96ffde5a30e5433e866665b98ca2002c804c22ff2634b7bfbf5c0d586cda5b45fd00dede1e88a4d41dee7cc76d7a23d06acb1d2d4c58faea84158bb440df2a694f4cdcaa4f65c22efffffffffffdd00000000d503d79986958115ae07b70f991430b7fb475d77b869ee02000000000000000000001ffff0ef89b2a68d2b05c995445d8a7700bcdfbec74fb2dd163e863315e84498dfb52bb93f6c9084659ce777ddac563c8596c2b1d8180289a61faa95a82bf1cfb7f2fd7252e9322abe282c33445d443a67467893b9bf0d1c8130ae6b226900000635376413c29f7c6f7b7e29b9a0c64e68328661f0c06e21f7d7dc22174ea4447a6f60edef3a4168d40200fbc71104512efe8e5d7d934aa289b4bd2b870000000000000000000007000000002000000000009b777883a02f0593dfc4cb4114b9f9cf4ad155110cc6ace2b322ac31bfa27847c799c8009a1ea5b98e525e6383ad7fd9795170e7b11e247603c2ff49a11459c7f606d729d3979676bffb3049166bb84a0f061991bd57c2566c10c282352aba05b6164ef876915a3f2491e4793e590dcc71de10da96366c1e992c0068c940dd4422c9882d3aa0f8a797b8fea6efcfb5276b7679f15559edaa977504cc0b2f777acb907ebf5fc14add71d0bca37405ded69b77ab4a3d7487fd04000000de17e1e13b93669b79556abb722d9c085b189b5fd1f30e8dc813f608830b110001732135e8e7262f290000923bfb6b41ff3792cee2fc37eee739c3e36a4bc80112968ec0d8902eced1fe552018014a463abbbf7ccd6a92a5734e3ebfca9b6e88e031f31de2183652e77c164c646a1cfd3710aa4205d8d4d4f974133ccb1e49feb42664eccd809c0ba8917eda87489e8946d5c8156197"], &(0x7f00002bf000)='GPL\x00', 0x4, 0xb7, &(0x7f0000000040)=""/183, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0x8}, 0x94) r2 = socket$kcm(0x29, 0x2, 0x0) ioctl$sock_kcm_SIOCKCMATTACH(r2, 0x89e0, &(0x7f0000000180)={r0, r1}) ioctl$sock_kcm_SIOCKCMCLONE(r2, 0x89e2, &(0x7f0000001380)={0xffffffffffffffff}) sendmsg$TCPDIAG_GETSOCK(r3, &(0x7f0000000480)={0x0, 0x0, &(0x7f0000000440)={&(0x7f0000002e40)=ANY=[], 0x1058}, 0x1, 0x0, 0x0, 0x40080}, 0x4000) sendmsg$NFT_BATCH(r3, &(0x7f0000004500)={0x0, 0x0, &(0x7f00000044c0)={&(0x7f000000f080)={{0x14, 0x10, 0x1, 0x0, 0x0, {0x7}}, [@NFT_MSG_DELSETELEM={0x14, 0xe, 0xa, 0x801, 0x0, 0x0, {0x3, 0x0, 0x8}}, @NFT_MSG_NEWTABLE={0x14, 0x0, 0xa, 0x301, 0x0, 0x0, {0x3, 0x0, 0x3}}], {0x14, 0x11, 0x1, 0x0, 0x0, {0x3}}}, 0x50}, 0x1, 0x0, 0x0, 0x40000}, 0x1) syz_genetlink_get_family_id$devlink(&(0x7f0000000500), r3) 6m56.644547325s ago: executing program 4 (id=4740): r0 = socket$inet(0x2, 0x2, 0x200001) (async, rerun: 32) r1 = socket$can_j1939(0x1d, 0x2, 0x7) (rerun: 32) ioctl$ifreq_SIOCGIFINDEX_vcan(r1, 0x8933, &(0x7f00000000c0)={'vcan0\x00', 0x0}) bind$can_j1939(r1, &(0x7f0000000340)={0x1d, r2, 0x0, {0x2, 0x0, 0x6}, 0xfe}, 0x18) setsockopt$sock_int(r1, 0x1, 0x6, &(0x7f0000000040)=0x1, 0x4) (async) sendmsg$inet(r1, &(0x7f0000000140)={0x0, 0x0, &(0x7f00000003c0)=[{&(0x7f0000000280)="81b641f1f3843704b6", 0x9}], 0x1}, 0x4048081) (async, rerun: 32) r3 = socket$nl_route(0x10, 0x3, 0x0) (async, rerun: 32) r4 = socket$can_j1939(0x1d, 0x2, 0x7) ioctl$ifreq_SIOCGIFINDEX_vcan(r3, 0x8933, &(0x7f0000000080)={'vcan0\x00', 0x0}) bind$can_j1939(r4, &(0x7f0000000340)={0x1d, r5, 0x0, {0x1, 0xf0, 0x4}, 0xfe}, 0x18) (async) setsockopt$sock_int(r4, 0x1, 0x6, &(0x7f0000000040)=0x1, 0x4) writev(r4, &(0x7f0000000240)=[{&(0x7f0000000380)="15e14481999f6905ce", 0x9}], 0x1) (async) setsockopt$sock_int(r0, 0x1, 0x5, &(0x7f0000000440)=0x1, 0x4) ioctl$XFS_IOC_PATH_TO_HANDLE(r0, 0xc0385869, &(0x7f0000000340)={r0, &(0x7f0000000240)='GPL\x00', 0x10000, &(0x7f0000000280)={@align=0x9, {0x0, 0x7ff, 0x7c, 0x8}}, 0x3d, &(0x7f00000002c0), &(0x7f0000000300)=0xfff}) r7 = bpf$PROG_LOAD(0x5, &(0x7f0000000400)={0xd, 0x13, &(0x7f0000000340)=ANY=[], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, @fallback=0x33, r6, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000080)={r7, 0x18000000000002a0, 0xe, 0xfffffffffffffffd, &(0x7f00000001c0)="186bf7ffffffffffffffef0a3254", 0x0, 0xff, 0x60000009, 0x0, 0x0, 0x0, 0x0}, 0x50) (async) sendmsg$inet(r0, &(0x7f00000001c0)={&(0x7f0000000000)={0x2, 0x4c22, @loopback}, 0x10, &(0x7f0000000180)=[{&(0x7f0000000140)="0800101d89b5eb00", 0x8}], 0x1}, 0x2400c880) bpf$PROG_LOAD_XDP(0x5, &(0x7f00000000c0)={0x3, 0x4, &(0x7f0000000080)=@framed={{}, [@ldst={0x2, 0x0, 0x3, 0x1, 0x0, 0xf}]}, &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0xf}, 0x94) 6m41.563319418s ago: executing program 32 (id=4740): r0 = socket$inet(0x2, 0x2, 0x200001) (async, rerun: 32) r1 = socket$can_j1939(0x1d, 0x2, 0x7) (rerun: 32) ioctl$ifreq_SIOCGIFINDEX_vcan(r1, 0x8933, &(0x7f00000000c0)={'vcan0\x00', 0x0}) bind$can_j1939(r1, &(0x7f0000000340)={0x1d, r2, 0x0, {0x2, 0x0, 0x6}, 0xfe}, 0x18) setsockopt$sock_int(r1, 0x1, 0x6, &(0x7f0000000040)=0x1, 0x4) (async) sendmsg$inet(r1, &(0x7f0000000140)={0x0, 0x0, &(0x7f00000003c0)=[{&(0x7f0000000280)="81b641f1f3843704b6", 0x9}], 0x1}, 0x4048081) (async, rerun: 32) r3 = socket$nl_route(0x10, 0x3, 0x0) (async, rerun: 32) r4 = socket$can_j1939(0x1d, 0x2, 0x7) ioctl$ifreq_SIOCGIFINDEX_vcan(r3, 0x8933, &(0x7f0000000080)={'vcan0\x00', 0x0}) bind$can_j1939(r4, &(0x7f0000000340)={0x1d, r5, 0x0, {0x1, 0xf0, 0x4}, 0xfe}, 0x18) (async) setsockopt$sock_int(r4, 0x1, 0x6, &(0x7f0000000040)=0x1, 0x4) writev(r4, &(0x7f0000000240)=[{&(0x7f0000000380)="15e14481999f6905ce", 0x9}], 0x1) (async) setsockopt$sock_int(r0, 0x1, 0x5, &(0x7f0000000440)=0x1, 0x4) ioctl$XFS_IOC_PATH_TO_HANDLE(r0, 0xc0385869, &(0x7f0000000340)={r0, &(0x7f0000000240)='GPL\x00', 0x10000, &(0x7f0000000280)={@align=0x9, {0x0, 0x7ff, 0x7c, 0x8}}, 0x3d, &(0x7f00000002c0), &(0x7f0000000300)=0xfff}) r7 = bpf$PROG_LOAD(0x5, &(0x7f0000000400)={0xd, 0x13, &(0x7f0000000340)=ANY=[], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, @fallback=0x33, r6, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000080)={r7, 0x18000000000002a0, 0xe, 0xfffffffffffffffd, &(0x7f00000001c0)="186bf7ffffffffffffffef0a3254", 0x0, 0xff, 0x60000009, 0x0, 0x0, 0x0, 0x0}, 0x50) (async) sendmsg$inet(r0, &(0x7f00000001c0)={&(0x7f0000000000)={0x2, 0x4c22, @loopback}, 0x10, &(0x7f0000000180)=[{&(0x7f0000000140)="0800101d89b5eb00", 0x8}], 0x1}, 0x2400c880) bpf$PROG_LOAD_XDP(0x5, &(0x7f00000000c0)={0x3, 0x4, &(0x7f0000000080)=@framed={{}, [@ldst={0x2, 0x0, 0x3, 0x1, 0x0, 0xf}]}, &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0xf}, 0x94) 4m33.767699453s ago: executing program 0 (id=6060): r0 = socket$inet_icmp_raw(0x2, 0x3, 0x1) setsockopt$inet_int(r0, 0x0, 0xb, &(0x7f0000000040)=0x3, 0x4) setsockopt$IP_VS_SO_SET_STARTDAEMON(r0, 0x0, 0x1a, &(0x7f0000000240)={0x1, 'veth0_to_team\x00'}, 0x18) syz_emit_ethernet(0x0, 0x0, 0x0) 4m33.603606154s ago: executing program 0 (id=6062): r0 = socket$igmp6(0xa, 0x3, 0x2) ioctl$BTRFS_IOC_BALANCE_PROGRESS(0xffffffffffffffff, 0x84009422, &(0x7f00000000c0)={0x0, 0x0, {0x0, @struct, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @struct}, {0x0, @struct, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @struct}}) ioctl$BTRFS_IOC_SNAP_CREATE_V2(r0, 0x50009417, &(0x7f00000004c0)={{}, 0x0, 0x8, @inherit={0x98, &(0x7f0000000000)={0x0, 0xa, 0x5, 0xb3, {0xc, 0x68b, 0x1, 0x10001, 0x10}, [0x0, 0xdb0e, 0x3, 0x4, 0x2, 0x8000000000000000, 0x2, 0x5, 0x68ba, 0x2]}}, @devid=r1}) (async) ioctl$sock_SIOCSIFVLAN_ADD_VLAN_CMD(r0, 0x8983, &(0x7f00000014c0)={0x0, 'gre0\x00', {0x4}, 0x88f}) r2 = bpf$ITER_CREATE(0x21, &(0x7f0000001500), 0x8) ioctl$TUNSETOFFLOAD(r2, 0x400454d0, 0x18) (async) r3 = syz_open_procfs$namespace(0x0, &(0x7f0000001540)='ns/mnt\x00') ioctl$BTRFS_IOC_SUBVOL_GETFLAGS(r3, 0x80089419, &(0x7f0000001580)) (async) close(r0) (async) r4 = socket$nl_generic(0x10, 0x3, 0x10) r5 = syz_genetlink_get_family_id$nl80211(&(0x7f0000001600), r2) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f0000001640)={'wlan1\x00', 0x0}) sendmsg$NL80211_CMD_REMAIN_ON_CHANNEL(r4, &(0x7f0000001700)={&(0x7f00000015c0), 0xc, &(0x7f00000016c0)={&(0x7f0000001680)={0x40, r5, 0x400, 0x70bd2b, 0x25dfdbfd, {{}, {@val={0x8, 0x3, r6}, @val={0xc, 0x99, {0x5, 0x5}}}}, [@chandef_params=[@NL80211_ATTR_CENTER_FREQ1={0x8, 0xa0, 0x3}, @NL80211_ATTR_WIPHY_EDMG_CHANNELS={0x5, 0x118, 0x7}, @NL80211_ATTR_WIPHY_FREQ_OFFSET={0x8, 0x122, 0x324}]]}, 0x40}, 0x1, 0x0, 0x0, 0x2e0080c0}, 0x8081) (async) ioctl$ifreq_SIOCGIFINDEX_vcan(r4, 0x8933, &(0x7f0000001740)={'vxcan0\x00'}) setsockopt$IP_VS_SO_SET_ZERO(r2, 0x0, 0x48f, &(0x7f0000001780)={0x3c, @multicast1, 0x4e23, 0x0, 'rr\x00', 0x12, 0x7f, 0x4e}, 0x2c) syz_genetlink_get_family_id$mptcp(&(0x7f00000017c0), r2) (async) r7 = syz_genetlink_get_family_id$devlink(&(0x7f0000001840), 0xffffffffffffffff) getsockopt$sock_cred(r0, 0x1, 0x11, &(0x7f0000001880)={0x0}, &(0x7f00000018c0)=0xc) (async) r9 = getpid() sendmsg$DEVLINK_CMD_RELOAD(r4, &(0x7f0000001a00)={&(0x7f0000001800)={0x10, 0x0, 0x0, 0x80000000}, 0xc, &(0x7f00000019c0)={&(0x7f0000001900)={0xac, r7, 0x4, 0x70bd29, 0x25dfdbfd, {}, [{@nsim={{0xe}, {0xf, 0x2, {'netdevsim', 0x0}}}, @DEVLINK_ATTR_NETNS_ID={0x8, 0x8c, 0x4}}, {@nsim={{0xe}, {0xf, 0x2, {'netdevsim', 0x0}}}, @DEVLINK_ATTR_NETNS_FD={0x8, 0x8a, r3}}, {@pci={{0x8}, {0x11}}, @DEVLINK_ATTR_NETNS_PID={0x8, 0x8b, r8}}, {@pci={{0x8}, {0x11}}, @DEVLINK_ATTR_NETNS_PID={0x8, 0x8b, r9}}]}, 0xac}, 0x1, 0x0, 0x0, 0x10}, 0x0) (async) ioctl$AUTOFS_IOC_FAIL(r0, 0x9361, 0x7) (async) r10 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$NL80211_CMD_JOIN_MESH(r10, &(0x7f0000001c40)={&(0x7f0000001a40)={0x10, 0x0, 0x0, 0x400000}, 0xc, &(0x7f0000001c00)={&(0x7f0000001a80)={0x15c, r5, 0x800, 0x70bd27, 0x25dfdbff, {{}, {@val={0x8, 0x3, r6}, @void}}, [@NL80211_ATTR_MESH_SETUP={0x18, 0x70, [@NL80211_MESH_SETUP_USERSPACE_AUTH={0x4}, @NL80211_MESH_SETUP_USERSPACE_AMPE={0x4}, @NL80211_MESH_SETUP_USERSPACE_MPM={0x4}, @NL80211_MESH_SETUP_ENABLE_VENDOR_SYNC={0x5, 0x6, 0x1}]}, @NL80211_ATTR_TX_RATES={0x11c, 0x5a, 0x0, 0x1, [@NL80211_BAND_5GHZ={0x54, 0x1, 0x0, 0x1, [@NL80211_TXRATE_HT={0x1e, 0x2, [{0x0, 0x6}, {0x7, 0x9}, {0x1}, {0x6, 0x8}, {0x2, 0x6}, {0x6, 0x3}, {0x6, 0xa}, {0x1, 0x5}, {0x2}, {0x0, 0x1}, {0x1, 0x8}, {0x7, 0x4}, {0x0, 0x5}, {0x1, 0x7}, {0x3, 0xa}, {0x2, 0x9}, {}, {0x6, 0x5}, {0x2, 0x9}, {0x0, 0x2}, {0x7, 0x8}, {0x7, 0x7}, {0x1, 0x9}, {0x5, 0x5}, {0x2, 0x1}, {0x1, 0x8}]}, @NL80211_TXRATE_HE={0x14, 0x5, {[0xffff, 0x1, 0xb0, 0x80, 0xc6, 0x2, 0xdf98, 0xc]}}, @NL80211_TXRATE_LEGACY={0x1b, 0x1, [0x12, 0xc, 0xb, 0x14, 0x6c, 0x16, 0x12, 0x3, 0x36, 0x36, 0x6, 0x0, 0x36, 0x2, 0x11, 0x1b, 0x3, 0xb, 0x6, 0x9, 0x30, 0x4, 0x16]}]}, @NL80211_BAND_2GHZ={0xc4, 0x0, 0x0, 0x1, [@NL80211_TXRATE_LEGACY={0x22, 0x1, [0xb5d17875ec29d883, 0x6c, 0x16, 0x24, 0x36, 0x6, 0x30, 0x4, 0x48, 0x24, 0x12, 0xb, 0xb, 0x30, 0x1b, 0x60, 0x6, 0x1, 0x36, 0x3, 0x3, 0x48, 0x24, 0x4, 0x9, 0x16, 0x16, 0x61, 0x5, 0x24]}, @NL80211_TXRATE_GI={0x5, 0x4, 0x2}, @NL80211_TXRATE_GI={0x5, 0x4, 0x1}, @NL80211_TXRATE_HE={0x14, 0x5, {[0x465e, 0x9, 0x6, 0x2e36, 0x5, 0x9, 0x395d, 0x1]}}, @NL80211_TXRATE_HE={0x14, 0x5, {[0x13, 0x9, 0x10, 0x8, 0x0, 0x8, 0x8, 0xfffc]}}, @NL80211_TXRATE_HT={0x29, 0x2, [{0x7, 0x2}, {0x4, 0x4}, {0x4, 0x2}, {0x1, 0x1}, {0x1, 0x3}, {0x0, 0x5}, {0x3, 0x9}, {0x6, 0x3}, {0x0, 0x7}, {0x2, 0x6}, {0x4, 0x9}, {0x3, 0xa}, {0x3, 0x3}, {0x7}, {0x0, 0x5}, {0x0, 0x3}, {0x0, 0x8}, {0x2, 0x7}, {0x2, 0xa}, {0x3, 0xd}, {0x1, 0xa}, {0x7, 0x8}, {0x0, 0x3}, {0x6, 0x8}, {0x1, 0x1}, {0x2, 0xa}, {0x3, 0x2}, {0x3, 0x6}, {0x5}, {0x1, 0xa}, {0x6, 0x6}, {0x4, 0x7}, {0x6, 0x4}, {0x4, 0x2}, {0x2}, {0x5, 0xa}, {0x5, 0x3}]}, @NL80211_TXRATE_HT={0x36, 0x2, [{0x3, 0x1}, {0x1, 0xa}, {}, {0x7, 0x2}, {0x1, 0x2}, {0x6, 0x6}, {0x2, 0x7}, {0x3, 0x6}, {0x0, 0x3}, {0x4, 0x3}, {0x3}, {0x3, 0x7}, {0x3, 0x6}, {0x1, 0x3}, {0x4, 0x4}, {0x6, 0x9}, {0x1, 0x2}, {0x1, 0x1}, {0x2, 0x8}, {0x2, 0x5}, {0x2, 0x7}, {0x1, 0x2}, {0x5, 0x8}, {0x5, 0x7}, {0x5, 0x7}, {0x3}, {0x2, 0x6}, {0x5, 0x4}, {0x2, 0xa}, {0x4, 0x5}, {0x1, 0x8}, {0x6, 0x3}, {0x4, 0x8}, {0x4, 0x2}, {0x7, 0x6}, {0x1, 0x7}, {0x0, 0x9}, {0x2}, {0x2, 0x6}, {0x6, 0x5}, {0x0, 0x7}, {0x0, 0x6}, {0x3, 0x3}, {0x2, 0x3}, {0x2, 0x7}, {0x4, 0x6}, {0x2}, {0x4, 0x3}, {0x0, 0x2}, {0x0, 0xa}]}]}]}, @NL80211_ATTR_MESH_ID={0xa}]}, 0x15c}, 0x1, 0x0, 0x0, 0x4}, 0x4040080) setsockopt$IP_VS_SO_SET_STARTDAEMON(r2, 0x0, 0x48b, &(0x7f0000001c80)={0x1, 'veth0_macvtap\x00'}, 0x18) sendmsg$nl_route_sched(r2, &(0x7f0000001d80)={&(0x7f0000001cc0)={0x10, 0x0, 0x0, 0x40}, 0xc, &(0x7f0000001d40)={&(0x7f0000001d00)=@gettaction={0x24, 0x32, 0x10, 0x70bd29, 0x25dfdbfc, {}, [@action_gd=@TCA_ACT_TAB={0x10, 0x1, [{0xc, 0x5, 0x0, 0x0, @TCA_ACT_INDEX={0x8, 0x3, 0xfffffc00}}]}]}, 0x24}, 0x1, 0x0, 0x0, 0x20}, 0x20000004) (async) sendmsg$NL80211_CMD_GET_MPATH(r10, &(0x7f0000001e80)={&(0x7f0000001dc0)={0x10, 0x0, 0x0, 0x400}, 0xc, &(0x7f0000001e40)={&(0x7f0000001e00)={0x34, r5, 0x2, 0x70bd27, 0x25dfdbfb, {{}, {@val={0x8, 0x3, r6}, @val={0xc, 0x99, {0x8, 0x18}}}}, [@NL80211_ATTR_MPATH_NEXT_HOP={0xa}]}, 0x34}, 0x1, 0x0, 0x0, 0x20048010}, 0x4000000) (async) sendmsg$DEVLINK_CMD_RELOAD(r10, &(0x7f0000001f80)={&(0x7f0000001ec0)={0x10, 0x0, 0x0, 0x80000}, 0xc, &(0x7f0000001f40)={&(0x7f0000001f00)={0x3c, r7, 0x100, 0x70bd2a, 0x25dfdbfc, {}, [{@nsim={{0xe}, {0xf, 0x2, {'netdevsim', 0x0}}}, @DEVLINK_ATTR_NETNS_FD={0x8, 0x8a, r3}}]}, 0x3c}, 0x1, 0x0, 0x0, 0x804}, 0x24000014) (async) socket$netlink(0x10, 0x3, 0xc) setsockopt$EBT_SO_SET_COUNTERS(r2, 0x0, 0x81, &(0x7f0000002040)={'nat\x00', 0x0, 0x0, 0x0, [0x3, 0xea, 0xff, 0x2, 0x5, 0x7], 0x6, &(0x7f0000001fc0)=[{}, {}, {}, {}, {}, {}, {}, {}], 0x0, [{}, {}, {}, {}, {}, {}]}, 0xd8) (async) ioctl$TUNSETCARRIER(0xffffffffffffffff, 0x400454e2, &(0x7f00000021c0)) 4m33.318577268s ago: executing program 0 (id=6066): r0 = socket$alg(0x26, 0x5, 0x0) ioctl$sock_SIOCGIFINDEX(0xffffffffffffffff, 0x8933, &(0x7f0000000080)={'ip6erspan0\x00'}) bind$alg(r0, &(0x7f0000000000)={0x26, 'skcipher\x00', 0x0, 0x0, 'ecb(blowfish)\x00'}, 0x58) setsockopt$ALG_SET_KEY(r0, 0x117, 0x1, &(0x7f0000c18000)="ad56b6c5", 0x4) r1 = accept4(r0, 0x0, 0x0, 0x80800) sendmmsg$alg(r1, &(0x7f0000000400)=[{0x0, 0x0, 0x0, 0x0, &(0x7f0000000380)=[@op={0x18, 0x117, 0x3, 0x1}], 0x18}], 0x1, 0x0) sendmsg$nl_route(r1, &(0x7f0000001880)={0x0, 0x0, &(0x7f0000001840)={&(0x7f0000001740)=ANY=[], 0xd8}, 0x1, 0x0, 0x0, 0x81}, 0x4000000) recvmmsg$unix(r1, &(0x7f0000000340)=[{{0x0, 0x0, &(0x7f0000000540)=[{&(0x7f0000000200)=""/203, 0xcb}, {&(0x7f0000000440)=""/212, 0xd4}], 0x2}}], 0x1, 0x40000100, 0x0) socket$alg(0x26, 0x5, 0x0) (async) ioctl$sock_SIOCGIFINDEX(0xffffffffffffffff, 0x8933, &(0x7f0000000080)={'ip6erspan0\x00'}) (async) bind$alg(r0, &(0x7f0000000000)={0x26, 'skcipher\x00', 0x0, 0x0, 'ecb(blowfish)\x00'}, 0x58) (async) setsockopt$ALG_SET_KEY(r0, 0x117, 0x1, &(0x7f0000c18000)="ad56b6c5", 0x4) (async) accept4(r0, 0x0, 0x0, 0x80800) (async) sendmmsg$alg(r1, &(0x7f0000000400)=[{0x0, 0x0, 0x0, 0x0, &(0x7f0000000380)=[@op={0x18, 0x117, 0x3, 0x1}], 0x18}], 0x1, 0x0) (async) sendmsg$nl_route(r1, &(0x7f0000001880)={0x0, 0x0, &(0x7f0000001840)={&(0x7f0000001740)=ANY=[], 0xd8}, 0x1, 0x0, 0x0, 0x81}, 0x4000000) (async) recvmmsg$unix(r1, &(0x7f0000000340)=[{{0x0, 0x0, &(0x7f0000000540)=[{&(0x7f0000000200)=""/203, 0xcb}, {&(0x7f0000000440)=""/212, 0xd4}], 0x2}}], 0x1, 0x40000100, 0x0) (async) 4m33.087049211s ago: executing program 0 (id=6069): r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = bpf$MAP_CREATE(0x0, &(0x7f0000000400)=@base={0x12, 0xb}, 0x50) unshare(0x20020200) r2 = socket(0x2d, 0x2, 0x0) r3 = socket(0x10, 0x80002, 0x0) sendmsg$nl_route_sched(r3, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000880)=@newtaction={0x70, 0x30, 0x53b, 0x0, 0x400000, {0x9}, [{0x5c, 0x1, [@m_sample={0x58, 0x1, 0x0, 0x0, {{0xb}, {0x2c, 0x2, 0x0, 0x1, [@TCA_SAMPLE_PSAMPLE_GROUP={0x8, 0x5, 0x20}, @TCA_SAMPLE_PARMS={0x18, 0x2, {0x0, 0x6, 0x20000007}}, @TCA_SAMPLE_RATE={0x8, 0x3, 0x20}]}, {0x4}, {0xc, 0x7, {0x0, 0x1}}, {0xc, 0x4, {0x2}}}}]}]}, 0x70}}, 0x0) ioctl$sock_kcm_SIOCKCMCLONE(r2, 0x89e3, &(0x7f0000000000)={r2}) syz_genetlink_get_family_id$nl80211(&(0x7f00000001c0), 0xffffffffffffffff) sendmsg$NL80211_CMD_FRAME(r2, &(0x7f0000000280)={&(0x7f0000000180)={0x10, 0x0, 0x0, 0xa0200}, 0xc, &(0x7f0000000240)={&(0x7f00000002c0)=ANY=[@ANYRESHEX=r1, @ANYRES8=r1, @ANYBLOB="000428bd7000fedbdf253b00000004006c0004006c0008005700b5070000"], 0x24}, 0x1, 0x0, 0x0, 0x20044001}, 0x80c4) ioctl$ifreq_SIOCGIFINDEX_team(r0, 0x8933, &(0x7f0000000080)={'team0\x00', 0x0}) ioctl$sock_ipv6_tunnel_SIOCDELTUNNEL(0xffffffffffffffff, 0x89f2, &(0x7f0000000140)={'syztnl1\x00', &(0x7f00000000c0)={'syztnl1\x00', r4, 0x2f, 0x1, 0x2, 0x7, 0x80, @private2={0xfc, 0x2, '\x00', 0x1}, @private0={0xfc, 0x0, '\x00', 0x1}, 0x40, 0x700, 0x8, 0x80000001}}) sendmsg$nl_route(r0, &(0x7f0000000440)={0x0, 0x0, &(0x7f0000000580)={&(0x7f00000005c0)=ANY=[@ANYBLOB="780100001300000829bd7000fcdbdf2500000000", @ANYRES32=r5, @ANYBLOB="0532000020000000b80034801400350076657468305f6d616376746170000000140035006d6163766c616e3100000000000000001400350064756d6d79300000000000000000000014003500000000000000000000000000000000001400350064756d6d793000000000000000000000140035006970365f767469300000000000000000140035006970766c616e310000000000000000001400350076657468315f746f5f7465616d0000001400350076657468305f6d61637674617000000008000500", @ANYRES32=r4, @ANYBLOB="0000007800128009000100626f6e64000000006800028008000b000000000000", @ANYRES32=r4, @ANYBLOB="0600180000100000050001000500000008000500080000000500100081000000240008800a01010200000000e0000001e000000100000000e000000164010100ac1414bb0800040011000000080007000500000008000b00", @ANYRES32=r5, @ANYBLOB='\b\x00\n\x00', @ANYRES32=r4, @ANYBLOB="050027000500000008000f000363ffff"], 0x178}, 0x1, 0x0, 0x0, 0x4}, 0x8044) r6 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a) ioctl$FS_IOC_READ_VERITY_METADATA(r6, 0xc0286687, &(0x7f0000000040)={0x3, 0x7, 0x3, &(0x7f0000000000)=""/3}) 4m32.8280792s ago: executing program 0 (id=6072): r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = socket$kcm(0x11, 0x3, 0x0) sendmsg$kcm(r1, &(0x7f0000000080)={&(0x7f0000000680)=@qipcrtr={0x2a, 0x3, 0x1}, 0x80, &(0x7f00000007c0)=[{&(0x7f0000000740)="270502001a00", 0x6}], 0x1}, 0x48081) sendmsg$nl_route(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000080)=ANY=[@ANYBLOB="4c0000001000010400"/20, @ANYRES32=0x0, @ANYBLOB="21000000000000002c00128009000100626f6e64000000001c00028005002100010400080500010004"], 0x4c}}, 0x0) 4m32.423569318s ago: executing program 0 (id=6075): socket$inet(0x2, 0x4000000000000001, 0x0) socket$inet_sctp(0x2, 0x1, 0x84) r0 = socket$inet6_sctp(0xa, 0x1, 0x84) socket$nl_route(0x10, 0x3, 0x0) openat$nci(0xffffffffffffff9c, &(0x7f0000000080), 0x2, 0x0) r1 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) socket$nl_route(0x10, 0x3, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$FIBMAP(r0, 0x1, &(0x7f00000000c0)=0x8) sendmsg$inet(r3, &(0x7f0000001b00)={0x0, 0x0, 0x0, 0x0, &(0x7f0000001d80)=ANY=[@ANYBLOB="28010000000000000100000001"], 0x128}, 0x0) recvmsg$unix(r2, &(0x7f0000000000)={0x0, 0x0, 0x0, 0x0, &(0x7f0000000f40)=[@cred={{0x1c}}, @cred={{0x1c}}, @cred={{0x1c}}, @rights={{0x18, 0x1, 0x1, [0xffffffffffffffff, 0xffffffffffffffff]}}], 0x78}, 0x0) sendmsg$NFC_CMD_DEV_UP(r1, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000140)=ANY=[@ANYBLOB="1c000000", @ANYRES16=r4, @ANYBLOB="010028bd70000700000002000000080001"], 0x1c}, 0x1, 0x0, 0x0, 0x40089}, 0x8004) 4m17.400501545s ago: executing program 33 (id=6075): socket$inet(0x2, 0x4000000000000001, 0x0) socket$inet_sctp(0x2, 0x1, 0x84) r0 = socket$inet6_sctp(0xa, 0x1, 0x84) socket$nl_route(0x10, 0x3, 0x0) openat$nci(0xffffffffffffff9c, &(0x7f0000000080), 0x2, 0x0) r1 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) socket$nl_route(0x10, 0x3, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$FIBMAP(r0, 0x1, &(0x7f00000000c0)=0x8) sendmsg$inet(r3, &(0x7f0000001b00)={0x0, 0x0, 0x0, 0x0, &(0x7f0000001d80)=ANY=[@ANYBLOB="28010000000000000100000001"], 0x128}, 0x0) recvmsg$unix(r2, &(0x7f0000000000)={0x0, 0x0, 0x0, 0x0, &(0x7f0000000f40)=[@cred={{0x1c}}, @cred={{0x1c}}, @cred={{0x1c}}, @rights={{0x18, 0x1, 0x1, [0xffffffffffffffff, 0xffffffffffffffff]}}], 0x78}, 0x0) sendmsg$NFC_CMD_DEV_UP(r1, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000140)=ANY=[@ANYBLOB="1c000000", @ANYRES16=r4, @ANYBLOB="010028bd70000700000002000000080001"], 0x1c}, 0x1, 0x0, 0x0, 0x40089}, 0x8004) 2m35.480068171s ago: executing program 6 (id=7095): r0 = bpf$MAP_CREATE(0x0, &(0x7f0000002080)=ANY=[@ANYBLOB="020000000400000006000000050000000010"], 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000001070000000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000001900007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000100000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffd98, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x1f, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x40f00, 0x1a, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$PROG_BIND_MAP(0xa, &(0x7f00000004c0)={r1}, 0xc) r2 = openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0) ioctl$TUNSETIFF(r2, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x7101}) r3 = socket(0x400000000010, 0x3, 0x0) r4 = socket$rds(0x15, 0x5, 0x0) setsockopt$RDS_CONG_MONITOR(r4, 0x114, 0xa, &(0x7f00000000c0)=0x1, 0x4) r5 = socket$unix(0x1, 0x1, 0x0) recvmsg$unix(0xffffffffffffffff, 0x0, 0x0) ioctl$sock_SIOCGIFINDEX(r5, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r3, &(0x7f00000012c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000005c0)=@newqdisc={0x38, 0x24, 0x4ee4e6a52ff56541, 0x70bd2d, 0xffffffff, {0x0, 0x0, 0x0, r6, {0x0, 0xfff1}, {0xffff, 0xffff}, {0x1, 0xf}}, [@qdisc_kind_options=@q_multiq={{0xb}, {0x8, 0x2, {0x28}}}]}, 0x38}}, 0x0) sendmsg$nl_route_sched(r3, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000440)={&(0x7f0000000500)=@newtfilter={0x4c, 0x2c, 0xd27, 0x70bd25, 0x8000, {0x0, 0x0, 0x0, r6, {0x0, 0x7}, {}, {0x7, 0x2}}, [@filter_kind_options=@f_flower={{0xb}, {0x1c, 0x2, [@TCA_FLOWER_KEY_ETH_TYPE={0x6, 0x8, 0x806}, @TCA_FLOWER_KEY_ARP_OP={0x5, 0x3d, 0x8}, @TCA_FLOWER_KEY_ARP_OP_MASK={0x5, 0x3e, 0x80}]}}]}, 0x4c}}, 0x800) r7 = socket$nl_route(0x10, 0x3, 0x0) r8 = socket(0x2a, 0x2, 0x0) getsockname$packet(r8, &(0x7f00000015c0)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000080)=0x14) sendmsg$nl_route(r7, &(0x7f0000000300)={0x0, 0x6558, &(0x7f0000000040)={&(0x7f00000000c0)=ANY=[@ANYBLOB="3800000054000147880000000000000007008209", @ANYRES32=r9, @ANYBLOB="20000100", @ANYRES32, @ANYBLOB="00001000e000030000010001000000000000000008"], 0x38}}, 0x0) bpf$BPF_PROG_QUERY(0x10, &(0x7f0000000100)={@cgroup, 0x16, 0x1, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x40) 2m32.870570247s ago: executing program 6 (id=7111): r0 = bpf$PROG_LOAD(0x5, &(0x7f0000000040)={0x2, 0x4, &(0x7f0000000200)=ANY=[@ANYBLOB="180000000300000000000000feffff10850000000700000095"], &(0x7f0000000000)='GPL\x00', 0x0, 0x0, 0x0, 0x100, 0x70, '\x00', 0x0, @fallback=0x30, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r1 = getpid() r2 = socket$kcm(0x29, 0x0, 0x0) r3 = socket$can_j1939(0x1d, 0x2, 0x7) ioctl$sock_kcm_SIOCKCMATTACH(r2, 0x89e0, &(0x7f0000000100)={r3, r0}) bpf$BPF_LINK_CREATE_XDP(0x1c, &(0x7f0000000180)={r0, 0x0, 0x30, 0x0, @val=@uprobe_multi={&(0x7f0000000340)='./cgroup/cgroup.procs\x00', &(0x7f00000002c0)=[0x45c], 0x0, 0x0, 0x1, 0x1, r1}}, 0x40) 2m32.702286336s ago: executing program 6 (id=7112): r0 = bpf$MAP_CREATE(0x0, &(0x7f00000004c0)=ANY=[@ANYBLOB="060000000400"/20, @ANYRES32, @ANYBLOB='\x00'/20, @ANYRES32=0x0, @ANYRES32, @ANYBLOB='\x00'/28], 0x50) r1 = openat$cgroup_ro(0xffffffffffffffff, &(0x7f0000000000)='blkio.bfq.io_merged\x00', 0x0, 0x0) r2 = socket$nl_generic(0x10, 0x3, 0x10) r3 = syz_genetlink_get_family_id$ethtool(&(0x7f0000000080), 0xffffffffffffffff) sendmsg$ETHTOOL_MSG_FEATURES_SET(r2, &(0x7f0000000680)={0x0, 0x0, &(0x7f0000000640)={&(0x7f00000000c0)={0x44, r3, 0x8d61ddcfedb48df, 0x0, 0x0, {}, [@ETHTOOL_A_FEATURES_WANTED={0x18, 0x3, 0x0, 0x1, [@ETHTOOL_A_BITSET_BITS={0x10, 0x3, 0x0, 0x1, [{0xfffffe03, 0x1, 0x0, 0x1, [@ETHTOOL_A_BITSET_BIT_NAME={0x5, 0x2, '\x00'}]}]}, @ETHTOOL_A_BITSET_NOMASK={0x4}]}, @ETHTOOL_A_FEATURES_HEADER={0x18, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'sit0\x00'}]}]}, 0x44}}, 0x0) sendmsg$kcm(r1, &(0x7f0000001b40)={&(0x7f0000000840)=@nfc_llcp={0x27, 0x0, 0x1, 0x4, 0x77, 0xf, "fd48f2930d9c7615ce4193133f0fdc941c0a281aa9a41345212b7abb3b3b9f5e1dbffeec36e2c5d3541b7bc7d9e43ecfe81f1d70d2747f072c9caf7d6a4fa5", 0x17}, 0x80, &(0x7f0000001b00)=[{&(0x7f00000008c0)="e3a9a5ab8a3a8c78fe372300a368d747272806a393f87ffcb94050b4206af73f3a2133f69ebe572645f8aaccbaa4907ea8031da1c256e00d6975dee87bd8da3c326ca8668da5887cd279cb0e3952d3ad8ff2ac255ed022da65532ecad89337d880fc50c74a897bc05f3856fe5e6c95ab87f42e5f9aceb2c2aa9f09f3f02bd741cc6b0e6e29000c287919e970b9a48e60f9d0a70b44d705627a6455a0782aac9005a3b3f02b3f102578c5eb5b0d6feccabf609f8a39c87ba807d5efa1e96445759953272f57f4df336810e5b3684dabc8ebf03937b92fb1f552b2c77a370ac9c927bec66648", 0xe5}, {&(0x7f00000009c0)="846f970240ec22c0650f57230535bb91cac16d4eb905df281b16b18f8e9fd37e7ea96cd9530537da6e516cd2bf45f4241fbba0b386d9ea6329f93665cc650ebe6f", 0x41}, {&(0x7f0000000a40)="b5cb860f57956e571dc5b4cb74aa923cbd2c94209f7fbba6bbb86fe03b4b25c0d5b44cfbf13886714c0b85a8efcba35fabaa57e1a7076197d0ebc7ec1b95ca1851fd4f49d85553973e0e806b25ac4564edff55109120388c63bc4eaeec1d8946181ee349e2fa24f43919ce5fe6f86808d88cb3cf217682b711f7369c60ccfd5ec6703dd39d19b464cfe6b1000c0f59b622abac64b35d79d8b8dbc382e8662f5aef67bc3d1a0b6dab71e3563d06c82b0c948ea66658f6db743adf65ecbdc88a81c37d5dae4ee93b9a5ed145904f7a3241434fcd294d5d1c132a389a46c1f9ddc113c9fa3c2169b4aed88033e01bf4be3b1be61876ea4ae689dce75f9dc83201c2df0095269ec8575324ca5244a134cf1b6c31925ff3966456763b358740f3b2bed96daaff70457172807c959f56bd7613695c9a2fa497e410acd98383e013cb47c783f27e0aaeaaf4904fe8802d6c4aeb83483c896b0c4bf1569634c663cf79ff087e7dfe14aec2fae244cab823cb05041ff25b15b58a61b299c295a0d9b106a25bab3943c2ce9be18733d19cf08e97d6f2fe49bdd0ede1feee4ba71138630db722b8573359e2bc13a66a9d6e21f2592086c7a988a9297997ac7d0ccf57f038e4b023efa0370001204b3f42e051126803ac700e625102da66d96ff7bd553bd640b0301a8c89ece756dca5e0a21cb19bc626593e949048990ca2b7b49cf000a82788c6ae04672481a0b98edcb2508fad38cca9c9bce4652fa08bb30cd6b439360f078ef1f76f4bb9698c32cdff48ad416bc4b895c51621d4001253fb1448c397c918a03708811169a355a0fda33f81c75221b2e61b774013775a9e0e577bf3bc00b60958941fd96369b70a61a971f50c372c9c9e1d7dcf557db252240603498bdbb96cee4d4e3cfcaebd1e6b856c7d10b24db28de14a23656bcd4e20ed32baa6e8d34247211323851f0d6fb6ccbe7ec7fbb678c9e854926e20d0f5188a8bab39723f69108b83cd1db3b07bddf2c8c0f8117064f21016b9b7131781dca3ad4f712f73e943ab7c0567a94d8b6f04cdaef1f8ec5d95cdea02c49f319f28c9084b0c8a2de296599ffdf40beff8f5ba641c0d3cb52e2d06fb4298bc801f7a9a7adb1170b62a5718a620ff8d72d0435b51e77a7a5ed5b83f558b5ee4a226798ff9256f5534bef5b72fcbcfad814534160806feb2b031172252689b468ab53ec6d64043a753b6d985e3cf933842ade3b08b4a0f283149694c2a8330daa4ec92a19c23b4e5a4d79c0f62ef42d5fa48f17bc37a5cf538549c93e4324da88741a14b9838c4d8353f30978ff518f5bbb5ce4d597ca52a3110ccb22d5f15dbb542351a9c377ecf793476dd97168d51649bad3b5691af58649a7fc616e580b675461cb6a4cf6254bdaaa7b4deb19b3e47e91dcc314425632dbca714995e0456f5f49ca868db6614b14390efafa7166b0acf0e49bb626c9251d66b40821994a189fcc84cab9d00bd60a4cf6407fd63e4fcc2ffccace3debee0c48ca81b8087d9fc6a8e999627272bab7962412c3de13a8a83c8954194ec95ae73538500c9d7726435e22517b12e86795e357e47d40854d467688e56847910501d73beea12701feb4e8498e9c25917b72341d898e4edbc0d72ecda4ede8e789e3a9db23137ef5429f55c393e5a447496705c1ea44ed5a24885e5e0cc5f8be68b1c5ba8d8a26d7394ca0c4a41167c5c3389a4eb8c91c8cce617eba60fa86eaa6c1851f4adec9340a389a1b184e26d69c552e7cd0212933dd4e0cb8934b581b0064a8bf2d8441d688d67d75087d82df9a674debb371f7d12c6abc05a262fd61c8c7a2ce5811ec7e76022599af4f4d4abfc6262ee0da0cc451c66ef910ca4ae712253b5e51ebe107b65d866ad1b1d1252a8247009ae832ad4646b6e5b488820138840464c44f0dd12dab24cd1e14d1f1a7845cdf282f4d5c76b5af0464124eee4b5a66531c1e09188734f01e36967f52f3aa7351adeea9fe2ef2faad57f643cb8ec6f639663f6c88fe38601e600be33c33793f1cc7d01e470995d0b65403d0df5a6ae92af863f946058864bbb211006de9d64a23e786cdaaf20777b9895503eaea59cd6cf6ebc6c6db878b888cac48e13810927b3e3efc28e889404652ce1d8a5bd61e5cc0050ba1b7f762c64c1f88eb7ef37e21be8f139d91d5cb431cc2d025f0972270c1a4cfb3354fbc55c92a4ff4f510358c4fc0e6f2c820d5eb02ba44d38457b2879d38d56428b391d93606ff86b1cc9089496b9fd576583a597f241813f0f50380967b3d91fc80113d636ae9cd157192ff6f35b5ce7e1e9fb08334de070f1e385500c16965ec334a69be341e14e89850b6d2e24c48d4b731caec64826d5f4c74f519a65c39c4c7dc841fda690e7314fb18fd344315213ac1b427bed54e1378a19f196547349a67c8323166fc38654db2cda848e9469c8c115a13f9a2057fb10228d51e88bc6fea410655aef67f6d2e6756eb35b7879dfa5530766583d2d4e1ebb58ebd343ec83e5ce43bf70566e151a7f8a1ad5f203a06457f8c44cdf1ad34ae0babe5565cda42aa6f547498936e9ae5db39ee319e14a3fa2d505014e6c67a2f705b0904e12b523bee392980d128b2d492b8b66cb2b2357c25149e11fffb6a7bce0d8b4228abe3cd32c701f3b27b4ed0b7028e5c59fcb895c39060dcb294c83ffb115ba42bc0a3b83f0fd07f8ddd253d293f0d85cb3c4b2c5b33f92b303a13e6a2a2b3f9f2a66b12038ccd89acefa64d1fdd4c53a2807bbd911c91eba1928789bf680b0570c04607dfd909a07cc26047d9be66b1bdfa396c2c4470553792dba0deeba151608b9caa47e0934ca5bfe312b0177f1cb7bf6a87a8fc996a75465357cd8657ceb5bffe18b54c59a1c74c13feb3959cf44dd4a8f4b0f80cc65fc1ca8c905caae364b8aec207808cb2a7c7e76895827990585451fc23c4686f72ed3bf7dcb6f0a51d15a03c86c999314d0758f56daf5731ed7a7ba88eac46b3eca7471f9497b46824ba24fbc844ad8980f3698c3a4d2118d40e7736ea059737e449adbfa26bd2319199b90e5efdd055c1c2ca447fbbf84e7c4ca68ecae954b403e58fbcca521471be7ece246252338fdcfcdaad201e4299604ae0b4912794e18a91e336d38b0aee4022a1b9110bf66ef1133576f8e51dc9839f50068b14a700bf8b0ac5589b27cc9df134a32a6062953dcfe39273b137ea3627bd5796ac62f0abe224d82c6673b8d18f9beea78365a7ed9a316c4501d96cefe071b2306411a7c53ffda31828ecd19ea59cdb2627e4453bad849824e945e18ff0c9f8e5f132922268ca103da41b25f032a55841c2bad7dc915482d3127e8843176ad0a2ec5d7c062ef31e841ad385fa1bd75fd485b1bda53e4f4fb131f6e4a22b0f94880d029f26c59175381fa37df316a8e68b6e9e3a968f2f78f9909d60563593e65eaf02c72c4be23aaf88b0e979ce8894b7e47a25dcb6ca226580cec733e3fae3390074337b3778a8baab506b455418138ba32b476cc972aa3961e764eaf8c8655981d8a903c95320884499499a27579f166b9434edd4b823f45620e2f8e91d9fe7238b92df51a6963527ab3a809139b0d454361fe0522f34b578ba16395d3d2d0b496f073a6523f0c450175a3d35e8518b4a048e7a3577d7518eda9acbd801c91f967d1be8174e5383c63ab67d2cab11e9794dd842057b8a27bcb0c2d55aca5e44eb3d302e2ff912192ad124483120202d0c9e14c81a2db6a4111f116aa3008857d15c117f7fcaefac6c255bad40fd071504bfba571e3e36f7a1affbd24512ccaae3ce1117d2770c2fea45aa85f6621abff7e05fde75415fe9f6baae53e56717410ea856dd23d65eba29f8e38158dfb327d68a0526e4c3a2e5dbc43469bc8af22922db1f910a8915061ba378fe9407275339d7aa7bce0dc2ec8083158640a612886b1f981a7d91828608d7df61c70d7fe22aa3588fa9fed6a477b11b757155cae87945c0a1c38902cfc0570a48db065e28f1b8602a7fec1ce5e2199af99d4c6366225ac40974fac062894b788c007b3c29823bbadbdba9b214bbb070de2a7431ce5c79f9ba76eda7e0ab659242714961e1ba831aca6f9c4e23f297c104c9f360843ea46344b5bd45df80f2bdc6f77e36a03c2697bef407efc8e25db55c6749d2f847a6e223212e6beb12d7a03e879d549f55cb9ab27c554a1e9e7288c1e0d715070d73e68ec193c57acd7cb4ba3b454bad02bc4d951c638790a10e9b1e80ed57b03a65b0dac859fbb28959b75b12931650b75d719ec07372b5a37bf9be828a65d6660103f66e08ad5bad69fcd41ed56e06f290fc5ed490071344d00bb35caa4670665e2e9ff842a98204d3066f9d84e17e03c0a28a147dc264b725320301406fd001aabc297da074618f2bb3b2412c62defa6738a8c1a8ef26937c4461a990625fa5150b0c8261dee9bfe6411207eb5895f46c5a4be9bb93109ab1aeef8f9e44bb40c1cd7fee50509e3b4cc4f6ed1b7eaa98bd1e98cc9d1ec4ba2bce85d8c09dcd2d480eaf0d579bb60398cad1f789235c462fe8e79eab5618abd5bcfaf8d5e23fcc85f9caab8e7e74ffb2bab9e210f41195223c00bc8847e699eee757cab39d2cf9143bbd600c0fe3c60cabdc0b87f26c7ff4cccf08ff51ad62852bfc6def3dfa2ed8754405cc935cfb5df1f0209d3a6db6b5df8937bdf294064bcde24b26167caf596e1025334a210c385154930fd21d0a6b751353ab388546494cb2fa9fbe04491361ad033973de082023d60a28a399b7ac168a37409cf4f494a1f46853a4cdee9271a63a542ef80e62de0b7f19828d030da4b50b691646aadb6bb277d2c3d1dbc51e2dc4ec7b636794fa89f5ddc74663b0ec3d6c0b3642a7c64662435081a0f55cc683939cff981032b7cf0104ea1ff8d823da48bf6c47767466e55639478fc63fda5fc5368bf18e3e282e446ab7acb2e7505956e9b2610cb0c774bd52a532b60876f1bdf257d8e947a5eed5f163c94390d33fc55fc4f2418b591325ee804a035227edfd74da647502b3a399b27e93c5c98ae1a95feb31df741fe2d735a447d19d34a11d0d38c010cb05f92786c32938ecee8a83bcd3eb2f9746d231fac01c82bb364d7d4f5dc1defd945f4600f06561caa2222075ef174a01eeb6506fff099abb927492e49c3a6ef168c0c9d66aa76edaf15636316773c80a262ab5b599e8eb219d9d07a4eb1b29a13af9475940c7a27e4f229b97513288a9980bda55bdc8e11fea69edd06cb56e5b88878ea63f8c082df5983c82c393045494616f63649f3503d4b63c27992c2db7867ec0becf4bfc107bc40b685726b33d1db7cc9916086e80574ea9b777edbdd1b7b4902bfd3dffc491338edcb70204a7cd8eaf63ce9111423fd0875105d88b0c5d509c593ac669fc49b699538d864a320dac898bf24b29bf94267017c4daf48a3df1f3db47396a0dade12954e3c2aef822d0bcc4a3cc3d649a5e8693a0a9f7db73526a346740114f7a4f4ccefcb0470afa024e840b2f4dd71eb7fec3d2da654c020f539acda5bf7a34ca328588a2862cd3b3e6e04309f0ccfb1689705263ac196ec93a97d294545044f138303a315476543598f56d99eb142b526c1f656962bc8fa2247def756507aa11aa7ad5514a105fe0eb33741e1e89c43ffc5b7ac1f5e260138ae1f067acd9b8e01f427e33f7996a0e419490ab010a3e40a086cbcebbbdb7138583df79b94acdc349dffa2fb3f433fb1521dcf29ab65834c08e74c744bc66de838983c769452c889", 