last executing test programs: 9m6.296312991s ago: executing program 0 (id=5097): socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f00000002c0)={'erspan0\x00'}) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000400)={0x0}}, 0x0) socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_init_net_socket$nl_rdma(0x10, 0x3, 0x10) ioctl$sock_SIOCETHTOOL(r1, 0x8946, 0x0) r2 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r2, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000440)=ANY=[@ANYBLOB="3000000040000701feffffff00000000017c0000040042801400018008000200", @ANYRES32=0x0, @ANYBLOB="0c001300", @ANYRES32=0x0], 0x30}, 0x1, 0x0, 0x0, 0x48815}, 0xc000) r3 = socket$tipc(0x1e, 0x5, 0x0) bind$tipc(r3, &(0x7f0000000000)=@nameseq={0x1e, 0x1, 0x0, {0x41}}, 0x10) accept4(r3, 0x0, 0x0, 0x0) 9m6.150183825s ago: executing program 0 (id=5101): r0 = socket$kcm(0x10, 0x2, 0x0) sendmsg$kcm(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000040)=[{&(0x7f0000000300)="d8000000180081054e81f782db4cb904021d080406037c09e8fe55a10a0015400200142603600e122f00160006000400a8000600200003400700027c035c0461c1d67f6f94007134cf6efb8000a007a290457f0189b316277ce06bbace8017cbec4c2ee5a7cef4090000001f", 0x6c}], 0x1, 0x0, 0x0, 0x4a0f0000}, 0x0) mmap(&(0x7f0000001000/0x2000)=nil, 0x2000, 0x0, 0x32, 0xffffffffffffffff, 0x8528c000) r1 = bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000340)=ANY=[@ANYBLOB="0200000004000000080000000100000080"], 0x48) bpf$BPF_PROG_WITH_BTFID_LOAD(0x5, &(0x7f0000000400)=@bpf_lsm={0x6, 0x6, &(0x7f0000000240)=ANY=[@ANYBLOB="1800000000000010000000000000000018200000", @ANYRES32=r1, @ANYBLOB="0000000000000000c30000000000000095"], &(0x7f0000000180)='syzkaller\x00', 0x4, 0x0, 0x0, 0x0, 0x1, '\x00', 0x0, 0x1b, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x7f}, 0x94) r2 = socket$kcm(0x10, 0x2, 0x0) r3 = socket$inet6_sctp(0xa, 0x801, 0x84) r4 = socket$l2tp6(0xa, 0x2, 0x73) r5 = socket$tipc(0x1e, 0x5, 0x0) listen(r5, 0x0) r6 = socket$inet6_sctp(0xa, 0x1, 0x84) setsockopt$inet6_int(r6, 0x29, 0x38, 0x0, 0x0) accept4$tipc(r5, 0x0, 0x0, 0x0) setsockopt$IP6T_SO_SET_REPLACE(r4, 0x29, 0x40, &(0x7f0000000000)=@raw={'raw\x00', 0x8, 0x3, 0x478, 0xf0, 0xffffffff, 0xffffffff, 0xf0, 0xffffffff, 0x3a8, 0xffffffff, 0xffffffff, 0x3a8, 0xffffffff, 0x3, 0x0, {[{{@uncond, 0x0, 0xd0, 0xf0, 0x60030000, {0x0, 0xff000000}, [@common=@inet=@socket3={{0x28}, 0xb}]}, @unspec=@TRACE={0x20}}, {{@ipv6={@mcast1, @private0, [0xffffff00, 0xff000000, 0x0, 0xffffff00], [0x0, 0xffffff00, 0xff000000, 0xff000000], 'veth1_to_batadv\x00', 'bridge0\x00', {}, {}, 0x0, 0x0, 0x5, 0x5}, 0x0, 0x298, 0x2b8, 0x0, {}, [@common=@inet=@recent0={{0xf8}, {0x0, 0x3, 0x1, 0x0, 'syz0\x00'}}, @common=@inet=@recent0={{0xf8}, {0xd86, 0x6, 0x4, 0x0, 'syz0\x00'}}]}, @unspec=@NOTRACK={0x20}}], {{'\x00', 0x0, 0xa8, 0xd0}, {0x28}}}}, 0x4d8) sendmmsg$inet6(r3, &(0x7f0000000bc0)=[{{&(0x7f0000000000)={0xa, 0x0, 0x0, @private1}, 0x1c, &(0x7f0000000440)=[{&(0x7f0000000500)='p', 0x1}], 0x1}}, {{&(0x7f00000001c0)={0xa, 0x4e25, 0x4, @initdev={0xfe, 0x88, '\x00', 0x0, 0x0}, 0x9}, 0x1c, &(0x7f00000003c0)=[{&(0x7f0000001440)="95", 0x1}], 0x1}}], 0x2, 0x20000004) connect$inet6(r3, &(0x7f0000000540)={0xa, 0x4e24, 0xb43a6067, @mcast1, 0x486}, 0x1c) shutdown(r3, 0x1) getsockopt$inet_sctp6_SCTP_PEER_ADDR_THLDS(r3, 0x84, 0x1f, &(0x7f0000000100)={0x0, @in6={{0xa, 0x4e20, 0xffff, @empty, 0x1}}, 0x7}, &(0x7f0000000200)=0x90) r7 = socket$l2tp6(0xa, 0x2, 0x73) bind$inet6(r7, &(0x7f0000000480)={0xa, 0x4e1d, 0x1, @mcast1={0xff, 0x5}, 0x8}, 0x7a) sendmsg$kcm(r2, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000140)=[{&(0x7f0000000000)="d8000000100081044e81f782db44b904021d083911000000000000a1180015000600142603600e120900210000000401a80016000400144006000000036010fab94dcf5c0461c1d67f6f94007134cf6ee08000a0e408e8d8ef52a98516277ce06bbace8017cbec4c2ee5a7cef4090000001fb791643a5ee4ce1b14d6d930dfe1d9d322fe7c9f8775730d16a4683f5aeb4edbb57a5025ccca9e00360db70100000040fad95667e006dcdf63951f215ce3bb9ad809d5e1cace81ed0bffece0b42a9ecbee5de6ccd40dd6e4edef3d93452a92954b43370e9701", 0xd8}], 0x1}, 0x0) bpf$PROG_LOAD(0x5, &(0x7f000000e000)={0x1, 0x4, &(0x7f00000000c0)=ANY=[@ANYBLOB="b70700000100000063ffff000000000007000000000000009500000000000000cf27fa5545575af43ba390f7895438610f57005064d0ed06a5ff7b556b0fb835e4ce283ad12e3d2ada010000000000000044f4f1d93ececa672466aec5df94f77391a7ce918dc24565e159db8e05c4353aa171472fca23904a940f580ac47036092c3e38aafd6dfa1dea9dc6afde9ba685e79bd0e2714ce04e3ffb0cf04f848f041747be8a47588c969a42ac255cedc5"], &(0x7f0000003ff6)='GPL\x00', 0x8, 0xb579, &(0x7f000000cf3d)=""/195}, 0x23) bpf$ITER_CREATE(0x21, &(0x7f0000000280), 0x8) r8 = socket$inet_tcp(0x2, 0x1, 0x0) ioctl$sock_SIOCGIFINDEX(r8, 0x8933, &(0x7f0000000180)={'syz_tun\x00', 0x0}) r10 = bpf$MAP_CREATE(0x0, &(0x7f00000001c0)=ANY=[@ANYBLOB="070000fff300000000", @ANYRES32, @ANYBLOB='\x00'/20, @ANYRES32=0x0, @ANYRES32, @ANYBLOB='\x00'/28], 0x48) r11 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x6, 0x10, &(0x7f0000000280)=ANY=[@ANYBLOB="180000000000000000000000000000001811", @ANYRES32, @ANYBLOB="0000000000000000b702000002080000850000008600000018110000", @ANYRES32=r10, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bca2000000000000a6020000f8ffffffb703000008000000b7"], &(0x7f0000000180)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @xdp, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_LINK_CREATE_XDP(0x1c, &(0x7f0000000040)={r11, r9, 0x25, 0x0, @void}, 0x10) 9m5.128633065s ago: executing program 0 (id=5105): r0 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_tcp_int(r0, 0x6, 0x13, &(0x7f0000000000)=0x100000001, 0x4) connect$inet6(r0, &(0x7f0000000200)={0xa, 0x4a61, 0x2, @loopback, 0xaa}, 0x1c) setsockopt$inet6_tcp_TCP_ULP(r0, 0x6, 0x1f, &(0x7f00000000c0), 0x4) bind$bt_hci(0xffffffffffffffff, &(0x7f0000000080)={0x1f, 0xffff, 0x3}, 0x6) r1 = openat$ppp(0xffffffffffffff9c, 0x0, 0x0, 0x0) ioctl$PPPIOCNEWUNIT(r1, 0xc004743e, &(0x7f00000000c0)) setsockopt$inet6_tcp_TCP_REPAIR_QUEUE(r0, 0x6, 0x14, &(0x7f0000000080)=0x1, 0x4) setsockopt$inet6_tcp_TLS_TX(r0, 0x11a, 0x1, &(0x7f0000000140)=@gcm_128={{0x303}, "87ee8ac6c46dad33", "2607080d7f4fcf00fd4ef2dece6c7c58", '\x00', '#\x00'}, 0x28) writev(r0, &(0x7f0000000100)=[{&(0x7f0000000380)="f0fedb55d93446ef61dea4ee2ff3cf2852355efbb6bb41dabd3e1e70d2673777770e3feaddc3018e71326c8c4fb6ea7264ac8003df7b38672e265d8a38206d98bf39b40f36118fc3e59804e6f1a945deafabbf21d947adca50662159df62955b60dd315b1456a02377c0a2c42f8d3852a6f402cb0cc2bedcff400c2e89bcab82bd5683a6f3df58dd29a0464285fcdfd082361d603b97b9e22c1b503156918eb63674fe0faff6aded7a43c0ca054cc42db50baaf0e0f40a0268bf94774cd3c200"/207, 0xcf}, {&(0x7f00000004c0)="6bdc411c554b49ba286cb8e807ab7f89b64ca887659e5a4ffd36367ccc112d2f53e376e17b4c2ec031f7a33f2abb75f0a802a300000000000000000000000000000000c2b6e1eb4632367ccc", 0x4c}, {0x0}], 0x3) setsockopt$inet6_tcp_TLS_TX(r0, 0x11a, 0x2, &(0x7f0000000680)=@gcm_128={{0x303}, "000037d7009400", "c0b6c5b29ca2b838d41ac2fc7ddf972d", "e9be1eae", "bb10000000000001"}, 0x28) setsockopt$sock_int(0xffffffffffffffff, 0x1, 0x2c, 0x0, 0x0) openat$cgroup_ro(0xffffffffffffffff, &(0x7f0000000040)='cgroup.controllers\x00', 0x0, 0x0) setsockopt$inet6_tcp_int(r0, 0x6, 0xa, &(0x7f0000000480)=0x401, 0x4) ioctl$sock_SIOCGIFINDEX(0xffffffffffffffff, 0x8933, &(0x7f0000000100)={'syzkaller0\x00'}) sendto$l2tp6(0xffffffffffffffff, &(0x7f00000006c0)="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", 0x1000, 0x4, &(0x7f0000000540)={0xa, 0x0, 0xbb7e, @private1, 0x0, 0x3}, 0x20) syz_genetlink_get_family_id$nl80211(&(0x7f00000001c0), r0) 9m5.057694554s ago: executing program 2 (id=5106): r0 = socket(0x10, 0x3, 0x4) sendmsg$nl_route_sched(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f0000000200)=@newqdisc={0x70, 0x14, 0xf0b, 0x70bd26, 0x0, {0x2, 0x0, 0x0, 0x0, {0x7, 0xa}, {0x1, 0xffe0}, {0xffe0, 0xa}}, [@TCA_STAB={0x4c, 0x8, 0x0, 0x1, [{{0x1c, 0x1, {0xd4, 0x6, 0x200, 0xc, 0x1, 0x40000002, 0x7e}}, {0x4}}, {{0x1c, 0x1, {0x0, 0x18, 0x7, 0xf, 0x0, 0x4, 0x9, 0x4}}, {0xc, 0x2, [0x4, 0x7f, 0x7, 0xd61]}}]}]}, 0x70}, 0x1, 0x0, 0x0, 0x10000000}, 0x8080) r1 = socket$inet6_mptcp(0xa, 0x1, 0x106) bind$inet6(r1, &(0x7f0000000040)={0xa, 0x4e22, 0x0, @empty, 0x7}, 0x1c) listen(r1, 0xfffffffc) bind$netlink(0xffffffffffffffff, 0x0, 0x0) r2 = socket$nl_generic(0x10, 0x3, 0x10) r3 = syz_genetlink_get_family_id$mptcp(&(0x7f0000000080), 0xffffffffffffffff) r4 = socket$inet_mptcp(0x2, 0x1, 0x106) connect$inet(r4, &(0x7f0000000000)={0x2, 0x4e22, @local}, 0x10) sendto$inet(r4, &(0x7f00000000c0)="1c", 0x10002, 0x0, 0x0, 0x0) sendmsg$MPTCP_PM_CMD_DEL_ADDR(r2, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000240)={0x28, r3, 0x7, 0x0, 0x0, {}, [@MPTCP_PM_ATTR_ADDR={0x14, 0x1, 0x0, 0x1, [@MPTCP_PM_ADDR_ATTR_FAMILY={0x6, 0x1, 0x2}, @MPTCP_PM_ADDR_ATTR_ADDR4={0x8, 0x3, @local}]}]}, 0x28}}, 0x0) r5 = socket(0x10, 0x3, 0x0) setsockopt$netlink_NETLINK_TX_RING(r5, 0x10e, 0xc, &(0x7f0000000040)={0x9, 0xffffffff, 0x4e, 0x567}, 0x13) r6 = socket(0x400000000010, 0x3, 0x0) socket$nl_generic(0x10, 0x3, 0x10) syz_init_net_socket$bt_hci(0x1f, 0x3, 0x5) close(0x4) syz_open_procfs$namespace(0x0, &(0x7f0000000040)='ns/cgroup\x00') mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f07ebbeef, 0x8031, 0xffffffffffffffff, 0x215eb000) setsockopt$sock_int(0xffffffffffffffff, 0x1, 0x3c, 0x0, 0x0) r7 = socket(0x14, 0x2, 0x4) ioctl$sock_SIOCGIFINDEX(r7, 0x61d0, 0x0) ioctl$sock_inet_tcp_SIOCINQ(r7, 0x541b, &(0x7f0000000100)) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000300)={0x3, 0x4, &(0x7f0000000140)=@framed={{0x18, 0x2, 0x0, 0x0, 0x1}, [@call={0x85, 0x0, 0x0, 0xab}]}, &(0x7f0000000080)='GPL\x00'}, 0x94) ioctl$sock_SIOCGIFINDEX(r6, 0x8933, &(0x7f0000000100)={'batadv_slave_0\x00', 0x0}) sendmsg$nl_route_sched(r6, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000001300)=@newtfilter={0x38, 0x2c, 0xf3f, 0x70bd2c, 0x25dfdbfd, {0x0, 0x0, 0x0, r8, {0xb, 0x3}, {}, {0x7, 0x300}}, [@filter_kind_options=@f_fw={{0x7}, {0xc, 0x2, [@TCA_FW_CLASSID={0x8, 0x1, {0x0, 0xffff}}]}}]}, 0x38}, 0x1, 0x0, 0x0, 0x20041090}, 0x0) 9m4.951892654s ago: executing program 0 (id=5109): r0 = socket$inet6(0xa, 0x2, 0x0) bind$inet6(r0, &(0x7f0000000480)={0xa, 0x4e20, 0x0, @mcast1, 0x1}, 0x1c) r1 = socket$inet6(0xa, 0x2, 0x0) setsockopt$sock_int(r1, 0x1, 0xf, &(0x7f0000f59ffc)=0x4, 0x4) bind$inet6(r1, &(0x7f0000000480)={0xa, 0x4e20, 0x3, @mcast1, 0x2}, 0x1c) r2 = socket$inet6(0xa, 0x2, 0x0) setsockopt$sock_int(r2, 0x1, 0xf, &(0x7f0000f59ffc)=0x4, 0x4) bind$inet6(r2, &(0x7f0000000480)={0xa, 0x4e20, 0x0, @mcast1, 0x2}, 0x1c) r3 = socket$inet6(0xa, 0x2, 0x0) bind$inet6(r3, &(0x7f0000000480)={0xa, 0x4e20, 0x0, @ipv4={'\x00', '\xff\xff', @dev={0xac, 0x14, 0x14, 0x10}}}, 0x1c) r4 = socket$inet6(0xa, 0x2, 0x0) bind$inet6(r4, &(0x7f00000000c0)={0xa, 0x4e20, 0x0, @mcast1, 0x5}, 0x1c) r5 = socket$inet6(0xa, 0x2, 0x0) bind$inet6(r5, &(0x7f0000000480)={0xa, 0x4e20, 0x0, @mcast1, 0x6}, 0x1c) r6 = socket$inet6(0xa, 0x2, 0x0) bind$inet6(r6, &(0x7f0000000000)={0xa, 0xe20, 0x0, @empty}, 0x1c) r7 = socket$inet6(0xa, 0x2, 0x0) setsockopt$sock_int(r7, 0x1, 0xf, &(0x7f0000000080)=0x5, 0x4) bind$inet6(r7, &(0x7f0000000480)={0xa, 0x4e20, 0x0, @mcast1, 0x2}, 0x1c) r8 = socket$inet6(0xa, 0x2, 0x0) bind$inet6(r8, &(0x7f0000000480)={0xa, 0x4e20, 0x0, @ipv4={'\x00', '\xff\xff', @multicast1}}, 0x1c) r9 = socket$inet6(0xa, 0x2, 0x0) bind$inet6(r9, &(0x7f0000000480)={0xa, 0x4e20, 0x0, @mcast2, 0x2}, 0x1c) r10 = socket$inet6(0xa, 0x2, 0x0) setsockopt$sock_int(r10, 0x1, 0xf, &(0x7f0000f59ffc)=0x4, 0x4) bind$inet6(r10, &(0x7f0000000480)={0xa, 0x4e20, 0x0, @mcast1, 0x2}, 0x1c) r11 = socket$inet6(0xa, 0x2, 0x0) bind$inet6(r11, &(0x7f0000000480)={0xa, 0xe20, 0x0, @ipv4={'\x00', '\xff\xff', @multicast2}, 0x5}, 0x1c) 9m4.606574396s ago: executing program 0 (id=5110): r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$ethtool(&(0x7f00000001c0), r0) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000240)={'ip6gretap0\x00', 0x0}) sendmsg$ETHTOOL_MSG_LINKMODES_GET(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000940)={0x34, r1, 0x301, 0x70bd25, 0x25dfdbfe, {0x1c}, [@HEADER={0x20, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'veth1_macvtap\x00'}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r2}]}]}, 0x34}, 0x1, 0x0, 0x0, 0x805}, 0x90) r3 = bpf$ITER_CREATE(0xb, &(0x7f0000000100), 0x0) r4 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r4, &(0x7f000000c2c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000340)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a28000000000a1d010000000000000000020000000900010073797a3000000000080002400000000098000000030a01020000000000000000020000000900010073797a30000000000900030073797a32000000006b00030091abc12404d0c4c731b168d80d1f7f1dbb33f596", @ANYRESHEX=0x0], 0xfc}, 0x1, 0x0, 0x0, 0x40010}, 0x4000914) close(r3) syz_open_procfs$namespace(0xffffffffffffffff, &(0x7f0000000300)='ns/net\x00') r5 = bpf$BPF_PROG_WITH_BTFID_LOAD(0x5, &(0x7f00000003c0)=@bpf_lsm={0x1e, 0x3, &(0x7f00000000c0)=ANY=[@ANYBLOB="1800000000000000000000000000000095"], &(0x7f0000000280)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x24}, 0x80) unshare(0xa020480) r6 = gettid() bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000340)={0x6, 0x5, &(0x7f0000000140)=@framed={{0x18, 0x0, 0x0, 0x0, 0x6, 0x0, 0x0, 0x0, 0x7}, [@map_idx_val={0x18, 0xa, 0x6, 0x0, 0x7, 0x0, 0x0, 0x0, 0x5}]}, &(0x7f00000001c0)='syzkaller\x00', 0x6, 0x10, &(0x7f0000000200)=""/16, 0x41100, 0x40, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0xe0}, 0x94) r7 = syz_open_procfs$namespace(r6, &(0x7f0000000040)='ns/mnt\x00') unshare(0x6020400) close(r7) mmap(&(0x7f0000fff000/0x1000)=nil, 0x1000, 0x2000004, 0x8010, r3, 0x44617000) bpf$BPF_PROG_TEST_RUN(0x1c, &(0x7f00000005c0)={r5, 0x0, 0x24, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4}, 0xa) connect$inet6(r3, &(0x7f00000001c0)={0xa, 0x4e21, 0xffffff80, @rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x01', 0x6c}, 0x1c) syz_emit_ethernet(0x56, &(0x7f0000004180)={@local, @broadcast, @void, {@ipv6={0x86dd, @tcp={0x0, 0x6, '\x00', 0x20, 0x6, 0x0, @local, @local, {[], {{0x8000, 0x4001, 0x41424344, 0x41424344, 0x0, 0x0, 0x8, 0x2, 0x100, 0x0, 0x0, {[@sack_perm={0x4, 0x2}, @timestamp={0x8, 0xa, 0x1, 0x6}]}}}}}}}}, 0x0) r8 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_CREATE(r8, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000100)={0x70, 0x2, 0x6, 0x5, 0x0, 0x0, {}, [@IPSET_ATTR_TYPENAME={0x12, 0x3, 'bitmap:ip,mac\x00'}, @IPSET_ATTR_REVISION={0x5}, @IPSET_ATTR_SETNAME={0x9, 0x2, 'syz0\x00'}, @IPSET_ATTR_DATA={0x24, 0x7, 0x0, 0x1, [@IPSET_ATTR_IP={0x18, 0x1, 0x0, 0x1, @IPSET_ATTR_IPADDR_IPV6={0x14, 0x2, 0x1, 0x0, @loopback}}, @IPSET_ATTR_CADT_FLAGS={0x8}]}, @IPSET_ATTR_FAMILY={0x5, 0x5, 0x2}, @IPSET_ATTR_PROTOCOL={0x5, 0x1, 0x6}]}, 0x70}}, 0x0) syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) getsockopt$inet_sctp_SCTP_MAX_BURST(r3, 0x84, 0x14, &(0x7f0000000040), &(0x7f0000000180)=0x4) r9 = socket$packet(0x11, 0x3, 0x300) getsockopt$packet_int(r9, 0x107, 0xb, 0x0, &(0x7f0000000240)=0x47ee917f) 9m3.047827379s ago: executing program 0 (id=5111): socket$nl_route(0x10, 0x3, 0x0) syz_init_net_socket$bt_hci(0x1f, 0x3, 0x5) close(0x4) syz_open_procfs$namespace(0x0, &(0x7f0000000200)='ns/uts\x00') unshare(0x6a040000) r0 = socket(0x8, 0x3, 0x3) r1 = socket$pptp(0x18, 0x1, 0x2) bind$pptp(r1, &(0x7f0000000140)={0x18, 0x2, {0xffff, @loopback}}, 0x1e) connect$pptp(r1, &(0x7f0000000080)={0x18, 0x2, {0x0, @rand_addr=0x64010102}}, 0x1e) syz_emit_ethernet(0x0, 0x0, 0x0) r2 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r2, 0x0, 0x4000) r3 = openat$ppp(0xffffffffffffff9c, &(0x7f00000015c0), 0x2300, 0x0) ioctl$PPPIOCATTCHAN(r3, 0x40047438, &(0x7f0000000040)=0x1) bpf$MAP_CREATE(0x0, &(0x7f0000000300)=ANY=[@ANYRES32=0x0, @ANYRES32, @ANYBLOB], 0x48) bpf$MAP_CREATE(0x0, 0x0, 0x48) bpf$BPF_GET_BTF_INFO(0xf, &(0x7f0000000380)={0xffffffffffffffff, 0x20, &(0x7f0000000340)={&(0x7f0000000240)=""/42, 0x2a, 0x0, &(0x7f0000000400)=""/132, 0x84}}, 0x10) bpf$PROG_LOAD(0x5, 0x0, 0x0) sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000100)=ANY=[], 0xd0}}, 0x0) ioctl$PPPIOCNEWUNIT(r3, 0xc004743e, 0x0) socket$nl_rdma(0x10, 0x3, 0x14) socket$inet6(0xa, 0x2, 0x0) socket$nl_netfilter(0x10, 0x3, 0xc) connect$inet(0xffffffffffffffff, 0x0, 0x0) bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="1b0000000000000000000000000004"], 0x48) pselect6(0x40, &(0x7f00000001c0)={0x0, 0x2, 0x3, 0xfffffffffffffffd, 0x400000, 0x0, 0xffffffffffffff1b, 0x7b}, 0x0, &(0x7f0000000280)={0x3fc, 0x0, 0x0, 0x1, 0x0, 0x0, 0x7fffffff}, 0x0, 0x0) ioctl$sock_netrom_SIOCADDRT(r0, 0x6180, 0x0) sendmmsg$alg(r0, &(0x7f00000002c0)=[{0x0, 0x0, &(0x7f0000000100)=[{&(0x7f0000000040)="1bf1b44bbfa5f7b2", 0x8}], 0x1, 0x0, 0x0, 0x2006c040}], 0x1, 0x800) 9m2.856636152s ago: executing program 2 (id=5112): r0 = socket(0x400000000010, 0x3, 0x0) r1 = socket$unix(0x1, 0x5, 0x0) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r0, &(0x7f00000003c0)={0x0, 0x0, &(0x7f0000000440)={&(0x7f0000000140)=@newtfilter={0x44, 0x2c, 0x42f, 0x870bd28, 0x25dfdbff, {0x0, 0x0, 0x0, r2, {0x8, 0x7}, {}, {0xa, 0xfff3}}, [@filter_kind_options=@f_flower={{0xb}, {0x14, 0x2, [@TCA_FLOWER_KEY_ENC_OPTS={0x10, 0x54, 0x0, 0x1, [@TCA_FLOWER_KEY_ENC_OPTS_VXLAN={0xc, 0x2, 0x0, 0x1, [@TCA_FLOWER_KEY_ENC_OPT_VXLAN_GBP={0x8, 0x1, 0x3}]}]}]}}]}, 0x44}, 0x1, 0x0, 0x0, 0x22044028}, 0x0) 9m2.481637086s ago: executing program 2 (id=5114): r0 = socket(0x10, 0x2, 0x0) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000240)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f0000000940)={'pim6reg\x00', 0x0}) mmap(&(0x7f0000ffc000/0x2000)=nil, 0x2000, 0x0, 0x50, r1, 0xd0256000) r4 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) ioctl$sock_bt_hci(r4, 0x400448e6, &(0x7f0000000080)="7c773d39aeef00") ioctl$sock_bt_hci(r4, 0x400448e6, &(0x7f0000000500)="d7") ioctl$sock_bt_hci(r4, 0x400448e7, &(0x7f0000000080)) sendmsg$nl_route(r0, 0x0, 0x50) bpf$PROG_LOAD(0x5, &(0x7f00000017c0)={0x18, 0xe, &(0x7f0000000200)=ANY=[@ANYBLOB="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"], &(0x7f00000001c0)='GPL\x00', 0x0, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x8, &(0x7f0000000000)={0x2}, 0x8}, 0x94) r5 = socket(0x10, 0x803, 0x0) getsockname$packet(r5, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route(r5, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000380)=ANY=[@ANYBLOB="3c0000001000850600"/20, @ANYRES32=r6, @ANYBLOB="01000000000000001c0012000c000100626f6e64000000000c0002000800010006"], 0x3c}}, 0x0) r7 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r7, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000540)={&(0x7f0000000b80)=ANY=[@ANYBLOB="3c000000100005ff00000000000000000000004a", @ANYRES32=0x0, @ANYBLOB="0000000000000000140012800b00010062617461647600000400028008000a00", @ANYRES32=r6, @ANYBLOB="0a5bd681f5807f70cafc37317f221f64a2ed24f5fdbe31ece0e089e8e5789717adcb39d07ef9517052f9926b42a6d9cc315195ac9244400c4e7cd709fa21ab28afd7059212f906abdbf12e55c4ac2e098daf982081e8ae6b401056a9740f9c06"], 0x3c}}, 0x0) socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$ethtool(0x0, 0xffffffffffffffff) sendmsg$ETHTOOL_MSG_LINKINFO_SET(r0, &(0x7f0000000500)={0x0, 0x0, &(0x7f00000004c0)={&(0x7f0000000ec0)=ANY=[], 0x20}, 0x1, 0x0, 0x0, 0x20009005}, 0x4000880) sendmsg$nl_route_sched(r7, &(0x7f0000000280)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000900)=@delchain={0x34, 0x11, 0x1, 0x20001f, 0x0, {0x0, 0x0, 0x0, r6, {0x6, 0xd}, {}, {0x0, 0x1}}, [@TCA_RATE={0x6, 0x5, {0xe, 0xa3}}, @TCA_CHAIN={0x8, 0xb, 0x101}]}, 0x34}}, 0x0) mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000)='./cgroup.cpu/syz1\x00', 0x1ff) r8 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000), 0x200002, 0x0) r9 = openat$cgroup_procs(r8, &(0x7f0000000040)='cgroup.procs\x00', 0x2, 0x0) r10 = openat$cgroup_procs(r8, &(0x7f00000002c0)='tasks\x00', 0x2, 0x0) write$cgroup_pid(r9, &(0x7f00000000c0), 0x12) bpf$BPF_PROG_WITH_BTFID_LOAD(0x5, &(0x7f0000000e00)=@bpf_ext={0x1c, 0x4, &(0x7f0000000980)=ANY=[@ANYBLOB="180000000f00000000000000080000002a290000000000009500000000000000818494b26df507816d9b6123e62f4465eedaf2ba23fa5e37d2ee9aa9c90e391b6a29ada6b4b799f67b30617659fbe07fc6ea3966b64efb1012f3811a36820944ceed1f603fd2b32dae436897ed61c4efab72379edd165c9652aeecb06ab523d2363d036f3e7fa9eafb40a290bc3c05293c6a764749e961564ff0f0"], &(0x7f0000000180)='syzkaller\x00', 0x8, 0x40, &(0x7f00000008c0)=""/64, 0x40f00, 0x1, '\x00', r6, 0x0, 0xffffffffffffffff, 0x8, &(0x7f0000000a80)={0x3, 0x4}, 0x8, 0x10, &(0x7f0000000b40)={0x1, 0x6, 0x6, 0x10000}, 0x10, 0x155f2, 0xffffffffffffffff, 0x0, &(0x7f0000000dc0)=[0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff], 0x0, 0x10, 0x4}, 0x94) pread64(r10, &(0x7f0000001840)=""/4096, 0x1000, 0x1) ioctl$sock_ipv6_tunnel_SIOCADDTUNNEL(r0, 0x89f1, &(0x7f00000000c0)={'ip6tnl0\x00', &(0x7f0000000000)={'syztnl1\x00', r3, 0x4, 0x6, 0x4, 0x2, 0xc, @private0={0xfc, 0x0, '\x00', 0x1}, @mcast1, 0xfffffffffffffffe, 0x8, 0x0, 0x40}}) readv(r9, &(0x7f0000001800)=[{&(0x7f0000000680)=""/42, 0x2a}, {0x0}, {&(0x7f00000016c0)=""/4, 0x4}, {&(0x7f0000001700)=""/238, 0xee}], 0x4) 9m1.767808903s ago: executing program 2 (id=5117): r0 = socket$inet6_sctp(0xa, 0x1, 0x84) r1 = socket$alg(0x26, 0x5, 0x0) r2 = syz_init_net_socket$802154_raw(0x24, 0x3, 0x0) sendmsg$802154_raw(r2, &(0x7f0000001080)={&(0x7f0000000f80)={0x24, @long={0x3, 0x1}}, 0x14, &(0x7f0000001040)={&(0x7f0000000fc0)="cd441e731f055433bbd0c8e102565a4372b5310c5308fe1f7a2e2b1c8c1ad52ee87c671d4bd847448f47f60a9c10c5eed2ff6c73319541030a54e16e1b5884cfd1a6f8ce72d51bda7aed4a51f01217dc451b9a5300cfb2139bbd69f8db838b13953e8914612706bec1e422faa04b", 0x6e}, 0x1, 0x0, 0x0, 0x44040}, 0x40042) r3 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r4 = syz_genetlink_get_family_id$nl802154(&(0x7f00000002c0), 0xffffffffffffffff) sendmsg$NL802154_CMD_GET_SEC_LEVEL(r3, &(0x7f00000003c0)={0x0, 0x0, &(0x7f0000000380)={&(0x7f0000000240)={0x14, r4, 0x701, 0x70bd2b, 0x0, {0x5}}, 0x14}, 0x1, 0x0, 0x0, 0x20004074}, 0x0) r5 = socket$nl_generic(0x10, 0x3, 0x10) bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000100)={0x0, 0x0, 0x0, 0x0, 0x1, 0x7}, 0x28) syz_genetlink_get_family_id$nl80211(&(0x7f0000000240), 0xffffffffffffffff) syz_genetlink_get_family_id$devlink(&(0x7f0000000040), 0xffffffffffffffff) sendmsg$DEVLINK_CMD_PORT_GET(0xffffffffffffffff, &(0x7f00000001c0)={0x0, 0x0, 0x0}, 0x4000810) ioctl$F2FS_IOC_MOVE_RANGE(0xffffffffffffffff, 0xc01cf509, 0x0) socket$nl_xfrm(0x10, 0x3, 0x6) getsockopt$inet_IP_XFRM_POLICY(0xffffffffffffffff, 0x0, 0x11, &(0x7f0000000480)={{{@in6=@private0, @in6=@private0}}, {{@in=@multicast1}, 0x0, @in6=@ipv4={""/10, ""/2, @initdev}}}, &(0x7f0000000280)=0xfffffffffffffe85) r6 = socket$nl_netfilter(0x10, 0x3, 0xc) r7 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_CREATE(r7, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000140)={&(0x7f00000000c0)={0x48, 0x2, 0x6, 0x301, 0x0, 0x0, {}, [@IPSET_ATTR_FAMILY={0x5}, @IPSET_ATTR_SETNAME={0x9, 0x2, 'syz2\x00'}, @IPSET_ATTR_REVISION={0x5}, @IPSET_ATTR_PROTOCOL={0x5}, @IPSET_ATTR_TYPENAME={0xd, 0x3, 'list:set\x00'}]}, 0x48}}, 0x0) sendmsg$IPSET_CMD_DEL(r6, &(0x7f0000000380)={0x0, 0x0, &(0x7f0000000400)={&(0x7f0000000300)={0x44, 0xa, 0x6, 0x101, 0xd000000, 0x0, {0x1}, [@IPSET_ATTR_PROTOCOL={0x5}, @IPSET_ATTR_ADT={0x14, 0x8, 0x0, 0x1, [{0x10, 0x7, 0x0, 0x1, @IPSET_ATTR_NAME={0x9, 0x12, 'syz2\x00'}}]}, @IPSET_ATTR_SETNAME={0x9, 0x2, 'syz2\x00'}, @IPSET_ATTR_LINENO={0x8}]}, 0x44}}, 0x0) sendmsg$nl_generic(r5, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000180)={0x0, 0x34}, 0x1, 0x0, 0x0, 0x4048011}, 0xc000) sendmmsg$inet(r2, &(0x7f00000020c0)=[{{0x0, 0x0, &(0x7f0000000680)=[{&(0x7f00000004c0)='\f', 0x1}], 0x1, 0x0, 0x0, 0x2000000}}], 0xfdef, 0x0) r8 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_route(r8, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000080)=ANY=[@ANYBLOB="3c00000010001fff00000000ffdbdf2500000000", @ANYRES32=0x0, @ANYBLOB="8bbfffff420105003b00128009000100626f6e64000000000c00028005001100060000009501869a7c39fc7153125dd57a0eedec3e6dd5288d"], 0x3c}, 0x1, 0x0, 0x0, 0x20048040}, 0x0) bind$alg(r1, &(0x7f00000004c0)={0x26, 'skcipher\x00', 0x0, 0x0, 'cbc-camellia-asm\x00'}, 0x58) bpf$MAP_CREATE(0x0, &(0x7f00000000c0)=@base={0x1b, 0x0, 0x0, 0x8000}, 0x48) listen(r0, 0xfff) syz_init_net_socket$bt_rfcomm(0x1f, 0x2, 0x3) socket$inet6_tcp(0xa, 0x1, 0x0) 9m0.824327811s ago: executing program 2 (id=5119): r0 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_tcp_int(r0, 0x6, 0x13, &(0x7f0000000000)=0x100000001, 0x4) connect$inet6(r0, &(0x7f0000000200)={0xa, 0x4a61, 0x2, @loopback, 0xaa}, 0x1c) setsockopt$inet6_tcp_TCP_ULP(r0, 0x6, 0x1f, &(0x7f00000000c0), 0x4) bind$bt_hci(0xffffffffffffffff, &(0x7f0000000080)={0x1f, 0xffff, 0x3}, 0x6) r1 = openat$ppp(0xffffffffffffff9c, 0x0, 0x0, 0x0) ioctl$PPPIOCNEWUNIT(r1, 0xc004743e, &(0x7f00000000c0)) setsockopt$inet6_tcp_TCP_REPAIR_QUEUE(r0, 0x6, 0x14, &(0x7f0000000080)=0x1, 0x4) setsockopt$inet6_tcp_TLS_TX(r0, 0x11a, 0x1, &(0x7f0000000140)=@gcm_128={{0x303}, "87ee8ac6c46dad33", "2607080d7f4fcf00fd4ef2dece6c7c58", '\x00', '#\x00'}, 0x28) writev(r0, &(0x7f0000000100)=[{&(0x7f0000000380)="f0fedb55d93446ef61dea4ee2ff3cf2852355efbb6bb41dabd3e1e70d2673777770e3feaddc3018e71326c8c4fb6ea7264ac8003df7b38672e265d8a38206d98bf39b40f36118fc3e59804e6f1a945deafabbf21d947adca50662159df62955b60dd315b1456a02377c0a2c42f8d3852a6f402cb0cc2bedcff400c2e89bcab82bd5683a6f3df58dd29a0464285fcdfd082361d603b97b9e22c1b503156918eb63674fe0faff6aded7a43c0ca054cc42db50baaf0e0f40a0268bf94774cd3c200"/207, 0xcf}, {&(0x7f00000004c0)="6bdc411c554b49ba286cb8e807ab7f89b64ca887659e5a4ffd36367ccc112d2f53e376e17b4c2ec031f7a33f2abb75f0a802a300000000000000000000000000000000c2b6e1eb4632367ccc", 0x4c}, {0x0}], 0x3) setsockopt$inet6_tcp_TLS_TX(r0, 0x11a, 0x2, &(0x7f0000000680)=@gcm_128={{0x303}, "000037d7009400", "c0b6c5b29ca2b838d41ac2fc7ddf972d", "e9be1eae", "bb10000000000001"}, 0x28) setsockopt$sock_int(0xffffffffffffffff, 0x1, 0x2c, 0x0, 0x0) openat$cgroup_ro(0xffffffffffffffff, &(0x7f0000000040)='cgroup.controllers\x00', 0x0, 0x0) setsockopt$inet6_tcp_int(r0, 0x6, 0xa, &(0x7f0000000480)=0x401, 0x4) ioctl$sock_SIOCGIFINDEX(0xffffffffffffffff, 0x8933, &(0x7f0000000100)={'syzkaller0\x00'}) sendto$l2tp6(0xffffffffffffffff, &(0x7f00000006c0)="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", 0x1000, 0x4, &(0x7f0000000540)={0xa, 0x0, 0xbb7e, @private1, 0x0, 0x3}, 0x20) syz_genetlink_get_family_id$nl80211(&(0x7f00000001c0), r0) 9m0.722244588s ago: executing program 2 (id=5120): socket$nl_route(0x10, 0x3, 0x0) syz_init_net_socket$bt_hci(0x1f, 0x3, 0x5) close(0x4) syz_open_procfs$namespace(0x0, &(0x7f0000000200)='ns/uts\x00') unshare(0x6a040000) r0 = socket(0x8, 0x3, 0x3) r1 = socket$pptp(0x18, 0x1, 0x2) bind$pptp(r1, &(0x7f0000000140)={0x18, 0x2, {0xffff, @loopback}}, 0x1e) connect$pptp(r1, &(0x7f0000000080)={0x18, 0x2, {0x0, @broadcast}}, 0x1e) syz_emit_ethernet(0x0, 0x0, 0x0) sendmsg$nl_route(0xffffffffffffffff, 0x0, 0x4000) r2 = openat$ppp(0xffffffffffffff9c, &(0x7f00000015c0), 0x2300, 0x0) ioctl$PPPIOCATTCHAN(r2, 0x40047438, &(0x7f0000000040)=0x1) close(r1) bpf$MAP_CREATE(0x0, &(0x7f0000000180)=ANY=[@ANYRES32=r2, @ANYRES32], 0x48) bpf$MAP_CREATE(0x0, 0x0, 0x48) bpf$BPF_GET_BTF_INFO(0xf, 0x0, 0x0) bpf$PROG_LOAD(0x5, 0x0, 0x0) setsockopt$inet_pktinfo(r0, 0x0, 0x8, &(0x7f0000000000)={0x0, @broadcast, @remote}, 0xc) sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000100)=ANY=[], 0xd0}}, 0x0) ioctl$PPPIOCNEWUNIT(r2, 0xc004743e, 0x0) socket$nl_rdma(0x10, 0x3, 0x14) socket$nl_netfilter(0x10, 0x3, 0xc) connect$inet(0xffffffffffffffff, 0x0, 0x0) bpf$MAP_CREATE_RINGBUF(0x0, 0x0, 0x48) pselect6(0x40, &(0x7f00000001c0)={0x0, 0x9, 0x3, 0xfffffffffffffffd, 0x400002, 0x5, 0x7fffffffffffffff, 0x7b}, 0x0, &(0x7f0000000280)={0x2, 0x0, 0x0, 0x1, 0x0, 0x0, 0x5}, 0x0, 0x0) ioctl$sock_netrom_SIOCADDRT(r0, 0x6180, 0x0) sendmmsg$alg(r0, &(0x7f00000002c0)=[{0x0, 0x0, &(0x7f0000000100)=[{&(0x7f0000000040)="1bf1b44bbfa5f7b2", 0x8}], 0x1, 0x0, 0x0, 0x2006c040}], 0x1, 0x800) 8m59.718456868s ago: executing program 4 (id=5125): r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$ethtool(&(0x7f00000001c0), r0) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000240)={'ip6gretap0\x00', 0x0}) sendmsg$ETHTOOL_MSG_LINKMODES_GET(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000940)={0x34, r1, 0x301, 0x70bd25, 0x25dfdbfe, {0x1c}, [@HEADER={0x20, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'veth1_macvtap\x00'}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r2}]}]}, 0x34}, 0x1, 0x0, 0x0, 0x805}, 0x90) r3 = bpf$ITER_CREATE(0xb, &(0x7f0000000100), 0x0) r4 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r4, &(0x7f000000c2c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000340)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a28000000000a1d010000000000000000020000000900010073797a3000000000080002400000000098000000030a01020000000000000000020000000900010073797a30000000000900030073797a32000000006b00030091abc12404d0c4c731b168d80d1f7f1dbb33f596", @ANYRESHEX=0x0], 0xfc}, 0x1, 0x0, 0x0, 0x40010}, 0x4000914) close(r3) syz_open_procfs$namespace(0xffffffffffffffff, &(0x7f0000000300)='ns/net\x00') r5 = bpf$BPF_PROG_WITH_BTFID_LOAD(0x5, &(0x7f00000003c0)=@bpf_lsm={0x1e, 0x3, &(0x7f00000000c0)=ANY=[@ANYBLOB="1800000000000000000000000000000095"], &(0x7f0000000280)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x24}, 0x80) unshare(0xa020480) r6 = gettid() bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000340)={0x6, 0x5, &(0x7f0000000140)=@framed={{0x18, 0x0, 0x0, 0x0, 0x6, 0x0, 0x0, 0x0, 0x7}, [@map_idx_val={0x18, 0xa, 0x6, 0x0, 0x7, 0x0, 0x0, 0x0, 0x5}]}, &(0x7f00000001c0)='syzkaller\x00', 0x6, 0x10, &(0x7f0000000200)=""/16, 0x41100, 0x40, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0xe0}, 0x94) r7 = syz_open_procfs$namespace(r6, &(0x7f0000000040)='ns/mnt\x00') unshare(0x6020400) close(r7) mmap(&(0x7f0000fff000/0x1000)=nil, 0x1000, 0x2000004, 0x8010, r3, 0x44617000) bpf$BPF_PROG_TEST_RUN(0x1c, &(0x7f00000005c0)={r5, 0x0, 0x24, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4}, 0xa) connect$inet6(r3, &(0x7f00000001c0)={0xa, 0x4e21, 0xffffff80, @rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x01', 0x6c}, 0x1c) syz_emit_ethernet(0x56, &(0x7f0000004180)={@local, @broadcast, @void, {@ipv6={0x86dd, @tcp={0x0, 0x6, '\x00', 0x20, 0x6, 0x0, @local, @local, {[], {{0x8000, 0x4001, 0x41424344, 0x41424344, 0x0, 0x0, 0x8, 0x2, 0x100, 0x0, 0x0, {[@sack_perm={0x4, 0x2}, @timestamp={0x8, 0xa, 0x1, 0x6}]}}}}}}}}, 0x0) getsockopt$inet_sctp_SCTP_MAX_BURST(r3, 0x84, 0x14, &(0x7f0000000040), &(0x7f0000000180)=0x4) 8m58.314066541s ago: executing program 4 (id=5128): socket$netlink(0x10, 0x3, 0x0) r0 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r0, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000040)={0x14, 0x3c, 0x301, 0x70bd24, 0xfffffffc, {0xa}}, 0x14}, 0x1, 0x0, 0x0, 0x44853}, 0x0) bpf$MAP_CREATE(0x0, &(0x7f0000000180)=ANY=[@ANYBLOB, @ANYRES32=0x0], 0x48) pipe(&(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) write(r2, &(0x7f0000000000)="fc0000001d000724ab09254ec100070007ab08001b000000f0ffff002100057e0000000000000e000039000000039815fad151ba0101099cecb94b46fe0000000a00020025", 0xffffff0c) r3 = socket$inet_udp(0x2, 0x2, 0x0) splice(0xffffffffffffffff, 0x0, r2, 0x0, 0xffffffffffff8000, 0x0) close(0xffffffffffffffff) socket$key(0xf, 0x3, 0x2) close(r3) r4 = openat$tcp_mem(0xffffffffffffff9c, &(0x7f0000000000)='/proc/sys/net/ipv4/tcp_wmem\x00', 0x1, 0x0) write$cgroup_int(r4, &(0x7f0000001480)=0x2, 0x12) splice(r1, 0x0, r3, 0x0, 0x1100000000f336, 0x0) setsockopt$IPT_SO_SET_REPLACE(0xffffffffffffffff, 0x0, 0x40, &(0x7f0000000200)=@raw={'raw\x00', 0x8, 0x3, 0x2a0, 0x0, 0xe138, 0x198, 0x0, 0x198, 0x240, 0x358, 0x358, 0x240, 0x358, 0x3, 0x0, {[{{@ip={@broadcast, @loopback, 0xff, 0x0, '\x00', 'veth0_to_bond\x00', {}, {}, 0x21, 0x0, 0x20}, 0x0, 0x98, 0x100, 0x0, {}, [@inet=@rpfilter={{0x28}, {0x8}}]}, @unspec=@CT2={0x68, 'CT\x00', 0x2, {0x0, 0x0, 0xfffffffd, 0x0, 'snmp_trap\x00', 'syz0\x00', {0xfffffffffffffff8}}}}, {{@ip={@local, @initdev={0xac, 0x1e, 0x1, 0x0}, 0x0, 0xff, 'gre0\x00', 'ipvlan0\x00', {0xff}, {}, 0x6, 0x0, 0x44}, 0x0, 0xc0, 0x108, 0x0, {}, [@inet=@rpfilter={{0x28}, {0x2}}, @inet=@rpfilter={{0x28}, {0x7}}]}, @unspec=@CT0={0x48, 'CT\x00', 0x0, {0x0, 0xfffd, 0x0, 0x0, 'syz0\x00'}}}], {{'\x00', 0x0, 0x70, 0x98}, {0x28, '\x00', 0x4}}}}, 0x300) 8m57.415263089s ago: executing program 4 (id=5130): r0 = bpf$PROG_LOAD(0x5, &(0x7f00000054c0)={0x3, 0x16, &(0x7f0000000d40)=ANY=[@ANYBLOB="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"], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @sched_cls}, 0x94) bpf$PROG_LOAD(0x5, &(0x7f0000000840)={0xa, 0x16, &(0x7f0000000440)=ANY=[@ANYRESOCT=r0, @ANYRES16=r0, @ANYRESHEX, @ANYRES8=r0], &(0x7f0000000280)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x5, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x10, 0x3}, 0x94) socket$nl_route(0x10, 0x3, 0x0) socketpair(0x1, 0x800, 0x9, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) r3 = bpf$MAP_CREATE(0x0, &(0x7f0000000380)=ANY=[@ANYBLOB="12000000020000000400000002"], 0x50) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000180)={{r3}, &(0x7f0000000040), &(0x7f0000000140)=r0}, 