last executing test programs: 3m26.897716477s ago: executing program 1 (id=2587): r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000480), r0) (async) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f0000000700)={'wlan1\x00', 0x0}) sendmsg$NL80211_CMD_SET_TX_BITRATE_MASK(r0, &(0x7f0000000140)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000000)={0x38, r1, 0x1, 0x70bd28, 0x0, {{}, {@val={0x8, 0x3, r2}, @void}}, [@NL80211_ATTR_TX_RATES={0x1c, 0x5a, 0x0, 0x1, [@NL80211_BAND_5GHZ={0x18, 0x4, 0x0, 0x1, [@NL80211_TXRATE_HE={0x14, 0x5, {[0x6, 0x7, 0x7, 0x100, 0x9b, 0xfffa, 0xe, 0x401]}}]}]}]}, 0x38}}, 0x2400c090) (async) r3 = socket(0x2, 0x80805, 0x0) r4 = accept4(r3, 0x0, &(0x7f00000001c0), 0x800) (async) getsockopt$inet_sctp_SCTP_MAX_BURST(r3, 0x84, 0xc, &(0x7f0000000040)=@assoc_value={0x0}, &(0x7f0000000000)=0x8) setsockopt$inet_sctp6_SCTP_AUTH_DEACTIVATE_KEY(r3, 0x84, 0x23, &(0x7f0000000240)={r5, 0x2}, 0x8) sendmsg$NL80211_CMD_REGISTER_FRAME(0xffffffffffffffff, &(0x7f0000000100)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x4}, 0xc, &(0x7f00000000c0)={&(0x7f0000000080)={0x38, r1, 0x20, 0x70bd27, 0x25dfdbfd, {{}, {@void, @val={0xc, 0x99, {0xaf2, 0x77}}}}, [@NL80211_ATTR_FRAME_TYPE={0x6, 0x65, 0x1}, @NL80211_ATTR_FRAME_TYPE={0x6, 0x65, 0x4}, @NL80211_ATTR_FRAME_TYPE={0x6, 0x65, 0x7f}]}, 0x38}, 0x1, 0x0, 0x0, 0x20004010}, 0x20040085) (async) r6 = socket$nl_netfilter(0x10, 0x3, 0xc) (async) r7 = socket$inet6(0xa, 0x2, 0x3a) sendmsg$NL80211_CMD_SET_TID_CONFIG(r4, &(0x7f0000000d00)={&(0x7f0000000280)={0x10, 0x0, 0x0, 0x20000}, 0xc, &(0x7f0000000cc0)={&(0x7f0000000740)={0x570, r1, 0x100, 0x70bd26, 0x25dfdbff, {{}, {@void, @void}}, [@NL80211_ATTR_TID_CONFIG={0x358, 0x11d, 0x0, 0x1, [{0x348, 0x0, 0x0, 0x1, [@NL80211_TID_CONFIG_ATTR_OVERRIDE={0x4}, @NL80211_TID_CONFIG_ATTR_TX_RATE={0x134, 0xd, 0x0, 0x1, [@NL80211_BAND_2GHZ={0xfc, 0x0, 0x0, 0x1, [@NL80211_TXRATE_HE_GI={0x5}, @NL80211_TXRATE_HT={0x13, 0x2, [{0x1, 0x1}, {0x2, 0x9}, {0x4, 0x3}, {0x4, 0x7}, {0x5, 0x4}, {0x5, 0x5}, {0x3, 0x1}, {0x0, 0xa}, {0x0, 0x1}, {0x6, 0x8}, {0x4}, {0x6, 0x4}, {0x4, 0x6}, {0x0, 0x5}, {0x3, 0x9}]}, @NL80211_TXRATE_LEGACY={0xe, 0x1, [0x36, 0xb, 0x48, 0xc, 0x36, 0x1b, 0x56, 0x6, 0xa, 0x1]}, @NL80211_TXRATE_HE={0x14, 0x5, {[0xfffa, 0x59, 0x5, 0x4, 0xfffe, 0x0, 0x81, 0x9dc6]}}, @NL80211_TXRATE_LEGACY={0x10, 0x1, [0x1, 0x6c, 0x2, 0xb, 0x4, 0x16, 0x18, 0x6c, 0x6, 0x5, 0x24, 0x1]}, @NL80211_TXRATE_VHT={0x14, 0x3, {[0x9f, 0x0, 0x0, 0x7fff, 0x1000, 0x7, 0xc5, 0x7]}}, @NL80211_TXRATE_HE_GI={0x5, 0x6, 0x2}, @NL80211_TXRATE_HT={0x2d, 0x2, [{0x6, 0x2}, {0x0, 0x2}, {0x1, 0x9}, {0x7, 0x8}, {0x0, 0x9}, {0x1, 0x5}, {0x1, 0x7}, {0x7, 0x1}, {0x2, 0x7}, {0x0, 0x7}, {0x1, 0x5}, {0x5, 0xa}, {0x4, 0x7}, {0x7, 0x2}, {0x1, 0x6}, {0x2, 0x3}, {0x6, 0x7}, {0x6}, {0x2, 0x8}, {0x6, 0x1}, {0x7, 0xa}, {0x5, 0x8}, {0x4, 0x7}, {0x1, 0x5}, {0x0, 0x9}, {0x7, 0xa}, {0x4, 0x7}, {0x4, 0x3}, {0x7, 0x3}, {0x2, 0x7}, {0x0, 0x5}, {0x5}, {0x3}, {0x2, 0x1}, {0x1, 0x8}, {0x5, 0x8}, {0x1, 0x6}, {0x4, 0x7}, {0x7, 0x7}, {0x2, 0x5}, {0x5, 0x1}]}, @NL80211_TXRATE_HE={0x14, 0x5, {[0x6, 0x40, 0x9, 0xc49, 0x8, 0x6, 0x1, 0x7]}}, @NL80211_TXRATE_HT={0x46, 0x2, [{0x2, 0x4}, {0x6, 0x1}, {0x7, 0x6}, {0x5, 0x5}, {0x0, 0x5}, {0x7, 0x4}, {0x5}, {0x2}, {0x7, 0x3}, {0x4, 0x7}, {0x1, 0x4}, {}, {0x2, 0x7}, {0x7, 0xa}, {0x2, 0x7}, {0x6, 0x6}, {0x1}, {0x4, 0x5}, {0x1, 0x4}, {0x2, 0xa}, {0x5, 0x2}, {0x0, 0x7}, {0x6, 0x9}, {0x0, 0x8}, {0x3, 0x1}, {0x7, 0x9}, {0x6}, {0x1, 0x4}, {0x7, 0x9}, {0x0, 0x4}, {0x3, 0x5}, {0x5}, {0x1, 0x6}, {0x5, 0x8}, {0x4, 0x3}, {0x2, 0x8}, {0x0, 0x4}, {0x4, 0x3}, {0x2, 0x7}, {0x4, 0x4}, {0x4, 0x9}, {0x1, 0x6}, {0x0, 0x2}, {0x6, 0x4}, {0x1, 0x1}, {0x2, 0x7}, {0x0, 0x9}, {0x6, 0x2}, {0x6, 0x4}, {0x1, 0x7}, {0x1, 0x3}, {0x6, 0x2}, {0x4, 0x4}, {0x3}, {0x0, 0x8}, {0x6}, {0x2}, {0x1}, {0x5, 0x3}, {0x0, 0x3}, {0x0, 0x7}, {0x0, 0x3}, {0x7, 0x7}, {0x7, 0x8}, {0x6, 0xa}, {0x7, 0x1}]}]}, @NL80211_BAND_5GHZ={0x34, 0x1, 0x0, 0x1, [@NL80211_TXRATE_HE_GI={0x5, 0x6, 0x1}, @NL80211_TXRATE_GI={0x5, 0x4, 0x1}, @NL80211_TXRATE_HT={0xc, 0x2, [{0x6, 0x3}, {0x1, 0x3}, {0x1, 0x9}, {0x4, 0x6}, {0x4, 0x4}, {0x6, 0x4}, {0x7, 0x9}, {0x1, 0xa}]}, @NL80211_TXRATE_HE={0x14, 0x5, {[0x4, 0xf199, 0x401, 0x4, 0xd, 0x1, 0xc, 0x1ff]}}]}]}, @NL80211_TID_CONFIG_ATTR_RETRY_LONG={0x5, 0x8, 0xbb}, @NL80211_TID_CONFIG_ATTR_RETRY_LONG={0x5, 0x8, 0xa1}, @NL80211_TID_CONFIG_ATTR_TIDS={0x6, 0x5, 0x6b}, @NL80211_TID_CONFIG_ATTR_TX_RATE={0x1e8, 0xd, 0x0, 0x1, [@NL80211_BAND_60GHZ={0x68, 0x2, 0x0, 0x1, [@NL80211_TXRATE_GI={0x5}, @NL80211_TXRATE_VHT={0x14, 0x3, {[0x7, 0x8dd, 0x401, 0x40, 0x400, 0xfffc, 0x3, 0x7]}}, @NL80211_TXRATE_VHT={0x14, 0x3, {[0x0, 0x61, 0x1, 0xffff, 0xffff, 0xfff9, 0x5, 0x8001]}}, @NL80211_TXRATE_LEGACY={0xf, 0x1, [0x16, 0x24, 0x42, 0x6c, 0xb, 0x12, 0x3, 0x16, 0x6, 0x6c, 0x36]}, @NL80211_TXRATE_HE_LTF={0x5, 0x7, 0x1}, @NL80211_TXRATE_GI={0x5, 0x4, 0x1}, @NL80211_TXRATE_HE={0x14, 0x5, {[0x1, 0x2, 0x8, 0x3, 0x2, 0x0, 0x0, 0xfffe]}}]}, @NL80211_BAND_6GHZ={0x2c, 0x3, 0x0, 0x1, [@NL80211_TXRATE_HE={0x14, 0x5, {[0x5, 0x7, 0xe0, 0xfffe, 0x400, 0x1, 0x6, 0x5]}}, @NL80211_TXRATE_LEGACY={0x4}, @NL80211_TXRATE_HE_LTF={0x5, 0x7, 0x2}, @NL80211_TXRATE_GI={0x5, 0x4, 0x2}]}, @NL80211_BAND_60GHZ={0xac, 0x2, 0x0, 0x1, [@NL80211_TXRATE_VHT={0x14, 0x3, {[0xd8b8, 0x1, 0x2997, 0x1, 0x7f, 0x3, 0xc, 0x1]}}, @NL80211_TXRATE_HE={0x14, 0x5, {[0x9, 0x2701, 0xc2df, 0x8, 0x5, 0x8, 0x9, 0x1]}}, @NL80211_TXRATE_VHT={0x14, 0x3, {[0x0, 0x3, 0x1, 0x3b6, 0xfffc, 0xffff, 0x8, 0x2]}}, @NL80211_TXRATE_HE_GI={0x5, 0x6, 0x1}, @NL80211_TXRATE_HE={0x14, 0x5, {[0xfc01, 0x9, 0x3, 0x8, 0x0, 0x7, 0x3, 0x5]}}, @NL80211_TXRATE_HT={0x33, 0x2, [{0x4, 0x6}, {0x5, 0x7}, {0x2, 0x7}, {0x6, 0x4}, {0x4, 0x1}, {0x5, 0x7}, {0x2, 0x1}, {0x2, 0x2}, {0x0, 0x7}, {0x3, 0x7}, {0x7, 0x9}, {0x4, 0x1}, {}, {0x2, 0x5}, {0x1, 0x5}, {0x7, 0x7}, {0x6, 0x9}, {0x6, 0x6}, {0x1, 0x3}, {0x5, 0x3}, {0x4}, {0x3, 0x8}, {0x4, 0x4}, {0x4, 0x9}, {0x0, 0xa}, {0x0, 0x4}, {0x2, 0x4}, {0x3, 0x9}, {0x3, 0x6}, {0x2, 0xa}, {0x3, 0x4}, {0x6, 0x5}, {0x6, 0x2}, {0x1, 0x4}, {0x4, 0x5}, {0x3, 0x9}, {0x5, 0x9}, {0x5, 0x3}, {0x3, 0x7}, {0x1}, {0x6}, {0x4, 0x4}, {0x3, 0x5}, {0x0, 0x8}, {0x2, 0xa}, {0x4, 0x4}, {0x4, 0x2}]}, @NL80211_TXRATE_LEGACY={0x9, 0x1, [0x1b, 0x30, 0x24, 0x12, 0x36]}, @NL80211_TXRATE_HE_LTF={0x5, 0x7, 0x1}, @NL80211_TXRATE_HE_GI={0x5, 0x6, 0x1}]}, @NL80211_BAND_2GHZ={0x6c, 0x0, 0x0, 0x1, [@NL80211_TXRATE_HE={0x14, 0x5, {[0x6, 0x4, 0xe7, 0x5, 0x40, 0x80, 0x8000, 0x800]}}, @NL80211_TXRATE_GI={0x5, 0x4, 0x1}, @NL80211_TXRATE_GI={0x5, 0x4, 0x2}, @NL80211_TXRATE_HE={0x14, 0x5, {[0xf9a5, 0x7f, 0x4, 0xb9bf, 0x8, 0xff, 0x7fff, 0xff]}}, @NL80211_TXRATE_HT={0x2d, 0x2, [{0x5, 0x6}, {0x3, 0x3}, {0x3, 0x4}, {0x2, 0x4}, {0x5, 0x4}, {0x0, 0x8}, {0x5, 0x3}, {0x0, 0x7}, {0x5}, {0x7, 0x3}, {0x5, 0x9}, {0x2, 0x7}, {0x5, 0x3}, {}, {0x0, 0x2}, {0x4, 0xa}, {0x1}, {0x2, 0x1}, {0x4, 0x2}, {0x3, 0xa}, {0x5, 0x4}, {0x5, 0xa}, {0x7, 0x4}, {0x0, 0xa}, {0x4, 0x5}, {0x6, 0xa}, {0x0, 0xa}, {0x3, 0x6}, {0x2}, {}, {0x5, 0x6}, {0x0, 0x5}, {0x5, 0x8}, {0x3, 0x6}, {0x0, 0x6}, {0x7, 0x1}, {0x6, 0x6}, {0x2, 0x9}, {0x0, 0x1}, {0x6}, {0x2, 0x6}]}]}, @NL80211_BAND_6GHZ={0x38, 0x3, 0x0, 0x1, [@NL80211_TXRATE_HE_GI={0x5, 0x6, 0x1}, @NL80211_TXRATE_HE_GI={0x5, 0x6, 0x2}, @NL80211_TXRATE_HE={0x14, 0x5, {[0x6, 0x474, 0xef0, 0xd, 0x1ff, 0xfffa, 0xe, 0xfff]}}, @NL80211_TXRATE_GI={0x5, 0x4, 0x2}, @NL80211_TXRATE_GI={0x5, 0x4, 0x2}]}]}, @NL80211_TID_CONFIG_ATTR_TX_RATE_TYPE={0x5, 0xc, 0x1}, @NL80211_TID_CONFIG_ATTR_TX_RATE={0x4}]}, {0xc, 0x0, 0x0, 0x1, [@NL80211_TID_CONFIG_ATTR_RETRY_LONG={0x5, 0x8, 0xf1}]}]}, @NL80211_ATTR_TID_CONFIG={0x138, 0x11d, 0x0, 0x1, [{0x24, 0x0, 0x0, 0x1, [@NL80211_TID_CONFIG_ATTR_TX_RATE_TYPE={0x5, 0xc, 0x1}, @NL80211_TID_CONFIG_ATTR_AMPDU_CTRL={0x5, 0x9, 0x1}, @NL80211_TID_CONFIG_ATTR_RETRY_SHORT={0x5, 0x7, 0x76}, @NL80211_TID_CONFIG_ATTR_TIDS={0x6, 0x5, 0x20}]}, {0x20, 0x0, 0x0, 0x1, [@NL80211_TID_CONFIG_ATTR_OVERRIDE={0x4}, @NL80211_TID_CONFIG_ATTR_RETRY_LONG={0x5, 0x8, 0xcf}, @NL80211_TID_CONFIG_ATTR_PEER_SUPP={0xc, 0x3, 0x74}, @NL80211_TID_CONFIG_ATTR_OVERRIDE={0x4}]}, {0xc, 0x0, 0x0, 0x1, [@NL80211_TID_CONFIG_ATTR_RETRY_LONG={0x5, 0x8, 0x78}]}, {0xc, 0x0, 0x0, 0x1, [@NL80211_TID_CONFIG_ATTR_TX_RATE_TYPE={0x5}]}, {0xd8, 0x0, 0x0, 0x1, [@NL80211_TID_CONFIG_ATTR_VIF_SUPP={0xc, 0x2, 0x100000001}, @NL80211_TID_CONFIG_ATTR_TX_RATE={0xbc, 0xd, 0x0, 0x1, [@NL80211_BAND_60GHZ={0xa0, 0x2, 0x0, 0x1, [@NL80211_TXRATE_HT={0x50, 0x2, [{0x6, 0x6}, {0x4, 0x5}, {0x0, 0xa}, {}, {0x1, 0x3}, {0x3, 0x6}, {0x7, 0x6}, {0x3, 0x1}, {0x0, 0x9}, {0x0, 0x8}, {0x2, 0xa}, {0x2, 0x2}, {0x4, 0x5}, {0x4, 0xa}, {0x3, 0x4}, {0x2, 0x2}, {0x1, 0x9}, {0x7, 0x6}, {0x4, 0x5}, {}, {0x1, 0x9}, {0x6, 0xa}, {0x6, 0xa}, {}, {0x1, 0x6}, {0x1, 0x3}, {0x0, 0x7}, {0x1, 0x4}, {0x4, 0x1}, {0x5, 0xa}, {0x6, 0x6}, {0x4, 0x8}, {0x4, 0x5}, {0x0, 0x3}, {0x2, 0x7}, {0x3, 0x2}, {0x3, 0x7}, {0x6, 0x2}, {0x1}, {0x1, 0x2}, {0x1, 0x4}, {0x7, 0x9}, {0x0, 0x4}, {0x1, 0x5}, {0x3, 0x6}, {0x1, 0x1}, {0x3, 0x3}, {0x7, 0x5}, {0x6, 0x3}, {0x3, 0xa}, {0x7, 0x7}, {0x6}, {0x1, 0x8}, {0x7, 0xa}, {0x4, 0x9}, {0x3, 0x7}, {0x5, 0x7}, {0x5, 0x9}, {0x4, 0x5}, {0x7, 0x7}, {0x6, 0x3}, {0x3, 0x8}, {0x2, 0x9}, {0x7, 0x1}, {0x1, 0xa}, {0x4, 0x4}, {0x0, 0x2}, {0x3, 0x5}, {0x3, 0x3}, {0x0, 0x7}, {0x2, 0x4}, {0x6, 0x7}, {0x3, 0x4}, {0x7, 0x2}, {0x4, 0x2}, {0x5, 0x7}]}, @NL80211_TXRATE_VHT={0x14, 0x3, {[0x2, 0x8, 0x5d, 0x800, 0xf6a6, 0x1ff, 0xfff9, 0xa]}}, @NL80211_TXRATE_HE_GI={0x5}, @NL80211_TXRATE_VHT={0x14, 0x3, {[0x8, 0x0, 0x330, 0x0, 0x8, 0x6, 0x1, 0xdebb]}}, @NL80211_TXRATE_HE_LTF={0x5, 0x7, 0x2}, @NL80211_TXRATE_VHT={0x14, 0x3, {[0x1, 0x8001, 0x1, 0x5b81, 0x7fff, 0x7, 0x2, 0x6]}}]}, @NL80211_BAND_2GHZ={0x18, 0x0, 0x0, 0x1, [@NL80211_TXRATE_HT={0xa, 0x2, [{0x5, 0x8}, {0x4, 0x1}, {0x5, 0x4}, {0x2, 0xa}, {0x4, 0x9}, {0x3, 0x1}]}, @NL80211_TXRATE_HE_GI={0x5, 0x6, 0x2}]}]}, @NL80211_TID_CONFIG_ATTR_VIF_SUPP={0xc, 0x2, 0x6}]}]}, @NL80211_ATTR_TID_CONFIG={0xcc, 0x11d, 0x0, 0x1, [{0x1c, 0x0, 0x0, 0x1, [@NL80211_TID_CONFIG_ATTR_AMSDU_CTRL={0x5}, @NL80211_TID_CONFIG_ATTR_NOACK={0x5, 0x6, 0x1}, @NL80211_TID_CONFIG_ATTR_RTSCTS_CTRL={0x5, 0xa, 0x1}]}, {0xc, 0x0, 0x0, 0x1, [@NL80211_TID_CONFIG_ATTR_RETRY_LONG={0x5, 0x8, 0xb6}]}, {0xc, 0x0, 0x0, 0x1, [@NL80211_TID_CONFIG_ATTR_AMSDU_CTRL={0x5}]}, {0x44, 0x0, 0x0, 0x1, [@NL80211_TID_CONFIG_ATTR_AMSDU_CTRL={0x5, 0xb, 0x1}, @NL80211_TID_CONFIG_ATTR_VIF_SUPP={0xc, 0x2, 0x1000}, @NL80211_TID_CONFIG_ATTR_RETRY_SHORT={0x5, 0x7, 0x76}, @NL80211_TID_CONFIG_ATTR_NOACK={0x5, 0x6, 0x1}, @NL80211_TID_CONFIG_ATTR_NOACK={0x5, 0x6, 0x1}, @NL80211_TID_CONFIG_ATTR_RTSCTS_CTRL={0x5}, @NL80211_TID_CONFIG_ATTR_TX_RATE_TYPE={0x5, 0xc, 0x2}, @NL80211_TID_CONFIG_ATTR_OVERRIDE={0x4}]}, {0x20, 0x0, 0x0, 0x1, [@NL80211_TID_CONFIG_ATTR_RTSCTS_CTRL={0x5}, @NL80211_TID_CONFIG_ATTR_RETRY_LONG={0x5, 0x8, 0x6b}, @NL80211_TID_CONFIG_ATTR_RTSCTS_CTRL={0x5, 0xa, 0x1}, @NL80211_TID_CONFIG_ATTR_OVERRIDE={0x4}]}, {0x4}, {0x2c, 0x0, 0x0, 0x1, [@NL80211_TID_CONFIG_ATTR_TIDS={0x6, 0x5, 0x6b}, @NL80211_TID_CONFIG_ATTR_TX_RATE={0x10, 0xd, 0x0, 0x1, [@NL80211_BAND_60GHZ={0xc, 0x2, 0x0, 0x1, [@NL80211_TXRATE_GI={0x5}]}]}, @NL80211_TID_CONFIG_ATTR_AMPDU_CTRL={0x5}, @NL80211_TID_CONFIG_ATTR_AMPDU_CTRL={0x5, 0x9, 0x1}]}]}]}, 0x570}, 0x1, 0x0, 0x0, 0x24000004}, 0x5) (async) sendmmsg$inet6(r7, &(0x7f0000000640)=[{{&(0x7f0000000180)={0xa, 0x0, 0x0, @mcast1}, 0x2, &(0x7f00000002c0)=[{&(0x7f0000000140)="a0002883591ecc0e", 0x8}], 0x1}}], 0x1, 0x0) socket$phonet(0x23, 0x2, 0x1) (async) ioctl$EXT4_IOC_MOVE_EXT(r6, 0xc028660f, &(0x7f0000000180)={0x0, r4, 0x1000, 0xf, 0x10000, 0x100000001}) (async) sendmsg$IPSET_CMD_CREATE(r6, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000340)={&(0x7f0000000200)={0x54, 0x2, 0x6, 0x801, 0x0, 0x0, {}, [@IPSET_ATTR_DATA={0xc, 0x7, 0x0, 0x1, [@IPSET_ATTR_CADT_FLAGS={0x8, 0x8, 0x1, 0x0, 0xa0}]}, @IPSET_ATTR_FAMILY={0x5}, @IPSET_ATTR_PROTOCOL={0x5}, @IPSET_ATTR_REVISION={0x5}, @IPSET_ATTR_SETNAME={0x9, 0x2, 'syz1\x00'}, @IPSET_ATTR_TYPENAME={0xd, 0x3, 'hash:mac\x00'}]}, 0x54}}, 0x0) 3m26.826179429s ago: executing program 1 (id=2588): clock_gettime(0xb, &(0x7f0000000980)) r0 = socket$netlink(0x10, 0x3, 0x0) r1 = socket(0x10, 0x803, 0x0) sendmsg$IPVS_CMD_SET_INFO(r1, &(0x7f0000000b00)={0x0, 0x0, &(0x7f0000000ac0)={0x0, 0x14}}, 0x0) getsockname$packet(r1, &(0x7f0000000300)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000380)=ANY=[@ANYBLOB="3c0000001000850600"/20, @ANYRES32=r2, @ANYBLOB="01000000000000001c0012000c000100626f6e64000000000c0002000800010006"], 0x3c}}, 0x800) sendmsg$nl_route(r0, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000140)=@newlink={0x58, 0x10, 0xffffff1f, 0x3, 0xfffefffd, {0x0, 0x0, 0x0, 0x0, 0x0, 0x3cc40}, [@IFLA_LINKINFO={0x30, 0x12, 0x0, 0x1, @geneve={{0xb}, {0x20, 0x2, 0x0, 0x1, [@IFLA_GENEVE_REMOTE6={0x14, 0x7, @loopback}, @IFLA_GENEVE_UDP_ZERO_CSUM6_TX={0x5, 0x9, 0x1}]}}}, @IFLA_MASTER={0x8, 0xa, r2}]}, 0x58}, 0x1, 0x0, 0x0, 0x40000}, 0x0) clock_gettime(0xb, &(0x7f0000000980)) (async) socket$netlink(0x10, 0x3, 0x0) (async) socket(0x10, 0x803, 0x0) (async) sendmsg$IPVS_CMD_SET_INFO(r1, &(0x7f0000000b00)={0x0, 0x0, &(0x7f0000000ac0)={0x0, 0x14}}, 0x0) (async) getsockname$packet(r1, &(0x7f0000000300)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) (async) sendmsg$nl_route(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000380)=ANY=[@ANYBLOB="3c0000001000850600"/20, @ANYRES32=r2, @ANYBLOB="01000000000000001c0012000c000100626f6e64000000000c0002000800010006"], 0x3c}}, 0x800) (async) sendmsg$nl_route(r0, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000140)=@newlink={0x58, 0x10, 0xffffff1f, 0x3, 0xfffefffd, {0x0, 0x0, 0x0, 0x0, 0x0, 0x3cc40}, [@IFLA_LINKINFO={0x30, 0x12, 0x0, 0x1, @geneve={{0xb}, {0x20, 0x2, 0x0, 0x1, [@IFLA_GENEVE_REMOTE6={0x14, 0x7, @loopback}, @IFLA_GENEVE_UDP_ZERO_CSUM6_TX={0x5, 0x9, 0x1}]}}}, @IFLA_MASTER={0x8, 0xa, r2}]}, 0x58}, 0x1, 0x0, 0x0, 0x40000}, 0x0) (async) 3m26.616540599s ago: executing program 1 (id=2592): r0 = socket(0x10, 0x3, 0x0) (async, rerun: 32) r1 = socket$packet(0x11, 0x2, 0x300) (rerun: 32) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000080)={'ip6tnl0\x00', 0x0}) sendmsg$nl_route_sched(r0, &(0x7f00000007c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000000)=@getchain={0x74, 0x66, 0x400, 0x70bd27, 0x25dfdbfc, {0x0, 0x0, 0x0, r2, {0x7}, {0x0, 0xd}, {0x9, 0x3}}, [{0x8, 0xb, 0x9}, {0x8, 0xb, 0x3000000}, {0x8, 0xb, 0x8}, {0x8, 0xb, 0x7}, {0x8, 0xb, 0xcb03}, {0x8, 0xb, 0x3}, {0x8, 0xb, 0xd032}, {0x8, 0xb, 0x10001}, {0x8, 0xb, 0x5}, {0x8, 0xb, 0x3}]}, 0x74}}, 0x0) 3m26.510310229s ago: executing program 1 (id=2596): r0 = openat$tcp_congestion(0xffffffffffffff9c, &(0x7f0000000000), 0x1, 0x0) (async) r1 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_DEL(r1, &(0x7f0000000380)={0x0, 0x0, &(0x7f0000000400)={&(0x7f0000000440)=ANY=[@ANYBLOB="400000000a0601010000000d0000000000000000050001"], 0x40}, 0x1, 0x0, 0x0, 0x4000}, 0x0) (async, rerun: 32) writev(r0, &(0x7f0000000300)=[{&(0x7f00000000c0)="22eb36", 0x3}], 0x1) (rerun: 32) pwritev(r0, &(0x7f0000001e40)=[{&(0x7f0000000040)="daf829de90f1793b601a1fac34b2bf49361e9e50ef36bc", 0x17}, {0x0}], 0x2, 0x8, 0x10001) r2 = socket$nl_generic(0x10, 0x3, 0x10) (async) r3 = socket$alg(0x26, 0x5, 0x0) bind$alg(r3, &(0x7f00000004c0)={0x26, 'skcipher\x00', 0x0, 0x0, 'cbc-camellia-aesni\x00'}, 0x58) (async) setsockopt$ALG_SET_KEY(r3, 0x117, 0x1, &(0x7f0000000280)="ad56b6c5820fae9d6dcd3292ea54c7beef", 0x11) (async) r4 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000080), r2) (async) ioctl$sock_SIOCGIFINDEX_80211(r2, 0x8933, &(0x7f0000000100)={'wlan0\x00', 0x0}) sendmsg$NL80211_CMD_SET_TX_BITRATE_MASK(r2, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000400)=ANY=[@ANYBLOB='x\x00\x00\x00', @ANYRES16=r4, @ANYBLOB="010000000000000000003900000008000300", @ANYRES32=r5, @ANYBLOB="5c005a8054000180050007000100000047000200"], 0x78}, 0x1, 0x0, 0x0, 0x40080}, 0x2000c840) (async) r6 = socket$inet_sctp(0x2, 0x1, 0x84) setsockopt$IP_VS_SO_SET_ADD(r6, 0x0, 0x482, &(0x7f0000000040)={0x84, @broadcast, 0x4e21, 0x3, 'rr\x00', 0x1, 0x10000004, 0x8}, 0x2c) (async) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000180)={0x0, 0x0, 0x0}, 0x0) r7 = socket$kcm(0xa, 0x2, 0x0) setsockopt$IP_VS_SO_SET_ADDDEST(r6, 0x0, 0x487, &(0x7f0000000140)={{0x84, @private=0xa010100, 0x4e21, 0x3, 'wrr\x00', 0x23, 0x81, 0x5}, {@dev={0xac, 0x14, 0x14, 0x3c}, 0x4e23, 0x10000, 0x1cb, 0x12d61, 0x12d58}}, 0x44) (async, rerun: 64) setsockopt$IP_VS_SO_SET_ADDDEST(r6, 0x0, 0x487, &(0x7f0000000000)={{0x84, @rand_addr=0x64010100, 0x4e24, 0x3, 'lc\x00', 0x8, 0x323b, 0x55}, {@remote, 0x4e24, 0x10000, 0x0, 0x12d5c, 0x12d4c}}, 0x44) (async, rerun: 64) sendmsg$sock(r7, &(0x7f0000000400)={&(0x7f0000000580)=@in6={0x2, 0x4e22, 0x0, @dev, 0xfffffeec}, 0x80, 0x0, 0x0, &(0x7f0000000000)=[@mark={{0x14, 0x1, 0x24, 0x3}}], 0x18}, 0x0) sendmsg$NL80211_CMD_ABORT_SCAN(0xffffffffffffffff, &(0x7f0000000180)={&(0x7f0000000080)={0x10, 0x0, 0x0, 0x1000}, 0xc, &(0x7f0000000140)={&(0x7f0000000100)={0x1c, 0x0, 0x10, 0x70bd25, 0x25dfdbfd, {{}, {@val={0x8, 0x3, r5}, @void}}, ["", "", "", "", "", "", ""]}, 0x1c}, 0x1, 0x0, 0x0, 0x20000000}, 0x20008009) 3m26.420958042s ago: executing program 1 (id=2598): r0 = bpf$MAP_CREATE_TAIL_CALL(0x0, &(0x7f0000000740)={0x3, 0x4, 0x4, 0xa, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0}, 0x48) r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000880)={0x3, 0x8, &(0x7f0000000140)=@framed={{0x18, 0x6, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2}, [@tail_call={{0x18, 0x2, 0x1, 0x0, r0}}]}, &(0x7f0000000980)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @sched_cls, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$PROG_LOAD(0x5, &(0x7f0000000880)={0x3, 0x8, &(0x7f0000000000)=@framed={{0x18, 0x6}, [@tail_call={{0x18, 0x2, 0x1, 0x0, r0}}]}, &(0x7f0000000980)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @sched_cls, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000180)={{r0}, &(0x7f00000001c0), &(0x7f0000000200)=r1}, 0x20) r2 = socket$inet6_sctp(0xa, 0x1, 0x84) sendmmsg$inet6(r2, &(0x7f0000000680)=[{{&(0x7f0000000080)={0xa, 0x4e23, 0xab, @loopback, 0x8}, 0x1c, &(0x7f0000000780)=[{&(0x7f0000000900)='2', 0x1}], 0x1}}], 0x1, 0x20000014) 3m25.459231578s ago: executing program 1 (id=2630): r0 = socket$netlink(0x10, 0x3, 0x0) r1 = socket(0x10, 0x803, 0x0) sendmsg$IPVS_CMD_SET_INFO(r1, &(0x7f0000000b00)={0x0, 0x0, &(0x7f0000000ac0)={0x0, 0x14}}, 0x0) getsockname$packet(r1, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000380)=ANY=[@ANYBLOB="3c0000001000850600"/20, @ANYRES32=r2, @ANYBLOB="01000000000000001c0012000c000100626f6e64000000000c0002000800010004"], 0x3c}}, 0x0) r3 = socket$nl_route(0x10, 0x3, 0x0) r4 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r5 = syz_genetlink_get_family_id$netlbl_mgmt(&(0x7f0000000040), r4) r6 = syz_init_net_socket$nl_rdma(0x10, 0x3, 0x10) sendmsg$netlink(r6, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000002580)=[{&(0x7f0000000180)=ANY=[@ANYBLOB="1400000026000100000000000000000006"], 0x14}], 0x1}, 0x0) sendmsg$NLBL_MGMT_C_ADDDEF(r4, &(0x7f0000000100)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000140)={0x30, r5, 0x1, 0x0, 0x0, {}, [@NLBL_MGMT_A_IPV6ADDR={0x14, 0x5, @private1}, @NLBL_MGMT_A_PROTOCOL={0x8}]}, 0x30}}, 0x0) sendmsg$nl_route(r3, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000440)=@newlink={0x3c, 0x10, 0x403, 0x0, 0x0, {0x0, 0x0, 0x0, 0x0, 0x428a4}, [@IFLA_ALT_IFNAME={0x14, 0x35, 'syz_tun\x00'}, @IFLA_MASTER={0x8, 0xa, r2}]}, 0x3c}}, 0x8000) syz_emit_ethernet(0x4a, &(0x7f0000000000)={@local, @random="6684e27a87c9", @void, {@ipv6={0x86dd, @tcp={0x9, 0x6, '\x00', 0x14, 0x6, 0xff, @dev={0xfe, 0x80, '\x00', 0x39}, @local, {[], {{0x4e22, 0x4e24, 0x41424344, 0x41424344, 0x1, 0x0, 0x5, 0xc2, 0x7, 0x0, 0x3}}}}}}}, 0x0) 3m10.415979604s ago: executing program 32 (id=2630): r0 = socket$netlink(0x10, 0x3, 0x0) r1 = socket(0x10, 0x803, 0x0) sendmsg$IPVS_CMD_SET_INFO(r1, &(0x7f0000000b00)={0x0, 0x0, &(0x7f0000000ac0)={0x0, 0x14}}, 0x0) getsockname$packet(r1, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000380)=ANY=[@ANYBLOB="3c0000001000850600"/20, @ANYRES32=r2, @ANYBLOB="01000000000000001c0012000c000100626f6e64000000000c0002000800010004"], 0x3c}}, 0x0) r3 = socket$nl_route(0x10, 0x3, 0x0) r4 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r5 = syz_genetlink_get_family_id$netlbl_mgmt(&(0x7f0000000040), r4) r6 = syz_init_net_socket$nl_rdma(0x10, 0x3, 0x10) sendmsg$netlink(r6, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000002580)=[{&(0x7f0000000180)=ANY=[@ANYBLOB="1400000026000100000000000000000006"], 0x14}], 0x1}, 0x0) sendmsg$NLBL_MGMT_C_ADDDEF(r4, &(0x7f0000000100)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000140)={0x30, r5, 0x1, 0x0, 0x0, {}, [@NLBL_MGMT_A_IPV6ADDR={0x14, 0x5, @private1}, @NLBL_MGMT_A_PROTOCOL={0x8}]}, 0x30}}, 0x0) sendmsg$nl_route(r3, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000440)=@newlink={0x3c, 0x10, 0x403, 0x0, 0x0, {0x0, 0x0, 0x0, 0x0, 0x428a4}, [@IFLA_ALT_IFNAME={0x14, 0x35, 'syz_tun\x00'}, @IFLA_MASTER={0x8, 0xa, r2}]}, 0x3c}}, 0x8000) syz_emit_ethernet(0x4a, &(0x7f0000000000)={@local, @random="6684e27a87c9", @void, {@ipv6={0x86dd, @tcp={0x9, 0x6, '\x00', 0x14, 0x6, 0xff, @dev={0xfe, 0x80, '\x00', 0x39}, @local, {[], {{0x4e22, 0x4e24, 0x41424344, 0x41424344, 0x1, 0x0, 0x5, 0xc2, 0x7, 0x0, 0x3}}}}}}}, 0x0) 2m40.748995176s ago: executing program 5 (id=3198): sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000140)=@newtaction={0x70, 0x30, 0x0, 0x0, 0x0, {0x9}, [{0x5c, 0x1, [@m_sample={0x58, 0x0, 0x0, 0x0, {{0xb}, {0x2c, 0x2, 0x0, 0x1, [@TCA_SAMPLE_PSAMPLE_GROUP={0x8}, @TCA_SAMPLE_RATE={0x8}, @TCA_SAMPLE_PARMS={0x18, 0x2, {0x0, 0x0, 0x0, 0x0, 0x80000}}]}, {0x4}, {0xc, 0x7, {0x1}}, {0xc, 0x8, {0x4}}}}]}]}, 0x70}, 0x1, 0x0, 0x0, 0x4008085}, 0x20040000) r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = socket$inet6_tcp(0xa, 0x1, 0x0) (async) r2 = socket$packet(0x11, 0x3, 0x300) (async) r3 = socket$inet6_mptcp(0xa, 0x1, 0x106) setsockopt$SO_TIMESTAMP(r3, 0x1, 0x1d, &(0x7f0000000080)=0x3, 0x4) (async) setsockopt$packet_int(r2, 0x107, 0xf, &(0x7f0000000100)=0x207, 0x4) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000300)={'wg2\x00', 0x0}) sendto$packet(r2, &(0x7f00000002c0)="05031600d3fc140000004788031c09103c28", 0xfe94, 0x4, &(0x7f0000000140)={0x11, 0x86dd, r4, 0x1, 0x0, 0x6, @multicast}, 0x14) r5 = socket$nl_generic(0x10, 0x3, 0x10) getsockopt$netlink(r5, 0x10e, 0x9, 0x0, &(0x7f0000000040)) (async) r6 = socket$nl_route(0x10, 0x3, 0x0) (async) r7 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r7, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000140)=ANY=[@ANYBLOB="9000000010000305000000000000000000000700", @ANYRES32=0x0, @ANYBLOB="996e06004d4c0700540012800800010068737200480002800500030008000000050003000500000005000300fd00000008000200", @ANYRES32=r0, @ANYBLOB="08000100", @ANYRES32=r6], 0x90}}, 0x0) 2m40.687381888s ago: executing program 5 (id=3199): r0 = socket$nl_generic(0x10, 0x3, 0x10) (async) r1 = syz_genetlink_get_family_id$mptcp(&(0x7f00000000c0), 0xffffffffffffffff) sendmsg$MPTCP_PM_CMD_ADD_ADDR(r0, &(0x7f0000000400)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000180)={0x28, r1, 0x1, 0x0, 0x0, {}, [@MPTCP_PM_ATTR_ADDR={0x14, 0x1, 0x0, 0x1, [@MPTCP_PM_ADDR_ATTR_FAMILY={0x6, 0x1, 0x2}, @MPTCP_PM_ADDR_ATTR_ADDR4={0x8, 0x3, @remote}]}]}, 0x28}, 0x1, 0x0, 0x0, 0xaa34a4cfdf933201}, 0x10) (async) r2 = socket$alg(0x26, 0x5, 0x0) setsockopt$ALG_SET_KEY(r2, 0x117, 0x1, &(0x7f0000000100)="53d16f76afaafe1689f4f2903a14fbe27e341c403c42c0a4ff5a757589dee6e376a6c119c6276dbf97ac14cea9e649e8e7c6b1dc81074d383f9cfc5134e368c65c0ee04936e36f12b891a23a8ef8b0cbfb51ea87f0c63e4ea8d1e05038", 0x5d) (async) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000440)={0x6, 0x4, &(0x7f0000000000)=ANY=[@ANYBLOB="18000000000000004000000000000000850000008c000000b4a4b60bc123a58a464dfe7fc87b950000"], &(0x7f00000001c0)='GPL\x00'}, 0x90) 2m37.960802685s ago: executing program 5 (id=3202): r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = socket$nl_route(0x10, 0x3, 0x0) (async) r2 = openat$tun(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) ioctl$TUNSETIFF(r2, 0x400454ca, &(0x7f0000000200)={'syzkaller1\x00', 0xc201}) ioctl$sock_SIOCETHTOOL(r1, 0x8946, &(0x7f0000000000)={'syzkaller1\x00', &(0x7f0000000140)=@ethtool_cmd={0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x800feea, [0x1]}}) r3 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000800), 0xffffffffffffffff) sendmsg$NL80211_CMD_SET_REG(r0, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000080)=ANY=[@ANYBLOB='(\x00\x00\x00', @ANYRES16=r3, @ANYBLOB="010000000000000004001b0000000c00228059fe0080040000800600210030"], 0x28}}, 0x0) 2m37.766459573s ago: executing program 5 (id=3207): bpf$PROG_LOAD_XDP(0x5, 0x0, 0x0) (async) bpf$PROG_LOAD_XDP(0x5, 0x0, 0x0) r0 = socket$kcm(0x11, 0x200000000000002, 0x300) setsockopt$sock_attach_bpf(r0, 0x107, 0x12, 0x0, 0x0) write$cgroup_subtree(0xffffffffffffffff, &(0x7f0000000000)=ANY=[@ANYBLOB="8fed007907001175f37538e486dd6317ce2200102f00fe80000000000000875a65059ff57b00000000000000000000000000ac1414aa"], 0xcfa4) sendmsg$kcm(0xffffffffffffffff, 0x0, 0x40800) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000140)={0x6, 0x3, &(0x7f0000000680)=ANY=[@ANYBLOB="1800000002000000000000000000000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x4}, 0x94) socket$netlink(0x10, 0x3, 0x0) (async) r1 = socket$netlink(0x10, 0x3, 0x0) sendmsg$netlink(r1, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000040)=[{&(0x7f0000000140)={0x20, 0x5e, 0xe25, 0x0, 0x0, "", [@nested={0xc, 0x0, 0x0, 0x1, [@typed={0x8, 0x0, 0x0, 0x0, @u32=0x6}]}, @nested={0x4}]}, 0x20}], 0x1}, 0x0) r2 = bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000200)={0x6, 0x3, &(0x7f0000000680)=ANY=[], &(0x7f00000002c0)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x7}, 0x94) socket(0xa, 0x3, 0x3a) (async) r3 = socket(0xa, 0x3, 0x3a) setsockopt$MRT6_FLUSH(r3, 0x29, 0xd0, 0x0, 0x0) write$cgroup_subtree(0xffffffffffffffff, 0x0, 0xcfa4) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000040)={r2, 0x5, 0x1, 0x0, &(0x7f0000000000)='\\', 0x0, 0xd01, 0x88be, 0x0, 0x0, 0x0, 0x0, 0x2}, 0x50) socket(0xb, 0x3, 0x2) (async) socket(0xb, 0x3, 0x2) 2m37.5763711s ago: executing program 5 (id=3211): bpf$PROG_LOAD(0x5, &(0x7f0000000440)={0x3, 0x6, &(0x7f0000000000)=@framed={{0xffffffb4, 0x6, 0x0, 0x0, 0x0, 0x71, 0x11, 0x4f}, [@func={0x85, 0x0, 0x1, 0x0, 0x2}, @call, @exit]}, &(0x7f0000000080)='GPL\x00', 0x4, 0xc3, &(0x7f000000cf3d)=""/195, 0x0, 0x0, '\x00', 0x0, @sched_cls, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0xe}, 0x70) r0 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000140)=ANY=[@ANYBLOB="8c00000010001fff00"/20, @ANYRES32=0x0, @ANYBLOB="0000000000000000400012800b000100697036677265000030000280140007002001000000000000000000000000000014000600fc020000000000000000000000000000040012000800280070cf00000c0019800500060014000000080004"], 0x8c}}, 0x0) r1 = bpf$MAP_CREATE(0x0, &(0x7f0000000440)=ANY=[@ANYBLOB="0a000000010000003f0000004000000042000000fec62c83de4d846436226354145b4406a2b44f92470a2b3753d5a4fc60e821c9e72c80d0f92c5ba2a2083c9897cafde5411f8867029c1e36c0f4c0da08e4266c665cca3654cbaf1fe0fbcec548c4f8bf9c67c455b7ccb9b80d14c58d71017c021bd88eeedeac574a08656e62074cf0db123e6f689d78bb61aca4f204f06f26393e233bb79749af6734b822504374a72d1714", @ANYRES32, @ANYBLOB='\x00'/20, @ANYRES32=0x0, @ANYRES32, @ANYBLOB='\x00'/28], 0x48) r2 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r2, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000240)=ANY=[@ANYBLOB="140000001000010000000000000000000500000a28000000000a030000000000000000000a00000708000240000000020900010073797a31000000002c000000030a010100000000000000000a0000070900010073797a31000000000900030073797a320000000014000000110001"], 0x7c}, 0x1, 0x0, 0x0, 0x4000}, 0x4000000) sendmsg$NFT_BATCH(r2, &(0x7f0000009b40)={0x0, 0x0, &(0x7f0000009b00)={&(0x7f0000000540)={{0x14, 0x10, 0x1, 0x0, 0x0, {0x5}}, [@NFT_MSG_NEWRULE={0x88, 0x6, 0xa, 0x401, 0x0, 0x0, {0xa, 0x0, 0x1}, [@NFTA_RULE_TABLE={0x9, 0x1, 'syz1\x00'}, @NFTA_RULE_EXPRESSIONS={0x5c, 0x4, 0x0, 0x1, [{0x58, 0x1, 0x0, 0x1, @target={{0xb}, @val={0x48, 0x2, 0x0, 0x1, [@NFTA_TARGET_INFO={0x2c, 0x3, "7339f2f10461afb9fdd672bad09dfb78c7699c74e891a0c700"/40}, @NFTA_TARGET_REV={0x8}, @NFTA_TARGET_NAME={0xe, 0x1, 'IDLETIMER\x00'}]}}}]}, @NFTA_RULE_CHAIN={0x9, 0x2, 'syz2\x00'}]}], {0x14, 0x11, 0x1, 0x0, 0x0, {0x1}}}, 0xb0}, 0x1, 0x0, 0x0, 0x4000850}, 0x20040040) bpf$MAP_UPDATE_BATCH(0x1a, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000340)="5d46542b3090ce5ceca970bf8abf170549531f3309044e8b5176033b03b6ffb6877fc1bf93944e8918f7671993d5b56494717c96f1a910bc20b312c4ac1319c04da6b26ab882b4086cb2ac1545cef2003c2f29885496d182cc00eb08067822dfbfa896a37248b990eeeec77445d6f8da52deda337f8af0366be93702298a20b912b44091a10ec9d76ab09f3b44ee95c1de86a9fee94df8dc49001ce17774fea95cd2cbd5e662f1ea9d73351feabf5ef6f6bba0853c240188f92c5f4ae3c27038150a5c6ac31cb4545d6baabd07f705a1ea0e", &(0x7f0000000100), 0x1003, r1}, 0x38) bpf$MAP_GET_NEXT_KEY(0x15, &(0x7f0000001d40)={r1, &(0x7f0000000180)="f85115", 0x0}, 0x20) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000000)={0x1f, 0x2, &(0x7f0000000200)=ANY=[@ANYBLOB="6c0000006b0000ff9500000200000000"], &(0x7f0000000180)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x11}, 0x90) 2m37.385374377s ago: executing program 5 (id=3214): r0 = socket$xdp(0x2c, 0x3, 0x0) sendmsg$nl_route(0xffffffffffffffff, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000480)=ANY=[], 0x18}}, 0x20004881) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000100)=@gettaction={0x50, 0x32, 0x20, 0x70bd25, 0x25dfdbfe, {}, [@action_gd=@TCA_ACT_TAB={0xffffffffffffff23, 0x1, [{0xc, 0x1c, 0x0, 0x0, @TCA_ACT_KIND={0x63, 0x1, 'bpf\x00'}}, {0xc, 0x1d, 0x0, 0x0, @TCA_ACT_KIND={0x8, 0x1, 'ife\x00'}}]}, @action_gd=@TCA_ACT_TAB={0x20, 0x1, [{0x10, 0x7, 0x0, 0x0, @TCA_ACT_KIND={0xb, 0x1, 'mirred\x00'}}, {0x4, 0x1b, 0x0, 0x0, @TCA_ACT_INDEX={0x8, 0x3, 0x40}}]}]}, 0x50}, 0x1, 0x0, 0x0, 0x40000}, 0x4048840) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000000080)={0x0, 0x48}, 0x1, 0x0, 0x0, 0x10}, 0x0) socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000580)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000100)=@newlink={0x3c, 0x10, 0x44b, 0x0, 0x0, {0x7a, 0x0, 0x0, 0x0, 0x0, 0x1008}, [@IFLA_LINKINFO={0x1c, 0x12, 0x0, 0x1, @bridge={{0xb}, {0xc, 0x2, 0x0, 0x1, [@IFLA_BR_MCAST_QUERY_USE_IFADDR={0x4}]}}}]}, 0x3c}, 0x1, 0x0, 0x0, 0x34041043}, 0x4004000) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000100)=ANY=[@ANYBLOB="500000001000010425bbe5ad600027842cf52300", @ANYRES32=0x0, @ANYBLOB="0300000000000000280012800a00010076786c616e00"], 0x50}, 0x1, 0x0, 0x0, 0x13d33d22cca65c15}, 0x4008840) r1 = socket$netlink(0x10, 0x3, 0x0) sendmmsg(r1, &(0x7f00000002c0), 0x40000000000009f, 0x0) getsockopt$XDP_STATISTICS(r0, 0x11b, 0x7, 0x0, &(0x7f0000000200)) r2 = openat$tun(0xffffffffffffff9c, &(0x7f0000000100), 0x0, 0x0) ioctl$TUNSETIFF(r2, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x2}) r3 = openat$tun(0xffffffffffffff9c, &(0x7f0000000400), 0x0, 0x0) close(r3) r4 = socket$nl_generic(0x10, 0x3, 0x10) socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r4, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000040)={0x14, 0x26, 0x301, 0x270bda5, 0x25dfdbfa, {0x1}}, 0x14}}, 0x80) r5 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r5, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r5, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000580)={&(0x7f0000000600)=@newqdisc={0x4c, 0x24, 0x4ee4e6a52ff56541, 0x1, 0x25dfdbfd, {0x0, 0x0, 0x0, r6, {0x0, 0xb}, {0xffff, 0xffff}, {0xfff2}}, [@qdisc_kind_options=@q_netem={{0xa}, {0x1c, 0x2, {{0x3, 0x3, 0x6361, 0x5, 0xffffffff, 0x3}}}}]}, 0x4c}, 0x1, 0x0, 0x0, 0x40088c1}, 0x0) sendmsg$nl_route_sched(r5, &(0x7f00000003c0)={0x0, 0x0, &(0x7f0000000300)={&(0x7f00000006c0)=@newqdisc={0x48, 0x24, 0x4ee4e6a52ff56541, 0x70b926, 0x25dfdc01, {0x0, 0x0, 0x0, r6, {0x0, 0xd}, {0xffff, 0xb}, {0xffff, 0xffe0}}, [@qdisc_kind_options=@q_fq_codel={{0xd}, {0x14, 0x2, [@TCA_FQ_CODEL_CE_THRESHOLD={0x8, 0x7, 0xfffffff9}, @TCA_FQ_CODEL_CE_THRESHOLD_MASK={0x5, 0xb, 0x11}]}}]}, 0x48}, 0x1, 0x0, 0x0, 0x240040e0}, 0x4890) r7 = socket$igmp(0x2, 0x3, 0x2) setsockopt$MRT_ADD_MFC_PROXY(r7, 0x0, 0xd2, &(0x7f0000000000)={@initdev={0xac, 0x1e, 0x0, 0x0}, @multicast1, 0x4, "d30f388c52647612d91de4353d68b0fa00", 0x0, 0x0, 0x4000000, 0xc}, 0x3c) setsockopt$MRT_ADD_MFC(r7, 0x0, 0xcc, &(0x7f0000000280)={@broadcast, @multicast1, 0x0, "7ea97ddb2ac127ffa5b7216fe75ebaa2855a422a8bf8ec7caf003751804500", 0x0, 0x80, 0x4, 0x6}, 0x3c) setsockopt$MRT_ADD_MFC(r7, 0x0, 0xcc, &(0x7f0000000440)={@empty, @private, 0x0, "606b177019716ea6ff1f2c7ed79c77e2e0f19a230000002007007c3d935f00", 0x3e1f}, 0x3c) setsockopt$MRT_FLUSH(r7, 0x0, 0xd4, &(0x7f00000003c0)=0xa, 0x4) ioctl$SIOCSIFHWADDR(r3, 0x8914, &(0x7f0000002280)={'syzkaller0\x00', @multicast}) ioctl$TUNSETIFF(0xffffffffffffffff, 0x400454ca, 0x0) r8 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_route(r8, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000180)=@ipv4_newrule={0x24, 0x20, 0x1, 0x0, 0x0, {}, [@FRA_GENERIC_POLICY=@FRA_IP_PROTO={0x5, 0x19, 0x3c}]}, 0x24}}, 0x48850) 2m22.340178541s ago: executing program 33 (id=3214): r0 = socket$xdp(0x2c, 0x3, 0x0) sendmsg$nl_route(0xffffffffffffffff, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000480)=ANY=[], 0x18}}, 0x20004881) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000100)=@gettaction={0x50, 0x32, 0x20, 0x70bd25, 0x25dfdbfe, {}, [@action_gd=@TCA_ACT_TAB={0xffffffffffffff23, 0x1, [{0xc, 0x1c, 0x0, 0x0, @TCA_ACT_KIND={0x63, 0x1, 'bpf\x00'}}, {0xc, 0x1d, 0x0, 0x0, @TCA_ACT_KIND={0x8, 0x1, 'ife\x00'}}]}, @action_gd=@TCA_ACT_TAB={0x20, 0x1, [{0x10, 0x7, 0x0, 0x0, @TCA_ACT_KIND={0xb, 0x1, 'mirred\x00'}}, {0x4, 0x1b, 0x0, 0x0, @TCA_ACT_INDEX={0x8, 0x3, 0x40}}]}]}, 0x50}, 0x1, 0x0, 0x0, 0x40000}, 0x4048840) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000000080)={0x0, 0x48}, 0x1, 0x0, 0x0, 0x10}, 0x0) socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000580)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000100)=@newlink={0x3c, 0x10, 0x44b, 0x0, 0x0, {0x7a, 0x0, 0x0, 0x0, 0x0, 0x1008}, [@IFLA_LINKINFO={0x1c, 0x12, 0x0, 0x1, @bridge={{0xb}, {0xc, 0x2, 0x0, 0x1, [@IFLA_BR_MCAST_QUERY_USE_IFADDR={0x4}]}}}]}, 0x3c}, 0x1, 0x0, 0x0, 0x34041043}, 0x4004000) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000100)=ANY=[@ANYBLOB="500000001000010425bbe5ad600027842cf52300", @ANYRES32=0x0, @ANYBLOB="0300000000000000280012800a00010076786c616e00"], 0x50}, 0x1, 0x0, 0x0, 0x13d33d22cca65c15}, 0x4008840) r1 = socket$netlink(0x10, 0x3, 0x0) sendmmsg(r1, &(0x7f00000002c0), 0x40000000000009f, 0x0) getsockopt$XDP_STATISTICS(r0, 0x11b, 0x7, 0x0, &(0x7f0000000200)) r2 = openat$tun(0xffffffffffffff9c, &(0x7f0000000100), 0x0, 0x0) ioctl$TUNSETIFF(r2, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x2}) r3 = openat$tun(0xffffffffffffff9c, &(0x7f0000000400), 0x0, 0x0) close(r3) r4 = socket$nl_generic(0x10, 0x3, 0x10) socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r4, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000040)={0x14, 0x26, 0x301, 0x270bda5, 0x25dfdbfa, {0x1}}, 0x14}}, 0x80) r5 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r5, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r5, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000580)={&(0x7f0000000600)=@newqdisc={0x4c, 