last executing test programs: 6m10.308798921s ago: executing program 4 (id=7548): r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = socket$nl_generic(0x10, 0x3, 0x10) r2 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000100), r1) sendmsg$NL80211_CMD_SET_BSS(r1, &(0x7f0000000280)={&(0x7f00000000c0)={0x10, 0x0, 0x0, 0x8000000}, 0xc, &(0x7f0000000140)={&(0x7f0000000200)=ANY=[@ANYBLOB='P.\a\x00', @ANYRES16=r2, @ANYBLOB="000428bd7000fbdbdf25190000000c009900ff0000003900000005001c000900000005001e00030000000500a2000800000005001e000b00000006006d000002000005001c0001000000"], 0x50}, 0x1, 0x0, 0x0, 0x48840}, 0x20000004) getsockopt$inet_pktinfo(0xffffffffffffffff, 0x0, 0x8, &(0x7f0000000300)={0x0, @multicast2, @local}, &(0x7f0000000340)=0xc) getsockopt$inet_IP_XFRM_POLICY(0xffffffffffffffff, 0x0, 0x11, &(0x7f0000000380)={{{@in=@loopback, @in6=@private1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}, {{@in6=@private0}, 0x0, @in6=@private2}}, &(0x7f0000000480)=0xe8) setsockopt$inet_IP_XFRM_POLICY(0xffffffffffffffff, 0x0, 0x11, &(0x7f00000004c0)={{{@in=@remote, @in6=@private2={0xfc, 0x2, '\x00', 0x1}, 0x4e23, 0x590, 0x4e23, 0x8, 0x0, 0x0, 0x20, 0x3c, r3, r4}, {0x0, 0x4, 0xd0a2, 0x2, 0x1, 0xfffffffffffffff8, 0x3be, 0x7}, {0x1, 0x80000001, 0x7f, 0x101}, 0x3, 0x6e6bbf, 0x0, 0x0, 0x1, 0x3}, {{@in6=@ipv4={'\x00', '\xff\xff', @private=0xa010101}, 0x4d3, 0x3c}, 0x2, @in6=@dev={0xfe, 0x80, '\x00', 0x13}, 0x3507, 0x3, 0x1, 0xf4, 0x33, 0x2b, 0x6}}, 0xe8) r5 = socket$inet6_sctp(0xa, 0x5, 0x84) getsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX3(r5, 0x84, 0x6f, &(0x7f0000000000)={0x0, 0x1c, &(0x7f00000020c0)=[@in6={0xa, 0x0, 0x0, @remote, 0x34}]}, &(0x7f0000002100)=0x10) setsockopt$inet6_int(r5, 0x29, 0x4a, 0x0, 0x0) bpf$PROG_LOAD(0x5, &(0x7f000000e000)={0x10, 0x4, &(0x7f0000000040)=ANY=[@ANYBLOB="b400000000000000791048000000000061042c000000000095000000"], &(0x7f0000003ff6)='GPL\x00', 0x2, 0xfd90, &(0x7f000000cf3d)=""/195, 0x0, 0x1, '\x00', 0x0, @sk_msg, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0xfffffffffffffd8b, 0xffffffffffffffff}, 0x48) sendmsg$nl_generic(r1, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000180)={&(0x7f00000005c0)=ANY=[@ANYBLOB="34000000400007012bbd700000000000017c00000400c2800c00018006000600843b0001000000000000808006003600843b0000c7bb7a8ed8c945282d6711f5f928f3062fbc00c32164897047f85011d170655fe70bd03d9fe46d26cf46d699274ed0edc37ab7202333ceea90d22ee2513a465c04578eb428fc23c838ad40e9eb3787c4f29bdadf90233d43ae23ab196d1c66d8699972a71383267beac63779b0d25c8130a37b975d7e7e6252af63d60792826f2a5f2c1caded94a768be6a58f4b19d5ecd2b46ccb677d8eaee80cce8a181f87eb5781900139db8d95247b9a62f7f4652df3d4e5b638ccf3784"], 0x34}, 0x1, 0x0, 0x0, 0x4048011}, 0xc000) sendmsg$nl_route_sched(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f0000000040)=@newtaction={0x68, 0x30, 0x871a15abc695fa3d, 0x0, 0x0, {}, [{0x54, 0x1, [@m_ctinfo={0x50, 0x1, 0x0, 0x0, {{0xb}, {0x24, 0x2, 0x0, 0x1, [@TCA_CTINFO_ACT={0x18}, @TCA_CTINFO_PARMS_CPMARK_MASK={0x8}]}, {0x4a}, {0xc}, {0xc}}}]}]}, 0x68}}, 0x0) 6m10.173200032s ago: executing program 4 (id=7552): bpf$MAP_CREATE(0x300000000000011, &(0x7f0000000100)=@base={0x18, 0x4, 0x41, 0x0, 0x1, 0x1, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x4002, 0x5}, 0x48) r0 = socket(0x15, 0x2, 0x4) sendmsg$nl_route(r0, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000480)=@newlink={0x3c, 0x10, 0x401, 0x10000, 0x0, {0x0, 0x0, 0x0, 0x0, 0x1bf7b}, [@IFLA_LINKINFO={0x1c, 0x12, 0x0, 0x1, @gre={{0x8}, {0x10, 0x2, 0x0, 0x1, [@IFLA_GRE_COLLECT_METADATA={0x4}, @IFLA_GRE_REMOTE={0x8, 0x7, @multicast1}]}}}]}, 0x3c}, 0x1, 0x0, 0x0, 0x4080}, 0x0) 6m9.735550302s ago: executing program 4 (id=7554): sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f00000007c0)={0x0, 0x0, &(0x7f0000000480)={&(0x7f0000000a00)=@delchain={0x1e8, 0x65, 0x300, 0x70bd27, 0x25dfdbfc, {0x0, 0x0, 0x0, 0x0, {0x2, 0x2}, {0x0, 0x1}, {0xd}}, [@filter_kind_options=@f_u32={{0x8}, {0xc, 0x2, [@TCA_U32_DIVISOR={0x8, 0x4, 0xd8}]}}, @TCA_RATE={0x6, 0x5, {0xb, 0x40}}, @filter_kind_options=@f_basic={{0xa}, {0x19c, 0x2, [@TCA_BASIC_EMATCHES={0x198, 0x2, 0x0, 0x1, [@TCA_EMATCH_TREE_LIST={0x50, 0x2, 0x0, 0x1, [@TCF_EM_META={0x4c, 0x3ffc, 0x0, 0x0, {{0xf, 0x4, 0x2}, [@TCA_EM_META_HDR={0xc, 0x1, {{0x89c6, 0xb2}, {0x9, 0x0, 0x1}}}, @TCA_EM_META_LVALUE={0x4}, @TCA_EM_META_LVALUE={0x8, 0x2, [@TCF_META_TYPE_INT=0x8]}, @TCA_EM_META_RVALUE={0x11, 0x3, [@TCF_META_TYPE_INT=0xa, @TCF_META_TYPE_VAR='0', @TCF_META_TYPE_INT=0x6, @TCF_META_TYPE_INT=0xa]}, @TCA_EM_META_LVALUE={0x9, 0x2, [@TCF_META_TYPE_INT=0x9, @TCF_META_TYPE_VAR=')']}, @TCA_EM_META_LVALUE={0x8, 0x2, [@TCF_META_TYPE_INT=0x9]}]}}]}, @TCA_EMATCH_TREE_HDR={0x8, 0x1, {0xfff}}, @TCA_EMATCH_TREE_LIST={0x18, 0x2, 0x0, 0x1, [@TCF_EM_CANID={0x14, 0x3, 0x0, 0x0, {{0x401, 0x7, 0xf}, {{0x4, 0x0, 0x1}, {0x0, 0x1}}}}]}, @TCA_EMATCH_TREE_LIST={0x124, 0x2, 0x0, 0x1, [@TCF_EM_CONTAINER={0xdc, 0x3, 0x0, 0x0, {{0x251d, 0x0, 0xff16}, "f168acc68bfc30a2224d752ea0e7984940a24677465b6a9acda038e9cf98ff0f2318d5f2c692d5c7be12c84bc5bdf606b11bc261799809bd20e93f855ce6c7aa229fb7d848b2fc38b7126acd4cc44c9aad2b9d8f75ea224b224d1c0c6e5cbcedd5bdb13da7ccd9f9c7c3f0409c6267f4d1be151fddc7cabe2d9289a4bb74b2cb52655d45958919332363fe1e0a41b54190c46c3ee39d36f16ba9960ecda01379b4f6decae2d541ea381ae22e30b104316c2ce45ec6eb90a25311b54c3b9045a8a43db7f339d3610282fbd12009"}}, @TCF_EM_U32={0x1c, 0x2, 0x0, 0x0, {{0xb, 0x3, 0xfffa}, {0x80000001, 0x9, 0x6, 0x62af}}}, @TCF_EM_CANID={0x14, 0x2, 0x0, 0x0, {{0xf36d, 0x7, 0x8000}, {{0x0, 0x1, 0x1, 0x1}, {0x4, 0x0, 0x1, 0x1}}}}, @TCF_EM_NBYTE={0x14, 0x3, 0x0, 0x0, {{0x7f}, {0x1, 0x1, 0x0, "15"}}}]}]}]}}]}, 0x1e8}, 0x1, 0x0, 0x0, 0x40008c5}, 0x20000080) r0 = socket(0x10, 0x803, 0x0) sendto(r0, &(0x7f0000000740)="120000001200e7ef007b00000000000000a1", 0x12, 0x0, 0x0, 0x0) r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000080)={0x5, 0x3, &(0x7f00000007c0)=ANY=[@ANYBLOB="850000002a00000025000000000000009500000000000000afcd48d6494d614dcc6fab5335ec470db2c6161dba392176dd2963038e1d69ba7ea94c500dc4ef2fad96ed406f21caf5adcf920569c00cc1190e95fa7c93836d9ea2cfb0e60436e05425cc4686b066707de94a4f4d5fc79c987d669f381faca0f9d9b24be41a9169bdfaf16da915b2e249ee1c6eee84309e7a23c19a39484809539fca4e0b6eab1aa7d55545a34effa077faa56d59e88254f54077f799bf168301000000bf2255d6a0244d35b213bda84cc172afd8cc2e59a7d8b85a5e3d77ac463920e231b7ae0da8616d2b7958f91f5da6c025d0faab186d94af98af1da2b5952eb15855933a202304e035f7a35dfc72c81256a55a25f8fe3b28d7e53c78fbfe5ab0255f347160ec83070000000000004015cf10453f6c0b973b81a484ebad04859d928365a7ea3fab8b4b380a00d72bc0480f949c479757306720399379d9271cf555c14d56b51c2298237bebfc08e0d5976a942b846970cfd98b9d4139f1111f2dc5e46ac1c60a9b030074bfbcd4b09012175484135f0e519f0b1e4aaa026d570ecb5e8cddbed65ff702000000a3ff4f8a4cf796b07a6ff61c5552417fd703f7f14d8b78a602ca3cdf6a9120072a5d00dcdd8595356c9b2492aaf1264d4ef4a410c882834867bcd2b6e559d17879570c8ad9433269af3be5fa6a9a5c24e392955f4e979ea13201bafe4f0f6ea508000000a0c548552b571bed5647223c78a992810000000571cbb17d9f37282462f0e9c147c0d497c61433c6ccc35601eef97ee611be8c97f4151ffdf6f7820549cda6cb799c6e924966a7f90bf8fd1e75ee76bd72346cfbb526890aa7fe5e68949a3b30567e54d3504723177d356c4604bca492ede62fc28839b5301160ecec37e83efceefd7ca2533659edc8be05cc85451c6a145074343caea5c4bf690441974b155f5adc681a03c0bbb8358856175e2ce8b0cbbbe3c033e54ffcebde1d9d3d35a142a9ec9a7a3755e0f209150a07682c4e14e3a83558df6f3fc97f1730a136bdee07e98cb984b2e2304a1b63afefdb636e56bbaae4e62136574bc6371a0bb2be1a962aae9c1258da6ef590e1d85ea9e12b3025f43e7e08ccffc5064dea4c39cf4b98e1fc6efb5978f51e16b678eca0b658a56008948e561a9845e4ff29e2bdb1d0b923b272341c5e093fd66a2946501559335781092cf8ce3c7c56cd31121624d76517fd3666276c3c0e812b28e2f30d035cee5d0e77a3c70008ec651cc0ae637fa474816bc59d2e2a00092419304b338a987e9d3044d856cf24f370030be3b5f79f030b8d3ebce68663ef5af469abe753314fae31651e0ecea5ece8fb11a4ee288eb149f1fa33669cc8d901fa8e46354c9c3a041a1e7b55c4e81dba1e12289ee34463baf28345bde0c195bc9f021da8f3025ee9c8e3168b4177ce37ed85464c31679053e7f9d04bb5cb51da0b7958989fd70f241262fa3f1dabeb4fc4bda345360200000001fbddeacd3adaa4d2715e21c772ccd44341f7fd53df58ae791ee8b489a7c9efe3625a9d971b5997485d6a063dc6f7359e2eccc2fb39d419de1a7b5c9dc22c96295a4601adf59d44e58eb1c60b3475be31a9b7cf42b6402312d2725b8d9fa700a8640724a5f4e12ad99012a2e01ce79ae29d2c117ca65fc86c2dce97aa03279a66ec87122219b0f796ab92b1adecae50fdb408c8a80f7f02f750d6c977a1919f9f69a6cfefdf879d447df53f3b9b70d10355b07466d1ef0056b5af553d18a6cc50feeb7bfad9b7be3283b6450d014e7712d2f1d7004548b19162cef04d18d4f5987baab97a9bfbd8f185b5671820420bf5b6522c0e21c882c66f4f25ffb6d95e07de02205fca4f18a2eb5b63e45d5d80fe52734093ae5aa3c0b4f3f45bfff2418a18217747ae442e31560e5b741445ea2a1acee2e98c9f3427834ba0a765d20b30f87af976a46f9a9a1ac7dea1ea6845f9aa6623920dacc107f532348cc21164efe794874eac73381e961f3d9c8c21578fe3245097c280abe51427a7f6cd72b5da6d0252803c66730cd5eac907f09b9695906313f8873522608c6fc01e1b9e16587bb5f721303e6b89e5c54d680ac66d09af90dbf50ee69a39265964279d17eb0000000000000000000000fa08ad0731c4b839688b22c4da2a6b00008a1949a6ba49fbf981f8265e7f1f4c2d97f4680b135f87c228ce69418a282bffff2481a0df1774fa7d94944bb92d2b89f73f0e8b63f6316c5762f3288bc970720f48b5647dd177db6810fae05334d5a44a020000001c0d882a564d74a7c72bf9a2152b261e58fea6d2f93589cfe261dc0410b5ccc92a5a0eab327a33431d62d2b7c75ce654d556c9e1817c1abca762ab53d40da51560351b673363652e1ecb56cfe4a746a45ab13c6014e9f361ab687d1cd1795ce9e05c817b83d76046bdb3709de5df7499a02d2f636a454b85b987580ada025d83bd7b8df28a540d5ec5537942e79f2f1ab25ea5f563bc77e4f9468bd309469880c7e34150ca886d1f13dff7e82dbe296c877d925c38c54cc8137b29028854b6bd57ca893927c331300e16aba792289e135589d93302fc37c73c303e383cdf8ef3f6d6265fe5ee01759d24027475c8901039a898582022bc95992b86dce0710887c8a625d9cbb897bdbfaf49a3f642a169827a9bae4fcfa5212461db000000000000e6ed75ca8fcda7ef3ee336189fef3b3ffb9f38fefc5ff39c4e69e3fa1f8b10ee97123e99b61eba065b1ad67530e7c4f11f9da7ae000002000000610101ad7f79cb9bbf64a0fc109f49fe50151f5ddfe51833ec65ece70e07ce8ab5d97db47da8f80000664dc0b86ae2b3ff9d4e220752a6b2f3ea9f793612386496dca5af7b8952aafa332482e6137e994d3f5259b7f51544cdc6d8cb4becc20dd3a57545b0c2621e4c5f94a23f73ee02c22ee7e27c2cc491a85947baac523c347c9b9ede5d6265997f2ad6e9719aafdb323988e62b7ec84545cd63b7a7"], &(0x7f0000000000)='GPL\x00', 0x5, 0x252, &(0x7f000000cf3d)=""/195}, 0x48) bpf$PROG_BIND_MAP(0x1c, &(0x7f0000000040)={r1, 0xffffffffffffffff, 0x29}, 0xc) recvmmsg(r0, &(0x7f00000037c0)=[{{&(0x7f00000004c0)=@ethernet={0x0, @random}, 0xfdf4, &(0x7f0000000380)=[{&(0x7f0000000140)=""/100, 0x365}, {&(0x7f0000000280)=""/85, 0x7c}, {&(0x7f0000000fc0)=""/4096, 0x197}, {&(0x7f0000000400)=""/106, 0x645}, {&(0x7f0000000980)=""/73, 0x1b}, {&(0x7f0000000200)=""/77, 0x14}, {&(0x7f00000007c0)=""/154, 0x21}, {&(0x7f00000001c0)=""/17, 0x1d8}], 0x21, &(0x7f0000000600)=""/191, 0xffffffffffffff2f}}], 0x4000000000003b4, 0x2040000, &(0x7f0000003700)={0x77359400}) r2 = socket$nl_route(0x10, 0x3, 0x0) ioctl$ifreq_SIOCGIFINDEX_team(r2, 0x8933, &(0x7f0000000000)={'team0\x00', 0x0}) r4 = socket$inet6_mptcp(0xa, 0x1, 0x106) setsockopt$inet6_mtu(r4, 0x29, 0x4e, &(0x7f0000000400)=0x2, 0x4) sendmsg$nl_route(r2, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000440)=@newlink={0x54, 0x10, 0xffffffffffffffff, 0x70bd25, 0x25ded9f7, {0x0, 0x0, 0x0, 0x0, 0x2813, 0x2c21}, [@IFLA_LINK={0x8, 0x5, r3}, @IFLA_MASTER={0x8, 0xa, r3}, @IFLA_LINKINFO={0x24, 0x12, 0x0, 0x1, @macvlan={{0xc}, {0x14, 0x2, 0x0, 0x1, [@IFLA_MACVLAN_MODE={0x8, 0x1, 0x8}, @IFLA_MACVLAN_FLAGS={0x6, 0x2, 0x1}]}}}]}, 0x54}, 0x1, 0x0, 0x0, 0x1}, 0x20004800) 6m9.234168842s ago: executing program 4 (id=7560): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) socketpair$tipc(0x1e, 0x1, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) sendmsg$tipc(r1, &(0x7f00000003c0)={&(0x7f0000000180), 0x10, &(0x7f0000000380)=[{&(0x7f0000000480)="c3e972bd85a6d84136d6dd55048d3593a74f338ce6772ab9a6f64041c2f6fbbecdc08ebcd3192b6a53662dae7c8e9c665e80a5d0925f728dcac30c29793992e588952653d414cb8ccdabc38767fee819ec5af0c5ee936880fe8549b4ed347779cab4ffd4e0b62c53a1c01db28f2b3f91c34211c9353bc1dece61511917c2245fd66cb8dffeacb4d46d627c97b498bf1ff6b313bfbc9765457c831771d5eec7997ec242e4505f01c1bb3e069b2e630f42a2be86598a61", 0x64}, {&(0x7f0000000300)='V', 0x1}, {&(0x7f0000001600)="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", 0x1000}, {&(0x7f0000000340)="b768eb20304f2fdc5a9694a4867840d93170ca1a86406f", 0xfffffec0}], 0x4, 0x0, 0x0, 0x8010}, 0x0) r3 = socket$inet6_sctp(0xa, 0x1, 0x84) sendmmsg$inet6(r3, &(0x7f0000000780)=[{{&(0x7f0000000080)={0xa, 0x4e23, 0x0, @loopback, 0x3}, 0x1c, &(0x7f0000000500)=[{&(0x7f00000034c0)='\x00', 0x1}], 0x1}}, {{0x0, 0x0, 0x0, 0x0, 0x0, 0x78}}], 0x2, 0x3404c8d4) setsockopt$sock_attach_bpf(r2, 0x1, 0x21, &(0x7f0000000040), 0x4) r4 = socket$nl_generic(0x10, 0x3, 0x10) r5 = syz_genetlink_get_family_id$ethtool(&(0x7f0000000040), 0xffffffffffffffff) sendmsg$ETHTOOL_MSG_COALESCE_SET(r4, &(0x7f0000000540)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000280)=ANY=[@ANYBLOB='D\x00\x00\x00', @ANYRES16=r5, @ANYRES8=r1], 0x44}, 0x1, 0x0, 0x0, 0x80}, 0x0) sendmmsg(r2, &(0x7f000000d500)=[{{0x0, 0x0, 0x0}}, {{0x0, 0x0, 0x0}}, {{0x0, 0x0, 0x0}}, {{0x0, 0x0, 0x0}}, {{0x0, 0x0, 0x0}}, {{0x0, 0x0, &(0x7f000000be00)=[{&(0x7f000000ac40)="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", 0x5dd}], 0x1}}], 0x6, 0x20000004) bpf$PROG_LOAD(0x5, &(0x7f0000000300)={0x0, 0x5, 0x0, 0x0, 0x100}, 0x94) r6 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000000)='net_prio.prioidx\x00', 0x275a, 0x0) write$cgroup_subtree(r6, &(0x7f0000000080)=ANY=[], 0x10448) mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x2000005, 0x11, r6, 0x0) r7 = socket$inet_smc(0x2b, 0x1, 0x0) bind$inet(r7, &(0x7f0000000280)={0x2, 0x4e22, @private=0xa010102}, 0x10) ioctl$ifreq_SIOCGIFINDEX_batadv_hard(r1, 0x8933, &(0x7f0000000440)={'batadv_slave_1\x00', 0x0}) r9 = syz_genetlink_get_family_id$ipvs(&(0x7f00000001c0), 0xffffffffffffffff) r10 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$IPVS_CMD_NEW_DAEMON(r10, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000080)={0x14, r9, 0x1}, 0x14}}, 0x0) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000880)={0x11, 0x6, &(0x7f0000000240)=ANY=[@ANYBLOB="18000000050000000000ffff8d0000009500000000000000186400000a00000000000000050000d60c00400000000000"], &(0x7f00000002c0)='GPL\x00', 0x80000000, 0x2f, &(0x7f0000000400)=""/47, 0x41100, 0x1, '\x00', r8, 0x0, r6, 0x8, &(0x7f00000007c0)={0x2, 0x1}, 0x8, 0x10, &(0x7f0000000800)={0x0, 0x3, 0x8, 0x862}, 0x10, 0x0, 0x0, 0x0, &(0x7f0000000840)=[r6, r6, r6, r6, r6, r6, r6, r6], 0x0, 0x10, 0x3}, 0x94) sendmsg$IPSET_CMD_CREATE(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000140)=ANY=[@ANYRES16=r0], 0x5c}}, 0x0) ioctl$XFS_IOC_FSBULKSTAT_SINGLE(r7, 0xc0205866, &(0x7f0000000200)={&(0x7f00000000c0)=0x1, 0x7, &(0x7f0000000580)=[{}, {}, {}], &(0x7f0000000100)}) 6m8.716374969s ago: executing program 4 (id=7568): syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r0 = socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$tipc2(&(0x7f0000000200), 0xffffffffffffffff) (async) sendmsg$TIPC_NL_LINK_RESET_STATS(r0, &(0x7f00000003c0)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000440)=ANY=[], 0x1ac}}, 0x0) (async, rerun: 32) mmap$xdp(&(0x7f0000ffd000/0x2000)=nil, 0x2000, 0x2000001, 0x646f835d58a82cb8, 0xffffffffffffffff, 0x80000000) (async, rerun: 32) syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r1 = socket(0x23, 0x5, 0x0) setsockopt$llc_int(r1, 0x10c, 0xe, 0x0, 0x0) (async) r2 = openat$tun(0xffffffffffffff9c, &(0x7f00000002c0), 0x0, 0x0) ioctl$TUNSETIFF(r2, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x7101}) (async) r3 = socket(0x400000000010, 0x3, 0x9) r4 = openat$tun(0xffffffffffffff9c, &(0x7f0000000000), 0x40241, 0x0) r5 = syz_init_net_socket$bt_l2cap(0x1f, 0x1, 0x3) ioctl$FS_IOC_GETFSLABEL(r5, 0x800452d2, &(0x7f0000000100)) ioctl$TUNSETIFF(0xffffffffffffffff, 0x400454ca, &(0x7f0000000240)={'team0\x00', 0x10}) (async) r6 = socket(0x10, 0x3, 0x0) sendmsg$nl_generic(r6, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000080)=ANY=[@ANYBLOB="140000004e00ff13"], 0x14}}, 0x0) r7 = socket$kcm(0x2, 0xa, 0x2) ioctl$SIOCSIFHWADDR(r7, 0x8914, &(0x7f0000000180)={'syzkaller1\x00', @link_local}) write$tun(r4, &(0x7f0000000780)=ANY=[@ANYBLOB="000088640000030000000100000011000fc000000057"], 0xfce) getsockopt$sock_linger(r7, 0x1, 0xd, &(0x7f00000000c0), &(0x7f0000000140)=0x8) (async) r8 = socket$unix(0x1, 0x5, 0x0) ioctl$sock_SIOCGIFINDEX(r8, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r3, &(0x7f00000012c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000380)=@newqdisc={0x38, 0x24, 0x4ee4e6a52ff56541, 0x70bd2a, 0xffffffff, {0x0, 0x0, 0x0, r9, {0x0, 0xfff1}, {0xffff, 0xffff}, {0x0, 0xf}}, [@qdisc_kind_options=@q_fq={{0x7}, {0xc, 0x2, [@TCA_FQ_QUANTUM={0x8, 0x3, 0x7331c94b}]}}]}, 0x38}}, 0x0) (async) r10 = openat$tun(0xffffffffffffff9c, &(0x7f0000000100), 0x0, 0x0) ioctl$TUNSETIFF(r10, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x2}) (async) r11 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r11, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r11, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000580)={&(0x7f0000000340)=@newqdisc={0x4c, 0x24, 0x4ee4e6a52ff56541, 0x70bd25, 0x25dfdbfd, {0x0, 0x0, 0x0, r12, {0x0, 0xb}, {0xffff, 0xffff}, {0xfff2}}, [@qdisc_kind_options=@q_netem={{0xa}, {0x1c, 0x2, {{0x3, 0x3, 0x6361, 0x7, 0xffffffff, 0x3}}}}]}, 0x4c}}, 0x0) (async) sendmsg$nl_route_sched(r11, &(0x7f00000003c0)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000400)=@getqdisc={0x28, 0x26, 0x100, 0x70bd2c, 0x2, {0x0, 0x0, 0x0, r12, {0x1, 0x1}, {0xc, 0x7}, {0x0, 0xfff1}}, [{0x4}]}, 0x28}, 0x1, 0x0, 0x0, 0x240040e0}, 0x990) 6m8.21135151s ago: executing program 4 (id=7577): r0 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r0, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000180)={&(0x7f00000008c0)={0x14, 0x26, 0x9, 0x7fffd, 0x80, {0x6}}, 0x14}, 0x1, 0x0, 0x0, 0x400c801}, 0x4000000) sendmsg$WG_CMD_GET_DEVICE(r0, &(0x7f0000000080)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x8000}, 0xc, &(0x7f0000000040)={&(0x7f0000000900)={0xb64, 0x0, 0x400, 0x70bd2b, 0x25dfdbfc, {}, [@WGDEVICE_A_PEERS={0xb1c, 0x8, 0x0, 0x1, [{0x48, 0x0, 0x0, 0x1, [@WGPEER_A_PUBLIC_KEY={0x24, 0x1, @c_g}, @WGPEER_A_ENDPOINT6={0x20, 0x4, {0xa, 0x4e22, 0x3, @local, 0xc}}]}, {0xb0, 0x0, 0x0, 0x1, [@WGPEER_A_FLAGS={0x8, 0x3, 0x1}, @WGPEER_A_ENDPOINT4={0x14, 0x4, {0x2, 0x4e23, @loopback}}, @WGPEER_A_FLAGS={0x8, 0x3, 0x6}, @WGPEER_A_PUBLIC_KEY={0x24}, @WGPEER_A_PUBLIC_KEY={0x24}, @WGPEER_A_PERSISTENT_KEEPALIVE_INTERVAL={0x6, 0x5, 0x4000}, @WGPEER_A_ENDPOINT4={0x14, 0x4, {0x2, 0x4e21, @initdev={0xac, 0x1e, 0x0, 0x0}}}, @WGPEER_A_PRESHARED_KEY={0x24, 0x2, "22c5fb3357687cab7c14b71f24fcdc38bba60c7242a1a9629d27cbf270434122"}]}, {0x8c, 0x0, 0x0, 0x1, [@WGPEER_A_ENDPOINT4={0x14, 0x4, {0x2, 0x4e24, @dev={0xac, 0x14, 0x14, 0x34}}}, @WGPEER_A_PUBLIC_KEY={0x24, 0x1, @a_g}, @WGPEER_A_PRESHARED_KEY={0x24, 0x2, "186e6ad623b64ecce50a46533b9f6c3669657244eeecfd294a8c57e5461222f8"}, @WGPEER_A_FLAGS={0x8, 0x3, 0x2}, @WGPEER_A_PRESHARED_KEY={0x24, 0x2, "bc4e883f15d7845e08a3848146a42afd6bc78f5e54a2d0b0ddcb1ba39f862c06"}]}, {0x438, 0x0, 0x0, 0x1, [@WGPEER_A_ALLOWEDIPS={0x410, 0x9, 0x0, 0x1, [{0xc4, 0x0, 0x0, 0x1, [@ipv6={{0x6}, {0x14, 0x2, @remote}, {0x5, 0x3, 0x1}}, @ipv4={{0x6}, {0x8, 0x2, @dev={0xac, 0x14, 0x14, 0x44}}, {0x5, 0x3, 0x2}}, @ipv4={{0x6}, {0x8, 0x2, @multicast1}, {0x5, 0x3, 0x1}}, @ipv6={{0x6}, {0x14, 0x2, @private1}, {0x5}}, @ipv6={{0x6}, {0x14, 0x2, @mcast1}, {0x5}}, @ipv6={{0x6}, {0x14, 0x2, @private2={0xfc, 0x2, '\x00', 0x1}}, {0x5, 0x3, 0x1}}]}, {0x124, 0x0, 0x0, 0x1, [@ipv4={{0x6}, {0x8, 0x2, @multicast1}, {0x5, 0x3, 0x3}}, @ipv6={{0x6}, {0x14, 0x2, @remote}, {0x5, 0x3, 0x3}}, @ipv6={{0x6}, {0x14, 0x2, @remote}, {0x5, 0x3, 0x2}}, @ipv6={{0x6}, {0x14, 0x2, @ipv4={'\x00', '\xff\xff', @empty}}, {0x5, 0x3, 0x2}}, @ipv6={{0x6}, {0x14, 0x2, @ipv4={'\x00', '\xff\xff', @rand_addr=0x64010102}}, {0x5, 0x3, 0x1}}, @ipv6={{0x6}, {0x14, 0x2, @mcast1}, {0x5, 0x3, 0x2}}, @ipv4={{0x6}, {0x8, 0x2, @local}, {0x5, 0x3, 0x1}}, @ipv4={{0x6}, {0x8, 0x2, @multicast2}, {0x5, 0x3, 0x3}}, @ipv6={{0x6}, {0x14, 0x2, @dev={0xfe, 0x80, '\x00', 0x20}}, {0x5, 0x3, 0x2}}]}, {0x40, 0x0, 0x0, 0x1, [@ipv4={{0x6}, {0x8, 0x2, @multicast2}, {0x5}}, @ipv6={{0x6}, {0x14, 0x2, @private0={0xfc, 0x0, '\x00', 0x1}}, {0x5}}]}, {0x40, 0x0, 0x0, 0x1, [@ipv4={{0x6}, {0x8, 0x2, @dev={0xac, 0x14, 0x14, 0x24}}, {0x5, 0x3, 0x3}}, @ipv6={{0x6}, {0x14, 0x2, @remote}, {0x5, 0x3, 0x1}}]}, {0x94, 0x0, 0x0, 0x1, [@ipv6={{0x6}, {0x14, 0x2, @empty}, {0x5}}, @ipv4={{0x6}, {0x8, 0x2, @private=0xa010102}, {0x5, 0x3, 0x1}}, @ipv4={{0x6}, {0x8, 0x2, @rand_addr=0x64010101}, {0x5, 0x3, 0x2}}, @ipv4={{0x6}, {0x8, 0x2, @loopback}, {0x5, 0x3, 0x2}}, @ipv6={{0x6}, {0x14, 0x2, @local}, {0x5, 0x3, 0x2}}]}, {0x28, 0x0, 0x0, 0x1, [@ipv6={{0x6}, {0x14, 0x2, @private1={0xfc, 0x1, '\x00', 0x1}}, {0x5, 0x3, 0x3}}]}, {0xe8, 0x0, 0x0, 0x1, [@ipv4={{0x6}, {0x8, 0x2, @empty}, {0x5, 0x3, 0x3}}, @ipv6={{0x6}, {0x14, 0x2, @private2={0xfc, 0x2, '\x00', 0x1}}, {0x5, 0x3, 0x1}}, @ipv4={{0x6}, {0x8, 0x2, @loopback}, {0x5}}, @ipv6={{0x6}, {0x14, 0x2, @ipv4={'\x00', '\xff\xff', @rand_addr=0x64010100}}, {0x5, 0x3, 0x2}}, @ipv6={{0x6}, {0x14, 0x2, @local}, {0x5, 0x3, 0x3}}, @ipv6={{0x6}, {0x14, 0x2, @remote}, {0x5}}, @ipv6={{0x6}, {0x14, 0x2, @mcast2}, {0x5, 0x3, 0x1}}]}]}, @WGPEER_A_PUBLIC_KEY={0x24, 0x1, @b_g}]}, {0x54, 0x0, 0x0, 0x1, [@WGPEER_A_PERSISTENT_KEEPALIVE_INTERVAL={0x6, 0x5, 0x1}, @WGPEER_A_PRESHARED_KEY={0x24, 0x2, "84975b697c67dc51f40f9dde39f8946e0d522a6157b94e32f931bd7d98af124a"}, @WGPEER_A_PRESHARED_KEY={0x24, 0x2, "57a7216390804160f0e6d64606d2cd77900424485432feeb2ecf7af070d8614e"}]}, {0x508, 0x0, 0x0, 0x1, [@WGPEER_A_ENDPOINT6={0x20, 0x4, {0xa, 0x4e22, 0xa, @remote, 0x3bf6}}, @WGPEER_A_ALLOWEDIPS={0x4c4, 0x9, 0x0, 0x1, [{0x28, 0x0, 0x0, 0x1, [@ipv6={{0x6}, {0x14, 0x2, @rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x01'}, {0x5}}]}, {0x34, 0x0, 0x0, 0x1, [@ipv4={{0x6}, {0x8, 0x2, @broadcast}, {0x5, 0x3, 0x1}}, @ipv4={{0x6}, {0x8, 0x2, @multicast2}, {0x5, 0x3, 0x1}}]}, {0x118, 0x0, 0x0, 0x1, [@ipv6={{0x6}, {0x14, 0x2, @local}, {0x5, 0x3, 0x3}}, @ipv6={{0x6}, {0x14, 0x2, @rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x01'}, {0x5}}, @ipv6={{0x6}, {0x14, 0x2, @mcast2}, {0x5, 0x3, 0x2}}, @ipv6={{0x6}, {0x14, 0x2, @remote}, {0x5, 0x3, 0x1}}, @ipv4={{0x6}, {0x8, 0x2, @dev={0xac, 0x14, 0x14, 0x27}}, {0x5, 0x3, 0x2}}, @ipv4={{0x6}, {0x8, 0x2, @private=0xa010100}, {0x5, 0x3, 0x3}}, @ipv6={{0x6}, {0x14, 0x2, @remote}, {0x5, 0x3, 0x3}}, @ipv4={{0x6}, {0x8, 0x2, @loopback}, {0x5, 0x3, 0x2}}, @ipv4={{0x6}, {0x8, 0x2, @empty}, {0x5, 0x3, 0x3}}]}, {0x4c, 0x0, 0x0, 0x1, [@ipv6={{0x6}, {0x14, 0x2, @loopback}, {0x5, 0x3, 0x2}}, @ipv6={{0x6}, {0x14, 0x2, @loopback}, {0x5, 0x3, 0x1}}]}, {0x124, 0x0, 0x0, 0x1, [@ipv4={{0x6}, {0x8, 0x2, @remote}, {0x5, 0x3, 0x1}}, @ipv6={{0x6}, {0x14, 0x2, @rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x01'}, {0x5, 0x3, 0x3}}, @ipv6={{0x6}, {0x14, 0x2, @loopback}, {0x5, 0x3, 0x2}}, @ipv6={{0x6}, {0x14, 0x2, @mcast1}, {0x5, 0x3, 0x1}}, @ipv6={{0x6}, {0x14, 0x2, @private0={0xfc, 0x0, '\x00', 0x1}}, {0x5, 0x3, 0x2}}, @ipv6={{0x6}, {0x14, 0x2, @mcast1}, {0x5}}, @ipv6={{0x6}, {0x14, 0x2, @local}, {0x5}}, @ipv4={{0x6}, {0x8, 0x2, @broadcast}, {0x5, 0x3, 0x3}}, @ipv4={{0x6}, {0x8, 0x2, @local}, {0x5, 0x3, 0x2}}]}, {0x4}, {0x58, 0x0, 0x0, 0x1, [@ipv4={{0x6}, {0x8, 0x2, @loopback}, {0x5, 0x3, 0x3}}, @ipv6={{0x6}, {0x14, 0x2, @initdev={0xfe, 0x88, '\x00', 0x1, 0x0}}, {0x5, 0x3, 0x2}}, @ipv4={{0x6}, {0x8, 0x2, @broadcast}, {0x5, 0x3, 0x1}}]}, {0x7c, 0x0, 0x0, 0x1, [@ipv6={{0x6}, {0x14, 0x2, @private0={0xfc, 0x0, '\x00', 0x1}}, {0x5, 0x3, 0x3}}, @ipv4={{0x6}, {0x8, 0x2, @broadcast}, {0x5, 0x3, 0x1}}, @ipv4={{0x6}, {0x8, 0x2, @empty}, {0x5, 0x3, 0x1}}, @ipv6={{0x6}, {0x14, 0x2, @mcast2}, {0x5, 0x3, 0x2}}]}, {0x1c, 0x0, 0x0, 0x1, [@ipv4={{0x6}, {0x8, 0x2, @remote}, {0x5, 0x3, 0x1}}]}, {0xe8, 0x0, 0x0, 0x1, [@ipv6={{0x6}, {0x14, 0x2, @empty}, {0x5, 0x3, 0x1}}, @ipv4={{0x6}, {0x8, 0x2, @local}, {0x5, 0x3, 0x2}}, @ipv6={{0x6}, {0x14, 0x2, @private1}, {0x5, 0x3, 0x2}}, @ipv6={{0x6}, {0x14, 0x2, @local}, {0x5}}, @ipv6={{0x6}, {0x14, 0x2, @dev={0xfe, 0x80, '\x00', 0x10}}, {0x5}}, @ipv6={{0x6}, {0x14, 0x2, @remote}, {0x5}}, @ipv4={{0x6}, {0x8, 0x2, @remote}, {0x5, 0x3, 0x2}}]}]}, @WGPEER_A_ENDPOINT6={0x20, 0x4, {0xa, 0x4e21, 0x6e, @mcast2, 0xbd3}}]}]}, @WGDEVICE_A_LISTEN_PORT={0x6, 0x6, 0x4e21}, @WGDEVICE_A_PRIVATE_KEY={0x24}, @WGDEVICE_A_FLAGS={0x8, 0x5, 0x1}]}, 0xb64}, 0x1, 0x0, 0x0, 0x80}, 0x2c801) syz_genetlink_get_family_id$team(&(0x7f00000000c0), r0) 5m53.12191654s ago: executing program 32 (id=7577): r0 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r0, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000180)={&(0x7f00000008c0)={0x14, 0x26, 0x9, 0x7fffd, 0x80, {0x6}}, 0x14}, 0x1, 0x0, 0x0, 0x400c801}, 0x4000000) sendmsg$WG_CMD_GET_DEVICE(r0, &(0x7f0000000080)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x8000}, 0xc, &(0x7f0000000040)={&(0x7f0000000900)={0xb64, 0x0, 0x400, 0x70bd2b, 0x25dfdbfc, {}, [@WGDEVICE_A_PEERS={0xb1c, 0x8, 0x0, 0x1, [{0x48, 0x0, 0x0, 0x1, [@WGPEER_A_PUBLIC_KEY={0x24, 0x1, @c_g}, @WGPEER_A_ENDPOINT6={0x20, 0x4, {0xa, 0x4e22, 0x3, @local, 0xc}}]}, {0xb0, 0x0, 0x0, 0x1, [@WGPEER_A_FLAGS={0x8, 0x3, 0x1}, @WGPEER_A_ENDPOINT4={0x14, 0x4, {0x2, 0x4e23, @loopback}}, @WGPEER_A_FLAGS={0x8, 0x3, 0x6}, @WGPEER_A_PUBLIC_KEY={0x24}, @WGPEER_A_PUBLIC_KEY={0x24}, @WGPEER_A_PERSISTENT_KEEPALIVE_INTERVAL={0x6, 0x5, 0x4000}, @WGPEER_A_ENDPOINT4={0x14, 0x4, {0x2, 0x4e21, @initdev={0xac, 0x1e, 0x0, 0x0}}}, @WGPEER_A_PRESHARED_KEY={0x24, 0x2, "22c5fb3357687cab7c14b71f24fcdc38bba60c7242a1a9629d27cbf270434122"}]}, {0x8c, 0x0, 0x0, 0x1, [@WGPEER_A_ENDPOINT4={0x14, 0x4, {0x2, 0x4e24, @dev={0xac, 0x14, 0x14, 0x34}}}, @WGPEER_A_PUBLIC_KEY={0x24, 0x1, @a_g}, @WGPEER_A_PRESHARED_KEY={0x24, 0x2, "186e6ad623b64ecce50a46533b9f6c3669657244eeecfd294a8c57e5461222f8"}, @WGPEER_A_FLAGS={0x8, 0x3, 0x2}, @WGPEER_A_PRESHARED_KEY={0x24, 0x2, "bc4e883f15d7845e08a3848146a42afd6bc78f5e54a2d0b0ddcb1ba39f862c06"}]}, {0x438, 0x0, 0x0, 0x1, [@WGPEER_A_ALLOWEDIPS={0x410, 0x9, 0x0, 0x1, [{0xc4, 0x0, 0x0, 0x1, [@ipv6={{0x6}, {0x14, 0x2, @remote}, {0x5, 0x3, 0x1}}, @ipv4={{0x6}, {0x8, 0x2, @dev={0xac, 0x14, 0x14, 0x44}}, {0x5, 0x3, 0x2}}, @ipv4={{0x6}, {0x8, 0x2, @multicast1}, {0x5, 0x3, 0x1}}, @ipv6={{0x6}, {0x14, 0x2, @private1}, {0x5}}, @ipv6={{0x6}, {0x14, 0x2, @mcast1}, {0x5}}, @ipv6={{0x6}, {0x14, 0x2, @private2={0xfc, 0x2, '\x00', 0x1}}, {0x5, 0x3, 0x1}}]}, {0x124, 0x0, 0x0, 0x1, [@ipv4={{0x6}, {0x8, 0x2, @multicast1}, {0x5, 0x3, 0x3}}, @ipv6={{0x6}, {0x14, 0x2, @remote}, {0x5, 0x3, 0x3}}, @ipv6={{0x6}, {0x14, 0x2, @remote}, {0x5, 0x3, 0x2}}, @ipv6={{0x6}, {0x14, 0x2, @ipv4={'\x00', '\xff\xff', @empty}}, {0x5, 0x3, 0x2}}, @ipv6={{0x6}, {0x14, 0x2, @ipv4={'\x00', '\xff\xff', @rand_addr=0x64010102}}, {0x5, 0x3, 0x1}}, @ipv6={{0x6}, {0x14, 0x2, @mcast1}, {0x5, 0x3, 0x2}}, @ipv4={{0x6}, {0x8, 0x2, @local}, {0x5, 0x3, 0x1}}, @ipv4={{0x6}, {0x8, 0x2, @multicast2}, {0x5, 0x3, 0x3}}, @ipv6={{0x6}, {0x14, 0x2, @dev={0xfe, 0x80, '\x00', 0x20}}, {0x5, 0x3, 0x2}}]}, {0x40, 0x0, 0x0, 0x1, [@ipv4={{0x6}, {0x8, 0x2, @multicast2}, {0x5}}, @ipv6={{0x6}, {0x14, 0x2, @private0={0xfc, 0x0, '\x00', 0x1}}, {0x5}}]}, {0x40, 0x0, 0x0, 0x1, [@ipv4={{0x6}, {0x8, 0x2, @dev={0xac, 0x14, 0x14, 0x24}}, {0x5, 0x3, 0x3}}, @ipv6={{0x6}, {0x14, 0x2, @remote}, {0x5, 0x3, 0x1}}]}, {0x94, 0x0, 0x0, 0x1, [@ipv6={{0x6}, {0x14, 0x2, @empty}, {0x5}}, @ipv4={{0x6}, {0x8, 0x2, @private=0xa010102}, {0x5, 0x3, 0x1}}, @ipv4={{0x6}, {0x8, 0x2, @rand_addr=0x64010101}, {0x5, 0x3, 0x2}}, @ipv4={{0x6}, {0x8, 0x2, @loopback}, {0x5, 0x3, 0x2}}, @ipv6={{0x6}, {0x14, 0x2, @local}, {0x5, 0x3, 0x2}}]}, {0x28, 0x0, 0x0, 0x1, [@ipv6={{0x6}, {0x14, 0x2, @private1={0xfc, 0x1, '\x00', 0x1}}, {0x5, 0x3, 0x3}}]}, {0xe8, 0x0, 0x0, 0x1, [@ipv4={{0x6}, {0x8, 0x2, @empty}, {0x5, 0x3, 0x3}}, @ipv6={{0x6}, {0x14, 0x2, @private2={0xfc, 0x2, '\x00', 0x1}}, {0x5, 0x3, 0x1}}, @ipv4={{0x6}, {0x8, 0x2, @loopback}, {0x5}}, @ipv6={{0x6}, {0x14, 0x2, @ipv4={'\x00', '\xff\xff', @rand_addr=0x64010100}}, {0x5, 0x3, 0x2}}, @ipv6={{0x6}, {0x14, 0x2, @local}, {0x5, 0x3, 0x3}}, @ipv6={{0x6}, {0x14, 0x2, @remote}, {0x5}}, @ipv6={{0x6}, {0x14, 0x2, @mcast2}, {0x5, 0x3, 0x1}}]}]}, @WGPEER_A_PUBLIC_KEY={0x24, 0x1, @b_g}]}, {0x54, 0x0, 0x0, 0x1, [@WGPEER_A_PERSISTENT_KEEPALIVE_INTERVAL={0x6, 0x5, 0x1}, @WGPEER_A_PRESHARED_KEY={0x24, 0x2, "84975b697c67dc51f40f9dde39f8946e0d522a6157b94e32f931bd7d98af124a"}, @WGPEER_A_PRESHARED_KEY={0x24, 0x2, "57a7216390804160f0e6d64606d2cd77900424485432feeb2ecf7af070d8614e"}]}, {0x508, 0x0, 0x0, 0x1, [@WGPEER_A_ENDPOINT6={0x20, 0x4, {0xa, 0x4e22, 0xa, @remote, 0x3bf6}}, @WGPEER_A_ALLOWEDIPS={0x4c4, 0x9, 0x0, 0x1, [{0x28, 0x0, 0x0, 0x1, [@ipv6={{0x6}, {0x14, 0x2, @rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x01'}, {0x5}}]}, {0x34, 0x0, 0x0, 0x1, [@ipv4={{0x6}, {0x8, 0x2, @broadcast}, {0x5, 0x3, 0x1}}, @ipv4={{0x6}, {0x8, 0x2, @multicast2}, {0x5, 0x3, 0x1}}]}, {0x118, 0x0, 0x0, 0x1, [@ipv6={{0x6}, {0x14, 0x2, @local}, {0x5, 0x3, 0x3}}, @ipv6={{0x6}, {0x14, 0x2, @rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x01'}, {0x5}}, @ipv6={{0x6}, {0x14, 0x2, @mcast2}, {0x5, 0x3, 0x2}}, @ipv6={{0x6}, {0x14, 0x2, @remote}, {0x5, 0x3, 0x1}}, @ipv4={{0x6}, {0x8, 0x2, @dev={0xac, 0x14, 0x14, 0x27}}, {0x5, 0x3, 0x2}}, @ipv4={{0x6}, {0x8, 0x2, @private=0xa010100}, {0x5, 0x3, 0x3}}, @ipv6={{0x6}, {0x14, 0x2, @remote}, {0x5, 0x3, 0x3}}, @ipv4={{0x6}, {0x8, 0x2, @loopback}, {0x5, 0x3, 0x2}}, @ipv4={{0x6}, {0x8, 0x2, @empty}, {0x5, 0x3, 0x3}}]}, {0x4c, 0x0, 0x0, 0x1, [@ipv6={{0x6}, {0x14, 0x2, @loopback}, {0x5, 0x3, 0x2}}, @ipv6={{0x6}, {0x14, 0x2, @loopback}, {0x5, 0x3, 0x1}}]}, {0x124, 0x0, 0x0, 0x1, [@ipv4={{0x6}, {0x8, 0x2, @remote}, {0x5, 0x3, 0x1}}, @ipv6={{0x6}, {0x14, 0x2, @rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x01'}, {0x5, 0x3, 0x3}}, @ipv6={{0x6}, {0x14, 0x2, @loopback}, {0x5, 0x3, 0x2}}, @ipv6={{0x6}, {0x14, 0x2, @mcast1}, {0x5, 0x3, 0x1}}, @ipv6={{0x6}, {0x14, 0x2, @private0={0xfc, 0x0, '\x00', 0x1}}, {0x5, 0x3, 0x2}}, @ipv6={{0x6}, {0x14, 0x2, @mcast1}, {0x5}}, @ipv6={{0x6}, {0x14, 0x2, @local}, {0x5}}, @ipv4={{0x6}, {0x8, 0x2, @broadcast}, {0x5, 0x3, 0x3}}, @ipv4={{0x6}, {0x8, 0x2, @local}, {0x5, 0x3, 0x2}}]}, {0x4}, {0x58, 0x0, 0x0, 0x1, [@ipv4={{0x6}, {0x8, 0x2, @loopback}, {0x5, 0x3, 0x3}}, @ipv6={{0x6}, {0x14, 0x2, @initdev={0xfe, 0x88, '\x00', 0x1, 0x0}}, {0x5, 0x3, 0x2}}, @ipv4={{0x6}, {0x8, 0x2, @broadcast}, {0x5, 0x3, 0x1}}]}, {0x7c, 0x0, 0x0, 0x1, [@ipv6={{0x6}, {0x14, 0x2, @private0={0xfc, 0x0, '\x00', 0x1}}, {0x5, 0x3, 0x3}}, @ipv4={{0x6}, {0x8, 0x2, @broadcast}, {0x5, 0x3, 0x1}}, @ipv4={{0x6}, {0x8, 0x2, @empty}, {0x5, 0x3, 0x1}}, @ipv6={{0x6}, {0x14, 0x2, @mcast2}, {0x5, 0x3, 0x2}}]}, {0x1c, 0x0, 0x0, 0x1, [@ipv4={{0x6}, {0x8, 0x2, @remote}, {0x5, 0x3, 0x1}}]}, {0xe8, 0x0, 0x0, 0x1, [@ipv6={{0x6}, {0x14, 0x2, @empty}, {0x5, 0x3, 0x1}}, @ipv4={{0x6}, {0x8, 0x2, @local}, {0x5, 0x3, 0x2}}, @ipv6={{0x6}, {0x14, 0x2, @private1}, {0x5, 0x3, 0x2}}, @ipv6={{0x6}, {0x14, 0x2, @local}, {0x5}}, @ipv6={{0x6}, {0x14, 0x2, @dev={0xfe, 0x80, '\x00', 0x10}}, {0x5}}, @ipv6={{0x6}, {0x14, 0x2, @remote}, {0x5}}, @ipv4={{0x6}, {0x8, 0x2, @remote}, {0x5, 0x3, 0x2}}]}]}, @WGPEER_A_ENDPOINT6={0x20, 0x4, {0xa, 0x4e21, 0x6e, @mcast2, 0xbd3}}]}]}, @WGDEVICE_A_LISTEN_PORT={0x6, 0x6, 0x4e21}, @WGDEVICE_A_PRIVATE_KEY={0x24}, @WGDEVICE_A_FLAGS={0x8, 0x5, 0x1}]}, 0xb64}, 0x1, 0x0, 0x0, 0x80}, 0x2c801) syz_genetlink_get_family_id$team(&(0x7f00000000c0), r0) 2m43.291459111s ago: executing program 0 (id=9861): r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = socket$inet_tcp(0x2, 0x1, 0x0) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000180)={'ip6_vti0\x00', 0x0}) sendmsg$nl_route(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000200)=@dellink={0x20, 0x11, 0x101, 0x0, 0x0, {0x0, 0x0, 0x0, r2}}, 0x20}}, 0x0) r3 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_CREATE(r3, &(0x7f0000000100)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000340)=ANY=[@ANYBLOB="2c0000000b06050000000000000020000000000005000100070000000900020073797a3100000000040007"], 0x2c}}, 0x0) 2m43.122921696s ago: executing program 0 (id=9865): r0 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000094c0)=ANY=[@ANYBLOB="8c45000043000701feff416ec366166e0314000004004580744501"], 0x458c}, 0x1, 0x0, 0x0, 0xc004}, 0xc000) r1 = socket$nl_route(0x10, 0x3, 0x0) mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000)='./cgroup.cpu/syz1\x00', 0x1ff) r2 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000), 0x200002, 0x0) r3 = openat$cgroup_procs(r2, &(0x7f0000000180)='cgroup.threads\x00', 0x2, 0x0) write$cgroup_pid(r3, &(0x7f00000000c0), 0x12) (async) pread64(r3, &(0x7f0000001840)=""/4096, 0x1003, 0x1) (async) r4 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r4, &(0x7f00000004c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000100)=@flushpolicy={0x1c, 0x1d, 0x1, 0x0, 0x0, "", [@policy_type={0xa, 0x10, {0x2}}]}, 0x1c}}, 