last executing test programs: 6m43.597723012s ago: executing program 4 (id=12538): r0 = socket$l2tp(0x2, 0x2, 0x73) ioctl$sock_SIOCINQ(r0, 0x541b, &(0x7f0000000000)) ioctl$XFS_IOC_ATTRLIST_BY_HANDLE(r0, 0x4058587a, &(0x7f0000001140)={{r0, &(0x7f0000000040)='%{(\x00', 0x44000, &(0x7f0000000080)={@_ha_fsid={[0x0, 0x9]}, {0xa, 0xee93, 0x6, 0x1e8}}, 0x6, &(0x7f00000000c0)={@_ha_fsid}, &(0x7f0000000100)=0x9}, {[0x1, 0x0, 0x1, 0x5]}, 0x82f9, 0x1000, &(0x7f0000000140)=""/4096}) ioctl$TUNSETIFF(r1, 0x400454ca, &(0x7f00000011c0)={'bridge0\x00', 0x800}) getsockopt$IP_VS_SO_GET_DAEMON(r0, 0x0, 0x487, &(0x7f0000001200), &(0x7f0000001240)=0x30) bind(r1, &(0x7f0000001280)=@nl=@proc={0x10, 0x0, 0x25dfdbfd, 0x400000}, 0x80) r2 = bpf$OBJ_GET_PROG(0x7, &(0x7f0000001340)=@generic={&(0x7f0000001300)='./file0\x00', 0x0, 0x8}, 0x18) ioctl$INCFS_IOC_PERMIT_FILL(r2, 0x40046721, &(0x7f0000001380)={r0}) ioctl$sock_ipv4_tunnel_SIOCCHGTUNNEL(r1, 0x89f3, &(0x7f0000001480)={'ip_vti0\x00', &(0x7f00000013c0)={'erspan0\x00', 0x0, 0x1, 0x10, 0xffff37a1, 0x90, {{0x27, 0x4, 0x0, 0x0, 0x9c, 0x67, 0x0, 0x1, 0x29, 0x0, @broadcast, @dev={0xac, 0x14, 0x14, 0x10}, {[@cipso={0x86, 0x24, 0x3, [{0x2, 0x10, "e8475a807e6afa01642991f8deef"}, {0x0, 0xe, "95b33005f8a021f0659b5e11"}]}, @lsrr={0x83, 0xf, 0x90, [@dev={0xac, 0x14, 0x14, 0x1d}, @multicast2, @remote]}, @ssrr={0x89, 0x17, 0xee, [@rand_addr=0x64010102, @private=0xa010100, @dev={0xac, 0x14, 0x14, 0x3d}, @initdev={0xac, 0x1e, 0x0, 0x0}, @private=0xa010102]}, @timestamp={0x44, 0x10, 0xfa, 0x0, 0x7, [0x3ff, 0x0, 0x3ff]}, @timestamp_addr={0x44, 0x24, 0x15, 0x1, 0x4, [{@multicast2, 0x7fff}, {@initdev={0xac, 0x1e, 0x1, 0x0}, 0x2}, {@broadcast, 0x5e57243a}, {@local}]}, @generic={0x86, 0x9, "a4a400decd7710"}]}}}}}) setsockopt$packet_add_memb(r1, 0x107, 0x1, &(0x7f00000014c0)={r3, 0x1, 0x6, @local}, 0x10) ioctl$sock_SIOCETHTOOL(r0, 0x8946, &(0x7f0000001540)={'veth0_macvtap\x00', &(0x7f0000001500)=@ethtool_rxfh={0x46, 0xfffffffa, 0x8, 0xfffffff7, 0x4, "825edd", 0xc78, [0x1, 0x9a, 0x5, 0x5]}}) r4 = syz_genetlink_get_family_id$ieee802154(&(0x7f00000015c0), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_802154(0xffffffffffffffff, 0x8933, &(0x7f0000001600)={'wpan3\x00', 0x0}) ioctl$sock_SIOCGIFINDEX_802154(0xffffffffffffffff, 0x8933, &(0x7f0000001640)={'wpan3\x00', 0x0}) ioctl$sock_SIOCGIFINDEX_802154(0xffffffffffffffff, 0x8933, &(0x7f0000001680)={'wpan1\x00', 0x0}) ioctl$sock_SIOCGIFINDEX_802154(0xffffffffffffffff, 0x8933, &(0x7f00000016c0)={'wpan1\x00', 0x0}) sendmsg$IEEE802154_LLSEC_GETPARAMS(0xffffffffffffffff, &(0x7f00000017c0)={&(0x7f0000001580)={0x10, 0x0, 0x0, 0x2}, 0xc, &(0x7f0000001780)={&(0x7f0000001700)={0x4c, r4, 0x20, 0x70bd28, 0x25dfdbfd, {}, [@IEEE802154_ATTR_DEV_INDEX={0x8, 0x2, r5}, @IEEE802154_ATTR_DEV_NAME={0xa, 0x1, 'wpan1\x00'}, @IEEE802154_ATTR_DEV_INDEX={0x8, 0x2, r6}, @IEEE802154_ATTR_DEV_NAME={0xa, 0x1, 'wpan3\x00'}, @IEEE802154_ATTR_DEV_INDEX={0x8, 0x2, r7}, @IEEE802154_ATTR_DEV_INDEX={0x8, 0x2, r8}]}, 0x4c}}, 0x40000) r9 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r10 = syz_genetlink_get_family_id$nl802154(&(0x7f0000001840), 0xffffffffffffffff) sendmsg$NL802154_CMD_GET_INTERFACE(r9, &(0x7f0000001900)={&(0x7f0000001800)={0x10, 0x0, 0x0, 0x2}, 0xc, &(0x7f00000018c0)={&(0x7f0000001880)={0x28, r10, 0x4, 0x70bd2a, 0x25dfdbfe, {}, [@NL802154_ATTR_WPAN_DEV={0xc}, @NL802154_ATTR_IFINDEX={0x8, 0x3, r8}]}, 0x28}, 0x1, 0x0, 0x0, 0x20000000}, 0x4801) r11 = openat$cgroup_ro(r1, &(0x7f0000001940)='freezer.state\x00', 0x0, 0x0) setsockopt$inet_mreq(r1, 0x0, 0x20, &(0x7f0000001980)={@rand_addr=0x64010102, @broadcast}, 0x8) sendmsg$inet(0xffffffffffffffff, &(0x7f0000002180)={&(0x7f00000019c0)={0x2, 0x4e20, @private=0xa010101}, 0x10, &(0x7f0000002080)=[{&(0x7f0000001a00)="7134d9", 0x3}, {&(0x7f0000001a40)}, {&(0x7f0000001a80)="7862b41773dc39068c47045c0871e1f9d805717ecff681056e5d7a20528b48a316082f9ce38b8fb62f9c6f728d6d7f3411371ffe05127c8fb57c94768517f5ccddfddbe4357de55c4a0147b4fb8a085dbce73a05c35e73476af91b6cdb831e6b37e68574ce7422c87eb2b9737da61fce00524b60511bfb31e1f21caaa87523035a152585b1b7dd339f08f82f07825634f6cb69b820a9ccfa05016450591a17f77633f04e91319bc4b7ecac1c9eb6e28fde862bd82058655ede3878c4d274f608ad904d84bb", 0xc5}, {&(0x7f0000001b80)="1e7fe507d396e8cddaadc9947d0438e8938c6c3685c4e9231848f44a2ef44f4e9046087eb96cddc4e16f5f6ae47f60d1b7f8a5b089de2eacf9e520a2962353a064b0c944eeb54a7ac84ac1bd47d1dd69ea8def6b42f2ba2f53e25533e9a947b6e5e52e76d1b918cb2d5b718d5e348d394858736202521d285ae2a2c5192eecd5726a46057320fe5fa106f0bc7e5aaf255c10568990fcc2ecded51bd17446a89403e113c3682ff681b4", 0xa9}, {&(0x7f0000001c40)="e614123d7f2f7574ad59c99e0ab96e95c30a8a885522d299a62849e227284584678e8c4e286a72be24ce9022d67d0c47454e3b99e418f3fee4106e1da394cf8673f8f05d2fd2eba5d4c47299954e6f4a021aa3fd7cfa6621a594c3e15d43a8b9a90e48a99a75a3312a98", 0x6a}, {&(0x7f0000001cc0)="cffd47de346e1bd2f05cc08c0378a6311b90cb8032d9d199eb9eab614ecdccf31fa2352b9e5dba7c04bb53e4307a8d195dc377b1af97155c58516b88a5139849ff20960edb6439ad5a665a1acc92504a6062c30ce7b730e10db84fa1a24b6b8e2ad016ef375efc336ed424a7d3e126c843fee47c1ca020aed38a0a79d4e677c1551e6398b8613c6d616d5efa71f69af25054ebc8f64b17f27e01664fb0d30c89e4f47bf575cb42daeea102e12d8ddbd62ab873a8409a3f04e99857b19cf526df020d7b014cebd750701e6e482d2b4c091082d0a6b8", 0xd5}, {&(0x7f0000001dc0)="0084cf82037ba50328099dfa96c06f0fe945694cf39372ebe0aec165fd4b84f099a40e97c9971ef682c85a718741e8b293a5abb381cc6c553f871ef0aa2f731c3641b6daa4faefda216922fc1bf690bd46073c6243ddab531ef8c28d91fc3bf2f5c98dc8db38271e67e27f038259b594415f25017173ed4512939e9b47c4f7c61a90eb1f03efab993faa90b85b354777ea8c", 0x92}, {&(0x7f0000001e80)="662cdbed95b495500815f5d81f5d02d580db0ce8e69408d0bd04d1781778bfc34eafc18213653476214cc95dccaf51b5a1497c47833e950fac31fd20f5d320677c0168fb7152b082ae139a4d51a355ff56e8be78f0d1a294160da94bef0b78affc962dd0be8bd5b17247e8a6f9ae6a0a190a2125e2f7164e4c9987a6c3ec", 0x7e}, {&(0x7f0000001f00)="30fd9c93efb20dd33f9e845df3c316929d2c5a7572ccef85a1a6c2324b37e0abbf463c0630e8fed66a522451c97943a3a2e96286cc6c2c43138c0f3525c648c19d84a9a8dd1bed792563a9ebdc01d4dd72f9c268fadd318e793558176e228cbc956bc6218b8e4c2cf32b38728abd77fb48bc435971d20a6297e822da1def98a921c62a0a", 0x84}, {&(0x7f0000001fc0)="2dce331596edc0894b594c7d22c052f20a851ab02c038d7d639a38d06098449fe5195c23e39f1ed25b97aee219214198b0cea630b8e77be306eba9de0b90254c408e3fb56f96756bd30a2b381161890e7fe1826e72f87737261f2cbc5d6cee42b5c4e0345568e05e26bdec4b33574337ede0a85504f41f61a50c5a7510aaed62653f18890c129dd1840e14f11789657d4f", 0x91}], 0xa, &(0x7f0000002140)=[@ip_retopts={{0x20, 0x0, 0x7, {[@rr={0x7, 0xf, 0xa2, [@local, @private=0xa010102, @private=0xa010101]}]}}}], 0x20}, 0x20000000) setsockopt$MRT_ADD_VIF(r1, 0x0, 0xca, &(0x7f00000021c0)={0xffffffffffffffff, 0x4, 0x7, 0x4, @vifc_lcl_ifindex=r3, @multicast1}, 0x10) sendmsg$NL802154_CMD_NEW_SEC_DEV(r9, &(0x7f0000002380)={&(0x7f0000002200)={0x10, 0x0, 0x0, 0x20}, 0xc, &(0x7f0000002340)={&(0x7f0000002240)={0xc8, r10, 0x300, 0x70bd26, 0x25dfdbfc, {}, [@NL802154_ATTR_SEC_DEVICE={0x2c, 0x2e, 0x0, 0x1, [@NL802154_DEV_ATTR_FRAME_COUNTER={0x6, 0x1, 0x9}, @NL802154_DEV_ATTR_KEY_MODE={0x8}, @NL802154_DEV_ATTR_PAN_ID={0x6, 0x2, 0x2}, @NL802154_DEV_ATTR_SECLEVEL_EXEMPT={0x5}, @NL802154_DEV_ATTR_PAN_ID={0x6, 0x2, 0xfffc}]}, @NL802154_ATTR_WPAN_DEV={0xc, 0x6, 0x2}, @NL802154_ATTR_IFINDEX={0x8, 0x3, r6}, @NL802154_ATTR_SEC_DEVICE={0x14, 0x2e, 0x0, 0x1, [@NL802154_DEV_ATTR_PAN_ID={0x6, 0x2, 0x2}, @NL802154_DEV_ATTR_PAN_ID={0x6, 0x2, 0x1}]}, @NL802154_ATTR_WPAN_DEV={0xc}, @NL802154_ATTR_SEC_DEVICE={0x10, 0x2e, 0x0, 0x1, [@NL802154_DEV_ATTR_EXTENDED_ADDR={0xc, 0x4, {0xaaaaaaaaaaaa0102}}]}, @NL802154_ATTR_WPAN_DEV={0xc, 0x6, 0x2}, @NL802154_ATTR_SEC_DEVICE={0x28, 0x2e, 0x0, 0x1, [@NL802154_DEV_ATTR_SHORT_ADDR={0x6, 0x3, 0xffff}, @NL802154_DEV_ATTR_FRAME_COUNTER={0x6, 0x1, 0x1}, @NL802154_DEV_ATTR_EXTENDED_ADDR={0xc, 0x4, {0xaaaaaaaaaaaa0002}}, @NL802154_DEV_ATTR_KEY_MODE={0x8, 0x6, 0x1}]}, @NL802154_ATTR_IFINDEX={0x8, 0x3, r5}, @NL802154_ATTR_IFINDEX={0x8, 0x3, r5}]}, 0xc8}, 0x1, 0x0, 0x0, 0x880}, 0x8000040) ioctl$sock_SIOCSIFVLAN_ADD_VLAN_CMD(r11, 0x8983, &(0x7f00000023c0)={0x0, 'syzkaller1\x00', {0x2}, 0x40}) bind$inet(r0, &(0x7f0000002400)={0x2, 0x4e20, @broadcast}, 0x10) ioctl$IMGETVERSION(r11, 0x80044942, &(0x7f0000002440)) recvmmsg(r0, &(0x7f0000002900)=[{{&(0x7f0000002480)=@rxrpc=@in4={0x21, 0x0, 0x2, 0x10, {0x2, 0x0, @initdev}}, 0x80, &(0x7f00000026c0)=[{&(0x7f0000002500)=""/145, 0x91}, {&(0x7f00000025c0)=""/205, 0xcd}], 0x2, &(0x7f0000002700)=""/11, 0xb}, 0x1ff}, {{0x0, 0x0, &(0x7f00000028c0)=[{&(0x7f0000002740)=""/195, 0xc3}, {&(0x7f0000002840)=""/112, 0x70}], 0x2}, 0xf43}], 0x2, 0x2000, &(0x7f0000002980)) sendmsg$TCPDIAG_GETSOCK(0xffffffffffffffff, &(0x7f0000002f00)={&(0x7f00000029c0)={0x10, 0x0, 0x0, 0x800000}, 0xc, &(0x7f0000002ec0)={&(0x7f0000002a00)={0x494, 0x12, 0x20, 0x70bd2b, 0x25dfdbfb, {0xb, 0xa, 0x8, 0x3, {0x4e22, 0x4e21, [0x200, 0x7, 0x2, 0x5], [0x2, 0x6, 0x8, 0x7], 0x0, [0xd3, 0xbf]}, 0x6, 0x3}, [@INET_DIAG_REQ_BYTECODE={0xe7, 0x1, "e278fff54a3a94acbd273ecafb57f1e6ceb7ed09559b5d290cca956f3a44a828e1de670f14f795729103fa5de039e53a96d04a36291a6dba78e1ec494d9a768f81435048ee2ea838e8e914d864d7e5af38469760db3dbd3f8b1a2b4f754569b6baaee525175196f3538f405c61c0454ecf553d4a6ba2727816f5f818d086163cc6ec77043e011f08eb86e8fead296dcbd28ec8b8912263db842097b2936653cdc6335b9c1f5ff205a85ba82870fe4c0f8af890f41c6105ce46ebc950d7a86f235a3386b2a29f3ff9b9ae30fd1cbf11c3995ffb01b0b524e3475226989f79bca56250f9"}, @INET_DIAG_REQ_BYTECODE={0x13, 0x1, "5affa3e2ae30f7a48848600c391727"}, @INET_DIAG_REQ_BYTECODE={0xec, 0x1, "db8af9ec404470c140b764b482a1c50d2242eff609e9f1cb1e71eb3561eeacb40d6198972ac7dfcfe6f0bdf08dc9cbba2436e2cff925dbe8169317a1b2ab30759d2fb5686ca5b400174bea2553d9aba7177040c85f4a565bca7f864b1c87fb2df3356db710f3a220625bcd6e931c3f94aa7347a3e86b27efebf45d02bc0d0f6fd113c62f6a48d96ef111769a7c0546bc947e3187cbfd993f1974d5fa9717608e6a8aadb3572b0e2275c45b207ca8fab60d317e0cc4dc4feca6f762b435250c74b1a0ce5695088ee0b6103edb781f1a0d28a279745c4d7fb15826ad1ae315293740515d5476392796"}, @INET_DIAG_REQ_BYTECODE={0x75, 0x1, "9b082552ab84159c98ebe384299621bc6f3cd022f722bb72480295976123ac5e6bd056b47cf315135c3e661250b2d881c5e0f5f0197bec1c415f447a8551ccc859ead9b21300247fd40cb211e279913c495a9047fb8a9ebd38adb154f261bebcd314b5efdb977920893eeab1fb9ee0dab7"}, @INET_DIAG_REQ_BYTECODE={0xc2, 0x1, "aa85ea0788a7c51618deed13c1ec5bc1658eff4a6e2563dece60e8bc8b51aeb2fd63bd627cf7585f9c47f5a967e310669462462869f262e3ca9fbc4c15c281d0b92b4178025de9d2fbef453ea3d044133268cb6200df8770f1ee636cc7e06332dc2de6e0f987a21097e652c381f60ca000ab0158cd0537f349a5314aef8ef0789b4e9eba43ad9519913f970313df250d085b8b71df9e6d2b77d8eed5eb85072134fb8af18bdfd2be92babb4b5a1a8817d8d44dd0dc832a738407dbf3b1e8"}, @INET_DIAG_REQ_BYTECODE={0x3c, 0x1, "20c181aff540d7a38e4f147c9cd165438bcdabe96b4215903c020ceeefca8e4dc16ce21c73eb795135cf44eaabf650d42454fccc2fa4af9e"}, @INET_DIAG_REQ_BYTECODE={0xe6, 0x1, "c9f64e657e3fa6e8d9677aeff129af75a45cf3bd08b3c2ccec4eac581722a13574f0085eb32da988851f9f5b4ad48ee67951791eaa039012e5245fcf4fb61a947992128f463b8e72b62d8ddd21cc2614f5c1fe4d7a70ce29e27aab5ae137b553cb27306e73a3b08698d7b46ac9cf59cc19da3efc43b02006b76689b16154796f9c12ce68823c3a0639af7b7659ed11db68138f3d44ad7920a921b0c637511c2ad04fcd001a15252de51f53f84ae37121a282533f15f7cb076c5c1ab0af91a6b88b5e0fb7fc498e922f7d6c25455025690bc2e53ba496d92d812801e3c64da3332ce3"}]}, 0x494}, 0x1, 0x0, 0x0, 0x44814}, 0x42045) 6m42.586158574s ago: executing program 4 (id=12552): r0 = socket$netlink(0x10, 0x3, 0x0) r1 = socket(0x10, 0x803, 0x0) sendmsg$IPVS_CMD_SET_INFO(r1, &(0x7f0000000b00)={0x0, 0x0, &(0x7f0000000ac0)={0x0, 0x14}}, 0x0) getsockname$packet(r1, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000040)=0x14) sendmsg$nl_route(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000380)=ANY=[@ANYBLOB="3c0000001000850600"/20, @ANYRES32=r2, @ANYBLOB="0000000000004a641c0012000c000100626f6e64000000000c0002000800010006"], 0x3c}}, 0x0) sendmsg$nl_route(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000140)=ANY=[@ANYBLOB="3c00000010001fff0000000001000000000000d7", @ANYRES32=0x0, @ANYBLOB="0000000000000000140012800a000100767863616e0000000400028008000a00", @ANYRES32=r2], 0x3c}, 0x1, 0x0, 0x0, 0x40000}, 0x0) r3 = socket$nl_route(0x10, 0x3, 0x0) r4 = socket(0x1, 0x803, 0x0) getsockname$packet(r4, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f00000001c0)=0x14) sendmsg$nl_route(r3, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000980)=ANY=[@ANYBLOB="3c0000001000030425bd70000000000000000000", @ANYRES32=0x0, @ANYBLOB="0005000082180000140012800b00010062726964676500000400028008000a00", @ANYRES32=r5], 0x3c}, 0x1, 0x0, 0x0, 0x24000804}, 0x8000) r6 = socket$nl_route(0x10, 0x3, 0x0) r7 = socket(0x1, 0x803, 0x0) r8 = socket$netlink(0x10, 0x3, 0x0) r9 = socket(0x10, 0x803, 0x8) sendmsg$IPVS_CMD_SET_INFO(r9, &(0x7f0000000b00)={0x0, 0x0, &(0x7f0000000ac0)={0x0, 0x14}}, 0x0) getsockname$packet(r9, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route(r8, &(0x7f00000000c0)={0x0, 0x60, &(0x7f0000000300)={&(0x7f0000000900)=ANY=[@ANYBLOB="5c00000010001ffffcffffff0000000000000000", @ANYRES32=0x0, @ANYBLOB="0000000000000000340012800b0001006772657461700000240002800800070064010100060003001008000008001500700f0d0008000700ac1414bb08000a00", @ANYRES32=r10], 0x5c}}, 0x40) getsockname$packet(r7, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f00000002c0)=0x14) sendmsg$nl_route(r6, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000380)=@newlink={0x4c, 0x10, 0x401, 0x0, 0x0, {0x0, 0x0, 0x0, 0x0, 0x300}, [@IFLA_LINKINFO={0x1c, 0x12, 0x0, 0x1, @macvlan={{0xc}, {0xc, 0x2, 0x0, 0x1, [@IFLA_MACVLAN_MODE={0x8, 0x1, 0x8}]}}}, @IFLA_LINK={0x8, 0x5, r11}, @IFLA_MASTER={0x8, 0xa, r11}]}, 0x4c}, 0x1, 0x400000000000000}, 0x884) 6m41.946057688s ago: executing program 4 (id=12562): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r0, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={&(0x7f00000000c0)=ANY=[@ANYBLOB="140000001000010000000000000000000700000a200000001a0a01080000000000000000070000050900010073797a310000000048000000000a050000000000000000000100000308000240000000020c00044000000000000000050900010073797a3100000000080002"], 0x90}, 0x1, 0x0, 0x0, 0x4004020}, 0x80) setsockopt$ALG_SET_KEY(0xffffffffffffffff, 0x117, 0x1, &(0x7f0000000200)="d38c827893b48ebfdc57b0c8fd84b0d6232bd5ebf506f7808c1f82b8b97e309d9d696de3b9a7631e99344f49bb40e49e5b3175e4c876b6e85a091bab80254bf05fdf2704cb064d840dd201da0c49563d6d2ecb616852e4b124a56fe8072d4003166602c621508baf9d2e01b1e2c2e3cc4e20e1a1bd6dd084209ddd35013cb9833260c9f1dc54b292b0dbebd5adfc76bbd35b7ff91627115e8d9a3ec9c2ddf0395672af89b38b1e89643dbe5e616bfe01bdb53d49631fadf0ba251926023b04979a92222e6f96f1fa", 0xc8) 6m41.768149058s ago: executing program 4 (id=12566): ioctl$sock_kcm_SIOCKCMCLONE(0xffffffffffffffff, 0x89e2, &(0x7f0000000000)={0xffffffffffffffff}) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000080), 0xffffffffffffffff) r2 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='cgroup.controllers\x00', 0x275a, 0x0) mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000)='./cgroup.cpu/syz1\x00', 0x1ff) write$tun(r2, &(0x7f0000000000)=ANY=[], 0x38) r3 = syz_open_procfs$namespace(0x0, &(0x7f0000000280)='ns/net\x00') bpf$BPF_PROG_QUERY(0x10, &(0x7f0000000480)={@cgroup=r3, 0x11, 0x0, 0x0, 0x0, 0x1000000, 0x0, 0x0, 0x0, 0x0}, 0x40) r4 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='memory.events\x00', 0x275a, 0x0) write$cgroup_subtree(r4, &(0x7f0000000100)=ANY=[], 0x32600) setsockopt$inet_opts(r4, 0x0, 0x4, &(0x7f0000000c80)="9321852bda7714ffcad4198bbf4693f4bf144683ad98dd61f168870839b678d6ba59815125304b8080bb9a88bd88c7b0803a22c3476e673abd31010588085dad7b83d964fe0f8e5aae94f551cb4ef6464c0318364e0580b1233e24b80a41340d5fa19e4c209e0a5806849f177557ca001b9cd53462aa1b6a74492f2e69a23b3b1e848baab9e9af69fbecb61dfce0c8accc9e3b72c84bad2f3e3fe65091b9c4316c2b250263993a9a6a320aebd1e086ca361fbddbb14c0d7d46e52fe191460e46a75d1ea0ac99e8940a6b707eabca79fd1f19518761", 0xd5) mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x2000001, 0x12, r4, 0x0) bpf$BPF_PROG_QUERY(0x10, &(0x7f0000000380)={@fallback, 0x10, 0x0, 0x100, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x40) mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x1, 0x10012, r2, 0x0) openat$tun(0xffffffffffffff9c, &(0x7f0000000000), 0x4000, 0x0) sendmsg$NL80211_CMD_SET_TX_BITRATE_MASK(r0, &(0x7f0000000100)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x4000}, 0xc, &(0x7f00000000c0)={&(0x7f0000000280)={0x9d0, r1, 0x10, 0x70bd28, 0x25dfdbfc, {{}, {@val={0x8}, @val={0xc, 0x99, {0x6, 0x7a}}}}, [@NL80211_ATTR_TX_RATES={0xf4, 0x5a, 0x0, 0x1, [@NL80211_BAND_5GHZ={0x20, 0x1, 0x0, 0x1, [@NL80211_TXRATE_VHT={0x14, 0x3, {[0x3, 0x7, 0x6, 0x2, 0x40, 0x2631, 0x2, 0x9]}}, @NL80211_TXRATE_HE_LTF={0x5, 0x7, 0x1}]}, @NL80211_BAND_60GHZ={0x4}, @NL80211_BAND_60GHZ={0x30, 0x2, 0x0, 0x1, [@NL80211_TXRATE_HE={0x14, 0x5, {[0x3, 0x1e5, 0x1, 0x0, 0x7, 0x6, 0xf, 0x7]}}, @NL80211_TXRATE_HT={0x18, 0x2, [{0x6, 0x4}, {0x6, 0x9}, {0x0, 0x8}, {0x2, 0x7}, {0x7, 0x2}, {0x1}, {0x7, 0x1}, {0x5, 0x1}, {0x7, 0x2}, {0x6, 0x7}, {0x5}, {0x2, 0x8}, {0x3, 0x2}, {0x1, 0x9}, {0x6, 0x7}, {0x7, 0x3}, {0x0, 0x5}, {0x6}, {0x0, 0x3}, {0x4, 0x9}]}]}, @NL80211_BAND_5GHZ={0x9c, 0x1, 0x0, 0x1, [@NL80211_TXRATE_HT={0x49, 0x2, [{0x2, 0x9}, {0x4, 0x6}, {0x5, 0x8}, {0x3, 0x6}, {0x1}, {0x6, 0xa}, {0x0, 0x8}, {0x2, 0x9}, {0x2, 0x7}, {0x6, 0x9}, {0x7, 0x8}, {0x6, 0x9}, {0x6, 0xa}, {0x4}, {0x1, 0x3}, {0x5, 0x5}, {0x1, 0x9}, {0x6}, {0x1, 0x1}, {0x4, 0x5}, {0x6, 0x3}, {0x2, 0x8}, {0x2, 0x5}, {0x0, 0x9}, {0x7, 0x7}, {0x2, 0x7}, {0x4, 0x2}, {0x4, 0x4}, {0x2, 0x5}, {0x6, 0x2}, {0x7, 0x5}, {0x0, 0x9}, {0x6, 0x4}, {0x3, 0x6}, {0x0, 0x8}, {0x3, 0x9}, {0x2, 0x3}, {0x2, 0x1}, {0x1, 0x6}, {0x7, 0x1}, {0x0, 0x2}, {0x1, 0x6}, {0x7, 0x4}, {0x4}, {0x1, 0x2}, {0x5, 0x9}, {0x4, 0x4}, {0x1, 0x6}, {0x6}, {0x2, 0x7}, {0x7, 0x6}, {0x2, 0x8}, {0x4, 0x2}, {}, {0x6, 0x2}, {0x7, 0x4}, {0x0, 0x5}, {0x3, 0x4}, {0x3}, {0x6, 0x8}, {0x6, 0xa}, {0x2, 0x5}, {0x1, 0x3}, {0x4, 0x5}, {0x5, 0x9}, {0x3, 0x5}, {0x0, 0x2}, {0x7, 0x1}, {0x4, 0x3}]}, @NL80211_TXRATE_VHT={0x14, 0x3, {[0x6, 0x8, 0xff, 0xfc01, 0x3, 0x8, 0x4dbc, 0x7]}}, @NL80211_TXRATE_GI={0x5, 0x4, 0x2}, @NL80211_TXRATE_VHT={0x14, 0x3, {[0x1, 0x1ff, 0x8, 0x9, 0x1, 0x5, 0x52, 0x7]}}, @NL80211_TXRATE_LEGACY={0x1a, 0x1, [0x24, 0x6, 0x1e, 0x30, 0x18, 0x48, 0x16, 0x24, 0x18, 0x6, 0xb, 0x24, 0x4, 0x1, 0x16, 0x1b, 0xb, 0x9, 0x3cf0a9391c0ca2b7, 0x1, 0x1, 0x30]}]}]}, @NL80211_ATTR_TX_RATES={0x8c, 0x5a, 0x0, 0x1, [@NL80211_BAND_60GHZ={0x88, 0x2, 0x0, 0x1, [@NL80211_TXRATE_HE_LTF={0x5, 0x7, 0x1}, @NL80211_TXRATE_HT={0x2e, 0x2, [{0x5, 0x7}, {0x3, 0x6}, {0x3}, {0x6, 0x2}, {0x3, 0x6}, {0x0, 0x7}, {0x1, 0x7}, {0x3, 0xa}, {0x6, 0x1}, {0x5, 0x18}, {0x0, 0x7}, {0x2, 0x9}, {0x2}, {0x6, 0x9}, {0x7, 0x5}, {0x0, 0xa}, {0x4, 0x1}, {0x0, 0x1}, {0x6, 0x4}, {0x6}, {0x0, 0x9}, {0x0, 0x8}, {0x5, 0x3}, {0x5, 0x2}, {0x0, 0xa}, {0x5}, {0x4, 0x3}, {0x2, 0x2}, {0x6, 0x4}, {0x4, 0xa}, {0x5, 0x3}, {0x2, 0x4}, {0x2, 0x1}, {0x0, 0xa}, {0x6, 0x7}, {0x4, 0x2}, {0x6}, {0x6, 0x6}, {0x5}, {0x7, 0x9}, {0x2, 0x4}, {0x0, 0x1}]}, @NL80211_TXRATE_HE={0x14, 0x5, {[0x6, 0x5, 0xb, 0x6, 0x57c, 0x9, 0xb9e2, 0x1]}}, @NL80211_TXRATE_HE={0x14, 0x5, {[0x8, 0xffff, 0xfff8, 0x1000, 0x1, 0x4, 0x1, 0x227]}}, @NL80211_TXRATE_HE_LTF={0x5, 0x7, 0x1}, @NL80211_TXRATE_HE_LTF={0x5}, @NL80211_TXRATE_LEGACY={0xa, 0x1, [0x48, 0x1b, 0xb, 0x1b, 0xb, 0x6]}, @NL80211_TXRATE_HE_GI={0x5, 0x6, 0x2}]}]}, @NL80211_ATTR_TX_RATES={0xc4, 0x5a, 0x0, 0x1, [@NL80211_BAND_6GHZ={0x14, 0x3, 0x0, 0x1, [@NL80211_TXRATE_LEGACY={0xf, 0x1, [0x6c, 0x36, 0x2, 0x5510109fcf8aad78, 0x2, 0x16, 0x1b, 0x16, 0x6c, 0x60, 0x3]}]}, @NL80211_BAND_60GHZ={0xac, 0x2, 0x0, 0x1, [@NL80211_TXRATE_HE={0x14, 0x5, {[0x7, 0x8, 0x6, 0x1, 0xfffe, 0xa, 0x4000, 0x9]}}, @NL80211_TXRATE_HE_GI={0x5, 0x6, 0x2}, @NL80211_TXRATE_VHT={0x14, 0x3, {[0x7, 0x3, 0xa, 0x9, 0xc5, 0x0, 0x0, 0x8000]}}, @NL80211_TXRATE_HT={0x4d, 0x2, [{}, {0x0, 0x1}, {0x3, 0xa}, {0x1, 0x3}, {0x0, 0x1}, {0x0, 0xa}, {0x5, 0x7}, {0x7, 0x4}, {0x2, 0x8}, {0x1, 0x7}, {0x0, 0x8}, {0x6, 0x3}, {0x3, 0x1}, {0x1, 0x1}, {0x4, 0x6}, {0x0, 0x1}, {0x0, 0x3}, {0x0, 0x9}, {0x0, 0x6}, {0x4, 0x1}, {0x0, 0x8}, {0x4, 0x1}, {0x5, 0x3}, {0x7, 0x2}, {0x5, 0x1}, {0x0, 0x9}, {0x3, 0x4}, {0x7, 0x3}, {0x0, 0x9}, {0x3, 0x5}, {0x5, 0x6}, {0x0, 0x9}, {0x6, 0x8}, {0x7, 0x3}, {0x1, 0x8}, {0x1, 0xa}, {0x3, 0x5}, {0x7}, {0x4, 0x1}, {0x0, 0x2}, {0x5}, {0x4, 0x7}, {0x6, 0x8}, {0x7, 0x7}, {0x4, 0x4}, {0x5, 0x1}, {0x7, 0x5}, {0x4, 0xa}, {}, {0x1, 0x9}, {0x0, 0x6}, {0x6, 0x8}, {0x2, 0x5}, {0x0, 0x7}, {0x4, 0x2}, {0x5, 0x9}, {0x1, 0x1}, {0x5, 0x9}, {0x3, 0x7}, {0x7, 0x4}, {0x0, 0x7}, {0x3, 0x7}, {0x4, 0x9}, {0x5, 0x3}, {0x5, 0x2}, {0x1, 0x7}, {0x1, 0x1}, {0x4, 0xa}, {0x1, 0x4}, {0x1, 0x6}, {0x2, 0x7}, {0x2, 0x3}, {0x0, 0x1}]}, @NL80211_TXRATE_HE={0x14, 0x5, {[0x3, 0x8, 0xfff, 0x100, 0xfff, 0x8, 0xfec, 0x7]}}, @NL80211_TXRATE_HE={0x14, 0x5, {[0x6, 0x1ff, 0x3, 0x8e34, 0x4, 0x1, 0xc8e, 0x7]}}]}]}, @NL80211_ATTR_TX_RATES={0x80, 0x5a, 0x0, 0x1, [@NL80211_BAND_2GHZ={0x28, 0x0, 0x0, 0x1, [@NL80211_TXRATE_LEGACY={0x22, 0x1, [0x36, 0x30, 0xc, 0xf, 0x1, 0x60, 0x18, 0x4, 0xb, 0x3, 0x36, 0xb, 0x24, 0x36, 0x60, 0x2, 0x24, 0x1, 0x4, 0x18, 0x1b, 0x1, 0x16, 0x4, 0x36, 0x1b, 0x48, 0x2, 0x60, 0x12]}]}, @NL80211_BAND_2GHZ={0x40, 0x0, 0x0, 0x1, [@NL80211_TXRATE_HT={0x13, 0x2, [{0x4, 0x1}, {0x2, 0x9}, {0x7, 0x4}, {0x0, 0x7}, {0x5, 0x6}, {0x6, 0x9}, {0x2, 0x4}, {0x3, 0x5}, {0x7, 0x5}, {0x1, 0x2}, {0x5, 0xa}, {0x6, 0x8}, {0x2, 0x1}, {0x6}, {0x1, 0x7}]}, @NL80211_TXRATE_HT={0x14, 0x2, [{0x1, 0x3}, {0x5, 0x8}, {0x0, 0x8}, {0x7}, {0x1, 0x3}, {0x7, 0xa}, {0x3}, {0x2, 0x5}, {0x1, 0x8}, {0x2, 0x2}, {0x7, 0x8}, {0x2, 0x4}, {0x1, 0x9}, {0x1, 0xa}, {0x4, 0x3}, {0x3, 0x1}]}, @NL80211_TXRATE_HE={0x14, 0x5, {[0xfff, 0x9, 0x2, 0x7, 0xfc00, 0xfff, 0x0, 0x2]}}]}, @NL80211_BAND_6GHZ={0x14, 0x3, 0x0, 0x1, [@NL80211_TXRATE_LEGACY={0xf, 0x1, [0xb, 0xc, 0x8, 0x36, 0x5, 0x36, 0x12, 0x6, 0x12, 0x60, 0x6]}]}]}, @NL80211_ATTR_TX_RATES={0x300, 0x5a, 0x0, 0x1, [@NL80211_BAND_60GHZ={0x88, 0x2, 0x0, 0x1, [@NL80211_TXRATE_HE_GI={0x5, 0x6, 0x1}, @NL80211_TXRATE_VHT={0x14, 0x3, {[0x3, 0xd, 0x7, 0xd, 0x67, 0x9, 0x401, 0x9]}}, @NL80211_TXRATE_HE_GI={0x5}, @NL80211_TXRATE_VHT={0x14, 0x3, {[0x5, 0x0, 0x2, 0xfe00, 0x5, 0x7, 0xfff, 0x1]}}, @NL80211_TXRATE_HE_GI={0x5, 0x6, 0x2}, @NL80211_TXRATE_HT={0x27, 0x2, [{0x4, 0xa}, {0x3, 0xa}, {0x7}, {0x7, 0x4}, {0x6}, {0x0, 0x9}, {0x5, 0x3}, {0x1, 0x3}, {0x1, 0x3}, {0x1, 0xa}, {0x0, 0x9}, {0x1}, {0x1, 0xa}, {}, {0x6, 0x3}, {0x7, 0x2}, {0x6, 0x5}, {0x5}, {0x0, 0xa}, {0x6, 0x2}, {0x1, 0x1}, {0x0, 0x8}, {0x6, 0x4}, {0x5}, {0x7}, {0x0, 0x7}, {0x3, 0xa}, {0x1}, {0x3, 0x5}, {0x6, 0x5}, {0x1, 0x6}, {0x0, 0x8}, {0x3, 0x9}, {0x5, 0x3}, {0x3, 0x4}]}, @NL80211_TXRATE_VHT={0x14, 0x3, {[0x5d67, 0xff, 0xfff, 0x80, 0x6c, 0x19, 0x6, 0x101]}}, @NL80211_TXRATE_HE_GI={0x5}]}, @NL80211_BAND_2GHZ={0xc, 0x0, 0x0, 0x1, [@NL80211_TXRATE_GI={0x5, 0x4, 0x1}]}, @NL80211_BAND_5GHZ={0x30, 0x1, 0x0, 0x1, [@NL80211_TXRATE_HT={0xd, 0x2, [{0x0, 0x9}, {0x2, 0x7}, {0x7, 0x7}, {0x6, 0x7}, {0x2}, {0x1, 0x1}, {0x3, 0xa}, {0x7, 0xa}, {0x0, 0x8}]}, @NL80211_TXRATE_HE={0x14, 0x5, {[0x3, 0xba, 0x6, 0x0, 0xea, 0x6, 0x1ff, 0x2]}}, @NL80211_TXRATE_HE_GI={0x5, 0x6, 0x2}]}, @NL80211_BAND_6GHZ={0x7c, 0x3, 0x0, 0x1, [@NL80211_TXRATE_LEGACY={0x1e, 0x1, [0x5, 0xb, 0x1, 0x36, 0x1, 0x1, 0x24, 0x12, 0x36, 0xc, 0xc, 0x12, 0x18, 0x60, 0x4, 0x2b, 0x6, 0x1, 0x1b, 0x4, 0x6c, 0x60, 0x60, 0x4, 0x9, 0x30]}, @NL80211_TXRATE_VHT={0x14, 0x3, {[0x4, 0xeeca, 0x800, 0xa844, 0x72, 0x1, 0x100, 0x6]}}, @NL80211_TXRATE_HE_LTF={0x5}, @NL80211_TXRATE_HT={0x32, 0x2, [{0x7, 0x3}, {0x5, 0x4}, {0x7, 0xa}, {0x3, 0x2}, {0x1}, {0x0, 0x8}, {0x1, 0x8}, {0x3, 0x7}, {0x0, 0x3}, {0x0, 0x6}, {0x6, 0xa}, {0x1, 0x7}, {0x0, 0x3}, {0x2, 0x6}, {0x1}, {0x4, 0x3}, {0x0, 0x1}, {0x1, 0xa}, {0x5, 0x2}, {0x1, 0x3}, {0x4, 0x9}, {0x0, 0x8}, {0x2, 0xa}, {0x1, 0x1}, {0x4}, {0x3}, {0x1, 0xa}, {0x0, 0x5}, {0x1, 0x8}, {0x7, 0x4}, {0x4, 0x4}, {0x7, 0x6}, {0x7, 0x4}, {0x1, 0x1}, {0x5, 0x2}, {0x0, 0x5}, {0x7}, {0x0, 0x5}, {0x2, 0x3}, {0x7, 0x1}, {0x5, 0x3}, {0x2, 0xa}, {0x7, 0x1}, {0x7, 0xa}, {0x7, 0x3}, {0x1, 0x5}]}, @NL80211_TXRATE_GI={0x5}]}, @NL80211_BAND_60GHZ={0x70, 0x2, 0x0, 0x1, [@NL80211_TXRATE_HE_LTF={0x5}, @NL80211_TXRATE_LEGACY={0x24, 0x1, [0x5, 0x1, 0x18, 0x1, 0x6, 0x36, 0x2, 0x5, 0x6c, 0x6c, 0x0, 0x16, 0x44, 0x4, 0x2, 0x6, 0x1b, 0x1, 0x18, 0x60, 0x18, 0x17, 0x16, 0x4, 0x6, 0x1, 0x3, 0x48, 0x60, 0x6c, 0x36, 0x24]}, @NL80211_TXRATE_HT={0x30, 0x2, [{0x6, 0x5}, {0x7, 0x4}, {0x6, 0x4}, {0x2, 0x2}, {0x4, 0x5}, {0x6, 0x9}, {0x4, 0x3}, {0x7, 0x6}, {0x6}, {0x0, 0x3}, {0x7, 0x4}, {0x7, 0x5}, {0x1, 0x1}, {0x6, 0x3}, {0x7}, {0x1, 0x4}, {0x5, 0x2}, {0x1, 0x4}, {0x3, 0x9}, {0x4, 0xa}, {0x2, 0x7}, {0x6, 0x7}, {0x2, 0x1}, {0x3, 0x6}, {0x5, 0x2}, {0x2, 0xa}, {0x6, 0x1}, {0x6, 0x6}, {0x3, 0xa}, {0x0, 0x2}, {0x2, 0xa}, {0x6, 0x5}, {0x1}, {0x1, 0x2}, {}, {0x2}, {0x1, 0x3}, {0x7, 0x9}, {0x6, 0x9}, {0x1, 0xa}, {0x3, 0x9}, {0x7, 0x7}, {0x5, 0x3}, {0x4, 0x8}]}, @NL80211_TXRATE_GI={0x5, 0x4, 0x1}, @NL80211_TXRATE_HE_LTF={0x5}]}, @NL80211_BAND_60GHZ={0x3c, 0x2, 0x0, 0x1, [@NL80211_TXRATE_HE_GI={0x5, 0x6, 0x2}, @NL80211_TXRATE_HE_GI={0x5, 0x6, 0x1}, @NL80211_TXRATE_HE={0x14, 0x5, {[0x9, 0x401, 0x8, 0xbd, 0xa, 0x1, 0xfffe, 0x1]}}, @NL80211_TXRATE_HE={0x14, 0x5, {[0x1, 0x2, 0xdb, 0x5c, 0x8, 0x0, 0x5, 0x3]}}]}, @NL80211_BAND_60GHZ={0xc, 0x2, 0x0, 0x1, [@NL80211_TXRATE_LEGACY={0x7, 0x1, [0x16, 0xc, 0x6]}]}, @NL80211_BAND_5GHZ={0xd0, 0x1, 0x0, 0x1, [@NL80211_TXRATE_HT={0x3c, 0x2, [{0x1, 0x7}, {0x4, 0x5}, {0x2, 0x2}, {0x6, 0x6}, {0x4, 0x2}, {0x4, 0x9}, {0x4}, {0x1, 0x1}, {0x1, 0x1}, {0x1, 0x7}, {0x6}, {0x0, 0x4}, {0x1, 0x5}, {0x1, 0x7}, {0x7, 0x1}, {0x4, 0x6}, {0x0, 0x6}, {0x1, 0x6}, {0x4, 0x3}, {0x1, 0x2}, {0x2}, {0x1, 0x3}, {0x2, 0x1}, {0x0, 0x3}, {0x3, 0x9}, {0x0, 0x4}, {0x0, 0x7}, {0x2, 0x1}, {0x2, 0x3}, {0x2, 0x3}, {0x3, 0x1}, {0x3, 0x4}, {0x5, 0x6}, {0x5, 0x8}, {0x4, 0x9}, {0x3, 0x7}, {0x6, 0x6}, {0x4, 0x9}, {0x6, 0x1}, {0x4, 0x1}, {0x2}, {0x4, 0x4}, {0x2, 0x1}, {0x0, 0x8}, {0x0, 0x1}, {0x1}, {0x7, 0x4}, {0x0, 0x3}, {0x1}, {0x0, 0x5}, {0x0, 0x1}, {0x3, 0x5}, {0x3, 0x3}, {0x3, 0x5}, {0x6, 0x7}, {0x3, 0x7}]}, @NL80211_TXRATE_GI={0x5}, @NL80211_TXRATE_HE_GI={0x5, 0x6, 0x2}, @NL80211_TXRATE_GI={0x5, 0x4, 0x2}, @NL80211_TXRATE_HE_LTF={0x5, 0x7, 0x1}, @NL80211_TXRATE_HE={0x14, 0x5, {[0x6000, 0x3, 0xb7, 0x1, 0x1, 0x4b, 0x4, 0x3]}}, @NL80211_TXRATE_HT={0x41, 0x2, [{0x2, 0x5}, {0x0, 0x2}, {0x5, 0x7}, {0x1, 0x7}, {0x0, 0x8}, {0x5, 0xa}, {0x5, 0xa}, {0x4, 0x2}, {0x1, 0x8}, {0x3}, {0x5, 0x1}, {0x7, 0x4}, {0x2, 0x7}, {0x1, 0x7}, {0x7, 0x1}, {0x1, 0x1}, {0x1, 0x6}, {0x2}, {0x6}, {0x7}, {0x1, 0x2}, {0x1, 0x8}, {0x7, 0x4}, {0x3, 0x8}, {0x5, 0x9}, {0x2, 0x3}, {0x2, 0x2}, {0x2, 0xa}, {0x6, 0x6}, {0x6, 0x5}, {0x2, 0x2}, {0x3, 0x1}, {0x1, 0x7}, {0x5, 0x1}, {0x2}, {0x4, 0x4}, {0x3, 0x5}, {0x2, 0x8}, {0x5, 0x1}, {0x0, 0x3}, {0x5, 0x2}, {0x6, 0xa}, {0x6, 0x1}, {0x1, 0x1}, {0x5, 0x4}, {0x5, 0xa}, {0x3, 0x9}, {0x1, 0x9}, {0x0, 0x7}, {0x1, 0x3}, {0x7, 0x7}, {0x6, 0x6}, {0x4, 0x8}, {0x3, 0x7}, {0x2, 0x8}, {0x2}, {0x6}, {0x3, 0x7}, {0x1, 0x9}, {0x3, 0x5}, {0x7, 0x5}]}, @NL80211_TXRATE_HT={0x17, 0x2, [{0x2, 0x7}, {0x7, 0xa}, {0x1, 0x1}, {0x6, 0x1}, {0x3, 0x8}, {0x7, 0x1}, {0x6, 0x9}, {0x4, 0x7}, {0x7, 0x3}, {0x7, 0x4}, {0x6, 0x1}, {0x5, 0x1}, {0x2, 0x5}, {0x3, 0xa}, {0x6, 0x9}, {0x6, 0x9}, {0x0, 0x6}, {0x0, 0x5}, {0x1, 0x7}]}]}, @NL80211_BAND_2GHZ={0x18, 0x0, 0x0, 0x1, [@NL80211_TXRATE_HE={0x14, 0x5, {[0x7, 0x9, 0x7ff, 0xfffc, 0xbfe, 0x4, 0x2, 0x7]}}]}, @NL80211_BAND_6GHZ={0x1c, 0x3, 0x0, 0x1, [@NL80211_TXRATE_GI={0x5, 0x4, 0x2}, @NL80211_TXRATE_HE_LTF={0x5}, @NL80211_TXRATE_GI={0x5, 0x4, 0x1}]}]}, @NL80211_ATTR_TX_RATES={0x2dc, 0x5a, 0x0, 0x1, [@NL80211_BAND_5GHZ={0x90, 0x1, 0x0, 0x1, [@NL80211_TXRATE_HT={0x8, 0x2, [{0x5, 0x1}, {}, {0x7, 0x2}, {0x4, 0xa}]}, @NL80211_TXRATE_HE_LTF={0x5, 0x7, 0x2}, @NL80211_TXRATE_HT={0xc, 0x2, [{0x1, 0x8}, {0x5, 0x4}, {0x2, 0x9}, {0x7, 0xa}, {0x6, 0x5}, {0x1, 0x7}, {0x6, 0x1}, {0x2, 0xa}]}, @NL80211_TXRATE_HE={0x14, 0x5, {[0x3, 0x1c1, 0x0, 0xfffc, 0x0, 0x6, 0x2, 0xf6ab]}}, @NL80211_TXRATE_HT={0x4b, 0x2, [{0x1, 0x6}, {0x1, 0x8}, {0x1, 0x1}, {0x0, 0x9}, {0x7, 0x2}, {0x6, 0x4}, {0x4, 0x8}, {0x0, 0x5}, {0x3, 0xa}, {0x6, 0x4}, {0x4, 0x6}, {0x5, 0x9}, {0x7, 0x1}, {0x6, 0x6}, {0x5, 0x6}, {0x3, 0x1}, {0x7, 0x4}, {}, {0x2, 0x1}, {0x6, 0x4}, {0x2, 0x5}, {0x7, 0x5}, {0x1, 0xe}, {0x2, 0x1}, {0x4, 0x8}, {0x0, 0x3}, {0x6, 0x7}, {0x3, 0x7}, {0x1, 0x1}, {0x3, 0x1}, {0x0, 0x4}, {0x2, 0x2}, {0x7}, {0x5, 0x7}, {0x0, 0x9}, {0x5, 0x8}, {0x1, 0xa}, {0x0, 0x4}, {0x3, 0x8}, {0x3, 0xa}, {0x7, 0x7}, {0x1, 0x4}, {0x3, 0xa}, {0x1, 0x7}, {0x7, 0x6}, {0x2, 0x6}, {0x1, 0x8}, {0x4, 0x4}, {0x5, 0xa}, {0x0, 0x4}, {0x0, 0x1}, {0x5}, {0x3, 0x5}, {0x6, 0x7}, {0x6, 0x1}, {0x6, 0x5}, {0x3, 0x5}, {0x1}, {0x3, 0x9}, {0x5, 0x8}, {0x1, 0x8}, {0x6}, {0x4, 0x3}, {0x5, 0x9}, {0x3, 0x6}, {0x7, 0x1}, {0x3, 0x4}, {0x2, 0x8}, {0x6, 0x9}, {0x0, 0x9}, {0x0, 0x9}]}, @NL80211_TXRATE_GI={0x5, 0x4, 0x2}, @NL80211_TXRATE_HE_GI={0x5, 0x6, 0x1}]}, @NL80211_BAND_60GHZ={0x80, 0x2, 0x0, 0x1, [@NL80211_TXRATE_HE_LTF={0x5}, @NL80211_TXRATE_HT={0x36, 0x2, [{0x6, 0x6}, {0x7, 0x8}, {0x7, 0x3}, {0x7, 0xa}, {0x4, 0x6}, {}, {0x0, 0x3}, {0x7, 0x4}, {0x0, 0x9}, {}, {0x4, 0x5}, {0x4, 0x8}, {0x5}, {0x5, 0x5}, {0x4, 0x9}, {0x0, 0x1}, {0x6, 0x6}, {0x3, 0x1}, {0x1}, {0x7, 0x8}, {0x5, 0x2}, {0x5, 0x2}, {0x5, 0x3}, {0x3, 0x9}, {0x4, 0x1}, {0x0, 0x9}, {0x3, 0x7}, {0x3}, {0x5, 0x5}, {0x7, 0x9}, {0x2, 0x5}, {0x2, 0x9}, {0x3, 0x5}, {0x4, 0xa}, {0x2, 0x7}, {0x4, 0x3}, {0x0, 0x3}, {0x1, 0x7}, {0x1, 0x1}, {0x0, 0x9}, {0x1, 0x1}, {0x7, 0x4}, {0x4, 0x8}, {0x4, 0x7}, {0x1, 0x8}, {0x0, 0xa}, {0x0, 0x9}, {0x2, 0xa}, {0x0, 0x7}, {0x2, 0x3}]}, @NL80211_TXRATE_LEGACY={0x4}, @NL80211_TXRATE_VHT={0x14, 0x3, {[0x4a, 0x2, 0x0, 0x100, 0x800, 0x5, 0xfff9, 0x2]}}, @NL80211_TXRATE_HE_GI={0x5}, @NL80211_TXRATE_HT={0x14, 0x2, [{0x3, 0x3}, {0x6, 0x5}, {0x5, 0x5}, {0x7, 0x7}, {0x7, 0x3}, {0x1, 0x9}, {0x7, 0x2}, {0x6, 0x4}, {0x6, 0x6}, {0x0, 0x2}, {0x3, 0x9}, {0x7, 0x6}, {0x2, 0x3}, {0x6, 0x2}, {0x0, 0x7}, {0x7}]}, @NL80211_TXRATE_GI={0x5, 0x4, 0x2}]}, @NL80211_BAND_5GHZ={0x34, 0x1, 0x0, 0x1, [@NL80211_TXRATE_VHT={0x14, 0x3, {[0x7a, 0x2, 0x2, 0xc3f, 0x4, 0x3a, 0x3, 0x6]}}, @NL80211_TXRATE_VHT={0x14, 0x3, {[0x4, 0x600, 0xb6b, 0xa, 0x3, 0x7, 0x9, 0xe30]}}, @NL80211_TXRATE_HE_LTF={0x5, 0x7, 0x1}]}, @NL80211_BAND_6GHZ={0x78, 0x3, 0x0, 0x1, [@NL80211_TXRATE_HE_GI={0x5, 0x6, 0x1}, @NL80211_TXRATE_HE_LTF={0x5, 0x7, 0x5}, @NL80211_TXRATE_GI={0x5, 0x4, 0x1}, @NL80211_TXRATE_LEGACY={0x15, 0x1, [0x18, 0x36, 0x2, 0x4, 0x30, 0x18, 0x6c, 0x12, 0x24, 0x6c, 0xb, 0xc, 0x16, 0x5, 0x24, 0x30, 0x12]}, @NL80211_TXRATE_HE_GI={0x5}, @NL80211_TXRATE_GI={0x5}, @NL80211_TXRATE_LEGACY={0x15, 0x1, [0x48, 0x4, 0x36, 0xb, 0x48, 0x30, 0x60, 0x1, 0x24, 0x5, 0x5, 0x1, 0x0, 0x6c, 0x18, 0x18, 0x1b]}, @NL80211_TXRATE_GI={0x5, 0x4, 0x1}, @NL80211_TXRATE_HE={0x14, 0x5, {[0x5, 0x8, 0x1ff, 0x6, 0x1, 0x10, 0x7f, 0x5]}}]}, @NL80211_BAND_5GHZ={0x9c, 0x1, 0x0, 0x1, [@NL80211_TXRATE_HT={0x4c, 0x2, [{0x1, 0xa}, {0x1, 0xa}, {0x6, 0x8}, {0x4, 0x7}, {0x7, 0x9}, {0x4, 0x8}, {0x5}, {0x6, 0x7}, {0x2, 0x7}, {0x3, 0x8}, {0x4, 0x4}, {0x0, 0x8}, {0x4, 0x9}, {0x1, 0x5}, {0x4, 0x1}, {0x0, 0x9}, {0x2, 0xa}, {0x3, 0xa}, {0x0, 0x2}, {0x7, 0x1}, {0x7, 0x2}, {0x1, 0x2}, {0x0, 0x4}, {0x5, 0x4}, {0x5, 0x8}, {0x4, 0x4}, {0x4, 0x4}, {0x0, 0x1}, {0x3, 0x3}, {0x7, 0x5}, {0x1, 0x7}, {0x0, 0x8}, {0x5, 0x4}, {0x5, 0x1}, {0x6, 0x1}, {0x5, 0xa}, {0x4}, {0x3, 0xa}, {0x6, 0x3}, {0x7, 0xa}, {0x5, 0x5}, {0x1, 0x4}, {0x2, 0xa}, {0x3, 0x5}, {0x5, 0x7}, {0x5, 0x2}, {0x4, 0x5}, {0x2, 0x8}, {0x6, 0x2}, {0x6, 0x7}, {0x5, 0x4}, {0x1}, {0x6, 0x2}, {0x2, 0x3}, {0x1}, {0x2}, {0x5, 0x7}, {0x1}, {0x4, 0x2}, {0x2, 0x9}, {0x0, 0x6}, {0x3, 0x7}, {0x1, 0x3}, {0x6, 0x4}, {0x1, 0x5}, {0x0, 0x8}, {0x3, 0xa}, {0x3, 0xa}, {0x3}, {0x1, 0x4}, {0x5, 0x7}, {0x1, 0x6}]}, @NL80211_TXRATE_LEGACY={0x7, 0x1, [0x30, 0x24, 0x60]}, @NL80211_TXRATE_HE={0x14, 0x5, {[0x3, 0x0, 0xd, 0x9, 0x0, 0x0, 0x5, 0x8]}}, @NL80211_TXRATE_HE={0x14, 0x5, {[0x2, 0x1, 0x7, 0x2, 0x80, 0x8e, 0xfff9, 0x6]}}, @NL80211_TXRATE_HT={0x1b, 0x2, [{0x5, 0x9}, {0x1, 0x9}, {0x5, 0x8}, {0x6}, {0x7, 0x8}, {0x4, 0x6}, {0x0, 0x6}, {0x5, 0x3}, {0x2, 0x8}, {0x0, 0x6}, {0x3, 0x6}, {0x0, 0xa}, {0x0, 0x5}, {0x2, 0x1}, {0x4, 0x4}, {0x7, 0x2}, {0x3, 0x1}, {0x7, 0x5}, {0x3, 0x6}, {0x2, 0x2}, {0x6}, {0x1}, {0x6, 0x7}]}]}, @NL80211_BAND_60GHZ={0x68, 0x2, 0x0, 0x1, [@NL80211_TXRATE_HE_LTF={0x5}, @NL80211_TXRATE_HE_GI={0x5, 0x6, 0x1}, @NL80211_TXRATE_LEGACY={0x1d, 0x1, [0x18, 0x1, 0x2, 0x2, 0x2, 0x48, 0x24, 0x2, 0x4, 0x24, 0x5, 0xc, 0x0, 0x1, 0xc, 0x2, 0x60, 0x24, 0x6, 0x24, 0x4, 0x18, 0x12, 0xc, 0x9]}, @NL80211_TXRATE_GI={0x5, 0x4, 0x1}, @NL80211_TXRATE_HE_LTF={0x5, 0x7, 0x2}, @NL80211_TXRATE_LEGACY={0x22, 0x1, [0x16, 0x60, 0x9, 0x18, 0x6, 0x16, 0xb, 0x24, 0x6, 0x18, 0x6c, 0xb, 0x1b, 0x60, 0x5, 0x36, 0x36, 0x60, 0x6d, 0x1, 0x2, 0x9, 0x30, 0xb, 0xb, 0x6, 0x1, 0x18, 0x48, 0x12]}]}, @NL80211_BAND_5GHZ={0x18, 0x1, 0x0, 0x1, [@NL80211_TXRATE_LEGACY={0x4}, @NL80211_TXRATE_GI={0x5, 0x4, 0x2}, @NL80211_TXRATE_HE_GI={0x5, 0x6, 0x2}]}]}, @NL80211_ATTR_TX_RATES={0x108, 0x5a, 0x0, 0x1, [@NL80211_BAND_60GHZ={0x14, 0x2, 0x0, 0x1, [@NL80211_TXRATE_GI={0x5}, @NL80211_TXRATE_HE_LTF={0x5, 0x7, 0x1}]}, @NL80211_BAND_6GHZ={0xc, 0x3, 0x0, 0x1, [@NL80211_TXRATE_HE_GI={0x5}]}, @NL80211_BAND_6GHZ={0x2c, 0x3, 0x0, 0x1, [@NL80211_TXRATE_HE_LTF={0x5}, @NL80211_TXRATE_LEGACY={0x20, 0x1, [0x48, 0x16, 0x4, 0x60, 0x839a3583080e985e, 0x36, 0xb, 0x36, 0x1, 0x6c, 0x60, 0x9, 0x6c, 0x3, 0x12, 0x4, 0x18, 0x1, 0x9, 0x6e, 0x9, 0x1b, 0x36, 0xc, 0xc, 0x30, 0x7f, 0x6]}]}, @NL80211_BAND_2GHZ={0x14, 0x0, 0x0, 0x1, [@NL80211_TXRATE_HE_GI={0x5, 0x6, 0x2}, @NL80211_TXRATE_GI={0x5}]}, @NL80211_BAND_5GHZ={0x58, 0x1, 0x0, 0x1, [@NL80211_TXRATE_GI={0x5, 0x4, 0x1}, @NL80211_TXRATE_HE_LTF={0x5}, @NL80211_TXRATE_HE_LTF={0x5, 0x7, 0x5}, @NL80211_TXRATE_HE={0x14, 0x5, {[0x4, 0x0, 0x5, 0x1, 0xc51, 0x4, 0x8, 0xa5]}}, @NL80211_TXRATE_VHT={0x14, 0x3, {[0xfae0, 0x8, 0x7, 0x7, 0x9f1c, 0x1, 0xe3, 0x3]}}, @NL80211_TXRATE_HE_LTF={0x5, 0x7, 0x2}, @NL80211_TXRATE_LEGACY={0xb, 0x1, [0x12, 0x13, 0x2, 0x12, 0x1b, 0x60, 0x12]}]}, @NL80211_BAND_6GHZ={0x4c, 0x3, 0x0, 0x1, [@NL80211_TXRATE_HE_LTF={0x5, 0x7, 0x2}, @NL80211_TXRATE_HT={0x20, 0x2, [{0x0, 0x2}, {0x5, 0x2}, {}, {0x7, 0xa}, {0x4, 0x14}, {0x5, 0x7}, {0x2}, {0x3, 0x1}, {0x7, 0x5}, {0x2, 0x9}, {0x2, 0x6}, {0x2, 0x5}, {0x5, 0xa}, {0x2, 0x7}, {0x3, 0x8}, {0x1}, {0x7, 0x7}, {0x6, 0xa}, {0x4, 0xa}, {0x1, 0x9}, {0x1, 0x7}, {0x3, 0x1}, {0x1, 0x4}, {0x1, 0x2}, {0x2, 0x8}, {0x3, 0xa}, {0x1, 0x8}, {0x1, 0xa}]}, @NL80211_TXRATE_LEGACY={0xe, 0x1, [0x1, 0x16, 0x3, 0x12, 0x16, 0x16, 0x5e, 0x6, 0x30, 0x36]}, @NL80211_TXRATE_LEGACY={0x6, 0x1, [0x18, 0x4]}, @NL80211_TXRATE_GI={0x5, 0x4, 0x2}]}]}]}, 0x9d0}}, 0x8881) syz_emit_ethernet(0x56, &(0x7f0000000200)=ANY=[@ANYBLOB="aaaaaaaaaaaaffffffffffff86dd604dd31800200600fc010000000000000000000000000000fe8000000000000000000000000000aa00004001", @ANYRES32=0x41424344, @ANYRES32=0x41424344, @ANYBLOB="800200000978087701d7346941b8564d0a616a00"], 0x0) 6m41.314965839s ago: executing program 4 (id=12573): r0 = socket$inet6(0xa, 0x2, 0x0) r1 = socket$inet_udp(0x2, 0x2, 0x0) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x0, 0x8031, 0xffffffffffffffff, 0x0) setsockopt$inet_IP_XFRM_POLICY(r1, 0x0, 0x11, &(0x7f00000002c0)={{{@in6=@dev, @in6=@mcast2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xee01}}, {{@in6=@dev}, 0x0, @in=@private}}, 0xe8) bind$inet6(r0, &(0x7f0000f5dfe4)={0xa, 0x4e20, 0x4, @empty}, 0x1c) syz_emit_ethernet(0xbe, &(0x7f0000000000)={@dev={'\xaa\xaa\xaa\xaa\xaa', 0x23}, @link_local, @void, {@ipv4={0x800, @udp={{0x5, 0x4, 0x0, 0x0, 0xb0, 0x0, 0x0, 0x0, 0x11, 0x0, @empty, @broadcast}, {0x0, 0x4e20, 0x9c, 0x0, @wg=@initiation={0x1, 