last executing test programs: 7m11.341043839s ago: executing program 2 (id=3282): r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000100), 0x0, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x2}) r1 = openat$tun(0xffffffffffffff9c, &(0x7f0000000400), 0x0, 0x0) close(r1) r2 = socket$nl_generic(0x10, 0x3, 0x10) socket$pppl2tp(0x18, 0x1, 0x1) r3 = syz_genetlink_get_family_id$tipc(&(0x7f00000000c0), r2) sendmsg$TIPC_CMD_ENABLE_BEARER(r2, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000680)=ANY=[@ANYBLOB='8\x00\x00\x00', @ANYRES16=r3, @ANYBLOB="010000000d0000000000010000000000000001410000001c001700000000000000006574683a73797a6b616c6c657230"], 0x38}}, 0x0) ioctl$SIOCSIFHWADDR(r1, 0x8914, &(0x7f0000002280)={'syzkaller0\x00', @multicast}) r4 = socket$unix(0x1, 0x2, 0x0) r5 = socket$can_j1939(0x1d, 0x2, 0x7) connect(r5, &(0x7f00000001c0)=@pppol2tpv3={0x18, 0x1, {0x0, r5, {0x2, 0x4e22, @local}, 0x2, 0x0, 0x1, 0x1}}, 0x80) r6 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r4, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r6, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000180)={&(0x7f00000026c0)=@newqdisc={0x48, 0x24, 0x4ee4e6a52ff56541, 0x70bd2c, 0x1, {0x0, 0x0, 0x0, r7, {0x0, 0xb}, {0xffff, 0xffff}, {0xfff2, 0xffff}}, [@qdisc_kind_options=@q_cbs={{0x8}, {0x1c, 0x2, @TCA_CBS_PARMS={0x18, 0x1, {0x0, '\x00', 0x1, 0x7, 0x100, 0x8}}}}]}, 0x48}, 0x1, 0x0, 0x0, 0x20000080}, 0x48000) r8 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r8, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r8, &(0x7f00000003c0)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000440)=@newqdisc={0x30, 0x24, 0x4ee4e6a52ff56541, 0x70b926, 0x25dfdbfe, {0x0, 0x0, 0x0, r9, {0x0, 0x8}, {0xffff, 0xb}, {0xffff, 0xffe0}}, [@qdisc_kind_options=@q_hhf={{0x8}, {0x4}}]}, 0x30}, 0x1, 0x0, 0x0, 0x40000b0}, 0x4890) ioctl$SIOCSIFHWADDR(r1, 0x8922, &(0x7f0000002280)={'syzkaller0\x00', @random="2b0100004ec6"}) 7m10.321752992s ago: executing program 2 (id=3287): r0 = socket$inet(0x2, 0x3, 0x2) setsockopt$inet_msfilter(r0, 0x0, 0x29, &(0x7f0000000140)=ANY=[], 0x20000) r1 = openat$tun(0xffffffffffffff9c, &(0x7f0000000140), 0x48241, 0x0) ioctl$TUNSETIFF(r1, 0x400454ca, &(0x7f00000000c0)={'syzkaller1\x00', 0x6bf1c2d5adba8c32}) r2 = socket$kcm(0x2, 0xa, 0x2) ioctl$SIOCSIFHWADDR(r2, 0x8914, &(0x7f0000000180)={'veth1_to_hsr\x00', @link_local={0x1, 0x80, 0xc2, 0x0, 0x0, 0x3}}) setsockopt(r2, 0x9, 0x9, 0x0, 0x0) write$tun(r1, &(0x7f0000000440)=ANY=[@ANYBLOB="70000000ffffffffffffaaaaaaaaaabb08004500452c00004000002f9078accc31c0bc5281277e00655800189078040000000003070086ddffff00000000"], 0xfdef) r3 = socket$nl_xfrm(0x10, 0x3, 0x6) mmap(&(0x7f0000196000/0x1000)=nil, 0x1000, 0x0, 0x840000000000a132, 0xffffffffffffffff, 0x0) getsockopt$sock_cred(r3, 0x1, 0x11, 0x0, &(0x7f0000000400)) mmap(&(0x7f0000196000/0x4000)=nil, 0x4000, 0xffffffffefffffff, 0x8032, 0xffffffffffffffff, 0x0) sendmsg$nl_xfrm(r3, &(0x7f0000000480)={0x0, 0x0, &(0x7f0000000200)={&(0x7f00000004c0)=ANY=[@ANYBLOB="fc010000190001000000000000000000e0000001000000000000000000000000ac1414bb00000000000000000000000000000000000000000200000001000000", @ANYRES32=0x0, @ANYRES32, @ANYBLOB="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"], 0x1fc}, 0x1, 0x0, 0x0, 0xc001004}, 0x40800) bpf$BPF_MAP_CONST_STR_FREEZE(0x16, &(0x7f0000000140), 0x4) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x3, 0x11, &(0x7f00000007c0)=ANY=[@ANYBLOB="18000000000000000000000000000000850000002e000000b7080000000000007b8af8ff00000000b7080000000000007b8af0ff00000000bfa100000000000007010000f8ffffffbfa400000000000007040000f0ffffffb70200000800000018230000", @ANYRES32, @ANYBLOB="0000000000000000b70500000800000085000000a500000095"], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @sched_cls=0x37, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r4 = socket$nl_generic(0x10, 0x3, 0x10) r5 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000380), 0xffffffffffffffff) r6 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX_80211(r6, 0x8933, &(0x7f0000000000)={'wlan1\x00', 0x0}) sendmsg$NL80211_CMD_FRAME(r4, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000fc0)={&(0x7f00000003c0)=ANY=[@ANYBLOB='8\x00\x00\x00', @ANYRES16=r5, @ANYBLOB="010000008000ffdbdf25359d00af25ffd000", @ANYRES32=r7, @ANYBLOB="0c009900000000000000000008002600431700000800270001000000"], 0x38}, 0x1, 0x0, 0x0, 0xc804}, 0x0) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000240)={0xffffffffffffffff, 0x2f, 0x4e, 0x22, &(0x7f0000000580)="0020ffffffffa000", &(0x7f00000002c0)=""/19, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x6}, 0x50) bpf$PROG_LOAD(0x5, &(0x7f000000e000)={0x1f, 0x4, &(0x7f0000000100)=ANY=[@ANYBLOB="b400000000000000791048000000000071182400000000009500000000000000db74589d4b38cc306ac390649f72dea0e50e2317db042855d6c74ff3493c7e31e3f6c643155a8e2e01d50bc3347475750472719cc516fa14b769e7f385ba72c60242263c05ddab05e37efe81b8bffc35cdf2ac0d93263ff755d611c4cca1684b1470af6a83366aa430ad2d700b186da622d6fba70000000000000000000000000200"/173], &(0x7f0000003ff6)='GPL\x00', 0x2, 0xc3, &(0x7f000000cf3d)=""/195, 0x0, 0x0, '\x00', 0x0, @fallback=0x2}, 0x94) socket$nl_generic(0x10, 0x3, 0x10) socket(0xa, 0x2400000001, 0x0) syz_genetlink_get_family_id$nl80211(&(0x7f0000000080), 0xffffffffffffffff) sendmmsg(0xffffffffffffffff, &(0x7f0000000000), 0x4000000000001f2, 0x0) r8 = socket$inet6_sctp(0xa, 0x5, 0x84) getsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX3(r8, 0x84, 0x6f, &(0x7f0000000300)={0x0, 0x10, &(0x7f0000000100)=[@in={0x2, 0x4e20, @private=0xa010103}]}, &(0x7f0000000380)=0x10) getsockopt$inet_sctp6_SCTP_GET_ASSOC_ID_LIST(r8, 0x84, 0x1d, &(0x7f0000000000)={0x1, [0x0]}, &(0x7f0000000080)=0x8) 7m9.136489649s ago: executing program 2 (id=3297): r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = socket(0x10, 0x803, 0x0) sendmsg$nl_route(r1, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000200)={&(0x7f00000003c0)=@newlink={0x4c, 0x10, 0x437, 0x800000, 0x0, {0x0, 0x0, 0x0, 0x0, 0x504c3}, [@IFLA_LINKINFO={0x2c, 0x12, 0x0, 0x1, @bridge={{0xb}, {0x1c, 0x2, 0x0, 0x1, [@IFLA_BR_MCAST_MLD_VERSION={0x5, 0x2c, 0x1}, @IFLA_BR_AGEING_TIME={0x8, 0x4, 0x9}, @IFLA_BR_MCAST_IGMP_VERSION={0x5, 0x2b, 0x2}]}}}]}, 0x4c}, 0x1, 0x0, 0x0, 0x2000c014}, 0x0) syz_genetlink_get_family_id$nl80211(&(0x7f0000000140), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f0000000040)={'wlan0\x00'}) r2 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_CREATE(r2, &(0x7f0000000500)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000100)={0x60, 0x2, 0x6, 0x3, 0x0, 0x0, {0x0, 0x0, 0x6}, [@IPSET_ATTR_SETNAME={0x9, 0x2, 'syz0\x00'}, @IPSET_ATTR_PROTOCOL={0x5}, @IPSET_ATTR_DATA={0x14, 0x7, 0x0, 0x1, [@IPSET_ATTR_MAXELEM={0x8, 0x13, 0x0, 0x0, 0x56074974}, @IPSET_ATTR_HASHSIZE={0x8}]}, @IPSET_ATTR_FAMILY={0x5, 0x5, 0xa}, @IPSET_ATTR_REVISION={0x5, 0x4, 0x1}, @IPSET_ATTR_TYPENAME={0x13, 0x3, 'hash:net,iface\x00'}]}, 0x60}, 0x1, 0x0, 0x0, 0x4000}, 0x0) r3 = socket$nl_generic(0x10, 0x3, 0x10) r4 = openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0) ioctl$TUNSETIFF(r4, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x7101}) r5 = socket$nl_route(0x10, 0x3, 0x0) r6 = socket$unix(0x1, 0x1, 0x0) ioctl$sock_SIOCGIFINDEX(r6, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r5, &(0x7f00000012c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000280)=@newqdisc={0x48, 0x24, 0x4ee4e6a52ff56541, 0x70bd27, 0xffffffff, {0x0, 0x0, 0x0, r7, {0x0, 0xfff1}, {0xffff, 0xffff}}, [@qdisc_kind_options=@q_htb={{0x8}, {0x1c, 0x2, [@TCA_HTB_INIT={0x18, 0x2, {0x3, 0x8, 0x4}}]}}]}, 0x48}}, 0x20040084) r8 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000), 0x200002, 0x0) r9 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r9, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000000c0)=@newlink={0x40, 0x10, 0x405, 0x0, 0x0, {}, [@IFLA_LINKINFO={0x20, 0x12, 0x0, 0x1, @erspan={{0xb}, {0x10, 0x2, 0x0, 0x1, [@IFLA_GRE_FWMARK={0x8}, @IFLA_GRE_COLLECT_METADATA={0x4}]}}}]}, 0x40}}, 0x8080) r10 = openat$cgroup_ro(r8, &(0x7f0000000040)='cgroup.freeze\x00', 0x275a, 0x0) write$cgroup_int(r10, &(0x7f00000010c0)=0x3, 0x12) r11 = openat$tun(0xffffffffffffff9c, &(0x7f0000000400), 0x0, 0x0) r12 = socket(0x400000000010, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r12, 0x8933, &(0x7f0000000380)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r12, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000700)=@newtfilter={0x2b4, 0x2c, 0xd27, 0x170bd2c, 0x2002, {0x0, 0x0, 0x0, r13, {0xb, 0xc}, {0x0, 0x3}, {0x8, 0x10}}, [@filter_kind_options=@f_flower={{0xb}, {0x284, 0x2, [@TCA_FLOWER_KEY_IP_TOS_MASK={0x5, 0x4a, 0xb}, @TCA_FLOWER_KEY_VLAN_ID={0x6, 0x17, 0xf07}, @TCA_FLOWER_KEY_ARP_SIP={0x8, 0x39, @dev={0xac, 0x14, 0x14, 0x44}}, @TCA_FLOWER_KEY_ETH_DST_MASK={0xa, 0x5, [0x0, 0xff, 0x0, 0x0, 0xff]}, @TCA_FLOWER_KEY_VLAN_ID={0x6, 0x17, 0x9eb}, @TCA_FLOWER_KEY_TCP_FLAGS={0x6, 0x47, 0x9}, @TCA_FLOWER_ACT={0x224, 0x3, [@m_skbedit={0xd0, 0x1a, 0x0, 0x0, {{0xc}, {0x1c, 0x2, 0x0, 0x1, [@TCA_SKBEDIT_PRIORITY={0x8, 0x3, {0xffe0, 0xb}}, @TCA_SKBEDIT_QUEUE_MAPPING={0x6, 0x4, 0x5}, @TCA_SKBEDIT_PRIORITY={0x8, 0x3, {0x4, 0x6}}]}, {0x89, 0x6, "c725c7447552aba9d49c3034ca6328268075aaec29304947ae0b85d35b17f82261fc0591f9ef668bb01568f524cc307d6627eb85d1c27fd9379693824748652c41b684e29c326edf6340401ae3aedf275ac42c7bf0be25368d0787be4a61bdc540d416679323986db42c6aa04251f1f3e1d53248a7835a9d505589573e87b63db99f8cde8a"}, {0xc, 0x7, {0x0, 0x1}}, {0xc, 0x8, {0x1, 0x2}}}}, @m_bpf={0x64, 0x8, 0x0, 0x0, {{0x8}, {0x10, 0x2, 0x0, 0x1, [@TCA_ACT_BPF_NAME={0xc, 0x6, './file0\x00'}]}, {0x30, 0x6, "8b85760a97540483b6cb7199aefb39ee613acf7aeac0c576a76470e838081c6f630ee097213ba69fd2b78acd"}, {0xc, 0x7, {0x1, 0x1}}, {0xc, 0x8, {0x7d62d272ba1f274f, 0x9fab36f51086b224}}}}, @m_simple={0xec, 0x13, 0x0, 0x0, {{0xb}, {0x48, 0x2, 0x0, 0x1, [@TCA_DEF_PARMS={0x18, 0x2, {0x0, 0xffbfffff, 0x3, 0x8, 0xa}}, @TCA_DEF_DATA={0x12, 0x3, 'cgroup.freeze\x00'}, @TCA_DEF_PARMS={0x18, 0x2, {0x80000001, 0x0, 0x8, 0x7372, 0x2}}]}, {0x7b, 0x6, "86fe44f1b37414bf23c516c423e50bd5fbefd87b6046aaa588cfe4cf990a26ae0f1053eae582c24a8d835c1084849370f37844cb1eb202b6f4444ce22fb8d9d078e5c00e09ad357509737c7347920ff43b51f907cd6a067e9add362bb38eea6a9e7c949172827a8c40b34161662c3f8c70b18975770366"}, {0xc, 0x7, {0x1, 0x1}}, {0xc, 0x8, {0x2, 0x2}}}}]}, @TCA_FLOWER_INDEV={0x14, 0x2, 'vlan0\x00'}, @TCA_FLOWER_KEY_ENC_IPV6_SRC_MASK={0x14, 0x20, [0xffffff00, 0xff]}]}}]}, 0x2b4}, 0x1, 0x0, 0x0, 0x4894}, 0x40003) close(r11) socket(0x40000000015, 0x5, 0x0) ioctl$SIOCSIFHWADDR(r11, 0x8914, &(0x7f0000002280)={'syzkaller0\x00', @multicast}) r14 = socket$kcm(0x11, 0x3, 0x0) setsockopt$sock_attach_bpf(r14, 0x107, 0xf, &(0x7f0000000600), 0x56) sendmsg$kcm(r14, &(0x7f0000000280)={&(0x7f0000000440)=@xdp={0x2c, 0x0, r13, 0x42}, 0x80, &(0x7f0000003300)=[{&(0x7f00000001c0)="27030200dc0f14000e000b000025c10200000012125ce882cbf400930bf4533f00429c65112a093bbf60b85bcb06", 0x2e}], 0x1}, 0x4005) sendmsg$nl_generic(r3, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000006c0)=ANY=[@ANYBLOB="40000000400087012cbd7000fadbdf25037c00000400c280240001802000108014000c00000000000000000000000000000000010800038004000000040008"], 0x40}, 0x1, 0x0, 0x0, 0x4c084}, 0x0) 7m8.68199721s ago: executing program 2 (id=3299): r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x7101}) (async) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x7101}) socket$nl_route(0x10, 0x3, 0x0) (async) r1 = socket$nl_route(0x10, 0x3, 0x0) r2 = socket$unix(0x1, 0x1, 0x0) ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r1, &(0x7f00000012c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000140)=@newqdisc={0x44, 0x24, 0x4ee4e6a52ff56541, 0x70bd2a, 0xffffffff, {0x0, 0x0, 0x0, r3, {0x0, 0xfff1}, {0xffff, 0xffff}}, [@qdisc_kind_options=@q_hfsc={{0x9}, {0x14, 0x2, @TCA_HFSC_FSC={0x10, 0x2, {0x4d, 0xfffffffb, 0x7fffffff}}}}]}, 0x44}, 0x1, 0x0, 0x0, 0x4000000}, 0x20040084) sendmsg$nl_route_sched(r1, &(0x7f0000001200)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000001740)=@newqdisc={0x434, 0x28, 0x4ee4e6a52ff56541, 0x4001, 0xfffffdf8, {0x0, 0x0, 0x0, r3, {0x10}, {}, {0xf, 0x3}}, [@qdisc_kind_options=@q_tbf={{0x8}, {0x408, 0x2, [@TCA_TBF_RTAB={0x404, 0x2, [0x1, 0x1, 0x9, 0x8000, 0x3, 0x5, 0x5, 0xb762, 0x206, 0x7, 0x8, 0xf, 0x2, 0x80000001, 0x400, 0x7fc, 0xffff8000, 0x6, 0x401, 0x9, 0xb89, 0xffffe4f5, 0xd6, 0x4, 0xffff, 0x7, 0x0, 0x2, 0x101, 0x1, 0xfffffffc, 0x4, 0x80000, 0x1, 0x9, 0xc, 0x20001000, 0x4, 0x2, 0x7, 0x4, 0x99, 0x9, 0x5, 0x6, 0x7, 0xfffffff7, 0x1, 0x17f, 0x9, 0x9, 0x44, 0x8, 0x8, 0x1, 0x4, 0x7ff, 0x8, 0x7, 0x80000001, 0x400, 0x8, 0xfffffa72, 0xcd, 0xffffff80, 0x80000000, 0xc, 0x4, 0x65, 0x91, 0x659, 0x9, 0xf, 0x9, 0xc28, 0x9, 0x7, 0x3, 0x401, 0x3, 0x2, 0xfffffffa, 0x1, 0x10001, 0x3, 0x0, 0x4, 0x8, 0x8, 0x7, 0x1, 0x1, 0x1, 0x4, 0x40, 0x7, 0x12, 0x8000, 0x1, 0x4dc, 0x80, 0x3, 0x7fffffff, 0xff, 0x9, 0xa7, 0xf, 0x101, 0x0, 0x3, 0x1000, 0x4, 0x401, 0x7, 0x80000002, 0xffff, 0x6, 0x5, 0x4, 0xffffffff, 0x80000000, 0x1966f9ab, 0x200, 0x20200, 0xed5, 0xfffffc00, 0x2, 0x4, 0x8, 0x485e, 0xa85, 0x80000040, 0x2, 0x7, 0x7, 0x102, 0x2d5421e8, 0x7, 0x10000, 0xffffffff, 0x6, 0x3ff, 0xf04, 0x0, 0x2, 0x5, 0xfffffc00, 0x5, 0x8d, 0x4, 0x401, 0x4, 0x9, 0x3, 0xfffffffb, 0xd4c, 0x0, 0x0, 0x2, 0x5, 0x8, 0x3, 0x0, 0x800, 0x2, 0x8, 0x7ff, 0x1, 0x9, 0x6, 0x5, 0x5, 0x4d15, 0x1ff, 0xfffff060, 0x3, 0x469, 0x3, 0x0, 0x200, 0x10000005, 0x7, 0x1, 0x8, 0x42ba, 0x4, 0x9, 0x3, 0x8, 0x8, 0x53, 0x6, 0x4, 0x400, 0x8000, 0x0, 0x2c310b18, 0xffb, 0x5, 0x3, 0xcd34, 0x9, 0x81, 0x0, 0x2, 0x7, 0x8, 0xfff, 0x1ff, 0x8000, 0x3, 0x8, 0x3, 0x9, 0x9a6, 0xe4cb, 0x402, 0x1, 0x1ff, 0x3e, 0x9b4, 0x1, 0x8, 0x0, 0x8, 0x0, 0x9, 0x0, 0x4, 0x10, 0x901, 0x5, 0x0, 0x7b, 0xfffffeff, 0x6, 0x6, 0xc, 0x401000, 0x9, 0x9, 0xe6, 0xab, 0x400, 0x7fffffff, 0xed, 0x7ff, 0xd83, 0x68, 0x80000001, 0x4, 0x1, 0x6, 0x200, 0x2]}]}}]}, 0x434}, 0x1, 0x0, 0x0, 0x40098}, 0x0) r4 = socket$unix(0x1, 0x1, 0x0) socket$kcm(0x11, 0x3, 0x0) (async) r5 = socket$kcm(0x11, 0x3, 0x0) r6 = openat$tun(0xffffffffffffff9c, &(0x7f0000000400), 0x0, 0x0) close(r6) (async) close(r6) r7 = socket$nl_generic(0x10, 0x3, 0x10) getsockopt$inet6_IPV6_XFRM_POLICY(0xffffffffffffffff, 0x29, 0x23, &(0x7f00000004c0)={{{@in=@broadcast, @in6=@local, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}, {{@in6=@private1}, 0x0, @in6=@private2}}, &(0x7f00000005c0)=0xe8) sendmsg$nl_generic(r7, &(0x7f00000007c0)={&(0x7f00000000c0)={0x10, 0x0, 0x0, 0x80000000}, 0xc, &(0x7f0000000740)={&(0x7f0000000680)=ANY=[@ANYBLOB="b00000001d0010002bbd7000fcdbdf25110000009c0060800800d0000a0101000400c98093df4086a5f064359c31b9175133bdae4e3201d2d65c6ace6079f9fa653128b5145730f86ec36aaf0bd26cf066ba5e02045c126a5c39235879e2646291157f16e5c74202c0c2baa9326d797d901ba29b65ef8dc310f004db89693f6bdda9abdc20a0a87f87044405a23d6eddd967f6011ae7711ca41026759140f883040008000400a88008004800", @ANYRES32=r8, @ANYBLOB], 0xb0}, 0x1, 0x0, 0x0, 0x4000040}, 0x4000) socket$nl_netfilter(0x10, 0x3, 0xc) (async) socket$nl_netfilter(0x10, 0x3, 0xc) ioctl$SIOCSIFHWADDR(r6, 0x8914, &(0x7f0000002280)={'syzkaller0\x00', @multicast}) (async) ioctl$SIOCSIFHWADDR(r6, 0x8914, &(0x7f0000002280)={'syzkaller0\x00', @multicast}) ioctl$sock_SIOCGIFINDEX(r4, 0x8933, &(0x7f0000000480)={'syzkaller0\x00', 0x0}) r10 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000340), r7) sendmsg$NL80211_CMD_DEAUTHENTICATE(r4, &(0x7f0000000a80)={&(0x7f00000002c0)={0x10, 0x0, 0x0, 0x10000000}, 0xc, &(0x7f0000000a40)={&(0x7f0000000ac0)=ANY=[@ANYBLOB="2c0035b1457551007f8497490fd090bb6285f5245da1c1021a96fcad3b6c8a2d774dfcbea2c9a5ceb35a453e7838d94159e48f0ecab2ac48441caf4b719c735746495aa626e9e91b8f0a4801eb60b39d393a44237add604fba9597c479b1dfd60e7683bccabee56a71d400"/119, @ANYRES16=r10, @ANYBLOB="000125bd7000fcdbdf25270000000c009900000000803c0000000a0006002a87eb3028320000"], 0x2c}, 0x1, 0x0, 0x0, 0x844}, 0x20044051) socket(0x400000000010, 0x3, 0x0) (async) r11 = socket(0x400000000010, 0x3, 0x0) r12 = socket$unix(0x1, 0x1, 0x0) ioctl$sock_SIOCGIFINDEX(r12, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r11, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000640)=@newtfilter={0x3c, 0x2c, 0xd3f, 0x30bd2d, 0x25dfdbfd, {0x0, 0x0, 0x0, r13, {0xb, 0xfff3}, {}, {0x8, 0xa}}, [@filter_kind_options=@f_basic={{0xa}, {0xc, 0x2, [@TCA_BASIC_CLASSID={0x8, 0x1, {0x10, 0x13}}]}}]}, 0x3c}, 0x1, 0x0, 0x0, 0x10}, 0x0) r14 = socket$rds(0x15, 0x5, 0x0) bind$rds(r14, &(0x7f0000000840)={0x2, 0x0, @loopback}, 0x10) sendmsg$rds(r14, &(0x7f0000000000)={&(0x7f0000000040)={0x2, 0x0, @private=0xa010100}, 0x10, 0x0, 0x0, &(0x7f0000000780)=[@rdma_args={0x48, 0x114, 0x1, {{}, {0x0}, &(0x7f0000000300)=[{&(0x7f0000002640)=""/102389, 0x18ff5}], 0x1, 0x1903d}}], 0x48}, 0x0) (async) sendmsg$rds(r14, &(0x7f0000000000)={&(0x7f0000000040)={0x2, 0x0, @private=0xa010100}, 0x10, 0x0, 0x0, &(0x7f0000000780)=[@rdma_args={0x48, 0x114, 0x1, {{}, {0x0}, &(0x7f0000000300)=[{&(0x7f0000002640)=""/102389, 0x18ff5}], 0x1, 0x1903d}}], 0x48}, 0x0) socketpair$unix(0x1, 0x5, 0x0, &(0x7f00000029c0)) (async) socketpair$unix(0x1, 0x5, 0x0, &(0x7f00000029c0)) setsockopt$sock_attach_bpf(r5, 0x107, 0xf, &(0x7f0000000600), 0x56) ioctl$VFAT_IOCTL_READDIR_BOTH(r0, 0x82307201, &(0x7f0000000800)=[{0x0, 0x0, 0x100}, {0x0, 0x0, 0x100}]) (async) ioctl$VFAT_IOCTL_READDIR_BOTH(r0, 0x82307201, &(0x7f0000000800)=[{0x0, 0x0, 0x100}, {0x0, 0x0, 0x100}]) sendmsg$kcm(r5, &(0x7f0000000000)={&(0x7f0000000380)=@xdp={0x2c, 0x0, r9, 0x7}, 0x80, &(0x7f00000001c0)=[{&(0x7f0000000180)="27030200080314000e00072f01000000000000113cfdcb00000080ed00827600000000000100", 0x26}, {&(0x7f0000000780)="9942d6af00007f8f", 0xdd86}], 0x2}, 0x5) 7m7.788384007s ago: executing program 2 (id=3305): bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000240)=ANY=[@ANYBLOB="020000000400000008000000010000", @ANYRES32, @ANYBLOB='\x00'/20, @ANYRES32=0x0, @ANYRES32=0x0], 0x50) r0 = bpf$PROG_LOAD(0x5, &(0x7f00000003c0)={0x11, 0x11, &(0x7f00000008c0)=ANY=[@ANYBLOB="180000008000000000000000fdffffff850000007b000000b7080000000000007b8af8ff00000000b7080000161300007b8af0ff00000000bfa100000000000007010000f8ffffffbfa400000000000007040000f0ffffffb70200000800000018030000", @ANYRES32=0x0, @ANYBLOB="0000000000000100b705000008000000850000006900000095"], &(0x7f0000000500)='GPL\x00', 0x0, 0x0, 0x0, 0x41100, 0x8, '\x00', 0x0, @fallback=0x19, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffff}, 0x94) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f00000002c0)={r0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1000003f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x20}, 0x15) ioctl$XFS_IOC_FSBULKSTAT_SINGLE(r0, 0xc0205866, &(0x7f0000000c00)={&(0x7f0000000200)=0x7fffffff, 0xffffffff, &(0x7f0000000c40)=[{}, {}, {}, {}, {}], &(0x7f0000000840)}) bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f0000000340)=ANY=[@ANYBLOB="1b000000000000000000001c19000400000000", @ANYRES32=0x0, @ANYBLOB='\x00'/20, @ANYRES32=0x0, @ANYRES32, @ANYBLOB='\x00'/28], 0x50) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000003c0)={0x11, 0x11, &(0x7f0000000540)=ANY=[@ANYBLOB="180000008000000000000000fdffffff8500000007000000b7080000000000007b8af8ff00000000b7080000161300007b8af0ff00000000bfa100000000000007010000f8ffffffbfa400000000000007040000f0ffffffb70200000800000018030000", @ANYRES32], &(0x7f0000000500)='GPL\x00', 0x0, 0x0, 0x0, 0x41100, 0x21, '\x00', 0x0, @fallback=0x19, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffff}, 0x94) socket$inet6(0xa, 0x80000, 0x3) r2 = socket$inet_icmp_raw(0x2, 0x3, 0x1) pwrite64(0xffffffffffffffff, &(0x7f0000000000)="801ad0205a4686504ef5ba38150e0c5d18032e", 0x13, 0x3) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000780)={0x6, 0x3, &(0x7f0000000680)=ANY=[@ANYBLOB="1800000002000000000000000000000095"], 0x0, 0x20000003, 0x0, 0x0, 0x0, 0x44, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0xffffff7e}, 0x94) r3 = bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000480)={0x6, 0x3, &(0x7f0000000680)=ANY=[], &(0x7f00000002c0)='syzkaller\x00', 0x0, 0x0, 0x0, 0x41000, 0x27}, 0x94) syz_emit_ethernet(0x8e, &(0x7f0000000000)=ANY=[@ANYBLOB="aaaaaaaaaaaac437bf8cb64c86dd6b"], 0x0) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000600)={r3, 0x5, 0xb68, 0x0, &(0x7f0000000000)='%', 0x0, 0xd01, 0x2000, 0x0, 0x0, 0x0, 0x0, 0x2}, 0x48) sendmsg$IPSET_CMD_CREATE(0xffffffffffffffff, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000140)=ANY=[@ANYBLOB="4c000000020603000000000000000000000000001400078008001240000000000500150002000000050001000600000005000500020000000500040000000000090002"], 0x4c}}, 0x0) r4 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r4, &(0x7f000000c2c0)={0x0, 0x0, &(0x7f000000c280)={&(0x7f0000000100)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a20000000000a01010000000000000000050000080900010073797a30000000005c000000030a03000000000000000000050000000900010073797a30000000000900030073797a300000000008000c40000000032800048008000240000000120800014000000000140004"], 0xa4}}, 0x0) pipe(0x0) getsockopt$inet_mreqn(r2, 0x0, 0x24, &(0x7f0000000000)={@broadcast, @initdev}, &(0x7f0000000080)=0xc) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f00000002c0)={r1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1000003f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x20}, 0x15) write$cgroup_subtree(0xffffffffffffffff, &(0x7f0000000080)=ANY=[], 0x10448) mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x2000003, 0x12, 0xffffffffffffffff, 0x0) socket$inet6_tcp(0xa, 0x1, 0x0) r5 = socket$nl_netfilter(0x10, 0x3, 0xc) close(r5) r6 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r6, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000240)=ANY=[@ANYBLOB="140000001000010000000000000000000500000a28000000000a030000000000000000000a00000708000240000000020900010073797a31000000002c000000030a010100000000000000000a0000070900010073797a31000000000900030073797a320000000014000000110001"], 0x7c}, 0x1, 0x0, 0x0, 0x4000}, 0x0) sendmsg$NFT_BATCH(r6, &(0x7f0000009b40)={0x0, 0x0, &(0x7f0000009b00)={&(0x7f0000000100)=ANY=[@ANYRES64=r2], 0xb4}, 0x1, 0x0, 0x0, 0x4000850}, 0x40000c0) sendmsg$NFT_BATCH(r5, &(0x7f0000009b40)={0x0, 0x0, &(0x7f0000009b00)={&(0x7f00000006c0)=ANY=[@ANYBLOB="140000001000010000000000000000000c0a010100000000000000000a0000060900020073797a31000000000900010073797a3100000000200003801c0000800c00018006000100000000000c00044000fdff0010000007140000001100010000000000000000000100000a0000000000000000db7df84e8f8bb44d77beb097c7"], 0x74}, 0x1, 0x0, 0x0, 0x4000850}, 0x40) r7 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='memory.events\x00', 0x275a, 0x0) write$cgroup_subtree(r7, &(0x7f0000000080)=ANY=[], 0x10448) 7m7.107907118s ago: executing program 2 (id=3307): socket$nl_generic(0x10, 0x3, 0x10) (async) r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = bpf$ITER_CREATE(0xb, &(0x7f0000000100), 0x0) close(0xffffffffffffffff) (async) close(0xffffffffffffffff) socket$kcm(0x29, 0x7, 0x0) (async) r2 = socket$kcm(0x29, 0x7, 0x0) r3 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000140)='blkio.bfq.io_service_time_recursive\x00', 0x275a, 0x0) write$cgroup_int(r3, &(0x7f0000000000), 0xffffff6a) r4 = socket$kcm(0x29, 0x5, 0x0) sendmsg$kcm(r4, &(0x7f0000000280)={0x0, 0x0, &(0x7f00000002c0), 0x3}, 0xc854) setsockopt$sock_int(r4, 0x1, 0x12, &(0x7f0000000180)=0x4c, 0x4) syz_genetlink_get_family_id$nl80211(&(0x7f00000000c0), r1) sendfile(r2, r3, 0x0, 0xffffffff000) syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) (async) syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) bpf$PROG_LOAD(0x5, &(0x7f00000017c0)={0x1a, 0xe, &(0x7f0000000d00)=ANY=[@ANYBLOB="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"], &(0x7f00000001c0)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x8, &(0x7f0000000000)={0x10}, 0x8, 0x10, &(0x7f0000000000)={0x2, 0x10}, 0x10}, 0x94) (async) r5 = bpf$PROG_LOAD(0x5, &(0x7f00000017c0)={0x1a, 0xe, &(0x7f0000000d00)=ANY=[@ANYBLOB="b70000008100003bbfa30000000000000703000000feffff720af0fff8ffffff71a4f0ff0000000071105400000000001d400500000000004704000001ed00000f030000000000001d440000000000006b0a00fe000000007313000000000000b5000000000000009500000000000000023bc065b58111c6dfa041b63af4a3912435f1a864a710aad58db6a693002e7f3be361917adef6ee1c8a2a4f8ef1e50becb19bc461e91a7168c50000000190f32050e436fe275daf51efd601b6bf01c8e8b1b526375ec4dd6fcd82e4fee5bef7af9aa0d7d600c095199fe3ff31a8fd3c0fd8b7ff831028e599b0eaebbdbd732c9cc00eec363e4a8f6456e2cc21557c0afc646c0200000000000000020000e35208b0bb0d2cd829e654400e2438ec649dc76128610643a98d9ec21ead2ed51b104d4d91af25b845d8a7925c3109b151b8b9f75dd08d123deda82fc9c4d7ecc7a803bf28bf7076c15b463bebc72f526d8e8afcb913466aaa7f6df70252e79166d858fcd0e06dd31af9612f2460d0b11008e59a5923906f88b53987ad1714f62ba7a54f0c33d39000d0bfed3a6a59ff616236fd8f2477184bdef728d236619074d6ebdfd1f5089048ddff6da40f9411fe722631cb467600ade70063e5291569b33d21dae356e1c51f03a801be8189679a16da18ec0ae564162a27afea62d84f3a10746443d6438e959532e0617d419c6bc6ea9f2bca4464f56e24e6d2105bd901204a1deeed4155617572652d950ad31928b0b0c3dc2869f478341d02d0f5ad94b081fcd507acb4b9c65fee9d5a17f48a7382f13d000000225d85ae49cee383dc5049076b989b40000000000000da60d2ae20cfb91d6a49964757cdf538f9ce2bdb1ab062cd54e67011d355d84ce97bb0c6b4a595e487efbb2d71cde2c140952f9a0f0bc6980fe78683ac5c0c31032599ddd71063be9261b2e1aab1675b34a22048ef8c126aeef5f510a8f1aded94a129e4aec6f8d9ab06fa2e04cfe0649226c697d9e8eaade69d0540059fe6c7fe7cd8697502c7596566d674e425da5e87e59602a9f6590521d31d3804b3e0a1053abdc31282dfb15eb6841bb64a1b304502dda787343ce3c953992e4a982f3c48153baae244e7bf37548c7f1a4cad2422ee965a38f7defbd2160242b104e20dc2d9b0c35608d402ccdd9069bd50b994fda7a9de44028d6112a0c2d21b2dc98816106dec28eaeb883418f562ae00023ea96d10f172c0374d6eed826416050000000bfe9b4a9c5a90ff59d54d1f92ecc4e95dd2d18383117c039862198899b212c55318294270a1ad10c80fef7c24d47afce829ba0f85da6d888f18ea40ab959f6074ab2a40d85d15017ab513cdc6c0e57fb1c1ca571380d7b4ead35a385e0b4a26b702396df7e0c1e02b6e4114f244a9bf93f04bf072f0861f7580e69db384ac7eeedcf2ba1a9508f9d6aba582a896a9f1ffa968eacea75caf822a7a63ba34015ea5aacb1188883ad2a3b1832371fe5bc621426d1ed0a4a99702cc1b6912a1e717d29135753208165b9cdbae2ed9dc7358f0ebadde0b727f27feeb744ddcc536cbae315c7d1fe1399562ba6824840bd2951680f6f2f9a6a83469620c6e74e1f46132559c4f8700a350845ffa0d829e4f79adc287906943408e6df3c391e97ba48db0a5adbfd03aac93df8866fb010aec0e92bed1fe39af169d2a466f0db6f3d9436a7d55fc30511d00000000c95265b2bd83d64a532869d701723fedcbada1ee7baa5b6a686b50f0937f778af083e055f6138a757ebd0ed91124a6b244f9acf41ac5d73a008364e0606a594817031fc2f52c8785fe0721719b3d654026c6ea08b83b123145ab5703dad844ceb201ddeb6dc5f6a903792283c42efc54fa84323afc4c10eff462c8843187f1dd48ef3fa293774d582956ff0f40b10ca94f6feeb2893c17888e1cdba94a6ea80c33ead5722c3293a493f1479531dd88f15efaaeea831555877f9538d6ee6ba65893ff1f908ba7554ba583fef3ec7932f5954f31a878e2fae6691d1aee1da02ba516467df3e7d1daac43738012e4fee18a22da19fcdb4c2890cda1f96b952511e3a69d694d625e0b2f808890205f3a6da2819d2f9e77c7c64affa54fec0136cbafa5f6f096753b639a920099c1f69219927ea5301fff0a6063d427f0688430754c02180d61542c2571f983e9673560000000000000000005a7b57f03ca91a01ba2e30ca99e8ebc15ecb4d91675767999d146aef7799738b292fd640dfef6b04d086f737a159d7e0c6e4d81ad64a8bbca48568325b2969e2b15f36b788bce5ccdbaf75c94cb93499f6947a967a7bce14c6de4e7c0660d80010f5c653d22d49030a8c2a4ab595bf4238f18ca428dafc7ac96d404607a0000000051a2104f22e6db5a62b5089c1b45282d38864daa3ae81d6b0968d1d2867b91b7d120617d12d91db2633d6864da40fc5d2f55ff07c53147de202ce517b54783a17aaeb6737c323f9f98e354cc98dcfe23ad01bd1c61563e69ffe1c2c73e1661061173f359e9052a4cecd89008f70314a0bdd491ec86a4555d89fe0120f64c62e8e3ed8bcb45202c3d4bbec8d722824c0ebca8db1ea4a003d2fbdc1f9be78537756ab5bbe4fe9af5d785d0128171c90d9900ce2532b0f9d01c4b45294fbba468df3e1b393cb4e62e754598e47df6bd06431c94bc5d047899fd219f448bf9189c65c9d91eda6b52a373803a9efe44f86909bc90addb7b9aee813df534aac4b3093c91b8068cd84990453f006694d461b76a58d88cf0f520310a1e9fdc18cde98d662eee077515d0a8811922929e085392ab3d1311b8243266d87047f601fa88a0da36b9f302e8262395174328f2482d14008de83070744f143fdec90ba5a82668d5fac114c13955ad6dca5db2231d8ba14c54c47ed04a4b4ace17e357e1d6432399f87a7a14245bbd796a09313b247b95d37ff40a404bdad74bd20000000000000000000099fef7cd7af3ce64a92f95d89d125b1e641240d7e5e27a3d1f7684448c3e3822d617e205061298b939a191be4b48e169bde2cae3accc5bd40a2968b59c93d35f8e42366fdef9a2abae1cf01ce68abff26b61aac8aaa54ebbcefd23f21ce8153b9926e12e925cb56119df72c7533a48d028ad0c74e2a9478fa3ba18a1a2b65079cc1c7bc46dd12305a1ae9dd19e8d525206c0a728cfd42193abe8130bc01a2d69841f3d7799ac04bdc590bb1c89b9c695f163e57343c9bfb59909433c9001c5f8b23e26534a538fc933cac6c2a92d038df638a0f226df9fb857bd414c2cd69985e8053e3dfa41614d7c74d04d8c2471041d17c730fad28395f8d4688898cd58b9d600c851626529bb58aa364b55e73f053450665e7b94ad1012fd7a8139166fd5e59c84f4ab279b1b99c028db4cb9680c8035f967db18de738844da7e260a830c1ffa49f5af3c15423a0e315acb82a3e89218cb314e68fda4d94aa1d815babc13b9fd336dfaa6d5d164301190bc2d4c04087729033342045804a28082abc3b4762302a271722fb515f31e0dd115a292f1e68481a62c49d15ea5460a29c60b1058fb7aa9bf4ee3cbe11b03711a15d730646b72d074dab1e8c429339f3460d324c17a4a8bfc7d7eab45bef00664d6dc82300000000000"], &(0x7f00000001c0)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x8, &(0x7f0000000000)={0x10}, 0x8, 0x10, &(0x7f0000000000)={0x2, 0x10}, 0x10}, 0x94) r6 = socket$nl_route(0x10, 0x3, 0x0) r7 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000900)={0x11, 0x3, &(0x7f00000002c0)=ANY=[@ANYBLOB="1800000005000000000000000000000095"], &(0x7f0000000300)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x44, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x101}, 0x94) setsockopt$sock_attach_bpf(r6, 0x1, 0x32, &(0x7f0000000340)=r5, 0x4) bpf$BPF_GET_PROG_INFO(0xf, &(0x7f0000000580)={r7, 0xe0, &(0x7f0000000480)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, ""/16, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8, 0x0, 0x0}}, 0x10) (async) bpf$BPF_GET_PROG_INFO(0xf, &(0x7f0000000580)={r7, 0xe0, &(0x7f0000000480)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, ""/16, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8, 0x0, 0x0}}, 0x10) bpf$BPF_GET_PROG_INFO(0xf, &(0x7f0000000380)={r7, 0xe0, &(0x7f0000000440)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, ""/16, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8, 0x0, 0x0}}, 0x10) sendmsg$nl_route_sched(r6, &(0x7f00000007c0)={0x0, 0x0, &(0x7f0000000180)={&(0x7f00000003c0)=@getqdisc={0x30, 0x26, 0x20, 0x70bd2e, 0x25dfdbfe, {0x0, 0x0, 0x0, r8, {0xf, 0x6}, {0x8, 0x9}, {0x6, 0xc1a55a60bc2690be}}, [{0x4}, {0x4}, {0x4}]}, 0x30}, 0x1, 0x0, 0x0, 0x8004001}, 0x20008000) getsockopt$sock_cred(r0, 0x1, 0x4d, 0x0, &(0x7f00000001c0)) r9 = socket$alg(0x26, 0x5, 0x0) bind$alg(r9, &(0x7f0000000000)={0x26, 'skcipher\x00', 0x0, 0x0, 'ecb-twofish-3way\x00'}, 0x45) (async) bind$alg(r9, &(0x7f0000000000)={0x26, 'skcipher\x00', 0x0, 0x0, 'ecb-twofish-3way\x00'}, 0x45) accept4(r9, 0x0, 0x0, 0x0) (async) r10 = accept4(r9, 0x0, 0x0, 0x0) setsockopt$ALG_SET_KEY(r9, 0x117, 0x1, &(0x7f0000000200)="ad00"/16, 0x10) recvmmsg(r10, &(0x7f0000002440), 0x3ffffffffffff67, 0x0, 0x0) (async) recvmmsg(r10, &(0x7f0000002440), 0x3ffffffffffff67, 0x0, 0x0) sendmmsg$unix(r10, 0x0, 0x0, 0xc000) pselect6(0x40, &(0x7f0000000000)={0x7f, 0x8, 0x3, 0x7, 0x7, 0x3, 0x800, 0x6}, 0x0, 0x0, 0x0, 0x0) syz_genetlink_get_family_id$nl80211(&(0x7f0000000080), 0xffffffffffffffff) sendmsg$NL80211_CMD_GET_PROTOCOL_FEATURES(r3, &(0x7f0000000240)={&(0x7f0000000180)={0x10, 0x0, 0x0, 0x400}, 0xc, 0x0, 0x1, 0x0, 0x0, 0x44010}, 0x40000) (async) sendmsg$NL80211_CMD_GET_PROTOCOL_FEATURES(r3, &(0x7f0000000240)={&(0x7f0000000180)={0x10, 0x0, 0x0, 0x400}, 0xc, 0x0, 0x1, 0x0, 0x0, 0x44010}, 0x40000) sendmsg$NL80211_CMD_RELOAD_REGDB(r0, &(0x7f00000006c0)={0x0, 