0x24, 0x4ee4e6a52ff56541, 0x1, 0x25dfdbfd, {0x0, 0x0, 0x0, r6, {0x0, 0xb}, {0xffff, 0xffff}, {0xfff2}}, [@qdisc_kind_options=@q_netem={{0xa}, {0x1c, 0x2, {{0x3, 0x3, 0x6361, 0x5, 0xffffffff, 0x3}}}}]}, 0x4c}, 0x1, 0x0, 0x0, 0x40088c1}, 0x0) sendmsg$nl_route_sched(r5, &(0x7f00000003c0)={0x0, 0x0, &(0x7f0000000300)={&(0x7f00000006c0)=@newqdisc={0x48, 0x24, 0x4ee4e6a52ff56541, 0x70b926, 0x25dfdc01, {0x0, 0x0, 0x0, r6, {0x0, 0xd}, {0xffff, 0xb}, {0xffff, 0xffe0}}, [@qdisc_kind_options=@q_fq_codel={{0xd}, {0x14, 0x2, [@TCA_FQ_CODEL_CE_THRESHOLD={0x8, 0x7, 0xfffffff9}, @TCA_FQ_CODEL_CE_THRESHOLD_MASK={0x5, 0xb, 0x11}]}}]}, 0x48}, 0x1, 0x0, 0x0, 0x240040e0}, 0x4890) r7 = socket$igmp(0x2, 0x3, 0x2) setsockopt$MRT_ADD_MFC_PROXY(r7, 0x0, 0xd2, &(0x7f0000000000)={@initdev={0xac, 0x1e, 0x0, 0x0}, @multicast1, 0x4, "d30f388c52647612d91de4353d68b0fa00", 0x0, 0x0, 0x4000000, 0xc}, 0x3c) setsockopt$MRT_ADD_MFC(r7, 0x0, 0xcc, &(0x7f0000000280)={@broadcast, @multicast1, 0x0, "7ea97ddb2ac127ffa5b7216fe75ebaa2855a422a8bf8ec7caf003751804500", 0x0, 0x80, 0x4, 0x6}, 0x3c) setsockopt$MRT_ADD_MFC(r7, 0x0, 0xcc, &(0x7f0000000440)={@empty, @private, 0x0, "606b177019716ea6ff1f2c7ed79c77e2e0f19a230000002007007c3d935f00", 0x3e1f}, 0x3c) setsockopt$MRT_FLUSH(r7, 0x0, 0xd4, &(0x7f00000003c0)=0xa, 0x4) ioctl$SIOCSIFHWADDR(r3, 0x8914, &(0x7f0000002280)={'syzkaller0\x00', @multicast}) ioctl$TUNSETIFF(0xffffffffffffffff, 0x400454ca, 0x0) r8 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_route(r8, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000180)=@ipv4_newrule={0x24, 0x20, 0x1, 0x0, 0x0, {}, [@FRA_GENERIC_POLICY=@FRA_IP_PROTO={0x5, 0x19, 0x3c}]}, 0x24}}, 0x48850) 2m7.437565772s ago: executing program 2 (id=3749): bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000140)={0x1e, 0x4, &(0x7f0000000080)=@framed={{}, [@ldst={0x1, 0x0, 0x3, 0x2, 0x1, 0x3c}]}, &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x24}, 0x90) r0 = socket(0xa, 0x5, 0x0) r1 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r1, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000700)={{0x14}, [@NFT_MSG_NEWTABLE={0x20, 0x0, 0xa, 0x301, 0x0, 0x0, {0x1, 0x0, 0x1}, [@NFTA_TABLE_NAME={0x9, 0x1, 'syz1\x00'}]}, @NFT_MSG_NEWCHAIN={0x40, 0x3, 0xa, 0x401, 0x0, 0x0, {0x1}, [@NFTA_CHAIN_NAME={0x9, 0x3, 'syz1\x00'}, @NFTA_CHAIN_TABLE={0x9, 0x1, 'syz1\x00'}, @NFTA_CHAIN_HOOK={0x14, 0x4, 0x0, 0x1, [@NFTA_HOOK_HOOKNUM={0x8, 0x1, 0x1, 0x0, 0x5}, @NFTA_HOOK_PRIORITY={0x8, 0x2, 0x1, 0x0, 0x1886c301}]}]}, @NFT_MSG_NEWTABLE={0x28, 0x0, 0xa, 0x5, 0x0, 0x0, {0x1, 0x0, 0x8}, [@NFTA_TABLE_NAME={0x9, 0x1, 'syz1\x00'}, @NFTA_TABLE_FLAGS={0x8, 0x2, 0x1, 0x0, 0x1}]}], {0x14}}, 0xb0}, 0x1, 0x0, 0x0, 0x20004000}, 0x0) sendmsg$inet_sctp(r0, &(0x7f00000000c0)={&(0x7f0000000000)=@in6={0xa, 0x4e24, 0xff, @loopback, 0x5}, 0x1c, &(0x7f0000000040)=[{&(0x7f0000000100)="e6", 0x1}], 0x1, &(0x7f00000002c0)=[@init={0x18, 0x84, 0x0, {0x6, 0x9, 0x6, 0xd9}}, @dstaddrv6={0x20, 0x84, 0x8, @rand_addr=' \x01\x00'}], 0x38, 0x4855}, 0x24000052) 2m7.419342363s ago: executing program 2 (id=3750): r0 = socket$inet6_mptcp(0xa, 0x1, 0x106) setsockopt$inet6_tcp_int(r0, 0x6, 0x10, &(0x7f0000000340), 0x4) 2m7.293264287s ago: executing program 2 (id=3752): r0 = socket$alg(0x26, 0x5, 0x0) bind$alg(r0, &(0x7f0000000000)={0x26, 'aead\x00', 0x0, 0x0, 'rfc4106-gcm-aesni\x00'}, 0x58) setsockopt$ALG_SET_KEY(r0, 0x117, 0x1, &(0x7f00000009c0)="ad56b6c5820fae9d6dcd3292ea54c7be8bbdadbb1632ea5704cae881ef915d374c90c200", 0x24) r1 = accept4(r0, 0x0, 0x0, 0x800) syz_genetlink_get_family_id$devlink(&(0x7f0000000080), r1) socket$alg(0x26, 0x5, 0x0) (async) bind$alg(r0, &(0x7f0000000000)={0x26, 'aead\x00', 0x0, 0x0, 'rfc4106-gcm-aesni\x00'}, 0x58) (async) setsockopt$ALG_SET_KEY(r0, 0x117, 0x1, &(0x7f00000009c0)="ad56b6c5820fae9d6dcd3292ea54c7be8bbdadbb1632ea5704cae881ef915d374c90c200", 0x24) (async) accept4(r0, 0x0, 0x0, 0x800) (async) syz_genetlink_get_family_id$devlink(&(0x7f0000000080), r1) (async) 2m7.265818849s ago: executing program 2 (id=3753): r0 = socket$inet6(0xa, 0x2, 0x0) bind$inet6(r0, &(0x7f0000000080)={0xa, 0xe22, 0x40, @ipv4={'\x00', '\xff\xff', @multicast2}, 0xfffffffc}, 0x1c) r1 = socket$netlink(0x10, 0x3, 0x8000000004) writev(r1, &(0x7f0000000000)=[{&(0x7f00000001c0)="580000001500add427323b472545b45602117fffffff81000e224e217f000001925aa80020007b00090080007f000001e809000000ff0000f03ac71036000000ffffffffffffffffffe7ee00000000000000000200000000", 0x58}], 0x1) r2 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f0000000300)={'bridge0\x00', 0x0}) sendmsg$nl_route(r2, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000080)=@RTM_NEWMDB={0x38, 0x54, 0x1, 0x70bd2b, 0x2, {0x7, r3}, [@MDBA_SET_ENTRY={0x20, 0x1, {r3, 0x1, 0x2, 0x2, {@ip4=@multicast2, 0x86dd}}}]}, 0x38}, 0x1, 0x0, 0x0, 0x5}, 0x40080c0) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000600)={0xb, 0x3, &(0x7f0000000000)=ANY=[@ANYBLOB="620ac4ff00000000711053000000000095"], &(0x7f0000000480)='GPL\x00'}, 0x90) 2m7.14540794s ago: executing program 2 (id=3755): r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x7101}) r1 = socket(0x400000000010, 0x3, 0x0) (async) r2 = socket$unix(0x1, 0x1, 0x0) ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r1, &(0x7f00000012c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000005c0)=@newqdisc={0x38, 0x24, 0x4ee4e6a52ff56541, 0x70bd2a, 0xffffffff, {0x0, 0x0, 0x0, r3, {0x0, 0xfff1}, {0xffff, 0xffff}, {0x0, 0x2}}, [@qdisc_kind_options=@q_multiq={{0xb}, {0x8, 0x2, {0x0, 0x3}}}]}, 0x38}}, 0x0) (async) sendmsg$nl_route_sched(r1, &(0x7f0000000580)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000e40)=@newtfilter={0x84, 0x2c, 0xd27, 0x70bd2d, 0x25dfdc00, {0x0, 0x0, 0x0, r3, {0x0, 0x3}, {}, {0xfff3, 0xffe0}}, [@filter_kind_options=@f_matchall={{0xd}, {0x50, 0x2, [@TCA_MATCHALL_ACT={0x4c, 0x2, [@m_ife={0x48, 0x1, 0x0, 0x0, {{0x8}, {0x20, 0x2, 0x0, 0x1, [@TCA_IFE_PARMS={0x1c, 0x1, {{0xd, 0xd0ea, 0x20000001, 0x3, 0x4}, 0x1}}]}, {0x4}, {0xc}, {0xc, 0x8, {0x3, 0x1}}}}]}]}}]}, 0x84}, 0x1, 0x0, 0x0, 0x50}, 0x0) r4 = socket(0x400000000010, 0x3, 0x0) r5 = socket$unix(0x1, 0x1, 0x0) ioctl$sock_SIOCGIFINDEX(r5, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) (async) recvmsg$can_bcm(r4, &(0x7f0000000900)={0x0, 0x0, 0x0}, 0x4000c000) sendmsg$nl_route_sched(r4, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000180)=@delchain={0x24, 0x66, 0x49404108a2eb2df, 0x30bd2c, 0x25dfdc00, {0x0, 0x0, 0x0, r6, {0x0, 0xfff3}, {}, {0xb, 0xfff3}}}, 0x24}, 0x1, 0x0, 0x0, 0x8848}, 0x20004800) 2m6.816285698s ago: executing program 2 (id=3760): socket$nl_netfilter(0x10, 0x3, 0xc) (async) r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r0, &(0x7f000000c2c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000340)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a28000000000a0101000000005e1affd5020000000900010073797a300000000008000240000000032c000000030a01030000e6ff00000000020000000900010073797a300000001f0900030073797a320000000014000000110001"], 0x7c}}, 0x0) sendmsg$NFT_BATCH(r0, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000080)=ANY=[@ANYBLOB="14000000100001000000000000000000aaff8abecddf827e0300610200000a50000000060a010400000000000000000200000024000480200001800e000100696d6d6564696174652be0f713d90000000c00028008000140000000000900010073797a3000000000095aeb6d06ffca9ece640002cd2a6ec03200000000140000001100010000000000000000000000000a40c5360704bbcdf7a2c4eb8c88228e3c781df342a4e55da1a41f4108849a4385bdb5f0730ea650546dbe68ef3544ca55a666bfe68a6ea3149348c1f9936ecab4c975e81c4816ed120a80b2f6e99c8c3f6a3a9ade0055dc"], 0x78}}, 0x0) socket$nl_generic(0x10, 0x3, 0x10) setsockopt$ARPT_SO_SET_REPLACE(0xffffffffffffffff, 0x0, 0x60, &(0x7f0000000000)={'filter\x00', 0x7, 0x4, 0x3e0, 0x110, 0x0, 0x110, 0x2f8, 0x2f8, 0x2f8, 0x4, 0x0, {[{{@uncond, 0xc0, 0x11e}, @mangle={0x50, 'mangle\x00', 0x0, {@mac, @mac=@remote, @loopback, @local, 0x1, 0x1}}}, {{@arp={@multicast2, @private=0xa010100, 0xff, 0xffffff00, 0xc, 0x4, {@mac=@link_local={0x1, 0x80, 0xc2, 0x0, 0x0, 0x1}, {[0xff, 0xff, 0xff, 0xff, 0x0, 0xbe9240b8a223bba0]}}, {@mac=@dev={'\xaa\xaa\xaa\xaa\xaa', 0x24}, {[0xff, 0x0, 0xff, 0xff, 0xff]}}, 0x2, 0x6, 0x23b0, 0x9dd7, 0x80, 0x9, 'veth1_vlan\x00', 'ip_vti0\x00', {0xff}, {0xff}, 0x0, 0x12}, 0xc0, 0x100}, @unspec=@ERROR={0x40, 'ERROR\x00', 0x0, "716ebd2e1aa0cc683e62f312359594df00da56317f76121697127951fdba"}}, {{@uncond, 0xc0, 0xe8}, @unspec=@NFQUEUE0={0x28}}], {{'\x00', 0xc0, 0xe8}, {0x28}}}}, 0x430) (async) setsockopt$ARPT_SO_SET_REPLACE(0xffffffffffffffff, 0x0, 0x60, &(0x7f0000000000)={'filter\x00', 0x7, 0x4, 0x3e0, 0x110, 0x0, 0x110, 0x2f8, 0x2f8, 0x2f8, 0x4, 0x0, {[{{@uncond, 0xc0, 0x11e}, @mangle={0x50, 'mangle\x00', 0x0, {@mac, @mac=@remote, @loopback, @local, 0x1, 0x1}}}, {{@arp={@multicast2, @private=0xa010100, 0xff, 0xffffff00, 0xc, 0x4, {@mac=@link_local={0x1, 0x80, 0xc2, 0x0, 0x0, 0x1}, {[0xff, 0xff, 0xff, 0xff, 0x0, 0xbe9240b8a223bba0]}}, {@mac=@dev={'\xaa\xaa\xaa\xaa\xaa', 0x24}, {[0xff, 0x0, 0xff, 0xff, 0xff]}}, 0x2, 0x6, 0x23b0, 0x9dd7, 0x80, 0x9, 'veth1_vlan\x00', 'ip_vti0\x00', {0xff}, {0xff}, 0x0, 0x12}, 0xc0, 0x100}, @unspec=@ERROR={0x40, 'ERROR\x00', 0x0, "716ebd2e1aa0cc683e62f312359594df00da56317f76121697127951fdba"}}, {{@uncond, 0xc0, 0xe8}, @unspec=@NFQUEUE0={0x28}}], {{'\x00', 0xc0, 0xe8}, {0x28}}}}, 0x430) socket$nl_xfrm(0x10, 0x3, 0x6) (async) r1 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r1, &(0x7f0000000180)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000300)=@updpolicy={0xb8, 0x19, 0x1, 0x70bd26, 0x0, {{@in=@multicast1=0xe0000002, @in, 0x0, 0x0, 0xfffd, 0x0, 0xa, 0x0, 0x0, 0x87}, {0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x20000000007, 0xfffffffffffffffb}, {0x0, 0x0, 0x0, 0xfffffffffffffffe}}}, 0xb8}}, 0x10) (async) sendmsg$nl_xfrm(r1, &(0x7f0000000180)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000300)=@updpolicy={0xb8, 0x19, 0x1, 0x70bd26, 0x0, {{@in=@multicast1=0xe0000002, @in, 0x0, 0x0, 0xfffd, 0x0, 0xa, 0x0, 0x0, 0x87}, {0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x20000000007, 0xfffffffffffffffb}, {0x0, 0x0, 0x0, 0xfffffffffffffffe}}}, 0xb8}}, 0x10) sendmsg$nl_xfrm(r1, &(0x7f0000000180)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f00000003c0)=@updpolicy={0xb8, 0x15, 0x1, 0x0, 0xfffffffe, {{@in=@multicast1=0xe0000002, @in6=@loopback, 0x0, 0x0, 0x0, 0x0, 0xa, 0x10, 0x20}, {0x0, 0x1, 0x100, 0x0, 0x0, 0x9, 0xffffffff}, {}, 0x0, 0x6e6bb5, 0x2}}, 0xb8}}, 0x0) socket$nl_generic(0x10, 0x3, 0x10) (async) r2 = socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$ethtool(&(0x7f00000002c0), 0xffffffffffffffff) r3 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r3, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000080)={0x18, 0x26, 0x1, 0x7fffd, 0x1000, {0x4}, [@nested={0x4, 0x1}]}, 0x18}, 0x1, 0x0, 0x0, 0x400c801}, 0x4008090) sendmsg$ETHTOOL_MSG_LINKMODES_SET(r2, &(0x7f0000000240)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000000)=ANY=[], 0x2c}}, 0x0) ioctl$sock_ipv6_tunnel_SIOCCHGTUNNEL(0xffffffffffffffff, 0x89f3, &(0x7f00000002c0)={'syztnl0\x00', &(0x7f0000000240)={'syztnl2\x00', 0x0, 0x4, 0x6, 0xfb, 0x6, 0x59, @empty, @remote, 0x10, 0x7, 0x3, 0xbf1}}) getsockname$packet(0xffffffffffffffff, &(0x7f0000000300), &(0x7f00000003c0)=0x14) ioctl$ifreq_SIOCGIFINDEX_vcan(r0, 0x8933, &(0x7f0000000480)={'vcan0\x00'}) 1m51.746747853s ago: executing program 34 (id=3760): socket$nl_netfilter(0x10, 0x3, 0xc) (async) r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r0, &(0x7f000000c2c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000340)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a28000000000a0101000000005e1affd5020000000900010073797a300000000008000240000000032c000000030a01030000e6ff00000000020000000900010073797a300000001f0900030073797a320000000014000000110001"], 0x7c}}, 0x0) sendmsg$NFT_BATCH(r0, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000080)=ANY=[@ANYBLOB="14000000100001000000000000000000aaff8abecddf827e0300610200000a50000000060a010400000000000000000200000024000480200001800e000100696d6d6564696174652be0f713d90000000c00028008000140000000000900010073797a3000000000095aeb6d06ffca9ece640002cd2a6ec03200000000140000001100010000000000000000000000000a40c5360704bbcdf7a2c4eb8c88228e3c781df342a4e55da1a41f4108849a4385bdb5f0730ea650546dbe68ef3544ca55a666bfe68a6ea3149348c1f9936ecab4c975e81c4816ed120a80b2f6e99c8c3f6a3a9ade0055dc"], 0x78}}, 0x0) socket$nl_generic(0x10, 0x3, 0x10) setsockopt$ARPT_SO_SET_REPLACE(0xffffffffffffffff, 0x0, 0x60, &(0x7f0000000000)={'filter\x00', 0x7, 0x4, 0x3e0, 0x110, 0x0, 0x110, 0x2f8, 0x2f8, 0x2f8, 0x4, 0x0, {[{{@uncond, 0xc0, 0x11e}, @mangle={0x50, 'mangle\x00', 0x0, {@mac, @mac=@remote, @loopback, @local, 0x1, 0x1}}}, {{@arp={@multicast2, @private=0xa010100, 0xff, 0xffffff00, 0xc, 0x4, {@mac=@link_local={0x1, 0x80, 0xc2, 0x0, 0x0, 0x1}, {[0xff, 0xff, 0xff, 0xff, 0x0, 0xbe9240b8a223bba0]}}, {@mac=@dev={'\xaa\xaa\xaa\xaa\xaa', 0x24}, {[0xff, 0x0, 0xff, 0xff, 0xff]}}, 0x2, 0x6, 0x23b0, 0x9dd7, 0x80, 0x9, 'veth1_vlan\x00', 'ip_vti0\x00', {0xff}, {0xff}, 0x0, 0x12}, 0xc0, 0x100}, @unspec=@ERROR={0x40, 'ERROR\x00', 0x0, "716ebd2e1aa0cc683e62f312359594df00da56317f76121697127951fdba"}}, {{@uncond, 0xc0, 0xe8}, @unspec=@NFQUEUE0={0x28}}], {{'\x00', 0xc0, 0xe8}, {0x28}}}}, 0x430) (async) setsockopt$ARPT_SO_SET_REPLACE(0xffffffffffffffff, 0x0, 0x60, &(0x7f0000000000)={'filter\x00', 0x7, 0x4, 0x3e0, 0x110, 0x0, 0x110, 0x2f8, 0x2f8, 0x2f8, 0x4, 0x0, {[{{@uncond, 0xc0, 0x11e}, @mangle={0x50, 'mangle\x00', 0x0, {@mac, @mac=@remote, @loopback, @local, 0x1, 0x1}}}, {{@arp={@multicast2, @private=0xa010100, 0xff, 0xffffff00, 0xc, 0x4, {@mac=@link_local={0x1, 0x80, 0xc2, 0x0, 0x0, 0x1}, {[0xff, 0xff, 0xff, 0xff, 0x0, 0xbe9240b8a223bba0]}}, {@mac=@dev={'\xaa\xaa\xaa\xaa\xaa', 0x24}, {[0xff, 0x0, 0xff, 0xff, 0xff]}}, 0x2, 0x6, 0x23b0, 0x9dd7, 0x80, 0x9, 'veth1_vlan\x00', 'ip_vti0\x00', {0xff}, {0xff}, 0x0, 0x12}, 0xc0, 0x100}, @unspec=@ERROR={0x40, 'ERROR\x00', 0x0, "716ebd2e1aa0cc683e62f312359594df00da56317f76121697127951fdba"}}, {{@uncond, 0xc0, 0xe8}, @unspec=@NFQUEUE0={0x28}}], {{'\x00', 0xc0, 0xe8}, {0x28}}}}, 0x430) socket$nl_xfrm(0x10, 0x3, 0x6) (async) r1 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r1, &(0x7f0000000180)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000300)=@updpolicy={0xb8, 0x19, 0x1, 0x70bd26, 0x0, {{@in=@multicast1=0xe0000002, @in, 0x0, 0x0, 0xfffd, 0x0, 0xa, 0x0, 0x0, 0x87}, {0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x20000000007, 0xfffffffffffffffb}, {0x0, 0x0, 0x0, 0xfffffffffffffffe}}}, 0xb8}}, 0x10) (async) sendmsg$nl_xfrm(r1, &(0x7f0000000180)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000300)=@updpolicy={0xb8, 0x19, 0x1, 0x70bd26, 0x0, {{@in=@multicast1=0xe0000002, @in, 0x0, 0x0, 0xfffd, 0x0, 0xa, 0x0, 0x0, 0x87}, {0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x20000000007, 0xfffffffffffffffb}, {0x0, 0x0, 0x0, 0xfffffffffffffffe}}}, 0xb8}}, 0x10) sendmsg$nl_xfrm(r1, &(0x7f0000000180)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f00000003c0)=@updpolicy={0xb8, 0x15, 0x1, 0x0, 0xfffffffe, {{@in=@multicast1=0xe0000002, @in6=@loopback, 0x0, 0x0, 0x0, 0x0, 0xa, 0x10, 0x20}, {0x0, 0x1, 0x100, 0x0, 0x0, 0x9, 0xffffffff}, {}, 0x0, 0x6e6bb5, 0x2}}, 0xb8}}, 0x0) socket$nl_generic(0x10, 0x3, 0x10) (async) r2 = socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$ethtool(&(0x7f00000002c0), 0xffffffffffffffff) r3 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r3, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000080)={0x18, 0x26, 0x1, 0x7fffd, 0x1000, {0x4}, [@nested={0x4, 0x1}]}, 0x18}, 0x1, 0x0, 0x0, 0x400c801}, 0x4008090) sendmsg$ETHTOOL_MSG_LINKMODES_SET(r2, &(0x7f0000000240)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000000)=ANY=[], 0x2c}}, 0x0) ioctl$sock_ipv6_tunnel_SIOCCHGTUNNEL(0xffffffffffffffff, 0x89f3, &(0x7f00000002c0)={'syztnl0\x00', &(0x7f0000000240)={'syztnl2\x00', 0x0, 0x4, 0x6, 0xfb, 0x6, 0x59, @empty, @remote, 0x10, 0x7, 0x3, 0xbf1}}) getsockname$packet(0xffffffffffffffff, &(0x7f0000000300), &(0x7f00000003c0)=0x14) ioctl$ifreq_SIOCGIFINDEX_vcan(r0, 0x8933, &(0x7f0000000480)={'vcan0\x00'}) 3.801194527s ago: executing program 0 (id=5412): r0 = socket$alg(0x26, 0x5, 0x0) bind$alg(r0, &(0x7f0000000000)={0x26, 'skcipher\x00', 0x0, 0x0, 'ecb(des3_ede)\x00'}, 0x58) r1 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r1, &(0x7f0000000600)={0x0, 0x0, &(0x7f00000005c0)={&(0x7f0000000540)=@RTM_NEWNSID={0x14, 0x58, 0x1, 0x70bd2b, 0x25dfdbfd}, 0x14}, 0x1, 0x0, 0x0, 0x4015}, 0x20004804) setsockopt$ALG_SET_KEY(r0, 0x117, 0x1, &(0x7f0000c18000)="ad56b6c5820fae9d6dcd3292ea54c7beef915d564c90c200", 0x18) r2 = accept4(r0, 0x0, 0x0, 0x0) sendmmsg$alg(r2, &(0x7f0000000400)=[{0x0, 0x0, 0x0, 0x0, &(0x7f0000000380)=[@op={0x18, 0x117, 0x3, 0x1}], 0x18}], 0x1, 0x0) r3 = socket$nl_route(0x10, 0x3, 0x0) r4 = socket$igmp6(0xa, 0x3, 0x3a) setsockopt$MRT6_ADD_MFC(r4, 0x29, 0x22, &(0x7f0000000080)={{0xa, 0x0, 0x101, @rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x02'}, {0xa, 0x0, 0x0, @dev}, 0x0, {[0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x80000000]}}, 0x5c) ioctl$sock_ipv6_tunnel_SIOCGET6RD(r2, 0x89f8, &(0x7f0000000340)={'tunl0\x00', &(0x7f00000002c0)={'gretap0\x00', 0x0, 0x7, 0x700, 0x9, 0x101, {{0x18, 0x4, 0x1, 0x20, 0x60, 0x67, 0x0, 0xb1, 0x29, 0x0, @dev={0xac, 0x14, 0x14, 0xf}, @empty, {[@noop, @timestamp_addr={0x44, 0xc, 0xfb, 0x1, 0x6, [{@dev={0xac, 0x14, 0x14, 0x14}, 0x3}]}, @timestamp_addr={0x44, 0x24, 0x8d, 0x1, 0x1, [{@initdev={0xac, 0x1e, 0x0, 0x0}, 0x7c}, {@multicast1, 0x800}, {@initdev={0xac, 0x1e, 0x1, 0x0}, 0x5}, {@initdev={0xac, 0x1e, 0x1, 0x0}, 0x285}]}, @ssrr={0x89, 0x1b, 0x49, [@dev={0xac, 0x14, 0x14, 0x44}, @local, @private=0xa010102, @remote, @private=0xa010102, @empty]}]}}}}}) sendmsg$nl_route(r3, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000440)=@newlink={0x70, 0x10, 0x44b, 0x0, 0x0, {0x7a, 0x0, 0x0, r5}, [@IFLA_LINKINFO={0x44, 0x12, 0x0, 0x1, @bond={{0x9}, {0x34, 0x2, 0x0, 0x1, [@IFLA_BOND_PEER_NOTIF_DELAY={0x8, 0x1c, 0x5}, @IFLA_BOND_ALL_SLAVES_ACTIVE={0x5, 0x11, 0x5}, @IFLA_BOND_ARP_IP_TARGET={0x18, 0x8, 0x0, 0x1, [@multicast1, @initdev={0xac, 0x1e, 0x0, 0x0}, @initdev={0xac, 0x1e, 0x0, 0x0}, @empty, @private=0xa010101]}, @IFLA_BOND_LP_INTERVAL={0x8}]}}}, @IFLA_ADDRESS={0xa, 0x1, @multicast}]}, 0x70}}, 0x0) syz_genetlink_get_family_id$nl80211(&(0x7f0000000640), r2) r6 = accept4(r2, 0x0, &(0x7f0000000080), 0x800) getsockopt$inet_sctp_SCTP_PR_ASSOC_STATUS(r2, 0x84, 0x73, &(0x7f00000000c0)={0x0, 0x4, 0x30, 0x3, 0x155d}, &(0x7f0000000100)=0x18) r8 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000040)='memory.events\x00', 0x275a, 0x0) writev(r8, &(0x7f0000000700)=[{&(0x7f00000000c0)="02ef667db5e53f90ddf725d589e79497ed32000192c55934a92b7b6285d5b1fb065ae78c91902eb69b165687a415b833508dc85680407417b65a83592a4e597178233649c148ab68571c3390210cbe7ea8194c25e9b37c83bb8055e08218fa6a47d9401cdffa24dd9b984cec90c7c1508f05453927e13e43ffc2f4482bd0fc", 0x4}, {&(0x7f0000000140)="1a36c585040053c08764d056a86d003cbaf5cde47e5f51052d82c19aa673d661416429534237090097b3116d403a08c07bbbe72da665341d6592092455897fe84a54e94a435e8d3810ce4899d5b04d17b099bbec7fb7f005b03bb00f6860f0cd665a14bd1b7ad319101e9beae62faa71a5f2383e963aba417592d7a84958", 0x7e}], 0x62) mmap(&(0x7f0000000000/0x4000)=nil, 0x4000, 0x1, 0x10012, r8, 0x0) mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000)='./cgroup/syz0\x00', 0x1ff) r9 = openat$tun(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x44, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r10 = bpf$MAP_CREATE(0x0, &(0x7f00000000c0)=ANY=[@ANYBLOB="01000000120000007f00000001"], 0x48) bpf$MAP_GET_NEXT_KEY(0x4, &(0x7f00000004c0)={r10, &(0x7f0000000300), 0x0}, 0x20) ioctl$FS_IOC_SETFLAGS(r9, 0x401c5820, &(0x7f0000000080)) r11 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000240)='./cgroup.cpu/syz1\x00', 0x200002, 0x0) openat$cgroup_ro(r11, &(0x7f0000000280)='blkio.throttle.io_serviced_recursive\x00', 0x0, 0x0) getsockopt$inet_sctp_SCTP_PEER_AUTH_CHUNKS(r6, 0x84, 0x1a, &(0x7f0000000140)={r7, 0xa1, "e507be67ca6b87572b28f2c1058ff843f8cfb52d76375ab9e0cc411b5dafd9a4038078e057296d81e6eadf65ebb231cb110d47424278f50a38a11678e7ac5bb5c127ffb3125a4383d38214acd053ef78618b97c50e55a56ffab65e8f206813cfa66686ee04d597c613b5db2a4ba0347237e5224a4729da912a4be2141fb573145dd4a514fa9d9dba61cccfebae6ae1bfe47565762bff913026493968e61b653f94"}, &(0x7f0000000200)=0xa9) 2.866787649s ago: executing program 0 (id=5435): r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) writev(0xffffffffffffffff, &(0x7f0000000640)=[{&(0x7f0000000000)="20f66e14b5ab022742cce5fa162da1746c68527797098cb4c75ce8f375cf7045d8c7c44eb09ca19f042afba03207603aaf2ed7417a78e64e7eeecbf4c479496f6f9037a6663399d230ae207e5cfe1ca61e1ab0513334bd5028bd3d7acb58e8086bc4784f95ed41cdbc23f3053c61de6214ccb5", 0x73}, {&(0x7f0000000080)="742b7c72a95ddf76ee65ef8441e71b39fd2045f250dbfe9f81b10034c07fc1cbe9266ded6fedb241ecd38afc4e9e9be401131af42d5be8667acedcc776ade621a529766d8f90b238c61f250e021962cf292c6cc49f3caef3f9f95374fbadd4f1b27f122867d0aa546589932d8323518c63ba5b71ebe9dd15bfcadf304fbbb35af5a77d83667bf52ae0eae53a8ef8ca3430bc25367284dd57e557667765fbf4ed50c06213e9b3f894bbf2ff46af", 0xad}, {&(0x7f0000000140)="bc0875b54fa65aa6aa923c92101a8206c95da5b0c9f2e508d64230cc6cc1a230832107b6d42da8a576a407b2d8ce67ef83115dd88f551e755492eb196d00ccd378d658d78a8751e8fc607ee4af254901fd7588f8d3ae4f973878cbe6895ddfc047b7878854457abb1bd905030000ba8407c5077a9fcc25b3329e7d1e4f7ce73c029eb9ae5b3790579b99a29333e76061dbf6ee2517236dd87efda46793cad9267b8a629914d5d5add553c6a64818f301fe16499d29e3dc8e07410c0f33142829d659b4809687c83c786fd8add2f997ee27ea3d74b5a9740f55618309f9597661455232dfb94b9f802e49fea0fcc4ccff6887039ce38cb9f3", 0xf8}, {&(0x7f0000000240)="49fcb9a6074a9c", 0x7}, {&(0x7f0000000280)="bb5ffe66441ca31ec14c51ca37ca324121ef9fe3e7e25b0c516e7feffcb9541f9c0e6bcd441d46bbb07022d679359098c26efb18969a75c78d7a6917c5dd43d3a582c0e9c1fb", 0x46}, {&(0x7f0000000300)="0958883f", 0x4}, {&(0x7f0000000340)="0057c12dd42742325fc2eba1019f839805b5b0d1e8a7a22703d6c60ec6a5537d19bec42b8b6a3da966345356377328f8fccb425951b92d6f82b0a58d2b5cf629268f7960065e1be3c9d5a22f9719e12a53854c3a92ca5a5c9d774e52f7fc0cf7f44cc313c4d8078e6352f12244099a7927835d3f0876cd8ef4e0114f4347246e48c8b50f036c274c6ddd990242df6ad09e0feedd3229fab7df7b1b8abcbfc26f6c8366a0545801b95e93f62cd44ca2d9927fb3ecee8003f7d1aa58865dc5c269f10fc588f9719fc66f4d", 0xca}, {&(0x7f0000000440)="a8b61c1f36ae6ac3173216bfab63266c7f20cf14c6ef55b37eab3f85e4a1defcafa814761a", 0x25}, {&(0x7f00000005c0)="0eff71bb7bcb2a79d9c6f6cb3a3eb2e908aa1debfdc561fdf582e725a702546967385db5658b4847b269767e0d8bf302b41364c93459e7167c7a8026be3468323e430c1056b764b410027d17711fd5456a262e3c56297be502e77e7a0e8cdadeeb0d412ccbd217b790ec8f7aeabec4067853b83c5dbf05d980515171b067", 0x7e}], 0x9) r1 = syz_genetlink_get_family_id$ieee802154(&(0x7f0000000480), r0) sendmsg$IEEE802154_LLSEC_GETPARAMS(r0, &(0x7f0000000580)={0x0, 0x0, &(0x7f0000000540)={&(0x7f0000000500)={0x1c, r1, 0x1, 0x70bd2a, 0x25dfdbfd, {}, [@IEEE802154_ATTR_DEV_INDEX={0x8}]}, 0x1c}, 0x1, 0x0, 0x0, 0x24000810}, 0x4000) 2.721335941s ago: executing program 0 (id=5438): socket$nl_xfrm(0x10, 0x3, 0x6) r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000004c0)={{0x14, 0x10, 0x1, 0x0, 0x0, {0xd4ad1185e214d3bd}}, [@NFT_MSG_NEWTABLE={0x28, 0x0, 0xa, 0x301, 0x0, 0x0, {0x1}, [@NFTA_TABLE_FLAGS={0x8, 0x2, 0x1, 0x0, 0x2}, @NFTA_TABLE_NAME={0x9, 0x1, 'syz1\x00'}]}, @NFT_MSG_NEWCHAIN={0x40, 0x3, 0xa, 0x201, 0x0, 0x0, {0x1, 0x0, 0x200}, [@NFTA_CHAIN_NAME={0x9, 0x3, 'syz0\x00'}, @NFTA_CHAIN_HOOK={0x14, 0x4, 0x0, 0x1, [@NFTA_HOOK_PRIORITY={0x8}, @NFTA_HOOK_HOOKNUM={0x8, 0x1, 0x1, 0x0, 0x1}]}, @NFTA_CHAIN_TABLE={0x9, 0x1, 'syz1\x00'}]}], {0x14}}, 0x90}}, 0xc000) close(0x4) r1 = syz_init_net_socket$bt_sco(0x1f, 0x5, 0x2) r2 = socket$nl_route(0x10, 0x3, 0x0) recvmmsg(r2, &(0x7f0000000080)=[{{0x0, 0x0, &(0x7f0000003740)=[{&(0x7f000000b580)=""/4102, 0x1006}, {&(0x7f0000000900)=""/74, 0x4a}, {&(0x7f0000000200)=""/143, 0x8f}, {&(0x7f0000000140)=""/128, 0x80}, {0x0}], 0x5}, 0x6}, {{0x0, 0x0, 0x0}, 0x6}, {{0x0, 0x0, 0x0}, 0xfff}], 0x3, 0x2300, 0x0) sendmsg$netlink(r2, &(0x7f0000000000)={0x0, 0x0, &(0x7f00000001c0)=[{&(0x7f0000000040)=ANY=[@ANYBLOB="1800000042008991"], 0x18}], 0x1cd}, 0x2000080) ioctl$int_in(r1, 0x5421, &(0x7f0000000680)=0xffffffff7fffffff) accept(r1, 0x0, 0x0) 2.140312015s ago: executing program 4 (id=5453): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r0, &(0x7f000000c2c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f00000003c0)=ANY=[@ANYBLOB="140000001000010000000000000000001c6a000a28000000000a0101000000005e1affd5020000000900010073797a300000000008000240000000032c000000030a01030000e6ff00000000020000000900010073797a30000000000900030073797a320000000014000000110001"], 0x7c}}, 0x0) sendmsg$NFT_BATCH(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000080)={{0x14}, [@NFT_MSG_NEWRULE={0x4c, 0x6, 0xa, 0x409, 0x0, 0x0, {0x2}, [@NFTA_RULE_TABLE={0x9, 0x1, 'syz0\x00'}, @NFTA_RULE_CHAIN={0x9, 0x2, 'syz2\x00'}, @NFTA_RULE_EXPRESSIONS={0x20, 0x4, 0x0, 0x1, [{0x1c, 0x1, 0x0, 0x1, @xfrm={{0x9}, @val={0xc, 0x2, 0x0, 0x1, [@NFTA_XFRM_KEY={0x8}]}}}]}]}], {0x14}}, 0x74}}, 0x0) r1 = socket(0x10, 0x803, 0x0) r2 = socket(0x10, 0x803, 0x0) ioctl$sock_SIOCETHTOOL(r2, 0x8946, &(0x7f00000002c0)={'veth0_to_team\x00', &(0x7f0000000000)=@ethtool_cmd={0x2c, 0x6, 0x40004, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0xfc, 0x6}}) ioctl$sock_SIOCETHTOOL(r1, 0x8946, &(0x7f00000002c0)={'veth0_to_team\x00', &(0x7f0000000000)=@ethtool_channels={0x3d, 0x0, 0x0, 0x0, 0x0, 0x1, 0x1}}) 1.936129009s ago: executing program 4 (id=5456): sendmsg$IPCTNL_MSG_EXP_NEW(0xffffffffffffffff, 0x0, 0x4008000) r0 = socket(0x15, 0x800, 0xc) r1 = socket$inet_tcp(0x2, 0x1, 0x0) setsockopt$inet_tcp_int(r1, 0x6, 0x210000000013, &(0x7f00000000c0)=0x100000001, 0x4) r2 = socket$igmp(0x2, 0x3, 0x2) setsockopt$IPT_SO_SET_REPLACE(r2, 0x0, 0x40, &(0x7f0000000700)=@mangle={'mangle\x00', 0x1f, 0x6, 0x418, 0x270, 0x138, 0x1d8, 0x138, 0x1d8, 0x380, 0x380, 0x380, 0x380, 0x380, 0x6, 0x0, {[{{@uncond, 0x0, 0x70, 0xa0}, @TPROXY={0x30, 'TPROXY\x00', 0x0, {0x3, 0x7, @multicast1, 0x4e22}}}, {{@uncond, 0x0, 0x70, 0x98}, @common=@unspec=@NFQUEUE3={0x28, 'NFQUEUE\x00', 0x3, {0xe, 0x4, 0x2}}}, {{@ip={@dev={0xac, 0x14, 0x14, 0x36}, @loopback, 0x1fffffffe, 0xff, 'pimreg1\x00', 'dummy0\x00', {0xff}, {}, 0x2, 0x1, 0x40}, 0x0, 0x70, 0xa0}, @TPROXY={0x30, 'TPROXY\x00', 0x0, {0x0, 0x4, @remote, 0x4e21}}}, {{@ip={@remote, @multicast1, 0xff, 0x0, 'virt_wifi0\x00', 'team_slave_0\x00', {0xff}, {0xff}, 0x6c, 0x2, 0x59}, 0x0, 0x70, 0x98}, @common=@inet=@SET1={0x28, 'SET\x00', 0x1, {{0x1, 0x3, 0x2}, {0x3, 0x3, 0x4}}}}, {{@ip={@local, @remote, 0xffffff00, 0xff, 'gretap0\x00', 'batadv0\x00', {}, {}, 0x84, 0x1, 0x5}, 0x0, 0xa0, 0x110, 0x0, {}, [@common=@ah={{0x30}, {[0x3, 0x5112], 0x1}}]}, @common=@unspec=@NFLOG={0x70, 'NFLOG\x00', 0x0, {0x1, 0x0, 0x46c5, 0x0, 0x0, "2b4e84400af0c61fe4b77d62d90d10d33fce7dc71425d4209d84f086ee827a4b064c417320a5f57e2dcc64d51dd574bd8c47cabfe9f21364d0c1a47f3240e300"}}}], {{'\x00', 0x0, 0x70, 0x98}, {0x28}}}}, 0x60) bind$inet(r1, &(0x7f0000000080)={0x2, 0x4e21, @multicast1}, 0x10) connect$inet(r1, &(0x7f0000000180)={0x2, 0x4e21, @dev={0xac, 0x14, 0x14, 0x42}}, 0x10) r3 = socket$inet6_udp(0xa, 0x2, 0x0) setsockopt$inet6_int(r3, 0x29, 0x2, &(0x7f0000000100)=0x9, 0x4) setsockopt$SO_TIMESTAMPING(r3, 0x1, 0x41, &(0x7f0000000200)=0x439a, 0x4) sendto$inet6(r3, 0x0, 0x0, 0x0, &(0x7f0000000180)={0xa, 0x4e20, 0xffffffff, @loopback, 0xbf}, 0x1c) setsockopt$inet6_int(r3, 0x29, 0x8, &(0x7f0000000f40)=0x6c, 0x4) recvmmsg(r3, &(0x7f0000001200)=[{{0x0, 0x0, 0x0}, 0xffff78a9}, {{&(0x7f0000000240)=@rc={0x1f, @none}, 0x80, &(0x7f00000005c0)=[{&(0x7f00000002c0)=""/200, 0xc8}, {&(0x7f00000003c0)=""/212, 0xd4}, {&(0x7f00000004c0)=""/239, 0xef}], 0x3, &(0x7f0000000600)=""/155, 0x9b}, 0x80}, {{&(0x7f0000000b80)=@pppol2tpv3in6={0x18, 0x1, {0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, {0xa, 0x0, 0x0, @ipv4={""/10, ""/2, @empty}}}}, 0x80, &(0x7f0000000d00)=[{&(0x7f0000000c00)=""/180, 0xb4}, {&(0x7f0000000cc0)=""/41, 0x29}], 0x2, &(0x7f0000000d40)=""/144, 0x90}, 0x6}, {{&(0x7f0000000e00)=@hci, 0x80, &(0x7f0000001140)=[{&(0x7f0000000f80)=""/241, 0xf1}, {&(0x7f0000001080)=""/165, 0xa5}], 0x2, &(0x7f0000001180)=""/104, 0x68}, 0x1}], 0x4, 0x0, 0x0) setsockopt$inet_tcp_TCP_REPAIR_OPTIONS(r1, 0x6, 0x16, &(0x7f0000000200)=[@mss={0x2, 0x4}, @window={0x3, 0x7}, @sack_perm, @mss={0x2, 0xfff}, @window={0x3, 0x0, 0x401}, @window, @mss={0x2, 0xfffffffc}, @window={0x3, 0x3, 0x7}], 0x8) setsockopt$inet_tcp_TCP_REPAIR(r1, 0x6, 0x13, &(0x7f00000001c0), 0x4) sendto$inet(r1, &(0x7f0000000000), 0xffffffffffffff94, 0xb, 0x0, 0x0) recvfrom$inet(r1, &(0x7f0000000080)=""/7, 0x7, 0xc9100120, 0x0, 0x0) setsockopt$inet6_tcp_TLS_TX(r0, 0x11a, 0x1, &(0x7f0000000040)=@ccm_128={{0x304}, "31ad93b8c0f17928", "5fc3731d05277b3d1c93d32b13d3a593", "ce48b680", "6e17a67d460fff3a"}, 0x28) setsockopt$inet_tcp_TCP_REPAIR(r4, 0x6, 0x13, &(0x7f0000000140)=0x1, 0x4) r5 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r5, &(0x7f0000000000)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000100)=ANY=[@ANYBLOB="1c000000150001032dbd7000000000000c1600000800040001"], 0x1c}, 0x1, 0x0, 0x0, 0x2400c855}, 0x30040010) 1.800811335s ago: executing program 0 (id=5461): r0 = socket$tipc(0x1e, 0x5, 0x0) setsockopt$TIPC_GROUP_JOIN(r0, 0x10f, 0x87, &(0x7f0000000100)={0x43, 0x0, 0x3, 0x3}, 0x10) r1 = socket$kcm(0x10, 0x2, 0x10) r2 = bpf$MAP_CREATE(0x0, &(0x7f00000000c0)=ANY=[@ANYBLOB="1b00000000000000000000000080"], 0x48) bpf$PROG_LOAD(0x5, &(0x7f0000000700)={0x1f, 0xf, &(0x7f00000004c0)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r2, @ANYBLOB="0000000000000000b70200005245855db7030000000000008500000083000000bf0900000000000055090100000000009500000000000000bf91000000000000bf020000000000008500000084000000b70000000000000095"], &(0x7f0000000180)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x1d, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) sendmsg$kcm(r1, &(0x7f00000000c0)={0x0, 0x0, &(0x7f00000005c0), 0x3}, 0x40000) recvmmsg(r1, &(0x7f0000000980)=[{{0x0, 0x0, &(0x7f00000003c0)=[{&(0x7f0000000ec0)=""/136, 0x88}, {&(0x7f0000001340)=""/4094, 0xffe}, {&(0x7f0000000040)=""/114, 0x72}, {&(0x7f00000001c0)=""/60, 0x3c}, {&(0x7f0000000200)=""/144, 0x90}], 0x5}, 0x1}, {{0x0, 0x0, 0x0}}], 0x2, 0x0, 0x0) sendmsg$kcm(0xffffffffffffffff, &(0x7f0000000040)={0x0, 0x0, &(0x7f00000013c0)=[{&(0x7f00000001c0)="39000000140081ae0000dc676f97daf01e2357f9ffffffffffffff0521018701546fabca1b4e8a06a6580e88370200c54c1960b89c40ebb373", 0x39}], 0x1}, 0x0) 1.764472459s ago: executing program 3 (id=5462): r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$tipc2(&(0x7f00000002c0), r0) r2 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r3 = syz_genetlink_get_family_id$netlbl_cipso(&(0x7f0000000bc0), r2) sendmsg$NLBL_CIPSOV4_C_ADD(r2, &(0x7f0000000580)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000001c0)=ANY=[@ANYBLOB="34010000", @ANYRES16=r3, @ANYBLOB="01000000000000000000010000000400048008000200010000000800010000000000080108805400078008000500000000000800050000000000080005009d2c690d0800050000000000080005000000000008000500000000000800050000ebffff070005"], 0x134}}, 0x4048014) (async) r4 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r5 = syz_genetlink_get_family_id$ieee802154(&(0x7f0000007e00), r4) sendmsg$IEEE802154_LLSEC_GETPARAMS(r4, &(0x7f0000007f00)={0x0, 0x0, &(0x7f0000007ec0)={&(0x7f0000000080)={0x20, r5, 0x1, 0x70bd25, 0x25dfdbfd, {}, [@IEEE802154_ATTR_DEV_NAME={0xa, 0x1, 'wpan0\x00'}]}, 0x20}, 0x1, 0x0, 0x0, 0x4000}, 0x40000) (async) sendmsg$IEEE802154_ADD_IFACE(r2, &(0x7f0000000100)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x20000000}, 0xc, &(0x7f00000000c0)={&(0x7f0000000040)={0x64, r5, 0x400, 0x70bd2b, 0x25dfdbfe, {}, [@IEEE802154_ATTR_PHY_NAME={0x9, 0x1f, 'phy3\x00'}, @IEEE802154_ATTR_PHY_NAME={0x9, 0x1f, 'phy0\x00'}, @IEEE802154_ATTR_HW_ADDR={0xc, 0x5, {0xaaaaaaaaaaaa0302}}, @IEEE802154_ATTR_PHY_NAME={0x9, 0x1f, 'phy1\x00'}, @IEEE802154_ATTR_PHY_NAME={0x9, 0x1f, 'phy1\x00'}, @IEEE802154_ATTR_DEV_TYPE={0x5, 0x20, 0x1}, @IEEE802154_ATTR_HW_ADDR={0xc, 0x5, {0x331de3e3d7d993f1}}]}, 0x64}}, 0x20000000) (async) sendmsg$TIPC_NL_BEARER_SET(r0, &(0x7f0000000440)={0x0, 0x0, &(0x7f0000000400)={&(0x7f0000000300)=ANY=[@ANYBLOB='\x00', @ANYRES16=r1, @ANYBLOB="0100000000000000000005000000"], 0x14}}, 0x0) 1.69422721s ago: executing program 3 (id=5463): socket$nl_netfilter(0x10, 0x3, 0xc) socket$phonet_pipe(0x23, 0x5, 0x2) r0 = openat$nci(0xffffffffffffff9c, &(0x7f0000000240), 0x2, 0x0) r1 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$nfc(&(0x7f0000000100), r1) ioctl$IOCTL_GET_NCIDEV_IDX(r0, 0x0, &(0x7f00000000c0)) bpf$BPF_GET_MAP_INFO(0xf, &(0x7f0000000680)={0x1, 0x58, &(0x7f0000000600)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, ""/16, 0x0}}, 0x10) bpf$PROG_LOAD(0x5, &(0x7f00000006c0)={0x18, 0xe, &(0x7f0000000200)=ANY=[@ANYBLOB="b700000001000000bfa30000000000000703000030feffff720af0fff8ffffff61a4f0ff000000002d040000000000003d400300000000006504000001ed000079130000000000006c44000000000000"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', r2}, 0x94) syz_emit_ethernet(0x5e, &(0x7f0000000540)=ANY=[@ANYBLOB="aaaaaaaaaaaaaaaaaaaaaa0008004f00005000000000000690780a010102ac1414aa07120476bc4b4c260cbf2eb651ad9904000044140bf1e000000100000000e000000100"/78, @ANYRES32=0x41424344, @ANYRES32=0x41424344, @ANYBLOB], 0x0) sendmsg$IPSET_CMD_FLUSH(0xffffffffffffffff, &(0x7f00000001c0)={0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x8000}, 0x4) r3 = socket$alg(0x26, 0x5, 0x0) bind$alg(r3, &(0x7f00000004c0)={0x26, 'skcipher\x00', 0x0, 0x0, 'cbc-camellia-asm\x00'}, 0x58) setsockopt$ALG_SET_KEY(r3, 0x117, 0x1, &(0x7f0000000280)="ad56b6c5820fae9d6dcd3292ea54c7beef915d564c90c200", 0x18) r4 = accept4(r3, 0x0, 0x0, 0x800) sendmmsg$alg(r4, &(0x7f0000000040)=[{0x0, 0x0, &(0x7f0000000000)=[{&(0x7f0000000080)="f78d9ca38fff48f3be52163448412ba8", 0xfffffe3f}, {&(0x7f0000000140)="ebe3a0e9796cfd1647e299f4e376fdba128280b372219d205e81f4a7f71c1926aae1efd7e0054a863f3d5cfe6cb55b5bb9fa6935849e6098ed884e7cb51726b360fbb37b4fe035bbb095873048"}, {&(0x7f00000003c0)="e8700e444d50a969ff67347cff6127e6ef12ee3819271482a4975a52c1ab9b8b4db3945d1032005eabe97b4dc33a47d3a158da988456d30026b433186f53cdcdb93a4722bf306a10470d50f5cb1ece9ead3459bab1cf1538cd0b157653c5e892962c80f158c443e9c6ad7d2a8103ef2f4b93766b9a21501f94c1568b13756b66f74f46cf801704d2da8b96c34070b233af0afcc436712e58ed25e721193af05a045ad3fdc928f02f3dbad19d3e66eebda2e63f3f46ef4511cee26d7b48241847bf9e343ef4674c45e2a085060f11"}], 0x1, &(0x7f0000000380)=[@op={0x18, 0x117, 0x3, 0x1}], 0x18}], 0x1, 0x40800) recvmsg(r4, &(0x7f00000005c0)={0x0, 0x0, &(0x7f00000001c0)=[{&(0x7f00000000c0)=""/81, 0x7ffff000}, {&(0x7f0000000200)=""/83, 0x20000253}], 0x2}, 0x0) write$nci(r0, &(0x7f0000000280)=ANY=[@ANYBLOB="400404"], 0x7) r5 = socket$pppl2tp(0x18, 0x1, 0x1) connect$pppl2tp(r5, 0x0, 0x0) r6 = socket$phonet_pipe(0x23, 0x5, 0x2) bind$phonet(r6, &(0x7f0000000040)={0x23, 0x14}, 0x10) r7 = socket$phonet_pipe(0x23, 0x5, 0x2) bind$phonet(r7, &(0x7f0000000040)={0x23, 0x4, 0x2}, 0x10) r8 = openat$tun(0xffffffffffffff9c, &(0x7f00000001c0), 0xe8001, 0x0) ioctl$TUNSETIFF(r8, 0x400454ca, &(0x7f0000000040)={'syzkaller1\x00', 0x2}) r9 = socket$igmp6(0xa, 0x3, 0x2) ioctl$sock_SIOCSIFVLAN_ADD_VLAN_CMD(r9, 0x8983, &(0x7f0000000300)={0x0, 