last executing test programs: 5m42.555096405s ago: executing program 0 (id=5008): r0 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_mreq(r0, 0x29, 0x1b, &(0x7f0000000080)={@remote}, 0x14) syz_emit_ethernet(0x4a, &(0x7f0000000140)=ANY=[@ANYBLOB="aaaaaaaa4080c841690015090caaaaaaaaaa86dd608a37f200082c00fe8000000000000000b5671641bf8e77ae17be29c045000000000000bbfe8000"/71, @ANYRES32=0x41424344, @ANYRES32=0x41424344, @ANYBLOB="5000000090780000"], 0x0) r1 = socket(0x10, 0x3, 0x0) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000001080)={&(0x7f0000000040)=ANY=[@ANYRESOCT=r1, @ANYRES16=r1, @ANYRESDEC=r1], 0x48}, 0x1, 0x0, 0x0, 0x24040080}, 0x2000800) r2 = openat$ppp(0xffffffffffffff9c, &(0x7f0000000100), 0x0, 0x0) unshare(0x2040400) ioctl$PPPIOCNEWUNIT(r2, 0xc004743e, &(0x7f0000000000)) ioctl$PPPIOCSNPMODE(r2, 0x4008744b, &(0x7f00000000c0)) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000600)={0x3, 0x3, &(0x7f0000000000)=ANY=[@ANYBLOB="620ac4ff0000000071105d007433c256e49058d8e5c41100"], &(0x7f0000000480)='GPL\x00'}, 0x90) sendmmsg(r1, &(0x7f0000000000), 0x4000000000001f2, 0x0) 5m42.272311883s ago: executing program 0 (id=5012): socket$inet_sctp(0x2, 0x5, 0x84) (async) r0 = socket$inet_sctp(0x2, 0x5, 0x84) getsockopt$inet_sctp_SCTP_ENABLE_STREAM_RESET(0xffffffffffffffff, 0x84, 0x76, &(0x7f0000000000)={0x0, 0x2}, &(0x7f0000000040)=0x8) setsockopt$inet_sctp_SCTP_DELAYED_SACK(r0, 0x84, 0x10, &(0x7f0000000080)=@assoc_value={r1, 0x3}, 0x8) (async) setsockopt$inet_sctp_SCTP_DELAYED_SACK(r0, 0x84, 0x10, &(0x7f0000000080)=@assoc_value={r1, 0x3}, 0x8) getsockopt$inet_sctp_SCTP_DEFAULT_SEND_PARAM(r0, 0x84, 0xa, &(0x7f00000000c0)={0xffff, 0x6, 0x1, 0x2, 0x10, 0x6, 0x6, 0xd0, r1}, &(0x7f0000000100)=0x20) getsockopt$inet_sctp_SCTP_PEER_ADDR_PARAMS(r0, 0x84, 0x9, &(0x7f0000000140)={r2, @in={{0x2, 0x4e20, @multicast1}}, 0x2, 0x0, 0x8, 0x3, 0x40, 0xb1, 0x7}, &(0x7f0000000200)=0x9c) ioctl$sock_SIOCGIFVLAN_SET_VLAN_NAME_TYPE_CMD(r0, 0x8982, &(0x7f0000000240)={0x6, 'geneve1\x00', {}, 0xfff}) (async) ioctl$sock_SIOCGIFVLAN_SET_VLAN_NAME_TYPE_CMD(r0, 0x8982, &(0x7f0000000240)={0x6, 'geneve1\x00', {}, 0xfff}) recvfrom$l2tp(0xffffffffffffffff, &(0x7f0000000280)=""/129, 0x81, 0x1a023, &(0x7f0000000340)={0x2, 0x0, @broadcast}, 0x10) getsockname$l2tp(0xffffffffffffffff, &(0x7f0000000380)={0x2, 0x0, @initdev}, &(0x7f00000003c0)=0x10) syz_genetlink_get_family_id$ethtool(&(0x7f0000000440), 0xffffffffffffffff) (async) r4 = syz_genetlink_get_family_id$ethtool(&(0x7f0000000440), 0xffffffffffffffff) sendmsg$ETHTOOL_MSG_COALESCE_SET(0xffffffffffffffff, &(0x7f0000000500)={&(0x7f0000000400)={0x10, 0x0, 0x0, 0x20000}, 0xc, &(0x7f00000004c0)={&(0x7f0000000480)={0x3c, r4, 0x10, 0x4, 0x25dfdbfc, {}, [@ETHTOOL_A_COALESCE_PKT_RATE_LOW={0x8, 0xd, 0xff}, @ETHTOOL_A_COALESCE_RX_USECS_LOW={0x8, 0xe, 0x1c0000}, @ETHTOOL_A_COALESCE_RX_MAX_FRAMES_IRQ={0x8}, @ETHTOOL_A_COALESCE_TX_MAX_FRAMES={0x8, 0x7, 0xffffffff}, @ETHTOOL_A_COALESCE_USE_CQE_MODE_RX={0x5}]}, 0x3c}}, 0x0) (async) sendmsg$ETHTOOL_MSG_COALESCE_SET(0xffffffffffffffff, &(0x7f0000000500)={&(0x7f0000000400)={0x10, 0x0, 0x0, 0x20000}, 0xc, &(0x7f00000004c0)={&(0x7f0000000480)={0x3c, r4, 0x10, 0x4, 0x25dfdbfc, {}, [@ETHTOOL_A_COALESCE_PKT_RATE_LOW={0x8, 0xd, 0xff}, @ETHTOOL_A_COALESCE_RX_USECS_LOW={0x8, 0xe, 0x1c0000}, @ETHTOOL_A_COALESCE_RX_MAX_FRAMES_IRQ={0x8}, @ETHTOOL_A_COALESCE_TX_MAX_FRAMES={0x8, 0x7, 0xffffffff}, @ETHTOOL_A_COALESCE_USE_CQE_MODE_RX={0x5}]}, 0x3c}}, 0x0) r5 = socket$inet_sctp(0x2, 0x1, 0x84) setsockopt$inet_sctp_SCTP_MAXSEG(r5, 0x84, 0xd, &(0x7f0000000540)=@assoc_value={r3, 0x8000}, 0x8) r6 = socket$nl_generic(0x10, 0x3, 0x10) r7 = syz_genetlink_get_family_id$devlink(&(0x7f00000005c0), r6) sendmsg$DEVLINK_CMD_SB_POOL_GET(r6, &(0x7f0000000700)={&(0x7f0000000580)={0x10, 0x0, 0x0, 0x400}, 0xc, &(0x7f00000006c0)={&(0x7f0000000600)={0xa0, r7, 0x100, 0x70bd29, 0x25dfdbfe, {}, [{@nsim={{0xe}, {0xf, 0x2, {'netdevsim', 0x0}}}, {0x8, 0xb, 0x7}, {0x6, 0x11, 0x5}}, {@pci={{0x8}, {0x11}}, {0x8}, {0x6}}, {@nsim={{0xe}, {0xf, 0x2, {'netdevsim', 0x0}}}, {0x8, 0xb, 0x1}, {0x6, 0x11, 0x3}}]}, 0xa0}, 0x1, 0x0, 0x0, 0x4}, 0x85) ioctl$XFS_IOC_ATTRMULTI_BY_HANDLE(r6, 0x4048587b, &(0x7f0000000bc0)={{r0, &(0x7f0000000740)='@#\x00', 0x10000, &(0x7f0000000780)={@align=0xfffffffffffffffd, {0xa, 0x9, 0x9, 0x2}}, 0x6, &(0x7f00000007c0)={@_ha_fsid}, &(0x7f0000000800)=0x7}, 0x3, &(0x7f0000000b40)=[{0x0, 0x1, &(0x7f0000000840)='\\]/,(&*\x00', &(0x7f0000000880)="4634ff0f516068c3e84029c55e3711fa133f6ff1af6698099f010ceadcb6aed70ec77a0145b8016d08089e8bcfbe131b0c04731caf9a0013693fe568924e894399b7533023efaca68a0051943f29bf1bd5306449facd3c16f4802cf9515d7bedae465773779fd2726848007c80dcc5fa5317851478adf96beae7eb9a2df213f24301c5b5d12a1fc388da04208cfb1f1a6452bb76b00adae8845d9ec66a116bd86b57ba03550797e406e3", 0xaa, 0x22}, {0x1, 0xfffffffb, &(0x7f0000000940)='netdevsim\x00', &(0x7f0000000980)="8f55bcf3764088af3eb3fadb43a37958b50051e32356fa3e0dc934c094a873c13f6231287a94b484a53dad325eb9a5f9f3fa33f13bba3f0f06e39541421b765cd764c6f116ed4b1b22c4bc50612ff798d9686e02a9e5cc3fbdcee9dd00976207ba6d7d63ebd1babe1e660ded0e0bd58daa950c24e609a16aa3bc3c6f6c9bdbdddd799d76aa096b70281032c7b1de3085bdb4cbbb4b2fb82c5494d3859c308be868af9c02147457c9408362542da7530e23ff11b48887f88359a45a8ce9f47339bbcd18921e308b36299a72f2e643b2640a5bf579e50b51e80225f55b214045eb099e", 0xe2, 0x20}, {0x2, 0x8000, &(0x7f0000000a80)='netdevsim\x00', &(0x7f0000000ac0)="238a98849d44e98a7ec3ab286808bb85120cac757e444dd260eca67fcabdbd2924162c22f757d4ef1396b6bac643799a0070faea5ea64176cc885719ce2b044dcae771f53cfe7020b6cb3379eb2e91dcedb445160dcb9f12fa676512b9624da7194c963377aaf066adab32684ecfdb60", 0x70, 0x20}]}) ioctl$IMGETDEVINFO(r8, 0x80044944, &(0x7f0000000c40)) (async) ioctl$IMGETDEVINFO(r8, 0x80044944, &(0x7f0000000c40)) socket$igmp6(0xa, 0x3, 0x2) (async) socket$igmp6(0xa, 0x3, 0x2) syz_genetlink_get_family_id$ipvs(&(0x7f0000000cc0), r6) (async) r9 = syz_genetlink_get_family_id$ipvs(&(0x7f0000000cc0), r6) sendmsg$IPVS_CMD_NEW_DAEMON(r6, &(0x7f0000000ec0)={&(0x7f0000000c80)={0x10, 0x0, 0x0, 0x80000000}, 0xc, &(0x7f0000000e80)={&(0x7f0000000d00)={0x158, r9, 0x100, 0x70bd2a, 0x25dfdbfe, {}, [@IPVS_CMD_ATTR_DEST={0x54, 0x2, 0x0, 0x1, [@IPVS_DEST_ATTR_TUN_TYPE={0x5}, @IPVS_DEST_ATTR_ACTIVE_CONNS={0x8, 0x7, 0x6}, @IPVS_DEST_ATTR_TUN_PORT={0x6, 0xe, 0x4e23}, @IPVS_DEST_ATTR_U_THRESH={0x8, 0x5, 0x1}, @IPVS_DEST_ATTR_FWD_METHOD={0x8, 0x3, 0x4}, @IPVS_DEST_ATTR_TUN_PORT={0x6, 0xe, 0x4e23}, @IPVS_DEST_ATTR_TUN_FLAGS={0x6, 0xf, 0x7}, @IPVS_DEST_ATTR_ACTIVE_CONNS={0x8, 0x7, 0x80000000}, @IPVS_DEST_ATTR_ACTIVE_CONNS={0x8, 0x7, 0x9}, @IPVS_DEST_ATTR_FWD_METHOD={0x8}]}, @IPVS_CMD_ATTR_SERVICE={0x30, 0x1, 0x0, 0x1, [@IPVS_SVC_ATTR_AF={0x6, 0x1, 0x2}, @IPVS_SVC_ATTR_AF={0x6, 0x1, 0x2}, @IPVS_SVC_ATTR_PROTOCOL={0x6, 0x2, 0x3c}, @IPVS_SVC_ATTR_ADDR={0x14, 0x3, @ipv4=@local}]}, @IPVS_CMD_ATTR_TIMEOUT_TCP={0x8, 0x4, 0xfffffffd}, @IPVS_CMD_ATTR_SERVICE={0x2c, 0x1, 0x0, 0x1, [@IPVS_SVC_ATTR_ADDR={0x14, 0x3, @ipv6=@empty}, @IPVS_SVC_ATTR_PORT={0x6, 0x4, 0x4e21}, @IPVS_SVC_ATTR_FLAGS={0xc, 0x7, {0x28, 0xa}}]}, @IPVS_CMD_ATTR_SERVICE={0x4c, 0x1, 0x0, 0x1, [@IPVS_SVC_ATTR_NETMASK={0x8, 0x9, 0x50}, @IPVS_SVC_ATTR_FWMARK={0x8, 0x5, 0x1}, @IPVS_SVC_ATTR_PORT={0x6, 0x4, 0x4e22}, @IPVS_SVC_ATTR_AF={0x6, 0x1, 0xa}, @IPVS_SVC_ATTR_TIMEOUT={0x8, 0x8, 0x1ff}, @IPVS_SVC_ATTR_SCHED_NAME={0x8, 0x6, 'wrr\x00'}, @IPVS_SVC_ATTR_PE_NAME={0x8}, @IPVS_SVC_ATTR_FWMARK={0x8, 0x5, 0x3}, @IPVS_SVC_ATTR_SCHED_NAME={0x7, 0x6, 'dh\x00'}]}, @IPVS_CMD_ATTR_SERVICE={0x40, 0x1, 0x0, 0x1, [@IPVS_SVC_ATTR_ADDR={0x14, 0x3, @ipv6=@mcast1}, @IPVS_SVC_ATTR_TIMEOUT={0x8, 0x8, 0x200}, @IPVS_SVC_ATTR_TIMEOUT={0x8, 0x8, 0xfffffffb}, @IPVS_SVC_ATTR_PORT={0x6, 0x4, 0x4e24}, @IPVS_SVC_ATTR_TIMEOUT={0x8, 0x8, 0x8001}, @IPVS_SVC_ATTR_AF={0x6, 0x1, 0xa}]}]}, 0x158}, 0x1, 0x0, 0x0, 0x80}, 0x8001) bpf$BPF_GET_PROG_INFO(0xf, &(0x7f0000001300)={r8, 0xe0, &(0x7f0000001200)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, &(0x7f0000001040)=[0x0, 0x0, 0x0, 0x0], ""/16, 0x0, 0x0, 0x0, 0x0, 0x6, 0x6, &(0x7f0000001080)=[0x0, 0x0, 0x0, 0x0, 0x0, 0x0], &(0x7f00000010c0)=[0x0, 0x0, 0x0, 0x0, 0x0, 0x0], 0x0, 0x36, &(0x7f0000001100)=[{}], 0x8, 0x10, &(0x7f0000001140), &(0x7f0000001180), 0x8, 0x41, 0x8, 0x8, &(0x7f00000011c0)}}, 0x10) (async) bpf$BPF_GET_PROG_INFO(0xf, &(0x7f0000001300)={r8, 0xe0, &(0x7f0000001200)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, &(0x7f0000001040)=[0x0, 0x0, 0x0, 0x0], ""/16, 0x0, 0x0, 0x0, 0x0, 0x6, 0x6, &(0x7f0000001080)=[0x0, 0x0, 0x0, 0x0, 0x0, 0x0], &(0x7f00000010c0)=[0x0, 0x0, 0x0, 0x0, 0x0, 0x0], 0x0, 0x36, &(0x7f0000001100)=[{}], 0x8, 0x10, &(0x7f0000001140), &(0x7f0000001180), 0x8, 0x41, 0x8, 0x8, &(0x7f00000011c0)}}, 0x10) bpf$BPF_GET_PROG_INFO(0xf, &(0x7f0000001680)={r8, 0xe0, &(0x7f0000001580)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, &(0x7f00000013c0)=[0x0, 0x0], ""/16, 0x0, 0x0, 0x0, 0x0, 0x4, 0x6, &(0x7f0000001400)=[0x0, 0x0, 0x0, 0x0], &(0x7f0000001440)=[0x0, 0x0, 0x0, 0x0, 0x0, 0x0], 0x0, 0xd0, &(0x7f0000001480)=[{}], 0x8, 0x10, &(0x7f00000014c0), &(0x7f0000001500), 0x8, 0x8b, 0x8, 0x8, &(0x7f0000001540)}}, 0x10) (async) bpf$BPF_GET_PROG_INFO(0xf, &(0x7f0000001680)={r8, 0xe0, &(0x7f0000001580)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, &(0x7f00000013c0)=[0x0, 0x0], ""/16, 0x0, 0x0, 0x0, 0x0, 0x4, 0x6, &(0x7f0000001400)=[0x0, 0x0, 0x0, 0x0], &(0x7f0000001440)=[0x0, 0x0, 0x0, 0x0, 0x0, 0x0], 0x0, 0xd0, &(0x7f0000001480)=[{}], 0x8, 0x10, &(0x7f00000014c0), &(0x7f0000001500), 0x8, 0x8b, 0x8, 0x8, &(0x7f0000001540)}}, 0x10) bpf$PROG_LOAD(0x5, &(0x7f0000001740)={0x11, 0x1a, &(0x7f0000000f00)=@ringbuf={{0x18, 0x0, 0x0, 0x0, 0x8, 0x0, 0x0, 0x0, 0xffffffff}, {{0x18, 0x1, 0x1, 0x0, r8}}, {}, [@btf_id={0x18, 0x0, 0x3, 0x0, 0x5}, @ringbuf_output={{0x18, 0x1, 0x1, 0x0, r8}, {}, {}, {}, {}, {}, {0x7, 0x0, 0xb, 0x4, 0x0, 0x0, 0x2}}], {{}, {}, {0x85, 0x0, 0x0, 0x85}}}, &(0x7f0000001000)='syzkaller\x00', 0x5, 0x0, 0x0, 0x61900, 0x5, '\x00', r10, @fallback=0x2d, r8, 0x8, &(0x7f0000001340)={0x3, 0x5}, 0x8, 0x10, &(0x7f0000001380)={0x1, 0x3, 0x401, 0xfffffff7}, 0x10, r12, 0xffffffffffffffff, 0x8, 0x0, &(0x7f00000016c0)=[{0x5, 0x2, 0x0, 0xb}, {0x4, 0x2, 0xe, 0xe}, {0x5, 0x4, 0x2, 0xe1b7481bd4200ca9}, {0x1, 0x5, 0x6, 0xa}, {0x0, 0x2, 0x9, 0x6}, {0x1, 0x1, 0x3, 0x5}, {0x4, 0x2, 0x8}, {0x0, 0x5, 0x10, 0x5}], 0x10, 0x4}, 0x94) socket$igmp6(0xa, 0x3, 0x2) connect$packet(r8, &(0x7f0000001800)={0x11, 0xf6, r11, 0x1, 0x3, 0x6, @remote}, 0x14) setsockopt$inet_sctp_SCTP_SOCKOPT_BINDX_ADD(r8, 0x84, 0x64, &(0x7f0000001840)=[@in6={0xa, 0x4e23, 0xfffffff7, @dev={0xfe, 0x80, '\x00', 0x1d}, 0x7fffffff}, @in6={0xa, 0x4e24, 0xfb1, @dev={0xfe, 0x80, '\x00', 0x1c}, 0x6}, @in={0x2, 0x4e21, @dev={0xac, 0x14, 0x14, 0x41}}], 0x48) sendmsg$NFT_MSG_GETOBJ(r8, &(0x7f0000001980)={&(0x7f00000018c0)={0x10, 0x0, 0x0, 0xa80}, 0xc, &(0x7f0000001940)={&(0x7f0000001900)={0x30, 0x13, 0xa, 0x3, 0x0, 0x0, {0xa, 0x0, 0x3}, [@NFTA_OBJ_USERDATA={0x1c, 0x8, "42fb1807da37a0d507523b564cbbc848808bb8e66ae05510"}]}, 0x30}, 0x1, 0x0, 0x0, 0x4000}, 0x1) sendmsg$DEVLINK_CMD_TRAP_GROUP_GET(r8, &(0x7f0000001b40)={&(0x7f00000019c0)={0x10, 0x0, 0x0, 0x100000}, 0xc, &(0x7f0000001b00)={&(0x7f0000001a00)={0xc8, r7, 0x400, 0x70bd29, 0x25dfdbfd, {}, [{@pci={{0x8}, {0x11}}, {0xd}}, {@nsim={{0xe}, {0xf, 0x2, {'netdevsim', 0x0}}}, {0xd}}, {@pci={{0x8}, {0x11}}, {0xd}}, {@pci={{0x8}, {0x11}}, {0xd}}]}, 0xc8}, 0x1, 0x0, 0x0, 0x4}, 0x4) r13 = syz_genetlink_get_family_id$tipc(&(0x7f0000001bc0), r6) sendmsg$TIPC_CMD_SHOW_PORTS(r6, &(0x7f0000001c80)={&(0x7f0000001b80)={0x10, 0x0, 0x0, 0x2000}, 0xc, &(0x7f0000001c40)={&(0x7f0000001c00)={0x1c, r13, 0x8, 0x70bd28, 0x25dfdbff}, 0x1c}, 0x1, 0x0, 0x0, 0x1800}, 0x4000080) 5m42.055746638s ago: executing program 0 (id=5015): openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='cpuacct.usage_percpu_sys\x00', 0x275a, 0x0) bpf$PROG_LOAD(0x5, &(0x7f00000017c0)={0x1, 0xe, &(0x7f0000001880)=ANY=[@ANYBLOB="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"], &(0x7f00000001c0)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0x0, 0x10, &(0x7f0000000000), 0xffa3}, 0x48) syz_emit_ethernet(0x1e, &(0x7f0000000040)=ANY=[@ANYBLOB="0000bbbbbbbbaaaaaaaaaaaa000c020000c0010100007af417550c6dcbe6"], &(0x7f00000000c0)={0x0, 0x2, [0xfe2, 0x6a6, 0xd7, 0xa6]}) r0 = socket$packet(0x11, 0x2, 0x300) setsockopt$packet_fanout(r0, 0x107, 0x12, &(0x7f0000000100)={0x0, 0x7}, 0x4) setsockopt$packet_int(r0, 0x107, 0x16, &(0x7f0000000000)=0x4, 0x4) syz_genetlink_get_family_id$tipc2(&(0x7f0000000400), 0xffffffffffffffff) 5m41.961625578s ago: executing program 0 (id=5017): sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000040)=@newtaction={0x6c, 0x30, 0x1, 0x70bd28, 0x0, {}, [{0x58, 0x1, [@m_skbmod={0x54, 0x1, 0x0, 0x0, {{0xb}, {0x28, 0x2, 0x0, 0x1, [@TCA_SKBMOD_PARMS={0x24, 0x2, {{0xffffffff, 0x10001, 0xffffffffffffffff, 0x3c, 0x3}, 0x400000000a}}]}, {0x4}, {0xc}, {0xc}}}]}]}, 0x6c}, 0x1, 0x0, 0x0, 0x4}, 0x0) syz_emit_ethernet(0x6e, &(0x7f0000000040)=ANY=[@ANYBLOB="0180c2000002aaaaaaaaaaaa08004500006000000000002f9078640101000000000024806558000000000000000010000800000086dd"], 0x0) sendmmsg$alg(0xffffffffffffffff, &(0x7f0000007e40)=[{0x0, 0x0, &(0x7f0000003740)=[{&(0x7f00000000c0)="4789d3aefc1a4d03345aed327be33c", 0xf}], 0x1, 0x0, 0x0, 0x20000000}], 0x1, 0x20040894) r0 = socket$kcm(0x10, 0x2, 0x10) sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000001c0)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a20000000000a03000000000000000000070000040900010073797a30000000009c000000090a010400000000000000000700000308000a40000000000900020073797a30000000000900010073797a3000000000080005400000000d58001280200001800e000100636f6e6e6c696d69740000000c0002800800014000000008200001800e000100636f6e6e6c696d69740000000c00028008000140000000001400017b090001006cdbf80789f3f947dd000280080003"], 0xe4}, 0x1, 0x0, 0x0, 0x8001}, 0x20010840) r1 = socket$can_j1939(0x1d, 0x2, 0x7) bpf$BPF_BTF_LOAD(0x12, 0x0, 0x0) r2 = socket$key(0xf, 0x3, 0x2) sendmmsg(r1, 0x0, 0x0, 0x48010) r3 = socket$nl_xfrm(0x10, 0x3, 0x6) socket$inet_tcp(0x2, 0x1, 0x0) sendmsg$nl_xfrm(r3, &(0x7f0000000480)={0x0, 0x0, &(0x7f0000001f40)={&(0x7f00000004c0)=@updpolicy={0xfc, 0x19, 0x1, 0x70bd2b, 0x0, {{@in6=@loopback, @in=@local, 0x0, 0x0, 0x0, 0x0, 0xa, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff}, {0x0, 0xc, 0x0, 0x1, 0x0, 0xffffffffffffffff}, {0x0, 0xa00, 0x407ffffffffffe, 0x800000000000002}, 0x0, 0x0, 0x1, 0x0, 0x6}, [@tmpl={0x44, 0x5, [{{@in=@rand_addr=0x64010102, 0x0, 0x3c}, 0x2, @in=@local, 0x6, 0x4, 0x3}]}]}, 0xfc}}, 0x0) sendmsg$kcm(0xffffffffffffffff, 0x0, 0x0) syz_init_net_socket$bt_l2cap(0x1f, 0x1, 0x0) r4 = accept4(r2, 0x0, 0x0, 0x80800) getsockopt$inet_sctp6_SCTP_PRIMARY_ADDR(r4, 0x84, 0x6, 0x0, 0x0) syz_emit_ethernet(0x4a, &(0x7f00000001c0)={@local, @local, @void, {@ipv6={0x86dd, @tcp={0x0, 0x6, "e0ffac", 0x14, 0x2c, 0x0, @remote, @local, {[], {{0x2b00, 0xfffc, 0x41424344, 0x41424344, 0x0, 0x0, 0x5}}}}}}}, 0x0) sendmsg$inet6(0xffffffffffffffff, &(0x7f00000001c0)={&(0x7f0000000100)={0xa, 0x87, 0x4, @mcast2}, 0x1c, 0x0}, 0x922bac8556bdad8e) sendmsg$kcm(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f00000003c0)=[{&(0x7f0000000340)="a854a929a79527f39053d9ead142dd8a60cf5afe650a176c952125a26a65668e3ceb6fb819f8414ff01a69a83c59f6c02b30edb57dce809422a8042eab7eaaf24547c02ecdaaaeaf79a46bf4130ce92c440ca1f9d2", 0x55}, {&(0x7f0000000400)="5fc8cc07cfad66a03cdf6dff71f7db088190a056c443c788f285b6cb9f122293bbbe7f81016b1e3c39e6501bc1918c2ab9eb21ac6075c85aeb2a81ac2bf2b3e1cdff3a3ebbafefa16a6e9b940490c9ad372eacb80cb9ee28e0ba91d546fb7953ac9a51c8272b7ccc9c62cfed72a8ed510748bd708197e2b558f46a28dd76d5ae9781154f93f57663abe426ae467138745e9906b8b774889a2e7256b2d5c19009b884f724060bfda68c4a7b32ca3e0ab4a7654feac173a30d1fd1b1b458ec03a17df95d52e42e48d18147e986b907374e2e2f25dd8ea02f", 0xd7}], 0x2}, 0x0) r5 = socket$packet(0x11, 0x2, 0x300) ioctl$sock_SIOCGIFINDEX(r5, 0x8933, &(0x7f0000000000)={'veth0\x00'}) r6 = socket$nl_route(0x10, 0x3, 0x0) r7 = socket(0x400000000010, 0x3, 0x0) r8 = socket$unix(0x1, 0x5, 0x0) ioctl$sock_SIOCGIFINDEX(r8, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r7, &(0x7f00000012c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000005c0)=@newqdisc={0x38, 0x24, 0x4ee4e6a52ff56541, 0x70bd2d, 0x25dfdbfd, {0x0, 0x0, 0x0, r9, {0x0, 0xfff1}, {0xffff, 0xffff}, {0x1, 0xf}}, [@qdisc_kind_options=@q_multiq={{0xb}, {0x8, 0x2, {0x28}}}]}, 0x38}}, 0x0) sendmsg$nl_route_sched(r7, &(0x7f00000003c0)={0x0, 0x0, &(0x7f0000000440)={&(0x7f0000001300)=@newtfilter={0x44, 0x2c, 0xd27, 0x70bd28, 0x8000, {0x0, 0x0, 0x0, r9, {0x10, 0xffe0}, {}, {0xa, 0xfff3}}, [@filter_kind_options=@f_bpf={{0x8}, {0x18, 0x2, [@TCA_BPF_OPS={{0x6}, {0x4}}, @TCA_BPF_FLAGS_GEN={0x8, 0x9, 0x6}]}}]}, 0x44}, 0x1, 0x0, 0x0, 0x22040028}, 0x40040) r10 = socket$inet6_mptcp(0xa, 0x1, 0x106) connect$unix(r10, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) sendmsg$nl_route(r6, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000180)={&(0x7f00000002c0)=ANY=[@ANYRESDEC, @ANYRES32=r5, @ANYRES32=r5, @ANYRESHEX=r10], 0x2c}}, 0x20004851) 5m41.72693892s ago: executing program 0 (id=5019): r0 = bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f00000007c0)={0x1b, 0x0, 0x0, 0x40000, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0}, 0x48) bpf$PROG_LOAD(0x5, &(0x7f0000000840)={0x10, 0xf, &(0x7f0000000040)=@ringbuf={{0x18, 0x8, 0x0, 0x0, 0x7fffffff}, {{0x18, 0x4, 0x1, 0x0, r0}, {}, {}, {0x85, 0x0, 0x0, 0x3a}, {0x4, 0x1, 0xb, 0x9, 0xa}}, {{0x5, 0x0, 0x3, 0x9, 0x0, 0x1, 0x7}}, [], {{0x6, 0x1, 0x3, 0x8}, {0x6, 0x0, 0x2, 0x8, 0x0, 0x0, 0x2}, {0x85, 0x0, 0x0, 0x7}}}, &(0x7f0000000280)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @sk_msg, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) 5m41.690802462s ago: executing program 0 (id=5021): r0 = openat$rfkill(0xffffffffffffff9c, &(0x7f0000000040), 0x801, 0x0) socket$nl_generic(0x10, 0x3, 0x10) (async) unshare(0x6020400) bpf$BPF_GET_BTF_INFO(0xf, &(0x7f0000000340)={0xffffffffffffffff, 0x0, 0x0}, 0x10) (async) getsockopt$inet_mreqn(0xffffffffffffffff, 0x0, 0x23, &(0x7f0000000140)={@multicast1, @empty, 0x0}, &(0x7f0000000180)=0xc) bpf$PROG_LOAD(0x5, &(0x7f00000003c0)={0x1c, 0x4, &(0x7f00000000c0)=ANY=[@ANYBLOB, @ANYRES8], &(0x7f0000000000)='GPL\x00', 0x0, 0x0, 0x0, 0x100, 0x70, '\x00', r1, @fallback=0x30, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) (async) syz_genetlink_get_family_id$fou(&(0x7f0000000080), 0xffffffffffffffff) (async) sendmsg$FOU_CMD_ADD(0xffffffffffffffff, 0x0, 0x0) (async) bpf$OBJ_PIN_PROG(0x11, 0x0, 0x0) openat$rfkill(0xffffffffffffff9c, &(0x7f0000000100), 0x2000, 0x0) (async) syz_genetlink_get_family_id$ethtool(&(0x7f00000002c0), 0xffffffffffffffff) (async) setsockopt$packet_int(0xffffffffffffffff, 0x107, 0xa, 0x0, 0x0) (async) write$rfkill(r0, &(0x7f0000000080)={0x0, 0x0, 0x3, 0x1}, 0x8) 5m26.299623671s ago: executing program 32 (id=5021): r0 = openat$rfkill(0xffffffffffffff9c, &(0x7f0000000040), 0x801, 0x0) socket$nl_generic(0x10, 0x3, 0x10) (async) unshare(0x6020400) bpf$BPF_GET_BTF_INFO(0xf, &(0x7f0000000340)={0xffffffffffffffff, 0x0, 0x0}, 0x10) (async) getsockopt$inet_mreqn(0xffffffffffffffff, 0x0, 0x23, &(0x7f0000000140)={@multicast1, @empty, 0x0}, &(0x7f0000000180)=0xc) bpf$PROG_LOAD(0x5, &(0x7f00000003c0)={0x1c, 0x4, &(0x7f00000000c0)=ANY=[@ANYBLOB, @ANYRES8], &(0x7f0000000000)='GPL\x00', 0x0, 0x0, 0x0, 0x100, 0x70, '\x00', r1, @fallback=0x30, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) (async) syz_genetlink_get_family_id$fou(&(0x7f0000000080), 0xffffffffffffffff) (async) sendmsg$FOU_CMD_ADD(0xffffffffffffffff, 0x0, 0x0) (async) bpf$OBJ_PIN_PROG(0x11, 0x0, 0x0) openat$rfkill(0xffffffffffffff9c, &(0x7f0000000100), 0x2000, 0x0) (async) syz_genetlink_get_family_id$ethtool(&(0x7f00000002c0), 0xffffffffffffffff) (async) setsockopt$packet_int(0xffffffffffffffff, 0x107, 0xa, 0x0, 0x0) (async) write$rfkill(r0, &(0x7f0000000080)={0x0, 0x0, 0x3, 0x1}, 0x8) 3.373210614s ago: executing program 5 (id=8686): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) r1 = socket$packet(0x11, 0x2, 0x300) setsockopt$packet_int(r1, 0x107, 0xa, &(0x7f0000000300)=0x2, 0x4) setsockopt$packet_rx_ring(r1, 0x107, 0x5, &(0x7f0000000040)=@req3={0x1000, 0x7fff, 0x1000, 0x3a, 0x0, 0xfffffffd}, 0x1c) r2 = socket$inet_udp(0x2, 0x2, 0x0) ioctl$sock_inet_SIOCGIFPFLAGS(r2, 0x8935, &(0x7f00000016c0)={'batadv_slave_0\x00'}) sendmsg$IPSET_CMD_CREATE(r0, &(0x7f0000000380)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000000)={0x54, 0x2, 0x6, 0x5, 0x0, 0x0, {}, [@IPSET_ATTR_PROTOCOL={0x5}, @IPSET_ATTR_SETNAME={0x9, 0x2, 'syz1\x00'}, @IPSET_ATTR_DATA={0xc, 0x7, 0x0, 0x1, [@IPSET_ATTR_TIMEOUT={0x8, 0x6, 0x0}]}, @IPSET_ATTR_TYPENAME={0x10, 0x3, 'hash:ip,mac\x00'}, @IPSET_ATTR_FAMILY={0x5, 0x5, 0x2}, @IPSET_ATTR_REVISION={0x5}]}, 0x54}}, 0x0) bpf$PROG_LOAD(0x5, &(0x7f0000000080)={0xe, 0x4, &(0x7f0000000040)=@framed={{}, [@ldst={0x3, 0x0, 0x3, 0x1, 0x0, 0x2f}]}, &(0x7f0000000000)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @sk_skb, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000440)={0x11, 0xb, &(0x7f0000000180)=@framed={{0x18, 0x8, 0x0, 0x0, 0x3ffffffe}, [@func={0x85, 0x0, 0x1, 0x0, 0x6}, @func={0x85, 0x0, 0x1, 0x0, 0x4}, @generic={0x66, 0x8}, @initr0={0x18, 0x0, 0x0, 0x0, 0x1000}, @exit, @exit, @call={0x85, 0x0, 0x0, 0x94}]}, &(0x7f0000000000)='GPL\x00', 0x2, 0x0, 0x0, 0x0, 0x8}, 0x94) 3.182537621s ago: executing program 5 (id=8688): r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = socket$netlink(0x10, 0x3, 0x9) r2 = socket$inet(0x2, 0x4000000000000001, 0x100) socket(0x1d, 0x2, 0x6) pselect6(0x40, &(0x7f0000000100)={0x0, 0x0, 0xffffffffffffffff, 0x0, 0x800, 0x2, 0x80000000000004, 0x6}, 0x0, &(0x7f0000000400)={0x1f, 0x0, 0x800000000000, 0x0, 0x1000000000, 0x0, 0xfffffffffffffffe}, 0x0, 0x0) sendto$inet(r2, 0x0, 0x0, 0x200007fd, 0x0, 0x0) setsockopt$sock_int(r2, 0x1, 0x20, &(0x7f0000000100)=0x6, 0x4) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000240)=@delchain={0x24, 0x65, 0x400, 0x70bd29, 0x25dfdbfc, {0x0, 0x0, 0x0, 0x0, {0x509d884560ba1ba6, 0x3}, {}, {0x8, 0x10}}}, 0x24}}, 0x10) sendmsg$TEAM_CMD_OPTIONS_SET(0xffffffffffffffff, &(0x7f0000004bc0)={0x0, 0x0, &(0x7f0000004b80)={&(0x7f0000000100)=ANY=[@ANYBLOB="60b80000", @ANYRES16, @ANYBLOB="050427bd7000fedbdf250100000008000100", @ANYRES32, @ANYBLOB="4400028040000100240001006d6f6465000000000000000000000000000000000000000000000000000000000500030005"], 0x60}, 0x1, 0x0, 0x0, 0x4000401}, 0x4040084) getsockopt$inet_mreqn(0xffffffffffffffff, 0x0, 0x20, &(0x7f0000000180)={@loopback, @multicast1, 0x0}, &(0x7f00000001c0)=0xc) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000000)=@getqdisc={0x48, 0x26, 0x8, 0x70bd2a, 0x25dfdbff, {0x0, 0x0, 0x0, r3, {0xc, 0x1ffe8}, {0xb, 0x1}, {0xffff}}, [{0x4}, {0x4}, {0x4}, {0x4}, {0x4}, {0x4}, {0x4}, {0x4}, {0x4}]}, 0x48}, 0x1, 0x0, 0x0, 0x40448c4}, 0x20004055) r4 = socket$nl_generic(0x10, 0x3, 0x10) r5 = syz_genetlink_get_family_id$ethtool(0x0, 0xffffffffffffffff) sendmsg$ETHTOOL_MSG_COALESCE_SET(r4, &(0x7f00000000c0)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000080)=ANY=[@ANYBLOB=' \x00\x00\x00', @ANYRES16=r5, @ANYBLOB="00002ebd7000ffdbdf2514000000040001800500180001000000"], 0x20}, 0x1, 0x0, 0x0, 0x984}, 0x4000050) r6 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r6, 0x8933, &(0x7f0000000300)={'bridge0\x00', 0x0}) sendmsg$nl_route(r6, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000080)=ANY=[@ANYBLOB="380000005400010d2bbd70000200000007000000", @ANYRES32=r7, @ANYBLOB="20000100", @ANYRES32=r7, @ANYBLOB="010200007f"], 0x38}, 0x1, 0x0, 0x0, 0x22004804}, 0x40080c0) sendmsg$ETHTOOL_MSG_FEATURES_GET(r1, &(0x7f0000000580)={&(0x7f0000000200)={0x10, 0x0, 0x0, 0x200}, 0xc, &(0x7f0000000540)={&(0x7f0000000b00)=ANY=[@ANYBLOB="f8000000", @ANYRES16=r5, @ANYBLOB="010025bd7000fbdbdf250b0000003000018008000100", @ANYRES32=r3, @ANYBLOB="140002006272696467655f736c6176655f300000080003000100000000000200776c616e300000000000000000000000340001806c000180140002007767320000000000000000000000000005000100", @ANYRES32=r7, @ANYBLOB="080003000200000008000100", @ANYRES32=r3, @ANYBLOB="08000100", @ANYRES32=r3, @ANYBLOB="080003000000000008000100", @ANYRES32=r3, @ANYBLOB="080003000200000008000100", @ANYRES32=r3, @ANYBLOB="1400020076657468305f746f5f626f6e640000001400018008000100", @ANYRES32=r3, @ANYBLOB="08000100", @ANYRES32=r3, @ANYBLOB="7a25d949b4c9fca8c2384f835d73b67adf7b9eac392f6e82b4d398ca9b12dbd19bef0fedf42324d65f163d201c8a82b068b01be887bdd4a55e782fb89b0c965399c4d745ec8f4fac389b29ca21e85d793052ee711d5e43d991bfc607d0543132b87c1fdb44a86789ee2b0d28208795fd3310836aec1e7c112e384371026417565fea2939bcea707b184ebc992a9316572fbdcf08f4067ce7dbec4f0c7bd1869a49657acd6a5e155ccd563769217fcaa6e6331cb5800b01b94dfc888a900460dc5dafea7857f59d80dd81d76fdc316c213fab9d06075411d7f7d8e60e3dd66ac5d082a73b87dbceec43acc5a5532a7dbdfab798"], 0xf8}, 0x1, 0x0, 0x0, 0x41}, 0x20000800) r8 = bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000440)=ANY=[@ANYBLOB="0200000004000000080000000100000080000000", @ANYRES32=0x0, @ANYBLOB="62f42d8949d6632f379500"/30, @ANYRES32=0x0, @ANYRES32=0x0, @ANYBLOB="0300"/28], 0x50) r9 = bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f00000007c0)=ANY=[@ANYBLOB="1b0000000000", @ANYRES32=0x0, @ANYBLOB='\x00'/20, @ANYRES32=0x0, @ANYRES32=0x0, @ANYBLOB='\x00'/28], 0x48) r10 = bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000680)={0x6, 0xf, &(0x7f0000000140)=ANY=[@ANYBLOB="1860000000000000000000000000000018110000", @ANYRES32=r9, @ANYBLOB="0000000000000000b702000014000000b7030000000000008500000083000000bf0900000000000055090100000000009500000000000000bf91000000000000b7020000000000008500000084000000b7000000000000009500000000000000"], &(0x7f00000002c0)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, &(0x7f0000000600)=[r8]}, 0x90) bpf$BPF_GET_PROG_INFO(0xf, &(0x7f0000000400)={r10, 0xe0, &(0x7f0000000300)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, &(0x7f0000000000)=[0x0, 0x0], ""/16, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x43, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xc4, 0x8, 0x0, 0x0}}, 0x10) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000000080)={0x0, 0x48}, 0x1, 0x0, 0x0, 0x10}, 0x0) sendmsg$nl_route(r0, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000004c0)=ANY=[@ANYBLOB="500000001000010425bbe5ad600027842cf52300", @ANYRES32=r5, @ANYRESOCT=r7], 0x50}, 0x1, 0x0, 0x0, 0x13d33d22cca65c15}, 0x4008840) setsockopt$inet_sctp6_SCTP_STREAM_SCHEDULER(0xffffffffffffffff, 0x84, 0x7b, &(0x7f0000000140)={0x0, 0x3}, 0x8) shutdown(r1, 0x0) r11 = socket$netlink(0x10, 0x3, 0x0) sendmmsg(r11, &(0x7f00000002c0), 0x40000000000009f, 0x0) r12 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r12, &(0x7f0000000280)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000380)=ANY=[@ANYBLOB="40000000100003052dbda34c34408336a93998fd08dfcb56f1a1d10d6bcd16abefa070000000000000000000", @ANYRES32=0x0, @ANYBLOB="000000000000000020001280080001006774700014000280050006007f0000000800040001000000"], 0x40}, 0x1, 0x0, 0x0, 0x80}, 0x0) 2.223348073s ago: executing program 5 (id=8707): r0 = socket$inet_udp(0x2, 0x2, 0x0) r1 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a) recvmsg(r1, &(0x7f00000002c0)={0x0, 0x0, 0x0}, 0x143) r2 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_route(r2, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000001140)={&(0x7f0000000040)=@newlink={0x44, 0x10, 0x503, 0x2, 0x0, {0x0, 0x0, 0x0, 0x0, 0x115}, [@IFLA_LINKINFO={0x24, 0x12, 0x0, 0x1, @bond={{0x9}, {0x14, 0x2, 0x0, 0x1, [@IFLA_BOND_MODE={0x5, 0x1, 0x4}, @IFLA_BOND_ARP_INTERVAL={0x8, 0x7, 0x9d}]}}}]}, 0x44}}, 0x0) r3 = socket$pppl2tp(0x18, 0x1, 0x1) syz_emit_ethernet(0x42, &(0x7f0000000000)={@local, @broadcast, @void, {@ipv4={0x800, @icmp={{0x5, 0x4, 0x0, 0x0, 0x34, 0x0, 0x0, 0x0, 0x1, 0x0, @initdev={0xac, 0x1e, 0x0, 0x0}, @local}, @time_exceeded={0xb, 0x0, 0x0, 0x3, 0x0, 0x0, {0x5, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2f, 0x0, @broadcast=0xac14140a, @multicast1}, "040086dd"}}}}}, 0x0) connect$pppl2tp(r3, &(0x7f0000000140)=@pppol2tpin6={0x18, 0x1, {0x0, r0, 0x1, 0x0, 0x0, 0x0, {0xa, 0x0, 0x4000000, @mcast1}}}, 0x32) sendmmsg(r3, &(0x7f0000004380)=[{{0x0, 0x0, 0x0}}], 0x34000, 0x0) r4 = openat$tun(0xffffffffffffff9c, &(0x7f0000000000), 0x40241, 0x0) ioctl$TUNSETIFF(r4, 0x400454ca, &(0x7f0000000200)={'syzkaller1\x00', 0xc201}) r5 = socket$kcm(0x2, 0xa, 0x2) ioctl$SIOCSIFHWADDR(r5, 0x8914, &(0x7f0000000180)={'syzkaller1\x00', @link_local}) write$tun(r4, &(0x7f0000000380)=ANY=[@ANYBLOB="1c0000f5"], 0x78) r6 = socket$nl_generic(0x10, 0x3, 0x10) r7 = syz_genetlink_get_family_id$ipvs(&(0x7f00000000c0), r6) r8 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r8, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000580)={0x3c, 0x3e, 0x107, 0x70bd27, 0x0, {0x1, 0x7c}, [@nested={0x4, 0xf9}, @nested={0xc, 0x1, 0x0, 0x1, [@typed={0xfffffffffffffe76, 0x6, 0x0, 0x0, @pid}]}, @nested={0x18, 0x2, 0x0, 0x1, [@generic="725eb862cec9a478ce2057c5241935e6782507e2"]}]}, 0x3c}, 0x1, 0x0, 0x0, 0xc000}, 0x4040) sendmsg$IPVS_CMD_DEL_DAEMON(r6, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000740)={0x20, r7, 0x1, 0x70bd2d, 0x25dfdbfb, {}, [@IPVS_CMD_ATTR_DAEMON={0xc, 0x3, 0x0, 0x1, [@IPVS_DAEMON_ATTR_STATE={0x8, 0x1, 0x2}]}]}, 0x20}, 0x1, 0x0, 0x0, 0x40}, 0x4000090) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f05ebbee1, 0x8031, 0xffffffffffffffff, 0x0) 2.134659866s ago: executing program 4 (id=8709): r0 = socket(0x10, 0x3, 0x0) r1 = syz_init_net_socket$bt_l2cap(0x1f, 0x1, 0x3) bind$bt_l2cap(r1, &(0x7f0000000280)={0x1f, 0xfffe, @fixed={'\xaa\xaa\xaa\xaa\xaa', 0x6a}}, 0xe) (async, rerun: 64) listen(r1, 0x0) (async, rerun: 64) accept4(r1, 0x0, 0x0, 0x80000) (async, rerun: 64) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x18, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0}, 0x94) (rerun: 64) r2 = bpf$MAP_CREATE(0x0, &(0x7f0000000740)=ANY=[@ANYBLOB="0b00000005000000000400000900000001"], 0x48) r3 = socket$inet6_udp(0xa, 0x2, 0x0) ioctl$sock_SIOCGIFINDEX(r3, 0x8933, &(0x7f0000000c80)={'lo\x00'}) (async, rerun: 32) ioctl$sock_ipv4_tunnel_SIOCADDTUNNEL(r0, 0x89f1, &(0x7f0000000380)={'gre0\x00', &(0x7f00000002c0)={'tunl0\x00', 0x0, 0x38c8, 0x10, 0x80000001, 0x80000001, {{0xb, 0x4, 0x0, 0x2c, 0x2c, 0x66, 0x0, 0x0, 0x4, 0x0, @dev={0xac, 0x14, 0x14, 0xf}, @loopback, {[@lsrr={0x83, 0x17, 0xa2, [@dev={0xac, 0x14, 0x14, 0x23}, @local, @empty, @empty, @dev={0xac, 0x14, 0x14, 0x1f}]}]}}}}}) (rerun: 32) ioctl$sock_inet6_SIOCADDRT(r3, 0x890b, &(0x7f00000003c0)={@initdev={0xfe, 0x88, '\x00', 0x0, 0x0}, @mcast1, @private1={0xfc, 0x1, '\x00', 0x1}, 0xb, 0x4, 0x8, 0x0, 0x3, 0x40022, r4}) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0xa, 