last executing test programs: 15m55.479499357s ago: executing program 1 (id=2763): socket$inet_sctp(0x2, 0x1, 0x84) socket$nl_generic(0x10, 0x3, 0x10) socket$nl_route(0x10, 0x3, 0x0) socket$unix(0x1, 0x1, 0x0) socket$unix(0x1, 0x2, 0x0) socket$nl_rdma(0x10, 0x3, 0x14) socket$nl_generic(0x10, 0x3, 0x10) socket$nl_route(0x10, 0x3, 0x0) socket$inet_mptcp(0x2, 0x1, 0x106) r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = socket(0x1, 0x803, 0x0) r2 = socket$can_bcm(0x1d, 0x2, 0x2) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000100)) getsockname$packet(r1, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f00000002c0)=0x14) ioctl$ifreq_SIOCGIFINDEX_team(r2, 0x8933, &(0x7f0000000400)={'team0\x00', 0x0}) sendmsg$nl_route(r0, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000380)=@newlink={0x44, 0x10, 0x401, 0x0, 0x0, {0x0, 0x0, 0x0, 0x0, 0x300, 0xa00}, [@IFLA_LINKINFO={0x14, 0x12, 0x0, 0x1, @macvlan={{0xc}, {0x4}}}, @IFLA_LINK={0x8, 0x5, r3}, @IFLA_MASTER={0x8, 0xa, r4}]}, 0x44}, 0x1, 0x0, 0x0, 0xfffe}, 0x0) 15m54.521764756s ago: executing program 1 (id=2772): r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = socket$kcm(0x2d, 0x2, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$sock_kcm_SIOCKCMATTACH(r1, 0x89e0, &(0x7f0000000040)={r2}) ioctl$sock_kcm_SIOCKCMATTACH(r1, 0x89e0, &(0x7f0000000080)={r2}) r3 = openat$tun(0xffffffffffffff9c, &(0x7f0000000000), 0x40241, 0x0) writev(r3, &(0x7f00000007c0)=[{&(0x7f00000000c0)="770c32625f25126f5bb6310a9edaaf1699650cda58b97559d2fc84370a9c24a7a1c908e69f9e27ab7275e3da40dc1f959c193f417e4606d8b9eb3bfe", 0x3c}, {&(0x7f0000000180)="b617eb024b4cb5315e92f205c7b82ce107b1ae7d965706fc39426f749bd1ec2800e764cacdb855b0b0198f32b64d2e473e6365870a4362d365ed8b380dac2bbeb828bb2e7a77bb3f6333615c424e665b7bd12e2faca210f4f1d80e4a7ad80c7e243fe6619e572b9bedeb0081911d28f4", 0x70}, {&(0x7f0000000240)="b692cda7370f23edaab1a79ac5519bbaea015f9c0473c63bdd2eff38ece91dfcccf023261aa24f5d0fd26865aa265c886cb90c855f0784aa92534cfbfb64cef2b9d41a48dba912cb42ebe65f279d7ae8c8dd0e7a6fd6446c223a5e98be25bc672d77c1e3a6ca465546905dcc18416524bbdd98cb4c2a02ae6f8da36bd488454f9ed122fac81ae2e864b25c40bec2606c968cd6e057c2531c80b49dbfe95c97c3296a52f9dbd906828f10563551a2cb8223ccba", 0xb3}, {&(0x7f0000000300)="07af820383d27057b9b68c70b21f63499f8c45e37f11eeb0d930937dce5b8c90fbda9c750c005988976cd779b8d2aa7b7facbc40bb4135940deffa4befa220c2648f2747f477f67153ea93cfb41c1152aa1e5cd2eeeca1954f4a5e81", 0x5c}, {&(0x7f0000000440)="1d7f148a545bf37ceae424f8286654534ea58040f073cf220f7224a887aa47294b9a6bb14bc3e0e01409865aafc3616474f42bc81a3f2bf3d1182b8af9a278d6f37b59434d55eed50d1d2af95280102ca553d263a9f4622fcc97cade4ef833cb1cb6deb375f479773897c696c4b787763d4e2e279fd8aa4dd3e35ac04f9baa6e8b4b7e0bfc05242eb6a45f4849e0f54de74d9411e6ec40fc6069c925888f64683790388c2dea054beb08d75d7c86305e9f588ce68ca0a87a1120c19c2b0fdacad6bf836686bf9ea78bca187112c3d534467b36d9", 0xd4}, {&(0x7f00000005c0)="b770739ab8232fe9313c6e8474746d9d49e6428a865251ecdb6331d92bf8341c78ddd61db74c2465cc2ae2ddd5a900352a05fad655a2e40d2dc2a8b721377f1aaca5a5139f70e3a6b887af02c38f56ce4af43da1d14b979e390159e5e58a5842051ffa6b25b2db5f4e4f7576bce64334287e84cfbd58a1da88fae125", 0x7c}, {&(0x7f0000000640)="1a4070c7072c59ee8484f3e1310062e1e04b4dc964bb027412d61a79c6b01cda9fa0d3c1037fa349178efae7e182749ad40e1cc59d2eda98775481568d6af25b2cc1a99e6c3c56c44fcb92536fce707fab66b9c79641e76b362faf8dd6c8e9fa0247b00fc4b4f547d25a604dc81a89f87430c061bf92be26d8f4adbe2436c3c77e6107f860a547f21a978862fbea7607a2d94f349c040a1d0bc337befd94caaabe401469665741561e48e312b3dcaecba4743193628e6a6b88af6cb627c054bbefe604358e5424fd719e289c442d2d38d9a244117c8d57428e2237346c437ed18c6357e337edc0", 0xe7}, {&(0x7f0000000740)="9e90812dda014eb4580a8e3bdacfecb1f96ed148aad2e4c977c9e250f82075f7070e6b7966de64052595c02f93ad42d32a732121733204f0bd7171eb664a9e5d71852a1174fcbab3a95a1cb34305ad8b8226b0fbc1a08ea626475096d1526f6acf", 0x61}], 0x8) r4 = openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0) ioctl$TUNSETIFF(r4, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x7101}) socket$unix(0x1, 0x1, 0x0) r5 = socket$unix(0x1, 0x1, 0x0) r6 = socket(0x400000000010, 0x3, 0x1) ioctl$sock_SIOCGIFINDEX(r5, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r6, &(0x7f00000012c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000600)=@newqdisc={0x34, 0x24, 0x4ee4e6a52ff56541, 0x1070bd2a, 0xffffffff, {0x0, 0x0, 0x0, r7, {0x0, 0xfff1}, {0xffff, 0xffff}, {0x0, 0xb}}, [@qdisc_kind_options=@q_cake={{0x9}, {0x4}}]}, 0x34}, 0x1, 0x0, 0x0, 0x40}, 0x0) sendmsg$nl_route_sched(r6, &(0x7f0000000580)={0x0, 0x0, &(0x7f00000006c0)={&(0x7f0000000740)=@newtfilter={0x54, 0x2c, 0xd27, 0x70bd2a, 0x25dfdc03, {0x0, 0x0, 0x0, r7, {0xffff, 0xfff1}, {}, {0x7, 0x3}}, [@filter_kind_options=@f_flow={{0x9}, {0x24, 0x2, [@TCA_FLOW_KEYS={0x8, 0x1, 0x1db69}, @TCA_FLOW_RSHIFT={0x8, 0x4, 0x494}, @TCA_FLOW_ADDEND={0x8, 0x5, 0xff}, @TCA_FLOW_MASK={0x8, 0x6, 0x101}]}}]}, 0x54}, 0x1, 0x0, 0x0, 0x40800}, 0x2000c044) r8 = openat$tun(0xffffffffffffff9c, &(0x7f0000000400), 0x0, 0x0) close(r8) socket$nl_generic(0x10, 0x3, 0x10) ioctl$SIOCSIFHWADDR(r8, 0x8914, &(0x7f0000002280)={'syzkaller0\x00', @link_local}) r9 = socket$kcm(0x11, 0x3, 0x0) sendmsg$kcm(r9, &(0x7f00000000c0)={&(0x7f0000000380)=@xdp={0x2c, 0x7, 0x0, 0x3e}, 0x80, &(0x7f0000000080)=[{&(0x7f0000000140)='\r', 0x1}], 0x1, 0x0, 0x0, 0x86dd}, 0x4) ioctl$TUNSETIFF(r3, 0x400454ca, &(0x7f0000000200)={'syzkaller1\x00', 0xc201}) r10 = socket$kcm(0x2, 0x3, 0x2) ioctl$SIOCSIFHWADDR(r10, 0x8914, &(0x7f0000000080)={'syzkaller1\x00', @broadcast}) ioctl$sock_inet_SIOCADDRT(0xffffffffffffffff, 0x890b, &(0x7f00000003c0)={0x0, {0x2, 0x4e20, @rand_addr=0x64010100}, {0x2, 0x4a24, @remote}, {0x2, 0x4e25, @multicast2}, 0x204, 0x0, 0x0, 0x0, 0x2008, 0x0, 0x200003, 0x2, 0x2}) write$tun(r3, &(0x7f00000003c0)=ANY=[@ANYBLOB="080000fa"], 0xdc) sendmsg$nl_route(r0, &(0x7f0000000580)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000000)=ANY=[@ANYBLOB="580000001000010400004000fedbdf2501f80000", @ANYRES32=0x0, @ANYBLOB="01020400000000002800128008000100736974001c00028008000200c6120001060008001900000005000a00fd000000080004000100010008000a00fa"], 0x58}}, 0x0) 15m39.444957751s ago: executing program 32 (id=2772): r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = socket$kcm(0x2d, 0x2, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$sock_kcm_SIOCKCMATTACH(r1, 0x89e0, &(0x7f0000000040)={r2}) ioctl$sock_kcm_SIOCKCMATTACH(r1, 0x89e0, &(0x7f0000000080)={r2}) r3 = openat$tun(0xffffffffffffff9c, &(0x7f0000000000), 0x40241, 0x0) writev(r3, &(0x7f00000007c0)=[{&(0x7f00000000c0)="770c32625f25126f5bb6310a9edaaf1699650cda58b97559d2fc84370a9c24a7a1c908e69f9e27ab7275e3da40dc1f959c193f417e4606d8b9eb3bfe", 0x3c}, {&(0x7f0000000180)="b617eb024b4cb5315e92f205c7b82ce107b1ae7d965706fc39426f749bd1ec2800e764cacdb855b0b0198f32b64d2e473e6365870a4362d365ed8b380dac2bbeb828bb2e7a77bb3f6333615c424e665b7bd12e2faca210f4f1d80e4a7ad80c7e243fe6619e572b9bedeb0081911d28f4", 0x70}, {&(0x7f0000000240)="b692cda7370f23edaab1a79ac5519bbaea015f9c0473c63bdd2eff38ece91dfcccf023261aa24f5d0fd26865aa265c886cb90c855f0784aa92534cfbfb64cef2b9d41a48dba912cb42ebe65f279d7ae8c8dd0e7a6fd6446c223a5e98be25bc672d77c1e3a6ca465546905dcc18416524bbdd98cb4c2a02ae6f8da36bd488454f9ed122fac81ae2e864b25c40bec2606c968cd6e057c2531c80b49dbfe95c97c3296a52f9dbd906828f10563551a2cb8223ccba", 0xb3}, {&(0x7f0000000300)="07af820383d27057b9b68c70b21f63499f8c45e37f11eeb0d930937dce5b8c90fbda9c750c005988976cd779b8d2aa7b7facbc40bb4135940deffa4befa220c2648f2747f477f67153ea93cfb41c1152aa1e5cd2eeeca1954f4a5e81", 0x5c}, {&(0x7f0000000440)="1d7f148a545bf37ceae424f8286654534ea58040f073cf220f7224a887aa47294b9a6bb14bc3e0e01409865aafc3616474f42bc81a3f2bf3d1182b8af9a278d6f37b59434d55eed50d1d2af95280102ca553d263a9f4622fcc97cade4ef833cb1cb6deb375f479773897c696c4b787763d4e2e279fd8aa4dd3e35ac04f9baa6e8b4b7e0bfc05242eb6a45f4849e0f54de74d9411e6ec40fc6069c925888f64683790388c2dea054beb08d75d7c86305e9f588ce68ca0a87a1120c19c2b0fdacad6bf836686bf9ea78bca187112c3d534467b36d9", 0xd4}, {&(0x7f00000005c0)="b770739ab8232fe9313c6e8474746d9d49e6428a865251ecdb6331d92bf8341c78ddd61db74c2465cc2ae2ddd5a900352a05fad655a2e40d2dc2a8b721377f1aaca5a5139f70e3a6b887af02c38f56ce4af43da1d14b979e390159e5e58a5842051ffa6b25b2db5f4e4f7576bce64334287e84cfbd58a1da88fae125", 0x7c}, {&(0x7f0000000640)="1a4070c7072c59ee8484f3e1310062e1e04b4dc964bb027412d61a79c6b01cda9fa0d3c1037fa349178efae7e182749ad40e1cc59d2eda98775481568d6af25b2cc1a99e6c3c56c44fcb92536fce707fab66b9c79641e76b362faf8dd6c8e9fa0247b00fc4b4f547d25a604dc81a89f87430c061bf92be26d8f4adbe2436c3c77e6107f860a547f21a978862fbea7607a2d94f349c040a1d0bc337befd94caaabe401469665741561e48e312b3dcaecba4743193628e6a6b88af6cb627c054bbefe604358e5424fd719e289c442d2d38d9a244117c8d57428e2237346c437ed18c6357e337edc0", 0xe7}, {&(0x7f0000000740)="9e90812dda014eb4580a8e3bdacfecb1f96ed148aad2e4c977c9e250f82075f7070e6b7966de64052595c02f93ad42d32a732121733204f0bd7171eb664a9e5d71852a1174fcbab3a95a1cb34305ad8b8226b0fbc1a08ea626475096d1526f6acf", 0x61}], 0x8) r4 = openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0) ioctl$TUNSETIFF(r4, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x7101}) socket$unix(0x1, 0x1, 0x0) r5 = socket$unix(0x1, 0x1, 0x0) r6 = socket(0x400000000010, 0x3, 0x1) ioctl$sock_SIOCGIFINDEX(r5, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r6, &(0x7f00000012c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000600)=@newqdisc={0x34, 0x24, 0x4ee4e6a52ff56541, 0x1070bd2a, 0xffffffff, {0x0, 0x0, 0x0, r7, {0x0, 0xfff1}, {0xffff, 0xffff}, {0x0, 0xb}}, [@qdisc_kind_options=@q_cake={{0x9}, {0x4}}]}, 0x34}, 0x1, 0x0, 0x0, 0x40}, 0x0) sendmsg$nl_route_sched(r6, &(0x7f0000000580)={0x0, 0x0, &(0x7f00000006c0)={&(0x7f0000000740)=@newtfilter={0x54, 0x2c, 0xd27, 0x70bd2a, 0x25dfdc03, {0x0, 0x0, 0x0, r7, {0xffff, 0xfff1}, {}, {0x7, 0x3}}, [@filter_kind_options=@f_flow={{0x9}, {0x24, 0x2, [@TCA_FLOW_KEYS={0x8, 0x1, 0x1db69}, @TCA_FLOW_RSHIFT={0x8, 0x4, 0x494}, @TCA_FLOW_ADDEND={0x8, 0x5, 0xff}, @TCA_FLOW_MASK={0x8, 0x6, 0x101}]}}]}, 0x54}, 0x1, 0x0, 0x0, 0x40800}, 0x2000c044) r8 = openat$tun(0xffffffffffffff9c, &(0x7f0000000400), 0x0, 0x0) close(r8) socket$nl_generic(0x10, 0x3, 0x10) ioctl$SIOCSIFHWADDR(r8, 0x8914, &(0x7f0000002280)={'syzkaller0\x00', @link_local}) r9 = socket$kcm(0x11, 0x3, 0x0) sendmsg$kcm(r9, &(0x7f00000000c0)={&(0x7f0000000380)=@xdp={0x2c, 0x7, 0x0, 0x3e}, 0x80, &(0x7f0000000080)=[{&(0x7f0000000140)='\r', 0x1}], 0x1, 0x0, 0x0, 0x86dd}, 0x4) ioctl$TUNSETIFF(r3, 0x400454ca, &(0x7f0000000200)={'syzkaller1\x00', 0xc201}) r10 = socket$kcm(0x2, 0x3, 0x2) ioctl$SIOCSIFHWADDR(r10, 0x8914, &(0x7f0000000080)={'syzkaller1\x00', @broadcast}) ioctl$sock_inet_SIOCADDRT(0xffffffffffffffff, 0x890b, &(0x7f00000003c0)={0x0, {0x2, 0x4e20, @rand_addr=0x64010100}, {0x2, 0x4a24, @remote}, {0x2, 0x4e25, @multicast2}, 0x204, 0x0, 0x0, 0x0, 0x2008, 0x0, 0x200003, 0x2, 0x2}) write$tun(r3, &(0x7f00000003c0)=ANY=[@ANYBLOB="080000fa"], 0xdc) sendmsg$nl_route(r0, &(0x7f0000000580)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000000)=ANY=[@ANYBLOB="580000001000010400004000fedbdf2501f80000", @ANYRES32=0x0, @ANYBLOB="01020400000000002800128008000100736974001c00028008000200c6120001060008001900000005000a00fd000000080004000100010008000a00fa"], 0x58}}, 0x0) 14m56.905962538s ago: executing program 33 (id=3100): r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000500)=@base={0x1, 0x2, 0x2008, 0x6}, 0x50) bpf$PROG_LOAD(0x5, &(0x7f0000000000)={0x5, 0xc, &(0x7f0000000180)=ANY=[@ANYBLOB="1800000020000000000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000019007b8af8ff00000000bfa200000000000007020000fbffffffb703000008000000b704000000000000850000000100000095"], &(0x7f0000000900)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x20, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r1 = socket$netlink(0x10, 0x3, 0x0) sendmsg$netlink(r1, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000000)=[{&(0x7f0000000080)=ANY=[@ANYRES32=r1], 0x28}], 0x1, 0x0, 0x0, 0xb305e06d8ab48277}, 0x0) r2 = socket$kcm(0x23, 0x2, 0x0) sendmsg$sock(r2, &(0x7f0000000340)={0x0, 0x0, 0x0}, 0x0) r3 = openat$tun(0xffffffffffffff9c, &(0x7f0000000000), 0x40241, 0x0) ioctl$TUNSETIFF(r3, 0x400454ca, &(0x7f0000000200)={'syzkaller1\x00', 0xc201}) recvfrom(r2, 0x0, 0x23, 0x0, 0x0, 0x0) sendmsg$sock(r1, &(0x7f0000000a80)={&(0x7f0000000480)=@pptp={0x18, 0x2, {0x0, @broadcast}}, 0x80, &(0x7f0000000900)=[{&(0x7f0000000500)="0f3f6ef08b426f388909e30c2bc08b8a8863c0aed94f81153297c7e5d785fbfaf1d4522ddd23dafc37f30f30732ffea5cb92cc8e64e08f8603908b945a2952b4a65a88e6527060abf95c66819be2831a16", 0x51}, {&(0x7f0000000580)="56d2f349c37d0eb8cdd29930302815b2beb705b8a2d61d0392d4b9c6fef4587fa0d6ae2202b892c576a53d5233d581b362bf09ba2a8b96cbe2e1c46a61155b477af604b7dbf8f0379724be0d253578259467114e224352195aaaefcef74385dc4f11f87b9cbc72822e3b95830b433c9164ba7d6ee59b", 0x76}, {&(0x7f0000000600)="732673078db283339ccbc0d7da0ea90dde9cee5c7e9842eaa43bbc6b75fe74c2c6f02647e8e6cfba7fc34d3a7f46d6edd40beea4bf1280c7fd9176e6fbb61c3162aeebb1e12cfd243ce390cbde9c0ab9335338b98478f3c8830918522028e47a485a911ce320cb7296d4b70f2b8adb8b1b393cb0cd21c8e3be9f31e5eb1baa7c43d2a00718f3215a7c5ebf06d10f7aa375ce72cabfddde1582eac2ca123c25155f298f67ef2c16626e834a47c0d6baf95b4afd1a7f40031ebf434efa64be078e724c37e5325a5941bb86fc732ea65bfc1c625ee915c2cb1b6545566eb9d4bd195db12a11bf2e5e4c62a3a70f7a55", 0xee}, {&(0x7f0000000700)="be85af99b84a780618d7fab7d04cbcfbbe2180daea5665a439775f17d1e82cd743757a53943a84c4b84e8c0df93fe5edb70beae4f0c283c2ab6c4aeedb1468e11e0edb23d8a7af3f74e2b653aa48ea8d22d90236ec2d50946aa3a1edf80ba37b79ee7681f6373afb949612fece8009dc0c109e", 0x73}, {&(0x7f0000000780)="8a655d608720a4ee60e10528176afed516366686ccbb550c71457ec14590863dc87531d40a4e0a2fac8495e2df76097e63cab4e7c9e9de3a3a2eff56d68a6db72d97971d5a91f713aa105a1a63b91c0a393d6aba3e56f049e9f800168fe70ea5e3ad4547df85f91931e027f3916d18accaa2667f58d9b0413d7f3779d35d8b199d0eaf08d47c72a290b28de1522672ed16521a467d2d7de7f5623abc790718592026291b908d7d46f2f94df1f7028e4c166f5f6303f6e2b4caf141a48ad69b0f31897c93467d449164a3fadc40620985299410ceaf9d0836bf57", 0xda}, {&(0x7f0000000880)="60ff27b8a8bb109e29d6d9837f102d1d3ec751e7ce034f3e0304e77ec9ee817c280529d306bb6b7121a7dc5fa6ca688f369f687ec621c8d5859467b551084c11fd39b855d984a006139142e07c34228157", 0x51}], 0x6, &(0x7f0000000980)=[@timestamping={{0x14, 0x1, 0x25, 0x3}}, @timestamping={{0x14, 0x1, 0x25, 0xdf}}, @timestamping={{0x14, 0x1, 0x25, 0x6}}, @txtime={{0x18, 0x1, 0x3d, 0x4}}, @txtime={{0x18, 0x1, 0x3d, 0x80000000}}, @mark={{0x14, 0x1, 0x24, 0x3}}, @mark={{0x14, 0x1, 0x24, 0x5}}, @mark={{0x14, 0x1, 0x24, 0x4}}, @timestamping={{0x14}}, @txtime={{0x18, 0x1, 0x3d, 0x4}}], 0xf0}, 0x4) r4 = socket(0x400000000010, 0x3, 0xfffffffe) r5 = socket$unix(0x1, 0x2, 0x0) ioctl$sock_SIOCGIFINDEX(r5, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r4, &(0x7f0000006040)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000006100)=@delchain={0x24, 0x65, 0x1, 0x70bd2e, 0x25dfdbff, {0x0, 0x0, 0x0, r6, {0x0, 0xfff3}, {}, {0xb}}}, 0x24}, 0x1, 0x0, 0x0, 0x4c898}, 0x20004804) connect$can_j1939(0xffffffffffffffff, &(0x7f00000000c0)={0x1d, r6, 0x0, {0x2, 0xff, 0x3}, 0x2}, 0x18) setsockopt$sock_int(r2, 0x1, 0x6, &(0x7f0000000240)=0x9, 0x4) r7 = socket$kcm(0x2, 0xa, 0x2) ioctl$SIOCSIFHWADDR(r7, 0x8914, &(0x7f0000000180)={'syzkaller1\x00', @link_local}) write$tun(r3, &(0x7f0000000380)=ANY=[@ANYBLOB="1c0000f500000000000000862dfdff00000065"], 0x78) r8 = openat$tun(0xffffffffffffff9c, &(0x7f0000000040), 0x8400, 0x0) r9 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_TEST(r9, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000400)={0x1c, 0xb, 0x6, 0x5, 0x0, 0x0, {0x3, 0x0, 0x4}, [@IPSET_ATTR_PROTOCOL={0x5}]}, 0x1c}, 0x1, 0x0, 0x0, 0x408c4}, 0x4000) write$tun(r8, &(0x7f0000000180)={@void, @val={0x2, 0x1, 0xf0c, 0x8, 0x9}, @ipv4=@gre={{0xf, 0x4, 0x0, 0x11, 0x2c8, 0x468, 0x0, 0x53, 0x2f, 0x0, @multicast1, @broadcast, {[@lsrr={0x83, 0x27, 0x24, [@multicast2, @multicast2, @private=0xa010100, @private=0x5, @local, @remote, @multicast1, @local, @multicast1]}]}}, {{0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x1, 0x880b, 0xb5, 0x1, [0xfffe], "6bb70cb82de626aaf434092f004e724deca858b3ba78685e8943d45b76f1a1da0b7569699912a88550908b9a51965587ee511f7c83c5aba22fb9b1351b18e7c10c3040baf80b2a6b213361dbed487b93cde96ce18e395feca6d333349bede0725cc4e2a4c858f7faa3efc1e11738e7f9b401ea73712c2681eeed24942b504b5fc745c2089d13791b35b1076ba5df78be0e02d2478e9117cd7a172a6bdd2742cbf877e528eb22e0f4427c5e0cf095744892ff3f0000"}, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x800, [0x530], "b28bf432540db153f6d56aca93de0109f0a61ec09ba348da0ab9589cc405abad4d25b7b099f19ad6aa590b5a9144c0bb04861b453d0cda1499718fba969e33fbe76233b1"}, {0x1, 0x0, 0x1, 0x0, 0x0, 0x0, 0x86dd, [0x2, 0x4], "ee24d58d45d29566360251601d70386ca1a6e58daec345a4fa427225d515a11fbc95edfd47448c49e886a7bdbaabae6b2542605e21510d7df87f4c18a47659eed07db2fd8f35d05ab3740e9f8cf97aba1f96ed4fd02b74a7bf82369e437c47d30c1d44f027199e6243175e4172ab19e9c49085ff1ef2dbacbce6d2995a78a5"}, {0x8, 0x88be, 0x1, {{0x2, 0x1, 0x6, 0x3, 0x1, 0x1, 0x2, 0x8}, 0x1, {0x2}}}, {0x8, 0x22eb, 0x0, {{0x5, 0x2, 0x1, 0x0, 0x0, 0x3, 0x3, 0x6}, 0x2, {0x4, 0x656f, 0x1, 0x8, 0x0, 0x0, 0x3, 0x1}}}, {0x8, 0x6558, 0x2, "a2f125c17ee6e5341170c6748f201630bec10e87c50dd4fcc014ee3333a7f9500a31908d22594da2bb98f27c4dbc4a36f9998e072de94cb6b0197feadb515253f63db97e81cf583917c5a5158560e54dc5a5f514e7cbda9b19b2fa725a2e59f49d4e8605897714c716501b923ad1c31e05a7bc06790255a61ebf5f0b99aedff182c079ccd46ab6e5e00d4b4056143455a8097750a7040de8fcf250ead33f0d42bc329d9b4d940b2d7530a2a700357296930dbb52f10dd8dc3aee7fcdbc4d75c8ae871ceb7be3ef38"}}}}, 0x2d2) 10m37.131528248s ago: executing program 6 (id=6331): r0 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r0, &(0x7f0000000480)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000580)=@updpolicy={0x17c, 0x19, 0x1, 0x0, 0x0, {{@in6=@ipv4={'\x00', '\xff\xff', @empty}, @in=@remote, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff}, {0xff}}, [@tmpl={0xc4, 0x5, [{{@in6=@mcast1, 0x4d2, 0x33}, 0xa, @in6=@empty, 0x3501, 0x1, 0x0, 0x3b, 0x83, 0x5, 0x7}, {{@in6=@local, 0x4d6, 0x3c}, 0xa, @in6=@private1, 0x3502, 0x2, 0x0, 0x7, 0x7f, 0x0, 0x4}, {{@in6=@initdev={0xfe, 0x88, '\x00', 0x0, 0x0}, 0x4d3, 0x6c}, 0x2, @in=@private=0xa010100, 0x3502, 0x5, 0x0, 0xd1, 0xe, 0x47b, 0x3}]}]}, 0x17c}}, 0x4000) bind(r0, &(0x7f0000000000)=@rxrpc=@in6={0x21, 0x3, 0x2, 0x1c, {0xa, 0x4e24, 0xfff, @ipv4={'\x00', '\xff\xff', @broadcast}, 0x80000000}}, 0x80) 10m36.953628859s ago: executing program 6 (id=6333): bpf$MAP_CREATE(0x0, &(0x7f00000000c0)=@base={0x2, 0x3ff, 0x3, 0x4, 0x10201, 0xffffffffffffffff, 0xfffffffe, '\x00', 0x0, 0xffffffffffffffff, 0x1, 0x7, 0x5}, 0x50) sendmsg$inet(0xffffffffffffffff, &(0x7f0000000080)={&(0x7f0000000340)={0x2, 0x4001, @dev}, 0x10, 0x0}, 0x300440c4) write$bt_hci(0xffffffffffffffff, &(0x7f0000000500)={0x1, @write_ssp_mode={{0xc56, 0x1}, {0x54}}}, 0x5) sendmmsg$sock(0xffffffffffffffff, &(0x7f0000003b40)=[{{0x0, 0x0, &(0x7f00000009c0)=[{&(0x7f00000002c0)="f973085a6ea39ea1b25a1c6b351e11245900557d1c8e9f86bae5e5c64e50ef25afb0295d0c303850b4bff4d088bf9df67e0138", 0x33}, {&(0x7f0000000380)="82f294054d05973abfac6a6f31050418457d017c5fd68b034cf51b9f6a6d71daa5c776bca90037bc7c3d88b151fbf856f69ebd05e750f13f02af646b284953b6640a08c827c6f2ff4ad8e84077f9f03f94792aa17c4743cba3f355bb9c5b04b91ed70d253db68e17cdd561fab504", 0x6e}, {0x0}, {&(0x7f0000000800)}], 0x4}}, {{0x0, 0x0, &(0x7f0000000600)=[{0x0}, {&(0x7f0000000ac0)}, {&(0x7f0000000580)}], 0x3}}], 0x2, 0x20000044) openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0) r0 = socket$alg(0x26, 0x5, 0x0) bind$alg(r0, &(0x7f0000000380)={0x26, 'skcipher\x00', 0x0, 0x0, 'cbc-cast5-avx\x00'}, 0x58) setsockopt$ALG_SET_KEY(r0, 0x117, 0x1, &(0x7f00000004c0)="2c385a7af3be", 0x6) r1 = accept4(r0, 0x0, 0x0, 0x800) sendmmsg$alg(r1, &(0x7f0000000040)=[{0x0, 0x0, &(0x7f0000000000)=[{&(0x7f0000000080)="f78d9ca38fff48f3be52163448412ba8", 0x10}, {0x0}, {&(0x7f00000003c0)="e8700e444d50a969ff67347cff6127e6ef12ee3819271482a4975a52c1ab9b8b4db3945d1032005eabe97b4dc33a47d3a158da988456d30026b433186f53cdcdb93a4722bf306a10470d50f5cb1ece9ead3459bab1cf1538cd0b157653c5e892962c80f158c443e9c6ad7d2a8103ef2f4b93766b9a21501f94c1568b13756b66f74f46cf801704d2da8b96c34070b233af0afcc436712e58ed25e721193af05a045ad3fdc928f02f3dbad19d3e66eebda2e63f3f46ef4511cee26d7b48241847bf9e343ef4674c45e2a085060f11", 0xce}], 0x3, &(0x7f0000000380)=[@op={0x18, 0x117, 0x3, 0x1}], 0x18}], 0x1, 0x40800) recvmsg(r1, &(0x7f00000005c0)={0x0, 0x0, &(0x7f00000001c0)=[{&(0x7f00000000c0)=""/81, 0x7ffff000}, {&(0x7f0000000200)=""/83, 0x20000253}], 0x2}, 0x0) r2 = socket$nl_generic(0x10, 0x3, 0x10) r3 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000580), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r2, 0x8933, &(0x7f00000013c0)={'wlan1\x00', 0x0}) sendmsg$NL80211_CMD_FRAME(r2, &(0x7f0000001380)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f0000000dc0)=ANY=[@ANYBLOB="f4060000", @ANYRES16=r3, @ANYBLOB="01000000000000e14f003b00000008000300", @ANYRES32=r4, @ANYBLOB="d50633008000009effffffffffff080211000001"], 0x6f4}}, 0x0) 10m36.796481633s ago: executing program 6 (id=6334): r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000080), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f00000000c0)={'wlan1\x00', 0x0}) sendmsg$NL80211_CMD_CONNECT(r0, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000240)={0x30, r1, 0x5, 0x0, 0x0, {{}, {@val={0x8, 0x3, r2}, @void}}, [@NL80211_ATTR_SSID={0xa, 0x34, @default_ap_ssid}, @NL80211_ATTR_AUTH_TYPE={0x8}, @chandef_params]}, 0x30}, 0x1, 0x6000000}, 0x0) 10m36.741569258s ago: executing program 6 (id=6336): r0 = socket$inet6_mptcp(0xa, 0x1, 0x106) setsockopt$inet6_tcp_TCP_ULP(r0, 0x29, 0x1f, 0x0, 0x0) r1 = socket$inet6(0xa, 0x2, 0x3a) setsockopt$inet6_int(r1, 0x29, 0x11, &(0x7f0000000140)=0x2, 0x4) r2 = socket$inet6(0xa, 0x800000000000002, 0x0) sendmmsg$inet6(r2, &(0x7f0000000d80)=[{{&(0x7f0000000280)={0xa, 0x4e24, 0x3, @loopback, 0x1}, 0x1c, 0x0, 0x0, &(0x7f0000000800)=[@pktinfo={{0x24, 0x29, 0x32, {@empty}}}, @dstopts_2292={{0x18, 0x29, 0x4, {0x30}}}], 0x40}}], 0x1, 0x400c404) r3 = socket$nl_route(0x10, 0x3, 0x0) r4 = epoll_create1(0x80000) epoll_ctl$EPOLL_CTL_MOD(r4, 0x3, r3, &(0x7f0000000240)={0x120002000}) socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000040)={'veth1_to_bridge\x00', 0x0}) epoll_create1(0x0) getsockopt$inet_sctp_SCTP_RECONFIG_SUPPORTED(0xffffffffffffffff, 0x84, 0x75, &(0x7f0000000080)={0x0, 0x3d5}, &(0x7f0000000100)=0x8) shutdown(r1, 0x1) getsockopt$inet_sctp6_SCTP_ASSOCINFO(r1, 0x84, 0x1, &(0x7f0000000180)={r6, 0x1, 0x9, 0x23, 0x4, 0x7}, &(0x7f00000001c0)=0x14) sendmsg$nl_route(r3, &(0x7f0000000000)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000280)=ANY=[@ANYBLOB="340000001000050025bd7000fadbdf2500000000", @ANYRES32=r5, @ANYBLOB="00000000010400000a0001"], 0x34}, 0x1, 0x0, 0x0, 0x1}, 0x4000) 10m36.608533834s ago: executing program 6 (id=6338): r0 = socket$netlink(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000340)={'bridge_slave_0\x00', 0x0}) (async) syz_init_net_socket$nl_rdma(0x10, 0x3, 0x10) (async) r2 = socket$inet6_sctp(0xa, 0x5, 0x84) (async) getsockopt$inet_sctp_SCTP_PARTIAL_DELIVERY_POINT(0xffffffffffffffff, 0x84, 0x13, &(0x7f0000000000)={0x0, 0x3}, &(0x7f0000000040)=0x8) getsockopt$inet_sctp6_SCTP_SOCKOPT_PEELOFF(r2, 0x84, 0x66, &(0x7f0000000080)={r3, 0x9}, &(0x7f00000000c0)=0x8) sendmsg$nl_route(r0, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000200)=@bridge_dellink={0x2c, 0x13, 0x5, 0x1000000, 0xfffffffe, {0x7, 0x0, 0x0, r1, 0x2040}, [@IFLA_AF_SPEC={0xc, 0x1a, 0x0, 0x1, [@AF_INET={0x8, 0x4, 0x0, 0x1, {0x4, 0x8}}]}]}, 0x2c}, 0x1, 0x0, 0x0, 0x800c000}, 0x0) 10m36.187087636s ago: executing program 6 (id=6341): r0 = socket$kcm(0x11, 0x3, 0x0) r1 = openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0) ioctl$TUNSETIFF(r1, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x7001}) r2 = socket(0x400000000010, 0x3, 0x0) r3 = socket$unix(0x1, 0x1, 0x0) ioctl$sock_SIOCGIFINDEX(r3, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r2, &(0x7f0000000bc0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000640)=@newqdisc={0x48, 0x24, 0x4ee4e6a52ff56541, 0x70bd2b, 0xffffffff, {0x0, 0x0, 0x0, r4, {0x0, 0xfff1}, {0xffff, 0xffff}, {0x0, 0x2}}, [@qdisc_kind_options=@q_htb={{0x8}, {0x1c, 0x2, [@TCA_HTB_INIT={0x18, 0x2, {0x3, 0x114, 0xe}}]}}]}, 0x48}, 0x1, 0x0, 0x0, 0x4}, 0x0) r5 = openat$tun(0xffffffffffffff9c, &(0x7f00000004c0), 0x0, 0x0) close(r5) r6 = socket$unix(0x1, 0x1, 0x0) ioctl$sock_SIOCGIFINDEX(r6, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) r8 = socket(0x400000000010, 0x3, 0x0) sendmsg$nl_route_sched(r8, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f00000022c0)=@newtfilter={0x34, 0x2c, 0xd3f, 0x30bd2d, 0x25dfdbfd, {0x0, 0x0, 0x0, r7, {0x5, 0xfff3}, {}, {0x8, 0x10}}, [@filter_kind_options=@f_basic={{0xa}, {0x4}}]}, 0x34}, 0x1, 0x0, 0x0, 0x10}, 0x8080) ioctl$SIOCSIFHWADDR(r5, 0x8914, &(0x7f0000002280)={'syzkaller0\x00', @multicast}) r9 = socket$unix(0x1, 0x5, 0x0) ioctl$sock_SIOCGIFINDEX(r9, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) setsockopt$sock_attach_bpf(r0, 0x107, 0xf, &(0x7f0000000600), 0x56) sendmsg$kcm(r0, &(0x7f00000000c0)={&(0x7f0000000580)=@xdp={0x2c, 0x0, r10, 0x3e}, 0x80, &(0x7f0000000080)=[{&(0x7f0000000180)="27030200590214120600002fb96dbcf706e10500000086ddffff1144ee1611d4b8bf4a31accb", 0xfdef}], 0x1}, 0x810000000000000) 10m22.399571626s ago: executing program 2 (id=6453): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) ioctl$TUNSETIFF(0xffffffffffffffff, 0x400454ca, &(0x7f0000000100)={'erspan0\x00', 0x2}) sendmsg$NFT_BATCH(r0, &(0x7f000000c2c0)={0x0, 0x0, &(0x7f0000000140)={&(0x7f00000003c0)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a28000000000a0101000000005e1affd5020000000900010073797a300000000008000240000000032c000000030a01030000e6ff00000000020000000900010073797a30000000000900030073797a320000000014000000110001"], 0x7c}}, 0x800) sendmsg$NFT_BATCH(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000b00)={&(0x7f0000000040)=ANY=[@ANYBLOB="140000001000010000000000000000000a00000a74000000060a010400000000000000000200000048000480440001800a0001006d617463680000003400028000030007682c020b7b37f29f057acc54d4077549f4e34e86f469eb08000240000000000900010073797a30000000000900020073797a3200000000141000001100010000000000000000000000000a"], 0x9c}, 0x1, 0x0, 0x0, 0x4000000}, 0x0) 10m22.356870149s ago: executing program 2 (id=6454): r0 = socket(0x10, 0x3, 0x0) r1 = syz_init_net_socket$802154_raw(0x24, 0x3, 0x0) sendmmsg$inet(r1, &(0x7f0000004100)=[{{0x0, 0x0, &(0x7f0000000100)=[{&(0x7f0000000140)="169381", 0x3}], 0x1}}], 0x1, 0x48c4) (async) sendmmsg$inet(r1, &(0x7f0000004100)=[{{0x0, 0x0, &(0x7f0000000100)=[{&(0x7f0000000140)="169381", 0x3}], 0x1}}], 0x1, 0x48c4) setsockopt$netlink_NETLINK_TX_RING(r0, 0x10e, 0xc, &(0x7f0000000180)={0xffffff}, 0x10) write(r0, &(0x7f0000000000)="240000001a005f0214f9f4070009040080fffffffe280000000000000800040001000000", 0x24) sendmsg$L2TP_CMD_SESSION_GET(r0, &(0x7f0000000140)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x400000}, 0xc, &(0x7f0000000100)={&(0x7f0000000080)={0x50, 0x0, 0x2, 0x70bd25, 0x25dfdbff, {}, [@L2TP_ATTR_MRU={0x6, 0x1d, 0xa2}, @L2TP_ATTR_UDP_ZERO_CSUM6_RX={0x5, 0x22, 0x1}, @L2TP_ATTR_PEER_COOKIE={0xc, 0x10, 0x6}, @L2TP_ATTR_RECV_SEQ={0x5, 0x12, 0xff}, @L2TP_ATTR_L2SPEC_TYPE={0x5, 0x5, 0x1}, @L2TP_ATTR_RECV_SEQ={0x5, 0x12, 0x6}, @L2TP_ATTR_L2SPEC_TYPE={0x5, 0x5, 0x1}]}, 0x50}, 0x1, 0x0, 0x0, 0x800}, 0x10) r2 = socket(0x10, 0x80002, 0x0) socket$netlink(0x10, 0x3, 0x0) (async) r3 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_generic(r3, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000600)={0x20, 0x18, 0x229, 0x0, 0x0, {0x2}, [@typed={0x8, 0x800, 0x0, 0x0, @u32}, @nested={0x4, 0x9}]}, 0x20}}, 0x0) sendmsg$nl_route_sched(r2, &(0x7f0000001240)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000800)=@newtaction={0x48, 0x30, 0x51b, 0x0, 0x0, {}, [{0x34, 0x1, [@m_skbmod={0x30, 0x1, 0x0, 0x0, {{0xb}, {0x4}, {0x4, 0x14}, {0xc}, {0xc, 0x6}}}]}]}, 0x6e}}, 0x0) sendmsg$IPCTNL_MSG_CT_NEW(r0, &(0x7f0000000340)={&(0x7f00000001c0)={0x10, 0x0, 0x0, 0x1000c041}, 0xc, &(0x7f0000000300)={&(0x7f0000000200)={0xd0, 0x0, 0x1, 0x201, 0x0, 0x0, {0x2, 0x0, 0x7}, [@CTA_PROTOINFO={0x10, 0x4, 0x0, 0x1, @CTA_PROTOINFO_TCP={0xc, 0x1, 0x0, 0x1, [@CTA_PROTOINFO_TCP_WSCALE_REPLY={0x5, 0x3, 0x9}]}}, @CTA_NAT_DST={0x7c, 0xd, 0x0, 0x1, [@CTA_NAT_V6_MAXIP={0x14, 0x5, @mcast1}, @CTA_NAT_V4_MAXIP={0x8, 0x2, @local}, @CTA_NAT_V4_MAXIP={0x8, 0x2, @multicast2}, @CTA_NAT_PROTO={0x2c, 0x3, 0x0, 0x1, [@CTA_PROTONAT_PORT_MIN={0x6, 0x1, 0x4e22}, @CTA_PROTONAT_PORT_MIN={0x6, 0x1, 0x4e23}, @CTA_PROTONAT_PORT_MIN={0x6, 0x1, 0x4e20}, @CTA_PROTONAT_PORT_MAX={0x6, 0x2, 0x4e21}, @CTA_PROTONAT_PORT_MAX={0x6, 0x2, 0x4e20}]}, @CTA_NAT_V6_MAXIP={0x14, 0x5, @mcast2}, @CTA_NAT_V6_MINIP={0x14, 0x4, @private0}]}, @CTA_NAT_DST={0x28, 0xd, 0x0, 0x1, [@CTA_NAT_V4_MINIP={0x8, 0x1, @dev={0xac, 0x14, 0x14, 0x32}}, @CTA_NAT_V4_MINIP={0x8, 0x1, @broadcast}, @CTA_NAT_V6_MAXIP={0x14, 0x5, @private0}]}, @CTA_STATUS_MASK={0x8, 0x1a, 0x1, 0x0, 0x9}]}, 0xd0}, 0x1, 0x0, 0x0, 0x8e4}, 0x1) (async) sendmsg$IPCTNL_MSG_CT_NEW(r0, &(0x7f0000000340)={&(0x7f00000001c0)={0x10, 0x0, 0x0, 0x1000c041}, 0xc, &(0x7f0000000300)={&(0x7f0000000200)={0xd0, 0x0, 0x1, 0x201, 0x0, 0x0, {0x2, 0x0, 0x7}, [@CTA_PROTOINFO={0x10, 0x4, 0x0, 0x1, @CTA_PROTOINFO_TCP={0xc, 0x1, 0x0, 0x1, [@CTA_PROTOINFO_TCP_WSCALE_REPLY={0x5, 0x3, 0x9}]}}, @CTA_NAT_DST={0x7c, 0xd, 0x0, 0x1, [@CTA_NAT_V6_MAXIP={0x14, 0x5, @mcast1}, @CTA_NAT_V4_MAXIP={0x8, 0x2, @local}, @CTA_NAT_V4_MAXIP={0x8, 0x2, @multicast2}, @CTA_NAT_PROTO={0x2c, 0x3, 0x0, 0x1, [@CTA_PROTONAT_PORT_MIN={0x6, 0x1, 0x4e22}, @CTA_PROTONAT_PORT_MIN={0x6, 0x1, 0x4e23}, @CTA_PROTONAT_PORT_MIN={0x6, 0x1, 0x4e20}, @CTA_PROTONAT_PORT_MAX={0x6, 0x2, 0x4e21}, @CTA_PROTONAT_PORT_MAX={0x6, 0x2, 0x4e20}]}, @CTA_NAT_V6_MAXIP={0x14, 0x5, @mcast2}, @CTA_NAT_V6_MINIP={0x14, 0x4, @private0}]}, @CTA_NAT_DST={0x28, 0xd, 0x0, 0x1, [@CTA_NAT_V4_MINIP={0x8, 0x1, @dev={0xac, 0x14, 0x14, 0x32}}, @CTA_NAT_V4_MINIP={0x8, 0x1, @broadcast}, @CTA_NAT_V6_MAXIP={0x14, 0x5, @private0}]}, @CTA_STATUS_MASK={0x8, 0x1a, 0x1, 0x0, 0x9}]}, 0xd0}, 0x1, 0x0, 0x0, 0x8e4}, 0x1) 10m21.111418856s ago: executing program 34 (id=6341): r0 = socket$kcm(0x11, 0x3, 0x0) r1 = openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0) ioctl$TUNSETIFF(r1, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x7001}) r2 = socket(0x400000000010, 0x3, 0x0) r3 = socket$unix(0x1, 0x1, 0x0) ioctl$sock_SIOCGIFINDEX(r3, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r2, &(0x7f0000000bc0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000640)=@newqdisc={0x48, 0x24, 0x4ee4e6a52ff56541, 0x70bd2b, 0xffffffff, {0x0, 0x0, 0x0, r4, {0x0, 0xfff1}, {0xffff, 0xffff}, {0x0, 0x2}}, [@qdisc_kind_options=@q_htb={{0x8}, {0x1c, 0x2, [@TCA_HTB_INIT={0x18, 0x2, {0x3, 0x114, 0xe}}]}}]}, 0x48}, 0x1, 0x0, 0x0, 0x4}, 0x0) r5 = openat$tun(0xffffffffffffff9c, &(0x7f00000004c0), 0x0, 0x0) close(r5) r6 = socket$unix(0x1, 0x1, 0x0) ioctl$sock_SIOCGIFINDEX(r6, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) r8 = socket(0x400000000010, 0x3, 0x0) sendmsg$nl_route_sched(r8, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f00000022c0)=@newtfilter={0x34, 0x2c, 0xd3f, 0x30bd2d, 0x25dfdbfd, {0x0, 0x0, 0x0, r7, {0x5, 0xfff3}, {}, {0x8, 0x10}}, [@filter_kind_options=@f_basic={{0xa}, {0x4}}]}, 0x34}, 0x1, 0x0, 0x0, 0x10}, 0x8080) ioctl$SIOCSIFHWADDR(r5, 0x8914, &(0x7f0000002280)={'syzkaller0\x00', @multicast}) r9 = socket$unix(0x1, 0x5, 0x0) ioctl$sock_SIOCGIFINDEX(r9, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) setsockopt$sock_attach_bpf(r0, 0x107, 0xf, &(0x7f0000000600), 0x56) sendmsg$kcm(r0, &(0x7f00000000c0)={&(0x7f0000000580)=@xdp={0x2c, 0x0, r10, 0x3e}, 0x80, &(0x7f0000000080)=[{&(0x7f0000000180)="27030200590214120600002fb96dbcf706e10500000086ddffff1144ee1611d4b8bf4a31accb", 0xfdef}], 0x1}, 0x810000000000000) 10m19.9929099s ago: executing program 4 (id=6463): r0 = bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000080)={&(0x7f0000000b80)=ANY=[@ANYBLOB="9feb01005dfc00000000000000000000000000000200"], 0x0, 0xfc5f}, 0x28) bpf$TOKEN_CREATE(0x24, &(0x7f00000000c0)={0x0, r0}, 0x8) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000140)={0x6, 0x9, &(0x7f0000000000)=ANY=[], &(0x7f0000000100)='GPL\x00', 0x8, 0x0, 0x0, 0x0, 0x4, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x807}, 0x94) 10m19.745468439s ago: executing program 4 (id=6464): bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32, @ANYBLOB="0000000000000000b70800000d0000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000100000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$MAP_CREATE(0x0, &(0x7f0000000740)=ANY=[@ANYBLOB="0b00000005000000000400000900000001"], 0x48) r0 = socket(0x10, 0x3, 0x0) setsockopt$netlink_NETLINK_TX_RING(r0, 0x10e, 0xc, &(0x7f0000000000)={0xfffffff8, 0x0, 0x7}, 0x10) write(r0, &(0x7f00000000c0)="240000001e005f0214fffffffffffff807000000b800000000000000080008000d000000", 0x24) bpf$PROG_LOAD(0x5, &(0x7f00000004c0)={0xa, 0x4, &(0x7f0000000480)=ANY=[@ANYBLOB="18000000000000000000000000000000850000006d"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r1 = socket$inet_tcp(0x2, 0x1, 0x0) setsockopt$inet_tcp_int(r1, 0x6, 0x210000000013, &(0x7f00000000c0)=0x100000001, 0x4) setsockopt$inet_tcp_TCP_REPAIR_QUEUE(r1, 0x6, 0x14, &(0x7f00000003c0)=0x1, 0x4) connect$inet(r1, &(0x7f0000000180)={0x2, 0x4e21, @local}, 0x10) sendto$inet(r1, &(0x7f0000000380)='g', 0x1, 0x8812, 0x0, 0x0) recvmmsg(r1, &(0x7f0000002580)=[{{0x0, 0x0, 0x0}, 0x2}, {{0x0, 0x0, &(0x7f0000002280)=[{&(0x7f0000000400)=""/29, 0x1d}, {0x0}], 0x2}, 0x100}], 0x2, 0x10122, 0x0) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, 0x0, 0x0) bpf$PROG_LOAD(0x5, 0x0, 0x0) bpf$PROG_LOAD(0x5, 0x0, 0x0) bpf$BPF_PROG_TEST_RUN(0xa, 0x0, 0x0) getsockname$tipc(0xffffffffffffffff, &(0x7f0000000000)=@name, &(0x7f0000000040)=0x10) 10m19.673926002s ago: executing program 4 (id=6465): r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000080), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f00000000c0)={'wlan1\x00', 0x0}) r3 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$TIPC_CMD_ENABLE_BEARER(r3, 0x0, 0x0) sendmsg$TIPC_CMD_GET_MEDIA_NAMES(r0, 0x0, 0x4004000) ioctl$BTRFS_IOC_LOGICAL_INO(r0, 0xc0389424, 0x0) sendmsg$NL80211_CMD_CONNECT(r0, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000240)={0x30, r1, 0x5, 0x0, 0x0, {{}, {@val={0x8, 0x3, r2}, @void}}, [@NL80211_ATTR_SSID={0xa, 0x34, @default_ibss_ssid}, @chandef_params=[@NL80211_ATTR_WIPHY_FREQ={0x8, 0x26, @random=0x171b}]]}, 0x30}}, 0x0) (fail_nth: 2) 10m19.363930561s ago: executing program 4 (id=6466): sendmsg$nl_route(0xffffffffffffffff, 0x0, 0x0) r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000140), 0x48241, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f00000000c0)={'syzkaller1\x00', 0x6bf1c2d5adba8c32}) r1 = socket$kcm(0x2, 0xa, 0x2) ioctl$SIOCSIFHWADDR(r1, 0x8914, &(0x7f0000000180)={'syzkaller1\x00', @link_local}) write$tun(r0, &(0x7f0000000440)={@val={0x70}, @void, @eth={@local, @remote, @void, {@generic={0x4305}}}}, 0x12) r2 = socket$inet6_sctp(0xa, 0x1, 0x84) r3 = socket$nl_generic(0x10, 0x3, 0x10) r4 = syz_genetlink_get_family_id$ethtool(&(0x7f0000000040), 0xffffffffffffffff) sendmsg$ETHTOOL_MSG_RINGS_SET(r3, &(0x7f00000003c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000500)={0x34, r4, 0x1, 0x0, 0x0, {}, [@ETHTOOL_A_RINGS_HEADER={0x18, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'wlan1\x00'}]}, @ETHTOOL_A_RINGS_TX={0x8}]}, 0x34}}, 0x4000800) getsockopt$inet_sctp6_SCTP_GET_ASSOC_NUMBER(r2, 0x84, 0x1c, &(0x7f0000000100), &(0x7f0000000140)=0x4) shutdown(r2, 0x0) getsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX3(r2, 0x84, 0x6f, &(0x7f0000000000)={0x0, 0x1c, &(0x7f00000000c0)=[@in6={0xa, 0x0, 0x0, @private2}]}, &(0x7f0000000180)=0x10) setsockopt$inet_sctp6_SCTP_PEER_ADDR_THLDS(r2, 0x84, 0x85, &(0x7f0000000000)={r5, @in={{0x2, 0x0, @empty}}, 0x0, 0x7ffe}, 0x90) setsockopt$inet_sctp6_SCTP_PEER_ADDR_PARAMS(r2, 0x84, 0x9, &(0x7f0000000340)={r5, @in={{0x2, 0x4e22, @local}}, 0x20003, 0x0, 0x20000, 0x81, 0x9, 0x0, 0x3}, 0x9c) 10m18.040418562s ago: executing program 4 (id=6476): openat$tun(0xffffffffffffff9c, 0x0, 0x0, 0x0) r0 = socket$alg(0x26, 0x5, 0x0) bind$alg(r0, &(0x7f0000000380)={0x26, 'skcipher\x00', 0x0, 0x0, 'cbc-cast5-avx\x00'}, 0x58) accept4(r0, 0x0, 0x0, 0x800) r1 = socket$packet(0x11, 0x3, 0x300) socketpair(0x1, 0x20000000000001, 0x0, &(0x7f0000000100)={0xffffffffffffffff, 0xffffffffffffffff}) getsockname$packet(r2, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000040)=0x14) bind$packet(r1, &(0x7f0000000000)={0x11, 0x0, r3, 0x1, 0x0, 0x6, @link_local}, 0x14) sendto$inet6(r1, &(0x7f0000000280)="02043c00ec074802010e0200c52cf7c20675e005b02f0800eb2b2ff0dac8897c6b112002faffffff3066090cb600c5471d130a66321a54e7df305f80a88161b6fd8f24286a57", 0x46, 0x800, 0x0, 0x0) 10m17.811700494s ago: executing program 4 (id=6478): r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000000), 0x40241, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000200)={'syzkaller1\x00', 0xc201}) r1 = socket$kcm(0x2, 0x3, 0x2) ioctl$SIOCSIFHWADDR(r1, 0x8914, &(0x7f0000000040)={'syzkaller1\x00', @broadcast}) write$tun(r0, &(0x7f0000000240)={@val={0x8, 0x800}, @val={0x7, 0x0, 0x7, 0x0, 0x2b, 0x6}, @ipv4=@udp={{0xb, 0x4, 0x3, 0x1b, 0x79, 0x66, 0x0, 0x40, 0x11, 0x0, @private=0xa010102, @dev={0xac, 0x14, 0x14, 0x14}, {[@generic={0x0, 0xe, "7fd2ca4795463fd9e49854a3"}, @ssrr={0x89, 0x7, 0xf1, [@initdev={0xac, 0x1e, 0x0, 0x0}]}]}}, {0x4e20, 0x4e22, 0x4d, 0x0, @gue={{0x2, 0x0, 0x1, 0x2}, "d84bd100f95124a51e3293b71617e211da20e8f6bff7a3eb4d35f7a83b0727328e60cfd2f32ff2e3b2438e51122055ab7a21bee0268246871cf68312ff"}}}}, 0x87) 10m3.707151422s ago: executing program 2 (id=6456): r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000080), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f00000000c0)={'wlan1\x00', 0x0}) r3 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$TIPC_CMD_ENABLE_BEARER(r3, 0x0, 0x0) sendmsg$TIPC_CMD_GET_MEDIA_NAMES(r0, 0x0, 0x4004000) ioctl$BTRFS_IOC_LOGICAL_INO(r0, 0xc0389424, 0x0) sendmsg$NL80211_CMD_CONNECT(r0, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000240)={0x30, r1, 0x5, 0x0, 0x0, {{}, {@val={0x8, 0x3, r2}, @void}}, [@NL80211_ATTR_SSID={0xa, 0x34, @default_ibss_ssid}, @chandef_params=[@NL80211_ATTR_WIPHY_FREQ={0x8, 0x26, @random=0x171b}]]}, 0x30}}, 0x0) 10m3.467008528s ago: executing program 2 (id=6542): openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0) r0 = socket$alg(0x26, 0x5, 0x0) bind$alg(r0, &(0x7f0000000380)={0x26, 'skcipher\x00', 0x0, 0x0, 'cbc-cast5-avx\x00'}, 0x58) accept4(r0, 0x0, 0x0, 0x800) r1 = socket$packet(0x11, 0x3, 0x300) socketpair(0x1, 0x20000000000001, 0x0, &(0x7f0000000100)={0xffffffffffffffff, 0xffffffffffffffff}) getsockname$packet(r2, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, 0x0) bind$packet(r1, &(0x7f0000000000)={0x11, 0x0, r3, 0x1, 0x0, 0x6, @link_local}, 0x14) sendto$inet6(r1, &(0x7f0000000280)="02043c00ec074802010e0200c52cf7c20675e005b02f0800eb2b2ff0dac8897c6b112002faffffff3066090cb600c5471d130a66321a54e7df305f80a88161b6fd8f24286a57", 0x46, 0x800, 0x0, 0x0) 10m3.297945673s ago: executing program 2 (id=6544): r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000180)=@newlink={0x44, 0x10, 0x609, 0x0, 0x0, {0x0, 0x0, 0x0, 0x0, 0x88a8ffad}, [@IFLA_LINKINFO={0x24, 0x12, 0x0, 0x1, @bond={{0x9}, {0x14, 0x2, 0x0, 0x1, [@IFLA_BOND_MODE={0x5, 0x1, 0x1}, @IFLA_BOND_AD_LACP_ACTIVE={0x5, 0x1d, 0x1}]}}}]}, 0x44}}, 0x0) bpf$PROG_LOAD(0x5, &(0x7f0000000180)={0x4, 0x5, &(0x7f0000000000)=@framed={{0x18, 0x2}, [@call={0x85, 0x0, 0x0, 0x4f}, @call={0x85, 0x0, 0x0, 0x7d}]}, &(0x7f00000000c0)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0xfffffffe}, 0x94) socket$nl_route(0x10, 0x3, 0x0) (async) sendmsg$nl_route(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000180)=@newlink={0x44, 0x10, 0x609, 0x0, 0x0, {0x0, 0x0, 0x0, 0x0, 0x88a8ffad}, [@IFLA_LINKINFO={0x24, 0x12, 0x0, 0x1, @bond={{0x9}, {0x14, 0x2, 0x0, 0x1, [@IFLA_BOND_MODE={0x5, 0x1, 0x1}, @IFLA_BOND_AD_LACP_ACTIVE={0x5, 0x1d, 0x1}]}}}]}, 0x44}}, 0x0) (async) bpf$PROG_LOAD(0x5, &(0x7f0000000180)={0x4, 0x5, &(0x7f0000000000)=@framed={{0x18, 0x2}, [@call={0x85, 0x0, 0x0, 0x4f}, @call={0x85, 0x0, 0x0, 0x7d}]}, &(0x7f00000000c0)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0xfffffffe}, 0x94) (async) 10m2.590967826s ago: executing program 35 (id=6478): r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000000), 0x40241, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000200)={'syzkaller1\x00', 0xc201}) r1 = socket$kcm(0x2, 0x3, 0x2) ioctl$SIOCSIFHWADDR(r1, 0x8914, &(0x7f0000000040)={'syzkaller1\x00', @broadcast}) write$tun(r0, &(0x7f0000000240)={@val={0x8, 0x800}, @val={0x7, 0x0, 0x7, 0x0, 0x2b, 0x6}, @ipv4=@udp={{0xb, 0x4, 0x3, 0x1b, 0x79, 0x66, 0x0, 0x40, 0x11, 0x0, @private=0xa010102, @dev={0xac, 0x14, 0x14, 0x14}, {[@generic={0x0, 0xe, "7fd2ca4795463fd9e49854a3"}, @ssrr={0x89, 0x7, 0xf1, [@initdev={0xac, 0x1e, 0x0, 0x0}]}]}}, {0x4e20, 0x4e22, 0x4d, 0x0, @gue={{0x2, 0x0, 0x1, 0x2}, "d84bd100f95124a51e3293b71617e211da20e8f6bff7a3eb4d35f7a83b0727328e60cfd2f32ff2e3b2438e51122055ab7a21bee0268246871cf68312ff"}}}}, 0x87) 10m2.341227101s ago: executing program 2 (id=6554): bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000000)={0x1f, 0x2, &(0x7f0000000200)=@raw=[@call={0x85, 0x0, 0x0, 0x89}, @exit], &(0x7f0000000180)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x11}, 0x90) (async) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000000)={0x1f, 0x2, &(0x7f0000000200)=@raw=[@call={0x85, 0x0, 0x0, 0x89}, @exit], &(0x7f0000000180)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x11}, 0x90) socket$unix(0x1, 0x1, 0x0) (async) r0 = socket$unix(0x1, 0x1, 0x0) openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0) (async) r1 = openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0) ioctl$TUNSETIFF(r1, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x7101}) r2 = socket$kcm(0x11, 0x3, 0x0) r3 = openat$tun(0xffffffffffffff9c, &(0x7f0000000400), 0x0, 0x0) close(r3) r4 = socket$nl_route(0x10, 0x3, 0x0) r5 = socket$unix(0x1, 0x1, 0x0) ioctl$sock_SIOCGIFINDEX(r5, 0x8933, &(0x7f0000000100)={'syzkaller0\x00'}) (async) ioctl$sock_SIOCGIFINDEX(r5, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r4, &(0x7f00000012c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000140)=@newqdisc={0x44, 0x24, 0x4ee4e6a52ff56541, 0x70bd2a, 0xffffffff, {0x0, 0x0, 0x0, r6, {0x0, 0xfff1}, {0xffff, 0xffff}}, [@qdisc_kind_options=@q_hfsc={{0x9}, {0x14, 0x2, @TCA_HFSC_FSC={0x10, 0x2, {0x4d, 0xfffffffb, 0x7fffffff}}}}]}, 0x44}, 0x1, 0x0, 0x0, 0x4000000}, 0x20040084) sendmsg$nl_route_sched(r4, &(0x7f0000001200)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000700)=@newqdisc={0x838, 0x28, 0x4ee4e6a52ff56541, 0x4001, 0xfffffdf8, {0x0, 0x0, 0x0, r6, {0x10}, {}, {0xa, 0x3}}, [@qdisc_kind_options=@q_tbf={{0x8}, {0x80c, 0x2, [@TCA_TBF_RTAB={0x404, 0x2, [0x200000, 0x1, 0x9, 0x8004, 0x3, 0x5, 0x5, 0xb762, 0x4, 0x7, 0x8, 0x10, 0x2, 0x2, 0x400, 0x1007fc, 0xffff8000, 0x6, 0x403, 0x9, 0x8, 0xffffe4f5, 0xd6, 0x4, 0xfffb, 0x40000007, 0x0, 0xfffff4f0, 0x9, 0x1, 0xfffffffc, 0x4, 0x1, 0x6f2151b1, 0x9, 0xc, 0x20001000, 0x4, 0x2, 0x7, 0x4, 0x99, 0x9, 0x5, 0x6, 0x7, 0xfffffff7, 0x1, 0x2, 0x9, 0x9, 0x1000044, 0x8, 0x8, 0x39e1, 0x4, 0x7ff, 0x8, 0x7, 0x7fbffffe, 0x400, 0x8, 0xfffffa72, 0xcd, 0x4, 0x80000000, 0xc, 0x4, 0x65, 0x91, 0x659, 0x9, 0xf, 0x9, 0xc28, 0x9, 0x7, 0x3, 0x401, 0x3, 0x2, 0xfffffffa, 0x1, 0x10001, 0x3, 0x1, 0x4, 0x8, 0x8, 0x7, 0x1, 0x1, 0x1, 0x5, 0x40, 0x7, 0x12, 0x8000, 0x1, 0x4dc, 0x80, 0xffffff80, 0x7fffffff, 0xff, 0x9, 0xa7, 0xf, 0x1, 0x0, 0x3, 0x1001, 0x4, 0x401, 0x7, 0x80000000, 0xffff, 0x6, 0x5, 0x4f, 0xffffffff, 0x80000000, 0x1966f9ad, 0x200, 0x20200, 0xed5, 0xfffffc00, 0x6, 0x4, 0x8, 0x485e, 0xa85, 0x80000040, 0x2, 0x7, 0x7, 0x102, 0x2d5421e8, 0x7, 0x10000, 0x2, 0x6, 0x3ff, 0xf04, 0x0, 0x2, 0x5, 0xfffffc00, 0x5, 0x8d, 0x4, 0x401, 0x4, 0x9, 0x3, 0xfffffffb, 0x1, 0x0, 0x3, 0x8, 0x5, 0x8, 0x3, 0x0, 0x800, 0x2, 0x8, 0x7ff, 0x1, 0x9, 0x6, 0x4, 0x400001, 0x4d15, 0x1ff, 0xfffff068, 0x3, 0x469, 0x3, 0x0, 0x200, 0x10000005, 0x7, 0x2, 0x8, 0x42ba, 0x4, 0x9, 0x3, 0x8, 0x8, 0x53, 0x6, 0x4, 0x400, 0x8000, 0x0, 0x2c310b18, 0xfff, 0x0, 0x3, 0xcd34, 0x9, 0x81, 0xdf3, 0x2, 0x7, 0x8, 0x40fff, 0x1ff, 0x8000, 0x3, 0x8, 0x80, 0x6, 0x9a6, 0xe4cb, 0x402, 0x9, 0x1ff, 0x5, 0x9b4, 0x1, 0x6, 0x0, 0x8, 0x0, 0x9, 0x0, 0x4, 0x10, 0x901, 0x5, 0x2, 0x7b, 0xfffffeff, 0x6, 0x6, 0xc, 0x1000, 0x9, 0x9, 0xe6, 0xab, 0x400, 0x7fffffff, 0xed, 0x7ff, 0xd83, 0x68, 0x80000001, 0x6, 0x9fd, 0x10000006, 0x200, 0x2]}, @TCA_TBF_PTAB={0x404, 0x3, [0x800, 0x1, 0x1, 0x0, 0x7, 0x196, 0x2, 0x6, 0x4, 0xc, 0x8, 0xc9cd, 0x2, 0x9, 0x0, 0x200, 0x3, 0x9, 0xd, 0x2, 0x7, 0x4, 0x6, 0x9, 0x8000000a, 0xc4, 0x60, 0x8000, 0x7, 0x2000db3a, 0x800, 0x3, 0x9, 0x3, 0x9, 0x0, 0x401, 0x3, 0x6, 0x33, 0x6, 0x8, 0x8001, 0x4, 0x6, 0x4, 0x5, 0xd, 0x2, 0x7, 0x1, 0x0, 0x3, 0x81, 0x3, 0x1ff, 0xfffffff5, 0xc9, 0x5, 0x65e1, 0x10001, 0xc, 0x8001, 0xffffb5ca, 0xe, 0x3, 0x97, 0x7, 0xb, 0xffff6f3c, 0x1, 0x7ff, 0xb4, 0xf, 0x1, 0x3, 0xff, 0xfff, 0x0, 0xee3, 0x43, 0x9, 0x1, 0x3, 0x1, 0x3796, 0x8, 0x6, 0xbe, 0x3, 0x45, 0xdd1, 0x5, 0x7, 0x7de, 0x0, 0x3, 0x345, 0x4, 0x9da, 0x4, 0x6, 0xea6, 0x3, 0x5, 0x3, 0x3, 0xffffffff, 0x3ff, 0x96, 0x7, 0x2, 0xf, 0x9, 0xffffffff, 0x5, 0x3, 0xd7da, 0x82, 0x7f, 0x9, 0x1, 0xb8, 0x6, 0x4, 0x6, 0x3f0a, 0x4, 0x9, 0x5, 0x1ff, 0x4, 0x4, 0x1, 0x7, 0x2, 0xfffffffe, 0x3, 0xb, 0xfffffff7, 0x8, 0x101, 0xc57, 0x5, 0x2, 0x5, 0x8, 0xfffffffc, 0xf, 0x1982, 0x1, 0x80000000, 0x5, 0x9, 0x6, 0x8000, 0x40000002, 0x1, 0x2, 0x2, 0x5, 0x4, 0xffffff1c, 0x5, 0x5, 0x7, 0x692, 0x92, 0x4, 0x0, 0x2, 0x43d, 0x1b8c, 0x14, 0x65, 0xc00, 0x9, 0x9, 0x3, 0x8, 0x10001, 0x295, 0x6, 0x9, 0x1, 0xb7e, 0x10001, 0x2, 0x7, 0x6, 0x1, 0x2, 0x3ff, 0xfb5, 0x8, 0xa, 0x0, 0x9, 0xc, 0xc3d5, 0x2, 0x8000, 0xec, 0xd, 0x5, 0x84d3, 0xfffffeff, 0x2, 0x7ff, 0x7fffffff, 0x80, 0x2, 0x90, 0x2, 0x6, 0x3, 0x70, 0x0, 0x0, 0x400, 0x8, 0x10000, 0x9, 0x101, 0xefba, 0x7, 0x3, 0xfffffffe, 0xa4a, 0x7, 0x400, 0xc, 0xfffffff9, 0x8001, 0xd, 0x1, 0x9, 0xfff, 0x421, 0x3ff, 0x2, 0xd, 0xfb6, 0x5, 0xfffffffd, 0xac, 0x7fff, 0xa, 0x0, 0x6, 0x7f, 0x2dd, 0x7, 0x4, 0x7, 0x1]}]}}]}, 0x838}, 0x1, 0x0, 0x0, 0x40098}, 0x0) ioctl$SIOCSIFHWADDR(r3, 0x8914, &(0x7f0000002280)={'syzkaller0\x00', @multicast}) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$kcm(r2, &(0x7f00000000c0)={&(0x7f0000000380)=@xdp={0x2c, 0xdd86, r7, 0x3e}, 0x80, &(0x7f0000000080)=[{&(0x7f0000000180)="80", 0x1}], 0x1}, 0x4) (async) sendmsg$kcm(r2, &(0x7f00000000c0)={&(0x7f0000000380)=@xdp={0x2c, 0xdd86, r7, 0x3e}, 0x80, &(0x7f0000000080)=[{&(0x7f0000000180)="80", 0x1}], 0x1}, 0x4) r8 = bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f00000009c0)={0x1b, 0x0, 0x0, 0x40000, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0}, 0x48) bpf$PROG_LOAD(0x5, &(0x7f0000002c40)={0x7, 0x17, &(0x7f0000000040)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r8, @ANYBLOB="0000000000000000b702000014000000b7030000000000008500000005000000bf09000000000000b60901000000002066000000647b6c251801000020786c2500000000002020207b9af8ff000000005d9100000000000037010000f8ffffffb702000008000000b70300000000000015000000060000003f93000000000000b5030000000000008500000076000000b7000000000000009500000000000065b8e43400"], &(0x7f0000000000)='syzkaller\x00', 0x3, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x28, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) 9m55.024070012s ago: executing program 8 (id=6551): socket(0x10, 0x80003, 0x0) socket$inet6_sctp(0xa, 0x5, 0x84) r0 = socket$netlink(0x10, 0x3, 0x0) setsockopt$netlink_NETLINK_PKTINFO(r0, 0x10e, 0xc, &(0x7f0000000040)=0x8, 0x4) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000140)={0x1e, 0x4, &(0x7f0000000000)=ANY=[@ANYBLOB="18000000000000000000000000000000711205000000000095"], &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x24}, 0x94) sendmsg$nl_route(r0, &(0x7f00000003c0)={0x0, 0x0, &(0x7f0000000380)={&(0x7f0000000000)=ANY=[@ANYBLOB="2800000012000100"/20, @ANYRES32=0x0, @ANYBLOB='\x00\x00\x00\x00\x00\x00\x00\x00\b\x00', @ANYRES32=r0], 0x28}}, 0x802) socket(0x10, 0x80003, 0x0) (async) socket$inet6_sctp(0xa, 0x5, 0x84) (async) socket$netlink(0x10, 0x3, 0x0) (async) setsockopt$netlink_NETLINK_PKTINFO(r0, 0x10e, 0xc, &(0x7f0000000040)=0x8, 0x4) (async) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000140)={0x1e, 0x4, &(0x7f0000000000)=ANY=[@ANYBLOB="18000000000000000000000000000000711205000000000095"], &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x24}, 0x94) (async) sendmsg$nl_route(r0, &(0x7f00000003c0)={0x0, 0x0, &(0x7f0000000380)={&(0x7f0000000000)=ANY=[@ANYBLOB="2800000012000100"/20, @ANYRES32=0x0, @ANYBLOB='\x00\x00\x00\x00\x00\x00\x00\x00\b\x00', @ANYRES32=r0], 0x28}}, 0x802) (async) 9m54.813731634s ago: executing program 8 (id=6616): r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000080), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f00000000c0)={'wlan1\x00', 0x0}) sendmsg$NL80211_CMD_CONNECT(r0, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000240)=ANY=[@ANYBLOB='0\x00\x00\x00', @ANYRES16=r1, @ANYBLOB="050000000000000000002e0000000800", @ANYRES32=r2, @ANYBLOB="0a00340002020202020200000800350010"], 0x30}}, 0x0) 9m54.676780156s ago: executing program 8 (id=6617): r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r1, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000240)=ANY=[@ANYBLOB="140000001000010000000000000000000500000a28000000000a030000000000000000000a00000708000240000000020900010073797a31000000002c000000030a010100000000000000000a0000070900010073797a31000000000900030073797a320000000014000000110001"], 0x7c}, 0x1, 0x0, 0x0, 0x4000}, 0x0) sendmsg$NFT_BATCH(r1, &(0x7f0000009b40)={0x0, 0x0, &(0x7f0000009b00)={&(0x7f00000002c0)={{0x14, 0x10, 0x1, 0x0, 0x0, {0x3}}, [@NFT_MSG_DELRULE={0x8c, 0x8, 0xa, 0x0, 0x0, 0x0, {0x3, 0x0, 0x5}, [@NFTA_RULE_CHAIN_ID={0x8, 0xb, 0x1, 0x0, 0x3}, @NFTA_RULE_EXPRESSIONS={0x34, 0x4, 0x0, 0x1, [{0x30, 0x1, 0x0, 0x1, @osf={{0x8}, @val={0x24, 0x2, 0x0, 0x1, [@NFTA_OSF_DREG={0x1a, 0x1, 0x1, 0x0, 0x15}, @NFTA_OSF_FLAGS={0x8}, @NFTA_OSF_TTL={0x5, 0x2, 0x5}, @NFTA_OSF_DREG={0x8}]}}}]}, @NFTA_RULE_HANDLE={0xc, 0x3, 0x1, 0x0, 0x4}, @NFTA_RULE_TABLE={0x9, 0x1, 'syz0\x00'}, @NFTA_RULE_CHAIN={0x9, 0x2, 'syz0\x00'}, @NFTA_RULE_CHAIN={0x9, 0x2, 'syz2\x00'}, @NFTA_RULE_POSITION={0xc, 0x6, 0x1, 0x0, 0x1}]}], {0x14, 0x11, 0x1, 0x0, 0x0, {0x2}}}, 0xb4}, 0x1, 0x0, 0x0, 0x4008091}, 0x24000000) r2 = openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0) ioctl$TUNSETIFF(r2, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x7101}) r3 = openat$tun(0xffffffffffffff9c, &(0x7f0000000400), 0x202000, 0x0) close(r3) r4 = socket$nl_route(0x10, 0x3, 0x0) r5 = socket$unix(0x1, 0x1, 0x0) ioctl$sock_SIOCGIFINDEX(r5, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r4, &(0x7f00000012c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000140)=@newqdisc={0x44, 0x24, 0x4ee4e6a52ff56541, 0x70bd2a, 0xffffffff, {0x0, 0x0, 0x0, r6, {0x0, 0xfff1}, {0xffff, 0xffff}}, [@qdisc_kind_options=@q_hfsc={{0x9}, {0x14, 0x2, @TCA_HFSC_FSC={0x10, 0x2, {0x4d, 0xfffffffb, 0x7fffffff}}}}]}, 0x44}, 0x1, 0x0, 0x0, 0x4000000}, 0x20040084) sendmsg$nl_route_sched(r4, &(0x7f0000001200)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000700)=@newqdisc={0x48, 0x28, 0x4ee4e6a52ff56541, 0x4001, 0xfffffdf8, {0x0, 0x0, 0x0, r6, {0x10}, {}, {0xa, 0x3}}, [@qdisc_kind_options=@q_cbq={{0x8}, {0x1c, 0x2, [@TCA_CBS_PARMS={0x18, 0x1, {0x3, '\x00', 0x0, 0x81, 0x8, 0x8}}]}}]}, 0x48}, 0x1, 0x0, 0x0, 0x40098}, 0x8000) ioctl$SIOCSIFHWADDR(r3, 0x8914, &(0x7f0000002280)={'syzkaller0\x00', @multicast}) r7 = socket$packet(0x11, 0x3, 0x300) sendto$packet(r7, &(0x7f0000000000)="d9", 0x1, 0xc000, &(0x7f00000001c0)={0x11, 0x4, r6, 0x1, 0x9, 0x6, @local}, 0x14) r8 = socket$inet(0x2, 0x5, 0x0) getsockopt$inet_int(r8, 0x0, 0x5, &(0x7f00000000c0), &(0x7f0000000100)=0x1) sendmsg$nl_route(r0, &(0x7f00000007c0)={0x0, 0x0, &(0x7f0000000780)={&(0x7f0000000380)=@ipv4_newroute={0x64, 0x18, 0x1, 0x1000, 0x0, {0x2, 0x0, 0x0, 0x0, 0x0, 0x1, 0xfe, 0x9, 0x100}, [@RTA_ENCAP_TYPE={0x6, 0x15, 0x5}, @RTA_ENCAP={0x40, 0x16, 0x0, 0x1, @RPL_IPTUNNEL_SRH={0x3c, 0x1, {0x7, 0x38, 0x1, 0xf, 0xda, [@private0={0xfc, 0x0, '\x00', 0x1}, @empty, @remote]}}}]}, 0x64}}, 0x4890) 9m47.278090415s ago: executing program 36 (id=6554): bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000000)={0x1f, 0x2, &(0x7f0000000200)=@raw=[@call={0x85, 0x0, 0x0, 0x89}, @exit], &(0x7f0000000180)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x11}, 0x90) (async) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000000)={0x1f, 0x2, &(0x7f0000000200)=@raw=[@call={0x85, 0x0, 0x0, 0x89}, @exit], &(0x7f0000000180)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x11}, 0x90) socket$unix(0x1, 0x1, 0x0) (async) r0 = socket$unix(0x1, 0x1, 0x0) openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0) (async) r1 = openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0) ioctl$TUNSETIFF(r1, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x7101}) r2 = socket$kcm(0x11, 0x3, 0x0) r3 = openat$tun(0xffffffffffffff9c, &(0x7f0000000400), 0x0, 0x0) close(r3) r4 = socket$nl_route(0x10, 0x3, 0x0) r5 = socket$unix(0x1, 0x1, 0x0) ioctl$sock_SIOCGIFINDEX(r5, 0x8933, &(0x7f0000000100)={'syzkaller0\x00'}) (async) ioctl$sock_SIOCGIFINDEX(r5, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r4, &(0x7f00000012c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000140)=@newqdisc={0x44, 0x24, 0x4ee4e6a52ff56541, 0x70bd2a, 0xffffffff, {0x0, 0x0, 0x0, r6, {0x0, 0xfff1}, {0xffff, 0xffff}}, [@qdisc_kind_options=@q_hfsc={{0x9}, {0x14, 0x2, @TCA_HFSC_FSC={0x10, 0x2, {0x4d, 0xfffffffb, 0x7fffffff}}}}]}, 0x44}, 0x1, 0x0, 0x0, 0x4000000}, 0x20040084) sendmsg$nl_route_sched(r4, &(0x7f0000001200)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000700)=@newqdisc={0x838, 0x28, 0x4ee4e6a52ff56541, 0x4001, 0xfffffdf8, {0x0, 0x0, 0x0, r6, {0x10}, {}, {0xa, 0x3}}, [@qdisc_kind_options=@q_tbf={{0x8}, {0x80c, 0x2, [@TCA_TBF_RTAB={0x404, 0x2, [0x200000, 0x1, 0x9, 0x8004, 0x3, 0x5, 0x5, 0xb762, 0x4, 0x7, 0x8, 0x10, 0x2, 0x2, 0x400, 0x1007fc, 0xffff8000, 0x6, 0x403, 0x9, 0x8, 0xffffe4f5, 0xd6, 0x4, 0xfffb, 0x40000007, 0x0, 0xfffff4f0, 0x9, 0x1, 0xfffffffc, 0x4, 0x1, 0x6f2151b1, 0x9, 0xc, 0x20001000, 0x4, 0x2, 0x7, 0x4, 0x99, 0x9, 0x5, 0x6, 0x7, 0xfffffff7, 0x1, 0x2, 0x9, 0x9, 0x1000044, 0x8, 0x8, 0x39e1, 0x4, 0x7ff, 0x8, 0x7, 0x7fbffffe, 0x400, 0x8, 0xfffffa72, 0xcd, 0x4, 0x80000000, 0xc, 0x4, 0x65, 0x91, 0x659, 0x9, 0xf, 0x9, 0xc28, 0x9, 0x7, 0x3, 0x401, 0x3, 0x2, 0xfffffffa, 0x1, 0x10001, 0x3, 0x1, 0x4, 0x8, 0x8, 0x7, 0x1, 0x1, 0x1, 0x5, 0x40, 0x7, 0x12, 0x8000, 0x1, 0x4dc, 0x80, 0xffffff80, 0x7fffffff, 0xff, 0x9, 0xa7, 0xf, 0x1, 0x0, 0x3, 0x1001, 0x4, 0x401, 0x7, 0x80000000, 0xffff, 0x6, 0x5, 0x4f, 0xffffffff, 0x80000000, 0x1966f9ad, 0x200, 0x20200, 0xed5, 0xfffffc00, 0x6, 0x4, 0x8, 0x485e, 0xa85, 0x80000040, 0x2, 0x7, 0x7, 0x102, 0x2d5421e8, 0x7, 0x10000, 0x2, 0x6, 0x3ff, 0xf04, 0x0, 0x2, 0x5, 0xfffffc00, 0x5, 0x8d, 0x4, 0x401, 0x4, 0x9, 0x3, 0xfffffffb, 0x1, 0x0, 0x3, 0x8, 0x5, 0x8, 0x3, 0x0, 0x800, 0x2, 0x8, 0x7ff, 0x1, 0x9, 0x6, 0x4, 0x400001, 0x4d15, 0x1ff, 0xfffff068, 0x3, 0x469, 0x3, 0x0, 0x200, 0x10000005, 0x7, 0x2, 0x8, 0x42ba, 0x4, 0x9, 0x3, 0x8, 0x8, 0x53, 0x6, 0x4, 0x400, 0x8000, 0x0, 0x2c310b18, 0xfff, 0x0, 0x3, 0xcd34, 0x9, 0x81, 0xdf3, 0x2, 0x7, 0x8, 0x40fff, 0x1ff, 0x8000, 0x3, 0x8, 0x80, 0x6, 0x9a6, 0xe4cb, 0x402, 0x9, 0x1ff, 0x5, 0x9b4, 0x1, 0x6, 0x0, 0x8, 0x0, 0x9, 0x0, 0x4, 0x10, 0x901, 0x5, 0x2, 0x7b, 0xfffffeff, 0x6, 0x6, 0xc, 0x1000, 0x9, 0x9, 0xe6, 0xab, 0x400, 0x7fffffff, 0xed, 0x7ff, 0xd83, 0x68, 0x80000001, 0x6, 0x9fd, 0x10000006, 0x200, 0x2]}, @TCA_TBF_PTAB={0x404, 0x3, [0x800, 0x1, 0x1, 0x0, 0x7, 0x196, 0x2, 0x6, 0x4, 0xc, 0x8, 0xc9cd, 0x2, 0x9, 0x0, 0x200, 0x3, 0x9, 0xd, 0x2, 0x7, 0x4, 0x6, 0x9, 0x8000000a, 0xc4, 0x60, 0x8000, 0x7, 0x2000db3a, 0x800, 0x3, 0x9, 0x3, 0x9, 0x0, 0x401, 0x3, 0x6, 0x33, 0x6, 0x8, 0x8001, 0x4, 0x6, 0x4, 0x5, 0xd, 0x2, 0x7, 0x1, 0x0, 0x3, 0x81, 0x3, 0x1ff, 0xfffffff5, 0xc9, 0x5, 0x65e1, 0x10001, 0xc, 0x8001, 0xffffb5ca, 0xe, 0x3, 0x97, 0x7, 0xb, 0xffff6f3c, 0x1, 0x7ff, 0xb4, 0xf, 0x1, 0x3, 0xff, 0xfff, 0x0, 0xee3, 0x43, 0x9, 0x1, 0x3, 0x1, 0x3796, 0x8, 0x6, 0xbe, 0x3, 0x45, 0xdd1, 0x5, 0x7, 0x7de, 0x0, 0x3, 0x345, 0x4, 0x9da, 0x4, 0x6, 0xea6, 0x3, 0x5, 0x3, 0x3, 0xffffffff, 0x3ff, 0x96, 0x7, 0x2, 0xf, 0x9, 0xffffffff, 0x5, 0x3, 0xd7da, 0x82, 0x7f, 0x9, 0x1, 0xb8, 0x6, 0x4, 0x6, 0x3f0a, 0x4, 0x9, 0x5, 0x1ff, 0x4, 0x4, 0x1, 0x7, 0x2, 0xfffffffe, 0x3, 0xb, 0xfffffff7, 0x8, 0x101, 0xc57, 0x5, 0x2, 0x5, 0x8, 0xfffffffc, 0xf, 0x1982, 0x1, 0x80000000, 0x5, 0x9, 0x6, 0x8000, 0x40000002, 0x1, 0x2, 0x2, 0x5, 0x4, 0xffffff1c, 0x5, 0x5, 0x7, 0x692, 0x92, 0x4, 0x0, 0x2, 0x43d, 0x1b8c, 0x14, 0x65, 0xc00, 0x9, 0x9, 0x3, 0x8, 0x10001, 0x295, 0x6, 0x9, 0x1, 0xb7e, 0x10001, 0x2, 0x7, 0x6, 0x1, 0x2, 0x3ff, 0xfb5, 0x8, 0xa, 0x0, 0x9, 0xc, 0xc3d5, 0x2, 0x8000, 0xec, 0xd, 0x5, 0x84d3, 0xfffffeff, 0x2, 0x7ff, 0x7fffffff, 0x80, 0x2, 0x90, 0x2, 0x6, 0x3, 0x70, 0x0, 0x0, 0x400, 0x8, 0x10000, 0x9, 0x101, 0xefba, 0x7, 0x3, 0xfffffffe, 0xa4a, 0x7, 0x400, 0xc, 0xfffffff9, 0x8001, 0xd, 0x1, 0x9, 0xfff, 0x421, 0x3ff, 0x2, 0xd, 0xfb6, 0x5, 0xfffffffd, 0xac, 0x7fff, 0xa, 0x0, 0x6, 0x7f, 0x2dd, 0x7, 0x4, 0x7, 0x1]}]}}]}, 0x838}, 0x1, 0x0, 0x0, 0x40098}, 0x0) ioctl$SIOCSIFHWADDR(r3, 0x8914, &(0x7f0000002280)={'syzkaller0\x00', @multicast}) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$kcm(r2, &(0x7f00000000c0)={&(0x7f0000000380)=@xdp={0x2c, 0xdd86, r7, 0x3e}, 0x80, &(0x7f0000000080)=[{&(0x7f0000000180)="80", 0x1}], 0x1}, 0x4) (async) sendmsg$kcm(r2, &(0x7f00000000c0)={&(0x7f0000000380)=@xdp={0x2c, 0xdd86, r7, 0x3e}, 0x80, &(0x7f0000000080)=[{&(0x7f0000000180)="80", 0x1}], 0x1}, 0x4) r8 = bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f00000009c0)={0x1b, 0x0, 0x0, 0x40000, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0}, 0x48) bpf$PROG_LOAD(0x5, &(0x7f0000002c40)={0x7, 0x17, &(0x7f0000000040)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r8, @ANYBLOB="0000000000000000b702000014000000b7030000000000008500000005000000bf09000000000000b60901000000002066000000647b6c251801000020786c2500000000002020207b9af8ff000000005d9100000000000037010000f8ffffffb702000008000000b70300000000000015000000060000003f93000000000000b5030000000000008500000076000000b7000000000000009500000000000065b8e43400"], &(0x7f0000000000)='syzkaller\x00', 0x3, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x28, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) 9m39.593772367s ago: executing program 37 (id=6617): r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r1, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000240)=ANY=[@ANYBLOB="140000001000010000000000000000000500000a28000000000a030000000000000000000a00000708000240000000020900010073797a31000000002c000000030a010100000000000000000a0000070900010073797a31000000000900030073797a320000000014000000110001"], 0x7c}, 0x1, 0x0, 0x0, 0x4000}, 0x0) sendmsg$NFT_BATCH(r1, &(0x7f0000009b40)={0x0, 0x0, &(0x7f0000009b00)={&(0x7f00000002c0)={{0x14, 0x10, 0x1, 0x0, 0x0, {0x3}}, [@NFT_MSG_DELRULE={0x8c, 0x8, 0xa, 0x0, 0x0, 0x0, {0x3, 0x0, 0x5}, [@NFTA_RULE_CHAIN_ID={0x8, 0xb, 0x1, 0x0, 0x3}, @NFTA_RULE_EXPRESSIONS={0x34, 0x4, 0x0, 0x1, [{0x30, 0x1, 0x0, 0x1, @osf={{0x8}, @val={0x24, 0x2, 0x0, 0x1, [@NFTA_OSF_DREG={0x1a, 0x1, 0x1, 0x0, 0x15}, @NFTA_OSF_FLAGS={0x8}, @NFTA_OSF_TTL={0x5, 0x2, 0x5}, @NFTA_OSF_DREG={0x8}]}}}]}, @NFTA_RULE_HANDLE={0xc, 0x3, 0x1, 0x0, 0x4}, @NFTA_RULE_TABLE={0x9, 0x1, 'syz0\x00'}, @NFTA_RULE_CHAIN={0x9, 0x2, 'syz0\x00'}, @NFTA_RULE_CHAIN={0x9, 0x2, 'syz2\x00'}, @NFTA_RULE_POSITION={0xc, 0x6, 0x1, 0x0, 0x1}]}], {0x14, 0x11, 0x1, 0x0, 0x0, {0x2}}}, 0xb4}, 0x1, 0x0, 0x0, 0x4008091}, 0x24000000) r2 = openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0) ioctl$TUNSETIFF(r2, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x7101}) r3 = openat$tun(0xffffffffffffff9c, &(0x7f0000000400), 0x202000, 0x0) close(r3) r4 = socket$nl_route(0x10, 0x3, 0x0) r5 = socket$unix(0x1, 0x1, 0x0) ioctl$sock_SIOCGIFINDEX(r5, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r4, &(0x7f00000012c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000140)=@newqdisc={0x44, 0x24, 0x4ee4e6a52ff56541, 0x70bd2a, 0xffffffff, {0x0, 0x0, 0x0, r6, {0x0, 0xfff1}, {0xffff, 0xffff}}, [@qdisc_kind_options=@q_hfsc={{0x9}, {0x14, 0x2, @TCA_HFSC_FSC={0x10, 0x2, {0x4d, 0xfffffffb, 0x7fffffff}}}}]}, 0x44}, 0x1, 0x0, 0x0, 0x4000000}, 0x20040084) sendmsg$nl_route_sched(r4, &(0x7f0000001200)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000700)=@newqdisc={0x48, 0x28, 0x4ee4e6a52ff56541, 0x4001, 0xfffffdf8, {0x0, 0x0, 0x0, r6, {0x10}, {}, {0xa, 0x3}}, [@qdisc_kind_options=@q_cbq={{0x8}, {0x1c, 0x2, [@TCA_CBS_PARMS={0x18, 0x1, {0x3, '\x00', 0x0, 0x81, 0x8, 0x8}}]}}]}, 0x48}, 0x1, 0x0, 0x0, 0x40098}, 0x8000) ioctl$SIOCSIFHWADDR(r3, 0x8914, &(0x7f0000002280)={'syzkaller0\x00', @multicast}) r7 = socket$packet(0x11, 0x3, 0x300) sendto$packet(r7, &(0x7f0000000000)="d9", 0x1, 0xc000, &(0x7f00000001c0)={0x11, 0x4, r6, 0x1, 0x9, 0x6, @local}, 0x14) r8 = socket$inet(0x2, 0x5, 0x0) getsockopt$inet_int(r8, 0x0, 0x5, &(0x7f00000000c0), &(0x7f0000000100)=0x1) sendmsg$nl_route(r0, &(0x7f00000007c0)={0x0, 0x0, &(0x7f0000000780)={&(0x7f0000000380)=@ipv4_newroute={0x64, 0x18, 0x1, 0x1000, 0x0, {0x2, 0x0, 0x0, 0x0, 0x0, 0x1, 0xfe, 0x9, 0x100}, [@RTA_ENCAP_TYPE={0x6, 0x15, 0x5}, @RTA_ENCAP={0x40, 0x16, 0x0, 0x1, @RPL_IPTUNNEL_SRH={0x3c, 0x1, {0x7, 0x38, 0x1, 0xf, 0xda, [@private0={0xfc, 0x0, '\x00', 0x1}, @empty, @remote]}}}]}, 0x64}}, 0x4890) 9m16.352561992s ago: executing program 1 (id=6726): r0 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_tcp_int(r0, 0x6, 0x13, &(0x7f0000000000)=0x100000001, 0x4) connect$inet6(r0, &(0x7f0000000200)={0xa, 0x0, 0x1, @loopback}, 0x1c) setsockopt$inet6_tcp_TCP_ULP(r0, 0x6, 0x1f, &(0x7f00000000c0), 0x4) setsockopt$inet6_tcp_TLS_TX(r0, 0x11a, 0x1, &(0x7f0000000080)=@gcm_256={{0x303}, "675383307439aa26", "5b5f8919269ddba406a37e9c2bea516f0a22e549f5b2d46fc3a76fcf1994c29b", "c0ac296c", "d6281400039ab32b"}, 0x38) r1 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r1, &(0x7f00000037c0)={0x0, 0x0, &(0x7f0000003780)={&(0x7f0000000cc0)=@newtaction={0x84, 0x30, 0x12f, 0x0, 0x0, {0x0, 0x0, 0x1be}, [{0x70, 0x1, [@m_police={0x6c, 0x1, 0x0, 0x0, {{0xb}, {0x5c, 0x2, 0x0, 0x1, [[@TCA_POLICE_TBF={0x3c, 0x1, {0x0, 0x4}}]]}, {0x4}, {0xc, 0xb}, {0xc, 0xa}}}]}]}, 0x84}}, 0x0) r2 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r2, &(0x7f0000000300)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f0000001e80)=@newtaction={0x48, 0x31, 0x1, 0xfffffffd, 0x25dfdbfb, {0x0, 0x0, 0x11}, [{0x34, 0x1, [@m_police={0x30, 0x1, 0x0, 0x0, {{0xb}, {0x4}, {0x4}, {0xc, 0x3, {0x1}}, {0xc}}}]}]}, 0x48}, 0x1, 0x0, 0x0, 0x8800}, 0x0) setsockopt$inet6_tcp_TLS_TX(r0, 0x11a, 0x1, &(0x7f0000000540)=@gcm_128={{0x303}, "ffffffffffffffe2", "8e083700daf38a6d69e9b5e9c2f133d7", "6a3a05b9", "12772541f8eb02bb"}, 0x28) shutdown(r0, 0x1) r3 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000002c0)='freezer.state\x00', 0x275a, 0x0) write$cgroup_int(r3, &(0x7f0000000000), 0xffffff6a) sendfile(r0, r3, 0x0, 0xffffffff004) r4 = syz_genetlink_get_family_id$SEG6(&(0x7f0000003e40), 0xffffffffffffffff) r5 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$SEG6_CMD_SETHMAC(r5, &(0x7f0000004440)={0x0, 0x0, &(0x7f0000000440)={&(0x7f0000000000)={0x34, r4, 0x20d, 0x70bd2a, 0x25dfdbfe, {}, [@SEG6_ATTR_ALGID={0x5, 0x6, 0x2}, @SEG6_ATTR_SECRETLEN={0x5, 0x5, 0x4}, @SEG6_ATTR_HMACKEYID={0x8, 0x3, 0x6}, @SEG6_ATTR_SECRET={0x8, 0x4, [0x26]}]}, 0x34}, 0x1, 0x0, 0x0, 0xc051}, 0x4000) sendmsg$SEG6_CMD_SET_TUNSRC(r3, &(0x7f0000000180)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x40000}, 0xc, &(0x7f0000000100)={&(0x7f0000000380)={0x7c, r4, 0x200, 0x70bd25, 0x25dfdbfe, {}, [@SEG6_ATTR_DST={0x14, 0x1, @ipv4={'\x00', '\xff\xff', @multicast1}}, @SEG6_ATTR_SECRETLEN={0x5}, @SEG6_ATTR_DSTLEN={0x8, 0x2, 0x7fffffff}, @SEG6_ATTR_ALGID={0x5, 0x6, 0x8b}, @SEG6_ATTR_ALGID={0x5, 0x6, 0x2}, @SEG6_ATTR_DST={0x14, 0x1, @initdev={0xfe, 0x88, '\x00', 0x0, 0x0}}, @SEG6_ATTR_DSTLEN={0x8, 0x2, 0xa5}, @SEG6_ATTR_HMACKEYID={0x8, 0x3, 0x6}, @SEG6_ATTR_SECRET={0x10, 0x4, [0x401, 0x100, 0x6]}]}, 0x7c}, 0x1, 0x0, 0x0, 0x8000}, 0x80) r6 = bpf$MAP_CREATE(0x0, &(0x7f0000000000)=ANY=[@ANYBLOB="09000000010000004200000040"], 0x48) bpf$MAP_LOOKUP_BATCH(0x19, &(0x7f0000000280)={0x0, 0x0, 0x0, 0x0, 0x7, r6, 0x200000000000000}, 0x38) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000000)=ANY=[], 0x38}, 0x1, 0x0, 0x0, 0x4040851}, 0x0) 9m14.02384695s ago: executing program 1 (id=6904): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPCTNL_MSG_CT_DELETE(r0, &(0x7f0000000300)={0x0, 0x0, &(0x7f00000001c0)={0x0}, 0x1, 0x0, 0x0, 0x24044800}, 0x40040) 9m13.555115198s ago: executing program 1 (id=6909): r0 = syz_init_net_socket$llc(0x1a, 0x801, 0x0) bind$llc(r0, &(0x7f0000000000)={0x1a, 0x0, 0x0, 0x0, 0x81, 0x42}, 0x10) (async) setsockopt$sock_timeval(r0, 0x1, 0x42, &(0x7f0000000080)={0x0, 0x2710}, 0x10) (async) socket(0x10, 0x80002, 0x0) (async) socket(0x10, 0x803, 0x0) (async) socket$inet6(0xa, 0x2, 0x0) (async) socket(0x10, 0x803, 0x0) (async) bpf$ENABLE_STATS(0x20, 0x0, 0x0) (async) mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000)='./cgroup.net/syz0\x00', 0x1ff) openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000), 0x200002, 0x0) (async) socketpair(0x1, 0x1, 0x0, &(0x7f0000000740)) (async) socketpair$nbd(0x1, 0x1, 0x0, &(0x7f0000000000)) bpf$ENABLE_STATS(0x20, 0x0, 0x0) socketpair$unix(0x1, 0x1, 0x0, &(0x7f00000029c0)) (async) socketpair$nbd(0x1, 0x1, 0x0, &(0x7f00000003c0)) socketpair$unix(0x1, 0x1, 0x0, &(0x7f00000000c0)) r1 = bpf$MAP_CREATE(0x0, &(0x7f00000002c0)=ANY=[@ANYBLOB="1b00000000000000000000000080"], 0x48) r2 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000300)={0x1f, 0x15, &(0x7f0000000000)=ANY=[@ANYBLOB="18000000fcffffff000000000900000018010000", @ANYRES32=r1, @ANYBLOB="0000000000000000b7080000040000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000001000000850000006d00000018110000", @ANYRES32=r1, @ANYBLOB="0000000000000000b7080000ff7f00007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000001000000850000008200000095"], &(0x7f0000000580)='GPL\x00', 0x0, 0x0, 0x0, 0x40f00, 0x11}, 0x94) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000500)={r2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x48) (async) listen(r0, 0x2) (async) accept4(r0, 0x0, 0x0, 0x80800) r3 = socket(0x2, 0x80805, 0x0) sendmmsg$inet(r3, &(0x7f0000000440)=[{{&(0x7f0000000280)={0x2, 0x4e22, @private=0xa010101}, 0x10, &(0x7f0000000980)=[{&(0x7f0000000200)="9c", 0x1}], 0x1}}, {{&(0x7f0000000080)={0x2, 0x4e22, @rand_addr=0x64010101}, 0x10, &(0x7f0000000180)=[{&(0x7f0000000300)="99", 0x1}], 0x1}}], 0x2, 0x48000) (async) setsockopt$inet_sctp_SCTP_DEFAULT_SEND_PARAM(r3, 0x84, 0xa, &(0x7f0000000400)={0x93de, 0x1, 0x0, 0x3, 0x1ff, 0x7, 0xdff8, 0xb}, 0x20) (async) socket$netlink(0x10, 0x3, 0xc) syz_init_net_socket$llc(0x1a, 0x1, 0x0) (async) r4 = socket$inet6_udp(0xa, 0x2, 0x0) setsockopt$IP6T_SO_SET_REPLACE(r4, 0x29, 0x4c, 0x0, 0x0) (async) socket(0x2a, 0x2, 0x0) 9m13.239745097s ago: executing program 1 (id=6914): r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000000), 0x40241, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000200)={'syzkaller1\x00', 0xc201}) r1 = socket$inet_udp(0x2, 0x2, 0x0) r2 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r2, &(0x7f0000000040)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000240)=ANY=[@ANYBLOB="7800000010000304000000000000000000007400", @ANYRES32=0x0, @ANYBLOB="00000000600000005800128008000100677470004c00028008000100", @ANYRES32=r1], 0x78}, 0x1, 0x0, 0x0, 0x24008040}, 0x0) bind$inet(r1, &(0x7f0000000040)={0x2, 0x4e20, @empty}, 0x10) r3 = socket$kcm(0x2, 0x3, 0x2) ioctl$SIOCSIFHWADDR(r3, 0x8914, &(0x7f0000000040)={'syzkaller1\x00', @broadcast}) r4 = openat$cgroup_ro(0xffffffffffffffff, &(0x7f0000000300)='net_prio.prioidx\x00', 0x0, 0x0) r5 = syz_genetlink_get_family_id$tipc2(&(0x7f0000000400), r2) sendmsg$TIPC_NL_LINK_GET(r4, &(0x7f0000000540)={&(0x7f0000000340)={0x10, 0x0, 0x0, 0x4000}, 0xc, &(0x7f0000000500)={&(0x7f0000000440)={0x88, r5, 0x8, 0x70bd25, 0x25dfdbfe, {}, [@TIPC_NLA_MEDIA={0x74, 0x5, 0x0, 0x1, [@TIPC_NLA_MEDIA_PROP={0x54, 0x2, 0x0, 0x1, [@TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x15}, @TIPC_NLA_PROP_WIN={0x8, 0x3, 0x8}, @TIPC_NLA_PROP_MTU={0x8, 0x4, 0xfffffffd}, @TIPC_NLA_PROP_TOL={0x8, 0x2, 0x7f}, @TIPC_NLA_PROP_WIN={0x8, 0x3, 0x8}, @TIPC_NLA_PROP_TOL={0x8, 0x2, 0x50da}, @TIPC_NLA_PROP_TOL={0x8, 0x2, 0x10}, @TIPC_NLA_PROP_MTU={0x8, 0x4, 0x4}, @TIPC_NLA_PROP_MTU={0x8, 0x4, 0x7f}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0xb}]}, @TIPC_NLA_MEDIA_NAME={0x8, 0x1, 'udp\x00'}, @TIPC_NLA_MEDIA_PROP={0x14, 0x2, 0x0, 0x1, [@TIPC_NLA_PROP_PRIO={0x8, 0x1, 0xc}, @TIPC_NLA_PROP_WIN={0x8, 0x3, 0x1}]}]}]}, 0x88}, 0x1, 0x0, 0x0, 0x4000}, 0x4c800) accept(r1, 0x0, &(0x7f00000001c0)) r6 = socket$inet6_sctp(0xa, 0x5, 0x84) getsockopt$inet_sctp6_SCTP_RECVRCVINFO(r6, 0x84, 0x20, &(0x7f0000000180), &(0x7f0000000c40)=0xfffffef8) write$tun(r0, &(0x7f00000002c0)={@val={0x8, 0x800}, @val={0x7, 0x0, 0x2, 0x0, 0x2b}, @ipv4=@udp={{0x5, 0x4, 0x3, 0x1f, 0x2d, 0x66, 0x0, 0x40, 0x11, 0x0, @initdev={0xac, 0x1e, 0x1, 0x0}, @dev={0xac, 0x14, 0x14, 0x16}}, {0x4e20, 0x4e20, 0x19, 0x0, @wg=@data={0x4, 0x3, 0x9, 'o'}}}}, 0x3b) openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0) r7 = socket$alg(0x26, 0x5, 0x0) r8 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r8, &(0x7f0000000ec0)={0x0, 0x0, &(0x7f0000000380)={&(0x7f0000000000)=@newsa={0x138, 0x10, 0x713, 0x40000, 0x0, {{@in6=@mcast2, @in=@initdev={0xac, 0x1e, 0x0, 0x0}}, {@in6=@mcast1, 0x0, 0x32}, @in=@local, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffff00000000}, {0x0, 0x0, 0x0, 0xfffffffffffffffd}, {0x0, 0x0, 0x2}, 0x0, 0x0, 0xa, 0x5, 0xb}, [@algo_crypt={0x48, 0x2, {{'ecb-serpent-avx\x00'}}}]}, 0x138}}, 0x0) bind$alg(r7, &(0x7f0000000380)={0x26, 'skcipher\x00', 0x0, 0x0, 'cbc-cast5-avx\x00'}, 0x58) accept4(r7, 0x0, 0x0, 0x800) r9 = socket$packet(0x11, 0x3, 0x300) socketpair(0x1, 0x20000000000001, 0x0, &(0x7f0000000100)={0xffffffffffffffff, 0xffffffffffffffff}) sendmsg(r2, &(0x7f0000000c00)={0x0, 0x0, &(0x7f00000007c0)=[{&(0x7f0000000580)="30a7912f9e01b9996dc0c41e023ab402a6be43ac83ea07361658364c64d4fc9ffa68d87c03cc6df8d95a2ef1071ee65ef5bac8cda378d793c666fad615d3d4799a5975d5e54f66ae76415840cf25cd53691e17b06c1b6260a975c9303454499b563945b5dedca8e0f9dff85cb494c747bed3eb9f3ccf10cf77ba2e366183a994", 0x80}, {&(0x7f0000000600)="8271d77ab91caf995ea23f05da4a8dad9c730aeb7000419823d16c6a0a43fb770e971762b160b9a76770ab4e4601a28986fc557cebc863dcaeb95d257a292e15d720e152396495d3520b7be76432d47d7a9df0d4abd8c24d3c2bcbdc74bd6f119be2a5a8ca4af7f27178916c706f3d13fecf61c2838b1cc653aa6e5d475dcf4994ab8d18bfdb838188ec6d2fe858a61f08d57de073a1702f04f4ecfc73d231cc41f6c9215a13", 0xa6}, {&(0x7f00000006c0)="b5692cde5cfd7e03bdbb53e444d41a87ef85828a2df3f4c2c11abeb3b9133591c253e524d36a6120fd4a3497f3f0fede0aea2a7da598dbc3cc67929fd3e387079537738981e286198303b7b44649d468da757820389a077c486d69b2ebb7166a3c2641f3ba471cce86f5b26fca5e0fccad46f31e320251f46ed1bac25593f48ca210a0b35d235fee38c987d69b9e0bf0aa304f3fccedfde8b6c2688ffdca781da77f893c37291694b5c91133ea2645e57fe0b80a01e7ea55776174a3003c450b8a768551671f32ebdb030c62d7f50b73e2d7dc6aeb0aea3c37f386", 0xdb}], 0x3, &(0x7f0000000800)=[{0x70, 0x116, 0x8, "fb078ae03e7253cb70ab8023eb477ab3d4762e9f6ca24ea88d6779ca9187c82062426fa2550bfa4c6cc4259ba3064fcd8ac40597a6a90c4e811ab7777a06b95674774bc5c9eeb7d315cb659a0022b6e4a257b70e0118bfedd13c"}, {0x40, 0x107, 0x2, "ecdb92d66df15a5f89e6f0fb910e743bdc86c1d46dda0167aaf520003018e58d2c3d119fdc4d2f1c011deca429b022"}, {0xd0, 0x103, 0x3, "10d13164371ec328e0ecacf6eca3d83ecae0a980b693fbbf8472770e13b78c3ab8c792e04a2c00daa050144817deab886c30832ee38485e72485bb0398af835e5f63d275e499601778f581c84ddf2dca033db46d1b7f5d7c1f301ddd0d7491e791b3df4e873ec4f5a33bbbd7f95102432d0330bf90dadcebba59b8fe4529fbc1db1c258b97c46bca387ec365fc7814ac3730926a5a34e11ae6776bbca9d7246a04c9d359a78b5941140653ac51644b22071f7931f8f8d3b2371da02bbc"}, {0x18, 0x115, 0xfffffff9, "ee1432"}, {0x30, 0x84, 0x6, "4ce4e5550871336b6f5d1d4539d53f6528fc2a61084b0161cfc428c5b4d3ba"}, {0x30, 0x116, 0xfff, "4b52849719af00a9c91df83ff5190d7f25a2700447bf26595f"}, {0xe0, 0x118, 0x80000001, "8afbd535fc92b0a81a33d5a821797d9760963d00e143ce8f34ac327d1e9f4d8cf351322e17a4ee05eaa4f22f1a262708d825022818a8dfecacce66938a144f0b266f07ac6e6fe9ca0b5d47aafa43dd18ff5b6c752d77f30010e5b80c3f371be5d6bf5ccc7264bae5307f72224fbf25c8dcd0f541bdd02a842f64f0b044926a6066a8c3f1c2e156c694145b5e8bed3570e3d16f83c2d18ed774b0fc1a621b80bbd8374606028d4cace0d5b5ea30d6a0b3b2f35e5296a29a39cc9ab20349317121c2a1efe0a27435580613"}, {0x48, 0x10e, 0x5, "af8a66b8d849cae21b284b0609176407523800d8e1af72d030f4db4f28b11968b6ee34293a78bb53c44b680e77ab02eb36c1678839fc"}, {0xa8, 0x114, 0x7, "096a6db10fc529f6a8519263248dd34e9fbd91feab36ca1f224750702ad343adc874e138b7a8b4c3617e5e46cb0006eed40f9483c5ea98473d0bcae207e5f479247c83a05646150e3cdb8d0919d9fbbc8a758fd1ac9852e8906d1ba06abee4e28775fc69698edfd6f4c5a3be28f348eac3861d0ab2f9682e64b1ade9bde2c7f40fa0efcb577ba60f3dd9747335d975ab3e9acbdfd9b7"}], 0x3c8}, 0x44) getsockname$packet(r10, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000040)=0x14) bind$packet(r9, &(0x7f0000000000)={0x11, 0x16, r11, 0x1, 0x0, 0x6, @link_local}, 0x14) sendto$inet6(r9, &(0x7f0000000280)="02043c", 0x3, 0x800, 0x0, 0x0) 8m58.200726495s ago: executing program 38 (id=6914): r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000000), 0x40241, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000200)={'syzkaller1\x00', 0xc201}) r1 = socket$inet_udp(0x2, 0x2, 0x0) r2 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r2, &(0x7f0000000040)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000240)=ANY=[@ANYBLOB="7800000010000304000000000000000000007400", @ANYRES32=0x0, @ANYBLOB="00000000600000005800128008000100677470004c00028008000100", @ANYRES32=r1], 0x78}, 0x1, 0x0, 0x0, 0x24008040}, 0x0) bind$inet(r1, &(0x7f0000000040)={0x2, 0x4e20, @empty}, 0x10) r3 = socket$kcm(0x2, 0x3, 0x2) ioctl$SIOCSIFHWADDR(r3, 0x8914, &(0x7f0000000040)={'syzkaller1\x00', @broadcast}) r4 = openat$cgroup_ro(0xffffffffffffffff, &(0x7f0000000300)='net_prio.prioidx\x00', 0x0, 0x0) r5 = syz_genetlink_get_family_id$tipc2(&(0x7f0000000400), r2) sendmsg$TIPC_NL_LINK_GET(r4, &(0x7f0000000540)={&(0x7f0000000340)={0x10, 0x0, 0x0, 0x4000}, 0xc, &(0x7f0000000500)={&(0x7f0000000440)={0x88, r5, 0x8, 0x70bd25, 0x25dfdbfe, {}, [@TIPC_NLA_MEDIA={0x74, 0x5, 0x0, 0x1, [@TIPC_NLA_MEDIA_PROP={0x54, 0x2, 0x0, 0x1, [@TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x15}, @TIPC_NLA_PROP_WIN={0x8, 0x3, 0x8}, @TIPC_NLA_PROP_MTU={0x8, 0x4, 0xfffffffd}, @TIPC_NLA_PROP_TOL={0x8, 0x2, 0x7f}, @TIPC_NLA_PROP_WIN={0x8, 0x3, 0x8}, @TIPC_NLA_PROP_TOL={0x8, 0x2, 0x50da}, @TIPC_NLA_PROP_TOL={0x8, 0x2, 0x10}, @TIPC_NLA_PROP_MTU={0x8, 0x4, 0x4}, @TIPC_NLA_PROP_MTU={0x8, 0x4, 0x7f}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0xb}]}, @TIPC_NLA_MEDIA_NAME={0x8, 0x1, 'udp\x00'}, @TIPC_NLA_MEDIA_PROP={0x14, 0x2, 0x0, 0x1, [@TIPC_NLA_PROP_PRIO={0x8, 0x1, 0xc}, @TIPC_NLA_PROP_WIN={0x8, 0x3, 0x1}]}]}]}, 0x88}, 0x1, 0x0, 0x0, 0x4000}, 0x4c800) accept(r1, 0x0, &(0x7f00000001c0)) r6 = socket$inet6_sctp(0xa, 0x5, 0x84) getsockopt$inet_sctp6_SCTP_RECVRCVINFO(r6, 0x84, 0x20, &(0x7f0000000180), &(0x7f0000000c40)=0xfffffef8) write$tun(r0, &(0x7f00000002c0)={@val={0x8, 0x800}, @val={0x7, 0x0, 0x2, 0x0, 0x2b}, @ipv4=@udp={{0x5, 0x4, 0x3, 0x1f, 0x2d, 0x66, 0x0, 0x40, 0x11, 0x0, @initdev={0xac, 0x1e, 0x1, 0x0}, @dev={0xac, 0x14, 0x14, 0x16}}, {0x4e20, 0x4e20, 0x19, 0x0, @wg=@data={0x4, 0x3, 0x9, 'o'}}}}, 0x3b) openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0) r7 = socket$alg(0x26, 0x5, 0x0) r8 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r8, &(0x7f0000000ec0)={0x0, 0x0, &(0x7f0000000380)={&(0x7f0000000000)=@newsa={0x138, 0x10, 0x713, 0x40000, 0x0, {{@in6=@mcast2, @in=@initdev={0xac, 0x1e, 0x0, 0x0}}, {@in6=@mcast1, 0x0, 0x32}, @in=@local, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffff00000000}, {0x0, 0x0, 0x0, 0xfffffffffffffffd}, {0x0, 0x0, 0x2}, 0x0, 0x0, 0xa, 0x5, 0xb}, [@algo_crypt={0x48, 0x2, {{'ecb-serpent-avx\x00'}}}]}, 0x138}}, 0x0) bind$alg(r7, &(0x7f0000000380)={0x26, 'skcipher\x00', 0x0, 0x0, 'cbc-cast5-avx\x00'}, 0x58) accept4(r7, 0x0, 0x0, 0x800) r9 = socket$packet(0x11, 0x3, 0x300) socketpair(0x1, 0x20000000000001, 0x0, &(0x7f0000000100)={0xffffffffffffffff, 0xffffffffffffffff}) sendmsg(r2, &(0x7f0000000c00)={0x0, 0x0, &(0x7f00000007c0)=[{&(0x7f0000000580)="30a7912f9e01b9996dc0c41e023ab402a6be43ac83ea07361658364c64d4fc9ffa68d87c03cc6df8d95a2ef1071ee65ef5bac8cda378d793c666fad615d3d4799a5975d5e54f66ae76415840cf25cd53691e17b06c1b6260a975c9303454499b563945b5dedca8e0f9dff85cb494c747bed3eb9f3ccf10cf77ba2e366183a994", 