0x20) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000600)={{r3}, &(0x7f0000000580)=0x2, &(0x7f00000005c0)=r2}, 0x20) bind$can_raw(0xffffffffffffffff, &(0x7f0000000040), 0x10) bpf$MAP_DELETE_ELEM(0x3, &(0x7f0000000080)={r3, &(0x7f0000000040)}, 0x20) r4 = socket$inet_udp(0x2, 0x2, 0x0) setsockopt$inet6_mreq(r2, 0x29, 0x15, &(0x7f0000000240)={@private1={0xfc, 0x1, '\x00', 0x1}}, 0x14) setsockopt$inet_MCAST_MSFILTER(r4, 0x0, 0x30, &(0x7f00000001c0)=ANY=[@ANYRESOCT=r0], 0x110) socketpair$unix(0x1, 0x5, 0x0, &(0x7f00000004c0)={0xffffffffffffffff}) sendmsg$unix(r5, &(0x7f0000000d80)={0x0, 0x0, &(0x7f0000000340)=[{&(0x7f0000000740)="25f991c62f6669f1ed576f18c3d6b958348e3c072a87ae6ecf387f2178fa62a8d301195a5a1bcf584e4f87c2173f9a8629622abc15f0b892a527a4a19e4663f702a964bf512ada691cbb67c931c14dda7c0799042d0ab54cbb1e6c4c2e4a38988ffe443159ffa700a62f47d1ed9a6ebb43b0a26ce6a1288e98addaf9b9aee5f72493529942185b202abb4eb07e0358b6aa811f1aeba52024e94ef4e5715547aba79cd9cbf044634396820beaa2b4c2fe37cff1c215d79033b892133b3d0d0d8c100e06795f25ae2e46ed45da189946d8e5eef8be359969a068693ac724f4f31fe18a47807557dd09", 0xe8}], 0x1, &(0x7f0000000400)=ANY=[], 0x18, 0x40014}, 0x2000c094) socket$can_bcm(0x1d, 0x2, 0x2) r6 = syz_init_net_socket$ax25(0x3, 0x5, 0xca) bind$ax25(r6, &(0x7f0000000280)={{0x3, @default, 0x1}, [@default, @remote={0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0x1}, @bcast, @netrom={0xbb, 0xbb, 0xbb, 0xbb, 0xbb, 0x0, 0x0}, @rose={0xbb, 0xbb, 0xbb, 0x1, 0x0}, @default, @bcast, @netrom={0xbb, 0xbb, 0xbb, 0xbb, 0xbb, 0x0, 0x0}]}, 0x48) getsockopt$inet_sctp_SCTP_RTOINFO(0xffffffffffffffff, 0x84, 0x0, &(0x7f0000000000)={0x0, 0xf32f, 0xfe000000}, &(0x7f00000000c0)=0x10) socket$inet6_icmp_raw(0xa, 0x3, 0x3a) ioctl$sock_SIOCGIFINDEX(0xffffffffffffffff, 0x8933, &(0x7f0000000300)={'pim6reg\x00'}) sendmsg$nl_route(r1, 0x0, 0x20004054) r7 = openat$tun(0xffffffffffffff9c, &(0x7f0000000200), 0x0, 0x0) ioctl$TUNSETIFF(r7, 0x400454ca, &(0x7f0000000400)={'tunl0\x00', 0x7101}) syz_init_net_socket$bt_sco(0x1f, 0x5, 0x2) socket(0x400000000010, 0x3, 0x0) r8 = syz_init_net_socket$bt_sco(0x1f, 0x5, 0x2) setsockopt$ax25_SO_BINDTODEVICE(0xffffffffffffffff, 0x101, 0x19, &(0x7f0000000000)=@bpq0, 0xfffffffffffffe1d) ioctl$sock_netdev_private(r8, 0x8914, &(0x7f0000000000)) 8m57.042829008s ago: executing program 4 (id=5131): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_CREATE(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000080)={0x0}}, 0x0) 8m56.87842357s ago: executing program 4 (id=5132): r0 = socket$igmp(0x2, 0x3, 0x2) recvmmsg(r0, &(0x7f0000001500)=[{{0x0, 0x0, 0x0}}, {{0x0, 0x0, 0x0}}], 0x2, 0x40000000, 0x0) setsockopt$MRT_INIT(r0, 0x0, 0xc8, &(0x7f0000000100), 0x4) sendmsg$nl_route(0xffffffffffffffff, 0x0, 0x0) syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) bpf$PROG_LOAD(0x5, 0x0, 0x0) bpf$MAP_CREATE_CONST_STR(0x0, 0x0, 0x0) openat$cgroup_ro(0xffffffffffffff9c, 0x0, 0x275a, 0x0) setsockopt$MRT_ADD_VIF(r0, 0x0, 0xca, 0x0, 0x0) r1 = socket$inet_icmp_raw(0x2, 0x3, 0x1) r2 = socket$igmp(0x2, 0x3, 0x2) setsockopt$MRT_ADD_VIF(r2, 0x0, 0xca, 0x0, 0x0) setsockopt$inet_mreq(r1, 0x0, 0x23, &(0x7f0000000000)={@multicast1=0xe0000300, @local}, 0x8) syz_emit_ethernet(0x3e, &(0x7f0000000040)={@multicast, @multicast, @void, {@ipv4={0x800, @icmp={{0x5, 0x4, 0x0, 0x0, 0x30, 0x0, 0x0, 0x80, 0x2, 0x0, @empty, @multicast1=0xe0000300}, @dest_unreach={0x3, 0x1, 0x0, 0x0, 0x3, 0xc58, {0x5, 0x4, 0x0, 0x30, 0x0, 0x5e, 0xe, 0x4e, 0x24, 0xc, @initdev={0xac, 0x1e, 0x1, 0x0}, @dev={0xac, 0x14, 0x14, 0x44}}}}}}}, 0x0) setsockopt$MRT_ADD_MFC_PROXY(r2, 0x0, 0xd2, 0x0, 0x0) 8m52.884326676s ago: executing program 4 (id=5136): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000240)=ANY=[@ANYBLOB], 0x7c}}, 0x0) r1 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFULNL_MSG_CONFIG(r1, &(0x7f00000004c0)={0x0, 0x0, &(0x7f0000000480)={&(0x7f0000000440)=ANY=[@ANYBLOB="240000000104010200000180000000000000000008000540000000000500010001"], 0x24}}, 0x0) sendmsg$NFULNL_MSG_CONFIG(r1, &(0x7f0000000640)={0x0, 0x0, &(0x7f0000000880)={&(0x7f0000000280)=ANY=[@ANYBLOB="24000000010405000000479d90a6e2840cedac3a00000000000000000000060006400003"], 0x24}}, 0x0) r2 = syz_init_net_socket$ax25(0x3, 0x2, 0xcf) r3 = openat$ppp(0xffffffffffffff9c, 0x0, 0x40082, 0x0) ioctl$PPPIOCNEWUNIT(r3, 0xc004743e, &(0x7f0000000140)) ioctl$PPPIOCSFLAGS1(r3, 0x40047459, &(0x7f00000002c0)=0x2000041) pwritev(r3, &(0x7f0000000040)=[{&(0x7f0000000180)="80fd02", 0x3}], 0x1, 0x0, 0x0) ioctl$SIOCAX25OPTRT(r2, 0x89e7, &(0x7f00000000c0)={@default, @rose={0xbb, 0xbb, 0xbb, 0x1, 0x0}, 0x2, 0x56}) r4 = socket$netlink(0x10, 0x3, 0x10) r5 = socket$netlink(0x10, 0x3, 0x10) bind$netlink(r5, &(0x7f0000514ff4)={0x10, 0x0, 0x0, 0x2ffffffff}, 0xc) setsockopt$sock_int(r5, 0x1, 0x8, &(0x7f0000000000)=0x80, 0x4) setsockopt$netlink_NETLINK_BROADCAST_ERROR(r5, 0x10e, 0x4, &(0x7f0000000180)=0x10000800, 0x4) r6 = syz_genetlink_get_family_id$devlink(&(0x7f0000000040), 0xffffffffffffffff) sendmsg$DEVLINK_CMD_RATE_NEW(r4, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000700)={&(0x7f0000000300)={0x34, r6, 0x1, 0x0, 0x25dfdbfb, {0x25}, [@handle=@nsim={{0xe}, {0xf, 0x2, {'netdevsim', 0x0}}}]}, 0x34}, 0x1, 0x0, 0x0, 0x41}, 0x0) r7 = socket$kcm(0x2, 0x200000000000001, 0x106) sendmsg$inet(r7, &(0x7f0000000000)={&(0x7f0000000140)={0x2, 0x4001, @empty}, 0x10, 0x0}, 0x30006041) close(r7) r8 = socket(0x10, 0x809, 0x8) sendto(r8, &(0x7f0000000740)="120000001200e7ef007b00000000000000a1", 0x12, 0x0, 0x0, 0x0) r9 = bpf$PROG_LOAD(0x5, &(0x7f00000008c0)={0x1f, 0x6, &(0x7f0000000000)=ANY=[@ANYBLOB="050000000000000071114200000000008510000002000000850000000500000095000d00000000009500a500000000"], &(0x7f0000000300)='syzkaller\x00', 0x5, 0xc3, &(0x7f000000cf3d)=""/195, 0x0, 0x0, '\x00', 0x0, @fallback=0x33, 0xffffffffffffffff, 0x6}, 0x94) sendmsg$nl_generic(0xffffffffffffffff, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000180)={&(0x7f00000001c0)={0x30, 0x40, 0x107, 0xfffffffa, 0x0, {0x1, 0x7c}, [@nested={0x4, 0x142}, @nested={0x14, 0x1, 0x0, 0x1, [@typed={0x6, 0x6, 0x0, 0x0, @str='\x80\n'}, @typed={0x5, 0x1c, 0x0, 0x0, @binary="96"}]}, @nested={0x4, 0x2}]}, 0x30}, 0x1, 0x0, 0x0, 0x48815}, 0xc000) bpf$BPF_GET_PROG_INFO(0xf, &(0x7f0000000200)={r9, 0x104, &(0x7f0000000340)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, ""/16, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, &(0x7f0000000040)=[0x0, 0x0], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x80000000, 0x8, 0x0, 0x0}}, 0x10) recvmmsg(r8, &(0x7f00000037c0)=[{{&(0x7f00000004c0)=@ethernet={0x0, @random}, 0x80, &(0x7f0000000380)=[{&(0x7f0000000140)=""/100, 0x64}, {&(0x7f0000000280)=""/85, 0x55}, {&(0x7f0000000fc0)=""/4096, 0x1000}, {&(0x7f0000000580)=""/106, 0x6a}, {0x0}, {&(0x7f0000000200)=""/77, 0x4d}, {&(0x7f00000007c0)=""/141, 0x8d}, {&(0x7f00000001c0)=""/17, 0x11}], 0x8, &(0x7f0000000600)=""/191, 0xbf}, 0x5}], 0x1, 0x2000, &(0x7f0000003700)={0x77359400}) setsockopt$ARPT_SO_SET_ADD_COUNTERS(r8, 0x0, 0x61, &(0x7f0000000100)={'filter\x00', 0x4}, 0x68) 8m47.883102165s ago: executing program 32 (id=5111): socket$nl_route(0x10, 0x3, 0x0) syz_init_net_socket$bt_hci(0x1f, 0x3, 0x5) close(0x4) syz_open_procfs$namespace(0x0, &(0x7f0000000200)='ns/uts\x00') unshare(0x6a040000) r0 = socket(0x8, 0x3, 0x3) r1 = socket$pptp(0x18, 0x1, 0x2) bind$pptp(r1, &(0x7f0000000140)={0x18, 0x2, {0xffff, @loopback}}, 0x1e) connect$pptp(r1, &(0x7f0000000080)={0x18, 0x2, {0x0, @rand_addr=0x64010102}}, 0x1e) syz_emit_ethernet(0x0, 0x0, 0x0) r2 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r2, 0x0, 0x4000) r3 = openat$ppp(0xffffffffffffff9c, &(0x7f00000015c0), 0x2300, 0x0) ioctl$PPPIOCATTCHAN(r3, 0x40047438, &(0x7f0000000040)=0x1) bpf$MAP_CREATE(0x0, &(0x7f0000000300)=ANY=[@ANYRES32=0x0, @ANYRES32, @ANYBLOB], 0x48) bpf$MAP_CREATE(0x0, 0x0, 0x48) bpf$BPF_GET_BTF_INFO(0xf, &(0x7f0000000380)={0xffffffffffffffff, 0x20, &(0x7f0000000340)={&(0x7f0000000240)=""/42, 0x2a, 0x0, &(0x7f0000000400)=""/132, 0x84}}, 0x10) bpf$PROG_LOAD(0x5, 0x0, 0x0) sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000100)=ANY=[], 0xd0}}, 0x0) ioctl$PPPIOCNEWUNIT(r3, 0xc004743e, 0x0) socket$nl_rdma(0x10, 0x3, 0x14) socket$inet6(0xa, 0x2, 0x0) socket$nl_netfilter(0x10, 0x3, 0xc) connect$inet(0xffffffffffffffff, 0x0, 0x0) bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="1b0000000000000000000000000004"], 0x48) pselect6(0x40, &(0x7f00000001c0)={0x0, 0x2, 0x3, 0xfffffffffffffffd, 0x400000, 0x0, 0xffffffffffffff1b, 0x7b}, 0x0, &(0x7f0000000280)={0x3fc, 0x0, 0x0, 0x1, 0x0, 0x0, 0x7fffffff}, 0x0, 0x0) ioctl$sock_netrom_SIOCADDRT(r0, 0x6180, 0x0) sendmmsg$alg(r0, &(0x7f00000002c0)=[{0x0, 0x0, &(0x7f0000000100)=[{&(0x7f0000000040)="1bf1b44bbfa5f7b2", 0x8}], 0x1, 0x0, 0x0, 0x2006c040}], 0x1, 0x800) 8m45.483466252s ago: executing program 33 (id=5120): socket$nl_route(0x10, 0x3, 0x0) syz_init_net_socket$bt_hci(0x1f, 0x3, 0x5) close(0x4) syz_open_procfs$namespace(0x0, &(0x7f0000000200)='ns/uts\x00') unshare(0x6a040000) r0 = socket(0x8, 0x3, 0x3) r1 = socket$pptp(0x18, 0x1, 0x2) bind$pptp(r1, &(0x7f0000000140)={0x18, 0x2, {0xffff, @loopback}}, 0x1e) connect$pptp(r1, &(0x7f0000000080)={0x18, 0x2, {0x0, @broadcast}}, 0x1e) syz_emit_ethernet(0x0, 0x0, 0x0) sendmsg$nl_route(0xffffffffffffffff, 0x0, 0x4000) r2 = openat$ppp(0xffffffffffffff9c, &(0x7f00000015c0), 0x2300, 0x0) ioctl$PPPIOCATTCHAN(r2, 0x40047438, &(0x7f0000000040)=0x1) close(r1) bpf$MAP_CREATE(0x0, &(0x7f0000000180)=ANY=[@ANYRES32=r2, @ANYRES32], 0x48) bpf$MAP_CREATE(0x0, 0x0, 0x48) bpf$BPF_GET_BTF_INFO(0xf, 0x0, 0x0) bpf$PROG_LOAD(0x5, 0x0, 0x0) setsockopt$inet_pktinfo(r0, 0x0, 0x8, &(0x7f0000000000)={0x0, @broadcast, @remote}, 0xc) sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000100)=ANY=[], 0xd0}}, 0x0) ioctl$PPPIOCNEWUNIT(r2, 0xc004743e, 0x0) socket$nl_rdma(0x10, 0x3, 0x14) socket$nl_netfilter(0x10, 0x3, 0xc) connect$inet(0xffffffffffffffff, 0x0, 0x0) bpf$MAP_CREATE_RINGBUF(0x0, 0x0, 0x48) pselect6(0x40, &(0x7f00000001c0)={0x0, 0x9, 0x3, 0xfffffffffffffffd, 0x400002, 0x5, 0x7fffffffffffffff, 0x7b}, 0x0, &(0x7f0000000280)={0x2, 0x0, 0x0, 0x1, 0x0, 0x0, 0x5}, 0x0, 0x0) ioctl$sock_netrom_SIOCADDRT(r0, 0x6180, 0x0) sendmmsg$alg(r0, &(0x7f00000002c0)=[{0x0, 0x0, &(0x7f0000000100)=[{&(0x7f0000000040)="1bf1b44bbfa5f7b2", 0x8}], 0x1, 0x0, 0x0, 0x2006c040}], 0x1, 0x800) 8m37.482351586s ago: executing program 34 (id=5136): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000240)=ANY=[@ANYBLOB], 0x7c}}, 0x0) r1 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFULNL_MSG_CONFIG(r1, &(0x7f00000004c0)={0x0, 0x0, &(0x7f0000000480)={&(0x7f0000000440)=ANY=[@ANYBLOB="240000000104010200000180000000000000000008000540000000000500010001"], 0x24}}, 0x0) sendmsg$NFULNL_MSG_CONFIG(r1, &(0x7f0000000640)={0x0, 0x0, &(0x7f0000000880)={&(0x7f0000000280)=ANY=[@ANYBLOB="24000000010405000000479d90a6e2840cedac3a00000000000000000000060006400003"], 0x24}}, 0x0) r2 = syz_init_net_socket$ax25(0x3, 0x2, 0xcf) r3 = openat$ppp(0xffffffffffffff9c, 0x0, 0x40082, 0x0) ioctl$PPPIOCNEWUNIT(r3, 0xc004743e, &(0x7f0000000140)) ioctl$PPPIOCSFLAGS1(r3, 0x40047459, &(0x7f00000002c0)=0x2000041) pwritev(r3, &(0x7f0000000040)=[{&(0x7f0000000180)="80fd02", 0x3}], 0x1, 0x0, 0x0) ioctl$SIOCAX25OPTRT(r2, 0x89e7, &(0x7f00000000c0)={@default, @rose={0xbb, 0xbb, 0xbb, 0x1, 0x0}, 0x2, 0x56}) r4 = socket$netlink(0x10, 0x3, 0x10) r5 = socket$netlink(0x10, 0x3, 0x10) bind$netlink(r5, &(0x7f0000514ff4)={0x10, 0x0, 0x0, 0x2ffffffff}, 0xc) setsockopt$sock_int(r5, 0x1, 0x8, &(0x7f0000000000)=0x80, 0x4) setsockopt$netlink_NETLINK_BROADCAST_ERROR(r5, 0x10e, 0x4, &(0x7f0000000180)=0x10000800, 0x4) r6 = syz_genetlink_get_family_id$devlink(&(0x7f0000000040), 0xffffffffffffffff) sendmsg$DEVLINK_CMD_RATE_NEW(r4, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000700)={&(0x7f0000000300)={0x34, r6, 0x1, 0x0, 0x25dfdbfb, {0x25}, [@handle=@nsim={{0xe}, {0xf, 0x2, {'netdevsim', 0x0}}}]}, 0x34}, 0x1, 0x0, 0x0, 0x41}, 0x0) r7 = socket$kcm(0x2, 0x200000000000001, 0x106) sendmsg$inet(r7, &(0x7f0000000000)={&(0x7f0000000140)={0x2, 0x4001, @empty}, 0x10, 0x0}, 0x30006041) close(r7) r8 = socket(0x10, 0x809, 0x8) sendto(r8, &(0x7f0000000740)="120000001200e7ef007b00000000000000a1", 0x12, 0x0, 0x0, 0x0) r9 = bpf$PROG_LOAD(0x5, &(0x7f00000008c0)={0x1f, 0x6, &(0x7f0000000000)=ANY=[@ANYBLOB="050000000000000071114200000000008510000002000000850000000500000095000d00000000009500a500000000"], &(0x7f0000000300)='syzkaller\x00', 0x5, 0xc3, &(0x7f000000cf3d)=""/195, 0x0, 0x0, '\x00', 0x0, @fallback=0x33, 0xffffffffffffffff, 0x6}, 0x94) sendmsg$nl_generic(0xffffffffffffffff, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000180)={&(0x7f00000001c0)={0x30, 0x40, 0x107, 0xfffffffa, 0x0, {0x1, 0x7c}, [@nested={0x4, 0x142}, @nested={0x14, 0x1, 0x0, 0x1, [@typed={0x6, 0x6, 0x0, 0x0, @str='\x80\n'}, @typed={0x5, 0x1c, 0x0, 0x0, @binary="96"}]}, @nested={0x4, 0x2}]}, 0x30}, 0x1, 0x0, 0x0, 0x48815}, 0xc000) bpf$BPF_GET_PROG_INFO(0xf, &(0x7f0000000200)={r9, 0x104, &(0x7f0000000340)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, ""/16, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, &(0x7f0000000040)=[0x0, 0x0], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x80000000, 0x8, 0x0, 0x0}}, 0x10) recvmmsg(r8, &(0x7f00000037c0)=[{{&(0x7f00000004c0)=@ethernet={0x0, @random}, 0x80, &(0x7f0000000380)=[{&(0x7f0000000140)=""/100, 0x64}, {&(0x7f0000000280)=""/85, 0x55}, {&(0x7f0000000fc0)=""/4096, 0x1000}, {&(0x7f0000000580)=""/106, 0x6a}, {0x0}, {&(0x7f0000000200)=""/77, 0x4d}, {&(0x7f00000007c0)=""/141, 0x8d}, {&(0x7f00000001c0)=""/17, 0x11}], 0x8, &(0x7f0000000600)=""/191, 0xbf}, 0x5}], 0x1, 0x2000, &(0x7f0000003700)={0x77359400}) setsockopt$ARPT_SO_SET_ADD_COUNTERS(r8, 0x0, 0x61, &(0x7f0000000100)={'filter\x00', 0x4}, 0x68) 8m4.065596208s ago: executing program 5 (id=5243): r0 = syz_init_net_socket$rose(0xb, 0x5, 0x0) ioctl$sock_rose_SIOCDELRT(r0, 0x890c, &(0x7f00000000c0)={@remote={0xcc, 0xcc, 0xcc, 0xcc, 0x1}, 0x6, @null, @bpq0, 0x0, [@bcast, @default, @bcast, @default, @null, @rose={0xbb, 0xbb, 0xbb, 0x1, 0x0}, @remote={0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0x0}, @default]}) 8m3.794358675s ago: executing program 5 (id=5247): r0 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_generic(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000180)={0x24, 0x1c, 0x21, 0x70bd2b, 0x0, {0x8}, [@typed={0x5, 0x2a, 0x0, 0x0, @str='\x00'}, @nested={0x8, 0xf, 0x0, 0x1, [@nested={0x4, 0xf4}]}]}, 0x24}, 0x1, 0x0, 0x0, 0x2008800}, 0x4000000) 8m3.263911449s ago: executing program 5 (id=5250): r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000000), 0x40241, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000200)={'syzkaller1\x00', 0xc201}) r1 = socket$kcm(0x2, 0xa, 0x2) ioctl$SIOCSIFHWADDR(r1, 0x8914, &(0x7f0000000180)={'syzkaller1\x00', @link_local}) r2 = socket$nl_netfilter(0x10, 0x3, 0xc) bind$xdp(0xffffffffffffffff, &(0x7f0000000100)={0x2c, 0x2, 0x0, 0xa}, 0x10) sendmsg$NFT_BATCH(r2, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000040)=ANY=[@ANYBLOB="140000001000040000000000000000000000000a20000000000a01020000000000000000010000000900010073797a300000000058000000160a01000000000000000000010000000900010073797a30000000000900020073797a30000000002c0003800800014000000000080002400000000010000380140001007465616d3000000000000000000000005c000000160a0101000b000000000000010000000900020073797a30000000000900010073797a3000000000300003802c00038014"], 0xfc}}, 0xd0) write$tun(r0, &(0x7f0000000640)=ANY=[@ANYBLOB="0800080007000000000014000000456f0fc000660000401190780a010102ac1414124e204e200fac9078e1070001e24f82d681079ea7a4e87616ec93ff3299ed88d29741d161f504c73dcab29b8c8bb6bd8ee37e9d73ea"], 0xfce) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000100)=ANY=[@ANYBLOB="4800000010000d0428bd7000fcdbff2500008000", @ANYRES32=0x0, @ANYBLOB="1000000000000000280012800b00010062726964676500001800028005001900840000000c001e"], 0x48}, 0x1, 0x0, 0x0, 0x10}, 0x0) r3 = socket$nl_netfilter(0x10, 0x3, 0xc) r4 = openat$tun(0xffffffffffffff9c, &(0x7f0000000040), 0x103800, 0x0) ioctl$TUNSETQUEUE(r4, 0x400454d9, &(0x7f0000000180)={'hsr0\x00'}) sendmsg$IPSET_CMD_LIST(r3, &(0x7f0000000200)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000040)={0x1c, 0x7, 0x6, 0x801, 0x0, 0x0, {}, [@IPSET_ATTR_PROTOCOL={0x5, 0x1, 0x6}]}, 0x1c}}, 0x0) recvmmsg(r3, &(0x7f0000000000)=[{{0x0, 0x0, &(0x7f0000002780)=[{&(0x7f00000002c0)=""/127, 0x7f}, {&(0x7f0000000340)=""/240, 0xf0}, {&(0x7f0000000440)=""/96, 0x60}, {&(0x7f0000000080)=""/86, 0x56}, {&(0x7f0000000540)=""/4096, 0x1000}], 0x5}, 0x1}], 0x1, 0x20, 0x0) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000100)=ANY=[@ANYRES32=0x0, @ANYBLOB="0300000000000000280012800a00010076786c616e00"], 0x50}, 0x1, 0x0, 0x0, 0x13d33d22cca65c15}, 0x4008840) bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000140)={&(0x7f00000000c0)=ANY=[@ANYBLOB="9feb210018"], 0x0, 0x2b, 0x0, 0x0, 0x801}, 0x28) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000180)=@newqdisc={0x24, 0x24, 0x1, 0x70bd2a, 0x25dfdbfe, {0x0, 0x0, 0x0, 0x0, {0x8}, {0xffff}, {0x5}}}, 0x24}, 0x1, 0x0, 0x0, 0x48410}, 0x840) sendmsg$IPSET_CMD_HEADER(r2, &(0x7f0000001580)={&(0x7f00000004c0)={0x10, 0x0, 0x0, 0x4000}, 0xc, &(0x7f0000001540)={&(0x7f0000000500)={0x30, 0xc, 0x6, 0x401, 0x0, 0x0, {0x3, 0x0, 0x7}, [@IPSET_ATTR_PROTOCOL={0x5}, @IPSET_ATTR_SETNAME={0x9, 0x2, 'syz1\x00'}, @IPSET_ATTR_PROTOCOL={0x5}]}, 0x30}, 0x1, 0x0, 0x0, 0x1}, 0x10) sendmsg$can_bcm(0xffffffffffffffff, &(0x7f0000000140)={&(0x7f0000000040), 0x10, 0x0, 0x1, 0x0, 0x0, 0x4000041}, 0x844) socket$netlink(0x10, 0x3, 0x0) r5 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r5, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000240)=ANY=[@ANYBLOB="140000001000010000000000000000000500000a28000000000a030000000000000000000a00000708000240000000020900010073797a31000000002c000000030a010100000000000000000a0000070900010073797a31000000000900030073797a320000000014"], 0x7c}, 0x1, 0x0, 0x0, 0x4000}, 0x0) sendmsg$NFT_BATCH(r5, &(0x7f0000009b40)={0x0, 0x0, &(0x7f0000009b00)={&(0x7f00000003c0)={{0x14, 0x10, 0x1, 0x0, 0x0, {0x5}}, [@NFT_MSG_NEWRULE={0x60, 0x6, 0xa, 0x401, 0x0, 0x0, {0xa, 0x0, 0x1}, [@NFTA_RULE_TABLE={0x9, 0x1, 'syz1\x00'}, @NFTA_RULE_EXPRESSIONS={0x34, 0x4, 0x0, 0x1, [{0x18, 0x1, 0x0, 0x1, @log={{0x8}, @val={0xc, 0x2, 0x0, 0x1, [@NFTA_LOG_LEVEL={0x8, 0x5, 0x1, 0x0, 0xffffff08}]}}}, {0x18, 0x1, 0x0, 0x1, @rt={{0x7}, @val={0xc, 0x2, 0x0, 0x1, [@NFTA_RT_KEY={0x8, 0x2, 0x1, 0x0, 0x1}]}}}]}, @NFTA_RULE_CHAIN={0x9, 0x2, 'syz2\x00'}]}], {0x14, 0x11, 0x1, 0x0, 0x0, {0x1}}}, 0x88}, 0x1, 0x0, 0x0, 0x4000850}, 0x24000000) r6 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX_80211(r6, 0x8933, &(0x7f0000000000)={'wlan0\x00', 0x0}) r8 = syz_genetlink_get_family_id$nl80211(&(0x7f00000000c0), r6) sendmsg$NL80211_CMD_FRAME(r6, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000380)={&(0x7f0000000100)={0x38, r8, 0x1, 0x70bd2c, 0x0, {{0x2}, {@val={0x8, 0x3, r7}, @val={0xc, 0x99, {0x2, 0x23}}}}, [@chandef_params=[@NL80211_ATTR_WIPHY_FREQ={0x8, 0x26, @random=0x143c}, @NL80211_ATTR_CHANNEL_WIDTH={0x8, 0x9f, 0x6}]]}, 0x38}, 0x1, 0x0, 0x0, 0x9d26f8fcf5795660}, 0x4040000) r9 = bpf$MAP_CREATE_TAIL_CALL(0x0, &(0x7f00000000c0)={0x6}, 0xaf) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f00000002c0)={{r9}, &(0x7f0000000180), &(0x7f0000000280), 0x8}, 0x20) ioctl$PPPIOCDISCONN(0xffffffffffffffff, 0x7439) 7m59.78540329s ago: executing program 5 (id=5262): r0 = bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000340)=ANY=[@ANYBLOB="02000000040000000800000001"], 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000003c0)={0x6, 0x10, &(0x7f00000008c0)=ANY=[@ANYBLOB="18050000000000000000000000000000b7080000000000007b8af8ff00000000b7080000000000007b8af0ff00000000bfa100000000000007010000f8ffffffbfa400000000000007040000f0ffffffb70200000000000018230000", @ANYRES32=r0, @ANYBLOB="0000000000000000b704000000000000850000001c00000095"], &(0x7f0000000000)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @xdp, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) 7m59.491905743s ago: executing program 5 (id=5264): r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000080), 0xffffffffffffffff) sendmsg$NL80211_CMD_RELOAD_REGDB(r0, &(0x7f00000006c0)={0x0, 0x0, &(0x7f0000000440)={&(0x7f0000000340)={0x14, r1, 0x1, 0x70bd2d, 0x25dfdbfe}, 0x14}, 0x1, 0x0, 0x0, 0x20000000}, 0x20008004) ioctl$AUTOFS_IOC_CATATONIC(r0, 0x9362, 0x0) 7m59.159381756s ago: executing program 5 (id=5267): socket$inet_icmp_raw(0x2, 0x3, 0x1) syz_init_net_socket$bt_hci(0x1f, 0x3, 0x5) r0 = socket$inet_tcp(0x2, 0x1, 0x0) setsockopt$sock_int(r0, 0x1, 0x3c, &(0x7f0000000040)=0x1, 0x4) setsockopt$inet_tcp_TCP_REPAIR(r0, 0x6, 0x13, &(0x7f00000000c0)=0x1, 0x4) connect$inet(r0, &(0x7f0000000080)={0x2, 0x0, @loopback}, 0x10) setsockopt$inet_tcp_TCP_REPAIR(r0, 0x6, 0x13, &(0x7f00000001c0)=0xffffffffffffffff, 0x4) sendmmsg$inet(r0, &(0x7f0000000a40)=[{{0x0, 0x0, &(0x7f0000000140)=[{&(0x7f0000000200)="db", 0x1}], 0x1}}], 0x1, 0x40040) sendmmsg(r0, &(0x7f0000004380)=[{{0x0, 0x0, &(0x7f0000000000)=[{&(0x7f00000002c0)="e4f67f", 0x3}], 0x1}}, {{0x0, 0x0, &(0x7f0000000a80)=[{&(0x7f0000000400)="fcd83b", 0x3}, {&(0x7f0000000480)='lR', 0x2}, {&(0x7f00000004c0)="7f5e69bd", 0x4}, {&(0x7f0000000500)="e01ed5cd", 0x4}, {&(0x7f00000005c0)="2247b041a5", 0x5}, {&(0x7f00000006c0)="512d14064b", 0x5}, {&(0x7f0000000780)="bb30a1f076b7921928c0410a8d6661727b2c81", 0x13}, {&(0x7f0000000880)="45d8ceb80043", 0x6}, {&(0x7f0000000980)='HV', 0x2}], 0x9}}, {{0x0, 0x0, &(0x7f0000002100)=[{&(0x7f0000000b40)="54a50b9f", 0x4}, {&(0x7f0000000c00)="821e128a7850e7347915d26fcc41f97b8179c7b0e9a36229b8f784016cc5ebd53f7e8678778d4dcc0fbde4bec300ee267a347ab769e92c9a974c02232f28b6320b1c839f7ab537aed286c2e9901d6cf061b55b36c3145ea35daa541fd37c81186562084ff6e3f24d966ac0e1b9cdb2eaa972bc892752fa7966b10865b770de4700bd9694c5da4b498cf51385fc3f2654f06dfd8ba370d0e001a09c3edb918155d28d46d723e49c0265b87956ed3f17fee914ca4d2e7084ee7683e7c4c3af51125a856786d07a9efc614a2cd4bc7d9a49086644b5afd55ba531a53ebc32e33743b302cd5526545248c837564c77fe7647f224e64337ab5460c9bb6208afbb0eead1239b9146dd482041f76a58db4fd715bcfc7657137450e584ff58efd805f8a52cbcad1e425144fd0c552c07b544e29373ef62a2b090ac90d2e5f83fb68e42642b2a6fe75f9ae7069cd92486f009ea923a082d72153302cb95d5a755a12a570d4865959afe10a07670dfafcdc0ff49dfe610396c53dc96f3bf37ea29e43249eec32ae9ce447f1b3cb77a7378119bcb5cf1ce725c1497f7895a4b665b52005b26b0052b16c25599da295832c4aac9011af75af53e69ec21cb757faba918c73db82ef04d382f6e049e6d03859e14186539c0675f710d241fa99bd1947e0ebba536d14b6eef528373c4d6e5613b7b54fe34a293b984c32eb5bb33af10a82db0c7781a39c5d8271e701dc2a22eb0eabf7c59d93a21bfc70e26b7073de52ef2e1f797893025d47d226504dafbd4d28b71722c6d635a7aa98df25d631f6d5f4672b54ef7709a5219368b786333331374d857f2623f34492bd88717818f91b49cd60c6cb04c93a6c2fd677ce1684573979aa6d9870f167f3d6139596ef4e01b93acd4885d6d89b1faa1a8a5b0a3f5ae29d259c3223de253b87019b388b99ea2a1c8cdd678756eec124b46c9101c35f778bef0bcdb0b3bee2a21f9f7847e7705412ce2677dffa9ec215c39b83536606576cab1e62beb7a748a2ae76b5076683d0ef35f65f657fb254b596eac9faf5790be351096a3ced711602264756572243cccfca9d0c2e86add6860301a73ad06fde745aeb18ce486f349ac0ce7a1aa67f2603bd2d7df40c1f139650b88013311a2ac8c2a00fdcee5d5a9d8c797a918b806b5c3b4252f3bb880cffcd6bb95b96ce45dbcb9a873ddb3d1fd6e975533c63be2ce83c32915fed07b2674f9c90eebe86c0474ecc86826a3a71b13e2eb7c3a581d79903fd295342e58d1825e45ae9afb966075404878bf103a41a6317b8ba9e2ac3d6b3785ee922542eda077b68dad408eac8b5a08dea6e783201517dc9fb771d621d0cb392171a63afecb986ad6334b38058a0cc978b66cfdc8b74ff8ef1f5f4598c0b9741115b9bef4a6679fe5c3ee7ad8d94f513369b410bd43e2c8f8060aa990195bc09b", 0x401}, {&(0x7f0000001cc0)="d36a", 0x2}, {&(0x7f0000001dc0)="0230d5", 0x3}, {&(0x7f0000001e00)="fbe9214e36", 0x5}, {&(0x7f0000001f00)="ddbe27", 0x3}], 0x6}}], 0x3, 0x404c044) close(0x4) r1 = syz_open_procfs$namespace(0x0, &(0x7f0000000080)='ns/ipc\x00') syz_genetlink_get_family_id$mptcp(&(0x7f0000000000), 0xffffffffffffffff) unshare(0x6a040000) r2 = socket(0x8, 0x3, 0x0) ioctl$F2FS_IOC_SET_PIN_FILE(r1, 0x4004f50d, &(0x7f0000000040)) r3 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r3, &(0x7f0000000700)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000006c0)=ANY=[@ANYBLOB="1c15000076000d0b20000000fcdb25030000000000040004000b0000"], 0x1c}, 0x1, 0x0, 0x0, 0x80}, 0x0) ioctl$IMGETCOUNT(r2, 0x618e, 0x0) unshare(0x600) unshare(0x24000480) r4 = socket$l2tp(0x2, 0x2, 0x73) setsockopt$IPT_SO_SET_REPLACE(r4, 0x0, 0x40, &(0x7f0000000000)=@mangle={'mangle\x00', 0x44, 0x6, 0x528, 0x0, 0x3b8, 0x0, 0x230, 0x230, 0x490, 0x490, 0x490, 0x490, 0x490, 0x6, 0x0, {[{{@ip={@multicast1, @dev={0xac, 0x14, 0x14, 0x13}, 0xff, 0xff000000, 'pim6reg1\x00', 'bridge_slave_0\x00', {}, {0xff}, 0x88, 0x3}, 0x0, 0x70, 0x198}, @common=@unspec=@SECMARK={0x128, 'SECMARK\x00', 0x0, {0x1, 0x1, 'unconfined\x00'}}}, {{@ip={@private=0xa010100, @broadcast, 0x0, 0x0, 'vcan0\x00', 'veth0_virt_wifi\x00', {}, {0xff}}, 0x0, 0x70, 0x98}, @ECN={0x28, 'ECN\x00', 0x0, {0x20, 0x2}}}, {{@uncond, 0x0, 0x90, 0xb8, 0x0, {}, [@common=@socket0={{0x20}}]}, @unspec=@CHECKSUM={0x28}}, {{@ip={@private=0xa010102, @multicast1, 0x0, 0xffffff00, 'syzkaller0\x00', 'bond0\x00'}, 0x0, 0x70, 0xd0}, @common=@CLUSTERIP={0x60, 'CLUSTERIP\x00', 0x0, {0x1, @link_local, 0x4, 0x8, [0x3b, 0x21, 0x20, 0x15, 0xf, 0x31, 0x39, 0x25, 0x17, 0x16, 0x14, 0x29, 0x15, 0x7, 0x1b, 0x2f], 0x0, 0x1, 0x6}}}, {{@ip={@remote, @initdev={0xac, 0x1e, 0x1, 0x0}, 0x0, 0x0, 'dummy0\x00', 'batadv_slave_1\x00', {}, {}, 0x0, 0x0, 0x4c}, 0x0, 0xb0, 0xd8, 0x0, {}, [@common=@set={{0x40}, {{0x3, [0x2, 0x0, 0x2, 0x3, 0x3, 0x3]}}}]}, @ECN={0x28, 'ECN\x00', 0x0, {0x0, 0x0, 0x1}}}], {{'\x00', 0x0, 0x70, 0x98}, {0x28}}}}, 0x588) r5 = socket$nl_generic(0x10, 0x3, 0x10) r6 = syz_genetlink_get_family_id$nl80211(&(0x7f00000000c0), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r5, 0x8933, &(0x7f0000000100)={'wlan1\x00', 0x0}) sendmsg$NL80211_CMD_SET_TX_BITRATE_MASK(r5, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000340)={0x20, r6, 0x1, 0x70bd2d, 0x0, {{}, {@val={0x8, 0x3, r7}, @void}}, [@NL80211_ATTR_TX_RATES={0x4}]}, 0x20}, 0x1, 0x0, 0x0, 0x40}, 0x4000040) r8 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r8, 0x8933, &(0x7f0000000000)={'bond0\x00'}) bpf$ITER_CREATE(0xb, &(0x7f0000000100), 0x0) unshare(0x40000000) 7m43.98218216s ago: executing program 35 (id=5267): socket$inet_icmp_raw(0x2, 0x3, 0x1) syz_init_net_socket$bt_hci(0x1f, 0x3, 0x5) r0 = socket$inet_tcp(0x2, 0x1, 0x0) setsockopt$sock_int(r0, 0x1, 0x3c, &(0x7f0000000040)=0x1, 0x4) setsockopt$inet_tcp_TCP_REPAIR(r0, 0x6, 0x13, &(0x7f00000000c0)=0x1, 0x4) connect$inet(r0, &(0x7f0000000080)={0x2, 0x0, @loopback}, 0x10) setsockopt$inet_tcp_TCP_REPAIR(r0, 0x6, 0x13, &(0x7f00000001c0)=0xffffffffffffffff, 0x4) sendmmsg$inet(r0, &(0x7f0000000a40)=[{{0x0, 0x0, &(0x7f0000000140)=[{&(0x7f0000000200)="db", 0x1}], 0x1}}], 0x1, 0x40040) sendmmsg(r0, &(0x7f0000004380)=[{{0x0, 0x0, &(0x7f0000000000)=[{&(0x7f00000002c0)="e4f67f", 0x3}], 0x1}}, {{0x0, 0x0, &(0x7f0000000a80)=[{&(0x7f0000000400)="fcd83b", 0x3}, {&(0x7f0000000480)='lR', 0x2}, {&(0x7f00000004c0)="7f5e69bd", 0x4}, {&(0x7f0000000500)="e01ed5cd", 0x4}, {&(0x7f00000005c0)="2247b041a5", 0x5}, {&(0x7f00000006c0)="512d14064b", 0x5}, {&(0x7f0000000780)="bb30a1f076b7921928c0410a8d6661727b2c81", 0x13}, {&(0x7f0000000880)="45d8ceb80043", 0x6}, {&(0x7f0000000980)='HV', 0x2}], 0x9}}, {{0x0, 0x0, &(0x7f0000002100)=[{&(0x7f0000000b40)="54a50b9f", 0x4}, {&(0x7f0000000c00)="821e128a7850e7347915d26fcc41f97b8179c7b0e9a36229b8f784016cc5ebd53f7e8678778d4dcc0fbde4bec300ee267a347ab769e92c9a974c02232f28b6320b1c839f7ab537aed286c2e9901d6cf061b55b36c3145ea35daa541fd37c81186562084ff6e3f24d966ac0e1b9cdb2eaa972bc892752fa7966b10865b770de4700bd9694c5da4b498cf51385fc3f2654f06dfd8ba370d0e001a09c3edb918155d28d46d723e49c0265b87956ed3f17fee914ca4d2e7084ee7683e7c4c3af51125a856786d07a9efc614a2cd4bc7d9a49086644b5afd55ba531a53ebc32e33743b302cd5526545248c837564c77fe7647f224e64337ab5460c9bb6208afbb0eead1239b9146dd482041f76a58db4fd715bcfc7657137450e584ff58efd805f8a52cbcad1e425144fd0c552c07b544e29373ef62a2b090ac90d2e5f83fb68e42642b2a6fe75f9ae7069cd92486f009ea923a082d72153302cb95d5a755a12a570d4865959afe10a07670dfafcdc0ff49dfe610396c53dc96f3bf37ea29e43249eec32ae9ce447f1b3cb77a7378119bcb5cf1ce725c1497f7895a4b665b52005b26b0052b16c25599da295832c4aac9011af75af53e69ec21cb757faba918c73db82ef04d382f6e049e6d03859e14186539c0675f710d241fa99bd1947e0ebba536d14b6eef528373c4d6e5613b7b54fe34a293b984c32eb5bb33af10a82db0c7781a39c5d8271e701dc2a22eb0eabf7c59d93a21bfc70e26b7073de52ef2e1f797893025d47d226504dafbd4d28b71722c6d635a7aa98df25d631f6d5f4672b54ef7709a5219368b786333331374d857f2623f34492bd88717818f91b49cd60c6cb04c93a6c2fd677ce1684573979aa6d9870f167f3d6139596ef4e01b93acd4885d6d89b1faa1a8a5b0a3f5ae29d259c3223de253b87019b388b99ea2a1c8cdd678756eec124b46c9101c35f778bef0bcdb0b3bee2a21f9f7847e7705412ce2677dffa9ec215c39b83536606576cab1e62beb7a748a2ae76b5076683d0ef35f65f657fb254b596eac9faf5790be351096a3ced711602264756572243cccfca9d0c2e86add6860301a73ad06fde745aeb18ce486f349ac0ce7a1aa67f2603bd2d7df40c1f139650b88013311a2ac8c2a00fdcee5d5a9d8c797a918b806b5c3b4252f3bb880cffcd6bb95b96ce45dbcb9a873ddb3d1fd6e975533c63be2ce83c32915fed07b2674f9c90eebe86c0474ecc86826a3a71b13e2eb7c3a581d79903fd295342e58d1825e45ae9afb966075404878bf103a41a6317b8ba9e2ac3d6b3785ee922542eda077b68dad408eac8b5a08dea6e783201517dc9fb771d621d0cb392171a63afecb986ad6334b38058a0cc978b66cfdc8b74ff8ef1f5f4598c0b9741115b9bef4a6679fe5c3ee7ad8d94f513369b410bd43e2c8f8060aa990195bc09b", 0x401}, {&(0x7f0000001cc0)="d36a", 0x2}, {&(0x7f0000001dc0)="0230d5", 0x3}, {&(0x7f0000001e00)="fbe9214e36", 0x5}, {&(0x7f0000001f00)="ddbe27", 0x3}], 0x6}}], 0x3, 0x404c044) close(0x4) r1 = syz_open_procfs$namespace(0x0, &(0x7f0000000080)='ns/ipc\x00') syz_genetlink_get_family_id$mptcp(&(0x7f0000000000), 0xffffffffffffffff) unshare(0x6a040000) r2 = socket(0x8, 0x3, 0x0) ioctl$F2FS_IOC_SET_PIN_FILE(r1, 0x4004f50d, &(0x7f0000000040)) r3 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r3, &(0x7f0000000700)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000006c0)=ANY=[@ANYBLOB="1c15000076000d0b20000000fcdb25030000000000040004000b0000"], 0x1c}, 0x1, 0x0, 0x0, 0x80}, 0x0) ioctl$IMGETCOUNT(r2, 0x618e, 0x0) unshare(0x600) unshare(0x24000480) r4 = socket$l2tp(0x2, 0x2, 0x73) setsockopt$IPT_SO_SET_REPLACE(r4, 0x0, 0x40, &(0x7f0000000000)=@mangle={'mangle\x00', 0x44, 0x6, 0x528, 0x0, 0x3b8, 0x0, 0x230, 0x230, 0x490, 0x490, 0x490, 0x490, 0x490, 0x6, 0x0, {[{{@ip={@multicast1, @dev={0xac, 0x14, 0x14, 0x13}, 0xff, 0xff000000, 'pim6reg1\x00', 'bridge_slave_0\x00', {}, {0xff}, 0x88, 0x3}, 0x0, 0x70, 0x198}, @common=@unspec=@SECMARK={0x128, 'SECMARK\x00', 0x0, {0x1, 0x1, 'unconfined\x00'}}}, {{@ip={@private=0xa010100, @broadcast, 0x0, 0x0, 'vcan0\x00', 'veth0_virt_wifi\x00', {}, {0xff}}, 0x0, 0x70, 0x98}, @ECN={0x28, 'ECN\x00', 0x0, {0x20, 0x2}}}, {{@uncond, 0x0, 0x90, 0xb8, 0x0, {}, [@common=@socket0={{0x20}}]}, @unspec=@CHECKSUM={0x28}}, {{@ip={@private=0xa010102, @multicast1, 0x0, 0xffffff00, 'syzkaller0\x00', 'bond0\x00'}, 0x0, 0x70, 0xd0}, @common=@CLUSTERIP={0x60, 'CLUSTERIP\x00', 0x0, {0x1, @link_local, 0x4, 0x8, [0x3b, 0x21, 0x20, 0x15, 0xf, 0x31, 0x39, 0x25, 0x17, 0x16, 0x14, 0x29, 0x15, 0x7, 0x1b, 0x2f], 0x0, 0x1, 0x6}}}, {{@ip={@remote, @initdev={0xac, 0x1e, 0x1, 0x0}, 0x0, 0x0, 'dummy0\x00', 'batadv_slave_1\x00', {}, {}, 0x0, 0x0, 0x4c}, 0x0, 0xb0, 0xd8, 0x0, {}, [@common=@set={{0x40}, {{0x3, [0x2, 0x0, 0x2, 0x3, 0x3, 0x3]}}}]}, @ECN={0x28, 'ECN\x00', 0x0, {0x0, 0x0, 0x1}}}], {{'\x00', 0x0, 0x70, 0x98}, {0x28}}}}, 0x588) r5 = socket$nl_generic(0x10, 0x3, 0x10) r6 = syz_genetlink_get_family_id$nl80211(&(0x7f00000000c0), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r5, 0x8933, &(0x7f0000000100)={'wlan1\x00', 0x0}) sendmsg$NL80211_CMD_SET_TX_BITRATE_MASK(r5, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000340)={0x20, r6, 0x1, 0x70bd2d, 0x0, {{}, {@val={0x8, 0x3, r7}, @void}}, [@NL80211_ATTR_TX_RATES={0x4}]}, 0x20}, 0x1, 0x0, 0x0, 0x40}, 0x4000040) r8 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r8, 0x8933, &(0x7f0000000000)={'bond0\x00'}) bpf$ITER_CREATE(0xb, &(0x7f0000000100), 0x0) unshare(0x40000000) 12.61983268s ago: executing program 3 (id=7656): ioctl$XFS_IOC_START_COMMIT(0xffffffffffffffff, 0x80585882, &(0x7f0000000400)={0xffffffffffffffff}) getsockopt$inet_sctp_SCTP_GET_PEER_ADDR_INFO(r0, 0x84, 0xf, &(0x7f0000000480)={0x0, @in={{0x2, 0x4e24, @multicast2}}, 0x2, 0xfffffffc, 0x400, 0xa}, &(0x7f0000000540)=0x98) setsockopt$packet_fanout(0xffffffffffffffff, 0x107, 0x12, &(0x7f0000000000)={0x0, 0x8000}, 0x4) bind$inet(0xffffffffffffffff, &(0x7f0000000240)={0x2, 0x0, @multicast1}, 0x10) socket$packet(0x11, 0xa, 0x300) r1 = socket$alg(0x26, 0x5, 0x0) r2 = socket$inet_tcp(0x2, 0x1, 0x0) setsockopt$inet_tcp_int(r2, 0x6, 0x210000000013, &(0x7f00000000c0)=0x100000001, 0x4) bind$inet(r2, &(0x7f0000000080)={0x2, 0x4e21, @multicast1}, 0x10) sendmsg$IPVS_CMD_GET_SERVICE(0xffffffffffffffff, &(0x7f00000003c0)={&(0x7f0000000140)={0x10, 0x0, 0x0, 0x24000}, 0xc, &(0x7f0000000380)={&(0x7f00000002c0)={0x38, 0x0, 0x100, 0x70bd25, 0x25dfdbfb, {}, [@IPVS_CMD_ATTR_TIMEOUT_UDP={0x8, 0x6, 0x6}, @IPVS_CMD_ATTR_DAEMON={0x1c, 0x3, 0x0, 0x1, [@IPVS_DAEMON_ATTR_MCAST_PORT={0x6, 0x7, 0x4e20}, @IPVS_DAEMON_ATTR_STATE={0x8, 0x1, 