0x4, &(0x7f0000000480)=ANY=[@ANYBLOB="18000000000000000000000000000000850000006d"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) (async, rerun: 64) r5 = socket$inet_mptcp(0x2, 0x1, 0x106) (rerun: 64) setsockopt$sock_int(r5, 0x1, 0xf, 0x0, 0x5e) r6 = socket$key(0xf, 0x3, 0x2) setsockopt$SO_TIMESTAMPING(r6, 0x1, 0x25, &(0x7f0000000080)=0xe4e, 0x4) (async) sendmsg$key(r6, &(0x7f00000020c0)={0x0, 0x0, &(0x7f0000002080)={&(0x7f0000001f80)=ANY=[@ANYBLOB='\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\b'], 0x10}}, 0x0) (async) recvmmsg(r6, &(0x7f0000001e00)=[{{0x0, 0x0, 0x0}, 0xf64}], 0x1, 0x40000000, 0x0) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000d80)={0x18, 0x5, &(0x7f0000000480)=ANY=[@ANYBLOB="1801000021"], 0x0, 0x40, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2}, 0x94) (async) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0xe, 0x0, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000800000000000000000000018110000", @ANYRES32=r2], 0x0, 0x0, 0x0, 0x0, 0x0, 0x59, '\x00', 0x0, @fallback=0xd, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) (async, rerun: 32) r7 = bpf$PROG_LOAD(0x5, &(0x7f0000000800)={0x6, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, @fallback=0x4, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) (rerun: 32) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000000)={r7, 0x2000000, 0xe, 0x0, &(0x7f00000004c0)="630b008646dc3f0adf33c9f7b986", 0x0, 0x86c, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x20}, 0x50) (async) r8 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r8, &(0x7f0000000340)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000100)=ANY=[@ANYBLOB="3c000000100001040300"/20, @ANYRES32=0x0, @ANYBLOB="00010000000000001c00128009000100626f0764000000000c00028005001f"], 0x3c}}, 0x54) (async) r9 = socket$inet6(0xa, 0x2, 0x3a) connect$inet6(r9, &(0x7f0000000000)={0xa, 0x0, 0x0, @dev, 0x40004}, 0x1c) (async) bind$inet6(r9, &(0x7f0000000040)={0xa, 0x0, 0x0, @loopback={0xfec0ffff00000000}}, 0x1c) (async) sendmsg$nl_route(r8, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000100)=ANY=[], 0x50}}, 0x4000000) 2.083861274s ago: executing program 3 (id=8710): bpf$PROG_LOAD(0x5, &(0x7f00000017c0)={0x1, 0xe, &(0x7f0000000ac0)=ANY=[@ANYBLOB="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"], &(0x7f00000001c0)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0x0, 0x10, &(0x7f0000000000), 0xfffffffffffffd00}, 0x48) 1.930592322s ago: executing program 3 (id=8711): r0 = socket$inet6_udp(0xa, 0x2, 0x0) setsockopt$inet6_udp_encap(r0, 0x11, 0x64, &(0x7f0000000240)=0x3, 0x4) r1 = socket(0x10, 0x3, 0x2) bind$netlink(r1, &(0x7f0000177ff4)={0x10, 0x0, 0x1}, 0xc) sendmsg$inet6(0xffffffffffffffff, &(0x7f0000000700)={&(0x7f0000000040)={0xa, 0x0, 0x0, @ipv4={'\x00', '\xff\xff', @remote}}, 0x1c, 0x0}, 0x0) sendmmsg$inet6(0xffffffffffffffff, &(0x7f0000001a00)=[{{0x0, 0x0, &(0x7f0000000480)=[{&(0x7f0000000080)="1a64829bf8f72508a80cd8d857b57faf39ee3f9eea1eee8a57ed874438f5d4c1071331ca143e3e50586a06bc83689f2a60f917d4a74431cca878e35f69c9cc01bd35", 0x42}], 0x1, 0x0, 0x168}}], 0x1, 0x0) r2 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_tcp_int(r2, 0x6, 0x2000000000000020, &(0x7f0000000040)=0xa, 0x1959cc36) close(0x3) bpf$PROG_LOAD(0x5, &(0x7f0000000440)={0x0, 0x4, &(0x7f0000000200)=ANY=[@ANYBLOB="18000000000000000000000000000000850000002e00000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) r3 = bpf$PROG_LOAD(0x5, &(0x7f0000000100)={0xe, 0x4, &(0x7f0000000200)=ANY=[], &(0x7f00000001c0)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @sk_skb, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x80) r4 = socket$nl_route(0x10, 0x3, 0x0) r5 = socket$nl_route(0x10, 0x3, 0x0) r6 = socket$netlink(0x10, 0x3, 0x0) setsockopt$netlink_NETLINK_DROP_MEMBERSHIP(r6, 0x10e, 0xc, &(0x7f0000000640)=0x4, 0x4) sendmsg$netlink(r6, &(0x7f0000000480)={0x0, 0x0, &(0x7f0000000000)=[{&(0x7f0000000840)=ANY=[@ANYBLOB="1c00000022000106770000000000000005000000000001"], 0x1c}], 0x1}, 0x0) ioctl$sock_SIOCGIFINDEX(r4, 0x8933, &(0x7f00000000c0)={'veth0_to_team\x00', 0x0}) sendmsg$nl_route(r5, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000001140)={&(0x7f0000000040)=ANY=[@ANYBLOB="680000001000030500"/20, @ANYRES32=0x0, @ANYBLOB="0000000000000000400012800c0001006d6163766c616e00300002800800010010000000100005800a000400aaaaaaaaaabb000008000300030000000a000400aaaaaaaab1aa000008000500", @ANYRES32=r7], 0x68}}, 0x0) sendmsg$nl_route_sched(r4, &(0x7f00000003c0)={0x0, 0x0, &(0x7f0000000700)={&(0x7f0000000180)=@getchain={0x24, 0x11, 0x839, 0x70bd28, 0x25dfdbfd, {0x0, 0x0, 0x0, r7, {0x1, 0x2}, {0xd, 0x10}, {0x1, 0xfff1}}}, 0x24}, 0x1, 0x0, 0x0, 0x84}, 0x0) bpf$BPF_PROG_DETACH(0x8, &(0x7f00000002c0)=ANY=[@ANYRES32, @ANYRES32=r3, @ANYBLOB="0500"/12, @ANYRES32, @ANYBLOB="1515eb475b6c41d5d0c80fe7069a7877ea8759bbcd3ad2a541785058b75cd1bc87ad3ccf27394a8641b711c7a98a33b86a393ae639eb6dcbb9eed0c07523ad5ea7f60450da8881fae63f3f8955ecf13dc730fb9b577d5c03536db3", @ANYRES64=0x0], 0x10) 1.661789609s ago: executing program 4 (id=8712): sendmsg$nl_xfrm(0xffffffffffffffff, 0x0, 0x0) r0 = socket$nl_netfilter(0x10, 0x3, 0xc) bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000540)={&(0x7f0000000480)=ANY=[@ANYBLOB="9feb0100180000000000000044000000440000000b000000060000000000000800000000060000000000000c03000000000000000400000d0002000000000000000000000efaffffff00008b0f000000000000000e00000001000000000000000000ff"], 0x0, 0x67, 0x0, 0x1}, 0x20) r1 = socket$nl_netfilter(0x10, 0x3, 0xc) r2 = socket$nl_rdma(0x10, 0x3, 0x14) sendmsg$RDMA_NLDEV_CMD_STAT_SET(r2, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000000)={0x20, 0x1410, 0x8b7fbbc5948fecd9, 0x70bd29, 0x25dfd9fc, "", [@RDMA_NLDEV_ATTR_STAT_AUTO_MODE_MASK={0x8, 0x4c, 0x1}, @RDMA_NLDEV_ATTR_DEV_INDEX={0x8, 0x1, 0x2}]}, 0x20}, 0x1, 0x0, 0x0, 0x20004085}, 0x4004080) sendmsg$NFT_BATCH(r1, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000100)=ANY=[@ANYRES32=r2], 0xa4}, 0x1, 0x0, 0x0, 0x20004854}, 0x4040040) sendmsg$IPCTNL_MSG_CT_NEW(0xffffffffffffffff, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000140)=ANY=[@ANYBLOB="500000000001010400000000141a000002000010240001801400018008000100e000000108000200e00000010c00028005000100000000001800028014000180080001"], 0x50}}, 0x0) sendmsg$NFT_BATCH(r0, &(0x7f000000c2c0)={0x0, 0x0, &(0x7f000000c280)={&(0x7f00000001c0)=ANY=[@ANYRESHEX=r0, @ANYRES32=r0], 0xa4}}, 0x0) sendmsg$NFT_BATCH(r0, &(0x7f00000000c0)={0x0, 0x11, &(0x7f0000000040)={&(0x7f0000000100)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a20000000000a0300"], 0x122}}, 0x0) r3 = socket$inet_udp(0x2, 0x2, 0x0) getsockopt$ARPT_SO_GET_ENTRIES(r3, 0x0, 0x61, &(0x7f0000000200)=ANY=[@ANYBLOB="66696c7451720000000000000000000000000000000000000000000000000000040000003b6f272e7b982a91bf35cb98fd82419cca4771f70fb264f50aa60ba588fcd7f4a423eff1c1b7ab9bc4371444e0e0588fe5ab246ed23d2ce3008b778ccb27b517d5e6d311c38220ff90bec894160aa99fa3948c3d685363a65496ca59bce0d8c6b9843e6b22eb304c2d116363dafe546d8ad02f875818a8d5e710a264ef249f3ae95584c1df14870000000000000000000000006d42966a3cb4f897a0f956ddeb642193a2cff86ede9ee79517ad0ae531"], &(0x7f0000000040)=0x2c) 1.447741427s ago: executing program 4 (id=8713): r0 = socket$packet(0x11, 0x3, 0x300) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000340)={'hsr0\x00', 0x0}) r2 = socket$nl_route(0x10, 0x3, 0x0) openat$tun(0xffffffffffffff9c, &(0x7f0000000080), 0x341300, 0x0) socket$kcm(0x2, 0xa, 0x2) socket$nl_generic(0x10, 0x3, 0x10) socket$nl_generic(0x10, 0x3, 0x10) socket$can_bcm(0x1d, 0x2, 0x2) socketpair$unix(0x1, 0x1, 0x0, &(0x7f00000000c0)) socket$inet_mptcp(0x2, 0x1, 0x106) socket$nl_route(0x10, 0x3, 0x0) socket$nl_netfilter(0x10, 0x3, 0xc) syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) pipe(&(0x7f0000000000)) socket$nl_generic(0x10, 0x3, 0x10) socket$inet_tcp(0x2, 0x1, 0x0) syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) socket$nl_route(0x10, 0x3, 0x0) socket$nl_netfilter(0x10, 0x3, 0xc) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000340)) socket$nl_generic(0x10, 0x3, 0x10) syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$nl80211(0x0, 0xffffffffffffffff) socket$nl_generic(0x10, 0x3, 0x10) r3 = socket$nl_generic(0x10, 0x3, 0x10) r4 = socket(0xa, 0x3, 0x3a) setsockopt$MRT6_ADD_MIF(r4, 0x29, 0xca, &(0x7f0000000140)={0xfffe, 0x1}, 0xc) r5 = syz_genetlink_get_family_id$ethtool(&(0x7f0000000040), r4) sendmsg$ETHTOOL_MSG_COALESCE_SET(r3, &(0x7f0000000540)={0x0, 0x1f, &(0x7f0000000500)={&(0x7f00000001c0)=ANY=[@ANYBLOB='\\\x00\x00\x00', @ANYRES16=r5, @ANYBLOB="010000000000000000001400000008000200fc00000018000180140002006e657464657673696d300000000000000800050000fcffff08000900fc000000080011000700000008000e00800000000800", @ANYRES32=r3], 0x5c}, 0x1, 0x0, 0x0, 0x800}, 0x0) sendmsg$nl_route_sched(r2, &(0x7f00000003c0)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000280)=@getchain={0x24, 0x11, 0x839, 0x70bd27, 0x0, {0x0, 0x0, 0x0, r1, {}, {0x6, 0xd}, {0x5}}}, 0x24}, 0x1, 0x40030000000000, 0x0, 0x10}, 0x4000810) 1.382764634s ago: executing program 3 (id=8714): socket$inet6_icmp_raw(0xa, 0x3, 0x3a) (async) r0 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a) r1 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r1, &(0x7f0000002f80)={0x0, 0x0, &(0x7f0000002f40)={&(0x7f0000000080)=@newtaction={0x68, 0x30, 0x9, 0x0, 0x0, {}, [{0x54, 0x1, [@m_skbedit={0x50, 0x1, 0x0, 0x0, {{0xc}, {0x24, 0x2, 0x0, 0x1, [@TCA_SKBEDIT_PTYPE={0x6, 0x7, 0x1}, @TCA_SKBEDIT_PARMS={0x18, 0x2, {0x0, 0x0, 0x0, 0x0, 0xcf}}]}, {0x4}, {0xc, 0xa}, {0xc, 0x9, {0x3b}}}}]}]}, 0x68}, 0x1, 0x0, 0x0, 0x4000004}, 0x0) (async) sendmsg$nl_route_sched(r1, &(0x7f0000002f80)={0x0, 0x0, &(0x7f0000002f40)={&(0x7f0000000080)=@newtaction={0x68, 0x30, 0x9, 0x0, 0x0, {}, [{0x54, 0x1, [@m_skbedit={0x50, 0x1, 0x0, 0x0, {{0xc}, {0x24, 0x2, 0x0, 0x1, [@TCA_SKBEDIT_PTYPE={0x6, 0x7, 0x1}, @TCA_SKBEDIT_PARMS={0x18, 0x2, {0x0, 0x0, 0x0, 0x0, 0xcf}}]}, {0x4}, {0xc, 0xa}, {0xc, 0x9, {0x3b}}}}]}]}, 0x68}, 0x1, 0x0, 0x0, 0x4000004}, 0x0) socket$nl_generic(0x10, 0x3, 0x10) (async) r2 = socket$nl_generic(0x10, 0x3, 0x10) r3 = syz_genetlink_get_family_id$tipc(&(0x7f0000000080), r2) sendmsg$TIPC_CMD_SHOW_NAME_TABLE(r2, &(0x7f0000000200)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000040)={0x30, r3, 0x1, 0x0, 0x0, {{}, {}, {0x14, 0x19, {0x0, 0x0, 0x0, 0x5}}}}, 0x30}}, 0x0) syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) (async) r4 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) bind$bt_hci(r4, &(0x7f0000000040)={0x1f, 0xffff, 0x3}, 0x1e) write(r4, &(0x7f0000000080)="0b000300010001", 0x7) socket$nl_route(0x10, 0x3, 0x0) close(r0) bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000540)={&(0x7f0000000400)={{0xeb9f, 0x1, 0x0, 0x18, 0x0, 0xc, 0xc, 0x2, [@struct={0x0, 0x58, 0x0, 0x3}]}}, 0x0, 0x26}, 0x20) socket$nl_route(0x10, 0x3, 0x0) (async) r5 = socket$nl_route(0x10, 0x3, 0x0) r6 = socket$nl_route(0x10, 0x3, 0x0) setsockopt$netlink_NETLINK_TX_RING(r6, 0x10e, 0x7, &(0x7f0000000240)={0x4, 0x8, 0x2, 0x9}, 0x10) sendmsg$nl_route(r5, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000000c0)=ANY=[@ANYBLOB="2c0000001000010000000004000000000000000088aa4dd71d4950c8e14f467363c2459f2601b4f96f03d6ed91358a8548884ad872c1a471fdbdbef376ab05df71038bd54ea02aec9f22713bea042c7b9466b3b36c8bdb42b952210262e3c66460244c93065415dbea5ba5c53d7c53768074350b81f242be8158f0ac72d1023bea0165c53d674474cc15a28d3579074fa9e36d9b804f0edc3df64c0894c22646a643b9d8765c27f0fecfbd2ea1f9c3d9c813705504", @ANYRES32=0x0, @ANYBLOB="00000000463000000400168008001b0000000000"], 0x2c}}, 0x0) 1.372912124s ago: executing program 1 (id=8715): r0 = socket$inet_tcp(0x2, 0x1, 0x0) socket$kcm(0x11, 0x3, 0x0) (async) r1 = socket$kcm(0x11, 0x3, 0x0) sendmsg$kcm(r1, &(0x7f0000000080)={&(0x7f0000000300)=@hci={0x1f, 0x5865, 0x31}, 0x80, &(0x7f0000002340)=[{&(0x7f00000000c0)="c2e512c476edbffe2d1000008100", 0xe}], 0x1}, 0x40000c0) setsockopt$IP_VS_SO_SET_ZERO(r0, 0x0, 0x48f, &(0x7f0000000000)={0x75, @local, 0x4e20, 0x0, 'lblcr\x00', 0x5, 0x0, 0x42}, 0x2c) 1.162944766s ago: executing program 3 (id=8716): r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0) socket(0x1d, 0x2, 0x6) (async) r1 = socket(0x1d, 0x2, 0x6) getsockname$packet(r1, 0x0, &(0x7f00000006c0)) (async) getsockname$packet(r1, 0x0, &(0x7f00000006c0)) r2 = socket$nl_generic(0x10, 0x3, 0x10) r3 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r3, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000000)=@newlink={0x40, 0x10, 0x401, 0x0, 0x0, {0x0, 0x0, 0x0, 0x0, 0x28b1b}, [@IFLA_LINKINFO={0x20, 0x12, 0x0, 0x1, @geneve={{0xb}, {0x10, 0x2, 0x0, 0x1, [@IFLA_GENEVE_PORT={0x6, 0x5, 0x4e1f}, @IFLA_GENEVE_COLLECT_METADATA={0x4}]}}}]}, 0x40}}, 0x0) (async) sendmsg$nl_route(r3, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000000)=@newlink={0x40, 0x10, 0x401, 0x0, 0x0, {0x0, 0x0, 0x0, 0x0, 0x28b1b}, [@IFLA_LINKINFO={0x20, 0x12, 0x0, 0x1, @geneve={{0xb}, {0x10, 0x2, 0x0, 0x1, [@IFLA_GENEVE_PORT={0x6, 0x5, 0x4e1f}, @IFLA_GENEVE_COLLECT_METADATA={0x4}]}}}]}, 0x40}}, 0x0) syz_genetlink_get_family_id$devlink(&(0x7f0000000900), r2) (async) r4 = syz_genetlink_get_family_id$devlink(&(0x7f0000000900), r2) sendmsg$DEVLINK_CMD_SB_POOL_GET(r2, &(0x7f0000000a00)={0x0, 0x0, &(0x7f00000009c0)={&(0x7f0000000940)={0x44, r4, 0x1, 0x70b92a, 0x25dfdbfb, {}, [{@nsim={{0xe}, {0xf, 0x2, {'netdevsim', 0x0}}}, {0xfffffffffffffe27, 0xb, 0x9}, {0x6, 0x11, 0x2}}]}, 0x44}, 0x1, 0x0, 0x0, 0x24000040}, 0x200c0850) r5 = socket$packet(0x11, 0x3, 0x300) socketpair(0x1, 0x100000005, 0x0, &(0x7f0000000000)={0xffffffffffffffff}) ioctl$SIOCSIFHWADDR(0xffffffffffffffff, 0x8b34, &(0x7f0000000000)={'wlan1\x00', @random="000500000020"}) getpeername$packet(r5, &(0x7f0000000000)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @dev}, &(0x7f0000000040)=0x14) (async) getpeername$packet(r5, &(0x7f0000000000)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @dev}, &(0x7f0000000040)=0x14) sendmmsg(r5, &(0x7f0000000440)=[{{&(0x7f0000000700)=@xdp={0x2c, 0x0, r7}, 0x80, &(0x7f00000004c0)=[{&(0x7f0000000180)='O', 0x36}], 0x1}}], 0x1, 0x0) sendmsg$DEVLINK_CMD_PORT_SPLIT(r1, &(0x7f00000004c0)={&(0x7f0000000380)={0x10, 0x0, 0x0, 0x40000000}, 0xc, &(0x7f0000000480)={&(0x7f0000000400)=ANY=[@ANYBLOB="a8d63dc1", @ANYRES16=r4, @ANYBLOB="040028bd7000ffdbdf25090000000e0001006e657464657673696d0000000f0002006e657464657673696d300000080003000100000008000900020000000e0001006e657464657673696d0000000f0002006e657464657673696d30000008000300000000000800090006000000"], 0x74}, 0x1, 0x0, 0x0, 0x40000}, 0x44880) socket$nl_route(0x10, 0x3, 0x0) (async) r8 = socket$nl_route(0x10, 0x3, 0x0) r9 = socket(0x1, 0x803, 0x0) getsockname$packet(r9, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f00000002c0)=0x14) sendmsg$nl_route(r8, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000180)=ANY=[@ANYBLOB="480000001000010400"/20, @ANYRES32=r10, @ANYBLOB="000000000000000028001280090001007665746800000000180002801400010000000000", @ANYRES64=r9], 0x48}}, 0x0) ioctl$ifreq_SIOCGIFINDEX_batadv_hard(0xffffffffffffffff, 0x8933, &(0x7f0000000300)={'batadv_slave_0\x00', 0x0}) sendto$packet(r9, &(0x7f00000002c0)="1018a8810ddc5017f5ec6335afbb1d6bdf190a7cc85365164668b1b1", 0x1c, 0x800, &(0x7f0000000340)={0x11, 0x9, r11, 0x1, 0xff, 0x6, @link_local={0x1, 0x80, 0xc2, 0x0, 0x0, 0x3}}, 0x14) (async) sendto$packet(r9, &(0x7f00000002c0)="1018a8810ddc5017f5ec6335afbb1d6bdf190a7cc85365164668b1b1", 0x1c, 0x800, &(0x7f0000000340)={0x11, 0x9, r11, 0x1, 0xff, 0x6, @link_local={0x1, 0x80, 0xc2, 0x0, 0x0, 0x3}}, 0x14) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x7101}) socket(0x400000000010, 0x3, 0x0) (async) socket(0x400000000010, 0x3, 0x0) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000140)={0x1e, 0x4, &(0x7f0000000000)=@framed={{}, [@ldst={0x1, 0x2, 0x6b324fb906924663, 0x2, 0x1, 0x3f}]}, &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x24}, 0x90) ioctl$sock_SIOCGIFINDEX(r6, 0x8933, &(0x7f0000000000)={'geneve0\x00'}) r12 = syz_init_net_socket$x25(0x9, 0x5, 0x0) ioctl$sock_inet_SIOCSIFBRDADDR(r12, 0x891a, 0x0) bpf$PROG_LOAD(0x5, &(0x7f00000017c0)={0x1, 0xe, &(0x7f0000001880)=ANY=[@ANYBLOB="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"], &(0x7f00000001c0)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0xb, 0x10, &(0x7f0000000000), 0xfffffffffffffd00}, 0x48) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x18, 0x3, &(0x7f0000000800)=ANY=[@ANYBLOB="18000000000000000000000009"], 0x0, 0x0, 0x0, 0x0, 0x41000}, 0x94) openat$6lowpan_enable(0xffffffffffffff9c, &(0x7f0000000200), 0x2, 0x0) (async) r13 = openat$6lowpan_enable(0xffffffffffffff9c, &(0x7f0000000200), 0x2, 0x0) readv(r13, &(0x7f00000003c0)=[{&(0x7f0000000240)=""/1, 0x1}], 0x1000000000000123) (async) readv(r13, &(0x7f00000003c0)=[{&(0x7f0000000240)=""/1, 0x1}], 0x1000000000000123) 1.160491281s ago: executing program 1 (id=8717): socket(0x10, 0x3, 0x0) (async) r0 = socket$nl_route(0x10, 0x3, 0x0) (async) r1 = socket(0x10, 0x803, 0x0) syz_genetlink_get_family_id$mptcp(&(0x7f00000000c0), r1) r2 = socket$inet_sctp(0x2, 0xf, 0x84) getsockopt$inet_sctp_SCTP_DEFAULT_PRINFO(r2, 0x84, 0x22, 0x0, 0x0) (async) syz_init_net_socket$nfc_llcp(0x27, 0x2, 0x1) (async) socket$netlink(0x10, 0x3, 0x0) (async) bpf$BPF_PROG_ATTACH(0x8, &(0x7f0000000540)=ANY=[@ANYRES32, @ANYRES32, @ANYBLOB="2000000002d9a200", @ANYRES32, @ANYBLOB, @ANYRES32, @ANYBLOB, @ANYRES64=0x0], 0x20) recvmsg(0xffffffffffffffff, 0x0, 0x0) (async) r3 = socket$inet6(0xa, 0x1, 0x0) (async) r4 = socket$key(0xf, 0x3, 0x2) sendmsg$key(r4, 0x0, 0x7613caaee1830164) (async) r5 = socket(0x11, 0x3, 0x1) ioctl$sock_inet_SIOCSIFADDR(r5, 0x8916, &(0x7f00000003c0)={'wlan1\x00', {0x2, 0x0, @empty=0xcf05fdfd}}) (async) setsockopt$inet6_IPV6_XFRM_POLICY(r3, 0x29, 0x23, &(0x7f0000000180)={{{@in=@private, @in6=@dev, 0x10, 0x80, 0x0, 0x0, 0x2}, {}, {}, 0x0, 0x0, 0x1}, {{@in=@local, 0x0, 0x6c}, 0x0, @in6=@loopback, 0x0, 0x0, 0x0, 0x4}}, 0xe8) r6 = socket(0x1e, 0x2, 0x0) setsockopt$TIPC_DEST_DROPPABLE(r6, 0x10f, 0x81, &(0x7f0000000480), 0x4) (async) sendmsg$tipc(r6, &(0x7f0000000200)={&(0x7f0000000000)=@nameseq={0x1e, 0x1, 0x0, {0x1, 0x0, 0x8}}, 0x10, &(0x7f0000000080)=[{&(0x7f0000000580)="0087", 0x2}], 0x1}, 0x0) (async) recvmmsg(r6, &(0x7f00000070c0)=[{{0x0, 0x0, &(0x7f0000000b00)=[{&(0x7f0000000a40)=""/188, 0xbc}], 0x1, &(0x7f0000000500)=""/87, 0x57}}], 0x1, 0x0, 0x0) (async) bpf$MAP_UPDATE_BATCH(0x1a, &(0x7f0000000000)={0x0, 0x0, 0x0, &(0x7f0000010040), 0x0, 0xffffffffffffffff, 0x4}, 0x38) (async) r7 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000940)='hugetlb.2MB.usage_in_bytes\x00', 0x26e1, 0x0) close(r7) socket$inet_sctp(0x2, 0x1, 0x84) (async) ioctl$SIOCSIFHWADDR(r7, 0x8b34, &(0x7f0000000000)={'wlan1\x00', @random="000500000020"}) (async) connect$inet6(r3, &(0x7f0000000000)={0xa, 0x0, 0x0, @ipv4={'\x00', '\xff\xff', @dev}}, 0x1c) (async) getsockname$packet(r1, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000440)=ANY=[@ANYBLOB="3c0000001000010400eeffff11feffffff000000", @ANYRES32=r8, @ANYBLOB="01000000010000001c0012000c000100627269646765"], 0x3c}}, 0x0) (async) r9 = socket(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r9, 0x8933, &(0x7f0000000080)={'ip6tnl0\x00'}) 1.160031067s ago: executing program 4 (id=8718): r0 = socket$netlink(0x10, 0x3, 0x0) (async) r1 = openat$tun(0xffffffffffffff9c, &(0x7f0000000340), 0x302, 0x0) ioctl$TUNSETIFF(r1, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x7101}) (async) r2 = socket(0x400000000010, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f0000000380)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r2, &(0x7f00000012c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000005c0)=@newqdisc={0x38, 0x24, 0x4ee4e6a52ff56541, 0x70bd2a, 0xffffffff, {0x0, 0x0, 0x0, r3, {0x0, 0xfff1}, {0xffff, 0xffff}}, [@qdisc_kind_options=@q_multiq={{0xb}, {0x8}}]}, 0x38}}, 0x0) (async) sendmsg$nl_route_sched(r2, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000180)={&(0x7f00000007c0)=@newtfilter={0x38, 0x2c, 0xd27, 0x70bd25, 0x40002, {0x0, 0x0, 0x0, r3, {0x0, 0x7}, {}, {0x8, 0x4}}, [@filter_kind_options=@f_u32={{0x8}, {0xc, 0x2, [@TCA_U32_HASH={0x8, 0x2, 0xfffffffe}]}}]}, 0x38}}, 0x40c4) (async) r4 = socket$nl_rdma(0x10, 0x3, 0x14) ioctl$sock_SIOCGPGRP(r0, 0x8904, &(0x7f0000001600)=0x0) (async) getsockopt$sock_cred(r0, 0x1, 0x11, &(0x7f0000001640), &(0x7f0000001680)=0xc) (async) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000540)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$F2FS_IOC_GARBAGE_COLLECT(r4, 0x4004f506, &(0x7f00000000c0)=0x1) (async) getsockopt$sock_cred(r7, 0x1, 0x11, &(0x7f0000000380)={0x0, 0x0, 0x0}, &(0x7f00000003c0)=0xc) r11 = syz_open_procfs$namespace(r8, &(0x7f0000001780)='ns/ipc\x00') (async) r12 = getpid() sendmmsg$unix(r7, &(0x7f0000001b00)=[{{0x0, 0x0, 0x0, 0x0, &(0x7f0000000400)=[@cred={{0x1c, 0x1, 0x2, {r8, 0x0, 0xee00}}}], 0x20, 0x4044014}}, {{0x0, 0x0, 0x0, 0x0, &(0x7f0000001bc0)=[@cred={{0x1c, 0x1, 0x2, {r8, 0x0, r10}}}, @cred={{0x1c, 0x1, 0x2, {r12, r9}}}, @rights={{0x18, 0x1, 0x1, [r11, 0xffffffffffffffff]}}], 0x58, 0x800}}], 0x2, 0x0) (async) getsockopt$sock_timeval(r6, 0x1, 0x15, &(0x7f0000000100), &(0x7f00000001c0)=0x10) (async) ioctl$sock_SIOCGPGRP(r0, 0x8904, &(0x7f00000016c0)=0x0) r14 = getuid() (async) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000540)={0xffffffffffffffff, 0xffffffffffffffff}) getsockopt$sock_cred(r15, 0x1, 0x11, &(0x7f0000000380)={0x0, 0x0, 0x0}, &(0x7f00000003c0)=0xc) r19 = syz_open_procfs$namespace(r16, &(0x7f0000001780)='ns/ipc\x00') (async) r20 = getpid() sendmmsg$unix(r15, &(0x7f0000001b00)=[{{0x0, 0x0, 0x0, 0x0, &(0x7f0000000400)=[@cred={{0x1c, 0x1, 0x2, {r16, 0x0, 0xee00}}}], 0x20, 0x4044014}}, {{0x0, 0x0, 0x0, 0x0, &(0x7f0000001bc0)=[@cred={{0x1c, 0x1, 0x2, {r16, 0x0, r18}}}, @cred={{0x1c, 0x1, 0x2, {r20, r17}}}, @rights={{0x18, 0x1, 0x1, [r19, 0xffffffffffffffff]}}], 0x58, 0x800}}], 0x2, 0x0) (async) sendmsg$netlink(r4, &(0x7f0000001780)={&(0x7f0000000080)=@proc={0x10, 0x0, 0x25dfdbfe, 0x40}, 0xc, &(0x7f00000020c0)=[{&(0x7f0000001440)=ANY=[@ANYBLOB="2c0100002f00040027bd7000fcdbdf2545004e800400cd80b3933b0f352021a0ee457b440db2aabeae841951c4c1cf8b0400a68056eb8dc802c9f804be66002c40d72e521d418a683c3267aa4808000000", @ANYRES32, @ANYBLOB="84d682e16a4477fb18497ee9fe29e29c25f415d559d36134d698ac8c7accc4d2151a9ccb6a2253c31428ee9e252d0c01c7f3bd1d63d887eee848e9a2d27e1577f6607dab30ffa67b3d5421119e2d8934028df1ce0af19880a4c5ed21cd3349d5b0178f3de7608ab95fdf64285d709d752753e2788ca9fcef8d2bf24493965194495d17e08e15b46e339b5fddc65335ee15a72cc1b8fb15639e62ea0ee34be4ddde205edfe3e4e137d443d30b2bf9983753f2dff832a8929db3229d5fc05415e3c3034ad900d30000"], 0x12c}, {&(0x7f0000002100)={0x50c, 0x15, 0x1, 0x70bd28, 0x25dfdbfd, "", [@generic="bf52a87e9587b6d3ed041824a7cc3488eedb804cdc731453b847ba5a0f50d9c7fb4ed1d89f6ed284415971e9a76e1462100d4abfaffaf8802fdc042bb63bd75158cc02493571baa042ae646a2feff52f708bded9e9a76d27828f77fb8af8919a6e02b6b40212e64b208f2ebc5d7c65aa219cceceb563746bc123ea10f7d684cd6ecff8c3647a889fd408bd1236b3", @nested={0xd6, 0xbe, 0x0, 0x1, [@typed={0x8, 0x120, 0x0, 0x0, @u32=0x2}, @nested={0x4, 0x146}, @generic="cbd3f8451cac0cafd28f427b06a94deff87182558e7ae6c7d7fc97ead33cc42e10abef1317eb076e4331c1ef37c827f17d6d32be900be30e71b54d130beacbd4bf0ec249b1b364d2805add95173ec36f0a9b7b576760481d4f8edd124961e29e2c674bb7f253064b7507326bdaa475dd4bbc06215b3b91b1f54d6b136307aa04ebeba17916a15912f1", @nested={0x4, 0x69}, @generic="638dab80dc931562582bd06fae9d8812828a6f597e3137e0c7200326697435e1bb3edc35868c36e47d2ac21ca7773a467b8e8dbdc2c3e48abc"]}, @generic="8351509140e5135f30e4aaf2971ce500d5d9f36f8fa8b44ab2d93864c251c759e1947414c0e5ca884cb8a8e95713eafefbe019ebc56eaa6f49d637224b78be323e7a3ff9a8405a0b4390ae79b2d062bab6d757654c23eacc4bc86e2aff391a065c7e9dbfd87b1f0718563ca5eca1cd1e6dd236435fcaf43fcda3c6ea23ad2534c097afb65d38fdf4f622a850416fbe2a728b42b586e1d0f241938b30ca1b6d5551145b6158cb35b6b3a4491d61d279b8b0b4f10aa0364369b5b4a1ae", @nested={0x49, 0x107, 0x0, 0x1, [@generic="f30473afae90a5134536c722e053ff711acb36462fe8935569bd9b7066f0a65aa44b337f67be8178c50fa8b68cad0d25fa0968be8434054fe64fa88c9bd77d71bedc0beb24"]}, @nested={0x15e, 0x3f, 0x0, 0x1, [@generic="275957024cd5f604497e4e68915cb8da5cc7dbbedbc0ea7c0376cb74e8dd6e97d9371713706763a602b6b994240ee3b4985a0d5c6f94b70be80ff16ba5d493e365b636c407157f19653826d9b8612c289cd6a96f78dcfc5cc78d29e31ba6b05a33123bc88b0f0acf63a260dd46bf86566e9ae269cad2406f693ff9d83ea641e51b19d397fd39113a623e4c70b40cb76fa4361fdd33595cbf588d234803fedda522b64f2062859bbe26a757b3422e358974b071cabacd328581ec2c2e7984b7747d4b29e70c738e5316b1be6648d3fd69", @generic="a086a970091078985b80ff1a297f3c6ddfdcb357c09e04f7c0702da50d54aa25ae1cf03f62991b1d4d208b7ccef2adf11effea2221802af9279f7ddc45a19707f58a5e578074a3fd7fa07124d8dd833150f4bc7b295838fd58abcc5a995af5df8f4eb6e2f134c0787c78aeca2b818e549018f3e6079d28f504cb", @typed={0xc, 0xff, 0x0, 0x0, @str='physdev\x00'}, @nested={0x4, 0x5a}]}, @typed={0x8, 0x2e, 0x0, 0x0, @u32=0x9}, @nested={0x119, 0x117, 0x0, 0x1, [@typed={0xc, 0x148, 0x0, 0x0, @u64=0xc1d1e2e}, @typed={0x8, 0x14e, 0x0, 0x0, @u32=0x400}, @nested={0x4, 0xbb}, @nested={0x4, 0x7b}, @generic="d65d7137dc46972c681d0331b4d774e73cfd5bd0daff388f5b9e968d2a2df2db74bc341930442e1886168135531334905b7d242777659ca69592f14bd0cd76a0c6881b99692871fc4313e917e1eb9f88a81324e90076882c87d7e32d4a9fbb746263b80b7a664096560128683feacd2135b763d06455c2799857b82223b9610e550e479b10f80cbfba0bfc41529716598db146ccefd9c61a9701716c324a8ef023f27d6960af56f72ea06e0caf5573bdde60f6e8f8987d76a76a5e78f189c9f6c03b723e3fd517d0ef2ab106cf510b3f7fc0ca573e1525dfad7ae05d6dc40336adc6b650f8c289c2433c181eb4fff88aab", @typed={0x8, 0x39, 0x0, 0x0, @pid=r13}]}, @typed={0x8, 0x3, 0x0, 0x0, @ipv4=@rand_addr=0x64010100}]}, 0x50c}], 0x2, &(0x7f0000001300)=ANY=[@ANYBLOB="1c000000000000000100000002000000", @ANYRES32=r5, @ANYBLOB="ff90141afef6a9ac5e4c38d0751d11b431544d1f817b96bb14c745ba772e732f4d6f664d3e18544e537fed2ec3435055aea60b979b4f5585f5eaa60693e9f7a89316a55b464064e820b55b9894dfb634539f7038a08f111b974fa3d715faee8f24967912e367238906e2abd508a3f6e0a22bc5ddff3d771f571ed4d88c11a61bc707904b5dd2d721b4b00a1fb6f00ca1b0a7f89c84a13c0cb2699fef8f874120284399836f459ab3d5829db732518f521097aba09cafedb463f862eca73258d6d36039306f23176d237d6448be8280b29603bbb6591876562a9062", @ANYRES32=r10, @ANYRESHEX=r6, @ANYRES64=r10, @ANYRES32=r0, @ANYRES32=r0, @ANYRES32=r0, @ANYRES32=r0, @ANYRES32=r0, @ANYBLOB="1c00000002000000", @ANYRES32=r13, @ANYRES32=r14, @ANYRES32=r18, @ANYBLOB='\x00\x00\x00\x00'], 0x68, 0x800}, 0x890) (async) r21 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$IP6T_SO_SET_REPLACE(r21, 0x29, 0x40, &(0x7f0000000b00)=@raw={'raw\x00', 0x8, 0x3, 0x338, 0x150, 0xffffffff, 0xffffffff, 0x0, 0xffffffff, 0x268, 0xffffffff, 0xffffffff, 0x268, 0xffffffff, 0x3, 0x0, {[{{@ipv6={@remote, @remote, [0xff, 0xff000000, 0x0, 0xffffff00], [0xff000000, 0xff, 0xff], 'wg2\x00', 'geneve1\x00', {}, {}, 0x29, 0x10, 0x0, 0x60}, 0x0, 0x110, 0x150, 0x60030000, {0x0, 0xff000000}, [@common=@unspec=@physdev={{0x68}, {'ipvlan0\x00', {0xff}, 'syz_tun\x00', {}, 0xc, 0x18}}]}, @common=@unspec=@RATEEST={0x40, 'RATEEST\x00', 0x0, {'syz1\x00', 0x5, 0x5, {0xd457}}}}, {{@uncond, 0x0, 0xd0, 0x118, 0x0, {}, [@inet=@rpfilter={{0x28}}]}, @common=@unspec=@LED={0x48, 'LED\x00', 0x0, {'syz0\x00', 0x1, 0x0, {0x3}}}}], {{'\x00', 0x0, 0xa8, 0xd0}, {0x28}}}}, 0x398) (async) sendmsg$nl_route(r0, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000047c0)=ANY=[@ANYBLOB="140000003a00010100000000000204000a"], 0x14}}, 0x0) (async) recvmmsg(r0, &(0x7f0000003700)=[{{0x0, 0x0, &(0x7f0000000000)=[{&(0x7f0000000280)=""/4085, 0xff5}], 0x1}}], 0x4000000000001a3, 0x140, 0x0) 1.115329809s ago: executing program 2 (id=8719): r0 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r0, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000001800)=ANY=[@ANYBLOB="180000002500010324bd7002ffdbdf25010000000400ae"], 0x18}, 0x1, 0x0, 0x0, 0x4008}, 0x0) recvmmsg(r0, &(0x7f0000003540)=[{{0x0, 0x0, 0x0}, 0x1f8}, {{0x0, 0x0, 0x0}, 0x5}, {{0x0, 0x0, 0x0}, 0x8}, {{0x0, 0x0, &(0x7f0000000a00)=[{&(0x7f0000001ac0)=""/121, 0x79}, {&(0x7f0000000ac0)=""/142, 0x8e}, {&(0x7f0000001c40)=""/4096, 0x1000}, {&(0x7f00000015c0)=""/165, 0xa5}, {&(0x7f0000000b80)=""/261, 0x105}, {&(0x7f0000002f80)=""/245, 0xf5}, {&(0x7f0000003180)=""/246, 0xf6}, {&(0x7f0000000980)=""/76, 0x4c}], 0x8}, 0x81}], 0x4, 0x40010132, 0x0) 936.931573ms ago: executing program 1 (id=8720): r0 = socket$inet6_sctp(0xa, 0x5, 0x84) (async) r1 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r1, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000100)=ANY=[@ANYBLOB="140000001000010000000000000000000500000a28000000000a030000000000000000000a00000708000240000000020900010073797a31000000002c000000030a010100000000000000000a0000070900010073797a31000000000900030073797a320000000014000000110001"], 0x7c}, 0x1, 0x0, 0x0, 0x4000}, 0x0) (async) sendmsg$NFT_BATCH(r1, &(0x7f0000009b40)={0x0, 0x0, &(0x7f0000009b00)={&(0x7f00000005c0)={{0x14, 0x10, 0x1, 0x0, 0x0, {0x5}}, [@NFT_MSG_DELTABLE={0x14, 0x2, 0xa, 0x201, 0x0, 0x0, {0xa, 0x0, 0xa}}, @NFT_MSG_NEWSETELEM={0x24, 0xc, 0xa, 0x101, 0x0, 0x0, {0xa, 0x0, 0x1}, [@NFTA_SET_ELEM_LIST_TABLE={0x9, 0x1, 'syz1\x00'}, @NFTA_SET_ELEM_LIST_ELEMENTS={0x4}]}], {0x14}}, 0x60}, 0x1, 0x0, 0x0, 0x4000850}, 0x40) (async) getsockopt$inet_sctp6_SCTP_GET_PEER_ADDRS(0xffffffffffffffff, 0x84, 0x6c, &(0x7f0000000100)={0x0, 0xa6, "2d6d778ed60b8b4bbe01afb95c2b7dea6cfcace38b5214a53fb7e95f5bdc66330dd76c63f295bb8a5d2c7967c21615a4cf0a15a89085d92b1058f2e6d41964eb72c91f7ba209ae9a9dc626b066e9ecdf9dbf34d5046603e5e315bc24759f688983ee0adc1cda624e0d217bd0290780e561201c11249fb657ff5cecbb046ff154609097c5aff1dc8357bf766a9940b129f5fbb37e300cf010724c688f58d85e7dda78fe4bbe38"}, &(0x7f00000001c0)=0xae) (async, rerun: 32) r3 = bpf$PROG_LOAD(0x5, &(0x7f000000e000)={0x10, 0x4, &(0x7f0000000040)=ANY=[@ANYBLOB="b4000000000000007910480000000000610400000000000095000080"], &(0x7f0000003ff6)='GPL\x00', 0x2, 0xfd90, &(0x7f000000cf3d)=""/195, 0x0, 0x0, '\x00', 0x0, @sk_msg}, 0x48) (rerun: 32) close(r3) r4 = socket$inet_udp(0x2, 0x2, 0x0) bind$inet(r4, &(0x7f00000001c0)={0x2, 0x0, @local}, 0x10) (async) connect$inet(r4, &(0x7f0000000480)={0x2, 0x4e22, @multicast1}, 0x10) (async, rerun: 64) sendmmsg(r4, &(0x7f0000007fc0), 0x800001d, 0x0) (async, rerun: 64) r5 = bpf$MAP_CREATE(0x0, &(0x7f0000000200)=ANY=[@ANYBLOB="0f000000040000000400000012"], 0x48) (async) r6 = bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000340)={0xe, 0x4, &(0x7f0000000400)=ANY=[@ANYBLOB="18020000801000000000000004000000850000002700000095"], &(0x7f0000000000)='syzkaller\x00', 0x0, 0x0, 0x0, 0x40f00}, 