0x0, "7b4b143b7461fd777b1c012bd14efb9f49fcdb8f080c26a04883ad5c8c82b8af", "584cbf2649a50f2dbc43efa8698d0a881c51852e4451b57d037ad3c045942824251d7d17b5191584bcd4fbe40a23424d", "bcfd56f1375461caaa2f19935e6996c7096ffeeb0300000000000064", {"9a3bfbc1f39cb307b3472eb9cdb042d2", "643fcbb2c5a57df67d544af6e8dafe09"}}}}}}}, 0x0) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000140)={0x6, 0x3, &(0x7f0000000680)=ANY=[@ANYBLOB="1800000002000000000000000000000095"], 0x0, 0x3}, 0x94) r2 = bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000480)={0x6, 0x3, &(0x7f0000000680)=ANY=[], &(0x7f00000002c0)='syzkaller\x00', 0x7, 0x0, 0x0, 0x41100, 0x0, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x1}, 0x94) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000600)={r2, 0x5, 0xb68, 0x0, &(0x7f0000000000)='%', 0x0, 0xd01, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2}, 0x48) read(r0, &(0x7f0000000300)=""/212, 0xd4) 6m40.313345897s ago: executing program 4 (id=12589): r0 = socket$netlink(0x10, 0x3, 0x0) r1 = socket(0x10, 0x803, 0x0) sendmsg$IPVS_CMD_SET_INFO(r1, &(0x7f0000000b00)={0x0, 0x0, &(0x7f0000000ac0)={0x0, 0x14}}, 0x0) r2 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_int(r2, 0x29, 0x1a, &(0x7f0000000100)=0x401, 0x4) bind$inet6(r2, &(0x7f0000000140)={0xa, 0x4e22, 0xfffffffe, @empty, 0x5e}, 0x1c) r3 = socket$inet6_tcp(0xa, 0x1, 0x0) r4 = socket$inet6_tcp(0xa, 0x1, 0x0) listen(r4, 0x3) bind$inet6(r3, &(0x7f0000000080)={0xa, 0x14e22, 0xfffffff8, @ipv4}, 0x1c) r5 = socket$inet6_tcp(0xa, 0x1, 0x0) listen(r5, 0x0) r6 = socket$inet6_mptcp(0xa, 0x1, 0x106) listen(r6, 0xa7ba) r7 = socket$inet6_tcp(0xa, 0x1, 0x0) listen(r7, 0x0) r8 = socket$inet6_tcp(0xa, 0x1, 0x0) listen(r8, 0x0) r9 = socket$inet6_tcp(0xa, 0x1, 0x0) listen(r9, 0x0) r10 = socket$netlink(0x10, 0x3, 0x8000000004) writev(r10, &(0x7f00000000c0)=[{&(0x7f0000000200)="580000001400192340834b80040d8c560a0677bc45ff810500000000000058000b480400945f64009400050028925a01000000000000008000f0fffeffe809000000fff5dd0000001000010002081000418e00000004fcff", 0x58}], 0x1) getsockname$packet(r1, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) r12 = bpf$MAP_CREATE(0x0, &(0x7f0000000200)=@base={0x9, 0x5, 0x2, 0x7, 0x0, 0x1, 0x10002}, 0x50) bpf$MAP_UPDATE_BATCH(0x1a, &(0x7f0000000780)={0x0, 0x0, &(0x7f0000000040), &(0x7f00000008c0), 0xffffffff, r12}, 0x38) r13 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000180)=ANY=[@ANYBLOB="1800000003000000000000000040000018110000", @ANYRES32=r12, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200001500000007020000f8ffffffb703000008000000b704006f00000076ea10008500168bfaf90000030000009500000000000000"], &(0x7f0000000400)='GPL\x00', 0x2, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, @fallback=0xb, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x6a}, 0x94) bpf$PROG_BIND_MAP(0xa, &(0x7f00000003c0)={r13, r12}, 0xc) sendmsg$nl_route(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000380)=ANY=[@ANYBLOB="3c0000001000850600"/20, @ANYRES32=r11, @ANYBLOB="01000000000000001c0012000c000100626f6e64000000000c0002000800010005"], 0x3c}}, 0x0) socket$nl_route(0x10, 0x3, 0x0) socket(0x2b, 0x5, 0x0) 6m25.127813619s ago: executing program 32 (id=12589): r0 = socket$netlink(0x10, 0x3, 0x0) r1 = socket(0x10, 0x803, 0x0) sendmsg$IPVS_CMD_SET_INFO(r1, &(0x7f0000000b00)={0x0, 0x0, &(0x7f0000000ac0)={0x0, 0x14}}, 0x0) r2 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_int(r2, 0x29, 0x1a, &(0x7f0000000100)=0x401, 0x4) bind$inet6(r2, &(0x7f0000000140)={0xa, 0x4e22, 0xfffffffe, @empty, 0x5e}, 0x1c) r3 = socket$inet6_tcp(0xa, 0x1, 0x0) r4 = socket$inet6_tcp(0xa, 0x1, 0x0) listen(r4, 0x3) bind$inet6(r3, &(0x7f0000000080)={0xa, 0x14e22, 0xfffffff8, @ipv4}, 0x1c) r5 = socket$inet6_tcp(0xa, 0x1, 0x0) listen(r5, 0x0) r6 = socket$inet6_mptcp(0xa, 0x1, 0x106) listen(r6, 0xa7ba) r7 = socket$inet6_tcp(0xa, 0x1, 0x0) listen(r7, 0x0) r8 = socket$inet6_tcp(0xa, 0x1, 0x0) listen(r8, 0x0) r9 = socket$inet6_tcp(0xa, 0x1, 0x0) listen(r9, 0x0) r10 = socket$netlink(0x10, 0x3, 0x8000000004) writev(r10, &(0x7f00000000c0)=[{&(0x7f0000000200)="580000001400192340834b80040d8c560a0677bc45ff810500000000000058000b480400945f64009400050028925a01000000000000008000f0fffeffe809000000fff5dd0000001000010002081000418e00000004fcff", 0x58}], 0x1) getsockname$packet(r1, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) r12 = bpf$MAP_CREATE(0x0, &(0x7f0000000200)=@base={0x9, 0x5, 0x2, 0x7, 0x0, 0x1, 0x10002}, 0x50) bpf$MAP_UPDATE_BATCH(0x1a, &(0x7f0000000780)={0x0, 0x0, &(0x7f0000000040), &(0x7f00000008c0), 0xffffffff, r12}, 0x38) r13 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000180)=ANY=[@ANYBLOB="1800000003000000000000000040000018110000", @ANYRES32=r12, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200001500000007020000f8ffffffb703000008000000b704006f00000076ea10008500168bfaf90000030000009500000000000000"], &(0x7f0000000400)='GPL\x00', 0x2, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, @fallback=0xb, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x6a}, 0x94) bpf$PROG_BIND_MAP(0xa, &(0x7f00000003c0)={r13, r12}, 0xc) sendmsg$nl_route(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000380)=ANY=[@ANYBLOB="3c0000001000850600"/20, @ANYRES32=r11, @ANYBLOB="01000000000000001c0012000c000100626f6e64000000000c0002000800010005"], 0x3c}}, 0x0) socket$nl_route(0x10, 0x3, 0x0) socket(0x2b, 0x5, 0x0) 3m15.67942213s ago: executing program 3 (id=14848): ioctl$PPPIOCSPASS(0xffffffffffffffff, 0x40107447, &(0x7f0000000040)={0x2, &(0x7f0000000000)=[{0x3, 0x7, 0x0, 0x4}, {0x9, 0xf8, 0x0, 0xd507}]}) r0 = accept(0xffffffffffffffff, &(0x7f0000000080)=@in={0x2, 0x0, @initdev}, &(0x7f0000000100)=0x80) write(r0, &(0x7f0000000140)="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", 0xfc) ioctl$XFS_IOC_START_COMMIT(r0, 0x80585882, &(0x7f0000000240)={0xffffffffffffffff}) ioctl$ifreq_SIOCGIFINDEX_batadv_hard(r0, 0x8933, &(0x7f0000000380)={'batadv_slave_0\x00', 0x0}) r3 = bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000500)={&(0x7f00000003c0)={{0xeb9f, 0x1, 0x0, 0x18, 0x0, 0xa9, 0xa9, 0x8, [@type_tag={0x5, 0x0, 0x0, 0x12, 0x4}, @func_proto={0x0, 0x2, 0x0, 0xd, 0x0, [{0x10, 0x1}, {0x5}]}, @const={0xa, 0x0, 0x0, 0xa, 0x1}, @float={0x4, 0x0, 0x0, 0x10, 0x1a}, @func_proto={0x0, 0x5, 0x0, 0xd, 0x0, [{0xe, 0x2}, {0x9}, {0x7}, {0x9, 0x4}, {0x4, 0x2}]}, @decl_tag={0xd, 0x0, 0x0, 0x11, 0x5, 0xffffffffffffffff}, @datasec={0x1, 0x2, 0x0, 0xf, 0x1, [{0x3, 0x8, 0x40}, {0x1, 0x5, 0xc}], '.'}]}, {0x0, [0x61, 0x2e, 0x5f, 0x0, 0x61, 0x30]}}, &(0x7f00000004c0)=""/44, 0xcc, 0x2c, 0x0, 0x3, 0x10000}, 0x28) bpf$PROG_LOAD(0x5, &(0x7f0000000540)={0x1f, 0x9, &(0x7f00000002c0)=@raw=[@map_fd={0x18, 0x2, 0x1, 0x0, r1}, @generic={0x6, 0x6, 0x9, 0x0, 0x7}, @jmp={0x5, 0x0, 0x0, 0x4, 0x3, 0xffffffffffffffff, 0xfffffffffffffffc}, @initr0={0x18, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x660}, @initr0={0x18, 0x0, 0x0, 0x0, 0xffffffff, 0x0, 0x0, 0x0, 0x439}, @generic={0x2, 0x1, 0x9, 0x800, 0x3}], &(0x7f0000000340)='GPL\x00', 0x1, 0x0, 0x0, 0x41000, 0x2, '\x00', r2, @fallback=0xd, r3, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x10, 0x4}, 0x94) (async) r4 = bpf$PROG_LOAD(0x5, &(0x7f0000000540)={0x1f, 0x9, &(0x7f00000002c0)=@raw=[@map_fd={0x18, 0x2, 0x1, 0x0, r1}, @generic={0x6, 0x6, 0x9, 0x0, 0x7}, @jmp={0x5, 0x0, 0x0, 0x4, 0x3, 0xffffffffffffffff, 0xfffffffffffffffc}, @initr0={0x18, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x660}, @initr0={0x18, 0x0, 0x0, 0x0, 0xffffffff, 0x0, 0x0, 0x0, 0x439}, @generic={0x2, 0x1, 0x9, 0x800, 0x3}], &(0x7f0000000340)='GPL\x00', 0x1, 0x0, 0x0, 0x41000, 0x2, '\x00', r2, @fallback=0xd, r3, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x10, 0x4}, 0x94) ppoll(&(0x7f0000000600)=[{r0, 0x2104}, {r4, 0x4c}, {r0, 0x40d0}], 0x3, &(0x7f0000000640)={0x77359400}, &(0x7f0000000680)={[0x10001]}, 0x8) setsockopt$sock_void(r0, 0x1, 0x1b, 0x0, 0x0) syz_genetlink_get_family_id$ipvs(&(0x7f0000000700), r1) (async) r5 = syz_genetlink_get_family_id$ipvs(&(0x7f0000000700), r1) sendmsg$IPVS_CMD_DEL_DAEMON(r1, &(0x7f0000000840)={&(0x7f00000006c0), 0xc, &(0x7f0000000800)={&(0x7f0000000740)={0xac, r5, 0x8, 0x70bd2b, 0x25dfdbfb, {}, [@IPVS_CMD_ATTR_DAEMON={0x30, 0x3, 0x0, 0x1, [@IPVS_DAEMON_ATTR_MCAST_GROUP={0x8, 0x5, @initdev={0xac, 0x1e, 0x0, 0x0}}, @IPVS_DAEMON_ATTR_MCAST_GROUP6={0x14, 0x6, @private1={0xfc, 0x1, '\x00', 0x1}}, @IPVS_DAEMON_ATTR_SYNC_ID={0x8, 0x3, 0x4}, @IPVS_DAEMON_ATTR_STATE={0x8, 0x1, 0x2}]}, @IPVS_CMD_ATTR_SERVICE={0x58, 0x1, 0x0, 0x1, [@IPVS_SVC_ATTR_TIMEOUT={0x8}, @IPVS_SVC_ATTR_TIMEOUT={0x8, 0x8, 0x4}, @IPVS_SVC_ATTR_FWMARK={0x8, 0x5, 0x1}, @IPVS_SVC_ATTR_FLAGS={0xc, 0x7, {0x20, 0x8}}, @IPVS_SVC_ATTR_NETMASK={0x8, 0x9, 0x1c}, @IPVS_SVC_ATTR_SCHED_NAME={0x8, 0x6, 'ovf\x00'}, @IPVS_SVC_ATTR_PORT={0x6, 0x4, 0x4e22}, @IPVS_SVC_ATTR_NETMASK={0x8, 0x9, 0x72}, @IPVS_SVC_ATTR_FWMARK={0x8, 0x5, 0x4}, @IPVS_SVC_ATTR_NETMASK={0x8, 0x9, 0x46}]}, @IPVS_CMD_ATTR_TIMEOUT_UDP={0x8, 0x6, 0x4e7}, @IPVS_CMD_ATTR_TIMEOUT_TCP={0x8, 0x4, 0x1}]}, 0xac}, 0x1, 0x0, 0x0, 0x24004081}, 0x0) ioctl$sock_SIOCETHTOOL(r1, 0x8946, &(0x7f00000008c0)={'syz_tun\x00', &(0x7f0000000880)=@ethtool_stats={0x1d, 0x4, [0x9, 0xe0e, 0x3, 0x8]}}) ioctl$F2FS_IOC_DECOMPRESS_FILE(r3, 0xf517, 0x0) sendmsg$nl_route(r1, &(0x7f00000009c0)={&(0x7f0000000900)={0x10, 0x0, 0x0, 0x100000}, 0xc, &(0x7f0000000980)={&(0x7f0000000940)=@ipv4_newroute={0x34, 0x18, 0x200, 0x70bd27, 0x25dfdbfb, {0x2, 0x0, 0x0, 0xb, 0xff, 0x3, 0x0, 0xa, 0x200}, [@RTA_DST={0x8, 0x1, @multicast1}, @RTA_OIF={0x8, 0x4, r2}, @RTA_OIF={0x8, 0x4, r2}]}, 0x34}, 0x1, 0x0, 0x0, 0x8000}, 0x8080) ioctl$sock_kcm_SIOCKCMCLONE(r0, 0x89e2, &(0x7f0000000a00)={r1}) ioctl$sock_inet_SIOCSIFADDR(r6, 0x8916, &(0x7f0000000a40)={'bond_slave_0\x00', {0x2, 0x4e24, @local}}) sendmsg$nl_route_sched(r0, &(0x7f0000000c00)={&(0x7f0000000a80)={0x10, 0x0, 0x0, 0x2000400}, 0xc, &(0x7f0000000bc0)={&(0x7f0000000ac0)=@newqdisc={0xf8, 0x24, 0x800, 0x70bd26, 0x25dfdbfe, {0x0, 0x0, 0x0, 0x0, {0xf, 0xfff3}, {0xd}, {0xe, 0xd}}, [@qdisc_kind_options=@q_bfifo={{0xa}, {0x8, 0x2, 0xf380000}}, @TCA_INGRESS_BLOCK={0x8, 0xd, 0x5}, @qdisc_kind_options=@q_fq_pie={{0xb}, {0x54, 0x2, [@TCA_FQ_PIE_LIMIT={0x8, 0x1, 0x7}, @TCA_FQ_PIE_QUANTUM={0x8, 0x7, 0x6}, @TCA_FQ_PIE_TARGET={0x8, 0x3, 0x8001}, @TCA_FQ_PIE_BYTEMODE={0x8, 0xb, 0x1}, @TCA_FQ_PIE_DQ_RATE_ESTIMATOR={0x8, 0xc, 0x1}, @TCA_FQ_PIE_ECN_PROB={0x8, 0x9, 0x8}, @TCA_FQ_PIE_FLOWS={0x8, 0x2, 0x2796}, @TCA_FQ_PIE_ECN_PROB={0x8, 0x9, 0x2}, @TCA_FQ_PIE_FLOWS={0x8, 0x2, 0x2a5}, @TCA_FQ_PIE_BETA={0x8, 0x6, 0x10}]}}, @qdisc_kind_options=@q_fq_pie={{0xb}, {0x2c, 0x2, [@TCA_FQ_PIE_FLOWS={0x8, 0x2, 0xe8f7}, @TCA_FQ_PIE_ALPHA={0x8, 0x5, 0x18}, @TCA_FQ_PIE_FLOWS={0x8, 0x2, 0xb348}, @TCA_FQ_PIE_ECN={0x8, 0xa, 0x1}, @TCA_FQ_PIE_ECN={0x8, 0xa, 0x1}]}}, @TCA_INGRESS_BLOCK={0x8, 0xd, 0x7}, @TCA_EGRESS_BLOCK={0x8, 0xe, 0x8}, @qdisc_kind_options=@q_atm={0x8}, @TCA_RATE={0x6, 0x5, {0x9, 0xe}}]}, 0xf8}, 0x1, 0x0, 0x0, 0x40080}, 0x10) (async) sendmsg$nl_route_sched(r0, &(0x7f0000000c00)={&(0x7f0000000a80)={0x10, 0x0, 0x0, 0x2000400}, 0xc, &(0x7f0000000bc0)={&(0x7f0000000ac0)=@newqdisc={0xf8, 0x24, 0x800, 0x70bd26, 0x25dfdbfe, {0x0, 0x0, 0x0, 0x0, {0xf, 0xfff3}, {0xd}, {0xe, 0xd}}, [@qdisc_kind_options=@q_bfifo={{0xa}, {0x8, 0x2, 0xf380000}}, @TCA_INGRESS_BLOCK={0x8, 0xd, 0x5}, @qdisc_kind_options=@q_fq_pie={{0xb}, {0x54, 0x2, [@TCA_FQ_PIE_LIMIT={0x8, 0x1, 0x7}, @TCA_FQ_PIE_QUANTUM={0x8, 0x7, 0x6}, @TCA_FQ_PIE_TARGET={0x8, 0x3, 0x8001}, @TCA_FQ_PIE_BYTEMODE={0x8, 0xb, 0x1}, @TCA_FQ_PIE_DQ_RATE_ESTIMATOR={0x8, 0xc, 0x1}, @TCA_FQ_PIE_ECN_PROB={0x8, 0x9, 0x8}, @TCA_FQ_PIE_FLOWS={0x8, 0x2, 0x2796}, @TCA_FQ_PIE_ECN_PROB={0x8, 0x9, 0x2}, @TCA_FQ_PIE_FLOWS={0x8, 0x2, 0x2a5}, @TCA_FQ_PIE_BETA={0x8, 0x6, 0x10}]}}, @qdisc_kind_options=@q_fq_pie={{0xb}, {0x2c, 0x2, [@TCA_FQ_PIE_FLOWS={0x8, 0x2, 0xe8f7}, @TCA_FQ_PIE_ALPHA={0x8, 0x5, 0x18}, @TCA_FQ_PIE_FLOWS={0x8, 0x2, 0xb348}, @TCA_FQ_PIE_ECN={0x8, 0xa, 0x1}, @TCA_FQ_PIE_ECN={0x8, 0xa, 0x1}]}}, @TCA_INGRESS_BLOCK={0x8, 0xd, 0x7}, @TCA_EGRESS_BLOCK={0x8, 0xe, 0x8}, @qdisc_kind_options=@q_atm={0x8}, @TCA_RATE={0x6, 0x5, {0x9, 0xe}}]}, 0xf8}, 0x1, 0x0, 0x0, 0x40080}, 0x10) getsockopt$inet_sctp6_SCTP_PRIMARY_ADDR(r0, 0x84, 0x6, &(0x7f0000000c40)={0x0, @in={{0x2, 0x4e20, @remote}}}, &(0x7f0000000d00)=0x84) getsockopt$inet_sctp6_SCTP_GET_PEER_ADDRS(r1, 0x84, 0x6c, &(0x7f0000000d40)={r7, 0x7b, "6effe7957dd049131936ae22100a0668c0e0a97faae131e8a5206ab716fbf58ee72675ed2fe61c03e3a79a1252e1a74a3dc2c4578fd80a75148344cc6985081cab0f6963ce0c5b9079518fabb48320cf47041666016f072dc9c50a48fea27cafb13f7966b4c1054ab98d790dd8148fdbaaea5184b731d320ce2f25"}, &(0x7f0000000e00)=0x83) setsockopt$inet_sctp_SCTP_DEFAULT_SEND_PARAM(r6, 0x84, 0xa, &(0x7f0000000e40)={0x6, 0xfe, 0x8001, 0x8, 0x9, 0xff, 0x2, 0x6, r8}, 0x20) socket$nl_route(0x10, 0x3, 0x0) socket(0x1, 0xa, 0xffffff80) (async) socket(0x1, 0xa, 0xffffff80) read(r4, &(0x7f0000000e80)=""/194, 0xc2) sendmsg$OSF_MSG_ADD(r0, &(0x7f00000014c0)={&(0x7f0000000f80)={0x10, 0x0, 0x0, 0x2000000}, 0xc, &(0x7f0000001480)={&(0x7f0000000fc0)={0x4bc, 0x0, 0x5, 0x5, 0x0, 0x0, {}, [{{0x254, 0x1, {{0x1, 0x6cf271c3}, 0x0, 0x0, 0x18d, 0x0, 0x1b, 'syz0\x00', "7c3900292fd0a732b6e43a6404bb640939669fbf0ab1b0118e2d40adb00b3595", "d9aa9935690761fdc65657f7d2757227218deeae6043570a7e7dbbea7f33882f", [{0x8, 0xc, {0x2, 0x9}}, {0x6, 0xd, {0x1, 0x2}}, {0x800, 0xfffc, {0x1, 0xfffff000}}, {0x1, 0x1000, {0x3, 0x4}}, {0x6, 0x7f, {0x0, 0x4}}, {0x2, 0x0, {0x549cf3233901f7cb, 0x2b46}}, {0x1ff, 0x1, {0x3, 0x5c3e}}, {0x15, 0x7, {0x1, 0x1}}, {0xdb, 0xf7e, {0x1, 0x5b7}}, {0x1, 0x8, {0x0, 0xfffffff7}}, {0x45, 0x1, {0x0, 0x1000}}, {0x3ff, 0x6, {0x3}}, {0x4, 0x8a, {0x3}}, {0x2, 0x3ff, {0x0, 0x700}}, {0x6, 0x1000, {0x2, 0x2}}, {0x7ff, 0x8001, {0x2, 0x8}}, {0xe7b3, 0x8000, {0x0, 0x8}}, {0x8, 0x8, {0x1, 0x9}}, {0x3, 0x84f1, {0x1, 0x5}}, {0x7, 0xff80, {0x2}}, {0x6, 0x401, {0x2, 0x1}}, {0x10, 0xc, {0x1, 0x2}}, {0x3a1d, 0x3, {0x0, 0x10}}, {0xae7, 0x5, {0x2, 0x5}}, {0xf, 0x1, {0x1, 0x8}}, {0x8, 0x5, {0x3, 0x8}}, {0x7, 0x8001, {0x3, 0xd96}}, {0xb1, 0x6, {0x3, 0xd}}, {0x8, 0xffff, {0x1, 0x40}}, {0x3, 0x4, {0x0, 0x6}}, {0x8, 0xfffa, {0x2, 0x10}}, {0xff, 0x0, {0x2, 0x800}}, {0x4, 0x4, {0x1}}, {0x7, 0x200, {0x0, 0x4}}, {0x1ff, 0x80, {0x0, 0x1}}, {0x8001, 0x8000, {0x2, 0x8001}}, {0x7d, 0x19e2, {0x3, 0x4}}, {0x0, 0x3, {0x1, 0x63}}, {0x3, 0x4, {0x3}}, {0x3, 0x100, {0x3, 0x5}}]}}}, {{0x254, 0x1, {{0x2, 0x3}, 0x2, 0x40, 0xfff, 0x9, 0x3, 'syz1\x00', "8535841d35a8b57c8f2443a026c43d393323d603fb67ec0ba48419debc990f12", "59994e9271bdaa139800f1eff101eee868a03606beb1dd6ab7466581785c17d2", [{0x8, 0x2, {0x1}}, {0x7, 0xd16, {0x1}}, {0x6, 0x1, {0x0, 0x7fffffff}}, {0x401, 0x7fff, {0x1, 0x5}}, {0x4, 0xd, {0x2, 0x6}}, {0x6, 0x5, {0x3, 0xdfe}}, {0x36e, 0xd8eb, {0x0, 0x3ff}}, {0x2, 0x7fff, {0x1, 0xe8d4}}, {0x2, 0x3, {0x1, 0xea1}}, {0x6, 0x14, {0x2, 0x9}}, {0x791a, 0x6, {0x2, 0x6}}, {0x6c0b, 0x81, {0x0, 0x8}}, {0x8d, 0x8, {0x3, 0x3}}, {0xfffa, 0x0, {0x2, 0x10001}}, {0x3, 0xbac1, {0x2, 0x7fffffff}}, {0x3, 0x9, {0x2, 0x80000000}}, {0x0, 0xbf4, {0x0, 0x9}}, {0x40, 0x81, {0x0, 0x472e5ebe}}, {0x2, 0x4, {0xe8f6014247ab3ebb, 0x81}}, {0x6, 0x9, {0x2, 0x1}}, {0x6, 0xc, {0x3, 0x3}}, {0x9, 0x1, {0x2, 0x10000}}, {0xbd, 0x3, {0x1, 0x2}}, {0x4, 0x6, {0x0, 0xb0e}}, {0x7, 0x39e, {0x1, 0x6}}, {0x7, 0x2, {0x3, 0xfffffff7}}, {0x6, 0x7, {0x2, 0x5}}, {0x3, 0x6, {0x3, 0xffffff80}}, {0x3e, 0x9, {0x3, 0xc24}}, {0xe1, 0x3, {0x2, 0x24}}, {0x4, 0x800, {0x0, 0x26f1}}, {0x5, 0x6, {0x2, 0x5}}, {0x5, 0x401, {0x2}}, {0xfff, 0x5, {0x0, 0x9}}, {0x4, 0x8000, {0x3, 0x81}}, {0xfcc, 0x5f, {0x0, 0x6}}, {0xfff, 0x6faa, {0x1, 0x2}}, {0x3, 0x7}, {0xd, 0x3, {0x0, 0xffffffff}}, {0x800, 0xed, {0x1, 0x7}}]}}}]}, 0x4bc}, 0x1, 0x0, 0x0, 0x48001}, 0x95) (async) sendmsg$OSF_MSG_ADD(r0, &(0x7f00000014c0)={&(0x7f0000000f80)={0x10, 0x0, 0x0, 0x2000000}, 0xc, &(0x7f0000001480)={&(0x7f0000000fc0)={0x4bc, 0x0, 0x5, 0x5, 0x0, 0x0, {}, [{{0x254, 0x1, {{0x1, 0x6cf271c3}, 0x0, 0x0, 0x18d, 0x0, 0x1b, 'syz0\x00', "7c3900292fd0a732b6e43a6404bb640939669fbf0ab1b0118e2d40adb00b3595", "d9aa9935690761fdc65657f7d2757227218deeae6043570a7e7dbbea7f33882f", [{0x8, 0xc, {0x2, 0x9}}, {0x6, 0xd, {0x1, 0x2}}, {0x800, 0xfffc, {0x1, 0xfffff000}}, {0x1, 0x1000, {0x3, 0x4}}, {0x6, 0x7f, {0x0, 0x4}}, {0x2, 0x0, {0x549cf3233901f7cb, 0x2b46}}, {0x1ff, 0x1, {0x3, 0x5c3e}}, {0x15, 0x7, {0x1, 0x1}}, {0xdb, 0xf7e, {0x1, 0x5b7}}, {0x1, 0x8, {0x0, 0xfffffff7}}, {0x45, 0x1, {0x0, 0x1000}}, {0x3ff, 0x6, {0x3}}, {0x4, 0x8a, {0x3}}, {0x2, 0x3ff, {0x0, 0x700}}, {0x6, 0x1000, {0x2, 0x2}}, {0x7ff, 0x8001, {0x2, 0x8}}, {0xe7b3, 0x8000, {0x0, 0x8}}, {0x8, 0x8, {0x1, 0x9}}, {0x3, 0x84f1, {0x1, 0x5}}, {0x7, 0xff80, {0x2}}, {0x6, 0x401, {0x2, 0x1}}, {0x10, 0xc, {0x1, 0x2}}, {0x3a1d, 0x3, {0x0, 0x10}}, {0xae7, 0x5, {0x2, 0x5}}, {0xf, 0x1, {0x1, 0x8}}, {0x8, 0x5, {0x3, 0x8}}, {0x7, 0x8001, {0x3, 0xd96}}, {0xb1, 0x6, {0x3, 0xd}}, {0x8, 0xffff, {0x1, 0x40}}, {0x3, 0x4, {0x0, 0x6}}, {0x8, 0xfffa, {0x2, 0x10}}, {0xff, 0x0, {0x2, 0x800}}, {0x4, 0x4, {0x1}}, {0x7, 0x200, {0x0, 0x4}}, {0x1ff, 0x80, {0x0, 0x1}}, {0x8001, 0x8000, {0x2, 0x8001}}, {0x7d, 0x19e2, {0x3, 0x4}}, {0x0, 0x3, {0x1, 0x63}}, {0x3, 0x4, {0x3}}, {0x3, 0x100, {0x3, 0x5}}]}}}, {{0x254, 0x1, {{0x2, 0x3}, 0x2, 0x40, 0xfff, 0x9, 0x3, 'syz1\x00', "8535841d35a8b57c8f2443a026c43d393323d603fb67ec0ba48419debc990f12", "59994e9271bdaa139800f1eff101eee868a03606beb1dd6ab7466581785c17d2", [{0x8, 0x2, {0x1}}, {0x7, 0xd16, {0x1}}, {0x6, 0x1, {0x0, 0x7fffffff}}, {0x401, 0x7fff, {0x1, 0x5}}, {0x4, 0xd, {0x2, 0x6}}, {0x6, 0x5, {0x3, 0xdfe}}, {0x36e, 0xd8eb, {0x0, 0x3ff}}, {0x2, 0x7fff, {0x1, 0xe8d4}}, {0x2, 0x3, {0x1, 0xea1}}, {0x6, 0x14, {0x2, 0x9}}, {0x791a, 0x6, {0x2, 0x6}}, {0x6c0b, 0x81, {0x0, 0x8}}, {0x8d, 0x8, {0x3, 0x3}}, {0xfffa, 0x0, {0x2, 0x10001}}, {0x3, 0xbac1, {0x2, 0x7fffffff}}, {0x3, 0x9, {0x2, 0x80000000}}, {0x0, 0xbf4, {0x0, 0x9}}, {0x40, 0x81, {0x0, 0x472e5ebe}}, {0x2, 0x4, {0xe8f6014247ab3ebb, 0x81}}, {0x6, 0x9, {0x2, 0x1}}, {0x6, 0xc, {0x3, 0x3}}, {0x9, 0x1, {0x2, 0x10000}}, {0xbd, 0x3, {0x1, 0x2}}, {0x4, 0x6, {0x0, 0xb0e}}, {0x7, 0x39e, {0x1, 0x6}}, {0x7, 0x2, {0x3, 0xfffffff7}}, {0x6, 0x7, {0x2, 0x5}}, {0x3, 0x6, {0x3, 0xffffff80}}, {0x3e, 0x9, {0x3, 0xc24}}, {0xe1, 0x3, {0x2, 0x24}}, {0x4, 0x800, {0x0, 0x26f1}}, {0x5, 0x6, {0x2, 0x5}}, {0x5, 0x401, {0x2}}, {0xfff, 0x5, {0x0, 0x9}}, {0x4, 0x8000, {0x3, 0x81}}, {0xfcc, 0x5f, {0x0, 0x6}}, {0xfff, 0x6faa, {0x1, 0x2}}, {0x3, 0x7}, {0xd, 0x3, {0x0, 0xffffffff}}, {0x800, 0xed, {0x1, 0x7}}]}}}]}, 0x4bc}, 0x1, 0x0, 0x0, 0x48001}, 0x95) setsockopt$inet_sctp6_SCTP_DEFAULT_SNDINFO(r1, 0x84, 0x22, &(0x7f0000001500)={0x0, 0x4, 0x4, 0x1fc, r8}, 0x10) (async) setsockopt$inet_sctp6_SCTP_DEFAULT_SNDINFO(r1, 0x84, 0x22, &(0x7f0000001500)={0x0, 0x4, 0x4, 0x1fc, r8}, 0x10) getsockopt$inet6_buf(r1, 0x29, 0x14, &(0x7f0000001540)=""/11, &(0x7f0000001580)=0xb) (async) getsockopt$inet6_buf(r1, 0x29, 0x14, &(0x7f0000001540)=""/11, &(0x7f0000001580)=0xb) syz_init_net_socket$x25(0x9, 0x5, 0x0) (async) syz_init_net_socket$x25(0x9, 0x5, 0x0) socket$inet6_sctp(0xa, 0x1, 0x84) (async) r9 = socket$inet6_sctp(0xa, 0x1, 0x84) setsockopt$inet_sctp6_SCTP_STREAM_SCHEDULER(r9, 0x84, 0x7b, &(0x7f00000015c0)={r8, 0xe8}, 0x8) (async) setsockopt$inet_sctp6_SCTP_STREAM_SCHEDULER(r9, 0x84, 0x7b, &(0x7f00000015c0)={r8, 0xe8}, 0x8) sendto$inet6(r9, &(0x7f0000001600)="5b251f19f3575635cb7672011c1da915a71f0006f439931bea311c4a32689180f7e2fe8c0cf2ce7731eb59b2f81e7688b89605b79af24358d735143dd0b598bc2347c02699808f200beb8fbdf5aa7e0898fd4f9b5ab9edb3bc5a6300bce1a179e2418bb407002bf533d72f97a2ad72a2864df9b8b9effbdbfe8a7eb37abe4752fcc52ed728f9616341c7303b78", 0x8d, 0x0, &(0x7f00000016c0)={0xa, 0x4e20, 0x3a4d6e30, @rand_addr=' \x01\x00', 0x4}, 0x1c) 3m15.497395766s ago: executing program 3 (id=14852): socket$key(0xf, 0x3, 0x2) r0 = socket$inet_tcp(0x2, 0x1, 0x0) setsockopt$sock_int(r0, 0x1, 0x3c, &(0x7f0000000040)=0x1, 0x4) setsockopt$inet_tcp_TCP_REPAIR(r0, 0x6, 0x13, &(0x7f00000000c0)=0x1, 0x4) connect$inet(r0, &(0x7f0000000080)={0x2, 0x0, @loopback}, 0x10) setsockopt$inet_tcp_TCP_REPAIR(r0, 0x6, 0x13, &(0x7f00000001c0)=0xffffffffffffffff, 0x4) sendmmsg$inet(r0, &(0x7f0000000fc0)=[{{0x0, 0x0, &(0x7f0000000300)=[{&(0x7f0000003640)="636b860f009f7e8776fc2e955e65a3f27e1c00290c9652fbbf5dfdf043dd5a746b7199db80d48e3413f6376baee68c159aec38b39cd6fd62269f759280fd922f3aeff3cc73a726ef13395f2eb93ae7c3acb9e2a973d90640f835657b0f392774e22a658ca18af7d1f86da0302685f334c3b47574560b8a5fd361c63fb4cc9d76a495eb2b71921ee895e10f049f44c8bd3654752990e5dcd78cd977dcf6a16c83972a40721f23ff831b0024aea2c531c12bcc7593cd4c1062bbd6892437a10ae7a77982cbc9b311232d4d3c8d7dbf67fb1af0b00980b17912f12c46b7aa6885b33a1eadb6f510cea8b171c38a8508fea5e7efb4c5dc2edd95e4d33d5fee91c7fdb39f91d85ec6259d75f7328d603e378a9b696d9adf054c612c4a70b2cc95b6046c7e3f5b07065d232a190a0d70a325b98f7eae6811f7570932fb3f70a21aac2d993c5d3d8950271df206348f7831bdc3350a88cd43765fcb0a138e4635929c36eb9db15af6fbf72a83840f06a001ffee0a75677fb15a01ed9ddddc211b1d38c6b2cb55f760db6653c63eae35470b86f695983d01dbd35782907761ed8c72f6de56373073128002694776e35047c2751cebfdb3c8748add698ed427eba2708ec77eb127d8da8acd89a7030361de12e2494547b68ffe6424aebe4d7fc091ca6019bf5a46fdc7206682d800a86afb5a94b4fcb40b7665c103cd4522f554b049368937c848194bdb1439df3693e943e9f880a1b1cb28064731e46dc0bcb3b058be177f0b7ab0b7fd200d0d51105fbbfb3e70662ee16803af2be6bce2598c7ad8a514b7f271c430f8f6ba5bfdcbce4da7d23950333028d856209d7548fcaff76010212ebc19896dc2fed6c838a9edacd8851b53ecc7bef049f7b787817553e3fb756a60a451e753408e14e4d4498a07a833d3b3eb7ef1cd5e3d8df33bd02f32da3ac1e68864b1a802c36bbcf0a61b277435a29739e0a44c19c1fb9facf2f38a6e365846518a55526b5cd6d72f054e7195a5517bf3267ee464eaa1ea6e42b72d7c8986df317328221d4db990ce511f045988966e3584d7e3a3f7f35b50dc9f0c68dd2bdf3d262a9a65441ecd69d1981ae10a6255ac5c15665b3dcf10685bca8a4dd19ff9247c94db176b5f31a94e39731754d8083015fa61310f123a5408bbc740ae788e14e5d779d257dd57806cdf95787d8d036cb84ef20e8edb8d985dba6014a586d8e10b8feffef49595a8d55cee2eeaac8b9c57f88eba232a2038ea768362dcf1999247cfc54d6c21d0928ee5f609b405e80f0c62dfab4ac1102444eca4b4d5cc0f11290842f57c2f9328ca4860f09d70cb6e56a82808cecd7f4a37dbadc3ab21404894d7a04443457faeb393f4895c41cdadd03baf5359f9b3b450206ca95c581dd0ea86594ab8b0df99a38ac3b4731e1e1c324efc79a0de31f1bbde91fa37dfce9ea99657e50d3e693fa023618185c82893059bb477cfd3f3f5557308a8a889137d8537a033e4e5d313c93add6c9717e7b0b47bf800c629acb16adf03d33114334e2ddc1bc8b3e812e2be03155bf4ab2c9a8b4a987c9f9dff4cd41d28cc02b5564b86042907486d122081a0a358954737a40912d620e36256515b85b5ac466ab7054c0ef6afc8317b3197a571c1d343207bfb4a7ef03328042a1e08bd9c1d6cf85ad33d5bd665a5bfdcf3929477ee2500403a025f6293f1788fd7c2a97112cc2de5f8c46a26de96062838e3b332defe0d0707852097fccac6f401968e6af4bde51f95247c3e673dcdfd3e58c89f7c10439cc2b8e597d7abebafc8d565fe7559a783cdda51bfe55cced70ce353c79dcf19ae42f5b019e1aceb5c332b9298d9cb19b2e85706104da603f843c609aefa237d39fc6a9b8bd4cf5316cbf7b766f376485ad8d69846ba56f8fed16e398c6a9f49b826118013bb0e38ef82cb6cf286d3e853c525b0dd9b6d06d0e4effe332e5762b261ec5f67d658d56eeb0cee75f78e6cb438e52a4280140ca58ace9d09854f9acd00ae3f05c1028584ec5ee6203a61570552741dd6cd8ba8710ab3813b2921d8b1a8c64be9b1f23d1c9653a639fdc7070ccf2a0053f828994decc6f1931d9d6885de867e8e51fecef19fbc469023789054d6ccd28db8cd5d54daf8a04370ddccf28174cfc700786112e9e30d9e6c8c216ca404ad62c76bd3b6f829c5026e41c8fe2bf5e21f8d64a705b2baa6fee8dd18ad86e23af35e605b9fef28b4efdaa779eaee98aa5f0a015b5419b070660618f368c055b5543bb469f7a08eac2a8412927aa9d5503924eb48b4dd6269716b383df34f7ef78d52254ed913e44cf1bbae67edee7a9c7fb18f625c44ed97a7bd42d5e8e90220444daa6c9fa9c879858cdf3f202f31e5f06c2cc676858ea1ce1db99ec8a91b76f3eed3e5448801b9dbcb67fce24febf1bc73cdd77d8e338083f1806d5eb5d2cd9356c413bfbc3aab3b81356b101ea64be3b64f79f5d3a17237fdd5a3b593d43546c0cd2f6596107d19d444f38c9f55bc06b5bcf87b5d9894bdaf68379f2fdc4a356cbf5454a47d5bfcc46dcd5b6e036741543ffbab78a19ad7cf9c27c0c3961cc0b6938de0e866ed85fcf5e51f32a67936be25555c357d92a8acc0c60e0e6bd6129dd7fe99ade150ec7649b4b620a6ed8cff276331cc058d22832c956054fa943595f2c255973029074084e780e8ff97d83a3e818104a57d25bdd4614f45f58be926b587a6224d9b92ca3a7cd152858df514a0c03897602e6cfbd43918f6c877a047642b97e4be1a0b6d6771c4d92a2f320227c3670ff4f440aeb4bbc10700c98d2a7a9ebc6c8c67aedb5332ce4a1539a4ec2c32feccabafa3caede9a4f648e8cbf8c2f404c370abf88798a2a364d3daf74945511bc37d30b87b2b494500bc2b8a915e2d022fdfd4bedf871ae0657ac6fc27aadbeba74bb759c3cb799c856f576069ee8de7716935b7743821054642246dbe84852c9c2ef711fd8d49bbeb053332031b7a3055d5c1038578b24883de32d68bfeeae77dba80bd7998b659bace08b4f8d3de5c5a9208fc644c2bc056371a22993df8750f3e2e11e458326d6322f3f63895dd71a9b99457cd36bf4fe7f05595ea8109a05692b4a1aabea23c2607d9c9a97d9861c6438ab37e8e4ee2ed46019b8b8f1808f94e2f8544ab5ac042d0b881585000d64b5be6afef15a2aa3ba47f7b1c8cd6e2aa043324f0b03b1cd16b5a864e58cbdcc745313b820a0e19d5dc3854f7be387992653fc9b125614cbfdac6c8ca2e8ad91d7d58fc1f770e9930f2799e5769dcbc35af62c53e4ce6cfb2320e1dc13b6a98255387388e2fdc9743d0530dafe3e36089e4a1328d17eeb5da7c88e53aeee91b3c1a48cb55f119e911a80ce9effb97d7c8ea93706bbc18e125ce139e95df538e65d9b7442a46f3255c22105cf4f37e56fdf469d8988b0cee5673f7d0b6271de0dcfdc32a07c9776414dc59b11b8ef212ee3c6141179445cdbabe02f26de91bb682a77f2aeb5e75c3e31494d9f10daf646754660ee014efa3dd827b978e4ee4af3823556f0a2b2b43bfdaa8f2bfdad2057bc881a3845065e79fc78da530a433f8304596fe5e6d818ea25f606f270f90633cf5b22c0fbb2204e14c7c80b923561d38ac71ac3022e93a76ee0dc8f08e9599ce12bd07b0db391699fa7fa319f52649489d5e3e19711b30e5ebd7fb49f43a3743d4f6512677d3d2e02b9c4bd0a3e7a7d134dc28cb2fbb5289b573d22a8c0aad996cd2c3f79e361aa53c329e481dfec7b69ca973f8869c7e5cebcb3b4971cafbda1c327a0fa4e37994b482794b81dbf0c032acde10ba9153307be0b6553b53ba0fd40ec1b751856369470f5dcd95be47e8af3fe7b9cadcc9abec958ef157d199710264f8c2a1b72f92ecc98cadcf690af67050ca5a0bd445daf7a415d586c4f4ed67353ac83c988e66b2d0e1889c4b7cbe10204fd943a04dd8f45c782639458a8be4e740bd01aaa8967c2909edbf7157a6c7a931bb5e9e104ae3e8080fd12b4f6c6732b5588be32b0b2f6f6619f064e0f5b4c1ac1d538575ba18759c30efd8d04d7cc14fee558eec9c3f72255314d0017c7410795c3490a8af197f940a091d790c11fd8e4d2c7c7b2d507e3e00b566282af168f23a0638670c1edb890725d934771961e7bfde554fb16a088c76b409f04e6155c0a9ec3b264ae7c2315d2ee264d562653af6fe6f6cd0b9601ba43e5790d4589f63b2d13a960b7631fe59656d87327c20aba4d2ab0197bf8b2b6e45e5367228478e3eb6c61452a249bd802b2667ff6048e85567fa2ab8d1c85b3cf367a0f1b1923c043fa1ac6bc064ec707aaf39b8205138e31f115b0cdbe7c96142efc7310a0fd29f32c58dbc2b551a179c24d8ab0dd58945aa017b92c67b7656f4816473c1d73de083cfa306b4222f40ecf6e0a9775846fd823b253c48bea54063e80815e47b20bc70e3304cfcae9a35e4770cf72fa11f347e3972f52b9938b7602755267ebe2eb13767f3693a186ecc954e343ae8f819cd731cd1618cc1f47e2e6e22d1d5587b59da0f3b3b88655280b0eb4cc445b37c387cbe1b51e63392d545d5b499b28a316ab150f921438b8ba7aeecf0fda71b9702e9ebdfd33d147a1b572d2423dbef1931405007ed63fad59c3840c053a4a3573221305bc9d41c943e5b1ce79aab3e59a3e6bb2aa699881d9690ad77740073498d89a30bf47b1d32822fc297e9f8070b02c0e8bd48a169d82033db61ca9503d1745762577985b802ea81a61a49fbd730941af0dc7337dc50fd1ae96fcba8fc9f7979123556d795aacb8b68b5f0c9c631899dd0131a98c1e5df85ed73edfd24382266187aac75069c5aa63c1ed3a0615c7ed38f8455dd33a90ae3b093bd593316ba94637222d9a0325f317644e9fb95156c53e8d7ead728f2e457febb9e922546d0e7c7ab7badaeb96651b268c1d4be0fb1c9256e35d17a3d9cf2bee2c59740d85de62d7d49a0828b400dd617e1669a569d3a51f8feaec71c9ff58ba43e85c2aff887900272f6ef7089a6298f21a8654c436e47", 0xdf1}, {&(0x7f00000004c0)="3892afc2d4dcb4c292e5d668ef70bf6adcb2bace7d7b9af1e5ac8f361426551552fbd16ab260c083c44048a061fea6a2b3b13f8a5969536092b31b5d7c3128a6d2e7321039ede9655779acc6ab33d8c08e901aa3553d418437ef429a67df9df1f762b716c873ab433fbbc23baa31a84072898435ebda27b9bd", 0x79}, {&(0x7f00000005c0)="2cb8d5154b2ef88ac050b92ad9c3567e868138309d95338b8785145ac831724d06a009ffeb3f65b65f621c71b151132bb32ab64804c2134f31a8e044ec2cc4", 0x3f}], 0x3}}, {{&(0x7f0000000540)={0x2, 0x4e23, @dev={0xac, 0x14, 0x14, 0x3b}}, 0x10, &(0x7f0000000ec0)=[{0x0}], 0x1}}], 0x2, 0x400c001) sendmmsg$inet(r0, &(0x7f00000060c0)=[{{0x0, 0x0, &(0x7f0000000a40)=[{&(0x7f0000000140)='@', 0x1}, {&(0x7f0000000340)="b9", 0x1}, {&(0x7f0000000940)="99", 0x1}, {&(0x7f00000008c0)='z', 0x1}, {&(0x7f00000009c0)='~', 0x1}, {&(0x7f0000000a00)='x', 0x1}, {&(0x7f0000000440)="06", 0x1}, {&(0x7f0000000580)='k', 0x1}, {&(0x7f00000006c0)="1d", 0x1}, {&(0x7f0000000800)='a', 0x1}, {&(0x7f0000000280)='$', 0x1}], 0xb}}, {{0x0, 0x0, &(0x7f00000035c0)=[{&(0x7f0000001040)="fc", 0x1}, {&(0x7f0000001080)="c9", 0x1}, {&(0x7f0000002180)='-', 0x1}, {&(0x7f0000002240)='R', 0x1}, {&(0x7f00000033c0)="c4", 0x1}], 0x5}}], 0x2, 0x4000000) setsockopt$sock_int(r0, 0x1, 0x20, &(0x7f0000000000)=0x7fffffff, 0x4) openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='cgroup.controllers\x00', 0x275c, 0x0) r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000000c0)='memory.events\x00', 0x275a, 0x0) mmap(&(0x7f0000000000/0x2000)=nil, 0x2000, 0x1, 0x12, r1, 0x0) ioctl$EXT4_IOC_PRECACHE_EXTENTS(0xffffffffffffffff, 0x6612) 3m15.201830452s ago: executing program 3 (id=14859): r0 = socket$nl_generic(0x10, 0x3, 0x10) (async) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000400)=@newtaction={0x14, 0x30, 0x48b, 0x70bd26, 0x22000}, 0x14}, 0x1, 0x0, 0x0, 0x4000001}, 0x48195) sendmsg$nl_generic(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000400)=ANY=[@ANYBLOB="340000003e0007010000000000000000017c00000400fc800c0001800600060065580000080002"], 0x34}, 0x1, 0x0, 0x0, 0xc000}, 0xc010) 3m14.935896502s ago: executing program 3 (id=14866): r0 = socket(0x23, 0x800, 0x0) sendto$inet(r0, &(0x7f0000000000)="3579263c41486609bd4c34130a19ca6402aed6bb803e9b715e9eaa0532", 0x1d, 0x4000001, &(0x7f0000000040)={0x2, 0x4e23, @empty}, 0x10) sendto$inet6(r0, &(0x7f00000004c0)="7800000018002507b9199b02ffff48000203be04020406050a02040c5c000900580006020a0000000d0085a168d0bf46d32345653600648d07000b000a00070849935ade4a460c89b6ec0cff3959547f509058ba86c902007a00004a32000407160012000a0000000000e000e218d1dd3b6ed538f6523250", 0x78, 0xc090, 0x0, 0x0) sendmsg$IPCTNL_MSG_CT_GET_STATS(r0, &(0x7f0000000140)={&(0x7f0000000080)={0x10, 0x0, 0x0, 0x10}, 0xc, &(0x7f0000000100)={&(0x7f00000000c0)={0x14, 0x5, 0x1, 0x801, 0x0, 0x0, {0x1, 0x0, 0x1}, ["", "", ""]}, 0x14}, 0x1, 0x0, 0x0, 0xc0}, 0x4) 3m14.763493128s ago: executing program 3 (id=14870): syz_emit_ethernet(0x9e, &(0x7f0000000000)={@local, @dev={'\xaa\xaa\xaa\xaa\xaa', 0x4}, @void, {@llc_tr={0x11, {@llc={0xb9, 0x2, '1', "cd05f7776b195c8822be80580feed22d2fb6ccd14ebcad056c1fa87e8c750576bde6f4e71c947cae638761a3e3f8a0aff303cff91d5830cf3e56eec032d8e2ec8a3b2379fd71ab3e2327ac141bb091d20994643ee1e4a5307d1f0bb1b80d23931386b69cdaa37ab754c31eba5c2a44f324a9669077e9a23c6d3427ef8428a19b9deb093a6bd3b6701650ab16b2"}}}}}, 0x0) (async) syz_emit_ethernet(0x19a, &(0x7f00000000c0)={@local, @random="6c03cc1e85b7", @void, {@ipv4={0x800, @igmp={{0x2b, 0x4, 0x2, 0x2, 0x18c, 0x66, 0x0, 0x3, 0x2, 0x0, @initdev={0xac, 0x1e, 0x1, 0x0}, @rand_addr=0x64010100, {[@timestamp={0x44, 0x10, 0x8f, 0x0, 0x2, [0x3, 0xfff, 0x1]}, @timestamp_addr={0x44, 0xc, 0xb0, 0x1, 0x0, [{@initdev={0xac, 0x1e, 0x1, 0x0}, 0xc3}]}, @end, @cipso={0x86, 0x10, 0x2, [{0x4, 0xa, "2ad02e2c66577619"}]}, @timestamp_addr={0x44, 0x3c, 0x6b, 0x1, 0x8, [{@broadcast, 0x5}, {@rand_addr=0x64010102, 0x7}, {@broadcast, 0x8}, {@initdev={0xac, 0x1e, 0x1, 0x0}, 0x7}, {@broadcast, 0x9}, {@loopback, 0x10}, {@broadcast, 0x3}]}, @timestamp_prespec={0x44, 0x2c, 0x50, 0x3, 0x5, [{@initdev={0xac, 0x1e, 0x1, 0x0}, 0x3}, {@rand_addr=0x64010100, 0xfffffff9}, {@multicast1}, {@loopback, 0x3}, {@multicast1, 0xef}]}]}}, {0x12, 0x6d, 0x0, @empty, "ed62a23eee954f4ce311ef9c71f15a654cf0ab7404c768d8e4ba05239c5661320dd454b69d0e8f0e87c971bc52e4e0f51c977166d4bdac66b61d143c7c27d97cf1a7cb40bf19ae27dfa6f23a501c339a1e214c9da5d3972f85bcce60720016d9bde7d4346fcdfaf4bdf07dfa5102df68120588542ad8943eb6b6573a466c090c9db8e28b940e02173aef972af30987292e373ea9bf60d9e10a6643e248899edebfd4ff631bb7d19bfb32710b106c0621d2b53706c9110567b2f293e01a2c674840331a2677fff91732465a716b783b2105d62e6df8421978"}}}}}, &(0x7f0000000280)={0x1, 0x4, [0xbba, 0xc1a, 0x21f, 0xa6d]}) 3m14.51333345s ago: executing program 3 (id=14872): r0 = socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$tipc(&(0x7f0000000140), 0xffffffffffffffff) r1 = socket$alg(0x26, 0x5, 0x0) syz_open_procfs$namespace(0x0, &(0x7f0000000100)='ns/net\x00') setsockopt$IP6T_SO_SET_REPLACE(0xffffffffffffffff, 0x29, 0x40, &(0x7f0000000440)=@raw={'raw\x00', 0x8, 0x3, 0x278, 0x0, 0xffffffff, 0xffffffff, 0x0, 0xffffffff, 0x3e8, 0xffffffff, 0xffffffff, 0x3e8, 0xffffffff, 0x3, 0x0, {[{{@ipv6={@private0, @mcast2, [0xffff00, 0xff000000], [], 'veth0_macvtap\x00', 'dvmrp1\x00', {}, {}, 0x88}, 0x0, 0xa8, 0xd0}, @common=@unspec=@NFQUEUE0={0x28}}, {{@ipv6={@remote, @ipv4={'\x00', '\xff\xff', @dev}, [], [0x0, 0x0, 0x0, 0xff000000], 'erspan0\x00', 'gre0\x00'}, 0x0, 0xa8, 0xd8}, @common=@unspec=@CONNMARK={0x30, 'CONNMARK\x00', 0x1, {0x0, 0x1}}}], {{'\x00', 0x0, 0xa8, 0xd0}, {0x28, '\x00', 0x7}}}}, 0x2d8) ioctl$TUNSETTXFILTER(0xffffffffffffffff, 0x400454ca, &(0x7f0000000100)=ANY=[@ANYBLOB='..']) r2 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='memory.events\x00', 0x275a, 0x0) write$cgroup_subtree(r2, &(0x7f0000000100)=ANY=[], 0x32600) mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x2000001, 0x12, r2, 0x0) r3 = syz_open_procfs$namespace(0x0, &(0x7f0000000000)='ns/ipc\x00') openat$cgroup(r3, &(0x7f0000000340)='syz1\x00', 0x200002, 0x0) bind$alg(r1, &(0x7f0000000000)={0x26, 'skcipher\x00', 0x0, 0x0, 'essiv(cbc(aes),sha256)\x00'}, 0x58) ppoll(&(0x7f00000000c0)=[{r1, 0x10}], 0x1, &(0x7f0000000100)={0x0, 0x3938700}, &(0x7f0000000200)={[0x5]}, 0x8) setsockopt$ALG_SET_KEY(r1, 0x117, 0x1, &(0x7f0000000080)="ad56b6c5820fae9d38a9e572f2c06dcd32", 0x11) accept4(r0, &(0x7f0000000240)=@ax25={{0x3, @bcast}, [@remote, @default, @remote, @remote, @bcast, @bcast, @default, @netrom]}, &(0x7f00000002c0)=0x80, 0x800) r4 = bpf$MAP_CREATE(0x0, &(0x7f00000007c0)=ANY=[@ANYBLOB="0700000004000000800100000400000028000000", @ANYRES32, @ANYBLOB='\x00'/20, @ANYRES32=0x0, @ANYRES32, @ANYBLOB="005d030000000000422387a942028ee35c0402ecafd38a000000000020346d"], 0x50) bpf$MAP_CREATE(0x0, &(0x7f0000000280)=ANY=[@ANYBLOB="07000000040000000001000001"], 0x50) r5 = bpf$PROG_LOAD(0x5, &(0x7f0000000b40)={0x11, 0x8, &(0x7f0000000380)=ANY=[@ANYRES32=r4, @ANYRESDEC=r3, @ANYBLOB="0000000000000000b703000000000000850000001b000000b70000000000000095", @ANYRES32=r3], &(0x7f0000000780)='GPL\x00', 0x0, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, @fallback=0xcb13119f635c50e1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$PROG_BIND_MAP(0xa, &(0x7f0000000500)={r5}, 0xc) bpf$PROG_BIND_MAP(0xa, &(0x7f0000000400)={r5}, 0xc) socket$nl_route(0x10, 0x3, 0x0) r6 = socket$inet(0x2, 0x3, 0x33) socket$nl_route(0x10, 0x3, 0x0) socket$nl_audit(0x10, 0x3, 0x9) socketpair$nbd(0x1, 0x1, 0x0, &(0x7f0000000300)) getsockopt$inet_mreqsrc(r6, 0x0, 0x53, &(0x7f0000000000)={@dev, @local, @broadcast}, &(0x7f0000000040)=0x28) r7 = bpf$PROG_LOAD(0x5, &(0x7f000000e000)={0x19, 0x4, &(0x7f0000000040)=ANY=[], &(0x7f0000003ff6)='GPL\x00', 0x7, 0xc3, &(0x7f000000cf3d)=""/195, 0x0, 0x0, '\x00', 0x0, @cgroup_sockopt=0x15}, 0x94) close(r7) r8 = socket$rds(0x15, 0x5, 0x0) setsockopt$SO_RDS_MSG_RXPATH_LATENCY(r8, 0x114, 0x1d, 0x0, 0x20) 2m59.505400467s ago: executing program 33 (id=14872): r0 = socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$tipc(&(0x7f0000000140), 0xffffffffffffffff) r1 = socket$alg(0x26, 0x5, 0x0) syz_open_procfs$namespace(0x0, &(0x7f0000000100)='ns/net\x00') setsockopt$IP6T_SO_SET_REPLACE(0xffffffffffffffff, 0x29, 0x40, &(0x7f0000000440)=@raw={'raw\x00', 0x8, 0x3, 0x278, 0x0, 0xffffffff, 0xffffffff, 0x0, 0xffffffff, 0x3e8, 0xffffffff, 0xffffffff, 0x3e8, 0xffffffff, 0x3, 0x0, {[{{@ipv6={@private0, @mcast2, [0xffff00, 0xff000000], [], 