0x1000}, {&(0x7f0000001a40)="c4cf1f1b399e3d8f106445c1efd25451bb4725042173128b5227a08eb102288c19bcc0eeb54990dfd31d10f5be3812dcd0a54e6f8c2209de75d10a46fae5b85e22540fe9930ea8e7aa2393d67b4273361c2faae93c4bd17d0e8c8c8b807d9f5a25e852ed934f7d2af42f41b51d76b55a96d9c260b3aba097bf6ef578ed36d6b820ae2fb90b40ab", 0x87}], 0x4}, 0x8800) bpf$BPF_GET_PROG_INFO(0xf, &(0x7f0000000540)={0xffffffffffffffff, 0xe0, &(0x7f00000003c0)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, &(0x7f0000000080)=[0x0, 0x0], ""/16, 0x0, 0x0, 0x0, 0x0, 0x1, 0x2, &(0x7f0000000180)=[0x0], &(0x7f00000001c0)=[0x0, 0x0], 0x0, 0x64, &(0x7f0000000200)=[{}, {}, {}], 0x18, 0x10, &(0x7f0000000280), &(0x7f00000002c0), 0x8, 0x97, 0x8, 0x8, &(0x7f0000000300)}}, 0x10) r5 = socket$nl_route(0x10, 0x3, 0x0) r6 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a) ioctl$sock_SIOCGIFINDEX(r6, 0x8933, &(0x7f0000000000)={'bridge0\x00', 0x0}) sendmsg$nl_route(r5, &(0x7f0000000100)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000040)=ANY=[@ANYBLOB="240000007000010000000000fddbdf2507000000", @ANYRES32=r7, @ANYBLOB="0c000180080001"], 0x24}, 0x1, 0x0, 0x0, 0x4000000}, 0x440040c4) ioctl$sock_SIOCGIFINDEX(0xffffffffffffffff, 0x8933, &(0x7f0000000580)={'dummy0\x00', 0x0}) ioctl$ifreq_SIOCGIFINDEX_batadv_hard(0xffffffffffffffff, 0x8933, &(0x7f00000005c0)={'batadv_slave_1\x00', 0x0}) r10 = socket(0x10, 0x80002, 0x0) sendmsg$nl_route(r10, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000040)=ANY=[@ANYBLOB="4800000010001fff0000056800080000faff0000", @ANYRES32=0x0, @ANYBLOB="c30c424700000000280012800a00010076786c616e00000018000280140011"], 0x48}}, 0x0) ioctl$sock_ipv6_tunnel_SIOCCHGTUNNEL(0xffffffffffffffff, 0x89f3, &(0x7f0000000680)={'syztnl2\x00', &(0x7f0000000600)={'ip6tnl0\x00', 0x0, 0x29, 0xaf, 0x5, 0x3, 0x4, @ipv4={'\x00', '\xff\xff', @empty}, @dev={0xfe, 0x80, '\x00', 0x22}, 0x10, 0x20, 0xfffffc01, 0x7683}}) sendmsg$ETHTOOL_MSG_DEBUG_GET(r1, &(0x7f0000000800)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x10000000}, 0xc, &(0x7f00000007c0)={&(0x7f00000006c0)={0xd4, r3, 0x100, 0x70bd29, 0x25dfdbfb, {}, [@HEADER={0x48, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r4}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r7}, @ETHTOOL_A_HEADER_FLAGS={0x8}, @ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x2}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'caif0\x00'}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r8}]}, @HEADER={0x30, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_FLAGS={0x8}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r9}, @ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x3}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'team_slave_1\x00'}]}, @HEADER={0xc, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_FLAGS={0x8}]}, @HEADER={0xc, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x2}]}, @HEADER={0x24, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x1}, @ETHTOOL_A_HEADER_FLAGS={0x8}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8}, @ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x6}]}, @HEADER={0xc, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r11}]}]}, 0xd4}, 0x1, 0x0, 0x0, 0x10}, 0x4080) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000340)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000faffffffb703000008000000b704000000000000850000000300000095"], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) 2m32.421428368s ago: executing program 6 (id=7113): sendmsg$IPSET_CMD_CREATE(0xffffffffffffffff, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000200)={0x30, 0x2, 0x6, 0x101, 0x0, 0x0, {0x0, 0x0, 0x3}, [@IPSET_ATTR_FAMILY={0x5, 0x5, 0xa}, @IPSET_ATTR_SETNAME={0x9, 0x2, 'syz0\x00'}, @IPSET_ATTR_PROTOCOL={0x5}]}, 0x30}}, 0x0) socket$netlink(0x10, 0x3, 0x0) r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000200)=ANY=[], 0x30}, 0x1, 0x0, 0x0, 0x8000}, 0x20000011) 2m32.243995303s ago: executing program 6 (id=7114): socket$inet_icmp_raw(0x2, 0x3, 0x1) syz_init_net_socket$bt_hci(0x1f, 0x3, 0x5) close(0x4) r0 = socket$nl_netfilter(0x10, 0x3, 0xc) r1 = getpid() ioctl$sock_FIOSETOWN(r0, 0x8901, &(0x7f0000000380)=r1) r2 = socket(0x1d, 0x2, 0x6) getsockopt$IP_VS_SO_GET_SERVICE(r2, 0x0, 0x483, &(0x7f0000000100), &(0x7f0000000180)=0x68) r3 = gettid() syz_open_procfs$namespace(r3, &(0x7f0000000040)='ns/ipc\x00') unshare(0x22020800) bpf$BPF_GET_PROG_INFO(0xf, &(0x7f0000000640)={0xffffffffffffffff, 0xe0, &(0x7f0000000540)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, ""/16, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xb7, &(0x7f0000000440)=[{}], 0x8, 0x10, &(0x7f0000000480), &(0x7f00000004c0), 0x8, 0xfc, 0x8, 0x0, 0x0}}, 0x10) r4 = bpf$PROG_LOAD(0x5, &(0x7f0000000080)={0x1, 0x5, &(0x7f0000001340)=ANY=[@ANYBLOB="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"], &(0x7f0000000140)='GPL\x00'}, 0x48) bpf$BPF_GET_PROG_INFO(0xf, &(0x7f00000006c0)={r4, 0xe0, &(0x7f00000005c0)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, ""/16, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8, 0x0, 0x0}}, 0x10) r5 = socket(0x8, 0x3, 0x0) ioctl$sock_netrom_SIOCADDRT(r5, 0x6180, 0x0) ioctl$PPPIOCGFLAGS(r5, 0x61d0, &(0x7f0000000000)) 2m31.952317313s ago: executing program 6 (id=7117): r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000100), 0x0, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x2}) ioctl$TUNSETLINK(r0, 0x400454cd, 0x308) r1 = openat$tun(0xffffffffffffff9c, &(0x7f00000000c0), 0x0, 0x0) r2 = openat$tun(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) close(r2) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000000)) ioctl$SIOCSIFHWADDR(r2, 0x8922, &(0x7f0000002280)={'syzkaller0\x00', @random="2b0100004ec6"}) close(r1) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000a40)) ioctl$SIOCSIFHWADDR(r1, 0x8914, &(0x7f0000000140)={'syzkaller0\x00', @random="371692e7f7ef"}) r3 = socket$nl_generic(0x10, 0x3, 0x10) r4 = socket$qrtr(0x2a, 0x2, 0x0) close(r4) sendmsg$nl_generic(r3, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000001ac0)={&(0x7f0000000340)={0x14, 0x26, 0x1, 0xf0bd26, 0x25dfdbfc, {0x3}}, 0x14}}, 0x24048000) 2m0.496321729s ago: executing program 34 (id=7117): r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000100), 0x0, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x2}) ioctl$TUNSETLINK(r0, 0x400454cd, 0x308) r1 = openat$tun(0xffffffffffffff9c, &(0x7f00000000c0), 0x0, 0x0) r2 = openat$tun(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) close(r2) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000000)) ioctl$SIOCSIFHWADDR(r2, 0x8922, &(0x7f0000002280)={'syzkaller0\x00', @random="2b0100004ec6"}) close(r1) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000a40)) ioctl$SIOCSIFHWADDR(r1, 0x8914, &(0x7f0000000140)={'syzkaller0\x00', @random="371692e7f7ef"}) r3 = socket$nl_generic(0x10, 0x3, 0x10) r4 = socket$qrtr(0x2a, 0x2, 0x0) close(r4) sendmsg$nl_generic(r3, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000001ac0)={&(0x7f0000000340)={0x14, 0x26, 0x1, 0xf0bd26, 0x25dfdbfc, {0x3}}, 0x14}}, 0x24048000) 1m53.722842824s ago: executing program 7 (id=7290): r0 = socket$inet6(0xa, 0x2, 0x3a) setsockopt$inet6_int(r0, 0x29, 0x11, &(0x7f0000000140)=0x2, 0x4) r1 = socket$nl_generic(0x10, 0x3, 0x10) r2 = syz_genetlink_get_family_id$gtp(&(0x7f0000000080), r1) sendmsg$GTP_CMD_GETPDP(r1, &(0x7f00000003c0)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f0000000340)={0x2c, r2, 0x4a47a7f866acd8cb, 0x70bd27, 0x25dfdbfd, {}, [@GTPA_VERSION={0x8}, @GTPA_LINK={0x8}, @GTPA_FAMILY={0x5, 0xd, 0x1f}]}, 0x2c}, 0x1, 0x0, 0x0, 0x4041}, 0x4020080) 1m53.636509658s ago: executing program 7 (id=7293): r0 = socket$inet_icmp_raw(0x2, 0x3, 0x1) setsockopt$IP_VS_SO_SET_ADD(r0, 0x0, 0x482, &(0x7f00000008c0)={0x84, @rand_addr=0x64010101, 0x4e22, 0x1, 'nq\x00', 0x0, 0x2, 0x6f}, 0x2c) sendmsg$sock(r0, &(0x7f0000000540)={0x0, 0x0, &(0x7f0000000400)=[{&(0x7f0000000000)="9e2e986d823c1b3ba662829378441be8a4808d2691fb051dc217f6ea6781294b8ed41210ff419c0515ffb7c8358d9c457c8f15afac00da6a88efb408a9b40352f6b5d44898c7db7c55e13dfce95ceb89224bcffc91805c95bd11c22c3227d317c47d5fb8ffbdf3a32f672b019ff6267fec8f8aa7c64b5fe1131660d6e5ed45955b505eb6b79845971ea9e342f452729a91c8fad052b576ec", 0x98}, {&(0x7f00000000c0)="8b58b9758eda5388fdd5727c613837bb47570af1fb93b4e231c502f10ac801e8bb165d0e88a0337bf17a96b859725dfc4ae501f1c85a0c90769e4296cbb60a88c6a5feaed25f12b85111", 0x4a}, {&(0x7f0000000140)="4c3b17ac3e2df9052bd519bf122d483a1785c48ebc8523f7cff5ecfa79e524ba2ff3619f62516529269818c46726c509bc39064cdbfdf25467de4661b3c183d61ae1fa5551af0ea8efa4e5e08606b5ea1519ef8450ee4b80c8c89b5eea490c7c7aa6401dcc7812045ccbf401bc7b61d4032303aefa2304ef1c921bcb4862865dcf406f4a6a7098ec9896ffc763ed621dd4527bcc3a67bff8138d3a0ed2979a682746be1f470e8bce39b37ea033f2bf4664240745cf2c6e549803c5af827527ecfe91ba3df999a305f001ab55f1a4dcf2", 0xd0}, {&(0x7f0000000240)="2cf6c3fb4b9266663fda7b6f8c3e6ea0199bc1c85739a28404", 0x19}, {&(0x7f0000000280)="bcb28b2d79a1849868bfcf1358defaeb2a7ee855d7f206a1ed058bb7a4d098b5824671de497ea054296451532c1cbc8886d7c9414b0864d8ecf29e0e9c0f961f87c15d58642c09da9db7ecb7f6d5f710efb88cd00e8cd73d94a9255b4a924a5a", 0x60}, {&(0x7f0000000300)="d3f422ca949c51eeeb0b73e70c2f759beb06c09aa28ff8c6169a981941fbbdb0aba400a811b033f539763dd7b6083685b77bf2160ca870a9b8acc64e7f4875c62ad6cc93bb26c1aaa6ff09fff3771c8b1ab159d7ac3c87283de70ead022357db4e68d34a6181840efb17670f6f1528a221f0a1bab5909f68ff5630df0ae5fdc0beec65cdb068824fbaab13e5480c5aa67bb8231c43e7da1d0e2d8a3a5d82a29e448607e15724a798593b9c3eb87f6696cd22cc141e2a30baa0660d54e69242c973ad91", 0xc3}], 0x6, &(0x7f0000000480)=[@txtime={{0x18, 0x1, 0x3d, 0x8000}}, @mark={{0x14, 0x1, 0x24, 0x6}}, @mark={{0x14, 0x1, 0x24, 0x51}}, @mark={{0x14, 0x1, 0x24, 0x5}}, @timestamping={{0x14, 0x1, 0x25, 0x9}}, @mark={{0x14, 0x1, 0x24, 0x3}}, @txtime={{0x18, 0x1, 0x3d, 0xbbf9}}], 0xa8}, 0x20000804) setsockopt$IP_VS_SO_SET_DEL(r0, 0x0, 0x483, &(0x7f0000001280)={0x20000000000084, @broadcast, 0x1ff4, 0x200000001, 'rr\x00', 0x19, 0x821}, 0x2c) 1m53.449525215s ago: executing program 7 (id=7296): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) r1 = socket$igmp(0x2, 0x3, 0x2) ioctl$sock_inet_SIOCSARP(r1, 0x8955, &(0x7f0000000100)={{0x2, 0x4e22, @empty}, {0x304, @local}, 0x5a, {0x2, 0x4e25, @private=0xa010102}}) r2 = socket$nl_rdma(0x10, 0x3, 0x14) sendmsg$RDMA_NLDEV_CMD_RES_CQ_GET(r2, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000640)=ANY=[@ANYBLOB="5800000018140100000000000000008008003d000500000008001a0000000000080003000400000008003d00010000000800030002000000080001000200000008000300010000"], 0x58}}, 0x0) sendmsg$NFT_BATCH(r0, &(0x7f0000000440)={0x0, 0x0, &(0x7f0000000200)={&(0x7f00000000c0)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a28000000000a0101000000005e1affd5020000000900010073797a300000000008000240000000032c000000030a01030000e6ff00000000020000000900010073797a30000000000900030073797a320000000014000000110001"], 0x7c}}, 0x0) r3 = syz_genetlink_get_family_id$tipc2(&(0x7f0000000280), 0xffffffffffffffff) r4 = socket$inet(0x2, 0x3, 0x2) setsockopt$inet_mreqsrc(r4, 0x0, 0x27, &(0x7f0000000040)={@multicast2, @local, @loopback}, 0xc) r5 = socket$inet_udp(0x2, 0x2, 0x0) bind$inet(r5, &(0x7f00000001c0)={0x2, 0x0, @local}, 0x10) connect$inet(r5, &(0x7f0000000480)={0x2, 0x0, @multicast2}, 0x10) r6 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$TIPC_NL_KEY_SET(r6, &(0x7f0000000b00)={0x0, 0x0, &(0x7f0000000ac0)={&(0x7f0000000880)=ANY=[@ANYBLOB=' \x00\x00\x00', @ANYRES16=r3, @ANYBLOB="01000000000000000000170000000c0006"], 0x20}}, 0x0) sendmsg$NFT_BATCH(r0, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000600)={{0x14, 0x10, 0x1, 0x0, 0x0, {0x1}}, [@NFT_MSG_NEWSET={0x3c, 0x12, 0xa, 0x9, 0x0, 0x0, {0x2}, [@NFTA_SET_NAME={0x9, 0x2, 'syz2\x00'}, @NFTA_SET_KEY_TYPE={0x8}, @NFTA_SET_TABLE={0x9, 0x1, 'syz0\x00'}, @NFTA_SET_FLAGS={0x8, 0x3, 0x1, 0x0, 0x105}]}], {0x14}}, 0x64}}, 0x0) r7 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000000)='hugetlb.1GB.usage_in_bytes\x00', 0x275a, 0x0) r8 = socket$inet6_tcp(0xa, 0x1, 0x0) listen(r8, 0x0) r9 = bpf$MAP_CREATE(0x0, &(0x7f00000023c0)=ANY=[@ANYBLOB="1200000004000000080000000b"], 0x48) r10 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r10, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000180)=ANY=[@ANYBLOB="4c00000068000301000000ef00000000000100000000000006000300000000000800010000000000240002"], 0x4c}}, 0x0) bpf$MAP_UPDATE_ELEM(0x2, &(0x7f0000000100)={r9, &(0x7f0000000240), &(0x7f0000000140)=@tcp6=r8}, 0x20) sendmsg$IPCTNL_MSG_CT_NEW(r0, &(0x7f00000003c0)={&(0x7f00000002c0), 0xc, &(0x7f0000000380)={&(0x7f0000000300)={0x78, 0x0, 0x1, 0x201, 0x0, 0x0, {0xa, 0x0, 0x2}, [@CTA_LABELS={0x10, 0x16, 0x1, 0x0, [0x3ff, 0x15f257e9, 0x5]}, @CTA_NAT_DST={0xc, 0xd, 0x0, 0x1, [@CTA_NAT_V4_MAXIP={0x8, 0x2, @remote}]}, @CTA_MARK_MASK={0x8}, @CTA_LABELS_MASK={0x20, 0x17, [0xd5e, 0x8, 0x4, 0xad, 0x0, 0x30000000, 0x9]}, @CTA_FILTER={0xc, 0x19, 0x0, 0x1, [@CTA_FILTER_ORIG_FLAGS={0x8, 0x1, 0xb55}]}, @CTA_HELP={0x14, 0x5, 0x0, 0x1, {0xf, 0x1, 'netbios-ns\x00'}}]}, 0x78}, 0x1, 0x0, 0x0, 0x840}, 0x4000) ioctl$sock_SIOCINQ(r8, 0x541b, 0x0) sendfile(r7, r7, 0x0, 0xa) connect$tipc(r7, &(0x7f0000000040)=@id={0x1e, 0x3, 0x3, {0x4e21, 0x4}}, 0x10) 1m53.042843318s ago: executing program 7 (id=7305): r0 = syz_init_net_socket$802154_dgram(0x24, 0x2, 0x0) bind$802154_dgram(r0, &(0x7f0000000040)={0x24, @long={0x3, 0x0, {0xaaaaaaaaaaaa0202}}}, 0x14) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000003c0)={0x1e, 0x4, &(0x7f0000000000)=@framed={{}, [@ldst={0x1, 0x2, 0x3, 0x2, 0x1, 0x11}]}, &(0x7f0000000380)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x24, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x4}, 0x94) 1m52.892028604s ago: executing program 7 (id=7308): r0 = socket$inet6_sctp(0xa, 0x801, 0x84) connect$inet6(r0, &(0x7f0000000100)={0xa, 0x0, 0x0, @private1, 0x200000}, 0x1c) sendto$inet6(r0, &(0x7f00000001c0)='O', 0x1, 0x80, &(0x7f0000000280)={0xa, 0x0, 0x0, @private2}, 0x1c) (async) shutdown(r0, 0x1) (async) setsockopt$inet_sctp6_SCTP_STREAM_SCHEDULER(r0, 0x84, 0x7b, &(0x7f0000000140)={0x0, 0x2}, 0x8) getsockopt$inet_sctp6_SCTP_STREAM_SCHEDULER(r0, 0x84, 0x7c, &(0x7f00000000c0), &(0x7f0000000180)=0x8) (async) r1 = socket$packet(0x11, 0x2, 0x300) (async) r2 = bpf$PROG_LOAD(0x5, &(0x7f0000000200)={0xc, 0xe, &(0x7f0000000400)=ANY=[@ANYBLOB="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"], &(0x7f0000000340)='syzkaller\x00'}, 0x94) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000080)={r2, 0x18000000000002a0, 0xfe, 0x10000000, &(0x7f0000000100)="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", 0x0, 0xfe, 0x60000000, 0x0, 0x6}, 0x2c) recvmmsg(r1, &(0x7f00000012c0)=[{{&(0x7f0000001000)=@rxrpc=@in6={0x21, 0x0, 0x2, 0x0, {0xa, 0x0, 0x0, @private2}}, 0x0, &(0x7f0000001100)=[{&(0x7f0000001080)=""/102}, {&(0x7f0000001400)=""/4096}, {&(0x7f0000001200)=""/190}], 0x0, &(0x7f0000002400)=""/247}, 0x5}], 0x2, 0x10022, 0x0) mmap(&(0x7f0000001000/0xc00000)=nil, 0xc00000, 0x2000009, 0x3032, 0xffffffffffffffff, 0x0) (async) r3 = socket$inet6_sctp(0xa, 0x5, 0x84) getsockopt$bt_hci(r3, 0x84, 0xd, &(0x7f0000003140)=""/4111, &(0x7f0000000000)=0x4) r4 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) write$bt_hci(r4, &(0x7f0000000040)={0x1, @create_phy_link={{0x435, 0x17}, {0xc8, 0xf, 0x70, "e3c70d5199869eb661b0c4413a6637b4d8c7f09e"}}}, 0x1b) (async) r5 = accept$alg(0xffffffffffffffff, 0x0, 0x0) sendmsg$alg(r5, &(0x7f00000003c0)={0x0, 0x0, &(0x7f0000000380)=[{&(0x7f00000002c0)="00ae40869e00bed07ae292a3e172104e7867014924c4b4a50ec8265e2972342cbc291d9e2091a88871e746c1608346e1205380ae55306272a435486c390eb095c6dcbc09348f", 0x46}], 0x1, &(0x7f0000000e00)=[@op={0x18}, @assoc={0x18, 0x117, 0x4, 0x9}, @iv={0xd8, 0x117, 0x2, 0xbe, "e4bd311defcf942e544874c61ba631ec44064782a48716e22ddb407a9ace52efab625a0c50738828a9a74b276dcc253da15664db6c31f2ce42adf46a2bde903f8af4884b49ee0201a46cb9a858eed276a0a95afdf804653ccd5e5a7776b7e7a6edcce1f679cdfec30ccacfea97c4d0cb02a3896995b24086d0c76c4f374ed744568ed87741dc8d6d2b7199c9732be115480360b106c6fb6db2dfb86f4bbd5d2bf4e81e64178b622e5ce6a97b45e380bc65dc8d113d86775f6b226a86b2a3"}, @iv={0xa8, 0x117, 0x2, 0x8d, "9e62e0e702eab6b661e2bb67b6dfdbb5e7a6f48aba2be5f1e7bee589779137ee397360a2d287ad4641507e6fc3f0d897415b4322581d7f384ab14664adc4b2044c33a3b4fe24919109a20e9c368f62cfcc0010d5d36c17bd0643a3326ce718f358f998ad07c020beba797cf90e3780ee288a33859fa1ff557a51a90ee53f15accf23887a7c849a7ca0e398ecf0"}, @op={0x18}], 0x1c8, 0x4010}, 0x8010) 1m52.680194709s ago: executing program 7 (id=7312): r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000080)={0x4, 0xe, &(0x7f0000000880)=ANY=[@ANYBLOB="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"], &(0x7f0000000140)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x8, &(0x7f00000001c0), 0xfffffedf, 0x10, &(0x7f0000000040), 0xffffff95, 0x0, 0xffffffffffffffff, 0xd}, 0x48) r2 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r2, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000001ac0)={&(0x7f0000000340)={0x14, 0x26, 0x1, 0xf0bd26, 0x25dfdbfc, {0x3}}, 0x14}}, 0x24048000) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000180)={r1, 0xe72, 0xe, 0x0, &(0x7f0000000000)="63eced8e46dc3fad77b7b3f7b986", 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x50) socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000300)={'bridge0\x00', 0x0}) getpeername$packet(0xffffffffffffffff, &(0x7f0000000200)={0x11, 0x0, 0x0}, &(0x7f0000000280)=0x14) r5 = socket$nl_route(0x10, 0x3, 0x0) r6 = socket(0x10, 0x803, 0x0) sendmsg$nl_route_sched(r6, &(0x7f00000004c0)={0x0, 0x0, &(0x7f00000003c0)={0x0, 0x24}}, 0x0) getsockname$packet(r6, &(0x7f0000000380)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000180)=0x14) sendmsg$nl_route(r5, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000040)=ANY=[@ANYBLOB="3c0000001000010400eeffffffff00f687000000", @ANYRES32=r7, @ANYBLOB="01000000010000001c0012000c000100627269646765"], 0x3c}}, 0x0) sendmsg$nl_route_sched(r5, &(0x7f0000000440)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000006000)=@newqdisc={0x44, 0x24, 0xe0b, 0x70bd2d, 0x0, {0x0, 0x0, 0x0, r7, {}, {0xffff, 0xffff}, {0xd, 0xe}}, [@qdisc_kind_options=@q_cake={{0x9}, {0x14, 0x2, [@TCA_CAKE_SPLIT_GSO={0x8}, @TCA_CAKE_NAT={0x8, 0xb, 0x1}]}}]}, 0x44}, 0x1, 0x0, 0x0, 0x24020080}, 0x4044080) sendmsg$nl_route(r5, &(0x7f0000000380)={0x0, 0x0, &(0x7f0000000440)={&(0x7f00000002c0)=@mpls_getnetconf={0x2c, 0x52, 0x4, 0x70bd25, 0x25dfdbff, {}, [@NETCONFA_IFINDEX={0x8, 0x1, r3}, @NETCONFA_IFINDEX={0x8, 0x1, r4}, @IGNORE_ROUTES_WITH_LINKDOWN={0x8, 0x6, 0x1}]}, 0x2c}, 0x1, 0x0, 0x0, 0x8080}, 0x0) 1m37.676668563s ago: executing program 35 (id=7312): r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000080)={0x4, 0xe, &(0x7f0000000880)=ANY=[@ANYBLOB="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"], &(0x7f0000000140)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x8, &(0x7f00000001c0), 0xfffffedf, 0x10, &(0x7f0000000040), 0xffffff95, 0x0, 0xffffffffffffffff, 0xd}, 0x48) r2 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r2, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000001ac0)={&(0x7f0000000340)={0x14, 0x26, 0x1, 0xf0bd26, 0x25dfdbfc, {0x3}}, 0x14}}, 0x24048000) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000180)={r1, 0xe72, 0xe, 0x0, &(0x7f0000000000)="63eced8e46dc3fad77b7b3f7b986", 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x50) socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000300)={'bridge0\x00', 0x0}) getpeername$packet(0xffffffffffffffff, &(0x7f0000000200)={0x11, 0x0, 0x0}, &(0x7f0000000280)=0x14) r5 = socket$nl_route(0x10, 0x3, 0x0) r6 = socket(0x10, 0x803, 0x0) sendmsg$nl_route_sched(r6, &(0x7f00000004c0)={0x0, 0x0, &(0x7f00000003c0)={0x0, 0x24}}, 0x0) getsockname$packet(r6, &(0x7f0000000380)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000180)=0x14) sendmsg$nl_route(r5, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000040)=ANY=[@ANYBLOB="3c0000001000010400eeffffffff00f687000000", @ANYRES32=r7, @ANYBLOB="01000000010000001c0012000c000100627269646765"], 0x3c}}, 0x0) sendmsg$nl_route_sched(r5, &(0x7f0000000440)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000006000)=@newqdisc={0x44, 0x24, 0xe0b, 0x70bd2d, 0x0, {0x0, 0x0, 0x0, r7, {}, {0xffff, 0xffff}, {0xd, 0xe}}, [@qdisc_kind_options=@q_cake={{0x9}, {0x14, 0x2, [@TCA_CAKE_SPLIT_GSO={0x8}, @TCA_CAKE_NAT={0x8, 0xb, 0x1}]}}]}, 0x44}, 0x1, 0x0, 0x0, 0x24020080}, 0x4044080) sendmsg$nl_route(r5, &(0x7f0000000380)={0x0, 0x0, &(0x7f0000000440)={&(0x7f00000002c0)=@mpls_getnetconf={0x2c, 0x52, 0x4, 0x70bd25, 0x25dfdbff, {}, [@NETCONFA_IFINDEX={0x8, 0x1, r3}, @NETCONFA_IFINDEX={0x8, 0x1, r4}, @IGNORE_ROUTES_WITH_LINKDOWN={0x8, 0x6, 0x1}]}, 0x2c}, 0x1, 0x0, 0x0, 0x8080}, 0x0) 3.001669249s ago: executing program 5 (id=8579): socket$can_bcm(0x1d, 0x2, 0x2) socketpair$unix(0x1, 0x1, 0x0, &(0x7f00000000c0)) (async) socketpair$unix(0x1, 0x1, 0x0, &(0x7f00000000c0)) socket$inet_mptcp(0x2, 0x1, 0x106) (async) socket$inet_mptcp(0x2, 0x1, 0x106) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000440)={0x13, 0x13, &(0x7f0000000080)=ANY=[@ANYBLOB="18080000fa0000000000000000010000851000000600000018000000", @ANYRES32, @ANYBLOB="00000000000000006608000000000000180000000000000000000000000000009500000000000000360a020000000000180100002020782500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b50a00000000000085000000060000009500000000000000"], &(0x7f0000000000)='GPL\x00', 0x2, 0xff5c, &(0x7f00000001c0)=""/222, 0x41100, 0x8, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffff97}, 0x78) openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='devices.list\x00', 0x275a, 0x0) socket$nl_route(0x10, 0x3, 0x0) socket$nl_netfilter(0x10, 0x3, 0xc) (async) socket$nl_netfilter(0x10, 0x3, 0xc) syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) socket$nl_generic(0x10, 0x3, 0x10) socket$inet_tcp(0x2, 0x1, 0x0) (async) socket$inet_tcp(0x2, 0x1, 0x0) syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) (async) syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) socket$nl_route(0x10, 0x3, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000340)) socket$inet(0xa, 0x801, 0x84) (async) r0 = socket$inet(0xa, 0x801, 0x84) connect$inet(r0, &(0x7f0000004cc0)={0x2, 0x0, @remote={0xac, 0x14, 0xffffffffffffffff}}, 0x10) listen(r0, 0x8) syz_genetlink_get_family_id$nl80211(0x0, 0xffffffffffffffff) socket$nl_generic(0x10, 0x3, 0x10) (async) socket$nl_generic(0x10, 0x3, 0x10) accept4(r0, 0x0, 0x0, 0x0) (async) accept4(r0, 0x0, 0x0, 0x0) openat$tun(0xffffffffffffff9c, &(0x7f0000000100), 0x0, 0x0) r1 = socket$can_bcm(0x1d, 0x2, 0x2) ioctl$ifreq_SIOCGIFINDEX_vcan(r1, 0x8933, &(0x7f0000000100)={'vcan0\x00', 0x0}) connect$can_bcm(r1, &(0x7f00000000c0)={0x1d, r2}, 0x10) (async) connect$can_bcm(r1, &(0x7f00000000c0)={0x1d, r2}, 0x10) sendmsg$can_bcm(r1, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000580)=ANY=[@ANYBLOB="0100000003ece1e40ad8871461ab0800", @ANYRES64=0x0, @ANYRES64, @ANYRES64=0x0, @ANYRES64, @ANYBLOB="3bf81bb9f9"], 0x20000600}, 0x1, 0x0, 0x0, 0x40000}, 0x0) socket$packet(0x11, 0x3, 0x300) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000140)) r3 = socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$ethtool(&(0x7f0000000180), 0xffffffffffffffff) (async) r4 = syz_genetlink_get_family_id$ethtool(&(0x7f0000000180), 0xffffffffffffffff) bpf$PROG_LOAD(0x5, &(0x7f0000000440)={0x1, 0x4, &(0x7f0000000400)=ANY=[@ANYBLOB="b40000000000000069ec2962c50000000400000000000000950000000000eb00"], &(0x7f0000000080)='GPL\x00', 0x2, 0x3f7, &(0x7f000000cf3d)=""/195}, 0x48) sendmsg$ETHTOOL_MSG_COALESCE_SET(r3, &(0x7f0000000540)={0x0, 0x1f, &(0x7f0000000500)={&(0x7f00000001c0)=ANY=[@ANYBLOB='\\\x00\x00\x00', @ANYRES16=r4, @ANYBLOB="010000000000000000001400000008000200fc00000018000180140002006e657464657673696d300000000000000800050000fcffff08000900fc000000080011000700000008000e00800000000800", @ANYRES32=r3], 0x5c}, 0x1, 0x0, 0x0, 0x800}, 0x0) 2.828287006s ago: executing program 5 (id=8583): r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nfc(&(0x7f0000001000), r0) sendmsg$NFC_CMD_VENDOR(r0, &(0x7f0000000140)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x1000000}, 0xc, &(0x7f0000000080)={&(0x7f00000011c0)={0x1100, r1, 0x100, 0x70bd2a, 0x25dfdbfd, {}, [@NFC_ATTR_VENDOR_ID={0x8, 0x1d, 0x94}, @NFC_ATTR_VENDOR_DATA={0x1004, 0x1f, "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"}, @NFC_ATTR_VENDOR_DATA={0x9b, 0x1f, "647754f275ce266932c65b04c849b2a4b425e5192c3ceb6aa7435ecda2fd31d9d843fc671b065e915e6972c7d7a20785e12a9682da0b8668050aae42a227e5c077817a2d3e7c20db76ef29cb7ff6bbd77460b5aadbce1dc231bece5400691c31fa737c22ff7a14af39cd074ae51f0cee772611a80669025a9ca3a0648dbd03cb7201917f323e64a4f8790ac8152925eeb73acf096136d1"}, @NFC_ATTR_VENDOR_ID={0x8, 0x1d, 0x12}, @NFC_ATTR_VENDOR_SUBCMD={0x8, 0x1e, 0x82eb}, @NFC_ATTR_VENDOR_SUBCMD={0x8, 0x1e, 0x2}, @NFC_ATTR_VENDOR_SUBCMD={0x8, 0x1e, 0x10}, @NFC_ATTR_VENDOR_ID={0x8, 0x1d, 0x1}, @NFC_ATTR_VENDOR_DATA={0x1a, 0x1f, "d3bad6cefb824c7be11a6d25615d905d6a5a3c52a850"}]}, 0x1100}, 0x1, 0x0, 0x0, 0x4}, 0x4004000) syz_emit_ethernet(0x55, &(0x7f0000000200)={@broadcast, @local, @val={@void, {0x8100, 0x7, 0x0, 0x2}}, {@generic={0x6000, "ca99336ab6236f0eb9526eaec75b9baa5e6fe331efaa837fcb1dab95797cf14519b61655ef4843635a3cf3e0e1797f409270e0f3b4106700f9677608b80fa0d2f728a5"}}}, 0x0) sendmsg$NFC_CMD_DISABLE_SE(r0, &(0x7f0000001180)={0x0, 0x0, &(0x7f0000001140)={&(0x7f0000001100)={0x14, r1, 0x100, 0x70bd2d, 0x25dfdbfb}, 0x14}, 0x1, 0x0, 0x0, 0x20044110}, 0x20000010) r2 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0xd, 0x4, &(0x7f0000000040)=ANY=[@ANYBLOB="180000000000000000000000000000009112c7000000000095"], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0xd, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x1}, 0x94) r3 = socket$inet6_sctp(0xa, 0x5, 0x84) setsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX_OLD(r3, 0x84, 0x6b, &(0x7f0000000240)=[@in6={0xa, 0x0, 0x0, @ipv4={'\x00', '\xff\xff', @private=0xa010102}}], 0x1c) r4 = socket$nl_rdma(0x10, 0x3, 0x14) sendmsg$RDMA_NLDEV_CMD_DELLINK(r4, &(0x7f00000005c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f00000001c0)={0x18, 0x1404, 0x1, 0x70bd2c, 0x1, "", [@RDMA_NLDEV_ATTR_DEV_INDEX={0x8, 0x1, 0x2}]}, 0x18}}, 0x20004018) syz_emit_ethernet(0x1d5, &(0x7f0000000cc0)=ANY=[@ANYBLOB="aaaaaaaaaaaaaaaaaaaaaa1c86dd6000ed04019f3afffe8000000000000000000000000000bbff02000000000000000000000000000186009078000000000000000000000000050aa78c000005dc8080a2030003004023493b87aafaffffffffffffff23732472eefa45ad96579269748e254c1e4a8a8b3f0ab0c430d3be2776f75c901e5c6e141cf9df3e34060600000000000000dac15084dbaf736b41e5af0502000100000500000000002600040018fe906d26efe39393fe08f73eabc5977b1190a3a6ad8338f1511cdd10c35d8f6de79fc7fd175f75649fa368a32c829af02d7f44d92324a7051e460a13ddde25a5b85b9d930914625d8a049b4cf0d129806a610ad8477a2499a9a0527f75b655a6653d0363a979acf93f88eea07d68423e90280409de1657275f716a2bf3915d1783e8eb477b0d1170f0ecbdef4c23e1b76e9ab3d2fbe4b34438d2a77577edd0ebed9682b851b380ae0cab282af9d7ebe668177704c5fd4698c934de4731f3f61effc9000d06aa85616177c61bc943afcb84619755403946b0730a18d5c38cf7dcad830f2dc8674b87ba8b58f81ece27975cc39e595e9af90b4fe92a38d25551c2d9ebfc5dfc5a2a501b7e483de3f808895c5f4a1a2367bc591dd8b094822ff0dea07c9a1f643c822a18b79f7c5eba379af8380c20d5296bbe067f091bec474f46b7b06a52a806d23527ef7bf96237aef7ce571fdc2fff73f8a2632d54b0c4a537f65abd274ca679143dec13c6841143b8b6d9c6909750ed634b4fa5f36b19ded20185616631dfce0c0fa9897903e31e0917fe1a83e80c991133d0f415e2fc1e36b2c9ec821cd89cd58aa87b17619bebbfcfac0b1a0635d03933844d3fc4c1432be5c81aaaf1d96d070c7f234ad39acbf49cdeebaca8acb7c2c763"], 0x0) r5 = socket$kcm(0x10, 0x2, 0x0) sendmsg$inet(r5, &(0x7f0000000080)={0x0, 0x74, &(0x7f0000000100)=[{&(0x7f00000001c0)="5c00000012006bab9a3fe3d86e17aa0a046b876c1d0048007ea60864160af36504001a0038001d001931a0e69ee517d34460bc06000000a705251e6182949a3651f60a84c9f4d4938037e70e4509c5bb", 0x33fe0}], 0x1, 0x0, 0x0, 0x1f00c00e}, 0x0) recvmsg$kcm(r5, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000004140)=[{&(0x7f0000000240)=""/212, 0xd4}], 0x1}, 0x0) r6 = socket$nl_generic(0x10, 0x3, 0x10) r7 = syz_genetlink_get_family_id$ethtool(&(0x7f0000000280), 0xffffffffffffffff) sendmsg$ETHTOOL_MSG_FEATURES_SET(r6, &(0x7f0000002540)={0x0, 0x0, &(0x7f0000002500)={&(0x7f0000002580)={0x1040, r7, 0x1, 0x0, 0x0, {}, [@ETHTOOL_A_FEATURES_WANTED={0x1014, 0x3, 0x0, 0x1, [@ETHTOOL_A_BITSET_VALUE={0x1004, 0x4, "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"}, @ETHTOOL_A_BITSET_SIZE={0x8, 0x2, 0x7ffd}, @ETHTOOL_A_BITSET_MASK={0x4}]}, @ETHTOOL_A_FEATURES_HEADER={0x18, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'veth0_to_bond\x00'}]}]}, 0x1040}}, 0x0) ioctl$sock_ipv4_tunnel_SIOCADDTUNNEL(r4, 0x89f1, &(0x7f0000000440)={'tunl0\x00', &(0x7f0000000380)={'gretap0\x00', 0x0, 0x10, 0x40, 0x8000, 0x1, {{0x1c, 0x4, 0x3, 0x4, 0x70, 0x66, 0x0, 0x1, 0x4, 0x0, @multicast2, @initdev={0xac, 0x1e, 0x1, 0x0}, {[@ra={0x94, 0x4}, @cipso={0x86, 0x25, 0x2, [{0x7, 0xc, "033bebaf5910ed56f347"}, {0x6, 0x8, "09d8611d98c8"}, {0x2, 0x6, "eead3972"}, {0x6, 0x5, "1bad3f"}]}, @lsrr={0x83, 0x7, 0x55, [@local]}, @ssrr={0x89, 0x13, 0x5f, [@local, @private=0xa010101, @multicast1, @remote]}, @cipso={0x86, 0x15, 0x2, [{0x0, 0xf, "fca1491a79cfc3aff0fd4cebb7"}]}, @noop]}}}}}) ioctl$ifreq_SIOCGIFINDEX_wireguard(r4, 0x8933, &(0x7f0000000480)={'wg1\x00', 0x0}) ioctl$sock_ipv4_tunnel_SIOCDELTUNNEL(0xffffffffffffffff, 0x89f2, &(0x7f0000000580)={'syztnl1\x00', &(0x7f00000004c0)={'syztnl0\x00', 0x0, 0x80, 0x8, 0x4, 0x1, {{0x1a, 0x4, 0x2, 0x3c, 0x68, 0x66, 0x0, 0x5, 0x2b, 0x0, @local, @multicast2, {[@cipso={0x86, 0x52, 0x3, [{0x6, 0x4, "d018"}, {0x5, 0xe, "20bd541a39dcfecb12d5e0fa"}, {0x2, 0x11, "c0433a5020bab85755209bdd9053fe"}, {0x5, 0x11, "ff3e619ee07c14fcff1c459d83b0d9"}, {0x0, 0x4, ' |'}, {0x1, 0x7, "b50a3794a5"}, {0x2, 0xd, "5143160a3e2187a21f1b71"}]}]}}}}}) ioctl$sock_ipv4_tunnel_SIOCADDTUNNEL(0xffffffffffffffff, 0x89f1, &(0x7f0000000680)={'gretap0\x00', &(0x7f0000000600)={'gretap0\x00', 0x0, 0x8, 0x7800, 0x4, 0x11, {{0x9, 0x4, 0x1, 0x5, 0x24, 0x66, 0x0, 0x6f, 0x2f, 0x0, @broadcast, @private=0xa010101, {[@generic={0x44, 0xe, "931f9698e26cb6ec99b56655"}]}}}}}) bpf$BPF_GET_PROG_INFO(0xf, &(0x7f0000000a40)={r2, 0xe0, &(0x7f0000000940)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, &(0x7f00000006c0)=[0x0, 0x0], ""/16, 0x0, 0x0, 0x0, 0x0, 0x5, 0x3, &(0x7f0000000700)=[0x0, 0x0, 0x0, 0x0, 0x0], &(0x7f0000000740)=[0x0, 0x0, 0x0], 0x0, 0x11, &(0x7f0000000780)=[{}, {}, {}, {}, {}, {}, {}, {}, {}], 0x48, 0x10, &(0x7f0000000880), &(0x7f00000008c0), 0x8, 0xe5, 0x8, 0x8, &(0x7f0000000900)}}, 0x10) sendmsg$ETHTOOL_MSG_EEE_GET(r2, &(0x7f0000000c80)={&(0x7f0000000340)={0x10, 0x0, 0x0, 0x20}, 0xc, &(0x7f0000000c40)={&(0x7f00000022c0)={0x190, r7, 0x4, 0x70bd29, 