0x80) bpf$BPF_PROG_DETACH(0x8, &(0x7f0000000080)=ANY=[@ANYRES32=r5, @ANYRES32=r6, @ANYBLOB="0500"], 0x10) (async) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000cc0)={{r5}, &(0x7f0000000c40), &(0x7f0000000c80)=r3}, 0x20) (async) getsockopt$inet_sctp6_SCTP_PEER_AUTH_CHUNKS(r0, 0x84, 0x1a, &(0x7f0000000200)={r2, 0x69, "52ac7a3ce17715e46afbe7a9f7b5607585520827ed6ef8811152955f2f7c31b6a79636dbac27ac7d1fb2a49aebb5cbda2c738494f84eaee26b37f1f5378dabb34de76d719c67349585cf53933751d2281d5074d61bf6ee7576bcf30ed77f1952a9355a314c638fa0ab"}, &(0x7f0000000280)=0x71) r7 = socket$inet6(0xa, 0x80001, 0x0) (async) socket$inet(0x2, 0x5, 0x8000) (async) r8 = socket$can_j1939(0x1d, 0x2, 0x7) setsockopt$SO_RDS_TRANSPORT(r8, 0x114, 0x8, 0x0, 0x0) syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) socket$nl_route(0x10, 0x3, 0x0) r9 = socket$inet6(0xa, 0x1, 0x0) ioctl$XFS_IOC_PATH_TO_FSHANDLE(r7, 0xc0385868, &(0x7f0000000380)={0xffffffffffffffff, &(0x7f0000000040)=')\x00', 0x8800, &(0x7f00000002c0)={@_ha_fsid={[0x8, 0x1]}, {0x10, 0x24, 0x8001, 0x6}}, 0x10001, &(0x7f0000000300), &(0x7f0000000340)=0x101}) ioctl$sock_kcm_SIOCKCMCLONE(r10, 0x89e2, &(0x7f0000000440)={r0}) (async) sendmsg$inet6(r9, &(0x7f0000000600)={0x0, 0x0, 0x0, 0x0, &(0x7f0000000200)=ANY=[@ANYBLOB="1400000000000000010000000c"], 0x30}, 0x0) socket$inet_sctp(0x2, 0x1, 0x84) socket$nl_route(0x10, 0x3, 0x0) socket$inet6_tcp(0xa, 0x1, 0x0) socket$netlink(0x10, 0x3, 0x4) 905.388959ms ago: executing program 3 (id=8721): r0 = socket$netlink(0x10, 0x3, 0x13) setsockopt$netlink_NETLINK_NO_ENOBUFS(r0, 0x10e, 0x5, &(0x7f0000000000)=0x8, 0x4) r1 = socket$inet_udp(0x2, 0x2, 0x0) ioctl$sock_ipv6_tunnel_SIOCDEL6RD(r1, 0x89fa, &(0x7f0000000080)={'sit0\x00', &(0x7f0000000040)={@loopback, @dev={0xac, 0x14, 0x14, 0xb}, 0xd, 0x11}}) ioctl$F2FS_IOC_MOVE_RANGE(r1, 0xc020f509, &(0x7f00000000c0)={r0, 0x9, 0x7, 0x3}) setsockopt$inet_sctp6_SCTP_AUTH_CHUNK(r2, 0x84, 0x15, &(0x7f0000000100)={0x81}, 0x1) r3 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000180), r2) sendmsg$NL80211_CMD_CONTROL_PORT_FRAME(r2, &(0x7f0000000240)={&(0x7f0000000140)={0x10, 0x0, 0x0, 0x80000000}, 0xc, &(0x7f0000000200)={&(0x7f00000001c0)={0x28, r3, 0x100, 0x70bd2d, 0x25dfdbfd, {{}, {@val={0x8}, @void}}, [@NL80211_ATTR_CONTROL_PORT_NO_ENCRYPT={0x4}, @NL80211_ATTR_CONTROL_PORT_ETHERTYPE={0x6, 0x66, 0x6006}]}, 0x28}, 0x1, 0x0, 0x0, 0x20000005}, 0x48010) sendmsg$NL80211_CMD_GET_INTERFACE(r0, &(0x7f0000000340)={&(0x7f0000000280)={0x10, 0x0, 0x0, 0x20000000}, 0xc, &(0x7f0000000300)={&(0x7f00000002c0)={0x20, r3, 0x4, 0x70bd25, 0x25dfdbfc, {{}, {@void, @val={0xc, 0x99, {0x2, 0x6f}}}}, ["", "", "", "", ""]}, 0x20}, 0x1, 0x0, 0x0, 0x40000}, 0x4c800) ioctl$sock_SIOCGIFINDEX_80211(r1, 0x8933, &(0x7f0000000380)={'wlan0\x00', 0x0}) ioctl$FS_IOC_SETFLAGS(r2, 0x40086602, &(0x7f00000003c0)=0x1000) r5 = socket$inet_udp(0x2, 0x2, 0x0) r6 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_MSG_GETFLOWTABLE(r6, &(0x7f0000000680)={&(0x7f0000000400)={0x10, 0x0, 0x0, 0x400000}, 0xc, &(0x7f0000000640)={&(0x7f0000000440)={0x1f4, 0x17, 0xa, 0x5, 0x0, 0x0, {0x3, 0x0, 0x9}, [@NFTA_FLOWTABLE_NAME={0x9, 0x2, 'syz1\x00'}, @NFTA_FLOWTABLE_NAME={0x9, 0x2, 'syz2\x00'}, @NFTA_FLOWTABLE_HANDLE={0xc, 0x5, 0x1, 0x0, 0x1}, @NFTA_FLOWTABLE_NAME={0x9, 0x2, 'syz1\x00'}, @NFTA_FLOWTABLE_HOOK={0x1a4, 0x3, 0x0, 0x1, [@NFTA_FLOWTABLE_HOOK_DEVS={0xa4, 0x3, 0x0, 0x1, [{0x14, 0x1, 'syzkaller0\x00'}, {0x14, 0x1, 'gre0\x00'}, {0x14, 0x1, 'bond0\x00'}, {0x14, 0x1, 'veth0\x00'}, {0x14, 0x1, 'batadv0\x00'}, {0x14, 0x1, 'bridge_slave_0\x00'}, {0x14, 0x1, 'veth1_to_hsr\x00'}, {0x14, 0x1, 'pim6reg0\x00'}]}, @NFTA_FLOWTABLE_HOOK_DEVS={0x18, 0x3, 0x0, 0x1, [{0x14, 0x1, 'veth0_macvtap\x00'}]}, @NFTA_FLOWTABLE_HOOK_NUM={0x8}, @NFTA_FLOWTABLE_HOOK_PRIORITY={0x8, 0x2, 0x1, 0x0, 0x4}, @NFTA_FLOWTABLE_HOOK_PRIORITY={0x8, 0x2, 0x1, 0x0, 0xa}, @NFTA_FLOWTABLE_HOOK_PRIORITY={0x8, 0x2, 0x1, 0x0, 0x2}, @NFTA_FLOWTABLE_HOOK_DEVS={0x54, 0x3, 0x0, 0x1, [{0x14, 0x1, 'veth0_to_bridge\x00'}, {0x14, 0x1, 'macvlan0\x00'}, {0x14, 0x1, 'ip6gre0\x00'}, {0x14, 0x1, 'vxcan1\x00'}]}, @NFTA_FLOWTABLE_HOOK_PRIORITY={0x8, 0x2, 0x1, 0x0, 0x8}, @NFTA_FLOWTABLE_HOOK_DEVS={0x68, 0x3, 0x0, 0x1, [{0x14, 0x1, 'wg1\x00'}, {0x14, 0x1, 'netpci0\x00'}, {0x14, 0x1, 'macvlan1\x00'}, {0x14, 0x1, 'veth1_macvtap\x00'}, {0x14, 0x1, 'wg0\x00'}]}]}, @NFTA_FLOWTABLE_HANDLE={0xc, 0x5, 0x1, 0x0, 0x4}]}, 0x1f4}, 0x1, 0x0, 0x0, 0x4081}, 0x24000000) ioctl(r6, 0x80000001, &(0x7f00000006c0)="02962b50d829a671b56c556cab2f138c84ca28271a6ecd2d711dc96f17d5fea3ad9ff78325e59a56506a84b98a8685b88ba6539ba3ec5367b0ec4760c52fe4178ca95f470c87e4c9f9b8300901a5aab7beb6da8ad54eb0309cfcf7c59eabcdfbf644dc233d5604785bf88f6668ba21b040c4cce8fc9f221f6fe4667879ce44112de6f0837054293063feb18251b4ecf5383721d8aff18d75c59d876d2c8e6e34921466a777329c54e47472130c540fd241709ab1b4277b818743c62ef72bc8f20e4b2a56e795ff6fff81982cd1a8668d7938e22346060ad8b3d2a950b31011e1a06a7f48f421b16578f08c52622b68dbc53a816e5362") sendmsg$NL80211_CMD_SET_NOACK_MAP(r0, &(0x7f00000008c0)={&(0x7f00000007c0)={0x10, 0x0, 0x0, 0x40000000}, 0xc, &(0x7f0000000880)={&(0x7f0000000800)={0x68, r3, 0x2, 0x70bd27, 0x25dfdbfe, {{}, {@val={0x8, 0x3, r4}, @val={0xc, 0x99, {0xffffffff, 0x4}}}}, [@NL80211_ATTR_NOACK_MAP={0x6, 0x95, 0xdff}, @NL80211_ATTR_NOACK_MAP={0x6, 0x95, 0x1}, @NL80211_ATTR_NOACK_MAP={0x6, 0x95, 0xfffb}, @NL80211_ATTR_NOACK_MAP={0x6, 0x95, 0xb}, @NL80211_ATTR_NOACK_MAP={0x6}, @NL80211_ATTR_NOACK_MAP={0x6, 0x95, 0x7ff}, @NL80211_ATTR_NOACK_MAP={0x6, 0x95, 0x5}, @NL80211_ATTR_NOACK_MAP={0x6, 0x95, 0x1}]}, 0x68}}, 0x20000000) r7 = syz_genetlink_get_family_id$tipc(&(0x7f0000000940), r0) sendmsg$TIPC_CMD_GET_REMOTE_MNG(r0, &(0x7f0000000a00)={&(0x7f0000000900)={0x10, 0x0, 0x0, 0x2000}, 0xc, &(0x7f00000009c0)={&(0x7f0000000980)={0x1c, r7, 0x400, 0x70bd2b, 0x25dfdbfc, {}, ["", "", "", "", "", "", "", ""]}, 0x1c}, 0x1, 0x0, 0x0, 0x4040000}, 0x0) ioctl$XFS_IOC_FSINUMBERS(r5, 0xc0205867, &(0x7f0000000d00)={&(0x7f0000000a40)=0x1b, 0xc07, &(0x7f0000000a80)=[{}, {}, {}], &(0x7f0000000cc0)}) setsockopt$netlink_NETLINK_RX_RING(r6, 0x10e, 0x6, &(0x7f0000000d40)={0x1, 0x1000, 0xd7, 0x8000}, 0x10) ioctl$sock_SIOCGIFVLAN_ADD_VLAN_CMD(r6, 0x8982, &(0x7f0000000d80)={0x0, 'bridge0\x00', {0x1}, 0x5}) r8 = syz_genetlink_get_family_id$tipc(&(0x7f0000000e00), r0) sendmsg$TIPC_CMD_RESET_LINK_STATS(r2, &(0x7f0000000ec0)={&(0x7f0000000dc0)={0x10, 0x0, 0x0, 0x8000000}, 0xc, &(0x7f0000000e80)={&(0x7f0000000e40)={0x30, r8, 0x200, 0x70bd2a, 0x25dfdbfd, {{}, {}, {0x14, 0x14, 'broadcast-link\x00'}}}, 0x30}}, 0x4008840) socket$inet6_tcp(0xa, 0x1, 0x0) r9 = syz_genetlink_get_family_id$ipvs(&(0x7f0000000f40), r2) sendmsg$IPVS_CMD_ZERO(r2, &(0x7f00000010c0)={&(0x7f0000000f00)={0x10, 0x0, 0x0, 0x20000000}, 0xc, &(0x7f0000001080)={&(0x7f0000000f80)={0x100, r9, 0x100, 0x70bd28, 0x25dfdbfe, {}, [@IPVS_CMD_ATTR_DAEMON={0x14, 0x3, 0x0, 0x1, [@IPVS_DAEMON_ATTR_MCAST_GROUP={0x8, 0x5, @rand_addr=0x64010101}, @IPVS_DAEMON_ATTR_MCAST_PORT={0x6, 0x7, 0x4e24}]}, @IPVS_CMD_ATTR_TIMEOUT_UDP={0x8, 0x6, 0x401}, @IPVS_CMD_ATTR_TIMEOUT_TCP_FIN={0x8, 0x5, 0x7ff}, @IPVS_CMD_ATTR_DAEMON={0x50, 0x3, 0x0, 0x1, [@IPVS_DAEMON_ATTR_MCAST_GROUP={0x8, 0x5, @multicast1}, @IPVS_DAEMON_ATTR_MCAST_PORT={0x6, 0x7, 0x4e20}, @IPVS_DAEMON_ATTR_MCAST_TTL={0x5, 0x8, 0x9}, @IPVS_DAEMON_ATTR_MCAST_IFN={0x14, 0x2, 'macvtap0\x00'}, @IPVS_DAEMON_ATTR_STATE={0x8, 0x1, 0x1}, @IPVS_DAEMON_ATTR_STATE={0x8, 0x1, 0xb4aef7fa1cd890c3}, @IPVS_DAEMON_ATTR_SYNC_ID={0x8, 0x3, 0x3}, @IPVS_DAEMON_ATTR_MCAST_PORT={0x6, 0x7, 0x4e21}]}, @IPVS_CMD_ATTR_TIMEOUT_TCP_FIN={0x8, 0x5, 0x7ff}, @IPVS_CMD_ATTR_TIMEOUT_TCP_FIN={0x8, 0x5, 0x26d2bd35}, @IPVS_CMD_ATTR_DAEMON={0x30, 0x3, 0x0, 0x1, [@IPVS_DAEMON_ATTR_MCAST_IFN={0x14, 0x2, 'pim6reg\x00'}, @IPVS_DAEMON_ATTR_MCAST_TTL={0x5, 0x8, 0x7}, @IPVS_DAEMON_ATTR_STATE={0x8, 0x1, 0x1}, @IPVS_DAEMON_ATTR_STATE={0x8, 0x1, 0x2}]}, @IPVS_CMD_ATTR_DEST={0xc, 0x2, 0x0, 0x1, [@IPVS_DEST_ATTR_PORT={0x6, 0x2, 0x4e20}]}, @IPVS_CMD_ATTR_DEST={0x2c, 0x2, 0x0, 0x1, [@IPVS_DEST_ATTR_INACT_CONNS={0x8, 0x8, 0x2}, @IPVS_DEST_ATTR_L_THRESH={0x8, 0x6, 0x8001}, @IPVS_DEST_ATTR_INACT_CONNS={0x8, 0x8, 0x1}, @IPVS_DEST_ATTR_PERSIST_CONNS={0x8, 0x9, 0xfffffff9}, @IPVS_DEST_ATTR_U_THRESH={0x8, 0x5, 0x80000000}]}]}, 0x100}, 0x1, 0x0, 0x0, 0x40}, 0x4000) sendmsg$NFT_BATCH(r0, &(0x7f0000001240)={&(0x7f0000001100)={0x10, 0x0, 0x0, 0x4000000}, 0xc, &(0x7f0000001200)={&(0x7f0000001140)={{0x14, 0x10, 0x1, 0x0, 0x0, {0x3}}, [@NFT_MSG_DELRULE={0x60, 0x8, 0xa, 0x201, 0x0, 0x0, {0x3, 0x0, 0x6}, [@NFTA_RULE_COMPAT={0x1c, 0x5, 0x0, 0x1, [@NFTA_RULE_COMPAT_PROTO_IPV6={0x8, 0x1, 0x1, 0x0, 0x2b}, @NFTA_RULE_COMPAT_FLAGS={0x8, 0x2, 0x1, 0x0, 0x3}, @NFTA_RULE_COMPAT_FLAGS={0x8, 0x2, 0x1, 0x0, 0x2}]}, @NFTA_RULE_COMPAT={0x2c, 0x5, 0x0, 0x1, [@NFTA_RULE_COMPAT_PROTO_IPV4={0x8, 0x1, 0x1, 0x0, 0x8}, @NFTA_RULE_COMPAT_PROTO_IPV6={0x8, 0x1, 0x1, 0x0, 0x5c}, @NFTA_RULE_COMPAT_PROTO_IPV4={0x8, 0x1, 0x1, 0x0, 0x89}, @NFTA_RULE_COMPAT_PROTO_IPV4={0x8, 0x1, 0x1, 0x0, 0x73}, @NFTA_RULE_COMPAT_PROTO_IPV4={0x8, 0x1, 0x1, 0x0, 0x8}]}, @NFTA_RULE_COMPAT={0x4}]}], {0x14, 0x11, 0x1, 0x0, 0x0, {0x2}}}, 0x88}, 0x1, 0x0, 0x0, 0x8004}, 0x0) ioctl$sock_inet_SIOCSIFNETMASK(r6, 0x891c, &(0x7f0000001280)={'syz_tun\x00', {0x2, 0x4e23, @rand_addr=0x64010100}}) r10 = syz_genetlink_get_family_id$mptcp(&(0x7f0000001300), r2) sendmsg$MPTCP_PM_CMD_ADD_ADDR(r0, &(0x7f0000001580)={&(0x7f00000012c0)={0x10, 0x0, 0x0, 0x2}, 0xc, &(0x7f0000001540)={&(0x7f0000001440)={0x100, r10, 0x100, 0x70bd2a, 0x25dfdbfd, {}, [@MPTCP_PM_ATTR_LOC_ID={0x5, 0x5, 0x9}, @MPTCP_PM_ATTR_ADDR={0x40, 0x1, 0x0, 0x1, [@MPTCP_PM_ADDR_ATTR_PORT={0x6, 0x5, 0x4e23}, @MPTCP_PM_ADDR_ATTR_FLAGS={0x8}, @MPTCP_PM_ADDR_ATTR_ADDR6={0x14, 0x4, @private1}, @MPTCP_PM_ADDR_ATTR_FLAGS={0x8, 0x6, 0x2}, @MPTCP_PM_ADDR_ATTR_IF_IDX={0x8}, @MPTCP_PM_ADDR_ATTR_FLAGS={0x8, 0x6, 0x6}]}, @MPTCP_PM_ATTR_RCV_ADD_ADDRS={0x8, 0x2, 0x4}, @MPTCP_PM_ATTR_ADDR={0x60, 0x1, 0x0, 0x1, [@MPTCP_PM_ADDR_ATTR_ADDR6={0x14, 0x4, @loopback}, @MPTCP_PM_ADDR_ATTR_FAMILY={0x6, 0x1, 0x2}, @MPTCP_PM_ADDR_ATTR_ADDR6={0x14, 0x4, @mcast1}, @MPTCP_PM_ADDR_ATTR_FAMILY={0x6, 0x1, 0x2}, @MPTCP_PM_ADDR_ATTR_ADDR6={0x14, 0x4, @loopback}, @MPTCP_PM_ADDR_ATTR_ADDR4={0x8, 0x3, @remote}, @MPTCP_PM_ADDR_ATTR_FAMILY={0x6, 0x1, 0xa}]}, @MPTCP_PM_ATTR_LOC_ID={0x5, 0x5, 0x9}, @MPTCP_PM_ATTR_LOC_ID={0x5, 0x5, 0x8}, @MPTCP_PM_ATTR_ADDR_REMOTE={0x2c, 0x6, 0x0, 0x1, [@MPTCP_PM_ADDR_ATTR_IF_IDX={0x8}, @MPTCP_PM_ADDR_ATTR_ID={0x5, 0x2, 0xb}, @MPTCP_PM_ADDR_ATTR_PORT={0x6, 0x5, 0x4e24}, @MPTCP_PM_ADDR_ATTR_FLAGS={0x8, 0x6, 0x4}, @MPTCP_PM_ADDR_ATTR_FAMILY={0x6, 0x1, 0xa}]}]}, 0x100}, 0x1, 0x0, 0x0, 0x20004824}, 0x4000) 878.530129ms ago: executing program 2 (id=8722): r0 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000000)={'macvtap0\x00'}) r1 = socket$netlink(0x10, 0x3, 0x0) syz_emit_ethernet(0x4f, &(0x7f0000000100)=ANY=[@ANYBLOB="aaaaaaaaaaaa00000000000086dd6c2d01000019840100000000000000000002000000010102fe8000000000000000000000000000aaa5ba94e385673ccfd3fe184ab0643975bcc85fbf438632261b"], 0x0) r2 = socket$inet_sctp(0x2, 0x5, 0x84) getsockopt$inet_sctp_SCTP_PRIMARY_ADDR(r2, 0x84, 0x6, 0x0, &(0x7f00000002c0)) ioctl$BTRFS_IOC_START_SYNC(r1, 0x80089418, &(0x7f0000000040)) 762.819253ms ago: executing program 4 (id=8723): r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = socket$inet6_mptcp(0xa, 0x1, 0x106) setsockopt$sock_int(r1, 0x1, 0x22, 0x0, 0x0) socket$nl_xfrm(0x10, 0x3, 0x6) r2 = socket$igmp(0x2, 0x3, 0x2) setsockopt$EBT_SO_SET_ENTRIES(r2, 0x0, 0x80, &(0x7f0000000f80)=@broute={'broute\x00', 0x20, 0x6, 0x90, [0x2000000000, 0x0, 0x0, 0x0, 0x0, 0x2000000005c0], 0x0, 0x0, &(0x7f0000000000)=ANY=[@ANYBLOB="00000000000000000000000000000000000000000000000000000000000000000000000000000000ffffffff0000000000000000000000000000000000000000000000000002000000ffffffff0000000000000000000000000000000000000000000000000000000000000000000000000000000004000000ffffffff00"/144]}, 0x108) r3 = socket$nl_route(0x10, 0x3, 0x0) socketpair$nbd(0x1, 0x1, 0x0, &(0x7f00000004c0)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$sock_SIOCGIFINDEX(r4, 0x8933, &(0x7f0000000480)={'ip6_vti0\x00', 0x0}) sendmsg$nl_route(r3, &(0x7f0000001300)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000080)=ANY=[@ANYBLOB="340000001c0001fc28bd7000fcdbdf2507000000", @ANYRES32=r5, @ANYBLOB="8000260b0a0002000180c200000c00000c000e800500010003"], 0x34}, 0x1, 0x0, 0x0, 0x1}, 0x20040010) syz_emit_ethernet(0x36, &(0x7f0000000500)={@local, @multicast, @void, {@ipv4={0x800, @tcp={{0x5, 0x4, 0x0, 0x0, 0x28, 0x0, 0x0, 0x0, 0x2f, 0x0, @rand_addr=0x64010102, @local}, {{0x4001, 0x880b, 0x41424344, 0x41424344, 0x0, 0x6, 0x5}}}}}}, 0x0) r6 = socket$nl_generic(0x10, 0x3, 0x10) r7 = syz_genetlink_get_family_id$tipc2(&(0x7f0000000280), 0xffffffffffffffff) sendmsg$TIPC_NL_KEY_SET(r6, &(0x7f0000000500)={0x0, 0x0, &(0x7f00000004c0)={&(0x7f00000002c0)=ANY=[@ANYBLOB='\\\x00\x00\x00', @ANYRES16=r7, @ANYBLOB="010029bd7000fedbdf25170000004800068008000600000000003c0004"], 0x5c}, 0x1, 0x0, 0x0, 0x800}, 0x4040800) sendmsg$ETHTOOL_MSG_COALESCE_SET(r6, &(0x7f0000000640)={&(0x7f0000000540)={0x10, 0x0, 0x0, 0x800}, 0xc, &(0x7f0000000600)={&(0x7f0000000580)={0x5c, 0x0, 0x100, 0x70bd2d, 0x25dfdbfc, {}, [@ETHTOOL_A_COALESCE_USE_ADAPTIVE_RX={0x5, 0xb, 0x1}, @ETHTOOL_A_COALESCE_RX_USECS_HIGH={0x8, 0x13, 0x81}, @ETHTOOL_A_COALESCE_RX_MAX_FRAMES_IRQ={0x8, 0x5, 0x200}, @ETHTOOL_A_COALESCE_RX_MAX_FRAMES_LOW={0x8, 0xf, 0x10000}, @ETHTOOL_A_COALESCE_TX_USECS_LOW={0x8, 0x10, 0xc}, @ETHTOOL_A_COALESCE_RX_MAX_FRAMES_HIGH={0x8, 0x14, 0x3}, @ETHTOOL_A_COALESCE_TX_MAX_FRAMES_LOW={0x8, 0x11, 0xffffffff}, @ETHTOOL_A_COALESCE_RX_USECS={0x8, 0x2, 0x2e9}, @ETHTOOL_A_COALESCE_PKT_RATE_HIGH={0x8, 0x12, 0x8}]}, 0x5c}, 0x1, 0x0, 0x0, 0x2000041}, 0x8020) sendmsg$nl_route(r0, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000001c0)=@newlink={0x58, 0x10, 0x401, 0xfffffffe, 0x4, {0x0, 0x0, 0x0, 0x0, 0xe59bca127d83a47e, 0xc574450d1af335be}, [@IFLA_LINKINFO={0x24, 0x12, 0x0, 0x1, @bridge_slave={{0x11}, {0xc, 0x5, 0x0, 0x1, [@IFLA_BRPORT_COST={0x8, 0x3, 0x2}]}}}, @IFLA_IFNAME={0x14, 0x3, 'bridge_slave_0\x00'}]}, 0x58}, 0x1, 0x0, 0x0, 0x20044010}, 0x0) r8 = openat$tun(0xffffffffffffff9c, 0x0, 0x0, 0x0) r9 = socket$nl_generic(0x10, 0x3, 0x10) r10 = syz_genetlink_get_family_id$nl80211(&(0x7f00000002c0), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r1, 0x8933, &(0x7f0000000340)={'wlan0\x00', 0x0}) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000440)={0x11, 0x8, &(0x7f0000000380)=ANY=[@ANYBLOB="180800000000000000000000000000008710000003000000180000000000000000000000000000009400000000000000750a00000000000095"], &(0x7f0000000040)='GPL\x00'}, 0x90) sendmsg$NL80211_CMD_SET_WDS_PEER(r9, &(0x7f0000000440)={&(0x7f0000000240)={0x10, 0x0, 0x0, 0x10}, 0xc, &(0x7f0000000400)={&(0x7f0000000380)={0x58, r10, 0x200, 0x70bd2b, 0x25dfdbfc, {{}, {@val={0x8, 0x3, r11}, @void}}, [@NL80211_ATTR_MAC={0xa, 0x6, @from_mac=@broadcast}, @NL80211_ATTR_MAC={0xa, 0x6, @from_mac=@device_b}, @NL80211_ATTR_MAC={0xa, 0x6, @random="b989800388f9"}, @NL80211_ATTR_MAC={0xa, 0x6, @from_mac=@device_b}, @NL80211_ATTR_MAC={0xa}]}, 0x58}, 0x1, 0x0, 0x0, 0x4000080}, 0x4004) ioctl$TUNSETIFF(r8, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x2}) r12 = socket$nl_route(0x10, 0x3, 0x0) r13 = socket$unix(0x1, 0x1, 0x0) ioctl$sock_SIOCGIFINDEX(r13, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r12, &(0x7f00000008c0)={0x0, 0x0, &(0x7f0000000900)={&(0x7f0000000140)=@newqdisc={0x44, 0x24, 0x4ee4e6a52ff56541, 0x70bd26, 0xffffffff, {0x0, 0x0, 0x0, r14, {0x0, 0xfff1}, {0xffff}, {0xe}}, [@qdisc_kind_options=@q_hfsc={{0x9}, {0x14, 0x2, @TCA_HFSC_FSC={0x10, 0x2, {0x5, 0x7, 0xb3}}}}]}, 0x44}, 0x1, 0x0, 0x0, 0x4000000}, 0x0) sendmsg$nl_route_sched(r12, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000300)=@newqdisc={0x24, 0x28, 0x4ee4e6a52ff56541, 0x4001, 0xffffbddc, {0x0, 0x0, 0x0, r14, {0x10}, {}, {0xe, 0x1}}}, 0x24}, 0x1, 0x0, 0x0, 0x4040098}, 0x4000) r15 = socket$alg(0x26, 0x5, 0x0) setsockopt$ALG_SET_KEY(r15, 0x117, 0x1, &(0x7f00000000c0)="1c4325501fe7f3a237a97fe1e34d08526701ddd86d98398fd8d35b54a5032d85b66ab161fd66ea86cbd0a9", 0x2b) 762.040625ms ago: executing program 1 (id=8724): r0 = socket$inet(0xa, 0x801, 0x84) connect$inet(r0, &(0x7f0000004cc0)={0x2, 0x0, @remote={0xac, 0x14, 0xffffffffffffffff}}, 0x10) listen(r0, 0x8) r1 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) sendmsg$IEEE802154_LLSEC_DEL_SECLEVEL(r1, &(0x7f00000004c0)={0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x24000000}, 0x800) r2 = socket$inet6(0xa, 0x80002, 0x0) connect$inet6(r2, &(0x7f0000000040)={0xa, 0x4e20, 0xfffffffc, @dev={0xfe, 0x80, '\x00', 0x2d}, 0xb}, 0x1c) setsockopt$sock_linger(r2, 0x1, 0x3c, &(0x7f0000000100)={0x200000000000001}, 0x8) sendmmsg$inet6(r2, &(0x7f0000003cc0)=[{{0x0, 0x0, &(0x7f0000003980), 0x171}}], 0x400000000000172, 0x4000000) sendmsg$inet(r2, 0x0, 0x8000) r3 = accept4(r0, 0x0, 0x0, 0x0) getsockopt$inet_sctp6_SCTP_RTOINFO(r3, 0x84, 0x0, &(0x7f00000000c0)={0x0, 0x1, 0x7a3d5a10, 0x80}, &(0x7f0000000100)=0x10) getsockopt$inet_sctp_SCTP_LOCAL_AUTH_CHUNKS(r3, 0x84, 0x1b, &(0x7f0000000300)={0x0, 0x93, "47240fa644c9176269f8a608824034ff4a1b7bd273da151f24c6a13ad1345f0ec109d5e1a6f40c56590ae360da13929b1d0049280cde12e3812179bf02dac3ee348a84115e5970e2e7e740dd992c797214a89bf0573168bf95cf018d3478206b6ea94fc118f3b405f0f4becaa023a8bb7955f14fcf69c9f0f2e0c8f36382e0ab5415f0cc25db2880d3ebd5b4ec45c6d01bd510"}, &(0x7f00000003c0)=0x9b) getsockopt$inet_sctp_SCTP_STATUS(r0, 0x84, 0xe, &(0x7f0000000400)={r4, 0x6, 0x4, 0x8, 0xfffa, 0x5, 0x0, 0x2e560bcf, {r5, @in6={{0xa, 0x4e22, 0x8, @private2, 0x3}}, 0x6, 0x782258f, 0x9, 0x5, 0x8}}, &(0x7f00000004c0)=0xb0) sendto$inet(r3, &(0x7f00000002c0)="cc", 0x1, 0x0, 0x0, 0x0) setsockopt$inet_sctp6_SCTP_DEFAULT_SNDINFO(r3, 0x84, 0x22, &(0x7f0000000000)={0x6, 0x0, 0x6, 0x691}, 0x10) ioctl$HCIINQUIRY(r3, 0x800448f0, &(0x7f0000000240)={0xffffffffffffffff, 0x2, "34cd11", 0x7, 0x8}) sendto$inet6(r3, &(0x7f0000000200)='x', 0x1, 0x4000000, 0x0, 0x0) setsockopt$inet_sctp6_SCTP_STREAM_SCHEDULER(r3, 0x84, 0x7b, &(0x7f0000000140)={0x0, 0x1}, 0x8) setsockopt$inet_sctp6_SCTP_STREAM_SCHEDULER(r3, 0x84, 0x7b, &(0x7f00000006c0)={0x0, 0x2}, 0x8) r6 = socket(0x11, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r6, 0x8933, &(0x7f0000000040)={'bridge_slave_1\x00', 0x0}) bind$packet(r6, &(0x7f0000000080)={0x11, 0x0, r7, 0x1, 0x0, 0x6, @link_local}, 0x14) r8 = socket$kcm(0x10, 0x2, 0x0) sendmsg$kcm(r8, &(0x7f0000000600)={0x0, 0x0, &(0x7f0000000080)=[{&(0x7f0000000180)="2e00000010008188040f80ec59acbc0413a1f8481f0000005e140604000000000e000a000f00000002800000121fc0e6221b4b31cfac060d9ab3d15cf8ce70b486ff82c97ef347441eca61722c546858ea17ef7d114457670456d61a", 0x5c}], 0x1}, 0x20000801) 714.484293ms ago: executing program 2 (id=8725): socket$nl_generic(0x10, 0x3, 0x10) r0 = socket$inet6_mptcp(0xa, 0x1, 0x106) connect$inet6(r0, &(0x7f0000000180)={0xa, 0x0, 0x2, @dev={0xfe, 0x80, '\x00', 0x13}, 0x7}, 0x1c) r1 = bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000340)=ANY=[@ANYBLOB="0200000004000000080000000100000080"], 0x48) bpf$BPF_MAP_CONST_STR_FREEZE(0x16, &(0x7f0000000140)={r1}, 0x4) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000240)={0xffffffffffffffff, 0x0, 0x21, 0x0, &(0x7f0000000600)="3d25ff005b19c4cbe601709b080041fe7a8a047963817ba0af112187b35b1bf322", 0x0, 0xda, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x50) socket$inet_tcp(0x2, 0x1, 0x0) r2 = openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0) ioctl$TUNSETIFF(r2, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x7101}) r3 = openat$tun(0xffffffffffffff9c, &(0x7f0000000400), 0x0, 0x0) close(r3) r4 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r4, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r4, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000580)={&(0x7f0000000600)=@newqdisc={0x4c, 0x24, 0x4ee4e6a52ff56541, 0x1, 0x25dfdbfd, {0x0, 0x0, 0x0, r5, {0x0, 0xb}, {0xffff, 0xffff}, {0xfff2}}, [@qdisc_kind_options=@q_netem={{0xa}, {0x1c, 0x2, {{0x3, 0x1, 0x6361, 0x5, 0xffffffff, 0x3}}}}]}, 0x4c}, 0x1, 0x0, 0x0, 0x40088c1}, 0x0) ioctl$SIOCSIFHWADDR(r3, 0x8914, &(0x7f0000002280)={'syzkaller0\x00', @multicast}) r6 = socket$unix(0x1, 0x1, 0x0) ioctl$sock_SIOCGIFINDEX(r6, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) r8 = socket(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r8, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000300)=@newqdisc={0x88, 0x24, 0xf0b, 0x70bd26, 0x0, {0x0, 0x0, 0x0, r7, {0x0, 0xffff}, {0xffff, 0xffff}}, [@qdisc_kind_options=@q_mqprio={{0xb}, {0x58, 0x2, {{0x1, [], 0x0, [0x1, 0x2, 0xfffe, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5c4, 0x8000, 0x0, 0x0, 0x3dc], [0x0, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1000]}}}}]}, 0x88}}, 0x20000000) r9 = socket(0x400000000010, 0x3, 0x0) r10 = socket$unix(0x1, 0x5, 0x0) ioctl$sock_SIOCGIFINDEX(r10, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r9, &(0x7f00000012c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000003c0)=@newqdisc={0x2c, 0x24, 0x4ee4e6a52ff56541, 0x70bd2a, 0xffffffff, {0x0, 0x0, 0x0, r11, {0x0, 0xfff1}, {0x3, 0xffff}, {0x0, 0xfff3}}, [@qdisc_kind_options=@q_qfg={0x8}]}, 0x2c}, 0x1, 0x0, 0x0, 0x40001}, 0x4000000) r12 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_CREATE(r12, &(0x7f0000000000)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000400)=ANY=[@ANYBLOB="58000000020601030000000000000000000000000900020073797a3100000000050004000000000011000300686173683a6e65742c6e6574000000000c0007800800134000020000050005000a00000005000100060000000f9233b3ac7058a9ffd07eb83a44"], 0x58}}, 0x0) r13 = socket$nl_netfilter(0x10, 0x3, 0xc) socket$nl_route(0x10, 0x3, 0x0) sendmsg$IPSET_CMD_TEST(r13, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000000140)={&(0x7f00000000c0)=ANY=[@ANYBLOB="640000000906010800000000000000000600000505000100070000003c0007801800148014000240fc0000000000000000000000000000011800018014000240ff01000000000000000000000000000105000300070000000900020073797a31"], 0x64}}, 0x4800) r14 = socket(0xa, 0x3, 0x4) sendmmsg$unix(r14, &(0x7f0000001340)=[{{&(0x7f0000000440)=@abs, 0x6e, 0x0, 0x0, &(0x7f0000000b80)=[@rights={{0x10, 0x1, 0x41}}], 0x10}}], 0x1, 0x0) 658.929618ms ago: executing program 5 (id=8726): bpf$PROG_LOAD(0x5, &(0x7f00000017c0)={0x1, 0xe, &(0x7f0000000dc0)=ANY=[@ANYBLOB="b7000000a5517f5fbfa30000000000000703000028feffff720af0fff8ffffff71a4f0ff00000000b7060000000000012e400300000000006506020001cd000071187c0000000000c3640000f10000007b0a00fe00000000850000002e00000079a00000000000009500000000000000023bc065b7a379d179fc9e94af69912435f1b6a693172e6191a12bebf9f9804ea033388cd15b65877ad4b200000000000000000beca090f32050e436fe275daf51efd601b6bf01c8e8b1abe4fef3bef7074815ae98743d1ace4c46631256dd19aed0d600c0b6199fe3ff3128e599b0eaebbdbd7359a48f5b0afc3996792043a6787bac46aa7aa400000000000069669622208266f896ba2c9e73c2efeec2dc565fbafb2cb63f5fef9ab79ff8abaa8a08f54a062107e9bb3e980fff675c8d3e91df6648a7a6aebcb63e0867b75690152af27711f0cbb9c06018d21bf3f87b8eb65323b4267a526d53442db8e48dbc5ce47d67d07441a7975d5e41b14fd0154a8246249952a8b61633ce068220defe09d3b1136af6d03e9cf996c13d1bfcdc54567a9ca80dec2e943fe4ae7c617cc071f7add70cfbd48f8f6b50fe6a8297d88efa73e7e601040000b4a685969f28902bdecf66ef39755de79ed2c711477febc96231a53984d00877301d0ec62427a8e38618fdd1ce9aaed569ebc5f2e58d6028e66139a737cc7146a131d47dcebb32ed67021d76e983223c998aec22242ae54e87f438d26982876b58f9134366952f7399a733f07138a736924f3709000000e97f0c117ec439c6b7b965752bbc06eced08d97a32ae4b1ad4d11c5b6f68ee841975233e4cea13f3ef04b2cab9cc256d4539dbafd888c7097c1169e0bebcc81ca3da40bf34b6c9c1da2d6ed8acaf2a8091820ff4cf6be74ddca8bf2eed0e11b2139e8c3ec95436af5269d5792decda7d8b5dcf8640b504ba23c6d0a7f67cdfd27328100ebf9319a56f0f9cee17deecf747f3493f1dc39551f4c9a40b3e93fa80b8234ccbf39a9ef09bd97321f0dc20956f44ba2c5ec2e7569b05cf4690ddc189f174046a8b214acf23f42fb51ed4819e6b4cb5a8bf2b559d0c198fe0315483b8beb9801d06c58b22dd713fe3b7ef18e21081aacfd091b754125a488cea18255f79bebcb3051f622f8a1d9af1908e88a58774a24f35a4ccdbedea6212286c23dd89c2b4b90647f17231472af8dda7f3ab20f093aad3ce875f7458039ee6d0a50deb7bc8eb393f056a5e7725531c5485278e0362338e2e2710fe00465e0d182a322091022cf5b814eeb9b3cab21196581e4d92d0b6fe5525285eea359274f1f21d69233bbe94941f10ba292100000000000000000000000000000000c18e93a0c5231779f2ee201e9fe7e63e84b57b5f05ecd278919bad330ffcb594b8255b3085b352ca9533d6c31c1a30158c30352f8a126a65cb6582e58aa641007418611df53a601c3a8fb8d2286e86abf98136f345446730f68f5d6d1817a9e1b09e5650d2599fbe719a45337d29eb3fef5f7f565457660dec6fe903a1c2ea4f40a8ea1c179892afa219fc69a44163f0d731de418e9fd82a8c4661caea674b19242d1840d047882f640ea248457288c5ffb63e857da03ff5c0475c3cfff41c4806f1dc750eb1c45ec3a2a0b064834010604d6f88a29e8e9bda2bc9c18d1b53a08f25d62ccaa46bc0235c830a7b3fe64bc6031b431bcad6b698a1ba6027870ea9e55fafbbf140c5f82a33ee4ac793b989c12a5827a7957f4d8136cf918b7cbf5bc5fc64c8001992536584586edded6f65bdd371ac84fd5cc60ab79b84e9e85a1c54d5666a5d133e95eff121621dff14b9de7a188b8c5387f9da63c2cce405bc44079e34e2db2b275bfbb54841d647338cad74be91144b780cf381a6860f641446ef73bd11d45f5e4df8f3c6440d8425fd7382225cf8c2cada01bf3cd5cbc6a403173e0c89a491c75efc3c21b7825a521c6011945eef94abc3000000000000000000000000000000d71b794e9b4c145caf050429937eef4364d9e1cbe9150bccd9b2e73757f1f5e8ac50736cd3cbc029ede2869642841371bb4b9c1aaa8826889a909e6716b60e4b568b6761f8ccc7d35b0e66357746b10fc481b47e67f1e14408c1ef3e018a5e647e3f607654f3bf82bcfb42be038a272d82f8362944f608b3810000000019fda0b1b607f1ab34194ed954973f7a5accc0938d3364ab07574d0b32fc30f3ab73d012b63ee905e98ab6989ec2c840cd216eb18fedfb3b204e94e170bae930660368d3799c9b1bf7556ac57164966791626f06ad2e332341965f72141ec140b80efd7720ccdaa890b79bc4523386bd66553121543c9a35b7adcf2f6b257fefef1d6e1da2ee94d3f822bf45aad21e5b5a3788ab584090664065af39b0f43968dcd7c5f8e5a8dc6298691423fbf7e8e012260bc62f9422434a547ef7ca37953d435098d9b71edd1a03e46d0ade465d0c0db0a51f9e29cac05e5a04f94e"], &(0x7f00000001c0)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0x8, 0x10, &(0x7f0000000000)={0x0, 0xa, 0x0, 0x8000}, 0x10}, 0x94) r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='memory.events\x00', 0x275a, 0x0) mmap(&(0x7f0000002000/0x3000)=nil, 0x3000, 0x0, 0x12, r0, 0x0) r1 = socket$nl_generic(0x10, 0x3, 0x10) r2 = syz_genetlink_get_family_id$mptcp(&(0x7f00000002c0), 0xffffffffffffffff) sendmsg$MPTCP_PM_CMD_ADD_ADDR(r1, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000440)={&(0x7f0000000040)={0x20, r2, 0x1, 0x0, 0x0, {0x7}, [@MPTCP_PM_ATTR_ADDR={0xc, 0x1, 0x0, 0x1, [@MPTCP_PM_ADDR_ATTR_IF_IDX={0x8}]}]}, 0x20}}, 0x880) r3 = socket$nl_route(0x10, 0x3, 0x0) r4 = socket(0x1, 0x803, 0x0) getsockname$packet(r4, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f00000002c0)=0x14) sendmsg$nl_route(r3, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000680)=ANY=[@ANYBLOB="440000001000090600000000fedbdf2500000000", @ANYRES32=0x0, @ANYBLOB="a7ffa888000000001c00128009000100766c616e000000000c000280060001000100000008000500", @ANYRES32=r5], 0x44}}, 0x0) sendmsg$MPTCP_PM_CMD_SET_LIMITS(r0, &(0x7f0000000140)={&(0x7f0000000040), 0xc, &(0x7f0000000100)={&(0x7f0000000080)={0x54, r2, 0x8, 0x70bd2d, 0x25dfdbfe, {}, [@MPTCP_PM_ATTR_ADDR_REMOTE={0x4}, @MPTCP_PM_ATTR_ADDR_REMOTE={0x28, 0x6, 0x0, 0x1, [@MPTCP_PM_ADDR_ATTR_ADDR6={0x14, 0x4, @local}, @MPTCP_PM_ADDR_ATTR_FAMILY={0x6, 0x1, 0xa}, @MPTCP_PM_ADDR_ATTR_PORT={0x6, 0x5, 0x4e22}]}, @MPTCP_PM_ATTR_ADDR_REMOTE={0xc, 0x6, 0x0, 0x1, [@MPTCP_PM_ADDR_ATTR_IF_IDX={0x8, 0x7, r5}]}, @MPTCP_PM_ATTR_LOC_ID={0x5, 0x5, 0x8}]}, 0x54}, 0x1, 0x0, 0x0, 0x800}, 0x20000080) 498.424623ms ago: executing program 1 (id=8727): bpf$MAP_CREATE(0x0, &(0x7f0000000640)=@base={0x1e, 0x0, 0x5, 0xff}, 0x48) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0xd, 0x4, &(0x7f0000000000)=ANY=[@ANYBLOB="180000000000000000000000000000007919b800000000009500000000000000"], &(0x7f0000000080)='syzkaller\x00', 0x4, 0x98, &(0x7f00000000c0)=""/152, 0x41100}, 0x94) 466.312812ms ago: executing program 1 (id=8728): bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000380)={0x6, 0x3, &(0x7f0000000680)=ANY=[@ANYBLOB="1800000002000000000000000000000095"], 0x0}, 0x94) syz_emit_ethernet(0x36, &(0x7f0000000200)={@dev={'\xaa\xaa\xaa\xaa\xaa', 0x1c}, @link_local, @val={@void, {0x8100, 0x2, 0x0, 0x4}}, {@ipv4={0x800, @udp={{0x5, 0x4, 0x0, 0x0, 0x24, 0x0, 0x0, 0x0, 0x11, 0x0, @empty, @empty}, {0x0, 0x4e20, 0x10, 0x0, @gue={{0x2, 0x0, 0x2, 0x9c, 0x0, @val=0x80}}}}}}}, 0x0) r0 = socket$inet_udp(0x2, 0x2, 0x0) r1 = bpf$MAP_CREATE(0x0, &(0x7f0000000300)=ANY=[@ANYBLOB="0f000000040000000400000012"], 0x50) r2 = syz_init_net_socket$rose(0xb, 0x5, 0x0) getsockname$packet(r2, 0x0, &(0x7f00000006c0)) r3 = bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000340)={0xe, 0x5, &(0x7f00000000c0)=ANY=[@ANYBLOB="18020000000000000000000000000000180000000100000000070000009500000000228150000000"], &(0x7f0000000000)='GPL\x00'}, 0x94) bpf$BPF_PROG_DETACH(0x8, &(0x7f0000000280)=ANY=[@ANYRES32=r1, @ANYRES32=r3, @ANYBLOB="05"], 0x10) bpf$MAP_UPDATE_ELEM(0x2, &(0x7f0000000440)={r1, &(0x7f0000000440), &(0x7f0000000740)=@buf="660f3696cc3a3862278f5c14d16ea80cf5ca463049f9951bd2aa805598f2ff6ef7af5a172feaf6f4fb46ac54f7ce86ff77d9b946097eff5b326d90309bc01c5318f126a861103a57fe6517f1c8511d75c1376eee2c03e7910ca9ad32cde3a423b6e29ef1f08579d71c95e66e5a074b0f3f93d213402c0e5a6015"}, 0x20) bind$inet(r0, &(0x7f0000000040)={0x2, 0x4e20, @empty}, 0x21) socketpair$unix(0x1, 0x1, 0x0, &(0x7f00000004c0)={0xffffffffffffffff, 0xffffffffffffffff}) r6 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000040)='memory.swap.events\x00', 0x275a, 0x0) setsockopt$sock_attach_bpf(r4, 0x1, 0x2a, &(0x7f0000000100)=r6, 0x4) sendmsg$unix(r5, &(0x7f00000005c0)={0x0, 0x0, &(0x7f0000000140)=[{&(0x7f0000000200)="c3ff", 0x2}], 0x1, 0x0, 0x0, 0x40000}, 0x20004011) recvmsg$unix(r4, &(0x7f0000000540)={0x0, 0x0, 0x0}, 0x300) r7 = bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000480)={0x6, 0x3, &(0x7f0000000680)=ANY=[], &(0x7f00000002c0)='syzkaller\x00', 0x7}, 0x94) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000600)={r7, 0x5, 0x18, 0x0, &(0x7f0000000580)="af7700252998511e6963d6df1ce6e505ea98f330082655ed", 0x0, 0xd01, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x50) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000600)={0x10, 0x3, &(0x7f0000000000)=ANY=[@ANYBLOB='b\n'], 0x0, 0x0, 0x0, 0x0, 0x0, 0x8}, 0x94) r8 = socket$inet(0x2, 0x3, 0x33) r9 = socket$nl_generic(0x10, 0x3, 0x10) r10 = syz_genetlink_get_family_id$devlink(&(0x7f0000002b40), 0xffffffffffffffff) sendmsg$DEVLINK_CMD_SB_TC_POOL_BIND_GET(r9, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000200)=ANY=[@ANYBLOB='T\x00\x00\x00', @ANYRES16=r10, @ANYBLOB="01000000000200000000060000000e0001006e657464657673696d0008000f0002006e657464657673696d3000000800030000000000080091000000000006001600020000000500120000000000"], 