'veth0_macvtap\x00', 'dvmrp1\x00', {}, {}, 0x88}, 0x0, 0xa8, 0xd0}, @common=@unspec=@NFQUEUE0={0x28}}, {{@ipv6={@remote, @ipv4={'\x00', '\xff\xff', @dev}, [], [0x0, 0x0, 0x0, 0xff000000], 'erspan0\x00', 'gre0\x00'}, 0x0, 0xa8, 0xd8}, @common=@unspec=@CONNMARK={0x30, 'CONNMARK\x00', 0x1, {0x0, 0x1}}}], {{'\x00', 0x0, 0xa8, 0xd0}, {0x28, '\x00', 0x7}}}}, 0x2d8) ioctl$TUNSETTXFILTER(0xffffffffffffffff, 0x400454ca, &(0x7f0000000100)=ANY=[@ANYBLOB='..']) r2 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='memory.events\x00', 0x275a, 0x0) write$cgroup_subtree(r2, &(0x7f0000000100)=ANY=[], 0x32600) mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x2000001, 0x12, r2, 0x0) r3 = syz_open_procfs$namespace(0x0, &(0x7f0000000000)='ns/ipc\x00') openat$cgroup(r3, &(0x7f0000000340)='syz1\x00', 0x200002, 0x0) bind$alg(r1, &(0x7f0000000000)={0x26, 'skcipher\x00', 0x0, 0x0, 'essiv(cbc(aes),sha256)\x00'}, 0x58) ppoll(&(0x7f00000000c0)=[{r1, 0x10}], 0x1, &(0x7f0000000100)={0x0, 0x3938700}, &(0x7f0000000200)={[0x5]}, 0x8) setsockopt$ALG_SET_KEY(r1, 0x117, 0x1, &(0x7f0000000080)="ad56b6c5820fae9d38a9e572f2c06dcd32", 0x11) accept4(r0, &(0x7f0000000240)=@ax25={{0x3, @bcast}, [@remote, @default, @remote, @remote, @bcast, @bcast, @default, @netrom]}, &(0x7f00000002c0)=0x80, 0x800) r4 = bpf$MAP_CREATE(0x0, &(0x7f00000007c0)=ANY=[@ANYBLOB="0700000004000000800100000400000028000000", @ANYRES32, @ANYBLOB='\x00'/20, @ANYRES32=0x0, @ANYRES32, @ANYBLOB="005d030000000000422387a942028ee35c0402ecafd38a000000000020346d"], 0x50) bpf$MAP_CREATE(0x0, &(0x7f0000000280)=ANY=[@ANYBLOB="07000000040000000001000001"], 0x50) r5 = bpf$PROG_LOAD(0x5, &(0x7f0000000b40)={0x11, 0x8, &(0x7f0000000380)=ANY=[@ANYRES32=r4, @ANYRESDEC=r3, @ANYBLOB="0000000000000000b703000000000000850000001b000000b70000000000000095", @ANYRES32=r3], &(0x7f0000000780)='GPL\x00', 0x0, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, @fallback=0xcb13119f635c50e1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$PROG_BIND_MAP(0xa, &(0x7f0000000500)={r5}, 0xc) bpf$PROG_BIND_MAP(0xa, &(0x7f0000000400)={r5}, 0xc) socket$nl_route(0x10, 0x3, 0x0) r6 = socket$inet(0x2, 0x3, 0x33) socket$nl_route(0x10, 0x3, 0x0) socket$nl_audit(0x10, 0x3, 0x9) socketpair$nbd(0x1, 0x1, 0x0, &(0x7f0000000300)) getsockopt$inet_mreqsrc(r6, 0x0, 0x53, &(0x7f0000000000)={@dev, @local, @broadcast}, &(0x7f0000000040)=0x28) r7 = bpf$PROG_LOAD(0x5, &(0x7f000000e000)={0x19, 0x4, &(0x7f0000000040)=ANY=[], &(0x7f0000003ff6)='GPL\x00', 0x7, 0xc3, &(0x7f000000cf3d)=""/195, 0x0, 0x0, '\x00', 0x0, @cgroup_sockopt=0x15}, 0x94) close(r7) r8 = socket$rds(0x15, 0x5, 0x0) setsockopt$SO_RDS_MSG_RXPATH_LATENCY(r8, 0x114, 0x1d, 0x0, 0x20) 3.115891027s ago: executing program 1 (id=16719): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) r1 = syz_open_procfs$namespace(0x0, &(0x7f00000000c0)='ns/mnt\x00') r2 = syz_open_procfs$namespace(0xffffffffffffffff, &(0x7f0000000100)='ns/pid_for_children\x00') r3 = ioctl$TUNGETDEVNETNS(0xffffffffffffffff, 0x54e3, 0x0) r4 = syz_open_procfs$namespace(0x0, &(0x7f0000000180)='ns/time\x00') r5 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='cgroup.controllers\x00', 0x275a, 0x0) r6 = socket$kcm(0x2, 0x1, 0x84) sendmsg$inet(r6, &(0x7f0000000600)={&(0x7f00000001c0)={0x2, 0x0, @initdev={0xac, 0x1e, 0x0, 0x0}}, 0x10, &(0x7f0000000380)=[{&(0x7f0000000640)="80", 0x26892}], 0x1}, 0xfc) sendmsg$inet(r6, &(0x7f0000000680)={&(0x7f0000000000)={0x2, 0x4e24, @rand_addr=0x64010102}, 0x10, &(0x7f0000000540)=[{&(0x7f0000000240)="f9", 0x1}], 0x1}, 0x24000004) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32, @ANYBLOB="0000000000000000b70800000d0000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000100000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) r7 = bpf$MAP_CREATE(0x0, &(0x7f0000000740)=ANY=[@ANYBLOB="0b00000005000000000400000900000001"], 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0xa, 0x4, &(0x7f0000000480)=ANY=[@ANYBLOB="18000000000000000000000000000000850000006d"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000d80)={0x18, 0x5, &(0x7f0000000480)=ANY=[@ANYBLOB="1801000021"], 0x0, 0x40, 0x0, 0x0, 0x0, 0xb4a02fe0ce239f93, '\x00', 0x0, 0x2}, 0x94) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0xe, 0x0, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000800000000000000000000018110000", @ANYRES32=r7], 0x0, 0x0, 0x0, 0x0, 0x0, 0x59, '\x00', 0x0, @fallback=0xd, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r8 = socket(0x10, 0x3, 0x0) setsockopt$sock_int(r8, 0x1, 0x21, 0x0, 0x0) r9 = bpf$PROG_LOAD(0x5, &(0x7f0000000300)={0x6, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, @fallback=0x4, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000000)={r9, 0x2000000, 0xe, 0x0, &(0x7f00000004c0)="630b008646dc3f0adf33c9f7b986", 0x0, 0x1ff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x20}, 0x50) recvfrom$x25(r5, 0x0, 0x0, 0x40, 0x0, 0x0) r10 = ioctl$NS_GET_PARENT(0xffffffffffffffff, 0xb702, 0x0) sendmsg$DEVLINK_CMD_RELOAD(0xffffffffffffffff, &(0x7f0000000380)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x20000}, 0xc, &(0x7f00000001c0)={&(0x7f0000000240)={0x140, 0x0, 0x800, 0x70bd26, 0x25dfdbfe, {}, [{@pci={{0x8}, {0x11}}, @DEVLINK_ATTR_NETNS_FD={0x8, 0x8a, r1}}, {@nsim={{0xe}, {0xf, 0x2, {'netdevsim', 0x0}}}, @DEVLINK_ATTR_NETNS_FD={0x8, 0x8a, r2}}, {@pci={{0x8}, {0x11}}, @DEVLINK_ATTR_NETNS_FD={0x8, 0x8a, r3}}, {@nsim={{0xe}, {0xf, 0x2, {'netdevsim', 0x0}}}, @DEVLINK_ATTR_NETNS_FD={0x8, 0x8a, r4}}, {@pci={{0x8}, {0x11}}, @DEVLINK_ATTR_NETNS_FD={0x8, 0x8a, r5}}, {@pci={{0x8}, {0x11}}, @DEVLINK_ATTR_NETNS_FD={0x8, 0x8a, r10}}, {@pci={{0x8}, {0x11}}, @DEVLINK_ATTR_NETNS_ID={0x8}}, {@nsim={{0xe}, {0xf, 0x2, {'netdevsim', 0x0}}}, @DEVLINK_ATTR_NETNS_FD={0x8}}]}, 0x140}, 0x1, 0x0, 0x0, 0x1}, 0x8004) sendmsg$NFT_BATCH(r0, &(0x7f000000c2c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f00000003c0)=ANY=[@ANYBLOB="140000001000010000000000000000001c6a000a28000000000a0101000000005e1affd5020000000900010073797a300000000008000240000000032c000000030a01030000e6ff00000000020000000900010073797a30000000000900030073797a320000000014000000110001"], 0x7c}}, 0x0) ioctl$ifreq_SIOCGIFINDEX_wireguard(r5, 0x8933, &(0x7f0000000580)={'wg1\x00', 0x0}) sendmsg$WG_CMD_SET_DEVICE(r5, &(0x7f00000006c0)={&(0x7f0000000500)={0x10, 0x0, 0x0, 0x9d75b0c2091b39e3}, 0xc, &(0x7f00000005c0)={&(0x7f0000000780)=ANY=[@ANYBLOB='\a\x00\x00\x00', @ANYRES16=0x0, @ANYBLOB="00012abd7000fedbdf250100000008000100", @ANYRES32=r11, @ANYBLOB="0800050001000000060006004e24000024000300a05ca84f6c9c8e3853e2fd7a70ae0fb20fa152600cb00845174f08076f8d78430800050001000000400008803c0000801400040002004e2400000000000000000000000008000300020000001400040002004e236401010200000000000000000600050001000000060006004e24000008000500000000000800070008000000"], 0xb0}}, 0x89) sendmsg$NFT_BATCH(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000140)=ANY=[@ANYRES16=r0], 0x88}, 0x1, 0x0, 0x0, 0x40}, 0x0) 2.557999255s ago: executing program 2 (id=16729): r0 = socket$inet_sctp(0x2, 0x5, 0x84) r1 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000400)={0xd, 0x10, &(0x7f0000000000)=ANY=[@ANYBLOB="18000000"], 0x0, 0x2}, 0x94) r2 = socket$inet_sctp(0x2, 0x1, 0x84) getsockopt$inet_sctp_SCTP_MAX_BURST(r2, 0x84, 0xd, &(0x7f0000000000)=@assoc_value={0x0}, &(0x7f0000000040)=0x8) (async) r4 = socket$tipc(0x1e, 0x2, 0x0) bind$tipc(r4, &(0x7f0000000200)=@nameseq={0x1e, 0x1, 0x0, {0x42, 0x0, 0xfffffffd}}, 0x10) (async) bind$tipc(r4, &(0x7f0000000000)=@nameseq={0x1e, 0x1, 0x0, {0x42, 0x0, 0x2}}, 0x10) (async) r5 = socket$tipc(0x1e, 0x5, 0x0) bind$tipc(r5, &(0x7f00000000c0)=@nameseq={0x1e, 0x1, 0x0, {0x42}}, 0x10) bind$tipc(r5, &(0x7f0000000180)=@nameseq={0x1e, 0x1, 0x0, {0x42, 0x2, 0x4}}, 0x10) (async, rerun: 32) bind$tipc(r4, &(0x7f0000000100)=@name={0x1e, 0x2, 0x0, {{0x42, 0x20000003}}}, 0x10) (async, rerun: 32) bind$tipc(r4, &(0x7f0000000140)=@name={0x1e, 0x2, 0x0, {{0x42, 0x2}}}, 0x10) (async) bind$tipc(r5, &(0x7f0000000440)=@nameseq={0x1e, 0x1, 0x0, {0x42, 0x2, 0x3}}, 0x10) bind$tipc(r5, &(0x7f00000001c0)=@nameseq={0x1e, 0x1, 0x2, {0x42, 0x1, 0x3}}, 0x10) (async, rerun: 32) bind$tipc(r4, 0x0, 0x0) (async, rerun: 32) ioctl$F2FS_IOC_MOVE_RANGE(r1, 0xc020f509, &(0x7f00000000c0)={r0, 0xfff, 0xe, 0xa4a}) (async) getsockopt$inet_sctp6_SCTP_GET_LOCAL_ADDRS(0xffffffffffffffff, 0x84, 0x6d, &(0x7f00000001c0)={r3, 0x90, "d919916a6918fd2bba774eebc1e9562b6f6aa20f973d702b3691de7b169b489d0b9c7976d24996561a23859265427b5814fc08ed1a4f6634c7336502b1328c1e7f15cb9d494525a3e4b173b4800eccaef83a41a1e4a8a12ce08dd88de7e6767aa3488be1164b4f06852182a16fbe4b7b179edcee8f5be225a04ed73052467fb02fb382718e71e56f9eea0d2c81cf6538"}, &(0x7f0000000100)=0x98) setsockopt$inet_sctp6_SCTP_MAXSEG(r6, 0x84, 0xd, &(0x7f0000000280)=@assoc_value={r7, 0x4}, 0x8) getsockopt$inet_sctp_SCTP_LOCAL_AUTH_CHUNKS(r0, 0x84, 0x1b, &(0x7f0000000080)={r3}, &(0x7f0000000180)=0x8) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000002c80)={0x3, 0xb, &(0x7f0000000140)=@framed={{0x18, 0x2}, [@printk={@p, {}, {}, {}, {}, {}, {0x85, 0x0, 0x0, 0x17}}]}, &(0x7f0000000080)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x3ff}, 0x94) 2.401029848s ago: executing program 2 (id=16733): r0 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000003c0)=ANY=[@ANYRES8=r0, @ANYRES32=0x0, @ANYRES32=0x0, @ANYBLOB="00000000000000000008000000000000000000000000000007000000000000000000000000000000000000000000000003000000000000000000000000000000000000000000000000000000000000000d0000000000000000000000000000000000000000000100000000000000000044010500ac1414bb000000000000000000000000000000086c00000000000000ac141408000000000000000000000000000000000000ff00000000000000000001009500fc020000000000000000000000000000000000003200000000000000fe8000000000000000000000000000bb023500000000000000000000ffffffff0000000000000000000000000000000000000001000000003c00000002000000ac1414bb000000000000000000000000000000000103000000000000000000000000000000000000000000000000000000000000000000003200000002000000ac141400000000000000000000000000fffffffff0"], 0x1fc}}, 0x0) 2.243213841s ago: executing program 2 (id=16737): sendmmsg(0xffffffffffffffff, 0x0, 0x0, 0x0) epoll_create1(0x0) epoll_create1(0x0) close(0x4) syz_init_net_socket$bt_hci(0x1f, 0x3, 0x5) close(0x4) r0 = socket$inet6_sctp(0xa, 0x5, 0x84) setsockopt$inet_sctp6_SCTP_PEER_ADDR_PARAMS(r0, 0x84, 0x9, 0x0, 0x0) readv(r0, &(0x7f0000000500)=[{&(0x7f0000000340)=""/191, 0xbf}, {&(0x7f0000000400)=""/3, 0x3}, {&(0x7f0000000440)=""/186, 0xba}], 0x3) syz_open_procfs$namespace(0x0, &(0x7f0000000040)='ns/cgroup\x00') bpf$PROG_LOAD(0x5, &(0x7f000000e000)={0x1, 0x4, &(0x7f0000000040)=@framed={{0xffffffb4, 0x5, 0x0, 0x0, 0x0, 0x79, 0x10, 0x7d}, [@ldst={0x5}]}, &(0x7f0000003ff6)='GPL\x00', 0x5, 0xfd90, &(0x7f000000cf3d)=""/195, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0x22e, 0x10, &(0x7f0000000000), 0x1dd}, 0x48) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f07ebbeef, 0x8031, 0xffffffffffffffff, 0x0) r1 = socket$igmp6(0xa, 0x3, 0x2) setsockopt$SO_TIMESTAMPING(r1, 0x1, 0x41, &(0x7f0000000040)=0x43e6, 0x4) sendmmsg$inet6(r1, &(0x7f00000000c0)=[{{&(0x7f00000001c0)={0xa, 0x0, 0x0, @mcast2}, 0x1c, 0x0}}], 0x1, 0x0) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000140)={&(0x7f0000000080)={0x10, 0x0, 0x0, 0x40000}, 0xc, &(0x7f0000000100)={0x0, 0x1c}, 0x1, 0x0, 0x0, 0x10}, 0x40001) ioctl$ifreq_SIOCGIFINDEX_vcan(r1, 0x8933, &(0x7f0000000200)={'vxcan0\x00', 0x0}) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000300)={&(0x7f0000000180)={0x10, 0x0, 0x0, 0x8}, 0xc, &(0x7f00000002c0)={&(0x7f0000000240)=@ipmr_newroute={0x58, 0x18, 0x0, 0x70bd2c, 0x25dfdbfb, {0x80, 0x0, 0x14, 0x8, 0x0, 0x1, 0xff, 0x1, 0x2800}, [@RTA_PRIORITY={0x8, 0x6, 0x1}, @RTA_ENCAP_TYPE={0x6}, @RTA_MULTIPATH={0xc, 0x9, {0x945, 0x1, 0x40, r2}}, @RTA_DPORT={0x6, 0x1d, 0x4e24}, @RTA_SRC={0x8, 0x2, @multicast1}, @RTA_FLOW={0x8, 0xb, 0x81}, @RTA_PRIORITY={0x8, 0x6, 0x3}]}, 0x58}, 0x1, 0x0, 0x0, 0x24004090}, 0x20008084) r3 = socket$kcm(0x2, 0x3, 0x2) ioctl$SIOCSIFHWADDR(r3, 0x8914, 0x0) 2.098043143s ago: executing program 1 (id=16738): r0 = socket(0x10, 0x3, 0x0) r1 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_int(r1, 0x29, 0xb, 0x0, 0x0) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f0000000340)={'lo\x00', 0x0}) r4 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r4, &(0x7f000000c2c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000340)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a28000000000a0101000000005e1affd5020000000900010073797a300000000008000240000000032c000000030a01030000e6ff00000000020000000900010073797a30000000000900030073797a320000000014000000110001"], 0x7c}}, 0x0) sendmsg$NFT_BATCH(r4, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000140)={&(0x7f00000003c0)={{0x14}, [@NFT_MSG_DELCHAIN={0x2c, 0x5, 0xa, 0x3, 0x0, 0x0, {0x2}, [@NFTA_CHAIN_HANDLE={0xc, 0x2, 0x1, 0x0, 0x1}, @NFTA_CHAIN_TABLE={0x9, 0x1, 'syz0\x00'}]}, @NFT_MSG_NEWCHAIN={0x2c, 0x3, 0xa, 0x201, 0x0, 0x0, {0x2}, [@NFTA_CHAIN_TABLE={0x9, 0x1, 'syz0\x00'}, @NFTA_CHAIN_NAME={0x9, 0x3, 'syz2\x00'}]}], {0x14}}, 0x80}}, 0x0) r5 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r5, 0x8933, &(0x7f0000000080)={'netdevsim0\x00', 0x0}) sendmsg$nl_route_sched(r5, &(0x7f0000001200)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f00000005c0)=@newqdisc={0x44, 0x24, 0x4ee4e6a52ff56541, 0x0, 0x25dfdbfd, {0x0, 0x0, 0x0, r6, {}, {0xffff, 0xffff}}, [@qdisc_kind_options=@q_rr={{0x7}, {0x18, 0x2, {0x7, "bf32568d2fd41b329a5f8a92fc91d2ff"}}}]}, 0x44}, 0x1, 0x0, 0x0, 0x44000800}, 0x4000010) syz_emit_ethernet(0xc6, &(0x7f0000000180)=ANY=[@ANYBLOB="0180c2000001bbbbbbbbbbbb86dd6001044800903aff06000000000000000000000000000001fe8000000000000000000000000000aa8800907800000000fe8000000000000000000000000000bb020f36dad83aea8df15d20889b6a4b488367e6c6cba5844d6d576950aae4e0af85d7922746edc7abaa7b25516c034d4b8474b922a5df0be178ccb65ae4eaabef5f63a5df9cc8e9b0c9fef787cb50058e6375665a79abec0a2808518db033c86bb7e1be26e4ef08f20bfb122d51786403c40883d6626b35a98a2fb884bdff834ccb1d2a1d31bcddcaf113e039b947b8e28cf0c700e3b785c2012e598a2bf812d3ac757948b04e16ca9bac89477dc1970e32b24226a48e2d6da6531212027006fb9ea2f05c3a147ab97241c77c29f2ce351f59d9f66c66f308885513b9e4652ee0be3bf775683f9d88c3771481abf90b5c017d2224924cb5d9d2450bc26994d3107428462e4f9b6dfe106238dd955b30fa35f7084d03ba8a8948f2240b57e8f1f3565a05543179f407a05946dbaebfca01d70a0741c2a099d84495febcf21e5b2e1657b39e406cc7ee1ecdafc79329"], 0x0) sendmsg$nl_route_sched(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000780)={&(0x7f0000000100)=@newqdisc={0x78, 0x24, 0xd0f, 0x0, 0x0, {0x60, 0x0, 0x0, r3, {}, {0xffff, 0xffff}}, [@qdisc_kind_options=@q_sfq={{0x8}, {0x4c, 0x2, {{0xe, 0x9, 0x7, 0x0, 0x4}, 0x6, 0x1, 0x7, 0x5, 0x401, 0x0, 0x14, 0x5, 0x3, 0x6, {0x3ff, 0xfffffffe, 0x40, 0x804, 0x8, 0x9}}}}]}, 0x78}}, 0x0) accept4$bt_l2cap(r0, &(0x7f0000000040)={0x1f, 0x0, @fixed}, &(0x7f00000000c0)=0xe, 0x800) 2.041478592s ago: executing program 0 (id=16739): r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f00000006c0)={0x0, 0x0, &(0x7f0000000100)={&(0x7f00000002c0)=ANY=[@ANYBLOB="5800000010000d04000000453a3e7eda60a39a61a57705b1da66bfdec42d636e70029841c45ccaf9e13ba28a640dd47b30c49fc00508c675ee4a53de050897f51a0710b0c6d0f517f38a2a2e80c48109aefc2e4dc3a9b201ec384f0298049b0c00000001ec5bf52a403da8a5d1de5d3304979f34ae7bd8a48f2714dc565d2582d347497dc251ddb3fa90217cd227a791ffd2891dba9df816bbf3b5bc1bdb6bad5a08223387358720d5f93ccaf6c49ba185e7f90e0ad61e2a04310990da62edce5bedca4fe2ffe2ff74c2e4d71c10d9ab82924cfeb930964c3b18551ec451858c6c2f3777e075911d8e23fdc70b6fd9d1b444e10c8000"/261, @ANYRES32=0x0, @ANYBLOB="0000000008000000240012800c0001006d6163766c616e0014000280080001000400000008000900ffffffff140035006d6163766c616e300000000000000000", @ANYRES32=r0], 0x58}}, 0x8000) 1.714473792s ago: executing program 0 (id=16741): socket(0x10, 0x3, 0x0) socket$netlink(0x10, 0x3, 0x8) r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000080), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f0000000340)={'wlan0\x00', 0x0}) sendmsg$NL80211_CMD_SET_INTERFACE(r0, &(0x7f0000000040)={0x0, 0xffffffffffffff8c, &(0x7f0000000140)={&(0x7f0000000700)=ANY=[@ANYBLOB='(\x00\x00\x00', @ANYRES16=r1, @ANYBLOB="050000000000000000000600000008000300", @ANYRES32=r2, @ANYBLOB="0000990005000100000000000a00010000584acf7db259e9cfbea7e7e01dd7b8554910c3f2b9663687030bc02849d5cf2620647994414f917a66415c10347079cb76b68315b1e80d8ac0695bb4d961b38ff8f53d43eaf1a66e551934f46650ac2d26f972e360822c2634cf18b985e92c196a97ab1e2144c18000000000000000"], 0x28}, 0x1, 0x0, 0x0, 0x811}, 0x0) socket$pppl2tp(0x18, 0x1, 0x1) socket$inet6_udp(0xa, 0x2, 0x0) r3 = syz_genetlink_get_family_id$l2tp(&(0x7f0000000040), 0xffffffffffffffff) r4 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$L2TP_CMD_SESSION_DELETE(r4, &(0x7f0000000640)={0x0, 0x0, &(0x7f0000000100)={&(0x7f00000001c0)=ANY=[@ANYBLOB='@\x00\x00\x00', @ANYRES16=r3, @ANYBLOB="010026bd70000400000005000000080009000200000008000c000300000008000b00000000000600010007"], 0x40}}, 0x20) r5 = socket$pppl2tp(0x18, 0x1, 0x1) r6 = socket$nl_generic(0x10, 0x3, 0x10) r7 = syz_genetlink_get_family_id$l2tp(&(0x7f0000000440), 0xffffffffffffffff) sendmsg$L2TP_CMD_SESSION_GET(r6, &(0x7f0000000040)={0x0, 0x0, &(0x7f00000004c0)={&(0x7f0000000900)=ANY=[@ANYBLOB="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", @ANYRES16=r7, @ANYBLOB="010829bd70000000000007000000050013000900000014000800"/42], 0x30}}, 0x0) connect$pppl2tp(r5, &(0x7f0000000000)=@pppol2tpv3={0x18, 0x1, {0x3, 0xffffffffffffffff, {0x2, 0x0, @dev}, 0x2}}, 0x2e) r8 = openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0) ioctl$TUNSETIFF(r8, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x7101}) r9 = socket(0x400000000010, 0x3, 0x0) r10 = socket$unix(0x1, 0x5, 0x0) ioctl$sock_SIOCGIFINDEX(r10, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r9, &(0x7f00000012c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000005c0)=@newqdisc={0x38, 0x24, 0x4ee4e6a52ff56541, 0x70bd2d, 0x25dfdbfd, {0x0, 0x0, 0x0, r11, {0x0, 0xfff1}, {0xffff, 0xffff}, {0x1, 0xf}}, [@qdisc_kind_options=@q_multiq={{0xb}, {0x8, 0x2, {0x28}}}]}, 0x38}}, 0x0) sendmsg$nl_route_sched(r9, &(0x7f00000003c0)={0x0, 0x0, &(0x7f0000000440)={&(0x7f0000000540)=@newtfilter={0x3c, 0x2c, 0xd27, 0x70bd2c, 0x25dfdbfe, {0x0, 0x0, 0x0, r11, {0x0, 0xffe0}, {}, {0xa, 0xfff3}}, [@filter_kind_options=@f_flower={{0xb}, {0xc, 0x2, [@TCA_FLOWER_KEY_ENC_OPTS={0x8, 0x54, 0x0, 0x1, [@TCA_FLOWER_KEY_ENC_OPTS_GENEVE={0x4}]}]}}]}, 0x3c}, 0x1, 0x0, 0x0, 0x22044028}, 0x40040) writev(r5, &(0x7f00000000c0)=[{&(0x7f0000000180)="9f", 0x1}], 0x1) r12 = socket(0x10, 0x803, 0x0) syz_genetlink_get_family_id$nl80211(&(0x7f00000001c0), r12) r13 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r13, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000004680)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a28000000000a1d010000000000000000020000000900010073797a3000000000080002400000000098000000030a01020000000000000000020000000900010073797a30000000000900030073797a32000000006b00030091abc12404cf378042f26c43f91f68d8a90767c0bc71f60877974475de3d78efb8abe4697255db0a95d58051bdd88bb7f063e5870df43110ba778743ed0d89fd11c0"], 0xfc}}, 0x5) getsockname$packet(r12, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) 1.539542453s ago: executing program 1 (id=16743): pipe(&(0x7f00000001c0)={0xffffffffffffffff, 0xffffffffffffffff}) write(r0, &(0x7f0000000300)="6a8b63bd33", 0x5) bpf$BPF_GET_BTF_INFO(0xf, &(0x7f0000000180)={r0, 0x20, &(0x7f0000000140)={&(0x7f0000000080)=""/173, 0xad, 0x0, &(0x7f0000000200)=""/186, 0xba}}, 0x10) r1 = socket(0x10, 0x3, 0x0) sendmsg$kcm(r1, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000040)=[{&(0x7f0000001a80)="d8000000180081064e81f782db4cb904021d0800fd007c05e8fe50a10a000600014002020c600e41b0000900ac000a0501000000160012000a00ff120048035c3b61c1d67f6f94007134cf6efb8007a007a290457f01a7cee4090000001fb791643a5ee4ce1b14d6d930dfe1d9d322fe7c9f8775730d16a4683f5ae24e25ccca9e00360db79826835d3a71d95667daffffffffff1f215ce3bb9ad809d5e1cace81ed0bffece0b42a9ecbee5b7276505de6ccd40dd6e4edef3d93452a92954b43370e9703920723f9000001008af26c8b7b55f4d2a6823a45", 0xd8}], 0x1}, 0x894) sendmsg$netlink(0xffffffffffffffff, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000001ac0)=[{0x0, 0x114}], 0x1}, 0x0) sendmmsg(r1, &(0x7f0000000000), 0x4000000000001f2, 0x0) 1.395040946s ago: executing program 1 (id=16746): readv(0xffffffffffffffff, &(0x7f0000002340)=[{0x0}], 0x1) socket$inet_icmp_raw(0x2, 0x3, 0x1) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000140)=@newtaction={0x70, 0x30, 0x0, 0x0, 0x0, {0x9}, [{0x5c, 0x1, [@m_sample={0x58, 0x0, 0x0, 0x0, {{0xb}, {0x2c, 0x2, 0x0, 0x1, [@TCA_SAMPLE_PSAMPLE_GROUP={0x8}, @TCA_SAMPLE_RATE={0x8}, @TCA_SAMPLE_PARMS={0x18, 0x2, {0x0, 0x0, 0x0, 0x0, 0x80000}}]}, {0x4}, {0xc, 0x7, {0x1}}, {0xc, 0x8, {0x4}}}}]}]}, 0x70}, 0x1, 0x0, 0x0, 0x4008085}, 0x20040000) r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = socket$nl_route(0x10, 0x3, 0x0) r2 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r2, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000140)=ANY=[@ANYBLOB="9000000010000305000000000000000000000700", @ANYRES32=0x0, @ANYBLOB="996e06004d4c0700540012800800010068737200480002800500030008000000050003000500000005000300fd00000008000200", @ANYRES32=r0, @ANYBLOB="08000100", @ANYRES32=r1], 0x90}}, 0x0) r3 = socket$xdp(0x2c, 0x3, 0x0) getsockopt$XDP_MMAP_OFFSETS(r3, 0x11b, 0x1, &(0x7f0000002f80), &(0x7f0000003000)=0x80) r4 = bpf$PROG_LOAD(0x5, &(0x7f0000000100)={0x1f, 0x5, &(0x7f0000000bc0)=ANY=[@ANYBLOB="1800000000000000000000000000000085000000a8000000850000009e00000095"], &(0x7f0000000b00)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x1a, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000340)={r4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x20000000, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x50) 1.367512284s ago: executing program 0 (id=16747): r0 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r0, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000480)=ANY=[@ANYBLOB="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", @ANYRES32=0x0, @ANYRES32=0x0, @ANYBLOB="000000000000000050001100fe8000000000000000000000000000aaac14140000000000000000000000000000000000000000000000000000000000ff010000000000000000000000000001000000000000000000000200"], 0xa0}}, 0x0) r1 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) sendmsg$NL802154_CMD_DEL_SEC_LEVEL(r1, &(0x7f0000000440)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000000)=ANY=[], 0x58}, 0x1, 0x0, 0x0, 0x8000}, 0x0) 1.163870886s ago: executing program 5 (id=16749): r0 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_IPV6_ADDRFORM(r0, 0x29, 0x1, 0x0, 0x0) (async) r1 = socket$nl_generic(0x10, 0x3, 0x10) (async) r2 = syz_genetlink_get_family_id$mptcp(&(0x7f0000000140), 0xffffffffffffffff) sendmsg$MPTCP_PM_CMD_SET_LIMITS(r1, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000400)={0x1c, r2, 0x1, 0x0, 0x0, {}, [@MPTCP_PM_ATTR_SUBFLOWS={0x8}]}, 0x1c}}, 0x0) 1.111461264s ago: executing program 0 (id=16750): r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000000), 0x40241, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000200)={'syzkaller1\x00', 0xc201}) r1 = socket$kcm(0x2, 0x3, 0x2) ioctl$XFS_IOC_ATTRMULTI_BY_HANDLE(r0, 0x4048587b, &(0x7f00000006c0)={{r0, &(0x7f0000000080)='&#@\'\'[-^{/^/.^+^\x11\x00', 0x101000, &(0x7f00000000c0)={@_ha_fsid={[0x81, 0xf06a]}, {0x6, 0x5, 0x7, 0x10}}, 0x0, &(0x7f0000000100), &(0x7f0000000140)=0x4}, 0x5, &(0x7f0000000600)=[{0x3, 0x7, &(0x7f0000000180)='\xff\xff\xff\xff\xff\xff', &(0x7f0000000240)="8abd899eac14972600bfde18dd11d880edd0d23ebf10da185f83ee8955a6e033344ce80d4de5f688f8d4be6010bfa67e7f97c29878600ae1923ff15605e9ff3f1ef63a269f11d4f3d3b9e66f16ee0420d48a237cc50691ba3953586442a205007ce8ba36e7cd1645a4174a3556d7140d8b0305f602d647ec962f696e02b5c7002f1f865aa5be358c006822868a33", 0x8e, 0x30}, {0x2, 0xa, &(0x7f00000001c0)='-$&\x00', &(0x7f0000000300)="3d20d5a7ffceec1e5f8e3ea5312c5e5957073dbc82c929b6c994385fdc08a3ee94e30c1f4d4a28beb354b37ec878987c47828d7a2ffd300f291534a6db5c95673d9c2805c4860e850a1f20b0e21b96b2432d23bb5523b7d38c", 0x59, 0x8}, {0x3, 0x3, &(0x7f0000000380)='/dev/net/tun\x00', &(0x7f00000003c0)="4b38b7e4efb356f96947931e1058c5318db11cc956ea3c293d17684d246b55cddd132d130034208df7e6893fcdff41c3b911e97dc2d87d541ffe9c5adc1c14bc21027928164efd0a217f6aa3081a94de9d3ad885cdf8846ed12e10524dd8f732eaac5d3e4b76f56574767ab2fe84a52026e57fdf80b0d075d52e029cab61f5ee289b71387a6a95f897c34f", 0x8b, 0x31}, {0x2, 0x8, &(0x7f0000000480)='syzkaller1\x00', &(0x7f00000004c0)="a390998a463a7e468895a55c6799c311b2560b431caed5a5de39542130341fb88eac51d47725c8570d3ff1fe8dedb09ab09fbd38f1de8e6960f701da7fb509518efad4b7454e8b4d1acbb19e46c4768724bac1d86cbd34cdbc410aecb3e176c156282a7444d44bd01a140b420923ecf63c9850", 0x73, 0x10}, {0x2, 0x80, &(0x7f0000000540)='\xff\xff\xff\xff\xff\xff', &(0x7f0000000580)="663420940920c31fa9fb41731c69bb01117d4701cf4d779a8829d770a455dfdcb537edf495a9f1d4b7e72728166aa56ef3f9aefbc712ea23e6d3b2ef0d66a5ed70620c7f75b2826ef6b6ab", 0x4b, 0x28}]}) r3 = syz_genetlink_get_family_id$mptcp(&(0x7f0000000780), 0xffffffffffffffff) sendmsg$MPTCP_PM_CMD_SET_LIMITS(r2, &(0x7f0000000880)={&(0x7f0000000740)={0x10, 0x0, 0x0, 0x48088987}, 0xc, &(0x7f0000000840)={&(0x7f00000007c0)={0x4c, r3, 0x200, 0x70bd25, 0x25dfdbfc, {}, [@MPTCP_PM_ATTR_ADDR={0x20, 0x1, 0x0, 0x1, [@MPTCP_PM_ADDR_ATTR_PORT={0x6, 0x5, 0x4e22}, @MPTCP_PM_ADDR_ATTR_ADDR6={0x14, 0x4, @mcast1}]}, @MPTCP_PM_ATTR_SUBFLOWS={0x8, 0x3, 0x7}, @MPTCP_PM_ATTR_LOC_ID={0x5, 0x5, 0x3}, @MPTCP_PM_ATTR_LOC_ID={0x5, 0x5, 0x5}]}, 0x4c}, 0x1, 0x0, 0x0, 0x8000}, 0x8080) ioctl$SIOCSIFHWADDR(r1, 0x8914, &(0x7f0000000040)={'syzkaller1\x00', @broadcast}) sendmsg$RDMA_NLDEV_CMD_SYS_GET(r2, &(0x7f00000009c0)={&(0x7f00000008c0)={0x10, 0x0, 0x0, 0x40000000}, 0xc, &(0x7f0000000980)={&(0x7f0000000900)={0x60, 0x1406, 0x8, 0x70bd2c, 0x25dfdbfc, "", [@RDMA_NLDEV_ATTR_DEV_INDEX={0x8, 0x1, 0x1}, @RDMA_NLDEV_ATTR_DEV_INDEX={0x8}, @RDMA_NLDEV_ATTR_DEV_INDEX={0x8}, @RDMA_NLDEV_ATTR_DEV_INDEX={0x8, 0x1, 0x2}, @RDMA_NLDEV_ATTR_DEV_INDEX={0x8, 0x1, 0x1}, @RDMA_NLDEV_ATTR_DEV_INDEX={0x8}, @RDMA_NLDEV_ATTR_DEV_INDEX={0x8, 0x1, 0x1}, @RDMA_NLDEV_ATTR_DEV_INDEX={0x8}, @RDMA_NLDEV_ATTR_DEV_INDEX={0x8}, @RDMA_NLDEV_ATTR_DEV_INDEX={0x8, 0x1, 0x1}]}, 0x60}, 0x1, 0x0, 0x0, 0x81}, 0x8800) write$tun(r0, &(0x7f0000001800)={@val={0x8, 0x800}, @val={0x3, 0x0, 0x0, 0x0, 0x14}, @ipv4=@generic={{0x5, 0x4, 0x1, 0x2b, 0x30, 0x68, 0x0, 0x60, 0x67, 0x0, @initdev={0xac, 0x1e, 0x0, 0x0}, @broadcast}, "21f3305280f125e6e11a9314b296b53b5d25867c0a8c27b6478984da"}}, 0xfdef) 1.109499095s ago: executing program 6 (id=16751): r0 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_tcp_int(r0, 0x6, 0x13, &(0x7f0000000100)=0x100000001, 0x4) (async) connect$inet6(r0, &(0x7f0000000080)={0xa, 0x1, 0x0, @loopback}, 0x1c) setsockopt$inet6_tcp_TCP_ULP(r0, 0x6, 0x1f, &(0x7f0000000280), 0x3) getsockopt$bt_hci(r0, 0x11a, 0x4, 0x0, 0x0) (async) r1 = socket$nl_route(0x10, 0x3, 0x0) (async) r2 = socket$inet6_udp(0xa, 0x2, 0x0) ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f0000000c80)={'lo\x00', 0x0}) sendmsg$nl_route_sched(r1, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000340)=@newqdisc={0x44, 0x24, 0x4ee4e6a52ff56541, 0x70bd2d, 0x0, {0x0, 0x0, 0x0, r3, {0x0, 0xffe0}, {0xffff, 0xffff}, {0x10, 0x3}}, [@qdisc_kind_options=@q_gred={{0x9}, {0x14, 0x2, [@TCA_GRED_DPS={0x10, 0x3, {0x4, 0x3, 0x0, 0x1}}]}}]}, 0x44}, 0x1, 0x0, 0x0, 0x51}, 0x0) (async) r4 = socket$inet6(0xa, 0x3, 0xff) r5 = socket$nl_route(0x10, 0x3, 0x0) (async, rerun: 32) r6 = socket$netlink(0x10, 0x3, 0x0) (async, rerun: 32) r7 = socket(0x10, 0x3, 0x0) syz_emit_ethernet(0x27e, &(0x7f0000000a00)={@broadcast, @multicast, @void, {@ipv6={0x86dd, @gre_packet={0x7, 0x6, "642a01", 0x248, 0x2f, 0xff, @loopback, @private1, {[@dstopts={0x2, 0x8, '\x00', [@jumbo={0xc2, 0x4, 0x81}, @enc_lim={0x4, 0x1, 0x8}, @calipso={0x7, 0x20, {0x0, 0x6, 0x4, 0x9, [0x7c95b187, 0x7, 0x3]}}, @hao={0xc9, 0x10, @remote}, @enc_lim={0x4, 0x1, 0xe}]}], {{0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x1, 0x880b, 0x43, 0x0, [0x200], "f9230bed43a8d10bace8c163dadb186d6e53f906518c4e6cc0459c4002b464ffb9b9123eec2e6220c9aab9ffd6cdf047a668573edae33d30233670200ca9567cb22364"}, {0x1, 0x0, 0x1, 0x1, 0x0, 0x0, 0x800, [0x3], "3e73325bb0fcc3678190cc9b3d2fc52a367541baaab3a6a454b66991ef9e98b3030f1cd5eef5cfbe4c785bc46395ac6fa03d51f351f7b99c19dea7ac51383a2c7010badd2ec7fb10c0b3cc62dac16e7c19f24d5af8f25bc313edaf3a7c298cfdccaeb3d8c45652774b6e1120d67710fb001b90d21a6f571d1c9147ce70a037faae1067465859bc90f840386d9936b4ee625827152b126318cf6d33e5c721ed72661f0466fcd9b4ca60fc6a7b847df07653e8f970d279d477d69a540d2e6230d2ae02aa35ce"}, {0x1, 0x0, 0x1, 0x1, 0x0, 0x0, 0x86dd, [0x7], "e2b5b001ab672f071214475ca92b"}, {0x8, 0x88be, 0x4, {{0x0, 0x1, 0x80, 0x2, 0x0, 0x3, 0x4, 0x7}, 0x1, {0x8}}}, {0x8, 0x22eb, 0x0, {{0x4, 0x2, 0xc, 0x0, 0x1, 0x0, 0x6, 0xdd}, 0x2, {0x4, 0x3ff, 0x3, 0x5, 0x1, 0x0, 0x1, 0x0, 0x1}}}, {0x8, 0x6558, 0x3, "4d1801ed050b7b70d5a0798760195afda82809f2479cddb591ac89901472009da6dd9ed8f26f8a5d9bdff00d506f8095e2345c5496e2cd8166d734ab0019ef2f7d229f20aad2b08f9bbf4315626f26dd34664fce32fdcce20041996656d41189bfab20d515b4f83ae4c80739a0dfa22e2af07d12bcbec2639239ef5dc4f070a850e238d38cbb5ca3081c60e2c3583d0c791ec4b82d1714327bc27341b4c87f23"}}}}}}}, &(0x7f00000001c0)={0x1, 0x1, [0x113, 0xb7a, 0x871, 0xaf5]}) (async) sendmsg$nl_route_sched(r7, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000100)={0x0, 0x14}}, 0x0) (async, rerun: 32) getsockname$packet(r7, &(0x7f00000002c0)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000100)=0x14) (rerun: 32) sendmsg$nl_route(r6, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000080)=ANY=[@ANYBLOB="480000001000050700000000d7c0d6eb00000000", @ANYRES64=r2, @ANYBLOB="0000000000000000280012000c00010076657468"], 0x48}}, 0x0) (async, rerun: 32) sendmsg$nl_route_sched(r5, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000300)=@gettfilter={0x24, 0x25, 0x6ce324a938346939, 0x70bd27, 0x0, {0x0, 0x0, 0x0, r8, {}, {0x0, 0xffff}, {0x0, 0x3}}}, 0x24}}, 0x0) (rerun: 32) r9 = socket$inet6_sctp(0xa, 0x1, 0x84) setsockopt(r9, 0x84, 0x81, &(0x7f0000000280)="1a00000002000000", 0x8) (async) r10 = socket$inet_mptcp(0x2, 0x1, 0x106) connect$inet(r10, &(0x7f0000000040)={0x2, 0x4e21, @local}, 0x10) (async) setsockopt$inet_int(r10, 0x0, 0x1, &(0x7f00000009c0)=0x1234, 0x4) (async) setsockopt$inet_sctp6_SCTP_AUTH_CHUNK(r9, 0x84, 0x15, &(0x7f0000000640)={0x5}, 0x1) setsockopt$inet_sctp6_SCTP_AUTH_CHUNK(r9, 0x84, 0x15, &(0x7f00000000c0)={0x5}, 0x1) ioctl$sock_SIOCINQ(r4, 0x541b, &(0x7f0000000040)) (async) sendmsg$nl_route_sched(r1, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000600)=@newqdisc={0x170, 0x24, 0xd0f, 0x200001, 0x0, {0x60, 0x0, 0x0, r3, {0x0, 0xffe0}, {0xffff, 0xffff}, {0x0, 0xfff3}}, [@qdisc_kind_options=@q_gred={{0x9}, {0x140, 0x2, [@TCA_GRED_PARMS={0x38, 0x1, {0xff, 0x4, 0x400, 0x0, 0x81, 0x101, 0x7, 0xc40, 0x7fffffff, 0xfffffffd, 0x20, 0xb, 0xe, 0x6, 0xca11, 0x6}}, @TCA_GRED_STAB={0x104, 0x2, "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"}]}}]}, 0x170}, 0x1, 0x0, 0x0, 0x240400d0}, 0x24008004) 1.015114148s ago: executing program 1 (id=16752): r0 = socket$nl_route(0x10, 0x3, 0x0) ioctl$XFS_IOC_ATTRMULTI_BY_HANDLE(r0, 0x4048587b, &(0x7f00000018c0)={{r0, &(0x7f0000000100)='@-\x00', 0x5d0400, &(0x7f0000000140)={@_ha_fsid={[0xc, 0x200]}, {0x9, 0xff89, 0x2, 0x3}}, 0x5, &(0x7f0000000240), &(0x7f0000000280)=0x9}, 0x3, &(0x7f00000004c0)=[{0x2, 0x1000, &(0x7f0000000380)='ct\x00', &(0x7f00000003c0)="31e86fef278384dd05e47f74e9f9aee7a2d33c77f290b079350d0a7b4332013679f93088046b510e4ea3affb271edddfb665c24f21c468faf8f152df7c10c9263f7d73a74f9f918b9d1b74a8df5d4856b84e792d0aba3344db570874b6d108a854dbf4f595b3ca8c497b63c6", 0x6c, 0x28}, {0x0, 0x7, &(0x7f0000000440)='\x00', &(0x7f0000000800)="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", 0x1000, 0x30}, {0x2, 0xa, &(0x7f0000000480)='ife\x00', &(0x7f0000001800)="94af5c318dabd4f07fcdb27c3c6f0ffde52a959370b375de252ad4cec582dc2d439b2676eac4a3ef8ba793cc349b68d67a7d3414afa49a80d7bac3403c813904b1ec366f51c5d631ef4470242107389ac465c9628662608bb64fa9b85e48940f2f04fd91e182678011c3796ae0a5c78f0f67bc83219d37c070bd5424b24c8468be6c5b11d33bc8952cfe2b93f462c1d4b1fc0cba863ccd5227b35c419a189deaf30d24897f8dabcade", 0xa9, 0x20}]}) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000100)={0xffffffffffffffff, 0xffffffffffffffff}) getsockopt$sock_cred(r3, 0x1, 0x11, &(0x7f0000001fc0)={0x0}, &(0x7f0000002000)=0xc) sendmmsg$unix(r2, &(0x7f0000001d40)=[{{0x0, 0x0, &(0x7f0000000e40)=[{&(0x7f0000000240)="af", 0x1}], 0x1}}, {{0x0, 0x0, 0x0, 0x0, &(0x7f00000014c0)=ANY=[@ANYBLOB="1c000000000000000100000002000000", @ANYRES32=r4, @ANYRES32=0x0, @ANYRES32=0x0, @ANYBLOB="0000000000000000000100000001000000000000", @ANYRES32=r2, @ANYBLOB='\x00\x00\x00\x00'], 0x38}}], 0x2, 0x801) write$cgroup_pid(r1, &(0x7f0000001940)=r4, 0x12) r5 = socket$key(0xf, 0x3, 0x2) sendmsg$key(r5, &(0x7f0000000040)={0x3, 0x0, &(0x7f0000000340)={&(0x7f0000000180)=ANY=[@ANYBLOB="02030003120000002cbd7000fcdbdf2503000900800000001cdc0dca1d9f68846960e56de42944af05000600000000000a0000000000000000000000000000000000000000000001020000000000000002000100000000000007000c0000000005000500000000000a00000000000000000000000000000000000000000000010700000000000000010014"], 0x90}, 0x1, 0x7}, 0x0) socket$nl_netfilter(0x10, 0x3, 0xc) r6 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r6, &(0x7f0000000580)={0x0, 0x0, &(0x7f0000000540)={&(0x7f00000002c0)=@ipv6_getnexthop={0x18, 0x6a, 0x1}, 0x18}}, 0x0) r7 = syz_init_net_socket$bt_l2cap(0x1f, 0x2, 0x0) r8 = socket$phonet_pipe(0x23, 0x5, 0x2) r9 = socket$phonet_pipe(0x23, 0x5, 0x2) bind$phonet(r9, &(0x7f0000000040)={0x23, 0x14}, 0x10) r10 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r10, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000002c0)={{0x14}, [@NFT_MSG_NEWTABLE={0x20, 0x0, 0xa, 0x3, 0x0, 0x0, {0x7}, [@NFTA_TABLE_NAME={0x9, 0x1, 'syz0\x00'}]}, @NFT_MSG_NEWSET={0x5c, 0x9, 0xa, 0x409, 0x0, 0x0, {0x7}, [@NFTA_SET_ID={0x8}, @NFTA_SET_NAME={0x9, 0x2, 'syz1\x00'}, @NFTA_SET_TABLE={0x9, 0x1, 'syz0\x00'}, @NFTA_SET_KEY_LEN={0x8, 0x5, 0x1, 0x0, 0x31}, @NFTA_SET_EXPR={0x20, 0x11, 0x0, 0x1, @quota={{0xa}, @val={0x10, 0x2, 0x0, 0x1, [@NFTA_QUOTA_BYTES={0xc, 0x1, 0x1, 0x0, 0x8}]}}}]}], {0x14, 0x11, 0x1, 0x0, 0x0, {0x0, 0x84}}}, 0xa4}, 0x1, 0x0, 0x0, 0x4008084}, 0x0) poll(&(0x7f0000001980)=[{r2}], 0x1, 0x7) bind$phonet(r8, &(0x7f0000000000)={0x23, 0x4}, 0x10) r11 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPCTNL_MSG_CT_DELETE(r11, &(0x7f0000003dc0)={0x0, 0x0, &(0x7f0000003d80)={&(0x7f0000003c40)={0x30, 0x2, 0x1, 0x201, 0x0, 0x0, {0x2, 0x0, 0x9}, [@CTA_TUPLE_REPLY={0x10, 0x2, 0x0, 0x1, [@CTA_TUPLE_PROTO={0xc, 0x2, 0x0, 0x1, {0x5, 0x1, 0x3a}}]}, @CTA_FILTER={0xc, 0x19, 0x0, 0x1, [@CTA_FILTER_REPLY_FLAGS={0x8, 0x2, 0x8}]}]}, 0x30}, 0x1, 0x0, 0x0, 0x1}, 0x50) bpf$BPF_BTF_LOAD(0x12, &(0x7f00000019c0)={&(0x7f0000001a00)={{0xeb9f, 0x1, 0x0, 0x18, 0x0, 0x2c, 0x2c, 0x5, [@restrict, @func_proto={0x0, 0x1, 0x0, 0xd, 0x0, [{0x0, 0x3}]}, @restrict={0x1}]}, {0x0, [0x5f, 0x0, 0x0]}}, 0x0, 0x49, 0x0, 0xa, 0xa57}, 0x28) ioctl$BTRFS_IOC_QUOTA_CTL(r9, 0xc0109428, &(0x7f00000000c0)={0x2, 0x1}) close(0x3) getsockopt$bt_BT_SECURITY(r7, 0x6, 0x4, 0x0, 0xf0ff1f00000000) sendmsg$nl_route_sched(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000580)=@newtaction={0x24c, 0x30, 0x1, 0x0, 0x0, {}, [{0x238, 0x1, [@m_ct={0x2c, 0x2, 0x0, 0x0, {{0x7}, {0x4}, {0x4}, {0xc}, {0xc}}}, @m_ife={0x54, 0x1, 0x0, 0x0, {{0x8}, {0x2c, 0x2, 0x0, 0x1, [@TCA_IFE_PARMS={0x1c, 0x1, {{}, 0xe4}}, @TCA_IFE_DMAC={0xa, 0x3, @broadcast}]}, {0x4}, {0xc}, {0xc}}}, @m_nat={0x1b4, 