0x1}, @IPVS_DAEMON_ATTR_MCAST_PORT={0x6, 0x7, 0x4e23}]}]}, 0x38}, 0x1, 0x0, 0x0, 0x4000011}, 0x8044) syz_emit_ethernet(0x3e, &(0x7f0000001180)={@local, @link_local, @void, {@ipv6={0x86dd, @generic={0x0, 0x6, "6410a6", 0x8, 0x0, 0x0, @ipv4={'\x00', '\xff\xff', @local}, @mcast2, {[], "223427d5c9a46b9f"}}}}}, 0x0) r3 = openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0) ioctl$TUNSETIFF(r3, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x7101}) connect$inet(r2, &(0x7f0000000180)={0x2, 0x4e21, @dev={0xac, 0x14, 0x14, 0x1d}}, 0x10) setsockopt$inet_tcp_TCP_REPAIR_OPTIONS(r2, 0x6, 0x16, &(0x7f0000000580)=[@mss, @sack_perm, @timestamp, @mss={0x2, 0xfff}, @window={0x3, 0x0, 0x402}, @window={0x3, 0x4}, @timestamp, @sack_perm, @timestamp, @window={0x3, 0x0, 0x4}], 0xa) r4 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r4, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000100)=@newlink={0x30, 0x10, 0x1, 0x70bd29, 0x25dfdbfc, {0x0, 0x0, 0x0, 0x0, 0x1021, 0x3}, [@IFLA_GROUP={0x8}, @IFLA_MTU={0x8, 0x4, 0x500}]}, 0x30}, 0x1, 0x0, 0x0, 0x801}, 0x4000000) setsockopt$inet_tcp_TCP_REPAIR(r2, 0x6, 0x13, &(0x7f00000001c0), 0x2) sendto$inet(r2, &(0x7f0000000000), 0xffffffffffffff94, 0xb, 0x0, 0x0) ioctl$sock_SIOCGIFVLAN_SET_VLAN_FLAG_CMD(r1, 0x8982, &(0x7f0000000280)={0x7, 'caif0\x00', {0x1a}, 0x9}) 12.319047056s ago: executing program 3 (id=7659): syz_init_net_socket$bt_hci(0x1f, 0x3, 0x5) close(0x4) syz_open_procfs$namespace(0x0, &(0x7f0000000200)='ns/pid_for_children\x00') unshare(0x6a040000) r0 = socket(0x8, 0x0, 0x8000) ioctl$sock_netrom_SIOCADDRT(r0, 0x61d1, 0x0) 12.013161545s ago: executing program 8 (id=7660): r0 = epoll_create1(0x0) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000180)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f00000bd000), 0x318, 0x0) epoll_pwait(r0, &(0x7f0000000140)=[{}], 0x1, 0x2d516fb6, 0x0, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) epoll_create1(0x0) epoll_ctl$EPOLL_CTL_ADD(r0, 0x1, r2, &(0x7f0000000100)={0x20000014}) epoll_wait(r0, &(0x7f0000000040)=[{}], 0x1, 0x400) unshare(0x2c020400) clock_gettime(0x0, 0x0) r3 = socket$inet6(0xa, 0x1, 0x8010800000000084) sendmmsg$inet6(r3, &(0x7f0000000040)=[{{&(0x7f0000000400)={0xa, 0x201, 0x0, @private0}, 0x1c, &(0x7f00000002c0)=[{&(0x7f0000000d00)='[', 0x1}], 0x1}}], 0x1, 0x4008040) pselect6(0x40, &(0x7f0000000000)={0xa, 0x80000001, 0x2, 0x10000000000006, 0x12, 0x8, 0x80000000, 0x8}, 0x0, 0x0, 0x0, 0x0) setsockopt$inet6_tcp_TCP_CONGESTION(0xffffffffffffffff, 0x6, 0xd, &(0x7f0000000180)='cubic', 0x9) socket$nl_route(0x10, 0x3, 0x0) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000600)={0x18, 0x3, &(0x7f00000001c0)=ANY=[@ANYRESDEC=r0], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x41000}, 0x94) socket$netlink(0x10, 0x3, 0x8000000004) r4 = socket$netlink(0x10, 0x3, 0x0) r5 = socket(0x10, 0x803, 0x0) sendmsg$nl_route_sched(r5, &(0x7f00000003c0)={0x0, 0x0, &(0x7f0000000380)={0x0, 0x24}}, 0x0) getsockname$packet(r5, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x2ba) sendmsg$nl_route(r4, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000140)=ANY=[@ANYBLOB="3c0000001000850619fbb7c75150926b00000000", @ANYRES32=r6, @ANYBLOB="fe000000000000001c0012000c000100626f6e64"], 0x3c}}, 0x0) r7 = socket(0x10, 0x803, 0x0) r8 = socket(0x1, 0x803, 0x0) getsockname$packet(r8, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route(r7, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000240)=ANY=[@ANYBLOB="2c0000001400b59500000000000002000a782200", @ANYRES32=r9, @ANYBLOB="1400020000000000000000000000ffff000000bfa1c36161eb84fd1bd792b417b20400"], 0x2c}}, 0x0) 8.723449469s ago: executing program 8 (id=7661): r0 = epoll_create1(0x0) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000180)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f00000bd000), 0x318, 0x0) epoll_pwait(r0, &(0x7f0000000140)=[{}], 0x1, 0x2d516fb6, 0x0, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) epoll_create1(0x0) epoll_ctl$EPOLL_CTL_ADD(r0, 0x1, r2, &(0x7f0000000100)={0x20000014}) epoll_wait(r0, &(0x7f0000000040)=[{}], 0x1, 0x400) unshare(0x2c020400) clock_gettime(0x0, 0x0) r3 = socket$inet6(0xa, 0x1, 0x8010800000000084) sendmmsg$inet6(r3, &(0x7f0000000040)=[{{&(0x7f0000000000)={0xa, 0x0, 0x0, @private0}, 0x1c, &(0x7f0000000600)=[{&(0x7f00000000c0)='/', 0x1}], 0x1}}, {{&(0x7f0000000400)={0xa, 0x201, 0x0, @private0}, 0x1c, &(0x7f00000002c0)=[{&(0x7f0000000d00)='[', 0x4d0}], 0x21}}], 0x2, 0x4008040) pselect6(0x40, &(0x7f0000000000)={0xa, 0x80000001, 0x2, 0x10000000000006, 0x12, 0x8, 0x80000000, 0x8}, 0x0, 0x0, 0x0, 0x0) setsockopt$inet6_tcp_TCP_CONGESTION(0xffffffffffffffff, 0x6, 0xd, &(0x7f0000000180)='cubic', 0x9) socket$nl_route(0x10, 0x3, 0x0) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000600)={0x18, 0x3, &(0x7f00000001c0)=ANY=[@ANYRESDEC=r0], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x41000}, 0x94) socket$netlink(0x10, 0x3, 0x8000000004) r4 = socket$netlink(0x10, 0x3, 0x0) r5 = socket(0x10, 0x803, 0x0) sendmsg$nl_route_sched(r5, &(0x7f00000003c0)={0x0, 0x0, 0x0}, 0x0) getsockname$packet(r5, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x2ba) sendmsg$nl_route(r4, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000140)=ANY=[@ANYBLOB="3c0000001000850619fbb7c75150926b00000000", @ANYRES32=r6, @ANYBLOB="fe000000000000001c0012000c000100626f6e64"], 0x3c}}, 0x0) r7 = socket(0x10, 0x803, 0x0) r8 = socket(0x1, 0x803, 0x0) getsockname$packet(r8, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route(r7, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000240)=ANY=[@ANYBLOB="2c0000001400b59500000000000002000a782200", @ANYRES32=r9, @ANYBLOB="1400020000000000000000000000ffff000000bfa1c36161eb84fd1bd792b417b20400"], 0x2c}}, 0x0) 7.691485983s ago: executing program 1 (id=7664): r0 = epoll_create1(0x0) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000180)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f00000bd000), 0x318, 0x0) epoll_pwait(r0, &(0x7f0000000140)=[{}], 0x1, 0x2d516fb6, 0x0, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) epoll_create1(0x0) epoll_ctl$EPOLL_CTL_ADD(r0, 0x1, r2, &(0x7f0000000100)={0x20000014}) epoll_wait(r0, &(0x7f0000000040)=[{}], 0x1, 0x400) unshare(0x2c020400) clock_gettime(0x0, 0x0) r3 = socket$inet6(0xa, 0x1, 0x8010800000000084) sendmmsg$inet6(r3, &(0x7f0000000040)=[{{&(0x7f0000000000)={0xa, 0x0, 0x0, @private0}, 0x1c, &(0x7f0000000600)=[{0x0}], 0x1}}, {{&(0x7f0000000400)={0xa, 0x201, 0x0, @private0}, 0x1c, &(0x7f00000002c0)=[{&(0x7f0000000d00)='[', 0x1}], 0x1}}], 0x2, 0x4008040) pselect6(0x40, &(0x7f0000000000)={0xa, 0x80000001, 0x2, 0x10000000000006, 0x12, 0x8, 0x80000000, 0x8}, 0x0, 0x0, 0x0, 0x0) setsockopt$inet6_tcp_TCP_CONGESTION(0xffffffffffffffff, 0x6, 0xd, &(0x7f0000000180)='cubic', 0x9) socket$nl_route(0x10, 0x3, 0x0) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000600)={0x18, 0x3, &(0x7f00000001c0)=ANY=[@ANYRESDEC=r0], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x41000}, 0x94) socket$netlink(0x10, 0x3, 0x8000000004) r4 = socket$netlink(0x10, 0x3, 0x0) r5 = socket(0x10, 0x803, 0x0) sendmsg$nl_route_sched(r5, &(0x7f00000003c0)={0x0, 0x0, &(0x7f0000000380)={0x0, 0x24}}, 0x0) getsockname$packet(r5, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x2ba) sendmsg$nl_route(r4, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000140)=ANY=[@ANYBLOB="3c0000001000850619fbb7c75150926b00000000", @ANYRES32=r6, @ANYBLOB="fe000000000000001c0012000c000100626f6e64"], 0x3c}}, 0x0) r7 = socket(0x10, 0x803, 0x0) r8 = socket(0x1, 0x803, 0x0) getsockname$packet(r8, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route(r7, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000240)=ANY=[@ANYBLOB="2c0000001400b59500000000000002000a782200", @ANYRES32=r9, @ANYBLOB="1400020000000000000000000000ffff000000bfa1c36161eb84fd1bd792b417b20400"], 0x2c}}, 0x0) 7.514167404s ago: executing program 6 (id=7665): r0 = epoll_create1(0x0) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000180)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f00000bd000), 0x318, 0x0) epoll_pwait(r0, &(0x7f0000000140)=[{}], 0x1, 0x2d516fb6, 0x0, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) epoll_create1(0x0) epoll_ctl$EPOLL_CTL_ADD(r0, 0x1, r2, &(0x7f0000000100)={0x20000014}) epoll_wait(r0, &(0x7f0000000040)=[{}], 0x1, 0x400) unshare(0x2c020400) clock_gettime(0x0, 0x0) r3 = socket$inet6(0xa, 0x1, 0x8010800000000084) sendmmsg$inet6(r3, &(0x7f0000000040)=[{{&(0x7f0000000400)={0xa, 0x201, 0x0, @private0}, 0x1c, &(0x7f00000002c0)=[{&(0x7f0000000d00)='[', 0x1}], 0x1}}], 0x1, 0x4008040) pselect6(0x40, &(0x7f0000000000)={0xa, 0x80000001, 0x2, 0x10000000000006, 0x12, 0x8, 0x80000000, 0x8}, 0x0, 0x0, 0x0, 0x0) setsockopt$inet6_tcp_TCP_CONGESTION(0xffffffffffffffff, 0x6, 0xd, &(0x7f0000000180)='cubic', 0x9) socket$nl_route(0x10, 0x3, 0x0) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000600)={0x18, 0x3, &(0x7f00000001c0)=ANY=[@ANYRESDEC=r0], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x41000}, 0x94) socket$netlink(0x10, 0x3, 0x8000000004) r4 = socket$netlink(0x10, 0x3, 0x0) r5 = socket(0x10, 0x803, 0x0) sendmsg$nl_route_sched(r5, &(0x7f00000003c0)={0x0, 0x0, &(0x7f0000000380)={0x0, 0x24}}, 0x0) getsockname$packet(r5, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x2ba) sendmsg$nl_route(r4, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000140)=ANY=[@ANYBLOB="3c0000001000850619fbb7c75150926b00000000", @ANYRES32=r6, @ANYBLOB="fe000000000000001c0012000c000100626f6e64"], 0x3c}}, 0x0) r7 = socket(0x10, 0x803, 0x0) r8 = socket(0x1, 0x803, 0x0) getsockname$packet(r8, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route(r7, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000240)=ANY=[@ANYBLOB="2c0000001400b59500000000000002000a782200", @ANYRES32=r9, @ANYBLOB="1400020000000000000000000000ffff000000bfa1c36161eb84fd1bd792b417b20400"], 0x2c}}, 0x0) 7.372966636s ago: executing program 8 (id=7666): syz_init_net_socket$llc(0x1a, 0x1, 0x0) r0 = bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000240)={0x2, 0x4, 0x8, 0x1, 0x80, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0x0}, 0x48) r1 = bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f00000007c0)={0x1b, 0x0, 0x0, 0x40000, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0}, 0x48) bpf$PROG_LOAD(0x5, &(0x7f0000000840)={0x7, 0x1c, &(0x7f0000000d80)=ANY=[@ANYBLOB="1808000040000000000000000000000018110000", @ANYRES32=r1, @ANYBLOB="0000000000000000b702000014000000b7030000530000008500000005000000bca90000000000003509020000d44a6be5000d0000000000b702000000000000739af0ff00000000c509040004100000c3aaf0ff00000000bf8600000000000007080000f8ffffffbfa400000000000007060000f0ffffffb70200000800000018220000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7050000080000004608f0ff76000000bf9800000000000056080000000000008500000007000000b70000000000000095"], &(0x7f0000000980)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0xb, '\x00', 0x0, @fallback=0x22, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r2 = socket$inet_tcp(0x2, 0x1, 0x0) bind$inet(r2, &(0x7f0000000000)={0x2, 0x4e21, @broadcast}, 0x10) setsockopt$inet_tcp_TCP_CONGESTION(r2, 0x6, 0xd, &(0x7f0000000040)='scalable', 0x8) connect$inet(r2, &(0x7f0000000180)={0x2, 0x4e21, @dev={0xac, 0x14, 0x14, 0x1b}}, 0x10) r3 = socket$nl_generic(0x10, 0x3, 0x10) r4 = socket$nl_generic(0x10, 0x3, 0x10) r5 = syz_genetlink_get_family_id$SEG6(&(0x7f0000004040), 0xffffffffffffffff) r6 = openat$tun(0xffffffffffffff9c, &(0x7f0000000080), 0x1c1341, 0x0) ioctl$TUNSETIFF(r6, 0x400454ca, &(0x7f00000000c0)={'syzkaller0\x00', 0x84aebfbd6349b7f2}) r7 = openat$tun(0xffffffffffffff9c, 0x0, 0x0, 0x0) ioctl$TUNSETQUEUE(r6, 0x400454d9, &(0x7f0000000000)={'ip6gre0\x00', 0x400}) close(r7) sendmmsg$alg(0xffffffffffffffff, &(0x7f0000000040)=[{0x0, 0x0, &(0x7f0000000300)=[{0x0}, {0x0}, {0x0}, {0x0}, {0x0}], 0x5}], 0x1, 0x40800) ioctl$sock_SIOCGIFINDEX_80211(0xffffffffffffffff, 0x8933, &(0x7f0000000040)={'wlan1\x00'}) r8 = socket$nl_route(0x10, 0x3, 0x0) ioctl(r8, 0x8b2a, &(0x7f0000000040)) writev(r6, &(0x7f0000000100), 0x0) sendmsg$SEG6_CMD_SETHMAC(r4, &(0x7f0000004140)={0x0, 0x0, &(0x7f0000004100)={&(0x7f0000004080)={0x30, r5, 0x1, 0x70bd2d, 0x25dfdbfe, {}, [@SEG6_ATTR_ALGID={0x5, 0x6, 0x2}, @SEG6_ATTR_SECRETLEN={0x5, 0x5, 0x4}, @SEG6_ATTR_HMACKEYID={0x8, 0x3, 0x7}, @SEG6_ATTR_SECRET={0x4}]}, 0x30}, 0x1, 0x0, 0x0, 0x4845}, 0x20000080) sendmsg$SEG6_CMD_SET_TUNSRC(r3, &(0x7f00000001c0)={&(0x7f00000000c0)={0x10, 0x0, 0x0, 0x4000}, 0xc, &(0x7f0000000140)={&(0x7f0000000100)={0x20, r5, 0x218, 0x70bd29, 0x25dfdbfc, {}, [@SEG6_ATTR_SECRET={0xc, 0x4, [0x1, 0x6]}]}, 0x20}, 0x1, 0x0, 0x0, 0x4000}, 0x8000) sendto$inet(r2, &(0x7f00000000c0), 0xffffffffffffffef, 0x0, 0x0, 0x0) recvfrom$inet(r2, &(0x7f0000000080)=""/8, 0xfffffffffffffd0b, 0x720, 0x0, 0xfffffffffffffd25) 6.551466412s ago: executing program 7 (id=7668): r0 = socket$netlink(0x10, 0x3, 0x0) r1 = socket(0x10, 0x803, 0x0) r2 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r3 = syz_genetlink_get_family_id$ieee802154(&(0x7f0000000ac0), r2) sendmsg$IEEE802154_LLSEC_SETPARAMS(r2, &(0x7f0000000b00)={0x0, 0x0, &(0x7f0000000b40)={&(0x7f00000003c0)={0x20, r3, 0x5, 0x0, 0x0, {0x22}, [@IEEE802154_ATTR_DEV_NAME={0xa, 0x1, 'wpan1\x00'}]}, 0x20}}, 0x4000000) sendmsg$IPVS_CMD_SET_INFO(r1, &(0x7f0000000b00)={0x0, 0x0, &(0x7f0000000ac0)={0x0, 0x14}}, 0x0) getsockname$packet(r1, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route(r1, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000380)=ANY=[@ANYBLOB="3c0000001000850600"/20, @ANYRES32=r4, @ANYBLOB="01000000000000001c0012000c000100626f6e64000000000c0002000800010006"], 0x3c}}, 0x0) write$6lowpan_control(r0, &(0x7f0000000040)='disconnect aa:aa:aa:aa:aa:10 1', 0x1e) sendmsg$nl_route(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000180)=ANY=[@ANYBLOB="3c00000010001fff000000000100000000000000", @ANYRES32=0x0, @ANYBLOB="0000000000000000140012800900010076657468000000000400028008000a00", @ANYRES32=r4, @ANYBLOB="ed5d5e67"], 0x3c}, 0x1, 0x0, 0x0, 0x40000}, 0x0) r5 = socket$nl_route(0x10, 0x3, 0x0) bpf$PROG_LOAD(0x5, &(0x7f00000004c0)={0xe, 0xf, 0x0, 0x0, 0x0, 0x0, 0x0, 0x40f00, 0x10, '\x00', 0x0, @sk_skb=0x4, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x2, 0x0, &(0x7f0000000480)=[{0x3, 0x4, 0xb, 0x5}, {0x1, 0x4, 0xb, 0x5}], 0x10, 0x3}, 0x94) r6 = socket$nl_route(0x10, 0x3, 0x0) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000240)={0x11, 0x3, 0x0, &(0x7f0000000080)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x2c}, 0x94) sendmsg$nl_route_sched(r6, &(0x7f00000007c0)={0x0, 0x0, &(0x7f0000000780)={&(0x7f00000000c0)=@newqdisc={0x40, 0x24, 0xf0b, 0x70bd2e, 0x0, {0x0, 0x0, 0x12, 0x0, {0x0, 0x6}, {0xfff1, 0xffff}, {0xfff3}}, [@qdisc_kind_options=@q_clsact={0xb}, @TCA_INGRESS_BLOCK={0x8, 0xd, 0x4}, @TCA_EGRESS_BLOCK={0x8, 0xe, 0x4}]}, 0x40}, 0x1, 0x0, 0x0, 0x40000}, 0x0) bpf$PROG_LOAD(0x5, &(0x7f0000000200)={0xe, 0xe, &(0x7f0000000500)=ANY=[@ANYBLOB="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"], &(0x7f0000000340)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @sk_skb, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0x0, 0x10, &(0x7f0000000000), 0x166}, 0x48) r7 = syz_init_net_socket$nl_rdma(0x10, 0x3, 0x10) sendmsg$netlink(r7, &(0x7f0000001ac0)={0x0, 0x0, &(0x7f0000000080)=[{&(0x7f00000000c0)={0x114, 0x20, 0x301, 0x0, 0x0, "", [@nested={0x101, 0x0, 0x0, 0x1, [@typed={0xc, 0x1, 0x0, 0x0, @u64=0x7}, @generic="f400a489160a11", @generic="50bb2d6f67d29d6fabadb107d0def49c88ea04abde1d5e8d3fb22a1b5046778bdafefc46b0449ade68bf84b36ec72dd71265fc2e882348c26c2126237dd5b37f5ae655b1086cda40e00aec58754734be31d750351dc076eb47d96219c08c029d1608a487f26fbe816b89f7cb81bff81a8b7a82565856555ee923c65973deb0a99b962bc0fe94a3fcae3697bd7b85b3a682167c43dbf137115a40ebddcad74875cf0d972df9e99f07976773f4d98fe3fa370d47eb640dc5061dc35817c8a66c29be82fdc2f4393c05a007d12b505a84dfdb98d568175b62421d726d1e5331e1ddfd4d", @typed={0x8, 0x0, 0x0, 0x0, @pid}]}]}, 0x114}], 0x1}, 0x0) sendmsg$nl_route(r5, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000540)={&(0x7f0000000240)=@newlink={0x48, 0x10, 0xff05, 0x0, 0x0, {0x0, 0x0, 0x4a00}, [@IFLA_LINKINFO={0x14, 0x12, 0x0, 0x1, @batadv={{0xb}, {0x4}}}, @IFLA_MASTER={0x8, 0xa, r4}, @IFLA_ADDRESS={0xa}]}, 0x48}}, 0x0) 5.802697327s ago: executing program 1 (id=7669): r0 = socket$inet_tcp(0x2, 0x1, 0x0) bind$inet(r0, &(0x7f0000000240)={0x2, 0x4e20, @multicast1}, 0x10) connect$inet(r0, &(0x7f0000ccb000)={0x2, 0x4e20, @local}, 0x10) r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000100)={0x1, 0x3, &(0x7f0000001a00)=ANY=[@ANYBLOB="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"], &(0x7f00002bf000)='GPL\x00', 0x4, 0x436, &(0x7f0000000040)=""/183, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0xfffffffffffffc95}, 0x48) r2 = socket$kcm(0x29, 0x2, 0x0) ioctl$sock_kcm_SIOCKCMATTACH(r2, 0x89e0, &(0x7f0000000180)={r0, r1}) socket$nl_netfilter(0x10, 0x3, 0xc) r3 = socket$inet_sctp(0x2, 0x1, 0x84) sendto$inet(r3, &(0x7f0000000140)='^', 0x34000, 0x0, &(0x7f0000004ff0)={0x2, 0x0, @rand_addr=0xfffffffffffffffe}, 0x10) bpf$BPF_PROG_DETACH(0x9, 0x0, 0x0) ioctl$sock_SIOCGIFINDEX_80211(0xffffffffffffffff, 0x8933, 0x0) pipe(&(0x7f0000000100)={0xffffffffffffffff, 0xffffffffffffffff}) close(0x4) syz_init_net_socket$bt_hci(0x1f, 0x3, 0x5) close(0x4) syz_open_procfs$namespace(0x0, &(0x7f0000000040)='ns/cgroup\x00') socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$ethtool(0x0, 0xffffffffffffffff) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f07ebbeef, 0x8031, 0xffffffffffffffff, 0x215eb000) r5 = socket(0x14, 0x2, 0x4) ioctl$sock_SIOCGIFINDEX(r5, 0x61d0, 0x0) listen(r3, 0xfff) bpf$PROG_LOAD(0x5, &(0x7f0000000100)={0x6, 0xc, &(0x7f0000000000)=ANY=[@ANYBLOB="1800000000000000000000000000000085000000d1000000180100002020702500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b70300000000000085000000b40000009517"], &(0x7f0000000300)='GPL\x00', 0x6, 0x0, 0x0, 0x41100, 0x2, '\x00', 0x0, @fallback=0x29, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x9}, 0x94) sendmmsg$inet(r2, &(0x7f00000028c0)=[{{0x0, 0x0, &(0x7f0000000200)}}, {{0x0, 0x0, 0x0}}], 0x2, 0x40) close(r2) r6 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000000), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(0xffffffffffffffff, 0x8933, &(0x7f0000000240)={'wlan0\x00', 0x0}) sendmsg$NL80211_CMD_SET_MCAST_RATE(0xffffffffffffffff, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000280)={0x1c, r6, 0x1, 0x0, 0x25dfdbfe, {{0x53}, {@val={0x8, 0x3, r7}, @void}}}, 0x1c}}, 0x0) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f0000000280)={'wlan0\x00', 0x0}) sendmsg$NL80211_CMD_JOIN_MESH(r4, &(0x7f00000003c0)={&(0x7f00000001c0)={0x10, 0x0, 0x0, 0x2c8981}, 0xc, &(0x7f00000002c0)={&(0x7f0000000340)={0x54, r6, 0x412, 0x70bd27, 0x25dfdbfc, {{}, {@val={0x8, 0x3, r8}, @void}}, [@chandef_params=[@NL80211_ATTR_WIPHY_CHANNEL_TYPE={0x8, 0x27, 0x1}], @NL80211_ATTR_DTIM_PERIOD={0x8, 0xd, 0xfffffff9}, @NL80211_ATTR_CONTROL_PORT_OVER_NL80211={0x4}, @NL80211_ATTR_HANDLE_DFS={0x4}, @NL80211_ATTR_MESH_SETUP={0x18, 0x70, [@NL80211_MESH_SETUP_USERSPACE_MPM={0x4}, @NL80211_MESH_SETUP_ENABLE_VENDOR_SYNC={0x5, 0x6, 0x1}, @NL80211_MESH_SETUP_ENABLE_VENDOR_METRIC={0x5, 0x2, 0x1}]}, @chandef_params=[@NL80211_ATTR_CENTER_FREQ1={0x8, 0xa0, 0x1}]]}, 0x54}, 0x1, 0x0, 0x0, 0x20008010}, 0x24000800) 5.756899558s ago: executing program 8 (id=7670): r0 = epoll_create1(0x0) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000180)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f00000bd000), 0x318, 0x0) epoll_pwait(r0, &(0x7f0000000140)=[{}], 0x1, 0x2d516fb6, 0x0, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) epoll_create1(0x0) epoll_ctl$EPOLL_CTL_ADD(r0, 0x1, r2, &(0x7f0000000100)={0x20000014}) epoll_wait(r0, &(0x7f0000000040)=[{}], 0x1, 0x400) unshare(0x2c020400) clock_gettime(0x0, 0x0) r3 = socket$inet6(0xa, 0x1, 0x8010800000000084) sendmmsg$inet6(r3, &(0x7f0000000040)=[{{&(0x7f0000000000)={0xa, 0x0, 0x0, @private0}, 0x1c, 0x0}}, {{&(0x7f0000000400)={0xa, 0x201, 0x0, @private0}, 0x1c, &(0x7f00000002c0)=[{&(0x7f0000000d00)='[', 0x1}], 0x1}}], 0x2, 0x4008040) pselect6(0x40, &(0x7f0000000000)={0xa, 0x80000001, 0x2, 0x10000000000006, 0x12, 0x8, 0x80000000, 0x8}, 0x0, 0x0, 0x0, 0x0) setsockopt$inet6_tcp_TCP_CONGESTION(0xffffffffffffffff, 0x6, 0xd, &(0x7f0000000180)='cubic', 0x9) socket$nl_route(0x10, 0x3, 0x0) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000600)={0x18, 0x3, &(0x7f00000001c0)=ANY=[@ANYRESDEC=r0], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x41000}, 0x94) socket$netlink(0x10, 0x3, 0x8000000004) r4 = socket$netlink(0x10, 0x3, 0x0) r5 = socket(0x10, 0x803, 0x0) sendmsg$nl_route_sched(r5, &(0x7f00000003c0)={0x0, 0x0, &(0x7f0000000380)={0x0, 0x24}}, 0x0) getsockname$packet(r5, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x2ba) sendmsg$nl_route(r4, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000140)=ANY=[@ANYBLOB="3c0000001000850619fbb7c75150926b00000000", @ANYRES32=r6, @ANYBLOB="fe000000000000001c0012000c000100626f6e64"], 0x3c}}, 0x0) r7 = socket(0x10, 0x803, 0x0) r8 = socket(0x1, 0x803, 0x0) getsockname$packet(r8, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route(r7, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000240)=ANY=[@ANYBLOB="2c0000001400b59500000000000002000a782200", @ANYRES32=r9, @ANYBLOB="1400020000000000000000000000ffff000000bfa1c36161eb84fd1bd792b417b20400"], 0x2c}}, 0x0) 5.713727595s ago: executing program 6 (id=7671): socket$inet_icmp_raw(0x2, 0x3, 0x1) syz_init_net_socket$bt_hci(0x1f, 0x3, 0x5) close(0x4) syz_open_procfs$namespace(0x0, &(0x7f0000000080)='ns/ipc\x00') unshare(0x6a040000) r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_CREATE(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f00000004c0)={&(0x7f00000002c0)={0x4c, 0x2, 0x6, 0x801, 0x0, 0x0, {0x0, 0x0, 0x4}, [@IPSET_ATTR_SETNAME={0x9, 0x2, 'syz1\x00'}, @IPSET_ATTR_REVISION={0x5}, @IPSET_ATTR_TYPENAME={0x11, 0x3, 'hash:net,net\x00'}, @IPSET_ATTR_FAMILY={0x5, 0x5, 0x2}, @IPSET_ATTR_PROTOCOL={0x5, 0x1, 0x6}]}, 0x4c}}, 0x0) r1 = socket(0x29, 0x3, 0x0) socketpair$unix(0x1, 0x5, 0x0, &(0x7f00000002c0)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f0000000000)={'lo\x00'}) sendmsg$nl_route_sched(r1, 0x0, 0x0) sendmsg$IPSET_CMD_ADD(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000580)={0x50, 0x9, 0x6, 0x201, 0x0, 0x0, {0x1, 0x0, 0x3}, [@IPSET_ATTR_SETNAME={0x9, 0x2, 'syz1\x00'}, @IPSET_ATTR_PROTOCOL={0x5}, @IPSET_ATTR_DATA={0x28, 0x7, 0x0, 0x1, [@IPSET_ATTR_IP={0xc, 0x1, 0x0, 0x1, @IPSET_ATTR_IPADDR_IPV4={0x8, 0x1, 0x1, 0x0, @private=0xa010102}}, @IPSET_ATTR_IP2={0xc, 0x14, 0x0, 0x1, @IPSET_ATTR_IPADDR_IPV4={0x8, 0x1, 0x1, 0x0, @dev={0xac, 0x14, 0x14, 0x10}}}, @IPSET_ATTR_IP_TO={0xc, 0x2, 0x0, 0x1, @IPSET_ATTR_IPADDR_IPV4={0x8, 0x1, 0x1, 0x0, @broadcast}}]}]}, 0x50}, 0x1, 0x1000000, 0x0, 0x24004800}, 0x4) r3 = bpf$MAP_CREATE(0x0, &(0x7f0000000640)=ANY=[@ANYBLOB], 0x48) bpf$PROG_LOAD(0x5, &(0x7f0000000840)={0x1, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018", @ANYRES32=r3, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000000000000b70400000000000085000000c3"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2}, 0x94) bpf$PROG_LOAD(0x5, 0x0, 0x0) bpf$BPF_GET_PROG_INFO(0xa, 0x0, 0x0) r4 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX_802154(0xffffffffffffffff, 0x8933, &(0x7f0000000340)={'wpan0\x00'}) r5 = socket$l2tp6(0xa, 0x2, 0x73) setsockopt$IP6T_SO_SET_REPLACE(r5, 0x29, 0x40, &(0x7f0000000400)=@raw={'raw\x00', 0x3c1, 0x3, 0x398, 0x0, 0x1170, 0x1398, 0x160, 0x1170, 0x2c8, 0x1398, 0x1398, 0x2c8, 0x1398, 0x3, 0x0, {[{{@ipv6={@empty, @mcast1, [], [0x0, 0x0, 0xffffffff], 'ip6tnl0\x00', 'veth0_to_hsr\x00', {}, {}, 0x2f}, 0x0, 0xf8, 0x160, 0x0, {}, [@common=@inet=@socket3={{0x28}}, @common=@inet=@socket3={{0x28}, 0x5}]}, @unspec=@CT1={0x68, 'CT\x00', 0x1, {0x0, 0x0, 0x0, 0x0, 'syz1\x00', 'syz1\x00'}}}, {{@uncond, 0x0, 0x100, 0x168, 0x0, {}, [@common=@srh={{0x30}, {0x73, 0x5, 0x1, 0xe, 0x81, 0x420, 0x1004}}, @inet=@rpfilter={{0x28}}]}, @unspec=@CT2={0x68, 'CT\x00', 0x2, {0xc, 0xf, 0x0, 0x8, 'snmp_trap\x00', 'syz1\x00', {0x71}}}}], {{'\x00', 0x0, 0xa8, 0xd0}, {0x28}}}}, 0x3f8) r6 = openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0xc0041, 0x0) ioctl$TUNSETIFF(r6, 0x400454ca, &(0x7f0000000200)={'syzkaller1\x00', 0xc201}) ioctl$TUNSETVNETHDRSZ(r6, 0x400454d8, &(0x7f0000000140)=0x8001) sendmsg$NL802154_CMD_DEL_SEC_LEVEL(r4, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000000)=ANY=[@ANYBLOB='\x00\x00\x00\x00', @ANYRES16=0x0, @ANYBLOB], 0x38}, 0x1, 0x0, 0x0, 0x20000000}, 0x8000) socket(0x2b, 0x1, 0x0) getpeername$inet6(r5, &(0x7f0000000100)={0xa, 0x0, 0x0, @initdev}, &(0x7f00000001c0)=0x1c) unshare(0x2c020400) 5.647722554s ago: executing program 3 (id=7672): r0 = socket$netlink(0x10, 0x3, 0x0) r1 = socket(0x10, 0x803, 0x0) sendmsg$IPVS_CMD_SET_INFO(r1, &(0x7f0000000b00)={0x0, 0x0, &(0x7f0000000ac0)={0x0, 0x14}}, 0x0) getsockname$packet(r1, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000040)=0x14) sendmsg$nl_route(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000380)=ANY=[@ANYBLOB="3c0000001000850600"/20, @ANYRES32=r2, @ANYBLOB="0000000000004a641c0012000c000100626f6e64000000000c0002000800010006"], 0x3c}}, 0x0) sendmsg$nl_route(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000140)=ANY=[@ANYBLOB="3c00000010001fff0000000001000000000000d7", @ANYRES32=0x0, @ANYBLOB="0000000000000000140012800a000100767863616e0000000400028008000a00", @ANYRES32=r2], 0x3c}, 0x1, 0x0, 0x0, 0x40000}, 0x0) r3 = socket$nl_route(0x10, 0x3, 0x0) r4 = socket(0x1, 0x803, 0x0) r5 = socket$netlink(0x10, 0x3, 0x0) getsockopt$inet_sctp6_SCTP_PEER_ADDR_THLDS(r1, 0x84, 0x1f, &(0x7f0000000400)={0x0, @in={{0x2, 0x4e23, @loopback}}, 0x2, 0x1000}, 0x0) r6 = socket(0x10, 0x803, 0x8) sendmsg$IPVS_CMD_SET_INFO(r6, &(0x7f0000000b00)={0x0, 0x0, &(0x7f0000000ac0)={0x0, 0x14}}, 0x0) getsockname$packet(r6, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route(r5, &(0x7f00000000c0)={0x0, 0x60, &(0x7f0000000300)={&(0x7f0000000900)=ANY=[@ANYBLOB="5c00000010001ffffcffffff0000000000000000", @ANYRES32=0x0, @ANYBLOB="0000000000000000340012800b0001006772657461700000240002800800070064010100060003001008000008001500700f0d0008000700ac1414bb08000a00", @ANYRES32=r7], 0x5c}}, 0x40) getsockname$packet(r4, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f00000002c0)=0x14) sendmsg$nl_route(r3, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000380)=@newlink={0x44, 0x10, 0x401, 0x0, 0x0, {0x0, 0x0, 0x0, 0x0, 0x300}, [@IFLA_LINKINFO={0x14, 0x12, 0x0, 0x1, @macvlan={{0xc}, {0x4}}}, @IFLA_LINK={0x8, 0x5, r8}, @IFLA_MASTER={0x8, 0xa, r8}]}, 0x44}}, 0x884) 5.526923912s ago: executing program 7 (id=7673): r0 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_tcp_int(r0, 0x6, 0x13, &(0x7f0000000000)=0x100000001, 0x4) connect$inet6(r0, &(0x7f0000000200)={0xa, 0x4a61, 0x2, @loopback, 0xaa}, 0x1c) setsockopt$inet6_tcp_TCP_ULP(r0, 0x6, 0x1f, &(0x7f00000000c0), 0x4) setsockopt$inet6_tcp_TCP_REPAIR_QUEUE(r0, 0x6, 0x14, &(0x7f0000000080)=0x1, 0x4) setsockopt$inet6_tcp_TLS_TX(r0, 0x11a, 0x1, &(0x7f0000000140)=@gcm_128={{0x303}, "87ee8ac6c46dad33", "2607080d7f4fcf00fd4ef2dece6c7c58", '\x00', '#\x00'}, 0x28) setsockopt$inet6_tcp_TLS_TX(r0, 0x11a, 0x2, &(0x7f0000000680)=@gcm_128={{0x303}, "000037d7009400", "c0b6c5b29ca2b838d41ac2fc7ddf972d", "e9be1eae", "bb10000000000001"}, 0x28) syz_genetlink_get_family_id$nl80211(&(0x7f00000001c0), r0) 5.341111088s ago: executing program 7 (id=7674): socket$inet_icmp_raw(0x2, 0x3, 0x1) syz_init_net_socket$bt_hci(0x1f, 0x3, 0x5) close(0x4) syz_open_procfs$namespace(0x0, &(0x7f0000000080)='ns/ipc\x00') unshare(0x6a040000) r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_CREATE(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f00000004c0)={&(0x7f00000002c0)={0x4c, 0x2, 0x6, 0x801, 0x0, 0x0, {0x0, 0x0, 0x4}, [@IPSET_ATTR_SETNAME={0x9, 0x2, 'syz1\x00'}, @IPSET_ATTR_REVISION={0x5}, @IPSET_ATTR_TYPENAME={0x11, 0x3, 'hash:net,net\x00'}, @IPSET_ATTR_FAMILY={0x5, 0x5, 0x2}, @IPSET_ATTR_PROTOCOL={0x5, 0x1, 0x6}]}, 0x4c}}, 0x0) r1 = socket(0x29, 0x3, 0x0) socketpair$unix(0x1, 0x5, 0x0, &(0x7f00000002c0)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f0000000000)={'lo\x00'}) sendmsg$nl_route_sched(r1, 0x0, 0x0) sendmsg$IPSET_CMD_ADD(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000580)={0x50, 0x9, 0x6, 0x201, 0x0, 0x0, {0x1, 0x0, 0x3}, [@IPSET_ATTR_SETNAME={0x9, 0x2, 'syz1\x00'}, @IPSET_ATTR_PROTOCOL={0x5}, @IPSET_ATTR_DATA={0x28, 0x7, 0x0, 0x1, [@IPSET_ATTR_IP={0xc, 0x1, 0x0, 0x1, @IPSET_ATTR_IPADDR_IPV4={0x8, 0x1, 0x1, 0x0, @private=0xa010102}}, @IPSET_ATTR_IP2={0xc, 0x14, 0x0, 0x1, @IPSET_ATTR_IPADDR_IPV4={0x8, 0x1, 0x1, 0x0, @dev={0xac, 0x14, 0x14, 0x10}}}, @IPSET_ATTR_IP_TO={0xc, 0x2, 0x0, 0x1, @IPSET_ATTR_IPADDR_IPV4={0x8, 0x1, 0x1, 0x0, @broadcast}}]}]}, 0x50}, 0x1, 0x1000000, 0x0, 0x24004800}, 0x4) r3 = bpf$MAP_CREATE(0x0, &(0x7f0000000640)=ANY=[@ANYBLOB], 0x48) bpf$PROG_LOAD(0x5, &(0x7f0000000840)={0x1, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018", @ANYRES32=r3, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000000000000b70400000000000085000000c3"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2}, 0x94) bpf$PROG_LOAD(0x5, 0x0, 0x0) bpf$BPF_GET_PROG_INFO(0xa, 0x0, 0x0) socket(0xa, 0x3, 0xff) ioctl$sock_SIOCGIFINDEX_802154(0xffffffffffffffff, 0x8933, &(0x7f0000000340)={'wpan0\x00'}) r4 = socket$l2tp6(0xa, 0x2, 0x73) setsockopt$IP6T_SO_SET_REPLACE(r4, 0x29, 0x40, &(0x7f0000000400)=@raw={'raw\x00', 0x3c1, 0x3, 0x398, 0x0, 0x1170, 0x1398, 0x160, 0x1170, 0x2c8, 0x1398, 0x1398, 0x2c8, 0x1398, 0x3, 0x0, {[{{@ipv6={@empty, @mcast1, [], [0x0, 0x0, 0xffffffff], 'ip6tnl0\x00', 'veth0_to_hsr\x00', {}, {}, 0x2f}, 0x0, 0xf8, 0x160, 0x0, {}, [@common=@inet=@socket3={{0x28}}, @common=@inet=@socket3={{0x28}, 0x5}]}, @unspec=@CT1={0x68, 'CT\x00', 0x1, {0x0, 0x0, 0x0, 0x0, 'syz1\x00', 'syz1\x00'}}}, {{@uncond, 0x0, 0x100, 0x168, 0x0, {}, [@common=@srh={{0x30}, {0x73, 0x5, 0x1, 0xe, 0x81, 0x420, 0x1004}}, @inet=@rpfilter={{0x28}}]}, @unspec=@CT2={0x68, 'CT\x00', 0x2, {0xc, 0xf, 0x0, 0x8, 'snmp_trap\x00', 'syz1\x00', {0x71}}}}], {{'\x00', 0x0, 0xa8, 0xd0}, {0x28}}}}, 0x3f8) r5 = openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0xc0041, 0x0) ioctl$TUNSETIFF(r5, 0x400454ca, &(0x7f0000000200)={'syzkaller1\x00', 0xc201}) ioctl$TUNSETVNETHDRSZ(r5, 0x400454d8, &(0x7f0000000140)=0x8001) write$tun(r5, &(0x7f0000000040)=ANY=[@ANYRES16=r5, @ANYBLOB="e1ed7b240904fabe4afd320000c8e7a7a412232e84e348930eeb"], 0xfdef) sendmsg$NL802154_CMD_DEL_SEC_LEVEL(0xffffffffffffffff, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000000)=ANY=[@ANYBLOB='\x00\x00\x00\x00', @ANYRES16=0x0, @ANYBLOB], 0x38}, 0x1, 0x0, 0x0, 0x20000000}, 0x8000) socket(0x2b, 0x1, 0x0) getpeername$inet6(r4, &(0x7f0000000100)={0xa, 0x0, 0x0, @initdev}, &(0x7f00000001c0)=0x1c) unshare(0x2c020400) 4.726971961s ago: executing program 3 (id=7675): r0 = epoll_create1(0x0) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000180)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f00000bd000), 0x318, 0x0) epoll_pwait(r0, &(0x7f0000000140)=[{}], 0x1, 0x2d516fb6, 0x0, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) epoll_create1(0x0) epoll_ctl$EPOLL_CTL_ADD(r0, 0x1, r2, &(0x7f0000000100)={0x20000014}) epoll_wait(r0, &(0x7f0000000040)=[{}], 0x1, 0x400) unshare(0x2c020400) clock_gettime(0x0, 0x0) r3 = socket$inet6(0xa, 0x1, 0x8010800000000084) sendmmsg$inet6(r3, &(0x7f0000000040)=[{{&(0x7f0000000400)={0xa, 0x201, 0x0, @private0}, 0x1c, &(0x7f00000002c0)=[{&(0x7f0000000d00)='[', 0x1}], 0x1}}], 0x1, 0x4008040) pselect6(0x40, &(0x7f0000000000)={0xa, 0x80000001, 0x2, 0x10000000000006, 0x12, 0x8, 0x80000000, 0x8}, 0x0, 0x0, 0x0, 0x0) setsockopt$inet6_tcp_TCP_CONGESTION(0xffffffffffffffff, 0x6, 0xd, &(0x7f0000000180)='cubic', 0x9) socket$nl_route(0x10, 0x3, 0x0) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000600)={0x18, 0x3, &(0x7f00000001c0)=ANY=[@ANYRESDEC=r0], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x41000}, 0x94) socket$netlink(0x10, 0x3, 0x8000000004) r4 = socket$netlink(0x10, 0x3, 0x0) r5 = socket(0x10, 0x803, 0x0) sendmsg$nl_route_sched(r5, &(0x7f00000003c0)={0x0, 0x0, &(0x7f0000000380)={0x0, 0x24}}, 0x0) getsockname$packet(r5, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x2ba) sendmsg$nl_route(r4, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000140)=ANY=[@ANYBLOB="3c0000001000850619fbb7c75150926b00000000", @ANYRES32=r6, @ANYBLOB="fe000000000000001c0012000c000100626f6e64"], 0x3c}}, 0x0) r7 = socket(0x10, 0x803, 0x0) r8 = socket(0x1, 0x803, 0x0) getsockname$packet(r8, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route(r7, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000240)=ANY=[@ANYBLOB="2c0000001400b59500000000000002000a782200", @ANYRES32=r9, @ANYBLOB="1400020000000000000000000000ffff000000bfa1c36161eb84fd1bd792b417b20400"], 0x2c}}, 0x0) 3.99884852s ago: executing program 1 (id=7676): r0 = epoll_create1(0x0) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000180)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f00000bd000), 0x318, 0x0) epoll_pwait(r0, &(0x7f0000000140)=[{}], 0x1, 0x2d516fb6, 0x0, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) epoll_create1(0x0) epoll_ctl$EPOLL_CTL_ADD(r0, 