0x54}}, 0x0) ioctl$sock_FIOGETOWN(r0, 0x8903, &(0x7f0000000540)) getsockopt$inet_mreqsrc(r8, 0x0, 0x53, &(0x7f0000000000)={@dev, @local, @broadcast}, &(0x7f0000000040)=0x28) recvmmsg(r0, &(0x7f0000003280)=[{{0x0, 0xfe93, &(0x7f00000006c0)=[{&(0x7f0000000100)=""/205, 0xcd}], 0x1}, 0x9}], 0x1, 0x7, 0x0) socketpair$tipc(0x1e, 0x5, 0x0, &(0x7f0000000000)={0xffffffffffffffff}) setsockopt$TIPC_SRC_DROPPABLE(r11, 0x10f, 0x80, &(0x7f0000001540)=0x5, 0x4) r12 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r12, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000080)=@newlink={0x40, 0x10, 0x801, 0xfffffffd, 0x0, {0x0, 0x0, 0x0, 0x0, 0x0, 0x20}, [@IFLA_GROUP={0x8}, @IFLA_AF_SPEC={0x18, 0x1a, 0x0, 0x1, [@AF_INET={0x8, 0x2, 0x0, 0x1, {0x4}}, @AF_INET6={0xc, 0xa, 0x0, 0x1, [@IFLA_INET6_ADDR_GEN_MODE={0x5, 0x8, 0x3}]}]}]}, 0x40}}, 0x0) openat$nci(0xffffffffffffff9c, &(0x7f0000000240), 0x2, 0x0) 362.692386ms ago: executing program 3 (id=8729): r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x7101}) r1 = socket$unix(0x1, 0x5, 0x0) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) r3 = socket(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r3, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000300)=@newqdisc={0x88, 0x24, 0xf0b, 0x70bd26, 0x0, {0x0, 0x0, 0x0, r2, {0x0, 0xffff}, {0xffff, 0xffff}}, [@qdisc_kind_options=@q_mqprio={{0xb}, {0x58, 0x2, {{0x1, [], 0x0, [0x1, 0x2, 0xfffe, 0x0, 0x0, 0x0, 0x0, 0x8, 0x0, 0x5c4, 0x8000, 0x0, 0x0, 0x3dc], [0x0, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1000]}}}}]}, 0x88}}, 0x20000000) r4 = socket(0x400000000010, 0x3, 0x0) sendmsg$nl_route_sched(r4, &(0x7f00000012c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000280)=@newqdisc={0x64, 0x24, 0x4ee4e6a52ff56541, 0x70bd29, 0xfffbffff, {0x0, 0x0, 0x0, r2, {0x0, 0x8}, {0xffff, 0xffff}, {0xc, 0xfff3}}, [@qdisc_kind_options=@q_taprio={{0xb}, {0x34, 0x2, [@TCA_TAPRIO_ATTR_SCHED_ENTRY_LIST={0x10, 0x2, 0x0, 0x1, [{0xc, 0x1, 0x0, 0x1, [@TCA_TAPRIO_SCHED_ENTRY_INTERVAL={0x8, 0x4, 0x8001}]}]}, @TCA_TAPRIO_ATTR_SCHED_CYCLE_TIME={0xc, 0x8, 0x40}, @TCA_TAPRIO_ATTR_SCHED_CYCLE_TIME_EXTENSION={0xc, 0x9, 0x9}, @TCA_TAPRIO_ATTR_SCHED_CLOCKID={0x8}]}}]}, 0x64}, 0x1, 0x0, 0x0, 0x40001}, 0x10) socket(0xf, 0x800000003, 0x0) bpf$PROG_LOAD(0x5, &(0x7f0000000640)={0x1, 0x4, &(0x7f00000003c0)=ANY=[@ANYBLOB="18100000000000000000000000000000003ac5252d7c8072317adcc49d26ea87d9a3d0d1d209fb00e45b85445a8be8e9c68cdeb8fe89500a5e7bdc318fc5271c10e53ee2a771e4e682ae69b26dc80e15832af861452b21df2862e07f7f34143decfba9cce3ce83c8511ae9888e33f07ac5f509a825f51fd52ed8402052c7d38a8ca7139cc2608f4728099197eaae9408fdee4891a99aaab478226d7e90490800000073e1e0c6a7e9f9610fa94f42d59f9de425ce677acc551f7f00faa172946310c94bc6084a669a2057a210308632e8abac2015d2ea4f2883c776fadbc275e9bb0535e04c96f87e0b3957afefce8f685b3fba9a2136a0"], &(0x7f0000000600)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x40, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x1}, 0x90) 317.20381ms ago: executing program 5 (id=8730): r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r2 = syz_genetlink_get_family_id$netlbl_cipso(&(0x7f00000002c0), r1) r3 = socket(0x1e, 0x1, 0x0) getsockopt$inet_tcp_TCP_ZEROCOPY_RECEIVE(r3, 0x6, 0x23, 0x0, &(0x7f0000000200)) sendmsg$NLBL_CIPSOV4_C_LISTALL(r1, &(0x7f0000001680)={0x0, 0x0, &(0x7f0000001640)={&(0x7f0000000440)={0x14, r2, 0xf01, 0x70bd2b, 0x25dfdbfd}, 0x14}, 0x1, 0x0, 0x0, 0x20000040}, 0x20008004) sendmsg$nl_route_sched(r0, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000280)=@newtaction={0x6c, 0x30, 0x1, 0x0, 0x0, {}, [{0x58, 0x1, [@m_mpls={0x54, 0x1, 0x0, 0x0, {{0x9}, {0x28, 0x2, 0x0, 0x1, [@TCA_MPLS_PARMS={0x1c, 0x2, {{0x0, 0x0, 0x20000000}, 0x2}}, @TCA_MPLS_LABEL={0x8}]}, {0x4, 0x4}, {0xc}, {0xc}}}]}]}, 0x6c}}, 0x0) sendmsg$IPSET_CMD_DEL(0xffffffffffffffff, &(0x7f0000000300)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x200}, 0xc, &(0x7f0000000200)={&(0x7f0000000080)={0x144, 0xa, 0x6, 0x401, 0x0, 0x0, {0x2, 0x0, 0x6}, [@IPSET_ATTR_PROTOCOL={0x5}, @IPSET_ATTR_DATA={0x64, 0x7, 0x0, 0x1, [@IPSET_ATTR_IP2_TO={0x18, 0x16, 0x0, 0x1, @IPSET_ATTR_IPADDR_IPV6={0x14, 0x2, 0x1, 0x0, @local}}, @IPSET_ATTR_PACKETS={0xc, 0x19, 0x1, 0x0, 0x40}, @IPSET_ATTR_MARK={0x8, 0xa, 0x1, 0x0, 0x3}, @IPSET_ATTR_CADT_FLAGS={0x8, 0x8, 0x1, 0x0, 0x2}, @IPSET_ATTR_IP={0x18, 0x1, 0x0, 0x1, @IPSET_ATTR_IPADDR_IPV6={0x14, 0x2, 0x1, 0x0, @remote}}, @IPSET_ATTR_PORT={0x6, 0x4, 0x1, 0x0, 0x4e21}, @IPSET_ATTR_ETHER={0xa, 0x11, @link_local={0x1, 0x80, 0xc2, 0x0, 0x0, 0xe}}]}, @IPSET_ATTR_DATA={0x40, 0x7, 0x0, 0x1, [@IPSET_ATTR_LINENO={0x8, 0x9, 0x1, 0x0, 0x3d31}, @IPSET_ATTR_SKBQUEUE={0x6, 0x1d, 0x1, 0x0, 0x3}, @IPSET_ATTR_BYTES={0xc, 0x18, 0x1, 0x0, 0xe}, @IPSET_ATTR_TIMEOUT={0x8, 0x6, 0x1, 0x0, 0x4}, @IPSET_ATTR_IP_TO={0xc, 0x2, 0x0, 0x1, @IPSET_ATTR_IPADDR_IPV4={0x8, 0x1, 0x1, 0x0, @multicast2}}, @IPSET_ATTR_SKBMARK={0xc}]}, @IPSET_ATTR_ADT={0x7c, 0x8, 0x0, 0x1, [{0xc, 0x7, 0x0, 0x1, @IPSET_ATTR_SKBQUEUE={0x6, 0x1d, 0x1, 0x0, 0x800}}, {0x10, 0x7, 0x0, 0x1, @IPSET_ATTR_IP={0xc, 0x1, 0x0, 0x1, @IPSET_ATTR_IPADDR_IPV4={0x8, 0x1, 0x1, 0x0, @private=0xa010102}}}, {0x10, 0x7, 0x0, 0x1, @IPSET_ATTR_BYTES={0xc, 0x18, 0x1, 0x0, 0x9}}, {0x10, 0x7, 0x0, 0x1, @IPSET_ATTR_NAME={0x9, 0x12, 'syz2\x00'}}, {0xc, 0x7, 0x0, 0x1, @IPSET_ATTR_CADT_FLAGS={0x8, 0x8, 0x1, 0x0, 0x1}}, {0xc, 0x7, 0x0, 0x1, @IPSET_ATTR_PROTO={0x5, 0x7, 0xff}}, {0xc, 0x7, 0x0, 0x1, @IPSET_ATTR_MARK={0x8, 0xa, 0x1, 0x0, 0x8}}, {0xc, 0x7, 0x0, 0x1, @IPSET_ATTR_TIMEOUT={0x8, 0x6, 0x1, 0x0, 0x9}}, {0xc, 0x7, 0x0, 0x1, @IPSET_ATTR_COMMENT={0x5, 0x1a, '\x00'}}]}, @IPSET_ATTR_PROTOCOL={0x5}]}, 0x144}, 0x1, 0x0, 0x0, 0x8014}, 0x884) socket$nl_route(0x10, 0x3, 0x0) (async) syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) (async) syz_genetlink_get_family_id$netlbl_cipso(&(0x7f00000002c0), r1) (async) socket(0x1e, 0x1, 0x0) (async) getsockopt$inet_tcp_TCP_ZEROCOPY_RECEIVE(r3, 0x6, 0x23, 0x0, &(0x7f0000000200)) (async) sendmsg$NLBL_CIPSOV4_C_LISTALL(r1, &(0x7f0000001680)={0x0, 0x0, &(0x7f0000001640)={&(0x7f0000000440)={0x14, r2, 0xf01, 0x70bd2b, 0x25dfdbfd}, 0x14}, 0x1, 0x0, 0x0, 0x20000040}, 0x20008004) (async) sendmsg$nl_route_sched(r0, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000280)=@newtaction={0x6c, 0x30, 0x1, 0x0, 0x0, {}, [{0x58, 0x1, [@m_mpls={0x54, 0x1, 0x0, 0x0, {{0x9}, {0x28, 0x2, 0x0, 0x1, [@TCA_MPLS_PARMS={0x1c, 0x2, {{0x0, 0x0, 0x20000000}, 0x2}}, @TCA_MPLS_LABEL={0x8}]}, {0x4, 0x4}, {0xc}, {0xc}}}]}]}, 0x6c}}, 0x0) (async) sendmsg$IPSET_CMD_DEL(0xffffffffffffffff, &(0x7f0000000300)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x200}, 0xc, &(0x7f0000000200)={&(0x7f0000000080)={0x144, 0xa, 0x6, 0x401, 0x0, 0x0, {0x2, 0x0, 0x6}, [@IPSET_ATTR_PROTOCOL={0x5}, @IPSET_ATTR_DATA={0x64, 0x7, 0x0, 0x1, [@IPSET_ATTR_IP2_TO={0x18, 0x16, 0x0, 0x1, @IPSET_ATTR_IPADDR_IPV6={0x14, 0x2, 0x1, 0x0, @local}}, @IPSET_ATTR_PACKETS={0xc, 0x19, 0x1, 0x0, 0x40}, @IPSET_ATTR_MARK={0x8, 0xa, 0x1, 0x0, 0x3}, @IPSET_ATTR_CADT_FLAGS={0x8, 0x8, 0x1, 0x0, 0x2}, @IPSET_ATTR_IP={0x18, 0x1, 0x0, 0x1, @IPSET_ATTR_IPADDR_IPV6={0x14, 0x2, 0x1, 0x0, @remote}}, @IPSET_ATTR_PORT={0x6, 0x4, 0x1, 0x0, 0x4e21}, @IPSET_ATTR_ETHER={0xa, 0x11, @link_local={0x1, 0x80, 0xc2, 0x0, 0x0, 0xe}}]}, @IPSET_ATTR_DATA={0x40, 0x7, 0x0, 0x1, [@IPSET_ATTR_LINENO={0x8, 0x9, 0x1, 0x0, 0x3d31}, @IPSET_ATTR_SKBQUEUE={0x6, 0x1d, 0x1, 0x0, 0x3}, @IPSET_ATTR_BYTES={0xc, 0x18, 0x1, 0x0, 0xe}, @IPSET_ATTR_TIMEOUT={0x8, 0x6, 0x1, 0x0, 0x4}, @IPSET_ATTR_IP_TO={0xc, 0x2, 0x0, 0x1, @IPSET_ATTR_IPADDR_IPV4={0x8, 0x1, 0x1, 0x0, @multicast2}}, @IPSET_ATTR_SKBMARK={0xc}]}, @IPSET_ATTR_ADT={0x7c, 0x8, 0x0, 0x1, [{0xc, 0x7, 0x0, 0x1, @IPSET_ATTR_SKBQUEUE={0x6, 0x1d, 0x1, 0x0, 0x800}}, {0x10, 0x7, 0x0, 0x1, @IPSET_ATTR_IP={0xc, 0x1, 0x0, 0x1, @IPSET_ATTR_IPADDR_IPV4={0x8, 0x1, 0x1, 0x0, @private=0xa010102}}}, {0x10, 0x7, 0x0, 0x1, @IPSET_ATTR_BYTES={0xc, 0x18, 0x1, 0x0, 0x9}}, {0x10, 0x7, 0x0, 0x1, @IPSET_ATTR_NAME={0x9, 0x12, 'syz2\x00'}}, {0xc, 0x7, 0x0, 0x1, @IPSET_ATTR_CADT_FLAGS={0x8, 0x8, 0x1, 0x0, 0x1}}, {0xc, 0x7, 0x0, 0x1, @IPSET_ATTR_PROTO={0x5, 0x7, 0xff}}, {0xc, 0x7, 0x0, 0x1, @IPSET_ATTR_MARK={0x8, 0xa, 0x1, 0x0, 0x8}}, {0xc, 0x7, 0x0, 0x1, @IPSET_ATTR_TIMEOUT={0x8, 0x6, 0x1, 0x0, 0x9}}, {0xc, 0x7, 0x0, 0x1, @IPSET_ATTR_COMMENT={0x5, 0x1a, '\x00'}}]}, @IPSET_ATTR_PROTOCOL={0x5}]}, 0x144}, 0x1, 0x0, 0x0, 0x8014}, 0x884) (async) 310.853252ms ago: executing program 2 (id=8731): r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r2 = syz_genetlink_get_family_id$ieee802154(&(0x7f00000001c0), r1) sendmsg$IEEE802154_ASSOCIATE_RESP(r0, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000240)={0x1c, r2, 0x1, 0x0, 0x0, {}, [@IEEE802154_ATTR_STATUS={0x5}]}, 0x1c}}, 0x0) r3 = syz_init_net_socket$nl_rdma(0x10, 0x3, 0x10) setsockopt$netlink_NETLINK_DROP_MEMBERSHIP(r3, 0x10e, 0x2, &(0x7f0000000000)=0xf, 0x4) r4 = socket$nl_generic(0x10, 0x3, 0x10) r5 = syz_genetlink_get_family_id$devlink(&(0x7f0000000580), 0xffffffffffffffff) sendmsg$DEVLINK_CMD_TRAP_SET(r4, &(0x7f0000000780)={0x0, 0x0, &(0x7f0000000740)={&(0x7f0000000140)={0x42, r5, 0x1, 0x80000000, 0x0, {}, [{@nsim={{0xe}, {0xf, 0x2, {'netdevsim', 0x0}}}, {0x1c}, {0x5, 0x82}}]}, 0x58}}, 0x0) 180.764847ms ago: executing program 4 (id=8732): r0 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r0, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000001800)=ANY=[@ANYBLOB="180000002500010324bd7002ffdbdf25010000000400ae"], 0x18}, 0x1, 0x0, 0x0, 0x4008}, 0x0) recvmmsg(r0, &(0x7f0000003540)=[{{0x0, 0x0, 0x0}, 0x1f8}, {{0x0, 0x0, 0x0}, 0x5}, {{0x0, 0x0, 0x0}, 0x8}, {{0x0, 0x0, &(0x7f0000000a00)=[{&(0x7f0000001ac0)=""/121, 0x79}, {&(0x7f0000000ac0)=""/142, 0x8e}, {&(0x7f0000001c40)=""/4096, 0x1000}, {&(0x7f00000015c0)=""/165, 0xa5}, {&(0x7f0000000b80)=""/261, 0x105}, {&(0x7f0000002f80)=""/245, 0xf5}, {&(0x7f0000003180)=""/246, 0xf6}, {&(0x7f0000000980)=""/76, 0x4c}], 0x8}, 0x81}], 0x4, 0x40010132, 0x0) 107.79582ms ago: executing program 5 (id=8733): ioctl$sock_SIOCGIFINDEX(0xffffffffffffffff, 0x8933, 0x0) sendmsg$NFT_BATCH(0xffffffffffffffff, 0x0, 0x0) r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000240)={0x11, 0x3, &(0x7f0000000800)=ANY=[@ANYBLOB="1800000000000000000000000000000095"], &(0x7f00000001c0)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x2c}, 0x94) bpf$BPF_GET_PROG_INFO(0xf, &(0x7f0000000580)={r0, 0xe0, &(0x7f0000000480)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, ""/16, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8, 0x0, 0x0}}, 0x10) bpf$BPF_GET_PROG_INFO(0xf, &(0x7f0000001440)={r0, 0xe0, &(0x7f0000000440)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, ""/16, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8, 0x0, 0x0}}, 0x10) r3 = bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000640)={0x6, 0x3, &(0x7f0000000340)=ANY=[@ANYBLOB="185d00d6b6e1fbf7ac00000000133ab6bbad070000000000000000000000ad2eac0ec50ea4c1a67a548c55aee3d2a3d1a70614304e223a466390f2525728b954bfd517033e3e60393f24be57aa4224bdad6e1a23eef39ba67ceedc846ecc35101b21d7b955e61c1bdc02ac4814526cea75bdc93a257e81a6daf8c78296f5f2197248"], &(0x7f00000007c0)='syzkaller\x00', 0x1, 0x0, 0x0, 0x0, 0x40, '\x00', r2}, 0x94) r4 = socket$kcm(0x10, 0x2, 0x0) r5 = bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f0000000000)={0x1b, 0x0, 0x0, 0x9, 0x0, 0x1, 0x2, '\x00', r1, 0xffffffffffffffff, 0x2, 0x4, 0x3}, 0x50) ioctl$sock_TIOCOUTQ(r4, 0x5411, &(0x7f00000000c0)) r6 = socket$can_j1939(0x1d, 0x2, 0x7) ioctl$XFS_IOC_SWAPEXT(r5, 0xc0c0586d, &(0x7f0000000700)={0x0, r0, r6, 0x6, 0x401, '\x00', {0xffff, 0x5a9, 0x5, 0x8, 0x9, 0x7, 0x10001, 0x7, {0xfff, 0x200}, {0x7, 0xfffffffa}, {0x8, 0x36d1229e}, 0x9, 0xc36e, 0xc, 0x1, 0x2, 0xfabc, 0x8, 0x40, 0x4f0, 0x6, '\x00', 0x1, 0x4, 0xe9, 0x1}}) sendmsg$kcm(r4, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000080)=[{&(0x7f0000000300)="2e00000011008108090f9becdb4cb92e0a4831371c00000069bd6efb2502eaf60d000100020400bf050005001201", 0x2e}], 0x1}, 0x0) bpf$BPF_PROG_WITH_BTFID_LOAD(0x5, &(0x7f0000000880)=@bpf_ext={0x1c, 0x7, &(0x7f00000009c0)=ANY=[], &(0x7f0000000140)='syzkaller\x00', 0xad7, 0x0, 0x0, 0x40f00, 0x3a, '\x00', r1, 0x0, 0xffffffffffffffff, 0x8, &(0x7f00000005c0)={0x2, 0x4}, 0x8, 0x10, 0x0, 0x0, 0x2c672, r3, 0x0, 0x0, 0x0, 0x10, 0x2}, 0x94) 76.316801ms ago: executing program 2 (id=8734): r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x3, 0x4, &(0x7f0000000440)=ANY=[@ANYBLOB="1802000000000000000000000000000085000000870000009500000000000000e61de3c0d68d9a9a3837a5f4b0d89c6fcaf8b527740274afb0b5142716b03cfe0d2d4b1582c97e7e654c86b4bf36c96949bcb96b04393473e28ba1be0b980fa1de6b002f453cfcff25f245c2ed30eb9910c0e8669b4afb72067bc13888bbf5fc783225123282b9f456a57f3457f1"], &(0x7f0000000080)='GPL\x00'}, 0x94) mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000)='./cgroup/syz0\x00', 0x1ff) r1 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000), 0x200002, 0x0) r2 = openat$cgroup_int(r1, &(0x7f0000000640)='cgroup.max.descendants\x00', 0x2, 0x0) write$cgroup_int(r2, 0x0, 0x0) r3 = bpf$PROG_LOAD(0x5, &(0x7f0000000200)={0xc, 0xe, &(0x7f0000001080)=ANY=[@ANYBLOB="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"], &(0x7f0000000340)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x4, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0x8, 0x10, &(0x7f0000000000), 0x10}, 0x94) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f00000003c0)={r3, 0x18000000000002a0, 0xe, 0x0, &(0x7f0000000040)="b907ef19edfff007049e0ff0888e", 0x0, 0x0, 0x18000000, 0x0, 0x0, 0x0, 0x0}, 0x50) sendfile(r0, r2, 0x0, 0xc1) 0s ago: executing program 2 (id=8735): r0 = socket$netlink(0x10, 0x3, 0x10) bind$netlink(r0, &(0x7f0000514ff4)={0x10, 0x0, 0x0, 0x2ffffffff}, 0xc) setsockopt$sock_int(r0, 0x1, 0x8, &(0x7f0000000000)=0x80, 0x4) (async, rerun: 32) r1 = socket$inet6_mptcp(0xa, 0x1, 0x106) (rerun: 32) bind$inet6(r1, &(0x7f0000000040)={0xa, 0x4e22, 0x0, @empty, 0x7}, 0x1c) (async, rerun: 64) r2 = openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0xa8442, 0x0) (rerun: 64) ioctl$TUNSETIFF(r2, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x7101}) (async) r3 = openat$tun(0xffffffffffffff9c, &(0x7f0000000400), 0x0, 0x0) (async) r4 = socket(0x400000000010, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r4, 0x8933, &(0x7f0000000380)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r4, &(0x7f00000012c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000005c0)=@newqdisc={0x38, 0x24, 0x4ee4e6a52ff56541, 0x70bd2a, 0xffffffff, {0x0, 0x0, 0x0, r5, {0x0, 0xfff1}, {0xffff, 0xffff}}, [@qdisc_kind_options=@q_multiq={{0xb}, {0x8}}]}, 0x38}}, 0x0) (async) sendmsg$nl_route_sched(r4, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000640)=@newtfilter={0xa4, 0x2c, 0xd27, 0x170bd2b, 0x2, {0x0, 0x0, 0x0, r5, {0x0, 0x10}, {}, {0x8, 0xffe0}}, [@filter_kind_options=@f_flow={{0x9}, {0x74, 0x2, [@TCA_FLOW_MODE={0x8, 0x2, 0x1}, @TCA_FLOW_KEYS={0x8, 0x1, 0x1a29c}, @TCA_FLOW_ACT={0x60, 0x9, 0x0, 0x1, [@m_csum={0x5c, 0x1, 0x0, 0x0, {{0x9}, {0x20, 0x2, 0x0, 0x1, [@TCA_CSUM_PARMS={0x1c, 0x1, {{0x1003d1, 0x3, 0x20000007, 0x6, 0x86}, 0x49}}]}, {0x12, 0x6, "7d00c70fe5b46dc5a26b8e000000"}, {0xc, 0x7, {0x0, 0x1}}, {0xc, 0x8, {0x1, 0x1}}}}]}]}}]}, 0xa4}, 0x1, 0x0, 0x0, 0xc804}, 0x2) (async) close(r3) (async, rerun: 64) socket$unix(0x1, 0x2, 0x0) (async, rerun: 64) ioctl$SIOCSIFHWADDR(r3, 0x8914, &(0x7f0000002280)={'syzkaller0\x00', @multicast}) (async) r6 = socket$kcm(0x11, 0x3, 0x0) setsockopt$sock_attach_bpf(r6, 0x107, 0xf, &(0x7f0000000600), 0x56) (async, rerun: 32) sendmsg$kcm(r6, &(0x7f0000000280)={&(0x7f0000000540)=@xdp={0x2c, 0x0, r5, 0x42}, 0x80, &(0x7f00000000c0)=[{&(0x7f00000002c0)="27030200dc0f14000e00123c0ff000000000ff8800000066c1532cc10200000003125ce882cbf490d90812533f00", 0x2e}], 0x1}, 0x4005) (async, rerun: 32) listen(r1, 0xfffffffc) (async, rerun: 32) socket$nl_generic(0x10, 0x3, 0x10) (async, rerun: 32) r7 = syz_genetlink_get_family_id$mptcp(&(0x7f0000000080), 0xffffffffffffffff) (async, rerun: 32) r8 = socket$inet_mptcp(0x2, 0x1, 0x106) (rerun: 32) connect$inet(r8, &(0x7f0000000000)={0x2, 0x4e22, @local}, 0x10) accept4(r8, &(0x7f0000000280)=@rc={0x1f, @fixed}, &(0x7f0000000300)=0x80, 0x101800) (async, rerun: 64) sendmsg$MPTCP_PM_CMD_DEL_ADDR(r2, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000700)=ANY=[@ANYBLOB="14000000d6c0e3ba55ff413a1bbf6816356968dfc9d9f7aabeb9c753fcd10d1bc39515d478baaac8b7cb2054d0a8702c0bf32ee90000000000000000", @ANYRES16=r7, @ANYBLOB="00030000000000dcdf2502000000"], 0x14}}, 0x0) (async, rerun: 64) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000440)={0xd, 0x4, &(0x7f0000000040)=ANY=[@ANYBLOB="18000000000000000000000000000000811278000000000095"], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0xc}, 0x94) (async) setsockopt$inet6_IPV6_RTHDR(0xffffffffffffffff, 0x29, 0x39, &(0x7f0000000080)=ANY=[@ANYBLOB="0002e1000000dfffff000400"/24], 0x18) (async) setsockopt$sock_timeval(0xffffffffffffffff, 0x1, 0x15, &(0x7f0000000000)={0x0, 0xea60}, 0x10) (async) connect$inet6(0xffffffffffffffff, &(0x7f0000000040)={0xa, 0xfe80, 0x0, @rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x02'}, 0x1c) getsockname$unix(0xffffffffffffffff, &(0x7f00000001c0), &(0x7f0000000340)=0x6e) kernel console output (not intermixed with test programs): 972308][T28605] netlink: 43 bytes leftover after parsing attributes in process `syz.1.6466'. [ 748.994392][T28606] netlink: 24 bytes leftover after parsing attributes in process `syz.1.6466'. [ 749.046455][T28605] netlink: 24 bytes leftover after parsing attributes in process `syz.1.6466'. [ 749.073843][ T9026] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 749.498385][T27663] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 749.715351][ T9026] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 749.885057][ T9026] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 750.356964][ T1298] ieee802154 phy1 wpan1: encryption failed: -22 [ 750.517493][ T5888] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 750.913367][ T5829] Bluetooth: hci1: command tx timeout [ 751.557260][ T5888] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 752.598507][ T5888] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 752.902359][T28635] netlink: 120 bytes leftover after parsing attributes in process `syz.5.6475'. [ 752.914661][T28630] sit0: entered promiscuous mode [ 752.920196][T28633] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 752.924910][T28630] netlink: 8 bytes leftover after parsing attributes in process `syz.2.6472'. [ 752.930880][ C1] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 752.950347][T28635] netlink: 212348 bytes leftover after parsing attributes in process `syz.5.6475'. [ 752.950798][ T9026] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 752.970236][T28635] netlink: Conntrack attr type has unexpected length (type=2, length=0, expected=2) [ 752.993266][ T5829] Bluetooth: hci1: command tx timeout [ 753.431638][T28664] vcan0: tx address claim with dest, not broadcast [ 753.494136][T28661] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 753.529745][T28661] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 753.578103][ T9026] IPVS: starting estimator thread 0... [ 753.643576][ T9] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 753.680338][T28672] syzkaller0: entered promiscuous mode [ 753.682843][T28671] IPVS: using max 33 ests per chain, 79200 per kthread [ 753.704033][T28672] syzkaller0: entered allmulticast mode [ 753.780852][T28676] syzkaller1: entered promiscuous mode [ 753.787220][T28676] syzkaller1: entered allmulticast mode [ 753.795080][T28463] netdevsim netdevsim3 netdevsim0: renamed from eth0 [ 753.805240][T28463] 8021q: adding VLAN 0 to HW filter on device netdevsim0 [ 753.815453][T28463] netdevsim netdevsim3 netdevsim1: renamed from eth1 [ 753.825554][T28463] 8021q: adding VLAN 0 to HW filter on device netdevsim1 [ 753.856687][T28463] netdevsim netdevsim3 netdevsim2: renamed from eth2 [ 753.866383][T28463] 8021q: adding VLAN 0 to HW filter on device netdevsim2 [ 753.874901][T28463] netdevsim netdevsim3 netdevsim3: renamed from eth3 [ 753.886766][T28463] 8021q: adding VLAN 0 to HW filter on device netdevsim3 [ 754.106767][T28463] 8021q: adding VLAN 0 to HW filter on device bond0 [ 754.170848][T28463] 8021q: adding VLAN 0 to HW filter on device team0 [ 754.226988][ T36] bridge0: port 1(bridge_slave_0) entered blocking state [ 754.234303][ T36] bridge0: port 1(bridge_slave_0) entered forwarding state [ 754.259020][T28702] netlink: 32 bytes leftover after parsing attributes in process `syz.5.6493'. [ 754.277181][T16859] bridge0: port 2(bridge_slave_1) entered blocking state [ 754.284364][T16859] bridge0: port 2(bridge_slave_1) entered forwarding state [ 754.297098][T28702] netlink: 32 bytes leftover after parsing attributes in process `syz.5.6493'. [ 754.434224][T28708] netlink: 28 bytes leftover after parsing attributes in process `syz.1.6491'. [ 754.505900][T28715] netlink: 'syz.5.6495': attribute type 1 has an invalid length. [ 754.521990][T28699] syzkaller0: entered promiscuous mode [ 754.528013][T28699] syzkaller0: entered allmulticast mode [ 754.678574][T27938] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 755.718278][ T9] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 755.962775][ T9026] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 756.760734][ T9029] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 756.768965][ T9029] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 756.779503][T27942] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 756.802427][ T9026] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 757.528528][T28729] syzkaller0: entered promiscuous mode [ 757.540595][T28729] syzkaller0: entered allmulticast mode [ 757.566461][T28735] netlink: 16 bytes leftover after parsing attributes in process `syz.1.6498'. [ 757.591587][T28736] netlink: 7064 bytes leftover after parsing attributes in process `syz.4.6499'. [ 757.640839][T28736] openvswitch: netlink: Missing key (keys=40, expected=100) [ 757.805342][T27938] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 757.934029][T28463] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 758.004098][T28755] netlink: 4 bytes leftover after parsing attributes in process `syz.2.6505'. [ 758.028036][T28755] bridge_slave_1: left allmulticast mode [ 758.056942][T28755] bridge_slave_1: left promiscuous mode [ 758.078651][T28755] bridge0: port 2(bridge_slave_1) entered disabled state [ 758.104265][T28755] bridge_slave_0: left allmulticast mode [ 758.113052][T28755] bridge_slave_0: left promiscuous mode [ 758.119002][T28755] bridge0: port 1(bridge_slave_0) entered disabled state [ 758.176902][T28765] netlink: 108 bytes leftover after parsing attributes in process `syz.1.6508'. [ 758.220184][T28757] netlink: 260 bytes leftover after parsing attributes in process `syz.4.6506'. [ 758.315886][T28757] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 758.326933][T28463] veth0_vlan: entered promiscuous mode [ 758.367638][T28463] veth1_vlan: entered promiscuous mode [ 758.472009][T28463] veth0_macvtap: entered promiscuous mode [ 758.517416][T28463] veth1_macvtap: entered promiscuous mode [ 758.577765][T28463] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 758.601992][T28463] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 758.639394][T16859] netdevsim netdevsim3 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 758.665562][T16859] netdevsim netdevsim3 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 758.731674][T16859] netdevsim netdevsim3 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 758.745909][T16859] netdevsim netdevsim3 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 758.810201][T28788] xt_l2tp: invalid flags combination: 8 [ 758.812611][T28786] syzkaller0: entered promiscuous mode [ 758.825265][T28786] syzkaller0: entered allmulticast mode [ 758.836809][T17386] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 758.884325][T16859] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 758.898146][T16859] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 758.993856][T17415] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 759.011410][T17415] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 759.022730][T28790] netlink: 20 bytes leftover after parsing attributes in process `syz.5.6516'. [ 759.111769][T28792] bond1: option resend_igmp: invalid value (32767) [ 759.120028][T28792] bond1: option resend_igmp: allowed values 0 - 255 [ 759.144145][T28792] bond1 (unregistering): Released all slaves [ 759.228649][T28797] netlink: 'syz.3.6424': attribute type 1 has an invalid length. [ 759.722924][T28814] syzkaller0: entered promiscuous mode [ 759.742024][T28814] syzkaller0: entered allmulticast mode [ 759.798645][ T9029] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 759.847333][T28817] ipt_REJECT: TCP_RESET invalid for non-tcp [ 759.869692][T17176] Bluetooth: hci0: unexpected cc 0x0c03 length: 249 > 1 [ 759.887154][T17176] Bluetooth: hci0: unexpected cc 0x1003 length: 249 > 9 [ 759.916687][T17176] Bluetooth: hci0: unexpected cc 0x1001 length: 249 > 9 [ 759.935291][T17176] Bluetooth: hci0: unexpected cc 0x0c23 length: 249 > 4 [ 759.945141][T17176] Bluetooth: hci0: unexpected cc 0x0c38 length: 249 > 2 [ 760.155643][T28833] IPVS: set_ctl: invalid protocol: 92 224.0.0.1:20000 [ 760.205129][T28822] lo speed is unknown, defaulting to 1000 [ 760.221450][T28822] vxcan1 speed is unknown, defaulting to 1000 [ 760.775875][T28858] net_ratelimit: 1 callbacks suppressed [ 760.775895][T28858] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 760.837656][T28849] ipvlan2: entered promiscuous mode [ 760.918024][T17386] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 761.104925][T28866] syzkaller0: entered promiscuous mode [ 761.110562][T28866] syzkaller0: entered allmulticast mode [ 761.431861][T17415] batman_adv: batadv0: Removing interface:  [ 761.499136][T28878] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check. [ 761.575863][T28884] netlink: 164 bytes leftover after parsing attributes in process `syz.2.6548'. [ 761.596153][T28884] netlink: 164 bytes leftover after parsing attributes in process `syz.2.6548'. [ 761.605544][T28884] netlink: 60 bytes leftover after parsing attributes in process `syz.2.6548'. [ 761.616068][T28886] netlink: 'syz.1.6550': attribute type 4 has an invalid length. [ 761.956928][T17386] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 762.033594][ T5829] Bluetooth: hci0: command tx timeout [ 762.145603][T28917] netlink: 8 bytes leftover after parsing attributes in process `syz.1.6559'. [ 762.231423][T28911] A link change request failed with some changes committed already. Interface bond_slave_0 may have been left with an inconsistent configuration, please check. [ 762.334311][T28822] chnl_net:caif_netlink_parms(): no params data found [ 762.437229][T28927] netlink: 48 bytes leftover after parsing attributes in process `syz.1.6560'. [ 762.502767][T28931] Bluetooth: MGMT ver 1.23 [ 762.717398][T17415] bridge_slave_1: left allmulticast mode [ 762.746656][T17415] bridge_slave_1: left promiscuous mode [ 762.747209][T16859] tipc: Subscription rejected, illegal request [ 762.757728][T17415] bridge0: port 2(bridge_slave_1) entered disabled state [ 762.780345][T17415] bridge_slave_0: left promiscuous mode [ 762.790091][T17415] bridge0: port 1(bridge_slave_0) entered disabled state [ 762.833171][T27942] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 763.016477][T17386] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 763.643260][T28966] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 763.677274][ C1] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 763.703517][T28966] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 764.114861][ T5829] Bluetooth: hci0: command tx timeout [ 764.132033][T17415] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 764.141680][T17415] bond_slave_0: left allmulticast mode [ 764.149356][T17415] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 764.158458][T17415] bond_slave_1: left allmulticast mode [ 764.165320][T17415] bond0 (unregistering): (slave batadv0): Releasing backup interface [ 764.174375][T17415] batadv0: left allmulticast mode [ 764.180067][T17415] bond0 (unregistering): Released all slaves [ 764.190283][T17415] bond1 (unregistering): Released all slaves [ 764.206050][T17415] bond2 (unregistering): Released all slaves [ 764.220639][T17415] bond3 (unregistering): Released all slaves [ 764.333279][T28822] bridge0: port 1(bridge_slave_0) entered blocking state [ 764.350704][T28822] bridge0: port 1(bridge_slave_0) entered disabled state [ 764.361255][T28822] bridge_slave_0: entered allmulticast mode [ 764.376063][T28822] bridge_slave_0: entered promiscuous mode [ 764.405590][T28822] bridge0: port 2(bridge_slave_1) entered blocking state [ 764.433983][T28822] bridge0: port 2(bridge_slave_1) entered disabled state [ 764.474000][T28822] bridge_slave_1: entered allmulticast mode [ 764.524365][T28822] bridge_slave_1: entered promiscuous mode [ 764.611652][T28822] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 764.647245][T28822] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 764.788694][T28822] team0: Port device team_slave_0 added [ 764.799136][T28822] team0: Port device team_slave_1 added [ 764.931567][T28822] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 764.939566][T28822] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 764.967878][T28822] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 765.004202][T28822] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 765.011361][T28822] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 765.043770][T28822] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 765.166045][T28822] hsr_slave_0: entered promiscuous mode [ 765.174952][T28822] hsr_slave_1: entered promiscuous mode [ 765.181133][T28822] debugfs: 'hsr0' already exists in 'hsr' [ 765.191871][T28822] Cannot create hsr debugfs directory [ 765.198941][ T5487] 8021q: adding VLAN 0 to HW filter on device eth5 [ 765.680506][T17415] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 765.693215][T17415] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 765.888682][T28947] nci: __nci_request: wait_for_completion_interruptible_timeout failed -512 [ 765.904094][ T9029] net_ratelimit: 10 callbacks suppressed [ 765.904115][ T9029] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 766.135335][T17386] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 766.192451][ T5829] Bluetooth: hci0: command tx timeout [ 