0x0) (async) sendmsg$nl_route(r1, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000040)=@newlink={0x40, 0x10, 0x401, 0x0, 0x0, {}, [@IFLA_LINKINFO={0x20, 0x12, 0x0, 0x1, @bridge={{0xb}, {0x10, 0x2, 0x0, 0x1, [@IFLA_BR_MULTI_BOOLOPT={0xc, 0x2e, {0x3, 0x3}}]}}}]}, 0x40}}, 0x0) 2m42.735860632s ago: executing program 0 (id=9871): r0 = socket$packet(0x11, 0x3, 0x300) socketpair(0x1, 0x1, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) r2 = bpf$MAP_CREATE(0x0, &(0x7f0000001040)=ANY=[@ANYBLOB="12000000020000000400000002"], 0x48) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000180)={{r2}, &(0x7f0000000040), &(0x7f0000000140)=r1}, 0x20) r3 = socket$alg(0x26, 0x5, 0x0) bind$alg(r3, &(0x7f0000000080)={0x26, 'skcipher\x00', 0x0, 0x0, 'cts(cbc(aes))\x00'}, 0x58) setsockopt$ALG_SET_KEY(r3, 0x117, 0x1, &(0x7f0000c18000)="ad56b6c5910fae9d6dcd3292ea54c7b6ef915d564c90c200", 0x18) r4 = accept4(r3, 0x0, 0x0, 0x0) sendmsg$alg(r4, &(0x7f00000004c0)={0x0, 0x0, 0x0, 0x0, &(0x7f0000000040)=[@op={0x18, 0x117, 0x3, 0x1}], 0x18}, 0x0) syz_genetlink_get_family_id$nl80211(&(0x7f0000000200), r4) sendmsg$rds(0xffffffffffffffff, &(0x7f0000001600)={&(0x7f0000000040)={0x2, 0x4e25, @rand_addr=0x64010102}, 0x10, 0x0}, 0x0) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000600)={{r2}, &(0x7f0000000580)=0x2, &(0x7f00000005c0)=r1}, 0x20) bpf$MAP_DELETE_ELEM(0x4, &(0x7f0000000080)={r2, &(0x7f0000000040)}, 0x20) setsockopt$packet_fanout(r0, 0x107, 0x12, &(0x7f0000000000)={0x0, 0x6}, 0x4) setsockopt$packet_fanout_data(r0, 0x107, 0x16, &(0x7f0000000100)={0x2, &(0x7f0000000080)=[{0x24}, {0x6}]}, 0x10) socket$packet(0x11, 0x3, 0x300) (async) socketpair(0x1, 0x1, 0x0, &(0x7f0000000000)) (async) bpf$MAP_CREATE(0x0, &(0x7f0000001040)=ANY=[@ANYBLOB="12000000020000000400000002"], 0x48) (async) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000180)={{r2}, &(0x7f0000000040), &(0x7f0000000140)=r1}, 0x20) (async) socket$alg(0x26, 0x5, 0x0) (async) bind$alg(r3, &(0x7f0000000080)={0x26, 'skcipher\x00', 0x0, 0x0, 'cts(cbc(aes))\x00'}, 0x58) (async) setsockopt$ALG_SET_KEY(r3, 0x117, 0x1, &(0x7f0000c18000)="ad56b6c5910fae9d6dcd3292ea54c7b6ef915d564c90c200", 0x18) (async) accept4(r3, 0x0, 0x0, 0x0) (async) sendmsg$alg(r4, &(0x7f00000004c0)={0x0, 0x0, 0x0, 0x0, &(0x7f0000000040)=[@op={0x18, 0x117, 0x3, 0x1}], 0x18}, 0x0) (async) syz_genetlink_get_family_id$nl80211(&(0x7f0000000200), r4) (async) sendmsg$rds(0xffffffffffffffff, &(0x7f0000001600)={&(0x7f0000000040)={0x2, 0x4e25, @rand_addr=0x64010102}, 0x10, 0x0}, 0x0) (async) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000600)={{r2}, &(0x7f0000000580)=0x2, &(0x7f00000005c0)=r1}, 0x20) (async) bpf$MAP_DELETE_ELEM(0x4, &(0x7f0000000080)={r2, &(0x7f0000000040)}, 0x20) (async) setsockopt$packet_fanout(r0, 0x107, 0x12, &(0x7f0000000000)={0x0, 0x6}, 0x4) (async) setsockopt$packet_fanout_data(r0, 0x107, 0x16, &(0x7f0000000100)={0x2, &(0x7f0000000080)=[{0x24}, {0x6}]}, 0x10) (async) 2m42.603534506s ago: executing program 0 (id=9877): bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000400)={0x11, 0x10, &(0x7f0000000000)=ANY=[], &(0x7f0000000300)='GPL\x00', 0x8, 0x1010, &(0x7f0000002500)=""/4112, 0x0, 0x1, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0xfffffffe}, 0x94) (async) r0 = socket$inet6_sctp(0xa, 0x1, 0x84) sendto$inet6(r0, &(0x7f0000847fff)='X', 0x1, 0x0, &(0x7f000005ffe4)={0xa, 0x0, 0x0, @loopback={0xfec0ffffffffffff, 0x1c9ae7fffe9a6f34}}, 0x1c) (async) setsockopt$inet_sctp6_SCTP_EVENTS(r0, 0x84, 0xb, &(0x7f0000000040)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x88, 0x1, 0x0, 0x3}, 0xe) (async) shutdown(r0, 0x1) (async) recvmmsg(r0, &(0x7f0000000840)=[{{0x0, 0x41, 0x0}}], 0x414, 0x406, 0x0) (async) poll(&(0x7f0000000340)=[{r0, 0x480}], 0x1, 0x33a0) 2m41.65164738s ago: executing program 0 (id=9893): r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) (async) r1 = syz_genetlink_get_family_id$nfc(&(0x7f0000000040), 0xffffffffffffffff) sendmsg$NFC_CMD_START_POLL(r0, &(0x7f0000000100)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x1}, 0xc, &(0x7f00000000c0)={&(0x7f0000000080)={0x24, r1, 0x300, 0x70bd25, 0x25dfdbfe, {}, [@NFC_ATTR_PROTOCOLS={0x8, 0x3, 0x84}, @NFC_ATTR_PROTOCOLS={0x8, 0x3, 0xae}]}, 0x24}, 0x1, 0x0, 0x0, 0x4000800}, 0x0) sendmsg$NBD_CMD_CONNECT(r0, &(0x7f0000000200)={&(0x7f0000000140)={0x10, 0x0, 0x0, 0x40000}, 0xc, &(0x7f00000001c0)={&(0x7f0000000180)={0x38, 0x0, 0x200, 0x70bd27, 0x25dfdbfd, {}, [@NBD_ATTR_CLIENT_FLAGS={0xc}, @NBD_ATTR_CLIENT_FLAGS={0xc, 0x6, 0x1}, @NBD_ATTR_TIMEOUT={0xc, 0x4, 0xc}]}, 0x38}, 0x1, 0x0, 0x0, 0x4008040}, 0x10042090) sendmsg$NFC_CMD_DISABLE_SE(r0, &(0x7f0000000300)={&(0x7f0000000240)={0x10, 0x0, 0x0, 0x8}, 0xc, &(0x7f00000002c0)={&(0x7f0000000280)={0x24, r1, 0x400, 0x70bd2a, 0x25dfdbfb, {}, [@NFC_ATTR_SE_INDEX={0x8, 0x15, 0x2}, @NFC_ATTR_SE_INDEX={0x8, 0x15, 0x1}]}, 0x24}, 0x1, 0x0, 0x0, 0xc040}, 0x40000) (async) r2 = socket$nl_generic(0x10, 0x3, 0x10) (async) r3 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000380), 0xffffffffffffffff) sendmsg$NL80211_CMD_CONNECT(r2, &(0x7f0000000440)={&(0x7f0000000340)={0x10, 0x0, 0x0, 0x2000000}, 0xc, &(0x7f0000000400)={&(0x7f00000003c0)={0x28, r3, 0x20, 0x70bd2c, 0x25dfdbff, {{}, {@void, @val={0xc, 0x99, {0x0, 0x3c}}}}, [@NL80211_ATTR_WIPHY_EDMG_CHANNELS={0x5, 0x118, 0x9}]}, 0x28}, 0x1, 0x0, 0x0, 0x4040}, 0x80000) (async) r4 = syz_genetlink_get_family_id$fou(&(0x7f00000004c0), r2) ioctl$ifreq_SIOCGIFINDEX_team(r2, 0x8933, &(0x7f0000000500)={'team0\x00', 0x0}) sendmsg$FOU_CMD_DEL(r2, &(0x7f0000000600)={&(0x7f0000000480)={0x10, 0x0, 0x0, 0x1}, 0xc, &(0x7f00000005c0)={&(0x7f0000000540)={0x5c, r4, 0x100, 0x70bd27, 0x25dfdbff, {}, [@FOU_ATTR_IPPROTO={0x5, 0x3, 0x81}, @FOU_ATTR_LOCAL_V6={0x14, 0x7, @mcast2}, @FOU_ATTR_AF={0x5, 0x2, 0x2}, @FOU_ATTR_PEER_V6={0x14, 0x9, @ipv4={'\x00', '\xff\xff', @remote}}, @FOU_ATTR_PEER_PORT={0x6, 0xa, 0x4e23}, @FOU_ATTR_IFINDEX={0x8, 0xb, r5}]}, 0x5c}, 0x1, 0x0, 0x0, 0x2400c804}, 0x4040840) r6 = syz_genetlink_get_family_id$nl802154(&(0x7f0000000680), r0) (async) ioctl$sock_SIOCGIFINDEX_802154(r0, 0x8933, &(0x7f00000006c0)={'wpan1\x00', 0x0}) ioctl$sock_SIOCGIFINDEX_802154(r0, 0x8933, &(0x7f0000000700)={'wpan1\x00', 0x0}) sendmsg$NL802154_CMD_SET_SHORT_ADDR(r0, &(0x7f00000007c0)={&(0x7f0000000640)={0x10, 0x0, 0x0, 0x8}, 0xc, &(0x7f0000000780)={&(0x7f0000000740)={0x24, r6, 0x8, 0x70bd2a, 0x25dfdbff, {}, [@NL802154_ATTR_IFINDEX={0x8, 0x3, r7}, @NL802154_ATTR_IFINDEX={0x8, 0x3, r8}]}, 0x24}, 0x1, 0x0, 0x0, 0x24040881}, 0x40014) (async) sendmsg$NL802154_CMD_NEW_SEC_LEVEL(r0, &(0x7f00000008c0)={&(0x7f0000000800)={0x10, 0x0, 0x0, 0x400}, 0xc, &(0x7f0000000880)={&(0x7f0000000840)={0x20, r6, 0x1, 0x70bd2b, 0x25dfdbfb, {}, [@NL802154_ATTR_WPAN_DEV={0xc, 0x6, 0x100000001}]}, 0x20}, 0x1, 0x0, 0x0, 0x4000000}, 0x4000) (async) ioctl$XFS_IOC_ATTRMULTI_BY_HANDLE(r2, 0x4048587b, &(0x7f0000000b00)={{r2, &(0x7f0000000900)='fou\x00', 0x200800, &(0x7f0000000940)={@_ha_fsid={[0x2, 0x375]}, {0x2, 0x40, 0x81, 0x793e}}, 0x16e0, &(0x7f0000000980)={@_ha_fsid}, &(0x7f00000009c0)=0x8}, 0x1, &(0x7f0000000ac0)=[{0x3, 0x5f16, &(0x7f0000000a00)='&.[\x00', &(0x7f0000000a40)="520b601f919ad448c5630e5afe338087e3990a308c195af937ad8219a03e06e6fd6a96527739395ef26cd9424908c1d0efebb98a4ba4b8f32d7bd93c216e53d75eaa57e31ae94927c8", 0x49, 0x10}]}) (async) r10 = syz_genetlink_get_family_id$team(&(0x7f0000000bc0), r2) (async) ioctl$ifreq_SIOCGIFINDEX_team(r2, 0x8933, &(0x7f0000000c00)={'team0\x00', 0x0}) (async) bpf$BPF_GET_MAP_INFO(0xf, &(0x7f0000000cc0)={0x1, 0x58, &(0x7f0000000c40)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, ""/16, 0x0}}, 0x10) (async) ioctl$sock_ipv6_tunnel_SIOCDELTUNNEL(0xffffffffffffffff, 0x89f2, &(0x7f0000000d80)={'ip6tnl0\x00', &(0x7f0000000d00)={'ip6tnl0\x00', r5, 0x2b, 0xfe, 0x9, 0xc2d9, 0x18, @initdev={0xfe, 0x88, '\x00', 0x1, 0x0}, @ipv4={'\x00', '\xff\xff', @broadcast}, 0x8, 0x8000, 0x5, 0xffff489c}}) sendmsg$TEAM_CMD_OPTIONS_SET(r9, &(0x7f0000001500)={&(0x7f0000000b80)={0x10, 0x0, 0x0, 0x100}, 0xc, &(0x7f00000014c0)={&(0x7f0000000dc0)={0x6c4, r10, 0x200, 0x70bd26, 0x25dfdbfc, {}, [{{0x8, 0x1, r11}, {0x3c, 0x2, 0x0, 0x1, [{0x38, 0x1, @lb_stats_refresh_interval={{0x24}, {0x5}, {0x8}}}]}}, {{0x8, 0x1, r5}, {0x88, 0x2, 0x0, 0x1, [{0x44, 0x1, @bpf_hash_func={{0x24}, {0x5}, {0x14, 0x4, [{0x1, 0x4, 0x0, 0xfffffffc}, {0x3, 0xd2, 0x3, 0x5}]}}}, {0x40, 0x1, @lb_port_stats={{{0x24}, {0x5}, {0x8, 0x4, 0x3}}, {0x8, 0x6, r5}}}]}}, {{0x8, 0x1, r5}, {0xf4, 0x2, 0x0, 0x1, [{0x40, 0x1, @priority={{{0x24}, {0x5}, {0x8, 0x4, 0x8}}, {0x8, 0x6, r12}}}, {0x38, 0x1, @mcast_rejoin_count={{0x24}, {0x5}, {0x8, 0x4, 0x6}}}, {0x40, 0x1, @lb_hash_stats={{{0x24}, {0x5}, {0x8, 0x4, 0x72c}}, {0x8}}}, {0x38, 0x1, @lb_stats_refresh_interval={{0x24}, {0x5}, {0x8, 0x4, 0x8}}}]}}, {{0x8, 0x1, r5}, {0x164, 0x2, 0x0, 0x1, [{0x3c, 0x1, @user_linkup={{{0x24}, {0x5}, {0x4}}, {0x8, 0x6, r5}}}, {0x38, 0x1, @notify_peers_interval={{0x24}, {0x5}, {0x8, 0x4, 0x9}}}, {0x3c, 0x1, @enabled={{{0x24}, {0x5}, {0x4}}, {0x8, 0x6, r5}}}, {0x38, 0x1, @mcast_rejoin_count={{0x24}, {0x5}, {0x8, 0x4, 0x81}}}, {0x40, 0x1, @lb_port_stats={{{0x24}, {0x5}, {0x8, 0x4, 0xc}}, {0x8, 0x6, r5}}}, {0x38, 0x1, @activeport={{0x24}, {0x5}, {0x8, 0x4, r5}}}]}}, {{0x8, 0x1, r5}, {0x1c4, 0x2, 0x0, 0x1, [{0x38, 0x1, @notify_peers_interval={{0x24}, {0x5}, {0x8, 0x4, 0x7fff}}}, {0x3c, 0x1, @enabled={{{0x24}, {0x5}, {0x4}}, {0x8, 0x6, r5}}}, {0x40, 0x1, @queue_id={{{0x24}, {0x5}, {0x8, 0x4, 0x3}}, {0x8, 0x6, r5}}}, {0x4c, 0x1, @lb_tx_method={{0x24}, {0x5}, {0x19, 0x4, 'hash_to_port_mapping\x00'}}}, {0x40, 0x1, @priority={{{0x24}, {0x5}, {0x8, 0x4, 0x5}}, {0x8, 0x6, r13}}}, {0x40, 0x1, @priority={{{0x24}, {0x5}, {0x8}}, {0x8, 0x6, r5}}}, {0x40, 0x1, @priority={{{0x24}, {0x5}, {0x8, 0x4, 0x7}}, {0x8, 0x6, r5}}}]}}, {{0x8, 0x1, r5}, {0x1a0, 0x2, 0x0, 0x1, [{0x38, 0x1, @activeport={{0x24}, {0x5}, {0x8, 0x4, r5}}}, {0x38, 0x1, @mcast_rejoin_interval={{0x24}, {0x5}, {0x8, 0x4, 0x7fffffff}}}, {0x3c, 0x1, @lb_tx_method={{0x24}, {0x5}, {0x9, 0x4, 'hash\x00'}}}, {0x38, 0x1, @notify_peers_count={{0x24}, {0x5}, {0x8, 0x4, 0x3}}}, {0x44, 0x1, @bpf_hash_func={{0x24}, {0x5}, {0x14, 0x4, [{0x1, 0x0, 0xf, 0x2c13}, {0x9, 0x5, 0x0, 0x7f}]}}}, {0x38, 0x1, @lb_stats_refresh_interval={{0x24}, {0x5}, {0x8, 0x4, 0x2}}}, {0x3c, 0x1, @name={{0x24}, {0x5}, {0xb, 0x4, 'random\x00'}}}]}}]}, 0x6c4}, 0x1, 0x0, 0x0, 0x4084}, 0x805) (async) r14 = syz_genetlink_get_family_id$ieee802154(&(0x7f0000001580), r0) sendmsg$IEEE802154_LLSEC_ADD_DEV(r0, &(0x7f0000001680)={&(0x7f0000001540)={0x10, 0x0, 0x0, 0x20}, 0xc, &(0x7f0000001640)={&(0x7f00000015c0)={0x44, r14, 0x8, 0x70bd2c, 0x25dfdbfb, {}, [@IEEE802154_ATTR_LLSEC_DEV_OVERRIDE={0x5}, @IEEE802154_ATTR_LLSEC_DEV_OVERRIDE={0x5}, @IEEE802154_ATTR_LLSEC_DEV_KEY_MODE={0x5}, @IEEE802154_ATTR_LLSEC_FRAME_COUNTER={0x8, 0x2f, 0x7e}, @IEEE802154_ATTR_PAN_ID={0x6, 0x6, 0xffff}, @IEEE802154_ATTR_LLSEC_DEV_KEY_MODE={0x5}]}, 0x44}, 0x1, 0x0, 0x0, 0x24008004}, 0x4004041) (async) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000001740)={{r9, 0xffffffffffffffff}, &(0x7f00000016c0), &(0x7f0000001700)=r9}, 0x20) close(r15) (async) socket$netlink(0x10, 0x3, 0xf) (async) sendmsg$IEEE802154_LLSEC_LIST_SECLEVEL(r0, &(0x7f0000001840)={&(0x7f0000001780)={0x10, 0x0, 0x0, 0x2000000}, 0xc, &(0x7f0000001800)={&(0x7f00000017c0)={0x14, r14, 0x1, 0x70bd29, 0x25dfdbfd, {}, ["", "", "", "", ""]}, 0x14}, 0x1, 0x0, 0x0, 0x20004004}, 0x0) (async) recvmsg(r2, &(0x7f0000001ac0)={0x0, 0x0, &(0x7f00000019c0)=[{&(0x7f0000001880)=""/134, 0x86}, {&(0x7f0000001940)=""/106, 0x6a}], 0x2, &(0x7f0000001a00)=""/140, 0x8c}, 0x23) socket$nl_generic(0x10, 0x3, 0x10) 2m41.316000067s ago: executing program 0 (id=9898): r0 = socket$inet6(0xa, 0x80002, 0x88) r1 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r1, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000080)=ANY=[@ANYBLOB="1800000026000100fdff0700001000000400000004000180"], 0x18}, 0x1, 0x0, 0x0, 0x400c801}, 0x4008090) sendmmsg$inet(r0, &(0x7f0000003b40)=[{{&(0x7f0000000080)={0x2, 0x4e21, @empty}, 0x10, 0x0}}, {{&(0x7f0000001b00)={0x2, 0x4e22, @local}, 0x10, 0x0, 0x35}}, {{0x0, 0x0, 0x0}}], 0x3, 0x40000) 2m26.302259694s ago: executing program 33 (id=9898): r0 = socket$inet6(0xa, 0x80002, 0x88) r1 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r1, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000080)=ANY=[@ANYBLOB="1800000026000100fdff0700001000000400000004000180"], 0x18}, 0x1, 0x0, 0x0, 0x400c801}, 0x4008090) sendmmsg$inet(r0, &(0x7f0000003b40)=[{{&(0x7f0000000080)={0x2, 0x4e21, @empty}, 0x10, 0x0}}, {{&(0x7f0000001b00)={0x2, 0x4e22, @local}, 0x10, 0x0, 0x35}}, {{0x0, 0x0, 0x0}}], 0x3, 0x40000) 1m17.175878876s ago: executing program 3 (id=10702): r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = socket$inet6_sctp(0xa, 0x5, 0x84) shutdown(r1, 0x0) getsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX3(r1, 0x84, 0x6f, &(0x7f0000000000)={0x0, 0x1c, &(0x7f00000000c0)=[@in6={0xa, 0x0, 0x0, @private2}]}, &(0x7f0000000180)=0x10) r3 = socket$inet_sctp(0x2, 0x1, 0x84) getsockopt$inet_sctp_SCTP_MAX_BURST(r3, 0x84, 0xd, &(0x7f0000000000)=@assoc_value={0x0}, &(0x7f0000000040)=0x8) setsockopt$inet_sctp6_SCTP_PEER_ADDR_PARAMS(r1, 0x84, 0x9, &(0x7f00000001c0)={r4, @in={{0x2, 0x0, @empty}}, 0x0, 0x0, 0x0, 0x0, 0xd4}, 0x9c) setsockopt$inet_sctp6_SCTP_PEER_ADDR_THLDS(r1, 0x84, 0x85, &(0x7f0000000000)={r2, @in={{0x2, 0x0, @empty}}, 0x0, 0x7ffe}, 0x90) setsockopt$inet_sctp6_SCTP_PEER_ADDR_PARAMS(r1, 0x84, 0x9, &(0x7f0000000340)={r2, @in6={{0xa, 0x4e23, 0x5, @empty, 0x2800}}, 0x3, 0x0, 0x20000, 0x81, 0xe, 0x0, 0x4}, 0x9c) sendmsg$nl_route(r0, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000580)={&(0x7f0000000740)=@delnexthop={0x40, 0x69, 0x1, 0x70bd2b, 0x25dfdbfd, {}, [{0x8}, {0x8, 0x1, 0x1}, {0x8, 0x1, 0x1}, {0x8, 0x1, 0x2}, {0x8, 0x1, 0x1}]}, 0x40}, 0x1, 0xba01, 0x0, 0x4000080}, 0x0) socket$nl_route(0x10, 0x3, 0x0) (async) socket$inet6_sctp(0xa, 0x5, 0x84) (async) shutdown(r1, 0x0) (async) getsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX3(r1, 0x84, 0x6f, &(0x7f0000000000)={0x0, 0x1c, &(0x7f00000000c0)=[@in6={0xa, 0x0, 0x0, @private2}]}, &(0x7f0000000180)=0x10) (async) socket$inet_sctp(0x2, 0x1, 0x84) (async) getsockopt$inet_sctp_SCTP_MAX_BURST(r3, 0x84, 0xd, &(0x7f0000000000)=@assoc_value, &(0x7f0000000040)=0x8) (async) setsockopt$inet_sctp6_SCTP_PEER_ADDR_PARAMS(r1, 0x84, 0x9, &(0x7f00000001c0)={r4, @in={{0x2, 0x0, @empty}}, 0x0, 0x0, 0x0, 0x0, 0xd4}, 0x9c) (async) setsockopt$inet_sctp6_SCTP_PEER_ADDR_THLDS(r1, 0x84, 0x85, &(0x7f0000000000)={r2, @in={{0x2, 0x0, @empty}}, 0x0, 0x7ffe}, 0x90) (async) setsockopt$inet_sctp6_SCTP_PEER_ADDR_PARAMS(r1, 0x84, 0x9, &(0x7f0000000340)={r2, @in6={{0xa, 0x4e23, 0x5, @empty, 0x2800}}, 0x3, 0x0, 0x20000, 0x81, 0xe, 0x0, 0x4}, 0x9c) (async) sendmsg$nl_route(r0, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000580)={&(0x7f0000000740)=@delnexthop={0x40, 0x69, 0x1, 0x70bd2b, 0x25dfdbfd, {}, [{0x8}, {0x8, 0x1, 0x1}, {0x8, 0x1, 0x1}, {0x8, 0x1, 0x2}, {0x8, 0x1, 0x1}]}, 0x40}, 0x1, 0xba01, 0x0, 0x4000080}, 0x0) (async) 1m17.1175629s ago: executing program 3 (id=10705): r0 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r0, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000800)=ANY=[@ANYBLOB="1815eef69600060027bd7036c2e921"], 0x18}, 0x1, 0x0, 0x0, 0x42804}, 0x84) 1m16.876198421s ago: executing program 3 (id=10707): r0 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000003c0)=ANY=[@ANYBLOB="3c020000190001000000000000000000fc020000000000000000000000000000ac1e000100000000000000000000000000000000000000000a00008088000000", @ANYRES32=0x0, @ANYRES32=0x0, @ANYBLOB="fdffffffffffffffffffffffffffffff00000000000000004fc4000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000100000000000000000020000000000000000000000000000000000000000000000000000000000000084010500ac1414bb000000000000000000000000000000006c0000000a0000007f0000010000000000000000000000000000000000000000000000000000000000000000fe8000000000000000000000000000bb000004d63200000000000000200100000000000000000000000000000000000000000000000000000700000000000000fc020000000000000000000000000001000000003c00000002000000ac141425000000000000000000000000043500000100000000000000000000000000000000000000000000000000000000000000000000003300000002"], 0x23c}}, 0x4004000) r1 = socket$nl_generic(0x10, 0x3, 0x10) r2 = syz_genetlink_get_family_id$devlink(&(0x7f00000000c0), r1) sendmsg$DEVLINK_CMD_PORT_GET(r1, &(0x7f0000000280)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x8000000}, 0xc, &(0x7f0000000240)={&(0x7f0000000140)={0xcc, r2, 0x200, 0x70bd2a, 0x25dfdbff, {}, [{{@pci={{0x8}, {0x11}}, {0x8, 0x3, 0x1}}}, {{@pci={{0x8}, {0x11}}, {0x8, 0x3, 0x2}}}, {{@pci={{0x8}, {0x11}}, {0x8, 0x3, 0x3}}}, {{@nsim={{0xe}, {0xf, 0x2, {'netdevsim', 0x0}}}, {0x8, 0x3, 0x2}}}, {{@pci={{0x8}, {0x11}}, {0x8}}}]}, 0xcc}}, 0x0) r3 = syz_init_net_socket$rose(0xb, 0x5, 0x0) ioctl$sock_rose_SIOCADDRT(r3, 0x891b, 0x0) ioctl$SIOCRSSL2CALL(r3, 0x89e2, &(0x7f0000000100)=@rose={0xbb, 0xbb, 0xbb, 0x1, 0x0}) sendmsg$nl_generic(r1, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000003c0)=ANY=[@ANYBLOB="200000002e00090027db700000000000040000000c00180004ac0f0001ac0f"], 0x20}, 0x1, 0x0, 0x0, 0x42804}, 0x0) 1m14.576202004s ago: executing program 3 (id=10711): mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000)='./cgroup.net/syz0\x00', 0x1ff) r0 = socket$nl_netfilter(0x10, 0x3, 0xc) setsockopt$SO_TIMESTAMPING(r0, 0x1, 0x25, &(0x7f00000000c0)=0x8e92, 0x4) r1 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000), 0x200002, 0x0) r2 = openat$cgroup_ro(r1, &(0x7f0000000280)='blkio.bfq.empty_time\x00', 0x0, 0x0) preadv(r2, &(0x7f00000000c0)=[{&(0x7f0000000340)=""/134, 0x86}], 0x1, 0x4, 0x2) r3 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="06000000040000000800000008"], 0x48) r4 = socket$phonet(0x23, 0x2, 0x1) ioctl$sock_proto_private(r4, 0x89ee, &(0x7f0000007880)="0ecd") pselect6(0x40, &(0x7f00000002c0)={0x6, 0x2, 0x7, 0xa, 0x6, 0x2, 0x1, 0x6}, &(0x7f0000000580)={0x9190, 0x7, 0x8, 0x1, 0x0, 0x0, 0xfffffffffffffff9, 0x2}, &(0x7f00000005c0)={0x2, 0x9, 0x0, 0x1, 0x1, 0x8, 0xffffffffffff4fe2, 0x1}, &(0x7f0000000600)={0x0, 0x3938700}, &(0x7f0000000680)={&(0x7f0000000640)={[0x5]}, 0x8}) bpf$PROG_LOAD(0x5, &(0x7f00000004c0)={0x6, 0xc, &(0x7f0000000000)=@framed={{}, [@ringbuf_output={{0x18, 0x5, 0x1, 0x0, r3}, {}, {}, {}, {0x7, 0x0, 0x0, 0x2, 0x0, 0x0, 0xfffffe00}, {}, {}, {0x85, 0x0, 0x0, 0x55}}]}, &(0x7f0000000300)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x8, '\x00', 0x0, @xdp, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r5 = socket$nl_sock_diag(0x10, 0x3, 0x4) getsockopt$inet_sctp_SCTP_AUTH_ACTIVE_KEY(r2, 0x84, 0x18, &(0x7f00000001c0)={0x0, 0xe1a}, &(0x7f0000000200)=0x8) setsockopt$inet_sctp_SCTP_ADD_STREAMS(r2, 0x84, 0x79, &(0x7f0000000240)={r6, 0xffff, 0x7}, 0x8) sendmsg$SOCK_DIAG_BY_FAMILY(r5, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000003c0)={0x14, 0x14, 0x7a3cc0df0763377f, 0x0, 0x0, {0x10, 0x24}}, 0x14}}, 0x0) bpf$BPF_PROG_WITH_BTFID_LOAD(0x5, &(0x7f0000000400)=@bpf_lsm={0x6, 0x4, &(0x7f0000000000)=@framed={{}, [@ldst={0x1, 0x0, 0x4, 0x0, 0x1}]}, &(0x7f0000000100)='GPL\x00', 0x5, 0x0, 0x0, 0x0, 0x5}, 0x94) bpf$MAP_DELETE_ELEM(0x3, &(0x7f00000000c0)={r3, &(0x7f0000000140)="7fa107369af657f426af0d4bbdd392b026a075a6a4d888dc14f4f4cc3deb066fe9a4f8f806a50f6e988e7895f8c219c1d4a8267a4e5d79907d886f44bf669587fb62a65e00750889ea452a39179773020893aa"}, 0x20) 1m14.379107691s ago: executing program 3 (id=10714): r0 = socket$inet_udplite(0x2, 0x2, 0x88) r1 = socket$pppl2tp(0x18, 0x1, 0x1) ioctl$XFS_IOC_EXCHANGE_RANGE(r0, 0x40285881, &(0x7f0000000000)={r1, 0x0, 0x7284, 0x8, 0x1, 0x8}) r2 = epoll_create1(0x0) ioctl$BTRFS_IOC_BALANCE_CTL(r2, 0x40049421, 0x4) r3 = socket$igmp6(0xa, 0x3, 0x2) getsockopt$IP6T_SO_GET_INFO(r3, 0x29, 0x40, &(0x7f0000000040)={'filter\x00', 0x0, [0x8001, 0x400, 0x3, 0x3, 0x6bdaba42]}, &(0x7f00000000c0)=0x54) ioctl$PPPIOCDISCONN(r0, 0x7439) r4 = socket$qrtr(0x2a, 0x2, 0x0) connect$pppl2tp(r1, &(0x7f0000000100)=@pppol2tpv3={0x18, 0x1, {0x0, r4, {0x2, 0x4e23, @rand_addr=0x64010101}, 0x4, 0x3, 0x4, 0x1}}, 0x2e) r5 = syz_init_net_socket$rose(0xb, 0x5, 0x0) connect$rose(r5, &(0x7f0000000140)=@short={0xb, @dev={0xbb, 0xbb, 0xbb, 0x1, 0x0}, @rose={0xbb, 0xbb, 0xbb, 0x1, 0x0}, 0x1, @bcast}, 0x1c) ioctl$sock_SIOCGIFVLAN_GET_VLAN_REALDEV_NAME_CMD(r4, 0x8982, &(0x7f0000000180)={0x8, 'bond_slave_0\x00', {'veth0_vlan\x00'}, 0xb4c}) epoll_wait(r2, &(0x7f00000001c0)=[{}, {}], 0x2, 0x81) vmsplice(r4, &(0x7f0000000640)=[{&(0x7f0000000200)="f8b3f31f18f145ecc692e0c938e87f734031cfe85c36c8c0c690127d0f34553decf1a7a9280009340e", 0x29}, {&(0x7f0000000240)="de27791390a06fb327c9c5bc0ca044adbd3c85fdbf661fdea7a9", 0x1a}, {&(0x7f0000000280)="79aed5bc41d07a11f24de2defdc6b4333ae52853167edf140421a8adf742c73739ac0d3b06eefcde3f689b2b3b7e5e17f3a344014d266e8018d5ff5c0e62b28fd91ae3d92248d679d7efda4238c80ee153d12f5a0ef8ecd2e30c0327fd6cfcfb056d09d3d8a80f77d3faa48313ad1ae45b2e158fda4af816332fda1745a9b2f67ae02c0598f0", 0x86}, {&(0x7f0000000340)="5ca4bafa3eb2a4a142f1104b9fa28859adb8d640ef63dd12c0058e90210a12686aecbd93f79fe8c33259e98dea0d7940cb66791c8b62d501f2e9df452bdd897f3c1e0515b298eb7c45abb5f8920a0d5afdf5995990ce05129ade2effa75f6281c13cffe13336a88d71ba17d13b791461c6fabf4576124f1e8c3a01ae756c54b70a83437387c6d7183545f78d898c4ad66040a6ff6fd5a955a5e44f32e72c7a84da66bba91539d2114e63ccac9df2050e1844263f6a55d71471ad8b778049d08ba549156b6d83ea14de5140d7a5917880a0efc7ed4bd7f7e2c2", 0xd9}, {&(0x7f0000000440)="89bad553a50fd5cfd7b69788d10f21d4cb2fb2464baee73be5bbfbc0f65e23831b159a45dbc1e1bdc9209f8dddbb00cd243642bef656a346baa0602314589c66", 0x40}, {&(0x7f0000000480)="4b5ae8e6754adbb2d4e7a5b026b9c1f9ac8e8f02b4e3ada8a84a3ea5736e1fe00cd0d60a0743c823733cd466e865e160681db5497d623ee05084430365402b9bc5547bc1b4c125cc1a95b8c45a5a4475b5547fdfc02723b18a06d3ad0ebc542739d678bd263bf82b912bedc2d1d86e1f47d7237588604d58b8e16d2d7700c9bd19bfbc766ec03665bbd2b418a470d41e212d0367c5de24d5762c2d8a45bf2e9275c2400eecfb76f61b", 0xa9}, {&(0x7f0000000540)="10743fb0f0694cf395d2f3fd99ea9b921051b684c5627fed8ea27e11dc0b151269209ebff7fb530717970fef43960d150fd1a96f1be277ea669afcaf9f05f7ac49f19c2d6f4437d0446f59faba71b6de49a49e0d3298398e6b549bf432526e679553a83db54e82e5537145e020deba7d59363194f45112a2afcec708d6bdda19ef6c845310e7e71bb4ba3a42049f416c56738bbbbc0dd8af873007e02242958fa308c984497e2bbbb0179f388d202348e5646caddfa21113d7600fe7e3e3ef61981b3595f29f4f94498910fa1e7b0a32edae61ed5c66dc3827204bca9d639766bf810e24bb0e581506", 0xe9}], 0x7, 0x0) ioctl$XFS_IOC_FSGETXATTRA(r2, 0x801c582d, &(0x7f00000006c0)) ioctl$sock_SIOCINQ(r4, 0x541b, &(0x7f0000000700)) getsockopt$inet_int(r0, 0x0, 0xf993e0700b729feb, &(0x7f0000000740), &(0x7f0000000780)=0x4) r6 = socket$isdn(0x22, 0x3, 0x1) ioctl$sock_SIOCDELDLCI(r6, 0x8981, &(0x7f00000007c0)={'team_slave_0\x00', 0x8}) connect$inet6(r3, &(0x7f0000000800)={0xa, 0x4e20, 0x5896, @mcast2, 0x6}, 0x1c) r7 = bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f0000000840)={0x1b, 0x0, 0x0, 0xad1, 0x0, 0x1, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x2, 0x3, 0x4}, 0x50) ioctl$XFS_IOC_FSGROWFSRT(r7, 0x40105870, &(0x7f00000008c0)={0xffffffff, 0x1}) getpeername$qrtr(r4, &(0x7f0000000900), &(0x7f0000000940)=0xc) r8 = accept$inet6(r3, &(0x7f0000000980), &(0x7f00000009c0)=0x1c) setsockopt$inet6_tcp_int(r8, 0x6, 0x6, &(0x7f0000000a00)=0xa, 0x4) r9 = syz_init_net_socket$bt_l2cap(0x1f, 0x5, 0x0) getsockopt$bt_BT_RCVMTU(r9, 0x112, 0xd, &(0x7f0000000a40)=0xbe, &(0x7f0000000a80)=0x2) setsockopt$TIPC_IMPORTANCE(0xffffffffffffffff, 0x10f, 0x7f, &(0x7f0000000ac0), 0x4) setsockopt$CAN_RAW_LOOPBACK(r5, 0x65, 0x3, &(0x7f0000000b00)=0x1, 0x4) 1m14.093955396s ago: executing program 3 (id=10720): bpf$MAP_CREATE(0x0, &(0x7f0000000200)=ANY=[@ANYBLOB="0100000005000000090000008b00000044"], 0x48) recvmsg$kcm(0xffffffffffffffff, &(0x7f00000005c0)={0x0, 0x0, 0x0, 0x0, &(0x7f0000000580)=""/49, 0x31}, 0x0) r0 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r0, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000180)={&(0x7f00000008c0)={0x14, 0x26, 0x9, 0x80001, 0x80, {0x5}}, 0x14}, 0x1, 0x0, 0x0, 0x400c801}, 0x4000000) r1 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r1, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000180)={&(0x7f00000005c0)=ANY=[@ANYBLOB="3400000044000701feffffff00000000037c0000040042800c00018006000600800a0000100002"], 0x34}, 0x1, 0x0, 0x0, 0x48815}, 0xc000) 58.91994164s ago: executing program 34 (id=10720): bpf$MAP_CREATE(0x0, &(0x7f0000000200)=ANY=[@ANYBLOB="0100000005000000090000008b00000044"], 0x48) recvmsg$kcm(0xffffffffffffffff, &(0x7f00000005c0)={0x0, 0x0, 0x0, 0x0, &(0x7f0000000580)=""/49, 0x31}, 0x0) r0 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r0, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000180)={&(0x7f00000008c0)={0x14, 0x26, 0x9, 0x80001, 0x80, {0x5}}, 0x14}, 0x1, 0x0, 0x0, 0x400c801}, 0x4000000) r1 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r1, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000180)={&(0x7f00000005c0)=ANY=[@ANYBLOB="3400000044000701feffffff00000000037c0000040042800c00018006000600800a0000100002"], 0x34}, 0x1, 0x0, 0x0, 0x48815}, 0xc000) 4.664373596s ago: executing program 5 (id=11372): socket$kcm(0xa, 0x3, 0x87) r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000000), 0x40241, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000200)={'syzkaller1\x00', 0xc201}) r1 = socket$kcm(0x2, 0xa, 0x2) r2 = socket(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f0000000080)={'ip6tnl0\x00', 0x0}) sendmsg$nl_route_sched(r2, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000300)=@newqdisc={0x34, 0x24, 0x3fe3aa0262d8c583, 0x2, 0x0, {0x0, 0x0, 0x0, r3, {}, {0xffff, 0xffff}, {0x0, 0x6}}, [@qdisc_kind_options=@q_blackhole={0xe}]}, 0x34}}, 0x2000400c) pselect6(0x40, &(0x7f0000000040)={0x898, 0x100000000, 0xffffffffffffffff, 0xfffffffffffffffb, 0x3, 0xa, 0x9, 0x3}, 0x0, 0x0, 0x0, 0x0) ioctl$SIOCSIFHWADDR(r1, 0x8914, &(0x7f0000000180)={'syzkaller1\x00', @link_local}) write$tun(r0, &(0x7f0000000040)=ANY=[@ANYBLOB="034886dd010000000000140000006000000003088700fe88a43de1a400000000000000007d01ff020000000000000000000000000001"], 0xfdef) 4.111618562s ago: executing program 7 (id=11377): bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000640)={0x5, 0xb, &(0x7f0000000180)=ANY=[@ANYBLOB="1804000000000000000000000000000018010000696c6c2500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b70300000000000085000000b100000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x44}, 0x94) r0 = bpf$PROG_LOAD(0x5, &(0x7f0000000b80)={0x11, 0xb, &(0x7f0000000180)=ANY=[], &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7fffffff}, 0x94) bpf$ENABLE_STATS(0x20, 0x0, 0x0) r1 = socket$nl_generic(0x10, 0x3, 0x10) setsockopt$sock_int(r1, 0x1, 0x2a, &(0x7f0000000080)=0x2, 0x4) bpf$PROG_BIND_MAP(0xa, &(0x7f0000000340)={r0}, 0xc) syz_emit_ethernet(0x2a, &(0x7f0000000100)={@multicast, @random="8a0a63cdec59", @void, {@arp={0x806, @ether_ipv4={0x1, 0x800, 0x6, 0x4, 0x1, @dev={'\xaa\xaa\xaa\xaa\xaa', 0xa}, @remote, @dev, @rand_addr=0x64010102}}}}, 0x0) 4.034406563s ago: executing program 6 (id=11378): r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000002c80)={0x3, 0xc, &(0x7f0000000140)=ANY=[@ANYBLOB="18020000010000000000000000000000850000008700000018010000646c6c2500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000007200000095"], &(0x7f0000000080)='GPL\x00'}, 0x90) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f00000002c0)={r0, 0x0, 0xe, 0x0, &(0x7f0000000000)="7084c3d1b35891ae8b1ccb110ec1", 0x0, 0x200, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x50) (async) r1 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r1, &(0x7f0000000280)={&(0x7f00000001c0)={0x10, 0x0, 0x0, 0x10000}, 0xc, &(0x7f0000000240)={&(0x7f0000000340)={{0x14, 0x10, 0x1, 0x0, 0x0, {0x3}}, [@NFT_MSG_NEWSET={0x78, 0x9, 0xa, 0x201, 0x0, 0x0, {0x1, 0x0, 0x5}, [@NFTA_SET_DATA_TYPE={0x8, 0x6, 0x1, 0x0, 0xffffff00}, @NFTA_SET_ID={0x8, 0xa, 0x1, 0x0, 0x3}, @NFTA_SET_EXPR={0x54, 0x11, 0x0, 0x1, @queue={{0xa}, @val={0x44, 0x2, 0x0, 0x1, [@NFTA_QUEUE_NUM={0x6, 0x1, 0x1, 0x0, 0x6c}, @NFTA_QUEUE_NUM={0x6, 0x1, 0x1, 0x0, 0xf}, @NFTA_QUEUE_TOTAL={0x6, 0x2, 0x1, 0x0, 0x1}, @NFTA_QUEUE_FLAGS={0x6, 0x3, 0x1, 0x0, 0x3}, @NFTA_QUEUE_SREG_QNUM={0x8, 0x4, 0x1, 0x0, 0x17}, @NFTA_QUEUE_TOTAL={0x6, 0x2, 0x1, 0x0, 0x432}, @NFTA_QUEUE_FLAGS={0x6, 0x3, 0x1, 0x0, 0x1}, @NFTA_QUEUE_FLAGS={0x6, 0x3, 0x1, 0x0, 0x3}]}}}]}, @NFT_MSG_DELRULE={0xb8, 0x8, 0xa, 0x101, 0x0, 0x0, {0x7, 0x0, 0x1}, [@NFTA_RULE_ID={0x8, 0x9, 0x1, 0x0, 0x2}, @NFTA_RULE_CHAIN={0x9, 0x2, 'syz2\x00'}, @NFTA_RULE_COMPAT={0x54, 0x5, 0x0, 0x1, [@NFTA_RULE_COMPAT_PROTO_IPV6={0x8, 0x1, 0x1, 0x0, 0x29}, @NFTA_RULE_COMPAT_PROTO_IPV4={0x8, 0x1, 0x1, 0x0, 0x62}, @NFTA_RULE_COMPAT_PROTO_BRIDGE={0x8, 0x1, 0x1, 0x0, 0x8914}, @NFTA_RULE_COMPAT_PROTO_BRIDGE={0x8, 0x1, 0x1, 0x0, 0xc}, @NFTA_RULE_COMPAT_PROTO_IPV6={0x8, 0x1, 0x1, 0x0, 0x3b}, @NFTA_RULE_COMPAT_FLAGS={0x8}, @NFTA_RULE_COMPAT_FLAGS={0x8, 0x2, 0x1, 0x0, 0x1}, @NFTA_RULE_COMPAT_FLAGS={0x8, 0x2, 0x1, 0x0, 0x3}, @NFTA_RULE_COMPAT_FLAGS={0x8, 0x2, 0x1, 0x0, 0x2}, @NFTA_RULE_COMPAT_FLAGS={0x8}]}, @NFTA_RULE_POSITION_ID={0x8, 0xa, 0x1, 0x0, 0x3}, @NFTA_RULE_COMPAT={0x34, 0x5, 0x0, 0x1, [@NFTA_RULE_COMPAT_FLAGS={0x8}, @NFTA_RULE_COMPAT_FLAGS={0x8, 0x2, 0x1, 0x0, 0x2}, @NFTA_RULE_COMPAT_PROTO_IPV4={0x8, 0x1, 0x1, 0x0, 0x62}, @NFTA_RULE_COMPAT_PROTO_IPV4={0x8, 0x1, 0x1, 0x0, 0x84}, @NFTA_RULE_COMPAT_PROTO_IPV4={0x8, 0x1, 0x1, 0x0, 0x2e}, @NFTA_RULE_COMPAT_PROTO_IPV4={0x8, 0x1, 0x1, 0x0, 0x6c}]}]}, @NFT_MSG_NEWRULE={0x38, 0x6, 0xa, 0x101, 0x0, 0x0, {0x0, 0x0, 0x4}, [@NFTA_RULE_COMPAT={0x24, 0x5, 0x0, 0x1, [@NFTA_RULE_COMPAT_PROTO_IPV4={0x8, 0x1, 0x1, 0x0, 0x88}, @NFTA_RULE_COMPAT_PROTO_IPV6={0x8, 0x1, 0x1, 0x0, 0x5c}, @NFTA_RULE_COMPAT_PROTO_BRIDGE={0x8, 0x1, 0x1, 0x0, 0x9300}, @NFTA_RULE_COMPAT_PROTO_IPV4={0x8, 0x1, 0x1, 0x0, 0x89}]}]}, @NFT_MSG_NEWCHAIN={0x1ac, 0x3, 0xa, 0x801, 0x0, 0x0, {0x0, 0x0, 0x1}, [@NFTA_CHAIN_USERDATA={0xa2, 0xc, "118b05ee0545dcd7e11593c9fdf187cfc630e27de52287093d98834e2ded72ead013499f1e8f829ec819f8799090c4e082dcbeb6745e24aad601ad7f3f88b9fda0debbe889102efecb3e3a6b3feae3002711c4240f8ba0d0d0a17a2b0dcc9f13a6ec12b31b834de899954ceb4a8bf6db072c10f16379c9010f6eca7f494fdb321835bb182c0f1f3163e9b150d4d5a42783cacc9f64682a2a0191d7cada7f"}, @NFTA_CHAIN_USERDATA={0xf3, 0xc, "0c93d8013cc17dfb1186f0e660c414a3e510c1a640c7dc34d36e61e1bb537c95eb98a9d08d6622449303a1132c9efb6e09808c044d2a44d31a7ea45ae8e35a45909530459224b79e902c8959314116166dbdb9453b0553875322167418399f113ff9ccac12487af2b27897be01c3b2fcbf4bd8c6818854fb125debbb7d98393f233fe9b6dfa854fc58255325e01aad91a9111e29994b09a30b979b6742a8ad940af81d9aa5ffa4dc7929460b0b0b4069bbe12b36d976e4d248474fdc2ff1fed331b5031cd82bd1b35fbfcf97dcd2301148ffdd97c6bafd7bf185bb201c219b14d4e93e23de12df2eba47b90ea641d9"}]}], {0x14}}, 0x33c}, 0x1, 0x0, 0x0, 0x8d1}, 0x0) (async) r2 = socket(0x10, 0x803, 0x0) ioctl$sock_SIOCOUTQNSD(r2, 0x894b, &(0x7f0000000140)) (async) sendmsg$IPVS_CMD_SET_INFO(r2, &(0x7f0000000b00)={0x0, 0x0, &(0x7f0000000ac0)={0x0, 0x14}}, 0x0) (async) getsockname$packet(r2, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) (async) getsockname$packet(r2, &(0x7f0000000040), &(0x7f00000000c0)=0x14) 3.907654689s ago: executing program 7 (id=11380): r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000300)=@ipv6_newaddr={0x11, 0x14, 0x121, 0x0, 0x0, {0x23}}, 0x18}}, 0x0) socket$inet_udplite(0x2, 0x2, 0x88) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x10, 0x13, &(0x7f00000009c0)=ANY=[@ANYBLOB="1800000001000000000000000000000018010000786c6c250000000000202020630af8ff00000000bda100000000000026010000f8ffffffb702000008000000b703000000000000850000000800000018010000202070250000000000202020dd00f5ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000000600000095"], &(0x7f0000000300)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x29, '\x00', 0x0, @sk_msg, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) socket$unix(0x1, 0x1, 0x0) socket$nl_route(0x10, 0x3, 0x0) (async) sendmsg$nl_route(r0, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000300)=@ipv6_newaddr={0x11, 0x14, 0x121, 0x0, 0x0, {0x23}}, 0x18}}, 0x0) (async) socket$inet_udplite(0x2, 0x2, 0x88) (async) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x10, 0x13, &(0x7f00000009c0)=ANY=[@ANYBLOB="1800000001000000000000000000000018010000786c6c250000000000202020630af8ff00000000bda100000000000026010000f8ffffffb702000008000000b703000000000000850000000800000018010000202070250000000000202020dd00f5ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000000600000095"], &(0x7f0000000300)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x29, '\x00', 0x0, @sk_msg, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) (async) socket$unix(0x1, 0x1, 0x0) (async) 3.90693553s ago: executing program 1 (id=11381): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) bind$netlink(r0, &(0x7f00000016c0)={0x10, 0x0, 0x25dfdbfb, 0x40000044}, 0xc) r1 = socket$nl_generic(0x10, 0x3, 0x10) r2 = bpf$MAP_CREATE(0x0, &(0x7f0000000200)=@base={0xf, 0x4, 0x4, 0x12}, 0x48) r3 = bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000340)={0xe, 