0x80}, {&(0x7f0000000600)="8271d77ab91caf995ea23f05da4a8dad9c730aeb7000419823d16c6a0a43fb770e971762b160b9a76770ab4e4601a28986fc557cebc863dcaeb95d257a292e15d720e152396495d3520b7be76432d47d7a9df0d4abd8c24d3c2bcbdc74bd6f119be2a5a8ca4af7f27178916c706f3d13fecf61c2838b1cc653aa6e5d475dcf4994ab8d18bfdb838188ec6d2fe858a61f08d57de073a1702f04f4ecfc73d231cc41f6c9215a13", 0xa6}, {&(0x7f00000006c0)="b5692cde5cfd7e03bdbb53e444d41a87ef85828a2df3f4c2c11abeb3b9133591c253e524d36a6120fd4a3497f3f0fede0aea2a7da598dbc3cc67929fd3e387079537738981e286198303b7b44649d468da757820389a077c486d69b2ebb7166a3c2641f3ba471cce86f5b26fca5e0fccad46f31e320251f46ed1bac25593f48ca210a0b35d235fee38c987d69b9e0bf0aa304f3fccedfde8b6c2688ffdca781da77f893c37291694b5c91133ea2645e57fe0b80a01e7ea55776174a3003c450b8a768551671f32ebdb030c62d7f50b73e2d7dc6aeb0aea3c37f386", 0xdb}], 0x3, &(0x7f0000000800)=[{0x70, 0x116, 0x8, "fb078ae03e7253cb70ab8023eb477ab3d4762e9f6ca24ea88d6779ca9187c82062426fa2550bfa4c6cc4259ba3064fcd8ac40597a6a90c4e811ab7777a06b95674774bc5c9eeb7d315cb659a0022b6e4a257b70e0118bfedd13c"}, {0x40, 0x107, 0x2, "ecdb92d66df15a5f89e6f0fb910e743bdc86c1d46dda0167aaf520003018e58d2c3d119fdc4d2f1c011deca429b022"}, {0xd0, 0x103, 0x3, "10d13164371ec328e0ecacf6eca3d83ecae0a980b693fbbf8472770e13b78c3ab8c792e04a2c00daa050144817deab886c30832ee38485e72485bb0398af835e5f63d275e499601778f581c84ddf2dca033db46d1b7f5d7c1f301ddd0d7491e791b3df4e873ec4f5a33bbbd7f95102432d0330bf90dadcebba59b8fe4529fbc1db1c258b97c46bca387ec365fc7814ac3730926a5a34e11ae6776bbca9d7246a04c9d359a78b5941140653ac51644b22071f7931f8f8d3b2371da02bbc"}, {0x18, 0x115, 0xfffffff9, "ee1432"}, {0x30, 0x84, 0x6, "4ce4e5550871336b6f5d1d4539d53f6528fc2a61084b0161cfc428c5b4d3ba"}, {0x30, 0x116, 0xfff, "4b52849719af00a9c91df83ff5190d7f25a2700447bf26595f"}, {0xe0, 0x118, 0x80000001, "8afbd535fc92b0a81a33d5a821797d9760963d00e143ce8f34ac327d1e9f4d8cf351322e17a4ee05eaa4f22f1a262708d825022818a8dfecacce66938a144f0b266f07ac6e6fe9ca0b5d47aafa43dd18ff5b6c752d77f30010e5b80c3f371be5d6bf5ccc7264bae5307f72224fbf25c8dcd0f541bdd02a842f64f0b044926a6066a8c3f1c2e156c694145b5e8bed3570e3d16f83c2d18ed774b0fc1a621b80bbd8374606028d4cace0d5b5ea30d6a0b3b2f35e5296a29a39cc9ab20349317121c2a1efe0a27435580613"}, {0x48, 0x10e, 0x5, "af8a66b8d849cae21b284b0609176407523800d8e1af72d030f4db4f28b11968b6ee34293a78bb53c44b680e77ab02eb36c1678839fc"}, {0xa8, 0x114, 0x7, "096a6db10fc529f6a8519263248dd34e9fbd91feab36ca1f224750702ad343adc874e138b7a8b4c3617e5e46cb0006eed40f9483c5ea98473d0bcae207e5f479247c83a05646150e3cdb8d0919d9fbbc8a758fd1ac9852e8906d1ba06abee4e28775fc69698edfd6f4c5a3be28f348eac3861d0ab2f9682e64b1ade9bde2c7f40fa0efcb577ba60f3dd9747335d975ab3e9acbdfd9b7"}], 0x3c8}, 0x44) getsockname$packet(r10, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000040)=0x14) bind$packet(r9, &(0x7f0000000000)={0x11, 0x16, r11, 0x1, 0x0, 0x6, @link_local}, 0x14) sendto$inet6(r9, &(0x7f0000000280)="02043c", 0x3, 0x800, 0x0, 0x0) 8.204829198s ago: executing program 5 (id=11566): r0 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_generic(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000400)=ANY=[@ANYBLOB="440000001600010000000000000000000a0400000000000014000100ff010000000000000000000000000001150002"], 0x44}}, 0x0) ioctl$F2FS_IOC_START_VOLATILE_WRITE(r0, 0xf503, 0x0) sendmsg$inet6(0xffffffffffffffff, &(0x7f0000000280)={&(0x7f0000000000)={0xa, 0x4e23, 0xa, @remote, 0xfffffff8}, 0x1c, &(0x7f0000000200)=[{&(0x7f0000000100)="5dbd1351270e5fd1956969eac382426fcbe56fcc55c599dd5039ce4e145eb2d97c311a5a9834e5dac12297faccff5c7b1ea17924b98d22a8486dad73d9d1e40e843936809e929de8214f23dfad80562fefba8608", 0x54}], 0x1, &(0x7f0000000240)=[@flowinfo={{0x14, 0x29, 0xb, 0x6}}, @flowinfo={{0x14, 0x29, 0xb, 0xa}}], 0x30}, 0x40) r1 = socket$nl_route(0x10, 0x3, 0x0) socketpair$unix(0x1, 0x5, 0x0, &(0x7f00000001c0)={0xffffffffffffffff}) ioctl$sock_SIOCETHTOOL(r2, 0x8946, &(0x7f0000000100)={'lo\x00', &(0x7f0000000000)=@ethtool_cmd={0x4a, 0x6f8, 0x898c, 0x80, 0x6, 0x4, 0x9c, 0xb, 0x3, 0x1, 0xed, 0xfffffff9, 0x668, 0x4, 0x8, 0x8, [0x7f, 0x6]}}) sendmsg$nl_route(r1, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000500)={&(0x7f0000000180)=@newlink={0x4c, 0x10, 0x439, 0x70bd2c, 0xffffffea, {0x0, 0x0, 0xe403, 0x0, 0x40083, 0x715cb}, [@IFLA_LINKINFO={0x2c, 0x12, 0x0, 0x1, @sit={{0x8}, {0x20, 0x2, 0x0, 0x1, [@IFLA_IPTUN_6RD_PREFIX={0x14, 0xb, @remote}, @IFLA_IPTUN_REMOTE={0x8, 0x3, @dev={0xac, 0x14, 0x14, 0x21}}]}}}]}, 0x4c}, 0x1, 0x0, 0x0, 0x8000}, 0x4040) 7.418268991s ago: executing program 5 (id=11577): r0 = socket$inet_mptcp(0x2, 0x1, 0x106) ioctl$sock_SIOCGIFCONF(r0, 0x8912, &(0x7f0000000380)=@req={0x28, &(0x7f0000000080)={'nicvf0\x00', @ifru_map={0x1, 0x4, 0x9, 0x2, 0x7, 0x1}}}) bpf$PROG_LOAD(0x5, &(0x7f0000000180)={0xb, 0x4, &(0x7f0000000040)=ANY=[@ANYBLOB="18000000000000f400000000000000f4620134000000000095"], &(0x7f0000000000)='GPL\x00', 0x0, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, @fallback=0x37, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) 7.311475274s ago: executing program 5 (id=11579): r0 = accept$unix(0xffffffffffffffff, &(0x7f0000000000), &(0x7f0000000080)=0x6e) (async) ioctl$BTRFS_IOC_GET_DEV_STATS(0xffffffffffffffff, 0xc4089434, &(0x7f0000000440)={0x0, 0x4, 0x1, [0x9, 0x0, 0x100000000, 0x5, 0xc], [0xa2a, 0x0, 0xd, 0x1, 0x8, 0x3a, 0x8000000000000000, 0x2, 0x1, 0x4, 0x80000001, 0x5, 0xffffffffffff42a3, 0x400, 0x2, 0x4, 0x4, 0x0, 0x1fb, 0x5, 0xff, 0x9, 0x9, 0x8, 0x21a5f96c, 0x7ff, 0x9, 0xfffffffffffffffb, 0x66ec, 0xffffffffffffffff, 0x1, 0x3, 0x8, 0x4, 0xd, 0x0, 0xffffffffffffff00, 0x6, 0x0, 0x8, 0x6, 0x3, 0x100000000, 0x3, 0x2, 0x1, 0xfffffffffffffff7, 0x5, 0x7, 0x0, 0x9, 0x6, 0x1, 0x400, 0xcc3, 0xf26, 0x100, 0x200, 0xf, 0x5, 0x160, 0x81, 0xb, 0x8000000000000001, 0x1, 0x7fffffffffffffff, 0x6, 0xa, 0x6, 0x1, 0xc781, 0x2, 0x8, 0x2, 0x4, 0x2, 0x4, 0xc232, 0x0, 0x2000000000000000, 0x5, 0x7, 0x5df6, 0x8, 0x0, 0x3, 0x7, 0x0, 0x80000001, 0x2, 0x80000000, 0x3, 0x6, 0xfffffffffffe0000, 0x4, 0x7ff, 0x6, 0x9, 0x9, 0xa5e, 0x8, 0x4, 0x8e, 0x0, 0x101, 0x7, 0x18, 0x7f, 0x9, 0x100000000, 0xfffffffffffffff8, 0x6d55e4a1, 0x0, 0x4, 0x8, 0x9, 0x0, 0x101, 0x0, 0x1, 0x4ef]}) ioctl$BTRFS_IOC_SCRUB_PROGRESS(r0, 0xc400941d, &(0x7f0000000880)={r1, 0x1, 0x6}) (async) r2 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r2, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000400)={&(0x7f0000000140)=@newlink={0x54, 0x10, 0x1, 0x70bd2c, 0x0, {0x0, 0x0, 0x0, 0x0, 0x21a8}, [@IFLA_IFNAME={0x14, 0x3, 'netdevsim0\x00'}, @IFLA_VFINFO_LIST={0x20, 0x16, 0x0, 0x1, [{0x1c, 0x1, 0x0, 0x1, [@IFLA_VF_VLAN_LIST={0x18, 0xc, 0x0, 0x1, [{0x14, 0x1, {0xf, 0xb50, 0x7, 0xbc8d29f8c9223a7a}}]}]}]}]}, 0x54}, 0x1, 0x0, 0x0, 0x40000}, 0x0) 7.164988246s ago: executing program 5 (id=11580): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_CREATE(r0, &(0x7f0000001080)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000000)=ANY=[@ANYBLOB="6c00000002060104db406e3e0004000200000000100003006269746d61703a706f72740005000400000000000900020073797a32000000000500050000006c00050001000600000024000780080008400000137906000440fffff000060005401c16000008000640"], 0x6c}}, 0x0) r1 = socket$inet(0x2, 0x3, 0x6) ioctl$BTRFS_IOC_FS_INFO(r1, 0x8400941f, &(0x7f0000000380)) setsockopt$sock_int(r1, 0x1, 0x5, &(0x7f0000000340)=0x6, 0x4) sendmsg$inet(r1, &(0x7f0000001040)={&(0x7f0000000040)={0x2, 0xffff, @broadcast}, 0x10, 0x0, 0x0, &(0x7f0000000100)=ANY=[@ANYBLOB="1c000000000000000000000007000000830b040a0101027f00000100000000001c000000000000000000000008"], 0x40}, 0x20008024) r2 = socket$nl_generic(0x10, 0x3, 0x10) r3 = syz_genetlink_get_family_id$devlink(&(0x7f0000000140), 0xffffffffffffffff) sendmsg$DEVLINK_CMD_SB_TC_POOL_BIND_GET(r2, &(0x7f0000000a00)={&(0x7f00000000c0)={0x10, 0x0, 0x0, 0x40000000}, 0xc, &(0x7f00000009c0)={&(0x7f0000000780)=ANY=[@ANYBLOB='\t\x00\x00\x00', @ANYRES16=r3, @ANYBLOB="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"], 0x208}, 0x1, 0x0, 0x0, 0x8010}, 0x20000084) 7.008988582s ago: executing program 5 (id=11581): r0 = socket$inet_sctp(0x2, 0x1, 0x84) writev(r0, &(0x7f0000000640)=[{&(0x7f0000000000)="25c35570422b26661216b3bf01a8285d0031f5dd257b9a", 0x17}, {&(0x7f0000000040)="9f0b7a9936beef17d81a51e8b31b6350cb4224a31f8bdc3269c3faf863a29e6387101d4db5b0ab5c164d15a93d81ec1efe76d089891136b8c02e272c5c530a07c36542416bec20ca6de903bf1854037d6b5ab4e7e2245bfaf38542612a1050553296625c1a713bfe7468c8d1fc83267d5998c4b5b514d35a84b6ee42b3aa7da49532c0b8423050f93c726c104b76c98a5ff542ea78e9095517b736632210aa768f8beeff813a4cb892f853ab95054972bf325af9ecc7f0f254689402a38a6470e496a48e150638ed6e2929064a02beaa8c4c160df5df24d65c94c2fed2beaaecaf75b033db90fac64aeda320b2bbd2e19004", 0xf2}, {&(0x7f0000000140)="6eac02f599fb67bad5a19cd307d16cac0241d5496e", 0x15}, {&(0x7f0000000180)="8e9132d71671424e2debf39c91126c5259f37fc69f61c3951486f504df2c81696345b44d50ad201056b5fb9144b928f7cf64bd0c", 0x34}, {&(0x7f00000001c0)="a84c192c9ab8068ac74f1b72f720c0cdad4fa698bd1de1b540ef3ad1eaff1f523f437c299c9e5f83de92a3f9071c6a7660abd3fa2d19c053d88ab0304fcefcefb59b7cdc6ae131006ae349a1d37b3c7782a642ef8eaa7820a99887faf7771c3974d9af5efd9cc0af24e8f498fc6e7fe58381ea84f47bdf0d0fcda5763ad7c3d325a75ffc02e49a3974c46bd00a705b7de1bc554eca7276485d683cffe21c191e64265cc0d3d9f3f625f63141f2dc0a5adb890d8000ede3f91393c439bd08006b11ade0a6e72b", 0xc6}, {&(0x7f00000002c0)="3f3f0aa6b7853dff1a2d30eb7a31994368e3908dc364ce3e0cd1b02f6ea29158fe7151ff1077945988385794208b98c4a6bf52aedb8d3a37361a0b6cd370df8e09e6187c0e92", 0x46}, {&(0x7f0000000340)="7d0f0ac033a0472441bb7d72baf78c9d677fb20e0695d1a44006140ea23fdd1c76e6ec9697c2257df52a0a256a1f260b07e94843c2fdd5c5a8aea61f578501ec543d0b910e8e5474ea0d0715bca863a270afd992699075ad15f254ac5fff5dcfd3a2e440fdebbf753d262e5fca9a57bf805eecbd4cdc90364aff0eff8c78e7f901e4b2f1264de3f1690102ca289ead31b591c13682c1bf27f39cf5250691086d7b7378093c1506d0", 0xa8}, {&(0x7f0000000400)="e1dc8b9428419f78539979fe5c06836b1802ec3301a0350f7c2d63f2aab023a04b459b4338089c5a15807c9b02136fdda4d05aae62e32e44f16c754f02eb21c7af445324534e834537413d54968850570ce2a3a8e4390fa4673a2ab530a6b91f4e7a3e0e657dc77d6d6e682ed85618d1efb4082477900411c57a58efc42306a676d2375364117ac5181800266a31437ab8457b76dc07992d026bbacd3a82b59789e600d21a18eef5111cd5dd6fe6e22ec7e36af80a3b2dcdbb47a980af7ffff274fe9e43d9f86f4144c3dc7d62", 0xcd}, {&(0x7f0000000500)="99d52a452ab9ae78ad10256641669acd0aee421364d66cc5e4f190302c923c7c3f42aa44f021443c39572c5a4621ea13115f7a6bb7cc790f38b961fefa69692f4dc65f", 0x43}, {&(0x7f0000000580)="351b5861a947a3d2415b2eeb289392fea219a9b5a2285d7bba94fbc827579987d20ed05edee4d802f68cf7c235800a23b60738e7926b8143defed20a20dc31d34e70283155d118d046585777f351898a203b64cf816af43a4c71a48b7a583b966942af06b2d11269e4dc36bef315f628bf72b356d257611623161e0a2bc08bbba69b50b1dca6e6bde01f07f27cb190e7746d9de1f9c4b352fec32a950aa9502922ae29b264fa1f2a6454e8be", 0xac}], 0xa) getsockopt$inet_sctp_SCTP_AUTH_ACTIVE_KEY(r0, 0x84, 0x18, &(0x7f0000000700)={0x0, 0xf7}, &(0x7f0000000740)=0x8) setsockopt$inet_sctp_SCTP_PRIMARY_ADDR(r0, 0x84, 0x6, &(0x7f0000000780)={r1, @in6={{0xa, 0x0, 0x4, @mcast1, 0x5}}}, 0x84) sendmsg$RDMA_NLDEV_CMD_SYS_SET(0xffffffffffffffff, &(0x7f0000000900)={&(0x7f0000000840)={0x10, 0x0, 0x0, 0x80002000}, 0xc, &(0x7f00000008c0)={&(0x7f0000000880)={0x20, 0x1407, 0x4, 0x70bd2b, 0x25dfdbfb, "", [@RDMA_NLDEV_ATTR_DEV_DIM={0x5}, @RDMA_NLDEV_ATTR_DEV_DIM={0x5}]}, 0x20}, 0x1, 0x0, 0x0, 0x40005}, 0x20000081) ioctl$BTRFS_IOC_DEFRAG_RANGE(r0, 0x40309410, 0x0) getsockopt$inet_sctp_SCTP_GET_LOCAL_ADDRS(0xffffffffffffffff, 0x84, 0x6d, &(0x7f0000000940)={r1, 0xa2, "0aa22fb1d89c3c5e5b43aaf4f1bf999d69c8c12c1a18da97b73fceb261d8f17fc22ba2b4e5824688ad906c55f8246db0df29a6d44282ded35b712e7f0e0f00dddd8e05732e3615ec01ab9b61eaa08cdca7c8972a6a6d714c3d68a3702717a7901d92e13c5037fc5409f1e3e898639ab3b62c3fdd71c65c09e0cb0740cc3385fd1fd92d548bb70732af282fd93ee642045cf5781f6cc487969f25620a475697f31ba8"}, &(0x7f0000000a00)=0xaa) r3 = socket$inet6_sctp(0xa, 0x1, 0x84) setsockopt$inet_sctp6_SCTP_AUTH_DELETE_KEY(r3, 0x84, 0x19, &(0x7f0000000a40)={r1, 0xb671}, 0x8) setsockopt$inet_mreqsrc(r0, 0x0, 0x25, &(0x7f0000000a80)={@rand_addr=0x64010102, @remote, @multicast1}, 0xc) mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000ac0)='./cgroup.cpu/syz0\x00', 0x1ff) setsockopt$inet_sctp_SCTP_PR_SUPPORTED(r0, 0x84, 0x71, &(0x7f0000000b00)={r2, 0x7fffffff}, 0x8) r4 = accept4$x25(0xffffffffffffffff, &(0x7f0000000b40), &(0x7f0000000b80)=0x12, 0x800) close(r4) syz_emit_ethernet(0xe0, &(0x7f0000000bc0)={@dev={'\xaa\xaa\xaa\xaa\xaa', 0x9}, @dev={'\xaa\xaa\xaa\xaa\xaa', 0x1d}, @void, {@mpls_mc={0x8848, {[{0x7a}, {0x857, 0x0, 0x1}, {}, {0x6}, {0x0, 0x0, 0x1}, {0x912}], @llc={@snap={0xab, 0xaa, "fb80", "d60f25", 0x60f1, "2baaceb2346905c0a57fa26fe150525020a6ab403a761e4106379d0b32ec7dbf9f71cd0d5628b575fb67431569c0ea11e99b5b7a5ddb2c90f2e977aa2253e5967c1e5822d9d9000f08ccd64200c02115a56eb5920774260d4d2c965c9d9e58fb1a375733dd202e9af8f37c870a640a6b45a459f9fb8e4654d9f6937a76655adf121da56cb4a4281839ec9e837f265a6970d637a393823c7754fca7e7efaef7a1c715850cf4156e70f386d56c6a29e05a0e"}}}}}}, &(0x7f0000000cc0)={0x1, 0x2, [0x5c4, 0xba5, 0x295, 0x86d]}) setsockopt$inet_sctp6_SCTP_DELAYED_SACK(r3, 0x84, 0x10, 0xfffffffffffffffd, 0x0) setsockopt$SO_VM_SOCKETS_BUFFER_MAX_SIZE(0xffffffffffffffff, 0x28, 0x2, &(0x7f0000000d00)=0x2, 0x8) bind$inet(r0, &(0x7f0000000d40)={0x2, 0x4e23, @empty}, 0x10) r5 = accept4$tipc(0xffffffffffffffff, &(0x7f0000000d80)=@id, &(0x7f0000000dc0)=0x10, 0x80000) getsockopt$TIPC_DEST_DROPPABLE(r5, 0x10f, 0x81, &(0x7f0000000e00), &(0x7f0000000e40)=0x4) getsockopt$inet_opts(r0, 0x0, 0x9, &(0x7f0000000e80)=""/97, &(0x7f0000000f00)=0x61) getsockopt$inet_sctp_SCTP_PRIMARY_ADDR(r0, 0x84, 0x6, &(0x7f0000000f40)={r1, @in={{0x2, 0x4e23, @loopback}}}, &(0x7f0000001000)=0x84) r6 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPCTNL_MSG_TIMEOUT_DELETE(r6, &(0x7f0000001100)={&(0x7f0000001040)={0x10, 0x0, 0x0, 0x800000}, 0xc, &(0x7f00000010c0)={&(0x7f0000001080)={0x34, 0x2, 0x8, 0x801, 0x0, 0x0, {0x2, 0x0, 0x7}, [@CTA_TIMEOUT_NAME={0x9, 0x1, 'syz1\x00'}, @CTA_TIMEOUT_L4PROTO={0x5, 0x3, 0x11}, @CTA_TIMEOUT_DATA={0xc, 0x4, 0x0, 0x1, @sctp=[@CTA_TIMEOUT_SCTP_SHUTDOWN_RECD={0x8, 0x6, 0x1, 0x0, 0x8001}]}]}, 0x34}, 0x1, 0x0, 0x0, 0x40000}, 0x11) ioctl$sock_x25_SIOCADDRT(r4, 0x890b, &(0x7f0000001140)={@remote={'\xcc\xcc\xcc\xcc\xcc\xcc\xcc\xcc\xcc\xcc\xcc\xcc\xcc\xcc', 0x2}, 0x5, 'veth1_virt_wifi\x00'}) ioctl$XFS_IOC_START_COMMIT(r0, 0x80585882, &(0x7f0000001240)={0xffffffffffffffff}) sendmsg$RDMA_NLDEV_CMD_NEWLINK(r7, &(0x7f0000001380)={&(0x7f00000012c0)={0x10, 0x0, 0x0, 0x40}, 0xc, &(0x7f0000001340)={&(0x7f0000001300)={0x38, 0x1403, 0x200, 0x70bd2c, 0x25dfdbfc, "", [{{0x9, 0x2, 'syz0\x00'}, {0x8, 0x41, 'siw\x00'}, {0x14, 0x33, 'macvlan0\x00'}}]}, 0x38}, 0x1, 0x0, 0x0, 0x4048040}, 0x10) ioctl$BTRFS_IOC_SNAP_DESTROY(r6, 0x5000940f, &(0x7f00000013c0)={{r7}, "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"}) r8 = syz_genetlink_get_family_id$ipvs(&(0x7f0000002400), r7) sendmsg$IPVS_CMD_ZERO(r7, &(0x7f0000002500)={&(0x7f00000023c0), 0xc, &(0x7f00000024c0)={&(0x7f0000002440)={0x60, r8, 0x400, 0x70bd29, 0x25dfdbfb, {}, [@IPVS_CMD_ATTR_SERVICE={0x24, 0x1, 0x0, 0x1, [@IPVS_SVC_ATTR_PE_NAME={0x8}, @IPVS_SVC_ATTR_PE_NAME={0x8}, @IPVS_SVC_ATTR_FWMARK={0x8}, @IPVS_SVC_ATTR_PORT={0x6, 0x4, 0x4e21}]}, @IPVS_CMD_ATTR_DEST={0x28, 0x2, 0x0, 0x1, [@IPVS_DEST_ATTR_TUN_FLAGS={0x6, 0xf, 0x2}, @IPVS_DEST_ATTR_ADDR={0x14, 0x1, @ipv6=@remote}, @IPVS_DEST_ATTR_U_THRESH={0x8, 0x5, 0x9}]}]}, 0x60}, 0x1, 0x0, 0x0, 0x8000}, 0x8) 6.956418s ago: executing program 5 (id=11582): mmap(&(0x7f0000000000/0x400000)=nil, 0x400000, 0x1, 0x41071, 0xffffffffffffffff, 0x0) r0 = bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000340)={0x2, 0x4, 0x8, 0x1, 0x80, 0x0, 0x0, '\x00', 0x0, 0x0}, 0x48) bpf$BPF_MAP_CONST_STR_FREEZE(0x16, &(0x7f0000000480)={r0, 0xffffffffffffffff}, 0x4) bpf$MAP_DELETE_ELEM(0x3, &(0x7f0000000240)={r1, 0x0}, 0x20) r2 = socket$alg(0x26, 0x5, 0x0) bind$alg(r2, &(0x7f0000000080)={0x26, 'hash\x00', 0x0, 0x0, 'sha512-avx\x00'}, 0x58) r3 = socket(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r3, 0x8933, &(0x7f0000000300)={'gretap0\x00', 0x0}) r5 = bpf$PROG_LOAD(0x5, &(0x7f0000000080)={0x3, 0x8, &(0x7f00000003c0)=ANY=[@ANYBLOB="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"], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @sched_cls}, 0x48) bpf$BPF_PROG_DETACH(0x1c, &(0x7f0000000000)={@cgroup=r5, r5, 0x2e}, 0x20) sendmsg$nl_route_sched(r3, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000780)={&(0x7f0000000340)=@newqdisc={0x38, 0x24, 0xf0b, 0x0, 0x4, {0x60, 0x0, 0x0, r4, {}, {0xfff1, 0xffff}}, [@TCA_RATE={0x6, 0x5, {0x5, 0x3}}, @qdisc_kind_options=@q_clsact={0xb}]}, 0x38}, 0x1, 0x0, 0x0, 0x4000000}, 0x0) sendmsg$IPSET_CMD_PROTOCOL(0xffffffffffffffff, &(0x7f0000000140)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x4000}, 0xc, &(0x7f0000000100)={&(0x7f0000000040)={0x24, 0x1, 0x6, 0x401, 0x0, 0x0, {0x1eb3bc86f02e1cb8, 0x0, 0x6}, [@IPSET_ATTR_PROTOCOL={0x5}, @IPSET_ATTR_PROTOCOL={0x5}]}, 0x24}}, 0x890) 3.269577196s ago: executing program 7 (id=11612): sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000000)={0x0}, 0x1, 0x0, 0x0, 0x4000811}, 0x0) bpf$BPF_BTF_LOAD(0x12, &(0x7f00000001c0)={&(0x7f0000000040)={{0xeb9f, 0x1, 0x0, 0x18, 0x0, 0xc, 0xc, 0x5, [@func={0x3, 0x11}]}, {0x0, [0x0, 0x0, 0x61]}}, 0x0, 0x29}, 0x20) r0 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000340)=@newtaction={0x70, 0x30, 0x1, 0x70bd28, 0x0, {}, [{0x5c, 0x1, [@m_simple={0x58, 0x1, 0x0, 0x0, {{0xb}, {0x2c, 0x2, 0x0, 0x1, [@TCA_DEF_PARMS={0x18, 0x2, {0x2, 0xfffffff8, 0x1, 0x9, 0x7}}, @TCA_DEF_DATA={0xd, 0x3, ')+@$(:(\\\x00'}]}, {0x4}, {0xc, 0x7, {0x1, 0x1}}, {0xc, 0x8, {0x2, 0x3}}}}]}]}, 0x70}, 0x1, 0x0, 0x0, 0x4}, 0x0) sendmmsg(r0, &(0x7f00000002c0), 0x40000000000009f, 0x0) 2.969053702s ago: executing program 7 (id=11616): r0 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r0, &(0x7f0000005c40)={0x0, 0x0, &(0x7f0000005c00)={&(0x7f0000000080)=@newtaction={0x88, 0x30, 0x1, 0x0, 0x0, {}, [{0x74, 0x1, [@m_bpf={0x70, 0x1, 0x0, 0x0, {{0x8}, {0x1c, 0x2, 0x0, 0x1, [@TCA_ACT_BPF_PARMS={0x18, 0x2, {0x0, 0x0, 0x20000000}}]}, {0x2f, 0x6, "f4955199660fe737e445d25bd6ca34974f2cbaef41fed54eb42af56d2717b08cc1cb73547da14aa293bca4"}, {0xc}, {0xc}}}]}]}, 0x88}}, 0x0) 2.778525566s ago: executing program 7 (id=11618): r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000040), 0x1c1341, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f00000000c0)={'syzkaller0\x00', 0x84aebfbd6349b7f2}) r1 = socket(0x10, 0x803, 0x0) bpf$PROG_LOAD(0x5, &(0x7f0000000700)={0x12, 0x2000006a, &(0x7f0000000000)=ANY=[@ANYRESOCT=r0], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x1e, '\x00', 0x0, @cgroup_sock_addr=0xb, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) socket(0x2a, 0x1, 0x0) sendmsg$nl_route_sched(r1, &(0x7f00000012c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000a40)=@newqdisc={0x2c, 0x24, 0x4ee4e6a52ff5653f, 0x70bd2d, 0x25dfdbfc, {0x0, 0x0, 0x0, r2, {0x0, 0x9}, {0xffff, 0xffff}}, [@qdisc_kind_options=@q_drr={0x8}]}, 0x2c}, 0x1, 0x0, 0x0, 0x81}, 0x0) sendmsg$nl_route_sched(r1, &(0x7f0000006040)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000140)=@newtfilter={0x4c, 0x2c, 0xd3f, 0x70ad25, 0x25dfdbfb, {0x0, 0x0, 0x0, r2, {0x2, 0x4}, {0x0, 0x9}, {0xf, 0xffff}}, [@filter_kind_options=@f_flower={{0xb}, {0x1c, 0x2, [@TCA_FLOWER_KEY_ETH_TYPE={0x6, 0x8, 0x8848}, @TCA_FLOWER_KEY_MPLS_OPTS={0x10, 0x63, 0x0, 0x1, @TCA_FLOWER_KEY_MPLS_OPTS_LSE={0xc, 0x1, 0x0, 0x1, [@TCA_FLOWER_KEY_MPLS_OPT_LSE_DEPTH={0x5, 0x1, 0x81}]}}]}}]}, 0x4c}, 0x1, 0x0, 0x0, 0x1}, 0x20040054) 2.591973097s ago: executing program 9 (id=11620): r0 = socket$unix(0x1, 0x1, 0x0) ioctl$sock_SIOCGIFVLAN_SET_VLAN_FLAG_CMD(r0, 0x8982, &(0x7f0000000000)={0x7, 'vlan0\x00', {0x2}}) r1 = openat$cgroup_ro(0xffffffffffffffff, &(0x7f0000000180)='blkio.bfq.io_wait_time_recursive\x00', 0x0, 0x0) setsockopt$inet_icmp_ICMP_FILTER(r1, 0x1, 0x1, &(0x7f00000001c0)={0x80000000}, 0x4) r2 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r2, &(0x7f0000000480)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000040)=ANY=[@ANYBLOB="3c010000100013070000000000000000ac1414bb00000000000000000000000000000000000000000000ffffac14140000000000000000000a00000000000000", @ANYRES32=0x0, @ANYRES32, @ANYBLOB="ff0100000000000000000000000000010000000032000000ff02000000000000000000000000000100000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000feffffffffffffff0000000000000000000000002bbd7000000000000200000000000000000000004c00120061656769733132386c2d6117736e69000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000080"], 0x13c}}, 0x20040800) setsockopt$netlink_NETLINK_BROADCAST_ERROR(r1, 0x10e, 0x4, &(0x7f0000000200)=0x3, 0x4) getsockopt$bt_BT_FLUSHABLE(r1, 0x112, 0x8, &(0x7f0000000240)=0x1000000, &(0x7f0000000280)=0x4) 2.454458957s ago: executing program 3 (id=11623): r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = socket$inet_tcp(0x2, 0x1, 0x0) setsockopt$packet_tx_ring(0xffffffffffffffff, 0x107, 0xd, &(0x7f0000000000)=@req3={0x410000, 0x100000001, 0x210000, 0x1, 0xa, 0x0, 0x78}, 0x1c) setsockopt$inet_mreqn(r1, 0x0, 0x27, &(0x7f0000000000)={@multicast1, @local}, 0xc) getsockopt$inet_buf(r1, 0x0, 0x29, &(0x7f0000000000)=""/145, &(0x7f0000695ffc)=0x24b) sendmsg$nl_generic(r0, &(0x7f0000000400)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000100)=ANY=[@ANYBLOB="200000002f00090027bd7000f9dbdf25040000000c004c000100000000000000f8f6fb075284eeede885cbe3def477b243d308025c115f8ce00c6e2b993d8b"], 0x20}, 0x1, 0x0, 0x0, 0x42014}, 0x80000) 2.386199689s ago: executing program 9 (id=11624): bpf$PROG_LOAD(0x5, &(0x7f0000000440)={0xb, 0x4, &(0x7f00000000c0)=ANY=[@ANYBLOB="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"], &(0x7f0000000080)='GPL\x00', 0x2, 0x3f7, &(0x7f000000cf3d)=""/195, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x8, 0x0, 0xfffffffffffffe1b, 0x10, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0xfffffffffffffd81}, 0x48) 2.331251485s ago: executing program 9 (id=11625): r0 = socket(0x10, 0x3, 0x0) write(r0, &(0x7f0000000100)="140000001a004f7fb3e45f2024d2f1c9fb470000", 0x14) recvmmsg(r0, &(0x7f0000004980)=[{{&(0x7f0000000240)=@ll, 0x80, &(0x7f0000002a00)=[{&(0x7f00000018c0)=""/4096, 0x1000}, {&(0x7f00000028c0)=""/9, 0x9}, {&(0x7f0000002900)=""/13, 0xd}, {&(0x7f0000002940)=""/144, 0x90}], 0x4}, 0x4}, {{&(0x7f0000002a40)=@nl=@unspec, 0x80, &(0x7f0000002b40)=[{&(0x7f0000002ac0)=""/87, 0x57}], 0x1, &(0x7f0000002b80)}, 0xc}, {{&(0x7f0000002bc0)=@nfc, 0x80, &(0x7f0000003180)=[{&(0x7f0000002c40)=""/12, 0xc}, {&(0x7f0000002c80)=""/159, 0x9f}, {&(0x7f0000002d40)=""/183, 0xb7}, {&(0x7f0000002ec0)=""/75, 0x4b}, {&(0x7f0000002f40)=""/171, 0xab}, {&(0x7f0000003000)=""/174, 0xae}, {&(0x7f00000030c0)=""/126, 0x7e}, {&(0x7f0000003140)=""/60, 0x3c}], 0x8, &(0x7f0000003200)=""/31, 0x1f, 0x20}, 0x1e359a7a}, {{&(0x7f0000003240)=@un=@abs, 0x80, &(0x7f00000037c0)=[{&(0x7f00000032c0)=""/177, 0xb1}, {&(0x7f0000003380)=""/176, 0xb0}, {&(0x7f0000003440)=""/200, 0xc8}, {&(0x7f0000003540)=""/167, 0xa7}, {&(0x7f0000003600)=""/36, 0x24}, {&(0x7f0000003640)=""/117, 0x75}, {&(0x7f00000036c0)=""/245, 0xf5}], 0x7, &(0x7f0000003840)=""/148, 0x94}, 0x9}, {{0x0, 0x0, &(0x7f0000003940)=[{&(0x7f0000003900)=""/46, 0x2e}], 0x1, &(0x7f0000003980)=""/4096, 0x1000}, 0xfffffc85}], 0x5, 0x10122, 0x0) 2.238075732s ago: executing program 9 (id=11627): r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r1, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000000)=ANY=[@ANYBLOB="44d91200"/15, @ANYRES32=0x0, @ANYBLOB="662700000000000024001280090001007866726d0000000014000280040003"], 0x44}}, 0x0) sendmsg$nl_route(r0, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000000)=ANY=[], 0xe8}}, 0x0) (async) sendmsg$nl_route(r0, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000000)=ANY=[], 0xe8}}, 0x0) 2.203684143s ago: executing program 3 (id=11628): r0 = socket$alg(0x26, 0x5, 0x0) bind$alg(r0, &(0x7f0000000000)={0x26, 'hash\x00', 0x0, 0x0, 'sha512\x00'}, 0x58) r1 = accept4(r0, 0x0, 0x0, 0x800) sendmmsg$alg(r1, &(0x7f0000000640)=[{0x0, 0x0, &(0x7f0000000380)=[{&(0x7f0000000140)="b57523cb1a2c90d8acad2e2d98dfc9ea7a5843c3b63b683ced2b3266175599b779617e66e6b3e15c042be90635a2d36160bbf9a2edcacc0bbe015b84150a1928de94397894ff36aa430fc2a0814ba634308d6d0837250dfd1eca5383f9d151449743b1a0c4ffc51242a229c5d6d06f147a61d797ea7ffeda95b76f5623", 0x7d}, {&(0x7f00000001c0)="66f7", 0x3}, {&(0x7f0000000300)='l3', 0x7fffef80}], 0x3}], 0x1, 0x0) mmap(&(0x7f0000000000/0x95c000)=nil, 0x95c000, 0x200000b, 0x8c4b815a5465c2b2, 0xffffffffffffffff, 0x0) getsockopt(r1, 0x6, 0x5, &(0x7f0000000080)=""/107, &(0x7f0000000100)=0x6b) 2.175184514s ago: executing program 9 (id=11629): r0 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r0, &(0x7f0000000300)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f0000000140)=@updsa={0xf0, 0x10, 0x1, 0x0, 0x0, {{@in=@multicast2, @in=@local, 0x0, 0x0, 0x0, 0x0, 0x2}, {@in=@empty, 0x0, 0x35}, @in6=@private2, {0x0, 0x0, 0x7cc98682, 0x2}, {}, {0x3}, 0x0, 0x0, 0x2, 0x1}}, 0xf0}}, 0x0) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000200)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000100)=@deltaction={0x44, 0x31, 0x0, 0x0, 0x0, {}, [@TCA_ACT_TAB={0x10, 0x1, [{0xc, 0x0, 0x0, 0x0, @TCA_ACT_INDEX={0x8}}]}, @TCA_ACT_TAB={0x20, 0x1, [{0xc, 0x0, 0x0, 0x0, @TCA_ACT_INDEX={0x8}}, {0x10, 0x0, 0x0, 0x0, @TCA_ACT_KIND={0x9, 0x1, 'gact\x00'}}]}]}, 0x44}}, 0x0) (async) r1 = socket$nl_route(0x10, 0x3, 0x0) r2 = socket$xdp(0x2c, 0x3, 0x0) setsockopt$XDP_TX_RING(r2, 0x11b, 0x6, &(0x7f0000000000)=0x40000000, 0x4) (async) sendmsg$nl_route(r1, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000100)=ANY=[@ANYBLOB="4400000010003b1500"/20, @ANYRES32=0x0, @ANYBLOB="662700000000000024001280090001007866726d0000000014000280040003"], 0x44}}, 0x0) r3 = socket$inet_sctp(0x2, 0x1, 0x84) setsockopt$IP_VS_SO_SET_ADD(r3, 0x0, 0x482, 0x0, 0x0) (async) setsockopt$IP_VS_SO_SET_EDITDEST(r3, 0x0, 0x489, &(0x7f0000000380)={{0x84, @multicast1, 0x4e20, 0x3, 'sh\x00', 0x20, 0x60000000, 0xc}, {@dev={0xac, 0x14, 0x14, 0x1a}, 0x4e21, 0x12002, 0xf, 0xe1b2, 0x1ff}}, 0x44) syz_80211_inject_frame(&(0x7f0000000280), &(0x7f0000000700)=@mgmt_frame=@probe_response={{{0x0, 0x0, 0x5, 0x0, 0x0, 0x1}, {0x1}, @broadcast, @device_a, @from_mac=@broadcast, {0x3, 0x5}}, 0x7, @random=0x6, 0x0, @void, @val={0x1, 0x3, [{0x5}, {0x36, 0x1}, {0x4, 0x1}]}, @val={0x3, 0x1, 0x6}, @val={0x4, 0x6, {0x4, 0x66, 0x0, 0x1}}, @void, @void, @val={0x72, 0x6}, @val={0x71, 0x7, {0x1, 0x1, 0xffffffffffffffff, 0xffffffffffffffff, 0x0, 0x8, 0x1}}, [{0xdd, 0x6, '2G|$Ju'}, {0xdd, 0x94, "c7c176b03a5322e440f93f675ac0084b848cb0a8d6c3a359ec8b8ee6f297a505ffc12ae87806c9ef0a1accb8c5786f667a384d520d73828bae858ac6b6711f71972300810980eeb88cde287848fdbeb67fea06651bd274f7143a06067fff8ba29cc9bc4e9a63fcc04456d778e8a623dd7e85be1d62ccca13f62a14561aa64b2f396a43bed8318f6e26a93578020e29ceea7bcbba"}, {0xdd, 0xa3, "d0cb6a37afaf8bcb0b28a9b2a9ffba12d617838005588356545fc50f08443d12d56cc90e92ca01e3bd31eedc840ed62198e0decd4b37a11a52583e18e3a1e7b4c2619ef0daea6948e719f0095e32159517fd65045195d305fa5acb642d1059cf29f67336ab47cba38c8a478b72a3b779668a14ccd691802717b6de9c674e4b3bc970d1e9ff6419b0203af9dd13e170bb1c4b539f5dbd5c32eb48bec0d130d7fd956780"}, {0xdd, 0x6, "5f6ecaabff9d"}, {0xdd, 0xc1, "a16061db679dda7d4e31dfed8d21b30934710c84f9e1d660bf43651be4c2362e64031e0d84569e1055aa789c578eab835ccb513d0f4b788b2b2790246f037c8557e8716810a98e35e9820d6d4c0d23c685f27403f490677396df436e8012a627048ebfe5646eda7338be44aec99d8d35b6b1485b3b05568a2339b8a4805c457755443a2d3d59f3e4dbf7f19c1f68b95b45a231f8740937103d2209dbbde42f9bf3f5e462b490a3923cc741718658780e076f02947cb70a23a14df852fd70e99b66"}]}, 0x253) 1.52802132s ago: executing program 0 (id=11630): r0 = socket$nl_route(0x10, 0x3, 0x0) bpf$BPF_GET_PROG_INFO(0xf, &(0x7f0000000380)={0xffffffffffffffff, 0xe0, &(0x7f0000000280)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, &(0x7f0000000040)=[0x0], ""/16, 0x0, 0x0, 0x0, 0x0, 0x6, 0x8, &(0x7f00000000c0)=[0x0, 0x0, 0x0, 0x0, 0x0, 0x0], &(0x7f0000000100)=[0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0], 0x0, 0x91, &(0x7f0000000140)=[{}, {}, {}, {}, {}, {}], 0x30, 0x10, &(0x7f00000001c0), &(0x7f0000000200), 0x8, 0x9c, 0x8, 0x8, &(0x7f0000000240)}}, 0x10) ioctl$sock_SIOCGPGRP(r0, 0x8904, &(0x7f0000000080)=0x0) sendmsg$nl_route(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000180)={&(0x7f00000003c0)=@bridge_getneigh={0xd8, 0x1e, 0x100, 0x70bd2c, 0x25dfdbfc, {0x7, 0x0, 0x0, r1, 0x0, 0x40005}, [@IFLA_IFALIASn={0x4}, @IFLA_AF_SPEC={0x70, 0x1a, 0x0, 0x1, [@AF_MPLS={0x4}, @AF_INET6={0x54, 0xa, 0x0, 0x1, [@IFLA_INET6_TOKEN={0x14, 0x7, @local}, @IFLA_INET6_TOKEN={0x14, 0x7, @dev={0xfe, 0x80, '\x00', 0x2d}}, @IFLA_INET6_TOKEN={0x14, 0x7, @mcast2}, @IFLA_INET6_TOKEN={0x14, 0x7, @mcast1}]}, @AF_INET6={0x14, 0xa, 0x0, 0x1, [@IFLA_INET6_ADDR_GEN_MODE={0x5, 0x8, 0x2}, @IFLA_INET6_ADDR_GEN_MODE={0x5, 0x8, 0x3d}]}]}, @IFLA_PROMISCUITY={0x8, 0x1e, 0x100}, @IFLA_PHYS_SWITCH_ID={0x1b, 0x24, "ca431333b7c5e2eb3e79b18410b04368f168a0553fda6e"}, @IFLA_LINK_NETNSID={0x8, 0x25, 0x1}, @IFLA_NET_NS_PID={0x8, 0x13, r2}, @IFLA_GSO_MAX_SIZE={0x8, 0x29, 0x4d7c9}, @IFLA_PROTO_DOWN={0x5, 0x27, 0xe}]}, 0xd8}}, 0x1) 1.413304068s ago: executing program 3 (id=11631): close(0xffffffffffffffff) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000140)={0xe, 0x11, &(0x7f00000002c0)=@ringbuf={{0x18, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x40}, {{0x18, 0x1, 0x1, 0x0, 0x1}}, {}, [@btf_id={0x18, 0x4, 0x3, 0x0, 0x3}], {{}, {0x7, 0x0, 0xb, 0x2, 0x0, 0x0, 0x2}, {0x85, 0x0, 0x0, 0x85}}}, &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x24}, 0x94) r0 = socket$nl_netfilter(0x10, 0x3, 0xc) r1 = socket$inet_udp(0x2, 0x2, 0x0) setsockopt$sock_int(r1, 0x1, 0x3c, &(0x7f00000000c0)=0x1, 0x4) r2 = socket(0x10, 0x3, 0x0) sendmsg$nl_route(r2, &(0x7f0000000140)={0x0, 0x7000000, &(0x7f0000000040)={&(0x7f0000000080)=@newlink={0x3c, 0x10, 0x403, 0x0, 0x0, {}, [@IFLA_LINKINFO={0x1c, 0x12, 0x0, 0x1, @macsec={{0xb}, {0xc, 0x2, 0x0, 0x1, [@IFLA_MACSEC_ICV_LEN={0x5, 0x3, 0xe}]}}}]}, 0x3c}}, 0x0) sendto$inet(r1, 0x0, 0x0, 0x404c0c6, &(0x7f0000000180)={0x2, 0x4e21, @remote}, 0x10) sendto$inet(r1, &(0x7f0000000100)='J', 0xfdbe, 0x4004084, 0x0, 0x11000a00) close(0x3) r3 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r3, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000240)=ANY=[@ANYBLOB="140000001000010000000000000000000500000a28000000000a030000000000000000000a00000708000240000000020900010073797a31000000002c000000030a010100000000000000000a0000070900010073797a31000000000900030073797a320000000014000000110001"], 0x7c}, 0x1, 0x0, 0x0, 0x4000}, 0x0) mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000)='./cgroup/syz0\x00', 0x1ff) r4 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000), 0x200002, 0x0) r5 = openat$cgroup_int(r4, &(0x7f0000000080)='cgroup.max.depth\x00', 0x2, 0x0) sendfile(r5, r5, 0x0, 0x4) sendmsg$NFT_BATCH(r3, &(0x7f0000009b40)={0x0, 0x0, &(0x7f0000009b00)={&(0x7f0000000100)=ANY=[@ANYBLOB="140000001000010000000000000000000500000a4c000000090a010400000000000000000a0000040900010073797a310000000008000540000000020900020073797a310000000008000a40fffffffc080003400000001408000c4000000e45400000000c0a010100000000000000000a0000060900020073797a31000000000900010073797a310000000014000380100000800c00018006000100d103000014000000110001"], 0xb4}, 0x1, 0x0, 0x0, 0x4000850}, 0x40) r6 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r6, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000180)={&(0x7f00000001c0)=ANY=[@ANYBLOB="3400000041000100fcff070004000000010000000400488014000180100010800c0003000300000000000000080002"], 0x34}, 0x1, 0x0, 0x0, 0x400c801}, 0x4008094) sendmsg$NFT_BATCH(r0, &(0x7f0000009b40)={0x0, 0x0, &(0x7f0000009b00)={&(0x7f0000000480)={{0x14, 0x10, 0x1, 0x0, 0x0, {0x5}}, [@NFT_MSG_NEWSET={0x50, 0x9, 0xa, 0x401, 0x0, 0x0, {0xa, 0x0, 0x4}, [@NFTA_SET_TABLE={0x9, 0x1, 'syz1\x00'}, @NFTA_SET_KEY_LEN={0x8, 0x5, 0x1, 0x0, 0x2}, @NFTA_SET_NAME={0x9, 0x2, 'syz1\x00'}, @NFTA_SET_ID={0x8, 0xa, 0x1, 0x0, 0xfffffffc}, @NFTA_SET_FLAGS={0x8, 0x3, 0x1, 0x0, 0x14}, @NFTA_SET_DESC={0xc, 0x9, 0x0, 0x1, [@NFTA_SET_DESC_SIZE={0x8, 0x1, 0x1, 0x0, 0x81}]}]}], {0x14, 0x11, 0x1, 0x0, 0x0, {0x1}}}, 0x78}, 0x1, 0x0, 0x0, 0x4000854}, 0x40) 1.201424005s ago: executing program 0 (id=11632): r0 = socket$nl_generic(0x10, 0x3, 0x10) (async, rerun: 64) r1 = socket$inet_udp(0x2, 0x2, 0x0) (rerun: 64) setsockopt$inet_MCAST_MSFILTER(r1, 0x0, 0x30, 0x0, 0x590) (async) r2 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000080), r0) (async) r3 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r3, &(0x7f0000000380)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000140)=ANY=[@ANYBLOB="1499367443f94b2cf18f5cabbc8c290000001000010000000000000000000000000a14000000000a01020000000000000000010000005800fa00160a010000000000000000000100000009000100737a30000000000900020073797a31000000002c0003800800014000000000080002400000000418915a6834fb6f7eb4adbb220003801400010070696d3672656731000000000000000048000000160a0101000b000000000000080000000000000073797a31000000000900010073797a30000000001c000380180003801400010070696d3672656731000000000000000014000000100000"], 0xdc}, 0x1, 0x0, 0x0, 0x40000}, 0x0) (async) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f0000000100)={'wlan0\x00', 0x0}) sendmsg$NL80211_CMD_SET_TX_BITRATE_MASK(r0, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000400)=ANY=[@ANYBLOB='x\x00\x00\x00', @ANYRES16=r2, @ANYBLOB="010000000000000000003900000008000300", @ANYRES32=r4, @ANYBLOB="5c005a8054000180050007000100000047000200"], 0x78}, 0x1, 0x0, 0x0, 0x40080}, 0x2000c840) r5 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r5, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000440)=ANY=[@ANYBLOB="98010000100013070000000000000000fe8000000000000000000000000000aafe8000000000000000000000000000aa00"/64, @ANYRES32=0x0, @ANYRES32=0x0, @ANYBLOB="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"], 0x198}}, 0x0) 1.118032979s ago: executing program 3 (id=11633): r0 = socket$inet_tcp(0x2, 0x1, 0x0) r1 = openat$ppp(0xffffffffffffff9c, &(0x7f0000000b00), 0x400, 0x0) ioctl$PPPIOCGFLAGS1(r1, 0x8004745a, &(0x7f0000000ac0)) setsockopt$IPT_SO_SET_REPLACE(r0, 0x0, 0x40, &(0x7f0000000000)=@raw={'raw\x00', 0x8, 0x3, 0xa20, 0x90, 0x43, 0xa0, 0x90, 0x98, 0x988, 0x178, 0x178, 0x988, 0x178, 0x49, 0x0, {[{{@ip={@loopback, @local, 0x0, 0x0, 'veth0_to_bond\x00', 'ip6erspan0\x00', {}, {0x7f}, 0x0, 0x1}, 0x12a, 0x70, 0x90, 0x0, {0x0, 0x7a010000}}, @unspec=@TRACE={0x20}}, {{@uncond, 0x0, 0x8b8, 0x8f8, 0x0, {}, [@common=@unspec=@physdev={{0x68}, {'\x00', {0xff}, 'veth0_macvtap\x00', {}, 0x8, 0x15}}, @common=@unspec=@u32={{0x7e0}, {[{[{0x9}, {0x3}, {0x1, 0x1}, {0x0, 0x3}, {0x4, 0x2}, {0xb1d}, {0x3}, {0x8}, {0x2, 0x3}, {0x3}, {0x103}], [{0xe8f3, 0x5}, {0x1d, 0x6}, {0x4, 0x8}, {0x0, 0x4}, {0x4, 0xc3e}, {0x1, 0x100}, {0x6, 0x7}, {0x3, 0x3}, {0xf2, 0x3}, {0x3ff, 0x8}, {0x10, 0x3}], 0x6, 0x6}, {[{0x80, 0x3}, {0x2}, {0x6, 0x1}, {0x355cbac3, 0x2}, {0x0, 0x2}, {0x0, 0x2}, {0x7}, {0xe7, 0x2}, {0x3, 0x3}, {0x5598e8fe, 0x2}, {0x6, 0x1}], [{0x9, 0x9097}, {0x7, 0x9}, {0x7, 0xa}, {0x6, 0x8}, {0x20080, 0x5}, {0x13, 0xc0000000}, {0x40, 0xb}, {0x9, 0x6}, {0x4, 0x2}, {0x6, 0x7fffffff}, {0x7fffffff, 0x400}], 0x7}, {[{0x84, 0x2}, {}, {0x56, 0x2}, {0xffffffff, 0x1}, {}, {0x5, 0x1}, {0x5, 0x2}, {0x8, 0x3}, {0x2, 0x3}, {0x8, 0x1}, {0x7}], [{0x9, 0x5}, {0x80, 0x32}, {0x0, 0xfffffff7}, {0xff, 0x1}, {0x7, 0x6}, {0xdb9, 0xff4}, {0x6, 0x3ff}, {0x3, 0x6}, {0x5, 0x10}, {0x9, 0x6}, {0x10000, 0x2}], 0x4, 0x2a}, {[{0x3, 0x2}, {0xa, 0x1}, {0x6, 0x1}, {0x10, 0x3}, {0x2, 0x2}, {0x2, 0x2}, {0x1000003, 0x1}, {0x2, 0x3}, {0x3, 0x1}, {0x2, 0x2}, {0x477d, 0x1}], [{0x4, 0xffffffff}, {0x200, 0x6}, {0x4be1, 0x4044}, {0x1}, {0x5, 0xc}, {0x3, 0x4}, {0x2, 0x4}, {0x800, 0x8000}, {0x8, 0x800}, {0x3, 0x2}, {0xe, 0x8000}], 0x4, 0xb}, {[{0x7, 0x1}, {0xd, 0x3}, {0x5}, {0x61}, {0x9}, {}, {0x2}, {0x1}, {0x0, 0x2}, {0x9, 0x3}, {0x5, 0x3}], [{0x58d, 0x3ff}, {0x0, 0x7f}, {0x6}, {0xfc9b, 0x80000001}, {0x101, 0x7}, {0x7, 0x1}, {0x6, 0x8001}, {0x2, 0x1}, {0x2, 0x2}, {0x9, 0x4cf}, {0x7, 0x10000}], 0x1}, {[{0x2}, {0x9}, {0x8, 0x1}, {0x2, 0x3}, {0x71, 0x3}, {0x0, 0x2}, {0xe, 0x2}, {0x6, 0x2}, {0x5}, {0x3000004, 0x3}, {0x6, 0x1}], [{0x9, 0x3}, {0x5, 0x7fffffff}, {0xffff, 0x4}, {0x0, 0x7}, {0x8, 0xb502}, {0x1ff, 0x86}, {0x6, 0xffffffff}, {0x3, 0x4}, {0x5, 0x6}, {0xf, 0xf93}, {0x5, 0x4}], 0x3, 0x3}, {[{0x7, 0x1}, {0x3, 0x1}, {0x45d7}, {0xfff, 0x3}, {0xc4f, 0x3}, {0x0, 0x2}, {0x400, 0x1}, {0x2, 0x1}, {0x4, 0x2}, {0xfffffffd}, {0x2}], [{0x3, 0x6}, {0xfd, 0xd}, {0x80, 0xb81d}, {0x2ca, 0x80000000}, {0x8, 0xff}, {0x7, 0x45a8}, {0x8, 0x6}, {0x4, 0x1}, {0x2, 0x6}, {0xfc, 0x6}, {0xd, 0x138e}], 0x6}, {[{0x4, 0x1}, {0x800}, {0x9, 0x2}, {0xf0000000, 0x2}, {0x6, 0x3}, {0x3, 0x2}, {0x8, 0x2}, {}, {0x9}, {0x400, 0x2}, {0x8, 0x3}], [{0x7, 0xfffffffd}, {0x2}, {0x2, 0x2}, {0x8f, 0x6}, {0x7, 0x5}, {0x8, 0x7}, {0xb, 0x82c6}, {0xb1b}, {0xbd5c, 0xffff}, {0x1, 0x9b8d}, {0xec, 0x5}], 0x2, 0x6}, {[{0x8}, {0x0, 0x1}, {0xac000000}, {0x6, 0x2}, {0x2d8, 0x3}, {0x7e3ea4bc}, {0x8, 0x1}, {0x4f, 0x3}, {0x4, 0x2}, {0xfffffff7}, {0x3, 0x2}], [{0x5, 0x42}, {0x76a74689, 0x5}, {0x1}, {0x8000, 0x7}, {0x400, 0xdd}, {0xfff, 0x8}, {0x76b, 0xfffffffe}, {0xa6d00, 0xffffbff7}, {0x10001, 0xfc8d}, {0x0, 0x10001}, {0x4, 0x3}], 0x1, 0x9}, {[{0x8, 0x1}, {0x3, 0x3}, {0x18, 0x3}, {0x3ff, 0x3}, {0x7fffffff}, {0x8}, {0x1, 0x3}, {0x8, 0x3}, {0xf1b6}, {0x80, 0x3}, {0x4, 0x2}], [{0x2, 0x4}, {0x3, 0xf}, {0x9, 0x6}, {0x7f, 0x8}, {0x7, 0x273e1899}, {0x4, 0x1}, {0x6, 0x3}, {0x1, 0xb7}, {0x8, 0x3}, {0x3, 0x1}, {0x7ff, 0x63}], 0xb, 0x3}, {[{0x1, 0x2}, {0x6, 0x3}, {0xffff, 0x1}, {0x1}, {0x4, 0x3}, {0x4, 0x3}, {0xaa7}, {0x100, 0x3}, {0x2}, {0xfffffff7, 0xb90af65875a5dc08}, {0x4, 0x3}], [{0xffffffff}, {0x8001, 0x7}, {0x10000, 0x7524}, {0x73d, 0x4}, {0x0, 0x280000}, {0x3, 0x3af}, {0x5, 0x2}, {0x101, 0xbf}, {0x10000, 0x6}, {0x3, 0x800}], 0x8, 0x5}], 0x3}}]}, @common=@unspec=@ERROR={0x40, 'ERROR\x00', 0x0, "f1c098b60204ed02d82cf440fef5497b80c29d381d41116000"}}], {{'\x00', 0x0, 0x70, 0x98}, {0x28, '\x00', 0x4}}}}, 0xa80) socket$inet6(0xa, 0x1, 0xb) 1.03782754s ago: executing program 7 (id=11634): r0 = socket(0xa, 0x1, 0x0) r1 = syz_genetlink_get_family_id$nbd(&(0x7f00000000c0), 0xffffffffffffffff) r2 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) sendmsg$NBD_CMD_RECONFIGURE(r2, &(0x7f0000000300)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f0000000440)=ANY=[@ANYBLOB=',\x00\x00\x00', @ANYRES16=r1, @ANYBLOB="010026bd7000fbdbdf2503000000100007800c00018008000100", @ANYRES32=r0, @ANYBLOB="080001"], 0x2c}, 0x1, 0x0, 0x0, 0x10}, 0x20000844) r3 = syz_init_net_socket$802154_dgram(0x24, 0x2, 0x0) sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000100)={{0x14}, [@NFT_MSG_NEWTABLE={0x20, 0x0, 0xa, 0x5, 0x0, 0x0, {0x5}, [@NFTA_TABLE_NAME={0x9, 0x1, 'syz0\x00'}]}, @NFT_MSG_NEWCHAIN={0x2c, 0x3, 0xa, 0x101, 0x0, 0x0, {0x5}, [@NFTA_CHAIN_TABLE={0x9, 0x1, 'syz0\x00'}, @NFTA_CHAIN_NAME={0x9, 0x3, 'syz0\x00'}]}, @NFT_MSG_NEWRULE={0x48, 0x6, 0xa, 0x401, 0x0, 0x0, {0x5}, [@NFTA_RULE_CHAIN_ID={0x8}, @NFTA_RULE_EXPRESSIONS={0x2c, 0x4, 0x0, 0x1, [{0x28, 0x1, 0x0, 0x1, @fwd={{0x8}, @val={0x1c, 0x2, 0x0, 0x1, [@NFTA_FWD_SREG_ADDR={0x8, 0x2, 0x1, 0x0, 0xd}, @NFTA_FWD_SREG_DEV={0x8, 0x1, 0x1, 0x0, 0x16}, @NFTA_FWD_NFPROTO={0x8, 0x3, 0x1, 0x0, 0xa}]}}}]}]}], {0x14}}, 0xbc}}, 0x0) r4 = syz_init_net_socket$nl_rdma(0x10, 0x3, 0x10) r5 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000080), 0xffffffffffffffff) sendmsg$NFQNL_MSG_CONFIG(0xffffffffffffffff, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000180)={0x1c, 0x2, 0x3, 0x3, 0x0, 0x0, {0x0, 0x0, 0x10}, [@NFQA_CFG_CMD={0x8, 0x1, {0x1}}]}, 0x1c}}, 0x0) sendmsg$NL80211_CMD_GET_MPATH(r4, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000180)=ANY=[@ANYBLOB=',\x00\x00\x00', @ANYRES16=r5, @ANYBLOB="01000020b69c97553002677b00000c"], 0x2c}}, 0x0) sendmsg$802154_dgram(r3, &(0x7f0000000140)={&(0x7f0000000040)={0x24, @none={0x3}}, 0x14, &(0x7f0000000100)={0x0, 0x1b}, 0x7}, 0x0) socket(0xa, 0x1, 0x0) (async) syz_genetlink_get_family_id$nbd(&(0x7f00000000c0), 0xffffffffffffffff) (async) syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) (async) sendmsg$NBD_CMD_RECONFIGURE(r2, &(0x7f0000000300)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f0000000440)=ANY=[@ANYBLOB=',\x00\x00\x00', @ANYRES16=r1, @ANYBLOB="010026bd7000fbdbdf2503000000100007800c00018008000100", @ANYRES32=r0, @ANYBLOB="080001"], 0x2c}, 0x1, 0x0, 0x0, 0x10}, 0x20000844) (async) syz_init_net_socket$802154_dgram(0x24, 0x2, 0x0) (async) sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000100)={{0x14}, [@NFT_MSG_NEWTABLE={0x20, 0x0, 0xa, 0x5, 0x0, 0x0, {0x5}, [@NFTA_TABLE_NAME={0x9, 0x1, 'syz0\x00'}]}, @NFT_MSG_NEWCHAIN={0x2c, 0x3, 0xa, 0x101, 0x0, 0x0, {0x5}, [@NFTA_CHAIN_TABLE={0x9, 0x1, 'syz0\x00'}, @NFTA_CHAIN_NAME={0x9, 0x3, 'syz0\x00'}]}, @NFT_MSG_NEWRULE={0x48, 0x6, 0xa, 0x401, 0x0, 0x0, {0x5}, [@NFTA_RULE_CHAIN_ID={0x8}, @NFTA_RULE_EXPRESSIONS={0x2c, 0x4, 0x0, 0x1, [{0x28, 0x1, 0x0, 0x1, @fwd={{0x8}, @val={0x1c, 0x2, 0x0, 0x1, [@NFTA_FWD_SREG_ADDR={0x8, 0x2, 0x1, 0x0, 0xd}, @NFTA_FWD_SREG_DEV={0x8, 0x1, 0x1, 0x0, 0x16}, @NFTA_FWD_NFPROTO={0x8, 0x3, 0x1, 0x0, 0xa}]}}}]}]}], {0x14}}, 0xbc}}, 0x0) (async) syz_init_net_socket$nl_rdma(0x10, 0x3, 0x10) (async) syz_genetlink_get_family_id$nl80211(&(0x7f0000000080), 0xffffffffffffffff) (async) sendmsg$NFQNL_MSG_CONFIG(0xffffffffffffffff, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000180)={0x1c, 0x2, 0x3, 0x3, 0x0, 0x0, {0x0, 0x0, 0x10}, [@NFQA_CFG_CMD={0x8, 0x1, {0x1}}]}, 0x1c}}, 0x0) (async) sendmsg$NL80211_CMD_GET_MPATH(r4, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000180)=ANY=[@ANYBLOB=',\x00\x00\x00', @ANYRES16=r5, @ANYBLOB="01000020b69c97553002677b00000c"], 0x2c}}, 0x0) (async) sendmsg$802154_dgram(r3, &(0x7f0000000140)={&(0x7f0000000040)={0x24, @none={0x3}}, 0x14, &(0x7f0000000100)={0x0, 0x1b}, 0x7}, 0x0) (async) 843.435003ms ago: executing program 0 (id=11635): r0 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f00000000c0)={'macsec0\x00', 0x0}) r2 = bpf$MAP_CREATE(0x0, &(0x7f0000000380)=ANY=[@ANYBLOB="07000000040000008000000001"], 0x50) r3 = bpf$PROG_LOAD(0x5, &(0x7f0000000680)={0x11, 0x10, &(0x7f0000000c40)=ANY=[@ANYBLOB="1800000000000000000000000000000018120000", @ANYRES32=r2, @ANYBLOB="0000000000000000b703000000020000850000001b000000b700000000000000180100002120732500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000000600000095"], &(0x7f0000000300)='GPL\x00', 0x0, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, @fallback=0x2d, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$PROG_BIND_MAP(0xa, &(0x7f0000000500)={r3}, 0xc) bpf$MAP_LOOKUP_ELEM(0x1, &(0x7f00000004c0)={r2, &(0x7f00000002c0), &(0x7f0000000840)=""/165}, 0x20) sendmsg$nl_route(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000100)=@newlink={0x40, 0x10, 0x1, 0x0, 0x0, {0x0, 0x0, 0x0, r1, 0x1184, 0x4}, [@IFLA_LINKINFO={0x20, 0x12, 0x0, 0x1, @macsec={{0xb}, {0x10, 0x2, 0x0, 0x1, [@IFLA_MACSEC_SCI={0xc, 0x1, 0x2}]}}}]}, 0x40}, 0x1, 0x0, 0x0, 0x80}, 0x0) 689.488121ms ago: executing program 0 (id=11636): r0 = bpf$ITER_CREATE(0xb, &(0x7f0000000100), 0x0) close(r0) openat$nci(0xffffffffffffff9c, &(0x7f0000000080), 0x2, 0x0) mmap(&(0x7f0000001000/0xc00000)=nil, 0xc00000, 0xa, 0x3832, 0xffffffffffffffff, 0xe08b4000) mmap(&(0x7f0000000000/0x95c000)=nil, 0x95c000, 0x200000b, 0x8c4b815a5465c2b2, 0xffffffffffffffff, 0x0) syz_open_procfs$namespace(0x0, &(0x7f0000000000)) ioctl$IOCTL_GET_NCIDEV_IDX(0xffffffffffffffff, 0x0, 0x0) openat$tun(0xffffffffffffff9c, 0x0, 0x1c1842, 0x0) write$nci(r0, 0x0, 0xffffffa3) r1 = socket$inet(0xa, 0x801, 0x84) connect$inet(r1, &(0x7f0000000340)={0x2, 0x4e23, @remote={0xac, 0x14, 0xffffffffffffffff}}, 0x10) listen(r1, 0x8) ioctl$TUNSETTXFILTER(0xffffffffffffffff, 0x400454ca, &(0x7f0000000100)=ANY=[@ANYBLOB='..']) r2 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='memory.events\x00', 0x275a, 0x0) write$cgroup_subtree(r2, &(0x7f0000000100)=ANY=[], 0x32600) r3 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r3, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000080)=@ipv4_newrule={0x2c, 0x1e, 0x1, 0x0, 0x0, {0x2, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x7}, [@FRA_DST={0x8, 0x1, @empty}, @FRA_GENERIC_POLICY=@FRA_SUPPRESS_IFGROUP={0x8}]}, 0x2c}, 0x1, 0x0, 0x0, 0x2}, 0x0) mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x2000001, 0x12, r2, 0x0) r4 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000), 0x200002, 0x0) unshare(0x2c020400) openat$cgroup_ro(r4, &(0x7f0000000000)='blkio.throttle.io_service_bytes_recursive\x00', 0x0, 0x0) r5 = accept4(r1, 0x0, 0x0, 0x0) sendmmsg$unix(r5, &(0x7f0000001840)=[{{0x0, 0x0, &(0x7f00000000c0)}}], 0x1, 0x4040045) setsockopt$inet_sctp6_SCTP_STREAM_SCHEDULER(r5, 0x84, 0x7b, &(0x7f0000000400)={0x0, 0x3}, 0x1d) close(r5) 688.651778ms ago: executing program 3 (id=11637): sendmsg$nl_route(0xffffffffffffffff, &(0x7f00000007c0)={0x0, 0x0, &(0x7f0000000780)={&(0x7f00000006c0)=@ipv4_newroute={0x34, 0x18, 0x1, 0x20, 0x0, {0x2, 0x0, 0x94, 0x0, 0x0, 0x0, 0x0, 0x9}, [@RTA_ENCAP_TYPE={0x6, 0x15, 0x6}, @RTA_ENCAP={0x10, 0x16, 0x0, 0x1, @LWT_BPF_IN={0xc, 0x1, 0x0, 0x1, @LWT_BPF_PROG_NAME={0x8, 0x2, 'GPL\x00'}}}]}, 0x34}, 0x1, 0x0, 0x0, 0x4001}, 0x0) r0 = socket$netlink(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000340)={'bridge_slave_0\x00', 0x0}) sendmsg$nl_route(r0, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000280)={&(0x7f00000006c0)=ANY=[@ANYBLOB="340000001100050026bd7000ffdbdf25070fef93", @ANYRES32=r1, @ANYBLOB="cfe819000000000014001a80100005"], 0x34}, 0x1, 0x0, 0x0, 0x2800c895}, 0x20040854) r2 = bpf$PROG_LOAD(0x5, &(0x7f00000006c0)={0x6, 0xe, &(0x7f00000008c0)=ANY=[@ANYBLOB="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"/686], &(0x7f0000000040)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @xdp, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0x3a, 0x10, &(0x7f0000000340), 0xd58495bc, 0x0, 0xffffffffffffffff, 0xffffffffffffff5b}, 0x42) r3 = bpf$MAP_CREATE(0x0, &(0x7f00000006c0)=ANY=[@ANYBLOB="0a00000004000000dd0000000a"], 0x50) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0x14, &(0x7f0000000400)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r3, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b7040000000000008500000001"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r4 = bpf$BPF_BTF_GET_FD_BY_ID(0x13, &(0x7f00000002c0)=0xffffffffffffffff, 0x4) syz_emit_ethernet(0x5e, &(0x7f0000002e40)={@local, @dev={'\xaa\xaa\xaa\xaa\xaa', 0x39}, @void, {@ipv6={0x86dd, @icmpv6={0x0, 0x6, "7428dd", 0x28, 0x3a, 0xff, @remote, @mcast2, {[], @ndisc_na={0x89, 0x0, 0x0, 0x0, '\x00', @remote, [{0x0, 0x2, "122b472e41e24b11f34b608816e5"}]}}}}}}, 0x0) r5 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='memory.events\x00', 0x275a, 0x0) write$cgroup_subtree(r5, &(0x7f0000000140)=ANY=[], 0x32600) mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x2000001, 0x12, r5, 0x0) r6 = bpf$MAP_CREATE_TAIL_CALL(0x0, &(0x7f00000003c0)={0x3, 0x4, 0x4, 0xa, 0x0, 0x1, 0x7, '\x00', r1, 0xffffffffffffffff, 0x4, 0x2}, 0x50) bpf$BPF_MAP_CONST_STR_FREEZE(0x16, &(0x7f0000000440)={0x1, 0xffffffffffffffff}, 0x4) r8 = bpf$MAP_CREATE(0x0, &(0x7f0000000480)=@base={0x21, 0x3ff, 0x1, 0x3ff, 0x20020, 0x1, 0x6, '\x00', 0x0, 0xffffffffffffffff, 0x3, 0x1, 0x1}, 0x50) bpf$MAP_UPDATE_CONST_STR(0x2, &(0x7f0000000580)={{0x1, 0xffffffffffffffff}, &(0x7f0000000500), &(0x7f0000000540)='%pB \x00'}, 0x20) r10 = socket$nl_route(0x10, 0x3, 0x0) r11 = socket$inet6_udp(0xa, 0x2, 0x0) ioctl$sock_SIOCGIFINDEX(r11, 0x8933, &(0x7f0000000c80)={'lo\x00', 0x0}) sendmsg$nl_route_sched(r10, &(0x7f0000001200)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000000)=@newqdisc={0x3c, 0x24, 0x4ee4e6a52ff56541, 0x4, 0x0, {0x0, 0x0, 0x0, r12, {}, {0xffff, 0xffff}}, [@qdisc_kind_options=@q_red={{0x8}, {0x10, 0x2, [@TCA_RED_FLAGS={0xc, 0x4, {0x3, 0x8}}]}}]}, 0x3c}}, 0x0) bpf$BPF_MAP_CONST_STR_FREEZE(0x16, &(0x7f00000005c0)={0xffffffffffffffff, 0xffffffffffffffff}, 0x4) bpf$BPF_MAP_CONST_STR_FREEZE(0x16, &(0x7f0000000600)={0x1, 0xffffffffffffffff}, 0x4) bpf$BPF_PROG_WITH_BTFID_LOAD(0x5, &(0x7f0000000800)=@bpf_tracing={0x1a, 0x10, &(0x7f0000000080)=@raw=[@kfunc={0x85, 0x0, 0x2, 0x0, 0x2}, @func={0x85, 0x0, 0x1, 0x0, 0xfffffffffffffffe}, @kfunc={0x85, 0x0, 0x2, 0x0, 0x5}, @ringbuf_output={{0x18, 0x1, 0x1, 0x0, r3}, {0x7, 0x0, 0xb, 0x8, 0x0, 0x0, 0x7}}, @generic={0xf, 0x0, 0x7, 0x1, 0xc}, @map_idx={0x18, 0x0, 0x5, 0x0, 0xa}, @kfunc={0x85, 0x0, 0x2, 0x0, 0x1}], &(0x7f0000000100)='GPL\x00', 0x5, 0x92, &(0x7f00000001c0)=""/146, 0x40f00, 0x44, '\x00', r1, 0x1a, r4, 0x8, &(0x7f0000000300)={0x5, 0x5}, 0x8, 0x10, &(0x7f0000000380)={0x4, 0x6, 0x81, 0x4}, 0x10, 0x16b11, r5, 0x0, &(0x7f0000000640)=[r6, r7, r8, r9, r13, r14], 0x0, 0x10, 0x3}, 0x94) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000c80)={r2, 0x2000012, 0x100e, 0x2, &(0x7f0000000c40)="63eced8e46dc3f2ddf33c9e9b986", 0x0, 0x7ffe, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x50) 687.105192ms ago: executing program 7 (id=11638): r0 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_tcp_int(r0, 0x6, 0x13, &(0x7f0000000040)=0x100000001, 0x76dc) connect$inet6(r0, &(0x7f0000000100)={0xa, 0x0, 0x8001, @empty, 0x800001}, 0x1c) setsockopt$inet6_tcp_TCP_ULP(r0, 0x6, 0x1f, &(0x7f00000002c0), 0x4) setsockopt$inet6_tcp_TCP_REPAIR_QUEUE(r0, 0x6, 0x14, &(0x7f0000000400)=0x1, 0x4) setsockopt$inet6_tcp_TLS_TX(r0, 0x11a, 0x2, &(0x7f0000000000)=@gcm_128={{0x304}, "2d9421fe8a4c9563", "cf6ff9ff337ed301000100c747fbbfc1", "db0127ff", "16dea6d67a8426bd"}, 0x28) setsockopt$sock_int(r0, 0x1, 0xa, &(0x7f0000000140)=0x10001, 0x4) setsockopt$inet6_tcp_TLS_TX(r0, 0x11a, 0x1, &(0x7f0000000340)=@gcm_128={{0x304}, "b7a41f2305009201", "d21b0e8a0e000000000000000600", '\x00', "ec9300"}, 0x28) recvfrom(r0, &(0x7f0000002800)=""/4071, 0xfffffffffffffdab, 0x17, 0x0, 0x0) syz_genetlink_get_family_id$ethtool(&(0x7f0000000200), r0) recvmmsg(r0, &(0x7f00000019c0)=[{{0x0, 0x0, 0x0}, 0x7fffffff}, {{0x0, 0x0, &(0x7f0000001b40)=[{&(0x7f0000000180)=""/15, 0xf}], 0x1}, 0x9}], 0x2, 0x10100, 0x0) setsockopt$sock_int(r0, 0x1, 0x12, &(0x7f00000000c0)=0x8, 0x4) 283.613621ms ago: executing program 9 (id=11639): r0 = socket$alg(0x26, 0x5, 0x0) bind$alg(r0, &(0x7f0000000300)={0x26, 'skcipher\x00', 0x0, 0x0, 'ecb-serpent-avx\x00'}, 0x58) setsockopt$ALG_SET_KEY(r0, 0x117, 0x1, 0x0, 0x0) r1 = accept4(r0, 0x0, 0x0, 0x0) syz_genetlink_get_family_id$ethtool(&(0x7f00000004c0), r1) sendmsg$alg(r1, &(0x7f0000000080)={0x0, 0x0, 0x0, 0x0, &(0x7f0000000100)=[@op={0x18, 0x117, 0x3, 0x1}], 0x18, 0x840}, 0x4040880) mmap(&(0x7f0000001000/0xc00000)=nil, 0xc00000, 0x0, 0x3032, 0xffffffffffffffff, 0x0) r2 = bpf$MAP_CREATE(0x100000000000000, &(0x7f0000000140)=ANY=[@ANYBLOB="0a00000016000000b30000007f"], 0x48) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000440)={0x11, 0x13, &(0x7f0000000080)=ANY=[@ANYBLOB="18080000000000000000000000000080851000000600000018100000", @ANYRES32=r2, @ANYBLOB="00000000000000006600000000000000180000000000000000000000000000009500000000000000360a000000000006180100002020782500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b50a00000000000085000000060000009500000000000000"], &(0x7f0000000000)='GPL\x00', 0x2, 0xff5c, &(0x7f0000000340)=""/222}, 0x78) ioctl$TUNSETTXFILTER(0xffffffffffffffff, 0x400454ca, &(0x7f0000000100)=ANY=[@ANYBLOB='..']) r3 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='memory.events\x00', 0x275a, 0x0) write$cgroup_subtree(r3, &(0x7f0000000100)=ANY=[], 0x32600) mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x2000001, 0x12, r3, 0x0) r4 = syz_init_net_socket$802154_dgram(0x24, 0x2, 0x0) sendmsg$802154_dgram(r4, &(0x7f0000000540)={&(0x7f0000000440)={0x24, @short={0x2, 0xffff}}, 0x14, &(0x7f0000000840)={0x0}, 0x1, 0x0, 0x0, 0x20000c14}, 0x0) r5 = syz_open_procfs$namespace(0x0, &(0x7f0000000000)='ns/ipc\x00') openat$cgroup(r5, &(0x7f0000000340)='syz1\x00', 0x200002, 0x0) sendmsg$nl_route_sched(r1, &(0x7f0000000540)={0x0, 0x0, &(0x7f0000000500)={&(0x7f0000002740)=@newchain={0x12a0, 0x64, 0xf09d2fbf8b68c555, 0x70bd27, 0x25dfdbfe, {0x0, 0x0, 0x0, 0x0, {0xffff, 0x8}, {0xfff1, 0xe}, {0x9, 0xfff1}}, [@filter_kind_options=@f_route={{0xa}, {0x40c, 0x2, [@TCA_ROUTE4_POLICE={0x408, 0x5, [@TCA_POLICE_RATE={0x404, 0x2, [0x5, 0x6, 0xffffffc0, 0x0, 0x5, 0x48d5, 0x6, 0x8, 0x8, 0x6, 0xd, 0x8, 0x933, 0x6, 0x1, 0x7, 0x1, 0x872, 0xbf, 0x0, 0x145, 0xfffffffa, 0x2, 0x8, 0x6000000, 0x9, 0xd, 0xc64, 0x3, 0x1c000, 0x2, 0x3, 0x9, 0x8, 0x5, 0x0, 0x4008ec, 0x6, 0x6, 0x2, 0x2, 0x4, 0x8, 0x2, 0xbda, 0x7fff, 0x8db, 0xcb56, 0x0, 0x4, 0xb1a, 0x1, 0x8, 0xfd77, 0x1, 0x4, 0xd8fd, 0x80000001, 0x5, 0x8, 0x2, 0x7ff, 0x3, 0x32a, 0x1, 0x8, 0xc, 0x1, 0x5, 0x0, 0x2, 0x2, 0x5, 0x0, 0x1, 0x4, 0xc0, 0xd, 0x2c, 0xe, 0x2, 0x2, 0xe109, 0x80000001, 0x5e, 0xfffffffb, 0x297, 0x3, 0x81, 0x6ee, 0xce8, 0x7fffffff, 0x7, 0xd, 0x42e, 0x9, 0x8, 0x3, 0x8, 0xfffffffc, 0x5, 0x6, 0x4, 0x5, 0x6, 0xd7d8, 0x35, 0x1, 0x8, 0x6, 0x81, 0xb4, 0x80000001, 0x1, 0x3ff, 0xffff33f7, 0x4, 0x6, 0x10000000, 0x5, 0x9, 0x5, 0x7, 0x7, 0x0, 0x52e, 0x4, 0x8, 0x0, 0x0, 0x1, 0x4, 0x4, 0x1, 0x9, 0x1, 0x5, 0x6, 0x8000, 0x10000, 0x4, 0xffff2237, 0x3, 0x400010, 0xe, 0x5, 0x2, 0x8, 0x7, 0x67e, 0x7, 0x200, 0x6, 0x4, 0x5, 0x9, 0x5, 0x39, 0xe71, 0x6, 0x3, 0x9, 0x2, 0x7, 0xf34, 0xb, 0x0, 0x400, 0x7ef4, 0xa, 0x265, 0x80000001, 0x8, 0x48, 0x7, 0x5, 0x46d, 0x8f, 0x8, 0x7, 0x7, 0x8, 0x8, 0x1, 0x6, 0xdb25, 0xb41c, 0x0, 0x5, 0x4, 0x1, 0x9, 0xe, 0x9, 0x1, 0xd5, 0x4, 0x3, 0x9, 0x2, 0x5, 0x4, 0xf1a, 0x7, 0x2, 0x95, 0x5, 0x993, 0x9, 0xe, 0x7, 0x91, 0x4, 0x400, 0x1, 0x1, 0x3, 0x4, 0x1, 0x2, 0x8001, 0x819, 0xb, 0x8, 0x800, 0x7f, 0x9, 0x82, 0x1, 0x0, 0xffffffff, 0x1, 0x2, 0x1, 0x0, 0x0, 0x9, 0x6, 0x2, 0x2, 0x2, 0x1b328f44, 0x4, 0x6, 0x9, 0x1, 0x0, 0x8, 0x1, 0x3, 0xfffffde0, 0x7, 0x4, 0x6, 0x80000001, 0x7]}]}]}}, @filter_kind_options=@f_cgroup={{0xb}, {0xe58, 0x2, [@TCA_CGROUP_ACT={0xe54, 0x1, [@m_pedit={0xe50, 0x1b, 0x0, 0x0, {{0xa}, {0xe24, 0x2, 0x0, 0x1, [@TCA_PEDIT_PARMS={0xe20, 0x2, {{{0x4, 0x7, 0x6, 0x4, 0x8000000}, 0x9}, [{0x40, 0x9, 0x5, 0x1, 0x0, 0x2}, {0xffffff5c, 0x7, 0x0, 0x8, 0x9, 0x8}, {0x100, 0x100, 0x80, 0xbbd3, 0x0, 0x6}, {0x3, 0x7, 0x252, 0x5, 0x1ff}, {0x9, 0x7, 0xfff, 0x2, 0xd, 0xfffffffe}, {0x9, 0x9, 0x9, 0x9, 0x1, 0x3}, {0xd2, 0x0, 0x5, 0x10000, 0x7, 0x6}, {0xfffffff6, 0x2, 0x100, 0x3, 0x8, 0x1}, {0xffffff98, 0x40, 0x8, 0x5, 0x40, 0x4}, {0x9, 0xe, 0x7f, 0x2, 0x7b, 0x4}, {0xeb9d, 0x31d, 0x2, 0x31, 0x85a5, 0x9}, {0x0, 0x5, 0x31547498, 0x6, 0x2, 0x9}, {0x400, 0xfffff4ad, 0x9, 0x52, 0x419d, 0x3}, {0x5, 0xac8, 0x9, 0x116, 0x80000000, 0x2}, {0x4, 0x2, 0x4, 0x400, 0x101, 0x68571a57}, {0xffffffbb, 0x4, 0x401, 0x642d495a, 0x5, 0x4}, {0x0, 0x6, 0x5, 0x40, 0x7, 0x6}, {0x1, 0xfff, 0x2, 0x6, 0x2, 0xffffffff}, {0x0, 0x3, 0x10000, 0x6d}, {0xf, 0xd, 0x6, 0x7, 0x40, 0x381}, {0x80000001, 0x800, 0x6, 0x40d, 0x8, 0x2}, {0x944, 0x7, 0xfffffffc, 0x401, 0x6, 0x3}, {0x1, 0x0, 0x918, 0xfffffffd, 0x80, 0x200}, {0x9, 0x40, 0xb40, 0x800, 0x4, 0xf}, {0x784, 0x0, 0x42, 0x14d, 0x8c}, {0x8001, 0x6, 0xfffffff3, 0xfffffe00, 0x4, 0x1}, {0x1000, 0x4, 0xffff, 0xffffffff, 0x5, 0x4}, {0x1, 0x9, 0x5d5b, 0x40, 0x4, 0xb765}, {0x7, 0x3, 0x4, 0x4, 0x100, 0x1}, {0x1, 0x5dc, 0x800, 0x1b0, 0xfffffff8, 0x3d2d}, {0x2, 0x8, 0x5, 0x2, 0xb, 0xa8}, {0xc0, 0x22f63e74, 0x9, 0x4, 0xf, 0x6e}, {0x2c89, 0x2, 0x101, 0x5, 0x30, 0x7}, {0x0, 0x0, 0x80, 0x2, 0x61e9, 0x2}, {0x8, 0xffff, 0x8, 0x5, 0x7, 0x4}, {0x7, 0x9, 0x71, 0x3, 0x2, 0x7}, {0x800, 0x8, 0x6, 0x3, 0x1, 0x4}, {0xcf9, 0x4, 0xaad, 0xb0, 0x1, 0xedfb}, {0x7, 0x8, 0x5, 0x7f, 0x6, 0x4}, {0xe, 0x3, 0xf, 0x6061faa0, 0x8, 0x3fe0000}, {0x80000000, 0xdbf3, 0x80000001, 0x1000, 0x2, 0x9}, {0x2, 0x2, 0x7, 0x7, 0xfffffffa, 0x8}, {0x4, 0x7fff, 0x8, 0x101, 0x3, 0x6}, {0x0, 0x7f800000, 0x75, 0x2, 0x3e9, 0x3}, {0x9, 0x1, 0x7, 0x6, 0x5, 0x190b}, {0xe, 0x1000, 0x2, 0x6, 0x3, 0xd5}, {0x8, 0x75, 0x7ff, 0xfff, 0x6, 0x10001}, {0xfffffff7, 0x4, 0xfffffff9, 0x4997, 0x7fffffff, 0x200}, {0x4, 0x101, 0x7f, 0x401, 0x9, 0x7f}, {0x1, 0xf, 0xe, 0x2, 0x8, 0xe410}, {0x7, 0xe, 0x101, 0x400, 0x8907, 0xa04}, {0x2, 0x1, 0xc, 0xc, 0x3, 0x9}, {0x5, 0x0, 0x4, 0x1, 0x80000001, 0x3}, {0xa98f, 0x4, 0x9, 0x800, 0xd3, 0x3}, {0x9, 0x0, 0x6, 0x9, 0xd9, 0x7af7}, {0x5, 0x6, 0x2d8, 0x2, 0xefc, 0x80000001}, {0x10c, 0x3, 0x2978, 0x8, 0x8, 0x4}, {0x8, 0x8, 0x3, 0x3, 0xffff7fff, 0x1}, {0x0, 0x80, 0x5, 0x0, 0x4, 0x8}, {0xffffff7c, 0xfff, 0x6, 0xe, 0x7fff, 0xb11}, {0x7d7, 0x5, 0x7, 0x6, 0xb, 0xfffffffb}, {0x9, 0x800000, 0xfffffffd, 0x6, 0x5, 0x6}, {0x9, 0x0, 0x7, 0x7fff, 0x40, 0x5eb}, {0x10001, 0x1ff, 0x0, 0x4, 0x6, 0xafe5}, {0x7ff, 0xffffffff, 0x7fffffff, 0x3, 0xfffffffc, 0x4}, {0xfff, 0x100, 0x81, 0x8001, 0xa066, 0x1ff}, {0x3ff, 0x236, 0x5, 0x7fffffff, 0x4, 0x7ff}, {0x3, 0xc57d, 0x33400000, 0x1, 0x2, 0xfffffffa}, {0x8, 0xffff, 0x10, 0x101, 0x844, 0x28}, {0x0, 0x8, 0x1, 0x6, 0x7, 0x5}, {0x200000, 0x1, 0x6, 0xbc, 0xa4e, 0x7}, {0x1, 0x10, 0xa, 0x6, 0x3, 0x3}, {0x5, 0x3, 0x7ff, 0x5, 0x82bf, 0x1}, {0xe75, 0xfffffff8, 0x5, 0x0, 0x8, 0x9}, {0x0, 0x2, 0x5, 0xf522, 0x1a23, 0x29}, {0x6, 0xd9b4, 0x1, 0x3, 0x5, 0x10001}, {0x80, 0xc1b0, 0x80000001, 0x2, 0xffffffff, 0x80000000}, {0x10001, 0x5, 0x5fc, 0x1176a235, 0x6, 0x2fd9}, {0xbd, 0xff, 0x101, 0x0, 0x6, 0x37f}, {0x4, 0x3fb, 0x60d31cf6, 0x7, 0x7ff, 0x38000000}, {0x6, 0x7, 0x1, 0x7, 0x4}, {0x8, 0x5f2d, 0x4000000, 0x6, 0xd, 0x1}, {0xf6, 0x1, 0x5, 0x200, 0x4, 0x4}, {0x0, 0x3fffc0, 0x6, 0xc, 0x5fcd, 0xef3}, {0x0, 0x9, 0x0, 0x54, 0x12, 0x94}, {0x0, 0x0, 0x5, 0x80000000, 0x9, 0xf545}, {0x0, 0x80000000, 0x1000, 0x0, 0x6}, {0x7f, 0x0, 0x9, 0x0, 0x5}, {0x200, 0x3, 0x5, 0x4, 0x0, 0xd}, {0x685, 0x787, 0xd, 0x4, 0x4, 0x3}, {0xd33b, 0x0, 0x7, 0x1, 0x4, 0xc0}, {0x1, 0x8000, 0xfffffff1, 0x7ff, 0xbab, 0xb9}, {0xb, 0x4, 0x7e2d03df, 0x9, 0x0, 0x5}, {0x0, 0x1, 0x5, 0x176, 0x6, 0x7}, {0x4, 0x2879f55c, 0x7, 0x3, 0x3, 0x739}, {0x800, 0x79a, 0x3, 0xffff7fff, 0x8, 0x5}, {0x5, 0x6, 0x1, 0x80000001, 0xfff}, {0xb000, 0x0, 0x1ff, 0x4, 0x3, 0x9}, {0x4, 0x1aca, 0x2, 0xb1, 0x5, 0x5}, {0x1bb, 0x40, 0x8, 0x9, 0x80000001, 0x800}, {0x5, 0x81, 0x3a5, 0xe6, 0x2, 0xbd9}, {0x27d, 0x87, 0x6, 0x3, 0x1, 0x42}, {0x7f, 0x4, 0xffff, 0x8000, 0x0, 0x1}, {0x0, 0xc, 0x8, 0x4, 0x7, 0x466}, {0x7, 0x176, 0x40, 0x2, 0x76, 0x9}, {0x9, 0xb204099, 0x800, 0x8000, 0x9, 0x6}, {0xb, 0x40, 0x101, 0x1, 0x4, 0x3}, {0xa, 0x1, 0x7, 0x0, 0xfffffdaa, 0x1}, {0x5, 0x5, 0x6, 0xffffffff, 0xd5b, 0x3}, {0x0, 0x80, 0x7ff, 0xd, 0x5, 0x2}, {0xfffffff0, 0x2, 0x7, 0x3, 0x2, 0x7fffffff}, {0x2003, 0x93b, 0x3, 0x8, 0xfffffffb, 0x6}, {0x58c2, 0x4, 0x26, 0xffffffff, 0x9, 0x7}, {0x2, 0xa, 0x436, 0x8, 0x7, 0x6}, {0x800, 0xff07, 0xffffffb4, 0x5, 0x963, 0x2}, {0x2, 0x6, 0x8, 0xc, 0x80000001, 0x4}, {0x3, 0x2, 0xfffffffb, 0x80000001, 0x6, 0x140}, {0x2, 0x5, 0x10001, 0x8, 0x2, 0x2}, {0x6, 0x5239, 0x6, 0x974f, 0x4, 0x2}, {0xff, 0x9, 0x10, 0x800, 0x2, 0x8000}, {0x7, 0x8, 0x0, 0x7fff, 0x7f5f, 0x4}, {0x1000, 0x6, 0xfffffffc, 0x5, 0x3, 0x81}, {0x0, 0xe196, 0x4, 0x800, 0x1, 0x94}, {0x80000001, 0x217021e6, 0x2702ff34, 0x9b40, 0x3}, {0x57cf8ce0, 0x2, 0x76, 0x80000000, 0xe, 0x7}, {0x4, 0xfffffff6, 0x2, 0x1000, 0x1ff, 0x2}, {0x8, 0x9, 0x6, 0x4316, 0x6, 0x7}, {0x6, 0x7, 0x7, 0x2, 0x1, 0x8}], [{0x5, 0x1}, {0x5}, {0x4, 0x1}, {0x1}, {0x0, 0x1}, {0x1, 0x1}, {0x1, 0x1}, {0x5, 0x1}, {0x5, 0x1}, {0x4}, {0x0, 0x1}, {0x1, 0x1}, {0x5, 0x1}, {0x1}, {0x1}, {0x2}, {0x3}, {0xf9923793e02d7db6}, {}, {0x2, 0x1}, {0x5, 0x1}, {0x4, 0x1}, {0x2, 0x1}, {0x5}, {0x2, 0x1}, {0x1}, {0x3}, {0x0, 0x1}, {0x2, 0x1}, {0x4, 0x1}, {0x1, 0x1}, {0x0, 0x1}, {0x4}, {0x5}, {0x4, 0x1}, {0x4, 0x1}, {0x3}, {0x0, 0x1}, {}, {}, {0x1, 0x1}, {0x4, 0x1}, {}, {0x2, 0x1}, {0x3, 0x1}, {0x7, 0x1}, {0x2}, {0x2, 0x1}, {0x4}, {0x2, 0x1}, {0x5}, {0x3, 0x1}, {0x1, 0x1}, {0x2}, {}, {0x1}, {0x0, 0x1}, {0x2, 0x1}, {0x2, 0x1}, {0x2, 0x1}, {0x0, 0x1}, {0x4}, {}, {0x1}, {0x4, 0x1}, {0x5}, {0x2}, {0x2, 0x1}, {0x1, 0x3}, {0x3}, {0x5, 0x1}, {0x1}, {0x2, 0x1}, {0x3}, {0x1, 0x1}, {0x5}, {0x4, 0x1}, {0x1, 0x1}, {0x4, 0x1}, {0x5, 0x1}, {0x4}, {0x5}, {0x2, 0x1}, {0x0, 0x1}, {0x5}, {0x5, 0x1}, {0x4, 0x1}, {0x2, 0x1}, {0x2}, {0x4, 0x1}, {0x1}, {0x3}, {0x3}, {0x1, 0x1}, {0x3}, {}, {0x5, 0xe1835468be4c3e98}, {0x0, 0x1}, {0x1, 0x1}, {0x4, 0x1}, {0x2, 0x1}, {0x1, 0x1}, {0x1}, {0x1}, {0x0, 0x1}, {0x4, 0x1}, {0x5}, {}, {0x1, 0x1}, {0x3, 0x1}, {0x0, 0x1}, {0x0, 0x1}, {0x5}, {0x7, 0x1}, {0x3}, {0x2, 0x1}, {0x5}, {0x3, 0x1}, {0x5}, {0x3, 0x1}, {0x0, 0x1}, {0x4, 0x1}, {0x3}, {0x5, 0x1}, {0x3}, {0x9a9242c1bef3e2b4}, {0x2, 0x1}, {0x2}], 0x1}}]}, {0x4}, {0xc, 0x7, {0x1}}, {0xc, 0x8, {0x3, 0x3}}}}]}]}}]}, 0x12a0}, 0x1, 0x0, 0x0, 0x4004880}, 0x44000) socket$alg(0x26, 0x5, 0x0) (async) bind$alg(r0, &(0x7f0000000300)={0x26, 'skcipher\x00', 0x0, 0x0, 'ecb-serpent-avx\x00'}, 0x58) (async) setsockopt$ALG_SET_KEY(r0, 0x117, 0x1, 0x0, 0x0) (async) accept4(r0, 0x0, 0x0, 0x0) (async) syz_genetlink_get_family_id$ethtool(&(0x7f00000004c0), r1) (async) sendmsg$alg(r1, &(0x7f0000000080)={0x0, 0x0, 0x0, 0x0, &(0x7f0000000100)=[@op={0x18, 0x117, 0x3, 0x1}], 0x18, 0x840}, 0x4040880) (async) mmap(&(0x7f0000001000/0xc00000)=nil, 0xc00000, 0x0, 0x3032, 0xffffffffffffffff, 0x0) (async) bpf$MAP_CREATE(0x100000000000000, &(0x7f0000000140)=ANY=[@ANYBLOB="0a00000016000000b30000007f"], 0x48) (async) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000440)={0x11, 0x13, &(0x7f0000000080)=ANY=[@ANYBLOB="18080000000000000000000000000080851000000600000018100000", @ANYRES32=r2, @ANYBLOB="00000000000000006600000000000000180000000000000000000000000000009500000000000000360a000000000006180100002020782500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b50a00000000000085000000060000009500000000000000"], &(0x7f0000000000)='GPL\x00', 0x2, 0xff5c, &(0x7f0000000340)=""/222}, 0x78) (async) ioctl$TUNSETTXFILTER(0xffffffffffffffff, 0x400454ca, &(0x7f0000000100)=ANY=[@ANYBLOB='..']) (async) openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='memory.events\x00', 0x275a, 0x0) (async) write$cgroup_subtree(r3, &(0x7f0000000100)=ANY=[], 0x32600) (async) mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x2000001, 0x12, r3, 0x0) (async) syz_init_net_socket$802154_dgram(0x24, 0x2, 0x0) (async) sendmsg$802154_dgram(r4, &(0x7f0000000540)={&(0x7f0000000440)={0x24, @short={0x2, 0xffff}}, 0x14, &(0x7f0000000840)={0x0}, 0x1, 0x0, 0x0, 0x20000c14}, 0x0) (async) syz_open_procfs$namespace(0x0, &(0x7f0000000000)='ns/ipc\x00') (async) openat$cgroup(r5, &(0x7f0000000340)='syz1\x00', 0x200002, 0x0) (async) sendmsg$nl_route_sched(r1, &(0x7f0000000540)={0x0, 0x0, &(0x7f0000000500)={&(0x7f0000002740)=@newchain={0x12a0, 0x64, 0xf09d2fbf8b68c555, 0x70bd27, 0x25dfdbfe, {0x0, 0x0, 0x0, 0x0, {0xffff, 0x8}, {0xfff1, 0xe}, {0x9, 0xfff1}}, [@filter_kind_options=@f_route={{0xa}, {0x40c, 0x2, [@TCA_ROUTE4_POLICE={0x408, 0x5, [@TCA_POLICE_RATE={0x404, 0x2, [0x5, 0x6, 0xffffffc0, 0x0, 0x5, 0x48d5, 0x6, 0x8, 0x8, 0x6, 0xd, 0x8, 0x933, 0x6, 0x1, 0x7, 0x1, 0x872, 0xbf, 0x0, 0x145, 0xfffffffa, 0x2, 0x8, 0x6000000, 0x9, 0xd, 0xc64, 0x3, 0x1c000, 0x2, 0x3, 0x9, 0x8, 0x5, 0x0, 0x4008ec, 0x6, 0x6, 0x2, 0x2, 0x4, 0x8, 0x2, 0xbda, 0x7fff, 0x8db, 0xcb56, 0x0, 0x4, 0xb1a, 0x1, 0x8, 0xfd77, 0x1, 0x4, 0xd8fd, 0x80000001, 0x5, 0x8, 0x2, 0x7ff, 0x3, 0x32a, 0x1, 0x8, 0xc, 0x1, 0x5, 0x0, 0x2, 0x2, 0x5, 0x0, 0x1, 0x4, 0xc0, 0xd, 0x2c, 0xe, 0x2, 0x2, 0xe109, 0x80000001, 0x5e, 0xfffffffb, 0x297, 0x3, 0x81, 0x6ee, 0xce8, 0x7fffffff, 0x7, 0xd, 0x42e, 0x9, 0x8, 0x3, 0x8, 0xfffffffc, 0x5, 0x6, 0x4, 0x5, 0x6, 0xd7d8, 0x35, 0x1, 0x8, 0x6, 0x81, 0xb4, 0x80000001, 0x1, 0x3ff, 0xffff33f7, 0x4, 0x6, 0x10000000, 0x5, 0x9, 0x5, 0x7, 0x7, 0x0, 0x52e, 0x4, 0x8, 0x0, 0x0, 0x1, 0x4, 0x4, 0x1, 0x9, 0x1, 0x5, 0x6, 0x8000, 0x10000, 0x4, 0xffff2237, 0x3, 0x400010, 0xe, 0x5, 0x2, 0x8, 0x7, 0x67e, 0x7, 0x200, 0x6, 0x4, 0x5, 0x9, 0x5, 0x39, 0xe71, 0x6, 0x3, 0x9, 0x2, 0x7, 0xf34, 0xb, 0x0, 0x400, 0x7ef4, 0xa, 0x265, 0x80000001, 0x8, 0x48, 0x7, 0x5, 0x46d, 0x8f, 0x8, 0x7, 0x7, 0x8, 0x8, 0x1, 0x6, 0xdb25, 0xb41c, 0x0, 0x5, 0x4, 0x1, 0x9, 0xe, 0x9, 0x1, 0xd5, 0x4, 0x3, 0x9, 0x2, 0x5, 0x4, 0xf1a, 0x7, 0x2, 0x95, 0x5, 0x993, 0x9, 0xe, 0x7, 0x91, 0x4, 0x400, 0x1, 0x1, 0x3, 0x4, 0x1, 0x2, 0x8001, 0x819, 0xb, 0x8, 0x800, 0x7f, 0x9, 0x82, 0x1, 0x0, 0xffffffff, 0x1, 0x2, 0x1, 0x0, 0x0, 0x9, 0x6, 0x2, 0x2, 0x2, 0x1b328f44, 0x4, 0x6, 0x9, 0x1, 0x0, 0x8, 0x1, 0x3, 0xfffffde0, 0x7, 0x4, 0x6, 0x80000001, 0x7]}]}]}}, @filter_kind_options=@f_cgroup={{0xb}, {0xe58, 0x2, [@TCA_CGROUP_ACT={0xe54, 0x1, [@m_pedit={0xe50, 0x1b, 0x0, 0x0, {{0xa}, {0xe24, 0x2, 0x0, 0x1, [@TCA_PEDIT_PARMS={0xe20, 0x2, {{{0x4, 0x7, 0x6, 0x4, 0x8000000}, 0x9}, [{0x40, 0x9, 0x5, 0x1, 0x0, 0x2}, {0xffffff5c, 0x7, 0x0, 0x8, 0x9, 0x8}, {0x100, 0x100, 0x80, 0xbbd3, 0x0, 0x6}, {0x3, 0x7, 0x252, 0x5, 0x1ff}, {0x9, 0x7, 0xfff, 0x2, 0xd, 0xfffffffe}, {0x9, 0x9, 0x9, 0x9, 0x1, 0x3}, {0xd2, 0x0, 0x5, 0x10000, 0x7, 0x6}, {0xfffffff6, 0x2, 0x100, 0x3, 0x8, 0x1}, {0xffffff98, 0x40, 0x8, 0x5, 0x40, 0x4}, {0x9, 0xe, 0x7f, 0x2, 0x7b, 0x4}, {0xeb9d, 0x31d, 0x2, 0x31, 0x85a5, 0x9}, {0x0, 0x5, 0x31547498, 0x6, 0x2, 0x9}, {0x400, 0xfffff4ad, 0x9, 0x52, 0x419d, 0x3}, {0x5, 0xac8, 0x9, 0x116, 0x80000000, 0x2}, {0x4, 0x2, 0x4, 0x400, 0x101, 0x68571a57}, {0xffffffbb, 0x4, 0x401, 0x642d495a, 0x5, 0x4}, {0x0, 0x6, 0x5, 0x40, 0x7, 0x6}, {0x1, 0xfff, 0x2, 0x6, 0x2, 0xffffffff}, {0x0, 0x3, 0x10000, 0x6d}, {0xf, 0xd, 0x6, 0x7, 0x40, 0x381}, {0x80000001, 0x800, 0x6, 0x40d, 0x8, 0x2}, {0x944, 0x7, 0xfffffffc, 0x401, 0x6, 0x3}, {0x1, 0x0, 0x918, 0xfffffffd, 0x80, 0x200}, {0x9, 0x40, 0xb40, 0x800, 0x4, 0xf}, {0x784, 0x0, 0x42, 0x14d, 0x8c}, {0x8001, 0x6, 0xfffffff3, 0xfffffe00, 0x4, 0x1}, {0x1000, 0x4, 0xffff, 0xffffffff, 0x5, 0x4}, {0x1, 0x9, 0x5d5b, 0x40, 0x4, 0xb765}, {0x7, 0x3, 0x4, 0x4, 0x100, 0x1}, {0x1, 0x5dc, 0x800, 0x1b0, 0xfffffff8, 0x3d2d}, {0x2, 0x8, 0x5, 0x2, 0xb, 0xa8}, {0xc0, 0x22f63e74, 0x9, 0x4, 0xf, 0x6e}, {0x2c89, 0x2, 0x101, 0x5, 0x30, 0x7}, {0x0, 0x0, 0x80, 0x2, 0x61e9, 0x2}, {0x8, 0xffff, 0x8, 0x5, 0x7, 0x4}, {0x7, 0x9, 0x71, 0x3, 0x2, 0x7}, {0x800, 0x8, 0x6, 0x3, 0x1, 0x4}, {0xcf9, 0x4, 0xaad, 0xb0, 0x1, 0xedfb}, {0x7, 0x8, 0x5, 0x7f, 0x6, 0x4}, {0xe, 0x3, 0xf, 0x6061faa0, 0x8, 0x3fe0000}, {0x80000000, 0xdbf3, 0x80000001, 0x1000, 0x2, 0x9}, {0x2, 0x2, 0x7, 0x7, 0xfffffffa, 0x8}, {0x4, 0x7fff, 0x8, 0x101, 0x3, 0x6}, {0x0, 0x7f800000, 0x75, 0x2, 0x3e9, 0x3}, {0x9, 0x1, 0x7, 0x6, 0x5, 0x190b}, {0xe, 0x1000, 0x2, 0x6, 0x3, 0xd5}, {0x8, 0x75, 0x7ff, 0xfff, 0x6, 0x10001}, {0xfffffff7, 0x4, 0xfffffff9, 0x4997, 0x7fffffff, 0x200}, {0x4, 0x101, 0x7f, 0x401, 0x9, 0x7f}, {0x1, 0xf, 0xe, 0x2, 0x8, 0xe410}, {0x7, 0xe, 0x101, 0x400, 0x8907, 0xa04}, {0x2, 0x1, 0xc, 0xc, 0x3, 0x9}, {0x5, 0x0, 0x4, 0x1, 0x80000001, 0x3}, {0xa98f, 0x4, 0x9, 0x800, 0xd3, 0x3}, {0x9, 0x0, 0x6, 0x9, 0xd9, 0x7af7}, {0x5, 0x6, 0x2d8, 0x2, 0xefc, 0x80000001}, {0x10c, 0x3, 0x2978, 0x8, 0x8, 0x4}, {0x8, 0x8, 0x3, 0x3, 0xffff7fff, 0x1}, {0x0, 0x80, 0x5, 0x0, 0x4, 0x8}, {0xffffff7c, 0xfff, 0x6, 0xe, 0x7fff, 0xb11}, {0x7d7, 0x5, 0x7, 0x6, 0xb, 0xfffffffb}, {0x9, 0x800000, 0xfffffffd, 0x6, 0x5, 0x6}, {0x9, 0x0, 0x7, 0x7fff, 0x40, 0x5eb}, {0x10001, 0x1ff, 0x0, 0x4, 0x6, 0xafe5}, {0x7ff, 0xffffffff, 0x7fffffff, 0x3, 0xfffffffc, 0x4}, {0xfff, 0x100, 0x81, 0x8001, 0xa066, 0x1ff}, {0x3ff, 0x236, 0x5, 0x7fffffff, 0x4, 0x7ff}, {0x3, 0xc57d, 0x33400000, 0x1, 0x2, 0xfffffffa}, {0x8, 0xffff, 0x10, 0x101, 0x844, 0x28}, {0x0, 0x8, 0x1, 0x6, 0x7, 0x5}, {0x200000, 0x1, 0x6, 0xbc, 0xa4e, 0x7}, {0x1, 0x10, 0xa, 0x6, 0x3, 0x3}, {0x5, 0x3, 0x7ff, 0x5, 0x82bf, 0x1}, {0xe75, 0xfffffff8, 0x5, 0x0, 0x8, 0x9}, {0x0, 0x2, 0x5, 0xf522, 0x1a23, 0x29}, {0x6, 0xd9b4, 0x1, 0x3, 0x5, 0x10001}, {0x80, 0xc1b0, 0x80000001, 0x2, 0xffffffff, 0x80000000}, {0x10001, 0x5, 0x5fc, 0x1176a235, 0x6, 0x2fd9}, {0xbd, 0xff, 0x101, 0x0, 0x6, 0x37f}, {0x4, 0x3fb, 0x60d31cf6, 0x7, 0x7ff, 0x38000000}, {0x6, 0x7, 0x1, 0x7, 0x4}, {0x8, 0x5f2d, 0x4000000, 0x6, 0xd, 0x1}, {0xf6, 0x1, 0x5, 0x200, 0x4, 0x4}, {0x0, 0x3fffc0, 0x6, 0xc, 0x5fcd, 0xef3}, {0x0, 0x9, 0x0, 0x54, 0x12, 0x94}, {0x0, 0x0, 0x5, 0x80000000, 0x9, 0xf545}, {0x0, 0x80000000, 0x1000, 0x0, 0x6}, {0x7f, 0x0, 0x9, 0x0, 0x5}, {0x200, 0x3, 0x5, 0x4, 0x0, 0xd}, {0x685, 0x787, 0xd, 0x4, 0x4, 0x3}, {0xd33b, 0x0, 0x7, 0x1, 0x4, 0xc0}, {0x1, 0x8000, 0xfffffff1, 0x7ff, 0xbab, 0xb9}, {0xb, 0x4, 0x7e2d03df, 0x9, 0x0, 0x5}, {0x0, 0x1, 0x5, 0x176, 0x6, 0x7}, {0x4, 0x2879f55c, 0x7, 0x3, 0x3, 0x739}, {0x800, 0x79a, 0x3, 0xffff7fff, 0x8, 0x5}, {0x5, 0x6, 0x1, 0x80000001, 0xfff}, {0xb000, 0x0, 0x1ff, 0x4, 0x3, 0x9}, {0x4, 0x1aca, 0x2, 0xb1, 0x5, 0x5}, {0x1bb, 0x40, 0x8, 0x9, 0x80000001, 0x800}, {0x5, 0x81, 0x3a5, 0xe6, 0x2, 0xbd9}, {0x27d, 0x87, 0x6, 0x3, 0x1, 0x42}, {0x7f, 0x4, 0xffff, 0x8000, 0x0, 0x1}, {0x0, 0xc, 0x8, 0x4, 0x7, 0x466}, {0x7, 0x176, 0x40, 0x2, 0x76, 0x9}, {0x9, 0xb204099, 0x800, 0x8000, 0x9, 0x6}, {0xb, 0x40, 0x101, 0x1, 0x4, 0x3}, {0xa, 0x1, 0x7, 0x0, 0xfffffdaa, 0x1}, {0x5, 0x5, 0x6, 0xffffffff, 0xd5b, 0x3}, {0x0, 0x80, 0x7ff, 0xd, 0x5, 0x2}, {0xfffffff0, 0x2, 0x7, 0x3, 0x2, 0x7fffffff}, {0x2003, 0x93b, 0x3, 0x8, 0xfffffffb, 0x6}, {0x58c2, 0x4, 0x26, 0xffffffff, 0x9, 0x7}, {0x2, 0xa, 0x436, 0x8, 0x7, 0x6}, {0x800, 0xff07, 0xffffffb4, 0x5, 0x963, 0x2}, {0x2, 0x6, 0x8, 0xc, 0x80000001, 0x4}, {0x3, 0x2, 0xfffffffb, 0x80000001, 0x6, 0x140}, {0x2, 0x5, 0x10001, 0x8, 0x2, 0x2}, {0x6, 0x5239, 0x6, 0x974f, 0x4, 0x2}, {0xff, 0x9, 0x10, 0x800, 0x2, 0x8000}, {0x7, 0x8, 0x0, 0x7fff, 0x7f5f, 0x4}, {0x1000, 0x6, 0xfffffffc, 0x5, 0x3, 0x81}, {0x0, 0xe196, 0x4, 0x800, 0x1, 0x94}, {0x80000001, 0x217021e6, 0x2702ff34, 0x9b40, 0x3}, {0x57cf8ce0, 0x2, 0x76, 0x80000000, 0xe, 0x7}, {0x4, 0xfffffff6, 0x2, 0x1000, 0x1ff, 0x2}, {0x8, 0x9, 0x6, 0x4316, 0x6, 0x7}, {0x6, 0x7, 0x7, 0x2, 0x1, 0x8}], [{0x5, 0x1}, {0x5}, {0x4, 0x1}, {0x1}, {0x0, 0x1}, {0x1, 0x1}, {0x1, 0x1}, {0x5, 0x1}, {0x5, 0x1}, {0x4}, {0x0, 0x1}, {0x1, 0x1}, {0x5, 0x1}, {0x1}, {0x1}, {0x2}, {0x3}, {0xf9923793e02d7db6}, {}, {0x2, 0x1}, {0x5, 0x1}, {0x4, 0x1}, {0x2, 0x1}, {0x5}, {0x2, 0x1}, {0x1}, {0x3}, {0x0, 0x1}, {0x2, 0x1}, {0x4, 0x1}, {0x1, 0x1}, {0x0, 0x1}, {0x4}, {0x5}, {0x4, 0x1}, {0x4, 0x1}, {0x3}, {0x0, 0x1}, {}, {}, {0x1, 0x1}, {0x4, 0x1}, {}, {0x2, 0x1}, {0x3, 0x1}, {0x7, 0x1}, {0x2}, {0x2, 0x1}, {0x4}, {0x2, 0x1}, {0x5}, {0x3, 0x1}, {0x1, 0x1}, {0x2}, {}, {0x1}, {0x0, 0x1}, {0x2, 0x1}, {0x2, 0x1}, {0x2, 0x1}, {0x0, 0x1}, {0x4}, {}, {0x1}, {0x4, 0x1}, {0x5}, {0x2}, {0x2, 0x1}, {0x1, 0x3}, {0x3}, {0x5, 0x1}, {0x1}, {0x2, 0x1}, {0x3}, {0x1, 0x1}, {0x5}, {0x4, 0x1}, {0x1, 0x1}, {0x4, 0x1}, {0x5, 0x1}, {0x4}, {0x5}, {0x2, 0x1}, {0x0, 0x1}, {0x5}, {0x5, 0x1}, {0x4, 0x1}, {0x2, 0x1}, {0x2}, {0x4, 0x1}, {0x1}, {0x3}, {0x3}, {0x1, 0x1}, {0x3}, {}, {0x5, 0xe1835468be4c3e98}, {0x0, 0x1}, {0x1, 0x1}, {0x4, 0x1}, {0x2, 0x1}, {0x1, 0x1}, {0x1}, {0x1}, {0x0, 0x1}, {0x4, 0x1}, {0x5}, {}, {0x1, 0x1}, {0x3, 0x1}, {0x0, 0x1}, {0x0, 0x1}, {0x5}, {0x7, 0x1}, {0x3}, {0x2, 0x1}, {0x5}, {0x3, 0x1}, {0x5}, {0x3, 0x1}, {0x0, 0x1}, {0x4, 0x1}, {0x3}, {0x5, 0x1}, {0x3}, {0x9a9242c1bef3e2b4}, {0x2, 0x1}, {0x2}], 0x1}}]}, {0x4}, {0xc, 0x7, {0x1}}, {0xc, 0x8, {0x3, 0x3}}}}]}]}}]}, 0x12a0}, 0x1, 0x0, 0x0, 0x4004880}, 0x44000) (async) 173.152657ms ago: executing program 3 (id=11640): r0 = bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f0000000080)={0x1b, 0x0, 0x0, 0x8, 0x0, 0x1, 0x5, '\x00', 0x0, 0xffffffffffffffff, 0x3, 0x5, 0x2}, 0x50) ioctl$sock_ipv6_tunnel_SIOCDELTUNNEL(0xffffffffffffffff, 0x89f2, &(0x7f0000000b80)={'syztnl0\x00', &(0x7f0000000000)={'syztnl1\x00', 0x0, 0x4, 0xb6, 0x9, 0xa42289e, 0x10, @mcast1, @private1={0xfc, 0x1, '\x00', 0x1}, 0x7, 0x80, 0x8, 0x2}}) bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000bc0)={0x2, 0x4, 0x8, 0x1, 0x80, r0, 0x9, '\x00', r1, 0xffffffffffffffff, 0x1, 0x4, 0x5}, 0x50) r2 = bpf$MAP_CREATE(0x0, &(0x7f0000000200)=ANY=[@ANYBLOB="2200000004"], 0x48) r3 = syz_init_net_socket$802154_dgram(0x24, 0x2, 0x0) setsockopt$WPAN_SECURITY_LEVEL(r3, 0x0, 0x2, &(0x7f0000000100)=0xfffffffe, 0x4) r4 = socket$inet_smc(0x2b, 0x1, 0x0) setsockopt$ARPT_SO_SET_REPLACE(r4, 0x0, 0x60, &(0x7f00000046c0)={'filter\x00', 0x7, 0x4, 0x3c8, 0x0, 0x0, 0x110, 0x110, 0x2e0, 0x2e0, 0x4, 0x0, {[{{@uncond, 0xc0, 0x110}, @mangle={0x50, 'mangle\x00', 0x0, {@mac=@dev={'\xaa\xaa\xaa\xaa\xaa', 0x2e}, @mac=@remote, @loopback, @local, 0x1, 0x1}}}, {{@arp={@multicast2, @private=0xa010100, 0xff, 0xffffff00, 0xc, 0x4, {@mac=@link_local={0x1, 0x80, 0xc2, 0x0, 0x0, 0x1}, {[0xff, 0xff, 0xff, 0xff, 0x0, 0xbe9240b8a223bba0]}}, {@mac=@dev={'\xaa\xaa\xaa\xaa\xaa', 0x24}, {[0xff, 0x0, 0xff, 0xff, 0xff]}}, 0x2, 0x6, 0x23b0, 0x9dd7, 0x80, 0x9, 'veth1_vlan\x00', 'ip_vti0\x00', {0xff}, {0xff}, 0x0, 0x12}, 0xc0, 0xe8}, @unspec=@AUDIT={0x28}}, {{@uncond, 0xc0, 0xe8}, @unspec=@NFQUEUE0={0x28}}], {{'\x00', 0xc0, 0xe8}, {0x28}}}}, 0x418) r5 = socket(0x2, 0xa, 0x0) setsockopt$SO_ATTACH_FILTER(r5, 0x1, 0x1a, &(0x7f00000001c0)={0x2, &(0x7f0000000140)=[{0x87}, {0x6}]}, 0x10) r6 = socket$pppl2tp(0x18, 0x1, 0x1) r7 = socket$inet6_udp(0xa, 0x2, 0x0) connect$pppl2tp(r6, &(0x7f0000000000)=@pppol2tpv3={0x18, 0x1, {0x3, r7, {0x2, 0x4e21, @initdev={0xac, 0x1e, 0x0, 0x0}}, 0x2}}, 0x2e) r8 = syz_genetlink_get_family_id$l2tp(&(0x7f0000000340), 0xffffffffffffffff) r9 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$L2TP_CMD_SESSION_DELETE(r9, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000380)=ANY=[@ANYBLOB='<\x00\x00\x00', @ANYRES16=r8, @ANYBLOB="010026bd7000fedbdf25050000000800090002000000060001000500000008000c00aa0a000008000b00040000000500050040"], 0x3c}, 0x1, 0x0, 0x0, 0x20006911}, 0x0) r10 = socket(0x10, 0x3, 0x0) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000240)={0xffffffffffffffff}) ioctl$sock_SIOCGIFINDEX(r11, 0x8933, &(0x7f00000000c0)={'gretap0\x00', 0x0}) sendmsg$nl_route_sched(r10, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000000)=@newqdisc={0x48, 0x24, 0xf0b, 0x0, 0x0, {0x60, 0x0, 0x0, r12, {0x0, 0x5}, {0xffff, 0xffff}}, [@qdisc_kind_options=@q_cake={{0x9}, {0x18, 0x2, [@TCA_CAKE_BASE_RATE64={0xc, 0x2, 0xffffffffffffffff}, @TCA_CAKE_DIFFSERV_MODE={0x8, 0x3, 0x3}]}}]}, 0x48}}, 0x0) bpf$BPF_MAP_CONST_STR_FREEZE(0x16, &(0x7f0000000640)={r2}, 0x4) ioctl$sock_ipv6_tunnel_SIOCGET6RD(0xffffffffffffffff, 0x89f8, &(0x7f00000004c0)={'gre0\x00', &(0x7f0000000440)={'sit0\x00', 0x0, 0x20, 0x40, 0xfffffff7, 0x2, {{0x16, 0x4, 0x2, 0x6, 0x58, 0x65, 0x0, 0xc0, 0x29, 0x0, @multicast2, @local, {[@cipso={0x86, 0x26, 0x0, [{0x5, 0x3, '}'}, {0x2, 0x3, '.'