0x1, r2, &(0x7f0000000100)={0x20000014}) epoll_wait(r0, &(0x7f0000000040)=[{}], 0x1, 0x400) unshare(0x2c020400) clock_gettime(0x0, 0x0) r3 = socket$inet6(0xa, 0x1, 0x8010800000000084) sendmmsg$inet6(r3, &(0x7f0000000040)=[{{&(0x7f0000000000)={0xa, 0x0, 0x0, @private0}, 0x1c, &(0x7f0000000600)=[{&(0x7f00000000c0)='/', 0x1}], 0x1}}, {{&(0x7f0000000400)={0xa, 0x201, 0x0, @private0}, 0x1c, &(0x7f00000002c0)=[{&(0x7f0000000d00)='[', 0x4d0}], 0x21}}], 0x2, 0x4008040) pselect6(0x40, &(0x7f0000000000)={0xa, 0x80000001, 0x2, 0x10000000000006, 0x12, 0x8, 0x80000000, 0x8}, 0x0, 0x0, 0x0, 0x0) setsockopt$inet6_tcp_TCP_CONGESTION(0xffffffffffffffff, 0x6, 0xd, &(0x7f0000000180)='cubic', 0x9) socket$nl_route(0x10, 0x3, 0x0) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000600)={0x18, 0x3, &(0x7f00000001c0)=ANY=[@ANYRESDEC=r0], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x41000}, 0x94) socket$netlink(0x10, 0x3, 0x8000000004) r4 = socket$netlink(0x10, 0x3, 0x0) r5 = socket(0x10, 0x803, 0x0) sendmsg$nl_route_sched(r5, &(0x7f00000003c0)={0x0, 0x0, 0x0}, 0x0) getsockname$packet(r5, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x2ba) sendmsg$nl_route(r4, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000140)=ANY=[@ANYBLOB="3c0000001000850619fbb7c75150926b00000000", @ANYRES32=r6, @ANYBLOB="fe000000000000001c0012000c000100626f6e64"], 0x3c}}, 0x0) r7 = socket(0x10, 0x803, 0x0) r8 = socket(0x1, 0x803, 0x0) getsockname$packet(r8, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route(r7, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000240)=ANY=[@ANYBLOB="2c0000001400b59500000000000002000a782200", @ANYRES32=r9, @ANYBLOB="1400020000000000000000000000ffff000000bfa1c36161eb84fd1bd792b417b20400"], 0x2c}}, 0x0) 3.983975473s ago: executing program 8 (id=7677): socket$inet_icmp_raw(0x2, 0x3, 0x1) syz_init_net_socket$bt_hci(0x1f, 0x3, 0x5) close(0x4) syz_open_procfs$namespace(0x0, &(0x7f0000000080)='ns/ipc\x00') unshare(0x6a040000) r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_CREATE(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f00000004c0)={&(0x7f00000002c0)={0x4c, 0x2, 0x6, 0x801, 0x0, 0x0, {0x0, 0x0, 0x4}, [@IPSET_ATTR_SETNAME={0x9, 0x2, 'syz1\x00'}, @IPSET_ATTR_REVISION={0x5}, @IPSET_ATTR_TYPENAME={0x11, 0x3, 'hash:net,net\x00'}, @IPSET_ATTR_FAMILY={0x5, 0x5, 0x2}, @IPSET_ATTR_PROTOCOL={0x5, 0x1, 0x6}]}, 0x4c}}, 0x0) socket(0x29, 0x3, 0x0) socketpair$unix(0x1, 0x5, 0x0, &(0x7f00000002c0)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000000)={'lo\x00'}) sendmsg$IPSET_CMD_ADD(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000580)={0x50, 0x9, 0x6, 0x201, 0x0, 0x0, {0x1, 0x0, 0x3}, [@IPSET_ATTR_SETNAME={0x9, 0x2, 'syz1\x00'}, @IPSET_ATTR_PROTOCOL={0x5}, @IPSET_ATTR_DATA={0x28, 0x7, 0x0, 0x1, [@IPSET_ATTR_IP={0xc, 0x1, 0x0, 0x1, @IPSET_ATTR_IPADDR_IPV4={0x8, 0x1, 0x1, 0x0, @private=0xa010102}}, @IPSET_ATTR_IP2={0xc, 0x14, 0x0, 0x1, @IPSET_ATTR_IPADDR_IPV4={0x8, 0x1, 0x1, 0x0, @dev={0xac, 0x14, 0x14, 0x10}}}, @IPSET_ATTR_IP_TO={0xc, 0x2, 0x0, 0x1, @IPSET_ATTR_IPADDR_IPV4={0x8, 0x1, 0x1, 0x0, @broadcast}}]}]}, 0x50}, 0x1, 0x1000000, 0x0, 0x24004800}, 0x4) r2 = bpf$MAP_CREATE(0x0, &(0x7f0000000640)=ANY=[@ANYBLOB], 0x48) bpf$PROG_LOAD(0x5, &(0x7f0000000840)={0x1, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018", @ANYRES32=r2, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000000000000b70400000000000085000000c3"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2}, 0x94) bpf$PROG_LOAD(0x5, 0x0, 0x0) bpf$BPF_GET_PROG_INFO(0xa, 0x0, 0x0) socket(0xa, 0x3, 0xff) r3 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX_802154(0xffffffffffffffff, 0x8933, &(0x7f0000000340)={'wpan0\x00'}) r4 = socket$l2tp6(0xa, 0x2, 0x73) setsockopt$IP6T_SO_SET_REPLACE(r4, 0x29, 0x40, &(0x7f0000000400)=@raw={'raw\x00', 0x3c1, 0x3, 0x398, 0x0, 0x1170, 0x1398, 0x160, 0x1170, 0x2c8, 0x1398, 0x1398, 0x2c8, 0x1398, 0x3, 0x0, {[{{@ipv6={@empty, @mcast1, [], [0x0, 0x0, 0xffffffff], 'ip6tnl0\x00', 'veth0_to_hsr\x00', {}, {}, 0x2f}, 0x0, 0xf8, 0x160, 0x0, {}, [@common=@inet=@socket3={{0x28}}, @common=@inet=@socket3={{0x28}, 0x5}]}, @unspec=@CT1={0x68, 'CT\x00', 0x1, {0x0, 0x0, 0x0, 0x0, 'syz1\x00', 'syz1\x00'}}}, {{@uncond, 0x0, 0x100, 0x168, 0x0, {}, [@common=@srh={{0x30}, {0x73, 0x5, 0x1, 0xe, 0x81, 0x420, 0x1004}}, @inet=@rpfilter={{0x28}}]}, @unspec=@CT2={0x68, 'CT\x00', 0x2, {0xc, 0xf, 0x0, 0x8, 'snmp_trap\x00', 'syz1\x00', {0x71}}}}], {{'\x00', 0x0, 0xa8, 0xd0}, {0x28}}}}, 0x3f8) r5 = openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0xc0041, 0x0) ioctl$TUNSETIFF(r5, 0x400454ca, &(0x7f0000000200)={'syzkaller1\x00', 0xc201}) ioctl$TUNSETVNETHDRSZ(r5, 0x400454d8, &(0x7f0000000140)=0x8001) write$tun(r5, &(0x7f0000000040)=ANY=[@ANYRES16=r5, @ANYBLOB="e1ed7b240904fabe4afd320000c8e7a7a412232e84e348930eeb"], 0xfdef) sendmsg$NL802154_CMD_DEL_SEC_LEVEL(r3, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000000)=ANY=[@ANYBLOB='\x00\x00\x00\x00', @ANYRES16=0x0, @ANYBLOB], 0x38}, 0x1, 0x0, 0x0, 0x20000000}, 0x8000) socket(0x2b, 0x1, 0x0) getpeername$inet6(r4, &(0x7f0000000100)={0xa, 0x0, 0x0, @initdev}, &(0x7f00000001c0)=0x1c) unshare(0x2c020400) 2.567313964s ago: executing program 1 (id=7678): syz_init_net_socket$llc(0x1a, 0x1, 0x0) r0 = bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000240)={0x2, 0x4, 0x8, 0x1, 0x80, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0x0}, 0x48) r1 = bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f00000007c0)={0x1b, 0x0, 0x0, 0x40000, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0}, 0x48) bpf$PROG_LOAD(0x5, &(0x7f0000000840)={0x7, 0x1c, &(0x7f0000000d80)=ANY=[@ANYBLOB="1808000040000000000000000000000018110000", @ANYRES32=r1, @ANYBLOB="0000000000000000b702000014000000b7030000530000008500000005000000bca90000000000003509020000d44a6be5000d0000000000b702000000000000739af0ff00000000c509040004100000c3aaf0ff00000000bf8600000000000007080000f8ffffffbfa400000000000007060000f0ffffffb70200000800000018220000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7050000080000004608f0ff76000000bf9800000000000056080000000000008500000007000000b70000000000000095"], &(0x7f0000000980)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0xb, '\x00', 0x0, @fallback=0x22, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r2 = socket$inet_tcp(0x2, 0x1, 0x0) bind$inet(r2, &(0x7f0000000000)={0x2, 0x4e21, @broadcast}, 0x10) setsockopt$inet_tcp_TCP_CONGESTION(r2, 0x6, 0xd, &(0x7f0000000040)='scalable', 0x8) connect$inet(r2, &(0x7f0000000180)={0x2, 0x4e21, @dev={0xac, 0x14, 0x14, 0x1b}}, 0x10) r3 = socket$nl_generic(0x10, 0x3, 0x10) r4 = socket$nl_generic(0x10, 0x3, 0x10) r5 = syz_genetlink_get_family_id$SEG6(&(0x7f0000004040), 0xffffffffffffffff) r6 = openat$tun(0xffffffffffffff9c, &(0x7f0000000080), 0x1c1341, 0x0) ioctl$TUNSETIFF(r6, 0x400454ca, &(0x7f00000000c0)={'syzkaller0\x00', 0x84aebfbd6349b7f2}) r7 = openat$tun(0xffffffffffffff9c, &(0x7f0000000280), 0x0, 0x0) ioctl$TUNSETQUEUE(r6, 0x400454d9, &(0x7f0000000000)={'ip6gre0\x00', 0x400}) close(r7) sendmmsg$alg(0xffffffffffffffff, &(0x7f0000000040)=[{0x0, 0x0, &(0x7f0000000300)=[{0x0}, {0x0}, {0x0}, {0x0}, {0x0}], 0x5}], 0x1, 0x40800) ioctl$sock_SIOCGIFINDEX_80211(0xffffffffffffffff, 0x8933, 0x0) r8 = socket$nl_route(0x10, 0x3, 0x0) ioctl(r8, 0x8b2a, &(0x7f0000000040)) writev(r6, &(0x7f0000000100), 0x0) sendmsg$SEG6_CMD_SETHMAC(r4, &(0x7f0000004140)={0x0, 0x0, &(0x7f0000004100)={&(0x7f0000004080)={0x30, r5, 0x1, 0x70bd2d, 0x25dfdbfe, {}, [@SEG6_ATTR_ALGID={0x5, 0x6, 0x2}, @SEG6_ATTR_SECRETLEN={0x5, 0x5, 0x4}, @SEG6_ATTR_HMACKEYID={0x8, 0x3, 0x7}, @SEG6_ATTR_SECRET={0x4}]}, 0x30}, 0x1, 0x0, 0x0, 0x4845}, 0x20000080) sendmsg$SEG6_CMD_SET_TUNSRC(r3, &(0x7f00000001c0)={&(0x7f00000000c0)={0x10, 0x0, 0x0, 0x4000}, 0xc, &(0x7f0000000140)={&(0x7f0000000100)={0x20, r5, 0x218, 0x70bd29, 0x25dfdbfc, {}, [@SEG6_ATTR_SECRET={0xc, 0x4, [0x1, 0x6]}]}, 0x20}, 0x1, 0x0, 0x0, 0x4000}, 0x8000) sendto$inet(r2, &(0x7f00000000c0), 0xffffffffffffffef, 0x0, 0x0, 0x0) recvfrom$inet(r2, &(0x7f0000000080)=""/8, 0xfffffffffffffd0b, 0x720, 0x0, 0xfffffffffffffd25) 2.485601245s ago: executing program 6 (id=7679): r0 = socket$alg(0x26, 0x5, 0x0) bind$alg(r0, 0x0, 0x0) setsockopt$ALG_SET_KEY(r0, 0x117, 0x1, &(0x7f0000c18000)="ad56b6c5820fae9d6dcd3292ea54c7beef91", 0x12) r1 = socket$inet6_sctp(0xa, 0x5, 0x84) shutdown(r1, 0x0) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, 0x0, 0x0) socket$key(0xf, 0x3, 0x2) openat$nci(0xffffffffffffff9c, &(0x7f0000000080), 0x2, 0x0) socket$nl_audit(0x10, 0x3, 0x9) sendmsg$kcm(0xffffffffffffffff, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000080)=[{&(0x7f0000000040)}], 0x1}, 0x0) r2 = socket$kcm(0x2b, 0x1, 0x0) close(r2) socket$kcm(0x2, 0x1, 0x106) close(r2) syz_genetlink_get_family_id$nl80211(&(0x7f0000000080), 0xffffffffffffffff) socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000100)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000140)=@ipv6_newnexthop={0x1c, 0x68, 0x5fb9a818fb7378e9, 0x0, 0x0, {}, [@NHA_BLACKHOLE={0x4}]}, 0x1c}}, 0x0) socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000280)={0x0, 0xfffffffffffffda3, &(0x7f0000000180)={&(0x7f0000000200)=@delnexthop={0x20, 0x69, 0xb, 0x0, 0x0, {}, [{0x8, 0x1, 0x1}]}, 0x20}}, 0x4000000) 2.463346712s ago: executing program 3 (id=7680): r0 = epoll_create1(0x0) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000180)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f00000bd000), 0x318, 0x0) epoll_pwait(r0, &(0x7f0000000140)=[{}], 0x1, 0x2d516fb6, 0x0, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) epoll_create1(0x0) epoll_ctl$EPOLL_CTL_ADD(r0, 0x1, r2, &(0x7f0000000100)={0x20000014}) epoll_wait(r0, &(0x7f0000000040)=[{}], 0x1, 0x400) unshare(0x2c020400) clock_gettime(0x0, 0x0) r3 = socket$inet6(0xa, 0x1, 0x8010800000000084) sendmmsg$inet6(r3, &(0x7f0000000040)=[{{&(0x7f0000000000)={0xa, 0x0, 0x0, @private0}, 0x1c, &(0x7f0000000600)}}, {{&(0x7f0000000400)={0xa, 0x201, 0x0, @private0}, 0x1c, &(0x7f00000002c0)=[{&(0x7f0000000d00)='[', 0x1}], 0x1}}], 0x2, 0x4008040) pselect6(0x40, &(0x7f0000000000)={0xa, 0x80000001, 0x2, 0x10000000000006, 0x12, 0x8, 0x80000000, 0x8}, 0x0, 0x0, 0x0, 0x0) setsockopt$inet6_tcp_TCP_CONGESTION(0xffffffffffffffff, 0x6, 0xd, &(0x7f0000000180)='cubic', 0x9) socket$nl_route(0x10, 0x3, 0x0) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000600)={0x18, 0x3, &(0x7f00000001c0)=ANY=[@ANYRESDEC=r0], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x41000}, 0x94) socket$netlink(0x10, 0x3, 0x8000000004) r4 = socket$netlink(0x10, 0x3, 0x0) r5 = socket(0x10, 0x803, 0x0) sendmsg$nl_route_sched(r5, &(0x7f00000003c0)={0x0, 0x0, &(0x7f0000000380)={0x0, 0x24}}, 0x0) getsockname$packet(r5, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x2ba) sendmsg$nl_route(r4, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000140)=ANY=[@ANYBLOB="3c0000001000850619fbb7c75150926b00000000", @ANYRES32=r6, @ANYBLOB="fe000000000000001c0012000c000100626f6e64"], 0x3c}}, 0x0) r7 = socket(0x10, 0x803, 0x0) r8 = socket(0x1, 0x803, 0x0) getsockname$packet(r8, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route(r7, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000240)=ANY=[@ANYBLOB="2c0000001400b59500000000000002000a782200", @ANYRES32=r9, @ANYBLOB="1400020000000000000000000000ffff000000bfa1c36161eb84fd1bd792b417b20400"], 0x2c}}, 0x0) 2.325286634s ago: executing program 6 (id=7681): syz_init_net_socket$llc(0x1a, 0x1, 0x0) r0 = bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000240)={0x2, 0x4, 0x8, 0x1, 0x80, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0x0}, 0x48) r1 = bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f00000007c0)={0x1b, 0x0, 0x0, 0x40000, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0}, 0x48) bpf$PROG_LOAD(0x5, &(0x7f0000000840)={0x7, 0x1c, &(0x7f0000000d80)=ANY=[@ANYBLOB="1808000040000000000000000000000018110000", @ANYRES32=r1, @ANYBLOB="0000000000000000b702000014000000b7030000530000008500000005000000bca90000000000003509020000d44a6be5000d0000000000b702000000000000739af0ff00000000c509040004100000c3aaf0ff00000000bf8600000000000007080000f8ffffffbfa400000000000007060000f0ffffffb70200000800000018220000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7050000080000004608f0ff76000000bf9800000000000056080000000000008500000007000000b70000000000000095"], &(0x7f0000000980)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0xb, '\x00', 0x0, @fallback=0x22, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r2 = socket$inet_tcp(0x2, 0x1, 0x0) bind$inet(r2, &(0x7f0000000000)={0x2, 0x4e21, @broadcast}, 0x10) setsockopt$inet_tcp_TCP_CONGESTION(r2, 0x6, 0xd, &(0x7f0000000040)='scalable', 0x8) sendmmsg$alg(0xffffffffffffffff, &(0x7f0000000040)=[{0x0, 0x0, &(0x7f0000000300)=[{0x0}, {0x0}, {0x0}, {0x0}, {0x0}], 0x5}], 0x1, 0x40800) ioctl$sock_SIOCGIFINDEX_80211(0xffffffffffffffff, 0x8933, &(0x7f0000000040)={'wlan1\x00'}) r3 = socket$nl_route(0x10, 0x3, 0x0) ioctl(r3, 0x8b2a, &(0x7f0000000040)) 1.942335054s ago: executing program 6 (id=7682): r0 = socket$unix(0x1, 0x1, 0x0) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000300)=@newqdisc={0x24, 0x28, 0x4ee4e6a52ff56541, 0x4001, 0xffffbddc, {0x0, 0x0, 0x0, r1, {0x10}, {}, {0xe, 0xb}}}, 0x24}, 0x1, 0x0, 0x0, 0x4040098}, 0x4000) 1.258946134s ago: executing program 1 (id=7683): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_CREATE(0xffffffffffffffff, &(0x7f0000000000)={0x0, 0x0, &(0x7f00000004c0)={&(0x7f0000000500)=ANY=[@ANYBLOB="6400000002060500000000000000000000000000120003006269746d61703a69702c6d6163000000050004"], 0x64}, 0x1, 0x0, 0x0, 0x4810}, 0x10) r1 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r2 = syz_genetlink_get_family_id$nl802154(&(0x7f0000000180), 0xffffffffffffffff) ioctl$TUNSETIFF(0xffffffffffffffff, 0x400454ca, &(0x7f0000000080)={'pimreg0\x00', 0x7c2}) ioctl$TUNATTACHFILTER(0xffffffffffffffff, 0x401054d5, &(0x7f0000000040)={0x1, &(0x7f0000000000)=[{0x6}]}) ioctl$TUNSETQUEUE(0xffffffffffffffff, 0x400454d9, &(0x7f00000000c0)={'veth0_to_batadv\x00', 0x400}) openat$tcp_congestion(0xffffffffffffff9c, &(0x7f00000000c0), 0x1, 0x0) r3 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='memory.events\x00', 0x275a, 0x0) write$cgroup_subtree(r3, &(0x7f0000000080)=ANY=[], 0x10448) mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x2000001, 0x12, r3, 0x0) mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000040)='./cgroup.net/syz0\x00', 0x1ff) ioctl$TUNSETQUEUE(0xffffffffffffffff, 0x400454d9, &(0x7f0000000140)={'veth0_macvtap\x00', 0x200}) r4 = socket$packet(0x11, 0x2, 0x300) setsockopt$SO_ATTACH_FILTER(r4, 0x1, 0x1a, &(0x7f0000000000)={0x5, &(0x7f0000000280)=[{0x30, 0xfe, 0x0, 0xfffff02c}, {0x6, 0x0, 0x0, 0x40}, {0x800, 0x82, 0x1}, {0x4, 0x6, 0x7, 0x10001}, {0xc, 0x7, 0x7, 0x453}]}, 0x10) sendmsg$NBD_CMD_CONNECT(r1, &(0x7f0000000240)={&(0x7f0000000080)={0x10, 0x0, 0x0, 0x4000000}, 0xc, &(0x7f0000000200)={&(0x7f0000000100)=ANY=[@ANYBLOB='H\x00\x00\x00', @ANYRES16, @ANYBLOB="000126bd7000fddbdf2501000000100007800c00018008000100", @ANYRES32, @ANYBLOB="0c00040004000000000000000900080009000000000000000c0004000000000000000080"], 0x48}, 0x1, 0x0, 0x0, 0x44084}, 0xc27f9220204f4547) ioctl$sock_SIOCGIFINDEX_802154(r1, 0x8933, &(0x7f00000001c0)={'wpan0\x00', 0x0}) sendmsg$NL802154_CMD_NEW_SEC_KEY(r1, &(0x7f00000003c0)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f0000000500)=ANY=[@ANYBLOB='|\x00\x00\x00', @ANYRES16=r2, @ANYBLOB="3f9d00000000000000001700000008000300", @ANYRES32=r5, @ANYBLOB="600030800500"], 0x7c}, 0x1, 0x0, 0x0, 0x4004}, 0x0) r6 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r6, 0x0, 0x0) r7 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r7, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000200)=ANY=[@ANYBLOB="2800000021000100"], 0x28}}, 0x0) sendmsg$IPCTNL_MSG_CT_NEW(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000d00)=ANY=[@ANYBLOB="6801000000010104000000000000000002003a00080003400000100e080007400000000024000280140001800800010000000000080002007f0000010c00028005000100000000001400108008000140000000000800024000000000240001801400018008000100e000000108000200e00000010c000280050001000000000034000f80080001"], 0x168}}, 0x0) socket$nl_xfrm(0x10, 0x3, 0x6) 1.243027527s ago: executing program 8 (id=7684): socket$inet_icmp_raw(0x2, 0x3, 0x1) syz_init_net_socket$bt_hci(0x1f, 0x3, 0x5) close(0x4) syz_open_procfs$namespace(0x0, &(0x7f0000000080)='ns/ipc\x00') unshare(0x6a040000) r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_CREATE(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f00000004c0)={&(0x7f00000002c0)={0x4c, 0x2, 0x6, 0x801, 0x0, 0x0, {0x0, 0x0, 0x4}, [@IPSET_ATTR_SETNAME={0x9, 0x2, 'syz1\x00'}, @IPSET_ATTR_REVISION={0x5}, @IPSET_ATTR_TYPENAME={0x11, 0x3, 'hash:net,net\x00'}, @IPSET_ATTR_FAMILY={0x5, 0x5, 0x2}, @IPSET_ATTR_PROTOCOL={0x5, 0x1, 0x6}]}, 0x4c}}, 0x0) r1 = socket(0x29, 0x3, 0x0) socketpair$unix(0x1, 0x5, 0x0, &(0x7f00000002c0)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f0000000000)={'lo\x00'}) sendmsg$nl_route_sched(r1, 0x0, 0x0) sendmsg$IPSET_CMD_ADD(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000580)={0x50, 0x9, 0x6, 0x201, 0x0, 0x0, {0x1, 0x0, 0x3}, [@IPSET_ATTR_SETNAME={0x9, 0x2, 'syz1\x00'}, @IPSET_ATTR_PROTOCOL={0x5}, @IPSET_ATTR_DATA={0x28, 0x7, 0x0, 0x1, [@IPSET_ATTR_IP={0xc, 0x1, 0x0, 0x1, @IPSET_ATTR_IPADDR_IPV4={0x8, 0x1, 0x1, 0x0, @private=0xa010102}}, @IPSET_ATTR_IP2={0xc, 0x14, 0x0, 0x1, @IPSET_ATTR_IPADDR_IPV4={0x8, 0x1, 0x1, 0x0, @dev={0xac, 0x14, 0x14, 0x10}}}, @IPSET_ATTR_IP_TO={0xc, 0x2, 0x0, 0x1, @IPSET_ATTR_IPADDR_IPV4={0x8, 0x1, 0x1, 0x0, @broadcast}}]}]}, 0x50}, 0x1, 0x1000000, 0x0, 0x24004800}, 0x4) r3 = bpf$MAP_CREATE(0x0, &(0x7f0000000640)=ANY=[@ANYBLOB], 0x48) bpf$PROG_LOAD(0x5, &(0x7f0000000840)={0x1, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018", @ANYRES32=r3, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000000000000b70400000000000085000000c3"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2}, 0x94) bpf$PROG_LOAD(0x5, 0x0, 0x0) bpf$BPF_GET_PROG_INFO(0xa, 0x0, 0x0) r4 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX_802154(0xffffffffffffffff, 0x8933, &(0x7f0000000340)={'wpan0\x00'}) r5 = socket$l2tp6(0xa, 0x2, 0x73) setsockopt$IP6T_SO_SET_REPLACE(r5, 0x29, 0x40, &(0x7f0000000400)=@raw={'raw\x00', 0x3c1, 0x3, 0x398, 0x0, 0x1170, 0x1398, 0x160, 0x1170, 0x2c8, 0x1398, 0x1398, 0x2c8, 0x1398, 0x3, 0x0, {[{{@ipv6={@empty, @mcast1, [], [0x0, 0x0, 0xffffffff], 'ip6tnl0\x00', 'veth0_to_hsr\x00', {}, {}, 0x2f}, 0x0, 0xf8, 0x160, 0x0, {}, [@common=@inet=@socket3={{0x28}}, @common=@inet=@socket3={{0x28}, 0x5}]}, @unspec=@CT1={0x68, 'CT\x00', 0x1, {0x0, 0x0, 0x0, 0x0, 'syz1\x00', 'syz1\x00'}}}, {{@uncond, 0x0, 0x100, 0x168, 0x0, {}, [@common=@srh={{0x30}, {0x73, 0x5, 0x1, 0xe, 0x81, 0x420, 0x1004}}, @inet=@rpfilter={{0x28}}]}, @unspec=@CT2={0x68, 'CT\x00', 0x2, {0xc, 0xf, 0x0, 0x8, 'snmp_trap\x00', 'syz1\x00', {0x71}}}}], {{'\x00', 0x0, 0xa8, 0xd0}, {0x28}}}}, 0x3f8) r6 = openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0xc0041, 0x0) ioctl$TUNSETIFF(r6, 0x400454ca, &(0x7f0000000200)={'syzkaller1\x00', 0xc201}) ioctl$TUNSETVNETHDRSZ(r6, 0x400454d8, &(0x7f0000000140)=0x8001) sendmsg$NL802154_CMD_DEL_SEC_LEVEL(r4, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000000)=ANY=[@ANYBLOB='\x00\x00\x00\x00', @ANYRES16=0x0, @ANYBLOB], 0x38}, 0x1, 0x0, 0x0, 0x20000000}, 0x8000) socket(0x2b, 0x1, 0x0) getpeername$inet6(r5, &(0x7f0000000100)={0xa, 0x0, 0x0, @initdev}, &(0x7f00000001c0)=0x1c) unshare(0x2c020400) 1.240977585s ago: executing program 7 (id=7685): bpf$MAP_CREATE(0x0, 0x0, 0x0) bpf$PROG_LOAD(0x5, &(0x7f00000004c0)={0xc, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r0 = socket$nl_route(0x10, 0x3, 0x0) ioctl$BTRFS_IOC_GET_DEV_STATS(r0, 0xc4089434, 0x0) ioctl$BTRFS_IOC_SCRUB(0xffffffffffffffff, 0xc400941b, &(0x7f0000001240)={0x0, 0x80000000, 0x2}) socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$nl_generic(0xffffffffffffffff, 0x0, 0x0) r1 = openat$tun(0xffffffffffffff9c, &(0x7f0000000080), 0x1c1342, 0x0) r2 = openat$tun(0xffffffffffffff9c, &(0x7f0000000400), 0x0, 0x0) close(r2) socket$nl_route(0x10, 0x3, 0x0) r3 = socket$nl_generic(0x10, 0x3, 0x10) r4 = syz_genetlink_get_family_id$tipc(&(0x7f0000000300), 0xffffffffffffffff) sendmsg$TIPC_CMD_ENABLE_BEARER(r3, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000680)=ANY=[@ANYBLOB='8\x00\x00\x00', @ANYRES16=r4, @ANYBLOB="010000000d0000000000010000000000000001410000001c001700000000000000006574683a73797a6b616c6c657230"], 0x38}, 0x1, 0x0, 0x0, 0x4}, 0x0) ioctl$SIOCSIFHWADDR(r2, 0x8914, &(0x7f0000002280)={'syzkaller0\x00', @multicast}) writev(r1, &(0x7f00000001c0)=[{&(0x7f0000000040)="89e7ee0c7cdae2b4b47380c988cafb", 0xf}, {&(0x7f0000000100)="44147cff000000000000108a15dfcedc89168e48c8c9d99080a0221edc195f405e83beedbb96ea9121c6b6fdd68b", 0x2e}], 0x2) 1.11919818s ago: executing program 6 (id=7686): r0 = socket$inet_tcp(0x2, 0x1, 0x0) bind$inet(r0, &(0x7f0000000240)={0x2, 0x4e20, @multicast1}, 0x10) connect$inet(r0, &(0x7f0000ccb000)={0x2, 0x4e20, @local}, 0x10) r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000100)={0x1, 0x3, &(0x7f0000001a00)=ANY=[@ANYBLOB="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"], &(0x7f00002bf000)='GPL\x00', 0x4, 0xb7, &(0x7f0000000040)=""/183, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0x8}, 0x94) r2 = socket$kcm(0x29, 0x2, 0x0) ioctl$sock_kcm_SIOCKCMATTACH(r2, 0x89e0, &(0x7f0000000180)={r0, r1}) socket$nl_netfilter(0x10, 0x3, 0xc) r3 = socket$inet_sctp(0x2, 0x1, 0x84) sendto$inet(r3, &(0x7f0000000140)='^', 0x34000, 0x0, &(0x7f0000004ff0)={0x2, 0x0, @rand_addr=0xfffffffffffffffe}, 0x10) bpf$BPF_PROG_DETACH(0x9, &(0x7f0000007bc0)={@cgroup, 0xffffffffffffffff, 0x18, 0x10}, 0x20) ioctl$sock_SIOCGIFINDEX_80211(0xffffffffffffffff, 0x8933, 0x0) pipe(&(0x7f0000000100)={0xffffffffffffffff, 0xffffffffffffffff}) close(0x4) syz_init_net_socket$bt_hci(0x1f, 0x3, 0x5) close(0x4) syz_open_procfs$namespace(0x0, &(0x7f0000000040)='ns/cgroup\x00') socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$ethtool(0x0, 0xffffffffffffffff) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f07ebbeef, 0x8031, 0xffffffffffffffff, 0x215eb000) r5 = socket(0x14, 0x2, 0x4) ioctl$sock_SIOCGIFINDEX(r5, 0x61d0, 0x0) listen(r3, 0xfff) bpf$PROG_LOAD(0x5, &(0x7f0000000100)={0x6, 0xc, &(0x7f0000000000)=ANY=[@ANYBLOB="1800000000000000000000000000000085000000d1000000180100002020702500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b70300000000000085000000b40000009517"], &(0x7f0000000300)='GPL\x00', 0x6, 0x0, 0x0, 0x41100, 0x2, '\x00', 0x0, @fallback=0x29, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x9}, 0x94) sendmmsg$inet(r2, &(0x7f00000028c0)=[{{0x0, 0x0, &(0x7f0000000200)}}, {{0x0, 0x0, 0x0}}], 0x2, 0x40) close(r2) r6 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000000), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(0xffffffffffffffff, 0x8933, &(0x7f0000000240)={'wlan0\x00', 0x0}) sendmsg$NL80211_CMD_SET_MCAST_RATE(0xffffffffffffffff, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000280)={0x1c, r6, 0x1, 0x0, 0x25dfdbfe, {{0x53}, {@val={0x8, 0x3, r7}, @void}}}, 0x1c}}, 0x0) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f0000000280)={'wlan0\x00', 0x0}) sendmsg$NL80211_CMD_JOIN_MESH(r4, &(0x7f00000003c0)={&(0x7f00000001c0)={0x10, 0x0, 0x0, 0x2c8981}, 0xc, &(0x7f00000002c0)={&(0x7f0000000340)={0x54, r6, 0x412, 0x70bd27, 0x25dfdbfc, {{}, {@val={0x8, 0x3, r8}, @void}}, [@chandef_params=[@NL80211_ATTR_WIPHY_CHANNEL_TYPE={0x8, 0x27, 0x1}], @NL80211_ATTR_DTIM_PERIOD={0x8, 0xd, 0xfffffff9}, @NL80211_ATTR_CONTROL_PORT_OVER_NL80211={0x4}, @NL80211_ATTR_HANDLE_DFS={0x4}, @NL80211_ATTR_MESH_SETUP={0x18, 0x70, [@NL80211_MESH_SETUP_USERSPACE_MPM={0x4}, @NL80211_MESH_SETUP_ENABLE_VENDOR_SYNC={0x5, 0x6, 0x1}, @NL80211_MESH_SETUP_ENABLE_VENDOR_METRIC={0x5, 0x2, 0x1}]}, @chandef_params=[@NL80211_ATTR_CENTER_FREQ1={0x8, 0xa0, 0x1}]]}, 0x54}, 0x1, 0x0, 0x0, 0x20008010}, 0x24000800) 1.010557249s ago: executing program 7 (id=7687): r0 = socket$netlink(0x10, 0x3, 0x0) r1 = socket(0x10, 0x803, 0x0) sendmsg$IPVS_CMD_SET_INFO(r1, &(0x7f0000000b00)={0x0, 0x0, &(0x7f0000000ac0)={0x0, 0x14}}, 0x0) getsockname$packet(r1, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000040)=0x14) sendmsg$nl_route(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000380)=ANY=[@ANYBLOB="3c0000001000850600"/20, @ANYRES32=r2, @ANYBLOB="0000000000004a641c0012000c000100626f6e64000000000c0002000800010006"], 0x3c}}, 0x0) sendmsg$nl_route(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000140)=ANY=[@ANYBLOB="3c00000010001fff0000000001000000000000d7", @ANYRES32=0x0, @ANYBLOB="0000000000000000140012800a000100767863616e0000000400028008000a00", @ANYRES32=r2], 0x3c}, 0x1, 0x0, 0x0, 0x40000}, 0x0) r3 = socket$nl_route(0x10, 0x3, 0x0) r4 = socket(0x1, 0x803, 0x0) r5 = socket$netlink(0x10, 0x3, 0x0) getsockopt$inet_sctp6_SCTP_PEER_ADDR_THLDS(r1, 0x84, 0x1f, &(0x7f0000000400)={0x0, @in={{0x2, 0x4e23, @loopback}}, 0x2, 0x1000}, 0x0) r6 = socket(0x10, 0x803, 0x8) sendmsg$IPVS_CMD_SET_INFO(r6, &(0x7f0000000b00)={0x0, 0x0, &(0x7f0000000ac0)={0x0, 0x14}}, 0x0) getsockname$packet(r6, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route(r5, &(0x7f00000000c0)={0x0, 0x60, &(0x7f0000000300)={&(0x7f0000000900)=ANY=[@ANYBLOB="5c00000010001ffffcffffff0000000000000000", @ANYRES32=0x0, @ANYBLOB="0000000000000000340012800b0001006772657461700000240002800800070064010100060003001008000008001500700f0d0008000700ac1414bb08000a00", @ANYRES32=r7], 0x5c}}, 0x40) getsockname$packet(r4, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f00000002c0)=0x14) sendmsg$nl_route(r3, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000380)=@newlink={0x44, 0x10, 0x401, 0x0, 0x0, {0x0, 0x0, 0x0, 0x0, 0x300}, [@IFLA_LINKINFO={0x1c, 0x12, 0x0, 0x1, @macvlan={{0xc}, {0xc, 0x2, 0x0, 0x1, [@IFLA_MACVLAN_MODE={0x8, 0x1, 0x8}]}}}, @IFLA_LINK={0x8, 0x5, r8}]}, 0x44}}, 0x884) 921.062225ms ago: executing program 3 (id=7688): r0 = epoll_create1(0x0) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000180)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f00000bd000), 0x318, 0x0) epoll_pwait(r0, &(0x7f0000000140)=[{}], 0x1, 0x2d516fb6, 0x0, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) epoll_create1(0x0) epoll_ctl$EPOLL_CTL_ADD(r0, 0x1, r2, &(0x7f0000000100)={0x20000014}) epoll_wait(r0, &(0x7f0000000040)=[{}], 0x1, 0x400) unshare(0x2c020400) clock_gettime(0x0, 0x0) r3 = socket$inet6(0xa, 0x1, 0x8010800000000084) sendmmsg$inet6(r3, &(0x7f0000000040)=[{{&(0x7f0000000000)={0xa, 0x0, 0x0, @private0}, 0x1c, &(0x7f0000000600)=[{&(0x7f00000000c0)='/', 0x1}], 0x1}}, {{&(0x7f0000000400)={0xa, 0x201, 0x0, @private0}, 0x1c, &(0x7f00000002c0)=[{&(0x7f0000000d00)='[', 0x4d0}], 0x21}}], 0x2, 0x4008040) pselect6(0x40, &(0x7f0000000000)={0xa, 0x80000001, 0x2, 0x10000000000006, 0x12, 0x8, 0x80000000, 0x8}, 0x0, 0x0, 0x0, 0x0) setsockopt$inet6_tcp_TCP_CONGESTION(0xffffffffffffffff, 0x6, 0xd, &(0x7f0000000180)='cubic', 0x9) socket$nl_route(0x10, 0x3, 0x0) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000600)={0x18, 0x3, &(0x7f00000001c0)=ANY=[@ANYRESDEC=r0], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x41000}, 0x94) socket$netlink(0x10, 0x3, 0x8000000004) r4 = socket$netlink(0x10, 0x3, 0x0) r5 = socket(0x10, 0x803, 0x0) sendmsg$nl_route_sched(r5, &(0x7f00000003c0)={0x0, 0x0, 0x0}, 0x0) getsockname$packet(r5, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x2ba) sendmsg$nl_route(r4, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000140)=ANY=[@ANYBLOB="3c0000001000850619fbb7c75150926b00000000", @ANYRES32=r6, @ANYBLOB="fe000000000000001c0012000c000100626f6e64"], 0x3c}}, 0x0) r7 = socket(0x10, 0x803, 0x0) r8 = socket(0x1, 0x803, 0x0) getsockname$packet(r8, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route(r7, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000240)=ANY=[@ANYBLOB="2c0000001400b59500000000000002000a782200", @ANYRES32=r9, @ANYBLOB="1400020000000000000000000000ffff000000bfa1c36161eb84fd1bd792b417b20400"], 0x2c}}, 0x0) 757.301821ms ago: executing program 1 (id=7689): socket$inet_icmp_raw(0x2, 0x3, 0x1) syz_init_net_socket$bt_hci(0x1f, 0x3, 0x5) close(0x4) syz_open_procfs$namespace(0x0, &(0x7f0000000080)='ns/ipc\x00') unshare(0x6a040000) r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_CREATE(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f00000004c0)={&(0x7f00000002c0)={0x4c, 0x2, 0x6, 0x801, 0x0, 0x0, {0x0, 0x0, 0x4}, [@IPSET_ATTR_SETNAME={0x9, 0x2, 'syz1\x00'}, @IPSET_ATTR_REVISION={0x5}, @IPSET_ATTR_TYPENAME={0x11, 0x3, 'hash:net,net\x00'}, @IPSET_ATTR_FAMILY={0x5, 0x5, 0x2}, @IPSET_ATTR_PROTOCOL={0x5, 0x1, 0x6}]}, 0x4c}}, 0x0) r1 = socket(0x29, 0x3, 0x0) socketpair$unix(0x1, 0x5, 0x0, &(0x7f00000002c0)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f0000000000)={'lo\x00'}) sendmsg$nl_route_sched(r1, 0x0, 0x0) sendmsg$IPSET_CMD_ADD(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000580)={0x50, 0x9, 0x6, 0x201, 0x0, 0x0, {0x1, 0x0, 0x3}, [@IPSET_ATTR_SETNAME={0x9, 0x2, 'syz1\x00'}, @IPSET_ATTR_PROTOCOL={0x5}, @IPSET_ATTR_DATA={0x28, 0x7, 0x0, 0x1, [@IPSET_ATTR_IP={0xc, 0x1, 0x0, 0x1, @IPSET_ATTR_IPADDR_IPV4={0x8, 0x1, 0x1, 0x0, @private=0xa010102}}, @IPSET_ATTR_IP2={0xc, 0x14, 0x0, 0x1, @IPSET_ATTR_IPADDR_IPV4={0x8, 0x1, 0x1, 0x0, @dev={0xac, 0x14, 0x14, 0x10}}}, @IPSET_ATTR_IP_TO={0xc, 0x2, 0x0, 0x1, @IPSET_ATTR_IPADDR_IPV4={0x8, 0x1, 0x1, 0x0, @broadcast}}]}]}, 0x50}, 0x1, 0x1000000, 0x0, 0x24004800}, 0x4) r3 = bpf$MAP_CREATE(0x0, &(0x7f0000000640)=ANY=[@ANYBLOB], 0x48) bpf$PROG_LOAD(0x5, &(0x7f0000000840)={0x1, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018", @ANYRES32=r3, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000000000000b70400000000000085000000c3"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2}, 0x94) bpf$PROG_LOAD(0x5, 0x0, 0x0) socket(0xa, 0x3, 0xff) r4 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX_802154(0xffffffffffffffff, 0x8933, &(0x7f0000000340)={'wpan0\x00'}) r5 = socket$l2tp6(0xa, 0x2, 0x73) setsockopt$IP6T_SO_SET_REPLACE(r5, 0x29, 0x40, &(0x7f0000000400)=@raw={'raw\x00', 0x3c1, 0x3, 0x398, 0x0, 0x1170, 0x1398, 0x160, 0x1170, 0x2c8, 0x1398, 0x1398, 0x2c8, 0x1398, 0x3, 0x0, {[{{@ipv6={@empty, @mcast1, [], [0x0, 0x0, 0xffffffff], 'ip6tnl0\x00', 'veth0_to_hsr\x00', {}, {}, 0x2f}, 0x0, 0xf8, 0x160, 0x0, {}, [@common=@inet=@socket3={{0x28}}, @common=@inet=@socket3={{0x28}, 0x5}]}, @unspec=@CT1={0x68, 'CT\x00', 0x1, {0x0, 0x0, 0x0, 0x0, 'syz1\x00', 'syz1\x00'}}}, {{@uncond, 0x0, 0x100, 0x168, 0x0, {}, [@common=@srh={{0x30}, {0x73, 0x5, 0x1, 0xe, 0x81, 0x420, 0x1004}}, @inet=@rpfilter={{0x28}}]}, @unspec=@CT2={0x68, 'CT\x00', 0x2, {0xc, 0xf, 0x0, 0x8, 'snmp_trap\x00', 'syz1\x00', {0x71}}}}], {{'\x00', 0x0, 0xa8, 0xd0}, {0x28}}}}, 0x3f8) r6 = openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0xc0041, 0x0) ioctl$TUNSETIFF(r6, 0x400454ca, &(0x7f0000000200)={'syzkaller1\x00', 0xc201}) ioctl$TUNSETVNETHDRSZ(r6, 0x400454d8, &(0x7f0000000140)=0x8001) sendmsg$NL802154_CMD_DEL_SEC_LEVEL(r4, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000000)=ANY=[@ANYBLOB='\x00\x00\x00\x00', @ANYRES16=0x0, @ANYBLOB], 0x38}, 0x1, 0x0, 0x0, 0x20000000}, 0x8000) socket(0x2b, 0x1, 0x0) getpeername$inet6(r5, &(0x7f0000000100)={0xa, 0x0, 0x0, @initdev}, &(0x7f00000001c0)=0x1c) unshare(0x2c020400) 0s ago: executing program 7 (id=7690): r0 = socket$inet_tcp(0x2, 0x1, 0x0) bind$inet(r0, &(0x7f0000000240)={0x2, 0x4e20, @multicast1}, 0x10) connect$inet(r0, &(0x7f0000ccb000)={0x2, 0x4e20, @local}, 0x10) r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000100)={0x1, 0x3, &(0x7f0000001a00)=ANY=[@ANYBLOB="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"], &(0x7f00002bf000)='GPL\x00', 0x4, 0xb7, &(0x7f0000000040)=""/183, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0x8}, 0x94) r2 = socket$kcm(0x29, 0x2, 0x0) ioctl$sock_kcm_SIOCKCMATTACH(r2, 0x89e0, &(0x7f0000000180)={r0, r1}) socket$nl_netfilter(0x10, 0x3, 0xc) r3 = socket$inet_sctp(0x2, 0x1, 0x84) sendto$inet(r3, &(0x7f0000000140)='^', 0x34000, 0x0, &(0x7f0000004ff0)={0x2, 0x0, @rand_addr=0xfffffffffffffffe}, 0x10) bpf$BPF_PROG_DETACH(0x9, &(0x7f0000007bc0)={@cgroup, 0xffffffffffffffff, 0x18, 0x10}, 0x20) ioctl$sock_SIOCGIFINDEX_80211(0xffffffffffffffff, 0x8933, 0x0) pipe(&(0x7f0000000100)={0xffffffffffffffff, 0xffffffffffffffff}) close(0x4) syz_init_net_socket$bt_hci(0x1f, 0x3, 0x5) close(0x4) syz_open_procfs$namespace(0x0, &(0x7f0000000040)='ns/cgroup\x00') socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$ethtool(0x0, 0xffffffffffffffff) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f07ebbeef, 0x8031, 0xffffffffffffffff, 0x215eb000) r5 = socket(0x14, 0x2, 0x4) ioctl$sock_SIOCGIFINDEX(r5, 0x61d0, 0x0) listen(r3, 0xfff) bpf$PROG_LOAD(0x5, &(0x7f0000000100)={0x6, 0xc, &(0x7f0000000000)=ANY=[@ANYBLOB="1800000000000000000000000000000085000000d1000000180100002020702500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b70300000000000085000000b40000009517"], &(0x7f0000000300)='GPL\x00', 0x6, 0x0, 0x0, 0x41100, 0x2, '\x00', 0x0, @fallback=0x29, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x9}, 0x94) sendmmsg$inet(r2, &(0x7f00000028c0)=[{{0x0, 0x0, &(0x7f0000000200)}}, {{0x0, 0x0, 0x0}}], 0x2, 0x40) close(r2) r6 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000000), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(0xffffffffffffffff, 