0x25dfdbfe, {}, [@HEADER={0x54, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'dvmrp0\x00'}, @ETHTOOL_A_HEADER_FLAGS={0x8}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r8}, @ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x2}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'ip6_vti0\x00'}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8}]}, @HEADER={0x1c, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x3}, @ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x1}, @ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x3}]}, @HEADER={0x9c, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_FLAGS={0x0, 0x3, 0x3}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'ip6gretap0\x00'}, @ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x1}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r10}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'veth0\x00'}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'syzkaller1\x00'}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'vxcan1\x00'}, @ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x2}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'bridge_slave_1\x00'}, @ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x2}, @ETHTOOL_A_HEADER_DEV_INDEX={0x0, 0x1, r10}, @ETHTOOL_A_HEADER_FLAGS={0x0, 0x3, 0x2}, @ETHTOOL_A_HEADER_FLAGS={0x0, 0x3, 0x1}]}, @HEADER={0x24, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_FLAGS={0x3a, 0x3, 0x2}, @ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x1}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r11}, @ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x3}]}, @HEADER={0x4c, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x3}, @ETHTOOL_A_HEADER_DEV_INDEX={0x32}, @ETHTOOL_A_HEADER_DEV_INDEX={0x0, 0x1, r9}, @ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x3}, @ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x3}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'nr0\x00'}]}]}, 0x190}, 0x1, 0x0, 0x0, 0x48040}, 0x20040000) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f05ebbee1, 0x8031, 0xffffffffffffffff, 0x0) r12 = socket$inet_tcp(0x2, 0x1, 0x0) getsockopt$inet_tcp_buf(r12, 0x6, 0xb, 0x0, &(0x7f0000000340)) r13 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r13, &(0x7f0000000840)={0x0, 0x0, &(0x7f0000000800)={&(0x7f00000001c0)=ANY=[@ANYBLOB="4c030000160001000000000000000000fc010000000000000000000000000000fe88000000000000000000000000000100"/64, @ANYRES32=0x0, @ANYRES32=0x0, @ANYBLOB="ac141400000000000000000000000000000000006c000000ac14140000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000025bd7000000000000000000000000000000000000300000006"], 0x34c}}, 0x0) socket$nl_generic(0x10, 0x3, 0x10) setsockopt(r3, 0x84, 0x7f, &(0x7f0000000040)="020000000980ffff", 0x8) 1.608616843s ago: executing program 5 (id=8601): socket$netlink(0x10, 0x3, 0x0) (async) r0 = socket$netlink(0x10, 0x3, 0x0) socket(0x200000000000011, 0x2, 0x0) (async) r1 = socket(0x200000000000011, 0x2, 0x0) accept4$phonet_pipe(r1, &(0x7f0000000040), &(0x7f0000000080)=0x10, 0x80800) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000000)={'bridge0\x00', 0x0}) bind$packet(r1, &(0x7f0000000180)={0x11, 0x17, r2, 0x1, 0x40, 0x6, @broadcast}, 0x14) getsockname$packet(r1, &(0x7f00000018c0)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route(r0, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000001880)={&(0x7f0000000100)=ANY=[@ANYBLOB="38000000540001000000000000c4000007008209", @ANYRES32=r3, @ANYBLOB="20000100", @ANYRES32=r2, @ANYBLOB="00000001e000030000000000000000000000000008"], 0x38}, 0x1, 0x0, 0x0, 0x881}, 0x0) sendmmsg(r0, &(0x7f00000002c0), 0x40000000000009f, 0x0) 1.603357856s ago: executing program 3 (id=8602): r0 = socket$rxrpc(0x21, 0x2, 0xa) r1 = socket$inet6(0xa, 0x3, 0x2) getsockname(r1, &(0x7f0000000d00)=@xdp={0x2c, 0x0, 0x0}, &(0x7f0000000c80)=0x80) r3 = socket$inet_icmp_raw(0x2, 0x3, 0x1) ioctl$sock_SIOCETHTOOL(r3, 0x8946, &(0x7f0000000040)={'erspan0\x00', &(0x7f0000000080)=@ethtool_wolinfo={0x5, 0x2, 0x3ff, "09650bced381"}}) r4 = socket$netlink(0x10, 0x3, 0x0) r5 = socket$inet6(0xa, 0x3, 0x8000000003c) setsockopt$inet6_IPV6_FLOWLABEL_MGR(r5, 0x29, 0x6, 0x0, 0x2000000) r6 = socket$inet_sctp(0x2, 0x1, 0x84) openat$tun(0xffffffffffffff9c, &(0x7f0000000000), 0x48241, 0x0) getsockopt$inet_sctp_SCTP_MAX_BURST(r6, 0x84, 0xd, &(0x7f0000000000)=@assoc_value={0x0}, &(0x7f0000000040)=0x8) getsockopt$inet_sctp_SCTP_DEFAULT_PRINFO(r6, 0x84, 0x72, &(0x7f0000000200)={r7, 0x2, 0x30}, &(0x7f0000000240)=0xc) sendmsg$nl_route(r4, &(0x7f0000000600)={0x0, 0x0, &(0x7f0000000340)={&(0x7f00000002c0)=ANY=[@ANYBLOB="480000001000810500"/20, @ANYRES32=r2, @ANYBLOB="0000000000000000280012800a00010063616e"], 0x48}}, 0x0) ioctl$sock_TIOCINQ(r0, 0x541b, &(0x7f0000000000)) 1.472776492s ago: executing program 5 (id=8603): r0 = socket$inet_udp(0x2, 0x2, 0x0) r1 = socket$pppl2tp(0x18, 0x1, 0x1) connect$pppl2tp(r1, &(0x7f0000000000)=@pppol2tpv3={0x18, 0x1, {0x0, r0, {0x2, 0x0, @multicast1}, 0x2}}, 0x2e) r2 = syz_genetlink_get_family_id$l2tp(&(0x7f00000008c0), 0xffffffffffffffff) r3 = socket$inet6_udp(0xa, 0x2, 0x0) sendto(r3, 0x0, 0x0, 0x10000, &(0x7f0000000040)=@nl=@unspec, 0x80) r4 = socket$inet_icmp(0x2, 0x2, 0x1) splice(r4, &(0x7f0000000280)=0x1, r1, &(0x7f00000002c0), 0xb, 0x8) connect$inet(r0, &(0x7f0000000040)={0x2, 0x4e21, @dev={0xac, 0x14, 0x14, 0xb}}, 0x10) r5 = socket$netlink(0x10, 0x3, 0x0) sendmmsg(r5, &(0x7f00000002c0), 0x40000000000009f, 0x0) r6 = syz_genetlink_get_family_id$devlink(&(0x7f00000001c0), 0xffffffffffffffff) sendmsg$DEVLINK_CMD_TRAP_GROUP_SET(r5, &(0x7f00000003c0)={&(0x7f00000000c0)={0x10, 0x0, 0x0, 0x1}, 0xc, &(0x7f0000000380)={&(0x7f0000000400)={0x14, r6, 0x100, 0x70bd28, 0x25dfdbff}, 0x14}, 0x1, 0x0, 0x0, 0x400a005}, 0x840) r7 = openat$tun(0xffffffffffffff9c, &(0x7f00000001c0), 0xa2f01, 0x0) ioctl$TUNSETIFF(r7, 0x400454ca, &(0x7f0000000000)={'syzkaller1\x00', 0x6bf1c2d5adba8c32}) r8 = socket$kcm(0x2, 0xa, 0x2) ioctl$SIOCSIFHWADDR(r8, 0x8914, &(0x7f0000000180)={'syzkaller1\x00', @link_local}) socketpair$tipc(0x1e, 0x1, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) recvmsg(r9, &(0x7f0000000500)={&(0x7f0000000040)=@hci, 0x80, &(0x7f0000000100)=[{&(0x7f0000000400)=""/248, 0x200105d0}], 0x1}, 0x1f00) sendmsg$tipc(r10, &(0x7f0000000240)={0x0, 0xfffffff5, &(0x7f0000000200)=[{&(0x7f0000000140)="a2", 0xfffffdef}], 0x1}, 0x0) socket$packet(0x11, 0x3, 0x300) sendmmsg$sock(r10, &(0x7f000000bb40)=[{{0x0, 0x0, 0x0}}, {{0x0, 0x0, 0x0}}], 0x2, 0x4000011) write$tun(r7, &(0x7f0000000340)=ANY=[@ANYBLOB="0a000000bbbbbbbbbbbbaaaaaaaaaabb86dd"], 0x4b) r11 = socket$nl_generic(0x10, 0x3, 0x10) getsockopt$inet_sctp6_SCTP_AUTOCLOSE(0xffffffffffffffff, 0x84, 0x4, &(0x7f0000000200), &(0x7f0000000240)=0x4) accept$alg(0xffffffffffffffff, 0x0, 0x0) sendmsg$L2TP_CMD_SESSION_DELETE(r11, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000180)={0x34, r2, 0x1, 0x1070bd2c, 0x4, {0x5}, [@L2TP_ATTR_PW_TYPE={0x6, 0x1, 0x5}, @L2TP_ATTR_CONN_ID={0x8, 0x9, 0x2}, @L2TP_ATTR_SESSION_ID={0x8, 0xb, 0x8000000}, @L2TP_ATTR_PEER_SESSION_ID={0x8, 0xc, 0xaa6}]}, 0x34}, 0x1, 0x0, 0x0, 0x20008844}, 0x0) 1.472519738s ago: executing program 3 (id=8604): r0 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCETHTOOL(r0, 0x8946, &(0x7f0000000080)={'veth0_to_bond\x00', &(0x7f00000004c0)=@ethtool_channels={0x3d, 0xfffffffc, 0x0, 0x0, 0x0, 0x2, 0x2, 0x3, 0x9}}) bpf$PROG_LOAD(0x5, &(0x7f0000000440)={0x7, 0x20000000000001fc, &(0x7f0000000000)=ANY=[@ANYBLOB="05000000000000007111af00000000008510000002000000850000000500000095000000000000009500a505000000005160b53d4aaf0ecda3e967683918fabfc90ec1e06c5f48cb9ce64e815b7b74d0c3e9365f188f6a00591b"], &(0x7f0000000080)='GPL\x00', 0x5, 0xc3, &(0x7f000000cf3d)=""/195, 0x0, 0x0, '\x00', 0x0, @fallback=0x29, 0xffffffffffffffff, 0x6, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x10, 0x2}, 0x94) 1.332749238s ago: executing program 3 (id=8608): bpf$MAP_CREATE(0x0, &(0x7f0000000100)=ANY=[@ANYBLOB="1900000004000000040000000200000000000000", @ANYRES32=0x1, @ANYBLOB='\x00'/20, @ANYRES32=0x0, @ANYRES32, @ANYBLOB="000000327b83f91be1f3fbe3c3c596d8ab00"/34], 0x50) socket$kcm(0x10, 0x2, 0x0) r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000240)=ANY=[@ANYBLOB="0e00000004000000040000000200000000000000c539132f44b75c23fde814c8ea7201d1d3e4e74e334ce67bee445c5e76d0e95a4b9e384c682722dcfbfeae1e8ba42839d81b18546d2d19bc842f7538aff331fee1ab8fb63e35cfc9a0f501463544db2f6cb396ee4010046c3b28b198ef01d2d83aa9fb77d48378f460062bff", @ANYRES32=0x1, @ANYBLOB='\x00'/20, @ANYRES32=0x0, @ANYRES32, @ANYBLOB='\x00'/28], 0x50) bpf$MAP_GET_NEXT_KEY(0x2, &(0x7f00000000c0)={r0, &(0x7f0000000100), &(0x7f0000000000), 0x2}, 0x20) 1.228090781s ago: executing program 3 (id=8610): r0 = socket$alg(0x26, 0x5, 0x0) bind$alg(r0, &(0x7f0000000540)={0x26, 'skcipher\x00', 0x0, 0x0, 'ecb-twofish-avx\x00'}, 0x58) setsockopt$ALG_SET_KEY(r0, 0x117, 0x1, &(0x7f0000c18000)="ad56b6c5820fae9d6dcd3292ea54c7beef915d564c90c200", 0x18) (async) setsockopt$ALG_SET_KEY(r0, 0x117, 0x1, &(0x7f0000c18000)="ad56b6c5820fae9d6dcd3292ea54c7beef915d564c90c200", 0x18) r1 = accept4(r0, 0x0, 0x0, 0x0) ioctl$int_in(r1, 0x5452, &(0x7f0000000100)=0x9) (async) ioctl$int_in(r1, 0x5452, &(0x7f0000000100)=0x9) sendmsg$IPSET_CMD_FLUSH(r1, &(0x7f0000000040)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000140)={0x14, 0x4, 0x6, 0x5, 0x0, 0x0, {0x0, 0x0, 0x7}}, 0xffffff88}, 0x1, 0x0, 0x0, 0x8000}, 0x0) bpf$PROG_LOAD(0x5, &(0x7f00000054c0)={0x2, 0x16, &(0x7f0000000800)=ANY=[@ANYBLOB="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"], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x26}, 0x94) 1.067303812s ago: executing program 2 (id=8612): r0 = socket$netlink(0x10, 0x3, 0x0) (async) socket(0x2a, 0x2, 0x0) (async) r1 = socket$igmp(0x2, 0x3, 0x2) setsockopt$MRT_INIT(r1, 0x0, 0xc8, &(0x7f0000003d40), 0x4) (async) setsockopt$MRT_ADD_VIF(r1, 0x0, 0xca, &(0x7f0000003d80)={0x0, 0x0, 0x0, 0x0, @vifc_lcl_addr=@local, @dev}, 0x10) (async) syz_emit_ethernet(0x3e, &(0x7f0000000240)={@local, @broadcast, @void, {@ipv4={0x800, @icmp={{0x5, 0x4, 0x0, 0x0, 0x30, 0x0, 0x0, 0x80, 0x2, 0x0, @empty, @multicast1=0xe0000300}, @dest_unreach={0x3, 0x7, 0x0, 0x0, 0x3, 0xc58, {0x5, 0x4, 0x0, 0x7, 0x0, 0x65, 0xe, 0x4e, 0x24, 0xc, @empty, @dev={0xac, 0x14, 0x14, 0x44}}}}}}}, 0x0) (async) r2 = socket(0x10, 0x803, 0x0) sendmsg$IPVS_CMD_SET_INFO(r2, &(0x7f0000000b00)={0x0, 0x0, &(0x7f0000000ac0)={0x0, 0x14}}, 0x0) (async) getsockname$packet(r2, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000140)=@newlink={0x44, 0x10, 0xffffff1f, 0x0, 0x80, {0x0, 0x0, 0x0, 0x0, 0x0, 0x3f00}, [@IFLA_LINKINFO={0x1c, 0x12, 0x0, 0x1, @gretap={{0xb}, {0xc, 0x2, 0x0, 0x1, [@IFLA_GRE_REMOTE={0x8, 0x7, @loopback}]}}}, @IFLA_MASTER={0x8, 0xa, r3}]}, 0x44}}, 0x4000) 948.333468ms ago: executing program 8 (id=8614): r0 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) bind$bt_hci(r0, &(0x7f0000000000)={0x1f, 0xffffffffffffffff, 0x7}, 0x6) (async) r1 = socket$inet6_udp(0xa, 0x2, 0x0) (async) r2 = socket$inet6(0xa, 0x3, 0x84) setsockopt$inet6_IPV6_XFRM_POLICY(r2, 0x29, 0x23, &(0x7f0000000280)={{{@in=@local, @in=@empty, 0x0, 0x56, 0x4e26, 0x0, 0x2}, {0x0, 0x0, 0x0, 0x100000002, 0xfffffffffffffff6, 0x2000000, 0x1, 0x8}, {0x7, 0x0, 0x4}, 0x932, 0x0, 0x1, 0x0, 0x3}, {{@in6=@rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x02', 0x4d4, 0x6c}, 0xa, @in6=@empty, 0x2, 0x4, 0x0, 0x0, 0xfffffffc, 0x8, 0x4}}, 0xe8) connect$inet6(r2, &(0x7f0000000000)={0xa, 0x0, 0x0, @ipv4={'\x00', '\xff\xff', @dev={0xac, 0x14, 0x14, 0xff}}}, 0x1c) (async) setsockopt$IP6T_SO_SET_REPLACE(r1, 0x29, 0x40, &(0x7f0000000000)=@raw={'raw\x00', 0x3c1, 0x3, 0x4e0, 0x320, 0x18c, 0x203, 0x0, 0x19030000, 0x410, 0x2e0, 0x2e0, 0x410, 0x2e0, 0x3, 0x0, {[{{@uncond, 0x300, 0x2d8, 0x320, 0x0, {}, [@common=@unspec=@bpf0={{0x230}, {0x13, [{0x0, 0x0, 0x8, 0x2000000}, {}, {}, {}, {}, {}, {}, {0x0, 0x4}, {0x0, 0x0, 0x0, 0x8}, {}, {0x0, 0x0, 0x0, 0xe}, {0x0, 0x0, 0x0, 0x3}, {0x0, 0x0, 0x3}, {0x2, 0x0, 0x4}, {}, {0x0, 0x0, 0x0, 0x1}, {0x0, 0x0, 0x8}, {}, {0x16}, {0x0, 0xff}, {}, {0x7}, {0x0, 0x0, 0x0, 0x4}, {0x0, 0x4, 0x0, 0x101}, {}, {0x0, 0x0, 0x5}, {}, {0x0, 0x0, 0x0, 0x9}, {0xfffc, 0x0, 0x0, 0x6}, {0x0, 0x0, 0x0, 0x3}, {0xfffc}, {}, {}, {}, {0xfffe, 0xfb}, {}, {0x7a04}, {}, {}, {0x20, 0x6}, {}, {}, {}, {0x0, 0x0, 0x0, 0x800}, {}, {0xb8c, 0x0, 0x0, 0xf00}, {0x0, 0x1, 0x0, 0x3}, {0x3}, {}, {}, {0x0, 0x0, 0x0, 0xffffffff}, {}, {0x4}, {}, {}, {}, {}, {0x0, 0xfd}, {0x0, 0x0, 0x0, 0x1}, {}, {0x0, 0x0, 0x0, 0xfffffffd}, {}, {0x0, 0xb}, {0x4, 0x2}]}}]}, @common=@unspec=@IDLETIMER={0x48, 'IDLETIMER\x00', 0x0, {0x2, 'syz0\x00', {0x8001}}}}, {{@uncond, 0x0, 0xa8, 0xf0}, @common=@unspec=@IDLETIMER={0x48, 'IDLETIMER\x00', 0x0, {0xb, 'syz0\x00', {0x6c8}}}}], {{'\x00', 0x0, 0xa8, 0xd0}, {0x28}}}}, 0x540) 828.040418ms ago: executing program 2 (id=8615): r0 = socket(0x2a, 0x2, 0x0) sendmsg$TIPC_NL_LINK_GET(0xffffffffffffffff, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000000280)={0x0, 0x24}}, 0x0) getsockname$packet(r0, &(0x7f0000000200)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000001480)=0x14) r2 = socket$rds(0x15, 0x5, 0x0) r3 = syz_init_net_socket$bt_hidp(0x1f, 0x3, 0x6) r4 = socket$unix(0x1, 0x2, 0x0) ioctl$sock_bt_hidp_HIDPCONNADD(r3, 0x400448c8, 0x0) ioctl$sock_SIOCETHTOOL(r4, 0x8946, &(0x7f0000001d40)={'bridge0\x00', &(0x7f0000000d00)=@ethtool_dump={0x40, 0x1, 0x9}}) setsockopt$SO_RDS_MSG_RXPATH_LATENCY(r2, 0x114, 0xa, &(0x7f0000000040)=ANY=[], 0x4) syz_emit_ethernet(0x56, &(0x7f0000000000)=ANY=[@ANYBLOB="0180c200ea00aaaaaaaaaabb000d01000080250100008335126e052893e2a35cb143a5f60bb0d202d9c0a04ee43553245a001fc35d54464a52fc17e835f1c12689f58fa9e79b52ea04eab7cac7f06ca2373c3bad5d9b"], 0x0) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000100)=@newqdisc={0x24, 0x24, 0xf0b, 0x70bd29, 0x0, {0x0, 0x0, 0x0, r1, {0xa}, {0xffff, 0xffff}, {0xd}}}, 0x24}}, 0x0) bpf$PROG_LOAD(0x5, &(0x7f000000e000)={0xe, 0x4, &(0x7f0000000040)=ANY=[@ANYBLOB="b40500000000000071104d000000000063012d00000000009500000000000000"], &(0x7f0000003ff6)='GPL\x00', 0x5, 0xfd90, &(0x7f000000cf3d)=""/195, 0x0, 0x0, '\x00', 0x0, @sk_skb}, 0x48) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000500)={&(0x7f0000000080)=@newtfilter={0x44, 0x2c, 0xd27, 0x0, 0x0, {0x0, 0x0, 0x0, r1, {0xfffa, 0x2}, {}, {0x1c, 0xfff9}}, [@filter_kind_options=@f_flower={{0xb}, {0x14, 0x2, [@TCA_FLOWER_KEY_ETH_TYPE={0x6, 0x8, 0x800}, @TCA_FLOWER_KEY_IP_TTL={0x5, 0x4b, 0x1}]}}]}, 0x44}}, 0x24004000) r5 = socket$netlink(0x10, 0x3, 0x0) sendmmsg(r5, &(0x7f00000002c0), 0x40000000000009f, 0x0) 827.605661ms ago: executing program 8 (id=8616): r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0xa8442, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x7101}) r1 = socket$unix(0x1, 0x5, 0x0) r2 = socket(0x2c, 0x3, 0x0) r3 = bpf$MAP_CREATE(0x0, &(0x7f0000000400)=ANY=[@ANYBLOB="110000000400000004000000ff"], 0x17) getsockname$packet(0xffffffffffffffff, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) (async) getsockname$packet(0xffffffffffffffff, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) bpf$MAP_UPDATE_ELEM(0x2, &(0x7f00000001c0)={r3, &(0x7f0000000140), &(0x7f0000000080)=@udp6=r2}, 0x20) (async) bpf$MAP_UPDATE_ELEM(0x2, &(0x7f00000001c0)={r3, &(0x7f0000000140), &(0x7f0000000080)=@udp6=r2}, 0x20) bpf$MAP_UPDATE_ELEM(0x2, &(0x7f0000000340)={r3, &(0x7f0000000200), &(0x7f0000001500)=@tcp=r2}, 0x20) (async) bpf$MAP_UPDATE_ELEM(0x2, &(0x7f0000000340)={r3, &(0x7f0000000200), &(0x7f0000001500)=@tcp=r2}, 0x20) setsockopt$RDS_GET_MR_FOR_DEST(r2, 0x114, 0x7, &(0x7f00000006c0)={@pppol2tpv3={0x18, 0x1, {0x0, r2, {0x2, 0x4e21, @initdev={0xac, 0x1e, 0x1, 0x0}}, 0x3, 0x0, 0x0, 0x2}}, {&(0x7f00000022c0)=""/4096, 0x1000}, &(0x7f0000000500), 0x4}, 0xa0) (async) setsockopt$RDS_GET_MR_FOR_DEST(r2, 0x114, 0x7, &(0x7f00000006c0)={@pppol2tpv3={0x18, 0x1, {0x0, r2, {0x2, 0x4e21, @initdev={0xac, 0x1e, 0x1, 0x0}}, 0x3, 0x0, 0x0, 0x2}}, {&(0x7f00000022c0)=""/4096, 0x1000}, &(0x7f0000000500), 0x4}, 0xa0) close(r2) socket$kcm(0x11, 0x3, 0x0) (async) r4 = socket$kcm(0x11, 0x3, 0x0) openat$tun(0xffffffffffffff9c, &(0x7f0000000400), 0x0, 0x0) (async) r5 = openat$tun(0xffffffffffffff9c, &(0x7f0000000400), 0x0, 0x0) r6 = socket(0x400000000010, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r6, 0x8933, &(0x7f0000000380)={'syzkaller0\x00', 0x0}) r8 = syz_genetlink_get_family_id$nl80211(&(0x7f00000000c0), r6) ioctl$sock_SIOCGIFINDEX_80211(r2, 0x8933, &(0x7f00000002c0)={'wlan1\x00', 0x0}) sendmsg$NL80211_CMD_SET_CHANNEL(r2, &(0x7f0000000480)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x10000000}, 0xc, &(0x7f0000000440)={&(0x7f0000000300)={0x30, r8, 0x2, 0x70bd26, 0x25dfdbfe, {{}, {@val={0x8, 0x3, r9}, @val={0xc, 0x99, {0xb, 0x7e}}}}, [@NL80211_ATTR_CHANNEL_WIDTH={0x8, 0x9f, 0x2}]}, 0x30}, 0x1, 0x0, 0x0, 0x8040}, 0x0) sendmsg$nl_route_sched(r6, &(0x7f00000012c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000005c0)=@newqdisc={0x38, 0x24, 0x4ee4e6a52ff56541, 0x70bd2a, 0xffffffff, {0x0, 0x0, 0x0, r7, {0x0, 0xfff1}, {0xffff, 0xffff}}, [@qdisc_kind_options=@q_multiq={{0xb}, {0x8}}]}, 0x38}}, 0x0) ioctl$sock_SIOCGIFINDEX(r6, 0x8933, &(0x7f00000004c0)={'dvmrp1\x00'}) (async) ioctl$sock_SIOCGIFINDEX(r6, 0x8933, &(0x7f00000004c0)={'dvmrp1\x00'}) sendmsg$nl_route_sched(r6, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000640)=@newtfilter={0x44, 0x2c, 0xd27, 0x170bd2b, 0x2, {0x0, 0x0, 0x0, r7, {0x0, 0x10}, {}, {0x8, 0xffe0}}, [@filter_kind_options=@f_flow={{0x9}, {0x14, 0x2, [@TCA_FLOW_MODE={0x8, 0x2, 0x1}, @TCA_FLOW_KEYS={0x8, 0x1, 0xc75a}]}}]}, 0x44}, 0x1, 0x0, 0x0, 0xc804}, 0x2) close(r5) (async) close(r5) socket$unix(0x1, 0x2, 0x0) ioctl$SIOCSIFHWADDR(r5, 0x8914, &(0x7f0000002280)={'syzkaller0\x00', @multicast}) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) getsockopt$inet_sctp_SCTP_PEER_ADDR_PARAMS(r6, 0x84, 0x9, &(0x7f0000000780)={0x0, @in={{0x2, 0x4e20, @initdev={0xac, 0x1e, 0x1, 0x0}}}, 0x9a4, 0x3, 0x1, 0x2, 0x0, 0x9, 0x2}, &(0x7f0000000540)=0x9c) getsockopt$inet_sctp6_SCTP_PRIMARY_ADDR(r6, 0x84, 0x6, &(0x7f0000000840)={r11, @in6={{0xa, 0x4e20, 0x7fff, @private1, 0x10}}}, &(0x7f0000000580)=0x84) setsockopt$sock_attach_bpf(r4, 0x107, 0xf, &(0x7f0000000600), 0x56) (async) setsockopt$sock_attach_bpf(r4, 0x107, 0xf, &(0x7f0000000600), 0x56) sendmsg$kcm(r4, &(0x7f0000000280)={&(0x7f0000000380)=@xdp={0x2c, 0x0, r10, 0x42}, 0x80, &(0x7f00000001c0)=[{&(0x7f0000000200)="27030200000314000e00003c000300000000001100000000000000000000000000000000000085dc9d9839dc1336", 0x2e}], 0x1}, 0x4005) 805.158593ms ago: executing program 2 (id=8617): r0 = socket$packet(0x11, 0x2, 0x300) r1 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r1, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000100)={{0x14, 0x10, 0x1, 0x0, 0x0, {0x5}}, [@NFT_MSG_NEWTABLE={0x20, 0x0, 0xa, 0x401, 0x0, 0x0, {0x1, 0x0, 0x8003}, [@NFTA_TABLE_NAME={0x9, 0x1, 'syz0\x00'}]}, @NFT_MSG_NEWCHAIN={0x2c, 0x3, 0xa, 0x101, 0x0, 0x0, {0x1, 0x0, 0xfffd}, [@NFTA_CHAIN_TABLE={0x9, 0x1, 'syz0\x00'}, @NFTA_CHAIN_NAME={0x9, 0x3, 'syz2\x00'}]}, @NFT_MSG_NEWRULE={0x84, 0x6, 0xa, 0x401, 0x0, 0x0, {0x1}, [@NFTA_RULE_CHAIN_ID={0x8}, @NFTA_RULE_EXPRESSIONS={0x5c, 0x4, 0x0, 0x1, [{0x34, 0x1, 0x0, 0x1, @exthdr={{0xb}, @val={0x24, 0x2, 0x0, 0x1, [@NFTA_EXTHDR_DREG={0x8, 0x1, 0x1, 0x0, 0xc}, @NFTA_EXTHDR_OFFSET={0x8}, @NFTA_EXTHDR_LEN={0x8, 0x4, 0x1, 0x0, 0x22}, @NFTA_EXTHDR_TYPE={0x5, 0x2, 0x7}]}}}, {0x24, 0x1, 0x0, 0x1, @redir={{0xa}, @val={0x14, 0x2, 0x0, 0x1, [@NFTA_REDIR_REG_PROTO_MIN={0x8, 0x1, 0x1, 0x0, 0xd}, @NFTA_REDIR_REG_PROTO_MAX={0x8, 0x2, 0x1, 0x0, 0xa}]}}}]}, @NFTA_RULE_TABLE={0x9, 0x1, 'syz0\x00'}]}], {0x14, 0x11, 0x1, 0x0, 0x0, {0x7}}}, 0xf8}}, 0x0) setsockopt$packet_int(r0, 0x107, 0x17, &(0x7f0000000080)=0x101, 0x4) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000480)={&(0x7f0000000a00)=@newtaction={0x18c, 0x30, 0x8, 0x70bd2b, 0x25dfdbfe, {}, [{0x88, 0x1, [@m_mirred={0x84, 0x6, 0x0, 0x0, {{0xb}, {0x44, 0x2, 0x0, 0x1, [@TCA_MIRRED_PARMS={0x20, 0x2, {{0x1ff, 0x1, 0xffffffffffffffff, 0x98, 0xc43}, 0x3}}, @TCA_MIRRED_PARMS={0x20, 0x2, {{0x3, 0x3, 0x5, 0x8001, 0xaf4}, 0x2}}]}, {0x16, 0x6, "cc81c7e04bd8de9bfd134ac033898f89eb61"}, {0xc, 0x7, {0x1}}, {0xc, 0x8, {0x2, 0x3}}}}]}, {0xf0, 0x1, [@m_simple={0xec, 0x2, 0x0, 0x0, {{0xb}, {0xc0, 0x2, 0x0, 0x1, [@TCA_DEF_DATA={0xa4, 0x3, '\xbb\xbb\x9b\xbb\xbb\xbbk\xf4\x92\x87#2S\x80\xc3\xf7\x8c\x1e\xba9\xaf}i\x9a\x01\x9f\x19\xe3\xbcw\x94\xb4\xef\x15\xc4\xd7b\xad N\xfe\xae\x01n\x98P\xb8\x12\x1d$\xb2\rF\xccW\x15\xf3\xcc\xb4\x15\a\xf1u\x88\xbc\xbb\xae\xfb\v A\x8aT\xdaD\x80\xddC\xedm4\xcb1\xde\x14\f\x15\xe6\x93\xb5v_\xcb\xf8\xf8a\xaa8\x8ba\xab\x94e\a\xa4\xc5\xdev#\x03e\xd1\xf2\x02\x82\xde~=\x87\x80g\x9c(\xf7\xf4\xe6\xd2\xdf\xd3%\xec\x8c\b6&\xa3\xad\x83\xae\x92\x14\xabh\xef\xdf\xd8gF\xd6\xc1-\xfbt\x13\x028\xda\xfb\\\xbc'}, @TCA_DEF_PARMS={0x18, 0x2, {0x8, 0x0, 0x2, 0x1, 0x9}}]}, {0x4}, {0xc, 0x7, {0x1, 0x1}}, {0xc, 0x8, {0x3, 0x2}}}}]}]}, 0x18c}, 0x1, 0x0, 0x0, 0x4008880}, 0x20000080) r2 = socket(0x40000000015, 0x5, 0x0) connect$inet(r2, &(0x7f0000000040)={0x2, 0x4e20, @loopback}, 0x10) setsockopt$SO_RDS_TRANSPORT(r2, 0x114, 0x8, &(0x7f00000008c0)=0x2, 0x4) setsockopt$sock_int(r2, 0x1, 0x8, &(0x7f00006dbffc), 0x4) bind$inet(r2, &(0x7f0000000340)={0x2, 0x4e20, @loopback}, 0x57) sendmsg$xdp(r2, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000480)=[{&(0x7f0000000200)="0000000000aa303e97380e90231bdbdaf6a4bd866226b7cdb7c26858c4e4fd703be2f51ed6ddc4a47116ec2db75c7042a22491af0ffea4174a9de3350c0a498396b28c7d1784d04aa38922721cb7816094cb82950fd012efd26d", 0x5a}, {&(0x7f0000000900)="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", 0x3f1}, {&(0x7f00000003c0)="128b9306006d4810e5ac5040ad9201847839fc378469d5765b9cc241840896c1498194a7197b45d74a8532b82037b02c9e6045c361eb", 0x36}], 0x3}, 0x0) mmap(&(0x7f0000000000/0x95c000)=nil, 0x95c000, 0x1000001, 0x8c4b815a5465c2b1, 0xffffffffffffffff, 0x0) ioctl$sock_inet6_SIOCDIFADDR(r2, 0x8936, &(0x7f0000000380)={@mcast1, 0xb}) getsockopt$X25_QBITINCL(0xffffffffffffffff, 0x106, 0x1, 0x0, 0x0) setsockopt$RDS_CONG_MONITOR(r2, 0x114, 0x6, &(0x7f0000000680)=0x1, 0x4) r3 = socket(0x10, 0x803, 0x0) socketpair$tipc(0x1e, 0x5, 0x0, &(0x7f0000000500)={0xffffffffffffffff, 0xffffffffffffffff}) recvmsg(r4, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000940)=[{&(0x7f00000005c0)=""/151, 0x97}], 0x1, &(0x7f0000002f40)=""/229, 0xe5}, 0x0) close(r5) sendto(r3, &(0x7f0000000740)="120000001200e7ef007b00000000000000a1", 0x12, 0x0, 0x0, 0x0) clock_gettime(0x0, &(0x7f00000000c0)={0x0, 0x0}) recvmmsg(r3, &(0x7f00000037c0)=[{{&(0x7f00000004c0)=@ethernet={0x0, @random}, 0x80, &(0x7f0000000540)=[{&(0x7f0000000140)=""/100, 0x64}, {&(0x7f0000000280)=""/85, 0x55}, {&(0x7f0000000fc0)=""/4096, 0x1000}, {&(0x7f0000000400)=""/106, 0x6a}, {&(0x7f0000000300)=""/73, 0x49}, {&(0x7f0000000200)=""/69, 0x45}, {&(0x7f00000007c0)=""/154, 0x9a}, {&(0x7f00000001c0)=""/17, 0x11}, {&(0x7f0000000000)=""/72, 0x48}], 0x9, &(0x7f0000000600)=""/187, 0xbb, 0xa1}}], 0x1, 0x2040000, &(0x7f0000003700)={r6, r7+60000000}) syz_genetlink_get_family_id$ipvs(&(0x7f0000000080), 0xffffffffffffffff) 678.17063ms ago: executing program 1 (id=8618): r0 = socket$inet_tcp(0x2, 0x1, 0x0) ioctl$F2FS_IOC_MOVE_RANGE(r0, 0xc020f509, &(0x7f0000000000)={r0, 0x5, 0xa, 0x8}) getsockopt$inet_sctp_SCTP_GET_PEER_ADDRS(0xffffffffffffffff, 0x84, 0x6c, &(0x7f0000000040)={0x0, 0xc5, "97071f6a3db457b31b3c8a1bc3294f1c813fc57804ded27cc0a73cdcd4e472ea1738d7339d13990e53c9f4841164877010fd450327815c930b494e65406f7c1ef2982dfbad26361e9c7283185236fbd43862920165df4dfafaa4fa0424ee801a40826086d141a6d035277ae011d3f9b39d9fa4b7a089322d6c4f874fd3be8003056c0fe589f9dbb41473fa1f444355467dd8294b319ebddc4dc9fbf85a6eb153b0e214640ab92658bb7ecf41898bfef408eb3b435b7f64399066d62b51d4dbf7ceb6c85fc8"}, &(0x7f0000000140)=0xcd) getsockopt$inet_sctp_SCTP_PR_ASSOC_STATUS(r1, 0x84, 0x73, &(0x7f0000000180)={r2, 0xf42, 0x20, 0x89, 0x3521cc8000000000}, &(0x7f0000000200)=0x18) r3 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_CREATE(r3, &(0x7f00000002c0)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000300)=ANY=[@ANYBLOB="640000000206030000000000000000000000000005000100070000000900020073797a310000000014000780050015000000000008001240000000000500050002000000050004000000000016000300686173683a6e65742c706f72742c6e6574"], 0x64}}, 0x0) setsockopt$inet_tcp_TCP_REPAIR(r0, 0x6, 0x2e, &(0x7f00000001c0)=0xb1e0, 0x4) r4 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000280), r1) ioctl$sock_SIOCGIFINDEX_80211(r3, 0x8933, &(0x7f0000000380)={'wlan0\x00', 0x0}) sendmsg$NL80211_CMD_FRAME(r1, &(0x7f00000007c0)={&(0x7f0000000240)={0x10, 0x0, 0x0, 0x4000}, 0xc, &(0x7f0000000780)={&(0x7f00000003c0)={0x3b4, r4, 0x2, 0x70bd28, 0x25dfdbfd, {{}, {@val={0x8, 0x3, r5}, @val={0xc, 0x99, {0x2, 0x3c}}}}, [@NL80211_ATTR_TX_NO_CCK_RATE={0x4}, @NL80211_ATTR_DURATION={0x8, 0x57, 0x104e}, @NL80211_ATTR_DURATION={0x8, 0x57, 0xf36}, @NL80211_ATTR_FRAME={0x378, 0x33, @beacon={{{0x0, 0x0, 0x8, 0x0, 0x0, 0x0, 0x1, 0x1, 0x1}, {0x7f}, @device_b, @device_a, @random="686490976d05", {0x5, 0x2}}, 0x3ff, @random=0x40, 0x0, @val={0x0, 0x7, @random="e66a326ab4c64d"}, @void, @void, @void, @void, @val={0x5, 0x6a, {0x6, 0x52, 0x9, "c710cf2fd041498d1dc7b32a78ab5a0a3535bbfee7fdf29c46a03892d3f1fd10aa64354e252b5d9e85da9c626426c0b02ba466ddddcbd779cf2d9270adf779206f4ea03247a7ac4938acaba76c2293dceefafe70049e304e92d62eeb7754ddc03411461557d81e"}}, @void, @val={0x2a, 0x1, {0x1}}, @val={0x3c, 0x4, {0x1, 0x5, 0x88}}, @void, @val={0x72, 0x6}, @val={0x71, 0x7, {0x1, 0x1, 0xffffffffffffffff, 0x0, 0x2, 0x7, 0x20}}, @void, [{0xdd, 0xd2, "2e831d10f5106b284aa048ca1d66319a43824787dc15326fb5d5eb4cab3726d3af56d7805cee00519992650772e2f7112aa319d1b96b92d295b8511ee07b06be3c1da858f4f6c12f14732688c7664713e4c93587a8d3302d156d9850a37f5a05424bf949b88e79a6beda23206589c11df7e2c95f501601cfb8b2b9c3a62f988c5b867f5456a7dc5080e2a0a7ee919a9c2889449da180451add5bb909175c8504591c66a80726c5f0d66830d6f7df9909ac83c08ac75d17acd49beba99bc146a7d03efe5938a8b565fe521712cea50d3f66ac"}, {0xdd, 0x3e, "16ce375aa643a69202fef08004e176b97a9976241bc8d45d97f8cd200dc3f3639713eb64d9c5d8bef7dc8cb3f83915c39351ddf374133d75ac3010ef72c2"}, {0xdd, 0x14, "749c4cf48fccc46eff1c8cd86fc5d5006352da75"}, {0xdd, 0x7, "87aa2106997e3f"}, {0xdd, 0xa1, "e33e417d0eeb1de8b860770b7d6251d8980a9202d1f027fc63a52d76464004ee2c7c0a582a276145ea0d71aba6bf1364179848d74d16f05d6f36f273c0cf2a15381213af6672c013da039b2fe56ad3d8fca1d28dc7ba7fe2bc5aff66021c66770b21c22c2ec4b644c414d3e44ed2d63c4401da4d554fb89518d84b1976526c5b141602c5ce5bd17bfc6dd24370b56bc3f589a0736579c854b755c7b71ec88649e7"}, {0xdd, 0xe9, "614a7b50b4ab8840f14bff153e3cf8d791386830e968d5e1a2abcac1afcefd3a2c77ac90f2e6b6920dae4c24a7da4a0074d4ac88dd4f8f5c3aaf7d61028b09ff49cfee8686d5f4691c68dd869bf6c1baff8f84369ce650e91cea61018557b71fcf697696ba2ed390f971435b7a2bb25978b615cb15fa0b587f2c414e860dbfac3fe9f06a2be7c23d6c57ac2d38ccc4d4769159fb886c55f888bcf1831aed839482843dc30dc60d72d0aecf7baecb771a21496ad13e7d1c6ce950fca66db5f3f16d43c13e1ed903585bf9de968b7f474af4950cca298d495b8c22030452b1992af0d4a9bdd763d194d2"}]}}]}, 0x3b4}, 0x1, 0x0, 0x0, 0x20000080}, 0x24000005) 536.280769ms ago: executing program 2 (id=8619): socketpair$unix(0x1, 0x2, 0x0, &(0x7f00000000c0)={0xffffffffffffffff, 0xffffffffffffffff}) (async, rerun: 32) r2 = socket$qrtr(0x2a, 0x2, 0x0) (rerun: 32) connect$qrtr(r2, 0x0, 0x0) (async, rerun: 64) r3 = bpf$MAP_CREATE(0x0, &(0x7f0000000c40)=ANY=[@ANYBLOB="0f000000040000000400000012"], 0x48) (rerun: 64) r4 = bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000340)={0xe, 0x4, &(0x7f0000000400)=ANY=[@ANYBLOB="18020000801000000000000004000000850000002700000095"], &(0x7f0000000000)='syzkaller\x00', 0x0, 0x0, 0x0, 0x40f00}, 0x80) bpf$BPF_PROG_DETACH(0x8, &(0x7f0000000900)=ANY=[@ANYRES32=r3, @ANYRES32=r4, @ANYBLOB="05"], 0x10) (async) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000740)={{r3}, &(0x7f00000006c0), &(0x7f0000000700)=r1}, 0x20) (async) r5 = socket$nl_generic(0x10, 0x3, 0x10) (async) getsockopt$inet_sctp_SCTP_GET_PEER_ADDR_INFO(0xffffffffffffffff, 0x84, 0xf, &(0x7f00000001c0)={0x0, @in={{0x2, 0x4e22, @initdev={0xac, 0x1e, 0x1, 0x0}}}, 0x100000, 0x81, 0x445, 0x6, 0x7f}, &(0x7f0000000140)=0x98) getsockopt$inet_sctp_SCTP_STREAM_SCHEDULER(r3, 0x84, 0x7b, &(0x7f0000000280)={r6, 0x9}, &(0x7f00000002c0)=0x8) (async, rerun: 64) sendmsg$nl_generic(r5, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000040)=ANY=[@ANYBLOB="4800000040000100fcff070004000000010000000800cb8004000880200001801c00106a6fee3704b511ab5f8018000b8014006f00fc0000000000000000000000000000000c0002000000000000000000"], 0x48}, 0x1, 0x0, 0x0, 0x400c801}, 0x4008094) (rerun: 64) sendmsg$inet(r0, &(0x7f0000000440)={0x0, 0x0, 0x0}, 0x4040086) 535.590106ms ago: executing program 8 (id=8620): r0 = socket(0x10, 0x3, 0x0) setsockopt$netlink_NETLINK_TX_RING(r0, 0x10e, 0xc, &(0x7f0000000040)={0x802}, 0x10) sendmsg$nl_generic(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000000c0)={0x20, 0x52, 0x1, 0x0, 0x0, {0x1c}, [@typed={0xc, 0x6, 0x0, 0x0, @u64}]}, 0x20}}, 0x0) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000200)={&(0x7f00000002c0)=@newlink={0x50, 0x10, 0x421, 0x4, 0x25dfdbfc, {0x0, 0x0, 0x0, 0x0, 0x88a8ffad, 0x26d2}, [@IFLA_LINKINFO={0x24, 0x12, 0x0, 0x1, @xfrm={{0x9}, {0x14, 0x2, 0x0, 0x1, [@IFLA_XFRM_LINK={0x8, 0x1, 0x3}, @IFLA_XFRM_IF_ID={0x8, 0x2, 0x25}]}}}, @IFLA_BROADCAST={0xa}]}, 0x50}}, 0xc080) r1 = socket$nl_netfilter(0x10, 0x3, 0xc) r2 = socket$igmp(0x2, 0x3, 0x2) getsockopt$inet_mtu(r2, 0x0, 0xa, &(0x7f0000000080), &(0x7f00000000c0)=0x1) r3 = bpf$MAP_CREATE(0x0, &(0x7f0000000000)=@base={0x10, 0x4, 0x4, 0x2, 0x0, 0x1}, 0x48) bpf$MAP_GET_NEXT_KEY(0x4, &(0x7f0000000140)={r3, &(0x7f0000000080), 0x0}, 0x20) sendmsg$NFT_BATCH(r1, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000240)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a20000000000a01020000000000000000010000000900010073797a300000000040000000030a01080000000000000000010040000900030073797a320000000014000480080002400000000008000140000000000900010073797a300000000088000000060a010400000000000000000100000008000b40000000000900010073797a3000000000600004805c0001800b0001007470726f787900004c00028008000340000000160800014000"], 0x110}}, 0x40040) 490.103111ms ago: executing program 1 (id=8621): getsockname$inet(0xffffffffffffffff, &(0x7f0000000080)={0x2, 0x0, @remote}, &(0x7f0000000140)=0x10) r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000100)='cgroup.stat\x00', 0x275a, 0x0) mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x5, 0x12, r0, 0x0) r1 = syz_init_net_socket$bt_sco(0x1f, 0x5, 0x2) setsockopt$bt_BT_DEFER_SETUP(r1, 0x112, 0x10, &(0x7f0000000040), 0x4) openat$tun(0xffffffffffffff9c, &(0x7f0000000040), 0x1c1341, 0x0) r2 = socket(0x10, 0x803, 0x0) ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r2, &(0x7f00000012c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000240)=@newqdisc={0x84, 0x24, 0x4ee4e6a52ff5653f, 0x70bd2d, 0x25dfdbfc, {0x0, 0x0, 0x0, r3, {0x0, 0x9}, {0xffff, 0xffff}, {0xb}}, [@TCA_STAB={0x60, 0x8, 0x0, 0x1, [{{0x1c, 0x1, {0xa, 0x9, 0x3, 0x10000, 0x1, 0x80000000, 0xf2, 0x9}}, {0x16, 0x2, [0x1, 0x5, 0x0, 0x6, 0x5, 0x5, 0x7, 0x5, 0xff04]}}, {{0x1c, 0x1, {0xe, 0x8, 0xe, 0x8, 0x2, 0x1000, 0xd7, 0x4}}, {0xc, 0x2, [0x7, 0x3, 0x7ff, 0x6]}}]}]}, 0x84}, 0x1, 0x0, 0x0, 0x81}, 0x0) ioctl$sock_ipv4_tunnel_SIOCADDTUNNEL(r2, 0x89f1, &(0x7f00000000c0)={'tunl0\x00', &(0x7f0000000340)={'syztnl0\x00', r3, 0x81, 0x0, 0x4, 0x400, {{0x9, 0x4, 0x1, 0xf, 0x24, 0x64, 0x0, 0xc, 0x4, 0x0, @dev={0xac, 0x14, 0x14, 0x28}, @loopback, {[@cipso={0x86, 0x10, 0x3, [{0x7, 0xa, "b74adb2e8d7bdc5a"}]}]}}}}}) ioctl$sock_ipv4_tunnel_SIOCGETTUNNEL(r0, 0x89f0, &(0x7f00000003c0)={'gre0\x00', &(0x7f0000000180)={'ip_vti0\x00', r4, 0x20, 0x28, 0x7f5, 0xb, {{0x5, 0x4, 0x0, 0x2, 0x14, 0x67, 0x0, 0x6, 0x29, 0x0, @rand_addr=0x64010102, @remote}}}}) sendmsg$nl_route_sched(r2, &(0x7f0000006040)={0x0, 0x0, &(0x7f0000000300)={&(0x7f00000001c0)=@newtfilter={0x4c, 0x2c, 0xd27, 0x70bd2a, 0x25dfdbfb, {0x0, 0x0, 0x0, r3, {0x2, 0xa}, {0x0, 0x9}, {0xffff, 0x9}}, [@filter_kind_options=@f_flower={{0xb}, {0x1c, 0x2, [@TCA_FLOWER_KEY_ETH_TYPE={0x6, 0x8, 0x8848}, @TCA_FLOWER_KEY_MPLS_OPTS={0x8, 0x63, 0x0, 0x1, @TCA_FLOWER_KEY_MPLS_OPTS_LSE={0x4}}, @TCA_FLOWER_KEY_MPLS_TTL={0x5, 0x43, 0xf}]}}]}, 0x4c}, 0x1, 0x0, 0x0, 0x4010}, 0x0) 407.155551ms ago: executing program 8 (id=8622): r0 = socket$key(0xf, 0x3, 0x2) sendmsg$key(r0, &(0x7f00005f5000)={0x0, 0x0, &(0x7f0000000280)={&(0x7f00000004c0)={0x2, 0x13, 0x0, 0x0, 0xe, 0x0, 0x0, 0x0, [@sadb_sa={0x2}, @sadb_address={0x5, 0x5, 0x0, 0x0, 0x0, @in6={0xa, 0x0, 0x0, @initdev={0xfe, 0x88, '\x00', 0x0, 0x0}}}, @sadb_address={0x5, 0x6, 0x0, 0x0, 0x0, @in6={0xa, 0x0, 0x0, @ipv4={'\x00', '\xff\xff', @multicast1}}}]}, 0x70}}, 0x0) (async) bpf$MAP_CREATE(0x100000000000000, 0x0, 0x0) (async) r1 = socket$nl_route(0x10, 0x3, 0x0) (async) r2 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) (async) r3 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) ioctl$HCIINQUIRY(r3, 0x400448dd, &(0x7f0000000240)={0x0, 0xfffd, '\x00', 0x7b}) (async) write$bt_hci(r2, &(0x7f0000000080)=ANY=[], 0x6) (async) splice(r2, &(0x7f0000000000)=0x7fff000, 0xffffffffffffffff, &(0x7f0000000040)=0xb, 0x2, 0x2) (async) ioctl$sock_SIOCGIFINDEX_80211(0xffffffffffffffff, 0x8933, &(0x7f0000000100)={'wlan1\x00'}) (async) bpf$PROG_LOAD(0x5, &(0x7f0000000200)={0x4, 0xe, 0x0, 0x0}, 0x94) (async) r4 = socket(0x1, 0x803, 0x0) getsockname$packet(r4, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f00000001c0)=0x14) (async) sendmsg$nl_route(r1, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000140)={&(0x7f00000002c0)=@ipv4_newrule={0x38, 0x20, 0x400, 0x70bd2b, 0x25dfdbfe, {0x2, 0x0, 0x10, 0x6, 0x6, 0x0, 0x0, 0x1, 0x18010}, [@FRA_FLOW={0x8, 0xb, 0x6}, @FRA_FLOW={0x8, 0xb, 0x3}, @FRA_TUN_ID={0xc, 0xc, 0x1, 0x0, 0xffffffff}]}, 0x38}, 0x1, 0x0, 0x0, 0x600}, 0x0) 352.779846ms ago: executing program 2 (id=8623): r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000100), 0x0, 0x0) sendmsg$key(0xffffffffffffffff, &(0x7f0000000040)={0x3, 0x0, &(0x7f0000000340)={&(0x7f0000000100)=ANY=[@ANYBLOB="020300030e000000000700000000000004000900a000000001d78771b90bd8a3b4914783c58777003d5b953800000000030006000000000002000000000000000009000000000000020001"], 0x70}, 0x1, 0x7}, 0x0) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000240)=@delchain={0x24, 0x65, 0x400, 0x70bd29, 0x25dfdbfc, {0x0, 0x0, 0x0, 0x0, {0x509d884560ba1ba6, 0x3}, {}, {0x8, 0x10}}}, 0x24}}, 0x10) sendmsg$TEAM_CMD_OPTIONS_SET(0xffffffffffffffff, &(0x7f0000004bc0)={0x0, 0x0, &(0x7f0000004b80)={&(0x7f0000000100)=ANY=[@ANYBLOB="60b80000", @ANYRES16, @ANYBLOB="050427bd7000fedbdf250100000008000100", @ANYRES32, @ANYBLOB="4400028040000100240001006d6f64650000000000000000000000000000000000000000000000000000000005"], 0x60}, 0x1, 0x0, 0x0, 0x4000401}, 0x4040084) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000000080)={0x0, 0x48}, 0x1, 0x0, 0x0, 0x10}, 0x0) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000100)=ANY=[@ANYBLOB="500000001000010425bbe5ad600027842cf52300", @ANYRES32=0x0, @ANYBLOB="0300000000000000280012800a00010076786c616e"], 0x50}, 0x1, 0x0, 0x0, 0x13d33d22cca65c15}, 0x4008840) r1 = socket$netlink(0x10, 0x3, 0x0) sendmmsg(r1, &(0x7f00000002c0), 0x40000000000009f, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000340)={'syzkaller0\x00', 0x2}) r2 = socket$nl_generic(0x10, 0x3, 0x10) r3 = syz_genetlink_get_family_id$tipc(&(0x7f00000000c0), r2) sendmsg$TIPC_CMD_ENABLE_BEARER(r2, &(0x7f00000002c0)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000680)=ANY=[@ANYBLOB='8\x00\x00\x00', @ANYRES16=r3, @ANYBLOB="010000000d0000000000010000000000000001410000001c001700000000000000006574683a73797a6b616c6c657230"], 0x38}, 0x1, 0x0, 0x0, 0x44081}, 0x0) r4 = openat$tun(0xffffffffffffff9c, &(0x7f0000000080), 0x100, 0x0) close(r4) socket$nl_route(0x10, 0x3, 0x0) openat$cgroup_subtree(0xffffffffffffffff, &(0x7f0000000000), 0x2, 0x0) r5 = socket$pppl2tp(0x18, 0x1, 0x1) r6 = socket$inet6_udp(0xa, 0x2, 0x0) connect$pppl2tp(r5, &(0x7f0000000000)=@pppol2tp={0x18, 0x1, {0x0, r6, {0x2, 0x4e24, @broadcast}, 0x2, 0x0, 0x3}}, 0x26) r7 = syz_genetlink_get_family_id$l2tp(&(0x7f0000000340), 0xffffffffffffffff) r8 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$L2TP_CMD_SESSION_DELETE(r8, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000100)={&(0x7f00000003c0)=ANY=[@ANYBLOB=',\x00\x00\x00', @ANYRES16=r7, @ANYBLOB="010026bd7000feb9fc25050000000900000018185b080009000200000008400900aa0a00008829d6b42c2a1c006e104571217e049f55174ba1794a83ea9a55e6e01f4bec3d0ae11cedf4e8ceb7e5031c6389babb85a247205ee5cbc5310d272c641cb3c931c7c2da9a4ccdac7d4545cf83550e967aa93b687cc8de7426018c2680981657899d9a3b90e89b995dc0f950142c53324bfae7c93be15293019b19c1df62b755af551b7fe0cd82b2e012e05724f9a1b34647c3c878519e1b8d81af5eee5073c2bab43742a96b1f4346afeb73b3e923c6859ea819b18a3bfe9612ae0e7416070612b19696ef6a3ae99c234ed094700a63f43e5ac0038247d21d573cdd4aa0b073cc44c4e9511fac9765a85f0f750fa2f3a8d429b06afa861bfcef87289ba43da74a4ab2deec470946643659f8d1a5db87569b916491449501075e68c09371012ba405626fb5d98bd0940c0cecbe8dddebd5060bef4d5e2fae9393db6dca07336f08603f3f485389a763a4d7ad41d0a8c3ffac"], 0x2c}, 0x1, 0x0, 0x0, 0x20006911}, 0x0) r9 = socket(0x2, 0x80805, 0x0) r10 = socket$inet(0x2, 0x80001, 0x84) getsockopt$inet_sctp_SCTP_MAX_BURST(r10, 0x84, 0x14, &(0x7f0000000000)=@assoc_value={0x0}, &(0x7f0000000040)=0x8) setsockopt$inet_sctp6_SCTP_AUTH_DEACTIVATE_KEY(r9, 0x84, 0x23, &(0x7f0000000100)={r11, 0xa11c}, 0x8) ioctl$SIOCSIFHWADDR(r4, 0x8923, &(0x7f0000002280)={'syzkaller0\x00', @random="2b0100004ec6"}) 347.256043ms ago: executing program 1 (id=8624): r0 = socket$inet_icmp_raw(0x2, 0x3, 0x1) setsockopt$inet_int(r0, 0x0, 0xb, &(0x7f0000000040)=0x3, 0x4) setsockopt$IP_VS_SO_SET_STARTDAEMON(r0, 0x0, 0x1a, &(0x7f0000000240)={0x1, 'veth0_to_team\x00'}, 0x18) syz_emit_ethernet(0xc4, &(0x7f0000000d40)={@multicast, @dev={'\xaa\xaa\xaa\xaa\xaa', 0x17}, @void, {@ipv4={0x800, @icmp={{0x5, 0x4, 0x0, 0x0, 0xb6, 0x0, 0x0, 0xfd, 0x1, 0x0, @initdev={0xac, 0x1e, 0x0, 0x0}, @local}, @time_exceeded={0x3, 0x0, 0x0, 0x3, 0x24, 0x0, {0x25, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x1, 0x0, @remote, @dev={0xac, 0x14, 0x14, 0x37}, {[@cipso={0x86, 0x71, 0xb00, [{0x0, 0xc, "e256b28c04000000fb52"}, {0x0, 0x9, "789607675ca638"}, {0x0, 0xe, "7434954373561de584b703c8"}, {0x2, 0x9, "e706d30bd224f8"}, {0x6, 0x7, "cfa11cab1a"}, {0x0, 0x10, "c600"/14}, {0x0, 0xa, "65807fe97612fe86"}, {0x0, 0x12, "73bc2300ad9d19a30000000000000000"}, {0x6, 0xc, "c8f46976e79e56c7a95e"}]}, @cipso={0x86, 0xc, 0x2, [{0x1, 0x6, "7f36c525"}]}]}}, "000500008045"}}}}}, 0x0) 291.36946ms ago: executing program 3 (id=8625): r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_init_net_socket$ax25(0x3, 0x2, 0x0) bind$ax25(r1, &(0x7f0000000100)={{0x3, @default, 0x5}, [@null, @remote={0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0x2}, @bcast, @null, @remote={0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0x3}, @null, @bcast, @netrom={0xbb, 0xbb, 0xbb, 0xbb, 0xbb, 0x0, 0x0}]}, 0x48) sendmsg$DEVLINK_CMD_PORT_UNSPLIT(r1, &(0x7f00000003c0)={0x0, 0x0, &(0x7f00000001c0)={0x0}}, 0x0) r2 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000180), r0) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f00000001c0)={'wlan0\x00', 0x0}) sendmsg$NL80211_CMD_SET_COALESCE(r0, &(0x7f0000001540)={0x0, 0x0, &(0x7f0000001500)={&(0x7f0000000480)={0x28, r2, 0x1, 0x70bd2d, 0x25dfdbfe, {{}, {@val={0x8, 0x3, r3}, @val={0xc, 0x99, {0x3, 0x4d}}}}}, 0x28}, 0x1, 0x0, 0x0, 0x8000}, 0x0) 234.801273ms ago: executing program 5 (id=8626): r0 = socket(0xa, 0x5, 0x0) setsockopt$inet_sctp_SCTP_SOCKOPT_BINDX_ADD(r0, 0x84, 0x64, &(0x7f0000000500)=[@in6={0xa, 0x4e22, 0x6, @mcast2, 0x100}, @in6={0xa, 0x4e22, 0x7, @ipv4={'\x00', '\xff\xff', @multicast2}, 0x49c5}, @in={0x2, 0x4e23, @empty}, @in={0x2, 0x4e24, @private=0xa010101}], 0x58) (async) setsockopt$inet_sctp_SCTP_SOCKOPT_BINDX_ADD(r0, 0x84, 0x64, &(0x7f0000000500)=[@in6={0xa, 0x4e22, 0x6, @mcast2, 0x100}, @in6={0xa, 0x4e22, 0x7, @ipv4={'\x00', '\xff\xff', @multicast2}, 0x49c5}, @in={0x2, 0x4e23, @empty}, @in={0x2, 0x4e24, @private=0xa010101}], 0x58) r1 = syz_genetlink_get_family_id$tipc(&(0x7f0000000280), r0) sendmsg$TIPC_CMD_GET_REMOTE_MNG(r0, &(0x7f0000000380)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x8000000}, 0xc, &(0x7f0000000340)={&(0x7f0000000300)={0x1c, r1, 0x4, 0x70bd2d, 0x25dfdbfc, {}, ["", "", "", "", ""]}, 0x1c}, 0x1, 0x0, 0x0, 0x80}, 0x40001) r2 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r2, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000100)={&(0x7f00000010c0)=ANY=[@ANYBLOB="cc0000001b000100000000000000000000000000000000000000000000000000ff020000000000000000000000000001", @ANYRES32=0x0, @ANYRES32=0x0, @ANYBLOB='\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\b\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\f'], 0xcc}}, 0x0) (async) sendmsg$nl_xfrm(r2, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000100)={&(0x7f00000010c0)=ANY=[@ANYBLOB="cc0000001b000100000000000000000000000000000000000000000000000000ff020000000000000000000000000001", @ANYRES32=0x0, @ANYRES32=0x0, @ANYBLOB='\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\b\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\f'], 0xcc}}, 0x0) r3 = syz_genetlink_get_family_id$tipc(&(0x7f0000000400), r0) socket$nl_netfilter(0x10, 0x3, 0xc) (async) r4 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r4, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000240)=ANY=[@ANYBLOB="140000001000010000000000000000000500000a28000000000a030000000000000000000a00000708000240000000020900010073797a31000000002c000000030a010100000000000000000a0000070900010073797a31000000000900030073797a320000000014000000110001"], 0x7c}, 0x1, 0x0, 0x0, 0x4000}, 0x0) sendmsg$NFT_BATCH(r4, &(0x7f0000009b40)={0x0, 0x0, &(0x7f0000009b00)={&(0x7f0000000100)=ANY=[@ANYBLOB="140000001000010000000000000000000500000a44000000090a010400000000000000000a0000040900010073797a310000000008000540000000020900020073797a310000000008000a40fffffffc0800034000000004400000000b0a010100000000000000000a0000060900020073797a31000000000900010073797a310000000014000380100000800c00018006000100d10300002c0000000e0a010200000000000000000a0000000900010073797a31000000000900020073797a31"], 0xd8}, 0x1, 0x0, 0x0, 0x4000850}, 0x40) sendmsg$TIPC_CMD_SHOW_NAME_TABLE(r0, &(0x7f00000004c0)={&(0x7f00000003c0)={0x10, 0x0, 0x0, 0x800c}, 0xc, &(0x7f0000000480)={&(0x7f0000000440)={0x30, r3, 0x8, 0x70bd27, 0x2ddfdbfe, {{}, {}, {0x14, 0x19, {0xffff7fff, 0x4, 0x6}}}, ["", "", "", ""]}, 0x30}, 0x1, 0x0, 0x0, 0x4008000}, 0x4008015) sendmsg$inet_sctp(r0, &(0x7f00000000c0)={&(0x7f0000000000)=@in6={0xa, 0x4e24, 0xff, @loopback, 0x5}, 0x1c, &(0x7f0000000240)=[{&(0x7f0000000100)="e6", 0x1}, {&(0x7f0000000140)="31a418818e825c6cc695fa93f7b6117757dbfcf134c0e8602e89ba36bc26ff14459953669064fca2aa4cc811bed0073fdc8fead07cbf87cc437e017400d0aa8db525cf35fd94b21d01c651d993ac026ee8fc7a0e79f4c1e61328e6cf2f4f8b44362f2edbdbc00c96175e95aba6bc809a1b3ca63d36f26a7bc95c8d3bcac99bb84f126d7f61a3ae499319122dbfd14953ca11ab7d32a644db8e300a00055cbe953207449636e37030bb23b987cce0748bc79f246cb27d2d23f83343518a676e996fcd", 0xc2}], 0x2, &(0x7f00000002c0)=ANY=[@ANYBLOB="180000000000000084000000050000002000000023ed00002000000000000000840000000800000020"], 0x38, 0x4855}, 0x24000052) (async) sendmsg$inet_sctp(r0, &(0x7f00000000c0)={&(0x7f0000000000)=@in6={0xa, 0x4e24, 0xff, @loopback, 0x5}, 0x1c, &(0x7f0000000240)=[{&(0x7f0000000100)="e6", 0x1}, {&(0x7f0000000140)="31a418818e825c6cc695fa93f7b6117757dbfcf134c0e8602e89ba36bc26ff14459953669064fca2aa4cc811bed0073fdc8fead07cbf87cc437e017400d0aa8db525cf35fd94b21d01c651d993ac026ee8fc7a0e79f4c1e61328e6cf2f4f8b44362f2edbdbc00c96175e95aba6bc809a1b3ca63d36f26a7bc95c8d3bcac99bb84f126d7f61a3ae499319122dbfd14953ca11ab7d32a644db8e300a00055cbe953207449636e37030bb23b987cce0748bc79f246cb27d2d23f83343518a676e996fcd", 0xc2}], 0x2, &(0x7f00000002c0)=ANY=[@ANYBLOB="180000000000000084000000050000002000000023ed00002000000000000000840000000800000020"], 0x38, 0x4855}, 0x24000052) 176.36276ms ago: executing program 1 (id=8627): r0 = socket$kcm(0x10, 0x0, 0x10) sendmsg$kcm(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)=[{&(0x7f0000000000)="1400000016004163d25a80648c2594f91d24fc60", 0x14}], 0x1}, 0x810) 176.124459ms ago: executing program 8 (id=8628): syz_emit_ethernet(0x8a, &(0x7f00000005c0)={@local, @empty, @void, {@ipv4={0x800, @icmp={{0x5, 0x4, 0x0, 0x0, 0x7c, 0x0, 0x0, 0x0, 0x1, 0x0, @rand_addr=0x64010100, @local}, @time_exceeded={0xb, 0x0, 0x0, 0x3, 0x2c, 0x0, {0x16, 0x4, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x89, 0x0, @private=0xa010100, @local, {[@cipso={0x86, 0x2a, 0x0, [{0x0, 0xd, "5e000000ff000000000000"}, {0x0, 0x5, "4eb8a6"}, {0x0, 0x12, "9606053d0006ff00800000b61af93a93"}]}, @lsrr={0x83, 0x13, 0x0, [@dev, @loopback, @loopback, @multicast2]}, @timestamp={0x44, 0x4}]}}, "a815073da43d74ff"}}}}}, 0x0) socketpair(0xb, 0x5, 0x788, &(0x7f0000000040)={0xffffffffffffffff}) sendmsg$kcm(r0, &(0x7f00000003c0)={&(0x7f0000000080)=@nl=@unspec, 0x80, &(0x7f0000000280)=[{&(0x7f0000000100)="66ae61c2e127ad0bf178021578c9", 0xe}, {&(0x7f0000000140)="d0545dd25b5a6d7f7dbac3ddfa502e7b2aba2c22f831757d6eaa0efb1f729ae8241a9fe2eaaaa1f1702c97719e6df4615b484aba2ffa1ef56a9ae961447fc7c23f97d44e8bcbfbca0ed470407ef1cce728b3e3751c500d", 0x57}, {&(0x7f00000001c0)="5128adc9fb5bdc3182ed89d0a82c53db54a9df73ffeea2680eec70531edb6230f6a11080c0b7672e19076c53e7a687eef5a7542c54ff3a3d57bc6da4d197c8832bb524a95fb02453fd128953085d1aab0131a6829ecf4139ff7358aaf77a13b2f6829ffa8e3d497c95159a7e52f56002630a5553d4b1becfa414f680189b68f09223ec2b053f18f8", 0x88}], 0x3, &(0x7f00000002c0)=[{0x58, 0x18, 0x0, "d88dcba82be9522397c3fdd2919d575d53f69a3ddd73e8b00058cdc1425a5eadbc5fae4383bcd729730ccaca3832fa1665b7cb037b9e8c968bf69cbe766087bf8a8d"}, {0x20, 0x10b, 0xfffffff7, "bdb1c6d0775a747b4fbc7e59ea93"}, {0x58, 0x114, 0x2, "1a685a815060e2505eda22a22702af9cbb3fd17194ec36c36d2788dc1c5605aa5f7059e43781783b58ab62ca636e6ceed3f2c4b89278ab72016418e4cd62dcda5fc2"}], 0xd0}, 0x8841) setsockopt$SO_TIMESTAMP(0xffffffffffffffff, 0x1, 0x3f, &(0x7f0000000000)=0xcb, 0x4) 138.260541ms ago: executing program 1 (id=8629): r0 = socket$inet6(0xa, 0x1, 0x100) r1 = socket$nl_generic(0x10, 0x3, 0x10) r2 = syz_genetlink_get_family_id$team(&(0x7f00000001c0), r1) ioctl$ifreq_SIOCGIFINDEX_team(r1, 0x8933, &(0x7f0000000fc0)={'team0\x00', 0x0}) r4 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r4, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000200)=ANY=[@ANYBLOB="140000001000010000000000000000000200000a40000000030a01010000000000000000010000000900030073797a300000000014000480080002400000000008000140000000000900010073797a300000000044000000060a01040000000000000000010000001c00048018000180080001006f7366000c000280080001400000000408000b40000000000900010073797a300000000014000000020a010300000000000000000000000000000000000ae31b078e7f8234c6d1a8d053b6c154d985ef4796acac55c811d253a28b876011fba4ed9d6fc78e2084db4a68e75d97322cd77893aa805210397bf18cf854ea"], 0xc0}, 0x1, 0x0, 0x0, 0x8000}, 0x0) sendmsg$TEAM_CMD_OPTIONS_SET(r1, &(0x7f0000001d40)={0x0, 0x0, &(0x7f0000001d00)={&(0x7f0000000180)=ANY=[@ANYBLOB="fd0f0020", @ANYRES16=r2, @ANYBLOB="01002dbd7000fddbdf250100000008000100", @ANYRES32=r3, @ANYRESOCT, @ANYRES32=0x0], 0x60}, 0x1, 0x0, 0x0, 0x40004}, 0x0) listen(r0, 0x0) r5 = socket$nl_route(0x10, 0x3, 0x0) r6 = socket$packet(0x11, 0x3, 0x300) setsockopt$packet_int(r6, 0x107, 0xf, &(0x7f0000000000)=0x9, 0x4) ioctl$XFS_IOC_SET_RESBLKS(r1, 0xc0105872, &(0x7f0000000080)={0x10bcb041, 0x2}) ioctl$sock_SIOCGIFINDEX(r6, 0x8933, &(0x7f0000000300)={'ip6_vti0\x00', 0x0}) sendto$packet(r6, &(0x7f0000000040)="100b0600e0ff029b0004004788aa96a115b100002c3608", 0x17, 0x4050, &(0x7f0000000140)={0x11, 0x11, r7, 0x1, 0x0, 0x6, @dev={'\xaa\xaa\xaa\xaa\xaa', 0x2c}}, 0x14) r8 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r8, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000200)=@newlink={0x50, 0x10, 0x401, 0x0, 0x0, {}, [@IFLA_IFNAME={0x14, 0x3, 'ip6tnl0\x00'}, @IFLA_LINKINFO={0x1c, 0x12, 0x0, 0x1, @ipip6={{0xb}, {0xc, 0x2, 0x0, 0x1, [@IFLA_IPTUN_ENCAP_DPORT={0x6, 0x12, 0x4e21}]}}}]}, 0x50}}, 0x0) sendmsg$nl_route(r5, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000300)=ANY=[@ANYBLOB="280000001900010000fbfffffff7ffff011800000000ff00000000000991ae597b080000000000"], 0x28}, 0x1, 0x0, 0x0, 0x8000}, 0x3404c010) 110.530837ms ago: executing program 3 (id=8630): r0 = socket$inet6_sctp(0xa, 0x5, 0x84) r1 = socket$inet_icmp_raw(0x2, 0x3, 0x1) setsockopt$inet_int(r1, 0x0, 0xb, &(0x7f0000000040)=0x3, 0x4) setsockopt$IP_VS_SO_SET_STARTDAEMON(r1, 0x0, 0x1a, &(0x7f0000000240)={0x1, 'veth0_to_team\x00'}, 0x18) syz_emit_ethernet(0xbe, &(0x7f0000000b80)={@multicast, @dev={'\xaa\xaa\xaa\xaa\xaa', 0x17}, @void, {@ipv4={0x800, @icmp={{0x5, 0x4, 0x0, 0x0, 0xb0, 0x0, 0x0, 0xfd, 0x1, 0x0, @initdev={0xac, 0x1e, 0x0, 0x0}, @local}, @time_exceeded={0x3, 0x0, 0x0, 0x3, 0x24, 0x0, {0x25, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x1, 0x0, @remote, @dev={0xac, 0x14, 0x14, 0x37}, {[@cipso={0x86, 0x71, 0x0, [{0x0, 0xc, "e256b28c04000000fb52"}, {0x0, 0x9, "789607675ca638"}, {0x0, 0xe, "7434954373561de584b703c8"}, {0x2, 0x9, "e706d30bd224f8"}, {0x6, 0x7, "cfa11cab1a"}, {0x0, 0x10, "c600"/14}, {0x0, 0xa, "65807fe97612fe86"}, {0x0, 0x12, "73bc2300ad9d19a30000000000000000"}, {0x6, 0xc, "c8f46976e79e56c7a95e"}]}, @cipso={0x86, 0xc, 0x2, [{0x1, 0x6, "7f36c525"}]}]}}}}}}}, 0x0) r2 = socket(0x10, 0x3, 0x0) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000340)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$sock_SIOCGIFINDEX(r3, 0x8933, &(0x7f0000000000)={'lo\x00', 0x0}) sendmsg$nl_route_sched(r2, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000100)=@newqdisc={0x50, 0x24, 0xd0f, 0x0, 0x0, {0x60, 0x0, 0x0, r4, {}, {0xffff, 0xffff}}, [@qdisc_kind_options=@q_netem={{0xa}, {0x20, 0x2, {{}, [@TCA_NETEM_DELAY_DIST={0x4, 0xd}]}}}]}, 0x50}}, 0x0) getsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX3(r0, 0x84, 0x6f, &(0x7f0000000300)={0x0, 0x10, &(0x7f0000000100)=[@in={0x2, 0x4e20, @private=0xa010103}]}, &(0x7f0000000380)=0x10) setsockopt(r0, 0x84, 0x7f, &(0x7f0000000140)="010000000980ffff", 0x8) getsockopt$inet_sctp6_SCTP_GET_ASSOC_ID_LIST(r0, 0x84, 0x1d, &(0x7f0000000000)={0x1, [0x0]}, &(0x7f0000000080)=0x8) getsockopt$inet_sctp6_SCTP_SOCKOPT_PEELOFF(r0, 0x84, 0x66, &(0x7f0000000040)={r5, 0x1}, &(0x7f00000000c0)=0x8) 52.408548ms ago: executing program 2 (id=8631): r0 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r0, &(0x7f00000003c0)={0x0, 0x0, &(0x7f0000000380)={&(0x7f00000004c0)=ANY=[@ANYBLOB="10010000100007000000000000000000ff020000000000000000000000000001e00000020000000000000000000000004e2000004e2300000000000002000000", @ANYRES32=0x0, @ANYRES32=0xee00, @ANYBLOB="ff0100000000002b000000fc000000000000000000000000000000000000000000000000000000000002000000000000000000000000000000000000000000ffffffffffffffff000000000000000000000000000000000000000000000000000020000000000007000000000000000000000000000000ffe80a00000000000000f400000a000200340000000000000014000e00fe8000000000000000000000000000bb0c0b3f4c0015005b0735003b00"/188], 0x110}}, 0x0) r1 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r1, &(0x7f0000000280)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x2000}, 0xc, &(0x7f0000000240)={&(0x7f00000002c0)=ANY=[@ANYBLOB="4400000021000400b2bd7000ffdbdf25020080028f0000060d0000000c000c4000000000000003ff08000b0001000000080001007f0600011b1eb30eacfba279000000012b747b95495a"], 0x44}, 0x1, 0x0, 0x0, 0x4040800}, 0x8010) r2 = socket$nl_route(0x10, 0x3, 0x0) ioctl$ifreq_SIOCGIFINDEX_batadv_hard(r2, 0x8933, &(0x7f00000003c0)={'batadv_slave_1\x00', 0x0}) sendmsg$nl_route_sched(r2, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000180)=@delchain={0x24, 0x5f, 0xf31, 0x0, 0x0, {0x0, 0x0, 0x0, r3, {}, {0x5, 0xf}, {0xffe0, 0x8}}}, 0x24}}, 0x4040850) r4 = socket$nl_xfrm(0x10, 0x3, 0x6) r5 = socket$pppl2tp(0x18, 0x1, 0x1) ioctl$sock_SIOCBRDELBR(r5, 0x89a3, &(0x7f0000000200)='hsr0\x00') r6 = socket$inet_udp(0x2, 0x2, 0x0) setsockopt$inet_group_source_req(r6, 0x0, 0x2e, &(0x7f0000000340)={0x3, {{0x2, 0x0, @multicast1}}, {{0x2, 0x0, @loopback}}}, 0x108) sendmsg$nl_generic(0xffffffffffffffff, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000240)=ANY=[], 0x1c}}, 0x0) r7 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='memory.events\x00', 0x275a, 0x0) write$cgroup_subtree(r7, &(0x7f0000000000)=ANY=[], 0x3261e) mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x2000009, 0x12, r7, 0x0) getsockopt$inet_buf(r6, 0x0, 0x30, &(0x7f0000000340)=""/225, &(0x7f0000000180)=0xe1) sendmsg$nl_xfrm(r4, &(0x7f00000003c0)={0x0, 0x0, &(0x7f0000000380)={&(0x7f00000000c0)=@newsa={0x104, 0x1a, 0x7, 0x70bd2a, 0x0, {{@in6=@dev={0xfe, 0x80, '\x00', 0x1b}, @in=@multicast1, 0xffff, 0x0, 0x4e22, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0xee00}, {@in6=@mcast1, 0x0, 0x2b}, @in6=@private0, {0x5a, 0xb400, 0x2, 0xfeffff7f00000001, 0x0, 0x60000}, {0x0, 0x200000, 0x7, 0xfffffffffffffffd}, {0x40000, 0x0, 0xae8}, 0x0, 0x0, 0xa, 0x2, 0x0, 0x70}, [@coaddr={0x14, 0xe, @in6=@remote}]}, 0x104}}, 0x0) 52.196677ms ago: executing program 5 (id=8632): ioctl$sock_SIOCGIFINDEX(0xffffffffffffffff, 0x8933, &(0x7f0000000080)={'veth0_vlan\x00'}) r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$tipc2(&(0x7f0000000400), 0xffffffffffffffff) sendmsg$TIPC_NL_KEY_SET(r0, &(0x7f0000000100)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000000)=ANY=[@ANYBLOB='T\x00\x00\x00', @ANYRES16=r1, @ANYBLOB="0100000000000000000003000000400001802c0004001400010002000014ac1414aa00000000000000001400020002000000e000000200000000000004000d0001007564703a73"], 0x54}}, 0x4800) 51.615007ms ago: executing program 8 (id=8633): r0 = socket$kcm(0x10, 0x2, 0x0) sendmsg$kcm(r0, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000180)=[{&(0x7f0000000000)="d8000000180081064e81f782db44b904021d080006007c09e8fe55a10a0015000500142603600e1208000f0000000401a8001600a000014001000000036010fab94dcf5c0461c1d67f6f94007134cf6ee08000a0e408e8d8ef52a98516277ce06bbace8017cbec4c2ee5a7cef4090000001fb791643a5ee4ce1b14d6d930dfe10000000001001000730d16a4683f5aeb4edbb57a5025ccca9e00360db70100000040fad95667e006dcdf63951f215ce3bb9ad809d5e1cace81ed0bffece0b42a9ecbee5de6ccd40dd6e4edef3d93452a92954b43370e9701", 0xd8}], 0x1}, 0x0) sendmsg$nl_xfrm(0xffffffffffffffff, &(0x7f0000000240)={&(0x7f0000000100)={0x10, 0x0, 0x0, 0x40}, 0xc, &(0x7f0000000200)={&(0x7f00000001c0)=ANY=[@ANYBLOB="40000000110000042dbd700001000000ac1400b0000000000000000000000000000004d20a003c0008000b00f2ffffff08000c00feffffff08000c0003000004"], 0x40}, 0x1, 0x0, 0x0, 0x480a1}, 0x8804) bpf$MAP_CREATE(0x0, &(0x7f0000000300)=ANY=[@ANYBLOB="1b271cf72068cae7942a597c8fcce9137800e0ba2f000000000000000000000080000000571f8da3eecb3bd725c299a7ee000000000000000fe1b096d161efd11294a42e23df92210aaab55249db1ef9f5c03cc795cb99f8f1c3f1ba1c85864b879793506606a4ad1c90795fe68166701f62e56d7ac589d9e2aed779f8d3bdfa4e"], 0x50) r1 = socket$inet6(0xa, 0x2, 0x0) bind$inet6(r1, &(0x7f0000000100)={0xa, 0x4e20, 0x0, @empty}, 0x1c) setsockopt$inet6_udp_int(r1, 0x11, 0x68, &(0x7f0000000080)=0xa40, 0x4) r2 = openat$tun(0xffffffffffffff9c, &(0x7f00000001c0), 0xa2f01, 0x0) ioctl$TUNSETIFF(r2, 0x400454ca, &(0x7f0000001800)={'syzkaller1\x00', 0x6bf1c2d5adba8c32}) r3 = socket$kcm(0x2, 0xa, 0x2) ioctl$SIOCSIFHWADDR(r3, 0x8914, &(0x7f0000000180)={'syzkaller1\x00', @link_local}) write$tun(r2, &(0x7f0000000340)=ANY=[@ANYBLOB="0a000000bbbbbbbbbbbbaaaaaaaaaabb86dd6d002000001011ff00000000000100070000000000000000ff0200000000000000000000000000014f194e20"], 0xfdef) r4 = socket$nl_generic(0x10, 0x3, 0x10) r5 = socket$nl_generic(0x10, 0x3, 0x10) r6 = syz_genetlink_get_family_id$tipc(&(0x7f00000000c0), r5) r7 = socket$packet(0x11, 0x3, 0x300) setsockopt$packet_int(r7, 0x107, 0xf, &(0x7f0000006ffc)=0x4000000000000200, 0xe50fb6c50bc849c9) r8 = socket$nl_route(0x10, 0x3, 0x0) r9 = socket(0x10, 0x803, 0x0) sendmsg$nl_route_sched(r9, &(0x7f00000004c0)={0x0, 0x0, &(0x7f00000003c0)={0x0, 0x24}}, 0x0) getsockname$packet(r9, &(0x7f00000000c0)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000180)=0x14) sendmsg$nl_route(r8, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000040)=ANY=[@ANYBLOB="3c0000001000010400eeffffffff00f687000000", @ANYRES32=r10, @ANYBLOB="01000000010000001c0012000c000100627269646765"], 0x3c}}, 0x0) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000100)={&(0x7f00000001c0)=@newqdisc={0x44, 0x24, 0x8, 0x0, 0x0, {0x0, 0x0, 0x0, r10, {}, {0xffff, 0xffff}, {0xffe0}}, [@qdisc_kind_options=@q_cake={{0x9}, {0x20, 0x2, [@TCA_CAKE_FWMARK={0x0, 0x12, 0xffffffff}, @TCA_CAKE_ATM={0xffffffffffffff06, 0x4, 0x2}]}}]}, 0x44}, 0x1, 0x0, 0x0, 0x8810}, 0x0) bind$packet(r7, &(0x7f0000000040)={0x11, 0x0, r10, 0x1, 0x0, 0x6, @remote}, 0x14) sendto$inet6(r7, &(0x7f0000000800)="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", 0xfc13, 0x880, 0x0, 0xfffffffffffffef0) sendmsg$TIPC_CMD_ENABLE_BEARER(r5, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000680)=ANY=[@ANYBLOB='8\x00\x00\x00', @ANYRES16=r6, @ANYBLOB="010000000d0000000000010000000000000001410000001c001700000000000000006574683a73797a6b616c6c657230"], 0x38}, 0x1, 0x0, 0x0, 0x44081}, 0x0) sendmsg$TIPC_CMD_SET_NODE_ADDR(r4, &(0x7f0000000340)={&(0x7f0000000280)={0x10, 0x0, 0x0, 0x2}, 0xc, &(0x7f0000000300)={&(0x7f00000002c0)={0x24, r6, 0x200, 0x70bd2b, 0x25dfdbfb, {{}, {}, {0x8, 0x11, 0x7}}, ["", "", ""]}, 0x24}, 0x1, 0x0, 0x0, 0x80}, 0x4000005) r11 = socket$inet6_sctp(0xa, 0x1, 0x84) socket(0x10, 0x80003, 0x0) ioctl$sock_SIOCGIFINDEX(r11, 0x8933, &(0x7f0000000300)={'lo\x00'}) 0s ago: executing program 1 (id=8634): r0 = socket$inet6_mptcp(0xa, 0x1, 0x106) r1 = socket(0x11, 0x3, 0x0) r2 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) getsockopt$bt_BT_DEFER_SETUP(r2, 0x112, 0x7, 0x0, 0x0) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f00000005c0)={'ip6gretap0\x00', 0x0}) bind$packet(r1, &(0x7f0000000180)={0x11, 0x0, r3, 0x1, 0x0, 0x6, @remote}, 0x14) r4 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r4, 0x8933, &(0x7f0000000100)={'ipvlan1\x00', 0x0}) r6 = socket$packet(0x11, 0x3, 0x300) sendto$packet(r6, &(0x7f00000005c0)="bad330fbc9b55400040000ea0756a85d86dd", 0x5ea, 0x40, &(0x7f00000001c0)={0x11, 0x8100, r5, 0x1, 0xd8, 0x6, @multicast}, 0x14) setsockopt$packet_int(r6, 0x107, 0x3, &(0x7f0000000000)=0xe9, 0x4) bpf$PROG_LOAD(0x5, &(0x7f0000000040)={0x2, 0x4, &(0x7f0000000200)=ANY=[@ANYBLOB="180000000300000000000000feffff10850000000700000095"], 0x0, 0x0, 0x0, 0x0, 0x100, 0x70, '\x00', 0x0, @fallback=0x30, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r7 = bpf$PROG_LOAD(0x5, &(0x7f0000000040)={0x2, 0x4, &(0x7f0000000200)=ANY=[], &(0x7f0000000000)='GPL\x00', 0x0, 0x0, 0x0, 0x100, 0x70, '\x00', 0x0, @fallback=0x30, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x6}, 0x94) bpf$BPF_LINK_CREATE_XDP(0x1c, &(0x7f0000000500)={r7, 0x0, 0x30, 0x0, @val=@uprobe_multi={&(0x7f00000004c0)='./cgroup/cgroup.procs\x00', &(0x7f00000002c0)=[0x1, 0x0], &(0x7f0000000700), 0x0, 0x100000}}, 0x40) r8 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='cgroup.controllers\x00', 0x275a, 0x0) write$cgroup_int(r8, &(0x7f0000000200)=0xf, 0x12) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x2, 0x22051, r8, 0x0) sendmsg$netlink(r1, &(0x7f0000002ac0)={0x0, 0x0, &(0x7f0000000440)=[{&(0x7f0000000280)=ANY=[@ANYBLOB="3b84"], 0xdd12}], 0x1}, 0x20040890) r9 = socket$key(0xf, 0x3, 0x2) ioctl$ifreq_SIOCGIFINDEX_wireguard(r9, 0x8933, &(0x7f00000002c0)={'wg2\x00'}) setsockopt$pppl2tp_PPPOL2TP_SO_DEBUG(r1, 0x111, 0x1, 0x4, 0x4) connect$inet6(r0, &(0x7f0000000180)={0xa, 0x4001, 0x1, @dev={0xfe, 0x80, '\x00', 0x39}, 0x3e}, 0x1c) setsockopt$SO_TIMESTAMP(r0, 0x1, 0x3f, &(0x7f0000000000)=0x40, 0x4) pwritev(r0, &(0x7f0000000140)=[{&(0x7f0000000040)="4f91f408720c8733a91bd5993dd826fc278d58dec8e51dcffe08bbd842b928795f62c3948d8e2f7f0faaea641c7b25166166871dd8", 0x35}, {&(0x7f0000000080)="9d2f3a231481427a365fb657a00a8dc3fa10418440facb58e48c7bcccf16c476043f7b2d0f900389a306ee02a38f7704fba0411a7872f002d01c9d3ce771d240a95beaaf6dec9873923e2388f5cd4f230e720f07ad84c2f03102c1b608f67fe49d19103e2cba42cc48be6b096f33c428a61802aacf68a805725853de9980aa5a9d7188107ae879d21ce87353b2b7629ca30e5b894adb91933fa7d1243afa27857d7b97", 0xa3}, {&(0x7f00000001c0)="c75916cf97a1eb28ee6f0b4c1941caddda8db7e7fc1002d25701b4aa0904134551e9f308dc415604f42c35015189d7bc523fa8104f88d0f83e7228b52c0e63a74d30ba0ab0b195bd5fbaa645cf077959a4d20e2c8050a1a395e66f7ccf8942e48ae5a7929e639d0362b995279e03a2d552b42c7f92b0c66bba6b263d52ab847622eaba527c640ed98f32eb391c91e4e2a7ecb16198c1d2a70eb4739255405a429a922897c4da43811414a28056d8ab7872a7ef9b668ebd92945fa62e989fc2240636dd091809739e8fc54e27da385d82017387750498d685a5c6d9bef8db98874b23c3627210c1bb598f6676cd16b8c5056d17b6bbd13eab5af4ca46", 0xfc}], 0x3, 0x8, 0x9) kernel console output (not intermixed with test programs): acklog [ 668.012122][ C1] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 668.020472][ C1] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 668.028777][ C1] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 668.037052][ C1] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 668.136373][T30177] veth0: entered promiscuous mode [ 668.188295][T30185] veth0: left promiscuous mode [ 668.726409][T25657] IPVS: starting estimator thread 0... [ 668.802096][T30205] xt_hashlimit: size too large, truncated to 1048576 [ 668.827078][T30201] IPVS: using max 30 ests per chain, 72000 per kthread [ 668.991786][T30210] netlink: 196 bytes leftover after parsing attributes in process `syz.5.6739'. [ 669.028946][T30210] netlink: 196 bytes leftover after parsing attributes in process `syz.5.6739'. [ 669.061861][T30210] netlink: 19 bytes leftover after parsing attributes in process `syz.5.6739'. [ 669.294881][T30219] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 669.845964][T30234] netlink: 8 bytes leftover after parsing attributes in process `syz.3.6744'. [ 670.359761][T30241] macvtap2: entered promiscuous mode [ 670.386096][T30241] macvtap2: entered allmulticast mode [ 670.601826][T30247] syzkaller0: entered promiscuous mode [ 670.614924][T30247] syzkaller0: entered allmulticast mode [ 671.172649][T30262] netlink: 348 bytes leftover after parsing attributes in process `syz.2.6754'. [ 672.491050][T14010] lec:lec_start_xmit: lec0:No lecd attached [ 672.973202][ C0] net_ratelimit: 24659 callbacks suppressed [ 672.973222][ C0] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 672.987573][ C0] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 672.995997][ C0] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 673.004336][ C0] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 673.012704][ C0] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 673.021062][ C0] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 673.029314][ C0] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 673.037637][ C0] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 673.045882][ C0] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 673.054201][ C0] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 675.045296][T30275] netlink: 12 bytes leftover after parsing attributes in process `syz.2.6758'. [ 675.063390][T30275] netlink: 12 bytes leftover after parsing attributes in process `syz.2.6758'. [ 675.101421][T30276] netlink: 'syz.5.6760': attribute type 1 has an invalid length. [ 675.180559][T30283] netlink: 24 bytes leftover after parsing attributes in process `syz.2.6761'. [ 675.226521][T30281] netlink: 28 bytes leftover after parsing attributes in process `syz.5.6760'. [ 675.567938][T30276] 8021q: adding VLAN 0 to HW filter on device bond6 [ 677.864504][ C1] lec0: NETDEV WATCHDOG: CPU: 1: transmit queue 0 timed out 5360 ms [ 677.872563][ C1] lec:lec_tx_timeout: lec0 [ 677.976379][ C1] net_ratelimit: 25162 callbacks suppressed [ 677.976398][ C1] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 677.990653][ C1] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 677.998926][ C1] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 678.007241][ C1] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 678.015474][ C1] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 678.023821][ C1] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 678.032097][ C1] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 678.040474][ C1] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 678.048857][ C1] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 678.057219][ C1] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 680.559300][T30321] netlink: 8 bytes leftover after parsing attributes in process `syz.1.6773'. [ 681.124422][T30351] syzkaller0: entered promiscuous mode [ 681.141960][T30351] syzkaller0: entered allmulticast mode [ 681.188288][T30359] netlink: 64 bytes leftover after parsing attributes in process `syz.1.6781'. [ 681.365285][T30363] xt_CT: You must specify a L4 protocol and not use inversions on it [ 681.484269][T30367] netlink: 4 bytes leftover after parsing attributes in process `syz.1.6785'. [ 681.501727][T30367] netlink: 'syz.1.6785': attribute type 3 has an invalid length. [ 681.516017][T30367] netlink: 4 bytes leftover after parsing attributes in process `syz.1.6785'. [ 681.527143][T30367] netlink: 'syz.1.6785': attribute type 3 has an invalid length. [ 681.596127][T30371] vlan2: entered promiscuous mode [ 681.601519][T30371] bridge0: entered promiscuous mode [ 681.719576][T30376] mapping of prio or/and queue is allowed only from OUTPUT/FORWARD/POSTROUTING chains [ 681.790500][T30378] netlink: 16 bytes leftover after parsing attributes in process `syz.1.6788'. [ 682.392867][T30383] netlink: 8 bytes leftover after parsing attributes in process `syz.2.6789'. [ 682.518578][T30385] netlink: 24 bytes leftover after parsing attributes in process `syz.2.6789'. [ 682.986322][ C1] net_ratelimit: 26740 callbacks suppressed [ 682.986342][ C1] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 683.000624][ C1] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 683.008906][ C1] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 683.017270][ C1] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 683.025585][ C1] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 683.033964][ C1] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 683.042245][ C1] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 683.050591][ C1] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 683.058886][ C1] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 683.067267][ C1] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 683.833152][T30391] netlink: 28 bytes leftover after parsing attributes in process `syz.5.6793'. [ 684.218973][T30407] bridge5: entered promiscuous mode [ 684.224630][T30407] bridge5: entered allmulticast mode [ 685.089213][T30381] delete_channel: no stack [ 685.191198][T30420] netlink: 'syz.2.6802': attribute type 21 has an invalid length. [ 685.785571][ T1300] lec:lec_start_xmit: lec0:No lecd attached [ 687.095987][T30445] netlink: 'syz.3.6810': attribute type 2 has an invalid length. [ 687.126725][T30445] netlink: 12 bytes leftover after parsing attributes in process `syz.3.6810'. [ 687.312516][T30455] netlink: 'syz.2.6813': attribute type 1 has an invalid length. [ 687.762954][T30469] netlink: 8 bytes leftover after parsing attributes in process `syz.2.6820'. [ 687.773382][T30469] netlink: 4 bytes leftover after parsing attributes in process `syz.2.6820'. [ 687.794934][T14450] netdevsim netdevsim2 : set [0, 0] type 1 family 0 port 8472 - 0 [ 687.804104][T30469] netlink: 8 bytes leftover after parsing attributes in process `syz.2.6820'. [ 687.815791][T14450] netdevsim netdevsim2 netdevsim1: set [0, 0] type 1 family 0 port 8472 - 0 [ 687.825905][T30469] netlink: 4 bytes leftover after parsing attributes in process `syz.2.6820'. [ 687.837589][T14450] netdevsim netdevsim2 netdevsim2: set [0, 0] type 1 family 0 port 8472 - 0 [ 687.852379][T14450] netdevsim netdevsim2 netdevsim3: set [0, 0] type 1 family 0 port 8472 - 0 [ 687.996414][ C1] net_ratelimit: 28449 callbacks suppressed [ 687.996432][ C1] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 688.010727][ C1] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 688.019158][ C1] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 688.029843][ C1] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 688.038344][ C1] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 688.046706][ C1] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 688.055080][ C1] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 688.063479][ C1] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 688.071870][ C1] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 688.080274][ C1] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 688.210047][T30480] syzkaller1: entered promiscuous mode [ 688.215734][T30480] syzkaller1: entered allmulticast mode [ 688.493885][T30490] netlink: 40 bytes leftover after parsing attributes in process `syz.3.6828'. [ 689.105693][T30505] tipc: Started in network mode [ 689.120046][T30505] tipc: Node identity ac14140f, cluster identity 4711 [ 689.128031][T30505] tipc: Enabling of bearer rejected, failed to enable media [ 689.292508][T30512] netlink: 8 bytes leftover after parsing attributes in process `syz.3.6835'. [ 689.660966][T30530] gre0: entered promiscuous mode [ 689.666154][T30530] gre0: entered allmulticast mode [ 690.621927][T30553] netlink: 16 bytes leftover after parsing attributes in process `syz.2.6849'. [ 690.785342][T30558] gre0: left promiscuous mode [ 690.799715][T30558] gre0: left allmulticast mode [ 690.826355][ C1] lec0: NETDEV WATCHDOG: CPU: 1: transmit queue 0 timed out 5040 ms [ 690.834397][ C1] lec:lec_tx_timeout: lec0 [ 690.928744][T30558] netlink: 'syz.1.6851': attribute type 12 has an invalid length. [ 690.975518][T30558] bond2: option primary_reselect: invalid value (255) [ 691.036912][T30558] bond2 (unregistering): Released all slaves [ 691.847901][T30569] netlink: 8 bytes leftover after parsing attributes in process `syz.5.6854'. [ 691.860223][T30569] netlink: 40 bytes leftover after parsing attributes in process `syz.5.6854'. [ 692.284482][T30580] netlink: 24 bytes leftover after parsing attributes in process `syz.5.6858'. [ 692.294784][T30580] netlink: 4 bytes leftover after parsing attributes in process `syz.5.6858'. [ 692.305602][T30580] netlink: 212368 bytes leftover after parsing attributes in process `syz.5.6858'. [ 693.006255][ C1] net_ratelimit: 26279 callbacks suppressed [ 693.006275][ C1] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 693.020592][ C1] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 693.029055][ C1] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 693.037457][ C1] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 693.045688][ C1] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 693.054073][ C1] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 693.062374][ C1] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 693.070755][ C1] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 693.079049][ C1] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 693.087401][ C1] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 693.167076][T30596] netlink: 'syz.5.6864': attribute type 1 has an invalid length. [ 693.191442][T30596] netlink: 24 bytes leftover after parsing attributes in process `syz.5.6864'. [ 693.575995][T30605] netlink: 16 bytes leftover after parsing attributes in process `syz.2.6865'. [ 693.991515][T30618] syzkaller0: entered promiscuous mode [ 693.997343][T30618] syzkaller0: entered allmulticast mode [ 694.557227][T30632] netlink: 16 bytes leftover after parsing attributes in process `syz.5.6872'. [ 694.987869][T30638] netlink: 44 bytes leftover after parsing attributes in process `syz.5.6874'. [ 695.156042][T30638] netlink: 40 bytes leftover after parsing attributes in process `syz.5.6874'. [ 695.531511][T30655] netlink: 4 bytes leftover after parsing attributes in process `syz.5.6877'. [ 695.851387][T30669] xt_CT: You must specify a L4 protocol and not use inversions on it [ 696.094474][T30679] xt_addrtype: ipv6 does not support BROADCAST matching [ 696.148327][T30679] netlink: 28 bytes leftover after parsing attributes in process `syz.1.6883'. [ 696.272120][T30684] netlink: 'syz.1.6885': attribute type 21 has an invalid length. [ 698.016365][ C1] net_ratelimit: 24895 callbacks suppressed [ 698.016386][ C1] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 698.030669][ C1] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 698.039116][ C1] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 698.047470][ C1] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 698.055704][ C1] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 698.064030][ C1] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 698.072299][ C1] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 698.080627][ C1] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 698.088874][ C1] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 698.097164][ C1] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 698.475026][T30705] __nla_validate_parse: 4 callbacks suppressed [ 698.475046][T30705] netlink: 12 bytes leftover after parsing attributes in process `syz.6.6891'. [ 698.536574][T30705] 8021q: adding VLAN 0 to HW filter on device bond1 [ 698.704556][T30714] netlink: 16 bytes leftover after parsing attributes in process `syz.3.6892'. [ 699.146985][T30733] netlink: 20 bytes leftover after parsing attributes in process `syz.3.6898'. [ 699.182712][T30733] netlink: 32 bytes leftover after parsing attributes in process `syz.3.6898'. [ 699.223647][T30733] netlink: 'syz.3.6898': attribute type 10 has an invalid length. [ 699.251542][T30737] tipc: Enabled bearer , priority 0 [ 699.261515][T30733] netlink: 40 bytes leftover after parsing attributes in process `syz.3.6898'. [ 699.293568][T30740] netlink: 68 bytes leftover after parsing attributes in process `syz.3.6898'. [ 699.455902][T30743] IPv6: NLM_F_CREATE should be specified when creating new route [ 699.545308][T30737] tipc: Disabling bearer [ 699.604390][T30733] dummy0: entered promiscuous mode [ 699.622980][T30733] bridge0: port 1(dummy0) entered blocking state [ 699.630876][T30733] bridge0: port 1(dummy0) entered disabled state [ 699.638279][T30733] dummy0: entered allmulticast mode [ 699.648356][T30733] bridge0: port 1(dummy0) entered blocking state [ 699.654944][T30733] bridge0: port 1(dummy0) entered forwarding state [ 701.937761][T30783] netlink: 'syz.6.6913': attribute type 10 has an invalid length. [ 702.044609][T30785] netlink: 'syz.3.6914': attribute type 1 has an invalid length. [ 702.053739][T30785] netlink: 'syz.3.6914': attribute type 1 has an invalid length. [ 702.117739][T30783] team0: Port device dummy0 added [ 702.134771][T30785] dummy0: left allmulticast mode [ 702.140447][T30785] bridge0: port 1(dummy0) entered disabled state [ 702.414456][T30791] netlink: 'syz.3.6916': attribute type 1 has an invalid length. [ 703.026325][ C1] net_ratelimit: 26138 callbacks suppressed [ 703.026344][ C1] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 703.040678][ C1] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 703.049099][ C1] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 703.057546][ C1] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 703.065903][ C1] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 703.074298][ C1] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 703.082706][ C1] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 703.091146][ C1] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 703.099581][ C1] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 703.107966][ C1] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 703.155484][T30816] No such timeout policy "syz0" [ 703.231409][T30816] vlan2: entered promiscuous mode [ 703.263613][T30816] vlan2: entered allmulticast mode [ 703.284448][T30821] netlink: 'syz.3.6923': attribute type 1 has an invalid length. [ 703.292491][T30816] hsr_slave_1: entered allmulticast mode [ 703.308290][T30821] netlink: 280 bytes leftover after parsing attributes in process `syz.3.6923'. [ 703.328313][T30822] netlink: 8 bytes leftover after parsing attributes in process `syz.6.6922'. [ 703.355740][T30822] netlink: 8 bytes leftover after parsing attributes in process `syz.6.6922'. [ 704.824789][T30869] xt_TPROXY: Can be used only with -p tcp or -p udp [ 705.841608][T30899] netlink: 8 bytes leftover after parsing attributes in process `syz.5.6938'. [ 705.863711][T30899] bond0: entered promiscuous mode [ 705.869087][T30899] bond_slave_0: entered promiscuous mode [ 705.875266][T30899] bond_slave_1: entered promiscuous mode [ 705.891306][T30899] bond0: left promiscuous mode [ 705.897744][T30899] bond_slave_0: left promiscuous mode [ 705.903594][T30899] bond_slave_1: left promiscuous mode [ 707.260182][T30853] nci: __nci_request: wait_for_completion_interruptible_timeout failed -512 [ 707.553348][T30909] netlink: 4 bytes leftover after parsing attributes in process `syz.6.6944'. [ 707.604054][T30910] netlink: 'syz.2.6943': attribute type 1 has an invalid length. [ 707.690638][T30912] netlink: 'syz.2.6943': attribute type 1 has an invalid length. [ 707.716411][T30910] netlink: 96 bytes leftover after parsing attributes in process `syz.2.6943'. [ 707.785501][T30912] workqueue: Failed to create a rescuer kthread for wq "bond4": -EINTR [ 707.786045][T30910] netlink: 1 bytes leftover after parsing attributes in process `syz.2.6943'. [ 707.904108][T30910] netlink: 658 bytes leftover after parsing attributes in process `syz.2.6943'. [ 708.036359][ C1] net_ratelimit: 24825 callbacks suppressed [ 708.036379][ C1] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 708.050727][ C1] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 708.059141][ C1] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 708.067568][ C1] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 708.075940][ C1] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 708.084410][ C1] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 708.092846][ C1] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 708.101266][ C1] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 708.109752][ C1] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 708.118245][ C1] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 708.361354][T30931] bond0: (slave rose0): Enslaving as an active interface with an up link [ 708.489162][T30933] syzkaller0: entered promiscuous mode [ 708.494992][T30933] syzkaller0: entered allmulticast mode [ 708.835989][T30935] netlink: 11 bytes leftover after parsing attributes in process `syz.1.6953'. [ 708.859655][T30935] netlink: 11 bytes leftover after parsing attributes in process `syz.1.6953'. [ 709.621097][T30955] syz_tun: entered allmulticast mode [ 709.634559][T30955] dvmrp8: entered allmulticast mode [ 709.647984][T30955] dvmrp8: left allmulticast mode [ 709.728942][T30964] netlink: 16 bytes leftover after parsing attributes in process `syz.5.6961'. [ 709.748364][T30965] netlink: 'syz.5.6961': attribute type 1 has an invalid length. [ 709.827212][T30965] 8021q: adding VLAN 0 to HW filter on device bond8 [ 710.002758][T30971] netlink: 24 bytes leftover after parsing attributes in process `syz.5.6963'. [ 710.109744][T30973] 8021q: VLANs not supported on wlan0 [ 710.933285][T30995] netlink: 8 bytes leftover after parsing attributes in process `syz.2.6969'. [ 710.992132][T30997] netlink: 12 bytes leftover after parsing attributes in process `syz.5.6971'. [ 711.051821][T30997] netlink: 20 bytes leftover after parsing attributes in process `syz.5.6971'. [ 711.492510][T31006] netlink: 212360 bytes leftover after parsing attributes in process `syz.3.6972'. [ 711.688109][T30955] syz_tun: left allmulticast mode [ 711.742338][T31012] netlink: 16 bytes leftover after parsing attributes in process `syz.6.6974'. [ 711.771264][T31012] netlink: 12 bytes leftover after parsing attributes in process `syz.6.6974'. [ 711.791763][T31012] netlink: 16 bytes leftover after parsing attributes in process `syz.6.6974'. [ 711.841733][T31011] tipc: Started in network mode [ 711.859333][T31011] tipc: Node identity aaaaaaaaaa3f, cluster identity 4711 [ 711.878840][T31011] tipc: Enabled bearer , priority 10 [ 711.898015][T31012] netlink: 12 bytes leftover after parsing attributes in process `syz.6.6974'. [ 711.913208][T31015] netlink: 28 bytes leftover after parsing attributes in process `syz.3.6975'. [ 712.224625][T31021] bond2: Removing last arp target with arp_interval on [ 712.292410][T31026] netlink: 28 bytes leftover after parsing attributes in process `syz.3.6979'. [ 712.687532][T31038] sctp: [Deprecated]: syz.1.6982 (pid 31038) Use of int in maxseg socket option. [ 712.687532][T31038] Use struct sctp_assoc_value instead [ 712.996452][ T7293] tipc: Node number set to 9808554 [ 713.046265][ C0] net_ratelimit: 27954 callbacks suppressed [ 713.046285][ C0] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 713.060548][ C0] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 713.068873][ C0] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 713.077271][ C0] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 713.085535][ C0] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 713.093929][ C0] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 713.102290][ C0] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 713.110629][ C0] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 713.118956][ C0] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 713.127289][ C0] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 713.175086][T31041] hsr_slave_0 (unregistering): left promiscuous mode [ 713.733402][T31047] FAULT_INJECTION: forcing a failure. [ 713.733402][T31047] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 713.790197][T31047] CPU: 1 UID: 0 PID: 31047 Comm: syz.1.6986 Not tainted syzkaller #0 PREEMPT(full) [ 713.790245][T31047] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/24/2026 [ 713.790264][T31047] Call Trace: [ 713.790272][T31047] [ 713.790280][T31047] dump_stack_lvl+0xe8/0x150 [ 713.790309][T31047] should_fail_ex+0x412/0x560 [ 713.790338][T31047] _copy_from_user+0x2d/0xb0 [ 713.790357][T31047] ___sys_sendmsg+0x1c6/0x360 [ 713.790378][T31047] ? __lock_acquire+0x6b5/0x2cf0 [ 713.790401][T31047] ? __pfx____sys_sendmsg+0x10/0x10 [ 713.790454][T31047] ? __fget_files+0x2a/0x420 [ 713.790472][T31047] ? __fget_files+0x3a0/0x420 [ 713.790498][T31047] __x64_sys_sendmsg+0x1bd/0x2a0 [ 713.790522][T31047] ? __pfx___x64_sys_sendmsg+0x10/0x10 [ 713.790551][T31047] ? __pfx_ksys_write+0x10/0x10 [ 713.790582][T31047] do_syscall_64+0x14d/0xf80 [ 713.790603][T31047] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 713.790620][T31047] ? trace_irq_disable+0x37/0x100 [ 713.790638][T31047] ? clear_bhb_loop+0x40/0x90 [ 713.790659][T31047] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 713.790680][T31047] RIP: 0033:0x7f651119bf79 [ 713.790696][T31047] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 713.790712][T31047] RSP: 002b:00007f6511fd5028 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 713.790731][T31047] RAX: ffffffffffffffda RBX: 00007f6511415fa0 RCX: 00007f651119bf79 [ 713.790745][T31047] RDX: 0000000000000000 RSI: 0000200000000380 RDI: 0000000000000003 [ 713.790756][T31047] RBP: 00007f6511fd5090 R08: 0000000000000000 R09: 0000000000000000 [ 713.790767][T31047] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 713.790778][T31047] R13: 00007f6511416038 R14: 00007f6511415fa0 R15: 00007fff9d396508 [ 713.790808][T31047] [ 714.384976][T31064] gretap0: entered promiscuous mode [ 714.424293][T31064] gretap0: left promiscuous mode [ 715.485866][T31107] netlink: 'syz.6.7001': attribute type 4 has an invalid length. [ 715.628801][T31114] geneve3: entered promiscuous mode [ 715.634277][T31114] geneve3: entered allmulticast mode [ 716.239306][T31126] 8021q: adding VLAN 0 to HW filter on device macvlan0 [ 716.247287][T31126] team0: Device macvlan0 is already an upper device of the team interface [ 716.524494][T31133] __nla_validate_parse: 6 callbacks suppressed [ 716.524513][T31133] netlink: 6676 bytes leftover after parsing attributes in process `syz.2.7012'. [ 717.166214][ C0] sched: DL replenish lagged too much [ 717.578091][T31144] Bluetooth: MGMT ver 1.23 [ 717.716648][T31151] @0: renamed from bond_slave_1 [ 717.954390][T31161] bond0: (slave rose0): Error: Device is in use and cannot be enslaved [ 718.056318][ C0] net_ratelimit: 34267 callbacks suppressed [ 718.056335][ C0] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 718.061701][T31163] x_tables: unsorted underflow at hook 4 [ 718.062586][ C0] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 718.084502][ C0] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 718.092920][ C0] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 718.101267][ C0] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 718.109597][ C0] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 718.117942][ C0] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 718.126298][ C0] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 718.132996][T31166] netlink: 76 bytes leftover after parsing attributes in process `syz.5.7020'. [ 718.134603][ C0] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 718.151767][ C0] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 718.580363][ T5823] Bluetooth: hci1: command 0x0406 tx timeout [ 718.589380][ T5823] Bluetooth: hci0: command 0x0406 tx timeout [ 718.935809][T31175] netlink: 40 bytes leftover after parsing attributes in process `syz.3.7023'. [ 719.590920][T31135] nci: __nci_request: wait_for_completion_interruptible_timeout failed -512 [ 719.992723][T31188] netlink: 'syz.2.7028': attribute type 1 has an invalid length. [ 720.211695][T31188] 8021q: adding VLAN 0 to HW filter on device bond4 [ 720.352093][T31191] bond4: (slave geneve2): making interface the new active one [ 720.437838][T31191] bond4: (slave geneve2): Enslaving as an active interface with an up link [ 720.578424][T31205] netlink: 348 bytes leftover after parsing attributes in process `syz.1.7029'. [ 720.849272][T31212] netlink: 12 bytes leftover after parsing attributes in process `syz.3.7032'. [ 720.998547][T31217] netlink: 4 bytes leftover after parsing attributes in process `syz.2.7033'. [ 721.054675][T31216] netlink: 4 bytes leftover after parsing attributes in process `syz.2.7033'. [ 721.232928][T31228] netlink: 60 bytes leftover after parsing attributes in process `syz.3.7035'. [ 721.339188][T31235] netlink: 16 bytes leftover after parsing attributes in process `syz.2.7037'. [ 721.348784][T31234] netlink: 16 bytes leftover after parsing attributes in process `syz.2.7037'. [ 722.447770][T31235] bond0: entered promiscuous mode [ 722.454183][T31235] bond_slave_0: entered promiscuous mode [ 722.493273][T31235] bond_slave_1: entered promiscuous mode [ 722.513141][T31235] gretap0: entered promiscuous mode [ 722.530860][T31235] debugfs: 'hsr1' already exists in 'hsr' [ 722.545089][T31235] Cannot create hsr debugfs directory [ 722.554935][T31235] hsr1: entered promiscuous mode [ 723.066289][ C0] net_ratelimit: 35975 callbacks suppressed [ 723.066315][ C0] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 723.080593][ C0] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 723.088902][ C0] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 723.097252][ C0] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 723.105543][ C0] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 723.113912][ C0] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 723.123939][ C0] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 723.132330][ C0] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 723.140651][ C0] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 723.149022][ C0] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 723.209233][T31257] FAULT_INJECTION: forcing a failure. [ 723.209233][T31257] name failslab, interval 1, probability 0, space 0, times 0 [ 723.254664][T31257] CPU: 1 UID: 0 PID: 31257 Comm: syz.3.7045 Not tainted syzkaller #0 PREEMPT(full) [ 723.254692][T31257] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/24/2026 [ 723.254703][T31257] Call Trace: [ 723.254711][T31257] [ 723.254719][T31257] dump_stack_lvl+0xe8/0x150 [ 723.254746][T31257] should_fail_ex+0x412/0x560 [ 723.254774][T31257] should_failslab+0xa8/0x100 [ 723.254799][T31257] kmem_cache_alloc_node_noprof+0x8f/0x690 [ 723.254821][T31257] ? __alloc_skb+0x186/0x7d0 [ 723.254838][T31257] ? __alloc_skb+0x1d0/0x7d0 [ 723.254854][T31257] ? __local_bh_enable_ip+0xd0/0x130 [ 723.254878][T31257] __alloc_skb+0x1d0/0x7d0 [ 723.254901][T31257] netlink_sendmsg+0x5d4/0xb40 [ 723.254929][T31257] ? __pfx_netlink_sendmsg+0x10/0x10 [ 723.254950][T31257] ? aa_sock_msg_perm+0xf1/0x1b0 [ 723.254974][T31257] ? bpf_lsm_socket_sendmsg+0x9/0x20 [ 723.254998][T31257] ? __pfx_netlink_sendmsg+0x10/0x10 [ 723.255014][T31257] ____sys_sendmsg+0xa68/0xad0 [ 723.255041][T31257] ? __might_fault+0xaf/0x130 [ 723.255067][T31257] ? __pfx_____sys_sendmsg+0x10/0x10 [ 723.255096][T31257] ? import_iovec+0x73/0xa0 [ 723.255118][T31257] ___sys_sendmsg+0x2a5/0x360 [ 723.255137][T31257] ? __lock_acquire+0x6b5/0x2cf0 [ 723.255159][T31257] ? __pfx____sys_sendmsg+0x10/0x10 [ 723.255212][T31257] ? __fget_files+0x2a/0x420 [ 723.255229][T31257] ? __fget_files+0x3a0/0x420 [ 723.255256][T31257] __x64_sys_sendmsg+0x1bd/0x2a0 [ 723.255279][T31257] ? __pfx___x64_sys_sendmsg+0x10/0x10 [ 723.255308][T31257] ? __pfx_ksys_write+0x10/0x10 [ 723.255338][T31257] do_syscall_64+0x14d/0xf80 [ 723.255359][T31257] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 723.255375][T31257] ? trace_irq_disable+0x37/0x100 [ 723.255393][T31257] ? clear_bhb_loop+0x40/0x90 [ 723.255413][T31257] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 723.255430][T31257] RIP: 0033:0x7f8083f9bf79 [ 723.255446][T31257] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 723.255460][T31257] RSP: 002b:00007f8084eb1028 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 723.255480][T31257] RAX: ffffffffffffffda RBX: 00007f8084215fa0 RCX: 00007f8083f9bf79 [ 723.255492][T31257] RDX: 0000000000000000 RSI: 00002000000006c0 RDI: 0000000000000003 [ 723.255504][T31257] RBP: 00007f8084eb1090 R08: 0000000000000000 R09: 0000000000000000 [ 723.255515][T31257] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 723.255526][T31257] R13: 00007f8084216038 R14: 00007f8084215fa0 R15: 00007fff04f1bb88 [ 723.255555][T31257] [ 723.809628][T31269] netlink: 4 bytes leftover after parsing attributes in process `syz.6.7048'. [ 723.839719][T31270] netlink: 4 bytes leftover after parsing attributes in process `syz.6.7048'. [ 724.047661][T31276] netlink: 212348 bytes leftover after parsing attributes in process `syz.1.7050'. [ 724.912167][T31304] netlink: 'syz.5.7058': attribute type 1 has an invalid length. [ 724.957760][T31304] bond10: (slave gretap3): making interface the new active one [ 724.967415][T31304] bond10: (slave gretap3): Enslaving as an active interface with an up link [ 725.225219][T31314] xt_limit: Overflow, try lower: 271964/0 [ 725.249351][T31313] xt_limit: Overflow, try lower: 271964/0 [ 725.387801][T31318] netlink: 16 bytes leftover after parsing attributes in process `syz.5.7062'. [ 725.401662][T31318] netlink: 12 bytes leftover after parsing attributes in process `syz.5.7062'. [ 726.132981][T31337] netlink: 12 bytes leftover after parsing attributes in process `syz.2.7067'. [ 726.253958][T31338] netlink: 8 bytes leftover after parsing attributes in process `syz.2.7067'. [ 726.494918][T31340] netlink: 'syz.6.7068': attribute type 13 has an invalid length. [ 726.523704][T31340] netlink: 196 bytes leftover after parsing attributes in process `syz.6.7068'. [ 727.352485][T31376] netlink: 'syz.6.7079': attribute type 4 has an invalid length. [ 727.396113][T31376] netlink: 28 bytes leftover after parsing attributes in process `syz.6.7079'. [ 727.475920][T31383] netlink: 9 bytes leftover after parsing attributes in process `syz.3.7081'. [ 727.561015][T31383] gretap0: entered promiscuous mode [ 728.076245][ C0] net_ratelimit: 30389 callbacks suppressed [ 728.076263][ C0] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 728.090511][ C0] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 728.098871][ C0] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 728.107185][ C0] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 728.115506][ C0] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 728.123854][ C0] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 728.132189][ C0] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 728.138308][T31405] xt_l2tp: missing protocol rule (udp|l2tpip) [ 728.140487][ C0] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 728.154678][ C0] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 728.163005][ C0] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 728.275800][T31406] xt_hashlimit: size too large, truncated to 1048576 [ 728.342046][T31409] xt_recent: hitcount (4294901760) is larger than allowed maximum (65535) [ 728.833681][T31419] bond2: option arp_interval: mode dependency failed, not supported in mode balance-tlb(5) [ 728.918236][T31419] bond2 (unregistering): Released all slaves [ 729.721227][T31455] __nla_validate_parse: 3 callbacks suppressed [ 729.721247][T31455] netlink: 68 bytes leftover after parsing attributes in process `syz.5.7106'. [ 729.819427][T31457] syzkaller0: entered promiscuous mode [ 729.825202][T31457] syzkaller0: entered allmulticast mode [ 730.262530][T31460] netlink: 16 bytes leftover after parsing attributes in process `syz.3.7108'. [ 731.648618][ T1157] netdevsim netdevsim6 netdevsim0: set [0, 0] type 1 family 0 port 8472 - 0 [ 731.676058][ T1157] netdevsim netdevsim6 netdevsim1: set [0, 0] type 1 family 0 port 8472 - 0 [ 731.701073][ T1157] netdevsim netdevsim6 netdevsim2: set [0, 0] type 1 family 0 port 8472 - 0 [ 731.728606][ T1157] netdevsim netdevsim6 netdevsim3: set [0, 0] type 1 family 0 port 8472 - 0 [ 732.227389][T31496] syzkaller0: entered allmulticast mode [ 732.573722][T31503] netlink: 401 bytes leftover after parsing attributes in process `syz.3.7118'. [ 732.584096][T31503] netlink: 348 bytes leftover after parsing attributes in process `syz.3.7118'. [ 733.086240][ C0] net_ratelimit: 35289 callbacks suppressed [ 733.086261][ C0] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 733.100551][ C0] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 733.108854][ C0] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 733.117258][ C0] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 733.125546][ C0] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 733.133896][ C0] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 733.142203][ C0] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 733.150545][ C0] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 733.158833][ C0] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 733.167143][ C0] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 735.105549][T31494] nci: __nci_request: wait_for_completion_interruptible_timeout failed -512 [ 735.512255][T31532] netlink: 4 bytes leftover after parsing attributes in process `syz.5.7126'. [ 735.572650][T31532] netlink: 44 bytes leftover after parsing attributes in process `syz.5.7126'. [ 735.660422][T31535] netlink: 'syz.5.7126': attribute type 15 has an invalid length. [ 735.684316][T31538] netlink: 'syz.2.7127': attribute type 13 has an invalid length. [ 735.736629][T31535] netlink: 24 bytes leftover after parsing attributes in process `syz.5.7126'. [ 736.004390][T31532] netlink: 40 bytes leftover after parsing attributes in process `syz.5.7126'. [ 736.145060][T31554] x_tables: duplicate underflow at hook 3 [ 736.270686][T31559] syzkaller1: entered promiscuous mode [ 736.276533][T31570] netlink: 'syz.5.7134': attribute type 1 has an invalid length. [ 736.284404][T31559] syzkaller1: entered allmulticast mode [ 736.294863][T31559] netlink: 36 bytes leftover after parsing attributes in process `syz.3.7131'. [ 736.466893][T31580] netlink: 44 bytes leftover after parsing attributes in process `syz.5.7137'. [ 736.475897][T31580] netlink: 43 bytes leftover after parsing attributes in process `syz.5.7137'. [ 736.506351][T31580] netlink: 'syz.5.7137': attribute type 5 has an invalid length. [ 736.526301][T31580] netlink: 43 bytes leftover after parsing attributes in process `syz.5.7137'. [ 736.777712][T14010] lec:lec_start_xmit: lec0:No lecd attached [ 737.003386][T31619] netlink: 12 bytes leftover after parsing attributes in process `syz.5.7147'. [ 737.080540][T31619] syzkaller0: entered promiscuous mode [ 737.086172][T31619] syzkaller0: entered allmulticast mode [ 737.214406][T31631] netlink: 60 bytes leftover after parsing attributes in process `syz.2.7148'. [ 737.455894][T31643] 8021q: adding VLAN 0 to HW filter on device bond11 [ 738.077896][T31688] hsr_slave_1 (unregistering): left promiscuous mode [ 738.223953][T31701] netlink: 'syz.2.7170': attribute type 20 has an invalid length. [ 738.357131][T31707] netlink: 'syz.2.7171': attribute type 1 has an invalid length. [ 738.669040][T31723] nbd: must specify at least one socket [ 738.854287][T31739] IPv6: Can't replace route, no match found [ 739.468292][T31781] x_tables: duplicate underflow at hook 1 [ 739.593155][T31793] xt_TCPMSS: Only works on TCP SYN packets [ 739.702007][T31794] bond2: option lacp_rate: mode dependency failed, not supported in mode active-backup(1) [ 739.723550][T31794] bond2 (unregistering): Released all slaves [ 741.856269][ C1] lec0: NETDEV WATCHDOG: CPU: 1: transmit queue 0 timed out 5080 ms [ 741.864316][ C1] lec:lec_tx_timeout: lec0 [ 742.105822][ T794] net_ratelimit: 21289 callbacks suppressed [ 742.105841][ T794] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 742.120395][ T794] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 747.227104][ T1300] lec:lec_start_xmit: lec0:No lecd attached [ 749.296500][ T5836] Bluetooth: hci5: command 0x0406 tx timeout [ 751.701021][ T794] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 752.344143][ T794] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 752.816281][ C1] lec0: NETDEV WATCHDOG: CPU: 1: transmit queue 0 timed out 5590 ms [ 752.824321][ C1] lec:lec_tx_timeout: lec0 [ 754.418260][ T5836] Bluetooth: hci2: command 0x0406 tx timeout [ 761.938401][ T794] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 763.611803][ T51] Bluetooth: hci4: unexpected cc 0x0c03 length: 249 > 1 [ 763.626547][ T51] Bluetooth: hci4: unexpected cc 0x1003 length: 249 > 9 [ 763.635550][ T51] Bluetooth: hci4: unexpected cc 0x1001 length: 249 > 9 [ 763.643663][ T51] Bluetooth: hci4: unexpected cc 0x0c23 length: 249 > 4 [ 763.652081][ T51] Bluetooth: hci4: unexpected cc 0x0c38 length: 249 > 2 [ 763.723100][T31854] __nla_validate_parse: 15 callbacks suppressed [ 763.723121][T31854] netlink: 8 bytes leftover after parsing attributes in process `syz.2.7207'. [ 763.759496][T31858] netlink: 'syz.1.7206': attribute type 4 has an invalid length. [ 763.890417][T31864] syzkaller0: entered promiscuous mode [ 763.896122][T31864] syzkaller0: entered allmulticast mode [ 763.896992][T31862] netlink: 12 bytes leftover after parsing attributes in process `syz.5.7210'. [ 764.506523][T31899] netlink: 4 bytes leftover after parsing attributes in process `syz.1.7218'. [ 764.523489][T31847] chnl_net:caif_netlink_parms(): no params data found [ 764.665288][ T5836] Bluetooth: hci6: command 0x0405 tx timeout [ 764.729032][T31847] bridge0: port 1(bridge_slave_0) entered blocking state [ 764.736968][T31847] bridge0: port 1(bridge_slave_0) entered disabled state [ 764.744242][T31847] bridge_slave_0: entered allmulticast mode [ 764.752265][T31847] bridge_slave_0: entered promiscuous mode [ 764.761075][T31847] bridge0: port 2(bridge_slave_1) entered blocking state [ 764.768763][T31847] bridge0: port 2(bridge_slave_1) entered disabled state [ 764.777112][T31847] bridge_slave_1: entered allmulticast mode [ 764.785542][T31847] bridge_slave_1: entered promiscuous mode [ 764.852205][T31847] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 764.864093][T31916] netlink: 'syz.5.7223': attribute type 28 has an invalid length. [ 764.872821][T31918] ip6tnl0: Caught tx_queue_len zero misconfig [ 764.881911][T31916] netlink: 'syz.5.7223': attribute type 3 has an invalid length. [ 764.902057][T31916] netlink: 132 bytes leftover after parsing attributes in process `syz.5.7223'. [ 764.919340][T31847] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 764.923798][T31916] netlink: 276 bytes leftover after parsing attributes in process `syz.5.7223'. [ 764.964726][T31847] team0: Port device team_slave_0 added [ 764.976727][T31847] team0: Port device team_slave_1 added [ 765.016471][T31847] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 765.023548][T31847] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 765.050020][T31847] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 765.072001][T31932] netlink: 'syz.1.7226': attribute type 1 has an invalid length. [ 765.083138][T31847] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 765.090706][T31847] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 765.119294][T31847] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 765.164171][T31930] netlink: 28 bytes leftover after parsing attributes in process `syz.1.7226'. [ 765.214042][T31847] hsr_slave_0: entered promiscuous mode [ 765.222227][T31847] hsr_slave_1: entered promiscuous mode [ 765.230012][T31847] debugfs: 'hsr0' already exists in 'hsr' [ 765.235916][T31847] Cannot create hsr debugfs directory [ 765.508871][T31948] netlink: 'syz.5.7231': attribute type 1 has an invalid length. [ 765.539803][T31948] bond12: entered promiscuous mode [ 765.545361][T31948] 8021q: adding VLAN 0 to HW filter on device bond12 [ 765.574519][T31847] netdevsim netdevsim7 netdevsim0: renamed from eth0 [ 765.590582][T31847] netdevsim netdevsim7 netdevsim1: renamed from eth1 [ 765.609490][T31847] netdevsim netdevsim7 netdevsim2: renamed from eth2 [ 765.632802][T31847] netdevsim netdevsim7 netdevsim3: renamed from eth3 [ 765.696378][ T5835] Bluetooth: hci4: command tx timeout [ 765.778891][ T30] audit: type=1804 audit(1771019859.626:12): pid=31964 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=invalid_pcr cause=open_writers comm="syz.2.7235" name="/newroot/231/cgroup.controllers" dev="tmpfs" ino=1193 res=1 errno=0 [ 765.803763][T31847] 8021q: adding VLAN 0 to HW filter on device bond0 [ 765.852537][ T30] audit: type=1800 audit(1771019859.626:13): pid=31964 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.2.7235" name="cgroup.controllers" dev="tmpfs" ino=1193 res=0 errno=0 [ 765.880182][T31967] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check. [ 765.905249][T31970] ip_vti0: entered promiscuous mode [ 765.912803][T31970] ip_vti0: entered allmulticast mode [ 765.939382][T31847] 8021q: adding VLAN 0 to HW filter on device team0 [ 765.973379][T24043] bridge0: port 1(bridge_slave_0) entered blocking state [ 765.980582][T24043] bridge0: port 1(bridge_slave_0) entered forwarding state [ 766.031181][T14473] bridge0: port 2(bridge_slave_1) entered blocking state [ 766.038495][T14473] bridge0: port 2(bridge_slave_1) entered forwarding state [ 766.108358][T31985] netlink: 'syz.2.7241': attribute type 1 has an invalid length. [ 766.636463][T31847] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 766.668315][T32020] syzkaller0: entered allmulticast mode [ 766.699502][T32020] syzkaller0 (unregistering): left allmulticast mode [ 766.915813][T32044] netlink: 12 bytes leftover after parsing attributes in process `syz.5.7257'. [ 767.085749][T32056] netlink: 16 bytes leftover after parsing attributes in process `syz.5.7261'. [ 767.092878][T32049] syzkaller0: entered promiscuous mode [ 767.104156][T32049] syzkaller0: entered allmulticast mode [ 767.107379][T32056] netlink: 12 bytes leftover after parsing attributes in process `syz.5.7261'. [ 767.170184][T32059] netlink: 'syz.5.7261': attribute type 1 has an invalid length. [ 767.239004][T32062] netlink: 20 bytes leftover after parsing attributes in process `syz.1.7263'. [ 767.264427][T32056] netlink: 'syz.5.7261': attribute type 1 has an invalid length. [ 767.278439][T32064] workqueue: Failed to create a rescuer kthread for wq "bond5": -EINTR [ 767.777515][ T5835] Bluetooth: hci4: command tx timeout [ 769.065917][T32056] 8021q: VLANs not supported on ip6gre0 [ 769.210611][T32091] netlink: 'syz.5.7268': attribute type 1 has an invalid length. [ 769.221606][T32092] __nla_validate_parse: 2 callbacks suppressed [ 769.221625][T32092] netlink: 16215 bytes leftover after parsing attributes in process `syz.3.7269'. [ 769.235781][T32088] openvswitch: netlink: Flow key attr not present in new flow. [ 769.279134][T31847] veth0_vlan: entered promiscuous mode [ 769.371179][T31847] veth1_vlan: entered promiscuous mode [ 769.509707][T31847] veth0_macvtap: entered promiscuous mode [ 769.535097][T31847] veth1_macvtap: entered promiscuous mode [ 769.547201][T32114] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 769.557856][T32115] netlink: 68 bytes leftover after parsing attributes in process `syz.5.7275'. [ 769.592144][T31847] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 769.613351][T31847] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 769.679277][T14450] netdevsim netdevsim7 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 769.689016][T14450] netdevsim netdevsim7 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 769.700861][T14450] netdevsim netdevsim7 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 769.740252][T14450] netdevsim netdevsim7 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 769.807546][T32125] netlink: 272 bytes leftover after parsing attributes in process `syz.2.7278'. [ 769.856503][ T5835] Bluetooth: hci4: command tx timeout [ 769.919592][T32134] netlink: 4 bytes leftover after parsing attributes in process `syz.2.7281'. [ 769.974537][ T13] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 769.984304][ T13] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 770.034183][T32137] netlink: 'syz.1.7280': attribute type 3 has an invalid length. [ 770.040468][T24043] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 770.052615][T24043] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 770.057068][T32137] netlink: 204 bytes leftover after parsing attributes in process `syz.1.7280'. [ 770.078113][T32139] netlink: 44 bytes leftover after parsing attributes in process `syz.2.7283'. [ 770.481924][T32167] netlink: 52 bytes leftover after parsing attributes in process `syz.1.7291'. [ 770.521346][T32173] netlink: 'syz.3.7292': attribute type 39 has an invalid length. [ 770.625428][ T9] IPVS: starting estimator thread 0... [ 770.726331][T32188] IPVS: using max 33 ests per chain, 79200 per kthread [ 770.761321][T32194] netlink: 8 bytes leftover after parsing attributes in process `syz.2.7297'. [ 770.802352][T32197] netlink: 'syz.7.7296': attribute type 26 has an invalid length. [ 770.820133][T32197] netlink: 16 bytes leftover after parsing attributes in process `syz.7.7296'. [ 770.872807][T32201] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 771.011100][T32213] bond3: option arp_all_targets: invalid value (18446744073709551613) [ 771.030605][T32213] bond3 (unregistering): Released all slaves [ 771.152454][T32215] bond3: option arp_all_targets: invalid value (18446744073709551613) [ 771.173564][T32215] bond3 (unregistering): Released all slaves [ 771.307037][T32232] sctp: [Deprecated]: syz.7.7308 (pid 32232) Use of int in maxseg socket option. [ 771.307037][T32232] Use struct sctp_assoc_value instead [ 771.334796][T32229] netlink: 8 bytes leftover after parsing attributes in process `syz.1.7306'. [ 771.537065][ T794] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 771.734940][T32266] ip6gre1: entered promiscuous mode [ 771.743580][T32266] ip6gre1: entered allmulticast mode [ 771.920293][T32279] tipc: Started in network mode [ 771.935220][T32279] tipc: Node identity aebbe3497605, cluster identity 4711 [ 771.942716][ T5835] Bluetooth: hci4: command tx timeout [ 771.961825][T32279] tipc: Enabled bearer , priority 0 [ 771.980728][T32275] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 772.045223][T32275] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 772.074143][T32281] syzkaller0: entered promiscuous mode [ 772.080014][T32281] syzkaller0: entered allmulticast mode [ 772.111923][T32287] bond3: option arp_interval: mode dependency failed, not supported in mode balance-tlb(5) [ 772.126104][T32287] bond3 (unregistering): Released all slaves [ 772.172486][T32282] tipc: Resetting bearer [ 772.226548][T32282] tipc: Resetting bearer [ 772.251602][T32282] tipc: Disabling bearer [ 772.308130][T32300] netlink: 'syz.3.7326': attribute type 1 has an invalid length. [ 772.434474][T32312] netem: change failed [ 772.448454][T32304] nbd1: detected capacity change from 0 to 127 [ 772.458273][ T5836] block nbd1: Receive control failed (result -104) [ 772.957114][T32345] netlink: 'syz.5.7339': attribute type 1 has an invalid length. [ 773.040172][T32345] bond13: entered promiscuous mode [ 773.049560][T32345] bond13: entered allmulticast mode [ 773.055348][T32345] 8021q: adding VLAN 0 to HW filter on device bond13 [ 773.077019][T32347] erspan3: entered allmulticast mode [ 773.092206][T32347] bond13: (slave erspan3): making interface the new active one [ 773.105549][T32347] erspan3: entered promiscuous mode [ 773.112430][T32354] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 773.117843][T32347] bond13: (slave erspan3): Enslaving as an active interface with an up link [ 773.121030][T32354] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 773.138175][T32354] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 773.146469][T32354] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 773.154619][T32354] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 773.162865][T32354] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 773.171053][T32354] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 773.347807][T32368] netlink: 'syz.3.7343': attribute type 1 has an invalid length. [ 774.050335][T32424] netlink: 'syz.2.7360': attribute type 33 has an invalid length. [ 774.105040][T32424] bond5: option broadcast_neighbor: mode dependency failed, not supported in mode balance-rr(0) [ 774.118321][T32424] bond5 (unregistering): Released all slaves [ 774.247213][T32432] 8021q: adding VLAN 0 to HW filter on device bond14 [ 774.284894][T32436] netlink: 'syz.1.7364': attribute type 1 has an invalid length. [ 774.336597][ T5836] Bluetooth: hci4: command 0x0405 tx timeout [ 774.392520][T32440] __nla_validate_parse: 11 callbacks suppressed [ 774.392540][T32440] netlink: 4 bytes leftover after parsing attributes in process `syz.2.7366'. [ 774.638332][T32458] netlink: 12 bytes leftover after parsing attributes in process `syz.2.7371'. [ 775.097303][T32494] netlink: 'syz.2.7382': attribute type 16 has an invalid length. [ 775.106629][T32494] netlink: 20 bytes leftover after parsing attributes in process `syz.2.7382'. [ 775.149355][T32498] netlink: 212336 bytes leftover after parsing attributes in process `syz.1.7383'. [ 775.212276][T32500] veth0_virt_wifi: default FDB implementation only supports local addresses [ 775.304029][T32506] lo: Caught tx_queue_len zero misconfig [ 775.361785][T32510] syzkaller0: entered promiscuous mode [ 775.390473][T32513] netlink: 'syz.3.7389': attribute type 1 has an invalid length. [ 775.393429][T32510] syzkaller0: entered allmulticast mode [ 775.400692][T32514] netlink: 'syz.3.7389': attribute type 1 has an invalid length. [ 775.448827][T32513] 8021q: adding VLAN 0 to HW filter on device bond3 [ 775.504300][T32520] netlink: 64 bytes leftover after parsing attributes in process `syz.2.7390'. [ 775.756108][T32537] net_ratelimit: 26 callbacks suppressed [ 775.756140][T32537] A link change request failed with some changes committed already. Interface gretap0 may have been left with an inconsistent configuration, please check. [ 776.023592][T32548] netlink: 32 bytes leftover after parsing attributes in process `syz.5.7397'. [ 776.259816][T32561] pim6reg527: entered allmulticast mode [ 776.416694][ T5836] Bluetooth: hci4: command 0x0405 tx timeout [ 776.431713][T32565] tipc: Enabling of bearer rejected, failed to enable media [ 776.549814][T32571] netlink: 232 bytes leftover after parsing attributes in process `syz.2.7405'. [ 776.572130][T32571] syzkaller0: entered promiscuous mode [ 776.578546][T32571] syzkaller0: entered allmulticast mode [ 776.807514][T32581] x_tables: duplicate underflow at hook 1 [ 776.860260][T32583] x_tables: duplicate underflow at hook 1 [ 777.100898][T32602] vcan0: tx drop: invalid sa for name 0x0000000000000002 [ 777.193888][T32608] netlink: 24 bytes leftover after parsing attributes in process `syz.1.7418'. [ 777.241272][T32610] syzkaller0: entered promiscuous mode [ 777.266476][T32610] syzkaller0: entered allmulticast mode [ 777.422813][T32626] netlink: 'syz.1.7424': attribute type 2 has an invalid length. [ 777.450848][T32627] netlink: 16 bytes leftover after parsing attributes in process `syz.3.7425'. [ 777.499347][T32627] bond4: (slave lo): enslaved VLAN challenged slave. Adding VLANs will be blocked as long as it is part of bond. [ 777.516054][T32627] bond4: (slave lo): Enslaving as an active interface with an up link [ 777.528043][T32627] A link change request failed with some changes committed already. Interface tunl0 may have been left with an inconsistent configuration, please check. [ 777.997559][T32667] xt_NFQUEUE: number of total queues is 0 [ 778.091720][T32671] netlink: 76 bytes leftover after parsing attributes in process `syz.3.7441'. [ 778.162107][T14450] netdevsim netdevsim5 eth0: set [0, 0] type 1 family 0 port 8472 - 0 [ 778.170500][T14450] netdevsim netdevsim5 eth1: set [0, 0] type 1 family 0 port 8472 - 0 [ 778.198638][T14450] netdevsim netdevsim5 eth2: set [0, 0] type 1 family 0 port 8472 - 0 [ 778.209868][T14450] netdevsim netdevsim5 eth3: set [0, 0] type 1 family 0 port 8472 - 0 [ 778.282843][T32686] syzkaller0: entered promiscuous mode [ 778.288560][T32686] syzkaller0: entered allmulticast mode [ 780.137913][T32702] bond15: option primary: mode dependency failed, not supported in mode balance-rr(0) [ 780.157779][T32702] bond15 (unregistering): Released all slaves [ 780.359275][T32726] __nla_validate_parse: 4 callbacks suppressed [ 780.359293][T32726] netlink: 8 bytes leftover after parsing attributes in process `syz.5.7456'. [ 780.491821][T32738] netlink: 8 bytes leftover after parsing attributes in process `syz.5.7460'. [ 780.653175][T32750] netlink: 'syz.5.7463': attribute type 1 has an invalid length. [ 780.662324][T32755] syz_tun: entered allmulticast mode [ 780.700906][T32750] bond15: entered promiscuous mode [ 780.709161][T32750] 8021q: adding VLAN 0 to HW filter on device bond15 [ 780.718870][T32759] netlink: 8 bytes leftover after parsing attributes in process `syz.5.7463'. [ 780.726113][T32760] netlink: 'syz.2.7467': attribute type 1 has an invalid length. [ 780.774025][T32750] bond15: (slave bridge8): making interface the new active one [ 780.782672][T32750] bridge8: entered promiscuous mode [ 780.790690][T32750] bridge8: left promiscuous mode [ 780.845429][T32760] gretap1: entered promiscuous mode [ 780.855862][T32760] bond5: (slave gretap1): making interface the new active one [ 780.865050][T32760] bond5: (slave gretap1): Enslaving as an active interface with an up link [ 780.885189][T32754] syz_tun: left allmulticast mode [ 781.061496][ T307] netlink: 'syz.2.7472': attribute type 30 has an invalid length. [ 781.150374][ T313] gre0: entered promiscuous mode [ 781.155442][ T313] gre0: entered allmulticast mode [ 781.170660][ T313] netlink: 8 bytes leftover after parsing attributes in process `syz.5.7473'. [ 781.233970][ T317] netlink: 20 bytes leftover after parsing attributes in process `syz.2.7475'. [ 781.262444][ T317] tipc: Invalid UDP bearer configuration [ 781.262510][ T317] tipc: Enabling of bearer rejected, failed to enable media [ 781.309337][ T319] ipt_REJECT: TCP_RESET invalid for non-tcp [ 781.379764][ T326] netlink: 8 bytes leftover after parsing attributes in process `syz.2.7478'. [ 781.795189][ T357] netlink: 4 bytes leftover after parsing attributes in process `syz.5.7486'. [ 781.929628][ T369] syzkaller0: entered promiscuous mode [ 781.942140][ T369] syzkaller0: entered allmulticast mode [ 782.083636][ T376] netlink: 'syz.1.7494': attribute type 4 has an invalid length. [ 782.084812][ T381] syzkaller0: entered promiscuous mode [ 782.091565][ T376] netlink: 224 bytes leftover after parsing attributes in process `syz.1.7494'. [ 782.097690][ T381] syzkaller0: entered allmulticast mode [ 782.210970][ T385] netlink: 'syz.2.7496': attribute type 18 has an invalid length. [ 782.219135][ T385] netlink: 4 bytes leftover after parsing attributes in process `syz.2.7496'. [ 782.236803][ T385] netlink: 'syz.2.7496': attribute type 18 has an invalid length. [ 782.247590][ T385] netlink: 4 bytes leftover after parsing attributes in process `syz.2.7496'. [ 782.359661][ T396] sch_fq: defrate 0 ignored. [ 782.369544][ T396] nbd: must specify a size in bytes for the device [ 783.325667][ T462] netlink: 'syz.1.7518': attribute type 1 has an invalid length. [ 783.337546][ T462] netlink: 'syz.1.7518': attribute type 1 has an invalid length. [ 783.627796][ T484] ip6_vti0: entered promiscuous mode [ 783.688902][ T486] netlink: 'syz.2.7526': attribute type 1 has an invalid length. [ 783.808559][ T491] 8021q: adding VLAN 0 to HW filter on device bond8 [ 783.818330][ T491] bond7: (slave bond8): making interface the new active one [ 783.827206][ T491] bond7: (slave bond8): Enslaving as an active interface with an up link [ 783.854698][ T499] netlink: 'syz.5.7530': attribute type 2 has an invalid length. [ 784.252108][ T530] bond9: option primary: mode dependency failed, not supported in mode balance-rr(0) [ 784.269031][ T530] bond9 (unregistering): Released all slaves [ 784.348126][T25657] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 784.582219][ T549] netlink: zone id is out of range [ 784.591433][ T549] netlink: get zone limit has 4 unknown bytes [ 784.816652][ T5882] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 784.827903][T24046] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 784.839513][ T5882] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 784.853418][ T5882] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 784.996667][ T573] syzkaller0: entered promiscuous mode [ 785.002274][ T573] syzkaller0: entered allmulticast mode [ 785.015889][ T573] tipc: Enabled bearer , priority 0 [ 785.039499][ T572] tipc: Resetting bearer [ 785.097321][ T572] tipc: Disabling bearer [ 785.382532][ T7293] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 785.503146][ T601] syzkaller0: entered promiscuous mode [ 785.509943][ T601] syzkaller0: entered allmulticast mode [ 785.749822][ T620] __nla_validate_parse: 18 callbacks suppressed [ 785.749842][ T620] netlink: 28 bytes leftover after parsing attributes in process `syz.2.7570'. [ 785.765668][ T620] validate_nla: 3 callbacks suppressed [ 785.765684][ T620] netlink: 'syz.2.7570': attribute type 7 has an invalid length. [ 785.792487][ T620] netlink: 'syz.2.7570': attribute type 8 has an invalid length. [ 785.800655][ T620] netlink: 4 bytes leftover after parsing attributes in process `syz.2.7570'. [ 785.864434][ T632] tipc: Enabling of bearer rejected, failed to enable media [ 786.035608][ T645] netlink: 44 bytes leftover after parsing attributes in process `syz.3.7577'. [ 786.113414][ T649] batadv1: entered allmulticast mode [ 786.416664][ T7293] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 786.690598][ T5835] Bluetooth: hci7: unexpected cc 0x0c03 length: 249 > 1 [ 786.711168][ T5835] Bluetooth: hci7: unexpected cc 0x1003 length: 249 > 9 [ 786.723620][ T5835] Bluetooth: hci7: unexpected cc 0x1001 length: 249 > 9 [ 786.743236][ T5835] Bluetooth: hci7: unexpected cc 0x0c23 length: 249 > 4 [ 786.756543][ T5835] Bluetooth: hci7: unexpected cc 0x0c38 length: 249 > 2 [ 786.876105][ T704] bond9: option fail_over_mac: invalid value (16) [ 786.891757][ T704] bond9 (unregistering): Released all slaves [ 786.991848][ T709] netlink: 'syz.1.7593': attribute type 2 has an invalid length. [ 787.011189][ T709] netlink: 8 bytes leftover after parsing attributes in process `syz.1.7593'. [ 787.078636][ T714] netlink: 80 bytes leftover after parsing attributes in process `syz.3.7594'. [ 787.091416][ T714] openvswitch: netlink: Flow get message rejected, Key attribute missing. [ 787.626085][ T743] netlink: 'syz.1.7599': attribute type 1 has an invalid length. [ 787.654475][ T743] netlink: 96 bytes leftover after parsing attributes in process `syz.1.7599'. [ 787.664536][ T743] netlink: 1 bytes leftover after parsing attributes in process `syz.1.7599'. [ 787.674578][ T743] netlink: 'syz.1.7599': attribute type 1 has an invalid length. [ 787.683081][ T743] netlink: 618 bytes leftover after parsing attributes in process `syz.1.7599'. [ 787.715766][ T695] chnl_net:caif_netlink_parms(): no params data found [ 787.730110][ T747] netlink: 16 bytes leftover after parsing attributes in process `syz.5.7600'. [ 787.744247][ T747] netlink: 16 bytes leftover after parsing attributes in process `syz.5.7600'. [ 788.111693][ T695] bridge0: port 1(bridge_slave_0) entered blocking state [ 788.118988][ T695] bridge0: port 1(bridge_slave_0) entered disabled state [ 788.130240][ T695] bridge_slave_0: entered allmulticast mode [ 788.138054][ T695] bridge_slave_0: entered promiscuous mode [ 788.149030][ T695] bridge0: port 2(bridge_slave_1) entered blocking state [ 788.156432][ T695] bridge0: port 2(bridge_slave_1) entered disabled state [ 788.163719][ T695] bridge_slave_1: entered allmulticast mode [ 788.197845][ T695] bridge_slave_1: entered promiscuous mode [ 788.228346][ T773] netlink: 'syz.2.7605': attribute type 6 has an invalid length. [ 788.248218][ T777] Freezing with imperfect legacy cgroup freezer. See cgroup.freeze of cgroup v2 [ 788.269438][ T695] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 788.305643][ T695] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 788.369120][ T695] team0: Port device team_slave_0 added [ 788.379577][ T695] team0: Port device team_slave_1 added [ 788.495477][ T695] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 788.502964][ T695] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 788.531114][ T695] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 788.562226][ T795] syzkaller0: entered promiscuous mode [ 788.586068][ T795] syzkaller0: entered allmulticast mode [ 788.615944][ T695] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 788.633142][ T695] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 788.648309][ T810] xt_hashlimit: size too large, truncated to 1048576 [ 788.664472][ T695] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 788.819134][ T5836] Bluetooth: hci7: command tx timeout [ 788.833474][ T695] hsr_slave_0: entered promiscuous mode [ 788.842521][ T695] hsr_slave_1: entered promiscuous mode [ 788.859034][ T695] debugfs: 'hsr0' already exists in 'hsr' [ 788.865269][ T695] Cannot create hsr debugfs directory [ 789.165432][ T837] netlink: 'syz.1.7625': attribute type 1 has an invalid length. [ 789.221211][ T837] workqueue: Failed to create a rescuer kthread for wq "bond3": -EINTR [ 789.504548][ T857] netlink: 'syz.3.7631': attribute type 1 has an invalid length. [ 789.534412][ T695] netdevsim netdevsim8 netdevsim0: renamed from eth0 [ 789.542016][T25658] net_ratelimit: 4 callbacks suppressed [ 789.542034][T25658] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 789.589339][ T695] netdevsim netdevsim8 netdevsim1: renamed from eth1 [ 789.622060][ T695] netdevsim netdevsim8 netdevsim2: renamed from eth2 [ 789.664611][ T695] netdevsim netdevsim8 netdevsim3: renamed from eth3 [ 790.054709][ T889] netlink: 'syz.5.7639': attribute type 11 has an invalid length. [ 790.063082][ T889] netlink: 'syz.5.7639': attribute type 11 has an invalid length. [ 790.072564][ T889] netlink: 'syz.5.7639': attribute type 11 has an invalid length. [ 790.081479][ T889] netlink: 'syz.5.7639': attribute type 11 has an invalid length. [ 790.090304][ T889] netlink: 'syz.5.7639': attribute type 11 has an invalid length. [ 790.099424][ T10] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 790.099910][ T889] netlink: 'syz.5.7639': attribute type 11 has an invalid length. [ 790.108507][ T1157] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 790.116379][ T889] netlink: 'syz.5.7639': attribute type 11 has an invalid length. [ 790.132150][ T887] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 790.136805][T25658] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 790.143135][ T889] netlink: 'syz.5.7639': attribute type 11 has an invalid length. [ 790.161221][ T9] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 790.186970][ T889] netlink: 'syz.5.7639': attribute type 11 has an invalid length. [ 790.209880][ T889] netlink: 'syz.5.7639': attribute type 11 has an invalid length. [ 790.324814][ T695] 8021q: adding VLAN 0 to HW filter on device bond0 [ 790.542802][ T695] 8021q: adding VLAN 0 to HW filter on device team0 [ 790.576601][T25658] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 790.597272][T14473] bridge0: port 1(bridge_slave_0) entered blocking state [ 790.604438][T14473] bridge0: port 1(bridge_slave_0) entered forwarding state [ 790.641219][ T907] syzkaller0: entered promiscuous mode [ 790.646854][ T907] syzkaller0: entered allmulticast mode [ 790.699180][T24046] bridge0: port 2(bridge_slave_1) entered blocking state [ 790.706461][T24046] bridge0: port 2(bridge_slave_1) entered forwarding state [ 790.896489][ T5836] Bluetooth: hci7: command tx timeout [ 790.926392][ T923] __nla_validate_parse: 44 callbacks suppressed [ 790.926409][ T923] netlink: 4 bytes leftover after parsing attributes in process `syz.1.7648'. [ 791.318341][ T950] syzkaller0: entered promiscuous mode [ 791.323865][ T950] syzkaller0: entered allmulticast mode [ 791.388986][ T950] netlink: 64 bytes leftover after parsing attributes in process `syz.2.7651'. [ 791.617051][T25657] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 791.651818][ T988] netlink: 'syz.5.7659': attribute type 10 has an invalid length. [ 792.657699][T25658] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 792.982096][ T5836] Bluetooth: hci7: command tx timeout [ 793.218456][ T10] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 793.452747][ T995] sch_tbf: burst 4398 is lower than device lo mtu (33038) ! [ 793.531553][ T695] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 793.663912][ T1012] netlink: 20 bytes leftover after parsing attributes in process `syz.2.7665'. [ 793.920847][ T1033] netlink: 12 bytes leftover after parsing attributes in process `syz.5.7670'. [ 793.966623][ T1037] syzkaller0: entered promiscuous mode [ 793.976342][ T1037] syzkaller0: entered allmulticast mode [ 793.979809][ T1033] xt_hashlimit: size too large, truncated to 1048576 [ 794.093916][ T695] veth0_vlan: entered promiscuous mode [ 794.121090][ T695] veth1_vlan: entered promiscuous mode [ 794.233242][ T695] veth0_macvtap: entered promiscuous mode [ 794.254553][ T695] veth1_macvtap: entered promiscuous mode [ 794.286026][ T695] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 794.327937][ T695] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 794.405182][T14470] netdevsim netdevsim8 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 794.433912][T14470] netdevsim netdevsim8 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 794.452612][ T1068] syzkaller0: entered allmulticast mode [ 794.460119][T14470] netdevsim netdevsim8 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 794.472055][T24046] netdevsim netdevsim8 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 794.736508][ T7293] net_ratelimit: 1 callbacks suppressed [ 794.736523][ T7293] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 794.776785][ T1080] netlink: 4 bytes leftover after parsing attributes