}, {0x7, 0x10, "c1db15622e098dda2602d5783741"}, {0x5, 0xa, "c4abb93c3f057f48"}]}, @lsrr={0x83, 0xb, 0x81, [@broadcast, @private=0xa010102]}, @rr={0x7, 0x13, 0x76, [@private=0xa010100, @initdev={0xac, 0x1e, 0x1, 0x0}, @initdev={0xac, 0x1e, 0x1, 0x0}, @local]}]}}}}}) r14 = bpf$BPF_BTF_GET_FD_BY_ID(0x13, &(0x7f0000000500), 0x4) r15 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_MSG_GETOBJ_RESET(r15, &(0x7f00000002c0)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000080)={0x34, 0x15, 0xa, 0x801, 0x0, 0x0, {0x1, 0x0, 0x5}, [@NFTA_OBJ_TABLE={0x9, 0x1, 'syz0\x00'}, @NFTA_OBJ_NAME={0x9, 0x2, 'syz1\x00'}, @NFTA_OBJ_TYPE={0x8, 0x3, 0x1, 0x0, 0x5}]}, 0x34}, 0x1, 0x0, 0x0, 0x1011}, 0x20008080) r16 = bpf$PROG_LOAD(0x5, &(0x7f0000000900)={0xf, 0x29, &(0x7f0000000580)=@ringbuf={{0x18, 0x0, 0x0, 0x0, 0x4, 0x0, 0x0, 0x0, 0xb0}, {}, {}, [@map_val={0x18, 0x4, 0x2, 0x0, 0x1, 0x0, 0x0, 0x0, 0xdfc}, @tail_call={{0x18, 0x2, 0x1, 0x0, 0x1}}, @snprintf={{}, {}, {0x7, 0x0, 0xb, 0x8, 0x0, 0x0, 0x780}}, @ringbuf_query={{0x18, 0x1, 0x1, 0x0, r2}}, @cb_func={0x18, 0x1, 0x4, 0x0, 0xfffffffffffffffc}], {{}, {}, {0x85, 0x0, 0x0, 0x84}}}, &(0x7f0000000700)='syzkaller\x00', 0x6, 0xed, &(0x7f0000000740)=""/237, 0x41100, 0x2, '\x00', 0x0, @cgroup_device=0x6, 0xffffffffffffffff, 0x8, &(0x7f0000000840)={0x6, 0x1}, 0x8, 0x10, &(0x7f0000000880)={0x0, 0x5, 0x637e, 0x6}, 0x10, 0xffffffffffffffff, 0xffffffffffffffff, 0x0, &(0x7f00000008c0)=[0x1], 0x0, 0x10, 0x3}, 0x94) r17 = bpf$MAP_CREATE(0x0, &(0x7f0000000180)=@base={0x12, 0x1, 0x4, 0x8}, 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x1, 0xd, &(0x7f0000000300)=ANY=[@ANYBLOB="18000000000000000000000000000000850000002a00000018110000", @ANYRES32=r17, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000300000095"], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) r18 = bpf$BPF_PROG_WITH_BTFID_LOAD(0x5, &(0x7f0000000ac0)=@bpf_tracing={0x1a, 0x10, &(0x7f0000000c40)=ANY=[@ANYBLOB="18000000000001000000000004000000af07f8ff0100000018290000", @ANYRES32=r0, @ANYRES64=r6, @ANYRES32=r2, @ANYBLOB="0000000000000000b7080000080000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000001000000850000008200000095000000000000009500000000000000"], &(0x7f0000000340)='syzkaller\x00', 0x9, 0xa6, &(0x7f0000000380)=""/166, 0x40f00, 0xc, '\x00', r13, 0x17, r14, 0x8, &(0x7f0000000540)={0x0, 0x205}, 0x8, 0x10, 0x0, 0x0, 0x441b, r16, 0x9, &(0x7f00000009c0)=[r17], &(0x7f0000000a00)=[{0x3, 0x4, 0xf, 0x2}, {0x0, 0x1, 0x9, 0xc}, {0x1, 0x3, 0x2, 0x3}, {0x1, 0x5, 0xe, 0x1}, {0x1, 0x5, 0x3, 0x6}, {0x1, 0x4, 0xd, 0x7}, {0x3, 0x2, 0xe, 0x5}, {0x5, 0x5, 0x7}, {0x2, 0x4, 0x3, 0x1}], 0x10, 0x8}, 0x94) bpf$BPF_PROG_TEST_RUN(0x1c, &(0x7f0000000240)={r18, 0xf, 0x25, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x40) 83.965531ms ago: executing program 0 (id=11641): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) r1 = bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000080)={0x10, 0x4, &(0x7f0000001300)=@framed={{}, [@ldst={0x1, 0x0, 0x3, 0x0, 0x7, 0x20}]}, &(0x7f0000000040)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x21, '\x00', 0x0, 0x8}, 0x94) r2 = socket$nl_xfrm(0x10, 0x3, 0x6) ioctl$XFS_IOC_ATTRMULTI_BY_HANDLE(r1, 0x4048587b, &(0x7f0000000b40)={{r2, &(0x7f0000000140)='syz1\x00', 0x28000, &(0x7f0000000200)={@_ha_fsid={[0x9, 0x7]}, {0xa, 0x101, 0x9, 0xd}}, 0x2, &(0x7f0000000240), &(0x7f0000000280)=0x6}, 0x4, &(0x7f0000000ac0)=[{0x2, 0x7fff, &(0x7f00000002c0)='counter\x00', &(0x7f0000000400)="85d716a25af6c8bdb732b763f212087ae3edef77258ce88b9839b0c61d31534f641c1df66b588af21c4859269cbeb3b5ae5e09c0828d30406c290fe85bf5b4a0bc3c24848eea7eca99dc2ba4d45b99486034102a5b115fc17592f447fe93ed305fd46254711dc6673dd9855f1348452ac160c55a97187c523ca89d39b2d819d31ccbf1c4b3e1c9d2eeabc21c5a0166f34eb2c63654", 0x95, 0x20}, {0x1, 0x6, &(0x7f0000000580)='syz0\x00', &(0x7f0000000680)="69ca1f0d8b555ad4a4af52bff3c9765e64610752523ee4b630fbc016dd73c2bac8d63a8d", 0x24}, {0x2, 0x200, &(0x7f00000006c0)='\x00', &(0x7f0000000700)="db91685f4dbd582642f0776e12862b2c8ed7b4d5ea00b74403a5897801b8f8253820d9ef310dc1bbc80e59da459cfd5edae3f6940a53d19f1838b9ac629a5b42d9363ac85e85be2180a8d49305476cf8adebbc34631ba9c6772cd9731c799248a3b2688f6b1de4b0bc0e0c1d35315d056685335c2be363c27a1832b6f22d6a494326e75911cb3ece4354e1672039daceec8541b4312d53e2a37d", 0x9a}, {0x2, 0x1, &(0x7f00000007c0)='syz2\x00', &(0x7f0000000900)="27889fb54d3affa309078d7c9c643ba1c72f3761f8d6de7a9b2fb7d2f423daaa6a4034c11630adbc52ed3993632ee809224643d34a542f81f703a5cba86e1d7d2cebe8192a8528ab786ed9dddf5077f28ca51c47ec18a85a6d7b41851e5ccf20fb8f3b5345f084ab05319c3da5d2459fd2dbcb6e9ee94faf98f8d701dcdb54be5d84", 0x82, 0x10}]}) sendmsg$nl_xfrm(r2, &(0x7f0000000180)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f00000004c0)=@updpolicy={0xb8, 0x19, 0x1, 0x0, 0x0, {{@in=@multicast2, @in, 0x0, 0x0, 0x0, 0x0, 0xa, 0xe0, 0xa0, 0x87}, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x400, 0xfffffffffffffffb}, {0x0, 0x0, 0x200000000000000}, 0x800, 0x10000000, 0x1}}, 0xb8}}, 0x2c000010) r3 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r3, &(0x7f0000000180)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f00000005c0)=@updpolicy={0xb8, 0x19, 0x1, 0x0, 0x0, {{@in=@multicast2, @in=@empty, 0x0, 0x0, 0x0, 0x0, 0xa, 0x0, 0x0, 0x29}, {0x0, 0x0, 0x7, 0x0, 0x0, 0x2, 0xffffffffffffffff}, {0x0, 0x0, 0x0, 0xffffffffffffffff}}}, 0xb8}}, 0x4004) r4 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r4, &(0x7f0000000180)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000340)=@updpolicy={0xb8, 0x19, 0x1, 0x0, 0x100000, {{@in=@multicast2, @in=@empty, 0x0, 0x0, 0x0, 0x0, 0xa, 0x0, 0x0, 0x29}, {0x0, 0x0, 0x9, 0x0, 0x0, 0x41f6, 0xffffffffffffffff}, {0x0, 0x0, 0x0, 0xffffffffffffffff}, 0x7}}, 0xb8}}, 0x10) syz_emit_ethernet(0x4e, &(0x7f0000000880)={@multicast, @multicast, @void, {@ipv6={0x86dd, @icmpv6={0x0, 0x6, "010448", 0x18, 0x3a, 0xff, @rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x01', @local, {[], @ndisc_na={0x88, 0x0, 0x0, 0xff, '\x00', @empty}}}}}}, 0x0) sendmsg$NFT_BATCH(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000009c0)={{0x14}, [@NFT_MSG_NEWTABLE={0x20, 0x0, 0xa, 0x101, 0x0, 0x0, {0x1}, [@NFTA_TABLE_NAME={0x9, 0x1, 'syz1\x00'}]}, @NFT_MSG_NEWSET={0x3c, 0x9, 0xa, 0x401, 0x0, 0x0, {0x1}, [@NFTA_SET_ID={0x8}, @NFTA_SET_NAME={0x9, 0x2, 'syz2\x00'}, @NFTA_SET_TABLE={0x9, 0x1, 'syz0\x00'}, @NFTA_SET_KEY_LEN={0x8, 0x5, 0x1, 0x0, 0xc}]}, @NFT_MSG_NEWSETELEM={0x4c, 0xc, 0xa, 0x301, 0x0, 0x0, {0x1}, [@NFTA_SET_ELEM_LIST_SET_ID={0x8}, @NFTA_SET_ELEM_LIST_TABLE={0x9, 0x1, 'syz0\x00'}, @NFTA_SET_ELEM_LIST_ELEMENTS={0x24, 0x3, 0x0, 0x1, [{0x20, 0x0, 0x0, 0x1, [@NFTA_SET_ELEM_KEY={0x4}, @NFTA_SET_ELEM_EXPRESSIONS={0x18, 0xb, 0x0, 0x1, [{0x14, 0x1, 0x0, 0x1, @counter={{0xc}, @val={0x4}}}]}]}]}]}], {0x14, 0x10}}, 0xd0}}, 0x0) 583.014µs ago: executing program 0 (id=11642): r0 = socket$can_j1939(0x1d, 0x2, 0x7) r1 = bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f00000002c0)={0x2, 0x4, 0x8, 0x1, 0x80, 0x0, 0x0, '\x00', 0x0, 0x0}, 0x50) r2 = bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f0000000180)=ANY=[@ANYBLOB="1b0000000000000000000000000004", @ANYRES32=0x0], 0x48) bpf$PROG_LOAD(0x5, &(0x7f0000000840)={0x10, 0x1c, &(0x7f0000000040)=@ringbuf={{0x18, 0x8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8}, {{0x18, 0x1, 0x1, 0x0, r2}, {}, {}, {0x85, 0x0, 0x0, 0x5}, {0x4, 0x1, 0xb, 0x9, 0xa}}, {{0x5, 0x0, 0x3}}, [@snprintf={{0x7, 0x0, 0xb, 0x2}, {0x3, 0x0, 0x3, 0xa, 0x2}, {0x5, 0x0, 0xb, 0x9}, {0x3, 0x3, 0x6, 0xa, 0xa, 0xfff8, 0xf1}, {0x7, 0x1, 0xb, 0x6, 0x8, 0x20}, {0x7, 0x0, 0x0, 0x8}, {}, {0x7, 0x0, 0x0, 0x9}, {0x7, 0x0, 0xc}, {0x18, 0x2, 0x2, 0x0, r1}, {}, {0x46, 0x8, 0xfff1, 0x76}}], {{0x7, 0x1, 0xb, 0x8}, {0x6, 0x0, 0x5, 0x8}, {0x85, 0x0, 0x0, 0x7}}}, &(0x7f0000000980)='GPL\x00', 0x5, 0x0, 0x0, 0x0, 0x9, '\x00', 0x0, @sk_msg, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2}, 0x94) r3 = socket(0x2000000000000021, 0x2, 0x10000000000002) sendmmsg(r3, &(0x7f0000000180)=[{{0x0, 0x0, 0x0, 0x0, &(0x7f0000000340)=ANY=[@ANYBLOB="1800000000000000100100000c"], 0x28, 0xe000}, 0x5}], 0x1, 0x0) getsockopt$inet_mreqn(0xffffffffffffffff, 0x0, 0x24, &(0x7f0000000080)={@local, @empty, 0x0}, &(0x7f00000000c0)=0xc) bind$can_j1939(r3, &(0x7f0000000100)={0x1d, r4, 0x0, {0x0, 0x0, 0x1}, 0xff}, 0x18) ioctl$sock_ifreq(r0, 0x8990, &(0x7f0000000000)={'bond0\x00', @ifru_names='bond_slave_1\x00'}) r5 = bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f0000000200)={0x1b, 0x0, 0x0, 0x5, 0x0, 0xffffffffffffffff, 0x7fffffff, '\x00', r4, 0xffffffffffffffff, 0x4, 0x2, 0x3}, 0x50) bpf$MAP_CREATE(0x0, &(0x7f00000004c0)=ANY=[@ANYBLOB="210006000033f6fcd51d78c8df72940b0096000000300000000000000092005c31b3c305d8b72a7dc2bf249c5f1e5b243f34c9ff9885a1bd8c86ff10a18b825a6d8b6166ce5126d70e5d78ec3412bb428675a997a0224b731153eeda63cd35e5184906f3eb095de7e2b77e1dd4973bb107af8b5b34f3ec758c2aebfa440695864e0014", @ANYRES32=r3, @ANYBLOB="0100"/20, @ANYRES32=r4, @ANYRES32, @ANYBLOB="02000000000000000300"/28], 0x50) pipe(&(0x7f0000000400)={0xffffffffffffffff, 0xffffffffffffffff}) r7 = socket$pppoe(0x18, 0x1, 0x0) tee(r6, r7, 0x1ff, 0x0) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000480)={{0xffffffffffffffff, 0xffffffffffffffff}, &(0x7f0000000400), &(0x7f0000000440)}, 0x20) ioctl$XFS_IOC_FD_TO_HANDLE(0xffffffffffffffff, 0xc038586a, &(0x7f0000000700)={r5, &(0x7f0000000300)='\xa6\\*$\xfe-\x00', 0x101800, &(0x7f0000000640)={@align=0x7ff, {0xffff, 0x9, 0x0, 0x4}}, 0x0, &(0x7f0000000680), &(0x7f00000006c0)=0x5}) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000140)={0x3, 0x39, &(0x7f0000000740)=@ringbuf={{0x18, 0x0, 0x0, 0x0, 0x5, 0x0, 0x0, 0x0, 0x8}, {{0x18, 0x1, 0x1, 0x0, r5}}, {}, [@exit, @snprintf={{}, {}, {0x7, 0x0, 0xb, 0x8, 0x0, 0x0, 0x882}, {}, {}, {}, {}, {}, {}, {0x18, 0x3, 0x2, 0x0, r9}}, @initr0={0x18, 0x0, 0x0, 0x0, 0xf5, 0x0, 0x0, 0x0, 0x5}, @map_val={0x18, 0x6, 0x2, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x6}, @printk={@x, {}, {}, {}, {}, {0x7, 0x0, 0xb, 0x3, 0x0, 0x0, 0x7}}, @ldst={0x0, 0x2, 0x0, 0xb, 0x4, 0xfffffffffffffffc, 0xfffffffffffffff0}, @ldst={0x2, 0x1, 0x4, 0x0, 0x4, 0x4, 0x1}, @ringbuf_output={{0x18, 0x1, 0x1, 0x0, r6}, {0x7, 0x0, 0xb, 0x8, 0x0, 0x0, 0x211}, {}, {}, {}, {}, {0x7, 0x0, 0xb, 0x4, 0x0, 0x0, 0x2}}, @tail_call={{0x18, 0x2, 0x1, 0x0, r8}}], {{}, {}, {0x85, 0x0, 0x0, 0x84}}}, &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', r4, 0x24}, 0x94) 0s ago: executing program 7 (id=11643): r0 = socket$igmp(0x2, 0x3, 0x2) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f0000000bc0)={'wlan0\x00'}) recvfrom$inet(r0, &(0x7f0000000080)=""/11, 0xb, 0x101, &(0x7f00000001c0)={0x2, 0x4e23, @broadcast}, 0x10) (async) r1 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPCTNL_MSG_EXP_GET(r1, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000140)=ANY=[@ANYBLOB="580000000102010100000000000000000a0000004400018006000340000000002c00018014000300ff02000000000000000000000000000114000400000000000000000000000000000200010c000280050001"], 0x58}}, 0x0) (async) r2 = socket$nl_netfilter(0x10, 0x3, 0xc) r3 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_tcp_int(r3, 0x6, 0x13, &(0x7f0000000100)=0x100000001, 0x4) (async) connect$inet6(r3, &(0x7f0000000200)={0xa, 0x0, 0x9, @loopback}, 0x1c) (async) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000100)={0xffffffffffffffff, 0xffffffffffffffff}) (async) r6 = socket$nl_generic(0x10, 0x3, 0x10) (async) r7 = syz_genetlink_get_family_id$tipc2(&(0x7f0000000040), 0xffffffffffffffff) sendmsg$TIPC_NL_MON_SET(r6, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000140)={&(0x7f00000003c0)={0x60, r7, 0x1, 0x70bd2a, 0x80, {}, [@TIPC_NLA_MON={0x4c, 0x9, 0x0, 0x1, [@TIPC_NLA_MON_ACTIVATION_THRESHOLD={0x8, 0x1, 0xfffffff0}, @TIPC_NLA_MON_ACTIVATION_THRESHOLD={0x8, 0x1, 0x1}, @TIPC_NLA_MON_REF={0x8, 0x2, 0x4}, @TIPC_NLA_MON_ACTIVATION_THRESHOLD={0x8, 0x1, 0xb}, @TIPC_NLA_MON_ACTIVATION_THRESHOLD={0x8, 0x1, 0xfffffff8}, @TIPC_NLA_MON_ACTIVATION_THRESHOLD={0x8, 0x1, 0x2}, @TIPC_NLA_MON_ACTIVATION_THRESHOLD={0x8, 0x1, 0x9}, @TIPC_NLA_MON_ACTIVATION_THRESHOLD={0x8, 0x1, 0xc}, @TIPC_NLA_MON_REF={0x8, 0x2, 0x80000000}]}]}, 0x60}, 0x1, 0x0, 0x0, 0x240280d0}, 0x2000c890) getsockopt$sock_cred(r5, 0x1, 0x11, &(0x7f0000001fc0)={0x0}, &(0x7f0000002000)=0xc) r9 = syz_init_net_socket$x25(0x9, 0x5, 0x0) bind$x25(r9, &(0x7f0000000080), 0x12) (async) close(r9) (async) sendmmsg$unix(r4, &(0x7f0000001d40)=[{{0x0, 0x0, &(0x7f0000000e40)=[{&(0x7f0000000240)="af", 0x1}], 0x1}}, {{0x0, 0x0, 0x0, 0x0, &(0x7f00000014c0)=[@cred={{0x1c, 0x1, 0x2, {r8}}}, @rights={{0x14, 0x1, 0x1, [r4]}}], 0x38}}], 0x2, 0x801) (async) setsockopt$inet6_tcp_TCP_ULP(r3, 0x6, 0x1f, &(0x7f0000000140), 0x3) (async) socket$inet6_tcp(0xa, 0x1, 0x0) (async) r10 = syz_init_net_socket$bt_l2cap(0x1f, 0x1, 0x3) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000140)={0xe, 0x4, &(0x7f0000000000)=@framed={{}, [@ldst={0x1, 0x0, 0x3, 0x0, 0x1, 0x8c}]}, &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x24}, 0x80) (async) bind$bt_l2cap(r10, &(0x7f0000000040)={0x1f, 0x0, @fixed}, 0xe) (async) listen(r10, 0x0) close(0x4) (async) ioctl$XFS_IOC_FD_TO_HANDLE(r4, 0xc038586a, &(0x7f0000000380)={r3, &(0x7f0000000280)='tls', 0x100, &(0x7f00000002c0)={@align, {0x639, 0x3, 0x7, 0x347a}}, 0x3b, &(0x7f0000000300), &(0x7f0000000340)=0x5fd}) getsockopt$inet6_tcp_TCP_ZEROCOPY_RECEIVE(r11, 0x11a, 0x4, 0x0, 0x0) r12 = socket$inet_tcp(0x2, 0x1, 0x0) setsockopt$inet_tcp_TCP_MD5SIG(r12, 0x6, 0xe, &(0x7f0000000380)={@in6={{0xa, 0x4e24, 0x0, @ipv4={'\x00', '\xff\xff', @loopback}, 0x8000}}, 0x0, 0x0, 0x2f, 0x0, "ea1405f7ed3afb477e97815317dd90b0a9f242cdedf08f407b4090210f80a0719e68fabccef0ed7facb62bf4b908fe0781eb04f51226b4e01641b245e500000000000000000000004600"}, 0xd8) sendmsg$IPSET_CMD_LIST(r2, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000100)={&(0x7f00000000c0)={0x1c, 0x7, 0x6, 0x5, 0x0, 0x0, {0x1, 0x0, 0x2}, [@IPSET_ATTR_PROTOCOL={0x5}]}, 0x1c}, 0x1, 0x0, 0x0, 0x20004080}, 0x48810) kernel console output (not intermixed with test programs): _anon:0kB inactive_anon:0kB active_file:0kB inactive_file:0kB unevictable:0kB writepending:0kB zspages:0kB present:15992kB managed:15360kB mlocked:0kB bounce:0kB free_pcp:0kB local_pcp:0kB free_cma:0kB [ 1139.014562][ T4250] lowmem_reserve[]: 0 2489 2489 2489 2489 [ 1139.097729][ T4250] Node 0 DMA32 free:1050188kB boost:0kB min:34160kB low:42700kB high:51240kB reserved_highatomic:0KB free_highatomic:0KB active_anon:29492kB inactive_anon:0kB active_file:68kB inactive_file:174936kB unevictable:1536kB writepending:468kB zspages:0kB present:3129332kB managed:2548792kB mlocked:0kB bounce:0kB free_pcp:62540kB local_pcp:21876kB free_cma:0kB [ 1139.157970][ T4255] netlink: 4 bytes leftover after parsing attributes in process `syz.3.10279'. [ 1139.167338][ T4250] lowmem_reserve[]: 0 0 0 0 0 [ 1139.172149][ T4250] Node 0 Normal free:0kB boost:0kB min:0kB low:0kB high:0kB reserved_highatomic:0KB free_highatomic:0KB active_anon:0kB inactive_anon:0kB active_file:0kB inactive_file:0kB unevictable:0kB writepending:0kB zspages:0kB present:1048580kB managed:264kB mlocked:0kB bounce:0kB free_pcp:0kB local_pcp:0kB free_cma:0kB [ 1139.201398][ T4250] lowmem_reserve[]: 0 0 0 0 0 [ 1139.206175][ T4250] Node 1 Normal free:3939764kB boost:0kB min:55736kB low:69668kB high:83600kB reserved_highatomic:0KB free_highatomic:0KB active_anon:0kB inactive_anon:0kB active_file:0kB inactive_file:208kB unevictable:1536kB writepending:0kB zspages:0kB present:4194300kB managed:4111100kB mlocked:0kB bounce:0kB free_pcp:3272kB local_pcp:0kB free_cma:0kB [ 1139.238028][ T4250] lowmem_reserve[]: 0 0 0 0 0 [ 1139.242808][ T4250] Node 0 DMA: 0*4kB 0*8kB 0*16kB 0*32kB 0*64kB 0*128kB 0*256kB 0*512kB 1*1024kB (U) 1*2048kB (M) 3*4096kB (M) = 15360kB [ 1139.255574][ T4250] Node 0 DMA32: 3583*4kB (UME) 534*8kB (UME) 272*16kB (UME) 371*32kB (UME) 211*64kB (UME) 269*128kB (UM) 163*256kB (UM) 104*512kB (UM) 76*1024kB (UME) 8*2048kB (UME) 190*4096kB (UM) = 1050188kB [ 1139.365233][ T4250] Node 0 Normal: 0*4kB 0*8kB 0*16kB 0*32kB 0*64kB 0*128kB 0*256kB 0*512kB 0*1024kB 0*2048kB 0*4096kB = 0kB [ 1139.376859][ T4250] Node 1 Normal: 1*4kB (U) 2*8kB (UM) 2*16kB (UM) 2*32kB (UM) 1*64kB (M) 2*128kB (UM) 2*256kB (M) 3*512kB (UM) 1*1024kB (M) 2*2048kB (U) 960*4096kB (M) = 3939764kB [ 1139.464136][ T4250] Node 0 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=1048576kB [ 1139.515220][ T4250] Node 0 hugepages_total=2 hugepages_free=2 hugepages_surp=0 hugepages_size=2048kB [ 1139.524587][ T4250] Node 1 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=1048576kB [ 1139.534166][ T4250] Node 1 hugepages_total=2 hugepages_free=2 hugepages_surp=0 hugepages_size=2048kB [ 1139.543500][ T4250] 45109 total pagecache pages [ 1139.548223][ T4250] 0 pages in swap cache [ 1139.552406][ T4250] Free swap = 124996kB [ 1139.556576][ T4250] Total swap = 124996kB [ 1139.560783][ T4250] 2097051 pages RAM [ 1139.564623][ T4250] 0 pages HighMem/MovableOnly [ 1139.569311][ T4250] 428172 pages reserved [ 1139.573494][ T4250] 0 pages cma reserved [ 1141.177594][ C0] net_ratelimit: 2 callbacks suppressed [ 1141.177611][ C0] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1141.191733][ C0] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1141.200233][ C0] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1141.208734][ C0] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1141.217226][ C0] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1141.225660][ C0] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1143.608229][ T4225] netlink: 'syz.7.10269': attribute type 7 has an invalid length. [ 1143.625850][ T4225] netlink: 'syz.7.10269': attribute type 7 has an invalid length. [ 1143.716082][ T4261] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 1143.723640][ T4261] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 1143.739362][ T4261] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 1143.746810][ T4261] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 1144.306110][ T4288] netlink: 36 bytes leftover after parsing attributes in process `syz.5.10288'. [ 1145.103174][ C0] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1145.111803][ C0] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1145.120308][ C0] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1145.128917][ C0] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1145.763408][ T4339] netlink: 4 bytes leftover after parsing attributes in process `syz.9.10303'. [ 1145.910231][ T4343] netlink: 8 bytes leftover after parsing attributes in process `syz.5.10305'. [ 1146.028220][ T4349] netlink: 'syz.9.10308': attribute type 1 has an invalid length. [ 1146.206275][ T4349] bond1: (slave geneve2): making interface the new active one [ 1146.223710][ T4349] bond1: (slave geneve2): Enslaving as an active interface with an up link [ 1146.256420][ T14] netdevsim netdevsim9 netdevsim0: set [1, 1] type 2 family 0 port 20004 - 0 [ 1146.265299][ T14] netdevsim netdevsim9 netdevsim1: set [1, 1] type 2 family 0 port 20004 - 0 [ 1146.274120][ T14] netdevsim netdevsim9 netdevsim2: set [1, 1] type 2 family 0 port 20004 - 0 [ 1146.282923][ T14] netdevsim netdevsim9 netdevsim3: set [1, 1] type 2 family 0 port 20004 - 0 [ 1146.560081][ T4365] netlink: 'syz.0.10315': attribute type 4 has an invalid length. [ 1146.583567][ T4365] netlink: 'syz.0.10315': attribute type 4 has an invalid length. [ 1147.042458][ T4384] tipc: Started in network mode [ 1147.047418][ T4384] tipc: Node identity ac14142f, cluster identity 4711 [ 1147.054748][ T4384] tipc: Enabling of bearer rejected, failed to enable media [ 1147.225608][ T4402] netlink: 16 bytes leftover after parsing attributes in process `syz.3.10327'. [ 1147.584308][ T4416] netlink: 'syz.0.10331': attribute type 4 has an invalid length. [ 1147.612005][ T4416] netlink: 'syz.0.10331': attribute type 4 has an invalid length. [ 1147.729652][ T4418] syzkaller1: entered promiscuous mode [ 1147.735197][ T4418] syzkaller1: entered allmulticast mode [ 1147.798568][ T4418] syzkaller0: entered promiscuous mode [ 1147.806411][ T4418] syzkaller0: entered allmulticast mode [ 1148.049810][ T4427] netlink: 8 bytes leftover after parsing attributes in process `syz.3.10337'. [ 1148.224615][ T4427] bond1: option xmit_hash_policy: invalid value (64) [ 1148.276117][ T4435] netlink: 12 bytes leftover after parsing attributes in process `syz.9.10336'. [ 1148.303379][ T4436] net_ratelimit: 2 callbacks suppressed [ 1148.303400][ T4436] openvswitch: netlink: Multiple metadata blocks provided [ 1148.383508][ T4427] bond1 (unregistering): Released all slaves [ 1148.723636][ T4447] netlink: 20 bytes leftover after parsing attributes in process `syz.0.10340'. [ 1148.800723][ C0] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1148.809334][ C0] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1148.817876][ C0] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1148.826382][ C0] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1148.834906][ C0] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1148.843415][ C0] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1149.084781][ T4462] netlink: 4 bytes leftover after parsing attributes in process `syz.5.10345'. [ 1149.114449][ T4462] openvswitch: netlink: Flow key attribute not present in set flow. [ 1149.241336][ T4464] netlink: 8 bytes leftover after parsing attributes in process `syz.9.10346'. [ 1149.250385][ T4464] netlink: 12 bytes leftover after parsing attributes in process `syz.9.10346'. [ 1149.296834][ T4466] openvswitch: netlink: Actions may not be safe on all matching packets [ 1149.312039][T30607] netdevsim netdevsim9 netdevsim0: set [0, 0] type 1 family 0 port 8472 - 0 [ 1149.321023][T30607] netdevsim netdevsim9 netdevsim1: set [0, 0] type 1 family 0 port 8472 - 0 [ 1149.329828][T30607] netdevsim netdevsim9 netdevsim2: set [0, 0] type 1 family 0 port 8472 - 0 [ 1149.340944][ T4464] netlink: 8 bytes leftover after parsing attributes in process `syz.9.10346'. [ 1149.349941][ T4464] netlink: 12 bytes leftover after parsing attributes in process `syz.9.10346'. [ 1149.359122][T30607] netdevsim netdevsim9 netdevsim3: set [0, 0] type 1 family 0 port 8472 - 0 [ 1149.853030][ T4493] openvswitch: netlink: Multiple metadata blocks provided [ 1150.022280][ T4504] netlink: 32 bytes leftover after parsing attributes in process `syz.0.10356'. [ 1150.031422][ T4504] netlink: 4 bytes leftover after parsing attributes in process `syz.0.10356'. [ 1150.123174][ T4509] netlink: 576 bytes leftover after parsing attributes in process `syz.9.10357'. [ 1150.309556][ T4512] netlink: 8 bytes leftover after parsing attributes in process `syz.0.10359'. [ 1150.352395][ T4516] netlink: 12 bytes leftover after parsing attributes in process `syz.0.10360'. [ 1150.361473][ T4516] netlink: 'syz.0.10360': attribute type 1 has an invalid length. [ 1150.369311][ T4516] netlink: 'syz.0.10360': attribute type 1 has an invalid length. [ 1150.418340][ T4516] netlink: 'syz.0.10360': attribute type 2 has an invalid length. [ 1150.426224][ T4516] netlink: 68 bytes leftover after parsing attributes in process `syz.0.10360'. [ 1150.436581][ T4517] netlink: 4 bytes leftover after parsing attributes in process `syz.3.10358'. [ 1150.580842][ T4521] netlink: 56 bytes leftover after parsing attributes in process `syz.0.10362'. [ 1151.180665][ T4538] bond3: (slave ip6gretap1): making interface the new active one [ 1151.189684][ T4538] bond3: (slave ip6gretap1): Enslaving as an active interface with an up link [ 1152.872206][ T4493] nci: __nci_request: wait_for_completion_interruptible_timeout failed -512 [ 1153.743023][ T4564] bridge0: port 3(syz_tun) entered blocking state [ 1153.749726][ T4564] bridge0: port 3(syz_tun) entered forwarding state [ 1153.756708][ T4564] bridge0: port 2(bridge_slave_1) entered blocking state [ 1153.763869][ T4564] bridge0: port 2(bridge_slave_1) entered forwarding state [ 1153.771363][ T4564] bridge0: port 1(bridge_slave_0) entered blocking state [ 1153.778565][ T4564] bridge0: port 1(bridge_slave_0) entered forwarding state [ 1153.967082][ T4576] net_ratelimit: 3 callbacks suppressed [ 1153.967103][ T4576] openvswitch: netlink: Flow key attribute not present in set flow. [ 1153.981939][ T4578] sctp: [Deprecated]: syz.9.10380 (pid 4578) Use of int in max_burst socket option. [ 1153.981939][ T4578] Use struct sctp_assoc_value instead [ 1154.098352][ T4573] bond2: option arp_validate: mode dependency failed, not supported in mode 802.3ad(4) [ 1154.118532][ T4580] openvswitch: netlink: Flow key attribute not present in set flow. [ 1154.185391][ T4581] mapping of prio or/and queue is allowed only from OUTPUT/FORWARD/POSTROUTING chains [ 1154.200958][ T4573] bond2 (unregistering): Released all slaves [ 1154.347956][ T4591] __nla_validate_parse: 4 callbacks suppressed [ 1154.347977][ T4591] netlink: 52 bytes leftover after parsing attributes in process `syz.9.10385'. [ 1154.413637][ T4590] syzkaller1: entered promiscuous mode [ 1154.419183][ T4590] syzkaller1: entered allmulticast mode [ 1154.547025][ T4595] netlink: 'syz.3.10387': attribute type 32 has an invalid length. [ 1154.555004][ T4595] netlink: 8 bytes leftover after parsing attributes in process `syz.3.10387'. [ 1154.611173][ T4595] bond1: option coupled_control: invalid value (192) [ 1154.726271][ T4595] bond1 (unregistering): Released all slaves [ 1154.800123][ T4604] netlink: 32 bytes leftover after parsing attributes in process `syz.9.10389'. [ 1154.851069][ T4604] netlink: 36 bytes leftover after parsing attributes in process `syz.9.10389'. [ 1155.162259][ C0] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1155.170827][ C0] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1155.179329][ C0] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1155.437725][ T4629] netlink: 4 bytes leftover after parsing attributes in process `syz.7.10395'. [ 1155.452067][ T4629] netlink: 28 bytes leftover after parsing attributes in process `syz.7.10395'. [ 1155.854847][ T4647] xt_CHECKSUM: unsupported CHECKSUM operation 68 [ 1155.863628][ T4647] netlink: 4 bytes leftover after parsing attributes in process `syz.3.10400'. [ 1155.872646][ T4647] openvswitch: netlink: Flow key attribute not present in set flow. [ 1155.922572][ T4651] netlink: 12 bytes leftover after parsing attributes in process `syz.5.10403'. [ 1155.972126][ T4651] workqueue: Failed to create a rescuer kthread for wq "bond2": -EINTR [ 1156.230650][ T4661] netlink: 'syz.7.10405': attribute type 4 has an invalid length. [ 1156.292650][ T4663] IPVS: set_ctl: invalid protocol: 103 127.0.0.1:20004 [ 1156.306301][ T4661] netlink: 'syz.7.10405': attribute type 4 has an invalid length. [ 1157.114607][ T4694] vlan2: entered promiscuous mode [ 1157.119725][ T4694] bridge0: entered promiscuous mode [ 1157.262484][ T4702] netlink: 8 bytes leftover after parsing attributes in process `syz.7.10419'. [ 1157.308776][ T4704] netlink: 'syz.5.10418': attribute type 10 has an invalid length. [ 1157.365708][ T4702] 8021q: adding VLAN 0 to HW filter on device ipvlan3 [ 1157.375268][ T4704] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 1157.384688][ T4704] bond0: (slave batadv0): Enslaving as an active interface with an up link [ 1157.565133][ T4704] netlink: 16 bytes leftover after parsing attributes in process `syz.5.10418'. [ 1158.052142][ T4734] netlink: 'syz.5.10429': attribute type 83 has an invalid length. [ 1158.095052][ T4733] netlink: 'syz.0.10431': attribute type 4 has an invalid length. [ 1158.283614][ T4740] netlink: 'syz.0.10431': attribute type 4 has an invalid length. [ 1158.531334][ C0] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1158.539944][ C0] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1158.548493][ C0] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1158.552052][ T4745] IPVS: set_ctl: invalid protocol: 58 0.0.0.0:20000 [ 1158.557924][ C0] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1158.910913][ T4753] sch_tbf: burst 19872 is lower than device lo mtu (65550) ! [ 1159.063267][ T4755] 8021q: adding VLAN 0 to HW filter on device ipvlan5 [ 1159.254966][ T4699] Bluetooth: hci4: command 0x0406 tx timeout [ 1159.723677][ T4757] __nla_validate_parse: 1 callbacks suppressed [ 1159.723700][ T4757] netlink: 576 bytes leftover after parsing attributes in process `syz.7.10440'. [ 1159.851476][T31424] syz-executor invoked oom-killer: gfp_mask=0x100cca(GFP_HIGHUSER_MOVABLE), order=0, oom_score_adj=0 [ 1159.863024][T31424] CPU: 1 UID: 0 PID: 31424 Comm: syz-executor Not tainted syzkaller #0 PREEMPT(full) [ 1159.863054][T31424] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/09/2026 [ 1159.863067][T31424] Call Trace: [ 1159.863078][T31424] [ 1159.863089][T31424] dump_stack_lvl+0xe8/0x150 [ 1159.863128][T31424] dump_header+0xd3/0x4b0 [ 1159.863162][T31424] oom_kill_process+0x3ab/0x970 [ 1159.863191][T31424] out_of_memory+0x1064/0x1480 [ 1159.863211][T31424] ? try_charge_memcg+0xbca/0x1590 [ 1159.863265][T31424] ? __pfx_out_of_memory+0x10/0x10 [ 1159.863285][T31424] ? do_raw_spin_unlock+0xf5/0x210 [ 1159.863323][T31424] try_charge_memcg+0xc74/0x1590 [ 1159.863373][T31424] ? __pfx_try_charge_memcg+0x10/0x10 [ 1159.863402][T31424] ? percpu_ref_tryget+0x15/0x180 [ 1159.863458][T31424] ? charge_memcg+0x20/0x2b0 [ 1159.863492][T31424] charge_memcg+0x19c/0x2b0 [ 1159.863524][T31424] ? mem_cgroup_swapin_charge_folio+0x2b/0x390 [ 1159.863554][T31424] mem_cgroup_swapin_charge_folio+0x25a/0x390 [ 1159.863590][T31424] swap_cache_alloc_folio+0x4de/0x990 [ 1159.863632][T31424] swap_cache_read_folio+0x44/0x120 [ 1159.863661][T31424] swap_cluster_readahead+0x3a0/0x640 [ 1159.863695][T31424] ? __pfx_swap_cluster_readahead+0x10/0x10 [ 1159.863732][T31424] ? rcu_is_watching+0x15/0xb0 [ 1159.863768][T31424] ? get_vma_policy+0x27b/0x3c0 [ 1159.863805][T31424] swapin_readahead+0x19a/0xc10 [ 1159.863835][T31424] ? swap_table_get+0x1e/0x260 [ 1159.863859][T31424] ? swap_table_get+0x1e/0x260 [ 1159.863884][T31424] ? __pfx_swapin_readahead+0x10/0x10 [ 1159.863912][T31424] ? swap_table_get+0x1e/0x260 [ 1159.863933][T31424] ? swap_table_get+0x1e/0x260 [ 1159.863953][T31424] ? swap_table_get+0x1e/0x260 [ 1159.863989][T31424] ? swap_table_get+0x216/0x260 [ 1159.864013][T31424] ? swap_cache_get_folio+0x2e7/0x2f0 [ 1159.864044][T31424] do_swap_page+0x455/0x5060 [ 1159.864111][T31424] ? __pte_offset_map+0x29/0x240 [ 1159.864144][T31424] ? __lock_acquire+0x683/0x2cf0 [ 1159.864173][T31424] ? do_swap_page+0x124/0x5060 [ 1159.864209][T31424] ? __pfx_do_swap_page+0x10/0x10 [ 1159.864242][T31424] ? __pte_offset_map+0x1ae/0x240 [ 1159.864276][T31424] ? pte_offset_map_rw_nolock+0xea/0x160 [ 1159.864304][T31424] handle_mm_fault+0x124c/0x3080 [ 1159.864345][T31424] ? handle_mm_fault+0xec/0x3080 [ 1159.864379][T31424] ? __pfx_handle_mm_fault+0x10/0x10 [ 1159.864401][T31424] ? lock_vma_under_rcu+0x45a/0x500 [ 1159.864459][T31424] do_user_addr_fault+0xa4d/0x1340 [ 1159.864505][T31424] ? trace_page_fault_user+0x84/0x1e0 [ 1159.864541][T31424] exc_page_fault+0x6a/0xc0 [ 1159.864573][T31424] asm_exc_page_fault+0x26/0x30 [ 1159.864596][T31424] RIP: 0033:0x7f575d35e68e [ 1159.864618][T31424] Code: 08 0f 85 a5 a8 ff ff 49 89 fb 48 89 f0 48 89 d7 48 89 ce 4c 89 c2 4d 89 ca 4c 8b 44 24 08 4c 8b 4c 24 10 4c 89 5c 24 08 0f 05 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 80 00 00 00 00 48 83 ec 08 [ 1159.864637][T31424] RSP: 002b:00007ffdf8d2d618 EFLAGS: 00010246 [ 1159.864657][T31424] RAX: 0000000000000000 RBX: 000055557154c500 RCX: 00007f575d35e68e [ 1159.864673][T31424] RDX: 00007ffdf8d2d670 RSI: 0000000000000000 RDI: 0000000000000000 [ 1159.864687][T31424] RBP: 00007ffdf8d2d6dc R08: 0000000000000000 R09: 0000000000000000 [ 1159.864701][T31424] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000001388 [ 1159.864716][T31424] R13: 00000000000927c0 R14: 000000000011ae23 R15: 00007ffdf8d2d730 [ 1159.864753][T31424] [ 1159.864763][T31424] memory: usage 307200kB, limit 307200kB, failcnt 165 [ 1160.421165][T31424] memory+swap: usage 307580kB, limit 9007199254740988kB, failcnt 0 [ 1160.429221][T31424] kmem: usage 307116kB, limit 9007199254740988kB, failcnt 0 [ 1160.534711][T31424] Memory cgroup stats for /syz5: [ 1160.535077][T31424] cache 0 [ 1160.543035][T31424] rss 0 [ 1160.545839][T31424] rss_huge 0 [ 1160.549065][T31424] shmem 0 [ 1160.552037][T31424] mapped_file 0 [ 1160.555524][T31424] dirty 0 [ 1160.558492][T31424] writeback 0 [ 1160.561802][T31424] workingset_refault_anon 10 [ 1160.566421][T31424] workingset_refault_file 0 [ 1160.670963][T31424] swap 389120 [ 1160.674338][T31424] swapcached 458752 [ 1160.678181][T31424] pgpgin 113814 [ 1160.681673][T31424] pgpgout 113807 [ 1160.737479][T31424] pgfault 242351 [ 1160.741100][T31424] pgmajfault 1 [ 1160.744505][T31424] inactive_anon 12288 [ 1160.748515][T31424] active_anon 16384 [ 1160.752349][T31424] inactive_file 0 [ 1160.756013][T31424] active_file 0 [ 1160.759496][T31424] unevictable 0 [ 1160.762972][T31424] hierarchical_memory_limit 314572800 [ 1160.768361][T31424] hierarchical_memsw_limit 9223372036854771712 [ 1160.774543][T31424] total_cache 0 [ 1160.778023][T31424] total_rss 0 [ 1160.781328][T31424] total_rss_huge 0 [ 1160.785067][T31424] total_shmem 0 [ 1160.788544][T31424] total_mapped_file 0 [ 1160.792546][T31424] total_dirty 0 [ 1160.796031][T31424] total_writeback 0 [ 1160.878631][ T4774] batadv0: entered allmulticast mode [ 1160.887863][T31424] total_workingset_refault_anon 10 [ 1160.893048][T31424] total_workingset_refault_file 0 [ 1160.898124][T31424] total_swap 389120 [ 1160.901959][T31424] total_swapcached 458752 [ 1160.906314][T31424] total_pgpgin 113814 [ 1160.910328][T31424] total_pgpgout 113807 [ 1161.018113][T31424] total_pgfault 242351 [ 1161.022269][T31424] total_pgmajfault 1 [ 1161.026198][T31424] total_inactive_anon 12288 [ 1161.105190][T31424] total_active_anon 16384 [ 1161.109600][T31424] total_inactive_file 0 [ 1161.113782][T31424] total_active_file 0 [ 1161.117801][T31424] total_unevictable 0 [ 1161.121811][T31424] anon_cost 0 [ 1161.125125][T31424] file_cost 0 [ 1161.128437][T31424] oom-kill:constraint=CONSTRAINT_MEMCG,nodemask=(null),cpuset=/,mems_allowed=0-1,oom_memcg=/syz5,task_memcg=/syz5,task=syz.5.10429,pid=4720,uid=0 [ 1161.163403][T31424] Memory cgroup out of memory: Killed process 4720 (syz.5.10429) total-vm:102436kB, anon-rss:1252kB, file-rss:23132kB, shmem-rss:0kB, UID:0 pgtables:136kB oom_score_adj:1000 [ 1161.843903][ T4800] netlink: 12 bytes leftover after parsing attributes in process `syz.0.10451'. [ 1161.853179][ T4800] netlink: 12 bytes leftover after parsing attributes in process `syz.0.10451'. [ 1162.446050][ T4818] netlink: 'syz.9.10459': attribute type 4 has an invalid length. [ 1162.571253][ T4811] bridge0: port 1(bridge_slave_0) entered disabled state [ 1162.578919][ T4811] bridge0: port 1(bridge_slave_0) entered blocking state [ 1162.586141][ T4811] bridge0: port 1(bridge_slave_0) entered forwarding state [ 1162.608891][ C0] net_ratelimit: 3 callbacks suppressed [ 1162.608916][ C0] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1162.623055][ C0] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1162.631535][ C0] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1162.640049][ C0] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1163.416754][ T4844] pimreg: entered allmulticast mode [ 1163.873828][ T4857] mapping of prio or/and queue is allowed only from OUTPUT/FORWARD/POSTROUTING chains [ 1163.939447][ T4859] netlink: 'syz.0.10468': attribute type 2 has an invalid length. [ 1163.947670][ T4859] netlink: 'syz.0.10468': attribute type 2 has an invalid length. [ 1163.985700][ T4862] netlink: 'syz.9.10469': attribute type 2 has an invalid length. [ 1163.993592][ T4862] netlink: 100 bytes leftover after parsing attributes in process `syz.9.10469'. [ 1164.005009][ T4862] netlink: 28 bytes leftover after parsing attributes in process `syz.9.10469'. [ 1164.108004][ T4867] syz_tun: entered allmulticast mode [ 1164.678095][ T4886] sctp: [Deprecated]: syz.0.10475 (pid 4886) Use of int in max_burst socket option. [ 1164.678095][ T4886] Use struct sctp_assoc_value instead [ 1165.112205][ T4899] netlink: 96 bytes leftover after parsing attributes in process `syz.0.10481'. [ 1165.128970][ T4899] vlan4: entered allmulticast mode [ 1165.134262][ T4899] gretap0: entered allmulticast mode [ 1165.215863][ T4901] netlink: 'syz.5.10480': attribute type 26 has an invalid length. [ 1165.223845][ T4901] netlink: 4 bytes leftover after parsing attributes in process `syz.5.10480'. [ 1165.295707][ T4901] netlink: 'syz.5.10480': attribute type 26 has an invalid length. [ 1165.330843][ T4901] netlink: 4 bytes leftover after parsing attributes in process `syz.5.10480'. [ 1165.660358][ T4911] xt_TCPMSS: Only works on TCP SYN packets [ 1165.788622][ T4919] netlink: 12 bytes leftover after parsing attributes in process `syz.7.10487'. [ 1165.797786][ T4919] netlink: 'syz.7.10487': attribute type 1 has an invalid length. [ 1165.805624][ T4919] netlink: 'syz.7.10487': attribute type 1 has an invalid length. [ 1165.813465][ T4919] netlink: 'syz.7.10487': attribute type 2 has an invalid length. [ 1165.918066][ T4919] netlink: 68 bytes leftover after parsing attributes in process `syz.7.10487'. [ 1166.062527][ C1] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1166.071123][ C1] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1166.079687][ C1] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1166.088218][ C1] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1166.096719][ C1] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1166.105262][ C1] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1166.259127][ T4933] netlink: 'syz.5.10493': attribute type 4 has an invalid length. [ 1166.495496][ T4937] syzkaller0: entered promiscuous mode [ 1166.501055][ T4937] syzkaller0: entered allmulticast mode [ 1166.595227][ T4951] netlink: 12 bytes leftover after parsing attributes in process `syz.7.10497'. [ 1166.961724][ T4971] FAULT_INJECTION: forcing a failure. [ 1166.961724][ T4971] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 1167.000260][ T4971] CPU: 1 UID: 0 PID: 4971 Comm: syz.0.10502 Not tainted syzkaller #0 PREEMPT(full) [ 1167.000290][ T4971] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/09/2026 [ 1167.000304][ T4971] Call Trace: [ 1167.000313][ T4971] [ 1167.000322][ T4971] dump_stack_lvl+0xe8/0x150 [ 1167.000360][ T4971] should_fail_ex+0x40c/0x560 [ 1167.000391][ T4971] _copy_from_user+0x2d/0xb0 [ 1167.000423][ T4971] do_tcp_setsockopt+0x504/0x1f80 [ 1167.000454][ T4971] ? __pfx_do_tcp_setsockopt+0x10/0x10 [ 1167.000480][ T4971] ? __pfx_aa_sk_perm+0x10/0x10 [ 1167.000515][ T4971] ? __fget_files+0x2a/0x420 [ 1167.000541][ T4971] ? aa_sock_opt_perm+0xff/0x1a0 [ 1167.000564][ T4971] ? sock_common_setsockopt+0x36/0xc0 [ 1167.000588][ T4971] ? tcp_setsockopt+0x3d/0xe0 [ 1167.000609][ T4971] ? __pfx_sock_common_setsockopt+0x10/0x10 [ 1167.000652][ T4971] do_sock_setsockopt+0x17c/0x1b0 [ 1167.000688][ T4971] __x64_sys_setsockopt+0x13d/0x1b0 [ 1167.000720][ T4971] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1167.000744][ T4971] do_syscall_64+0x174/0x580 [ 1167.000772][ T4971] ? trace_irq_disable+0x3b/0x140 [ 1167.000799][ T4971] ? clear_bhb_loop+0x40/0x90 [ 1167.000824][ T4971] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1167.000846][ T4971] RIP: 0033:0x7f219a19de59 [ 1167.000866][ T4971] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 1167.000885][ T4971] RSP: 002b:00007f219af88028 EFLAGS: 00000246 ORIG_RAX: 0000000000000036 [ 1167.000908][ T4971] RAX: ffffffffffffffda RBX: 00007f219a425fa0 RCX: 00007f219a19de59 [ 1167.000925][ T4971] RDX: 0000000000000013 RSI: 0000000000000006 RDI: 0000000000000005 [ 1167.000938][ T4971] RBP: 00007f219af88090 R08: 0000000000000004 R09: 0000000000000000 [ 1167.000952][ T4971] R10: 00002000000001c0 R11: 0000000000000246 R12: 0000000000000001 [ 1167.000966][ T4971] R13: 00007f219a426038 R14: 00007f219a425fa0 R15: 00007fff9fe49b38 [ 1167.001002][ T4971] [ 1167.048115][ T4972] netlink: 16 bytes leftover after parsing attributes in process `syz.3.10503'. [ 1167.049474][ T4977] netlink: 12 bytes leftover after parsing attributes in process `syz.7.10504'. [ 1167.503228][ T4992] validate_nla: 1 callbacks suppressed [ 1167.503250][ T4992] netlink: 'syz.5.10506': attribute type 4 has an invalid length. [ 1167.621781][ T4995] netlink: 'syz.5.10506': attribute type 4 has an invalid length. [ 1167.726357][ T5000] netlink: 20 bytes leftover after parsing attributes in process `syz.9.10509'. [ 1167.735417][ T5001] netlink: 72 bytes leftover after parsing attributes in process `syz.7.10510'. [ 1167.736497][ T5001] IPVS: set_ctl: invalid protocol: 98 172.30.0.8:20001 [ 1167.957129][ T5009] pim6reg1: entered promiscuous mode [ 1167.963684][ T5009] pim6reg1: entered allmulticast mode [ 1168.760480][ T5033] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 1168.832869][ T5033] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 1168.937237][ T5037] erspan0: entered promiscuous mode [ 1169.521798][ T5066] syzkaller0: entered promiscuous mode [ 1169.527369][ T5066] syzkaller0: entered allmulticast mode [ 1169.591318][ C0] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1169.599911][ C0] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1169.608504][ C0] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1169.617081][ C0] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1169.625640][ C0] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1169.915283][ T5077] netlink: 'syz.7.10535': attribute type 1 has an invalid length. [ 1169.923185][ T5077] netlink: 'syz.7.10535': attribute