0xc, 0x0, 0x0, {{0x8}, {0x144, 0x2, 0x0, 0x1, [@TCA_NAT_PARMS={0x28, 0x1, {{0x6211cb98, 0x0, 0x4, 0x5, 0x1ff}, @loopback, @initdev={0xac, 0x1e, 0x0, 0x0}, 0xff, 0x1}}, @TCA_NAT_PARMS={0x28, 0x1, {{0x9, 0xffff0000, 0x4, 0xd, 0x6}, @initdev={0xac, 0x1e, 0x1, 0x0}, @initdev={0xac, 0x1e, 0x0, 0x0}, 0xff0000ff, 0x1}}, @TCA_NAT_PARMS={0x28, 0x1, {{0x9, 0x0, 0x3, 0x6, 0x1}, @initdev={0xac, 0x1e, 0x0, 0x0}, @multicast2, 0xff000000}}, @TCA_NAT_PARMS={0x28, 0x1, {{0x93, 0x4, 0x6, 0x8c42, 0x9f4}, @local, @remote, 0x0, 0x1}}, @TCA_NAT_PARMS={0x28, 0x1, {{0x0, 0x7, 0x1, 0x9, 0xe}, @dev={0xac, 0x14, 0x14, 0x1a}, @initdev={0xac, 0x1e, 0x0, 0x0}, 0xffffff00}}, @TCA_NAT_PARMS={0x28, 0x1, {{0x7ff, 0xfff, 0x2, 0xe000, 0x2}, @multicast1, @rand_addr=0x64010100}}, @TCA_NAT_PARMS={0x28, 0x1, {{0x5, 0x7, 0x4, 0x2, 0x5}, @private=0xa010102, @rand_addr=0x64010102, 0xffffff00}}, @TCA_NAT_PARMS={0x28, 0x1, {{0x1, 0x3, 0x7, 0x6, 0x2}, @private=0xa010102, @loopback, 0xffffff00, 0x800}}]}, {0x4b, 0x6, "dd1f9ce6c137f0f088e7e6baabc747eb6106674069132dc847dc69eb0c5d97fd2a86d03ab1ecf74f1d9773d617bce6cf1aa66b3f5330ba1465791b94d754d61a942057d76f3cd5"}, {0xc, 0x7, {0x1, 0x1}}, {0xc}}}]}]}, 0x24c}}, 0x0) 984.417745ms ago: executing program 5 (id=16753): r0 = socket(0x840000000002, 0x3, 0xff) sendmmsg$inet(r0, &(0x7f0000000280)=[{{&(0x7f00000001c0)={0x2, 0x4e20, @remote}, 0x10, &(0x7f0000000400)=[{&(0x7f0000000240)="00000000e5c06417e58f2aaa43f325e4ae709296", 0x14}], 0x1}}, {{&(0x7f0000000040)={0x2, 0x4e21, @loopback}, 0x10, 0x0, 0x0, &(0x7f0000000440)=[@ip_tos_int={{0x14, 0x0, 0x1, 0xffff}}], 0x18}}], 0x2, 0x20004086) sendmsg$BATADV_CMD_GET_ROUTING_ALGOS(r0, &(0x7f0000000100)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x2}, 0xc, &(0x7f00000000c0)={&(0x7f0000000080)={0x2c, 0x0, 0x400, 0x70bd2d, 0x25dfdbfb, {}, [@BATADV_ATTR_GW_MODE={0x5, 0x33, 0x3}, @BATADV_ATTR_BRIDGE_LOOP_AVOIDANCE_ENABLED={0x5, 0x2e, 0x1}, @BATADV_ATTR_NETWORK_CODING_ENABLED={0x5}]}, 0x2c}, 0x1, 0x0, 0x0, 0x4000}, 0x20040002) pipe(&(0x7f0000000140)={0xffffffffffffffff}) r2 = socket$inet6_sctp(0xa, 0x1, 0x84) r3 = socket(0x2, 0x80805, 0x0) getsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX3(r3, 0x84, 0x6f, &(0x7f0000000000)={0x0, 0x10, &(0x7f0000000380)=[@in={0x2, 0x0, @initdev={0xac, 0x1e, 0x0, 0x0}}]}, &(0x7f0000000180)=0x10) getsockopt$inet_sctp_SCTP_MAX_BURST(r3, 0x84, 0x14, &(0x7f0000000000)=@assoc_value={0x0}, &(0x7f0000001080)=0x8) getsockopt$inet_sctp6_SCTP_AUTH_ACTIVE_KEY(r2, 0x84, 0x18, &(0x7f0000000040)={r4, 0x49}, &(0x7f0000000580)=0x8) getsockopt$inet_sctp6_SCTP_PRIMARY_ADDR(r1, 0x84, 0x6, &(0x7f0000000300)={r4, @in6={{0xa, 0x4e23, 0x8000, @loopback, 0x369}}}, &(0x7f0000000180)=0x84) 957.039079ms ago: executing program 2 (id=16754): r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000000), 0x40241, 0x0) r1 = socket(0xa, 0x3, 0x3a) socket$nl_route(0x10, 0x3, 0x0) r2 = socket$nl_crypto(0x10, 0x3, 0x15) sendmsg$nl_crypto(r2, &(0x7f0000000200)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000240)=ANY=[@ANYBLOB="e8000000110001"], 0xe8}}, 0x0) r3 = socket$nl_route(0x10, 0x3, 0x0) r4 = socket(0x10, 0x803, 0x0) ioctl$sock_SIOCETHTOOL(0xffffffffffffffff, 0x89f1, &(0x7f00000002c0)={'ip6_vti0\x00', 0x0}) write$cgroup_devices(0xffffffffffffffff, &(0x7f0000000400)={'a', ' *:* ', 'w\x00'}, 0x8) sendmsg$nl_route(r4, &(0x7f00000006c0)={0x0, 0x0, &(0x7f0000000680)={0x0, 0x18}}, 0x0) socket$nl_route(0x10, 0x3, 0x0) getsockname$packet(r1, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000040)=0x14) sendmsg$nl_route(r3, &(0x7f0000000140)={0x0, 0x59, &(0x7f0000000280)={&(0x7f0000000340)=ANY=[@ANYBLOB="5000000010008105e9c51c000000000000000000", @ANYRES32=r5, @ANYRES32=r4, @ANYRES64=r3], 0x50}, 0x1, 0x0, 0x0, 0x80}, 0x4000040) bpf$MAP_UPDATE_ELEM(0x2, 0x0, 0x0) syz_genetlink_get_family_id$mptcp(0x0, r4) r6 = socket$packet(0x11, 0x2, 0x300) r7 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r7, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000440)=ANY=[@ANYBLOB="2c0000003f00019f2c3be61b046f47ae2fc9e7ccb604540a270004"], 0x2c}, 0x1, 0x0, 0x0, 0x4048011}, 0xc004) r8 = syz_init_net_socket$netrom(0x6, 0x5, 0x0) setsockopt$netrom_NETROM_T1(r8, 0x103, 0x1, &(0x7f00000000c0)=0x9, 0x4) r9 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r9, &(0x7f0000000580)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000000)=ANY=[@ANYBLOB="580000001000010400004000fedbdf2501f80000", @ANYRES32=0x0, @ANYBLOB="01020400000000002800128008000100736974001c00028008000200c6120001060008001900000005000a00fd000000080004000100010008000a00fa"], 0x58}}, 0x0) sendto$packet(r6, 0x0, 0x0, 0x44010, &(0x7f0000000180)={0x11, 0x1, r5, 0x1, 0x12, 0x6, @dev={'\xaa\xaa\xaa\xaa\xaa', 0x40}}, 0x14) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000200)={'syzkaller1\x00', 0xc201}) r10 = syz_init_net_socket$bt_sco(0x1f, 0x5, 0x2) bind$bt_sco(r10, &(0x7f0000000000)={0x1f, @fixed}, 0x8) setsockopt$bt_BT_DEFER_SETUP(r10, 0x112, 0x7, &(0x7f0000000100)=0x1, 0x4) ioctl$SIOCSIFHWADDR(0xffffffffffffffff, 0x8914, &(0x7f0000000180)={'syzkaller1\x00', @link_local={0x1, 0x80, 0xc2, 0x0, 0x0, 0xe}}) ioctl$sock_inet6_SIOCSIFADDR(r4, 0x8916, &(0x7f0000000080)={@local, 0x45, r5}) write$tun(r0, &(0x7f0000002480)={@val={0x0, 0x86dd}, @val={0x0, 0x1, 0x11, 0x4, 0x0, 0xca6}, @mpls={[], @ipv6=@tcp={0x8, 0x6, "e6f385", 0xf98, 0x6, 0x1, @private2={0xfc, 0x2, '\x00', 0x1}, @initdev={0xfe, 0x88, '\x00', 0x1, 0x0}, {[], {{0x4e20, 0x4e21, 0x41424344, 0x41424344, 0x1, 0x0, 0x5, 0x10, 0x8, 0x0, 0x61f}, {"b1586fc68f22d1a6c33d266643adb4b4643b8e8e20d1d6d973cac0e487a279f17460f333f5d492cb29516b051ce8847b230769faea5ab18148784fd66ede74334570c7ec696b8e23f1759cf2472911f3acb531235185e3aa6a20c31ae72b24eef408446fe27f32d9a1c07f0e27fd3c3dc0292ebc6cc4e426ade083000a6fdbcd21238f75764ba661dcdbccbba5cd5e76f21902ee33be697e8dc792a708bb607d8a7459bd376a752af3a4618b7ff99c81a8ddb1cad8c6a5e6dea0ec5a28046e6f8a0332b017cd65fd2a3183eb433df51aab60ccf781c982462b7e049a5b569a8209c4bcac4c63e066cbe983d8a319590cffffe4c3aa1f8a23430bee0f8f54042f7893677cc9effbbe0643037fbd199a8a59232f676413b120733b07c8d3fc41efc20565bed23cef90185a6a34ddedfb8eb47011809494b780291e12a0e5409910618a1f7477912651040b1d544486142894311abac9db242d0dd633c05343ccab932464b35a2bb21626b9a527511a1081912a2300594661cdb463523cb47d59ae4526f93255f9b2653160d5d980a38df15328c55ac548a7318c7cb115e72f1fcf5630fff574688d82bdb95000d9505f8585d14b060cc6fd6302ba896b7a72c62dd7966663458c44de49d85cd9fa5e0ed505ca2ad6863cd1c00389371da2422bf08614bfaae65f82aa297c2903d25f135b2049cfa4100d519a334016baf02bf3a4bfa6096236fd2549ea29e57d3b573308b1eafe47a27c3781612d99c5c9b2f8b2358779049eb3400f42fffbc776222bdb7b42da24611686b1ffbd896f767f3456dee52aec613a133bf6b58ba5181afe2f4bc5ff986b910d3ad2aed298055cffc58103f8a9dd9a81e76b343c766e07f730e722b38485300525e1e69d2dc9ca0b85e1855d19d5eb128a1e1f686f2438f87db5ae21e38c077afade803643b7f5d6d2621b152ec6536b98a7286ff93ff823cc848754517b5813f8a280d3382bfd3e538eca412d863f9f9f2382c8b168b7b087560553d22729b3f1becdd96648d52b2ff99540a0222c9ead9bcf45ddea00b81e098803f26850de1071bc2331bf33dc9dcf7906060e8537443e94cb96b38cad9c827171e129dce403e9d6830e82a9c6bd0be49b1615077a62b3e518dd03becda412027ffbcd21f96c8e4799561d11a535a037ee2787427d529a82952c89d08c3456c3a9d50cec5d5646e5c41bf91c4976c3b241c988664f147ed62e90b1a0e658e9b06b5cbd8fbaf42372fd1072aff7b9364de186c074c11d804c1a7b1bc558c0f6f305f2ae8d6c3ba830bf4eafbe495908d5229875b3587f05fbd57bcacb1d6a047dd6de09ea80796edae8c23c0ba4b7f0e93bae7c2e6f39b148a824523c7fd07eb1cb9a74e70c540276be7d2fc265f5ae4f37a9cbd98fe45194a65a09d5c77f58beef05e8c95e2a2a4de52c0c09d00f4e097e785bf6d29bc9c2bdfd821eb8626f1a8012cc0ce83afec8ff46097aba8433e8d4b66e6dba2ddc45b07e6c917fcc8835ba2152e7c87deceb02ba1f2eaf53b9d1ac655b50cb23e8b74a6cb5316cc57e70dcff35d8dcb093b13d86587c754cda6026e0d3313547802c62ff722d24fa61c1f9e346bfe8b141189cf843aa521ce063b40910fe9ffdf31e3974339e8b72fb1071429c4725c0db09bb91fb501c37a620df672dc1c863f134d6d768aeed941f086e8e2a83ed2b2dd893dad7c9909e6efc27b3788bd2ecadab5057ca333b8cd9a36dc1df825350204e7671ef5ec16156dbcba08686712a736be5e3b5273f1ba3cf33c4b046d46d6588d75d4fe0a8299a6dedb659546105529946242530d65496a35afad06eee751c9cfbe8fbc072462cb04806516cab0cbcc77968fdb902108a86bbfce0225e79fab6acf85498c07861c9d6dc4ef095644c31c8ecbbd84db8dcbcc415b639603ddf0ce8099f92ce3b3f8476ea846d1c1b455f48f1130518f7bd4b414fbcb7351f1e043ae5a939eb30dffcd70febc0229c965af59fb6104f651e5f5e822b096a2d448d755785d8d42caaea38f9851a9ac04370354562878472fb50f6eb548a180f48b54fd0f4b124b04760d1f6f579976c015b68457bbe227a4fd958e443337ff55eabbcc307c1ed72d9ba292d35a09fd39c3ac99137471fb8545cce7a2df3c2195b33b995a1ff8147f1c668a87709c5d9693a03a2296d4aaca7704cf7a1dacdd0e03b5b8330c9e7c63dd251d7283fa89fbec4c14e257a91f0f8f84bbded5ec0ad827b44a82a63afb060c22f87d56f06b00da010b5ce1c17193751cebea6ac1abfb1325dd5f68be79bc15b341f0b89d42a009c0a6a2758f53e56bf9742f76da71ae345a5526ccd8a4ce09102b0bc77e41165ce82a77629057465991e29f6b43e0e87991514ce66640837cbc5b9d3f72d53e48ffa2a88f19d529c86e96dd162cb2d7281f78dc2d7d35ed22130c91d89d2993babb5c1fd18ac8572414418b6dd2ad9849d53abf0ceda02dd03e368e3e2307314981fef619234e8824bfdc6755b617add58ccc4e2537fc5d934c3fb3bf656b34d320b21438f93a0506054922b6534f3b1fd15db6cba0cb9a8ce24c48273c67b7b319226b76c55c16aab9331597c8fc8ee3435b0ace7dbe7ccc498d2435f893419675ffad06a7e527f9386dfcda9dd6c38e5fe5f967645b2872407281307b26d58f8568205cde07e3e1c55058efafef0c7fb85052b999f22ee9ec5e9afa27964e25dada30b6edd14d29c8de2d21bf0dfc811c7d73f37a2673d3b766d1a8b188b405086d0ec1b1e40c4fbe17bf234350c5fcd989abd572cddd712716ddaee7d108cba720a93dbcf90aa1471ec8152a8f19d76905efae9488b82495030d8d97ac1337a3c0abc3f33f9623b860f724d10750189efa4c735bfdfd2bb4483e10f1ca4eb129d2f4c66c57b15cf1f188654059f689d02ffd36840db012156490cc3d2364f1a4391998e345b9301b368f80269252637f49ae8a4de2f7c94d9c9d2f8502c03b8c66cf8cc9f30439a3ec6c50578e568d2fd00f951b27019e83cfee8938347a73b8728cde023ec23d31ba902e0d892a8b47b874ced931d5090f37d44369abcb58849aa80bd8a971a3a5bb3476f50fbe02605d806ba1f3ed601236352d9cbfe80d8c795f35750d9b90cfa1c19344ac9bd9e267d5bd4b7e09cf91bed04c75e35a96938c0f2b295829c6f5569da82096055310cdfd81d27b022acc52d6465640dc0201e0688005dae25a17246e417e8015b488e0a7120486ac427f55a069fa0f404fbb4779665885b66bc2916e5ad3c8e25e2a05f0720c5989d45993da159ee414a1e5eff1880eeb21c45390d27369c57d4a3c6335f7391115f776a964a29757ebd4626562d1c8d617a7a5b4e2433722d84cf7ca8bf7891786407967abd1cb9c61773f440908df202d06e7a68641d873545bc17f3e2d99accbb48989d1dc85c53c33bda33f3a2aefec9e4c24cfad4fe88f1ea39f6925ca5565bb30c9f12d0a369633f20d642850d9fd25de0f10c304503e37f385d0c3909d7fdc1340d24cca1a3c214212c4a3b52f6fdf1feaae703b825302e6f635a91d484216258050b54e7ebbd03d4184eb532f94db08f974955452c1f87f85d3d2a689aea9b0e8cd2fca22851e2197b268f610c66a5a3e88e3bac00c19d9571cfc242606ed829030562bec84898ed343ad6b16fac0e321a8f4a4b8bb8da7c59e9610c70fb6c7612e6a1f8d0d110ae8273926cf34de586dde45a9e7607acebee8cecfc601cbefd3d5d40d85d4021ffc90f85f3a748841f1dcec2bc22641973c8a9d068f42427b7862c3753d64f884db08217342dce6eb0909f86ed838bb8d5c2d7d1d12a93a2ad94454a010141b75731c2328ce8f19979d2a58bb50b3b61401928f5f526870e5cc9859077ec3f6aa7053e30262daa196a36eefc5f4a583e9b6d19de59a387f06f43e082c06dae7ad9ef21e429eebf7c159f745b50c712c3dbdbd36df308fa7013e2711453c504e61debb58d0321a6e5b828c11dc660c6775f744fdd70fd068192a8b0ec71556af95e87246545dfcfc44104860ec314fa5577c5516187d31c713c9780f4580bacd6e1045a460f32116eb35a29cea35419601b1fa2bbfd311b433f8d7d844fa371bb2481541448621c45d5e2ea9acffd40e08106e9d41d90ede1c1c176bc040640c3198c489783843a5e34dfbdc88e277915bcad23132993a43904fbb91505abc9b20e02df64324ca4eef0d2c8b87785d1bd6017a954aaf1f0871336ee5e52cd7f30a1d0a61af8c6940277c1e60cc5bda9565e8aded8fce17543b687ff4a50238632718f10c7dd2288493d6918df0bb158e7716b4cc63b84a1cb1c287018c5b40632991e60e00dc666db622012b71836443d442925bf6501e2daf3dcf463c08975e8a3aab0a2d36def042c7aab6812a183d95db919f8e9664127c94d596dfa8117ce6dc67a845ad483ac0985ecc5217793a4341e2ec2e1facd20fb8657ccf7f53632db42af04c863d6bf2bcec829851141072df3449674b73a4649da45a86218962d14bbdd9b44ca9e20fb510bc148bde1bd1c02ed55087ff1b0701b81b69860382897303f900776792b16e856588c0c57b5a19aefdbc44e0ba22b4e13a015b7a7d0876f9d9dfcf27610a5e2f9aa80b6e7f3f84ba10f0f1ced4c89a3f83ae21445f707e0a11306cb4f25d3560eedcedbdb5cf54960e2f270c435de82b419e14c69af19349dd8af2d1e1b9dc1b326230115474cc114560795d4c2a5e7b08aa458a1ec42825a4bec101a4c11e1d853ae18c71156bd8809465a5e5f480cfc6cd6c01c5cc97e9e42e7a9e356c73ea9a9350c44f3aa41346e8c5545978e7b9a3f8b265eb08fe9ac32e388df8648bda31e2cbe6c95a72b1f1f02cfe56967dbbb397fef0a9f8f51588976437c7c4acfe908bc5c6d0ef2661d646f613bdab77b4664cdf493c3c17749fd871aeea50b9ae9240ab2c054473aec3cc122b9b9b8946da5fbfec87b36f5af373de194e08416e8e29e559828d67044ba2ee9d438d11b9ffeb1c079007f41e22593497b222c476c87615c2a02a42af4caa6aa0454208d6c1398978ee95ed4ae932e975fb508a63a2b9fb209c9c7c38848ca9fb431528c2006f3a331b718f3dc0c1c9c984c848bf375474eafff76215b562c6153d0d3102c2977344b39a06685652ccea39bc960ec071e2ea88ec81545d9c78874ff7f38566e5e3c3fde110a224135f330a7b7a132b276cf63a3dab4a91233c662d2623c2063a7a2a6104057cef28df1d311e41344cddb02c96859a84a42f0b76b45c9a43de389d42bdbd46dea7739f30d4560a34167dc6098c8e1f03a2af7553ae92b6367e11a41e49c96f63fb59f98e2e58781bdf3b63d05f66f7a8c23ee7827debbcabe4bfa3483ade4b30c8884cd0ad089dddde8bb937d96036c96eba485f9eb3daefd05e79a84c233e4bbfb4120d61b3d76e5f820f04d2f844eb073e239398b031c4650e3468391396460853b40b05a144c37a0bcda962a02ba02eb280ae921f07cc6d68a8d45b6e0173461227c872727e2fdfa0452904082004877d6f104821e7d7acd5387dec1c266eef406e5a412c1325e7a6f73838ba025602ad609b5d58e67"}}}}}}, 0xfce) 898.042966ms ago: executing program 6 (id=16755): socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$mptcp(&(0x7f0000000000), 0xffffffffffffffff) r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$mptcp(&(0x7f00000002c0), 0xffffffffffffffff) sendmsg$MPTCP_PM_CMD_ADD_ADDR(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000440)={&(0x7f0000000200)={0x14, r1, 0x1, 0x70bd29, 0x0, {0x7}}, 0x14}, 0x1, 0x0, 0x0, 0x80}, 0x4400d) r2 = socket$nl_route(0x10, 0x3, 0x0) bpf$BPF_PROG_WITH_BTFID_LOAD(0x5, &(0x7f0000000180)=@bpf_lsm={0x6, 0x3, &(0x7f0000000040)=ANY=[@ANYBLOB="18000000003f000000000000000000f195"], &(0x7f00000000c0)='syzkaller\x00', 0x0, 0x0, 0x0, 0x40f00}, 0x94) getsockopt$bt_hci(r2, 0x0, 0x3, &(0x7f0000000440)=""/209, &(0x7f0000000240)=0xd1) socket$nl_generic(0x10, 0x3, 0x10) (async) syz_genetlink_get_family_id$mptcp(&(0x7f0000000000), 0xffffffffffffffff) (async) socket$nl_generic(0x10, 0x3, 0x10) (async) syz_genetlink_get_family_id$mptcp(&(0x7f00000002c0), 0xffffffffffffffff) (async) sendmsg$MPTCP_PM_CMD_ADD_ADDR(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000440)={&(0x7f0000000200)={0x14, r1, 0x1, 0x70bd29, 0x0, {0x7}}, 0x14}, 0x1, 0x0, 0x0, 0x80}, 0x4400d) (async) socket$nl_route(0x10, 0x3, 0x0) (async) bpf$BPF_PROG_WITH_BTFID_LOAD(0x5, &(0x7f0000000180)=@bpf_lsm={0x6, 0x3, &(0x7f0000000040)=ANY=[@ANYBLOB="18000000003f000000000000000000f195"], &(0x7f00000000c0)='syzkaller\x00', 0x0, 0x0, 0x0, 0x40f00}, 0x94) (async) getsockopt$bt_hci(r2, 0x0, 0x3, &(0x7f0000000440)=""/209, &(0x7f0000000240)=0xd1) (async) 800.80532ms ago: executing program 5 (id=16756): r0 = socket$inet6_tcp(0xa, 0x1, 0x0) listen(r0, 0x9) getsockopt$inet6_tcp_int(r0, 0x6, 0x11, 0x0, &(0x7f0000002580)) (async) mmap(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x4000008, 0x8032, 0xffffffffffffffff, 0x0) 794.507463ms ago: executing program 6 (id=16757): r0 = bpf$PROG_LOAD(0x5, &(0x7f0000000100)={0xa, 0x4, &(0x7f0000000040)=ANY=[@ANYBLOB="1800000000000000000000000000000004890b00f7ffffff9500000000000000"], &(0x7f0000000000)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000080)={r0, 0x0, 0xfe, 0xb7, &(0x7f00000001c0)="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", &(0x7f00000002c0)=""/183, 0xe, 0x0, 0xf6, 0x1000, &(0x7f0000000380)="a02ff4398fe7b12836f0a299433e22aead572e2368297bb2362dbf9dddbd470200db0fc5e4f214fb33e612c05f33ebf78731feb24431d36f47da0ad179cb92db31975816db2075e1aeb4429c849e19fd95c265cf6ba8223c9a6a07dbdd28edb65b0f258c874afed4f10bfe3160c360b6152bbf426cba322317810dc915d77845b0166a8f4f1f31ec5f53e2793767ff48c10be2ce840a4d9b06fa9edd9f0b1076f7a22f3edacebd8d3a2adc49dbdcf52db5b41e36f0837ef83d44b7f5d2578244a4d4886d303ca7b756c6d4166ee8b485daa6053cd1b568eacdc15316fcf18e2f05e6cfc568ec87e88f6005066585080ccc513c65b997", &(0x7f0000000480)="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", 0x5, 0x0, 0x5}, 0x50) (async) socket$nl_route(0x10, 0x3, 0x0) 638.078679ms ago: executing program 0 (id=16758): r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r1, &(0x7f0000000480)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000580)=@updpolicy={0x1bc, 0x19, 0x1, 0x0, 0x0, {{@in6=@ipv4={'\x00', '\xff\xff', @empty}, @in=@remote, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff}, {0xff}}, [@tmpl={0x104, 0x5, [{{@in6=@mcast1, 0x4d2, 0x33}, 0xa, @in6=@empty, 0x3501, 0x1, 0x0, 0x3b, 0x83, 0x5, 0x7}, {{@in6=@local, 0x4d6, 0x3c}, 0xa, @in6=@private1, 0x3502, 0x2, 0x0, 0x7, 0x7f, 0x0, 0x4}, {{@in=@multicast1, 0x4d5, 0x6c}, 0x2, @in6=@empty, 0x3507, 0x4, 0x3, 0x3, 0x4, 0x2, 0x3}, {{@in6=@initdev={0xfe, 0x88, '\x00', 0x0, 0x0}, 0x4d3, 0x6c}, 0x2, @in=@private=0xa010100, 0x3502, 0x5, 0x0, 0xd1, 0xe, 0x47b, 0x3}]}]}, 0x1bc}}, 0x4000) r2 = socket$netlink(0x10, 0x3, 0x10) r3 = syz_genetlink_get_family_id$devlink(&(0x7f0000000040), 0xffffffffffffffff) sendmsg$DEVLINK_CMD_RATE_NEW(r2, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000700)={&(0x7f0000000300)={0x14, r3, 0x1, 0x0, 0x25dfdbfb, {0x25}}, 0x14}, 0x1, 0x0, 0x0, 0x41}, 0x0) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000100)=@newqdisc={0x48, 0x24, 0xf0b, 0x0, 0x25dfdc00, {0x60, 0x0, 0x0, 0x0, {}, {0x2, 0xffff}, {0xfff3, 0xffff}}, [@qdisc_kind_options=@q_cake={{0x9}, {0x18, 0x2, [@TCA_CAKE_BASE_RATE64={0xc, 0x2, 0x1ff}, @TCA_CAKE_AUTORATE={0x8, 0x9, 0x1}]}}]}, 0x48}, 0x1, 0x0, 0x0, 0x40014}, 0x10) r4 = openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0x305200, 0x0) close(r4) socket$unix(0x1, 0x1, 0x0) ioctl$SIOCSIFHWADDR(r4, 0x8922, &(0x7f0000002280)={'team_slave_1\x00', @random="2b0100004e03"}) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000100)=ANY=[@ANYBLOB="480000001000010400"/20, @ANYRES32=0x0, @ANYBLOB="00000000000000002800128009000100626f6e640000000018000280140008800800030001"], 0x48}}, 0x0) sendmmsg$inet(r0, &(0x7f0000005200)=[{{0x0, 0x4b, &(0x7f0000000000), 0x1}}], 0x1, 0x0) 636.723132ms ago: executing program 6 (id=16759): r0 = socket$netlink(0x10, 0x3, 0x0) r1 = bpf$MAP_CREATE(0x0, &(0x7f00000002c0)=ANY=[@ANYBLOB="15000000100000000400"/20, @ANYRES32=0x1, @ANYBLOB="5f0200"/20, @ANYRES32=0x0, @ANYRES32, @ANYBLOB="0000000006000000000003000000022ed9bf28000000000000000000"], 0x50) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000600)={0xb, 0x3, &(0x7f0000000140)=ANY=[@ANYBLOB="620ac4ff00000000711064000000000095"], &(0x7f0000000480)='GPL\x00'}, 0x90) (async) r2 = socket$inet6_udplite(0xa, 0x2, 0x88) ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f0000000180)={'team_slave_1\x00', 0x0}) (async) r4 = socket$nl_generic(0x10, 0x3, 0x10) (async) r5 = syz_genetlink_get_family_id$team(&(0x7f00000044c0), 0xffffffffffffffff) ioctl$ifreq_SIOCGIFINDEX_team(r4, 0x8933, &(0x7f0000004700)={'team0\x00', 0x0}) sendmsg$TEAM_CMD_OPTIONS_SET(r4, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000a00)=ANY=[@ANYBLOB='\\\x00\x00\x00', @ANYRES16=r5, @ANYBLOB="05042bbd7000fedbdf250100000008000100", @ANYRES32=r6, @ANYBLOB="400002803c00010024000100757365725f6c696e6b75705f656e61626c65640000000000000000000000000005000300060000000400040008000600", @ANYRES32=r3, @ANYBLOB="bbbeb9bb7fd2d6a873d7eed6b9cdb72c78ae205ddc6cf8f145de5cb349f76dc2819a2e9d1cf5e2ed50acba32ecabae9961c3faa6f0585396f9804ec60eb6abe06cab218b206ee7920c48d53cec5859c94463be8fcf93cc60ddce9f807c8c8d8e6f7441b7dd687f852484f7263e61ab53fbbbf86ca70b2b650381a6158cc930ab92b8d3284454996b75ac479e68641601cb090d3489c23c3152c273cb563fdf377afa38e4691926610128b5c8469fcebe0000"], 0x5c}}, 0x2404c080) ioctl$sock_ipv6_tunnel_SIOCDELTUNNEL(0xffffffffffffffff, 0x89f2, &(0x7f0000000100)={'ip6gre0\x00', &(0x7f0000000180)={'syztnl0\x00', 0x0, 0x29, 0x1, 0x0, 0x2, 0x66, @mcast1, @mcast1, 0x80, 0x8000, 0xffffffff, 0xffff}}) (async) ioctl$ifreq_SIOCGIFINDEX_batadv_hard(r0, 0x8933, &(0x7f0000000200)={'batadv_slave_1\x00', 0x0}) ioctl$ifreq_SIOCGIFINDEX_team(r0, 0x8933, &(0x7f0000000240)={'team0\x00', 0x0}) (async) r10 = socket(0x2a, 0x2, 0x0) bpf$MAP_CREATE(0x0, &(0x7f0000000e00)=ANY=[@ANYBLOB="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", @ANYRESOCT=r6, @ANYRESHEX=r10, @ANYRESHEX=r5, @ANYRES32=r2, @ANYRESHEX=r7, @ANYRES16=r3, @ANYRES32=r1], 0x48) getsockname$packet(r10, &(0x7f0000000200)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000001480)=0x14) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000380)=@newqdisc={0x24, 0x24, 0xf0b, 0x0, 0x0, {0x0, 0x0, 0x0, r11, {}, {0xffff, 0xffff}}}, 0x24}}, 0x0) (async) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000500)={&(0x7f0000000100)=@newtfilter={0x44, 0x2c, 0xd27, 0x0, 0x0, {0x0, 0x0, 0x0, r11, {0xfffa, 0xe}, {}, {0x1c, 0xfff9}}, [@filter_kind_options=@f_flower={{0xb}, {0x14, 0x2, [@TCA_FLOWER_KEY_ETH_TYPE={0x6, 0x8, 0x800}, @TCA_FLOWER_KEY_IP_PROTO={0x5, 0x9, 0x84}]}}]}, 0x44}}, 0x24004000) (async) r12 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r12, 0x8933, &(0x7f0000000100)={'geneve1\x00', 0x0}) (async) r14 = socket$packet(0x11, 0x3, 0x300) sendto$packet(r14, &(0x7f00000005c0)="bad330fbc9b55400040000ea0756", 0xe, 0x40, &(0x7f00000001c0)={0x11, 0x88a8, r13, 0x1, 0xd8, 0x6, @multicast}, 0x14) ioctl$ifreq_SIOCGIFINDEX_team(r0, 0x8933, &(0x7f0000000280)={'team0\x00', 0x0}) (async) r16 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r16, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000c40)=ANY=[@ANYBLOB="780000001000030400000000000000000000740085fdfbb0ce1df9fe1b279c9e00876283bfc5297aaa9a64614ddbd56af40e32e97050cf4b3d9d038ae49d20734875b78c0c69a514007450eb4db3e60c20f9a1173cecab635e5786cb0141976a9f5d4d28d1d33fc2944eea94579120b2475c12e086e2b843f36cf7f56e53daee13a5984acd46282b11afd751be71740205e301c3679c8701", @ANYRES32=0x0, @ANYBLOB="00e72f604a3f831e2fb1c4540000006000000058011280080001406730125b05adc80a08f8f98e04653ee1d01f77410a25b7138787aaebac1b877eb35adab2a6329ed1e6f0396cd9920c28f5ebfaa27a8715aed0388ca95f856af3f30f698c2b0a4a51fed133a7ecda58b73bb725a112a4d2b4181e44718411e08286613f7b7e0a68451ba065631ec40c8617876df291a9a94551a307d3e7daac3d54302c1acdd2dc888837394b31c94137a46ec1f6e23c09af098d2266a56a5b58e62a6355c7f38f0e416c2495d1d1c4ba2f898810", @ANYRES8=r7, @ANYBLOB, @ANYRESOCT=r16], 0x78}, 0x1, 0x0, 0x0, 0x4000}, 0x0) ioctl$ifreq_SIOCGIFINDEX_team(r0, 0x8933, &(0x7f0000000340)={'team0\x00', 0x0}) (async) getsockopt$inet_mreqn(0xffffffffffffffff, 0x0, 0x23, &(0x7f0000000380)={@empty, @dev, 0x0}, &(0x7f00000003c0)=0xc) sendmsg$TEAM_CMD_OPTIONS_SET(r0, &(0x7f0000000440)={&(0x7f00000000c0)={0x10, 0x0, 0x0, 0x100}, 0xc, &(0x7f0000000400)={&(0x7f00000006c0)=ANY=[@ANYBLOB="0c030000", @ANYRES16=r5, @ANYBLOB="01002dbd7000fddbdf250100000008000100", @ANYRES32=r7, @ANYBLOB="b400028038000100240001006c625f73746174735f726566726573685f696e74657276616c000000000000000500030003000000080004000600000038000100240001006e6f746966795f70656572735f696e74657276616c00000000000000000000000500030003000000080004000400000040000100240001006c625f706f72745f737461747300000000000000000000000000000000000000050003000b000000080004000004000008000600", @ANYRES32=r8, @ANYBLOB="08000100", @ANYRES32=0x0, @ANYBLOB="3c00028038000100240001006d636173745f72656a6f696e5f636f756e7400000000000000000000000000000500030003000000080004000900000008000100", @ANYRES32=r9, @ANYBLOB="34010280400001002400010071756575655f69640000000000000000000000000000000000000000000000000500030003000000080004000100000008000600", @ANYRES32=r17, @ANYBLOB="400001002400010071756575655f69640000000000000000000000000000000000000000000000000500030003000000080004000000000008000600", @ANYRES32=r13, @ANYBLOB="40000100240001006c625f74785f686173685f746f5f706f72745f6d617070696e67000000000000050003000300000008000400", @ANYRES32=r15, @ANYBLOB="080007000000000038000100240001006d636173745f72656a6f696e5f696e74657276616c00000000000000000000000500030003000000080004000100000038000100240001006c625f73746174735f726566726573685f696e74657276616c000000000000000500030003000000080004003b00000008000100", @ANYRES32=r17, @ANYBLOB="b400028038000100240001006e6f74696679e01f713b9113135f706565727462000074657276616c00000000000000000000000500030003000000080004000300000040000100240001007072696f726974790000c2104ad0c300000000000000000000000000000000000000000000050003009f00000008000400f0ffffff08000600", @ANYRES32=r18, @ANYBLOB="38000100240001006e6f746966795f70656572735f636f756e74000000000000000000000000000005000300030000000800040065530000"], 0x30c}, 0x1, 0x0, 0x0, 0x4010}, 0x1) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$sock_SIOCGIFINDEX(r19, 0x8933, &(0x7f0000000000)={'macsec0\x00'}) sendmsg$nl_route(r0, &(0x7f00000004c0)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000540)=ANY=[@ANYRESHEX=r11, @ANYRES16, @ANYRES64=r12], 0x3c}, 0x1, 0x0, 0x0, 0x90}, 0xc4) 556.452401ms ago: executing program 5 (id=16760): r0 = socket$inet6(0xa, 0x2, 0x0) setsockopt$inet6_IPV6_DSTOPTS(r0, 0x29, 0x3b, 0x0, 0x8) bind$inet6(r0, &(0x7f0000f5dfe4)={0xa, 0x4e20, 0x0, @empty}, 0x1c) (async) r1 = socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$batadv(&(0x7f0000000040), r1) sendmsg$BATADV_CMD_GET_NEIGHBORS(r1, &(0x7f0000004340)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000002c0)=ANY=[@ANYBLOB="1c000000", @ANYBLOB="cbf891d6076e7b7de6a5b5a840213c530d845fc15c601ef67ce408a39d8ae60a4024d962b9593cec6ee287752648cf072335e710d6eb563536ec8fb5d1a995a802c67d388ed45f37c18fc1fe3b77cdd25394271e467d3b125dbb24d106b32d37aadc8fac360fadd605a6e58e1338", @ANYBLOB="310300000000fbdbdf250b"], 0x1c}, 0x1, 0x0, 0x0, 0x4008000}, 0x4000000) (async) shutdown(r0, 0x0) recvmmsg(r0, 0x0, 0x0, 0x4000002b, 0x0) r2 = socket$l2tp(0x2, 0x2, 0x73) bind$inet(r2, &(0x7f0000000080)={0x2, 0x0, @multicast1}, 0x10) (async) connect$inet(r2, &(0x7f0000000200)={0x2, 0x0, @local}, 0x10) (async) sendmmsg$inet(r2, &(0x7f0000000900)=[{{0x0, 0x0, 0x0}}], 0x40000cf, 0x0) (async) r3 = socket$nl_route(0x10, 0x3, 0x0) (async) r4 = socket$netlink(0x10, 0x3, 0x0) setsockopt$netlink_NETLINK_DROP_MEMBERSHIP(r4, 0x10e, 0xc, &(0x7f0000000080)=0x1, 0x4) sendmsg$netlink(r4, &(0x7f0000000480)={0x0, 0x0, &(0x7f0000000000)=[{&(0x7f0000000200)=ANY=[@ANYBLOB="1c00000022004106000000000000000105000000000000fc"], 0x1c}], 0x1}, 0x0) ioctl$sock_ipv6_tunnel_SIOCCHGTUNNEL(r0, 0x89f3, &(0x7f00000001c0)={'ip6tnl0\x00', &(0x7f0000000240)={'syztnl0\x00', 0x0, 0x29, 0x5, 0x2, 0xf7, 0x27, @private2={0xfc, 0x2, '\x00', 0x1}, @dev={0xfe, 0x80, '\x00', 0x34}, 0x40, 0x7, 0x27, 0x1}}) sendmsg$nl_route(r3, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000340)=@bridge_delneigh={0x38, 0x1d, 0x200, 0x70bd2d, 0x25dfdbfe, {0xa, 0x0, 0x0, r5, 0x80, 0x40, 0x4}, [@NDA_FDB_EXT_ATTRS={0x1c, 0xe, 0x0, 0x1, [@NFEA_ACTIVITY_NOTIFY={0x5, 0x1, 0x1}, @NFEA_ACTIVITY_NOTIFY={0x5, 0x1, 0xfe}, @NFEA_ACTIVITY_NOTIFY={0x5, 0x1, 0xff}]}]}, 0x38}, 0x1, 0x0, 0x0, 0x40801}, 0x4000000) setsockopt$ALG_SET_KEY(0xffffffffffffffff, 0x117, 0x1, &(0x7f0000000140)="2c385aa3d49100dc6626c892b6bc436a", 0x10) (async) bind$inet6(r0, &(0x7f00000000c0)={0xa, 0x4e22, 0x1, @remote, 0x4}, 0x1c) (async) r6 = accept4(0xffffffffffffffff, 0x0, 0x0, 0x0) (async) socket(0x10, 0x803, 0x0) (async) r7 = socket$packet(0x11, 0x2, 0x300) setsockopt$packet_tx_ring(r7, 0x107, 0x5, &(0x7f0000000380)=@req3={0x808000, 0x4, 0x20300, 0xfc, 0x0, 0x2}, 0x1c) (async) close(0x4) (async) recvmmsg$unix(r6, &(0x7f0000000c00)=[{{0x0, 0x0, 0x0}}, {{0x0, 0x0, &(0x7f00000003c0)}}], 0x2, 0x0, 0x0) 454.300265ms ago: executing program 2 (id=16761): r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x7101}) ioctl$BTRFS_IOC_START_SYNC(r0, 0x80089418, &(0x7f0000000080)) r1 = socket(0x400000000010, 0x3, 0x0) r2 = socket$unix(0x1, 0x5, 0x0) ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r1, &(0x7f00000012c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000000c0)=@newqdisc={0x38, 0x24, 0x4ee4e6a52ff56541, 0x70bd2a, 0xfffffffd, {0x0, 0x0, 0x0, r3, {0x0, 0x1}, {0xffff, 0xffff}, {0xffe0, 0x9}}, [@qdisc_kind_options=@q_multiq={{0xb}, {0x8}}]}, 0x38}}, 0x0) sendmsg$nl_route_sched(r1, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000480)=@newtfilter={0x54, 0x2c, 0xf3f, 0x30bd29, 0x25dfdbfd, {0x0, 0x0, 0x0, r3, {0xb, 0x2}, {}, {0x7, 0xd}}, [@filter_kind_options=@f_basic={{0xa}, {0x24, 0x2, [@TCA_BASIC_EMATCHES={0x20, 0x2, 0x0, 0x1, [@TCA_EMATCH_TREE_HDR={0x8, 0x1, {0x1}}, @TCA_EMATCH_TREE_LIST={0x14, 0x2, 0x0, 0x1, [@TCF_EM_IPSET={0x10, 0x1, 0x0, 0x0, {{0x6}, {0x1, 0x6, 0x2}}}]}]}]}}]}, 0x54}, 0x1, 0x0, 0x0, 0x20041090}, 0x8000) 247.812834ms ago: executing program 6 (id=16762): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000780)=ANY=[@ANYBLOB="140000001000010000000000000000000500000a28000000000a030000000000000000000a00000708000240000000020900010073797a31000000002c000000030a010100000000000000000a0000070900010073797a31000000000900030073797a320000000014000000110001"], 0x7c}, 0x1, 0x0, 0x0, 0x4000}, 0x0) r1 = syz_init_net_socket$x25(0x9, 0x5, 0x0) ioctl$sock_inet_SIOCSIFBRDADDR(r1, 0x891a, 0x0) sendmsg$NFT_BATCH(r0, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000009b00)={&(0x7f0000000500)=ANY=[@ANYBLOB="140000001000010000000000000000000300000a48000000060a01040000000000000000fdffff030900010073797a31000000000900020073797a32000000001c000480180001800d00010073796e70726f78790000000004000280140000001100010000000000000000000100000a"], 0x70}, 0x1, 0x0, 0x0, 0x4000851}, 0x24044010) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) sendmsg$inet(r3, &(0x7f0000001600)={0x0, 0x0, &(0x7f0000000880)}, 0x4048841) recvmsg(r2, &(0x7f0000000840)={0x0, 0x0, 0x0}, 0x10001) sendmsg$inet(r3, &(0x7f0000000700)={0x0, 0x0, &(0x7f0000000180)=[{&(0x7f00000001c0)="04", 0x1}], 0x1}, 0x1) recvmsg(r2, &(0x7f0000000100)={0x0, 0x0, 0x0}, 0x1) r4 = socket$kcm(0xa, 0x3, 0x3a) sendmsg$kcm(r4, &(0x7f0000000080)={&(0x7f0000000000)=@l2tp6={0xa, 0x0, 0x0, @loopback={0xffffffffffff0000, 0xac14140c}}, 0x80, &(0x7f00000000c0)=[{&(0x7f0000000140)="000000000000000096c964f8eb7cec5840", 0x11}], 0x1, 0x0, 0x0, 0x900}, 0x60) 180.806938ms ago: executing program 5 (id=16763): r0 = socket$nl_route(0x10, 0x3, 0x0) setsockopt$netlink_NETLINK_TX_RING(r0, 0x10e, 0xc, &(0x7f0000000040)={0x80}, 0x10) sendmsg$nl_route(r0, &(0x7f00000003c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000180)=@ipv4_newroute={0x2c, 0x1a, 0x1, 0x0, 0x0, {}, [@RTA_IP_PROTO={0x5}, @RTA_UID={0x8}]}, 0x2c}}, 0x0) r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000600)={0x8, 0x3, &(0x7f0000000200)=ANY=[@ANYBLOB="18000000000000000000000000009500000000000000"], &(0x7f0000000000)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @cgroup_skb, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x99ee}, 0x94) r2 = bpf$BPF_LINK_CREATE_XDP(0x1c, &(0x7f0000002380)={r1, 0x0, 0x2d, 0x0, @val=@netfilter={0x2, 0x4, 0x600, 0x1}}, 0x20) bpf$BPF_GET_MAP_INFO(0xf, &(0x7f00000000c0)={r2, 0x0, 0x0}, 0x10) r3 = syz_genetlink_get_family_id$tipc2(&(0x7f0000000200), 0xffffffffffffffff) r4 = socket$nl_generic(0x10, 0x3, 0x10) r5 = openat$cgroup_ro(0xffffffffffffffff, &(0x7f0000000080)='blkio.bfq.io_merged\x00', 0x0, 0x0) mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000040)='./cgroup.net/syz0\x00', 0x1ff) r6 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000300)='./cgroup/syz0\x00', 0x200002, 0x0) r7 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_tcp_int(r7, 0x6, 0x13, &(0x7f0000000180)=0x100000001, 0x4) r8 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000000)='memory.swap.current\x00', 0x275a, 0x0) mmap(&(0x7f0000000000/0x4000)=nil, 0x4000, 0x1, 0x10012, r8, 0x0) write$cgroup_int(r8, &(0x7f0000000240)=0x6, 0x12) connect$inet6(r7, &(0x7f0000000200)={0xa, 0x0, 0x0, @loopback}, 0x1c) setsockopt$inet6_tcp_TCP_ULP(r7, 0x6, 0x1f, &(0x7f0000000100), 0x3) setsockopt$inet6_tcp_int(r7, 0x11a, 0x3, &(0x7f0000000140)=0x304, 0x4) r9 = openat$cgroup_devices(r6, &(0x7f0000000480)='devices.deny\x00', 0x2, 0x0) write$cgroup_devices(r9, &(0x7f0000000180)=ANY=[@ANYBLOB=' w'], 0x8) r10 = syz_genetlink_get_family_id$l2tp(&(0x7f0000000140), r5) sendmsg$L2TP_CMD_NOOP(r4, &(0x7f00000002c0)={&(0x7f0000000100)={0x10, 0x0, 0x0, 0x40000}, 0xc, &(0x7f00000001c0)={&(0x7f0000000340)=ANY=[@ANYBLOB='x\x00\x00\x00', @ANYRES16=r10, @ANYBLOB="000025bd7000fcdbdf250000000006000300e8f5000008001800ac1414bb05000600030000000c000f00000000000500210000000000140020000000000000000000000000000000000005010000000c000f00040000000000000008001100000000000000007f6ebfb88e4b180b4f8d69aee55b3950139bfc2a332bafbbdc7397e2b89e4a24a241e925aff56a3daea5d5f4fb5c72d73f108d34155b361b0909b816c256f4a77ba36bab9fa5fee4ebbb3d1b3d8aba42aebe8938063daafe262a13f8d9ed0831dad332ec85b571f1a3cf563134ff1c3b3a"], 0x78}, 0x1, 0x0, 0x0, 0x10}, 0x20004012) sendmsg$TIPC_NL_MEDIA_SET(r5, &(0x7f00000008c0)={0x0, 0x0, &(0x7f0000000880)={&(0x7f0000000000)=ANY=[@ANYBLOB="0823a799b5aba9473e53b1af1266b3d34ef662768602eb6b2b6d1ac7ac7b17447e547d9c04882db9c861e525d15c1f2095130d34dba47c09c6bdfbe13d0ce830b52f98", @ANYRES16=r3, @ANYRES32=r5], 0x18}}, 0x0) 156.859631ms ago: executing program 0 (id=16764): r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000140)={0xd, 0x4, &(0x7f0000000040)=@framed={{}, [@ldst={0x1, 0x0, 0x4, 0x2, 0x1, 0x58}], {0x95, 0x0, 0x700}}, &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0xc}, 0x90) (async) r1 = syz_init_net_socket$bt_sco(0x1f, 0x5, 0x2) connect$bt_sco(r1, &(0x7f0000000000)={0x1f, @fixed={'\xaa\xaa\xaa\xaa\xaa', 0xaa}}, 0x8) r2 = socket$inet6_mptcp(0xa, 0x1, 0x106) (async) accept4$bt_l2cap(r0, 0x0, &(0x7f0000000200), 0x800) bind$inet6(r2, &(0x7f0000000080)={0xa, 0x4e22, 0x0, @empty}, 0x1c) (async) listen(r2, 0x4) (async) r3 = socket$inet_mptcp(0x2, 0x1, 0x106) r4 = socket$inet_mptcp(0x2, 0x1, 0x106) connect$inet(r4, &(0x7f0000000000)={0x2, 0x4e22, @empty}, 0x10) setsockopt$inet_tcp_int(r4, 0x6, 0x9, &(0x7f0000000100)=0x1ff, 0x4) connect$inet(r3, &(0x7f0000000000)={0x2, 0x4e22, @local}, 0x10) (async) r5 = socket$xdp(0x2c, 0x3, 0x0) mmap$xdp(&(0x7f0000ffe000/0x2000)=nil, 0x2002, 0x0, 0x11, r5, 0x80000000) r6 = socket$inet6_sctp(0xa, 0x5, 0x84) (async) connect$inet(0xffffffffffffffff, &(0x7f0000000000)={0x2, 0x0, @local}, 0x10) (async) r7 = socket$inet_sctp(0x2, 0x1, 0x84) getsockopt$inet_sctp_SCTP_MAX_BURST(r7, 0x84, 0xd, &(0x7f0000000000)=@assoc_value={0x0}, &(0x7f0000000040)=0x8) setsockopt$inet_sctp6_SCTP_DEFAULT_PRINFO(r6, 0x84, 0x72, &(0x7f00000000c0)={r8, 0xff, 0x30}, 0xc) (async) r9 = socket$nl_generic(0x10, 0x3, 0x10) r10 = syz_genetlink_get_family_id$mptcp(&(0x7f0000000000), 0xffffffffffffffff) sendmsg$MPTCP_PM_CMD_ADD_ADDR(r9, &(0x7f0000000400)={0x0, 0x0, &(0x7f00000003c0)={&(0x7f00000004c0)={0x30, r10, 0x1, 0x70bd2c, 0x0, {}, [@MPTCP_PM_ATTR_ADDR={0x1c, 0x1, 0x0, 0x1, [@MPTCP_PM_ADDR_ATTR_FAMILY={0x6, 0x1, 0x2}, @MPTCP_PM_ADDR_ATTR_ADDR4={0x8, 0x3, @dev={0xac, 0x14, 0x14, 0x35}}, @MPTCP_PM_ADDR_ATTR_FLAGS={0x8, 0x6, 0x3}]}]}, 0x30}}, 0x0) (async) r11 = socket$nl_generic(0x10, 0x3, 0x10) r12 = syz_genetlink_get_family_id$mptcp(&(0x7f0000000040), 0xffffffffffffffff) sendmsg$MPTCP_PM_CMD_DEL_ADDR(r11, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000280)={0x20, r12, 0x7, 0x0, 0x0, {}, [@MPTCP_PM_ATTR_ADDR={0xc, 0x1, 0x0, 0x1, [@MPTCP_PM_ADDR_ATTR_ID={0x5, 0x2, 0x1}]}]}, 0x20}, 0x1, 0x0, 0x0, 0x48050}, 0x0) 109.351626ms ago: executing program 2 (id=16765): r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000100), 0x0, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x2}) r1 = openat$tun(0xffffffffffffff9c, &(0x7f00000001c0), 0x102, 0x0) close(r1) r2 = socket$unix(0x1, 0x1, 0x0) r3 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r3, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000240)={&(0x7f00000026c0)=@newqdisc={0x48, 0x24, 0x4ee4e6a52ff56541, 0x70bd2d, 0x25dfdbfe, {0x0, 0x0, 0x0, r4, {0x0, 0xb}, {0xffff, 0xffff}, {0xfff2, 0x2}}, [@qdisc_kind_options=@q_cbs={{0x8}, {0x1c, 0x2, @TCA_CBS_PARMS={0x18, 0x1, {0x0, '\x00', 0x1, 0x7, 0x100, 0x8}}}}]}, 0x48}, 0x1, 0x0, 0x0, 0x20000001}, 0x0) sendmsg$nl_route_sched(r3, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000140)={&(0x7f00000003c0)=@newqdisc={0x3c, 0x24, 0x4ee4e6a52ff56541, 0x70b923, 0x80000, {0x0, 0x0, 0x0, r4, {}, {0xffe0, 0xb}, {0x9, 0xb}}, [@qdisc_kind_options=@q_cake={{0x9}, {0xc, 0x2, [@TCA_CAKE_MEMORY={0x8, 0xa, 0x8}]}}]}, 0x3c}, 0x1, 0x0, 0x0, 0x2000c061}, 0x4008000) ioctl$SIOCSIFHWADDR(r1, 0x8914, &(0x7f0000002280)={'syzkaller0\x00', @multicast}) r5 = socket$kcm(0x11, 0x3, 0x0) r6 = socket$unix(0x1, 0x1, 0x0) ioctl$sock_SIOCGIFINDEX(r6, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) r8 = openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0xc0041, 0x0) ioctl$TUNSETIFF(r8, 0x400454ca, &(0x7f0000000200)={'syzkaller1\x00', 0xc201}) ioctl$TUNSETVNETHDRSZ(r8, 0x400454d8, &(0x7f0000000140)=0x90) sendmsg$nl_route(0xffffffffffffffff, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000140)=ANY=[], 0x90}, 0x1, 0x0, 0x0, 0x44004}, 0x0) write$tun(r8, &(0x7f0000000080)=ANY=[], 0xfdef) sendmsg$kcm(r5, &(0x7f00000000c0)={&(0x7f0000000580)=@xdp={0x2c, 0x4, r7, 0x3e}, 0x80, &(0x7f0000000080)=[{&(0x7f0000000180)="27030200590214000600002fb96d", 0xe}], 0x1}, 0x0) 107.076483ms ago: executing program 1 (id=16766): r0 = socket$nl_route(0x10, 0x3, 0x0) getsockopt$inet_pktinfo(0xffffffffffffffff, 0x0, 0x8, &(0x7f0000000000)={0x0, @empty, @multicast2}, &(0x7f0000000040)=0xc) r1 = bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000240)={0x2, 0x4, 0x8, 0x1, 0x80, 0x0}, 0x50) r2 = bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f00000007c0)={0x1b, 0x0, 0x0, 0x40000, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0}, 0x48) bpf$PROG_LOAD(0x5, &(0x7f0000000840)={0x6, 0x1c, &(0x7f0000000040)=@ringbuf={{0x18, 0x8, 0x0, 0x0, 0x30}, {{0x18, 0x1, 0x1, 0x0, r2}, {}, {}, {0x85, 0x0, 0x0, 0x5}, {0x4, 0x1, 0xb, 0x9, 0xa}}, {{0x5, 0x0, 0x3, 0x9, 0x0, 0x1, 0x3801}, {0x2c}}, [@snprintf={{0x7, 0x0, 0xb, 0x2}, {0x3, 0x3, 0x3, 0xa, 0x9}, {0x5, 0x0, 0xb, 0x9}, {0x3, 0x3, 0x6, 0xa, 0xa, 0xfff8, 0xf1}, {0x7, 0x1, 0xb, 0x6, 0x8}, {0x7, 0x0, 0x0, 0x8}, {}, {}, {0x7, 0x0, 0xc}, {0x18, 0x2, 0x2, 0x0, r1}, {}, {0x46, 0x8, 0xfff0, 0x76}}], {{0x7, 0x1, 0xb, 0x8}, {0x6, 0x0, 0x5, 0x8, 0x0, 0x0, 0x1}, {0x85, 0x0, 0x0, 0x7}}}, &(0x7f0000000980)='GPL\x00', 0xb, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x25, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) unshare(0x20000400) r3 = socket$tipc(0x1e, 0x2, 0x0) r4 = accept$packet(0xffffffffffffffff, &(0x7f0000000140)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @link_local}, &(0x7f00000001c0)=0x14) accept$packet(r4, 0x0, &(0x7f0000000200)) bind$tipc(r3, &(0x7f0000000000)=@id={0x1e, 0x3, 0x2, {0x4e23, 0x2}}, 0x10) r5 = socket$inet6(0xa, 0x5, 0x0) setsockopt$inet6_IPV6_FLOWLABEL_MGR(r5, 0x29, 0x20, &(0x7f0000000180)={@dev={0xfe, 0x80, '\x00', 0x52}, 0x7fe, 0x0, 0x3, 0x1, 0x2}, 0x20) r6 = bpf$MAP_CREATE(0x0, &(0x7f0000000400)=ANY=[@ANYBLOB="1b00000000000000000000000080"], 0x48) r7 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000340)={0x1f, 0x10, &(0x7f0000000040)=ANY=[@ANYBLOB="1800000005000000000000008000000018110000", @ANYRES32=r6, @ANYBLOB="0000000000000000b702000003000000850000008600000018010000", @ANYRES32=r6, @ANYBLOB="0000000000000000b7080000050000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b70400000200000085000000a600000095"], &(0x7f0000000000)='GPL\x00', 0x0, 0x0, 0x0, 0x41100, 0x11}, 0x94) bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="1b0000000000000000000000000004"], 0x48) r8 = socket$nl_generic(0x10, 0x3, 0x10) r9 = syz_genetlink_get_family_id$devlink(&(0x7f00000016c0), 0xffffffffffffffff) sendmsg$DEVLINK_CMD_RATE_GET(r8, &(0x7f0000001780)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f00000000c0)={0x14, r9, 0xf1aad47e89fb43b5, 0x0, 0x25dfdbf8}, 0x14}, 0x1, 0x0, 0x0, 0x34040840}, 0x4000) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000500)={r7, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x48) setsockopt$inet6_int(r5, 0x29, 0x1000000000021, &(0x7f0000000000)=0x1, 0x4) connect$inet6(r5, &(0x7f0000000080)={0xa, 0x0, 0x380000, @loopback}, 0x1c) r10 = socket$inet_udp(0x2, 0x2, 0x0) setsockopt$sock_int(r10, 0x1, 0x8, &(0x7f0000003800), 0x4) r11 = bpf$PROG_LOAD_XDP(0x5, &(0x7f00000000c0)={0x2, 0x3, &(0x7f00000007c0)=ANY=[@ANYBLOB="1800000000000000000000000000000095"], &(0x7f0000000580)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x16}, 0x90) bpf$BPF_PROG_TEST_RUN(0x1c, &(0x7f0000000500)={r11, 0x0, 0x29, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x50) sendmsg$nl_route(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f00000018c0)={&(0x7f00000000c0)=ANY=[@ANYBLOB="1c00000020800000050b8001000000000000"], 0x1c}}, 0x8081) 56.181337ms ago: executing program 6 (id=16767): socket$inet_icmp_raw(0x2, 0x3, 0x1) unshare(0x2c060000) (async) syz_init_net_socket$bt_hci(0x1f, 0x3, 0x5) (async) close(0x4) (async, rerun: 32) r0 = socket$nl_xfrm(0x10, 0x3, 0x6) (rerun: 32) bpf$PROG_LOAD(0x5, &(0x7f0000000080)={0x19, 0x4, &(0x7f0000000000)=@framed={{}, [@ldst={0x1, 0x3, 0x3, 0x2, 0x1, 0x8}]}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @cgroup_sockopt, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) (async, rerun: 64) sendmsg$nl_xfrm(r0, &(0x7f0000000180)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000200)=ANY=[@ANYBLOB="b8000000190001000000000000000000e00000020000000000000000000000000000000000000000000000000000000000000000000000000a00000087000000", @ANYRES32=0x0, @ANYRES32=0x0, @ANYBLOB="0000000000006c31b66b716a46f10000ff7effffffffffff000000000000000000000000000000000000000000000000fdfffffffffffffffbffffffffffffff000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000d50e54157afd94e1868a9d11eab67dbcc8167fc1669acf4e2f9e6b405d88dfbf22aaff37a274dec28ddc4cc3f8fc13404d5c6b88e32a84f6c7175f71db901d3aa0137e8c44589148cf45535624c29abc3e583bf2a1111ca26fa905954644122ba2765fc24562c091040fdeb12d6ae41998b4fadf6227080a0b8526e31733fc87787514e6f8ea65c0121455ec20fc48ca8f7a9cbf21dcf028483592a23b4755cff59a6256c36b08dd5e747926da00"/298], 0xb8}}, 0x0) (async, rerun: 64) sendmsg$nl_xfrm(r0, &(0x7f0000000180)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000000)=ANY=[@ANYBLOB="b8000000150001000000000000000000e00000"], 0xb8}}, 0x0) (async) syz_open_procfs$namespace(0x0, &(0x7f0000000040)='ns/mnt\x00') 0s ago: executing program 5 (id=16768): r0 = socket$inet_udp(0x2, 0x2, 0x0) setsockopt$ARPT_SO_SET_REPLACE(r0, 0xa02000000000000, 0x60, &(0x7f0000000000)={'filter\x00', 0xb001, 0x4, 0x3f0, 0xe8, 0xe8, 0x0, 0x308, 0x308, 0x308, 0x7fffffe, 0x0, {[{{@uncond, 0xc0, 0xe8}, @unspec=@MARK={0x28, 'MARK\x00', 0x2, {0x3ff, 0x800}}}, {{@arp={@local, @empty, 0x0, 0x0, 0x0, 0xfd, {@mac=@local, {[0xff, 0x0, 0x0, 0xff]}}, {@empty, {[0x0, 0x0, 0x0, 0x0, 0xff, 0xff]}}, 0xc, 0x0, 0x0, 0x0, 0x8, 0x0, 'veth0_to_team\x00', 'ip6tnl0\x00', {}, {}, 0x0, 0xc}, 0xc0, 0x110}, @mangle={0x50, 'mangle\x00', 0x0, {@empty, @mac=@link_local={0x1, 0x80, 0xc2, 0x0, 0x0, 0x3}, @multicast1, @multicast2, 0x1, 0xffffffff}}}, {{@uncond, 0xc0, 0x110}, @mangle={0x50, 'mangle\x00', 0x0, {@mac=@link_local={0x1, 0x80, 0xc2, 0x0, 0x0, 0x2}, @mac=@link_local={0x1, 0x80, 0xc2, 0x0, 0x0, 0xe}, @initdev={0xac, 0x1e, 0x0, 0x0}, @local, 0xf, 0x1}}}], {{'\x00', 0xc0, 0xe8}, {0x28}}}}, 0x440) r1 = socket$key(0xf, 0x3, 0x2) sendmsg$key(r1, &(0x7f0000000100)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f00000002c0)={0x2, 0xd, 0x9, 0x5, 0x7, 0x0, 0xd, 0x25dfdbff, [@sadb_address={0x5, 0x5, 0x3c, 0xa0, 0x0, @in6={0xa, 0x4e22, 0x32, @initdev={0xfe, 0x88, '\x00', 0x0, 0x0}, 0x80}}]}, 0x38}}, 0x10) bpf$PROG_LOAD(0x5, &(0x7f0000000440)={0xa, 0x6, &(0x7f0000000000)=@framed={{0x5, 0x0, 0x0, 0x0, 0x0, 0x71, 0x11, 0x52}, [@func={0x85, 0x0, 0x1, 0x0, 0x2}, @call, @exit={0x95, 0x0, 0x1008}], {0x95, 0x0, 0x5a5}}, &(0x7f0000000080)='GPL\x00', 0x5, 0x29e, &(0x7f000000cf3d)=""/195, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x6}, 0x70) kernel console output (not intermixed with test programs): d allmulticast mode [ 1575.489360][T30351] netlink: 8 bytes leftover after parsing attributes in process `syz.1.15238'. [ 1575.559710][T30354] netlink: 232 bytes leftover after parsing attributes in process `syz.2.15239'. [ 1578.097337][T30380] FAULT_INJECTION: forcing a failure. [ 1578.097337][T30380] name failslab, interval 1, probability 0, space 0, times 0 [ 1578.113116][T30380] CPU: 1 UID: 0 PID: 30380 Comm: syz.5.15242 Not tainted syzkaller #0 PREEMPT(full) [ 1578.113147][T30380] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 02/12/2026 [ 1578.113161][T30380] Call Trace: [ 1578.113171][T30380] [ 1578.113181][T30380] dump_stack_lvl+0xe8/0x150 [ 1578.113218][T30380] should_fail_ex+0x412/0x560 [ 1578.113251][T30380] should_failslab+0xa8/0x100 [ 1578.113281][T30380] __kmalloc_cache_noprof+0x88/0x660 [ 1578.113304][T30380] ? pcpu_alloc_noprof+0x10e4/0x19c0 [ 1578.113329][T30380] ? tcf_exts_init_ex+0x10e/0x7c0 [ 1578.113362][T30380] tcf_exts_init_ex+0x10e/0x7c0 [ 1578.113401][T30380] u32_change+0x18ae/0x2720 [ 1578.113451][T30380] ? __pfx_u32_change+0x10/0x10 [ 1578.113491][T30380] ? __mutex_unlock_slowpath+0x1bd/0x7d0 [ 1578.113530][T30380] ? lockdep_rtnl_is_held+0x26/0x40 [ 1578.113563][T30380] ? u32_lookup_ht+0x1b7/0x1d0 [ 1578.113601][T30380] tc_new_tfilter+0xff8/0x1780 [ 1578.113664][T30380] ? __pfx_tc_new_tfilter+0x10/0x10 [ 1578.113732][T30380] ? __pfx_tc_new_tfilter+0x10/0x10 [ 1578.113762][T30380] rtnetlink_rcv_msg+0x7d5/0xbe0 [ 1578.113796][T30380] ? rtnetlink_rcv_msg+0x1b9/0xbe0 [ 1578.113824][T30380] ? __pfx_rtnetlink_rcv_msg+0x10/0x10 [ 1578.113850][T30380] ? ref_tracker_free+0x693/0x840 [ 1578.113875][T30380] ? __copy_skb_header+0xa3/0x4a0 [ 1578.113910][T30380] ? __pfx_ref_tracker_free+0x10/0x10 [ 1578.113950][T30380] netlink_rcv_skb+0x232/0x4b0 [ 1578.113983][T30380] ? __pfx_rtnetlink_rcv_msg+0x10/0x10 [ 1578.114014][T30380] ? __pfx_netlink_rcv_skb+0x10/0x10 [ 1578.114052][T30380] ? netlink_deliver_tap+0x2e/0x1b0 [ 1578.114089][T30380] netlink_unicast+0x80f/0x9b0 [ 1578.114123][T30380] ? __pfx_netlink_unicast+0x10/0x10 [ 1578.114150][T30380] ? netlink_sendmsg+0x650/0xb40 [ 1578.114175][T30380] ? skb_put+0x11b/0x210 [ 1578.114208][T30380] netlink_sendmsg+0x813/0xb40 [ 1578.114246][T30380] ? __pfx_netlink_sendmsg+0x10/0x10 [ 1578.114278][T30380] ? aa_sock_msg_perm+0xf1/0x1b0 [ 1578.114307][T30380] ? bpf_lsm_socket_sendmsg+0x9/0x20 [ 1578.114333][T30380] ? __pfx_netlink_sendmsg+0x10/0x10 [ 1578.114359][T30380] ____sys_sendmsg+0xa68/0xad0 [ 1578.114388][T30380] ? __lock_acquire+0x6b5/0x2cf0 [ 1578.114422][T30380] ? __pfx_____sys_sendmsg+0x10/0x10 [ 1578.114459][T30380] ? import_iovec+0x73/0xa0 [ 1578.114545][T30380] ___sys_sendmsg+0x2a5/0x360 [ 1578.114580][T30380] ? __pfx____sys_sendmsg+0x10/0x10 [ 1578.114657][T30380] __sys_sendmmsg+0x27c/0x4e0 [ 1578.114691][T30380] ? __pfx___sys_sendmmsg+0x10/0x10 [ 1578.114718][T30380] ? __mutex_unlock_slowpath+0x1bd/0x7d0 [ 1578.114764][T30380] ? ksys_write+0x242/0x270 [ 1578.114786][T30380] ? __pfx_ksys_write+0x10/0x10 [ 1578.114813][T30380] __x64_sys_sendmmsg+0xa0/0xc0 [ 1578.114843][T30380] do_syscall_64+0x14d/0xf80 [ 1578.114862][T30380] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1578.114881][T30380] ? clear_bhb_loop+0x40/0x90 [ 1578.114906][T30380] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1578.114925][T30380] RIP: 0033:0x7fe0e5f9c799 [ 1578.114945][T30380] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 1578.114962][T30380] RSP: 002b:00007fe0e6d77028 EFLAGS: 00000246 ORIG_RAX: 0000000000000133 [ 1578.114983][T30380] RAX: ffffffffffffffda RBX: 00007fe0e6215fa0 RCX: 00007fe0e5f9c799 [ 1578.114997][T30380] RDX: 040000000000009f RSI: 00002000000002c0 RDI: 0000000000000004 [ 1578.115011][T30380] RBP: 00007fe0e6d77090 R08: 0000000000000000 R09: 0000000000000000 [ 1578.115022][T30380] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000002 [ 1578.115035][T30380] R13: 00007fe0e6216038 R14: 00007fe0e6215fa0 R15: 00007ffcb1bc2878 [ 1578.115065][T30380] [ 1578.689522][ T8599] block nbd5: Receive control failed (result -107) [ 1578.798426][T30392] nbd5: detected capacity change from 0 to 127 [ 1578.837441][T30065] block nbd5: Dead connection, failed to find a fallback [ 1578.901922][T30065] block nbd5: shutting down sockets [ 1578.940771][T30065] blk_print_req_error: 138 callbacks suppressed [ 1578.940795][T30065] I/O error, dev nbd5, sector 0 op 0x0:(READ) flags 0x800000 phys_seg 1 prio class 2 [ 1578.975707][T30065] buffer_io_error: 29 callbacks suppressed [ 1578.975728][T30065] Buffer I/O error on dev nbd5, logical block 0, async page read [ 1579.010460][T30065] I/O error, dev nbd5, sector 2 op 0x0:(READ) flags 0x800000 phys_seg 1 prio class 2 [ 1579.027982][T30065] Buffer I/O error on dev nbd5, logical block 1, async page read [ 1579.057426][T30065] I/O error, dev nbd5, sector 4 op 0x0:(READ) flags 0x800000 phys_seg 1 prio class 2 [ 1579.112550][T30065] Buffer I/O error on dev nbd5, logical block 2, async page read [ 1579.131099][T30065] I/O error, dev nbd5, sector 6 op 0x0:(READ) flags 0x800000 phys_seg 1 prio class 2 [ 1579.146284][T30065] Buffer I/O error on dev nbd5, logical block 3, async page read [ 1579.160611][T30065] I/O error, dev nbd5, sector 0 op 0x0:(READ) flags 0x800000 phys_seg 1 prio class 2 [ 1579.177054][T30065] Buffer I/O error on dev nbd5, logical block 0, async page read [ 1579.185077][T30065] I/O error, dev nbd5, sector 2 op 0x0:(READ) flags 0x800000 phys_seg 1 prio class 2 [ 1579.194962][T30065] Buffer I/O error on dev nbd5, logical block 1, async page read [ 1579.205836][T30065] I/O error, dev nbd5, sector 4 op 0x0:(READ) flags 0x800000 phys_seg 1 prio class 2 [ 1579.216167][T30065] Buffer I/O error on dev nbd5, logical block 2, async page read [ 1579.224115][T30065] I/O error, dev nbd5, sector 6 op 0x0:(READ) flags 0x800000 phys_seg 1 prio class 2 [ 1579.233633][T30065] Buffer I/O error on dev nbd5, logical block 3, async page read [ 1579.241981][T30065] I/O error, dev nbd5, sector 0 op 0x0:(READ) flags 0x800000 phys_seg 1 prio class 2 [ 1579.252488][T30065] Buffer I/O error on dev nbd5, logical block 0, async page read [ 1579.296791][T30065] I/O error, dev nbd5, sector 2 op 0x0:(READ) flags 0x800000 phys_seg 1 prio class 2 [ 1579.337551][T30065] Buffer I/O error on dev nbd5, logical block 1, async page read [ 1579.365236][T30065] ldm_validate_partition_table(): Disk read failed. [ 1579.372521][T30065] Dev nbd5: unable to read RDB block 0 [ 1579.418856][T30065] nbd5: unable to read partition table [ 1579.506345][T30065] ldm_validate_partition_table(): Disk read failed. [ 1579.546561][T30065] Dev nbd5: unable to read RDB block 0 [ 1579.589848][T30065] nbd5: unable to read partition table [ 1579.612193][T30441] syzkaller0: entered promiscuous mode [ 1579.628088][T30441] syzkaller0: entered allmulticast mode [ 1579.936909][T30458] bond0: (slave gre0): Error: Device type is different from other slaves [ 1580.368900][T30484] netlink: 8 bytes leftover after parsing attributes in process `syz.2.15260'. [ 1580.392515][T30483] Cannot find del_set index 4 as target [ 1580.617455][T30484] bond2: option xmit_hash_policy: invalid value (64) [ 1580.679380][T30484] bond2 (unregistering): Released all slaves [ 1580.711962][T30503] netlink: 'syz.0.15265': attribute type 4 has an invalid length. [ 1580.764008][ C1] lec0: NETDEV WATCHDOG: CPU: 1: transmit queue 0 timed out 5600 ms [ 1580.772098][ C1] lec:lec_tx_timeout: lec0 [ 1580.889028][T27602] hsr_slave_0: left promiscuous mode [ 1582.322839][T30518] syzkaller0: entered promiscuous mode [ 1582.346323][T30518] syzkaller0: entered allmulticast mode [ 1582.547265][T30571] netlink: 16 bytes leftover after parsing attributes in process `syz.6.15274'. [ 1582.571449][T30571] netlink: 32 bytes leftover after parsing attributes in process `syz.6.15274'. [ 1584.595125][T30571] gretap1: entered promiscuous mode [ 1584.601344][T30571] gretap1: entered allmulticast mode [ 1584.991705][T27602] IPVS: stop unused estimator thread 0... [ 1585.021593][T30595] netlink: 72 bytes leftover after parsing attributes in process `syz.1.15282'. [ 1585.032375][T30595] netlink: 72 bytes leftover after parsing attributes in process `syz.1.15282'. [ 1585.366205][T30608] delete_channel: no stack [ 1585.508795][T30618] syzkaller0: entered promiscuous mode [ 1585.518544][T30618] syzkaller0: entered allmulticast mode [ 1585.554451][T30624] netlink: 16 bytes leftover after parsing attributes in process `syz.5.15291'. [ 1585.573013][T30620] bond3: option all_slaves_active: invalid value (8) [ 1585.588228][T30628] netlink: 124 bytes leftover after parsing attributes in process `syz.2.15292'. [ 1585.613772][T30620] bond3 (unregistering): Released all slaves [ 1585.908630][T30650] batman_adv: batadv0: Adding interface: dummy0 [ 1585.916501][T30650] batman_adv: batadv0: The MTU of interface dummy0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 1585.954966][T30650] batman_adv: batadv0: Interface activated: dummy0 [ 1585.988654][T30656] netlink: 248 bytes leftover after parsing attributes in process `syz.6.15299'. [ 1586.075626][T30658] batadv0: mtu less than device minimum [ 1586.082747][T30658] batman_adv: batadv0: Forced to purge local tt entries to fit new maximum fragment MTU (-320) [ 1586.095251][T30658] batman_adv: batadv0: Forced to purge local tt entries to fit new maximum fragment MTU (-320) [ 1586.107105][T30658] batman_adv: batadv0: Forced to purge local tt entries to fit new maximum fragment MTU (-320) [ 1586.118943][T30658] batman_adv: batadv0: Forced to purge local tt entries to fit new maximum fragment MTU (-320) [ 1586.130853][T30658] batman_adv: batadv0: Forced to purge local tt entries to fit new maximum fragment MTU (-320) [ 1586.142732][T30658] batman_adv: batadv0: Forced to purge local tt entries to fit new maximum fragment MTU (-320) [ 1586.154629][T30658] batman_adv: batadv0: Forced to purge local tt entries to fit new maximum fragment MTU (-320) [ 1586.166464][T30658] batman_adv: batadv0: Forced to purge local tt entries to fit new maximum fragment MTU (-320) [ 1586.178306][T30658] batman_adv: batadv0: Forced to purge local tt entries to fit new maximum fragment MTU (-320) [ 1586.425778][T30670] netlink: 24 bytes leftover after parsing attributes in process `syz.6.15304'. [ 1586.486572][T30674] netlink: 'syz.2.15306': attribute type 83 has an invalid length. [ 1586.497429][T30676] netlink: 'syz.0.15307': attribute type 13 has an invalid length. [ 1586.498438][T30674] netlink: 'syz.2.15306': attribute type 21 has an invalid length. [ 1586.552687][T30676] veth0_macvtap: left promiscuous mode [ 1586.564403][T30676] macvtap0: entered allmulticast mode [ 1586.585550][T30676] macvtap0: refused to change device tx_queue_len [ 1586.696595][T30685] netlink: 12 bytes leftover after parsing attributes in process `syz.6.15310'. [ 1586.749640][T30691] netlink: 76 bytes leftover after parsing attributes in process `syz.2.15311'. [ 1586.792580][T30691] nbd: illegal input index -8454144 [ 1586.807038][T30683] syzkaller0: entered promiscuous mode [ 1586.812738][T30683] syzkaller0: entered allmulticast mode [ 1586.850196][T30698] netlink: 64 bytes leftover after parsing attributes in process `syz.5.15314'. [ 1587.152999][T30712] nbd: nbd5 already in use [ 1587.158386][T30712] block nbd5: NBD_DISCONNECT [ 1587.163604][T30712] block nbd5: Send disconnect failed -32 [ 1587.357839][T30726] netlink: 12 bytes leftover after parsing attributes in process `syz.5.15324'. [ 1587.472198][T30731] netlink: 16 bytes leftover after parsing attributes in process `syz.5.15326'. [ 1587.530313][T30731] netlink: 24 bytes leftover after parsing attributes in process `syz.5.15326'. [ 1587.656691][T30746] veth0: entered promiscuous mode [ 1587.684591][T30747] syzkaller0: entered promiscuous mode [ 1587.702366][T30747] syzkaller0: entered allmulticast mode [ 1587.762658][T30737] veth0: left promiscuous mode [ 1587.891323][T30750] 8021q: adding VLAN 0 to HW filter on device bond15 [ 1588.122953][T30767] netlink: 'syz.5.15336': attribute type 1 has an invalid length. [ 1588.184879][T30767] 8021q: adding VLAN 0 to HW filter on device bond16 [ 1588.291034][T30770] bond16: (slave geneve4): making interface the new active one [ 1588.302402][T30770] bond16: (slave geneve4): Enslaving as an active interface with an up link [ 1588.638447][T30791] syzkaller0: entered promiscuous mode [ 1588.644277][T30791] syzkaller0: entered allmulticast mode [ 1588.747018][T30803] xt_TPROXY: Can be used only with -p tcp or -p udp [ 1591.408900][T30843] bond20 (unregistering): Released all slaves [ 1591.690269][T30865] xt_l2tp: invalid flags combination: 0 [ 1591.803534][T30875] syzkaller0: entered promiscuous mode [ 1591.822503][T30875] syzkaller0: entered allmulticast mode [ 1591.957569][T30882] __nla_validate_parse: 1 callbacks suppressed [ 1591.957589][T30882] netlink: 256 bytes leftover after parsing attributes in process `syz.0.15365'. [ 1592.104603][T30889] netlink: 'syz.5.15369': attribute type 21 has an invalid length. [ 1592.658186][T30915] netlink: 348 bytes leftover after parsing attributes in process `syz.1.15377'. [ 1592.680164][T30921] netlink: 4 bytes leftover after parsing attributes in process `syz.2.15376'. [ 1592.867037][T30927] netlink: 7 bytes leftover after parsing attributes in process `syz.0.15379'. [ 1593.302454][T30942] netlink: 212336 bytes leftover after parsing attributes in process `syz.0.15385'. [ 1593.550634][T30955] sctp: [Deprecated]: syz.2.15389 (pid 30955) Use of struct sctp_assoc_value in delayed_ack socket option. [ 1593.550634][T30955] Use struct sctp_sack_info instead [ 1593.792602][T30968] netlink: 8 bytes leftover after parsing attributes in process `syz.0.15391'. [ 1593.812729][T30968] netlink: 'syz.0.15391': attribute type 1 has an invalid length. [ 1593.940230][T30972] veth0: entered promiscuous mode [ 1594.027650][T30971] veth0: left promiscuous mode [ 1594.257474][T30989] netlink: 32 bytes leftover after parsing attributes in process `syz.0.15399'. [ 1594.564896][T31000] netlink: 'syz.1.15404': attribute type 8 has an invalid length. [ 1594.651844][T30998] syzkaller0: entered promiscuous mode [ 1594.668883][T30998] syzkaller0: entered allmulticast mode [ 1594.825173][T31015] netlink: 'syz.1.15408': attribute type 1 has an invalid length. [ 1595.039587][T31015] bond3: entered promiscuous mode [ 1595.094515][T31015] 8021q: adding VLAN 0 to HW filter on device bond3 [ 1595.220349][T31026] rdma_rxe: rxe_newlink: failed to add ip6_vti0 [ 1595.266504][T31029] netlink: 'syz.6.15412': attribute type 1 has an invalid length. [ 1595.534423][T31036] netlink: 8 bytes leftover after parsing attributes in process `syz.2.15414'. [ 1595.543438][T31036] netlink: 4 bytes leftover after parsing attributes in process `syz.2.15414'. [ 1595.596269][T31036] netlink: 'syz.2.15414': attribute type 12 has an invalid length. [ 1595.627919][T31036] netlink: 'syz.2.15414': attribute type 11 has an invalid length. [ 1595.919535][T31043] netlink: 4 bytes leftover after parsing attributes in process `syz.6.15415'. [ 1596.205422][ T6327] net_ratelimit: 10 callbacks suppressed [ 1596.205445][ T6327] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1596.275045][T27603] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1596.725113][T31088] openvswitch: netlink: Message has 8 unknown bytes. [ 1596.754230][T31088] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 1597.100294][T31102] bridge2: entered promiscuous mode [ 1597.125618][T31102] bridge2: entered allmulticast mode [ 1597.136372][T31102] team0: Port device bridge2 added [ 1597.141610][T31106] : renamed from bond0 [ 1597.181051][T31111] nbd: illegal input index -1 [ 1597.247258][ T6331] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1597.309563][T31121] netlink: 4 bytes leftover after parsing attributes in process `syz.5.15441'. [ 1597.332028][T31120] netlink: 60 bytes leftover after parsing attributes in process `syz.5.15441'. [ 1597.345506][T31121] netlink: 60 bytes leftover after parsing attributes in process `syz.5.15441'. [ 1597.394910][ T103] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1597.425620][T31127] netlink: 60 bytes leftover after parsing attributes in process `syz.5.15441'. [ 1597.473214][T31131] netlink: 8 bytes leftover after parsing attributes in process `syz.2.15445'. [ 1597.535211][T31135] netlink: 20 bytes leftover after parsing attributes in process `syz.6.15444'. [ 1597.565119][T20300] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1597.660076][T31145] netlink: 8 bytes leftover after parsing attributes in process `syz.5.15448'. [ 1597.701644][T31143] netlink: 'syz.6.15444': attribute type 3 has an invalid length. [ 1597.713138][T31143] netlink: 766 bytes leftover after parsing attributes in process `syz.6.15444'. [ 1597.787890][T20962] nci: nci_ntf_packet: unsupported ntf opcode 0xf00 [ 1598.286301][ T6331] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1598.465739][T31142] nci: __nci_request: wait_for_completion_interruptible_timeout failed -512 [ 1598.504952][T20962] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1598.603523][T31171] xt_recent: hitcount (4294901760) is larger than allowed maximum (65535) [ 1598.644653][T31171] netlink: 44 bytes leftover after parsing attributes in process `syz.2.15455'. [ 1598.720493][T31176] bond0: option arp_validate: mode dependency failed, not supported in mode balance-alb(6) [ 1598.741716][T31176] bond0 (unregistering): Released all slaves [ 1598.788016][T31180] netlink: 'syz.6.15456': attribute type 12 has an invalid length. [ 1598.801054][T31180] netlink: 'syz.6.15456': attribute type 29 has an invalid length. [ 1598.812193][T31180] netlink: 148 bytes leftover after parsing attributes in process `syz.6.15456'. [ 1598.821564][T31180] netlink: 'syz.6.15456': attribute type 3 has an invalid length. [ 1599.023672][T31200] openvswitch: netlink: Flow key attribute not present in set flow. [ 1599.180872][T31202] syzkaller0: entered promiscuous mode [ 1599.192558][T31202] syzkaller0: entered allmulticast mode [ 1599.208516][T31202] FAULT_INJECTION: forcing a failure. [ 1599.208516][T31202] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 1599.238675][T31202] CPU: 1 UID: 0 PID: 31202 Comm: syz.6.15461 Not tainted syzkaller #0 PREEMPT(full) [ 1599.238720][T31202] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 02/12/2026 [ 1599.238734][T31202] Call Trace: [ 1599.238744][T31202] [ 1599.238754][T31202] dump_stack_lvl+0xe8/0x150 [ 1599.238792][T31202] should_fail_ex+0x412/0x560 [ 1599.238824][T31202] _copy_to_user+0x31/0xb0 [ 1599.238858][T31202] simple_read_from_buffer+0xe1/0x170 [ 1599.238909][T31202] proc_fail_nth_read+0x1bb/0x230 [ 1599.238944][T31202] ? __pfx_proc_fail_nth_read+0x10/0x10 [ 1599.238976][T31202] ? rw_verify_area+0x2a6/0x4d0 [ 1599.238996][T31202] ? __pfx_proc_fail_nth_read+0x10/0x10 [ 1599.239026][T31202] vfs_read+0x20c/0xa70 [ 1599.239044][T31202] ? fdget_pos+0x246/0x320 [ 1599.239080][T31202] ? __pfx___mutex_lock+0x10/0x10 [ 1599.239104][T31202] ? __pfx_vfs_read+0x10/0x10 [ 1599.239129][T31202] ? __fget_files+0x2a/0x420 [ 1599.239170][T31202] ? __fget_files+0x3a0/0x420 [ 1599.239199][T31202] ? __fget_files+0x2a/0x420 [ 1599.239239][T31202] ksys_read+0x150/0x270 [ 1599.239264][T31202] ? __pfx_ksys_read+0x10/0x10 [ 1599.239301][T31202] do_syscall_64+0x14d/0xf80 [ 1599.239322][T31202] ? trace_irq_disable+0x3b/0x150 [ 1599.239353][T31202] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1599.239375][T31202] ? clear_bhb_loop+0x40/0x90 [ 1599.239402][T31202] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1599.239423][T31202] RIP: 0033:0x7fe61ad5cfce [ 1599.239445][T31202] Code: 08 0f 85 a5 a8 ff ff 49 89 fb 48 89 f0 48 89 d7 48 89 ce 4c 89 c2 4d 89 ca 4c 8b 44 24 08 4c 8b 4c 24 10 4c 89 5c 24 08 0f 05 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 80 00 00 00 00 48 83 ec 08 [ 1599.239465][T31202] RSP: 002b:00007fe61bca4fe8 EFLAGS: 00000246 ORIG_RAX: 0000000000000000 [ 1599.239489][T31202] RAX: ffffffffffffffda RBX: 00007fe61bca56c0 RCX: 00007fe61ad5cfce [ 1599.239506][T31202] RDX: 000000000000000f RSI: 00007fe61bca50a0 RDI: 000000000000000d [ 1599.239521][T31202] RBP: 00007fe61bca5090 R08: 0000000000000000 R09: 0000000000000000 [ 1599.239535][T31202] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 1599.239548][T31202] R13: 00007fe61b016038 R14: 00007fe61b015fa0 R15: 00007ffd94c54148 [ 1599.239585][T31202] [ 1599.504978][T31214] xt_addrtype: input interface limitation not valid in POSTROUTING and OUTPUT [ 1599.561125][T31208] SET target dimension over the limit! [ 1600.215614][T31250] syzkaller0: entered promiscuous mode [ 1600.243015][T31250] syzkaller0: entered allmulticast mode [ 1600.697602][T31266] syzkaller0: entered promiscuous mode [ 1600.703149][T31266] syzkaller0: entered allmulticast mode [ 1600.775395][T21760] Bluetooth: hci2: unexpected cc 0x0c03 length: 249 > 1 [ 1600.788918][T21760] Bluetooth: hci2: unexpected cc 0x1003 length: 249 > 9 [ 1600.810501][T21760] Bluetooth: hci2: unexpected cc 0x1001 length: 249 > 9 [ 1600.830878][T21760] Bluetooth: hci2: unexpected cc 0x0c23 length: 249 > 4 [ 1600.839254][T21760] Bluetooth: hci2: unexpected cc 0x0c38 length: 249 > 2 [ 1601.565071][ T6331] net_ratelimit: 22 callbacks suppressed [ 1601.565092][ T6331] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1601.633583][T31273] wg1 speed is unknown, defaulting to 1000 [ 1601.642268][T31273] lo speed is unknown, defaulting to 1000 [ 1601.807311][T31291] ip6t_REJECT: TCP_RESET illegal for non-tcp [ 1601.967294][T20962] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1602.140526][T31315] xt_socket: unknown flags 0xe4 [ 1602.385561][T31322] __nla_validate_parse: 17 callbacks suppressed [ 1602.385583][T31322] netlink: 28 bytes leftover after parsing attributes in process `syz.2.15498'. [ 1602.499295][T31329] netlink: 256 bytes leftover after parsing attributes in process `syz.6.15500'. [ 1602.550120][T31333] openvswitch: netlink: Missing key (keys=40, expected=10000000) [ 1602.610073][ T6331] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1602.742810][T31342] netlink: 4 bytes leftover after parsing attributes in process `syz.2.15503'. [ 1602.757804][T31340] netlink: 148 bytes leftover after parsing attributes in process `syz.5.15504'. [ 1602.849735][T20299] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1602.887045][T31273] chnl_net:caif_netlink_parms(): no params data found [ 1602.911363][T31352] nbd: must specify a size in bytes for the device [ 1602.925899][T21760] Bluetooth: hci2: command tx timeout [ 1603.047623][T31358] tipc: Enabling of bearer rejected, failed to enable media [ 1603.083764][T31273] bridge0: port 1(bridge_slave_0) entered blocking state [ 1603.121330][T31273] bridge0: port 1(bridge_slave_0) entered disabled state [ 1603.135293][T27603] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1603.161511][T31273] bridge_slave_0: entered allmulticast mode [ 1603.199919][T31273] bridge_slave_0: entered promiscuous mode [ 1603.236137][T31370] netlink: 'syz.6.15512': attribute type 1 has an invalid length. [ 1603.270950][T31273] bridge0: port 2(bridge_slave_1) entered blocking state [ 1603.299138][T31273] bridge0: port 2(bridge_slave_1) entered disabled state [ 1603.306997][T31273] bridge_slave_1: entered allmulticast mode [ 1603.317484][T31273] bridge_slave_1: entered promiscuous mode [ 1603.382848][T31370] bond2: entered promiscuous mode [ 1603.391333][T31370] 8021q: adding VLAN 0 to HW filter on device bond2 [ 1603.492413][T31273] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 1603.509857][T31273] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 1603.536430][T31380] SET target dimension over the limit! [ 1603.591019][T31379] netlink: 'syz.5.15513': attribute type 1 has an invalid length. [ 1603.649705][ T6327] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1603.657996][ T6327] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1603.674998][T31273] team0: Port device team_slave_0 added [ 1603.711638][T31273] team0: Port device team_slave_1 added [ 1603.886951][T31273] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 1603.890495][T31397] netlink: 28 bytes leftover after parsing attributes in process `syz.5.15519'. [ 1603.895433][T31273] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 1603.974095][T31273] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 1603.998417][T31273] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 1604.040620][T31399] netlink: 212376 bytes leftover after parsing attributes in process `syz.6.15521'. [ 1604.051900][T31273] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 1604.096583][T31403] netlink: 8 bytes leftover after parsing attributes in process `syz.5.15522'. [ 1604.115632][T31403] netlink: 24 bytes leftover after parsing attributes in process `syz.5.15522'. [ 1604.135737][T31273] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 1604.179856][T31403] netlink: 'syz.5.15522': attribute type 11 has an invalid length. [ 1604.224098][T31403] netlink: 199828 bytes leftover after parsing attributes in process `syz.5.15522'. [ 1604.247454][T31406] xt_hashlimit: size too large, truncated to 1048576 [ 1604.288554][T20962] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1604.351009][T31273] hsr_slave_0: entered promiscuous mode [ 1604.385623][T31273] hsr_slave_1: entered promiscuous mode [ 1604.478912][T31415] netlink: 104 bytes leftover after parsing attributes in process `syz.6.15526'. [ 1604.685054][ T6331] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1604.982230][T31273] netdevsim netdevsim0 netdevsim3 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 1605.004411][T21760] Bluetooth: hci2: command tx timeout [ 1605.013893][T31273] netdevsim netdevsim0 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1605.181957][T31273] netdevsim netdevsim0 netdevsim2 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 1605.216432][T31273] netdevsim netdevsim0 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1605.266175][T31438] veth0_to_bridge: vlans aren't supported yet for dev_uc|mc_add() [ 1605.356870][T31273] netdevsim netdevsim0 netdevsim1 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 1605.384505][T31273] netdevsim netdevsim0 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1605.422035][T31444] bond_slave_0: entered allmulticast mode [ 1605.447935][T31446] netlink: 'syz.2.15534': attribute type 4 has an invalid length. [ 1605.448570][T31444] : renamed from veth1_vlan (while UP) [ 1605.551140][T31443] syzkaller0: entered promiscuous mode [ 1605.557263][T31443] syzkaller0: entered allmulticast mode [ 1605.589807][T31273] netdevsim netdevsim0 netdevsim0 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 1605.602625][T31273] netdevsim netdevsim0 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1606.766073][ T6331] net_ratelimit: 6 callbacks suppressed [ 1606.766096][ T6331] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1607.084236][T21760] Bluetooth: hci2: command tx timeout [ 1607.647464][T27607] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1607.811424][ T6327] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1608.105936][T31468] netlink: 'syz.2.15541': attribute type 10 has an