0x8933, &(0x7f0000000240)={'wlan0\x00', 0x0}) sendmsg$NL80211_CMD_SET_MCAST_RATE(0xffffffffffffffff, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000280)={0x1c, r6, 0x1, 0x0, 0x25dfdbfe, {{0x53}, {@val={0x8, 0x3, r7}, @void}}}, 0x1c}}, 0x0) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f0000000280)={'wlan0\x00', 0x0}) sendmsg$NL80211_CMD_JOIN_MESH(r4, &(0x7f00000003c0)={&(0x7f00000001c0)={0x10, 0x0, 0x0, 0x2c8981}, 0xc, &(0x7f00000002c0)={&(0x7f0000000340)={0x54, r6, 0x412, 0x70bd27, 0x25dfdbfc, {{}, {@val={0x8, 0x3, r8}, @void}}, [@chandef_params=[@NL80211_ATTR_WIPHY_CHANNEL_TYPE={0x8, 0x27, 0x1}], @NL80211_ATTR_DTIM_PERIOD={0x8, 0xd, 0xfffffff9}, @NL80211_ATTR_CONTROL_PORT_OVER_NL80211={0x4}, @NL80211_ATTR_HANDLE_DFS={0x4}, @NL80211_ATTR_MESH_SETUP={0x18, 0x70, [@NL80211_MESH_SETUP_USERSPACE_MPM={0x4}, @NL80211_MESH_SETUP_ENABLE_VENDOR_SYNC={0x5, 0x6, 0x1}, @NL80211_MESH_SETUP_ENABLE_VENDOR_METRIC={0x5, 0x2, 0x1}]}, @chandef_params=[@NL80211_ATTR_CENTER_FREQ1={0x8, 0xa0, 0x1}]]}, 0x54}, 0x1, 0x0, 0x0, 0x20008010}, 0x24000800) kernel console output (not intermixed with test programs): over after parsing attributes in process `syz.1.6713'. [ 886.666057][T28316] netlink: 'syz.1.6713': attribute type 14 has an invalid length. [ 886.675624][T28316] netlink: 32 bytes leftover after parsing attributes in process `syz.1.6713'. [ 886.690703][T28316] netlink: 'syz.1.6713': attribute type 3 has an invalid length. [ 886.699807][T28316] netlink: 224 bytes leftover after parsing attributes in process `syz.1.6713'. [ 886.816267][ T29] audit: type=1804 audit(1775568695.153:5): pid=28318 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=invalid_pcr cause=open_writers comm="syz.1.6714" name="/newroot/1300/cgroup.controllers" dev="tmpfs" ino=6636 res=1 errno=0 [ 886.854065][ T29] audit: type=1800 audit(1775568695.183:6): pid=28318 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.1.6714" name="cgroup.controllers" dev="tmpfs" ino=6636 res=0 errno=0 [ 886.918029][T28321] lo speed is unknown, defaulting to 1000 [ 886.930994][ C0] lec0: NETDEV WATCHDOG: CPU: 0: transmit queue 0 timed out 5500 ms [ 886.933738][T28324] lo speed is unknown, defaulting to 1000 [ 886.939098][ C0] lec:lec_tx_timeout: lec0 [ 886.946634][T28321] lo speed is unknown, defaulting to 1000 [ 887.016123][T28327] xt_CT: No such helper "syz1" [ 887.348163][T28324] lo speed is unknown, defaulting to 1000 [ 887.414754][T28345] netlink: 212340 bytes leftover after parsing attributes in process `syz.6.6719'. [ 887.424384][T28345] openvswitch: netlink: Key type 11488 is out of range max 32 [ 887.519633][T28350] netlink: 'syz.3.6721': attribute type 13 has an invalid length. [ 887.562949][T28352] netlink: 12 bytes leftover after parsing attributes in process `syz.6.6722'. [ 887.622540][T28352] vlan3: entered promiscuous mode [ 887.627766][T28352] batadv0: entered promiscuous mode [ 887.691885][T28355] netlink: 24 bytes leftover after parsing attributes in process `syz.1.6723'. [ 887.752544][T28357] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 887.761727][ C1] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 887.793461][T28357] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 887.810193][T28361] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 887.840794][ T6627] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 887.852513][T28362] netlink: 16 bytes leftover after parsing attributes in process `syz.1.6723'. [ 887.868830][T28361] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 887.877442][T28361] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 887.886173][ C1] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 887.898677][T28362] netlink: 12 bytes leftover after parsing attributes in process `syz.1.6723'. [ 887.924521][T28355] netlink: 'syz.1.6723': attribute type 2 has an invalid length. [ 887.933134][T28355] netlink: 'syz.1.6723': attribute type 2 has an invalid length. [ 888.039547][T28367] netlink: 'syz.3.6727': attribute type 1 has an invalid length. [ 888.097673][T28372] netlink: 'syz.1.6729': attribute type 1 has an invalid length. [ 888.225700][T28367] 8021q: adding VLAN 0 to HW filter on device bond36 [ 888.689849][T28378] bond36: (slave batadv4): Opening slave failed [ 888.882266][T28376] bond32: (slave vxcan5): The slave device specified does not support setting the MAC address [ 888.894327][T28376] bond32: (slave vxcan5): Error -95 calling set_mac_address [ 888.940540][T28382] macvlan4: entered promiscuous mode [ 888.956773][T28382] macvlan4: entered allmulticast mode [ 888.964453][T28382] bond32: entered promiscuous mode [ 888.970367][T28382] 8021q: adding VLAN 0 to HW filter on device macvlan4 [ 888.983633][T28382] bond32: left promiscuous mode [ 889.000579][T28387] workqueue: Failed to create a rescuer kthread for wq "bond18": -EINTR [ 889.560173][T28411] lo speed is unknown, defaulting to 1000 [ 889.575288][T28414] netlink: 'syz.3.6737': attribute type 10 has an invalid length. [ 889.610818][T28411] lo speed is unknown, defaulting to 1000 [ 890.021257][T28418] xt_CT: No such helper "syz1" [ 890.030542][T28427] syzkaller0: entered promiscuous mode [ 890.091818][T28428] IPVS: Scheduler module ip_vs_sip not found [ 890.220568][T28446] netlink: 'syz.6.6742': attribute type 1 has an invalid length. [ 890.286815][T28446] bond18: (slave vxcan3): The slave device specified does not support setting the MAC address [ 890.314305][T28446] bond18: (slave vxcan3): Error -95 calling set_mac_address [ 890.552498][T28460] Bluetooth: MGMT ver 1.23 [ 890.563530][T28452] macvlan2: entered promiscuous mode [ 890.573477][T28452] macvlan2: entered allmulticast mode [ 890.585929][T28452] bond18: entered promiscuous mode [ 890.597123][T28452] 8021q: adding VLAN 0 to HW filter on device macvlan2 [ 890.615955][T28452] bond18: left promiscuous mode [ 890.663005][T28464] net_ratelimit: 27 callbacks suppressed [ 890.663044][T28464] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 890.679483][T28457] veth0_to_hsr: Caught tx_queue_len zero misconfig [ 890.859114][T28467] mac80211_hwsim hwsim8 syzkaller0: Caught tx_queue_len zero misconfig [ 890.962526][T28473] nbd2: detected capacity change from 0 to 63 [ 891.024724][T28473] netlink: 'syz.6.6748': attribute type 1 has an invalid length. [ 891.113895][T28483] netlink: 'syz.3.6750': attribute type 13 has an invalid length. [ 891.197398][T28483] mac80211_hwsim hwsim8 syzkaller0: Caught tx_queue_len zero misconfig [ 891.351453][T28490] netlink: 'syz.3.6752': attribute type 1 has an invalid length. [ 891.531896][T28490] 8021q: adding VLAN 0 to HW filter on device bond37 [ 891.585990][T28492] bond37: (slave veth37): Enslaving as an active interface with a down link [ 891.642108][T28493] 8021q: adding VLAN 0 to HW filter on device batadv4 [ 891.662699][T28493] bond37: (slave batadv4): dev_set_mac_address on slave failed! ALB mode requires that the base driver support setting the hw address also when the network device's interface is open [ 891.673360][T22375] block nbd2: Receive control failed (result -104) [ 892.148866][T28520] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 892.151352][T28514] __nla_validate_parse: 8 callbacks suppressed [ 892.151370][T28514] netlink: 8 bytes leftover after parsing attributes in process `syz.8.6756'. [ 892.192219][T28520] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 892.200867][T28520] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 892.439959][T28536] bond33: (slave vxcan5): The slave device specified does not support setting the MAC address [ 892.458112][T28536] bond33: (slave vxcan5): Error -95 calling set_mac_address [ 892.720075][T28548] syzkaller0: entered promiscuous mode [ 892.731838][T28548] syzkaller0: entered allmulticast mode [ 892.743604][T28552] validate_nla: 1 callbacks suppressed [ 892.743623][T28552] netlink: 'syz.8.6763': attribute type 1 has an invalid length. [ 892.816911][T28552] bond21: (slave vxcan1): The slave device specified does not support setting the MAC address [ 892.828132][T28552] bond21: (slave vxcan1): Error -95 calling set_mac_address [ 892.976579][T28518] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 892.995480][T28518] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 893.025721][T28561] netlink: 12 bytes leftover after parsing attributes in process `syz.1.6762'. [ 893.043510][T28560] netlink: 'syz.6.6764': attribute type 1 has an invalid length. [ 893.463869][T28572] netlink: 12 bytes leftover after parsing attributes in process `syz.8.6765'. [ 893.713795][T28560] 8021q: adding VLAN 0 to HW filter on device bond19 [ 893.779654][T28564] bond19: (slave batadv3): Opening slave failed [ 893.899380][T28586] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 894.093555][T28592] netlink: 12 bytes leftover after parsing attributes in process `syz.7.6766'. [ 894.392585][T28599] tipc: Enabled bearer , priority 0 [ 894.464893][T28599] syzkaller0: entered promiscuous mode [ 894.470505][T28599] syzkaller0: entered allmulticast mode [ 894.542471][T28599] tipc: Resetting bearer [ 894.577656][T28598] tipc: Resetting bearer [ 894.647805][T28598] tipc: Disabling bearer [ 894.772107][T28619] netlink: 'syz.8.6773': attribute type 1 has an invalid length. [ 894.944068][T28619] bond23: (slave vxcan1): The slave device specified does not support setting the MAC address [ 894.995230][T28619] bond23: (slave vxcan1): Error -95 calling set_mac_address [ 895.070923][T28624] macvlan2: entered promiscuous mode [ 895.086764][T28624] macvlan2: entered allmulticast mode [ 895.121915][T28624] bond23: entered promiscuous mode [ 895.129870][T28613] lec:lec_atm_close: lec0: Shut down! [ 895.131158][T28630] netlink: 'syz.6.6776': attribute type 1 has an invalid length. [ 895.136037][T28624] 8021q: adding VLAN 0 to HW filter on device macvlan2 [ 895.158208][T28624] bond23: left promiscuous mode [ 895.207064][T28630] 8021q: adding VLAN 0 to HW filter on device bond20 [ 895.437351][T28639] lo speed is unknown, defaulting to 1000 [ 895.446181][T28635] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 895.455828][ C0] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 895.493758][T28639] lo speed is unknown, defaulting to 1000 [ 895.634761][T28650] netlink: 12 bytes leftover after parsing attributes in process `syz.8.6778'. [ 895.721409][ C1] ip6_tunnel: ip6gretap0 xmit: Local address not yet configured! [ 895.770773][T28654] netlink: 'syz.3.6781': attribute type 1 has an invalid length. [ 895.862236][T28654] 8021q: adding VLAN 0 to HW filter on device bond38 [ 896.045843][T28656] bond38: (slave veth39): Enslaving as an active interface with a down link [ 896.082002][T28661] netlink: 'syz.6.6782': attribute type 1 has an invalid length. [ 896.112071][T28656] netlink: 'syz.3.6781': attribute type 1 has an invalid length. [ 896.256633][T28663] bond21: (slave vxcan3): The slave device specified does not support setting the MAC address [ 896.268223][T28663] bond21: (slave vxcan3): Error -95 calling set_mac_address [ 896.297416][T28664] 8021q: adding VLAN 0 to HW filter on device batadv4 [ 896.313668][T28664] bond38: (slave batadv4): dev_set_mac_address on slave failed! ALB mode requires that the base driver support setting the hw address also when the network device's interface is open [ 896.373215][T28658] tipc: Enabled bearer , priority 0 [ 896.395324][T28659] syzkaller0: entered promiscuous mode [ 896.404022][T28659] syzkaller0: entered allmulticast mode [ 896.430933][T28665] macvlan2: entered promiscuous mode [ 896.437322][T28665] macvlan2: entered allmulticast mode [ 896.449531][T28665] bond21: entered promiscuous mode [ 896.456940][T28665] 8021q: adding VLAN 0 to HW filter on device macvlan2 [ 896.496907][T28665] bond21: left promiscuous mode [ 896.542102][T28673] netlink: 'syz.3.6786': attribute type 1 has an invalid length. [ 896.592242][T28666] tipc: Resetting bearer [ 896.631870][T28677] netlink: 'syz.8.6787': attribute type 1 has an invalid length. [ 896.637995][T28676] bond39: (slave vxcan7): The slave device specified does not support setting the MAC address [ 896.661886][T28676] bond39: (slave vxcan7): Error -95 calling set_mac_address [ 896.684855][T28657] tipc: Resetting bearer [ 896.693090][T28680] netlink: 'syz.6.6788': attribute type 1 has an invalid length. [ 896.716234][T28657] tipc: Disabling bearer [ 896.742128][T28682] netlink: 60 bytes leftover after parsing attributes in process `syz.8.6787'. [ 896.757171][T28676] macvlan0: entered promiscuous mode [ 896.764410][T28676] macvlan0: entered allmulticast mode [ 896.770912][T28676] bond39: entered promiscuous mode [ 896.777307][T28676] 8021q: adding VLAN 0 to HW filter on device macvlan0 [ 896.788423][T28676] bond39: left promiscuous mode [ 896.826050][T28679] bond25: (slave vxcan1): The slave device specified does not support setting the MAC address [ 896.838166][T28679] bond25: (slave vxcan1): Error -95 calling set_mac_address [ 896.969602][T28683] bond22: (slave vxcan3): The slave device specified does not support setting the MAC address [ 896.981476][T28683] bond22: (slave vxcan3): Error -95 calling set_mac_address [ 897.004563][T28677] macvlan2: entered promiscuous mode [ 897.013198][T28677] macvlan2: entered allmulticast mode [ 897.019649][T28677] bond25: entered promiscuous mode [ 897.027611][T28677] 8021q: adding VLAN 0 to HW filter on device macvlan2 [ 897.039913][T28677] bond25: left promiscuous mode [ 897.081742][ C0] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 897.104255][T28692] 8021q: adding VLAN 0 to HW filter on device bond40 [ 897.234801][T28693] bond40: (slave veth41): Enslaving as an active interface with a down link [ 897.348391][T28696] 8021q: adding VLAN 0 to HW filter on device batadv4 [ 897.356897][T28696] bond40: (slave batadv4): dev_set_mac_address on slave failed! ALB mode requires that the base driver support setting the hw address also when the network device's interface is open [ 897.418608][T28702] bond23: (slave vxcan3): The slave device specified does not support setting the MAC address [ 897.429834][T28702] bond23: (slave vxcan3): Error -95 calling set_mac_address [ 897.450618][T28690] lo speed is unknown, defaulting to 1000 [ 897.462508][T28690] lo speed is unknown, defaulting to 1000 [ 897.732483][T28714] 8021q: adding VLAN 0 to HW filter on device bond24 [ 897.759480][T28716] netlink: 28 bytes leftover after parsing attributes in process `syz.6.6795'. [ 897.892025][T28714] validate_nla: 4 callbacks suppressed [ 897.892045][T28714] netlink: 'syz.6.6795': attribute type 1 has an invalid length. [ 897.930181][T28726] netlink: 'syz.7.6798': attribute type 1 has an invalid length. [ 897.942034][T28723] xt_CT: No such helper "syz1" [ 897.953373][T28717] macvlan0: entered promiscuous mode [ 897.958688][T28717] macvlan0: entered allmulticast mode [ 897.966151][T28717] bond41: entered promiscuous mode [ 897.972341][T28717] 8021q: adding VLAN 0 to HW filter on device macvlan0 [ 897.984746][T28717] bond41: left promiscuous mode [ 898.020428][T28714] bond24: (slave batadv3): Opening slave failed [ 898.048176][T28728] bond17: (slave vxcan3): The slave device specified does not support setting the MAC address [ 898.069552][T28728] bond17: (slave vxcan3): Error -95 calling set_mac_address [ 898.109860][T28726] macvlan2: entered promiscuous mode [ 898.117516][T28726] macvlan2: entered allmulticast mode [ 898.125094][T28726] bond17: entered promiscuous mode [ 898.131573][T28726] 8021q: adding VLAN 0 to HW filter on device macvlan2 [ 898.142747][T28726] bond17: left promiscuous mode [ 898.191976][T28719] lo speed is unknown, defaulting to 1000 [ 898.198802][T28719] lo speed is unknown, defaulting to 1000 [ 898.505568][T28744] netlink: 12 bytes leftover after parsing attributes in process `syz.6.6800'. [ 898.560032][T28743] netlink: 'syz.3.6802': attribute type 1 has an invalid length. [ 899.149008][T28743] 8021q: adding VLAN 0 to HW filter on device bond42 [ 899.163899][T28747] netlink: 'syz.7.6803': attribute type 1 has an invalid length. [ 899.243001][T28751] bond42: (slave veth43): Enslaving as an active interface with a down link [ 899.325776][T28751] netlink: 'syz.3.6802': attribute type 1 has an invalid length. [ 899.372938][T28750] netlink: 'syz.7.6803': attribute type 1 has an invalid length. [ 899.379396][T28747] 8021q: adding VLAN 0 to HW filter on device bond18 [ 899.472676][T28760] netlink: 'syz.3.6805': attribute type 1 has an invalid length. [ 899.480743][T28749] bond18: (slave veth9): Enslaving as an active interface with a down link [ 899.560714][T28760] 8021q: adding VLAN 0 to HW filter on device bond43 [ 899.586141][T28747] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 899.593509][T28747] bond18: (slave batadv0): dev_set_mac_address on slave failed! ALB mode requires that the base driver support setting the hw address also when the network device's interface is open [ 899.676680][T28762] bond43: (slave veth45): Enslaving as an active interface with a down link [ 899.697671][T28765] netlink: 'syz.3.6805': attribute type 1 has an invalid length. [ 899.758061][T28765] 8021q: adding VLAN 0 to HW filter on device batadv4 [ 899.766099][T28765] bond43: (slave batadv4): dev_set_mac_address on slave failed! ALB mode requires that the base driver support setting the hw address also when the network device's interface is open [ 899.796962][T28764] tipc: Enabled bearer , priority 0 [ 899.827961][T28768] tipc: Started in network mode [ 899.838915][T28768] tipc: Node identity 4200000028, cluster identity 4711 [ 899.846192][T28768] tipc: Enabled bearer , priority 0 [ 899.893361][T28764] syzkaller0: entered promiscuous mode [ 899.900136][T28764] syzkaller0: entered allmulticast mode [ 899.907167][T28764] tipc: Resetting bearer [ 899.966895][T28763] tipc: Resetting bearer [ 899.974749][T28771] netlink: 'syz.3.6808': attribute type 1 has an invalid length. [ 900.083195][T28775] openvswitch: netlink: Message has 8 unknown bytes. [ 900.928084][ C0] lec0: NETDEV WATCHDOG: CPU: 0: transmit queue 0 timed out 5800 ms [ 900.936158][ C0] lec:lec_tx_timeout: lec0 [ 901.034096][T28782] netlink: 'syz.1.6811': attribute type 1 has an invalid length. [ 901.092962][T28783] netlink: 28 bytes leftover after parsing attributes in process `syz.1.6811'. [ 902.698998][T28763] tipc: Disabling bearer [ 902.708248][T28771] workqueue: Failed to create a rescuer kthread for wq "bond44": -EINTR [ 902.745423][ T796] tipc: Node number set to 1778384896 [ 902.765513][T28782] workqueue: Failed to create a rescuer kthread for wq "bond35": -EINTR [ 902.800314][T28789] tipc: Enabling of bearer rejected, already enabled [ 902.822737][T28789] tipc: Resetting bearer [ 902.947384][T28793] lo speed is unknown, defaulting to 1000 [ 902.956920][T28793] lo speed is unknown, defaulting to 1000 [ 903.130176][T28804] validate_nla: 2 callbacks suppressed [ 903.130196][T28804] netlink: 'syz.6.6817': attribute type 1 has an invalid length. [ 903.310548][T18550] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 903.312360][T28804] 8021q: adding VLAN 0 to HW filter on device bond26 [ 903.459378][T28804] netlink: 'syz.6.6817': attribute type 1 has an invalid length. [ 903.593240][T28812] bond26: (slave veth5): Enslaving as an active interface with a down link [ 903.650748][T28804] 8021q: adding VLAN 0 to HW filter on device batadv3 [ 903.692618][T28804] bond26: (slave batadv3): dev_set_mac_address on slave failed! ALB mode requires that the base driver support setting the hw address also when the network device's interface is open [ 904.099494][T28836] netlink: 12 bytes leftover after parsing attributes in process `syz.8.6820'. [ 904.307394][T28843] netlink: 12 bytes leftover after parsing attributes in process `syz.6.6822'. [ 905.276296][T28854] netlink: 'syz.1.6825': attribute type 1 has an invalid length. [ 905.380818][T28843] workqueue: Failed to create a rescuer kthread for wq "bond27": -EINTR [ 905.558152][T28863] netlink: 'syz.7.6826': attribute type 1 has an invalid length. [ 905.611929][T28858] netlink: 'syz.1.6825': attribute type 1 has an invalid length. [ 905.627467][T28864] netlink: 28 bytes leftover after parsing attributes in process `syz.7.6826'. [ 905.648792][T28854] 8021q: adding VLAN 0 to HW filter on device bond35 [ 905.685610][T28855] bond35: (slave veth37): Enslaving as an active interface with a down link [ 905.705517][T28870] netlink: 'syz.8.6828': attribute type 13 has an invalid length. [ 905.752196][T28863] 8021q: adding VLAN 0 to HW filter on device bond19 [ 905.800779][T28860] 8021q: adding VLAN 0 to HW filter on device batadv2 [ 905.811391][T28860] bond35: (slave batadv2): dev_set_mac_address on slave failed! ALB mode requires that the base driver support setting the hw address also when the network device's interface is open [ 905.840029][T28863] netlink: 'syz.7.6826': attribute type 1 has an invalid length. [ 905.991245][T28863] bond19: (slave batadv0): Opening slave failed [ 906.270516][T28891] netlink: 'syz.8.6833': attribute type 1 has an invalid length. [ 906.304795][T28894] netlink: 'syz.6.6831': attribute type 1 has an invalid length. [ 906.316716][T28891] 8021q: adding VLAN 0 to HW filter on device bond27 [ 906.371213][ C0] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 906.449226][T28900] netlink: 'syz.1.6835': attribute type 1 has an invalid length. [ 906.457264][T28891] bond27: (slave veth7): Enslaving as an active interface with a down link [ 906.565198][T28900] 8021q: adding VLAN 0 to HW filter on device bond36 [ 906.582332][T28896] A link change request failed with some changes committed already. Interface caif0 may have been left with an inconsistent configuration, please check. [ 906.639050][T28905] bond36: (slave veth39): Enslaving as an active interface with a down link [ 906.657140][T28891] 8021q: adding VLAN 0 to HW filter on device batadv4 [ 906.671471][T28891] bond27: (slave batadv4): dev_set_mac_address on slave failed! ALB mode requires that the base driver support setting the hw address also when the network device's interface is open [ 906.715193][T28900] 8021q: adding VLAN 0 to HW filter on device batadv2 [ 906.722654][T28900] bond36: (slave batadv2): dev_set_mac_address on slave failed! ALB mode requires that the base driver support setting the hw address also when the network device's interface is open [ 906.969195][T28919] netlink: 12 bytes leftover after parsing attributes in process `syz.6.6838'. [ 907.422873][T28934] netlink: 28 bytes leftover after parsing attributes in process `syz.3.6842'. [ 907.519981][T28931] 8021q: adding VLAN 0 to HW filter on device bond44 [ 907.636475][T28931] bond44: (slave batadv4): Opening slave failed [ 907.930328][T28945] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 907.939406][ C0] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 907.952003][T28945] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 907.960897][ T1093] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 908.001170][ C1] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 908.026477][T28944] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 908.035503][ C1] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 908.094126][T28955] tipc: Resetting bearer [ 908.281931][T28962] tipc: Enabling of bearer rejected, already enabled [ 908.344474][T28969] veth3: entered allmulticast mode [ 908.387975][T28971] validate_nla: 6 callbacks suppressed [ 908.387994][T28971] netlink: 'syz.8.6855': attribute type 1 has an invalid length. [ 908.437600][T28971] 8021q: adding VLAN 0 to HW filter on device bond28 [ 908.482846][T28978] netlink: 'syz.1.6858': attribute type 1 has an invalid length. [ 908.490824][T28971] bond28: (slave veth9): Enslaving as an active interface with a down link [ 908.552076][T28978] bond37: (slave vxcan5): The slave device specified does not support setting the MAC address [ 908.566260][T28978] bond37: (slave vxcan5): Error -95 calling set_mac_address [ 908.613808][T28971] netlink: 'syz.8.6855': attribute type 1 has an invalid length. [ 908.639651][T28971] 8021q: adding VLAN 0 to HW filter on device batadv4 [ 908.665123][T28971] bond28: (slave batadv4): dev_set_mac_address on slave failed! ALB mode requires that the base driver support setting the hw address also when the network device's interface is open [ 908.839064][T28992] netlink: 'syz.8.6860': attribute type 1 has an invalid length. [ 908.876211][T28992] 8021q: adding VLAN 0 to HW filter on device bond29 [ 908.916453][T28992] bond29: (slave veth11): Enslaving as an active interface with a down link [ 908.979107][T28992] netlink: 'syz.8.6860': attribute type 1 has an invalid length. [ 909.003396][T28992] 8021q: adding VLAN 0 to HW filter on device batadv4 [ 909.014565][T28992] bond29: (slave batadv4): dev_set_mac_address on slave failed! ALB mode requires that the base driver support setting the hw address also when the network device's interface is open [ 909.117047][T28968] veth3: left allmulticast mode [ 909.285719][T29004] netlink: 'syz.6.6864': attribute type 13 has an invalid length. [ 909.402673][T29009] netlink: 12 bytes leftover after parsing attributes in process `syz.7.6862'. [ 909.971229][ C0] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 910.099973][T29025] netlink: 'syz.3.6868': attribute type 1 has an invalid length. [ 910.469526][T29047] tipc: Enabled bearer , priority 0 [ 910.480847][T29047] sch_tbf: burst 127 is lower than device syzkaller0 mtu (1514) ! [ 910.492835][T29047] tipc: Resetting bearer [ 910.513821][T29046] tipc: Disabling bearer [ 911.348991][T29060] netlink: 'syz.3.6878': attribute type 1 has an invalid length. [ 911.424677][T29067] netlink: 'syz.7.6880': attribute type 1 has an invalid length. [ 911.470923][T29065] bond45: (slave vxcan7): The slave device specified does not support setting the MAC address [ 911.495449][T29065] bond45: (slave vxcan7): Error -95 calling set_mac_address [ 911.559462][T29067] 8021q: adding VLAN 0 to HW filter on device bond21 [ 911.736294][T29070] bond21: (slave veth11): Enslaving as an active interface with a down link [ 911.753829][T29086] netlink: 'syz.3.6885': attribute type 1 has an invalid length. [ 911.826989][T29067] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 911.845768][T29067] bond21: (slave batadv0): dev_set_mac_address on slave failed! ALB mode requires that the base driver support setting the hw address also when the network device's interface is open [ 912.170110][T29110] lo speed is unknown, defaulting to 1000 [ 912.189994][T29108] netlink: 192 bytes leftover after parsing attributes in process `syz.7.6891'. [ 912.191321][T29110] lo speed is unknown, defaulting to 1000 [ 912.206996][T29108] netlink: 8 bytes leftover after parsing attributes in process `syz.7.6891'. [ 912.411880][T29115] 8021q: adding VLAN 0 to HW filter on device bond30 [ 912.477737][T29115] bond30: (slave veth13): Enslaving as an active interface with a down link [ 912.579406][T29115] 8021q: adding VLAN 0 to HW filter on device batadv4 [ 912.586923][T29115] bond30: (slave batadv4): dev_set_mac_address on slave failed! ALB mode requires that the base driver support setting the hw address also when the network device's interface is open [ 912.777210][T29125] 8021q: adding VLAN 0 to HW filter on device bond31 [ 912.910029][T29132] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 912.919191][ C0] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 912.930175][T29132] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 912.941792][T29132] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 912.950529][ T3559] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 912.958988][ C1] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 913.089470][T29125] bond31: (slave batadv4): Opening slave failed [ 915.038800][T29185] netlink: 12 bytes leftover after parsing attributes in process `syz.1.6907'. [ 915.438479][T29189] validate_nla: 6 callbacks suppressed [ 915.438498][T29189] netlink: 'syz.3.6910': attribute type 1 has an invalid length. [ 915.864671][T29192] netlink: 'syz.8.6912': attribute type 1 has an invalid length. [ 915.916510][T29194] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 915.925112][ C1] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 915.936627][T29194] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 915.945637][ T13] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 915.956418][T29194] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 915.965351][ T13] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 915.998854][T29201] bond32: (slave vxcan1): The slave device specified does not support setting the MAC address [ 916.025448][T29201] bond32: (slave vxcan1): Error -95 calling set_mac_address [ 916.752763][T29220] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 916.761421][ C1] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 916.784204][T29220] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 916.793305][T22451] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 917.220638][T29233] netlink: 'syz.1.6919': attribute type 1 has an invalid length. [ 917.277382][T29233] 8021q: adding VLAN 0 to HW filter on device bond39 [ 917.357017][T29233] netlink: 'syz.1.6919': attribute type 1 has an invalid length. [ 917.427180][T29233] bond39: (slave batadv2): Opening slave failed [ 917.923014][T29261] netlink: 'syz.8.6926': attribute type 1 has an invalid length. [ 918.064301][T29240] lec:lec_atm_close: lec0: Shut down! [ 918.165804][T29262] bond33: (slave vxcan1): The slave device specified does not support setting the MAC address [ 918.252655][T29262] bond33: (slave vxcan1): Error -95 calling set_mac_address [ 918.528859][T29274] netlink: 12 bytes leftover after parsing attributes in process `syz.1.6927'. [ 919.190056][T29284] netlink: 12 bytes leftover after parsing attributes in process `syz.6.6928'. [ 919.502039][T29298] netlink: 12 bytes leftover after parsing attributes in process `syz.7.6930'. [ 919.879837][T29303] netlink: 'syz.6.6933': attribute type 1 has an invalid length. [ 919.914833][T29303] 8021q: adding VLAN 0 to HW filter on device bond28 [ 919.996189][T29306] netlink: 'syz.8.6932': attribute type 1 has an invalid length. [ 920.087100][T29303] bond28: (slave veth7): Enslaving as an active interface with a down link [ 920.143177][T29306] 8021q: adding VLAN 0 to HW filter on device bond34 [ 920.266478][T29308] netlink: 'syz.8.6932': attribute type 1 has an invalid length. [ 920.322406][T29317] netlink: 'syz.1.6935': attribute type 1 has an invalid length. [ 920.364046][T29307] 8021q: adding VLAN 0 to HW filter on device batadv3 [ 920.430540][T29307] bond28: (slave batadv3): dev_set_mac_address on slave failed! ALB mode requires that the base driver support setting the hw address also when the network device's interface is open [ 920.590273][T29329] netlink: 12 bytes leftover after parsing attributes in process `syz.3.6934'. [ 920.668616][T29332] netlink: 'syz.1.6935': attribute type 1 has an invalid length. [ 920.816992][T29317] 8021q: adding VLAN 0 to HW filter on device bond41 [ 921.018563][T29330] syzkaller0: entered promiscuous mode [ 921.024374][T29330] syzkaller0: entered allmulticast mode [ 921.056210][T29329] workqueue: Failed to create a rescuer kthread for wq "bond46": -EINTR [ 921.067221][T29342] netlink: 'syz.7.6937': attribute type 1 has an invalid length. [ 921.081908][T29335] bond41: (slave batadv2): Opening slave failed [ 921.124660][T29323] sch_tbf: burst 127 is lower than device syzkaller0 mtu (1514) ! [ 921.188917][T29342] 8021q: adding VLAN 0 to HW filter on device bond23 [ 921.292506][T29345] bond23: (slave veth13): Enslaving as an active interface with a down link [ 921.322973][ T1665] block nbd2: Possible stuck request ffff888038260000: control (read@0,1024B). Runtime 30 seconds [ 921.343407][ T1665] block nbd2: Possible stuck request ffff888038260200: control (read@1024,1024B). Runtime 30 seconds [ 921.354769][ T1665] block nbd2: Possible stuck request ffff888038260400: control (read@2048,1024B). Runtime 30 seconds [ 921.368619][ T1665] block nbd2: Possible stuck request ffff888038260600: control (read@3072,1024B). Runtime 30 seconds [ 921.408372][T29345] netlink: 'syz.7.6937': attribute type 1 has an invalid length. [ 921.446630][T29342] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 921.454600][T29342] bond23: (slave batadv0): dev_set_mac_address on slave failed! ALB mode requires that the base driver support setting the hw address also when the network device's interface is open [ 921.975278][T29362] lec:lec_atm_close: lec0: Shut down! [ 922.330781][T29392] netlink: 12 bytes leftover after parsing attributes in process `syz.6.6947'. [ 922.715214][T29396] netlink: 'syz.3.6948': attribute type 1 has an invalid length. [ 922.786528][T29396] 8021q: adding VLAN 0 to HW filter on device bond46 [ 922.946686][T29396] bond46: (slave veth47): Enslaving as an active interface with a down link [ 923.062723][T29396] netlink: 'syz.3.6948': attribute type 1 has an invalid length. [ 923.091801][T29396] 8021q: adding VLAN 0 to HW filter on device batadv7 [ 923.121503][T29396] bond46: (slave batadv7): dev_set_mac_address on slave failed! ALB mode requires that the base driver support setting the hw address also when the network device's