0x4, &(0x7f0000000400)=ANY=[@ANYBLOB="18020000801000000000000004000000850000002700000095"], &(0x7f0000000000)='syzkaller\x00', 0x0, 0x0, 0x0, 0x40f00}, 0x80) bpf$BPF_PROG_DETACH(0x8, &(0x7f0000000080)={@map=r2, r3, 0x5}, 0x10) close(0x4) r4 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r4, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000240)=ANY=[@ANYBLOB="140000001000010000000000000000000500000a28000000000a030000000000000000000a00000708000240000000020900010073797a31000000002c000000030a010100000000000000000a0000070900010073797a31000000000900030073797a320000000014000000110001"], 0x7c}, 0x1, 0x0, 0x0, 0x4000}, 0x0) sendmsg$NFT_BATCH(r4, &(0x7f0000009b40)={0x0, 0x0, &(0x7f0000009b00)={&(0x7f0000001300)={{0x14, 0x10, 0x1, 0x0, 0x0, {0x5}}, [@NFT_MSG_NEWSET={0x58, 0x9, 0xa, 0x401, 0x0, 0x0, {0xa, 0x0, 0x4}, [@NFTA_SET_TABLE={0x9, 0x1, 'syz1\x00'}, @NFTA_SET_ID={0x8, 0xa, 0x1, 0x0, 0xfffffffc}, @NFTA_SET_KEY_LEN={0x8, 0x5, 0x1, 0x0, 0x2}, @NFTA_SET_NAME={0x9, 0x2, 'syz1\x00'}, @NFTA_SET_FLAGS={0x8, 0x3, 0x1, 0x0, 0x11c}, @NFTA_SET_DATA_TYPE={0x8, 0x6, 0x1, 0x0, 0xffffff00}, @NFTA_SET_TIMEOUT={0xc, 0xb, 0x1, 0x0, 0x3}]}], {0x14, 0x11, 0x1, 0x0, 0x0, {0x7}}}, 0x80}, 0x1, 0x0, 0x0, 0x4000850}, 0x0) r5 = socket$nl_generic(0x10, 0x3, 0x10) r6 = syz_genetlink_get_family_id$tipc2(&(0x7f0000000400), 0xffffffffffffffff) sendmsg$TIPC_NL_KEY_SET(r5, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000001c0)=ANY=[@ANYBLOB='T\x00\x00\x00', @ANYRES16=r6, @ANYBLOB="0100000400000000000003100000400001802c0004001400010002000000ac14140f000000000000000014000200df000000ffffffff00000000000000000d0001007564703a73"], 0x54}}, 0x0) sendmsg$TIPC_NL_LINK_GET(r1, &(0x7f0000000140)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x10000}, 0xc, &(0x7f0000000100)={&(0x7f0000000440)={0x22c, r6, 0x1, 0x70bd2b, 0x25dfdbfe, {}, [@TIPC_NLA_SOCK={0x24, 0x2, 0x0, 0x1, [@TIPC_NLA_SOCK_HAS_PUBL={0x4}, @TIPC_NLA_SOCK_ADDR={0x8, 0x1, 0xfffffff8}, @TIPC_NLA_SOCK_REF={0x8, 0x2, 0x6}, @TIPC_NLA_SOCK_HAS_PUBL={0x4}, @TIPC_NLA_SOCK_REF={0x8, 0x2, 0x8}]}, @TIPC_NLA_MEDIA={0xc, 0x5, 0x0, 0x1, [@TIPC_NLA_MEDIA_NAME={0x8, 0x1, 'eth\x00'}]}, @TIPC_NLA_BEARER={0x84, 0x1, 0x0, 0x1, [@TIPC_NLA_BEARER_NAME={0xd, 0x1, @udp='udp:syz1\x00'}, @TIPC_NLA_BEARER_DOMAIN={0x8, 0x3, 0x6}, @TIPC_NLA_BEARER_UDP_OPTS={0x2c, 0x4, {{0x14, 0x1, @in={0x2, 0x4e20, @rand_addr=0x64010100}}, {0x14, 0x2, @in={0x2, 0x4e23, @multicast1}}}}, @TIPC_NLA_BEARER_PROP={0x3c, 0x2, 0x0, 0x1, [@TIPC_NLA_PROP_TOL={0x8, 0x2, 0x3ab}, @TIPC_NLA_PROP_TOL={0x8, 0x2, 0x31}, @TIPC_NLA_PROP_MTU={0x8, 0x4, 0x7}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x1f}, @TIPC_NLA_PROP_PRIO={0x8}, @TIPC_NLA_PROP_MTU={0x8, 0x4, 0xffffff24}, @TIPC_NLA_PROP_TOL={0x8, 0x2, 0xd8}]}]}, @TIPC_NLA_SOCK={0x10, 0x2, 0x0, 0x1, [@TIPC_NLA_SOCK_HAS_PUBL={0x4}, @TIPC_NLA_SOCK_ADDR={0x8, 0x1, 0x9}]}, @TIPC_NLA_BEARER={0x20, 0x1, 0x0, 0x1, [@TIPC_NLA_BEARER_DOMAIN={0x8, 0x3, 0x4}, @TIPC_NLA_BEARER_PROP={0xc, 0x2, 0x0, 0x1, [@TIPC_NLA_PROP_TOL={0x8, 0x2, 0x101}]}, @TIPC_NLA_BEARER_DOMAIN={0x8, 0x3, 0x1}]}, @TIPC_NLA_BEARER={0x134, 0x1, 0x0, 0x1, [@TIPC_NLA_BEARER_UDP_OPTS={0x38, 0x4, {{0x20, 0x1, @in6={0xa, 0x4e21, 0xd9, @dev={0xfe, 0x80, '\x00', 0x28}, 0x8736}}, {0x14, 0x2, @in={0x2, 0x4e24, @private=0xa010102}}}}, @TIPC_NLA_BEARER_NAME={0x10, 0x1, @l2={'eth', 0x3a, 'pimreg1\x00'}}, @TIPC_NLA_BEARER_NAME={0x10, 0x1, @l2={'eth', 0x3a, 'ip_vti0\x00'}}, @TIPC_NLA_BEARER_DOMAIN={0x8, 0x3, 0xc51}, @TIPC_NLA_BEARER_UDP_OPTS={0x44, 0x4, {{0x20, 0x1, @in6={0xa, 0x4e23, 0x9, @private0, 0x70d1}}, {0x20, 0x2, @in6={0xa, 0x4e22, 0x4, @initdev={0xfe, 0x88, '\x00', 0x0, 0x0}, 0x4}}}}, @TIPC_NLA_BEARER_PROP={0x2c, 0x2, 0x0, 0x1, [@TIPC_NLA_PROP_TOL={0x8, 0x2, 0x4}, @TIPC_NLA_PROP_TOL={0x8, 0x2, 0x3}, @TIPC_NLA_PROP_MTU={0x8, 0x4, 0x358}, @TIPC_NLA_PROP_TOL={0x8, 0x2, 0x9}, @TIPC_NLA_PROP_WIN={0x8, 0x3, 0x8}]}, @TIPC_NLA_BEARER_PROP={0x4c, 0x2, 0x0, 0x1, [@TIPC_NLA_PROP_MTU={0x8, 0x4, 0x2}, @TIPC_NLA_PROP_TOL={0x8, 0x2, 0x6}, @TIPC_NLA_PROP_MTU={0x8, 0x4, 0x3}, @TIPC_NLA_PROP_TOL={0x8, 0x2, 0x6}, @TIPC_NLA_PROP_TOL={0x8, 0x2, 0x3}, @TIPC_NLA_PROP_TOL={0x8, 0x2, 0x4}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x15}, @TIPC_NLA_PROP_WIN={0x8, 0x3, 0x7}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x1d}]}, @TIPC_NLA_BEARER_PROP={0xc, 0x2, 0x0, 0x1, [@TIPC_NLA_PROP_TOL={0x8}]}, @TIPC_NLA_BEARER_DOMAIN={0x8}]}]}, 0x22c}, 0x1, 0x0, 0x0, 0x40041}, 0x4050) 3.852666047s ago: executing program 6 (id=11382): r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$batadv(&(0x7f0000000400), 0xffffffffffffffff) bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000140)={&(0x7f0000000040)={{0xeb9f, 0x1, 0x0, 0x18, 0x0, 0x18, 0x18, 0x4, [@func={0x2, 0x0, 0x0, 0xc, 0x2}, @func_proto]}, {0x0, [0x0, 0xb56cea99d7d0f667]}}, 0x0, 0x34}, 0x28) r2 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000180)={0x11, 0x3, &(0x7f0000000280)=@framed={{0x18, 0x0, 0x3, 0x18, 0x1, 0x0, 0x0, 0x0, 0x3}}, &(0x7f0000000080)='syzkaller\x00', 0x8, 0x0, 0x0, 0x41000, 0x1}, 0x94) ioctl$ifreq_SIOCGIFINDEX_batadv_mesh(r0, 0x8933, &(0x7f0000000440)={'batadv0\x00', 0x0}) sendmsg$BATADV_CMD_SET_MESH(r0, &(0x7f0000000380)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000240)={0x24, r1, 0x1, 0x70bd29, 0x25dfdbfc, {}, [@BATADV_ATTR_MESH_IFINDEX={0x8, 0x3, r3}, @BATADV_ATTR_ISOLATION_MASK={0x8, 0x2c, 0x1}]}, 0x24}, 0x1, 0x0, 0x0, 0x4040001}, 0x800) ioctl$XFS_IOC_ATTRMULTI_BY_HANDLE(r2, 0x4048587b, &(0x7f0000000580)={{r0, &(0x7f0000000000)='\x00', 0x4280, &(0x7f00000000c0)={@align=0x5, {0x10, 0x4, 0x8, 0x80000001}}, 0x0, &(0x7f0000000100), &(0x7f00000002c0)=0x5}, 0x1, &(0x7f00000003c0)=[{0x2, 0xb, &(0x7f0000000340)='syzkaller\x00', &(0x7f0000000480)="92cbfa95d1b34a4f559dbc1b468a1a4df6eaa95a670fff5d661dec98d7a85b14feb5bafc8b5d42f8c74115d1cd233466490cd8a04ac592dc8456a3b4377e3e94701d22523f75b184eacdea2c4bc6e51113117f4d38d8c20469c26e586121b62cf22ed78c619efce111b64665f47ba0768eb88d6a670dddd1cf78674a424bb82e6649d8f922f46f57ba474ad20c062e1790565a3a26c1aa9a1d8c01f0a8c05c26ce17c593029fea1531940c9f95a187e4efc727edb4a166c85a6b870e8a86ef367c953b2e6e2ea1bcb8c0a626644310009e", 0xd1, 0x8}]}) ioctl$sock_bt_hidp_HIDPCONNDEL(r4, 0x400448c9, &(0x7f0000000600)={@none, 0x39}) 3.809955109s ago: executing program 5 (id=11383): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) r1 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r1, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000c40)=@newtaction={0x78, 0x30, 0x871a15abc695fb3d, 0x0, 0x0, {}, [{0x64, 0x1, [@m_tunnel_key={0x60, 0x1, 0x0, 0x0, {{0xf}, {0x30, 0x2, 0x0, 0x1, [@TCA_TUNNEL_KEY_PARMS={0x1c, 0x2, {{}, 0x1}}, @TCA_TUNNEL_KEY_NO_CSUM={0x5, 0xe}, @TCA_TUNNEL_KEY_NO_CSUM={0x5}]}, {0x4}, {0xc}, {0xc}}}]}]}, 0x78}}, 0x0) r2 = bpf$MAP_CREATE_TAIL_CALL(0x0, &(0x7f0000000180)={0x3, 0x4, 0x4, 0xa, 0x0, 0xffffffffffffffff, 0x5, '\x00', 0x0, 0xffffffffffffffff, 0x4, 0x1}, 0x50) pipe(&(0x7f0000019480)={0xffffffffffffffff, 0xffffffffffffffff}) close(r3) setsockopt$inet_tcp_TCP_REPAIR(r3, 0x6, 0x13, &(0x7f0000000300)=0x1, 0x4) bpf$BPF_GET_PROG_INFO(0xf, &(0x7f0000000740)={0xffffffffffffffff, 0xe0, &(0x7f0000000640)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, &(0x7f0000000480)=[0x0, 0x0, 0x0, 0x0], ""/16, 0x0, 0x0, 0x0, 0x0, 0x1, 0xa, &(0x7f00000004c0)=[0x0], &(0x7f0000000500)=[0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0], 0x0, 0xe4, &(0x7f0000000540)=[{}, {}, {}, {}, {}, {}, {}, {}], 0x40, 0x10, &(0x7f0000000580), &(0x7f00000005c0), 0x8, 0x65, 0x8, 0x8, &(0x7f0000000600)}}, 0x10) r5 = bpf$BPF_BTF_GET_FD_BY_ID(0x13, &(0x7f0000000780)=0xffffffffffffffff, 0x4) bpf$BPF_GET_PROG_INFO(0xf, &(0x7f0000000b40)={0xffffffffffffffff, 0xe0, &(0x7f0000000a40)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, &(0x7f0000000840)=[0x0, 0x0], ""/16, 0x0, 0x0, 0x0, 0x0, 0x1, 0x2, &(0x7f0000000880)=[0x0], &(0x7f00000008c0)=[0x0, 0x0], 0x0, 0x98, &(0x7f0000000900)=[{}, {}, {}, {}, {}, {}, {}, {}, {}], 0x48, 0x10, &(0x7f0000000980), &(0x7f00000009c0), 0x8, 0x39, 0x8, 0x8, &(0x7f0000000a00)}}, 0x10) r7 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000ec0)={0x18, 0x12, &(0x7f0000000b80)=@framed={{0x18, 0x0, 0x0, 0x0, 0xc22, 0x0, 0x0, 0x0, 0xffffffeb}, [@tail_call, @map_idx={0x18, 0x6}, @kfunc={0x85, 0x0, 0x2, 0x0, 0x1}, @call={0x85, 0x0, 0x0, 0x71}, @tail_call={{0x18, 0x2, 0x1, 0x0, r1}}, @generic={0x2, 0x4, 0xd, 0x8, 0x81}]}, &(0x7f0000000cc0)='GPL\x00', 0x81, 0x22, &(0x7f0000000d00)=""/34, 0x41000, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, &(0x7f0000000d40)={0x7, 0x4}, 0x8, 0x10, &(0x7f0000000d80)={0x2, 0xd, 0x1, 0x80}, 0x10, 0x0, 0x0, 0x9, &(0x7f0000000dc0)=[0x1], &(0x7f0000000e00)=[{0x2, 0x1, 0xc, 0x3}, {0x0, 0x3, 0x1, 0x5}, {0x2, 0x3, 0x2, 0x5}, {0x0, 0x5, 0x8, 0x7}, {0x3, 0x2, 0x10, 0x4}, {0x1, 0x1, 0xc, 0x9}, {0x3, 0x4, 0x3, 0x7}, {0x4, 0x1, 0xf, 0x1}, {0x5, 0x1, 0xc, 0x6}], 0x10, 0x3}, 0x94) bpf$PROG_LOAD(0x5, &(0x7f0000000fc0)={0x4, 0xb, &(0x7f0000000240)=@raw=[@ringbuf_query={{0x18, 0x1, 0x1, 0x0, r2}}, @ldst={0x1, 0x3, 0x2, 0x5, 0xb, 0x2}, @map_fd={0x18, 0x0, 0x1, 0x0, r3}, @map_idx_val={0x18, 0xa, 0x6, 0x0, 0x0, 0x0, 0x0, 0x0, 0x22}, @cb_func={0x18, 0x8, 0x4, 0x0, 0x4}], &(0x7f00000002c0)='syzkaller\x00', 0xfffff16c, 0x87, &(0x7f00000003c0)=""/135, 0x40f00, 0x4, '\x00', r4, @fallback=0x2d, r5, 0x8, &(0x7f00000007c0)={0x0, 0x2}, 0x8, 0x10, &(0x7f0000000800)={0x2, 0xb, 0x0, 0x9}, 0x10, r6, r7, 0x2, 0x0, &(0x7f0000000f80)=[{0x3, 0x4, 0x7, 0x8}, {0x1, 0x3, 0x8, 0xb}], 0x10, 0x9}, 0x94) sendmsg$NFT_BATCH(r0, &(0x7f000000c2c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000340)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a28000000000a0101000000005e1affd5020000000900010073797a300000000008000240000000032c000000030a01030000e6ff00000000020000000900010073797a30000000000900030073797a320000000014000000110001"], 0x7c}}, 0x0) sendmsg$NFT_BATCH(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000000c0)={{0x14}, [@NFT_MSG_NEWRULE={0x6c, 0x6, 0xa, 0x40b, 0x0, 0x0, {0x2}, [@NFTA_RULE_EXPRESSIONS={0x40, 0x4, 0x0, 0x1, [{0x3c, 0x1, 0x0, 0x1, @exthdr={{0xb}, @val={0x2c, 0x2, 0x0, 0x1, [@NFTA_EXTHDR_LEN={0x8, 0x4, 0x1, 0x0, 0x4}, @NFTA_EXTHDR_SREG={0x8, 0x7, 0x1, 0x0, 0x9}, @NFTA_EXTHDR_OP={0x8, 0x6, 0x1, 0x0, 0x1}, @NFTA_EXTHDR_TYPE={0x5}, @NFTA_EXTHDR_OFFSET={0x8, 0x3, 0x1, 0x0, 0x4}]}}}]}, @NFTA_RULE_CHAIN={0x9, 0x2, 'syz2\x00'}, @NFTA_RULE_TABLE={0x9, 0x1, 'syz0\x00'}]}], {0x14}}, 0x94}}, 0x0) socket$nl_netfilter(0x10, 0x3, 0xc) (async) socket$nl_route(0x10, 0x3, 0x0) (async) sendmsg$nl_route_sched(r1, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000c40)=@newtaction={0x78, 0x30, 0x871a15abc695fb3d, 0x0, 0x0, {}, [{0x64, 0x1, [@m_tunnel_key={0x60, 0x1, 0x0, 0x0, {{0xf}, {0x30, 0x2, 0x0, 0x1, [@TCA_TUNNEL_KEY_PARMS={0x1c, 0x2, {{}, 0x1}}, @TCA_TUNNEL_KEY_NO_CSUM={0x5, 0xe}, @TCA_TUNNEL_KEY_NO_CSUM={0x5}]}, {0x4}, {0xc}, {0xc}}}]}]}, 0x78}}, 0x0) (async) bpf$MAP_CREATE_TAIL_CALL(0x0, &(0x7f0000000180)={0x3, 0x4, 0x4, 0xa, 0x0, 0xffffffffffffffff, 0x5, '\x00', 0x0, 0xffffffffffffffff, 0x4, 0x1}, 0x50) (async) pipe(&(0x7f0000019480)) (async) close(r3) (async) setsockopt$inet_tcp_TCP_REPAIR(r3, 0x6, 0x13, &(0x7f0000000300)=0x1, 0x4) (async) bpf$BPF_GET_PROG_INFO(0xf, &(0x7f0000000740)={0xffffffffffffffff, 0xe0, &(0x7f0000000640)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, &(0x7f0000000480)=[0x0, 0x0, 0x0, 0x0], ""/16, 0x0, 0x0, 0x0, 0x0, 0x1, 0xa, &(0x7f00000004c0)=[0x0], &(0x7f0000000500)=[0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0], 0x0, 0xe4, &(0x7f0000000540)=[{}, {}, {}, {}, {}, {}, {}, {}], 0x40, 0x10, &(0x7f0000000580), &(0x7f00000005c0), 0x8, 0x65, 0x8, 0x8, &(0x7f0000000600)}}, 0x10) (async) bpf$BPF_BTF_GET_FD_BY_ID(0x13, &(0x7f0000000780)=0xffffffffffffffff, 0x4) (async) bpf$BPF_GET_PROG_INFO(0xf, &(0x7f0000000b40)={0xffffffffffffffff, 0xe0, &(0x7f0000000a40)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, &(0x7f0000000840)=[0x0, 0x0], ""/16, 0x0, 0x0, 0x0, 0x0, 0x1, 0x2, &(0x7f0000000880)=[0x0], &(0x7f00000008c0)=[0x0, 0x0], 0x0, 0x98, &(0x7f0000000900)=[{}, {}, {}, {}, {}, {}, {}, {}, {}], 0x48, 0x10, &(0x7f0000000980), &(0x7f00000009c0), 0x8, 0x39, 0x8, 0x8, &(0x7f0000000a00)}}, 0x10) (async) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000ec0)={0x18, 0x12, &(0x7f0000000b80)=@framed={{0x18, 0x0, 0x0, 0x0, 0xc22, 0x0, 0x0, 0x0, 0xffffffeb}, [@tail_call, @map_idx={0x18, 0x6}, @kfunc={0x85, 0x0, 0x2, 0x0, 0x1}, @call={0x85, 0x0, 0x0, 0x71}, @tail_call={{0x18, 0x2, 0x1, 0x0, r1}}, @generic={0x2, 0x4, 0xd, 0x8, 0x81}]}, &(0x7f0000000cc0)='GPL\x00', 0x81, 0x22, &(0x7f0000000d00)=""/34, 0x41000, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, &(0x7f0000000d40)={0x7, 0x4}, 0x8, 0x10, &(0x7f0000000d80)={0x2, 0xd, 0x1, 0x80}, 0x10, 0x0, 0x0, 0x9, &(0x7f0000000dc0)=[0x1], &(0x7f0000000e00)=[{0x2, 0x1, 0xc, 0x3}, {0x0, 0x3, 0x1, 0x5}, {0x2, 0x3, 0x2, 0x5}, {0x0, 0x5, 0x8, 0x7}, {0x3, 0x2, 0x10, 0x4}, {0x1, 0x1, 0xc, 0x9}, {0x3, 0x4, 0x3, 0x7}, {0x4, 0x1, 0xf, 0x1}, {0x5, 0x1, 0xc, 0x6}], 0x10, 0x3}, 0x94) (async) bpf$PROG_LOAD(0x5, &(0x7f0000000fc0)={0x4, 0xb, &(0x7f0000000240)=@raw=[@ringbuf_query={{0x18, 0x1, 0x1, 0x0, r2}}, @ldst={0x1, 0x3, 0x2, 0x5, 0xb, 0x2}, @map_fd={0x18, 0x0, 0x1, 0x0, r3}, @map_idx_val={0x18, 0xa, 0x6, 0x0, 0x0, 0x0, 0x0, 0x0, 0x22}, @cb_func={0x18, 0x8, 0x4, 0x0, 0x4}], &(0x7f00000002c0)='syzkaller\x00', 0xfffff16c, 0x87, &(0x7f00000003c0)=""/135, 0x40f00, 0x4, '\x00', r4, @fallback=0x2d, r5, 0x8, &(0x7f00000007c0)={0x0, 0x2}, 0x8, 0x10, &(0x7f0000000800)={0x2, 0xb, 0x0, 0x9}, 0x10, r6, r7, 0x2, 0x0, &(0x7f0000000f80)=[{0x3, 0x4, 0x7, 0x8}, {0x1, 0x3, 0x8, 0xb}], 0x10, 0x9}, 0x94) (async) sendmsg$NFT_BATCH(r0, &(0x7f000000c2c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000340)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a28000000000a0101000000005e1affd5020000000900010073797a300000000008000240000000032c000000030a01030000e6ff00000000020000000900010073797a30000000000900030073797a320000000014000000110001"], 0x7c}}, 0x0) (async) sendmsg$NFT_BATCH(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000000c0)={{0x14}, [@NFT_MSG_NEWRULE={0x6c, 0x6, 0xa, 0x40b, 0x0, 0x0, {0x2}, [@NFTA_RULE_EXPRESSIONS={0x40, 0x4, 0x0, 0x1, [{0x3c, 0x1, 0x0, 0x1, @exthdr={{0xb}, @val={0x2c, 0x2, 0x0, 0x1, [@NFTA_EXTHDR_LEN={0x8, 0x4, 0x1, 0x0, 0x4}, @NFTA_EXTHDR_SREG={0x8, 0x7, 0x1, 0x0, 0x9}, @NFTA_EXTHDR_OP={0x8, 0x6, 0x1, 0x0, 0x1}, @NFTA_EXTHDR_TYPE={0x5}, @NFTA_EXTHDR_OFFSET={0x8, 0x3, 0x1, 0x0, 0x4}]}}}]}, @NFTA_RULE_CHAIN={0x9, 0x2, 'syz2\x00'}, @NFTA_RULE_TABLE={0x9, 0x1, 'syz0\x00'}]}], {0x14}}, 0x94}}, 0x0) (async) 3.708191564s ago: executing program 2 (id=11384): bpf$MAP_CREATE(0x0, &(0x7f0000000280)=@base={0x7, 0x4, 0x8, 0x1}, 0x48) r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000280)=ANY=[], 0x50) r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000b40)={0x11, 0x8, &(0x7f0000000a40)=ANY=[@ANYBLOB="1800000000000000000000000000000018120000", @ANYRES32=r0, @ANYBLOB="0000000000000000b703000000000000850000001b000000b70000000000000095"], &(0x7f0000000780)='GPL\x00', 0x0, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, @fallback=0xcb13119f635c50e1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$PROG_BIND_MAP(0xa, &(0x7f0000000500)={r1}, 0xc) bpf$PROG_BIND_MAP(0xa, &(0x7f0000000400)={r1}, 0xc) sendmsg$IPCTNL_MSG_CT_GET_CTRZERO(0xffffffffffffffff, &(0x7f0000000240)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x400}, 0xc, &(0x7f0000000200)={&(0x7f0000000040)={0x184, 0x3, 0x1, 0x101, 0x0, 0x0, {0x7, 0x0, 0x2}, [@CTA_SYNPROXY={0x14, 0x18, 0x0, 0x1, [@CTA_SYNPROXY_ITS={0x8, 0x2, 0x1, 0x0, 0x4960380c}, @CTA_SYNPROXY_ISN={0x8, 0x1, 0x1, 0x0, 0x3ff}]}, @CTA_MARK={0x8, 0x8, 0x1, 0x0, 0x4}, @CTA_SYNPROXY={0xc, 0x18, 0x0, 0x1, [@CTA_SYNPROXY_ITS={0x8, 0x2, 0x1, 0x0, 0x200}]}, @CTA_TIMEOUT={0x8, 0x7, 0x1, 0x0, 0x1}, @CTA_TUPLE_REPLY={0xbc, 0x2, 0x0, 0x1, [@CTA_TUPLE_IP={0x2c, 0x1, 0x0, 0x1, @ipv6={{0x14, 0x3, @private2}, {0x14, 0x4, @rand_addr=' \x01\x00'}}}, @CTA_TUPLE_PROTO={0xc, 0x2, 0x0, 0x1, {0x5, 0x1, 0x21}}, @CTA_TUPLE_PROTO={0xc, 0x2, 0x0, 0x1, {0x5, 0x1, 0x1}}, @CTA_TUPLE_IP={0x2c, 0x1, 0x0, 0x1, @ipv6={{0x14, 0x3, @initdev={0xfe, 0x88, '\x00', 0x1, 0x0}}, {0x14, 0x4, @private0}}}, @CTA_TUPLE_ZONE={0x6, 0x3, 0x1, 0x0, 0x3}, @CTA_TUPLE_PROTO={0xc, 0x2, 0x0, 0x1, {0x5, 0x1, 0x3a}}, @CTA_TUPLE_IP={0x2c, 0x1, 0x0, 0x1, @ipv6={{0x14, 0x3, @empty}, {0x14, 0x4, @mcast2}}}, @CTA_TUPLE_ZONE={0x6, 0x3, 0x1, 0x0, 0x1}]}, @CTA_SEQ_ADJ_REPLY={0x14, 0x10, 0x0, 0x1, [@CTA_SEQADJ_OFFSET_BEFORE={0x8, 0x2, 0x1, 0x0, 0x4}, @CTA_SEQADJ_OFFSET_AFTER={0x8, 0x3, 0x1, 0x0, 0x3}]}, @CTA_SEQ_ADJ_ORIG={0xc, 0xf, 0x0, 0x1, [@CTA_SEQADJ_OFFSET_AFTER={0x8, 0x3, 0x1, 0x0, 0xfffffffc}]}, @CTA_TUPLE_MASTER={0x64, 0xe, 0x0, 0x1, [@CTA_TUPLE_IP={0x2c, 0x1, 0x0, 0x1, @ipv6={{0x14, 0x3, @remote}, {0x14, 0x4, @rand_addr=' \x01\x00'}}}, @CTA_TUPLE_IP={0x2c, 0x1, 0x0, 0x1, @ipv6={{0x14, 0x3, @loopback}, {0x14, 0x4, @local}}}, @CTA_TUPLE_ZONE={0x6, 0x3, 0x1, 0x0, 0x3}]}]}, 0x184}, 0x1, 0x0, 0x0, 0x24000001}, 0x4048010) ioctl$NILFS_IOCTL_SYNC(r0, 0x80086e8a, &(0x7f0000000300)) 3.691033073s ago: executing program 7 (id=11385): sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f00000007c0)={0x0, 0x0, &(0x7f0000000480)={&(0x7f00000040c0)=@deltaction={0x200, 0x31, 0x4, 0x70bd27, 0x25dfdbff, {}, [@TCA_ACT_TAB={0x4c, 0x1, [{0x14, 0x6, 0x0, 0x0, @TCA_ACT_KIND={0xf, 0x1, 'tunnel_key\x00'}}, {0xc, 0x8, 0x0, 0x0, @TCA_ACT_INDEX={0x8, 0x3, 0x8}}, {0x10, 0xf, 0x0, 0x0, @TCA_ACT_KIND={0x9, 0x1, 'gact\x00'}}, {0xc, 0x4f, 0x0, 0x0, @TCA_ACT_INDEX={0x8, 0x3, 0x8}}, {0xc, 0xb, 0x0, 0x0, @TCA_ACT_KIND={0x8, 0x1, 'nat\x00'}}]}, @TCA_ACT_TAB={0x14, 0x1, [{0x10, 0x16, 0x0, 0x0, @TCA_ACT_KIND={0xb, 0x1, 'sample\x00'}}]}, @TCA_ACT_TAB={0x4c, 0x1, [{0xc, 0x1, 0x0, 0x0, @TCA_ACT_KIND={0x8, 0x1, 'nat\x00'}}, {0x10, 0x1b, 0x0, 0x0, @TCA_ACT_KIND={0xc, 0x1, 'skbedit\x00'}}, {0x10, 0x1d, 0x0, 0x0, @TCA_ACT_KIND={0xc, 0x1, 'skbedit\x00'}}, {0xc, 0x7, 0x0, 0x0, @TCA_ACT_INDEX={0x8, 0x3, 0x7}}, {0x10, 0x16, 0x0, 0x0, @TCA_ACT_KIND={0x9, 0x1, 'gact\x00'}}]}, @TCA_ACT_TAB={0x8c, 0x1, [{0x10, 0x0, 0x0, 0x0, @TCA_ACT_KIND={0xb, 0x1, 'skbmod\x00'}}, {0xc, 0x5, 0x0, 0x0, @TCA_ACT_INDEX={0x8, 0x3, 0x80000000}}, {0x10, 0x1d, 0x0, 0x0, @TCA_ACT_KIND={0x9, 0x1, 'gact\x00'}}, {0xc, 0x14, 0x0, 0x0, @TCA_ACT_INDEX={0x8, 0x3, 0x80000000}}, {0x10, 0x7, 0x0, 0x0, @TCA_ACT_KIND={0xb, 0x1, 'police\x00'}}, {0xc, 0xf, 0x0, 0x0, @TCA_ACT_INDEX={0x8, 0x3, 0x3}}, {0x10, 0x18, 0x0, 0x0, @TCA_ACT_KIND={0x9, 0x1, 'vlan\x00'}}, {0xc, 0x2015, 0x0, 0x0, @TCA_ACT_KIND={0x8, 0x1, 'ipt\x00'}}, {0xc, 0xb, 0x0, 0x0, @TCA_ACT_KIND={0x7, 0x1, 'xt\x00'}}, {0xc, 0x1d, 0x0, 0x0, @TCA_ACT_INDEX={0x8, 0x3, 0xf7ad}}]}, @TCA_ACT_TAB={0x10, 0x1, [{0xc, 0x4, 0x0, 0x0, @TCA_ACT_INDEX={0x8, 0x3, 0x5}}]}, @TCA_ACT_TAB={0x54, 0x1, [{0x10, 0x8, 0x0, 0x0, @TCA_ACT_KIND={0x9, 0x1, 'gact\x00'}}, {0xc, 0x7, 0x0, 0x0, @TCA_ACT_INDEX={0x8, 0x3, 0x9}}, {0xc, 0x12, 0x0, 0x0, @TCA_ACT_INDEX={0x8, 0x3, 0x6}}, {0xc, 0x0, 0x0, 0x0, @TCA_ACT_INDEX={0x8, 0x3, 0xe4}}, {0x10, 0x1a, 0x0, 0x0, @TCA_ACT_KIND={0xc, 0x1, 'skbedit\x00'}}, {0xc, 0x1c, 0x0, 0x0, @TCA_ACT_INDEX={0x8, 0x3, 0x7}}]}, @TCA_ACT_TAB={0x50, 0x1, [{0xc, 0x1f, 0x0, 0x0, @TCA_ACT_INDEX={0x8, 0x3, 0x9}}, {0x10, 0xc, 0x0, 0x0, @TCA_ACT_KIND={0xb, 0x1, 'sample\x00'}}, {0xc, 0x17, 0x0, 0x0, @TCA_ACT_INDEX={0x8, 0x3, 0x3}}, {0x10, 0x1b, 0x0, 0x0, @TCA_ACT_KIND={0x9, 0x1, 'gact\x00'}}, {0x14, 0x19, 0x0, 0x0, @TCA_ACT_KIND={0xd, 0x1, 'connmark\x00'}}]}]}, 0x200}, 0x1, 0x0, 0x0, 0x40008c5}, 0x20000080) r0 = socket(0x10, 0x803, 0x0) sendto(r0, &(0x7f0000000740)="120000001200e7ef007b00000000000000a1", 0x12, 0x0, 0x0, 0x0) bpf$PROG_LOAD(0x5, &(0x7f0000000440)={0x13, 0x6, &(0x7f0000000000)=@framed={{0x5, 0x0, 0x0, 0x0, 0x0, 0x73, 0x11, 0x33}, [@func={0x85, 0x0, 0x1, 0x0, 0x2}, @call={0x85, 0x0, 0x0, 0xc4}, @exit], {0x95, 0x0, 0x5a5}}, &(0x7f0000000080)='GPL\x00', 0x5, 0x29e, &(0x7f000000cf3d)=""/195, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x6}, 0x70) recvmmsg(r0, &(0x7f00000037c0)=[{{&(0x7f00000004c0)=@ethernet={0x0, @random}, 0xfdf4, &(0x7f0000000380)=[{&(0x7f0000000140)=""/100, 0x365}, {&(0x7f0000000280)=""/85, 0x7c}, {&(0x7f0000000fc0)=""/4096, 0x197}, {&(0x7f0000000400)=""/106, 0x645}, {&(0x7f0000000980)=""/73, 0x1b}, {&(0x7f0000000200)=""/77, 0x14}, {&(0x7f00000007c0)=""/154, 0x21}, {&(0x7f00000001c0)=""/17, 0x1d8}], 0x21, &(0x7f0000000600)=""/191, 0xffffffffffffff2f}}], 0x4000000000003b4, 0x2040000, &(0x7f0000003700)={0x77359400}) 3.664046673s ago: executing program 6 (id=11386): r0 = socket$inet6_sctp(0xa, 0x1, 0x84) setsockopt$inet_sctp6_SCTP_PEER_ADDR_THLDS(r0, 0x84, 0x84, &(0x7f0000000000)={0x0, @in6={{0xa, 0x0, 0x0, @initdev={0xfe, 0x88, '\x00', 0x0, 0x0}}}}, 0x90) r1 = socket$igmp(0x2, 0x3, 0x2) r2 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_DESTROY(r2, &(0x7f0000000440)={0x0, 0x0, &(0x7f0000000380)={&(0x7f0000000340)={0x1c, 0x3, 0x6, 0x101, 0x0, 0x0, {0x9, 0x0, 0x3}, [@IPSET_ATTR_PROTOCOL={0x5}]}, 0x1c}, 0x1, 0x0, 0x0, 0x8000}, 0x4000000) setsockopt$MRT_INIT(r1, 0x0, 0xc8, &(0x7f0000003d40), 0x4) r3 = socket$igmp(0x2, 0x3, 0x2) ioctl$sock_ipv6_tunnel_SIOCGET6RD(0xffffffffffffffff, 0x89f8, &(0x7f0000000240)={'erspan0\x00', &(0x7f0000000180)={'syztnl1\x00', 0x0, 0x7800, 0x20, 0x4, 0x4, {{0x23, 0x4, 0x2, 0xc, 0x8c, 0x65, 0x0, 0x5c, 0x2f, 0x0, @initdev={0xac, 0x1e, 0x0, 0x0}, @multicast1, {[@noop, @lsrr={0x83, 0x7, 0x71, [@dev={0xac, 0x14, 0x14, 0x2d}]}, @timestamp_prespec={0x44, 0x54, 0xa7, 0x3, 0x1, [{@initdev={0xac, 0x1e, 0x0, 0x0}, 0x7}, {@broadcast, 0x8}, {@private=0xa010101}, {@private=0xa010102, 0x4}, {@broadcast, 0x4}, {@broadcast, 0xd47}, {@dev={0xac, 0x14, 0x14, 0xe}, 0x9}, {@rand_addr=0x64010100, 0x5}, {@multicast1, 0x3}, {@local, 0x7fff}]}, @noop, @lsrr={0x83, 0x7, 0xb4, [@multicast2]}, @lsrr={0x83, 0xf, 0xe8, [@remote, @local, @remote]}, @generic={0x83, 0x2}]}}}}}) setsockopt$MRT_ADD_VIF(r3, 0x0, 0xca, &(0x7f0000003d80)={0x1, 0x0, 0x0, 0x0, @vifc_lcl_ifindex=r4, @dev}, 0x10) r5 = socket$inet_udp(0x2, 0x2, 0x0) sendmsg$NLBL_UNLABEL_C_STATICADD(0xffffffffffffffff, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000040)=ANY=[@ANYBLOB='L\x00\x00\x00', @ANYRES16, @ANYBLOB="01020000010000ecffff060026"], 0x4c}, 0x8, 0x3000000000002}, 0x0) r6 = socket(0x10, 0x3, 0x0) setsockopt$netlink_NETLINK_TX_RING(r6, 0x10e, 0xc, &(0x7f0000000040)={0x7fffffff}, 0x10) sendmsg$kcm(r6, &(0x7f00000016c0)={0x0, 0x0, &(0x7f00000000c0)=[{&(0x7f0000000040)="2e0000004a008102e00f80ecdb4cb9020a", 0x4a}, {&(0x7f0000001700)="0c74c75350f4a590e15c61c7942348092734fe1863473bbce6798a60e9", 0x1d}], 0x2, 0x0, 0x0, 0x10}, 0x0) r7 = socket$pppl2tp(0x18, 0x1, 0x1) connect$pppl2tp(r7, &(0x7f0000000000)=@pppol2tpv3={0x18, 0x1, {0x0, r5, {0x2, 0x0, @broadcast}, 0x2}}, 0x2e) r8 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='memory.events\x00', 0x275a, 0x0) write$cgroup_subtree(r8, &(0x7f0000000000)=ANY=[], 0x3261e) socket$can_raw(0x1d, 0x3, 0x1) mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x2000001, 0x12, r8, 0x0) getsockopt(r7, 0x111, 0x1, 0x0, &(0x7f0000000080)) r9 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r9, &(0x7f00000000c0)={0x0, 0x59, &(0x7f00000002c0)={&(0x7f0000001300)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a20000000000a05000000000000000000010000000900010073797a300000000034000000030a010200000000000000000100fffc0900030073797a32000000000900010073797a300000000008000a40000000042c000000080a01080000000000000000010000000900020073797a32000004000900010073797a30"], 0xa8}}, 0x0) syz_emit_ethernet(0x66, &(0x7f00000000c0)={@multicast, @link_local, @void, {@ipv4={0x800, @gre={{0x5, 0x4, 0x0, 0x0, 0x58, 0x0, 0x0, 0x0, 0x2f, 0x0, @rand_addr=0x64010102, @multicast1=0xe000c800}, {{0x0, 0x0, 0x1, 0x0, 0xb, 0x0, 0x0, 0x4, 0x6558}, {0x0, 0x0, 0x0, 0x0, 0x11}, {}, {0x8, 0x88be, 0x0, {{}, 0xfffff788}}}}}}}, 0x0) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000280)={0xffffffffffffffff, 0xffffffffffffffff}) bind$unix(r10, &(0x7f00000002c0)=@file={0x0, './file0\x00'}, 0x6e) syz_emit_ethernet(0x98, &(0x7f0000000000)=ANY=[@ANYBLOB="000000000000aaaaaaaaaabb81002c000011aa00272cb23f883ed013fd1216a15061b2dd37080dd5cca0a68ae8e7240972bdef6320f3c41419e7e9910ffcfd517a22c4c16b95b35a818dec6d133a55cb775aa343b33793421e67262a1dd6b93713f463122fcc5f3dbb014be96891e1f7001000009516e1f9b5a0e4f947a660605316da1ee6b147295410174dbd81c6cf00eb83ef0c2d46"], &(0x7f0000000140)={0x1, 0x2, [0x5f0, 0x3de, 0xb55, 0xc12]}) 3.586132226s ago: executing program 1 (id=11387): r0 = socket$inet_tcp(0x2, 0x1, 0x0) getsockopt(r0, 0x0, 0x32, &(0x7f0000000000)=""/2, &(0x7f0000000040)=0x2) bpf$BPF_PROG_ATTACH(0x8, &(0x7f0000001880)={@map, 0xffffffffffffffff, 0x16}, 0x20) 3.540643899s ago: executing program 5 (id=11388): r0 = socket$kcm(0x2, 0xa, 0x2) r1 = syz_init_net_socket$x25(0x9, 0x5, 0x0) (async) r2 = openat$tun(0xffffffffffffff9c, &(0x7f0000000100), 0xc1842, 0x0) (async) r3 = openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0) ioctl$TUNSETIFF(r3, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x7101}) ioctl$TUNSETOFFLOAD(r3, 0x400454c9, 0xba98575a95aeb70d) (async) ioctl$TUNSETIFF(r2, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x7101}) (async) r4 = openat$tun(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) close(r4) (async) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000140)) ioctl$SIOCSIFHWADDR(r4, 0x8914, &(0x7f0000002280)={'syzkaller0\x00', @link_local}) (async) ioctl$NILFS_IOCTL_GET_VINFO(r4, 0xc0186e86, &(0x7f0000000000)={&(0x7f00000001c0)=[{0x9, 0x0, 0x7f, 0xfffffffffffffffa}, {0x9c6, 0x7fff, 0xf, 0x7}, {0x4, 0x5, 0x2, 0x8000}], 0x3, 0x20, 0x8, 0x9}) (async) write$cgroup_devices(r2, &(0x7f0000000840)=ANY=[@ANYBLOB="1e0308004d6b71ef288563"], 0xffdd) (async) close(0x3) (async) openat$nci(0xffffffffffffff9c, 0x0, 0x2, 0x0) (async) close(0x4) (async) ioctl$SIOCX25SCAUSEDIAG(r1, 0x541b, &(0x7f0000000140)) r5 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r5, &(0x7f0000000100)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000640)=@newtaction={0x64, 0x30, 0x9e54f29ff072a93b, 0x0, 0x25dfdbfc, {}, [{0x50, 0x1, [@m_csum={0x4c, 0x1, 0x0, 0x0, {{0x9}, {0x20, 0x2, 0x0, 0x1, [@TCA_CSUM_PARMS={0x1c, 0x1, {{0x4}, 0x2}}]}, {0x4}, {0xc}, {0xc}}}]}]}, 0x64}}, 0x0) (async) ioctl$SIOCSIFHWADDR(r0, 0x8914, &(0x7f0000000180)={'veth0_to_team\x00', @link_local}) 3.539770307s ago: executing program 2 (id=11389): r0 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000440)=ANY=[@ANYBLOB="6c0100001000130700000000ffdbdf25e0000001000000000000000000000000ff020000000000000000000000000001000400004e2100020000000021000000", @ANYRES32=0x0, @ANYRES32=r0, @ANYBLOB="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"], 0x16c}, 0x1, 0x0, 0x0, 0x880}, 0x2014) 3.46949522s ago: executing program 1 (id=11390): r0 = bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000240)={0x2, 0x4, 0x8, 0x1, 0x80, 0x0, 0x0, '\x00', 0x0, 0x0}, 0x50) bpf$PROG_LOAD(0x5, &(0x7f0000000a80)={0x3, 0x1c, &(0x7f0000000d80)=ANY=[@ANYBLOB="1808000000000000000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b702000014000000b7030000000000008500000005000000bf0900000000000035090100000600009500000000000000b7020000000000007b9af8ff00000000d509000013ffffff7baaf0ff00000000bf9700000000000007080000fffdffffbfa400000000000007040000f0ffffff740200000800000018220000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7050000080000004608f0ff760000007d0000000000000056080000010000008500000005000000b70000000000000095"], &(0x7f0000000980)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x69, '\x00', 0x0, @sched_cls=0x2e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000040)=ANY=[], 0x50) r1 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r2 = syz_genetlink_get_family_id$nl802154(&(0x7f0000000480), 0xffffffffffffffff) sendmsg$NL802154_CMD_NEW_INTERFACE(r1, &(0x7f00000005c0)={0x0, 0x0, &(0x7f0000000580)={&(0x7f0000000500)={0x44, r2, 0x1, 0x70bd27, 0x25dfdbfd, {}, [@NL802154_ATTR_IFINDEX={0x8}, @NL802154_ATTR_WPAN_DEV={0xc, 0x6, 0x200000002}, @NL802154_ATTR_EXTENDED_ADDR={0xc, 0x17, {0xaaaaaaaaaaaa0302}}, @NL802154_ATTR_IFTYPE={0x8, 0x5, 0x2}, @NL802154_ATTR_IFTYPE={0x8, 0x5, 0x1}]}, 0x44}, 0x1, 0x0, 0x0, 0x8000}, 0x80) r3 = socket$nl_xfrm(0x10, 0x3, 0x6) bpf$BPF_MAP_CONST_STR_FREEZE(0x16, &(0x7f0000000040)={r0}, 0x4) sendmsg$nl_xfrm(r3, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000001c0)=ANY=[@ANYBLOB="84010000100013070000000000000000ffffffff000000000000000000000000fe8000000000000000000000000000bb00"/64, @ANYRES32=0x0, @ANYRES32=0x0, @ANYBLOB="fe8000000000000000000000000000bb0000000032000000ac14140000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000a00000000000000000000004800020063626328616573290000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000004c001400636d61632861657329"], 0x184}}, 0x0) 3.433627398s ago: executing program 7 (id=11391): r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$netlbl_mgmt(&(0x7f0000000080), 0xffffffffffffffff) sendmsg$NLBL_MGMT_C_ADDDEF(r0, &(0x7f0000000180)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x400}, 0xc, &(0x7f0000000140)={&(0x7f00000000c0)={0x1c, r1, 0x200, 0x70bd2c, 0x25dfdbfd, {}, [@NLBL_MGMT_A_IPV4ADDR={0x8, 0x7, @broadcast}]}, 0x1c}, 0x1, 0x0, 0x0, 0x40000}, 0x80) bpf$PROG_LOAD(0x5, &(0x7f00000054c0)={0xe, 0x16, &(0x7f0000000940)=ANY=[@ANYBLOB="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"], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @sk_skb, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0xffffffffffffffd2}, 0x48) 3.368782173s ago: executing program 2 (id=11392): r0 = socket$inet6(0xa, 0x2, 0x0) setsockopt$inet6_IPV6_FLOWLABEL_MGR(r0, 0x29, 0x20, &(0x7f0000000280)={@mcast1, 0x800, 0x0, 0x103, 0x1}, 0x20) setsockopt$inet6_int(r0, 0x29, 0x1000000000021, &(0x7f0000000040)=0x5, 0x4) sendmsg$inet6(r0, &(0x7f00000000c0)={&(0x7f00000001c0)={0xa, 0x4e20, 0x80000, @dev={0xfe, 0x80, '\x00', 0x20}, 0xfffffffe}, 0x1c, 0x0, 0x0, &(0x7f0000001140)=[@dontfrag={{0x14, 0x29, 0x3e, 0x800}}], 0x18}, 0x40c0) r1 = bpf$MAP_CREATE(0x0, &(0x7f0000000400)=ANY=[@ANYBLOB="0e00000004000000040000000300000000000000", @ANYRES32, @ANYBLOB='\x00'/20, @ANYRES32=0x0, @ANYRES32, @ANYBLOB="00001536000800fff20000010000000000005b5ef759533f9ef50000"], 0x48) (async) r2 = socket$inet6(0xa, 0x5, 0x0) setsockopt$sock_int(r2, 0x1, 0xf, &(0x7f0000fee000)=0x3fa, 0x4) bind$inet6(r2, &(0x7f0000000100)={0xa, 0x4e20, 0x0, @empty, 0xffffff5d}, 0x1c) (async) listen(r2, 0x50) sendto$inet6(r0, &(0x7f0000000480)="ed4f12328ba0c4d1a741da6e376ac893a79acf71ba7ccaafe10b8b69959e8445f64dc18decc14c7b1d790e3fbda8cdaaee95baaf8290735bd12162c16c0ac629f6256884e0185c2c517b6dd5d3359293f3f05a11f837b16764930df04b588f1b95f94c641cb4592d738b5e67709dd56f3e87dad8232e3fe56454a0f558db475b10a9b65fd51b6d0d48153c339943c8f7fd85ab6eae4b811b04831e7f1dd1dfb76fbc0f271f34a4cc4b34b3", 0xab, 0x40000091, &(0x7f0000000080)={0xa, 0x1ff, 0x7a, @private0={0xfc, 0x0, '\x00', 0x1}, 0xfffffffb}, 0x1c) (async) sendmsg$inet(r2, &(0x7f00000019c0)={&(0x7f0000000340)={0x2, 0x4e20, @local}, 0x10, &(0x7f00000017c0)=[{&(0x7f0000000380)="8cefbb785a23", 0x6}], 0x1}, 0x4000) (async) r3 = bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000140)={&(0x7f0000000000)=ANY=[@ANYBLOB="9feb0100180000000000000034000000340000000600000004000000000000010400000000040000000000000000000d040000000000000000000010040000000400000000000008030000000000000061"], 0x0, 0x52}, 0x28) bpf$MAP_CREATE_TAIL_CALL(0x0, &(0x7f0000000380)={0x2, 0x4, 0x4, 0xa, 0x0, 0xffffffffffffffff, 0x0, '\x00', 0x0, r3, 0x1, 0x3}, 0x50) (async) r4 = bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000100)={0x2, 0x4, 0x8, 0x1, 0x80, 0x0, 0x0, '\x00', 0x0, 0x0}, 0x50) bpf$PROG_LOAD(0x5, &(0x7f0000000840)={0x11, 0x1c, &(0x7f0000000d80)=@ringbuf={{0x18, 0x8}, {{0x18, 0x1, 0x1, 0x0, r1}, {}, {}, {0x85, 0x0, 0x0, 0x5}, {0x7, 0x1, 0xb, 0x9, 0x0, 0x8}}, {{0x5, 0x0, 0x3}, {0x95, 0x0, 0x0, 0x700}}, [@snprintf={{}, {0x3, 0x0, 0x3, 0xa, 0x9, 0xfe04}, {0x6, 0x0, 0x6, 0x9}, {0x3, 0x3, 0x6, 0xa, 0xa, 0xfff0, 0x50}, {0x7, 0x1, 0xb, 0x6, 0x8}, {0x7, 0x0, 0x0, 0x8}, {}, {}, {0x7, 0x0, 0x5, 0x0}, {0x18, 0x2, 0x2, 0x0, r4}, {}, {0x46, 0x8, 0xfff0, 0x76}}], {{0x7, 0x1, 0xb, 0x8}, {0x6, 0x0, 0x5, 0x8}}, {0x95, 0x0, 0x6000}}, &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0x0, 0xf00, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) 3.28658674s ago: executing program 6 (id=11393): openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0) (async) r0 = socket(0x400000000010, 0x3, 0x0) r1 = socket$unix(0x1, 0x1, 0x0) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r0, &(0x7f00000012c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000005c0)=@newqdisc={0x38, 0x24, 0x4ee4e6a52ff56541, 0x70bd2d, 0xffffffff, {0x0, 0x0, 0x0, r2, {0x0, 0xfff1}, {0xffff, 0xffff}, {0x1, 0xf}}, [@qdisc_kind_options=@q_multiq={{0xb}, {0x8, 0x2, {0x28}}}]}, 0x38}}, 0x0) (async) sendmsg$nl_route_sched(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000440)={&(0x7f0000000280)=@newtfilter={0x44, 0x2c, 0xd27, 0x70bd28, 0x8000, {0x0, 0x0, 0x0, r2, {0x0, 0x7}, {}, {0xa, 0x1}}, [@filter_kind_options=@f_flower={{0xb}, {0x14, 0x2, [@TCA_FLOWER_KEY_ETH_TYPE={0x6, 0x8, 