766.195839][T28992] netlink: 4 bytes leftover after parsing attributes in process `syz.1.6574'. [ 766.356190][T27942] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 766.393869][ T314] smc: removing ib device syz2 [ 766.992912][T17386] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 767.014192][T27942] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 767.170328][T17386] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 767.864472][T29051] : renamed from bond0 (while UP) [ 767.905751][T29051] netlink: 56 bytes leftover after parsing attributes in process `syz.1.6585'. [ 767.920429][T29054] netlink: 28 bytes leftover after parsing attributes in process `syz.5.6586'. [ 767.935554][T29056] netlink: 56 bytes leftover after parsing attributes in process `syz.1.6585'. [ 768.003878][T29060] netlink: 28 bytes leftover after parsing attributes in process `syz.5.6586'. [ 768.208477][T17386] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 768.272887][ T5829] Bluetooth: hci0: command tx timeout [ 768.517155][T29081] netlink: 40 bytes leftover after parsing attributes in process `syz.2.6592'. [ 768.559653][T29082] netlink: 40 bytes leftover after parsing attributes in process `syz.2.6592'. [ 768.610190][T29084] netlink: 256 bytes leftover after parsing attributes in process `syz.3.6593'. [ 768.627246][T29086] netlink: 24 bytes leftover after parsing attributes in process `syz.5.6594'. [ 768.833566][T28822] netdevsim netdevsim4 netdevsim0: renamed from eth0 [ 768.857583][T28822] 8021q: adding VLAN 0 to HW filter on device netdevsim0 [ 768.874191][T28822] netdevsim netdevsim4 netdevsim1: renamed from eth1 [ 768.888200][T28822] 8021q: adding VLAN 0 to HW filter on device netdevsim1 [ 768.946584][T28822] netdevsim netdevsim4 netdevsim2: renamed from eth2 [ 769.026949][T28822] 8021q: adding VLAN 0 to HW filter on device netdevsim2 [ 769.048351][T29100] openvswitch: netlink: Either Ethernet header or EtherType is required. [ 769.060124][T28822] netdevsim netdevsim4 netdevsim3: renamed from eth3 [ 769.089485][T28822] 8021q: adding VLAN 0 to HW filter on device netdevsim3 [ 769.249241][T27939] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 769.534107][T28822] 8021q: adding VLAN 0 to HW filter on device bond0 [ 769.538119][T29119] IPVS: set_ctl: invalid protocol: 135 100.1.1.0:20002 [ 769.613368][T28822] 8021q: adding VLAN 0 to HW filter on device team0 [ 769.644344][T29125] IPVS: set_ctl: invalid protocol: 135 100.1.1.0:20002 [ 769.677928][ T12] bridge0: port 1(bridge_slave_0) entered blocking state [ 769.685130][ T12] bridge0: port 1(bridge_slave_0) entered forwarding state [ 769.700664][T29128] netlink: 4 bytes leftover after parsing attributes in process `syz.3.6606'. [ 769.800623][ T12] bridge0: port 2(bridge_slave_1) entered blocking state [ 769.807857][ T12] bridge0: port 2(bridge_slave_1) entered forwarding state [ 770.034067][T27942] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 770.810992][T28822] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 770.914634][T29191] vlan0: entered promiscuous mode [ 771.008020][T29191] team0: Port device vlan0 added [ 771.332869][T17386] net_ratelimit: 1 callbacks suppressed [ 771.332888][T17386] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 771.665104][T29229] __nla_validate_parse: 1 callbacks suppressed [ 771.665124][T29229] netlink: 20 bytes leftover after parsing attributes in process `syz.2.6627'. [ 771.916071][ T4319] netdevsim netdevsim1 netdevsim0: set [0, 0] type 1 family 0 port 8472 - 0 [ 771.948521][T29241] netlink: 'syz.5.6631': attribute type 10 has an invalid length. [ 771.965865][T29238] netlink: 'syz.3.6630': attribute type 16 has an invalid length. [ 771.980113][ T4319] netdevsim netdevsim1 netdevsim1: set [0, 0] type 1 family 0 port 8472 - 0 [ 771.999367][T29238] netlink: 'syz.3.6630': attribute type 17 has an invalid length. [ 772.007644][ T4319] netdevsim netdevsim1 netdevsim2: set [0, 0] type 1 family 0 port 8472 - 0 [ 772.156579][T29238] A link change request failed with some changes committed already. Interface caif0 may have been left with an inconsistent configuration, please check. [ 772.203954][ T4319] netdevsim netdevsim1 netdevsim3: set [0, 0] type 1 family 0 port 8472 - 0 [ 772.286481][T29251] ipvlan2: entered promiscuous mode [ 772.372001][ T9] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 772.517467][T28822] veth0_vlan: entered promiscuous mode [ 772.575042][T29269] netlink: 12 bytes leftover after parsing attributes in process `syz.1.6638'. [ 772.624801][T17415] IPVS: stop unused estimator thread 0... [ 772.787279][T28822] veth1_vlan: entered promiscuous mode [ 772.977346][T28822] veth0_macvtap: entered promiscuous mode [ 772.997609][T28822] veth1_macvtap: entered promiscuous mode [ 773.072675][ T5875] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 773.270171][T28822] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 773.275916][T29297] netlink: 20 bytes leftover after parsing attributes in process `syz.2.6644'. [ 773.319197][T28822] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 773.411943][ T48] netdevsim netdevsim4 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 773.421189][ T9] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 773.493396][ T1090] netdevsim netdevsim4 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 773.506627][ T1090] netdevsim netdevsim4 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 773.567781][ T1090] netdevsim netdevsim4 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 773.883382][T29319] ksmbd: Unknown IPC event: 12, ignore. [ 773.909133][ T1090] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 773.961986][ T1090] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 774.200366][ T4319] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 774.221934][ T4319] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 774.439286][ T5888] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 774.492297][T29353] tc_dump_action: action bad kind [ 774.506909][T29354] netlink: 16 bytes leftover after parsing attributes in process `syz.4.6521'. [ 774.534193][T29352] netlink: 16 bytes leftover after parsing attributes in process `syz.4.6521'. [ 774.579333][T29358] netlink: 20 bytes leftover after parsing attributes in process `syz.1.6659'. [ 774.685297][T29362] netlink: 12 bytes leftover after parsing attributes in process `syz.3.6661'. [ 774.707457][T29364] netlink: 16 bytes leftover after parsing attributes in process `syz.4.6662'. [ 775.017751][T29391] netlink: 'syz.3.6669': attribute type 12 has an invalid length. [ 775.025853][T29391] netlink: 'syz.3.6669': attribute type 29 has an invalid length. [ 775.046667][T29391] netlink: 148 bytes leftover after parsing attributes in process `syz.3.6669'. [ 775.056039][T29391] netlink: 'syz.3.6669': attribute type 1 has an invalid length. [ 775.091564][T29391] netlink: 47 bytes leftover after parsing attributes in process `syz.3.6669'. [ 775.228578][T29400] nbd: must specify at least one socket [ 775.481250][T27939] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 775.489577][T29415] Bluetooth: MGMT ver 1.23 [ 775.570675][T29420] netlink: 'syz.5.6678': attribute type 1 has an invalid length. [ 775.716377][T29425] xt_socket: unknown flags 0x50 [ 775.756589][T29425] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 775.777180][T29425] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 775.796282][T29425] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 775.845514][T29425] sctp: [Deprecated]: syz.1.6679 (pid 29425) Use of int in maxseg socket option. [ 775.845514][T29425] Use struct sctp_assoc_value instead [ 776.330957][T29466] netlink: 'syz.2.6692': attribute type 4 has an invalid length. [ 776.422941][ T314] netdevsim netdevsim3 netdevsim0: set [0, 0] type 1 family 0 port 8472 - 0 [ 776.433588][ T314] netdevsim netdevsim3 netdevsim1: set [0, 0] type 1 family 0 port 8472 - 0 [ 776.453900][ T314] netdevsim netdevsim3 netdevsim2: set [0, 0] type 1 family 0 port 8472 - 0 [ 776.489721][ T314] netdevsim netdevsim3 netdevsim3: set [0, 0] type 1 family 0 port 8472 - 0 [ 776.536971][ T5888] net_ratelimit: 1 callbacks suppressed [ 776.536989][ T5888] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 776.597118][ T9029] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 776.645981][T29481] IPVS: set_ctl: invalid protocol: 50 10.1.1.0:20002 [ 776.674852][T29479] xt_physdev: --physdev-out and --physdev-is-out only supported in the FORWARD and POSTROUTING chains with bridged traffic [ 777.011844][T29500] __nla_validate_parse: 14 callbacks suppressed [ 777.011865][T29500] netlink: 28 bytes leftover after parsing attributes in process `syz.5.6705'. [ 777.391343][T27939] IPVS: starting estimator thread 0... [ 777.484370][T29523] IPVS: using max 31 ests per chain, 74400 per kthread [ 777.560977][T27939] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 777.601438][T29532] netlink: 60 bytes leftover after parsing attributes in process `syz.1.6716'. [ 777.626725][T29534] netlink: 60 bytes leftover after parsing attributes in process `syz.1.6716'. [ 778.066463][T29553] netlink: 32 bytes leftover after parsing attributes in process `syz.1.6723'. [ 778.092611][T29554] netlink: 8 bytes leftover after parsing attributes in process `syz.5.6720'. [ 778.122778][T29553] openvswitch: netlink: Flow key attr not present in new flow. [ 778.263896][T29563] netlink: 'syz.1.6727': attribute type 2 has an invalid length. [ 778.301185][T29563] netlink: 'syz.1.6727': attribute type 2 has an invalid length. [ 778.315890][T29564] x_tables: duplicate underflow at hook 1 [ 778.367973][T29562] netlink: 'syz.1.6727': attribute type 2 has an invalid length. [ 778.413923][T29562] netlink: 'syz.1.6727': attribute type 2 has an invalid length. [ 778.574244][T29573] netlink: 'syz.3.6730': attribute type 3 has an invalid length. [ 778.608357][ T5888] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 778.724556][T29586] ipvlan3: entered promiscuous mode [ 778.992463][ C1] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 779.004120][ C1] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 779.152459][T27942] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 779.171741][T29599] syzkaller0: entered promiscuous mode [ 779.182387][T29599] syzkaller0: entered allmulticast mode [ 779.646998][ T5888] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 780.114477][ C0] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 781.719487][ C1] net_ratelimit: 221 callbacks suppressed [ 781.719510][ C1] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 781.733744][ C1] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 782.201723][ T9029] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 782.770318][ T5888] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 783.248355][T29612] netlink: 65039 bytes leftover after parsing attributes in process `syz.5.6741'. [ 783.401397][T29628] netlink: 212368 bytes leftover after parsing attributes in process `syz.5.6744'. [ 783.720156][T29647] netlink: 4 bytes leftover after parsing attributes in process `syz.5.6751'. [ 783.796724][T29647] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 783.800468][T17386] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 783.892466][T29647] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 783.938175][T29659] netlink: 64 bytes leftover after parsing attributes in process `syz.3.6754'. [ 784.004889][T29662] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 784.026208][T29659] netlink: 284 bytes leftover after parsing attributes in process `syz.3.6754'. [ 784.225780][T29679] netlink: 8 bytes leftover after parsing attributes in process `syz.1.6759'. [ 784.345643][T29679] vlan2: entered allmulticast mode [ 784.366609][T29679] mac80211_hwsim hwsim73 wlan0: entered allmulticast mode [ 784.485453][T29693] netlink: 4 bytes leftover after parsing attributes in process `syz.4.6763'. [ 784.508076][T29693] netlink: 'syz.4.6763': attribute type 6 has an invalid length. [ 784.548861][ T1090] netdevsim netdevsim4 netdevsim0: set [0, 0] type 1 family 0 port 8472 - 0 [ 784.550164][T29699] netlink: 'syz.3.6766': attribute type 33 has an invalid length. [ 784.560570][T29693] netlink: 4 bytes leftover after parsing attributes in process `syz.4.6763'. [ 784.583154][ T1090] netdevsim netdevsim4 netdevsim1: set [0, 0] type 1 family 0 port 8472 - 0 [ 784.599877][T29693] netlink: 'syz.4.6763': attribute type 6 has an invalid length. [ 784.611342][ T1090] netdevsim netdevsim4 netdevsim2: set [0, 0] type 1 family 0 port 8472 - 0 [ 784.654283][T29700] sit0: entered promiscuous mode [ 784.667540][T29700] netlink: 'syz.4.6763': attribute type 1 has an invalid length. [ 784.676773][T29700] netlink: 1 bytes leftover after parsing attributes in process `syz.4.6763'. [ 784.711177][ T1090] netdevsim netdevsim4 netdevsim3: set [0, 0] type 1 family 0 port 8472 - 0 [ 784.838904][T17386] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 784.865670][T29714] netlink: 12 bytes leftover after parsing attributes in process `syz.4.6771'. [ 784.946559][T29721] xt_hashlimit: size too large, truncated to 1048576 [ 784.956292][T29714] netlink: 'syz.4.6771': attribute type 1 has an invalid length. [ 785.235426][ T9029] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 785.357684][T29742] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 785.460659][T29750] netlink: 'syz.2.6783': attribute type 1 has an invalid length. [ 785.469834][T29750] netlink: 'syz.2.6783': attribute type 2 has an invalid length. [ 785.728482][T29764] netlink: 'syz.1.6789': attribute type 2 has an invalid length. [ 785.739979][T29764] netlink: 'syz.1.6789': attribute type 2 has an invalid length. [ 785.892418][T17386] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 786.444095][T29803] veth0: entered promiscuous mode [ 786.478285][T29802] veth0: left promiscuous mode [ 786.581115][T29810] netlink: 'syz.3.6806': attribute type 39 has an invalid length. [ 786.837523][ C0] net_ratelimit: 2 callbacks suppressed [ 786.837544][ C0] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 786.917701][T27939] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 787.127162][T29832] IPv6: NLM_F_CREATE should be specified when creating new route [ 787.985179][T27939] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 788.225551][T29884] can: request_module (can-proto-5) failed. [ 788.273047][T27942] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 788.396734][T29904] veth0_to_batadv: entered promiscuous mode [ 788.410069][T29904] veth0_to_batadv: entered allmulticast mode [ 788.440645][T29904] __nla_validate_parse: 17 callbacks suppressed [ 788.440664][T29904] netlink: 132 bytes leftover after parsing attributes in process `syz.5.6840'. [ 788.616514][T29918] netlink: 8 bytes leftover after parsing attributes in process `syz.3.6842'. [ 788.638371][T29918] netlink: 12 bytes leftover after parsing attributes in process `syz.3.6842'. [ 788.682742][T29909] lo speed is unknown, defaulting to 1000 [ 788.844575][T29930] xt_hashlimit: size too large, truncated to 1048576 [ 788.999167][T27939] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 789.238947][T29940] ipvlan2: entered promiscuous mode [ 789.347575][T29954] netlink: 32 bytes leftover after parsing attributes in process `syz.1.6852'. [ 789.398087][T27942] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 789.428660][T29954] macvtap1: entered promiscuous mode [ 789.449856][T29954] macvtap1: entered allmulticast mode [ 789.456285][T29954] veth1_vlan: entered allmulticast mode [ 789.795041][T29978] netlink: 24 bytes leftover after parsing attributes in process `syz.3.6861'. [ 789.813215][T29978] netlink: 8 bytes leftover after parsing attributes in process `syz.3.6861'. [ 789.827587][T29978] netlink: 12 bytes leftover after parsing attributes in process `syz.3.6861'. [ 790.035034][T27942] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 790.056280][T17386] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 790.557303][T30013] netlink: 40 bytes leftover after parsing attributes in process `syz.3.6874'. [ 790.719903][T30022] netlink: 672 bytes leftover after parsing attributes in process `syz.4.6876'. [ 790.736146][T30022] openvswitch: netlink: Flow key attr not present in new flow. [ 790.750364][T30024] validate_nla: 3 callbacks suppressed [ 790.750383][T30024] netlink: 'syz.3.6877': attribute type 1 has an invalid length. [ 790.885596][T30027] bond1: (slave veth3): Enslaving as an active interface with a down link [ 790.895379][T30028] veth0: entered promiscuous mode [ 790.921879][T30024] netlink: 28 bytes leftover after parsing attributes in process `syz.3.6877'. [ 790.933765][T30025] veth0: left promiscuous mode [ 790.941456][T30024] 8021q: adding VLAN 0 to HW filter on device bond1 [ 791.077978][T27939] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 791.111234][T30038] xt_physdev: --physdev-out and --physdev-is-out only supported in the FORWARD and POSTROUTING chains with bridged traffic [ 791.244743][T30044] netlink: 'syz.3.6883': attribute type 9 has an invalid length. [ 791.369037][T30048] netlink: 'syz.3.6884': attribute type 2 has an invalid length. [ 791.515229][T30053] ipvlan3: entered promiscuous mode [ 791.838205][T27942] IPVS: starting estimator thread 0... [ 791.933199][T30065] IPVS: using max 31 ests per chain, 74400 per kthread [ 791.952732][T27942] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 792.129382][T27939] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 792.208054][T30076] only policy match revision 0 supported [ 792.208076][T30076] unable to load match [ 792.367178][T30088] ipvlan2: entered promiscuous mode [ 792.857365][T30116] netlink: 'syz.1.6908': attribute type 1 has an invalid length. [ 792.887456][T30118] xt_l2tp: missing protocol rule (udp|l2tpip) [ 792.917308][T30116] 8021q: adding VLAN 0 to HW filter on device bond0 [ 793.019169][T30131] ipvlan3: entered promiscuous mode [ 793.072471][ T9029] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 793.171960][T17386] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 793.385854][T30154] syzkaller0: entered promiscuous mode [ 793.427636][T30154] syzkaller0: entered allmulticast mode [ 793.467569][T30161] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 793.478419][ C1] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 793.932297][T30186] wg1 speed is unknown, defaulting to 1000 [ 793.938519][T30186] wg1 speed is unknown, defaulting to 1000 [ 793.946502][T30186] wg1 speed is unknown, defaulting to 1000 [ 793.994627][T30191] __nla_validate_parse: 10 callbacks suppressed [ 793.994647][T30191] netlink: 7 bytes leftover after parsing attributes in process `syz.2.6933'. [ 794.056245][T30186] infiniband syz2: RDMA CMA: cma_listen_on_dev, error -98 [ 794.074991][T30191] erspan0: entered promiscuous mode [ 794.146235][T30186] wg1 speed is unknown, defaulting to 1000 [ 794.164379][T30186] wg1 speed is unknown, defaulting to 1000 [ 794.197389][T17386] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 794.213624][T30186] wg1 speed is unknown, defaulting to 1000 [ 794.259218][T30186] wg1 speed is unknown, defaulting to 1000 [ 794.283745][T30186] wg1 speed is unknown, defaulting to 1000 [ 794.309998][T30186] wg1 speed is unknown, defaulting to 1000 [ 794.337307][T30186] wg1 speed is unknown, defaulting to 1000 [ 794.365529][T30186] wg1 speed is unknown, defaulting to 1000 [ 794.508866][T30212] IPv6: RTM_NEWROUTE with no NLM_F_CREATE or NLM_F_REPLACE [ 794.516192][T30212] IPv6: NLM_F_CREATE should be set when creating new route [ 794.586758][T30216] xfrm0: mtu less than device minimum [ 794.628895][T30216] xt_hashlimit: size too large, truncated to 1048576 [ 794.786347][T30237] netlink: 28 bytes leftover after parsing attributes in process `syz.2.6949'. [ 794.807826][T30235] netlink: 'syz.5.6943': attribute type 11 has an invalid length. [ 794.839455][T30240] netlink: 16 bytes leftover after parsing attributes in process `syz.2.6949'. [ 794.872432][T30236] netlink: 16 bytes leftover after parsing attributes in process `syz.2.6949'. [ 794.920480][T30244] netlink: 'syz.1.6950': attribute type 1 has an invalid length. [ 795.002985][T30250] netlink: 72 bytes leftover after parsing attributes in process `syz.1.6950'. [ 795.246677][T17386] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 795.538698][T30280] netlink: 12 bytes leftover after parsing attributes in process `syz.3.6959'. [ 795.548888][T30281] netlink: 12 bytes leftover after parsing attributes in process `syz.3.6959'. [ 795.767278][T30280] bond2: entered promiscuous mode [ 795.788542][T30281] workqueue: Failed to create a rescuer kthread for wq "bond3": -EINTR [ 795.789896][T30288] netlink: 24 bytes leftover after parsing attributes in process `syz.5.6961'. [ 795.953400][ C0] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 796.371347][T30302] bond7: option mode: invalid value (133) [ 796.396030][T30302] bond7 (unregistering): Released all slaves [ 796.525943][T30313] netlink: 28 bytes leftover after parsing attributes in process `syz.3.6968'. [ 796.540861][T30313] netlink: 16 bytes leftover after parsing attributes in process `syz.3.6968'. [ 796.588851][T30314] netlink: 'syz.2.6965': attribute type 1 has an invalid length. [ 796.664198][T30320] IPVS: set_ctl: invalid protocol: 117 172.20.20.170:20000 [ 796.741133][T30314] 8021q: adding VLAN 0 to HW filter on device bond1 [ 797.393584][T27939] net_ratelimit: 4 callbacks suppressed [ 797.393608][T27939] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 797.579721][T30365] syzkaller1: entered promiscuous mode [ 797.604367][T30365] syzkaller1: entered allmulticast mode [ 797.693653][T30381] netlink: 'syz.2.6986': attribute type 1 has an invalid length. [ 797.799036][T30385] xt_hashlimit: size too large, truncated to 1048576 [ 798.435554][T27939] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 799.300863][T30479] __nla_validate_parse: 9 callbacks suppressed [ 799.300883][T30479] netlink: 12 bytes leftover after parsing attributes in process `syz.1.7009'. [ 799.324311][ T5875] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 799.427467][T30479] 8021q: adding VLAN 0 to HW filter on device bond2 [ 799.458361][T30486] macvlan2: entered promiscuous mode [ 799.463838][T30486] macvlan2: entered allmulticast mode [ 799.473931][ T5888] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 799.528693][T30489] netlink: 8 bytes leftover after parsing attributes in process `syz.5.7012'. [ 799.547255][T30489] netlink: 12 bytes leftover after parsing attributes in process `syz.5.7012'. [ 800.144895][T30526] set match dimension is over the limit! [ 800.289181][T27939] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 800.377571][T30543] netlink: 'syz.2.7024': attribute type 1 has an invalid length. [ 800.403102][T30543] netlink: 28 bytes leftover after parsing attributes in process `syz.2.7024'. [ 800.413345][T30543] 8021q: adding VLAN 0 to HW filter on device bond2 [ 800.515780][T27939] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 800.704899][T30553] netlink: 8 bytes leftover after parsing attributes in process `syz.2.7027'. [ 800.907089][T30523] Bluetooth: hci1: Opcode 0x0401 failed: -4 [ 801.181859][T30553] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 801.215754][T30553] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 801.554298][ T5888] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 801.570221][ T9029] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 801.670275][ T9] wg1 speed is unknown, defaulting to 1000 [ 801.670294][T30560] netlink: 32 bytes leftover after parsing attributes in process `syz.1.7030'. [ 801.676851][ T9] syz2: Port: 1 Link DOWN [ 801.693809][T17415] netdevsim netdevsim2 netdevsim0: unset [1, 0] type 2 family 0 port 6081 - 0 [ 801.703222][T17415] netdevsim netdevsim2 netdevsim1: unset [1, 0] type 2 family 0 port 6081 - 0 [ 801.717268][T17415] netdevsim netdevsim2 netdevsim2: unset [1, 0] type 2 family 0 port 6081 - 0 [ 801.727537][T17415] netdevsim netdevsim2 netdevsim3: unset [1, 0] type 2 family 0 port 6081 - 0 [ 801.761303][T30565] netlink: 'syz.1.7031': attribute type 1 has an invalid length. [ 802.058221][T30580] xt_TCPMSS: Only works on TCP SYN packets [ 802.112481][ T5829] Bluetooth: hci1: command 0x0401 tx timeout [ 802.120380][T30581] netlink: 'syz.1.7037': attribute type 1 has an invalid length. [ 802.128533][T30581] netlink: 'syz.1.7037': attribute type 2 has an invalid length. [ 802.592348][ T9] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 802.784837][T30504] nci: __nci_request: wait_for_completion_interruptible_timeout failed -512 [ 802.987657][T30585] netlink: 64 bytes leftover after parsing attributes in process `syz.1.7038'. [ 803.259075][T30602] netlink: 104 bytes leftover after parsing attributes in process `syz.1.7045'. [ 803.306530][T30609] netlink: 'syz.2.7048': attribute type 1 has an invalid length. [ 803.315802][T23899] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 803.422921][T30609] workqueue: Failed to create a rescuer kthread for wq "bond3": -EINTR [ 803.519188][T30625] netlink: 32 bytes leftover after parsing attributes in process `syz.1.7052'. [ 803.634843][T27938] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 803.695012][T30632] netlink: 'syz.4.7055': attribute type 1 has an invalid length. [ 803.779934][T30637] TCP: tcp_parse_options: Illegal window scaling value 150 > 14 received [ 803.841943][T30632] 8021q: adding VLAN 0 to HW filter on device bond2 [ 804.141187][T30655] A link change request failed with some changes committed already. Interface wg2 may have been left with an inconsistent configuration, please check. [ 804.174578][T30652] nbd: must specify an index to disconnect [ 804.186662][T30658] netlink: 8 bytes leftover after parsing attributes in process `syz.3.7066'. [ 804.333482][T30664] netlink: 'syz.1.7068': attribute type 1 has an invalid length. [ 804.366345][T30664] __nla_validate_parse: 1 callbacks suppressed [ 804.366365][T30664] netlink: 224 bytes leftover after parsing attributes in process `syz.1.7068'. [ 804.406569][T30670] netlink: 28 bytes leftover after parsing attributes in process `syz.5.7071'. [ 804.550497][T30674] nbd: couldn't find a device at index 2 [ 804.575546][T30680] netlink: 207952 bytes leftover after parsing attributes in process `syz.2.7073'. [ 804.618264][T30678] netlink: 'syz.1.7075': attribute type 11 has an invalid length. [ 804.654243][T30682] team0 (unregistering): Failed to send port change of device team_slave_0 via netlink (err -105) [ 804.673220][T27938] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 804.678737][T30682] team0 (unregistering): Port device team_slave_0 removed [ 804.700538][T30682] team0 (unregistering): Failed to send options change via netlink (err -105) [ 804.717056][T30682] team0 (unregistering): Failed to send port change of device team_slave_1 via netlink (err -105) [ 804.747658][T30682] team0 (unregistering): Port device team_slave_1 removed [ 804.840243][T30681] netlink: 8 bytes leftover after parsing attributes in process `syz.5.7076'. [ 804.884430][T30681] netlink: 24 bytes leftover after parsing attributes in process `syz.5.7076'. [ 804.935478][T30685] syzkaller0: entered promiscuous mode [ 804.958873][T30685] syzkaller0: entered allmulticast mode [ 805.018365][T30712] netlink: 12 bytes leftover after parsing attributes in process `syz.4.7081'. [ 805.116273][T30712] bond3: entered promiscuous mode [ 805.121896][T30712] 8021q: adding VLAN 0 to HW filter on device bond3 [ 805.264517][T30723] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 805.381486][T30727] netlink: 32 bytes leftover after parsing attributes in process `syz.5.7084'. [ 805.678348][T30743] netlink: 24 bytes leftover after parsing attributes in process `syz.3.7091'. [ 805.682497][T30738] netlink: 512 bytes leftover after parsing attributes in process `syz.2.7089'. [ 805.713561][T27938] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 805.728536][T30743] gre1: entered promiscuous mode [ 805.747157][T30744] tipc: Started in network mode [ 805.752249][T30744] tipc: Node identity 4, cluster identity 4711 [ 805.758630][T30744] tipc: Node number set to 4 [ 805.870775][T30750] netlink: 52 bytes leftover after parsing attributes in process `syz.3.7094'. [ 805.913963][T30750] ipvlan4: entered allmulticast mode [ 805.919431][T30750] syz_tun: entered allmulticast mode [ 806.011956][T30756] Bluetooth: MGMT ver 1.23 [ 806.019217][T30756] Bluetooth: hci1: expected 19 bytes, got 2 bytes [ 806.329680][T30778] ipvlan4: entered promiscuous mode [ 806.352520][T23899] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 806.755269][T27938] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 806.791645][T30799] netlink: 'syz.1.7107': attribute type 51 has an invalid length. [ 807.166658][T30811] bond3: option resend_igmp: invalid value (32767) [ 807.175623][T30811] bond3: option resend_igmp: allowed values 0 - 255 [ 807.221736][T30811] bond3 (unregistering): Released all slaves [ 807.228729][T30815] netlink: 'syz.4.7114': attribute type 1 has an invalid length. [ 807.263375][T30815] netlink: 'syz.4.7114': attribute type 3 has an invalid length. [ 807.530750][T30821] syzkaller1: entered promiscuous mode [ 807.556889][T30821] syzkaller1: entered allmulticast mode [ 807.797381][ T9] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 807.816179][T30845] x_tables: duplicate underflow at hook 2 [ 808.138214][T30869] netlink: 'syz.4.7129': attribute type 21 has an invalid length. [ 808.181262][T30871] syzkaller0: entered promiscuous mode [ 808.191079][T30871] syzkaller0: entered allmulticast mode [ 808.336342][T30876] vlan2: entered promiscuous mode [ 808.341504][T30876] ip6gretap0: entered promiscuous mode [ 808.607319][T30891] can: request_module (can-proto-5) failed. [ 808.730027][T30906] netlink: 'syz.3.7141': attribute type 3 has an invalid length. [ 808.768665][T30906] netlink: 'syz.3.7141': attribute type 1 has an invalid length. [ 808.789534][T30906] netlink: 'syz.3.7141': attribute type 3 has an invalid length. [ 808.808213][T30906] netlink: 'syz.3.7141': attribute type 7 has an invalid length. [ 808.831748][T30906] netlink: 'syz.3.7141': attribute type 8 has an invalid length. [ 808.841575][ T9] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 808.864039][T30906] NCSI netlink: No device for ifindex 131092 [ 808.919214][T30913] pimreg3: entered allmulticast mode [ 809.393883][T23899] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 809.408467][T30935] : renamed from team_slave_1 (while UP) [ 809.874047][T27938] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 809.922659][T30954] bond3: entered promiscuous mode [ 809.944080][T30954] bond3: entered allmulticast mode [ 809.950088][T30954] 8021q: adding VLAN 0 to HW filter on device bond3 [ 810.065696][T30969] netlink: 'syz.2.7159': attribute type 1 has an invalid length. [ 810.190100][T30969] 8021q: adding VLAN 0 to HW filter on device bond3 [ 810.308874][T30969] vlan2: entered promiscuous mode [ 810.319363][T30969] bond3: entered promiscuous mode [ 810.332348][T30969] vlan2: entered allmulticast mode [ 810.342132][T30969] bond3: entered allmulticast mode [ 810.551601][T30996] xt_hashlimit: size too large, truncated to 1048576 [ 810.589890][T30997] xt_hashlimit: size too large, truncated to 1048576 [ 810.598378][T30999] Can not set IPV6_FL_F_REFLECT if flowlabel_consistency sysctl is enable [ 810.654088][T31002] syzkaller0: entered allmulticast mode [ 810.729167][T31002] syzkaller0 (unregistering): left allmulticast mode [ 810.912832][ T9] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 811.155986][T23899] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 811.175400][T31019] __nla_validate_parse: 19 callbacks suppressed [ 811.175422][T31019] netlink: 152 bytes leftover after parsing attributes in process `syz.5.7173'. [ 811.221621][T31019] .