in process `syz.3.7679'. [ 794.819576][T24043] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 794.845230][T24043] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 794.906137][T24043] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 794.930072][T24043] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 795.059007][ T5836] Bluetooth: hci7: command tx timeout [ 795.069983][ T1105] .: renamed from bridge_slave_1 (while UP) [ 795.098906][ T1107] A link change request failed with some changes committed already. Interface wg2 may have been left with an inconsistent configuration, please check. [ 795.151624][ T1112] netlink: 4 bytes leftover after parsing attributes in process `syz.5.7687'. [ 795.198421][ T1112] netlink: 8 bytes leftover after parsing attributes in process `syz.5.7687'. [ 795.288798][ T1117] netlink: 'syz.3.7689': attribute type 1 has an invalid length. [ 795.330891][ T1119] ipvlan3: entered promiscuous mode [ 795.349867][ T1117] workqueue: Failed to create a rescuer kthread for wq "bond5": -EINTR [ 795.418379][ T1130] netlink: 4 bytes leftover after parsing attributes in process `syz.1.7688'. [ 795.485255][ T1119] xt_bpf: check failed: parse error [ 795.561607][ T1137] vlan2: entered allmulticast mode [ 795.576396][ T1137] hsr0: entered allmulticast mode [ 795.582127][ T1137] hsr_slave_0: entered allmulticast mode [ 795.589296][ T1137] hsr_slave_1: entered allmulticast mode [ 795.702723][ T1144] netlink: 20 bytes leftover after parsing attributes in process `syz.1.7696'. [ 795.719648][ T1146] netem: incorrect ge model size [ 795.725195][ T1146] netem: change failed [ 795.734945][ T1146] netlink: 48 bytes leftover after parsing attributes in process `syz.5.7699'. [ 795.785664][ T7293] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 795.857267][T24046] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 795.866114][ T9] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 795.901253][ T5882] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 796.070981][ T1177] __nla_validate_parse: 3 callbacks suppressed [ 796.070993][ T1177] netlink: 24 bytes leftover after parsing attributes in process `syz.8.7705'. [ 796.135708][ T1178] netlink: 40 bytes leftover after parsing attributes in process `syz.8.7705'. [ 796.188951][ T1178] netlink: 40 bytes leftover after parsing attributes in process `syz.8.7705'. [ 796.370023][ T1201] Bluetooth: MGMT ver 1.23 [ 796.375039][ T1201] Bluetooth: hci1: too big key_count value 32778 [ 796.383016][ T1178] netlink: 40 bytes leftover after parsing attributes in process `syz.8.7705'. [ 796.730219][ T1223] netlink: 4 bytes leftover after parsing attributes in process `syz.2.7716'. [ 796.818800][T25658] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 797.127415][ T1254] netlink: 4 bytes leftover after parsing attributes in process `syz.3.7724'. [ 797.250312][ T1258] netlink: 24 bytes leftover after parsing attributes in process `syz.8.7726'. [ 797.352086][ T1269] netlink: 44 bytes leftover after parsing attributes in process `syz.3.7728'. [ 797.373608][ T1269] netlink: 43 bytes leftover after parsing attributes in process `syz.3.7728'. [ 797.390244][ T1269] netlink: 'syz.3.7728': attribute type 5 has an invalid length. [ 797.400739][ T1269] netlink: 43 bytes leftover after parsing attributes in process `syz.3.7728'. [ 797.489346][ T1221] Bluetooth: hci0: Opcode 0x0c1a failed: -4 [ 797.857779][T25657] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 798.262953][ T1331] vlan3: entered allmulticast mode [ 798.280227][ T1331] gretap0: entered allmulticast mode [ 798.304208][ T1321] xt_NFQUEUE: number of queues (62232) out of range (got 67565) [ 798.315766][ T1336] netlink: 'syz.3.7745': attribute type 10 has an invalid length. [ 798.387455][ T1321] veth7: entered allmulticast mode [ 798.430371][T27662] NFSD: Failed to start, no listeners configured. [ 798.539101][ T1348] syzkaller0: entered promiscuous mode [ 798.544798][ T1348] syzkaller0: entered allmulticast mode [ 798.597511][ T1354] netlink: 'syz.1.7752': attribute type 64 has an invalid length. [ 798.736330][ T5836] Bluetooth: hci0: command 0x0406 tx timeout [ 798.815335][ T1371] bond9: option tlb_dynamic_lb: mode dependency failed, not supported in mode balance-rr(0) [ 798.888231][ T1371] bond9 (unregistering): Released all slaves [ 798.898352][T25657] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 798.977680][ T9] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 799.281063][ T1400] xfrm1: entered promiscuous mode [ 799.287550][ T1400] xfrm1: entered allmulticast mode [ 799.441764][ T1414] xt_CONNSECMARK: invalid mode: 0 [ 799.661099][ T1425] set match dimension is over the limit! [ 799.767690][ T1431] netlink: 'syz.1.7772': attribute type 39 has an invalid length. [ 799.867658][ T1433] netlink: 'syz.3.7773': attribute type 30 has an invalid length. [ 799.900306][ T1433] netlink: 'syz.3.7773': attribute type 30 has an invalid length. [ 799.917587][ T5835] Bluetooth: hci8: unexpected cc 0x0c03 length: 249 > 1 [ 799.934919][ T5835] Bluetooth: hci8: unexpected cc 0x1003 length: 249 > 9 [ 799.946535][ T5835] Bluetooth: hci8: unexpected cc 0x1001 length: 249 > 9 [ 799.947737][T25657] net_ratelimit: 3 callbacks suppressed [ 799.947752][T25657] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 799.954466][ T5835] Bluetooth: hci8: unexpected cc 0x0c23 length: 249 > 4 [ 799.976055][ T5835] Bluetooth: hci8: unexpected cc 0x0c38 length: 249 > 2 [ 799.976120][ T1440] syzkaller0: entered promiscuous mode [ 800.019147][ T1440] syzkaller0: entered allmulticast mode [ 800.137851][ T1440] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check. [ 800.271242][T14010] lec:lec_start_xmit: lec0:No lecd attached [ 800.502518][ T1462] netlink: 'syz.3.7781': attribute type 1 has an invalid length. [ 800.562318][T24046] netdevsim netdevsim5 eth3 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 800.595033][T24046] netdevsim netdevsim5 eth3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 800.650918][ T1462] workqueue: Failed to create a rescuer kthread for wq "bond5": -EINTR [ 800.778544][T24046] netdevsim netdevsim5 eth2 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 800.812174][T24046] netdevsim netdevsim5 eth2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 800.886031][T24046] netdevsim netdevsim5 eth1 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 800.910639][T24046] netdevsim netdevsim5 eth1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 801.021531][T24046] netdevsim netdevsim5 eth0 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 801.043996][T24046] netdevsim netdevsim5 eth0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 801.209680][ T1506] __nla_validate_parse: 24 callbacks suppressed [ 801.209700][ T1506] netlink: 8 bytes leftover after parsing attributes in process `syz.8.7789'. [ 801.348988][ T1439] chnl_net:caif_netlink_parms(): no params data found [ 801.650850][ T1530] netlink: 12 bytes leftover after parsing attributes in process `syz.8.7796'. [ 801.659954][ T1535] openvswitch: netlink: Unexpected mask (mask=240040, allowed=10048) [ 801.714465][ T1439] bridge0: port 1(bridge_slave_0) entered blocking state [ 801.722783][ T1439] bridge0: port 1(bridge_slave_0) entered disabled state [ 801.735763][ T1439] bridge_slave_0: entered allmulticast mode [ 801.762417][ T1439] bridge_slave_0: entered promiscuous mode [ 801.773633][ T1439] bridge0: port 2(bridge_slave_1) entered blocking state [ 801.783699][ T1439] bridge0: port 2(bridge_slave_1) entered disabled state [ 801.814817][ T1439] bridge_slave_1: entered allmulticast mode [ 801.815230][ T1541] IPVS: length: 189 != 24 [ 801.854556][ T1439] bridge_slave_1: entered promiscuous mode [ 801.904858][T24046] bridge0: port 2(bridge_slave_1) entered disabled state [ 801.949019][T24046] x9: left allmulticast mode [ 801.953950][T24046] x9: left promiscuous mode [ 801.962267][T24046] bridge0: port 1(1x9) entered disabled state [ 802.017042][ T5835] Bluetooth: hci8: command tx timeout [ 802.100732][ T1565] netlink: 8 bytes leftover after parsing attributes in process `syz.1.7804'. [ 802.487722][T24046] erspan0 (unregistering): left promiscuous mode [ 802.524735][T24046] bond13 (unregistering): (slave erspan3): Releasing active interface [ 802.544903][T24046] erspan3 (unregistering): left promiscuous mode [ 802.601804][T24046] gretap0 (unregistering): left promiscuous mode [ 802.668873][T24046] bond1 (unregistering): (slave gretap2): Releasing backup interface [ 802.753053][T24046] bond10 (unregistering): (slave gretap3): Releasing active interface [ 802.897190][ T5155] block nbd1: Possible stuck request ffff8880260ea800: control (read@0,1024B). Runtime 30 seconds [ 802.910096][ T5155] block nbd1: Possible stuck request ffff8880260eaa00: control (read@1024,1024B). Runtime 30 seconds [ 802.921309][ T5155] block nbd1: Possible stuck request ffff8880260eac00: control (read@2048,1024B). Runtime 30 seconds [ 802.932336][ T5155] block nbd1: Possible stuck request ffff8880260eae00: control (read@3072,1024B). Runtime 30 seconds [ 803.250468][T24046] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 803.261289][T24046] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 803.271598][T24046] bond0 (unregistering): Released all slaves [ 803.283884][T24046] bond1 (unregistering): (slave bond2): Releasing backup interface [ 803.294729][T24046] bond1 (unregistering): Released all slaves [ 803.307729][T24046] bond2 (unregistering): Released all slaves [ 803.320489][T24046] bond3 (unregistering): Released all slaves [ 803.337735][T24046] bond4 (unregistering): Released all slaves [ 803.353590][T24046] bond5 (unregistering): Released all slaves [ 803.367745][T24046] bond6 (unregistering): Released all slaves [ 803.383587][T24046] bond7 (unregistering): Released all slaves [ 803.398357][T24046] bond8 (unregistering): Released all slaves [ 803.410885][T24046] bond9 (unregistering): Released all slaves [ 803.431321][T24046] bond10 (unregistering): Released all slaves [ 803.446508][T24046] bond11 (unregistering): Released all slaves [ 803.460179][T24046] bond12 (unregistering): Released all slaves [ 803.472616][T24046] bond13 (unregistering): Released all slaves [ 803.489799][T24046] bond14 (unregistering): Released all slaves [ 803.510138][T24046] bond15 (unregistering): Released all slaves [ 803.522871][T24046] bond16 (unregistering): Released all slaves [ 803.637653][ T1439] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 803.673202][ T1439] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 803.694674][T24046] tipc: Disabling bearer [ 803.726408][T24046] tipc: Left network mode [ 803.782950][ T1439] team0: Port device team_slave_0 added [ 803.792657][ T1439] team0: Port device team_slave_1 added [ 803.842604][ T1439] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 803.849651][ T1439] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 803.876637][ T1439] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 803.926766][ T1439] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 803.933872][ T1439] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 803.965486][ T1439] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 804.097434][ T5835] Bluetooth: hci8: command tx timeout [ 804.129509][ T1439] hsr_slave_0: entered promiscuous mode [ 804.148420][ T1439] hsr_slave_1: entered promiscuous mode [ 804.155015][ T1439] debugfs: 'hsr0' already exists in 'hsr' [ 804.161614][ T1439] Cannot create hsr debugfs directory [ 805.023794][T24046] hsr_slave_0: left promiscuous mode [ 805.031362][T24046] hsr_slave_1: left promiscuous mode [ 805.050785][T24046] vlan0: left allmulticast mode [ 805.055667][T24046] veth0_vlan: left allmulticast mode [ 805.061556][T24046] vlan0: left promiscuous mode [ 805.067258][T24046] veth1_vlan: left promiscuous mode [ 805.072513][T24046] veth0_vlan: left promiscuous mode [ 805.521798][T24046] pimreg (unregistering): left allmulticast mode [ 805.866300][ C1] lec0: NETDEV WATCHDOG: CPU: 1: transmit queue 0 timed out 5580 ms [ 805.874426][ C1] lec:lec_tx_timeout: lec0 [ 805.948878][T24046] pim6reg (unregistering): left allmulticast mode [ 806.179214][ T5835] Bluetooth: hci8: command tx timeout [ 806.227342][ T1439] netdevsim netdevsim5 netdevsim0: renamed from eth0 [ 806.238399][ T1439] netdevsim netdevsim5 netdevsim1: renamed from eth1 [ 806.251081][ T1439] netdevsim netdevsim5 netdevsim2: renamed from eth2 [ 806.263556][ T1439] netdevsim netdevsim5 netdevsim3: renamed from eth3 [ 806.462967][T24046] IPVS: stop unused estimator thread 0... [ 806.472751][ T1439] 8021q: adding VLAN 0 to HW filter on device bond0 [ 806.500343][ T1439] 8021q: adding VLAN 0 to HW filter on device team0 [ 806.514161][ T13] bridge0: port 1(bridge_slave_0) entered blocking state [ 806.521357][ T13] bridge0: port 1(bridge_slave_0) entered forwarding state [ 806.543082][ T1157] bridge0: port 2(bridge_slave_1) entered blocking state [ 806.550275][ T1157] bridge0: port 2(bridge_slave_1) entered forwarding state [ 806.809119][ T1439] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 807.151571][ T1439] veth0_vlan: entered promiscuous mode [ 807.168193][ T1439] veth1_vlan: entered promiscuous mode [ 807.213235][ T1439] veth0_macvtap: entered promiscuous mode [ 807.231251][ T1439] veth1_macvtap: entered promiscuous mode [ 807.258508][ T1439] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 807.277162][ T1439] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 807.293087][ T13] netdevsim netdevsim5 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 807.319110][ T13] netdevsim netdevsim5 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 807.347713][ T13] netdevsim netdevsim5 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 807.383409][ T13] netdevsim netdevsim5 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 807.432010][T24046] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 807.440807][T24046] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 807.494809][T14450] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 807.510997][T14450] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 808.256748][ T5835] Bluetooth: hci8: command tx timeout [ 808.661304][ T1300] lec:lec_start_xmit: lec0:No lecd attached [ 813.866445][ C1] lec0: NETDEV WATCHDOG: CPU: 1: transmit queue 0 timed out 5200 ms [ 813.874451][ C1] lec:lec_tx_timeout: lec0 [ 831.297444][ T1698] xt_hashlimit: size too large, truncated to 1048576 [ 831.386001][ T1703] bond9: option ad_actor_sys_prio: mode dependency failed, not supported in mode balance-rr(0) [ 831.407854][ T1703] bond9 (unregistering): Released all slaves [ 831.534088][ T1714] netlink: 'syz.5.7815': attribute type 1 has an invalid length. [ 831.911372][ T1740] netlink: 8 bytes leftover after parsing attributes in process `syz.3.7821'. [ 831.924850][ T1738] openvswitch: netlink: IP tunnel dst address not specified [ 831.970573][ T1738] netlink: 4 bytes leftover after parsing attributes in process `syz.5.7822'. [ 832.107294][ T1747] netlink: 24 bytes leftover after parsing attributes in process `syz.1.7825'. [ 832.255356][ T1756] nla_validate_range_unsigned: 23 callbacks suppressed [ 832.255375][ T1756] netlink: 'syz.3.7828': attribute type 11 has an invalid length. [ 832.278440][ T1756] netlink: 228 bytes leftover after parsing attributes in process `syz.3.7828'. [ 832.288476][ T1755] netlink: 'syz.3.7828': attribute type 11 has an invalid length. [ 832.312783][ T1755] netlink: 228 bytes leftover after parsing attributes in process `syz.3.7828'. [ 832.389791][ T1769] netlink: 224 bytes leftover after parsing attributes in process `syz.2.7832'. [ 832.399134][ T1769] netlink: 8 bytes leftover after parsing attributes in process `syz.2.7832'. [ 832.633522][ T1784] bond9: entered promiscuous mode [ 832.638890][ T1784] bond9: entered allmulticast mode [ 832.644566][ T1784] 8021q: adding VLAN 0 to HW filter on device bond9 [ 832.689252][ T1782] Cannot find del_set index 1 as target [ 832.846366][ T1801] netlink: 'syz.8.7840': attribute type 1 has an invalid length. [ 832.952545][ T1809] bond1: (slave ip6gretap1): making interface the new active one [ 832.962828][ T1809] bond1: (slave ip6gretap1): Enslaving as an active interface with an up link [ 832.980418][ T5155] block nbd1: Possible stuck request ffff8880260ea800: control (read@0,1024B). Runtime 60 seconds [ 832.992540][ T5155] block nbd1: Possible stuck request ffff8880260eaa00: control (read@1024,1024B). Runtime 60 seconds [ 833.003761][ T5155] block nbd1: Possible stuck request ffff8880260eac00: control (read@2048,1024B). Runtime 60 seconds [ 833.014087][ T1814] netlink: 4 bytes leftover after parsing attributes in process `syz.3.7843'. [ 833.015815][ T5155] block nbd1: Possible stuck request ffff8880260eae00: control (read@3072,1024B). Runtime 60 seconds [ 833.079365][ T1816] netlink: 4 bytes leftover after parsing attributes in process `syz.3.7843'. [ 833.319000][ T1821] syzkaller0: entered promiscuous mode [ 833.336180][ T1821] syzkaller0: entered allmulticast mode [ 833.467338][ T1840] netlink: 8 bytes leftover after parsing attributes in process `syz.5.7848'. [ 835.630784][ T1870] syzkaller1: entered promiscuous mode [ 835.676434][ T1870] syzkaller1: entered allmulticast mode [ 835.720338][ T1870] PF_CAN: dropped non conform CAN FD skbuff: dev type 65534, len 1647 [ 835.888590][ T1890] dvmrp6: entered allmulticast mode [ 836.284564][ T1927] IPVS: set_ctl: invalid protocol: 135 224.0.0.1:20000 [ 836.500034][ T1941] netlink: 'syz.5.7880': attribute type 9 has an invalid length. [ 837.120069][ T1980] __nla_validate_parse: 13 callbacks suppressed [ 837.120088][ T1980] netlink: 8 bytes leftover after parsing attributes in process `syz.1.7892'. [ 837.281305][ T1996] netlink: 52 bytes leftover after parsing attributes in process `syz.5.7894'. [ 837.350875][ T1994] syzkaller0: entered promiscuous mode [ 837.356622][ T1994] syzkaller0: entered allmulticast mode [ 837.485837][ T2008] netlink: 'syz.5.7897': attribute type 1 has an invalid length. [ 839.218816][ T2009] gretap1: entered promiscuous mode [ 839.225841][ T2008] workqueue: Failed to create a rescuer kthread for wq "bond1": -EINTR [ 839.515816][ T2036] x_tables: unsorted entry at hook 2 [ 839.591330][ T2043] netlink: 'syz.1.7905': attribute type 4 has an invalid length. [ 839.600889][ T2043] netlink: 17 bytes leftover after parsing attributes in process `syz.1.7905'. [ 839.610814][ T2040] openvswitch: netlink: Flow actions attr not present in new flow. [ 839.610964][ T2041] tipc: Enabled bearer , priority 10 [ 839.632966][ T2041] netlink: 'syz.2.7904': attribute type 25 has an invalid length. [ 839.659938][ T2041] netlink: 4 bytes leftover after parsing attributes in process `syz.2.7904'. [ 839.692125][ T2041] netlink: 'syz.2.7904': attribute type 25 has an invalid length. [ 839.700410][ T2041] netlink: 4 bytes leftover after parsing attributes in process `syz.2.7904'. [ 839.905103][ T2054] netlink: 4 bytes leftover after parsing attributes in process `syz.2.7909'. [ 840.717844][ T2097] syzkaller0: entered promiscuous mode [ 840.726244][ T2097] syzkaller0: entered allmulticast mode [ 840.749370][ T2097] netlink: 48 bytes leftover after parsing attributes in process `syz.2.7922'. [ 841.011874][ T2118] netlink: 212348 bytes leftover after parsing attributes in process `syz.2.7929'. [ 841.039528][ T2118] netlink: ct family unspecified [ 841.258692][ T2137] netlink: 'syz.2.7934': attribute type 13 has an invalid length. [ 841.283310][ T2138] vlan0: entered allmulticast mode [ 841.335513][ T2138] bridge_slave_0: entered allmulticast mode [ 841.492044][ T2148] netlink: 12 bytes leftover after parsing attributes in process `syz.8.7935'. [ 841.507865][ T2148] netlink: 2 bytes leftover after parsing attributes in process `syz.8.7935'. [ 841.721364][ T2158] bond3: Unable to set peer notification delay as MII monitoring is disabled [ 841.740263][ T2158] bond3 (unregistering): Released all slaves [ 841.743232][ T2164] block nbd5: not configured, cannot reconfigure [ 841.933878][ T2167] veth1_macvtap: renamed from veth0_vlan [ 842.193948][ T2185] can: request_module (can-proto-3) failed. [ 842.549741][ T2218] __nla_validate_parse: 1 callbacks suppressed [ 842.549761][ T2218] netlink: 4 bytes leftover after parsing attributes in process `syz.3.7952'. [ 842.610224][ T2218] openvswitch: netlink: EtherType 50a is less than min 600 [ 842.766113][ T2214] netdevsim netdevsim1 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 842.828838][ T2215] netlink: 1312 bytes leftover after parsing attributes in process `syz.1.7953'. [ 842.998702][ T2214] netdevsim netdevsim1 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 843.072654][ T2254] netlink: 190972 bytes leftover after parsing attributes in process `syz.5.7958'. [ 843.090615][ T2249] syz_tun: entered allmulticast mode [ 843.107476][ T2245] syz_tun: left allmulticast mode [ 843.192100][ T2257] netlink: 8 bytes leftover after parsing attributes in process `syz.8.7959'. [ 843.215442][ T2214] netdevsim netdevsim1 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 843.360622][ T2263] netlink: 'syz.8.7961': attribute type 142 has an invalid length. [ 843.444159][ T2214] netdevsim netdevsim1 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 843.525265][ T5485] veth1_macvtap: left promiscuous mode [ 843.551367][ T5485] veth1_macvtap: entered promiscuous mode [ 843.569731][ T2277] netlink: 8 bytes leftover after parsing attributes in process `syz.3.7966'. [ 843.616468][ T2275] netlink: 16 bytes leftover after parsing attributes in process `syz.8.7965'. [ 843.873027][ T2289] netlink: 12 bytes leftover after parsing attributes in process `syz.3.7971'. [ 843.884499][ T13] netdevsim netdevsim1 eth0: set [1, 0] type 2 family 0 port 6081 - 0 [ 843.903620][ T2289] netlink: 24 bytes leftover after parsing attributes in process `syz.3.7971'. [ 843.913303][ T13] netdevsim netdevsim1 eth1: set [1, 0] type 2 family 0 port 6081 - 0 [ 843.975725][ T13] netdevsim netdevsim1 eth2: set [1, 0] type 2 family 0 port 6081 - 0 [ 844.017017][ T13] netdevsim netdevsim1 eth3: set [1, 0] type 2 family 0 port 6081 - 0 [ 844.858176][ T2350] netlink: 'syz.3.7984': attribute type 3 has an invalid length. [ 844.969040][ T2334] veth0_virt_wifi: Caught tx_queue_len zero misconfig [ 845.116652][ T2352] lo: entered promiscuous mode [ 845.123216][ T2354] openvswitch: netlink: VXLAN extension 78 out of range max 1 [ 845.143525][ T2352] tunl0: entered promiscuous mode [ 845.171996][ T2352] gre0: entered promiscuous mode [ 845.185441][ T2352] gretap0: entered promiscuous mode [ 845.241189][ T2352] erspan0: entered promiscuous mode [ 845.247417][ T2359] xt_CT: You must specify a L4 protocol and not use inversions on it [ 845.255280][ T2352] ip_vti0: entered promiscuous mode [ 845.350050][ T2358] ip6tnl0: Caught tx_queue_len zero misconfig [ 845.400336][ T2373] netlink: 4 bytes leftover after parsing attributes in process `syz.5.7992'. [ 845.485055][ T2372] ip6gre2: entered promiscuous mode [ 845.528458][ T2372] ip6gre2: entered allmulticast mode [ 845.581116][ T2380] netlink: 'syz.8.7993': attribute type 83 has an invalid length. [ 845.681019][ T2386] netlink: 44 bytes leftover after parsing attributes in process `syz.3.7995'. [ 845.722094][ T2390] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check. [ 845.839326][ T2390] netlink: ct family unspecified [ 846.170727][ T2423] netlink: 'syz.8.8004': attribute type 26 has an invalid length. [ 846.197859][ T2423] netlink: 'syz.8.8004': attribute type 26 has an invalid length. [ 846.211813][ T2430] netlink: 'syz.1.8003': attribute type 6 has an invalid length. [ 846.411993][ T2436] netlink: 'syz.8.8006': attribute type 1 has an invalid length. [ 846.471084][ T2448] netlink: 'syz.2.8009': attribute type 83 has an invalid length. [ 846.793358][ T2456] bridge1: port 1(veth5) entered blocking state [ 846.810241][ T2456] bridge1: port 1(veth5) entered disabled state [ 846.830563][ T2456] veth5: entered allmulticast mode [ 846.838941][ T2456] veth5: entered promiscuous mode [ 846.885737][ T2467] bridge1: port 2(veth0_to_bond) entered blocking state [ 846.905431][ T2467] bridge1: port 2(veth0_to_bond) entered disabled state [ 846.923211][ T2467] veth0_to_bond: entered allmulticast mode [ 846.933263][ T2467] veth0_to_bond: entered promiscuous mode [ 847.344337][ T2512] netlink: 'syz.5.8022': attribute type 1 has an invalid length. [ 847.586552][ T2526] __nla_validate_parse: 13 callbacks suppressed [ 847.586571][ T2526] netlink: 4 bytes leftover after parsing attributes in process `syz.8.8025'. [ 847.600933][ T2522] netlink: 12 bytes leftover after parsing attributes in process `syz.5.8026'. [ 847.631624][ T2522] geneve2: entered promiscuous mode [ 847.771932][ T2538] netlink: 8 bytes leftover after parsing attributes in process `syz.8.8031'. [ 847.795078][ T2543] netlink: 212368 bytes leftover after parsing attributes in process `syz.1.8030'. [ 847.806490][ T2545] netlink: 4 bytes leftover after parsing attributes in process `syz.2.8032'. [ 847.837903][ T2538] : entered promiscuous mode [ 847.879911][ T2543] netlink: 6 bytes leftover after parsing attributes in process `syz.1.8030'. [ 847.965380][ T2552] IPVS: set_ctl: invalid protocol: 41 224.0.0.1:20001 [ 848.102050][ T2552] 8021q: adding VLAN 0 to HW filter on device bond0 [ 848.125687][ T2552] bond0: (slave ip6tnl3): The slave device specified does not support setting the MAC address [ 848.145682][ T2552] bond0: (slave ip6tnl3): Error -95 calling set_mac_address [ 848.212517][ T2563] netlink: 'syz.1.8035': attribute type 1 has an invalid length. [ 848.263725][ T2563] netlink: 16179 bytes leftover after parsing attributes in process `syz.1.8035'. [ 848.324834][ T2568] netlink: 4 bytes leftover after parsing attributes in process `syz.3.8037'. [ 848.391936][ T2579] netlink: 8 bytes leftover after parsing attributes in process `syz.2.8039'. [ 848.473091][ T2579] netlink: 24 bytes leftover after parsing attributes in process `syz.2.8039'. [ 848.934707][ T2625] netlink: 'syz.2.8049': attribute type 1 has an invalid length. [ 848.984783][ T2628] bond4: (slave lo): Releasing backup interface [ 849.039156][ T2628] bond4: (slave lo): last VLAN challenged slave left bond - VLAN blocking is removed [ 849.072483][ T2628] A link change request failed with some changes committed already. Interface hsr_slave_0 may have been left with an inconsistent configuration, please check. [ 849.169533][ T2634] bond11: option arp_validate: mode dependency failed, not supported in mode balance-alb(6) [ 849.210755][ T2634] bond11 (unregistering): Released all slaves [ 849.403350][ T2664] xt_TCPMSS: Only works on TCP SYN packets [ 849.489451][ T2673] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 849.604154][ T2682] IPv6: NLM_F_CREATE should be specified when creating new route [ 849.682779][ T2695] netlink: 'syz.3.8064': attribute type 11 has an invalid length. [ 849.765161][ T2703] xt_time: invalid argument - start or stop time greater than 23:59:59 [ 850.346056][ T2742] x_tables: duplicate underflow at hook 3 [ 850.609055][ T2756] netlink: 'syz.3.8078': attribute type 3 has an invalid length. [ 850.634673][ T2758] netlink: 'syz.1.8080': attribute type 3 has an invalid length. [ 850.653967][ T2758] netdevsim netdevsim1 eth3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 850.739653][ T2758] netdevsim netdevsim1 eth2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 850.760875][ T2761] netdevsim netdevsim8 netdevsim3: entered promiscuous mode [ 850.812157][ T2758] netdevsim netdevsim1 eth1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 850.914377][ T2758] netdevsim netdevsim1 eth0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 851.021923][ T2771] netlink: 'syz.8.8084': attribute type 1 has an invalid length. [ 851.114758][T14450] netdevsim netdevsim1 eth0: set [1, 0] type 2 family 0 port 6081 - 0 [ 851.149582][T14450] netdevsim netdevsim1 eth1: set [1, 0] type 2 family 0 port 6081 - 0 [ 851.183760][T14450] netdevsim netdevsim1 eth2: set [1, 0] type 2 family 0 port 6081 - 0 [ 851.212170][T14450] netdevsim netdevsim1 eth3: set [1, 0] type 2 family 0 port 6081 - 0 [ 851.240321][T25658] IPVS: starting estimator thread 0... [ 851.254225][ T2778] netlink: 'syz.8.8086': attribute type 10 has an invalid length. [ 851.268643][ T2778] bridge0: port 2(bridge_slave_1) entered disabled state [ 851.297868][ T2778] bridge_slave_1: left allmulticast mode [ 851.316338][ T2781] netlink: 'syz.1.8087': attribute type 10 has an invalid length. [ 851.323082][ T2778] bridge_slave_1: left promiscuous mode [ 851.345407][ T2778] bridge0: port 2(bridge_slave_1) entered disabled state [ 851.372433][ T2783] netlink: 'syz.2.8088': attribute type 1 has an invalid length. [ 851.382331][ T2778] bond0: (slave bridge_slave_1): Enslaving as an active interface with an up link [ 851.391724][ T2779] IPVS: using max 38 ests per chain, 91200 per kthread [ 851.606983][ T2800] lo: Caught tx_queue_len zero misconfig [ 851.965146][ T2828] debugfs: 'Ku crK:̥B| lS-!' already exists in 'ieee80211' [ 852.125357][ T2849] syzkaller0: entered promiscuous mode [ 852.152688][ T2849] syzkaller0: entered allmulticast mode [ 852.184443][ T2848] tipc: Enabled bearer , priority 0 [ 852.226783][ T2848] tipc: Enabling of bearer rejected, already enabled [ 852.275440][ T2861] : entered promiscuous mode [ 852.316492][ T2873] ip6t_REJECT: TCP_RESET illegal for non-tcp [ 852.337145][ T2848] tipc: Resetting bearer [ 852.412857][ T2879] netlink: 'syz.1.8107': attribute type 1 has an invalid length. [ 852.520780][ T2848] tipc: Disabling bearer [ 852.612660][ T2882] bond3: (slave ip6gretap1): making interface the new active one [ 852.644143][ T2882] bond3: (slave ip6gretap1): Enslaving as an active interface with an up link [ 852.684168][ T2890] __nla_validate_parse: 13 callbacks suppressed [ 852.684185][ T2890] netlink: 84 bytes leftover after parsing attributes in process `syz.3.8109'. [ 852.725216][ T2890] netlink: 84 bytes leftover after parsing attributes in process `syz.3.8109'. [ 852.735080][ T2890] A link change request failed with some changes committed already. Interface syz_tun may have been left with an inconsistent configuration, please check. [ 852.969821][ T2909] netlink: 8 bytes leftover after parsing attributes in process `syz.1.8113'. [ 853.060897][ T2917] netlink: 36 bytes leftover after parsing attributes in process `syz.5.8116'. [ 853.186547][ T2933] netlink: 8 bytes leftover after parsing attributes in process `syz.8.8119'. [ 853.199479][ T2932] netlink: 12 bytes leftover after parsing attributes in process `syz.5.8120'. [ 853.209385][ T2933] netlink: 12 bytes leftover after parsing attributes in process `syz.8.8119'. [ 853.214628][ T2932] netlink: 'syz.5.8120': attribute type 1 has an invalid length. [ 853.261340][ T2936] netlink: 'syz.5.8121': attribute type 2 has an invalid length. [ 853.421564][ T2944] vlan2: entered allmulticast mode [ 853.427495][ T2944] hsr0: entered allmulticast mode [ 853.432583][ T2944] hsr_slave_0: entered allmulticast mode [ 853.438355][ T2944] hsr_slave_1: entered allmulticast mode [ 853.589266][ T2955] netlink: 4 bytes leftover after parsing attributes in process `syz.5.8127'. [ 853.615570][ T2955] bond1: option arp_missed_max: invalid value (0) [ 853.625209][ T2955] bond1: option arp_missed_max: allowed values 1 - 255 [ 853.635509][ T2955] bond1 (unregistering): Released all slaves [ 854.034037][ T2979] validate_nla: 2 callbacks suppressed [ 854.034057][ T2979] netlink: 'syz.8.8135': attribute type 1 has an invalid length. [ 854.070515][ T2979] netlink: 68 bytes leftover after parsing attributes in process `syz.8.8135'. [ 854.081329][ T2979] netlink: 12 bytes leftover after parsing attributes in process `syz.8.8135'. [ 854.127257][ T2985] syzkaller0: entered promiscuous mode [ 854.132771][ T2985] syzkaller0: entered allmulticast mode [ 854.390217][ T3004] xt_addrtype: ipv6 does not support BROADCAST matching [ 854.482032][ T3008] vlan4: entered allmulticast mode [ 854.487566][ T3010] openvswitch: netlink: Port -1 exceeds max allowable 65535 [ 854.500329][ T3008] bridge3: entered allmulticast mode [ 854.568395][ T3008] bridge3: port 1(veth3) entered blocking state [ 854.588414][ T3008] bridge3: port 1(veth3) entered disabled state [ 854.595651][ T3008] veth3: entered allmulticast mode [ 854.603266][ T3008] veth3: entered promiscuous mode [ 854.860214][ T3030] netlink: 'syz.3.8153': attribute type 1 has an invalid length. [ 854.895745][ T3030] netlink: 'syz.3.8153': attribute type 2 has an invalid length. [ 855.019657][ T3035] x_tables: ip_tables: osf match: only valid for protocol 6 [ 855.175995][ T3037] syzkaller0: entered promiscuous mode [ 855.191997][ T3037] syzkaller0: entered allmulticast mode [ 855.210903][ T3037] tipc: Started in network mode [ 855.228697][ T3037] tipc: Node identity aa7a11731e3a, cluster identity 4711 [ 855.247079][ T3037] tipc: Enabled bearer , priority 0 [ 855.275249][ T3037] openvswitch: netlink: Key type 31 is not supported [ 855.330376][ T3036] tipc: Resetting bearer [ 855.402491][ T3036] tipc: Disabling bearer [ 856.328610][ T3117] x_tables: ip6_tables: rpfilter match: used from hooks OUTPUT, but only valid from PREROUTING [ 856.661493][ T3131] netlink: 'syz.2.8187': attribute type 1 has an invalid length. [ 856.703211][ T3131] netlink: 'syz.2.8187': attribute type 4 has an invalid length. [ 856.929383][ T3151] netlink: 'syz.2.8192': attribute type 2 has an invalid length. [ 857.008794][ T3151] #{6c: entered promiscuous mode [ 857.035986][ T3151] netlink: 'syz.2.8192': attribute type 2 has an invalid length. [ 857.067244][ T3151] #{6c: left promiscuous mode [ 857.167391][ T3167] netlink: 'syz.8.8196': attribute type 11 has an invalid length. [ 857.922746][ T3211] syzkaller0: entered promiscuous mode [ 857.928525][ T3211] syzkaller0: entered allmulticast mode [ 857.994680][ T3226] netlink: 'syz.3.8210': attribute type 3 has an invalid length. [ 858.011249][ T3226] Timeout policy `syz0' can only be used by L3 protocol number 0 [ 858.653928][ T3242] RDS: rds_bind could not find a transport for ::c000:0:20:0, load rds_tcp or rds_rdma? [ 858.678595][ T3250] sctp: [Deprecated]: syz.1.8215 (pid 3250) Use of int in max_burst socket option deprecated. [ 858.678595][ T3250] Use struct sctp_assoc_value instead [ 858.720537][ T3253] netlink: 'syz.2.8213': attribute type 1 has an invalid length. [ 858.728686][ T3253] __nla_validate_parse: 17 callbacks suppressed [ 858.728705][ T3253] netlink: 8 bytes leftover after parsing attributes in process `syz.2.8213'. [ 858.746040][ T3253] netlink: 4 bytes leftover after parsing attributes in process `syz.2.8213'. [ 858.777927][ T3253] netlink: 'syz.2.8213': attribute type 2 has an invalid length. [ 860.263280][ T3268] validate_nla: 2 callbacks suppressed [ 860.263293][ T3268] netlink: 'syz.1.8217': attribute type 4 has an invalid length. [ 860.458639][ T3281] syzkaller0: entered promiscuous mode [ 860.470790][ T3281] syzkaller0: entered allmulticast mode [ 860.522927][ T3287] xt_cgroup: invalid path, errno=-2 [ 860.614007][ T3281] tipc: Enabled bearer , priority 0 [ 860.631434][ T3277] tipc: Resetting bearer [ 860.638192][ T3293] netlink: 24 bytes leftover after parsing attributes in process `syz.8.8226'. [ 860.668419][ T3277] tipc: Disabling bearer [ 860.725381][ T3302] netlink: 'syz.8.8226': attribute type 1 has an invalid length. [ 860.747429][ T3293] openvswitch: netlink: Key type 217 is out of range max 32 [ 860.761041][ T3304] netlink: 16 bytes leftover after parsing attributes in process `syz.5.8229'. [ 860.823986][ T3308] netlink: 7 bytes leftover after parsing attributes in process `syz.1.8231'. [ 860.985797][ T3321] netlink: 'syz.1.8234': attribute type 2 has an invalid length. [ 861.033894][ T3326] netlink: 'syz.5.8235': attribute type 1 has an invalid length. [ 861.100756][ T3326] bond1: entered promiscuous mode [ 861.112033][ T3326] bond1: entered allmulticast mode [ 861.118051][ T3326] 8021q: adding VLAN 0 to HW filter on device bond1 [ 861.138249][ T3333] macvlan3: entered promiscuous mode [ 861.143659][ T3333] macvlan3: entered allmulticast mode [ 861.155807][ T3333] 8021q: adding VLAN 0 to HW filter on device macvlan3 [ 861.188415][ T3336] syzkaller0: entered promiscuous mode [ 861.193934][ T3336] syzkaller0: entered allmulticast mode [ 861.205348][ T3336] tipc: Enabled bearer , priority 0 [ 861.215348][ T3334] tipc: Resetting bearer [ 861.302217][ T3334] tipc: Disabling bearer [ 861.513602][ T3349] netlink: 20 bytes leftover after parsing attributes in process `syz.2.8242'. [ 861.609968][ T3357] netlink: 16215 bytes leftover after parsing attributes in process `syz.5.8243'. [ 861.707073][ T3364] syzkaller0: entered promiscuous mode [ 861.713602][ T3364] syzkaller0: entered allmulticast mode [ 861.778862][ T3369] netlink: 16 bytes leftover after parsing attributes in process `syz.2.8246'. [ 861.797005][ T5190] udevd[5190]: worker [32089] /devices/virtual/block/nbd1 is taking a long time [ 863.061805][ T5155] block nbd1: Possible stuck request ffff8880260ea800: control (read@0,1024B). Runtime 90 seconds [ 863.072652][ T5155] block nbd1: Possible stuck request ffff8880260eaa00: control (read@1024,1024B). Runtime 90 seconds [ 863.085285][ T5155] block nbd1: Possible stuck request ffff8880260eac00: control (read@2048,1024B). Runtime 90 seconds [ 863.096325][ T5155] block nbd1: Possible stuck request ffff8880260eae00: control (read@3072,1024B). Runtime 90 seconds [ 863.751520][T14010] lec:lec_start_xmit: lec0:No lecd attached [ 864.902817][ T3378] nci: __nci_request: wait_for_completion_interruptible_timeout failed -512 [ 865.076723][ T3418] tipc: Enabling of bearer rejected, failed to enable media [ 865.211471][ T3431] netlink: 8 bytes leftover after parsing attributes in process `syz.5.8260'. [ 865.231602][ T3433] netlink: 40 bytes leftover after parsing attributes in process `syz.8.8259'. [ 865.263140][ T3433] netlink: 40 bytes leftover after parsing attributes in process `syz.8.8259'. [ 865.280883][ T3433] netlink: 40 bytes leftover after parsing attributes in process `syz.8.8259'. [ 865.298723][ T3423] A link change request failed with some changes committed already. Interface gretap0 may have been left with an inconsistent configuration, please check. [ 865.328670][ T3433] netlink: 40 bytes leftover after parsing attributes in process `syz.8.8259'. [ 865.344092][ T3433] netlink: 40 bytes leftover after parsing attributes in process `syz.8.8259'. [ 865.355212][ T3433] netlink: 40 bytes leftover after parsing attributes in process `syz.8.8259'. [ 865.365302][ T3433] netlink: 40 bytes leftover after parsing attributes in process `syz.8.8259'. [ 865.375411][ T3433] netlink: 40 bytes leftover after parsing attributes in process `syz.8.8259'. [ 865.387417][ T3433] netlink: 40 bytes leftover after parsing attributes in process `syz.8.8259'. [ 866.060094][ T3492] syzkaller0: entered promiscuous mode [ 866.065612][ T3492] syzkaller0: entered allmulticast mode [ 866.236016][ T3501] netlink: 'syz.5.8279': attribute type 1 has an invalid length. [ 866.268417][ T3501] netlink: 'syz.5.8279': attribute type 1 has an invalid length. [ 866.346831][ T3513] netlink: 'syz.2.8283': attribute type 1 has an invalid length. [ 866.443180][ T3513] 8021q: adding VLAN 0 to HW filter on device bond12 [ 866.962656][ T3550] vlan2: entered promiscuous mode [ 866.983231][ T3550] bridge0: entered promiscuous mode [ 867.563613][ T3589] tipc: Enabled bearer , priority 11 [ 867.704033][ T3597] netlink: 'syz.8.8312': attribute type 10 has an invalid length. [ 867.787006][ T3597] siw: device registration error -23 [ 867.818930][ T3598] openvswitch: netlink: IP tunnel dst address not specified [ 867.839617][ T3597] netlink: 'syz.8.8312': attribute type 10 has an invalid length. [ 867.867148][ T3598] netlink: 'syz.2.8313': attribute type 4 has an invalid length. [ 867.882018][ T3614] IPVS: sync thread started: state = BACKUP, mcast_ifn = vcan0, syncid = 0, id = 0 [ 867.916699][ T3610] netlink: 'syz.5.8317': attribute type 1 has an invalid length. [ 867.979381][ T3610] workqueue: Failed to create a rescuer kthread for wq "bond2": -EINTR [ 868.046603][ T3622] netlink: 'syz.2.8319': attribute type 4 has an invalid length. [ 868.088431][T25657] IPVS: starting estimator thread 0... [ 868.214573][ T3632] IPVS: using max 33 ests per chain, 79200 per kthread [ 868.753727][ T3683] syzkaller0: entered promiscuous mode [ 868.759747][ T3683] syzkaller0: entered allmulticast mode [ 868.817000][ C1] lec0: NETDEV WATCHDOG: CPU: 1: transmit queue 0 timed out 5060 ms [ 868.825034][ C1] lec:lec_tx_timeout: lec0 [ 868.981321][ T3694] netlink: 'syz.3.8344': attribute type 178 has an invalid length. [ 868.998260][ T3693] IPv6: addrconf: prefix option has invalid lifetime [ 869.313823][ T3719] netlink: 'syz.8.8352': attribute type 235 has an invalid length. [ 869.541572][ T3736] bridge0: port 1(bridge_slave_0) entered disabled state [ 869.570404][ T3742] tipc: Enabling of bearer rejected, failed to enable media [ 869.725134][ T3754] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 870.102890][ T1300] lec:lec_start_xmit: lec0:No lecd attached [ 870.113437][ T3782] tipc: Enabled bearer , priority 0 [ 870.123397][ T3782] syzkaller0: entered promiscuous mode [ 870.129957][ T3782] syzkaller0: entered allmulticast mode [ 870.187472][ T3782] tipc: Resetting bearer [ 870.234094][ T3781] tipc: Resetting bearer [ 870.283127][ T3781] tipc: Disabling bearer [ 870.321464][ T3795] __nla_validate_parse: 138 callbacks suppressed [ 870.321482][ T3795] netlink: 76 bytes leftover after parsing attributes in process `syz.1.8378'. [ 870.406038][ T3798] netlink: 100 bytes leftover after parsing attributes in process `syz.2.8379'. [ 870.429503][ T3802] netlink: 8 bytes leftover after parsing attributes in process `syz.1.8381'. [ 870.439257][ T3802] netlink: 8 bytes leftover after parsing attributes in process `syz.1.8381'. [ 870.534420][ T3809] netlink: 12 bytes leftover after parsing attributes in process `syz.2.8383'. [ 870.595185][ T5835] block nbd3: Receive control failed (result -1) [ 870.769004][ T3825] netlink: 12 bytes leftover after parsing attributes in process `syz.2.8389'. [ 870.831946][ T3828] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check. [ 870.990431][ T3837] infiniband syz1: RDMA CMA: cma_listen_on_dev, error -98 [ 871.073814][ T3845] syzkaller0: entered promiscuous mode [ 871.093967][ T3845] syzkaller0: entered allmulticast mode [ 871.141637][ T3845] sch_tbf: burst 555 is lower than device syzkaller0 mtu (1514) ! [ 871.389912][ T3868] validate_nla: 5 callbacks suppressed [ 871.389933][ T3868] netlink: 'syz.5.8402': attribute type 1 has an invalid length. [ 871.404935][ T3872] netlink: 164 bytes leftover after parsing attributes in process `syz.8.8405'. [ 871.435224][ T3875] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check. [ 871.454851][ T3876] netlink: 'syz.2.8406': attribute type 3 has an invalid length. [ 871.463853][ T3876] netlink: 'syz.2.8406': attribute type 1 has an invalid length. [ 871.472276][ T3876] netlink: 212 bytes leftover after parsing attributes in process `syz.2.8406'. [ 871.482853][ T3876] NCSI netlink: No device for ifindex 813332851 [ 871.610470][ T3883] IPVS: set_ctl: invalid protocol: 2 255.255.255.255:20003 [ 871.705215][ T3890] syzkaller0: entered promiscuous mode [ 871.716100][ T3890] syzkaller0: entered allmulticast mode [ 871.979645][ T3910] syzkaller0: entered promiscuous mode [ 871.995568][ T3910] syzkaller0: entered allmulticast mode [ 872.020858][ T3916] netlink: 12 bytes leftover after parsing attributes in process `syz.1.8417'. [ 872.058525][ T3917] veth0: entered promiscuous mode [ 872.162404][ T3908] veth0: left promiscuous mode [ 872.170951][ T3930] netlink: 8 bytes leftover after parsing attributes in process `syz.5.8419'. [ 872.234002][ T3920] bond3: option all_slaves_active: invalid value (222) [ 872.262049][ T3920] bond3 (unregistering): Released all slaves [ 872.290396][ T3933] IPVS: set_ctl: invalid protocol: 44 172.30.0.4:20265 [ 872.321259][ T3936] x9: renamed from bridge_slave_0 (while UP) [ 872.480777][ T3945] delete_channel: no stack [ 872.590777][ T3951] netlink: 'syz.8.8426': attribute type 13 has an invalid length. [ 872.809489][ T3966] IPv6: sit1: Disabled Multicast RS [ 873.195699][ T3980] netdevsim netdevsim8 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 873.260656][ T3989] 8021q: adding VLAN 0 to HW filter on device bond2 [ 873.334261][ T3980] netdevsim netdevsim8 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 873.564144][ T3980] netdevsim netdevsim8 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 873.700630][ T3980] netdevsim netdevsim8 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 873.721343][ T4027] openvswitch: netlink: EtherType 50a is less than min 600 [ 873.915422][ T4039] netlink: 'syz.1.8447': attribute type 3 has an invalid length. [ 873.975521][T24043] netdevsim netdevsim8 eth0: set [1, 0] type 2 family 0 port 6081 - 0 [ 873.997780][T24043] netdevsim netdevsim8 eth1: set [1, 0] type 2 family 0 port 6081 - 0 [ 874.024156][T24043] netdevsim netdevsim8 eth2: set [1, 0] type 2 family 0 port 6081 - 0 [ 874.081760][ T13] netdevsim netdevsim8 eth3: set [1, 0] type 2 family 0 port 6081 - 0 [ 874.376994][ T4066] netlink: 'syz.5.8454': attribute type 2 has an invalid length. [ 874.674832][ T4082] netlink: 'syz.8.8461': attribute type 13 has an invalid length. [ 874.691089][ T4082] gretap0: refused to change device tx_queue_len [ 874.698323][ T4082] A link change request failed with some changes committed already. Interface gretap0 may have been left with an inconsistent configuration, please check. [ 874.844035][ T4091] tipc: Enabling of bearer rejected, failed to enable media [ 875.028344][ T4099] team1 (uninitialized): Failed to send options change via netlink (err -105) [ 875.086625][ T4099] team1: entered promiscuous mode [ 875.091969][ T4099] team1: entered allmulticast mode [ 875.343987][ T5882] hid-generic 0005:0C49:1012.0002: unknown main item tag 0x1 [ 875.353645][ T5882] hid-generic 0005:0C49:1012.0002: ignoring exceeding usage max [ 875.362976][ T5882] hid-generic 0005:0C49:1012.0002: unknown main item tag 0x4 [ 875.376188][ T5882] hid-generic 0005:0C49:1012.0002: unknown main item tag 0x5 [ 875.383875][ T5882] hid-generic 0005:0C49:1012.0002: reserved main item tag 0xd [ 875.396689][ T4126] netdevsim netdevsim5 netdevsim0: entered promiscuous mode [ 875.416304][ T5882] hid-generic 0005:0C49:1012.0002: item fetching failed at offset 31/106 [ 875.425490][ T5882] hid-generic 0005:0C49:1012.0002: probe with driver hid-generic failed with error -22 [ 875.608817][ T4142] netlink: 'syz.1.8477': attribute type 33 has an invalid length. [ 875.641499][ T4142] __nla_validate_parse: 14 callbacks suppressed [ 875.641517][ T4142] netlink: 152 bytes leftover after parsing attributes in process `syz.1.8477'. [ 875.856670][ C1] lec0: NETDEV WATCHDOG: CPU: 1: transmit queue 0 timed out 5750 ms [ 875.864763][ C1] lec:lec_tx_timeout: lec0 [ 875.924188][ T4170] openvswitch: netlink: Geneve option length err (len 256, max 255). [ 876.002508][ T4172] IPVS: set_ctl: invalid protocol: 47 100.1.1.1:20001 [ 876.010510][ T4172] netlink: 76 bytes leftover after parsing attributes in process `syz.1.8485'. [ 876.207555][ T4188] veth0_to_bridge: Caught tx_queue_len zero misconfig [ 876.265323][ T4195] netlink: 64 bytes leftover after parsing attributes in process `syz.2.8495'. [ 876.676031][ T4220] netlink: 'syz.2.8504': attribute type 24 has an invalid length. [ 876.836899][ T4229] netlink: 8 bytes leftover after parsing attributes in process `syz.1.8505'. [ 876.919024][ T4232] netlink: 56 bytes leftover after parsing attributes in process `syz.2.8507'. [ 876.969550][ T4232] netlink: 56 bytes leftover after parsing attributes in process `syz.2.8507'. [ 876.980987][ T4233] netlink: 76 bytes leftover after parsing attributes in process `syz.5.8506'. [ 877.096684][ T4241] netlink: 8 bytes leftover after parsing attributes in process `syz.3.8509'. [ 877.137875][ T4241] xt_SECMARK: only valid in 'mangle' or 'security' table, not 'raw' [ 877.273767][ T4248] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 877.526705][ T4262] netlink: 28 bytes leftover after parsing attributes in process `syz.5.8515'. [ 877.535712][ T4262] netlink: 'syz.5.8515': attribute type 7 has an invalid length. [ 877.577545][ T4262] netlink: 'syz.5.8515': attribute type 8 has an invalid length. [ 877.585495][ T4262] netlink: 4 bytes leftover after parsing attributes in process `syz.5.8515'. [ 877.669707][ T4265] can: request_module (can-proto-4) failed. [ 877.685089][ T4275] sctp: [Deprecated]: syz.8.8519 (pid 4275) Use of struct sctp_assoc_value in delayed_ack socket option. [ 877.685089][ T4275] Use struct sctp_sack_info instead [ 877.690236][ T4267] netdevsim netdevsim3 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 877.703652][ T4275] openvswitch: netlink: Message has 6 unknown bytes. [ 877.861669][ T4281] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 878.228370][ T4289] xt_l2tp: invalid flags combination: 8 [ 878.253876][ T4267] netdevsim netdevsim3 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 878.390808][ T4267] netdevsim netdevsim3 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 878.490078][ T4267] netdevsim netdevsim3 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 878.725059][ T13] netdevsim netdevsim3 eth0: set [1, 0] type 2 family 0 port 6081 - 0 [ 878.781964][T14470] netdevsim netdevsim3 eth1: set [1, 0] type 2 family 0 port 6081 - 0 [ 878.878103][ T4319] geneve3: entered promiscuous mode [ 878.938421][T14470] netdevsim netdevsim2 : set [1, 1] type 2 family 0 port 39053 - 0 [ 878.947851][T14470] netdevsim netdevsim2 netdevsim1: set [1, 1] type 2 family 0 port 39053 - 0 [ 878.963957][ T4328] sctp: [Deprecated]: syz.1.8531 (pid 4328) Use of int in max_burst socket option deprecated. [ 878.963957][ T4328] Use struct sctp_assoc_value instead [ 879.020638][T14470] netdevsim netdevsim2 netdevsim2: set [1, 1] type 2 family 0 port 39053 - 0 [ 879.030984][ T4330] netlink: 'syz.8.8535': attribute type 1 has an invalid length. [ 879.057032][T14470] netdevsim netdevsim2 netdevsim3: set [1, 1] type 2 family 0 port 39053 - 0 [ 879.072828][T14470] netdevsim netdevsim3 eth2: set [1, 0] type 2 family 0 port 6081 - 0 [ 879.140213][ T4336] bond3 (unregistering): Released all slaves [ 879.220442][T14470] netdevsim netdevsim3 eth3: set [1, 0] type 2 family 0 port 6081 - 0 [ 879.300987][ T4340] bond3: (slave gretap1): making interface the new active one [ 879.330339][ T4340] bond3: (slave gretap1): Enslaving as an active interface with an up link [ 879.380439][ T4330] 8021q: adding VLAN 0 to HW filter on device bond3 [ 879.723906][ T4384] openvswitch: netlink: Missing key (keys=40, expected=80) [ 879.841956][ T7293] IPVS: starting estimator thread 0... [ 879.938087][ T4398] IPVS: using max 36 ests per chain, 86400 per kthread [ 881.038748][ T4463] __nla_validate_parse: 30 callbacks suppressed [ 881.038766][ T4463] netlink: 28 bytes leftover after parsing attributes in process `syz.8.8574'. [ 881.331443][ T4482] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 881.433498][ T4492] netlink: 'syz.5.8583': attribute type 29 has an invalid length. [ 881.446895][ T4492] netlink: 'syz.5.8583': attribute type 29 has an invalid length. [ 881.473702][ T4491] geneve4: entered promiscuous mode [ 881.506441][ T13] netdevsim netdevsim3 eth0: set [1, 1] type 2 family 0 port 38105 - 0 [ 881.513931][ T4494] netlink: 24 bytes leftover after parsing attributes in process `syz.8.8586'. [ 881.526282][ T13] netdevsim netdevsim3 eth1: set [1, 1] type 2 family 0 port 38105 - 0 [ 881.534593][ T13] netdevsim netdevsim3 eth2: set [1, 1] type 2 family 0 port 38105 - 0 [ 881.566620][ T13] netdevsim netdevsim3 eth3: set [1, 1] type 2 family 0 port 38105 - 0 [ 881.604844][ T4498] lo: entered promiscuous mode [ 881.610919][ T4498] tunl0: entered promiscuous mode [ 881.624960][ T4498] gre0: entered promiscuous mode [ 881.653197][ T4498] erspan0: entered promiscuous mode [ 881.659556][ T4498] ip_vti0: entered promiscuous mode [ 881.726922][ T4502] netlink: 72 bytes leftover after parsing attributes in process `syz.8.8589'. [ 881.902282][ T4516] sit0: Caught tx_queue_len zero misconfig [ 881.982316][ T4520] netlink: 8 bytes leftover after parsing attributes in process `syz.1.8593'. [ 882.003246][ T4520] netlink: 24 bytes leftover after parsing attributes in process `syz.1.8593'. [ 882.005132][ T4513] tipc: Enabling of bearer rejected, failed to enable media [ 882.022487][ T4520] netlink: 8 bytes leftover after parsing attributes in process `syz.1.8593'. [ 882.050000][ T4520] netlink: 24 bytes leftover after parsing attributes in process `syz.1.8593'. [ 882.413389][ T4544] syzkaller0: entered promiscuous mode [ 882.419502][ T4544] syzkaller0: entered allmulticast mode [ 882.600550][ T4552] netlink: 24 bytes leftover after parsing attributes in process `syz.3.8602'. [ 882.922318][ T4579] netlink: 'syz.8.8609': attribute type 2 has an invalid length. [ 882.952048][ T4579] netlink: 'syz.8.8609': attribute type 2 has an invalid length. [ 883.165479][ T4591] netlink: 8 bytes leftover after parsing attributes in process `syz.1.8613'. [ 883.206351][ T4593] syz_tun: entered allmulticast mode [ 883.251385][ T4593] syz_tun: left allmulticast mode [ 883.642884][ T4621] netlink: 'syz.8.8620': attribute type 2 has an invalid length. [ 883.653819][ T4621] netlink: 44 bytes leftover after parsing attributes in process `syz.8.8620'. [ 883.816594][ T4636] tipc: Enabled bearer , priority 0 [ 883.839373][ T4636] +: renamed from syzkaller0 [ 883.879949][ T4636] tipc: Disabling bearer [ 883.961942][ T4649] netlink: 'syz.5.8626': attribute type 3 has an invalid length. [ 884.118624][ T4661] tipc: Enabled bearer , priority 10 [ 884.143506][ T4657] netem: change failed [ 884.158693][ T4664] netlink: 'syz.8.8633': attribute type 21 has an invalid length. [ 884.181716][ T31] INFO: task syz.6.7117:31496 blocked for more than 143 seconds. [ 884.203474][ T4664] tipc: Enabling of bearer rejected, failed to enable media [ 884.214153][ T31] Not tainted syzkaller #0 [ 884.224232][ T31] "echo 0 > /proc/sys/kernel/hung_task_timeout_secs" disables this message. [ 884.252314][ T31] task:syz.6.7117 state:D stack:27040 pid:31496 tgid:31495 ppid:28472 task_flags:0x400140 flags:0x00080002 [ 884.273877][ T31] Call Trace: [ 884.279398][ T31] [ 884.282433][ T31] __schedule+0x1568/0x5290 [ 884.287492][ T31] ? __pfx___schedule+0x10/0x10 [ 884.292549][ T31] ? schedule+0x90/0x360 [ 884.297672][ T31] schedule+0x164/0x360 [ 884.301990][ T31] schedule_preempt_disabled+0x13/0x30 [ 884.308088][ T31] __mutex_lock+0x7fe/0x1300 [ 884.312822][ T31] ? __mutex_lock+0x5ac/0x1300 [ 884.318078][ T31] ? nfsd_nl_threads_get_doit+0x1ba/0x700 [ 884.324168][ T31] ? __pfx___mutex_lock+0x10/0x10 [ 884.329938][ T31] ? __nlmsg_put+0xef/0x1b0 [ 884.334602][ T31] ? genlmsg_put+0x137/0x2e0 [ 884.340509][ T31] nfsd_nl_threads_get_doit+0x1ba/0x700 [ 884.347180][ T31] ? __pfx_nfsd_nl_threads_get_doit+0x10/0x10 [ 884.354486][ T31] ? dev_hard_start_xmit+0x78b/0x7f0 [ 884.362053][ T31] genl_family_rcv_msg_doit+0x22a/0x330 [ 884.368241][ T31] ? __asan_memcpy+0x40/0x70 [ 884.372982][ T31] ? __pfx_genl_family_rcv_msg_doit+0x10/0x10 [ 884.381785][ T31] ? __dev_queue_xmit+0x274/0x3850 [ 884.387459][ T31] genl_rcv_msg+0x61c/0x7a0 [ 884.392248][ T31] ? __pfx_genl_rcv_msg+0x10/0x10 [ 884.397949][ T31] ? __pfx_nfsd_nl_threads_get_doit+0x10/0x10 [ 884.404270][ T31] ? __pfx_ref_tracker_free+0x10/0x10 [ 884.410311][ T31] netlink_rcv_skb+0x232/0x4b0 [ 884.415282][ T31] ? __pfx_genl_rcv_msg+0x10/0x10 [ 884.420903][ T31] ? __pfx_netlink_rcv_skb+0x10/0x10 [ 884.426857][ T31] ? genl_rcv+0x19/0x40 [ 884.431160][ T31] ? down_read+0x272/0x2e0 [ 884.435690][ T31] ? genl_rcv+0xd/0x40 [ 884.440437][ T31] genl_rcv+0x28/0x40 [ 884.444545][ T31] netlink_unicast+0x80f/0x9b0 [ 884.450662][ T31] ? __pfx_netlink_unicast+0x10/0x10 [ 884.456080][ T31] ? netlink_sendmsg+0x650/0xb40 [ 884.462103][ T31] ? skb_put+0x11b/0x210 [ 884.468533][ T31] netlink_sendmsg+0x813/0xb40 [ 884.473516][ T31] ? __pfx_netlink_sendmsg+0x10/0x10 [ 884.479743][ T31] ? aa_sock_msg_perm+0xf1/0x1b0 [ 884.487942][ T31] ? bpf_lsm_socket_sendmsg+0x9/0x20 [ 884.493418][ T31] ? __pfx_netlink_sendmsg+0x10/0x10 [ 884.500023][ T31] ____sys_sendmsg+0xa68/0xad0 [ 884.504934][ T31] ? __might_fault+0xaf/0x130 [ 884.512061][ T31] ? __pfx_____sys_sendmsg+0x10/0x10 [ 884.517877][ T31] ? import_iovec+0x73/0xa0 [ 884.522667][ T31] ___sys_sendmsg+0x2a5/0x360 [ 884.527988][ T31] ? __lock_acquire+0x6b5/0x2cf0 [ 884.533221][ T31] ? __pfx____sys_sendmsg+0x10/0x10 [ 884.539153][ T31] ? futex_wake+0x4ac/0x580 [ 884.543945][ T31] ? __fget_files+0x2a/0x420 [ 884.549615][ T31] ? __fget_files+0x3a0/0x420 [ 884.554563][ T31] __x64_sys_sendmsg+0x1bd/0x2a0 [ 884.560053][ T31] ? __pfx___x64_sys_sendmsg+0x10/0x10 [ 884.565777][ T31] ? rcu_is_watching+0x15/0xb0 [ 884.571634][ T31] do_syscall_64+0x14d/0xf80 [ 884.588449][ T31] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 884.594687][ T31] ? trace_irq_disable+0x37/0x100 [ 884.601839][ T31] ? clear_bhb_loop+0x40/0x90 [ 884.607117][ T31] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 884.613265][ T31] RIP: 0033:0x7f7abbf9bf79 [ 884.618243][ T31] RSP: 002b:00007f7abce90028 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 884.627340][ T31] RAX: ffffffffffffffda RBX: 00007f7abc215fa0 RCX: 00007f7abbf9bf79 [ 884.635443][ T31] RDX: 0000000024048000 RSI: 0000200000000000 RDI: 0000000000000008 [ 884.644084][ T31] RBP: 00007f7abc0327e0 R08: 0000000000000000 R09: 0000000000000000 [ 884.652662][ T31] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 884.661287][ T31] R13: 00007f7abc216038 R14: 00007f7abc215fa0 R15: 00007fff64d6b628 [ 884.669840][ T31] [ 884.674085][ T31] [ 884.674085][ T31] Showing all locks held in the system: [ 884.683945][ T31] 1 lock held by khungtaskd/31: [ 884.700759][ T31] #0: ffffffff8e75e0a0 (rcu_read_lock){....}-{1:3}, at: debug_show_all_locks+0x2e/0x180 [ 884.712350][ T31] 2 locks held by getty/5581: [ 884.717502][ T31] #0: ffff8880312a10a0 (&tty->ldisc_sem){++++}-{0:0}, at: tty_ldisc_ref_wait+0x25/0x70 [ 884.728003][ T31] #1: ffffc9000332b2f0 (&ldata->atomic_read_lock){+.+.}-{4:4}, at: n_tty_read+0x45c/0x13c0 [ 884.739649][ T31] 4 locks held by kworker/0:6/6008: [ 884.745000][ T31] 2 locks held by syz.0.6075/27662: [ 884.750955][ T31] #0: ffffffff8fc2c430 (cb_lock){++++}-{4:4}, at: genl_rcv+0x19/0x40 [ 884.759580][ T31] #1: ffffffff8ea7eb88 (nfsd_mutex){+.+.}-{4:4}, at: nfsd_nl_threads_set_doit+0x2cb/0x960 [ 884.770314][ T31] 2 locks held by syz.6.7117/31496: [ 884.775631][ T31] #0: ffffffff8fc2c430 (cb_lock){++++}-{4:4}, at: genl_rcv+0x19/0x40 [ 884.784569][ T31] #1: ffffffff8ea7eb88 (nfsd_mutex){+.+.}-{4:4}, at: nfsd_nl_threads_get_doit+0x1ba/0x700 [ 884.801538][ T31] 1 lock held by udevd/32089: [ 884.815405][ T31] #0: ffff888025b8b358 (&disk->open_mutex){+.+.}-{4:4}, at: bdev_open+0xe0/0xd30 [ 884.834015][ T31] 2 locks held by syz.7.7312/32248: [ 884.839565][ T31] #0: ffffffff8fc2c430 (cb_lock){++++}-{4:4}, at: genl_rcv+0x19/0x40 [ 884.848376][ T31] #1: ffffffff8ea7eb88 (nfsd_mutex){+.+.}-{4:4}, at: nfsd_nl_threads_get_doit+0x1ba/0x700 [ 884.858724][ T31] 2 locks held by syz.8.8633/4662: [ 884.863854][ T31] #0: ffffffff8fbbe808 (rtnl_mutex){+.+.}-{4:4}, at: tun_chr_close+0x3e/0x1c0 [ 884.873201][ T31] #1: ffffffff8e764338 (rcu_state.exp_mutex){+.+.}-{4:4}, at: synchronize_rcu_expedited+0x38d/0x770 [ 884.884644][ T31] 2 locks held by syz.1.8634/4666: [ 884.891855][ T31] #0: ffff888076e007c8 (&sb->s_type->i_mutex_key#14){+.+.}-{4:4}, at: sock_close+0x9b/0x240 [ 884.903741][ T31] #1: ffffffff8e764338 (rcu_state.exp_mutex){+.+.}-{4:4}, at: synchronize_rcu_expedited+0x38d/0x770 [ 884.918446][ T31] [ 884.921330][ T31] ============================================= [ 884.921330][ T31] [ 884.931353][ T31] NMI backtrace for cpu 1 [ 884.931371][ T31] CPU: 1 UID: 0 PID: 31 Comm: khungtaskd Not tainted syzkaller #0 PREEMPT(full) [ 884.931391][ T31] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/24/2026 [ 884.931402][ T31] Call Trace: [ 884.931410][ T31] [ 884.931419][ T31] dump_stack_lvl+0xe8/0x150 [ 884.931445][ T31] nmi_cpu_backtrace+0x274/0x2d0 [ 884.931463][ T31] ? __pfx_nmi_raise_cpu_backtrace+0x10/0x10 [ 884.931485][ T31] nmi_trigger_cpumask_backtrace+0x17a/0x300 [ 884.931506][ T31] sys_info+0x135/0x170 [ 884.931528][ T31] watchdog+0xf90/0xfe0 [ 884.931553][ T31] ? watchdog+0x209/0xfe0 [ 884.931581][ T31] kthread+0x388/0x470 [ 884.931603][ T31] ? __pfx_watchdog+0x10/0x10 [ 884.931620][ T31] ? __pfx_kthread+0x10/0x10 [ 884.931643][ T31] ret_from_fork+0x51e/0xb90 [ 884.931665][ T31] ? __pfx_ret_from_fork+0x10/0x10 [ 884.931682][ T31] ? __switch_to+0xc7d/0x1400 [ 884.931704][ T31] ? __pfx_kthread+0x10/0x10 [ 884.931726][ T31] ret_from_fork_asm+0x1a/0x30 [ 884.931762][ T31] [ 884.931769][ T31] Sending NMI from CPU 1 to CPUs 0: [ 885.044374][ C0] NMI backtrace for cpu 0 [ 885.044391][ C0] CPU: 0 UID: 0 PID: 0 Comm: swapper/0 Not tainted syzkaller #0 PREEMPT(full) [ 885.044409][ C0] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/24/2026 [ 885.044419][ C0] RIP: 0010:pv_native_safe_halt+0xf/0x20 [ 885.044442][ C0] Code: 44 7b 02 c3 cc cc cc cc cc cc cc 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 f3 0f 1e fa 66 90 0f 00 2d 43 38 2b 00 fb f4 7c e8 02 00 cc cc cc cc cc cc cc cc cc cc cc cc 90 90 90 90 90 [ 885.044455][ C0] RSP: 0018:ffffffff8e407dc0 EFLAGS: 00000246 [ 885.044469][ C0] RAX: 000000000038d1f5 RBX: ffffffff8199661d RCX: 0000000080000001 [ 885.044480][ C0] RDX: 0000000000000001 RSI: ffffffff8dee250a RDI: ffffffff8c276500 [ 885.044494][ C0] RBP: ffffffff8e407eb0 R08: ffff8880b863375b R09: 1ffff110170c66eb [ 885.044505][ C0] R10: dffffc0000000000 R11: ffffed10170c66ec R12: ffffffff90109070 [ 885.044516][ C0] R13: 1ffffffff1c929d8 R14: 0000000000000000 R15: 0000000000000000 [ 885.044526][ C0] FS: 0000000000000000(0000) GS:ffff8881254b0000(0000) knlGS:0000000000000000 [ 885.044539][ C0] CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033 [ 885.044550][ C0] CR2: 00007f80841e42f8 CR3: 000000007a630000 CR4: 00000000003526f0 [ 885.044563][ C0] Call Trace: [ 885.044571][ C0] [ 885.044577][ C0] default_idle+0x9/0x20 [ 885.044595][ C0] default_idle_call+0x72/0xb0 [ 885.044615][ C0] do_idle+0x1bd/0x500 [ 885.044631][ C0] ? lockdep_hardirqs_on+0x7a/0x110 [ 885.044651][ C0] ? __pfx_do_idle+0x10/0x10 [ 885.044671][ C0] cpu_startup_entry+0x43/0x60 [ 885.044687][ C0] rest_init+0x2de/0x300 [ 885.044707][ C0] start_kernel+0x380/0x3d0 [ 885.044726][ C0] x86_64_start_reservations+0x24/0x30 [ 885.044745][ C0] x86_64_start_kernel+0x143/0x1c0 [ 885.044763][ C0] common_startup_64+0x13e/0x147 [ 885.044790][ C0] [ 885.229780][ T31] Kernel panic - not syncing: hung_task: blocked tasks [ 885.236654][ T31] CPU: 1 UID: 0 PID: 31 Comm: khungtaskd Not tainted syzkaller #0 PREEMPT(full) [ 885.245779][ T31] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/24/2026 [ 885.255860][ T31] Call Trace: [ 885.259147][ T31] [ 885.262067][ T31] vpanic+0x1e0/0x670 [ 885.266047][ T31] panic+0xc5/0xd0 [ 885.269760][ T31] ? __pfx_panic+0x10/0x10 [ 885.274168][ T31] ? preempt_schedule_thunk+0x16/0x30 [ 885.279531][ T31] ? nmi_trigger_cpumask_backtrace+0x2bb/0x300 [ 885.285678][ T31] watchdog+0xfda/0xfe0 [ 885.289828][ T31] ? watchdog+0x209/0xfe0 [ 885.294156][ T31] kthread+0x388/0x470 [ 885.298215][ T31] ? __pfx_watchdog+0x10/0x10 [ 885.302881][ T31] ? __pfx_kthread+0x10/0x10 [ 885.307470][ T31] ret_from_fork+0x51e/0xb90 [ 885.312054][ T31] ? __pfx_ret_from_fork+0x10/0x10 [ 885.317152][ T31] ? __switch_to+0xc7d/0x1400 [ 885.321841][ T31] ? __pfx_kthread+0x10/0x10 [ 885.326426][ T31] ret_from_fork_asm+0x1a/0x30 [ 885.331192][ T31] [ 885.334599][ T31] Kernel Offset: disabled [ 885.338916][ T31] Rebooting in 86400 seconds..