'syzkaller1\x00'}) ioctl$TUNSETLINK(r8, 0x400454cd, 0x337) socket$can_j1939(0x1d, 0x2, 0x7) 1.4450237s ago: executing program 3 (id=5468): r0 = openat$cgroup_ro(0xffffffffffffffff, &(0x7f0000000000)='memory.swap.events\x00', 0x0, 0x0) getsockopt$inet_sctp6_SCTP_SOCKOPT_PEELOFF(0xffffffffffffffff, 0x84, 0x66, &(0x7f0000000040)={0x0, 0x2}, &(0x7f0000000080)=0x8) setsockopt$inet_sctp6_SCTP_AUTH_ACTIVE_KEY(r0, 0x84, 0x18, &(0x7f00000000c0)={r1}, 0x8) r2 = socket$inet6(0xa, 0x3, 0x4) getsockopt$IP_SET_OP_GET_BYINDEX(r2, 0x1, 0x53, &(0x7f0000000100)={0x7, 0x7, 0x3}, &(0x7f0000000140)=0x28) (async) getsockopt$inet_sctp_SCTP_PRIMARY_ADDR(r0, 0x84, 0x6, &(0x7f0000000180)={r1, @in={{0x2, 0x4e22, @dev={0xac, 0x14, 0x14, 0x1a}}}}, &(0x7f0000000240)=0x84) (async) r3 = accept4(r0, 0x0, &(0x7f0000000280), 0x0) sendto$rxrpc(r3, &(0x7f00000002c0)="9f9e0ba883c0e16e9b1e18043fe34b83a5a3d684848566f691f62d8b476c4e3a128d601af3e55736d53efa686c89a7430b881ce5a7ac714e656d16230439dca84b0ce94a44e64bac801db6d242d4f2a9e881e107b7604203861c42aa2de151a6ee3080b6019a5786d52e55fbf1dbafa28968c0f236cc35335a7ee21f629d2d4790", 0x81, 0x0, &(0x7f0000000380)=@in4={0x21, 0x0, 0x2, 0x10, {0x2, 0x4e23, @multicast1}}, 0x24) r4 = socket$vsock_stream(0x28, 0x1, 0x0) getsockopt$SO_COOKIE(r4, 0x1, 0x39, &(0x7f00000003c0), &(0x7f0000000400)=0x8) bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000600)={&(0x7f0000000440)={{0xeb9f, 0x1, 0x0, 0x18, 0x0, 0xa0, 0xa0, 0x6, [@ptr={0x9, 0x0, 0x0, 0x2, 0x4}, @typedef={0xd, 0x0, 0x0, 0x8, 0x5}, @typedef={0x8, 0x0, 0x0, 0x8, 0x4}, @union={0xf, 0x7, 0x0, 0x5, 0x0, 0x6, [{0xa, 0x2, 0x4}, {0x7, 0x0, 0x1}, {0x10, 0x5, 0x4}, {0xe, 0x0, 0x10001}, {0x0, 0x3, 0x6}, {0x7, 0x2, 0x8001}, {0x5, 0x2, 0xae9b}]}, @var={0x9, 0x0, 0x0, 0xe, 0x3, 0x1}, @volatile={0x3, 0x0, 0x0, 0x9, 0x4}]}, {0x0, [0x30, 0x3e, 0x30, 0x0]}}, &(0x7f0000000500)=""/245, 0xbe, 0xf5, 0x0, 0x3ff, 0x10000, @value=r0}, 0x28) (async) writev(r0, &(0x7f0000000680)=[{&(0x7f0000000640)="c3fbdd7b2e5d6f7c5b81fbae93853e4bb833acf0a4850c085427e42ffcfda3846cd6b4", 0x23}], 0x1) (async) mmap(&(0x7f0000ffb000/0x2000)=nil, 0x2000, 0x1000002, 0x80010, r2, 0x79647000) (async) setsockopt$SO_BINDTODEVICE_wg(r4, 0x1, 0x19, &(0x7f00000006c0)='wg2\x00', 0x4) setsockopt$RXRPC_EXCLUSIVE_CONNECTION(r3, 0x110, 0x3) (async) r5 = syz_genetlink_get_family_id$team(&(0x7f0000000740), r3) (async) ioctl$ifreq_SIOCGIFINDEX_team(r2, 0x8933, &(0x7f0000000780)={'team0\x00', 0x0}) (async) ioctl$ifreq_SIOCGIFINDEX_vcan(r0, 0x8933, &(0x7f00000007c0)={'vcan0\x00', 0x0}) (async) ioctl$sock_ipv4_tunnel_SIOCADDTUNNEL(r0, 0x89f1, &(0x7f00000008c0)={'tunl0\x00', &(0x7f0000000800)={'syztnl2\x00', 0x0, 0x7, 0x10, 0x8, 0x5, {{0x1e, 0x4, 0x0, 0x1f, 0x78, 0x66, 0x0, 0xf1, 0x4, 0x0, @broadcast, @loopback, {[@cipso={0x86, 0x10, 0x2, [{0x5, 0x6, 'G^HB'}, {0x2, 0x4, "b3a3"}]}, @ra={0x94, 0x4, 0x1}, @ssrr={0x89, 0x13, 0xf2, [@rand_addr=0x64010101, @private=0xa010100, @private=0xa010102, @multicast1]}, @ra={0x94, 0x4, 0x1}, @ssrr={0x89, 0xf, 0xb9, [@initdev={0xac, 0x1e, 0x0, 0x0}, @local, @multicast2]}, @lsrr={0x83, 0x17, 0x53, [@initdev={0xac, 0x1e, 0x1, 0x0}, @dev={0xac, 0x14, 0x14, 0x2d}, @multicast1, @local, @empty]}, @lsrr={0x83, 0x7, 0x4f, [@multicast2]}, @end, @generic={0x86, 0xb, "04f90dba922e892481"}]}}}}}) (async) ioctl$sock_ipv6_tunnel_SIOCDELTUNNEL(r3, 0x89f2, &(0x7f0000000980)={'syztnl0\x00', &(0x7f0000000900)={'syztnl2\x00', 0x0, 0x2f, 0x8, 0x7f, 0x6, 0x1, @initdev={0xfe, 0x88, '\x00', 0x0, 0x0}, @private0={0xfc, 0x0, '\x00', 0x1}, 0x700, 0x0, 0x5, 0x62}}) (async) ioctl$ifreq_SIOCGIFINDEX_team(r2, 0x8933, &(0x7f00000009c0)={'team0\x00', 0x0}) (async) getsockopt$PNPIPE_IFINDEX(r3, 0x113, 0x2, &(0x7f0000000a00)=0x0, &(0x7f0000000a40)=0x4) (async) ioctl$ifreq_SIOCGIFINDEX_team(r3, 0x8933, &(0x7f0000000a80)={'team0\x00', 0x0}) (async) getpeername$packet(r0, &(0x7f0000000ac0)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000b00)=0x14) (async) ioctl$ifreq_SIOCGIFINDEX_team(r0, 0x8933, &(0x7f0000000b40)={'team0\x00', 0x0}) (async) ioctl$ifreq_SIOCGIFINDEX_team(r0, 0x8933, &(0x7f0000000b80)={'team0\x00', 0x0}) ioctl$sock_ipv4_tunnel_SIOCGETTUNNEL(r3, 0x89f0, &(0x7f0000000c80)={'syztnl0\x00', &(0x7f0000000bc0)={'syztnl0\x00', 0x0, 0x8, 0x80, 0x1, 0x8, {{0x1c, 0x4, 0x3, 0x0, 0x70, 0x65, 0x0, 0x13, 0x29, 0x0, @multicast1, @rand_addr=0x64010102, {[@noop, @timestamp_addr={0x44, 0x1c, 0x2f, 0x1, 0x5, [{@rand_addr=0x64010100, 0x5}, {@loopback, 0x5}, {@multicast1, 0x3}]}, @timestamp_prespec={0x44, 0x14, 0x10, 0x3, 0x1, [{@remote}, {@local, 0x4}]}, @cipso={0x86, 0xc, 0x3, [{0x0, 0x6, "2b166979"}]}, @cipso={0x86, 0x12, 0x3, [{0x7, 0xc, "469ded1bb2815739d51e"}]}, @timestamp_prespec={0x44, 0xc, 0x9, 0x3, 0x3, [{@initdev={0xac, 0x1e, 0x0, 0x0}, 0x8}]}]}}}}}) (async) ioctl$ifreq_SIOCGIFINDEX_team(r2, 0x8933, &(0x7f0000000cc0)={'team0\x00', 0x0}) ioctl$sock_ipv4_tunnel_SIOCADDTUNNEL(r3, 0x89f1, &(0x7f0000000e00)={'sit0\x00', &(0x7f0000000d00)={'syztnl2\x00', 0x0, 0x72e9c0fad64ece4b, 0x8000, 0x1, 0x2, {{0x38, 0x4, 0x3, 0x5, 0xe0, 0x64, 0x0, 0xc, 0x2d, 0x0, @initdev={0xac, 0x1e, 0x0, 0x0}, @empty, {[@cipso={0x86, 0x37, 0x0, [{0x6, 0xe, "8a459f294e9cc2695d4b4935"}, {0x1, 0x8, "7fcec6d813c6"}, {0x5, 0xc, "d6424d68de7fd7193102"}, {0x6, 0xf, "f0fd262392574f02f28cffe4ba"}]}, @end, @timestamp={0x44, 0x1c, 0x9, 0x0, 0x5, [0x7fffffff, 0x1b26, 0xb8, 0x0, 0x0, 0x100]}, @cipso={0x86, 0x3b, 0x3, [{0x7, 0x7, "3fc411bb21"}, {0x5, 0x10, "172f4d229b62ec26acfbec5bf1e5"}, {0x2, 0x7, "618ada793e"}, {0x6, 0xb, "31c3b413190fb8de31"}, {0x1, 0xc, "fa6054df264a62ccf19d"}]}, @lsrr={0x83, 0xb, 0x50, [@dev={0xac, 0x14, 0x14, 0x23}, @remote]}, @ssrr={0x89, 0x1b, 0x83, [@rand_addr=0x64010100, @multicast2, @local, @private=0xa010100, @broadcast, @local]}, @end, @lsrr={0x83, 0xf, 0x16, [@remote, @initdev={0xac, 0x1e, 0x0, 0x0}, @multicast1]}, @end, @ra={0x94, 0x4, 0x1}]}}}}}) sendmsg$TEAM_CMD_OPTIONS_GET(r3, &(0x7f0000002800)={&(0x7f0000000700)={0x10, 0x0, 0x0, 0x8}, 0xc, &(0x7f00000027c0)={&(0x7f0000001c40)={0xb54, r5, 0x1, 0x70bd29, 0x25dfdbfc, {}, [{{0x8, 0x1, r6}, {0x40, 0x2, 0x0, 0x1, [{0x3c, 0x1, @user_linkup_enabled={{{0x24}, {0x5}, {0x4}}, {0x8, 0x6, r7}}}]}}, {{0x8}, {0x1d4, 0x2, 0x0, 0x1, [{0x5c, 0x1, @bpf_hash_func={{0x24}, {0x5}, {0x2c, 0x4, [{0x1, 0xa7, 0x7f, 0x5}, {0x6, 0x4, 0x25, 0x3}, {0x3, 0x1, 0xd0, 0x3460}, {0x0, 0x3, 0x8, 0x8}, {0x0, 0x8, 0x34, 0x8}]}}}, {0x3c, 0x1, @user_linkup={{{0x24}, {0x5}, {0x4}}, {0x8, 0x6, r8}}}, {0x3c, 0x1, @user_linkup_enabled={{{0x24}, {0x5}, {0x4}}, {0x8, 0x6, r9}}}, {0x40, 0x1, @queue_id={{{0x24}, {0x5}, {0x8, 0x4, 0xbabe}}, {0x8, 0x6, r10}}}, {0x40, 0x1, @name={{0x24}, {0x5}, {0xf, 0x4, 'roundrobin\x00'}}}, {0x3c, 0x1, @user_linkup_enabled={{{0x24}, {0x5}, {0x4}}, {0x8, 0x6, r11}}}, {0x40, 0x1, @name={{0x24}, {0x5}, {0xf, 0x4, 'roundrobin\x00'}}}]}}, {{0x8, 0x1, r12}, {0xf4, 0x2, 0x0, 0x1, [{0x40, 0x1, @lb_port_stats={{{0x24}, {0x5}, {0x8, 0x4, 0xff}}, {0x8, 0x6, r13}}}, {0x38, 0x1, @notify_peers_interval={{0x24}, {0x5}, {0x8, 0x4, 0x7}}}, {0x40, 0x1, @priority={{{0x24}, {0x5}, {0x8, 0x4, 0x7ff}}, {0x8, 0x6, r14}}}, {0x38, 0x1, @notify_peers_count={{0x24}, {0x5}, {0x8, 0x4, 0x3}}}]}}, {{0x8, 0x1, r15}, {0x3c, 0x2, 0x0, 0x1, [{0x38, 0x1, @activeport={{0x24}, {0x5}, {0x8, 0x4, r16}}}]}}, {{0x8, 0x1, r17}, {0x168, 0x2, 0x0, 0x1, [{0x3c, 0x1, @user_linkup_enabled={{{0x24}, {0x5}, {0x4}}, {0x8, 0x6, r18}}}, {0x40, 0x1, @priority={{{0x24}, {0x5}, {0x8, 0x4, 0x51}}, {0x8}}}, {0x3c, 0x1, @user_linkup={{{0x24}, {0x5}, {0x4}}, {0x8}}}, {0x3c, 0x1, @lb_tx_method={{0x24}, {0x5}, {0x9, 0x4, 'hash\x00'}}}, {0x38, 0x1, @activeport={{0x24}, {0x5}, {0x8}}}, {0x38, 0x1, @mcast_rejoin_interval={{0x24}, {0x5}, {0x8, 0x4, 0x8}}}]}}, {{0x8}, {0x1f0, 0x2, 0x0, 0x1, [{0x3c, 0x1, @user_linkup_enabled={{{0x24}, {0x5}, {0x4}}, {0x8}}}, {0x38, 0x1, @mcast_rejoin_count={{0x24}, {0x5}, {0x8, 0x4, 0xb}}}, {0x40, 0x1, @priority={{{0x24}, {0x5}, {0x8, 0x4, 0x9}}, {0x8}}}, {0x3c, 0x1, @name={{0x24}, {0x5}, {0xb, 0x4, 'random\x00'}}}, {0x40, 0x1, @lb_tx_hash_to_port_mapping={{{0x24}, {0x5}, {0x8}}, {0x8}}}, {0x40, 0x1, @priority={{{0x24}, {0x5}, {0x8, 0x4, 0x7fffffff}}, {0x8}}}, {0x3c, 0x1, @user_linkup={{{0x24}, {0x5}, {0x4}}, {0x8}}}, {0x40, 0x1, @lb_port_stats={{{0x24}, {0x5}, {0x8, 0x4, 0x7}}, {0x8}}}]}}, {{0x8}, {0x1a8, 0x2, 0x0, 0x1, [{0x38, 0x1, @mcast_rejoin_interval={{0x24}, {0x5}, {0x8, 0x4, 0x80}}}, {0x38, 0x1, @mcast_rejoin_count={{0x24}, {0x5}, {0x8, 0x4, 0x200}}}, {0x40, 0x1, @priority={{{0x24}, {0x5}, {0x8, 0x4, 0x8}}, {0x8}}}, {0x3c, 0x1, @user_linkup={{{0x24}, {0x5}, {0x4}}, {0x8}}}, {0x40, 0x1, @lb_hash_stats={{{0x24}, {0x5}, {0x8}}, {0x8}}}, {0x40, 0x1, @name={{0x24}, {0x5}, {0x10, 0x4, 'loadbalance\x00'}}}, {0x38, 0x1, @notify_peers_interval={{0x24}, {0x5}, {0x8, 0x4, 0x4}}}]}}, {{0x8}, {0xf8, 0x2, 0x0, 0x1, [{0x3c, 0x1, @user_linkup_enabled={{{0x24}, {0x5}, {0x4}}, {0x8}}}, {0x38, 0x1, @activeport={{0x24}, {0x5}, {0x8}}}, {0x40, 0x1, @lb_port_stats={{{0x24}, {0x5}, {0x8, 0x4, 0x5}}, {0x8}}}, {0x40, 0x1, @queue_id={{{0x24}, {0x5}, {0x8, 0x4, 0x8}}, {0x8}}}]}}, {{0x8}, {0x1bc, 0x2, 0x0, 0x1, [{0x38, 0x1, @mcast_rejoin_count={{0x24}, {0x5}, {0x8, 0x4, 0x3}}}, {0x38, 0x1, @notify_peers_count={{0x24}, {0x5}, {0x8, 0x4, 0x7}}}, {0x54, 0x1, @bpf_hash_func={{0x24}, {0x5}, {0x24, 0x4, [{0x0, 0x1, 0x2, 0x6}, {0x8, 0x1, 0x8, 0x3f5c}, {0x5b8, 0x9, 0xff}, {0xe, 0x5, 0x8, 0xed}]}}}, {0x38, 0x1, @mcast_rejoin_count={{0x24}, {0x5}, {0x8, 0x4, 0x65}}}, {0x4c, 0x1, @bpf_hash_func={{0x24}, {0x5}, {0x1c, 0x4, [{0x6, 0x7, 0x2, 0x10000}, {0x101, 0x7, 0x7, 0xfffff001}, {0x8, 0x6, 0x3, 0x5}]}}}, {0x38, 0x1, @notify_peers_interval={{0x24}, {0x5}, {0x8, 0x4, 0x80000000}}}, {0x38, 0x1, @lb_stats_refresh_interval={{0x24}, {0x5}, {0x8, 0x4, 0x7}}}]}}]}, 0xb54}, 0x1, 0x0, 0x0, 0x880}, 0x4008050) 1.428749496s ago: executing program 3 (id=5470): r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x7101}) r1 = socket(0x400000000010, 0x3, 0x0) r2 = socket$unix(0x1, 0x1, 0x0) ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r1, &(0x7f00000012c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000005c0)=@newqdisc={0x38, 0x24, 0x4ee4e6a52ff56541, 0x70bd2a, 0x25dfdbfb, {0x0, 0x0, 0x0, r3, {0x0, 0x1}, {0xffff, 0xffff}, {0xffff, 0x9}}, [@qdisc_kind_options=@q_multiq={{0xb}, {0x8}}]}, 0x38}, 0x1, 0x0, 0x0, 0x40004}, 0x4000) sendmsg$nl_route_sched(r1, &(0x7f0000000580)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000080)=@newtfilter={0x4c, 0x2c, 0xc3f, 0x70bd2d, 0x25dfdbf9, {0x0, 0x0, 0x0, r3, {0x3, 0x2}, {}, {0x7, 0xffe0}}, [@filter_kind_options=@f_flower={{0xb}, {0x1c, 0x2, [@TCA_FLOWER_KEY_ETH_TYPE={0x6, 0x8, 0x8100}, @TCA_FLOWER_KEY_VLAN_ETH_TYPE={0x6, 0x19, 0x88a8}, @TCA_FLOWER_KEY_CVLAN_ETH_TYPE={0x6, 0x4f, 0x8100}]}}]}, 0x4c}, 0x1, 0x0, 0x0, 0x20000810}, 0x20084084) r4 = syz_open_procfs$namespace(0x0, &(0x7f0000000000)='ns/user\x00') r5 = socket$can_raw(0x1d, 0x3, 0x1) ioctl$FICLONERANGE(r4, 0x4020940d, &(0x7f0000000040)={{r5}, 0x7fffffff, 0x4, 0xc08}) syz_emit_ethernet(0x35b, &(0x7f0000000080)={@link_local={0x3}, @broadcast, @void, {@ipv4={0x800, @gre={{0x2e, 0x4, 0x2, 0x5, 0x34d, 0x68, 0x0, 0x80, 0x2f, 0x0, @broadcast, @initdev={0xac, 0x1e, 0x1, 0x0}, {[@lsrr={0x83, 0xb, 0xf8, [@initdev={0xac, 0x1e, 0x0, 0x0}, @multicast1]}, @ra={0x94, 0x4}, @cipso={0x86, 0x26, 0x1, [{0x2, 0xf, "5655850f5df721700c2123250d"}, {0x2, 0x9, "4d26df0a10e870"}, {0x6, 0x8, "a6ddba660395"}]}, @cipso={0x86, 0x6f, 0x0, [{0x2, 0x9, "5260fd30c385f4"}, {0x5, 0x5, "82daa9"}, {0x2, 0xd, "71d9f183894b424b0dc8d4"}, {0x7, 0x6, "4b22cf9e"}, {0x5, 0x12, "fbd106b8a9436ded3f7b7b254dd694aa"}, {0x7, 0xb, "64c0e3f6e038017f5a"}, {0x7, 0xf, "0af68e9e2425b6d99635af00b3"}, {0x0, 0x10, "c22edd582b684bef7884c78f7121"}, {0x2, 0xc, "48a9c0f934bb462111c4"}]}]}}, {{0x0, 0x0, 0x1, 0x0, 0x0, 0x1, 0x0, 0x1, 0x880b, 0x90, 0x2, [0x7, 0xfff1], "a2297cc4f0909d03140559d1cb94e87aa32e1e41c61cdbcbf8b20cc2c74b2a0d00b66955cdf45c136a31ea7abfb864f705753523d0b92e6806420deb97723c92809bfad1c2644c06223c3cbd0d80b74b762f6b3b91a7cb90593db6ce5d18814a24ee49602ba500e5760eecdf56b925937225cb5edb1cd61d66ad3e20457bbc1c9b03a303f7162fcf66ac6593e1a35a5f"}, {0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x800, [0xb, 0x7fff, 0xfffe], "2cedd56058033c6e7e52bb896b039d9a0a7ceb9455"}, {0x1, 0x0, 0x1, 0x1, 0x0, 0x0, 0x86dd, [], "c0943f0a97dd6a71a84ab087770d9314ee32f1e6e7621cfd7d0eccfe032e05e9edfe6af67250930f0d2d0a38dbbbdaf9237152c170bc798afb75bfb57dec43e2731572c57bf86a562c483e9b94439393418a87a3ee8f4bbb85a5c5d9ddf6cda311aca1b8ede2668d072e5d42ac10e71d83ccd40853bf86e4646f1fb40bb008d888440c684110d54b22e5de4c14c57f888e6c481457f34f65ac7a5f443a0535c3357ce280c4658353202ad65930f9ee50effe92aa81be5d1ac48832817ca0a4e79b42cf1aa7ff1cfea32dd4a2171a7984e1e3cf182ecb152dc25c1af4090e4f219eca8166"}, {0x8, 0x88be, 0x3, {{0xa, 0x1, 0x40, 0x0, 0x0, 0x1, 0x2, 0xcb}, 0x1, {0x6}}}, {0x8, 0x22eb, 0x4, {{0x5, 0x2, 0xf9, 0x2, 0x1, 0x2, 0x0, 0x88}, 0x2, {0x4, 0xe, 0x2, 0x4, 0x1, 0x1, 0x1}}}, {0x8, 0x6558, 0x1, "f48ed5512e2e74c62a77c0ad4998f9e45c8af969c8f17fa099827bb7624d2f5deba044d4f1a1145fef8c8945d59de14c5062cfdd65da04f2692cc9abb106517d93eb596338c1f0a23581d08bf8636de50b633c01c5ef8ffd57ef5dcaad0bab4ecaad58e0e4a2002f9cc3a8d02d2f44d3cbfba3d049f94ac334e394c395e04231759496cfab421d81b94557e7c74943fc8724f49f6db2787399e6a7ade649c339cbbd60c593b8d9ac59451785e7abf92472df3951abd7a8c72acbfc6c7728"}}}}}}, 0x0) 1.283362919s ago: executing program 3 (id=5473): r0 = socket(0xa, 0x3, 0x3a) r1 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$IPSET_CMD_CREATE(0xffffffffffffffff, &(0x7f0000000040)={0x0, 0x0, &(0x7f00000044c0)={&(0x7f0000000100)={0x18, 0x2, 0x6, 0x5, 0x0, 0x0, {}, [@IPSET_ATTR_DATA={0x4}]}, 0x18}}, 0x0) sendmsg$inet(0xffffffffffffffff, &(0x7f0000000000)={0x0, 0x0, 0x0, 0x0, &(0x7f0000000100)=ANY=[@ANYBLOB="1c000000000000000000000007000000890b040a0101"], 0x40}, 0xfffe) r2 = openat$tun(0xffffffffffffff9c, &(0x7f0000000000), 0x48241, 0x0) ioctl$TUNSETIFF(r2, 0x400454ca, &(0x7f00000000c0)={'syzkaller1\x00', 0x6bf1c2d5adba8c32}) socket(0xf, 0x1, 0xf8) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000001140)={&(0x7f0000000100)=ANY=[@ANYRES8, @ANYRES32, @ANYBLOB="0000000000000000400012800c0001"], 0x68}}, 0x0) r3 = socket$igmp6(0xa, 0x3, 0x2) r4 = socket$kcm(0x2, 0xa, 0x2) pselect6(0x0, 0x0, 0x0, &(0x7f0000000140)={0x8, 0x7, 0x8, 0x7, 0x9, 0x4, 0xfffffffffffff001, 0x3}, 0x0, 0x0) bpf$PROG_LOAD(0x5, &(0x7f0000000080)={0x3, 0x4, &(0x7f0000000000)=@framed={{}, [@ldst={0x1, 0x0, 0x3, 0x0, 0x1, 0x86}]}, &(0x7f0000000040)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @sched_cls, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) ioctl$SIOCSIFHWADDR(r4, 0x8914, &(0x7f0000000180)={'syzkaller1\x00', @link_local}) ioctl$sock_SIOCSIFVLAN_ADD_VLAN_CMD(r3, 0x8983, &(0x7f0000000300)={0x0, 'syzkaller1\x00', {0x2}}) write$tun(r2, &(0x7f0000000100)=ANY=[@ANYBLOB="06000000bbbbbbbbbbbbaaaaaaaaaabb88f5"], 0x72) ioctl$sock_SIOCGIFINDEX(0xffffffffffffffff, 0x8933, &(0x7f0000000c80)={'lo\x00', 0x0}) sendmsg$nl_route_sched(r1, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000140)={&(0x7f00000001c0)=@newqdisc={0x178, 0x24, 0x4, 0x200000, 0x0, {0x60, 0x0, 0x0, r5, {0xe}, {0xffff, 0x4}, {0x2, 0xfff3}}, [@qdisc_kind_options=@q_gred={{0x9}, {0x148, 0x2, [@TCA_GRED_PARMS={0x38, 0x1, {0x100, 0x5, 0x400, 0x9, 0x80, 0x101, 0xe, 0xc40, 0x3, 0xfffffffd, 0x6, 0xb, 0x0, 0x6, 0xca11, 0xffbe}}, @TCA_GRED_STAB={0x104, 0x2, "abcc61b4e508c02286f1bafc7a22c407a52b0e13291c865d493f15736245f220cd4e40006df455836aa3bd3aaa2c9b95578719c46f89e01798d28b6d63cf7465ea95bd97b018b7afaccdcb28bb42d677b73c44e790f0875fb4b795ca95b7dd712d2c5d69945535f92f74a71236743acd06103cd77bd07f2df5989ee40e409b077cc85e96554beb53e986a216051bd5979a8cfcfe9f98be58ffcf44f6cfda8579dbaedceee578bfd1fb554b6e185e9315425ef0a3fc69d17ede93fc7c46357990f7acfdb8216ea52f604b9f12033688caa4b04adecfc926b3f6ca25bcb5432905e3f30ccbf10cf0f2d00858ba2bbd2702b8d4a7a7c744fbaa2fa35b1c586020d6"}, @TCA_GRED_MAX_P={0x8, 0x4, 0x9}]}}]}, 0x178}, 0x1, 0x0, 0x0, 0x845}, 0x24008804) r6 = socket$inet_icmp(0x2, 0x2, 0x1) listen(r6, 0xa877) setsockopt$MRT6_ADD_MIF(r0, 0x29, 0xca, &(0x7f0000000080)={0x0, 0x1}, 0xc) 1.103267809s ago: executing program 4 (id=5478): r0 = socket(0x2a, 0x2, 0x0) getsockname$packet(r0, &(0x7f0000000200)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000001480)=0x14) r2 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r2, &(0x7f0000000100)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x8}, 0xc, &(0x7f0000000080)={&(0x7f0000000040)=@ipmr_getroute={0x1c, 0x1a, 0x100, 0x70bd26, 0x25dfdbfc, {0x80, 0x10, 0x24, 0x5, 0xfc, 0x0, 0x0, 0xa, 0x1000}, ["", "", ""]}, 0x1c}, 0x1, 0x0, 0x0, 0x4000}, 0x40) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000380)=@newqdisc={0x38, 0x24, 0xf0b, 0x0, 0x0, {0x0, 0x0, 0x0, r1, {}, {0xffff, 0xffff}, {0x0, 0xfff1}}, [@qdisc_kind_options=@q_fq_codel={{0xd}, {0x4}}]}, 0x38}}, 0x0) sendmsg$IPCTNL_MSG_CT_NEW(0xffffffffffffffff, &(0x7f0000000300)={0x0, 0x0, &(0x7f00000000c0)={0x0}}, 0x0) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000340)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000140)=@newtfilter={0x3c, 0x2c, 0xd27, 0x70bd2d, 0x0, {0x0, 0x0, 0x0, r1, {}, {}, {0x8, 0xffe0}}, [@filter_kind_options=@f_basic={{0xa}, {0xc, 0x2, [@TCA_BASIC_CLASSID={0x8, 0x1, {0x4, 0x5}}]}}]}, 0x3c}}, 0x2004c840) r3 = socket$netlink(0x10, 0x3, 0x0) sendmmsg(r3, &(0x7f00000002c0), 0x40000000000009f, 0x0) 1.041010046s ago: executing program 4 (id=5480): r0 = socket$netlink(0x10, 0x3, 0x0) r1 = socket(0x10, 0x803, 0x0) sendmsg$IPVS_CMD_SET_INFO(r1, &(0x7f0000000b00)={0x0, 0x0, &(0x7f0000000ac0)={0x0, 0x14}}, 0x0) getsockname$packet(r1, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) setsockopt$IP_VS_SO_SET_ADD(r1, 0x0, 0x482, &(0x7f0000000040)={0x33, @multicast2, 0x4e20, 0x3, 'lblc\x00', 0x0, 0x2, 0x22}, 0x2c) bind$bt_rfcomm(r1, &(0x7f0000000180)={0x1f, @any, 0x8}, 0xa) sendmsg$nl_route(r1, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000380)=ANY=[@ANYBLOB="3c0000001000850600"/20, @ANYRES32=r2, @ANYBLOB="01000000000000001c0012000c000100626f6e64000000000c0002000800010006"], 0x3c}}, 0x0) sendmsg$nl_route(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000140)=@newlink={0x3c, 0x10, 0xffffff1f, 0x0, 0x1, {}, [@IFLA_LINKINFO={0x14, 0x12, 0x0, 0x1, @veth={{0x9}, {0x4, 0x2, 0x0, 0x1, @void}}}, @IFLA_MASTER={0x8, 0xa, r2}]}, 0x3c}, 0x1, 0x0, 0x0, 0x40000}, 0x0) r3 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r3, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000540)={&(0x7f0000000240)=@newlink={0x48, 0x10, 0xff05, 0x0, 0x0, {0x0, 0x0, 0x4a00}, [@IFLA_LINKINFO={0x14, 0x12, 0x0, 0x1, @batadv={{0xb}, {0x4}}}, @IFLA_MASTER={0x8, 0xa, r2}, @IFLA_ADDRESS={0xa, 0x1, @link_local={0x1, 0x80, 0xc2, 0x0, 0x0, 0x1}}]}, 0x48}}, 0x0) socket$netlink(0x10, 0x3, 0x0) (async) socket(0x10, 0x803, 0x0) (async) sendmsg$IPVS_CMD_SET_INFO(r1, &(0x7f0000000b00)={0x0, 0x0, &(0x7f0000000ac0)={0x0, 0x14}}, 0x0) (async) getsockname$packet(r1, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) (async) setsockopt$IP_VS_SO_SET_ADD(r1, 0x0, 0x482, &(0x7f0000000040)={0x33, @multicast2, 0x4e20, 0x3, 'lblc\x00', 0x0, 0x2, 0x22}, 0x2c) (async) bind$bt_rfcomm(r1, &(0x7f0000000180)={0x1f, @any, 0x8}, 0xa) (async) sendmsg$nl_route(r1, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000380)=ANY=[@ANYBLOB="3c0000001000850600"/20, @ANYRES32=r2, @ANYBLOB="01000000000000001c0012000c000100626f6e64000000000c0002000800010006"], 0x3c}}, 0x0) (async) sendmsg$nl_route(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000140)=@newlink={0x3c, 0x10, 0xffffff1f, 0x0, 0x1, {}, [@IFLA_LINKINFO={0x14, 0x12, 0x0, 0x1, @veth={{0x9}, {0x4, 0x2, 0x0, 0x1, @void}}}, @IFLA_MASTER={0x8, 0xa, r2}]}, 0x3c}, 0x1, 0x0, 0x0, 0x40000}, 0x0) (async) socket$nl_route(0x10, 0x3, 0x0) (async) sendmsg$nl_route(r3, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000540)={&(0x7f0000000240)=@newlink={0x48, 0x10, 0xff05, 0x0, 0x0, {0x0, 0x0, 0x4a00}, [@IFLA_LINKINFO={0x14, 0x12, 0x0, 0x1, @batadv={{0xb}, {0x4}}}, @IFLA_MASTER={0x8, 0xa, r2}, @IFLA_ADDRESS={0xa, 0x1, @link_local={0x1, 0x80, 0xc2, 0x0, 0x0, 0x1}}]}, 0x48}}, 0x0) (async) 1.025669982s ago: executing program 7 (id=5481): socket$nl_generic(0x10, 0x3, 0x10) r0 = socket(0x11, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f00000005c0)={'hsr0\x00', 0x0}) r2 = socket$inet6_sctp(0xa, 0x801, 0x84) bind$packet(r0, &(0x7f00000001c0)={0x11, 0x0, r1}, 0x14) setsockopt$packet_int(r0, 0x107, 0xf, &(0x7f0000000240)=0xe9, 0x4) sendmsg$nl_generic(r0, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000500)=ANY=[@ANYRES16=r0, @ANYRES16=r2, @ANYRESOCT=r2], 0x18}, 0x1, 0x0, 0x0, 0x4000050}, 0x40) r3 = socket$nl_generic(0x10, 0x3, 0x10) socketpair$unix(0x1, 0x1, 0x0, &(0x7f00000004c0)={0xffffffffffffffff, 0xffffffffffffffff}) getsockopt$inet_sctp_SCTP_HMAC_IDENT(r0, 0x84, 0x16, &(0x7f0000000080)={0x5, [0x10, 0x2, 0x2f, 0x7d44, 0x1]}, &(0x7f0000000440)=0xe) r6 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) syz_extract_tcp_res(&(0x7f0000000580), 0xa, 0x8c26) syz_extract_tcp_res(&(0x7f0000000600), 0x7, 0x1) syz_emit_ethernet(0x31, &(0x7f0000000700)={@local, @empty, @void, {@arp={0x806, @generic={0x18, 0x80f3, 0x6, 0xd, 0x9, @dev={'\xaa\xaa\xaa\xaa\xaa', 0x44}, "53e06224ebb171a84affd3c6f3", @broadcast, "9a26"}}}}, 0x0) getsockopt$SO_TIMESTAMPING(r3, 0x1, 0x41, &(0x7f0000000480), &(0x7f0000000540)=0x4) r7 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000100), r3) sendmsg$NL80211_CMD_GET_SURVEY(r3, &(0x7f00000001c0)={&(0x7f00000000c0)={0x10, 0x0, 0x0, 0x200000}, 0xc, &(0x7f0000000180)={&(0x7f0000000140)=ANY=[@ANYBLOB="20201000", @ANYRES16=r7, @ANYBLOB="00002abd7000fcdbdf25320000000c0099008100000026000000"], 0x20}, 0x1, 0x0, 0x0, 0x4000050}, 0x80) r8 = syz_genetlink_get_family_id$netlbl_unlabel(&(0x7f0000000200), r6) sendmsg$NLBL_UNLABEL_C_STATICADDDEF(r6, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000280)=ANY=[@ANYBLOB='D\x00\x00\x00', @ANYRES16=r8, @ANYRES32=r4, @ANYRESOCT=r7, @ANYRES16=0x0, @ANYRES16=r5], 0x44}, 0x1, 0x1000000, 0x0, 0x80}, 0x8001) recvmsg(r4, &(0x7f00000006c0)={0x0, 0x0, 0x0}, 0x1) r9 = syz_genetlink_get_family_id$SEG6(&(0x7f0000002040), r3) sendmsg$SEG6_CMD_SETHMAC(r3, &(0x7f0000002140)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000002080)=ANY=[@ANYBLOB='0\x00\x00\x00', @ANYRES16=r9, @ANYBLOB="010029bd7000fddbdf250100000008000300070000000400040005000500030000000508060001000400"], 0xfffffffffffffe5b}, 0x1, 0x0, 0x0, 0x882}, 0x0) 917.07856ms ago: executing program 0 (id=5482): r0 = socket(0x10, 0x3, 0x0) r1 = socket$kcm(0x10, 0x2, 0x10) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32, @ANYBLOB="0000000000000000b70800000d0000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000100000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) r2 = bpf$MAP_CREATE(0x0, &(0x7f0000000740)=ANY=[@ANYBLOB="0b00000005000000000400000900000001"], 0x48) r3 = syz_init_net_socket$bt_sco(0x1f, 0x5, 0x2) bind$bt_sco(r3, &(0x7f0000000000)={0x1f, @fixed={'\xaa\xaa\xaa\xaa\xaa', 0x10}}, 0x8) listen(r3, 0x3) accept4(r3, 0x0, 0x0, 0x0) bpf$PROG_LOAD(0x5, &(0x7f00000004c0)={0xa, 0x4, &(0x7f0000000480)=ANY=[@ANYBLOB="18000000000000000000000000000000850000006d"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r4 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000d80)={0x18, 0x5, &(0x7f0000000480)=ANY=[@ANYBLOB="1801000021"], 0x0, 0x40, 0x0, 0x0, 0x0, 0xb4a02fe0ce239f93, '\x00', 0x0, 0x2}, 0x94) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0xe, 0x0, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000800000000000000000000018110000", @ANYRES32=r2], 0x0, 0x0, 0x0, 0x0, 0x41100, 0x59, '\x00', 0x0, @fallback=0x2a, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, r4, 0x0, 0x0, 0x0, 0x0}, 0x94) r5 = bpf$PROG_LOAD(0x5, &(0x7f0000000300)={0x6, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, @fallback=0x4, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000180)={r5, 0x2000000, 0xe, 0x0, &(0x7f0000000040)="630b008646dc3f0adf33c9f7b986", 0x0, 0xcf25, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x80}, 0x50) r6 = socket$xdp(0x2c, 0x3, 0x0) setsockopt$XDP_UMEM_REG(r6, 0x11b, 0x4, &(0x7f00000000c0)={&(0x7f0000000000)=""/74, 0x33e000, 0x1000}, 0x20) setsockopt$XDP_UMEM_COMPLETION_RING(r6, 0x11b, 0x6, &(0x7f0000000080)=0x1, 0x4) setsockopt$XDP_RX_RING(r0, 0x11b, 0x2, &(0x7f0000001980)=0x401180, 0x4) ioctl$ifreq_SIOCGIFINDEX_batadv_hard(r1, 0x8933, &(0x7f0000000140)={'batadv_slave_0\x00', 0x0}) r8 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000940)='hugetlb.2MB.usage_in_bytes\x00', 0x26e1, 0x0) close(r8) ioctl$SIOCSIFHWADDR(r8, 0x8b34, &(0x7f0000000000)={'virt_wifi0\x00', @random="000500000020"}) sendmsg$nl_route(r8, &(0x7f00000003c0)={&(0x7f0000000200)={0x10, 0x0, 0x0, 0x2040008}, 0xc, &(0x7f00000002c0)={&(0x7f0000000280)=ANY=[@ANYBLOB="240000006800000428bd7000fbdbdf25020002002900000004000b001800010001000000"], 0x24}, 0x1, 0x0, 0x0, 0x4040000}, 0x4c000) r9 = socket$inet6_udp(0xa, 0x2, 0x0) r10 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a) setsockopt$inet6_IPV6_FLOWLABEL_MGR(r9, 0x29, 0x20, &(0x7f0000000180)={@loopback={0xfec0ffff00000000}, 0x8000000, 0x0, 0x2, 0x1}, 0x20) setsockopt$inet6_IPV6_FLOWLABEL_MGR(r10, 0x29, 0x20, &(0x7f0000000000)={@private2={0xfc, 0x2, '\x00', 0x1}, 0x8000000, 0x0, 0x2, 0x2, 0x0, 0x2}, 0x20) setsockopt$XDP_UMEM_FILL_RING(r6, 0x11b, 0x5, &(0x7f0000000300)=0x1, 0x4) bind$xdp(r6, &(0x7f00000001c0)={0x2c, 0x0, r7}, 0x10) recvmmsg(r6, &(0x7f0000005240)=[{{0x0, 0x0, 0x0}, 0x5}], 0x1, 0x2043, 0x0) setsockopt$netlink_NETLINK_TX_RING(r0, 0x10e, 0xc, &(0x7f0000000180)={0xfffffc}, 0x10) 845.412988ms ago: executing program 7 (id=5483): r0 = socket$unix(0x1, 0x2, 0x0) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000000)={'veth0_to_team\x00'}) ioctl$sock_netdev_private(r0, 0x89f0, &(0x7f0000000040)="2c2b72d85f299e0d054e3afeb75ef56e07e730ef00602ef05b6d9f5b2823d5983f5a39046931d26efa4a6ec336ea89f50b3dcedc88cc9ddbae8af975d671f9c5513579d4adbbe78eaac407f4bcff4517436bc32bc90e0823e99a8484730f3af685c3be352b8dbf8f1a620b4430c246162b6a80") shutdown(r0, 0x0) ioctl$sock_kcm_SIOCKCMCLONE(0xffffffffffffffff, 0x89e2, &(0x7f0000000100)={r0}) r2 = syz_genetlink_get_family_id$devlink(&(0x7f00000000c0), r1) (async) r3 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000180), r1) (async) ioctl$sock_SIOCGIFINDEX_80211(r1, 0x8933, &(0x7f00000001c0)={'wlan0\x00', 0x0}) sendmsg$NL80211_CMD_UPDATE_CONNECT_PARAMS(r1, &(0x7f0000000280)={&(0x7f0000000140)={0x10, 0x0, 0x0, 0x20000000}, 0xc, &(0x7f0000000240)={&(0x7f0000000200)={0x3c, r3, 0x2, 0x70bd27, 0x25dfdbfe, {{}, {@val={0x8, 0x3, r4}, @void}}, [@fils_params=[@NL80211_ATTR_FILS_ERP_USERNAME={0x7, 0xf9, "2e3ac5"}], @NL80211_ATTR_IE={0x7, 0x2a, [@challenge={0x10, 0x1, 0x96}]}, @NL80211_ATTR_IE={0x10, 0x2a, [@challenge={0x10, 0x1, 0xf0}, @mesh_config={0x71, 0x7, {0x1, 0x1, 0x0, 0xffffffffffffffff, 0x2, 0x1, 0x40}}]}]}, 0x3c}, 0x1, 0x0, 0x0, 0x4000801}, 0x20004000) (async) sendmsg$NL80211_CMD_SET_WOWLAN(0xffffffffffffffff, &(0x7f0000000380)={&(0x7f00000002c0)={0x10, 0x0, 0x0, 0x1000}, 0xc, &(0x7f0000000340)={&(0x7f0000000300)={0x24, r3, 0x400, 0x70bd26, 0x25dfdbfb, {{}, {@void, @val={0x8, 0x3, r4}, @void}}, [@NL80211_ATTR_WOWLAN_TRIGGERS={0x8, 0x75, 0x0, 0x1, [@NL80211_WOWLAN_TRIG_GTK_REKEY_FAILURE={0x4}]}]}, 0x24}, 0x1, 0x0, 0x0, 0x20000004}, 0x10) (async) sendmsg$IPSET_CMD_GET_BYINDEX(r1, &(0x7f0000000480)={&(0x7f00000003c0), 0xc, &(0x7f0000000440)={&(0x7f0000000400)={0x1c, 0xf, 0x6, 0xb00, 0x0, 0x0, {0x0, 0x0, 0x6}, [@IPSET_ATTR_PROTOCOL={0x5}]}, 0x1c}, 0x1, 0x0, 0x0, 0x20000891}, 0x400c020) (async) r5 = syz_genetlink_get_family_id$devlink(&(0x7f0000000500), r1) sendmsg$DEVLINK_CMD_SB_PORT_POOL_SET(r1, &(0x7f0000000780)={&(0x7f00000004c0)={0x10, 0x0, 0x0, 0x20000000}, 0xc, &(0x7f0000000740)={&(0x7f0000000540)={0x1c4, r5, 0x400, 0x70bd2a, 0x25dfdbfd, {}, [{{@pci={{0x8}, {0x11}}, {0x8, 0x3, 0x1}}, {0x8, 0xb, 0x7ff}, {0x6, 0x11, 0x101}, {0x8, 0x15, 0x8001}}, {{@nsim={{0xe}, {0xf, 0x2, {'netdevsim', 0x0}}}, {0x8, 0x3, 0x2}}, {0x8, 0xb, 0x3}, {0x6, 0x11, 0x2}, {0x8, 0x15, 0x1}}, {{@pci={{0x8}, {0x11}}, {0x8}}, {0x8, 0xb, 0xe}, {0x6, 0x11, 0x6d2}, {0x8, 0x15, 0x3}}, {{@nsim={{0xe}, {0xf, 0x2, {'netdevsim', 0x0}}}, {0x8, 0x3, 0x1}}, {0x8}, {0x6, 0x11, 0xfffc}, {0x8, 0x15, 0x2}}, {{@nsim={{0xe}, {0xf, 0x2, {'netdevsim', 0x0}}}, {0x8}}, {0x8, 0xb, 0x9}, {0x6, 0x11, 0x6}, {0x8, 0x15, 0x401}}, {{@pci={{0x8}, {0x11}}, {0x8, 0x3, 0x3}}, {0x8, 0xb, 0x6}, {0x6, 0x11, 0x3}, {0x8}}, {{@pci={{0x8}, {0x11}}, {0x8}}, {0x8, 0xb, 0xb9c}, {0x6, 0x11, 0xe19}, {0x8, 0x15, 0xffff}}]}, 0x1c4}, 0x1, 0x0, 0x0, 0x40000}, 0x0) (async) getsockopt$inet6_tcp_int(r1, 0x6, 0x1e, &(0x7f00000007c0), &(0x7f0000000800)=0x4) (async) socket$packet(0x11, 0x2, 0x300) (async) r6 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$DEVLINK_CMD_TRAP_POLICER_SET(r6, &(0x7f0000000a80)={&(0x7f0000000840)={0x10, 0x0, 0x0, 0x10}, 0xc, &(0x7f0000000a40)={&(0x7f0000000880)={0x1c0, r2, 0x400, 0x70bd2b, 0x25dfdbfe, {}, [{@pci={{0x8}, {0x11}}, {0x8, 0x8e, 0x1}, {0xc, 0x8f, 0x9}, {0xc, 0x90, 0x5}}, {@pci={{0x8}, {0x11}}, {0x8, 0x8e, 0x3}, {0xc, 0x8f, 0x7}, {0xc, 0x90, 0xb9}}, {@pci={{0x8}, {0x11}}, {0x8, 0x8e, 0x2}, {0xc, 0x8f, 0x9}, {0xc, 0x90, 0x6}}, {@pci={{0x8}, {0x11}}, {0x8, 0x8e, 0x1}, {0xc, 0x8f, 0x5be}, {0xc, 0x90, 0x2}}, {@pci={{0x8}, {0x11}}, {0x8, 0x8e, 0x1}, {0xc}, {0xc, 0x90, 0x2}}, {@nsim={{0xe}, {0xf, 0x2, {'netdevsim', 0x0}}}, {0x8}, {0xc}, {0xc}}, {@nsim={{0xe}, {0xf, 0x2, {'netdevsim', 0x0}}}, {0x8, 0x8e, 0x2}, {0xc, 0x8f, 0x9070}, {0xc, 0x90, 0x6c5}}]}, 0x1c0}, 0x1, 0x0, 0x0, 0x2b1db5e7065194e5}, 0x0) sendmsg$BATADV_CMD_SET_HARDIF(r1, &(0x7f0000000b80)={&(0x7f0000000ac0)={0x10, 0x0, 0x0, 0x400}, 0xc, &(0x7f0000000b40)={&(0x7f0000000b00)={0x3c, 0x0, 0x1, 0x70bd2d, 0x25dfdbfb, {}, [@BATADV_ATTR_ELP_INTERVAL={0x8}, @BATADV_ATTR_ISOLATION_MARK={0x8, 0x2b, 0x3}, @BATADV_ATTR_BONDING_ENABLED={0x5, 0x2d, 0x1}, @BATADV_ATTR_ISOLATION_MASK={0x8, 0x2c, 0x14b}, @BATADV_ATTR_MULTICAST_FANOUT={0x8, 0x3c, 0xffffffff}]}, 0x3c}, 0x1, 0x0, 0x0, 0x4004}, 0x40) (async) setsockopt$EBT_SO_SET_ENTRIES(r1, 0x0, 0x80, &(0x7f0000001440)=@nat={'nat\x00', 0x19, 0x4, 0x830, [0x200000000c00, 0x0, 0x0, 0x200000000c30, 0x2000000011ac], 0x0, &(0x7f0000000bc0), &(0x7f0000000c00)=[{0x0, '\x00', 0x0, 0xffffffffffffffff}, {0x0, '\x00', 0x0, 0xfffffffffffffffe, 0x2, [{0x5, 0x4, 0x37bb, 'gretap0\x00', 'bond_slave_0\x00', 'wg2\x00', 'wlan1\x00', @dev={'\xaa\xaa\xaa\xaa\xaa', 0x25}, [0x0, 0xff, 0x0, 0x0, 0xff, 0xff], @link_local={0x1, 0x80, 0xc2, 0x0, 0x0, 0xe}, [0x0, 0x0, 0xff, 0xff], 0x3ce, 0x436, 0x46e, [@comment={{'comment\x00', 0x0, 0x100}}, @bpf0={{'bpf\x00', 0x0, 0x210}, {{0x2, [{0x4, 0x5, 0x3, 0x7fff}, {0x188, 0x1, 0x5, 0x716}, {0x80, 0x3, 0x6, 0x2}, {0x0, 0x0, 0x5, 0x5}, {0x401, 0x5, 0x6, 0x8}, {0x4, 0x5, 0x96, 0x400}, {0x3, 0x2, 0x9, 0x7e}, {0x0, 0xbb, 0x6, 0x9}, {0x1, 0xbe, 0x3, 0xffff}, {0x1, 0xd9, 0x80, 0xb8e}, {0x80, 0x4, 0xff, 0xef40}, {0x1, 0x6, 0x3, 0x6aa}, {0x1800, 0x51, 0xff, 0x3}, {0xe, 0x2, 0x7, 0x4}, {0x9, 0x7, 0x9}, {0x18, 0x0, 0x5}, {0x2, 0x6, 0x7, 0x2}, {0x4, 0x4, 0xfb}, {0x9, 0x2, 0x9, 0xfffff63f}, {0x401, 0x9, 0x40, 0x1000}, {0x4, 0xf5, 0x6, 0x1}, {0x7, 0xfe, 0x6, 0x8001}, {0x3, 0x7f, 0x5, 0x9}, {0x8, 0x0, 0x1, 0x7}, {0xc, 0x7, 0x5, 0x1}, {0x6, 0x8, 0x1, 0x8}, {0xddd, 0x4, 0xdd, 0x7}, {0xa, 0x7, 0x8c, 0xff}, {0x4000, 0x9, 0x9, 0x5}, {0xfff, 0x8, 0x1, 0xfff}, {0x8edf, 0xfb}, {0x7f, 0x7, 0x8, 0xedf00}, {0xfff9, 0x4, 0x5, 0x8df0}, {0x1, 0x0, 0x2, 0xffffff00}, {0x8, 0x5}, {0x81, 0x81, 0x9, 0x3}, {0x7, 0xd, 0x2, 0xc7}, {0x0, 0x7, 0xc, 0x6}, {0x100, 0x33, 0x0, 0x200}, {0x9, 0x4, 0xc, 0x1e48}, {0x3, 0x3, 0x4, 0x180}, {0xa, 0x4e, 0x84, 0x9}, {0x2, 0x9, 0x7, 0x3}, {0x7ff, 0xbe, 0x8, 0xffffffff}, {0x10, 0x8, 0xad, 0x1}, {0x4436, 0x9, 0x1, 0x9}, {0x5, 0x8, 0x7}, {0x1, 0xb4, 0x4, 0x1}, {0x1, 0x6, 0x8, 0x3}, {0x65f, 0x9, 0xd1, 0x8}, {0x6, 0x7, 0x7, 0x3}, {0xbb7, 0x3, 0x9, 0x2c}, {0xc19, 0xa, 0x3, 0x2ab}, {0x0, 0x9, 0x6, 0x400}, {0x3, 0x3, 0x2, 0x7}, {0x7, 0x10, 0x1, 0x629c4569}, {0x4, 0x3, 0x4, 0x1}, {0x0, 0x3, 0x8, 0x40}, {0x8, 0x0, 0x25, 0x96}, {0xfff, 0x5, 0x5, 0x3}, {0xff, 0x7, 0x1, 0x2}, {0x7, 0x3, 0x1, 0x200}, {0x2, 0x2, 0x2, 0x5}, {0x5db, 0x10, 0x81, 0xfffffff8}], {0x80000001}}}}], [@arpreply={'arpreply\x00', 0x10, {{@multicast, 0xfffffffffffffffd}}}, @common=@STANDARD={'\x00', 0x8}], @arpreply={'arpreply\x00', 0x10, {{@link_local={0x1, 0x80, 0xc2, 0x0, 0x0, 0x2}, 0xfffffffffffffffe}}}}, {0x3, 0x20, 0x6002, 'netdevsim0\x00', 'macsec0\x00', 'veth1_to_bridge\x00', 'ipvlan0\x00', @broadcast, [0xf22b684def967346, 0x0, 0xff, 0x0, 0x0, 0xff], @empty, [0xff, 0xff, 0x0, 0x0, 0x0, 0xff], 0x6e, 0xa6, 0xde, [], [@snat={'snat\x00', 0x10, {{@multicast, 0xfffffffffffffffc}}}], @arpreply={'arpreply\x00', 0x10, {{@empty, 0xfffffffffffffffc}}}}]}, {0x0, '\x00', 0x2, 0xffffffffffffffff, 0x2, [{0x9, 0x49, 0x6018, 'veth0_to_bond\x00', 'dvmrp0\x00', 'veth0_to_bond\x00', 'veth0_to_bond\x00', @broadcast, [0xff, 0x0, 0xff, 0xff, 0x0, 0xff], @link_local={0x1, 0x80, 0xc2, 0x0, 0x0, 0xe}, [0xff, 0x0, 0x1fe, 0xff, 0xff, 0xff], 0x10e, 0x10e, 0x13e, [@ipvs={{'ipvs\x00', 0x0, 0x28}, {{@ipv4=@rand_addr=0x64010100, [0xff, 0xff, 0xff], 0x4e21, 0x2f, 0x6, 0x4e20, 0x34, 0x10}}}, @nfacct={{'nfacct\x00', 0x0, 0x28}, {{'syz1\x00', 0x2}}}], [], @common=@STANDARD={'\x00', 0x8, {0xfffffffffffffffb}}}, {0x3, 0x0, 0x6003, 'pimreg1\x00', 'veth1\x00', 'veth1_vlan\x00', 'batadv_slave_1\x00', @local, [0x0, 0x0, 0xff, 0xff, 0xff], @multicast, [0xff, 0xff, 0xff, 0xff], 0xde, 0xde, 0x116, [@cgroup0={{'cgroup\x00', 0x0, 0x8}, {{0x3, 0x1}}}, @time={{'time\x00', 0x0, 0x18}, {{0x6, 0x10000000, 0x4ccb, 0xde40, 0x0, 0x4, 0x3}}}], [], @arpreply={'arpreply\x00', 0x10, {{@local, 0xfffffffffffffffe}}}}]}]}, 0x8a8) r7 = syz_genetlink_get_family_id$l2tp(&(0x7f0000001500), r6) sendmsg$L2TP_CMD_SESSION_MODIFY(r1, &(0x7f00000015c0)={&(0x7f00000014c0)={0x10, 0x0, 0x0, 0x4}, 0xc, &(0x7f0000001580)={&(0x7f0000001540)={0x38, r7, 0x200, 0x70bd2a, 0x25dfdbfc, {}, [@L2TP_ATTR_RECV_TIMEOUT={0xc}, @L2TP_ATTR_SESSION_ID={0x8}, @L2TP_ATTR_FD={0x8, 0x17, @l2tp6=r1}, @L2TP_ATTR_UDP_DPORT={0x6, 0x1b, 0x4e23}]}, 0x38}, 0x1, 0x0, 0x0, 0x4000000}, 0x20000000) (async) ioctl$SIOCX25SSUBSCRIP(r1, 0x89e1, &(0x7f0000001600)={'wlan1\x00', 0x252, 0xc}) (async) ioctl$sock_kcm_SIOCKCMCLONE(r1, 0x89e2, &(0x7f0000001700)={r1}) (async) r9 = syz_genetlink_get_family_id$nl80211(&(0x7f0000001780), r1) sendmsg$NL80211_CMD_START_NAN(r8, &(0x7f0000001840)={&(0x7f0000001740)={0x10, 0x0, 0x0, 0x80}, 0xc, &(0x7f0000001800)={&(0x7f00000017c0)={0x38, r9, 0x500, 0x70bd2b, 0x25dfdbfe, {{}, {@void, @val={0xc, 0x99, {0x275d, 0x7b}}}}, [@NL80211_ATTR_NAN_MASTER_PREF={0x5, 0xee, 0x3}, @NL80211_ATTR_NAN_MASTER_PREF={0x5, 0xee, 0x81}, @NL80211_ATTR_BANDS={0x8, 0xef, 0x1}]}, 0x38}, 0x1, 0x0, 0x0, 0x40}, 0x1) (async) ioctl$ifreq_SIOCGIFINDEX_vcan(r8, 0x8933, &(0x7f0000001880)={'vcan0\x00'}) (async) getsockopt$inet_mreq(r8, 0x0, 0x24, &(0x7f00000018c0)={@rand_addr, @loopback}, &(0x7f0000001900)=0x8) (async) sendmsg$ETHTOOL_MSG_WOL_SET(r6, &(0x7f0000002d40)={&(0x7f0000001940)={0x10, 0x0, 0x0, 0x800}, 0xc, &(0x7f0000002d00)={&(0x7f0000001980)={0x1348, 0x0, 0x4, 0x70bd2a, 0x25dfdbff, {}, [@ETHTOOL_A_WOL_MODES={0x11e0, 0x2, 0x0, 0x1, [@ETHTOOL_A_BITSET_MASK={0x8b, 0x5, "219ca67a87ba3139a5a854897e4deb6cf0fa8cc62344c72816a034f2c76e0e8dad97f6ea05e08fbb1f00a894021af9836d46f65917c99634f4c13b216234aaf5593eb7836f19ce8d719404de37f10363eceac493d2c112337588fee9439ae6435739fc1b74ecfd85942708c7743065b38b2b2687367aad399fe1110ac0cab38efb04c3388c5cad"}, @ETHTOOL_A_BITSET_VALUE={0x4f, 0x4, "e14ce49b7cf023ad9c0df7c8f8a5bfb2b91fdf1e11eeeb850dbfa3aee8c5605c117516d54bdb265c39bf5d8670530c6097294333b5640a53f06af49bbe1fb352324795082d75f8a0601c05"}, @ETHTOOL_A_BITSET_MASK={0x1004, 0x5, "6243f88edd5fef53ef22585036aedf6ba6cbc3f78d78da378b77e3828ced414d4844224afb5648ed6e0c5742fe4b2f769e6e637eba24dc19bb9fa8ca5041c36018bc5cdf22707ea73070baffaba1502745ce2a7f124744872788f9c4dd3191ceb54fcc4e4ec76823d9edec47cc5ee7d54103cac1c69961019c6f85ffcf76c828a14e670f92e1150c0297afe5405c000c419627b0b26cf5434925bbbd443ef13a8c63308c56ea123744c9473bb0bd3278d55a95dac71af12f18ab5984dd60f6555f3f8b174638d949193fb61d4f6fe0dd97c8710619372fdbac0c8c830b9486e2124aa582fc321442a6b0826c3c43a6a8c83b2180980e310a627af0df547109204e9433c87cd1cef26be27ebde99909e725fa30248951df33c38503afba51f2a0e1edfdfe4c08fbbac15e9c8dd54ea69fd03dd1478065f64930299e00f08c99709bd81b35c5d440c85838059596c940f73c803e4bc708d7106116c7bbb9a09f4ee0e1d5dd39bf45afe21fc15fd2afa7eba36e6d93f52926820c4adcaf75ecb09e5c639f713c4e53933b4118da884ec4b3949148f4d6b526dc351937e3d708ca0e99ef2e1d9ab84d84ff682564524658eabef9aa27e56eb4a96b398b825d13f2dc6d2f984d5d3733bfbc89405e621551fab94b2a4faa19f9eb7d8fc7b506920ac721ef026d218e242d604034944b7fc5ec969d76cc0932acc17b46929377fc0e5a37c43fe4b8246adf85a432b907a0525604ea1023ec296ddbe933da237c9b5228c7430b1f100e5f9ed7726ec810176268b7b738d824a842bb1747cef09935e5d0e304f23652d355603dcbe8bdb442bfe106a405912d65345cceb36894e90c6ca33b350e1cabb65bc633b967fd69990c4519a3d9625513f7d026c6a24d4c13fdef2fc5b869ea3e16958e638cdbfaa4624f0dc0e25a9518670f33e30c681b4caedd6ff1716b64555d574cf018e284272f10ddc36f4065df3f740df92d0395e4140e3a8a48f9ee4e918d97588158e144e933df38f15fe6be38cf2f428910d52a3df349215bbd31bf26fc822d740811079e4b5e489fb4da16d26d521cfd78d33cba5250c72accb71c69f18bc3814350a975e3b4cd9e07ffaa53828bde281019fef5b2959001575cc573871ba05129925c79eaf1384924563fe90baa63f6795d97fa74b35c3a340b39ebe96b99b40a3340deae0b05848b4484deb7da2eaa3c2fbd630d75396c8263fc589f3f4c70512df2f4919d6c59986d8aea1f4c3669214e5c3aee3317a1266b51ceb82ec253779cf3b3cd2c010d38cee08746be2c647d679414fe2729f6a72ed6e1c0473978a2325c44eb5dae3d38733c65bf6d13abd28324760ff2b2a1a800ab8e2294ce59ffb33ccfb77ca71e3d2214d09ed77307f64491e346977fa92dad3a527411471c125e9aded28491153172589c5b15ba114c10dc16383b8c663a6c289bd2d6788050be2c26784bfaee103b6bc6d52b1646de564285e3134d1afb3e326a100ccc3d8b266bf8affdc0dfac7156b1f016e35558bb9c249ad9f4a66bb37b6c4a4bdff741f82383901229294467b8fa662ffe2c2b07429a15724bea3db0ae63635c0de7b2dd821368f8865d59acd0d741d31970eced801bbcd5a88b69a6cc29c192bafe7939b1c5f1a56befc6cfad0ce500fdb3edac81c397d21f375f0c2341c412a6ea18c027761aa32dba240c6333af73b0cd62af9f0080206ccae8efce029879d411156b8f6a90b3cc15f6bcf77bb4e8361ca613b02cff7c3510087b38aa5f01644e019aa7e0f00679da3f45154985571daf385f0d774dc4f5fc7a87d0afe94b2e9d96743fedf3fcaacdcc19ac9ca8cc037b1634d23a600294f3dc5ecdf95e2dac6f27234076651b04ad00ba7702995295dc12b5645e41d0587d116c9753341e8aeb67605ae882e279a9808286e8bf664957cb7eb275d4573cf6e061d1aa852ab0417dd57d254fe21052e9e80331ef42841e00b0d334a9f8f9deba1e1f57f3e225430249666a0df41fcde2a98fd7d42488335c103325784edfa0fbffba96787eb407e62e8a30ce9c56aa7be3ebdb1bf2bde319d52334eb540fb01d20650272fce302fa55a4319dec7a043873d9ed4ecee2f66071a57e9da755f280478aafaa773caeb899c67e59008a6edee9037f688c65e2b696afa60719fd21091526d591bed0c0e294a3f8d5fc012e6fb6ec8f1cfdf70020baeb4fe0a69d53cd77a7ce317725032e53048ab70820d216f12f6bd1d135a3b4b806860ee5c5315a3b0ceb13e06fa73bac9337e3d3e58af06a08f369ee2fd7fb437693230f49b315a81d58bf37e69916f7a42bc1ce454c314c28a6d59c708f98bf5b60399dfc0c901b52143dbb7f0f446ba9823269d8a64f11cf106ed6377efe9f6d0144019a8b815d16da23b31bca2c7f94c438a1772407b4fa21c576aae00f28c8a0a31986945b2a474e3829da70c09be98b2c72b2695ceef8a6d68b6ccfef7a7060064678e4ab059c9b7f09cd5b2f1236972309971cc12e5370afa72a295b3a5d5d507938e97a022bc7920f767ea2dd0cca4935d4222e6c48d648418c326f8194241941c7e91e3db98508f10f0c6cb0247b02acbb9410c4f25bb66893cc16de7f0307ec18294e4f9b8e6c3520373d5b98f78d87c004776f8492423090a7064824e1fbd9d06011c019f23f978bc54b3a306a90cedc15ccc245c524c3b2fdcee932052d55c222abfe4586d4810b97b2d836c07c3d4afdc6081eec67d39792c5a8caeb528ae6ea12e764042ef8c19ede5988f0e3bdaa1b0d0746d5406c0ae748dff4681b75985785d85e7f4b76b728b58c4e1882b36c707c5f5c3691bc47da2093cf928326506d877b46eb89fbce6f1956e57d5426145a8d3add70bf083d2a6c6237afe503a9931c7cc4cbee64af1157e56a2bfaa724b3cd65de47ba50f28f53c512f81f59e6f242936fbad22c43868814b232109446005cf82b0854ebe86f7e112fc223589f3bdb9b749cd3f2164b66dd5dd903915bf71351ce041ad217d7cded01a0118aa9c91a9e45165113f1723baa41f9defc073f16fe4f36ef3797ac7f368a10102d22aa8c7490773d4ac6e150d273ea0d4e28d814da6a16580924bf4fb95e44a6426fa539d3f331ccd67bd23e59dfadbf3815d6541bdacdf25dcfbde254edac002c70c0c32a5f050c270521deed0bb63761c1caa4ad7f331cbb054fe710ed88b57fbffc8bce7399f210cc8c46ca1602fc5ccc9f7e578cb4c2c079cd0f8757297fefb195b7a4150023dbd36aa9002670505c27b147169d8a429944be3920860d45813b7fde15b4167094c0b32b3d513f6ad1c242e03b3a45463efc3301f874b9798978f105f993aa1122461782b4a852cbba7461692e0b2444fd1c7185c33bad533b7bd5f93e1961139150b9b5d9b74ad6e5acd73563748e57dd4660f4d0ce5b3ba5e6267dcf845828fe43045da4b18dbdcbc1336f7fd046e0d017ddc0d0d67ad626787628b068d64c7840621be7b0ebcc6646e615be6536625d7d821b633bdb868f9827976d0d1a657e221bf812be7d7adc423c8209f084c8bf24d40a11f3380cf9846dc9ea3353b52752b7281ed16ac5007c8604aabadb6d8aa2923510b5698ce246df86e35cbaac845f572797773be6290abe9cfd79556c2ec21c499e6842e5e9b4ac8aa596e801f9c1fa4b883908c1b1f1b7de3a4c45d3b86fe146fbd0d565ba3f4abe2627c34015ae1589e676c9e08de3062ce36952b34f4cb27aba638e56754d90dd2efafa88f30e7457efef355477ef483bd885d4b20521a47fc7d1d7a3bcd7ef6aa41d46bb9b64ce74a703dfef81a6431ea9d7d843106ec1168c66d5e55c079dcee31ca339f71c7dba1da9da0b311d8bc7f6b583a8644f0e501c88c176752f61855ad4b74953d0b92c5d5d19d88ecfaf25e6a4fc51fc2ba2518223cfab9d87ceb013802dcf8ea074a67dfb018734d2994733008b5ddae7a271866278ac35a5b659f8db87b1e85de1ec15bd74a1a2b99afa61b04e177c4141ac1443776856eacee9fc03867d724fa10954559fa4a7b3585909d9b2a40649a90b3910ef8881ae7d8652d43e56a044b6ab5dfdcc31325abda24adae983bae2bd9de10ff6b891229baa41e38d2e86b9f6b3a12ab4ea7d2695a77bb93c93cdb14894defd35b68ff7ce5df0eff66972b84ce1d0063ca966feb72aa4e96485b7ce65c7e9617c686773ab3cb153e9fb8a28f076bfdf328f5abe70ccda0760a05569a141f5cafd15860717cae158c814f91e05e708675ea7234d65c4f9e92b9590b4c48afbb898bfbeb44d7ea93fccfb94018946030fe19a6dd0f64d805960fee66b60447cf7d227ffaafb4ab0094d049e3d028a22722fdff31cba74bf2e3de52f6a784527f044043ac95008077b15cd3a9839546b91be54aa926cd7da80cb45a2465ab2fd8d619929147c428d5d8fdaf7be71c7dda3d6ef0507b327412d41c8f9337ac661c68aae7711e0a0fe04876de3110954141df51fc350bf99239750bcf0a203951be40f9d9f2ab03a3d64ba3655c7fdd1cde7bee7a747d609a935c2aed854ff48b1a56cf6e8b0bdde52682a7934cd584c3eb241094c6d9f8fa6040738483da2aad94d35a7ddeb9c9fc6d49053afc9c191312a1f7505cf43f050b50ace369d9eccb9df0b1a7e12b70ae240a4c7f95f296c8ddaa71a6502d2f6568283dc6a561715add8f43ea10a9fda692393581a64267eee560304458a72f1ff34b2b254ac8e1f12e3e8a40e54a11548777891b5e897d5a241c9d2d3e9ef37ac04cc12f8dde9bb783a3d5cdc78437f5808505ae516edd7adfe15956cc35cb04318bb69c2992ff82a554f0c95bb61ac02c9df2a25da1f8f84d6682d68120c42514c1c04ae25be1e988c854c09913abb9ca914c20c92ac58eabb89b651f784ba14f008c17ffed336e2bd6f3f9624cd28dee88c63f38fff5d457dd69f50a55207b83bece45bf16a3a5c346bd32ce717e17234328df23ef044d58e37b3cd7292175903675d05f85e9f8e67e0af6cd42c33df471e7d87827e6ed3f5887119363d5cf346c65b955f2612ce0a430f8d113f844a407e0d045bccd6f5df684ffc12d679e2cac4e9c1bca51b48ec6c8a0c5c55534ac749abd159949686718b0cf174189bfe740c09457a73928e3a00878620689977780061138124edcb59d5aa2cd2c6c4d9b90636c6465b6acf80261440670d0cb9911c59a7c423516a593443284f2f21db40ae0e949e1f4780c8daa3f6b81a13bd671a579ce87929b057e12fdf7669143c68efb6096644a9e64b55b2cbcd3a1118a3cbff7ff1c6b0d9b8ac7447494b0e5520b085966e556123d02c4eb13146500c40a8cff665467f5752532f24eb813b78c3f0232ff5d30c28e42cd7de7eadd07b1439bc2502c92c864d4e88f643ded669a2f5f7d186cb301440ec7021d6148fc41ebffa29eeab64c50f148f7d2da0e5885179c64aa706a6232a87463a98b29d4d721d74b3824dd745686172594f4ca60855957f496f254d76928b091fa97efadba23b05686ee6016d3655668a5917bf1cfa556ab72b97d1c6c09776b4cbad30e76d11219aecc44ac0d2846b9fb2590c416c43700635e4353553fe4397c965779954d263f72c74c188499bae8de6f0c7188a7a123486a3f164edb3bda822f6c21c8cc2d5cdf63df2a8fbe1c275277d7e2ad30c8d98afe9f10629c5412fa9f54ed7344ad660b6fdda388cfd9460bd73989d294457f4b584df0bdc9e5dc15ea61ee58d85fdb5db4dbec7b19b7dcf6339c1c184d5b9bbf939ace9f58de4"}, @ETHTOOL_A_BITSET_VALUE={0xf9, 0x4, "05e986d1e310adebdf3c1674decdcbb1031bec9429079831e34076950e1319bbde6b043aecdb345bde55b9cdaf0ba0b4d0236c1121dc3e2617ce4786832bed27d21d02c8ddf942ff03a5405d067240a2fed1658e81b50cb045e377c9dd61009a075ac584018cb12f0f93898a448ffaac56d2dd40070d362d5c90c8f406a4d48a1815c99acb6ba6c05ff0b7b06563eba55d17dd6abe02fc88d122cef580674018eb8e9458746f4b3997df906ee6d07b23c2891b29600d72ce0f212a8234370f472db452bb01544b3a6ced915ecbd18f8543df757ffd7ea3122ff34d7bd031ffb780e03f6ede3436ed0c7dd42a72e386d4448e63fa85"}]}, @ETHTOOL_A_WOL_SOPASS={0x55, 0x3, "648c8354ab82a91364966ad52ef9d2c1dc6f7b9b57db3207e0da39916e5dc4ea0d7480f98032138059ec60072cf8d087d60adf0e61d84615bf6132bdd3669d2b1fda71f626363ea82a8daf0d11255cecce"}, @ETHTOOL_A_WOL_SOPASS={0xfc, 0x3, "f2392e6f257c55eccb90009c28bf10f347c5203fc21017af66b279605101cb2a24b738754a2c3b289102182009542b184d7598a0b6e0149a0ef96a0a6284efe742fd32ca7f9a35ab400626abc586c46c2c3851ef5c7ce5b59c619582a3b92c2a3a2fe2b04cab3d9fce3d8c455d75e07321dff739aed3838f75a453b733e936f136a74a7e04b7f6d6642561e93a0be94185c83fc0bcda3d42e8bb7acab567e3604322e9aab4a0cbec8f6f49aa1185a1ec2d2eebdfd98dc9889f25711a1c049473af3c2ad7997f2447aaf62746db5155b66a93dd6e9a4ee1f5621451cc75ae05111f5df84a2165d316b6145b0795e9af970ec75bde01200d28"}]}, 0x1348}, 0x1, 0x0, 0x0, 0x10}, 0x40890) (async) ioctl$sock_kcm_SIOCKCMCLONE(r1, 0x89e2, &(0x7f0000002d80)={r1}) sendmsg$NFNL_MSG_CTHELPER_GET(r10, &(0x7f0000002fc0)={&(0x7f0000002dc0), 0xc, &(0x7f0000002f80)={&(0x7f0000002e00)={0x174, 0x1, 0x9, 0x301, 0x0, 0x0, {0x7, 0x0, 0x6}, [@NFCTH_QUEUE_NUM={0x8, 0x3, 0x1, 0x0, 0xbbe}, @NFCTH_TUPLE={0x54, 0x2, [@CTA_TUPLE_ZONE={0x6, 0x3, 0x1, 0x0, 0x2}, @CTA_TUPLE_PROTO={0xc, 0x2, 0x0, 0x1, {0x5, 0x1, 0x84}}, @CTA_TUPLE_ZONE={0x6}, @CTA_TUPLE_ZONE={0x6, 0x3, 0x1, 0x0, 0x4}, @CTA_TUPLE_IP={0x2c, 0x1, 0x0, 0x1, @ipv6={{0x14, 0x3, @dev={0xfe, 0x80, '\x00', 0x1b}}, {0x14, 0x4, @loopback}}}]}, @NFCTH_POLICY={0xc, 0x4, 0x0, 0x1, {0x8, 0x1, 0x1, 0x0, 0x7}}, @NFCTH_TUPLE={0xc, 0x2, [@CTA_TUPLE_ZONE={0x6, 0x3, 0x1, 0x0, 0x4}]}, @NFCTH_TUPLE={0xd8, 0x2, [@CTA_TUPLE_PROTO={0xc, 0x2, 0x0, 0x1, {0x5, 0x1, 0x84}}, @CTA_TUPLE_IP={0x2c, 0x1, 0x0, 0x1, @ipv6={{0x14, 0x3, @loopback}, {0x14, 0x4, @private2={0xfc, 0x2, '\x00', 0x1}}}}, @CTA_TUPLE_ZONE={0x6, 0x3, 0x1, 0x0, 0x4}, @CTA_TUPLE_PROTO={0xc, 0x2, 0x0, 0x1, {0x5}}, @CTA_TUPLE_ZONE={0x6, 0x3, 0x1, 0x0, 0x2}, @CTA_TUPLE_IP={0x2c, 0x1, 0x0, 0x1, @ipv6={{0x14, 0x3, @remote}, {0x14, 0x4, @remote}}}, @CTA_TUPLE_PROTO={0xc, 0x2, 0x0, 0x1, {0x5, 0x1, 0xc}}, @CTA_TUPLE_IP={0x14, 0x1, 0x0, 0x1, @ipv4={{0x8, 0x1, @multicast1}, {0x8, 0x2, @multicast2}}}, @CTA_TUPLE_IP={0x2c, 0x1, 0x0, 0x1, @ipv6={{0x14, 0x3, @ipv4={'\x00', '\xff\xff', @remote}}, {0x14, 0x4, @private1={0xfc, 0x1, '\x00', 0x1}}}}, @CTA_TUPLE_ZONE={0x6, 0x3, 0x1, 0x0, 0x2}]}, @NFCTH_POLICY={0xc, 0x4, 0x0, 0x1, {0x8, 0x1, 0x1, 0x0, 0x4}}, @NFCTH_PRIV_DATA_LEN={0x8, 0x5, 0x1, 0x0, 0xb}]}, 0x174}, 0x1, 0x0, 0x0, 0x84}, 0x20008800) 781.724089ms ago: executing program 4 (id=5484): bpf$MAP_CREATE(0x0, &(0x7f0000000300)=ANY=[@ANYBLOB="070000000400"], 0x48) (async) r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f00000005c0)={&(0x7f0000000540)=ANY=[@ANYBLOB="4000000010003b0c00"/20, @ANYRES32=0x0, @ANYBLOB="00000000a8880000200012800b000100656c7370616e000010000280040012000600100000000000"], 0x40}}, 0x0) r1 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r1, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000200)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a20000000000a03000000000000000000070000000900010073797a30000000004c000000090a010400000000000000000700000008000a40000000000900020073797a31000000000900010073797a30000000000800054000000021100011800c000100636f756e746572009c0000000c0a01010000000000000000070000000900020073797a31000000000900010073797a3000000000700003806c000080080003400000000260000b80440001800c000100636f756e746572"], 0x130}, 0x1, 0x0, 0x0, 0x8000}, 0x8880) (async) sendmsg$IPCTNL_MSG_CT_GET_DYING(r1, &(0x7f0000000180)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x8000}, 0xc, &(0x7f0000000140)={&(0x7f0000000100)={0x14, 0x6, 0x1, 0x401, 0x0, 0x0, {0x0, 0x0, 0x3}, ["", "", "", ""]}, 0x14}, 0x1, 0x0, 0x0, 0x200e4880}, 0x40000) (async) ioctl$BTRFS_IOC_BALANCE_PROGRESS(r0, 0x84009422, &(0x7f0000000740)={0x0, 0x0, {0x0, @struct, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @struct}, {0x0, @struct}, {0x0, @usage, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @struct}}) 779.878819ms ago: executing program 7 (id=5485): socketpair(0x1, 0x80001, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$sock_ipv4_tunnel_SIOCADDTUNNEL(r1, 0x89f1, &(0x7f0000000080)={'ip_vti0\x00', &(0x7f0000000040)={'syztnl0\x00', 0x0, 0x8000, 0x20, 0x0, 0x1000000, {{0x5, 0x4, 0x0, 0x0, 0x14, 0x400, 0x0, 0x9, 0x4, 0x0, @initdev={0xac, 0x1e, 0x0, 0x0}, @loopback}}}}) ioctl$sock_ipv6_tunnel_SIOCDELTUNNEL(r0, 0x89f2, &(0x7f0000000180)={'syztnl0\x00', &(0x7f0000000100)={'ip6_vti0\x00', r2, 0x0, 0x0, 0x9, 0xc, 0x0, @private0={0xfc, 0x0, '\x00', 0x1}, @private1={0xfc, 0x1, '\x00', 0x1}}}) 681.782374ms ago: executing program 7 (id=5486): r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x7101}) r1 = openat$tun(0xffffffffffffff9c, &(0x7f0000000400), 0x0, 0x0) r2 = socket$unix(0x1, 0x5, 0x0) ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) r4 = socket(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r4, &(0x7f0000000200)={0x0, 0x5f, &(0x7f0000000000)={&(0x7f0000000300)=@newqdisc={0x88, 0x24, 0xf0b, 0x70bd26, 0x0, {0x0, 0x0, 0x0, r3, {0x0, 0xffff}, {0xffff, 0xffff}}, [@qdisc_kind_options=@q_mqprio={{0xb}, {0x58, 0x2, {{0x1, [], 0x0, [0x1, 0x2, 0xfffe, 0x0, 0x0, 0x0, 0x0, 0x8, 0x0, 0x5c4, 0x8000, 0x0, 0x0, 0x3dc], [0x0, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1000]}}}}]}, 0x88}}, 0x20000000) r5 = socket(0x400000000010, 0x3, 0x0) sendmsg$nl_route_sched(r5, &(0x7f00000012c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000440)=@newqdisc={0x4c, 0x24, 0x4ee4e6a52ff56541, 0x70bd29, 0xfffbffff, {0x0, 0x0, 0x0, r3, {0x0, 0x8}, {0xffff, 0xffff}, {0xc, 0xfff3}}, [@qdisc_kind_options=@q_taprio={{0xb}, {0x1c, 0x2, [@TCA_TAPRIO_ATTR_SCHED_ENTRY_LIST={0x10, 0x2, 0x0, 0x1, [{0xc, 0x1, 0x0, 0x1, [@TCA_TAPRIO_SCHED_ENTRY_INTERVAL={0x8, 0x4, 0x9defcb4}]}]}, @TCA_TAPRIO_ATTR_SCHED_CLOCKID={0x8, 0x5, 0xb}]}}]}, 0x4c}, 0x1, 0x0, 0x0, 0x40001}, 0x8010) r6 = socket$key(0xf, 0x3, 0x2) sendmsg$key(r6, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000000)={0x2, 0x1, 0x0, 0x2, 0x8, 0x0, 0x4, 0x0, [@sadb_address={0x3, 0x5, 0x0, 0x0, 0x0, @in={0x2, 0x0, @private}}, @sadb_address={0x3, 0x6, 0x0, 0x0, 0x0, @in={0x2, 0x0, @multicast1}}]}, 0x40}}, 0x0) close(r1) socket$nl_route(0x10, 0x3, 0x0) ioctl$SIOCSIFHWADDR(r1, 0x8914, &(0x7f0000002280)={'syzkaller0\x00', @multicast}) r7 = socket$kcm(0x11, 0x3, 0x0) r8 = socket$unix(0x1, 0x5, 0x0) ioctl$sock_SIOCGIFINDEX(r8, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$kcm(r7, &(0x7f00000000c0)={&(0x7f0000000580)=@xdp={0x2c, 0xa888, r9, 0x3e}, 0x80, &(0x7f0000000080)=[{&(0x7f0000000180)="27030200590214120600002fb96dbcf706e10500000086ddffff1144ee1611d4b8bf4a31accb", 0xfdef}], 0x1}, 0x0) 680.651214ms ago: executing program 4 (id=5487): bpf$PROG_LOAD(0x5, &(0x7f000000e000)={0x15, 0x4, &(0x7f00000000c0)=ANY=[@ANYBLOB="b400000000000000791028000000000069002600000000009500740000000000", @ANYRESDEC], &(0x7f0000003ff6)='GPL\x00', 0x2, 0xfd90, &(0x7f000000cf3d)=""/164, 0x0, 0x25, '\x00', 0x0, @sk_reuseport, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0xffffff8f}, 0x48) ioctl$sock_SIOCGIFINDEX_80211(0xffffffffffffffff, 0x8933, 0x0) listen(0xffffffffffffffff, 0x0) accept$inet6(0xffffffffffffffff, 0x0, 0x0) socket$kcm(0x10, 0x2, 0x4) r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x7101}) r1 = socket(0x400000000010, 0x3, 0x0) r2 = socket$unix(0x1, 0x5, 0x0) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000280)={0x0}}, 0x10) r3 = openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0) ioctl$TUNSETIFF(r3, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x7101}) r4 = socket$unix(0x1, 0x1, 0x0) r5 = socket$kcm(0x11, 0x3, 0x0) r6 = openat$tun(0xffffffffffffff9c, &(0x7f0000000400), 0x0, 0x0) close(r6) r7 = socket$nl_route(0x10, 0x3, 0x0) r8 = socket$unix(0x1, 0x1, 0x0) ioctl$sock_SIOCGIFINDEX(r8, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r7, &(0x7f00000012c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000140)=@newqdisc={0x44, 0x24, 0x4ee4e6a52ff56541, 0x70bd2a, 0xffffffff, {0x0, 0x0, 0x0, r9, {0x0, 0xfff1}, {0xffff, 0xffff}}, [@qdisc_kind_options=@q_hfsc={{0x9}, {0x14, 0x2, @TCA_HFSC_FSC={0x10, 0x2, {0x4d, 0xfffffffb, 0x7fffffff}}}}]}, 0x44}, 0x1, 0x0, 0x0, 0x4000000}, 0x20040084) sendmsg$nl_route_sched(r7, &(0x7f0000001200)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000700)=@newqdisc={0x838, 0x28, 0x4ee4e6a52ff56541, 0x4003, 0xfffffdf8, {0x0, 0x0, 0x0, r9, {0x10}, {}, {0xa, 0x3}}, [@qdisc_kind_options=@q_tbf={{0x8}, {0x80c, 0x2, [@TCA_TBF_RTAB={0x404, 0x2, [0x0, 0x1, 0x9, 0x8000, 0x3, 0x5, 0x5, 0xb762, 0x4, 0x40007, 0x8, 0xf, 0x2, 0x80000001, 0x400, 0x1007fc, 0xffff8000, 0x6, 0x403, 0x9, 0x8, 0xffffe4f5, 0xd6, 0x4, 0xfffb, 0x7, 0x0, 0xfffff4f0, 0x9, 0x1, 0xfffffffc, 0x4, 0x1, 0x6f2151b1, 0x9, 0xc, 0x20001000, 0x4, 0x2, 0x7, 0x4, 0x99, 0x9, 0x5, 0x6, 0x7, 0xfffffff7, 0x6d, 0x2, 0x9, 0xd05, 0x1000044, 0x8, 0x8, 0x1, 0x4, 0x7ff, 0x8, 0x7, 0x7fbffffe, 0x400, 0x8, 0xfffffa72, 0xcd, 0x4, 0x80000000, 0xc, 0x4, 0x65, 0x91, 0x659, 0x9, 0xf, 0x9, 0xc28, 0x9, 0x7, 0x3, 0x401, 0x3, 0x2, 0xfffffffa, 0x1, 0x10001, 0x3, 0x1, 0x4, 0x8, 0x8, 0x7, 0x1, 0x1, 0x1, 0x7, 0x40, 0x7, 0x12, 0x8000, 0x1, 0x4dc, 0x80, 0x3, 0x7fffffff, 0xff, 0x9, 0xa7, 0xf, 0x1, 0xffffffff, 0x3, 0x1001, 0x4, 0x401, 0x7, 0x80000000, 0xffff, 0x6, 0x5, 0x4f, 0xffffffff, 0x80000000, 0x1966f9ad, 0x200, 0x20200, 0xed5, 0xfffffc00, 0x6, 0x4, 0x8, 0x485e, 0xa85, 0x80000040, 0x2, 0x7, 0x7, 0x102, 0x2d5421e8, 0x7, 0xfffd, 0x2, 0x6, 0x3ff, 0xf04, 0x0, 0x2, 0x5, 0xfffffc00, 0x5, 0x8d, 0x4, 0x401, 0x6, 0x9, 0x3, 0xfffffffb, 0x1, 0x0, 0x3, 0x2, 0x5, 0x8, 0x3, 0x0, 0x800, 0xf06, 0x8, 0x7ff, 0x0, 0x9, 0x6, 0x5, 0x400001, 0x4d15, 0x1ff, 0x7, 0x3, 0x469, 0x3, 0xfffffffc, 0x200, 0x10000005, 0x7, 0x2, 0x8, 0x42ba, 0x4, 0x9, 0x3, 0x8, 0x8, 0x53, 0x6, 0x4, 0x400, 0x8000, 0x0, 0x2c310b18, 0xfff, 0x0, 0x3, 0xcd34, 0x9, 0x81, 0xdf3, 0x2, 0x7, 0x8, 0x40fff, 0x1ff, 0x8000, 0x3, 0x200, 0x80, 0x6, 0x9a6, 0xe4cb, 0x402, 0x1, 0x1ff, 0x5, 0x9b4, 0x1, 0x8, 0x0, 0x8, 0x0, 0x9, 0x0, 0x4, 0x10, 0x901, 0x5, 0x2, 0x7b, 0xfffffeff, 0x6, 0x6, 0xc, 0x1000, 0x9, 0x9, 0xe6, 0xab, 0x400, 0x7fffffff, 0xed, 0x7ff, 0xd83, 0x68, 0x80000001, 0x6, 0x9fd, 0x10000006, 0x200, 0x2]}, @TCA_TBF_PTAB={0x404, 0x3, [0x4, 0x80000000, 0x1, 0x0, 0x7, 0x196, 0x2, 0x6, 0x4, 0xc, 0x8, 0xc9cd, 0x2, 0x9, 0x0, 0x200, 0x3, 0x9, 0xd, 0x2, 0x7, 0x4, 0x6, 0x9, 0x8000000a, 0xc4, 0x60, 0x8000, 0x7, 0x2000db3a, 0x800, 0x3, 0x9, 0x3, 0x9, 0x0, 0x401, 0x3, 0x6, 0x33, 0x6, 0x8, 0x8001, 0x4, 0x6, 0x4, 0x5, 0xd, 0x2, 0x7, 0x1, 0x0, 0x3, 0x81, 0x3, 0x1ff, 0xfffffff5, 0xc9, 0x5, 0x65e1, 0x10001, 0xc, 0x8001, 0xffffb5ca, 0xe, 0x3, 0x97, 0x7, 0xb, 0xffff6f3c, 0x1, 0x7ff, 0xb4, 0xf, 0x1, 0x3, 0xff, 0xfff, 0x0, 0xee3, 0x43, 0x9, 0x1, 0x3, 0x1, 0x3796, 0x8, 0x6, 0xbe, 0x3, 0x45, 0xdd1, 0x5, 0x7, 0x7de, 0x0, 0x3, 0x345, 0x4, 0x9da, 0x2, 0x6, 0xea6, 0x3, 0x5, 0x10, 0x3, 0xffffffff, 0x3ff, 0x96, 0x7, 0x2, 0x6, 0x9, 0x5, 0x5, 0x3, 0xd7da, 0x82, 0x7f, 0x9, 0x4, 0xb8, 0x6, 0x4, 0x6, 0x3f0a, 0x4, 0x9, 0x5, 0x1ff, 0x4, 0x4, 0x1, 0x7, 0x7ff, 0xfffffffe, 0x0, 0xb, 0xfffffff7, 0x8, 0x101, 0xc57, 0x5, 0x2, 0x5, 0x8, 0xfffffffc, 0xf, 0x1982, 0x1, 0x80000000, 0x1, 0x9, 0x6, 0x7ffc, 0x2, 0x1, 0x2, 0x2, 0x9, 0x5, 0xffffff1c, 0x5, 0x5, 0x7, 0x692, 0x92, 0x4, 0x0, 0x2, 0x9, 0x1b8f, 0x14, 0x65, 0xc00, 0x9, 0x9, 0x3, 0x8, 0x10004, 0x295, 0x6, 0xcb1, 0x1, 0xb7e, 0x10001, 0x8000002, 0xa, 0x6, 0x1, 0x2, 0x3ff, 0xfb5, 0x8, 0xa, 0x0, 0x9, 0xc, 0xc3d4, 0x2, 0x8000, 0xec, 0xd, 0x5, 0x84d3, 0xfffffeff, 0x2, 0x7ff, 0x7fffffff, 0x80, 0x2, 0x90, 0x2, 0x6, 0x3, 0x70, 0x0, 0x0, 0x400, 0x8, 0x10000, 0x9, 0x101, 0xefba, 0x7, 0x3, 0xfffffffe, 0xa4a, 0x7, 0x400, 0xc, 0xfffffff9, 0x8001, 0xd, 0x1, 0x9, 0xfff, 0x421, 0x3ff, 0x2, 0xd, 0xfb6, 0xc, 0xfffffffd, 0xac, 0x0, 0xa, 0x0, 0x80006, 0x7f, 0x2dd, 0x7, 0x4, 0x7, 0x1]}]}}]}, 0x838}, 0x1, 0x0, 0x0, 0x40098}, 0x0) ioctl$SIOCSIFHWADDR(r6, 0x8914, &(0x7f0000002280)={'syzkaller0\x00', @multicast}) ioctl$sock_SIOCGIFINDEX(r4, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$kcm(r5, &(0x7f00000000c0)={&(0x7f0000000380)=@xdp={0x2c, 0xdd86, r10, 0x3e}, 0x80, &(0x7f0000000080)=[{&(0x7f0000000180)="80", 0x1}], 0x1}, 0x4) r11 = socket$netlink(0x10, 0x3, 0x0) sendmmsg(r11, &(0x7f00000002c0), 0x40000000000009f, 0x0) ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r1, &(0x7f00000012c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000005c0)=@newqdisc={0x38, 0x24, 0x4ee4e6a52ff56541, 0x70bd2d, 0x25dfdbfd, {0x0, 0x0, 0x0, r12, {0x0, 0xfff1}, {0xffff, 0xffff}, {0x1, 0xf}}, [@qdisc_kind_options=@q_multiq={{0xb}, {0x8, 0x2, {0x28}}}]}, 0x38}, 0x1, 0x0, 0x0, 0x40000}, 0x0) sendmsg$nl_route_sched(r1, &(0x7f00000003c0)={0x0, 0x0, &(0x7f0000000440)={&(0x7f0000000180)=@newtfilter={0x44, 0x2c, 0x42f, 0x870bd28, 0x25dfdbff, {0x0, 0x0, 0x0, r12, {0xc, 0xa}, {}, {0xa, 0xfff3}}, [@filter_kind_options=@f_flower={{0xb}, {0x14, 0x2, [@TCA_FLOWER_KEY_CT_STATE={0x6}, @TCA_FLOWER_KEY_CT_STATE_MASK={0x6, 0x5c, 0x2}]}}]}, 0x44}, 0x1, 0x0, 0x0, 0x22044028}, 0x0) socket$nl_generic(0x10, 0x3, 0x10) 565.773254ms ago: executing program 6 (id=5488): r0 = socket(0x10, 0x3, 0x0) r1 = socket$packet(0x11, 0x3, 0x300) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000080)={'ip6tnl0\x00', 0x0}) r3 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r3, &(0x7f000000c2c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f00000000c0)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a28000000000a0101000000005e1affd5020000000900010073797a300000000008000240000000032c000000030a01030000e6ff00000000020000000900010073797a30000000000900030073797a320000000014000000110001"], 0x7c}}, 0x0) sendmsg$NFT_BATCH(r3, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000004c0)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a3c000000120a09000000000000000000020000000900020073797a310000000008000440000000000900010073797a3000000000080003400000000114000000110001"], 0x64}}, 0x0) sendmsg$NFT_MSG_GETOBJ(r3, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000040)=ANY=[@ANYBLOB="20000000150a010200000000000000000041b9962d000000d70f66fdec00797a3000000000"], 0x20}, 0x1, 0x0, 0x0, 0x40884}, 0x0) sendmsg$nl_route_sched(r0, &(0x7f00000007c0)={0x0, 0x0, &(0x7f0000004640)={&(0x7f0000000540)=@newqdisc={0x78, 0x24, 0xf0b, 0x0, 0x0, {0x0, 0x0, 0x0, r2, {0x0, 0x2}, {0xffff, 0xffff}, {0x0, 0x7}}, [@qdisc_kind_options=@q_sfq={{0x8}, {0x4c, 0x2, {{0x6, 0x80000001, 0x0, 0x0, 0xffffffff}, 0x0, 0x0, 0x4, 0x9, 0x80000001, 0x8, 0x0, 0x0, 0x0, 0x0, {0x0, 0x0, 0x5, 0x6739, 0x3}}}}]}, 0x78}}, 0x0) 531.183158ms ago: executing program 6 (id=5489): r0 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r0, &(0x7f0000000180)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f00000004c0)=@updpolicy={0xb8, 0x19, 0x1, 0x0, 0x0, {{@in=@multicast1=0xe0000002, @in, 0x0, 0x0, 0x0, 0x0, 0xa, 0x0, 0x0, 0x87}, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffffffffffb}, {0x0, 0x0, 0x200000000000000, 0x1}}}, 0xb8}}, 0x2c000010) socket$l2tp6(0xa, 0x2, 0x73) r1 = socket(0x10, 0x3, 0x0) setsockopt$netlink_NETLINK_TX_RING(r1, 0x10e, 0xc, &(0x7f00000001c0)={0x7fffffff}, 0x10) sendmsg$kcm(r1, &(0x7f00000016c0)={0x0, 0x0, &(0x7f00000000c0)=[{&(0x7f0000000040)="1c0000004a008104e00f80ecdb4cb9020a", 0x11}, {&(0x7f0000001700)="0c74c75350f4a590e15c61", 0xb}], 0x2, 0x0, 0x0, 0x10}, 0x44004) r2 = socket$l2tp6(0xa, 0x2, 0x73) close(r2) r3 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r3, &(0x7f0000000180)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000000)=ANY=[@ANYBLOB="b8000000190001000000000000000000e000000200000000000000000000000000000000000000000000000a"], 0xb8}}, 0x0) sendmsg$nl_xfrm(r3, &(0x7f0000000180)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000000)=@updpolicy={0xb8, 0x15, 0x1, 0x0, 0x0, {{@in=@multicast1=0xe0000002, @in=@empty, 0x0, 0x0, 0x0, 0x0, 0xa, 0x10, 0x80}, {0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0xffffffff}, {}, 0x0, 0x6e6bb5, 0x0, 0x0, 0x3, 0x2}}, 0xb8}}, 0x0) ioctl$F2FS_IOC_WRITE_CHECKPOINT(r2, 0xf507, 0x0) 471.382842ms ago: executing program 6 (id=5491): r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$batadv(&(0x7f0000000080), 0xffffffffffffffff) r2 = syz_genetlink_get_family_id$l2tp(&(0x7f0000000040), r0) sendmsg$L2TP_CMD_NOOP(r0, &(0x7f00000001c0)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x1403010}, 0xc, &(0x7f0000000180)={&(0x7f0000000100)={0x6c, r2, 0x400, 0x70bd2b, 0x25dfdbfe, {}, [@L2TP_ATTR_CONN_ID={0x8}, @L2TP_ATTR_PEER_COOKIE={0xc, 0x10, 0x4}, @L2TP_ATTR_UDP_CSUM={0x5}, @L2TP_ATTR_IP6_SADDR={0x14, 0x1f, @loopback}, @L2TP_ATTR_IP_SADDR={0x8, 0x18, @empty}, @L2TP_ATTR_COOKIE={0xc, 0xf, 0xffffffffffffffff}, @L2TP_ATTR_DEBUG={0x8, 0x11, 0x1}, @L2TP_ATTR_PEER_COOKIE={0xc, 0x10, 0x8}]}, 0x6c}, 0x1, 0x0, 0x0, 0x4000004}, 0x45) (async) sendmsg$BATADV_CMD_GET_NEIGHBORS(r0, &(0x7f0000004340)={0x0, 0x0, &(0x7f0000000280)={&(0x7f00000000c0)=ANY=[@ANYBLOB='$\x00\x00\x00', @ANYRES16=r1, @ANYBLOB="310300000000000000000900000008000300", @ANYBLOB='\b'], 0x24}}, 0x0) 390.867094ms ago: executing program 6 (id=5492): r0 = epoll_create(0x7fff) r1 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_tcp_TCP_CONGESTION(r1, 0x6, 0xd, 0x0, 0x0) bind$inet6(r1, &(0x7f0000000080)={0xa, 0x2, 0x200, @loopback, 0x7}, 0x1c) r2 = socket$inet_tcp(0x2, 0x1, 0x0) setsockopt$IP_VS_SO_SET_ADD(r2, 0x0, 0x482, 0x0, 0x0) r3 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$NL80211_CMD_SET_CQM(r3, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000340)={0x30, 0x0, 0x1, 0x0, 0x0, {{}, {@val={0x8}, @void}}, [@NL80211_ATTR_CQM={0x14, 0x5e, 0x0, 0x1, [@NL80211_ATTR_CQM_RSSI_THOLD={0x8, 0x1, [0xffffffff]}, @NL80211_ATTR_CQM_RSSI_HYST={0x8}]}]}, 0x30}}, 0x0) r4 = openat$tun(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) ioctl$TUNSETIFF(r4, 0x400454ca, &(0x7f0000000080)={'team_slave_1\x00', 0x6bf1c2d5adba8c32}) sendto$inet(r2, 0x0, 0x0, 0x200007fd, 0x0, 0x0) r5 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r5, &(0x7f000000c2c0)={0x0, 0x0, &(0x7f0000000200)={0x0, 0x7c}}, 0x0) sendmsg$NFT_BATCH(r5, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000700)={&(0x7f00000000c0)={{0x14}, [], {0x14}}, 0x28}}, 0x0) socket$inet6_tcp(0xa, 0x1, 0x0) sendmsg$IPSET_CMD_CREATE(0xffffffffffffffff, &(0x7f0000001080)={0x0, 0x0, &(0x7f0000000080)={0x0, 0x70}}, 0x0) setsockopt$inet6_tcp_int(r1, 0x6, 0x2000000000000022, &(0x7f0000000200)=0x1, 0x4) r6 = socket$inet_tcp(0x2, 0x1, 0x0) ioctl$sock_inet_SIOCDARP(r6, 0x8953, &(0x7f0000000380)={{0x2, 0x4e23, @multicast2}, {0x6, @multicast}, 0x68, {0x2, 0x4e24, @empty}, 'bond0\x00'}) sendto$inet6(r1, &(0x7f0000000240)="b6", 0x1, 0x200080c1, &(0x7f00000001c0)={0xa, 0x2, 0x8000, @loopback, 0x1000008}, 0x1c) r7 = socket(0x10, 0x803, 0x0) ioctl$sock_ipv4_tunnel_SIOCDELTUNNEL(r7, 0x89f2, &(0x7f0000000040)={'sit0\x00', &(0x7f0000000400)={'sit0\x00', 0x0, 0x0, 0x0, 0x0, 0x0, {{0x5, 0x4, 0x0, 0x0, 0x14, 0x0, 0x0, 0x0, 0x0, 0x0, @empty, @empty}}}}) setsockopt$inet6_tcp_TCP_CONGESTION(r1, 0x6, 0xd, &(0x7f00000000c0)='illinois', 0x8) shutdown(r1, 0x1) writev(r0, 0x0, 0x5b) 222.83086ms ago: executing program 7 (id=5493): sendmsg$nl_generic(0xffffffffffffffff, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000300)=ANY=[], 0x18}, 0x1, 0x0, 0x0, 0x8001}, 0x20004804) r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000180)=ANY=[@ANYBLOB="0b00000007000000020000000200000001000000", @ANYRES32, @ANYBLOB='\x00'/20, @ANYRES32=0x0, @ANYRES32, @ANYBLOB=' \x00'/28], 0x50) bpf$PROG_LOAD(0x5, &(0x7f000000e000)={0x10, 0x4, &(0x7f0000000040)=ANY=[@ANYBLOB="b400000000000000791048000000000061042c000000000095000000"], &(0x7f0000003ff6)='GPL\x00', 0x2, 0xfd90, &(0x7f000000cf3d)=""/195, 0x0, 0x1, '\x00', 0x0, @sk_msg, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0xfffffffffffffd8b, 0xffffffffffffffff}, 0x48) bpf$MAP_GET_NEXT_KEY(0x2, &(0x7f0000000080)={r0, &(0x7f0000000080), &(0x7f0000000200)=""/176}, 0x20) bpf$MAP_GET_NEXT_KEY(0x2, &(0x7f0000000380)={r0, &(0x7f0000000300), &(0x7f0000000340)=""/55}, 0x20) sendmsg$nl_generic(0xffffffffffffffff, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000300)=ANY=[], 0x18}, 0x1, 0x0, 0x0, 0x8001}, 0x20004804) (async) bpf$MAP_CREATE(0x0, &(0x7f0000000180)=ANY=[@ANYBLOB="0b00000007000000020000000200000001000000", @ANYRES32, @ANYBLOB='\x00'/20, @ANYRES32=0x0, @ANYRES32, @ANYBLOB=' \x00'/28], 0x50) (async) bpf$PROG_LOAD(0x5, &(0x7f000000e000)={0x10, 0x4, &(0x7f0000000040)=ANY=[@ANYBLOB="b400000000000000791048000000000061042c000000000095000000"], &(0x7f0000003ff6)='GPL\x00', 0x2, 0xfd90, &(0x7f000000cf3d)=""/195, 0x0, 0x1, '\x00', 0x0, @sk_msg, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0xfffffffffffffd8b, 0xffffffffffffffff}, 0x48) (async) bpf$MAP_GET_NEXT_KEY(0x2, &(0x7f0000000080)={r0, &(0x7f0000000080), &(0x7f0000000200)=""/176}, 0x20) (async) bpf$MAP_GET_NEXT_KEY(0x2, &(0x7f0000000380)={r0, &(0x7f0000000300), &(0x7f0000000340)=""/55}, 0x20) (async) 222.528039ms ago: executing program 3 (id=5494): r0 = socket$inet6_sctp(0xa, 0x801, 0x84) r1 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_tcp_TCP_CONGESTION(r1, 0x6, 0xd, &(0x7f00000000c0)='dctcp', 0x5) setsockopt$inet6_tcp_int(r1, 0x6, 0x13, &(0x7f0000000040)=0x100000001, 0x4) connect$inet6(r1, &(0x7f0000000100)={0xa, 0x0, 0x7, @ipv4={'\x00', '\xff\xff', @local}, 0x1}, 0x1c) r2 = socket$kcm(0x10, 0x2, 0x4) sendmsg$kcm(r2, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000080)=[{&(0x7f0000000280)="89000000120081ae08060cdc030000007f03e3f7000000006ee2ffca1b1f0000000004c00e72f750375ed08a56331dbf9ed7815e381ad6e747033a0093b837dc6cc01e32efaec8c7a6ec00120c00014002080c00bdad446b9bbc7a46e3988285dcdf12f21308f868fece01955fed0009d78f0a947ee2b49e33538afa8af92347514f0b56a20ff27fff", 0x89}], 0x1}, 0x4040) connect$inet6(r0, &(0x7f0000000100)={0xa, 0x0, 0x0, @private1, 0x200000}, 0x1c) shutdown(r0, 0x1) setsockopt$inet_sctp6_SCTP_STREAM_SCHEDULER(r0, 0x84, 0x7b, &(0x7f0000000140)={0x0, 0x2}, 0x8) unshare(0x64000600) r3 = socket$netlink(0x10, 0x3, 0x0) getsockopt$SO_TIMESTAMP(r3, 0x1, 0x40, &(0x7f0000000180), &(0x7f00000001c0)=0x4) r4 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r4, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000340)=ANY=[@ANYBLOB="300000001000010800"/20, @ANYRES32=0x0, @ANYBLOB="000900006440000008001b00000000000500100004"], 0x30}}, 0x0) sendmsg$nl_route_sched(r3, &(0x7f0000000000)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000280)=@newqdisc={0x54, 0x10, 0x1, 0x70bd25, 0x25dfdbfc, {0x6, 0x0, 0x8100, 0x0, {0x1, 0x10}, {0xfff1}, {0xe, 0x10}}, [@TCA_RATE={0x6, 0x5, {0xfc}}, @TCA_STAB={0x28, 0x8, 0x0, 0x1, [{{0x1c, 0x11, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8, 0x2}}, {0x8, 0x1b, [0x0, 0x0]}}]}]}, 0x54}, 0x1, 0x0, 0x0, 0x400c800}, 0x0) 216.670101ms ago: executing program 6 (id=5495): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPCTNL_MSG_CT_NEW(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f00000006c0)={0x9c, 0x0, 0x1, 0x401, 0x0, 0x0, {0xa}, [@CTA_TUPLE_ORIG={0x44, 0x1, 0x0, 0x1, [@CTA_TUPLE_IP={0x2c, 0x1, 0x0, 0x1, @ipv6={{0x14, 0x3, @local}, {0x14, 0x4, @mcast1}}}, @CTA_TUPLE_PROTO={0xc, 0x2, 0x0, 0x1, {0x5}}, @CTA_TUPLE_ZONE={0x6, 0x3, 0x1, 0x0, 0x1}]}, @CTA_TUPLE_REPLY={0x3c, 0x2, 0x0, 0x1, [@CTA_TUPLE_IP={0x2c, 0x1, 0x0, 0x1, @ipv6={{0x14, 0x3, @local}, {0x14, 0x4, @local}}}, @CTA_TUPLE_PROTO={0xc, 0x2, 0x0, 0x1, {0x5}}]}, @CTA_TIMEOUT={0x8}]}, 0x9c}}, 0x0) sendmsg$IPCTNL_MSG_CT_DELETE(r0, &(0x7f0000000300)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000780)={0x1c, 0x2, 0x1, 0x5, 0x0, 0x0, {0x6, 0x0, 0x4}, [@CTA_ZONE={0x6, 0x12, 0x1, 0x0, 0x1}]}, 0x1c}, 0x1, 0x0, 0x0, 0x24044800}, 0x40040) r1 = socket$inet6_sctp(0xa, 0x5, 0x84) r2 = socket$inet6_sctp(0xa, 0x5, 0x84) shutdown(r2, 0x0) close(0x3) getsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX3(r2, 0x84, 0x6f, &(0x7f0000000200)={0x0, 0x10, &(0x7f00000001c0)=[@in={0x2, 0x4e23, @rand_addr=0x64010100}]}, &(0x7f0000000140)=0x10) getsockopt$inet_sctp6_SCTP_PRIMARY_ADDR(r2, 0x84, 0x7a, &(0x7f0000000340)={r3, @in6={{0xa, 0x3, 0x4, @dev={0xfe, 0x80, '\x00', 0xf}, 0x8}}}, &(0x7f0000000040)=0x84) setsockopt(r1, 0x84, 0x7f, &(0x7f0000000040)="020000000d80ffff", 0x8) socket$nl_netfilter(0x10, 0x3, 0xc) r4 = socket$nl_netfilter(0x10, 0x3, 0xc) socket$l2tp6(0xa, 0x2, 0x73) sendmsg$NFT_BATCH(r4, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000100)={{0x14}, [@NFT_MSG_NEWTABLE={0x20, 0x0, 0xa, 0x801, 0x0, 0x0, {0x7}, [@NFTA_TABLE_HANDLE={0xc, 0x4, 0x1, 0x0, 0x2}]}, @NFT_MSG_DELTABLE={0x14, 0x2, 0xa, 0x401, 0x0, 0x0, {0x0, 0x0, 0x9}}, @NFT_MSG_NEWRULE={0x1c, 0x6, 0xa, 0x100, 0x0, 0x0, {0xa}, [@NFTA_RULE_POSITION_ID={0x8, 0xa, 0x1, 0x0, 0x3}]}], {0x14, 0x10, 0x1, 0x0, 0x0, {0x0, 0x84}}}, 0x78}}, 0x0) 61.772683ms ago: executing program 7 (id=5496): socket$nl_route(0x10, 0x3, 0x0) r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = socket$l2tp6(0xa, 0x2, 0x73) sendto$inet6(r1, 0x0, 0x0, 0x0, 0x0, 0x0) syz_init_net_socket$bt_hci(0x1f, 0x3, 0x5) syz_emit_ethernet(0x42, &(0x7f00000001c0)=ANY=[@ANYBLOB="aaaaaaaaaaaa00000000000086dd60a24b9f000c11a13bc2c4000000000000000000000000bbfef9a54174d0df03e7000000006068fa413d6d0faf715fe58b004e220000907803000000"], 0x0) close(0x4) r2 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r2, &(0x7f0000005000)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000100)=@newtaction={0x64, 0x30, 0xeaa3ef926154e70d, 0x0, 0x0, {}, [{0x50, 0x1, [@m_vlan={0x4c, 0x1, 0x0, 0x0, {{0x9}, {0x20, 0x2, 0x0, 0x1, [@TCA_VLAN_PARMS={0x12}]}, {0x4}, {0xc}, {0xc}}}]}]}, 0x64}}, 0x0) syz_open_procfs$namespace(0x0, &(0x7f0000000040)='ns/cgroup\x00') r3 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r3, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000040)=@newlink={0x48, 0x10, 0x49920d862a92153b, 0x0, 0x0, {}, [@IFLA_LINKINFO={0x28, 0x12, 0x0, 0x1, @erspan={{0xb}, {0x18, 0x2, 0x0, 0x1, [@IFLA_GRE_ERSPAN_VER={0x5, 0x16, 0x2}, @IFLA_GRE_OKEY={0x8, 0x18, 0x28e}, @IFLA_GRE_COLLECT_METADATA={0x4}]}}}]}, 0x48}}, 0x0) r4 = openat$ppp(0xffffffffffffff9c, &(0x7f0000000340), 0x141842, 0x0) r5 = socket$nl_generic(0x10, 0x3, 0x10) r6 = syz_genetlink_get_family_id$l2tp(&(0x7f0000000000), 0xffffffffffffffff) r7 = socket$l2tp(0x2, 0x2, 0x73) sendmsg$L2TP_CMD_TUNNEL_CREATE(r5, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000340)=ANY=[@ANYBLOB='<\x00\x00\x00', @ANYRES16=r6, @ANYBLOB="230900000000000000000100000005000700000000000800090000000000060002000100000008000a000000000008001700", @ANYRES32=r7], 0x3c}}, 0x0) close(r7) readv(r4, 0x0, 0x0) setsockopt$pppl2tp_PPPOL2TP_SO_LNSMODE(0xffffffffffffffff, 0x111, 0x4, 0x0, 0x4) r8 = socket$inet6_udp(0xa, 0x2, 0x0) getsockopt$IP6T_SO_GET_INFO(r8, 0x29, 0x40, &(0x7f0000000240)={'security\x00', 0x0, [0x400bf, 0xffff, 0x80000001, 0xecec, 0x3]}, &(0x7f0000000000)=0x54) r9 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_SAVE(r9, &(0x7f0000000180)={&(0x7f0000000080)={0x10, 0x0, 0x0, 0x40000}, 0xc, &(0x7f0000000140)={&(0x7f00000000c0)={0x44, 0x8, 0x6, 0x101, 0x0, 0x0, {0x3, 0x0, 0x5}, [@IPSET_ATTR_PROTOCOL={0x5}, @IPSET_ATTR_PROTOCOL={0x5}, @IPSET_ATTR_PROTOCOL={0x5}, @IPSET_ATTR_SETNAME={0x9, 0x2, 'syz1\x00'}, @IPSET_ATTR_SETNAME={0x9, 0x2, 'syz2\x00'}]}, 0x44}, 0x1, 0x0, 0x0, 0x64000000}, 0x4000) r10 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r10, 0x0, 0x0) setsockopt$inet6_udp_encap(r8, 0x11, 0x64, &(0x7f00000002c0)=0x5, 0x4) r11 = syz_genetlink_get_family_id$devlink(&(0x7f0000000000), r0) sendmsg$DEVLINK_CMD_RATE_GET(r0, &(0x7f0000000280)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000140)=ANY=[@ANYBLOB="14000000", @ANYRES16=r11, @ANYRES32=r11], 0x14}}, 0x0) socket$inet6_icmp_raw(0xa, 0x3, 0x3a) 8.717059ms ago: executing program 0 (id=5497): r0 = bpf$TOKEN_CREATE(0x24, &(0x7f0000000100), 0x8) r1 = bpf$BPF_BTF_LOAD(0x12, &(0x7f00000003c0)={&(0x7f0000000200)={{0xeb9f, 0x1, 0x0, 0x18, 0x0, 0x90, 0x90, 0x4, [@ptr={0xe, 0x0, 0x0, 0x2, 0x1}, @var={0xb, 0x0, 0x0, 0xe, 0x5}, @array={0x0, 0x0, 0x0, 0x3, 0x0, {0x5, 0x1, 0x80}}, @array={0x0, 0x0, 0x0, 0x3, 0x0, {0x1, 0x4, 0x40000005}}, @typedef={0xe, 0x0, 0x0, 0x8, 0x1}, @type_tag={0x3}, @decl_tag={0xd, 0x0, 0x0, 0x11, 0x4, 0x1}, @int={0xe, 0x0, 0x0, 0x1, 0x0, 0x34, 0x0, 0x68, 0x3}, @restrict={0x2, 0x0, 0x0, 0xb, 0x3}]}, {0x0, [0x0, 0x2e]}}, &(0x7f00000002c0)=""/219, 0xac, 0xdb, 0x1, 0x10, 0x10000, @value=r0}, 0x28) r2 = bpf$BPF_BTF_GET_FD_BY_ID(0x13, &(0x7f0000000500)=0xffffffffffffffff, 0x4) r3 = bpf$MAP_CREATE(0x0, &(0x7f0000000480)=@bloom_filter={0x1e, 0xa6016c5, 0xa0, 0x7, 0xa210, 0x1, 0x91, '\x00', 0x0, r1, 0x4, 0x2, 0x3, 0xa, @value=r2}, 0x50) bpf$MAP_LOOKUP_BATCH(0x1b, &(0x7f0000000440)={0x0, 0x0, &(0x7f0000000100), 0x0, 0x3, r3}, 0x38) r4 = socket$nl_generic(0x10, 0x3, 0x10) r5 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000040), 0xffffffffffffffff) sendmsg$NL80211_CMD_LEAVE_OCB(r4, &(0x7f0000000140)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x20000}, 0xc, &(0x7f00000000c0)={&(0x7f0000000080)={0x20, r5, 0x8, 0x70bd2b, 0x25dfdbff, {{}, {@void, @val={0xc, 0x99, {0xc00, 0x3c}}}}, ["", "", ""]}, 0x20}, 0x1, 0x0, 0x0, 0x88840}, 0x10) 0s ago: executing program 6 (id=5498): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000700)={&(0x7f0000000ac0)={{0x14}, [@NFT_MSG_NEWTABLE={0x20, 0x0, 0xa, 0x301, 0x0, 0x0, {0x1}, [@NFTA_TABLE_NAME={0x9, 0x1, 'syz0\x00'}]}, @NFT_MSG_DELTABLE={0x380, 0x2, 0xa, 0x3, 0x0, 0x0, {0x7, 0x0, 0x1}, [@NFTA_TABLE_USERDATA={0xde, 0x6, "441992d89c3b98c0713cb8f9af7717496326f5c0ec0af1401698e90e1027609e292218ae78441ac9da949d49014f98e7ef41f5e6e0ee1e363feec8e13d5fdb53653ed526dc2f099f234ecd85159c8f6d876ee5ee2d827e10e28d695c0c5a3d91dd8c6e6e221fa218b843e8938188bae4148b36506fa7c4796e24d0cf706a3a8d6298760e9eb3d468449dd7059f2b695060d54ca2096e507d1ce343f25887df668eb3a1821f7797a55009d9be760c7d1764fc1c492b0a46ecd41ddbaf8777dae24a814b1a0b5fad7a799ecffae7590ecbfe545475b9a617448983"}, @NFTA_TABLE_USERDATA={0xbd, 0x6, "fc27c08c99e7d373914ac488b1cb859a6d463ce624fa5d76546b51326f8a4c299bd40bd4e605a47cf979a515582d3becfa92be67e766d353199200e42b5b8998c93860f84bd12addc2711f9b69e5df0fd344c0530af04d50320107ca45cbf801c4842e82afd9787b4a806b5e6a7173722cb53dc42ac99755dadf54bfae03e595860022d3ace737ad11c99749794c8a681f1e9b8bb2f48ae5becece2422e63c8c85e6df06b5e9ed95a4a859ab1d75d55dcdac241ffd5226587a"}, @NFTA_TABLE_USERDATA={0xd1, 0x6, "104365a79e8eefeb245b62ab67ec5a2c4ea21ee06028a8267d72718cfc13b4cb5a4967b16de6f54a31a87cb97bedc8e17419d7d0623ed88f1db217bdf3fcbf09a291b674bbcebd9ff449053f4794004f372276cc3aabf2a6e7094186ddb067f552854bf72bf47865856c0c206f75256ce8f8201fd9f6190a68352730315ae21730d6c5f92d7d5c6ee1826fe9c8e587c97e52edd1a6ab52af2bf84add0f5e5bbeb11b194dcaf5db26bb91f38e0c1554681d075b8ea2917ed3e7b80db7fc4b48bfc9799f1a654f070a47042328a4"}, @NFTA_TABLE_HANDLE={0xc, 0x4, 0x1, 0x0, 0x1}, @NFTA_TABLE_FLAGS={0x8, 0x2, 0x1, 0x0, 0x2}, @NFTA_TABLE_USERDATA={0xe1, 0x6, "f140f0e99d14f4f292fe9706fd0776899293ae3ea555d6dfd818e443773c3f52a703c395d63614ceb3d6f38c5033e8d5fc8459f6db2515fcb7a7cd8ff72f30740cb1f0f7d5a232cde3b65fcb42016526aea8697a62e0df1ddf5eb240d53f8aa9bc5e680925c1818faca08d99283957e174f8d3441dac25be36e038777c09a795a5dfc32c6eab5fc62ed4cba9a99ffee4bcab0de5de24b11acf500d626e8f2ae71c3b4b222ec9bfd30a55ddfa97039b1e610d0050a312ef37d3f543399f6cee30bdfd7c92fd9fe3fa8a2ad02f8bfa66196b3c1ef48b6cd5e0a33f21eb5b"}]}, @NFT_MSG_NEWRULE={0x2c, 0x6, 0xa, 0x401, 0x0, 0x0, {0x1}, [@NFTA_RULE_CHAIN_ID={0x8}, @NFTA_RULE_TABLE={0x9, 0x1, 'syz0\x00'}, @NFTA_RULE_EXPRESSIONS={0x4}]}], {0x14}}, 0x3f4}, 0x1, 0x0, 0x0, 0x40}, 0x4000041) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000140)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f0000000e40)=@newtaction={0x5c, 0x30, 0xb, 0x5, 0x0, {}, [{0x48, 0x1, [@m_ct={0x44, 0x1, 0x0, 0x0, {{0x7}, {0x1c, 0x2, 0x0, 0x1, [@TCA_CT_PARMS={0x18, 0x1, {0x80000001, 0xffffffff, 0x4, 0x0, 0x400}}]}, {0x4}, {0xc, 0x7, {0x0, 0x1}}, {0xc}}}]}]}, 0x5c}, 0x1, 0x0, 0x0, 0x8890}, 0x40) r1 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r1, &(0x7f00000008c0)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000900)=ANY=[@ANYBLOB="5c0800002c0007012bbd700000000000097c00000c00018006000600843b000009000280040071008c0000000800e400", @ANYRES32, @ANYBLOB="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", @ANYRES32, @ANYBLOB="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"], 0x85c}, 0x1, 0x0, 0x0, 0x24048011}, 0xc000) sendmsg$NFT_BATCH(r0, &(0x7f000000c2c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f00000000c0)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a28000000000a0101080000005e1affd5020000000900010073797a300000000008000240000000032c000000030a01030000e6ff08000000020000000900010073797a30000000000900030073797a320000000014000000110001"], 0x7c}}, 0x0) r2 = socket(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f0000000080)={'veth0_macvtap\x00'}) r3 = socket$inet_icmp(0x2, 0x2, 0x1) bind$inet(r3, &(0x7f0000000100)={0x2, 0x4e26, @local}, 0x10) r4 = socket$inet6_icmp(0xa, 0x2, 0x3a) setsockopt$sock_int(r4, 0x1, 0xf, &(0x7f00000000c0)=0x4, 0x4) ioctl$F2FS_IOC_PRECACHE_EXTENTS(r3, 0xf50f, 0x0) r5 = socket$netlink(0x10, 0x3, 0x0) r6 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) bind$bt_hci(r6, &(0x7f0000000000)={0x1f, 0xffffffffffffffff, 0x3}, 0x6) ioctl$SIOCX25SFACILITIES(0xffffffffffffffff, 0x89e3, &(0x7f0000000080)={0x4d, 0x800000, 0x8, 0x5, 0x80, 0x81}) write$bt_hci(r6, &(0x7f0000000080)=ANY=[], 0x6) r7 = socket$netlink(0x10, 0x3, 0x0) r8 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) bind$bt_hci(r8, &(0x7f0000000000)={0x1f, 0xffffffffffffffff, 0x4}, 0x6) write$bt_hci(r8, 0x0, 0x138) getsockopt$sock_cred(r7, 0x1, 0x11, &(0x7f0000000040)={0x0, 0x0}, &(0x7f0000000080)=0xc) sendmsg$netlink(r5, &(0x7f0000001280)={0x0, 0x0, &(0x7f0000000280)=[{&(0x7f00000004c0)=ANY=[@ANYBLOB="240000002c000100000000000000000008000000", @ANYRES32=r9, @ANYBLOB="0bd8833e58b5c8900f7968bb82000080976b64087c6030000e4b8ce58bb9b2e5aa08c0f4b2d3faf4ccd92e87f0a969ed83a9c7b4ea2aeed2095971c2b512b574bd23f610362762cc70304bca7537e14f17bcf88956fd167111334585737b959d0e19a2da7fd6964eb01cef44c990b2d998c7298347d129fdbe238743914a7cf0e0798587facb9b8f7abd4a89470e8cdd"], 0x24}], 0x1}, 0x84) setsockopt$inet_IP_XFRM_POLICY(r3, 0x0, 0x11, &(0x7f0000000340)={{{@in6=@local, @in=@multicast2, 0x4e21, 0xfff, 0x4e20, 0x0, 0xa, 0x20, 0xa0, 0x0, 0x0, r9}, {0x913, 0x4, 0x6, 0xf, 0x7, 0x5, 0x8, 0x5f}, {0x3, 0x240000000, 0x3, 0x8}, 0x5, 0x6e6bb9, 0x8b872ae23b2daa, 0x0, 0x2, 0x2}, {{@in=@broadcast, 0x4d5, 0x32}, 0xa, @in6=@rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x01', 0x0, 0x4, 0x3, 0xaa, 0xa2, 0x8b2f, 0xb}}, 0xe8) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000340)={0xe, 0x4, &(0x7f0000000180)=ANY=[@ANYBLOB="18020000801000000000000004000000850000002f00000095"], &(0x7f0000000000)='syzkaller\x00'}, 0x90) r10 = syz_genetlink_get_family_id$tipc(&(0x7f0000000180), r5) sendmsg$TIPC_CMD_SET_NODE_ADDR(r5, &(0x7f0000000480)={&(0x7f0000000140)={0x10, 0x0, 0x0, 0x2000000}, 0xc, &(0x7f0000000440)={&(0x7f00000002c0)={0x24, r10, 0x200, 0x70bd28, 0x25dfdbfb, {{}, {}, {0x8, 0x11, 0xaf65}}, ["", "", "", "", "", "", ""]}, 0x24}, 0x1, 0x0, 0x0, 0x24000000}, 0x4004010) setsockopt$inet6_int(r4, 0x29, 0x4b, &(0x7f0000000000)=0x1, 0x4) bind$inet6(r4, &(0x7f00000001c0)={0xa, 0x4e23, 0x5, @dev={0xfe, 0x80, '\x00', 0x3d}, 0x5}, 0x1c) kernel console output (not intermixed with test programs): nown, defaulting to 1000 [ 304.951913][T19518] lo speed is unknown, defaulting to 1000 [ 304.959264][T19518] lo speed is unknown, defaulting to 1000 [ 304.978025][T19518] lo speed is unknown, defaulting to 1000 [ 304.985541][T19518] lo speed is unknown, defaulting to 1000 [ 304.998784][T19518] lo speed is unknown, defaulting to 1000 [ 305.016005][T19518] lo speed is unknown, defaulting to 1000 [ 305.023105][T19518] lo speed is unknown, defaulting to 1000 [ 305.163320][T19534] netlink: 'syz.3.3781': attribute type 1 has an invalid length. [ 305.185361][ T5734] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 305.193991][ T5734] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 305.211070][T19535] sctp: [Deprecated]: syz.3.3781 (pid 19535) Use of int in maxseg socket option. [ 305.211070][T19535] Use struct sctp_assoc_value instead [ 305.513026][T19539] bond5: option all_slaves_active: invalid value (222) [ 305.526199][T19539] bond5 (unregistering): Released all slaves [ 305.810328][ T5734] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 305.831417][T19550] __nla_validate_parse: 11 callbacks suppressed [ 305.831437][T19550] netlink: 148 bytes leftover after parsing attributes in process `syz.6.3786'. [ 305.861669][T19550] netlink: 35 bytes leftover after parsing attributes in process `syz.6.3786'. [ 305.991941][T19555] netlink: 8 bytes leftover after parsing attributes in process `syz.4.3788'. [ 306.010146][T19554] netlink: 24 bytes leftover after parsing attributes in process `syz.0.3787'. [ 306.014093][T19555] openvswitch: netlink: Missing key (keys=40, expected=80) [ 306.211180][ T5792] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 306.392622][T19577] netlink: 8 bytes leftover after parsing attributes in process `syz.4.3792'. [ 306.513557][T19590] netlink: 100 bytes leftover after parsing attributes in process `syz.0.3795'. [ 306.529623][T19589] netdevsim netdevsim0 netdevsim0: entered promiscuous mode [ 306.594766][T19593] netlink: 8 bytes leftover after parsing attributes in process `syz.6.3797'. [ 306.651616][T19595] IPVS: sync thread started: state = BACKUP, mcast_ifn = vcan0, syncid = 0, id = 0 [ 306.720823][T19601] validate_nla: 49 callbacks suppressed [ 306.720851][T19601] netlink: 'syz.0.3800': attribute type 29 has an invalid length. [ 306.727310][T19599] netlink: 32 bytes leftover after parsing attributes in process `syz.4.3799'. [ 306.748119][T19601] netlink: 4 bytes leftover after parsing attributes in process `syz.0.3800'. [ 306.887316][T19599] netlink: 28 bytes leftover after parsing attributes in process `syz.4.3799'. [ 306.930414][T19607] netlink: 'syz.3.3803': attribute type 12 has an invalid length. [ 306.988130][T19615] netlink: 'syz.0.3806': attribute type 1 has an invalid length. [ 306.988931][T19607] netlink: 'syz.3.3803': attribute type 1 has an invalid length. [ 307.030697][T19615] workqueue: Failed to create a rescuer kthread for wq "bond2": -EINTR [ 307.088982][ T5734] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 307.247247][ T5726] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 307.765566][T19671] tipc: Enabling of bearer rejected, failed to enable media [ 308.119573][T19700] net_ratelimit: 1 callbacks suppressed [ 308.119591][T19700] openvswitch: netlink: IP tunnel TTL not specified. [ 308.286177][T18252] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 308.379186][ T5734] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 308.461360][T19720] xt_nfacct: accounting object `syz1' does not exist [ 308.846507][ T5757] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 309.326591][T18252] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 309.366298][T19777] syzkaller0: entered promiscuous mode [ 309.372331][T19777] syzkaller0: entered allmulticast mode [ 310.286008][ C1] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 310.365270][T18252] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 310.507477][T19808] xt_TCPMSS: Only works on TCP SYN packets [ 311.407217][ T5792] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 311.885333][ T5867] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 312.445608][ T5726] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 312.688034][T19790] nci: __nci_request: wait_for_completion_interruptible_timeout failed -512 [ 312.697163][T19799] __nla_validate_parse: 17 callbacks suppressed [ 312.697199][T19799] netlink: 8 bytes leftover after parsing attributes in process `syz.0.3853'. [ 312.716621][T19799] netlink: 224 bytes leftover after parsing attributes in process `syz.0.3853'. [ 312.727249][T19799] netlink: 8 bytes leftover after parsing attributes in process `syz.0.3853'. [ 312.892240][T19863] netlink: 12 bytes leftover after parsing attributes in process `syz.6.3866'. [ 313.000114][T19863] netlink: 80 bytes leftover after parsing attributes in process `syz.6.3866'. [ 313.210981][T19878] syzkaller0: entered promiscuous mode [ 313.238266][T19878] syzkaller0: entered allmulticast mode [ 313.277461][T19878] syzkaller1: entered promiscuous mode [ 313.337606][T19885] gtp0: entered promiscuous mode [ 313.357199][T19885] gtp0: entered allmulticast mode [ 313.370843][T19888] IPv6: RTM_NEWROUTE with no NLM_F_CREATE or NLM_F_REPLACE [ 313.378438][T19888] IPv6: NLM_F_CREATE should be set when creating new route [ 313.385711][T19888] IPv6: NLM_F_CREATE should be set when creating new route [ 313.485835][ T5726] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 313.505877][T19899] sctp: [Deprecated]: syz.4.3871 (pid 19899) Use of int in max_burst socket option deprecated. [ 313.505877][T19899] Use struct sctp_assoc_value instead [ 313.548211][T19903] IPVS: length: 239 != 24 [ 313.557901][T19901] netlink: 'syz.3.3873': attribute type 1 has an invalid length. [ 313.566844][T19901] netlink: 'syz.3.3873': attribute type 2 has an invalid length. [ 313.646820][T19907] netlink: 12 bytes leftover after parsing attributes in process `syz.0.3875'. [ 313.839550][T19916] netlink: 'syz.6.3877': attribute type 9 has an invalid length. [ 313.951916][T19920] syzkaller0: entered promiscuous mode [ 313.984573][T19920] syzkaller0: entered allmulticast mode [ 314.028317][T19920] veth0: entered promiscuous mode [ 314.034127][T19919] veth0: left promiscuous mode [ 314.138522][T11065] nci: nci_rsp_packet: unknown rsp opcode 0x506 [ 314.227087][T19943] netlink: 36 bytes leftover after parsing attributes in process `syz.0.3885'. [ 314.315817][T19949] veth0: entered promiscuous mode [ 314.329976][T19949] netlink: 4 bytes leftover after parsing attributes in process `syz.4.3887'. [ 314.410243][T19955] pim6reg: entered allmulticast mode [ 314.497633][T19958] netlink: 12 bytes leftover after parsing attributes in process `syz.6.3889'. [ 314.535699][ T5726] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 314.897871][T19933] nci: __nci_request: wait_for_completion_interruptible_timeout failed -512 [ 314.925555][ T5734] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 315.142520][T19986] netlink: 4 bytes leftover after parsing attributes in process `syz.0.3899'. [ 315.400217][T19999] bond1: option packets_per_slave: invalid value (18446744073709551615) [ 315.410803][T19999] bond1: option packets_per_slave: allowed values 0 - 65535 [ 315.421099][T19999] bond1 (unregistering): Released all slaves [ 315.566030][ T5726] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 316.047415][T18252] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 316.615348][ T5792] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 317.327383][ T1316] ieee802154 phy0 wpan0: encryption failed: -22 [ 317.646417][ T5792] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 317.965373][ T5757] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 318.095500][T19981] nci: __nci_request: wait_for_completion_interruptible_timeout failed -512 [ 318.221751][T20012] syzkaller1: entered promiscuous mode [ 318.228488][T20012] syzkaller1: entered allmulticast mode [ 318.398636][T20020] syzkaller0: entered promiscuous mode [ 318.409779][T20025] --map-set only usable from mangle table [ 318.421311][T20020] syzkaller0: entered allmulticast mode [ 318.491694][T20031] __nla_validate_parse: 5 callbacks suppressed [ 318.491715][T20031] netlink: 212348 bytes leftover after parsing attributes in process `syz.3.3914'. [ 318.606747][ T5757] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 318.678128][T20032] netlink: 'syz.6.3913': attribute type 2 has an invalid length. [ 318.696122][ T5792] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 318.725151][T20032] netlink: 244 bytes leftover after parsing attributes in process `syz.6.3913'. [ 318.740646][T20038] netlink: 1204 bytes leftover after parsing attributes in process `syz.3.3916'. [ 318.765949][T20036] netlink: 'syz.4.3915': attribute type 1 has an invalid length. [ 318.777584][T20036] netlink: 224 bytes leftover after parsing attributes in process `syz.4.3915'. [ 319.085615][ T5757] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 319.094636][T20056] netlink: 24 bytes leftover after parsing attributes in process `syz.4.3920'. [ 319.178869][ T5620] Bluetooth: hci7: unexpected cc 0x0c03 length: 249 > 1 [ 319.189592][ T5620] Bluetooth: hci7: unexpected cc 0x1003 length: 249 > 9 [ 319.201334][ T5620] Bluetooth: hci7: unexpected cc 0x1001 length: 249 > 9 [ 319.241816][ T5620] Bluetooth: hci7: unexpected cc 0x0c23 length: 249 > 4 [ 319.252213][ T5625] Bluetooth: hci7: unexpected cc 0x0c38 length: 249 > 2 [ 319.271700][T20068] netlink: 'syz.0.3922': attribute type 1 has an invalid length. [ 319.487068][T20068] bond2: entered promiscuous mode [ 319.533304][T20068] 8021q: adding VLAN 0 to HW filter on device bond2 [ 319.659410][T20073] netlink: 24 bytes leftover after parsing attributes in process `syz.3.3923'. [ 319.725644][T15309] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 319.904047][T20078] bridge0: port 1(bridge_slave_0) entered disabled state [ 319.983562][T20078] bridge_slave_0 (unregistering): left allmulticast mode [ 320.039858][T20078] bridge_slave_0 (unregistering): left promiscuous mode [ 320.049529][T20078] bridge0: port 1(bridge_slave_0) entered disabled state [ 320.300077][T20107] netlink: 54 bytes leftover after parsing attributes in process `syz.6.3931'. [ 320.330667][T20107] netlink: 8 bytes leftover after parsing attributes in process `syz.6.3931'. [ 320.357158][T20108] rdma_rxe: rxe_newlink: failed to add ipvlan0 [ 320.404180][T20110] netlink: 8 bytes leftover after parsing attributes in process `syz.4.3930'. [ 320.631670][T20117] netlink: 816 bytes leftover after parsing attributes in process `syz.0.3934'. [ 320.761989][T20062] lo speed is unknown, defaulting to 1000 [ 320.769885][T15309] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 321.013403][T20125] tipc: Started in network mode [ 321.024480][T20125] tipc: Node identity 066760b98afe, cluster identity 4711 [ 321.037416][T20125] tipc: Enabled bearer , priority 0 [ 321.049079][T20125] syzkaller0: entered promiscuous mode [ 321.057222][T20125] syzkaller0: entered allmulticast mode [ 321.073727][T20125] sch_tbf: burst 255 is lower than device syzkaller0 mtu (1514) ! [ 321.108773][T20132] netlink: 'syz.3.3940': attribute type 1 has an invalid length. [ 321.175873][T20125] tipc: Resetting bearer [ 321.210673][T20123] tipc: Resetting bearer [ 321.239280][T20123] tipc: Disabling bearer [ 321.276850][T20149] bridge0: adding interface bridge0 with same address as a received packet (addr:aa:aa:aa:aa:aa:1b, vlan:0) [ 321.325997][ T5625] Bluetooth: hci7: command tx timeout [ 321.603773][T20062] bridge0: port 1(bridge_slave_0) entered blocking state [ 321.649173][T20062] bridge0: port 1(bridge_slave_0) entered disabled state [ 321.702819][T20062] bridge_slave_0: entered allmulticast mode [ 321.728260][T20062] bridge_slave_0: entered promiscuous mode [ 321.739443][T20062] bridge0: port 2(bridge_slave_1) entered blocking state [ 321.749033][T20062] bridge0: port 2(bridge_slave_1) entered disabled state [ 321.770629][T20062] bridge_slave_1: entered allmulticast mode [ 321.792746][T20062] bridge_slave_1: entered promiscuous mode [ 321.806642][T15309] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 321.982723][T20062] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 322.019948][T20062] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 322.125252][ T5867] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 322.212484][T20062] team0: Port device team_slave_0 added [ 322.257318][T20062] team0: Port device team_slave_1 added [ 322.334097][T20062] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 322.347689][T20062] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 322.376035][T20062] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 322.394824][T20062] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 322.412158][T20062] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 322.473790][T20062] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 322.553422][T20213] Bluetooth: MGMT ver 1.23 [ 322.555319][T20209] netlink: 'syz.4.3960': attribute type 33 has an invalid length. [ 322.640068][T20062] hsr_slave_0: entered promiscuous mode [ 322.657113][T20062] hsr_slave_1: entered promiscuous mode [ 322.665372][T20062] debugfs: 'hsr0' already exists in 'hsr' [ 322.672105][T20062] Cannot create hsr debugfs directory [ 322.688186][T20221] netlink: 'syz.0.3963': attribute type 1 has an invalid length. [ 322.717309][T20220] : entered promiscuous mode [ 322.846153][T15309] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 323.063315][T20239] netlink: 'syz.4.3970': attribute type 1 has an invalid length. [ 323.171274][T20239] 8021q: adding VLAN 0 to HW filter on device bond5 [ 323.240702][T20062] netdevsim netdevsim7 netdevsim0: renamed from eth0 [ 323.276434][T20062] 8021q: adding VLAN 0 to HW filter on device netdevsim0 [ 323.286845][T20062] netdevsim netdevsim7 netdevsim1: renamed from eth1 [ 323.316617][T20062] 8021q: adding VLAN 0 to HW filter on device netdevsim1 [ 323.338571][T20062] netdevsim netdevsim7 netdevsim2: renamed from eth2 [ 323.369599][T20062] 8021q: adding VLAN 0 to HW filter on device netdevsim2 [ 323.381193][T20251] netlink: 'syz.4.3974': attribute type 7 has an invalid length. [ 323.384176][T20253] IPv6: sit1: Disabled Multicast RS [ 323.405804][ T5625] Bluetooth: hci7: command tx timeout [ 323.420088][T20062] netdevsim netdevsim7 netdevsim3: renamed from eth3 [ 323.438250][T20062] 8021q: adding VLAN 0 to HW filter on device netdevsim3 [ 323.461126][T11034] netdevsim netdevsim6 netdevsim0: set [0, 0] type 1 family 0 port 8472 - 0 [ 323.507192][T11034] netdevsim netdevsim6 netdevsim1: set [0, 0] type 1 family 0 port 8472 - 0 [ 323.519804][T11062] netdevsim netdevsim6 netdevsim2: set [0, 0] type 1 family 0 port 8472 - 0 [ 323.548911][T11062] netdevsim netdevsim6 netdevsim3: set [0, 0] type 1 family 0 port 8472 - 0 [ 323.753628][T20062] 8021q: adding VLAN 0 to HW filter on device bond0 [ 323.801033][T20062] 8021q: adding VLAN 0 to HW filter on device team0 [ 323.868648][T18676] bridge0: port 1(bridge_slave_0) entered blocking state [ 323.875847][T18676] bridge0: port 1(bridge_slave_0) entered forwarding state [ 323.888181][ T5726] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 323.987545][T11034] bridge0: port 2(bridge_slave_1) entered blocking state [ 323.995371][T11034] bridge0: port 2(bridge_slave_1) entered forwarding state [ 324.191858][T20301] __nla_validate_parse: 12 callbacks suppressed [ 324.191879][T20301] netlink: 8 bytes leftover after parsing attributes in process `syz.6.3985'. [ 324.590251][T20062] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 324.814597][T20062] veth0_vlan: entered promiscuous mode [ 324.827866][T20062] veth1_vlan: entered promiscuous mode [ 324.859910][T20062] veth0_macvtap: entered promiscuous mode [ 324.870003][T20062] veth1_macvtap: entered promiscuous mode [ 324.888122][T20062] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 324.899517][T20062] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 324.916822][T11065] netdevsim netdevsim7 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 324.928347][T11065] netdevsim netdevsim7 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 324.937121][ T5792] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 324.950405][T11065] netdevsim netdevsim7 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 324.959791][T11065] netdevsim netdevsim7 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 325.165760][ T5757] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 325.485748][ T5625] Bluetooth: hci7: command tx timeout [ 325.965953][ T5726] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 326.947027][T20287] nci: __nci_request: wait_for_completion_interruptible_timeout failed -512 [ 327.006542][ T5726] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 327.033654][T11034] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 327.091665][T11034] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 327.172666][T11062] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 327.184429][T20340] netlink: 8 bytes leftover after parsing attributes in process `syz.6.3994'. [ 327.199156][T11062] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 327.232991][T20340] geneve0: entered promiscuous mode [ 327.317930][T20346] syzkaller1: entered promiscuous mode [ 327.338864][T20346] syzkaller1: entered allmulticast mode [ 327.407818][T20354] bond2: entered promiscuous mode [ 327.413265][T20354] bond2: entered allmulticast mode [ 327.419250][T20354] 8021q: adding VLAN 0 to HW filter on device bond2 [ 327.559704][T20362] netlink: 'syz.6.3999': attribute type 1 has an invalid length. [ 327.577666][ T5625] Bluetooth: hci7: command tx timeout [ 327.632125][T20361] vlan2: entered promiscuous mode [ 327.658208][T20365] netlink: 12 bytes leftover after parsing attributes in process `syz.6.3999'. [ 327.673314][T20365] netlink: 12 bytes leftover after parsing attributes in process `syz.6.3999'. [ 327.678633][T20361] bridge0: entered promiscuous mode [ 327.688453][T20369] netlink: 12 bytes leftover after parsing attributes in process `syz.7.4002'. [ 327.749884][T20373] netlink: 12 bytes leftover after parsing attributes in process `syz.3.4001'. [ 327.766929][T20362] workqueue: Failed to create a rescuer kthread for wq "bond1": -EINTR [ 327.769549][T20373] block nbd5: Unsupported socket: should be TCP or UNIX. [ 327.839551][T20370] netlink: 28 bytes leftover after parsing attributes in process `syz.3.4001'. [ 327.849758][T20379] netlink: 8 bytes leftover after parsing attributes in process `syz.4.4003'. [ 327.866413][T20370] netlink: 28 bytes leftover after parsing attributes in process `syz.3.4001'. [ 327.891214][T20370] netlink: 28 bytes leftover after parsing attributes in process `syz.3.4001'. [ 328.046284][T15311] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 328.208780][ T5867] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 328.217929][ T5757] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 328.924374][T20431] netlink: 'syz.6.4018': attribute type 11 has an invalid length. [ 329.030996][T20430] bond1: option resend_igmp: invalid value (32767) [ 329.045444][T20430] bond1: option resend_igmp: allowed values 0 - 255 [ 329.067299][T20430] bond1 (unregistering): Released all slaves [ 329.086776][T18252] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 329.127770][T20436] netlink: 'syz.0.4019': attribute type 1 has an invalid length. [ 329.145073][T20436] netlink: 'syz.0.4019': attribute type 1 has an invalid length. [ 329.562187][T20452] syzkaller0: entered promiscuous mode [ 329.578140][T20452] syzkaller0: entered allmulticast mode [ 329.814036][T20473] __nla_validate_parse: 6 callbacks suppressed [ 329.814058][T20473] netlink: 44 bytes leftover after parsing attributes in process `syz.3.4030'. [ 329.878929][T20473] netlink: 43 bytes leftover after parsing attributes in process `syz.3.4030'. [ 329.932673][T20473] netlink: 'syz.3.4030': attribute type 6 has an invalid length. [ 329.959466][T20473] netlink: 43 bytes leftover after parsing attributes in process `syz.3.4030'. [ 330.125383][ C1] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 330.134787][T15311] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 330.217063][T20496] netlink: 24 bytes leftover after parsing attributes in process `syz.0.4038'. [ 330.244570][T20497] xt_CT: You must specify a L4 protocol and not use inversions on it [ 330.478234][T20505] netlink: 'syz.7.4039': attribute type 1 has an invalid length. [ 330.532827][T20505] netlink: 8 bytes leftover after parsing attributes in process `syz.7.4039'. [ 330.537398][T20508] netlink: 16 bytes leftover after parsing attributes in process `syz.6.4042'. [ 330.543221][T20505] netlink: 8 bytes leftover after parsing attributes in process `syz.7.4039'. [ 330.597482][T20517] netlink: 8 bytes leftover after parsing attributes in process `syz.7.4039'. [ 330.621373][T20519] netlink: 12 bytes leftover after parsing attributes in process `syz.4.4045'. [ 330.633800][T20508] netlink: 32 bytes leftover after parsing attributes in process `syz.6.4042'. [ 330.758133][ T683] netdevsim netdevsim0 netdevsim0: set [0, 0] type 1 family 0 port 8472 - 0 [ 330.800801][T20522] syzkaller0: entered promiscuous mode [ 330.816845][T20522] syzkaller0: entered allmulticast mode [ 330.842366][T11034] netdevsim netdevsim0 netdevsim1: set [0, 0] type 1 family 0 port 8472 - 0 [ 330.846827][T20522] netlink: 'syz.0.4046': attribute type 32 has an invalid length. [ 330.882607][T11034] netdevsim netdevsim0 netdevsim2: set [0, 0] type 1 family 0 port 8472 - 0 [ 330.985700][T20522] bond3: option coupled_control: invalid value (64) [ 331.011021][T20522] bond3 (unregistering): Released all slaves [ 331.045077][T11034] netdevsim netdevsim0 netdevsim3: set [0, 0] type 1 family 0 port 8472 - 0 [ 331.167836][ T5726] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 331.245434][ T1231] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 331.427600][T20566] openvswitch: netlink: Missing key (keys=40, expected=10000000) [ 332.096182][T20603] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 332.205572][ T5726] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 332.300626][T20617] netlink: 'syz.4.4071': attribute type 4 has an invalid length. [ 332.406295][T20623] netlink: 'syz.6.4073': attribute type 1 has an invalid length. [ 332.489365][T20626] netlink: 'syz.7.4074': attribute type 1 has an invalid length. [ 332.598989][ T29] audit: type=1800 audit(1782182245.466:10): pid=20630 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.6.4076" name="memory.events" dev="tmpfs" ino=535 res=0 errno=0 [ 332.640632][ T29] audit: type=1800 audit(1782182245.506:11): pid=20630 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.6.4076" name="memory.events" dev="tmpfs" ino=535 res=0 errno=0 [ 332.964815][T20652] netlink: 'syz.0.4082': attribute type 1 has an invalid length. [ 333.136685][T20661] 8021q: VLANs not supported on tunl0 [ 333.246767][ T5792] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 333.281604][T20674] netlink: 'syz.7.4091': attribute type 12 has an invalid length. [ 333.290142][T20675] netlink: 'syz.0.4089': attribute type 1 has an invalid length. [ 333.317247][T20677] netlink: 'syz.0.4089': attribute type 1 has an invalid length. [ 333.407187][T20675] bond3: entered promiscuous mode [ 333.412697][T20675] 8021q: adding VLAN 0 to HW filter on device bond3 [ 333.606776][T20693] tipc: New replicast peer: 255.255.255.255 [ 333.613247][T20693] tipc: Enabled bearer , priority 10 [ 334.070049][T20728] x_tables: duplicate underflow at hook 1 [ 334.162074][T20738] hsr0: entered promiscuous mode [ 334.272297][T20734] syzkaller0: entered promiscuous mode [ 334.278825][T20742] netlink: 'syz.4.4109': attribute type 1 has an invalid length. [ 334.288358][T20734] syzkaller0: entered allmulticast mode [ 334.292456][ T5757] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 334.306142][ T5792] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 334.315624][T20742] netlink: 'syz.4.4109': attribute type 2 has an invalid length. [ 334.725072][ T5792] tipc: Node number set to 2358862009 [ 335.312011][T20800] ip6gre1: entered allmulticast mode [ 335.330060][T15311] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 335.538750][T20818] netlink: 'syz.3.4129': attribute type 15 has an invalid length. [ 335.586391][T20819] __nla_validate_parse: 17 callbacks suppressed [ 335.586412][T20819] netlink: 20 bytes leftover after parsing attributes in process `syz.0.4130'. [ 335.623869][T20818] netlink: 24 bytes leftover after parsing attributes in process `syz.3.4129'. [ 335.713015][T20815] netlink: 8 bytes leftover after parsing attributes in process `syz.0.4130'. [ 335.811866][T20830] netlink: 'syz.4.4132': attribute type 5 has an invalid length. [ 336.368662][ T5726] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 336.387212][T20853] netlink: 24 bytes leftover after parsing attributes in process `syz.7.4139'. [ 336.477227][T20857] netlink: 'syz.0.4141': attribute type 21 has an invalid length. [ 336.678853][T20850] tipc: Started in network mode [ 336.718424][T20850] tipc: Node identity d25a31659548, cluster identity 4711 [ 336.743199][T20850] tipc: Enabled bearer , priority 0 [ 336.786042][T20857] netlink: 132 bytes leftover after parsing attributes in process `syz.0.4141'. [ 336.831042][T20855] syzkaller0: entered promiscuous mode [ 336.855217][T20855] syzkaller0: entered allmulticast mode [ 336.912703][T20842] tipc: Resetting bearer [ 336.946478][T20842] tipc: Disabling bearer [ 337.327014][ T1231] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 337.402454][T20909] syzkaller0: entered promiscuous mode [ 337.408620][ T5726] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 337.417010][T20909] syzkaller0: entered allmulticast mode [ 337.418514][T20887] tc action pedit offset must be on 32 bit boundaries [ 337.429540][T20887] tc action pedit offset must be on 32 bit boundaries [ 337.436370][T20887] tc action pedit offset must be on 32 bit boundaries [ 337.443168][T20887] tc action pedit offset must be on 32 bit boundaries [ 337.449990][T20887] tc action pedit offset must be on 32 bit boundaries [ 337.456832][T20887] tc action pedit offset must be on 32 bit boundaries [ 337.463653][T20887] tc action pedit offset must be on 32 bit boundaries [ 337.470680][T20887] tc action pedit offset must be on 32 bit boundaries [ 337.477591][T20887] tc action pedit offset must be on 32 bit boundaries [ 337.484386][T20887] tc action pedit offset must be on 32 bit boundaries [ 337.491230][T20887] 0: reclassify loop, rule prio 0, protocol 800 [ 337.643203][T20915] syzkaller0: entered promiscuous mode [ 337.673406][T20915] syzkaller0: entered allmulticast mode [ 337.751741][T20923] netlink: 28 bytes leftover after parsing attributes in process `syz.6.4160'. [ 337.774665][T20923] netlink: 28 bytes leftover after parsing attributes in process `syz.6.4160'. [ 337.839911][ T5867] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 338.004043][T20935] netlink: 4 bytes leftover after parsing attributes in process `syz.6.4164'. [ 338.057566][T20935] netlink: 176 bytes leftover after parsing attributes in process `syz.6.4164'. [ 338.136537][T20935] netlink: 24 bytes leftover after parsing attributes in process `syz.6.4164'. [ 338.148115][T20950] netlink: 'syz.0.4169': attribute type 1 has an invalid length. [ 338.411992][T20961] netlink: 'syz.3.4172': attribute type 21 has an invalid length. [ 338.446711][ T5726] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 338.473908][T20961] netlink: 'syz.3.4172': attribute type 5 has an invalid length. [ 338.899919][T20990] netlink: 'syz.3.4182': attribute type 1 has an invalid length. [ 338.925464][T20990] netlink: 'syz.3.4182': attribute type 1 has an invalid length. [ 339.118706][T20998] netlink: 'syz.6.4185': attribute type 1 has an invalid length. [ 339.332608][T21007] netlink: 'syz.3.4187': attribute type 1 has an invalid length. [ 339.353287][T21003] bond1: (slave ip6gre1): The slave device specified does not support setting the MAC address [ 339.364670][T21003] bond1: (slave ip6gre1): Setting fail_over_mac to active for active-backup mode [ 339.394483][T21003] bond1: (slave ip6gre1): making interface the new active one [ 339.409030][T21003] bond1: (slave ip6gre1): Enslaving as an active interface with an up link [ 339.455864][T21007] bond3: entered promiscuous mode [ 339.466285][T21007] 8021q: adding VLAN 0 to HW filter on device bond3 [ 339.488555][T15311] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 339.517613][T21017] bond3: (slave ipvlan2): enslaved VLAN challenged slave. Adding VLANs will be blocked as long as it is part of bond. [ 339.531166][T21017] bond3: (slave ipvlan2): The slave device specified does not support setting the MAC address [ 339.542534][T21017] bond3: (slave ipvlan2): Setting fail_over_mac to active for active-backup mode [ 339.610801][T21007] bond3: (slave ipvlan2): enslaved VLAN challenged slave. Adding VLANs will be blocked as long as it is part of bond. [ 339.637701][T21007] bond3: (slave ipvlan2): The slave device specified does not support setting the MAC address [ 340.369527][ T5757] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 340.416221][T21057] syzkaller0: entered promiscuous mode [ 340.434700][T21057] syzkaller0: entered allmulticast mode [ 340.526090][ T5792] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 340.857929][T21081] __nla_validate_parse: 10 callbacks suppressed [ 340.857950][T21081] netlink: 212368 bytes leftover after parsing attributes in process `syz.7.4211'. [ 340.973886][T21084] bond1: invalid ARP target 0.0.0.0 specified for addition [ 340.982800][T21084] bond1: option arp_ip_target: invalid value (0) [ 340.996303][T21084] bond1 (unregistering): Released all slaves [ 341.069526][T21092] IPVS: Unknown mcast interface: vcan0 [ 341.396948][T21107] netlink: 248 bytes leftover after parsing attributes in process `syz.4.4218'. [ 341.565150][T15311] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 341.730006][T21118] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check. [ 341.779133][T21121] netlink: 'syz.3.4223': attribute type 1 has an invalid length. [ 341.792110][T21119] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check. [ 341.887641][T21130] netlink: 'syz.7.4222': attribute type 32 has an invalid length. [ 341.920012][T21130] netlink: 8 bytes leftover after parsing attributes in process `syz.7.4222'. [ 342.040402][T21130] bond1: Setting coupled_control to off (0) [ 342.178197][T21146] xt_hashlimit: Unknown mode mask 2000, kernel too old? [ 342.180869][T21147] xt_hashlimit: Unknown mode mask 2000, kernel too old? [ 342.210744][T21143] netlink: 184 bytes leftover after parsing attributes in process `syz.6.4227'. [ 342.513865][T21160] netlink: 24 bytes leftover after parsing attributes in process `syz.4.4234'. [ 342.606485][T15311] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 342.715615][T21174] netlink: 'syz.3.4237': attribute type 5 has an invalid length. [ 342.874645][T21180] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check. [ 343.204491][T21200] netlink: 16 bytes leftover after parsing attributes in process `syz.3.4248'. [ 343.406451][ T5867] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 343.409330][T21211] netlink: 92 bytes leftover after parsing attributes in process `syz.4.4251'. [ 343.517334][T21217] syz_tun: entered allmulticast mode [ 343.551432][T21217] netlink: 76 bytes leftover after parsing attributes in process `syz.3.4254'. [ 343.646602][T15311] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 343.833042][T21235] tipc: Enabling of bearer rejected, already enabled [ 343.843713][T21234] x_tables: ip6_tables: TCPMSS target: only valid for protocol 6 [ 343.864101][T21232] tipc: Enabling of bearer rejected, already enabled [ 343.903045][T21238] x_tables: ip6_tables: TCPMSS target: only valid for protocol 6 [ 343.993289][T21244] batman_adv: batadv0: Adding interface: wlan0 [ 344.013691][T21244] batman_adv: batadv0: The MTU of interface wlan0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 344.055832][T21244] batman_adv: batadv0: Not using interface wlan0 (retrying later): interface not active [ 344.066546][T21247] netlink: 'syz.4.4262': attribute type 12 has an invalid length. [ 344.074408][T21247] netlink: 'syz.4.4262': attribute type 29 has an invalid length. [ 344.083521][T21247] netlink: 148 bytes leftover after parsing attributes in process `syz.4.4262'. [ 344.092954][T21247] netlink: 59 bytes leftover after parsing attributes in process `syz.4.4262'. [ 344.219231][T21256] tipc: Enabled bearer , priority 0 [ 344.258689][T21256] syzkaller0: entered promiscuous mode [ 344.265166][T21256] syzkaller0: entered allmulticast mode [ 344.273195][T21256] tipc: Resetting bearer [ 344.281950][T11034] tipc: Resetting bearer [ 344.331921][T21256] bridge0: port 1(bridge_slave_0) entered disabled state [ 344.360722][T21256] bridge_slave_0 (unregistering): left allmulticast mode [ 344.380985][T21256] bridge_slave_0 (unregistering): left promiscuous mode [ 344.398954][T21256] bridge0: port 1(bridge_slave_0) entered disabled state [ 344.489266][T21255] tipc: Resetting bearer [ 344.581923][T21255] tipc: Disabling bearer [ 344.735874][ T5727] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 344.909601][T21275] A link change request failed with some changes committed already. Interface syz_tun may have been left with an inconsistent configuration, please check. [ 345.031735][T21290] syzkaller1: entered promiscuous mode [ 345.079241][T21290] syzkaller1: entered allmulticast mode [ 345.286429][ T29] audit: type=1804 audit(1782182258.156:12): pid=21309 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=invalid_pcr cause=open_writers comm="syz.0.4277" name="/newroot/252/cgroup.controllers" dev="tmpfs" ino=1295 res=1 errno=0 [ 345.362726][ T29] audit: type=1800 audit(1782182258.176:13): pid=21309 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.0.4277" name="cgroup.controllers" dev="tmpfs" ino=1295 res=0 errno=0 [ 345.710504][T21331] syzkaller0: entered promiscuous mode [ 345.748422][T21331] syzkaller0: entered allmulticast mode [ 345.805330][T15310] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 346.102556][T21358] syzkaller0: entered promiscuous mode [ 346.126885][T21358] syzkaller0: entered allmulticast mode [ 346.247062][T21356] veth1_to_bond: entered allmulticast mode [ 346.259203][T21356] __nla_validate_parse: 4 callbacks suppressed [ 346.259261][T21356] netlink: 9 bytes leftover after parsing attributes in process `syz.7.4293'. [ 346.277178][T21356] netlink: 9 bytes leftover after parsing attributes in process `syz.7.4293'. [ 346.499260][ T5757] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 346.560831][T21379] macvlan0: entered promiscuous mode [ 346.570775][T21377] veth1_to_bond: left allmulticast mode [ 346.818232][T21391] netlink: 'syz.6.4299': attribute type 2 has an invalid length. [ 346.848043][ T5711] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 346.865189][T21391] netlink: 'syz.6.4299': attribute type 2 has an invalid length. [ 346.924757][T21393] netlink: 8 bytes leftover after parsing attributes in process `syz.7.4302'. [ 346.985063][T21393] netlink: 24 bytes leftover after parsing attributes in process `syz.7.4302'. [ 347.031452][T21393] netlink: 8 bytes leftover after parsing attributes in process `syz.7.4302'. [ 347.061443][T21404] syzkaller0: entered promiscuous mode [ 347.070684][T21393] netlink: 24 bytes leftover after parsing attributes in process `syz.7.4302'. [ 347.086629][T21404] syzkaller0: entered allmulticast mode [ 347.233573][T21420] syzkaller0: entered promiscuous mode [ 347.251380][T21420] syzkaller0: entered allmulticast mode [ 347.280786][T21420] netlink: 212368 bytes leftover after parsing attributes in process `syz.4.4307'. [ 347.399352][T21424] xt_CT: You must specify a L4 protocol and not use inversions on it [ 347.408918][ T9105] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 347.589867][T21440] netlink: 144 bytes leftover after parsing attributes in process `syz.4.4312'. [ 347.691538][T21445] netlink: 8 bytes leftover after parsing attributes in process `syz.7.4313'. [ 347.843034][T21450] : entered promiscuous mode [ 347.862238][T21461] netlink: 'syz.7.4313': attribute type 1 has an invalid length. [ 347.885823][ T5711] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 347.900588][T21461] netlink: 'syz.7.4313': attribute type 2 has an invalid length. [ 347.951980][T21464] netlink: 'syz.7.4313': attribute type 1 has an invalid length. [ 348.001202][T21464] netlink: 'syz.7.4313': attribute type 2 has an invalid length. [ 348.019276][T21468] netlink: 8 bytes leftover after parsing attributes in process `syz.3.4319'. [ 348.091689][T21468] batman_adv: Cannot find parent device. Skipping batadv-on-batadv check for gretap1 [ 348.127921][T21468] gretap1: default qdisc (pfifo_fast) fail, fallback to noqueue [ 348.153205][T21468] gretap1: entered promiscuous mode [ 348.183634][T21468] gretap1: entered allmulticast mode [ 348.927591][ T5711] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 349.311649][T21535] 8021q: adding VLAN 0 to HW filter on device bond5 [ 349.331151][T21535] bridge0: port 1(bond5) entered blocking state [ 349.339339][T21535] bridge0: port 1(bond5) entered disabled state [ 349.347674][T21535] bond5: entered allmulticast mode [ 349.363884][T21535] bond5: entered promiscuous mode [ 349.376274][T21535] bridge0: port 1(bond5) entered blocking state [ 349.383231][T21535] bridge0: port 1(bond5) entered forwarding state [ 349.420529][T18676] bridge0: port 1(bond5) entered disabled state [ 349.573901][ T9105] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 349.597298][T21562] netlink: 'syz.7.4341': attribute type 1 has an invalid length. [ 349.800242][ T9105] IPVS: starting estimator thread 0... [ 349.910315][T21581] xt_hashlimit: size too large, truncated to 1048576 [ 349.927289][T21575] IPVS: using max 44 ests per chain, 105600 per kthread [ 349.967441][T15310] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 350.253312][T21598] syzkaller0: entered promiscuous mode [ 350.300707][T21598] syzkaller0: entered allmulticast mode [ 350.341115][T21606] FAULT_INJECTION: forcing a failure. [ 350.341115][T21606] name fail_usercopy, interval 1, probability 0, space 0, times 1 [ 350.383660][T21606] CPU: 1 UID: 0 PID: 21606 Comm: syz.3.4348 Not tainted syzkaller #0 PREEMPT(full) [ 350.383689][T21606] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/09/2026 [ 350.383701][T21606] Call Trace: [ 350.383767][T21606] [ 350.383826][T21606] dump_stack_lvl+0xe8/0x150 [ 350.383993][T21606] should_fail_ex+0x40c/0x560 [ 350.384078][T21606] _copy_from_iter+0x1d3/0x1660 [ 350.384126][T21606] ? __might_fault+0xaf/0x130 [ 350.384211][T21606] ? __might_fault+0xcb/0x130 [ 350.384232][T21606] ? _copy_from_iter+0x21b/0x1660 [ 350.384254][T21606] ? __pfx__copy_from_iter+0x10/0x10 [ 350.384277][T21606] ? __pfx__copy_from_iter+0x10/0x10 [ 350.384301][T21606] copy_page_from_iter+0x219/0x2d0 [ 350.384325][T21606] skb_copy_datagram_from_iter+0x2f4/0x720 [ 350.384413][T21606] packet_sendmsg+0x36ab/0x5040 [ 350.384477][T21606] ? __pfx_aa_label_sk_perm+0x10/0x10 [ 350.384562][T21606] ? lock_acquire+0x5f/0x350 [ 350.384620][T21606] ? kstrtouint+0x6e/0xe0 [ 350.384658][T21606] ? get_pid_task+0x20/0x1f0 [ 350.384690][T21606] ? rcu_is_watching+0x15/0xb0 [ 350.384714][T21606] ? get_pid_task+0x20/0x1f0 [ 350.384732][T21606] ? __pfx_packet_sendmsg+0x10/0x10 [ 350.384747][T21606] ? aa_sk_perm+0x6d5/0x900 [ 350.384772][T21606] ? lock_acquire+0x5f/0x350 [ 350.384798][T21606] ? __pfx_aa_sk_perm+0x10/0x10 [ 350.384821][T21606] ? tomoyo_socket_sendmsg_permission+0x1e0/0x300 [ 350.384867][T21606] ? lock_release+0x4b/0x3c0 [ 350.384890][T21606] ? __might_fault+0xaf/0x130 [ 350.384909][T21606] ? aa_sock_msg_perm+0xf1/0x1b0 [ 350.384925][T21606] ? bpf_lsm_socket_sendmsg+0x9/0x20 [ 350.384980][T21606] ? __pfx_packet_sendmsg+0x10/0x10 [ 350.384997][T21606] __sys_sendto+0x626/0x6c0 [ 350.385059][T21606] ? __pfx___sys_sendto+0x10/0x10 [ 350.385081][T21606] ? __mutex_unlock_slowpath+0x724/0x8e0 [ 350.385178][T21606] ? __pfx_ksys_write+0x10/0x10 [ 350.385223][T21606] __x64_sys_sendto+0xde/0x100 [ 350.385247][T21606] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 350.385284][T21606] do_syscall_64+0x174/0x580 [ 350.385344][T21606] ? trace_irq_disable+0x3b/0x140 [ 350.385380][T21606] ? clear_bhb_loop+0x40/0x90 [ 350.385400][T21606] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 350.385418][T21606] RIP: 0033:0x7f8dfcf9ce59 [ 350.385443][T21606] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 350.385482][T21606] RSP: 002b:00007f8dfde3c028 EFLAGS: 00000246 ORIG_RAX: 000000000000002c [ 350.385527][T21606] RAX: ffffffffffffffda RBX: 00007f8dfd216090 RCX: 00007f8dfcf9ce59 [ 350.385540][T21606] RDX: 000000000000fdef RSI: 00002000000002c0 RDI: 0000000000000008 [ 350.385552][T21606] RBP: 00007f8dfde3c090 R08: 0000200000000140 R09: 0000000000000014 [ 350.385563][T21606] R10: 0000000000000004 R11: 0000000000000246 R12: 0000000000000002 [ 350.385574][T21606] R13: 00007f8dfd216128 R14: 00007f8dfd216090 R15: 00007ffc5503d658 [ 350.385594][T21606] [ 350.773685][T21584] Bluetooth: hci0: Opcode 0x0c1a failed: -4 [ 350.914451][T21624] netlink: 'syz.4.4354': attribute type 6 has an invalid length. [ 350.922381][T21624] netlink: 'syz.4.4354': attribute type 5 has an invalid length. [ 351.008563][ T5711] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 351.045801][T21617] syzkaller0: entered promiscuous mode [ 351.051401][T21617] syzkaller0: entered allmulticast mode [ 351.269177][T21644] __nla_validate_parse: 8 callbacks suppressed [ 351.269212][T21644] netlink: 104 bytes leftover after parsing attributes in process `syz.7.4358'. [ 351.323181][T21648] netlink: 104 bytes leftover after parsing attributes in process `syz.7.4358'. [ 351.610327][T21656] team0: entered promiscuous mode [ 351.630164][T21656] team_slave_1: entered promiscuous mode [ 351.656498][T21656] geneve1: entered promiscuous mode [ 351.847869][T21672] netlink: 124 bytes leftover after parsing attributes in process `syz.7.4364'. [ 351.965283][ T5625] Bluetooth: hci0: command 0x0c1a tx timeout [ 351.979808][T21678] syzkaller0: entered promiscuous mode [ 351.992421][T21678] syzkaller0: entered allmulticast mode [ 352.014216][T21678] FAULT_INJECTION: forcing a failure. [ 352.014216][T21678] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 352.036065][T21678] CPU: 1 UID: 0 PID: 21678 Comm: syz.4.4365 Not tainted syzkaller #0 PREEMPT(full) [ 352.036094][T21678] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/09/2026 [ 352.036104][T21678] Call Trace: [ 352.036110][T21678] [ 352.036118][T21678] dump_stack_lvl+0xe8/0x150 [ 352.036145][T21678] should_fail_ex+0x40c/0x560 [ 352.036166][T21678] _copy_from_iter+0x1d3/0x1660 [ 352.036185][T21678] ? __might_fault+0xaf/0x130 [ 352.036206][T21678] ? __might_fault+0xcb/0x130 [ 352.036227][T21678] ? _copy_from_iter+0x21b/0x1660 [ 352.036247][T21678] ? __pfx__copy_from_iter+0x10/0x10 [ 352.036270][T21678] ? __pfx__copy_from_iter+0x10/0x10 [ 352.036292][T21678] copy_page_from_iter+0x219/0x2d0 [ 352.036315][T21678] skb_copy_datagram_from_iter+0x2f4/0x720 [ 352.036338][T21678] packet_sendmsg+0x36ab/0x5040 [ 352.036360][T21678] ? __pfx_aa_label_sk_perm+0x10/0x10 [ 352.036385][T21678] ? lock_acquire+0x5f/0x350 [ 352.036416][T21678] ? kstrtouint+0x6e/0xe0 [ 352.036435][T21678] ? get_pid_task+0x20/0x1f0 [ 352.036449][T21678] ? rcu_is_watching+0x15/0xb0 [ 352.036468][T21678] ? get_pid_task+0x20/0x1f0 [ 352.036485][T21678] ? __pfx_packet_sendmsg+0x10/0x10 [ 352.036500][T21678] ? aa_sk_perm+0x6d5/0x900 [ 352.036525][T21678] ? lock_acquire+0x5f/0x350 [ 352.036549][T21678] ? __pfx_aa_sk_perm+0x10/0x10 [ 352.036572][T21678] ? tomoyo_socket_sendmsg_permission+0x1e0/0x300 [ 352.036593][T21678] ? lock_release+0x4b/0x3c0 [ 352.036616][T21678] ? __might_fault+0xaf/0x130 [ 352.036636][T21678] ? aa_sock_msg_perm+0xf1/0x1b0 [ 352.036653][T21678] ? bpf_lsm_socket_sendmsg+0x9/0x20 [ 352.036673][T21678] ? __pfx_packet_sendmsg+0x10/0x10 [ 352.036690][T21678] __sys_sendto+0x626/0x6c0 [ 352.036714][T21678] ? __pfx___sys_sendto+0x10/0x10 [ 352.036734][T21678] ? __mutex_unlock_slowpath+0x724/0x8e0 [ 352.036770][T21678] ? __pfx_ksys_write+0x10/0x10 [ 352.036796][T21678] __x64_sys_sendto+0xde/0x100 [ 352.036819][T21678] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 352.036846][T21678] do_syscall_64+0x174/0x580 [ 352.036871][T21678] ? clear_bhb_loop+0x40/0x90 [ 352.036890][T21678] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 352.036906][T21678] RIP: 0033:0x7ff8ff19ce59 [ 352.036924][T21678] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 352.036939][T21678] RSP: 002b:00007ff900009028 EFLAGS: 00000246 ORIG_RAX: 000000000000002c [ 352.036959][T21678] RAX: ffffffffffffffda RBX: 00007ff8ff415fa0 RCX: 00007ff8ff19ce59 [ 352.036973][T21678] RDX: 000000000000fdef RSI: 00002000000002c0 RDI: 0000000000000008 [ 352.036985][T21678] RBP: 00007ff900009090 R08: 0000200000000140 R09: 0000000000000014 [ 352.036996][T21678] R10: 0000000000000004 R11: 0000000000000246 R12: 0000000000000002 [ 352.037007][T21678] R13: 00007ff8ff416038 R14: 00007ff8ff415fa0 R15: 00007ffe94c4bd88 [ 352.037027][T21678] [ 352.474893][ T5792] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 352.607657][ T9105] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 353.047493][T21712] netlink: 8 bytes leftover after parsing attributes in process `syz.6.4372'. [ 353.072191][T21712] ip6t_srh: unknown srh invflags 4000 [ 353.190556][T21720] bond0: option active_slave: mode dependency failed, not supported in mode balance-rr(0) [ 353.376353][T21726] netlink: 'syz.6.4373': attribute type 1 has an invalid length. [ 353.399004][T21726] netlink: 244 bytes leftover after parsing attributes in process `syz.6.4373'. [ 353.462632][T21717] netlink: 4 bytes leftover after parsing attributes in process `syz.3.4371'. [ 353.490207][ T5792] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 353.948500][T21714] Bluetooth: hci0: Opcode 0x0c03 failed: -4 [ 354.525570][T15310] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 354.671068][T21666] nci: __nci_request: wait_for_completion_interruptible_timeout failed -512 [ 354.728585][T21745] netlink: 4 bytes leftover after parsing attributes in process `syz.4.4375'. [ 354.941554][T21753] netlink: 'syz.4.4381': attribute type 1 has an invalid length. [ 354.982931][T21753] netlink: 236 bytes leftover after parsing attributes in process `syz.4.4381'. [ 355.022898][T21758] netlink: 8 bytes leftover after parsing attributes in process `syz.6.4380'. [ 355.278459][T21761] syzkaller0: entered promiscuous mode [ 355.284687][T21761] syzkaller0: entered allmulticast mode [ 355.297632][T21766] netlink: 28 bytes leftover after parsing attributes in process `syz.4.4383'. [ 355.565984][ T5711] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 355.649304][ T9105] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 355.667171][T21787] netlink: 'syz.0.4388': attribute type 24 has an invalid length. [ 356.571903][T21830] __nla_validate_parse: 4 callbacks suppressed [ 356.571927][T21830] netlink: 20 bytes leftover after parsing attributes in process `syz.7.4403'. [ 356.610113][ T5711] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 356.625662][T21832] netlink: 12 bytes leftover after parsing attributes in process `syz.4.4402'. [ 356.660643][T21832] netlink: 207952 bytes leftover after parsing attributes in process `syz.4.4402'. [ 356.691589][T21840] netlink: 14 bytes leftover after parsing attributes in process `syz.6.4405'. [ 356.691939][T21831] netlink: 40 bytes leftover after parsing attributes in process `syz.3.4404'. [ 356.993782][T21851] syzkaller0: entered promiscuous mode [ 357.006728][ T9105] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 357.019420][T21854] netlink: 'syz.0.4410': attribute type 11 has an invalid length. [ 357.024091][T21851] syzkaller0: entered allmulticast mode [ 357.308276][T21882] bond0: Device is already in use. [ 357.340283][T21882] bond0: Device is already in use. [ 357.409018][T21883] netlink: 8 bytes leftover after parsing attributes in process `syz.4.4416'. [ 357.436829][T21883] netlink: 4 bytes leftover after parsing attributes in process `syz.4.4416'. [ 357.646615][T15310] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 357.693508][T21910] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 357.933933][T21926] netlink: 212368 bytes leftover after parsing attributes in process `syz.0.4428'. [ 357.996289][T21931] netlink: 8 bytes leftover after parsing attributes in process `syz.7.4431'. [ 358.024826][T21931] netlink: 24 bytes leftover after parsing attributes in process `syz.7.4431'. [ 358.685717][ T9105] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 358.694562][ T9105] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 359.008044][T21999] sctp: [Deprecated]: syz.3.4448 (pid 21999) Use of struct sctp_assoc_value in delayed_ack socket option. [ 359.008044][T21999] Use struct sctp_sack_info instead [ 359.047910][T22000] batadv1: entered allmulticast mode [ 359.149623][T22008] syzkaller0: entered promiscuous mode [ 359.156221][T22008] syzkaller0: entered allmulticast mode [ 359.167509][T22008] lo: entered allmulticast mode [ 359.180501][T22008] tunl0: entered allmulticast mode [ 359.190926][T22008] gre0: entered allmulticast mode [ 359.214743][T22008] gretap0: entered allmulticast mode [ 359.227372][T22008] erspan0: entered allmulticast mode [ 359.239036][T22008] ip_vti0: entered allmulticast mode [ 359.248621][T22008] ip6_vti0: entered allmulticast mode [ 359.260072][T22008] sit0: entered allmulticast mode [ 359.272734][T22008] ip6tnl0: entered allmulticast mode [ 359.281517][T22008] ip6gre0: entered allmulticast mode [ 359.290984][T22008] syz_tun: entered allmulticast mode [ 359.726952][ T24] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 360.365053][ T5625] Bluetooth: hci5: command 0x041b tx timeout [ 360.766063][ T24] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 361.170674][T21967] nci: __nci_request: wait_for_completion_interruptible_timeout failed -512 [ 361.389877][T22032] syzkaller0: entered promiscuous mode [ 361.418151][T22032] syzkaller0: entered allmulticast mode [ 361.583900][T22047] team0: Device xfrm0 is of different type [ 361.727688][ T1231] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 361.807436][ T24] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 361.928059][T22065] netlink: 'syz.3.4468': attribute type 21 has an invalid length. [ 361.941755][T22065] __nla_validate_parse: 84 callbacks suppressed [ 361.941775][T22065] netlink: 132 bytes leftover after parsing attributes in process `syz.3.4468'. [ 362.083100][T22071] syzkaller0: entered promiscuous mode [ 362.104376][T22071] syzkaller0: entered allmulticast mode [ 362.160231][T22071] : entered promiscuous mode [ 362.358947][T22086] netlink: 'syz.3.4474': attribute type 1 has an invalid length. [ 362.593891][T22086] 8021q: adding VLAN 0 to HW filter on device bond6 [ 362.612780][T22091] ip_vti0: entered promiscuous mode [ 362.730975][T22107] netlink: 'syz.0.4482': attribute type 11 has an invalid length. [ 362.846346][ T24] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 363.157967][T22134] netlink: 9 bytes leftover after parsing attributes in process `syz.7.4488'. [ 363.182825][T22135] netlink: 20 bytes leftover after parsing attributes in process `syz.6.4489'. [ 363.219481][T22135] netlink: 28 bytes leftover after parsing attributes in process `syz.6.4489'. [ 363.232404][T22134] 0·: renamed from hsr0 (while UP) [ 363.278810][T22134] 0·: entered allmulticast mode [ 363.309404][T22142] x_tables: duplicate underflow at hook 1 [ 363.317252][T22134] hsr_slave_0: entered allmulticast mode [ 363.328310][T22142] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 363.370993][T22134] hsr_slave_1: entered allmulticast mode [ 363.387477][T22134] A link change request failed with some changes committed already. Interface c0· may have been left with an inconsistent configuration, please check. [ 363.475878][T22148] h: entered promiscuous mode [ 363.512486][T22149] netlink: 256 bytes leftover after parsing attributes in process `syz.0.4494'. [ 363.629795][T22152] netlink: 16 bytes leftover after parsing attributes in process `syz.7.4495'. [ 363.887350][ T46] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 363.937168][T22171] netlink: 'syz.7.4504': attribute type 8 has an invalid length. [ 364.078918][T22180] bond3: option primary: mode dependency failed, not supported in mode balance-rr(0) [ 364.092857][T22180] bond3 (unregistering): Released all slaves [ 364.174059][T22185] netlink: 4 bytes leftover after parsing attributes in process `syz.3.4508'. [ 364.261237][T22188] xt_TCPMSS: Only works on TCP SYN packets [ 364.393087][T22196] openvswitch: netlink: IP tunnel dst address not specified [ 364.610261][T22213] netlink: 36 bytes leftover after parsing attributes in process `syz.4.4518'. [ 364.697886][T22208] netlink: 212408 bytes leftover after parsing attributes in process `syz.7.4517'. [ 364.735201][T22220] netlink: 'syz.4.4518': attribute type 3 has an invalid length. [ 364.770722][ T9] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 364.927587][ T46] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 364.987616][T22239] netlink: 36 bytes leftover after parsing attributes in process `syz.3.4522'. [ 365.072284][T22244] tc_dump_action: action bad kind [ 365.093903][T22244] netlink: 'syz.0.4526': attribute type 1 has an invalid length. [ 365.345901][T22252] netlink: 'syz.4.4529': attribute type 10 has an invalid length. [ 365.387587][T22252] dummy0: entered promiscuous mode [ 365.406573][T22252] team0: Port device dummy0 added [ 365.485488][ T5625] Bluetooth: hci3: command 0x0406 tx timeout [ 365.701273][T22267] 8021q: adding VLAN 0 to HW filter on device bond6 [ 365.860252][T22285] netlink: 'syz.6.4537': attribute type 10 has an invalid length. [ 365.933534][T22289] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 365.959494][T22285] team0: Port device geneve1 added [ 365.977828][T22292] erspan0: entered promiscuous mode [ 365.990316][ T5624] net_ratelimit: 2 callbacks suppressed [ 365.990393][ T5624] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 366.303457][T11065] nci: nci_ntf_packet: unknown ntf opcode 0x220 [ 366.371963][T22320] netlink: 'syz.3.4549': attribute type 18 has an invalid length. [ 366.434581][T18675] netdevsim netdevsim3 netdevsim0: set [0, 0] type 1 family 0 port 8472 - 0 [ 366.462791][T18675] netdevsim netdevsim3 netdevsim1: set [0, 0] type 1 family 0 port 8472 - 0 [ 366.476518][T18675] netdevsim netdevsim3 netdevsim2: set [0, 0] type 1 family 0 port 8472 - 0 [ 366.485492][T18675] netdevsim netdevsim3 netdevsim3: set [0, 0] type 1 family 0 port 8472 - 0 [ 366.609886][ T5734] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 367.005714][ T24] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 367.805529][ T1231] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 368.047637][ T46] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 369.087133][ T24] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 369.179026][T22304] nci: __nci_request: wait_for_completion_interruptible_timeout failed -512 [ 369.632268][T22377] __nla_validate_parse: 4 callbacks suppressed [ 369.632286][T22377] netlink: 12 bytes leftover after parsing attributes in process `syz.0.4564'. [ 369.632396][T22375] netlink: 4 bytes leftover after parsing attributes in process `syz.4.4563'. [ 369.680008][T22377] netlink: 4 bytes leftover after parsing attributes in process `syz.0.4564'. [ 369.711701][T22375] macvtap1: entered promiscuous mode [ 369.719422][T22375] vlan0: entered promiscuous mode [ 369.727072][T22375] macvtap1: entered allmulticast mode [ 369.732590][T22375] vlan0: entered allmulticast mode [ 369.738218][T22375] veth0_vlan: entered allmulticast mode [ 369.771208][T22367] netdevsim netdevsim6 netdevsim3 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 369.789078][T22367] netdevsim netdevsim6 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 369.841454][T22367] netdevsim netdevsim6 netdevsim2 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 369.872682][T22367] netdevsim netdevsim6 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 369.970732][T22367] netdevsim netdevsim6 netdevsim1 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 369.985384][T22367] netdevsim netdevsim6 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 370.051414][T22367] netdevsim netdevsim6 netdevsim0 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 370.065645][T22367] netdevsim netdevsim6 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 370.126161][ T24] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 370.231642][ T683] netdevsim netdevsim6 eth0: set [0, 0] type 1 family 0 port 8472 - 0 [ 370.260709][ T683] netdevsim netdevsim6 eth0: set [1, 0] type 2 family 0 port 6081 - 0 [ 370.286524][ T1043] netdevsim netdevsim6 eth1: set [0, 0] type 1 family 0 port 8472 - 0 [ 370.297282][ T1043] netdevsim netdevsim6 eth1: set [1, 0] type 2 family 0 port 6081 - 0 [ 370.323562][ T1043] netdevsim netdevsim6 eth2: set [0, 0] type 1 family 0 port 8472 - 0 [ 370.337414][ T1043] netdevsim netdevsim6 eth2: set [1, 0] type 2 family 0 port 6081 - 0 [ 370.370347][ T1043] netdevsim netdevsim6 eth3: set [0, 0] type 1 family 0 port 8472 - 0 [ 370.389755][ T1043] netdevsim netdevsim6 eth3: set [1, 0] type 2 family 0 port 6081 - 0 [ 370.499810][T22416] netlink: 48 bytes leftover after parsing attributes in process `syz.6.4574'. [ 370.514701][T22416] netlink: 48 bytes leftover after parsing attributes in process `syz.6.4574'. [ 370.657176][T22423] nbd: must specify at least one socket [ 370.845984][ T9] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 371.071520][T22443] pim6reg: entered allmulticast mode [ 371.117003][T22446] netlink: 4 bytes leftover after parsing attributes in process `syz.0.4584'. [ 371.150014][T22448] pim6reg: left allmulticast mode [ 371.165727][ T5624] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 371.262241][T22449] netlink: 4 bytes leftover after parsing attributes in process `syz.4.4583'. [ 371.349301][T22449] bond7: Invalid ad_actor_system MAC address. [ 371.370820][T22449] bond7: option ad_actor_system: invalid value (1) [ 371.391731][T22449] bond7 (unregistering): Released all slaves [ 371.599719][T22466] netlink: 'syz.7.4588': attribute type 1 has an invalid length. [ 371.662171][T22466] 8021q: adding VLAN 0 to HW filter on device bond2 [ 371.834709][T22478] A link change request failed with some changes committed already. Interface wg2 may have been left with an inconsistent configuration, please check. [ 371.928559][T22484] netlink: 8 bytes leftover after parsing attributes in process `syz.7.4593'. [ 371.989081][T11034] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 372.025923][T11034] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 372.077578][T22488] syzkaller1: entered promiscuous mode [ 372.083997][T22484] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 372.092371][T22488] syzkaller1: entered allmulticast mode [ 372.207290][ T5624] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 372.312391][T22503] netlink: 4 bytes leftover after parsing attributes in process `syz.7.4598'. [ 372.338463][T22503] netlink: 4 bytes leftover after parsing attributes in process `syz.7.4598'. [ 372.347697][ T683] netdevsim netdevsim7 netdevsim0: set [0, 0] type 1 family 0 port 8472 - 0 [ 372.360567][ T683] netdevsim netdevsim7 netdevsim1: set [0, 0] type 1 family 0 port 8472 - 0 [ 372.377878][ T683] netdevsim netdevsim7 netdevsim2: set [0, 0] type 1 family 0 port 8472 - 0 [ 372.446039][ T683] netdevsim netdevsim7 netdevsim3: set [0, 0] type 1 family 0 port 8472 - 0 [ 372.601871][T22517] netlink: 'syz.3.4604': attribute type 12 has an invalid length. [ 372.664421][T22517] bond7: option primary_reselect: invalid value (255) [ 372.682867][T22517] bond7 (unregistering): Released all slaves [ 372.782048][T22528] netlink: 'syz.7.4608': attribute type 1 has an invalid length. [ 372.800502][T22528] netlink: 'syz.7.4608': attribute type 1 has an invalid length. [ 373.221186][T22553] netlink: 'syz.6.4612': attribute type 39 has an invalid length. [ 373.246109][ T46] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 373.651370][ T5739] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 373.661235][ T1231] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 373.680381][ T9] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 373.707339][T22574] IPVS: Error connecting to the multicast addr [ 373.710924][T11065] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 373.728552][ T9] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 373.740797][ T5739] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 374.089051][T22599] netlink: 'syz.4.4628': attribute type 21 has an invalid length. [ 374.199624][T22607] netlink: 'syz.4.4630': attribute type 13 has an invalid length. [ 374.404552][T22617] syzkaller0: default qdisc (pfifo_fast) fail, fallback to noqueue [ 374.477697][T22617] syzkaller0: entered promiscuous mode [ 374.491380][T22610] tipc: Started in network mode [ 374.497387][T22610] tipc: Node identity e6da0453fdd8, cluster identity 4711 [ 374.504822][T22610] tipc: Enabled bearer , priority 0 [ 374.512936][T22614] syzkaller0: entered promiscuous mode [ 374.521512][T22614] syzkaller0: entered allmulticast mode [ 374.532469][T22610] sch_tbf: burst 255 is lower than device syzkaller0 mtu (1514) ! [ 374.573006][T22609] tipc: Resetting bearer [ 374.612556][T22609] tipc: Disabling bearer [ 374.880282][T22647] xt_hashlimit: size too large, truncated to 1048576 [ 374.902816][T22648] __nla_validate_parse: 24 callbacks suppressed [ 374.902838][T22648] netlink: 24 bytes leftover