0x8035}, @TCA_FLOWER_KEY_ARP_SIP={0x8, 0x39, @broadcast}]}}]}, 0x44}, 0x1, 0x0, 0x0, 0x80}, 0x20000000) r3 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000040)='cpuacct.usage_sys\x00', 0x275a, 0x0) mmap(&(0x7f0000000000/0x2000)=nil, 0x2000, 0x7, 0x10012, r3, 0x0) (async) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000540)={r3, 0x0, 0xbf, 0xad, &(0x7f0000000300)="e6c61e51ef4647d5793ccbec99af35fa2bf618e163cd3e2ac19710a0befa28f50bb8ffc98f94a9e1b00b8b182ccb9bb164fce457bb64eaca900f57229adcfce97a4959f595396ec00f1f136d422e88e93c18c25c8cd80fcfbee09b14a7cd7294f3429c0ce82bb9ba13983343a2c312e3e72912a2dd2f8dd5439f051d9d08ab1f411632509a4b9c7acea764ab2fcf2bceaed917e71ce808c23d579c63b791a688d610f340bcc6fa3be9851f3cc4cfb5d7a4ad07d1ae64bcf76855583113bd12", &(0x7f0000000480)=""/173, 0x380, 0x0, 0x2e, 0x5b, &(0x7f0000000040)="6c4381b1aa770a803898f0e73aa3d7c2187ae526720366bd0036b6586c19a54b15577462b65057a7d6c3e2568d23", &(0x7f00000003c0)="eec6046e886ad39844a0b0f0d8202e15f9a2110345f8d0927a2fd249d5e8361d8d823d641830f779efd3667ee9f1022b12bc4caf3e0d4f82526d5f1c4b29915279c0db99cc23d2fe5a0d35ead8ef35808973092c5924ed005a9512", 0x7, 0x0, 0x3}, 0x50) 3.231223881s ago: executing program 7 (id=11394): r0 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r0, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000140)={&(0x7f00000007c0)=ANY=[@ANYBLOB="180000ebbc0009604dd0d043788499011fbd7000414affac35f18d04004e00"], 0x18}, 0x1, 0x0, 0x0, 0x1}, 0x0) socket$netlink(0x10, 0x3, 0x0) getsockname$packet(0xffffffffffffffff, &(0x7f0000000080)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @local}, &(0x7f00000000c0)=0x14) bpf$PROG_LOAD(0x5, &(0x7f0000000180)={0x1, 0x4, &(0x7f0000000240)=ANY=[@ANYBLOB="18000000000000000000000000000000611069000000000095000000000000008224891cd72a88b7ad038ff43140b98a2f881454f0d1b5c23adfafbb1328536dc1a869a6324127fc022a78c907ce914a7389cf2ffc5ffe91009cf90e"], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) r1 = socket$netlink(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000340)={'bridge_slave_0\x00', 0x0}) sendmsg$nl_route(r1, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000580)=ANY=[@ANYBLOB="2c0000001100050026bd7000feffffff07000000", @ANYRES32=r2, @ANYBLOB="00000000000000000c001a800800058004000380"], 0x2c}, 0x1, 0x0, 0x0, 0xc00c000}, 0x4) r3 = socket$inet_tcp(0x2, 0x1, 0x0) setsockopt$inet_tcp_int(r3, 0x6, 0x210000000013, &(0x7f00000000c0)=0x100000001, 0x4) setsockopt$inet_tcp_TCP_REPAIR_QUEUE(r3, 0x6, 0x14, &(0x7f0000000140)=0x2, 0x4) connect$inet(r3, &(0x7f0000000180)={0x2, 0x4e21, @local}, 0x10) sendto$inet(r3, &(0x7f0000000d40)='<', 0xffdc, 0x24040005, 0x0, 0x0) recvmmsg(r3, &(0x7f00000033c0)=[{{0x0, 0x0, 0x0}, 0xb43}], 0x1, 0x22, 0x0) bpf$PROG_LOAD(0x5, &(0x7f00000054c0)={0xe, 0x16, &(0x7f0000000340)=ANY=[@ANYBLOB="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"], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x5, '\x00', 0x0, @sk_skb, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x4b}, 0x48) socket$inet_icmp(0x2, 0x2, 0x1) r4 = openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0) ioctl$TUNSETIFF(r4, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x7101}) r5 = socket$unix(0x1, 0x1, 0x0) ioctl$sock_SIOCGIFINDEX(r5, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) r7 = socket(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r7, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000300)=@newqdisc={0x88, 0x24, 0xf0b, 0x70bd26, 0x0, {0x0, 0x0, 0x0, r6, {0x0, 0xffff}, {0xffff, 0xffff}}, [@qdisc_kind_options=@q_mqprio={{0xb}, {0x58, 0x2, {{0x1, [], 0x0, [0x1, 0x2, 0xfffe, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5c4, 0x8000, 0x0, 0x0, 0x3dc], [0x0, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1000]}}}}]}, 0x88}}, 0x20000000) r8 = socket$unix(0x1, 0x1, 0x0) ioctl$sock_SIOCGIFINDEX(r8, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) r10 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r10, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000140)={&(0x7f00000001c0)=@gettclass={0x24, 0x2a, 0x129, 0x0, 0xfffffffd, {0x0, 0x0, 0x0, r9, {0x3, 0xd}, {}, {0x3, 0xfff1}}}, 0x24}}, 0x40004) recvmmsg(r10, &(0x7f0000001480)=[{{0x0, 0x0, &(0x7f0000000880)=[{&(0x7f0000001ac0)=""/4079, 0xfef}, {&(0x7f00000002c0)=""/74, 0x4a}], 0x2}, 0x5d}], 0x1, 0x10022, 0x0) r11 = socket$vsock_stream(0x28, 0x1, 0x0) clock_gettime(0x0, &(0x7f0000003b80)={0x0, 0x0}) recvmmsg(r11, &(0x7f00000039c0)=[{{&(0x7f00000002c0)=@rc, 0x80, &(0x7f0000000480)=[{&(0x7f0000000140)=""/64, 0x40}, {&(0x7f0000000340)=""/22, 0x16}, {&(0x7f0000000380)=""/207, 0xcf}], 0x3, &(0x7f00000005c0)=""/253, 0xfd}, 0x5}, {{&(0x7f00000004c0)=@rxrpc=@in4={0x21, 0x0, 0x2, 0x10, {0x2, 0x0, @initdev}}, 0x80, &(0x7f0000000540)=[{&(0x7f00000006c0)=""/255, 0xff}], 0x1, &(0x7f00000007c0)}, 0x3}, {{&(0x7f0000000800)=@pppol2tpv3={0x18, 0x1, {0x0, 0xffffffffffffffff, {0x2, 0x0, @dev}}}, 0x80, &(0x7f00000009c0)=[{&(0x7f0000000880)=""/60, 0x3c}, {&(0x7f00000008c0)=""/219, 0xdb}], 0x2}, 0x85}, {{0x0, 0x0, &(0x7f0000000bc0)=[{&(0x7f0000000a00)=""/5, 0x5}, {&(0x7f0000000a40)=""/195, 0xc3}, {&(0x7f0000000b40)=""/84, 0x54}], 0x3, &(0x7f0000000c00)=""/170, 0xaa}, 0x5}, {{&(0x7f0000000cc0)=@ieee802154, 0x80, &(0x7f0000002140)=[{&(0x7f0000000d40)=""/34, 0x22}, {&(0x7f0000000d80)=""/244, 0xf4}, {&(0x7f0000000e80)=""/152, 0x98}, {&(0x7f0000000f40)=""/236, 0xec}, {&(0x7f0000001040)=""/186, 0xba}, {&(0x7f0000001100)=""/20, 0x14}, {&(0x7f0000001140)=""/4096, 0x1000}], 0x7, &(0x7f00000021c0)=""/166, 0xa6}, 0x82e8}, {{&(0x7f0000002280)=@sco={0x1f, @none}, 0x80, &(0x7f0000002480)=[{&(0x7f0000002300)=""/120, 0x78}, {&(0x7f0000002380)=""/195, 0xc3}], 0x2}, 0x80000001}, {{0x0, 0x0, &(0x7f0000003840)=[{&(0x7f00000024c0)=""/228, 0xe4}, {&(0x7f00000025c0)=""/4083, 0xff3}, {&(0x7f00000035c0)=""/161, 0xa1}, {&(0x7f0000003680)=""/45, 0x2d}, {&(0x7f00000036c0)=""/35, 0x23}, {&(0x7f0000003700)=""/200, 0xc8}, {&(0x7f0000003800)=""/20, 0x14}], 0x7, &(0x7f00000038c0)=""/200, 0xc8}}], 0x7, 0x122, &(0x7f0000003bc0)={r12, r13+60000000}) 3.066967207s ago: executing program 2 (id=11395): r0 = socket$netlink(0x10, 0x3, 0x10) bind$netlink(r0, &(0x7f0000514ff4)={0x10, 0x0, 0x0, 0x2ffffffff}, 0xc) r1 = socket$igmp6(0xa, 0x3, 0x3a) setsockopt$MRT6_ADD_MFC(r1, 0x29, 0xcb, 0x0, 0x0) r2 = socket$netlink(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f0000000080)={'team0\x00', 0x0}) sendmsg$nl_route(r2, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000540)={&(0x7f0000000240)=ANY=[@ANYBLOB="48000000100005ff00000000000000000000004a", @ANYRES32=0x0, @ANYBLOB="0000000000000000140012800b00010062617461647600000400028008000a00", @ANYRES32=r3], 0x48}}, 0x0) socket$netlink(0x10, 0x3, 0x10) (async) bind$netlink(r0, &(0x7f0000514ff4)={0x10, 0x0, 0x0, 0x2ffffffff}, 0xc) (async) socket$igmp6(0xa, 0x3, 0x3a) (async) setsockopt$MRT6_ADD_MFC(r1, 0x29, 0xcb, 0x0, 0x0) (async) socket$netlink(0x10, 0x3, 0x0) (async) ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f0000000080)={'team0\x00'}) (async) sendmsg$nl_route(r2, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000540)={&(0x7f0000000240)=ANY=[@ANYBLOB="48000000100005ff00000000000000000000004a", @ANYRES32=0x0, @ANYBLOB="0000000000000000140012800b00010062617461647600000400028008000a00", @ANYRES32=r3], 0x48}}, 0x0) (async) 2.708944667s ago: executing program 1 (id=11396): r0 = socket$netlink(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000000)={'gre0\x00', 0x0}) (async) r2 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r2, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000080)=@newlink={0x40, 0x10, 0x421, 0x0, 0x0, {0x0, 0x0, 0x0, r1}, [@IFLA_LINKINFO={0x20, 0x12, 0x0, 0x1, @gre={{0x8}, {0x14, 0x2, 0x0, 0x1, [@IFLA_GRE_ENCAP_DPORT={0x6}, @IFLA_GRE_ENCAP_FLAGS={0x6, 0xf, 0x856}]}}}]}, 0x40}}, 0x0) (async) r3 = openat$tun(0xffffffffffffff9c, &(0x7f0000000100), 0x0, 0x0) ioctl$TUNSETIFF(r3, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x2}) r4 = openat$tun(0xffffffffffffff9c, &(0x7f0000000400), 0x0, 0x0) close(r4) r5 = socket$nl_generic(0x10, 0x3, 0x10) r6 = syz_genetlink_get_family_id$tipc(&(0x7f00000000c0), r5) sendmsg$TIPC_CMD_ENABLE_BEARER(r5, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000300)={&(0x7f00000003c0)=ANY=[@ANYBLOB='8\x00\x00\x00', @ANYRES16=r6, @ANYBLOB="010000000d0000000000010000000000000001410000001c001700000000000000006574683a73797a6b616c6c657230"], 0x38}, 0x1, 0x0, 0x0, 0x44081}, 0x0) (async) ioctl$SIOCSIFHWADDR(r4, 0x8914, &(0x7f0000002280)={'syzkaller0\x00', @multicast}) r7 = openat$tun(0xffffffffffffff9c, &(0x7f0000000080), 0x100, 0x0) close(r7) r8 = socket$unix(0x1, 0x1, 0x0) (async) r9 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r8, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r9, &(0x7f0000000000)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000600)=@newqdisc={0x6c, 0x24, 0x4ee4e6a52ff56541, 0x0, 0xffffffff, {0x0, 0x0, 0x0, r10, {0x0, 0xb}, {0xffff, 0xffff}, {0xb}}, [@qdisc_kind_options=@q_tbf={{0x8}, {0x40, 0x2, [@TCA_TBF_PRATE64={0xc, 0x5, 0xec2cf6a9bb7176e7}, @TCA_TBF_BURST={0x8, 0x6, 0x8}, @TCA_TBF_PARMS={0x28, 0x1, {{0x40, 0x2, 0x80, 0xf6, 0x1000, 0x5}, {0x9, 0x1, 0xc69, 0x7, 0x0, 0x6}, 0x0, 0x2, 0xdb3}}]}}]}, 0x6c}, 0x1, 0x0, 0x0, 0x20008001}, 0x2000400) (async) sendmsg$nl_route_sched(r9, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000140)={&(0x7f00000004c0)=@newqdisc={0x78, 0x24, 0x4ee4e6a52ff56541, 0x70bd26, 0x80000, {0x0, 0x0, 0x0, r10, {}, {0xffe6, 0xb}, {0xfff2, 0x3}}, [@qdisc_kind_options=@q_sfq={{0x8}, {0xffffffffffffffd8, 0x2, {{0x9, 0x1, 0x80000000, 0x3, 0x6f5a}, 0x8, 0x1, 0x5, 0x9, 0x8, 0x9, 0x19, 0x81, 0x0, 0x5, {0x9, 0xfffffff8, 0xfffffff9, 0x4, 0xe, 0x9}}}}]}, 0x78}, 0x1, 0x0, 0x0, 0x48d4}, 0x4048080) ioctl$SIOCSIFHWADDR(r7, 0x8922, &(0x7f0000002280)={'syzkaller0\x00', @random="2b0100004ec6"}) r11 = socket$nl_generic(0x10, 0x3, 0x10) (async) sendmsg$RDMA_NLDEV_CMD_RES_QP_GET(r0, &(0x7f00000002c0)={&(0x7f0000000180)={0x10, 0x0, 0x0, 0x1000}, 0xc, &(0x7f00000001c0)={&(0x7f0000000240)={0x58, 0x140a, 0x200, 0x70bd26, 0x25dfdbfd, "", [@RDMA_NLDEV_ATTR_DEV_INDEX={0x8, 0x1, 0x2}, @RDMA_NLDEV_ATTR_RES_LQPN={0x8, 0x15, 0x2}, @RDMA_NLDEV_ATTR_RES_LQPN={0x8, 0x15, 0x2}, @RDMA_NLDEV_ATTR_DEV_INDEX={0x8, 0x1, 0x2}, @RDMA_NLDEV_ATTR_RES_LQPN={0x8, 0x15, 0x1}, @RDMA_NLDEV_ATTR_DEV_INDEX={0x8}, @RDMA_NLDEV_ATTR_PORT_INDEX={0x8, 0x3, 0x2}, @RDMA_NLDEV_ATTR_RES_LQPN={0x8}, @RDMA_NLDEV_ATTR_RES_LQPN={0x8, 0x15, 0x5}]}, 0x58}, 0x1, 0x0, 0x0, 0x40000}, 0x28000044) (async) r12 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000200), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r11, 0x8933, &(0x7f00000008c0)={'wlan0\x00', 0x0}) sendmsg$NL80211_CMD_NEW_INTERFACE(r11, &(0x7f00000004c0)={0x0, 0x0, &(0x7f0000000980)={&(0x7f00000000c0)=ANY=[@ANYBLOB="00000000e0bc87118a102ff8448ab9c397012f9e46c8de9b7e7e53dbbefe3d8bcb8b33ae05b20f23e9", @ANYRES16=r12, @ANYRES8=r13, @ANYRES32=r13, @ANYBLOB="0c009900000000003e000000140004006e69637666300000000000000000000008000500060000000c00178004000500040004"], 0x138}}, 0x0) 526.398397ms ago: executing program 5 (id=11397): bpf$MAP_CREATE(0x0, &(0x7f0000000340)=@base={0xb, 0xf, 0x200cc, 0x6, 0x5}, 0x48) (async) r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000340)=@base={0xb, 0xf, 0x200cc, 0x6, 0x5}, 0x48) bpf$MAP_UPDATE_BATCH(0x1a, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000000200)='T', &(0x7f0000000240), 0x4af, r0}, 0x38) bpf$MAP_LOOKUP_BATCH(0x18, &(0x7f0000000700)={0x0, 0x0, &(0x7f0000000640), &(0x7f0000000680), 0x728a, r0}, 0x38) (async) bpf$MAP_LOOKUP_BATCH(0x18, &(0x7f0000000700)={0x0, 0x0, &(0x7f0000000640), &(0x7f0000000680), 0x728a, r0}, 0x38) r1 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) sendmsg$NL80211_CMD_JOIN_MESH(0xffffffffffffffff, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000180)=ANY=[@ANYBLOB='@\x00\x00\x00', @ANYRES16, @ANYBLOB="010000000000000000000200000008000300", @ANYRES32], 0x40}}, 0x0) syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) (async) r2 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000240)={0xffffffffffffffff}) ioctl$sock_SIOCETHTOOL(r3, 0x8946, &(0x7f0000000080)={'netdevsim0\x00', &(0x7f00000043c0)=@ethtool_sfeatures={0x51}}) syz_genetlink_get_family_id$nfc(&(0x7f0000000080), r1) (async) r4 = syz_genetlink_get_family_id$nfc(&(0x7f0000000080), r1) sendmsg$NFC_CMD_GET_TARGET(r2, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000200)={&(0x7f00000001c0)={0x14, r4, 0x1}, 0x14}}, 0x24004044) syz_genetlink_get_family_id$nfc(&(0x7f0000000000), r2) r5 = syz_genetlink_get_family_id$nbd(&(0x7f0000000040), r2) sendmsg$NBD_CMD_RECONFIGURE(r1, &(0x7f0000000200)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000180)=ANY=[@ANYBLOB="1c000000", @ANYRES16=r5, @ANYBLOB="010028bd7000fedbdf2501000000080001"], 0x1c}, 0x1, 0x0, 0x0, 0x840}, 0x4) 451.433116ms ago: executing program 6 (id=11398): bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000480)={0xa, 0x3, &(0x7f0000000300)=ANY=[@ANYBLOB="61a000fe00000000691a72000000000095"], &(0x7f0000000000)='syzkaller\x00'}, 0x90) r0 = accept$inet6(0xffffffffffffffff, &(0x7f0000000040)={0xa, 0x0, 0x0, @remote}, &(0x7f0000000100)=0x1c) ioctl$sock_SIOCADDRT(r0, 0x890b, &(0x7f0000000180)={0x0, @ethernet={0x1, @remote}, @ethernet={0x6, @local}, @isdn={0x22, 0x3, 0x2, 0x0, 0x4}, 0x2, 0x0, 0x0, 0x0, 0x68, &(0x7f0000000140)='bond_slave_0\x00', 0x6, 0x1, 0xb60}) r1 = bpf$MAP_CREATE(0x0, &(0x7f0000000080)=@base={0x2, 0x4, 0x6, 0x1}, 0x48) r2 = bpf$BPF_LINK_CREATE_XDP(0x1c, &(0x7f0000000240)={0xffffffffffffffff, 0x0, 0x25, 0x10, @val=@iter={&(0x7f0000000200)=@task, 0x10}}, 0x20) r3 = socket(0x10, 0x3, 0x0) sendto$inet6(r3, &(0x7f0000000080)="7800000018002507b9409b14ffff00000200be040205fe056402040c5c0009003f0020030a0000000d0085a168d0bf46d32345653600648d27000b000a00000049935ade4a460c89b6ec0cff3959547f509058ba86c902007a00004a32000402160008000a0000000000e000e218d1ddf66ed538f2523250", 0x78, 0x0, 0x0, 0xa00000000000000) ioctl$BTRFS_IOC_SET_RECEIVED_SUBVOL(r1, 0xc0c89425, &(0x7f0000000280)={"394ae2701566e3496470e494a243bc68", 0x0, 0x0, {0x1, 0xff}, {0x3, 0x1000}, 0x7, [0xff, 0x1cf, 0xffffffffffffffc9, 0x5, 0x363, 0x6, 0x80, 0x3, 0x800, 0x80000001, 0x44, 0x7, 0x7, 0x8, 0x2, 0xa2]}) ioctl$BTRFS_IOC_SNAP_DESTROY_V2(r2, 0x5000943f, &(0x7f0000000500)={{r0}, r4, 0x2, @unused=[0x3, 0x10, 0x80000001, 0x1], @subvolid=0x8}) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000440)={0x11, 0x10, &(0x7f0000000380)=ANY=[@ANYBLOB="180500000000000000000000ff0000b7080000000000007b8af0ff00000000bfa100000000030007010000f8ffffffbfa40000000000005f040000f0ffffffb70200000800000018230000010000000000000000000000000000751be0e9067f7143cd122fad10bbb544e97431cc32ae83e31ddae9", @ANYRES32=r1, @ANYBLOB="0000000000000000b70500000800000085000000a50000009500000000000000"], &(0x7f0000000000)='GPL\x00', 0x4, 0xe4, &(0x7f0000002b00)=""/228}, 0x90) 344.608508ms ago: executing program 1 (id=11399): mmap(&(0x7f0000000000/0x95c000)=nil, 0x95c000, 0x1000001, 0x8c4b815a5465c2b1, 0xffffffffffffffff, 0x0) mmap(&(0x7f0000000000/0xc00000)=nil, 0xc00000, 0x2000002, 0x42073, 0xffffffffffffffff, 0xaba00000) 284.651224ms ago: executing program 2 (id=11400): r0 = socket(0x2b, 0x1, 0x1) r1 = socket$key(0xf, 0x3, 0x2) sendmsg$key(r1, &(0x7f0000000180)={0x7, 0x0, &(0x7f0000000040)={&(0x7f00000004c0)=ANY=[@ANYBLOB="020100090a000000007fffffff0000000200100000e9000000e9000000000000030005000000000002000000ac1414000000000000000000030006000000000002"], 0x50}}, 0x0) (async) setsockopt$inet6_IPV6_RTHDR(r0, 0x29, 0x39, &(0x7f0000000080)=ANY=[@ANYBLOB="0002020100000000ff2fa3b6f208a2459f39ccc5e7d0b102"], 0x18) (async, rerun: 32) r2 = socket$nl_generic(0x10, 0x3, 0x10) (rerun: 32) sendmsg$nl_generic(r2, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000001680)=ANY=[@ANYBLOB="3000000040000701feffffff00000000017c0000040042800c00018006000600800a00000c00028008000d"], 0x30}, 0x1, 0x0, 0x0, 0x48815}, 0xc000) (async) setsockopt$sock_timeval(r0, 0x1, 0x15, &(0x7f0000000000)={0x0, 0xea60}, 0x10) (async, rerun: 32) connect$inet6(r0, &(0x7f0000000040)={0xa, 0x0, 0x0, @rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x02'}, 0x1c) (async, rerun: 32) setsockopt$inet6_IPV6_HOPOPTS(r0, 0x29, 0x36, &(0x7f0000000100)=ANY=[], 0x8) 283.061852ms ago: executing program 7 (id=11401): r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0) bind$ax25(0xffffffffffffffff, &(0x7f0000000100)={{0x3, @default, 0x5}, [@rose={0xbb, 0xbb, 0xbb, 0x1, 0x0}, @remote={0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0x2}, @null, @remote={0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0x1}, @rose={0xbb, 0xbb, 0xbb, 0x1, 0x0}, @null, @bcast, @netrom={0xbb, 0xbb, 0xbb, 0xbb, 0xbb, 0x0, 0x0}]}, 0x48) ioctl$TUNSETIFF(r1, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x7101}) r2 = socket(0x400000000010, 0x3, 0x0) r3 = socket$unix(0x1, 0x5, 0x0) ioctl$sock_SIOCGIFINDEX(r3, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r2, &(0x7f00000012c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000180)=@newqdisc={0x38, 0x24, 0x4ee4e6a52ff56541, 0x70bd2a, 0x25dfdbfd, {0x0, 0x0, 0x0, r4, {0x0, 0xfff1}, {0xffff, 0xffff}, {0x0, 0xf}}, [@qdisc_kind_options=@q_multiq={{0xb}, {0x8, 0x2, {0x42}}}]}, 0x38}}, 0x0) r5 = socket$unix(0x1, 0x1, 0x0) r6 = socket$unix(0x1, 0x1, 0x0) r7 = socket(0x400000000010, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r6, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r7, &(0x7f0000000580)={0x0, 0x0, &(0x7f00000006c0)={&(0x7f0000003080)=@newtfilter={0x58, 0x2c, 0xd27, 0x30bd29, 0x25dfdc00, {0x0, 0x0, 0x0, r8, {0xffff, 0x5}, {}, {0x7, 0x3}}, [@filter_kind_options=@f_basic={{0xa}, {0x28, 0x2, [@TCA_BASIC_EMATCHES={0x24, 0x2, 0x0, 0x1, [@TCA_EMATCH_TREE_LIST={0x18, 0x2, 0x0, 0x1, [@TCF_EM_CANID={0x14, 0x1, 0x0, 0x0, {{0x4, 0x7, 0x6}, {{0x2, 0x1, 0x1, 0x1}, {0x3}}}}]}, @TCA_EMATCH_TREE_HDR={0x8, 0x1, {0x1}}]}]}}]}, 0x58}, 0x1, 0x0, 0x0, 0x404c000}, 0x0) r9 = openat$tun(0xffffffffffffff9c, &(0x7f0000000400), 0x0, 0x0) close(r9) socket$netlink(0x10, 0x3, 0x0) ioctl$SIOCSIFHWADDR(r9, 0x8914, &(0x7f0000002280)={'syzkaller0\x00', @link_local}) r10 = socket$kcm(0x11, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r5, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$kcm(r10, &(0x7f00000000c0)={&(0x7f0000000380)=@xdp={0x2c, 0x7, r11, 0x3e}, 0x80, &(0x7f0000000080)=[{&(0x7f0000000140)='\r', 0x5dc}], 0x1}, 0x4) r12 = socket$l2tp(0x2, 0x2, 0x73) setsockopt$inet_buf(r12, 0x0, 0x4, &(0x7f0000000180)="6e54922475cc82ac929c77e2efee814133c8cef498f82ac131d79c4a43707d0ada99235f87de5e0c77", 0x29) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000080)={'geneve1\x00'}) r13 = socket$inet6(0xa, 0x2, 0x0) bind$inet6(r13, &(0x7f0000f5dfe4)={0xa, 0x4e20, 0x0, @empty}, 0x1c) recvmmsg(r13, &(0x7f00000004c0), 0x48, 0x820b, 0x0) setsockopt$inet6_int(r13, 0x29, 0x4d, &(0x7f0000000180)=0x8, 0x4) socket$inet6(0xa, 0x2, 0x0) r14 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFNL_MSG_ACCT_NEW(r14, &(0x7f0000000140)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x80000000}, 0xc, &(0x7f0000000040)={&(0x7f00000000c0)={0x7c, 0x0, 0x7, 0x101, 0x0, 0x0, {0x2, 0x0, 0x1}, [@NFACCT_QUOTA={0xc, 0x6, 0x1, 0x0, 0x212e}, @NFACCT_NAME={0x9, 0x1, 'syz0\x00'}, @NFACCT_NAME={0x9, 0x1, 'syz0\x00'}, @NFACCT_FILTER={0xc, 0x7, 0x0, 0x1, [@NFACCT_FILTER_VALUE={0x8, 0x2, 0x1, 0x0, 0x6}]}, @NFACCT_FLAGS={0x8, 0x5, 0x1, 0x0, 0x3}, @NFACCT_PKTS={0xc, 0x2, 0x1, 0x0, 0x8}, @NFACCT_PKTS={0xc, 0x2, 0x1, 0x0, 0xc1}, @NFACCT_NAME={0x9, 0x1, 'syz0\x00'}, @NFACCT_BYTES={0xc, 0x3, 0x1, 0x0, 0x7}]}, 0x7c}, 0x1, 0x0, 0x0, 0x8004000}, 0x8804) 282.724582ms ago: executing program 5 (id=11402): r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='cgroup.controllers\x00', 0x275a, 0x0) write$tun(r0, &(0x7f0000000000)=ANY=[], 0x38) syz_emit_ethernet(0x83, &(0x7f0000000040)=ANY=[@ANYBLOB="aaaaaaaaaaaaaaaaf9ff030486dd601b8b97004d88c19e9ace5ffb2e9fc603dd282100000002ff02000000000000000000000000000104004e20004db0"], 0x0) mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x1, 0x10012, r0, 0x0) r1 = openat$cgroup_ro(r0, &(0x7f0000000040)='freezer.state\x00', 0x275a, 0x0) pipe(&(0x7f0000000300)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$FIDEDUPERANGE(r2, 0xc0189436, &(0x7f00000000c0)={0x0, 0x0, 0x0, 0x0, 0x2}) r3 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r3, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000380)=ANY=[@ANYBLOB="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"], 0x194}}, 0x0) ioctl$SIOCGIFHWADDR(r1, 0x8927, &(0x7f0000000100)={'ipvlan1\x00'}) ioctl$FS_IOC_SETFLAGS(r1, 0x40086602, &(0x7f0000000080)=0x20) openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000040)='cpuset.effective_cpus\x00', 0x275a, 0x0) 204.24853ms ago: executing program 6 (id=11403): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000003c0)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a20000000000a01030000000000000000010000000900010073797a30000000002c000000030a01020000000000000000010000000900030073797a30000000000900010073797a300000000058000000060a010400000000000000000100000008000b40000000000900010073797a3000000000300004802c0001800a00010071756575650000001c000280060002400ffe009b06000140fa"], 0xcc}, 0x1, 0x0, 0x0, 0x24000090}, 0x0) r1 = bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f00000003c0)=ANY=[@ANYBLOB="0200000004000000080000000100000080000000", @ANYRES32=0x0, @ANYBLOB="000004000000000000000000000092d412406b7bf31b3f4e46f0ac1a4000000000000000", @ANYRES32=0x0, @ANYRES32=0x0, @ANYBLOB='\x00'/28], 0xe) bpf$PROG_LOAD(0x5, &(0x7f0000000000)={0x3, 0x10, &(0x7f0000000100)=ANY=[@ANYBLOB="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", @ANYRES32=r1, @ANYBLOB="0000000002000000b70500000800000085000000c50000009500000000000000"], &(0x7f0000000600)='GPL\x00', 0x4, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @sched_cls, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) socket$nl_generic(0x10, 0x3, 0x10) syz_init_net_socket$bt_hci(0x1f, 0x3, 0x5) r2 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) bind$bt_hci(r2, &(0x7f0000000000)={0x1f, 0xffffffffffffffff, 0x3}, 0x6) write$bt_hci(r2, &(0x7f0000000580)=ANY=[@ANYBLOB="3500000002"], 0x8) socket$kcm(0x29, 0x5, 0x0) syz_init_net_socket$bt_hci(0x1f, 0x3, 0x5) close(0x4) syz_open_procfs$namespace(0x0, &(0x7f0000000040)='ns/cgroup\x00') close(0xffffffffffffffff) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f07ebbeef, 0x8031, 0xffffffffffffffff, 0x215eb000) syz_emit_ethernet(0x4a, 0x0, 0x0) r3 = socket$netlink(0x10, 0x3, 0x12) write(r3, &(0x7f0000005c00)='\'', 0x1) close(0x4) syz_open_procfs$namespace(0x0, &(0x7f0000000040)='ns/cgroup\x00') mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f07ebbeef, 0x8031, 0xffffffffffffffff, 0x215eb000) r4 = socket$nl_route(0x10, 0x3, 0x0) r5 = socket(0x14, 0x2, 0x4) r6 = socket(0x2, 0x80805, 0x0) getsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX3(r6, 0x84, 0x6f, &(0x7f00000000c0)={0x0, 0x10, &(0x7f0000000080)=[@in={0x2, 0x0, @private=0xa010101}]}, &(0x7f0000000100)=0x10) ioctl$sock_inet6_tcp_SIOCINQ(r5, 0x61d9, &(0x7f00000000c0)) sendmsg$NFT_BATCH(r3, &(0x7f00000004c0)={&(0x7f0000000380)={0x10, 0x0, 0x0, 0x20000}, 0xc, &(0x7f0000000480)={&(0x7f0000000640)=ANY=[@ANYBLOB="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"], 0x384}}, 0x4098) close(0xffffffffffffffff) socketpair$unix(0x1, 0x2, 0x0, &(0x7f00000000c0)) ioctl$sock_inet_SIOCGIFADDR(r4, 0x8915, &(0x7f0000000340)={'wlan0\x00'}) 75.355605ms ago: executing program 1 (id=11404): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000240)=ANY=[@ANYBLOB="140000001000010000000000000000000500000a28000000000a030000000000000000000a00000708000240000000020900010073797a31000000002c000000030a010100000000000000000a0000070900010073797a31000000000900030073797a320000000014000000110001"], 0x7c}, 0x1, 0x0, 0x0, 0x4000}, 0x0) sendmsg$NFT_BATCH(r0, &(0x7f0000009b40)={0x0, 0x0, &(0x7f0000009b00)={&(0x7f0000000100)=ANY=[@ANYBLOB="14000000100001edebee1e3052f3c3000000000000000000000500000a3c000002090a010400000000000000000a0000040900010073797a310000000008000540000000020900020073797a310000000008000a40fffffffc4c0000000c0a010100000000000000000a0000d30900020073797a31000000000900010073797a310000040020000380100000800c00018006000100d10300000c00008008000340000000022c0000000e0a010200000000000000000a0000000900010073797a3100000000090002007379000011000100000000000000000001000045ea17bd62d7a8059af7b9a38412677f9761cc0adf"], 0xdc}, 0x1, 0x0, 0x0, 0x4000850}, 0x40) r1 = gettid() r2 = socket(0x10, 0x803, 0x0) sendmsg$nl_route(r2, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000140)={&(0x7f00000001c0)=@newlink={0x3c, 0x10, 0x403, 0xfffffff9, 0x25dfdbfe, {0x0, 0x0, 0x74, 0x0, 0x59808, 0x55007}, [@IFLA_NET_NS_PID={0x8, 0x13, r1}, @IFLA_ALT_IFNAME={0x14, 0x35, 'veth0_macvtap\x00'}]}, 0x3c}, 0x1, 0x0, 0x0, 0x4802}, 0x4000010) ioctl$sock_ipv6_tunnel_SIOCADDPRL(r2, 0x89f5, &(0x7f0000000040)={'sit0\x00', &(0x7f00000002c0)={@multicast1, 0x0, 0x0, 0x40, 0x0, [{@loopback}, {}, {@dev}, {@remote}]}}) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000140)={0x1e, 0x5, &(0x7f0000000000)=@framed={{}, [@map_val={0x18, 0x340e47394361591a, 0x2, 0x0, 0x1, 0x0, 0x0, 0x0, 0x1}]}, &(0x7f0000000040)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x24}, 0x94) setsockopt$netlink_NETLINK_LISTEN_ALL_NSID(r0, 0x10e, 0x8, &(0x7f0000000000)=0x6, 0x4) 71.964062ms ago: executing program 5 (id=11405): sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000040)=@newtaction={0x6c, 0x30, 0x1, 0x70bd28, 0x0, {}, [{0x58, 0x1, [@m_skbmod={0x54, 0x1, 0x0, 0x0, {{0xb}, {0x28, 0x2, 0x0, 0x1, [@TCA_SKBMOD_PARMS={0x24, 0x2, {{0xffffffff, 0x10001, 0xffffffffffffffff, 0x3c, 0x3}, 0x400000000a}}]}, {0x4}, {0xc}, {0xc}}}]}]}, 0x6c}, 0x1, 0x0, 0x0, 0x4}, 0x0) syz_emit_ethernet(0x6e, &(0x7f0000000040)=ANY=[@ANYBLOB="0180c2000002aaaaaaaaaaaa08004500006000000000002f9078640101000000000024806558000000000000000010000800000086dd"], 0x0) (async) r0 = socket$kcm(0x10, 0x2, 0x10) (async) sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000340)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a20000000000a03000000000000000000070000040900010073797a30000000009c000000090a010400000000000000000700000308000a40000000000900020073797a30000000000900010073797a3000000000080005400000000d58001280200001800e000100636f6e6e6c696d69740000000c0002800800014000000008200001800e000100636f6e6e6c696d69740000000c00028008000140000000001400017b090001006cdbf80789f3f947dd000280080003"], 0xe4}, 0x1, 0x0, 0x0, 0x8001}, 0x20050840) sendmsg$kcm(r0, &(0x7f0000000000)={0x0, 0xd18c9b25, &(0x7f0000000080)=[{&(0x7f0000000040)="e03f030041000b05d25a806c8c6394f90324fc60100000000a000200053582c137153e3704020180fc5409000c00", 0x33fe0}], 0x1}, 0x0) 0s ago: executing program 2 (id=11406): r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="0a00000004000000ff0f000007"], 0x48) bpf$PROG_LOAD(0x5, &(0x7f0000000500)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r1, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000000000000b70400000000000085000000c300000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$MAP_UPDATE_CONST_STR(0x2, &(0x7f0000000100)={{r1}, &(0x7f0000000080), &(0x7f00000000c0)='%pS \x00'}, 0x20) r2 = bpf$PROG_LOAD(0x5, &(0x7f0000000800)={0x6, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0xc, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, @fallback=0x4, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000000)={r2, 0x2000000, 0xe, 0x0, &(0x7f00000004c0)="630b008646dc3f0adf33c9f7b986", 0x0, 0x1ff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x2}, 0x50) r3 = socket$inet_tcp(0x2, 0x1, 0x0) setsockopt$inet_tcp_int(r3, 0x6, 0x18, &(0x7f0000000280)=0x41000, 0x4) shutdown(r3, 0x0) recvmmsg(r3, &(0x7f0000000900)=[{{&(0x7f0000000500)=@x25, 0x0, &(0x7f00000003c0)=[{&(0x7f00000001c0)=""/31, 0xdacca170ed1d3557}, {&(0x7f0000000740)=""/184}, {&(0x7f0000000580)=""/128}, {&(0x7f0000000800)=""/123}], 0x0, &(0x7f0000000880)=""/108}}], 0x542, 0x0, 0x0) sendmsg$nl_route(r0, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000480)=ANY=[@ANYBLOB="2000000069000b00000000000000000000000000000000e7070001"], 0x20}, 0x1, 0x200000000000000}, 0x0) kernel console output (not intermixed with test programs): CX: 00007f55ac59c799 [ 1013.507145][T11092] RDX: 0000000000000000 RSI: 0000200000000200 RDI: 0000000000000003 [ 1013.507157][T11092] RBP: 00007f55ad497090 R08: 0000000000000000 R09: 0000000000000000 [ 1013.507170][T11092] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 1013.507182][T11092] R13: 00007f55ac816038 R14: 00007f55ac815fa0 R15: 00007fff1a89eef8 [ 1013.507215][T11092] [ 1013.773229][ C1] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1013.937425][T26215] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1014.075668][T11098] bond10: Unable to set down delay as MII monitoring is disabled [ 1014.100565][T11098] bond10 (unregistering): Released all slaves [ 1014.303076][T14190] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1014.501193][T11135] netlink: 'syz.3.10056': attribute type 8 has an invalid length. [ 1014.551484][T11140] xt_CT: You must specify a L4 protocol and not use inversions on it [ 1014.688515][T11145] IPv6: sit2: Disabled Multicast RS [ 1014.697381][T11145] sit2: entered allmulticast mode [ 1014.773061][T11147] __nla_validate_parse: 8 callbacks suppressed [ 1014.781527][T11147] netlink: 4 bytes leftover after parsing attributes in process `syz.3.10061'. [ 1014.795530][T11147] openvswitch: netlink: Unknown nsh attribute 0 [ 1014.853449][ C1] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1014.954450][T11156] 8021q: adding VLAN 0 to HW filter on device bond10 [ 1015.014307][T13048] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1015.144408][T11177] netlink: 'syz.3.10072': attribute type 13 has an invalid length. [ 1015.152707][T11177] netlink: 'syz.3.10072': attribute type 58 has an invalid length. [ 1015.161092][T11177] netlink: 152 bytes leftover after parsing attributes in process `syz.3.10072'. [ 1015.186916][T11178] netlink: 72 bytes leftover after parsing attributes in process `syz.5.10071'. [ 1015.296109][T11186] Cannot find del_set index 49151 as target [ 1015.306167][T11186] netlink: 'syz.3.10076': attribute type 21 has an invalid length. [ 1015.314869][T11186] IPv6: RTM_NEWROUTE with no NLM_F_CREATE or NLM_F_REPLACE [ 1015.322159][T11186] IPv6: NLM_F_CREATE should be set when creating new route [ 1015.329817][T11186] IPv6: NLM_F_CREATE should be set when creating new route [ 1015.337119][T11186] IPv6: NLM_F_CREATE should be set when creating new route [ 1015.536929][T11193] IPVS: set_ctl: invalid protocol: 47 172.20.20.50:20001 [ 1015.622579][T11201] FAULT_INJECTION: forcing a failure. [ 1015.622579][T11201] name failslab, interval 1, probability 0, space 0, times 0 [ 1015.635541][T11201] CPU: 0 UID: 0 PID: 11201 Comm: syz.3.10082 Not tainted syzkaller #0 PREEMPT(full) [ 1015.635572][T11201] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 02/12/2026 [ 1015.635584][T11201] Call Trace: [ 1015.635592][T11201] [ 1015.635602][T11201] dump_stack_lvl+0xe8/0x150 [ 1015.635638][T11201] should_fail_ex+0x412/0x560 [ 1015.635672][T11201] should_failslab+0xa8/0x100 [ 1015.635701][T11201] kmem_cache_alloc_node_noprof+0x8f/0x690 [ 1015.635726][T11201] ? __alloc_skb+0x1d0/0x7d0 [ 1015.635752][T11201] ? __local_bh_enable_ip+0xd0/0x130 [ 1015.635794][T11201] __alloc_skb+0x1d0/0x7d0 [ 1015.635823][T11201] ? netlink_ack_tlv_len+0x6c/0x210 [ 1015.635854][T11201] netlink_ack+0x146/0xa50 [ 1015.635878][T11201] ? __pfx_genl_rcv_msg+0x10/0x10 [ 1015.635904][T11201] ? __lock_acquire+0x6b5/0x2cf0 [ 1015.635943][T11201] netlink_rcv_skb+0x2b6/0x4b0 [ 1015.635973][T11201] ? __pfx_genl_rcv_msg+0x10/0x10 [ 1015.636003][T11201] ? __pfx_netlink_rcv_skb+0x10/0x10 [ 1015.636050][T11201] ? down_read+0x272/0x2e0 [ 1015.636072][T11201] ? genl_rcv+0xd/0x40 [ 1015.636095][T11201] genl_rcv+0x28/0x40 [ 1015.636114][T11201] netlink_unicast+0x80f/0x9b0 [ 1015.636150][T11201] ? __pfx_netlink_unicast+0x10/0x10 [ 1015.636179][T11201] ? netlink_sendmsg+0x650/0xb40 [ 1015.636204][T11201] ? skb_put+0x11b/0x210 [ 1015.636238][T11201] netlink_sendmsg+0x813/0xb40 [ 1015.636279][T11201] ? __pfx_netlink_sendmsg+0x10/0x10 [ 1015.636312][T11201] ? aa_sock_msg_perm+0xf1/0x1b0 [ 1015.636341][T11201] ? bpf_lsm_socket_sendmsg+0x9/0x20 [ 1015.636370][T11201] ____sys_sendmsg+0x972/0x9f0 [ 1015.636402][T11201] ? __pfx_____sys_sendmsg+0x10/0x10 [ 1015.636435][T11201] ? import_iovec+0x73/0xa0 [ 1015.636471][T11201] ___sys_sendmsg+0x2a5/0x360 [ 1015.636499][T11201] ? __pfx____sys_sendmsg+0x10/0x10 [ 1015.636565][T11201] ? __fget_files+0x2a/0x420 [ 1015.636595][T11201] ? __fget_files+0x3a0/0x420 [ 1015.636637][T11201] __x64_sys_sendmsg+0x1bd/0x2a0 [ 1015.636659][T11201] ? __pfx___x64_sys_sendmsg+0x10/0x10 [ 1015.636691][T11201] ? __pfx_ksys_write+0x10/0x10 [ 1015.636729][T11201] do_syscall_64+0x14d/0xf80 [ 1015.636748][T11201] ? trace_irq_disable+0x3b/0x150 [ 1015.636786][T11201] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1015.636809][T11201] ? clear_bhb_loop+0x40/0x90 [ 1015.636836][T11201] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1015.636857][T11201] RIP: 