`: renamed from bond0 (while UP) [ 811.811897][T31066] netlink: 36 bytes leftover after parsing attributes in process `syz.5.7185'. [ 811.812581][ T1298] ieee802154 phy1 wpan1: encryption failed: -22 [ 811.954070][ T9] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 812.001172][T31080] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 812.435409][T23899] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 812.590547][T31115] netlink: 8 bytes leftover after parsing attributes in process `syz.2.7197'. [ 812.996777][T27938] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 813.013410][T31137] netlink: 12 bytes leftover after parsing attributes in process `syz.4.7199'. [ 813.131407][T31149] validate_nla: 1 callbacks suppressed [ 813.131426][T31149] netlink: 'syz.3.7202': attribute type 12 has an invalid length. [ 813.346483][T31162] netlink: 12 bytes leftover after parsing attributes in process `syz.1.7204'. [ 813.371386][T31162] netlink: 8 bytes leftover after parsing attributes in process `syz.1.7204'. [ 813.443395][T31148] SET target dimension over the limit! [ 813.520471][T31149] bond3: option primary_reselect: invalid value (255) [ 813.544039][T31149] bond3 (unregistering): Released all slaves [ 813.791822][T31176] C: renamed from lo (while UP) [ 813.818162][T31176] A link change request failed with some changes committed already. Interface C may have been left with an inconsistent configuration, please check. [ 814.037221][ T9] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 814.060542][T31187] netlink: 12 bytes leftover after parsing attributes in process `syz.3.7213'. [ 814.157090][T31197] xt_hashlimit: size too large, truncated to 1048576 [ 814.298657][T31199] bridge0: port 1(bridge_slave_0) entered disabled state [ 814.401109][T31199] bridge_slave_0 (unregistering): left allmulticast mode [ 814.440691][T31199] bridge_slave_0 (unregistering): left promiscuous mode [ 814.444388][T31207] netlink: 28 bytes leftover after parsing attributes in process `syz.3.7218'. [ 814.463393][T31199] bridge0: port 1(bridge_slave_0) entered disabled state [ 814.507540][T31207] netlink: 28 bytes leftover after parsing attributes in process `syz.3.7218'. [ 814.615463][T31217] netlink: zone id is out of range [ 814.640075][T31217] netlink: zone id is out of range [ 814.677856][T31213] netlink: set zone limit has 4 unknown bytes [ 814.745625][T31222] netlink: 28 bytes leftover after parsing attributes in process `syz.5.7224'. [ 814.867358][T31228] netlink: 'syz.1.7227': attribute type 8 has an invalid length. [ 814.892362][ C0] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 814.928055][T31228] bond0: entered promiscuous mode [ 814.946314][T31228] gretap0: entered promiscuous mode [ 815.073448][ T9] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 815.217394][T31228] bond0: left promiscuous mode [ 815.231441][T31228] gretap0: left promiscuous mode [ 815.322332][ C0] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 815.462391][ C0] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 815.661958][T31262] syzkaller0: entered promiscuous mode [ 815.680823][T31262] syzkaller0: entered allmulticast mode [ 815.801907][T31271] SET target dimension over the limit! [ 815.996031][T31279] netlink: 'syz.1.7242': attribute type 4 has an invalid length. [ 816.206698][T31287] netlink: 'syz.1.7246': attribute type 11 has an invalid length. [ 816.224954][T31287] __nla_validate_parse: 7 callbacks suppressed [ 816.224973][T31287] netlink: 132 bytes leftover after parsing attributes in process `syz.1.7246'. [ 816.414633][T31297] netlink: 16 bytes leftover after parsing attributes in process `syz.1.7250'. [ 816.599142][T31308] IPVS: Error connecting to the multicast addr [ 816.661488][T31310] netlink: 28 bytes leftover after parsing attributes in process `syz.3.7251'. [ 816.881577][T31321] bridge5: entered promiscuous mode [ 816.909853][T31321] bridge5: entered allmulticast mode [ 816.990832][T31329] bridge0: entered allmulticast mode [ 817.014731][T31329] netlink: 24 bytes leftover after parsing attributes in process `syz.3.7259'. [ 817.024875][T31329] netlink: 24 bytes leftover after parsing attributes in process `syz.3.7259'. [ 817.090130][T31334] netlink: 104 bytes leftover after parsing attributes in process `syz.4.7261'. [ 817.114315][T31336] netlink: 'syz.5.7262': attribute type 1 has an invalid length. [ 817.181472][T31334] netlink: 32 bytes leftover after parsing attributes in process `syz.4.7261'. [ 817.470648][T31353] netlink: 32 bytes leftover after parsing attributes in process `syz.4.7267'. [ 817.515537][T31354] netlink: 32 bytes leftover after parsing attributes in process `syz.4.7267'. [ 817.565815][T31370] netlink: 'syz.4.7267': attribute type 17 has an invalid length. [ 817.584205][T31368] netlink: 'syz.3.7272': attribute type 2 has an invalid length. [ 817.589548][T31370] netlink: 4 bytes leftover after parsing attributes in process `syz.4.7267'. [ 817.623263][T31368] tipc: Started in network mode [ 817.637209][T31368] tipc: Node identity 1340008, cluster identity 4711 [ 817.675614][T31368] tipc: Node number set to 20185096 [ 817.858243][T31380] delete_channel: no stack [ 818.237951][ T12] netdevsim netdevsim2 netdevsim0: set [0, 0] type 1 family 0 port 8472 - 0 [ 818.304732][ T12] netdevsim netdevsim2 netdevsim1: set [0, 0] type 1 family 0 port 8472 - 0 [ 818.318452][T31408] Bluetooth: hci1: expected 19 bytes, got 2 bytes [ 818.337387][ T12] netdevsim netdevsim2 netdevsim2: set [0, 0] type 1 family 0 port 8472 - 0 [ 818.380550][T31409] syzkaller1: entered promiscuous mode [ 818.402237][T31409] syzkaller1: entered allmulticast mode [ 818.426005][ T12] netdevsim netdevsim2 netdevsim3: set [0, 0] type 1 family 0 port 8472 - 0 [ 818.833225][T31442] netlink: 'syz.2.7293': attribute type 5 has an invalid length. [ 818.849173][T31439] netlink: 'syz.3.7292': attribute type 1 has an invalid length. [ 818.935549][T31442] geneve2: entered promiscuous mode [ 818.941099][T31442] geneve2: entered allmulticast mode [ 819.022034][T31441] 8021q: adding VLAN 0 to HW filter on device bond4 [ 819.040730][T31441] bond3: (slave bond4): making interface the new active one [ 819.049541][T31441] bond3: (slave bond4): Enslaving as an active interface with an up link [ 819.071325][ T12] netdevsim netdevsim2 netdevsim0: set [1, 0] type 2 family 0 port 256 - 0 [ 819.158658][ T12] netdevsim netdevsim2 netdevsim1: set [1, 0] type 2 family 0 port 256 - 0 [ 819.275169][T31461] 8021q: adding VLAN 0 to HW filter on device bond7 [ 819.298128][T31461] bond7 (unregistering): Released all slaves [ 819.321772][ T12] netdevsim netdevsim2 netdevsim2: set [1, 0] type 2 family 0 port 256 - 0 [ 819.330830][ T12] netdevsim netdevsim2 netdevsim3: set [1, 0] type 2 family 0 port 256 - 0 [ 819.340333][T31463] batadv_slave_0: entered promiscuous mode [ 819.558801][T31462] batadv_slave_0: left promiscuous mode [ 819.598762][T31482] syzkaller1: entered promiscuous mode [ 819.604930][T31482] syzkaller1: entered allmulticast mode [ 819.622637][ T9] hid (null): global environment stack underflow [ 819.672307][ T9] hid-generic 0005:0458:0004.0002: global environment stack underflow [ 819.681301][ T9] hid-generic 0005:0458:0004.0002: item 0 0 1 11 parsing failed [ 819.689984][ T9] hid-generic 0005:0458:0004.0002: probe with driver hid-generic failed with error -22 [ 820.588160][T31543] netlink: 'syz.4.7320': attribute type 10 has an invalid length. [ 820.760189][T31556] netlink: 'syz.3.7323': attribute type 10 has an invalid length. [ 820.794466][T31556] team0: Device ipvlan1 failed to register rx_handler [ 820.855413][T31555] lo speed is unknown, defaulting to 1000 [ 820.879812][T31555] wg1 speed is unknown, defaulting to 1000 [ 821.452479][T31580] bond4: option resend_igmp: invalid value (32767) [ 821.459652][T31580] bond4: option resend_igmp: allowed values 0 - 255 [ 821.487580][T31580] bond4 (unregistering): Released all slaves [ 821.513477][T31590] net_ratelimit: 4 callbacks suppressed [ 821.513496][T31590] openvswitch: netlink: IP tunnel attribute has 30 unknown bytes. [ 821.555937][T31592] __nla_validate_parse: 9 callbacks suppressed [ 821.555958][T31592] netlink: 4 bytes leftover after parsing attributes in process `syz.2.7335'. [ 821.628566][T31590] bond4: entered promiscuous mode [ 821.640924][T31590] bond4: entered allmulticast mode [ 821.648603][T31590] 8021q: adding VLAN 0 to HW filter on device bond4 [ 822.069290][T31615] netlink: 'syz.2.7339': attribute type 1 has an invalid length. [ 822.163174][T31625] netlink: 12 bytes leftover after parsing attributes in process `syz.5.7343'. [ 822.872755][T31666] netlink: 14 bytes leftover after parsing attributes in process `syz.3.7354'. [ 822.911097][T31666] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 822.929087][T31666] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 822.941428][T31666] bond0 (unregistering): Released all slaves [ 824.512368][T17176] Bluetooth: hci0: command 0x0c1a tx timeout [ 824.512533][ T5829] Bluetooth: hci0: Opcode 0x0c1a failed: -110 [ 825.216712][T31631] nci: __nci_request: wait_for_completion_interruptible_timeout failed -512 [ 825.710238][T31700] netlink: 33 bytes leftover after parsing attributes in process `syz.4.7364'. [ 825.752387][T31703] netlink: 'syz.4.7364': attribute type 1 has an invalid length. [ 825.794139][T31700] netlink: 140 bytes leftover after parsing attributes in process `syz.4.7364'. [ 825.837300][T31703] netlink: 4 bytes leftover after parsing attributes in process `syz.4.7364'. [ 825.894714][T31703] netlink: 'syz.4.7364': attribute type 1 has an invalid length. [ 825.915782][T31703] netlink: 4 bytes leftover after parsing attributes in process `syz.4.7364'. [ 825.983515][T31712] netlink: 20 bytes leftover after parsing attributes in process `syz.2.7366'. [ 825.998817][T31714] xt_physdev: --physdev-out and --physdev-is-out only supported in the FORWARD and POSTROUTING chains with bridged traffic [ 826.033944][T31715] IPVS: set_ctl: invalid protocol: 58 0.0.0.0:20000 [ 826.064276][T31712] netlink: 36 bytes leftover after parsing attributes in process `syz.2.7366'. [ 826.071206][T31715] IPVS: set_ctl: invalid protocol: 58 0.0.0.0:20000 [ 826.094965][T31715] IPVS: set_ctl: invalid protocol: 58 0.0.0.0:20000 [ 826.114315][T31715] IPVS: set_ctl: invalid protocol: 58 0.0.0.0:20000 [ 826.131381][T31715] IPVS: set_ctl: invalid protocol: 58 0.0.0.0:20000 [ 826.144154][T31715] IPVS: set_ctl: invalid protocol: 58 0.0.0.0:20000 [ 826.164786][T31715] IPVS: set_ctl: invalid protocol: 58 0.0.0.0:20000 [ 826.184676][T31715] IPVS: set_ctl: invalid protocol: 58 0.0.0.0:20000 [ 826.205379][T31715] IPVS: set_ctl: invalid protocol: 58 0.0.0.0:20000 [ 826.231372][T31715] IPVS: set_ctl: invalid protocol: 58 0.0.0.0:20000 [ 826.251745][T31715] IPVS: set_ctl: invalid protocol: 58 0.0.0.0:20000 [ 826.274704][T31715] IPVS: set_ctl: invalid protocol: 58 0.0.0.0:20000 [ 826.298642][T31715] IPVS: set_ctl: invalid protocol: 58 0.0.0.0:20000 [ 826.316558][T31715] IPVS: set_ctl: invalid protocol: 58 0.0.0.0:20000 [ 826.329837][T31715] IPVS: set_ctl: invalid protocol: 58 0.0.0.0:20000 [ 826.362542][T31715] IPVS: set_ctl: invalid protocol: 58 0.0.0.0:20000 [ 826.382556][T31715] IPVS: set_ctl: invalid protocol: 58 0.0.0.0:20000 [ 826.390311][T31725] netlink: 32 bytes leftover after parsing attributes in process `syz.2.7370'. [ 826.404179][T31715] IPVS: set_ctl: invalid protocol: 58 0.0.0.0:20000 [ 826.422415][T31715] IPVS: set_ctl: invalid protocol: 58 0.0.0.0:20000 [ 826.445005][T31715] IPVS: set_ctl: invalid protocol: 58 0.0.0.0:20000 [ 826.472378][T31715] IPVS: set_ctl: invalid protocol: 58 0.0.0.0:20000 [ 826.488746][T31715] IPVS: set_ctl: invalid protocol: 58 0.0.0.0:20000 [ 826.508589][T31715] IPVS: set_ctl: invalid protocol: 58 0.0.0.0:20000 [ 826.517777][T31715] IPVS: set_ctl: invalid protocol: 58 0.0.0.0:20000 [ 826.536456][T31715] IPVS: set_ctl: invalid protocol: 58 0.0.0.0:20000 [ 826.550302][T31715] IPVS: set_ctl: invalid protocol: 58 0.0.0.0:20000 [ 826.575662][T31715] IPVS: set_ctl: invalid protocol: 58 0.0.0.0:20000 [ 826.602511][T31715] IPVS: set_ctl: invalid protocol: 58 0.0.0.0:20000 [ 826.620177][T31715] IPVS: set_ctl: invalid protocol: 58 0.0.0.0:20000 [ 826.662685][T31715] IPVS: set_ctl: invalid protocol: 58 0.0.0.0:20000 [ 826.678624][T31715] IPVS: set_ctl: invalid protocol: 58 0.0.0.0:20000 [ 826.688302][T31715] IPVS: set_ctl: invalid protocol: 58 0.0.0.0:20000 [ 826.701470][T31715] IPVS: set_ctl: invalid protocol: 58 0.0.0.0:20000 [ 826.888136][T31752] IPv6: addrconf: prefix option has invalid lifetime [ 827.253425][T31765] ipvlan4: entered promiscuous mode [ 827.349269][T31772] netlink: 'syz.1.7385': attribute type 83 has an invalid length. [ 827.482876][T31781] netdevsim netdevsim5 netdevsim0: entered promiscuous mode [ 827.550979][T31782] __nla_validate_parse: 2 callbacks suppressed [ 827.550997][T31782] netlink: 8 bytes leftover after parsing attributes in process `syz.5.7386'. [ 827.640282][T31781] netlink: 40 bytes leftover after parsing attributes in process `syz.5.7386'. [ 827.727028][ T5829] Bluetooth: hci0: command 0x0c1a tx timeout [ 828.316664][T31806] netlink: 16 bytes leftover after parsing attributes in process `syz.5.7393'. [ 828.458925][T31815] ipvlan5: entered promiscuous mode [ 828.530992][T31819] netlink: 'syz.4.7398': attribute type 1 has an invalid length. [ 828.683624][T31831] netlink: 4 bytes leftover after parsing attributes in process `syz.1.7402'. [ 828.709960][T31819] 8021q: adding VLAN 0 to HW filter on device bond4 [ 828.748948][T31824] bond4: entered allmulticast mode [ 828.814794][T31829] bond4: (slave ip6gretap1): making interface the new active one [ 828.824230][T31829] ip6gretap1: entered allmulticast mode [ 828.840125][T31829] bond4: (slave ip6gretap1): Enslaving as an active interface with an up link [ 828.984235][T31848] netlink: 8 bytes leftover after parsing attributes in process `syz.3.7408'. [ 829.012899][T31848] netlink: 4 bytes leftover after parsing attributes in process `syz.3.7408'. [ 829.099847][T31855] netlink: 12 bytes leftover after parsing attributes in process `syz.3.7410'. [ 829.251073][T31864] syzkaller1: entered promiscuous mode [ 829.257123][T31864] syzkaller1: entered allmulticast mode [ 829.376663][T31871] netlink: 36 bytes leftover after parsing attributes in process `syz.1.7416'. [ 829.782334][T31896] netlink: 'syz.3.7424': attribute type 1 has an invalid length. [ 829.802199][T31896] netlink: 4 bytes leftover after parsing attributes in process `syz.3.7424'. [ 830.133304][T31904] tipc: Enabling of bearer rejected, failed to enable media [ 830.675595][T31934] bridge0: port 1(bridge_slave_0) entered disabled state [ 830.748714][T31934] bridge_slave_0 (unregistering): left allmulticast mode [ 830.763855][T31934] bridge_slave_0 (unregistering): left promiscuous mode [ 830.778102][T31934] bridge0: port 1(bridge_slave_0) entered disabled state [ 830.870819][T31948] netlink: 4 bytes leftover after parsing attributes in process `syz.1.7439'. [ 831.136265][T31960] : entered promiscuous mode [ 831.834546][T32002] ip6t_REJECT: ECHOREPLY is not supported [ 831.970082][T32016] netlink: 'syz.4.7456': attribute type 10 has an invalid length. [ 832.043037][T32026] xt_addrtype: input interface limitation not valid in POSTROUTING and OUTPUT [ 832.056978][T32025] ipt_rpfilter: unknown options [ 832.509081][T32054] veth1_to_bond: entered allmulticast mode [ 832.607319][T32063] __nla_validate_parse: 4 callbacks suppressed [ 832.607340][T32063] netlink: 24 bytes leftover after parsing attributes in process `syz.1.7468'. [ 832.640806][T32062] netlink: 24 bytes leftover after parsing attributes in process `syz.1.7468'. [ 832.662312][T32054] veth1_to_bond: left allmulticast mode [ 832.770923][T32068] vlan2: entered promiscuous mode [ 832.794161][T32068] bridge0: entered promiscuous mode [ 832.894735][T32078] netlink: 4 bytes leftover after parsing attributes in process `syz.4.7473'. [ 833.014756][T32078] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 833.061337][T32078] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 833.117544][T32095] netlink: 28 bytes leftover after parsing attributes in process `syz.3.7477'. [ 833.714426][T32144] netlink: 212356 bytes leftover after parsing attributes in process `syz.2.7485'. [ 833.820183][T32147] netlink: 'syz.3.7487': attribute type 1 has an invalid length. [ 833.830488][T32147] netlink: 476 bytes leftover after parsing attributes in process `syz.3.7487'. [ 833.830907][T32149] netlink: 4 bytes leftover after parsing attributes in process `syz.1.7489'. [ 833.841448][T32147] netlink: 1041 bytes leftover after parsing attributes in process `syz.3.7487'. [ 833.882364][T32152] netlink: 12 bytes leftover after parsing attributes in process `syz.1.7489'. [ 833.990239][T32154] sctp: [Deprecated]: syz.2.7490 (pid 32154) Use of struct sctp_assoc_value in delayed_ack socket option. [ 833.990239][T32154] Use struct sctp_sack_info instead [ 834.024005][T32154] sctp: [Deprecated]: syz.2.7490 (pid 32154) Use of int in max_burst socket option. [ 834.024005][T32154] Use struct sctp_assoc_value instead [ 834.395105][T32166] syzkaller0: entered promiscuous mode [ 834.400867][T32166] syzkaller0: entered allmulticast mode [ 834.410936][T32171] netlink: 8 bytes leftover after parsing attributes in process `syz.2.7497'. [ 835.086668][T32210] bond7: option arp_all_targets: invalid value (18446744073709551613) [ 835.154193][T32210] bond7 (unregistering): Released all slaves [ 835.734494][T32263] netlink: 'syz.4.7522': attribute type 2 has an invalid length. [ 835.771886][T32263] netlink: 'syz.4.7522': attribute type 1 has an invalid length. [ 835.790562][T32266] netlink: 'syz.2.7524': attribute type 1 has an invalid length. [ 835.883860][T32266] bond5: entered promiscuous mode [ 835.889865][T32266] 8021q: adding VLAN 0 to HW filter on device bond5 [ 836.011750][T32273] mac80211_hwsim hwsim78 syzkaller0: entered promiscuous mode [ 836.050028][T32273] mac80211_hwsim hwsim78 syzkaller0: entered allmulticast mode [ 836.114217][T32266] 8021q: adding VLAN 0 to HW filter on device bond5 [ 836.130077][T32266] bond5: (slave ip6gre2): The slave device specified does not support setting the MAC address [ 836.142395][T32266] bond5: (slave ip6gre2): Setting fail_over_mac to active for active-backup mode [ 836.166148][T32266] bond5: (slave ip6gre2): making interface the new active one [ 836.186406][T32266] ip6gre2: entered promiscuous mode [ 836.204992][T32266] bond5: (slave ip6gre2): Enslaving as an active interface with an up link [ 836.591979][T32306] netlink: 'syz.2.7536': attribute type 24 has an invalid length. [ 836.690022][T32312] netlink: 'syz.4.7539': attribute type 1 has an invalid length. [ 836.715872][T32312] netlink: 'syz.4.7539': attribute type 3 has an invalid length. [ 836.933542][T32324] netlink: 'syz.1.7543': attribute type 11 has an invalid length. [ 837.049161][ T1090] netdevsim netdevsim3 netdevsim0: unset [0, 0] type 1 family 0 port 8472 - 0 [ 837.060136][ T1090] netdevsim netdevsim3 netdevsim0: unset [1, 0] type 2 family 0 port 6081 - 0 [ 837.139323][T32333] bond5: option arp_validate: mode dependency failed, not supported in mode balance-alb(6) [ 837.447269][T32342] netlink: 'syz.5.7549': attribute type 39 has an invalid length. [ 837.473655][T32333] bond5 (unregistering): Released all slaves [ 837.635702][T32345] netlink: 'syz.2.7550': attribute type 1 has an invalid length. [ 837.645788][T32345] __nla_validate_parse: 14 callbacks suppressed [ 837.645808][T32345] netlink: 88 bytes leftover after parsing attributes in process `syz.2.7550'. [ 837.690582][T32346] netlink: 8 bytes leftover after parsing attributes in process `syz.2.7550'. [ 837.691981][T32341] syzkaller0: entered promiscuous mode [ 837.713809][T32341] syzkaller0: entered allmulticast mode [ 837.732236][T32346] netlink: 12 bytes leftover after parsing attributes in process `syz.2.7550'. [ 837.774304][T32345] netlink: 1 bytes leftover after parsing attributes in process `syz.2.7550'. [ 837.832202][T32345] netlink: 'syz.2.7550': attribute type 1 has an invalid length. [ 837.844435][T32345] netlink: 634 bytes leftover after parsing attributes in process `syz.2.7550'. [ 837.858275][T32353] netlink: 76 bytes leftover after parsing attributes in process `syz.3.7553'. [ 837.959227][ T48] tipc: Subscription rejected, illegal request [ 838.251667][T32377] netlink: 'syz.4.7560': attribute type 32 has an invalid length. [ 838.274150][T32377] netlink: 8 bytes leftover after parsing attributes in process `syz.4.7560'. [ 838.349866][T32377] bond5: option coupled_control: invalid value (192) [ 838.370264][T32377] bond5 (unregistering): Released all slaves [ 838.549997][T32393] netlink: 12 bytes leftover after parsing attributes in process `syz.3.7564'. [ 838.777555][T32412] sctp: [Deprecated]: syz.3.7570 (pid 32412) Use of int in max_burst socket option deprecated. [ 838.777555][T32412] Use struct sctp_assoc_value instead [ 838.877019][T32423] nbd: must specify a device to reconfigure [ 838.919607][T32424] netlink: 12 bytes leftover after parsing attributes in process `syz.1.7572'. [ 839.064909][T32431] netlink: 16 bytes leftover after parsing attributes in process `syz.1.7572'. [ 839.283768][T32443] netlink: 'syz.3.7578': attribute type 1 has an invalid length. [ 839.302893][T32443] netlink: 'syz.3.7578': attribute type 1 has an invalid length. [ 839.331903][T32443] netlink: 'syz.3.7578': attribute type 2 has an invalid length. [ 839.368320][T32443] netlink: 'syz.3.7578': attribute type 1 has an invalid length. [ 839.399130][T32443] netlink: 'syz.3.7578': attribute type 2 has an invalid length. [ 839.445034][T32456] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check. [ 839.828738][T32479] xt_hashlimit: max too large, truncated to 1048576 [ 839.840655][T32474] xt_hashlimit: max too large, truncated to 1048576 [ 840.239015][T32500] netlink: 'syz.3.7596': attribute type 5 has an invalid length. [ 840.256978][T32498] x_tables: unsorted entry at hook 3 [ 840.301758][T32508] xt_l2tp: missing protocol rule (udp|l2tpip) [ 840.336969][T32509] syzkaller0: entered promiscuous mode [ 840.346187][T32509] syzkaller0: entered allmulticast mode [ 840.675345][T32529] input: Bluetooth HID Boot Protocol Device as /devices/virtual/bluetooth/hci0/hci0:200/input6 [ 840.723858][T32536] openvswitch: netlink: VXLAN extension 78 out of range max 1 [ 840.964328][T32546] bond6: entered promiscuous mode [ 840.988462][T32546] 8021q: adding VLAN 0 to HW filter on device bond6 [ 841.019784][T32554] 8021q: adding VLAN 0 to HW filter on device bond6 [ 841.043078][T32554] bond6: (slave ip6gre3): The slave device specified does not support setting the MAC address [ 841.080127][T32554] bond6: (slave ip6gre3): Setting fail_over_mac to active for active-backup mode [ 841.134993][T32554] bond6: (slave ip6gre3): making interface the new active one [ 841.143585][T32554] ip6gre3: entered promiscuous mode [ 841.151374][T32554] bond6: (slave ip6gre3): Enslaving as an active interface with an up link [ 841.435390][T32581] sctp: [Deprecated]: syz.2.7620 (pid 32581) Use of int in max_burst socket option. [ 841.435390][T32581] Use struct sctp_assoc_value instead [ 841.930863][T32610] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 841.985149][T32610] veth0: entered promiscuous mode [ 842.031417][T32609] veth0: left promiscuous mode [ 842.237278][ T30] audit: type=1800 audit(1776311225.214:4): pid=32623 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="syz.2.7634" name="memory.events" dev="tmpfs" ino=1347 res=0 errno=0 [ 842.285213][T32637] syzkaller1: entered promiscuous mode [ 842.339972][T32637] syzkaller1: entered allmulticast mode [ 842.889597][T32664] gretap1: entered promiscuous mode [ 842.896758][T32664] batman_adv: batadv0: Adding interface: gretap1 [ 842.903583][T32664] batman_adv: batadv0: The MTU of interface gretap1 is too small (1462) to handle the transport of batman-adv packets. If you experience problems getting traffic through try increasing the MTU to 1532. [ 842.926689][T32664] batman_adv: batadv0: Not using interface gretap1 (retrying later): interface not active [ 842.976520][T32622] Bluetooth: hci5: Opcode 0x0c1a failed: -4 [ 842.995226][T32622] Bluetooth: hci5: Error when powering off device on rfkill (-4) [ 843.133424][T32685] validate_nla: 1 callbacks suppressed [ 843.133441][T32685] netlink: 'syz.1.7648': attribute type 6 has an invalid length. [ 843.189738][T32622] Bluetooth: hci4: Opcode 0x0c1a failed: -4 [ 843.211461][T32622] Bluetooth: hci4: Error when powering off device on rfkill (-4) [ 843.326187][T32690] __nla_validate_parse: 11 callbacks suppressed [ 843.326207][T32690] netlink: 20 bytes leftover after parsing attributes in process `syz.1.7649'. [ 843.344703][T32622] Bluetooth: hci1: Opcode 0x0c1a failed: -4 [ 843.357833][T32622] Bluetooth: hci1: Error when powering off device on rfkill (-4) [ 843.550934][T32696] netlink: 'syz.1.7650': attribute type 9 has an invalid length. [ 843.563943][T32622] Bluetooth: hci0: Opcode 0x0c1a failed: -4 [ 843.584092][T32622] Bluetooth: hci0: Error when powering off device on rfkill (-4) [ 843.787711][T32698] workqueue: Failed to create a rescuer kthread for wq "nfc4_nci_rx_wq": -EINTR [ 844.590624][T32744] ieee802154 phy1 wpan1: encryption failed: -22 [ 844.911440][T32763] ip6erspan1: entered allmulticast mode [ 844.943832][T32766] netlink: 'syz.5.7664': attribute type 1 has an invalid length. [ 844.951801][T32765] netlink: 4768 bytes leftover after parsing attributes in process `syz.1.7666'. [ 844.976745][T32765] netlink: 4768 bytes leftover after parsing attributes in process `syz.1.7666'. [ 844.988099][T32766] netlink: 'syz.5.7664': attribute type 2 has an invalid length. [ 845.160000][ T306] netlink: 'syz.3.7668': attribute type 1 has an invalid length. [ 845.373254][ T316] netlink: 16 bytes leftover after parsing attributes in process `syz.1.7671'. [ 845.397047][ T316] netlink: 16 bytes leftover after parsing attributes in process `syz.1.7671'. [ 845.423128][ T319] bond0: option ad_select: unable to set because the bond device is up [ 845.475257][ T319] netlink: 220 bytes leftover after parsing attributes in process `syz.4.7672'. [ 845.914142][ T341] netlink: 12 bytes leftover after parsing attributes in process `syz.3.7675'. [ 846.135934][ T331] 8021q: adding VLAN 0 to HW filter on device bond0 [ 846.187369][ T331] bridge0: port 1(bond0) entered blocking state [ 846.216505][ T331] bridge0: port 1(bond0) entered disabled state [ 846.234363][ T331] bond0: entered allmulticast mode [ 846.245349][ T347] netlink: 'syz.5.7676': attribute type 2 has an invalid length. [ 846.254388][ T331] bond0: entered promiscuous mode [ 846.273680][ T331] bridge0: port 1(bond0) entered blocking state [ 846.280302][ T331] bridge0: port 1(bond0) entered forwarding state [ 846.351638][ T341] ipvlan5: entered allmulticast mode [ 846.397008][ T342] syzkaller0: entered promiscuous mode [ 846.403813][ T342] syzkaller0: entered allmulticast mode [ 846.425694][ T347] v: entered promiscuous mode [ 846.621525][ T4319] bridge0: port 1(bond0) entered disabled state [ 846.916079][ T386] netlink: 64 bytes leftover after parsing attributes in process `syz.4.7685'. [ 846.947135][ T386] netlink: 64 bytes leftover after parsing attributes in process `syz.4.7685'. [ 847.077766][ T391] netlink: 36 bytes leftover after parsing attributes in process `syz.2.7687'. [ 847.151821][ T404] xt_l2tp: v2 doesn't support IP mode [ 847.219623][ T404] netlink: 'syz.4.7690': attribute type 4 has an invalid length. [ 847.598694][ T428] ipvlan4: entered promiscuous mode [ 847.637754][ T434] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check. [ 847.639521][ T430] netlink: 'syz.5.7697': attribute type 1 has an invalid length. [ 847.728412][ T430] bond7: entered promiscuous mode [ 847.749492][ T430] 8021q: adding VLAN 0 to HW filter on device bond7 [ 847.792220][ T446] bond7: (slave bridge6): making interface the new active one [ 847.799837][ T446] bridge6: entered promiscuous mode [ 847.808013][ T446] bond7: (slave bridge6): Enslaving as an active interface with an up link [ 847.895102][ T450] Cannot find add_set index 0 as target [ 848.096066][ T464] netlink: 'syz.3.7707': attribute type 1 has an invalid length. [ 848.115696][ T451] syzkaller1: entered promiscuous mode [ 848.123148][ T464] netlink: 'syz.3.7707': attribute type 3 has an invalid length. [ 848.130968][ T451] syzkaller1: entered allmulticast mode [ 848.165038][ T466] netlink: 'syz.2.7708': attribute type 1 has an invalid length. [ 848.283121][ T473] ipvlan5: entered promiscuous mode [ 848.385827][ T477] __nla_validate_parse: 4 callbacks suppressed [ 848.385845][ T477] netlink: 40 bytes leftover after parsing attributes in process `syz.1.7714'. [ 848.425376][ T482] netlink: 40 bytes leftover after parsing attributes in process `syz.1.7714'. [ 848.450066][ T484] netlink: 72 bytes leftover after parsing attributes in process `syz.4.7715'. [ 848.559183][ T490] xt_l2tp: v2 doesn't support IP mode [ 848.609744][ T490] netlink: 212368 bytes leftover after parsing attributes in process `syz.2.7716'. [ 848.630252][ T492] netlink: 212368 bytes leftover after parsing attributes in process `syz.2.7716'. [ 848.749650][ T499] sock: sock_timestamping_bind_phc: sock not bind to device [ 