after parsing attributes in process `syz.0.4638'. [ 375.558796][T22689] tls_set_device_offload_rx: netdev not found [ 375.727304][ T4937] Bluetooth: hci6: command 0x0406 tx timeout [ 375.770938][T22698] netlink: 16 bytes leftover after parsing attributes in process `syz.0.4658'. [ 375.950611][T22707] bond5: entered promiscuous mode [ 375.950614][T22710] netlink: 8 bytes leftover after parsing attributes in process `syz.6.4659'. [ 376.018674][T22710] xt_hl: Unknown Hop Limit match mode: 206 [ 376.366400][ T46] net_ratelimit: 3 callbacks suppressed [ 376.366419][ T46] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 376.616570][T22760] netlink: 24 bytes leftover after parsing attributes in process `syz.0.4670'. [ 376.678811][T22761] netlink: 32 bytes leftover after parsing attributes in process `syz.0.4670'. [ 376.693098][ T9] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 376.704593][T22764] netlink: 'syz.6.4669': attribute type 1 has an invalid length. [ 376.733831][T22761] netlink: 32 bytes leftover after parsing attributes in process `syz.0.4670'. [ 376.784667][T22764] 8021q: adding VLAN 0 to HW filter on device bond3 [ 376.803467][T22772] netlink: 8 bytes leftover after parsing attributes in process `syz.4.4672'. [ 376.838816][T22763] bond3: (slave veth0_to_bond): making interface the new active one [ 376.863009][T22763] bond3: (slave veth0_to_bond): Enslaving as an active interface with an up link [ 376.968102][T22764] macvlan3: entered promiscuous mode [ 376.974046][T22764] macvlan3: entered allmulticast mode [ 376.983456][T22764] bond3: entered promiscuous mode [ 377.004269][T22764] veth0_to_bond: entered promiscuous mode [ 377.014334][T22764] 8021q: adding VLAN 0 to HW filter on device macvlan3 [ 377.026971][T22764] bond3: (slave macvlan3): the slave hw address is in use by the bond; couldn't find a slave with a free hw address to give it (this should not have happened) [ 377.045759][T22764] bond3: left promiscuous mode [ 377.051102][T22764] veth0_to_bond: left promiscuous mode [ 377.182899][T22786] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 377.202776][T22792] 8021q: adding VLAN 0 to HW filter on device bond7 [ 377.212872][T22792] bridge0: port 3(bond7) entered blocking state [ 377.228061][T22792] bridge0: port 3(bond7) entered disabled state [ 377.243767][T22792] bond7: entered allmulticast mode [ 377.272616][T22792] bond7: entered promiscuous mode [ 377.283840][T22792] bridge0: port 3(bond7) entered blocking state [ 377.290324][T22792] bridge0: port 3(bond7) entered forwarding state [ 377.328750][T11033] bridge0: port 3(bond7) entered disabled state [ 377.354674][T22806] netlink: 'syz.7.4680': attribute type 1 has an invalid length. [ 377.371811][T22806] netlink: 'syz.7.4680': attribute type 2 has an invalid length. [ 377.405575][ T24] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 377.684146][T22836] netlink: 'syz.3.4688': attribute type 21 has an invalid length. [ 377.739025][T22836] bond8: option lacp_rate: mode dependency failed, not supported in mode broadcast(3) [ 377.817019][T22836] bond8 (unregistering): Released all slaves [ 378.016016][T22854] netlink: 8 bytes leftover after parsing attributes in process `syz.7.4693'. [ 378.060507][T22854] netlink: 8 bytes leftover after parsing attributes in process `syz.7.4693'. [ 378.348894][T22868] sctp: [Deprecated]: syz.6.4697 (pid 22868) Use of struct sctp_assoc_value in delayed_ack socket option. [ 378.348894][T22868] Use struct sctp_sack_info instead [ 378.400616][T22879] erspan0: left promiscuous mode [ 378.420024][T22879] ip_vti0: left promiscuous mode [ 378.448021][ T46] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 378.628361][T22879] A link change request failed with some changes committed already. Interface bridge_slave_1 may have been left with an inconsistent configuration, please check. [ 378.766560][ C1] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 378.821598][T22902] netlink: 12 bytes leftover after parsing attributes in process `syz.0.4705'. [ 378.848630][ T9388] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 378.859503][ T46] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 378.874069][ T1231] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 379.152377][T22925] syzkaller0: entered promiscuous mode [ 379.198024][T22925] syzkaller0: entered allmulticast mode [ 379.479151][T22945] netlink: 'syz.6.4717': attribute type 178 has an invalid length. [ 379.756539][T22965] netlink: 'syz.6.4723': attribute type 1 has an invalid length. [ 379.910385][T22951] dvmrp0: entered allmulticast mode [ 379.954066][T22979] netlink: 12 bytes leftover after parsing attributes in process `syz.3.4724'. [ 379.972246][T22978] netlink: 44 bytes leftover after parsing attributes in process `syz.6.4725'. [ 379.985046][T22979] netlink: 60 bytes leftover after parsing attributes in process `syz.3.4724'. [ 380.027603][T22979] netlink: 12 bytes leftover after parsing attributes in process `syz.3.4724'. [ 380.064366][T22979] netlink: 60 bytes leftover after parsing attributes in process `syz.3.4724'. [ 380.088024][T22979] netlink: 104 bytes leftover after parsing attributes in process `syz.3.4724'. [ 380.521763][T23015] netlink: 12 bytes leftover after parsing attributes in process `syz.3.4735'. [ 380.640526][T23023] netlink: 'syz.7.4738': attribute type 1 has an invalid length. [ 380.760708][T23015] bond8: (slave bridge4): Enslaving as an active interface with an up link [ 381.046705][T23043] netlink: 'syz.3.4743': attribute type 1 has an invalid length. [ 381.100245][T23045] netlink: 8 bytes leftover after parsing attributes in process `syz.0.4744'. [ 381.114370][T23045] netlink: 24 bytes leftover after parsing attributes in process `syz.0.4744'. [ 381.179104][T23043] bond9: entered promiscuous mode [ 381.210001][T23043] 8021q: adding VLAN 0 to HW filter on device bond9 [ 381.304047][T23046] macvtap1: entered allmulticast mode [ 381.443228][T23072] net_ratelimit: 4 callbacks suppressed [ 381.443249][T23072] openvswitch: netlink: IPv4 tun info is not correct [ 381.622894][ T5624] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 381.797272][T23063] bridge0: port 2(bridge_slave_1) entered disabled state [ 381.829110][T23063] team0: left promiscuous mode [ 381.834225][T23063] team_slave_1: left promiscuous mode [ 381.841566][T23063] geneve1: left promiscuous mode [ 381.848412][T23063] dummy0: left promiscuous mode [ 381.918782][T23063] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 381.931165][T23063] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 381.976330][T23063] macvlan0: left promiscuous mode [ 381.998403][T23063] mac80211_hwsim hwsim24 wlan0: left promiscuous mode [ 382.012194][T23063] bridge1: left promiscuous mode [ 382.019035][T23063] bridge1: left allmulticast mode [ 382.027064][T23063] bond1: left promiscuous mode [ 382.044465][T23063] bond2: left promiscuous mode [ 382.056513][T23063] veth0_to_bond: left promiscuous mode [ 382.062641][T23063] bond2: left allmulticast mode [ 382.074226][T23063] veth0_to_bond: left allmulticast mode [ 382.092019][T23063] bond4: left promiscuous mode [ 382.098176][T23063] vti0: left promiscuous mode [ 382.121924][T23063] h: left promiscuous mode [ 382.130687][T23063] vlan0: left allmulticast mode [ 382.137077][T23063] veth0_vlan: left allmulticast mode [ 382.143104][T23063] vlan0: left promiscuous mode [ 382.149750][T23063] macvtap1: left promiscuous mode [ 382.156313][T23063] macvtap1: left allmulticast mode [ 382.206946][T11033] netdevsim netdevsim4 eth0: unset [0, 0] type 1 family 0 port 8472 - 0 [ 382.252395][T11033] netdevsim netdevsim4 eth0: unset [1, 0] type 2 family 0 port 6081 - 0 [ 382.311752][T11033] netdevsim netdevsim4 eth1: unset [0, 0] type 1 family 0 port 8472 - 0 [ 382.351087][T11033] netdevsim netdevsim4 eth1: unset [1, 0] type 2 family 0 port 6081 - 0 [ 382.377002][T23088] lo: Caught tx_queue_len zero misconfig [ 382.397910][T11033] netdevsim netdevsim4 eth2: unset [0, 0] type 1 family 0 port 8472 - 0 [ 382.453898][T11033] netdevsim netdevsim4 eth2: unset [1, 0] type 2 family 0 port 6081 - 0 [ 382.472795][T23096] netlink: 56 bytes leftover after parsing attributes in process `syz.6.4752'. [ 382.490935][T11033] netdevsim netdevsim4 eth3: unset [0, 0] type 1 family 0 port 8472 - 0 [ 382.503922][T11033] netdevsim netdevsim4 eth3: unset [1, 0] type 2 family 0 port 6081 - 0 [ 382.515786][ C1] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 382.524683][ C1] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 382.541854][T23097] 8021q: VLANs not supported on ip_vti0 [ 382.546713][ T9390] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 382.560341][ T9387] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 382.593859][ T9390] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 382.609466][ T9387] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 382.638004][ T9387] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 382.659247][ T9387] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 382.750713][T23099] bridge0: port 2(bridge_slave_1) entered disabled state [ 382.758367][T23099] bridge0: port 1(bridge_slave_0) entered disabled state [ 382.904491][T23099] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 382.921548][T23099] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 382.974463][T23099] 0·: left allmulticast mode [ 382.987102][T23099] hsr_slave_0: left allmulticast mode [ 382.992932][T23099] hsr_slave_1: left allmulticast mode [ 383.119175][T23096] bond4 (unregistering): Released all slaves [ 383.158245][T23109] netlink: 'syz.4.4759': attribute type 9 has an invalid length. [ 383.192328][T11033] netdevsim netdevsim7 netdevsim0: unset [0, 0] type 1 family 0 port 8472 - 0 [ 383.218814][T11033] netdevsim netdevsim7 netdevsim0: unset [1, 0] type 2 family 0 port 6081 - 0 [ 383.242656][T11033] netdevsim netdevsim7 netdevsim1: unset [0, 0] type 1 family 0 port 8472 - 0 [ 383.289061][T11033] netdevsim netdevsim7 netdevsim1: unset [1, 0] type 2 family 0 port 6081 - 0 [ 383.354296][ T9390] netdevsim netdevsim7 netdevsim2: unset [0, 0] type 1 family 0 port 8472 - 0 [ 383.383487][ T9390] netdevsim netdevsim7 netdevsim2: unset [1, 0] type 2 family 0 port 6081 - 0 [ 383.432368][ T9390] netdevsim netdevsim7 netdevsim3: unset [0, 0] type 1 family 0 port 8472 - 0 [ 383.442524][T23131] netlink: 'syz.4.4766': attribute type 1 has an invalid length. [ 383.488688][ T9390] netdevsim netdevsim7 netdevsim3: unset [1, 0] type 2 family 0 port 6081 - 0 [ 383.664178][T23142] netlink: 'syz.0.4769': attribute type 2 has an invalid length. [ 383.710296][T23144] netlink: 'syz.0.4769': attribute type 2 has an invalid length. [ 383.749733][T23142] netlink: 'syz.0.4769': attribute type 8 has an invalid length. [ 383.773632][T23144] netlink: 'syz.0.4769': attribute type 8 has an invalid length. [ 384.331039][T23167] netlink: 'syz.4.4777': attribute type 1 has an invalid length. [ 384.364579][T23167] syzkaller0: entered promiscuous mode [ 384.386423][T23167] syzkaller0: entered allmulticast mode [ 384.416432][T23174] sctp: [Deprecated]: syz.7.4781 (pid 23174) Use of struct sctp_assoc_value in delayed_ack socket option. [ 384.416432][T23174] Use struct sctp_sack_info instead [ 384.673113][T23187] smbdirect: ib_dev[syz1]: added: RNIC max_fast_reg_page_list_len=256 device_cap_flags=0x200000 kernel_cap_flags=0x10 page_size_cap=0x1000 [ 384.733538][T23187] smbdirect: ib_dev[syz1]: num_ports=1 max_qp_rd_atom=128 max_qp_init_rd_atom=128 max_sgl_rd=0 max_sge_rd=1 max_cqe=3276800 max_qp_wr=32768 max_send_sge=6 max_recv_sge=6 [ 384.802840][T23187] smbdirect: ib_dev[syz1]PORT[1]: iwarp=1 ib=0 roce=0 v1=0 v2=0 core_cap_flags=0x400008 [ 384.896826][T23187] infiniband syz1: RDMA CMA: cma_listen_on_dev, error -98 [ 384.990750][T23201] gre2: entered promiscuous mode [ 385.005843][T23201] gre2: entered allmulticast mode [ 385.186894][T23215] netlink: 'syz.6.4789': attribute type 13 has an invalid length. [ 385.193503][T23214] tipc: Enabling of bearer rejected, failed to enable media [ 385.221035][T23215] netlink: 'syz.6.4789': attribute type 5 has an invalid length. [ 385.282478][T23213] x_tables: (null)_tables: NFQUEUE.1 target: invalid size 8 (kernel) != (user) 16 [ 385.393012][T23222] __nla_validate_parse: 9 callbacks suppressed [ 385.393032][T23222] netlink: 12 bytes leftover after parsing attributes in process `syz.3.4796'. [ 385.426868][T23222] netlink: 8 bytes leftover after parsing attributes in process `syz.3.4796'. [ 385.440111][T23226] ip6tnl0: Caught tx_queue_len zero misconfig [ 385.712664][T23238] syzkaller0: entered promiscuous mode [ 385.719189][T23238] syzkaller0: entered allmulticast mode [ 385.736060][T23237] tipc: Enabled bearer , priority 0 [ 385.887680][T23237] tipc: Resetting bearer [ 385.896884][T23237] tipc: Disabling bearer [ 385.965649][ T4937] Bluetooth: hci2: command 0x0406 tx timeout [ 386.018534][T23256] netlink: 'syz.4.4808': attribute type 1 has an invalid length. [ 386.029486][T23256] netlink: 224 bytes leftover after parsing attributes in process `syz.4.4808'. [ 386.238307][T23272] bond0: Caught tx_queue_len zero misconfig [ 386.419100][T23284] bond10: option lacp_rate: mode dependency failed, not supported in mode broadcast(3) [ 386.433634][T23284] bond10 (unregistering): Released all slaves [ 386.539815][T23289] netlink: 28 bytes leftover after parsing attributes in process `syz.7.4814'. [ 386.577803][T23295] netlink: 24 bytes leftover after parsing attributes in process `syz.4.4817'. [ 386.630208][T23300] netlink: 20 bytes leftover after parsing attributes in process `syz.4.4817'. [ 386.847334][ T5624] net_ratelimit: 43 callbacks suppressed [ 386.847355][ T5624] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 386.927016][ T9] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 387.063553][T23314] syzkaller0: entered promiscuous mode [ 387.082952][T23314] syzkaller0: entered allmulticast mode [ 387.385783][T23335] netlink: 8 bytes leftover after parsing attributes in process `syz.3.4824'. [ 387.705810][ C0] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 387.725532][ C1] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 387.733718][ C1] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 387.741845][ C1] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 387.749945][ C1] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 387.758292][ C1] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 387.766418][ C1] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 387.774647][ C1] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 388.136775][T23374] netlink: 36 bytes leftover after parsing attributes in process `syz.7.4833'. [ 388.193956][T23380] netlink: 40 bytes leftover after parsing attributes in process `syz.7.4833'. [ 388.786858][T23413] netlink: 16 bytes leftover after parsing attributes in process `syz.6.4844'. [ 388.854241][T23425] xt_addrtype: ipv6 does not support BROADCAST matching [ 392.046058][T18253] net_ratelimit: 14 callbacks suppressed [ 392.046080][T18253] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 392.164757][T23439] nci: __nci_request: wait_for_completion_interruptible_timeout failed -512 [ 392.369331][T23506] __nla_validate_parse: 3 callbacks suppressed [ 392.369376][T23506] netlink: 24 bytes leftover after parsing attributes in process `syz.7.4867'. [ 392.458970][T23508] macvlan0: entered promiscuous mode [ 392.689040][T23521] workqueue: Failed to create a rescuer kthread for wq "nfc2_nci_rx_wq": -EINTR [ 392.765130][ C0] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 392.784196][ C0] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 392.794696][ C0] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 392.803714][ C0] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 392.813826][ C0] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 392.824210][ C0] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 392.833318][ C0] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 392.842496][ C0] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 392.851511][ C0] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 393.007153][T23533] netlink: 76 bytes leftover after parsing attributes in process `syz.0.4873'. [ 393.053421][T23535] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 393.084755][T23500] lo speed is unknown, defaulting to 1000 [ 393.100917][T23539] netlink: 12 bytes leftover after parsing attributes in process `syz.7.4875'. [ 393.101647][T23547] validate_nla: 5 callbacks suppressed [ 393.101693][T23547] netlink: 'syz.3.4877': attribute type 1 has an invalid length. [ 393.151780][T23535] netlink: 52 bytes leftover after parsing attributes in process `syz.7.4875'. [ 393.166125][T23547] bond10: entered promiscuous mode [ 393.171915][T23547] 8021q: adding VLAN 0 to HW filter on device bond10 [ 393.222141][T23535] gretap0: entered promiscuous mode [ 393.231436][T23535] netlink: 8 bytes leftover after parsing attributes in process `syz.7.4875'. [ 393.359399][T23547] 8021q: adding VLAN 0 to HW filter on device bond10 [ 393.366831][T23547] bond10: (slave ip6gre1): The slave device specified does not support setting the MAC address [ 393.378389][T23547] bond10: (slave ip6gre1): Setting fail_over_mac to active for active-backup mode [ 393.391387][T23547] bond10: (slave ip6gre1): making interface the new active one [ 393.399142][T23547] ip6gre1: entered promiscuous mode [ 393.407460][T23547] bond10: (slave ip6gre1): Enslaving as an active interface with an up link [ 393.865542][T23582] Bluetooth: hci0: Opcode 0x0c1a failed: -22 [ 393.880249][T23584] netlink: 72 bytes leftover after parsing attributes in process `syz.7.4888'. [ 393.927780][T23584] netlink: 72 bytes leftover after parsing attributes in process `syz.7.4888'. [ 394.076291][T23594] netlink: 'syz.0.4889': attribute type 3 has an invalid length. [ 394.091906][T23587] netlink: 'syz.4.4890': attribute type 11 has an invalid length. [ 394.369477][T23603] sch_tbf: burst 19872 is lower than device lo mtu (11337746) ! [ 394.714163][T23629] netlink: 'syz.6.4901': attribute type 1 has an invalid length. [ 394.722416][T23630] netlink: 'syz.3.4902': attribute type 1 has an invalid length. [ 394.736210][T23629] netlink: 228 bytes leftover after parsing attributes in process `syz.6.4901'. [ 394.745456][T23630] netlink: 224 bytes leftover after parsing attributes in process `syz.3.4902'. [ 394.756622][T23629] netlink: 8 bytes leftover after parsing attributes in process `syz.6.4901'. [ 395.273546][T23649] nci: __nci_request: wait_for_completion_interruptible_timeout failed -512 [ 395.360733][T23675] syz.6.4912: vmalloc error: size 8589938688, exceeds total pages, mode:0xdc0(GFP_KERNEL|__GFP_ZERO), nodemask=(null),cpuset=/,mems_allowed=0-1 [ 395.377665][T23675] CPU: 0 UID: 0 PID: 23675 Comm: syz.6.4912 Not tainted syzkaller #0 PREEMPT(full) [ 395.377691][T23675] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/09/2026 [ 395.377702][T23675] Call Trace: [ 395.377710][T23675] [ 395.377718][T23675] dump_stack_lvl+0xe8/0x150 [ 395.377746][T23675] warn_alloc+0x249/0x340 [ 395.377768][T23675] ? __pfx_stack_trace_save+0x10/0x10 [ 395.377825][T23675] ? __pfx_warn_alloc+0x10/0x10 [ 395.377853][T23675] ? __kasan_kmalloc+0x93/0xb0 [ 395.377893][T23675] ? __kmalloc_cache_noprof+0x318/0x660 [ 395.377917][T23675] ? xskq_create+0x56/0x170 [ 395.377998][T23675] ? xsk_init_queue+0x8a/0xe0 [ 395.378018][T23675] ? xsk_setsockopt+0x52a/0x960 [ 395.378037][T23675] ? do_sock_setsockopt+0x17c/0x1b0 [ 395.378063][T23675] ? __x64_sys_setsockopt+0x13d/0x1b0 [ 395.378100][T23675] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 395.378124][T23675] __vmalloc_node_range_noprof+0x12c/0x1730 [ 395.378166][T23675] ? __pfx___vmalloc_node_range_noprof+0x10/0x10 [ 395.378195][T23675] ? __kasan_kmalloc+0x93/0xb0 [ 395.378220][T23675] vmalloc_user_noprof+0xad/0xe0 [ 395.378244][T23675] ? xskq_create+0xbf/0x170 [ 395.378267][T23675] xskq_create+0xbf/0x170 [ 395.378292][T23675] xsk_init_queue+0x8a/0xe0 [ 395.378318][T23675] xsk_setsockopt+0x52a/0x960 [ 395.378342][T23675] ? __pfx_xsk_setsockopt+0x10/0x10 [ 395.378365][T23675] ? __pfx_aa_sk_perm+0x10/0x10 [ 395.378395][T23675] ? lock_release+0x4b/0x3c0 [ 395.378420][T23675] ? do_raw_spin_unlock+0xf5/0x210 [ 395.378440][T23675] ? aa_sock_opt_perm+0xff/0x1a0 [ 395.378460][T23675] ? bpf_lsm_socket_setsockopt+0x9/0x20 [ 395.378485][T23675] ? __pfx_xsk_setsockopt+0x10/0x10 [ 395.378507][T23675] do_sock_setsockopt+0x17c/0x1b0 [ 395.378535][T23675] __x64_sys_setsockopt+0x13d/0x1b0 [ 395.378563][T23675] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 395.378581][T23675] do_syscall_64+0x174/0x580 [ 395.378608][T23675] ? clear_bhb_loop+0x40/0x90 [ 395.378630][T23675] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 395.378648][T23675] RIP: 0033:0x7f4fe1f9ce59 [ 395.378665][T23675] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 395.378681][T23675] RSP: 002b:00007f4fe2f1b028 EFLAGS: 00000246 ORIG_RAX: 0000000000000036 [ 395.378704][T23675] RAX: ffffffffffffffda RBX: 00007f4fe2215fa0 RCX: 00007f4fe1f9ce59 [ 395.378719][T23675] RDX: 0000000000000006 RSI: 000000000000011b RDI: 0000000000000003 [ 395.378732][T23675] RBP: 00007f4fe2032e6f R08: 0000000000000004 R09: 0000000000000000 [ 395.378744][T23675] R10: 0000200000000000 R11: 0000000000000246 R12: 0000000000000000 [ 395.378756][T23675] R13: 00007f4fe2216038 R14: 00007f4fe2215fa0 R15: 00007ffe49702ce8 [ 395.378780][T23675] [ 395.378787][T23675] Mem-Info: [ 395.692781][T23675] active_anon:7056 inactive_anon:0 isolated_anon:0 [ 395.692781][T23675] active_file:2889 inactive_file:40119 isolated_file:0 [ 395.692781][T23675] unevictable:3818 dirty:34 writeback:0 [ 395.692781][T23675] slab_reclaimable:12248 slab_unreclaimable:122849 [ 395.692781][T23675] mapped:47862 shmem:4332 pagetables:1601 [ 395.692781][T23675] sec_pagetables:0 bounce:0 [ 395.692781][T23675] kernel_misc_reclaimable:0 [ 395.692781][T23675] free:1256609 free_pcp:9596 free_cma:0 [ 395.751172][T23675] Node 0 active_anon:28224kB inactive_anon:0kB active_file:11556kB inactive_file:160280kB unevictable:13736kB isolated(anon):0kB isolated(file):0kB mapped:191448kB dirty:132kB writeback:0kB shmem:15792kB shmem_thp:0kB shmem_pmdmapped:0kB anon_thp:0kB kernel_stack:17456kB pagetables:6292kB sec_pagetables:0kB all_unreclaimable? no Balloon:0kB gpu_active:0kB gpu_reclaim:0kB [ 395.789767][T23675] Node 1 active_anon:0kB inactive_anon:0kB active_file:0kB inactive_file:196kB unevictable:1536kB isolated(anon):0kB isolated(file):0kB mapped:0kB dirty:4kB writeback:0kB shmem:1536kB shmem_thp:0kB shmem_pmdmapped:0kB anon_thp:0kB kernel_stack:32kB pagetables:112kB sec_pagetables:0kB all_unreclaimable? no Balloon:0kB gpu_active:0kB gpu_reclaim:0kB [ 395.826444][T23675] Node 0 DMA free:15360kB boost:0kB min:208kB low:260kB high:312kB reserved_highatomic:0KB free_highatomic:0KB active_anon:0kB inactive_anon:0kB active_file:0kB inactive_file:0kB unevictable:0kB writepending:0kB zspages:0kB present:15992kB managed:15360kB mlocked:0kB bounce:0kB free_pcp:0kB local_pcp:0kB free_cma:0kB [ 395.859019][T23675] lowmem_reserve[]: 0 2492 2493 2493 2493 [ 395.865064][T23675] Node 0 DMA32 free:1058280kB boost:0kB min:34184kB low:42728kB high:51272kB reserved_highatomic:0KB free_highatomic:0KB active_anon:28224kB inactive_anon:0kB active_file:11556kB inactive_file:160280kB unevictable:13736kB writepending:132kB zspages:0kB present:3129332kB managed:2552584kB mlocked:12148kB bounce:0kB free_pcp:38232kB local_pcp:15412kB free_cma:0kB [ 395.919954][T23675] lowmem_reserve[]: 0 0 0 0 0 [ 395.925621][T23675] Node 0 Normal free:0kB boost:0kB min:8kB low:8kB high:8kB reserved_highatomic:0KB free_highatomic:0KB active_anon:0kB inactive_anon:0kB active_file:0kB inactive_file:0kB unevictable:0kB writepending:0kB zspages:0kB present:1048580kB managed:664kB mlocked:0kB bounce:0kB free_pcp:4kB local_pcp:0kB free_cma:0kB [ 395.956142][T23675] lowmem_reserve[]: 0 0 0 0 0 [ 395.961009][T23675] Node 1 Normal free:3952496kB boost:0kB min:55704kB low:69628kB high:83552kB reserved_highatomic:0KB free_highatomic:0KB active_anon:0kB inactive_anon:0kB active_file:0kB inactive_file:196kB unevictable:1536kB writepending:4kB zspages:0kB present:4194300kB managed:4111100kB mlocked:0kB bounce:0kB free_pcp:1004kB local_pcp:0kB free_cma:0kB [ 395.996128][T23675] lowmem_reserve[]: 0 0 0 0 0 [ 396.001293][T23675] Node 0 DMA: 0*4kB 0*8kB 0*16kB 0*32kB 0*64kB 0*128kB 0*256kB 0*512kB 1*1024kB (U) 1*2048kB (M) 3*4096kB (M) = 15360kB [ 396.014218][T23675] Node 0 DMA32: 5987*4kB (UM) 4982*8kB (UM) 3098*16kB (UME) 173*32kB (UME) 58*64kB (UM) 197*128kB (UM) 404*256kB (UM) 216*512kB (UME) 136*1024kB (UM) 60*2048kB (UME) 106*4096kB (UM) = 1058172kB [ 396.062255][T23675] Node 0 Normal: 0*4kB 0*8kB 0*16kB 0*32kB 0*64kB 0*128kB 0*256kB 0*512kB 0*1024kB 0*2048kB 0*4096kB = 0kB [ 396.078819][T23675] Node 1 Normal: 1*4kB (M) 2*8kB (UM) 1*16kB (M) 2*32kB (UM) 1*64kB (M) 2*128kB (UM) 2*256kB (M) 2*512kB (M) 2*1024kB (UM) 0*2048kB 964*4096kB (UM) = 3952548kB [ 396.096751][T23675] Node 0 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=1048576kB [ 396.108015][T23675] Node 0 hugepages_total=2 hugepages_free=2 hugepages_surp=0 hugepages_size=2048kB [ 396.117976][T23675] Node 1 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=1048576kB [ 396.139274][T23675] Node 1 hugepages_total=2 hugepages_free=2 hugepages_surp=0 hugepages_size=2048kB [ 396.156449][T23675] 47371 total pagecache pages [ 396.161294][T23675] 0 pages in swap cache [ 396.166475][T23675] Free swap = 124996kB [ 396.170941][T23675] Total swap = 124996kB [ 396.176062][T23675] 2097051 pages RAM [ 396.179988][T23675] 0 pages HighMem/MovableOnly [ 396.185503][T23675] 427124 pages reserved [ 396.189768][T23675] 0 pages cma reserved [ 396.321542][T23702] siw: device registration error -23 [ 396.525279][ T4937] Bluetooth: hci7: command 0x0405 tx timeout [ 397.246598][T23536] net_ratelimit: 17 callbacks suppressed [ 397.246627][T23536] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 397.565595][T23619] nci: __nci_request: wait_for_completion_interruptible_timeout failed -512 [ 397.575623][T23663] __nla_validate_parse: 4 callbacks suppressed [ 397.575643][T23663] netlink: 12 bytes leftover after parsing attributes in process `syz.3.4911'. [ 397.794007][T23710] bridge0: port 2(bridge_slave_1) entered disabled state [ 397.801599][T23710] bridge0: port 1(bridge_slave_0) entered disabled state [ 397.818564][T23711] xt_limit: Overflow, try lower: 271964/0 [ 397.864986][ C1] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 397.873255][ C1] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 397.881487][ C1] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 397.889775][ C1] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 397.897885][ C1] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 397.906093][ C1] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 397.914260][ C1] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 397.922542][ C1] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 397.930638][ C1] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 398.157167][T23722] netlink: 8 bytes leftover after parsing attributes in process `syz.7.4928'. [ 398.465272][T23750] netlink: 12 bytes leftover after parsing attributes in process `syz.4.4933'. [ 398.647146][T23722] bond3: option lacp_strict: mode dependency failed, not supported in mode balance-rr(0) [ 398.660829][T23722] bond3 (unregistering): Released all slaves [ 399.206305][T23760] can: request_module (can-proto-0) failed. [ 399.548172][T23781] netlink: 'syz.3.4942': attribute type 1 has an invalid length. [ 399.617327][T23781] 8021q: adding VLAN 0 to HW filter on device bond11 [ 399.643009][T23783] bond11: (slave veth0_to_bond): making interface the new active one [ 399.669131][T23783] bond11: (slave veth0_to_bond): Enslaving as an active interface with an up link [ 399.688856][T23781] netlink: 28 bytes leftover after parsing attributes in process `syz.3.4942'. [ 399.713107][T23783] netlink: 'syz.3.4942': attribute type 1 has an invalid length. [ 400.273224][T23809] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 400.370327][T23815] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 400.466584][T23809] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 400.531584][T23827] netlink: 'syz.3.4956': attribute type 5 has an invalid length. [ 400.552435][T23827] IPv6: RTM_NEWROUTE with no NLM_F_CREATE or NLM_F_REPLACE [ 400.559770][T23827] IPv6: NLM_F_CREATE should be set when creating new route [ 400.876988][T23841] netlink: 'syz.7.4959': attribute type 11 has an invalid length. [ 401.365912][T23882] netlink: 256 bytes leftover after parsing attributes in process `syz.3.4967'. [ 401.794525][T23912] netlink: 256 bytes leftover after parsing attributes in process `syz.0.4974'. [ 401.865333][T23916] netlink: 8 bytes leftover after parsing attributes in process `syz.4.4976'. [ 402.295309][T23930] syzkaller1: entered promiscuous mode [ 402.326351][T23930] syzkaller1: entered allmulticast mode [ 402.352839][T23930] PF_CAN: dropped non conform CAN skbuff: dev type 65534, len 324 [ 402.368291][T23948] netlink: 'syz.0.4985': attribute type 1 has an invalid length. [ 402.449042][ T5726] net_ratelimit: 13 callbacks suppressed [ 402.449063][ T5726] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 402.516635][T23954] bond7: (slave ip6gretap0): Enslaving as a backup interface with an up link [ 402.566662][T23954] netlink: 28 bytes leftover after parsing attributes in process `syz.0.4985'. [ 402.579438][T23948] veth13: entered promiscuous mode [ 402.599394][T23948] bond7: (slave veth13): Enslaving as a backup interface with a down link [ 402.610440][ T683] bond7: Warning: No 802.3ad response from the link partner for any adapters in the bond [ 402.612371][T23969] netlink: 24 bytes leftover after parsing attributes in process `syz.3.4988'. [ 402.626245][T23954] 8021q: adding VLAN 0 to HW filter on device bond7 [ 402.640727][T23966] netlink: 24 bytes leftover after parsing attributes in process `syz.4.4987'. [ 402.735659][ T9387] bond7: Warning: No 802.3ad response from the link partner for any adapters in the bond [ 402.945768][ C0] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 402.945788][T23992] veth0_macvtap: Caught tx_queue_len zero misconfig [ 402.962317][ C0] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 402.974397][ C0] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 402.988432][ C0] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 402.997474][ C0] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 403.006400][ C0] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 403.016413][ C0] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 403.233256][T24007] netlink: 8 bytes leftover after parsing attributes in process `syz.4.4995'. [ 403.399127][T24013] Cannot find add_set index 2 as target [ 403.407897][T24013] netlink: 256 bytes leftover after parsing attributes in process `syz.4.4996'. [ 405.321687][T23949] nci: __nci_request: wait_for_completion_interruptible_timeout failed -512 [ 405.495438][T24020] netlink: 220 bytes leftover after parsing attributes in process `syz.4.4998'. [ 405.638982][T24026] tap0: tun_chr_ioctl cmd 1074025672 [ 405.653675][T24026] tap0: ignored: set checksum disabled [ 405.831781][T24041] netlink: 20 bytes leftover after parsing attributes in process `syz.6.5006'. [ 405.901357][T24044] netlink: 'syz.0.5007': attribute type 1 has an invalid length. [ 405.973560][T24054] netlink: 216 bytes leftover after parsing attributes in process `syz.7.5011'. [ 405.986734][T24054] netlink: 8 bytes leftover after parsing attributes in process `syz.7.5011'. [ 406.145957][T24052] bond8: (slave geneve2): making interface the new active one [ 406.156143][T24052] bond8: (slave geneve2): Enslaving as an active interface with an up link [ 406.219382][ T9387] netdevsim netdevsim0 netdevsim0: set [1, 1] type 2 family 0 port 20004 - 0 [ 406.242089][T24049] netlink: 92 bytes leftover after parsing attributes in process `syz.3.5008'. [ 406.269081][ T9387] netdevsim netdevsim0 netdevsim1: set [1, 1] type 2 family 0 port 20004 - 0 [ 406.312678][ T9387] netdevsim netdevsim0 netdevsim2: set [1, 1] type 2 family 0 port 20004 - 0 [ 406.365699][ T9387] netdevsim netdevsim0 netdevsim3: set [1, 1] type 2 family 0 port 20004 - 0 [ 406.489934][T24082] netlink: 4 bytes leftover after parsing attributes in process `syz.0.5020'. [ 406.548125][T24077] netlink: 'syz.6.5017': attribute type 1 has an invalid length. [ 406.591501][T24088] syz_tun: entered allmulticast mode [ 406.703466][T24101] syzkaller0: entered promiscuous mode [ 406.719877][T24101] syzkaller0: entered allmulticast mode [ 406.732868][T24081] syz_tun: left allmulticast mode [ 406.820006][T24109] netlink: 'syz.4.5026': attribute type 1 has an invalid length. [ 407.181143][T24135] tipc: Enabling of bearer rejected, failed to enable media [ 407.320777][T24147] can: request_module (can-proto-0) failed. [ 407.394346][T24159] tcf_pedit_act: 7 callbacks suppressed [ 407.394435][T24159] tc action pedit 'at' offset 9 out of bounds [ 407.620852][T24178] __nla_validate_parse: 2 callbacks suppressed [ 407.620872][T24178] netlink: 512 bytes leftover after parsing attributes in process `syz.6.5044'. [ 407.646710][T15311] net_ratelimit: 15 callbacks suppressed [ 407.646729][T15311] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 407.810593][T24196] netlink: 32 bytes leftover after parsing attributes in process `syz.4.5050'. [ 407.889757][T24199] syzkaller0: entered promiscuous mode [ 407.914946][T24199] syzkaller0: entered allmulticast mode [ 408.001500][T24222] xt_connbytes: Forcing CT accounting to be enabled [ 408.010097][T24222] xt_bpf: check failed: parse error [ 408.034990][ C0] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 408.045503][ C0] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 408.054037][ C0] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 408.062470][ C0] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 408.070837][ C0] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 408.074271][T24227] netlink: 24 bytes leftover after parsing attributes in process `syz.6.5057'. [ 408.079396][ C0] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 408.079536][ C0] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 408.079657][ C0] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 408.079770][ C0] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 408.123371][T24230] team1: left allmulticast mode [ 408.149312][T24230] bond2: left allmulticast mode [ 408.181660][T24230] gretap1: left allmulticast mode [ 408.191489][T24230] macvtap1: left allmulticast mode [ 408.377239][T24246] netlink: 28 bytes leftover after parsing attributes in process `syz.7.5061'. [ 408.417039][T24251] netlink: 24 bytes leftover after parsing attributes in process `syz.3.5062'. [ 408.430859][T24251] netlink: 67 bytes leftover after parsing attributes in process `syz.3.5062'. [ 408.552347][ T29] audit: type=1804 audit(1782182321.416:14): pid=24261 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=invalid_pcr cause=open_writers comm="syz.6.5067" name="/newroot/292/cgroup.controllers" dev="tmpfs" ino=1499 res=1 errno=0 [ 408.582377][T24267] netlink: 207952 bytes leftover after parsing attributes in process `syz.0.5069'. [ 408.656195][ T29] audit: type=1800 audit(1782182321.416:15): pid=24261 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.6.5067" name="cgroup.controllers" dev="tmpfs" ino=1499 res=0 errno=0 [ 408.703782][T24279] x_tables: ip6_tables: mh match: only valid for protocol 135 [ 408.790251][T24284] netlink: 18 bytes leftover after parsing attributes in process `syz.3.5073'. [ 408.809384][T24276] bond3: Removing last ns target with arp_interval on [ 408.887975][T24292] netlink: 28 bytes leftover after parsing attributes in process `syz.7.5078'. [ 409.020424][T24304] netlink: 44 bytes leftover after parsing attributes in process `syz.0.5081'. [ 409.049670][T24306] RDS: rds_bind could not find a transport for ::ffff:10.1.0.255, load rds_tcp or rds_rdma? [ 409.065239][T24304] netlink: 'syz.0.5081': attribute type 6 has an invalid length. [ 409.098964][T24306] netlink: 'syz.6.5082': attribute type 2 has an invalid length. [ 409.100465][T24304] netlink: 'syz.0.5081': attribute type 5 has an invalid length. [ 409.261584][T24319] xt_recent: hitcount (4294901760) is larger than allowed maximum (65535) [ 409.308756][T24319] batman_adv: Cannot find parent device. Skipping batadv-on-batadv check for gretap2 [ 409.318561][T24326] netlink: 'syz.0.5090': attribute type 30 has an invalid length. [ 409.328655][T24319] gretap2: default qdisc (pfifo_fast) fail, fallback to noqueue [ 409.337748][T24319] gretap2: entered promiscuous mode [ 409.343282][T24319] gretap2: entered allmulticast mode [ 409.643886][T24349] 8021q: adding VLAN 0 to HW filter on device bond7 [ 409.841991][T24372] netlink: 'syz.6.5103': attribute type 1 has an invalid length. [ 409.963135][T24385] sctp: [Deprecated]: syz.6.5107 (pid 24385) Use of struct sctp_assoc_value in delayed_ack socket option. [ 409.963135][T24385] Use struct sctp_sack_info instead [ 409.980430][T24383] syzkaller0: entered promiscuous mode [ 409.982216][T24384] sctp: [Deprecated]: syz.6.5107 (pid 24384) Use of struct sctp_assoc_value in delayed_ack socket option. [ 409.982216][T24384] Use struct sctp_sack_info instead [ 409.991278][T24383] syzkaller0: entered allmulticast mode [ 410.067207][T24389] IPVS: set_ctl: invalid protocol: 43 172.20.20.39:20004 [ 410.220842][T24404] netlink: 'syz.7.5113': attribute type 7 has an invalid length. [ 410.243858][T24404] netlink: 'syz.7.5113': attribute type 8 has an invalid length. [ 410.427958][T24425] smbdirect: ib_dev[syś2] removed [ 410.547528][T24436] sctp: [Deprecated]: syz.7.5121 (pid 24436) Use of int in maxseg socket option. [ 410.547528][T24436] Use struct sctp_assoc_value instead [ 410.581483][T24434] bond9 (unregistering): Released all slaves [ 410.794678][T24446] bond5: Removing last ns target with arp_interval on [ 410.877061][T24464] bond9: peer notification delay (25) is not a multiple of miimon (4357), value rounded to 0 ms [ 410.888178][T24464] bond9: option ad_user_port_key: mode dependency failed, not supported in mode balance-rr(0) [ 410.910953][T24464] bond9 (unregistering): Released all slaves [ 410.940674][T24458] veth0_macvtap: entered allmulticast mode [ 410.951072][T24462] validate_nla: 1 callbacks suppressed [ 410.951092][T24462] netlink: 'syz.3.5127': attribute type 3 has an invalid length. [ 410.974372][T24472] netlink: 'syz.4.5128': attribute type 1 has an invalid length. [ 411.076464][T24472] 8021q: adding VLAN 0 to HW filter on device bond8 [ 411.112804][T24474] bond4 (unregistering): Released all slaves [ 411.119391][T15311] IPVS: starting estimator thread 0... [ 411.215874][T24488] IPVS: using max 47 ests per chain, 112800 per kthread [ 411.390903][T24508] netlink: 'syz.4.5136': attribute type 13 has an invalid length. [ 411.447333][T24513] Cannot find add_set index 0 as target [ 411.574020][T24529] sctp: [Deprecated]: syz.7.5145 (pid 24529) Use of struct sctp_assoc_value in delayed_ack socket option. [ 411.574020][T24529] Use struct sctp_sack_info instead [ 411.577064][T24523] pim6reg: entered allmulticast mode [ 411.610911][T24523] pim6reg: left allmulticast mode [ 411.694077][T24523] bond6: option all_slaves_active: invalid value (222) [ 411.703226][T24523] bond6 (unregistering): Released all slaves [ 411.921643][T24556] Unsupported ieee802154 address type: 0 [ 411.931067][T24557] Unsupported ieee802154 address type: 0 [ 412.149229][T24573] syzkaller1: entered promiscuous mode [ 412.155032][T24573] syzkaller1: entered allmulticast mode [ 412.231424][T24578] netlink: 'syz.6.5158': attribute type 1 has an invalid length. [ 412.253156][T24578] bond3: (slave veth0_to_bond): Releasing active interface [ 412.435541][T24591] bond7: option lacp_strict: mode dependency failed, not supported in mode balance-rr(0) [ 412.452229][T24591] bond7 (unregistering): Released all slaves [ 412.771639][T24631] netlink: 'syz.6.5170': attribute type 8 has an invalid length. [ 412.812309][T24631] __nla_validate_parse: 93 callbacks suppressed [ 412.812329][T24631] netlink: 100 bytes leftover after parsing attributes in process `syz.6.5170'. [ 412.846422][T15311] net_ratelimit: 17 callbacks suppressed [ 412.846442][T15311] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 412.870514][T24631] openvswitch: netlink: Key type 47 is out of range max 32 [ 412.936706][T24643] netlink: 12 bytes leftover after parsing attributes in process `syz.4.5174'. [ 412.962952][T24647] netlink: 'syz.7.5175': attribute type 1 has an invalid length. [ 412.994674][T24650] netlink: 24 bytes leftover after parsing attributes in process `syz.0.5176'. [ 412.994732][T24651] netlink: 12 bytes leftover after parsing attributes in process `syz.6.5177'. [ 413.085453][ C0] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 413.094340][ C0] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 413.104735][T24654] netlink: 24 bytes leftover after parsing attributes in process `syz.3.5178'. [ 413.125821][ C0] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 413.134626][ C0] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 413.143120][ C0] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 413.151484][ C0] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 413.159924][ C0] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 413.168399][ C0] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 413.412396][T24687] netlink: 'syz.3.5185': attribute type 1 has an invalid length. [ 413.465915][T24692] netlink: 'syz.4.5187': attribute type 21 has an invalid length. [ 413.474040][T24692] IPv6: NLM_F_CREATE should be specified when creating new route [ 413.541654][T24697] netlink: 48 bytes leftover after parsing attributes in process `syz.4.5188'. [ 413.698434][T24705] netlink: 4 bytes leftover after parsing attributes in process `syz.4.5189'. [ 413.712989][T24705] bridge_slave_1 (unregistering): left allmulticast mode [ 413.721911][T24705] bridge_slave_1 (unregistering): left promiscuous mode [ 413.730845][T24705] bridge0: port 2(bridge_slave_1) entered disabled state [ 413.828184][T24677] nci: __nci_request: wait_for_completion_interruptible_timeout failed -512 [ 413.938395][T24709] syzkaller0: entered promiscuous mode [ 413.954951][T24709] syzkaller0: entered allmulticast mode [ 414.002488][T24712] netlink: 'syz.7.5191': attribute type 1 has an invalid length. [ 414.033278][T24712] netlink: 'syz.7.5191': attribute type 1 has an invalid length. [ 414.096279][T24712] 8021q: adding VLAN 0 to HW filter on device bond4 [ 414.199223][T24723] netlink: 32 bytes leftover after parsing attributes in process `syz.7.5195'. [ 414.389772][T24750] netlink: 8 bytes leftover after parsing attributes in process `syz.0.5202'. [ 414.423950][T24750] netlink: 4 bytes leftover after parsing attributes in process `syz.0.5202'. [ 414.467079][T24743] bond5: option arp_validate: mode dependency failed, not supported in mode 802.3ad(4) [ 414.478166][T24743] bond5 (unregistering): Released all slaves [ 414.669531][T24763] bond9: up delay (5) is not a multiple of miimon (4), value rounded to 4 ms [ 417.217108][T24735] nci: __nci_request: wait_for_completion_interruptible_timeout failed -512 [ 417.386981][T24820] validate_nla: 1 callbacks suppressed [ 417.387000][T24820] netlink: 'syz.0.5221': attribute type 1 has an invalid length. [ 417.421985][T24825] xt_TCPMSS: Only works on TCP SYN packets [ 417.887292][T23086] net_ratelimit: 20 callbacks suppressed [ 417.887313][T23086] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 417.915800][ T29] audit: type=1800 audit(1782182330.776:16): pid=24864 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="syz.4.5235" name="memory.events" dev="tmpfs" ino=2840 res=0 errno=0 [ 417.984204][T24865] netlink: 'syz.0.5236': attribute type 1 has an invalid length. [ 418.124982][ C0] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 418.148807][T24888] syzkaller0: entered promiscuous mode [ 418.154672][T24888] syzkaller0: entered allmulticast mode [ 418.176268][T24885] syzkaller1: entered promiscuous mode [ 418.182037][T24885] syzkaller1: entered allmulticast mode [ 418.192381][T24883] __nla_validate_parse: 7 callbacks suppressed [ 418.192398][T24883] netlink: 212368 bytes leftover after parsing attributes in process `syz.6.5243'. [ 418.209353][ C1] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 418.209438][ C0] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 418.209457][ C0] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 418.209521][ C1] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 418.209550][ C0] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 418.209606][ C1] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 418.209635][ C0] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 418.218698][ C0] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 418.369230][T24896] netlink: 12 bytes leftover after parsing attributes in process `syz.3.5248'. [ 418.474602][T24896] netlink: 16 bytes leftover after parsing attributes in process `syz.3.5248'. [ 418.495968][T24896] netlink: 92 bytes leftover after parsing attributes in process `syz.3.5248'. [ 418.534724][T24896] netlink: 8 bytes leftover after parsing attributes in process `syz.3.5248'. [ 418.561676][T24896] netlink: 'syz.3.5248': attribute type 5 has an invalid length. [ 418.586351][T24896] netlink: 20 bytes leftover after parsing attributes in process `syz.3.5248'. [ 418.620998][T24899] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 418.657238][T24896] geneve2: entered promiscuous mode [ 418.693998][T24896] geneve2: entered allmulticast mode [ 418.718577][T11033] netdevsim netdevsim3 netdevsim0: set [1, 1] type 2 family 0 port 256 - 0 [ 418.734203][T11033] netdevsim netdevsim3 netdevsim1: set [1, 1] type 2 family 0 port 256 - 0 [ 418.749012][T11033] netdevsim netdevsim3 netdevsim2: set [1, 1] type 2 family 0 port 256 - 0 [ 418.774427][T11033] netdevsim netdevsim3 netdevsim3: set [1, 1] type 2 family 0 port 256 - 0 [ 418.891805][T24931] netlink: 8 bytes leftover after parsing attributes in process `syz.4.5256'. [ 418.998138][T24943] netlink: 8 bytes leftover after parsing attributes in process `syz.6.5260'. [ 419.145931][T24948] syzkaller0: entered promiscuous mode [ 419.154082][T24948] syzkaller0: entered allmulticast mode [ 419.268022][T24945] netlink: 24 bytes leftover after parsing attributes in process `syz.6.5262'. [ 419.314548][T24959] sctp: [Deprecated]: syz.3.5266 (pid 24959) Use of int in maxseg socket option. [ 419.314548][T24959] Use struct sctp_assoc_value instead [ 419.355488][T24960] sctp: [Deprecated]: syz.3.5266 (pid 24960) Use of int in maxseg socket option. [ 419.355488][T24960] Use struct sctp_assoc_value instead [ 419.798431][T24991] 8021q: adding VLAN 0 to HW filter on device bond10 [ 419.816247][T24991] bridge0: port 4(bond10) entered blocking state [ 419.822935][T24991] bridge0: port 4(bond10) entered disabled state [ 419.829937][T24991] bond10: entered allmulticast mode [ 419.838748][T24991] bond10: entered promiscuous mode [ 420.144969][T25021] tap0: tun_chr_ioctl cmd 2148553947 [ 420.531508][T25033] netlink: 'syz.0.5278': attribute type 11 has an invalid length. [ 420.544219][T25033] netlink: 64 bytes leftover after parsing attributes in process `syz.0.5278'. [ 420.753239][T25054] syzkaller0: entered allmulticast mode [ 420.829219][T25057] netlink: 'syz.6.5287': attribute type 4 has an invalid length. [ 421.030153][T25070] netlink: 'syz.3.5292': attribute type 4 has an invalid length. [ 421.267820][T25091] netlink: 'syz.3.5297': attribute type 1 has an invalid length. [ 421.350396][T25091] 8021q: adding VLAN 0 to HW filter on device bond13 [ 421.431237][T25103] bond13: (slave geneve3): making interface the new active one [ 421.467274][T25103] bond13: (slave geneve3): Enslaving as an active interface with an up link [ 421.568975][T25124] x_tables: duplicate underflow at hook 3 [ 421.729494][T25136] workqueue: Failed to create a rescuer kthread for wq "nfc2_nci_tx_wq": -EINTR [ 421.851521][T25147] sit1: entered promiscuous mode [ 421.867349][T25147] sit1: entered allmulticast mode [ 422.487736][T25197] SET target dimension over the limit! [ 422.509197][T25199] netlink: 'syz.0.5327': attribute type 10 has an invalid length. [ 422.702287][T25206] netlink: 'syz.6.5330': attribute type 10 has an invalid length. [ 422.732437][T25206] 8021q: adding VLAN 0 to HW filter on device team0 [ 422.761477][T25206] bond0: (slave team0): Enslaving as an active interface with an up link [ 422.925327][ T1231] net_ratelimit: 68 callbacks suppressed [ 422.925346][ T1231] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 422.981382][T25225] bond14: option lacp_active: mode dependency failed, not supported in mode active-backup(1) [ 422.996785][T25225] bond14 (unregistering): Released all slaves [ 423.095865][T15311] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 423.107785][T25233] netlink: 'syz.0.5336': attribute type 1 has an invalid length. [ 423.143015][T25233] 8021q: adding VLAN 0 to HW filter on device bond11 [ 423.165051][ C0] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 423.189788][T25233] bond11: (slave dummy0): making interface the new active one [ 423.244996][ C1] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 423.253285][ C0] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 423.261496][ C1] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 423.269753][ C0] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 423.278005][ C1] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 423.286162][ C0] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 423.294387][ C1] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 423.308356][T25233] bond11: (slave dummy0): Enslaving as an active interface with an up link [ 423.361651][T25233] : renamed from dummy0 (while UP) [ 423.380172][T25250] __nla_validate_parse: 78 callbacks suppressed [ 423.380192][T25250] netlink: 16 bytes leftover after parsing attributes in process `syz.6.5341'. [ 423.644153][T25274] netlink: 24 bytes leftover after parsing attributes in process `syz.6.5351'. [ 423.859596][T25289] netlink: 64 bytes leftover after parsing attributes in process `syz.7.5354'. [ 424.016574][T25308] netlink: 8 bytes leftover after parsing attributes in process `syz.7.5358'. [ 424.034701][T25310] netlink: 52 bytes leftover after parsing attributes in process `syz.0.5362'. [ 424.086508][T25312] netlink: 16 bytes leftover after parsing attributes in process `syz.0.5363'. [ 424.098982][T25312] netlink: 6 bytes leftover after parsing attributes in process `syz.0.5363'. [ 424.158667][T25319] sctp: [Deprecated]: syz.4.5364 (pid 25319) Use of int in max_burst socket option. [ 424.158667][T25319] Use struct sctp_assoc_value instead [ 424.282367][T25333] netlink: 60 bytes leftover after parsing attributes in process `syz.4.5368'. [ 424.615352][T25361] netlink: 'syz.4.5371': attribute type 16 has an invalid length. [ 424.623835][T25361] netlink: 'syz.4.5371': attribute type 17 has an invalid length. [ 424.661784][T25361] 8021q: adding VLAN 0 to HW filter on device bond0 [ 424.671067][T25361] 8021q: adding VLAN 0 to HW filter on device team0 [ 424.681704][T25361] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 424.708984][T25361] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 424.720096][T25361] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 424.735829][T25361] hsr0: Slave A (hsr_slave_0) is not up; please bring it up to get a fully working HSR network [ 424.748264][T25361] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 424.753979][T25366] netlink: 4 bytes leftover after parsing attributes in process `syz.6.5376'. [ 424.769019][T25361] 8021q: adding VLAN 0 to HW filter on device hsr0 [ 424.782263][T25361] virt_wifi0: default qdisc (pfifo_fast) fail, fallback to noqueue [ 424.791964][T25361] veth1_macvtap: left promiscuous mode [ 424.799442][T25361] veth0_macvtap: left promiscuous mode [ 424.806273][T25361] veth0_macvtap: entered promiscuous mode [ 424.813108][T25361] veth1_macvtap: entered promiscuous mode [ 424.837686][T25361] 8021q: adding VLAN 0 to HW filter on device bond1 [ 424.861783][T25361] netdevsim netdevsim4 eth0: default qdisc (pfifo_fast) fail, fallback to noqueue [ 424.872788][T25361] 8021q: adding VLAN 0 to HW filter on device eth0 [ 424.881879][T25361] netdevsim netdevsim4 eth1: default qdisc (pfifo_fast) fail, fallback to noqueue [ 424.892769][T25361] 8021q: adding VLAN 0 to HW filter on device eth1 [ 424.903149][T25361] netdevsim netdevsim4 eth2: default qdisc (pfifo_fast) fail, fallback to noqueue [ 424.913330][T25361] 8021q: adding VLAN 0 to HW filter on device eth2 [ 424.922978][T25361] netdevsim netdevsim4 eth3: default qdisc (pfifo_fast) fail, fallback to noqueue [ 424.935920][T25361] 8021q: adding VLAN 0 to HW filter on device eth3 [ 424.950076][T25361] 8021q: adding VLAN 0 to HW filter on device bond2 [ 424.958943][T25361] 8021q: adding VLAN 0 to HW filter on device bond3 [ 424.967251][T25361] 8021q: adding VLAN 0 to HW filter on device bond4 [ 424.976050][T25361] erspan1: default qdisc (pfifo_fast) fail, fallback to noqueue [ 424.994673][T25361] 8021q: adding VLAN 0 to HW filter on device bond5 [ 425.006428][T25361] 8021q: adding VLAN 0 to HW filter on device bond6 [ 425.015289][T25361] 8021q: adding VLAN 0 to HW filter on device macvlan2 [ 425.025525][T25361] 8021q: adding VLAN 0 to HW filter on device macvlan3 [ 425.033279][T25361] 8021q: adding VLAN 0 to HW filter on device macvlan4 [ 425.044294][ T5712] team_slave_1: entered promiscuous mode [ 425.050162][ T5712] geneve1: entered promiscuous mode [ 425.055906][ T5712] dummy0: entered promiscuous mode [ 425.098848][T11055] netdevsim netdevsim4 eth0: set [0, 0] type 1 family 0 port 8472 - 0 [ 425.108124][T11055] netdevsim netdevsim4 eth0: set [1, 0] type 2 family 0 port 6081 - 0 [ 425.123280][T11062] ip6_tunnel: ip6tnl1 xmit: Local address not yet configured! [ 425.146918][T23536] ip6_tunnel: ip6tnl1 xmit: Local address not yet configured! [ 425.157886][T11062] ip6_tunnel: ip6tnl1 xmit: Local address not yet configured! [ 425.172283][T25374] netlink: 12 bytes leftover after parsing attributes in process `syz.6.5379'. [ 425.183233][T11055] netdevsim netdevsim4 eth1: set [0, 0] type 1 family 0 port 8472 - 0 [ 425.189165][T25338] nci: __nci_request: wait_for_completion_interruptible_timeout failed -512 [ 425.193015][T11055] netdevsim netdevsim4 eth1: set [1, 0] type 2 family 0 port 6081 - 0 [ 425.236842][T11062] ip6_tunnel:  xmit: Local address not yet configured! [ 425.248738][T11062] ip6_tunnel:  xmit: Local address not yet configured! [ 425.265059][ T5734] ip6_tunnel:  xmit: Local address not yet configured! [ 425.274565][T11055] netdevsim netdevsim4 eth2: set [0, 0] type 1 family 0 port 8472 - 0 [ 425.290486][T11055] netdevsim netdevsim4 eth2: set [1, 0] type 2 family 0 port 6081 - 0 [ 425.356752][T11055] netdevsim netdevsim4 eth3: set [0, 0] type 1 family 0 port 8472 - 0 [ 425.375601][T11055] netdevsim netdevsim4 eth3: set [1, 0] type 2 family 0 port 6081 - 0 [ 425.405996][T15311] ip6_tunnel: ip6tnl1 xmit: Local address not yet configured! [ 425.471049][T25390] netlink: 'syz.6.5382': attribute type 2 has an invalid length. [ 425.551901][T25399] syzkaller0: entered promiscuous mode [ 425.560878][T25399] syzkaller0: entered allmulticast mode [ 425.576617][ T5734] ip6_tunnel:  xmit: Local address not yet configured! [ 425.717448][T25404] syzkaller1: entered promiscuous mode [ 425.723247][T25404] syzkaller1: entered allmulticast mode [ 425.885248][T15311] ip6_tunnel: ip6tnl1 xmit: Local address not yet configured! [ 426.090067][T25431] bond0: (slave lo): Error: Can not enslave VLAN challenged device to VLAN enabled bond [ 426.094487][T25436] x_tables: duplicate underflow at hook 1 [ 426.206533][ T5734] ip6_tunnel:  xmit: Local address not yet configured! [ 426.484381][T25466] sctp: [Deprecated]: syz.4.5405 (pid 25466) Use of int in max_burst socket option. [ 426.484381][T25466] Use struct sctp_assoc_value instead [ 427.149118][T25500] syzkaller0: entered promiscuous mode [ 427.155417][T25500] syzkaller0: entered allmulticast mode [ 427.762924][T25557] pim6reg527: entered allmulticast mode [ 427.840362][T25563] syzkaller0: entered promiscuous mode [ 427.851575][T25563] syzkaller0: entered allmulticast mode [ 427.873277][T25563] tipc: Enabled bearer , priority 0 [ 427.883100][T25562] tipc: Resetting bearer [ 427.893208][T25562] tipc: Disabling bearer [ 427.925198][T25574] netlink: 'syz.7.5437': attribute type 1 has an invalid length. [ 427.953232][T25574] 8021q: adding VLAN 0 to HW filter on device bond5 [ 428.196862][T25604] syzkaller0: entered promiscuous mode [ 428.202644][T25604] syzkaller0: entered allmulticast mode [ 428.204993][ C0] net_ratelimit: 16 callbacks suppressed [ 428.205008][ C0] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 428.285368][ C1] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 428.299180][T15311] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 428.305398][ C0] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 428.315617][ C0] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 428.323884][ C0] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 428.333020][ C0] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 428.341406][ C0] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 428.349715][ C0] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 428.358055][ C0] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 428.463653][T25621] __nla_validate_parse: 5 callbacks suppressed [ 428.463688][T25621] netlink: 388 bytes leftover after parsing attributes in process `syz.3.5454'. [ 428.487022][T25621] netlink: 666 bytes leftover after parsing attributes in process `syz.3.5454'. [ 428.497714][T25622] netlink: 12 bytes leftover after parsing attributes in process `syz.3.5454'. [ 428.663365][T25637] tunl0: entered promiscuous mode [ 428.668708][T25637] netlink: 'syz.3.5458': attribute type 4 has an invalid length. [ 428.677007][T25637] netlink: 9 bytes leftover after parsing attributes in process `syz.3.5458'. [ 428.821843][T25650] netlink: 4 bytes leftover after parsing attributes in process `syz.3.5462'. [ 428.831359][T25650] netlink: 176 bytes leftover after parsing attributes in process `syz.3.5462'. [ 428.844439][T25650] netlink: 'syz.3.5462': attribute type 5 has an invalid length. [ 428.856902][T25641] syzkaller0: entered promiscuous mode [ 428.871047][T25641] syzkaller0: entered allmulticast mode [ 428.919412][T25661] netlink: 24 bytes leftover after parsing attributes in process `syz.6.5464'. [ 429.389229][T25697] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 429.434004][T25700] pim6reg: entered allmulticast mode [ 429.527293][T25708] netlink: 'syz.4.5480': attribute type 1 has an invalid length. [ 429.559447][T25708] 8021q: adding VLAN 0 to HW filter on device bond9 [ 429.586966][T25708] bond9: (slave veth7): Enslaving as an active interface with a down link [ 429.601579][T25708] 8021q: adding VLAN 0 to HW filter on device batadv1 [ 429.610240][T25708] bond9: (slave batadv1): dev_set_mac_address on slave failed! ALB mode requires that the base driver support setting the hw address also when the network device's interface is open [ 429.838582][T25731] netlink: 52 bytes leftover after parsing attributes in process `syz.4.5484'. [ 429.848219][T25731] netlink: 52 bytes leftover after parsing attributes in process `syz.4.5484'. [ 429.859917][T25731] netlink: 52 bytes leftover after parsing attributes in process `syz.4.5484'. [ 429.935963][T25738] syzkaller0: entered promiscuous mode [ 429.941888][T25738] syzkaller0: entered allmulticast mode [ 430.001798][T25737] syzkaller0: entered promiscuous mode [ 430.008376][T25737] syzkaller0: entered allmulticast mode [ 430.240096][ T4937] Bluetooth: hci8: unexpected cc 0x0c03 length: 249 > 1 [ 430.250300][ T4937] Bluetooth: hci8: unexpected cc 0x1003 length: 249 > 9 [ 430.258325][ T4937] Bluetooth: hci8: unexpected cc 0x1001 length: 249 > 9 [ 430.267486][ T4937] Bluetooth: hci8: unexpected cc 0x0c23 length: 249 > 4 [ 430.275094][ T4937] Bluetooth: hci8: unexpected cc 0x0c38 length: 249 > 2 [ 430.584415][T25769] netlink: 'syz.7.5496': attribute type 24 has an invalid length. [ 430.610666][ T30] INFO: task syz.5.3214:17611 blocked for more than 143 seconds. SYZFAIL: failed to recv rpc fd=3 want=4 recv=0 n=0 (errno 9: Bad file descriptor) [ 430.634205][ T30] Not tainted syzkaller #0 [ 430.644246][T25774] netlink: 'syz.6.5498': attribute type 1 has an invalid length. [ 430.652150][ T30] "echo 0 > /proc/sys/kernel/hung_task_timeout_secs" disables this message. [ 430.661985][T25775] netlink: 'syz.3.5494': attribute type 16 has an invalid length. [ 430.665304][T25774] netlink: 'syz.6.5498': attribute type 1 has an invalid length. [ 430.670257][ T30] task:syz.5.3214 state:D [ 430.680367][T25775] netlink: 'syz.3.5494': attribute type 17 has an invalid length. [ 430.699352][ T30] stack:23432 pid:17611 tgid:17609 ppid:16065 task_flags:0x400140 flags:0x00080002 [ 430.728934][ T30] Call Trace: [ 430.739903][ T30] [ 430.742948][ T30] __schedule+0x17d9/0x56c0 [ 430.747724][ T30] ? __skb_flow_dissect+0x652a/0x6d50 [ 430.753558][ T30] ? rcu_is_watching+0x15/0xb0 [ 430.758652][ T30] ? lock_release+0x4b/0x3c0 [ 430.763437][ T30] ? unwind_next_frame+0x8f/0x2550 [ 430.769378][T25774] netlink: 'syz.6.5498': attribute type 8 has an invalid length. [ 430.785273][ T30] ? rcu_is_watching+0x15/0xb0 [ 430.796122][ T30] ? __pfx___schedule+0x10/0x10 [ 430.804390][ T30] ? rcu_is_watching+0x15/0xb0 [ 430.812726][ T30] ? rcu_is_watching+0x15/0xb0 [ 430.818365][ T30] ? lock_release+0x4b/0x3c0 [ 430.823033][ T30] ? rcu_is_watching+0x15/0xb0 [ 430.828838][ T30] schedule+0x164/0x360 [ 430.833076][ T30] schedule_preempt_disabled+0x13/0x30 [ 430.838765][ T30] __mutex_lock+0x7bf/0x1550 [ 430.843432][ T30] ? __mutex_lock+0x5d4/0x1550 [ 430.848682][ T30] ? nfsd_nl_rpc_status_get_dumpit+0xdc/0x13b0 [ 430.856063][ T30] ? __pfx___mutex_lock+0x10/0x10 [ 430.861261][ T30] ? stack_trace_save+0xa9/0x100 [ 430.866788][ T30] ? __pfx_stack_trace_save+0x10/0x10 [ 430.872337][ T30] ? stack_depot_save_flags+0x33/0x800 [ 430.878117][ T30] nfsd_nl_rpc_status_get_dumpit+0xdc/0x13b0 [ 430.884141][ T30] ? kasan_save_track+0x4f/0x80 [ 430.889726][ T30] ? kasan_save_track+0x3e/0x80 [ 430.894806][ T30] ? __kasan_kmalloc+0x93/0xb0 [ 430.899747][ T30] ? __kmalloc_node_track_caller_noprof+0x4d7/0x7b0 [ 430.906407][ T30] ? __alloc_skb+0x2bd/0x7a0 [ 430.911261][ T30] ? __netlink_dump_start+0x589/0x7b0 [ 430.917226][ T30] ? genl_family_rcv_msg_dumpit+0x213/0x310 [ 430.923168][ T30] ? genl_rcv_msg+0x5e1/0x7a0 [ 430.928676][ T30] ? netlink_rcv_skb+0x226/0x4a0 [ 430.934181][ T30] ? genl_rcv+0x28/0x40 [ 430.938576][ T30] ? netlink_unicast+0x7bb/0x940 [ 430.943584][ T30] ? netlink_sendmsg+0x813/0xb40 [ 430.949059][ T30] ? ____sys_sendmsg+0x9b9/0xa20 [ 430.954027][ T30] ? ___sys_sendmsg+0x2a5/0x360 [ 430.959009][ T30] ? __x64_sys_sendmsg+0x1b1/0x290 [ 430.964263][ T30] ? do_syscall_64+0x174/0x580 [ 430.969092][ T30] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 430.975739][ T30] ? __pfx_nfsd_nl_rpc_status_get_dumpit+0x10/0x10 [ 430.982369][ T30] ? rcu_is_watching+0x15/0xb0 [ 430.987308][ T30] ? trace_kmalloc+0x2a/0xf0 [ 430.992022][ T30] ? __kmalloc_node_track_caller_noprof+0x4f5/0x7b0 [ 430.998808][ T30] genl_dumpit+0x10b/0x1b0 [ 431.003288][ T30] netlink_dump+0x711/0xee0 [ 431.009144][ T30] ? __pfx_netlink_dump+0x10/0x10 [ 431.014345][ T30] ? __kasan_kmalloc+0x93/0xb0 [ 431.019187][ T30] ? genl_start+0x497/0x6d0 [ 431.023718][ T30] __netlink_dump_start+0x589/0x7b0 [ 431.028997][ T30] genl_family_rcv_msg_dumpit+0x213/0x310 [ 431.035298][ T30] ? __pfx_genl_family_rcv_msg_dumpit+0x10/0x10 [ 431.041641][ T30] ? genl_get_cmd+0x523/0x960 [ 431.046507][ T30] ? __pfx_genl_start+0x10/0x10 [ 431.051414][ T30] ? __pfx_genl_dumpit+0x10/0x10 [ 431.056430][ T30] ? __pfx_genl_done+0x10/0x10 [ 431.061306][ T30] ? __dev_queue_xmit+0x29b/0x37f0 [ 431.067030][ T30] genl_rcv_msg+0x5e1/0x7a0 [ 431.071893][ T30] ? __pfx_genl_rcv_msg+0x10/0x10 [ 431.077084][ T30] ? ref_tracker_free+0x689/0x830 [ 431.082133][ T30] ? __pfx_nfsd_nl_rpc_status_get_dumpit+0x10/0x10 [ 431.089546][ T30] ? __pfx_ref_tracker_free+0x10/0x10 [ 431.095388][ T30] netlink_rcv_skb+0x226/0x4a0 [ 431.100170][ T30] ? __pfx_genl_rcv_msg+0x10/0x10 [ 431.105326][ T30] ? __pfx_netlink_rcv_skb+0x10/0x10 [ 431.110679][ T30] ? down_read+0x2be/0x330 [ 431.115271][ T30] genl_rcv+0x28/0x40 [ 431.119473][ T30] netlink_unicast+0x7bb/0x940 [ 431.124389][ T30] netlink_sendmsg+0x813/0xb40 [ 431.129850][ T30] ? __pfx_netlink_sendmsg+0x10/0x10 [ 431.135216][ T30] ? aa_sock_msg_perm+0xf1/0x1b0 [ 431.140184][ T30] ? bpf_lsm_socket_sendmsg+0x9/0x20 [ 431.145531][ T30] ? __pfx_netlink_sendmsg+0x10/0x10 [ 431.150956][ T30] ____sys_sendmsg+0x9b9/0xa20 [ 431.156317][ T30] ? __pfx_____sys_sendmsg+0x10/0x10 [ 431.161830][ T30] ? lock_release+0x4b/0x3c0 [ 431.167404][ T30] ? import_iovec+0x73/0xa0 [ 431.172207][ T30] ___sys_sendmsg+0x2a5/0x360 [ 431.176986][ T30] ? __pfx____sys_sendmsg+0x10/0x10 [ 431.182308][ T30] ? futex_wake+0x51b/0x5f0 [ 431.187404][ T30] ? __fget_files+0x2a/0x420 [ 431.192083][ T30] ? __fget_files+0x3a2/0x420 [ 431.196835][ T30] __x64_sys_sendmsg+0x1b1/0x290 [ 431.201811][ T30] ? __pfx___x64_sys_sendmsg+0x10/0x10 [ 431.207327][ T30] ? rcu_is_watching+0x15/0xb0 [ 431.212106][ T30] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 431.218711][ T30] do_syscall_64+0x174/0x580 [ 431.223332][ T30] ? trace_irq_disable+0x3b/0x140 [ 431.228442][ T30] ? clear_bhb_loop+0x40/0x90 [ 431.233261][ T30] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 431.239304][ T30] RIP: 0033:0x7f969919ce59 [ 431.243765][ T30] RSP: 002b:00007f969a0d5028 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 431.253414][ T30] RAX: ffffffffffffffda RBX: 00007f9699415fa0 RCX: 00007f969919ce59 [ 431.261440][ T30] RDX: 0000000000000080 RSI: 00002000000000c0 RDI: 0000000000000007 [ 431.269699][ T30] RBP: 00007f9699232e6f R08: 0000000000000000 R09: 0000000000000000 [ 431.278215][ T30] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 431.286256][ T30] R13: 00007f9699416038 R14: 00007f9699415fa0 R15: 00007ffdb08de888 [ 431.294425][ T30] [ 431.297697][ T30] INFO: lockdep is turned off. [ 431.302570][ T30] NMI backtrace for cpu 1 [ 431.302589][ T30] CPU: 1 UID: 0 PID: 30 Comm: khungtaskd Not tainted syzkaller #0 PREEMPT(full) [ 431.302610][ T30] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/09/2026 [ 431.302621][ T30] Call Trace: [ 431.302629][ T30] [ 431.302638][ T30] dump_stack_lvl+0xe8/0x150 [ 431.302664][ T30] nmi_cpu_backtrace+0x274/0x2d0 [ 431.302743][ T30] ? __pfx_nmi_raise_cpu_backtrace+0x10/0x10 [ 431.302790][ T30] nmi_trigger_cpumask_backtrace+0x17a/0x300 [ 431.302812][ T30] sys_info+0x135/0x170 [ 431.302829][ T30] watchdog+0xfd7/0x1030 [ 431.302864][ T30] ? watchdog+0x1c7/0x1030 [ 431.302890][ T30] kthread+0x388/0x470 [ 431.302908][ T30] ? __pfx_watchdog+0x10/0x10 [ 431.302930][ T30] ? __pfx_kthread+0x10/0x10 [ 431.302947][ T30] ret_from_fork+0x514/0xb70 [ 431.302980][ T30] ? __pfx_ret_from_fork+0x10/0x10 [ 431.302997][ T30] ? __switch_to+0xc89/0x1420 [ 431.303022][ T30] ? __pfx_kthread+0x10/0x10 [ 431.303039][ T30] ret_from_fork_asm+0x1a/0x30 [ 431.303067][ T30] [ 431.303079][ T30] Sending NMI from CPU 1 to CPUs 0: [ 431.416641][ C0] NMI backtrace for cpu 0 [ 431.416661][ C0] CPU: 0 UID: 0 PID: 0 Comm: swapper/0 Not tainted syzkaller #0 PREEMPT(full) [ 431.416679][ C0] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/09/2026 [ 431.416688][ C0] RIP: 0010:pv_native_safe_halt+0xf/0x20 [ 431.416715][ C0] Code: ec 7f 02 c3 cc cc cc cc cc cc cc 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 f3 0f 1e fa 66 90 0f 00 2d 83 87 21 00 fb f4 7c 03 03 00 cc cc cc cc cc cc cc cc cc cc cc cc 90 90 90 90 90 [ 431.416728][ C0] RSP: 0018:ffffffff8e607de0 EFLAGS: 00000246 [ 431.416744][ C0] RAX: ffff88812527c000 RBX: ffffffff819a5170 RCX: 0000000080000001 [ 431.416755][ C0] RDX: 0000000000000001 RSI: ffffffff8c291100 RDI: ffffffff819a5170 [ 431.416767][ C0] RBP: ffffffff8e607eb8 R08: ffff8880b86338db R09: 1ffff110170c671b [ 431.416777][ C0] R10: dffffc0000000000 R11: ffffed10170c671c R12: 0000000000000000 [ 431.416788][ C0] R13: 1ffffffff1cd1de8 R14: 1ffffffff1cc0fc4 R15: dffffc0000000000 [ 431.416800][ C0] FS: 0000000000000000(0000) GS:ffff88812527c000(0000) knlGS:0000000000000000 [ 431.416812][ C0] CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033 [ 431.416823][ C0] CR2: 00007f4fe2ed9d58 CR3: 000000000e746000 CR4: 00000000003526f0 [ 431.416839][ C0] Call Trace: [ 431.416845][ C0] [ 431.416852][ C0] default_idle+0x9/0x20 [ 431.416872][ C0] default_idle_call+0x72/0xb0 [ 431.416893][ C0] do_idle+0x2e0/0x540 [ 431.416916][ C0] ? __pfx_do_idle+0x10/0x10 [ 431.416940][ C0] cpu_startup_entry+0x43/0x60 [ 431.416960][ C0] rest_init+0x2de/0x300 [ 431.416975][ C0] start_kernel+0x38a/0x3e0 [ 431.417112][ C0] x86_64_start_reservations+0x24/0x30 [ 431.417152][ C0] x86_64_start_kernel+0x137/0x1b0 [ 431.417168][ C0] common_startup_64+0x13e/0x157 [ 431.417194][ C0] [ 431.596514][ T30] Kernel panic - not syncing: hung_task: blocked tasks [ 431.603486][ T30] CPU: 1 UID: 0 PID: 30 Comm: khungtaskd Not tainted syzkaller #0 PREEMPT(full) [ 431.612720][ T30] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/09/2026 [ 431.622899][ T30] Call Trace: [ 431.626683][ T30] [ 431.629654][ T30] vpanic+0x56c/0xa60 [ 431.633680][ T30] ? __pfx___schedule+0x10/0x10 [ 431.638559][ T30] ? __pfx_vpanic+0x10/0x10 [ 431.643067][ T30] ? nmi_trigger_cpumask_backtrace+0x1f4/0x300 [ 431.649224][ T30] panic+0xc5/0xd0 [ 431.652947][ T30] ? __pfx_panic+0x10/0x10 [ 431.657368][ T30] ? preempt_schedule_common+0x82/0xd0 [ 431.662833][ T30] ? preempt_schedule_thunk+0x16/0x40 [ 431.668218][ T30] ? nmi_trigger_cpumask_backtrace+0x2b6/0x300 [ 431.674458][ T30] ? nmi_trigger_cpumask_backtrace+0x2bb/0x300 [ 431.680630][ T30] watchdog+0x1030/0x1030 [ 431.684999][ T30] ? watchdog+0x1c7/0x1030 [ 431.689450][ T30] kthread+0x388/0x470 [ 431.693553][ T30] ? __pfx_watchdog+0x10/0x10 [ 431.698267][ T30] ? __pfx_kthread+0x10/0x10 [ 431.702951][ T30] ret_from_fork+0x514/0xb70 [ 431.707977][ T30] ? __pfx_ret_from_fork+0x10/0x10 [ 431.713237][ T30] ? __switch_to+0xc89/0x1420 [ 431.718019][ T30] ? __pfx_kthread+0x10/0x10 [ 431.722710][ T30] ret_from_fork_asm+0x1a/0x30 [ 431.727484][ T30] [ 431.730663][ T30] Kernel Offset: disabled [ 431.734980][ T30] Rebooting in 86400 seconds..