0033:0x7fa56259c799 [ 1015.636879][T11201] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 1015.636897][T11201] RSP: 002b:00007fa5607f6028 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 1015.636921][T11201] RAX: ffffffffffffffda RBX: 00007fa562815fa0 RCX: 00007fa56259c799 [ 1015.636937][T11201] RDX: 0000000000000000 RSI: 0000200000000200 RDI: 0000000000000003 [ 1015.636950][T11201] RBP: 00007fa5607f6090 R08: 0000000000000000 R09: 0000000000000000 [ 1015.636964][T11201] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000002 [ 1015.636977][T11201] R13: 00007fa562816038 R14: 00007fa562815fa0 R15: 00007ffdf3a5ac28 [ 1015.637011][T11201] [ 1015.718266][T11206] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 1015.737718][T11199] netlink: 52 bytes leftover after parsing attributes in process `syz.2.10080'. [ 1015.844578][T11209] syz.1.10085 uses old SIOCAX25GETINFO [ 1015.858119][T11199] netlink: 12 bytes leftover after parsing attributes in process `syz.2.10080'. [ 1015.858162][T11199] netlink: 16 bytes leftover after parsing attributes in process `syz.2.10080'. [ 1015.879952][T11211] netlink: 'syz.3.10086': attribute type 1 has an invalid length. [ 1015.903591][ C1] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1015.945882][T11211] 8021q: adding VLAN 0 to HW filter on device bond4 [ 1016.039374][T11215] bond4: entered allmulticast mode [ 1016.141587][T11219] netlink: 16 bytes leftover after parsing attributes in process `syz.3.10088'. [ 1016.328899][T11229] syz_tun: entered allmulticast mode [ 1016.349332][T11226] syz_tun: left allmulticast mode [ 1016.459285][T11233] x_tables: ip_tables: TCPOPTSTRIP target: only valid in mangle table, not security [ 1017.196876][T11268] netlink: 4 bytes leftover after parsing attributes in process `syz.5.10102'. [ 1017.209014][T11270] netlink: 'syz.2.10103': attribute type 1 has an invalid length. [ 1017.209052][T11270] netlink: 224 bytes leftover after parsing attributes in process `syz.2.10103'. [ 1017.274501][T11272] IPv6: NLM_F_CREATE should be specified when creating new route [ 1017.290609][T11272] netlink: 4 bytes leftover after parsing attributes in process `syz.2.10103'. [ 1017.300821][T11272] lo: Caught tx_queue_len zero misconfig [ 1017.557520][T11285] FAULT_INJECTION: forcing a failure. [ 1017.557520][T11285] name failslab, interval 1, probability 0, space 0, times 0 [ 1017.573512][T11196] Bluetooth: hci2: command 0x0405 tx timeout [ 1017.590696][T11285] CPU: 0 UID: 0 PID: 11285 Comm: syz.2.10108 Not tainted syzkaller #0 PREEMPT(full) [ 1017.590724][T11285] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 02/12/2026 [ 1017.590736][T11285] Call Trace: [ 1017.590746][T11285] [ 1017.590755][T11285] dump_stack_lvl+0xe8/0x150 [ 1017.590790][T11285] should_fail_ex+0x412/0x560 [ 1017.590824][T11285] should_failslab+0xa8/0x100 [ 1017.590850][T11285] ? skb_clone+0x212/0x3a0 [ 1017.590869][T11285] kmem_cache_alloc_noprof+0x87/0x650 [ 1017.590902][T11285] skb_clone+0x212/0x3a0 [ 1017.590929][T11285] __netlink_deliver_tap+0x404/0x850 [ 1017.590970][T11285] ? netlink_deliver_tap+0x2e/0x1b0 [ 1017.591000][T11285] netlink_deliver_tap+0x19c/0x1b0 [ 1017.591028][T11285] netlink_sendskb+0x68/0x140 [ 1017.591056][T11285] netlink_unicast+0x3a3/0x9b0 [ 1017.591091][T11285] ? __pfx_netlink_unicast+0x10/0x10 [ 1017.591138][T11285] netlink_rcv_skb+0x2b6/0x4b0 [ 1017.591166][T11285] ? __pfx_genl_rcv_msg+0x10/0x10 [ 1017.591191][T11285] ? __pfx_netlink_rcv_skb+0x10/0x10 [ 1017.591241][T11285] ? down_read+0x272/0x2e0 [ 1017.591262][T11285] ? genl_rcv+0xd/0x40 [ 1017.591284][T11285] genl_rcv+0x28/0x40 [ 1017.591303][T11285] netlink_unicast+0x80f/0x9b0 [ 1017.591339][T11285] ? __pfx_netlink_unicast+0x10/0x10 [ 1017.591367][T11285] ? netlink_sendmsg+0x650/0xb40 [ 1017.591393][T11285] ? skb_put+0x11b/0x210 [ 1017.591426][T11285] netlink_sendmsg+0x813/0xb40 [ 1017.591467][T11285] ? __pfx_netlink_sendmsg+0x10/0x10 [ 1017.591500][T11285] ? aa_sock_msg_perm+0xf1/0x1b0 [ 1017.591530][T11285] ? bpf_lsm_socket_sendmsg+0x9/0x20 [ 1017.591558][T11285] ____sys_sendmsg+0x972/0x9f0 [ 1017.591592][T11285] ? __pfx_____sys_sendmsg+0x10/0x10 [ 1017.591626][T11285] ? import_iovec+0x73/0xa0 [ 1017.591663][T11285] ___sys_sendmsg+0x2a5/0x360 [ 1017.591691][T11285] ? __pfx____sys_sendmsg+0x10/0x10 [ 1017.591755][T11285] ? __fget_files+0x2a/0x420 [ 1017.591785][T11285] ? __fget_files+0x3a0/0x420 [ 1017.591828][T11285] __x64_sys_sendmsg+0x1bd/0x2a0 [ 1017.591853][T11285] ? __pfx___x64_sys_sendmsg+0x10/0x10 [ 1017.591887][T11285] ? __pfx_ksys_write+0x10/0x10 [ 1017.591926][T11285] do_syscall_64+0x14d/0xf80 [ 1017.591946][T11285] ? trace_irq_disable+0x3b/0x150 [ 1017.591975][T11285] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1017.591997][T11285] ? clear_bhb_loop+0x40/0x90 [ 1017.592024][T11285] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1017.592045][T11285] RIP: 0033:0x7f55ac59c799 [ 1017.592066][T11285] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 1017.592085][T11285] RSP: 002b:00007f55ad497028 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 1017.592117][T11285] RAX: ffffffffffffffda RBX: 00007f55ac815fa0 RCX: 00007f55ac59c799 [ 1017.592133][T11285] RDX: 0000000000000000 RSI: 0000200000000200 RDI: 0000000000000003 [ 1017.592147][T11285] RBP: 00007f55ad497090 R08: 0000000000000000 R09: 0000000000000000 [ 1017.592161][T11285] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000002 [ 1017.592174][T11285] R13: 00007f55ac816038 R14: 00007f55ac815fa0 R15: 00007fff1a89eef8 [ 1017.592212][T11285] [ 1017.973642][ C1] net_ratelimit: 5 callbacks suppressed [ 1017.973663][ C1] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1018.153588][T26215] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1018.339215][T11319] ip6tnl0: Caught tx_queue_len zero misconfig [ 1019.013268][ C1] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1019.032397][T11346] syzkaller0: entered promiscuous mode [ 1019.039063][T11346] syzkaller0: entered allmulticast mode [ 1019.058925][T11352] vlan5: entered allmulticast mode [ 1019.073540][T11352] bond0: entered allmulticast mode [ 1019.085966][T11352] bridge1: entered allmulticast mode [ 1019.093177][T11196] Bluetooth: hci4: unexpected cc 0x0c03 length: 249 > 1 [ 1019.118189][T11196] Bluetooth: hci4: unexpected cc 0x1003 length: 249 > 9 [ 1019.127957][T11196] Bluetooth: hci4: unexpected cc 0x1001 length: 249 > 9 [ 1019.145961][T11196] Bluetooth: hci4: unexpected cc 0x0c23 length: 249 > 4 [ 1019.154581][T11196] Bluetooth: hci4: unexpected cc 0x0c38 length: 249 > 2 [ 1019.173983][T26215] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1019.344449][T14180] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1020.063952][ C1] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1020.098254][T11388] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 1020.182673][T11385] netlink: 'syz.1.10136': attribute type 6 has an invalid length. [ 1020.191225][T11385] __nla_validate_parse: 7 callbacks suppressed [ 1020.191248][T11385] netlink: 8 bytes leftover after parsing attributes in process `syz.1.10136'. [ 1020.217617][T26215] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1021.254394][T11196] Bluetooth: hci4: command tx timeout [ 1021.261039][T14193] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1021.271665][T26215] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1021.373322][T11373] netlink: 8 bytes leftover after parsing attributes in process `syz.5.10134'. [ 1021.396828][T11385] workqueue: Failed to create a rescuer kthread for wq "bond1": -EINTR [ 1021.471566][T11358] ip6_vti0 speed is unknown, defaulting to 1000 [ 1021.847250][T11411] netlink: 8 bytes leftover after parsing attributes in process `syz.2.10141'. [ 1021.861794][T11413] netlink: 28 bytes leftover after parsing attributes in process `syz.3.10144'. [ 1022.192740][T11428] smc: net device team0 applied user defined pnetid SYZ2 [ 1022.529620][T11456] netlink: 'syz.3.10157': attribute type 1 has an invalid length. [ 1022.544045][T11456] netlink: 224 bytes leftover after parsing attributes in process `syz.3.10157'. [ 1022.581261][T11461] xt_TCPMSS: Only works on TCP SYN packets [ 1022.997039][T11358] chnl_net:caif_netlink_parms(): no params data found [ 1023.013523][ C1] net_ratelimit: 3 callbacks suppressed [ 1023.013550][ C1] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1023.061113][T11469] netlink: 4 bytes leftover after parsing attributes in process `syz.2.10159'. [ 1023.093677][T11469] netlink: 8 bytes leftover after parsing attributes in process `syz.2.10159'. [ 1023.229359][T11476] netlink: 4 bytes leftover after parsing attributes in process `syz.3.10161'. [ 1023.344419][T11196] Bluetooth: hci4: command tx timeout [ 1023.350405][T26215] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1023.398143][T11358] bridge0: port 1(bridge_slave_0) entered blocking state [ 1023.405955][T11358] bridge0: port 1(bridge_slave_0) entered disabled state [ 1023.414426][T11358] bridge_slave_0: entered allmulticast mode [ 1023.422584][T11358] bridge_slave_0: entered promiscuous mode [ 1023.433746][T11358] bridge0: port 2(bridge_slave_1) entered blocking state [ 1023.441237][T11358] bridge0: port 2(bridge_slave_1) entered disabled state [ 1023.448983][T11358] bridge_slave_1: entered allmulticast mode [ 1023.457352][T11358] bridge_slave_1: entered promiscuous mode [ 1023.509583][T11358] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 1023.519693][T11492] openvswitch: netlink: Key type 158 is out of range max 32 [ 1023.539266][T11493] netlink: 83 bytes leftover after parsing attributes in process `syz.2.10162'. [ 1023.561745][T11358] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 1023.650862][T11358] team0: Port device team_slave_0 added [ 1023.660697][T11358] team0: Port device team_slave_1 added [ 1023.752012][T11358] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 1023.774664][T11358] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 1023.852487][T11358] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 1023.886412][T11358] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 1023.890886][T11511] netlink: 256 bytes leftover after parsing attributes in process `syz.1.10169'. [ 1023.901054][T11358] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 1023.936071][T11358] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 1024.053255][ C1] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1024.165658][T11358] hsr_slave_0: entered promiscuous mode [ 1024.195177][T11358] hsr_slave_1: entered promiscuous mode [ 1024.217109][T11358] debugfs: 'hsr0' already exists in 'hsr' [ 1024.223038][T11358] Cannot create hsr debugfs directory [ 1024.231038][T11524] netlink: 'syz.3.10174': attribute type 3 has an invalid length. [ 1024.377919][ T2141] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1024.389770][ T6739] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1024.398886][ T6428] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1024.407984][ T2141] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1024.409115][T11537] netlink: 'syz.1.10178': attribute type 21 has an invalid length. [ 1024.520674][T11534] syzkaller0: entered promiscuous mode [ 1024.535186][T11534] syzkaller0: entered allmulticast mode [ 1024.541913][T14181] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1024.549169][T11534] tc action pedit offset must be on 32 bit boundaries [ 1024.557403][T11534] tc action pedit offset must be on 32 bit boundaries [ 1024.564337][T11534] tc action pedit offset must be on 32 bit boundaries [ 1024.571174][T11534] tc action pedit offset must be on 32 bit boundaries [ 1024.578057][T11534] tc action pedit offset must be on 32 bit boundaries [ 1024.584839][T11534] tc action pedit offset must be on 32 bit boundaries [ 1024.591629][T11534] tc action pedit offset must be on 32 bit boundaries [ 1024.598460][T11534] tc action pedit offset must be on 32 bit boundaries [ 1024.605476][T11534] tc action pedit offset must be on 32 bit boundaries [ 1024.612343][T11534] tc action pedit offset must be on 32 bit boundaries [ 1024.619187][T11534] 0: reclassify loop, rule prio 0, protocol 800 [ 1024.681846][T11545] netlink: 'syz.1.10182': attribute type 15 has an invalid length. [ 1024.913588][T11545] netlink: 'syz.1.10182': attribute type 15 has an invalid length. [ 1024.924651][T14193] netdevsim netdevsim1 netdevsim0: set [0, 1] type 1 family 0 port 256 - 0 [ 1024.963673][T14193] netdevsim netdevsim1 netdevsim1: set [0, 1] type 1 family 0 port 256 - 0 [ 1025.086107][T14193] netdevsim netdevsim1 netdevsim2: set [0, 1] type 1 family 0 port 256 - 0 [ 1025.102370][T11561] netlink: 'syz.2.10186': attribute type 4 has an invalid length. [ 1025.106834][T14193] netdevsim netdevsim1 netdevsim3: set [0, 1] type 1 family 0 port 256 - 0 [ 1025.209167][T11570] __nla_validate_parse: 6 callbacks suppressed [ 1025.209190][T11570] netlink: 8 bytes leftover after parsing attributes in process `syz.3.10188'. [ 1025.296472][T11358] netdevsim netdevsim6 netdevsim0: renamed from eth0 [ 1025.339474][T11358] netdevsim netdevsim6 netdevsim1: renamed from eth1 [ 1025.377582][T11358] netdevsim netdevsim6 netdevsim2: renamed from eth2 [ 1025.413869][T11196] Bluetooth: hci4: command tx timeout [ 1025.436834][T11358] netdevsim netdevsim6 netdevsim3: renamed from eth3 [ 1025.498118][T11577] syzkaller0: entered promiscuous mode [ 1025.504600][T11577] syzkaller0: entered allmulticast mode [ 1025.651471][T11596] netlink: 4 bytes leftover after parsing attributes in process `syz.3.10193'. [ 1025.669556][T11598] FAULT_INJECTION: forcing a failure. [ 1025.669556][T11598] name fail_usercopy, interval 1, probability 0, space 0, times 1 [ 1025.701717][T11598] CPU: 1 UID: 0 PID: 11598 Comm: syz.1.10194 Not tainted syzkaller #0 PREEMPT(full) [ 1025.701746][T11598] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 02/12/2026 [ 1025.701759][T11598] Call Trace: [ 1025.701769][T11598] [ 1025.701778][T11598] dump_stack_lvl+0xe8/0x150 [ 1025.701814][T11598] should_fail_ex+0x412/0x560 [ 1025.701848][T11598] _copy_to_user+0x31/0xb0 [ 1025.701873][T11598] simple_read_from_buffer+0xe1/0x170 [ 1025.701910][T11598] proc_fail_nth_read+0x1bb/0x230 [ 1025.701943][T11598] ? __pfx_proc_fail_nth_read+0x10/0x10 [ 1025.701978][T11598] ? rw_verify_area+0x2a6/0x4d0 [ 1025.702000][T11598] ? __pfx_proc_fail_nth_read+0x10/0x10 [ 1025.702032][T11598] vfs_read+0x20c/0xa70 [ 1025.702053][T11598] ? fdget_pos+0x246/0x320 [ 1025.702098][T11598] ? __pfx___mutex_lock+0x10/0x10 [ 1025.702121][T11598] ? __pfx_vfs_read+0x10/0x10 [ 1025.702147][T11598] ? __fget_files+0x2a/0x420 [ 1025.702183][T11598] ? __fget_files+0x3a0/0x420 [ 1025.702212][T11598] ? __fget_files+0x2a/0x420 [ 1025.702253][T11598] ksys_read+0x150/0x270 [ 1025.702280][T11598] ? __pfx_ksys_read+0x10/0x10 [ 1025.702317][T11598] do_syscall_64+0x14d/0xf80 [ 1025.702337][T11598] ? trace_irq_disable+0x3b/0x150 [ 1025.702366][T11598] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1025.702388][T11598] ? clear_bhb_loop+0x40/0x90 [ 1025.702415][T11598] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1025.702437][T11598] RIP: 0033:0x7f1e9855cfce [ 1025.702458][T11598] Code: 08 0f 85 a5 a8 ff ff 49 89 fb 48 89 f0 48 89 d7 48 89 ce 4c 89 c2 4d 89 ca 4c 8b 44 24 08 4c 8b 4c 24 10 4c 89 5c 24 08 0f 05 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 80 00 00 00 00 48 83 ec 08 [ 1025.702476][T11598] RSP: 002b:00007f1e994a6fe8 EFLAGS: 00000246 ORIG_RAX: 0000000000000000 [ 1025.702499][T11598] RAX: ffffffffffffffda RBX: 00007f1e994a76c0 RCX: 00007f1e9855cfce [ 1025.702515][T11598] RDX: 000000000000000f RSI: 00007f1e994a70a0 RDI: 0000000000000004 [ 1025.702529][T11598] RBP: 00007f1e994a7090 R08: 0000000000000000 R09: 0000000000000000 [ 1025.702542][T11598] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 1025.702555][T11598] R13: 00007f1e98816038 R14: 00007f1e98815fa0 R15: 00007ffd34abf678 [ 1025.702593][T11598] [ 1025.961884][T11358] 8021q: adding VLAN 0 to HW filter on device bond0 [ 1026.073592][T11358] 8021q: adding VLAN 0 to HW filter on device team0 [ 1026.095205][T14181] bridge0: port 1(bridge_slave_0) entered blocking state [ 1026.102319][T14181] bridge0: port 1(bridge_slave_0) entered forwarding state [ 1026.188960][T14181] bridge0: port 2(bridge_slave_1) entered blocking state [ 1026.196123][T14181] bridge0: port 2(bridge_slave_1) entered forwarding state [ 1026.924510][T11640] netlink: 4 bytes leftover after parsing attributes in process `syz.2.10207'. [ 1027.140443][T11358] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 1027.319994][T11652] team0: Device lo is loopback device. Loopback devices can't be added as a team port [ 1027.355701][T11655] netlink: 12 bytes leftover after parsing attributes in process `syz.5.10212'. [ 1027.396306][T11655] netlink: 12 bytes leftover after parsing attributes in process `syz.5.10212'. [ 1027.433743][T11655] netlink: 12 bytes leftover after parsing attributes in process `syz.5.10212'. [ 1027.503190][T11196] Bluetooth: hci4: command tx timeout [ 1027.555780][T11663] input: Bluetooth HID Boot Protocol Device as /devices/virtual/bluetooth/hci4/hci4:200/input5 [ 1027.628412][T11672] netlink: 24 bytes leftover after parsing attributes in process `syz.3.10216'. [ 1027.881459][T11686] netlink: 16 bytes leftover after parsing attributes in process `syz.3.10221'. [ 1027.915997][T11686] netlink: 12 bytes leftover after parsing attributes in process `syz.3.10221'. [ 1028.009521][T11358] veth0_vlan: entered promiscuous mode [ 1028.049920][T11358] veth1_vlan: entered promiscuous mode [ 1028.169835][T11358] veth0_macvtap: entered promiscuous mode [ 1028.203912][T11358] veth1_macvtap: entered promiscuous mode [ 1028.213477][ C1] net_ratelimit: 8 callbacks suppressed [ 1028.213499][ C1] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1028.241006][T11705] netlink: 212324 bytes leftover after parsing attributes in process `syz.3.10227'. [ 1028.258553][T11707] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check. [ 1028.278898][T11358] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 1028.304515][T11358] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 1028.350769][ T6739] netdevsim netdevsim6 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 1028.361279][ T6739] netdevsim netdevsim6 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 1028.427026][ T6739] netdevsim netdevsim6 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 1028.458805][ T6739] netdevsim netdevsim6 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 1028.548013][ T2141] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1028.660954][T14190] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 1028.698867][T14190] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 1028.746367][T14193] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 1028.767856][T14193] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 1029.143851][T11745] netlink: 'syz.5.10240': attribute type 39 has an invalid length. [ 1029.212176][T11749] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 1029.253276][ C1] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1029.267367][T11749] delete_channel: no stack [ 1029.580356][T26215] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1029.671413][T11770] ip6gre1: entered promiscuous mode [ 1029.693286][T11770] ip6gre1: entered allmulticast mode [ 1030.181593][T11808] netlink: 'syz.1.10257': attribute type 16 has an invalid length. [ 1030.201841][T11807] netlink: 'syz.1.10257': attribute type 16 has an invalid length. [ 1030.227896][T11808] netlink: 'syz.1.10257': attribute type 17 has an invalid length. [ 1030.249719][T11807] netlink: 'syz.1.10257': attribute type 17 has an invalid length. [ 1030.293733][ C1] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1030.307254][ T150] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1030.392317][T11808] A link change request failed with some changes committed already. Interface caif0 may have been left with an inconsistent configuration, please check. [ 1030.464424][T11807] A link change request failed with some changes committed already. Interface caif0 may have been left with an inconsistent configuration, please check. [ 1030.533052][T11833] wireguard: wg1: Could not create IPv4 socket [ 1030.787193][T11844] __nla_validate_parse: 12 callbacks suppressed [ 1030.787215][T11844] netlink: 56 bytes leftover after parsing attributes in process `syz.2.10267'. [ 1031.092090][T11858] netlink: 'syz.1.10273': attribute type 2 has an invalid length. [ 1031.103033][T11858] netlink: 'syz.1.10273': attribute type 2 has an invalid length. [ 1031.127477][T11858] netlink: 'syz.1.10273': attribute type 2 has an invalid length. [ 1031.153779][T11858] netlink: 'syz.1.10273': attribute type 1 has an invalid length. [ 1031.172341][T11858] netlink: 'syz.1.10273': attribute type 2 has an invalid length. [ 1031.374415][T11876] netlink: 20 bytes leftover after parsing attributes in process `syz.3.10279'. [ 1031.432618][T11882] netlink: 12 bytes leftover after parsing attributes in process `syz.1.10281'. [ 1031.773802][T11897] syzkaller0: entered promiscuous mode [ 1031.779430][T11897] syzkaller0: entered allmulticast mode [ 1031.944743][T11910] netlink: 8 bytes leftover after parsing attributes in process `syz.6.10286'. [ 1032.564670][T11933] netlink: 12 bytes leftover after parsing attributes in process `syz.2.10291'. [ 1032.699678][T11933] 8021q: adding VLAN 0 to HW filter on device bond6 [ 1033.002959][T11963] netlink: 8 bytes leftover after parsing attributes in process `syz.2.10301'. [ 1033.149675][T11970] netlink: 16 bytes leftover after parsing attributes in process `syz.1.10303'. [ 1033.201417][T11970] netlink: 16 bytes leftover after parsing attributes in process `syz.1.10303'. [ 1033.230017][T11970] netlink: 16 bytes leftover after parsing attributes in process `syz.1.10303'. [ 1033.260488][T11977] team0: Port device dummy0 added [ 1033.266191][T11970] netlink: 16 bytes leftover after parsing attributes in process `syz.1.10303'. [ 1033.377058][T11983] net_ratelimit: 5 callbacks suppressed [ 1033.377081][T11983] macvlan1: mtu greater than device maximum [ 1033.739220][ T2141] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1033.767815][T11993] syzkaller0: entered promiscuous mode [ 1033.773528][T11993] syzkaller0: entered allmulticast mode [ 1033.782633][T11993] 0: reclassify loop, rule prio 0, protocol 800 [ 1033.934656][T12001] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 1033.988306][T12001] syzkaller0: entered promiscuous mode [ 1034.014265][T12001] syzkaller0: entered allmulticast mode [ 1034.113670][T30742] lec:lec_start_xmit: lec0:No lecd attached [ 1034.232403][T12016] validate_nla: 5 callbacks suppressed [ 1034.232424][T12016] netlink: 'syz.5.10322': attribute type 1 has an invalid length. [ 1034.254889][T12016] lo speed is unknown, defaulting to 1000 [ 1034.269792][T12016] lo speed is unknown, defaulting to 1000 [ 1034.297291][T12016] lo speed is unknown, defaulting to 1000 [ 1034.311383][T12019] syzkaller0: entered promiscuous mode [ 1034.318359][T12019] syzkaller0: entered allmulticast mode [ 1034.520829][T12026] sit1: entered promiscuous mode [ 1034.543315][T12026] sit1: entered allmulticast mode [ 1034.742310][T12016] infiniband syz0: set down [ 1034.751061][ T2134] lo speed is unknown, defaulting to 1000 [ 1034.763210][T12016] infiniband syz0: added lo [ 1034.779005][T13048] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1034.808934][T12039] netlink: 'syz.6.10328': attribute type 1 has an invalid length. [ 1034.858446][T12039] netlink: 'syz.6.10328': attribute type 1 has an invalid length. [ 1034.870555][T12016] RDS/IB: syz0: added [ 1034.875311][T12016] smc: adding ib device syz0 with port count 1 [ 1034.881680][T12016] smc: ib device syz0 port 1 has no pnetid [ 1034.890189][ T2134] lo speed is unknown, defaulting to 1000 [ 1034.898546][T12016] lo speed is unknown, defaulting to 1000 [ 1035.027544][T12049] netlink: 'syz.2.10331': attribute type 4 has an invalid length. [ 1035.158800][ T2134] IPVS: starting estimator thread 0... [ 1035.181368][T12057] netlink: 'syz.3.10333': attribute type 29 has an invalid length. [ 1035.254239][T12059] IPVS: using max 31 ests per chain, 74400 per kthread [ 1035.299745][T12061] batman_adv: Cannot find parent device. Skipping batadv-on-batadv check for gretap1 [ 1035.564395][T12073] netlink: 'syz.6.10338': attribute type 2 has an invalid length. [ 1035.776322][T12016] lo speed is unknown, defaulting to 1000 [ 1035.817523][T13048] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1035.913448][T12092] __nla_validate_parse: 21 callbacks suppressed [ 1035.913473][T12092] netlink: 12 bytes leftover after parsing attributes in process `syz.6.10341'. [ 1036.213265][ T5835] Bluetooth: hci6: command 0x0406 tx timeout [ 1036.390377][T12114] netlink: 'syz.2.10344': attribute type 10 has an invalid length. [ 1036.470276][T12114] bridge0: port 2(bridge_slave_1) entered disabled state [ 1036.504464][T12114] bridge_slave_1: left allmulticast mode [ 1036.520666][T12114] bridge_slave_1: left promiscuous mode [ 1036.539650][T12114] bridge0: port 2(bridge_slave_1) entered disabled state [ 1036.572677][T12114] bond0: (slave bridge_slave_1): Enslaving as an active interface with an up link [ 1036.624695][T12016] lo speed is unknown, defaulting to 1000 [ 1036.646177][T12128] syzkaller0: entered promiscuous mode [ 1036.651883][T12128] syzkaller0: entered allmulticast mode [ 1036.856975][T13048] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1036.922239][T12132] bond1: option arp_all_targets: invalid value (18446744073709551613) [ 1037.022536][T12132] bond1 (unregistering): Released all slaves [ 1037.168517][T12016] lo speed is unknown, defaulting to 1000 [ 1037.338842][T14205] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1037.351587][T14181] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1037.403989][T12151] netlink: 'syz.6.10354': attribute type 10 has an invalid length. [ 1037.416168][T12157] syzkaller1: entered promiscuous mode [ 1037.426594][T12157] syzkaller1: entered allmulticast mode [ 1037.443447][T12156] bond_slave_0: entered allmulticast mode [ 1037.459727][T12151] veth0_macvtap: left promiscuous mode [ 1037.808705][T12016] lo speed is unknown, defaulting to 1000 [ 1037.895336][ T2141] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1038.344827][T12191] netlink: 8 bytes leftover after parsing attributes in process `syz.6.10364'. [ 1038.361859][T12193] netlink: 8 bytes leftover after parsing attributes in process `syz.6.10364'. [ 1038.372064][T12191] netlink: 8 bytes leftover after parsing attributes in process `syz.6.10364'. [ 1038.584731][T12016] lo speed is unknown, defaulting to 1000 [ 1038.795995][T12209] netlink: 32 bytes leftover after parsing attributes in process `syz.1.10369'. [ 1038.867567][T12215] netlink: 'syz.2.10368': attribute type 32 has an invalid length. [ 1038.886171][T12215] netlink: 8 bytes leftover after parsing attributes in process `syz.2.10368'. [ 1038.951589][ T2144] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1039.055171][T12215] bond7: option coupled_control: invalid value (84) [ 1039.123458][ C1] lec0: NETDEV WATCHDOG: CPU: 1: transmit queue 0 timed out 5010 ms [ 1039.131559][ C1] lec:lec_tx_timeout: lec0 [ 1039.139268][T12215] bond7 (unregistering): Released all slaves [ 1039.223514][T12016] lo speed is unknown, defaulting to 1000 [ 1039.634980][T12247] netlink: 'syz.6.10379': attribute type 1 has an invalid length. [ 1039.736121][T12253] netlink: 8 bytes leftover after parsing attributes in process `syz.3.10381'. [ 1039.747873][T12249] bond1: (slave gretap2): making interface the new active one [ 1039.765324][T12249] bond1: (slave gretap2): Enslaving as an active interface with an up link [ 1039.795777][T12016] lo speed is unknown, defaulting to 1000 [ 1039.796023][T12255] netlink: 'syz.2.10380': attribute type 32 has an invalid length. [ 1039.820812][T12253] netlink: 32 bytes leftover after parsing attributes in process `syz.3.10381'. [ 1039.833299][T12255] netlink: 8 bytes leftover after parsing attributes in process `syz.2.10380'. [ 1039.847688][T12256] netlink: 12 bytes leftover after parsing attributes in process `syz.3.10381'. [ 1039.960260][T12255] bond7: Setting coupled_control to off (0) [ 1039.995039][ T2144] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1040.268547][ T30] audit: type=1800 audit(1773532151.677:22): pid=12274 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.3.10387" name="memory.events" dev="tmpfs" ino=1708 res=0 errno=0 [ 1040.342474][ T30] audit: type=1800 audit(1773532151.697:23): pid=12275 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.3.10387" name="memory.events" dev="tmpfs" ino=1708 res=0 errno=0 [ 1040.376981][ T30] audit: type=1804 audit(1773532151.697:24): pid=12274 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=invalid_pcr cause=ToMToU comm="syz.3.10387" name="/newroot/332/memory.events" dev="tmpfs" ino=1708 res=1 errno=0 [ 1040.487544][T12284] netlink: 'syz.6.10392': attribute type 61 has an invalid length. [ 1040.507709][T12277] gretap1: entered promiscuous mode [ 1040.525524][T12277] gretap1: entered allmulticast mode [ 1040.550247][T12016] lo speed is unknown, defaulting to 1000 [ 1040.586133][T12277] atomic_op ffff888034344998 conn xmit_atomic 0000000000000000 [ 1040.714312][T12294] netlink: 'syz.1.10394': attribute type 1 has an invalid length. [ 1040.788521][T12294] bond1: entered promiscuous mode [ 1040.825042][T12294] 8021q: adding VLAN 0 to HW filter on device bond1 [ 1040.855424][T11196] Bluetooth: hci4: command tx timeout [ 1040.966611][T12294] bond1: (slave bridge7): making interface the new active one [ 1041.003449][T12294] bridge7: entered promiscuous mode [ 1041.014528][T13048] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1041.025414][T12294] bond1: (slave bridge7): Enslaving as an active interface with an up link [ 1041.076558][T12307] __nla_validate_parse: 9 callbacks suppressed [ 1041.076580][T12307] netlink: 356 bytes leftover after parsing attributes in process `syz.2.10398'. [ 1041.187923][T12307] netlink: 40 bytes leftover after parsing attributes in process `syz.2.10398'. [ 1041.475042][T12016] lo speed is unknown, defaulting to 1000 [ 1042.058375][T13048] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1042.196678][T12350] IPv6: sit3: Disabled Multicast RS [ 1042.422798][T12016] lo speed is unknown, defaulting to 1000 [ 1042.657195][T12372] tunl0: Caught tx_queue_len zero misconfig [ 1042.774438][T12377] netlink: 'syz.1.10414': attribute type 2 has an invalid length. [ 1042.838318][T12377] 9: entered promiscuous mode [ 1042.879564][T12385] openvswitch: netlink: Flow key attr not present in new flow. [ 1043.100495][ T2141] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1043.109791][ T150] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1043.120430][T14193] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1043.300029][T12016] lo speed is unknown, defaulting to 1000 [ 1043.436532][T12414] netlink: 8 bytes leftover after parsing attributes in process `syz.6.10425'. [ 1043.446035][T12414] netlink: 'syz.6.10425': attribute type 5 has an invalid length. [ 1043.457816][T12414] netlink: 20 bytes leftover after parsing attributes in process `syz.6.10425'. [ 1043.478734][T12414] geneve2: entered promiscuous mode [ 1043.484139][T12414] geneve2: entered allmulticast mode [ 1043.487233][T12412] sctp: [Deprecated]: syz.3.10424 (pid 12412) Use of struct sctp_assoc_value in delayed_ack socket option. [ 1043.487233][T12412] Use struct sctp_sack_info instead [ 1043.506774][ T150] netdevsim netdevsim6 netdevsim0: set [1, 1] type 2 family 0 port 256 - 0 [ 1043.517593][ T150] netdevsim netdevsim6 netdevsim1: set [1, 1] type 2 family 0 port 256 - 0 [ 1043.527496][T12414] sch_tbf: peakrate 5 is lower than or equals to rate 16783679728848008391 ! [ 1043.539681][ T150] netdevsim netdevsim6 netdevsim2: set [1, 1] type 2 family 0 port 256 - 0 [ 1043.549133][ T150] netdevsim netdevsim6 netdevsim3: set [1, 1] type 2 family 0 port 256 - 0 [ 1043.799955][T12424] pimreg3: entered allmulticast mode [ 1043.805806][T12389] nci: __nci_request: wait_for_completion_interruptible_timeout failed -512 [ 1043.925178][T12426] netlink: 'syz.3.10429': attribute type 1 has an invalid length. [ 1044.036634][T12426] bond5: entered promiscuous mode [ 1044.042820][T12426] 8021q: adding VLAN 0 to HW filter on device bond5 [ 1044.127072][T12435] bridge0: port 1(ipvlan2) entered blocking state [ 1044.143862][T12435] bridge0: port 1(ipvlan2) entered disabled state [ 1044.150946][ T2141] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1044.160149][T12435] ipvlan2: entered allmulticast mode [ 1044.183221][T12435] bridge0: entered allmulticast mode [ 1044.191793][T12435] ipvlan2: left allmulticast mode [ 1044.197177][T12435] bridge0: left allmulticast mode [ 1044.308763][T12426] bond5: (slave bridge6): making interface the new active one [ 1044.326129][T12426] bridge6: entered promiscuous mode [ 1044.352968][T12426] bond5: (slave bridge6): Enslaving as an active interface with an up link [ 1044.377907][ C0] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1044.436784][T12450] : renamed from vxcan1 (while UP) [ 1044.845750][T12472] netlink: 'syz.6.10442': attribute type 17 has an invalid length. [ 1044.861762][T12472] netlink: 4 bytes leftover after parsing attributes in process `syz.6.10442'. [ 1044.893255][T12472] netlink: 28 bytes leftover after parsing attributes in process `syz.6.10442'. [ 1044.926639][T12479] netlink: 12 bytes leftover after parsing attributes in process `syz.2.10444'. [ 1044.942030][T12479] netlink: 4 bytes leftover after parsing attributes in process `syz.2.10444'. [ 1044.951864][T12479] bridge_slave_0: left allmulticast mode [ 1044.958294][T12479] bridge_slave_0: left promiscuous mode [ 1044.964594][T12479] bridge0: port 1(bridge_slave_0) entered disabled state [ 1045.063997][T12487] netlink: 8 bytes leftover after parsing attributes in process `syz.3.10445'. [ 1045.108179][T12472] gretap0: entered promiscuous mode [ 1045.135426][T12472] gretap0: left promiscuous mode [ 1045.175543][T13048] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1045.226667][T12483] netlink: 8 bytes leftover after parsing attributes in process `syz.3.10445'. [ 1045.352133][T12502] sctp: [Deprecated]: syz.5.10450 (pid 12502) Use of int in maxseg socket option. [ 1045.352133][T12502] Use struct sctp_assoc_value instead [ 1045.369269][T12500] openvswitch: netlink: Missing key (keys=40, expected=80) [ 1045.415404][ C0] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1046.060201][T12548] netlink: 'syz.5.10462': attribute type 4 has an invalid length. [ 1046.129522][T12556] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 1046.153530][T12554] __nla_validate_parse: 6 callbacks suppressed [ 1046.153554][T12554] netlink: 36 bytes leftover after parsing attributes in process `syz.6.10465'. [ 1046.218892][ T2141] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1046.453281][ C0] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1046.456229][T11196] Bluetooth: hci5: command 0x0406 tx timeout [ 1046.520300][T12573] netlink: 132 bytes leftover after parsing attributes in process `syz.2.10472'. [ 1046.642384][T12584] netlink: 'syz.1.10473': attribute type 8 has an invalid length. [ 1046.651425][T12584] netlink: 4 bytes leftover after parsing attributes in process `syz.1.10473'. [ 1046.692782][T12584] gretap0: entered promiscuous mode [ 1046.769967][T12584] erspan0: entered promiscuous mode [ 1046.802319][T12584] debugfs: 'hsr1' already exists in 'hsr' [ 1046.811518][T12584] Cannot create hsr debugfs directory [ 1046.817343][T12584] hsr1: entered promiscuous mode [ 1047.023455][T12602] netlink: 8 bytes leftover after parsing attributes in process `syz.3.10480'. [ 1047.059528][T12600] netlink: 48 bytes leftover after parsing attributes in process `syz.1.10479'. [ 1047.137106][T12615] sctp: [Deprecated]: syz.5.10482 (pid 12615) Use of int in maxseg socket option. [ 1047.137106][T12615] Use struct sctp_assoc_value instead [ 1047.218982][T12617] netdevsim netdevsim1 netdevsim0: entered promiscuous mode [ 1047.255036][ T2141] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1047.271438][T12602] nci: __nci_request: wait_for_completion_interruptible_timeout failed -512 [ 1047.495754][ C0] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1047.631654][T12636] netlink: 4 bytes leftover after parsing attributes in process `syz.1.10488'. [ 1047.735472][T12638] netlink: 12 bytes leftover after parsing attributes in process `syz.1.10488'. [ 1047.761970][T12636] netlink: 4 bytes leftover after parsing attributes in process `syz.1.10488'. [ 1047.794924][T12638] xfrm1: entered promiscuous mode [ 1047.800953][T12642] netlink: 'syz.3.10490': attribute type 8 has an invalid length. [ 1047.809168][T12637] netlink: 12 bytes leftover after parsing attributes in process `syz.1.10488'. [ 1047.809223][T12638] xfrm1: entered allmulticast mode [ 1047.892054][T12646] syzkaller0: entered promiscuous mode [ 1047.898272][T12646] syzkaller0: entered allmulticast mode [ 1048.189309][T12662] netlink: 'syz.2.10493': attribute type 1 has an invalid length. [ 1048.344633][T12667] netlink: 16 bytes leftover after parsing attributes in process `syz.2.10495'. [ 1049.338620][ T2144] net_ratelimit: 58 callbacks suppressed [ 1049.338644][ T2144] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1049.579042][ C0] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1050.376553][ T2144] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1050.882525][T12710] netlink: 'syz.1.10503': attribute type 12 has an invalid length. [ 1051.342953][T12729] syzkaller0: entered promiscuous mode [ 1051.361526][T12729] syzkaller0: entered allmulticast mode [ 1051.414658][ T2144] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1052.468223][T26215] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1052.699323][ T150] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1053.494369][ T2144] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1053.733599][ C1] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1053.791384][T12754] C: renamed from lo [ 1053.797078][T12754] A link change request failed with some changes committed already. Interface C may have been left with an inconsistent configuration, please check. [ 1053.974897][T14205] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1054.533924][ T2140] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1054.571545][T12796] syzkaller0: entered promiscuous mode [ 1054.591844][T12796] syzkaller0: entered allmulticast mode [ 1054.604765][T12795] ip6_vti0 speed is unknown, defaulting to 1000 [ 1054.621561][ T1298] lec:lec_start_xmit: lec0:No lecd attached [ 1054.773343][ C1] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1054.791599][T12795] C speed is unknown, defaulting to 1000 [ 1055.574404][ T2140] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1055.813554][ C1] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1056.613950][T13048] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1056.853357][ C1] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1057.655217][ T2140] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1057.893257][ C1] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1058.694005][T13048] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1058.933360][ C1] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1059.738953][ T6739] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1059.749117][T13048] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1059.973238][ C1] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1060.053236][ C1] lec0: NETDEV WATCHDOG: CPU: 1: transmit queue 0 timed out 5430 ms [ 1060.061392][ C1] lec:lec_tx_timeout: lec0 [ 1060.773724][T13048] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1061.013885][ C1] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1061.814051][T26215] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1062.296383][ T150] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1062.853850][T13048] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1063.894838][T26215] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1064.224672][T14198] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1064.856142][T14198] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1064.953527][T26215] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1065.253272][ C1] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1065.974136][T26215] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1066.293277][ C1] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1067.015343][ T2140] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1067.343544][ C1] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1068.054541][T13048] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1068.062773][T14205] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1068.373305][ C1] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1070.134657][ T2140] net_ratelimit: 2 callbacks suppressed [ 1070.134675][ T2140] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1070.453530][ C1] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1070.614304][ T6739] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1071.174855][ T2140] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1071.493258][ C1] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1072.215926][T26215] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1072.533384][ C1] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1073.253996][T26215] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1073.814558][ T150] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1074.294157][T13048] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1075.335552][T13048] net_ratelimit: 1 callbacks suppressed [ 1075.335586][T13048] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1075.667946][T12809] __nla_validate_parse: 8 callbacks suppressed [ 1075.667969][T12809] netlink: 12 bytes leftover after parsing attributes in process `syz.5.10531'. [ 1075.712137][T12809] netlink: 12 bytes leftover after parsing attributes in process `syz.5.10531'. [ 1075.734796][ T150] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1075.885226][T12827] netlink: 24 bytes leftover after parsing attributes in process `syz.2.10535'. [ 1076.133232][ C0] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1076.330518][T12856] netlink: 44 bytes leftover after parsing attributes in process `syz.5.10543'. [ 1076.374093][ T2140] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1076.457105][T12858] syzkaller0: entered promiscuous mode [ 1076.470689][T12858] syzkaller0: entered allmulticast mode [ 1076.652682][T12868] bond2: option arp_validate: mode dependency failed, not supported in mode balance-alb(6) [ 1076.666990][T12868] bond2 (unregistering): Released all slaves [ 1076.947706][T12882] netlink: 24 bytes leftover after parsing attributes in process `syz.6.10552'. [ 1077.173214][ C0] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1077.173291][T11196] Bluetooth: hci1: command 0x0406 tx timeout [ 1077.346697][T12904] ip_tunnel: non-ECT from 2.0.0.0 with TOS=0x3 [ 1077.414844][T13048] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1077.699600][T12921] netlink: 16 bytes leftover after parsing attributes in process `syz.5.10562'. [ 1077.842281][T12928] netlink: 4 bytes leftover after parsing attributes in process `syz.3.10566'. [ 1077.856013][T12928] netlink: 4 bytes leftover after parsing attributes in process `syz.3.10566'. [ 1077.875516][T12928] netlink: 'syz.3.10566': attribute type 1 has an invalid length. [ 1077.994822][T12937] netlink: 28 bytes leftover after parsing attributes in process `syz.1.10569'. [ 1078.034306][T12937] netlink: 212408 bytes leftover after parsing attributes in process `syz.1.10569'. [ 1078.213403][ C0] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1078.293930][T26215] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1078.341052][T12957] IPVS: length: 104 != 8 [ 1078.457681][T13048] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1078.845734][T12968] syzkaller0: entered promiscuous mode [ 1078.859276][T12968] syzkaller0: entered allmulticast mode [ 1078.981685][T12980] netlink: 'syz.2.10584': attribute type 5 has an invalid length. [ 1079.324453][T13010] netlink: 'syz.2.10592': attribute type 1 has an invalid length. [ 1080.535101][ T2134] net_ratelimit: 6 callbacks suppressed [ 1080.535126][ T2134] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1080.544031][ T2140] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1080.694680][T13048] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1081.333536][ C0] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1081.365881][T13003] tipc: Enabling of bearer rejected, failed to enable media [ 1081.375706][T13006] __nla_validate_parse: 8 callbacks suppressed [ 1081.375728][T13006] netlink: 4 bytes leftover after parsing attributes in process `syz.2.10592'. [ 1081.431965][T13010] bond8: entered promiscuous mode [ 1081.453763][T13010] 8021q: adding VLAN 0 to HW filter on device bond8 [ 1081.506022][T14198] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1081.573874][T13048] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1081.575018][T32641] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1081.626487][T13016] bond8: (slave bridge0): making interface the new active one [ 1081.641531][T13016] bridge0: entered promiscuous mode [ 1081.657701][T13016] bond8: (slave bridge0): Enslaving as an active interface with an up link [ 1081.725418][T13027] netlink: 4 bytes leftover after parsing attributes in process `syz.6.10596'. [ 1081.894663][T13037] RDS: rds_bind could not find a transport for ::ffff:172.30.0.7, load rds_tcp or rds_rdma? [ 1081.911515][T13040] netlink: 28 bytes leftover after parsing attributes in process `syz.1.10600'. [ 1082.042662][T13043] netlink: 'syz.3.10602': attribute type 1 has an invalid length. [ 1082.092106][T13049] netlink: 28 bytes leftover after parsing attributes in process `syz.5.10603'. [ 1082.093918][T13043] netlink: 8 bytes leftover after parsing attributes in process `syz.3.10602'. [ 1082.143796][T13043] netlink: 'syz.3.10602': attribute type 30 has an invalid length. [ 1082.171752][T13053] netlink: 8 bytes leftover after parsing attributes in process `syz.3.10602'. [ 1082.218888][T13053] netlink: 'syz.3.10602': attribute type 30 has an invalid length. [ 1082.231071][T13052] netlink: 2 bytes leftover after parsing attributes in process `syz.5.10603'. [ 1082.248798][T13054] netlink: 12 bytes leftover after parsing attributes in process `syz.6.10607'. [ 1082.323174][T14181] netdevsim netdevsim3 netdevsim0: set [0, 1] type 1 family 0 port 8472 - 0 [ 1082.338445][T14181] netdevsim netdevsim3 netdevsim1: set [0, 1] type 1 family 0 port 8472 - 0 [ 1082.344306][T13049] netlink: 16 bytes leftover after parsing attributes in process `syz.5.10603'. [ 1082.373228][ C0] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1082.474805][T13070] netlink: 4 bytes leftover after parsing attributes in process `syz.6.10611'. [ 1082.517266][T14181] netdevsim netdevsim3 netdevsim2: set [0, 1] type 1 family 0 port 8472 - 0 [ 1082.558035][T14181] netdevsim netdevsim3 netdevsim3: set [0, 1] type 1 family 0 port 8472 - 0 [ 1082.613811][T32641] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1082.614091][ T2140] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1082.687809][T13081] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 1082.730546][T13086] syzkaller0: entered promiscuous mode [ 1082.737139][T13086] syzkaller0: entered allmulticast mode [ 1083.444081][T13129] x_tables: duplicate underflow at hook 2 [ 1083.712973][T13146] tipc: Enabling of bearer rejected, failed to enable media [ 1083.782276][T13152] netlink: 'syz.2.10633': attribute type 10 has an invalid length. [ 1084.246383][T13184] netlink: 'syz.1.10644': attribute type 3 has an invalid length. [ 1084.465289][T13191] veth0_macvtap: left promiscuous mode [ 1084.847042][T13212] blkio.reset_stats is deprecated [ 1085.044823][T13222] chnl_net:caif_netlink_parms(): no params data found [ 1085.187517][T13227] syzkaller0: entered promiscuous mode [ 1085.214483][T13227] syzkaller0: entered allmulticast mode [ 1085.336559][ T5835] Bluetooth: hci2: command 0x0405 tx timeout [ 1085.725872][T13257] xt_policy: output policy not valid in PREROUTING and INPUT [ 1085.734248][ T2140] net_ratelimit: 22 callbacks suppressed [ 1085.734299][ T2140] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1085.736013][ T6427] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1085.749171][T13257] xt_TCPMSS: Only works on TCP SYN packets [ 1086.015290][T13272] ksmbd: Daemon and kernel module version mismatch. ksmbd: 0, kernel module: 1. User-space ksmbd should terminate. [ 1086.168922][T13283] netlink: 'syz.2.10673': attribute type 29 has an invalid length. [ 1086.179012][T13283] netlink: 'syz.2.10673': attribute type 29 has an invalid length. [ 1086.355325][T13291] syzkaller0: entered promiscuous mode [ 1086.368015][T13291] syzkaller0: entered allmulticast mode [ 1086.396506][T13291] __nla_validate_parse: 27 callbacks suppressed [ 1086.396531][T13291] netlink: 52 bytes leftover after parsing attributes in process `syz.1.10676'. [ 1086.406150][T13294] netlink: 28 bytes leftover after parsing attributes in process `syz.2.10677'. [ 1086.428001][T13294] netlink: 4 bytes leftover after parsing attributes in process `syz.2.10677'. [ 1086.439625][T13294] netlink: 8 bytes leftover after parsing attributes in process `syz.2.10677'. [ 1086.475902][ T6739] ip6_tunnel: ip6gre2 xmit: Local address not yet configured! [ 1086.485326][ T6739] ip6_tunnel: ip6gre2 xmit: Local address not yet configured! [ 1086.516988][T26215] ip6_tunnel: ip6gre2 xmit: Local address not yet configured! [ 1086.534480][T26215] ip6_tunnel: ip6gre2 xmit: Local address not yet configured! [ 1086.554935][T26215] ip6_tunnel: ip6gre2 xmit: Local address not yet configured! [ 1086.609607][T13302] netlink: 4 bytes leftover after parsing attributes in process `syz.3.10679'. [ 1086.621506][T13304] veth0: entered promiscuous mode [ 1086.629416][ T6739] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1086.636325][T13304] veth0: left promiscuous mode [ 1086.773827][ T6427] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1086.776409][T13048] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1086.835020][T13310] netlink: 8 bytes leftover after parsing attributes in process `syz.1.10682'. [ 1086.844614][T13310] netlink: 24 bytes leftover after parsing attributes in process `syz.1.10682'. [ 1086.855514][T13310] netlink: 8 bytes leftover after parsing attributes in process `syz.1.10682'. [ 1086.871270][T13310] netlink: 24 bytes leftover after parsing attributes in process `syz.1.10682'. [ 1086.881115][T13312] syzkaller0: entered promiscuous mode [ 1087.119861][T13326] netlink: 284 bytes leftover after parsing attributes in process `syz.5.10687'. [ 1087.235002][T13330] mac80211_hwsim hwsim74 wlan0: entered promiscuous mode [ 1087.254253][ T6739] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1087.306633][T13335] netlink: 'syz.5.10690': attribute type 1 has an invalid length. [ 1087.414131][ T5835] Bluetooth: hci2: command 0x0405 tx timeout [ 1087.653236][ C0] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1087.820825][ T2140] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1087.830512][ T2134] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1087.901194][T26215] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1090.312112][T13383] bond0: (slave bridge_slave_1): Releasing backup interface [ 1090.324981][T13383] bond0: (slave bond_slave_0): Releasing backup interface [ 1090.339916][T13383] bond0: (slave bond_slave_1): Releasing backup interface [ 1090.355860][T13383] team0: Port device team_slave_0 removed [ 1090.368288][T13383] team0: Port device team_slave_1 removed [ 1090.375713][T13383] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 1090.385930][T13383] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 1090.396226][T13383] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 1090.404830][T13383] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 1090.666194][T13401] sock: sock_timestamping_bind_phc: sock not bind to device [ 1090.680992][T13400] lo: entered allmulticast mode [ 1090.691342][T13400] lo: left allmulticast mode [ 1090.703347][ C1] ip6_tunnel: ip6gre2 xmit: Local address not yet configured! [ 1090.718564][T13395] ip6gre1: entered allmulticast mode [ 1090.774243][ C0] net_ratelimit: 11 callbacks suppressed [ 1090.774265][ C0] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1090.938116][T26215] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1090.938763][ T6427] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1091.098845][T13423] netlink: 'syz.5.10717': attribute type 143 has an invalid length. [ 1091.153382][T13424] netlink: 'syz.5.10717': attribute type 1 has an invalid length. [ 1091.190520][T13424] netlink: 'syz.5.10717': attribute type 1 has an invalid length. [ 1091.195666][T13429] netlink: 'syz.6.10722': attribute type 11 has an invalid length. [ 1091.243521][T13434] netlink: 'syz.3.10720': attribute type 2 has an invalid length. [ 1091.275822][T13431] netlink: 'syz.2.10723': attribute type 9 has an invalid length. [ 1091.303446][T13431] netlink: 'syz.2.10723': attribute type 11 has an invalid length. [ 1091.312374][T13431] netlink: 'syz.2.10723': attribute type 12 has an invalid length. [ 1091.414315][T26215] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1091.517173][T13450] __nla_validate_parse: 11 callbacks suppressed [ 1091.517197][T13450] netlink: 4 bytes leftover after parsing attributes in process `syz.1.10726'. [ 1091.631215][T13454] netlink: 12 bytes leftover after parsing attributes in process `syz.5.10728'. [ 1091.647743][T13456] netlink: 'syz.6.10730': attribute type 4 has an invalid length. [ 1091.805601][T13466] netlink: 'syz.5.10728': attribute type 7 has an invalid length. [ 1091.813241][ C0] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1091.909000][T13461] netlink: 4 bytes leftover after parsing attributes in process `syz.5.10728'. [ 1091.975098][T26215] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1092.425040][T13487] bond9: (slave bridge4): making interface the new active one [ 1092.438568][T13491] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 1092.474304][T13487] bond9: (slave bridge4): Enslaving as an active interface with an up link [ 1092.711099][T13503] netlink: 12 bytes leftover after parsing attributes in process `syz.6.10742'. [ 1092.725290][T13503] netlink: 8 bytes leftover after parsing attributes in process `syz.6.10742'. [ 1092.756883][T13504] netlink: 4 bytes leftover after parsing attributes in process `syz.2.10741'. [ 1092.854139][ C0] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1093.015305][T14181] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1093.025393][ T2140] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1093.108227][T13523] sctp: [Deprecated]: syz.2.10745 (pid 13523) Use of struct sctp_assoc_value in delayed_ack socket option. [ 1093.108227][T13523] Use struct sctp_sack_info instead [ 1093.198009][T13523] sctp: [Deprecated]: syz.2.10745 (pid 13523) Use of struct sctp_assoc_value in delayed_ack socket option. [ 1093.198009][T13523] Use struct sctp_sack_info instead [ 1093.232818][T13528] netlink: 24 bytes leftover after parsing attributes in process `syz.6.10747'. [ 1093.313889][T13530] netlink: 32 bytes leftover after parsing attributes in process `syz.6.10747'. [ 1093.429985][T13537] syzkaller0: entered promiscuous mode [ 1093.443800][T13537] syzkaller0: entered allmulticast mode [ 1093.784652][T13549] xt_recent: Unsupported userspace flags (000000b1) [ 1093.876269][T13559] netlink: 4 bytes leftover after parsing attributes in process `syz.5.10755'. [ 1093.897641][T13556] Bluetooth: MGMT ver 1.23 [ 1093.918530][T13560] netlink: 212348 bytes leftover after parsing attributes in process `syz.6.10752'. [ 1094.137266][T13565] ip6_vti0 speed is unknown, defaulting to 1000 [ 1094.645149][T13587] syzkaller0: entered promiscuous mode [ 1094.651125][T13587] syzkaller0: entered allmulticast mode [ 1094.686427][T13565] C speed is unknown, defaulting to 1000 [ 1094.970845][T13597] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 1095.027908][T13597] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 1095.127777][T13603] x_tables: duplicate underflow at hook 1 [ 1095.844612][T13631] net_ratelimit: 9 callbacks suppressed [ 1095.844635][T13631] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 1095.904033][T13634] tipc: Started in network mode [ 1095.908972][T13634] tipc: Node identity 02ee5c5f5e5d, cluster identity 4711 [ 1095.944850][T13634] tipc: Enabled bearer , priority 0 [ 1095.954763][T13634] syzkaller0: entered promiscuous mode [ 1095.960286][T13634] syzkaller0: entered allmulticast mode [ 1096.021167][T13632] tipc: Resetting bearer [ 1096.126591][T13632] tipc: Disabling bearer [ 1096.138089][ T2140] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1096.305323][T13643] validate_nla: 3 callbacks suppressed [ 1096.305344][T13643] netlink: 'syz.1.10784': attribute type 1 has an invalid length. [ 1096.329977][T13643] workqueue: Failed to create a rescuer kthread for wq "bond3": -EINTR [ 1096.627974][T13652] xt_connbytes: Forcing CT accounting to be enabled [ 1096.914744][T13683] __nla_validate_parse: 16 callbacks suppressed [ 1096.914767][T13683] netlink: 24 bytes leftover after parsing attributes in process `syz.5.10796'. [ 1096.950350][T13687] netlink: 'syz.5.10796': attribute type 32 has an invalid length. [ 1096.953962][T13688] netlink: 4 bytes leftover after parsing attributes in process `syz.6.10794'. [ 1096.980024][T13684] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 1096.995343][T13687] netlink: 8 bytes leftover after parsing attributes in process `syz.5.10796'. [ 1097.029060][T13687] workqueue: Failed to create a rescuer kthread for wq "bond12": -EINTR [ 1097.144586][T30742] lec:lec_start_xmit: lec0:No lecd attached [ 1097.174839][ T2140] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1097.195593][T13696] openvswitch: netlink: IPv4 tunnel dst address is zero [ 1097.727569][T13728] netlink: 16 bytes leftover after parsing attributes in process `syz.5.10808'. [ 1098.137995][T14181] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1098.220045][T13048] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1098.574657][T13747] netlink: 'syz.5.10814': attribute type 2 has an invalid length. [ 1098.671980][T13748] veth0_to_bond: entered promiscuous mode [ 1098.678245][T13748] veth0_to_bond: entered allmulticast mode [ 1098.774322][T14196] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1098.908181][T13767] netlink: 192 bytes leftover after parsing attributes in process `syz.1.10820'. [ 1098.931452][T13767] x_tables: unsorted underflow at hook 2 [ 1098.956786][T13769] openvswitch: netlink: IP tunnel dst address not specified [ 1099.173210][ C1] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1099.254352][T13048] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1099.390963][T13796] netlink: 12 bytes leftover after parsing attributes in process `syz.6.10827'. [ 1099.465027][T13802] netlink: 12 bytes leftover after parsing attributes in process `syz.2.10828'. [ 1099.505670][T13801] netlink: 12 bytes leftover after parsing attributes in process `syz.2.10828'. [ 1099.704506][T13792] netlink: 16 bytes leftover after parsing attributes in process `syz.5.10825'. [ 1099.815732][T13815] netlink: 'syz.5.10831': attribute type 1 has an invalid length. [ 1099.898129][T13818] netlink: 8 bytes leftover after parsing attributes in process `syz.5.10832'. [ 1099.914995][T13818] batman_adv: Cannot find parent device. Skipping batadv-on-batadv check for gretap2 [ 1099.926001][T13818] gretap2: default qdisc (pfifo_fast) fail, fallback to noqueue [ 1099.934089][T13818] gretap2: entered promiscuous mode [ 1099.939459][T13818] gretap2: entered allmulticast mode [ 1100.053861][ C1] ip6_tunnel: ip6gre2 xmit: Local address not yet configured! [ 1100.312551][T13828] netlink: 'syz.1.10836': attribute type 1 has an invalid length. [ 1100.321543][T13828] netlink: 'syz.1.10836': attribute type 2 has an invalid length. [ 1100.330745][T13828] netlink: 'syz.1.10836': attribute type 1 has an invalid length. [ 1100.497383][T13831] netdevsim netdevsim1 netdevsim3 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 1100.519616][T13831] netdevsim netdevsim1 netdevsim3 (unregistering): unset [0, 1] type 1 family 0 port 256 - 0 [ 1100.532748][T13831] netdevsim netdevsim1 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1100.586457][T13839] syzkaller0: entered promiscuous mode [ 1100.592093][T13839] syzkaller0: entered allmulticast mode [ 1100.688612][T13831] netdevsim netdevsim1 netdevsim2 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 1100.705314][T13831] netdevsim netdevsim1 netdevsim2 (unregistering): unset [0, 1] type 1 family 0 port 256 - 0 [ 1100.718190][T13831] netdevsim netdevsim1 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1100.801514][T13846] delete_channel: no stack [ 1100.914356][T13831] netdevsim netdevsim1 netdevsim1 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 1100.942156][T13831] netdevsim netdevsim1 netdevsim1 (unregistering): unset [0, 1] type 1 family 0 port 256 - 0 [ 1100.976918][T13831] netdevsim netdevsim1 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1100.995144][T13852] tipc: Enabling not permitted [ 1101.001080][T13852] tipc: Enabling of bearer rejected, failed to enable media [ 1101.025713][T13856] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 1101.066026][T13831] netdevsim netdevsim1 netdevsim0 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 1101.079971][T13831] netdevsim netdevsim1 netdevsim0 (unregistering): unset [0, 1] type 1 family 0 port 256 - 0 [ 1101.091335][T13831] netdevsim netdevsim1 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1101.112155][T13854] syzkaller0: entered promiscuous mode [ 1101.119288][T13854] syzkaller0: entered allmulticast mode [ 1101.253371][ C1] net_ratelimit: 3 callbacks suppressed [ 1101.253391][ C1] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1101.269610][T14181] netdevsim netdevsim1 eth0: set [0, 0] type 1 family 0 port 8472 - 0 [ 1101.280138][T14181] netdevsim netdevsim1 eth0: set [0, 1] type 1 family 0 port 256 - 0 [ 1101.289113][T14181] netdevsim netdevsim1 eth0: set [1, 0] type 2 family 0 port 6081 - 0 [ 1101.298147][T14181] netdevsim netdevsim1 eth1: set [0, 0] type 1 family 0 port 8472 - 0 [ 1101.307062][T14181] netdevsim netdevsim1 eth1: set [0, 1] type 1 family 0 port 256 - 0 [ 1101.315400][T14181] netdevsim netdevsim1 eth1: set [1, 0] type 2 family 0 port 6081 - 0 [ 1101.334376][T13048] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1101.335534][T14181] netdevsim netdevsim1 eth2: set [0, 0] type 1 family 0 port 8472 - 0 [ 1101.351855][T14181] netdevsim netdevsim1 eth2: set [0, 1] type 1 family 0 port 256 - 0 [ 1101.360422][T14181] netdevsim netdevsim1 eth2: set [1, 0] type 2 family 0 port 6081 - 0 [ 1101.387269][T14181] netdevsim netdevsim1 eth3: set [0, 0] type 1 family 0 port 8472 - 0 [ 1101.396317][T14181] netdevsim netdevsim1 eth3: set [0, 1] type 1 family 0 port 256 - 0 [ 1101.404950][T14181] netdevsim netdevsim1 eth3: set [1, 0] type 2 family 0 port 6081 - 0 [ 1102.050843][T13890] netlink: 'syz.2.10855': attribute type 21 has an invalid length. [ 1102.060731][T13890] __nla_validate_parse: 1 callbacks suppressed [ 1102.060754][T13890] netlink: 156 bytes leftover after parsing attributes in process `syz.2.10855'. [ 1102.163203][ C1] lec0: NETDEV WATCHDOG: CPU: 1: transmit queue 0 timed out 5010 ms [ 1102.171814][ C1] lec:lec_tx_timeout: lec0 [ 1102.181948][T13894] netlink: 190972 bytes leftover after parsing attributes in process `syz.6.10856'. [ 1102.293319][ C1] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1102.378005][T26215] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1102.436188][T13904] netlink: 'syz.5.10859': attribute type 12 has an invalid length. [ 1102.448507][T13906] netlink: 'syz.1.10860': attribute type 5 has an invalid length. [ 1102.478835][T13904] bond12: option primary_reselect: invalid value (255) [ 1102.488426][T13904] bond12 (unregistering): Released all slaves [ 1102.603909][T13906] bond3: option arp_interval: mode dependency failed, not supported in mode balance-tlb(5) [ 1102.642308][T13906] bond3 (unregistering): Released all slaves [ 1103.097859][T13937] netlink: 24 bytes leftover after parsing attributes in process `syz.6.10867'. [ 1103.112840][T13939] netlink: 8 bytes leftover after parsing attributes in process `syz.1.10868'. [ 1103.333211][ C1] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1103.419730][T26215] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1103.847288][T13975] netlink: 12 bytes leftover after parsing attributes in process `syz.1.10878'. [ 1104.373412][ C1] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1104.386160][T13980] netlink: 'syz.6.10881': attribute type 63 has an invalid length. [ 1104.431620][T13980] sch_tbf: burst 4 is lower than device syzkaller0 mtu (1500) ! [ 1104.449070][T13980] syzkaller0: entered promiscuous mode [ 1104.457280][T13980] syzkaller0: entered allmulticast mode [ 1104.466070][T13048] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1104.546944][ T150] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1104.603791][T13992] netlink: 'syz.2.10883': attribute type 1 has an invalid length. [ 1104.732107][T13993] mac80211_hwsim hwsim91 wlan1: (WE) : Wireless Event (cmd=0x8B1A) too big (33) [ 1104.868921][T14006] debugfs: 'Ku crK:̥B| lS-!' already exists in 'ieee80211' [ 1104.935617][T14004] sysfs: cannot create duplicate filename '/class/ieee80211/Ku crK:̥B| lS-!' [ 1104.948670][T14004] CPU: 0 UID: 0 PID: 14004 Comm: syz.6.10888 Not tainted syzkaller #0 PREEMPT(full) [ 