848.991156][ T513] syzkaller0: entered promiscuous mode [ 849.015108][ T513] syzkaller0: entered allmulticast mode [ 849.595881][ T557] netlink: 12 bytes leftover after parsing attributes in process `syz.2.7733'. [ 849.634077][ T554] netlink: 12 bytes leftover after parsing attributes in process `syz.2.7733'. [ 849.677549][ T557] netlink: 4 bytes leftover after parsing attributes in process `syz.2.7733'. [ 849.990640][ T578] netlink: 28 bytes leftover after parsing attributes in process `syz.4.7741'. [ 850.000245][ T580] netlink: 12 bytes leftover after parsing attributes in process `syz.1.7740'. [ 850.925667][ T625] xt_ipcomp: unknown flags 1D [ 850.989632][ T626] vlan3: entered promiscuous mode [ 851.025021][ T626] gretap0: entered promiscuous mode [ 851.088436][ T629] ipvlan5: entered promiscuous mode [ 851.293550][ T640] mac80211_hwsim hwsim78 syzkaller0: left promiscuous mode [ 851.300857][ T640] mac80211_hwsim hwsim78 syzkaller0: left allmulticast mode [ 851.578270][ T660] macvlan1: entered promiscuous mode [ 851.654340][ T664] x_tables: duplicate underflow at hook 2 [ 851.667798][ T666] openvswitch: netlink: ERSPAN option length err (len 256, max 255). [ 851.862777][ T677] ipvlan6: entered promiscuous mode [ 851.946795][ T684] netlink: 'syz.1.7777': attribute type 39 has an invalid length. [ 852.121835][ T693] ipvlan6: entered promiscuous mode [ 852.328138][ T697] netlink: 'syz.3.7782': attribute type 39 has an invalid length. [ 852.603247][ T719] bridge2: trying to set multicast startup query interval below minimum, setting to 100 (1000ms) [ 852.664573][ T715] batman_adv: Cannot find parent device. Skipping batadv-on-batadv check for gretap1 [ 852.716377][ T715] gretap1: default qdisc (pfifo_fast) fail, fallback to noqueue [ 852.748437][ T715] gretap1: entered promiscuous mode [ 852.765220][ T715] gretap1: entered allmulticast mode [ 853.067150][ T741] tipc: New replicast peer: fe80:0000:0000:0000:0000:0000:0000:00bb [ 853.086325][ T741] tipc: Enabled bearer , priority 10 [ 853.093579][ T738] pim6reg1: entered promiscuous mode [ 853.100592][ T738] pim6reg1: entered allmulticast mode [ 853.209661][ T744] lo speed is unknown, defaulting to 1000 [ 853.253536][ T744] wg1 speed is unknown, defaulting to 1000 [ 853.558780][ T764] __nla_validate_parse: 17 callbacks suppressed [ 853.558802][ T764] netlink: 48 bytes leftover after parsing attributes in process `syz.5.7801'. [ 854.194981][ T798] block nbd6: Unsupported socket: should be TCP or UNIX. [ 854.490178][ T805] netlink: 43 bytes leftover after parsing attributes in process `syz.3.7814'. [ 854.695474][ T821] openvswitch: netlink: Unexpected mask (mask=840, allowed=10048) [ 854.816865][ T828] x_tables: ip_tables: owner match: used from hooks PREROUTING, but only valid from OUTPUT/POSTROUTING [ 854.872008][ T830] netlink: 'syz.5.7822': attribute type 1 has an invalid length. [ 854.910222][ T830] netlink: 236 bytes leftover after parsing attributes in process `syz.5.7822'. [ 855.261275][ T851] netlink: 4 bytes leftover after parsing attributes in process `syz.2.7830'. [ 855.298502][ T851] netlink: 4 bytes leftover after parsing attributes in process `syz.2.7830'. [ 855.387807][ T848] netlink: 4 bytes leftover after parsing attributes in process `syz.2.7830'. [ 855.426730][ T854] netlink: 24 bytes leftover after parsing attributes in process `syz.1.7831'. [ 855.438314][ T851] netlink: 4 bytes leftover after parsing attributes in process `syz.2.7830'. [ 855.866571][ T860] pim6reg1: entered promiscuous mode [ 855.953927][ T860] pim6reg1: entered allmulticast mode [ 856.556645][ T886] netlink: 12 bytes leftover after parsing attributes in process `syz.1.7838'. [ 856.797481][ T891] netlink: 8 bytes leftover after parsing attributes in process `syz.5.7840'. [ 857.063949][ T908] xt_hashlimit: size too large, truncated to 1048576 [ 857.131527][ T912] netlink: 'syz.1.7846': attribute type 11 has an invalid length. [ 857.470471][ T927] tc_dump_action: action bad kind [ 857.658905][ T956] netlink: 'syz.2.7856': attribute type 5 has an invalid length. [ 857.729678][ T958] pimreg: entered allmulticast mode [ 857.865347][ T958] bond5: option ad_actor_sys_prio: mode dependency failed, not supported in mode balance-rr(0) [ 857.941162][ T958] bond5 (unregistering): Released all slaves [ 858.338678][ T995] : renamed from bond_slave_0 (while UP) [ 858.669223][ T1009] netlink: 'syz.4.7871': attribute type 5 has an invalid length. [ 858.877725][ T1031] netlink: 'syz.4.7878': attribute type 4 has an invalid length. [ 858.903878][ T1031] batadv_slave_0: entered promiscuous mode [ 859.025109][ T1042] bond5: (slave lo): enslaved VLAN challenged slave. Adding VLANs will be blocked as long as it is part of bond. [ 859.118794][ T1042] bond5: (slave lo): Enslaving as an active interface with an up link [ 859.166568][ T1042] A link change request failed with some changes committed already. Interface tunl0 may have been left with an inconsistent configuration, please check. [ 859.171953][ T1049] __nla_validate_parse: 7 callbacks suppressed [ 859.171973][ T1049] netlink: 12 bytes leftover after parsing attributes in process `syz.3.7879'. [ 859.241269][ T1033] batadv_slave_0: left promiscuous mode [ 859.633825][ T1075] netlink: 24 bytes leftover after parsing attributes in process `syz.4.7885'. [ 859.893709][ T1094] netlink: 20 bytes leftover after parsing attributes in process `syz.3.7889'. [ 859.930056][ T1094] netlink: 'syz.3.7889': attribute type 15 has an invalid length. [ 860.329404][ T1125] FAULT_INJECTION: forcing a failure. [ 860.329404][ T1125] name failslab, interval 1, probability 0, space 0, times 0 [ 860.349955][ T1125] CPU: 0 UID: 0 PID: 1125 Comm: syz.1.7899 Not tainted syzkaller #0 PREEMPT(full) [ 860.349983][ T1125] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 03/18/2026 [ 860.349995][ T1125] Call Trace: [ 860.350004][ T1125] [ 860.350012][ T1125] dump_stack_lvl+0xe8/0x150 [ 860.350047][ T1125] should_fail_ex+0x412/0x560 [ 860.350080][ T1125] should_failslab+0xa8/0x100 [ 860.350103][ T1125] __kvmalloc_node_noprof+0x178/0x8a0 [ 860.350122][ T1125] ? xt_alloc_table_info+0x40/0xb0 [ 860.350353][ T1125] xt_alloc_table_info+0x40/0xb0 [ 860.350371][ T1125] do_ipt_set_ctl+0x903/0xe00 [ 860.350422][ T1125] ? rcu_is_watching+0x15/0xb0 [ 860.350454][ T1125] ? trace_contention_end+0x3d/0x140 [ 860.350473][ T1125] ? __pfx_do_ipt_set_ctl+0x10/0x10 [ 860.350506][ T1125] ? __pfx_do_ip_setsockopt+0x10/0x10 [ 860.350542][ T1125] ? __pfx___mutex_lock+0x10/0x10 [ 860.350569][ T1125] ? __pfx___mutex_unlock_slowpath+0x10/0x10 [ 860.350597][ T1125] ? __pfx_aa_sk_perm+0x10/0x10 [ 860.350629][ T1125] nf_setsockopt+0x26f/0x290 [ 860.350659][ T1125] ? __pfx_sock_common_setsockopt+0x10/0x10 [ 860.350685][ T1125] do_sock_setsockopt+0x17c/0x1b0 [ 860.350715][ T1125] __x64_sys_setsockopt+0x13d/0x1b0 [ 860.350742][ T1125] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 860.350764][ T1125] do_syscall_64+0x15f/0xf80 [ 860.350784][ T1125] ? trace_irq_disable+0x3b/0x140 [ 860.350805][ T1125] ? clear_bhb_loop+0x40/0x90 [ 860.350826][ T1125] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 860.350843][ T1125] RIP: 0033:0x7fda4a39c819 [ 860.350859][ T1125] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 860.350875][ T1125] RSP: 002b:00007fda4b2a9028 EFLAGS: 00000246 ORIG_RAX: 0000000000000036 [ 860.350896][ T1125] RAX: ffffffffffffffda RBX: 00007fda4a615fa0 RCX: 00007fda4a39c819 [ 860.350909][ T1125] RDX: 0000000000000040 RSI: 0004000000000000 RDI: 0000000000000003 [ 860.350921][ T1125] RBP: 00007fda4b2a9090 R08: 0000000000000310 R09: 0000000000000000 [ 860.350932][ T1125] R10: 00002000000004c0 R11: 0000000000000246 R12: 0000000000000001 [ 860.350944][ T1125] R13: 00007fda4a616038 R14: 00007fda4a615fa0 R15: 00007ffd32add178 [ 860.350973][ T1125] [ 860.719290][ T1133] netlink: 40 bytes leftover after parsing attributes in process `syz.3.7903'. [ 860.841328][ T1145] netlink: 16 bytes leftover after parsing attributes in process `syz.4.7902'. [ 861.160792][ T1156] netlink: 40 bytes leftover after parsing attributes in process `syz.5.7909'. [ 861.203634][ T1159] netlink: 'syz.2.7910': attribute type 4 has an invalid length. [ 861.514244][ T1181] netlink: 12 bytes leftover after parsing attributes in process `syz.3.7917'. [ 861.686145][ T1187] netlink: 'syz.2.7918': attribute type 2 has an invalid length. [ 862.023025][ T1215] netlink: 8 bytes leftover after parsing attributes in process `syz.1.7927'. [ 862.082516][ T1211] netlink: 20 bytes leftover after parsing attributes in process `syz.1.7927'. [ 862.281400][ T1229] syzkaller1: entered promiscuous mode [ 862.302182][ T1229] syzkaller1: entered allmulticast mode [ 862.551572][ T1244] netlink: 8 bytes leftover after parsing attributes in process `syz.1.7937'. [ 863.066741][ T1278] syzkaller0: entered promiscuous mode [ 863.091272][ T1278] syzkaller0: entered allmulticast mode [ 863.169396][ T1285] xt_hashlimit: size too large, truncated to 1048576 [ 863.234302][ T1287] : renamed from vxcan1 [ 863.438829][ T1306] syzkaller0: entered promiscuous mode [ 863.446723][ T1306] syzkaller0: entered allmulticast mode [ 863.709654][ T1321] netlink: 'syz.4.7957': attribute type 4 has an invalid length. [ 863.987068][ T1328] netlink: 'syz.4.7959': attribute type 21 has an invalid length. [ 863.995290][ T1328] netlink: 'syz.4.7959': attribute type 6 has an invalid length. [ 864.592479][ T1355] __nla_validate_parse: 7 callbacks suppressed [ 864.592499][ T1355] netlink: 8 bytes leftover after parsing attributes in process `syz.5.7965'. [ 864.823532][ T1365] syzkaller0: entered promiscuous mode [ 864.838989][ T1365] syzkaller0: entered allmulticast mode [ 865.181447][ T1373] syzkaller0: entered promiscuous mode [ 865.208261][ T1373] syzkaller0: entered allmulticast mode [ 865.808471][ T1406] netlink: 4 bytes leftover after parsing attributes in process `syz.2.7977'. [ 865.822158][ T1407] netlink: 24 bytes leftover after parsing attributes in process `syz.1.7978'. [ 866.099417][ T1420] netlink: 'syz.4.7982': attribute type 10 has an invalid length. [ 868.721814][ T1411] veth0: entered promiscuous mode [ 868.730621][ T1417] veth0: left promiscuous mode [ 868.898931][ T1437] netlink: 16 bytes leftover after parsing attributes in process `syz.2.7987'. [ 868.927943][ T1437] netlink: 6 bytes leftover after parsing attributes in process `syz.2.7987'. [ 869.003389][ T1440] syzkaller0: entered promiscuous mode [ 869.038910][ T1440] syzkaller0: entered allmulticast mode [ 869.088126][ T1451] netlink: 4 bytes leftover after parsing attributes in process `syz.4.7989'. [ 869.114163][ T1452] netlink: 212408 bytes leftover after parsing attributes in process `syz.5.7988'. [ 869.278569][ T1461] netlink: 'syz.1.7986': attribute type 1 has an invalid length. [ 869.301906][ T1461] netlink: 224 bytes leftover after parsing attributes in process `syz.1.7986'. [ 869.497313][ T1472] netlink: 'syz.2.7999': attribute type 1 has an invalid length. [ 869.511147][ T1472] netlink: 224 bytes leftover after parsing attributes in process `syz.2.7999'. [ 869.726057][ T1482] netlink: 60 bytes leftover after parsing attributes in process `syz.5.8001'. [ 869.792574][ T1482] netlink: 4 bytes leftover after parsing attributes in process `syz.5.8001'. [ 869.864426][ T1483] netlink: 60 bytes leftover after parsing attributes in process `syz.5.8001'. [ 870.160860][ T1501] ipt_rpfilter: unknown options [ 870.468042][ T1517] netlink: 16 bytes leftover after parsing attributes in process `syz.4.8012'. [ 870.961917][ T1543] netlink: 72 bytes leftover after parsing attributes in process `syz.4.8020'. [ 871.296281][ T1559] openvswitch: netlink: Message has 8 unknown bytes. [ 871.318901][ T1559] netlink: 'syz.1.8026': attribute type 3 has an invalid length. [ 871.433980][ T1565] xt_hashlimit: size too large, truncated to 1048576 [ 871.754622][ T1578] IPVS: length: 239 != 24 [ 872.198397][ T1594] netlink: 8 bytes leftover after parsing attributes in process `syz.2.8037'. [ 872.220193][ T1597] workqueue: Failed to create a rescuer kthread for wq "nfc2_nci_rx_wq": -EINTR [ 872.224312][ T1594] netlink: 4 bytes leftover after parsing attributes in process `syz.2.8037'. [ 872.298934][ T1594] netlink: 'syz.2.8037': attribute type 15 has an invalid length. [ 872.444782][ T1610] 8021q: VLANs not supported on lo [ 872.783390][ T1618] bond6: entered promiscuous mode [ 873.060641][ T1646] netlink: 4 bytes leftover after parsing attributes in process `syz.2.8050'. [ 873.253913][ T1654] netlink: 28 bytes leftover after parsing attributes in process `syz.5.8052'. [ 873.293276][ T1654] netlink: 28 bytes leftover after parsing attributes in process `syz.5.8052'. [ 873.773296][ T1685] ipvlan5: entered promiscuous mode [ 874.069751][ T1699] syzkaller0: entered promiscuous mode [ 874.093074][ T1699] syzkaller0: entered allmulticast mode [ 874.301006][ T1709] bond7: (slave bond_slave_1): Device is not our slave [ 874.337753][ T1709] bond7: option active_slave: invalid value (bond_slave_1) [ 874.409227][ T1709] bond7 (unregistering): Released all slaves [ 874.679119][ T1728] ipvlan6: entered promiscuous mode [ 874.840150][ T1737] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 874.982491][ T1745] netlink: 'syz.4.8083': attribute type 39 has an invalid length. [ 875.069751][ T1751] __nla_validate_parse: 4 callbacks suppressed [ 875.069769][ T1751] netlink: 8 bytes leftover after parsing attributes in process `syz.2.8084'. [ 875.108943][ T1751] netlink: 24 bytes leftover after parsing attributes in process `syz.2.8084'. [ 875.165019][ T1756] netlink: 'syz.5.8086': attribute type 2 has an invalid length. [ 875.202665][ T1756] macvtap1: entered promiscuous mode [ 875.237566][ T1756] macvtap1: entered allmulticast mode [ 875.263027][ T1756] veth1_vlan: entered allmulticast mode [ 875.347035][ T1765] ipvlan3: entered promiscuous mode [ 875.502377][ T1767] syzkaller0: entered promiscuous mode [ 875.521566][ T1767] syzkaller0: entered allmulticast mode [ 875.536834][ T1775] netlink: 'syz.2.8093': attribute type 3 has an invalid length. [ 875.552522][ T1775] netlink: 32 bytes leftover after parsing attributes in process `syz.2.8093'. [ 875.640317][ T1775] bond6: entered allmulticast mode [ 875.651504][ T1775] ip6gre3: entered allmulticast mode [ 875.676522][ T1773] bond6: left allmulticast mode [ 875.713485][ T1773] ip6gre3: left allmulticast mode [ 875.832765][ T1788] netlink: 80 bytes leftover after parsing attributes in process `syz.4.8095'. [ 876.132819][ T1813] nbd: must specify at least one socket [ 876.153117][ T1813] nbd: couldn't find device at index 5 [ 876.298980][ T1820] netlink: 'syz.2.8105': attribute type 4 has an invalid length. [ 876.307425][ T1822] dvmrp0: entered allmulticast mode [ 876.318792][ T1813] netlink: 4 bytes leftover after parsing attributes in process `syz.5.8102'. [ 876.335090][ T1820] netlink: 'syz.2.8105': attribute type 4 has an invalid length. [ 876.538236][ T1831] netlink: 72 bytes leftover after parsing attributes in process `syz.4.8108'. [ 876.661316][ T1839] netlink: 64 bytes leftover after parsing attributes in process `syz.4.8108'. [ 876.801359][ T1840] netlink: 'syz.1.8110': attribute type 4 has an invalid length. [ 876.855134][ T1849] netlink: 'syz.1.8110': attribute type 4 has an invalid length. [ 877.099900][ T1864] netlink: 'syz.3.8115': attribute type 1 has an invalid length. [ 877.124455][ T1864] netlink: 'syz.3.8115': attribute type 2 has an invalid length. [ 877.141305][ T1864] netlink: 'syz.3.8115': attribute type 1 has an invalid length. [ 877.151917][ T1871] netlink: 'syz.4.8118': attribute type 1 has an invalid length. [ 877.169671][ T1862] netlink: 185584 bytes leftover after parsing attributes in process `syz.3.8115'. [ 877.180046][ T1863] netlink: 185584 bytes leftover after parsing attributes in process `syz.3.8115'. [ 877.191251][ T1868] bond7 (unregistering): Released all slaves [ 877.193925][ T1863] openvswitch: netlink: Key 2 has unexpected len 5 expected 4 [ 877.209281][ T1862] openvswitch: netlink: Key 2 has unexpected len 5 expected 4 [ 877.341838][ T1871] 8021q: adding VLAN 0 to HW filter on device bond5 [ 877.371041][ T1874] bond5: entered promiscuous mode [ 877.386015][ T1874] bond5: entered allmulticast mode [ 877.391407][ T1881] netlink: 8 bytes leftover after parsing attributes in process `syz.2.8120'. [ 877.415492][ T1876] bond5: (slave ip6gretap2): making interface the new active one [ 877.423797][ T1876] ip6gretap2: entered promiscuous mode [ 877.429424][ T1876] ip6gretap2: entered allmulticast mode [ 877.443639][ T1876] bond5: (slave ip6gretap2): Enslaving as an active interface with an up link [ 877.455713][ T1884] xt_hashlimit: size too large, truncated to 1048576 [ 877.464705][ T1879] syzkaller0: entered promiscuous mode [ 877.482401][ T1879] syzkaller0: entered allmulticast mode [ 877.558003][ T1878] x_tables: ip_tables: ah match: only valid for protocol 51 [ 877.769013][ T1898] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 878.096630][ T1908] bridge0: port 2(bridge_slave_1) entered disabled state [ 878.104151][ T1908] bridge0: port 1(bridge_slave_0) entered disabled state [ 878.335808][ T1915] netlink: 'syz.3.8129': attribute type 2 has an invalid length. [ 878.391523][T17176] Bluetooth: hci2: unexpected cc 0x0c03 length: 249 > 1 [ 878.419096][T17176] Bluetooth: hci2: unexpected cc 0x1003 length: 249 > 9 [ 878.431520][T17176] Bluetooth: hci2: unexpected cc 0x1001 length: 249 > 9 [ 878.440148][T17176] Bluetooth: hci2: unexpected cc 0x0c23 length: 249 > 4 [ 878.452568][T17176] Bluetooth: hci2: unexpected cc 0x0c38 length: 249 > 2 [ 878.519837][ T5829] Bluetooth: hci2: unexpected cc 0x0c03 length: 249 > 1 [ 878.531745][ T5829] Bluetooth: hci2: unexpected cc 0x1003 length: 249 > 9 [ 878.561645][ T5829] Bluetooth: hci2: unexpected cc 0x1001 length: 249 > 9 [ 878.576680][ T5829] Bluetooth: hci2: unexpected cc 0x0c23 length: 249 > 4 [ 878.586491][ T5829] Bluetooth: hci2: unexpected cc 0x0c38 length: 249 > 2 [ 878.770982][ T1916] lo speed is unknown, defaulting to 1000 [ 878.783743][ T1923] xt_TCPMSS: Only works on TCP SYN packets [ 878.856089][ T1927] : entered promiscuous mode [ 878.887155][ T1916] wg1 speed is unknown, defaulting to 1000 [ 879.038324][ T1940] openvswitch: netlink: ct_state flags 010000e0 unsupported [ 879.117827][ T1939] mac80211_hwsim hwsim78 syzkaller0: entered promiscuous mode [ 879.148149][ T1945] ipt_rpfilter: unknown options [ 879.152445][ T1939] mac80211_hwsim hwsim78 syzkaller0: entered allmulticast mode [ 879.465783][ T1916] chnl_net:caif_netlink_parms(): no params data found [ 879.562243][ T1916] bridge0: port 1(bridge_slave_0) entered blocking state [ 879.569460][ T1916] bridge0: port 1(bridge_slave_0) entered disabled state [ 879.577378][ T1916] bridge_slave_0: entered allmulticast mode [ 879.586004][ T1916] bridge_slave_0: entered promiscuous mode [ 879.594505][ T1916] bridge0: port 2(bridge_slave_1) entered blocking state [ 879.601713][ T1916] bridge0: port 2(bridge_slave_1) entered disabled state [ 879.609784][ T1916] bridge_slave_1: entered allmulticast mode [ 879.617113][ T1916] bridge_slave_1: entered promiscuous mode [ 879.650868][ T1916] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 879.664790][ T1916] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 879.695796][ T1916] team0: Port device team_slave_0 added [ 879.706945][ T1916] team0: Port device team_slave_1 added [ 879.733333][ T1916] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 879.740314][ T1916] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 879.766959][ T1916] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 879.779340][ T1916] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 879.786488][ T1916] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 879.813425][ T1916] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 879.855603][ T1916] hsr_slave_0: entered promiscuous mode [ 879.862698][ T1916] hsr_slave_1: entered promiscuous mode [ 879.868962][ T1916] debugfs: 'hsr0' already exists in 'hsr' [ 879.875278][ T1916] Cannot create hsr debugfs directory [ 880.028032][ T1916] netdevsim netdevsim5 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 880.040284][ T1916] netdevsim netdevsim5 netdevsim3 (unregistering): unset [1, 1] type 2 family 0 port 256 - 0 [ 880.145827][ T1916] netdevsim netdevsim5 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 880.156636][ T1916] netdevsim netdevsim5 netdevsim2 (unregistering): unset [1, 1] type 2 family 0 port 256 - 0 [ 880.260213][ T1916] netdevsim netdevsim5 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 880.270832][ T1916] netdevsim netdevsim5 netdevsim1 (unregistering): unset [1, 1] type 2 family 0 port 256 - 0 [ 880.358455][ T1916] netdevsim netdevsim5 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 880.368975][ T1916] netdevsim netdevsim5 netdevsim0 (unregistering): unset [1, 1] type 2 family 0 port 256 - 0 [ 880.672717][ T5829] Bluetooth: hci2: command tx timeout [ 881.910795][ T1931] nci: __nci_request: wait_for_completion_interruptible_timeout failed -512 [ 881.947844][ T1916] netdevsim netdevsim5 netdevsim0: renamed from eth0 [ 881.997810][ T1916] 8021q: adding VLAN 0 to HW filter on device netdevsim0 [ 882.013985][ T1916] netdevsim netdevsim5 netdevsim1: renamed from eth1 [ 882.100609][ T1916] 8021q: adding VLAN 0 to HW filter on device netdevsim1 [ 882.116363][ T1916] netdevsim netdevsim5 netdevsim2: renamed from eth2 [ 882.144982][ T1916] 8021q: adding VLAN 0 to HW filter on device netdevsim2 [ 882.168194][ T1916] netdevsim netdevsim5 netdevsim3: renamed from eth3 [ 882.209180][ T1916] 8021q: adding VLAN 0 to HW filter on device netdevsim3 [ 882.246840][ T1973] __nla_validate_parse: 5 callbacks suppressed [ 882.246857][ T1973] netlink: 12 bytes leftover after parsing attributes in process `syz.4.8141'. [ 882.273644][ T1981] netlink: 'syz.2.8145': attribute type 1 has an invalid length. [ 882.281315][ T1978] netlink: 12 bytes leftover after parsing attributes in process `syz.4.8141'. [ 882.303553][ T1983] netlink: 16 bytes leftover after parsing attributes in process `syz.3.8147'. [ 882.314824][ T1983] netlink: 16 bytes leftover after parsing attributes in process `syz.3.8147'. [ 882.348798][ T1993] netlink: 20 bytes leftover after parsing attributes in process `syz.2.8145'. [ 882.366835][ T1981] 8021q: adding VLAN 0 to HW filter on device bond7 [ 882.430171][ T1993] bond7: (slave geneve3): making interface the new active one [ 882.446053][ T1993] bond7: (slave geneve3): Enslaving as an active interface with an up link [ 882.474609][ T1997] bridge2: the hash_elasticity option has been deprecated and is always 16 [ 882.490736][ T12] netdevsim netdevsim2 netdevsim0: set [1, 1] type 2 family 0 port 6081 - 0 [ 882.503875][ T1994] netlink: 4 bytes leftover after parsing attributes in process `syz.1.8148'. [ 882.524446][ T12] netdevsim netdevsim2 netdevsim1: set [1, 1] type 2 family 0 port 6081 - 0 [ 882.543042][ T4319] netdevsim netdevsim2 netdevsim2: set [1, 1] type 2 family 0 port 6081 - 0 [ 882.568662][ T4319] netdevsim netdevsim2 netdevsim3: set [1, 1] type 2 family 0 port 6081 - 0 [ 882.628416][ T1994] tipc: MTU too low for tipc bearer [ 882.752637][ T5829] Bluetooth: hci2: command tx timeout [ 882.793360][ T2014] IPv6: RTM_NEWROUTE with no NLM_F_CREATE or NLM_F_REPLACE [ 882.800814][ T2014] IPv6: NLM_F_CREATE should be set when creating new route [ 882.808155][ T2014] IPv6: NLM_F_CREATE should be set when creating new route [ 882.815494][ T2015] IPv6: RTM_NEWROUTE with no NLM_F_CREATE or NLM_F_REPLACE [ 882.846552][ T2017] netlink: 232 bytes leftover after parsing attributes in process `syz.4.8153'. [ 882.879455][ T2020] netlink: 24 bytes leftover after parsing attributes in process `syz.2.8155'. [ 882.915569][ T1916] 8021q: adding VLAN 0 to HW filter on device bond0 [ 882.976516][ T1916] 8021q: adding VLAN 0 to HW filter on device team0 [ 883.029031][ T1090] bridge0: port 1(bridge_slave_0) entered blocking state [ 883.036278][ T1090] bridge0: port 1(bridge_slave_0) entered forwarding state [ 883.097882][ T314] bridge0: port 2(bridge_slave_1) entered blocking state [ 883.105122][ T314] bridge0: port 2(bridge_slave_1) entered forwarding state [ 883.309141][ T2045] ipvlan7: entered promiscuous mode [ 883.636231][ T2056] netlink: 'syz.3.8167': attribute type 12 has an invalid length. [ 883.691908][ T2056] netlink: 4 bytes leftover after parsing attributes in process `syz.3.8167'. [ 883.826049][ T1916] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 883.858219][ T2076] netlink: 'syz.1.8171': attribute type 1 has an invalid length. [ 884.010360][ T2086] netlink: 'syz.3.8172': attribute type 142 has an invalid length. [ 884.119400][ T2091] netlink: 28 bytes leftover after parsing attributes in process `syz.4.8176'. [ 884.267059][ T2107] : renamed from hsr0 (while UP) [ 884.647612][ T1916] veth0_vlan: entered promiscuous mode [ 884.663562][ T1916] veth1_vlan: entered promiscuous mode [ 884.707307][ T1916] veth0_macvtap: entered promiscuous mode [ 884.744886][ T1916] veth1_macvtap: entered promiscuous mode [ 884.830247][ T1916] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 884.843212][ T5829] Bluetooth: hci2: command tx timeout [ 884.895053][ T1916] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 884.916412][ T12] netdevsim netdevsim5 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 884.943457][ T12] netdevsim netdevsim5 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 885.009144][ T12] netdevsim netdevsim5 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 885.029101][ T12] netdevsim netdevsim5 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 885.109122][ T2148] xt_hashlimit: size too large, truncated to 1048576 [ 885.599984][T16859] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 885.633332][T16859] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 885.710003][ T36] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 885.722916][ T2172] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 885.738403][ T36] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 885.861244][ T2174] netlink: 'syz.4.8196': attribute type 9 has an invalid length. [ 886.029349][ T2176] nci: __nci_request: wait_for_completion_interruptible_timeout failed -512 [ 886.883932][ T2232] xt_hashlimit: size too large, truncated to 1048576 [ 886.912922][ T5829] Bluetooth: hci2: command tx timeout [ 886.985492][ T2233] lo speed is unknown, defaulting to 1000 [ 887.019066][ T2233] wg1 speed is unknown, defaulting to 1000 [ 887.337311][ T2245] SET target dimension over the limit! [ 887.501776][ T2257] __nla_validate_parse: 11 callbacks suppressed [ 887.501797][ T2257] netlink: 28 bytes leftover after parsing attributes in process `syz.1.8211'. [ 887.899989][ T2278] netlink: 212368 bytes leftover after parsing attributes in process `syz.1.8218'. [ 887.930339][ T2276] PF_CAN: dropped non conform CAN XL skbuff: dev type 65534, len 40 [ 888.179644][ T2292] netlink: 28 bytes leftover after parsing attributes in process `syz.1.8221'. [ 888.209746][ T2292] netlink: 8 bytes leftover after parsing attributes in process `syz.1.8221'. [ 888.255150][ T2299] x_tables: duplicate underflow at hook 1 [ 888.364940][ T2281] lo speed is unknown, defaulting to 1000 [ 888.397492][ T2281] wg1 speed is unknown, defaulting to 1000 [ 888.535738][ T2308] netlink: 12 bytes leftover after parsing attributes in process `syz.2.8225'. [ 888.561670][ T2308] netlink: 4 bytes leftover after parsing attributes in process `syz.2.8225'. [ 889.069661][ T2333] netlink: 8 bytes leftover after parsing attributes in process `syz.5.8234'. [ 889.084126][ T2332] ipt_REJECT: TCP_RESET invalid for non-tcp [ 889.117063][ T2330] ipt_REJECT: TCP_RESET invalid for non-tcp [ 889.118287][ T2333] netlink: 24 bytes leftover after parsing attributes in process `syz.5.8234'. [ 889.171643][ T2333] netlink: 24 bytes leftover after parsing attributes in process `syz.5.8234'. [ 889.324788][ T2333] workqueue: Failed to create a rescuer kthread for wq "bond1": -EINTR [ 889.480618][ T2348] netlink: 24 bytes leftover after parsing attributes in process `syz.1.8236'. [ 889.708518][ T2361] netlink: 'syz.4.8240': attribute type 3 has an invalid length. [ 889.886249][ T2366] netlink: 'syz.5.8242': attribute type 33 has an invalid length. [ 890.010588][ T2370] veth0_macvtap: left promiscuous mode [ 890.288984][ T2390] netlink: 'syz.4.8249': attribute type 1 has an invalid length. [ 890.501218][ T2390] bond6: entered promiscuous mode [ 890.535616][ T2390] bond6: entered allmulticast mode [ 890.555090][ T2390] 8021q: adding VLAN 0 to HW filter on device bond6 [ 890.616048][ T2406] netlink: 'syz.2.8254': attribute type 6 has an invalid length. [ 890.630870][ T2398] macvlan5: entered promiscuous mode [ 890.642519][ T2406] netlink: 'syz.2.8254': attribute type 5 has an invalid length. [ 890.655158][ T2398] macvlan5: entered allmulticast mode [ 890.677382][ T2398] 8021q: adding VLAN 0 to HW filter on device macvlan5 [ 890.764840][ T2408] netlink: 'syz.5.8253': attribute type 9 has an invalid length. [ 890.970625][ T2422] netlink: 'syz.2.8256': attribute type 2 has an invalid length. [ 891.011163][ T2420] xfrm1: entered allmulticast mode [ 891.044641][ T2422] netlink: 'syz.2.8256': attribute type 1 has an invalid length. [ 891.224489][ T2425] bond7: invalid ARP target 0.0.0.0 specified for addition [ 891.279587][ T2425] bond7: option arp_ip_target: invalid value (0) [ 891.310191][ T2425] bond7 (unregistering): Released all slaves [ 891.415889][ T2416] lo speed is unknown, defaulting to 1000 [ 891.447957][ T2416] wg1 speed is unknown, defaulting to 1000 [ 891.603853][ T2452] pim6reg1: entered promiscuous mode [ 891.619645][ T2452] pim6reg1: entered allmulticast mode [ 892.083527][ T2474] netlink: 'syz.5.8269': attribute type 6 has an invalid length. [ 892.117960][ T2474] netlink: 'syz.5.8269': attribute type 6 has an invalid length. [ 892.122496][ T4319] netdevsim netdevsim5 netdevsim0: set [0, 0] type 1 family 0 port 8472 - 0 [ 892.157551][ T4319] netdevsim netdevsim5 netdevsim1: set [0, 0] type 1 family 0 port 8472 - 0 [ 892.191030][ T4319] netdevsim netdevsim5 netdevsim2: set [0, 0] type 1 family 0 port 8472 - 0 [ 892.235561][ T4319] netdevsim netdevsim5 netdevsim3: set [0, 0] type 1 family 0 port 8472 - 0 [ 892.863875][ T2517] can: request_module (can-proto-5) failed. [ 893.104096][ T2548] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 893.159557][ T2548] __nla_validate_parse: 13 callbacks suppressed [ 893.159578][ T2548] netlink: 4 bytes leftover after parsing attributes in process `syz.3.8283'. [ 