0x0, &(0x7f0000000440)={0x0}, 0x1, 0x0, 0x0, 0x20000000}, 0x20008004) 6m51.892523902s ago: executing program 32 (id=3307): socket$nl_generic(0x10, 0x3, 0x10) (async) r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = bpf$ITER_CREATE(0xb, &(0x7f0000000100), 0x0) close(0xffffffffffffffff) (async) close(0xffffffffffffffff) socket$kcm(0x29, 0x7, 0x0) (async) r2 = socket$kcm(0x29, 0x7, 0x0) r3 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000140)='blkio.bfq.io_service_time_recursive\x00', 0x275a, 0x0) write$cgroup_int(r3, &(0x7f0000000000), 0xffffff6a) r4 = socket$kcm(0x29, 0x5, 0x0) sendmsg$kcm(r4, &(0x7f0000000280)={0x0, 0x0, &(0x7f00000002c0), 0x3}, 0xc854) setsockopt$sock_int(r4, 0x1, 0x12, &(0x7f0000000180)=0x4c, 0x4) syz_genetlink_get_family_id$nl80211(&(0x7f00000000c0), r1) sendfile(r2, r3, 0x0, 0xffffffff000) syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) (async) syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) bpf$PROG_LOAD(0x5, &(0x7f00000017c0)={0x1a, 0xe, &(0x7f0000000d00)=ANY=[@ANYBLOB="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"], &(0x7f00000001c0)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x8, &(0x7f0000000000)={0x10}, 0x8, 0x10, &(0x7f0000000000)={0x2, 0x10}, 0x10}, 0x94) (async) r5 = bpf$PROG_LOAD(0x5, &(0x7f00000017c0)={0x1a, 0xe, &(0x7f0000000d00)=ANY=[@ANYBLOB="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"], &(0x7f00000001c0)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x8, &(0x7f0000000000)={0x10}, 0x8, 0x10, &(0x7f0000000000)={0x2, 0x10}, 0x10}, 0x94) r6 = socket$nl_route(0x10, 0x3, 0x0) r7 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000900)={0x11, 0x3, &(0x7f00000002c0)=ANY=[@ANYBLOB="1800000005000000000000000000000095"], &(0x7f0000000300)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x44, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x101}, 0x94) setsockopt$sock_attach_bpf(r6, 0x1, 0x32, &(0x7f0000000340)=r5, 0x4) bpf$BPF_GET_PROG_INFO(0xf, &(0x7f0000000580)={r7, 0xe0, &(0x7f0000000480)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, ""/16, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8, 0x0, 0x0}}, 0x10) (async) bpf$BPF_GET_PROG_INFO(0xf, &(0x7f0000000580)={r7, 0xe0, &(0x7f0000000480)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, ""/16, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8, 0x0, 0x0}}, 0x10) bpf$BPF_GET_PROG_INFO(0xf, &(0x7f0000000380)={r7, 0xe0, &(0x7f0000000440)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, ""/16, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8, 0x0, 0x0}}, 0x10) sendmsg$nl_route_sched(r6, &(0x7f00000007c0)={0x0, 0x0, &(0x7f0000000180)={&(0x7f00000003c0)=@getqdisc={0x30, 0x26, 0x20, 0x70bd2e, 0x25dfdbfe, {0x0, 0x0, 0x0, r8, {0xf, 0x6}, {0x8, 0x9}, {0x6, 0xc1a55a60bc2690be}}, [{0x4}, {0x4}, {0x4}]}, 0x30}, 0x1, 0x0, 0x0, 0x8004001}, 0x20008000) getsockopt$sock_cred(r0, 0x1, 0x4d, 0x0, &(0x7f00000001c0)) r9 = socket$alg(0x26, 0x5, 0x0) bind$alg(r9, &(0x7f0000000000)={0x26, 'skcipher\x00', 0x0, 0x0, 'ecb-twofish-3way\x00'}, 0x45) (async) bind$alg(r9, &(0x7f0000000000)={0x26, 'skcipher\x00', 0x0, 0x0, 'ecb-twofish-3way\x00'}, 0x45) accept4(r9, 0x0, 0x0, 0x0) (async) r10 = accept4(r9, 0x0, 0x0, 0x0) setsockopt$ALG_SET_KEY(r9, 0x117, 0x1, &(0x7f0000000200)="ad00"/16, 0x10) recvmmsg(r10, &(0x7f0000002440), 0x3ffffffffffff67, 0x0, 0x0) (async) recvmmsg(r10, &(0x7f0000002440), 0x3ffffffffffff67, 0x0, 0x0) sendmmsg$unix(r10, 0x0, 0x0, 0xc000) pselect6(0x40, &(0x7f0000000000)={0x7f, 0x8, 0x3, 0x7, 0x7, 0x3, 0x800, 0x6}, 0x0, 0x0, 0x0, 0x0) syz_genetlink_get_family_id$nl80211(&(0x7f0000000080), 0xffffffffffffffff) sendmsg$NL80211_CMD_GET_PROTOCOL_FEATURES(r3, &(0x7f0000000240)={&(0x7f0000000180)={0x10, 0x0, 0x0, 0x400}, 0xc, 0x0, 0x1, 0x0, 0x0, 0x44010}, 0x40000) (async) sendmsg$NL80211_CMD_GET_PROTOCOL_FEATURES(r3, &(0x7f0000000240)={&(0x7f0000000180)={0x10, 0x0, 0x0, 0x400}, 0xc, 0x0, 0x1, 0x0, 0x0, 0x44010}, 0x40000) sendmsg$NL80211_CMD_RELOAD_REGDB(r0, &(0x7f00000006c0)={0x0, 0x0, &(0x7f0000000440)={0x0}, 0x1, 0x0, 0x0, 0x20000000}, 0x20008004) 4.355279725s ago: executing program 5 (id=6162): r0 = socket$inet_sctp(0x2, 0x1, 0x84) poll(&(0x7f0000000100)=[{r0, 0x84}], 0x1, 0x3ff) sendto$inet(r0, &(0x7f0000000140)='^', 0x34000, 0x0, &(0x7f0000004ff0)={0x2, 0x0, @rand_addr=0xfffffffffffffffe}, 0x10) r1 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r2 = syz_genetlink_get_family_id$ieee802154(&(0x7f0000000dc0), r1) sendmsg$IEEE802154_LLSEC_SETPARAMS(r1, &(0x7f0000000f00)={0x0, 0x0, &(0x7f0000000600)={&(0x7f0000000580)={0x30, r2, 0x1, 0x70b92c, 0x25dfdbfb, {}, [@IEEE802154_ATTR_DEV_NAME={0xa, 0x1, 'wpan0\x00'}, @IEEE802154_ATTR_LLSEC_KEY_MODE={0x5, 0x2b, 0x1}, @IEEE802154_ATTR_LLSEC_SECLEVEL={0x5}]}, 0x30}, 0x1, 0x0, 0x0, 0x4008000}, 0x20000014) openat$tun(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) r3 = socket$inet_sctp(0x2, 0x1, 0x84) getsockopt$inet_sctp_SCTP_MAX_BURST(r3, 0x84, 0xd, &(0x7f0000000000)=@assoc_value, &(0x7f0000000100)=0x8) r4 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='cgroup.controllers\x00', 0x275a, 0x0) write$tun(r4, &(0x7f0000000000)=ANY=[], 0x38) mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x1, 0x10012, r4, 0x0) openat$tun(0xffffffffffffff9c, &(0x7f0000000000), 0x472881, 0x0) listen(r0, 0xda90) r5 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) bind$bt_hci(r5, &(0x7f0000000240)={0x1f, 0xffff, 0x3}, 0x6) write(r5, &(0x7f00000000c0)="510003000000", 0x6) accept4(r0, 0x0, 0x0, 0x0) 2.384654266s ago: executing program 5 (id=6173): r0 = bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f00000000c0)=ANY=[@ANYBLOB="02000000040000000800000001"], 0x50) r1 = bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f00000007c0)=ANY=[@ANYBLOB="1b0000000000000000000000000004"], 0x48) bpf$PROG_LOAD(0x5, &(0x7f0000000700)={0x15, 0x1c, &(0x7f0000000d80)=ANY=[@ANYBLOB="1808000000000500000000000000000018110000", @ANYRES32=r1, @ANYBLOB="0000000000000000b702000014000000b7030000000000008500000083000000bc8900000000000035090100000003009500000000000000b7080000000100007b9a00fe00000000b509ffffff1f0000c3aaf0fff1020100bf8600000000000007080000f8ffffffbfa400000000000007040000f0ffffffb70200000800000018220000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7050000080000004608ebff76000000bf9800000000000056080000000000008500000000000000b70000000000000095"], &(0x7f0000000680)='syzkaller\x00', 0x4, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) 2.378059223s ago: executing program 5 (id=6176): r0 = socket$pppl2tp(0x18, 0x1, 0x1) r1 = socket$inet6_udp(0xa, 0x2, 0x0) connect$pppl2tp(r0, &(0x7f0000000000)=@pppol2tpv3={0x18, 0x1, {0x3, r1, {0x2, 0x2, @multicast2}, 0x2, 0x0, 0x4}}, 0x2e) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000180)={0x1f, 0xb, 0x0, &(0x7f0000000380)='syzkaller\x00', 0x6, 0x0, 0x0, 0x40f00, 0x38, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x1000}, 0x94) r2 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='devices.list\x00', 0x275a, 0x0) write$cgroup_subtree(r2, &(0x7f0000000200)=ANY=[], 0x32600) mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x2000001, 0x12, r2, 0x0) r3 = socket$inet(0xa, 0x801, 0x84) connect$inet(r3, &(0x7f0000004cc0)={0x2, 0x0, @remote={0xac, 0x14, 0xffffffffffffffff}}, 0x10) listen(r3, 0xfffffffd) r4 = accept4(r3, 0x0, 0x0, 0x0) getsockopt$inet_sctp6_SCTP_PRIMARY_ADDR(r4, 0x84, 0x6, &(0x7f0000000380)={0x0, @in={{0x2, 0x4e22, @multicast1}}}, &(0x7f0000000180)=0x84) syz_genetlink_get_family_id$nl80211(&(0x7f0000000200), r0) 2.362641773s ago: executing program 0 (id=6178): bpf$PROG_LOAD(0x5, &(0x7f0000000240)={0x15, 0x4, &(0x7f0000000400)=ANY=[@ANYBLOB="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"], &(0x7f00000002c0)='syzkaller\x00', 0x5, 0xfd90, &(0x7f0000000300)=""/195, 0x0, 0x0, '\x00', 0x0, @sk_reuseport, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0x1f3, 0x10, &(0x7f0000000080), 0xfffffffffffffc79}, 0x48) r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$team(&(0x7f00000000c0), 0xffffffffffffffff) ioctl$ifreq_SIOCGIFINDEX_team(0xffffffffffffffff, 0x8933, &(0x7f0000000100)={'team0\x00', 0x0}) ioctl$sock_SIOCGIFINDEX(0xffffffffffffffff, 0x8933, &(0x7f0000000140)={'erspan0\x00', 0x0}) r4 = socket$packet(0x11, 0x3, 0x300) r5 = socket$nl_route(0x10, 0x3, 0x0) r6 = socket(0x10, 0x803, 0x0) sendmsg$nl_route(r6, &(0x7f0000000380)={0x0, 0x4076cbba9945d516, &(0x7f0000000340)={0x0, 0x14}}, 0x0) getsockname$packet(r6, &(0x7f0000000140)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route(r5, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000500)={&(0x7f0000000080)=@newlink={0x38, 0x10, 0x439, 0x10000000, 0x0, {0x0, 0x0, 0x0, r7, 0x69801}, [@IFLA_LINKINFO={0x18, 0x12, 0x0, 0x1, @gre={{0x8}, {0xc, 0x2, 0x0, 0x1, [@IFLA_GRE_REMOTE={0x8, 0x7, @dev={0xac, 0x14, 0x14, 0x2}}]}}}]}, 0x38}, 0x1, 0x0, 0x0, 0x20040000}, 0x0) sendto$packet(r4, &(0x7f0000000240)="3b826a86871d9a3d70e7c44b615e", 0xe, 0x2404c081, &(0x7f0000000200)={0x11, 0x88a8, r7, 0x1, 0x4, 0x6, @multicast}, 0x14) ioctl$sock_ipv6_tunnel_SIOCGET6RD(0xffffffffffffffff, 0x89f8, &(0x7f00000007c0)={'gretap0\x00', &(0x7f0000000180)={'gre0\x00', 0x0, 0x8, 0x0, 0x26ed, 0x6, {{0x1b, 0x4, 0x1, 0x23, 0x6c, 0x66, 0x0, 0xf7, 0x29, 0x0, @multicast1, @multicast2, {[@timestamp_prespec={0x44, 0x54, 0x41, 0x3, 0xc, [{@multicast2, 0x9}, {@private=0xa010102, 0x6}, {@multicast1, 0xfff}, {@broadcast, 0x1}, {@broadcast, 0x6}, {@local}, {@rand_addr=0x64010101, 0x8}, {@private=0xa010100, 0x9}, {@multicast2, 0x5}, {@dev={0xac, 0x14, 0x14, 0x14}, 0xfffffffc}]}, @generic={0x89, 0x2}]}}}}}) ioctl$sock_ipv4_tunnel_SIOCCHGTUNNEL(0xffffffffffffffff, 0x89f3, &(0x7f00000008c0)={'gre0\x00', &(0x7f0000000800)={'erspan0\x00', 0x0, 0x80, 0x80, 0x42c1, 0x1, {{0x24, 0x4, 0x1, 0x30, 0x90, 0x65, 0x0, 0x80, 0x2f, 0x0, @loopback, @rand_addr=0x64010101, {[@timestamp_addr={0x44, 0x14, 0x18, 0x1, 0x8, [{@initdev={0xac, 0x1e, 0x1, 0x0}, 0xc}, {@multicast1, 0x6}]}, @timestamp_prespec={0x44, 0x14, 0x1c, 0x3, 0x7, [{@rand_addr=0x64010100, 0x7}, {@remote, 0x4a0}]}, @rr={0x7, 0x17, 0x90, [@empty, @initdev={0xac, 0x1e, 0x0, 0x0}, @rand_addr=0x64010102, @rand_addr=0x64010101, @rand_addr=0x64010102]}, @end, @rr={0x7, 0xf, 0xca, [@remote, @empty, @remote]}, @timestamp={0x44, 0x2c, 0x1f, 0x0, 0x2, [0x1000, 0x9, 0xffffffff, 0x8, 0x9, 0x0, 0x2, 0x3, 0x5, 0x5]}]}}}}}) r10 = socket$packet(0x11, 0x3, 0x300) ioctl$sock_SIOCGIFINDEX(r10, 0x8933, &(0x7f0000000180)={'veth0_to_batadv\x00', 0x0}) r12 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r12, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000080)=ANY=[@ANYBLOB="4c0000001000010400"/20, @ANYRES32=0x0, @ANYBLOB="00000000080000001c00128009000100766c616e000000000c000280060001000000000008000500", @ANYRES32=r11, @ANYBLOB="080003"], 0x4c}}, 0x0) ioctl$ifreq_SIOCGIFINDEX_team(0xffffffffffffffff, 0x8933, &(0x7f0000000900)={'team0\x00', 0x0}) r14 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r14, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r14, &(0x7f00000003c0)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000140)=@newqdisc={0x34, 0x24, 0x4ee4e6a52ff56541, 0x70b928, 0x25dfdbfd, {0x0, 0x0, 0x0, r15, {0x0, 0x10}, {0xffff, 0xb}, {0xffff, 0xe}}, [@qdisc_kind_options=@q_pfifo_fast={0xf}]}, 0x34}, 0x1, 0x0, 0x0, 0x240040e0}, 0x0) getsockopt$PNPIPE_IFINDEX(0xffffffffffffffff, 0x113, 0x2, &(0x7f0000000940)=0x0, &(0x7f0000000980)=0x4) r17 = socket$packet(0x11, 0x3, 0x300) ioctl$sock_SIOCGIFINDEX(r17, 0x8933, &(0x7f0000000040)={'syzkaller0\x00', 0x0}) sendto$packet(r17, &(0x7f0000000280)="05ac2d814e83ea34af2c63a528e9a1a201019a86d63e4169e2d99357c73e5cd0a506462420b097d21e4420966e8ef2848e7577043ac0e5770000000020347d2d11b4eaa017c7b52ceeb6ed3d86505ea0865865211d9c208b17beae6233e7e25b39950398d4ef2583f754bae1ce21fb2282e4ed2cc017a2c3f3c6499edce996f4a48ff0597b381ab5b50835753ad657ac3b1b7a13ce9c59516dafca38f660be98da9967912901f721d6a4912c638bd69b9425b849edfd70f0fbde1ae027acebc2212a900dda4a8e06793308421125cc1cd2032b543e6c2409da023278635e98aa", 0xe0, 0x4009, &(0x7f0000000140)={0x11, 0x86dd, r18, 0x1, 0x3, 0x6, @local}, 0x14) ioctl$sock_ipv6_tunnel_SIOCCHGTUNNEL(0xffffffffffffffff, 0x89f3, &(0x7f0000000a40)={'syztnl2\x00', &(0x7f00000009c0)={'ip6tnl0\x00', 0x0, 0x2f, 0xf8, 0x84, 0x6, 0x31, @remote, @empty, 0x80, 0x78c8, 0x1, 0x2}}) getsockopt$PNPIPE_IFINDEX(0xffffffffffffffff, 0x113, 0x2, &(0x7f0000000a80)=0x0, &(0x7f0000000ac0)=0x4) getsockopt$inet_mreqn(0xffffffffffffffff, 0x0, 0x20, &(0x7f0000000b00)={@dev, @remote, 0x0}, &(0x7f0000000b40)=0xc) sendmsg$TEAM_CMD_OPTIONS_GET(r0, &(0x7f0000001080)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x200}, 0xc, &(0x7f0000001040)={&(0x7f00000010c0)={0x4ac, r1, 0x400, 0x70bd25, 0x25dfdbfe, {}, [{{0x8, 0x1, r2}, {0x74, 0x2, 0x0, 0x1, [{0x38, 0x1, @activeport={{0x24}, {0x5}, {0x8, 0x4, r3}}}, {0x38, 0x1, @mcast_rejoin_count={{0x24}, {0x5}, {0x8, 0x4, 0x40}}}]}}, {{0x8}, {0x21c, 0x2, 0x0, 0x1, [{0x44, 0x1, @name={{0x24}, {0x5}, {0x11, 0x4, 'activebackup\x00'}}}, {0x40, 0x1, @queue_id={{{0x24}, {0x5}, {0x8, 0x4, 0x2}}, {0x8, 0x6, r8}}}, {0x38, 0x1, @activeport={{0x24}, {0x5}, {0x8, 0x4, r9}}}, {0x38, 0x1, @notify_peers_count={{0x24}, {0x5}, {0x8, 0x4, 0x3}}}, {0x38, 0x1, @mcast_rejoin_count={{0x24}, {0x5}, {0x8, 0x4, 0x81d}}}, {0x3c, 0x1, @user_linkup_enabled={{{0x24}, {0x5}, {0x4}}, {0x8, 0x6, r11}}}, {0x38, 0x1, @notify_peers_count={{0x24}, {0x5}, {0x8, 0x4, 0x3}}}, {0x3c, 0x1, @bpf_hash_func={{0x24}, {0x5}, {0xc, 0x4, [{0x8, 0x77, 0x1, 0x8}]}}}, {0x3c, 0x1, @enabled={{{0x24}, {0x5}, {0x4}}, {0x0, 0x6, r13}}}]}}, {{0x8, 0x1, r15}, {0x1f0, 0x2, 0x0, 0x1, [{0x40, 0x1, @lb_tx_hash_to_port_mapping={{{0x24}, {0x5}, {0x8, 0x4, r16}}, {0x8, 0x7, 0x8000}}}, {0x40, 0x1, @priority={{{0x24}, {0x5}, {0x8, 0x4, 0xfffffff9}}, {0x8, 0x6, r18}}}, {0x40, 0x1, @priority={{{0x24}, {0x5}, {0x8, 0x4, 0x6}}, {0x8}}}, {0x38, 0x1, @lb_stats_refresh_interval={{0x24}, {0x5}, {0x8, 0x4, 0x1ff}}}, {0x40, 0x1, @priority={{{0x24}, {0x5}, {0x8}}, {0x8, 0x6, r19}}}, {0x3c, 0x1, @enabled={{{0x24}, {0x5}, {0x4}}, {0x8, 0x6, r20}}}, {0x40, 0x1, @priority={{{0x24}, {0x5}, {0x8, 0x4, 0x8}}, {0x8, 0x6, r21}}}, {0x38, 0x1, @notify_peers_interval={{0x24}, {0x5}, {0x8, 0x4, 0xa}}}]}}]}, 0x4ac}, 0x1, 0x0, 0x0, 0x20000000}, 0x41000) 2.266485179s ago: executing program 0 (id=6183): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000240)=ANY=[@ANYBLOB="140000001000010000000000000000000500000a28000000000a030000000000000000000a00000708000240000000020900010073797a31000000002c000000030a010100000000000000000a0000070900010073797a31000000000900030073797a320000000014000000110001"], 0x7c}, 0x1, 0x0, 0x0, 0x4000}, 0x0) r1 = socket$inet6_udp(0xa, 0x2, 0x0) r2 = socket$inet_sctp(0x2, 0x1, 0x84) setsockopt$inet_sctp_SCTP_ASSOCINFO(r2, 0x84, 0x1, &(0x7f0000000080)={0x0, 0x0, 0xfffb, 0x6, 0x6, 0x2}, 0x14) setsockopt$IP6T_SO_SET_REPLACE(r1, 0x29, 0x40, &(0x7f0000000000)=@raw={'raw\x00', 0x3c1, 0x3, 0x2c0, 0x0, 0x18c, 0x203, 0x0, 0x19030000, 0x1f0, 0x2e0, 0x2e0, 0x1f0, 0x2e0, 0x3, 0x0, {[{{@uncond, 0x300, 0xa8, 0xd0}, @common=@unspec=@NFQUEUE1={0x28, 'NFQUEUE\x00', 0x1, {0x8, 0x2}}}, {{@uncond, 0x0, 0xf8, 0x120, 0x0, {}, [@inet=@rpfilter={{0x28}, {0xb}}, @inet=@rpfilter={{0x28}, {0xc}}]}, @common=@inet=@SET1={0x28, 'SET\x00', 0x1, {{0x0, 0xfd, 0x4}, {0xffffffffffffffff, 0x3}}}}], {{'\x00', 0x0, 0xa8, 0xd0}, {0x28}}}}, 0x320) sendmsg$NFT_BATCH(r0, &(0x7f0000009b40)={0x0, 0x0, &(0x7f0000009b00)={&(0x7f0000002100)=ANY=[@ANYBLOB="140000001000010000000000000000000500000a5c000000090a010400000000000000000a0000040900010073797a310000000008000540000000040900020073797a310000000008000a40fffffffc200011800e000100636f6e6e6c696d69740000000c00028008000140fffff27414000000110001"], 0x84}, 0x1, 0x0, 0x0, 0x4000850}, 0x40) r3 = openat$tun(0xffffffffffffff9c, &(0x7f0000000040), 0x40241, 0x0) unshare(0x20000400) syz_genetlink_get_family_id$netlbl_cipso(0x0, 0xffffffffffffffff) r4 = epoll_create1(0x0) ioctl$FS_IOC_SETFLAGS(r4, 0x80088a02, 0xffffffffffffffff) ioctl$TUNSETIFF(r3, 0x400454ca, &(0x7f0000000200)={'syzkaller1\x00', 0xc201}) r5 = socket$kcm(0x2, 0xa, 0x2) ioctl$BTRFS_IOC_SPACE_INFO(r3, 0xc0109414, &(0x7f000000c300)={0xd35, 0x2, ['\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00']}) ioctl$SIOCSIFHWADDR(r5, 0x8914, &(0x7f0000000140)={'syzkaller1\x00', @link_local}) sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000000c0)=ANY=[@ANYBLOB="140000001000010000000000000000000500000a38000000030a03000000000000000000020000ffffffff0073797a300000000009000300000000006d0697540c000240000000000000000114000000110001"], 0x60}}, 0x0) r6 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r6, &(0x7f000000c2c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f00000008c0)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a28000000000a0101000000005e1affd5020000000900010073797a300000000008000240000000032c000000030a01030000e6ff00000000020000000900010073797a30000000000900030073797a320000000014000000110001"], 0x7c}}, 0x0) sendmsg$NFT_BATCH(r6, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000080)=ANY=[@ANYBLOB="140000001000010000e90000000000000000000a78000000060a0b040000000000000000020000034c000480240001800b000100736f636b657400001400028008000240000000030800014000000000240001800a000100717565756500000014000280080004400000001006000340000100000900010073797a30000000000900020073797a32"], 0xa0}}, 0x0) write$tun(r3, &(0x7f0000000300)=ANY=[@ANYBLOB="000086dd03000a000000140000076c07010033d43afffe800000000000000000000000000010ff02000000000000000000000000000189"], 0x340a) 2.037328798s ago: executing program 3 (id=6185): r0 = bpf$BPF_BTF_LOAD(0x12, &(0x7f00000002c0)={&(0x7f0000000140)={{0xeb9f, 0x1, 0x0, 0x18, 0x0, 0x5b, 0x5b, 0xa, [@var={0x6, 0x0, 0x0, 0xe, 0x4, 0x2}, @datasec={0x4, 0x1, 0x0, 0xf, 0x3, [{0x4, 0x541b0180, 0x4}], "e3bf75"}, @struct={0x2, 0x3, 0x0, 0x4, 0x0, 0x7, [{0x5, 0x2, 0x8}, {0xc, 0x3, 0xfffffffb}, {0xb, 0x0, 0x2}]}]}, {0x0, [0x0, 0x2e, 0x0, 0x5f, 0x2e, 0x5f, 0x61, 0x30]}}, &(0x7f00000001c0)=""/213, 0x7e, 0xd5}, 0x28) (async) r1 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r1, &(0x7f00000001c0)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f00000005c0)=@newtaction={0x98, 0x30, 0x871a15abc695fb3d, 0x0, 0x0, {}, [{0x84, 0x1, [@m_tunnel_key={0x80, 0x1, 0x0, 0x0, {{0xf}, {0x50, 0x2, 0x0, 0x1, [@TCA_TUNNEL_KEY_ENC_IPV6_SRC={0x14, 0x5, @private1}, @TCA_TUNNEL_KEY_ENC_IPV6_DST={0x14, 0x6, @local}, @TCA_TUNNEL_KEY_PARMS={0x1c, 0x2, {{}, 0x1}}, @TCA_TUNNEL_KEY_ENC_KEY_ID={0x8}]}, {0xffffffffffffffa5}, {0xc}, {0xc}}}]}]}, 0x98}}, 0x0) (async) r2 = bpf$ITER_CREATE(0x21, &(0x7f0000000300), 0x8) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000080)={0xd, 0x5, &(0x7f0000000340)=ANY=[@ANYBLOB="18000000000000000000100000", @ANYRES32=r2, @ANYBLOB="00000000000000009500000000000000"], &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x24, r0}, 0x94) 1.926919216s ago: executing program 3 (id=6187): r0 = bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f00000000c0)=ANY=[@ANYBLOB="02000000040000000800000001"], 0x50) r1 = bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f00000007c0)=ANY=[@ANYBLOB="1b0000000000000000000000000004"], 0x48) bpf$PROG_LOAD(0x5, &(0x7f0000000700)={0x15, 0x1c, &(0x7f0000000d80)=ANY=[@ANYBLOB="1808000000000500000000000000000018110000", @ANYRES32=r1, @ANYBLOB="0000000000000000b702000014000000b7030000000000008500000083000000bc8900000000000035090100000003009500000000000000b7080000000100007b9a00fe00000000b509ffffff1f0000c3aaf0fff1030100bf8600000000000007080000f8ffffffbfa400000000000007040000f0ffffffb70200000800000018220000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7050000080000004608ebff76000000bf9800000000000056080000000000008500000000000000b70000000000000095"], &(0x7f0000000680)='syzkaller\x00', 0x4, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) 1.870427799s ago: executing program 3 (id=6188): r0 = bpf$MAP_CREATE(0x0, &(0x7f00000003c0)=ANY=[@ANYBLOB="0a000000030000000400000008"], 0x50) close(0x3) mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000)='./cgroup.cpu/syz0\x00', 0x1ff) r1 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000), 0x200002, 0x0) r2 = openat$cgroup_ro(r1, &(0x7f0000000380)='memory.stat\x00', 0x0, 0x0) sendfile(0xffffffffffffffff, r2, 0x0, 0x400000013) bpf$MAP_CREATE(0x0, &(0x7f0000000440)=@base={0x2, 0x4, 0xcc, 0xc, 0x1000}, 0x50) r3 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x1, 0xd, &(0x7f0000000300)=ANY=[@ANYBLOB="18000000000000000000000000000000850000002f00000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000100000095"], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) r4 = socket$inet6_sctp(0xa, 0x1, 0x84) socket$packet(0x11, 0x2, 0x300) bpf$PROG_LOAD_XDP(0x5, 0x0, 0x0) sendmsg$nl_generic(0xffffffffffffffff, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000180)={0x0}, 0x1, 0x0, 0x0, 0xcac7c5895bbe9331}, 0xc010) getsockname$packet(0xffffffffffffffff, &(0x7f0000000600)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, 0x0) socket$kcm(0x2d, 0x2, 0x0) r6 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r6, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000080)=ANY=[@ANYBLOB="1c0000001800ffff00000000000000000a001000fe00fd09"], 0x1c}}, 0x0) r7 = syz_genetlink_get_family_id$team(&(0x7f0000000400), r2) sendmsg$TEAM_CMD_OPTIONS_GET(0xffffffffffffffff, &(0x7f0000000940)={&(0x7f00000001c0)={0x10, 0x0, 0x0, 0x10}, 0xc, &(0x7f0000000900)={&(0x7f0000000640)={0x250, r7, 0x1, 0x70bd2d, 0x25dfdbfc, {}, [{{0x8}, {0x44, 0x2, 0x0, 0x1, [{0x40, 0x1, @lb_port_stats={{{0x24}, {0x5}, {0x8, 0x4, 0xd7}}, {0x8, 0x6, r5}}}]}}, {{0x8, 0x1, r5}, {0xf4, 0x2, 0x0, 0x1, [{0x40, 0x1, @lb_port_stats={{{0x24}, {0x5}, {0x8, 0x4, 0x2}}, {0x8, 0x6, r5}}}, {0x3c, 0x1, @user_linkup={{{0x24}, {0x5}, {0x4}}, {0x8, 0x6, r5}}}, {0x3c, 0x1, @user_linkup={{{0x24}, {0x5}, {0x4}}, {0x8, 0x6, r5}}}, {0x38, 0x1, @lb_stats_refresh_interval={{0x24}, {0x5}, {0x8, 0x4, 0x7}}}]}}, {{0x8, 0x1, r5}, {0xec, 0x2, 0x0, 0x1, [{0x3c, 0x1, @user_linkup_enabled={{{0x24}, {0x5}, {0x4}}, {0x8, 0x6, r5}}}, {0x38, 0x1, @mcast_rejoin_interval={{0x24}, {0x5}, {0x8, 0x4, 0x4}}}, {0x38, 0x1, @mcast_rejoin_interval={{0x24}, {0x5}, {0x8, 0x4, 0xb}}}, {0x3c, 0x1, @lb_tx_method={{0x24}, {0x5}, {0x9, 0x4, 'hash\x00'}}}]}}]}, 0x250}, 0x1, 0x0, 0x0, 0xf8237a3bf0a8f4ae}, 0x4000) sendmmsg$inet6(0xffffffffffffffff, &(0x7f0000004f00), 0x0, 0x0) ioctl$sock_inet6_SIOCADDRT(r4, 0x890b, &(0x7f0000000200)={@mcast1, @rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x02', @loopback, 0x10000006, 0x0, 0x4, 0x100, 0x4000000010000009, 0x310308}) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f00000002c0)={r3, 0x0, 0xe, 0x0, &(0x7f00000008c0)="7a7fa22c2aff88df53ef2a2d280f", 0x0, 0xa00, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x50) 1.853937185s ago: executing program 5 (id=6190): r0 = bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000240)=ANY=[@ANYBLOB="0200000004000000080000000100000080000000", @ANYRES32=0x0, @ANYBLOB='\x00'/20, @ANYRES32=0x0, @ANYRES32=0x0, @ANYBLOB="0000000000000000000000008fb6b560fd354a24612a000000000030"], 0x48) r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000840)={0x3, 0x1c, &(0x7f0000000d80)=ANY=[@ANYBLOB="1808000058000000000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b702000014000000b7030000000000008500000005000000bf0900000000000035090100000000409500000000000000b7020000000000007b9af8ff00000000b5090000010000007baaf0ff00000000bf2700000000000007080000fffdffffbfa400000000000007040000f0ffffff740200000800000018090000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7050000080000004608f0ff760000007ea000000000000056080000000000008500000081000000b70000000000000095"], &(0x7f0000000300)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @sched_cls=0x36, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) socket$inet_tcp(0x2, 0x1, 0x0) (async) r2 = socket$nl_generic(0x10, 0x3, 0x10) r3 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000080), 0xffffffffffffffff) sendmsg$NL80211_CMD_RELOAD_REGDB(r2, &(0x7f00000006c0)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000340)={0x14, r3, 0x1, 0x70bd2d, 0x25dfdbfe}, 0x14}, 0x1, 0x0, 0x0, 0x20000000}, 0x20008004) r4 = socket$nl_generic(0x10, 0x3, 0x10) (async) r5 = socket$alg(0x26, 0x5, 0x0) bind$alg(r5, &(0x7f00000004c0)={0x26, 'skcipher\x00', 0x0, 0x0, 'cbc-serpent-avx\x00'}, 0x58) setsockopt$ALG_SET_KEY(r5, 0x117, 0x1, 0x0, 0x0) (async) r6 = accept4(r5, 0x0, 0x0, 0x800) setsockopt$sock_int(r6, 0x1, 0x7, &(0x7f00000014c0)=0x10000b, 0x4) (async) sendmmsg$alg(r6, &(0x7f0000000040)=[{0x0, 0x0, &(0x7f0000000540)=[{&(0x7f0000000080)="f78d9ca38fff48f3be52163448412ba8", 0xfffffe3f}, {&(0x7f0000000140)="ebe3a0e9796cfd1647e299f4e376fdba128280b372219d205e81f4a7f71c1926aae1efd7e0054a863f3d5cfe6cb55b5bb9fa6935849e6098ed884e7cb51726b360fbb37b4fe035bbb095873048"}, {&(0x7f00000003c0)="e8700e444d50a969ff67347cff6127e6ef12ee3819271482a4975a52c1ab9b8b4db3945d1032005eabe97b4dc33a47d3a158da988456d30026b433186f53cdcdb93a4722bf306a10470d50f5cb1ece9ead3459bab1cf1538cd0b157653c5e892962c80f158c443e9c6ad7d2a8103ef2f4b93766b9a21501f94c1568b13756b66f74f46cf801704d2da8b96c34070b233af0afcc436712e58ed25e721193af05a045ad3fdc928f02f3dbad19d3e66eebda2e63f3f46ef4511cee26d7b48241847bf9e343ef4674c45e2a085060f11"}], 0x1, &(0x7f0000000380)=[@op={0x18, 0x117, 0x3, 0x1}], 0x3}], 0x1, 0x40800) (async) recvmsg(r6, &(0x7f00000005c0)={0x0, 0x0, &(0x7f00000001c0)=[{&(0x7f00000000c0)=""/81, 0x7ffff000}, {&(0x7f0000000200)=""/83, 0x20000253}], 0x2}, 0x0) (async) r7 = socket$alg(0x26, 0x5, 0x0) bind$alg(r7, &(0x7f0000000640)={0x26, 'aead\x00', 0x0, 0x0, 'gcm(anubis)\x00'}, 0x58) setsockopt$ALG_SET_KEY(r7, 0x117, 0x1, &(0x7f0000000280)="ad56b6c5820fae9d6dcd3292ea54c7beef915d564c90c200", 0x18) r8 = accept4(r7, 0x0, 0x0, 0x800) sendmsg$OSF_MSG_ADD(r8, &(0x7f0000000300)={0x0, 0x0, &(0x7f00000002c0)={0x0, 0x175c}, 0x1, 0x0, 0x0, 0x4044084}, 0x1dc8b08251aa3334) syz_genetlink_get_family_id$ethtool(&(0x7f0000000000), r8) (async) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f00000007c0)={{0x1, 0xffffffffffffffff}, &(0x7f0000000740), &(0x7f0000000780)=r1}, 0x20) (async) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000940)={{0xffffffffffffffff, 0xffffffffffffffff}, &(0x7f0000000800), &(0x7f0000000900)=r1}, 0x20) ioctl$ifreq_SIOCGIFINDEX_batadv_hard(r7, 0x8933, &(0x7f0000000a80)={'batadv_slave_0\x00', 0x0}) bpf$BPF_PROG_WITH_BTFID_LOAD(0x5, &(0x7f0000000b80)=@bpf_ext={0x1c, 0x20, &(0x7f0000000c40)=ANY=[@ANYBLOB="180000000400000000000000d500000018110000", @ANYRES32=r9, @ANYBLOB="0000000000000000b7020000000000008500000086000000850000008d0000001838000002000000000000000000000018000000010000000000000003000000b7080000000000007b8af8ff00000000b7080000030000007b8af0ff00000000bfa100000000000007010000f8ffffffbfa400000000000007040000f0ffffffb70200000800000018230000", @ANYRES32=r0, @ANYBLOB="010000000000000000c64956f43080e7c90018120000", @ANYRES32=r10, @ANYBLOB="0000000000000000b703000000000000850000000c000000b700000000000000185800000700000000000000000000009500000000000000"], &(0x7f0000000a40)='GPL\x00', 0x491ba879, 0x0, 0x0, 0x40f00, 0x2, '\x00', r11, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, &(0x7f0000000ac0)={0x0, 0x9, 0x7, 0x3}, 0x10, 0x23830, r1, 0x4, &(0x7f0000000b00)=[r0], &(0x7f0000000580)=[{0x0, 0x1, 0x6, 0x5}, {0x8000000, 0x3, 0x8, 0xb}, {0x3, 0x5, 0x3, 0xa}, {0x5, 0x4, 0x7, 0x8}], 0x10, 0x235}, 0x94) syz_genetlink_get_family_id$nl80211(&(0x7f0000000080), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r4, 0x8933, &(0x7f00000000c0)={'wlan1\x00'}) sendmsg$NL80211_CMD_SET_STATION(r4, &(0x7f00000002c0)={0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x40000}, 0x4048014) (async) r12 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r12, &(0x7f0000000680)={0x0, 0x0, &(0x7f0000000640)={&(0x7f0000000400)=@getspdinfo={0x14, 0x25, 0x1, 0x70bd2a, 0x25dfdbfe}, 0x14}, 0x1, 0x0, 0x0, 0x90}, 0x4000000) 1.750697749s ago: executing program 0 (id=6191): r0 = syz_init_net_socket$bt_l2cap(0x1f, 0x2, 0x0) connect$bt_l2cap(r0, &(0x7f0000000080)={0x1f, 0x0, @fixed={'\xaa\xaa\xaa\xaa\xaa', 0x10}, 0x7ff}, 0xe) r1 = syz_init_net_socket$bt_hidp(0x1f, 0x3, 0x6) ioctl$sock_bt_hidp_HIDPCONNADD(r1, 0x400448c8, &(0x7f00000000c0)={r0, r0, 0x206, 0x0, 0x0, 0x2, 0x72, 0x1, 0x3, 0x7, 0x0, 0x8, 'syz0\x00'}) bind$vsock_stream(0xffffffffffffffff, &(0x7f0000000040)={0x28, 0x0, 0x2710, @local}, 0x10) r2 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000380)='blkio.bfq.empty_time\x00', 0x275a, 0x0) write$cgroup_int(r2, &(0x7f0000000000), 0xffffff6a) unshare(0x2c020400) readv(r2, 0x0, 0x0) write$tun(r2, 0x0, 0x0) r3 = socket$inet6_tcp(0xa, 0x1, 0x0) sendmsg$IPSET_CMD_CREATE(0xffffffffffffffff, &(0x7f0000000140)={0x0, 0x0, &(0x7f00000044c0)={0x0, 0x4c}}, 0x0) setsockopt$inet6_tcp_int(r3, 0x6, 0x2000000000000020, &(0x7f0000000040)=0xa, 0x1959cc36) connect$inet6(r3, 0x0, 0x0) setsockopt$inet6_tcp_TCP_REPAIR(r3, 0x6, 0x13, 0x0, 0x0) r4 = socket$inet_tcp(0x2, 0x1, 0x0) r5 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='memory.events\x00', 0x275a, 0x0) mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x2000001, 0x12, r5, 0x0) setsockopt$inet_tcp_int(r4, 0x6, 0x1e, &(0x7f0000000380)=0xffffffff, 0x4) connect$unix(0xffffffffffffffff, &(0x7f0000000000)=@file={0x1, './file0\x00'}, 0x4) r6 = socket(0xa, 0x2, 0x0) listen(r6, 0x100) socket(0x5, 0x5, 0x9) sendmsg$nl_generic(0xffffffffffffffff, 0x0, 0x24044004) r7 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r7, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000040)={0x0}, 0x1, 0x0, 0x0, 0x42804}, 0x0) 1.549881434s ago: executing program 3 (id=6192): socket$nl_route(0x10, 0x3, 0x0) r0 = syz_init_net_socket$802154_dgram(0x24, 0x2, 0x0) setsockopt$WPAN_SECURITY(r0, 0x0, 0x1, &(0x7f0000000080)=0x1, 0x4) r1 = socket$inet6(0xa, 0x80002, 0x0) connect$inet6(r1, &(0x7f0000000000)={0xa, 0x0, 0x0, @loopback={0xff00000000000000}, 0x2000400}, 0x1c) sendmmsg$inet6(r1, &(0x7f0000003cc0)=[{{0x0, 0x0, &(0x7f0000003980), 0x176}}], 0x400000000000172, 0x4000000) r2 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r2, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000080)=@newlink={0x20, 0x10, 0x401, 0x0, 0x0, {0x0, 0x0, 0x0, 0x0, 0x3f, 0x211}}, 0x20}, 0x1, 0x0, 0x0, 0x40000}, 0x0) r3 = socket$nl_generic(0x10, 0x3, 0x10) r4 = syz_genetlink_get_family_id$team(&(0x7f00000044c0), 0xffffffffffffffff) ioctl$ifreq_SIOCGIFINDEX_team(r3, 0x8933, &(0x7f0000004700)={'team0\x00', 0x0}) r6 = socket$alg(0x26, 0x5, 0x0) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000100)={&(0x7f00000006c0)=ANY=[@ANYBLOB="55800000100039042abd70000000000000000000ad8429cf93288ea444a3ec0b47e109f4388fc987319383cb8095b5abaeed96a2f69a871d33e4a864968963ccda64e98b1a4fd350397b993f7ce231b8a664de299bb90a175874b545902a27570688b884dcadc8809247b53645dd68db0c7f361c0210c305fb0676", @ANYRES32=0x0, @ANYBLOB="031501002537a9401c0012800b00010067726574617000000c0002800800040001000080"], 0x3c}, 0x1, 0x0, 0x0, 0x410c0}, 0x4000020) bind$alg(r6, &(0x7f00000004c0)={0x26, 'skcipher\x00', 0x0, 0x0, 'cbc-serpent-avx\x00'}, 0x58) setsockopt$ALG_SET_KEY(r6, 0x117, 0x1, 0x0, 0x0) r7 = accept4(r6, 0x0, 0x0, 0x0) sendmmsg$alg(r7, &(0x7f0000000040)=[{0x0, 0x0, &(0x7f0000000000)=[{&(0x7f0000000080)="f78d9ca38fff48f3be52163448412ba8", 0xfffffe3f}, {&(0x7f0000000140)="ebe3a0e9796cfd1647e299f4e376fdba128280b372219d205e81f4a7f71c1926aae1efd7e0054a863f3d5cfe6cb55b5bb9fa6935849e6098ed884e7cb51726b360fbb37b4fe035bbb095873048"}, {&(0x7f00000003c0)="e8700e444d50a969ff67347cff6127e6ef12ee3819271482a4975a52c1ab9b8b4db3945d1032005eabe97b4dc33a47d3a158da988456d30026b433186f53cdcdb93a4722bf306a10470d50f5cb1ece9ead3459bab1cf1538cd0b157653c5e892962c80f158c443e9c6ad7d2a8103ef2f4b93766b9a21501f94c1568b13756b66f74f46cf801704d2da8b96c34070b233af0afcc436712e58ed25e721193af05a045ad3fdc928f02f3dbad19d3e66eebda2e63f3f46ef4511cee26d7b48241847bf9e343ef4674c45e2a085060f11"}], 