1104.948698][T14004] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 02/12/2026 [ 1104.948711][T14004] Call Trace: [ 1104.948720][T14004] [ 1104.948730][T14004] dump_stack_lvl+0xe8/0x150 [ 1104.948768][T14004] sysfs_warn_dup+0x8e/0xa0 [ 1104.948799][T14004] sysfs_do_create_link_sd+0xc0/0x110 [ 1104.948831][T14004] device_add_class_symlinks+0x1cf/0x240 [ 1104.948859][T14004] device_add+0x475/0xb70 [ 1104.948886][T14004] wiphy_register+0x1d73/0x2d50 [ 1104.948935][T14004] ? __pfx_wiphy_register+0x10/0x10 [ 1104.948962][T14004] ? __pfx_netdev_run_todo+0x10/0x10 [ 1104.948985][T14004] ? minstrel_ht_alloc+0x6e0/0x7e0 [ 1104.949018][T14004] ? ieee80211_init_rate_ctrl_alg+0x55d/0x5d0 [ 1104.949056][T14004] ieee80211_register_hw+0x3562/0x4200 [ 1104.949096][T14004] ? ieee80211_register_hw+0x1421/0x4200 [ 1104.949131][T14004] ? __pfx_ieee80211_register_hw+0x10/0x10 [ 1104.949174][T14004] ? __hrtimer_setup+0x181/0x200 [ 1104.949203][T14004] ? __pfx_mac80211_hwsim_beacon+0x10/0x10 [ 1104.949233][T14004] mac80211_hwsim_new_radio+0x2f97/0x5330 [ 1104.949306][T14004] ? __pfx_mac80211_hwsim_new_radio+0x10/0x10 [ 1104.949326][T14004] ? kstrndup+0xbf/0x160 [ 1104.949366][T14004] hwsim_new_radio_nl+0xf35/0x1bd0 [ 1104.949415][T14004] ? __pfx_hwsim_new_radio_nl+0x10/0x10 [ 1104.949458][T14004] ? rcu_is_watching+0x15/0xb0 [ 1104.949486][T14004] ? trace_kmalloc+0x2a/0x110 [ 1104.949517][T14004] ? __nla_parse+0x40/0x60 [ 1104.949551][T14004] ? genl_family_rcv_msg_attrs_parse+0x1c9/0x2a0 [ 1104.949584][T14004] genl_family_rcv_msg_doit+0x22a/0x330 [ 1104.949613][T14004] ? __pfx_genl_family_rcv_msg_doit+0x10/0x10 [ 1104.949647][T14004] ? bpf_lsm_capable+0x9/0x20 [ 1104.949670][T14004] ? security_capable+0x7e/0x2c0 [ 1104.949699][T14004] genl_rcv_msg+0x61c/0x7a0 [ 1104.949722][T14004] ? __pfx_genl_rcv_msg+0x10/0x10 [ 1104.949738][T14004] ? __pfx_hwsim_new_radio_nl+0x10/0x10 [ 1104.949757][T14004] ? __lock_acquire+0x6b5/0x2cf0 [ 1104.949789][T14004] netlink_rcv_skb+0x232/0x4b0 [ 1104.949812][T14004] ? __pfx_genl_rcv_msg+0x10/0x10 [ 1104.949831][T14004] ? __pfx_netlink_rcv_skb+0x10/0x10 [ 1104.949870][T14004] ? down_read+0x272/0x2e0 [ 1104.949887][T14004] ? genl_rcv+0xd/0x40 [ 1104.949904][T14004] genl_rcv+0x28/0x40 [ 1104.949919][T14004] netlink_unicast+0x80f/0x9b0 [ 1104.949947][T14004] ? __pfx_netlink_unicast+0x10/0x10 [ 1104.949966][T14004] ? __kvmalloc_node_noprof+0x393/0x8a0 [ 1104.949995][T14004] ? netlink_sendmsg+0x650/0xb40 [ 1104.950022][T14004] ? skb_put+0x11b/0x210 [ 1104.950051][T14004] netlink_sendmsg+0x813/0xb40 [ 1104.950083][T14004] ? __pfx_netlink_sendmsg+0x10/0x10 [ 1104.950109][T14004] ? aa_sock_msg_perm+0xf1/0x1b0 [ 1104.950133][T14004] ? bpf_lsm_socket_sendmsg+0x9/0x20 [ 1104.950155][T14004] ____sys_sendmsg+0x972/0x9f0 [ 1104.950170][T14004] ? futex_unqueue+0x211/0x240 [ 1104.950198][T14004] ? __pfx_____sys_sendmsg+0x10/0x10 [ 1104.950224][T14004] ? import_iovec+0x73/0xa0 [ 1104.950254][T14004] ___sys_sendmsg+0x2a5/0x360 [ 1104.950277][T14004] ? __pfx____sys_sendmsg+0x10/0x10 [ 1104.950301][T14004] ? futex_wait+0x29a/0x380 [ 1104.950351][T14004] ? __fget_files+0x2a/0x420 [ 1104.950375][T14004] ? __fget_files+0x3a0/0x420 [ 1104.950409][T14004] __x64_sys_sendmsg+0x1bd/0x2a0 [ 1104.950429][T14004] ? __pfx___x64_sys_sendmsg+0x10/0x10 [ 1104.950462][T14004] ? rcu_is_watching+0x15/0xb0 [ 1104.950497][T14004] do_syscall_64+0x14d/0xf80 [ 1104.950512][T14004] ? trace_irq_disable+0x3b/0x150 [ 1104.950535][T14004] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1104.950556][T14004] ? clear_bhb_loop+0x40/0x90 [ 1104.950582][T14004] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1104.950599][T14004] RIP: 0033:0x7f72d219c799 [ 1104.950616][T14004] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 1104.950630][T14004] RSP: 002b:00007f72d30dc028 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 1104.950649][T14004] RAX: ffffffffffffffda RBX: 00007f72d2415fa0 RCX: 00007f72d219c799 [ 1104.950661][T14004] RDX: 0000000000000010 RSI: 0000200000000100 RDI: 0000000000000005 [ 1104.950672][T14004] RBP: 00007f72d2232c99 R08: 0000000000000000 R09: 0000000000000000 [ 1104.950682][T14004] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 1104.950693][T14004] R13: 00007f72d2416038 R14: 00007f72d2415fa0 R15: 00007fff8f64c918 [ 1104.950723][T14004] [ 1105.423174][ C1] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1105.566348][T14016] netlink: 40 bytes leftover after parsing attributes in process `syz.1.10890'. [ 1105.678224][T14024] dvmrp6: entered allmulticast mode [ 1105.731508][T14022] netlink: 212376 bytes leftover after parsing attributes in process `syz.6.10891'. [ 1106.321431][T14048] netlink: 8 bytes leftover after parsing attributes in process `syz.5.10901'. [ 1106.453282][ C1] net_ratelimit: 1 callbacks suppressed [ 1106.453305][ C1] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1106.470446][T14181] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1106.532330][T14057] xt_addrtype: ipv6 BLACKHOLE matching not supported [ 1106.542091][T14059] openvswitch: netlink: Multiple metadata blocks provided [ 1106.550956][T26215] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1106.566551][T14061] netlink: 8 bytes leftover after parsing attributes in process `syz.2.10906'. [ 1106.576227][T14061] netlink: 8 bytes leftover after parsing attributes in process `syz.2.10906'. [ 1106.626200][T14063] openvswitch: netlink: Multiple metadata blocks provided [ 1106.714636][T11196] Bluetooth: hci7: unexpected cc 0x0c03 length: 249 > 1 [ 1106.729747][T11196] Bluetooth: hci7: unexpected cc 0x1003 length: 249 > 9 [ 1106.742217][T11196] Bluetooth: hci7: unexpected cc 0x1001 length: 249 > 9 [ 1106.752995][T11196] Bluetooth: hci7: unexpected cc 0x0c23 length: 249 > 4 [ 1106.763398][T11196] Bluetooth: hci7: unexpected cc 0x0c38 length: 249 > 2 [ 1106.835358][T14070] IPv6: sit2: Disabled Multicast RS [ 1106.842173][T14070] sit2: entered allmulticast mode [ 1106.890291][T14076] xt_hashlimit: invalid rate [ 1107.052706][T14066] ip6_vti0 speed is unknown, defaulting to 1000 [ 1107.095129][ T6739] wlan1: Trigger new scan to find an IBSS to join [ 1107.097029][T14087] syzkaller0: entered promiscuous mode [ 1107.123480][T14087] syzkaller0: entered allmulticast mode [ 1107.150144][T14087] tcf_pedit_act: 7 callbacks suppressed [ 1107.150165][T14087] tc action pedit offset must be on 32 bit boundaries [ 1107.163186][T14087] tc action pedit offset must be on 32 bit boundaries [ 1107.170012][T14087] tc action pedit offset must be on 32 bit boundaries [ 1107.177046][T14087] tc action pedit offset must be on 32 bit boundaries [ 1107.183977][T14087] tc action pedit offset must be on 32 bit boundaries [ 1107.190955][T14087] tc action pedit offset must be on 32 bit boundaries [ 1107.197801][T14087] tc action pedit offset must be on 32 bit boundaries [ 1107.204892][T14087] tc action pedit offset must be on 32 bit boundaries [ 1107.211686][T14087] tc action pedit offset must be on 32 bit boundaries [ 1107.218614][T14087] tc action pedit offset must be on 32 bit boundaries [ 1107.225457][T14087] 0: reclassify loop, rule prio 0, protocol 800 [ 1107.574688][ T2140] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1107.691716][T14066] C speed is unknown, defaulting to 1000 [ 1107.892416][T14114] __nla_validate_parse: 2 callbacks suppressed [ 1107.892437][T14114] netlink: 20 bytes leftover after parsing attributes in process `syz.6.10923'. [ 1107.922917][T14110] netlink: 12 bytes leftover after parsing attributes in process `syz.2.10922'. [ 1108.015859][T14119] netlink: 4 bytes leftover after parsing attributes in process `syz.6.10923'. [ 1108.426146][T14137] netlink: 12 bytes leftover after parsing attributes in process `syz.6.10929'. [ 1108.505698][T14137] 8021q: adding VLAN 0 to HW filter on device bond3 [ 1108.614728][T26215] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1108.856520][ T5835] Bluetooth: hci7: command tx timeout [ 1108.982987][T14066] chnl_net:caif_netlink_parms(): no params data found [ 1109.655069][T26215] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1109.665810][ T6739] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1109.692053][T14066] bridge0: port 1(bridge_slave_0) entered blocking state [ 1109.711137][T14066] bridge0: port 1(bridge_slave_0) entered disabled state [ 1109.721675][T14066] bridge_slave_0: entered allmulticast mode [ 1109.765574][T14066] bridge_slave_0: entered promiscuous mode [ 1109.785688][T14066] bridge0: port 2(bridge_slave_1) entered blocking state [ 1109.792873][T14066] bridge0: port 2(bridge_slave_1) entered disabled state [ 1109.814181][T14066] bridge_slave_1: entered allmulticast mode [ 1109.826541][T14066] bridge_slave_1: entered promiscuous mode [ 1109.893649][T14066] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 1109.907564][T14066] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 1110.013454][T14066] team0: Port device team_slave_0 added [ 1110.034423][T14066] team0: Port device team_slave_1 added [ 1110.125150][T14066] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 1110.143401][T14066] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 1110.197167][T14066] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 1110.227417][T14066] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 1110.244436][T14066] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 1110.299869][T14066] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 1110.459687][T14066] hsr_slave_0: entered promiscuous mode [ 1110.486456][T14066] hsr_slave_1: entered promiscuous mode [ 1110.500930][T14066] debugfs: 'hsr0' already exists in 'hsr' [ 1110.515955][T14066] Cannot create hsr debugfs directory [ 1110.944828][T11196] Bluetooth: hci7: command tx timeout [ 1111.733902][ C1] net_ratelimit: 3 callbacks suppressed [ 1111.733926][ C1] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1111.748842][T26215] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1111.927659][T14219] bond0: option ad_select: unable to set because the bond device is up [ 1112.055221][T14198] wlan1: Trigger new scan to find an IBSS to join [ 1112.226464][T14198] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1112.327672][T14178] nci: __nci_request: wait_for_completion_interruptible_timeout failed -512 [ 1112.383524][T14066] netdevsim netdevsim7 netdevsim0: renamed from eth0 [ 1112.449097][T14066] netdevsim netdevsim7 netdevsim1: renamed from eth1 [ 1112.538106][T14066] netdevsim netdevsim7 netdevsim2: renamed from eth2 [ 1112.613000][T14066] netdevsim netdevsim7 netdevsim3: renamed from eth3 [ 1112.640549][T14228] netlink: 4 bytes leftover after parsing attributes in process `syz.2.10948'. [ 1112.775763][ C1] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1112.785468][T26215] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1112.947889][ T6739] wlan1: Creating new IBSS network, BSSID c2:70:ba:67:63:4d [ 1113.022726][T11196] Bluetooth: hci7: command tx timeout [ 1113.074597][T14246] netlink: 'syz.5.10950': attribute type 11 has an invalid length. [ 1113.120185][T14066] 8021q: adding VLAN 0 to HW filter on device bond0 [ 1113.141514][T14251] netlink: 16 bytes leftover after parsing attributes in process `syz.1.10953'. [ 1113.303573][T14066] 8021q: adding VLAN 0 to HW filter on device team0 [ 1113.351233][T14196] bridge0: port 1(bridge_slave_0) entered blocking state [ 1113.358620][T14196] bridge0: port 1(bridge_slave_0) entered forwarding state [ 1113.422640][ T6739] bridge0: port 2(bridge_slave_1) entered blocking state [ 1113.429906][ T6739] bridge0: port 2(bridge_slave_1) entered forwarding state [ 1113.571223][T14264] netlink: 'syz.6.10956': attribute type 2 has an invalid length. [ 1113.640339][T14066] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 1113.797301][T14273] netlink: 28 bytes leftover after parsing attributes in process `syz.6.10959'. [ 1113.813570][ C1] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1113.825053][ T2143] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1114.022833][T14284] netlink: 16 bytes leftover after parsing attributes in process `syz.5.10960'. [ 1114.074491][T14287] netlink: 'syz.6.10962': attribute type 3 has an invalid length. [ 1114.315682][T14066] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 1114.853321][ C1] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1114.862011][ T2140] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1114.933361][T14311] atm:do_vcc_ioctl: ATM_SETSC is obsolete; used by syz.1.10967:14311 [ 1115.096469][T11196] Bluetooth: hci7: command tx timeout [ 1115.415603][T14332] netlink: 28 bytes leftover after parsing attributes in process `syz.2.10971'. [ 1115.426142][T14332] netlink: 'syz.2.10971': attribute type 7 has an invalid length. [ 1115.441735][T14332] netlink: 16 bytes leftover after parsing attributes in process `syz.2.10971'. [ 1115.467405][T14335] IPVS: set_ctl: invalid protocol: 58 0.0.0.0:20000 [ 1115.703335][T14337] netlink: 12 bytes leftover after parsing attributes in process `syz.6.10972'. [ 1115.848024][T14066] veth0_vlan: entered promiscuous mode [ 1115.907391][T14066] veth1_vlan: entered promiscuous mode [ 1115.934949][T14339] netlink: 'syz.5.10974': attribute type 24 has an invalid length. [ 1115.991984][T14341] netlink: 'syz.2.10973': attribute type 2 has an invalid length. [ 1116.050678][T14341] 9: entered promiscuous mode [ 1116.071835][ T1298] lec:lec_start_xmit: lec0:No lecd attached [ 1116.172530][T14066] veth0_macvtap: entered promiscuous mode [ 1116.280362][T14066] veth1_macvtap: entered promiscuous mode [ 1116.412537][T14066] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 1116.508474][T14066] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 1116.593685][T14196] netdevsim netdevsim7 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 1116.630257][T14196] netdevsim netdevsim7 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 1116.677700][T14196] netdevsim netdevsim7 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 1116.762151][T14196] netdevsim netdevsim7 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 1116.884647][T14368] netlink: 4 bytes leftover after parsing attributes in process `syz.6.10981'. [ 1116.933455][ C1] net_ratelimit: 3 callbacks suppressed [ 1116.933476][ C1] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1116.948685][ T2144] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1117.208092][T14205] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 1117.227496][T14205] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 1117.390782][T14196] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 1117.427316][T14196] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 1117.448141][T14386] netlink: 36 bytes leftover after parsing attributes in process `syz.6.10987'. [ 1117.475090][T14385] netlink: 'syz.1.10986': attribute type 1 has an invalid length. [ 1117.587730][T14390] netlink: 'syz.1.10986': attribute type 1 has an invalid length. [ 1117.596906][T14390] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 1117.792049][T14395] netlink: 'syz.7.10900': attribute type 1 has an invalid length. [ 1117.888972][T14402] netlink: 4 bytes leftover after parsing attributes in process `syz.1.10991'. [ 1117.908320][T14394] netlink: 'syz.7.10900': attribute type 1 has an invalid length. [ 1117.973429][ C1] ip6_tunnel: ip6gre2 xmit: Local address not yet configured! [ 1117.975820][T14196] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1117.989315][ C1] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1117.998762][ T2139] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1118.186167][T14394] workqueue: Failed to create a rescuer kthread for wq "bond2": -EINTR [ 1118.253970][T14415] team_slave_0: Caught tx_queue_len zero misconfig [ 1118.794538][ T5835] Bluetooth: hci8: unexpected cc 0x0c03 length: 249 > 1 [ 1118.806853][ T5835] Bluetooth: hci8: unexpected cc 0x1003 length: 249 > 9 [ 1118.821445][ T5835] Bluetooth: hci8: unexpected cc 0x1001 length: 249 > 9 [ 1118.846631][ T5835] Bluetooth: hci8: unexpected cc 0x0c23 length: 249 > 4 [ 1118.864561][ T5835] Bluetooth: hci8: unexpected cc 0x0c38 length: 249 > 2 [ 1119.019169][T13048] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1119.061025][T14434] ip6_vti0 speed is unknown, defaulting to 1000 [ 1119.737825][T14467] netlink: 16 bytes leftover after parsing attributes in process `syz.7.11007'. [ 1119.983498][ T6739] netdevsim netdevsim5 netdevsim3 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 1120.024396][ T6739] netdevsim netdevsim5 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1120.054448][ T2139] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1120.099991][T14482] netlink: 32 bytes leftover after parsing attributes in process `syz.2.11011'. [ 1120.136593][T14485] netlink: 28 bytes leftover after parsing attributes in process `syz.1.11012'. [ 1120.137313][T14434] C speed is unknown, defaulting to 1000 [ 1120.306988][ T6739] netdevsim netdevsim5 netdevsim2 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 1120.324499][ T6739] netdevsim netdevsim5 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1120.394995][T14493] netlink: 8 bytes leftover after parsing attributes in process `syz.2.11015'. [ 1120.415289][T14493] openvswitch: netlink: Flow get message rejected, Key attribute missing. [ 1120.535836][T14181] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1120.648236][ T6739] netdevsim netdevsim5 netdevsim1 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 1120.678903][ T6739] netdevsim netdevsim5 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1120.798184][T14190] netdevsim netdevsim6 netdevsim0: set [0, 0] type 1 family 0 port 8472 - 0 [ 1120.827737][T14190] netdevsim netdevsim6 netdevsim1: set [0, 0] type 1 family 0 port 8472 - 0 [ 1120.859125][T14190] netdevsim netdevsim6 netdevsim2: set [0, 0] type 1 family 0 port 8472 - 0 [ 1120.933995][ T5835] Bluetooth: hci8: command tx timeout [ 1120.975005][T14519] netlink: 24 bytes leftover after parsing attributes in process `syz.2.11022'. [ 1120.992315][ T6739] netdevsim netdevsim5 netdevsim0 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 1121.012950][T14190] netdevsim netdevsim6 netdevsim3: set [0, 0] type 1 family 0 port 8472 - 0 [ 1121.083228][ C1] lec0: NETDEV WATCHDOG: CPU: 1: transmit queue 0 timed out 5010 ms [ 1121.091386][ C1] lec:lec_tx_timeout: lec0 [ 1121.261087][T14521] syzkaller1: entered promiscuous mode [ 1121.275838][T14521] syzkaller1: entered allmulticast mode [ 1121.534883][T14550] xt_addrtype: ipv6 does not support BROADCAST matching [ 1121.635904][T14193] netdevsim netdevsim5 eth1: set [0, 0] type 1 family 0 port 8472 - 0 [ 1121.691355][T14555] xt_hashlimit: size too large, truncated to 1048576 [ 1121.704864][T14196] netdevsim netdevsim5 eth2: set [0, 0] type 1 family 0 port 8472 - 0 [ 1121.830568][T14194] netdevsim netdevsim5 eth3: set [0, 0] type 1 family 0 port 8472 - 0 [ 1122.048813][T14193] netdevsim netdevsim5 eth4: set [0, 0] type 1 family 0 port 8472 - 0 [ 1122.134479][T26215] net_ratelimit: 3 callbacks suppressed [ 1122.134501][T26215] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1122.278317][T14582] sctp: [Deprecated]: syz.2.11032 (pid 14582) Use of struct sctp_assoc_value in delayed_ack socket option. [ 1122.278317][T14582] Use struct sctp_sack_info instead [ 1122.358418][T14584] netlink: 'syz.2.11032': attribute type 1 has an invalid length. [ 1122.462694][T14586] netlink: 132 bytes leftover after parsing attributes in process `syz.1.11033'. [ 1122.613219][ C1] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1123.013306][ T5835] Bluetooth: hci8: command tx timeout [ 1123.032224][ T6739] dvmrp6 (unregistering): left allmulticast mode [ 1123.186421][T26215] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1123.328206][ T6739] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 1123.342027][ T6739] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 1123.353512][ T6739] bond0 (unregistering): Released all slaves [ 1123.365627][ T6739] bond1 (unregistering): Released all slaves [ 1123.379654][ T6739] bond2 (unregistering): Released all slaves [ 1123.394842][ T6739] bond3 (unregistering): Released all slaves [ 1123.418869][ T6739] bond4 (unregistering): Released all slaves [ 1123.432700][ T6739] bond5 (unregistering): Released all slaves [ 1123.451857][ T6739] bond6 (unregistering): (slave veth0_to_bond): Releasing active interface [ 1123.462544][ T6739] bond6 (unregistering): Released all slaves [ 1123.477084][ T6739] bond7 (unregistering): Released all slaves [ 1123.496860][ T6739] bond8 (unregistering): Released all slaves [ 1123.511160][ T6739] bond9 (unregistering): Released all slaves [ 1123.533899][ T6739] bond10 (unregistering): Released all slaves [ 1123.552026][ T6739] bond11 (unregistering): Released all slaves [ 1123.617162][T14594] netdevsim netdevsim7 netdevsim0: entered promiscuous mode [ 1123.659139][ C1] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1123.723910][T14434] chnl_net:caif_netlink_parms(): no params data found [ 1123.741663][T14194] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1123.922999][ T6739] tipc: Left network mode [ 1124.113913][T14621] netlink: 12 bytes leftover after parsing attributes in process `syz.7.11042'. [ 1124.203933][T14434] bridge0: port 1(bridge_slave_0) entered blocking state [ 1124.212181][T14434] bridge0: port 1(bridge_slave_0) entered disabled state [ 1124.225341][T26215] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1124.234200][T14434] bridge_slave_0: entered allmulticast mode [ 1124.243795][T14434] bridge_slave_0: entered promiscuous mode [ 1124.253952][T14434] bridge0: port 2(bridge_slave_1) entered blocking state [ 1124.262234][T14434] bridge0: port 2(bridge_slave_1) entered disabled state [ 1124.270346][T14434] bridge_slave_1: entered allmulticast mode [ 1124.279781][T14434] bridge_slave_1: entered promiscuous mode [ 1124.296509][ T5835] block nbd9: Receive control failed (result -1) [ 1124.434111][T14434] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 1124.586272][T14434] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 1124.664766][T14650] netlink: 12 bytes leftover after parsing attributes in process `syz.6.11049'. [ 1124.693522][ C1] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1124.954591][T14434] team0: Port device team_slave_0 added [ 1125.088843][T14434] team0: Port device team_slave_1 added [ 1125.098496][ T5835] Bluetooth: hci8: command tx timeout [ 1125.218556][T14670] sctp: [Deprecated]: syz.7.11054 (pid 14670) Use of struct sctp_assoc_value in delayed_ack socket option. [ 1125.218556][T14670] Use struct sctp_sack_info instead [ 1125.256877][T13048] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1125.292631][T14672] netlink: 16 bytes leftover after parsing attributes in process `syz.7.11054'. [ 1125.329309][T14434] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 1125.350553][T14434] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 1125.406673][T14678] netlink: 96 bytes leftover after parsing attributes in process `syz.6.11055'. [ 1125.408249][T14434] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 1125.448240][T14434] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 1125.455885][T14434] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 1125.549850][T14434] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 1125.582731][T14678] 8021q: VLANs not supported on ip_vti0 [ 1125.733172][ C1] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1125.796429][T14688] netlink: 212348 bytes leftover after parsing attributes in process `syz.6.11058'. [ 1126.031556][T14434] hsr_slave_0: entered promiscuous mode [ 1126.104695][T14434] hsr_slave_1: entered promiscuous mode [ 1126.111467][T14434] debugfs: 'hsr0' already exists in 'hsr' [ 1126.152551][T14434] Cannot create hsr debugfs directory [ 1126.334337][T13048] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1127.076186][T14736] netlink: 'syz.1.11070': attribute type 1 has an invalid length. [ 1127.100206][T14736] netlink: 4 bytes leftover after parsing attributes in process `syz.1.11070'. [ 1127.120994][T14736] netlink: 'syz.1.11070': attribute type 1 has an invalid length. [ 1127.175293][ T5835] Bluetooth: hci8: command tx timeout [ 1127.271504][ T6739] hsr_slave_0: left promiscuous mode [ 1127.312314][ T6739] hsr_slave_1: left promiscuous mode [ 1127.325126][ T6739] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 1127.361809][ T6739] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 1127.389982][ T6739] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 1127.411943][ T6739] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 1127.441895][ T6739] veth1_vlan: left allmulticast mode [ 1127.444769][ T2139] net_ratelimit: 3 callbacks suppressed [ 1127.444786][ T2139] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1127.450517][ T6739] veth1_macvtap: left promiscuous mode [ 1127.498861][ T6739] veth0_macvtap: left promiscuous mode [ 1127.505126][ T6739] veth1_vlan: left promiscuous mode [ 1127.510605][ T6739] veth0_vlan: left promiscuous mode [ 1127.717079][ T6739] pimreg (unregistering): left allmulticast mode [ 1127.813165][ C1] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1127.998760][ T6739] veth0_to_team (unregistering): left allmulticast mode [ 1128.079643][T14194] smc: removing ib device syz0 [ 1128.256647][T14434] netdevsim netdevsim5 eth4 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 1128.453636][T26215] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1128.465254][T14773] netlink: 12 bytes leftover after parsing attributes in process `syz.6.11075'. [ 1128.513576][T14773] tc_dump_action: action bad kind [ 1128.687341][T14775] wlan1: mtu greater than device maximum [ 1128.754108][T14434] netdevsim netdevsim5 eth3 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 1128.858427][ C1] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1128.916943][T14780] netlink: 40 bytes leftover after parsing attributes in process `syz.2.11078'. [ 1128.947671][T14780] netlink: 40 bytes leftover after parsing attributes in process `syz.2.11078'. [ 1129.117093][T14434] netdevsim netdevsim5 eth2 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 1129.182436][T14783] netlink: 1204 bytes leftover after parsing attributes in process `syz.1.11080'. [ 1129.386333][T14434] netdevsim netdevsim5 eth1 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 1129.491470][T14802] netlink: 1 bytes leftover after parsing attributes in process `syz.2.11085'. [ 1129.495153][T14196] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1129.512625][T26215] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1130.138967][T14830] xt_hashlimit: size too large, truncated to 1048576 [ 1130.535753][T26215] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1130.885217][T14434] netdevsim netdevsim5 netdevsim0: renamed from eth0 [ 1130.936263][T14434] netdevsim netdevsim5 netdevsim1: renamed from eth1 [ 1130.960003][T14854] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 1131.019387][T14434] netdevsim netdevsim5 netdevsim2: renamed from eth2 [ 1131.136456][T14434] netdevsim netdevsim5 netdevsim3: renamed from eth3 [ 1131.586784][T26215] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1131.598116][T14434] 8021q: adding VLAN 0 to HW filter on device bond0 [ 1131.670029][T14434] 8021q: adding VLAN 0 to HW filter on device team0 [ 1131.718447][T14199] bridge0: port 1(bridge_slave_0) entered blocking state [ 1131.725966][T14199] bridge0: port 1(bridge_slave_0) entered forwarding state [ 1131.831773][T14190] bridge0: port 2(bridge_slave_1) entered blocking state [ 1131.839048][T14190] bridge0: port 2(bridge_slave_1) entered forwarding state [ 1132.034068][T14891] bridge_slave_0: left allmulticast mode [ 1132.039792][T14891] bridge_slave_0: left promiscuous mode [ 1132.089041][T14891] bridge0: port 1(bridge_slave_0) entered disabled state [ 1132.234578][T14891] bridge_slave_1: left allmulticast mode [ 1132.240755][T14891] bridge_slave_1: left promiscuous mode [ 1132.269861][T14891] bridge0: port 2(bridge_slave_1) entered disabled state [ 1132.342453][T14891] bond0: (slave bond_slave_0): Releasing backup interface [ 1132.447613][T14891] bond0: (slave bond_slave_1): Releasing backup interface [ 1132.513949][T14891] team0: Port device team_slave_0 removed [ 1132.579652][T14891] team0: Port device team_slave_1 removed [ 1132.615882][T14891] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 1132.624766][ T2144] net_ratelimit: 1 callbacks suppressed [ 1132.624787][ T2144] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1132.667334][T14891] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 1132.689135][T14891] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 1132.697573][ T150] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1132.733509][T14891] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 1132.772150][T14891] A link change request failed with some changes committed already. Interface hsr_slave_0 may have been left with an inconsistent configuration, please check. [ 1132.905772][T14900] team0: Port device ip6gre1 added [ 1133.093188][ C1] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1133.215181][T14931] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 1133.264251][T14931] netlink: 4 bytes leftover after parsing attributes in process `syz.7.11108'. [ 1133.351828][T14936] netlink: 'syz.1.11110': attribute type 1 has an invalid length. [ 1133.498669][ T5141] Bluetooth: hci2: command 0x0405 tx timeout [ 1133.537358][T14944] netlink: 'syz.2.11111': attribute type 1 has an invalid length. [ 1133.663101][T26215] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1134.133721][ C1] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1134.376564][T14983] netlink: 256 bytes leftover after parsing attributes in process `syz.2.11115'. [ 1134.540750][T14988] netlink: 'syz.7.11117': attribute type 1 has an invalid length. [ 1134.699244][ T2139] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1134.702995][T14994] netlink: 144 bytes leftover after parsing attributes in process `syz.6.11119'. [ 1134.827676][T14434] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 1134.872615][T14994] netlink: 'syz.6.11119': attribute type 1 has an invalid length. [ 1134.881408][T14994] netlink: 96 bytes leftover after parsing attributes in process `syz.6.11119'. [ 1134.922694][T14994] netlink: 1 bytes leftover after parsing attributes in process `syz.6.11119'. [ 1134.961728][T14994] netlink: 658 bytes leftover after parsing attributes in process `syz.6.11119'. [ 1135.128723][T14997] syzkaller0: entered promiscuous mode [ 1135.147163][T14997] syzkaller0: entered allmulticast mode [ 1135.173429][ C1] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1135.223951][T15008] netlink: 'syz.1.11121': attribute type 13 has an invalid length. [ 1135.263718][T14205] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1137.734149][T14181] net_ratelimit: 4 callbacks suppressed [ 1137.734175][T14181] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1137.830829][ T2144] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1138.178792][T15039] netlink: 'syz.1.11125': attribute type 1 has an invalid length. [ 1138.224682][T15039] 8021q: adding VLAN 0 to HW filter on device bond3 [ 1138.293461][ C1] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1138.465323][T15058] netlink: 48 bytes leftover after parsing attributes in process `syz.6.11131'. [ 1138.634427][T14434] veth0_vlan: entered promiscuous mode [ 1138.657997][T14434] veth1_vlan: entered promiscuous mode [ 1138.715677][T15068] pimreg3: entered allmulticast mode [ 1138.761892][T14434] veth0_macvtap: entered promiscuous mode [ 1138.798731][T14434] veth1_macvtap: entered promiscuous mode [ 1138.854173][ T2139] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1138.878128][T14434] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 1138.900544][T14434] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 1138.931579][ T150] netdevsim netdevsim5 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 1138.952737][ T150] netdevsim netdevsim5 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 1139.092797][ T150] netdevsim netdevsim5 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 1139.130606][ T150] netdevsim netdevsim5 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 1139.186734][T15080] SET target dimension over the limit! [ 1139.333699][ C1] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1139.377872][T15084] !: renamed from dummy0 (while UP) [ 1139.385405][T15083] netlink: 28 bytes leftover after parsing attributes in process `syz.7.11140'. [ 1139.423353][T14205] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 1139.431398][T14205] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 1139.500202][T14196] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 1139.542045][T14196] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 1139.906864][T26215] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1139.934493][T15103] netlink: 4 bytes leftover after parsing attributes in process `syz.5.10994'. [ 1140.373254][ C1] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1140.381626][T14198] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1140.556308][T15138] netlink: 72 bytes leftover after parsing attributes in process `syz.2.11152'. [ 1140.632666][T15139] netlink: 20 bytes leftover after parsing attributes in process `syz.6.11154'. [ 1140.838652][T15147] syzkaller0: entered promiscuous mode [ 1140.844641][T15147] syzkaller0: entered allmulticast mode [ 1140.864216][T15147] netlink: 8 bytes leftover after parsing attributes in process `syz.1.11155'. [ 1140.885369][T15147] netlink: 'syz.1.11155': attribute type 5 has an invalid length. [ 1140.933557][T13048] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1140.942066][T15147] netlink: 20 bytes leftover after parsing attributes in process `syz.1.11155'. [ 1141.160458][T15157] netlink: 24 bytes leftover after parsing attributes in process `syz.7.11160'. [ 1141.267667][T15157] netlink: 'syz.7.11160': attribute type 9 has an invalid length. [ 1141.748288][T15183] netlink: 8 bytes leftover after parsing attributes in process `syz.1.11167'. [ 1141.802053][T15183] netlink: 24 bytes leftover after parsing attributes in process `syz.1.11167'. [ 1141.983562][T26215] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1142.424547][T15220] IPv6: NLM_F_REPLACE set, but no existing node found! [ 1142.681690][T15230] ip6_vti0 speed is unknown, defaulting to 1000 [ 1142.759047][T15236] tunl0: Caught tx_queue_len zero misconfig [ 1143.014465][T13048] net_ratelimit: 1 callbacks suppressed [ 1143.014489][T13048] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1143.062538][T15248] bridge0: trying to set multicast query interval below minimum, setting to 100 (1000ms) [ 1143.478631][T15270] __nla_validate_parse: 2 callbacks suppressed [ 1143.478653][T15270] netlink: 44 bytes leftover after parsing attributes in process `syz.6.11187'. [ 1143.578049][ T6739] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1143.589953][ T150] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1143.789322][T15279] bridge2: entered promiscuous mode [ 1143.804156][T15279] bridge2: entered allmulticast mode [ 1143.835806][T15279] team0: Port device bridge2 added [ 1143.842279][T15280] bridge0: port 3(team0) entered blocking state [ 1143.862964][T15280] bridge0: port 3(team0) entered disabled state [ 1143.882765][T15280] team0: entered allmulticast mode [ 1143.884504][T15288] netlink: 12 bytes leftover after parsing attributes in process `syz.7.11193'. [ 1143.902263][T15280] team_slave_0: entered allmulticast mode [ 1143.909146][T15280] team_slave_1: entered allmulticast mode [ 1143.915527][T15280] dummy0: entered allmulticast mode [ 1143.924976][T15280] team0: entered promiscuous mode [ 1143.944458][T15280] team_slave_0: entered promiscuous mode [ 1143.950505][T15280] team_slave_1: entered promiscuous mode [ 1143.982370][T15280] dummy0: entered promiscuous mode [ 1144.007129][T15280] bridge0: port 3(team0) entered blocking state [ 1144.013628][T15280] bridge0: port 3(team0) entered forwarding state [ 1144.057417][ T2139] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1144.230720][T15288] bond3: entered promiscuous mode [ 1144.231333][T15303] netlink: 'syz.6.11194': attribute type 1 has an invalid length. [ 1144.248012][T15288] 8021q: adding VLAN 0 to HW filter on device bond3 [ 1144.269663][T15303] netlink: 300 bytes leftover after parsing attributes in process `syz.6.11194'. [ 1144.345148][T15306] 8021q: adding VLAN 0 to HW filter on device bond3 [ 1144.359140][T15306] bond3: (slave sit1): The slave device specified does not support setting the MAC address [ 1144.385480][T15306] bond3: (slave sit1): Error -95 calling set_mac_address [ 1144.565254][T15321] netlink: 28 bytes leftover after parsing attributes in process `syz.2.11198'. [ 1144.584273][T15321] netlink: 'syz.2.11198': attribute type 7 has an invalid length. [ 1144.613229][ C1] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1144.633211][T15321] netlink: 16 bytes leftover after parsing attributes in process `syz.2.11198'. [ 1144.785303][T15328] openvswitch: netlink: Either Ethernet header or EtherType is required. [ 1144.928835][T15337] netlink: 1 bytes leftover after parsing attributes in process `syz.1.11205'. [ 1144.947338][T15331] netlink: 8 bytes leftover after parsing attributes in process `syz.5.11201'. [ 1144.960736][T15337] xt_policy: neither incoming nor outgoing policy selected [ 1145.093542][T26215] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1145.102487][T14205] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1145.111938][T26215] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1145.124392][ T2139] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1145.381968][T15361] netlink: 96 bytes leftover after parsing attributes in process `syz.2.11209'. [ 1145.497456][T14205] wlan1: No active IBSS STAs - trying to scan for other IBSS networks with same SSID (merge) [ 1145.529900][T15365] syzkaller0: entered promiscuous mode [ 1145.554326][T15365] syzkaller0: entered allmulticast mode [ 1145.573625][T15375] workqueue: Failed to create a rescuer kthread for wq "nfc2_nci_rx_wq": -EINTR [ 1145.597001][T15376] bond_slave_0: Caught tx_queue_len zero misconfig [ 1146.033463][T15400] netlink: 28 bytes leftover after parsing attributes in process `syz.5.11217'. [ 1146.092041][T15404] x_tables: ip6_tables: mh match: only valid for protocol 135 [ 1146.126229][T15405] netlink: 16 bytes leftover after parsing attributes in process `syz.7.11219'. [ 1146.522589][T15419] syzkaller1: entered promiscuous mode [ 1146.572282][T15419] syzkaller1: entered allmulticast mode [ 1146.746385][T15434] bridge0: port 1(ipvlan2) entered blocking state [ 1146.753269][T15434] bridge0: port 1(ipvlan2) entered disabled state [ 1146.772767][T15434] ipvlan2: entered allmulticast mode [ 1146.809735][T15434] bridge0: entered allmulticast mode [ 1146.827991][T15434] ipvlan2: left allmulticast mode [ 1146.833769][T15434] bridge0: left allmulticast mode [ 1147.429089][T15464] syzkaller0: entered promiscuous mode [ 1147.466014][T15464] syzkaller0: entered allmulticast mode [ 1147.496181][T15464] veth0: entered promiscuous mode [ 1147.939004][T15461] veth0: left promiscuous mode [ 1148.215228][ T2139] net_ratelimit: 6 callbacks suppressed [ 1148.215250][ T2139] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1148.547817][T15529] __nla_validate_parse: 2 callbacks suppressed [ 1148.547844][T15529] netlink: 256 bytes leftover after parsing attributes in process `syz.1.11247'. [ 1148.609542][T15524] tipc: Enabled bearer , priority 0 [ 1148.705888][T15519] tipc: Disabling bearer [ 1148.756361][T15535] netlink: 12 bytes leftover after parsing attributes in process `syz.2.11249'. [ 1148.773398][ C1] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1148.872137][T15543] netlink: 212368 bytes leftover after parsing attributes in process `syz.2.11249'. [ 1148.897683][T15521] netlink: 20 bytes leftover after parsing attributes in process `syz.1.11247'. [ 1149.094567][T14194] wlan1: Trigger new scan to find an IBSS to join [ 1149.263237][ T2139] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1149.309794][T15569] veth0: entered promiscuous mode [ 1149.329707][T15569] veth0: left promiscuous mode [ 1149.371691][T15577] veth0: entered promiscuous mode [ 1149.380393][T15569] veth0: left promiscuous mode [ 1149.582192][T15583] netlink: 28 bytes leftover after parsing attributes in process `syz.6.11258'. [ 1149.621411][T15586] netlink: 20 bytes leftover after parsing attributes in process `syz.1.11259'. [ 1149.665952][T15590] netlink: 'syz.2.11261': attribute type 1 has an invalid length. [ 1149.717105][T15586] netlink: 28 bytes leftover after parsing attributes in process `syz.1.11259'. [ 1149.743701][T15593] netlink: 28 bytes leftover after parsing attributes in process `syz.7.11260'. [ 1149.755986][T15589] syzkaller0: entered promiscuous mode [ 1149.763875][T15589] syzkaller0: entered allmulticast mode [ 1149.813413][ C1] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1150.282862][T15618] netlink: 8 bytes leftover after parsing attributes in process `syz.1.11269'. [ 1150.302671][ T2139] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1150.616937][ T6739] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1150.625988][T14198] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1150.635450][T14181] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1150.646932][ T2134] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1150.657999][T26215] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1152.056032][T14205] wlan1: Trigger new scan to find an IBSS to join [ 1152.133374][T11196] Bluetooth: hci8: command tx timeout [ 1152.635915][T15618] vlan3: entered allmulticast mode [ 1152.641262][T15618] mac80211_hwsim hwsim90 wlan0: entered allmulticast mode [ 1152.860719][T15629] syzkaller0: entered promiscuous mode [ 1152.886624][T15629] syzkaller0: entered allmulticast mode [ 1153.597307][T15674] netlink: 'syz.5.11285': attribute type 11 has an invalid length. [ 1153.615511][T15680] netlink: 256 bytes leftover after parsing attributes in process `syz.1.11286'. [ 1153.646262][T15682] netlink: 'syz.2.11287': attribute type 1 has an invalid length. [ 1153.652127][T15680] netlink: 4 bytes leftover after parsing attributes in process `syz.1.11286'. [ 1153.724540][T15685] netlink: 'syz.2.11287': attribute type 12 has an invalid length. [ 1153.732753][T15682] netlink: 224 bytes leftover after parsing attributes in process `syz.2.11287'. [ 1153.780682][T15686] netlink: 766 bytes leftover after parsing attributes in process `syz.5.11289'. [ 1153.813851][T13048] net_ratelimit: 5 callbacks suppressed [ 1153.813872][T13048] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1153.834438][T15693] netlink: 'syz.7.11290': attribute type 1 has an invalid length. [ 1153.907365][T15693] 8021q: adding VLAN 0 to HW filter on device bond4 [ 1153.929956][T15692] netlink: 8 bytes leftover after parsing attributes in process `syz.6.11288'. [ 1153.941387][T15693] vlan2: entered allmulticast mode [ 1153.962100][T15693] veth0_to_bond: entered allmulticast mode [ 1153.983841][ C1] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1153.997605][T15693] bond4: (slave vlan2): Enslaving as an active interface with a down link [ 1154.266837][T15710] netlink: 4 bytes leftover after parsing attributes in process `syz.6.11295'. [ 1154.681733][T15736] netlink: 'syz.1.11303': attribute type 10 has an invalid length. [ 1154.719398][T15742] netlink: 48 bytes leftover after parsing attributes in process `syz.5.11306'. [ 1154.729063][T15733] 5gQ[: renamed from lo (while UP) [ 1154.776487][ T30] audit: type=1800 audit(1773532266.187:25): pid=15742 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.5.11306" name="memory.events" dev="tmpfs" ino=150 res=0 errno=0 [ 1154.809558][T15736] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 1154.833519][ T30] audit: type=1804 audit(1773532266.187:26): pid=15742 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=invalid_pcr cause=ToMToU comm="syz.5.11306" name="/newroot/26/memory.events" dev="tmpfs" ino=150 res=1 errno=0 [ 1154.857710][T13048] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1154.868814][T15736] batadv0: entered promiscuous mode [ 1154.896854][T15736] bond0: (slave batadv0): Enslaving as an active interface with an up link [ 1154.912552][T15751] netlink: 'syz.5.11309': attribute type 1 has an invalid length. [ 1155.013238][ C1] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1155.093461][ C1] ip6_tunnel: ip6gre2 xmit: Local address not yet configured! [ 1155.105644][T14198] wlan1: Trigger new scan to find an IBSS to join [ 1155.291781][T15768] netlink: 12 bytes leftover after parsing attributes in process `syz.1.11313'. [ 1155.293948][T15772] netlink: 'syz.5.11314': attribute type 1 has an invalid length. [ 1155.304338][T15768] netlink: 12 bytes leftover after parsing attributes in process `syz.1.11313'. [ 1155.344184][T15772] workqueue: Failed to create a rescuer kthread for wq "bond1": -EINTR [ 1155.407902][T15769] syzkaller0: entered allmulticast mode [ 1155.461406][T15780] netlink: 8 bytes leftover after parsing attributes in process `syz.5.11317'. [ 1155.805440][T15793] xt_hashlimit: overflow, try lower: 3/0 [ 1155.895081][T26215] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1155.919560][T15801] syzkaller0: entered promiscuous mode [ 1155.932653][T15801] syzkaller0: entered allmulticast mode [ 1156.017627][T15805] openvswitch: netlink: IP tunnel dst address not specified [ 1156.027555][T14198] wlan1: Creating new IBSS network, BSSID 6a:e7:ce:55:82:c4 [ 1156.053509][ C1] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1156.205842][T14198] netdevsim netdevsim2 netdevsim0: unset [1, 0] type 2 family 0 port 6081 - 0 [ 1156.217649][T15810] netlink: 'syz.2.11326': attribute type 32 has an invalid length. [ 1156.246702][T14198] netdevsim netdevsim2 netdevsim0: unset [1, 1] type 2 family 0 port 19999 - 0 [ 1156.368007][T15810] bond10: Setting coupled_control to off (0) [ 1156.374702][T14199] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1156.383100][T14199] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1156.573892][T15839] openvswitch: netlink: ERSPAN option length err (len 256, max 255). [ 1156.584369][T15817] netlink: 'syz.1.11329': attribute type 10 has an invalid length. [ 1156.585089][T15833] 8021q: VLANs not supported on xfrm0 [ 1156.657600][ T30] audit: type=1800 audit(1773532268.067:27): pid=15842 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.7.11334" name="memory.events" dev="tmpfs" ino=341 res=0 errno=0 [ 1156.968553][T15850] veth0_macvtap: left promiscuous mode [ 1157.216090][T15871] macvlan0: entered promiscuous mode [ 1157.372065][T15877] netlink: 'syz.7.11346': attribute type 39 has an invalid length. [ 1157.765370][T15900] sctp: [Deprecated]: syz.2.11351 (pid 15900) Use of int in max_burst socket option. [ 1157.765370][T15900] Use struct sctp_assoc_value instead [ 1158.187138][T15932] "syz.2.11359" (15932) uses obsolete ecb(arc4) skcipher [ 1158.426718][T15949] SET target dimension over the limit! [ 1158.991313][T15920] bridge0: port 3(team0) entered disabled state [ 1158.998095][T15920] bridge0: port 2(bridge_slave_1) entered disabled state [ 1159.006444][T15920] bridge0: port 1(bridge_slave_0) entered disabled state [ 1159.027646][T13048] net_ratelimit: 4 callbacks suppressed [ 1159.027669][T13048] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1159.663588][T15920] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 1160.078058][T15981] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1160.215667][T14181] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1160.404569][T15959] sch_tbf: peakrate 5 is lower than or equals to rate 16783679728848008391 ! [ 1160.445423][T14194] netdevsim netdevsim6 netdevsim0: unset [0, 0] type 1 family 0 port 8472 - 0 [ 1160.461570][T16011] __nla_validate_parse: 78 callbacks suppressed [ 1160.461595][T16011] netlink: 24 bytes leftover after parsing attributes in process `syz.6.11369'. [ 1160.483325][T14194] netdevsim netdevsim6 netdevsim0: unset [1, 0] type 2 family 0 port 6081 - 0 [ 1160.513197][T14194] netdevsim netdevsim6 netdevsim0: unset [1, 1] type 2 family 0 port 256 - 0 [ 1160.559197][T14194] netdevsim netdevsim6 netdevsim1: unset [0, 0] type 1 family 0 port 8472 - 0 [ 1160.595333][T14194] netdevsim netdevsim6 netdevsim1: unset [1, 0] type 2 family 0 port 6081 - 0 [ 1160.607228][T14194] netdevsim netdevsim6 netdevsim1: unset [1, 1] type 2 family 0 port 256 - 0 [ 1160.746008][T14194] netdevsim netdevsim6 netdevsim2: unset [0, 0] type 1 family 0 port 8472 - 0 [ 1160.781015][T14194] netdevsim netdevsim6 netdevsim2: unset [1, 0] type 2 family 0 port 6081 - 0 [ 1160.800216][T14194] netdevsim netdevsim6 netdevsim2: unset [1, 1] type 2 family 0 port 256 - 0 [ 1160.839483][T14194] netdevsim netdevsim6 netdevsim3: unset [0, 0] type 1 family 0 port 8472 - 0 [ 1160.852730][T16031] netlink: 'syz.1.11374': attribute type 13 has an invalid length. [ 1160.867678][T14194] netdevsim netdevsim6 netdevsim3: unset [1, 0] type 2 family 0 port 6081 - 0 [ 1160.881057][T14194] netdevsim netdevsim6 netdevsim3: unset [1, 1] type 2 family 0 port 256 - 0 [ 1161.068177][T16031] lec:lec_start_xmit: lec0:No lecd attached [ 1161.077722][T16045] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 1161.095433][ T2144] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1161.253180][ C1] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1161.296248][T16053] netlink: 96 bytes leftover after parsing attributes in process `syz.2.11379'. [ 1161.350064][T16056] tipc: Enabling of bearer rejected, failed to enable media [ 1161.496701][ T150] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1162.092210][T16103] netlink: 12 bytes leftover after parsing attributes in process `syz.2.11395'. [ 1162.141124][ T2144] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1162.152409][ T150] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1162.295012][ C1] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1164.213936][ T2140] net_ratelimit: 2 callbacks suppressed [ 1164.213961][ T2140] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1164.383209][ C1] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1164.607476][T16103] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 1164.616953][T16103] team0: Device batadv0 is of different type [ 1165.035562][T16136] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 1165.039622][T16142] netlink: 8 bytes leftover after parsing attributes in process `syz.6.11403'. [ 1165.256122][ T2140] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1165.259098][T16158] netlink: 212408 bytes leftover after parsing attributes in process `syz.5.11405'. [ 1165.339833][ T31] INFO: task syz.0.9898:10552 blocked for more than 143 seconds. [ 1165.349584][ T31] Not tainted syzkaller #0 [ 1165.368172][ T31] "echo 0 > /proc/sys/kernel/hung_task_timeout_secs" disables this message. [ 1165.394693][ T31] task:syz.0.9898 state:D stack:27144 pid:10552 tgid:10550 ppid:9235 task_flags:0x400140 flags:0x00080002 [ 1165.410182][ T31] Call Trace: [ 1165.413908][ T31] [ 1165.416972][ T31] __schedule+0x15dd/0x52d0 [ 1165.418540][T16164] netlink: 'syz.2.11406': attribute type 1 has an invalid length. [ 1165.429959][ C1] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1165.431866][ T31] ? __pfx___schedule+0x10/0x10 [ 1165.446063][ T31] ? schedule+0x90/0x360 [ 1165.450380][ T31] schedule+0x164/0x360 [ 1165.457581][ T31] schedule_preempt_disabled+0x13/0x30 [ 1165.463781][ T31] __mutex_lock+0x7fe/0x1300 [ 1165.468681][ T31] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1165.475300][ T31] ? __mutex_lock+0x5ac/0x1300 [ 1165.480470][ T31] ? nfsd_nl_version_set_doit+0xcd/0x7a0 [ 1165.487657][ T31] ? __pfx___mutex_lock+0x10/0x10 [ 1165.493321][ T31] nfsd_nl_version_set_doit+0xcd/0x7a0 [ 1165.499166][ T31] ? __pfx_nfsd_nl_version_set_doit+0x10/0x10 [ 1165.506187][ T31] ? genl_family_rcv_msg_attrs_parse+0x1c9/0x2a0 [ 1165.512910][ T31] genl_family_rcv_msg_doit+0x22a/0x330 [ 1165.523974][ T31] ? __asan_memcpy+0x40/0x70 [ 1165.535942][ T31] ? __pfx_genl_family_rcv_msg_doit+0x10/0x10 [ 1165.549177][ T31] ? bpf_lsm_capable+0x9/0x20 [ 1165.554842][ T31] ? security_capable+0x7e/0x2c0 [ 1165.560021][ T31] genl_rcv_msg+0x61c/0x7a0 [ 1165.565571][ T31] ? __pfx_genl_rcv_msg+0x10/0x10 [ 1165.571028][ T31] ? __pfx_nfsd_nl_version_set_doit+0x10/0x10 [ 1165.578458][ T31] ? __lock_acquire+0x6b5/0x2cf0 [ 1165.584011][ T31] netlink_rcv_skb+0x232/0x4b0 [ 1165.589576][ T31] ? __pfx_genl_rcv_msg+0x10/0x10 [ 1165.595574][ T31] ? __pfx_netlink_rcv_skb+0x10/0x10 [ 1165.601121][ T31] ? down_read+0x272/0x2e0 [ 1165.611209][ T31] ? genl_rcv+0xd/0x40 [ 1165.621295][ T31] genl_rcv+0x28/0x40 [ 1165.632779][ T31] netlink_unicast+0x80f/0x9b0 [ 1165.645641][ T31] ? __pfx_netlink_unicast+0x10/0x10 [ 1165.657079][ T31] ? netlink_sendmsg+0x650/0xb40 [ 1165.669914][ T31] ? skb_put+0x11b/0x210 [ 1165.680675][ T31] netlink_sendmsg+0x813/0xb40 [ 1165.691962][ T31] ? __pfx_netlink_sendmsg+0x10/0x10 [ 1165.705649][ T31] ? aa_sock_msg_perm+0xf1/0x1b0 [ 1165.716654][ T31] ? bpf_lsm_socket_sendmsg+0x9/0x20 [ 1165.739477][ T31] ____sys_sendmsg+0x972/0x9f0 [ 1165.749118][ T31] ? futex_unqueue+0x211/0x240 [ 1165.754211][ T31] ? __pfx_____sys_sendmsg+0x10/0x10 [ 1165.765775][ T31] ? import_iovec+0x73/0xa0 [ 1165.776367][ T31] ___sys_sendmsg+0x2a5/0x360 [ 1165.787315][ T31] ? __pfx____sys_sendmsg+0x10/0x10 [ 1165.799774][ T31] ? futex_wait+0x29a/0x380 [ 1165.809551][ T31] ? __fget_files+0x2a/0x420 [ 1165.837049][ T31] ? __fget_files+0x3a0/0x420 [ 1165.842016][ T31] __x64_sys_sendmsg+0x1bd/0x2a0 [ 1165.857837][ T31] ? __pfx___x64_sys_sendmsg+0x10/0x10 [ 1165.867945][ T31] ? rcu_is_watching+0x15/0xb0 [ 1165.872899][ T31] do_syscall_64+0x14d/0xf80 [ 1165.888408][ T31] ? trace_irq_disable+0x3b/0x150 [ 1165.894723][ T31] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1165.900969][ T31] ? clear_bhb_loop+0x40/0x90 [ 1165.905969][ T31] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1165.912283][ T31] RIP: 0033:0x7fa5efb9c799 [ 1165.917079][ T31] RSP: 002b:00007fa5f0a18028 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 1165.943255][ T31] RAX: ffffffffffffffda RBX: 00007fa5efe15fa0 RCX: 00007fa5efb9c799 [ 1165.961630][ T31] RDX: 0000000004008090 RSI: 0000200000000140 RDI: 0000000000000004 [ 1165.975642][ T31] RBP: 00007fa5efc32c99 R08: 0000000000000000 R09: 0000000000000000 [ 1165.993321][ T31] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 1166.001620][ T31] R13: 00007fa5efe16038 R14: 00007fa5efe15fa0 R15: 00007ffc54b192c8 [ 1166.010059][ T31] [ 1166.013708][ T31] [ 1166.013708][ T31] Showing all locks held in the system: [ 1166.030724][ T31] 1 lock held by khungtaskd/31: [ 1166.083127][ C1] lec0: NETDEV WATCHDOG: CPU: 1: transmit queue 0 timed out 5010 ms [ 1166.091377][ C1] lec:lec_tx_timeout: lec0 [ 1166.096433][ C1] lec:lec_start_xmit: lec0:No lecd attached [ 1166.113821][ T31] #0: ffffffff8e75e420 (rcu_read_lock){....}-{1:3}, at: debug_show_all_locks+0x2e/0x180 [ 1166.124971][ T31] 1 lock held by dhcpcd/5486: [ 1166.129854][ T31] #0: ffffffff8fbccfc8 (rtnl_mutex){+.+.}-{4:4}, at: inet_rtm_newaddr+0x404/0x1ad0 [ 1166.141532][ T31] 2 locks held by getty/5579: [ 1166.146834][ T31] #0: ffff8880370dc0a0 (&tty->ldisc_sem){++++}-{0:0}, at: tty_ldisc_ref_wait+0x25/0x70 [ 1166.157300][ T31] #1: ffffc9000332b2f0 (&ldata->atomic_read_lock){+.+.}-{4:4}, at: n_tty_read+0x45c/0x13c0 [ 1166.170690][ T31] 2 locks held by syz.4.7577/1992: [ 1166.176366][ T31] #0: ffffffff8fc3ad70 (cb_lock){++++}-{4:4}, at: genl_rcv+0x19/0x40 [ 1166.185365][ T31] #1: ffffffff8ea858a8 (nfsd_mutex){+.+.}-{4:4}, at: nfsd_nl_listener_set_doit+0x141/0x1670 [ 1166.196546][ T31] 2 locks held by syz.0.9898/10552: [ 1166.201912][ T31] #0: ffffffff8fc3ad70 (cb_lock){++++}-{4:4}, at: genl_rcv+0x19/0x40 [ 1166.210758][ T31] #1: ffffffff8ea858a8 (nfsd_mutex){+.+.}-{4:4}, at: nfsd_nl_version_set_doit+0xcd/0x7a0 [ 1166.221378][ T31] 2 locks held by syz.3.10720/13426: [ 1166.227353][ T31] #0: ffffffff8fc3ad70 (cb_lock){++++}-{4:4}, at: genl_rcv+0x19/0x40 [ 1166.236032][ T31] #1: ffffffff8ea858a8 (nfsd_mutex){+.+.}-{4:4}, at: nfsd_nl_version_get_doit+0x17c/0xc40 [ 1166.247503][ T31] 2 locks held by syz.7.11401/16134: [ 1166.252913][ T31] #0: ffffffff8fbccfc8 (rtnl_mutex){+.+.}-{4:4}, at: tun_chr_close+0x3e/0x1c0 [ 1166.263173][ T31] #1: ffffffff8e7646b8 (rcu_state.exp_mutex){+.+.}-{4:4}, at: synchronize_rcu_expedited+0x38d/0x770 [ 1166.274766][ T31] 2 locks held by dhcpcd/16170: [ 1166.279728][ T31] #0: ffff88807bb24260 (sk_lock-AF_PACKET){+.+.}-{0:0}, at: packet_do_bind+0x33/0xe10 [ 1166.290483][ T31] #1: ffffffff8e7646b8 (rcu_state.exp_mutex){+.+.}-{4:4}, at: synchronize_rcu_expedited+0x38d/0x770 [ 1166.305214][T15984] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1166.308563][ T31] [ 1166.316054][ T31] ============================================= [ 1166.316054][ T31] [ 1166.347891][ T31] NMI backtrace for cpu 0 [ 1166.347916][ T31] CPU: 0 UID: 0 PID: 31 Comm: khungtaskd Not tainted syzkaller #0 PREEMPT(full) [ 1166.347939][ T31] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 02/12/2026 [ 1166.347951][ T31] Call Trace: [ 1166.347960][ T31] [ 1166.347970][ T31] dump_stack_lvl+0xe8/0x150 [ 1166.348006][ T31] nmi_cpu_backtrace+0x274/0x2d0 [ 1166.348033][ T31] ? __pfx_nmi_raise_cpu_backtrace+0x10/0x10 [ 1166.348063][ T31] nmi_trigger_cpumask_backtrace+0x17a/0x300 [ 1166.348092][ T31] sys_info+0x135/0x170 [ 1166.348115][ T31] watchdog+0xfd9/0x1030 [ 1166.348151][ T31] ? watchdog+0x21a/0x1030 [ 1166.348190][ T31] kthread+0x388/0x470 [ 1166.348211][ T31] ? __pfx_watchdog+0x10/0x10 [ 1166.348238][ T31] ? __pfx_kthread+0x10/0x10 [ 1166.348261][ T31] ret_from_fork+0x51e/0xb90 [ 1166.348291][ T31] ? __pfx_ret_from_fork+0x10/0x10 [ 1166.348316][ T31] ? __switch_to+0xc7d/0x1450 [ 1166.348343][ T31] ? __pfx_kthread+0x10/0x10 [ 1166.348366][ T31] ret_from_fork_asm+0x1a/0x30 [ 1166.348420][ T31] [ 1166.348429][ T31] Sending NMI from CPU 0 to CPUs 1: [ 1166.463405][ C1] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1166.464974][ C1] NMI backtrace for cpu 1 [ 1166.464991][ C1] CPU: 1 UID: 0 PID: 0 Comm: swapper/1 Not tainted syzkaller #0 PREEMPT(full) [ 1166.465022][ C1] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 02/12/2026 [ 1166.465033][ C1] RIP: 0010:io_serial_out+0x7c/0xc0 [ 1166.465055][ C1] Code: 4e 85 fc 44 89 f9 d3 e5 49 83 c6 40 4c 89 f0 48 c1 e8 03 42 80 3c 20 00 74 08 4c 89 f7 e8 ec 88 ef fc 41 03 2e 89 d8 89 ea ee <5b> 41 5c 41 5e 41 5f 5d e9 07 99 70 06 cc 44 89 f9 80 e1 07 38 c1 [ 1166.465069][ C1] RSP: 0018:ffffc90000a07930 EFLAGS: 00000002 [ 1166.465085][ C1] RAX: 0000000000000034 RBX: 0000000000000034 RCX: 0000000000000000 [ 1166.465097][ C1] RDX: 00000000000003f8 RSI: 0000000000000000 RDI: 0000000000000020 [ 1166.465108][ C1] RBP: 00000000000003f8 R08: ffff888025360237 R09: 1ffff11004a6c046 [ 1166.465119][ C1] R10: dffffc0000000000 R11: ffffffff85404f10 R12: dffffc0000000000 [ 1166.465131][ C1] R13: ffffffff9a2b6a48 R14: ffffffff9a5ce8e0 R15: 0000000000000000 [ 1166.465143][ C1] FS: 0000000000000000(0000) GS:ffff888125560000(0000) knlGS:0000000000000000 [ 1166.465157][ C1] CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033 [ 1166.465169][ C1] CR2: 000055c01fe4f660 CR3: 0000000076340000 CR4: 00000000003526f0 [ 1166.465185][ C1] Call Trace: [ 1166.465193][ C1] [ 1166.465204][ C1] serial8250_console_write+0x140c/0x1ba0 [ 1166.465237][ C1] ? __pfx_serial8250_console_write+0x10/0x10 [ 1166.465261][ C1] ? lock_acquire+0xf0/0x2e0 [ 1166.465284][ C1] ? do_raw_spin_unlock+0xf5/0x210 [ 1166.465302][ C1] ? console_flush_all+0x123/0xb20 [ 1166.465319][ C1] console_flush_all+0x718/0xb20 [ 1166.465337][ C1] ? console_flush_all+0x123/0xb20 [ 1166.465356][ C1] ? __pfx_console_flush_all+0x10/0x10 [ 1166.465374][ C1] ? is_printk_cpu_sync_owner+0x32/0x40 [ 1166.465396][ C1] console_unlock+0xd1/0x1c0 [ 1166.465419][ C1] ? __pfx_console_unlock+0x10/0x10 [ 1166.465452][ C1] ? vprintk_emit+0x2cf/0x560 [ 1166.465473][ C1] ? vprintk_emit+0x2cf/0x560 [ 1166.465508][ C1] vprintk_emit+0x485/0x560 [ 1166.465530][ C1] ? unwind_next_frame+0xa5/0x23c0 [ 1166.465554][ C1] ? __pfx_vprintk_emit+0x10/0x10 [ 1166.465576][ C1] ? unwind_next_frame+0xa5/0x23c0 [ 1166.465596][ C1] ? unwind_next_frame+0x1aaf/0x23c0 [ 1166.465622][ C1] _printk+0xdd/0x130 [ 1166.465642][ C1] ? __pfx__printk+0x10/0x10 [ 1166.465657][ C1] ? _raw_spin_unlock_irqrestore+0x4c/0x80 [ 1166.465680][ C1] ? ___ratelimit+0x58c/0x8d0 [ 1166.465705][ C1] gred_dequeue+0x4e6/0x6f0 [ 1166.465730][ C1] __qdisc_run+0x26c/0x15d0 [ 1166.465758][ C1] __dev_queue_xmit+0x1bad/0x3890 [ 1166.465781][ C1] ? __dev_queue_xmit+0x277/0x3890 [ 1166.465802][ C1] ? arpt_do_table+0x261/0x1ec0 [ 1166.465825][ C1] ? __pfx___dev_queue_xmit+0x10/0x10 [ 1166.465847][ C1] ? __pfx_arpt_do_table+0x10/0x10 [ 1166.465867][ C1] ? trace_kmem_cache_alloc+0x29/0xf0 [ 1166.465892][ C1] ? NF_HOOK+0xa2/0x3c0 [ 1166.465910][ C1] NF_HOOK+0x33a/0x3c0 [ 1166.465926][ C1] ? __pfx_arp_xmit_finish+0x10/0x10 [ 1166.465942][ C1] ? NF_HOOK+0xa2/0x3c0 [ 1166.465956][ C1] ? __pfx_NF_HOOK+0x10/0x10 [ 1166.465973][ C1] ? __pfx_arp_xmit_finish+0x10/0x10 [ 1166.465994][ C1] arp_xmit+0x16c/0x270 [ 1166.466007][ C1] ? arp_xmit+0x23/0x270 [ 1166.466023][ C1] arp_solicit+0xbe0/0xe40 [ 1166.466042][ C1] ? arp_solicit+0x119/0xe40 [ 1166.466059][ C1] ? __pfx_arp_solicit+0x10/0x10 [ 1166.466086][ C1] ? __pfx_arp_solicit+0x10/0x10 [ 1166.466101][ C1] __neigh_event_send+0xf05/0x1530 [ 1166.466129][ C1] neigh_resolve_output+0x198/0x750 [ 1166.466151][ C1] ? __pfx_ip_neigh_gw4+0x10/0x10 [ 1166.466172][ C1] ? ip_finish_output2+0x3c2/0x1070 [ 1166.466187][ C1] ip_finish_output2+0xca9/0x1070 [ 1166.466202][ C1] ? ip_skb_dst_mtu+0x80b/0xa50 [ 1166.466226][ C1] ? ip_finish_output+0x40e/0x530 [ 1166.466250][ C1] ip_output+0x29f/0x450 [ 1166.466272][ C1] ? ip_output+0x5b/0x450 [ 1166.466295][ C1] ip_push_pending_frames+0x8b/0x110 [ 1166.466320][ C1] __icmp_send+0x118d/0x1590 [ 1166.466339][ C1] ? __icmp_send+0x22b/0x1590 [ 1166.466361][ C1] ? __pfx___icmp_send+0x10/0x10 [ 1166.466378][ C1] ? __lock_acquire+0x6b5/0x2cf0 [ 1166.466413][ C1] ? __pfx___resched_curr+0x10/0x10 [ 1166.466446][ C1] ipv4_link_failure+0x66c/0xa70 [ 1166.466467][ C1] ? __pfx_ipv4_link_failure+0x10/0x10 [ 1166.466483][ C1] ? __lock_acquire+0x6b5/0x2cf0 [ 1166.466507][ C1] ? __pfx_ipv4_link_failure+0x10/0x10 [ 1166.466522][ C1] arp_error_report+0x118/0x160 [ 1166.466540][ C1] neigh_invalidate+0x235/0x460 [ 1166.466568][ C1] neigh_timer_handler+0xb99/0x11e0 [ 1166.466595][ C1] call_timer_fn+0x192/0x640 [ 1166.466615][ C1] ? __pfx_neigh_timer_handler+0x10/0x10 [ 1166.466636][ C1] ? call_timer_fn+0xd4/0x640 [ 1166.466655][ C1] ? __pfx_call_timer_fn+0x10/0x10 [ 1166.466679][ C1] ? _raw_spin_unlock_irq+0x23/0x50 [ 1166.466700][ C1] ? __pfx_neigh_timer_handler+0x10/0x10 [ 1166.466723][ C1] __run_timer_base+0x652/0x8b0 [ 1166.466741][ C1] ? ktime_get+0x45/0x200 [ 1166.466763][ C1] ? __pfx___run_timer_base+0x10/0x10 [ 1166.466785][ C1] ? sched_clock_cpu+0x74/0x440 [ 1166.466808][ C1] run_timer_softirq+0xb7/0x170 [ 1166.466827][ C1] handle_softirqs+0x22a/0x870 [ 1166.466849][ C1] ? __irq_exit_rcu+0x5f/0x150 [ 1166.466873][ C1] __irq_exit_rcu+0x5f/0x150 [ 1166.466892][ C1] irq_exit_rcu+0x9/0x30 [ 1166.466910][ C1] sysvec_apic_timer_interrupt+0xa6/0xc0 [ 1166.466933][ C1] [ 1166.466939][ C1] [ 1166.466947][ C1] asm_sysvec_apic_timer_interrupt+0x1a/0x20 [ 1166.466965][ C1] RIP: 0010:pv_native_safe_halt+0xf/0x20 [ 1166.466988][ C1] Code: ee 6c 02 c3 cc cc cc cc cc cc cc 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 f3 0f 1e fa 66 90 0f 00 2d 43 62 1b 00 fb f4 fc e9 02 00 cc cc cc cc cc cc cc cc cc cc cc cc 90 90 90 90 90 [ 1166.467001][ C1] RSP: 0018:ffffc90000197e20 EFLAGS: 00000242 [ 1166.467015][ C1] RAX: 000000000033949d RBX: ffffffff819a8c8d RCX: 0000000080000001 [ 1166.467026][ C1] RDX: 0000000000000001 RSI: ffffffff8def5705 RDI: ffffffff8c27b580 [ 1166.467038][ C1] RBP: ffffc90000197f10 R08: ffff8880b873395b R09: 1ffff110170e672b [ 1166.467050][ C1] R10: dffffc0000000000 R11: ffffed10170e672c R12: ffffffff901196b0 [ 1166.467062][ C1] R13: 1ffff11003b51000 R14: 0000000000000001 R15: 0000000000000001 [ 1166.467076][ C1] ? do_idle+0x1bd/0x500 [ 1166.467102][ C1] default_idle+0x9/0x20 [ 1166.467117][ C1] default_idle_call+0x72/0xb0 [ 1166.467134][ C1] do_idle+0x1bd/0x500 [ 1166.467153][ C1] ? asm_sysvec_call_function_single+0x1a/0x20 [ 1166.467174][ C1] ? __pfx_do_idle+0x10/0x10 [ 1166.467200][ C1] cpu_startup_entry+0x43/0x60 [ 1166.467221][ C1] start_secondary+0x101/0x110 [ 1166.467239][ C1] common_startup_64+0x13e/0x147 [ 1166.467263][ C1] [ 1166.472840][ T31] Kernel panic - not syncing: hung_task: blocked tasks [ 1166.472858][ T31] CPU: 0 UID: 0 PID: 31 Comm: khungtaskd Not tainted syzkaller #0 PREEMPT(full) [ 1166.472881][ T31] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 02/12/2026 [ 1166.472894][ T31] Call Trace: [ 1166.472903][ T31] [ 1166.472913][ T31] vpanic+0x56c/0xa60 [ 1166.472941][ T31] ? __pfx___schedule+0x10/0x10 [ 1166.472969][ T31] ? __pfx_vpanic+0x10/0x10 [ 1166.473004][ T31] panic+0xc5/0xd0 [ 1166.473034][ T31] ? __pfx_panic+0x10/0x10 [ 1166.473061][ T31] ? preempt_schedule_thunk+0x16/0x30 [ 1166.473088][ T31] ? nmi_trigger_cpumask_backtrace+0x2bb/0x300 [ 1166.473118][ T31] watchdog+0x1023/0x1030 [ 1166.473152][ T31] ? watchdog+0x21a/0x1030 [ 1166.473196][ T31] kthread+0x388/0x470 [ 1166.473215][ T31] ? __pfx_watchdog+0x10/0x10 [ 1166.473241][ T31] ? __pfx_kthread+0x10/0x10 [ 1166.473262][ T31] ret_from_fork+0x51e/0xb90 [ 1166.473290][ T31] ? __pfx_ret_from_fork+0x10/0x10 [ 1166.473313][ T31] ? __switch_to+0xc7d/0x1450 [ 1166.473339][ T31] ? __pfx_kthread+0x10/0x10 [ 1166.473360][ T31] ret_from_fork_asm+0x1a/0x30 [ 1166.473403][ T31] [ 1166.474930][ T31] Kernel Offset: disabled