893.184694][ T2553] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 893.482440][ T2578] netlink: 28 bytes leftover after parsing attributes in process `syz.5.8288'. [ 893.586839][ T2579] macvlan0: entered promiscuous mode [ 893.610768][ T2584] netlink: 4 bytes leftover after parsing attributes in process `syz.2.8291'. [ 893.675591][ T2586] netlink: 20 bytes leftover after parsing attributes in process `syz.2.8291'. [ 893.700571][ T2591] sch_tbf: peakrate 5 is lower than or equals to rate 16783679728848008391 ! [ 893.701927][ T2593] IPVS: sync thread started: state = MASTER, mcast_ifn = veth1_to_team, syncid = 4, id = 0 [ 894.337714][ T2626] netlink: 12 bytes leftover after parsing attributes in process `syz.2.8299'. [ 894.347424][ T2626] openvswitch: netlink: Flow actions attr not present in new flow. [ 894.505135][ T2628] netlink: 4 bytes leftover after parsing attributes in process `syz.2.8300'. [ 894.634593][ T2631] netlink: 20 bytes leftover after parsing attributes in process `syz.2.8300'. [ 898.210145][ T2660] netlink: 4 bytes leftover after parsing attributes in process `syz.1.8308'. [ 899.485474][ T2730] netlink: 28 bytes leftover after parsing attributes in process `syz.3.8325'. [ 899.608812][ T2739] netlink: 24 bytes leftover after parsing attributes in process `syz.2.8327'. [ 899.650838][ T2739] netlink: 68 bytes leftover after parsing attributes in process `syz.2.8327'. [ 899.700885][ T2742] netlink: 4 bytes leftover after parsing attributes in process `syz.3.8328'. [ 899.740121][ T2745] IPVS: set_ctl: invalid protocol: 0 0.0.0.0:0 [ 899.781630][ T2750] netlink: 20 bytes leftover after parsing attributes in process `syz.1.8329'. [ 899.979773][ T2757] xt_hashlimit: size too large, truncated to 1048576 [ 899.984613][ T2759] validate_nla: 4 callbacks suppressed [ 899.984634][ T2759] netlink: 'syz.2.8331': attribute type 29 has an invalid length. [ 900.000715][ T2759] netlink: 8 bytes leftover after parsing attributes in process `syz.2.8331'. [ 900.011325][ T2738] syzkaller1: entered promiscuous mode [ 900.017125][ T2738] syzkaller1: entered allmulticast mode [ 900.028922][ T2759] netlink: 'syz.2.8331': attribute type 29 has an invalid length. [ 900.039060][ T2738] netlink: 104 bytes leftover after parsing attributes in process `syz.4.8326'. [ 900.048494][ T2759] netlink: 8 bytes leftover after parsing attributes in process `syz.2.8331'. [ 900.356239][ T2768] syzkaller0: entered promiscuous mode [ 900.375281][ T2768] syzkaller0: entered allmulticast mode [ 900.683124][ T2785] netlink: 56 bytes leftover after parsing attributes in process `syz.4.8337'. [ 900.788756][ T2785] bond7 (unregistering): Released all slaves [ 901.081281][ T2809] netlink: 'syz.1.8341': attribute type 1 has an invalid length. [ 901.114529][ T2809] netlink: 'syz.1.8341': attribute type 1 has an invalid length. [ 901.129486][ T2819] siw: device registration error -23 [ 901.306694][ T2825] netlink: 'syz.2.8344': attribute type 10 has an invalid length. [ 901.329897][ T2825] veth0_vlan: left promiscuous mode [ 901.351456][ T2825] veth0_vlan: entered promiscuous mode [ 901.386147][ T2825] team0: Device veth0_vlan failed to register rx_handler [ 901.497659][ T2844] tipc: Enabled bearer , priority 0 [ 901.639995][ T2844] syzkaller0: entered promiscuous mode [ 901.649749][ T2844] syzkaller0: entered allmulticast mode [ 901.663082][ T2844] tipc: Resetting bearer [ 901.701140][ T2840] tipc: Resetting bearer [ 901.846631][ T2865] xt_hashlimit: size too large, truncated to 1048576 [ 904.526195][ T2892] netlink: 'syz.3.8359': attribute type 1 has an invalid length. [ 904.705407][ T2894] __nla_validate_parse: 8 callbacks suppressed [ 904.705428][ T2894] netlink: 12 bytes leftover after parsing attributes in process `syz.3.8359'. [ 907.055137][ T2840] tipc: Disabling bearer [ 907.082361][ T2868] veth3: entered promiscuous mode [ 907.151451][T27943] tipc: Node number set to 1712029983 [ 907.351480][ T2914] netlink: 'syz.2.8364': attribute type 1 has an invalid length. [ 907.497015][ T2921] x_tables: duplicate underflow at hook 2 [ 908.144213][ T2950] netlink: 20 bytes leftover after parsing attributes in process `syz.3.8378'. [ 908.474851][ T2978] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 908.497854][ T2977] veth0: entered promiscuous mode [ 908.563704][ T2974] veth0: left promiscuous mode [ 908.941562][ T3007] netlink: 68 bytes leftover after parsing attributes in process `syz.4.8394'. [ 909.057796][ T3016] netlink: 'syz.1.8399': attribute type 1 has an invalid length. [ 909.546909][ T3043] netlink: 12 bytes leftover after parsing attributes in process `syz.5.8406'. [ 909.563940][ T3043] netlink: 2 bytes leftover after parsing attributes in process `syz.5.8406'. [ 909.719084][ T3048] netlink: 8 bytes leftover after parsing attributes in process `syz.2.8408'. [ 909.771888][ T3050] netlink: 224 bytes leftover after parsing attributes in process `syz.2.8408'. [ 909.924928][ T3057] netlink: 12 bytes leftover after parsing attributes in process `syz.5.8411'. [ 909.942849][ T3057] block nbd6: Unsupported socket: should be TCP or UNIX. [ 910.206290][ T3080] ipvlan6: entered promiscuous mode [ 910.384341][ T3088] ipt_rpfilter: unknown options [ 910.385708][ T3090] netlink: 'syz.1.8421': attribute type 1 has an invalid length. [ 910.425018][ T3090] 8021q: adding VLAN 0 to HW filter on device bond7 [ 910.459674][ T3090] bond7: entered allmulticast mode [ 910.521075][ T3097] netlink: 'syz.5.8424': attribute type 1 has an invalid length. [ 910.597252][ T3090] bond7: (slave ip6gretap1): making interface the new active one [ 910.632874][ T3090] ip6gretap1: entered allmulticast mode [ 910.661504][ T3090] bond7: (slave ip6gretap1): Enslaving as an active interface with an up link [ 910.778855][ T3110] openvswitch: netlink: Geneve option length err (len 256, max 255). [ 910.818236][ T3110] netlink: 144 bytes leftover after parsing attributes in process `syz.4.8427'. [ 911.033823][ T3121] xt_CT: You must specify a L4 protocol and not use inversions on it [ 911.064119][ T3122] netlink: 20 bytes leftover after parsing attributes in process `syz.4.8431'. [ 911.239324][ T3119] : renamed from hsr0 (while UP) [ 911.347033][ T3126] netlink: 12 bytes leftover after parsing attributes in process `syz.2.8435'. [ 911.424733][ T3128] netlink: 4 bytes leftover after parsing attributes in process `syz.3.8436'. [ 911.443035][ T3136] netlink: 'syz.1.8437': attribute type 2 has an invalid length. [ 911.484055][ T3136] netlink: 'syz.1.8437': attribute type 8 has an invalid length. [ 911.502371][ T3136] netlink: 132 bytes leftover after parsing attributes in process `syz.1.8437'. [ 911.557479][ T3145] netlink: 8 bytes leftover after parsing attributes in process `syz.2.8439'. [ 912.138055][ T3184] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 912.464397][ T3204] netlink: 8 bytes leftover after parsing attributes in process `syz.4.8457'. [ 912.527037][ T3203] netlink: 'syz.5.8456': attribute type 5 has an invalid length. [ 912.713226][ T3216] netlink: 'syz.3.8461': attribute type 1 has an invalid length. [ 913.290086][ T3238] syzkaller0: entered promiscuous mode [ 913.313964][ T3238] syzkaller0: entered allmulticast mode [ 913.656338][ T3269] x_tables: duplicate underflow at hook 2 [ 913.706437][ T3272] netlink: 'syz.2.8480': attribute type 2 has an invalid length. [ 917.457923][ T3272] 9: entered promiscuous mode [ 917.667696][ T3319] __nla_validate_parse: 6 callbacks suppressed [ 917.667718][ T3319] netlink: 212368 bytes leftover after parsing attributes in process `syz.5.8493'. [ 917.711143][ T3322] netlink: 4 bytes leftover after parsing attributes in process `syz.1.8494'. [ 917.818563][ T3327] netlink: 190972 bytes leftover after parsing attributes in process `syz.2.8496'. [ 917.901112][ T3331] IPv6: RTM_NEWROUTE with no NLM_F_CREATE or NLM_F_REPLACE [ 917.908423][ T3331] IPv6: NLM_F_CREATE should be set when creating new route [ 917.980370][ T3326] xt_CT: No such helper "snmp_trap" [ 918.040511][ T3337] netlink: 12 bytes leftover after parsing attributes in process `syz.1.8499'. [ 918.071966][ T3337] netlink: 12 bytes leftover after parsing attributes in process `syz.1.8499'. [ 918.087275][ T3337] netlink: 12 bytes leftover after parsing attributes in process `syz.1.8499'. [ 918.334961][ T3361] sctp: [Deprecated]: syz.5.8505 (pid 3361) Use of int in max_burst socket option. [ 918.334961][ T3361] Use struct sctp_assoc_value instead [ 918.379078][ T3361] sctp: [Deprecated]: syz.5.8505 (pid 3361) Use of int in max_burst socket option. [ 918.379078][ T3361] Use struct sctp_assoc_value instead [ 918.455203][ T3367] netlink: 76 bytes leftover after parsing attributes in process `syz.1.8506'. [ 918.497954][ T3367] nbd: illegal input index -8454144 [ 918.586880][ T3377] netlink: 54 bytes leftover after parsing attributes in process `syz.4.8509'. [ 918.630947][ T3377] netlink: 8 bytes leftover after parsing attributes in process `syz.4.8509'. [ 918.641836][ T3381] netlink: 8 bytes leftover after parsing attributes in process `syz.5.8510'. [ 918.660938][ T3385] netlink: 'syz.2.8511': attribute type 18 has an invalid length. [ 919.098812][ T3419] ipt_rpfilter: unknown options [ 919.468022][ T3431] bond8: entered promiscuous mode [ 919.498581][ T3431] 8021q: adding VLAN 0 to HW filter on device bond8 [ 937.318142][ T3442] netlink: 'syz.5.8525': attribute type 3 has an invalid length. [ 937.348528][ T3444] xt_CT: You must specify a L4 protocol and not use inversions on it [ 937.360699][ T3441] netlink: 'syz.5.8525': attribute type 3 has an invalid length. [ 937.382789][ T3451] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 937.517733][ T3457] netlink: 'syz.2.8530': attribute type 2 has an invalid length. [ 937.565740][ T3461] __nla_validate_parse: 5 callbacks suppressed [ 937.565760][ T3461] netlink: 12 bytes leftover after parsing attributes in process `syz.5.8531'. [ 937.675977][ T3465] ipt_rpfilter: unknown options [ 937.834796][ T3473] netlink: 28 bytes leftover after parsing attributes in process `syz.2.8536'. [ 937.858970][ T3473] netlink: 7 bytes leftover after parsing attributes in process `syz.2.8536'. [ 937.895103][ T3473] netlink: 12 bytes leftover after parsing attributes in process `syz.2.8536'. [ 937.937817][ T3473] netlink: 24 bytes leftover after parsing attributes in process `syz.2.8536'. [ 938.497611][ T3502] netlink: 4 bytes leftover after parsing attributes in process `syz.4.8547'. [ 938.730637][ T3508] mac80211_hwsim hwsim78 syzkaller0: Caught tx_queue_len zero misconfig [ 938.822987][ T3512] netlink: 'syz.1.8551': attribute type 1 has an invalid length. [ 938.909640][ T3512] 8021q: adding VLAN 0 to HW filter on device bond8 [ 938.989680][ T3524] x_tables: unsorted underflow at hook 1 [ 939.024339][ T3527] netlink: 24 bytes leftover after parsing attributes in process `syz.3.8554'. [ 939.035445][ T3519] macvlan3: entered promiscuous mode [ 939.040808][ T3519] macvlan3: entered allmulticast mode [ 939.107880][ T3512] bond8: (slave ip6gretap2): making interface the new active one [ 939.127394][ T3512] bond8: (slave ip6gretap2): Enslaving as an active interface with an up link [ 939.159277][ T3530] vlan4: entered allmulticast mode [ 939.396136][ T3541] netlink: 'syz.2.8560': attribute type 2 has an invalid length. [ 939.643203][ T3555] openvswitch: netlink: IP tunnel dst address not specified [ 939.663499][ T3553] netlink: 212368 bytes leftover after parsing attributes in process `syz.5.8565'. [ 939.707305][ T3555] openvswitch: netlink: IP tunnel dst address not specified [ 939.728434][ T3562] xt_CONNSECMARK: only valid in 'mangle' or 'security' table, not 'syz0' [ 939.833826][ T3565] netlink: 'syz.3.8570': attribute type 21 has an invalid length. [ 940.472416][ T3588] netlink: 16 bytes leftover after parsing attributes in process `syz.1.8578'. [ 941.042783][ T9026] IPVS: starting estimator thread 0... [ 941.143186][ T3620] IPVS: using max 36 ests per chain, 86400 per kthread [ 941.150167][ T3626] xt_hashlimit: size too large, truncated to 1048576 [ 941.207260][ T3629] : renamed from vxcan1 (while UP) [ 941.263751][ T3634] xt_ecn: cannot match TCP bits for non-tcp packets [ 941.358068][ T3639] netlink: 156 bytes leftover after parsing attributes in process `syz.5.8593'. [ 941.563363][T17176] Bluetooth: hci2: command 0x0405 tx timeout [ 941.738122][ T3655] netlink: 'syz.4.8598': attribute type 1 has an invalid length. [ 941.877224][ T3655] 8021q: adding VLAN 0 to HW filter on device bond9 [ 941.930611][ T3660] bond9: (slave veth0_to_bond): making interface the new active one [ 941.943362][ T3660] bond9: (slave veth0_to_bond): Enslaving as an active interface with an up link [ 942.035497][ T3660] netlink: 'syz.4.8598': attribute type 13 has an invalid length. [ 942.058777][ T3674] netlink: 'syz.2.8605': attribute type 1 has an invalid length. [ 942.093569][ T3664] 8021q: adding VLAN 0 to HW filter on device bond10 [ 942.104396][ T3664] bond9: (slave bond10): Enslaving as an active interface with a down link [ 942.171800][ T3679] netlink: 'syz.2.8605': attribute type 7 has an invalid length. [ 942.499837][ T3685] xt_addrtype: ipv6 BLACKHOLE matching not supported [ 942.585991][ T3674] bond8: entered promiscuous mode [ 942.591639][ T3674] 8021q: adding VLAN 0 to HW filter on device bond8 [ 942.614269][ T3679] ipvlan7: entered allmulticast mode [ 942.619785][ T3679] bond8: entered allmulticast mode [ 942.636936][ T3682] ipvlan8: entered allmulticast mode [ 942.642894][ T3705] ipt_rpfilter: unknown options [ 942.666620][ T3689] bond8: (slave bridge5): making interface the new active one [ 942.675092][ T3689] bridge5: entered promiscuous mode [ 942.680553][ T3689] bridge5: entered allmulticast mode [ 942.695317][ T3689] bond8: (slave bridge5): Enslaving as an active interface with an up link [ 943.050159][ T3715] can: request_module (can-proto-0) failed. [ 943.266732][ T3740] ipt_rpfilter: unknown options [ 943.632509][T17176] Bluetooth: hci2: command 0x0405 tx timeout [ 943.717633][ T3770] __nla_validate_parse: 4 callbacks suppressed [ 943.717652][ T3770] netlink: 8 bytes leftover after parsing attributes in process `syz.3.8626'. [ 943.968873][ T3783] netlink: 4 bytes leftover after parsing attributes in process `syz.1.8628'. [ 944.099096][ T3784] IPVS: set_ctl: invalid protocol: 58 0.0.0.0:20000 [ 944.412835][ T3807] netlink: 'syz.4.8639': attribute type 29 has an invalid length. [ 944.467588][ T3808] netlink: 'syz.4.8639': attribute type 29 has an invalid length. [ 944.687500][ T3824] netlink: 256 bytes leftover after parsing attributes in process `syz.1.8646'. [ 945.357876][ T3858] netlink: 60 bytes leftover after parsing attributes in process `syz.4.8651'. [ 945.367615][ T3861] netlink: 'syz.2.8650': attribute type 2 has an invalid length. [ 945.517904][ T3860] bond5: entered promiscuous mode [ 945.585344][ T3868] macvlan3: entered promiscuous mode [ 945.592615][ T3868] macvlan3: entered allmulticast mode [ 945.619693][ T3868] bond5: (slave macvlan3): Opening slave failed [ 945.628538][ T3874] netlink: zone id is out of range [ 945.645806][ T3874] netlink: zone id is out of range [ 945.651266][ T3874] netlink: zone id is out of range [ 945.672467][ T3874] netlink: zone id is out of range [ 945.685818][ T3874] netlink: zone id is out of range [ 945.703185][ T3874] netlink: zone id is out of range [ 945.709932][ T3878] netlink: 'syz.4.8656': attribute type 1 has an invalid length. [ 945.719238][ T5829] Bluetooth: hci2: command 0x0405 tx timeout [ 945.726402][ T3887] netlink: 'syz.2.8658': attribute type 1 has an invalid length. [ 945.736676][ T3874] netlink: zone id is out of range [ 945.746646][ T3885] netlink: 'syz.2.8658': attribute type 1 has an invalid length. [ 945.771805][ T3874] netlink: zone id is out of range [ 945.818213][ T3874] netlink: zone id is out of range [ 945.823714][ T3874] netlink: zone id is out of range [ 945.961631][ T3904] netlink: 24 bytes leftover after parsing attributes in process `syz.1.8661'. [ 946.208212][ T3915] : renamed from hsr0 [ 946.588102][ T3934] bridge0: port 2(bridge_slave_1) entered disabled state [ 946.734364][ T3942] netlink: 12 bytes leftover after parsing attributes in process `syz.5.8670'. [ 946.857067][ T3953] netlink: 4 bytes leftover after parsing attributes in process `syz.3.8673'. [ 946.880133][ T3956] ipt_rpfilter: unknown options [ 947.068191][ T3969] netlink: 'syz.1.8679': attribute type 1 has an invalid length. [ 947.282408][ T3980] netlink: 'syz.5.8683': attribute type 4 has an invalid length. [ 947.294652][ T3969] bond9: (slave gretap1): making interface the new active one [ 947.303502][ T3969] bond9: (slave gretap1): Enslaving as an active interface with an up link [ 947.339024][ T3978] macvlan4: entered promiscuous mode [ 947.345122][ T3978] macvlan4: entered allmulticast mode [ 947.445911][ T3983] netlink: 'syz.2.8684': attribute type 26 has an invalid length. [ 947.469711][ T3983] netlink: 4 bytes leftover after parsing attributes in process `syz.2.8684'. [ 947.529009][ T3983] netlink: 'syz.2.8684': attribute type 26 has an invalid length. [ 947.537042][ T3986] vlan1: entered allmulticast mode [ 947.537064][ T3986] bond0: entered allmulticast mode [ 947.538740][ T3986] netlink: 14 bytes leftover after parsing attributes in process `syz.1.8687'. [ 947.578415][ T3983] netlink: 4 bytes leftover after parsing attributes in process `syz.2.8684'. [ 947.601288][ T3986]  (unregistering): (slave bond_slave_0): Releasing backup interface [ 947.652618][ T3986]  (unregistering): (slave bond_slave_1): Releasing backup interface [ 947.675269][ T3986]  (unregistering): Released all slaves [ 948.069268][ T4014] tunl0: entered promiscuous mode [ 948.166939][ T4027] sctp: [Deprecated]: syz.4.8699 (pid 4027) Use of struct sctp_assoc_value in delayed_ack socket option. [ 948.166939][ T4027] Use struct sctp_sack_info instead [ 948.807274][ T4056] bond1: option arp_interval: mode dependency failed, not supported in mode 802.3ad(4) [ 948.939575][ T4056] bond1 (unregistering): Released all slaves [ 949.048564][ T4082] __nla_validate_parse: 13 callbacks suppressed [ 949.048585][ T4082] netlink: 4 bytes leftover after parsing attributes in process `syz.3.8711'. [ 949.198698][ T4090] netlink: 12 bytes leftover after parsing attributes in process `syz.4.8712'. [ 949.278670][ T4082] team0: Port device team_slave_0 removed [ 949.328736][ T4056] v: entered promiscuous mode [ 949.448377][ T4094] netlink: 4 bytes leftover after parsing attributes in process `syz.4.8713'. [ 949.526645][ T4100] IPVS: set_ctl: invalid protocol: 117 172.20.20.170:20000 [ 949.530174][ T4098] netlink: 12 bytes leftover after parsing attributes in process `syz.3.8714'. [ 949.650079][ T4106] netlink: 4 bytes leftover after parsing attributes in process `syz.1.8717'. [ 949.757344][ T4103] geneve2: entered promiscuous mode [ 949.763084][ T4103] geneve2: entered allmulticast mode [ 949.796705][ T36] netdevsim netdevsim3 netdevsim1: set [1, 1] type 2 family 0 port 19999 - 0 [ 949.833277][ T36] netdevsim netdevsim3 netdevsim2: set [1, 1] type 2 family 0 port 19999 - 0 [ 949.865899][ T36] netdevsim netdevsim3 netdevsim3: set [1, 1] type 2 family 0 port 19999 - 0 [ 950.455440][ T4155] netlink: 4 bytes leftover after parsing attributes in process `syz.1.8728'. [ 950.585275][ T4160] netlink: 14 bytes leftover after parsing attributes in process `syz.2.8731'. [ 1055.842032][ C1] rcu: INFO: rcu_preempt detected stalls on CPUs/tasks: [ 1055.849066][ C1] rcu: 0-...!: (1 GPs behind) idle=b93c/1/0x4000000000000000 softirq=170949/170950 fqs=1 [ 1055.860291][ C1] rcu: (detected by 1, t=10506 jiffies, g=191549, q=618 ncpus=2) [ 1055.868188][ C1] Sending NMI from CPU 1 to CPUs 0: [ 1055.868330][ C0] NMI backtrace for cpu 0 [ 1055.868348][ C0] CPU: 0 UID: 0 PID: 4173 Comm: syz.3.8729 Not tainted syzkaller #0 PREEMPT(full) [ 1055.868366][ C0] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 03/18/2026 [ 1055.868377][ C0] RIP: 0010:__lock_acquire+0x5f2/0x2cf0 [ 1055.868417][ C0] Code: 00 0f 8c 0b ff ff ff 44 89 e0 38 04 24 76 16 e8 44 e3 0a 03 85 c0 74 0d 83 3d 4d c9 90 0e 00 0f 84 0a 08 00 00 83 7c 24 10 00 <0f> 84 a8 00 00 00 41 8b 45 20 66 85 c0 0f 88 8c 00 00 00 65 8b 0d [ 1055.868431][ C0] RSP: 0018:ffffc90000007b40 EFLAGS: 00000002 [ 1055.868447][ C0] RAX: 0000000000000002 RBX: ffff88809c0f49a8 RCX: 0000000000000003 [ 1055.868459][ C0] RDX: 0000000000000002 RSI: 0000000000000002 RDI: 0000000000000000 [ 1055.868468][ C0] RBP: ffff88809c0f4988 R08: ffffffff84b9ba73 R09: ffffffff9a686690 [ 1055.868480][ C0] R10: dffffc0000000000 R11: fffff52000000fac R12: 0000000000000002 [ 1055.868491][ C0] R13: ffff88809c0f4988 R14: ffff88809c0f3d80 R15: 0000000000000003 [ 1055.868503][ C0] FS: 00007f8b7a6b76c0(0000) GS:ffff888125245000(0000) knlGS:0000000000000000 [ 1055.868572][ C0] CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033 [ 1055.868609][ C0] CR2: 000055556c0574e8 CR3: 00000000a9f78000 CR4: 00000000003526f0 [ 1055.868624][ C0] Call Trace: [ 1055.868632][ C0] [ 1055.868645][ C0] ? __lock_acquire+0x6b5/0x2cf0 [ 1055.868668][ C0] ? __lock_acquire+0x6b5/0x2cf0 [ 1055.868691][ C0] ? debug_object_activate+0x83/0x580 [ 1055.868726][ C0] lock_acquire+0x106/0x350 [ 1055.868744][ C0] ? debug_object_activate+0x83/0x580 [ 1055.868765][ C0] ? advance_sched+0x9f8/0xc90 [ 1055.868792][ C0] _raw_spin_lock_irqsave+0x40/0x60 [ 1055.868812][ C0] ? debug_object_activate+0x83/0x580 [ 1055.868831][ C0] debug_object_activate+0x83/0x580 [ 1055.868854][ C0] enqueue_hrtimer+0xa9/0x2c0 [ 1055.868877][ C0] __hrtimer_run_queues+0x4d2/0xa20 [ 1055.868906][ C0] hrtimer_interrupt+0x44b/0x950 [ 1055.868939][ C0] __sysvec_apic_timer_interrupt+0x102/0x430 [ 1055.868991][ C0] sysvec_apic_timer_interrupt+0xa1/0xc0 [ 1055.869010][ C0] [ 1055.869016][ C0] [ 1055.869023][ C0] asm_sysvec_apic_timer_interrupt+0x1a/0x20 [ 1055.869042][ C0] RIP: 0010:_raw_spin_unlock_irqrestore+0x47/0x80 [ 1055.869060][ C0] Code: f7 e8 0d 5c ec f5 f7 c3 00 02 00 00 74 05 e8 10 78 17 f6 9c 58 a9 00 02 00 00 75 27 f7 c3 00 02 00 00 74 01 fb bf 01 00 00 00 a4 ed dd f5 65 8b 05 9d f0 87 07 85 c0 74 18 5b 41 5e e9 41 48 [ 1055.869072][ C0] RSP: 0018:ffffc90004756ee8 EFLAGS: 00000206 [ 1055.869086][ C0] RAX: 0000000000000006 RBX: 0000000000000282 RCX: 0000000080000202 [ 1055.869097][ C0] RDX: 0000000000000002 RSI: ffffffff8dfb65fa RDI: 0000000000000001 [ 1055.869107][ C0] RBP: ffffc900047571d0 R08: ffffffff903215b7 R09: 1ffffffff20642b6 [ 1055.869119][ C0] R10: dffffc0000000000 R11: fffffbfff20642b7 R12: ffff8880623de290 [ 1055.869130][ C0] R13: dffffc0000000000 R14: ffff8880623de2a8 R15: ffff8880623de2f8 [ 1055.869152][ C0] taprio_change+0x30fe/0x3e50 [ 1055.869183][ C0] ? __pfx_taprio_change+0x10/0x10 [ 1055.869214][ C0] ? __pfx_smp_text_poke_batch_finish+0x10/0x10 [ 1055.869247][ C0] taprio_init+0x96f/0xbe0 [ 1055.869272][ C0] ? __pfx_taprio_init+0x10/0x10 [ 1055.869292][ C0] ? qdisc_alloc+0x6ec/0x9e0 [ 1055.869319][ C0] ? __pfx_taprio_init+0x10/0x10 [ 1055.869339][ C0] qdisc_create+0x7c4/0xf20 [ 1055.869357][ C0] ? lockdep_rtnl_is_held+0x26/0x40 [ 1055.869376][ C0] tc_modify_qdisc+0x16f0/0x2290 [ 1055.869394][ C0] ? _raw_spin_unlock_irqrestore+0x30/0x80 [ 1055.869417][ C0] ? __pfx_tc_modify_qdisc+0x10/0x10 [ 1055.869448][ C0] ? __pfx_tc_modify_qdisc+0x10/0x10 [ 1055.869464][ C0] rtnetlink_rcv_msg+0x77e/0xbe0 [ 1055.869487][ C0] ? rtnetlink_rcv_msg+0x1b9/0xbe0 [ 1055.869505][ C0] ? __pfx_rtnetlink_rcv_msg+0x10/0x10 [ 1055.869523][ C0] ? ref_tracker_free+0x693/0x840 [ 1055.869546][ C0] ? __pfx_ref_tracker_free+0x10/0x10 [ 1055.869591][ C0] netlink_rcv_skb+0x232/0x4b0 [ 1055.869619][ C0] ? __pfx_rtnetlink_rcv_msg+0x10/0x10 [ 1055.869639][ C0] ? __pfx_netlink_rcv_skb+0x10/0x10 [ 1055.869664][ C0] ? netlink_deliver_tap+0x2e/0x1b0 [ 1055.869684][ C0] ? netlink_deliver_tap+0x2e/0x1b0 [ 1055.869706][ C0] netlink_unicast+0x75c/0x8e0 [ 1055.869730][ C0] netlink_sendmsg+0x813/0xb40 [ 1055.869755][ C0] ? __pfx_netlink_sendmsg+0x10/0x10 [ 1055.869778][ C0] ? aa_sock_msg_perm+0xf1/0x1b0 [ 1055.869800][ C0] ? bpf_lsm_socket_sendmsg+0x9/0x20 [ 1055.869826][ C0] ____sys_sendmsg+0x972/0x9f0 [ 1055.869848][ C0] ? __might_fault+0xaf/0x130 [ 1055.869873][ C0] ? __pfx_____sys_sendmsg+0x10/0x10 [ 1055.869898][ C0] ? import_iovec+0x73/0xa0 [ 1055.869916][ C0] ___sys_sendmsg+0x2a5/0x360 [ 1055.869937][ C0] ? __lock_acquire+0x6b5/0x2cf0 [ 1055.869958][ C0] ? __pfx____sys_sendmsg+0x10/0x10 [ 1055.869982][ C0] ? futex_wait+0x2a2/0x390 [ 1055.870019][ C0] ? __fget_files+0x2a/0x420 [ 1055.870039][ C0] ? __fget_files+0x3a0/0x420 [ 1055.870061][ C0] __x64_sys_sendmsg+0x1bd/0x2a0 [ 1055.870085][ C0] ? __pfx___x64_sys_sendmsg+0x10/0x10 [ 1055.870110][ C0] ? rcu_is_watching+0x15/0xb0 [ 1055.870136][ C0] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1055.870152][ C0] do_syscall_64+0x15f/0xf80 [ 1055.870170][ C0] ? trace_irq_disable+0x3b/0x140 [ 1055.870187][ C0] ? clear_bhb_loop+0x40/0x90 [ 1055.870205][ C0] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1055.870222][ C0] RIP: 0033:0x7f8b7979c819 [ 1055.870243][ C0] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 1055.870256][ C0] RSP: 002b:00007f8b7a6b7028 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 1055.870272][ C0] RAX: ffffffffffffffda RBX: 00007f8b79a16090 RCX: 00007f8b7979c819 [ 1055.870283][ C0] RDX: 0000000000000010 RSI: 00002000000012c0 RDI: 0000000000000006 [ 1055.870294][ C0] RBP: 00007f8b79832c91 R08: 0000000000000000 R09: 0000000000000000 [ 1055.870305][ C0] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 1055.870315][ C0] R13: 00007f8b79a16128 R14: 00007f8b79a16090 R15: 00007ffe07952ff8 [ 1055.870334][ C0] [ 1055.871245][ C1] rcu: rcu_preempt kthread starved for 10499 jiffies! g191549 f0x0 RCU_GP_WAIT_FQS(5) ->state=0x0 ->cpu=1 [ 1056.474596][ C1] rcu: Unless rcu_preempt kthread gets sufficient CPU time, OOM is now expected behavior. [ 1056.484561][ C1] rcu: RCU grace-period kthread stack dump: [ 1056.490450][ C1] task:rcu_preempt state:R running task stack:27544 pid:16 tgid:16 ppid:2 task_flags:0x208040 flags:0x00080000 [ 1056.503967][ C1] Call Trace: [ 1056.507241][ C1] [ 1056.510175][ C1] __schedule+0x17b4/0x5680 [ 1056.514687][ C1] ? __lock_acquire+0x6b5/0x2cf0 [ 1056.519659][ C1] ? __pfx___schedule+0x10/0x10 [ 1056.524530][ C1] ? schedule+0x90/0x360 [ 1056.528844][ C1] schedule+0x164/0x360 [ 1056.533004][ C1] schedule_timeout+0x158/0x2c0 [ 1056.537856][ C1] ? __pfx_schedule_timeout+0x10/0x10 [ 1056.543227][ C1] ? __pfx_process_timeout+0x10/0x10 [ 1056.548519][ C1] ? _raw_spin_unlock_irqrestore+0x4c/0x80 [ 1056.554333][ C1] ? prepare_to_swait_event+0x340/0x370 [ 1056.559883][ C1] rcu_gp_fqs_loop+0x312/0x11d0 [ 1056.564749][ C1] ? __pfx_rcu_watching_snap_save+0x10/0x10 [ 1056.570646][ C1] ? __pfx_rcu_gp_fqs_loop+0x10/0x10 [ 1056.575935][ C1] ? _raw_spin_unlock_irq+0x2e/0x50 [ 1056.581141][ C1] ? _raw_spin_unlock_irqrestore+0x30/0x80 [ 1056.586954][ C1] rcu_gp_kthread+0x9e/0x2b0 [ 1056.591549][ C1] ? __pfx_rcu_gp_kthread+0x10/0x10 [ 1056.596747][ C1] ? _raw_spin_unlock_irqrestore+0x30/0x80 [ 1056.602555][ C1] ? __kthread_parkme+0x7a/0x1f0 [ 1056.607551][ C1] ? __kthread_parkme+0x19c/0x1f0 [ 1056.612587][ C1] kthread+0x388/0x470 [ 1056.616657][ C1] ? __pfx_rcu_gp_kthread+0x10/0x10 [ 1056.621858][ C1] ? __pfx_kthread+0x10/0x10 [ 1056.626446][ C1] ret_from_fork+0x514/0xb70 [ 1056.631047][ C1] ? __pfx_ret_from_fork+0x10/0x10 [ 1056.636163][ C1] ? __switch_to+0xc79/0x1410 [ 1056.640849][ C1] ? __pfx_kthread+0x10/0x10 [ 1056.645445][ C1] ret_from_fork_asm+0x1a/0x30 [ 1056.650250][ C1] [ 1056.653278][ C1] rcu: Stack dump where RCU GP kthread last ran: [ 1056.659600][ C1] CPU: 1 UID: 0 PID: 48 Comm: kworker/u8:3 Not tainted syzkaller #0 PREEMPT(full) [ 1056.668881][ C1] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 03/18/2026 [ 1056.678943][ C1] Workqueue: events_unbound toggle_allocation_gate [ 1056.685459][ C1] RIP: 0010:smp_call_function_many_cond+0xe32/0x1210 [ 1056.692137][ C1] Code: 45 8b 2c 24 44 89 ee 83 e6 01 31 ff e8 77 e7 0b 00 41 83 e5 01 49 bd 00 00 00 00 00 fc ff df 75 07 e8 22 e3 0b 00 eb 38 f3 90 <42> 0f b6 04 2b 84 c0 75 11 41 f7 04 24 01 00 00 00 74 1e e8 06 e3 [ 1056.711742][ C1] RSP: 0018:ffffc90000b87700 EFLAGS: 00000293 [ 1056.717811][ C1] RAX: ffffffff81b97aea RBX: 1ffff110170c8541 RCX: ffff88801b72dc40 [ 1056.725781][ C1] RDX: 0000000000000000 RSI: 0000000000000001 RDI: 0000000000000000 [ 1056.733760][ C1] RBP: ffffc90000b87840 R08: ffffffff903215b7 R09: 1ffffffff20642b6 [ 1056.741751][ C1] R10: dffffc0000000000 R11: fffffbfff20642b7 R12: ffff8880b8642a08 [ 1056.749727][ C1] R13: dffffc0000000000 R14: ffff8880b873c148 R15: 0000000000000000 [ 1056.757700][ C1] FS: 0000000000000000(0000) GS:ffff888125345000(0000) knlGS:0000000000000000 [ 1056.766627][ C1] CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033 [ 1056.773208][ C1] CR2: 00007f2b555eb4b8 CR3: 000000000e74a000 CR4: 00000000003526f0 [ 1056.781193][ C1] Call Trace: [ 1056.784471][ C1] [ 1056.787413][ C1] ? __pfx_do_sync_core+0x10/0x10 [ 1056.792450][ C1] ? __pfx_smp_call_function_many_cond+0x10/0x10 [ 1056.798786][ C1] ? kmem_cache_alloc_bulk_noprof+0xae/0x7e0 [ 1056.804765][ C1] ? __pfx___text_poke+0x10/0x10 [ 1056.809774][ C1] ? __pfx_do_sync_core+0x10/0x10 [ 1056.814799][ C1] on_each_cpu_cond_mask+0x3f/0x80 [ 1056.819932][ C1] smp_text_poke_batch_finish+0x5f5/0x1160 [ 1056.825784][ C1] ? arch_jump_label_transform_apply+0x17/0x30 [ 1056.831972][ C1] ? __pfx___mutex_lock+0x10/0x10 [ 1056.837023][ C1] ? __pfx_smp_text_poke_batch_finish+0x10/0x10 [ 1056.843297][ C1] ? arch_jump_label_transform_queue+0x97/0x110 [ 1056.849573][ C1] arch_jump_label_transform_apply+0x1c/0x30 [ 1056.855563][ C1] static_key_enable_cpuslocked+0x128/0x240 [ 1056.861497][ C1] static_key_enable+0x1a/0x20 [ 1056.866269][ C1] toggle_allocation_gate+0xab/0x290 [ 1056.871561][ C1] ? __pfx_toggle_allocation_gate+0x10/0x10 [ 1056.877454][ C1] ? process_scheduled_works+0xa70/0x1860 [ 1056.883186][ C1] ? process_scheduled_works+0xa70/0x1860 [ 1056.889079][ C1] ? process_scheduled_works+0xa70/0x1860 [ 1056.894804][ C1] process_scheduled_works+0xb5d/0x1860 [ 1056.900384][ C1] ? __pfx_process_scheduled_works+0x10/0x10 [ 1056.906374][ C1] ? assign_work+0x3d5/0x5e0 [ 1056.910976][ C1] worker_thread+0xa53/0xfc0 [ 1056.915597][ C1] kthread+0x388/0x470 [ 1056.919674][ C1] ? __pfx_worker_thread+0x10/0x10 [ 1056.924789][ C1] ? __pfx_kthread+0x10/0x10 [ 1056.929383][ C1] ret_from_fork+0x514/0xb70 [ 1056.933978][ C1] ? __pfx_ret_from_fork+0x10/0x10 [ 1056.939093][ C1] ? __switch_to+0xc79/0x1410 [ 1056.943775][ C1] ? __pfx_kthread+0x10/0x10 [ 1056.948368][ C1] ret_from_fork_asm+0x1a/0x30 [ 1056.953154][ C1]