invalid length. [ 1608.157530][T31468] netdevsim netdevsim2 netdevsim0: left promiscuous mode [ 1608.167800][T31468] batman_adv: batadv0: Adding interface: netdevsim0 [ 1608.176429][T31468] batman_adv: batadv0: The MTU of interface netdevsim0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 1608.204222][T31468] batman_adv: batadv0: Not using interface netdevsim0 (retrying later): interface not active [ 1608.228836][T31473] syzkaller1: entered promiscuous mode [ 1608.244121][T31473] syzkaller1: entered allmulticast mode [ 1608.410203][T31273] netdevsim netdevsim0 netdevsim0: renamed from eth0 [ 1608.423202][T31273] netdevsim netdevsim0 netdevsim1: renamed from eth1 [ 1608.443063][T31273] netdevsim netdevsim0 netdevsim2: renamed from eth2 [ 1608.457861][T31481] netlink: 'syz.5.15544': attribute type 1 has an invalid length. [ 1608.467046][T31273] netdevsim netdevsim0 netdevsim3: renamed from eth3 [ 1608.481506][T31481] netlink: 'syz.5.15544': attribute type 3 has an invalid length. [ 1608.500330][T31481] __nla_validate_parse: 1 callbacks suppressed [ 1608.500349][T31481] netlink: 224 bytes leftover after parsing attributes in process `syz.5.15544'. [ 1608.542535][T31483] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1608.551896][ C1] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1608.787298][T18150] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1608.835634][T31273] 8021q: adding VLAN 0 to HW filter on device bond0 [ 1608.852918][ T6331] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1608.894468][T31273] 8021q: adding VLAN 0 to HW filter on device team0 [ 1608.922154][T20962] bridge0: port 1(bridge_slave_0) entered blocking state [ 1608.929460][T20962] bridge0: port 1(bridge_slave_0) entered forwarding state [ 1608.942413][T30648] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1609.045303][T31512] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 1609.164144][T21760] Bluetooth: hci2: command tx timeout [ 1609.282125][T27607] bridge0: port 2(bridge_slave_1) entered blocking state [ 1609.289415][T27607] bridge0: port 2(bridge_slave_1) entered forwarding state [ 1609.380594][T31509] wg1 speed is unknown, defaulting to 1000 [ 1609.430963][T31509] lo speed is unknown, defaulting to 1000 [ 1609.453232][T31273] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 1609.485669][T31517] netlink: 'syz.2.15551': attribute type 1 has an invalid length. [ 1609.709834][T31523] bond2: (slave gretap2): making interface the new active one [ 1609.765320][T31523] bond2: (slave gretap2): Enslaving as an active interface with an up link [ 1609.885454][ T6324] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1610.055104][T31273] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 1610.700079][T31273] veth0_vlan: entered promiscuous mode [ 1610.721198][T31273] veth1_vlan: entered promiscuous mode [ 1610.749369][T31560] netlink: 28 bytes leftover after parsing attributes in process `syz.1.15561'. [ 1610.759206][T31560] netlink: 'syz.1.15561': attribute type 7 has an invalid length. [ 1610.794325][T31560] netlink: 16 bytes leftover after parsing attributes in process `syz.1.15561'. [ 1610.847329][T31273] veth0_macvtap: entered promiscuous mode [ 1610.882447][T31273] veth1_macvtap: entered promiscuous mode [ 1610.921765][T31273] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 1610.978270][T31273] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 1611.064787][T20960] netdevsim netdevsim0 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 1611.125536][T20960] netdevsim netdevsim0 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 1611.145183][T20960] netdevsim netdevsim0 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 1611.211305][T20962] netdevsim netdevsim0 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 1611.347842][ T1302] lec:lec_start_xmit: lec0:No lecd attached [ 1611.432724][T31578] netlink: 4 bytes leftover after parsing attributes in process `syz.6.15563'. [ 1611.442316][T31578] bridge_slave_1: left allmulticast mode [ 1611.459978][T31580] netlink: 16215 bytes leftover after parsing attributes in process `syz.5.15568'. [ 1611.465605][T31578] bridge_slave_1: left promiscuous mode [ 1611.493555][T31578] bridge0: port 2(bridge_slave_1) entered disabled state [ 1611.513625][T31578] bridge_slave_0: left allmulticast mode [ 1611.519937][T31578] bridge_slave_0: left promiscuous mode [ 1611.526776][T31578] bridge0: port 1(bridge_slave_0) entered disabled state [ 1611.625293][T31587] netlink: 56 bytes leftover after parsing attributes in process `syz.2.15569'. [ 1611.644173][T31587] netlink: 24 bytes leftover after parsing attributes in process `syz.2.15569'. [ 1611.737493][T31587] netlink: 256 bytes leftover after parsing attributes in process `syz.2.15569'. [ 1611.747078][T31587] netlink: 'syz.2.15569': attribute type 9 has an invalid length. [ 1611.815922][T31583] bond3: (slave bond_slave_1): Device is not bonding slave [ 1611.829514][T31583] bond3: option active_slave: invalid value (bond_slave_1) [ 1611.870558][T31583] bond3 (unregistering): Released all slaves [ 1611.963522][T20962] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 1611.977966][T20291] net_ratelimit: 6 callbacks suppressed [ 1611.977980][T20291] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1612.006045][T20962] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 1612.160333][T20962] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 1612.168504][T20962] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 1612.296218][T27602] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1612.357859][T31617] lo: MTU too low for tipc bearer [ 1612.363609][T31617] tipc: Enabling of bearer rejected, failed to enable media [ 1612.755645][T31640] netlink: 'syz.6.15586': attribute type 29 has an invalid length. [ 1612.785191][T31640] netlink: 20 bytes leftover after parsing attributes in process `syz.6.15586'. [ 1612.862485][T31643] 8021q: adding VLAN 0 to HW filter on device team0 [ 1612.879360][T31643] A link change request failed with some changes committed already. Interface caif0 may have been left with an inconsistent configuration, please check. [ 1612.895845][T31640] netlink: 'syz.6.15586': attribute type 29 has an invalid length. [ 1612.906857][T31648] netlink: 'syz.6.15586': attribute type 29 has an invalid length. [ 1612.939038][T31640] netlink: 'syz.6.15586': attribute type 29 has an invalid length. [ 1612.964389][T31649] netlink: 36 bytes leftover after parsing attributes in process `syz.1.15589'. [ 1613.247629][ T5976] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1613.886630][ T5976] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1613.960522][T31708] batadv_slave_0: entered promiscuous mode [ 1613.983931][T31710] __nla_validate_parse: 1 callbacks suppressed [ 1614.014223][T31710] netlink: 484 bytes leftover after parsing attributes in process `syz.2.15606'. [ 1614.045948][ T6331] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1614.216483][T31723] netlink: 'syz.5.15612': attribute type 1 has an invalid length. [ 1614.236602][T31723] netlink: 4 bytes leftover after parsing attributes in process `syz.5.15612'. [ 1614.252076][T31723] netlink: 28 bytes leftover after parsing attributes in process `syz.5.15612'. [ 1614.338366][T31728] netlink: 24 bytes leftover after parsing attributes in process `syz.2.15614'. [ 1614.372740][T31735] openvswitch: netlink: Message has -2 unknown bytes. [ 1614.401211][T31735] tipc: Enabling of bearer rejected, failed to enable media [ 1614.524564][ C1] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1614.533548][ C1] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1614.544080][ C1] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1614.573803][T31737] IPVS: Scheduler module ip_vs_sip not found [ 1614.588738][T31744] netlink: 8 bytes leftover after parsing attributes in process `syz.2.15617'. [ 1614.861661][T31764] netlink: 84 bytes leftover after parsing attributes in process `syz.0.15623'. [ 1614.925142][T31772] netlink: 84 bytes leftover after parsing attributes in process `syz.0.15623'. [ 1614.967609][T31771] netlink: 8 bytes leftover after parsing attributes in process `syz.1.15625'. [ 1615.188393][T31785] netdevsim netdevsim6 netdevsim0: entered promiscuous mode [ 1615.239963][T31785] netlink: 12 bytes leftover after parsing attributes in process `syz.6.15630'. [ 1615.268528][T31790] netlink: 8 bytes leftover after parsing attributes in process `syz.0.15629'. [ 1615.293157][T31784] bond1: option lacp_active: mode dependency failed, not supported in mode balance-rr(0) [ 1615.307575][T31784] bond1 (unregistering): Released all slaves [ 1615.318867][T31795] netlink: 'syz.5.15631': attribute type 7 has an invalid length. [ 1616.176603][T31842] gre0: entered promiscuous mode [ 1616.181983][T31842] gre0: entered allmulticast mode [ 1616.663916][T31876] netlink: 'syz.0.15656': attribute type 1 has an invalid length. [ 1616.764001][ C1] lec0: NETDEV WATCHDOG: CPU: 1: transmit queue 0 timed out 5420 ms [ 1616.772114][ C1] lec:lec_tx_timeout: lec0 [ 1616.832641][T31890] syzkaller1: entered promiscuous mode [ 1616.845312][T31890] syzkaller1: entered allmulticast mode [ 1617.167206][ T6331] net_ratelimit: 26 callbacks suppressed [ 1617.167229][ T6331] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1617.580395][T31939] netlink: 'syz.5.15673': attribute type 4 has an invalid length. [ 1617.638755][T31943] netlink: 'syz.5.15673': attribute type 4 has an invalid length. [ 1617.948904][T20962] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1618.206207][ T6324] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1618.283136][T31980] xt_HMARK: proto mask must be zero with L3 mode [ 1618.417648][T31984] netlink: 'syz.2.15687': attribute type 1 has an invalid length. [ 1618.426122][T31982] syz_tun: entered allmulticast mode [ 1618.449111][T31982] dvmrp8: entered allmulticast mode [ 1618.489554][T31982] dvmrp8: left allmulticast mode [ 1618.576810][T31981] syz_tun: left allmulticast mode [ 1618.625548][T31988] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1618.635672][ C0] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1618.690621][T31988] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1618.700786][T27607] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1618.724244][ C0] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1618.845791][T31990] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1618.855138][ C1] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1618.953598][T32004] netlink: 'syz.1.15693': attribute type 1 has an invalid length. [ 1619.157343][T32013] __nla_validate_parse: 43 callbacks suppressed [ 1619.157368][T32013] netlink: 212368 bytes leftover after parsing attributes in process `syz.1.15695'. [ 1619.252471][T32019] netlink: 16 bytes leftover after parsing attributes in process `syz.0.15698'. [ 1619.304666][T32017] netlink: 16 bytes leftover after parsing attributes in process `syz.0.15698'. [ 1619.336848][T32025] netlink: 8 bytes leftover after parsing attributes in process `syz.1.15700'. [ 1619.337973][T32023] netlink: 44 bytes leftover after parsing attributes in process `syz.1.15700'. [ 1619.413621][T32033] netlink: 'syz.2.15699': attribute type 1 has an invalid length. [ 1619.603830][T32040] netlink: 'syz.6.15703': attribute type 9 has an invalid length. [ 1619.623897][T32040] netlink: 4 bytes leftover after parsing attributes in process `syz.6.15703'. [ 1619.695947][T32040] netlink: 'syz.6.15703': attribute type 9 has an invalid length. [ 1619.731952][T32040] netlink: 4 bytes leftover after parsing attributes in process `syz.6.15703'. [ 1619.826558][T20962] netdevsim netdevsim6 netdevsim0: set [0, 0] type 1 family 0 port 8472 - 0 [ 1619.848497][T20962] netdevsim netdevsim6 netdevsim1: set [0, 0] type 1 family 0 port 8472 - 0 [ 1619.875401][T20962] netdevsim netdevsim6 netdevsim2: set [0, 0] type 1 family 0 port 8472 - 0 [ 1619.915944][T20960] netdevsim netdevsim6 netdevsim3: set [0, 0] type 1 family 0 port 8472 - 0 [ 1620.000012][T32050] netlink: 12 bytes leftover after parsing attributes in process `syz.0.15706'. [ 1620.007922][T32052] syzkaller0: entered promiscuous mode [ 1620.025441][T32052] syzkaller0: entered allmulticast mode [ 1620.138793][T32057] netlink: 12 bytes leftover after parsing attributes in process `syz.6.15708'. [ 1620.377291][T32066] netlink: 'syz.0.15709': attribute type 3 has an invalid length. [ 1620.839953][T32089] veth0_macvtap: left promiscuous mode [ 1621.133838][T32108] netlink: 32 bytes leftover after parsing attributes in process `syz.6.15727'. [ 1621.173115][T32106] syzkaller0: entered promiscuous mode [ 1621.179606][T32106] syzkaller0: entered allmulticast mode [ 1621.610449][T32100] netlink: 'syz.0.15724': attribute type 1 has an invalid length. [ 1621.657772][T32131] netlink: 'syz.5.15737': attribute type 33 has an invalid length. [ 1621.702922][T32100] 8021q: adding VLAN 0 to HW filter on device bond1 [ 1621.715596][T18138] gretap0: left allmulticast mode [ 1621.720702][T18138] gretap0: left promiscuous mode [ 1621.751266][T18138] bridge0: port 1(gretap0) entered disabled state [ 1622.182561][T18138] bond4 (unregistering): (slave gretap1): Releasing active interface [ 1622.205994][ T5976] net_ratelimit: 8 callbacks suppressed [ 1622.206022][ T5976] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1622.361027][T18138] bond2 (unregistering): (slave bridge2): Releasing active interface [ 1622.371518][ T6324] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1622.414811][T20960] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1622.480219][T18138] bond4 (unregistering): (slave bridge4): Releasing active interface [ 1622.531734][T18138] bond6 (unregistering): (slave bridge5): Releasing active interface [ 1622.579159][T18138] bond8 (unregistering): (slave bridge6): Releasing active interface [ 1622.749123][T18138] bond9 (unregistering): (slave bridge9): Releasing active interface [ 1622.861554][T18138] bond10 (unregistering): (slave bridge12): Releasing active interface [ 1622.935083][T18138] bond12 (unregistering): (slave bridge13): Releasing active interface [ 1622.944843][T18138] bridge13 (unregistering): left promiscuous mode [ 1622.951312][T18138] bridge13 (unregistering): left allmulticast mode [ 1623.008245][T18138] bond13 (unregistering): (slave bridge14): Releasing active interface [ 1623.068462][T18138] bond15 (unregistering): (slave bridge15): Releasing active interface [ 1623.129868][T18138] bond16 (unregistering): (slave bridge16): Releasing active interface [ 1623.170354][T18138] bond17 (unregistering): (slave bridge17): Releasing active interface [ 1623.244835][T18138] bond0 (unregistering): Released all slaves [ 1623.261094][T18138] bond1 (unregistering): Released all slaves [ 1623.276657][T18138] bond2 (unregistering): Released all slaves [ 1623.297725][T18138] bond3 (unregistering): Released all slaves [ 1623.313811][T18138] bond4 (unregistering): Released all slaves [ 1623.331349][T18138] bond5 (unregistering): Released all slaves [ 1623.349736][T18138] bond6 (unregistering): Released all slaves [ 1623.365840][T18138] bond7 (unregistering): Released all slaves [ 1623.381567][T18138] bond8 (unregistering): Released all slaves [ 1623.403173][T18138] bond9 (unregistering): Released all slaves [ 1623.417738][T20291] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1623.428601][T18138] bond10 (unregistering): Released all slaves [ 1623.448786][T18138] bond11 (unregistering): (slave veth5): Releasing active interface [ 1623.459927][T18138] bond11 (unregistering): (slave veth7): Releasing active interface [ 1623.469898][T18138] bond11 (unregistering): Released all slaves [ 1623.489046][ T5976] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1623.502707][T18138] bond12 (unregistering): Released all slaves [ 1623.520747][T18138] bond13 (unregistering): Released all slaves [ 1623.534441][T18140] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1623.547744][T18138] bond14 (unregistering): Released all slaves [ 1623.563862][T18138] bond15 (unregistering): Released all slaves [ 1623.585477][T18138] bond16 (unregistering): Released all slaves [ 1623.600791][T18138] bond17 (unregistering): Released all slaves [ 1623.657626][T32134] team0: Port device dummy0 removed [ 1623.958562][T18138] 9: left promiscuous mode [ 1624.109662][T18138] tipc: Left network mode [ 1624.127186][ C1] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1624.325585][ T8599] Bluetooth: hci0: unexpected cc 0x0c03 length: 249 > 1 [ 1624.340180][ T8599] Bluetooth: hci0: unexpected cc 0x1003 length: 249 > 9 [ 1624.349501][ T8599] Bluetooth: hci0: unexpected cc 0x1001 length: 249 > 9 [ 1624.366910][ T8599] Bluetooth: hci0: unexpected cc 0x0c23 length: 249 > 4 [ 1624.375194][ T8599] Bluetooth: hci0: unexpected cc 0x0c38 length: 249 > 2 [ 1624.453572][ T6324] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1624.653150][T18150] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1624.824625][T32197] ip6t_srh: unknown srh invflags 4000 [ 1624.848183][T32197] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1624.958169][T32189] syzkaller0: entered promiscuous mode [ 1624.963728][T32189] syzkaller0: entered allmulticast mode [ 1625.095829][T32184] wg1 speed is unknown, defaulting to 1000 [ 1626.538475][ T8599] Bluetooth: hci0: command tx timeout [ 1627.497837][T32184] lo speed is unknown, defaulting to 1000 [ 1627.581953][ T6324] net_ratelimit: 6 callbacks suppressed [ 1627.581976][ T6324] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1627.663693][T32233] sock: sock_timestamping_bind_phc: sock not bind to device [ 1627.774883][T32239] __nla_validate_parse: 9 callbacks suppressed [ 1627.774904][T32239] netlink: 8 bytes leftover after parsing attributes in process `syz.2.15764'. [ 1627.918112][T32239] netdevsim netdevsim2 netdevsim0: entered promiscuous mode [ 1627.945787][T32239] netlink: 148 bytes leftover after parsing attributes in process `syz.2.15764'. [ 1628.054511][T18150] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1628.077621][T32236] wg1 speed is unknown, defaulting to 1000 [ 1628.162232][T32236] lo speed is unknown, defaulting to 1000 [ 1628.216183][T32254] netlink: 100 bytes leftover after parsing attributes in process `syz.0.15768'. [ 1628.271557][T32255] x_tables: duplicate underflow at hook 2 [ 1628.287599][T20299] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1628.604472][T21760] Bluetooth: hci0: command tx timeout [ 1628.612018][ T6324] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1628.699980][T32273] netlink: 'syz.0.15773': attribute type 1 has an invalid length. [ 1628.719369][T32273] bridge1: entered promiscuous mode [ 1628.726124][T32273] bridge1: entered allmulticast mode [ 1628.747085][T32273] team0: Port device bridge1 added [ 1628.829568][T32276] netlink: 'syz.1.15774': attribute type 1 has an invalid length. [ 1628.844428][T21760] Bluetooth: hci3: command 0x0406 tx timeout [ 1628.885347][T32276] netlink: 'syz.1.15774': attribute type 2 has an invalid length. [ 1628.915997][T32276] netlink: 'syz.1.15774': attribute type 1 has an invalid length. [ 1628.938335][T32276] netlink: 12 bytes leftover after parsing attributes in process `syz.1.15774'. [ 1628.948132][T32276] netlink: 'syz.1.15774': attribute type 1 has an invalid length. [ 1628.957434][T32276] netlink: 12 bytes leftover after parsing attributes in process `syz.1.15774'. [ 1628.967025][T32276] netlink: 'syz.1.15774': attribute type 1 has an invalid length. [ 1628.975974][T32276] netlink: 12 bytes leftover after parsing attributes in process `syz.1.15774'. [ 1628.987476][T32276] netlink: 'syz.1.15774': attribute type 1 has an invalid length. [ 1628.996089][T32276] netlink: 12 bytes leftover after parsing attributes in process `syz.1.15774'. [ 1629.104749][T18138] team0 (unregistering): Port device batadv1 removed [ 1629.116735][T18138] pimreg (unregistering): left allmulticast mode [ 1629.175561][T18150] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1629.617945][T18150] smc: removing ib device syz0 [ 1629.649863][ T6324] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1630.149301][T32184] chnl_net:caif_netlink_parms(): no params data found [ 1630.316561][T20960] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1630.685330][ T8599] Bluetooth: hci0: command tx timeout [ 1630.697043][T20291] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1631.332178][T30648] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1631.398987][T32184] bridge0: port 1(bridge_slave_0) entered blocking state [ 1631.428078][T32184] bridge0: port 1(bridge_slave_0) entered disabled state [ 1631.457593][T20962] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1631.469323][T32184] bridge_slave_0: entered allmulticast mode [ 1631.493320][T32184] bridge_slave_0: entered promiscuous mode [ 1631.515198][T32184] bridge0: port 2(bridge_slave_1) entered blocking state [ 1631.531143][T32184] bridge0: port 2(bridge_slave_1) entered disabled state [ 1631.550967][T32184] bridge_slave_1: entered allmulticast mode [ 1631.580969][T32184] bridge_slave_1: entered promiscuous mode [ 1631.878913][T32184] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 1631.957304][T32184] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 1632.149873][T32376] netlink: 8 bytes leftover after parsing attributes in process `syz.1.15786'. [ 1632.212076][T32376] netlink: 8 bytes leftover after parsing attributes in process `syz.1.15786'. [ 1632.261615][T32376] netlink: 8 bytes leftover after parsing attributes in process `syz.1.15786'. [ 1632.355152][T32184] team0: Port device team_slave_0 added [ 1632.406697][T32184] team0: Port device team_slave_1 added [ 1632.585388][T20960] net_ratelimit: 1 callbacks suppressed [ 1632.585412][T20960] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1632.624888][T32184] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 1632.646779][T32184] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 1632.700651][T32390] netlink: 'syz.0.15792': attribute type 8 has an invalid length. [ 1632.752579][T32393] xt_CT: You must specify a L4 protocol and not use inversions on it [ 1632.764376][ T8599] Bluetooth: hci0: command tx timeout [ 1632.767765][ T6324] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1632.788878][T32184] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 1632.855213][T32184] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 1632.895063][T32184] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 1633.013607][T32184] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 1633.092258][ T5976] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1633.594202][T32184] hsr_slave_0: entered promiscuous mode [ 1633.605403][T32184] hsr_slave_1: entered promiscuous mode [ 1633.628460][T32184] debugfs: 'hsr0' already exists in 'hsr' [ 1633.649926][T32184] Cannot create hsr debugfs directory [ 1633.775010][T20960] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1633.810912][T32429] __nla_validate_parse: 3 callbacks suppressed [ 1633.810932][T32429] netlink: 12 bytes leftover after parsing attributes in process `syz.0.15797'. [ 1633.816610][ T6324] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1634.145375][T32439] x_tables: ip_tables: icmp match: only valid for protocol 1 [ 1634.385494][T20299] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1634.541236][T32455] netlink: 12 bytes leftover after parsing attributes in process `syz.0.15803'. [ 1634.846864][ T8599] Bluetooth: hci0: command tx timeout [ 1634.852601][ T6331] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1634.895677][T27602] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1635.006251][ T6331] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1635.113286][T32478] netlink: 212 bytes leftover after parsing attributes in process `syz.6.15807'. [ 1635.158670][T32480] netlink: 212 bytes leftover after parsing attributes in process `syz.6.15807'. [ 1635.267918][T32184] netdevsim netdevsim5 eth3 (unregistering): unset [0, 0] type 1 family 0 port 256 - 0 [ 1635.315243][T32184] netdevsim netdevsim5 eth3 (unregistering): unset [0, 1] type 1 family 0 port 8472 - 0 [ 1635.354013][T32184] netdevsim netdevsim5 eth3 (unregistering): unset [1, 0] type 2 family 0 port 38719 - 0 [ 1635.363931][T32184] netdevsim netdevsim5 eth3 (unregistering): unset [1, 1] type 2 family 0 port 6081 - 0 [ 1635.490307][T32488] netlink: 'syz.0.15809': attribute type 3 has an invalid length. [ 1635.545629][T32488] netlink: 'syz.0.15809': attribute type 1 has an invalid length. [ 1635.582394][T32488] netlink: 204 bytes leftover after parsing attributes in process `syz.0.15809'. [ 1635.629737][T32184] netdevsim netdevsim5 eth2 (unregistering): unset [0, 0] type 1 family 0 port 256 - 0 [ 1635.682711][T32184] netdevsim netdevsim5 eth2 (unregistering): unset [0, 1] type 1 family 0 port 8472 - 0 [ 1635.716193][T32184] netdevsim netdevsim5 eth2 (unregistering): unset [1, 0] type 2 family 0 port 38719 - 0 [ 1635.747107][T32184] netdevsim netdevsim5 eth2 (unregistering): unset [1, 1] type 2 family 0 port 6081 - 0 [ 1635.886786][ T6331] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1636.002226][T32184] netdevsim netdevsim5 eth1 (unregistering): unset [0, 0] type 1 family 0 port 256 - 0 [ 1636.020330][T32184] netdevsim netdevsim5 eth1 (unregistering): unset [0, 1] type 1 family 0 port 8472 - 0 [ 1636.074126][T32184] netdevsim netdevsim5 eth1 (unregistering): unset [1, 0] type 2 family 0 port 38719 - 0 [ 1636.086594][T32184] netdevsim netdevsim5 eth1 (unregistering): unset [1, 1] type 2 family 0 port 6081 - 0 [ 1636.222453][T32184] netdevsim netdevsim5 eth0 (unregistering): unset [0, 0] type 1 family 0 port 256 - 0 [ 1636.243159][T32184] netdevsim netdevsim5 eth0 (unregistering): unset [0, 1] type 1 family 0 port 8472 - 0 [ 1636.261981][T32184] netdevsim netdevsim5 eth0 (unregistering): unset [1, 0] type 2 family 0 port 38719 - 0 [ 1636.280438][T32184] netdevsim netdevsim5 eth0 (unregistering): unset [1, 1] type 2 family 0 port 6081 - 0 [ 1636.581593][T32524] netlink: 24 bytes leftover after parsing attributes in process `syz.1.15820'. [ 1636.861813][T32184] netdevsim netdevsim5 netdevsim0: renamed from eth0 [ 1636.900977][T32534] netlink: 32 bytes leftover after parsing attributes in process `syz.6.15823'. [ 1636.929577][T32184] netdevsim netdevsim5 netdevsim1: renamed from eth1 [ 1636.947926][T18138] IPVS: stop unused estimator thread 0... [ 1636.953878][T32537] netlink: 32 bytes leftover after parsing attributes in process `syz.6.15823'. [ 1636.987529][T32184] netdevsim netdevsim5 netdevsim2: renamed from eth2 [ 1637.034530][T32184] netdevsim netdevsim5 netdevsim3: renamed from eth3 [ 1637.089845][T32541] netlink: 'syz.0.15825': attribute type 3 has an invalid length. [ 1637.266719][T32556] lo: entered allmulticast mode [ 1637.279139][T32557] lo: left allmulticast mode [ 1637.317232][T32184] 8021q: adding VLAN 0 to HW filter on device bond0 [ 1637.350308][T32184] 8021q: adding VLAN 0 to HW filter on device team0 [ 1637.385177][T18138] bridge0: port 1(bridge_slave_0) entered blocking state [ 1637.392407][T18138] bridge0: port 1(bridge_slave_0) entered forwarding state [ 1637.461196][T20960] bridge0: port 2(bridge_slave_1) entered blocking state [ 1637.468442][T20960] bridge0: port 2(bridge_slave_1) entered forwarding state [ 1637.612065][T32568] wg1: entered promiscuous mode [ 1637.617934][T32568] wg1: entered allmulticast mode [ 1637.632639][T32568] netlink: 256 bytes leftover after parsing attributes in process `syz.6.15833'. [ 1637.845707][T32577] netlink: 12 bytes leftover after parsing attributes in process `syz.0.15834'. [ 1637.967318][ T6324] net_ratelimit: 4 callbacks suppressed [ 1637.967339][ T6324] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1638.074394][T32586] openvswitch: netlink: Flow get message rejected, Key attribute missing. [ 1638.258898][T32586] bond3: entered allmulticast mode [ 1638.272796][T32184] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 1638.311410][T32603] No such timeout policy "syz0" [ 1638.320460][T32592] C: renamed from lo (while UP) [ 1638.330968][T27602] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1638.357016][T32592] A link change request failed with some changes committed already. Interface C may have been left with an inconsistent configuration, please check. [ 1638.841678][T32623] __nla_validate_parse: 1 callbacks suppressed [ 1638.841705][T32623] netlink: 12 bytes leftover after parsing attributes in process `syz.2.15846'. [ 1638.905706][T32623] xfrm1: entered promiscuous mode [ 1638.911199][T32623] xfrm1: entered allmulticast mode [ 1638.928458][T32623] netlink: 12 bytes leftover after parsing attributes in process `syz.2.15846'. [ 1639.005027][T20291] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1639.206021][T32184] veth0_vlan: entered promiscuous mode [ 1639.228221][T32184] veth1_vlan: entered promiscuous mode [ 1639.330632][T32184] veth0_macvtap: entered promiscuous mode [ 1639.357108][T32645] netlink: 4 bytes leftover after parsing attributes in process `syz.0.15856'. [ 1639.368283][T32184] veth1_macvtap: entered promiscuous mode [ 1639.453483][T32645] macvtap1: entered promiscuous mode [ 1639.459052][T32645] vlan0: entered promiscuous mode [ 1639.465054][T32645] macvtap1: entered allmulticast mode [ 1639.470701][T32645] vlan0: entered allmulticast mode [ 1639.477116][T32645] veth0_vlan: entered allmulticast mode [ 1639.490394][ T103] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1639.563067][T32184] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 1639.675980][T32184] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 1639.732216][T32658] syzkaller0: entered promiscuous mode [ 1639.741132][T32658] syzkaller0: entered allmulticast mode [ 1639.781539][T20962] netdevsim netdevsim5 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 1639.892937][T20962] netdevsim netdevsim5 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 1639.906022][T20962] netdevsim netdevsim5 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 1639.947396][T20962] netdevsim netdevsim5 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 1640.045042][ T6324] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1640.054996][T19973] lec:lec_start_xmit: lec0:No lecd attached [ 1640.255232][T20962] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 1640.263137][T20962] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 1640.381315][T32694] netlink: 12 bytes leftover after parsing attributes in process `syz.6.15868'. [ 1640.448633][ T5976] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1640.498700][T27602] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 1640.516981][T27602] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 1640.561425][T32697] netlink: 220 bytes leftover after parsing attributes in process `syz.2.15870'. [ 1640.586329][T32697] netlink: 220 bytes leftover after parsing attributes in process `syz.2.15870'. [ 1640.614569][T32702] netlink: 8 bytes leftover after parsing attributes in process `syz.6.15871'. [ 1640.635112][T18150] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1640.671011][T32702] bridge_slave_0: entered promiscuous mode [ 1640.708621][T32710] netlink: 'syz.1.15873': attribute type 1 has an invalid length. [ 1640.776092][T32716] Bluetooth: MGMT ver 1.23 [ 1640.997658][T32710] workqueue: Failed to create a rescuer kthread for wq "bond4": -EINTR [ 1641.088089][T20291] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1641.197424][T32741] netlink: 212368 bytes leftover after parsing attributes in process `syz.6.15878'. [ 1641.286424][T32743] netlink: 144 bytes leftover after parsing attributes in process `syz.6.15878'. [ 1641.370540][T32748] netlink: 232 bytes leftover after parsing attributes in process `syz.6.15878'. [ 1641.611534][T32759] syzkaller0: entered promiscuous mode [ 1641.622754][T32759] syzkaller0: entered allmulticast mode [ 1642.318402][ T310] hsr_slave_0 (unregistering): left promiscuous mode [ 1643.149210][ T341] syzkaller0: entered promiscuous mode [ 1643.174749][ T341] syzkaller0: entered allmulticast mode [ 1643.189085][T20291] net_ratelimit: 6 callbacks suppressed [ 1643.189104][T20291] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1643.526860][T30648] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1643.929766][ T371] netlink: 'syz.1.15905': attribute type 1 has an invalid length. [ 1643.945409][ T371] netlink: 'syz.1.15905': attribute type 2 has an invalid length. [ 1643.963580][ T371] netlink: 'syz.1.15905': attribute type 1 has an invalid length. [ 1644.028682][ T371] __nla_validate_parse: 7 callbacks suppressed [ 1644.028704][ T371] netlink: 16 bytes leftover after parsing attributes in process `syz.1.15905'. [ 1644.032243][ T382] netlink: 12 bytes leftover after parsing attributes in process `syz.6.15907'. [ 1644.116357][T18150] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1644.206546][T20291] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1644.533007][ T403] syzkaller0: entered promiscuous mode [ 1644.571462][ T403] syzkaller0: entered allmulticast mode [ 1644.595853][ T405] netlink: 1 bytes leftover after parsing attributes in process `syz.0.15913'. [ 1644.610269][ T405] tipc: Invalid UDP bearer configuration [ 1644.610324][ T405] tipc: Enabling of bearer rejected, failed to enable media [ 1644.814332][ T408] block nbd5: server does not support multiple connections per device. [ 1644.823176][ T408] block nbd5: shutting down sockets [ 1645.078699][ T420] IPVS: set_ctl: invalid protocol: 60 10.1.1.2:20000 [ 1645.253817][ T6324] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1645.269460][T27603] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1645.498303][ T430] geneve3: entered promiscuous mode [ 1645.514732][T20962] netdevsim netdevsim0 netdevsim0: set [1, 1] type 2 family 0 port 58611 - 0 [ 1645.545226][T20962] netdevsim netdevsim0 netdevsim1: set [1, 1] type 2 family 0 port 58611 - 0 [ 1645.577955][T20962] netdevsim netdevsim0 netdevsim2: set [1, 1] type 2 family 0 port 58611 - 0 [ 1645.621951][T20962] netdevsim netdevsim0 netdevsim3: set [1, 1] type 2 family 0 port 58611 - 0 [ 1645.804080][ C1] lec0: NETDEV WATCHDOG: CPU: 1: transmit queue 0 timed out 5750 ms [ 1645.812196][ C1] lec:lec_tx_timeout: lec0 [ 1646.284565][ T6324] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1646.465655][T27602] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1646.478360][T32742] Set syz1 is full, maxelem 65536 reached [ 1646.598787][ T446] netlink: 44 bytes leftover after parsing attributes in process `syz.5.15924'. [ 1646.614411][ T5976] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1648.014159][ T418] nci: __nci_request: wait_for_completion_interruptible_timeout failed -512 [ 1648.318951][ T452] syzkaller1: entered promiscuous mode [ 1648.325446][ T448] netlink: 20 bytes leftover after parsing attributes in process `syz.0.15925'. [ 1648.365036][T20291] net_ratelimit: 2 callbacks suppressed [ 1648.365059][T20291] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1648.405715][ T452] syzkaller1: entered allmulticast mode [ 1648.694883][T18138] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1648.821879][ T484] netlink: 4 bytes leftover after parsing attributes in process `syz.2.15934'. [ 1649.084955][T20291] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1649.405413][T20291] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1649.457674][ T511] netlink: 12 bytes leftover after parsing attributes in process `syz.6.15942'. [ 1649.654344][ T5976] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1649.931991][ T533] bond4: Unable to set down delay as MII monitoring is disabled [ 1649.948330][ T533] bond4 (unregistering): Released all slaves [ 1649.985639][T27602] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1650.085658][T27602] netdevsim netdevsim4 eth1: set [1, 0] type 2 family 0 port 6081 - 0 [ 1650.124560][T27602] netdevsim netdevsim4 eth2: set [1, 0] type 2 family 0 port 6081 - 0 [ 1650.144980][T27602] netdevsim netdevsim4 eth3: set [1, 0] type 2 family 0 port 6081 - 0 [ 1650.160925][T27602] netdevsim netdevsim4 eth4: set [1, 0] type 2 family 0 port 6081 - 0 [ 1650.188447][T27602] netdevsim netdevsim3 eth5: set [1, 0] type 2 family 0 port 6081 - 0 [ 1650.220589][T27602] netdevsim netdevsim3 eth6: set [1, 0] type 2 family 0 port 6081 - 0 [ 1650.262587][T27602] netdevsim netdevsim3 eth7: set [1, 0] type 2 family 0 port 6081 - 0 [ 1650.295489][T27602] netdevsim netdevsim3 eth8: set [1, 0] type 2 family 0 port 6081 - 0 [ 1650.448973][T20291] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1650.625939][ T556] netlink: 4 bytes leftover after parsing attributes in process `syz.2.15950'. [ 1650.650371][ T558] GUP no longer grows the stack in syz.5.15951 (558): 200000003000-20000000a000 (200000001000) [ 1650.668564][ T558] CPU: 0 UID: 0 PID: 558 Comm: syz.5.15951 Not tainted syzkaller #0 PREEMPT(full) [ 1650.668594][ T558] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 02/12/2026 [ 1650.668608][ T558] Call Trace: [ 1650.668617][ T558] [ 1650.668627][ T558] dump_stack_lvl+0xe8/0x150 [ 1650.668662][ T558] __get_user_pages+0x2453/0x29d0 [ 1650.668696][ T558] ? __lock_acquire+0x6b5/0x2cf0 [ 1650.668746][ T558] ? __gup_longterm_locked+0xc4e/0x1630 [ 1650.668778][ T558] ? down_read_killable+0x1bb/0x340 [ 1650.668809][ T558] __gup_longterm_locked+0xdcf/0x1630 [ 1650.668869][ T558] gup_fast_fallback+0x1d82/0x22e0 [ 1650.668940][ T558] ? __pfx_gup_fast_fallback+0x10/0x10 [ 1650.668975][ T558] ? is_valid_gup_args+0x11f/0x200 [ 1650.669009][ T558] ? get_user_pages_fast+0x4d/0xb0 [ 1650.669042][ T558] __iov_iter_get_pages_alloc+0x3b6/0xb10 [ 1650.669081][ T558] ? __pfx_pipe_clear_nowait+0x10/0x10 [ 1650.669132][ T558] iov_iter_get_pages2+0x5e/0xa0 [ 1650.669166][ T558] __se_sys_vmsplice+0x7b3/0x1490 [ 1650.669219][ T558] ? __pfx___se_sys_vmsplice+0x10/0x10 [ 1650.669255][ T558] ? __pfx_futex_wake+0x10/0x10 [ 1650.669370][ T558] do_syscall_64+0x14d/0xf80 [ 1650.669391][ T558] ? trace_irq_disable+0x3b/0x150 [ 1650.669422][ T558] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1650.669446][ T558] ? clear_bhb_loop+0x40/0x90 [ 1650.669474][ T558] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1650.669496][ T558] RIP: 0033:0x7fbf6b59c799 [ 1650.669518][ T558] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 1650.669537][ T558] RSP: 002b:00007fbf6c522028 EFLAGS: 00000246 ORIG_RAX: 0000000000000116 [ 1650.669561][ T558] RAX: ffffffffffffffda RBX: 00007fbf6b815fa0 RCX: 00007fbf6b59c799 [ 1650.669578][ T558] RDX: 0000000000000001 RSI: 00002000000000c0 RDI: 0000000000000008 [ 1650.669592][ T558] RBP: 00007fbf6b632bd9 R08: 0000000000000000 R09: 0000000000000000 [ 1650.669606][ T558] R10: 0000000000000001 R11: 0000000000000246 R12: 0000000000000000 [ 1650.669620][ T558] R13: 00007fbf6b816038 R14: 00007fbf6b815fa0 R15: 00007fff61d7e648 [ 1650.669657][ T558] [ 1650.912334][ T556] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 1650.941394][ T562] netlink: 196 bytes leftover after parsing attributes in process `syz.0.15952'. [ 1650.955599][ T562] netlink: 196 bytes leftover after parsing attributes in process `syz.0.15952'. [ 1650.965037][ T562] netlink: 19 bytes leftover after parsing attributes in process `syz.0.15952'. [ 1651.033190][ T562] syzkaller0: entered promiscuous mode [ 1651.060014][ T562] syzkaller0: entered allmulticast mode [ 1651.186449][ T575] FAULT_INJECTION: forcing a failure. [ 1651.186449][ T575] name failslab, interval 1, probability 0, space 0, times 0 [ 1651.199298][ T575] CPU: 1 UID: 0 PID: 575 Comm: syz.5.15953 Not tainted syzkaller #0 PREEMPT(full) [ 1651.199327][ T575] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 02/12/2026 [ 1651.199341][ T575] Call Trace: [ 1651.199351][ T575] [ 1651.199361][ T575] dump_stack_lvl+0xe8/0x150 [ 1651.199398][ T575] should_fail_ex+0x412/0x560 [ 1651.199430][ T575] should_failslab+0xa8/0x100 [ 1651.199456][ T575] ? dst_alloc+0x105/0x170 [ 1651.199476][ T575] kmem_cache_alloc_noprof+0x87/0x650 [ 1651.199514][ T575] ? __pfx_ip6_dst_gc+0x10/0x10 [ 1651.199539][ T575] dst_alloc+0x105/0x170 [ 1651.199566][ T575] ip6_pol_route+0xafb/0x13d0 [ 1651.199592][ T575] ? ip6_pol_route+0x160/0x13d0 [ 1651.199624][ T575] ? __pfx_ip6_pol_route+0x10/0x10 [ 1651.199648][ T575] ? ip6t_do_table+0x1df/0x1560 [ 1651.199682][ T575] ? __local_bh_enable_ip+0xd0/0x130 [ 1651.199710][ T575] ? lockdep_hardirqs_on+0x7a/0x110 [ 1651.199744][ T575] ? inet6_ehashfn+0xaf/0x5a0 [ 1651.199771][ T575] ? ip6t_do_table+0x137d/0x1560 [ 1651.199804][ T575] fib6_rule_lookup+0x556/0x730 [ 1651.199833][ T575] ? __pfx_ip6_pol_route_input+0x10/0x10 [ 1651.199859][ T575] ? __pfx_fib6_rule_lookup+0x10/0x10 [ 1651.199893][ T575] ? __inet6_lookup_established+0xbca/0xc60 [ 1651.199921][ T575] ? ip6t_do_table+0x1df/0x1560 [ 1651.199964][ T575] ip6_route_input+0x730/0xad0 [ 1651.199998][ T575] ? __pfx_ip6_route_input+0x10/0x10 [ 1651.200068][ T575] ? ip6_rcv_finish_core+0x222/0x420 [ 1651.200106][ T575] ip6_rcv_finish+0x141/0x2e0 [ 1651.200143][ T575] NF_HOOK+0x336/0x3c0 [ 1651.200174][ T575] ? skb_orphan+0x4f/0xd0 [ 1651.200196][ T575] ? __pfx_ip6_rcv_finish+0x10/0x10 [ 1651.200228][ T575] ? NF_HOOK+0x9e/0x3c0 [ 1651.200261][ T575] ? __pfx_NF_HOOK+0x10/0x10 [ 1651.200298][ T575] ? __pfx_ip6_rcv_finish+0x10/0x10 [ 1651.200339][ T575] ? netif_receive_skb+0x102/0xc50 [ 1651.200366][ T575] netif_receive_skb+0x278/0xc50 [ 1651.200398][ T575] ? __pfx_netif_receive_skb+0x10/0x10 [ 1651.200420][ T575] ? __lock_acquire+0x6b5/0x2cf0 [ 1651.200456][ T575] ? tun_rx_batched+0x185/0x790 [ 1651.200488][ T575] tun_rx_batched+0x1de/0x790 [ 1651.200515][ T575] ? __build_skb+0x62/0x440 [ 1651.200549][ T575] ? __pfx_tun_rx_batched+0x10/0x10 [ 1651.200589][ T575] ? tun_get_user+0x2354/0x3dd0 [ 1651.200615][ T575] ? __local_bh_enable_ip+0xd0/0x130 [ 1651.200646][ T575] ? tun_get_user+0x2669/0x3dd0 [ 1651.200671][ T575] tun_get_user+0x2a78/0x3dd0 [ 1651.200723][ T575] ? aa_file_perm+0x50e/0x15e0 [ 1651.200751][ T575] ? __pfx_tun_get_user+0x10/0x10 [ 1651.200777][ T575] ? aa_file_perm+0x192/0x15e0 [ 1651.200823][ T575] ? ref_tracker_alloc+0x35c/0x4c0 [ 1651.200854][ T575] ? __pfx_ref_tracker_alloc+0x10/0x10 [ 1651.200888][ T575] ? tun_get+0x1c/0x2f0 [ 1651.200923][ T575] ? tun_get+0x1c/0x2f0 [ 1651.200950][ T575] ? tun_get+0x1c/0x2f0 [ 1651.200982][ T575] tun_chr_write_iter+0x113/0x200 [ 1651.201016][ T575] vfs_write+0x61d/0xb90 [ 1651.201056][ T575] ? __pfx_vfs_write+0x10/0x10 [ 1651.201089][ T575] ? __fget_files+0x2a/0x420 [ 1651.201129][ T575] ksys_write+0x150/0x270 [ 1651.201154][ T575] ? __pfx_ksys_write+0x10/0x10 [ 1651.201188][ T575] do_syscall_64+0x14d/0xf80 [ 1651.201209][ T575] ? trace_irq_disable+0x3b/0x150 [ 1651.201239][ T575] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1651.201261][ T575] ? clear_bhb_loop+0x40/0x90 [ 1651.201290][ T575] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1651.201311][ T575] RIP: 0033:0x7fbf6b55cfce [ 1651.201332][ T575] Code: 08 0f 85 a5 a8 ff ff 49 89 fb 48 89 f0 48 89 d7 48 89 ce 4c 89 c2 4d 89 ca 4c 8b 44 24 08 4c 8b 4c 24 10 4c 89 5c 24 08 0f 05 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 80 00 00 00 00 48 83 ec 08 [ 1651.201351][ T575] RSP: 002b:00007fbf6c521fb8 EFLAGS: 00000246 ORIG_RAX: 0000000000000001 [ 1651.201374][ T575] RAX: ffffffffffffffda RBX: 00007fbf6c5226c0 RCX: 00007fbf6b55cfce [ 1651.201389][ T575] RDX: 000000000000004e RSI: 0000200000000600 RDI: 00000000000000c8 [ 1651.201403][ T575] RBP: 00007fbf6c522090 R08: 0000000000000000 R09: 0000000000000000 [ 1651.201416][ T575] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 1651.201429][ T575] R13: 00007fbf6b816038 R14: 00007fbf6b815fa0 R15: 00007fff61d7e648 [ 1651.201467][ T575] [ 1651.681689][ T6324] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1651.731326][T27603] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1651.789142][ T582] syzkaller0: entered promiscuous mode [ 1651.798847][ T582] syzkaller0: entered allmulticast mode [ 1651.840536][ T585] netlink: 20 bytes leftover after parsing attributes in process `syz.2.15956'. [ 1651.863010][T27602] netdevsim netdevsim2 netdevsim0: set [1, 0] type 2 family 0 port 20002 - 0 [ 1651.874495][T27602] netdevsim netdevsim2 netdevsim1: set [1, 0] type 2 family 0 port 20002 - 0 [ 1651.883489][T27602] netdevsim netdevsim2 netdevsim2: set [1, 0] type 2 family 0 port 20002 - 0 [ 1651.893343][T27602] netdevsim netdevsim2 netdevsim3: set [1, 0] type 2 family 0 port 20002 - 0 [ 1652.298455][ T5976] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1652.693409][ T524] nci: __nci_request: wait_for_completion_interruptible_timeout failed -512 [ 1652.917141][ T592] !: renamed from dummy0 (while UP) [ 1652.937401][ T597] netlink: 8 bytes leftover after parsing attributes in process `syz.1.15960'. [ 1652.957025][ T595] netlink: 20 bytes leftover after parsing attributes in process `syz.0.15959'. [ 1652.967763][ T597] netlink: 4 bytes leftover after parsing attributes in process `syz.1.15960'. [ 1653.131148][ T606] netlink: 'syz.6.15965': attribute type 1 has an invalid length. [ 1653.158705][ T606] netlink: 228 bytes leftover after parsing attributes in process `syz.6.15965'. [ 1653.238488][ T615] nbd: couldn't find a device at index 0 [ 1653.419600][ T625] Unsupported ieee802154 address type: 0 [ 1653.530245][ T624] mac80211_hwsim hwsim171 wlan1: (WE) : Wireless Event (cmd=0x8B1A) too big (33) [ 1653.727716][ T6324] net_ratelimit: 3 callbacks suppressed [ 1653.727737][ T6324] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1653.990193][T18140] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1654.320641][ T663] openvswitch: netlink: Either Ethernet header or EtherType is required. [ 1654.329869][ T664] openvswitch: netlink: Either Ethernet header or EtherType is required. [ 1654.771643][ T6331] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1655.114885][T27602] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1655.725378][ T5976] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1655.807302][ T3635] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1656.125107][ T3635] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1656.249372][T27602] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1656.345543][ T652] __nla_validate_parse: 6 callbacks suppressed [ 1656.345565][ T652] netlink: 20 bytes leftover after parsing attributes in process `syz.2.15976'. [ 1656.665679][ T676] syzkaller0: entered promiscuous mode [ 1656.675750][ T685] netlink: 8 bytes leftover after parsing attributes in process `syz.5.15982'. [ 1656.686838][ T676] syzkaller0: entered allmulticast mode [ 1656.861437][ T695] syzkaller1: entered promiscuous mode [ 1656.880477][ T695] syzkaller1: entered allmulticast mode [ 1656.908224][ T699] macvtap0: entered promiscuous mode [ 1656.913745][ T694] netlink: 232 bytes leftover after parsing attributes in process `syz.0.15986'. [ 1656.955643][ T704] netlink: 4 bytes leftover after parsing attributes in process `syz.1.15987'. [ 1656.958991][ T699] netlink: 4 bytes leftover after parsing attributes in process `syz.1.15987'. [ 1657.245637][ T721] netlink: 'syz.6.15992': attribute type 32 has an invalid length. [ 1657.536723][ T737] netlink: 20 bytes leftover after parsing attributes in process `syz.1.15999'. [ 1657.664801][ T745] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 1657.675264][ T745] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 1657.716236][ T745] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 1657.723668][ T745] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 1657.818354][ T756] netlink: 260 bytes leftover after parsing attributes in process `syz.2.16000'. [ 1657.972307][ T752] syzkaller1: entered promiscuous mode [ 1657.989038][ T752] syzkaller1: entered allmulticast mode [ 1658.241702][ T765] netlink: 4 bytes leftover after parsing attributes in process `syz.5.16003'. [ 1658.766093][ T5976] net_ratelimit: 7 callbacks suppressed [ 1658.766114][ T5976] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1658.798337][ T794] netlink: 16 bytes leftover after parsing attributes in process `syz.6.16012'. [ 1658.817737][ T792] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1658.827049][ C0] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1658.845071][ T792] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1658.855422][T20960] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1658.884080][ C1] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1658.915332][ T791] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1658.923805][ C1] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1658.942524][ T6324] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1659.041030][ T804] sctp: [Deprecated]: syz.5.16017 (pid 804) Use of int in max_burst socket option. [ 1659.041030][ T804] Use struct sctp_assoc_value instead [ 1659.116075][ T811] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 1659.225148][ T816] netlink: 24 bytes leftover after parsing attributes in process `syz.1.16021'. [ 1659.485263][T21760] Bluetooth: hci1: command 0x0401 tx timeout [ 1659.673844][ T825] syzkaller0: entered promiscuous mode [ 1659.726108][ T825] syzkaller0: entered allmulticast mode [ 1662.476699][ T877] batman_adv: batadv0: Interface deactivated: dummy0 [ 1662.483585][ T877] batman_adv: batadv0: Removing interface: dummy0 [ 1662.521552][ T877] bridge_slave_0: left allmulticast mode [ 1662.554353][ T877] bridge_slave_0: left promiscuous mode [ 1662.596228][ T877] bridge0: port 1(bridge_slave_0) entered disabled state [ 1662.628291][ T877] bridge_slave_1: left allmulticast mode [ 1662.635759][ T877] bridge_slave_1: left promiscuous mode [ 1662.642137][ T877] bridge0: port 2(bridge_slave_1) entered disabled state [ 1662.660773][ T877] bond0: (slave bond_slave_0): Releasing backup interface [ 1662.673088][ T877] bond0: (slave bond_slave_1): Releasing backup interface [ 1662.702448][ T877] team0: Port device team_slave_0 removed [ 1662.740807][ T877] team0: Port device team_slave_1 removed [ 1662.750046][ T877] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 1662.764232][ T877] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 1662.785459][ T877] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 1662.793244][ T877] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 1663.223150][ T902] bond3: option arp_validate: mode dependency failed, not supported in mode balance-alb(6) [ 1663.269744][ T902] bond3 (unregistering): Released all slaves [ 1663.339842][ T908] __nla_validate_parse: 1 callbacks suppressed [ 1663.339859][ T908] netlink: 8 bytes leftover after parsing attributes in process `syz.5.16050'. [ 1663.366839][ T915] netlink: 'syz.6.16051': attribute type 32 has an invalid length. [ 1663.445152][ T917] netlink: 4 bytes leftover after parsing attributes in process `syz.1.16052'. [ 1663.675306][ T927] netlink: 256 bytes leftover after parsing attributes in process `syz.5.16056'. [ 1663.787750][ T938] syzkaller0: entered allmulticast mode [ 1664.097840][T18150] net_ratelimit: 23 callbacks suppressed [ 1664.097862][T18150] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1664.125406][ T6331] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1664.367044][ T970] netlink: 28 bytes leftover after parsing attributes in process `syz.0.16070'. [ 1664.376454][ T970] netlink: 'syz.0.16070': attribute type 7 has an invalid length. [ 1664.384956][ T970] netlink: 'syz.0.16070': attribute type 8 has an invalid length. [ 1664.409728][ T970] netlink: 4 bytes leftover after parsing attributes in process `syz.0.16070'. [ 1664.620615][ T978] netlink: 'syz.0.16072': attribute type 11 has an invalid length. [ 1664.646049][ T976] syzkaller0: entered promiscuous mode [ 1664.656408][ T978] netlink: 224 bytes leftover after parsing attributes in process `syz.0.16072'. [ 1664.674673][ T976] syzkaller0: entered allmulticast mode [ 1664.787193][ T976] tipc: Enabled bearer , priority 0 [ 1664.814624][ T976] netlink: 8 bytes leftover after parsing attributes in process `syz.2.16074'. [ 1664.867634][ T973] tipc: Resetting bearer [ 1664.971938][ T973] tipc: Disabling bearer [ 1665.165109][ T3635] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1665.234698][T20962] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1665.412302][ T1009] netlink: 'syz.2.16081': attribute type 1 has an invalid length. [ 1665.424880][ T1009] netlink: 240 bytes leftover after parsing attributes in process `syz.2.16081'. [ 1665.559445][ T1010] bond4: Removing last ns target with arp_interval on [ 1665.579372][ T5976] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1665.587801][ T1015] wg1: entered promiscuous mode [ 1665.592713][ T1015] wg1: entered allmulticast mode [ 1665.657814][T30648] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1665.722346][ T1022] bond5: (slave lo): enslaved VLAN challenged slave. Adding VLANs will be blocked as long as it is part of bond. [ 1665.747129][ T1022] bond5: (slave lo): Enslaving as an active interface with an up link [ 1665.759666][ T1022] A link change request failed with some changes committed already. Interface tunl0 may have been left with an inconsistent configuration, please check. [ 1665.797345][ T1022] netlink: 52 bytes leftover after parsing attributes in process `syz.6.16087'. [ 1665.828512][ T1023] netlink: 24 bytes leftover after parsing attributes in process `syz.5.16086'. [ 1666.188387][ T5976] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1666.206129][ T6331] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1666.214425][ T6331] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1666.449006][ T1065] netlink: 'syz.6.16098': attribute type 30 has an invalid length. [ 1666.617209][ T1075] netlink: 'syz.0.16100': attribute type 1 has an invalid length. [ 1666.662390][ T1078] netlink: 'syz.5.16101': attribute type 28 has an invalid length. [ 1666.706566][ T1075] bond4: entered promiscuous mode [ 1666.712177][ T1075] 8021q: adding VLAN 0 to HW filter on device bond4 [ 1666.721061][ T1078] netlink: 'syz.5.16101': attribute type 3 has an invalid length. [ 1666.788712][ T1084] 8021q: adding VLAN 0 to HW filter on device bond4 [ 1666.796659][ T1084] bond4: (slave vti0): The slave device specified does not support setting the MAC address [ 1666.808069][ T1084] bond4: (slave vti0): Setting fail_over_mac to active for active-backup mode [ 1666.822566][ T1084] bond4: (slave vti0): making interface the new active one [ 1666.830352][ T1084] vti0: entered promiscuous mode [ 1666.839730][ T1084] bond4: (slave vti0): Enslaving as an active interface with an up link [ 1666.907055][ T1087] tipc: Started in network mode [ 1666.947249][ T1087] tipc: Node identity 2a90efc3d71e, cluster identity 4711 [ 1666.966853][ T1087] tipc: Enabled bearer , priority 0 [ 1667.010928][ T1093] netlink: 'syz.6.16105': attribute type 9 has an invalid length. [ 1667.028231][ T1093] netlink: 'syz.6.16105': attribute type 6 has an invalid length. [ 1667.094238][ T1094] syzkaller0: entered promiscuous mode [ 1667.100830][ T1094] syzkaller0: entered allmulticast mode [ 1667.107683][ T1094] tipc: Resetting bearer [ 1667.582626][ T1086] tipc: Resetting bearer [ 1668.723715][ T1169] __nla_validate_parse: 8 callbacks suppressed [ 1668.723738][ T1169] netlink: 20 bytes leftover after parsing attributes in process `syz.0.16120'. [ 1669.325855][ T6331] net_ratelimit: 12 callbacks suppressed [ 1669.325889][ T6331] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1669.727470][ T103] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1669.737794][ T8599] Bluetooth: hci4: command 0x0406 tx timeout [ 1669.966418][T20300] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1670.213309][ T6331] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1670.230473][T20962] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1670.253462][ T1086] tipc: Disabling bearer [ 1670.264108][ T5976] tipc: Node number set to 4254003139 [ 1670.366344][ T6331] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1670.381342][ T1162] syzkaller0: entered promiscuous mode [ 1670.387227][ T1162] syzkaller0: entered allmulticast mode [ 1670.553241][ T1188] netlink: 20 bytes leftover after parsing attributes in process `syz.2.16126'. [ 1670.628269][ T1189] validate_nla: 4 callbacks suppressed [ 1670.628291][ T1189] netlink: 'syz.6.16125': attribute type 1 has an invalid length. [ 1670.664345][ T1189] netlink: 228 bytes leftover after parsing attributes in process `syz.6.16125'. [ 1670.798504][ T1203] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 1670.845890][ T6331] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1670.885185][T20960] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1670.898834][T20962] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1672.775975][ T1302] lec:lec_start_xmit: lec0:No lecd attached [ 1673.061366][ T1213] netlink: 4 bytes leftover after parsing attributes in process `syz.6.16130'. [ 1673.129479][ T1222] netlink: 256 bytes leftover after parsing attributes in process `syz.1.16134'. [ 1673.144939][ T1222] netlink: 'syz.1.16134': attribute type 1 has an invalid length. [ 1673.152828][ T1222] netlink: 224 bytes leftover after parsing attributes in process `syz.1.16134'. [ 1673.175063][ T1221] netlink: 108 bytes leftover after parsing attributes in process `syz.0.16133'. [ 1673.224151][ T1221] netlink: 36 bytes leftover after parsing attributes in process `syz.0.16133'. [ 1673.339733][ T1221] nbd: couldn't find a device at index 0 [ 1673.346722][ T1230] xt_HMARK: spi-set and port-set can't be combined [ 1673.555539][ T1240] netlink: 24 bytes leftover after parsing attributes in process `syz.0.16140'. [ 1673.796586][ T1250] netlink: 212368 bytes leftover after parsing attributes in process `syz.1.16142'. [ 1674.226998][ T1258] netlink: 11 bytes leftover after parsing attributes in process `syz.2.16145'. [ 1674.277747][ T1264] netlink: 24 bytes leftover after parsing attributes in process `syz.5.16146'. [ 1674.350750][ T1266] netlink: 32 bytes leftover after parsing attributes in process `syz.2.16145'. [ 1674.525191][ T6331] net_ratelimit: 9 callbacks suppressed [ 1674.525210][ T6331] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1674.640659][ T1277] netlink: 24 bytes leftover after parsing attributes in process `syz.2.16151'. [ 1674.687076][T20300] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1674.712560][ T1283] netlink: 24 bytes leftover after parsing attributes in process `syz.2.16151'. [ 1675.058373][ T1306] netlink: 244 bytes leftover after parsing attributes in process `syz.1.16159'. [ 1675.222656][ T1308] netlink: 104 bytes leftover after parsing attributes in process `syz.2.16160'. [ 1675.259651][ T1316] netlink: 8 bytes leftover after parsing attributes in process `syz.0.16162'. [ 1675.306286][ T1317] netlink: 4 bytes leftover after parsing attributes in process `syz.1.16164'. [ 1675.346289][ T103] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1675.359164][ T1316] 8021q: adding VLAN 0 to HW filter on device bond5 [ 1675.405808][ T103] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1675.499382][ T1317] hsr_slave_0 (unregistering): left promiscuous mode [ 1675.570326][ T6331] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1675.581298][ T1313] x_tables: ip6_tables: policy.0 match: invalid size 312 (kernel) != (user) 0 [ 1675.767983][ T1341] 8021q: VLANs not supported on wg0 [ 1675.808608][ T1344] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 1675.889029][ T6324] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1675.964617][ C1] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1675.968856][T20300] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1675.978453][ C1] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1676.138289][T20300] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1676.509910][ T1375] tipc: Started in network mode [ 1676.529309][ T1375] tipc: Node identity ac141441, cluster identity 4711 [ 1676.551144][ T1375] tipc: Enabled bearer , priority 10 [ 1677.665395][ T6331] tipc: Node number set to 2886997057 [ 1677.759754][ T6324] IPVS: starting estimator thread 0... [ 1677.804222][ C1] lec0: NETDEV WATCHDOG: CPU: 1: transmit queue 0 timed out 5030 ms [ 1677.812435][ C1] lec:lec_tx_timeout: lec0 [ 1677.845163][ T1448] syzkaller0: entered promiscuous mode [ 1677.858993][ T1446] IPVS: using max 28 ests per chain, 67200 per kthread [ 1677.876423][ T1448] syzkaller0: entered allmulticast mode [ 1678.536769][ T1491] netlink: 'syz.2.16209': attribute type 1 has an invalid length. [ 1678.546842][ T1491] netlink: 'syz.2.16209': attribute type 2 has an invalid length. [ 1678.555846][ T1491] netlink: 'syz.2.16209': attribute type 3 has an invalid length. [ 1678.758011][ T1502] netlink: 'syz.2.16214': attribute type 1 has an invalid length. [ 1678.768732][ T1502] netlink: 'syz.2.16214': attribute type 2 has an invalid length. [ 1678.881803][ T1506] __nla_validate_parse: 10 callbacks suppressed [ 1678.881831][ T1506] netlink: 8 bytes leftover after parsing attributes in process `syz.2.16216'. [ 1678.901369][ T1506] netlink: 64 bytes leftover after parsing attributes in process `syz.2.16216'. [ 1679.323193][ T1525] netlink: 4 bytes leftover after parsing attributes in process `syz.6.16221'. [ 1680.044808][ T6324] net_ratelimit: 19 callbacks suppressed [ 1680.044831][ T6324] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1680.318359][T20292] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1680.736091][ T1518] netdevsim netdevsim5 netdevsim0: entered promiscuous mode [ 1680.794284][T27603] netdevsim netdevsim1 netdevsim0: unset [1, 0] type 2 family 0 port 6081 - 0 [ 1680.833853][T27603] netdevsim netdevsim1 netdevsim1: unset [1, 0] type 2 family 0 port 6081 - 0 [ 1680.847825][T27603] netdevsim netdevsim1 netdevsim2: unset [1, 0] type 2 family 0 port 6081 - 0 [ 1680.860126][T27603] netdevsim netdevsim1 netdevsim3: unset [1, 0] type 2 family 0 port 6081 - 0 [ 1680.968562][ T1542] netlink: 60 bytes leftover after parsing attributes in process `syz.6.16224'. [ 1680.985234][ T1545] netlink: 'syz.5.16225': attribute type 2 has an invalid length. [ 1681.056090][ T1547] openvswitch: netlink: Missing key (keys=40, expected=2000) [ 1681.097493][T30652] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1681.111026][ T1549] netlink: 8 bytes leftover after parsing attributes in process `syz.1.16228'. [ 1681.131515][ T1549] netlink: 'syz.1.16228': attribute type 10 has an invalid length. [ 1681.148812][ T1553] netlink: 8 bytes leftover after parsing attributes in process `syz.0.16227'. [ 1681.209547][ T1553] netlink: 8 bytes leftover after parsing attributes in process `syz.0.16227'. [ 1681.288238][ T1556] syzkaller0: entered promiscuous mode [ 1681.307506][ T1556] syzkaller0: entered allmulticast mode [ 1681.427821][ T1564] netlink: 24 bytes leftover after parsing attributes in process `syz.5.16232'. [ 1681.451600][ T1569] workqueue: Failed to create a rescuer kthread for wq "nfc2_nci_rx_wq": -EINTR [ 1681.530625][ T1578] netlink: 24 bytes leftover after parsing attributes in process `syz.1.16237'. [ 1681.594606][ T1578] netlink: 92 bytes leftover after parsing attributes in process `syz.1.16237'. [ 1681.812712][ T1588] syzkaller1: entered promiscuous mode [ 1681.824495][ T1588] syzkaller1: entered allmulticast mode [ 1681.981267][ T1604] dvmrp6: entered allmulticast mode [ 1682.125865][T30652] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1682.364453][ C0] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1682.650759][ T1642] erspan0: entered allmulticast mode [ 1682.910508][ T1658] xt_hashlimit: size too large, truncated to 1048576 [ 1682.988230][ T103] netdevsim netdevsim1 netdevsim0: set [0, 0] type 1 family 0 port 8472 - 0 [ 1683.021168][ T103] netdevsim netdevsim1 netdevsim1: set [0, 0] type 1 family 0 port 8472 - 0 [ 1683.103792][ T103] netdevsim netdevsim1 netdevsim2: set [0, 0] type 1 family 0 port 8472 - 0 [ 1683.161709][ T103] netdevsim netdevsim1 netdevsim3: set [0, 0] type 1 family 0 port 8472 - 0 [ 1683.173300][T20288] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1683.253462][ T1665] netlink: 'syz.6.16260': attribute type 6 has an invalid length. [ 1683.326552][ T5899] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1683.465573][ T1673] A link change request failed with some changes committed already. Interface tunl0 may have been left with an inconsistent configuration, please check. [ 1683.571136][ T1676] netlink: 'syz.5.16264': attribute type 33 has an invalid length. [ 1683.894379][ T1688] netlink: 'syz.5.16269': attribute type 1 has an invalid length. [ 1683.908654][ T1691] __nla_validate_parse: 16 callbacks suppressed [ 1683.908680][ T1691] netlink: 64 bytes leftover after parsing attributes in process `syz.1.16270'. [ 1683.938080][ T1689] netlink: 'syz.2.16268': attribute type 11 has an invalid length. [ 1683.947621][ T1689] netlink: 199828 bytes leftover after parsing attributes in process `syz.2.16268'. [ 1684.001427][ T1691] netlink: 64 bytes leftover after parsing attributes in process `syz.1.16270'. [ 1684.090203][ T1697] netlink: 24 bytes leftover after parsing attributes in process `syz.0.16271'. [ 1684.211564][T30652] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1684.849120][ T1720] x_tables: duplicate underflow at hook 2 [ 1684.952529][ T29] audit: type=1107 audit(1772269876.173:13): pid=1725 uid=0 auid=4294967295 ses=4294967295 subj=unconfined msg='JS3`f,ltc6A͠˵Sq[~1%%l_ A~F] /ƧKfg4f%WZmmM.|"|A%0'5WfhVr5-fK?URl]\Zy<}Wf@7B^(>w#' [ 1685.244642][T30652] net_ratelimit: 2 callbacks suppressed [ 1685.244665][T30652] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1685.278619][ T1743] netlink: 'syz.0.16284': attribute type 1 has an invalid length. [ 1685.310586][ T1743] netlink: 228 bytes leftover after parsing attributes in process `syz.0.16284'. [ 1685.355241][ T1743] netlink: 8 bytes leftover after parsing attributes in process `syz.0.16284'. [ 1685.617856][ T1753] netlink: 'syz.1.16288': attribute type 21 has an invalid length. [ 1685.825115][ T1755] bond4: option fail_over_mac: invalid value (16) [ 1685.867442][ T1755] bond4 (unregistering): Released all slaves [ 1686.003885][ T1766] netlink: 184 bytes leftover after parsing attributes in process `syz.6.16291'. [ 1686.132801][ T1771] rdma_rxe: rxe_newlink: failed to add ip6_vti0 [ 1686.270611][ T1779] netlink: 12 bytes leftover after parsing attributes in process `syz.2.16295'. [ 1686.285180][T20288] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1686.369324][ T5899] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1686.461953][ T1792] netlink: 212408 bytes leftover after parsing attributes in process `syz.0.16300'. [ 1686.648387][ T1804] lo: entered promiscuous mode [ 1686.666631][ T1804] lo: entered allmulticast mode [ 1686.671756][ T1804] netlink: 8 bytes leftover after parsing attributes in process `syz.6.16303'. [ 1686.694552][ T1804] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check. [ 1687.325499][T20288] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1687.453076][ T1801] nci: __nci_request: wait_for_completion_interruptible_timeout failed -512 [ 1687.708149][ T1840] IPVS: set_ctl: invalid protocol: 51 224.0.0.1:20004 [ 1688.035672][ T1854] workqueue: Failed to create a rescuer kthread for wq "bond7": -EINTR [ 1688.364664][T20288] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1688.540119][ T1891] openvswitch: netlink: Tunnel attr 78 out of range max 16 [ 1688.688228][ T1894] macvlan2: entered promiscuous mode [ 1688.693747][ T1894] macvlan2: entered allmulticast mode [ 1688.742051][ T29] audit: type=1107 audit(1772269879.963:14): pid=1901 uid=0 auid=4294967295 ses=4294967295 subj=unconfined msg='' [ 1688.777235][ T5899] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1688.935312][ T1912] ip6gre1: entered promiscuous mode [ 1689.169909][ T1936] __nla_validate_parse: 5 callbacks suppressed [ 1689.169931][ T1936] netlink: 8 bytes leftover after parsing attributes in process `syz.2.16340'. [ 1689.357434][ T1945] netlink: 12 bytes leftover after parsing attributes in process `syz.1.16344'. [ 1689.405597][T20288] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1689.414107][T20288] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1689.467192][ T1950] netlink: 44 bytes leftover after parsing attributes in process `syz.0.16343'. [ 1689.606286][ T1961] mac80211_hwsim hwsim175 syzkaller0: entered promiscuous mode [ 1689.614592][ T1961] mac80211_hwsim hwsim175 syzkaller0: entered allmulticast mode [ 1690.386933][ T2013] netlink: 'syz.1.16360': attribute type 1 has an invalid length. [ 1690.395950][ T2002] 8021q: adding VLAN 0 to HW filter on device bond4 [ 1690.442018][ T2013] netlink: 'syz.1.16360': attribute type 1 has an invalid length. [ 1690.455247][T20288] net_ratelimit: 2 callbacks suppressed [ 1690.455267][T20288] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1690.487558][ T2017] bond7: ARP target 1.0.0.0 is already present [ 1690.493797][ T2017] bond7: option arp_ip_target: invalid value (1) [ 1690.522753][ T2017] bond7 (unregistering): Released all slaves [ 1690.770526][ T2025] veth7: entered allmulticast mode [ 1690.878293][ T2032] netlink: 32 bytes leftover after parsing attributes in process `syz.5.16363'. [ 1690.963603][ T2040] netlink: 8 bytes leftover after parsing attributes in process `syz.2.16370'. [ 1690.977543][ T2044] FAULT_INJECTION: forcing a failure. [ 1690.977543][ T2044] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 1691.020488][ T2044] CPU: 0 UID: 0 PID: 2044 Comm: syz.0.16371 Not tainted syzkaller #0 PREEMPT(full) [ 1691.020521][ T2044] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 02/12/2026 [ 1691.020536][ T2044] Call Trace: [ 1691.020546][ T2044] [ 1691.020556][ T2044] dump_stack_lvl+0xe8/0x150 [ 1691.020603][ T2044] should_fail_ex+0x412/0x560 [ 1691.020636][ T2044] _copy_from_user+0x2d/0xb0 [ 1691.020670][ T2044] ___sys_sendmsg+0x1c6/0x360 [ 1691.020711][ T2044] ? __pfx____sys_sendmsg+0x10/0x10 [ 1691.020783][ T2044] ? __fget_files+0x2a/0x420 [ 1691.020814][ T2044] ? __fget_files+0x3a0/0x420 [ 1691.020856][ T2044] __x64_sys_sendmsg+0x1bd/0x2a0 [ 1691.020893][ T2044] ? __pfx___x64_sys_sendmsg+0x10/0x10 [ 1691.020936][ T2044] ? __pfx_ksys_write+0x10/0x10 [ 1691.020972][ T2044] do_syscall_64+0x14d/0xf80 [ 1691.020993][ T2044] ? trace_irq_disable+0x3b/0x150 [ 1691.021024][ T2044] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1691.021048][ T2044] ? clear_bhb_loop+0x40/0x90 [ 1691.021075][ T2044] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1691.021097][ T2044] RIP: 0033:0x7fefb659c799 [ 1691.021119][ T2044] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 1691.021139][ T2044] RSP: 002b:00007fefb74a3028 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 1691.021162][ T2044] RAX: ffffffffffffffda RBX: 00007fefb6815fa0 RCX: 00007fefb659c799 [ 1691.021179][ T2044] RDX: 000000000000c000 RSI: 0000200000000000 RDI: 0000000000000003 [ 1691.021194][ T2044] RBP: 00007fefb74a3090 R08: 0000000000000000 R09: 0000000000000000 [ 1691.021208][ T2044] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 1691.021222][ T2044] R13: 00007fefb6816038 