type 1 has an invalid length. [ 1170.205794][ T5085] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 1170.236880][ T5085] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 1170.633655][ T5099] __nla_validate_parse: 7 callbacks suppressed [ 1170.633676][ T5099] netlink: 44 bytes leftover after parsing attributes in process `syz.5.10543'. [ 1171.337170][ T5127] netlink: 16 bytes leftover after parsing attributes in process `syz.7.10551'. [ 1171.371019][ T5128] netlink: 16 bytes leftover after parsing attributes in process `syz.7.10551'. [ 1171.432223][ T5129] netlink: 576 bytes leftover after parsing attributes in process `syz.0.10545'. [ 1172.955799][ C0] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1172.964339][ C0] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1172.972809][ C0] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1172.981233][ C0] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1172.989721][ C0] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1175.631421][ T5132] netlink: 8 bytes leftover after parsing attributes in process `syz.5.10552'. [ 1175.720420][ T5132] 8021q: adding VLAN 0 to HW filter on device ipvlan0 [ 1175.765518][ T5134] netlink: 12 bytes leftover after parsing attributes in process `syz.7.10554'. [ 1175.832861][ T5134] netlink: 12 bytes leftover after parsing attributes in process `syz.7.10554'. [ 1175.938494][ T5140] netlink: 28 bytes leftover after parsing attributes in process `syz.9.10556'. [ 1176.239630][ T5151] netlink: 172 bytes leftover after parsing attributes in process `syz.3.10560'. [ 1176.601443][ T5169] netlink: 28 bytes leftover after parsing attributes in process `syz.5.10567'. [ 1177.077300][ C0] net_ratelimit: 1 callbacks suppressed [ 1177.077321][ C0] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1177.091550][ C0] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1177.100120][ C0] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1177.396857][ T5203] bond2 (unregistering): Released all slaves [ 1177.495379][ T5209] netlink: 36 bytes leftover after parsing attributes in process `syz.7.10572'. [ 1177.670683][ T5202] bond2 (unregistering): Released all slaves [ 1177.709565][ T5215] netlink: 576 bytes leftover after parsing attributes in process `syz.3.10575'. [ 1177.738731][ T1318] aoe: packet could not be sent on ipvlan1. consider increasing tx_queue_len [ 1178.348441][ T5245] netlink: 28 bytes leftover after parsing attributes in process `syz.7.10584'. [ 1178.440263][ T5242] netlink: 8 bytes leftover after parsing attributes in process `syz.9.10585'. [ 1178.450927][ T5242] netlink: 8 bytes leftover after parsing attributes in process `syz.9.10585'. [ 1178.613487][ T5827] IPVS: starting estimator thread 0... [ 1178.767090][ T5257] sctp: [Deprecated]: syz.5.10589 (pid 5257) Use of int in max_burst socket option. [ 1178.767090][ T5257] Use struct sctp_assoc_value instead [ 1178.927471][ T5259] IPVS: using max 37 ests per chain, 88800 per kthread [ 1179.430063][ T5295] syzkaller0: entered promiscuous mode [ 1179.435617][ T5295] syzkaller0: entered allmulticast mode [ 1179.746180][ T5302] x_tables: ip6_tables: mh match: only valid for protocol 135 [ 1179.917000][ T5314] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check. [ 1179.962803][ T5312] netdevsim netdevsim7 netdevsim0: entered promiscuous mode [ 1180.049314][ T5318] netlink: 'syz.9.10608': attribute type 1 has an invalid length. [ 1180.057216][ T5318] netlink: 'syz.9.10608': attribute type 1 has an invalid length. [ 1180.065061][ T5318] netlink: 'syz.9.10608': attribute type 2 has an invalid length. [ 1180.623778][ T5329] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 1180.781287][ T5339] __nla_validate_parse: 8 callbacks suppressed [ 1180.781310][ T5339] netlink: 20 bytes leftover after parsing attributes in process `syz.3.10615'. [ 1180.796578][ T5339] tipc: Invalid UDP bearer configuration [ 1180.796666][ T5339] tipc: Enabling of bearer rejected, failed to enable media [ 1181.066083][ T5351] netlink: 8 bytes leftover after parsing attributes in process `syz.9.10618'. [ 1181.084568][ T5351] openvswitch: netlink: Tunnel attr 68 out of range max 16 [ 1181.285226][ T5362] netlink: 40 bytes leftover after parsing attributes in process `syz.5.10617'. [ 1181.348749][ T5366] netlink: 1044 bytes leftover after parsing attributes in process `syz.9.10618'. [ 1182.077172][ T5384] netlink: 'syz.7.10625': attribute type 1 has an invalid length. [ 1182.145910][ T5388] openvswitch: netlink: IPv4 tun info is not correct [ 1182.482449][ T5400] netlink: 8 bytes leftover after parsing attributes in process `syz.5.10631'. [ 1182.482660][ T5404] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 1182.569400][ T5406] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 1182.581278][ T5400] 8021q: adding VLAN 0 to HW filter on device ipvlan1 [ 1182.670308][ T5412] syzkaller0: entered promiscuous mode [ 1182.759974][ T5412] syzkaller0: entered allmulticast mode [ 1182.842329][ C1] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1182.850945][ C1] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1182.859503][ C1] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1182.868093][ C1] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1183.042091][ T5420] netlink: 28 bytes leftover after parsing attributes in process `syz.3.10637'. [ 1183.051219][ T5420] netlink: 28 bytes leftover after parsing attributes in process `syz.3.10637'. [ 1183.799662][ T5456] netlink: 8 bytes leftover after parsing attributes in process `syz.7.10646'. [ 1183.932792][ T5456] 8021q: adding VLAN 0 to HW filter on device ipvlan4 [ 1184.326046][ T5472] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 1184.385414][ T5472] netlink: 'syz.7.10652': attribute type 27 has an invalid length. [ 1184.393398][ T5472] netlink: 'syz.7.10652': attribute type 4 has an invalid length. [ 1184.401262][ T5472] netlink: 152 bytes leftover after parsing attributes in process `syz.7.10652'. [ 1184.497304][ T5478] netlink: 20 bytes leftover after parsing attributes in process `syz.3.10654'. [ 1184.882575][ T5488] openvswitch: netlink: Multiple metadata blocks provided [ 1185.356653][ T5515] syzkaller0: entered promiscuous mode [ 1185.362204][ T5515] syzkaller0: entered allmulticast mode [ 1186.070412][ T5528] __nla_validate_parse: 1 callbacks suppressed [ 1186.070429][ T5528] netlink: 56 bytes leftover after parsing attributes in process `syz.7.10669'. [ 1186.423226][ T5538] netlink: 'syz.0.10671': attribute type 3 has an invalid length. [ 1187.789991][ T5488] nci: __nci_request: wait_for_completion_interruptible_timeout failed -512 [ 1188.249885][ T5556] netlink: 576 bytes leftover after parsing attributes in process `syz.9.10679'. [ 1188.402478][ T5561] netlink: 8 bytes leftover after parsing attributes in process `syz.3.10677'. [ 1188.440178][ C0] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1188.448802][ C0] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1188.457336][ C0] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1188.465839][ C0] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1188.563443][ T5569] netlink: ct family unspecified [ 1188.571752][ T5569] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 1188.633180][ T5573] netlink: 8 bytes leftover after parsing attributes in process `syz.3.10683'. [ 1188.900213][ T5577] syzkaller0: entered promiscuous mode [ 1188.905786][ T5577] syzkaller0: entered allmulticast mode [ 1189.011667][ T5577] netlink: 'syz.5.10685': attribute type 23 has an invalid length. [ 1189.215595][ T5593] netlink: 8 bytes leftover after parsing attributes in process `syz.3.10691'. [ 1189.680839][ T5598] netlink: 8 bytes leftover after parsing attributes in process `syz.7.10692'. [ 1193.336137][ T5588] workqueue: Failed to create a rescuer kthread for wq "bond2": -EINTR [ 1193.504566][ T5604] netlink: 28 bytes leftover after parsing attributes in process `syz.9.10695'. [ 1193.709178][ T5604] bridge_slave_0: left allmulticast mode [ 1193.714909][ T5604] bridge_slave_0: left promiscuous mode [ 1193.720723][ T5604] bridge0: port 1(bridge_slave_0) entered disabled state [ 1193.738181][ T5615] netlink: 12 bytes leftover after parsing attributes in process `syz.0.10697'. [ 1193.792107][ T5615] openvswitch: netlink: Missing key (keys=40, expected=100) [ 1193.804189][ T5615] netlink: 244 bytes leftover after parsing attributes in process `syz.0.10697'. [ 1193.824597][ T5619] netlink: 52 bytes leftover after parsing attributes in process `syz.3.10699'. [ 1193.993772][ T5629] netlink: 8 bytes leftover after parsing attributes in process `syz.0.10697'. [ 1194.004206][ T5604] bridge_slave_1: left allmulticast mode [ 1194.009910][ T5604] bridge_slave_1: left promiscuous mode [ 1194.015735][ T5604] bridge0: port 2(bridge_slave_1) entered disabled state [ 1194.289578][ C1] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1194.298151][ C1] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1194.306669][ C1] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1194.315160][ C1] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1194.369167][ T5604] bond0: (slave bond_slave_0): Releasing backup interface [ 1194.474884][ T5604] bond0: (slave bond_slave_1): Releasing backup interface [ 1194.493635][ T5604] team0: Port device team_slave_0 removed [ 1194.533991][ T5604] team0: Port device team_slave_1 removed [ 1194.540902][ T5604] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 1194.568537][ T5641] netlink: 104 bytes leftover after parsing attributes in process `syz.0.10702'. [ 1194.579029][ T5642] netlink: 104 bytes leftover after parsing attributes in process `syz.0.10702'. [ 1194.591359][ T5604] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 1194.622572][ T5604] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 1194.630028][ T5604] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 1194.639714][ T5604] A link change request failed with some changes committed already. Interface hsr_slave_0 may have been left with an inconsistent configuration, please check. [ 1194.766646][ T30] audit: type=1804 audit(1783445239.482:23): pid=5647 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=invalid_pcr cause=open_writers comm="syz.0.10703" name="/newroot/399/cgroup.controllers" dev="tmpfs" ino=2045 res=1 errno=0 [ 1194.789202][ T30] audit: type=1800 audit(1783445239.482:24): pid=5647 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.0.10703" name="cgroup.controllers" dev="tmpfs" ino=2045 res=0 errno=0 [ 1194.906937][ T5656] netlink: 52 bytes leftover after parsing attributes in process `syz.0.10707'. [ 1194.991545][ T5648] netlink: 8 bytes leftover after parsing attributes in process `syz.5.10704'. [ 1195.003175][ T5656] bridge0: port 3(syz_tun) entered disabled state [ 1195.010051][ T5656] bridge0: port 2(bridge_slave_1) entered disabled state [ 1195.017407][ T5656] bridge0: port 1(bridge_slave_0) entered disabled state [ 1195.031040][ T5656] FAULT_INJECTION: forcing a failure. [ 1195.031040][ T5656] name failslab, interval 1, probability 0, space 0, times 0 [ 1195.043699][ T5656] CPU: 1 UID: 0 PID: 5656 Comm: syz.0.10707 Not tainted syzkaller #0 PREEMPT(full) [ 1195.043742][ T5656] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/09/2026 [ 1195.043766][ T5656] Call Trace: [ 1195.043776][ T5656] [ 1195.043785][ T5656] dump_stack_lvl+0xe8/0x150 [ 1195.043825][ T5656] should_fail_ex+0x40c/0x560 [ 1195.043856][ T5656] should_failslab+0xa8/0x100 [ 1195.043890][ T5656] __kmalloc_noprof+0xfe/0x720 [ 1195.043919][ T5656] ? iovec_from_user+0x87/0x250 [ 1195.043948][ T5656] ? iovec_from_user+0x87/0x250 [ 1195.043984][ T5656] iovec_from_user+0x87/0x250 [ 1195.044019][ T5656] __import_iovec+0x15e/0x7e0 [ 1195.044061][ T5656] import_iovec+0x73/0xa0 [ 1195.044096][ T5656] ___sys_sendmsg+0x255/0x360 [ 1195.044128][ T5656] ? __lock_acquire+0x683/0x2cf0 [ 1195.044162][ T5656] ? __pfx____sys_sendmsg+0x10/0x10 [ 1195.044232][ T5656] ? __fget_files+0x2a/0x420 [ 1195.044258][ T5656] ? __fget_files+0x3a2/0x420 [ 1195.044297][ T5656] __x64_sys_sendmsg+0x1b1/0x290 [ 1195.044338][ T5656] ? __pfx___x64_sys_sendmsg+0x10/0x10 [ 1195.044389][ T5656] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1195.044413][ T5656] do_syscall_64+0x174/0x580 [ 1195.044442][ T5656] ? trace_irq_disable+0x3b/0x140 [ 1195.044469][ T5656] ? clear_bhb_loop+0x40/0x90 [ 1195.044496][ T5656] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1195.044518][ T5656] RIP: 0033:0x7f219a19de59 [ 1195.044539][ T5656] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 1195.044558][ T5656] RSP: 002b:00007f219af88028 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 1195.044582][ T5656] RAX: ffffffffffffffda RBX: 00007f219a425fa0 RCX: 00007f219a19de59 [ 1195.044598][ T5656] RDX: 0000000000000000 RSI: 0000200000000240 RDI: 0000000000000003 [ 1195.044612][ T5656] RBP: 00007f219af88090 R08: 0000000000000000 R09: 0000000000000000 [ 1195.044626][ T5656] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 1195.044639][ T5656] R13: 00007f219a426038 R14: 00007f219a425fa0 R15: 00007fff9fe49b38 [ 1195.044674][ T5656] [ 1195.304928][T29008] Bluetooth: hci1: command 0x0401 tx timeout [ 1195.578478][ T5668] netlink: 'syz.7.10711': attribute type 1 has an invalid length. [ 1195.651028][ T5668] bond4: (slave bridge2): making interface the new active one [ 1195.660739][ T5668] bond4: (slave bridge2): Enslaving as an active interface with an up link [ 1195.692159][ T5671] openvswitch: netlink: Missing valid actions attribute. [ 1195.699392][ T5671] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 1196.185527][ T5697] netlink: 8 bytes leftover after parsing attributes in process `syz.0.10720'. [ 1196.339773][ T5707] bridge0: port 2(bridge_slave_1) entered disabled state [ 1196.347178][ T5707] bridge0: port 1(bridge_slave_0) entered disabled state [ 1196.384564][ T5707] bridge0: port 2(bridge_slave_1) entered blocking state [ 1196.391800][ T5707] bridge0: port 2(bridge_slave_1) entered forwarding state [ 1196.399342][ T5707] bridge0: port 1(bridge_slave_0) entered blocking state [ 1196.406471][ T5707] bridge0: port 1(bridge_slave_0) entered forwarding state [ 1196.482966][ T5707] bridge0: port 2(bridge_slave_1) entered disabled state [ 1196.490266][ T5707] bridge0: port 1(bridge_slave_0) entered disabled state [ 1197.617659][ T5799] netlink: 'syz.0.10740': attribute type 4 has an invalid length. [ 1197.746894][ T5799] netlink: 'syz.0.10740': attribute type 4 has an invalid length. [ 1198.436153][ T5848] netlink: 'syz.3.10756': attribute type 1 has an invalid length. [ 1198.508403][ T5849] FAULT_INJECTION: forcing a failure. [ 1198.508403][ T5849] name failslab, interval 1, probability 0, space 0, times 0 [ 1198.521101][ T5849] CPU: 0 UID: 0 PID: 5849 Comm: syz.9.10750 Not tainted syzkaller #0 PREEMPT(full) [ 1198.521129][ T5849] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/09/2026 [ 1198.521143][ T5849] Call Trace: [ 1198.521152][ T5849] [ 1198.521161][ T5849] dump_stack_lvl+0xe8/0x150 [ 1198.521201][ T5849] should_fail_ex+0x40c/0x560 [ 1198.521231][ T5849] should_failslab+0xa8/0x100 [ 1198.521265][ T5849] __kmalloc_cache_noprof+0xa8/0x660 [ 1198.521293][ T5849] ? sctp_copy_local_addr_list+0xa3/0x4e0 [ 1198.521319][ T5849] ? __kmalloc_cache_noprof+0x150/0x660 [ 1198.521344][ T5849] ? sctp_add_bind_addr+0x8c/0x370 [ 1198.521367][ T5849] ? sctp_add_bind_addr+0x8c/0x370 [ 1198.521400][ T5849] sctp_add_bind_addr+0x8c/0x370 [ 1198.521430][ T5849] sctp_copy_local_addr_list+0x31a/0x4e0 [ 1198.521460][ T5849] ? sctp_copy_local_addr_list+0xa3/0x4e0 [ 1198.521504][ T5849] ? __pfx_sctp_copy_local_addr_list+0x10/0x10 [ 1198.521537][ T5849] ? sctp_v4_is_any+0x35/0x60 [ 1198.521563][ T5849] ? sctp_copy_one_addr+0x93/0x360 [ 1198.521595][ T5849] sctp_bind_addr_copy+0xb3/0x3c0 [ 1198.521623][ T5849] ? sctp_assoc_set_bind_addr_from_ep+0xa5/0x1a0 [ 1198.521664][ T5849] sctp_connect_new_asoc+0x2ff/0x6b0 [ 1198.521700][ T5849] ? __pfx_sctp_connect_new_asoc+0x10/0x10 [ 1198.521735][ T5849] ? sctp_endpoint_lookup_assoc+0x7b/0x260 [ 1198.521768][ T5849] ? sctp_endpoint_lookup_assoc+0x7b/0x260 [ 1198.521798][ T5849] ? sctp_endpoint_lookup_assoc+0x7b/0x260 [ 1198.521842][ T5849] ? bpf_lsm_sctp_bind_connect+0x9/0x20 [ 1198.521868][ T5849] ? security_sctp_bind_connect+0x7e/0x2c0 [ 1198.521914][ T5849] sctp_sendmsg+0x159b/0x2d00 [ 1198.521962][ T5849] ? __pfx_sctp_sendmsg+0x10/0x10 [ 1198.522000][ T5849] ? aa_sk_perm+0x6d5/0x900 [ 1198.522048][ T5849] ? sock_rps_record_flow+0x19/0x350 [ 1198.522080][ T5849] ? inet_sendmsg+0x298/0x320 [ 1198.522111][ T5849] ? __pfx_inet_sendmsg+0x10/0x10 [ 1198.522137][ T5849] sock_sendmsg_nosec+0x10e/0x180 [ 1198.522166][ T5849] ____sys_sendmsg+0x54e/0x850 [ 1198.522203][ T5849] ? __pfx_____sys_sendmsg+0x10/0x10 [ 1198.522246][ T5849] ? import_iovec+0x73/0xa0 [ 1198.522281][ T5849] ___sys_sendmsg+0x2a5/0x360 [ 1198.522311][ T5849] ? __lock_acquire+0x683/0x2cf0 [ 1198.522345][ T5849] ? __pfx____sys_sendmsg+0x10/0x10 [ 1198.522383][ T5849] ? kstrtouint+0x6e/0xe0 [ 1198.522439][ T5849] ? __fget_files+0x2a/0x420 [ 1198.522483][ T5849] ? __fget_files+0x3a2/0x420 [ 1198.522522][ T5849] __sys_sendmmsg+0x273/0x4d0 [ 1198.522562][ T5849] ? __pfx___sys_sendmmsg+0x10/0x10 [ 1198.522607][ T5849] ? __pfx___mutex_unlock_slowpath+0x10/0x10 [ 1198.522656][ T5849] ? ksys_write+0x242/0x270 [ 1198.522692][ T5849] ? __pfx_ksys_write+0x10/0x10 [ 1198.522734][ T5849] __x64_sys_sendmmsg+0xa0/0xc0 [ 1198.522768][ T5849] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1198.522793][ T5849] do_syscall_64+0x174/0x580 [ 1198.522822][ T5849] ? trace_irq_disable+0x3b/0x140 [ 1198.522857][ T5849] ? clear_bhb_loop+0x40/0x90 [ 1198.522886][ T5849] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1198.522909][ T5849] RIP: 0033:0x7fd9a159de59 [ 1198.522932][ T5849] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 1198.522953][ T5849] RSP: 002b:00007fd9a24ba028 EFLAGS: 00000246 ORIG_RAX: 0000000000000133 [ 1198.522977][ T5849] RAX: ffffffffffffffda RBX: 00007fd9a1826090 RCX: 00007fd9a159de59 [ 1198.522994][ T5849] RDX: 0000000000000001 RSI: 0000200000000680 RDI: 0000000000000005 [ 1198.523009][ T5849] RBP: 00007fd9a24ba090 R08: 0000000000000000 R09: 0000000000000000 [ 1198.523023][ T5849] R10: 0000000020000014 R11: 0000000000000246 R12: 0000000000000002 [ 1198.523038][ T5849] R13: 00007fd9a1826128 R14: 00007fd9a1826090 R15: 00007ffd0e91fa58 [ 1198.523075][ T5849] [ 1198.530397][ T5848] netlink: 'syz.3.10756': attribute type 1 has an invalid length. [ 1198.549403][ T5841] bond7: entered promiscuous mode [ 1199.033529][ T5841] bond7: entered allmulticast mode [ 1199.039216][ T5841] 8021q: adding VLAN 0 to HW filter on device bond7 [ 1199.049730][ T5853] mapping of prio or/and queue is allowed only from OUTPUT/FORWARD/POSTROUTING chains [ 1199.212233][ T5852] netlink: 'syz.3.10756': attribute type 7 has an invalid length. [ 1199.484506][ C1] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1199.493116][ C1] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1199.501693][ C1] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1199.510200][ C1] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1199.577912][ T5867] sch_tbf: burst 19872 is lower than device lo mtu (11337746) ! [ 1199.642618][ T5867] __nla_validate_parse: 10 callbacks suppressed [ 1199.642640][ T5867] netlink: 8 bytes leftover after parsing attributes in process `syz.9.10759'. [ 1199.758788][ T5871] netlink: 24 bytes leftover after parsing attributes in process `syz.7.10763'. [ 1199.853117][ T5867] IPv6: NLM_F_CREATE should be specified when creating new route [ 1199.861031][ T5867] IPv6: RTM_NEWROUTE with no NLM_F_CREATE or NLM_F_REPLACE [ 1199.868308][ T5867] IPv6: NLM_F_CREATE should be set when creating new route [ 1199.919594][ T5877] netlink: 4 bytes leftover after parsing attributes in process `syz.7.10765'. [ 1200.241292][ T5881] netlink: 52 bytes leftover after parsing attributes in process `syz.0.10766'. [ 1200.288578][ T5881] netlink: 76 bytes leftover after parsing attributes in process `syz.0.10766'. [ 1200.290492][ T5883] tc_dump_action: action bad kind [ 1200.303008][ T5881] bridge0: port 3(syz_tun) entered blocking state [ 1200.309604][ T5881] bridge0: port 3(syz_tun) entered forwarding state [ 1200.316584][ T5881] bridge0: port 2(bridge_slave_1) entered blocking state [ 1200.323771][ T5881] bridge0: port 2(bridge_slave_1) entered forwarding state [ 1200.331259][ T5881] bridge0: port 1(bridge_slave_0) entered blocking state [ 1200.338431][ T5881] bridge0: port 1(bridge_slave_0) entered forwarding state [ 1200.373555][ T5881] netlink: 52 bytes leftover after parsing attributes in process `syz.0.10766'. [ 1200.459358][ T5881] bridge0: port 3(syz_tun) entered disabled state [ 1200.466073][ T5881] bridge0: port 2(bridge_slave_1) entered disabled state [ 1200.473346][ T5881] bridge0: port 1(bridge_slave_0) entered disabled state [ 1200.766182][ T5890] netlink: 36 bytes leftover after parsing attributes in process `syz.5.10770'. [ 1201.052940][ T5901] xt_CT: You must specify a L4 protocol and not use inversions on it [ 1201.111862][ T5900] netlink: 12 bytes leftover after parsing attributes in process `syz.3.10773'. [ 1201.152106][ T5902] xt_CT: You must specify a L4 protocol and not use inversions on it [ 1201.319474][ T5911] netlink: 'syz.0.10776': attribute type 1 has an invalid length. [ 1201.503429][ T5911] bond8: entered promiscuous mode [ 1201.600751][ T5911] 8021q: adding VLAN 0 to HW filter on device bond8 [ 1201.700544][ T5924] bond8: (slave bridge3): making interface the new active one [ 1201.708081][ T5924] bridge3: entered promiscuous mode [ 1201.714238][ T5924] bond8: (slave bridge3): Enslaving as an active interface with an up link [ 1201.732625][ T5922] netlink: 52 bytes leftover after parsing attributes in process `syz.5.10781'. [ 1201.794271][ T5927] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 1201.829575][ T5911] netlink: 'syz.0.10776': attribute type 1 has an invalid length. [ 1201.837456][ T5911] netlink: 'syz.0.10776': attribute type 1 has an invalid length. [ 1201.846557][ T5922] netlink: 76 bytes leftover after parsing attributes in process `syz.5.10781'. [ 1201.883311][ T5927] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 1202.128121][ T5931] workqueue: Failed to create a rescuer kthread for wq "nfc3_nci_rx_wq": -EINTR [ 1202.929385][ T5968] sctp: [Deprecated]: syz.7.10791 (pid 5968) Use of int in max_burst socket option deprecated. [ 1202.929385][ T5968] Use struct sctp_assoc_value instead [ 1203.164231][ T5978] bridge0: port 2(bridge_slave_1) entered blocking state [ 1203.171378][ T5978] bridge0: port 2(bridge_slave_1) entered listening state [ 1203.178676][ T5978] bridge0: port 1(bridge_slave_0) entered blocking state [ 1203.185762][ T5978] bridge0: port 1(bridge_slave_0) entered listening state [ 1203.195009][ T5978] bridge0: port 2(bridge_slave_1) entered disabled state [ 1203.213772][ T5978] bridge0: port 1(bridge_slave_0) entered disabled state [ 1203.511282][ T5986] tipc: Enabling of bearer rejected, failed to enable media [ 1203.797689][ T5994] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 1203.823602][ T5994] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 1204.928747][ T6037] __nla_validate_parse: 9 callbacks suppressed [ 1204.928770][ T6037] netlink: 8 bytes leftover after parsing attributes in process `syz.5.10815'. [ 1204.953271][ T6037] 8021q: adding VLAN 0 to HW filter on device ipvlan2 [ 1205.242595][ C0] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1205.251196][ C0] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1205.259785][ C0] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1205.268405][ C0] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1205.372761][ T6055] openvswitch: netlink: IP tunnel dst address not specified [ 1205.393849][ T6055] openvswitch: netlink: Unknown VXLAN extension attribute 0 [ 1205.574200][ T6058] netlink: 'syz.5.10821': attribute type 1 has an invalid length. [ 1205.665292][ T6058] netlink: 5120 bytes leftover after parsing attributes in process `syz.5.10821'. [ 1205.865406][ T6067] IPVS: set_ctl: invalid protocol: 20 0.0.0.0:256 [ 1205.886479][ T6071] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 1205.900694][ T6071] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 1205.917378][ T6074] netlink: 260 bytes leftover after parsing attributes in process `syz.9.10825'. [ 1205.997390][ T6076] netlink: 766 bytes leftover after parsing attributes in process `syz.0.10826'. [ 1206.137951][ T6081] batadv1: entered allmulticast mode [ 1206.204603][ T6082] bridge0: port 2(bridge_slave_1) entered blocking state [ 1206.211844][ T6082] bridge0: port 2(bridge_slave_1) entered forwarding state [ 1206.219424][ T6082] bridge0: port 1(bridge_slave_0) entered blocking state [ 1206.226583][ T6082] bridge0: port 1(bridge_slave_0) entered forwarding state [ 1206.621541][ T6105] netlink: 52 bytes leftover after parsing attributes in process `syz.7.10836'. [ 1206.663211][ T6105] bridge0: port 2(bridge_slave_1) entered disabled state [ 1206.670512][ T6105] bridge0: port 1(bridge_slave_0) entered disabled state [ 1206.683072][ T6105] netlink: 76 bytes leftover after parsing attributes in process `syz.7.10836'. [ 1206.692429][ T6105] bridge0: port 2(bridge_slave_1) entered blocking state [ 1206.699497][ T6105] FAULT_INJECTION: forcing a failure. [ 1206.699497][ T6105] name failslab, interval 1, probability 0, space 0, times 0 [ 1206.712118][ T6105] CPU: 1 UID: 0 PID: 6105 Comm: syz.7.10836 Not tainted syzkaller #0 PREEMPT(full) [ 1206.712145][ T6105] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/09/2026 [ 1206.712159][ T6105] Call Trace: [ 1206.712169][ T6105] [ 1206.712179][ T6105] dump_stack_lvl+0xe8/0x150 [ 1206.712218][ T6105] should_fail_ex+0x40c/0x560 [ 1206.712256][ T6105] should_failslab+0xa8/0x100 [ 1206.712291][ T6105] __kmalloc_noprof+0xfe/0x720 [ 1206.712317][ T6105] ? __local_bh_enable_ip+0xd0/0x130 [ 1206.712344][ T6105] ? switchdev_deferred_enqueue+0x2d/0x240 [ 1206.712374][ T6105] ? switchdev_deferred_enqueue+0x2d/0x240 [ 1206.712407][ T6105] ? switchdev_deferred_enqueue+0x1fe/0x240 [ 1206.712442][ T6105] ? __pfx_switchdev_port_attr_set_deferred+0x10/0x10 [ 1206.712478][ T6105] switchdev_deferred_enqueue+0x2d/0x240 [ 1206.712515][ T6105] __set_ageing_time+0xdd/0x170 [ 1206.712549][ T6105] ? __pfx___set_ageing_time+0x10/0x10 [ 1206.712591][ T6105] ? mod_delayed_work_on+0xdf/0x190 [ 1206.712619][ T6105] ? lockdep_hardirqs_on+0x7a/0x110 [ 1206.712648][ T6105] ? br_become_designated_port+0x20/0x250 [ 1206.712685][ T6105] br_stp_enable_port+0x137/0x240 [ 1206.712724][ T6105] br_stp_enable_bridge+0x1f1/0x280 [ 1206.712764][ T6105] br_dev_open+0xa0/0x140 [ 1206.712801][ T6105] __dev_open+0x46f/0x850 [ 1206.712835][ T6105] ? __pfx___dev_open+0x10/0x10 [ 1206.712859][ T6105] ? __dev_change_flags+0x2e2/0x820 [ 1206.712893][ T6105] ? __local_bh_enable_ip+0xd0/0x130 [ 1206.712925][ T6105] __dev_change_flags+0x329/0x820 [ 1206.712963][ T6105] ? __pfx___dev_change_flags+0x10/0x10 [ 1206.712997][ T6105] ? console_unlock+0x150/0x1c0 [ 1206.713027][ T6105] netif_change_flags+0x7c/0x1b0 [ 1206.713063][ T6105] do_setlink+0xdd6/0x4670 [ 1206.713094][ T6105] ? __wake_up_klogd+0xe6/0x120 [ 1206.713126][ T6105] ? __pfx_vprintk_emit+0x10/0x10 [ 1206.713156][ T6105] ? __pfx_do_setlink+0x10/0x10 [ 1206.713188][ T6105] ? __lock_acquire+0x683/0x2cf0 [ 1206.713230][ T6105] ? lockdep_hardirqs_on+0x7a/0x110 [ 1206.713268][ T6105] ? rcu_is_watching+0x15/0xb0 [ 1206.713301][ T6105] ? do_trace_netlink_extack+0x80/0x1d0 [ 1206.713337][ T6105] ? __mutex_trylock_common+0x15f/0x270 [ 1206.713364][ T6105] ? __pfx___mutex_trylock_common+0x10/0x10 [ 1206.713390][ T6105] ? rcu_is_watching+0x15/0xb0 [ 1206.713423][ T6105] ? trace_contention_end+0x3d/0x140 [ 1206.713448][ T6105] ? __mutex_lock+0x30d/0x1550 [ 1206.713491][ T6105] ? rtnl_newlink+0x8a3/0x1bd0 [ 1206.713523][ T6105] ? __pfx___mutex_lock+0x10/0x10 [ 1206.713564][ T6105] ? ns_capable+0x89/0xe0 [ 1206.713592][ T6105] ? rtnl_link_get_net_capable+0xd3/0x310 [ 1206.713628][ T6105] rtnl_newlink+0x15c2/0x1bd0 [ 1206.713673][ T6105] ? __pfx_rtnl_newlink+0x10/0x10 [ 1206.713700][ T6105] ? do_syscall_64+0x174/0x580 [ 1206.713728][ T6105] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1206.713793][ T6105] ? kasan_quarantine_put+0xbb/0x1f0 [ 1206.713821][ T6105] ? lockdep_hardirqs_on+0x7a/0x110 [ 1206.713854][ T6105] ? nlmon_xmit+0xb0/0x100 [ 1206.713880][ T6105] ? kmem_cache_free+0x182/0x650 [ 1206.713922][ T6105] ? __lock_acquire+0x683/0x2cf0 [ 1206.713957][ T6105] ? __dev_queue_xmit+0x29b/0x37f0 [ 1206.713983][ T6105] ? __local_bh_enable_ip+0xd0/0x130 [ 1206.714009][ T6105] ? lockdep_hardirqs_on+0x7a/0x110 [ 1206.714036][ T6105] ? __dev_queue_xmit+0x29b/0x37f0 [ 1206.714056][ T6105] ? __local_bh_enable_ip+0xd0/0x130 [ 1206.714080][ T6105] ? __dev_queue_xmit+0x29b/0x37f0 [ 1206.714110][ T6105] ? rtnetlink_rcv_msg+0x1c9/0xc00 [ 1206.714141][ T6105] ? __pfx_rtnl_newlink+0x10/0x10 [ 1206.714184][ T6105] ? __pfx_rtnl_newlink+0x10/0x10 [ 1206.714213][ T6105] rtnetlink_rcv_msg+0x802/0xc00 [ 1206.714253][ T6105] ? rtnetlink_rcv_msg+0x1c9/0xc00 [ 1206.714284][ T6105] ? __pfx_rtnetlink_rcv_msg+0x10/0x10 [ 1206.714312][ T6105] ? ref_tracker_free+0x689/0x830 [ 1206.714343][ T6105] ? __pfx_ref_tracker_free+0x10/0x10 [ 1206.714383][ T6105] netlink_rcv_skb+0x226/0x4a0 [ 1206.714418][ T6105] ? __pfx_rtnetlink_rcv_msg+0x10/0x10 [ 1206.714450][ T6105] ? __pfx_netlink_rcv_skb+0x10/0x10 [ 1206.714498][ T6105] ? netlink_deliver_tap+0x2e/0x1b0 [ 1206.714531][ T6105] ? netlink_deliver_tap+0x2e/0x1b0 [ 1206.714572][ T6105] netlink_unicast+0x7bb/0x940 [ 1206.714616][ T6105] netlink_sendmsg+0x813/0xb40 [ 1206.714661][ T6105] ? __pfx_netlink_sendmsg+0x10/0x10 [ 1206.714700][ T6105] ? aa_sock_msg_perm+0xf1/0x1b0 [ 1206.714730][ T6105] ? __pfx_netlink_sendmsg+0x10/0x10 [ 1206.714764][ T6105] sock_sendmsg_nosec+0x13a/0x180 [ 1206.714794][ T6105] ____sys_sendmsg+0x54e/0x850 [ 1206.714834][ T6105] ? __pfx_____sys_sendmsg+0x10/0x10 [ 1206.714878][ T6105] ? import_iovec+0x73/0xa0 [ 1206.714914][ T6105] ___sys_sendmsg+0x2a5/0x360 [ 1206.714956][ T6105] ? __lock_acquire+0x683/0x2cf0 [ 1206.714991][ T6105] ? __pfx____sys_sendmsg+0x10/0x10 [ 1206.715062][ T6105] ? __fget_files+0x2a/0x420 [ 1206.715089][ T6105] ? __fget_files+0x3a2/0x420 [ 1206.715128][ T6105] __x64_sys_sendmsg+0x1b1/0x290 [ 1206.715163][ T6105] ? __pfx___x64_sys_sendmsg+0x10/0x10 [ 1206.715215][ T6105] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1206.715239][ T6105] do_syscall_64+0x174/0x580 [ 1206.715272][ T6105] ? trace_irq_disable+0x3b/0x140 [ 1206.715300][ T6105] ? clear_bhb_loop+0x40/0x90 [ 1206.715327][ T6105] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1206.715349][ T6105] RIP: 0033:0x7f37f779de59 [ 1206.715370][ T6105] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 1206.715389][ T6105] RSP: 002b:00007f37f85f3028 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 1206.715412][ T6105] RAX: ffffffffffffffda RBX: 00007f37f7a25fa0 RCX: 00007f37f779de59 [ 1206.715428][ T6105] RDX: 0000000000000000 RSI: 0000200000000240 RDI: 0000000000000003 [ 1206.715442][ T6105] RBP: 00007f37f85f3090 R08: 0000000000000000 R09: 0000000000000000 [ 1206.715456][ T6105] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000002 [ 1206.715469][ T6105] R13: 00007f37f7a26038 R14: 00007f37f7a25fa0 R15: 00007ffc11070118 [ 1206.715505][ T6105] [ 1207.342158][ T6105] bridge_slave_1: failed to offload ageing time [ 1207.348649][ T6105] bridge0: port 2(bridge_slave_1) entered forwarding state [ 1207.356166][ T6105] bridge0: port 1(bridge_slave_0) entered blocking state [ 1207.363379][ T6105] bridge0: port 1(bridge_slave_0) entered forwarding state [ 1207.465624][ T6105] netlink: 52 bytes leftover after parsing attributes in process `syz.7.10836'. [ 1207.475379][ T6105] bridge0: port 2(bridge_slave_1) entered disabled state [ 1207.495748][ T6105] bridge0: port 1(bridge_slave_0) entered disabled state [ 1207.822179][ T6119] mapping of prio or/and queue is allowed only from OUTPUT/FORWARD/POSTROUTING chains [ 1207.997930][ T6127] netlink: 44 bytes leftover after parsing attributes in process `syz.7.10843'. [ 1208.271012][ T6143] netlink: 'syz.5.10846': attribute type 8 has an invalid length. [ 1208.407787][ T6148] syzkaller0: entered promiscuous mode [ 1208.413331][ T6148] syzkaller0: entered allmulticast mode [ 1208.934713][ T6163] netlink: 108 bytes leftover after parsing attributes in process `syz.3.10852'. [ 1208.990129][ T6169] netlink: 12 bytes leftover after parsing attributes in process `syz.5.10854'. [ 1209.334131][ T6181] netlink: 'syz.5.10859': attribute type 4 has an invalid length. [ 1209.378165][ T6181] netlink: 'syz.5.10859': attribute type 4 has an invalid length. [ 1209.421619][ T6182] ip6tnl1: entered promiscuous mode [ 1209.825659][ T6207] lo speed is unknown, defaulting to 1000 [ 1209.831538][ T6207] lo speed is unknown, defaulting to 1000 [ 1209.838157][ T6207] lo speed is unknown, defaulting to 1000 [ 1209.845035][ T6207] smbdirect: ib_dev[syú2]: added: RNIC max_fast_reg_page_list_len=256 device_cap_flags=0x200000 kernel_cap_flags=0x10 page_size_cap=0x1000 [ 1209.932779][ T6210] ±ÿª¨úrBº“: renamed from lo (while UP) [ 1209.971419][ T6207] smbdirect: ib_dev[syú2]: num_ports=1 max_qp_rd_atom=128 max_qp_init_rd_atom=128 max_sgl_rd=0 max_sge_rd=1 max_cqe=3276800 max_qp_wr=32768 max_send_sge=6 max_recv_sge=6 [ 1210.007309][ T6207] smbdirect: ib_dev[syú2]PORT[1]: iwarp=1 ib=0 roce=0 v1=0 v2=0 core_cap_flags=0x400008 [ 1210.048060][ T6214] netlink: 8 bytes leftover after parsing attributes in process `syz.9.10869'. [ 1210.077441][ T6214] 8021q: adding VLAN 0 to HW filter on device ipvlan3 [ 1210.157936][ T6207] infiniband syú2: RDMA CMA: cma_listen_on_dev, error -98 [ 1210.204481][ T6207] ±ÿª¨úrBº“ speed is unknown, defaulting to 1000 [ 1210.212724][ T6221] Bluetooth: MGMT ver 1.23 [ 1210.214600][ T6207] ±ÿª¨úrBº“ speed is unknown, defaulting to 1000 [ 1210.225864][ T6207] ±ÿª¨úrBº“ speed is unknown, defaulting to 1000 [ 1210.234192][ T6207] ±ÿª¨úrBº“ speed is unknown, defaulting to 1000 [ 1210.322467][ T6207] ±ÿª¨úrBº“ speed is unknown, defaulting to 1000 [ 1210.330988][ T6207] ±ÿª¨úrBº“ speed is unknown, defaulting to 1000 [ 1210.339454][ T6207] ±ÿª¨úrBº“ speed is unknown, defaulting to 1000 [ 1210.367664][ T6207] ±ÿª¨úrBº“ speed is unknown, defaulting to 1000 [ 1210.404658][ T6207] ±ÿª¨úrBº“ speed is unknown, defaulting to 1000 [ 1210.413080][ T6207] ±ÿª¨úrBº“ speed is unknown, defaulting to 1000 [ 1210.421526][ T6207] ±ÿª¨úrBº“ speed is unknown, defaulting to 1000 [ 1210.429944][ T6207] ±ÿª¨úrBº“ speed is unknown, defaulting to 1000 [ 1210.438370][ T6207] ±ÿª¨úrBº“ speed is unknown, defaulting to 1000 [ 1210.672028][ T6230] netlink: 52 bytes leftover after parsing attributes in process `syz.9.10873'. [ 1210.753838][ T6230] netlink: 76 bytes leftover after parsing attributes in process `syz.9.10873'. [ 1210.794186][ T6230] netlink: 52 bytes leftover after parsing attributes in process `syz.9.10873'. [ 1210.817416][ C1] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1210.817806][ C1] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1210.818184][ C1] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1210.818527][ C1] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1210.885681][ T6236] netlink: 'syz.7.10877': attribute type 3 has an invalid length. [ 1210.893569][ T6236] netlink: 'syz.7.10877': attribute type 4 has an invalid length. [ 1210.901429][ T6236] netlink: 'syz.7.10877': attribute type 3 has an invalid length. [ 1210.966638][ T6241] netlink: 112 bytes leftover after parsing attributes in process `syz.3.10879'. [ 1211.113387][ T6248] netlink: 8 bytes leftover after parsing attributes in process `syz.3.10881'. [ 1211.133386][ T6252] netlink: 8 bytes leftover after parsing attributes in process `syz.5.10880'. [ 1211.169789][ T6248] 8021q: adding VLAN 0 to HW filter on device ipvlan2 [ 1211.424255][ T6262] netlink: 12 bytes leftover after parsing attributes in process `syz.0.10883'. [ 1211.516100][ T6272] syzkaller0: entered promiscuous mode [ 1211.521648][ T6272] syzkaller0: entered allmulticast mode [ 1211.873843][ T4699] block nbd4: Receive control failed (result -107) [ 1211.880163][ T6282] pim6reg1: entered promiscuous mode [ 1211.886539][ T6282] pim6reg1: entered allmulticast mode [ 1212.111190][ T6272] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 1212.263741][ T6292] bridge0: port 3(syz_tun) entered blocking state [ 1212.283555][ T6292] bridge0: port 3(syz_tun) entered forwarding state [ 1212.290556][ T6292] bridge0: port 2(bridge_slave_1) entered blocking state [ 1212.297751][ T6292] bridge0: port 2(bridge_slave_1) entered forwarding state [ 1212.305177][ T6292] bridge0: port 1(bridge_slave_0) entered blocking state [ 1212.312320][ T6292] bridge0: port 1(bridge_slave_0) entered forwarding state [ 1212.349228][ T6295] netlink: 52 bytes leftover after parsing attributes in process `syz.5.10893'. [ 1212.373980][ T6292] 8021q: adding VLAN 0 to HW filter on device bond1 [ 1212.447784][ T6292] 8021q: adding VLAN 0 to HW filter on device bond2 [ 1212.485762][ T6292] 8021q: adding VLAN 0 to HW filter on device bond4 [ 1212.518158][ T6298] netlink: 76 bytes leftover after parsing attributes in process `syz.5.10893'. [ 1212.531635][ T6292] 8021q: adding VLAN 0 to HW filter on device bond5 [ 1212.652338][ T48] ip6_tunnel: ip6tnl1 xmit: Local address not yet configured! [ 1212.662670][ T791] gretap2: entered promiscuous mode [ 1212.673673][ T3477] netdevsim netdevsim0 netdevsim1: set [0, 0] type 1 family 0 port 8472 - 0 [ 1212.692464][ T3477] netdevsim netdevsim0 netdevsim2: set [0, 0] type 1 family 0 port 8472 - 0 [ 1212.704954][ T3477] netdevsim netdevsim0 netdevsim3: set [0, 0] type 1 family 0 port 8472 - 0 [ 1212.992672][ T6315] netdevsim netdevsim3 netdevsim0: entered allmulticast mode [ 1213.254642][ T6328] 8021q: adding VLAN 0 to HW filter on device ipvlan4 [ 1213.363873][ T6330] netlink: 'syz.9.10903': attribute type 1 has an invalid length. [ 1213.493712][ T3285] vlan3: left allmulticast mode [ 1213.498649][ T3285] geneve0: left allmulticast mode [ 1213.522632][ T3285] vlan3: left promiscuous mode [ 1213.527474][ T3285] geneve0: left promiscuous mode [ 1213.532908][ T3285] bridge0: port 4(vlan3) entered disabled state [ 1213.541905][ T3285] batadv1: left allmulticast mode [ 1213.547063][ T3285] batadv1: left promiscuous mode [ 1213.552265][ T3285] bridge0: port 3(batadv1) entered