interface is open [ 923.332217][T29410] net_ratelimit: 9 callbacks suppressed [ 923.332239][T29410] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 923.440310][T29409] netlink: 12 bytes leftover after parsing attributes in process `syz.7.6949'. [ 923.922786][T29416] netlink: 12 bytes leftover after parsing attributes in process `syz.1.6950'. [ 924.437184][T29425] netlink: 12 bytes leftover after parsing attributes in process `syz.3.6951'. [ 924.793565][T29437] netlink: 12 bytes leftover after parsing attributes in process `syz.6.6953'. [ 924.921297][ C1] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 925.842793][T29464] bond35: (slave vxcan1): The slave device specified does not support setting the MAC address [ 925.896314][T29464] bond35: (slave vxcan1): Error -95 calling set_mac_address [ 925.945818][T29468] netlink: 12 bytes leftover after parsing attributes in process `syz.7.6956'. [ 925.965017][T29460] macvlan2: entered promiscuous mode [ 925.970366][T29460] macvlan2: entered allmulticast mode [ 925.983829][T29460] bond35: entered promiscuous mode [ 925.990019][T29460] 8021q: adding VLAN 0 to HW filter on device macvlan2 [ 926.013570][T29460] bond35: left promiscuous mode [ 926.981462][ C0] lec0: NETDEV WATCHDOG: CPU: 0: transmit queue 0 timed out 5010 ms [ 926.989518][ C0] lec:lec_tx_timeout: lec0 [ 926.995458][ C0] lec:lec_start_xmit: lec0:No lecd attached [ 927.801671][T29499] syzkaller0: entered promiscuous mode [ 927.807214][T29499] syzkaller0: entered allmulticast mode [ 927.973082][T29504] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 928.077196][T29507] netlink: 12 bytes leftover after parsing attributes in process `syz.1.6964'. [ 928.156405][T29509] netlink: 12 bytes leftover after parsing attributes in process `syz.6.6965'. [ 928.481402][T29509] workqueue: Failed to create a rescuer kthread for wq "bond31": -EINTR [ 928.693779][T29520] netlink: 'syz.3.6968': attribute type 1 has an invalid length. [ 928.774840][T29520] 8021q: adding VLAN 0 to HW filter on device bond48 [ 928.785600][T29523] netlink: 212360 bytes leftover after parsing attributes in process `syz.8.6969'. [ 928.961434][T29520] netlink: 'syz.3.6968': attribute type 1 has an invalid length. [ 929.285984][T29540] netlink: 12 bytes leftover after parsing attributes in process `syz.8.6970'. [ 929.832975][T29542] netlink: 12 bytes leftover after parsing attributes in process `syz.1.6971'. [ 930.435612][T29552] bond26: (slave vxcan3): The slave device specified does not support setting the MAC address [ 930.473568][T29552] bond26: (slave vxcan3): Error -95 calling set_mac_address [ 930.622461][T29555] macvlan2: entered promiscuous mode [ 930.660347][T29555] macvlan2: entered allmulticast mode [ 930.679903][T29555] bond26: entered promiscuous mode [ 930.687207][T29555] 8021q: adding VLAN 0 to HW filter on device macvlan2 [ 930.730645][T29555] bond26: left promiscuous mode [ 930.893130][T29574] netlink: 'syz.3.6980': attribute type 13 has an invalid length. [ 930.999735][T29580] mac80211_hwsim hwsim8 syzkaller0: Caught tx_queue_len zero misconfig [ 931.170263][T29587] netlink: 12 bytes leftover after parsing attributes in process `syz.6.6977'. [ 931.368458][T29591] netlink: 12 bytes leftover after parsing attributes in process `syz.8.6979'. [ 931.481871][ C0] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 931.564607][ T1301] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 931.725242][ T1301] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 931.734556][ T1301] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 932.011483][ C0] lec0: NETDEV WATCHDOG: CPU: 0: transmit queue 0 timed out 5010 ms [ 932.019525][ C0] lec:lec_tx_timeout: lec0 [ 932.024545][ C0] lec:lec_start_xmit: lec0:No lecd attached [ 932.467269][T29619] netlink: 'syz.8.6988': attribute type 1 has an invalid length. [ 932.537559][T29619] bond38: (slave vxcan1): The slave device specified does not support setting the MAC address [ 932.558304][T29619] bond38: (slave vxcan1): Error -95 calling set_mac_address [ 932.572782][T29622] netlink: 'syz.7.6989': attribute type 1 has an invalid length. [ 932.586641][T29626] netlink: 'syz.3.6991': attribute type 1 has an invalid length. [ 932.644546][T29622] 8021q: adding VLAN 0 to HW filter on device bond27 [ 932.702100][T29626] 8021q: adding VLAN 0 to HW filter on device bond49 [ 932.724775][T29629] bond27: (slave veth15): Enslaving as an active interface with a down link [ 932.748119][T29630] bond49: (slave veth51): Enslaving as an active interface with a down link [ 932.774482][T29619] macvlan2: entered promiscuous mode [ 932.790066][T29619] macvlan2: entered allmulticast mode [ 932.804401][T29619] bond38: entered promiscuous mode [ 932.811801][T29626] netlink: 'syz.3.6991': attribute type 1 has an invalid length. [ 932.822107][T29619] 8021q: adding VLAN 0 to HW filter on device macvlan2 [ 932.834920][T29619] bond38: left promiscuous mode [ 932.848234][T29629] netlink: 'syz.7.6989': attribute type 1 has an invalid length. [ 932.869191][T29626] 8021q: adding VLAN 0 to HW filter on device batadv8 [ 932.876764][T29626] bond49: (slave batadv8): dev_set_mac_address on slave failed! ALB mode requires that the base driver support setting the hw address also when the network device's interface is open [ 932.937360][T29622] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 932.947250][T29622] bond27: (slave batadv0): dev_set_mac_address on slave failed! ALB mode requires that the base driver support setting the hw address also when the network device's interface is open [ 933.305726][T29653] netlink: 12 bytes leftover after parsing attributes in process `syz.8.6993'. [ 933.734291][T29662] netlink: 12 bytes leftover after parsing attributes in process `syz.1.6997'. [ 933.804549][T29664] netlink: 'syz.6.6998': attribute type 1 has an invalid length. [ 933.928058][T29664] 8021q: adding VLAN 0 to HW filter on device bond32 [ 934.115347][T29664] netlink: 'syz.6.6998': attribute type 1 has an invalid length. [ 934.710561][T29686] netlink: 144 bytes leftover after parsing attributes in process `syz.8.7004'. [ 934.921218][ C0] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 934.929796][ C0] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 934.997988][T29700] netlink: 12 bytes leftover after parsing attributes in process `syz.3.7001'. [ 935.368694][T29711] netlink: 'syz.8.7010': attribute type 1 has an invalid length. [ 935.447991][T29717] netlink: 12 bytes leftover after parsing attributes in process `syz.6.7007'. [ 935.578380][T29718] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 935.587381][ C0] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 935.738385][T29718] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 935.747554][T29718] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 935.909221][T29711] 8021q: adding VLAN 0 to HW filter on device bond40 [ 936.082948][T29711] netlink: 'syz.8.7010': attribute type 1 has an invalid length. [ 936.201002][T29730] netlink: 'syz.3.7012': attribute type 1 has an invalid length. [ 936.283846][T29730] 8021q: adding VLAN 0 to HW filter on device bond51 [ 936.420116][T29732] netlink: 'syz.3.7012': attribute type 1 has an invalid length. [ 936.668137][T29746] netlink: 12 bytes leftover after parsing attributes in process `syz.7.7014'. [ 937.032656][ C0] lec0: NETDEV WATCHDOG: CPU: 0: transmit queue 0 timed out 5010 ms [ 937.040730][ C0] lec:lec_tx_timeout: lec0 [ 937.253980][T29766] netlink: 'syz.6.7022': attribute type 1 has an invalid length. [ 937.462769][T29775] netlink: 12 bytes leftover after parsing attributes in process `syz.1.7020'. [ 937.638698][T29780] netlink: 12 bytes leftover after parsing attributes in process `syz.8.7021'. [ 938.027432][T29773] bond34: (slave vxcan3): The slave device specified does not support setting the MAC address [ 938.087793][T29773] bond34: (slave vxcan3): Error -95 calling set_mac_address [ 938.185492][T29784] netlink: 'syz.7.7023': attribute type 1 has an invalid length. [ 938.241878][T29780] workqueue: Failed to create a rescuer kthread for wq "bond41": -EINTR [ 938.257602][T29776] macvlan2: entered promiscuous mode [ 938.302635][T29776] macvlan2: entered allmulticast mode [ 938.312025][T29776] bond34: entered promiscuous mode [ 938.317808][T29776] 8021q: adding VLAN 0 to HW filter on device macvlan2 [ 938.345362][T29776] bond34: left promiscuous mode [ 938.444689][T29784] 8021q: adding VLAN 0 to HW filter on device bond29 [ 938.456626][T21902] net_ratelimit: 2 callbacks suppressed [ 938.456663][T21902] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 938.575056][T29784] netlink: 'syz.7.7023': attribute type 1 has an invalid length. [ 938.608179][T29786] bond29: (slave veth17): Enslaving as an active interface with a down link [ 938.657708][T29795] netlink: 'syz.1.7025': attribute type 1 has an invalid length. [ 938.670173][T29789] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 938.828696][T29800] netlink: 12 bytes leftover after parsing attributes in process `syz.6.7024'. [ 938.838460][T29789] bond29: (slave batadv0): dev_set_mac_address on slave failed! ALB mode requires that the base driver support setting the hw address also when the network device's interface is open [ 939.693579][T29801] macvlan4: entered promiscuous mode [ 939.700729][T29801] macvlan4: entered allmulticast mode [ 939.708892][T29801] bond47: entered promiscuous mode [ 939.719847][T29801] 8021q: adding VLAN 0 to HW filter on device macvlan4 [ 939.734824][T29801] bond47: left promiscuous mode [ 940.067940][T29823] netlink: 12 bytes leftover after parsing attributes in process `syz.3.7027'. [ 940.506362][T29828] netlink: 'syz.8.7033': attribute type 1 has an invalid length. [ 941.038573][T29845] netlink: 'syz.8.7033': attribute type 1 has an invalid length. [ 941.850178][T29874] netlink: 12 bytes leftover after parsing attributes in process `syz.3.7039'. [ 942.873843][T29880] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 942.882214][ C1] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 943.366783][T29895] netlink: 12 bytes leftover after parsing attributes in process `syz.8.7042'. [ 943.681349][T29856] lec:lec_atm_close: lec0: Shut down! [ 944.128439][T29898] netlink: 12 bytes leftover after parsing attributes in process `syz.7.7044'. [ 944.494960][T29905] netlink: 'syz.3.7047': attribute type 1 has an invalid length. [ 944.538871][T29916] bond48: (slave vxcan5): The slave device specified does not support setting the MAC address [ 944.550428][T29916] bond48: (slave vxcan5): Error -95 calling set_mac_address [ 944.625953][T29919] macvlan4: entered promiscuous mode [ 944.660237][T29919] macvlan4: entered allmulticast mode [ 944.668520][T29919] bond48: entered promiscuous mode [ 944.722235][T29919] 8021q: adding VLAN 0 to HW filter on device macvlan4 [ 944.764811][T29919] bond48: left promiscuous mode [ 944.770444][T29927] netlink: 'syz.3.7054': attribute type 1 has an invalid length. [ 944.817602][T29927] 8021q: adding VLAN 0 to HW filter on device bond54 [ 944.908713][T29927] netlink: 'syz.3.7054': attribute type 1 has an invalid length. [ 945.383445][T29949] netlink: 12 bytes leftover after parsing attributes in process `syz.6.7052'. [ 945.535632][T29948] netlink: 12 bytes leftover after parsing attributes in process `syz.7.7053'. [ 945.953674][T29935] syzkaller0: entered promiscuous mode [ 945.959202][T29935] syzkaller0: entered allmulticast mode [ 946.160895][T29954] netlink: 'syz.3.7057': attribute type 1 has an invalid length. [ 946.217232][T29954] bond55: (slave vxcan7): The slave device specified does not support setting the MAC address [ 946.229108][T29954] bond55: (slave vxcan7): Error -95 calling set_mac_address [ 946.659386][T29958] macvlan0: entered promiscuous mode [ 946.665113][T29958] macvlan0: entered allmulticast mode [ 946.672291][T29958] bond55: entered promiscuous mode [ 946.678112][T29958] 8021q: adding VLAN 0 to HW filter on device macvlan0 [ 946.752136][T29958] bond55: left promiscuous mode [ 946.830527][T29964] netlink: 144 bytes leftover after parsing attributes in process `syz.6.7059'. [ 947.121971][T29980] netlink: 12 bytes leftover after parsing attributes in process `syz.8.7058'. [ 948.933679][ C0] lec0: NETDEV WATCHDOG: CPU: 0: transmit queue 0 timed out 5250 ms [ 948.941754][ C0] lec:lec_tx_timeout: lec0 [ 949.991601][T29979] netlink: 'syz.3.7061': attribute type 1 has an invalid length. [ 950.199852][T29988] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 950.210101][T29988] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 950.227557][T29988] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 950.417334][T30007] netlink: 'syz.8.7069': attribute type 1 has an invalid length. [ 950.544341][T30004] netlink: 'syz.3.7068': attribute type 1 has an invalid length. [ 950.610273][T29996] lec:lec_atm_close: lec0: Shut down! [ 950.814889][T30015] macvlan2: entered promiscuous mode [ 950.829527][T30015] macvlan2: entered allmulticast mode [ 950.852584][T30015] bond42: entered promiscuous mode [ 950.870695][T30015] 8021q: adding VLAN 0 to HW filter on device macvlan2 [ 950.932209][T30015] bond42: left promiscuous mode [ 951.010596][T29985] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 951.046472][T29985] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 951.402482][ T1665] block nbd2: Possible stuck request ffff888038260000: control (read@0,1024B). Runtime 60 seconds [ 951.413445][ T1665] block nbd2: Possible stuck request ffff888038260200: control (read@1024,1024B). Runtime 60 seconds [ 951.424769][ T1665] block nbd2: Possible stuck request ffff888038260400: control (read@2048,1024B). Runtime 60 seconds [ 951.436185][ T1665] block nbd2: Possible stuck request ffff888038260600: control (read@3072,1024B). Runtime 60 seconds [ 951.780365][T30035] netlink: 12 bytes leftover after parsing attributes in process `syz.7.7072'. [ 951.900354][T30037] syzkaller0: entered promiscuous mode [ 951.911594][T30037] syzkaller0: entered allmulticast mode [ 952.804624][T30049] netlink: 28 bytes leftover after parsing attributes in process `syz.7.7078'. [ 953.067250][T30061] netlink: 12 bytes leftover after parsing attributes in process `syz.1.7077'. [ 953.070220][T30062] netlink: 12 bytes leftover after parsing attributes in process `syz.8.7081'. [ 953.295085][T30068] netlink: 'syz.8.7081': attribute type 1 has an invalid length. [ 954.704210][T30084] netlink: 'syz.8.7084': attribute type 1 has an invalid length. [ 954.763745][T30084] bond43: (slave vxcan1): The slave device specified does not support setting the MAC address [ 954.782354][T30084] bond43: (slave vxcan1): Error -95 calling set_mac_address [ 954.973550][T30089] macvlan2: entered promiscuous mode [ 954.986027][T30089] macvlan2: entered allmulticast mode [ 955.016130][T30089] bond43: entered promiscuous mode [ 955.029139][T30089] 8021q: adding VLAN 0 to HW filter on device macvlan2 [ 955.070628][T30089] bond43: left promiscuous mode [ 955.289128][T30097] 8021q: adding VLAN 0 to HW filter on device bond44 [ 955.312956][T30100] syzkaller0: entered promiscuous mode [ 955.318446][T30100] syzkaller0: entered allmulticast mode [ 955.377146][T30097] bond44: (slave veth19): Enslaving as an active interface with an up link [ 955.475962][T30097] netlink: 'syz.8.7087': attribute type 1 has an invalid length. [ 955.494217][T30097] 8021q: adding VLAN 0 to HW filter on device batadv6 [ 955.507008][T30097] bond44: (slave batadv6): Enslaving as an active interface with an up link [ 955.881040][ C0] lec0: NETDEV WATCHDOG: CPU: 0: transmit queue 0 timed out 5280 ms [ 955.889098][ C0] lec:lec_tx_timeout: lec0 [ 957.130701][T30153] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 957.149843][T30153] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 957.159998][T30153] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 957.210273][T30151] syzkaller0: entered promiscuous mode [ 957.230886][T30151] syzkaller0: entered allmulticast mode [ 957.338087][T30161] netlink: 28 bytes leftover after parsing attributes in process `syz.3.7102'. [ 957.356042][T30135] lec:lec_atm_close: lec0: Shut down! [ 957.688774][T30175] netlink: 28 bytes leftover after parsing attributes in process `syz.1.7105'. [ 957.770750][T30175] netlink: 'syz.1.7105': attribute type 1 has an invalid length. [ 957.974125][T30152] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 957.995277][T30181] netlink: 12 bytes leftover after parsing attributes in process `syz.3.7104'. [ 958.273688][T30152] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 958.433087][T30198] netlink: 'syz.1.7108': attribute type 1 has an invalid length. [ 958.670075][T30190] netlink: 'syz.6.7107': attribute type 1 has an invalid length. [ 958.849009][T30200] netlink: 'syz.1.7108': attribute type 1 has an invalid length. [ 958.962579][T30198] 8021q: adding VLAN 0 to HW filter on device bond50 [ 959.023746][T30196] bond50: (slave veth43): Enslaving as an active interface with a down link [ 959.070826][T30201] 8021q: adding VLAN 0 to HW filter on device batadv3 [ 959.079797][T30201] bond50: (slave batadv3): dev_set_mac_address on slave failed! ALB mode requires that the base driver support setting the hw address also when the network device's interface is open [ 959.638048][T30241] netlink: 12 bytes leftover after parsing attributes in process `syz.3.7113'. [ 960.996321][T30260] netlink: 'syz.6.7118': attribute type 1 has an invalid length. [ 961.009395][T30237] lec:lec_atm_close: lec0: Shut down! [ 961.088302][T30260] macvlan2: entered promiscuous mode [ 961.094191][T30260] macvlan2: entered allmulticast mode [ 961.100905][T30260] bond37: entered promiscuous mode [ 961.131411][T30260] 8021q: adding VLAN 0 to HW filter on device macvlan2 [ 961.215207][T30260] bond37: left promiscuous mode [ 961.324048][T30268] netlink: 4 bytes leftover after parsing attributes in process `syz.8.7122'. [ 961.435672][T30273] netlink: 'syz.3.7124': attribute type 1 has an invalid length. [ 961.479859][T30268] netlink: 'syz.8.7122': attribute type 1 has an invalid length. [ 961.499163][T30273] 8021q: adding VLAN 0 to HW filter on device bond57 [ 961.563733][T30273] bond57: (slave veth61): Enslaving as an active interface with an up link [ 961.765276][T30284] netlink: 12 bytes leftover after parsing attributes in process `syz.6.7123'. [ 961.783582][T30278] netlink: 'syz.3.7124': attribute type 1 has an invalid length. [ 962.041267][ C1] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 962.049831][ C1] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 962.113910][T30278] 8021q: adding VLAN 0 to HW filter on device batadv12 [ 962.198449][T30278] bond57: (slave batadv12): Enslaving as an active interface with an up link [ 962.840807][T30308] netlink: 'syz.3.7129': attribute type 1 has an invalid length. [ 962.952510][T30313] netlink: 28 bytes leftover after parsing attributes in process `syz.3.7129'. [ 963.026168][T30308] macvlan0: entered promiscuous mode [ 963.041685][T30308] macvlan0: entered allmulticast mode [ 963.048090][T30308] bond58: entered promiscuous mode [ 963.055486][T30308] 8021q: adding VLAN 0 to HW filter on device macvlan0 [ 963.264788][T30321] netlink: 12 bytes leftover after parsing attributes in process `syz.6.7130'. [ 963.282932][T30308] bond58: left promiscuous mode [ 964.151644][T30337] netlink: 12 bytes leftover after parsing attributes in process `syz.3.7133'. [ 965.412041][T30348] netlink: 'syz.8.7135': attribute type 1 has an invalid length. [ 965.507282][T30348] 8021q: adding VLAN 0 to HW filter on device bond45 [ 965.607536][T30351] bond45: (slave veth21): Enslaving as an active interface with an up link [ 965.720383][T30348] netlink: 'syz.8.7135': attribute type 1 has an invalid length. [ 965.773966][T30348] 8021q: adding VLAN 0 to HW filter on device batadv7 [ 965.797445][T30348] bond45: (slave batadv7): Enslaving as an active interface with an up link [ 966.045163][T30376] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 966.054762][T30376] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 966.065349][T30376] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 966.121230][ C0] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 966.129783][ C0] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 966.376746][T30353] lec:lec_atm_close: lec0: Shut down! [ 966.686344][T30390] netlink: 'syz.6.7143': attribute type 1 has an invalid length. [ 966.879574][T30375] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 966.890082][T30375] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 967.429386][T30417] netlink: 12 bytes leftover after parsing attributes in process `syz.7.7147'. [ 967.711135][T30396] lec:lec_atm_close: lec0: Shut down! [ 967.763177][T18550] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 967.836278][T30424] netlink: 'syz.1.7149': attribute type 1 has an invalid length. [ 967.900138][T30424] 8021q: adding VLAN 0 to HW filter on device bond51 [ 968.230202][T30424] bond51: (slave veth45): Enslaving as an active interface with an up link [ 968.428228][T30424] netlink: 'syz.1.7149': attribute type 1 has an invalid length. [ 968.478700][T30424] 8021q: adding VLAN 0 to HW filter on device batadv3 [ 968.501881][T30424] bond51: (slave batadv3): Enslaving as an active interface with an up link [ 968.673776][T30437] netlink: 'syz.8.7151': attribute type 1 has an invalid length. [ 968.701653][T30448] netlink: 'syz.3.7155': attribute type 1 has an invalid length. [ 968.755002][T30448] netlink: 28 bytes leftover after parsing attributes in process `syz.3.7155'. [ 968.789050][T30448] macvlan0: entered promiscuous mode [ 968.794780][T30448] macvlan0: entered allmulticast mode [ 968.802088][T30448] bond59: entered promiscuous mode [ 968.808048][T30448] 8021q: adding VLAN 0 to HW filter on device macvlan0 [ 968.818976][T30448] bond59: left promiscuous mode [ 969.077624][T30461] netlink: 12 bytes leftover after parsing attributes in process `syz.1.7154'. [ 970.142500][T30487] A link change request failed with some changes committed already. Interface caif0 may have been left with an inconsistent configuration, please check. [ 970.986474][T30496] netlink: 'syz.7.7164': attribute type 1 has an invalid length. [ 971.088175][T30504] macvlan2: entered promiscuous mode [ 971.094523][T30504] macvlan2: entered allmulticast mode [ 971.105274][T30504] bond32: entered promiscuous mode [ 971.171309][T30504] 8021q: adding VLAN 0 to HW filter on device macvlan2 [ 971.262219][T30504] bond32: left promiscuous mode [ 971.640253][T30516] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 971.649192][ C0] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 971.866161][T30516] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 971.901356][T30516] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 971.910129][ T1093] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 971.932840][T30516] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 972.925223][T30552] netlink: 12 bytes leftover after parsing attributes in process `syz.1.7172'. [ 972.934363][ C0] lec0: NETDEV WATCHDOG: CPU: 0: transmit queue 0 timed out 5220 ms [ 972.934393][ C0] lec:lec_tx_timeout: lec0 [ 974.222968][T30574] netlink: 12 bytes leftover after parsing attributes in process `syz.7.7174'. [ 974.945389][T30573] faux_driver regulatory: loading /lib/firmware/regulatory.db failed with error -4 [ 974.985319][T30573] faux_driver regulatory: Direct firmware load for regulatory.db failed with error -4 [ 975.038033][T30573] faux_driver regulatory: Falling back to sysfs fallback for: regulatory.db [ 975.170643][T30586] netlink: 12 bytes leftover after parsing attributes in process `syz.1.7179'. [ 975.561344][ C1] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 976.127801][T30607] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 976.136529][ C1] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 976.152923][T30607] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 976.330205][T30622] netlink: 'syz.7.7186': attribute type 1 has an invalid length. [ 976.405604][T30622] macvlan2: entered promiscuous mode [ 976.413182][T30622] macvlan2: entered allmulticast mode [ 976.420322][T30622] bond34: entered promiscuous mode [ 976.427171][T30622] 8021q: adding VLAN 0 to HW filter on device macvlan2 [ 976.459209][T30622] bond34: left promiscuous mode [ 976.700497][T30630] netlink: 12 bytes leftover after parsing attributes in process `syz.1.7187'. [ 976.757551][T30632] net_ratelimit: 3 callbacks suppressed [ 976.757571][T30632] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 976.773951][T30632] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 976.977188][T30632] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 977.312502][T30637] netlink: 'syz.3.7189': attribute type 1 has an invalid length. [ 977.595091][T30637] macvlan0: entered promiscuous mode [ 977.600443][T30637] macvlan0: entered allmulticast mode [ 977.607628][T30637] bond60: entered promiscuous mode [ 977.613801][T30637] 8021q: adding VLAN 0 to HW filter on device macvlan0 [ 977.637263][T30637] bond60: left promiscuous mode [ 978.074885][T30666] netlink: 12 bytes leftover after parsing attributes in process `syz.1.7192'. [ 978.230211][T30671] netlink: 12 bytes leftover after parsing attributes in process `syz.3.7193'. [ 978.973251][T30631] lec:lec_atm_close: lec0: Shut down! [ 978.999261][T30631] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 979.040462][T30631] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 980.024774][T30708] netlink: 'syz.8.7201': attribute type 1 has an invalid length. [ 980.132100][T30712] netlink: 12 bytes leftover after parsing attributes in process `syz.7.7195'. [ 980.155420][T30713] netlink: 12 bytes leftover after parsing attributes in process `syz.6.7198'. [ 981.031895][T30712] workqueue: Failed to create a rescuer kthread for wq "bond35": -EINTR [ 981.126230][T30718] macvlan2: entered promiscuous mode [ 981.140650][T30692] lec:lec_atm_close: lec0: Shut down! [ 981.140705][T30718] macvlan2: entered allmulticast mode [ 981.172753][T30718] bond46: entered promiscuous mode [ 981.185914][T30718] 8021q: adding VLAN 0 to HW filter on device macvlan2 [ 981.215243][T30718] bond46: left promiscuous mode [ 981.362976][T30724] netlink: 'syz.7.7202': attribute type 13 has an invalid length. [ 981.483786][ T1665] block nbd2: Possible stuck request ffff888038260000: control (read@0,1024B). Runtime 90 seconds [ 981.494656][ T1665] block nbd2: Possible stuck request ffff888038260200: control (read@1024,1024B). Runtime 90 seconds [ 981.508119][ T1665] block nbd2: Possible stuck request ffff888038260400: control (read@2048,1024B). Runtime 90 seconds [ 981.522368][ T1665] block nbd2: Possible stuck request ffff888038260600: control (read@3072,1024B). Runtime 90 seconds [ 981.643277][T30732] netlink: 'syz.3.7204': attribute type 1 has an invalid length. [ 981.830541][T30742] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 981.839206][ C1] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 981.851712][T30742] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 981.862625][ T1113] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 981.882431][ C0] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 981.893881][T30742] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 981.902832][ C0] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 981.949617][T30732] macvlan0: entered promiscuous mode [ 981.957851][T30732] macvlan0: entered allmulticast mode [ 981.969689][T30732] bond62: entered promiscuous mode [ 981.976328][T30732] 8021q: adding VLAN 0 to HW filter on device macvlan0 [ 981.987013][T30732] bond62: left promiscuous mode [ 982.221388][T30758] netlink: 28 bytes leftover after parsing attributes in process `syz.7.7210'. [ 982.297800][T30758] netlink: 'syz.7.7210': attribute type 1 has an invalid length. [ 982.514452][T30770] netlink: 12 bytes leftover after parsing attributes in process `syz.6.7212'. [ 982.540672][T30771] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 982.612316][T30771] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 982.620879][T30771] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 983.741645][T30797] netlink: 12 bytes leftover after parsing attributes in process `syz.8.7216'. [ 984.244597][T30804] netlink: 8 bytes leftover after parsing attributes in process `syz.6.7220'. [ 984.481231][T30805] netlink: 12 bytes leftover after parsing attributes in process `syz.1.7217'. [ 984.765060][T30804] netlink: 'syz.6.7220': attribute type 1 has an invalid length. [ 985.034637][T30820] netlink: 12 bytes leftover after parsing attributes in process `syz.3.7219'. [ 985.677770][T30834] syzkaller0: entered promiscuous mode [ 985.696764][T30834] syzkaller0: entered allmulticast mode [ 985.792555][T30835] netlink: 'syz.8.7226': attribute type 1 has an invalid length. [ 985.990580][T30835] 8021q: adding VLAN 0 to HW filter on device bond48 [ 986.142215][T30845] netlink: 12 bytes leftover after parsing attributes in process `syz.1.7227'. [ 986.267584][T30835] netlink: 'syz.8.7226': attribute type 1 has an invalid length. [ 986.410435][T30839] bond48: (slave batadv8): Opening slave failed [ 986.438568][T30850] netlink: 'syz.3.7228': attribute type 1 has an invalid length. [ 986.508826][T30850] macvlan0: entered promiscuous mode [ 986.514834][T30850] macvlan0: entered allmulticast mode [ 986.522840][T30850] bond64: entered promiscuous mode [ 986.528660][T30850] 8021q: adding VLAN 0 to HW filter on device macvlan0 [ 986.538224][T30850] bond64: left promiscuous mode [ 986.921039][ C0] lec0: NETDEV WATCHDOG: CPU: 0: transmit queue 0 timed out 5790 ms [ 986.929129][ C0] lec:lec_tx_timeout: lec0 [ 987.169869][T30870] netlink: 'syz.7.7234': attribute type 1 has an invalid length. [ 987.283363][T30870] macvlan2: entered promiscuous mode [ 987.288893][T30870] macvlan2: entered allmulticast mode [ 987.295926][T30870] bond35: entered promiscuous mode [ 987.302810][T30870] 8021q: adding VLAN 0 to HW filter on device macvlan2 [ 987.441622][T30881] netlink: 12 bytes leftover after parsing attributes in process `syz.8.7233'. [ 987.455515][T30870] bond35: left promiscuous mode [ 987.474322][T30882] netlink: 12 bytes leftover after parsing attributes in process `syz.3.7235'. [ 987.898027][T30882] workqueue: Failed to create a rescuer kthread for wq "bond65": -EINTR [ 987.915859][T13994] lec:lec_start_xmit: lec0:No lecd attached [ 988.205619][T30881] workqueue: Failed to create a rescuer kthread for wq "bond49": -EINTR [ 988.767942][T30916] netlink: 12 bytes leftover after parsing attributes in process `syz.7.7239'. [ 989.020467][T30920] netlink: 12 bytes leftover after parsing attributes in process `syz.6.7242'. [ 989.333257][T30919] netlink: 12 bytes leftover after parsing attributes in process `syz.1.7243'. [ 990.176348][T30919] workqueue: Failed to create a rescuer kthread for wq "bond59": -EINTR [ 990.890656][T30947] netlink: 'syz.6.7248': attribute type 1 has an invalid length. [ 990.972547][T30949] bond41: (slave vxcan3): The slave device specified does not support setting the MAC address [ 990.985627][T30949] bond41: (slave vxcan3): Error -95 calling set_mac_address [ 991.027650][T30947] macvlan2: entered promiscuous mode [ 991.033757][T30947] macvlan2: entered allmulticast mode [ 991.039931][T30947] bond41: entered promiscuous mode [ 991.048581][T30947] 8021q: adding VLAN 0 to HW filter on device macvlan2 [ 991.058772][T30947] bond41: left promiscuous mode [ 991.114611][T30951] syzkaller0: entered promiscuous mode [ 991.120729][T30951] syzkaller0: entered allmulticast mode [ 991.520249][T30969] netlink: 12 bytes leftover after parsing attributes in process `syz.3.7250'. [ 991.606978][T30971] netlink: 12 bytes leftover after parsing attributes in process `syz.7.7251'. [ 992.429134][T30977] netlink: 'syz.6.7253': attribute type 1 has an invalid length. [ 992.491929][T30978] netlink: 8 bytes leftover after parsing attributes in process `syz.6.7253'. [ 992.500864][T30978] netlink: 4 bytes leftover after parsing attributes in process `syz.6.7253'. [ 992.941385][ C0] lec0: NETDEV WATCHDOG: CPU: 0: transmit queue 0 timed out 5010 ms [ 992.949490][ C0] lec:lec_tx_timeout: lec0 [ 993.005667][ T1301] net_ratelimit: 10 callbacks suppressed [ 993.005686][ T1301] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 993.022726][ T1301] lec:lec_start_xmit: lec0:No lecd attached [ 993.029108][ T1301] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 993.039912][ T1301] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 994.867729][T30969] workqueue: Failed to create a rescuer kthread for wq "bond65": -EINTR [ 994.883627][T30971] workqueue: Failed to create a rescuer kthread for wq "bond37": -EINTR [ 994.922815][T30977] workqueue: Failed to create a rescuer kthread for wq "bond42": -EINTR [ 995.053740][T30986] netlink: 'syz.3.7254': attribute type 1 has an invalid length. [ 995.118850][T30986] netlink: 4 bytes leftover after parsing attributes in process `syz.3.7254'. [ 995.139460][T30986] macvlan0: entered promiscuous mode [ 995.147407][T30986] macvlan0: entered allmulticast mode [ 995.159353][T30986] bond65: entered promiscuous mode [ 995.165971][T30986] 8021q: adding VLAN 0 to HW filter on device macvlan0 [ 995.208473][T30986] bond65: left promiscuous mode [ 995.331344][T31008] netlink: 12 bytes leftover after parsing attributes in process `syz.7.7258'. [ 995.725938][T31011] netlink: 12 bytes leftover after parsing attributes in process `syz.8.7255'. [ 996.323633][T31028] netlink: 12 bytes leftover after parsing attributes in process `syz.6.7261'. [ 996.800524][T31033] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 996.816299][T31033] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 996.861406][T31033] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 997.560826][T31043] netlink: 'syz.8.7266': attribute type 1 has an invalid length. [ 997.622893][T31050] netlink: 12 bytes leftover after parsing attributes in process `syz.3.7265'. [ 997.635989][T31032] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 997.646233][T31032] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 998.030973][ C0] lec0: NETDEV WATCHDOG: CPU: 0: transmit queue 0 timed out 5010 ms [ 998.039023][ C0] lec:lec_tx_timeout: lec0 [ 998.062849][T31057] netlink: 12 bytes leftover after parsing attributes in process `syz.6.7267'. [ 998.186624][T31061] tipc: Enabling of bearer rejected, already enabled [ 998.820556][T31078] netlink: 12 bytes leftover after parsing attributes in process `syz.8.7270'. [ 998.884420][T31079] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 998.893055][T31079] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 998.902177][T31079] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 999.882717][T31088] A link change request failed with some changes committed already. Interface caif0 may have been left with an inconsistent configuration, please check. [ 1000.243648][T31104] netlink: 12 bytes leftover after parsing attributes in process `syz.3.7274'. [ 1000.523200][T31108] netlink: 12 bytes leftover after parsing attributes in process `syz.8.7276'. [ 1000.550362][T31077] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1000.771280][T31077] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1001.342289][T31124] netlink: 'syz.7.7280': attribute type 1 has an invalid length. [ 1001.467398][T31124] macvlan2: entered promiscuous mode [ 1001.512895][T31124] macvlan2: entered allmulticast mode [ 1001.523065][T31124] bond38: entered promiscuous mode [ 1001.529055][T31124] 8021q: adding VLAN 0 to HW filter on device macvlan2 [ 1001.629290][T31124] bond38: left promiscuous mode [ 1001.636861][T31130] netlink: 12 bytes leftover after parsing attributes in process `syz.6.7279'. [ 1002.089013][T31139] netlink: 'syz.8.7284': attribute type 1 has an invalid length. [ 1002.247080][T31139] 8021q: adding VLAN 0 to HW filter on device bond52 [ 1002.311412][ T796] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1002.514159][T31153] netlink: 12 bytes leftover after parsing attributes in process `syz.7.7282'. [ 1002.581436][T31146] A link change request failed with some changes committed already. Interface caif0 may have been left with an inconsistent configuration, please check. [ 1002.626739][T31139] netlink: 'syz.8.7284': attribute type 1 has an invalid length. [ 1002.722425][T31157] netlink: 'syz.1.7286': attribute type 13 has an invalid length. [ 1002.867720][T21902] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1002.945088][ T796] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1003.185804][T31139] bond52: (slave batadv8): Opening slave failed [ 1003.504605][T31181] netlink: 12 bytes leftover after parsing attributes in process `syz.6.7288'. [ 1004.332839][T31197] net_ratelimit: 1 callbacks suppressed [ 1004.332856][T31197] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1004.764296][T31206] netlink: 28 bytes leftover after parsing attributes in process `syz.6.7293'. [ 1004.834896][T31208] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1004.862470][T31208] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1004.870845][T31208] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1005.017709][T31216] netlink: 'syz.8.7295': attribute type 1 has an invalid length. [ 1005.051627][T31206] netlink: 'syz.6.7293': attribute type 1 has an invalid length. [ 1005.164253][T31223] macvlan2: entered promiscuous mode [ 1005.169809][T31223] macvlan2: entered allmulticast mode [ 1005.177168][T31223] bond53: entered promiscuous mode [ 1005.183383][T31223] 8021q: adding VLAN 0 to HW filter on device macvlan2 [ 1005.193700][T31223] bond53: left promiscuous mode [ 1005.293539][T31196] lec:lec_atm_close: lec0: Shut down! [ 1005.468707][T31228] netlink: 12 bytes leftover after parsing attributes in process `syz.1.7296'. [ 1005.666163][T31235] tipc: Enabling of bearer rejected, failed to enable media [ 1005.666212][T31207] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1005.684165][T31207] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1005.981297][T31248] netlink: 12 bytes leftover after parsing attributes in process `syz.3.7300'. [ 1006.342824][T31253] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1006.351339][ C1] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1006.664745][T31256] netlink: 'syz.7.7302': attribute type 1 has an invalid length. [ 1006.822874][T31258] netlink: 28 bytes leftover after parsing attributes in process `syz.7.7302'. [ 1006.904269][T31262] macvlan2: entered promiscuous mode [ 1006.909630][T31262] macvlan2: entered allmulticast mode [ 1006.924406][T31262] bond40: entered promiscuous mode [ 1006.934648][T31262] 8021q: adding VLAN 0 to HW filter on device macvlan2 [ 1006.971823][T31262] bond40: left promiscuous mode [ 1007.153186][T31270] netlink: 12 bytes leftover after parsing attributes in process `syz.6.7303'. [ 1007.184803][T31267] lo speed is unknown, defaulting to 1000 [ 1007.192897][T31267] lo speed is unknown, defaulting to 1000 [ 1007.904442][T31281] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1007.935987][T31281] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1008.856384][T31311] netlink: 12 bytes leftover after parsing attributes in process `syz.7.7312'. [ 1008.946162][T31310] netlink: 12 bytes leftover after parsing attributes in process `syz.6.7311'. [ 1008.958712][T31302] lo speed is unknown, defaulting to 1000 [ 1008.983060][T31302] lo speed is unknown, defaulting to 1000 [ 1009.425804][T31322] net_ratelimit: 4 callbacks suppressed [ 1009.425823][T31322] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1009.867082][T31326] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1009.921280][T31326] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1009.929655][T31326] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1010.694974][T31325] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1010.714714][T31325] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1010.875515][T31348] netlink: 12 bytes leftover after parsing attributes in process `syz.3.7318'. [ 1010.906492][T31345] netlink: 12 bytes leftover after parsing attributes in process `syz.1.7317'. [ 1010.921644][ C0] lec0: NETDEV WATCHDOG: CPU: 0: transmit queue 0 timed out 5630 ms [ 1010.929735][ C0] lec:lec_tx_timeout: lec0 [ 1011.570753][ T1665] block nbd2: Possible stuck request ffff888038260000: control (read@0,1024B). Runtime 120 seconds [ 1011.583784][ T1665] block nbd2: Possible stuck request ffff888038260200: control (read@1024,1024B). Runtime 120 seconds [ 1011.594964][ T1665] block nbd2: Possible stuck request ffff888038260400: control (read@2048,1024B). Runtime 120 seconds [ 1011.606212][ T1665] block nbd2: Possible stuck request ffff888038260600: control (read@3072,1024B). Runtime 120 seconds [ 1011.639070][T31357] netlink: 12 bytes leftover after parsing attributes in process `syz.8.7319'. [ 1011.733298][T31367] netlink: 108 bytes leftover after parsing attributes in process `syz.1.7322'. [ 1011.786676][T31368] netlink: 12 bytes leftover after parsing attributes in process `syz.7.7321'. [ 1011.864317][T31371] netlink: 'syz.1.7323': attribute type 13 has an invalid length. [ 1012.222988][T31384] netlink: 12 bytes leftover after parsing attributes in process `syz.3.7324'. [ 1012.752659][T31395] netlink: 12 bytes leftover after parsing attributes in process `syz.8.7326'. [ 1013.217134][T31403] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1013.240670][T31403] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1013.315167][T31403] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1013.470638][T31406] lo speed is unknown, defaulting to 1000 [ 1013.484007][T31408] lec:lec_vcc_attach: copy from user failed for 28 bytes [ 1013.575647][T31406] lo speed is unknown, defaulting to 1000 [ 1013.583031][T31411] lo speed is unknown, defaulting to 1000 [ 1013.682267][T31413] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1013.953538][T31411] lo speed is unknown, defaulting to 1000 [ 1014.588137][T31423] lo speed is unknown, defaulting to 1000 [ 1014.611541][T31423] lo speed is unknown, defaulting to 1000 [ 1014.716484][T31433] netlink: 'syz.3.7337': attribute type 1 has an invalid length. [ 1014.741184][T31427] xt_CT: No such helper "syz1" [ 1014.835334][T31433] 8021q: adding VLAN 0 to HW filter on device bond71 [ 1014.848044][T31431] lec:lec_vcc_attach: copy from user failed for 28 bytes [ 1015.068640][T31439] netlink: 'syz.3.7337': attribute type 1 has an invalid length. [ 1015.347836][T31445] netlink: 'syz.8.7338': attribute type 1 has an invalid length. [ 1015.452280][T31448] netlink: 28 bytes leftover after parsing attributes in process `syz.8.7338'. [ 1015.574259][T31451] netlink: 'syz.6.7340': attribute type 1 has an invalid length. [ 1015.626270][T31456] netlink: 28 bytes leftover after parsing attributes in process `syz.6.7340'. [ 1015.734311][T31457] netlink: 12 bytes leftover after parsing attributes in process `syz.3.7339'. [ 1016.116614][T31451] 8021q: adding VLAN 0 to HW filter on device bond48 [ 1016.252596][T31436] lo speed is unknown, defaulting to 1000 [ 1016.260107][T31436] lo speed is unknown, defaulting to 1000 [ 1016.288167][T31445] macvlan2: entered promiscuous mode [ 1016.311574][T31445] macvlan2: entered allmulticast mode [ 1016.318252][T31445] bond56: entered promiscuous mode [ 1016.331123][T31451] netlink: 'syz.6.7340': attribute type 1 has an invalid length. [ 1016.362403][T31445] 8021q: adding VLAN 0 to HW filter on device macvlan2 [ 1016.391355][T31445] bond56: left promiscuous mode [ 1016.423793][T31457] workqueue: Failed to create a rescuer kthread for wq "bond72": -EINTR [ 1016.487076][T31451] bond48: (slave batadv5): Opening slave failed [ 1016.680313][T31466] netlink: 'syz.3.7342': attribute type 1 has an invalid length. [ 1016.814019][T31466] 8021q: adding VLAN 0 to HW filter on device bond72 [ 1017.102240][T31466] netlink: 'syz.3.7342': attribute type 1 has an invalid length. [ 1017.163950][T31481] net_ratelimit: 2 callbacks suppressed [ 1017.163971][T31481] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 1017.424643][T31481] netlink: 12 bytes leftover after parsing attributes in process `syz.6.7344'. [ 1017.569253][T31466] bond72: (slave batadv14): Opening slave failed [ 1018.343616][T31494] netlink: 'syz.6.7347': attribute type 1 has an invalid length. [ 1018.489080][T31496] bond50: (slave vxcan3): The slave device specified does not support setting the MAC address [ 1018.539691][T31496] bond50: (slave vxcan3): Error -95 calling set_mac_address [ 1018.682670][T31497] macvlan2: entered promiscuous mode [ 1018.694479][T31497] macvlan2: entered allmulticast mode [ 1018.700880][T31497] bond50: entered promiscuous mode [ 1018.708407][T31497] 8021q: adding VLAN 0 to HW filter on device macvlan2 [ 1018.758125][T31497] bond50: left promiscuous mode [ 1019.228931][T31508] netlink: 12 bytes leftover after parsing attributes in process `syz.6.7349'. [ 1019.709966][T31514] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1019.803657][T31515] netlink: 12 bytes leftover after parsing attributes in process `syz.8.7350'. [ 1019.962863][T31426] Set syz1 is full, maxelem 65536 reached [ 1020.554196][T31533] netlink: 12 bytes leftover after parsing attributes in process `syz.1.7353'. [ 1020.939608][T31533] workqueue: Failed to create a rescuer kthread for wq "bond61": -EINTR [ 1021.229526][T31551] netlink: 12 bytes leftover after parsing attributes in process `syz.3.7357'. [ 1021.789149][T31559] netlink: 12 bytes leftover after parsing attributes in process `syz.6.7358'. [ 1022.094536][T31562] netlink: 'syz.7.7359': attribute type 13 has an invalid length. [ 1022.502609][T31575] netlink: 12 bytes leftover after parsing attributes in process `syz.8.7361'. [ 1022.605682][T31578] netlink: 'syz.7.7362': attribute type 1 has an invalid length. [ 1022.710052][T31578] 8021q: adding VLAN 0 to HW filter on device bond43 [ 1022.828696][T31588] netlink: 'syz.6.7365': attribute type 1 has an invalid length. [ 1022.850694][T31582] bond43: (slave veth21): Enslaving as an active interface with a down link [ 1022.912926][T31589] A link change request failed with some changes committed already. Interface caif0 may have been left with an inconsistent configuration, please check. [ 1022.933242][T15939] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1022.984502][T31592] netlink: 28 bytes leftover after parsing attributes in process `syz.6.7365'. [ 1023.002784][T31582] netlink: 'syz.7.7362': attribute type 1 has an invalid length. [ 1023.262657][T31563] lec:lec_atm_close: lec0: Shut down! [ 1023.296239][T31588] 8021q: adding VLAN 0 to HW filter on device bond53 [ 1023.323219][T31588] netlink: 'syz.6.7365': attribute type 1 has an invalid length. [ 1023.339261][T31582] 8021q: adding VLAN 0 to HW filter on device batadv1 [ 1023.346733][T31582] bond43: (slave batadv1): dev_set_mac_address on slave failed! ALB mode requires that the base driver support setting the hw address also when the network device's interface is open [ 1023.443104][T31598] netlink: 'syz.3.7366': attribute type 13 has an invalid length. [ 1023.507075][T31601] netlink: 'syz.6.7368': attribute type 1 has an invalid length. [ 1023.512460][T15939] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1023.669168][T31611] macvlan2: entered promiscuous mode [ 1023.675647][T31611] macvlan2: entered allmulticast mode [ 1023.683963][T31611] bond54: entered promiscuous mode [ 1023.689836][T31611] 8021q: adding VLAN 0 to HW filter on device macvlan2 [ 1023.722100][T31611] bond54: left promiscuous mode [ 1023.902276][T31603] mac80211_hwsim hwsim8 syzkaller0: Caught tx_queue_len zero misconfig [ 1023.941785][T31621] netlink: 12 bytes leftover after parsing attributes in process `syz.1.7370'. [ 1023.954648][T15939] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1024.093946][T31605] bond54: (slave vxcan3): The slave device specified does not support setting the MAC address [ 1024.108387][T31605] bond54: (slave vxcan3): Error -95 calling set_mac_address [ 1024.193037][T31602] syzkaller0: entered promiscuous mode [ 1024.198788][T31602] syzkaller0: entered allmulticast mode [ 1024.441258][ C1] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1024.449974][ C1] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1024.480328][T31621] workqueue: Failed to create a rescuer kthread for wq "bond61": -EINTR [ 1024.782130][T31640] netlink: 12 bytes leftover after parsing attributes in process `syz.6.7373'. [ 1024.960591][T31647] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1024.988098][T31643] netlink: 'syz.1.7375': attribute type 13 has an invalid length. [ 1025.002018][T31647] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1025.010418][T31647] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1025.079473][T31648] netlink: 12 bytes leftover after parsing attributes in process `syz.3.7371'. [ 1025.530485][T31661] netlink: 'syz.6.7377': attribute type 1 has an invalid length. [ 1025.554805][T31625] lec:lec_atm_close: lec0: Shut down! [ 1025.614014][T31661] 8021q: adding VLAN 0 to HW filter on device bond56 [ 1025.639949][T31668] netlink: 'syz.3.7378': attribute type 1 has an invalid length. [ 1025.781807][T31646] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1025.812156][T31666] netlink: 'syz.6.7377': attribute type 1 has an invalid length. [ 1025.897639][T31668] 8021q: adding VLAN 0 to HW filter on device bond75 [ 1026.120255][T31682] tipc: Enabled bearer , priority 0 [ 1026.193419][T31687] netlink: 12 bytes leftover after parsing attributes in process `syz.7.7380'. [ 1026.227453][T31655] lec:lec_atm_close: lec0: Shut down! [ 1026.250575][T31682] syzkaller0: entered promiscuous mode [ 1026.263805][T31682] syzkaller0: entered allmulticast mode [ 1026.270225][T31682] tipc: Resetting bearer [ 1026.383624][T31689] 8021q: adding VLAN 0 to HW filter on device bond76 [ 1026.392309][T31681] tipc: Resetting bearer [ 1027.296187][T31715] netlink: 12 bytes leftover after parsing attributes in process `syz.7.7385'. [ 1029.650112][T31681] tipc: Disabling bearer [ 1029.670439][T31698] faux_driver regulatory: loading /lib/firmware/regulatory.db failed with error -4 [ 1029.680344][T31698] faux_driver regulatory: Direct firmware load for regulatory.db failed with error -4 [ 1029.690400][T31698] faux_driver regulatory: Falling back to sysfs fallback for: regulatory.db [ 1029.787131][T31715] workqueue: Failed to create a rescuer kthread for wq "bond45": -EINTR [ 1029.939739][T31730] netlink: 12 bytes leftover after parsing attributes in process `syz.6.7388'. [ 1030.123219][T31744] netlink: 12 bytes leftover after parsing attributes in process `syz.3.7387'. [ 1030.357506][T31749] validate_nla: 4 callbacks suppressed [ 1030.357526][T31749] netlink: 'syz.8.7391': attribute type 1 has an invalid length. [ 1030.537734][T31755] netlink: 8 bytes leftover after parsing attributes in process `syz.8.7391'. [ 1030.551085][T31755] netlink: 24 bytes leftover after parsing attributes in process `syz.8.7391'. [ 1030.694344][T31754] netlink: 8 bytes leftover after parsing attributes in process `syz.8.7391'. [ 1030.760210][T31754] netlink: 24 bytes leftover after parsing attributes in process `syz.8.7391'. [ 1030.893638][T31764] net_ratelimit: 1 callbacks suppressed [ 1030.893655][T31764] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1030.921893][T31758] macvlan2: entered promiscuous mode [ 1030.956419][T31758] macvlan2: entered allmulticast mode [ 1030.974761][T31767] netlink: 12 bytes leftover after parsing attributes in process `syz.6.7393'. [ 1030.995492][T31758] bond59: entered promiscuous mode [ 1031.012138][T31758] 8021q: adding VLAN 0 to HW filter on device macvlan2 [ 1031.042742][T31758] bond59: left promiscuous mode [ 1031.111304][T31766] netlink: 12 bytes leftover after parsing attributes in process `syz.7.7392'. [ 1031.781919][T31781] netlink: 'syz.1.7396': attribute type 1 has an invalid length. [ 1031.852214][T31781] bond61: (slave vxcan5): The slave device specified does not support setting the MAC address [ 1031.864437][T31781] bond61: (slave vxcan5): Error -95 calling set_mac_address [ 1031.880954][ C0] lec0: NETDEV WATCHDOG: CPU: 0: transmit queue 0 timed out 5660 ms [ 1031.889049][ C0] lec:lec_tx_timeout: lec0 [ 1031.944594][T31785] macvlan4: entered promiscuous mode [ 1031.949940][T31785] macvlan4: entered allmulticast mode [ 1031.979474][T31785] bond61: entered promiscuous mode [ 1031.988108][T31785] 8021q: adding VLAN 0 to HW filter on device macvlan4 [ 1032.035833][T31785] bond61: left promiscuous mode [ 1032.057105][T31794] netlink: 12 bytes leftover after parsing attributes in process `syz.3.7397'. [ 1032.068302][T18550] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1032.184757][T31798] tipc: Enabling of bearer rejected, already enabled [ 1032.243587][T31802] netlink: 'syz.1.7400': attribute type 1 has an invalid length. [ 1032.343642][T31802] 8021q: adding VLAN 0 to HW filter on device bond62 [ 1032.370287][T31789] lo speed is unknown, defaulting to 1000 [ 1032.421744][T31789] lo speed is unknown, defaulting to 1000 [ 1032.489481][T31802] netlink: 'syz.1.7400': attribute type 1 has an invalid length. [ 1032.520149][T31802] bond62: (slave batadv4): Opening slave failed [ 1032.823935][T31818] netlink: 12 bytes leftover after parsing attributes in process `syz.7.7402'. [ 1033.295633][T31820] lo speed is unknown, defaulting to 1000 [ 1033.782633][T31841] lo speed is unknown, defaulting to 1000 [ 1033.865844][T31820] lo speed is unknown, defaulting to 1000 [ 1033.962868][ C1] ip6_tunnel: ip6gretap0 xmit: Local address not yet configured! [ 1034.396593][T31852] netlink: 12 bytes leftover after parsing attributes in process `syz.8.7408'. [ 1034.414313][T31841] lo speed is unknown, defaulting to 1000 [ 1035.733767][T31868] netlink: 'syz.1.7412': attribute type 1 has an invalid length. [ 1035.817032][T31868] 8021q: adding VLAN 0 to HW filter on device bond63 [ 1036.037286][T31868] netlink: 'syz.1.7412': attribute type 1 has an invalid length. [ 1036.085639][T31873] netlink: 'syz.8.7413': attribute type 1 has an invalid length. [ 1036.219658][T31873] netlink: 8 bytes leftover after parsing attributes in process `syz.8.7413'. [ 1036.235797][T31874] bond61: (slave vxcan5): The slave device specified does not support setting the MAC address [ 1036.241947][T31873] netlink: 24 bytes leftover after parsing attributes in process `syz.8.7413'. [ 1036.259216][T31874] bond61: (slave vxcan5): Error -95 calling set_mac_address [ 1036.370715][T31876] macvlan2: entered promiscuous mode [ 1036.378924][T31878] netlink: 12 bytes leftover after parsing attributes in process `syz.1.7414'. [ 1036.401718][T31876] macvlan2: entered allmulticast mode [ 1036.416838][T31876] bond61: entered promiscuous mode [ 1036.422957][T31876] 8021q: adding VLAN 0 to HW filter on device macvlan2 [ 1036.439886][T31876] bond61: left promiscuous mode [ 1036.675240][T31883] netlink: 'syz.8.7415': attribute type 1 has an invalid length. [ 1036.723208][T31883] 8021q: adding VLAN 0 to HW filter on device bond62 [ 1036.758874][T31887] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1036.770210][T31797] Set syz1 is full, maxelem 65536 reached [ 1036.798031][T31883] bond62: (slave veth23): Enslaving as an active interface with a down link [ 1036.858928][T31883] netlink: 'syz.8.7415': attribute type 1 has an invalid length. [ 1036.874668][T31883] 8021q: adding VLAN 0 to HW filter on device batadv8 [ 1036.892468][T31883] bond62: (slave batadv8): dev_set_mac_address on slave failed! ALB mode requires that the base driver support setting the hw address also when the network device's interface is open [ 1036.935402][T31895] netlink: 'syz.6.7418': attribute type 1 has an invalid length. [ 1037.000403][T31895] bond59: (slave vxcan3): The slave device specified does not support setting the MAC address [ 1037.012718][T31895] bond59: (slave vxcan3): Error -95 calling set_mac_address [ 1037.057471][T31900] netlink: 8 bytes leftover after parsing attributes in process `syz.6.7418'. [ 1037.146326][T31900] netlink: 24 bytes leftover after parsing attributes in process `syz.6.7418'. [ 1037.176596][T31902] netlink: 12 bytes leftover after parsing attributes in process `syz.7.7417'. [ 1037.313591][T31903] macvlan2: entered promiscuous mode [ 1037.329017][T31903] macvlan2: entered allmulticast mode [ 1037.358604][T31903] bond59: entered promiscuous mode [ 1037.461973][T31903] 8021q: adding VLAN 0 to HW filter on device macvlan2 [ 1037.735456][T31913] netlink: 12 bytes leftover after parsing attributes in process `syz.8.7419'. [ 1037.755452][T31903] bond59: left promiscuous mode [ 1037.798777][T31914] netlink: 12 bytes leftover after parsing attributes in process `syz.1.7420'. [ 1037.801144][ C1] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1038.097696][T31924] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1038.109145][T31924] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1038.118629][T31924] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1038.315607][T31930] netlink: 'syz.1.7425': attribute type 1 has an invalid length. [ 1038.372615][T31939] netlink: 28 bytes leftover after parsing attributes in process `syz.1.7425'. [ 1038.379851][T31930] 8021q: adding VLAN 0 to HW filter on device bond66 [ 1038.411534][T31933] lo speed is unknown, defaulting to 1000 [ 1038.420177][T31933] lo speed is unknown, defaulting to 1000 [ 1038.479861][T31941] xt_CT: No such helper "syz1" [ 1038.618617][T31930] netlink: 'syz.1.7425': attribute type 1 has an invalid length. [ 1038.713503][T31947] netlink: 12 bytes leftover after parsing attributes in process `syz.3.7426'. [ 1038.726205][T31930] bond66: (slave batadv5): Opening slave failed [ 1039.022410][T31923] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1039.032062][T31923] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1039.054949][T31955] netlink: 'syz.1.7428': attribute type 1 has an invalid length. [ 1039.179780][T31959] netlink: 8 bytes leftover after parsing attributes in process `syz.1.7428'. [ 1039.318968][T31965] netlink: 12 bytes leftover after parsing attributes in process `syz.6.7429'. [ 1039.587662][T31957] bond67: (slave vxcan5): The slave device specified does not support setting the MAC address [ 1039.633980][T31957] bond67: (slave vxcan5): Error -95 calling set_mac_address [ 1039.768001][T31964] macvlan4: entered promiscuous mode [ 1039.773842][T31964] macvlan4: entered allmulticast mode [ 1039.786254][T31964] bond67: entered promiscuous mode [ 1039.792544][T31964] 8021q: adding VLAN 0 to HW filter on device macvlan4 [ 1039.854775][T31964] bond67: left promiscuous mode [ 1039.983628][T31983] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1040.124060][T31968] syzkaller0: entered promiscuous mode [ 1040.151868][T31968] syzkaller0: entered allmulticast mode [ 1040.175812][T31991] netlink: 'syz.1.7433': attribute type 1 has an invalid length. [ 1040.543166][T31995] bond68: (slave vxcan5): The slave device specified does not support setting the MAC address [ 1040.558746][T31995] bond68: (slave vxcan5): Error -95 calling set_mac_address [ 1040.644782][T32001] netlink: 4 bytes leftover after parsing attributes in process `syz.8.7434'. [ 1040.753375][T32003] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1040.779244][T32007] netlink: 'syz.1.7437': attribute type 1 has an invalid length. [ 1040.863086][T32010] netlink: 28 bytes leftover after parsing attributes in process `syz.1.7437'. [ 1040.940814][T32007] 8021q: adding VLAN 0 to HW filter on device bond69 [ 1041.036406][T32015] lo speed is unknown, defaulting to 1000 [ 1041.054201][T32015] lo speed is unknown, defaulting to 1000 [ 1041.113244][T32010] netlink: 'syz.1.7437': attribute type 1 has an invalid length. [ 1041.643368][ T1665] block nbd2: Possible stuck request ffff888038260000: control (read@0,1024B). Runtime 150 seconds [ 1041.654689][ T1665] block nbd2: Possible stuck request ffff888038260200: control (read@1024,1024B). Runtime 150 seconds [ 1041.670081][ T1665] block nbd2: Possible stuck request ffff888038260400: control (read@2048,1024B). Runtime 150 seconds [ 1041.681955][ T1665] block nbd2: Possible stuck request ffff888038260600: control (read@3072,1024B). Runtime 150 seconds [ 1041.699953][T32042] mac80211_hwsim hwsim40 syzkaller0: Caught tx_queue_len zero misconfig [ 1042.310117][T32061] netlink: 12 bytes leftover after parsing attributes in process `syz.7.7447'. [ 1042.333162][T32059] netlink: 12 bytes leftover after parsing attributes in process `syz.3.7446'. [ 1042.982221][T32070] netlink: 'syz.6.7450': attribute type 1 has an invalid length. [ 1043.091141][ C0] net_ratelimit: 73 callbacks suppressed [ 1043.091158][ C0] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1043.454304][T32071] netlink: 'syz.6.7450': attribute type 1 has an invalid length. [ 1043.495803][T32070] 8021q: adding VLAN 0 to HW filter on device bond61 [ 1043.553934][T32071] bond61: (slave batadv7): Opening slave failed [ 1043.723520][T32087] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1043.791488][T32092] A link change request failed with some changes committed already. Interface caif0 may have been left with an inconsistent configuration, please check. [ 1043.810580][T15939] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1043.910349][T32103] netlink: 'syz.6.7458': attribute type 1 has an invalid length. [ 1044.057902][T32109] netlink: 'syz.7.7459': attribute type 1 has an invalid length. [ 1044.128073][T32106] bond62: (slave vxcan3): The slave device specified does not support setting the MAC address [ 1044.172998][T32106] bond62: (slave vxcan3): Error -95 calling set_mac_address [ 1044.201734][T32112] netlink: 28 bytes leftover after parsing attributes in process `syz.7.7459'. [ 1044.231241][T15939] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1044.278127][T32109] 8021q: adding VLAN 0 to HW filter on device bond49 [ 1044.299367][T32103] macvlan2: entered promiscuous mode [ 1044.311487][T32103] macvlan2: entered allmulticast mode [ 1044.317834][T32103] bond62: entered promiscuous mode [ 1044.352120][T32103] 8021q: adding VLAN 0 to HW filter on device macvlan2 [ 1044.372182][T32109] netlink: 'syz.7.7459': attribute type 1 has an invalid length. [ 1044.380621][T32103] bond62: left promiscuous mode [ 1044.408932][T32109] bond49: (slave batadv1): Opening slave failed [ 1044.436582][T32096] lec:lec_atm_close: lec0: Shut down! [ 1044.793882][T32131] netlink: 'syz.3.7463': attribute type 13 has an invalid length. [ 1044.829894][T32133] netlink: 12 bytes leftover after parsing attributes in process `syz.6.7460'. [ 1045.322963][ T796] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1045.853393][T32151] netlink: 12 bytes leftover after parsing attributes in process `syz.1.7465'. [ 1046.132475][ T796] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1046.229808][T32162] lo speed is unknown, defaulting to 1000 [ 1046.339468][T32162] lo speed is unknown, defaulting to 1000 [ 1046.946932][T32175] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1047.679289][T32194] netlink: 12 bytes leftover after parsing attributes in process `syz.7.7471'. [ 1048.729289][T32214] netlink: 12 bytes leftover after parsing attributes in process `syz.3.7475'. [ 1049.762993][T32230] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 1049.863505][T32237] netlink: 12 bytes leftover after parsing attributes in process `syz.1.7480'. [ 1049.881481][ C0] lec0: NETDEV WATCHDOG: CPU: 0: transmit queue 0 timed out 5450 ms [ 1049.889582][ C0] lec:lec_tx_timeout: lec0 [ 1050.086069][T32245] netlink: 12 bytes leftover after parsing attributes in process `syz.7.7479'. [ 1050.124500][T32246] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 1050.458030][T32252] netlink: 12 bytes leftover after parsing attributes in process `syz.6.7482'. [ 1050.516749][T32254] netlink: 12 bytes leftover after parsing attributes in process `syz.3.7481'. [ 1052.111230][T32265] netlink: 'syz.3.7485': attribute type 1 has an invalid length. [ 1052.194327][T32271] netlink: 4 bytes leftover after parsing attributes in process `syz.3.7485'. [ 1052.199395][T32265] 8021q: adding VLAN 0 to HW filter on device bond83 [ 1052.226959][T32268] lo speed is unknown, defaulting to 1000 [ 1052.257173][T32268] lo speed is unknown, defaulting to 1000 [ 1052.349950][T32278] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1052.385410][T32271] netlink: 'syz.3.7485': attribute type 1 has an invalid length. [ 1052.404205][T32278] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1052.450319][T32278] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1052.493807][T32265] bond83: (slave batadv16): Opening slave failed [ 1052.523009][T32281] netlink: 12 bytes leftover after parsing attributes in process `syz.6.7487'. [ 1052.930349][T32293] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 1053.057954][T32260] lec:lec_atm_close: lec0: Shut down! [ 1053.105765][T32299] netlink: 12 bytes leftover after parsing attributes in process `syz.3.7489'. [ 1053.358203][T32276] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1053.512546][T32305] netlink: 12 bytes leftover after parsing attributes in process `syz.1.7490'. [ 1053.581344][T32276] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1054.304000][T32309] netlink: 'syz.8.7491': attribute type 1 has an invalid length. [ 1054.445342][ T1301] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1054.456289][ T1301] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1054.563197][T32309] 8021q: adding VLAN 0 to HW filter on device bond64 [ 1054.636239][T32319] netlink: 'syz.7.7493': attribute type 1 has an invalid length. [ 1054.778210][T32325] netlink: 12 bytes leftover after parsing attributes in process `syz.3.7492'. [ 1054.805959][T32326] netlink: 60 bytes leftover after parsing attributes in process `syz.7.7493'. [ 1054.869197][T32309] netlink: 'syz.8.7491': attribute type 1 has an invalid length. [ 1055.020759][T32331] netlink: 'syz.1.7494': attribute type 13 has an invalid length. [ 1055.235698][T32324] bond52: (slave vxcan5): The slave device specified does not support setting the MAC address [ 1055.272179][T32324] bond52: (slave vxcan5): Error -95 calling set_mac_address [ 1055.356331][T32319] macvlan2: entered promiscuous mode [ 1055.391989][T32319] macvlan2: entered allmulticast mode [ 1055.409559][T32319] bond52: entered promiscuous mode [ 1055.420153][T32319] 8021q: adding VLAN 0 to HW filter on device macvlan2 [ 1055.438595][T32319] bond52: left promiscuous mode [ 1055.463596][T32309] bond64: (slave batadv8): Opening slave failed [ 1055.747731][T32356] netlink: 12 bytes leftover after parsing attributes in process `syz.6.7496'. [ 1055.918964][T32354] net_ratelimit: 1 callbacks suppressed [ 1055.918976][T32354] A link change request failed with some changes committed already. Interface caif0 may have been left with an inconsistent configuration, please check. [ 1055.944639][ T5982] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1056.445193][T32368] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1056.461788][T32369] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 1057.001441][ T796] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1057.531579][T32387] netlink: 12 bytes leftover after parsing attributes in process `syz.8.7502'. [ 1057.561360][ C1] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1057.934016][T32393] netlink: 'syz.6.7504': attribute type 1 has an invalid length. [ 1058.061394][ C0] lec0: NETDEV WATCHDOG: CPU: 0: transmit queue 0 timed out 5010 ms [ 1058.069499][ C0] lec:lec_tx_timeout: lec0 [ 1058.075017][ C0] lec:lec_start_xmit: lec0:No lecd attached [ 1058.176472][T32400] netlink: 12 bytes leftover after parsing attributes in process `syz.1.7503'. [ 1058.272440][T32393] 8021q: adding VLAN 0 to HW filter on device bond67 [ 1058.496212][T32401] netlink: 'syz.6.7504': attribute type 1 has an invalid length. [ 1058.594415][T32393] bond67: (slave batadv7): Opening slave failed [ 1058.696385][T32407] netlink: 'syz.7.7506': attribute type 1 has an invalid length. [ 1058.892623][T32408] tipc: Enabling of bearer rejected, already enabled [ 1059.074891][T32407] netlink: 4 bytes leftover after parsing attributes in process `syz.7.7506'. [ 1059.099301][T32411] bond53: (slave vxcan5): The slave device specified does not support setting the MAC address [ 1059.129156][T32411] bond53: (slave vxcan5): Error -95 calling set_mac_address [ 1059.169027][T32416] netlink: 'syz.3.7507': attribute type 1 has an invalid length. [ 1059.198254][T32414] macvlan2: entered promiscuous mode [ 1059.221711][T32414] macvlan2: entered allmulticast mode [ 1059.251817][T32414] bond53: entered promiscuous mode [ 1059.262287][T32414] 8021q: adding VLAN 0 to HW filter on device macvlan2 [ 1059.283639][T32414] bond53: left promiscuous mode [ 1059.367535][T32416] 8021q: adding VLAN 0 to HW filter on device bond86 [ 1059.424916][T32428] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 1059.565178][T32432] netlink: 12 bytes leftover after parsing attributes in process `syz.6.7508'. [ 1059.588605][T32416] netlink: 'syz.3.7507': attribute type 1 has an invalid length. [ 1059.641105][ C1] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1059.919895][T32440] netlink: 12 bytes leftover after parsing attributes in process `syz.8.7509'. [ 1060.840174][T32447] netlink: 12 bytes leftover after parsing attributes in process `syz.7.7511'. [ 1060.865822][T32440] workqueue: Failed to create a rescuer kthread for wq "bond66": -EINTR [ 1061.115447][T32453] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 1061.254871][T32454] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1061.373967][T32457] netlink: 12 bytes leftover after parsing attributes in process `syz.1.7510'. [ 1061.746084][T32460] netlink: 'syz.6.7513': attribute type 1 has an invalid length. [ 1061.866606][T32462] netlink: 60 bytes leftover after parsing attributes in process `syz.6.7513'. [ 1061.908083][T32460] bond69: (slave vxcan3): The slave device specified does not support setting the MAC address [ 1061.950748][T32465] netlink: 'syz.8.7514': attribute type 1 has an invalid length. [ 1061.967433][T32460] bond69: (slave vxcan3): Error -95 calling set_mac_address [ 1061.997117][T32467] macvlan2: entered promiscuous mode [ 1062.003392][T32467] macvlan2: entered allmulticast mode [ 1062.009952][T32467] bond69: entered promiscuous mode [ 1062.017311][T32467] 8021q: adding VLAN 0 to HW filter on device macvlan2 [ 1062.037657][T32467] bond69: left promiscuous mode [ 1062.102145][T32465] 8021q: adding VLAN 0 to HW filter on device bond66 [ 1062.128682][T32476] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1062.147361][T32478] netlink: 'syz.8.7514': attribute type 1 has an invalid length. [ 1062.200256][T32466] A link change request failed with some changes committed already. Interface caif0 may have been left with an inconsistent configuration, please check. [ 1062.301962][T32482] netlink: 'syz.6.7518': attribute type 1 has an invalid length. [ 1062.304551][T32483] netlink: 12 bytes leftover after parsing attributes in process `syz.1.7516'. [ 1062.309985][T32478] bond66: (slave batadv8): Opening slave failed [ 1062.415279][T32490] netlink: 'syz.7.7519': attribute type 1 has an invalid length. [ 1062.458507][T32482] netlink: 60 bytes leftover after parsing attributes in process `syz.6.7518'. [ 1062.495813][T32488] bond70: (slave vxcan3): The slave device specified does not support setting the MAC address [ 1062.507758][T32488] bond70: (slave vxcan3): Error -95 calling set_mac_address [ 1062.825706][T32490] 8021q: adding VLAN 0 to HW filter on device bond55 [ 1062.845340][T32492] macvlan2: entered promiscuous mode [ 1062.851203][T32492] macvlan2: entered allmulticast mode [ 1062.857837][T32492] bond70: entered promiscuous mode [ 1062.865355][T32492] 8021q: adding VLAN 0 to HW filter on device macvlan2 [ 1063.051558][T32492] bond70: left promiscuous mode [ 1063.091641][ C0] lec0: NETDEV WATCHDOG: CPU: 0: transmit queue 0 timed out 5010 ms [ 1063.100126][ C0] lec:lec_tx_timeout: lec0 [ 1063.143847][T32501] lo speed is unknown, defaulting to 1000 [ 1063.161743][T32501] lo speed is unknown, defaulting to 1000 [ 1063.226155][T32502] xt_CT: No such helper "syz1" [ 1063.241016][ C1] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1063.906591][T32524] netlink: 12 bytes leftover after parsing attributes in process `syz.1.7523'. [ 1065.208605][T32542] validate_nla: 1 callbacks suppressed [ 1065.208624][T32542] netlink: 'syz.3.7527': attribute type 1 has an invalid length. [ 1065.254316][T32543] netlink: 'syz.1.7528': attribute type 1 has an invalid length. [ 1065.343643][T32548] bond87: (slave vxcan13): The slave device specified does not support setting the MAC address [ 1065.377948][T32548] bond87: (slave vxcan13): Error -95 calling set_mac_address [ 1065.389361][T32542] netlink: 60 bytes leftover after parsing attributes in process `syz.3.7527'. [ 1065.468578][T32547] bond76: (slave vxcan5): The slave device specified does not support setting the MAC address [ 1065.485544][T32547] bond76: (slave vxcan5): Error -95 calling set_mac_address [ 1065.525072][T32548] macvlan0: entered promiscuous mode [ 1065.530558][T32548] macvlan0: entered allmulticast mode [ 1065.540224][T32548] bond87: entered promiscuous mode [ 1065.554171][T32548] 8021q: adding VLAN 0 to HW filter on device macvlan0 [ 1065.564845][T32548] bond87: left promiscuous mode [ 1065.600829][T32562] netlink: 'syz.6.7531': attribute type 1 has an invalid length. [ 1065.646800][T32562] bond71: (slave vxcan3): The slave device specified does not support setting the MAC address [ 1065.660591][T32562] bond71: (slave vxcan3): Error -95 calling set_mac_address [ 1065.706986][T32568] netlink: 60 bytes leftover after parsing attributes in process `syz.6.7531'. [ 1065.730072][T32569] netlink: 'syz.8.7533': attribute type 1 has an invalid length. [ 1065.783335][T32568] macvlan2: entered promiscuous mode [ 1065.792634][T32568] macvlan2: entered allmulticast mode [ 1065.799231][T32568] bond71: entered promiscuous mode [ 1065.815556][T32568] 8021q: adding VLAN 0 to HW filter on device macvlan2 [ 1065.829582][T32568] bond71: left promiscuous mode [ 1065.864047][T32569] bond67: (slave vxcan5): The slave device specified does not support setting the MAC address [ 1065.877320][T32569] bond67: (slave vxcan5): Error -95 calling set_mac_address [ 1066.145073][T32584] lo speed is unknown, defaulting to 1000 [ 1066.160048][T32584] lo speed is unknown, defaulting to 1000 [ 1066.280074][T32590] lo speed is unknown, defaulting to 1000 [ 1066.406387][T32596] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 1066.526191][T32590] lo speed is unknown, defaulting to 1000 [ 1066.558207][T32599] netlink: 12 bytes leftover after parsing attributes in process `syz.8.7538'. [ 1066.761135][ C1] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1066.769739][ C1] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1066.778282][ C1] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1067.019822][T21902] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1067.055191][T32600] xt_CT: No such helper "syz1" [ 1067.276530][T32618] netlink: 'syz.1.7543': attribute type 1 has an invalid length. [ 1067.289785][T32612] lo speed is unknown, defaulting to 1000 [ 1067.704250][T32612] lo speed is unknown, defaulting to 1000 [ 1067.752550][T32630] A link change request failed with some changes committed already. Interface caif0 may have been left with an inconsistent configuration, please check. [ 1068.137761][T32636] netlink: 12 bytes leftover after parsing attributes in process `syz.8.7545'. [ 1068.612535][T32645] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 1068.889699][T32651] netlink: 'syz.7.7548': attribute type 1 has an invalid length. [ 1069.377265][T32651] 8021q: adding VLAN 0 to HW filter on device bond56 [ 1070.358756][T32667] lo speed is unknown, defaulting to 1000 [ 1070.366787][T32667] lo speed is unknown, defaulting to 1000 [ 1070.521194][ C0] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1070.529956][ C0] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1070.868151][T32683] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 1071.006549][T32686] netlink: 12 bytes leftover after parsing attributes in process `syz.7.7555'. [ 1071.729497][ T1665] block nbd2: Possible stuck request ffff888038260000: control (read@0,1024B). Runtime 180 seconds [ 1071.745950][ T1665] block nbd2: Possible stuck request ffff888038260200: control (read@1024,1024B). Runtime 180 seconds [ 1071.757477][ T1665] block nbd2: Possible stuck request ffff888038260400: control (read@2048,1024B). Runtime 180 seconds [ 1071.769172][ T1665] block nbd2: Possible stuck request ffff888038260600: control (read@3072,1024B). Runtime 180 seconds [ 1072.192529][T32691] lo speed is unknown, defaulting to 1000 [ 1072.289656][T32691] lo speed is unknown, defaulting to 1000 [ 1072.360215][T32701] netlink: 'syz.7.7559': attribute type 13 has an invalid length. [ 1072.367058][T32702] netlink: 12 bytes leftover after parsing attributes in process `syz.6.7558'. [ 1072.738471][T32703] mac80211_hwsim hwsim40 syzkaller0: Caught tx_queue_len zero misconfig [ 1073.669209][T32714] syzkaller0: entered promiscuous mode [ 1073.677171][T32714] syzkaller0: entered allmulticast mode [ 1074.041114][ C1] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1074.245712][T32728] netlink: 12 bytes leftover after parsing attributes in process `syz.7.7563'. [ 1074.940413][T32595] Set syz1 is full, maxelem 65536 reached [ 1074.940928][T32741] netlink: 'syz.7.7567': attribute type 13 has an invalid length. [ 1075.156774][T32747] A link change request failed with some changes committed already. Interface caif0 may have been left with an inconsistent configuration, please check. [ 1075.278665][T32755] netlink: 'syz.7.7571': attribute type 1 has an invalid length. [ 1075.289275][T32756] netlink: 'syz.3.7572': attribute type 1 has an invalid length. [ 1075.369894][T32756] 8021q: adding VLAN 0 to HW filter on device bond88 [ 1075.393287][T32755] bond59: (slave vxcan5): The slave device specified does not support setting the MAC address [ 1075.404986][T32755] bond59: (slave vxcan5): Error -95 calling set_mac_address [ 1075.568961][T32761] bond88: (slave veth67): Enslaving as an active interface with a down link [ 1075.593227][T32764] netlink: 'syz.3.7572': attribute type 1 has an invalid length. [ 1075.638633][T32763] macvlan2: entered promiscuous mode [ 1075.645652][T32763] macvlan2: entered allmulticast mode [ 1075.674327][T32764] 8021q: adding VLAN 0 to HW filter on device batadv17 [ 1075.696110][T32764] bond88: (slave batadv17): dev_set_mac_address on slave failed! ALB mode requires that the base driver support setting the hw address also when the network device's interface is open [ 1075.776757][ T301] lo speed is unknown, defaulting to 1000 [ 1075.784687][ T301] lo speed is unknown, defaulting to 1000 [ 1076.143438][ T314] netlink: 12 bytes leftover after parsing attributes in process `syz.7.7575'. [ 1076.252101][ T317] netlink: 12 bytes leftover after parsing attributes in process `syz.8.7574'. [ 1076.760476][ T5982] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1076.811805][ T5982] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1077.048353][ T324] A link change request failed with some changes committed already. Interface caif0 may have been left with an inconsistent configuration, please check. [ 1077.235584][ T332] netlink: 'syz.6.7577': attribute type 1 has an invalid length. [ 1077.397411][ T332] bond73: (slave vxcan3): The slave device specified does not support setting the MAC address [ 1077.409131][ T332] bond73: (slave vxcan3): Error -95 calling set_mac_address [ 1077.531899][ T342] xt_CT: No such helper "syz1" [ 1077.589558][ T337] lo speed is unknown, defaulting to 1000 [ 1077.615888][ T337] lo speed is unknown, defaulting to 1000 [ 1077.702831][ T350] netlink: 12 bytes leftover after parsing attributes in process `syz.3.7579'. [ 1078.378288][ T363] netlink: 'syz.7.7581': attribute type 13 has an invalid length. [ 1079.285443][ T379] netlink: 12 bytes leftover after parsing attributes in process `syz.7.7583'. [ 1079.724241][ T397] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 1080.887270][ T410] A link change request failed with some changes committed already. Interface caif0 may have been left with an inconsistent configuration, please check. [ 1081.440278][ T429] lo speed is unknown, defaulting to 1000 [ 1081.453398][ T433] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1081.465357][ T429] lo speed is unknown, defaulting to 1000 [ 1081.558309][ T425] xt_CT: No such helper "syz1" [ 1082.286410][ T458] netlink: 'syz.1.7599': attribute type 13 has an invalid length. [ 1082.310846][ T459] netlink: 12 bytes leftover after parsing attributes in process `syz.6.7598'. [ 1082.726520][ T471] netlink: 12 bytes leftover after parsing attributes in process `syz.3.7600'. [ 1083.880833][ T477] A link change request failed with some changes committed already. Interface caif0 may have been left with an inconsistent configuration, please check. [ 1083.937574][ T482] netlink: 'syz.6.7603': attribute type 1 has an invalid length. [ 1084.082974][ T490] netlink: 'syz.3.7605': attribute type 13 has an invalid length. [ 1084.183703][ T486] bond75: (slave vxcan3): The slave device specified does not support setting the MAC address [ 1084.187094][ T498] netlink: 'syz.1.7607': attribute type 1 has an invalid length. [ 1084.217561][ T494] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1084.226131][ C1] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1084.244915][ T486] bond75: (slave vxcan3): Error -95 calling set_mac_address [ 1084.253365][ T494] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1084.267318][ T6952] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1084.313605][ T494] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1084.322722][ C0] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1084.384585][ T498] 8021q: adding VLAN 0 to HW filter on device bond78 [ 1084.443381][ T498] netlink: 'syz.1.7607': attribute type 1 has an invalid length. [ 1084.460099][ T498] bond78: (slave batadv6): Opening slave failed [ 1084.576539][ T502] bond78: (slave veth47): Enslaving as an active interface with a down link [ 1084.772723][ T513] xt_CT: No such helper "syz1" [ 1084.778187][ T510] lo speed is unknown, defaulting to 1000 [ 1084.804103][ T510] lo speed is unknown, defaulting to 1000 [ 1084.841187][ C0] net_ratelimit: 1 callbacks suppressed [ 1084.841207][ C0] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1085.002219][T15939] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1085.093742][ T529] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1085.291748][ T533] netlink: 12 bytes leftover after parsing attributes in process `syz.1.7612'. [ 1086.332894][ T538] lec:lec_atm_close: lec0: Shut down! [ 1086.586236][ T796] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1086.594926][ T560] A link change request failed with some changes committed already. Interface caif0 may have been left with an inconsistent configuration, please check. [ 1086.656188][ T564] netlink: 'syz.1.7620': attribute type 1 has an invalid length. [ 1086.724986][ T554] netlink: 12 bytes leftover after parsing attributes in process `syz.6.7616'. [ 1086.926792][ T568] bond80: (slave vxcan5): The slave device specified does not support setting the MAC address [ 1086.939159][ T568] bond80: (slave vxcan5): Error -95 calling set_mac_address [ 1087.050703][ T577] netlink: 'syz.3.7622': attribute type 1 has an invalid length. [ 1087.229396][ T580] bond91: (slave vxcan13): The slave device specified does not support setting the MAC address [ 1087.241609][ T580] bond91: (slave vxcan13): Error -95 calling set_mac_address [ 1087.262036][ T584] netlink: 12 bytes leftover after parsing attributes in process `syz.7.7621'. [ 1087.641079][ T796] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1088.076572][ T598] netlink: 12 bytes leftover after parsing attributes in process `syz.3.7624'. [ 1088.909647][ T602] netlink: 12 bytes leftover after parsing attributes in process `syz.8.7623'. [ 1089.234771][ T610] netlink: 'syz.3.7627': attribute type 1 has an invalid length. [ 1089.332180][ T610] bond93: (slave vxcan13): The slave device specified does not support setting the MAC address [ 1089.343828][ T610] bond93: (slave vxcan13): Error -95 calling set_mac_address [ 1089.424844][ T616] macvlan0: entered promiscuous mode [ 1089.430197][ T616] macvlan0: entered allmulticast mode [ 1089.816879][ T635] A link change request failed with some changes committed already. Interface caif0 may have been left with an inconsistent configuration, please check. [ 1089.863285][ T629] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1089.999735][ T643] netlink: 12 bytes leftover after parsing attributes in process `syz.8.7630'. [ 1090.274546][ T617] lec:lec_atm_close: lec0: Shut down! [ 1090.285999][ T651] netlink: 12 bytes leftover after parsing attributes in process `syz.7.7629'. [ 1091.434232][ T658] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1092.068991][ T684] netlink: 'syz.3.7639': attribute type 1 has an invalid length. [ 1092.105204][ T684] 8021q: adding VLAN 0 to HW filter on device bond94 [ 1092.288263][ T684] bond94: (slave veth69): Enslaving as an active interface with a down link [ 1092.435759][ T684] netlink: 'syz.3.7639': attribute type 1 has an invalid length. [ 1092.443900][ T695] A link change request failed with some changes committed already. Interface caif0 may have been left with an inconsistent configuration, please check. [ 1092.481342][ T684] 8021q: adding VLAN 0 to HW filter on device batadv17 [ 1092.488824][ T684] bond94: (slave batadv17): dev_set_mac_address on slave failed! ALB mode requires that the base driver support setting the hw address also when the network device's interface is open [ 1092.725327][ T705] netlink: 'syz.1.7646': attribute type 13 has an invalid length. [ 1092.839367][ T710] lo speed is unknown, defaulting to 1000 [ 1092.924346][ T710] lo speed is unknown, defaulting to 1000 [ 1093.335923][ T714] netlink: 12 bytes leftover after parsing attributes in process `syz.8.7648'. [ 1093.615140][ T723] lo speed is unknown, defaulting to 1000 [ 1093.641548][ T719] xt_CT: No such helper "syz1" [ 1093.759469][ T723] lo speed is unknown, defaulting to 1000 [ 1094.341884][ T739] A link change request failed with some changes committed already. Interface caif0 may have been left with an inconsistent configuration, please check. [ 1094.371658][ T745] netlink: 'syz.3.7655': attribute type 1 has an invalid length. [ 1094.562870][ T756] netlink: 12 bytes leftover after parsing attributes in process `syz.6.7652'. [ 1094.728195][ T752] bond95: (slave vxcan13): The slave device specified does not support setting the MAC address [ 1094.842495][ T757] xt_CT: No such helper "syz1" [ 1094.879610][ T752] bond95: (slave vxcan13): Error -95 calling set_mac_address [ 1095.050106][ T748] lo speed is unknown, defaulting to 1000 [ 1095.321185][ C1] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1095.329824][ C1] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1095.350127][ T748] lo speed is unknown, defaulting to 1000 [ 1095.508831][ T765] A link change request failed with some changes committed already. Interface caif0 may have been left with an inconsistent configuration, please check. [ 1095.527486][T15940] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1095.545348][ T767] netlink: 'syz.8.7657': attribute type 1 has an invalid length. [ 1095.571782][T15940] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1095.614114][ T767] 8021q: adding VLAN 0 to HW filter on device bond74 [ 1095.795012][ T767] netlink: 'syz.8.7657': attribute type 1 has an invalid length. [ 1095.826857][ T772] syzkaller0: entered promiscuous mode [ 1095.832704][ T772] syzkaller0: entered allmulticast mode [ 1095.880909][ C0] lec0: NETDEV WATCHDOG: CPU: 0: transmit queue 0 timed out 5610 ms [ 1095.888986][ C0] lec:lec_tx_timeout: lec0 [ 1096.357257][ T789] netlink: 12 bytes leftover after parsing attributes in process `syz.8.7660'. [ 1096.692312][T18550] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1099.139835][ T776] lo speed is unknown, defaulting to 1000 [ 1099.154441][ T789] workqueue: Failed to create a rescuer kthread for wq "bond75": -EINTR [ 1099.181680][ T776] lo speed is unknown, defaulting to 1000 [ 1099.642024][ T804] netlink: 12 bytes leftover after parsing attributes in process `syz.8.7661'. [ 1100.651331][ T821] netlink: 12 bytes leftover after parsing attributes in process `syz.1.7664'. [ 1101.157240][ T835] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1101.165872][ C1] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1101.221833][ T831] netlink: 12 bytes leftover after parsing attributes in process `syz.6.7665'. [ 1101.664211][ T840] netlink: 'syz.7.7668': attribute type 1 has an invalid length. [ 1101.717182][ T840] 8021q: adding VLAN 0 to HW filter on device bond64 [ 1101.831611][ T1665] block nbd2: Possible stuck request ffff888038260000: control (read@0,1024B). Runtime 210 seconds [ 1101.842451][ T1665] block nbd2: Possible stuck request ffff888038260200: control (read@1024,1024B). Runtime 210 seconds [ 1101.855861][ T1665] block nbd2: Possible stuck request ffff888038260400: control (read@2048,1024B). Runtime 210 seconds [ 1101.867388][ T1665] block nbd2: Possible stuck request ffff888038260600: control (read@3072,1024B). Runtime 210 seconds [ 1102.088750][ T842] bond64: (slave veth23): Enslaving as an active interface with a down link [ 1102.185236][ T842] netlink: 'syz.7.7668': attribute type 1 has an invalid length. [ 1102.237938][ T842] 8021q: adding VLAN 0 to HW filter on device batadv3 [ 1102.275123][ T842] bond64: (slave batadv3): dev_set_mac_address on slave failed! ALB mode requires that the base driver support setting the hw address also when the network device's interface is open [ 1102.336009][ T850] netlink: 'syz.3.7672': attribute type 1 has an invalid length. [ 1102.455748][ T850] bond96: (slave vxcan13): The slave device specified does not support setting the MAC address [ 1102.539000][ T850] bond96: (slave vxcan13): Error -95 calling set_mac_address [ 1102.632019][ T867] netlink: 12 bytes leftover after parsing attributes in process `syz.8.7670'. [ 1102.665965][ T860] xt_CT: No such helper "syz1" [ 1102.736130][ T850] macvlan1: entered promiscuous mode [ 1102.771787][ T850] macvlan1: entered allmulticast mode [ 1102.777840][ T850] bond96: (slave macvlan1): Error -98 calling set_mac_address [ 1102.923517][ T875] xt_CT: No such helper "syz1" [ 1103.017916][ T851] lo speed is unknown, defaulting to 1000 [ 1103.026672][ T851] lo speed is unknown, defaulting to 1000 [ 1103.244942][ T874] lo speed is unknown, defaulting to 1000 [ 1103.366134][ T874] lo speed is unknown, defaulting to 1000 [ 1103.772077][ T886] netlink: 12 bytes leftover after parsing attributes in process `syz.3.7675'. [ 1104.368421][ T900] netlink: 12 bytes leftover after parsing attributes in process `syz.1.7676'. [ 1104.460753][ T896] lo speed is unknown, defaulting to 1000 [ 1104.469562][ T896] lo speed is unknown, defaulting to 1000 [ 1104.686602][ T890] xt_CT: No such helper "syz1" [ 1106.045436][ T944] netlink: 12 bytes leftover after parsing attributes in process `syz.3.7680'. [ 1106.784860][ T956] tipc: Enabling of bearer rejected, already enabled [ 1107.021782][ T966] netlink: 'syz.7.7687': attribute type 1 has an invalid length. [ 1107.124622][ T972] bond65: (slave vxcan5): The slave device specified does not support setting the MAC address [ 1107.140110][ T972] bond65: (slave vxcan5): Error -95 calling set_mac_address [ 1107.249631][ T962] xt_CT: No such helper "syz1" [ 1107.260338][ T966] macvlan3: entered promiscuous mode [ 1107.311072][ T966] macvlan3: entered allmulticast mode [ 1107.425697][ T968] lo speed is unknown, defaulting to 1000 [ 1107.438518][ T968] lo speed is unknown, defaulting to 1000 [ 1107.646765][ T986] lo speed is unknown, defaulting to 1000 [ 1107.682221][ T993] netlink: 12 bytes leftover after parsing attributes in process `syz.3.7688'. [ 1107.753302][ T986] lo speed is unknown, defaulting to 1000 [ 1108.035897][ T998] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1108.056263][ T998] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1108.099523][ T989] xt_CT: No such helper "syz1" [ 1108.138797][ T998] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1108.389648][ T998] ------------[ cut here ]------------ [ 1108.391076][ T975] ------------[ cut here ]------------ [ 1108.395342][ T998] ODEBUG: init active (active state 0) object: ffff888053c08f38 object type: timer_list hint: lec_arp_check_expire+0x0/0xc90 [ 1108.400613][ T975] !work_pending(work) [ 1108.400641][ T975] WARNING: kernel/workqueue.c:791 at __cancel_work+0x1c1/0x230, CPU#0: syz.6.7686/975 [ 1108.413722][ T998] WARNING: lib/debugobjects.c:632 at __debug_object_init+0x2b1/0x4e0, CPU#1: syz.7.7690/998 [ 1108.417536][ T975] Modules linked in: [ 1108.427162][ T998] Modules linked in: [ 1108.437206][ T975] [ 1108.437255][ T975] CPU: 0 UID: 0 PID: 975 Comm: syz.6.7686 Not tainted syzkaller #0 PREEMPT(full) [ 1108.437277][ T975] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 03/18/2026 [ 1108.437289][ T975] RIP: 0010:__cancel_work+0x1c1/0x230 [ 1108.437321][ T975] Code: 02 00 00 75 2d e8 6f f2 37 00 48 85 db 75 32 e8 65 f2 37 00 eb 31 e8 5e f2 37 00 90 0f 0b 90 e9 c1 fe ff ff e8 50 f2 37 00 90 <0f> 0b 90 e9 44 ff ff ff e8 42 f2 37 00 e8 fd 7f 23 0a 48 85 db 74 [ 1108.437336][ T975] RSP: 0018:ffffc9001c747bf0 EFLAGS: 00010083 [ 1108.437352][ T975] RAX: ffffffff818dc280 RBX: 001fffffffc00000 RCX: 0000000000080000 [ 1108.437367][ T975] RDX: ffffc900207bd000 RSI: 00000000000000be RDI: 00000000000000bf [ 1108.437381][ T975] RBP: 0000000000000000 R08: ffff888053c08ef7 R09: 1ffff1100a7811de [ 1108.437396][ T975] R10: dffffc0000000000 R11: ffffed100a7811df R12: dffffc0000000000 [ 1108.437410][ T975] R13: 1ffff1100a7811de R14: ffff888053c08ef0 R15: 0000000000000040 [ 1108.437425][ T975] FS: 00007fbbac7d56c0(0000) GS:ffff888125457000(0000) knlGS:0000000000000000 [ 1108.437442][ T975] CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033 [ 1108.437456][ T975] CR2: 00002000003af030 CR3: 0000000059daa000 CR4: 00000000003526f0 [ 1108.437474][ T975] Call Trace: [ 1108.437482][ T975] [ 1108.437498][ T975] __cancel_work_sync+0x1f/0x110 [ 1108.437531][ T975] lec_atm_close+0x171/0x9e0 [ 1108.437561][ T975] ? __local_bh_enable_ip+0xd0/0x130 [ 1108.437589][ T975] ? __pfx_lec_atm_close+0x10/0x10 [ 1108.437619][ T975] vcc_release+0x10f/0x580 [ 1108.437654][ T975] svc_release+0x6c/0xd0 [ 1108.437682][ T975] sock_close+0xc3/0x240 [ 1108.437703][ T975] ? __pfx_sock_close+0x10/0x10 [ 1108.437722][ T975] __fput+0x44f/0xa70 [ 1108.437763][ T975] fput_close_sync+0x11f/0x240 [ 1108.437792][ T975] ? __pfx_fput_close_sync+0x10/0x10 [ 1108.437834][ T975] __x64_sys_close+0x7e/0x110 [ 1108.437854][ T975] do_syscall_64+0x14d/0xf80 [ 1108.437881][ T975] ? trace_irq_disable+0x3b/0x150 [ 1108.437899][ T975] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1108.437920][ T975] ? clear_bhb_loop+0x40/0x90 [ 1108.437945][ T975] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1108.437965][ T975] RIP: 0033:0x7fbbae59c819 [ 1108.437984][ T975] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 1108.438001][ T975] RSP: 002b:00007fbbac7d5028 EFLAGS: 00000246 ORIG_RAX: 0000000000000003 [ 1108.438022][ T975] RAX: ffffffffffffffda RBX: 00007fbbae816180 RCX: 00007fbbae59c819 [ 1108.438043][ T975] RDX: 0000000000000000 RSI: 0000000000000000 RDI: 0000000000000004 [ 1108.438054][ T975] RBP: 00007fbbae632c91 R08: 0000000000000000 R09: 0000000000000000 [ 1108.438068][ T975] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 1108.438080][ T975] R13: 00007fbbae816218 R14: 00007fbbae816180 R15: 00007ffd9e661e78 [ 1108.438113][ T975] [ 1108.438133][ T975] Kernel panic - not syncing: kernel: panic_on_warn set ... [ 1108.438147][ T975] CPU: 0 UID: 0 PID: 975 Comm: syz.6.7686 Not tainted syzkaller #0 PREEMPT(full) [ 1108.438167][ T975] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 03/18/2026 [ 1108.438179][ T975] Call Trace: [ 1108.438187][ T975] [ 1108.438196][ T975] vpanic+0x56c/0xa60 [ 1108.438224][ T975] ? __pfx__printk+0x10/0x10 [ 1108.438243][ T975] ? __pfx_vpanic+0x10/0x10 [ 1108.438267][ T975] ? is_bpf_text_address+0x292/0x2b0 [ 1108.438289][ T975] ? is_bpf_text_address+0x26/0x2b0 [ 1108.438319][ T975] panic+0xc5/0xd0 [ 1108.438345][ T975] ? __pfx_panic+0x10/0x10 [ 1108.438388][ T975] __warn+0x315/0x4f0 [ 1108.438413][ T975] ? __cancel_work+0x1c1/0x230 [ 1108.438444][ T975] ? __cancel_work+0x1c1/0x230 [ 1108.438471][ T975] __report_bug+0x29a/0x540 [ 1108.438498][ T975] ? __cancel_work+0x1c1/0x230 [ 1108.438527][ T975] ? __pfx___report_bug+0x10/0x10 [ 1108.438567][ T975] ? __cancel_work+0x1c1/0x230 [ 1108.438594][ T975] report_bug+0x16a/0x220 [ 1108.438618][ T975] ? __cancel_work+0x1c1/0x230 [ 1108.438645][ T975] ? __cancel_work+0x1c3/0x230 [ 1108.438673][ T975] handle_bug+0x9c/0x200 [ 1108.438701][ T975] exc_invalid_op+0x1a/0x50 [ 1108.438728][ T975] asm_exc_invalid_op+0x1a/0x20 [ 1108.438746][ T975] RIP: 0010:__cancel_work+0x1c1/0x230 [ 1108.438775][ T975] Code: 02 00 00 75 2d e8 6f f2 37 00 48 85 db 75 32 e8 65 f2 37 00 eb 31 e8 5e f2 37 00 90 0f 0b 90 e9 c1 fe ff ff e8 50 f2 37 00 90 <0f> 0b 90 e9 44 ff ff ff e8 42 f2 37 00 e8 fd 7f 23 0a 48 85 db 74 [ 1108.438791][ T975] RSP: 0018:ffffc9001c747bf0 EFLAGS: 00010083 [ 1108.438807][ T975] RAX: ffffffff818dc280 RBX: 001fffffffc00000 RCX: 0000000000080000 [ 1108.438822][ T975] RDX: ffffc900207bd000 RSI: 00000000000000be RDI: 00000000000000bf [ 1108.438835][ T975] RBP: 0000000000000000 R08: ffff888053c08ef7 R09: 1ffff1100a7811de [ 1108.438849][ T975] R10: dffffc0000000000 R11: ffffed100a7811df R12: dffffc0000000000 [ 1108.438864][ T975] R13: 1ffff1100a7811de R14: ffff888053c08ef0 R15: 0000000000000040 [ 1108.438886][ T975] ? __cancel_work+0x1c0/0x230 [ 1108.438926][ T975] __cancel_work_sync+0x1f/0x110 [ 1108.438956][ T975] lec_atm_close+0x171/0x9e0 [ 1108.438985][ T975] ? __local_bh_enable_ip+0xd0/0x130 [ 1108.439011][ T975] ? __pfx_lec_atm_close+0x10/0x10 [ 1108.439045][ T975] vcc_release+0x10f/0x580 [ 1108.439079][ T975] svc_release+0x6c/0xd0 [ 1108.439106][ T975] sock_close+0xc3/0x240 [ 1108.439125][ T975] ? __pfx_sock_close+0x10/0x10 [ 1108.439143][ T975] __fput+0x44f/0xa70 [ 1108.439181][ T975] fput_close_sync+0x11f/0x240 [ 1108.439210][ T975] ? __pfx_fput_close_sync+0x10/0x10 [ 1108.439249][ T975] __x64_sys_close+0x7e/0x110 [ 1108.439269][ T975] do_syscall_64+0x14d/0xf80 [ 1108.439293][ T975] ? trace_irq_disable+0x3b/0x150 [ 1108.439310][ T975] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1108.439329][ T975] ? clear_bhb_loop+0x40/0x90 [ 1108.439353][ T975] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1108.439371][ T975] RIP: 0033:0x7fbbae59c819 [ 1108.439387][ T975] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 1108.439403][ T975] RSP: 002b:00007fbbac7d5028 EFLAGS: 00000246 ORIG_RAX: 0000000000000003 [ 1108.439422][ T975] RAX: ffffffffffffffda RBX: 00007fbbae816180 RCX: 00007fbbae59c819 [ 1108.439435][ T975] RDX: 0000000000000000 RSI: 0000000000000000 RDI: 0000000000000004 [ 1108.439447][ T975] RBP: 00007fbbae632c91 R08: 0000000000000000 R09: 0000000000000000 [ 1108.439460][ T975] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 1108.439472][ T975] R13: 00007fbbae816218 R14: 00007fbbae816180 R15: 00007ffd9e661e78 [ 1108.439503][ T975] [ 1108.442652][ T975] Kernel Offset: disabled