R14: 00007fefb6815fa0 R15: 00007ffdddde1d38 [ 1691.021257][ T2044] [ 1691.027937][ T2041] netlink: 8 bytes leftover after parsing attributes in process `syz.2.16370'. [ 1691.288549][ T2048] openvswitch: netlink: Missing key (keys=40, expected=10000000) [ 1691.374244][ C0] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1691.464229][ C0] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1691.484584][T15986] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1691.541965][ T2061] 8021q: adding VLAN 0 to HW filter on device bond1 [ 1691.616649][ T2073] x_tables: ip_tables: icmp match: only valid for protocol 1 [ 1691.640537][ T2074] openvswitch: netlink: Flow actions attr not present in new flow. [ 1691.717260][ T2074] ip6_tunnel: non-ECT from fc00:0000:0000:0000:0000:0000:0000:0001 with DS=0x2 [ 1692.013659][ T2091] bond0: entered promiscuous mode [ 1692.034281][ T2091] bond_slave_0: entered promiscuous mode [ 1692.038620][ T2094] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1692.040202][ T2091] bond_slave_1: entered promiscuous mode [ 1692.052287][ C1] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1692.135331][ T2091] batadv0: entered promiscuous mode [ 1692.141671][ T2091] debugfs: 'hsr1' already exists in 'hsr' [ 1692.185118][ T2091] Cannot create hsr debugfs directory [ 1692.191126][ T2091] hsr1: entered promiscuous mode [ 1692.227333][ T2091] hsr1: entered allmulticast mode [ 1692.232532][ T2091] bond0: entered allmulticast mode [ 1692.243458][ T2091] bond_slave_0: entered allmulticast mode [ 1692.251136][ T2091] bond_slave_1: entered allmulticast mode [ 1692.257290][ T2091] batadv0: entered allmulticast mode [ 1692.265187][ T2091] 8021q: adding VLAN 0 to HW filter on device hsr1 [ 1692.275512][ T2091] bond0: left promiscuous mode [ 1692.280547][ T2091] bond_slave_0: left promiscuous mode [ 1692.291941][ T2091] bond_slave_1: left promiscuous mode [ 1692.299179][ T2091] batadv0: left promiscuous mode [ 1692.362219][ T2102] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1692.531530][ T2111] netlink: 52 bytes leftover after parsing attributes in process `syz.1.16388'. [ 1692.561452][ T2111] netlink: 52 bytes leftover after parsing attributes in process `syz.1.16388'. [ 1692.582532][ T2111] netlink: 52 bytes leftover after parsing attributes in process `syz.1.16388'. [ 1692.841713][ T2126] SET target dimension over the limit! [ 1693.343659][ T2155] netlink: 'syz.5.16403': attribute type 2 has an invalid length. [ 1693.364159][ T2155] netlink: 'syz.5.16403': attribute type 1 has an invalid length. [ 1693.397895][ T2160] netlink: 4 bytes leftover after parsing attributes in process `syz.1.16402'. [ 1693.474634][ T2158] syzkaller0: entered allmulticast mode [ 1693.539404][ T2164] rdma_rxe: rxe_newlink: failed to add vxcan1 [ 1693.546756][ T2163] netlink: 'syz.5.16404': attribute type 1 has an invalid length. [ 1694.018249][ T2176] gretap0: entered promiscuous mode [ 1694.036431][ T2176] gretap0: left promiscuous mode [ 1694.245352][ T2196] __nla_validate_parse: 2 callbacks suppressed [ 1694.245376][ T2196] netlink: 24 bytes leftover after parsing attributes in process `syz.0.16413'. [ 1694.251616][ T2188] bridge0: port 2(bridge_slave_1) entered disabled state [ 1694.268500][ T2188] bridge0: port 1(bridge_slave_0) entered disabled state [ 1694.283669][ T2197] netlink: 'syz.2.16411': attribute type 1 has an invalid length. [ 1694.439155][ T2201] netlink: 'syz.2.16411': attribute type 3 has an invalid length. [ 1694.595367][ T2213] delete_channel: no stack [ 1694.952324][ T2230] sctp: [Deprecated]: syz.2.16424 (pid 2230) Use of struct sctp_assoc_value in delayed_ack socket option. [ 1694.952324][ T2230] Use struct sctp_sack_info instead [ 1695.485608][T20300] net_ratelimit: 9 callbacks suppressed [ 1695.485631][T20300] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1695.644201][T15986] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1695.676545][ T2248] openvswitch: netlink: Actions may not be safe on all matching packets [ 1695.704120][ T2228] lec:lec_atm_close: lec0: Shut down! [ 1695.948798][ T2259] syzkaller0: entered promiscuous mode [ 1695.972934][ T2259] syzkaller0: entered allmulticast mode [ 1696.525055][ T2286] netlink: 8 bytes leftover after parsing attributes in process `syz.0.16437'. [ 1696.571120][ T2295] netlink: 'syz.6.16440': attribute type 3 has an invalid length. [ 1696.619953][ T2295] netlink: 'syz.6.16440': attribute type 1 has an invalid length. [ 1696.633595][ T2295] netlink: 224 bytes leftover after parsing attributes in process `syz.6.16440'. [ 1696.693965][T15986] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1696.722854][ T2302] team0: Device gtp2 is up. Set it down before adding it as a team port [ 1696.841795][ T2308] netlink: 'syz.5.16444': attribute type 11 has an invalid length. [ 1697.060567][ T2316] netlink: 12 bytes leftover after parsing attributes in process `syz.5.16448'. [ 1697.163600][ T2315] syzkaller0: entered promiscuous mode [ 1697.172292][ T2315] syzkaller0: entered allmulticast mode [ 1697.210062][ T2316] netlink: 12 bytes leftover after parsing attributes in process `syz.5.16448'. [ 1697.230705][ T103] netdevsim netdevsim5 netdevsim0: set [0, 0] type 1 family 0 port 8472 - 0 [ 1697.239925][ T103] netdevsim netdevsim5 netdevsim1: set [0, 0] type 1 family 0 port 8472 - 0 [ 1697.261302][ T2313] netlink: 8 bytes leftover after parsing attributes in process `syz.6.16445'. [ 1697.280217][ T2313] netlink: 20 bytes leftover after parsing attributes in process `syz.6.16445'. [ 1697.528298][ T2327] netlink: 'syz.1.16450': attribute type 3 has an invalid length. [ 1697.550700][ T2329] netlink: 8 bytes leftover after parsing attributes in process `syz.1.16450'. [ 1697.568217][ T2329] netlink: 20 bytes leftover after parsing attributes in process `syz.1.16450'. [ 1697.727229][T15986] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1698.530033][ T5899] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1698.766499][T15986] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1699.009839][ T5899] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1699.780768][ T103] netdevsim netdevsim5 netdevsim2: set [0, 0] type 1 family 0 port 8472 - 0 [ 1699.798936][ T2313] geneve2: entered promiscuous mode [ 1699.805763][T15986] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1699.816146][ T2313] geneve2: entered allmulticast mode [ 1699.902091][ T103] netdevsim netdevsim5 netdevsim3: set [0, 0] type 1 family 0 port 8472 - 0 [ 1700.039763][ T2341] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1700.114887][ T2343] netlink: 54 bytes leftover after parsing attributes in process `syz.6.16455'. [ 1700.138026][ T2345] netlink: 12 bytes leftover after parsing attributes in process `syz.5.16451'. [ 1700.149411][ T2343] netlink: 8 bytes leftover after parsing attributes in process `syz.6.16455'. [ 1700.177215][ T2343] netlink: 28 bytes leftover after parsing attributes in process `syz.6.16455'. [ 1700.223110][ T2345] bond2: entered promiscuous mode [ 1700.229737][ T2345] 8021q: adding VLAN 0 to HW filter on device bond2 [ 1700.245732][ T2353] netlink: 12 bytes leftover after parsing attributes in process `syz.0.16457'. [ 1700.259860][ T2354] IPVS: sync thread started: state = BACKUP, mcast_ifn = vcan0, syncid = 0, id = 0 [ 1700.565726][ T2366] netlink: 36 bytes leftover after parsing attributes in process `syz.1.16461'. [ 1700.576795][ T2369] netlink: 16 bytes leftover after parsing attributes in process `syz.0.16462'. [ 1700.654831][ T2366] netlink: 'syz.1.16461': attribute type 1 has an invalid length. [ 1700.664992][ T2366] netlink: 'syz.1.16461': attribute type 1 has an invalid length. [ 1700.713715][ T2376] netlink: 28 bytes leftover after parsing attributes in process `syz.6.16463'. [ 1700.746773][ T2377] netlink: 'syz.6.16463': attribute type 2 has an invalid length. [ 1700.758315][ T2377] netlink: 164 bytes leftover after parsing attributes in process `syz.6.16463'. [ 1700.767684][ C1] lec0: NETDEV WATCHDOG: CPU: 1: transmit queue 0 timed out 5060 ms [ 1700.767719][ C1] lec:lec_tx_timeout: lec0 [ 1700.844338][T15986] net_ratelimit: 4 callbacks suppressed [ 1700.844359][T15986] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1700.873090][ T2379] netlink: 4 bytes leftover after parsing attributes in process `syz.2.16466'. [ 1700.936352][ T2379] chnl_net:caif_netlink_parms(): no params data found [ 1701.001233][ T2382] syzkaller0: entered promiscuous mode [ 1701.011392][ T2382] syzkaller0: entered allmulticast mode [ 1701.021445][ T2383] syzkaller0: entered promiscuous mode [ 1701.037118][ T2383] syzkaller0: entered allmulticast mode [ 1701.571230][T20300] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1701.889708][T15986] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1702.930145][T15986] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1703.316715][T19973] lec:lec_start_xmit: lec0:No lecd attached [ 1703.964224][T15986] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1703.986994][ T2453] IPVS: sync thread started: state = BACKUP, mcast_ifn = erspan0, syncid = 2, id = 0 [ 1704.045195][ T2454] xt_hashlimit: max too large, truncated to 1048576 [ 1704.296097][ T2474] tipc: Started in network mode [ 1704.316182][ T2474] tipc: Node identity a6b9cd69c459, cluster identity 4711 [ 1704.323777][ T2474] tipc: Enabled bearer , priority 11 [ 1704.607109][T20300] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1704.989913][ T2519] netlink: 'syz.1.16494': attribute type 10 has an invalid length. [ 1705.005819][T20288] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1705.163128][ T2525] IPVS: set_ctl: invalid protocol: 44 127.0.0.1:20000 [ 1705.191698][ T2525] netlink: 'syz.5.16497': attribute type 10 has an invalid length. [ 1705.323103][T20300] tipc: Node number set to 1658899817 [ 1705.392322][ T2541] dvmrp6: entered allmulticast mode [ 1705.443186][ T2546] netlink: 'syz.1.16501': attribute type 1 has an invalid length. [ 1705.539274][ T2546] 8021q: adding VLAN 0 to HW filter on device bond5 [ 1705.550333][ T2551] veth0_to_bond: entered allmulticast mode [ 1705.580433][ T2552] vlan2: entered promiscuous mode [ 1705.590222][ T2552] bond5: entered promiscuous mode [ 1705.596988][ T2552] vlan2: entered allmulticast mode [ 1705.602167][ T2552] bond5: entered allmulticast mode [ 1705.705459][ T2555] syzkaller1: entered promiscuous mode [ 1705.715373][ T2555] syzkaller1: entered allmulticast mode [ 1705.995833][ T2571] netdevsim netdevsim1 netdevsim3 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 1706.007590][ T2583] __nla_validate_parse: 7 callbacks suppressed [ 1706.007620][ T2583] netlink: 8 bytes leftover after parsing attributes in process `syz.6.16511'. [ 1706.186155][ T2590] netlink: 8 bytes leftover after parsing attributes in process `syz.0.16513'. [ 1706.219983][ T2594] netlink: 36 bytes leftover after parsing attributes in process `syz.6.16512'. [ 1706.232485][ T2590] netlink: 8 bytes leftover after parsing attributes in process `syz.0.16513'. [ 1706.262921][ T2571] netdevsim netdevsim1 netdevsim2 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 1706.316238][ T2598] netlink: 24 bytes leftover after parsing attributes in process `syz.2.16514'. [ 1706.462484][ T2571] netdevsim netdevsim1 netdevsim1 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 1706.561203][ T2603] netlink: 212408 bytes leftover after parsing attributes in process `syz.6.16516'. [ 1706.673179][ T2603] bond7: ARP target 1.0.0.0 is already present [ 1706.698199][ T2603] bond7: option arp_ip_target: invalid value (1) [ 1706.720848][ T2603] bond7 (unregistering): Released all slaves [ 1706.861936][ T2571] netdevsim netdevsim1 netdevsim0 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 1706.906302][ T2615] netlink: 4 bytes leftover after parsing attributes in process `syz.0.16519'. [ 1706.958231][ T2626] netlink: 44 bytes leftover after parsing attributes in process `syz.0.16519'. [ 1707.097690][ T2630] netlink: 'syz.5.16522': attribute type 1 has an invalid length. [ 1707.194716][ T103] netdevsim netdevsim1 eth0: set [0, 0] type 1 family 0 port 8472 - 0 [ 1707.225911][ T2630] netlink: 28 bytes leftover after parsing attributes in process `syz.5.16522'. [ 1707.257355][ T2632] bond3: (slave gretap1): making interface the new active one [ 1707.266489][ T2632] bond3: (slave gretap1): Enslaving as an active interface with an up link [ 1707.311994][ T2637] openvswitch: netlink: Flow actions attr not present in new flow. [ 1707.322453][T18138] netdevsim netdevsim1 eth1: set [0, 0] type 1 family 0 port 8472 - 0 [ 1707.343032][ T2630] 8021q: adding VLAN 0 to HW filter on device bond3 [ 1707.366983][T27603] netdevsim netdevsim1 eth2: set [0, 0] type 1 family 0 port 8472 - 0 [ 1707.381927][ T2637] netlink: 28 bytes leftover after parsing attributes in process `syz.0.16524'. [ 1707.448795][T27603] netdevsim netdevsim1 eth3: set [0, 0] type 1 family 0 port 8472 - 0 [ 1708.057472][ T2685] netlink: 'syz.1.16536': attribute type 16 has an invalid length. [ 1708.093300][ T2685] netlink: 'syz.1.16536': attribute type 17 has an invalid length. [ 1708.226319][ T2696] IPv6: NLM_F_CREATE should be specified when creating new route [ 1708.243840][ T2685] 8021q: adding VLAN 0 to HW filter on device bond0 [ 1708.256208][ T2685] 8021q: adding VLAN 0 to HW filter on device team0 [ 1708.268600][ T2685] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 1708.299441][ T2685] wg1: left promiscuous mode [ 1708.305628][ T2685] wg1: left allmulticast mode [ 1708.347683][ T2685] bond_slave_0: left allmulticast mode [ 1708.396045][ T2685] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 1708.417451][ T2685] : left promiscuous mode [ 1708.432232][ T2685] veth0_vlan: left promiscuous mode [ 1708.443672][ T2685] veth0_vlan: entered promiscuous mode [ 1708.465791][ T2685] : entered promiscuous mode [ 1708.478946][ T2685] veth1_macvtap: left promiscuous mode [ 1708.489223][ T2685] veth1_macvtap: entered promiscuous mode [ 1708.507841][ T2685] 8021q: adding VLAN 0 to HW filter on device bond1 [ 1708.530498][ T2685] 8021q: adding VLAN 0 to HW filter on device bond2 [ 1708.572150][ T2685] bond3: left promiscuous mode [ 1708.578923][ T2685] 8021q: adding VLAN 0 to HW filter on device bond3 [ 1708.639811][ T2685] vlan2: left promiscuous mode [ 1708.646724][ T2685] bond5: left promiscuous mode [ 1708.651843][ T2685] vlan2: left allmulticast mode [ 1708.660643][ T2685] bond5: left allmulticast mode [ 1708.764198][ C1] lec0: NETDEV WATCHDOG: CPU: 1: transmit queue 0 timed out 5460 ms [ 1708.772293][ C1] lec:lec_tx_timeout: lec0 [ 1708.871685][T18138] netdevsim netdevsim1 eth0: set [1, 0] type 2 family 0 port 6081 - 0 [ 1708.881084][T18138] netdevsim netdevsim1 eth1: set [1, 0] type 2 family 0 port 6081 - 0 [ 1708.901351][T18138] netdevsim netdevsim1 eth2: set [1, 0] type 2 family 0 port 6081 - 0 [ 1708.933796][T18138] netdevsim netdevsim1 eth3: set [1, 0] type 2 family 0 port 6081 - 0 [ 1709.122527][ T2723] netlink: 'syz.2.16544': attribute type 10 has an invalid length. [ 1709.139395][ T2723] : A HSR master's MTU cannot be greater than the smallest MTU of its slaves minus the HSR Tag length (6 octets). [ 1709.353380][ T2742] netlink: 'syz.0.16550': attribute type 30 has an invalid length. [ 1709.425504][ T2745] netlink: 'syz.0.16550': attribute type 30 has an invalid length. [ 1709.574916][ T2758] openvswitch: netlink: Missing key (keys=40, expected=10000000) [ 1710.319201][ T2805] 8021q: adding VLAN 0 to HW filter on device ipvlan2 [ 1710.346344][ T2805] bond0: (slave ipvlan2): enslaved VLAN challenged slave. Adding VLANs will be blocked as long as it is part of bond. [ 1710.432342][ T2808] bond0: Error: Cannot enslave bond to itself. [ 1710.549060][ T2827] tipc: Enabled bearer , priority 0 [ 1710.702148][ T2831] bond6: entered promiscuous mode [ 1710.708772][ T2831] 8021q: adding VLAN 0 to HW filter on device bond6 [ 1710.816494][ T2836] bridge6: entered promiscuous mode [ 1710.823036][ T2836] bond6: (slave bridge6): Enslaving as an active interface with an up link [ 1710.880411][ T2831] macvlan3: entered promiscuous mode [ 1710.887133][ T2831] macvlan3: entered allmulticast mode [ 1710.896302][ T2831] bond6: (slave macvlan3): Error -98 calling set_mac_address [ 1711.497307][ T2833] Bluetooth: hci3: Opcode 0x0c1a failed: -4 [ 1711.510608][ T2833] Bluetooth: hci3: Error when powering off device on rfkill (-4) [ 1711.533712][ T2833] Bluetooth: hci1: Opcode 0x0c1a failed: -4 [ 1711.552038][ T2833] Bluetooth: hci1: Error when powering off device on rfkill (-4) [ 1711.603202][ T2833] Bluetooth: hci4: Opcode 0x0c1a failed: -4 [ 1711.614969][ T2833] Bluetooth: hci4: Error when powering off device on rfkill (-4) [ 1711.667223][ T2833] tipc: Resetting bearer [ 1711.717016][ T2833] Bluetooth: hci2: Opcode 0x0c1a failed: -4 [ 1711.727002][ T2833] Bluetooth: hci2: Error when powering off device on rfkill (-4) [ 1711.789907][ T2833] Bluetooth: hci0: Opcode 0x0c1a failed: -4 [ 1711.812639][ T2833] Bluetooth: hci0: Error when powering off device on rfkill (-4) [ 1712.184804][ T2894] __nla_validate_parse: 20 callbacks suppressed [ 1712.184844][ T2894] netlink: 12 bytes leftover after parsing attributes in process `syz.1.16582'. [ 1712.242912][ T2894] netlink: 12 bytes leftover after parsing attributes in process `syz.1.16582'. [ 1712.262172][ T2901] netlink: 64 bytes leftover after parsing attributes in process `syz.5.16581'. [ 1712.272123][ T2901] netlink: 64 bytes leftover after parsing attributes in process `syz.5.16581'. [ 1713.123603][ T2958] xt_addrtype: output interface limitation not valid in PREROUTING and INPUT [ 1713.513651][ T2984] netlink: 28 bytes leftover after parsing attributes in process `syz.2.16604'. [ 1713.562569][ T2985] tipc: Enabling of bearer rejected, failed to enable media [ 1713.938771][ T3007] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 1714.502835][ T3038] netlink: 8 bytes leftover after parsing attributes in process `syz.0.16617'. [ 1714.539679][ T3037] netlink: 32 bytes leftover after parsing attributes in process `syz.5.16620'. [ 1714.682236][ T3042] netlink: 12 bytes leftover after parsing attributes in process `syz.2.16621'. [ 1714.707231][ T3044] sch_tbf: burst 555 is lower than device syzkaller0 mtu (1514) ! [ 1714.736205][ T3047] netlink: 4 bytes leftover after parsing attributes in process `syz.1.16623'. [ 1714.789928][ T3050] sch_tbf: burst 555 is lower than device syzkaller0 mtu (1514) ! [ 1715.036468][ T3060] netlink: 4 bytes leftover after parsing attributes in process `syz.5.16625'. [ 1715.143747][ T3063] netlink: 'syz.2.16628': attribute type 11 has an invalid length. [ 1715.162740][ T3068] sctp: [Deprecated]: syz.1.16626 (pid 3068) Use of struct sctp_assoc_value in delayed_ack socket option. [ 1715.162740][ T3068] Use struct sctp_sack_info instead [ 1715.185620][ T3063] netlink: 'syz.2.16628': attribute type 11 has an invalid length. [ 1715.899858][ T3094] bond7: option primary: mode dependency failed, not supported in mode balance-rr(0) [ 1715.986083][ T3094] bond7 (unregistering): Released all slaves [ 1716.055491][ T3099] tipc: Enabling of bearer rejected, failed to enable media [ 1716.497046][ T3142] Cannot find del_set index 1 as target [ 1716.519243][ T3143] : renamed from hsr0 (while UP) [ 1717.160200][ T3168] openvswitch: netlink: Multiple metadata blocks provided [ 1717.554911][ T3181] __nla_validate_parse: 7 callbacks suppressed [ 1717.554935][ T3181] netlink: 4 bytes leftover after parsing attributes in process `syz.2.16650'. [ 1717.702789][ T3158] netlink: 8 bytes leftover after parsing attributes in process `syz.1.16644'. [ 1717.813345][ T3197] netlink: 'syz.2.16651': attribute type 1 has an invalid length. [ 1717.914192][ T3197] netlink: 'syz.2.16651': attribute type 4 has an invalid length. [ 1717.922162][ T3197] netlink: 9422 bytes leftover after parsing attributes in process `syz.2.16651'. [ 1718.388084][ T3213] smc: net device wlan0 applied user defined pnetid SYZ0 [ 1718.532631][ T3229] netlink: 4 bytes leftover after parsing attributes in process `syz.0.16660'. [ 1718.576058][ T3232] netlink: 4860 bytes leftover after parsing attributes in process `syz.5.16662'. [ 1718.821907][ T3249] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 1718.853335][ T3249] netlink: 4 bytes leftover after parsing attributes in process `syz.0.16666'. [ 1718.921850][ T3251] netlink: 16 bytes leftover after parsing attributes in process `syz.1.16667'. [ 1719.237684][ T3269] xt_NFQUEUE: number of total queues is 0 [ 1719.639116][ T3292] netlink: 52 bytes leftover after parsing attributes in process `syz.1.16676'. [ 1719.690808][ T3295] vcan1: entered promiscuous mode [ 1719.705613][ T3295] vcan1: entered allmulticast mode [ 1719.749550][ T3300] netlink: 8 bytes leftover after parsing attributes in process `syz.2.16677'. [ 1719.772222][ T3287] syzkaller0: entered promiscuous mode [ 1719.781547][ T3287] syzkaller0: entered allmulticast mode [ 1720.570885][ T3325] xt_bpf: check failed: parse error [ 1720.620327][ T3327] netlink: 4 bytes leftover after parsing attributes in process `syz.5.16684'. [ 1720.825619][ T3341] syzkaller1: entered promiscuous mode [ 1720.838550][ T3341] syzkaller1: entered allmulticast mode [ 1720.910524][ T3343] netlink: 'syz.5.16689': attribute type 6 has an invalid length. [ 1720.963223][ T3348] sctp: [Deprecated]: syz.1.16692 (pid 3348) Use of int in max_burst socket option deprecated. [ 1720.963223][ T3348] Use struct sctp_assoc_value instead [ 1721.218300][ T3368] vxcan0: entered allmulticast mode [ 1721.302227][ T3366] netlink: 'syz.2.16696': attribute type 7 has an invalid length. [ 1721.331544][ T3365] netlink: 'syz.2.16696': attribute type 7 has an invalid length. [ 1721.536445][ T3381] netlink: 'syz.2.16701': attribute type 29 has an invalid length. [ 1721.689058][ T3393] syzkaller1: entered promiscuous mode [ 1721.695741][ T3393] syzkaller1: entered allmulticast mode [ 1722.232794][ T3414] bond6: option ad_actor_sys_prio: mode dependency failed, not supported in mode balance-rr(0) [ 1722.267303][ T3414] bond6 (unregistering): Released all slaves [ 1722.348793][ T3417] bond8: entered promiscuous mode [ 1722.354170][ T3417] bond8: entered allmulticast mode [ 1722.359906][ T3417] 8021q: adding VLAN 0 to HW filter on device bond8 [ 1722.683776][ T3438] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 1722.759081][ T3438] netlink: 'syz.6.16715': attribute type 32 has an invalid length. [ 1722.786199][ T3438] __nla_validate_parse: 10 callbacks suppressed [ 1722.786222][ T3438] netlink: 8 bytes leftover after parsing attributes in process `syz.6.16715'. [ 1722.872683][ T3438] bond7: option coupled_control: invalid value (52) [ 1722.886832][ T3438] bond7 (unregistering): Released all slaves [ 1722.920189][ T3451] netlink: 'syz.2.16718': attribute type 1 has an invalid length. [ 1722.939228][ T3451] workqueue: Failed to create a rescuer kthread for wq "bond4": -EINTR [ 1723.099085][ T3462] netlink: 'syz.2.16722': attribute type 16 has an invalid length. [ 1723.124872][ T3462] netlink: 20 bytes leftover after parsing attributes in process `syz.2.16722'. [ 1723.191879][ T3464] netlink: 132 bytes leftover after parsing attributes in process `syz.6.16724'. [ 1723.729842][ T3499] netlink: 'syz.5.16735': attribute type 1 has an invalid length. [ 1723.779797][ T3499] 8021q: adding VLAN 0 to HW filter on device bond4 [ 1723.809826][ T3499] veth0_to_bond: left allmulticast mode [ 1723.879897][ T3499] bond4: (slave veth0_to_bond): making interface the new active one [ 1723.956965][ T3499] bond4: (slave veth0_to_bond): Enslaving as an active interface with an up link [ 1724.016363][ T3514] netlink: 56 bytes leftover after parsing attributes in process `syz.0.16739'. [ 1724.041283][ T3505] 8021q: adding VLAN 0 to HW filter on device bond5 [ 1724.068940][ T3505] bond4: (slave bond5): Enslaving as an active interface with a down link [ 1724.341090][ T3525] netlink: 12 bytes leftover after parsing attributes in process `syz.0.16741'. [ 1724.385737][ T3525] netlink: 12 bytes leftover after parsing attributes in process `syz.0.16741'. [ 1724.453605][ T3528] netlink: 'syz.1.16743': attribute type 6 has an invalid length. [ 1724.470541][ T3528] netlink: 'syz.1.16743': attribute type 6 has an invalid length. [ 1724.646130][ T3538] netlink: 28 bytes leftover after parsing attributes in process `syz.1.16746'. [ 1724.661190][ T3540] netlink: 80 bytes leftover after parsing attributes in process `syz.0.16747'. [ 1724.676136][ T3538] netlink: 'syz.1.16746': attribute type 7 has an invalid length. [ 1724.695614][ T3538] netlink: 'syz.1.16746': attribute type 8 has an invalid length. [ 1724.724073][ T3538] netlink: 4 bytes leftover after parsing attributes in process `syz.1.16746'. [ 1724.902115][ T3549] syzkaller1: entered promiscuous mode [ 1724.907775][ T3549] syzkaller1: entered allmulticast mode [ 1725.057608][ T3560] netlink: 8 bytes leftover after parsing attributes in process `syz.2.16754'. [ 1725.159922][ T3560] IPv6: sit4: Disabled Multicast RS [ 1725.213229][ T3560] sit4: entered allmulticast mode [ 1725.450782][ T3578] bond6: ARP target 1.0.0.0 is already present [ 1725.505438][ T3578] bond6: option arp_ip_target: invalid value (1) [ 1725.525544][ T3578] bond6 (unregistering): Released all slaves [ 1725.964007][ T3603] ------------[ cut here ]------------ [ 1725.970295][ T3603] msk->pm.local_addr_used == 0 [ 1725.970388][ T3603] WARNING: net/mptcp/pm_kernel.c:1070 at mptcp_pm_nl_del_addr_doit+0xfb1/0x1430, CPU#0: syz.0.16764/3603 [ 1725.986722][ T3603] Modules linked in: [ 1725.991224][ T3603] CPU: 0 UID: 0 PID: 3603 Comm: syz.0.16764 Not tainted syzkaller #0 PREEMPT(full) [ 1726.000857][ T3603] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 02/12/2026 [ 1726.011042][ T3603] RIP: 0010:mptcp_pm_nl_del_addr_doit+0xfb1/0x1430 [ 1726.017755][ T3603] Code: 01 00 00 49 89 c6 e8 6e 03 29 f6 e9 28 fb ff ff e8 64 03 29 f6 48 89 df be 03 00 00 00 e8 e7 9f 11 f9 eb a4 e8 50 03 29 f6 90 <0f> 0b 90 e9 ad fe ff ff 89 d9 80 e1 07 38 c1 0f 8c 14 fb ff ff 48 [ 1726.037456][ T3603] RSP: 0018:ffffc900041b7160 EFLAGS: 00010293 [ 1726.043750][ T3603] RAX: ffffffff8b9c8860 RBX: 0000000000000000 RCX: ffff88807695dac0 [ 1726.051840][ T3603] RDX: 0000000000000000 RSI: 0000000000000000 RDI: 0000000000000000 [ 1726.059900][ T3603] RBP: ffffc900041b73b0 R08: ffff88804b6b0ac7 R09: 1ffff110096d6158 [ 1726.068072][ T3603] R10: dffffc0000000000 R11: ffffed10096d6159 R12: 1ffff110096d6157 [ 1726.076142][ T3603] R13: ffff88808b3f5100 R14: ffff88804b6b0000 R15: ffff88804b6b0ab8 [ 1726.084214][ T3603] FS: 00007fefb74a36c0(0000) GS:ffff888125464000(0000) knlGS:0000000000000000 [ 1726.093208][ T3603] CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033 [ 1726.099902][ T3603] CR2: 00007fe61bb456b8 CR3: 000000002bf0c000 CR4: 00000000003526f0 [ 1726.107974][ T3603] Call Trace: [ 1726.111311][ T3603] [ 1726.114526][ T3603] ? __pfx_mptcp_pm_nl_del_addr_doit+0x10/0x10 [ 1726.120772][ T3603] ? rcu_is_watching+0x15/0xb0 [ 1726.125680][ T3603] ? trace_kmalloc+0x2a/0x110 [ 1726.130430][ T3603] ? genl_family_rcv_msg_attrs_parse+0x1c9/0x2a0 [ 1726.136868][ T3603] genl_family_rcv_msg_doit+0x22a/0x330 [ 1726.142492][ T3603] ? __asan_memcpy+0x40/0x70 [ 1726.147391][ T3603] ? __pfx_genl_family_rcv_msg_doit+0x10/0x10 [ 1726.153724][ T3603] ? bpf_lsm_capable+0x9/0x20 [ 1726.158523][ T3603] ? security_capable+0x7e/0x2c0 [ 1726.163528][ T3603] genl_rcv_msg+0x61c/0x7a0 [ 1726.168157][ T3603] ? __pfx_genl_rcv_msg+0x10/0x10 [ 1726.173247][ T3603] ? __pfx_mptcp_pm_nl_del_addr_doit+0x10/0x10 [ 1726.179540][ T3603] ? __lock_acquire+0x6b5/0x2cf0 [ 1726.184691][ T3603] netlink_rcv_skb+0x232/0x4b0 [ 1726.189523][ T3603] ? __pfx_genl_rcv_msg+0x10/0x10 [ 1726.194673][ T3603] ? __pfx_netlink_rcv_skb+0x10/0x10 [ 1726.200048][ T3603] ? down_read+0x272/0x2e0 [ 1726.204571][ T3603] ? genl_rcv+0xd/0x40 [ 1726.208728][ T3603] genl_rcv+0x28/0x40 [ 1726.212790][ T3603] netlink_unicast+0x80f/0x9b0 [ 1726.217707][ T3603] ? __pfx_netlink_unicast+0x10/0x10 [ 1726.223140][ T3603] ? netlink_sendmsg+0x650/0xb40 [ 1726.228295][ T3603] ? skb_put+0x11b/0x210 [ 1726.232609][ T3603] netlink_sendmsg+0x813/0xb40 [ 1726.237665][ T3603] ? __pfx_netlink_sendmsg+0x10/0x10 [ 1726.243117][ T3603] ? aa_sock_msg_perm+0xf1/0x1b0 [ 1726.248179][ T3603] ? bpf_lsm_socket_sendmsg+0x9/0x20 [ 1726.253577][ T3603] ? __pfx_netlink_sendmsg+0x10/0x10 [ 1726.258999][ T3603] ____sys_sendmsg+0xa68/0xad0 [ 1726.263826][ T3603] ? futex_unqueue+0x211/0x240 [ 1726.268718][ T3603] ? __pfx_____sys_sendmsg+0x10/0x10 [ 1726.274114][ T3603] ? import_iovec+0x73/0xa0 [ 1726.278822][ T3603] ___sys_sendmsg+0x2a5/0x360 [ 1726.283761][ T3603] ? __pfx____sys_sendmsg+0x10/0x10 [ 1726.289082][ T3603] ? futex_wait+0x29a/0x380 [ 1726.293699][ T3603] ? __fget_files+0x2a/0x420 [ 1726.298487][ T3603] ? __fget_files+0x3a0/0x420 [ 1726.303333][ T3603] __x64_sys_sendmsg+0x1bd/0x2a0 [ 1726.308477][ T3603] ? __pfx___x64_sys_sendmsg+0x10/0x10 [ 1726.314047][ T3603] ? rcu_is_watching+0x15/0xb0 [ 1726.318902][ T3603] do_syscall_64+0x14d/0xf80 [ 1726.323549][ T3603] ? trace_irq_disable+0x3b/0x150 [ 1726.328674][ T3603] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1726.334911][ T3603] ? clear_bhb_loop+0x40/0x90 [ 1726.339649][ T3603] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1726.345646][ T3603] RIP: 0033:0x7fefb659c799 [ 1726.350112][ T3603] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 1726.369809][ T3603] RSP: 002b:00007fefb74a3028 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 1726.378322][ T3603] RAX: ffffffffffffffda RBX: 00007fefb6815fa0 RCX: 00007fefb659c799 [ 1726.386383][ T3603] RDX: 0000000000000000 RSI: 0000200000000140 RDI: 000000000000000c [ 1726.394458][ T3603] RBP: 00007fefb6632bd9 R08: 0000000000000000 R09: 0000000000000000 [ 1726.402494][ T3603] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 1726.410569][ T3603] R13: 00007fefb6816038 R14: 00007fefb6815fa0 R15: 00007ffdddde1d38 [ 1726.418686][ T3603] [ 1726.421793][ T3603] Kernel panic - not syncing: kernel: panic_on_warn set ... [ 1726.429206][ T3603] CPU: 0 UID: 0 PID: 3603 Comm: syz.0.16764 Not tainted syzkaller #0 PREEMPT(full) [ 1726.438619][ T3603] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 02/12/2026 [ 1726.448739][ T3603] Call Trace: [ 1726.452082][ T3603] [ 1726.455106][ T3603] vpanic+0x56c/0xa60 [ 1726.459227][ T3603] ? __pfx__printk+0x10/0x10 [ 1726.463865][ T3603] ? __pfx_vpanic+0x10/0x10 [ 1726.468460][ T3603] ? is_bpf_text_address+0x292/0x2b0 [ 1726.473857][ T3603] ? is_bpf_text_address+0x26/0x2b0 [ 1726.479137][ T3603] panic+0xc5/0xd0 [ 1726.482916][ T3603] ? __pfx_panic+0x10/0x10 [ 1726.487434][ T3603] __warn+0x315/0x4f0 [ 1726.491470][ T3603] ? mptcp_pm_nl_del_addr_doit+0xfb1/0x1430 [ 1726.497427][ T3603] ? mptcp_pm_nl_del_addr_doit+0xfb1/0x1430 [ 1726.503474][ T3603] __report_bug+0x29a/0x540 [ 1726.508053][ T3603] ? mptcp_pm_nl_del_addr_doit+0xfb1/0x1430 [ 1726.514011][ T3603] ? __pfx___report_bug+0x10/0x10 [ 1726.519190][ T3603] ? __lock_acquire+0x6b5/0x2cf0 [ 1726.524190][ T3603] ? __lock_sock_fast+0x45/0xe0 [ 1726.529094][ T3603] ? preempt_schedule_thunk+0x16/0x30 [ 1726.534586][ T3603] ? mptcp_pm_nl_del_addr_doit+0xfb1/0x1430 [ 1726.540536][ T3603] report_bug+0x16a/0x220 [ 1726.544928][ T3603] ? mptcp_pm_nl_del_addr_doit+0xfb1/0x1430 [ 1726.550880][ T3603] ? mptcp_pm_nl_del_addr_doit+0xfb3/0x1430 [ 1726.556836][ T3603] handle_bug+0x98/0x200 [ 1726.561139][ T3603] exc_invalid_op+0x1a/0x50 [ 1726.565798][ T3603] asm_exc_invalid_op+0x1a/0x20 [ 1726.570704][ T3603] RIP: 0010:mptcp_pm_nl_del_addr_doit+0xfb1/0x1430 [ 1726.577276][ T3603] Code: 01 00 00 49 89 c6 e8 6e 03 29 f6 e9 28 fb ff ff e8 64 03 29 f6 48 89 df be 03 00 00 00 e8 e7 9f 11 f9 eb a4 e8 50 03 29 f6 90 <0f> 0b 90 e9 ad fe ff ff 89 d9 80 e1 07 38 c1 0f 8c 14 fb ff ff 48 [ 1726.597272][ T3603] RSP: 0018:ffffc900041b7160 EFLAGS: 00010293 [ 1726.603399][ T3603] RAX: ffffffff8b9c8860 RBX: 0000000000000000 RCX: ffff88807695dac0 [ 1726.611426][ T3603] RDX: 0000000000000000 RSI: 0000000000000000 RDI: 0000000000000000 [ 1726.619449][ T3603] RBP: ffffc900041b73b0 R08: ffff88804b6b0ac7 R09: 1ffff110096d6158 [ 1726.627479][ T3603] R10: dffffc0000000000 R11: ffffed10096d6159 R12: 1ffff110096d6157 [ 1726.635593][ T3603] R13: ffff88808b3f5100 R14: ffff88804b6b0000 R15: ffff88804b6b0ab8 [ 1726.643720][ T3603] ? mptcp_pm_nl_del_addr_doit+0xfb0/0x1430 [ 1726.649797][ T3603] ? __pfx_mptcp_pm_nl_del_addr_doit+0x10/0x10 [ 1726.656042][ T3603] ? rcu_is_watching+0x15/0xb0 [ 1726.660958][ T3603] ? trace_kmalloc+0x2a/0x110 [ 1726.665707][ T3603] ? genl_family_rcv_msg_attrs_parse+0x1c9/0x2a0 [ 1726.672112][ T3603] genl_family_rcv_msg_doit+0x22a/0x330 [ 1726.677725][ T3603] ? __asan_memcpy+0x40/0x70 [ 1726.682377][ T3603] ? __pfx_genl_family_rcv_msg_doit+0x10/0x10 [ 1726.688563][ T3603] ? bpf_lsm_capable+0x9/0x20 [ 1726.693297][ T3603] ? security_capable+0x7e/0x2c0 [ 1726.698286][ T3603] genl_rcv_msg+0x61c/0x7a0 [ 1726.702941][ T3603] ? __pfx_genl_rcv_msg+0x10/0x10 [ 1726.708014][ T3603] ? __pfx_mptcp_pm_nl_del_addr_doit+0x10/0x10 [ 1726.714227][ T3603] ? __lock_acquire+0x6b5/0x2cf0 [ 1726.719257][ T3603] netlink_rcv_skb+0x232/0x4b0 [ 1726.724077][ T3603] ? __pfx_genl_rcv_msg+0x10/0x10 [ 1726.729166][ T3603] ? __pfx_netlink_rcv_skb+0x10/0x10 [ 1726.734519][ T3603] ? down_read+0x272/0x2e0 [ 1726.738985][ T3603] ? genl_rcv+0xd/0x40 [ 1726.743120][ T3603] genl_rcv+0x28/0x40 [ 1726.747244][ T3603] netlink_unicast+0x80f/0x9b0 [ 1726.752159][ T3603] ? __pfx_netlink_unicast+0x10/0x10 [ 1726.757494][ T3603] ? netlink_sendmsg+0x650/0xb40 [ 1726.762500][ T3603] ? skb_put+0x11b/0x210 [ 1726.766894][ T3603] netlink_sendmsg+0x813/0xb40 [ 1726.771722][ T3603] ? __pfx_netlink_sendmsg+0x10/0x10 [ 1726.777058][ T3603] ? aa_sock_msg_perm+0xf1/0x1b0 [ 1726.782048][ T3603] ? bpf_lsm_socket_sendmsg+0x9/0x20 [ 1726.787387][ T3603] ? __pfx_netlink_sendmsg+0x10/0x10 [ 1726.792726][ T3603] ____sys_sendmsg+0xa68/0xad0 [ 1726.797632][ T3603] ? futex_unqueue+0x211/0x240 [ 1726.802465][ T3603] ? __pfx_____sys_sendmsg+0x10/0x10 [ 1726.807808][ T3603] ? import_iovec+0x73/0xa0 [ 1726.812374][ T3603] ___sys_sendmsg+0x2a5/0x360 [ 1726.817123][ T3603] ? __pfx____sys_sendmsg+0x10/0x10 [ 1726.822473][ T3603] ? futex_wait+0x29a/0x380 [ 1726.827053][ T3603] ? __fget_files+0x2a/0x420 [ 1726.831701][ T3603] ? __fget_files+0x3a0/0x420 [ 1726.836445][ T3603] __x64_sys_sendmsg+0x1bd/0x2a0 [ 1726.841452][ T3603] ? __pfx___x64_sys_sendmsg+0x10/0x10 [ 1726.846973][ T3603] ? rcu_is_watching+0x15/0xb0 [ 1726.851811][ T3603] do_syscall_64+0x14d/0xf80 [ 1726.856445][ T3603] ? trace_irq_disable+0x3b/0x150 [ 1726.861576][ T3603] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1726.867873][ T3603] ? clear_bhb_loop+0x40/0x90 [ 1726.872631][ T3603] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1726.878862][ T3603] RIP: 0033:0x7fefb659c799 [ 1726.883330][ T3603] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 1726.902979][ T3603] RSP: 002b:00007fefb74a3028 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 1726.911472][ T3603] RAX: ffffffffffffffda RBX: 00007fefb6815fa0 RCX: 00007fefb659c799 [ 1726.919488][ T3603] RDX: 0000000000000000 RSI: 0000200000000140 RDI: 000000000000000c [ 1726.927520][ T3603] RBP: 00007fefb6632bd9 R08: 0000000000000000 R09: 0000000000000000 [ 1726.935542][ T3603] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 1726.943625][ T3603] R13: 00007fefb6816038 R14: 00007fefb6815fa0 R15: 00007ffdddde1d38 [ 1726.951677][ T3603] [ 1726.955640][ T3603] Kernel Offset: disabled [ 1726.960017][ T3603] Rebooting in 86400 seconds..