0x1, &(0x7f0000000380)=[@op={0x18, 0x117, 0x3, 0x1}], 0x18}], 0x1, 0x40800) recvmsg(r7, &(0x7f00000005c0)={0x0, 0x0, &(0x7f00000001c0)=[{&(0x7f00000000c0)=""/81, 0x7ffff000}, {&(0x7f0000000200)=""/83, 0x20000253}], 0x2}, 0x0) r8 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_CREATE(r8, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000640)=ANY=[@ANYBLOB="58000000020601010000000000000000010000040c000300686173683a697000050001000700000005000500020000000900020073797a300000000005000400000000001400078008000840000000d3050014"], 0x58}, 0x1, 0x0, 0x0, 0x2002c0c4}, 0x8004) r9 = socket$netlink(0x10, 0x3, 0x10) bind$netlink(r9, &(0x7f0000514ff4)={0x10, 0x0, 0x0, 0x2ffffffff}, 0xc) socket$nl_route(0x10, 0x3, 0x0) bpf$BPF_PROG_WITH_BTFID_LOAD(0x5, &(0x7f0000000280)=@bpf_lsm={0x6, 0x3, &(0x7f00000003c0)=ANY=[@ANYBLOB="180000000300000000000000000000f195"], 0x0}, 0x94) r10 = bpf$BPF_PROG_WITH_BTFID_LOAD(0x5, &(0x7f0000000280)=@bpf_lsm={0x6, 0x3, &(0x7f00000003c0)=ANY=[], &(0x7f0000000140)='GPL\x00'}, 0x94) bpf$BPF_PROG_TEST_RUN(0x1c, &(0x7f0000000240)={r10, 0xf, 0x25, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x40) r11 = socket$kcm(0x10, 0x2, 0x0) sendmsg$kcm(r11, &(0x7f0000000600)={0x0, 0x0, &(0x7f0000000000)=[{&(0x7f0000000300)="2e00000010008188040f80ec59acbc0413a181000b00000000010000000000000e000a000f000000028002002d1f", 0x2e}], 0x1}, 0x80) sendmsg$TEAM_CMD_OPTIONS_SET(r9, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000180)=ANY=[@ANYBLOB="10010000", @ANYRES16=r4, @ANYBLOB="050427bd7000fedbdf250100000008000100", @ANYRES32=r5, @ANYBLOB="f400028061000100240001006e6f746966795f70656572735f696e74657276616c00000000000000000000000500030003000000080004"], 0x110}, 0x1, 0x0, 0x0, 0x4000401}, 0x2404c080) bpf$PROG_LOAD(0x5, &(0x7f00000002c0)={0xd, 0x4, &(0x7f00000000c0)=ANY=[@ANYBLOB="180000000000000000000000080000009111bf000000000095"], &(0x7f0000000000)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x60, '\x00', 0x0, @fallback=0x13, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1}, 0x94) 1.548607117s ago: executing program 1 (id=6193): r0 = socket(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000000400)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000380)=ANY=[@ANYBLOB="2000000072009fb3000800000400000007"], 0x20}, 0x1, 0x0, 0x0, 0x40}, 0x8000) (async) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000080)={0xd, 0x4, &(0x7f0000000000)=@framed={{}, [@ldst={0x1, 0x0, 0x3, 0x2, 0x1, 0x80}]}, &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x24}, 0x90) 1.469941754s ago: executing program 4 (id=6194): r0 = bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000780)={0x6, 0x4, &(0x7f0000000580)=ANY=[@ANYBLOB="18020000000000020000000000000000850000001700000095"], &(0x7f00000005c0)='GPL\x00'}, 0x94) r1 = socket(0x10, 0x803, 0x8) bpf$PROG_LOAD(0x5, &(0x7f0000000140)={0x1, 0xe, &(0x7f00000002c0)=ANY=[@ANYBLOB="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"], &(0x7f0000000280)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0x139}, 0x48) sendmsg$IPVS_CMD_SET_INFO(r1, &(0x7f0000000b00)={0x0, 0x0, &(0x7f0000000ac0)={0x0, 0x2d}, 0x1, 0x0, 0x0, 0x8801}, 0x8000) r2 = socket$netlink(0x10, 0x3, 0x0) getsockname$packet(r1, &(0x7f0000000600)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000180)=0x14) sendmsg$nl_route(r2, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000640)=ANY=[@ANYBLOB="3c0000001000850600000000ff6122314a000800", @ANYRES32=r3, @ANYBLOB="00001000252155b21c0012000c000100626f6e64"], 0x3c}}, 0x40000) bpf$BPF_LINK_CREATE_XDP(0x1c, &(0x7f0000000080)={r0, r3, 0x25, 0x0, @val=@netkit={@void, @value=r0}}, 0x1c) r4 = socket$netlink(0x10, 0x3, 0x0) r5 = socket(0x10, 0x803, 0x4) sendmsg$IPVS_CMD_SET_INFO(r5, &(0x7f0000000b00)={0x0, 0x0, &(0x7f0000000ac0)={0x0, 0x14}}, 0x0) getsockname$packet(r5, &(0x7f0000000340)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x66) sendmsg$nl_route(r4, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000001440)=@newlink={0x58, 0x10, 0xffffff1f, 0x0, 0x80, {0x0, 0x0, 0x0, 0x0, 0x300, 0x17e05}, [@IFLA_MASTER={0x8, 0xa, r6}, @IFLA_LINKINFO={0x28, 0x12, 0x0, 0x1, @veth={{0x9}, {0x18, 0x2, 0x0, 0x1, @val=@VETH_INFO_PEER={0x14, 0x1, {{0x0, 0x0, 0x0, 0x0, 0x4000, 0x640}}}}}}, @IFLA_NUM_RX_QUEUES={0x8, 0x20, 0x4}]}, 0x58}, 0x1, 0x0, 0x0, 0x2000c0c1}, 0x0) r7 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r7, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000140)=@getchain={0x24, 0x11, 0x1, 0x2000000, 0x0, {0x0, 0x0, 0x0, r3, {}, {0x0, 0x3}, {0x4, 0x9}}}, 0x24}}, 0x0) r8 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r9 = syz_genetlink_get_family_id$netlbl_unlabel(&(0x7f00000006c0), 0xffffffffffffffff) sendmsg$NLBL_UNLABEL_C_STATICADDDEF(r8, &(0x7f0000000940)={&(0x7f0000000680)={0x10, 0x0, 0x0, 0x1000000}, 0xc, &(0x7f0000000900)={&(0x7f0000000840)={0x84, r9, 0x200, 0x70bd2c, 0x25dfdbff, {}, [@NLBL_UNLABEL_A_ACPTFLG={0x5}, @NLBL_UNLABEL_A_IPV6ADDR={0x14, 0x2, @remote}, @NLBL_UNLABEL_A_IPV4ADDR={0x8, 0x4, @multicast2}, @NLBL_UNLABEL_A_SECCTX={0x20, 0x7, 'system_u:object_r:boot_t:s0\x00'}, @NLBL_UNLABEL_A_SECCTX={0x2b, 0x7, 'system_u:object_r:default_context_t:s0\x00'}]}, 0x84}, 0x1, 0x0, 0x0, 0x24060800}, 0x4001041) 1.290124931s ago: executing program 5 (id=6195): socket$kcm(0x10, 0x2, 0x0) syz_init_net_socket$bt_bnep(0x1f, 0x3, 0x4) r0 = openat$ppp(0xffffffffffffff9c, &(0x7f0000000040), 0x161042, 0x0) ioctl$PPPIOCNEWUNIT(r0, 0xc004743e, &(0x7f00000001c0)=0x3) ioctl$PPPIOCSPASS(r0, 0x40107447, &(0x7f0000000080)={0x2, &(0x7f0000000100)=[{0x50, 0xff, 0x0, 0x8}, {0x6, 0x60, 0x6, 0xffff7fff}]}) r1 = socket$nl_rdma(0x10, 0x3, 0x14) sendmsg$RDMA_NLDEV_CMD_NEWLINK(r1, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000080)={0x38, 0x1403, 0x1, 0x70bd2c, 0x25dfdbfc, "", [{{0x9, 0x2, 'syz2\x00'}, {0x8, 0x41, 'siw\x00'}, {0x14, 0x33, 'lo\x00'}}]}, 0x38}, 0x1, 0x0, 0x0, 0x44}, 0x0) r2 = socket$alg(0x26, 0x5, 0x0) bind$alg(r2, &(0x7f0000000140)={0x26, 'skcipher\x00', 0x0, 0x0, 'ecb-serpent-sse2\x00'}, 0x58) r3 = accept(r2, &(0x7f0000000000)=@pptp={0x18, 0x2, {0x0, @broadcast}}, &(0x7f0000000080)=0x80) r4 = accept4(r3, 0x0, 0x0, 0x0) sendmsg$NBD_CMD_CONNECT(0xffffffffffffffff, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000003c0)=ANY=[@ANYBLOB='h\x00\x00\x00', @ANYRES16, @ANYBLOB="0100000000000000000001"], 0x6c}}, 0x0) r5 = socket$nl_generic(0x10, 0x3, 0x10) readv(r5, &(0x7f0000000080)=[{&(0x7f00000014c0)=""/4118, 0x1016}, {&(0x7f0000000280)=""/198, 0xc6}, {&(0x7f0000000040)=""/12, 0xc}], 0x3) syz_genetlink_get_family_id$ipvs(&(0x7f00000000c0), r5) sendmsg$nl_generic(r5, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000140)={&(0x7f00000003c0)=ANY=[@ANYBLOB="1400000015000103"], 0x14}, 0x1, 0x0, 0x0, 0x4}, 0x0) setsockopt$ALG_SET_KEY(r2, 0x117, 0x1, 0x0, 0x0) sendto$unix(r4, 0x0, 0x0, 0x800, 0x0, 0x0) write$ppp(r0, &(0x7f00000008c0)="00003be032c6a4", 0x7) close(0xffffffffffffffff) r6 = socket$packet(0x11, 0x3, 0x300) setsockopt$packet_tx_ring(r6, 0x107, 0x18, 0x0, 0x0) r7 = socket(0x10, 0x803, 0x0) r8 = socket$netlink(0x10, 0x3, 0x4) ioctl$sock_SIOCGIFINDEX(r8, 0x8933, &(0x7f00000000c0)={'bridge0\x00', 0x0}) sendmsg$nl_route(r7, &(0x7f0000000280)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000180)=@newlink={0x3c, 0x10, 0x503, 0x40000, 0x25dfdbfd, {0x0, 0x0, 0x0, 0x0, 0x10061}, [@IFLA_LINKINFO={0x14, 0x12, 0x0, 0x1, @bond={{0x9}, {0x4}}}, @IFLA_MASTER={0x8, 0xa, r9}]}, 0x3c}, 0x1, 0x0, 0x0, 0x800}, 0x4000) socket(0x28, 0x5, 0x0) socket(0x28, 0x5, 0x0) bpf$MAP_CREATE(0x0, &(0x7f0000000200)=ANY=[@ANYBLOB="0f000000040000000400000012"], 0x48) openat$tun(0xffffffffffffff9c, &(0x7f0000000280), 0x0, 0x0) 1.210836217s ago: executing program 1 (id=6196): bpf$PROG_LOAD(0x5, &(0x7f0000000080)={0x6, 0xe, &(0x7f0000002300)=ANY=[@ANYBLOB="b702000000001700bfa300000000000007030000f0ffffff720af0ff1100000079a4f0ff00000000b706000000000081ad64020000000000450404000100ff0f1704000001130a00b7050000000000006a0af2fe0000000085000000a3000000b700000000000000950000000000000000e154cd844a954b26c933f7ffffffffe4fbffffff55bb2007ee51050512b5b42128aa090a79507df79f298129da487130d5f24bf901115e17392ac627c87881c000006146001e04aeacea799a22a2fa798b5adc43eb27d53319d0ad229e5752548300000000dbc2777df150b7cdd77b85b941092314fd085f028f2ed1a4b9535550614e09d6378198a6097a670838337af2abd55a87ac0394b2f92ffab7d153d62058d0a413b2173619ccf55520f22c9ca8b6712f3024a0041b1df65b3e1b9bf115646d14ce53d13d0ccacda1efc5f9094fa737c28b994a8512c816fdcceaede3faedc51d29a47fc813a2ec00f4c7a53ac271d6d7f4fdc4b4861004eefbc17f54f82a804d4a69bf9bc5fa77ee2922bd165a5a68488e010030166565a097b103b44b451de736bb6d43db8db03d4b7745fef1d04ec633dee254a6d491b849a5a787e814c4fd21a18986252a70f8f940b6f0e8c7db4bf23242a1f2c28159f09943b1b0452d1b72183aacf4a84f9130b775dd4e9e3070756f97ad791fa99dac06b57479321a0574fb30ff0000001989328c8ddc20ea011bf5742e0e0d4334db8b20ce3f9f16cb7fc20fb4791ec85821d0c48fb657c2d7f22b0d22772c25a61ec45c3af97a8f17da954aff3fc8c108755f75ca13fb7c8bbd8b6e7dac1aba4b20dc7de058a4dfa7e85a8bdf1d41a2d8bda74d66f47cc180f82c5f573c6d294d366501753a7ac7fedb8d34f5bc381604fcd46105c457e7dd13cab6692422a47e9ffe2d4a2d32f7528751313694bf5700b20ef0c248ddd3da32396a614cacad4aff2066bb5d4045c9585638c2153a6eee01738b0c10671f4f559b7dcb98a6273b8c651e24d9f679e4fbe948dfb4cc4a389469608241730459f0123fd39206000000000000eb55dad46de56ef907b059b90b8aa49afb9a79ae5498f6589880ed6eea7b9c670100be05e7de0940313c5870786554df26236ebced9390cb6941b8375d936a7d2120eca291963eb2d537d8ee4de5c183c160119451c31539b22809e1d7f0cda06a9fa87d64cb77872a2cd8a104e16bb1a2bacf13464ca03aff14a9aa4bd9539f5096412b92012e095b84c20243ff98df3347f0e399d1b9f27e3c33269c0e153b28b2d4410572bc45b9d3fa02208d300e4d455c36300000000022320178b00cc6ed7966130b547dbf8b497af002000000cd1d0000002000000001c800000000000000000000000928ee53595a779d243a48cea769470424d28804c024ab7f4a5c81921f0128dfd70b438af60b060000000000000056642b49b745f3bf2cf7908b6d7d74bf0a305790c9d644735efbf3411718d6ee7aebf9ef40662d7836d252c566f5ee934c679dbfae9fb4a79f8a836804ed3a1079b0282a12043408cd60b687dcff91af19010000000000000000456f7d2a42bd13da2022f23daec61854f640f701db0276652f6c031578e93046aaddea8ec4ca37f71c2710a7ea8ae0dc214e1cc275b26adfa892e6de92000000000000000000ddff004cff9ec780f535e62f4eeee50e5bafecea4d4134f9d006c8d6883eca5c9c58c9e93311ab5009c68c73de2f04f15d005387577f480000ea65559eb00e76e9d0ada209bcbb5c252b28a60ca770663da451790cc36000906d5a9fad98c308e39bd5ffb6155e3633be3f00000015762e5f5a3a0bc33fdbe28a5ffc83f2f085185cc92fe7f791e8f6429309d6adab4b7e508e5bf024ed8f8a005f2bcdb7c89739f5d81e750d50517a59a3ad09e8802e8f4f535447cc0facd5f99a73145dfcedad69da9cd4375c624600e78f4458542b14f29611f95d4a31838eeb20c20bb82aa31771cd379ec83554cea5b473332f2011e6539db7384e1f58d81f2f2653c4d9818708e27c89b552d3fcd116bce9c764c714c9402c21d181aae59efb28d4f91652f6750b6ec962802c0320f8059195729d60c534ee8e8ff0755367fe4c25edb85bcff24c757aa8090000000000008c420eb4304f66e3a37aaf00000048d2570f0e9dd5fd545470f862f8c3c14fa9ecd1e877b0d8ca84c044859e85e6158f9184bc61a9a284db80e4636c25b96174327d82761c26e329555f9290af4100000000000000749e1338636555009edf66be445d6975d534b8d63e4ca3b671f2de1cdf519192c6b59a601fd419adc16e2055b85058f793484305d7a1759782e4c571ee855a47bc00edf5e9020c09ab0043ebf7c79a953e023f74afad591821610b857e8717764b633b21cb32f09f4db033e03280e09758bd445ab91d20baca005452b79d7b574a247f1d2fe45b3c4e93da3d51de647c10dd49944dc87c92332af00f191b66b6a6f732a91f0e2e9120be61e58c79d497247d278888901d442ad7f8536605a644e9e3d769db497c1960dfde12182334caee994adc38a436367a54b9e182b78e9a0ceb9a2c4f63902c1ad1a7c5a08d0920a23c2a86abbdf357849a651733e57f31019876026888c8ccb85c86b4f8ffffff7f000000002c331fca0e541b7ca211c28ed61c525708a13d115b43f8b1894c8fa8a14dc4810f61ae96c18cc7130000000000002100000000000000000000000027c9a46157a3609b6fd9843ee19ec647249a9375de5858818f3c4a4fa6ce46f4d42b07199de8b99231ace58c77819ee214e49666c464d35ca9b5143ed3b3dc8c17a23692759ccf5a205311b7ab22532697b861dfb54609fd88e6043bd5c17d5486b0c8a6c769f952283a1f4e3842edb3d42c68a27ef6a1296dff7aa46e820a74f9530bdcc198e353047db70686d147357024eb3cb94f1e89cb5ba0a56aa046b4dc521a3d9356b4b8b5917c4c860495b240e80063bde261fdca4e9eda0072f6df342f3e7071e28ef6806bc8e139c49b91c76b0d3958f7f05b47d3e519f1634e8fbd8d31330d89069f9648a2ff93060ff073b3a113e47edf76f7d116d2b0976cf2ec447c030931651dd315003b7a6a5433a2bb560ae99ec4b227eda2e63a1c31a2c2bd48a822cbe92b6524e0cd8020ecaa34e19e7194d1eb3de6a5f99f301f89c2ee627e949cdd22000026a9960503a26e9a714ee5f72d8805dd1bfbd081f6a5d1f1289dfe14cb9194e26a44fac273461fc5c0e0a33db7f2d43ea8086cf059f40fa2640000cd9e7f2e236ef5f1e3a94b108eb9750b6bfb74dd35f5a31059c01517cf4b6641fce9a24b96767b837ca037a2050000c375c705c798e0e208e4a5259d0bda526b462af45a6e9a84aebe025c8a7f65819f397574db7ab01bd2b3e3cd28c5aec50f8edfe39a00bafd688a7eea04efdeed96f67012bc3f795edb68b5dec80ad31a858eb756c815e7695d00000000000000000000000000000000000000000000000000007ccf0ce549d97510f7f8765408bb702f0000006d4754d98b7064cf31a681421994e1f307f0ab4ff2e33d3c88fea5d218a276b77adfee7c8fb145783ee1f8cf632c2604eab3a62a28611da1cae5ce60003111ce5c96a1d6e45ee144ffa3dcca32a33f8f0ce2995b7b7aa0bce228cbf37412e1bdebae06edb51a134301b4627d4927287daf9dcae6720334862f3a18094f1edd9e3503379815dcfbbc8141f6e1bbb0901ae91357677fd9d2bb00d4f17fb441c2dfa2b424bf46ae299d68ac27792cdac2f09e99f4ab5546ba1e5ad6a329f24e73a9c38eec34bd4dcc1609f6150e2de72f6599a2310c3841f4bb7f39cabc82c9fdfff5587ed4fa84090635fa3445c4cc54478b2f98320944ac7cb1c4e414556f7b0b763a00a84327cec7e11b3470f0384b27bbfdd8b2472497e7fe8c5df7e0a00641872472efa21c9ad3979e642dcc85c17ca8e084aa9689b83426e2fdaa01f500000000000000000000f9fd84fa991466ff749afe900d02281b2bb60d458340c4f68ec34835760ceca945bf181a000000c000000000b4a76515564ae189de7c1765f0ff68a0388ca8dd2aa831d0e01f0d7ce74401a58cef60e63e97a50c18de54121ce66380224ab7b9c0d4710f2347bad2c9b3e41cc738c1092728687f33e5cdb077223dc82c2137b4e3ba6791a2cd764e654f904c9505b7c5e3b2897072e747534952dcda50cde3e4deb6ebf85a04c3e415112b01eed6515c845a8a20519cd21787d560e9d8283fa8ff0c17b63ba06577c26678ff45420a1f85df47dbfc44e534f71aae5693fb5df61c5096219091ce0cd8e1e2e79bf9d37779e52007c66a00e6ded1499ed3892ed1544d1577906b52e16c734d4aec07dd15faa768c97298be87dd34ce704ffe3da8b46708cf972de4f31c0705ac933db80bdcfcb35c0d4620d4ec270ff7c9ce1b78994dd2b28b9d1c5c469d4c1a61781dce2f1b54d6138bd3f7df9e9ca613bec407c1b8d1bd0c7cb9d76eebf2f17c"], &(0x7f0000000b80)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0xc, '\x00', 0x0, @xdp, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0xc463f262, 0x10, &(0x7f0000000040)}, 0x48) socket$packet(0x11, 0x1, 0x300) 1.093034457s ago: executing program 1 (id=6197): bpf$MAP_UPDATE_BATCH(0x1a, &(0x7f0000000200)={&(0x7f0000000000)="c9661921f3ba5ba7096185b8b84d7a42d62f59ccaef7f8629c354935f094a90ffc1d22349b", &(0x7f0000000040)=""/72, &(0x7f00000000c0)="bfd1ad2dc3c4aea7d4755c05c61bc6eab092a29f187ec01acbe3c878fd37a278034ed80708a9bf337a6edc7bc2d64f66271f961626c16a337c84ae830b87aa5394bb", &(0x7f0000000140)="37e1a7353730773901bf68ba81539ef4158ae7c969a0e7f74e717997b8c834f9e80c104397a17e808dc9eeb486385e79f613bb8f46c942e99f42bb5a012938d9e3693202a3d6c9fb8788adac903a9113df40cb010030abcf22b3158026e2a7d6b9525b02f43e1eccc24a4f9edbdce49f34ad083e4e0beccf17aae1c8c4a664ef9a700029e4e0cf755684f68b3a8c293b1461db514d378c044f45038f5992ced2b35aca95ba5fef98c244d3b36390eb72ef9e9206", 0x3ff}, 0x38) socketpair$nbd(0x1, 0x1, 0x0, &(0x7f0000000240)={0xffffffffffffffff, 0xffffffffffffffff}) r1 = socket$xdp(0x2c, 0x3, 0x0) setsockopt$XDP_TX_RING(r1, 0x11b, 0x3, &(0x7f0000000280)=0x1300200, 0x4) setsockopt$XDP_UMEM_REG(r1, 0x11b, 0x4, &(0x7f0000000300)={&(0x7f00000002c0)=""/33, 0x20000, 0x800, 0x6, 0x2}, 0x20) r2 = socket$igmp(0x2, 0x3, 0x2) setsockopt$MRT_PIM(r2, 0x0, 0xcf, &(0x7f0000000340)=0x4, 0x4) socket$inet6_icmp(0xa, 0x2, 0x3a) r3 = openat$cgroup_ro(0xffffffffffffffff, &(0x7f0000000380)='net_prio.prioidx\x00', 0x0, 0x0) openat$cgroup_devices(r3, &(0x7f00000003c0)='devices.deny\x00', 0x2, 0x0) ioctl$sock_inet_SIOCGIFNETMASK(r2, 0x891b, &(0x7f0000000400)={'bond_slave_1\x00', {0x2, 0x0, @private}}) recvmsg$unix(r3, &(0x7f0000001b00)={0x0, 0x0, &(0x7f0000001a00)=[{&(0x7f0000000440)=""/87, 0x57}, {&(0x7f00000004c0)=""/4096, 0x1000}, {&(0x7f00000014c0)=""/221, 0xdd}, {&(0x7f00000015c0)=""/213, 0xd5}, {&(0x7f00000016c0)=""/180, 0xb4}, {&(0x7f0000001780)=""/154, 0x9a}, {&(0x7f0000001840)=""/69, 0x45}, {&(0x7f00000018c0)=""/47, 0x2f}, {&(0x7f0000001900)=""/93, 0x5d}, {&(0x7f0000001980)=""/68, 0x44}], 0xa, &(0x7f0000001ac0)=[@cred={{0x1c}}], 0x20}, 0x2) socketpair(0x2b, 0x80000, 0x6, &(0x7f0000001b40)={0xffffffffffffffff, 0xffffffffffffffff}) sendmsg$IPVS_CMD_SET_INFO(r4, &(0x7f0000001c40)={&(0x7f0000001b80)={0x10, 0x0, 0x0, 0x80}, 0xc, &(0x7f0000001c00)={&(0x7f0000001bc0)={0x1c, 0x0, 0x1, 0x70bd29, 0x25dfdbff, {}, [@IPVS_CMD_ATTR_TIMEOUT_UDP={0x8, 0x6, 0x8000}]}, 0x1c}, 0x1, 0x0, 0x0, 0x40}, 0x4000800) r6 = accept4(r2, 0x0, &(0x7f0000001c80), 0x80000) sendmsg$IPCTNL_MSG_CT_GET_CTRZERO(r6, &(0x7f0000001d80)={&(0x7f0000001cc0)={0x10, 0x0, 0x0, 0x80000}, 0xc, &(0x7f0000001d40)={&(0x7f0000001d00)={0x38, 0x3, 0x1, 0x101, 0x0, 0x0, {0xea0154eeb559cf1e, 0x0, 0xa}, [@CTA_LABELS={0x14, 0x16, 0x1, 0x0, [0x1, 0x2, 0x1, 0xff]}, @CTA_MARK={0x8, 0x8, 0x1, 0x0, 0x5}, @CTA_ID={0x8}]}, 0x38}}, 0x10000840) setsockopt$MRT_FLUSH(r4, 0x0, 0xd4, &(0x7f0000001dc0)=0x1, 0x4) r7 = socket$nl_generic(0x10, 0x3, 0x10) pwritev(r6, &(0x7f0000002ec0)=[{&(0x7f0000001e00)="6ae3bdc8ff261fb0523da13f51d03fd4e2ffb7bdd283d3c2f4ebbde178073a5b4b3f3df4cb794bef53de3154e997c6dc275190f8aa47ab7300e44e75f6dfa7003a8c7e8ac164bac3d1a781d8580a3686538355ebfe4701ce22bf7535c7213de1ebc2e957be283098ff15036781a1f2b5948ffc2355f5cfa944c05b380b11dde213a6e1ba5eb49b23c2dbd5afd018aeb01cfb41b7e54ae833c6609c38dad089beedea60bf85a4", 0xa6}, {&(0x7f0000001ec0)="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", 0x1000}], 0x2, 0x0, 0x4) r8 = syz_genetlink_get_family_id$nl80211(&(0x7f0000002f40), r3) sendmsg$NL80211_CMD_GET_PROTOCOL_FEATURES(r3, &(0x7f0000003000)={&(0x7f0000002f00)={0x10, 0x0, 0x0, 0x80}, 0xc, &(0x7f0000002fc0)={&(0x7f0000002f80)={0x14, r8, 0x2, 0x70bd28, 0x25dfdbff, {}, ["", "", "", "", ""]}, 0x14}, 0x1, 0x0, 0x0, 0x4000004}, 0x4090) ioctl$AUTOFS_IOC_PROTOVER(r0, 0x80049363, &(0x7f0000003040)) getsockopt$IP_VS_SO_GET_TIMEOUT(r3, 0x0, 0x486, &(0x7f0000003080), &(0x7f00000030c0)=0xc) sendto$packet(r5, &(0x7f0000003100)="3189b0c4c635a6e4b7c6217f2045d75c4cf67abe6ae037e46e487632999118741ca306ed6f8d5f8524a96dc693329b27d50d205d7c7b53fca21d37070c33f79e52bed96c0bb07d06655e070badfd30b36fea8e765fac9d2f195d7d64a7b4608c0e062c626a76a47bf1697a86ed8ded79db7ea76504d7e082129b9c9f3b64c298ccd45215fb3e68960ac57128b858839954c835cd", 0x94, 0x4, &(0x7f00000031c0)={0x11, 0x2f, 0x0, 0x1, 0x5, 0x6, @remote}, 0x14) close(r5) sendmsg$NL80211_CMD_GET_MESH_CONFIG(r5, &(0x7f00000032c0)={&(0x7f0000003200)={0x10, 0x0, 0x0, 0x40}, 0xc, &(0x7f0000003280)={&(0x7f0000003240)={0x14, r8, 0x200, 0x70bd25, 0x25dfdbfc, {{}, {@void, @void}}, ["", "", "", "", "", ""]}, 0x14}, 0x1, 0x0, 0x0, 0x4000000}, 0x1) getsockopt$inet_sctp6_SCTP_PRIMARY_ADDR(r3, 0x84, 0x6, &(0x7f0000003300)={0x0, @in6={{0xa, 0x4e22, 0x4, @ipv4={'\x00', '\xff\xff', @remote}, 0x1}}}, &(0x7f00000033c0)=0x84) ioctl$sock_ipv4_tunnel_SIOCADDTUNNEL(r5, 0x89f1, &(0x7f0000003500)={'erspan0\x00', &(0x7f0000003440)={'syztnl1\x00', 0x0, 0x80, 0x20, 0x0, 0x1, {{0x27, 0x4, 0x2, 0x20, 0x9c, 0x67, 0x0, 0x4, 0x29, 0x0, @local, @local, {[@rr={0x7, 0x13, 0x5c, [@multicast1, @remote, @multicast2, @remote]}, @ra={0x94, 0x4, 0x1}, @generic={0x89, 0x4, "e244"}, @noop, @cipso={0x86, 0x5f, 0x3, [{0x2, 0xe, "9206626e334c88d415ed40ae"}, {0x0, 0x7, "6228dc7301"}, {0x4, 0xd, "f98ee552f49c21f07edfd2"}, {0x7, 0xf, "697e539abcf953c066cafa479b"}, {0x1, 0x7, "988225a430"}, {0x5, 0xf, "b15c15c42e5365a7950ba396be"}, {0x0, 0x12, "b3da7b44da9812afee5cf7563bb1bc57"}]}, @noop, @generic={0x7, 0xb, "722c54d298d1c9a5e0"}]}}}}}) ioctl$ifreq_SIOCGIFINDEX_team(r7, 0x8933, &(0x7f0000003540)={'team0\x00', 0x0}) sendmsg$ETHTOOL_MSG_CHANNELS_GET(r7, &(0x7f0000003640)={&(0x7f0000003400)={0x10, 0x0, 0x0, 0x400}, 0xc, &(0x7f0000003600)={&(0x7f0000003580)={0x74, 0x0, 0x4, 0x70bd28, 0x25dfdbfb, {}, [@HEADER={0x18, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'ip_vti0\x00'}]}, @HEADER={0x28, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'vlan1\x00'}, @ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x3}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r9}]}, @HEADER={0xc, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_FLAGS={0x8}]}, @HEADER={0x14, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x2}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r10}]}]}, 0x74}, 0x1, 0x0, 0x0, 0x1}, 0x40000) 887.145673ms ago: executing program 1 (id=6198): r0 = socket$nl_generic(0x10, 0x3, 0x10) socket(0x2000000000000021, 0x2, 0x10000000000002) r1 = bpf$MAP_CREATE(0x0, &(0x7f0000000000)=@base={0x19, 0x4, 0x4, 0x2}, 0x50) bpf$TOKEN_CREATE(0x24, &(0x7f0000000200)={0x0, r1}, 0x8) r2 = socket$inet6_sctp(0xa, 0x5, 0x84) getsockopt$inet_sctp6_SCTP_GET_ASSOC_ID_LIST(r2, 0x84, 0x1d, 0x0, &(0x7f0000000240)) bpf$PROG_LOAD(0x5, &(0x7f0000000500)={0x6, 0xd, &(0x7f0000000340)=ANY=[@ANYRESHEX=r1, @ANYRES32=r1, @ANYRESOCT=r0], &(0x7f00000004c0)='GPL\x00', 0xfffffffc, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @xdp, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2}, 0x94) socket$inet_smc(0x2b, 0x1, 0x0) socket$netlink(0x10, 0x3, 0x10) socket$netlink(0x10, 0x3, 0x0) bpf$PROG_LOAD(0x5, &(0x7f000000e000)={0x10, 0x4, &(0x7f0000000100)=ANY=[@ANYBLOB="b400000000000000791048000000000071001e00000000009500000000000000db74589d4b38cc306ac390649f72dea0e50e2317db042855d6c74ff3493c7e31e3f6c643155a8e2e01d50bc3347475750472719cc516fa14b769e7f385ba72c60242263c05ddab05e37efe81b8bffc35cdf2ac0d93263ff755d611c4cca1684b1470af6a83366aa430ad2d700b186da622d6fba70000000000000000000000000200"/173], &(0x7f0000003ff6)='GPL\x00', 0x2, 0xfd90, &(0x7f000000cf3d)=""/195, 0x0, 0x0, '\x00', 0x0, @sk_msg}, 0x48) socket$nl_netfilter(0x10, 0x3, 0xc) r3 = socket$nl_netfilter(0x10, 0x3, 0xc) socketpair$tipc(0x1e, 0x5, 0x0, &(0x7f0000000080)) sendmsg$IPCTNL_MSG_CT_GET(r3, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000040)=ANY=[@ANYBLOB="4400000002010101000000000000000002000000040001801800028014000180080001040000000000000000ac1414aa140019800800010004000000080002"], 0x44}, 0x1, 0x0, 0x0, 0x20000040}, 0x8004) r4 = syz_genetlink_get_family_id$ethtool(&(0x7f0000000040), r0) sendmsg$ETHTOOL_MSG_LINKMODES_SET(r0, &(0x7f0000000240)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000280)={0x44, r4, 0x7, 0x70bd28, 0x0, {}, [@ETHTOOL_A_LINKMODES_OURS={0x18, 0x3, 0x0, 0x1, [@ETHTOOL_A_BITSET_VALUE={0x8, 0x4, '\x00\x00\x00\x00'}, @ETHTOOL_A_BITSET_SIZE={0x8, 0x2, 0x9}, @ETHTOOL_A_BITSET_MASK={0xfffffffffffffea0}]}, @ETHTOOL_A_LINKMODES_HEADER={0xfffffffffffffd40, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'pimreg\x00'}]}]}, 0x44}}, 0x20000004) r5 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='memory.events\x00', 0x275a, 0x0) write$cgroup_subtree(r5, &(0x7f0000000100)=ANY=[], 0x32600) mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x2000001, 0x12, r5, 0x0) bpf$ITER_CREATE(0x21, &(0x7f00000000c0)={r5}, 0x8) 770.508882ms ago: executing program 0 (id=6199): r0 = bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f00000000c0)=ANY=[@ANYBLOB="02000000040000000800000001"], 0x50) r1 = bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f00000007c0)=ANY=[@ANYBLOB="1b0000000000000000000000000004"], 0x48) bpf$PROG_LOAD(0x5, &(0x7f0000000700)={0x15, 0x1c, &(0x7f0000000d80)=ANY=[@ANYBLOB="1808000000000500000000000000000018110000", @ANYRES32=r1, @ANYBLOB="0000000000000000b702000014000000b7030000000000008500000083000000bc8900000000000035090100000003009500000000000000b7080000000100007b9a00fe00000000b509ffffff1f0000c3aaf0fff1010200bf8600000000000007080000f8ffffffbfa400000000000007040000f0ffffffb70200000800000018220000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7050000080000004608ebff76000000bf9800000000000056080000000000008500000000000000b70000000000000095"], &(0x7f0000000680)='syzkaller\x00', 0x4, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) 743.7541ms ago: executing program 4 (id=6200): r0 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_tcp_int(r0, 0x6, 0x9, &(0x7f0000000000)=0xe9, 0x4) getsockopt$inet6_tcp_int(r0, 0x6, 0x9, 0x0, &(0x7f0000000080)) mmap(&(0x7f0000000000/0x400000)=nil, 0x1400000, 0x0, 0xc3072, 0xffffffffffffffff, 0x0) r1 = syz_init_net_socket$x25(0x9, 0x5, 0x0) setsockopt$X25_QBITINCL(r1, 0x106, 0x1, &(0x7f00000000c0)=0x1, 0x4) 665.401464ms ago: executing program 4 (id=6201): bpf$PROG_LOAD(0x5, &(0x7f0000000280)={0x15, 0x2000000000000216, &(0x7f0000000440)=ANY=[@ANYBLOB="18000000000000000000000000000000850000000f00000018010000646c6c2400000000000000007b1a"], 0x0, 0xffffffff, 0x0, 0x0, 0x0, 0x1c, '\x00', 0x0, @fallback=0x28, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0xfffffffc}, 0x94) (async) sendmsg$ETHTOOL_MSG_RINGS_GET(0xffffffffffffffff, &(0x7f0000000680)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000440)=ANY=[@ANYBLOB="0a012a20", @ANYRES16=0x0, @ANYBLOB="e60f000901008b00005d33cdc96be58bd5b3274e000f", @ANYRES32, @ANYBLOB="0c001a80480003"], 0x2c}}, 0x0) (async) r0 = socket$inet6_sctp(0xa, 0x1, 0x84) r1 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_ADD(r1, &(0x7f00000001c0)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x1000}, 0xc, &(0x7f0000000180)={&(0x7f0000000080)={0xe4, 0x9, 0x6, 0x101, 0x0, 0x0, {0x1, 0x0, 0x6}, [@IPSET_ATTR_DATA={0x40, 0x7, 0x0, 0x1, [@IPSET_ATTR_IP_TO={0x18, 0x2, 0x0, 0x1, @IPSET_ATTR_IPADDR_IPV6={0x14, 0x2, 0x1, 0x0, @initdev={0xfe, 0x88, '\x00', 0x0, 0x0}}}, @IPSET_ATTR_ETHER={0xa, 0x11, @dev={'\xaa\xaa\xaa\xaa\xaa', 0x24}}, @IPSET_ATTR_ETHER={0xa, 0x11, @broadcast}, @IPSET_ATTR_ETHER={0xa, 0x11, @broadcast}]}, @IPSET_ATTR_ADT={0x88, 0x8, 0x0, 0x1, [{0xc, 0x7, 0x0, 0x1, @IPSET_ATTR_COMMENT={0x6, 0x1a, ')\x00'}}, {0xc, 0x7, 0x0, 0x1, @IPSET_ATTR_MARK={0x8, 0xa, 0x1, 0x0, 0x9}}, {0x10, 0x7, 0x0, 0x1, @IPSET_ATTR_BYTES={0xc}}, {0x10, 0x7, 0x0, 0x1, @IPSET_ATTR_NAMEREF={0x9, 0x13, 'syz1\x00'}}, {0xc, 0x7, 0x0, 0x1, @IPSET_ATTR_PROTO={0x5, 0x7, 0x5c}}, {0xc, 0x7, 0x0, 0x1, @IPSET_ATTR_LINENO={0x8, 0x9, 0x1, 0x0, 0x8}}, {0xc, 0x7, 0x0, 0x1, @IPSET_ATTR_MARK={0x8, 0xa, 0x1, 0x0, 0x8}}, {0x10, 0x7, 0x0, 0x1, @IPSET_ATTR_NAME={0x9, 0x12, 'syz1\x00'}}, {0xc, 0x7, 0x0, 0x1, @IPSET_ATTR_PROTO={0x5, 0x7, 0x67}}, {0xc, 0x7, 0x0, 0x1, @IPSET_ATTR_CIDR2={0x5, 0x15, 0x4}}]}, @IPSET_ATTR_LINENO={0x8, 0x9, 0x1, 0x0, 0x8}]}, 0xe4}, 0x1, 0x0, 0x0, 0x20040890}, 0x4000000) (async, rerun: 32) setsockopt$inet_sctp6_SCTP_INITMSG(r0, 0x84, 0x2, &(0x7f0000000000)={0x0, 0x3, 0x1ff, 0x496}, 0x8) (rerun: 32) r2 = socket(0x10, 0x3, 0x0) write(r2, &(0x7f0000000240)="aefc00001a0025f01d85bc04fef7681d020b49ff708800008003280008021000ac0a1410bc71176a36ede498534108e58342fa94a235a2a441f9", 0xfcae) 578.037841ms ago: executing program 5 (id=6202): r0 = socket(0x2b, 0x1, 0x1) r1 = socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$nl80211(&(0x7f0000000080), 0xffffffffffffffff) (async) r2 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000080), 0xffffffffffffffff) sendmsg$NL80211_CMD_RELOAD_REGDB(r1, &(0x7f00000006c0)={0x0, 0x0, &(0x7f0000000440)={&(0x7f0000000340)={0x14, r2, 0x1, 0x70bd2d, 0x25dfdbfe}, 0x14}, 0x1, 0x0, 0x0, 0x20000000}, 0x20008004) setsockopt$inet6_tcp_TCP_REPAIR(r0, 0x6, 0x13, &(0x7f0000000000)=0x1, 0x4) connect$inet6(r0, &(0x7f00000001c0)={0xa, 0x4e1f, 0x2, @ipv4={'\x00', '\xff\xff', @local}, 0x1}, 0x1c) (async) connect$inet6(r0, &(0x7f00000001c0)={0xa, 0x4e1f, 0x2, @ipv4={'\x00', '\xff\xff', @local}, 0x1}, 0x1c) r3 = openat$tun(0xffffffffffffff9c, &(0x7f0000000200), 0x0, 0x0) syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) (async) r4 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r5 = syz_genetlink_get_family_id$nl802154(&(0x7f0000000480), 0xffffffffffffffff) sendmsg$NL802154_CMD_NEW_INTERFACE(r4, &(0x7f0000000580)={&(0x7f0000000240)={0x10, 0x0, 0x0, 0x2000}, 0xc, &(0x7f0000000500)={&(0x7f0000000600)=ANY=[@ANYBLOB='(\x00\x00\x00', @ANYRES16=r5, @ANYBLOB="000228bd7000ff73a779dfa495f74e0006000300000002421ffeed1746f7e100000800050000000000"], 0x28}, 0x1, 0x0, 0x0, 0x1}, 0x804) ioctl$TUNSETIFF(r3, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x2}) r6 = socket(0x400000000010, 0x3, 0x0) r7 = socket$unix(0x1, 0x2, 0x0) ioctl$sock_SIOCGIFINDEX(r7, 0x8933, &(0x7f0000000100)={'syzkaller0\x00'}) (async) ioctl$sock_SIOCGIFINDEX(r7, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r6, &(0x7f00000012c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000780)=@newqdisc={0x24, 0x24, 0x4ee4e6a52ff56541, 0x70bd2c, 0x3, {0x0, 0x0, 0x0, r8, {0x0, 0xfff1}, {0xfff1, 0xffff}}}, 0x24}, 0x1, 0x0, 0x0, 0x48040}, 0x0) r9 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r9, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000140)={&(0x7f00000001c0)=@gettclass={0x24, 0x2a, 0x129, 0x0, 0x0, {0x0, 0x0, 0x0, r8, {0x1, 0x3}, {}, {0x5, 0xfff1}}}, 0x24}}, 0x40004) connect$inet6(r0, &(0x7f00000000c0)={0xa, 0x4e5b, 0x80000000, @ipv4={'\x00', '\xff\xff', @private=0xa010102}, 0x5}, 0x1c) setsockopt$inet6_tcp_int(r0, 0x6, 0x5, &(0x7f0000000040)=0x4, 0x4) (async) setsockopt$inet6_tcp_int(r0, 0x6, 0x5, &(0x7f0000000040)=0x4, 0x4) openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='memory.events\x00', 0x275a, 0x0) (async) r10 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='memory.events\x00', 0x275a, 0x0) sendmsg$inet(r1, &(0x7f0000000700)={&(0x7f00000005c0)={0x2, 0x4e21, @remote}, 0x10, &(0x7f0000000600), 0x0, &(0x7f0000000640)=[@ip_retopts={{0x5c, 0x0, 0x7, {[@timestamp_prespec={0x44, 0x34, 0xf1, 0x3, 0x8, [{@loopback, 0xffff}, {@loopback, 0x173e}, {@broadcast, 0x3}, {@multicast1, 0x7fffffff}, {@remote, 0x8001}, {@empty}]}, @cipso={0x86, 0x15, 0x1, [{0x7, 0xf, "5be700f6973fcc1cd9adf9824e"}]}]}}}, @ip_tos_int={{0x14, 0x0, 0x1, 0x7}}], 0x78}, 0x4000001) mmap(&(0x7f0000002000/0x4000)=nil, 0x4000, 0xedc623580215bdcd, 0x12, r10, 0x0) bpf$PROG_LOAD(0x5, &(0x7f0000000040)={0x2, 0x4, &(0x7f0000000200)=ANY=[@ANYBLOB="180000000300000000000000feffff10850000000700000095"], &(0x7f0000000000)='GPL\x00', 0x0, 0x0, 0x0, 0x100, 0x70, '\x00', 0x0, @fallback=0x30, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffe}, 0x94) (async) r11 = bpf$PROG_LOAD(0x5, &(0x7f0000000040)={0x2, 0x4, &(0x7f0000000200)=ANY=[@ANYBLOB="180000000300000000000000feffff10850000000700000095"], &(0x7f0000000000)='GPL\x00', 0x0, 0x0, 0x0, 0x100, 0x70, '\x00', 0x0, @fallback=0x30, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffe}, 0x94) bpf$BPF_LINK_CREATE_XDP(0x1c, &(0x7f0000000180)={r11, 0x0, 0x30, 0x0, @val=@uprobe_multi={&(0x7f00000002c0)='./cgroup/cgroup.procs\x00', &(0x7f0000000300)=[0x0], 0x0, 0x0, 0x1}}, 0x40) (async) r12 = bpf$BPF_LINK_CREATE_XDP(0x1c, &(0x7f0000000180)={r11, 0x0, 0x30, 0x0, @val=@uprobe_multi={&(0x7f00000002c0)='./cgroup/cgroup.procs\x00', &(0x7f0000000300)=[0x0], 0x0, 0x0, 0x1}}, 0x40) bpf$BPF_GET_MAP_INFO(0xf, &(0x7f0000000140)={r12, 0xfffffdc8, &(0x7f0000000340)}, 0xc) bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f0000000540)=ANY=[@ANYBLOB="1b0000000000000000000000000004"], 0x25) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000280)={0x11, 0x0, 0x0, &(0x7f00000010c0)='syzkaller\x00', 0x9, 0xff2, &(0x7f0000001cc0)=""/4082, 0x41000, 0x6, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x400000}, 0x94) (async) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000280)={0x11, 0x0, 0x0, &(0x7f00000010c0)='syzkaller\x00', 0x9, 0xff2, &(0x7f0000001cc0)=""/4082, 0x41000, 0x6, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x400000}, 0x94) syz_80211_join_ibss(&(0x7f0000000040)='wlan0\x00', &(0x7f0000000080)=@default_ibss_ssid, 0x6, 0x0) syz_80211_inject_frame(&(0x7f00000000c0), &(0x7f00000003c0)=ANY=[@ANYBLOB="800000000802110000010802110000005050505050500063c8b5e1410c98403bfda2112a0b000000000000000000640001000012bcb2fc61dca02864d19884114976094ba46f010076065c0504000600"], 0x42) (async) syz_80211_inject_frame(&(0x7f00000000c0), &(0x7f00000003c0)=ANY=[@ANYBLOB="800000000802110000010802110000005050505050500063c8b5e1410c98403bfda2112a0b000000000000000000640001000012bcb2fc61dca02864d19884114976094ba46f010076065c0504000600"], 0x42) setsockopt$inet_IP_XFRM_POLICY(r10, 0x0, 0x11, 0x0, 0x0) 518.748462ms ago: executing program 4 (id=6203): r0 = socket$nl_generic(0x10, 0x3, 0x10) (async) r1 = socket$netlink(0x10, 0x3, 0x14) sendmsg$RDMA_NLDEV_CMD_NEWLINK(r1, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000001200)={&(0x7f00000000c0)=ANY=[@ANYBLOB="380000001e14010000000000000000000900020073797a30000000fd07004100727865"], 0x38}, 0x1, 0x0, 0x0, 0x8000}, 0x100) (async) r2 = syz_genetlink_get_family_id$tipc2(&(0x7f0000000040), r0) sendmsg$TIPC_NL_BEARER_ENABLE(r1, &(0x7f0000000480)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x20000}, 0xc, &(0x7f0000000440)={&(0x7f00000001c0)={0x250, r2, 0x200, 0x70bd2a, 0x25dfdbfc, {}, [@TIPC_NLA_MEDIA={0x38, 0x5, 0x0, 0x1, [@TIPC_NLA_MEDIA_PROP={0x24, 0x2, 0x0, 0x1, [@TIPC_NLA_PROP_WIN={0x8, 0x3, 0x3}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x19}, @TIPC_NLA_PROP_MTU={0x8, 0x4, 0x10000}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x19}]}, @TIPC_NLA_MEDIA_NAME={0x7, 0x1, 'ib\x00'}, @TIPC_NLA_MEDIA_NAME={0x8, 0x1, 'eth\x00'}]}, @TIPC_NLA_BEARER={0x7c, 0x1, 0x0, 0x1, [@TIPC_NLA_BEARER_PROP={0x54, 0x2, 0x0, 0x1, [@TIPC_NLA_PROP_MTU={0x8, 0x4, 0x82}, @TIPC_NLA_PROP_MTU={0x8, 0x4, 0x2}, @TIPC_NLA_PROP_WIN={0x8, 0x3, 0x5c}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x10}, @TIPC_NLA_PROP_TOL={0x8, 0x2, 0x822}, @TIPC_NLA_PROP_WIN={0x8, 0x3, 0x5}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x15}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x1b}, @TIPC_NLA_PROP_TOL={0x8, 0x2, 0x5}, @TIPC_NLA_PROP_WIN={0x8, 0x3, 0x7}]}, @TIPC_NLA_BEARER_PROP={0x14, 0x2, 0x0, 0x1, [@TIPC_NLA_PROP_MTU={0x8, 0x4, 0x2}, @TIPC_NLA_PROP_WIN={0x8}]}, @TIPC_NLA_BEARER_NAME={0xe, 0x1, @l2={'eth', 0x3a, 'xfrm0\x00'}}]}, @TIPC_NLA_SOCK={0xc, 0x2, 0x0, 0x1, [@TIPC_NLA_SOCK_REF={0x8, 0x2, 0x4}]}, @TIPC_NLA_BEARER={0x17c, 0x1, 0x0, 0x1, [@TIPC_NLA_BEARER_NAME={0xd, 0x1, @l2={'ib', 0x3a, 'vlan1\x00'}}, @TIPC_NLA_BEARER_NAME={0xd, 0x1, @udp='udp:syz2\x00'}, @TIPC_NLA_BEARER_PROP={0x34, 0x2, 0x0, 0x1, [@TIPC_NLA_PROP_TOL={0x8, 0x2, 0x7}, @TIPC_NLA_PROP_TOL={0x8, 0x2, 0x5}, @TIPC_NLA_PROP_TOL={0x8, 0x2, 0x800}, @TIPC_NLA_PROP_MTU={0x8, 0x4, 0x4}, @TIPC_NLA_PROP_MTU={0x8, 0x4, 0x2}, @TIPC_NLA_PROP_TOL={0x8, 0x2, 0x4}]}, @TIPC_NLA_BEARER_UDP_OPTS={0x2c, 0x4, {{0x14, 0x1, @in={0x2, 0x4e20, @private=0xa010100}}, {0x14, 0x2, @in={0x2, 0x4e20, @local}}}}, @TIPC_NLA_BEARER_NAME={0xd, 0x1, @udp='udp:syz0\x00'}, @TIPC_NLA_BEARER_UDP_OPTS={0x38, 0x4, {{0x14, 0x1, @in={0x2, 0x4e22, @loopback}}, {0x20, 0x2, @in6={0xa, 0x4e22, 0x41, @private0={0xfc, 0x0, '\x00', 0x1}, 0x5}}}}, @TIPC_NLA_BEARER_UDP_OPTS={0x2c, 0x4, {{0x14, 0x1, @in={0x2, 0x4e21, @dev={0xac, 0x14, 0x14, 0x44}}}, {0x14, 0x2, @in={0x2, 0x4e23, @multicast1}}}}, @TIPC_NLA_BEARER_PROP={0x14, 0x2, 0x0, 0x1, [@TIPC_NLA_PROP_MTU={0x8, 0x4, 0xffffa103}, @TIPC_NLA_PROP_TOL={0x8, 0x2, 0x6}]}, @TIPC_NLA_BEARER_UDP_OPTS={0x38, 0x4, {{0x14, 0x1, @in={0x2, 0x4e22, @local}}, {0x20, 0x2, @in6={0xa, 0x4e24, 0x4, @mcast2, 0x8}}}}, @TIPC_NLA_BEARER_UDP_OPTS={0x38, 0x4, {{0x14, 0x1, @in={0x2, 0x4e22, @remote}}, {0x20, 0x2, @in6={0xa, 0x4e24, 0xffff, @mcast2, 0x8}}}}]}]}, 0x250}}, 0x1) (async) sendmsg$nl_generic(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000001300)={0x34, 0x40, 0x107, 0x70bd2d, 0x25dfdbff, {0x1, 0x7c}, [@nested={0x4, 0x142}, @nested={0xc, 0x1, 0x0, 0x1, [@typed={0x6, 0x6, 0x0, 0x0, @str='\x80\n'}]}, @nested={0x10, 0x2, 0x0, 0x1, [@nested={0xc, 0x3, 0x0, 0x1, [@typed={0x8, 0x3a, 0x0, 0x0, @pid}]}]}]}, 0x34}, 0x1, 0x0, 0x0, 0x4048011}, 0xc000) 516.850055ms ago: executing program 1 (id=6204): r0 = bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f0000000100)=ANY=[@ANYBLOB="1b0000000000000000000000000004"], 0x48) mmap(&(0x7f0000001000/0xc00000)=nil, 0xc00000, 0x0, 0x3032, 0xffffffffffffffff, 0x0) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000001c0)={0x11, 0x17, &(0x7f0000000000)=ANY=[@ANYBLOB="180000000c000000000000000000008018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b702000014000000b70300003f0000008500000083000000bf0920000000000055090100000000009500000000000000180100002020752500000000002020207b1af8ff00000000bfa10000f8ff000007010000f8ffffffb702000008000000b70300009aee00008500000006005100bf91000000000000b7020000000000008500000085000000b70000000000000095"], &(0x7f00000000c0)='GPL\x00', 0x7, 0x1011, &(0x7f0000000840)=""/4113, 0x41000, 0xc, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x7}, 0x94) 478.579742ms ago: executing program 3 (id=6205): r0 = socket$nl_xfrm(0x10, 0x3, 0x6) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32, @ANYBLOB="0000000000000000b70800000d0000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000100000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) r1 = bpf$MAP_CREATE(0x0, &(0x7f0000002240)=ANY=[@ANYBLOB="0f000000040000000400000012"], 0x48) r2 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$IP6T_SO_SET_REPLACE(r2, 0x29, 0x40, &(0x7f0000001580)=@raw={'raw\x00', 0x8, 0x3, 0x3e8, 0x0, 0xffffffff, 0xffffffff, 0x0, 0xffffffff, 0x318, 0xffffffff, 0xffffffff, 0x318, 0xffffffff, 0x3, 0x0, {[{{@ipv6={@mcast2, @mcast1, [0xff, 0xffffff00, 0xffffff00, 0xffffff00], [0xff, 0xffffff00, 0xff000000, 0xff000000], 'veth1_to_team\x00', 'gretap0\x00', {}, {}, 0x29, 0x7, 0x4, 0x6}, 0x0, 0x1e0, 0x208, 0x60030000, {0x0, 0xff000000}, [@common=@rt={{0x138}, {0x6, [0x1, 0x9460], 0x203, 0x2, 0x4, [@private0={0xfc, 0x0, '\x00', 0x1}, @ipv4={'\x00', '\xff\xff', @empty}, @rand_addr=' \x01\x00', @private0, @private0={0xfc, 0x0, '\x00', 0x1}, @private1, @empty, @local, @dev={0xfe, 0x80, '\x00', 0x13}, @empty, @mcast2, @private0={0xfc, 0x0, '\x00', 0x1}, @mcast2, @remote, @ipv4={'\x00', '\xff\xff', @loopback}, @mcast1], 0x3}}]}, @common=@unspec=@NFQUEUE1={0x28, 'NFQUEUE\x00', 0x1, {0xfff9, 0xe31}}}, {{@uncond, 0x0, 0xa8, 0x110}, @unspec=@CT1={0x68, 'CT\x00', 0x1, {0x2, 0x0, 0x8, 0x2, 'snmp_trap\x00', 'syz0\x00', {0x1}}}}], {{'\x00', 0x0, 0xa8, 0xd0}, {0x28}}}}, 0x448) bpf$MAP_UPDATE_BATCH(0x1a, &(0x7f0000001cc0)={0x0, 0x0, 0x0, 0x0, 0x86f, r1, 0x4}, 0x38) clock_gettime(0x0, &(0x7f0000000000)={0x0, 0x0}) nanosleep(&(0x7f0000000280)={r3, r4+10000000}, &(0x7f00000003c0)) r5 = bpf$MAP_CREATE(0x0, &(0x7f0000000740)=ANY=[@ANYBLOB="0b00000005000000000400000900000001"], 0x48) r6 = socket$nl_generic(0x10, 0x3, 0x10) r7 = syz_genetlink_get_family_id$ethtool(&(0x7f0000000080), 0xffffffffffffffff) sendmsg$ETHTOOL_MSG_FEATURES_SET(r6, &(0x7f0000002540)={0x0, 0x0, &(0x7f0000002500)={&(0x7f0000000140)={0x18, r7, 0x1, 0x0, 0x0, {}, [@ETHTOOL_A_FEATURES_WANTED={0x4}]}, 0x18}}, 0x0) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0xa, 0x4, &(0x7f0000000480)=ANY=[@ANYBLOB="18000000000000000000000000000000850000006d"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r8 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000d80)={0x18, 0x5, &(0x7f0000000480)=ANY=[@ANYBLOB="1801000021"], 0x0, 0x40, 0x0, 0x0, 0x0, 0xb4a02fe0ce239f93, '\x00', 0x0, 0x2}, 0x94) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0xe, 0x0, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000800000000000000000000018110000", @ANYRES32=r5], 0x0, 0x0, 0x0, 0x0, 0x41100, 0x59, '\x00', 0x0, @fallback=0x2a, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, r8, 0x0, 0x0, 0x0, 0x0}, 0x94) r9 = bpf$ITER_CREATE(0xb, &(0x7f0000000100), 0x0) close(r9) mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000)='./cgroup/syz0\x00', 0x1ff) openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000), 0x200002, 0x0) unshare(0x20000400) ioctl$TUNSETVNETHDRSZ(r9, 0x400454d8, &(0x7f0000000200)=0x6) bpf$BPF_PROG_DETACH(0x8, &(0x7f0000000300)=ANY=[], 0x10) r10 = bpf$PROG_LOAD(0x5, &(0x7f0000000300)={0x6, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, @fallback=0x4, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000180)={r10, 0x2000000, 0xe, 0x0, &(0x7f0000000040)="630b008646dc3f0adf33c9f7b986", 0x0, 0xcf25, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x80}, 0x50) sendmsg$nl_xfrm(r0, &(0x7f0000000480)={0x0, 0x0, &(0x7f0000000440)={&(0x7f00000004c0)=@getae={0x4c, 0x1f, 0x319, 0x0, 0x20, {{@in6=@rand_addr=' \x01\x00', 0x0, 0x0, 0x6c}, @in=@loopback}, [@mark={0xc, 0x15, {0x350759, 0x86}}]}, 0x4c}, 0x1, 0x0, 0x0, 0x88}, 0x0) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x4, 0x4, &(0x7f0000000040)=@framed={{0x18, 0x0, 0x0, 0x0, 0x2}, [@call={0x85, 0x0, 0x0, 0x55}]}, &(0x7f0000000300)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x1, '\x00', 0x0, @fallback=0x2e, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) 330.462064ms ago: executing program 4 (id=6206): unshare(0x26020480) (async) r0 = syz_open_procfs$namespace(0x0, &(0x7f0000001680)='ns/pid_for_children\x00') pread64(r0, 0x0, 0x0, 0x200) (async) r1 = socket(0x10, 0x803, 0x0) sendmsg$NL80211_CMD_CRIT_PROTOCOL_START(r1, &(0x7f0000000580)={0x0, 0x0, &(0x7f0000000540)={0x0, 0x1c}}, 0x0) getsockname$packet(r1, &(0x7f0000000600)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000080)=0x14) syz_emit_ethernet(0x246, &(0x7f0000000000)={@multicast, @remote, @void, {@ipv6={0x86dd, @icmpv6={0x0, 0x6, "000210", 0x210, 0x3a, 0x0, @remote, @mcast2, {[], @param_prob={0x4, 0x0, 0x0, 0x0, {0x0, 0x6, "8bb91d", 0x0, 0x11, 0x0, @local, @empty, [@fragment, @hopopts={0x0, 0x3a, '\x00', [@ra, @padn={0x1, 0x3, [0x0, 0x0, 0x0]}, @generic={0x0, 0x4d, "a17e9ab13f6e142b20582c8d220c698a74dbf13dfc0ad1f526dfc43313759300929090dd4792ce67ea9f8769d3246f94412c56e0247939ed4b318e4b6066b72d91d9aff97fcf30977dfd4028de"}, @ra, @generic={0x0, 0x8c, "65fd1a52737fa1ec91495f4d25a766a5dd36bcffb376f4b35d4a5bc51b0f8fb9a273282a9c8ef192a4de26c8732765dbeb6ce083e81cebf0612d1cc7956b78fb34ce0e4a867c8b4094bab04b23680ba97ad5c624055e8504a7a121cf38a402a7aa80e05dbe56fecab8b014420231c0e997cbfda9bdc7f29e3a8b13dcfc396cf6ff1fcd8a7f43a107871fdd7e"}, @generic={0x0, 0x31, "8b168e4b48529453d91cea424030c8b200632af95e7c30322241dd567db14507f8b523b418a0edc41397a2f639f9f6c3b3"}, @generic={0xcc, 0xb1, "096b92bd157e46e368dcc6b270d4047bcef994504c03bb4fbd39e6376959844c297e6cf3d50c29a293032c2c0dfff5fa7bc635f6e3c2e1cddaf9c6d6f8d109b3aa3dbd9e035fd2d7bee98302bf7836a1ad6e0df7f9d541baeb05119c2b9bad311c3a928c8e3f4e6fc2d1f98878b4decd71839f46c15e83b448df116784906946d509c3b696698bd8b8f9e5bba2307c9a71ae459e6492c58c1ad6940a25b7012613e8882f24a3897adf9728de5eedff0e7d"}]}]}}}}}}}, 0x0) (async) sendmsg$nl_route(r1, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000640)=ANY=[@ANYBLOB="3c0000001000850600000000ff6122314a000800", @ANYRES32=r2, @ANYBLOB="f5ff0f00252155b21c0012000c000100626f6e64000000000c0002000800010001"], 0x3c}}, 0x40000) (async, rerun: 32) sendmsg$nl_route(r1, &(0x7f0000000280)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f00000001c0)=ANY=[@ANYBLOB="3c000000100003052bbd70000007000000000000", @ANYRES32=0x0, @ANYBLOB="00000000001000001400128009000100626f6e64000000000400028008000a00", @ANYRES32=r2, @ANYBLOB="1d805ea637207e8c5749198bb84cb136cd5a9df63fe09e45db63b6cada2a93667bd404f3b2a40c4f62916ff3ee4a9e6052ea1a4aab8d00c11c0fcc2fb9f129b0930740b173264f2817520000000000000000"], 0x3c}, 0x1, 0x0, 0x0, 0x800}, 0x0) (rerun: 32) 274.545318ms ago: executing program 1 (id=6207): r0 = socket$netlink(0x10, 0x3, 0x0) r1 = socket(0x10, 0x803, 0x0) sendmsg$IPVS_CMD_SET_INFO(r1, &(0x7f0000000b00)={0x0, 0x0, &(0x7f0000000ac0)={0x0, 0x14}}, 0x0) getsockname$packet(r1, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route(r1, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000580)=ANY=[@ANYBLOB="3c010600000000eba1a3ad10313ec909d2b9714766", @ANYRES32=r2, @ANYBLOB="01fa978c72baf780c76a30cf000000000000001c0012000c000100626f6e64660ed4dab38d76006c889ec16ac53d0524779b28100da2ac893934686f01cdabefc6f4bd69b4705e43ca2214e010fbd61161730c8975d8e64ee96224783f70cff41c346918f62eb0f52696f1221eddae02920426a507c6e05ad36e4e070010c042505dc0a8b811dfcbd3dc99aa4f1c"], 0x3c}, 0x1, 0x0, 0x0, 0x20000000}, 0x0) r3 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r4 = syz_genetlink_get_family_id$netlbl_mgmt(&(0x7f0000000040), r3) sendmsg$NLBL_MGMT_C_ADDDEF(r3, &(0x7f0000000100)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000480)=ANY=[@ANYBLOB="38080004", @ANYRES16=r4, @ANYBLOB="0100000000000000000004000000080008007f000001080002000500000014000600ff020000000000000000000000000001"], 0x38}}, 0x0) r5 = syz_genetlink_get_family_id$nfc(&(0x7f00000001c0), 0xffffffffffffffff) ioctl$IOCTL_GET_NCIDEV_IDX(0xffffffffffffffff, 0x0, &(0x7f0000000280)=0x0) ioctl$IOCTL_GET_NCIDEV_IDX(0xffffffffffffffff, 0x0, &(0x7f00000002c0)=0x0) sendmsg$NFC_CMD_DEACTIVATE_TARGET(r3, &(0x7f0000000500)={&(0x7f0000000180)={0x10, 0x0, 0x0, 0x1}, 0xc, &(0x7f0000000400)={&(0x7f0000000540)=ANY=[@ANYBLOB='4\x00\x00\x00', @ANYRES16=r5, @ANYBLOB="00042bbd7000fddbdf251e00000008000100", @ANYRES32=r6, @ANYBLOB="00004f6639ff116f4f0000", @ANYRES32=r7, @ANYBLOB="080004000000000008000100", @ANYRES32=0x0, @ANYBLOB], 0x34}, 0x1, 0x0, 0x0, 0x80}, 0x8000) sendmsg$nl_route(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000300)={&(0x7f00000004c0)=ANY=[@ANYBLOB="3c00000010001fff000000000100000000000000", @ANYRES32=0x0, @ANYBLOB="0000000000000000140012800900010076657468000000000400028008000a00", @ANYRES32=r2], 0x3c}, 0x1, 0x0, 0x0, 0x40000}, 0x0) r8 = socket$netlink(0x10, 0x3, 0x0) r9 = bpf$PROG_LOAD(0x5, &(0x7f0000000000)={0x1, 0x8, &(0x7f0000002fc0)=ANY=[@ANYBLOB="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"], &(0x7f0000000100)='GPL\x00'}, 0x48) setsockopt$sock_attach_bpf(r8, 0x1, 0x32, &(0x7f0000002900)=r9, 0x4) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000001180)={0x11, 0xd, &(0x7f0000000080)=ANY=[@ANYBLOB="1802000000000000000000000000000085100000010000009500000000000000200000000001000000000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b70300000000002885000000c700000095"], &(0x7f0000000000)='syzkaller\x00', 0x4, 0xac, &(0x7f0000001240)=""/172, 0x40f00, 0x4b}, 0x94) bind$netlink(r8, &(0x7f00000000c0)={0x10, 0x0, 0x0, 0x2ffffffff}, 0xc) socket$inet_icmp_raw(0x2, 0x3, 0x1) r10 = socket$netlink(0x10, 0x3, 0x0) r11 = socket(0x10, 0x803, 0x4) sendmsg$IPVS_CMD_SET_INFO(r11, &(0x7f0000000b00)={0x0, 0x0, &(0x7f0000000ac0)={0x0, 0x14}}, 0x0) socket$inet6_tcp(0xa, 0x1, 0x0) getsockname$packet(r11, &(0x7f0000000340)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) r13 = openat$tun(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) r14 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r14, &(0x7f0000000440)={0x0, 0x0, &(0x7f0000000480)={&(0x7f0000000240)=ANY=[@ANYBLOB="e80000006c00010029bd7000fcdbdf2500000000", @ANYRES32], 0xe8}}, 0x0) close(r13) sendmsg$nl_route(r10, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000140)=ANY=[@ANYBLOB="4c00000010001fff000000008000000000000000", @ANYRES32=0x0, @ANYBLOB='\x00\x00\x00\x00\x00?\x00\x00\b\x00\n\x00', @ANYRES32=r12, @ANYBLOB="240012800b000100627269646765"], 0x4c}, 0x1, 0x0, 0x0, 0x2000c0c1}, 0x40000) 150.093024ms ago: executing program 0 (id=6208): r0 = socket$nl_rdma(0x10, 0x3, 0x14) sendmsg$RDMA_NLDEV_CMD_SET(r0, &(0x7f0000002640)={0x0, 0x0, &(0x7f0000002600)={&(0x7f0000000400)={0x24, 0x1402, 0x1, 0x70bd26, 0x25dfdbfb, "", [@RDMA_NLDEV_ATTR_DEV_INDEX={0x8, 0x1, 0x2}, @RDMA_NLDEV_ATTR_DEV_NAME={0x9, 0x2, 'syz2\x00'}]}, 0x24}, 0x1, 0x0, 0x0, 0x81}, 0x4850) 92.960208ms ago: executing program 3 (id=6209): r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='cgroup.stat\x00', 0x275a, 0x0) syz_genetlink_get_family_id$gtp(&(0x7f0000000140), r0) ioctl$TUNSETIFF(0xffffffffffffffff, 0x400454ca, 0x0) r1 = socket$unix(0x1, 0x1, 0x0) socket$nl_netfilter(0x10, 0x3, 0xc) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, 0x0) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f00000012c0)={0x0, 0x0, 0x0}, 0x20040084) r2 = openat$tun(0xffffffffffffff9c, &(0x7f0000000400), 0x0, 0x0) r3 = socket(0x400000000010, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r3, 0x8933, 0x0) sendmsg$nl_route_sched(r3, 0x0, 0x20000002) close(r2) socket(0x40000000015, 0x5, 0x0) ioctl$SIOCSIFHWADDR(r2, 0x8914, 0x0) sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000480)=ANY=[@ANYBLOB="2c0000001000010000000000000000000000000a140000001100010000000000000000000000000a"], 0x28}}, 0x0) r4 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a) ioctl$sock_SIOCGIFINDEX_80211(r4, 0x8b1a, &(0x7f0000000000)={'wlan1\x00'}) getsockopt$inet_mreqn(0xffffffffffffffff, 0x0, 0x20, &(0x7f0000000580)={@multicast1, @initdev, 0x0}, &(0x7f00000005c0)=0xc) ioctl$sock_inet6_SIOCDELRT(r0, 0x890c, &(0x7f0000000900)={@dev={0xfe, 0x80, '\x00', 0x31}, @initdev={0xfe, 0x88, '\x00', 0x1, 0x0}, @initdev={0xfe, 0x88, '\x00', 0x1, 0x0}, 0x800, 0xfff7, 0x9, 0x900, 0x101, 0x6, r5}) socket$inet6_sctp(0xa, 0x5, 0x84) mmap(&(0x7f0000001000/0xc00000)=nil, 0xc00000, 0x3000004, 0x3032, 0xffffffffffffffff, 0x0) r6 = socket$inet_tcp(0x2, 0x1, 0x0) setsockopt$sock_int(r6, 0x1, 0x3c, &(0x7f0000000040)=0x1, 0x4) setsockopt$inet_tcp_TCP_REPAIR(r6, 0x6, 0x13, &(0x7f00000000c0)=0x1, 0x4) setsockopt$inet_sctp6_SCTP_AUTOCLOSE(r0, 0x84, 0x4, &(0x7f0000001140), 0x4) connect$inet(r6, &(0x7f0000000080)={0x2, 0x0, @loopback}, 0x10) setsockopt$inet_tcp_TCP_REPAIR(r6, 0x6, 0x13, &(0x7f00000001c0)=0xffffffffffffffff, 0x4) sendmmsg$inet(r6, &(0x7f0000000d00)=[{{0x0, 0x0, 0x0}}, {{0x0, 0x0, &(0x7f0000000440)=[{&(0x7f0000003000)="e1", 0x1}], 0x1}}], 0x2, 0x4000000) bpf$BPF_GET_MAP_INFO(0xf, &(0x7f0000000b00)={0x1, 0x58, &(0x7f0000000a80)}, 0x10) 1.934498ms ago: executing program 4 (id=6210): r0 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r0, &(0x7f0000000480)={0x0, 0x0, &(0x7f0000001f40)={&(0x7f00000004c0)=@updpolicy={0xfc, 0x19, 0x1, 0x0, 0x0, {{@in6=@rand_addr=' \x01\x00', @in=@local, 0x0, 0x0, 0x0, 0x0, 0xa, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff}, {0x0, 0xa9, 0x0, 0x0, 0x0, 0xffffffffffffffff}, {0x0, 0xa00, 0x40800000000000, 0x800000000000000}}, [@tmpl={0x44, 0x5, [{{@in=@local, 0x8000, 0x3c}, 0x0, @in=@broadcast, 0x0, 0x0, 0x3}]}]}, 0xfc}}, 0x0) r1 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r1, &(0x7f0000000380)={0x0, 0x0, &(0x7f0000000340)={&(0x7f00000007c0)=@migrate={0xec, 0x21, 0x1, 0x0, 0x4, {{@in6=@mcast1, @in6=@private2, 0x0, 0x5, 0x0, 0x0, 0xa}}, [@migrate={0x9c, 0x11, [{@in6=@remote, @in=@initdev={0xac, 0x1e, 0x0, 0x0}, @in6=@rand_addr=' \x01\x00', @in6=@initdev={0xfe, 0x88, '\x00', 0x1, 0x0}, 0x6c, 0x2, 0x0, 0x3501, 0x2, 0x2}, {@in6=@private1={0xfc, 0x1, '\x00', 0x1}, @in6=@dev={0xfe, 0x80, '\x00', 0x35}, @in=@local, @in6=@private2={0xfc, 0x2, '\x00', 0x1}, 0x3c, 0x0, 0x0, 0x0, 0xa, 0xa}]}]}, 0xec}}, 0x0) socket$nl_route(0x10, 0x3, 0x0) (async) r2 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r2, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000000)=@mpls_newroute={0x24, 0x18, 0x601, 0x0, 0x0, {0x1c, 0x14, 0x0, 0x0, 0xfe, 0x0, 0x0, 0x1}, [@RTA_TTL_PROPAGATE={0x5, 0x13}]}, 0x24}}, 0x20000000) (async) sendmsg$nl_route(r2, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000000)=@mpls_newroute={0x24, 0x18, 0x601, 0x0, 0x0, {0x1c, 0x14, 0x0, 0x0, 0xfe, 0x0, 0x0, 0x1}, [@RTA_TTL_PROPAGATE={0x5, 0x13}]}, 0x24}}, 0x20000000) 0s ago: executing program 0 (id=6211): r0 = socket$kcm(0x2, 0xa, 0x73) r1 = bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000040)={0x6, 0x3, &(0x7f0000000680)=ANY=[@ANYBLOB="1800000002000000000000000000000095"], &(0x7f00000002c0)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x44, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0xfffffffffffffdf0}, 0x94) (async) r2 = socket$nl_netfilter(0x10, 0x3, 0xc) (async) bpf$TOKEN_CREATE(0x24, &(0x7f0000000100)={0x0, r0}, 0x8) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000380)={0x18, 0x0, 0x0, &(0x7f0000000740)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x60d1}, 0x94) (async) r3 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='cgroup.controllers\x00', 0x275a, 0x0) write$cgroup_int(r3, &(0x7f0000000200), 0xffffffc1) (async) r4 = socket$inet6(0xa, 0x2, 0x0) setsockopt$inet6_int(r4, 0x29, 0x4e, &(0x7f0000000040)=0x10078, 0x4) bind$inet6(r4, &(0x7f0000000280)={0xa, 0x4e20, 0x1, @ipv4={'\x00', '\xff\xff', @rand_addr=0x64010102}, 0xa}, 0x1c) (async) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x2, 0x22052, r3, 0x0) bpf$BPF_PROG_QUERY(0x10, 0x0, 0x0) (async) sendmsg$NLBL_UNLABEL_C_STATICREMOVEDEF(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000540)=ANY=[@ANYBLOB="14000000"], 0x14}, 0x1, 0xffffffff00000003, 0x0, 0x60040}, 0x0) (async, rerun: 32) r5 = socket$nl_netfilter(0x10, 0x3, 0xc) (rerun: 32) sendmsg$IPSET_CMD_DEL(r5, &(0x7f0000000340)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000500)=ANY=[@ANYBLOB="e00000000a06010100000000000000000300000908000940800000010900020073797a310000000005000100070000000800094000000005880008800c000780080009"], 0x13a}, 0x1, 0x0, 0x0, 0x4800}, 0x48080) sendmsg$NFT_BATCH(r2, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000500)=ANY=[@ANYBLOB="140000001000010000000000000000000025000a20000000000a01030000000000000000010000000900010073797a30000000003c000000090a010400000000000000000100000008000a40000000000900020073797a32000000000900010073797a30000000000800054000000003740000001e0a01020000000000000000010000000900020073797a32001400003400038030000080090006400000000024000b8020000180070001006374000014000280080001400000000008000240000000000900010073797a30"], 0xe4}}, 0x0) (async) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000600)={r1, 0x5, 0x11c, 0x0, &(0x7f00000008c0)="259a53f271a76d2673004c6588a897515ff943e8bfce0b39003080bf4f5b255f814e5b450b42fa1c7cd4c8fa00586c5300005d2ec085c2000061f02329b6e4fb65b7196629fab5a747815dd3a806bc23d97141e42ddfe913ef5b7c8da5229021c1b993616527528cbf7c7887c7599322380c4a4325522e870c65c1615b776e5b1af6d2e929ac57542bb093a56beb804e7d61bb0c82040f3dae4df6c688f50d89651daf2c53a8d22c047cbd1e2bfd8c3f42a4b6eaad7979435a73595c2bdc1715694565c4a0593992eacbdfa10513cad093f67a3a47ea2eb08c3fbd10199e3b5c541bb24db47842b4c4781671419abbc3c7b1cb6b8948b6c678cfe6c6c6fc75e0fa1a4d0d409fc8eb77ded1c1d6558176a400"/284, 0x0, 0x8, 0x2a0, 0x0, 0x0, 0x0, 0x0, 0x6}, 0x50) kernel console output (not intermixed with test programs): d8 (unregistering): Released all slaves [ 742.019338][T26821] syzkaller0: entered promiscuous mode [ 742.024830][T26821] syzkaller0: entered allmulticast mode [ 742.062406][T26841] workqueue: Failed to create a rescuer kthread for wq "bond6": -EINTR [ 742.063556][T26824] tipc: Resetting bearer [ 742.145346][T26824] tipc: Disabling bearer [ 742.290882][T10136] tipc: Node number set to 1334220282 [ 742.335623][ T7747] tipc: Disabling bearer [ 742.376785][ T7747] tipc: Disabling bearer [ 742.407037][ T7747] tipc: Left network mode [ 742.573338][ T7747] IPVS: stopping backup sync thread 6912 ... [ 742.698960][T26879] netlink: 'syz.1.5134': attribute type 1 has an invalid length. [ 742.711151][T26879] netlink: 92 bytes leftover after parsing attributes in process `syz.1.5134'. [ 742.749054][T26884] team0: Port device dummy0 removed [ 742.780066][T26884] batman_adv: batadv0: Adding interface: dummy0 [ 742.792058][T26884] batman_adv: batadv0: The MTU of interface dummy0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 742.819912][T26884] batman_adv: batadv0: Not using interface dummy0 (retrying later): interface not active [ 742.850387][T26906] netlink: 'syz.4.5140': attribute type 83 has an invalid length. [ 742.911653][T26908] netlink: 68 bytes leftover after parsing attributes in process `syz.0.5141'. [ 742.978149][T26908] netlink: 14 bytes leftover after parsing attributes in process `syz.0.5141'. [ 743.125436][T26908] bond0 (unregistering): (slave dummy0): Releasing backup interface [ 743.172873][T26908] bond0 (unregistering): Released all slaves [ 743.665807][T26943] faux_driver regulatory: loading /lib/firmware/regulatory.db failed with error -4 [ 743.682371][T26949] netlink: 8 bytes leftover after parsing attributes in process `syz.5.5150'. [ 743.699419][T26943] faux_driver regulatory: Direct firmware load for regulatory.db failed with error -4 [ 743.750024][T26943] faux_driver regulatory: Falling back to sysfs fallback for: regulatory.db [ 743.790919][T26953] netlink: 8 bytes leftover after parsing attributes in process `syz.5.5150'. [ 744.251602][T26977] netlink: 'syz.0.5153': attribute type 6 has an invalid length. [ 744.299863][T26980] netlink: 'syz.0.5153': attribute type 6 has an invalid length. [ 744.649580][T26999] veth1_to_bond: Caught tx_queue_len zero misconfig [ 744.871428][T27002] bond5: down delay (5) is not a multiple of miimon (2), value rounded to 4 ms [ 744.910341][T27002] bond5: entered promiscuous mode [ 745.095051][T27013] syzkaller0: entered promiscuous mode [ 745.120282][T27013] syzkaller0: entered allmulticast mode [ 745.555133][ C1] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 745.571128][T27025] netlink: 3 bytes leftover after parsing attributes in process `syz.1.5162'. [ 745.603565][T27025] netlink: 4 bytes leftover after parsing attributes in process `syz.1.5162'. [ 745.635842][T27025] netlink: 3 bytes leftover after parsing attributes in process `syz.1.5162'. [ 745.883747][ T7747] hsr_slave_0: left promiscuous mode [ 745.933509][ T7747] hsr_slave_1: left promiscuous mode [ 746.039841][ T7747] veth1_macvtap: left promiscuous mode [ 746.200668][T27060] xt_hashlimit: size too large, truncated to 1048576 [ 746.641477][T27080] xt_TCPMSS: Only works on TCP SYN packets [ 746.728031][ T7747] pim6reg (unregistering): left allmulticast mode [ 746.832924][T27085] __nla_validate_parse: 2 callbacks suppressed [ 746.832944][T27085] netlink: 44 bytes leftover after parsing attributes in process `syz.0.5172'. [ 747.160200][ T1318] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 747.172086][ T1318] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 747.385005][T27059] netlink: 4 bytes leftover after parsing attributes in process `syz.4.5169'. [ 747.407384][T27059] netlink: 4 bytes leftover after parsing attributes in process `syz.4.5169'. [ 747.416300][T27059] A link change request failed with some changes committed already. Interface batadv0 may have been left with an inconsistent configuration, please check. [ 747.590832][T27085] bridge0: port 1(erspan0) entered disabled state [ 748.003588][ T7747] IPVS: stop unused estimator thread 0... [ 748.281827][T27115] Only authenc() type AEADs are supported by ESSIV [ 748.444491][T27129] netlink: 28 bytes leftover after parsing attributes in process `syz.0.5182'. [ 749.093168][T27119] lo speed is unknown, defaulting to 1000 [ 749.549737][T27154] netlink: 28 bytes leftover after parsing attributes in process `syz.1.5189'. [ 749.642617][T27157] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 749.854471][T27160] gretap0: entered promiscuous mode [ 749.880275][T27160] vlan4: entered promiscuous mode [ 750.586736][ C1] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 750.935248][T27198] tipc: Enabled bearer , priority 0 [ 751.063147][T27198] syzkaller0: entered promiscuous mode [ 751.069045][T27198] syzkaller0: entered allmulticast mode [ 751.075365][T27198] tipc: Resetting bearer [ 751.109328][T27196] tipc: Resetting bearer [ 751.352202][T27221] netlink: 'syz.3.5208': attribute type 1 has an invalid length. [ 751.681626][T27232] netlink: 8 bytes leftover after parsing attributes in process `syz.4.5211'. [ 751.893577][T27234] block nbd5: server does not support multiple connections per device. [ 751.939015][T27234] block nbd5: shutting down sockets [ 753.729476][T27196] tipc: Disabling bearer [ 753.741061][T27221] workqueue: Failed to create a rescuer kthread for wq "bond11": -EINTR [ 753.752987][T22919] tipc: Node number set to 3596114133 [ 753.788801][T27242] mac80211_hwsim hwsim59 syzkaller0: entered promiscuous mode [ 753.807072][T27242] mac80211_hwsim hwsim59 syzkaller0: entered allmulticast mode [ 754.051367][T27255] netlink: 24 bytes leftover after parsing attributes in process `syz.4.5218'. [ 754.091735][T27255] mac80211_hwsim hwsim58 »»»»»»: renamed from wlan0 [ 754.159518][T27263] netlink: 8 bytes leftover after parsing attributes in process `syz.3.5220'. [ 754.261439][ T81] nci: nci_extract_activation_params_iso_dep: unsupported activation_rf_tech_and_mode 0x80 [ 754.292979][T27277] A link change request failed with some changes committed already. Interface macsec0 may have been left with an inconsistent configuration, please check. [ 754.449833][T27285] x_tables: duplicate underflow at hook 2 [ 754.511596][T27298] sctp: [Deprecated]: syz.3.5228 (pid 27298) Use of int in max_burst socket option deprecated. [ 754.511596][T27298] Use struct sctp_assoc_value instead [ 754.539686][T27298] netlink: 44 bytes leftover after parsing attributes in process `syz.3.5228'. [ 754.554563][T27300] sctp: [Deprecated]: syz.3.5228 (pid 27300) Use of int in max_burst socket option deprecated. [ 754.554563][T27300] Use struct sctp_assoc_value instead [ 754.858279][T27269] nci: __nci_request: wait_for_completion_interruptible_timeout failed -512 [ 755.626802][ C1] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 755.845048][T27322] netlink: 24 bytes leftover after parsing attributes in process `syz.4.5235'. [ 755.880008][T27322] netlink: 24 bytes leftover after parsing attributes in process `syz.4.5235'. [ 755.916498][T27322] netlink: 24 bytes leftover after parsing attributes in process `syz.4.5235'. [ 755.962726][T27322] netlink: 24 bytes leftover after parsing attributes in process `syz.4.5235'. [ 755.993579][T27322] netlink: 24 bytes leftover after parsing attributes in process `syz.4.5235'. [ 756.016044][T27322] netlink: 24 bytes leftover after parsing attributes in process `syz.4.5235'. [ 756.067894][T27322] netlink: 24 bytes leftover after parsing attributes in process `syz.4.5235'. [ 756.414171][T27357] netlink: 'syz.4.5241': attribute type 10 has an invalid length. [ 756.506138][T27347] syzkaller0: entered promiscuous mode [ 756.523073][T27347] syzkaller0: entered allmulticast mode [ 756.970414][T27365] dummy0: left allmulticast mode [ 756.978882][T27365] dummy0: left promiscuous mode [ 756.996354][T27365] bridge0: port 4(dummy0) entered disabled state [ 757.008310][T27386] netlink: 'syz.1.5245': attribute type 30 has an invalid length. [ 757.037865][T27365] bridge_slave_0: left allmulticast mode [ 757.055645][T27365] bridge_slave_0: left promiscuous mode [ 757.073992][T27365] bridge0: port 1(bridge_slave_0) entered disabled state [ 757.090229][T27365] bridge_slave_1: left allmulticast mode [ 757.096029][T27365] bridge_slave_1: left promiscuous mode [ 757.102434][T27365] bridge0: port 2(bridge_slave_1) entered disabled state [ 757.111067][T27365] vlan3: left promiscuous mode [ 757.115895][T27365] geneve0: left promiscuous mode [ 757.128646][T27365] bond0: (slave bond_slave_0): Releasing backup interface [ 757.142817][T27365] bond0: (slave bond_slave_1): Releasing backup interface [ 757.170242][T27365] team_slave_0: left promiscuous mode [ 757.187215][T27365] `: Port device team_slave_0 removed [ 757.198640][T27365] team_slave_1: left promiscuous mode [ 757.219662][T27365] `: Port device team_slave_1 removed [ 757.230010][T27365] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 757.238589][T27365] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 757.250015][T27365] A link change request failed with some changes committed already. Interface hsr_slave_0 may have been left with an inconsistent configuration, please check. [ 757.932883][T27417] 8021q: adding VLAN 0 to HW filter on device bond6 [ 757.991050][T27420] bond6: (slave hsr0): The slave device specified does not support setting the MAC address [ 758.034733][T27420] hsr0: A HSR master's MTU cannot be greater than the smallest MTU of its slaves minus the HSR Tag length (6 octets). [ 758.066734][T27420] bond6: (slave hsr0): Error -22 calling dev_set_mtu [ 758.162527][T27439] netlink: 'syz.3.5258': attribute type 2 has an invalid length. [ 758.550665][T27452] netlink: 'syz.4.5260': attribute type 10 has an invalid length. [ 759.735977][T27509] veth1_to_hsr: Caught tx_queue_len zero misconfig [ 759.843708][T27516] sch_tbf: burst 19872 is lower than device lo mtu (11337746) ! [ 760.285750][T27520] netlink: 'syz.5.5275': attribute type 29 has an invalid length. [ 760.313233][T27531] 8021q: VLANs not supported on vxcan0 [ 760.666765][ C1] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 760.795013][T27555] __nla_validate_parse: 112 callbacks suppressed [ 760.795033][T27555] netlink: 8 bytes leftover after parsing attributes in process `syz.4.5287'. [ 760.818105][T27553] netlink: 28 bytes leftover after parsing attributes in process `syz.3.5286'. [ 760.828833][T27553] netlink: 28 bytes leftover after parsing attributes in process `syz.3.5286'. [ 760.838709][T27555] netlink: 224 bytes leftover after parsing attributes in process `syz.4.5287'. [ 760.852253][T27553] netlink: 12 bytes leftover after parsing attributes in process `syz.3.5286'. [ 760.862518][T27555] netlink: 8 bytes leftover after parsing attributes in process `syz.4.5287'. [ 761.182335][T27569] netlink: 'syz.3.5290': attribute type 10 has an invalid length. [ 761.198924][T27569] bridge0: port 1(batadv_slave_0) entered disabled state [ 761.249380][T27569] bridge0: port 1(batadv_slave_0) entered blocking state [ 761.256702][T27569] bridge0: port 1(batadv_slave_0) entered forwarding state [ 761.319111][T27569] team0: Port device bridge0 added [ 761.475250][T27586] netlink: 8 bytes leftover after parsing attributes in process `syz.4.5294'. [ 761.497054][T27586] netlink: 8 bytes leftover after parsing attributes in process `syz.4.5294'. [ 761.761870][T27593] netlink: 16 bytes leftover after parsing attributes in process `syz.4.5298'. [ 761.793355][T27546] lo speed is unknown, defaulting to 1000 [ 761.930097][T27598] tipc: Bearer : already 2 bearers with priority 0 [ 761.958157][T27602] netlink: 24 bytes leftover after parsing attributes in process `syz.3.5300'. [ 761.968799][T27598] tipc: Enabling of bearer rejected, cannot adjust to lower [ 762.086871][T27593] 8021q: adding VLAN 0 to HW filter on device bond12 [ 762.424940][T27613] 8021q: adding VLAN 0 to HW filter on device bond13 [ 762.470763][T27619] macvlan4: entered promiscuous mode [ 762.486693][T27619] macvlan4: entered allmulticast mode [ 762.495944][T27619] bond13: entered promiscuous mode [ 762.503922][T27619] 8021q: adding VLAN 0 to HW filter on device macvlan4 [ 762.552416][T27619] bond13: left promiscuous mode [ 762.605358][T27576] lo speed is unknown, defaulting to 1000 [ 762.912948][T27633] RDS: rds_bind could not find a transport for 2001::, load rds_tcp or rds_rdma? [ 762.983641][ T7747] tipc: Resetting bearer [ 763.126996][T27640] syz_tun: entered allmulticast mode [ 763.161533][T27640] syz_tun: left allmulticast mode [ 763.292622][T27644] netlink: 'syz.4.5314': attribute type 1 has an invalid length. [ 763.514826][T27644] bond14: entered promiscuous mode [ 763.529916][T27644] 8021q: adding VLAN 0 to HW filter on device bond14 [ 763.838468][T27635] lo speed is unknown, defaulting to 1000 [ 763.845413][T27648] siw: device registration error -23 [ 764.266361][T27663] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 764.340805][T27663] A link change request failed with some changes committed already. Interface vlan0 may have been left with an inconsistent configuration, please check. [ 764.440593][T27666] lo: Caught tx_queue_len zero misconfig [ 764.969384][T27670] lo speed is unknown, defaulting to 1000 [ 765.040407][T27690] vcan0: tx drop: invalid da for name 0xfffffffffffffffd [ 765.649930][T27706] ip6erspan1: entered allmulticast mode [ 765.692346][T27714] netlink: 'syz.3.5330': attribute type 13 has an invalid length. [ 765.706851][ C1] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 765.718696][T27714] netlink: 'syz.3.5330': attribute type 17 has an invalid length. [ 765.928895][T27712] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check. [ 765.965979][T27714] syz_tun: left promiscuous mode [ 766.071466][T27714] veth0_vlan: left promiscuous mode [ 766.097870][T27714] veth0_vlan: entered promiscuous mode [ 766.132651][T27714] A link change request failed with some changes committed already. Interface wlan1 may have been left with an inconsistent configuration, please check. [ 766.231739][T27725] bridge0: port 3(erspan0) entered blocking state [ 766.261843][T27733] __nla_validate_parse: 9 callbacks suppressed [ 766.261865][T27733] netlink: 68 bytes leftover after parsing attributes in process `syz.5.5332'. [ 766.266331][T27725] bridge0: port 3(erspan0) entered disabled state [ 766.296499][T27733] netlink: 64 bytes leftover after parsing attributes in process `syz.5.5332'. [ 766.340464][T27725] erspan0: entered allmulticast mode [ 766.353658][ T8537] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 766.362982][ T8537] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 766.372251][ C1] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 766.387147][T22919] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 766.399191][ T1605] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 766.415212][T10136] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 766.432065][T27725] erspan0: entered promiscuous mode [ 766.453798][T27725] bridge0: port 3(erspan0) entered blocking state [ 766.460466][T27725] bridge0: port 3(erspan0) entered forwarding state [ 766.522765][T27729] erspan0: left allmulticast mode [ 766.542674][T27729] erspan0: left promiscuous mode [ 766.549192][T27729] bridge0: port 3(erspan0) entered disabled state [ 766.862835][T27756] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 766.904099][T27760] netlink: 24 bytes leftover after parsing attributes in process `syz.0.5340'. [ 766.971895][T27763] netlink: 24 bytes leftover after parsing attributes in process `syz.0.5340'. [ 767.231096][T27774] netlink: 'syz.0.5343': attribute type 4 has an invalid length. [ 767.282953][T27779] netlink: 'syz.0.5343': attribute type 4 has an invalid length. [ 767.337790][T22919] lo speed is unknown, defaulting to 1000 [ 767.378336][ T1605] lo speed is unknown, defaulting to 1000 [ 767.531022][T27746] netlink: 72 bytes leftover after parsing attributes in process `syz.4.5336'. [ 767.633836][ T1799] block nbd0: Possible stuck request ffff88807c617000: control (read@0,1024B). Runtime 420 seconds [ 767.650650][ T1799] block nbd0: Possible stuck request ffff88807c6171c0: control (read@1024,1024B). Runtime 420 seconds [ 767.662553][ T25] block nbd0: Dead connection, failed to find a fallback [ 767.676332][ T1799] block nbd0: Possible stuck request ffff88807c617380: control (read@2048,1024B). Runtime 420 seconds [ 767.689813][ T1799] block nbd0: Possible stuck request ffff88807c617540: control (read@3072,1024B). Runtime 420 seconds [ 767.998790][T27809] netlink: 4 bytes leftover after parsing attributes in process `syz.5.5347'. [ 768.023778][T27809] netlink: 12 bytes leftover after parsing attributes in process `syz.5.5347'. [ 768.248547][T27822] netlink: 4 bytes leftover after parsing attributes in process `syz.3.5352'. [ 768.360554][T27830] netlink: 'syz.3.5352': attribute type 1 has an invalid length. [ 768.390737][T27822] veth7: entered promiscuous mode [ 768.407461][T27830] netlink: 'syz.3.5352': attribute type 2 has an invalid length. [ 768.425347][T27830] netlink: 'syz.3.5352': attribute type 1 has an invalid length. [ 768.467344][T27835] netlink: 24 bytes leftover after parsing attributes in process `syz.1.5356'. [ 768.488030][T27836] netlink: 24 bytes leftover after parsing attributes in process `syz.1.5356'. [ 768.877150][T27854] netlink: 'syz.4.5361': attribute type 1 has an invalid length. [ 768.964637][T27858] geneve2: entered promiscuous mode [ 768.986157][ T36] netdevsim netdevsim5 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 769.024778][ T36] netdevsim netdevsim5 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 769.074397][ T36] netdevsim netdevsim5 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 769.105894][ T36] netdevsim netdevsim5 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 769.615621][T27890] netlink: 'syz.4.5370': attribute type 1 has an invalid length. [ 769.672576][T27890] netlink: 'syz.4.5370': attribute type 1 has an invalid length. [ 769.818977][T27898] netlink: 'syz.0.5372': attribute type 2 has an invalid length. [ 769.852695][T27898] netlink: 'syz.0.5372': attribute type 2 has an invalid length. [ 769.940016][T27900] netlink: 'syz.4.5373': attribute type 1 has an invalid length. [ 770.551957][T27930] ip6tnl4: entered allmulticast mode [ 770.746816][ C1] net_ratelimit: 6 callbacks suppressed [ 770.746845][ C1] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 770.939883][T27951] netlink: 'syz.0.5388': attribute type 3 has an invalid length. [ 771.206324][T27965] 8021q: adding VLAN 0 to HW filter on device bond11 [ 771.269237][T27965] bond11 (unregistering): Released all slaves [ 771.469808][ T6107] ip6_tunnel: ip6tnl4 xmit: Local address not yet configured! [ 771.504401][ T1605] ip6_tunnel: ip6tnl4 xmit: Local address not yet configured! [ 771.517532][ T6107] ip6_tunnel: ip6tnl4 xmit: Local address not yet configured! [ 771.786910][ T1605] ip6_tunnel: ip6tnl4 xmit: Local address not yet configured! [ 772.109071][ T6107] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 772.122694][ T1605] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 772.135820][ T5766] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 772.174052][T28021] __nla_validate_parse: 5 callbacks suppressed [ 772.174071][T28021] netlink: 16 bytes leftover after parsing attributes in process `syz.0.5405'. [ 772.466357][ T1605] ip6_tunnel: ip6tnl4 xmit: Local address not yet configured! [ 772.649708][T28031] netlink: 8 bytes leftover after parsing attributes in process `syz.5.5407'. [ 772.911238][T28035] netlink: 4 bytes leftover after parsing attributes in process `syz.1.5410'. [ 773.051672][T28042] netlink: 208240 bytes leftover after parsing attributes in process `syz.3.5411'. [ 773.144581][T28056] netlink: 8 bytes leftover after parsing attributes in process `syz.4.5414'. [ 773.173423][T28056] bond0: (slave dummy0): Enslaving as an active interface with an up link [ 773.190731][T28047] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 773.249207][T28059] netlink: 64 bytes leftover after parsing attributes in process `syz.3.5416'. [ 773.369489][T28059] validate_nla: 6 callbacks suppressed [ 773.369508][T28059] netlink: 'syz.3.5416': attribute type 1 has an invalid length. [ 773.602847][T28080] netlink: 'syz.3.5416': attribute type 3 has an invalid length. [ 773.649254][T28080] netlink: 3 bytes leftover after parsing attributes in process `syz.3.5416'. [ 773.854002][T28059] 8021q: adding VLAN 0 to HW filter on device bond12 [ 773.930934][T28097] netlink: 'syz.1.5424': attribute type 4 has an invalid length. [ 773.946131][T28059] bond11: (slave bond12): making interface the new active one [ 773.953670][T28097] netlink: 152 bytes leftover after parsing attributes in process `syz.1.5424'. [ 773.967978][T28059] bond11: (slave bond12): Enslaving as an active interface with an up link [ 773.989709][T28097] .`: renamed from bond0 (while UP) [ 774.149692][T28089] netlink: 8 bytes leftover after parsing attributes in process `syz.5.5422'. [ 775.088102][T28107] lo speed is unknown, defaulting to 1000 [ 775.148192][ T1605] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 775.307066][ C1] ip6_tunnel: ip6tnl4 xmit: Local address not yet configured! [ 775.786816][ C1] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 775.950998][ T6107] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 775.960615][ C1] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 776.054729][T28156] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 776.065818][ C1] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 776.262143][T28161] bond0: option tlb_dynamic_lb: invalid value (16) [ 776.298930][T28161] bond0 (unregistering): Released all slaves [ 776.873581][T28200] netlink: 'syz.5.5447': attribute type 12 has an invalid length. [ 777.372789][T28220] mac80211_hwsim hwsim59 syzkaller0: left promiscuous mode [ 777.390614][T28220] mac80211_hwsim hwsim59 syzkaller0: left allmulticast mode [ 777.428941][T28227] netlink: 28 bytes leftover after parsing attributes in process `syz.3.5456'. [ 777.621490][T28237] netlink: 'syz.4.5457': attribute type 1 has an invalid length. [ 777.648214][T28237] netlink: 'syz.4.5457': attribute type 2 has an invalid length. [ 777.673179][T28237] netlink: 'syz.4.5457': attribute type 3 has an invalid length. [ 777.695916][T28239] netlink: 4 bytes leftover after parsing attributes in process `syz.4.5457'. [ 777.857465][T28247] netlink: 28 bytes leftover after parsing attributes in process `syz.3.5461'. [ 777.990961][T28250] can: request_module (can-proto-5) failed. [ 778.187507][ T5766] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 778.274994][T28247] netlink: 28 bytes leftover after parsing attributes in process `syz.3.5461'. [ 778.523015][T28269] netlink: 220 bytes leftover after parsing attributes in process `syz.3.5466'. [ 778.559926][T28269] netlink: 220 bytes leftover after parsing attributes in process `syz.3.5466'. [ 778.582762][T28269] netlink: 56 bytes leftover after parsing attributes in process `syz.3.5466'. [ 779.298095][T28296] netlink: 4 bytes leftover after parsing attributes in process `syz.0.5474'. [ 779.733342][T28315] syzkaller0: entered promiscuous mode [ 779.744890][T28315] syzkaller0: entered allmulticast mode [ 780.273370][T28341] openvswitch: netlink: Invalid VLAN frame [ 780.490122][T28358] netlink: 'syz.0.5490': attribute type 1 has an invalid length. [ 780.586692][T28364] syz.4.5491: vmalloc error: size 8589938688, exceeds total pages, mode:0xdc0(GFP_KERNEL|__GFP_ZERO), nodemask=(null),cpuset=/,mems_allowed=0-1 [ 780.602267][T28364] CPU: 1 UID: 0 PID: 28364 Comm: syz.4.5491 Not tainted syzkaller #0 PREEMPT(full) [ 780.602296][T28364] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/09/2026 [ 780.602309][T28364] Call Trace: [ 780.602318][T28364] [ 780.602327][T28364] dump_stack_lvl+0xe8/0x150 [ 780.602358][T28364] warn_alloc+0x249/0x340 [ 780.602404][T28364] ? stack_trace_save+0xa9/0x100 [ 780.602444][T28364] ? __pfx_warn_alloc+0x10/0x10 [ 780.602481][T28364] ? kasan_save_track+0x4f/0x80 [ 780.602509][T28364] ? kasan_save_track+0x3e/0x80 [ 780.602535][T28364] ? __kasan_kmalloc+0x93/0xb0 [ 780.602564][T28364] ? __kmalloc_cache_noprof+0x31c/0x660 [ 780.602592][T28364] ? xskq_create+0x56/0x170 [ 780.602721][T28364] ? xsk_setsockopt+0x54c/0x990 [ 780.602747][T28364] ? do_sock_setsockopt+0x17c/0x1b0 [ 780.602796][T28364] ? __x64_sys_setsockopt+0x13d/0x1b0 [ 780.602817][T28364] ? do_syscall_64+0x174/0x580 [ 780.602885][T28364] __vmalloc_node_range_noprof+0x132/0x1750 [ 780.602951][T28364] ? __pfx___vmalloc_node_range_noprof+0x10/0x10 [ 780.602989][T28364] ? __kasan_kmalloc+0x93/0xb0 [ 780.603026][T28364] vmalloc_user_noprof+0xad/0xe0 [ 780.603057][T28364] ? xskq_create+0xbf/0x170 [ 780.603090][T28364] xskq_create+0xbf/0x170 [ 780.603125][T28364] xsk_init_queue+0x8a/0xe0 [ 780.603159][T28364] xsk_setsockopt+0x54c/0x990 [ 780.603191][T28364] ? __pfx_xsk_setsockopt+0x10/0x10 [ 780.603221][T28364] ? __pfx_aa_sk_perm+0x10/0x10 [ 780.603291][T28364] ? aa_sock_opt_perm+0xff/0x1a0 [ 780.603350][T28364] ? bpf_lsm_socket_setsockopt+0x9/0x20 [ 780.603394][T28364] ? __pfx_xsk_setsockopt+0x10/0x10 [ 780.603426][T28364] do_sock_setsockopt+0x17c/0x1b0 [ 780.603456][T28364] __x64_sys_setsockopt+0x13d/0x1b0 [ 780.603484][T28364] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 780.603509][T28364] do_syscall_64+0x174/0x580 [ 780.603532][T28364] ? trace_irq_disable+0x3b/0x140 [ 780.603564][T28364] ? clear_bhb_loop+0x40/0x90 [ 780.603589][T28364] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 780.603611][T28364] RIP: 0033:0x7f3b3579ce59 [ 780.603632][T28364] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 780.603653][T28364] RSP: 002b:00007f3b365e8028 EFLAGS: 00000246 ORIG_RAX: 0000000000000036 [ 780.603676][T28364] RAX: ffffffffffffffda RBX: 00007f3b35a15fa0 RCX: 00007f3b3579ce59 [ 780.603706][T28364] RDX: 0000000000000006 RSI: 000000000000011b RDI: 0000000000000004 [ 780.603720][T28364] RBP: 00007f3b35832d6f R08: 0000000000000004 R09: 0000000000000000 [ 780.603735][T28364] R10: 0000200000000000 R11: 0000000000000246 R12: 0000000000000000 [ 780.603748][T28364] R13: 00007f3b35a16038 R14: 00007f3b35a15fa0 R15: 00007ffeb6f184d8 [ 780.603783][T28364] [ 780.603893][T28364] Mem-Info: [ 780.736043][T28366] netlink: 28 bytes leftover after parsing attributes in process `syz.5.5492'. [ 780.823649][T28364] active_anon:6733 inactive_anon:0 isolated_anon:0 [ 780.823649][T28364] active_file:3539 inactive_file:40268 isolated_file:0 [ 780.823649][T28364] unevictable:768 dirty:246 writeback:0 [ 780.823649][T28364] slab_reclaimable:12698 slab_unreclaimable:251726 [ 780.823649][T28364] mapped:31016 shmem:1298 pagetables:1579 [ 780.823649][T28364] sec_pagetables:0 bounce:0 [ 780.823649][T28364] kernel_misc_reclaimable:0 [ 780.823649][T28364] free:1142182 free_pcp:30730 free_cma:0 [ 780.828451][ C1] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 780.951024][T28364] Node 0 active_anon:27020kB inactive_anon:0kB active_file:14156kB inactive_file:160868kB unevictable:1536kB isolated(anon):0kB isolated(file):0kB mapped:99580kB dirty:984kB writeback:0kB shmem:3648kB shmem_thp:0kB shmem_pmdmapped:0kB anon_thp:0kB kernel_stack:16660kB pagetables:6124kB sec_pagetables:0kB all_unreclaimable? no Balloon:0kB gpu_active:0kB gpu_reclaim:0kB [ 780.986127][T28364] Node 1 active_anon:0kB inactive_anon:0kB active_file:0kB inactive_file:204kB unevictable:1536kB isolated(anon):0kB isolated(file):0kB mapped:20480kB dirty:0kB writeback:0kB shmem:1536kB shmem_thp:0kB shmem_pmdmapped:0kB anon_thp:0kB kernel_stack:32kB pagetables:140kB sec_pagetables:0kB all_unreclaimable? no Balloon:0kB gpu_active:0kB gpu_reclaim:0kB [ 781.045622][T28371] netlink: 'syz.4.5491': attribute type 10 has an invalid length. [ 781.081257][T28364] Node 0 DMA free:11264kB boost:0kB min:208kB low:260kB high:312kB reserved_highatomic:0KB free_highatomic:0KB active_anon:0kB inactive_anon:0kB active_file:0kB inactive_file:0kB unevictable:0kB writepending:0kB zspages:0kB present:15992kB managed:15360kB mlocked:0kB bounce:0kB free_pcp:0kB local_pcp:0kB free_cma:0kB [ 781.171364][T28376] netlink: 4 bytes leftover after parsing attributes in process `syz.4.5491'. [ 781.197373][T28376] openvswitch: netlink: Key 0 has unexpected len 172 expected 0 [ 781.233512][ T10] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 781.250825][T28380] netlink: 'syz.4.5491': attribute type 10 has an invalid length. [ 781.271120][T28364] lowmem_reserve[]: 0 2492 2493 2493 2493 [ 781.277396][T28364] Node 0 DMA32 free:917552kB boost:0kB min:34188kB low:42732kB high:51276kB reserved_highatomic:0KB free_highatomic:0KB active_anon:27120kB inactive_anon:0kB active_file:14156kB inactive_file:160868kB unevictable:1536kB writepending:984kB zspages:0kB present:3129332kB managed:2552608kB mlocked:0kB bounce:0kB free_pcp:57624kB local_pcp:17908kB free_cma:0kB [ 781.314895][T28364] lowmem_reserve[]: 0 0 0 0 0 [ 781.319919][T28364] Node 0 Normal free:0kB boost:0kB min:8kB low:8kB high:8kB reserved_highatomic:0KB free_highatomic:0KB active_anon:0kB inactive_anon:0kB active_file:0kB inactive_file:0kB unevictable:0kB writepending:0kB zspages:0kB present:1048580kB managed:672kB mlocked:0kB bounce:0kB free_pcp:4kB local_pcp:4kB free_cma:0kB [ 781.371793][T28364] lowmem_reserve[]: 0 0 0 0 0 [ 781.377315][T28364] Node 1 Normal free:3644604kB boost:0kB min:55704kB low:69628kB high:83552kB reserved_highatomic:0KB free_highatomic:0KB active_anon:0kB inactive_anon:0kB active_file:0kB inactive_file:204kB unevictable:1536kB writepending:0kB zspages:0kB present:4194300kB managed:4111100kB mlocked:0kB bounce:0kB free_pcp:60584kB local_pcp:29532kB free_cma:0kB [ 781.411426][T28364] lowmem_reserve[]: 0 0 0 0 0 [ 781.418617][T28364] Node 0 DMA: 0*4kB 0*8kB 0*16kB 0*32kB 0*64kB 0*128kB 0*256kB 0*512kB 1*1024kB (U) 1*2048kB (M) 2*4096kB (M) = 11264kB [ 781.431811][T28364] Node 0 DMA32: 6940*4kB (UME) 6308*8kB (UM) 4057*16kB (UM) 539*32kB (UME) 346*64kB (UME) 321*128kB (UME) 531*256kB (UME) 340*512kB (UM) 193*1024kB (UM) 61*2048kB (UM) 15*4096kB (U) = 917632kB [ 781.451745][T28364] Node 0 Normal: 0*4kB 0*8kB 0*16kB 0*32kB 0*64kB 0*128kB 0*256kB 0*512kB 0*1024kB 0*2048kB 0*4096kB = 0kB [ 781.484333][T28364] Node 1 Normal: 3*4kB (U) 8*8kB (UM) 13*16kB (UM) 9*32kB (UM) 12*64kB (UM) 11*128kB (UM) 6*256kB (UM) 6*512kB (UM) 4*1024kB (UM) 2*2048kB (U) 886*4096kB (UM) = 3644604kB [ 781.524326][T28364] Node 0 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=1048576kB [ 781.544334][T28364] Node 0 hugepages_total=2 hugepages_free=2 hugepages_surp=0 hugepages_size=2048kB [ 781.563145][T28364] Node 1 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=1048576kB [ 781.582494][T28364] Node 1 hugepages_total=2 hugepages_free=2 hugepages_surp=0 hugepages_size=2048kB [ 781.592104][T28364] 45099 total pagecache pages [ 781.606224][T28364] 0 pages in swap cache [ 781.610564][T28364] Free swap = 124996kB [ 781.623917][T28364] Total swap = 124996kB [ 781.628700][T28364] 2097051 pages RAM [ 781.641344][T28364] 0 pages HighMem/MovableOnly [ 781.646076][T28364] 427116 pages reserved [ 781.650753][T28364] 0 pages cma reserved [ 781.709149][ T8537] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 781.718083][T28318] Bluetooth: hci0: Opcode 0x0c03 failed: -110 [ 781.719733][ C0] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 782.994507][ C1] ip6_tunnel: ip6tnl4 xmit: Local address not yet configured! [ 783.736060][T28358] workqueue: Failed to create a rescuer kthread for wq "bond0": -EINTR [ 783.757648][T28371] bond0: (slave dummy0): Releasing backup interface [ 783.822873][T28389] __nla_validate_parse: 2 callbacks suppressed [ 783.822890][T28389] netlink: 36 bytes leftover after parsing attributes in process `syz.0.5496'. [ 783.845807][T28371] `: Port device dummy0 added [ 783.853450][T28371] dummy0: entered promiscuous mode [ 783.912989][T28380] `: Port device dummy0 removed [ 783.970734][T28380] bond0: (slave dummy0): Enslaving as an active interface with an up link [ 784.024537][T28380] dummy0: left promiscuous mode [ 784.268781][ T10] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 784.389929][T28412] netlink: 4 bytes leftover after parsing attributes in process `syz.0.5501'. [ 784.436369][T28412] openvswitch: netlink: ufid size 20 bytes exceeds the range (1, 16) [ 784.481190][T28418] netlink: 128 bytes leftover after parsing attributes in process `syz.4.5503'. [ 784.499681][T28412] openvswitch: netlink: Flow set message rejected, Key attribute missing. [ 784.511529][T28418] netlink: 36 bytes leftover after parsing attributes in process `syz.4.5503'. [ 785.427750][T28448] veth1: Caught tx_queue_len zero misconfig [ 785.498590][T28453] vlan1: entered promiscuous mode [ 785.520313][T28453] bridge0: entered promiscuous mode [ 785.866907][ C1] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 786.030419][T28477] IPv6: NLM_F_CREATE should be specified when creating new route [ 786.053419][T28477] IPv6: RTM_NEWROUTE with no NLM_F_CREATE or NLM_F_REPLACE [ 786.060758][T28477] IPv6: NLM_F_CREATE should be set when creating new route [ 786.121307][T28477] IPv6: RTM_NEWROUTE with no NLM_F_CREATE or NLM_F_REPLACE [ 786.128665][T28477] IPv6: NLM_F_CREATE should be set when creating new route [ 786.350240][T28491] netlink: 'syz.5.5515': attribute type 1 has an invalid length. [ 786.378585][T28493] netlink: 'syz.5.5515': attribute type 1 has an invalid length. [ 786.613515][T28491] 8021q: adding VLAN 0 to HW filter on device bond7 [ 786.942134][T28509] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 786.950492][ C1] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 787.010589][T28517] syzkaller0: entered promiscuous mode [ 787.027902][T28517] syzkaller0: entered allmulticast mode [ 787.134771][T28519] netlink: 52 bytes leftover after parsing attributes in process `syz.0.5521'. [ 787.220281][T28521] netlink: 36 bytes leftover after parsing attributes in process `syz.5.5522'. [ 787.243371][T28527] netlink: 212368 bytes leftover after parsing attributes in process `syz.3.5519'. [ 787.308879][ T10] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 787.471587][ T7743] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 787.480907][ C0] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 788.134102][T28533] veth1_macvtap: left allmulticast mode [ 788.370002][ T5766] lo speed is unknown, defaulting to 1000 [ 788.378932][ T5766] syz2: Port: 1 Link DOWN [ 788.438089][T28514] lo speed is unknown, defaulting to 1000 [ 788.438151][ T6112] netdevsim netdevsim0 eth0: unset [1, 0] type 2 family 0 port 6081 - 0 [ 788.477518][ T6112] netdevsim netdevsim0 eth1: unset [1, 0] type 2 family 0 port 6081 - 0 [ 788.494796][ T5649] block nbd5: Receive control failed (result -32) [ 788.514512][ T6112] netdevsim netdevsim0 eth2: unset [1, 0] type 2 family 0 port 6081 - 0 [ 788.526994][ T6112] netdevsim netdevsim0 eth3: unset [1, 0] type 2 family 0 port 6081 - 0 [ 788.691548][T28569] netlink: 20 bytes leftover after parsing attributes in process `syz.3.5526'. [ 788.778601][T28578] netlink: 'syz.4.5528': attribute type 21 has an invalid length. [ 788.832091][T28578] netlink: 36 bytes leftover after parsing attributes in process `syz.4.5528'. [ 789.081149][T28586] netlink: 8 bytes leftover after parsing attributes in process `syz.4.5528'. [ 789.106754][T28586] netlink: 12 bytes leftover after parsing attributes in process `syz.4.5528'. [ 789.563838][T28606] netlink: 12 bytes leftover after parsing attributes in process `syz.3.5531'. [ 789.565508][T28607] netlink: 12 bytes leftover after parsing attributes in process `syz.3.5531'. [ 789.602205][T28606] netlink: 12 bytes leftover after parsing attributes in process `syz.3.5531'. [ 789.650675][T28606] netlink: 58 bytes leftover after parsing attributes in process `syz.3.5531'. [ 789.656073][T28607] netlink: 12 bytes leftover after parsing attributes in process `syz.3.5531'. [ 789.689156][T28609] netlink: 36 bytes leftover after parsing attributes in process `syz.3.5531'. [ 789.748367][T28607] netlink: 58 bytes leftover after parsing attributes in process `syz.3.5531'. [ 790.351275][T10136] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 790.605421][T28651] dvmrp0: entered allmulticast mode [ 790.729419][T28611] lo speed is unknown, defaulting to 1000 [ 790.907234][ C1] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 792.809467][T28619] nci: __nci_request: wait_for_completion_interruptible_timeout failed -512 [ 793.227822][ C0] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 793.238315][ C0] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 793.248603][ C0] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 793.257711][ C0] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 793.266310][ C0] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 793.275825][ C0] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 793.389161][T10136] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 793.451513][T28714] netlink: 'syz.5.5557': attribute type 1 has an invalid length. [ 793.496786][T28714] netlink: 'syz.5.5557': attribute type 2 has an invalid length. [ 793.521760][T28714] netlink: 'syz.5.5557': attribute type 1 has an invalid length. [ 793.844029][T28716] mac80211_hwsim hwsim59 syzkaller0: entered promiscuous mode [ 793.853239][T28716] mac80211_hwsim hwsim59 syzkaller0: entered allmulticast mode [ 793.870268][T28716] tipc: Resetting bearer [ 793.945837][T28737] __nla_validate_parse: 11 callbacks suppressed [ 793.945859][T28737] netlink: 8 bytes leftover after parsing attributes in process `syz.1.5565'. [ 793.999917][T28743] netlink: 'syz.0.5567': attribute type 2 has an invalid length. [ 794.028870][T28743] netlink: 8 bytes leftover after parsing attributes in process `syz.0.5567'. [ 794.081689][T28743] netlink: 12 bytes leftover after parsing attributes in process `syz.0.5567'. [ 794.113606][T28741] netlink: 20 bytes leftover after parsing attributes in process `syz.3.5566'. [ 794.221165][T28759] xt_ipcomp: unknown flags 1D [ 794.227710][T28759] xt_ipcomp: unknown flags 1D [ 794.232711][T28759] xt_ipcomp: unknown flags 1D [ 794.238335][T28759] xt_ipcomp: unknown flags 1D [ 794.243300][T28759] xt_ipcomp: unknown flags 1D [ 794.249245][T28759] xt_ipcomp: unknown flags 1D [ 794.254229][T28759] xt_ipcomp: unknown flags 1D [ 794.259753][T28759] xt_ipcomp: unknown flags 1D [ 794.264744][T28759] xt_ipcomp: unknown flags 1D [ 794.270341][T28759] xt_ipcomp: unknown flags 1D [ 794.278441][T28743] 8021q: adding VLAN 0 to HW filter on device bond0 [ 794.289347][T28764] netlink: 4 bytes leftover after parsing attributes in process `syz.0.5567'. [ 794.368377][T28764] bond0 (unregistering): Released all slaves [ 795.053018][T28792] netlink: 12 bytes leftover after parsing attributes in process `syz.0.5576'. [ 795.195669][T28795] netlink: 176 bytes leftover after parsing attributes in process `syz.1.5578'. [ 795.515633][T28811] netlink: 36 bytes leftover after parsing attributes in process `syz.1.5580'. [ 795.545049][T28811] openvswitch: netlink: Flow key attr not present in new flow. [ 795.598546][T28811] netlink: 12 bytes leftover after parsing attributes in process `syz.1.5580'. [ 795.946912][ C1] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 796.427929][T10136] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 796.544589][T28868] netlink: 24 bytes leftover after parsing attributes in process `syz.1.5593'. [ 796.780354][T28886] netlink: 'syz.4.5595': attribute type 1 has an invalid length. [ 796.991025][T28886] macvlan4: entered promiscuous mode [ 797.000951][T28886] macvlan4: entered allmulticast mode [ 797.011764][T28886] bond16: entered promiscuous mode [ 797.020695][T28886] 8021q: adding VLAN 0 to HW filter on device macvlan4 [ 797.041827][T28886] bond16: left promiscuous mode [ 797.828950][T28914] C: renamed from veth1_to_team (while UP) [ 798.060109][T28921] netlink: 'syz.3.5603': attribute type 1 has an invalid length. [ 798.153551][T28921] bond13: entered promiscuous mode [ 798.167495][T28921] 8021q: adding VLAN 0 to HW filter on device bond13 [ 798.260543][T28921] bond13: (slave veth9): making interface the new active one [ 798.288961][T28921] veth9: entered promiscuous mode [ 798.312697][T28921] bond13: (slave veth9): Enslaving as an active interface with an up link [ 798.717550][T28952] netlink: 'syz.5.5611': attribute type 1 has an invalid length. [ 798.750302][T28952] workqueue: Failed to create a rescuer kthread for wq "bond8": -EINTR [ 798.869104][T28958] ip6gretap1: entered allmulticast mode [ 798.986930][ C1] ip6_tunnel: ip6tnl4 xmit: Local address not yet configured! [ 799.001051][T18650] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 799.009909][ C1] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 799.470918][ T10] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 800.284297][T29020] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 800.583432][T29032] netlink: 'syz.3.5634': attribute type 1 has an invalid length. [ 800.682198][T29032] 8021q: adding VLAN 0 to HW filter on device bond14 [ 800.690104][T29039] __nla_validate_parse: 7 callbacks suppressed [ 800.690122][T29039] netlink: 8 bytes leftover after parsing attributes in process `syz.0.5633'. [ 800.721685][T29038] bond14: up delay (136) is not a multiple of miimon (100), value rounded to 100 ms [ 800.754004][T29038] bond14: entered allmulticast mode [ 800.988498][ C1] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 801.492854][T29065] mac80211_hwsim hwsim53 wlan0: entered promiscuous mode [ 801.528821][T29065] mac80211_hwsim hwsim53 wlan0: entered allmulticast mode [ 801.539635][T29073] netlink: 12 bytes leftover after parsing attributes in process `syz.4.5641'. [ 801.551594][T29073] netlink: 60 bytes leftover after parsing attributes in process `syz.4.5641'. [ 801.570990][T29065] A link change request failed with some changes committed already. Interface bridge0 may have been left with an inconsistent configuration, please check. [ 802.225083][T29111] sock: sock_timestamping_bind_phc: sock not bind to device [ 802.280665][T29112] sock: sock_timestamping_bind_phc: sock not bind to device [ 802.514487][ T10] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 802.601671][T29126] netlink: 16 bytes leftover after parsing attributes in process `syz.5.5654'. [ 802.756357][T29140] netlink: 8 bytes leftover after parsing attributes in process `syz.3.5658'. [ 803.262676][T29163] netlink: 12 bytes leftover after parsing attributes in process `syz.3.5670'. [ 803.305573][T29169] netlink: 8 bytes leftover after parsing attributes in process `syz.5.5668'. [ 803.539260][T29167] netlink: 'syz.4.5671': attribute type 1 has an invalid length. [ 803.822553][T29193] netlink: 8 bytes leftover after parsing attributes in process `syz.0.5676'. [ 804.008381][T29193] vlan1: entered promiscuous mode [ 804.036975][T29193] geneve1: entered promiscuous mode [ 804.042527][T29193] vlan1: entered allmulticast mode [ 804.053138][T29193] geneve1: entered allmulticast mode [ 804.110908][ T6474] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 804.120409][ C1] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 804.332166][T29204] netlink: 12 bytes leftover after parsing attributes in process `syz.4.5679'. [ 804.900644][T29232] xt_policy: output policy not valid in PREROUTING and INPUT [ 805.364230][T29250] netlink: 24 bytes leftover after parsing attributes in process `syz.3.5689'. [ 805.428523][T29252] netlink: 'syz.0.5691': attribute type 5 has an invalid length. [ 805.459184][T29252] netlink: 'syz.0.5691': attribute type 3 has an invalid length. [ 805.549577][ T5766] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 805.715028][T29256] __nla_validate_parse: 2 callbacks suppressed [ 805.715048][T29256] netlink: 28 bytes leftover after parsing attributes in process `syz.1.5692'. [ 805.750936][T29256] netlink: 28 bytes leftover after parsing attributes in process `syz.1.5692'. [ 805.774271][T29261] netlink: 300 bytes leftover after parsing attributes in process `syz.1.5692'. [ 806.026880][ C1] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 806.556273][T29305] netlink: 32 bytes leftover after parsing attributes in process `syz.3.5697'. [ 806.960210][T29316] netlink: 'syz.0.5704': attribute type 1 has an invalid length. [ 806.990361][T29323] netlink: 12 bytes leftover after parsing attributes in process `syz.3.5706'. [ 807.084246][T29316] 8021q: adding VLAN 0 to HW filter on device bond0 [ 807.499409][T29324] bond0: (slave veth0_to_bond): Enslaving as an active interface with a down link [ 807.886231][T29375] netlink: 200 bytes leftover after parsing attributes in process `syz.0.5712'. [ 807.904638][T29376] netlink: 40 bytes leftover after parsing attributes in process `syz.3.5713'. [ 807.995481][T29380] netlink: 'syz.1.5715': attribute type 1 has an invalid length. [ 808.038838][T29372] netlink: 20 bytes leftover after parsing attributes in process `syz.0.5712'. [ 808.104028][T29382] scsi_nl_rcv_msg: discarding partial skb [ 808.176421][T29380] 8021q: adding VLAN 0 to HW filter on device bond10 [ 808.219429][T29376] netlink: 12 bytes leftover after parsing attributes in process `syz.3.5713'. [ 808.253068][T29390] bond10: (slave geneve2): making interface the new active one [ 808.264615][T29390] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 808.276025][T29390] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 808.286769][T29390] bond10: (slave geneve2): Enslaving as an active interface with an up link [ 808.367926][T18650] netdevsim netdevsim1 eth0: set [1, 0] type 2 family 0 port 6081 - 0 [ 808.385361][T18650] netdevsim netdevsim1 eth1: set [1, 0] type 2 family 0 port 6081 - 0 [ 808.425810][T18650] netdevsim netdevsim1 eth2: set [1, 0] type 2 family 0 port 6081 - 0 [ 808.445531][T18650] netdevsim netdevsim1 eth3: set [1, 0] type 2 family 0 port 6081 - 0 [ 808.454785][ T10] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 808.533139][T18650] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 808.588500][ T1318] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 808.591817][ T10] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 808.605940][ T1318] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 808.636142][ T7746] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 808.834668][T29403] netlink: 8 bytes leftover after parsing attributes in process `syz.0.5718'. [ 808.989077][T29400] tipc: Enabled bearer , priority 0 [ 808.995971][T29383] openvswitch: netlink: Invalid VLAN frame [ 809.433089][T29399] tipc: Disabling bearer [ 809.711153][T29443] netlink: 'syz.1.5724': attribute type 1 has an invalid length. [ 809.930017][T29443] bond12: entered promiscuous mode [ 809.935748][T29443] 8021q: adding VLAN 0 to HW filter on device bond12 [ 809.952671][T29447] bond12: (slave ipvlan2): enslaved VLAN challenged slave. Adding VLANs will be blocked as long as it is part of bond. [ 809.965722][T29447] bond12: (slave ipvlan2): The slave device specified does not support setting the MAC address [ 809.977034][T29447] bond12: (slave ipvlan2): Setting fail_over_mac to active for active-backup mode [ 810.535953][T29487] netlink: 'syz.0.5733': attribute type 30 has an invalid length. [ 811.067204][ C1] net_ratelimit: 8 callbacks suppressed [ 811.067225][ C1] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 811.194288][T29515] __nla_validate_parse: 1 callbacks suppressed [ 811.194308][T29515] netlink: 260 bytes leftover after parsing attributes in process `syz.5.5741'. [ 811.221655][T29515] netlink: 8 bytes leftover after parsing attributes in process `syz.5.5741'. [ 811.489226][T29532] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 811.576773][T29498] Bluetooth: hci0: Opcode 0x0c03 failed: -4 [ 811.627180][ T5766] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 811.647446][ T7746] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 811.973842][T29523] lo speed is unknown, defaulting to 1000 [ 812.013515][T29554] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 812.028525][T29552] netlink: 104 bytes leftover after parsing attributes in process `syz.0.5751'. [ 812.212767][T29558] netlink: 'syz.3.5753': attribute type 58 has an invalid length. [ 812.228106][T29558] netlink: 20 bytes leftover after parsing attributes in process `syz.3.5753'. [ 812.298359][T29563] sctp: [Deprecated]: syz.5.5755 (pid 29563) Use of int in max_burst socket option. [ 812.298359][T29563] Use struct sctp_assoc_value instead [ 812.415975][T29570] netlink: 'syz.5.5757': attribute type 9 has an invalid length. [ 812.543462][T29572] netlink: 8 bytes leftover after parsing attributes in process `syz.3.5758'. [ 812.812796][ T36] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 812.834834][T29586] netlink: 4 bytes leftover after parsing attributes in process `syz.3.5761'. [ 812.979581][T29586] netlink: 4 bytes leftover after parsing attributes in process `syz.3.5761'. [ 812.984538][ T36] netdevsim netdevsim3 eth0: set [0, 0] type 1 family 0 port 8472 - 0 [ 813.021220][ T36] netdevsim netdevsim3 eth1: set [0, 0] type 1 family 0 port 8472 - 0 [ 813.045466][ T36] netdevsim netdevsim3 eth2: set [0, 0] type 1 family 0 port 8472 - 0 [ 813.084432][ T36] netdevsim netdevsim3 eth3: set [0, 0] type 1 family 0 port 8472 - 0 [ 813.446502][T29607] pim6reg1: entered allmulticast mode [ 813.815485][T29618] tipc: Resetting bearer [ 813.896836][T29618] tipc: Resetting bearer [ 813.978493][ T5766] ip6_tunnel: ip6tnl4 xmit: Local address not yet configured! [ 813.989610][ T36] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 814.026899][ C0] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 814.058395][T29621] netlink: 'syz.0.5769': attribute type 1 has an invalid length. [ 814.278893][ T36] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 814.287939][ C1] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 814.306291][T29622] sch_tbf: burst 4095 is lower than device lo mtu (11337746) ! [ 814.484666][T29591] lo speed is unknown, defaulting to 1000 [ 814.617491][ T5766] ip6_tunnel: ip6tnl4 xmit: Local address not yet configured! [ 815.286029][T29614] lo speed is unknown, defaulting to 1000 [ 815.431541][T29662] bridge0: port 2(team0) entered blocking state [ 815.454881][T29662] bridge0: port 2(team0) entered disabled state [ 815.485601][T29662] team0: entered allmulticast mode [ 815.514555][T29662] veth1_to_hsr: entered allmulticast mode [ 815.666333][T29662] team0: entered promiscuous mode [ 815.706343][T29662] veth1_to_hsr: entered promiscuous mode [ 816.293408][T18650] net_ratelimit: 2 callbacks suppressed [ 816.293428][T18650] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 816.563113][T29683] netlink: 212344 bytes leftover after parsing attributes in process `syz.1.5780'. [ 816.995002][T29698] netlink: 20 bytes leftover after parsing attributes in process `syz.1.5785'. [ 817.027515][T29702] netlink: 60 bytes leftover after parsing attributes in process `syz.5.5786'. [ 817.042968][T29698] netlink: 20 bytes leftover after parsing attributes in process `syz.1.5785'. [ 817.224059][T29705] netlink: 'syz.5.5786': attribute type 1 has an invalid length. [ 817.311330][ T7748] tipc: Subscription rejected, illegal request [ 817.325636][T29712] netlink: 20 bytes leftover after parsing attributes in process `syz.3.5789'. [ 817.457179][ T7748] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 817.706835][ T10] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 817.741904][T29726] netlink: 16 bytes leftover after parsing attributes in process `syz.1.5790'. [ 817.848431][T29695] lo speed is unknown, defaulting to 1000 [ 818.250524][T29740] netlink: 12 bytes leftover after parsing attributes in process `syz.5.5793'. [ 818.286195][T29734] netlink: 12 bytes leftover after parsing attributes in process `syz.5.5793'. [ 818.327020][T29741] netlink: 'syz.1.5794': attribute type 21 has an invalid length. [ 818.342237][T29741] netlink: 'syz.1.5794': attribute type 22 has an invalid length. [ 818.365684][T29741] netlink: 'syz.1.5794': attribute type 23 has an invalid length. [ 818.394834][T29741] netlink: 'syz.1.5794': attribute type 25 has an invalid length. [ 818.422363][T29741] netlink: 96 bytes leftover after parsing attributes in process `syz.1.5794'. [ 818.461958][T29699] lo speed is unknown, defaulting to 1000 [ 818.598107][T18650] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 818.708154][T29745] veth0_to_batadv: Caught tx_queue_len zero misconfig [ 818.737115][T29745] netlink: 72 bytes leftover after parsing attributes in process `syz.1.5795'. [ 819.467929][ T7743] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 819.476811][ C0] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 819.737481][ T7743] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 820.039382][T20578] Bluetooth: hci5: unexpected cc 0x0c03 length: 249 > 1 [ 820.069867][T20578] Bluetooth: hci5: unexpected cc 0x1003 length: 249 > 9 [ 820.078450][T20578] Bluetooth: hci5: unexpected cc 0x1001 length: 249 > 9 [ 820.089258][T20578] Bluetooth: hci5: unexpected cc 0x0c23 length: 249 > 4 [ 820.097677][T20578] Bluetooth: hci5: unexpected cc 0x0c38 length: 249 > 2 [ 820.246272][T29776] wg2: Caught tx_queue_len zero misconfig [ 820.584695][T29793] syzkaller0: entered promiscuous mode [ 820.621410][T29793] syzkaller0: entered allmulticast mode [ 820.734884][T29795] tipc: Enabled bearer , priority 0 [ 820.752289][ T5766] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 820.879445][T18650] netdevsim netdevsim3 eth3 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 820.914287][T18650] netdevsim netdevsim3 eth3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 820.924836][ T36] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 820.989388][T29795] tipc: Resetting bearer [ 821.089666][T29795] tipc: Disabling bearer [ 821.384469][T18650] netdevsim netdevsim3 eth2 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 821.451523][T18650] netdevsim netdevsim3 eth2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 821.672232][T29849] RDS: rds_bind could not find a transport for 2001::1, load rds_tcp or rds_rdma? [ 821.730567][T18650] netdevsim netdevsim3 eth1 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 821.765076][T18650] netdevsim netdevsim3 eth1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 821.932917][T29855] netdevsim netdevsim4 netdevsim3: unset [0, 0] type 1 family 0 port 8472 - 0 [ 821.998576][T29855] netdevsim netdevsim4 netdevsim3: unset [1, 0] type 2 family 0 port 6081 - 0 [ 822.058763][ T7744] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 822.103985][ T8537] netdevsim netdevsim4 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 822.183450][T18650] netdevsim netdevsim3 eth0 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 822.196360][T20578] Bluetooth: hci5: command tx timeout [ 822.212599][T18650] netdevsim netdevsim3 eth0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 822.536326][T29891] __nla_validate_parse: 4 callbacks suppressed [ 822.536346][T29891] netlink: 8 bytes leftover after parsing attributes in process `syz.5.5822'. [ 822.668924][T29891] netlink: 24 bytes leftover after parsing attributes in process `syz.5.5822'. [ 822.678388][ C0] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 822.811514][ T36] netdevsim netdevsim3 eth5: set [1, 0] type 2 family 0 port 6081 - 0 [ 823.030545][ T36] netdevsim netdevsim3 eth6: set [1, 0] type 2 family 0 port 6081 - 0 [ 823.048307][T29904] netlink: 'syz.4.5825': attribute type 1 has an invalid length. [ 823.075292][T29904] netlink: 'syz.4.5825': attribute type 4 has an invalid length. [ 823.104734][T29904] netlink: 9462 bytes leftover after parsing attributes in process `syz.4.5825'. [ 823.163745][T29897] netlink: 'syz.1.5823': attribute type 29 has an invalid length. [ 823.207059][T29897] netlink: 8 bytes leftover after parsing attributes in process `syz.1.5823'. [ 823.218949][ T7747] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 823.230369][T29907] netlink: 16 bytes leftover after parsing attributes in process `syz.4.5825'. [ 823.244337][T29909] netlink: 24 bytes leftover after parsing attributes in process `syz.5.5826'. [ 823.262286][T29770] lo speed is unknown, defaulting to 1000 [ 823.271100][ T36] netdevsim netdevsim3 eth7: set [1, 0] type 2 family 0 port 6081 - 0 [ 823.358452][ T36] netdevsim netdevsim3 eth8: set [1, 0] type 2 family 0 port 6081 - 0 [ 823.443740][T18650] batadv_slave_0: left allmulticast mode [ 823.465612][T18650] batadv_slave_0: left promiscuous mode [ 823.485381][T18650] bridge0: port 1(batadv_slave_0) entered disabled state [ 823.571377][T29918] netlink: 20 bytes leftover after parsing attributes in process `syz.5.5828'. [ 823.661222][T29924] netlink: 8 bytes leftover after parsing attributes in process `syz.0.5829'. [ 823.787793][ T10] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 823.864759][T29934] netlink: 'syz.0.5831': attribute type 4 has an invalid length. [ 823.916390][T29936] netlink: 'syz.0.5831': attribute type 4 has an invalid length. [ 824.019952][T18650] bond8 (unregistering): (slave ip6gretap1): Releasing active interface [ 824.254338][T18650] erspan0 (unregistering): left promiscuous mode [ 824.288353][T20578] Bluetooth: hci5: command tx timeout [ 824.303223][T18650] gretap0 (unregistering): left promiscuous mode [ 824.344134][T18650] bond5 (unregistering): (slave gretap1): Releasing backup interface [ 824.398228][ T6112] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 824.512808][T18650] bond3 (unregistering): (slave geneve3): Releasing active interface [ 824.529717][T18650] bond2 (unregistering): (slave geneve2): Releasing active interface [ 824.541426][T18650] geneve2 (unregistering): left allmulticast mode [ 824.568212][T18650] team0: Port device bridge0 removed [ 824.661516][T18650] bond0 (unregistering): Released all slaves [ 824.673224][T18650] bond1 (unregistering): Released all slaves [ 824.698183][T18650] bond2 (unregistering): Released all slaves [ 824.714613][T18650] bond3 (unregistering): Released all slaves [ 824.737186][T18650] bond4 (unregistering): Released all slaves [ 824.753107][T18650] bond5 (unregistering): Released all slaves [ 824.777713][T18650] bond6 (unregistering): Released all slaves [ 824.793391][T18650] bond7 (unregistering): Released all slaves [ 824.810790][T18650] bond8 (unregistering): Released all slaves [ 824.826128][T18650] bond9 (unregistering): Released all slaves [ 824.853311][T18650] team0: Port device bond10 removed [ 824.863727][T18650] bond10 (unregistering): (slave team_slave_1): Releasing backup interface [ 824.873067][T18650] team_slave_1: left promiscuous mode [ 824.878747][T18650] team_slave_1: left allmulticast mode [ 824.885457][T18650] bond10 (unregistering): Released all slaves [ 824.903180][T18650] bond11 (unregistering): (slave bond12): Releasing backup interface [ 824.912785][T18650] bond11 (unregistering): Released all slaves [ 824.934759][T18650] bond12 (unregistering): Released all slaves [ 824.953531][T18650] bond13 (unregistering): (slave veth9): Releasing backup interface [ 824.962617][T18650] veth9: left promiscuous mode [ 824.970514][T18650] bond13 (unregistering): Released all slaves [ 824.990600][T18650] bond14 (unregistering): Released all slaves [ 825.007175][T18650] bond15 (unregistering): Released all slaves [ 825.032703][T18650] bond16 (unregistering): Released all slaves [ 825.119330][T15036] lo speed is unknown, defaulting to 1000 [ 825.133029][T15036] syz2: Port: 1 Link ACTIVE [ 825.228944][ T7747] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 825.237789][ C0] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 825.406737][T29948] netlink: 4 bytes leftover after parsing attributes in process `syz.4.5832'. [ 825.441767][T29950] netlink: 20 bytes leftover after parsing attributes in process `syz.0.5833'. [ 825.552391][ T7747] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 825.562673][T29951] bond8: option lacp_active: mode dependency failed, not supported in mode balance-rr(0) [ 825.591379][T29951] bond8 (unregistering): Released all slaves [ 825.670664][T29950] workqueue: Failed to create a rescuer kthread for wq "bond8": -EINTR [ 826.118790][T18650] tipc: Left network mode [ 826.169118][T29980] sctp: [Deprecated]: syz.0.5836 (pid 29980) Use of int in max_burst socket option. [ 826.169118][T29980] Use struct sctp_assoc_value instead [ 826.347707][T20578] Bluetooth: hci5: command tx timeout [ 826.545673][T29989] pimreg9: entered allmulticast mode [ 826.589188][ T5295] 8021q: adding VLAN 0 to HW filter on device netdevsim3 [ 826.689610][ T6112] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 826.743232][T29997] warn_alloc: 1 callbacks suppressed [ 826.743250][T29997] syz.1.5840: vmalloc error: size 8589938688, exceeds total pages, mode:0xdc0(GFP_KERNEL|__GFP_ZERO), nodemask=(null),cpuset=/,mems_allowed=0-1 [ 826.790608][T29997] CPU: 0 UID: 0 PID: 29997 Comm: syz.1.5840 Not tainted syzkaller #0 PREEMPT(full) [ 826.790642][T29997] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/09/2026 [ 826.790657][T29997] Call Trace: [ 826.790666][T29997] [ 826.790676][T29997] dump_stack_lvl+0xe8/0x150 [ 826.790708][T29997] warn_alloc+0x249/0x340 [ 826.790742][T29997] ? stack_trace_save+0xa9/0x100 [ 826.790784][T29997] ? __pfx_warn_alloc+0x10/0x10 [ 826.790823][T29997] ? kasan_save_track+0x4f/0x80 [ 826.790850][T29997] ? kasan_save_track+0x3e/0x80 [ 826.790876][T29997] ? __kasan_kmalloc+0x93/0xb0 [ 826.790904][T29997] ? __kmalloc_cache_noprof+0x31c/0x660 [ 826.790933][T29997] ? xskq_create+0x56/0x170 [ 826.790964][T29997] ? xsk_setsockopt+0x54c/0x990 [ 826.791002][T29997] ? do_sock_setsockopt+0x17c/0x1b0 [ 826.791025][T29997] ? __x64_sys_setsockopt+0x13d/0x1b0 [ 826.791046][T29997] ? do_syscall_64+0x174/0x580 [ 826.791073][T29997] __vmalloc_node_range_noprof+0x132/0x1750 [ 826.791148][T29997] ? __pfx___vmalloc_node_range_noprof+0x10/0x10 [ 826.791186][T29997] ? __kasan_kmalloc+0x93/0xb0 [ 826.791237][T29997] vmalloc_user_noprof+0xad/0xe0 [ 826.791267][T29997] ? xskq_create+0xbf/0x170 [ 826.791297][T29997] xskq_create+0xbf/0x170 [ 826.791331][T29997] xsk_init_queue+0x8a/0xe0 [ 826.791363][T29997] xsk_setsockopt+0x54c/0x990 [ 826.791394][T29997] ? __pfx_xsk_setsockopt+0x10/0x10 [ 826.791422][T29997] ? __pfx_aa_sk_perm+0x10/0x10 [ 826.791455][T29997] ? aa_sock_opt_perm+0xff/0x1a0 [ 826.791489][T29997] ? bpf_lsm_socket_setsockopt+0x9/0x20 [ 826.791517][T29997] ? __pfx_xsk_setsockopt+0x10/0x10 [ 826.791547][T29997] do_sock_setsockopt+0x17c/0x1b0 [ 826.791575][T29997] __x64_sys_setsockopt+0x13d/0x1b0 [ 826.791600][T29997] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 826.791622][T29997] do_syscall_64+0x174/0x580 [ 826.791644][T29997] ? trace_irq_disable+0x3b/0x140 [ 826.791675][T29997] ? clear_bhb_loop+0x40/0x90 [ 826.791700][T29997] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 826.791721][T29997] RIP: 0033:0x7faec9f9ce59 [ 826.791741][T29997] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 826.791759][T29997] RSP: 002b:00007faecaf32028 EFLAGS: 00000246 ORIG_RAX: 0000000000000036 [ 826.791782][T29997] RAX: ffffffffffffffda RBX: 00007faeca215fa0 RCX: 00007faec9f9ce59 [ 826.791797][T29997] RDX: 0000000000000006 RSI: 000000000000011b RDI: 0000000000000004 [ 826.791810][T29997] RBP: 00007faeca032d6f R08: 0000000000000004 R09: 0000000000000000 [ 826.791822][T29997] R10: 0000200000000000 R11: 0000000000000246 R12: 0000000000000000 [ 826.791843][T29997] R13: 00007faeca216038 R14: 00007faeca215fa0 R15: 00007ffd8c1f2838 [ 826.791878][T29997] [ 826.792095][T29997] Mem-Info: [ 827.070970][T15037] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 827.097453][T29997] active_anon:9617 inactive_anon:0 isolated_anon:0 [ 827.097453][T29997] active_file:3539 inactive_file:40287 isolated_file:0 [ 827.097453][T29997] unevictable:768 dirty:88 writeback:0 [ 827.097453][T29997] slab_reclaimable:12858 slab_unreclaimable:235087 [ 827.097453][T29997] mapped:33698 shmem:4043 pagetables:1553 [ 827.097453][T29997] sec_pagetables:0 bounce:0 [ 827.097453][T29997] kernel_misc_reclaimable:0 [ 827.097453][T29997] free:1150105 free_pcp:26462 free_cma:0 [ 827.144841][T29997] Node 0 active_anon:38768kB inactive_anon:0kB active_file:14156kB inactive_file:160944kB unevictable:1536kB isolated(anon):0kB isolated(file):0kB mapped:94132kB dirty:352kB writeback:0kB shmem:14936kB shmem_thp:0kB shmem_pmdmapped:0kB anon_thp:0kB kernel_stack:16692kB pagetables:6072kB sec_pagetables:0kB all_unreclaimable? no Balloon:0kB gpu_active:0kB gpu_reclaim:0kB [ 827.202165][T29997] Node 1 active_anon:0kB inactive_anon:0kB active_file:0kB inactive_file:204kB unevictable:1536kB isolated(anon):0kB isolated(file):0kB mapped:40960kB dirty:0kB writeback:0kB shmem:1536kB shmem_thp:0kB shmem_pmdmapped:0kB anon_thp:0kB kernel_stack:32kB pagetables:140kB sec_pagetables:0kB all_unreclaimable? no Balloon:0kB gpu_active:0kB gpu_reclaim:0kB [ 827.283043][T29997] Node 0 DMA free:11264kB boost:0kB min:208kB low:260kB high:312kB reserved_highatomic:0KB free_highatomic:0KB active_anon:0kB inactive_anon:0kB active_file:0kB inactive_file:0kB unevictable:0kB writepending:0kB zspages:0kB present:15992kB managed:15360kB mlocked:0kB bounce:0kB free_pcp:0kB local_pcp:0kB free_cma:0kB [ 827.322731][T29997] lowmem_reserve[]: 0 2492 2493 2493 2493 [ 827.328832][T29997] Node 0 DMA32 free:958544kB boost:0kB min:34188kB low:42732kB high:51276kB reserved_highatomic:0KB free_highatomic:0KB active_anon:38968kB inactive_anon:0kB active_file:14156kB inactive_file:160944kB unevictable:1536kB writepending:352kB zspages:0kB present:3129332kB managed:2552608kB mlocked:0kB bounce:0kB free_pcp:38144kB local_pcp:17780kB free_cma:0kB [ 827.344802][T30003] netlink: 'syz.1.5840': attribute type 10 has an invalid length. [ 827.362685][T29997] lowmem_reserve[]: 0 0 0 0 0 [ 827.362739][T29997] Node 0 Normal free:0kB boost:0kB min:8kB low:8kB high:8kB reserved_highatomic:0KB free_highatomic:0KB active_anon:0kB inactive_anon:0kB active_file:0kB inactive_file:0kB unevictable:0kB writepending:0kB zspages:0kB present:1048580kB managed:672kB mlocked:0kB bounce:0kB free_pcp:4kB local_pcp:0kB free_cma:0kB [ 827.362799][T29997] lowmem_reserve[]: 0 0 0 0 0 [ 827.362845][T29997] Node 1 Normal free:3629464kB boost:0kB min:55704kB low:69628kB high:83552kB reserved_highatomic:0KB free_highatomic:0KB active_anon:0kB inactive_anon:0kB active_file:0kB inactive_file:204kB unevictable:1536kB writepending:0kB zspages:0kB present:4194300kB managed:4111100kB mlocked:0kB bounce:0kB free_pcp:67532kB local_pcp:34200kB free_cma:0kB [ 827.476311][T29997] lowmem_reserve[]: 0 0 0 0 0 [ 827.538761][T29997] Node 0 DMA: 0*4kB 0*8kB 0*16kB 0*32kB 0*64kB 0*128kB 0*256kB 0*512kB 1*1024kB (U) 1*2048kB (M) 2*4096kB (M) = 11264kB [ 827.586731][T29997] Node 0 DMA32: 6699*4kB (UE) 6521*8kB (UM) 4357*16kB (UME) 1082*32kB (UME) 597*64kB (UME) 435*128kB (UME) 553*256kB (UME) 372*512kB (UM) 200*1024kB (UM) 63*2048kB (UM) 5*4096kB (U) = 963524kB [ 827.660417][T29997] Node 0 Normal: 0*4kB 0*8kB 0*16kB 0*32kB 0*64kB 0*128kB 0*256kB 0*512kB 0*1024kB 0*2048kB 0*4096kB = 0kB [ 827.664473][T30003] __nla_validate_parse: 3 callbacks suppressed [ 827.664512][T30003] netlink: 4 bytes leftover after parsing attributes in process `syz.1.5840'. [ 827.721805][T29997] Node 1 Normal: 2*4kB (U) 8*8kB (UM) 15*16kB (UM) 9*32kB (UM) 13*64kB (UM) 12*128kB (UM) 8*256kB (UM) 7*512kB (UM) 4*1024kB (UM) 2*2048kB (U) 882*4096kB (UM) = 3629464kB [ 827.757866][T30003] openvswitch: netlink: Key 0 has unexpected len 172 expected 0 [ 827.807897][T30004] netlink: 'syz.1.5840': attribute type 10 has an invalid length. [ 827.840796][T29997] Node 0 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=1048576kB [ 827.858935][ T6112] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 827.894776][T29997] Node 0 hugepages_total=2 hugepages_free=1 hugepages_surp=0 hugepages_size=2048kB [ 827.927383][T29997] Node 1 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=1048576kB [ 827.948346][T29997] Node 1 hugepages_total=2 hugepages_free=2 hugepages_surp=0 hugepages_size=2048kB [ 828.018137][T29997] 48351 total pagecache pages [ 828.025469][T29997] 0 pages in swap cache [ 828.039701][T29997] Free swap = 124996kB [ 828.050171][T29997] Total swap = 124996kB [ 828.059969][T29997] 2097051 pages RAM [ 828.066948][T29997] 0 pages HighMem/MovableOnly [ 828.080500][T29997] 427116 pages reserved [ 828.095393][T29997] 0 pages cma reserved [ 828.437024][T20578] Bluetooth: hci5: command tx timeout [ 828.487854][T30043] netlink: 96 bytes leftover after parsing attributes in process `syz.1.5846'. [ 828.533446][T29770] bridge0: port 1(bridge_slave_0) entered blocking state [ 828.548431][T29770] bridge0: port 1(bridge_slave_0) entered disabled state [ 828.558134][T30044] xt_ecn: cannot match TCP bits for non-tcp packets [ 828.565679][T29770] bridge_slave_0: entered allmulticast mode [ 828.605727][T29770] bridge_slave_0: entered promiscuous mode [ 828.692799][T29770] bridge0: port 2(bridge_slave_1) entered blocking state [ 828.710502][T29770] bridge0: port 2(bridge_slave_1) entered disabled state [ 828.729297][T29770] bridge_slave_1: entered allmulticast mode [ 828.764265][T29770] bridge_slave_1: entered promiscuous mode [ 828.881756][T30053] netlink: 8 bytes leftover after parsing attributes in process `syz.1.5850'. [ 828.928666][T29770] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 828.949200][T30054] netlink: 212348 bytes leftover after parsing attributes in process `syz.0.5849'. [ 829.021483][T29770] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 829.031092][ T7744] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 829.067001][ C1] ip6_tunnel: ip6gretap0 xmit: Local address not yet configured! [ 829.161807][ T5295] 8021q: adding VLAN 0 to HW filter on device eth5 [ 829.172185][T29770] team0: Port device team_slave_0 added [ 829.190581][T29770] team0: Port device team_slave_1 added [ 829.349536][T29770] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 829.386797][T29770] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 829.451076][T29770] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 829.510166][T29770] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 829.531781][T29770] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 829.619479][T29770] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 829.985254][T30071] netlink: 'syz.0.5851': attribute type 1 has an invalid length. [ 830.080691][T30071] netlink: 5 bytes leftover after parsing attributes in process `syz.0.5851'. [ 830.101506][T29770] hsr_slave_0: entered promiscuous mode [ 830.117285][ T1605] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 830.144158][T29770] hsr_slave_1: entered promiscuous mode [ 830.176009][T29770] debugfs: 'hsr0' already exists in 'hsr' [ 830.189857][ T7746] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 830.197991][T29770] Cannot create hsr debugfs directory [ 830.738016][T30103] netlink: 20 bytes leftover after parsing attributes in process `syz.1.5860'. [ 830.991658][ T7747] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 831.000507][ C0] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 831.036068][T30062] lo speed is unknown, defaulting to 1000 [ 831.343077][T30112] bond17: option lacp_active: mode dependency failed, not supported in mode balance-rr(0) [ 831.356815][ T7744] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 831.385881][T30112] bond17 (unregistering): Released all slaves [ 831.626983][ C1] ip6_tunnel: ip6tnl4 xmit: Local address not yet configured! [ 831.662708][T29770] netdevsim netdevsim3 eth8 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 831.830112][T18650] veth1_macvtap: left promiscuous mode [ 831.842673][T18650] veth1_vlan: left promiscuous mode [ 831.848070][T18650] veth0_vlan: left promiscuous mode [ 832.324718][ T5295] 8021q: adding VLAN 0 to HW filter on device eth6 [ 832.450297][T29770] netdevsim netdevsim3 eth7 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 832.500096][ T6112] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 832.896507][T30160] netlink: 64 bytes leftover after parsing attributes in process `syz.4.5874'. [ 832.953857][T30162] netlink: 12 bytes leftover after parsing attributes in process `syz.4.5874'. [ 832.986511][T29770] netdevsim netdevsim3 eth6 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 833.030036][T30165] netlink: 'syz.1.5875': attribute type 2 has an invalid length. [ 833.097376][T30165] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 833.114655][T30165] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 833.145998][T30165] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 833.160909][ T1605] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 833.175957][T30165] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 833.204378][T30165] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 833.230111][T30165] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 833.250119][T30165] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 833.340548][T29770] netdevsim netdevsim3 eth5 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 833.462976][T18650] IPVS: stop unused estimator thread 0... [ 833.496281][T30179] netlink: 8 bytes leftover after parsing attributes in process `syz.1.5877'. [ 833.667279][ T6112] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 833.798093][T30186] netlink: 212368 bytes leftover after parsing attributes in process `syz.4.5879'. [ 834.077127][T30198] RDS: rds_bind could not find a transport for fec0:ffff::1, load rds_tcp or rds_rdma? [ 834.484828][T29770] netdevsim netdevsim3 netdevsim0: renamed from eth0 [ 834.544557][T29770] 8021q: adding VLAN 0 to HW filter on device netdevsim0 [ 834.671181][T29770] netdevsim netdevsim3 netdevsim1: renamed from eth1 [ 834.725829][T29770] 8021q: adding VLAN 0 to HW filter on device netdevsim1 [ 834.752892][T29770] netdevsim netdevsim3 netdevsim2: renamed from eth2 [ 834.794397][T29770] 8021q: adding VLAN 0 to HW filter on device netdevsim2 [ 834.823639][T29770] netdevsim netdevsim3 netdevsim3: renamed from eth3 [ 834.869253][T29770] 8021q: adding VLAN 0 to HW filter on device netdevsim3 [ 834.956273][T30215] netlink: 4 bytes leftover after parsing attributes in process `syz.1.5885'. [ 834.993831][T30215] netlink: 'syz.1.5885': attribute type 1 has an invalid length. [ 835.049735][T30215] netlink: 'syz.1.5885': attribute type 2 has an invalid length. [ 835.190695][T29770] 8021q: adding VLAN 0 to HW filter on device bond0 [ 835.265842][T29770] 8021q: adding VLAN 0 to HW filter on device team0 [ 835.313422][ T7747] bridge0: port 1(bridge_slave_0) entered blocking state [ 835.320695][ T7747] bridge0: port 1(bridge_slave_0) entered forwarding state [ 835.366124][T30200] lo speed is unknown, defaulting to 1000 [ 835.379899][ T7747] bridge0: port 2(bridge_slave_1) entered blocking state [ 835.387121][ T7747] bridge0: port 2(bridge_slave_1) entered forwarding state [ 835.458775][T30238] netlink: 28 bytes leftover after parsing attributes in process `syz.1.5887'. [ 835.914508][ T30] audit: type=1800 audit(1780430446.200:27): pid=30259 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.1.5890" name=3A202E31323334352E2E2E2E2028313829207238203D2030783363333130303030300A202020202020323A202E31323334352E2E382E20283835292063616C6C2070632B360A202020202020333A202E2E2E2E2E2E2E2E382E2028313829207230203D203078313130303030303066666666666666660A202020202020353A202E2E2E2E2E2E2E2E382E202836362920696620773820733E2030783020676F746F2070632B300A202020202020363A202E2E2E2E2E2E2E2E2E2E20283138292072 dev="tmpfs" ino=3021 res=0 errno=0 [ 836.102407][T30246] bridge0: port 1(erspan0) entered blocking state [ 836.109111][T30246] bridge0: port 1(erspan0) entered forwarding state [ 837.012757][T30287] netlink: 20 bytes leftover after parsing attributes in process `syz.5.5897'. [ 837.059458][T30292] netlink: 'syz.1.5898': attribute type 1 has an invalid length. [ 837.243728][T30305] netlink: 20 bytes leftover after parsing attributes in process `syz.0.5899'. [ 837.355856][T30292] 8021q: adding VLAN 0 to HW filter on device bond13 [ 837.459863][T30296] vlan5: entered allmulticast mode [ 837.465080][T30296] bond13: entered allmulticast mode [ 837.872688][T30326] netlink: 'syz.0.5902': attribute type 1 has an invalid length. [ 837.986080][T30326] bond9: entered promiscuous mode [ 837.991412][T30326] bond9: entered allmulticast mode [ 837.997747][T30326] 8021q: adding VLAN 0 to HW filter on device bond9 [ 838.009310][T30336] netlink: 'syz.4.5904': attribute type 178 has an invalid length. [ 838.103067][T30328] macvlan0: entered promiscuous mode [ 838.132123][T30328] macvlan0: entered allmulticast mode [ 838.166500][T30328] 8021q: adding VLAN 0 to HW filter on device macvlan0 [ 838.186321][T30344] net_ratelimit: 6 callbacks suppressed [ 838.186341][T30344] openvswitch: netlink: Flow key attr not present in new flow. [ 838.202328][ T7746] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 838.501195][T25806] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 838.542881][T29770] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 838.600582][T30357] x_tables: ip_tables: ah match: only valid for protocol 51 [ 838.621644][T30357] x_tables: ip_tables: ah match: only valid for protocol 51 [ 838.751857][T29770] veth0_vlan: entered promiscuous mode [ 838.801442][T29770] veth1_vlan: entered promiscuous mode [ 838.997231][T29770] veth0_macvtap: entered promiscuous mode [ 839.070714][T29770] veth1_macvtap: entered promiscuous mode [ 839.202954][T30379] netlink: 'syz.0.5912': attribute type 10 has an invalid length. [ 839.223757][T29770] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 839.237592][ T1605] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 839.260027][T30379] netlink: 228 bytes leftover after parsing attributes in process `syz.0.5912'. [ 839.302080][T29770] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 839.347039][ T36] netdevsim netdevsim3 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 839.358623][ T7746] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 839.383769][ T36] netdevsim netdevsim3 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 839.605011][ T36] netdevsim netdevsim3 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 839.618898][T30395] netlink: 'syz.1.5913': attribute type 1 has an invalid length. [ 839.686303][ T36] netdevsim netdevsim3 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 839.901243][T30407] netlink: 'syz.5.5917': attribute type 10 has an invalid length. [ 840.010850][T30395] 8021q: adding VLAN 0 to HW filter on device bond14 [ 840.131383][T30421] netlink: 'syz.0.5918': attribute type 10 has an invalid length. [ 840.218668][T30397] bond14: (slave veth13): Enslaving as an active interface with a down link [ 840.291931][T30407] team0 (unregistering): Port device team_slave_0 removed [ 840.326019][T30407] team0 (unregistering): Port device team_slave_1 removed [ 840.371058][T30421] netlink: 'syz.0.5918': attribute type 10 has an invalid length. [ 840.403740][T30421] netlink: 'syz.0.5918': attribute type 10 has an invalid length. [ 840.439703][T30421] netlink: 'syz.0.5918': attribute type 10 has an invalid length. [ 840.477482][ T7746] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 840.521184][T30421] netlink: 'syz.0.5918': attribute type 10 has an invalid length. [ 840.571818][T30421] netlink: 'syz.0.5918': attribute type 10 has an invalid length. [ 840.586274][ T8537] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 840.594625][ C0] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 840.603961][T30421] netlink: 'syz.0.5918': attribute type 10 has an invalid length. [ 840.642865][ T8537] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 840.653574][T30421] netlink: 'syz.0.5918': attribute type 10 has an invalid length. [ 840.691346][T30421] netlink: 'syz.0.5918': attribute type 10 has an invalid length. [ 840.700360][T30431] netlink: 4 bytes leftover after parsing attributes in process `syz.4.5919'. [ 840.712574][T30421] netlink: 'syz.0.5918': attribute type 10 has an invalid length. [ 840.726131][ T8537] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 840.749931][ T8537] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 841.358163][T30449] bridge0: port 1(erspan0) entered disabled state [ 841.596390][T30454] lo: left allmulticast mode [ 841.660565][ T7748] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 841.734540][T30454] bridge0: port 1(erspan0) entered blocking state [ 841.741227][T30454] bridge0: port 1(erspan0) entered forwarding state [ 841.755084][T30454] 8021q: adding VLAN 0 to HW filter on device team0 [ 841.779183][T30454] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 841.789343][ T8537] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 841.798188][ C0] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 841.827766][T30454] wg1: left promiscuous mode [ 841.839261][T30454] wg1: left allmulticast mode [ 841.943513][T30454] veth1_macvtap: left promiscuous mode [ 841.950769][T30454] veth0_macvtap: left promiscuous mode [ 841.958103][T30454] veth0_macvtap: entered promiscuous mode [ 841.973696][T30454] veth1_macvtap: entered promiscuous mode [ 841.979804][T30454] veth1_macvtap: entered allmulticast mode [ 841.985785][T30454] macsec0: left allmulticast mode [ 841.991923][T30454] veth1_macvtap: left allmulticast mode [ 842.006026][T30454] mac80211_hwsim hwsim61 wlan0: left promiscuous mode [ 842.014231][T30454] mac80211_hwsim hwsim61 wlan0: left allmulticast mode [ 842.024687][T30454] 8021q: adding VLAN 0 to HW filter on device bond1 [ 842.041827][ T1605] lo speed is unknown, defaulting to 1000 [ 842.071740][ T7746] bridge0: port 2(team0) entered blocking state [ 842.078172][ T7746] bridge0: port 2(team0) entered forwarding state [ 842.096713][T15033] lo speed is unknown, defaulting to 1000 [ 842.097596][T18650] netdevsim netdevsim0 eth0: set [1, 0] type 2 family 0 port 6081 - 0 [ 842.135546][T18650] netdevsim netdevsim0 eth1: set [1, 0] type 2 family 0 port 6081 - 0 [ 842.161113][T18650] netdevsim netdevsim0 eth2: set [1, 0] type 2 family 0 port 6081 - 0 [ 842.186354][T18650] netdevsim netdevsim0 eth3: set [1, 0] type 2 family 0 port 6081 - 0 [ 842.498012][T30489] bond10 (unregistering): Released all slaves [ 842.522163][T30487] netlink: 20 bytes leftover after parsing attributes in process `syz.3.5929'. [ 843.367003][T30536] netlink: 8 bytes leftover after parsing attributes in process `syz.0.5940'. [ 843.398590][T30537] netlink: 'syz.5.5942': attribute type 11 has an invalid length. [ 843.422190][T30537] netlink: 199788 bytes leftover after parsing attributes in process `syz.5.5942'. [ 843.508326][T30533] tipc: Enabled bearer , priority 0 [ 843.535187][T30533] syzkaller0: entered promiscuous mode [ 843.575144][T30533] syzkaller0: entered allmulticast mode [ 843.684600][T30549] netlink: 4 bytes leftover after parsing attributes in process `syz.4.5944'. [ 843.734461][T30549] netlink: 28 bytes leftover after parsing attributes in process `syz.4.5944'. [ 843.758651][T30550] tipc: Resetting bearer [ 843.917499][ T7744] net_ratelimit: 3 callbacks suppressed [ 843.917521][ T7744] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 844.159722][T30530] tipc: Resetting bearer [ 844.215567][T30530] tipc: Disabling bearer [ 845.067540][ T7746] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 845.308926][ T1605] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 846.197166][ T7743] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 847.326873][ T7746] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 847.337079][ T5000] udevd[5000]: worker [7141] /devices/virtual/block/nbd0 timeout; kill it [ 847.345714][ T5000] udevd[5000]: seq 19455 '/devices/virtual/block/nbd0' killed [ 847.628270][ T7746] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 847.637010][ C1] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 848.347076][ T5773] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 848.436943][ T8537] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 849.567122][ T7746] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 850.677167][ T8537] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 851.388215][ T5773] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 851.777078][ T7748] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 852.897096][ T7744] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 853.388636][ T7748] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 853.398182][ C0] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 854.037702][ T7748] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 854.428115][ T5773] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 855.177108][ T7748] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 856.297114][ T7746] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 856.747329][ T5649] Bluetooth: hci1: command 0x0405 tx timeout [ 857.440827][ T7744] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 857.472585][ T5773] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 858.546914][T18650] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 859.147270][ T8537] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 859.155914][ C0] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 859.677000][ T7746] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 860.507578][T15037] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 860.787153][ T7748] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 861.886874][ T7748] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 862.987799][T18650] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 863.557075][T15037] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 864.116909][T18650] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 865.236917][ T7744] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 866.337421][T18650] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 866.597003][ T5773] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 867.468539][ T8537] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 868.597584][ T8537] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 869.628153][ T5773] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 869.716900][ T7746] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 870.029077][ T1318] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 870.041721][ T1318] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 870.837384][ T7743] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 871.947922][ T7746] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 872.667074][ T1605] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 873.057628][ T7746] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 873.228699][ T7743] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 873.237714][ C0] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 874.167551][T18650] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 874.506977][ C0] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 875.277202][ T7746] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 875.707285][ T1605] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 876.397085][ T7743] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 877.527103][T18650] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 878.347494][ T7746] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 878.356181][ C1] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 878.626852][ T7748] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 878.746945][T15037] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 879.726782][ T7748] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 880.837103][ T8537] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 881.623760][T30655] netlink: 36 bytes leftover after parsing attributes in process `syz.1.5951'. [ 881.789645][T15037] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 881.948265][ T7746] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 882.055685][T30680] validate_nla: 28 callbacks suppressed [ 882.055706][T30680] netlink: 'syz.3.5956': attribute type 1 has an invalid length. [ 882.085314][T30680] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 882.188876][T30680] netlink: 12 bytes leftover after parsing attributes in process `syz.3.5956'. [ 882.561074][T30704] batman_adv: batadv0: Adding interface: ipvlan2 [ 882.575535][T30704] batman_adv: batadv0: The MTU of interface ipvlan2 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 882.604109][T30704] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 882.633028][T30704] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 882.665799][T30704] batman_adv: batadv0: Not using interface ipvlan2 (retrying later): interface not active [ 882.679930][T30707] netlink: 16 bytes leftover after parsing attributes in process `syz.4.5962'. [ 882.745673][ C0] vcan0: j1939_tp_rxtimer: 0xffff888079379c00: rx timeout, send abort [ 883.089415][ T7748] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 883.224887][T30696] lo speed is unknown, defaulting to 1000 [ 883.245815][ C0] vcan0: j1939_tp_rxtimer: 0xffff88807c7d1400: rx timeout, send abort [ 883.255324][ C0] vcan0: j1939_tp_rxtimer: 0xffff888079379c00: abort rx timeout. Force session deactivation [ 883.754115][ C0] vcan0: j1939_tp_rxtimer: 0xffff88807c7d1400: abort rx timeout. Force session deactivation [ 883.954548][ T5649] Bluetooth: hci0: unexpected cc 0x0c03 length: 249 > 1 [ 883.971358][ T5649] Bluetooth: hci0: unexpected cc 0x1003 length: 249 > 9 [ 883.979781][ T5649] Bluetooth: hci0: unexpected cc 0x1001 length: 249 > 9 [ 883.990610][ T5649] Bluetooth: hci0: unexpected cc 0x0c23 length: 249 > 4 [ 883.998520][ T5649] Bluetooth: hci0: unexpected cc 0x0c38 length: 249 > 2 [ 884.108248][ T7748] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 884.117086][ C0] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 884.249009][T30700] lo speed is unknown, defaulting to 1000 [ 884.258168][ T7743] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 884.827518][T15037] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 885.029831][T30754] netlink: 24 bytes leftover after parsing attributes in process `syz.0.5968'. [ 885.046696][T30766] netlink: 'syz.4.5969': attribute type 1 has an invalid length. [ 885.407968][T18650] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 885.444223][T30772] netlink: 9 bytes leftover after parsing attributes in process `syz.0.5972'. [ 885.482547][T30772] netlink: 9 bytes leftover after parsing attributes in process `syz.0.5972'. [ 886.052814][T30789] bond8: option arp_interval: invalid value (18446744073709551615) [ 886.070371][T30789] bond8: option arp_interval: allowed values 0 - 2147483647 [ 886.091673][T30789] bond8 (unregistering): Released all slaves [ 886.106746][T20578] Bluetooth: hci0: command tx timeout [ 886.557445][ T7748] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 886.785694][T30758] lo speed is unknown, defaulting to 1000 [ 887.113392][T30828] Bluetooth: MGMT ver 1.23 [ 887.261730][T30833] netlink: 60 bytes leftover after parsing attributes in process `syz.0.5985'. [ 887.325750][T30833] netlink: 60 bytes leftover after parsing attributes in process `syz.0.5985'. [ 887.689405][ T7743] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 887.715911][T30737] lo speed is unknown, defaulting to 1000 [ 887.869153][T15037] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 888.152233][T30862] netlink: 'syz.0.5989': attribute type 10 has an invalid length. [ 888.165452][T30860] netlink: 12 bytes leftover after parsing attributes in process `syz.3.5988'. [ 888.198118][T20578] Bluetooth: hci0: command tx timeout [ 888.244011][T30865] netlink: 'syz.0.5989': attribute type 10 has an invalid length. [ 888.274259][T30862] dummy0: entered promiscuous mode [ 888.293171][T30862] dummy0: entered allmulticast mode [ 888.300079][T30862] team0: Failed to send options change via netlink (err -105) [ 888.307740][T30862] team0: Port device dummy0 added [ 888.403635][T30865] team0: Failed to send port change of device dummy0 via netlink (err -105) [ 888.434496][T30865] dummy0: left promiscuous mode [ 888.446082][T30865] dummy0: left allmulticast mode [ 888.465052][T30865] team0: Failed to send options change via netlink (err -105) [ 888.484009][T30865] team0: Failed to send port change of device dummy0 via netlink (err -105) [ 888.507461][T30865] team0: Port device dummy0 removed [ 888.848051][ T6112] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 888.933788][T30886] netlink: 14 bytes leftover after parsing attributes in process `syz.3.5994'. [ 889.002820][T30886] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 889.014262][T30887] netlink: 4 bytes leftover after parsing attributes in process `syz.3.5994'. [ 889.052166][T30887] netlink: 44 bytes leftover after parsing attributes in process `syz.3.5994'. [ 889.080264][T30886] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 889.098836][T30886] bond0 (unregistering): Released all slaves [ 889.425722][T30895] netlink: 200 bytes leftover after parsing attributes in process `syz.5.5996'. [ 889.527180][T30894] netlink: 20 bytes leftover after parsing attributes in process `syz.5.5996'. [ 889.643798][T30737] bridge0: port 1(bridge_slave_0) entered blocking state [ 889.664180][T30737] bridge0: port 1(bridge_slave_0) entered disabled state [ 889.678800][T30737] bridge_slave_0: entered allmulticast mode [ 889.699068][T30737] bridge_slave_0: entered promiscuous mode [ 889.732881][T30737] bridge0: port 2(bridge_slave_1) entered blocking state [ 889.746960][T30737] bridge0: port 2(bridge_slave_1) entered disabled state [ 889.764562][T30737] bridge_slave_1: entered allmulticast mode [ 889.780224][T30737] bridge_slave_1: entered promiscuous mode [ 889.867826][ T36] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 889.876635][ C0] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 889.964014][T30737] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 889.984543][ T8537] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 890.010956][T30737] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 890.133372][T30888] lo speed is unknown, defaulting to 1000 [ 890.144310][T30737] team0: Port device team_slave_0 added [ 890.266973][T20578] Bluetooth: hci0: command tx timeout [ 890.319524][T30929] netlink: 20 bytes leftover after parsing attributes in process `syz.3.6001'. [ 890.326390][T30927] netlink: 'syz.5.6003': attribute type 2 has an invalid length. [ 890.343661][T30737] team0: Port device team_slave_1 added [ 890.399967][T30925] netlink: 200 bytes leftover after parsing attributes in process `syz.3.6001'. [ 890.584295][T30737] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 890.595123][T30737] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 890.623296][T30737] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 890.703628][T30737] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 890.719800][T30737] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 890.770404][T30737] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 890.917417][T15037] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 890.960823][T30737] hsr_slave_0: entered promiscuous mode [ 890.979837][T30737] hsr_slave_1: entered promiscuous mode [ 890.999539][T30737] debugfs: 'hsr0' already exists in 'hsr' [ 891.018113][T30737] Cannot create hsr debugfs directory [ 891.118468][ T8537] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 891.708676][T30737] netdevsim netdevsim1 eth3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 891.840144][T30737] netdevsim netdevsim1 eth2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 892.042965][T30737] netdevsim netdevsim1 eth1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 892.173860][T30737] netdevsim netdevsim1 eth0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 892.247473][ T7744] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 892.346826][T20578] Bluetooth: hci0: command tx timeout [ 892.715390][T30951] netlink: 25 bytes leftover after parsing attributes in process `syz.0.6007'. [ 892.935353][T30737] netdevsim netdevsim1 netdevsim0: renamed from eth0 [ 892.970203][T30737] 8021q: adding VLAN 0 to HW filter on device netdevsim0 [ 892.985639][T30737] netdevsim netdevsim1 netdevsim1: renamed from eth1 [ 893.011977][T30737] 8021q: adding VLAN 0 to HW filter on device netdevsim1 [ 893.099350][T30975] bond0: entered allmulticast mode [ 893.116972][T30737] netdevsim netdevsim1 netdevsim2: renamed from eth2 [ 893.132301][T30737] 8021q: adding VLAN 0 to HW filter on device netdevsim2 [ 893.149164][T30737] netdevsim netdevsim1 netdevsim3: renamed from eth3 [ 893.177286][T30737] 8021q: adding VLAN 0 to HW filter on device netdevsim3 [ 893.190804][T30984] x_tables: duplicate underflow at hook 2 [ 893.203311][T30976] macvlan2: entered promiscuous mode [ 893.210954][T30976] macvlan2: entered allmulticast mode [ 893.218233][T30976] bond0: entered promiscuous mode [ 893.224051][T30976] 8021q: adding VLAN 0 to HW filter on device macvlan2 [ 893.236057][T30976] bond0: left promiscuous mode [ 893.260516][T30949] lo speed is unknown, defaulting to 1000 [ 893.367753][ T6112] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 893.570385][T30996] netlink: 'syz.3.6016': attribute type 8 has an invalid length. [ 893.586601][T30996] sch_fq: defrate 0 ignored. [ 893.755569][T30737] 8021q: adding VLAN 0 to HW filter on device bond0 [ 893.805896][T30737] 8021q: adding VLAN 0 to HW filter on device team0 [ 893.832645][ T6112] bridge0: port 1(bridge_slave_0) entered blocking state [ 893.839893][ T6112] bridge0: port 1(bridge_slave_0) entered forwarding state [ 893.909920][ T8537] bridge0: port 2(bridge_slave_1) entered blocking state [ 893.917180][ T8537] bridge0: port 2(bridge_slave_1) entered forwarding state [ 893.952197][T15037] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 893.982680][ T8537] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 893.991775][T10146] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 894.011413][T15037] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 894.452256][T31010] netlink: 'syz.3.6018': attribute type 11 has an invalid length. [ 894.509705][ T8537] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 895.344252][T31040] netlink: 200 bytes leftover after parsing attributes in process `syz.0.6022'. [ 895.365829][T31050] xt_hashlimit: size too large, truncated to 1048576 [ 895.406371][T31044] netlink: 20 bytes leftover after parsing attributes in process `syz.0.6022'. [ 895.445546][T30737] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 895.629213][ C1] ip6_tunnel: ip6tnl4 xmit: Local address not yet configured! [ 895.643877][ T7743] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 895.652800][ C0] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 895.665873][ T7747] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 895.867212][T31037] nci: __nci_request: wait_for_completion_interruptible_timeout failed -512 [ 895.921586][T30737] veth0_vlan: entered promiscuous mode [ 895.965702][T30737] veth1_vlan: entered promiscuous mode [ 896.116459][T30737] veth0_macvtap: entered promiscuous mode [ 896.194874][T31075] netlink: 67 bytes leftover after parsing attributes in process `syz.3.6029'. [ 896.265371][T31070] batman_adv: batadv0: Interface activated: ipvlan2 [ 896.275753][T31070] 8021q: adding VLAN 0 to HW filter on device bond0 [ 896.392048][T30737] veth1_macvtap: entered promiscuous mode [ 896.479629][T30737] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 896.500003][T30737] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 896.530029][ T6102] netdevsim netdevsim1 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 896.543501][ T7747] netdevsim netdevsim1 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 896.590588][ T7747] netdevsim netdevsim1 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 896.622148][ T7747] netdevsim netdevsim1 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 896.818511][ T7746] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 897.071483][ T10] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 897.569297][T31141] netlink: 'syz.5.6036': attribute type 1 has an invalid length. [ 897.620285][T31141] 8021q: adding VLAN 0 to HW filter on device bond8 [ 897.639886][T31145] bond8: (slave geneve3): making interface the new active one [ 897.649269][T31145] bond8: (slave geneve3): Enslaving as an active interface with an up link [ 897.720374][T31147] bond17: (slave lo): enslaved VLAN challenged slave. Adding VLANs will be blocked as long as it is part of bond. [ 897.738101][T31147] bond17: (slave lo): Enslaving as an active interface with an up link [ 897.802139][T31151] netlink: 132 bytes leftover after parsing attributes in process `syz.4.6039'. [ 898.320286][T31164] x_tables: duplicate underflow at hook 1 [ 899.051472][T31184] netlink: 8 bytes leftover after parsing attributes in process `syz.4.6046'. [ 899.083962][ T6102] net_ratelimit: 5 callbacks suppressed [ 899.083981][ T6102] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 899.166012][T31188] veth0_vlan: entered allmulticast mode [ 899.284665][T31189] netlink: 8 bytes leftover after parsing attributes in process `syz.4.6047'. [ 899.345040][T31082] nci: __nci_request: wait_for_completion_interruptible_timeout failed -512 [ 899.425195][T31191] netlink: 'syz.3.6048': attribute type 18 has an invalid length. [ 899.461073][T18649] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 899.501064][T18649] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 899.608027][T18649] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 899.617768][T18649] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 899.659373][T31195] netlink: 4 bytes leftover after parsing attributes in process `syz.3.6050'. [ 899.672339][T31195] netlink: 12 bytes leftover after parsing attributes in process `syz.3.6050'. [ 899.752862][T31199] netlink: 'syz.3.6050': attribute type 1 has an invalid length. [ 899.919397][T31209] netlink: 36 bytes leftover after parsing attributes in process `syz.1.5965'. [ 900.119013][ T5773] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 900.218343][ T7747] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 900.452560][ T5649] Bluetooth: hci2: unexpected cc 0x0c03 length: 249 > 1 [ 900.483815][ T5649] Bluetooth: hci2: unexpected cc 0x1003 length: 249 > 9 [ 900.493731][ T5649] Bluetooth: hci2: unexpected cc 0x1001 length: 249 > 9 [ 900.509834][ T5649] Bluetooth: hci2: unexpected cc 0x0c23 length: 249 > 4 [ 900.521263][ T5649] Bluetooth: hci2: unexpected cc 0x0c38 length: 249 > 2 [ 900.934796][T31238] sctp: [Deprecated]: syz.3.6058 (pid 31238) Use of int in maxseg socket option. [ 900.934796][T31238] Use struct sctp_assoc_value instead [ 901.327391][ T36] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 901.388015][ T36] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 901.396790][ C1] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 901.727121][T31253] bridge0: port 2(bridge_slave_1) entered disabled state [ 901.734894][T31253] bridge0: port 1(bridge_slave_0) entered disabled state [ 902.097559][T31253] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 902.141130][T31253] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 902.320189][T25806] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 902.477636][ T7748] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 902.526935][T31253] batman_adv: batadv0: Interface deactivated: ipvlan2 [ 902.540518][T31253] bond0: left allmulticast mode [ 902.571698][T31202] lo speed is unknown, defaulting to 1000 [ 902.575353][ T36] netdevsim netdevsim3 netdevsim0: unset [1, 0] type 2 family 0 port 6081 - 0 [ 902.618327][ T36] netdevsim netdevsim3 netdevsim1: unset [1, 0] type 2 family 0 port 6081 - 0 [ 902.677791][ T5649] Bluetooth: hci2: command tx timeout [ 902.751229][ T36] netdevsim netdevsim3 netdevsim2: unset [1, 0] type 2 family 0 port 6081 - 0 [ 902.814696][ T7743] netdevsim netdevsim3 netdevsim3: unset [1, 0] type 2 family 0 port 6081 - 0 [ 902.843070][T31276] netlink: 4 bytes leftover after parsing attributes in process `syz.0.6065'. [ 902.895351][T31284] netlink: 12 bytes leftover after parsing attributes in process `syz.0.6065'. [ 903.028146][T31284] netlink: 'syz.0.6065': attribute type 1 has an invalid length. [ 903.041399][T31290] netlink: 'syz.1.6069': attribute type 1 has an invalid length. [ 903.132996][T31291] netlink: 'syz.1.6069': attribute type 10 has an invalid length. [ 903.154509][T31266] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 903.239411][T31291] netlink: 40 bytes leftover after parsing attributes in process `syz.1.6069'. [ 903.271695][T31291] dummy0: entered promiscuous mode [ 903.425907][T31297] netlink: 660 bytes leftover after parsing attributes in process `syz.1.6070'. [ 903.449737][T31297] netlink: 76 bytes leftover after parsing attributes in process `syz.1.6070'. [ 903.499472][T31226] lo speed is unknown, defaulting to 1000 [ 903.537222][T31298] siw: device registration error -23 [ 903.607518][ T6102] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 903.858976][T31304] tipc: Enabled bearer , priority 0 [ 903.919888][T31304] syzkaller0: entered promiscuous mode [ 903.937801][T31304] syzkaller0: entered allmulticast mode [ 904.115710][T31303] syzkaller1: entered promiscuous mode [ 904.127161][T31303] syzkaller1: entered allmulticast mode [ 904.170410][T31312] macvlan0: entered promiscuous mode [ 904.179589][T31313] tipc: Resetting bearer [ 904.235275][T31310] macvlan0: left promiscuous mode [ 904.275203][T31302] tipc: Resetting bearer [ 904.365905][T31302] tipc: Disabling bearer [ 904.480376][T31316] netlink: 12 bytes leftover after parsing attributes in process `syz.3.6075'. [ 904.715658][T31329] netlink: 12 bytes leftover after parsing attributes in process `syz.0.6078'. [ 904.746847][ T5649] Bluetooth: hci2: command tx timeout [ 904.759017][ T7743] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 904.913792][T31333] netlink: 'syz.5.6079': attribute type 11 has an invalid length. [ 905.290188][T31226] bridge0: port 1(bridge_slave_0) entered blocking state [ 905.318953][T31226] bridge0: port 1(bridge_slave_0) entered disabled state [ 905.335503][T31226] bridge_slave_0: entered allmulticast mode [ 905.360425][T31226] bridge_slave_0: entered promiscuous mode [ 905.379533][T31226] bridge0: port 2(bridge_slave_1) entered blocking state [ 905.402294][T31226] bridge0: port 2(bridge_slave_1) entered disabled state [ 905.418630][T31226] bridge_slave_1: entered allmulticast mode [ 905.436955][T31226] bridge_slave_1: entered promiscuous mode [ 905.529230][T31226] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 905.572122][T31226] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 905.716478][T31226] team0: Port device team_slave_0 added [ 905.743538][T31226] team0: Port device team_slave_1 added [ 905.890448][ T7748] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 906.154509][T31373] netlink: 20 bytes leftover after parsing attributes in process `syz.0.6083'. [ 906.189614][T31266] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 906.263847][T31226] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 906.295198][T31226] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 906.358004][T31226] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 906.410758][T31381] netlink: 'syz.5.6087': attribute type 4 has an invalid length. [ 906.444015][T31372] netlink: 200 bytes leftover after parsing attributes in process `syz.0.6083'. [ 906.488221][T31226] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 906.496108][T31226] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 906.544200][T31226] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 906.566985][T31379] netlink: 8 bytes leftover after parsing attributes in process `syz.3.6086'. [ 906.685737][T31387] IPVS: set_ctl: invalid protocol: 0 172.20.20.170:20004 [ 906.826971][ T5649] Bluetooth: hci2: command tx timeout [ 906.919146][T31226] hsr_slave_0: entered promiscuous mode [ 906.926181][T31226] hsr_slave_1: entered promiscuous mode [ 906.933848][T31226] debugfs: 'hsr0' already exists in 'hsr' [ 906.941027][T31226] Cannot create hsr debugfs directory [ 907.100061][ T36] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 907.149579][ T36] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 907.158867][ C1] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 907.727473][T31424] netlink: 'syz.0.6098': attribute type 1 has an invalid length. [ 907.775654][T31226] netdevsim netdevsim4 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 907.871823][T31426] __nla_validate_parse: 8 callbacks suppressed [ 907.871842][T31426] netlink: 8 bytes leftover after parsing attributes in process `syz.1.6099'. [ 907.881119][T31423] netlink: 4 bytes leftover after parsing attributes in process `syz.3.6097'. [ 907.897708][T31426] netlink: 12 bytes leftover after parsing attributes in process `syz.1.6099'. [ 908.120556][T31432] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 908.129211][ C1] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 908.258735][T18649] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 908.313573][T31446] netlink: 8 bytes leftover after parsing attributes in process `syz.1.6101'. [ 908.329875][T31226] netdevsim netdevsim4 netdevsim2 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 908.341274][T31226] netdevsim netdevsim4 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 908.471256][T31226] netdevsim netdevsim4 netdevsim1 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 908.500591][T31226] netdevsim netdevsim4 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 908.817872][T31226] netdevsim netdevsim4 €Â (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 908.850589][T31226] netdevsim netdevsim4 €Â (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 908.906867][ T5649] Bluetooth: hci2: command tx timeout [ 909.171603][T31435] lo speed is unknown, defaulting to 1000 [ 909.228472][T31266] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 909.288088][T31226] netdevsim netdevsim4 netdevsim0: renamed from eth0 [ 909.300328][T31226] 8021q: adding VLAN 0 to HW filter on device netdevsim0 [ 909.364130][T31226] netdevsim netdevsim4 netdevsim1: renamed from eth1 [ 909.381918][T31226] 8021q: adding VLAN 0 to HW filter on device netdevsim1 [ 909.396938][T31226] netdevsim netdevsim4 netdevsim2: renamed from eth2 [ 909.403868][T31473] netlink: 28 bytes leftover after parsing attributes in process `syz.3.6109'. [ 909.421409][T31226] 8021q: adding VLAN 0 to HW filter on device netdevsim2 [ 909.442085][T31226] netdevsim netdevsim4 netdevsim3: renamed from eth3 [ 909.454683][T31226] 8021q: adding VLAN 0 to HW filter on device netdevsim3 [ 909.464951][T31473] netlink: 16 bytes leftover after parsing attributes in process `syz.3.6109'. [ 909.605628][T31226] 8021q: adding VLAN 0 to HW filter on device bond0 [ 909.651192][T31226] 8021q: adding VLAN 0 to HW filter on device team0 [ 909.669416][ T36] bridge0: port 1(bridge_slave_0) entered blocking state [ 909.676758][ T36] bridge0: port 1(bridge_slave_0) entered forwarding state [ 909.701922][ T36] bridge0: port 2(bridge_slave_1) entered blocking state [ 909.709183][ T36] bridge0: port 2(bridge_slave_1) entered forwarding state [ 910.478997][T31507] netlink: 12 bytes leftover after parsing attributes in process `syz.0.6114'. [ 910.497396][ T7746] net_ratelimit: 2 callbacks suppressed [ 910.497416][ T7746] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 910.728572][T31267] IPVS: starting estimator thread 0... [ 910.748086][T31515] netlink: 'syz.1.6116': attribute type 29 has an invalid length. [ 910.771571][T31515] netlink: 8 bytes leftover after parsing attributes in process `syz.1.6116'. [ 910.791862][T31515] netlink: 'syz.1.6116': attribute type 29 has an invalid length. [ 910.808243][T31515] netlink: 8 bytes leftover after parsing attributes in process `syz.1.6116'. [ 910.827036][T31518] IPVS: using max 29 ests per chain, 69600 per kthread [ 910.835727][T31515] netlink: 'syz.1.6116': attribute type 29 has an invalid length. [ 910.856278][T31515] netlink: 8 bytes leftover after parsing attributes in process `syz.1.6116'. [ 910.889565][T31517] hsr0: entered promiscuous mode [ 910.923825][T31515] netlink: 'syz.1.6116': attribute type 29 has an invalid length. [ 910.975532][T31515] netlink: 'syz.1.6116': attribute type 29 has an invalid length. [ 911.053174][T31515] netlink: 'syz.1.6116': attribute type 29 has an invalid length. [ 911.079180][T31226] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 911.094385][T31515] netlink: 'syz.1.6116': attribute type 29 has an invalid length. [ 911.112455][T31515] netlink: 'syz.1.6116': attribute type 29 has an invalid length. [ 911.387116][ T5649] Bluetooth: hci2: command tx timeout [ 911.424870][T31542] openvswitch: netlink: ufid size 20 bytes exceeds the range (1, 16) [ 911.433781][T31542] openvswitch: netlink: Either Ethernet header or EtherType is required. [ 911.600768][T31545] validate_nla: 11 callbacks suppressed [ 911.600791][T31545] netlink: 'syz.1.6120': attribute type 6 has an invalid length. [ 911.660500][T31545] erspan0: entered promiscuous mode [ 911.676931][ T36] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 912.041835][T31560] netlink: 'syz.5.6125': attribute type 5 has an invalid length. [ 912.055918][T31561] netlink: 'syz.3.6124': attribute type 10 has an invalid length. [ 912.122655][T31561] team0: Port device dummy0 added [ 912.140239][T31565] netlink: 'syz.3.6124': attribute type 10 has an invalid length. [ 912.159732][T31226] veth0_vlan: entered promiscuous mode [ 912.208101][T31565] team0: Port device dummy0 removed [ 912.233896][T31566] syzkaller0: entered promiscuous mode [ 912.244441][T31566] syzkaller0: entered allmulticast mode [ 912.261803][T31566] sch_tbf: burst 255 is lower than device syzkaller0 mtu (1514) ! [ 912.277903][T31266] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 912.305561][T31568] syzkaller0: entered promiscuous mode [ 912.314217][T31568] syzkaller0: entered allmulticast mode [ 912.322599][T31226] veth1_vlan: entered promiscuous mode [ 912.450019][T31573] : entered promiscuous mode [ 912.525781][T31226] veth0_macvtap: entered promiscuous mode [ 912.557216][T31226] veth1_macvtap: entered promiscuous mode [ 912.618571][T31226] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 912.666006][T31226] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 912.719789][ T6474] netdevsim netdevsim4 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 912.751441][ T6474] netdevsim netdevsim4 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 912.787436][ T6474] netdevsim netdevsim4 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 912.799130][ T8537] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 912.821572][ T6474] netdevsim netdevsim4 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 912.913197][ T36] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 912.922065][ C0] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 913.174429][T31604] __nla_validate_parse: 19 callbacks suppressed [ 913.174448][T31604] netlink: 8 bytes leftover after parsing attributes in process `syz.0.6137'. [ 913.199685][ T7744] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 913.233084][ T7744] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 913.357991][T18649] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 913.382325][T31608] netlink: 52 bytes leftover after parsing attributes in process `syz.5.6138'. [ 913.399180][T18649] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 913.435919][T31613] netlink: 12 bytes leftover after parsing attributes in process `syz.0.6139'. [ 913.495655][T31613] workqueue: Failed to create a rescuer kthread for wq "bond10": -EINTR [ 913.912236][T31641] netlink: 36 bytes leftover after parsing attributes in process `syz.0.6142'. [ 913.949532][ T8537] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 913.972712][T31644] netlink: 'syz.4.6056': attribute type 4 has an invalid length. [ 913.987432][T31644] netlink: 8 bytes leftover after parsing attributes in process `syz.4.6056'. [ 914.005111][T31644] block nbd0: Unsupported socket: should be TCP or UNIX. [ 914.391650][T31659] netlink: 200 bytes leftover after parsing attributes in process `syz.4.6146'. [ 914.409992][T31671] netlink: 8 bytes leftover after parsing attributes in process `syz.3.6148'. [ 914.446724][T31671] netlink: 40 bytes leftover after parsing attributes in process `syz.3.6148'. [ 914.579651][T31679] netlink: 'syz.4.6152': attribute type 10 has an invalid length. [ 914.591445][T31679] netlink: 224 bytes leftover after parsing attributes in process `syz.4.6152'. [ 914.772667][T31267] IPVS: starting estimator thread 0... [ 914.866671][T31685] IPVS: using max 28 ests per chain, 67200 per kthread [ 915.019951][T31695] pim6reg1: entered promiscuous mode [ 915.032362][T31695] pim6reg1: entered allmulticast mode [ 915.087187][ T7747] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 915.408717][T31709] netlink: 28 bytes leftover after parsing attributes in process `syz.5.6158'. [ 916.249409][ T7744] net_ratelimit: 2 callbacks suppressed [ 916.249429][ T7744] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 916.477558][T31737] netlink: 'syz.3.6168': attribute type 32 has an invalid length. [ 916.663052][T31737] bond1: option coupled_control: invalid value (3) [ 916.798002][T31737] bond1 (unregistering): Released all slaves [ 917.320804][T31780] tipc: Started in network mode [ 917.325859][T31780] tipc: Node identity 7641eb5d095, cluster identity 4711 [ 917.333934][T31780] tipc: Enabled bearer , priority 0 [ 917.342248][T31780] syzkaller0: entered promiscuous mode [ 917.350135][T31780] syzkaller0: entered allmulticast mode [ 917.417381][ T7744] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 917.560668][T31778] tipc: Resetting bearer [ 917.637312][T31778] tipc: Disabling bearer [ 917.654482][T31796] netlink: 'syz.1.6181': attribute type 30 has an invalid length. [ 917.704836][T31798] SET target dimension over the limit! [ 918.025139][T31806] syzkaller0: entered promiscuous mode [ 918.039175][T18648] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 918.048006][ C0] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 918.054262][T31806] syzkaller0: entered allmulticast mode [ 918.273182][T31820] input: Bluetooth HID Boot Protocol Device as /devices/virtual/bluetooth/hci2/hci2:200/input8 [ 918.309771][T31814] faux_driver regulatory: loading /lib/firmware/regulatory.db failed with error -4 [ 918.327737][T31814] faux_driver regulatory: Direct firmware load for regulatory.db failed with error -4 [ 918.359006][T31266] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 918.369058][T31814] faux_driver regulatory: Falling back to sysfs fallback for: regulatory.db [ 918.518305][ T8537] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 918.535493][T31828] __nla_validate_parse: 14 callbacks suppressed [ 918.535513][T31828] netlink: 8 bytes leftover after parsing attributes in process `syz.1.6193'. [ 918.671920][T31834] netlink: 12 bytes leftover after parsing attributes in process `syz.4.6194'. [ 918.762416][T31836] netlink: 'syz.3.6192': attribute type 10 has an invalid length. [ 918.803613][T31834] veth3: entered allmulticast mode [ 918.823409][T31842] netlink: 41 bytes leftover after parsing attributes in process `syz.3.6192'. [ 918.843814][T31842] netlink: 140 bytes leftover after parsing attributes in process `syz.3.6192'. [ 918.902151][T31848] siw: device registration error -23 [ 918.921603][T31836] syz_tun: entered promiscuous mode [ 918.976337][T31842] netlink: 41 bytes leftover after parsing attributes in process `syz.3.6192'. [ 919.068957][T31840] 8021q: adding VLAN 0 to HW filter on device bond9 [ 919.095533][T31840] bridge0: port 3(bond9) entered blocking state [ 919.111542][T31840] bridge0: port 3(bond9) entered disabled state [ 919.118679][T31840] bond9: entered allmulticast mode [ 919.126963][T31840] bond9: entered promiscuous mode [ 919.132723][T31840] bridge0: port 3(bond9) entered blocking state [ 919.139188][T31840] bridge0: port 3(bond9) entered forwarding state [ 919.211847][T31853] netlink: 8 bytes leftover after parsing attributes in process `syz.1.6198'. [ 919.242880][T31853] netlink: 24 bytes leftover after parsing attributes in process `syz.1.6198'. [ 919.306166][T31858] netlink: 'syz.4.6201': attribute type 16 has an invalid length. [ 919.321512][T31858] netlink: 'syz.4.6201': attribute type 3 has an invalid length. [ 919.329663][T31858] netlink: 64066 bytes leftover after parsing attributes in process `syz.4.6201'. [ 919.397022][T18648] bridge0: port 3(bond9) entered disabled state [ 919.490821][T31863] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 919.568845][T31869] xt_NFQUEUE: number of queues (3633) out of range (got 69161) [ 919.687693][T31757] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 919.952234][ T31] INFO: task kworker/1:0H:25 blocked for more than 143 seconds. [ 919.978457][ T31] Not tainted syzkaller #0 [ 919.983557][ T31] "echo 0 > /proc/sys/kernel/hung_task_timeout_secs" disables this message. [ 919.996585][ T31] task:kworker/1:0H state:D stack:26472 pid:25 tgid:25 ppid:2 task_flags:0x4208060 flags:0x00080000 [ 920.025867][ T31] Workqueue: kblockd blk_mq_requeue_work [ 920.040331][T31900] netlink: 20 bytes leftover after parsing attributes in process `syz.1.6207'. [ 920.053173][ T31] Call Trace: [ 920.058852][T31895] netlink: 32 bytes leftover after parsing attributes in process `syz.0.6211'. [ 920.068814][ T31] [ 920.071932][ T31] __schedule+0x1821/0x5740 [ 920.079394][ T31] ? do_raw_spin_lock+0x12b/0x2f0 [ 920.085463][ T31] ? __pfx___schedule+0x10/0x10 [ 920.091949][ T31] ? schedule+0x90/0x360 [ 920.096426][ T31] schedule+0x164/0x360 [ 920.102492][ T31] schedule_timeout+0x158/0x2c0 [ 920.109816][ T31] ? __pfx_schedule_timeout+0x10/0x10 [ 920.116256][ T31] ? __pfx_process_timeout+0x10/0x10 [ 920.122038][ T31] ? _raw_spin_unlock_irqrestore+0x4c/0x80 [ 920.128628][ T31] ? prepare_to_wait_event+0x436/0x480 [ 920.134352][ T31] nbd_queue_rq+0x857/0x1100 [ 920.140277][ T31] ? __pfx_nbd_queue_rq+0x10/0x10 [ 920.145563][ T31] ? __pfx_autoremove_wake_function+0x10/0x10 [ 920.152193][ T31] ? __pfx_min_vruntime_cb_rotate+0x10/0x10 [ 920.159529][ T31] blk_mq_dispatch_rq_list+0xa70/0x1910 [ 920.165215][ T31] ? sbitmap_get+0x229/0x390 [ 920.170239][ T31] ? __pfx_blk_mq_dispatch_rq_list+0x10/0x10 [ 920.176279][ T31] ? __blk_mq_alloc_driver_tag+0x2e7/0x6e0 [ 920.182259][ T31] __blk_mq_sched_dispatch_requests+0xdcc/0x1600 [ 920.188938][ T31] ? __pfx___blk_mq_sched_dispatch_requests+0x10/0x10 [ 920.195875][ T31] ? blk_mq_hw_queue_need_run+0x13c/0x680 [ 920.201810][ T31] ? blk_mq_run_hw_queue+0x31f/0x4f0 [ 920.207359][ T31] ? blk_mq_run_hw_queue+0x31f/0x4f0 [ 920.212726][ T31] blk_mq_sched_dispatch_requests+0xd7/0x190 [ 920.220679][ T31] ? blk_mq_run_hw_queue+0x31f/0x4f0 [ 920.226007][ T31] blk_mq_run_hw_queue+0x348/0x4f0 [ 920.231367][ T31] blk_mq_run_hw_queues+0x26c/0x3f0 [ 920.237011][ T31] blk_mq_requeue_work+0x71c/0x780 [ 920.242276][ T31] ? __pfx_blk_mq_requeue_work+0x10/0x10 [ 920.248128][ T31] ? process_scheduled_works+0xa70/0x1860 [ 920.254043][ T31] ? process_scheduled_works+0xa70/0x1860 [ 920.259964][ T31] process_scheduled_works+0xb5d/0x1860 [ 920.265693][ T31] ? __pfx_process_scheduled_works+0x10/0x10 [ 920.272043][ T31] ? assign_work+0x3d5/0x5e0 [ 920.276881][ T31] worker_thread+0xa53/0xfc0 [ 920.281590][ T31] kthread+0x389/0x470 [ 920.285698][ T31] ? __pfx_worker_thread+0x10/0x10 [ 920.292072][ T31] ? __pfx_kthread+0x10/0x10 [ 920.298668][ T31] ret_from_fork+0x514/0xb70 [ 920.303411][ T31] ? __pfx_ret_from_fork+0x10/0x10 [ 920.308716][ T31] ? __switch_to+0xc79/0x1410 [ 920.313488][ T31] ? __pfx_kthread+0x10/0x10 [ 920.319535][ T31] ret_from_fork_asm+0x1a/0x30 [ 920.324450][ T31] [ 920.329649][ T31] [ 920.329649][ T31] Showing all locks held in the system: [ 920.339297][ T31] 2 locks held by rcu_exp_gp_kthr/18: [ 920.344900][ T31] #0: ffff8880b873aee0 (&rq->__lock){-.-.}-{2:2}, at: raw_spin_rq_lock_nested+0x31/0x150 [ 920.355550][ T31] #1: ffff8880b8724588 (psi_seq){-.-.}-{0:0}, at: psi_task_switch+0x53/0x880 [ 920.364663][ T31] 4 locks held by kworker/1:0H/25: [ 920.369909][ T31] #0: ffff88801e2fb540 ((wq_completion)kblockd){+.+.}-{0:0}, at: process_scheduled_works+0xa35/0x1860 [ 920.382570][ T31] #1: ffffc900001f7c40 ((work_completion)(&(&q->requeue_work)->work)){+.+.}-{0:0}, at: process_scheduled_works+0xa70/0x1860 [ 920.395693][ T31] #2: ffff888075b16b18 (set->srcu){.+.+}-{0:0}, at: blk_mq_run_hw_queue+0x31f/0x4f0 [ 920.406121][ T31] #3: ffff88807c617178 (&cmd->lock){+.+.}-{4:4}, at: nbd_queue_rq+0xc6/0x1100 [ 920.416962][ T31] 1 lock held by khungtaskd/31: [ 920.422520][ T31] #0: ffffffff8e95cca0 (rcu_read_lock){....}-{1:3}, at: debug_show_all_locks+0x2e/0x180 [ 920.432612][ T31] 1 lock held by klogd/4989: [ 920.437364][ T31] #0: ffff8880b873aee0 (&rq->__lock){-.-.}-{2:2}, at: raw_spin_rq_lock_nested+0x31/0x150 [ 920.447629][ T31] 2 locks held by getty/5388: [ 920.452358][ T31] #0: ffff8880369970a0 (&tty->ldisc_sem){++++}-{0:0}, at: tty_ldisc_ref_wait+0x25/0x70 [ 920.462598][ T31] #1: ffffc900032332e8 (&ldata->atomic_read_lock){+.+.}-{4:4}, at: n_tty_read+0x45c/0x13a0 [ 920.473687][ T31] 1 lock held by udevd/7141: [ 920.479084][ T31] #0: ffff88802b12d350 (&disk->open_mutex){+.+.}-{4:4}, at: bdev_open+0xe0/0xd30 [ 920.488919][ T31] 3 locks held by kworker/u8:32/7751: [ 920.494599][ T31] #0: ffff88801ae84140 ((wq_completion)events_unbound){+.+.}-{0:0}, at: process_scheduled_works+0xa35/0x1860 [ 920.506601][ T31] #1: ffffc9000363fc40 ((linkwatch_work).work){+.+.}-{0:0}, at: process_scheduled_works+0xa70/0x1860 [ 920.518256][ T31] #2: ffffffff8fdc8e80 (rtnl_mutex){+.+.}-{4:4}, at: linkwatch_event+0xe/0x60 [ 920.528376][ T31] 4 locks held by kworker/u8:33/8536: [ 920.533907][ T31] #0: ffff8880b873aee0 (&rq->__lock){-.-.}-{2:2}, at: raw_spin_rq_lock_nested+0x31/0x150 [ 920.544345][ T31] #1: ffff8880b8724588 (psi_seq){-.-.}-{0:0}, at: psi_task_switch+0x53/0x880 [ 920.553383][ T31] #2: ffff8880b8726118 (&base->lock){-.-.}-{2:2}, at: __mod_timer+0x8ee/0xf30 [ 920.562532][ T31] #3: ffffffff9a69bc98 (&obj_hash[i].lock){-.-.}-{2:2}, at: debug_object_activate+0x83/0x580 [ 920.573285][ T31] 2 locks held by syz.5.6202/31861: [ 920.578591][ T31] #0: ffffffff8fdc8e80 (rtnl_mutex){+.+.}-{4:4}, at: tun_chr_close+0x3e/0x1c0 [ 920.588414][ T31] #1: ffffffff8e962fa8 (rcu_state.exp_mutex){+.+.}-{4:4}, at: synchronize_rcu_expedited+0x38d/0x770 [ 920.599507][ T31] 2 locks held by syz.1.6207/31881: [ 920.609816][ T31] #0: ffffffff8f544d68 (&ops->srcu#2){.+.+}-{0:0}, at: rtnl_link_ops_get+0x23/0x250 [ 920.619500][ T31] #1: ffffffff8e962e78 (rcu_state.barrier_mutex){+.+.}-{4:4}, at: rcu_barrier+0x4c/0x580 [ 920.632872][ T31] 1 lock held by syz.1.6207/31885: [ 920.639864][ T31] #0: ffffffff8fdc8e80 (rtnl_mutex){+.+.}-{4:4}, at: rtnetlink_rcv_msg+0x722/0xbe0 [ 920.651139][ T31] 1 lock held by syz.1.6207/31890: [ 920.656408][ T31] #0: ffffffff8fdc8e80 (rtnl_mutex){+.+.}-{4:4}, at: tun_chr_close+0x3e/0x1c0 [ 920.665683][ T31] 2 locks held by syz.1.6207/31900: [ 920.671180][ T31] #0: ffffffff90327be0 (&ops->srcu#2){.+.+}-{0:0}, at: rtnl_link_ops_get+0x23/0x250 [ 920.681051][ T31] #1: ffffffff8fdc8e80 (rtnl_mutex){+.+.}-{4:4}, at: rtnl_newlink+0x883/0x1bb0 [ 920.690245][ T31] 1 lock held by syz.3.6209/31889: [ 920.695383][ T31] #0: ffffffff8fdc8e80 (rtnl_mutex){+.+.}-{4:4}, at: tun_chr_close+0x3e/0x1c0 [ 920.704453][ T31] 1 lock held by syz.3.6209/31891: [ 920.709700][ T31] #0: ffffffff8fdc8e80 (rtnl_mutex){+.+.}-{4:4}, at: wext_ioctl_dispatch+0xa2/0x410 [ 920.719557][ T31] 2 locks held by syz.0.6211/31893: [ 920.724797][ T31] #0: ffff8880b3c33040 (&sb->s_type->i_mutex_key#13){+.+.}-{4:4}, at: sock_close+0x9b/0x240 [ 920.735966][ T31] #1: ffffffff8e962fa8 (rcu_state.exp_mutex){+.+.}-{4:4}, at: synchronize_rcu_expedited+0x38d/0x770 [ 920.749266][ T31] [ 920.751737][ T31] ============================================= [ 920.751737][ T31] [ 920.765145][ T31] NMI backtrace for cpu 0 [ 920.765163][ T31] CPU: 0 UID: 0 PID: 31 Comm: khungtaskd Not tainted syzkaller #0 PREEMPT(full) [ 920.765185][ T31] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/09/2026 [ 920.765198][ T31] Call Trace: [ 920.765210][ T31] [ 920.765220][ T31] dump_stack_lvl+0xe8/0x150 [ 920.765249][ T31] nmi_cpu_backtrace+0x274/0x2d0 [ 920.765364][ T31] ? __pfx_nmi_raise_cpu_backtrace+0x10/0x10 [ 920.765391][ T31] nmi_trigger_cpumask_backtrace+0x17a/0x300 [ 920.765421][ T31] sys_info+0x135/0x170 [ 920.765443][ T31] watchdog+0xfd3/0x1030 [ 920.765481][ T31] ? watchdog+0x1c9/0x1030 [ 920.765517][ T31] kthread+0x389/0x470 [ 920.765545][ T31] ? __pfx_watchdog+0x10/0x10 [ 920.765572][ T31] ? __pfx_kthread+0x10/0x10 [ 920.765600][ T31] ret_from_fork+0x514/0xb70 [ 920.765625][ T31] ? __pfx_ret_from_fork+0x10/0x10 [ 920.765647][ T31] ? __switch_to+0xc79/0x1410 [ 920.765680][ T31] ? __pfx_kthread+0x10/0x10 [ 920.765709][ T31] ret_from_fork_asm+0x1a/0x30 [ 920.765751][ T31] [ 920.765786][ T31] Sending NMI from CPU 0 to CPUs 1: [ 920.855393][T18648] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 920.857063][ C1] NMI backtrace for cpu 1 [ 920.857079][ C1] CPU: 1 UID: 0 PID: 18648 Comm: kworker/u8:36 Not tainted syzkaller #0 PREEMPT(full) [ 920.857106][ C1] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/09/2026 [ 920.857119][ C1] Workqueue: bond10 bond_alb_monitor [ 920.857223][ C1] RIP: 0010:io_serial_out+0x7c/0xc0 [ 920.857277][ C1] Code: 01 81 fc 44 89 f9 d3 e5 49 83 c6 40 4c 89 f0 48 c1 e8 03 42 80 3c 20 00 74 08 4c 89 f7 e8 bc 57 ec fc 41 03 2e 89 d8 89 ea ee <5b> 41 5c 41 5e 41 5f 5d c3 cc cc cc cc cc 44 89 f9 80 e1 07 38 c1 [ 920.857293][ C1] RSP: 0018:ffffc9000599e7f0 EFLAGS: 00000002 [ 920.857308][ C1] RAX: 0000000000000030 RBX: 0000000000000030 RCX: 0000000000000000 [ 920.857320][ C1] RDX: 00000000000003f8 RSI: 0000000000000000 RDI: 0000000000000020 [ 920.857331][ C1] RBP: 00000000000003f8 R08: ffff888025d70237 R09: 1ffff11004bae046 [ 920.857344][ C1] R10: dffffc0000000000 R11: ffffffff8544b4b0 R12: dffffc0000000000 [ 920.857358][ C1] R13: ffffffff9a48b9a6 R14: ffffffff9a7a1ac0 R15: 0000000000000000 [ 920.857371][ C1] FS: 0000000000000000(0000) GS:ffff88812538b000(0000) knlGS:0000000000000000 [ 920.857386][ C1] CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033 [ 920.857410][ C1] CR2: 0000001b2dc03ff8 CR3: 0000000075060000 CR4: 00000000003526f0 [ 920.857425][ C1] Call Trace: [ 920.857433][ C1] [ 920.857443][ C1] serial8250_console_write+0x140c/0x1ba0 [ 920.857478][ C1] ? __pfx_serial8250_console_write+0x10/0x10 [ 920.857503][ C1] ? console_flush_all+0x123/0xb20 [ 920.857531][ C1] ? do_raw_spin_unlock+0xf5/0x210 [ 920.857563][ C1] ? console_flush_all+0x123/0xb20 [ 920.857587][ C1] console_flush_all+0x718/0xb20 [ 920.857632][ C1] ? console_flush_all+0x123/0xb20 [ 920.857660][ C1] ? __pfx_console_flush_all+0x10/0x10 [ 920.857687][ C1] ? is_printk_cpu_sync_owner+0x32/0x40 [ 920.857716][ C1] console_unlock+0xd1/0x1c0 [ 920.857743][ C1] ? vprintk_emit+0x2cf/0x560 [ 920.857765][ C1] ? __pfx_console_unlock+0x10/0x10 [ 920.857786][ C1] ? vprintk_emit+0x240/0x560 [ 920.857809][ C1] ? vprintk_emit+0x455/0x560 [ 920.857830][ C1] ? vprintk_emit+0x2cf/0x560 [ 920.857857][ C1] ? vprintk_emit+0x2cf/0x560 [ 920.857880][ C1] vprintk_emit+0x485/0x560 [ 920.857903][ C1] ? __pfx_vprintk_emit+0x10/0x10 [ 920.857932][ C1] _printk+0xdd/0x130 [ 920.857957][ C1] ? __pfx__printk+0x10/0x10 [ 920.857980][ C1] ? _raw_spin_unlock_irqrestore+0x4c/0x80 [ 920.858008][ C1] ? ___ratelimit+0x58c/0x8d0 [ 920.858038][ C1] gred_dequeue+0x4e6/0x6f0 [ 920.858085][ C1] __qdisc_run+0x23f/0x1560 [ 920.858139][ C1] ? rcu_is_watching+0x15/0xb0 [ 920.858165][ C1] __dev_queue_xmit+0x1d26/0x3950 [ 920.858214][ C1] ? __dev_queue_xmit+0x2b6/0x3950 [ 920.858244][ C1] ? __pfx___dev_queue_xmit+0x10/0x10 [ 920.858267][ C1] ? ip6_output+0x340/0x550 [ 920.858312][ C1] ? lock_acquire+0x106/0x350 [ 920.858330][ C1] ? ip6_output+0x340/0x550 [ 920.858358][ C1] ? ip6_finish_output2+0xd39/0x13e0 [ 920.858410][ C1] ? ip6_output+0x126/0x550 [ 920.858430][ C1] ip6_output+0x340/0x550 [ 920.858454][ C1] udp_tunnel6_xmit_skb+0x6e2/0xd70 [ 920.858503][ C1] geneve_xmit+0x1f1e/0x3120 [ 920.858559][ C1] ? geneve_xmit+0x131/0x3120 [ 920.858579][ C1] ? __pfx_geneve_xmit+0x10/0x10 [ 920.858598][ C1] ? stack_trace_save+0xa9/0x100 [ 920.858631][ C1] dev_hard_start_xmit+0x2cd/0x830 [ 920.858662][ C1] __dev_queue_xmit+0x14d9/0x3950 [ 920.858688][ C1] ? __dev_queue_xmit+0x2b6/0x3950 [ 920.858717][ C1] ? __pfx___dev_queue_xmit+0x10/0x10 [ 920.858740][ C1] ? rcu_is_watching+0x15/0xb0 [ 920.858760][ C1] ? trace_kmem_cache_alloc+0x29/0xe0 [ 920.858785][ C1] ? kmem_cache_alloc_node_noprof+0x3ce/0x690 [ 920.858819][ C1] ? alb_send_lp_vid+0x14e/0x550 [ 920.858846][ C1] alb_send_lp_vid+0x348/0x550 [ 920.858868][ C1] ? __pfx_alb_send_lp_vid+0x10/0x10 [ 920.858896][ C1] alb_send_learning_packets+0x12c/0x300 [ 920.858928][ C1] ? __pfx_alb_send_learning_packets+0x10/0x10 [ 920.858947][ C1] ? bond_alb_monitor+0xf8/0x17e0 [ 920.858968][ C1] ? netdev_lower_get_next_private_rcu+0x9f/0x100 [ 920.859017][ C1] bond_alb_monitor+0x3d5/0x17e0 [ 920.859038][ C1] ? bond_alb_monitor+0xf8/0x17e0 [ 920.859056][ C1] ? __pfx_bond_alb_monitor+0x10/0x10 [ 920.859075][ C1] ? process_scheduled_works+0xa70/0x1860 [ 920.859092][ C1] ? process_scheduled_works+0xa70/0x1860 [ 920.859110][ C1] process_scheduled_works+0xb5d/0x1860 [ 920.859145][ C1] ? __pfx_process_scheduled_works+0x10/0x10 [ 920.859165][ C1] ? assign_work+0x3d5/0x5e0 [ 920.859185][ C1] worker_thread+0xa53/0xfc0 [ 920.859217][ C1] kthread+0x389/0x470 [ 920.859238][ C1] ? __pfx_worker_thread+0x10/0x10 [ 920.859254][ C1] ? __pfx_kthread+0x10/0x10 [ 920.859276][ C1] ret_from_fork+0x514/0xb70 [ 920.859295][ C1] ? __pfx_ret_from_fork+0x10/0x10 [ 920.859312][ C1] ? __switch_to+0xc79/0x1410 [ 920.859338][ C1] ? __pfx_kthread+0x10/0x10 [ 920.859360][ C1] ret_from_fork_asm+0x1a/0x30 [ 920.859390][ C1] [ 920.861870][ T31] Kernel panic - not syncing: hung_task: blocked tasks [ 920.861939][ T31] CPU: 0 UID: 0 PID: 31 Comm: khungtaskd Not tainted syzkaller #0 PREEMPT(full) [ 920.862002][ T31] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/09/2026 [ 920.862044][ T31] Call Trace: [ 920.862085][ T31] [ 920.862108][ T31] vpanic+0x56c/0xa60 [ 920.862186][ T31] ? __pfx___schedule+0x10/0x10 [ 920.862270][ T31] ? __pfx_vpanic+0x10/0x10 [ 920.862371][ T31] panic+0xc5/0xd0 [ 920.862431][ T31] ? __pfx_panic+0x10/0x10 [ 920.862494][ T31] ? preempt_schedule_thunk+0x16/0x30 [ 920.862588][ T31] ? nmi_trigger_cpumask_backtrace+0x2bb/0x300 [ 920.862672][ T31] watchdog+0x102c/0x1030 [ 920.862773][ T31] ? watchdog+0x1c9/0x1030 [ 920.862878][ T31] kthread+0x389/0x470 [ 920.862948][ T31] ? __pfx_watchdog+0x10/0x10 [ 920.863019][ T31] ? __pfx_kthread+0x10/0x10 [ 920.863099][ T31] ret_from_fork+0x514/0xb70 [ 920.863181][ T31] ? __pfx_ret_from_fork+0x10/0x10 [ 920.863239][ T31] ? __switch_to+0xc79/0x1410 [ 920.863351][ T31] ? __pfx_kthread+0x10/0x10 [ 920.863396][ T31] ret_from_fork_asm+0x1a/0x30 [ 920.863501][ T31] [ 920.864143][ T31] Kernel Offset: disabled