disabled state [ 1213.588966][ T3285] bridge_slave_1: left allmulticast mode [ 1213.594718][ T3285] bridge_slave_1: left promiscuous mode [ 1213.600490][ T3285] bridge0: port 2(bridge_slave_1) entered disabled state [ 1213.610564][ T3285] bridge_slave_0: left allmulticast mode [ 1213.658512][ T3285] bridge_slave_0: left promiscuous mode [ 1213.664435][ T3285] bridge0: port 1(bridge_slave_0) entered disabled state [ 1213.672516][ T6340] netlink: 'syz.3.10907': attribute type 4 has an invalid length. [ 1213.703257][ T3285] dvmrp0: left allmulticast mode [ 1213.708403][ T3285] dvmrp8: left allmulticast mode [ 1213.801969][ T6341] netlink: 'syz.3.10907': attribute type 4 has an invalid length. [ 1213.994421][ T3285] bond1 (unregistering): (slave gretap2): Releasing active interface [ 1214.096815][ T3285] bond3 (unregistering): (slave bridge5): Releasing active interface [ 1214.258737][ T3285] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 1214.269136][ T3285] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 1214.278681][ T3285] bond0 (unregistering): Released all slaves [ 1214.289601][ T3285] bond1 (unregistering): Released all slaves [ 1214.327347][ T3285] bond2 (unregistering): Released all slaves [ 1214.356459][ T3285] bond3 (unregistering): Released all slaves [ 1214.372743][ T3285] bond4 (unregistering): (slave veth0_to_bond): Releasing active interface [ 1214.382567][ T3285] bond4 (unregistering): Released all slaves [ 1214.727620][ T6356] mapping of prio or/and queue is allowed only from OUTPUT/FORWARD/POSTROUTING chains [ 1215.006454][ T3285] IPVS: stopping backup sync thread 24698 ... [ 1216.170850][ T6320] nci: __nci_request: wait_for_completion_interruptible_timeout failed -512 [ 1216.377482][ T6366] __nla_validate_parse: 6 callbacks suppressed [ 1216.377505][ T6366] netlink: 232 bytes leftover after parsing attributes in process `syz.5.10916'. [ 1216.604574][ T6373] netlink: 52 bytes leftover after parsing attributes in process `syz.3.10920'. [ 1216.625197][ T6377] netlink: 'syz.9.10918': attribute type 1 has an invalid length. [ 1216.746108][ T6373] netlink: 76 bytes leftover after parsing attributes in process `syz.3.10920'. [ 1216.768207][ C0] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1216.768603][ C0] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1216.768952][ C0] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1216.769296][ C0] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1216.937286][ C1] ip6_tunnel: ip6tnl1 xmit: Local address not yet configured! [ 1216.957940][ T6377] netlink: 28 bytes leftover after parsing attributes in process `syz.9.10918'. [ 1216.971613][ T6387] bond2: (slave gretap2): making interface the new active one [ 1217.047955][ T6387] bond2: (slave gretap2): Enslaving as an active interface with an up link [ 1217.089091][ T6368] 8021q: adding VLAN 0 to HW filter on device bond3 [ 1217.159637][ T6368] bond2: (slave bond3): Enslaving as a backup interface with an up link [ 1217.168470][ T6373] bridge0: port 2(bridge_slave_1) entered blocking state [ 1217.175669][ T6373] bridge0: port 2(bridge_slave_1) entered listening state [ 1217.183081][ T6373] bridge0: port 1(bridge_slave_0) entered blocking state [ 1217.190245][ T6373] bridge0: port 1(bridge_slave_0) entered listening state [ 1217.199257][ T6373] netlink: 52 bytes leftover after parsing attributes in process `syz.3.10920'. [ 1217.245312][ T6373] bridge0: port 2(bridge_slave_1) entered disabled state [ 1217.252632][ T6373] bridge0: port 1(bridge_slave_0) entered disabled state [ 1217.268147][ T6377] 8021q: adding VLAN 0 to HW filter on device bond2 [ 1217.284750][ T6395] netlink: 'syz.0.10925': attribute type 12 has an invalid length. [ 1217.866248][ T6425] netlink: 16 bytes leftover after parsing attributes in process `syz.5.10938'. [ 1218.313493][ T6451] netlink: 'syz.0.10947': attribute type 4 has an invalid length. [ 1218.330554][ T6447] netlink: 52 bytes leftover after parsing attributes in process `syz.7.10948'. [ 1218.339933][ T6451] netlink: 'syz.0.10947': attribute type 4 has an invalid length. [ 1218.515140][ T6454] netlink: 12 bytes leftover after parsing attributes in process `syz.9.10949'. [ 1218.524771][ T6454] netlink: 'syz.9.10949': attribute type 1 has an invalid length. [ 1218.533658][ T6454] netlink: 'syz.9.10949': attribute type 1 has an invalid length. [ 1218.541521][ T6454] netlink: 'syz.9.10949': attribute type 2 has an invalid length. [ 1218.549356][ T6454] netlink: 68 bytes leftover after parsing attributes in process `syz.9.10949'. [ 1218.728664][ T6462] netlink: 44 bytes leftover after parsing attributes in process `syz.0.10954'. [ 1218.893132][ T3285] hsr_slave_0: left promiscuous mode [ 1218.912056][ T3285] hsr_slave_1: left promiscuous mode [ 1219.675165][ T3285] team0 (unregistering): Port device team_slave_1 removed [ 1220.116941][ T6507] mapping of prio or/and queue is allowed only from OUTPUT/FORWARD/POSTROUTING chains [ 1220.517442][ T6529] bridge0: port 2(bridge_slave_1) entered blocking state [ 1220.524672][ T6529] bridge0: port 2(bridge_slave_1) entered forwarding state [ 1220.532235][ T6529] bridge0: port 1(bridge_slave_0) entered blocking state [ 1220.539403][ T6529] bridge0: port 1(bridge_slave_0) entered forwarding state [ 1220.564348][ T6529] bridge0: port 2(bridge_slave_1) entered disabled state [ 1220.584366][ T6529] bridge0: port 1(bridge_slave_0) entered disabled state [ 1220.727239][ T6540] netlink: 'syz.7.10975': attribute type 2 has an invalid length. [ 1220.735139][ T6540] netlink: 'syz.7.10975': attribute type 11 has an invalid length. [ 1221.113229][ T6554] netlink: 'syz.5.10980': attribute type 4 has an invalid length. [ 1221.223097][ T6554] netlink: 'syz.5.10980': attribute type 4 has an invalid length. [ 1221.380584][ T6558] block nbd5: Unsupported socket: should be TCP or UNIX. [ 1221.559015][ T6568] __nla_validate_parse: 15 callbacks suppressed [ 1221.559039][ T6568] netlink: 8 bytes leftover after parsing attributes in process `syz.7.10984'. [ 1221.629183][ T6572] netlink: 52 bytes leftover after parsing attributes in process `syz.5.10985'. [ 1221.643963][ T6568] batman_adv: Cannot find parent device. Skipping batadv-on-batadv check for gretap3 [ 1221.762020][ T6576] syzkaller0: entered promiscuous mode [ 1221.767580][ T6576] syzkaller0: entered allmulticast mode [ 1221.793848][ T6572] netlink: 76 bytes leftover after parsing attributes in process `syz.5.10985'. [ 1221.958913][ T6572] netlink: 52 bytes leftover after parsing attributes in process `syz.5.10985'. [ 1222.181894][ T6595] netlink: 4 bytes leftover after parsing attributes in process `syz.5.10993'. [ 1222.498893][ C0] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1222.507479][ C0] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1222.515963][ C0] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1222.524427][ C0] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1222.695247][ T6605] A link change request failed with some changes committed already. Interface geneve0 may have been left with an inconsistent configuration, please check. [ 1222.763136][ T6611] netlink: 92 bytes leftover after parsing attributes in process `syz.9.10995'. [ 1222.905913][ T14] nci: nci_extract_activation_params_nfc_dep: unsupported activation_rf_tech_and_mode 0x6 [ 1223.152612][ T6630] netlink: 'syz.7.11004': attribute type 4 has an invalid length. [ 1223.285808][ T6626] netlink: 'syz.7.11004': attribute type 4 has an invalid length. [ 1223.322272][ T785] ±ÿª¨úrBº“ speed is unknown, defaulting to 1000 [ 1223.384114][ T789] ±ÿª¨úrBº“ speed is unknown, defaulting to 1000 [ 1223.405290][ T6641] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 1223.417257][ T6641] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 1223.479476][ T6643] netlink: 68 bytes leftover after parsing attributes in process `syz.7.11009'. [ 1223.515192][ T6645] netlink: 8 bytes leftover after parsing attributes in process `syz.9.11010'. [ 1224.107667][ T6669] netlink: 'syz.9.11019': attribute type 4 has an invalid length. [ 1224.121895][ T6669] netlink: 'syz.9.11019': attribute type 4 has an invalid length. [ 1224.783060][ T6699] netlink: 'syz.7.11031': attribute type 6 has an invalid length. [ 1225.266724][ T6729] mapping of prio or/and queue is allowed only from OUTPUT/FORWARD/POSTROUTING chains [ 1225.502380][ C1] ip6_tunnel: ip6tnl1 xmit: Local address not yet configured! [ 1225.521885][ T6739] netlink: 60 bytes leftover after parsing attributes in process `syz.3.11044'. [ 1225.622360][ T6746] netlink: 4 bytes leftover after parsing attributes in process `syz.7.11045'. [ 1226.011922][ T6772] mapping of prio or/and queue is allowed only from OUTPUT/FORWARD/POSTROUTING chains [ 1226.316012][ T6780] bond1: option ad_actor_sys_prio: mode dependency failed, not supported in mode balance-xor(2) [ 1226.375341][ T6780] bond1 (unregistering): Released all slaves [ 1226.623613][ T6802] __nla_validate_parse: 5 callbacks suppressed [ 1226.623629][ T6802] netlink: 44 bytes leftover after parsing attributes in process `syz.9.11065'. [ 1227.090790][ T6822] netlink: 'syz.7.11071': attribute type 1 has an invalid length. [ 1227.098721][ T6822] netlink: 224 bytes leftover after parsing attributes in process `syz.7.11071'. [ 1227.148924][ T6822] NCSI netlink: No device for ifindex 0 [ 1227.355750][ T6836] netlink: 44 bytes leftover after parsing attributes in process `syz.0.11076'. [ 1227.370362][ T6838] syzkaller0: entered promiscuous mode [ 1227.376125][ T6838] syzkaller0: entered allmulticast mode [ 1227.617561][ C1] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1227.625989][ C1] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1227.634354][ C1] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1227.642664][ C1] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1227.812074][ T6857] netlink: 8 bytes leftover after parsing attributes in process `syz.9.11082'. [ 1227.891782][ T6859] netlink: 'syz.9.11084': attribute type 4 has an invalid length. [ 1227.909023][ T6859] netlink: 'syz.9.11084': attribute type 4 has an invalid length. [ 1228.117867][ T6866] netlink: 44 bytes leftover after parsing attributes in process `syz.9.11084'. [ 1228.126987][ T6866] netlink: 35 bytes leftover after parsing attributes in process `syz.9.11084'. [ 1228.189844][ T6866] netlink: 'syz.9.11084': attribute type 5 has an invalid length. [ 1228.197736][ T6866] netlink: 'syz.9.11084': attribute type 6 has an invalid length. [ 1228.205581][ T6866] netlink: 35 bytes leftover after parsing attributes in process `syz.9.11084'. [ 1228.243460][ T6872] netlink: 44 bytes leftover after parsing attributes in process `syz.3.11088'. [ 1228.839078][ T6895] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 1228.853900][ T6895] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 1228.957699][ T6899] netlink: 232 bytes leftover after parsing attributes in process `syz.5.11097'. [ 1229.064972][ T6901] nbd: must specify a device to reconfigure [ 1229.104406][ T6904] netlink: 8 bytes leftover after parsing attributes in process `syz.0.11095'. [ 1229.267936][ T6904] bond9: option xmit_hash_policy: invalid value (64) [ 1229.291106][ T6904] bond9 (unregistering): Released all slaves [ 1229.632439][ T6926] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check. [ 1229.634675][ T6928] netlink: 'syz.5.11106': attribute type 2 has an invalid length. [ 1229.655598][ T6928] netlink: 'syz.5.11106': attribute type 2 has an invalid length. [ 1229.663549][ T6928] netlink: 'syz.5.11106': attribute type 2 has an invalid length. [ 1229.671478][ T6928] netlink: 'syz.5.11106': attribute type 2 has an invalid length. [ 1229.698397][ T6928] netlink: 'syz.5.11106': attribute type 2 has an invalid length. [ 1229.706429][ T6928] netlink: 'syz.5.11106': attribute type 2 has an invalid length. [ 1229.714399][ T6928] netlink: 'syz.5.11106': attribute type 2 has an invalid length. [ 1229.722349][ T6928] netlink: 'syz.5.11106': attribute type 2 has an invalid length. [ 1229.730284][ T6928] netlink: 'syz.5.11106': attribute type 2 has an invalid length. [ 1229.738238][ T6928] netlink: 'syz.5.11106': attribute type 2 has an invalid length. [ 1230.087263][ T6939] bond1: (slave bridge1): making interface the new active one [ 1230.095820][ T6939] bond1: (slave bridge1): Enslaving as an active interface with an up link [ 1230.116500][ T6946] Cannot find add_set index 2 as target [ 1230.416916][ T6963] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 1230.436598][ T6963] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 1230.888109][ T6986] team0 (unregistering): Port device team_slave_0 removed [ 1230.901773][ T6986] team0 (unregistering): Port device team_slave_1 removed [ 1231.079680][ T6985] bond5: (slave bridge5): Enslaving as an active interface with an up link [ 1231.198297][ T6999] 8021q: adding VLAN 0 to HW filter on device bond6 [ 1231.228740][ T7001] bond6: (slave gretap4): making interface the new active one [ 1231.247802][ T7001] bond6: (slave gretap4): Enslaving as an active interface with an up link [ 1231.729459][ T7023] bond0: (slave veth0_to_bond): Enslaving as an active interface with an up link [ 1231.813000][ T7034] __nla_validate_parse: 9 callbacks suppressed [ 1231.813022][ T7034] netlink: 8 bytes leftover after parsing attributes in process `syz.5.11140'. [ 1231.985201][ T7041] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 1232.000225][ T7041] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 1232.104937][ T7043] openvswitch: netlink: ERSPAN option length err (len 256, max 255). [ 1232.706402][ T7078] bridge_slave_0: left allmulticast mode [ 1232.712143][ T7078] bridge_slave_0: left promiscuous mode [ 1232.781527][ T7079] netlink: 4 bytes leftover after parsing attributes in process `syz.0.11153'. [ 1232.790844][ T7078] bridge0: port 1(bridge_slave_0) entered disabled state [ 1232.817024][ T7078] bridge_slave_1: left allmulticast mode [ 1232.822758][ T7078] bridge_slave_1: left promiscuous mode [ 1232.828610][ T7078] bridge0: port 2(bridge_slave_1) entered disabled state [ 1232.852927][ T7078] bond0: (slave bond_slave_0): Releasing backup interface [ 1232.868767][ T7084] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 1232.883117][ T7084] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 1232.885173][ T7078] bond0: (slave bond_slave_1): Releasing backup interface [ 1232.942820][ T7078] team0: Port device team_slave_0 removed [ 1232.981812][ T7078] team0: Port device team_slave_1 removed [ 1232.990764][ T7078] A link change request failed with some changes committed already. Interface hsr_slave_0 may have been left with an inconsistent configuration, please check. [ 1233.007095][ T7079] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 1233.085974][ T7079] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 1233.358045][ C1] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1233.366479][ C1] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1233.374806][ C1] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1233.515668][ T7090] netlink: 44 bytes leftover after parsing attributes in process `syz.0.11160'. [ 1233.985390][ T7107] netlink: 8 bytes leftover after parsing attributes in process `syz.9.11167'. [ 1234.150396][ T7111] netlink: 40 bytes leftover after parsing attributes in process `syz.5.11168'. [ 1234.246506][ T7114] tipc: Enabled bearer , priority 10 [ 1234.430933][ T7126] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 1234.446458][ T7126] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 1234.525918][ T7124] 8021q: adding VLAN 0 to HW filter on device bond2 [ 1234.550805][ T7124] bond2: (slave gretap0): making interface the new active one [ 1234.559433][ T7124] bond2: (slave gretap0): Enslaving as an active interface with an up link [ 1234.690965][ T7133] veth0: entered promiscuous mode [ 1234.703108][ T7132] veth0: left promiscuous mode [ 1234.817680][ T7137] sctp: [Deprecated]: syz.9.11179 (pid 7137) Use of struct sctp_assoc_value in delayed_ack socket option. [ 1234.817680][ T7137] Use struct sctp_sack_info instead [ 1234.840631][ T7139] netlink: 8 bytes leftover after parsing attributes in process `syz.3.11181'. [ 1235.161545][ T7149] validate_nla: 66 callbacks suppressed [ 1235.161567][ T7149] netlink: 'syz.5.11184': attribute type 21 has an invalid length. [ 1235.428988][T18722] tipc: Node number set to 2886997039 [ 1235.495637][ T7168] netlink: 16 bytes leftover after parsing attributes in process `syz.0.11189'. [ 1235.653074][ T7173] netlink: 'syz.7.11191': attribute type 4 has an invalid length. [ 1235.670703][ T7180] netlink: 28 bytes leftover after parsing attributes in process `syz.0.11192'. [ 1235.717340][ T7173] netlink: 'syz.7.11191': attribute type 4 has an invalid length. [ 1235.734680][ T7179] syzkaller0: entered promiscuous mode [ 1235.740218][ T7179] syzkaller0: entered allmulticast mode [ 1235.747877][ T785] ±ÿª¨úrBº“ speed is unknown, defaulting to 1000 [ 1235.769611][ T792] ±ÿª¨úrBº“ speed is unknown, defaulting to 1000 [ 1236.169565][ T7193] IPVS: persistence engine module ip_vs_pe_À not found [ 1236.288942][ T7200] netlink: 12 bytes leftover after parsing attributes in process `syz.0.11199'. [ 1236.298092][ T7200] netlink: 'syz.0.11199': attribute type 1 has an invalid length. [ 1236.319720][ T7200] netlink: 'syz.0.11199': attribute type 1 has an invalid length. [ 1236.327612][ T7200] netlink: 'syz.0.11199': attribute type 2 has an invalid length. [ 1236.335461][ T7200] netlink: 68 bytes leftover after parsing attributes in process `syz.0.11199'. [ 1236.821755][ T7211] netlink: 16 bytes leftover after parsing attributes in process `syz.0.11202'. [ 1239.017127][ T1318] aoe: packet could not be sent on ipvlan1. consider increasing tx_queue_len [ 1239.123841][ C1] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1239.132470][ C1] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1239.140836][ C1] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1239.832110][ T7213] netlink: 240 bytes leftover after parsing attributes in process `syz.7.11203'. [ 1239.947296][ T7219] netlink: 'syz.3.11204': attribute type 2 has an invalid length. [ 1239.963405][ T7221] netlink: 'syz.7.11207': attribute type 1 has an invalid length. [ 1240.081456][ T7221] 8021q: adding VLAN 0 to HW filter on device bond7 [ 1240.147027][ T7228] tc_dump_action: action bad kind [ 1240.196720][ T789] IPVS: starting estimator thread 0... [ 1240.259042][ T7235] vlan4: entered promiscuous mode [ 1240.278280][ T7236] IPVS: lblc: FWM 3 0x00000003 - no destination available [ 1240.294033][ T7235] bond7: entered promiscuous mode [ 1240.299465][ T7235] vlan4: entered allmulticast mode [ 1240.323460][ T7235] bond7: entered allmulticast mode [ 1240.422200][ T7235] bond7: (slave bridge6): making interface the new active one [ 1240.454442][ T7235] bridge6: entered promiscuous mode [ 1240.459923][ T7235] bridge6: entered allmulticast mode [ 1240.469031][ T7231] IPVS: using max 28 ests per chain, 67200 per kthread [ 1240.483017][ T7246] netlink: 36 bytes leftover after parsing attributes in process `syz.5.11215'. [ 1240.493016][ T7235] bond7: (slave bridge6): Enslaving as an active interface with an up link [ 1240.762111][ T7250] xt_hashlimit: size too large, truncated to 1048576 [ 1241.065696][ T7258] syzkaller0: entered promiscuous mode [ 1241.071244][ T7258] syzkaller0: entered allmulticast mode [ 1241.317538][ T7265] netlink: 168 bytes leftover after parsing attributes in process `syz.0.11221'. [ 1241.413183][ T7270] netlink: 4 bytes leftover after parsing attributes in process `syz.7.11223'. [ 1241.547533][ T7280] netlink: 8 bytes leftover after parsing attributes in process `syz.3.11226'. [ 1241.652141][ T7280] 8021q: adding VLAN 0 to HW filter on device ipvlan4 [ 1241.744950][ T7285] netlink: 'syz.0.11228': attribute type 3 has an invalid length. [ 1241.976037][ T7296] netlink: 12 bytes leftover after parsing attributes in process `syz.9.11231'. [ 1241.985727][ T7296] netlink: 'syz.9.11231': attribute type 4 has an invalid length. [ 1241.993587][ T7296] netlink: 17 bytes leftover after parsing attributes in process `syz.9.11231'. [ 1242.003260][ T7296] netlink: 12 bytes leftover after parsing attributes in process `syz.9.11231'. [ 1242.039870][ T7293] netlink: 'syz.3.11230': attribute type 2 has an invalid length. [ 1242.144725][ C1] ip6_tunnel: ip6tnl1 xmit: Local address not yet configured! [ 1242.331976][ T7307] netlink: 252 bytes leftover after parsing attributes in process `syz.9.11234'. [ 1242.386654][ T7310] vlan2: entered promiscuous mode [ 1242.392580][ T7310] geneve1: entered promiscuous mode [ 1242.398333][ T7310] vlan2: entered allmulticast mode [ 1242.403716][ T7310] geneve1: entered allmulticast mode [ 1242.410825][ T7307] xt_CHECKSUM: unsupported CHECKSUM operation 68 [ 1242.567343][ T7316] netlink: 8 bytes leftover after parsing attributes in process `syz.0.11237'. [ 1242.630796][ T7321] bond2: option ad_actor_sys_prio: mode dependency failed, not supported in mode balance-xor(2) [ 1242.736920][ T7326] netlink: 'syz.3.11240': attribute type 3 has an invalid length. [ 1242.746461][ T7321] bond2 (unregistering): Released all slaves [ 1242.777658][ T7324] netlink: 'syz.3.11240': attribute type 1 has an invalid length. [ 1242.968542][ T7324] 8021q: adding VLAN 0 to HW filter on device bond3 [ 1243.327548][ T7347] netlink: 8 bytes leftover after parsing attributes in process `syz.0.11241'. [ 1243.336593][ T7347] netlink: 'syz.0.11241': attribute type 10 has an invalid length. [ 1243.352052][ T7347] netlink: 12 bytes leftover after parsing attributes in process `syz.0.11241'. [ 1243.431890][ T7347] geneve2: entered promiscuous mode [ 1243.437223][ T7347] geneve2: entered allmulticast mode [ 1243.445231][ T7344] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check. [ 1243.461003][ T7345] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check. [ 1243.574644][ T7344] netlink: 'syz.3.11245': attribute type 3 has an invalid length. [ 1243.619092][ T7351] netlink: 12 bytes leftover after parsing attributes in process `syz.5.11247'. [ 1243.659158][ T7345] netlink: 60 bytes leftover after parsing attributes in process `syz.3.11245'. [ 1243.792742][ T7364] macsec1: entered promiscuous mode [ 1243.986575][ T7364] netlink: 169 bytes leftover after parsing attributes in process `syz.0.11250'. [ 1244.228275][ T7379] netdevsim netdevsim7: loading /lib/firmware/. failed with error -22 [ 1244.237042][ T7379] netdevsim netdevsim7: Direct firmware load for . failed with error -22 [ 1244.245561][ T7379] netdevsim netdevsim7: Falling back to sysfs fallback for: . [ 1244.281227][ C1] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1244.289865][ C1] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1244.298405][ C1] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1244.306941][ C1] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1244.359393][ T7381] syzkaller0: entered promiscuous mode [ 1244.364969][ T7381] syzkaller0: entered allmulticast mode [ 1244.415327][ T7384] netlink: 'syz.7.11254': attribute type 1 has an invalid length. [ 1244.978315][ T7404] netlink: 'syz.0.11261': attribute type 2 has an invalid length. [ 1245.335326][ T7429] netlink: 'syz.5.11270': attribute type 1 has an invalid length. [ 1245.472396][ T7429] bond2: entered promiscuous mode [ 1245.477899][ T7429] 8021q: adding VLAN 0 to HW filter on device bond2 [ 1245.525155][ T7423] nci: __nci_request: wait_for_completion_interruptible_timeout failed -512 [ 1245.754387][ T7449] 8021q: adding VLAN 0 to HW filter on device ipvlan3 [ 1245.866463][ T7441] netdevsim netdevsim3 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1246.273923][ T7441] netdevsim netdevsim3 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1246.562711][ T7480] 8021q: adding VLAN 0 to HW filter on device ipvlan4 [ 1246.799839][ T7498] xt_hashlimit: invalid interval [ 1247.208935][ T7441] netdevsim netdevsim3 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1247.263431][ T7522] __nla_validate_parse: 7 callbacks suppressed [ 1247.263468][ T7522] netlink: 32 bytes leftover after parsing attributes in process `syz.9.11298'. [ 1247.795469][ T7441] netdevsim netdevsim3 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1247.848930][ T7541] mapping of prio or/and queue is allowed only from OUTPUT/FORWARD/POSTROUTING chains [ 1248.156286][ T7550] netlink: 8 bytes leftover after parsing attributes in process `syz.5.11306'. [ 1248.275074][T30607] netdevsim netdevsim3 eth0: set [1, 0] type 2 family 0 port 6081 - 0 [ 1248.326057][T30607] netdevsim netdevsim3 eth1: set [1, 0] type 2 family 0 port 6081 - 0 [ 1248.340725][ T3477] netdevsim netdevsim3 eth2: set [1, 0] type 2 family 0 port 6081 - 0 [ 1248.533612][ T7565] dvmrp0: entered allmulticast mode [ 1248.568289][ T7569] netlink: 252 bytes leftover after parsing attributes in process `syz.7.11314'. [ 1248.610321][ T3477] netdevsim netdevsim3 eth3: set [1, 0] type 2 family 0 port 6081 - 0 [ 1248.718518][ T7573] netlink: 12 bytes leftover after parsing attributes in process `syz.0.11315'. [ 1248.953560][ T7582] netlink: 76 bytes leftover after parsing attributes in process `syz.9.11319'. [ 1248.967702][ T7582] netlink: 8 bytes leftover after parsing attributes in process `syz.9.11319'. [ 1249.075469][ T7594] RDS: rds_bind could not find a transport for ::ffff:10.1.1.0, load rds_tcp or rds_rdma? [ 1249.099457][ T7584] netlink: 8 bytes leftover after parsing attributes in process `syz.7.11320'. [ 1249.178511][ T7596] netlink: 'syz.3.11323': attribute type 1 has an invalid length. [ 1249.243959][ T7596] 8021q: adding VLAN 0 to HW filter on device bond4 [ 1249.290698][ T1101] bridge_slave_1: left promiscuous mode [ 1249.296560][ T1101] bridge0: port 2(bridge_slave_1) entered disabled state [ 1249.345263][ C0] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1249.353867][ C0] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1249.362366][ C0] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1249.370906][ C0] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1249.854757][ T1101] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 1249.866612][ T1101] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 1249.877597][ T1101] bond0 (unregistering): (slave bond1): Releasing backup interface [ 1249.914959][ T1101] bond0 (unregistering): Released all slaves [ 1249.929001][ T1101] bond1 (unregistering): Released all slaves [ 1249.956240][ T1101] bond2 (unregistering): Released all slaves [ 1250.228799][ T7619] netlink: 16 bytes leftover after parsing attributes in process `syz.7.11328'. [ 1250.583644][ T1101] tipc: Left network mode [ 1250.841263][ T7636] netlink: 252 bytes leftover after parsing attributes in process `syz.3.11335'. [ 1250.912189][ T7638] netlink: 8 bytes leftover after parsing attributes in process `syz.7.11334'. [ 1251.228105][ T7651] syzkaller0: entered promiscuous mode [ 1251.233665][ T7651] syzkaller0: entered allmulticast mode [ 1251.278473][ T7661] xt_TCPMSS: Only works on TCP SYN packets [ 1251.410372][ T7662] netlink: 'syz.9.11342': attribute type 15 has an invalid length. [ 1251.664752][ T1101] hsr_slave_0: left promiscuous mode [ 1251.671195][ T1101] hsr_slave_1: left promiscuous mode [ 1251.677376][ T1101] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 1251.684815][ T1101] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 1251.703597][ T1101] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 1251.711044][ T1101] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 1251.719195][ T7667] openvswitch: netlink: Either Ethernet header or EtherType is required. [ 1251.727476][ T7681] openvswitch: netlink: Missing valid actions attribute. [ 1251.780283][ T1101] veth0_to_team: left promiscuous mode [ 1251.814165][ T7681] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 1251.850640][ T1101] veth1_macvtap: left promiscuous mode [ 1251.856208][ T1101] veth0_macvtap: left promiscuous mode [ 1251.861804][ T1101] veth1_vlan: left promiscuous mode [ 1251.953809][ T7693] mapping of prio or/and queue is allowed only from OUTPUT/FORWARD/POSTROUTING chains [ 1252.329234][ T7700] __nla_validate_parse: 4 callbacks suppressed [ 1252.329257][ T7700] netlink: 8 bytes leftover after parsing attributes in process `syz.5.11352'. [ 1252.717481][ T7696] RDS: rds_bind could not find a transport for fe80::23, load rds_tcp or rds_rdma? [ 1253.136612][ T1101] team0 (unregistering): Port device team_slave_1 removed [ 1253.184575][ T1101] team0 (unregistering): Port device team_slave_0 removed [ 1253.240443][ T7733] netlink: 12 bytes leftover after parsing attributes in process `syz.3.11356'. [ 1253.775934][ T7740] netlink: 'syz.7.11358': attribute type 2 has an invalid length. [ 1253.783845][ T7740] netlink: 12 bytes leftover after parsing attributes in process `syz.7.11358'. [ 1253.996076][ T7753] netlink: 52 bytes leftover after parsing attributes in process `syz.5.11360'. [ 1254.244059][ T7764] mapping of prio or/and queue is allowed only from OUTPUT/FORWARD/POSTROUTING chains [ 1254.355914][ T7766] netlink: 8 bytes leftover after parsing attributes in process `syz.5.11365'. [ 1254.527605][ T7768] netlink: 'syz.7.11364': attribute type 21 has an invalid length. [ 1254.535825][ T7768] netlink: 'syz.7.11364': attribute type 21 has an invalid length. [ 1254.543991][ T7768] netlink: 'syz.7.11364': attribute type 21 has an invalid length. [ 1254.552150][ T7768] netlink: 'syz.7.11364': attribute type 21 has an invalid length. [ 1254.560313][ T7768] netlink: 'syz.7.11364': attribute type 21 has an invalid length. [ 1254.568491][ T7768] netlink: 'syz.7.11364': attribute type 21 has an invalid length. [ 1254.576780][ T7768] netlink: 'syz.7.11364': attribute type 21 has an invalid length. [ 1254.584938][ T7768] netlink: 'syz.7.11364': attribute type 21 has an invalid length. [ 1254.667905][ T7774] netlink: 8 bytes leftover after parsing attributes in process `syz.0.11367'. [ 1254.676938][ T7774] netlink: 12 bytes leftover after parsing attributes in process `syz.0.11367'. [ 1254.686015][ T7774] netlink: 4 bytes leftover after parsing attributes in process `syz.0.11367'. [ 1254.743261][ T7768] netlink: 'syz.7.11364': attribute type 21 has an invalid length. [ 1254.751450][ T7768] netlink: 'syz.7.11364': attribute type 21 has an invalid length. [ 1254.832034][ C1] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1254.840649][ C1] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1254.849208][ C1] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1254.857725][ C1] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1255.120843][ T7783] bridge0: received packet on syz_tun with own address as source address (addr:aa:aa:aa:aa:aa:aa, vlan:0) [ 1255.322892][ T7790] netlink: 8 bytes leftover after parsing attributes in process `syz.0.11367'. [ 1255.331918][ T7790] netlink: 24 bytes leftover after parsing attributes in process `syz.0.11367'. [ 1255.695652][ T7799] openvswitch: netlink: EtherType 0 is less than min 600 [ 1255.939222][ T7784] syzkaller0: entered promiscuous mode [ 1255.944777][ T7784] syzkaller0: entered allmulticast mode [ 1256.805785][T18722] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1256.880605][T30607] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1256.899072][T30607] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1256.908094][T18722] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1259.980019][ T795] net_ratelimit: 8 callbacks suppressed [ 1259.980059][ T795] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1259.993825][ T795] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1260.175913][ C1] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1260.187779][ C1] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1260.819896][ T1101] IPVS: stop unused estimator thread 0... [ 1260.826320][ T7831] __nla_validate_parse: 5 callbacks suppressed [ 1260.826340][ T7831] netlink: 32 bytes leftover after parsing attributes in process `syz.5.11374'. [ 1260.841690][ T7831] netlink: 32 bytes leftover after parsing attributes in process `syz.5.11374'. [ 1260.885507][ C0] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1260.894058][ C0] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1260.902569][ C0] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1260.911145][ C0] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1261.102665][ T7884] netlink: 24 bytes leftover after parsing attributes in process `syz.5.11383'. [ 1261.132913][T18722] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1261.433574][ T7899] tipc: Enabled bearer , priority 11 [ 1261.557209][ T7905] sctp: [Deprecated]: syz.9.11387 (pid 7905) Use of struct sctp_assoc_value in delayed_ack socket option. [ 1261.557209][ T7905] Use struct sctp_sack_info instead [ 1261.947966][ T7919] netlink: 8 bytes leftover after parsing attributes in process `syz.9.11391'. [ 1262.272617][T18722] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1262.298300][ T7936] netlink: 4 bytes leftover after parsing attributes in process `syz.3.11395'. [ 1262.421904][ T7939] netlink: 40 bytes leftover after parsing attributes in process `syz.7.11396'. [ 1263.024664][T29008] Bluetooth: hci1: command 0x0401 tx timeout [ 1263.049924][ T7963] netlink: 8 bytes leftover after parsing attributes in process `syz.7.11402'. [ 1263.297767][ T7974] validate_nla: 56 callbacks suppressed [ 1263.297789][ T7974] netlink: 'syz.0.11404': attribute type 4 has an invalid length. [ 1263.532085][ T7983] netlink: 4 bytes leftover after parsing attributes in process `syz.9.11409'. [ 1263.541132][ T7983] netlink: 4 bytes leftover after parsing attributes in process `syz.9.11409'. [ 1263.608798][ T7981] sctp: [Deprecated]: syz.5.11406 (pid 7981) Use of int in max_burst socket option. [ 1263.608798][ T7981] Use struct sctp_assoc_value instead [ 1263.632868][ T7981] sctp: [Deprecated]: syz.5.11406 (pid 7981) Use of int in max_burst socket option. [ 1263.632868][ T7981] Use struct sctp_assoc_value instead [ 1263.642995][ T7994] xt_hashlimit: invalid rate [ 1264.577058][ T8041] FAULT_INJECTION: forcing a failure. [ 1264.577058][ T8041] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 1264.590185][ T8041] CPU: 1 UID: 0 PID: 8041 Comm: syz.9.11418 Not tainted syzkaller #0 PREEMPT(full) [ 1264.590215][ T8041] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/09/2026 [ 1264.590229][ T8041] Call Trace: [ 1264.590240][ T8041] [ 1264.590249][ T8041] dump_stack_lvl+0xe8/0x150 [ 1264.590288][ T8041] should_fail_ex+0x40c/0x560 [ 1264.590320][ T8041] _copy_from_user+0x2d/0xb0 [ 1264.590354][ T8041] ___sys_sendmsg+0x1c6/0x360 [ 1264.590386][ T8041] ? __lock_acquire+0x683/0x2cf0 [ 1264.590421][ T8041] ? __pfx____sys_sendmsg+0x10/0x10 [ 1264.590490][ T8041] ? __fget_files+0x2a/0x420 [ 1264.590518][ T8041] ? __fget_files+0x3a2/0x420 [ 1264.590557][ T8041] __x64_sys_sendmsg+0x1b1/0x290 [ 1264.590591][ T8041] ? __pfx___x64_sys_sendmsg+0x10/0x10 [ 1264.590643][ T8041] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1264.590669][ T8041] do_syscall_64+0x174/0x580 [ 1264.590697][ T8041] ? trace_irq_disable+0x3b/0x140 [ 1264.590724][ T8041] ? clear_bhb_loop+0x40/0x90 [ 1264.590751][ T8041] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1264.590773][ T8041] RIP: 0033:0x7fd9a159de59 [ 1264.590795][ T8041] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 1264.590815][ T8041] RSP: 002b:00007fd9a24db028 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 1264.590838][ T8041] RAX: ffffffffffffffda RBX: 00007fd9a1825fa0 RCX: 00007fd9a159de59 [ 1264.590855][ T8041] RDX: 0000000000048004 RSI: 0000200000000340 RDI: 0000000000000003 [ 1264.590870][ T8041] RBP: 00007fd9a24db090 R08: 0000000000000000 R09: 0000000000000000 [ 1264.590885][ T8041] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 1264.590897][ T8041] R13: 00007fd9a1826038 R14: 00007fd9a1825fa0 R15: 00007ffd0e91fa58 [ 1264.590929][ T8041] [ 1265.056017][ T8054] xt_NFQUEUE: number of queues (62232) out of range (got 67565) [ 1265.479281][ T8076] netlink: 12 bytes leftover after parsing attributes in process `syz.0.11427'. [ 1265.519295][ T8081] netlink: 'syz.3.11429': attribute type 1 has an invalid length. [ 1265.599917][T18722] net_ratelimit: 14 callbacks suppressed [ 1265.599938][T18722] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1265.735366][ T789] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1266.064825][T29008] Bluetooth: hci1: command 0x0401 tx timeout [ 1266.074018][ T8097] netlink: 12 bytes leftover after parsing attributes in process `syz.9.11434'. [ 1266.608484][ C1] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1266.617143][ C1] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1266.625743][ C1] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1266.634296][ C1] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1266.809846][T30502] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1267.016817][ T8139] netlink: 'syz.3.11448': attribute type 21 has an invalid length. [ 1267.078539][ T8139] netlink: 132 bytes leftover after parsing attributes in process `syz.3.11448'. [ 1267.325191][ T8157] netlink: 20 bytes leftover after parsing attributes in process `syz.0.11454'. [ 1267.689934][ T8169] netlink: 52 bytes leftover after parsing attributes in process `syz.0.11457'. [ 1267.699456][ T8169] netlink: 52 bytes leftover after parsing attributes in process `syz.0.11457'. [ 1267.800728][ T8171] netlink: 8 bytes leftover after parsing attributes in process `syz.7.11458'. [ 1267.860779][ T8171] netlink: 'syz.7.11458': attribute type 1 has an invalid length. [ 1267.868675][ T8171] netlink: 'syz.7.11458': attribute type 2 has an invalid length. [ 1267.914368][T18722] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1267.971349][ T8186] netlink: 8 bytes leftover after parsing attributes in process `syz.9.11463'. [ 1267.992672][ T8186] 8021q: adding VLAN 0 to HW filter on device macsec1 [ 1267.999944][ T5827] netdevsim netdevsim9 netdevsim0: entered promiscuous mode [ 1268.059138][ T8182] netlink: 'syz.3.11461': attribute type 1 has an invalid length. [ 1268.098116][ T8182] 8021q: adding VLAN 0 to HW filter on device bond5 [ 1268.111042][ T8182] netlink: 'syz.3.11461': attribute type 10 has an invalid length. [ 1268.119015][ T8182] netlink: 40 bytes leftover after parsing attributes in process `syz.3.11461'. [ 1268.133851][ T8189] netlink: 4 bytes leftover after parsing attributes in process `syz.7.11464'. [ 1268.198730][ T8182] dummy0: entered promiscuous mode [ 1268.402037][ T792] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1268.431704][ T8203] netlink: 64 bytes leftover after parsing attributes in process `syz.9.11470'. [ 1268.631305][ T8220] netlink: 'syz.0.11471': attribute type 15 has an invalid length. [ 1268.749012][ T8225] IPv6: RTM_NEWROUTE with no NLM_F_CREATE or NLM_F_REPLACE [ 1268.756308][ T8225] IPv6: NLM_F_CREATE should be set when creating new route [ 1268.763584][ T8225] IPv6: NLM_F_CREATE should be set when creating new route [ 1268.795345][ T8218] syzkaller0: entered promiscuous mode [ 1268.800896][ T8218] syzkaller0: entered allmulticast mode [ 1268.840050][ T792] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1271.404806][T18722] net_ratelimit: 2 callbacks suppressed [ 1271.404829][T18722] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1271.896401][ T791] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1272.518398][ C0] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1272.526996][ C0] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1272.535455][ C0] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1272.543915][ C0] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1272.557204][T18722] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1273.160004][ T8249] __nla_validate_parse: 1 callbacks suppressed [ 1273.160021][ T8249] netlink: 8 bytes leftover after parsing attributes in process `syz.5.11481'. [ 1273.567068][ T8264] sctp: [Deprecated]: syz.7.11484 (pid 8264) Use of int in maxseg socket option. [ 1273.567068][ T8264] Use struct sctp_assoc_value instead [ 1273.747632][T18722] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1273.896534][ T8287] netlink: 20 bytes leftover after parsing attributes in process `syz.0.11489'. [ 1274.777346][ C1] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1274.788012][ C1] ip6_tunnel: ip6tnl1 xmit: Local address not yet configured! [ 1274.876633][T30502] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1274.915434][ T8318] netdevsim netdevsim7: Firmware load for './file0/file0/..' refused, path contains '..' component [ 1275.266184][ T8321] netlink: 8 bytes leftover after parsing attributes in process `syz.7.11497'. [ 1275.306451][ T8320] netlink: 8 bytes leftover after parsing attributes in process `syz.9.11496'. [ 1275.413893][ T8339] netlink: 'syz.9.11502': attribute type 4 has an invalid length. [ 1275.416182][ T8337] geneve3: entered promiscuous mode [ 1275.421778][ T8339] netlink: 240 bytes leftover after parsing attributes in process `syz.9.11502'. [ 1275.427020][ T8337] geneve3: entered allmulticast mode [ 1275.443121][ T8339] IPVS: set_ctl: invalid protocol: 44 100.1.1.128:20001 [ 1275.536358][ T1101] netdevsim netdevsim0 netdevsim1: set [1, 1] type 2 family 0 port 19999 - 0 [ 1275.546689][ T1101] netdevsim netdevsim0 netdevsim2: set [1, 1] type 2 family 0 port 19999 - 0 [ 1275.625752][ T1101] netdevsim netdevsim0 netdevsim3: set [1, 1] type 2 family 0 port 19999 - 0 [ 1275.724725][ T8349] xt_CT: You must specify a L4 protocol and not use inversions on it [ 1276.277958][ T8381] netlink: 8 bytes leftover after parsing attributes in process `syz.9.11515'. [ 1276.328356][ T8383] netlink: 256 bytes leftover after parsing attributes in process `syz.7.11514'. [ 1276.392126][ T8381] netlink: 12 bytes leftover after parsing attributes in process `syz.9.11515'. [ 1276.561138][ T8398] netlink: 28 bytes leftover after parsing attributes in process `syz.7.11519'. [ 1276.723202][ T8402] netlink: 'syz.3.11522': attribute type 4 has an invalid length. [ 1276.749959][ T8402] netlink: 'syz.3.11522': attribute type 4 has an invalid length. [ 1277.229408][T30502] net_ratelimit: 7 callbacks suppressed [ 1277.229429][T30502] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1277.243419][T30502] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1277.329056][ T8438] netlink: 'syz.3.11533': attribute type 1 has an invalid length. [ 1277.337070][ T8438] netlink: 232 bytes leftover after parsing attributes in process `syz.3.11533'. [ 1277.346230][ T8438] netlink: 'syz.3.11533': attribute type 1 has an invalid length. [ 1277.480358][ C1] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1277.488978][ C1] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1277.497509][ C1] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1277.506035][ C1] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1277.572036][ T8447] openvswitch: netlink: nsh attribute has 4 unknown bytes. [ 1277.715357][ T8451] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 1277.726510][ T8451] hsr_slave_0: hsr_addr_subst_dest: Unknown node [ 1277.733136][ T8451] hsr_slave_1: hsr_addr_subst_dest: Unknown node [ 1277.956497][ T8471] netlink: 'syz.0.11544': attribute type 21 has an invalid length. [ 1278.532613][ T8489] __nla_validate_parse: 7 callbacks suppressed [ 1278.532635][ T8489] netlink: 8 bytes leftover after parsing attributes in process `syz.0.11551'. [ 1278.582072][ T8489] netlink: 8 bytes leftover after parsing attributes in process `syz.0.11551'. [ 1278.637590][ T8496] netlink: 'syz.0.11551': attribute type 1 has an invalid length. [ 1278.645568][ T8496] netlink: 15386 bytes leftover after parsing attributes in process `syz.0.11551'. [ 1278.646731][ T8495] netlink: 28 bytes leftover after parsing attributes in process `syz.5.11553'. [ 1278.745616][ T8491] netlink: 'syz.7.11550': attribute type 83 has an invalid length. [ 1279.080202][ T8510] netlink: 44 bytes leftover after parsing attributes in process `syz.5.11558'. [ 1279.110107][ T8514] mapping of prio or/and queue is allowed only from OUTPUT/FORWARD/POSTROUTING chains [ 1279.233547][ T8519] netlink: 'syz.5.11562': attribute type 11 has an invalid length. [ 1279.435347][ T8519] batman_adv: Cannot find parent device. Skipping batadv-on-batadv check for gretap2 [ 1279.451134][ T8527] netlink: 8 bytes leftover after parsing attributes in process `syz.9.11563'. [ 1279.870967][ T8547] netlink: 44 bytes leftover after parsing attributes in process `syz.9.11572'. [ 1280.011907][ T8554] mapping of prio or/and queue is allowed only from OUTPUT/FORWARD/POSTROUTING chains [ 1280.461460][ T8567] netdevsim netdevsim5 netdevsim0: entered promiscuous mode [ 1280.542211][ T8564] netlink: 4 bytes leftover after parsing attributes in process `syz.7.11578'. [ 1280.551240][ T8564] netlink: 4 bytes leftover after parsing attributes in process `syz.7.11578'. [ 1280.560281][ T8564] netlink: 4 bytes leftover after parsing attributes in process `syz.7.11578'. [ 1281.311080][ T8586] mapping of prio or/and queue is allowed only from OUTPUT/FORWARD/POSTROUTING chains [ 1281.374028][T29008] Bluetooth: hci2: unexpected cc 0x0c03 length: 249 > 1 [ 1281.427505][T29008] Bluetooth: hci2: unexpected cc 0x1003 length: 249 > 9 [ 1281.455354][T29008] Bluetooth: hci2: unexpected cc 0x1001 length: 249 > 9 [ 1281.627184][T29008] Bluetooth: hci2: unexpected cc 0x0c23 length: 249 > 4 [ 1281.685403][T29008] Bluetooth: hci2: unexpected cc 0x0c38 length: 249 > 2 [ 1281.759545][ T8595] netlink: 'syz.0.11589': attribute type 1 has an invalid length. [ 1281.856855][ T8595] 8021q: adding VLAN 0 to HW filter on device bond9 [ 1281.893832][ T8595] bond9: (slave gretap3): making interface the new active one [ 1281.903020][ T8595] bond9: (slave gretap3): Enslaving as an active interface with an up link [ 1282.205895][ T8616] net_ratelimit: 16 callbacks suppressed [ 1282.205914][ T8616] bridge0: received packet on syz_tun with own address as source address (addr:aa:aa:aa:aa:aa:aa, vlan:0) [ 1282.470736][ T8588] lo speed is unknown, defaulting to 1000 [ 1282.480683][ T8588] ±ÿª¨úrBº“ speed is unknown, defaulting to 1000 [ 1282.530119][ T789] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1282.650887][ T8634] gre2: entered promiscuous mode [ 1282.655914][ T8634] gre2: entered allmulticast mode [ 1282.884544][ T5827] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1282.892898][ T5827] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1283.118133][ T8656] syzkaller0: entered promiscuous mode [ 1283.123720][ T8656] syzkaller0: entered allmulticast mode [ 1283.313304][ C0] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1283.321916][ C0] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1283.330423][ C0] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1283.338898][ C0] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1283.465949][ T8588] bridge0: port 1(bridge_slave_0) entered blocking state [ 1283.473450][ T8588] bridge0: port 1(bridge_slave_0) entered disabled state [ 1283.480801][ T8588] bridge_slave_0: entered allmulticast mode [ 1283.488873][ T8588] bridge_slave_0: entered promiscuous mode [ 1283.498489][ T8588] bridge0: port 2(bridge_slave_1) entered blocking state [ 1283.505669][ T8588] bridge0: port 2(bridge_slave_1) entered disabled state [ 1283.513038][ T8588] bridge_slave_1: entered allmulticast mode [ 1283.523911][ T8588] bridge_slave_1: entered promiscuous mode [ 1283.600429][ T8588] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 1283.613475][ T8588] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 1283.660845][ T4699] Bluetooth: hci2: command tx timeout [ 1283.732012][ T8588] team0: Port device team_slave_0 added [ 1283.741142][ T8588] team0: Port device team_slave_1 added [ 1283.777846][ T8676] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 1283.790181][ T8676] x_tables: ip_tables: TPROXY target: used from hooks FORWARD, but only usable from PREROUTING [ 1283.852781][ T8588] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 1283.866185][ T8679] __nla_validate_parse: 2 callbacks suppressed [ 1283.866204][ T8679] netlink: 252 bytes leftover after parsing attributes in process `syz.0.11604'. [ 1283.918101][T30502] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1283.950006][ T8588] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 1283.975964][ T8588] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 1284.045306][ T8588] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 1284.052332][ T8588] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 1284.078279][ T8588] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 1284.323629][ T8588] hsr_slave_0: entered promiscuous mode [ 1284.403973][ T8588] hsr_slave_1: entered promiscuous mode [ 1284.410660][ T8588] debugfs: 'hsr0' already exists in 'hsr' [ 1284.416442][ T8588] Cannot create hsr debugfs directory [ 1284.432207][ T8695] netlink: 44 bytes leftover after parsing attributes in process `syz.9.11611'. [ 1284.771527][ T8700] netlink: 8 bytes leftover after parsing attributes in process `syz.3.11613'. [ 1284.839302][ T8707] IPv6: sit1: Disabled Multicast RS [ 1284.846957][ T8700] netlink: 12 bytes leftover after parsing attributes in process `syz.3.11613'. [ 1284.945380][ T8711] netlink: 252 bytes leftover after parsing attributes in process `syz.0.11617'. [ 1285.185149][ T8716] netlink: 'syz.3.11619': attribute type 1 has an invalid length. [ 1285.194373][ T8716] netlink: 16 bytes leftover after parsing attributes in process `syz.3.11619'. [ 1285.607456][ T8743] syz.9.11629: vmalloc error: size 8589938688, exceeds total pages, mode:0xdc0(GFP_KERNEL|__GFP_ZERO), nodemask=(null),cpuset=/,mems_allowed=0-1 [ 1285.622281][ T8743] CPU: 1 UID: 0 PID: 8743 Comm: syz.9.11629 Not tainted syzkaller #0 PREEMPT(full) [ 1285.622309][ T8743] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/09/2026 [ 1285.622323][ T8743] Call Trace: [ 1285.622333][ T8743] [ 1285.622343][ T8743] dump_stack_lvl+0xe8/0x150 [ 1285.622381][ T8743] warn_alloc+0x24c/0x270 [ 1285.622412][ T8743] ? stack_depot_save_flags+0x33/0x800 [ 1285.622441][ T8743] ? __pfx_warn_alloc+0x10/0x10 [ 1285.622471][ T8743] ? kasan_save_track+0x3e/0x80 [ 1285.622497][ T8743] ? __kasan_kmalloc+0x93/0xb0 [ 1285.622527][ T8743] ? xsk_setsockopt+0x52a/0x960 [ 1285.622551][ T8743] ? do_sock_setsockopt+0x17c/0x1b0 [ 1285.622580][ T8743] ? __x64_sys_setsockopt+0x13d/0x1b0 [ 1285.622609][ T8743] ? do_syscall_64+0x174/0x580 [ 1285.622637][ T8743] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1285.622670][ T8743] __vmalloc_node_range_noprof+0x12c/0x1730 [ 1285.622729][ T8743] ? __pfx___vmalloc_node_range_noprof+0x10/0x10 [ 1285.622761][ T8743] ? __kasan_kmalloc+0x93/0xb0 [ 1285.622791][ T8743] ? __kmalloc_cache_noprof+0x32d/0x660 [ 1285.622820][ T8743] ? __kmalloc_cache_noprof+0x150/0x660 [ 1285.622852][ T8743] vmalloc_user_noprof+0xad/0xe0 [ 1285.622879][ T8743] ? xskq_create+0xbf/0x170 [ 1285.622913][ T8743] xskq_create+0xbf/0x170 [ 1285.622943][ T8743] xsk_init_queue+0x8a/0xe0 [ 1285.622972][ T8743] xsk_setsockopt+0x52a/0x960 [ 1285.622996][ T8743] ? __fget_files+0x2a/0x420 [ 1285.623026][ T8743] ? __pfx_xsk_setsockopt+0x10/0x10 [ 1285.623052][ T8743] ? __pfx_aa_sk_perm+0x10/0x10 [ 1285.623089][ T8743] ? aa_sock_opt_perm+0xff/0x1a0 [ 1285.623115][ T8743] ? bpf_lsm_socket_setsockopt+0x9/0x20 [ 1285.623137][ T8743] ? __pfx_xsk_setsockopt+0x10/0x10 [ 1285.623165][ T8743] do_sock_setsockopt+0x17c/0x1b0 [ 1285.623201][ T8743] __x64_sys_setsockopt+0x13d/0x1b0 [ 1285.623235][ T8743] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1285.623260][ T8743] do_syscall_64+0x174/0x580 [ 1285.623288][ T8743] ? trace_irq_disable+0x3b/0x140 [ 1285.623316][ T8743] ? clear_bhb_loop+0x40/0x90 [ 1285.623344][ T8743] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1285.623367][ T8743] RIP: 0033:0x7fd9a159de59 [ 1285.623389][ T8743] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 1285.623410][ T8743] RSP: 002b:00007fd9a24db028 EFLAGS: 00000246 ORIG_RAX: 0000000000000036 [ 1285.623432][ T8743] RAX: ffffffffffffffda RBX: 00007fd9a1825fa0 RCX: 00007fd9a159de59 [ 1285.623450][ T8743] RDX: 0000000000000006 RSI: 000000000000011b RDI: 0000000000000005 [ 1285.623464][ T8743] RBP: 00007fd9a1633e6f R08: 0000000000000004 R09: 0000000000000000 [ 1285.623478][ T8743] R10: 0000200000000000 R11: 0000000000000246 R12: 0000000000000000 [ 1285.623493][ T8743] R13: 00007fd9a1826038 R14: 00007fd9a1825fa0 R15: 00007ffd0e91fa58 [ 1285.623529][ T8743] [ 1285.623538][ T8743] Mem-Info: [ 1285.816630][ T4699] Bluetooth: hci2: command tx timeout [ 1285.957621][ T8744] netlink: 'syz.9.11629': attribute type 1 has an invalid length. [ 1285.968804][ T8743] active_anon:7222 inactive_anon:0 isolated_anon:0 [ 1285.968804][ T8743] active_file:17 inactive_file:43969 isolated_file:0 [ 1285.968804][ T8743] unevictable:768 dirty:87 writeback:0 [ 1285.968804][ T8743] slab_reclaimable:13188 slab_unreclaimable:134339 [ 1285.968804][ T8743] mapped:29814 shmem:1308 pagetables:2278 [ 1285.968804][ T8743] sec_pagetables:0 bounce:0 [ 1285.968804][ T8743] kernel_misc_reclaimable:0 [ 1285.968804][ T8743] free:1274146 free_pcp:12141 free_cma:0 [ 1286.082188][ T8743] Node 0 active_anon:28816kB inactive_anon:0kB active_file:68kB inactive_file:175668kB unevictable:1536kB isolated(anon):0kB isolated(file):0kB mapped:119256kB dirty:352kB writeback:0kB shmem:3696kB shmem_thp:0kB shmem_pmdmapped:0kB anon_thp:0kB kernel_stack:17724kB pagetables:8260kB sec_pagetables:0kB all_unreclaimable? no Balloon:0kB gpu_active:0kB gpu_reclaim:0kB [ 1286.163288][ T8743] Node 1 active_anon:0kB inactive_anon:0kB active_file:0kB inactive_file:208kB unevictable:1536kB isolated(anon):0kB isolated(file):0kB mapped:0kB dirty:0kB writeback:0kB shmem:1536kB shmem_thp:0kB shmem_pmdmapped:0kB anon_thp:0kB kernel_stack:64kB pagetables:120kB sec_pagetables:0kB all_unreclaimable? no Balloon:0kB gpu_active:0kB gpu_reclaim:0kB [ 1286.195863][ T8743] Node 0 DMA free:15360kB boost:0kB min:208kB low:260kB high:312kB reserved_highatomic:0KB free_highatomic:0KB active_anon:0kB inactive_anon:0kB active_file:0kB inactive_file:0kB unevictable:0kB writepending:0kB zspages:0kB present:15992kB managed:15360kB mlocked:0kB bounce:0kB free_pcp:0kB local_pcp:0kB free_cma:0kB [ 1286.225724][ T8743] lowmem_reserve[]: 0 2489 2489 2489 2489 [ 1286.301602][ T8744] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 1286.331383][ T8743] Node 0 DMA32 free:1143420kB boost:0kB min:34160kB low:42700kB high:51240kB reserved_highatomic:0KB free_highatomic:0KB active_anon:28816kB inactive_anon:0kB active_file:68kB inactive_file:175668kB unevictable:1536kB writepending:352kB zspages:0kB present:3129332kB managed:2548792kB mlocked:0kB bounce:0kB free_pcp:44856kB local_pcp:20824kB free_cma:0kB [ 1286.364566][ T8743] lowmem_reserve[]: 0 0 0 0 0 [ 1286.421055][ T8743] Node 0 Normal free:0kB boost:0kB min:0kB low:0kB high:0kB reserved_highatomic:0KB free_highatomic:0KB active_anon:0kB inactive_anon:0kB active_file:0kB inactive_file:0kB unevictable:0kB writepending:0kB zspages:0kB present:1048580kB managed:264kB mlocked:0kB bounce:0kB free_pcp:0kB local_pcp:0kB free_cma:0kB [ 1286.451262][ T8743] lowmem_reserve[]: 0 0 0 0 0 [ 1286.456058][ T8743] Node 1 Normal free:3943004kB boost:0kB min:55736kB low:69668kB high:83600kB reserved_highatomic:0KB free_highatomic:0KB active_anon:0kB inactive_anon:0kB active_file:0kB inactive_file:208kB unevictable:1536kB writepending:0kB zspages:0kB present:4194300kB managed:4111100kB mlocked:0kB bounce:0kB free_pcp:0kB local_pcp:0kB free_cma:0kB [ 1286.554563][ T8743] lowmem_reserve[]: 0 0 0 0 0 [ 1286.559394][ T8743] Node 0 DMA: 0*4kB 0*8kB 0*16kB 0*32kB 0*64kB 0*128kB 0*256kB 0*512kB 1*1024kB (U) 1*2048kB (M) 3*4096kB (M) = 15360kB [ 1286.572128][ T8743] Node 0 DMA32: 2023*4kB (UM) 464*8kB (UME) 543*16kB (UME) 567*32kB (UME) 296*64kB (UME) 280*128kB (UM) 150*256kB (UM) 114*512kB (UME) 91*1024kB (UM) 10*2048kB (UME) 205*4096kB (UM) = 1143532kB [ 1286.591388][ T8743] Node 0 Normal: 0*4kB 0*8kB 0*16kB 0*32kB 0*64kB 0*128kB 0*256kB 0*512kB 0*1024kB 0*2048kB 0*4096kB = 0kB [ 1286.731901][ T8743] Node 1 Normal: 1*4kB (U) 5*8kB (UM) 9*16kB (UM) 1*32kB (M) 8*64kB (UM) 5*128kB (UM) 3*256kB (UM) 5*512kB (UM) 2*1024kB (UM) 2*2048kB (U) 960*4096kB (M) = 3943004kB [ 1286.748744][ T8743] Node 0 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=1048576kB [ 1286.758323][ T8743] Node 0 hugepages_total=2 hugepages_free=2 hugepages_surp=0 hugepages_size=2048kB [ 1286.767641][ T8743] Node 1 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=1048576kB [ 1286.777209][ T8743] Node 1 hugepages_total=2 hugepages_free=2 hugepages_surp=0 hugepages_size=2048kB [ 1286.786518][ T8743] 45290 total pagecache pages [ 1286.791218][ T8743] 0 pages in swap cache [ 1286.795393][ T8743] Free swap = 124996kB [ 1286.799567][ T8743] Total swap = 124996kB [ 1286.803757][ T8743] 2097051 pages RAM [ 1286.807578][ T8743] 0 pages HighMem/MovableOnly [ 1286.812279][ T8743] 428172 pages reserved [ 1286.816459][ T8743] 0 pages cma reserved [ 1286.895972][ T8761] block nbd0: reconnected socket [ 1286.902167][T29008] block nbd0: Receive control failed (result -107) [ 1286.938713][ T8761] netlink: 'syz.7.11634': attribute type 1 has an invalid length. [ 1286.976381][ T8761] netlink: 4 bytes leftover after parsing attributes in process `syz.7.11634'. [ 1287.330934][ T791] net_ratelimit: 12 callbacks suppressed [ 1287.330958][ T791] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1287.662419][ T791] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1287.819018][ T8588] [ 1287.821424][ T8588] ====================================================== [ 1287.828470][ T8588] WARNING: possible circular locking dependency detected [ 1287.835536][ T8588] syzkaller #0 Not tainted [ 1287.839984][ T8588] ------------------------------------------------------ [ 1287.847027][ T8588] syz-executor/8588 is trying to acquire lock: [ 1287.853198][ T8588] ffff88801c2952a0 (&root->kernfs_supers_rwsem){++++}-{4:4}, at: kernfs_remove+0x35/0x80 [ 1287.863092][ T8588] [ 1287.863092][ T8588] but task is already holding lock: [ 1287.870486][ T8588] ffffffff8f5e34c0 (gdp_mutex){+.+.}-{4:4}, at: cleanup_glue_dir+0xc3/0x220 [ 1287.879248][ T8588] [ 1287.879248][ T8588] which lock already depends on the new lock. [ 1287.879248][ T8588] [ 1287.889678][ T8588] [ 1287.889678][ T8588] the existing dependency chain (in reverse order) is: [ 1287.898715][ T8588] [ 1287.898715][ T8588] -> #10 (gdp_mutex){+.+.}-{4:4}: [ 1287.905969][ T8588] __mutex_lock+0x19d/0x1550 [ 1287.911122][ T8588] get_device_parent+0x16f/0x3a0 [ 1287.916627][ T8588] device_add+0x2d4/0xb80 [ 1287.921522][ T8588] device_create+0x269/0x300 [ 1287.926667][ T8588] msr_device_create+0x33/0x50 [ 1287.931965][ T8588] cpuhp_invoke_callback+0x434/0x810 [ 1287.937788][ T8588] cpuhp_thread_fun+0x362/0x780 [ 1287.943190][ T8588] smpboot_thread_fn+0x57c/0xa80 [ 1287.948662][ T8588] kthread+0x388/0x470 [ 1287.953274][ T8588] ret_from_fork+0x514/0xb70 [ 1287.958402][ T8588] ret_from_fork_asm+0x1a/0x30 [ 1287.963697][ T8588] [ 1287.963697][ T8588] -> #9 (cpuhp_state-up){+.+.}-{0:0}: [ 1287.971274][ T8588] cpuhp_thread_fun+0x127/0x780 [ 1287.976689][ T8588] smpboot_thread_fn+0x57c/0xa80 [ 1287.982175][ T8588] kthread+0x388/0x470 [ 1287.986810][ T8588] ret_from_fork+0x514/0xb70 [ 1287.991971][ T8588] ret_from_fork_asm+0x1a/0x30 [ 1287.997282][ T8588] [ 1287.997282][ T8588] -> #8 (cpu_hotplug_lock){++++}-{0:0}: [ 1288.005076][ T8588] cpus_read_lock+0x42/0x160 [ 1288.010213][ T8588] static_key_slow_inc+0x12/0x30 [ 1288.015697][ T8588] nbd_genl_reconfigure+0x1301/0x1e80 [ 1288.021619][ T8588] genl_family_rcv_msg_doit+0x233/0x340 [ 1288.027709][ T8588] genl_rcv_msg+0x614/0x7a0 [ 1288.032747][ T8588] netlink_rcv_skb+0x226/0x4a0 [ 1288.038076][ T8588] genl_rcv+0x28/0x40 [ 1288.042596][ T8588] netlink_unicast+0x7bb/0x940 [ 1288.047921][ T8588] netlink_sendmsg+0x813/0xb40 [ 1288.053226][ T8588] sock_sendmsg_nosec+0x13a/0x180 [ 1288.058797][ T8588] ____sys_sendmsg+0x54e/0x850 [ 1288.064102][ T8588] ___sys_sendmsg+0x2a5/0x360 [ 1288.069319][ T8588] __x64_sys_sendmsg+0x1b1/0x290 [ 1288.074796][ T8588] do_syscall_64+0x174/0x580 [ 1288.079928][ T8588] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1288.086355][ T8588] [ 1288.086355][ T8588] -> #7 (&nsock->tx_lock){+.+.}-{4:4}: [ 1288.094034][ T8588] __mutex_lock+0x19d/0x1550 [ 1288.099175][ T8588] nbd_queue_rq+0x373/0x1150 [ 1288.104322][ T8588] blk_mq_dispatch_rq_list+0x499/0x1990 [ 1288.110421][ T8588] __blk_mq_sched_dispatch_requests+0xd36/0x1580 [ 1288.117314][ T8588] blk_mq_sched_dispatch_requests+0xd7/0x190 [ 1288.123852][ T8588] blk_mq_run_work_fn+0x16c/0x300 [ 1288.129413][ T8588] process_scheduled_works+0xa8e/0x14e0 [ 1288.135497][ T8588] worker_thread+0xa47/0xfb0 [ 1288.140622][ T8588] kthread+0x388/0x470 [ 1288.145228][ T8588] ret_from_fork+0x514/0xb70 [ 1288.150357][ T8588] ret_from_fork_asm+0x1a/0x30 [ 1288.155659][ T8588] [ 1288.155659][ T8588] -> #6 (&cmd->lock){+.+.}-{4:4}: [ 1288.162889][ T8588] __mutex_lock+0x19d/0x1550 [ 1288.168023][ T8588] nbd_queue_rq+0xc1/0x1150 [ 1288.173070][ T8588] blk_mq_dispatch_rq_list+0x499/0x1990 [ 1288.179171][ T8588] __blk_mq_sched_dispatch_requests+0xd36/0x1580 [ 1288.186047][ T8588] blk_mq_sched_dispatch_requests+0xd7/0x190 [ 1288.192575][ T8588] blk_mq_run_work_fn+0x16c/0x300 [ 1288.198133][ T8588] process_scheduled_works+0xa8e/0x14e0 [ 1288.204213][ T8588] worker_thread+0xa47/0xfb0 [ 1288.209346][ T8588] kthread+0x388/0x470 [ 1288.213974][ T8588] ret_from_fork+0x514/0xb70 [ 1288.219118][ T8588] ret_from_fork_asm+0x1a/0x30 [ 1288.224429][ T8588] [ 1288.224429][ T8588] -> #5 (set->srcu){.+.+}-{0:0}: [ 1288.231599][ T8588] __synchronize_srcu+0xc9/0x2f0 [ 1288.237095][ T8588] elevator_switch+0x1e8/0x7b0 [ 1288.242403][ T8588] elevator_change+0x2fa/0x480 [ 1288.247718][ T8588] elevator_set_default+0x375/0x440 [ 1288.253455][ T8588] blk_register_queue+0x3f3/0x4e0 [ 1288.259020][ T8588] __add_disk+0x6cb/0xe30 [ 1288.263884][ T8588] add_disk_fwnode+0xfb/0x4b0 [ 1288.269092][ T8588] nbd_dev_add+0x733/0xb60 [ 1288.274050][ T8588] nbd_init+0x15f/0x1e0 [ 1288.278870][ T8588] do_one_initcall+0x250/0x870 [ 1288.284179][ T8588] do_initcall_level+0x10a/0x1a0 [ 1288.289672][ T8588] do_initcalls+0x59/0xa0 [ 1288.294537][ T8588] kernel_init_freeable+0x29d/0x3e0 [ 1288.300277][ T8588] kernel_init+0x1d/0x1d0 [ 1288.305141][ T8588] ret_from_fork+0x514/0xb70 [ 1288.310274][ T8588] ret_from_fork_asm+0x1a/0x30 [ 1288.315576][ T8588] [ 1288.315576][ T8588] -> #4 (&q->elevator_lock){+.+.}-{4:4}: [ 1288.323413][ T8588] __mutex_lock+0x19d/0x1550 [ 1288.328558][ T8588] elevator_change+0x1af/0x480 [ 1288.333868][ T8588] elevator_set_none+0xb5/0x140 [ 1288.339281][ T8588] blk_mq_update_nr_hw_queues+0x5ef/0x19f0 [ 1288.345650][ T8588] nbd_start_device+0x189/0xb30 [ 1288.351068][ T8588] nbd_genl_connect+0x1597/0x1c10 [ 1288.356639][ T8588] genl_family_rcv_msg_doit+0x233/0x340 [ 1288.362727][ T8588] genl_rcv_msg+0x614/0x7a0 [ 1288.367771][ T8588] netlink_rcv_skb+0x226/0x4a0 [ 1288.373078][ T8588] genl_rcv+0x28/0x40 [ 1288.377595][ T8588] netlink_unicast+0x7bb/0x940 [ 1288.382909][ T8588] netlink_sendmsg+0x813/0xb40 [ 1288.388217][ T8588] sock_sendmsg_nosec+0x13a/0x180 [ 1288.393780][ T8588] ____sys_sendmsg+0x54e/0x850 [ 1288.399083][ T8588] ___sys_sendmsg+0x2a5/0x360 [ 1288.404302][ T8588] __x64_sys_sendmsg+0x1b1/0x290 [ 1288.409780][ T8588] do_syscall_64+0x174/0x580 [ 1288.414912][ T8588] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1288.421338][ T8588] [ 1288.421338][ T8588] -> #3 (&q->q_usage_counter(io)#51){++++}-{0:0}: [ 1288.429971][ T8588] blk_alloc_queue+0x544/0x690 [ 1288.435287][ T8588] __blk_mq_alloc_disk+0x194/0x390 [ 1288.440940][ T8588] nbd_dev_add+0x494/0xb60 [ 1288.445914][ T8588] nbd_init+0x15f/0x1e0 [ 1288.450628][ T8588] do_one_initcall+0x250/0x870 [ 1288.455947][ T8588] do_initcall_level+0x10a/0x1a0 [ 1288.461433][ T8588] do_initcalls+0x59/0xa0 [ 1288.466310][ T8588] kernel_init_freeable+0x29d/0x3e0 [ 1288.472061][ T8588] kernel_init+0x1d/0x1d0 [ 1288.476931][ T8588] ret_from_fork+0x514/0xb70 [ 1288.482062][ T8588] ret_from_fork_asm+0x1a/0x30 [ 1288.487363][ T8588] [ 1288.487363][ T8588] -> #2 (fs_reclaim){+.+.}-{0:0}: [ 1288.494592][ T8588] fs_reclaim_acquire+0x71/0x100 [ 1288.500073][ T8588] kmem_cache_alloc_lru_noprof+0x65/0x5f0 [ 1288.506329][ T8588] alloc_inode+0xb8/0x1b0 [ 1288.511193][ T8588] iget_locked+0x131/0x6a0 [ 1288.516148][ T8588] kernfs_get_inode+0x4f/0x770 [ 1288.521449][ T8588] kernfs_get_tree+0x5cd/0x980 [ 1288.526754][ T8588] vfs_get_tree+0x92/0x2a0 [ 1288.531720][ T8588] do_new_mount+0x319/0xdc0 [ 1288.536769][ T8588] __se_sys_mount+0x31d/0x420 [ 1288.541990][ T8588] do_syscall_64+0x174/0x580 [ 1288.547122][ T8588] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1288.553550][ T8588] [ 1288.553550][ T8588] -> #1 (&root->kernfs_rwsem){++++}-{4:4}: [ 1288.561581][ T8588] down_write+0x96/0x200 [ 1288.566379][ T8588] kernfs_remove_by_name_ns+0x4e/0x140 [ 1288.572397][ T8588] device_links_driver_bound+0x4ab/0x1440 [ 1288.578672][ T8588] driver_bound+0xd8/0x2e0 [ 1288.583635][ T8588] really_probe+0x774/0xae0 [ 1288.588689][ T8588] __driver_probe_device+0x1e8/0x360 [ 1288.594513][ T8588] driver_probe_device+0x4f/0x240 [ 1288.600084][ T8588] __device_attach_driver+0x270/0x410 [ 1288.605993][ T8588] bus_for_each_drv+0x258/0x2f0 [ 1288.611417][ T8588] __device_attach+0x2c4/0x450 [ 1288.616715][ T8588] device_initial_probe+0xa1/0xd0 [ 1288.622273][ T8588] bus_probe_device+0x12a/0x220 [ 1288.627663][ T8588] device_add+0x7d7/0xb80 [ 1288.632535][ T8588] faux_device_create_with_groups+0x1a5/0x2b0 [ 1288.639147][ T8588] regulator_dummy_init+0x19/0x40 [ 1288.644786][ T8588] regulator_init+0xca/0x110 [ 1288.649911][ T8588] do_one_initcall+0x250/0x870 [ 1288.655219][ T8588] do_initcall_level+0x10a/0x1a0 [ 1288.660713][ T8588] do_initcalls+0x59/0xa0 [ 1288.665584][ T8588] kernel_init_freeable+0x29d/0x3e0 [ 1288.671320][ T8588] kernel_init+0x1d/0x1d0 [ 1288.676184][ T8588] ret_from_fork+0x514/0xb70 [ 1288.681335][ T8588] ret_from_fork_asm+0x1a/0x30 [ 1288.686642][ T8588] [ 1288.686642][ T8588] -> #0 (&root->kernfs_supers_rwsem){++++}-{4:4}: [ 1288.695277][ T8588] __lock_acquire+0x1520/0x2cf0 [ 1288.700696][ T8588] lock_acquire+0x106/0x350 [ 1288.705761][ T8588] down_read+0x4a/0x330 [ 1288.710477][ T8588] kernfs_remove+0x35/0x80 [ 1288.715449][ T8588] __kobject_del+0xe0/0x310 [ 1288.720496][ T8588] kobject_del+0x45/0x60 [ 1288.725290][ T8588] cleanup_glue_dir+0x1a3/0x220 [ 1288.730677][ T8588] device_del+0x77d/0x8f0 [ 1288.735545][ T8588] unregister_netdevice_many_notify+0x1be4/0x2150 [ 1288.742499][ T8588] unregister_netdevice_queue+0x2f5/0x340 [ 1288.748767][ T8588] nsim_destroy+0x275/0x800 [ 1288.753806][ T8588] __nsim_dev_port_del+0x14e/0x200 [ 1288.759461][ T8588] nsim_dev_reload_destroy+0x288/0x490 [ 1288.765469][ T8588] nsim_drv_remove+0x58/0x170 [ 1288.770700][ T8588] device_release_driver_internal+0x48b/0x880 [ 1288.777329][ T8588] bus_remove_device+0x444/0x560 [ 1288.782812][ T8588] device_del+0x524/0x8f0 [ 1288.787673][ T8588] device_unregister+0x21/0xf0 [ 1288.792971][ T8588] del_device_store+0x2b5/0x370 [ 1288.798357][ T8588] kernfs_fop_write_iter+0x3a4/0x540 [ 1288.804183][ T8588] vfs_write+0x612/0xba0 [ 1288.808989][ T8588] ksys_write+0x150/0x270 [ 1288.813871][ T8588] do_syscall_64+0x174/0x580 [ 1288.819018][ T8588] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1288.825458][ T8588] [ 1288.825458][ T8588] other info that might help us debug this: [ 1288.825458][ T8588] [ 1288.835713][ T8588] Chain exists of: [ 1288.835713][ T8588] &root->kernfs_supers_rwsem --> cpuhp_state-up --> gdp_mutex [ 1288.835713][ T8588] [ 1288.849133][ T8588] Possible unsafe locking scenario: [ 1288.849133][ T8588] [ 1288.856597][ T8588] CPU0 CPU1 [ 1288.861974][ T8588] ---- ---- [ 1288.867348][ T8588] lock(gdp_mutex); [ 1288.871257][ T8588] lock(cpuhp_state-up); [ 1288.878118][ T8588] lock(gdp_mutex); [ 1288.884566][ T8588] rlock(&root->kernfs_supers_rwsem); [ 1288.890062][ T8588] [ 1288.890062][ T8588] *** DEADLOCK *** [ 1288.890062][ T8588] [ 1288.898231][ T8588] 8 locks held by syz-executor/8588: [ 1288.903528][ T8588] #0: ffff888033a06450 (sb_writers#7){.+.+}-{0:0}, at: vfs_write+0x22b/0xba0 [ 1288.912451][ T8588] #1: ffff88807f83ac80 (&of->mutex){+.+.}-{4:4}, at: kernfs_fop_write_iter+0x1d8/0x540 [ 1288.922221][ T8588] #2: ffff8880292e5008 (kn->active#52){.+.+}-{0:0}, at: kernfs_fop_write_iter+0x22b/0x540 [ 1288.932282][ T8588] #3: ffffffff8f8a8620 (nsim_bus_dev_list_lock){+.+.}-{4:4}, at: del_device_store+0xd6/0x370 [ 1288.942607][ T8588] #4: ffff888029fa2128 (&dev->mutex){....}-{4:4}, at: device_release_driver_internal+0xb9/0x880 [ 1288.953175][ T8588] #5: ffff88807b47f258 (&devlink->lock_key#23){+.+.}-{4:4}, at: nsim_drv_remove+0x50/0x170 [ 1288.963315][ T8588] #6: ffffffff9002bb40 (rtnl_mutex){+.+.}-{4:4}, at: nsim_destroy+0x173/0x800 [ 1288.972302][ T8588] #7: ffffffff8f5e34c0 (gdp_mutex){+.+.}-{4:4}, at: cleanup_glue_dir+0xc3/0x220 [ 1288.981461][ T8588] [ 1288.981461][ T8588] stack backtrace: [ 1288.987363][ T8588] CPU: 0 UID: 0 PID: 8588 Comm: syz-executor Not tainted syzkaller #0 PREEMPT(full) [ 1288.987384][ T8588] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/09/2026 [ 1288.987396][ T8588] Call Trace: [ 1288.987405][ T8588] [ 1288.987414][ T8588] dump_stack_lvl+0xe8/0x150 [ 1288.987441][ T8588] print_circular_bug+0x2e1/0x300 [ 1288.987460][ T8588] check_noncircular+0x12e/0x150 [ 1288.987491][ T8588] __lock_acquire+0x1520/0x2cf0 [ 1288.987526][ T8588] ? kernfs_remove+0x35/0x80 [ 1288.987550][ T8588] lock_acquire+0x106/0x350 [ 1288.987572][ T8588] ? kernfs_remove+0x35/0x80 [ 1288.987602][ T8588] down_read+0x4a/0x330 [ 1288.987627][ T8588] ? kernfs_remove+0x35/0x80 [ 1288.987652][ T8588] kernfs_remove+0x35/0x80 [ 1288.987676][ T8588] __kobject_del+0xe0/0x310 [ 1288.987704][ T8588] kobject_del+0x45/0x60 [ 1288.987731][ T8588] cleanup_glue_dir+0x1a3/0x220 [ 1288.987748][ T8588] device_del+0x77d/0x8f0 [ 1288.987768][ T8588] ? __pfx_device_del+0x10/0x10 [ 1288.987783][ T8588] ? pm_runtime_set_memalloc_noio+0x1e7/0x260 [ 1288.987802][ T8588] ? netdev_unregister_kobject+0x347/0x450 [ 1288.987835][ T8588] unregister_netdevice_many_notify+0x1be4/0x2150 [ 1288.987860][ T8588] ? __pfx_unregister_netdevice_many_notify+0x10/0x10 [ 1288.987878][ T8588] ? __mutex_lock+0x30d/0x1550 [ 1288.987909][ T8588] unregister_netdevice_queue+0x2f5/0x340 [ 1288.987937][ T8588] ? __pfx_unregister_netdevice_queue+0x10/0x10 [ 1288.987974][ T8588] nsim_destroy+0x275/0x800 [ 1288.987996][ T8588] __nsim_dev_port_del+0x14e/0x200 [ 1288.988021][ T8588] nsim_dev_reload_destroy+0x288/0x490 [ 1288.988048][ T8588] nsim_drv_remove+0x58/0x170 [ 1288.988071][ T8588] ? __pfx_nsim_bus_remove+0x10/0x10 [ 1288.988108][ T8588] device_release_driver_internal+0x48b/0x880 [ 1288.988130][ T8588] bus_remove_device+0x444/0x560 [ 1288.988157][ T8588] ? __pfx_bus_remove_device+0x10/0x10 [ 1288.988182][ T8588] ? kernfs_remove_by_name_ns+0x101/0x140 [ 1288.988210][ T8588] device_del+0x524/0x8f0 [ 1288.988225][ T8588] ? _raw_spin_unlock_irqrestore+0x4c/0x80 [ 1288.988250][ T8588] ? __pfx_device_del+0x10/0x10 [ 1288.988266][ T8588] ? sysfs_file_kobj+0x1a/0x230 [ 1288.988287][ T8588] device_unregister+0x21/0xf0 [ 1288.988303][ T8588] del_device_store+0x2b5/0x370 [ 1288.988326][ T8588] ? __pfx_del_device_store+0x10/0x10 [ 1288.988347][ T8588] ? sysfs_file_kobj+0x1e4/0x230 [ 1288.988366][ T8588] ? sysfs_kf_write+0x166/0x260 [ 1288.988387][ T8588] ? __pfx_sysfs_kf_write+0x10/0x10 [ 1288.988407][ T8588] kernfs_fop_write_iter+0x3a4/0x540 [ 1288.988426][ T8588] vfs_write+0x612/0xba0 [ 1288.988456][ T8588] ? __pfx_vfs_write+0x10/0x10 [ 1288.988484][ T8588] ? do_sys_openat2+0x14e/0x200 [ 1288.988504][ T8588] ? kmem_cache_free+0x182/0x650 [ 1288.988525][ T8588] ? fd_install+0x94/0x3d0 [ 1288.988553][ T8588] ksys_write+0x150/0x270 [ 1288.988579][ T8588] ? __pfx_ksys_write+0x10/0x10 [ 1288.988609][ T8588] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1288.988627][ T8588] do_syscall_64+0x174/0x580 [ 1288.988650][ T8588] ? trace_irq_disable+0x3b/0x140 [ 1288.988672][ T8588] ? clear_bhb_loop+0x40/0x90 [ 1288.988691][ T8588] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1288.988709][ T8588] RIP: 0033:0x7f1e05f5e68e [ 1288.988726][ T8588] Code: 08 0f 85 a5 a8 ff ff 49 89 fb 48 89 f0 48 89 d7 48 89 ce 4c 89 c2 4d 89 ca 4c 8b 44 24 08 4c 8b 4c 24 10 4c 89 5c 24 08 0f 05 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 80 00 00 00 00 48 83 ec 08 [ 1288.988742][ T8588] RSP: 002b:00007fffe600e328 EFLAGS: 00000246 ORIG_RAX: 0000000000000001 [ 1288.988760][ T8588] RAX: ffffffffffffffda RBX: 000055555d843500 RCX: 00007f1e05f5e68e [ 1288.988773][ T8588] RDX: 0000000000000001 RSI: 00007fffe600e3b0 RDI: 0000000000000005 [ 1288.988784][ T8588] RBP: 00007f1e060346f2 R08: 0000000000000000 R09: 0000000000000000 [ 1288.988796][ T8588] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 1288.988806][ T8588] R13: 00007fffe600e3b0 R14: 00007f1e06d54620 R15: 0000000000000003 [ 1288.988826][ T8588] [ 1289.463445][ T789] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1289.490491][ T5827] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1289.498989][ T5827] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1289.550769][T29008] Bluetooth: hci2: command tx timeout [ 1289.613494][ T8800] bond0: (slave bond_slave_1): Error: Device is in use and cannot be enslaved [ 1289.807252][ T8588] netdevsim netdevsim5 netdevsim0: renamed from eth0 [ 1289.819743][ T8588] 8021q: adding VLAN 0 to HW filter on device netdevsim0 [ 1289.828982][ T8588] netdevsim netdevsim5 netdevsim1: renamed from eth1 [ 1289.838959][ T8588] 8021q: adding VLAN 0 to HW filter on device netdevsim1 [ 1289.847643][ T8588] netdevsim netdevsim5 netdevsim2: renamed from eth2 [ 1289.858207][ T8588] 8021q: adding VLAN 0 to HW filter on device netdevsim2 [ 1289.874660][ T8588] netdevsim netdevsim5 netdevsim3: renamed from eth3 [ 1289.897407][ T8588] 8021q: adding VLAN 0 to HW filter on device netdevsim3 [ 1289.944769][ T8588] 8021q: adding VLAN 0 to HW filter on device bond0 [ 1289.959583][ T8588] 8021q: adding VLAN 0 to HW filter on device team0 [ 1289.970031][ T3477] bridge0: port 1(bridge_slave_0) entered blocking state [ 1289.977174][ T3477] bridge0: port 1(bridge_slave_0) entered forwarding state [ 1289.993070][T30607] bridge0: port 2(bridge_slave_1) entered blocking state [ 1290.005788][T30607] bridge0: port 2(bridge_slave_1) entered forwarding state [ 1290.112879][ T5827] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1290.199756][ T789] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1290.348694][ T789] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1290.440202][ C0] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1290.449526][ C0] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1290.711025][ T8588] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 1291.179998][ T8588] veth0_vlan: entered promiscuous mode [ 1291.198528][ T8588] veth1_vlan: entered promiscuous mode [ 1291.246111][ T8588] veth0_macvtap: entered promiscuous mode [ 1291.260301][ T8588] veth1_macvtap: entered promiscuous mode [ 1291.288810][ T8588] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 1291.309708][ T8588] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 1291.330791][ T14] netdevsim netdevsim5 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 1291.344215][T30607] netdevsim netdevsim5 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 1291.360172][T30607] netdevsim netdevsim5 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 1291.375514][T30607] netdevsim netdevsim5 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 1291.414195][ T8588] ieee80211 phy114: Selected rate control algorithm 'minstrel_ht' [ 1291.468487][ T3477] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 1291.472964][ T8588] ieee80211 phy115: Selected rate control algorithm 'minstrel_ht' [ 1291.478157][ T3477] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 1291.531230][ T48] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 1291.539121][ T48] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 1291.608488][T29008] Bluetooth: hci2: command tx timeout [ 1292.457702][ T789] net_ratelimit: 6 callbacks suppressed [ 1292.457724][ T789] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1292.675762][T18722] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1292.685125][T31652] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1293.389397][ T789] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1293.717966][ T5827] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1293.727188][T18722] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1294.753183][T31652] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1294.762580][T18722] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1295.147814][ C1] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1295.156981][ C1] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog