last executing test programs: 10m15.759071587s ago: executing program 1 (id=3063): r0 = socket$inet6_sctp(0xa, 0x5, 0x84) r1 = openat$tun(0xffffffffffffff9c, &(0x7f0000000000), 0xc0a41, 0x0) ioctl$TUNSETIFF(r1, 0x400454ca, &(0x7f0000000200)={'syzkaller1\x00', 0x4002}) (async) r2 = socket$inet_tcp(0x2, 0x1, 0x0) bind$inet(r2, &(0x7f0000000080)={0x2, 0x4e21, @broadcast}, 0x10) (async) connect$inet(r2, &(0x7f0000000000)={0x2, 0x4e21, @dev={0xac, 0x14, 0x14, 0x32}}, 0x10) (async) sendmmsg$inet(r2, &(0x7f0000001840)=[{{0x0, 0x0, &(0x7f00000008c0)=[{&(0x7f00000002c0)="88", 0x1}], 0x1}}, {{0x0, 0x0, &(0x7f0000000e00)=[{&(0x7f0000000d40)="c4", 0x1}], 0x1}}, {{0x0, 0x0, &(0x7f0000000fc0)=[{&(0x7f0000000440)='N', 0x1}], 0x1}}], 0x3, 0x10040000) shutdown(r2, 0x2) write$tun(r1, &(0x7f00000006c0)={@val={0x0, 0x18}, @val={0x3, 0x3, 0x3, 0xffff, 0xc4, 0x10}, @x25={0x2, 0x2, 0x332ac253700f81cb, "89bd51a46820cdde6e042109107f44ad72849a563ec2f59203cdcc022362861ac24664b6a0ddfd74a95b19c97cdc9a150c66481e5d6c079e5a7f56e8f42525139d1674cd6813119ed0367c26323d38c2180d6e837cef9a172119079de894f7c74e7d746cec3bf1a58a38685a453e4f1d04e0019e63044a462312d4e5afb8386bbf15b70fa33bc1dd3d21bd841bf490cd239af8d3a1a5e49e6b9cbcf16d94d3f1d89af8bb729da06a09f9300390a986343b26958751af54f9b954bfe1efc8452132871a97d5271947a598d3a167edfd2952f84912e7"}}, 0xe6) (async) close(r0) (async) r3 = socket$inet6_sctp(0xa, 0x1, 0x84) setsockopt(r3, 0x84, 0x81, &(0x7f0000000280)="1a00000002000000", 0x8) (async) setsockopt(r3, 0x84, 0x80, &(0x7f0000000000)="1400000009000000", 0x8) (async) setsockopt$inet_sctp_SCTP_SOCKOPT_BINDX_ADD(r0, 0x84, 0x64, &(0x7f0000000000)=[@in6={0xa, 0x4e23, 0x401, @ipv4={'\x00', '\xff\xff', @empty}}], 0x1c) r4 = bpf$PROG_LOAD(0x5, &(0x7f0000000040)={0x6, 0x4, &(0x7f0000000000)=ANY=[@ANYBLOB="18020000fbffffff000400000000000085000000410000009500000000000000"], &(0x7f00000001c0)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @xdp, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) (async) r5 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r5, &(0x7f0000000040)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000080)=@ipv4_newroute={0x30, 0x18, 0x35f32a6dfa748ddd, 0x0, 0x25dfdbff, {0x2, 0x10, 0x0, 0x0, 0xfc, 0x0, 0xfe, 0x6, 0x1500}, [@RTA_IP_PROTO={0x5, 0x1b, 0x3a}, @RTA_ENCAP={0xc, 0x16, 0x0, 0x1, @LWTUNNEL_IP_TOS={0x5, 0x5, 0x4}}]}, 0x30}, 0x1, 0x0, 0x0, 0x4850}, 0x20048814) (async) r6 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r6, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000240)={&(0x7f00000023c0)={0x18, 0x27, 0x301, 0x2270bd24, 0x25dfdbff, {0xb}, [@nested={0x4, 0x1d}]}, 0x18}, 0x1, 0x0, 0x0, 0x4008}, 0x4044810) (async) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000600)={r4, 0x0, 0x2100, 0x0, &(0x7f0000000100), 0x0, 0x1008, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x9}, 0x50) sendto$inet6(r3, &(0x7f00000004c0)="b0", 0x1, 0x40811, &(0x7f0000000240)={0xa, 0x4e23, 0x1ff, @loopback, 0x4}, 0x1c) 10m14.266470504s ago: executing program 0 (id=3068): socket$nl_route(0x10, 0x3, 0x0) syz_init_net_socket$bt_hci(0x1f, 0x3, 0x5) close(0x4) syz_open_procfs$namespace(0x0, &(0x7f0000000180)='ns/pid\x00') close(0x3) r0 = socket(0x2, 0x80805, 0x0) r1 = socket$igmp(0x2, 0x3, 0x2) getsockopt$MRT(r1, 0x0, 0xce, &(0x7f0000000140), &(0x7f00000000c0)=0xffffffffffffffc2) r2 = socket$inet6_sctp(0xa, 0x5, 0x84) shutdown(r2, 0x0) close(0x3) getsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX3(r2, 0x84, 0x6f, &(0x7f0000000200)={0x0, 0x68, &(0x7f0000000280)=[@in={0x2, 0x4e23, @initdev={0xac, 0x1e, 0x1, 0x0}}, @in={0x2, 0x4e20, @multicast1}, @in6={0xa, 0x4e21, 0x5, @rand_addr=' \x01\x00', 0x18000000}, @in6={0xa, 0x4e21, 0x7, @mcast2, 0x2f2b}, @in={0x2, 0x4e22, @rand_addr=0x64010102}]}, &(0x7f0000000140)=0x10) getsockopt$inet_sctp6_SCTP_PRIMARY_ADDR(r2, 0x84, 0x7a, &(0x7f0000000340)={r3, @in6={{0xa, 0x3, 0x4, @rand_addr=' \x01\x00'}}}, &(0x7f0000000040)=0x84) sendmmsg$inet_sctp(r0, &(0x7f00000032c0)=[{0x0, 0x0, 0x0, 0x0, &(0x7f0000000000)=ANY=[], 0x30}], 0x1, 0x8800) getsockopt$inet_sctp_SCTP_PR_ASSOC_STATUS(r0, 0x84, 0x73, &(0x7f00000000c0)={r3, 0x9, 0x20, 0x8, 0x6d2b}, &(0x7f0000000100)=0x18) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f07ebbeef, 0x8031, 0xffffffffffffffff, 0x215eb000) bpf$PROG_LOAD(0x5, &(0x7f00000017c0)={0x1, 0xe, &(0x7f0000000ac0)=ANY=[@ANYBLOB="b700000081000000bfa3000000000000070300000cfeffff720af0fff8ffffff71a4f0ff000000002d030000000000001d400500000000004704000001ed00007203feff000000001d44000000000000db0a08fee10000007303000000000000b500f3ff000000009500000000000000023bc065b58111c6dfa041b63af4a3912435f1a864a710aad58db6a693002e7f3be361917adef6ee1c8a2a4f8ef1e50becb19bc461e91a7168c50000000190f32050e436fe275daf51efd601b6bf01c8e8b1b526375ec4dd6fcd82e4fee5bef7af9aa0d7d600c095199fe3ff3128e599b0eaebbdbd732c9cc00eec363e4a8f6456e2cc21557c0afc646cb7798b3e6440c2fbdb00a3e35208b0bb0d2cd829e654400e2438ec649dc74a28610643a98d9ec21ead2ed51b104d4d91af25b845d8a7925c3109b151b8b9f75dd08d123deda88c658d42ecbf28bf7076c15b463bebc72f526d8e8afcb913466aaa7f6df70252e79166d858fcd0e06dd31af9612f2460d0b11008e59a5923906f88b53987ad1714e72ba7a54f0c33d39000d06a59ff616236fd9aa58f2477184b6a89adaf17b0a6041bdef728d236619074d6ebdfd1f5089048ddff6da40f9411fe722631cb467600ade70063e5291569b33d21dae356e1c51f03a801be8189679a16da18ec0ae564162a27afea62d84f3a10746443d6438e959532e0617d419c6bc6ea9f2bca4464f56e24e6d2105bd901204a1deeed4155617572652d950ad31928b0b0c3dc2869f478341d02d0f5ad94b081fcd507acb4b9c65fee9d5a17f48a7382f13d000000225d85ae49cee383dc5049076b989b40000000000000da60d2ae20cfb91d6a49964757cdf538f9ce2bdb1ab062cd54e67011d355d84ce97bb0c6b4a595e487efbb2d71cde2c140952f9a0f0bc6980fe78683ac5c0c31032599ddd71063be9261b2e1aab1675b34a22048ef8c126aeef5f510a8f1aded94a129e4aec6f8d9ab06faffc3a15d96c2ea3e2e04cfe031b2875353193f82ade69d0540059fe6c7fe7cd8697502c7596566d674e425da5e87e59602a9f6590521d31d3804b3e0a1053abdc312"], 0x0}, 0x94) r4 = openat$nci(0xffffffffffffff9c, &(0x7f0000000080), 0x2, 0x0) r5 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r6 = syz_genetlink_get_family_id$nfc(&(0x7f0000000100), r5) ioctl$IOCTL_GET_NCIDEV_IDX(r4, 0x0, &(0x7f00000000c0)=0x0) sendmsg$NFC_CMD_DEV_UP(r5, &(0x7f0000000200)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000d80)=ANY=[@ANYBLOB="1c000000", @ANYRES16=r6, @ANYBLOB="010426bd7000f8dbdf250200000008000100", @ANYRES32=r7], 0x1c}}, 0x4008054) socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFNL_MSG_CTHELPER_DEL(r0, &(0x7f0000006500)={0x0, 0x0, &(0x7f00000064c0)={&(0x7f0000000500)=ANY=[@ANYBLOB="1c0000000201019fca7a241c1fe398000100000549e0ec7afba84ac6"], 0x1c}, 0x1, 0x0, 0x0, 0x8d0}, 0x4010) write$nci(r4, &(0x7f0000000240)=ANY=[@ANYBLOB='p\x00\t'], 0xc) write$nci(r4, &(0x7f0000000dc0)=ANY=[@ANYBLOB="400104"], 0x14) socket$kcm(0x2a, 0x2, 0x0) r8 = socket$kcm(0x2a, 0x5, 0x0) sendmsg$kcm(r8, &(0x7f0000001f80)={&(0x7f0000001d00)=@qipcrtr={0x2a, 0xffffffffffffffff, 0xfffffffe}, 0x80, 0x0}, 0x0) sendmsg$kcm(r8, &(0x7f0000001540)={&(0x7f0000000040)=@qipcrtr={0x2a, 0x4, 0x4000}, 0x80, 0x0}, 0x0) 10m12.864583616s ago: executing program 1 (id=3070): r0 = socket$inet6_sctp(0xa, 0x1, 0x84) getsockopt$inet_sctp6_SCTP_PEER_ADDR_THLDS(r0, 0x84, 0x1f, &(0x7f00000003c0)={0x0, @in6={{0xa, 0x4e22, 0x4, @ipv4={'\x00', '\xff\xff', @multicast1}, 0x9}}, 0x800, 0xbec}, &(0x7f0000000480)=0x90) r1 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r1, 0x0, 0x0) (async) r2 = socket$inet_tcp(0x2, 0x1, 0x0) (async) r3 = socket$packet(0x11, 0x2, 0x300) mmap(&(0x7f0000003000/0x2000)=nil, 0x2000, 0x0, 0x2000011, r3, 0x0) ioctl$sock_SIOCETHTOOL(r3, 0x8946, &(0x7f0000000000)={'syz_tun\x00', &(0x7f0000002fc0)=@ethtool_link_settings={0x2d, 0x2, 0x7, 0xe, 0xe, 0x8, 0x2, 0x5, 0x7, 0x4, [0x2800000, 0x5, 0x8, 0x52, 0x8000, 0xe7, 0x1, 0x8]}}) mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000)='./cgroup/syz0\x00', 0x1ff) openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000), 0x200002, 0x0) (async) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000500)) (async) bpf$MAP_UPDATE_BATCH(0x1a, &(0x7f0000000180)={0x0, 0x0, 0x0, 0x0, 0x1003}, 0x38) (async) socketpair(0x1, 0x1, 0x0, &(0x7f0000000000)) bpf$MAP_CREATE_TAIL_CALL(0x0, &(0x7f0000000540)=ANY=[@ANYBLOB="030000000400000004000000"], 0x50) (async) bpf$PROG_LOAD(0x5, 0x0, 0x0) (async) bpf$BPF_PROG_TEST_RUN(0xa, 0x0, 0x0) ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f0000000180)={'syz_tun\x00', 0x0}) (async) r5 = bpf$MAP_CREATE(0x0, &(0x7f00000000c0)=ANY=[@ANYBLOB="1b00000000000000000000000080"], 0x48) r6 = bpf$PROG_LOAD(0x5, &(0x7f00000002c0)={0x6, 0x7, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000008010000000000000000a40018110000", @ANYRES32=r5, @ANYBLOB="0000000000000000b702000000000000850000008600000095"], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x40f00, 0x0, '\x00', 0x0, @xdp, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_LINK_CREATE_XDP(0x1c, &(0x7f0000000000)={r6, r4, 0x25, 0x0, @void}, 0x10) (async) socket$nl_route(0x10, 0x3, 0x0) r7 = socket(0x2b, 0x1, 0x1) setsockopt$inet6_IPV6_FLOWLABEL_MGR(r7, 0x11e, 0x20, 0x0, 0x0) (async) syz_genetlink_get_family_id$batadv(&(0x7f0000000040), 0xffffffffffffffff) syz_emit_ethernet(0x3e, &(0x7f00000000c0)={@broadcast, @empty, @void, {@ipv4={0x800, @icmp={{0x5, 0x4, 0x0, 0x0, 0x27, 0x300, 0x0, 0x0, 0x1, 0x0, @initdev={0xac, 0x1e, 0x0, 0x0}, @local}, @time_exceeded={0x4, 0x0, 0x0, 0x3, 0x0, 0x0, {0x5, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @rand_addr, @broadcast}}}}}}, 0x0) (async) r8 = socket$nl_route(0x10, 0x3, 0x0) (async) r9 = socket$nl_route(0x10, 0x3, 0x0) ioctl$ifreq_SIOCGIFINDEX_batadv_mesh(r9, 0x8933, &(0x7f0000000040)={'batadv0\x00', 0x0}) sendmsg$nl_route(r8, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000340)={&(0x7f00000001c0)=ANY=[@ANYBLOB="3c00000013000100"/20, @ANYRES32=0x0, @ANYBLOB="00000000000e000009000000853d620b888ea8f25b935a4775e0eb0222047e7ed6cd5078a88d08a5d3b9ad9b691099f7fba373e5beb62192a998ea25", @ANYRES32=r10, @ANYBLOB="1400350064756d6d793000"/20], 0x3c}}, 0x40000) (async) socket$pppl2tp(0x18, 0x1, 0x1) 10m11.579610644s ago: executing program 1 (id=3071): r0 = socket$pppl2tp(0x18, 0x1, 0x1) (async) r1 = socket$inet6_udp(0xa, 0x2, 0x0) socket$nl_generic(0x10, 0x3, 0x10) (async) connect$pppl2tp(r0, &(0x7f0000000000)=@pppol2tpv3={0x18, 0x1, {0x3, r1, {0x2, 0x0, @dev}, 0x2}}, 0x2e) r2 = syz_genetlink_get_family_id$l2tp(&(0x7f0000000340), 0xffffffffffffffff) (async) r3 = socket$nl_generic(0x10, 0x3, 0x10) sendto(r3, &(0x7f0000000400)="9400000042000100020000000000000003010000102700003200010000112233445566778899aabb080045000014000140204011b778c0a80101c0a8010204d2162e000c00007465737400003c00020008000300010000001000040066778899aabb001122334455060006000800000010000700c0a80101c0a801021100400008000a0004d2162e0c00030008000c0004000100", 0x94, 0x0, 0x0, 0x0) r4 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$L2TP_CMD_SESSION_DELETE(r4, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000140)=ANY=[@ANYBLOB='4\x00\x00\x00', @ANYRES16=r2, @ANYBLOB="010026bd7000fedbdf25050000000800090002000000060001000500000008008c00aa0a000108000b000400000002a5993c45ec5f1d6e46ed62051614f48b73565625b2d5587028acdb667f37a5"], 0x34}, 0x1, 0x0, 0x0, 0x20006911}, 0x0) r5 = socket$inet_udp(0x2, 0x2, 0x0) setsockopt$sock_int(r5, 0x1, 0xf, &(0x7f0000000000)=0x100000b3, 0x4) (async) bind$inet(r5, &(0x7f0000000040)={0x2, 0x4e20, @empty}, 0x10) (async) r6 = socket$inet_udp(0x2, 0x2, 0x0) setsockopt$sock_int(r6, 0x1, 0xf, &(0x7f0000000000)=0x100000b3, 0x4) bind$inet(r6, &(0x7f0000000040)={0x2, 0x4e20, @empty}, 0x10) (async) connect$inet(r5, &(0x7f00000001c0)={0x2, 0x4e24, @dev={0xac, 0x14, 0x14, 0xe}}, 0x10) (async) syz_init_net_socket$802154_raw(0x24, 0x3, 0x0) syz_emit_ethernet(0xbe, &(0x7f0000000000)={@multicast, @remote, @void, {@ipv4={0x800, @udp={{0x5, 0x4, 0x0, 0x0, 0xb0, 0x0, 0x0, 0x0, 0x11, 0x0, @empty=0xac141442, @multicast1}, {0x4e21, 0x4e20, 0x9c, 0x0, @wg=@initiation={0x1, 0x3, "7b4b143b7461fd777b1c012bd14efb9f49fcdb8f080c26a04883ad5c8c82b8af", "584cbf2600fcffffbc43efa8698d0a881c51852e4451b57d037ad3c0459428242588eb17b53ae414015acd00", "bcfd56f1375461caaa2f19935e6996c7096ffeeb0300000000000064", {"9a3bfbc1f39cb307b3472eb9cdb042d2", "743fcbb2c5e304000000000000dafe09"}}}}}}}, 0x0) 10m11.218265588s ago: executing program 0 (id=3072): r0 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000080)={'veth1_to_hsr\x00', 0x0}) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000340)={0x3, 0x4, &(0x7f0000000540)=ANY=[], &(0x7f0000000200)='syzkaller\x00', 0x2, 0x0, 0x0, 0x41100, 0x6f, '\x00', r1, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0xffffffff}, 0x94) r2 = socket$rxrpc(0x21, 0x2, 0xa) (async) socket$inet_tcp(0x2, 0x1, 0x0) bpf$PROG_LOAD(0x5, &(0x7f0000000100)={0x1, 0x3, &(0x7f0000001a00)=ANY=[@ANYBLOB="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"], &(0x7f00002bf000)='GPL\x00', 0x4, 0x436, &(0x7f0000000040)=""/183, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0xfffffffffffffc95}, 0x48) (async, rerun: 64) r3 = socket$nl_route(0x10, 0x3, 0x0) (rerun: 64) sendmsg$nl_route(r3, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000000)=ANY=[@ANYBLOB="300000001000010029bd7000fddbdf2500000000", @ANYRES32=0x0, @ANYBLOB="211000000300000008001b000000000008000400d3ff"], 0x30}, 0x1, 0x0, 0x0, 0x801}, 0x4000000) (async, rerun: 32) recvfrom$rxrpc(r2, 0x0, 0x0, 0xe8ce25b3ffff0000, 0x0, 0x0) (async, rerun: 32) setsockopt$inet6_tcp_buf(0xffffffffffffffff, 0x6, 0x1f, &(0x7f00000000c0)='G', 0x1) (async) r4 = socket$inet6_sctp(0xa, 0x5, 0x84) setsockopt$inet6_opts(r4, 0x29, 0x3b, &(0x7f0000000100)=ANY=[@ANYBLOB="2f03000000000000000401"], 0x28) sendto$inet6(r4, &(0x7f0000000240)="8a", 0x1, 0x51, &(0x7f0000000080)={0xa, 0x3, 0x2, @dev={0xfe, 0x80, '\x00', 0x36}, 0x9}, 0x1c) 10m11.16269993s ago: executing program 1 (id=3073): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) setsockopt$SO_ATTACH_FILTER(r0, 0x1, 0x1a, &(0x7f0000000240)={0x2, &(0x7f0000000400)=[{0x28, 0x0, 0x0, 0xffffefff}, {0x6, 0x0, 0x0, 0x6}]}, 0x10) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) sendmsg$unix(r1, &(0x7f0000000200)={0x0, 0x0, 0x0, 0x0, &(0x7f0000000240)=[@rights={{0x14, 0x1, 0x1, [r2]}}], 0x18, 0x4008800}, 0x40800) r3 = socket$nl_generic(0x10, 0x3, 0x10) r4 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000040), 0xffffffffffffffff) sendmsg$NL80211_CMD_SET_WOWLAN(r3, &(0x7f00000057c0)={0x0, 0x0, &(0x7f0000005780)={&(0x7f0000000180)={0x28, r4, 0x1, 0x70bd2c, 0x25dfdbfc, {{}, {@val={0x8, 0x1, 0x5d}, @void, @val={0xc, 0x99, {0x1, 0xd}}}}}, 0x28}, 0x1, 0x0, 0x0, 0x44}, 0xc000) setsockopt$SO_ATTACH_FILTER(r2, 0x1, 0x4c, &(0x7f000002eff0)={0x1, &(0x7f0000000000)=[{0x0, 0x0, 0x0, 0x2}]}, 0x10) recvmmsg(r2, &(0x7f0000007340)=[{{0x0, 0x0, 0x0, 0x0, &(0x7f00000000c0)=""/61, 0x3d}, 0xfffffffe}], 0x1, 0x0, 0x0) sendmsg$NFNL_MSG_COMPAT_GET(r0, &(0x7f0000002840)={0x0, 0x0, &(0x7f0000002800)={&(0x7f0000002780)={0x34, 0x0, 0xb, 0x301, 0x0, 0x0, {0x2, 0x0, 0xa}, [@NFTA_COMPAT_REV={0x8}, @NFTA_COMPAT_TYPE={0x8}, @NFTA_COMPAT_NAME={0xd, 0x1, 'rpfilter\x00'}]}, 0x34}, 0x1, 0x0, 0x0, 0x80}, 0x4040010) socket$kcm(0xa, 0x5, 0x0) setsockopt$sock_attach_bpf(0xffffffffffffffff, 0x1, 0xd, 0x0, 0x0) r5 = socket$l2tp(0x2, 0x2, 0x73) getsockopt$IPT_SO_GET_REVISION_TARGET(r5, 0x0, 0x43, 0x0, &(0x7f00000007c0)=0x1e) r6 = bpf$PROG_LOAD(0x5, &(0x7f0000000040)={0x2, 0x4, &(0x7f0000000200)=ANY=[@ANYBLOB="180000000300000000000000feffff10850000000700000095"], &(0x7f0000000000)='GPL\x00', 0x0, 0x0, 0x0, 0x100, 0x70, '\x00', 0x0, @fallback=0x30, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffe}, 0x94) r7 = bpf$BPF_LINK_CREATE_XDP(0x1c, &(0x7f0000000180)={r6, 0x0, 0x30, 0x0, @val=@uprobe_multi={&(0x7f00000002c0)='./cgroup/cgroup.procs\x00', &(0x7f0000000300)=[0x0], 0x0, 0x0, 0x1}}, 0x40) r8 = socket$inet(0x2, 0xa, 0x0) ioctl$sock_inet_SIOCSARP(r8, 0x8953, &(0x7f0000000080)={{0x2, 0x4e20, @loopback}, {0x0, @random="32b2c9c6645a"}, 0x2f, {0x2, 0x4e24, @empty}, 'veth1_macvtap\x00'}) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000300)={0x0, 0x5a, &(0x7f0000000280)={&(0x7f0000000a80)=@newtaction={0x14, 0x30, 0x871a15abc695fa3d, 0x70bd27, 0x25dfdbfe}, 0x14}, 0x1, 0x0, 0x0, 0x40005}, 0x44095) sendmsg$NFNL_MSG_CTHELPER_NEW(0xffffffffffffffff, &(0x7f0000000600)={0x0, 0x0, &(0x7f00000004c0)={0x0, 0x14}, 0x1, 0x0, 0x0, 0x24000800}, 0x4040040) bpf$BPF_GET_MAP_INFO(0xf, &(0x7f0000000680)={r7, 0x58, &(0x7f0000000600)}, 0x10) bpf$PROG_LOAD(0x5, &(0x7f0000000140)={0x3, 0x8, &(0x7f0000002340)=ANY=[@ANYBLOB="620af8ff0c200021bfa100000000000007010000f8ffffffb702000003000000bd1200000000000085000000d0000000b70000000000000095000000000000003fba6a7d36d9b18ed812a2e2c49e8020a6f4e0e4a9446ca2b5f1cc1a100a9af698393aa0f3881f9c24aa56f15199fad0093c59d66b5ece9f36c70d0f010c5077da80fb982c1e9400c603146cea484a415b76966118b64f751a0f241b072e90080008002d75593a280000c93e64c227c95aa0b784625704f07a72c2918451ebdcf4cef7f9606056fe5c34664c0af9360a1f7a5e6b607130c89f18c0c1089d8b85880000c29c48b45ef4adf634be763288d01aa27ae8b09e13e79ab20b0b8ed8fb7a68af2ad0000000000000006f803c6468082089b302d7bff8f06f7f918d65eae391cb41336023cdcedb5e0125ebbcebddcf10cb2364149215108355ee570f8078be5cab389cd65e7133719acd97cfa107d40224edc5465a932b77e74e802a0d42bc6099ad23000000803a90bce6dc3a13871765df961c2ed3b1006ef6c1ff0900000000000010c63a949e8b7955394ffa82b8e942c89112f40cfd7c3a1d37a6ab87b1586602d985430cea0162ab3fcf4509c926abfb076719237c8d0e60b0eea24492a660583eecdbf5bcd3de3a83209da17a0faf60fd6ad9b97aa5fa68480366c9c6fd6fa5043aa3926b81e3b59c9f081d6a08000000ea2b1a52496dfcaf99431412fd134a996382a1a04d5bb924cfe5f3185418d60532be9c4d2ec7c32f2095e63c8cdc28f74d043ed8dba2f23b01a9aeb980aff9fa3a64709270c701db801f44cf945b7632f32030916f89c6dad7603f2ba2a790d62d6faec2fed44da4928b30142bdda5e6c5d50b83bae616b5054d1e7c13b1355d6f4a8245eaa4997da9c77af4c0eb97fca585ec6bf58351d599e9b61e8caab9c70764b0a8a7583c90b3433b809bdb9fbd48bc873495cbff8a41326eea31ae4e0f75057df3c9d13330ca006bce1a84521f14518c9b476fccbd6c712016219848624b87cec2dbe98223a0eb4fa39f6b5c02e6d6d90756ff57902a8f57010000009700ce0b4b8bc22941330000000000000000000300000000000000000000000010008bc0d955f2a83366b99711e6e8861c46495ba585a4b2d02edc3e28dd279a896249ed85b9806f0b6c4a000000002b43dcacc413b48dafb7a2c8cb482bac0ac502d9ba96ffffff7f00000000df73be83bb7d5ad883ef3b7cda42013d53046da21b40216e14ba2d6af8656bfff17addaedab25b30002abbba7fa725f38400be7c1f001b2cd317902f19e385be9e48dccff72943327d830689da6b53ffffffff631c7771429d1200000033ed846197fcff5e1c7c3d1d6e3a52872baef9753fffffffffffffe09fec2271fe010cd7bb2366fde4a59429738fcc917a57f94f6c453cea623cc5ee0c2a5ff870ce5dfd3467decb05cfd9fcd41df54cdbd9d10a64c108285e71b5565b1768ee58969c41595229df17bcad70fb4021428ce978275d5bc8955778567bc79e13b78249788f11f708008b75d4fe32b561d46ea3abe0fa4d30dc94ef241875f3b4b6ab7929a57affe7d7fa29822aea68a660e717a04becff0f719107000000000000002d7e927123d8ecbbc55bf404571be54c72d978cf2804107f0238abccd32368e57040906df0042e19000000000000002c06f815312e086dd022c074eb8a322fb0bf47c0a8d154b405c37feaf3dd95f6ef44cd1fe582786105c7df8be4877084d4173731efe895efc71f665c4d75cf2458e35d2c9062ece84c99e061887a20639b41c8c12ee86c50804042b3eac1f879b136345cf67ca3fb2b5e518a75f9e7d7101d5e186c489b3a06fb99e0aa7f23a054de2f4d92d6bd72ee2c9fdc75aaaf1e3e483b4ad055e4af403269b4a39ce40293947d9a631bcbf3583784acbda216550d7aec6b79e30cbd128f54c2d3335457ac0eaaa99bf0bdc14ae358c3b377327ac9ecc34f24c9ae153ec60ac0694da85bff9f5f4df9b3fdf242b985bf16b99c9cc0ad1857036f1a985f369191ae954febb3df464bfe0f773ee9afe72f32a2befb89d3777399f5874c553a2ebe9061fe86e669642e09bb6d163118e4cbe024fd452277c3887d6116c6cc9d8046c216c1f8a9778cb26e22a2a998de5eaeadea2a40da8daccf080842a486721737390cbf3a74cb2003efb9a101b51ab63e9600040000b8a8c9ae3d14f93100c2e0893862eef552fcde2981f48c482bde6e4a4304e50c349f4f9ecee27defd83871c5191e10096e7e60fc3541a2c905a1a95e9571bf38aebd15172f94e3245c582909e2a3bce109b6000000000000000000d6d5210d7560eb92d6a97a27602b81f7636df1535bef1497f90100000000000000abf9010000007740890200d627e87306703be8672dc84eeadba6a41891c170d1ab57075228a9f46ed9bd1f08fb8191bbab2dc51de3a61f0868afc4294859323e7a45319f18101288a0268893373750d10a3fc22dd704e4214de5946912d6c98cd1a900d2eca55f74a23641f61f2d5b308cf0d031b0c7f0ced69b93e9960ff5f76062adae283d9756237badf4e7965bbe2777e808fcba821aa8e8c5c39609ff85000000000000c1fee30a3f7a85d1b29e58c77685efc0ceb1c8e5729c66018d169fc03aa188546b3ad2a182068e1e3a0e2505bc7f41019645466a31c72ad53bc19faa5401120000793ac48c1b539c75ab40743b00020000a1f68df75cf43f8ecc8d3726602111b40e761fd210a1920382f14d12ca3c3431ee97471c781d0d1280fb00818654a53b6df4b2c97cc1c98d85fda8f80fe908b65550b441233151122b41a8d73062197655b7f0469250a5989cef0e10773920ed3ccee42d2c3eb80159da5c002511e6eb93842054cfce2ac306cb6e472db3fd67a49b6855a694a8d359add43907003223a47a7fae4f3748d5a432825bc40a03aaef1c8488d86dc211dd2a3ba71e0f45492ef1f8b65ccb3dcd251a61b152d02c29ca0a3328fa7753a5cddea1acaae55ae8263fb284b7a6ab2a8826c1b948207c498cf4824ab1ea3225a53072423b907c6682f8999e0311da5b8378bc841e1787e3a8128dda381a26cb2b365702ff8a27831375b2ddaa2f56e21169f7ca4fd9655ccd4a584acd244e965a0afedaff7c415ff682a4044b3381cc2df28278c9a6824c52048a7cfabda294925cc0956bffa8e950ff5e49f41ae600d830207bf728cd9807933c3c16d80bbea611a18becc2dc38ca0a6f5740f340b76edcd1f539bd43007231dcef58c7b88b5aeedaf9626cb51ce1737c10ab37d4f98a934b0f900e0eb639878a1200629f5503cf679154d27681d7a3744cbcd42af59407c9c8e39c5271868917954e604352ba26171d004f1cb2976fab3fa19c7d3ef9678bff79f5155524f061378f94fb453786c3a6f78b10d383b49e31d1568bd43ee34ce6e6be235aa6207285665c2fba773671da41959f51610963b48930658e2d6125a26085001345b0473240b7e5e91811312c43663e76f711d7219ecdec75c7ea1cf0f8f8fff40247d59bbde2ebb8659197e0f37a71be1b12a182ed7de3acba28561a04b807f7a4647e2ea6d8fb92541d07c3d5e4ba077d3cad9f8ba1919592014c00c8eccb2ca5d48ba7b1c3fb185a4bb79700cf51f818b0c701c8de47d12281a67bdaf4b0c50bee9e8f5936250df2e15c1172e7ea6619f7db330700d1e9e42a035e6fd532f61fbfed9c4a7124a1e38eee50a6bbcd1d4e3f68c3f27dd9a70f1a7c6046237ddfb0b26e197322226367d998010458cd4df10af249ce717f6f45e5176e0ddae3054d7289d4e13ab0912703ee39ce264572b89194fdf7acecc35cf8309d4b680a08eed367dad855fce210f1a7c7222dd360eafb4bef7d58bf83362930af6e3f3f851abdc0003bdf9401b533019e90feb069189100007a82df8d9b5f44ebf9355e7b1b01c9470608d4f306d21004730396a4d6c6d46e1ffac97aa93c36123532a36186575266be4981c847160079421d0137801e553069f8d025c40f287378810defc7f2ed4e15f6af17b21153394f8bcfa6a23a77c8d61c9bbc127a57b8d631f36558d9093dee08bc53d97a8003363421738650a26c8fd87b13026799caf58e59951b125e7f161ca34e2c0dd65a23d01a3cb191e743de07247c7f993cf01166fa2ac1ba02f60550e63a7f50422e478c6b5d87f9bd0567a279a9d85a3c0db25c43bd0529ad783b9d64aaac1b793afb44b7126e17d2b7c0d6be650de7eeef3f3605af344015d03c3e7819145cb9fe1978c98bf9cf10773db59505ae33708c728844c872dfd2cb0b29754f928c59306ce105ca18cb72f0944d0e4fea0a0abd0285bdaf1b000000c089d640c2facb0d1e6243873ac4b1e1068c45c715b68effb7d58d1f9e726dbf6bd910ca4ce0e075658ede42192cf393a50dcc197b03402fed75083628e5dd38213d353b9049e71f037064b05e73ec00c710f1ffc5737d397d555d1cf8859cc05fea8dc3c6a5b3b6fa1c81707479db1833d593a271253aa11efdb36b74784f2fc286814848022e8ee541bc179813297a0a4cc3c8f80c28701185bea091f32475e859479b734727afc110e1abcff460172fd1b42e3c0e2a4bf94a060069000010000087c7572a1e7596f89e5c3d5e70640c90815f77b7b13d0000000085a1e1e84900000000000000000000000000b422fc160a458ee5a91a2471e6e56fdabec6c73ce8983fc68f0b7cdcdde632e6f54a07620e8aa116ce9e84fc3cd5e8288a333dcebb233da9186796995ba69487d8f77d2f8800f02d690fc70a08b231cad1bdcf3740a95d4dd1cfe0f417f275493cf33b19ffff93dfdaf7eb00b8ad87cdf7c21bab5af8e2bac54ee5597e6508c1158124a538c36f9bb11fea7d8b8c7e954b1bc7811654a6636b33f271d0923e9ecd1b724b8feffadfc23c07000000f0785fb722f346d6a5dffe1884d4d0cd8f00000092c85ed44db68ab800000000000000406e6ed9b219ad07125381087298e75965d1cc5932ddf9e66351ba332a34bee3e3d562c914c629933f0b8724cf680889ade72558d191d9890c69a718f9018586c5131c8dc8e0379bafda1a0fd2997ff115215ce23dca8db7236c1554cdaaadcce2f31834c1bd1908d8e1b361034db56be76acb7654a195bc3e98df3a5dffd5b0783883ef7da3433110e37f7c7cb7f3800de7f99abf910d6949e062747a9c87dcfcc716d6a9c0ec53b9cffe3cfd1df69a76f373d7f997edb9b80bdea1a99c2a6fbb25e035deadaadd7917ebfedd6304a19491769476208684e343f86b4d55a7dbbb07283cb1e35a139d24ebc5b4f8e35a82d3a7f84cb1e02a5a92b53567088be0b1ca023ccd518c0e0715b1c8760801a419ebd2e26440ff7493019bdb655cc88d72d6d7b6bca5a2e19b63ec52fcc49a729f11ab377f7132c543d29646a9378eea0761b7ed9d2172e33ed87c6513c843b180cc00000000006bedf2ed716ca43a941119b96d82b26d9061de240d85ec2cfa462bd52104489bb7a7548d7cc53627031e909c69cb824233975a1ea645de63522407c3a240a37e946f30ebf075ea97846a0a8d2286f3f446b1b99ab83a12ddf8a1c06294eadc3eb3e339591afd5c00000000000000000000000000000000000000000000000000579dad8347a3d16976bb7483840b32db0158fb6c809349333325a7866ca5d3133e33ef1a183cefdb65a79fa71800988c8445029e024822dbcfcab49c3a0aec9bd43e6e14078b260700d849a2aa14c9b593f6dcb1de334c065ecfd65031606e55949c185bcda9fde4f9b46a76b8a24bbcd31b22373eb0473248150cd179405ee1af1183b0c0ce3483dc1d9bf732b0751b78fb211d6706b55960c6431afbc02b3c7e08086573939290bb9e590a3875f02a828bf209d0000000000000000000000000001545f0ec539c3b58facd2f62dc3307a6c91d6b"], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x40f00, 0x12, '\x00', 0x0, @sched_cls}, 0x94) 10m0.026174128s ago: executing program 1 (id=3075): r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000000), 0x48241, 0x0) (async) r1 = socket$inet6_mptcp(0xa, 0x1, 0x106) setsockopt$inet6_tcp_TCP_CONGESTION(r1, 0x6, 0xd, &(0x7f0000000040)='hybla', 0x5) (async) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f00000000c0)={'syzkaller1\x00', 0x6bf1c2d5adba8c32}) (async) r2 = socket$kcm(0x2, 0xa, 0x2) ioctl$SIOCSIFHWADDR(r2, 0x8914, &(0x7f0000000180)={'syzkaller1\x00', @link_local={0x1, 0x80, 0xc2, 0x0, 0x0, 0xe}}) (async) write$tun(r0, &(0x7f0000000a40)={@val={0x0, 0xf7}, @void, @eth={@dev={'\xaa\xaa\xaa\xaa\xaa', 0x1e}, @dev={'\xaa\xaa\xaa\xaa\xaa', 0x35}, @void, {@ipv6={0x86dd, @gre_packet={0x8, 0x6, "c91068", 0x54, 0x2f, 0x1, @empty, @mcast2, {[@fragment={0x0, 0x0, 0x81, 0x0, 0x0, 0x0, 0x68}, @srh={0x1d, 0x0, 0x4, 0x0, 0x8, 0x60, 0x6}], {{0x0, 0x0, 0x1, 0x1, 0x0, 0x1, 0x0, 0x1, 0x880b, 0x0, 0x1}, {0x0, 0x0, 0x1}, {0x0, 0x0, 0x0, 0x1}, {0x8, 0x88be, 0x1, {{0x9, 0x1, 0x5, 0x1, 0x1, 0x0, 0x2, 0x8}, 0x1, {0x48a}}}, {0x8, 0x22eb, 0x4, {{0x7, 0x2, 0xe, 0x0, 0x0, 0x0, 0x0, 0x3}, 0x2, {0x9, 0x5, 0x0, 0x1f, 0x0, 0x1, 0x1, 0x0, 0x1}}}, {0x8, 0x6558, 0x4}}}}}}}}, 0x8e) 9m59.891234926s ago: executing program 0 (id=3077): r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000300)=ANY=[@ANYBLOB="12000000040000000400000006"], 0x50) bpf$BPF_LINK_CREATE(0x1c, &(0x7f00000006c0)={0xffffffffffffffff, r0, 0x26, 0x0, @val=@iter={0x0}}, 0x20) r1 = socket(0x2, 0x3, 0xff) r2 = socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$nl80211(&(0x7f0000000080), 0xffffffffffffffff) bpf$BPF_BTF_LOAD(0x12, 0x0, 0x0) socket$inet_udp(0x2, 0x2, 0x0) syz_emit_ethernet(0x4a, &(0x7f00000008c0)=ANY=[@ANYBLOB="aaaaaaaaaaaa00000000000086dd600a843500142f00fe8000000000000000000000000000bbfe8000000000000000000000000000aa3c0022ebcf90fc88d287358685527eaaded261de0b339544df6a6d0dd926db", @ANYRES32=0x41424344, @ANYRES32=0x41424344, @ANYBLOB="5000000090780002"], 0x0) syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r3 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) sendmsg$IEEE802154_ADD_IFACE(r3, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000000)=ANY=[@ANYBLOB='4\x00\x00\x00', @ANYRES16, @ANYBLOB="01002dbd7000fcdbdf252100000009001f00706879320000000005002000000000000a000100"], 0x34}, 0x1, 0x0, 0x0, 0x20000080}, 0x4000000) r4 = socket$alg(0x26, 0x5, 0x0) bind$alg(r4, &(0x7f0000000380)={0x26, 'rng\x00', 0x0, 0x0, 'drbg_nopr_hmac_sha512\x00'}, 0x58) r5 = socket$nl_rdma(0x10, 0x3, 0x14) sendmsg$RDMA_NLDEV_CMD_NEWLINK(r5, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000340)={&(0x7f0000000300)={0x10, 0x1403, 0x1, 0x70bd2c, 0x25dfdbfc}, 0x10}, 0x1, 0x0, 0x0, 0x44}, 0x0) setsockopt$ALG_SET_KEY(r4, 0x117, 0x1, 0x0, 0x0) socket$nl_generic(0x10, 0x3, 0x10) accept(0xffffffffffffffff, 0x0, 0x0) bpf$PROG_LOAD_XDP(0x5, &(0x7f00000000c0)={0x6, 0x3, &(0x7f0000000680)=ANY=[@ANYBLOB="1800000002000000000000000000000095"], 0x0}, 0x94) bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000140)={&(0x7f0000000000)=ANY=[@ANYBLOB="9feb010018000000000000003000000030000000020000000a0000000000000a07000000080000000000000b0400000009000000010000130c0000000740"], 0x0, 0x4a, 0x0, 0x1, 0x7fe, 0x10000}, 0x28) bpf$PROG_LOAD(0x5, &(0x7f00000007c0)={0x10, 0x8, &(0x7f0000000400)=ANY=[@ANYRESDEC=r2, @ANYRESOCT=r3], 0x0, 0xc000000, 0x0, 0x0, 0x0, 0x44, '\x00', 0x0, @fallback=0x18, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0xfffffffd}, 0x94) ioctl$SIOCSIFHWADDR(0xffffffffffffffff, 0x8914, &(0x7f0000000000)={'macvlan0\x00', @random="bdbd67c12945"}) write$cgroup_subtree(0xffffffffffffffff, &(0x7f0000000000)=ANY=[@ANYRES16=r0], 0xfdef) r6 = bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000700)={0x6, 0x3, &(0x7f0000000680)=ANY=[], &(0x7f0000000440)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x3}, 0x94) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000600)={r6, 0x5, 0xb68, 0x0, &(0x7f0000000000)='%', 0x0, 0xd01, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2}, 0x48) ioctl$F2FS_IOC_RELEASE_VOLATILE_WRITE(r1, 0xf504, 0x0) sendmmsg$inet(r1, &(0x7f00000002c0)=[{{&(0x7f0000000000)={0x2, 0x4e21, @multicast1}, 0x10, &(0x7f0000000680)=[{&(0x7f00000001c0)="8dbe9de29a1823474186f72aea11678235a71ee4828c75d76df69110ae2b2baa4ca3f238a147af68c7999e831fc3594436dea27d", 0x34}], 0x18, &(0x7f0000001500)=[@ip_pktinfo={{0x1c, 0x0, 0x8, {0x0, @local, @local}}}], 0x20}}], 0x1, 0x20044000) 9m58.486311738s ago: executing program 0 (id=3078): r0 = accept4$packet(0xffffffffffffffff, &(0x7f0000000000)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @random}, &(0x7f0000000040)=0x14, 0x80000) (async) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x44, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) (async) r1 = bpf$MAP_CREATE(0x0, &(0x7f00000000c0)=ANY=[@ANYBLOB="01000000128001007f00000001"], 0x48) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000380)={{r1}, &(0x7f00000003c0), &(0x7f0000000400)}, 0x20) (async) r2 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_CREATE(r2, &(0x7f0000000180)={0x0, 0x0, &(0x7f00000003c0)={&(0x7f0000001480)=ANY=[@ANYBLOB="50000000020605000000000000000000000000010500040001000000059f6fc744eb8dd362324cad143f000100070000000c0007800800869f370e06000000000505000500020000000900020073797a30000000000c00030068617368b48484a81124cdf2fce65b6beb834690985e7225a163a939e6f37739fede1eff6b60945d3103eee9cf333f1a9f8a15c9066e26b7919624b19904bc5a4f9bcb022a2fdd58fc28940a7a1d474e51972408e9eebbe2c468594473d0715d8e70d290f2c6e65412aa887994e1c091e78c253eb3862237ff1a58a6c963fc5f96650ce0879b92ef7bdbe32c909726ebbee0908ebe690fdd5b7a09"], 0x50}}, 0x20008010) (async) bpf$MAP_GET_NEXT_KEY(0x4, &(0x7f0000001440)={r1, &(0x7f0000000000), &(0x7f0000000440)=""/4096}, 0x20) (async) ioctl$XFS_IOC_GETBMAPX(r0, 0xc0205838, &(0x7f00000000c0)={0x2, 0x2, 0xf, 0x2, 0x8, 0x1, 0x9}) (async) r3 = openat$tun(0xffffffffffffff9c, &(0x7f0000000000), 0x2, 0x0) ioctl$TUNSETIFF(r3, 0x400454ca, &(0x7f0000000200)={'syzkaller1\x00', 0x5001}) (async) r4 = socket$inet_udp(0x2, 0x2, 0x0) (async) r5 = socket$nl_route(0x10, 0x3, 0x0) r6 = socket$unix(0x1, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r6, 0x8933, &(0x7f0000000100)={'syzkaller1\x00', 0x0}) sendmsg$nl_route_sched(r5, &(0x7f00000012c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000000c0)=@newqdisc={0x30, 0x24, 0x601, 0x0, 0x0, {0x0, 0x0, 0x0, r7, {}, {0xfff1, 0xffff}}, [@qdisc_kind_options=@q_ingress={0xc}]}, 0x30}}, 0x0) (async) sendmsg$nl_route_sched(r5, &(0x7f0000000580)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000001300)=@newtfilter={0x80, 0x2c, 0x601, 0x0, 0x0, {0x0, 0x0, 0x0, r7, {0xb, 0x7}, {0xfff1, 0xffff}, {0x300}}, [@filter_kind_options=@f_matchall={{0xd}, {0x4c, 0x2, [@TCA_MATCHALL_ACT={0x48, 0x2, [@m_ct={0x44, 0x1, 0x0, 0x0, {{0x7}, {0x1c, 0x2, 0x0, 0x1, [@TCA_CT_PARMS={0x18, 0x1, {0x0, 0x0, 0x3}}]}, {0x4}, {0xc}, {0xc}}}]}]}}]}, 0x80}}, 0x0) ioctl$sock_inet_SIOCSIFFLAGS(r4, 0x8914, &(0x7f0000000200)={'syzkaller1\x00', 0x1}) write$tun(r3, &(0x7f0000000040)=ANY=[@ANYBLOB="03031b0030003200060063"], 0x76) bpf$PROG_LOAD(0x5, &(0x7f0000000440)={0x15, 0x6, &(0x7f00000006c0)=ANY=[@ANYBLOB="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"], &(0x7f0000000080)='GPL\x00', 0x5, 0x29e, &(0x7f000000cf3d)=""/195, 0x0, 0x0, '\x00', 0x0, @sk_reuseport, 0xffffffffffffffff, 0x6}, 0x70) 9m58.134166703s ago: executing program 1 (id=3081): socket$nl_generic(0x10, 0x3, 0x10) r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x7101}) r1 = openat$tun(0xffffffffffffff9c, &(0x7f0000000400), 0x0, 0x0) close(r1) r2 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r2, 0x0, 0x4804) r3 = socket$nl_route(0x10, 0x3, 0x0) r4 = socket$nl_netfilter(0x10, 0x3, 0xc) r5 = socket$key(0xf, 0x3, 0x2) sendmsg$key(r5, &(0x7f0000000180)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000000)=ANY=[@ANYBLOB="020afa09070000002abd7000fddbdf2505001a00fe80000000000000000000000000d6e9fc7a2fe500ca00aaac1e01010000000000000000"], 0x38}}, 0x20000010) sendmsg$NFT_BATCH(r4, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000b00)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a20000000000a01030000000000000000070000080900010073797a300000000084000000090a010400000000000000000700000008000a40000000000900020073797a30000000000900010073797a3000000000080005400000000d400012803c0001800a0001006c696d69740000002c000280080004400000000108000340060000040c000140fffffffffffffff80c000240000000000000000908000340000001"], 0xcc}, 0x1, 0x0, 0x0, 0x40000}, 0x20050800) ioctl$sock_SIOCGIFINDEX(r3, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r3, &(0x7f0000000000)={0x0, 0x4b, &(0x7f0000000580)={&(0x7f0000000180)=@newqdisc={0x58, 0x24, 0x4ee4e6a52ff56541, 0x9, 0x35dfdbfd, {0x0, 0x0, 0x0, r6, {0x0, 0xb}, {0xffff, 0xffff}, {0x9, 0x7}}, [@qdisc_kind_options=@q_sfb={{0x8}, {0x2c, 0x2, @TCA_SFB_PARMS={0x28, 0x1, {0x7, 0x6517ab89, 0xffffffff, 0x2, 0x400401, 0x7, 0x0, 0x3, 0x79c43107}}}}]}, 0x58}, 0x1, 0x0, 0x0, 0x40088c1}, 0x20000800) sendmsg$nl_route_sched(r3, &(0x7f00000003c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000680)=@newqdisc={0x30, 0x24, 0x4ee4e6a52ff56541, 0x70b926, 0x25dfdc01, {0x0, 0x0, 0x0, r6, {0x0, 0x7}, {0x1, 0xb}, {0xffff, 0x4}}, [@qdisc_kind_options=@q_pie={{0x8}, {0x4}}]}, 0x30}, 0x1, 0x0, 0x0, 0x240448a0}, 0x0) ioctl$SIOCSIFHWADDR(r1, 0x8914, &(0x7f0000002280)={'syzkaller0\x00', @multicast}) r7 = socket$packet(0x11, 0x3, 0x300) setsockopt$packet_int(r7, 0x107, 0xf, &(0x7f0000000100)=0x207, 0x4) socket$inet_mptcp(0x2, 0x1, 0x106) setsockopt$inet_sctp_SCTP_SOCKOPT_CONNECTX_OLD(0xffffffffffffffff, 0x84, 0x6b, 0x0, 0x0) r8 = openat$nci(0xffffffffffffff9c, &(0x7f0000000200), 0x2, 0x0) ioctl$IOCTL_GET_NCIDEV_IDX(r8, 0x0, &(0x7f0000000280)) r9 = socket(0x10, 0x3, 0x0) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000400)={0xffffffffffffffff, 0xffffffffffffffff}) r11 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r11, &(0x7f0000000400)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000140)=@newlink={0x4c, 0x10, 0x40d, 0x70bd3a, 0x0, {0x0, 0x0, 0x0, 0x0, 0x40109, 0xe000}, [@IFLA_LINKINFO={0x2c, 0x12, 0x0, 0x1, @gtp={{0x8}, {0x20, 0x2, 0x0, 0x1, [@IFLA_GTP_LOCAL6={0x14, 0x8, @empty}, @IFLA_GTP_CREATE_SOCKETS={0x5, 0x5, 0x1}]}}}]}, 0x4c}, 0x1, 0x0, 0x0, 0x4048044}, 0x0) ioctl$sock_SIOCGIFINDEX(r10, 0x8933, &(0x7f0000000040)={'bridge_slave_1\x00', 0x0}) sendmsg$nl_route(r9, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000001c0)=ANY=[@ANYBLOB="7c0000001000010400"/20, @ANYRES32=r12, @ANYBLOB="00000000000000005c001280110001006272696467655f736c617665000000004400058005000500070000000500", @ANYRES8=r9], 0x7c}}, 0x0) socket$inet_tcp(0x2, 0x1, 0x0) sendto$packet(r7, &(0x7f00000002c0)="05031c00d3fc140000004788031c09102c28", 0xfdef, 0x4, &(0x7f0000000140)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @multicast}, 0x14) 9m54.52532045s ago: executing program 0 (id=3084): r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000100)=ANY=[@ANYBLOB="480000001000010400"/20, @ANYRES32=0x0, @ANYBLOB="3f00000010100200280012800b0001080072696467650000180002800c002e0003000000030000000510260001000000"], 0x48}}, 0x0) 9m53.751356182s ago: executing program 0 (id=3086): bpf$PROG_LOAD(0x5, &(0x7f0000000440)={0xe, 0x6, &(0x7f0000000000)=ANY=[@ANYBLOB="050000000000000071114700000000008510000002000000850000000500000095000000000000009500a50500000000"], &(0x7f0000000080)='GPL\x00', 0x5, 0x29e, &(0x7f000000cf3d)=""/195, 0x0, 0x0, '\x00', 0x0, @sk_skb, 0xffffffffffffffff, 0x6}, 0x70) r0 = accept4$x25(0xffffffffffffffff, &(0x7f0000000040)={0x9, @remote}, &(0x7f0000000180)=0x12, 0x0) mmap(&(0x7f0000334000/0x2000)=nil, 0x2000, 0x200000c, 0x3032, r0, 0x0) r1 = openat$tun(0xffffffffffffff9c, &(0x7f0000000140), 0x0, 0x0) ioctl$TUNSETIFF(r1, 0x400454ca, &(0x7f00000000c0)={'syzkaller1\x00', 0x4c02}) readv(r1, &(0x7f0000000080)=[{0x0}, {&(0x7f0000000980)=""/4096, 0x734}], 0x2) r2 = bpf$MAP_CREATE(0x0, &(0x7f0000000440)=ANY=[@ANYBLOB="0500000001000000040000000800000000000000", @ANYRES32, @ANYBLOB='\x00'/20, @ANYRES32=0x0, @ANYRES32, @ANYBLOB="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"], 0x50) close(0x3) r3 = bpf$MAP_CREATE(0x0, &(0x7f0000000840)=ANY=[@ANYBLOB="230000000800000002000000ffff000005"], 0x48) ioctl$EXT4_IOC_CLEAR_ES_CACHE(r3, 0x6628) r4 = bpf$PROG_LOAD(0x5, &(0x7f0000000380)={0x1, 0xd, &(0x7f0000000300)=ANY=[@ANYBLOB="18000000000000000000000000000000850000002e00000018110000", @ANYRES32=r2, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000100000095"], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f00000002c0)={r4, 0x0, 0xe, 0x0, &(0x7f00000008c0)="7a7fa22c2aff88df53ef2a2d280f", 0x0, 0xa00, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x50) r5 = socket$vsock_stream(0x28, 0x1, 0x0) bind$vsock_stream(r5, &(0x7f0000000200)={0x28, 0x0, 0xffffffff}, 0x10) r6 = socket$kcm(0x2, 0xa, 0x2) r7 = socket$unix(0x1, 0x1, 0x0) ioctl$int_in(r7, 0x5421, &(0x7f0000000100)=0x9) r8 = socket$unix(0x1, 0x1, 0x0) bind$unix(r8, &(0x7f0000000000)=@file={0x1, './file0\x00'}, 0x6e) listen(r8, 0x0) connect$unix(r7, &(0x7f0000000080)=@file={0x1, './file0\x00'}, 0x6e) connect$unix(r7, &(0x7f0000000300)=@file={0x1, './file0\x00'}, 0x6e) ioctl$TUNSETVNETHDRSZ(r1, 0x400454d8, &(0x7f0000000100)=0x730) ioctl$TUNSETOFFLOAD(r1, 0x400454d0, 0x4) ioctl$SIOCSIFHWADDR(r6, 0x8914, &(0x7f0000000000)={'syzkaller1\x00', @link_local}) 9m42.762056702s ago: executing program 32 (id=3081): socket$nl_generic(0x10, 0x3, 0x10) r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x7101}) r1 = openat$tun(0xffffffffffffff9c, &(0x7f0000000400), 0x0, 0x0) close(r1) r2 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r2, 0x0, 0x4804) r3 = socket$nl_route(0x10, 0x3, 0x0) r4 = socket$nl_netfilter(0x10, 0x3, 0xc) r5 = socket$key(0xf, 0x3, 0x2) sendmsg$key(r5, &(0x7f0000000180)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000000)=ANY=[@ANYBLOB="020afa09070000002abd7000fddbdf2505001a00fe80000000000000000000000000d6e9fc7a2fe500ca00aaac1e01010000000000000000"], 0x38}}, 0x20000010) sendmsg$NFT_BATCH(r4, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000b00)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a20000000000a01030000000000000000070000080900010073797a300000000084000000090a010400000000000000000700000008000a40000000000900020073797a30000000000900010073797a3000000000080005400000000d400012803c0001800a0001006c696d69740000002c000280080004400000000108000340060000040c000140fffffffffffffff80c000240000000000000000908000340000001"], 0xcc}, 0x1, 0x0, 0x0, 0x40000}, 0x20050800) ioctl$sock_SIOCGIFINDEX(r3, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r3, &(0x7f0000000000)={0x0, 0x4b, &(0x7f0000000580)={&(0x7f0000000180)=@newqdisc={0x58, 0x24, 0x4ee4e6a52ff56541, 0x9, 0x35dfdbfd, {0x0, 0x0, 0x0, r6, {0x0, 0xb}, {0xffff, 0xffff}, {0x9, 0x7}}, [@qdisc_kind_options=@q_sfb={{0x8}, {0x2c, 0x2, @TCA_SFB_PARMS={0x28, 0x1, {0x7, 0x6517ab89, 0xffffffff, 0x2, 0x400401, 0x7, 0x0, 0x3, 0x79c43107}}}}]}, 0x58}, 0x1, 0x0, 0x0, 0x40088c1}, 0x20000800) sendmsg$nl_route_sched(r3, &(0x7f00000003c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000680)=@newqdisc={0x30, 0x24, 0x4ee4e6a52ff56541, 0x70b926, 0x25dfdc01, {0x0, 0x0, 0x0, r6, {0x0, 0x7}, {0x1, 0xb}, {0xffff, 0x4}}, [@qdisc_kind_options=@q_pie={{0x8}, {0x4}}]}, 0x30}, 0x1, 0x0, 0x0, 0x240448a0}, 0x0) ioctl$SIOCSIFHWADDR(r1, 0x8914, &(0x7f0000002280)={'syzkaller0\x00', @multicast}) r7 = socket$packet(0x11, 0x3, 0x300) setsockopt$packet_int(r7, 0x107, 0xf, &(0x7f0000000100)=0x207, 0x4) socket$inet_mptcp(0x2, 0x1, 0x106) setsockopt$inet_sctp_SCTP_SOCKOPT_CONNECTX_OLD(0xffffffffffffffff, 0x84, 0x6b, 0x0, 0x0) r8 = openat$nci(0xffffffffffffff9c, &(0x7f0000000200), 0x2, 0x0) ioctl$IOCTL_GET_NCIDEV_IDX(r8, 0x0, &(0x7f0000000280)) r9 = socket(0x10, 0x3, 0x0) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000400)={0xffffffffffffffff, 0xffffffffffffffff}) r11 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r11, &(0x7f0000000400)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000140)=@newlink={0x4c, 0x10, 0x40d, 0x70bd3a, 0x0, {0x0, 0x0, 0x0, 0x0, 0x40109, 0xe000}, [@IFLA_LINKINFO={0x2c, 0x12, 0x0, 0x1, @gtp={{0x8}, {0x20, 0x2, 0x0, 0x1, [@IFLA_GTP_LOCAL6={0x14, 0x8, @empty}, @IFLA_GTP_CREATE_SOCKETS={0x5, 0x5, 0x1}]}}}]}, 0x4c}, 0x1, 0x0, 0x0, 0x4048044}, 0x0) ioctl$sock_SIOCGIFINDEX(r10, 0x8933, &(0x7f0000000040)={'bridge_slave_1\x00', 0x0}) sendmsg$nl_route(r9, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000001c0)=ANY=[@ANYBLOB="7c0000001000010400"/20, @ANYRES32=r12, @ANYBLOB="00000000000000005c001280110001006272696467655f736c617665000000004400058005000500070000000500", @ANYRES8=r9], 0x7c}}, 0x0) socket$inet_tcp(0x2, 0x1, 0x0) sendto$packet(r7, &(0x7f00000002c0)="05031c00d3fc140000004788031c09102c28", 0xfdef, 0x4, &(0x7f0000000140)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @multicast}, 0x14) 9m37.93887246s ago: executing program 33 (id=3086): bpf$PROG_LOAD(0x5, &(0x7f0000000440)={0xe, 0x6, &(0x7f0000000000)=ANY=[@ANYBLOB="050000000000000071114700000000008510000002000000850000000500000095000000000000009500a50500000000"], &(0x7f0000000080)='GPL\x00', 0x5, 0x29e, &(0x7f000000cf3d)=""/195, 0x0, 0x0, '\x00', 0x0, @sk_skb, 0xffffffffffffffff, 0x6}, 0x70) r0 = accept4$x25(0xffffffffffffffff, &(0x7f0000000040)={0x9, @remote}, &(0x7f0000000180)=0x12, 0x0) mmap(&(0x7f0000334000/0x2000)=nil, 0x2000, 0x200000c, 0x3032, r0, 0x0) r1 = openat$tun(0xffffffffffffff9c, &(0x7f0000000140), 0x0, 0x0) ioctl$TUNSETIFF(r1, 0x400454ca, &(0x7f00000000c0)={'syzkaller1\x00', 0x4c02}) readv(r1, &(0x7f0000000080)=[{0x0}, {&(0x7f0000000980)=""/4096, 0x734}], 0x2) r2 = bpf$MAP_CREATE(0x0, &(0x7f0000000440)=ANY=[@ANYBLOB="0500000001000000040000000800000000000000", @ANYRES32, @ANYBLOB='\x00'/20, @ANYRES32=0x0, @ANYRES32, @ANYBLOB="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"], 0x50) close(0x3) r3 = bpf$MAP_CREATE(0x0, &(0x7f0000000840)=ANY=[@ANYBLOB="230000000800000002000000ffff000005"], 0x48) ioctl$EXT4_IOC_CLEAR_ES_CACHE(r3, 0x6628) r4 = bpf$PROG_LOAD(0x5, &(0x7f0000000380)={0x1, 0xd, &(0x7f0000000300)=ANY=[@ANYBLOB="18000000000000000000000000000000850000002e00000018110000", @ANYRES32=r2, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000100000095"], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f00000002c0)={r4, 0x0, 0xe, 0x0, &(0x7f00000008c0)="7a7fa22c2aff88df53ef2a2d280f", 0x0, 0xa00, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x50) r5 = socket$vsock_stream(0x28, 0x1, 0x0) bind$vsock_stream(r5, &(0x7f0000000200)={0x28, 0x0, 0xffffffff}, 0x10) r6 = socket$kcm(0x2, 0xa, 0x2) r7 = socket$unix(0x1, 0x1, 0x0) ioctl$int_in(r7, 0x5421, &(0x7f0000000100)=0x9) r8 = socket$unix(0x1, 0x1, 0x0) bind$unix(r8, &(0x7f0000000000)=@file={0x1, './file0\x00'}, 0x6e) listen(r8, 0x0) connect$unix(r7, &(0x7f0000000080)=@file={0x1, './file0\x00'}, 0x6e) connect$unix(r7, &(0x7f0000000300)=@file={0x1, './file0\x00'}, 0x6e) ioctl$TUNSETVNETHDRSZ(r1, 0x400454d8, &(0x7f0000000100)=0x730) ioctl$TUNSETOFFLOAD(r1, 0x400454d0, 0x4) ioctl$SIOCSIFHWADDR(r6, 0x8914, &(0x7f0000000000)={'syzkaller1\x00', @link_local}) 6m3.493576448s ago: executing program 2 (id=3396): r0 = bpf$BPF_MAP_GET_FD_BY_ID(0xe, &(0x7f0000000000)={0xffffffffffffffff, 0x3, 0x18}, 0xc) bpf$MAP_DELETE_ELEM(0x3, &(0x7f0000000100)={r0, &(0x7f0000000040)="20d679ab115517fd6c731889d2427d940e7ca6e1897efac0076bef19e6723589f52e068468aaf5a489265d733d6c73ed852fb18c8b629e1fa403705ceac049c6d5f4a82918609e0a7e6f257b720ec8a4e0256f9923f66a70272dc79792fd7ad1031533a48d2e27483a6ec88430c94098b8c495ce92e68ec860690be6803fabc4c9917c383a8cf9185f941a1913f8adca549b77d98796c494e3fee29ff989399106561fed71bafd901d1332d18a657a2077356f1885105e04d06227577d2e28"}, 0x20) r1 = socket$pptp(0x18, 0x1, 0x2) ioctl$sock_SIOCBRADDBR(r1, 0x89a0, &(0x7f0000000140)='netpci0\x00') (async) bpf$BPF_GET_MAP_INFO(0xf, &(0x7f0000000200)={0xffffffffffffffff, 0x58, &(0x7f0000000180)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, ""/16, 0x0}}, 0x10) ioctl$XFS_IOC_ATTRLIST_BY_HANDLE(r0, 0x4058587a, &(0x7f0000000440)={{r1, &(0x7f0000000240)='%^\x00', 0x20080, &(0x7f0000000280)={@_ha_fsid={[0x8, 0x4]}, {0x80, 0x5, 0x1, 0x7f}}, 0x5, &(0x7f00000002c0), &(0x7f0000000300)=0x943}, {[0x2, 0x5, 0x1e4, 0x6]}, 0x7, 0xfa, &(0x7f0000000340)=""/250}) bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f00000004c0)={0x1b, 0x0, 0x0, 0xffffffff, 0x0, r0, 0x1, '\x00', r2, r3, 0x3, 0x2, 0x3}, 0x50) (async) ioctl$XFS_IOC_ATTRLIST_BY_HANDLE(r1, 0x4058587a, &(0x7f0000000740)={{r1, &(0x7f0000000540)='netpci0\x00', 0x100, &(0x7f0000000580)={@align=0x1b7, {0xd3d4, 0xff80, 0x7, 0x8}}, 0x0, &(0x7f00000005c0), &(0x7f0000000600)=0x2}, {[0x3, 0x4, 0x2, 0xc2]}, 0xc8, 0xde, &(0x7f0000000640)=""/222}) (async) r5 = socket$can_j1939(0x1d, 0x2, 0x7) ioctl$BTRFS_IOC_SNAP_CREATE(r5, 0x50009401, &(0x7f00000007c0)={{r4}, "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"}) r6 = syz_genetlink_get_family_id$batadv(&(0x7f0000001800), r4) sendmsg$BATADV_CMD_SET_VLAN(r4, &(0x7f00000018c0)={&(0x7f00000017c0)={0x10, 0x0, 0x0, 0x40000}, 0xc, &(0x7f0000001880)={&(0x7f0000001840)={0x2c, r6, 0x2, 0x70bd26, 0x25dfdbfc, {}, [@BATADV_ATTR_GW_BANDWIDTH_DOWN={0x8, 0x31, 0x2}, @BATADV_ATTR_GW_BANDWIDTH_UP={0x8, 0x32, 0x3d4}, @BATADV_ATTR_AGGREGATED_OGMS_ENABLED={0x5, 0x29, 0x1}]}, 0x2c}, 0x1, 0x0, 0x0, 0x40}, 0x695ace7be1250bf2) bpf$MAP_UPDATE_ELEM(0x2, &(0x7f0000001a40)={r0, &(0x7f0000001900)="31e25198eb13b1f74813b40c1348e65451ce0c2d74d49806ed8b93cabf90d67b12585aabc50e55156182f68422a95f58cae890315870c1460a1705c2ba72bb497876016ee7f19d02142ace54e2", &(0x7f0000001980)=@buf="d0228b84dbf8a8c9ca80e7edc73d00d6229eb2770375283bbfbfcfdb0859f6d585ab057961c073387acf36fe2c938700fdad89b68db3499c11bd9fd4875ca02d036f84c65aa179a83d69b0bacb7da76b60ac3b1a3c66b3f81cfcccdb1dc6f614e293b0ce8aa3c0ecde33e86001da6f9d1af21aa21cf2267cf7ad9c9a966db4d39f94a5"}, 0x20) (async) ioctl$F2FS_IOC_RELEASE_COMPRESS_BLOCKS(r1, 0x8008f512, &(0x7f0000001a80)) r7 = socket$nl_generic(0x10, 0x3, 0x10) r8 = syz_genetlink_get_family_id$ethtool(&(0x7f0000001b00), r3) sendmsg$ETHTOOL_MSG_PAUSE_SET(r7, &(0x7f0000001bc0)={&(0x7f0000001ac0)={0x10, 0x0, 0x0, 0x200000}, 0xc, &(0x7f0000001b80)={&(0x7f0000001b40)={0x34, r8, 0x200, 0x70bd2c, 0x25dfdbfb, {}, [@ETHTOOL_A_PAUSE_RX={0x5}, @ETHTOOL_A_PAUSE_TX={0x5, 0x4, 0x1}, @ETHTOOL_A_PAUSE_AUTONEG={0x5, 0x2, 0x1}, @ETHTOOL_A_PAUSE_AUTONEG={0x5, 0x2, 0x1}]}, 0x34}}, 0x200000d0) ioctl$sock_inet_udp_SIOCINQ(r3, 0x541b, &(0x7f0000001c00)) (async) sendmsg$ETHTOOL_MSG_LINKMODES_SET(r3, &(0x7f0000001d00)={&(0x7f0000001c40)={0x10, 0x0, 0x0, 0x10}, 0xc, &(0x7f0000001cc0)={&(0x7f0000001c80)={0x3c, r8, 0x300, 0x70bd27, 0x25dfdbfc, {}, [@ETHTOOL_A_LINKMODES_AUTONEG={0x5, 0x2, 0x52}, @ETHTOOL_A_LINKMODES_MASTER_SLAVE_CFG={0x5, 0x7, 0x3}, @ETHTOOL_A_LINKMODES_SPEED={0x8, 0x5, 0xf}, @ETHTOOL_A_LINKMODES_AUTONEG={0x5, 0x2, 0x20}, @ETHTOOL_A_LINKMODES_MASTER_SLAVE_CFG={0x5, 0x7, 0x4}]}, 0x3c}, 0x1, 0x0, 0x0, 0x8021}, 0x880) (async) r9 = syz_genetlink_get_family_id$devlink(&(0x7f0000001d80), r3) sendmsg$DEVLINK_CMD_SB_TC_POOL_BIND_SET(r7, &(0x7f0000001ec0)={&(0x7f0000001d40)={0x10, 0x0, 0x0, 0x10000}, 0xc, &(0x7f0000001e80)={&(0x7f0000001dc0)={0xb0, r9, 0x310, 0x70bd29, 0x25dfdbfd, {}, [{{@pci={{0x8}, {0x11}}, {0x8}}, {0x8, 0xb, 0x1}, {0x6, 0x16, 0x4}, {0x5}, {0x6, 0x11, 0x6}, {0x8, 0xb, 0x80000001}}, {{@nsim={{0xe}, {0xf, 0x2, {'netdevsim', 0x0}}}, {0x8}}, {0x8, 0xb, 0x2}, {0x6, 0x16, 0x2}, {0x5, 0x12, 0x1}, {0x6}, {0x8}}]}, 0xb0}}, 0x8005) r10 = syz_genetlink_get_family_id$mptcp(&(0x7f0000001f40), r4) sendmsg$MPTCP_PM_CMD_DEL_ADDR(r4, &(0x7f0000002080)={&(0x7f0000001f00)={0x10, 0x0, 0x0, 0x8}, 0xc, &(0x7f0000002040)={&(0x7f0000001f80)={0xac, r10, 0x801, 0x70bd26, 0x25dfdbfd, {}, [@MPTCP_PM_ATTR_LOC_ID={0x5, 0x5, 0x1}, @MPTCP_PM_ATTR_LOC_ID={0x5, 0x5, 0x3}, @MPTCP_PM_ATTR_ADDR={0xc, 0x1, 0x0, 0x1, [@MPTCP_PM_ADDR_ATTR_FLAGS={0x8}]}, @MPTCP_PM_ATTR_ADDR={0x24, 0x1, 0x0, 0x1, [@MPTCP_PM_ADDR_ATTR_FLAGS={0x8, 0x6, 0x1c}, @MPTCP_PM_ADDR_ATTR_PORT={0x6, 0x5, 0x4e21}, @MPTCP_PM_ADDR_ATTR_FAMILY={0x6, 0x1, 0x2}, @MPTCP_PM_ADDR_ATTR_ADDR4={0x8, 0x3, @private=0xa010102}]}, @MPTCP_PM_ATTR_ADDR_REMOTE={0xc, 0x6, 0x0, 0x1, [@MPTCP_PM_ADDR_ATTR_ID={0x5}]}, @MPTCP_PM_ATTR_ADDR={0x4c, 0x1, 0x0, 0x1, [@MPTCP_PM_ADDR_ATTR_ADDR4={0x8, 0x3, @remote}, @MPTCP_PM_ADDR_ATTR_ADDR6={0x14, 0x4, @local}, @MPTCP_PM_ADDR_ATTR_ID={0x5, 0x2, 0x36}, @MPTCP_PM_ADDR_ATTR_ADDR6={0x14, 0x4, @initdev={0xfe, 0x88, '\x00', 0x0, 0x0}}, @MPTCP_PM_ADDR_ATTR_PORT={0x6, 0x5, 0x4e23}, @MPTCP_PM_ADDR_ATTR_ADDR4={0x8, 0x3, @rand_addr=0x64010100}]}]}, 0xac}, 0x1, 0x0, 0x0, 0x4000000}, 0x0) (async) socket$unix(0x1, 0x5, 0x0) (async) connect$llc(r3, &(0x7f00000020c0)={0x1a, 0x672, 0x8, 0x2, 0x9, 0x6}, 0x10) getsockopt$inet_IP_XFRM_POLICY(r4, 0x0, 0x11, &(0x7f0000002100)={{{@in=@remote, @in6=@dev}}, {{@in6=@private1}, 0x0, @in6=@private1}}, &(0x7f0000002200)=0xe8) (async) r11 = syz_genetlink_get_family_id$nl80211(&(0x7f0000002280), r4) sendmsg$NL80211_CMD_SET_REKEY_OFFLOAD(r7, &(0x7f0000002380)={&(0x7f0000002240)={0x10, 0x0, 0x0, 0x10}, 0xc, &(0x7f0000002340)={&(0x7f00000022c0)={0x78, r11, 0x1, 0x70bd28, 0x25dfdbff, {{}, {@void, @void}}, [@NL80211_ATTR_REKEY_DATA={0x64, 0x7a, 0x0, 0x1, [@NL80211_REKEY_DATA_REPLAY_CTR={0xc, 0x3, "1da13af7fd6df647"}, @NL80211_REKEY_DATA_KEK={0x14, 0x1, @kek="39872f5fce1538bf92b475494c4b5f84"}, @NL80211_REKEY_DATA_KCK={0x14, 0x2, @kck="d60c8ae17225523569ef104c08d56822"}, @NL80211_REKEY_DATA_REPLAY_CTR={0xc, 0x3, "7c8d8c01633d8cfd"}, @NL80211_REKEY_DATA_REPLAY_CTR={0xc, 0x3, "a3e524b78b0d212a"}, @NL80211_REKEY_DATA_KEK={0x14, 0x1, @kek="dae9f29ca80bbc379157a92b07bcf674"}]}]}, 0x78}, 0x1, 0x0, 0x0, 0x4000000}, 0x84) socketpair$unix(0x1, 0x5, 0x0, &(0x7f00000023c0)) (async) setsockopt$MRT_ADD_VIF(r4, 0x0, 0xca, &(0x7f0000002400)={0x1, 0x4, 0x58, 0x27, @vifc_lcl_addr=@multicast2, @multicast1}, 0x10) 6m0.95837889s ago: executing program 2 (id=3400): r0 = syz_open_procfs$namespace(0x0, &(0x7f00000000c0)='ns/net\x00') r1 = openat$cgroup_ro(0xffffffffffffffff, 0x0, 0x0, 0x0) sendmsg$nl_route(r1, &(0x7f0000000c40)={&(0x7f0000000180), 0xc, &(0x7f0000000c00)={&(0x7f0000000b00)=@mpls_delroute={0xac, 0x19, 0x215, 0x70bd2d, 0x25dfdbfd, {0x1c, 0x80, 0x14, 0x8, 0xff, 0x3, 0xff, 0x5ccca5bf648c286b}, [@RTA_NEWDST={0x84, 0x13, [{0x100}, {0xffffd, 0x0, 0x1}, {0x2, 0x0, 0x1}, {0x7, 0x0, 0x1}, {0x9}, {0x2, 0x0, 0x1}, {0x7a6, 0x0, 0x1}, {0x821, 0x0, 0x1}, {0x6}, {0x7}, {0x5, 0x0, 0x1}, {0x6}, {0x9}, {0xe6, 0x0, 0x1}, {0xd}, {0x9}, {0x5}, {0x40, 0x0, 0x1}, {0x2, 0x0, 0x1}, {0xf1597}, {0x4}, {0xe}, {0x1}, {0x4}, {0x9, 0x0, 0x1}, {0xffffb, 0x0, 0x1}, {0x952}, {0xd23}, {0xffffc, 0x0, 0x1}, {0x0, 0x0, 0x1}, {0x95}, {0x4}]}, @RTA_MULTIPATH={0xc, 0x9, {0x6, 0x9}}]}, 0xac}, 0x1, 0x0, 0x0, 0x4004001}, 0x8842) r2 = bpf$MAP_CREATE(0x0, &(0x7f0000000500)=ANY=[@ANYBLOB="1000000004000000080000000500000000000000af8284246adddb27254e744f5769a8b7684e7ebde7a05212af038f93e1e7b745ee1b7f63fd0e68d9eb42a451b96c3a22d9835c56774622ff181a2124cddf44a42e79d45d264f7b80220df00e1c9598dece0ec6552f8931ec57e426770d52567c331cf063f5466f21ff637d1348ebd8ba5fe2fef788b7909f8d2bf8df4eb8761dbbde05521bfb27bd679591855def30dc993684", @ANYRES32, @ANYBLOB='\x00'/20, @ANYRES32=0x0, @ANYRES32, @ANYBLOB='\x00'/28], 0x48) r3 = socket$nl_generic(0x10, 0x3, 0x10) r4 = syz_genetlink_get_family_id$batadv(&(0x7f0000000080), r3) sendmsg$BATADV_CMD_GET_DAT_CACHE(r3, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000200)={&(0x7f00000002c0)={0x14, r4, 0x305, 0x70bd26, 0x25dfdbfc, {0x7}}, 0x14}, 0x1, 0xf0ffff, 0x0, 0x810}, 0x0) r5 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x6, 0xc, &(0x7f00000001c0)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r2, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bc82000000000000a6020000f8ffffffb703000008900000b703000000000000850000003300000095"], &(0x7f0000000180)='GPL\x00', 0x0, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, @xdp, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) r6 = bpf$MAP_CREATE(0x0, &(0x7f0000000400)=ANY=[@ANYBLOB="0d00000004000000040000000900000000000000", @ANYRES32, @ANYBLOB='\x00'/20, @ANYRES32=0x0, @ANYRES32, @ANYBLOB="00000040e90000000000000000000000000000000000000000000000a4dabfa247d5537ce5895ac94321669d825b3d32b301e432b2df0d6655243adfc9e03c5e2300bf55c546bd90abeb13afcb200d36aca71d617dfc97e73ed1441380632f4cf34a673c187cea1ed172108b2993a9fb8c89bd54d8101c460a9d5ae16ebb24081900d9fe21e565d4ba630c332ddac0ce43a4f383aafb1489aa475411394fa1def4a50912a19064274f2553bb897fe5"], 0x48) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000300)={{r6}, &(0x7f0000000000), &(0x7f0000000040)=r5}, 0x20) r7 = socket$tipc(0x1e, 0x5, 0x0) bind$tipc(r7, &(0x7f0000000140)=@name={0x1e, 0x2, 0x0, {{0x42, 0x2}}}, 0x10) setsockopt$TIPC_GROUP_JOIN(r7, 0x10f, 0x87, &(0x7f0000000040)={0x42, 0x1}, 0x10) sendmsg$tipc(r7, &(0x7f0000002340)={&(0x7f0000000000)=@nameseq={0x1e, 0x1, 0x0, {0x2, 0x2, 0x4}}, 0x10, 0x0}, 0x0) splice(r1, &(0x7f0000000080)=0xffffffff, r0, &(0x7f0000000140)=0x7fffffff8000, 0x2, 0xe) bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000600)={&(0x7f0000000000)=ANY=[], 0x0, 0x56}, 0x28) r8 = socket$can_j1939(0x1d, 0x2, 0x7) ioctl$ifreq_SIOCGIFINDEX_vcan(r8, 0x8933, &(0x7f00000000c0)={'vcan0\x00', 0x0}) bind$can_j1939(r8, &(0x7f0000000140)={0x1d, r9, 0x102030405060708, {0x0, 0x1, 0x4}, 0x2}, 0x54) connect$can_j1939(r8, &(0x7f0000000180)={0x1d, r9, 0x0, {0x0, 0xee}, 0xff}, 0x18) r10 = socket(0x2, 0x80805, 0x0) pipe(&(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) vmsplice(0xffffffffffffffff, &(0x7f00000000c0)=[{&(0x7f0000000180)="77690addcfbe1fbb66ec", 0xa}], 0x1, 0x1) r12 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_tcp_TCP_MD5SIG(r12, 0x6, 0xe, &(0x7f0000000300)={@in6={{0xa, 0x0, 0x6, @remote, 0xfffffffc}}, 0x0, 0x0, 0x6, 0x0, "3f114438efdaca16d374b49a365be44d5e860ea3ba676c0b5047b80e2c3535d5bd9db3c8572560f4d1be5cd41f7716082ee3589f099942e6f1c395ddb8160381baadf27900"}, 0xd8) setsockopt$inet6_tcp_TCP_MD5SIG(r12, 0x6, 0xe, &(0x7f0000000100)={@in6={{0xa, 0x0, 0x20000000, @remote, 0x1}}, 0x0, 0x0, 0x0, 0x0, "ddfd3b7ed7c6a1c172a987ae5ce3cafd64c9a736831a5912d606798fb75c9981c4b3ac0e06891ff18bc5543ed57215a3c45f9154dfa319e52a15a2b9acf80c07fb1a854dad742eef6187f2304844c296"}, 0xd8) close(0x3) ioctl$SIOCSIFHWADDR(r11, 0x8924, &(0x7f0000000040)={'veth1_to_bridge\x00', @multicast}) getsockopt$inet_buf(0xffffffffffffffff, 0x0, 0x28, &(0x7f00000001c0)=""/184, &(0x7f0000000280)=0xb8) setsockopt$inet_sctp_SCTP_DELAYED_SACK(r10, 0x84, 0x10, &(0x7f0000000000)=@sack_info={0x0, 0x5, 0x6}, 0xc) 6m0.110924934s ago: executing program 2 (id=3403): r0 = socket$phonet(0x23, 0x2, 0x1) r1 = socket$nl_route(0x10, 0x3, 0x0) r2 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000080)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r2, &(0x7f0000000800)={0x0, 0x0, &(0x7f0000000600)={&(0x7f0000000300)=@newtfilter={0x3c, 0x2c, 0x401, 0x0, 0x0, {0x0, 0x0, 0x0, r3, {0x1}, {0x0, 0xffff}, {0x300, 0x1}}, [@filter_kind_options=@f_basic={{0xa}, {0xc, 0x2, [@TCA_BASIC_CLASSID={0x8, 0x1, {0xffe7, 0x7}}]}}]}, 0x3c}}, 0x0) ioctl$sock_SIOCETHTOOL(r0, 0x8946, &(0x7f0000000600)={'team0\x00', &(0x7f0000000500)=@ethtool_drvinfo={0x3, "dcf7983962915d8c0fe9db6917ce1759e9ef480b0d74be1614421fef43242ce1", "84110a8779a7c6d6548cdcc09748743340416e2f5830ed476d5fec8450df42ba", "4d0b88f64e03c5a4db042278adc080576cf28a008cf11d28f3cbab30e9106d7b", "4a06e2f091f5dc1045e37f32fbf10762aaf1c146aab735e0482aeda0718c79d7", "37d266b7eedde3a08baef3fa17cb380353cb8e66666f2f6bde9f380f9bb170d3", "69d7eed7e4d4e2f58ef6ff9e", 0x3, 0x0, 0xffff8001, 0xf07, 0x5}}) r4 = socket$key(0xf, 0x3, 0x2) sendmsg$key(r4, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000040)=ANY=[@ANYBLOB="0207fcdbdf250000998ecd61f8edf338"], 0x10}}, 0x80) bpf$BPF_BTF_LOAD(0x12, &(0x7f00000000c0)={&(0x7f0000000000)=ANY=[@ANYBLOB="9feb0100180000000000000028000000280000e001000000000000000000000b00000000100000000000000e04000000000000000a000000c2c640d7614bb7e90000"], &(0x7f0000001b80)=""/4090, 0x42, 0xffa}, 0x28) 5m58.84526757s ago: executing program 2 (id=3405): bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000240)={0x11, 0xf, &(0x7f0000000000)=ANY=[@ANYBLOB="18000000020000000000000080000000950000000000000018180000", @ANYRES32, @ANYBLOB="00000000000000000000000010ffffff00b15b84000000000000001812f70df20f84a8", @ANYRES32=0x1, @ANYBLOB="0000000000000000b70300"], 0x0, 0x3, 0x0, 0x0, 0x40f00, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0xffff}, 0x94) bpf$MAP_CREATE(0x0, &(0x7f0000000840)=ANY=[@ANYBLOB="230000000800000002000000ffff01a705"], 0x48) r0 = socket$netlink(0x10, 0x3, 0x0) bpf$PROG_LOAD(0x5, &(0x7f0000000600)={0x11, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="180000000000000000000000000000001801000020646c2500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b7030000040000008500000072000000850000005000000095"], 0x0, 0x0, 0x0, 0x0, 0x40f00, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000680)={0x11, 0x14, &(0x7f0000000400)=ANY=[@ANYBLOB="180000000000000000000000000000001801000020646c2100000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b7030000000007008500000004"], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x40f00, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$PROG_BIND_MAP(0xa, &(0x7f00000004c0)={r1}, 0xc) r2 = socket$packet(0x11, 0x2, 0x300) setsockopt$SO_TIMESTAMPING(r2, 0x1, 0x41, &(0x7f0000000000)=0x1bc8, 0x4) socket$nl_generic(0x10, 0x3, 0x10) r3 = openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0) ioctl$TUNSETIFF(r3, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x7101}) socket$nl_route(0x10, 0x3, 0x0) r4 = socket(0x2, 0x80805, 0x0) close(0x3) r5 = socket(0x2, 0x80805, 0x0) r6 = socket$inet6_sctp(0xa, 0x5, 0x84) shutdown(r6, 0x0) close(0x3) getsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX3(r6, 0x84, 0x6f, &(0x7f0000000200)={0x0, 0x10, &(0x7f00000001c0)=[@in={0x2, 0x4e23, @rand_addr=0x64010100}]}, &(0x7f0000000140)=0x10) getsockopt$inet_sctp6_SCTP_PRIMARY_ADDR(r6, 0x84, 0x7a, &(0x7f0000000340)={r7, @in6={{0xa, 0x3, 0x3, @mcast1}}}, &(0x7f0000000040)=0x84) sendmmsg$inet_sctp(r5, &(0x7f00000032c0)=[{0x0, 0x0, 0x0, 0x0, &(0x7f0000000700)=ANY=[@ANYBLOB="30000000000000008400000001000000000000017c"], 0x30}], 0x1, 0x0) getsockopt$inet_sctp6_SCTP_PEER_ADDR_THLDS(r4, 0x84, 0x84, &(0x7f0000000440)={r7, @in={{0x2, 0x4e23, @empty}}, 0xfffc, 0x86}, &(0x7f0000000500)=0x90) syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) r8 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r8, &(0x7f0000000000)={0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x40088c1}, 0x20000800) sendmsg$nl_route_sched(r8, 0x0, 0x0) ioctl$SIOCSIFHWADDR(0xffffffffffffffff, 0x8914, &(0x7f0000002280)={'syzkaller0\x00', @multicast}) openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='cgroup.controllers\x00', 0x275a, 0x0) readv(r2, &(0x7f0000000400)=[{&(0x7f0000000480)=""/73, 0x49}], 0x1) syz_genetlink_get_family_id$nl80211(&(0x7f0000000100), r0) 5m55.613545861s ago: executing program 2 (id=3411): r0 = socket$nl_route(0x10, 0x3, 0x0) ioctl$XFS_IOC_PATH_TO_FSHANDLE(r0, 0xc0385868, &(0x7f0000000240)={r0, &(0x7f0000000040)='0\x00', 0x440800, &(0x7f0000000080)={@align, {0x7, 0x6, 0x80, 0x1}}, 0xbd6, &(0x7f00000000c0), &(0x7f0000000180)=0x12}) r2 = socket$nl_generic(0x10, 0x3, 0x10) r3 = syz_genetlink_get_family_id$team(&(0x7f00000044c0), 0xffffffffffffffff) ioctl$ifreq_SIOCGIFINDEX_team(r2, 0x8933, &(0x7f0000004700)={'team0\x00', 0x0}) sendmsg$TEAM_CMD_OPTIONS_SET(r2, &(0x7f0000004bc0)={0x0, 0x0, &(0x7f0000004b80)={&(0x7f00000047c0)={0x60, r3, 0x405, 0x70bd27, 0x25dfdbfe, {}, [{{0x8, 0x1, r4}, {0x44, 0x2, 0x0, 0x1, [{0x40, 0x1, @name={{0x24}, {0x5}, {0x10, 0x4, 'loadbalance\x00'}}}]}}]}, 0x60}, 0x1, 0x0, 0x0, 0x4000401}, 0x44084) r5 = socket$packet(0x11, 0x3, 0x300) ioctl$ifreq_SIOCGIFINDEX_team(r5, 0x8933, &(0x7f0000000580)={'team0\x00', 0x0}) sendmsg$TEAM_CMD_OPTIONS_SET(r2, &(0x7f00000004c0)={0x0, 0x0, &(0x7f0000000480)={&(0x7f0000000040)={0xdc, r3, 0x1, 0x72bd28, 0x25dfdbfe, {}, [{{0x8, 0x1, r6}, {0x40, 0x2, 0x0, 0x1, [{0x3c, 0x1, @user_linkup_enabled={{{0x24}, {0x5}, {0x4}}, {0x8, 0x6, r6}}}]}}, {{0x8, 0x1, r6}, {0x78, 0x2, 0x0, 0x1, [{0x3c, 0x1, @bpf_hash_func={{0x24}, {0x5}, {0xc, 0x4, [{0x8, 0x0, 0x3, 0x1}]}}}, {0x38, 0x1, @activeport={{0x24}, {0x5}, {0x8, 0x4, r6}}}]}}]}, 0xdc}, 0x1, 0x0, 0x0, 0x4409b}, 0x110) r7 = syz_init_net_socket$802154_dgram(0x24, 0x2, 0x0) setsockopt$WPAN_SECURITY(r7, 0x0, 0x1, &(0x7f0000000000)=0x2, 0x4) sendmsg$802154_dgram(r7, &(0x7f0000000540)={&(0x7f0000000080)={0x24, @short={0x2, 0x0, 0xaaa0}}, 0x14, &(0x7f0000000140)={0x0}, 0x1, 0x0, 0x0, 0x20000810}, 0x0) r8 = socket(0x10, 0x803, 0x0) ioctl$sock_SIOCGIFVLAN_GET_VLAN_REALDEV_NAME_CMD(r8, 0x8982, &(0x7f0000000040)={0x8, 'veth0_to_bridge\x00', {'veth0_vlan\x00'}, 0x9}) getsockname$packet(r8, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route(r8, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000380)=ANY=[@ANYBLOB="3c0000001000850600"/20, @ANYRES32=r9, @ANYBLOB="01000000000000001c0012000c000100626f6e64000000000c0002000800010003"], 0x3c}, 0x1, 0x0, 0x0, 0x80}, 0x0) sendmsg$TEAM_CMD_PORT_LIST_GET(r1, &(0x7f00000003c0)={&(0x7f0000000200)={0x10, 0x0, 0x0, 0x100000}, 0xc, &(0x7f0000000380)={&(0x7f00000002c0)={0x9c, r3, 0x300, 0x70bd2d, 0x25dfdbfc, {}, [{{0x8, 0x1, r9}, {0x80, 0x2, 0x0, 0x1, [{0x3c, 0x1, @lb_tx_method={{0x24}, {0x5}, {0x9, 0x4, 'hash\x00'}}}, {0x40, 0x1, @lb_hash_stats={{{0x24}, {0x5}, {0x8, 0x4, 0x1}}, {0x8}}}]}}]}, 0x9c}, 0x1, 0x0, 0x0, 0x10}, 0x0) sendmsg$nl_route(r0, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000100)=@newlink={0x70, 0x10, 0x1, 0x70bd29, 0x25dfdbfc, {0x0, 0x0, 0x0, 0x0, 0x2b28d, 0x11a21}, [@IFLA_IFNAME={0x14, 0x3, 'netdevsim0\x00'}, @IFLA_VFINFO_LIST={0x34, 0x16, 0x0, 0x1, [{0x30, 0x1, 0x0, 0x1, [@IFLA_VF_VLAN_LIST={0x2c, 0xc, 0x0, 0x1, [{0x14, 0x1, {0xfffff800, 0x861, 0x4, 0x8100}}, {0x14, 0x1, {0x1, 0x57b, 0x9, 0x8100}}]}]}]}, @IFLA_MASTER={0x8}]}, 0x70}, 0x1, 0x0, 0x0, 0x8041}, 0x48880) 5m53.845994002s ago: executing program 2 (id=3413): bpf$PROG_LOAD(0x5, &(0x7f000000e000)={0x18, 0x4, &(0x7f0000001940)=ANY=[@ANYBLOB="b4000000000b00007910000000000000c310000401000000950074000000000031fb0d3a42319fa204399d17d34e075fdcda533ab1aa71ab1d764152e6cb25dadc7ded5dbe11b62ac5ea9fca11027d29066927603deb92de3141e8ed7ac5b8902070213cdfdc5d6c4890cdeb50347c32060581172b94c6ba22a2b58eb6cbad46ed6e7965a2ba103b0b36f790bb41931f9a3d4dd127c1b4e49f7468f5e623950c4f67581c92ef9e7e8ece17d566c93a114d68c577d694b9844e0d9e306404cfc3bfbead9e1b96c6a6cb639bca6d"], &(0x7f0000003ff6)='GPL\x00', 0x2, 0xfd90, &(0x7f000000cf3d)=""/195}, 0x48) r0 = socket$xdp(0x2c, 0x3, 0x0) setsockopt$XDP_RX_RING(r0, 0x11b, 0x2, &(0x7f00000000c0)=0x200, 0x4) r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000000)={0x1, 0x8, &(0x7f0000000a00)=ANY=[@ANYBLOB="7a0af8ff75257000bfa100000000000007010000f8ffffffb702000005000000bf130000000000008500000006000000b700000000000000950000ff00000000b25952850a84a70002b2ab3d6ffaa6ead0169191d54f8196217fc563e2fc91f6da4dad4fdc2eb1b5986fc44bc25fb591cf77b9dfb379a3f611dbc2a364916f098dab10b1a297cf528666d1ddd73f30f2382f6cda4bfdd45be583823c0f092248a57d48621f3c1c65ee19ee875daf45006a4c4ea5e15b2f9618d547244a22000000000800db583620ce7243d1aebdb638d91dbef6619358399aa9c2acd068c03efefd8bc77edf2d34b12cd48a1b20fb7dd843267e0331759f4ec6b5b0af58e604f494eff289026d5045ef08000000000000007718a09f4886afc26abba34635d0e8b598a51bc742135a6e1d33fe226c944bc76be40d435aa8b5202db761014b1b999a12df6bee431a6681000000263b6233e1c0fe30e384c3cb07b74a72291a1a2b523dd81b6651b1ee48e999bb004823ebcd8c65743f31f84b263ab9b3426692d01ad194f302d7a658e9e54687d3c56d7bedb6b2f25ddb8c640bb321a402058c9221b6870814cf4ee23ddb79fff5eb156e0a000000000000f2bd1d4a178d86d6935eb8b75bc4eb680d10e8b6a54c6c8674caf63ff76622939a20d4aadf85db40179c2cf83ee07e30a279d8f9f3bc282deb43a03409f8e6972f3f720d045923702cede0f3e91411f3f1b16f065624f280a7dcce8db910f93c49b9e0b6dd7356aa79d5fabb5c0d0da6d719d7e0efb2bb713d18242cd5df6ca53307a4cdd91be4587f90e317c8de5e5c3933fd5d5bf38f6b9fc39fc829dcfe4a"], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x31}, 0x94) r2 = openat$nci(0xffffffffffffff9c, &(0x7f0000000140), 0x2, 0x0) r3 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r4 = syz_init_net_socket$nfc_raw(0x27, 0x3, 0x0) setsockopt$sock_attach_bpf(r4, 0x1, 0x32, &(0x7f0000000500)=r1, 0x4) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000440)={0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41100, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x18}, 0x94) sendmsg$RDMA_NLDEV_CMD_STAT_DEL(0xffffffffffffffff, 0x0, 0x0) r5 = openat$tun(0xffffffffffffff9c, &(0x7f0000000080), 0x1c1342, 0x0) ioctl$TUNSETIFF(r5, 0x400454ca, &(0x7f00000000c0)={'syzkaller0\x00', 0x84aebfbd6349b7f2}) r6 = openat$tun(0xffffffffffffff9c, &(0x7f0000000400), 0x0, 0x0) close(r6) r7 = socket$nl_generic(0x10, 0x3, 0x10) r8 = syz_genetlink_get_family_id$tipc(&(0x7f0000000300), 0xffffffffffffffff) sendmsg$TIPC_CMD_ENABLE_BEARER(r7, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000680)=ANY=[@ANYBLOB='8\x00\x00\x00', @ANYRES16=r8, @ANYBLOB="010000000d0000000000010000000000000001410000001c001700000000000000006574683a73797a6b616c6c657230"], 0x38}, 0x1, 0x0, 0x0, 0x4}, 0x0) ioctl$SIOCSIFHWADDR(r6, 0x8914, &(0x7f0000002280)={'syzkaller0\x00', @multicast}) writev(r5, &(0x7f0000000340)=[{&(0x7f00000002c0)="89e7ee0c7cdad9b4b47380c988cafb", 0xf}, {&(0x7f0000000440)="448b7c0acf8bc0cefe8360fcbe079ca4e62ef0675c10631d0984e7e6db7f90c5b959a5231eb5d6615538d482", 0x2c}], 0x2) syz_genetlink_get_family_id$nfc(&(0x7f0000000300), r3) ioctl$IOCTL_GET_NCIDEV_IDX(r2, 0x0, &(0x7f00000000c0)) socket$nl_route(0x10, 0x3, 0x0) socket$nl_route(0x10, 0x3, 0x0) socket$alg(0x26, 0x5, 0x0) mmap(&(0x7f0000001000/0xc00000)=nil, 0xc00000, 0x0, 0x3032, 0xffffffffffffffff, 0x0) sendmmsg$alg(0xffffffffffffffff, 0x0, 0x0, 0x40800) mmap(&(0x7f0000002000/0x4000)=nil, 0x4000, 0xedc623580215bdcd, 0x12, 0xffffffffffffffff, 0x0) r9 = socket$inet6(0xa, 0x800000000000002, 0x0) setsockopt$SO_TIMESTAMPING(r9, 0x1, 0x41, &(0x7f0000000340)=0x63ba, 0x4) setsockopt$inet6_int(r9, 0x29, 0x31, &(0x7f0000000100)=0x8, 0x4) 5m38.708235873s ago: executing program 34 (id=3413): bpf$PROG_LOAD(0x5, &(0x7f000000e000)={0x18, 0x4, &(0x7f0000001940)=ANY=[@ANYBLOB="b4000000000b00007910000000000000c310000401000000950074000000000031fb0d3a42319fa204399d17d34e075fdcda533ab1aa71ab1d764152e6cb25dadc7ded5dbe11b62ac5ea9fca11027d29066927603deb92de3141e8ed7ac5b8902070213cdfdc5d6c4890cdeb50347c32060581172b94c6ba22a2b58eb6cbad46ed6e7965a2ba103b0b36f790bb41931f9a3d4dd127c1b4e49f7468f5e623950c4f67581c92ef9e7e8ece17d566c93a114d68c577d694b9844e0d9e306404cfc3bfbead9e1b96c6a6cb639bca6d"], &(0x7f0000003ff6)='GPL\x00', 0x2, 0xfd90, &(0x7f000000cf3d)=""/195}, 0x48) r0 = socket$xdp(0x2c, 0x3, 0x0) setsockopt$XDP_RX_RING(r0, 0x11b, 0x2, &(0x7f00000000c0)=0x200, 0x4) r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000000)={0x1, 0x8, &(0x7f0000000a00)=ANY=[@ANYBLOB="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"], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x31}, 0x94) r2 = openat$nci(0xffffffffffffff9c, &(0x7f0000000140), 0x2, 0x0) r3 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r4 = syz_init_net_socket$nfc_raw(0x27, 0x3, 0x0) setsockopt$sock_attach_bpf(r4, 0x1, 0x32, &(0x7f0000000500)=r1, 0x4) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000440)={0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41100, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x18}, 0x94) sendmsg$RDMA_NLDEV_CMD_STAT_DEL(0xffffffffffffffff, 0x0, 0x0) r5 = openat$tun(0xffffffffffffff9c, &(0x7f0000000080), 0x1c1342, 0x0) ioctl$TUNSETIFF(r5, 0x400454ca, &(0x7f00000000c0)={'syzkaller0\x00', 0x84aebfbd6349b7f2}) r6 = openat$tun(0xffffffffffffff9c, &(0x7f0000000400), 0x0, 0x0) close(r6) r7 = socket$nl_generic(0x10, 0x3, 0x10) r8 = syz_genetlink_get_family_id$tipc(&(0x7f0000000300), 0xffffffffffffffff) sendmsg$TIPC_CMD_ENABLE_BEARER(r7, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000680)=ANY=[@ANYBLOB='8\x00\x00\x00', @ANYRES16=r8, @ANYBLOB="010000000d0000000000010000000000000001410000001c001700000000000000006574683a73797a6b616c6c657230"], 0x38}, 0x1, 0x0, 0x0, 0x4}, 0x0) ioctl$SIOCSIFHWADDR(r6, 0x8914, &(0x7f0000002280)={'syzkaller0\x00', @multicast}) writev(r5, &(0x7f0000000340)=[{&(0x7f00000002c0)="89e7ee0c7cdad9b4b47380c988cafb", 0xf}, {&(0x7f0000000440)="448b7c0acf8bc0cefe8360fcbe079ca4e62ef0675c10631d0984e7e6db7f90c5b959a5231eb5d6615538d482", 0x2c}], 0x2) syz_genetlink_get_family_id$nfc(&(0x7f0000000300), r3) ioctl$IOCTL_GET_NCIDEV_IDX(r2, 0x0, &(0x7f00000000c0)) socket$nl_route(0x10, 0x3, 0x0) socket$nl_route(0x10, 0x3, 0x0) socket$alg(0x26, 0x5, 0x0) mmap(&(0x7f0000001000/0xc00000)=nil, 0xc00000, 0x0, 0x3032, 0xffffffffffffffff, 0x0) sendmmsg$alg(0xffffffffffffffff, 0x0, 0x0, 0x40800) mmap(&(0x7f0000002000/0x4000)=nil, 0x4000, 0xedc623580215bdcd, 0x12, 0xffffffffffffffff, 0x0) r9 = socket$inet6(0xa, 0x800000000000002, 0x0) setsockopt$SO_TIMESTAMPING(r9, 0x1, 0x41, &(0x7f0000000340)=0x63ba, 0x4) setsockopt$inet6_int(r9, 0x29, 0x31, &(0x7f0000000100)=0x8, 0x4) 14.618666937s ago: executing program 3 (id=4967): r0 = socket$inet_tcp(0x2, 0x1, 0x0) setsockopt$IP_VS_SO_SET_ADD(r0, 0x0, 0x482, &(0x7f0000000100)={0x6, @loopback, 0x15, 0x0, 'rr\x00'}, 0x2c) setsockopt$IP_VS_SO_SET_ADDDEST(r0, 0x0, 0x487, &(0x7f0000000200)={{0x6, @loopback, 0x15, 0x0, 'rr\x00'}, {@loopback, 0x15, 0x0, 0x1}}, 0x44) setsockopt(r0, 0x0, 0x483, &(0x7f0000000300)="060000007f00000100150000000000006d6800"/44, 0x2c) r1 = socket$inet6_sctp(0xa, 0x5, 0x84) shutdown(r1, 0x0) getsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX3(r1, 0x84, 0x6f, &(0x7f0000000200)={0x0, 0x10, &(0x7f00000001c0)=[@in={0x2, 0x4e23, @rand_addr=0x64010100}]}, &(0x7f0000000140)=0x10) getsockopt$inet_sctp6_SCTP_PEER_ADDR_THLDS(r1, 0x84, 0x1f, &(0x7f0000000240)={r2, @in={{0x2, 0x4e21, @remote}}, 0x3, 0x7}, &(0x7f0000000680)=0x90) socketpair$tipc(0x1e, 0x2, 0x0, &(0x7f0000000040)={0xffffffffffffffff}) sendmmsg$inet(r3, &(0x7f0000001540)=[{{0x0, 0xfffffffffffffda1, 0x0}}], 0x40001b6, 0x0) connect$tipc(r3, &(0x7f0000000080)=@nameseq={0x1e, 0x1, 0x2, {0x1}}, 0x10) setsockopt(r0, 0x0, 0x489, &(0x7f0000000400)="060000007f00000100150000000000006d6800000000000000000000000000000000000000000000000000007f000001001500"/68, 0x44) setsockopt(r0, 0x0, 0x488, &(0x7f0000000500)="060000007f00000100150000000000006d6800000000000000000000000000000000000000000000000000007f000001001500"/68, 0x44) setsockopt(r0, 0x0, 0x484, &(0x7f0000000600)="060000007f00000100150000000000006d6800"/44, 0x2c) 12.974262835s ago: executing program 3 (id=4973): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) r1 = syz_init_net_socket$nfc_llcp(0x27, 0x3, 0x1) r2 = socket(0x10, 0x803, 0x0) sendmsg$nl_route(r2, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000680)=@newlink={0x30, 0x10, 0x300, 0xfffffffd, 0x0, {}, [@IFLA_NET_NS_FD={0x8}, @IFLA_TARGET_NETNSID={0x8}]}, 0x30}, 0x1, 0x0, 0x0, 0x800}, 0x400c89c) ioctl$IOCTL_GET_NCIDEV_IDX(0xffffffffffffffff, 0x0, &(0x7f0000000080)=0x0) bind$nfc_llcp(r1, &(0x7f00000000c0)={0x27, r3, 0x1, 0x7, 0x8, 0xe1, "c171f8af6648de303e39a1ce5b8d47245e30da43201337de55407ebb63f4111c9cafbe52c23106f5123564ec0f7e4dd628792cadab28844962baa427375c65", 0xa}, 0x60) sendmsg$IPSET_CMD_ADD(r0, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000000)={0x4c, 0x9, 0x6, 0x201, 0x0, 0x0, {0x1, 0x0, 0x800}, [@IPSET_ATTR_SETNAME={0x9, 0x2, 'syz0\x00'}, @IPSET_ATTR_DATA={0x24, 0x7, 0x0, 0x1, [@IPSET_ATTR_IP={0x18, 0x1, 0x0, 0x1, @IPSET_ATTR_IPADDR_IPV6={0x14, 0x2, 0x1, 0x0, @dev={0xfe, 0x80, '\x00', 0x23}}}, @IPSET_ATTR_MARK={0x8, 0xa, 0x1, 0x0, 0x1}]}, @IPSET_ATTR_PROTOCOL={0x5}]}, 0x4c}}, 0x800) r4 = openat$tun(0xffffffffffffff9c, &(0x7f0000000000), 0x48241, 0x0) ioctl$TUNSETIFF(r4, 0x400454ca, &(0x7f00000000c0)={'syzkaller1\x00', 0x6bf1c2d5adba8c32}) recvmmsg(0xffffffffffffffff, 0x0, 0x0, 0x22, 0x0) ioctl$TUNSETLINK(r4, 0x400454cd, 0x6) r5 = socket$nl_route(0x10, 0x3, 0x0) setsockopt$netlink_NETLINK_TX_RING(r5, 0x10e, 0xc, &(0x7f0000000040)={0x200000c0, 0xffffffff, 0xfffffff8}, 0x10) sendmsg$nl_route(r5, &(0x7f00000000c0)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f0000000180)=@ipv4_newroute={0x1c, 0x1a, 0x1, 0x800000, 0x25dfdbfc, {0x2, 0x0, 0x20, 0x80, 0x0, 0x0, 0xfd, 0x0, 0x1c00}}, 0x1c}}, 0x4000) r6 = socket$kcm(0x2, 0xa, 0x2) ioctl$SIOCSIFHWADDR(r6, 0x8914, &(0x7f0000000180)={'syzkaller1\x00', @link_local}) write$tun(r4, &(0x7f00000012c0)=ANY=[@ANYBLOB="00200000ffffffffffffb10faaaaaabb080600200800060400"], 0x2e) r7 = socket$nl_netfilter(0x10, 0x3, 0xc) r8 = socket$nl_route(0x10, 0x3, 0x0) ioctl$ifreq_SIOCGIFINDEX_team(r8, 0x8933, &(0x7f0000000040)={'team0\x00', 0x0}) sendmsg$nl_route(r8, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000300)=@newlink={0x78, 0x10, 0xffffffffffffffff, 0x70bd27, 0x25dffbfe, {0x0, 0x0, 0x0, 0x0, 0x50a10, 0x33822}, [@IFLA_LINKINFO={0x50, 0x12, 0x0, 0x1, @vti={{0x8}, {0x44, 0x2, 0x0, 0x1, [@vti_common_policy=[@IFLA_VTI_OKEY={0x8, 0x3, 0x4}, @IFLA_VTI_FWMARK={0x8, 0x6, 0x2}, @IFLA_VTI_IKEY={0x8, 0x2, 0x5}, @IFLA_VTI_LINK={0x8, 0x1, r9}, @IFLA_VTI_LINK={0x8, 0x1, r9}, @IFLA_VTI_IKEY={0x8, 0x2, 0x81}], @IFLA_VTI_REMOTE={0x8, 0x5, @remote}, @IFLA_VTI_REMOTE={0x8, 0x5, @loopback}]}}}, @IFLA_MASTER={0x8, 0xa, r9}]}, 0x78}, 0x1, 0x0, 0x0, 0x480c1}, 0x240408d0) sendmsg$IPCTNL_MSG_EXP_DELETE(r7, &(0x7f00000002c0)={&(0x7f0000000140), 0xc, &(0x7f0000000200)={&(0x7f0000000180)={0x34, 0x2, 0x2, 0x5, 0x0, 0x0, {0xa, 0x0, 0x6}, [@CTA_EXPECT_FN={0xa, 0xb, 'Q.931\x00'}, @CTA_EXPECT_FN={0x8, 0xb, 'sip\x00'}, @CTA_EXPECT_HELP_NAME={0x9, 0x6, 'pptp\x00'}]}, 0x34}, 0x1, 0x0, 0x0, 0x24000c00}, 0xa0) 10.890475564s ago: executing program 3 (id=4981): mmap(&(0x7f0000001000/0xc00000)=nil, 0xc00000, 0x0, 0x3032, 0xffffffffffffffff, 0x0) r0 = bpf$PROG_LOAD(0x5, &(0x7f0000001280)={0x6, 0xb, &(0x7f0000000080)=ANY=[@ANYBLOB="18000000000000000000000000000000180100002020702500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000002000000b7030000fdffffff850000007100000095"], &(0x7f0000000200)='GPL\x00', 0x3, 0x0, 0x0, 0x0, 0x2c, '\x00', 0x0, @fallback=0x1d, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000600)={r0, 0x0, 0xe, 0x0, &(0x7f0000000200)="d28e01103108060000000000fbfd", 0x0, 0x500, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x9}, 0x50) r1 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r1, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000200)={&(0x7f00000003c0)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a28000000000a0101000000005e1affd5020000000900010073797a300000000008000240000000032c000000030a01030000e6ff00000000020000000900010073797a30000000000900030073797a320000000014000000110001"], 0x7c}}, 0x0) sendmsg$NFT_BATCH(r1, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000004c0)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a40000000160a03020000000000000000020000000900020073797a32000000000900010073797a3000000000140003800800024000000000080001400000000014000000110001"], 0x68}}, 0x0) sendmsg$NFT_BATCH(r1, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000340)=ANY=[@ANYBLOB="140000001000010000000000000040000000000a40000000160a01080000000000000000020000000900020073797a30000000000900010073797a3000000000140003800800024000000000080001400000000014000000110001"], 0x68}}, 0x0) r2 = socket$nl_netfilter(0x10, 0x3, 0xc) recvmsg(r2, &(0x7f0000000280)={0x0, 0x0, 0x0}, 0x0) sendmsg$NFT_MSG_GETFLOWTABLE(r2, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000180)={0x14, 0x17, 0xa, 0x301, 0x0, 0x0, {0x2, 0x0, 0x8}}, 0x14}, 0x1, 0x0, 0x0, 0x44000}, 0x8094) r3 = socket$inet_tcp(0x2, 0x1, 0x0) bind$inet(r3, &(0x7f0000000100)={0x2, 0x4e21, @local}, 0x10) r4 = syz_init_net_socket$nfc_llcp(0x27, 0x1, 0x1) bind$nfc_llcp(r4, &(0x7f0000000380)={0x27, 0x0, 0x0, 0x0, 0x0, 0x0, "d9298498abdba7f061bd1ca44c226af5160e961711a03760760beeab91e8ff0055e5c0d48bd63ffdb93bd43a847a1597c8ef03da5be42200", 0x37}, 0x60) r5 = bpf$MAP_CREATE(0x0, &(0x7f0000001b80)=ANY=[@ANYBLOB="0600000004000000080000000a"], 0x50) bpf$PROG_LOAD(0x5, &(0x7f0000000e00)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r5, @ANYBLOB="0000000000000000b7080000b2e900007b8af8ff00000000bfa200000000000007020000f8feffffb703000000000000b70400000000000085000000c300000095"], 0x0, 0xfffffffc, 0x0, 0x0, 0x41100, 0x0, '\x00', 0x0, @fallback=0x11, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x200}, 0x94) r6 = bpf$PROG_LOAD(0x5, &(0x7f0000000080)={0x6, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, @fallback=0x4, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000180)={r6, 0x2000000, 0xe, 0x0, &(0x7f0000000040)="630b008646dc3f0adf33c9f7b986", 0x0, 0xcf25, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x80}, 0x50) socket$inet(0x2, 0x1, 0x0) syz_init_net_socket$bt_hci(0x1f, 0x3, 0x5) close(0x4) syz_open_procfs$namespace(0x0, &(0x7f0000000040)='ns/cgroup\x00') r7 = bpf$PROG_LOAD(0x5, &(0x7f0000000200)={0x3, 0x10, &(0x7f0000000300)=ANY=[@ANYBLOB="bf16000000000000b7070000000000007b7af0ff000000007b7af8ff00000000bf61000000000000bfa200000000000007020000f0ffffffb70300000c000000b704000000000000b70500000000000085000000540000001500020000000000bf010000000000008500000056000000b70000000000000095"], 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @sched_cls, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000500)={r7, 0x0, 0x14, 0x0, &(0x7f0000000600)="00112233445566778899aabb0800450000280001", 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x50) r8 = socket$kcm(0x10, 0x400000002, 0x0) sendmsg$nl_route(0xffffffffffffffff, 0x0, 0x0) write$cgroup_subtree(r8, 0x0, 0xfe33) listen(r4, 0x0) close(0x4) bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f00000002c0)={0x1b, 0x0, 0x0, 0x260c0000, 0x0, 0x1, 0x1, '\x00', 0x0, 0xffffffffffffffff, 0x4, 0x5, 0x3}, 0x50) 10.876729055s ago: executing program 5 (id=4982): r0 = socket$nl_xfrm(0x10, 0x3, 0x6) bind$netlink(r0, &(0x7f0000000080)={0x10, 0x0, 0x0, 0xfffffffffffffffd}, 0xc) r1 = socket$inet6(0xa, 0x3, 0x40) setsockopt$inet6_IPV6_XFRM_POLICY(r1, 0x29, 0x23, &(0x7f0000000280)={{{@in=@broadcast, @in6=@empty, 0x0, 0x1000, 0x2, 0x0, 0x2}, {0x3, 0x5, 0x0, 0x5, 0xfffbfffffffffff6, 0x1fffffc, 0xfffffbfffffffffc, 0x8}, {0x2000000000000007, 0x0, 0x9, 0x4}, 0x4000006, 0x0, 0x1, 0x0, 0x2}, {{@in6=@empty, 0x4d2, 0x3c}, 0x2, @in6=@dev={0xfe, 0x80, '\x00', 0x18}, 0x3500, 0x4, 0x0, 0x0, 0xffffffff, 0x80000000, 0xec0a}}, 0xe8) connect$inet6(r1, &(0x7f0000000000)={0xa, 0x4e24, 0x7, @ipv4={'\x00', '\xff\xff', @initdev={0xac, 0x1e, 0x1, 0x0}}}, 0x1c) r2 = socket(0x10, 0x803, 0x0) ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f0000000100)={'bridge_slave_0\x00', 0x0}) sendmsg$nl_route_sched(r2, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000200)=@newtfilter={0x38, 0x2c, 0xd27, 0x70bd27, 0x25dfdbfb, {0x0, 0x0, 0x0, r3, {0x7}, {}, {0xa, 0xf}}, [@filter_kind_options=@f_u32={{0x8}, {0xc, 0x2, [@TCA_U32_HASH={0x8, 0x2, 0x80000001}]}}]}, 0x38}, 0x1, 0x0, 0x0, 0x1}, 0x4040050) getsockopt$bt_BT_RCVMTU(r2, 0x112, 0xd, &(0x7f0000000040)=0x4, &(0x7f00000000c0)=0x2) 10.379328748s ago: executing program 5 (id=4983): r0 = syz_init_net_socket$bt_l2cap(0x1f, 0x1, 0x0) bind$bt_l2cap(r0, &(0x7f00000002c0)={0x1f, 0x0, @any, 0xfffa}, 0xe) mmap(&(0x7f0000196000/0x1000)=nil, 0x1000, 0x0, 0x840000000000a132, 0xffffffffffffffff, 0x0) r1 = socket(0x40000000015, 0x5, 0x0) connect$inet(r1, &(0x7f0000000040)={0x2, 0x4e20, @loopback}, 0x10) bind$inet(r1, &(0x7f0000000340)={0x2, 0x4e20, @loopback}, 0x57) sendmsg$xdp(r1, &(0x7f0000000100)={0x0, 0x0, 0x0}, 0x0) recvmmsg(r1, &(0x7f0000001740)=[{{0x0, 0xfd67, &(0x7f0000001400), 0x1}}], 0x4000210, 0x10002, 0x0) connect$bt_l2cap(r0, &(0x7f0000000080)={0x1f, 0x0, @fixed={'\xaa\xaa\xaa\xaa\xaa', 0x10}, 0x7ff}, 0xe) r2 = syz_init_net_socket$bt_l2cap(0x1f, 0x1, 0x0) bind$bt_l2cap(r2, &(0x7f00000000c0)={0x1f, 0x0, @any, 0xfff6}, 0xe) connect$bt_l2cap(r2, &(0x7f0000000080)={0x1f, 0x0, @fixed={'\xaa\xaa\xaa\xaa\xaa', 0x10}, 0x7ff}, 0xe) 9.996585125s ago: executing program 4 (id=4985): r0 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r0, &(0x7f0000000180)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f00000004c0)=@updpolicy={0xb8, 0x28, 0x1, 0x0, 0x400000, {{@in=@multicast1=0xe0000002, @in, 0x0, 0x0, 0x0, 0x0, 0xa, 0x0, 0x0, 0x87}, {0x0, 0x0, 0x0, 0x0, 0xfffffffffffffffe, 0x0, 0x0, 0x7f}, {0x0, 0x0, 0x200000000000000}, 0xff}}, 0xb8}}, 0x2c000010) r1 = socket(0x10, 0x3, 0x0) sendmsg$nl_generic(r1, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000380)={&(0x7f00000005c0)=ANY=[@ANYBLOB="b40000001900010000000000000000001d0109004d0011806f9886ff8308eb1d7c03414adb7fa1c790a421ea2a089f6ab00ada4e5605b2e72655b3cc4c48e609000cf5329cb7f1821ec7ecca1db0eb2d7144f29af11fe655838a74d923d12c78e80000004d0010"], 0xb4}, 0x1, 0x0, 0x0, 0x8000}, 0x0) r2 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$ifreq_SIOCGIFINDEX_team(r2, 0x8933, &(0x7f0000000040)={'team0\x00', 0x0}) r4 = syz_genetlink_get_family_id$team(&(0x7f00000000c0), 0xffffffffffffffff) sendmsg$TEAM_CMD_OPTIONS_SET(r2, &(0x7f0000000440)={0x0, 0x4f, &(0x7f0000000080)={&(0x7f0000000200)={0x5c, r4, 0x1, 0x70bd25, 0x0, {0x1, 0x6c00000000000000}, [{{0x8, 0x1, r3}, {0x40, 0x2, 0x0, 0x1, [{0xd, 0x1, @user_linkup_enabled={{{0x24}, {0x5}, {0x4, 0xce0}}, {0x8}}}]}}]}, 0x5c}, 0x1, 0xf000, 0x0, 0x3000000}, 0x10) 9.587601182s ago: executing program 3 (id=4986): r0 = socket$inet(0x2, 0x1, 0x0) setsockopt$inet_tcp_int(r0, 0x6, 0x10000000013, &(0x7f0000d06000)=0x1, 0x4) setsockopt$inet_opts(r0, 0x0, 0x4, 0x0, 0x0) connect$inet(r0, &(0x7f0000000040)={0x2, 0x4e1f, @local}, 0x10) ioctl$sock_inet_SIOCSIFADDR(r0, 0x8916, &(0x7f0000000280)={'veth0_to_bond\x00', {0x2, 0x4e5f, @empty}}) setsockopt$SO_ATTACH_FILTER(0xffffffffffffffff, 0x1, 0x1a, &(0x7f0000000080)={0x2, &(0x7f0000000000)=[{0x3, 0xff, 0x5, 0x2}, {0x9, 0x10, 0x1, 0x9}]}, 0x10) r1 = socket$inet_udp(0x2, 0x2, 0x0) setsockopt$SO_TIMESTAMPING(r1, 0x1, 0x41, &(0x7f0000000200)=0x474c, 0x4) bind$inet(r1, &(0x7f00000001c0)={0x2, 0x0, @local}, 0x10) connect$inet(r1, &(0x7f0000000480)={0x2, 0x0, @multicast1}, 0x10) (async) connect$inet(r1, &(0x7f0000000480)={0x2, 0x0, @multicast1}, 0x10) sendmmsg(r1, &(0x7f0000007fc0), 0x800001d, 0x0) (async) sendmmsg(r1, &(0x7f0000007fc0), 0x800001d, 0x0) setsockopt$inet_int(r1, 0x0, 0xd, &(0x7f0000000040)=0xfffffffc, 0x4) (async) setsockopt$inet_int(r1, 0x0, 0xd, &(0x7f0000000040)=0xfffffffc, 0x4) setsockopt$inet_tcp_TCP_REPAIR(r0, 0x6, 0x13, &(0x7f00000000c0), 0x4) (async) setsockopt$inet_tcp_TCP_REPAIR(r0, 0x6, 0x13, &(0x7f00000000c0), 0x4) 9.212536349s ago: executing program 4 (id=4988): r0 = socket(0x10, 0x803, 0x0) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000200)={'lo\x00', 0x0}) sendmsg$nl_route(r0, &(0x7f0000000140)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000000)=@ipv6_newaddr={0x2c, 0x14, 0x9535393fea6295b5, 0x70bd27, 0x25dfdbff, {0xa, 0x8, 0x0, 0xff, r1}, [@IFA_ADDRESS={0x14, 0x1, @empty}]}, 0x2c}, 0x1, 0x0, 0x0, 0x2004c040}, 0x0) r2 = socket$nl_generic(0x10, 0x3, 0x10) r3 = syz_genetlink_get_family_id$devlink(&(0x7f0000000080), 0xffffffffffffffff) r4 = bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000200)={&(0x7f0000000000)=ANY=[@ANYBLOB="9feb010018000000000000004c0000004c0000001c000000000000000000000104000000200000000500000001000004040000000100000001000000000000001800000002000004080000001300000002000000000000000100000001000000200000000076616c006270665f7370696e5f6c6f636b006c6f636b0066"], 0x0, 0x80, 0x0, 0x0, 0x9}, 0x28) bpf$MAP_CREATE(0x0, &(0x7f0000000040)=@base={0x1, 0x4, 0x8, 0xbc0, 0x1d, 0xffffffffffffffff, 0x0, '\x00', 0x0, r4, 0x1, 0x3}, 0x50) (async) bpf$MAP_CREATE(0x0, &(0x7f0000000040)=@base={0x1, 0x4, 0x8, 0xbc0, 0x1d, 0xffffffffffffffff, 0x0, '\x00', 0x0, r4, 0x1, 0x3}, 0x50) sendmsg$DEVLINK_CMD_RATE_NEW(r2, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000280)={&(0x7f00000000c0)=ANY=[@ANYBLOB="bc0000f377d6dadb4b4828eed723930d482efdfa461156140d6f443a901013ff9a27a8d26e504aa2bc0a34f95fb2b12f8739668e4c488758ca66b48b8286c73a9f1c1b48a825b1658649", @ANYRES16=r3, @ANYBLOB="611027bd7000fcdbdf254c000000080001007063690011000200303030303a30303a31302e30000000000c00a60049b04f7200000000"], 0x3c}, 0x1, 0x0, 0x0, 0x48084}, 0x80) (async) sendmsg$DEVLINK_CMD_RATE_NEW(r2, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000280)={&(0x7f00000000c0)=ANY=[@ANYBLOB="bc0000f377d6dadb4b4828eed723930d482efdfa461156140d6f443a901013ff9a27a8d26e504aa2bc0a34f95fb2b12f8739668e4c488758ca66b48b8286c73a9f1c1b48a825b1658649", @ANYRES16=r3, @ANYBLOB="611027bd7000fcdbdf254c000000080001007063690011000200303030303a30303a31302e30000000000c00a60049b04f7200000000"], 0x3c}, 0x1, 0x0, 0x0, 0x48084}, 0x80) 8.487093435s ago: executing program 4 (id=4989): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) r1 = socket(0x2b, 0x1, 0x1) setsockopt$EBT_SO_SET_ENTRIES(r1, 0x0, 0x80, &(0x7f0000000c80)=@filter={'filter\x00', 0xe, 0x3, 0x90, [0x0, 0x200000000840, 0x2000000009ae, 0x200000000bfa], 0x0, 0x0, &(0x7f0000000840)=ANY=[@ANYBLOB="0000000000000000000000000000000000000000000000000000ffffff0000000000000000000000000000000000000000000000000000000000000000000000000000000001000000ffffffff0000000029000000000000000000000000000000000000000000000000000000000000000000000003000000feffffff00"/144]}, 0x108) syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) sendmsg$IPCTNL_MSG_CT_NEW(0xffffffffffffffff, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000240)=ANY=[@ANYBLOB="5e000000000101040000000000000000020000002c00010400000180080001007f00001508000200e00000020c000280050068378ea1d6d0f3160786c3010f47000000000006000340000300002400028014000180080001000000000008000200ac1414bb0c000280050001000000000008000740000000000c"], 0x78}}, 0x0) sendmsg$key(0xffffffffffffffff, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000080)=ANY=[@ANYBLOB="020b0e090600000025bd7000fedbdf25040054ef0688000005000000000000000f0000000000000001000000000010"], 0x30}}, 0x4004090) r2 = socket$nl_generic(0x10, 0x3, 0x10) socket$nl_route(0x10, 0x3, 0x0) syz_init_net_socket$bt_hci(0x1f, 0x3, 0x5) close(0x4) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f07ebbeef, 0x8031, 0xffffffffffffffff, 0x215eb000) r3 = socket$kcm(0x2a, 0x2, 0x0) ioctl$SIOCX25SFACILITIES(r3, 0x891b, 0x0) sendmsg$nl_generic(r2, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000080)=ANY=[@ANYBLOB="3800000041000701fefffffffeffffff017c0000040042800c00018006000600800a000014000280100003800c"], 0x38}, 0x1, 0x0, 0x0, 0x4048011}, 0xc000) sendmsg$NFT_BATCH(r0, &(0x7f0000009b40)={0x0, 0xffffffffffffff93, 0x0, 0x1, 0x0, 0x0, 0x6040850}, 0x0) 7.563886618s ago: executing program 7 (id=4991): r0 = socket(0x10, 0x803, 0x0) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000240), 0xffffffffffffffff) sendmsg$NL80211_CMD_FLUSH_PMKSA(r0, &(0x7f00000007c0)={0x0, 0x0, &(0x7f0000000780)={&(0x7f0000000740)=ANY=[@ANYBLOB=' \x00\x00\x00', @ANYRES16=r1, @ANYBLOB="0c009900020000000c0000000000000000000000000000000009"], 0x20}, 0x1, 0x0, 0x0, 0x40010}, 0x40020) 7.289290034s ago: executing program 5 (id=4992): bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32, @ANYBLOB="0000000000000000b70800000d0000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000100000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000740)=ANY=[@ANYBLOB="0b00000005000000000400000900000001"], 0x48) r1 = openat$nci(0xffffffffffffff9c, &(0x7f0000000240), 0x2, 0x0) r2 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r3 = syz_genetlink_get_family_id$nfc(&(0x7f0000000100), r2) ioctl$IOCTL_GET_NCIDEV_IDX(r1, 0x0, &(0x7f00000000c0)=0x0) r5 = syz_init_net_socket$bt_l2cap(0x1f, 0x5, 0x0) ioctl$sock_ifreq(r5, 0x89b1, &(0x7f0000000080)={'dummy0\x00', @ifru_flags=0x200}) sendmsg$NFC_CMD_DEV_UP(r2, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000002c0)=ANY=[@ANYBLOB="1c000000", @ANYRES16=r3, @ANYBLOB="010026bd7000fcdbdf250200000008000100", @ANYRES32=r4], 0x1c}}, 0x840) write$nci(r1, &(0x7f0000000040)=ANY=[@ANYBLOB="510302"], 0xc) bpf$PROG_LOAD(0x5, &(0x7f00000004c0)={0xa, 0x4, &(0x7f0000000480)=ANY=[@ANYBLOB="18000000000000000000000000000000850000006d"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r6 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000d80)={0x18, 0x5, &(0x7f0000000480)=ANY=[@ANYBLOB="1801000021"], 0x0, 0x40, 0x0, 0x0, 0x0, 0xb4a02fe0ce239f93, '\x00', 0x0, 0x2}, 0x94) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0xe, 0x0, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000800000000000000000000018110000", @ANYRES32=r0], 0x0, 0x0, 0x0, 0x0, 0x41100, 0x59, '\x00', 0x0, @sk_skb=0x26, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, r6, 0x0, 0x0, 0x0, 0x0}, 0x94) r7 = bpf$PROG_LOAD(0x5, &(0x7f0000000300)={0x6, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, @fallback=0x4, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) socket$inet6(0xa, 0x5, 0x0) socket$unix(0x1, 0x1, 0x0) close(0x4) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000180)={r7, 0x2000000, 0xe, 0x0, &(0x7f0000000040)="630b008646dc3f0adf33c9f7b986", 0x0, 0xcf25, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x80}, 0x50) r8 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r9 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r10 = syz_genetlink_get_family_id$nl802154(&(0x7f0000000080), r8) ioctl$sock_SIOCGIFINDEX_802154(r8, 0x8933, &(0x7f0000000100)={'wpan0\x00', 0x0}) r12 = openat$tun(0xffffffffffffff9c, &(0x7f0000000000), 0xc0a41, 0x0) ioctl$TUNSETIFF(r12, 0x400454ca, &(0x7f0000000200)={'syzkaller1\x00', 0x4002}) write$tun(r12, &(0x7f0000019580)={@val, @val={0x0, 0x0, 0x8, 0x9, 0x40, 0x4}, @eth={@dev={'\xaa\xaa\xaa\xaa\xaa', 0x30}, @broadcast, @void, {@ipv4={0x800, @igmp={{0x5, 0x4, 0x1, 0xc, 0x1c, 0x67, 0x0, 0x5, 0x2, 0x0, @dev={0xac, 0x14, 0x14, 0x1b}, @broadcast}, {0x22, 0x40, 0x0, @local}}}}}}, 0x38) r13 = syz_open_procfs$namespace(0x0, &(0x7f0000000280)='ns/mnt\x00') sendmsg$NL802154_CMD_SET_WPAN_PHY_NETNS(r9, &(0x7f0000000380)={0x0, 0x0, &(0x7f0000000340)={&(0x7f00000002c0)={0x24, r10, 0x411, 0x70bd2a, 0x25dfdbfd, {}, [@NL802154_ATTR_IFINDEX={0x8, 0x3, r11}, @NL802154_ATTR_NETNS_FD={0x8, 0x1d, r13}]}, 0x24}, 0x1, 0x0, 0x0, 0x14}, 0x40000) sendmsg$NL802154_CMD_SET_LBT_MODE(r2, &(0x7f0000000400)={&(0x7f0000000080)={0x10, 0x0, 0x0, 0x45fbe78d76c54a36}, 0xc, &(0x7f00000003c0)={&(0x7f0000000280)={0x20, r10, 0x1, 0x70bd2a, 0x25dfdbfb, {}, [@NL802154_ATTR_WPAN_DEV={0xc, 0x6, 0x300000003}]}, 0x20}, 0x1, 0x0, 0x0, 0x440c1}, 0x40000) 6.575784809s ago: executing program 7 (id=4993): bind$inet6(0xffffffffffffffff, &(0x7f00000000c0)={0xa, 0x4e22, 0x9, @ipv4={'\x00', '\xff\xff', @remote}, 0x6}, 0x1c) (async) r0 = socket(0x10, 0x3, 0x0) (async) syz_init_net_socket$nfc_raw(0x27, 0x5, 0x0) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000080)=ANY=[@ANYBLOB="4c00000010001fff00"/20, @ANYRES32=0x0, @ANYBLOB="00000000000000002c00128009000100626f6e64000000001c0002800500010004002000080020"], 0x4c}}, 0x0) mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000)='./cgroup.net/syz0\x00', 0x1ff) r1 = socket$inet_mptcp(0x2, 0x1, 0x106) setsockopt$inet_opts(r1, 0x0, 0xf, &(0x7f0000000000)='\x00', 0x1) r2 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000), 0x200002, 0x0) r3 = openat$cgroup_ro(r2, &(0x7f0000000080)='blkio.bfq.sectors_recursive\x00', 0x0, 0x0) preadv(r3, &(0x7f00000000c0), 0x0, 0x5, 0x8) r4 = socket$nl_generic(0x10, 0x3, 0x10) r5 = syz_genetlink_get_family_id$fou(&(0x7f0000000900), r4) sendmsg$FOU_CMD_DEL(r4, &(0x7f0000000a80)={0x0, 0x0, &(0x7f0000000a40)={&(0x7f0000000000)={0x1c, r5, 0x603, 0x70bd2b, 0x25dfdbfd, {}, [@FOU_ATTR_IFINDEX={0x8}]}, 0x1c}, 0x1, 0x0, 0x0, 0x4010}, 0x4044) (async) sendmmsg$alg(r0, &(0x7f0000000140), 0x4924b68, 0x0) unshare(0x20000400) (async) socket$netlink(0x10, 0x3, 0x10) (async) r6 = socket$netlink(0x10, 0x3, 0x10) bind$netlink(r6, &(0x7f0000514ff4)={0x10, 0x0, 0x0, 0x2ffffffff}, 0xc) (async) setsockopt$sock_int(r6, 0x1, 0x8, &(0x7f0000000300), 0x4) (async) ioctl$BTRFS_IOC_DEFAULT_SUBVOL(r0, 0x40089413, &(0x7f0000000340)=0x2) (async) r7 = socket$nl_generic(0x10, 0x3, 0x10) (async, rerun: 32) r8 = syz_genetlink_get_family_id$devlink(&(0x7f0000000140), 0xffffffffffffffff) (rerun: 32) sendmsg$DEVLINK_CMD_RELOAD(r7, &(0x7f0000000000)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000080)={0x3c, r8, 0x1, 0x70bd37, 0x25dfdbfd, {}, [{@nsim={{0xe}, {0xf, 0x2, {'netdevsim', 0x0}}}, @DEVLINK_ATTR_NETNS_PID={0xfffffffffffffdb1}}]}, 0x3c}, 0x1, 0x0, 0x0, 0x4040010}, 0x30) (async, rerun: 64) r9 = syz_init_net_socket$nfc_llcp(0x27, 0x1, 0x1) (rerun: 64) r10 = socket$nl_xfrm(0x10, 0x3, 0x6) (async) connect(0xffffffffffffffff, &(0x7f0000000440)=@pppol2tp={0x18, 0x1, {0x0, 0xffffffffffffffff, {0x2, 0x4e22, @dev={0xac, 0x14, 0x14, 0x33}}, 0x1}}, 0x80) sendmsg$nl_xfrm(r10, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000500)={&(0x7f00000001c0)=@newsa={0x108, 0x10, 0x633, 0x0, 0x0, {{@in6=@private0, @in6=@mcast1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x88}, {@in=@multicast2, 0x0, 0x32}, @in=@empty, {0x0, 0x0, 0x0, 0x0, 0x1, 0x3, 0x800000000000000}, {}, {0xf2e, 0xa8300}, 0x0, 0x0, 0xa, 0x1, 0x0, 0x5a}, [@replay_val={0x10, 0xa, {0x70bd27, 0x70bd27, 0x61}}, @tfcpad={0x8, 0x16, 0xffffffff}]}, 0x108}}, 0x0) (async) socket$inet6_tcp(0xa, 0x1, 0x0) (async) connect$unix(r9, &(0x7f0000000100)=@abs={0x27, 0x0, 0x2}, 0x6e) socket$kcm(0x29, 0x5, 0x0) 5.004728664s ago: executing program 5 (id=4994): r0 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_tcp_int(r0, 0x6, 0x13, &(0x7f0000000040)=0x100000001, 0x4) connect$inet6(r0, &(0x7f0000000100)={0xa, 0x0, 0x7, @ipv4={'\x00', '\xff\xff', @local}, 0x8001}, 0x1c) setsockopt$inet6_tcp_TCP_ULP(r0, 0x6, 0x1f, &(0x7f00000002c0), 0x4) (async) r1 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r1, &(0x7f0000000040)={0x0, 0x0, &(0x7f00000003c0)={&(0x7f0000000100)=ANY=[@ANYBLOB="2000000072009fb326bd7000ffdbdf2507000000", @ANYRES32=0x0, @ANYBLOB='\b'], 0x20}, 0x1, 0x0, 0x0, 0x804c090}, 0x20041040) setsockopt$inet6_tcp_TCP_REPAIR_QUEUE(r0, 0x6, 0x14, &(0x7f0000000400)=0x1, 0x4) (async) setsockopt$inet6_tcp_TLS_TX(r0, 0x11a, 0x2, &(0x7f00000003c0)=@ccm_128={{0x303}, "63a7d38a4937c1fc", "5f90d5f023d7bd5bd799356c95abffc8", "09fe0891", "0aa3b9dd5fe7a771"}, 0x28) (async, rerun: 64) r2 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000001480)='blkio.bfq.io_service_bytes\x00', 0x275a, 0x0) (rerun: 64) write$tun(r2, &(0x7f0000000340)=ANY=[], 0x141) setsockopt$inet_sctp6_SCTP_DISABLE_FRAGMENTS(r2, 0x84, 0x8, &(0x7f00000004c0)=0x2, 0x4) (async) mmap(&(0x7f0000000000/0x4000)=nil, 0x4000, 0x1, 0x10, r2, 0x0) (async) r3 = bpf$PROG_LOAD(0x5, &(0x7f0000000040)={0x2, 0x4, &(0x7f0000000200)=ANY=[@ANYBLOB="180000000300000000000000feffff10850000000700000095"], &(0x7f0000000000)='GPL\x00', 0x0, 0x0, 0x0, 0x100, 0x70, '\x00', 0x0, @fallback=0x30, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) (async) r4 = getpid() bpf$BPF_LINK_CREATE_XDP(0x1c, &(0x7f0000000180)={r3, 0x0, 0x30, 0x0, @val=@uprobe_multi={&(0x7f00000002c0)='./cgroup/cgroup.procs\x00', &(0x7f0000000140)=[0x27], 0x0, 0x0, 0x1, 0x1, r4}}, 0x40) syz_open_procfs$namespace(r4, &(0x7f0000000000)='ns/time\x00') sendmsg$IPCTNL_MSG_TIMEOUT_DEFAULT_GET(r2, &(0x7f0000000480)={&(0x7f0000000240)={0x10, 0x0, 0x0, 0x200}, 0xc, &(0x7f0000000440)={&(0x7f0000000280)={0x30, 0x4, 0x8, 0x101, 0x0, 0x0, {0x0, 0x0, 0x9}, [@CTA_TIMEOUT_L3PROTO={0x0, 0x2, 0x1, 0x0, 0x883e}, @CTA_TIMEOUT_DATA={0x14, 0x4, 0x0, 0x1, @tcp=[@CTA_TIMEOUT_TCP_SYN_RECV={0x8, 0x2, 0x1, 0x0, 0x4}, @CTA_TIMEOUT_TCP_SYN_SENT2={0x8, 0x9, 0x1, 0x0, 0x7fffffff}]}]}, 0x30}, 0x1, 0x0, 0x0, 0x28000004}, 0x4040000) (async, rerun: 32) setsockopt$inet6_tcp_TLS_TX(r0, 0x11a, 0x1, &(0x7f0000000080)=@ccm_128={{0x303}, "b421eba833d4b156", "56df2295bfda5c4f9fecff61beaa8bb4", "808065e3", "7f1f1c2ab4421d27"}, 0x28) (async, rerun: 32) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x3, 0x8031, 0xffffffffffffffff, 0x0) tee(r1, r1, 0x0, 0x9) recvmmsg(r0, &(0x7f0000004600)=[{{0x0, 0x0, &(0x7f00000032c0)=[{&(0x7f00000022c0)=""/4096, 0x4000}], 0x1}, 0xfff}, {{0x0, 0x0, 0x0}, 0x100}], 0x2, 0x0, 0x0) writev(r0, &(0x7f0000001400)=[{&(0x7f0000000140)="58ddb007a47a8b1f458ab677d557ca50def8e5bc61dbc50bca64f7e76268cd64007095adfef77465b69ec03139854d6f03d5f9bd019fe046035ef7049f48fcc7321c34faca94ff08f59edaf2ab55eedcc278df823564618627217a527b971bdfa0afd948a6cdb9e05ccaef35c22047246a7b97a8e1b645e51c47b296c759c8dfd56beb8fa15c800ad060ab378a269557bc053d9be903", 0x96}, {&(0x7f0000000300)="2ea63d218bc1023b2e6eceeb92d548803a43d4dddc2433c76650030c188f490311ff86da69fab1539139f6dda31739c2bb4412dd471137e2a53496c5f7707e01ccfb826f2eb96895230862e11d56c19af139de912ac5e68a99080e428443fcfba8b0460290c6275affe9953a97260b0304fd7ef159c9cd30cae1bcc75d568d353575ec3b5293fb80de85c7562804230489274831b2c17dccccc523ada66a46", 0xfe86}, {&(0x7f0000000580)="63e73686513c53aec098be4b2dfc27b5be1f5f85f54c24efb8fc94ccaac29f1378e04daa49f8dcbda8b0faff57761a0ce8a311802e5dd07a159721cac7d2250f4359e04727386cc7d1a3e8bf93339f3df1340041f71046f2b1d9a80af70fb8246258d09c310af3bef017fde1fd8ce505cd4858549192a95e512257b6c676a7ebb41230e4e4fb23e9666bfdc8bc2ca77bbd11810836df4a6f3dbe3ee75c34b07c64e1af6d62d54fccb9f281eac16eca7129aa4355fd53", 0xb6}, {&(0x7f0000000500)="de21cff472aa580c2ee9f858", 0xfc96}, {&(0x7f00000014c0)="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", 0xdf3}], 0x5) (async, rerun: 32) setsockopt$sock_int(r0, 0x1, 0x7, &(0x7f00000000c0)=0xffff1884, 0x4) (rerun: 32) 4.952402501s ago: executing program 6 (id=4995): r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0x2, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000040)={'syzkaller1\x00', 0x1}) (async) ioctl$TUNGETVNETBE(r0, 0x800454df, &(0x7f0000000180)=0x1) write(0xca, &(0x7f0000000040)="043bfdffffab3f6822a0d34810", 0xd) r1 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r1, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000180)=@newtaction={0x8c, 0x30, 0x1, 0x0, 0x0, {0x7a}, [{0x78, 0x1, [@m_police={0x74, 0x1, 0x0, 0x0, {{0xb}, {0x64, 0x2, 0x0, 0x1, [[@TCA_POLICE_TBF={0x3c}, @TCA_POLICE_RESULT={0x8}]]}, {0x4}, {0xc, 0xb}, {0x1, 0xa, {0x20}}}}]}]}, 0x8c}}, 0x0) 4.907847012s ago: executing program 7 (id=4996): r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x7101}) r1 = openat$tun(0xffffffffffffff9c, &(0x7f00000000c0), 0x0, 0x0) ioctl$TUNSETIFF(r1, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x7101}) (async) r2 = socket$nl_route(0x10, 0x3, 0x0) r3 = socket$unix(0x1, 0x1, 0x0) ioctl$sock_SIOCGIFINDEX(r3, 0x8933, &(0x7f00000002c0)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r2, &(0x7f00000012c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000140)=@newqdisc={0x44, 0x24, 0x4ee4e6a52ff56541, 0x70bd2a, 0xffffffff, {0x0, 0x0, 0x0, r4, {0x0, 0xfff1}, {0xffff, 0xffff}, {0x5, 0xc}}, [@qdisc_kind_options=@q_hfsc={{0x9}, {0x14, 0x2, @TCA_HFSC_FSC={0x10, 0x2, {0x4d, 0xfffffffb, 0x5fffffff}}}}]}, 0x44}, 0x1, 0x0, 0x0, 0x4000000}, 0x20040084) (async) close(0xffffffffffffffff) (async) r5 = socket(0x400000000010, 0x3, 0x0) (async) r6 = socket$unix(0x1, 0x1, 0x0) ioctl$sock_SIOCGIFINDEX(r6, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) (async) bpf$PROG_LOAD(0x5, &(0x7f0000000280)={0xc, 0x8, 0x0, &(0x7f00000000c0)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x1b, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2}, 0x94) r8 = socket$can_j1939(0x1d, 0x2, 0x7) ioctl$ifreq_SIOCGIFINDEX_vcan(r8, 0x8933, &(0x7f00000007c0)={'vxcan0\x00', 0x0}) (async, rerun: 32) write$cgroup_devices(0xffffffffffffffff, 0x0, 0xffffffffffffff10) (rerun: 32) r10 = socket$can_j1939(0x1d, 0x2, 0x7) bind$can_j1939(r10, &(0x7f0000000340)={0x1d, r9, 0x3, {0x2, 0xff, 0x6}, 0xfe}, 0x18) sendmmsg$sock(r10, &(0x7f0000004980)=[{{&(0x7f0000000280)=@can={0x1d, r9, 0xc8}, 0x80, 0x0}}], 0x1, 0x40050) (async) sendmsg$nl_route_sched(r5, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000640)=@newtfilter={0x3c, 0x2c, 0xd3f, 0x30bd2d, 0x25dfdbfd, {0x0, 0x0, 0x0, r7, {0xb, 0x3}, {}, {0x8, 0xffe0}}, [@filter_kind_options=@f_basic={{0xa}, {0xc, 0x2, [@TCA_BASIC_CLASSID={0x8, 0x1, {0x0, 0xfff1}}]}}]}, 0x3c}, 0x1, 0x0, 0x0, 0x10}, 0x0) r11 = socket$unix(0x1, 0x5, 0x0) ioctl$sock_SIOCGIFINDEX(r11, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) (async) r13 = socket(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r13, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000300)=@newqdisc={0x2c, 0x24, 0xf0b, 0x70bd26, 0x0, {0x0, 0x0, 0x0, r12, {0x0, 0xffff}, {0xffff, 0xffff}, {0xb, 0x2}}, [@TCA_RATE={0x6, 0x5, {0x7f, 0x3}}]}, 0x2c}, 0x1, 0x0, 0x0, 0x800}, 0x20000000) 4.867575574s ago: executing program 3 (id=4997): socket$inet6_mptcp(0xa, 0x1, 0x106) (async) r0 = socket$inet6_mptcp(0xa, 0x1, 0x106) mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000040)='./cgroup/syz1\x00', 0x1ff) r1 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000), 0x200002, 0x0) openat$cgroup_procs(r1, &(0x7f0000000840)='cgroup.procs\x00', 0x2, 0x0) (async) r2 = openat$cgroup_procs(r1, &(0x7f0000000840)='cgroup.procs\x00', 0x2, 0x0) write$cgroup_pid(r2, &(0x7f0000000380), 0x12) syz_80211_join_ibss(&(0x7f0000000000)='wlan0\x00', &(0x7f0000000040), 0x6, 0x0) syz_80211_join_ibss(&(0x7f0000000080)='wlan1\x00', &(0x7f00000000c0), 0x6, 0x0) r3 = socket$inet(0x2, 0x2, 0x0) socket(0x10, 0x3, 0x0) (async) r4 = socket(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r4, 0x8933, &(0x7f0000000180)={'ip6tnl0\x00', 0x0}) sendmsg$nl_route_sched(r4, &(0x7f00000007c0)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000100)=@newqdisc={0x48, 0x24, 0xf0b, 0x0, 0x25dfdbfe, {0x0, 0x0, 0x0, r5, {}, {0xffff, 0xffff}, {0xe, 0x5}}, [@qdisc_kind_options=@q_etf={{0x8}, {0x14, 0x2, @TCA_ETF_PARMS={0x3e, 0x1, {0x0, 0xb, 0x5}}}}, @TCA_RATE={0x6, 0x5, {0x9, 0x6}}]}, 0x48}}, 0x4000010) ioctl$sock_SIOCGIFINDEX(r3, 0x8933, &(0x7f0000000100)={'wlan0\x00'}) (async) ioctl$sock_SIOCGIFINDEX(r3, 0x8933, &(0x7f0000000100)={'wlan0\x00', 0x0}) socket$inet6(0xa, 0x800000000000002, 0x0) (async) r7 = socket$inet6(0xa, 0x800000000000002, 0x0) setsockopt$SO_TIMESTAMPING(r7, 0x1, 0x41, &(0x7f0000000200)=0x632a, 0x4) setsockopt$inet6_int(r7, 0x29, 0x5, &(0x7f0000000000)=0x2ffffffc, 0x4) sendmmsg$inet6(r7, &(0x7f0000000e00)=[{{&(0x7f0000000080)={0xa, 0x4e23, 0x0, @mcast2}, 0x1c, 0x0}}], 0x1, 0x0) (async) sendmmsg$inet6(r7, &(0x7f0000000e00)=[{{&(0x7f0000000080)={0xa, 0x4e23, 0x0, @mcast2}, 0x1c, 0x0}}], 0x1, 0x0) recvmmsg(r7, &(0x7f00000004c0)=[{{0x0, 0x0, 0x0}, 0xfffffffe}], 0x1, 0x2163, 0x0) ioctl$sock_SIOCGIFINDEX(r3, 0x8933, &(0x7f0000000140)={'wlan1\x00', 0x0}) r9 = socket$packet(0x11, 0x2, 0x300) sendto$packet(r9, 0x0, 0x0, 0x0, &(0x7f0000000200)={0x11, 0x888e, r6, 0x1, 0x0, 0x6, @random="080211000001"}, 0x14) sendto$packet(r9, 0x0, 0x0, 0x0, 0x0, 0x0) sendto$packet(r9, 0x0, 0x0, 0x0, &(0x7f00000002c0)={0x11, 0x800, r8, 0x1, 0x0, 0x6, @random="08021100"}, 0x14) (async) sendto$packet(r9, 0x0, 0x0, 0x0, &(0x7f00000002c0)={0x11, 0x800, r8, 0x1, 0x0, 0x6, @random="08021100"}, 0x14) bpf$PROG_LOAD(0x5, &(0x7f0000000340)={0x17, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="18020000ffffffff00000000000000001801000011646c2500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b7030000000000008500000006000000850000007d00000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0xba03d6b623375271, '\x00', 0x0, @fallback=0x2b, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) (async) bpf$PROG_LOAD(0x5, &(0x7f0000000340)={0x17, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="18020000ffffffff00000000000000001801000011646c2500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b7030000000000008500000006000000850000007d00000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0xba03d6b623375271, '\x00', 0x0, @fallback=0x2b, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="180000000000000000000000000000008500000022000000180100002020702500000000002020207b0af8ff00000000bfa100000000000007010000f8ffffffb702000008"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x80}, 0x94) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0xe, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="180000000000000000000000000000008500000007"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x1c, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) (async) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0xe, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="180000000000000000000000000000008500000007"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x1c, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$OBJ_GET_PROG(0x7, &(0x7f0000000280)=@generic={&(0x7f0000000240)='./file0\x00', 0x0, 0x18}, 0x18) r10 = socket$can_bcm(0x1d, 0x2, 0x2) ioctl$ifreq_SIOCGIFINDEX_vcan(r10, 0x8933, &(0x7f0000000000)={'vcan0\x00', 0x0}) connect$can_bcm(r10, &(0x7f0000000100)={0x1d, r11}, 0x10) (async) connect$can_bcm(r10, &(0x7f0000000100)={0x1d, r11}, 0x10) bpf$TOKEN_CREATE(0x24, &(0x7f0000000300)={0x0, r0}, 0x8) 4.407062214s ago: executing program 6 (id=4998): socket$nl_route(0x10, 0x3, 0x0) bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000080)={&(0x7f00000000c0)={{0xeb9f, 0x1, 0x0, 0x18, 0x0, 0x18, 0x18, 0x6, [@struct={0x8, 0x1, 0x0, 0xf, 0x0, 0xffffffff, [{0x1, 0x3, 0x3}]}]}, {0x0, [0x0, 0x0, 0x0, 0x2e]}}, 0x0, 0x36, 0x0, 0x6}, 0x28) bpf$MAP_CREATE_TAIL_CALL(0x0, 0x0, 0x50) bpf$PROG_LOAD(0x5, &(0x7f0000000100)={0x1, 0x3, &(0x7f0000001a00)=ANY=[@ANYBLOB="18000000030000000000000026d0000095002b000000000093adff012255f674412d02000000880b5f04596a5e99fce658be2f200c699223886d8be4b50000005ab527ee3697f98125f30e6326996a3cfee33025a30b45bdcf2c69d105e5e55a1d273683623f1a5dc6e3c7e20eb7a98ecf3bd2cf898e924abe26ac296f660e69ba982fd76e00dcff7f0000ca6b78ad833488cfe4109eaf009eddcf21f5c63cde2f00150200000001000000520a0000151d010000000100bf00000000cc587424363da52001a3cdf2000000db74596fd72c002a60c1bc7dc8c38b7d2e13c50424b9dd1145d03ff45f70685c6bd9ff41c69b7de406e89dcbb7677e65a88a8407a9e7f9c0e91028b0856eb1ed9474480737a55ebb0bd701f7fb21135c6172eba7eb8a341f07e5a2d1e88b3cfc22df01e4bac9d97328fa2a82b5e8741e02056d93a433f50479387467824262852c7939db5672d07cdbe8e14abf56497e5d56dbe37551b870b2851c3f0a1a9ebfcba105a6ccdd01b0f04edb256c0200000073f6db43661bd7f0e2536ffbfe5ca31b4083145531458b7d1e341c6b351ebc5223f54d6bec93f4ef088e5d1be2515226988d664709ff03f1aa3dc7f1580ace9bf2afd28d0700000000000000d6eb372713255012e028cb2654d493a0b43bf21375709f348f5eda2967199cc936859a538100070000000000dc10e13ef227f627a40000ad1fa253d33fa74f172d3407ae4e1e347c0c6ef9dd2b6bb700000000000000000c586272c3f4d79bc36315745cb149f3cb385e6add14652003c7cdd3324f07d134d3a6c718bbd1aafe1140cff0be4c6f8df084c5e9734ae30aa9af030025f01ab03a9b1074407136bc506031f0916a39d3057d55183612b39e73ae8e6dc30356886a831836469e2051d937eb85f3f2d5ae2c1dca476b97419a3b76ed62409d004d7fbe362145d19605d760df4c5124ca325d374b371867a79b35c6617fc3327191fbf514573f0e30d1d60be2168fffc2f3dccd599a2cb77f124e22f87673675805494db821f39b50d938d5fd8c6b2a3a324c257bc9110971b749ccd74089ed6b86f81ca3ba47d8f71d290ed1b1a11f7a67125170c88c3b6a50692cc0064fc6bbd312536ac15016c85c6332226401b110da9c786eeca22debc99335587b54c13c3107008fa069af8223b38ced735c2d906551004d8dc10d88738488da01ffa4add56474573c964a270000f2f16625c0c10200000000c7a5ca60fdad159f2e44171f39638410020000004825d081f2d987f05c534187738655d7dc958f2046fa0c1619a6554b82d9c162eb61ca74f1ffdaccf0ea5f06e0fca8b27ff3983ab74fd3d560700a1fab44e77e312b3b129e000302d613916c9bcf9f0000fac73a5b6bfb27f88dba816020be760f7b45e001efada8000000000000fdaf4660402f7b3b79a433e08074ea2462974a00040000eb01352638f56dae0249d15ba8767259658878b7492cfbacde9b57cf4de00788adce638190f3570e0b4c80ef682df22201270955afb6008846557ee3bc09fda6dbb6550d597300eb82a184c96ffde5a30e5433e866665b98ca2002c804c22ff2634b7bfbf5c0d586cda5b45fd00dede1e88a4d41dee7cc76d7a23d06acb1d2d4c58faea84158bb440df2a694f4cdcaa4f65c22efffffffffffdd00000000d503d79986958115ae07b70f991430b7fb475d77b869ee02000000000000000000001ffff0ef89b2a68d2b05c995445d8a7700bcdfbec74fb2dd163e863315e84498dfb52bb93f6c9084659ce777ddac563c8596c2b1d8180289a61faa95a82bf1cfb7f2fd7252e9322abe282c33445d443a67467893b9bf0d1c8130ae6b226900000635376413c29f7c6f7b7e29b9a0c64e68328661f0c06e21f7d7dc22174ea4447a6f60edef3a4168d40200fbc71104512efe8e5d7d934aa289b4bd2b870000000000000000000007000000002000000000009b777883a02f0593dfc4cb4114b9f9cf4ad155110cc6ace2b322ac31bfa27847c799c8009a1ea5b98e525e6383ad7fd9795170e7b11e247603c2ff49a11459c7f606d729d3979676bffb3049166bb84a0f061991bd57c2566c10c282352aba05b6164ef876915a3f2491e4793e590dcc71de10da96366c1e992c0068c940dd4422c9882d3aa0f8a797b8fea6efcfb5276b7679f15559edaa977504cc0b2f777acb907ebf5fc14add71d0bca37405ded69b77ab4a3d7487fd04000000de17e1e13b93669b79556abb722d9c085b189b5fd1f30e8dc813f608830b110001732135e8e7262f290000923bfb6b41ff3792cee2fc37eee739c3e36a4bc80112968ec0d8902eced1fe552018014a463abbbf7ccd6a92a5734e3ebfca9b6e88e031f31de2183652e77c164c646a1cfd3710aa4205d8d4d4f974133ccb1e49feb42664eccd809c0ba8917eda87489e8946d5c8156197bcb66fd5606c63e3389ee9e8552381646365066ef9a36a449c96485c22ad1aa423b7b89efbc6cd54000bb0ea5f4f1e8773144fb6ac9a44d43593d77e66aa7ed7f3d4e7b211590c738888d02b2dbb0b2ba73ec72e1d8d7360a128499dd19e1e7b9b0671f4f58515b45ecb9964f3c4ddb8234391d514f8d996d8d6dd7f8fadfee2d7a0035638ce27c2936cb04b30a0eb0cde0000000000000040000000ec3c12ecee8fc3a40000000000000000e215b00ce2570b930723cbadb4033d1b8aaa2cfb3fb89e4a6e89737fd6232218a9e0c099d1eb59d60b3cca089785642f327139bc4394fb6d547a9b3c22599e780c1da7433fb47615d372e3fffe9703e37d5c87d513165278650738efcc04d27b766cf7f60066edd292f6c8a2174f391ed164bb1816819ceb3e378e776d422bc946cd9501accebeac3a5b31d8abc68ae537cd44a04e6bc21c35a7beab2610c51e593676bf635a20f597f4631b91454d182f826071f5210bd6d93173589929b23801e63c2266fde13b5a04b8d48be057c752bc415a756ea9b4d34156c4f73dd5e5924ef101a5fcdaf37c7ba2c4a9de9b000000000000000000000000000000a73b862e4b63c245616b522345587d0ee65a6902bdd0abd941e8aba37510b222ae544f395edd1b92ad53fc68f08ea00edc5e10d768836169dd296d56b306e8b75778c37571792a6c3d8b02ef378ebd59422cdd008bef6f80a80a68641ea5ed4f1126bb676098c10bf663eb3fb8c839364d28fd046dc64b35f9c3397ce6f4ad357b0000000000090000000088c7a8e2638f650a6f04a6f33a090f59414d6ebcbc687e66d600000000bd0a58ea6d36fc2cf9b9a71c137a2a22adb1006f371d4faf47285fd66fe0389afb96854bb360edcdf11b4ff6dd578bba93e949d240cde9b5836cb46032484dc19c93db7b6e5afa10547c78e76a3111557346e52566df196fd630561bb908fff4d2e19562aabd43742a26a43799f8636fa04ceb40c9e4ca1cfbbc7b949cd245a3ee118fd0d4f639444539af8766028d4ac4d4c548e290199e0dacbb4f6796b39bf32934d941ba2f88e3ebd0cf8e24f99eca86e4ca9b2cd2b54044a7fc4631572a6378a32df288785f146275c1f548e2a0c1016744e05f9de5044373d7650125027547eefe7b2d8c8871bb65395fae99d8456883705bfdfb00001854b2e5efa8aaf25827d659f592b1575281ec125de7fb91cd81d91dcb19f5cdf1e1e2b4a8a1389753a09110538689e38e07fb2dc72bd4fd11d7bc16aac5d85c6101bb722895248e463a5fb45ce0e564e90cb19d5993b471687ae4165e29cf2f58082115f5f8569896eedfd798733223e6d6584997510c374912ab798bd4af4654c01bb2c411bc36468ddd62b4eba5cfc8953526e0e5b1359797956152d0098ce47c62c3fe5a23219389622b7f65bf03527d25c3941b9cf1ffeedf6d99082bb57ea871c12213cc40900f83033bc18c529171fae324c315bc6ce358831d0230412212acfd5fc8d5cb0d028cf568e8bb40e27befe2ff01f7c6674a4d86d900633ea36641e0a781ea0ea7f2d928b8b22e2f97dd13348927375baea6863bef4acf4299096ada5cdd2a0eaafaa760a79d102d1e0c0000000000000000007926653b8d79ce16a432f124786a0bc3c5b7d196822492ae1ccf91aeac16406ad6f9cd3d96d57fceba8360ae49f73351814c9c2972f11064aaf3739d9100f9c0e4d0cb17d50c82e305ba7d62cf1cc6da26e34982a8c74dd8122cf5b5e7c34fd2712a0cef05e4d8ec7dd363219676bd9b19943185b132eb35a695e208dfa5cecdb1d6425c8879063c0f11bd64291a4209ee6dc1d9e9010013f6148c603e6a335e298efd6ab5cccc47a2c568c6afec54f8251bd840752addf200371361c9eedf05ed98585cf6d99e9e56055064bda2d373369761238c278147cd0eb7799f6b9c9fcaa3fd282154994f5b25420c86db9b6401e885de1c615a719a1c83e8fbbb181282dbaf3313a4e4a4877e9f37607e2cd6da0cf6371ec06a75f5a4206b2418ad8897ae149085d63f01f22eca44033234b3930b4d5da756669a1d59d69e7de54abf439988ed7ec33c2d0a901bb0985a24878984d8a4340fa9a356d100926fb5f2ef9976366a61b8cc2bcb1c072b0e9c564852388e1edff10d75b3832792e471cc15b40380f94d834243080158603fbc9134d6983c540525447478984611c0d9666941bfc0a30db47a8828b6e5c51aee2094599b4ce52795750e1764f1657ca8c5633c71287239dddf5c651496f7bbd148c937f083d2e4e0197dbc6ff0649c749707b17399b1d7efad23abb8b40b38704737e15662ae4913a4a001cd3b71c7af75b5ffad9780650c800a40ca80ddc41987919142fd28dbf22db5f4c435415a03455e1d55d1783ccef97d7e4655cf839d06f06e137bbe462a03b3100231914b19739dd57b4f12d026ad0c7fd3"], &(0x7f00002bf000)='GPL\x00', 0x4, 0x436, &(0x7f0000000040)=""/183, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0xfffffffffffffc95}, 0x48) sendmmsg$inet(0xffffffffffffffff, 0x0, 0x0, 0x4000000) close(0xffffffffffffffff) writev(0xffffffffffffffff, 0x0, 0x0) r0 = socket$nl_generic(0x10, 0x3, 0x10) syz_emit_ethernet(0x52, &(0x7f0000000180)={@local, @dev, @void, {@ipv4={0x800, @icmp={{0x5, 0x4, 0x0, 0x0, 0x44, 0x0, 0x0, 0x0, 0x1, 0x0, @initdev={0xac, 0x1e, 0x0, 0x0}, @local}, @time_exceeded={0xb, 0x0, 0x0, 0x3, 0x2c, 0x0, {0xa, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x89, 0x0, @private=0xa010101, @local, {[@rr={0x7, 0x13, 0x57, [@initdev={0xac, 0x1e, 0x1, 0x0}, @private=0xa010102, @initdev={0xac, 0x1e, 0x1, 0x0}, @private=0xa010102]}]}}}}}}}, 0x0) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000540), 0xffffffffffffffff) r2 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f0000000300)={'wlan0\x00', 0x0}) sendmsg$NL80211_CMD_JOIN_MESH(r2, &(0x7f0000000400)={0x0, 0x0, &(0x7f00000003c0)={&(0x7f0000000080)=ANY=[@ANYBLOB='L\x00\x00\x00', @ANYRES16=r1, @ANYBLOB="010000000000000000004400000008000300", @ANYRES32=r3, @ANYBLOB="08002600851600000a00180000000000000000001c005a801800"], 0x4c}}, 0x0) sendmsg$NL80211_CMD_UPDATE_FT_IES(0xffffffffffffffff, &(0x7f0000000480)={0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x4000000}, 0x80) bpf$PROG_LOAD(0x5, &(0x7f0000000680)={0xc, 0x8, &(0x7f0000000d80)=ANY=[@ANYBLOB="1800", @ANYBLOB], 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, '\x00', 0x0, @fallback=0x1a, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_PROG_TEST_RUN(0xa, 0x0, 0x0) setsockopt$inet_sctp_SCTP_FRAGMENT_INTERLEAVE(0xffffffffffffffff, 0x84, 0x12, &(0x7f00000000c0)=0x1, 0x4) r4 = syz_genetlink_get_family_id$l2tp(&(0x7f0000000080), 0xffffffffffffffff) sendmsg$L2TP_CMD_TUNNEL_CREATE(0xffffffffffffffff, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000400)={0x50, r4, 0x917, 0xa7, 0x1000000, {}, [@L2TP_ATTR_CONN_ID={0x8, 0x9, 0x3f}, @L2TP_ATTR_IP6_SADDR={0x14, 0x1f, @loopback}, @L2TP_ATTR_UDP_DPORT={0x6, 0x1b, 0x4e24}, @L2TP_ATTR_PROTO_VERSION={0x5}, @L2TP_ATTR_ENCAP_TYPE={0x6, 0x2, 0x1}, @L2TP_ATTR_PEER_CONN_ID={0x8, 0xa, 0x4}]}, 0x50}}, 0x4816) r5 = accept$inet(0xffffffffffffffff, &(0x7f0000000000)={0x2, 0x0, @remote}, &(0x7f0000000040)=0x10) r6 = socket$alg(0x26, 0x5, 0x0) bind$alg(r6, &(0x7f00000004c0)={0x26, 'skcipher\x00', 0x0, 0x0, 'xts(serpent)\x00'}, 0x58) setsockopt$ALG_SET_KEY(r6, 0x117, 0x1, 0x0, 0x0) r7 = accept4(r6, 0x0, 0x0, 0x80800) sendmsg$NL80211_CMD_CHANNEL_SWITCH(r7, &(0x7f0000002480)={0x0, 0x0, &(0x7f0000002440)={0x0}, 0x1, 0x0, 0x0, 0x20044800}, 0x8001) recvmsg$can_raw(r7, &(0x7f0000000cc0)={0x0, 0x0, &(0x7f0000000b40)=[{&(0x7f0000000800)=""/21, 0x15}], 0x1}, 0x0) ioctl$sock_SIOCSIFBR(r5, 0x8941, &(0x7f0000000100)=@get={0x1, &(0x7f0000000280)=""/236, 0x9}) 4.058385443s ago: executing program 4 (id=4999): socket$inet6(0xa, 0x1, 0x5) (async) socket$inet6(0xa, 0x1, 0x5) bpf$PROG_LOAD(0x5, 0x0, 0x0) r0 = socket$inet6(0x10, 0x3, 0x0) socket$nl_route(0x10, 0x3, 0x0) (async) r1 = socket$nl_route(0x10, 0x3, 0x0) ioctl$ifreq_SIOCGIFINDEX_batadv_hard(r1, 0x8933, &(0x7f0000000100)={'batadv_slave_0\x00', 0x0}) r3 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$nbd(&(0x7f0000000040), 0xffffffffffffffff) (async) r4 = syz_genetlink_get_family_id$nbd(&(0x7f0000000040), 0xffffffffffffffff) bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000000), 0x50) (async) r5 = bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000000), 0x50) r6 = bpf$PROG_LOAD(0x5, &(0x7f0000000500)={0x1f, 0x11, &(0x7f0000000200)=ANY=[@ANYBLOB="18000000ffffffff000000000000000085000000a8000000b7080000000000007b8af8ff00000000b7080000000000007b8af0ff00000000bfa100000000000007010000f8ffffffbfa400000000000007040000f0ffffffb70200000800000018230000", @ANYRES32=r5, @ANYBLOB="0000000000000000b705000000000000850000000400000095"], &(0x7f0000000b00)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x1a, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000340)={r6, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x48) bpf$PROG_BIND_MAP(0xa, &(0x7f0000000500)={r6, r5}, 0xc) sendmsg$NBD_CMD_CONNECT(r3, &(0x7f0000001ac0)={0x0, 0x0, &(0x7f0000001a80)={&(0x7f0000001600)={0x30, r4, 0x1, 0x70bd2c, 0x1000, {}, [@NBD_ATTR_SIZE_BYTES={0xc, 0x2, 0x2}, @NBD_ATTR_SOCKETS={0x4}, @NBD_ATTR_CLIENT_FLAGS={0xc, 0x6, 0x1fe}]}, 0x30}, 0x1, 0x0, 0x0, 0x8085}, 0x4) sendmsg$nl_route(r1, &(0x7f0000000400)={0x0, 0x0, &(0x7f0000000d40)={&(0x7f0000000000)=@ipv4_newaddr={0x48, 0x14, 0x509, 0x70bd27, 0x25dfdbfd, {0x2, 0x1f, 0x0, 0xcb, r2}, [@IFA_BROADCAST={0x8, 0x4, @rand_addr=0x64010104}, @IFA_FLAGS={0x8, 0x8, 0x300}, @IFA_LOCAL={0x8, 0x2, @multicast2}, @IFA_RT_PRIORITY={0x8, 0x9, 0x6}, @IFA_RT_PRIORITY={0x8, 0x9, 0x3}, @IFA_RT_PRIORITY={0x8, 0x9, 0x107}]}, 0x48}, 0x1, 0x0, 0x0, 0x4040014}, 0x0) (async) sendmsg$nl_route(r1, &(0x7f0000000400)={0x0, 0x0, &(0x7f0000000d40)={&(0x7f0000000000)=@ipv4_newaddr={0x48, 0x14, 0x509, 0x70bd27, 0x25dfdbfd, {0x2, 0x1f, 0x0, 0xcb, r2}, [@IFA_BROADCAST={0x8, 0x4, @rand_addr=0x64010104}, @IFA_FLAGS={0x8, 0x8, 0x300}, @IFA_LOCAL={0x8, 0x2, @multicast2}, @IFA_RT_PRIORITY={0x8, 0x9, 0x6}, @IFA_RT_PRIORITY={0x8, 0x9, 0x3}, @IFA_RT_PRIORITY={0x8, 0x9, 0x107}]}, 0x48}, 0x1, 0x0, 0x0, 0x4040014}, 0x0) syz_init_net_socket$bt_l2cap(0x1f, 0x1, 0x0) (async) r7 = syz_init_net_socket$bt_l2cap(0x1f, 0x1, 0x0) bind$bt_l2cap(r7, &(0x7f00000002c0)={0x1f, 0x0, @any, 0xfffa}, 0xe) (async) bind$bt_l2cap(r7, &(0x7f00000002c0)={0x1f, 0x0, @any, 0xfffa}, 0xe) r8 = syz_init_net_socket$bt_l2cap(0x1f, 0x1, 0x0) bpf$BPF_MAP_LOOKUP_AND_DELETE_BATCH(0x19, &(0x7f0000000180)={0x0, 0x0, 0xffffffffffffffff, 0x0, 0x1, 0xffffffffffffffff, 0x4}, 0xffffffffffffff94) bind$bt_l2cap(r8, &(0x7f00000000c0)={0x1f, 0x0, @any, 0xfff6}, 0xe) connect$bt_l2cap(r8, &(0x7f0000000080)={0x1f, 0x0, @fixed={'\xaa\xaa\xaa\xaa\xaa', 0x10}, 0x7ff}, 0xe) sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000040)={0x0, 0x104}}, 0x0) sendto$inet6(r0, &(0x7f0000000000)='s', 0x10a73, 0x800, 0x0, 0x4b6ae4f95a5de35b) 3.620139337s ago: executing program 6 (id=5000): mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000)='./cgroup.cpu/syz1\x00', 0x1ff) r0 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000), 0x200002, 0x0) r1 = openat$cgroup_int(r0, &(0x7f0000000100)='hugetlb.2MB.rsvd.limit_in_bytes\x00', 0x2, 0x0) write$cgroup_subtree(r1, &(0x7f0000000240)=ANY=[@ANYRESHEX, @ANYBLOB='t'], 0x31) (async) bpf$PROG_LOAD(0x5, &(0x7f0000000440)={0x7, 0x6, &(0x7f0000000000)=ANY=[@ANYBLOB="05000000000000007111ae00000000008510000002000000850000000500000095000000000000009500a50500000000"], &(0x7f0000000080)='GPL\x00', 0x5, 0x29e, &(0x7f000000cf3d)=""/195, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x6}, 0x70) (async) r2 = bpf$OBJ_GET_PROG(0x7, &(0x7f00000000c0)=@generic={&(0x7f0000000040)='./file0\x00', 0x0, 0x8}, 0x18) bpf$BPF_GET_PROG_INFO(0xf, &(0x7f0000000340)={r2, 0xe0, &(0x7f0000000500)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, ""/16, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3c, 0x0, 0x0, 0x0, 0x8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8, 0x0, 0x0}}, 0x10) 3.032874987s ago: executing program 3 (id=5001): bpf$BPF_PROG_QUERY(0x10, 0x0, 0x0) unshare(0x22020600) r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFNL_MSG_CTHELPER_DEL(r0, &(0x7f0000006500)={0x0, 0x0, &(0x7f00000064c0)={&(0x7f0000006380)={0x2c, 0x2, 0x9, 0x301, 0x0, 0x0, {0x1, 0x0, 0x1}, [@NFCTH_TUPLE={0x18, 0x2, [@CTA_TUPLE_IP={0x14, 0x1, 0x0, 0x1, @ipv4={{0x8, 0x1, @local}, {0x8, 0x2, @broadcast}}}]}]}, 0x2c}, 0x1, 0x0, 0x0, 0xd0}, 0x800) mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000)='./cgroup.cpu/syz0\x00', 0x1ff) openat$pidfd(0xffffffffffffff9c, &(0x7f0000000080), 0x80c1, 0x0) r1 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPCTNL_MSG_EXP_NEW(r1, &(0x7f0000000500)={0x0, 0x0, &(0x7f00000004c0)={&(0x7f0000000200)={0x58, 0x0, 0x2, 0x5, 0x0, 0x0, {0xa}, [@CTA_EXPECT_MASTER={0x4}, @CTA_EXPECT_MASK={0x4}, @CTA_EXPECT_TUPLE={0x3c, 0x2, 0x0, 0x1, [@CTA_TUPLE_PROTO={0xc, 0x2, 0x0, 0x1, {0x5}}, @CTA_TUPLE_IP={0x2c, 0x1, 0x0, 0x1, @ipv6={{0x14, 0x3, @private0}, {0x14, 0x4, @remote}}}]}]}, 0x58}}, 0x0) r2 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000), 0x200002, 0x0) unshare(0x40020000) unshare(0x2020600) mkdirat$cgroup(r2, &(0x7f00000000c0)='syz1\x00', 0x1ff) 2.797383778s ago: executing program 5 (id=5002): r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000100), 0x2, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000040)={'veth0_to_bond\x00', 0x4001}) r1 = socket$inet(0x2, 0x2, 0x0) ioctl$sock_inet_SIOCSIFADDR(r1, 0x8916, &(0x7f0000000080)={'veth0_virt_wifi\x00', {0x2, 0x0, @rand_addr=0xac140001}}) ioctl$sock_inet_SIOCSIFFLAGS(r1, 0x8914, &(0x7f00000000c0)={'syzkaller0\x00', 0x1}) r2 = socket$inet_sctp(0x2, 0x1, 0x84) bind(r2, &(0x7f0000000000)=@in={0x2, 0x3210, @rand_addr=0xac140001}, 0x10) listen(r2, 0x5) r3 = socket(0xa, 0x1, 0x0) r4 = openat$tun(0xffffffffffffff9c, &(0x7f0000000180), 0x0, 0x0) ioctl$TUNSETIFF(r4, 0x400454ca, &(0x7f0000000080)={'pimreg0\x00', 0x7c2}) ioctl$TUNATTACHFILTER(r4, 0x401054d5, &(0x7f0000000040)={0x1, &(0x7f0000000000)=[{0x6}]}) ioctl$TUNSETQUEUE(r4, 0x400454d9, &(0x7f00000000c0)={'veth0_to_batadv\x00', 0x400}) r5 = openat$tun(0xffffffffffffff9c, &(0x7f0000000140), 0x0, 0x0) ioctl$TUNSETIFF(r5, 0x400454ca, &(0x7f0000000080)={'pimreg0\x00', 0x7c2}) setsockopt$sock_int(r3, 0x1, 0xf, &(0x7f0000000040)=0x9, 0x4) bind$inet6(r3, &(0x7f0000000000)={0xa, 0xe64, 0x6, @empty, 0x2}, 0x1c) bind$can_j1939(r3, &(0x7f0000000140)={0x1d, 0x0, 0x1, {0x2, 0x0, 0x1}, 0xff}, 0x18) ioctl$NILFS_IOCTL_GET_BDESCS(0xffffffffffffffff, 0xc0186e87, &(0x7f00000002c0)={&(0x7f00000001c0)=[{0x1, 0x9, 0x9, 0x10, 0x9}, {0x6b61, 0x8000000000000001, 0x3, 0x5, 0x96}, {0x9, 0x3, 0x6, 0x1ff, 0x2}, {0x8a52, 0x4, 0x8, 0x6, 0x8}, {0x4, 0x1, 0x2, 0x6, 0xf178}], 0x5, 0x28, 0xb537, 0x7}) write$tun(r0, &(0x7f0000000300)=ANY=[@ANYBLOB="00000800010000000000140008004500003c000000004084ca2502020202ac14000104d2321000000000000000000100001c1122334400080002000500050000000580080008c1c1fc05a34890cd9ebc6cfb3722b012fb"], 0x4a) 2.579837408s ago: executing program 6 (id=5003): syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) r0 = socket$kcm(0xa, 0x2, 0x73) sendmsg$inet(r0, &(0x7f0000001180)={&(0x7f0000000000)={0xa, 0xfc00, @multicast2}, 0x3c, &(0x7f0000001080)=[{&(0x7f0000000040)="a72d11a15c048c0a7d63aebc5cea1f81510ff6091475aeec600831aa9d3944e60bc2ad06a619c560aa0118b28f68f1eb14549d633b4b23f179fb680716faa43414787559be90843c35ab30acad8a6740140e02721abc2eb362f7bde53b3c992d3e28ccc20ec84fdc569947047f6c09a647ee8c0a747b951e66c068ccf1af93ee9e6f9528ff79e2f989383b05a690a6bec4634b867c9446c1c644b3010e8a3514c6328323b4bbdd602b8f0dace6aea70902c4ddd2a2f2810f1348b0d0df3c1e6a5938fcfdc87e7580c6be0c6a06eca62d6f787dd16add086a21391c4c707d8b61929d1252681b84c245e0efafe2e6e73ad86a3cf59235ab0eacbb414af92ec3cdac420a064a98e8cc18bdf63f8997f96436e0fe6f06fdbf47fff353b01a861babd4a38d126bfe3e29049e6cc883e6efae6e70ef9ed124b1b09887a58c991e223b6420dca5ae238027e91b17b1707dc5c0d5f59f0ca95614f1ea1d263c1ee54dfe31ae35eb3c8e3b931dff7920c57fbba89adf2e392c1ad719b90c7ade0d38ff9792934ef1fb12f51d8e2fad12486d5883d5b1a46696fad128c6805cfb25bc6487e1e407d6b266971b09d0d864a7a550284e24b6cdc9f4ae1081a638175dffef002c76ac5558d23e41edbe68f4b4950a13aa000326dae5a857603dc5a40d6c6618a98c7b6e1eebd325ea2c14601a25658965f40864fd015d9b2fff83ee5ed3212ebd9fa429f0140f633556ac07c0c08e67a1848c9942ecc47dd4ffede9a429e9e0472be7cdbcd117e621ddf745c00a814ffff0224634472577dc0b35a9c153409f1a2bddc193b20b4d244d9cbbd59816c46000c596865f58b4e640ed4a9ab6086cede697fb113560925498da83273e679e0e28b84961eb7b9c9b4fa916590965c76b48e5d453f27a821bd2bf0946ff2413ec30f7893d1f046e18f736c40ceda26dfc4a0a62f71a3606d3f72c0a858dfd7895e2572292e11af913c6b513a141d28e501ae7c49618d104aac9abb78466a636efb88120d0eef0a501558a5aa34784a9823f2802a0bcdf318f9b436b34b42a2a7cf513f80364ad9a699d2e23eb4f3a2bbce818bd20da61882b3dac699d05dc24f29b72471b712423ace6278c43df2be7a09e815517b86d8b3ce16af3d64a575958c5fd52aac53b391f3d2a67c24c6c13ec11428b61b80a6a58cbba1790a98d190a572070f63fc0b809669895ea9865c3066b06102f6f2c7171dc7f76e1931b3e4deb569ef9d07d5f86a848f50942e93c419c3a23489f14803b08182dfd48b8d4375be6b7f805a21209c05e5927693a8834c8d5a5acbd47ed8a30a8a741d1ad77639b56b3b90c0b2023fa334befd28b2e27cbcd94b0ce7437f88ce67a925cea6d6d7e5313de6d328b1124a8b9ef83fe39ca3da97d33c60b7fd4af67d3c8fccb595a27a5bffc71e5a5b2ec966828993b0c0f83cbc55f9a7fb66a4101d5c83b77885072b6e2b2ceebe32f635509698c05089b9ff1cb1959b211e114dadb224ef2d5e7a3c55b3ac00fcdc9018577603c6301e5d4341b3d7eeb2665349d448d28d5d108f576408cbe533a6adbba18ebb2d84bb9af81108506a2f50fb56d595579000747930449fdf4ed01715ec624a0cb73636a35b9136f10b79e3d7ded09008b92e92c64e26e6b6d17f18b70b1d9813de8d2ff151c7a6a0452c660a57c33f13e2d9b88fa5f5c0505722d2e787a425e4a3e9b5efa9668e9199f5fb9fe7d5b8a57719a57df152e7f2c6a1087a2a24084f82455b65353a70559f04d5ed12defb81497ea69c1c7e69c373524770b7473c16a69c7a3648a9dd93377b89cdff61cf62512d1ee67a55ea67993937c1f55a2179bc9c8a337364cfb84d295adda1ad9700fc2f5c11cbfc1b90affb4666c6e7e23a6f7751410a5651819f29f690c6dba2b8a67e0f7f8cc377feb1854c393578994c85391ba21b3961aed477f771645571dc7d6cae72bf79c82a92a4edc3742b1398060a0a5c9e81c016b7f2ae3db529c6ff824cc28678764d8ab49d7dc68e5b0556c9e7ffb6fef442776d86fbd458741830e57f22a1f8513b92abd5b2df93a67cc560134078f0b8ecc3276e40aadef5cd579888b86b4988f396679250701f3869e7493b33692035ecd94aca5189fd0a0893ccc5bb19c0b4caca86cf90ebc2a5558f39cccb33f6773a4e425bf551fb3b6456ee1cc62fa1843a9e5539bb2d02ae6ef82533a9dbcfb562c1ab18c1f639ae7ff02083746f74a15ba2d10e4b955940a5d6f488d326a99f287c48ad463ce40367aeeff519cbad0a2d7fdbfa48bff75955467977764c2be2bd2ffa18396c46920c40c50a4037003666406d177e2cd20aee423d07169d8f611f635ba0b62b61265ff2c5548446a2423dd1038482b6852b2d9d2f90aa05d82c5e2c3d1af0c7aad72d82b3da67471af7b037bb0424a785e73f35b5a10a2ab300a195c20cd119a5390e0cd5d49c70bd80883b933e843d0d2902749dcf3c140c708a0f004b7a2f50bf311305dc01719016fcce5863815ca7951de710fcb71cd177551ff6fcd9f8bf01b93868f24c6129b6d7917125338cf62110083093fc7f862015d48450d992f2bb43e601cab19b2ea7b83962a382fc2a31fdf2358bf8a9a9e506eaa7b6eb5e7444d1ef459b24ffa51362abce902dfd84201a0e4b5a3b62757aad54fb65b83821c6bba663886de092065a565921ea3eb6781bb8ed4f4db3abcfeeb379b7e52fca790bea719918e299ab01bf5e92177d134360bf7a16a59e9d03d3dcfb0a25599237e3d41b3f0026c9402b1fb1894426303413a2cbcf7c72807ca694afa285990d07c3bca26413c9947b3b344aafc04544b8c11416e0312b028da7302e316c3966d41884b15055a49a4a0b3eac8e11f88a5615fb0af582f065d28e5a454447e9d0cfc60356439ebf7e1d0a00f5b9cc6daf2bd7195ba96b4d1a0679ff0fb1c01282c378a880f90f460889b67d76d4d0e8db6c928d113533d1d10b810303c43d8ff622c5bab7f095b96e64bf9daa48a2bdf3d9d40bac00cf1b66df61a4f7c3e21938e876f81b1179dce6a008f28eb682cae690ced0ea0d542da604d8056f2b1813ed36683c4c51aeb2650772cfb1c55d4e60604ff06344cfc271b2175a6c94defb807af240b483e24298ca73bfc743ca2ca2e77e6d5b817b3c1986601537faf59ac84c74d8bd0c068cb8e6bd03ac2dcf5793fb4a00b3c901a33aa3ee86e4f0db317b94bb8678ab26e36d305ebac4b0f7f164947148255b562dd0f87648499d45bccfb7d8c9d5624cadf8160a396e79fbcdc100058ba4606e41c02fb2cc0dc6c36196bd28acfde82a18cda2321d2d83fecd3b85380667cd1d0bc68298c6c8f10421a80c8fa86912b6c3e8ddd9d9668520d5151409e6b77f0d7730b374a68a744151bfbd123cfdf871e8c24e70d2ca3b50e84a48e0b78c1781000cfc848d43584985763a76c0ab9ba882c55e3e4aa8f2174255db38adb8350b48a77be22a869d13d183325f859b883464e5e46de5ea8a92532b9a794daaeff657cd361f7f158f8bebe36e9de1f5b9721d4263dcc9472229bc02d3f552180abfb25ca7aa36cb914d99c09fd5bb99dcab9b4e3c634d18fc7dfe84dc4425ad1e39c3e7410d49b4ea0a8a2958688c7725822f6dfc0827d19dc385e0e35a949941e4dd1aaeaab9ebe402f8c584bca7efc829f2ccfb63fd7bde1c182a67c14f9d3f033ca674e2604e89cd55a15419f956cd61a755c1b13554dae98e77be078aadfc131c9677381f1dbe6ef194eb17603a463e8b844ab46a6046e1f07d96d66de669359bff4c3d80948a4de3abb2f171a09b5d8999c379fb62244114e218c79805df7d899e5661320ee6721d652b95f09e4dfe69bd67099c73294b17ab574e0b966aa3ab44478965b9dca3cb3b9282945f24ccdd07c638ae25a84a728ca24f87ff49d718121a694be46f3616e27b1041b3c6cd24b9cf775bfc28dfbe0a009048f0599f2d5d6586cfd1e7f7fe69872d08b98f60d28e6af0d49d7f06ad71a7b5c41df261aba5de114022c7288bc265cc17909fdeadc3d7b256d7ab3b96e40f857060f16b54a6bb7248ee571f87ace5ee39eab412706cf52fa711468b21ea129c3f44bceb429fcc1a0ac2aa87b9365077dcfcfa9a1b32a0a09699197c20019a66cbd0a897feab3706c23123b888ada643d4560082033e31596b0483578968e3c9593ebd97141c228a42fc7645f92171c120aabca36657683fd7c72fcb87217f124d6fabc52f1d221d8410b47b0ad4bd944bf4085365e9b52a53911ab4ee142c5a1ebbe034c9d98c538c066f2dc0acf372eb2397dcac765055123e0ba19be22b18c886bf0f7490abe9fde91ffa62e059962bd134be8501cb5b715a744b1398e2c4c7e8afe72e189dda0654296afa1c1f99ab7d800fa40f72a758625c833b6fc7b7d42250522b456e1e7de815350c36c9cb2f4d1c9cb99109f89b456c559463f11b8b58247809b17a4ed4912bd0a47a529f1364d6dc593ea7f3eb98962078ac90e5012ee1c7b4b9ed5a8c7a9c0231b4ce425693faab64fa0f3482a04d4be2e06ee5d103694d288810a1a7f4d1e908dd82dd2016a064ece5cd67ef1dd5f4cda728fc6f1ccdd949dd8f775d862621507248ef4c83ae274969d19c7ddb02a4e8a1ab2b7aa539a442b22735ceedeefe60a1059dfaaa0979ce8d5387b5a047841fd9749b88ca91216b02d7926408a01916b7781bb7167528ccdb9a486d173437a5ba3e552c8674dff2cc9b21054e0e4f86b61b8723fca58ceef4413bffae9e9be79c5b9788f5449811ce78be9bc7a86375a670197baaef751beabcba0aa6c7c33f1cd702cb78ec39fa1f17d9da733d6abf2b80f9c51ac8f6f664b24edc53a7c9525c3016bd05c67272375fe816b2b121f2de68b885a0fd8f8b8c6c342237b632f6414a3eb3480f5f42106c5812e9bfd4e8c8dea8d08525d9aa1da7c7c2ee7ff3d31b79b211dd01e304a8ffc83a89a59f3b1e2ef5e969b6d90bea7e161066f25622fad914bff52bacd2807093dda1838b529ee57f718b374ce2841b924a42457867547a6edcb8412d85f11796742bf640b5819a9546357df778c332af5983c4373a95d9c58b52dba445eee92e6911824f0c534e7a5934d9eac9b7f6fec22002fc53a3003a3304217f567b47cd326edc5f48eb1f46bb20d1e10e72239afc9769344590cf48902aba5405b7d4baa31a912ab398a2f2d3f037614bb56a89244ece50f3a1e058d274f1e70f944eb8a305be91e561e5eb843d057a81f4deb84a6335ec81ca964cdae5f318d4e9aaea2c477cc279c00c698bcfe4b8e04c09079d8f3f5438d9d45a00f50d2f9b245c8c68eebf247e25ba8d26f8b95b21ac9ceb50c0aa2e4bdc032024db216b92f9350a90ac79341af14d3fa8ba908096e1b503341aed667bb184c672dac85fc4f335b3871c3b4e55ea219a857d2d2e135358f6b45a20b3e7de8e09b2041eb7c5084a80258fb524a983752659298a251e178b56f96bc67ae0a78ec92f92d92c9cf0edb5dcb11e739d69410ad44c8df00caa030d7d89f2ec38bd7698115c423cf3e6048793aca08ffbcdac766f1553773fa00031c1d75246e4e1eddf8948d02a3de6d67fd7329e45070f29044587f1e0db50d04e673191a63e30f96ee0d8d52738fab36a7fe2c6ab9301d401e7ca5b1f039193a580e40abbdf40c2d7e27809dec80815d37adae9fe7fb9d3a974c9fc03944d7338d000b81170be4c6792ed6b3b827194b3ae11e2acfca48498d1126aacf80f3d574256ef7f75552ff087a819e", 0x1000}, {&(0x7f0000001040)="9d7fcf3efc63f4a6a555ba8b4726d7ccaf8a207100e69cfac4377876021d7131b838059f96bd206d4776368ed2a92432e5af71", 0x33}], 0x2, &(0x7f00000010c0)=[@ip_tos_int={{0x14, 0x29, 0xb, 0xfc00}}, @ip_tos_u8={{0x18, 0x29, 0x4}}, @ip_pktinfo={{0x1c, 0x0, 0x8, {0x0, @broadcast, @remote}}}], 0x50}, 0x0) (async) r1 = bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000240)=ANY=[@ANYBLOB="0200000004000000080000000100000080000000", @ANYRES32=0x0, @ANYBLOB='\x00'/20, @ANYRES32=0x0, @ANYRES32=0x0, @ANYBLOB="000000000000efd4bb00"/20], 0x48) (async) r3 = bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f0000001a00)=ANY=[@ANYBLOB="1b00000000000000000000000000040000000000", @ANYRES32, @ANYBLOB="20000000000000000000050000000000e8000000", @ANYRES32=0x0, @ANYRES32=0x0, @ANYBLOB='\x00'/28], 0x50) bpf$PROG_LOAD(0x5, &(0x7f0000000840)={0x2, 0x1c, &(0x7f00000012c0)=ANY=[@ANYBLOB="1808000000000000000000000000000018110000", @ANYRES32=r3, @ANYBLOB="0000000000000000b702000014000000b7030000000000008500000005000000bca900000000000035090100980000001500030000000000b7020000000000007b9af8ff00000000b509f8ff00000000dbaaf8fff1000000bf8600000000000007080000f8ffffffbfa400000000000007090000f0ffffffc70200000800000018290000", @ANYRES32=r1, @ANYRESHEX=r2], &(0x7f0000001380)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0xd, '\x00', 0x0, @fallback=0x10, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) (async) ioctl$XFS_IOC_FD_TO_HANDLE(0xffffffffffffffff, 0xc038586a, &(0x7f0000000180)={0xffffffffffffffff, 0x0, 0x400001, &(0x7f0000000080)={@_ha_fsid={[0x7, 0x7fffffff]}, {0x10, 0x9, 0x1, 0x3}}, 0x4, 0x0, 0x0}) (async) sendmsg$unix(0xffffffffffffffff, &(0x7f0000000040)={0x0, 0x0, 0x0, 0x0, &(0x7f0000000080)=ANY=[@ANYBLOB="1400000000000000010000"], 0x18, 0x4000840}, 0x0) (async) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000480)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r4, &(0x7f00000027c0)=@file={0x0, './file0\x00'}, 0x6e) (async) sendmmsg$unix(r5, &(0x7f00000011c0)=[{{0x0, 0x0, 0x0, 0x0, &(0x7f0000000080)=ANY=[], 0x18, 0x20000010}}], 0x1, 0x40) (async) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f00000004c0)={0xffffffffffffffff, 0x18000000000002a0, 0x5e, 0x0, &(0x7f00000002c0)="d2ff03076003008cb89e08f086dd", 0x0, 0x1001, 0x60000000, 0x0, 0x0, 0x0, 0x0}, 0x50) r6 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x3, 0xc, &(0x7f0000000000)=ANY=[@ANYBLOB="18000000000000000000000020000000850000006100000018010000646c6c2500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000009b00000095"], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @sched_cls, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000240)={r6, 0x0, 0xe40, 0xe40, &(0x7f00000002c0)='\x00\x00\x00\x00\x00\x00\x00\x00', &(0x7f0000000300)=""/8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x4c) (async) socket$nl_netfilter(0x10, 0x3, 0xc) (async) r7 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r7, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000340)={&(0x7f0000000000)=ANY=[@ANYBLOB="380100001000330624c47000000000007f00000100000000000000000000000000000000000000000000000000000000000000050000fffd000000003a000000", @ANYRES32=0x0, @ANYRES32=0x0, @ANYBLOB="e0000002000000000000000000000000fffffffd32000000ac1414aa0000000000000000000000000100000000000000030000000000000009000000000000000900000000000000020000000000000000000000000000000000000000000000fcffffffffffffff000000000000000000000000000000005f000000000000000a00000000000000010000000000000000000000000100000000000002000000230000000000000048000200656362286369706865725f6e756c6c29"], 0x138}, 0x1, 0x0, 0x0, 0x20040}, 0x80) r8 = socket$inet_udp(0x2, 0x2, 0x0) bind$inet(r8, &(0x7f00000001c0)={0x2, 0x0, @local}, 0x16) (async) connect$inet(r8, &(0x7f0000000480)={0x2, 0x4e23, @multicast2}, 0x10) setsockopt$inet_IP_XFRM_POLICY(r8, 0x0, 0x11, &(0x7f00000004c0)={{{@in6=@dev={0xfe, 0x80, '\x00', 0x4}, @in6=@private2={0xfc, 0x2, '\x00', 0x1}, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0xee01}, {0x0, 0x0, 0x0, 0x4, 0xffff, 0xfffffffffffffffd, 0x2}, {0x1, 0x0, 0x400000000}, 0x0, 0x0, 0x1, 0x0, 0x3, 0x3}, {{@in6=@ipv4={'\x00', '\xff\xff', @rand_addr=0x64010101}, 0x0, 0x32}, 0x0, @in=@dev={0xac, 0x14, 0x14, 0x39}, 0x0, 0x0, 0x0, 0xb7, 0x2, 0xfffffffe}}, 0xe8) (async) write(r8, &(0x7f0000000140)="0e0412b60f82bb714a766118ff5aa329fa94da4900", 0x15) (async) sendmmsg$unix(r5, &(0x7f00000bd000), 0x2d, 0x20040040) (async) recvmmsg$unix(r4, &(0x7f0000002640)=[{{0x0, 0x0, 0x0}}], 0x1, 0x100, 0x0) bpf$MAP_CREATE(0x0, &(0x7f0000001200)=ANY=[@ANYBLOB="1b00000000000000000000000080000000000000", @ANYRES32, @ANYBLOB="ffff00"/20, @ANYRES32=0x0, @ANYRES32, @ANYBLOB="f50017437200000000000000000000000000000000000000000000000000000007399af620541b21ee2bc5b672aa31a2215e1870fd8adc181f364d2beea679bbb85e4424f2afb0906dc342a330ec91429f9c71bbf47e1a5f9fbe8a9d80e24155a8ff1d9c41c4fc0c385270"], 0x50) (async) r9 = bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000140)={&(0x7f0000000040)=ANY=[@ANYBLOB="9feb01001800000000000000180000001800000004000000020000000100000c02000000000000000000000d0000000000005f"], 0x0, 0x34}, 0x20) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x11, 0x3, &(0x7f0000000100)=ANY=[@ANYBLOB="180000000100000000000000801800009500000000000000"], &(0x7f0000000000)='GPL\x00', 0xc, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, r9, 0x8, &(0x7f00000000c0)={0x0, 0x1}, 0x1}, 0x94) r10 = syz_init_net_socket$nl_rdma(0x10, 0x3, 0x10) (async) r11 = syz_genetlink_get_family_id$smc(&(0x7f0000000080), 0xffffffffffffffff) sendmsg$SMC_PNETID_DEL(r10, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000000c0)=ANY=[@ANYBLOB=',\x00\x00\x00', @ANYRES16=r11, @ANYBLOB="01f3ff000000f3ffffff"], 0x2c}, 0x1, 0x40030000000000}, 0x0) 2.563077305s ago: executing program 4 (id=5004): bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000180)={0x0, 0x5, 0x0, &(0x7f0000000040)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2}, 0x90) r0 = socket$nl_rdma(0x10, 0x3, 0x14) sendmsg$RDMA_NLDEV_CMD_STAT_SET(r0, &(0x7f0000000240)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x10000000}, 0xc, &(0x7f0000000140)={&(0x7f0000000280)={0x38, 0x1410, 0x300, 0x70bd2a, 0x25dfdbfd, "", [@RDMA_NLDEV_ATTR_STAT_RES={0x8}, @RDMA_NLDEV_ATTR_STAT_MODE={0x8, 0x4a, 0x1}, @RDMA_NLDEV_ATTR_STAT_COUNTER_ID={0x8, 0x4f, 0x2}, @RDMA_NLDEV_ATTR_RES_LQPN={0x8, 0x15, 0x5}, @RDMA_NLDEV_ATTR_STAT_COUNTER_ID={0x8, 0x4f, 0x2}]}, 0x38}, 0x1, 0x0, 0x0, 0x8000000}, 0x4000800) r1 = socket$inet6(0xa, 0x2, 0x3a) setsockopt$inet6_int(r1, 0x29, 0x21, 0x0, 0x0) syz_emit_ethernet(0x1ea, &(0x7f00000003c0)={@local, @local, @void, {@ipv6={0x86dd, @tcp={0x0, 0x6, "8a37f2", 0x1b4, 0x2c, 0x0, @remote, @local, {[@fragment={0x0, 0x0, 0x9a, 0x1, 0x0, 0x3, 0x66}, @dstopts={0x0, 0x27, '\x00', [@pad1, @hao={0xc9, 0x10, @private2}, @calipso={0x7, 0x40, {0x3, 0xe, 0x2, 0x800, [0x80000001, 0x362d1200, 0xfffffffeffffffff, 0x9, 0x80000000, 0x9, 0x9]}}, @padn={0x1, 0x2, [0x0, 0x0]}, @jumbo={0xc2, 0x4, 0x2}, @generic={0x7, 0xc9, "d23866234d409c15048a1d62f4c8ba5032c60622bb540ad3af486c6a65c6cc2e20349ea70d0323a045728da761217b6d6a44342ec7ec4686299aadc1001c9e20506d47d47110f0071323405fcdd811d99f33c3d6fddf26323baebd07c2c0ce5a852d2aa499f8cb1bd9f86ddb5780a3a58aac80a4cf4ff8dda27788948311e453db64066d7c1c1ef5cf1728d6f3d08d976dd8ce54c6aad2db1ac3fda1fad55a69118bde3da1a24b9dd8dbfc65cb2b69c097c0d7b0376d90cdba39bb67e4d2c05a8e86f35a3701a01614"}, @hao={0xc9, 0x10, @mcast1}]}, @dstopts={0x33, 0x8, '\x00', [@generic={0x2, 0x30, "e39a74385955b7e5a97b813afbb0bce3215d985d593d1add357cc9e1b048bebf751d129886c87bf8310a5b136c9e8e36"}, @calipso={0x7, 0x10, {0x0, 0x2, 0x7, 0x2, [0x8000000000000000]}}]}], {{0x3a00, 0x3, 0x41424344, 0x41424344, 0x0, 0x0, 0x5}}}}}}}, 0x0) bpf$MAP_CREATE(0x0, &(0x7f00000000c0)=ANY=[@ANYBLOB="23000000080000000c001b000300000001"], 0x50) sendmsg$RDMA_NLDEV_CMD_STAT_SET(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000040)=ANY=[@ANYBLOB="18000000141401"], 0x18}}, 0x50) r2 = bpf$MAP_CREATE(0x0, &(0x7f00000000c0)=@base={0x1b, 0x0, 0x0, 0x8000, 0x0, 0xffffffffffffffff, 0xffff}, 0x50) r3 = bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000140)={&(0x7f0000000040)=ANY=[@ANYBLOB="9feb01001800000000000000180000001800000004000000020000000100000c02000000000000000000000d0000000000005f"], 0x0, 0x34}, 0x20) r4 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x11, 0x3, &(0x7f0000000100)=ANY=[@ANYBLOB="180000000100000000000000801800009500000000000000"], &(0x7f0000000000)='GPL\x00', 0xc, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, r3, 0x8, &(0x7f00000000c0)={0x0, 0x1}, 0x1}, 0x94) r5 = bpf$BPF_PROG_WITH_BTFID_LOAD(0x5, &(0x7f0000000500)=@bpf_ext={0x1a, 0xf, &(0x7f00000002c0)=@ringbuf={{0x18, 0x0, 0x0, 0x0, 0x8792}, {{0x18, 0x1, 0x1, 0x0, r2}}, {}, [], {{}, {0x7, 0x0, 0xb, 0x2, 0x0, 0x0, 0x2}, {0x85, 0x0, 0x0, 0x84}}}, &(0x7f0000000180)='GPL\x00', 0x7, 0x0, 0x0, 0x40f00, 0x20, '\x00', 0x0, 0x3a, r3, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x1, r4, 0x0, 0x0, 0x0, 0x10, 0x4a6}, 0x94) bpf$MAP_DELETE_ELEM(0x3, &(0x7f00000002c0)={r2, &(0x7f0000000100)="cf5b077178a7fe1b23c3e96179805563c093cac540f21689aefea24da7d0c7d0a04257e4e64c8726431e"}, 0x20) setsockopt$inet_sctp_SCTP_ADAPTATION_LAYER(r5, 0x84, 0x7, &(0x7f0000000340)={0xb4}, 0x4) 2.524424624s ago: executing program 7 (id=5005): r0 = socket$nl_sock_diag(0x10, 0x3, 0x4) ioctl$sock_SIOCSIFVLAN_ADD_VLAN_CMD(r0, 0x8983, &(0x7f0000000240)={0x0, 'bridge_slave_1\x00', {0x20000001}, 0x764}) r1 = socket(0x840000000002, 0x3, 0x100) socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r1, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000000)=@getnetconf={0x14, 0x52, 0xc00, 0x70bd2d, 0x25dfdbfe, {}, ["", ""]}, 0x14}, 0x1, 0x0, 0x0, 0x24040044}, 0x4050) 1.860840054s ago: executing program 7 (id=5006): r0 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x3, 0x6, &(0x7f0000000200)=ANY=[@ANYBLOB="b700000000000000bf160000000000007961a800000000001501010000000000850000005f00000095"], &(0x7f0000000180)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @sched_cls, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r1 = socket$inet6_sctp(0xa, 0x1, 0x84) setsockopt(r1, 0x84, 0x81, &(0x7f0000000280)="1a00000002000000", 0x8) setsockopt$inet_sctp6_SCTP_AUTH_CHUNK(r1, 0x84, 0x15, &(0x7f0000000140)={0x2}, 0x1) (async, rerun: 64) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f00000003c0)={r0, 0x0, 0x58, 0x0, &(0x7f0000000000)="c1bcb080cd21d308098ee68888a8", 0x0, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x50) (async, rerun: 64) bpf$PROG_LOAD(0x5, &(0x7f00000003c0)={0x1, 0x1c, &(0x7f0000000d80)=ANY=[@ANYBLOB="18080000ff00000000000000fbffffff84274037", @ANYRES32, @ANYBLOB="0000000000000000b702000014000000b7030000030000008500000005000000bf0900000000000055090100000000009500000000000000b7020000001200007b2af0ff00000000d609080008000000db9af0ff50000000bf8600000000000007080000f8ffffffbfa400000000000007040000f0ffffffb70200000800000018280000", @ANYRES32, @ANYBLOB="0000000000000000b7050000080000001500000076000000bf9800000000000056080000020000008500000007000000b70000000000000095"], &(0x7f00000002c0)='GPL\x00', 0x9, 0x0, 0x0, 0x40f00, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) (async) r2 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r2, &(0x7f0000000180)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000040)=ANY=[@ANYBLOB="6000001f14000169df000000fbdbdf00", @ANYRES32=0x0, @ANYBLOB="fab0817dbcb5f31a2c001280110001006272696467655f736c617665000000001400058008000300d6cc000006000200feff0000140003006272696467655f736c6176655f300000"], 0x60}, 0x1, 0x0, 0x0, 0x24044800}, 0x4040) (async) r3 = socket$igmp(0x2, 0x3, 0x2) setsockopt$MRT_INIT(r3, 0x0, 0xc8, &(0x7f0000000040), 0x4) (async) setsockopt$MRT_FLUSH(r3, 0x0, 0xd1, 0x0, 0x0) (async) r4 = socket$nl_netfilter(0x10, 0x3, 0xc) (async) r5 = socket$nl_generic(0x10, 0x3, 0x10) r6 = syz_genetlink_get_family_id$nl80211(&(0x7f00000003c0), r5) sendmsg$NL80211_CMD_DEL_PMKSA(r5, &(0x7f00000004c0)={&(0x7f00000005c0)={0x10, 0x0, 0x0, 0x220008}, 0xc, &(0x7f0000000480)={&(0x7f0000000800)=ANY=[@ANYBLOB="640000003299c62718215616368d3f08d56c67a9cb18b21e7406e4d9288b7c36932370f50dfbec89cdaec780e5fce48a5856cb6fa237837f8c46c77e24d2eea88f65b7944dc4992e758da4ce124c063a668fe2197766cc9ee9b545be941993c410b62d505899381f30911b8ebdf9079ced0758e9a0d3ef347153c5ced7ada598eede3e9aa94e5cfe404eb73b262484e1c3706e4470d838c2f708abc9d51bf7b0468dd9580cec5c06", @ANYRES16=r6, @ANYBLOB="000325bd7000fddbdf253500000008000300", @ANYRES32=0x0, @ANYBLOB="0c0099000300000014000000050020011e0000000a00060008021100000100000a003400010101010101000008001f01040000000a000600ffffffffffff000008001f01ff7f0000"], 0x64}, 0x1, 0x0, 0x0, 0x4008091}, 0xc0) r7 = syz_genetlink_get_family_id$ethtool(&(0x7f0000000000), 0xffffffffffffffff) sendmsg$ETHTOOL_MSG_LINKMODES_SET(r5, &(0x7f0000000240)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f00000006c0)=ANY=[@ANYBLOB='L\x00\x00\x00', @ANYRES16=r7, @ANYBLOB="0700000000000000000005000000180003800800040000000000080002000900000004000300180001801400020073797a5f74756e000000200000000000080005"], 0x4c}, 0x1, 0x0, 0x0, 0x41}, 0x0) r9 = socket$nl_generic(0x10, 0x3, 0x10) r10 = syz_genetlink_get_family_id$tipc(&(0x7f0000000380), r9) ioctl$sock_SIOCGIFINDEX_80211(r5, 0x8933, &(0x7f0000000740)={'wlan1\x00', 0x0}) sendmsg$NL80211_CMD_START_NAN(r4, &(0x7f0000000640)={&(0x7f0000000500)={0x10, 0x0, 0x0, 0x400000}, 0xc, &(0x7f0000000600)={&(0x7f0000000580)=ANY=[@ANYBLOB='P\x00\x00\x00', @ANYRES16=r6, @ANYBLOB="00022abd0000080003000000000000000000", @ANYRES32=r11, @ANYRES16=r8], 0x50}, 0x1, 0x0, 0x0, 0x24040801}, 0x8000) (async) r12 = socket$nl_generic(0x10, 0x3, 0x10) r13 = syz_genetlink_get_family_id$ethtool(&(0x7f00000000c0), r12) sendmsg$ETHTOOL_MSG_LINKSTATE_GET(r12, &(0x7f0000000200)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000040)=ANY=[@ANYBLOB=',\x00\x00\x00', @ANYRES16=r13, @ANYBLOB="010028bd7000fddbdf2521000000180001801400020064756d6d7930"], 0x2c}}, 0x4800) sendmsg$TIPC_CMD_ENABLE_BEARER(r9, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000680)=ANY=[@ANYBLOB='8\x00\x00\x00', @ANYRES16=r10, @ANYBLOB="010000000d0000000000010000000000000001"], 0x38}, 0x1, 0x0, 0x0, 0x44081}, 0x4004) (async, rerun: 32) r14 = bpf$PROG_LOAD(0x5, &(0x7f0000000200)={0xc, 0xe, &(0x7f0000001200)=ANY=[@ANYBLOB="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"], &(0x7f0000000340)='syzkaller\x00'}, 0x48) (rerun: 32) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000080)={r14, 0x18000000000002a0, 0xe80, 0x6000002f, &(0x7f0000000100)="b9ff0f316844268cb89e14f008004ce0050000000000002c77030a89079f03b180004415050300845013f2325f0094090519fa0000880b943be3f4aed50ea5a6b8686731cb89ef77123c899b699eeaa8eaa0073461119663906400f30c060000000000005992078b72f24996ae17dffc2e43c8174b54b620636894aaacf28ff62616363c70a440aec4014c0000c0adc04308461738190da450296b0ac014968ce23eefc9d4246dd14afbf79a228326c3acc240d7da058fa4806d1f5f7ff40000001600"/249, 0x0, 0xfe, 0x60000000, 0x0, 0xfffffffe}, 0x2c) (async, rerun: 64) sendmsg$TIPC_CMD_SET_LINK_PRI(r5, &(0x7f0000000280)={&(0x7f0000000140)={0x10, 0x0, 0x0, 0x100000}, 0xc, &(0x7f0000000240)={&(0x7f00000001c0)=ANY=[@ANYBLOB='h\x00\x00\x00', @ANYRES16=r10, @ANYBLOB="00032dbd7000fddbdf25010000000000000008410000004c00180000000462726f6164636173742d6c696e6b00"/98], 0x68}, 0x1, 0x0, 0x0, 0x20000000}, 0x40001) (async, rerun: 64) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000a00)={0x5, 0xb, &(0x7f0000000180)=ANY=[@ANYBLOB="180400000000000000000000000000001801000075e8d53900000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b70300000000000085000000b100000095"], 0x0, 0x0, 0x0, 0x0, 0x40f00, 0xc94284a3061bb7fe, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x7}, 0x94) (async) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xb, &(0x7f0000000180)=ANY=[], &(0x7f00000003c0)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x26, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) 1.857496653s ago: executing program 4 (id=5007): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) (async) r1 = syz_init_net_socket$nl_rdma(0x10, 0x3, 0x10) r2 = socket$inet6_tcp(0xa, 0x1, 0x0) (async, rerun: 64) r3 = socket$inet6_tcp(0xa, 0x1, 0x0) (rerun: 64) setsockopt$sock_int(r3, 0x1, 0xf, &(0x7f0000000180)=0x800001, 0x4) (async) bind$inet6(r3, &(0x7f00000003c0)={0xa, 0x4e22, 0x0, @empty, 0xffffffff}, 0x1c) (async) setsockopt$sock_int(r2, 0x1, 0xf, &(0x7f0000000000)=0x2, 0x4) bind$inet6(r2, &(0x7f0000000040)={0xa, 0x4e22, 0x0, @empty, 0x10000000}, 0x1c) (async) r4 = socket$inet6(0x10, 0x2, 0x4) sendto$inet6(r4, &(0x7f00000008c0)="4c00000012001f15b9409b849ac00a00a5784002000000000000030038c88cc055c5ac27a6c5b068d0bf46d323452536002d346c6b0ce4840c4e5ad94a461cdbfee9bdb942352359a351d1ec", 0x4c, 0x810, 0x0, 0x0) (async, rerun: 64) r5 = socket$inet6_tcp(0xa, 0x1, 0x0) (rerun: 64) r6 = openat$cgroup_devices(0xffffffffffffffff, &(0x7f0000000140)='devices.deny\x00', 0x2, 0x0) write$cgroup_devices(r6, &(0x7f0000000680)=ANY=[@ANYBLOB="61052a3a2a20776d0061b4697db71975ed2254ed7fad448faaf452acff6283ee03d3c2c4cdae1f"], 0x9) r7 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r7, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000300)=ANY=[@ANYBLOB="180000002600010324bd8f86ea7002ffdbdf250100000004001700"], 0x18}, 0x1, 0x0, 0x0, 0x20000000}, 0x0) (async) setsockopt$inet6_tcp_int(r5, 0x6, 0x13, &(0x7f0000000040)=0x100000001, 0x4) (async) r8 = bpf$MAP_CREATE(0x0, &(0x7f0000000600)=ANY=[@ANYBLOB="3c9cc565ae000004000000090000000800000000000000", @ANYRES32, @ANYRESOCT=r0, @ANYRES32, @ANYBLOB='\x00'/28], 0x50) bpf$PROG_LOAD(0x5, &(0x7f0000000240)={0x1d, 0xc, &(0x7f00000000c0)=@framed={{0x18, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0xfffffffd}, [@ringbuf_output={{0x18, 0x5, 0x1, 0x0, r8}, {0x7, 0x0, 0xb, 0x8, 0x0, 0x0, 0xffffffff}, {}, {}, {}, {}, {0x7, 0x0, 0xb, 0x4, 0x0, 0x0, 0x2}, {0x85, 0x0, 0x0, 0x6b}}]}, &(0x7f0000000200)='GPL\x00', 0x1, 0x0, 0x0, 0x0, 0x48, '\x00', 0x0, @lsm=0x1b, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7}, 0x94) (async) connect$inet6(r5, &(0x7f0000000100)={0xa, 0x0, 0x1000007, @ipv4={'\x00', '\xff\xff', @local}, 0x1}, 0x1c) syz_genetlink_get_family_id$nl80211(&(0x7f00000004c0), r7) ioctl$sock_SIOCGIFINDEX_80211(0xffffffffffffffff, 0x8933, &(0x7f0000000500)={'wlan1\x00'}) (async) socket$nl_rdma(0x10, 0x3, 0x14) (async) sendmsg$NL80211_CMD_DEL_NAN_FUNCTION(r7, 0x0, 0x0) bpf$PROG_LOAD(0x5, &(0x7f00000003c0)={0x16, 0xc, &(0x7f0000000140)=ANY=[@ANYBLOB="1800000000000000000000000000000085000000b5000000180100002020702500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000008900000095"], &(0x7f00000001c0)='GPL\x00', 0x4, 0x0, 0x0, 0x40f00, 0xc, '\x00', 0x0, @fallback=0x36, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xcc85}, 0x94) (async) ioctl$sock_SIOCETHTOOL(r4, 0x8946, &(0x7f0000000580)={'macvtap0\x00', &(0x7f0000000540)=@ethtool_sset_info={0x37, 0x8, 0x7, [0x2, 0x5, 0x7fff, 0x40, 0x5]}}) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000340)={0x11, 0x3, &(0x7f0000000400)=ANY=[@ANYBLOB="c3aa00fe5000000071101a0000b800009500000000000000"], &(0x7f0000000480)='syzkaller\x00', 0x6, 0x0, 0x0, 0x0, 0x48}, 0x94) (async, rerun: 32) setsockopt$inet6_tcp_TCP_ULP(r5, 0x6, 0x1f, &(0x7f00000002c0), 0x4) (async, rerun: 32) setsockopt$inet6_tcp_TLS_TX(r5, 0x11a, 0x2, &(0x7f0000000180)=@gcm_128={{0x304}, "a4c51a4d1bc77a24", "245586e7cae61db3a53c3b701d5a3efe", "0a1ad2f4", "63fd2e1ecc22a424"}, 0x28) (async, rerun: 32) setsockopt$inet6_tcp_TLS_RX(r5, 0x11a, 0x2, &(0x7f0000000200)=@gcm_128={{0x304}, "3b4ab2c1144068b2", "963e11e0be5f9fd4fa47d22055202c7b", "9df00001", "b327c6e40e868fa2"}, 0x28) (async, rerun: 32) sendmsg$netlink(r1, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000080)=[{&(0x7f0000000a00)=ANY=[@ANYBLOB="14030000300001000001000004000000040300800c0001"], 0x314}], 0x1}, 0x800) 1.333911609s ago: executing program 6 (id=5008): sendmsg$NL802154_CMD_NEW_INTERFACE(0xffffffffffffffff, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000000280)={0x0, 0x40}}, 0x8084) syz_init_net_socket$nl_rdma(0x10, 0x3, 0x10) r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl802154(&(0x7f0000000040), 0xffffffffffffffff) socket(0x2, 0x80805, 0x0) (async) r2 = socket(0x2, 0x80805, 0x0) r3 = socket$inet6_sctp(0xa, 0x5, 0x84) getsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX3(r3, 0x84, 0x6f, &(0x7f0000000180)={0x0, 0x1c, &(0x7f00000001c0)=[@in6={0xa, 0x4e1e, 0x9, @private2={0xfc, 0x2, '\x00', 0x6}, 0x7177}]}, &(0x7f0000000200)=0x10) getsockopt$inet_sctp6_SCTP_GET_ASSOC_ID_LIST(r3, 0x84, 0x1d, &(0x7f0000000000)={0x1, [0x0]}, &(0x7f0000000080)=0x8) setsockopt$inet_sctp_SCTP_RESET_ASSOC(r2, 0x84, 0x78, &(0x7f0000000180)=r4, 0x4) (async) setsockopt$inet_sctp_SCTP_RESET_ASSOC(r2, 0x84, 0x78, &(0x7f0000000180)=r4, 0x4) setsockopt$inet_sctp6_SCTP_PR_SUPPORTED(0xffffffffffffffff, 0x84, 0x71, &(0x7f0000000140)={r4, 0x9}, 0x8) bpf$BPF_BTF_LOAD(0x12, &(0x7f00000000c0)={&(0x7f0000000000)={{0xeb9f, 0x1, 0x0, 0x18, 0x0, 0x48, 0x48, 0x6, [@typedef={0x3, 0x0, 0x0, 0x8, 0x5}, @struct={0x0, 0x1, 0x0, 0x4, 0x1, 0x126, [{0x4, 0x4}]}, @type_tag={0x1, 0x0, 0x0, 0x12, 0x5}, @type_tag={0x4, 0x0, 0x0, 0x12, 0x3}, @float={0x3, 0x0, 0x0, 0x10, 0x8}]}, {0x0, [0x30, 0x61, 0x5f, 0x5f]}}, 0x0, 0x66, 0x0, 0x1}, 0x28) (async) bpf$BPF_BTF_LOAD(0x12, &(0x7f00000000c0)={&(0x7f0000000000)={{0xeb9f, 0x1, 0x0, 0x18, 0x0, 0x48, 0x48, 0x6, [@typedef={0x3, 0x0, 0x0, 0x8, 0x5}, @struct={0x0, 0x1, 0x0, 0x4, 0x1, 0x126, [{0x4, 0x4}]}, @type_tag={0x1, 0x0, 0x0, 0x12, 0x5}, @type_tag={0x4, 0x0, 0x0, 0x12, 0x3}, @float={0x3, 0x0, 0x0, 0x10, 0x8}]}, {0x0, [0x30, 0x61, 0x5f, 0x5f]}}, 0x0, 0x66, 0x0, 0x1}, 0x28) sendmsg$NL802154_CMD_SET_CHANNEL(r0, &(0x7f0000000100)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x40000000}, 0xc, &(0x7f00000000c0)={&(0x7f0000000080)={0x28, r1, 0x1, 0x70bd25, 0x25dfdbfe, {}, [@NL802154_ATTR_WPAN_PHY={0x8, 0x1, 0x1}, @NL802154_ATTR_WPAN_DEV={0xc, 0x6, 0x100000001}]}, 0x28}, 0x1, 0x0, 0x0, 0x44000}, 0x6010) (async) sendmsg$NL802154_CMD_SET_CHANNEL(r0, &(0x7f0000000100)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x40000000}, 0xc, &(0x7f00000000c0)={&(0x7f0000000080)={0x28, r1, 0x1, 0x70bd25, 0x25dfdbfe, {}, [@NL802154_ATTR_WPAN_PHY={0x8, 0x1, 0x1}, @NL802154_ATTR_WPAN_DEV={0xc, 0x6, 0x100000001}]}, 0x28}, 0x1, 0x0, 0x0, 0x44000}, 0x6010) bind$netlink(r2, &(0x7f0000000240)={0x10, 0x0, 0x25dfdbfc, 0x20000000}, 0xc) 1.085245026s ago: executing program 5 (id=5009): syz_genetlink_get_family_id$batadv(0x0, 0xffffffffffffffff) r0 = socket$inet_tcp(0x2, 0x1, 0x0) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000180)={'team_slave_1\x00'}) r1 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB], 0x48) r2 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x6, 0x0, 0x0, &(0x7f0000000180)='GPL\x00', 0x0, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, @fallback=0x49, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r3 = openat$6lowpan_control(0xffffffffffffff9c, &(0x7f0000000140), 0x2, 0x0) write$6lowpan_control(r3, &(0x7f0000000540)='connect aa:aa:aa:aa:aa:11 1', 0x1b) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000080)={{r1}, &(0x7f0000000000), &(0x7f0000000040)=r2}, 0x20) bpf$BPF_LINK_CREATE_XDP(0x1c, 0x0, 0x0) r4 = socket$inet6(0xa, 0x80002, 0x0) r5 = socket$nl_route(0x10, 0x3, 0x0) r6 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r6, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000640)=ANY=[@ANYBLOB="14000000100001000000000000b890c1a000000a80000000160a01030000000000000000020000000900020073797a30000000000900010073797a30000000005400038008000240000000000800014000000000400003801400010076657468315f746f5f6272696467650014000100776732000000000000000000000000001400010076657468305f746f5f7465616d00000014000000110001"], 0xa8}, 0x1, 0x0, 0x0, 0x10}, 0x0) sendmsg$NFT_BATCH(r6, &(0x7f0000000500)={0x0, 0x0, &(0x7f00000004c0)={&(0x7f00000003c0)=ANY=[@ANYBLOB="140000001000010000020000000000000500000a70000000180a0500000000dd960000000002000000440003804000038014000100776732000000000000000000000000001400010076657468315f746f5f6272696c6765001400010076657468305f766c616e0000000000000900020073795e30000000000900010073797a3000000000140000001109010000000000000000000300000a"], 0x98}, 0x1, 0x0, 0x0, 0x40000}, 0x20008000) ioctl$sock_SIOCGIFINDEX(r4, 0x8933, &(0x7f0000000040)={'syz_tun\x00', 0x0}) r8 = socket$inet_udp(0x2, 0x2, 0x0) read(r4, &(0x7f0000000080)=""/155, 0x9b) setsockopt$RXRPC_SECURITY_KEYRING(0xffffffffffffffff, 0x110, 0x2, &(0x7f0000000300)='syzkaller1\x00', 0xb) r9 = openat$tun(0xffffffffffffff9c, &(0x7f0000000000), 0x40241, 0x0) ioctl$TUNSETIFF(r9, 0x400454ca, &(0x7f0000000200)={'syzkaller1\x00', 0xc201}) r10 = socket$inet6_sctp(0xa, 0x1, 0x84) setsockopt$inet_sctp6_SCTP_RECVNXTINFO(r10, 0x84, 0x21, 0x0, 0x0) r11 = socket$kcm(0x2, 0xa, 0x2) ioctl$SIOCSIFHWADDR(r11, 0x8914, &(0x7f0000000180)={'syzkaller1\x00', @link_local={0x1, 0x80, 0xc2, 0x0, 0x0, 0x2}}) write$tun(r9, &(0x7f0000000340)=ANY=[@ANYBLOB="ff51178c01003967b884b7d8342c44202834f70000000084907845ffffffacddd931ab3808b230bb8b6814bc1414aa00ffee00", @ANYRES32=0x41424344, @ANYRES32=0x41424344, @ANYBLOB="84000600907800040a03000008d58838068b9100"], 0x42) connect$inet(r8, &(0x7f0000000480)={0x2, 0x0, @multicast1}, 0x10) sendmmsg(r8, &(0x7f0000007fc0), 0x800001d, 0x300) sendmsg$nl_route_sched(r5, &(0x7f0000000200)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000180)=@getchain={0x24, 0x11, 0x1, 0x2000000, 0x0, {0x0, 0x0, 0x0, r7, {0x0, 0x1}, {0x3}, {0xfff3}}}, 0x24}}, 0x0) 62.132187ms ago: executing program 7 (id=5010): r0 = socket(0x21, 0x80000, 0x6) setsockopt$inet6_IPV6_FLOWLABEL_MGR(0xffffffffffffffff, 0x29, 0x20, &(0x7f0000000040)={@loopback, 0x3, 0x0, 0x2, 0x3, 0xa, 0xfffe}, 0x20) ioctl$sock_SIOCGIFINDEX_80211(0xffffffffffffffff, 0x8933, &(0x7f0000000040)={'wlan1\x00'}) r1 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) ioctl(r1, 0x8b32, &(0x7f0000000040)) r2 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_tcp_int(r2, 0x6, 0x13, &(0x7f0000000040)=0x100000001, 0x4) connect$inet6(r2, &(0x7f0000000100)={0xa, 0x0, 0x7, @ipv4={'\x00', '\xff\xff', @local}, 0x8001}, 0x1c) r3 = socket$netlink(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r3, 0x8933, &(0x7f0000000080)={'bridge0\x00'}) sendmsg$nl_route(r3, &(0x7f00000000c0)={0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x4040000}, 0x0) setsockopt$inet6_tcp_TCP_ULP(r2, 0x6, 0x1f, &(0x7f0000000140), 0x3) r4 = bpf$MAP_CREATE(0x0, &(0x7f0000000440)=ANY=[@ANYBLOB="0a000000010000000000000000c5617e9c8c182924e9e013434600000000000000", @ANYRES32, @ANYBLOB="0400"/20, @ANYRES32=0x0, @ANYRES32, @ANYBLOB='\x00'/28], 0x50) close(0x3) bpf$MAP_CREATE(0x0, &(0x7f0000000000)=@base={0x19, 0x4, 0x4, 0x2, 0x0, 0x1}, 0x50) r5 = bpf$PROG_LOAD(0x5, &(0x7f0000000380)={0x1, 0xd, &(0x7f0000000300)=ANY=[@ANYBLOB="18000000000000000000000000000000850000002e00000018110000", @ANYRES32=r4, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000100000095"], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f00000002c0)={r5, 0x0, 0xe, 0x0, &(0x7f00000008c0)="7a7fa22c2aff88df53ef2a2d280f", 0x0, 0xa00, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x50) setsockopt$inet6_tcp_TCP_REPAIR_QUEUE(r2, 0x6, 0x14, &(0x7f0000000400)=0x1, 0x4) r6 = openat$tun(0xffffffffffffff9c, 0x0, 0x40241, 0x0) ioctl$TUNSETIFF(r6, 0x400454ca, &(0x7f0000000200)={'syzkaller1\x00', 0xc201}) socket$nl_rdma(0x10, 0x3, 0x14) ioctl$sock_bt_bnep_BNEPCONNADD(r0, 0x400442c8, 0x0) write$tun(r6, 0x0, 0xfdef) setsockopt$inet6_tcp_TLS_TX(r2, 0x11a, 0x2, &(0x7f00000003c0)=@gcm_128={{0x304}, "d0fd56261e20522c", "114f0201045879000000927ca09f9467", 'i\vcM'}, 0x28) r7 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000001480)='blkio.bfq.io_service_bytes\x00', 0x275a, 0x0) write$tun(r7, &(0x7f0000000340)=ANY=[], 0x141) mmap(&(0x7f0000000000/0x4000)=nil, 0x4000, 0x1, 0x10012, r7, 0x0) bpf$PROG_LOAD(0x5, &(0x7f000000e000)={0x1, 0xb, &(0x7f0000000200)=ANY=[@ANYBLOB="b4000000000000077911b800000000001801000020"], 0x0, 0x2, 0xc3, &(0x7f000000cf3d)=""/195, 0x0, 0x2e, '\x00', 0x0, @fallback=0xd}, 0x94) recvfrom$inet6(r2, &(0x7f00000006c0)=""/222, 0xde, 0x10100, 0x0, 0x0) setsockopt$inet6_tcp_TLS_TX(r2, 0x11a, 0x1, &(0x7f0000000080)=@ccm_128={{0x303}, "b421eba833d4b156", "56df2295bfda5c4f9fecff61beaa8bb4", "808065e3", "7f1f1c2ab4421d27"}, 0x28) 0s ago: executing program 6 (id=5011): bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000800)={0x1f, 0xc, &(0x7f00000005c0)=ANY=[@ANYBLOB="1800000000000000000000000000000085000000a8000000180100002020642500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b70300000000000085000000c400000095"], &(0x7f0000000000)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x11}, 0x94) socket$inet6_sctp(0xa, 0x5, 0x84) r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$ethtool(&(0x7f0000000080), 0xffffffffffffffff) r2 = socket(0x400000000010, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f0000000380)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r2, &(0x7f00000012c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000480)=@newqdisc={0x2c, 0x24, 0x4ee4e6a52ff56541, 0x70bd2e, 0xffffffff, {0x0, 0x0, 0x0, r3, {0x0, 0x1}, {0xffff, 0xffff}, {0x0, 0x6}}, [@qdisc_kind_options=@q_drr={0x8}]}, 0x2c}, 0x1, 0x0, 0x0, 0x2004c014}, 0x0) getsockopt$inet6_mreq(0xffffffffffffffff, 0x29, 0x0, &(0x7f00000000c0)={@private0, 0x0}, &(0x7f0000000100)=0x14) r5 = socket$inet6(0x10, 0x3, 0x0) sendto$inet6(r5, &(0x7f0000000140)="1ba0000016001d0d89fdc5cbdd045798707bed4dca141a780f0f8e", 0xff3b, 0x0, 0x0, 0x0) recvfrom$inet6(r5, &(0x7f0000000000)=""/31, 0x1f, 0x2002, 0x0, 0x0) writev(0xffffffffffffffff, &(0x7f00000002c0)=[{&(0x7f0000000000)="48050000150019", 0x7}], 0x1) r6 = socket$inet6(0x10, 0x3, 0x0) sendto$inet6(r6, &(0x7f0000000000)='s', 0x573, 0x800, 0x0, 0x4b6ae4f95a5de35b) ioctl$ifreq_SIOCGIFINDEX_batadv_mesh(0xffffffffffffffff, 0x8933, &(0x7f0000000140)={'batadv0\x00', 0x0}) ioctl$sock_ipv6_tunnel_SIOCGETTUNNEL(0xffffffffffffffff, 0x89f0, &(0x7f0000000200)={'ip6tnl0\x00', &(0x7f0000000180)={'ip6gre0\x00', 0x0, 0x4, 0x6, 0x2, 0x8, 0x1, @mcast2, @private1={0xfc, 0x1, '\x00', 0x1}, 0x40, 0x8, 0x7, 0x80000001}}) sendmsg$ETHTOOL_MSG_PRIVFLAGS_GET(r0, &(0x7f0000000300)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x4000000}, 0xc, &(0x7f00000002c0)={&(0x7f0000000240)=ANY=[@ANYBLOB='p\x00\x00\x00', @ANYRES16=r1, @ANYBLOB="200026bd7000ffdbdf250d0000001d00018008000100", @ANYRES32=r3, @ANYBLOB="280001801400020076657468315f766972745f776966690008000100", @ANYRES32=r4, @ANYBLOB="080003000000000028000180140002006970766c616e3000000000000000000008000100", @ANYRES32=r7, @ANYBLOB="08000100", @ANYRES32=r8, @ANYBLOB], 0x70}, 0x1, 0x0, 0x0, 0xc081}, 0x8000) kernel console output (not intermixed with test programs): 5582] __x64_sys_setsockopt+0x13d/0x1b0 [ 1085.095674][T25582] do_syscall_64+0x166/0x520 [ 1085.095698][T25582] ? trace_irq_disable+0x3b/0x140 [ 1085.095717][T25582] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1085.095736][T25582] ? clear_bhb_loop+0x70/0xc0 [ 1085.095760][T25582] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1085.095779][T25582] RIP: 0033:0x7f8c9f59e159 [ 1085.095804][T25582] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 1085.095820][T25582] RSP: 002b:00007f8ca0443028 EFLAGS: 00000246 ORIG_RAX: 0000000000000036 [ 1085.095841][T25582] RAX: ffffffffffffffda RBX: 00007f8c9f825fa0 RCX: 00007f8c9f59e159 [ 1085.095855][T25582] RDX: 0000000000000006 RSI: 000000000000011b RDI: 0000000000000004 [ 1085.095870][T25582] RBP: 00007f8c9f63506b R08: 0000000000000004 R09: 0000000000000000 [ 1085.095882][T25582] R10: 0000200000000000 R11: 0000000000000246 R12: 0000000000000000 [ 1085.095895][T25582] R13: 00007f8c9f826038 R14: 00007f8c9f825fa0 R15: 00007ffea376f3d8 [ 1085.095928][T25582] [ 1085.096041][T25582] Mem-Info: [ 1085.096050][T25582] active_anon:6572 inactive_anon:0 isolated_anon:0 [ 1085.096050][T25582] active_file:0 inactive_file:43877 isolated_file:0 [ 1085.096050][T25582] unevictable:0 dirty:61 writeback:0 [ 1085.096050][T25582] slab_reclaimable:11911 slab_unreclaimable:117859 [ 1085.096050][T25582] mapped:29639 shmem:674 pagetables:1348 [ 1085.096050][T25582] sec_pagetables:0 bounce:0 [ 1085.096050][T25582] kernel_misc_reclaimable:0 [ 1085.096050][T25582] free:1266170 free_pcp:10037 free_cma:0 [ 1085.096104][T25582] Node 0 active_anon:26288kB inactive_anon:0kB active_file:0kB inactive_file:175300kB unevictable:0kB isolated(anon):0kB isolated(file):0kB mapped:118556kB dirty:244kB writeback:0kB shmem:2696kB shmem_thp:0kB shmem_pmdmapped:0kB anon_thp:0kB kernel_stack:15076kB pagetables:5224kB sec_pagetables:0kB all_unreclaimable? no Balloon:0kB gpu_active:0kB gpu_reclaim:0kB [ 1085.096156][T25582] Node 1 active_anon:0kB inactive_anon:0kB active_file:0kB inactive_file:208kB unevictable:0kB isolated(anon):0kB isolated(file):0kB mapped:0kB dirty:0kB writeback:0kB shmem:0kB shmem_thp:0kB shmem_pmdmapped:0kB anon_thp:0kB kernel_stack:64kB pagetables:168kB sec_pagetables:0kB all_unreclaimable? no Balloon:0kB gpu_active:0kB gpu_reclaim:0kB [ 1085.096205][T25582] Node 0 DMA free:15360kB boost:0kB min:208kB low:260kB high:312kB reserved_highatomic:0kB free_highatomic:0kB active_anon:0kB inactive_anon:0kB active_file:0kB inactive_file:0kB unevictable:0kB writepending:0kB zspages:0kB present:15992kB managed:15360kB mlocked:0kB bounce:0kB free_pcp:0kB local_pcp:0kB free_cma:0kB [ 1085.096259][T25582] lowmem_reserve[]: 0 2487 2487 2487 2487 [ 1085.096294][T25582] Node 0 DMA32 free:1111176kB boost:0kB min:34140kB low:42672kB high:51204kB reserved_highatomic:0kB free_highatomic:0kB active_anon:26288kB inactive_anon:0kB active_file:0kB inactive_file:175300kB unevictable:0kB writepending:244kB zspages:0kB present:3129332kB managed:2546840kB mlocked:0kB bounce:0kB free_pcp:40148kB local_pcp:20520kB free_cma:0kB [ 1085.096348][T25582] lowmem_reserve[]: 0 0 0 0 0 [ 1085.096381][T25582] Node 0 Normal free:0kB boost:0kB min:0kB low:0kB high:0kB reserved_highatomic:0kB free_highatomic:0kB active_anon:0kB inactive_anon:0kB active_file:0kB inactive_file:0kB unevictable:0kB writepending:0kB zspages:0kB present:1048580kB managed:0kB mlocked:0kB bounce:0kB free_pcp:0kB local_pcp:0kB free_cma:0kB [ 1085.096430][T25582] lowmem_reserve[]: 0 0 0 0 0 [ 1085.096462][T25582] Node 1 Normal free:3938144kB boost:0kB min:55760kB low:69700kB high:83640kB reserved_highatomic:0kB free_highatomic:0kB active_anon:0kB inactive_anon:0kB active_file:0kB inactive_file:208kB unevictable:0kB writepending:0kB zspages:0kB present:4194300kB managed:4111104kB mlocked:0kB bounce:0kB free_pcp:0kB local_pcp:0kB free_cma:0kB [ 1085.096513][T25582] lowmem_reserve[]: 0 0 0 0 0 [ 1085.096545][T25582] Node 0 DMA: 0*4kB 0*8kB 0*16kB 0*32kB 0*64kB 0*128kB 0*256kB 0*512kB 1*1024kB (U) 1*2048kB (M) 3*4096kB (M) = 15360kB [ 1085.096652][T25582] Node 0 DMA32: 2155*4kB (UME) 480*8kB (UM) 207*16kB (UM) 214*32kB (UM) 77*64kB (UME) 27*128kB (UME) 2*256kB (U) 41*512kB (UME) 32*1024kB (UME) 9*2048kB (UME) 246*4096kB (UM) = 1111324kB [ 1085.096804][T25582] Node 0 Normal: 0*4kB 0*8kB 0*16kB 0*32kB 0*64kB 0*128kB 0*256kB 0*512kB 0*1024kB 0*2048kB 0*4096kB = 0kB [ 1085.096968][T25582] Node 1 Normal: 2*4kB (UM) 1*8kB (M) 7*16kB (UM) 5*32kB (UM) 5*64kB (UM) 4*128kB (UM) 3*256kB (UM) 2*512kB (M) 1*1024kB (M) 1*2048kB (U) 960*4096kB (UM) = 3938144kB [ 1085.097202][T25582] Node 0 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=1048576kB [ 1085.097218][T25582] Node 0 hugepages_total=2 hugepages_free=2 hugepages_surp=0 hugepages_size=2048kB [ 1085.097239][T25582] Node 1 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=1048576kB [ 1085.097254][T25582] Node 1 hugepages_total=2 hugepages_free=2 hugepages_surp=0 hugepages_size=2048kB [ 1085.097269][T25582] 44547 total pagecache pages [ 1085.097280][T25582] 0 pages in swap cache [ 1085.097288][T25582] Free swap = 124996kB [ 1085.097294][T25582] Total swap = 124996kB [ 1085.097303][T25582] 2097051 pages RAM [ 1085.097310][T25582] 0 pages HighMem/MovableOnly [ 1085.097317][T25582] 428725 pages reserved [ 1085.097324][T25582] 0 pages cma reserved [ 1085.285802][T25585] netlink: 220 bytes leftover after parsing attributes in process `syz.3.3870'. [ 1085.285823][T25585] openvswitch: netlink: Flow key attr not present in new flow. [ 1086.282795][T25613] batman_adv: batadv0: Adding interface: gretap1 [ 1086.282813][T25613] batman_adv: batadv0: The MTU of interface gretap1 is too small (1442) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 1086.282839][T25613] batman_adv: batadv0: Interface activated: gretap1 [ 1086.319781][T25621] netlink: 32 bytes leftover after parsing attributes in process `syz.5.3879'. [ 1086.323837][ T9884] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1086.389369][ C0] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1086.517904][T25617] netlink: 'syz.7.3877': attribute type 39 has an invalid length. [ 1086.571075][T25616] syzkaller0: entered promiscuous mode [ 1086.571099][T25616] syzkaller0: entered allmulticast mode [ 1088.389397][ C0] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1088.872482][T25236] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1088.872758][ C0] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1090.389439][ C0] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1090.672092][T25642] tipc: Enabled bearer , priority 10 [ 1091.356602][T25684] netlink: 'syz.5.3891': attribute type 11 has an invalid length. [ 1091.356793][T25685] netlink: 'syz.5.3891': attribute type 11 has an invalid length. [ 1091.561286][T25691] netlink: 28 bytes leftover after parsing attributes in process `syz.6.3892'. [ 1091.599408][T25691] netlink: 'syz.6.3892': attribute type 32 has an invalid length. [ 1091.627393][T25702] netlink: 'syz.5.3895': attribute type 1 has an invalid length. [ 1091.627413][T25702] netlink: 'syz.5.3895': attribute type 2 has an invalid length. [ 1091.652829][T25700] netlink: 'syz.5.3895': attribute type 1 has an invalid length. [ 1091.652849][T25700] netlink: 'syz.5.3895': attribute type 2 has an invalid length. [ 1091.793717][T19210] tipc: Node number set to 16842751 [ 1092.070811][T25238] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1092.157836][T25724] syzkaller0: entered promiscuous mode [ 1092.157859][T25724] syzkaller0: entered allmulticast mode [ 1092.389567][ C0] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1092.647426][T25738] xt_CT: No such helper "syz1" [ 1092.805343][T25756] netlink: 44 bytes leftover after parsing attributes in process `syz.3.3904'. [ 1092.805369][T25756] netlink: 35 bytes leftover after parsing attributes in process `syz.3.3904'. [ 1092.805384][T25756] netlink: 'syz.3.3904': attribute type 5 has an invalid length. [ 1092.805396][T25756] netlink: 'syz.3.3904': attribute type 6 has an invalid length. [ 1092.805407][T25756] netlink: 35 bytes leftover after parsing attributes in process `syz.3.3904'. [ 1092.879851][T25760] xt_hashlimit: size too large, truncated to 1048576 [ 1093.047634][T25770] xt_hashlimit: size too large, truncated to 1048576 [ 1093.526975][T25782] netlink: 4 bytes leftover after parsing attributes in process `syz.6.3910'. [ 1093.641144][T25786] ip6_tables: ip6tables: counters copy to user failed while replacing table [ 1093.734310][T25788] batadv_slave_0: entered promiscuous mode [ 1093.771005][T25792] veth0: entered promiscuous mode [ 1093.772415][T25792] bond0: entered promiscuous mode [ 1093.772434][T25792] bond_slave_0: entered promiscuous mode [ 1093.772594][T25792] bond_slave_1: entered promiscuous mode [ 1093.808654][T25787] batadv_slave_0: left promiscuous mode [ 1093.936601][T25801] syzkaller1: entered promiscuous mode [ 1093.936622][T25801] syzkaller1: entered allmulticast mode [ 1093.974207][T25803] netlink: 16 bytes leftover after parsing attributes in process `syz.7.3915'. [ 1094.039397][T25806] ip_tables: iptables: counters copy to user failed while replacing table [ 1094.163937][T25791] bond0: left promiscuous mode [ 1094.163960][T25791] bond_slave_0: left promiscuous mode [ 1094.164157][T25791] bond_slave_1: left promiscuous mode [ 1094.164505][T25791] veth0: left promiscuous mode [ 1094.307536][T25817] netlink: 36 bytes leftover after parsing attributes in process `syz.5.3921'. [ 1094.325008][T25817] syzkaller0: entered promiscuous mode [ 1094.325039][T25817] syzkaller0: entered allmulticast mode [ 1094.383094][T25815] netlink: 12 bytes leftover after parsing attributes in process `syz.7.3920'. [ 1094.389413][ C0] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1094.632677][T25235] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1094.632987][ C0] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1094.666796][T25827] FAULT_INJECTION: forcing a failure. [ 1094.666796][T25827] name failslab, interval 1, probability 0, space 0, times 0 [ 1094.666826][T25827] CPU: 1 UID: 0 PID: 25827 Comm: syz.6.3923 Not tainted syzkaller #0 PREEMPT(full) [ 1094.666846][T25827] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/24/2026 [ 1094.666858][T25827] Call Trace: [ 1094.666865][T25827] [ 1094.666874][T25827] dump_stack_lvl+0xe8/0x150 [ 1094.666906][T25827] should_fail_ex+0x410/0x560 [ 1094.666934][T25827] should_failslab+0xa8/0x100 [ 1094.666962][T25827] __kmalloc_noprof+0xfe/0x720 [ 1094.666981][T25827] ? security_sk_alloc+0x52/0x360 [ 1094.667005][T25827] ? security_sk_alloc+0x52/0x360 [ 1094.667037][T25827] security_sk_alloc+0x52/0x360 [ 1094.667068][T25827] sk_prot_alloc+0x101/0x210 [ 1094.667090][T25827] ? sk_alloc+0x27/0x390 [ 1094.667116][T25827] sk_alloc+0x3a/0x390 [ 1094.667143][T25827] bpf_prog_test_run_skb+0x3a6/0x2230 [ 1094.667173][T25827] ? lock_acquire+0x115/0x350 [ 1094.667210][T25827] ? __fget_files+0x3a2/0x420 [ 1094.667235][T25827] ? __fget_files+0x2a/0x420 [ 1094.667264][T25827] ? __pfx_bpf_prog_test_run_skb+0x10/0x10 [ 1094.667293][T25827] bpf_prog_test_run+0x2c5/0x340 [ 1094.667321][T25827] __sys_bpf+0xa22/0xd90 [ 1094.667350][T25827] ? __pfx___sys_bpf+0x10/0x10 [ 1094.667383][T25827] ? __fget_files+0x2a/0x420 [ 1094.667426][T25827] ? ksys_write+0x242/0x270 [ 1094.667455][T25827] ? __pfx_ksys_write+0x10/0x10 [ 1094.667489][T25827] __x64_sys_bpf+0xba/0xd0 [ 1094.667510][T25827] do_syscall_64+0x166/0x520 [ 1094.667534][T25827] ? trace_irq_disable+0x3b/0x140 [ 1094.667554][T25827] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1094.667572][T25827] ? clear_bhb_loop+0x70/0xc0 [ 1094.667604][T25827] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1094.667623][T25827] RIP: 0033:0x7ffb67d9e159 [ 1094.667641][T25827] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 1094.667656][T25827] RSP: 002b:00007ffb68c11028 EFLAGS: 00000246 ORIG_RAX: 0000000000000141 [ 1094.667677][T25827] RAX: ffffffffffffffda RBX: 00007ffb68025fa0 RCX: 00007ffb67d9e159 [ 1094.667691][T25827] RDX: 0000000000000050 RSI: 00002000000002c0 RDI: 000000000000000a [ 1094.667704][T25827] RBP: 00007ffb68c11090 R08: 0000000000000000 R09: 0000000000000000 [ 1094.667716][T25827] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 1094.667728][T25827] R13: 00007ffb68026038 R14: 00007ffb68025fa0 R15: 00007ffc24d54c78 [ 1094.667760][T25827] [ 1095.063780][T25835] tc_dump_action: action bad kind [ 1095.063979][T25835] tc_dump_action: action bad kind [ 1095.064152][T25835] tc_dump_action: action bad kind [ 1095.064321][T25835] tc_dump_action: action bad kind [ 1095.064520][T25835] tc_dump_action: action bad kind [ 1095.064721][T25835] tc_dump_action: action bad kind [ 1095.064897][T25835] tc_dump_action: action bad kind [ 1095.065066][T25835] tc_dump_action: action bad kind [ 1095.066966][T25839] netlink: 8 bytes leftover after parsing attributes in process `syz.4.3926'. [ 1095.376471][T25846] netlink: 20 bytes leftover after parsing attributes in process `syz.4.3931'. [ 1095.475798][T25855] sctp: [Deprecated]: syz.4.3932 (pid 25855) Use of int in maxseg socket option. [ 1095.475798][T25855] Use struct sctp_assoc_value instead [ 1095.850930][T25869] netlink: 'syz.6.3937': attribute type 4 has an invalid length. [ 1096.135862][T25881] x_tables: duplicate entry at hook 1 [ 1096.135953][T25881] x_tables: duplicate entry at hook 1 [ 1096.136026][T25881] x_tables: duplicate entry at hook 1 [ 1096.136094][T25881] x_tables: duplicate entry at hook 1 [ 1096.136161][T25881] x_tables: duplicate entry at hook 1 [ 1096.136231][T25881] x_tables: duplicate entry at hook 1 [ 1096.136929][T25881] x_tables: duplicate entry at hook 1 [ 1096.137010][T25881] x_tables: duplicate entry at hook 1 [ 1096.137103][T25881] x_tables: duplicate entry at hook 1 [ 1096.137169][T25881] x_tables: duplicate entry at hook 1 [ 1096.389364][ C0] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1096.998944][T25912] openvswitch: netlink: Either Ethernet header or EtherType is required. [ 1097.373965][T25920] __nla_validate_parse: 5 callbacks suppressed [ 1097.373984][T25920] netlink: 24 bytes leftover after parsing attributes in process `syz.3.3952'. [ 1097.419830][T25917] vlan2: entered allmulticast mode [ 1097.419857][T25917] netdevsim netdevsim5 netdevsim0: entered allmulticast mode [ 1097.423206][T25917] batman_adv: batadv0: Adding interface: vlan2 [ 1097.423222][T25917] batman_adv: batadv0: The MTU of interface vlan2 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 1097.423248][T25917] batman_adv: batadv0: Not using interface vlan2 (retrying later): interface not active [ 1097.834681][ T9884] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1098.084484][T25937] netlink: 'syz.7.3955': attribute type 1 has an invalid length. [ 1098.374569][T25949] openvswitch: netlink: ct_state flags 806d0004 unsupported [ 1098.389372][ C0] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1098.516382][T25949] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 1098.517658][T25949] batadv_slave_0: entered promiscuous mode [ 1098.656760][T25955] netlink: 4 bytes leftover after parsing attributes in process `syz.5.3962'. [ 1098.757320][T25965] xt_hashlimit: size too large, truncated to 1048576 [ 1098.914632][T25974] netlink: 12 bytes leftover after parsing attributes in process `syz.7.3967'. [ 1098.981349][T17534] Bluetooth: hci3: link tx timeout [ 1098.981555][T17534] Bluetooth: hci3: killing stalled connection 11:aa:aa:aa:aa:aa [ 1098.987362][T25976] netlink: 32 bytes leftover after parsing attributes in process `syz.4.3968'. [ 1099.073929][T25972] netlink: 4 bytes leftover after parsing attributes in process `syz.3.3966'. [ 1099.124064][T25235] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1099.593695][T25991] batadv_slave_0: left promiscuous mode [ 1099.595822][T25991] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 1099.706659][T25991] veth0_to_team: entered promiscuous mode [ 1099.719049][T25991] 8021q: adding VLAN 0 to HW filter on device bond1 [ 1099.740730][T25991] A link change request failed with some changes committed already. Interface veth1_to_bod may have been left with an inconsistent configuration, please check. [ 1099.813646][T25997] erspan0: entered promiscuous mode [ 1099.814693][T25997] vlan2: entered promiscuous mode [ 1100.027525][T25994] netlink: 4 bytes leftover after parsing attributes in process `syz.4.3975'. [ 1100.341466][T26029] netlink: 8 bytes leftover after parsing attributes in process `syz.3.3978'. [ 1100.389821][ C0] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1100.397809][T25236] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1100.398130][ C0] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1100.813724][T26053] netlink: 4 bytes leftover after parsing attributes in process `syz.3.3983'. [ 1101.033226][ T5628] Bluetooth: hci3: command 0x0406 tx timeout [ 1101.539452][T26068] netlink: 8 bytes leftover after parsing attributes in process `syz.5.3987'. [ 1101.563377][T26068] netlink: 44 bytes leftover after parsing attributes in process `syz.5.3987'. [ 1101.584891][T26052] batman_adv: batadv0: Adding interface: macvtap1 [ 1101.584916][T26052] batman_adv: batadv0: The MTU of interface macvtap1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 1101.584941][T26052] batman_adv: batadv0: Not using interface macvtap1 (retrying later): interface not active [ 1101.658765][T26067] netlink: 'syz.5.3987': attribute type 8 has an invalid length. [ 1101.817900][T26070] netlink: 'syz.7.3988': attribute type 1 has an invalid length. [ 1101.964886][T26070] 8021q: adding VLAN 0 to HW filter on device bond3 [ 1102.015879][T26073] bond3: (slave veth0_to_bond): making interface the new active one [ 1102.028605][T26073] bond3: (slave veth0_to_bond): Enslaving as an active interface with an up link [ 1102.389438][ C0] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1102.583981][T26091] __nla_validate_parse: 2 callbacks suppressed [ 1102.584002][T26091] netlink: 56 bytes leftover after parsing attributes in process `syz.3.3991'. [ 1102.584190][T26091] netlink: 56 bytes leftover after parsing attributes in process `syz.3.3991'. [ 1102.584363][T26091] netlink: 56 bytes leftover after parsing attributes in process `syz.3.3991'. [ 1102.584535][T26091] netlink: 56 bytes leftover after parsing attributes in process `syz.3.3991'. [ 1102.584709][T26091] netlink: 56 bytes leftover after parsing attributes in process `syz.3.3991'. [ 1102.586913][T26091] netlink: 56 bytes leftover after parsing attributes in process `syz.3.3991'. [ 1102.588210][T26091] netlink: 56 bytes leftover after parsing attributes in process `syz.3.3991'. [ 1102.629979][T26091] netlink: 56 bytes leftover after parsing attributes in process `syz.3.3991'. [ 1102.630194][T26091] netlink: 56 bytes leftover after parsing attributes in process `syz.3.3991'. [ 1102.630354][T26091] netlink: 56 bytes leftover after parsing attributes in process `syz.3.3991'. [ 1102.951195][T18391] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1102.956675][T26074] bond3: entered promiscuous mode [ 1102.956696][T26074] veth0_to_bond: entered promiscuous mode [ 1102.956967][T26074] bond3: entered allmulticast mode [ 1102.956980][T26074] veth0_to_bond: entered allmulticast mode [ 1102.984075][T26071] macvlan2: entered promiscuous mode [ 1102.984095][T26071] macvlan2: entered allmulticast mode [ 1102.985218][T26071] 8021q: adding VLAN 0 to HW filter on device macvlan2 [ 1103.393479][T26071] bond3: (slave macvlan2): the slave hw address is in use by the bond; giving it the hw address of veth0_to_bond [ 1103.625227][T26104] hsr0: entered promiscuous mode [ 1103.784034][T26110] netlink: 'syz.5.3995': attribute type 1 has an invalid length. [ 1103.852162][T26113] netlink: 'syz.5.3995': attribute type 1 has an invalid length. [ 1104.231142][T18381] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1104.326383][T26138] batman_adv: batadv0: Adding interface: macsec0 [ 1104.326402][T26138] batman_adv: batadv0: The MTU of interface macsec0 is too small (1468) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 1104.326431][T26138] batman_adv: batadv0: Interface activated: macsec0 [ 1104.389508][ C0] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1104.850277][T26150] netlink: 'syz.4.4006': attribute type 10 has an invalid length. [ 1104.946230][T26150] geneve2: entered promiscuous mode [ 1104.946254][T26150] geneve2: entered allmulticast mode [ 1104.984271][T26147] syzkaller1: entered promiscuous mode [ 1104.984294][T26147] syzkaller1: entered allmulticast mode [ 1105.082893][T26155] 0ªî{X¹¦: renamed from gretap0 (while UP) [ 1105.092933][T26155] 0ªî{X¹¦: entered allmulticast mode [ 1105.093350][T26155] A link change request failed with some changes committed already. Interface 30ªî{X¹¦ may have been left with an inconsistent configuration, please check. [ 1105.511321][T25235] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1105.511624][ C1] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1105.611410][T26179] xt_hashlimit: size too large, truncated to 1048576 [ 1105.712378][T26180] syzkaller1: entered promiscuous mode [ 1105.712400][T26180] syzkaller1: entered allmulticast mode [ 1106.155520][ C0] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1106.389527][ C0] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1106.926335][T26228] geneve0: entered promiscuous mode [ 1107.134368][T26228] tipc: Enabling of bearer rejected, failed to enable media [ 1107.202812][T26238] syzkaller0: entered promiscuous mode [ 1107.202833][T26238] syzkaller0: entered allmulticast mode [ 1107.343720][T26239] 0: reclassify loop, rule prio 0, protocol 800 [ 1107.716321][T26262] xt_hashlimit: size too large, truncated to 1048576 [ 1108.389614][ C0] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1108.793045][T26288] netlink: 'syz.4.4034': attribute type 11 has an invalid length. [ 1109.377503][ T9884] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1109.403671][T26305] netlink: 'syz.6.4037': attribute type 1 has an invalid length. [ 1110.241830][T26305] bond3: entered promiscuous mode [ 1110.243913][T26305] 8021q: adding VLAN 0 to HW filter on device bond3 [ 1110.294914][T26310] bond3: (slave bridge13): making interface the new active one [ 1110.294940][T26310] bridge13: entered promiscuous mode [ 1110.312699][T26310] bond3: (slave bridge13): Enslaving as an active interface with an up link [ 1110.366317][T26319] __nla_validate_parse: 69 callbacks suppressed [ 1110.366336][T26319] netlink: 40 bytes leftover after parsing attributes in process `syz.7.4039'. [ 1110.389518][ C0] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1110.519712][T26322] netlink: 'syz.4.4038': attribute type 1 has an invalid length. [ 1110.616664][T26322] netlink: 40 bytes leftover after parsing attributes in process `syz.4.4038'. [ 1110.713374][T26329] netlink: 8 bytes leftover after parsing attributes in process `syz.6.4041'. [ 1111.146414][T25238] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 1111.146437][T25238] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 1111.151802][T26347] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 1111.301909][T25228] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1111.302194][ C0] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1111.383164][T26355] bridge_slave_0: left allmulticast mode [ 1111.383198][T26355] bridge_slave_0: left promiscuous mode [ 1111.383414][T26355] bridge0: port 1(bridge_slave_0) entered disabled state [ 1111.431460][T26343] netdevsim netdevsim6 netdevsim0: left allmulticast mode [ 1111.431565][T26343] netdevsim netdevsim6 netdevsim0: left promiscuous mode [ 1111.431832][T26343] bridge0: port 4(netdevsim0) entered disabled state [ 1111.460480][T26352] netlink: 88 bytes leftover after parsing attributes in process `syz.5.4049'. [ 1111.460501][T26352] netlink: 8 bytes leftover after parsing attributes in process `syz.5.4049'. [ 1111.476170][T26343] macvlan2: left allmulticast mode [ 1111.476191][T26343] ip6gretap0: left allmulticast mode [ 1111.476278][T26343] macvlan2: left promiscuous mode [ 1111.487091][T26343] bridge0: port 3(macvlan2) entered disabled state [ 1111.512256][T26343] bridge_slave_1: left allmulticast mode [ 1111.512281][T26343] bridge_slave_1: left promiscuous mode [ 1111.512484][T26343] bridge0: port 2(bridge_slave_1) entered disabled state [ 1111.761386][T26364] netlink: 32 bytes leftover after parsing attributes in process `syz.4.4051'. [ 1111.838821][T26367] netlink: 4 bytes leftover after parsing attributes in process `syz.3.4050'. [ 1112.389374][ C0] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1112.890462][T26397] A link change request failed with some changes committed already. Interface bond_slave_1 may have been left with an inconsistent configuration, please check. [ 1113.007010][T26399] netlink: 4 bytes leftover after parsing attributes in process `syz.5.4055'. [ 1113.034140][T26399] netlink: 12 bytes leftover after parsing attributes in process `syz.5.4055'. [ 1113.146688][T26404] netlink: 24 bytes leftover after parsing attributes in process `syz.6.4053'. [ 1113.163495][T26406] netdevsim netdevsim4 netdevsim0: entered allmulticast mode [ 1113.399657][T26410] openvswitch: netlink: IP tunnel attribute has 8 unknown bytes. [ 1113.399692][T26410] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 1113.561988][T26415] xt_hashlimit: size too large, truncated to 1048576 [ 1113.605928][T26420] FAULT_INJECTION: forcing a failure. [ 1113.605928][T26420] name failslab, interval 1, probability 0, space 0, times 0 [ 1113.605966][T26420] CPU: 1 UID: 0 PID: 26420 Comm: syz.7.4060 Not tainted syzkaller #0 PREEMPT(full) [ 1113.605988][T26420] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/24/2026 [ 1113.606000][T26420] Call Trace: [ 1113.606009][T26420] [ 1113.606019][T26420] dump_stack_lvl+0xe8/0x150 [ 1113.606053][T26420] should_fail_ex+0x410/0x560 [ 1113.606082][T26420] should_failslab+0xa8/0x100 [ 1113.606106][T26420] ? dst_alloc+0x105/0x170 [ 1113.606125][T26420] kmem_cache_alloc_noprof+0xa1/0x600 [ 1113.606154][T26420] ? lock_acquire+0x115/0x350 [ 1113.606175][T26420] ? dst_alloc+0x105/0x170 [ 1113.606197][T26420] ? __pfx_ip6_dst_gc+0x10/0x10 [ 1113.606219][T26420] dst_alloc+0x105/0x170 [ 1113.606252][T26420] ip6_pol_route+0xba1/0x14d0 [ 1113.606275][T26420] ? ip6_pol_route+0x163/0x14d0 [ 1113.606301][T26420] ? __pfx_ip6_pol_route+0x10/0x10 [ 1113.606342][T26420] fib6_rule_action+0x265/0xc00 [ 1113.606367][T26420] ? lock_acquire+0x115/0x350 [ 1113.606387][T26420] ? __pfx_fib6_rule_action+0x10/0x10 [ 1113.606412][T26420] ? fib6_rule_match+0x799/0xa80 [ 1113.606429][T26420] ? __pfx_fib6_rule_action+0x10/0x10 [ 1113.606448][T26420] fib_rules_lookup+0x770/0xeb0 [ 1113.606475][T26420] ? fib_rules_lookup+0x99/0xeb0 [ 1113.606504][T26420] ? __pfx_fib_rules_lookup+0x10/0x10 [ 1113.606530][T26420] ? l3mdev_update_flow+0x26/0x610 [ 1113.606555][T26420] ? l3mdev_update_flow+0x4ad/0x610 [ 1113.606577][T26420] ? l3mdev_update_flow+0x26/0x610 [ 1113.606606][T26420] fib6_rule_lookup+0x19b/0x6e0 [ 1113.606628][T26420] ? __lock_acquire+0x747/0x2de0 [ 1113.606645][T26420] ? __pfx_ip6_pol_route_output+0x10/0x10 [ 1113.606664][T26420] ? __pfx_fib6_rule_lookup+0x10/0x10 [ 1113.606686][T26420] ? lock_acquire+0x115/0x350 [ 1113.606703][T26420] ? __pfx_ip6_pol_route_output+0x10/0x10 [ 1113.606723][T26420] ? dev_get_by_index_rcu+0xee/0x110 [ 1113.606743][T26420] ip6_route_output_flags+0x364/0x5d0 [ 1113.606759][T26420] ? ip6_route_output_flags+0x2e/0x5d0 [ 1113.606777][T26420] ip6_dst_lookup_tail+0x273/0x1610 [ 1113.606800][T26420] ? txopt_get+0x79/0x3f0 [ 1113.606821][T26420] ? __pfx_ip6_dst_lookup_tail+0x10/0x10 [ 1113.606839][T26420] ? txopt_get+0x79/0x3f0 [ 1113.606857][T26420] ? txopt_get+0x79/0x3f0 [ 1113.606873][T26420] ? txopt_get+0x79/0x3f0 [ 1113.606892][T26420] ? txopt_get+0x343/0x3f0 [ 1113.606910][T26420] ? __lock_acquire+0x747/0x2de0 [ 1113.606924][T26420] ? __pfx_txopt_get+0x10/0x10 [ 1113.606946][T26420] ip6_dst_lookup_flow+0x89/0x150 [ 1113.606968][T26420] rawv6_sendmsg+0xdd0/0x18c0 [ 1113.606998][T26420] ? __pfx_rawv6_sendmsg+0x10/0x10 [ 1113.607036][T26420] ? __lock_acquire+0x747/0x2de0 [ 1113.607056][T26420] ? aa_sock_msg_perm+0xf5/0x210 [ 1113.607074][T26420] ? sock_rps_record_flow+0x19/0x350 [ 1113.607093][T26420] ? inet_sendmsg+0x298/0x320 [ 1113.607106][T26420] ? apparmor_socket_sendmsg+0x98/0x360 [ 1113.607125][T26420] ? __pfx_inet_sendmsg+0x10/0x10 [ 1113.607139][T26420] sock_sendmsg_nosec+0x10e/0x180 [ 1113.607160][T26420] ____sys_sendmsg+0x54e/0x850 [ 1113.607186][T26420] ? __pfx_____sys_sendmsg+0x10/0x10 [ 1113.607214][T26420] ? import_iovec+0x73/0xa0 [ 1113.607248][T26420] ___sys_sendmsg+0x2a5/0x360 [ 1113.607268][T26420] ? __lock_acquire+0x747/0x2de0 [ 1113.607287][T26420] ? __pfx____sys_sendmsg+0x10/0x10 [ 1113.607338][T26420] ? __fget_files+0x2a/0x420 [ 1113.607358][T26420] ? __fget_files+0x3a2/0x420 [ 1113.607388][T26420] __x64_sys_sendmsg+0x1b1/0x290 [ 1113.607412][T26420] ? __pfx___x64_sys_sendmsg+0x10/0x10 [ 1113.607455][T26420] do_syscall_64+0x166/0x520 [ 1113.607477][T26420] ? trace_irq_disable+0x3b/0x140 [ 1113.607491][T26420] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1113.607505][T26420] ? clear_bhb_loop+0x70/0xc0 [ 1113.607523][T26420] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1113.607536][T26420] RIP: 0033:0x7ffba5d9e159 [ 1113.607553][T26420] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 1113.607566][T26420] RSP: 002b:00007ffba6bab028 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 1113.607585][T26420] RAX: ffffffffffffffda RBX: 00007ffba6026090 RCX: 00007ffba5d9e159 [ 1113.607598][T26420] RDX: 0000000000044004 RSI: 00002000000000c0 RDI: 0000000000000003 [ 1113.607608][T26420] RBP: 00007ffba6bab090 R08: 0000000000000000 R09: 0000000000000000 [ 1113.607617][T26420] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 1113.607626][T26420] R13: 00007ffba6026128 R14: 00007ffba6026090 R15: 00007ffd47d50bf8 [ 1113.607656][T26420] [ 1114.389371][ C0] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1114.409077][T26430] x_tables: ip_tables: DNAT target: used from hooks POSTROUTING, but only usable from PREROUTING/OUTPUT [ 1115.006698][T26442] openvswitch: netlink: Message has 8 unknown bytes. [ 1115.013585][T26443] openvswitch: netlink: Missing key (keys=40, expected=10000000) [ 1115.117459][T26437] batman_adv: batadv0: Interface deactivated: macsec0 [ 1115.123302][T25236] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1115.138756][T26446] x_tables: ip_tables: IDLETIMER.1 target: invalid size 48 (kernel) != (user) 56 [ 1115.156028][T26437] batman_adv: batadv0: Removing interface: macsec0 [ 1115.298153][T26440] tunl0: left promiscuous mode [ 1115.306390][T26440] ip_vti0: left promiscuous mode [ 1115.370478][T26440] hsr0: left promiscuous mode [ 1115.415403][T26440] vti0: left promiscuous mode [ 1115.444523][T26440] bond2: left promiscuous mode [ 1115.471420][T26440] bond3: left promiscuous mode [ 1115.471443][T26440] bridge13: left promiscuous mode [ 1116.397232][ C0] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1116.496732][T26470] netlink: 'syz.5.4073': attribute type 10 has an invalid length. [ 1116.575152][T26472] __nla_validate_parse: 3 callbacks suppressed [ 1116.575170][T26472] netlink: 28 bytes leftover after parsing attributes in process `syz.4.4071'. [ 1116.766175][T26459] batman_adv: batadv0: Adding interface: macvtap2 [ 1116.766192][T26459] batman_adv: batadv0: The MTU of interface macvtap2 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 1116.766219][T26459] batman_adv: batadv0: Not using interface macvtap2 (retrying later): interface not active [ 1117.030063][T25235] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1117.030398][ C1] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1117.253210][T26467] batman_adv: batadv0: Removing interface: macvtap2 [ 1117.411143][T26470] team0: Port device dummy0 added [ 1117.549903][T26492] veth0_to_team: entered promiscuous mode [ 1117.679383][T26492] veth0_to_team: left promiscuous mode [ 1117.769841][T26499] netlink: 20 bytes leftover after parsing attributes in process `syz.4.4079'. [ 1117.792498][T26499] netlink: 20 bytes leftover after parsing attributes in process `syz.4.4079'. [ 1118.389496][ C0] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1118.628606][T26535] ip6_tables: ip6tables: counters copy to user failed while replacing table [ 1118.638364][T26530] Bluetooth: hci0: invalid length 0, exp 2 for type 3 [ 1118.773418][T26526] 8021q: adding VLAN 0 to HW filter on device batadv1 [ 1118.890205][T26526] batman_adv: batadv0: Interface activated: macvtap1 [ 1119.372966][T25236] ip6_tunnel: ip6tnl2 xmit: Local address not yet configured! [ 1120.235103][T25236] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1120.389451][ C0] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1120.670067][T26581] gtp0: entered promiscuous mode [ 1120.670088][T26581] gtp0: entered allmulticast mode [ 1121.169318][T26613] Bluetooth: hci0: unsupported parameter 5135 [ 1121.169343][T26613] Bluetooth: hci0: invalid length 2, exp 1 for type 31 [ 1121.998541][T26621] x_tables: ip_tables: osf match: only valid for protocol 6 [ 1122.150659][T25234] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1122.169556][T26634] netlink: 'syz.4.4110': attribute type 1 has an invalid length. [ 1122.207288][T26630] x_tables: ip_tables: icmp match: only valid for protocol 1 [ 1122.389577][ C0] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1122.626745][T26646] netlink: 4912 bytes leftover after parsing attributes in process `syz.3.4113'. [ 1122.676170][T26647] netlink: 8 bytes leftover after parsing attributes in process `syz.6.4112'. [ 1122.858005][T25234] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1122.858306][ C1] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1123.013435][T26651] netlink: 8 bytes leftover after parsing attributes in process `syz.3.4114'. [ 1123.013469][T26651] netlink: 84 bytes leftover after parsing attributes in process `syz.3.4114'. [ 1123.312704][T26674] netlink: 'syz.5.4116': attribute type 1 has an invalid length. [ 1123.330204][T26675] netlink: 48 bytes leftover after parsing attributes in process `syz.5.4116'. [ 1123.509625][ C1] ip6_tunnel: ip6tnl2 xmit: Local address not yet configured! [ 1123.637997][T26683] netlink: 'syz.4.4118': attribute type 2 has an invalid length. [ 1123.693802][T26683] debugfs: '.PÑè'óG!DEÒSˆ' already exists in 'ieee80211' [ 1123.897329][T26685] netlink: 4 bytes leftover after parsing attributes in process `syz.6.4119'. [ 1123.897352][T26685] openvswitch: netlink: Flow actions attr not present in new flow. [ 1124.389356][ C0] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1124.460912][T26717] xt_hashlimit: size too large, truncated to 1048576 [ 1124.599812][T26722] netlink: 44 bytes leftover after parsing attributes in process `syz.6.4124'. [ 1124.697654][T26725] netlink: 56 bytes leftover after parsing attributes in process `syz.6.4124'. [ 1124.905480][T26735] netlink: 28 bytes leftover after parsing attributes in process `syz.3.4125'. [ 1125.215583][T26738] syzkaller1: entered promiscuous mode [ 1125.215606][T26738] syzkaller1: entered allmulticast mode [ 1125.540562][T26754] xt_l2tp: missing protocol rule (udp|l2tpip) [ 1125.991489][T25235] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1126.244738][T26783] netlink: 8 bytes leftover after parsing attributes in process `syz.7.4132'. [ 1126.389391][ C0] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1126.816243][T26788] 8021q: adding VLAN 0 to HW filter on device bond3 [ 1126.931500][T26798] vlan0: entered promiscuous mode [ 1126.931687][T26798] vlan0: entered allmulticast mode [ 1126.931700][T26798] veth0_vlan: entered allmulticast mode [ 1127.279768][T25234] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1127.356267][T26810] netlink: 'syz.7.4141': attribute type 1 has an invalid length. [ 1127.680908][T26821] __nla_validate_parse: 2 callbacks suppressed [ 1127.680928][T26821] netlink: 28 bytes leftover after parsing attributes in process `syz.4.4144'. [ 1127.720744][T26826] netlink: 36 bytes leftover after parsing attributes in process `syz.3.4147'. [ 1127.726905][T26820] netlink: 'syz.7.4145': attribute type 1 has an invalid length. [ 1127.791566][T26826] netlink: 68 bytes leftover after parsing attributes in process `syz.3.4147'. [ 1127.911591][T25239] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1127.911868][ C0] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1127.998677][T26835] netlink: 'syz.7.4149': attribute type 1 has an invalid length. [ 1128.091927][T26841] netlink: 24 bytes leftover after parsing attributes in process `syz.7.4149'. [ 1128.148469][T26835] 8021q: adding VLAN 0 to HW filter on device bond4 [ 1128.214170][T26843] can: request_module (can-proto-0) failed. [ 1128.294571][T26849] openvswitch: netlink: Unknown VXLAN extension attribute 0 [ 1128.305799][T26849] netlink: 'syz.3.4150': attribute type 1 has an invalid length. [ 1128.343716][T26852] netlink: 4 bytes leftover after parsing attributes in process `syz.4.4151'. [ 1128.384294][T26847] IPVS: Scheduler module ip_vs_sip not found [ 1128.389752][ C0] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1128.547662][T26849] 8021q: adding VLAN 0 to HW filter on device bond4 [ 1128.587526][T26847] netlink: 68 bytes leftover after parsing attributes in process `syz.3.4150'. [ 1128.642518][T26817] netlink: 4 bytes leftover after parsing attributes in process `syz.5.4143'. [ 1128.794418][T26871] netlink: 'syz.6.4153': attribute type 1 has an invalid length. [ 1128.893304][T26817] bond0: (slave bond_slave_1): Releasing backup interface [ 1128.980818][T26878] netlink: 'syz.3.4155': attribute type 1 has an invalid length. [ 1129.073091][T26881] netlink: 88 bytes leftover after parsing attributes in process `syz.7.4156'. [ 1129.073111][T26881] netlink: 12 bytes leftover after parsing attributes in process `syz.7.4156'. [ 1129.074281][T26871] 8021q: adding VLAN 0 to HW filter on device bond4 [ 1129.108460][T26874] macvlan3: entered promiscuous mode [ 1129.108482][T26874] macvlan3: entered allmulticast mode [ 1129.115250][T26874] bond4: entered promiscuous mode [ 1129.115866][T26874] 8021q: adding VLAN 0 to HW filter on device macvlan3 [ 1129.165033][T26874] bond4: left promiscuous mode [ 1129.491192][T26879] veth5: entered allmulticast mode [ 1129.515821][T26879] bond5: (slave veth5): Enslaving as an active interface with a down link [ 1129.627628][T26884] bond5: (slave veth0_to_bond): making interface the new active one [ 1129.643170][T26884] bond5: (slave veth0_to_bond): Enslaving as an active interface with an up link [ 1129.726129][T26889] macvlan0: entered promiscuous mode [ 1129.726152][T26889] macvlan0: entered allmulticast mode [ 1129.726783][T26889] bond5: entered promiscuous mode [ 1129.726801][T26889] veth0_to_bond: entered promiscuous mode [ 1129.753896][T26889] 8021q: adding VLAN 0 to HW filter on device macvlan0 [ 1129.754692][T26889] bond5: (slave macvlan0): the slave hw address is in use by the bond; couldn't find a slave with a free hw address to give it (this should not have happened) [ 1129.754780][T26889] bond5: left promiscuous mode [ 1129.754794][T26889] veth0_to_bond: left promiscuous mode [ 1129.817003][T26881] tipc: Enabling of bearer rejected, failed to enable media [ 1129.830219][T26899] netlink: 'syz.6.4159': attribute type 10 has an invalid length. [ 1129.925930][T26902] netlink: 8 bytes leftover after parsing attributes in process `syz.6.4159'. [ 1130.389445][ C0] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1130.627604][T26943] xt_hashlimit: size too large, truncated to 1048576 [ 1130.808440][T26951] xt_hashlimit: size too large, truncated to 1048576 [ 1131.030517][T25228] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1131.749615][ C1] ip6_tunnel: ip6tnl2 xmit: Local address not yet configured! [ 1132.111549][T27005] netlink: 'syz.6.4178': attribute type 2 has an invalid length. [ 1132.111571][T27005] netlink: 'syz.6.4178': attribute type 8 has an invalid length. [ 1132.169999][T27008] xt_TCPMSS: Only works on TCP SYN packets [ 1132.389388][ C0] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1132.697658][T27008] bond6: option lacp_active: invalid value (5) [ 1132.713831][T27008] bond6 (unregistering): Released all slaves [ 1133.031670][T25234] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1133.319954][T27038] __nla_validate_parse: 22 callbacks suppressed [ 1133.319975][T27038] netlink: 12 bytes leftover after parsing attributes in process `syz.6.4188'. [ 1133.475172][T27046] netlink: 12 bytes leftover after parsing attributes in process `syz.5.4190'. [ 1133.515475][T27049] netlink: 52 bytes leftover after parsing attributes in process `syz.7.4192'. [ 1133.515499][T27049] netlink: 'syz.7.4192': attribute type 1 has an invalid length. [ 1133.554251][T27049] netlink: 'syz.7.4192': attribute type 4 has an invalid length. [ 1133.604826][T27055] netlink: 'syz.7.4192': attribute type 4 has an invalid length. [ 1133.670576][T25235] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1133.670905][ C1] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1134.228511][T27072] bond5: entered promiscuous mode [ 1134.228549][T27072] bond5: entered allmulticast mode [ 1134.242836][T27072] 8021q: adding VLAN 0 to HW filter on device bond5 [ 1134.267420][T27077] tipc: Started in network mode [ 1134.267451][T27077] tipc: Node identity 76a8717894ea, cluster identity 4711 [ 1134.267598][T27077] tipc: Enabled bearer , priority 0 [ 1134.389322][ C0] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1134.495806][T27082] xt_hashlimit: size too large, truncated to 1048576 [ 1135.112387][T27102] ip6_tables: ip6tables: counters copy to user failed while replacing table [ 1135.381694][T26890] tipc: Node number set to 3796005240 [ 1135.455295][T27113] netlink: 12 bytes leftover after parsing attributes in process `syz.3.4209'. [ 1135.471332][T25238] IPVS: starting estimator thread 0... [ 1135.569532][T27115] IPVS: using max 34 ests per chain, 81600 per kthread [ 1135.689148][T27119] syzkaller0: entered promiscuous mode [ 1135.689170][T27119] syzkaller0: entered allmulticast mode [ 1136.060433][T27139] xt_hashlimit: size too large, truncated to 1048576 [ 1136.158704][T27142] xt_hashlimit: size too large, truncated to 1048576 [ 1136.232468][T25238] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1136.299692][T27147] ip6_tables: ip6tables: counters copy to user failed while replacing table [ 1136.299713][T27149] ip6_tables: ip6tables: counters copy to user failed while replacing table [ 1136.389533][ C0] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1136.427473][T27147] netlink: 'syz.7.4217': attribute type 2 has an invalid length. [ 1136.448653][T27150] netlink: 92 bytes leftover after parsing attributes in process `syz.3.4218'. [ 1136.714984][T27150] netlink: 'syz.3.4218': attribute type 5 has an invalid length. [ 1136.836150][T27161] netlink: 'syz.3.4220': attribute type 8 has an invalid length. [ 1137.238365][T27177] bridge_slave_0: left allmulticast mode [ 1137.238391][T27177] bridge_slave_0: left promiscuous mode [ 1137.256437][T27177] bridge0: port 1(bridge_slave_0) entered disabled state [ 1138.265028][T27174] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 1138.310374][T27174] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 1138.389377][ C0] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1138.800620][T25239] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1138.965780][T27174] batman_adv: batadv0: Interface deactivated: ip6gretap1 [ 1139.440161][T25238] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1139.440503][ C0] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1139.693617][T27155] nci: __nci_request: wait_for_completion_interruptible_timeout failed -512 [ 1139.880588][T27174] batman_adv: batadv0: Interface deactivated: gretap1 [ 1140.001460][T27191] netlink: 16 bytes leftover after parsing attributes in process `syz.3.4227'. [ 1140.179637][T25233] netdevsim netdevsim6 netdevsim0: unset [0, 0] type 1 family 0 port 8472 - 0 [ 1140.179670][T25233] netdevsim netdevsim6 netdevsim0: unset [1, 0] type 2 family 0 port 6081 - 0 [ 1140.179692][T25233] netdevsim netdevsim6 netdevsim0: unset [1, 1] type 2 family 0 port 20004 - 0 [ 1140.179727][T25233] netdevsim netdevsim6 netdevsim2: unset [0, 0] type 1 family 0 port 8472 - 0 [ 1140.179749][T25233] netdevsim netdevsim6 netdevsim2: unset [1, 0] type 2 family 0 port 6081 - 0 [ 1140.179769][T25233] netdevsim netdevsim6 netdevsim2: unset [1, 1] type 2 family 0 port 20004 - 0 [ 1140.179800][T25233] netdevsim netdevsim6 netdevsim1: unset [0, 0] type 1 family 0 port 8472 - 0 [ 1140.179821][T25233] netdevsim netdevsim6 netdevsim1: unset [1, 0] type 2 family 0 port 6081 - 0 [ 1140.179840][T25233] netdevsim netdevsim6 netdevsim1: unset [1, 1] type 2 family 0 port 20004 - 0 [ 1140.179868][T25233] netdevsim netdevsim6 netdevsim3: unset [0, 0] type 1 family 0 port 8472 - 0 [ 1140.179888][T25233] netdevsim netdevsim6 netdevsim3: unset [1, 0] type 2 family 0 port 6081 - 0 [ 1140.179908][T25233] netdevsim netdevsim6 netdevsim3: unset [1, 1] type 2 family 0 port 20004 - 0 [ 1140.389365][ C0] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1140.660908][T27214] netlink: 8 bytes leftover after parsing attributes in process `syz.7.4233'. [ 1140.660941][T27214] netlink: 12 bytes leftover after parsing attributes in process `syz.7.4233'. [ 1140.689687][T25236] netdevsim netdevsim7 netdevsim0: set [0, 0] type 1 family 0 port 8472 - 0 [ 1140.689887][T25233] netdevsim netdevsim7 netdevsim1: set [0, 0] type 1 family 0 port 8472 - 0 [ 1140.689938][T25233] netdevsim netdevsim7 netdevsim2: set [0, 0] type 1 family 0 port 8472 - 0 [ 1140.689969][T25233] netdevsim netdevsim7 netdevsim3: set [0, 0] type 1 family 0 port 8472 - 0 [ 1140.694270][T27214] netlink: 8 bytes leftover after parsing attributes in process `syz.7.4233'. [ 1140.694302][T27214] netlink: 12 bytes leftover after parsing attributes in process `syz.7.4233'. [ 1140.765734][T27216] xt_hashlimit: size too large, truncated to 1048576 [ 1140.972898][T27220] netlink: 16 bytes leftover after parsing attributes in process `syz.7.4235'. [ 1141.047384][T27220] netlink: 'syz.7.4235': attribute type 1 has an invalid length. [ 1141.047410][T27220] netlink: 200 bytes leftover after parsing attributes in process `syz.7.4235'. [ 1141.186167][T27220] netdevsim netdevsim7 netdevsim0: IPsec offload requires 128 bit authentication [ 1141.743401][T27232] netlink: 32 bytes leftover after parsing attributes in process `syz.6.4238'. [ 1141.743425][T27232] netlink: 8 bytes leftover after parsing attributes in process `syz.6.4238'. [ 1141.743437][T27232] netlink: 32 bytes leftover after parsing attributes in process `syz.6.4238'. [ 1141.990628][T25236] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1141.992550][T27253] syzkaller0: Caught tx_queue_len zero misconfig [ 1142.389723][ C0] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1143.008156][T27289] A link change request failed with some changes committed already. Interface sit0 may have been left with an inconsistent configuration, please check. [ 1143.525974][T27298] netlink: 'syz.3.4256': attribute type 46 has an invalid length. [ 1144.389495][ C0] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1144.536500][T27324] openvswitch: netlink: Missing key (keys=40, expected=2000) [ 1144.549581][T25236] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1144.872275][T27344] netlink: 'syz.7.4265': attribute type 4 has an invalid length. [ 1144.904338][T27344] netlink: 'syz.7.4265': attribute type 4 has an invalid length. [ 1144.921864][T27343] IPVS: Scheduler module ip_vs_sip not found [ 1145.057855][T27300] nci: __nci_request: wait_for_completion_interruptible_timeout failed -512 [ 1145.071047][T27347] bond6: option ad_user_port_key: invalid value (65535) [ 1145.071069][T27347] bond6: option ad_user_port_key: allowed values 0 - 1023 [ 1145.092279][T27347] bond6 (unregistering): Released all slaves [ 1145.189989][T25239] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1145.190273][ C0] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1145.633360][T27371] __nla_validate_parse: 12 callbacks suppressed [ 1145.633379][T27371] netlink: 16 bytes leftover after parsing attributes in process `syz.4.4271'. [ 1145.646213][T27367] macsec2: entered promiscuous mode [ 1145.653858][T27371] veth1_to_team: entered promiscuous mode [ 1145.670240][T27371] veth1_to_team: left promiscuous mode [ 1145.801859][T27371] netlink: 16 bytes leftover after parsing attributes in process `syz.4.4271'. [ 1145.826978][T27371] veth1_to_team: entered promiscuous mode [ 1145.835535][T27371] veth1_to_team: left promiscuous mode [ 1145.893165][T27371] netlink: 16 bytes leftover after parsing attributes in process `syz.4.4271'. [ 1146.033665][T27371] veth1_to_team: entered promiscuous mode [ 1146.045372][T27371] veth1_to_team: left promiscuous mode [ 1146.132867][T27371] netlink: 16 bytes leftover after parsing attributes in process `syz.4.4271'. [ 1146.168461][T27371] veth1_to_team: entered promiscuous mode [ 1146.175873][T27371] veth1_to_team: left promiscuous mode [ 1146.266882][T27380] syzkaller1: entered promiscuous mode [ 1146.266905][T27380] syzkaller1: entered allmulticast mode [ 1146.389506][ C0] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1147.109354][ C1] ip6_tunnel: ip6tnl2 xmit: Local address not yet configured! [ 1147.147090][T27408] netlink: 8 bytes leftover after parsing attributes in process `syz.6.4280'. [ 1147.176032][T27408] netlink: 'syz.6.4280': attribute type 2 has an invalid length. [ 1147.176059][T27408] netlink: 8 bytes leftover after parsing attributes in process `syz.6.4280'. [ 1147.390900][T27408] team0: Device wg1 is of different type [ 1147.425700][T27408] A link change request failed with some changes committed already. Interface wg1 may have been left with an inconsistent configuration, please check. [ 1147.513225][T27423] A link change request failed with some changes committed already. Interface netdevsim0 may have been left with an inconsistent configuration, please check. [ 1147.581994][T27422] netlink: 'syz.7.4285': attribute type 1 has an invalid length. [ 1147.753356][T27424] A link change request failed with some changes committed already. Interface veth1_to_bod may have been left with an inconsistent configuration, please check. [ 1147.761026][T25235] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1147.861117][T27439] netlink: 48 bytes leftover after parsing attributes in process `syz.5.4286'. [ 1147.974083][T27422] 8021q: adding VLAN 0 to HW filter on device bond6 [ 1148.105270][T27444] netlink: 24 bytes leftover after parsing attributes in process `syz.4.4288'. [ 1148.288456][T27436] netlink: 'syz.6.4287': attribute type 4 has an invalid length. [ 1148.301121][T27432] X25: received unknown 00 with LCI 000 [ 1148.328811][T27448] IPVS: lblc: SCTP 172.20.20.187:0 - no destination available [ 1148.389441][ C0] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1148.471399][T27448] netlink: 'syz.7.4291': attribute type 1 has an invalid length. [ 1148.695077][T27448] 8021q: adding VLAN 0 to HW filter on device bond7 [ 1149.675853][T25236] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1149.805223][T27489] netlink: 'syz.7.4296': attribute type 23 has an invalid length. [ 1149.945018][T27483] xt_CT: No such helper "netbios-ns" [ 1150.225811][T27506] netlink: 16 bytes leftover after parsing attributes in process `syz.3.4300'. [ 1150.313774][T25236] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1150.314119][ C1] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1150.389344][ C0] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1150.581365][T27519] netlink: 36 bytes leftover after parsing attributes in process `syz.5.4303'. [ 1150.763445][T27528] netlink: 24 bytes leftover after parsing attributes in process `syz.4.4305'. [ 1150.781502][T27527] netlink: 'syz.3.4302': attribute type 2 has an invalid length. [ 1151.060988][T27542] netlink: 'syz.4.4307': attribute type 1 has an invalid length. [ 1151.063599][T27543] netlink: 12 bytes leftover after parsing attributes in process `syz.4.4307'. [ 1151.063630][T27543] netlink: 12 bytes leftover after parsing attributes in process `syz.4.4307'. [ 1151.273983][T27542] bond1: entered promiscuous mode [ 1151.276822][T27542] 8021q: adding VLAN 0 to HW filter on device bond1 [ 1151.399201][T27546] bond1: (slave bridge8): making interface the new active one [ 1151.399224][T27546] bridge8: entered promiscuous mode [ 1151.406665][T27555] netlink: 4 bytes leftover after parsing attributes in process `syz.7.4308'. [ 1151.407700][T27546] bond1: (slave bridge8): Enslaving as an active interface with an up link [ 1151.608220][T27568] netlink: 'syz.5.4309': attribute type 4 has an invalid length. [ 1151.608241][T27568] netlink: 17 bytes leftover after parsing attributes in process `syz.5.4309'. [ 1152.197515][T27600] bond6: option active_slave: mode dependency failed, not supported in mode balance-rr(0) [ 1152.225430][T27600] bond6 (unregistering): Released all slaves [ 1152.397694][T27611] netlink: 12 bytes leftover after parsing attributes in process `syz.4.4312'. [ 1153.002291][T27632] netlink: 964 bytes leftover after parsing attributes in process `syz.7.4315'. [ 1153.002316][T27632] net_ratelimit: 1 callbacks suppressed [ 1153.004099][T27632] A link change request failed with some changes committed already. Interface ip6_vti0 may have been left with an inconsistent configuration, please check. [ 1153.207165][T27637] netlink: 4 bytes leftover after parsing attributes in process `syz.4.4316'. [ 1153.332135][T27637] netlink: 20 bytes leftover after parsing attributes in process `syz.4.4316'. [ 1153.364973][T27637] xt_addrtype: both incoming and outgoing interface limitation cannot be selected [ 1153.455190][T27637] netlink: 8 bytes leftover after parsing attributes in process `syz.4.4316'. [ 1153.510938][T27577] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1153.716845][T27637] bond2: option tlb_dynamic_lb: mode dependency failed, not supported in mode active-backup(1) [ 1153.733522][T27637] bond2 (unregistering): Released all slaves [ 1154.324359][T27670] macvlan2: entered promiscuous mode [ 1154.331987][T27670] bond0: entered promiscuous mode [ 1154.332010][T27670] bond_slave_0: entered promiscuous mode [ 1154.332222][T27670] bond_slave_1: entered promiscuous mode [ 1154.336299][T27670] 8021q: adding VLAN 0 to HW filter on device macvlan2 [ 1154.378572][T27677] Bluetooth: hci0: invalid length 0, exp 2 for type 20 [ 1154.389437][ C0] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1154.407953][T27670] bond8: (slave macvlan2): making interface the new active one [ 1154.427693][T27670] bond8: (slave macvlan2): Enslaving as an active interface with an up link [ 1155.368568][T27700] erspan1: entered promiscuous mode [ 1155.431196][T22883] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1156.074262][T25229] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1156.074585][ C1] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1156.389312][ C0] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1156.735657][T27749] ipt_REJECT: TCP_RESET invalid for non-tcp [ 1157.138846][T27759] netlink: 'syz.6.4344': attribute type 1 has an invalid length. [ 1157.322186][T27763] __nla_validate_parse: 3 callbacks suppressed [ 1157.322207][T27763] netlink: 16 bytes leftover after parsing attributes in process `syz.5.4345'. [ 1157.322223][T27763] netlink: 4 bytes leftover after parsing attributes in process `syz.5.4345'. [ 1157.437944][T27771] No such timeout policy "syz1" [ 1158.389422][ C0] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1158.630919][T18392] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1158.746508][T27777] openvswitch: netlink: IP tunnel attribute has 5413 unknown bytes. [ 1158.765089][T27821] netlink: 132 bytes leftover after parsing attributes in process `syz.3.4354'. [ 1158.768411][T27820] netlink: 132 bytes leftover after parsing attributes in process `syz.3.4354'. [ 1158.814434][T27823] netlink: 16 bytes leftover after parsing attributes in process `syz.7.4355'. [ 1158.822597][T27809] netlink: 12 bytes leftover after parsing attributes in process `syz.4.4352'. [ 1158.879014][T27824] netlink: 36 bytes leftover after parsing attributes in process `syz.4.4352'. [ 1159.310858][T27830] xt_hashlimit: size too large, truncated to 1048576 [ 1159.446407][T27835] syzkaller0: entered promiscuous mode [ 1159.446429][T27835] syzkaller0: entered allmulticast mode [ 1159.670757][T27844] netlink: 8 bytes leftover after parsing attributes in process `syz.3.4360'. [ 1159.670781][T27844] netlink: 20 bytes leftover after parsing attributes in process `syz.3.4360'. [ 1159.671642][T27844] netlink: 8 bytes leftover after parsing attributes in process `syz.3.4360'. [ 1159.693188][T27839] IPVS: persistence engine module ip_vs_pe_À not found [ 1160.340192][T27857] vlan3: entered allmulticast mode [ 1160.340215][T27857] erspan0: entered allmulticast mode [ 1160.389509][ C0] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1161.191100][T25239] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1161.636956][T27908] xt_hashlimit: size too large, truncated to 1048576 [ 1161.829707][T25235] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1161.830033][ C0] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1161.925683][T27915] sch_tbf: burst 4095 is lower than device syzkaller0 mtu (65589) ! [ 1162.389587][ C0] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1162.755873][T27949] ovs-dp0: entered promiscuous mode [ 1163.268743][T27962] smbdirect: ib_dev[s`z1]: added: RNIC max_fast_reg_page_list_len=256 device_cap_flags=0x200000 kernel_cap_flags=0x10 page_size_cap=0x1000 [ 1163.268780][T27962] smbdirect: ib_dev[s`z1]: num_ports=1 max_qp_rd_atom=128 max_qp_init_rd_atom=128 max_sgl_rd=0 max_sge_rd=1 max_cqe=3276800 max_qp_wr=32768 max_send_sge=6 max_recv_sge=6 [ 1163.268817][T27962] smbdirect: ib_dev[s`z1]PORT[1]: iwarp=1 ib=0 roce=0 v1=0 v2=0 core_cap_flags=0x400008 [ 1163.301252][T27962] iwpm_register_pid: Unable to send a nlmsg (client = 2) [ 1163.454244][T27962] infiniband s`z1: RDMA CMA: cma_listen_on_dev, error -98 [ 1163.526491][T27964] netlink: 'syz.3.4385': attribute type 4 has an invalid length. [ 1164.170695][T27984] smbdirect: ib_dev[s`z1] removed [ 1164.389616][ C0] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1164.391311][T22883] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1165.182128][T28021] netlink: set zone limit has 4 unknown bytes [ 1165.476371][T28033] __nla_validate_parse: 6 callbacks suppressed [ 1165.476392][T28033] netlink: 24 bytes leftover after parsing attributes in process `syz.6.4401'. [ 1165.542313][T28036] netlink: 4 bytes leftover after parsing attributes in process `syz.6.4401'. [ 1165.721445][T28040] openvswitch: netlink: Message has 8 unknown bytes. [ 1165.906642][T28036] 8021q: adding VLAN 0 to HW filter on device bond0 [ 1165.920545][T28036] 8021q: adding VLAN 0 to HW filter on device team0 [ 1165.976553][T28036] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 1166.143182][T28036] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 1166.152613][T28036] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 1166.188326][T28036] hsr0: Slave A (hsr_slave_0) is not up; please bring it up to get a fully working HSR network [ 1166.188351][T28036] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 1166.217655][T28036] veth1_vlan: left promiscuous mode [ 1166.256941][T28036] vlan0: left promiscuous mode [ 1166.297492][T28036] veth1_vlan: entered promiscuous mode [ 1166.389364][ C0] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1166.418697][T28036] 8021q: adding VLAN 0 to HW filter on device netdevsim0 [ 1166.436867][T28036] 8021q: adding VLAN 0 to HW filter on device netdevsim1 [ 1166.445722][T28036] 8021q: adding VLAN 0 to HW filter on device netdevsim2 [ 1166.452117][T28036] 8021q: adding VLAN 0 to HW filter on device netdevsim3 [ 1166.502343][T28036] batman_adv: batadv0: Interface activated: ip6gretap1 [ 1166.505085][T28036] 8021q: adding VLAN 0 to HW filter on device bond1 [ 1166.506583][T28060] netlink: 12 bytes leftover after parsing attributes in process `syz.4.4406'. [ 1166.543220][T22706] openvswitch: cpu_id mismatch with handler threads [ 1166.649732][T22706] openvswitch: cpu_id mismatch with handler threads [ 1166.795435][T28036] 8021q: adding VLAN 0 to HW filter on device bond2 [ 1166.912604][T28036] batman_adv: batadv0: Interface activated: gretap1 [ 1166.935925][T28036] 8021q: adding VLAN 0 to HW filter on device bond3 [ 1166.950824][T27580] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1166.978866][T28036] 8021q: adding VLAN 0 to HW filter on device bond4 [ 1166.994859][T25239] netdevsim netdevsim6 netdevsim0: set [0, 0] type 1 family 0 port 8472 - 0 [ 1166.994892][T25239] netdevsim netdevsim6 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 1166.994915][T25239] netdevsim netdevsim6 netdevsim0: set [1, 1] type 2 family 0 port 20004 - 0 [ 1167.211052][T28050] netlink: 'syz.3.4403': attribute type 1 has an invalid length. [ 1167.211283][T28053] netlink: 'syz.3.4403': attribute type 1 has an invalid length. [ 1167.266045][T28056] netlink: 8 bytes leftover after parsing attributes in process `syz.3.4403'. [ 1167.276916][T28061] team0: entered allmulticast mode [ 1167.276940][T28061] team_slave_0: entered allmulticast mode [ 1167.276957][T28061] team_slave_1: entered allmulticast mode [ 1167.276973][T28061] dummy0: entered allmulticast mode [ 1167.277227][T28061] A link change request failed with some changes committed already. Interface team0 may have been left with an inconsistent configuration, please check. [ 1167.284150][T27577] netdevsim netdevsim6 netdevsim1: set [0, 0] type 1 family 0 port 8472 - 0 [ 1167.284180][T27577] netdevsim netdevsim6 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 1167.284203][T27577] netdevsim netdevsim6 netdevsim1: set [1, 1] type 2 family 0 port 20004 - 0 [ 1167.284256][T27577] netdevsim netdevsim6 netdevsim2: set [0, 0] type 1 family 0 port 8472 - 0 [ 1167.284279][T27577] netdevsim netdevsim6 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 1167.284301][T27577] netdevsim netdevsim6 netdevsim2: set [1, 1] type 2 family 0 port 20004 - 0 [ 1167.322085][T27579] netdevsim netdevsim6 netdevsim3: set [0, 0] type 1 family 0 port 8472 - 0 [ 1167.322117][T27579] netdevsim netdevsim6 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 1167.322140][T27579] netdevsim netdevsim6 netdevsim3: set [1, 1] type 2 family 0 port 20004 - 0 [ 1167.561745][T28080] A link change request failed with some changes committed already. Interface sit0 may have been left with an inconsistent configuration, please check. [ 1167.578639][T25239] openvswitch: cpu_id mismatch with handler threads [ 1167.583644][T25239] openvswitch: cpu_id mismatch with handler threads [ 1167.592113][T27577] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1167.592391][ C1] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1167.632933][T22706] openvswitch: cpu_id mismatch with handler threads [ 1167.786333][T28088] netlink: 8 bytes leftover after parsing attributes in process `syz.5.4411'. [ 1167.786363][T28088] netlink: 24 bytes leftover after parsing attributes in process `syz.5.4411'. [ 1167.816118][T28088] netlink: 8 bytes leftover after parsing attributes in process `syz.5.4411'. [ 1167.816144][T28088] netlink: 24 bytes leftover after parsing attributes in process `syz.5.4411'. [ 1167.890354][T28088] netlink: 8 bytes leftover after parsing attributes in process `syz.5.4411'. [ 1167.890382][T28088] netlink: 24 bytes leftover after parsing attributes in process `syz.5.4411'. [ 1168.202211][T28102] syzkaller0: entered promiscuous mode [ 1168.202238][T28102] syzkaller0: entered allmulticast mode [ 1168.274834][T28110] 8021q: adding VLAN 0 to HW filter on device macsec1 [ 1168.278110][T19210] netdevsim netdevsim4 netdevsim0: entered promiscuous mode [ 1168.705008][T28121] xt_hashlimit: size too large, truncated to 1048576 [ 1168.889791][T28132] netlink: 'syz.4.4421': attribute type 1 has an invalid length. [ 1169.005147][T28137] netlink: 'syz.4.4421': attribute type 1 has an invalid length. [ 1169.008916][T28135] netlink: 'syz.4.4421': attribute type 1 has an invalid length. [ 1169.775093][T28159] nbd: must specify a size in bytes for the device [ 1170.154027][T27579] net_ratelimit: 1 callbacks suppressed [ 1170.154054][T27579] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1170.389523][ C0] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1170.486567][T28173] netlink: 'syz.4.4430': attribute type 62 has an invalid length. [ 1170.515864][T28185] syzkaller0: left promiscuous mode [ 1170.515886][T28185] syzkaller0: left allmulticast mode [ 1170.522939][T28185] openvswitch: netlink: Multiple metadata blocks provided [ 1170.926654][T28193] xt_hashlimit: size too large, truncated to 1048576 [ 1171.039663][T28199] __nla_validate_parse: 6 callbacks suppressed [ 1171.039684][T28199] netlink: 5360 bytes leftover after parsing attributes in process `syz.3.4438'. [ 1171.044027][T28199] netlink: 8 bytes leftover after parsing attributes in process `syz.3.4438'. [ 1171.078877][T28195] netlink: 14207 bytes leftover after parsing attributes in process `syz.4.4436'. [ 1171.183030][T28201] netlink: 100 bytes leftover after parsing attributes in process `syz.7.4437'. [ 1171.529519][T28208] netlink: 24 bytes leftover after parsing attributes in process `syz.7.4440'. [ 1171.529546][T28208] netlink: 48 bytes leftover after parsing attributes in process `syz.7.4440'. [ 1171.750196][ C1] openvswitch: cpu_id mismatch with handler threads [ 1171.785240][T28217] xt_check_table_hooks: 13 callbacks suppressed [ 1171.785263][T28217] x_tables: duplicate entry at hook 1 [ 1171.896591][T28214] netlink: 4 bytes leftover after parsing attributes in process `syz.6.4441'. [ 1171.913986][T28217] netlink: 12 bytes leftover after parsing attributes in process `syz.7.4444'. [ 1172.025279][T28217] netlink: 'syz.7.4444': attribute type 1 has an invalid length. [ 1172.214199][T28226] netlink: 3560 bytes leftover after parsing attributes in process `syz.4.4446'. [ 1172.239402][T28226] IPVS: set_ctl: invalid protocol: 137 100.1.1.1:20004 [ 1172.242415][T28226] netlink: 'syz.4.4446': attribute type 1 has an invalid length. [ 1172.242436][T28226] netlink: 224 bytes leftover after parsing attributes in process `syz.4.4446'. [ 1172.389465][ C0] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1172.638906][T25239] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1172.639275][ C0] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1172.715529][T22883] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1173.500761][T28237] bridge0: port 2(bridge_slave_1) entered disabled state [ 1173.501448][T28237] bridge0: port 1(bridge_slave_0) entered disabled state [ 1173.909604][T17534] Bluetooth: hci0: Opcode 0x0c03 failed: -110 [ 1173.946754][T28237] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 1173.988343][T28237] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 1174.389443][ C0] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1174.704990][T28237] tipc: Resetting bearer [ 1174.847649][T28237] batman_adv: batadv0: Interface deactivated: macvtap1 [ 1175.116797][T28249] batman_adv: batadv0: Adding interface: macvtap1 [ 1175.116814][T28249] batman_adv: batadv0: The MTU of interface macvtap1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 1175.116840][T28249] batman_adv: batadv0: Not using interface macvtap1 (retrying later): interface not active [ 1175.172441][T27578] netdevsim netdevsim4 netdevsim3: unset [1, 0] type 2 family 0 port 6081 - 0 [ 1175.177064][T25239] netdevsim netdevsim4 netdevsim1: unset [1, 0] type 2 family 0 port 6081 - 0 [ 1175.177111][T25239] netdevsim netdevsim4 netdevsim2: unset [1, 0] type 2 family 0 port 6081 - 0 [ 1175.177151][T25239] netdevsim netdevsim4 netdevsim0: unset [1, 0] type 2 family 0 port 6081 - 0 [ 1175.674133][T28295] ip_tables: iptables: counters copy to user failed while replacing table [ 1175.911666][T27578] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1176.097002][T28311] xt_policy: output policy not valid in PREROUTING and INPUT [ 1176.389360][ C0] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1176.435291][T28317] bond5: option active_slave: mode dependency failed, not supported in mode balance-rr(0) [ 1176.447808][T28317] bond5 (unregistering): Released all slaves [ 1176.852877][T28332] __nla_validate_parse: 200 callbacks suppressed [ 1176.852897][T28332] netlink: 4 bytes leftover after parsing attributes in process `syz.7.4473'. [ 1176.895570][T28333] netlink: 12 bytes leftover after parsing attributes in process `syz.3.4474'. [ 1176.895611][T28333] block nbd3: Unsupported socket: should be TCP or UNIX. [ 1176.917717][T28334] netlink: 12 bytes leftover after parsing attributes in process `syz.3.4474'. [ 1176.917769][T28334] block nbd3: Unsupported socket: should be TCP or UNIX. [ 1177.058268][T28343] openvswitch: netlink: Message has 8 unknown bytes. [ 1177.137112][T28342] xt_CHECKSUM: unsupported CHECKSUM operation 68 [ 1177.650816][T28350] netlink: 88 bytes leftover after parsing attributes in process `syz.5.4477'. [ 1177.918321][T28338] 8021q: adding VLAN 0 to HW filter on device bond2 [ 1177.919018][T28338] bridge1: left promiscuous mode [ 1177.932630][T28338] bond3: left promiscuous mode [ 1177.932653][T28338] veth0_to_bond: left promiscuous mode [ 1177.933864][T28338] 8021q: adding VLAN 0 to HW filter on device bond3 [ 1177.937800][T28338] bond5: left promiscuous mode [ 1177.983557][T28338] 8021q: adding VLAN 0 to HW filter on device bond8 [ 1177.987782][T28338] macvlan2: left promiscuous mode [ 1177.987804][T28338] bond0: left promiscuous mode [ 1177.990489][T28338] erspan1: left promiscuous mode [ 1178.038934][T27578] ip6_tunnel: ip6tnl2 xmit: Local address not yet configured! [ 1178.255514][T28352] netlink: 32 bytes leftover after parsing attributes in process `syz.3.4478'. [ 1178.256807][T28352] netlink: 4 bytes leftover after parsing attributes in process `syz.3.4478'. [ 1178.256846][T28352] netlink: 24 bytes leftover after parsing attributes in process `syz.3.4478'. [ 1178.389335][ C0] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1178.473057][T27578] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1178.473353][ C1] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1178.473835][T27578] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1178.767670][T28388] netlink: 160 bytes leftover after parsing attributes in process `syz.6.4483'. [ 1178.767693][T28388] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check. [ 1179.176521][T28396] macvtap2: entered allmulticast mode [ 1179.176542][T28396] veth0_to_bridge: entered allmulticast mode [ 1179.355107][T28412] netlink: 8 bytes leftover after parsing attributes in process `syz.3.4486'. [ 1179.355127][T28412] netlink: 32 bytes leftover after parsing attributes in process `syz.3.4486'. [ 1179.382015][T28396] veth0_to_bridge: left allmulticast mode [ 1179.628454][T28389] virtio_blk virtio4: 1/0/0 default/read/poll queues [ 1179.637151][T28389] virtio_blk virtio4: [vda] 262144 512-byte logical blocks (134 MB/128 MiB) [ 1179.909788][T28389] vda: unable to read partition table [ 1180.389449][ C0] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1180.391672][ C1] openvswitch: cpu_id mismatch with handler threads [ 1181.671488][T27579] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1181.997553][ C1] ip6_tunnel: ip6tnl2 xmit: Local address not yet configured! [ 1182.389410][ C0] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1182.665359][T28532] input: Bluetooth HID Boot Protocol Device as /devices/virtual/bluetooth/hci3/hci3:200/input8 [ 1183.231684][T28548] __nla_validate_parse: 4 callbacks suppressed [ 1183.231705][T28548] netlink: 596 bytes leftover after parsing attributes in process `syz.3.4515'. [ 1183.231898][T28548] netlink: 596 bytes leftover after parsing attributes in process `syz.3.4515'. [ 1183.232087][T28548] netlink: 596 bytes leftover after parsing attributes in process `syz.3.4515'. [ 1183.232261][T28548] netlink: 596 bytes leftover after parsing attributes in process `syz.3.4515'. [ 1183.232436][T28548] netlink: 596 bytes leftover after parsing attributes in process `syz.3.4515'. [ 1183.232620][T28548] netlink: 596 bytes leftover after parsing attributes in process `syz.3.4515'. [ 1183.232793][T28548] netlink: 596 bytes leftover after parsing attributes in process `syz.3.4515'. [ 1183.232988][T28548] netlink: 596 bytes leftover after parsing attributes in process `syz.3.4515'. [ 1183.241809][T28548] netlink: 596 bytes leftover after parsing attributes in process `syz.3.4515'. [ 1183.242006][T28548] netlink: 596 bytes leftover after parsing attributes in process `syz.3.4515'. [ 1183.279000][T28550] netlink: 'syz.4.4517': attribute type 2 has an invalid length. [ 1183.356562][T28549] netlink: 'syz.3.4515': attribute type 1 has an invalid length. [ 1183.453521][T28549] netlink: 'syz.3.4515': attribute type 1 has an invalid length. [ 1183.975060][T28579] Bluetooth: ISO socket layer initialized [ 1184.231283][T25229] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1184.231706][T25229] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1184.232012][ C0] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1184.389339][ C0] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1184.883522][T28601] netlink: 'syz.7.4524': attribute type 1 has an invalid length. [ 1184.883544][T28601] netlink: 'syz.7.4524': attribute type 7 has an invalid length. [ 1184.883556][T28601] netlink: 'syz.7.4524': attribute type 8 has an invalid length. [ 1184.883586][T28601] NCSI netlink: No device for ifindex 1073545264 [ 1185.931192][T28635] tipc: Invalid UDP bearer configuration [ 1185.931239][T28635] tipc: Enabling of bearer rejected, failed to enable media [ 1186.389345][ C0] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1186.791749][T27580] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1187.628519][T17534] Bluetooth: hci3: connection err: -111 [ 1187.637368][T17534] Bluetooth: hci3: connection err: -111 [ 1187.665659][T28704] ip6_tables: ip6tables: counters copy to user failed while replacing table [ 1188.247878][T28730] __nla_validate_parse: 34 callbacks suppressed [ 1188.247897][T28730] netlink: 28 bytes leftover after parsing attributes in process `syz.6.4555'. [ 1188.333262][T28734] netlink: 28 bytes leftover after parsing attributes in process `syz.6.4555'. [ 1188.389695][ C0] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1188.458798][T28730] netlink: 12 bytes leftover after parsing attributes in process `syz.6.4555'. [ 1188.676428][T28746] ip6_tables: ip6tables: counters copy to user failed while replacing table [ 1189.137345][T28757] netlink: 4 bytes leftover after parsing attributes in process `syz.4.4562'. [ 1189.138459][T28767] netlink: 4 bytes leftover after parsing attributes in process `syz.4.4562'. [ 1189.354354][T18392] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1189.637794][ T32] audit: type=1800 audit(1790595759.466:21): pid=28777 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.5.4564" name="blkio.bfq.time_recursive" dev="tmpfs" ino=1155 res=0 errno=0 [ 1189.989516][ C1] ip6_tunnel: ip6tnl2 xmit: Local address not yet configured! [ 1189.991250][T27578] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1189.991564][ C1] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1190.099846][T28795] nbd: couldn't find a device at index 0 [ 1190.389310][ C0] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1190.420135][T28799] netlink: 44 bytes leftover after parsing attributes in process `syz.6.4569'. [ 1190.489847][T28801] netlink: 36 bytes leftover after parsing attributes in process `syz.7.4570'. [ 1190.537036][T28804] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 1191.089909][T28823] netlink: 44 bytes leftover after parsing attributes in process `syz.5.4575'. [ 1191.238643][T28828] netlink: 52 bytes leftover after parsing attributes in process `syz.6.4576'. [ 1191.238858][T28829] netlink: 52 bytes leftover after parsing attributes in process `syz.6.4576'. [ 1191.832856][T27578] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1192.046451][T28867] bond_slave_0: entered promiscuous mode [ 1192.389344][ C0] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1192.743904][T28900] netlink: 'syz.7.4590': attribute type 2 has an invalid length. [ 1193.213774][T28915] netlink: 'syz.7.4591': attribute type 2 has an invalid length. [ 1193.347025][T28867] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 1193.394813][T28867] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 1193.805926][T28867] batman_adv: batadv0: Interface deactivated: ip6gretap1 [ 1194.389357][ C0] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1194.399700][T25239] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1194.636648][T28867] batman_adv: batadv0: Interface deactivated: gretap1 [ 1194.749862][T18392] netdevsim netdevsim6 netdevsim0: unset [0, 0] type 1 family 0 port 8472 - 0 [ 1194.749896][T18392] netdevsim netdevsim6 netdevsim0: unset [1, 0] type 2 family 0 port 6081 - 0 [ 1194.749920][T18392] netdevsim netdevsim6 netdevsim0: unset [1, 1] type 2 family 0 port 20004 - 0 [ 1194.750830][T18392] netdevsim netdevsim6 netdevsim3: unset [0, 0] type 1 family 0 port 8472 - 0 [ 1194.750855][T18392] netdevsim netdevsim6 netdevsim3: unset [1, 0] type 2 family 0 port 6081 - 0 [ 1194.750878][T18392] netdevsim netdevsim6 netdevsim3: unset [1, 1] type 2 family 0 port 20004 - 0 [ 1194.750913][T18392] netdevsim netdevsim6 netdevsim1: unset [0, 0] type 1 family 0 port 8472 - 0 [ 1194.750937][T18392] netdevsim netdevsim6 netdevsim1: unset [1, 0] type 2 family 0 port 6081 - 0 [ 1194.750959][T18392] netdevsim netdevsim6 netdevsim1: unset [1, 1] type 2 family 0 port 20004 - 0 [ 1194.750993][T18392] netdevsim netdevsim6 netdevsim2: unset [0, 0] type 1 family 0 port 8472 - 0 [ 1194.751016][T18392] netdevsim netdevsim6 netdevsim2: unset [1, 0] type 2 family 0 port 6081 - 0 [ 1194.751038][T18392] netdevsim netdevsim6 netdevsim2: unset [1, 1] type 2 family 0 port 20004 - 0 [ 1194.867959][T28908] bond8: option mode: unable to set because the bond device has slaves [ 1194.888309][T28911] bond_slave_0: left promiscuous mode [ 1194.888342][T28911] bond_slave_1: left promiscuous mode [ 1195.006096][T28921] netlink: 'syz.6.4592': attribute type 1 has an invalid length. [ 1195.033161][T28913] bond8 (unregistering): (slave macvlan2): Releasing active interface [ 1195.056952][T28913] bond8 (unregistering): Released all slaves [ 1195.201308][T28915] : entered promiscuous mode [ 1195.257159][T28930] netlink: 'syz.6.4592': attribute type 1 has an invalid length. [ 1195.491291][T28921] 8021q: adding VLAN 0 to HW filter on device bond5 [ 1195.534247][T28922] bond5: (slave veth0_to_bond): Enslaving as an active interface with a down link [ 1195.548821][T28924] bond5: entered promiscuous mode [ 1195.548843][T28924] bond5: entered allmulticast mode [ 1195.584559][T28941] input: Bluetooth HID Boot Protocol Device as /devices/virtual/bluetooth/hci3/hci3:200/input9 [ 1195.608480][T28925] macvlan3: entered promiscuous mode [ 1195.608502][T28925] macvlan3: entered allmulticast mode [ 1195.617175][T28925] 8021q: adding VLAN 0 to HW filter on device macvlan3 [ 1195.752280][T18392] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1195.752591][ C1] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1195.768451][T28883] Bluetooth: hci5: Opcode 0x0c1a failed: -4 [ 1195.768476][T28883] Bluetooth: hci5: Error when powering off device on rfkill (-4) [ 1196.056727][T28883] Bluetooth: hci6: Opcode 0x0c1a failed: -4 [ 1196.056748][T28883] Bluetooth: hci6: Error when powering off device on rfkill (-4) [ 1196.227739][T28883] Bluetooth: hci1: Opcode 0x0c1a failed: -4 [ 1196.227762][T28883] Bluetooth: hci1: Error when powering off device on rfkill (-4) [ 1196.273262][T28958] block nbd3: server does not support multiple connections per device. [ 1196.307178][T28958] block nbd3: shutting down sockets [ 1196.389496][ C0] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1196.488799][T28883] Bluetooth: hci3: Opcode 0x0c1a failed: -4 [ 1196.488822][T28883] Bluetooth: hci3: Error when powering off device on rfkill (-4) [ 1196.777662][T28974] __nla_validate_parse: 6 callbacks suppressed [ 1196.777683][T28974] netlink: 60 bytes leftover after parsing attributes in process `syz.3.4597'. [ 1197.143364][T28980] netlink: 'syz.3.4602': attribute type 4 has an invalid length. [ 1197.150081][T28983] syzkaller0: entered promiscuous mode [ 1197.150101][T28983] syzkaller0: entered allmulticast mode [ 1197.467862][T28981] netlink: 4 bytes leftover after parsing attributes in process `syz.7.4601'. [ 1197.485033][T28996] netlink: 64 bytes leftover after parsing attributes in process `syz.4.4606'. [ 1197.488084][T28996] netlink: 76 bytes leftover after parsing attributes in process `syz.4.4606'. [ 1197.679477][T25229] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1197.905305][T29012] sch_tbf: peakrate 7 is lower than or equals to rate 6829859379779001161 ! [ 1198.389444][ C0] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1199.301535][T29035] syzkaller1: entered allmulticast mode [ 1199.388863][T29057] netlink: 'syz.7.4620': attribute type 11 has an invalid length. [ 1199.512511][T18392] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1199.712688][T29068] netlink: 4 bytes leftover after parsing attributes in process `syz.3.4618'. [ 1199.858812][T29075] pim6reg: entered allmulticast mode [ 1200.094464][T29091] ip6_tables: ip6tables: counters copy to user failed while replacing table [ 1200.276923][T29103] netlink: 68 bytes leftover after parsing attributes in process `syz.3.4625'. [ 1200.291212][T29106] netlink: 68 bytes leftover after parsing attributes in process `syz.3.4625'. [ 1200.389444][ C0] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1200.636779][T29110] bridge0: port 3(netdevsim0) entered blocking state [ 1200.636867][T29110] bridge0: port 3(netdevsim0) entered disabled state [ 1200.637037][T29110] netdevsim netdevsim3 netdevsim0: entered allmulticast mode [ 1200.719543][T29110] netdevsim netdevsim3 netdevsim0: entered promiscuous mode [ 1200.720145][T29110] bridge0: port 3(netdevsim0) entered blocking state [ 1200.720237][T29110] bridge0: port 3(netdevsim0) entered forwarding state [ 1200.825875][T29114] batman_adv: batadv0: Adding interface: macvlan3 [ 1200.833345][T29114] batman_adv: batadv0: The MTU of interface macvlan3 is too small (1450) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 1200.833382][T29114] batman_adv: batadv0: Interface activated: macvlan3 [ 1200.833998][T29117] bridge_slave_1: left promiscuous mode [ 1200.834244][T29117] bridge0: port 2(bridge_slave_1) entered disabled state [ 1200.882154][T25235] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1200.882407][ C1] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1201.345320][T29132] netlink: 144 bytes leftover after parsing attributes in process `syz.4.4630'. [ 1201.362724][T29136] netlink: 65039 bytes leftover after parsing attributes in process `syz.3.4632'. [ 1202.026153][T29171] netlink: 4 bytes leftover after parsing attributes in process `syz.5.4635'. [ 1202.057964][T29176] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 1202.389327][ C0] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1202.510471][T29178] syzkaller1: default qdisc (pfifo_fast) fail, fallback to noqueue [ 1202.605440][T29177] netlink: 'syz.7.4637': attribute type 1 has an invalid length. [ 1202.622394][T29177] : renamed from dummy0 (while UP) [ 1202.794704][T27580] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1202.912389][T29197] netlink: 4 bytes leftover after parsing attributes in process `syz.5.4642'. [ 1203.035315][T29209] x_tables: duplicate underflow at hook 3 [ 1203.327856][T29218] tun0: tun_chr_ioctl cmd 1074025677 [ 1203.327976][T29218] tun0: linktype set to 0 [ 1203.429682][ C0] ip6_tunnel: ip6gre2 xmit: Local address not yet configured! [ 1203.439324][ C1] ip6_tunnel: ip6tnl2 xmit: Local address not yet configured! [ 1203.580534][T29224] netlink: 12 bytes leftover after parsing attributes in process `syz.4.4649'. [ 1203.865603][T29228] vti0: entered promiscuous mode [ 1203.865626][T29228] vti0: entered allmulticast mode [ 1203.986693][T29231] netlink: 24 bytes leftover after parsing attributes in process `syz.3.4651'. [ 1204.203593][T29235] netlink: 4 bytes leftover after parsing attributes in process `syz.4.4652'. [ 1204.389537][ C0] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1204.551190][T25239] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1204.728429][T29246] netlink: 'syz.5.4657': attribute type 3 has an invalid length. [ 1204.812089][T29252] netlink: 12 bytes leftover after parsing attributes in process `syz.3.4656'. [ 1204.893578][T29253] x_tables: duplicate entry at hook 3 [ 1205.349657][ C1] ip6_tunnel: ip6tnl2 xmit: Local address not yet configured! [ 1205.527357][T29260] syzkaller0: entered promiscuous mode [ 1205.527378][T29260] syzkaller0: entered allmulticast mode [ 1205.564232][T29262] netlink: 'syz.4.4662': attribute type 162 has an invalid length. [ 1205.609804][T29268] netlink: 'syz.4.4662': attribute type 162 has an invalid length. [ 1205.710355][T29270] netlink: 8 bytes leftover after parsing attributes in process `syz.5.4663'. [ 1205.798293][T29271] netlink: 8 bytes leftover after parsing attributes in process `syz.5.4663'. [ 1206.389380][ C0] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1206.411261][T29287] netlink: 12 bytes leftover after parsing attributes in process `syz.3.4666'. [ 1206.417781][T29288] netlink: 12 bytes leftover after parsing attributes in process `syz.3.4666'. [ 1206.631766][T22883] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1206.632093][ C1] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1207.232599][T29310] __nla_validate_parse: 5 callbacks suppressed [ 1207.232619][T29310] netlink: 12 bytes leftover after parsing attributes in process `syz.4.4672'. [ 1207.253662][T29313] netlink: 112 bytes leftover after parsing attributes in process `syz.6.4674'. [ 1207.254789][T29313] netlink: 112 bytes leftover after parsing attributes in process `syz.6.4674'. [ 1207.256771][T29315] netlink: 12 bytes leftover after parsing attributes in process `syz.6.4674'. [ 1207.459643][T29317] netlink: 144 bytes leftover after parsing attributes in process `syz.7.4673'. [ 1207.460749][T29318] netlink: 60 bytes leftover after parsing attributes in process `syz.7.4673'. [ 1207.519378][T29321] netlink: 4 bytes leftover after parsing attributes in process `syz.7.4673'. [ 1207.519459][T29321] bridge_slave_1: left allmulticast mode [ 1207.519478][T29321] bridge_slave_1: left promiscuous mode [ 1207.519697][T29321] bridge0: port 2(bridge_slave_1) entered disabled state [ 1207.612299][T29321] bridge_slave_0: left allmulticast mode [ 1207.612325][T29321] bridge_slave_0: left promiscuous mode [ 1207.612560][T29321] bridge0: port 1(bridge_slave_0) entered disabled state [ 1207.886037][T29329] netlink: 'syz.5.4678': attribute type 8 has an invalid length. [ 1208.042616][T29332] netlink: 20 bytes leftover after parsing attributes in process `syz.3.4679'. [ 1208.389289][ C0] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1208.428455][T29355] netlink: 16 bytes leftover after parsing attributes in process `syz.3.4684'. [ 1208.792037][T29363] sctp: [Deprecated]: syz.7.4687 (pid 29363) Use of struct sctp_assoc_value in delayed_ack socket option. [ 1208.792037][T29363] Use struct sctp_sack_info instead [ 1209.090622][T29367] netlink: 8 bytes leftover after parsing attributes in process `syz.7.4688'. [ 1209.833008][T25235] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1210.389425][ C0] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1210.919376][T29432] tipc: Failed to remove unknown binding: 66,0,0/0:162898953/162898972 [ 1210.919403][T29432] tipc: Failed to remove unknown binding: 66,0,0/0:162898953/162898971 [ 1210.919422][T29432] tipc: Failed to remove unknown binding: 66,0,0/0:162898953/162898970 [ 1210.919440][T29432] tipc: Failed to remove unknown binding: 66,0,0/0:162898953/162898969 [ 1210.919460][T29432] tipc: Failed to remove unknown binding: 66,0,0/0:162898953/162898968 [ 1210.919479][T29432] tipc: Failed to remove unknown binding: 66,0,0/0:162898953/162898967 [ 1210.919497][T29432] tipc: Failed to remove unknown binding: 66,0,0/0:162898953/162898966 [ 1210.919516][T29432] tipc: Failed to remove unknown binding: 66,0,0/0:162898953/162898965 [ 1210.919535][T29432] tipc: Failed to remove unknown binding: 66,0,0/0:162898953/162898964 [ 1210.919554][T29432] tipc: Failed to remove unknown binding: 66,0,0/0:162898953/162898963 [ 1210.919574][T29432] tipc: Failed to remove unknown binding: 66,0,0/0:162898953/162898962 [ 1210.919593][T29432] tipc: Failed to remove unknown binding: 66,0,0/0:162898953/162898961 [ 1210.919613][T29432] tipc: Failed to remove unknown binding: 66,0,0/0:162898953/162898960 [ 1210.919631][T29432] tipc: Failed to remove unknown binding: 66,0,0/0:162898953/162898959 [ 1210.919649][T29432] tipc: Failed to remove unknown binding: 66,0,0/0:162898953/162898958 [ 1210.919668][T29432] tipc: Failed to remove unknown binding: 66,0,0/0:162898953/162898957 [ 1210.919688][T29432] tipc: Failed to remove unknown binding: 66,0,0/0:162898953/162898956 [ 1210.919706][T29432] tipc: Failed to remove unknown binding: 66,0,0/0:162898953/162898955 [ 1210.919725][T29432] tipc: Failed to remove unknown binding: 66,0,0/0:162898953/162898954 [ 1210.969202][T29430] tipc: Failed to remove unknown binding: 66,0,0/0:162898953/162898972 [ 1210.969231][T29430] tipc: Failed to remove unknown binding: 66,0,0/0:162898953/162898971 [ 1210.969251][T29430] tipc: Failed to remove unknown binding: 66,0,0/0:162898953/162898970 [ 1210.969270][T29430] tipc: Failed to remove unknown binding: 66,0,0/0:162898953/162898969 [ 1210.969290][T29430] tipc: Failed to remove unknown binding: 66,0,0/0:162898953/162898968 [ 1210.969309][T29430] tipc: Failed to remove unknown binding: 66,0,0/0:162898953/162898967 [ 1210.969328][T29430] tipc: Failed to remove unknown binding: 66,0,0/0:162898953/162898966 [ 1210.969347][T29430] tipc: Failed to remove unknown binding: 66,0,0/0:162898953/162898965 [ 1210.969366][T29430] tipc: Failed to remove unknown binding: 66,0,0/0:162898953/162898964 [ 1210.969385][T29430] tipc: Failed to remove unknown binding: 66,0,0/0:162898953/162898963 [ 1210.969404][T29430] tipc: Failed to remove unknown binding: 66,0,0/0:162898953/162898962 [ 1210.969423][T29430] tipc: Failed to remove unknown binding: 66,0,0/0:162898953/162898961 [ 1210.969442][T29430] tipc: Failed to remove unknown binding: 66,0,0/0:162898953/162898960 [ 1210.969461][T29430] tipc: Failed to remove unknown binding: 66,0,0/0:162898953/162898959 [ 1210.969479][T29430] tipc: Failed to remove unknown binding: 66,0,0/0:162898953/162898958 [ 1210.969498][T29430] tipc: Failed to remove unknown binding: 66,0,0/0:162898953/162898957 [ 1210.969517][T29430] tipc: Failed to remove unknown binding: 66,0,0/0:162898953/162898956 [ 1210.969535][T29430] tipc: Failed to remove unknown binding: 66,0,0/0:162898953/162898955 [ 1210.969554][T29430] tipc: Failed to remove unknown binding: 66,0,0/0:162898953/162898954 [ 1211.752134][T25232] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1211.752454][ C0] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1211.805195][T29460] syzkaller0: entered promiscuous mode [ 1211.805217][T29460] syzkaller0: entered allmulticast mode [ 1211.914993][T29465] dummy0: left allmulticast mode [ 1211.950207][T29465] team0: Port device dummy0 removed [ 1211.976198][T29465] bond0: (slave bond_slave_0): Releasing backup interface [ 1212.001323][T29465] team_slave_0: left allmulticast mode [ 1212.018379][T29465] team0: Port device team_slave_0 removed [ 1212.020800][T29465] team_slave_1: left allmulticast mode [ 1212.026783][T29465] team0: Port device team_slave_1 removed [ 1212.027155][T29465] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 1212.047153][T29465] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 1212.068488][T29465] A link change request failed with some changes committed already. Interface hsr_slave_0 may have been left with an inconsistent configuration, please check. [ 1212.295576][T29470] ip6gre1: entered promiscuous mode [ 1212.295599][T29470] ip6gre1: entered allmulticast mode [ 1212.316057][T29468] tap0: tun_chr_ioctl cmd 1074025677 [ 1212.316161][T29468] tap0: linktype set to 774 [ 1212.389533][ C0] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1212.916985][T29492] __nla_validate_parse: 9 callbacks suppressed [ 1212.917003][T29492] netlink: 20 bytes leftover after parsing attributes in process `syz.7.4721'. [ 1212.917026][T29492] openvswitch: netlink: Missing key (keys=40, expected=200000) [ 1213.546832][T29512] netlink: 56 bytes leftover after parsing attributes in process `syz.3.4723'. [ 1213.603122][T29515] netlink: 'syz.5.4724': attribute type 10 has an invalid length. [ 1213.609509][T29515] 8021q: adding VLAN 0 to HW filter on device netdevsim1 [ 1213.695116][T29518] netlink: 'syz.7.4725': attribute type 1 has an invalid length. [ 1213.906378][T29518] bond8: entered promiscuous mode [ 1213.906775][T29518] 8021q: adding VLAN 0 to HW filter on device bond8 [ 1214.338897][T29539] netlink: 404 bytes leftover after parsing attributes in process `syz.7.4730'. [ 1214.370855][T29536] netlink: Unknown conntrack attr (0) [ 1214.389631][ C0] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1214.455799][T29543] netlink: 8 bytes leftover after parsing attributes in process `syz.6.4731'. [ 1214.579312][T29539] netlink: 12 bytes leftover after parsing attributes in process `syz.7.4730'. [ 1214.670736][T29539] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 1214.701244][T29558] netlink: 72 bytes leftover after parsing attributes in process `syz.5.4733'. [ 1215.006611][T29564] netlink: 84 bytes leftover after parsing attributes in process `syz.5.4736'. [ 1215.591191][T18379] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1216.389347][ C0] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1216.623708][T29602] netlink: 4 bytes leftover after parsing attributes in process `syz.7.4745'. [ 1216.653981][T29603] ip6_tables: ip6tables: counters copy to user failed while replacing table [ 1216.871870][T25228] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1216.896736][T29611] netlink: 'syz.4.4746': attribute type 1 has an invalid length. [ 1217.068390][T29615] netlink: 'syz.3.4747': attribute type 1 has an invalid length. [ 1217.074328][T29619] netlink: 40 bytes leftover after parsing attributes in process `syz.7.4750'. [ 1217.513159][T27577] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1217.513487][ C1] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1217.904901][T29644] batman_adv: batadv0: Adding interface: macsec0 [ 1217.904921][T29644] batman_adv: batadv0: The MTU of interface macsec0 is too small (1468) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 1217.904952][T29644] batman_adv: batadv0: Interface activated: macsec0 [ 1218.158712][T29650] netlink: 'syz.5.4759': attribute type 1 has an invalid length. [ 1218.273570][T29650] 8021q: adding VLAN 0 to HW filter on device bond3 [ 1218.389338][ C0] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1218.427496][T29654] bond3: (slave veth7): Enslaving as an active interface with a down link [ 1218.554114][T29663] netlink: 'syz.4.4762': attribute type 10 has an invalid length. [ 1218.586174][T29650] 8021q: adding VLAN 0 to HW filter on device batadv1 [ 1218.594139][T29650] bond3: (slave batadv1): making interface the new active one [ 1218.598738][T29650] batadv1: entered promiscuous mode [ 1218.606615][T29668] netlink: 'syz.4.4762': attribute type 10 has an invalid length. [ 1218.612521][T29650] bond3: (slave batadv1): Enslaving as an active interface with an up link [ 1218.648695][T29657] bond3 (unregistering): (slave veth7): Releasing active interface [ 1218.686048][T29657] bond3 (unregistering): (slave batadv1): Releasing active interface [ 1218.686079][T29657] batadv1: left promiscuous mode [ 1218.729845][T29657] bond3 (unregistering): Released all slaves [ 1218.846978][T29670] xt_nat: multiple ranges no longer supported [ 1219.016387][T29663] 8021q: adding VLAN 0 to HW filter on device netdevsim1 [ 1219.023061][T29663] team0: Port device netdevsim1 added [ 1219.475466][T29691] netlink: 36 bytes leftover after parsing attributes in process `syz.4.4767'. [ 1219.611664][T29697] ip6_tables: ip6tables: counters copy to user failed while replacing table [ 1219.867043][T29707] netlink: 8 bytes leftover after parsing attributes in process `syz.7.4771'. [ 1220.020402][T29712] syzkaller1: entered promiscuous mode [ 1220.020424][T29712] syzkaller1: entered allmulticast mode [ 1220.128224][T29714] Bluetooth: MGMT ver 1.23 [ 1220.389334][ C0] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1220.768449][T29734] vxcan3: entered promiscuous mode [ 1221.349841][ T160] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1221.394821][T29752] netlink: 24 bytes leftover after parsing attributes in process `syz.3.4786'. [ 1221.715032][T29758] batman_adv: batadv0: Adding interface: macvtap2 [ 1221.715050][T29758] batman_adv: batadv0: The MTU of interface macvtap2 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 1221.715074][T29758] batman_adv: batadv0: Not using interface macvtap2 (retrying later): interface not active [ 1221.806137][T29759] batman_adv: batadv0: Adding interface: macvtap3 [ 1221.806155][T29759] batman_adv: batadv0: The MTU of interface macvtap3 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 1221.806177][T29759] batman_adv: batadv0: Not using interface macvtap3 (retrying later): interface not active [ 1221.871632][T29738] netlink: 'syz.7.4782': attribute type 4 has an invalid length. [ 1222.291393][T29770] Bluetooth: hci0: unsupported parameter 5135 [ 1222.291415][T29770] Bluetooth: hci0: invalid length 1, exp 2 for type 24 [ 1222.390073][ C0] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1222.594477][T29783] netlink: 28 bytes leftover after parsing attributes in process `syz.5.4797'. [ 1222.615669][T29784] netlink: 1 bytes leftover after parsing attributes in process `syz.4.4794'. [ 1222.629827][T22883] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1222.630184][ C0] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1222.630705][T22883] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1222.638785][T29784] netlink: 1 bytes leftover after parsing attributes in process `syz.4.4794'. [ 1222.763013][T29795] netlink: 'syz.5.4799': attribute type 10 has an invalid length. [ 1222.782409][T29795] 8021q: adding VLAN 0 to HW filter on device netdevsim1 [ 1223.941867][T29835] tipc: New replicast peer: 0000:0000:0000:0000:0000:0000:0000:0001 [ 1223.942568][T29835] tipc: Enabled bearer , priority 29 [ 1224.389381][ C0] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1224.604478][T29863] netlink: 24 bytes leftover after parsing attributes in process `syz.3.4814'. [ 1224.625850][T29864] netlink: 16 bytes leftover after parsing attributes in process `syz.5.4815'. [ 1224.683817][T29866] netlink: 16 bytes leftover after parsing attributes in process `syz.5.4815'. [ 1224.701824][T29865] netlink: 4 bytes leftover after parsing attributes in process `syz.4.4816'. [ 1224.779842][T29871] netlink: 12 bytes leftover after parsing attributes in process `syz.4.4816'. [ 1224.786902][T29865] macvtap4: entered promiscuous mode [ 1224.786923][T29865] erspan0: entered promiscuous mode [ 1224.787113][T29865] macvtap4: entered allmulticast mode [ 1224.787126][T29865] erspan0: entered allmulticast mode [ 1224.890748][T29872] netlink: 8 bytes leftover after parsing attributes in process `syz.6.4817'. [ 1224.941438][T29871] erspan0: left allmulticast mode [ 1224.941580][T29871] erspan0: left promiscuous mode [ 1224.942433][T29871] macvtap4: left promiscuous mode [ 1224.942453][T29871] macvtap4: left allmulticast mode [ 1225.095322][T29881] netlink: 36 bytes leftover after parsing attributes in process `syz.6.4819'. [ 1225.182099][T29882] netlink: 56 bytes leftover after parsing attributes in process `syz.6.4819'. [ 1225.313486][T29891] netlink: 'syz.4.4821': attribute type 11 has an invalid length. [ 1225.398137][T29895] netlink: 24 bytes leftover after parsing attributes in process `syz.3.4820'. [ 1225.516090][T29876] netlink: 12 bytes leftover after parsing attributes in process `syz.5.4818'. [ 1226.245200][T29907] 8021q: adding VLAN 0 to HW filter on device bond7 [ 1226.273745][T29917] sctp: [Deprecated]: syz.6.4827 (pid 29917) Use of struct sctp_assoc_value in delayed_ack socket option. [ 1226.273745][T29917] Use struct sctp_sack_info instead [ 1226.285148][T29907] bond6: (slave bond7): Enslaving as an active interface with an up link [ 1226.333919][T29920] openvswitch: netlink: Missing key (keys=50, expected=80) [ 1226.378744][T29909] bond6: (slave gretap0): Enslaving as an active interface with an up link [ 1226.389349][ C0] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1226.401076][T29902] 8021q: adding VLAN 0 to HW filter on device bond6 [ 1226.433969][T29923] netlink: 'syz.5.4829': attribute type 1 has an invalid length. [ 1226.573196][T29923] 8021q: adding VLAN 0 to HW filter on device bond3 [ 1226.777030][T29930] netlink: NAT attribute type 5 has unexpected length (0 != 2) [ 1226.777067][T29930] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 1227.110250][T25232] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1227.418042][T29953] netlink: 'syz.6.4837': attribute type 27 has an invalid length. [ 1227.418919][T29954] netlink: 'syz.6.4837': attribute type 27 has an invalid length. [ 1227.673041][T18379] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1227.673356][ C0] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1228.312099][T29991] tipc: Enabling of bearer rejected, failed to enable media [ 1228.389439][ C0] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1228.390456][T18379] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1228.429004][T29993] ip_tables: iptables: counters copy to user failed while replacing table [ 1229.006595][T30001] netlink: 'syz.7.4851': attribute type 1 has an invalid length. [ 1229.006617][T30001] netlink: 'syz.7.4851': attribute type 2 has an invalid length. [ 1230.344104][T30038] syzkaller0: left promiscuous mode [ 1230.344128][T30038] syzkaller0: left allmulticast mode [ 1230.700720][T30061] __nla_validate_parse: 16 callbacks suppressed [ 1230.700740][T30061] netlink: 296 bytes leftover after parsing attributes in process `syz.3.4864'. [ 1231.275243][T30079] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 1231.348207][T30078] lo: entered promiscuous mode [ 1231.348388][T30078] tunl0: entered promiscuous mode [ 1231.348548][T30078] gre0: entered promiscuous mode [ 1231.348665][T30078] gretap0: entered promiscuous mode [ 1231.348780][T30078] erspan0: entered promiscuous mode [ 1231.348896][T30078] ip_vti0: entered promiscuous mode [ 1231.386033][T30078] ip6_vti0: entered promiscuous mode [ 1231.386198][T30078] sit0: entered promiscuous mode [ 1231.386326][T30078] ip6tnl0: entered promiscuous mode [ 1231.386441][T30078] ip6gre0: entered promiscuous mode [ 1231.386557][T30078] ip6gretap0: entered promiscuous mode [ 1231.386672][T30078] bond0: entered promiscuous mode [ 1231.386852][T30078] bond_slave_1: entered promiscuous mode [ 1231.387035][T30078] vlan1: entered promiscuous mode [ 1231.387467][T30078] team0: entered promiscuous mode [ 1231.387483][T30078] team_slave_0: entered promiscuous mode [ 1231.387650][T30078] team_slave_1: entered promiscuous mode [ 1231.387951][T30078] dummy0: entered promiscuous mode [ 1231.388110][T30078] nlmon0: entered promiscuous mode [ 1231.388325][T30078] batadv0: entered promiscuous mode [ 1231.388473][T30078] vxcan0: entered promiscuous mode [ 1231.388620][T30078] vxcan1: entered promiscuous mode [ 1231.388769][T30078] veth0: entered promiscuous mode [ 1231.388931][T30078] veth1: entered promiscuous mode [ 1231.472491][T30078] wg0: entered promiscuous mode [ 1231.472678][T30078] wg1: entered promiscuous mode [ 1231.472792][T30078] veth0_to_bridge: entered promiscuous mode [ 1231.473014][T30078] bridge_slave_0: entered promiscuous mode [ 1231.473188][T30078] veth1_to_bridge: entered promiscuous mode [ 1231.473326][T30078] bridge_slave_1: entered promiscuous mode [ 1231.485567][T30078] veth0_to_bond: entered promiscuous mode [ 1231.508522][T30078] veth1_to_bond: entered promiscuous mode [ 1231.508858][T30078] veth0_to_team: entered promiscuous mode [ 1231.517728][T30078] veth1_to_team: entered promiscuous mode [ 1231.527839][T30078] veth0_to_batadv: entered promiscuous mode [ 1231.527986][T30078] batadv_slave_0: entered promiscuous mode [ 1231.528126][T30078] veth1_to_batadv: entered promiscuous mode [ 1231.528266][T30078] batadv_slave_1: entered promiscuous mode [ 1231.528416][T30078] xfrm0: entered promiscuous mode [ 1231.528556][T30078] veth0_to_hsr: entered promiscuous mode [ 1231.528824][T30078] veth1_to_hsr: entered promiscuous mode [ 1231.604446][T30078] hsr0: entered promiscuous mode [ 1231.604628][T30078] veth1_virt_wifi: entered promiscuous mode [ 1231.604784][T30078] veth0_virt_wifi: entered promiscuous mode [ 1231.604936][T30078] virt_wifi0: entered promiscuous mode [ 1231.605340][T30078] vlan0: entered promiscuous mode [ 1231.605821][T30078] macvlan0: entered promiscuous mode [ 1231.605973][T30078] macvlan1: entered promiscuous mode [ 1231.606120][T30078] ipvlan0: entered promiscuous mode [ 1231.606266][T30078] geneve0: entered promiscuous mode [ 1231.606409][T30078] geneve1: entered promiscuous mode [ 1231.606562][T30078] netdevsim netdevsim6 netdevsim0: entered promiscuous mode [ 1231.606694][T30078] netdevsim netdevsim6 netdevsim1: entered promiscuous mode [ 1231.606815][T30078] netdevsim netdevsim6 netdevsim2: entered promiscuous mode [ 1231.606968][T30078] netdevsim netdevsim6 netdevsim3: entered promiscuous mode [ 1231.607108][T30078] mac80211_hwsim hwsim48 wlan0: entered promiscuous mode [ 1231.607261][T30078] mac80211_hwsim hwsim49 wlan1: entered promiscuous mode [ 1231.607395][T30078] bridge1: entered promiscuous mode [ 1231.607514][T30078] bridge2: entered promiscuous mode [ 1231.607631][T30078] dummy1: entered promiscuous mode [ 1231.607780][T30078] ip6gretap1: entered promiscuous mode [ 1231.607914][T30078] bond1: entered promiscuous mode [ 1231.607927][T30078] geneve2: entered promiscuous mode [ 1231.608269][T30078] macvlan2: entered promiscuous mode [ 1231.608403][T30078] bridge3: entered promiscuous mode [ 1231.608522][T30078] vxlan0: entered promiscuous mode [ 1231.608788][T30078] bridge4: entered promiscuous mode [ 1231.608921][T30078] bridge5: entered promiscuous mode [ 1231.719415][T30078] vti0: entered promiscuous mode [ 1231.719594][T30078] bridge6: entered promiscuous mode [ 1231.719720][T30078] bridge7: entered promiscuous mode [ 1231.719833][T30078] sit1: entered promiscuous mode [ 1231.719944][T30078] bridge8: entered promiscuous mode [ 1231.720061][T30078] mac80211_hwsim hwsim59 wlan2: entered promiscuous mode [ 1231.720201][T30078] sit2: entered promiscuous mode [ 1231.737614][T30078] ip6tnl1: entered promiscuous mode [ 1231.737756][T30078] veth1_vlan.0: entered promiscuous mode [ 1231.738099][T30078] mac80211_hwsim hwsim62 wlan3: entered promiscuous mode [ 1231.738237][T30078] bridge9: entered promiscuous mode [ 1231.738366][T30078] bond2: entered promiscuous mode [ 1231.738481][T30078] gre1: entered promiscuous mode [ 1231.738592][T30078] bridge10: entered promiscuous mode [ 1231.738707][T30078] syztnl0: entered promiscuous mode [ 1231.738814][T30078] gretap1: entered promiscuous mode [ 1231.738924][T30078] bridge11: entered promiscuous mode [ 1231.814575][T30078] bridge12: entered promiscuous mode [ 1231.814732][T30078] bond3: entered promiscuous mode [ 1231.814747][T30078] bridge13: entered promiscuous mode [ 1231.815095][T30078] bond4: entered promiscuous mode [ 1231.815208][T30078] syztnl2: entered promiscuous mode [ 1231.815315][T30078] bridge0: entered promiscuous mode [ 1231.815438][T30078] vti1: entered promiscuous mode [ 1231.815618][T30078] gre2: entered promiscuous mode [ 1231.815734][T30078] mac80211_hwsim hwsim69 wlan4: entered promiscuous mode [ 1231.815994][T30078] batman_adv: batadv0: Interface deactivated: macvlan3 [ 1231.848825][T30078] macvlan3: entered promiscuous mode [ 1231.905246][T30078] vxcan2: entered promiscuous mode [ 1231.992526][T30084] nftables ruleset with unbound set [ 1232.056166][T30084] batadv_slave_1: entered promiscuous mode [ 1232.079990][T30083] batadv_slave_1: left promiscuous mode [ 1232.251682][T30091] netlink: 8 bytes leftover after parsing attributes in process `syz.3.4871'. [ 1232.251705][T30091] netlink: 24 bytes leftover after parsing attributes in process `syz.3.4871'. [ 1232.251920][T30091] netlink: 8 bytes leftover after parsing attributes in process `syz.3.4871'. [ 1232.251933][T30091] netlink: 24 bytes leftover after parsing attributes in process `syz.3.4871'. [ 1232.258716][T30103] sctp: [Deprecated]: syz.6.4873 (pid 30103) Use of int in maxseg socket option. [ 1232.258716][T30103] Use struct sctp_assoc_value instead [ 1232.389443][ C0] net_ratelimit: 4 callbacks suppressed [ 1232.389462][ C0] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1232.594516][T30112] netlink: 'syz.6.4875': attribute type 2 has an invalid length. [ 1232.594538][T30112] netlink: 224 bytes leftover after parsing attributes in process `syz.6.4875'. [ 1232.619750][T30111] netlink: 'syz.7.4876': attribute type 13 has an invalid length. [ 1232.640202][T30113] IPVS: set_ctl: invalid protocol: 135 224.0.0.2:20002 [ 1232.641243][T30114] netlink: 8 bytes leftover after parsing attributes in process `syz.3.4877'. [ 1232.641263][T30114] netlink: 4 bytes leftover after parsing attributes in process `syz.3.4877'. [ 1232.643715][T30114] netlink: 8 bytes leftover after parsing attributes in process `syz.3.4877'. [ 1232.643733][T30114] netlink: 4 bytes leftover after parsing attributes in process `syz.3.4877'. [ 1232.711966][T18379] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1232.712261][ C0] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1233.090110][T30114] netlink: 'syz.3.4877': attribute type 1 has an invalid length. [ 1233.303006][T30123] xt_ipcomp: unknown flags 1D [ 1233.429759][T25232] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1233.578240][T30127] tipc: Enabling of bearer rejected, already enabled [ 1234.348606][T30149] openvswitch: netlink: Flow actions attr not present in new flow. [ 1234.389322][ C0] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1235.106459][T30165] openvswitch: netlink: Key type 354 is out of range max 32 [ 1235.106700][T30165] openvswitch: netlink: Key type 354 is out of range max 32 [ 1235.106943][T30165] openvswitch: netlink: Key type 354 is out of range max 32 [ 1235.107159][T30165] openvswitch: netlink: Key type 354 is out of range max 32 [ 1235.775055][T30172] __nla_validate_parse: 3 callbacks suppressed [ 1235.775075][T30172] netlink: 16 bytes leftover after parsing attributes in process `syz.7.4890'. [ 1235.841815][T30172] netlink: 12 bytes leftover after parsing attributes in process `syz.7.4890'. [ 1235.841845][T30172] netlink: 12 bytes leftover after parsing attributes in process `syz.7.4890'. [ 1235.937190][T30174] netlink: 16 bytes leftover after parsing attributes in process `syz.6.4891'. [ 1236.079643][ C1] ip6_tunnel: ip6tnl2 xmit: Local address not yet configured! [ 1236.642242][T30186] netlink: 12 bytes leftover after parsing attributes in process `syz.4.4894'. [ 1236.972115][T30198] netlink: 'syz.5.4896': attribute type 21 has an invalid length. [ 1236.972217][T30198] netlink: 132 bytes leftover after parsing attributes in process `syz.5.4896'. [ 1236.972251][T30198] netlink: 28 bytes leftover after parsing attributes in process `syz.5.4896'. [ 1237.990560][T27579] net_ratelimit: 5 callbacks suppressed [ 1237.990580][T27579] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1237.990829][ C1] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1238.389322][ C0] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1239.273563][T27578] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1239.493483][T30232] netlink: 28 bytes leftover after parsing attributes in process `syz.3.4903'. [ 1239.493521][T30232] netlink: 28 bytes leftover after parsing attributes in process `syz.3.4903'. [ 1239.556806][T30236] netlink: 28 bytes leftover after parsing attributes in process `syz.4.4904'. [ 1239.822639][T30240] syzkaller0: entered promiscuous mode [ 1239.822662][T30240] syzkaller0: entered allmulticast mode [ 1240.389375][ C0] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1240.930018][T30246] ip6tnl2: entered allmulticast mode [ 1241.097702][T30246] vlan1: entered allmulticast mode [ 1241.125178][T30252] A link change request failed with some changes committed already. Interface gretap0 may have been left with an inconsistent configuration, please check. [ 1241.126278][T30247] tipc: Enabled bearer , priority 0 [ 1241.219807][T30246] tipc: Resetting bearer [ 1241.342185][T30258] netlink: 24 bytes leftover after parsing attributes in process `syz.3.4909'. [ 1241.890193][T30245] tipc: Disabling bearer [ 1241.972174][T30252] team0: No ports can be present during mode change [ 1241.975900][T27579] ip6_tunnel: ip6tnl2 xmit: Local address not yet configured! [ 1241.976129][T27579] ip6_tunnel: ip6tnl2 xmit: Local address not yet configured! [ 1241.976295][T30260] netlink: 12 bytes leftover after parsing attributes in process `syz.3.4909'. [ 1242.005318][T24954] ip6_tunnel: ip6tnl2 xmit: Local address not yet configured! [ 1242.022455][ T8245] ip6_tunnel: ip6tnl2 xmit: Local address not yet configured! [ 1242.026736][T30265] syzkaller0: left promiscuous mode [ 1242.026759][T30265] syzkaller0: left allmulticast mode [ 1242.389296][ C0] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1242.723247][T30278] netlink: 12 bytes leftover after parsing attributes in process `syz.6.4915'. [ 1242.777713][T30275] netlink: 8 bytes leftover after parsing attributes in process `syz.4.4912'. [ 1242.881656][ T8245] ip6_tunnel: ip6tnl2 xmit: Local address not yet configured! [ 1243.016421][T30275] macvlan3: entered allmulticast mode [ 1243.016516][T30275] erspan0: entered allmulticast mode [ 1243.047668][T30281] bridge0: port 1(bridge_slave_0) entered forwarding state [ 1243.689729][T30299] openvswitch: netlink: Duplicate or invalid key (type 0). [ 1243.689775][T30299] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 1243.750532][T25232] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1243.750837][ C1] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1243.989746][T30297] netlink: 4 bytes leftover after parsing attributes in process `syz.4.4917'. [ 1244.390090][ C0] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1244.825955][T30307] netlink: 68 bytes leftover after parsing attributes in process `syz.7.4921'. [ 1245.021627][T30314] ip6_tables: ip6tables: counters copy to user failed while replacing table [ 1245.033194][T18391] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1245.293305][T30314] netlink: 8 bytes leftover after parsing attributes in process `syz.5.4924'. [ 1246.309882][ C1] ip6_tunnel: ip6tnl2 xmit: Local address not yet configured! [ 1246.312646][T27579] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1246.389274][ C0] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1246.925275][T30345] netlink: 'syz.4.4929': attribute type 1 has an invalid length. [ 1246.925297][T30345] netlink: 16150 bytes leftover after parsing attributes in process `syz.4.4929'. [ 1247.788900][T30355] ipvlan2: entered allmulticast mode [ 1247.788922][T30355] macvlan1: entered allmulticast mode [ 1247.788935][T30355] veth1_vlan: entered allmulticast mode [ 1247.959167][T30355] batman_adv: batadv0: Adding interface: ipvlan2 [ 1247.959189][T30355] batman_adv: batadv0: Interface activated: ipvlan2 [ 1248.306767][T30363] 8021q: adding VLAN 0 to HW filter on device ipvlan2 [ 1248.377321][T30369] netlink: 28 bytes leftover after parsing attributes in process `syz.4.4936'. [ 1248.377358][T30369] netlink: 36 bytes leftover after parsing attributes in process `syz.4.4936'. [ 1248.389429][ C0] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1248.461632][T30372] netlink: 'syz.4.4936': attribute type 1 has an invalid length. [ 1248.461656][T30372] netlink: 224 bytes leftover after parsing attributes in process `syz.4.4936'. [ 1249.460354][T30388] netlink: 'syz.3.4940': attribute type 1 has an invalid length. [ 1249.511445][T25228] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1249.511717][ C1] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1249.692243][T30393] Bluetooth: hci0: invalid length 0, exp 4 for type 32 [ 1249.857993][T30398] netlink: 36 bytes leftover after parsing attributes in process `syz.7.4943'. [ 1250.003200][T30407] netlink: 4 bytes leftover after parsing attributes in process `syz.4.4941'. [ 1250.138744][T30408] netlink: 164 bytes leftover after parsing attributes in process `syz.7.4943'. [ 1250.151852][T27579] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1250.206495][T30388] bridge4: entered promiscuous mode [ 1250.207736][T30388] bridge4: entered allmulticast mode [ 1250.284241][T30388] bond9: (slave bridge4): making interface the new active one [ 1250.284813][T30388] bond9: (slave bridge4): Enslaving as an active interface with an up link [ 1250.389302][ C0] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1251.386336][T30428] netlink: 'syz.7.4947': attribute type 4 has an invalid length. [ 1251.386364][T30428] netlink: 224 bytes leftover after parsing attributes in process `syz.7.4947'. [ 1252.071324][T27580] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1252.133257][T30439] netlink: 8 bytes leftover after parsing attributes in process `syz.7.4951'. [ 1252.389269][ C0] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1254.389304][ C0] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1254.565931][T30483] x_tables: duplicate underflow at hook 1 [ 1254.654430][T30489] netlink: zone id is out of range [ 1254.654448][T30489] netlink: zone id is out of range [ 1254.654455][T30489] netlink: zone id is out of range [ 1254.654463][T30489] netlink: zone id is out of range [ 1254.654471][T30489] netlink: zone id is out of range [ 1254.654479][T30489] netlink: zone id is out of range [ 1254.654490][T30489] netlink: zone id is out of range [ 1254.654498][T30489] netlink: zone id is out of range [ 1254.654507][T30489] netlink: zone id is out of range [ 1254.654515][T30489] netlink: zone id is out of range [ 1255.269291][ C1] ip6_tunnel: ip6tnl2 xmit: Local address not yet configured! [ 1255.344021][T30498] netlink: 12 bytes leftover after parsing attributes in process `syz.3.4962'. [ 1255.517004][T30502] netlink: 8 bytes leftover after parsing attributes in process `syz.6.4963'. [ 1255.518252][T30498] netlink: 20 bytes leftover after parsing attributes in process `syz.3.4962'. [ 1255.624107][T30505] netlink: 'syz.7.4964': attribute type 3 has an invalid length. [ 1255.624137][T30505] netlink: 'syz.7.4964': attribute type 2 has an invalid length. [ 1256.160821][T30521] netlink: 32 bytes leftover after parsing attributes in process `syz.5.4966'. [ 1256.185651][T30509] netlink: 4 bytes leftover after parsing attributes in process `syz.4.4965'. [ 1257.390465][T30541] netlink: 4 bytes leftover after parsing attributes in process `syz.6.4972'. [ 1257.391740][T30541] netlink: 4 bytes leftover after parsing attributes in process `syz.6.4972'. [ 1257.392517][T30541] netlink: 60 bytes leftover after parsing attributes in process `syz.6.4972'. [ 1257.392760][T30541] unsupported nlmsg_type 40 [ 1257.741033][T30544] ip6t_rpfilter: unknown options [ 1258.186289][T30561] netlink: 4 bytes leftover after parsing attributes in process `syz.7.4975'. [ 1258.488216][T30564] team0: Device vti1 is of different type [ 1258.711525][T30561] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 1258.766924][T30569] netlink: 'syz.6.4976': attribute type 11 has an invalid length. [ 1258.827207][T30571] netlink: 'syz.4.4977': attribute type 1 has an invalid length. [ 1258.827232][T30571] netlink: 224 bytes leftover after parsing attributes in process `syz.4.4977'. [ 1258.827247][T30571] NCSI netlink: No device for ifindex 0 [ 1258.917897][T30561] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 1260.174905][T30578] netlink: 4 bytes leftover after parsing attributes in process `syz.7.4979'. [ 1260.389279][ C0] net_ratelimit: 232 callbacks suppressed [ 1260.389301][ C0] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1260.797683][T30604] netlink: 164 bytes leftover after parsing attributes in process `syz.4.4985'. [ 1260.867963][T30604] netlink: 9 bytes leftover after parsing attributes in process `syz.4.4985'. [ 1260.867986][T30604] netlink: 44 bytes leftover after parsing attributes in process `syz.4.4985'. [ 1260.868004][T30604] netlink: 9 bytes leftover after parsing attributes in process `syz.4.4985'. [ 1261.030984][T27578] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1261.031271][ C1] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1261.670454][T25232] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1262.389327][ C0] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1262.808500][T30632] syzkaller1: entered promiscuous mode [ 1262.808524][T30632] syzkaller1: entered allmulticast mode [ 1262.950436][T25227] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1264.389251][ C0] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1265.878778][T30663] __nla_validate_parse: 1 callbacks suppressed [ 1265.878799][T30663] netlink: 12 bytes leftover after parsing attributes in process `syz.6.4995'. [ 1265.951265][T30664] netlink: 8 bytes leftover after parsing attributes in process `syz.5.4994'. [ 1266.389358][ C0] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1266.465933][T30676] netlink: 16 bytes leftover after parsing attributes in process `syz.3.4997'. [ 1266.716683][T30636] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1266.836995][T22881] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1266.837319][ C1] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1267.374948][T30694] netlink: 51 bytes leftover after parsing attributes in process `syz.4.4999'. [ 1268.015426][T30704] netlink: 'syz.3.5001': attribute type 1 has an invalid length. [ 1268.342132][T30714] netlink: 8 bytes leftover after parsing attributes in process `syz.4.5004'. [ 1268.389281][ C0] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1268.713208][T25240] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1269.304804][T30726] netlink: 'syz.4.5007': attribute type 1 has an invalid length. [ 1269.304854][T30726] netlink: 756 bytes leftover after parsing attributes in process `syz.4.5007'. [ 1269.647544][T30742] netlink: 92 bytes leftover after parsing attributes in process `syz.5.5009'. [ 1269.895279][T30748] netlink: 4 bytes leftover after parsing attributes in process `syz.5.5009'. [ 1270.389266][ C0] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1270.562060][ C1] ================================================================== [ 1270.562079][ C1] BUG: KASAN: double-free in rcu_free_sheaf+0x31/0x200 [ 1270.562111][ C1] Free of addr ffff88802179e400 by task ksoftirqd/1/24 [ 1270.562127][ C1] [ 1270.562141][ C1] CPU: 1 UID: 0 PID: 24 Comm: ksoftirqd/1 Not tainted syzkaller #0 PREEMPT(full) [ 1270.562174][ C1] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/24/2026 [ 1270.562188][ C1] Call Trace: [ 1270.562197][ C1] [ 1270.562208][ C1] dump_stack_lvl+0xe8/0x150 [ 1270.562241][ C1] print_address_description+0x55/0x1e0 [ 1270.562273][ C1] print_report+0x58/0x70 [ 1270.562299][ C1] ? rcu_free_sheaf+0x31/0x200 [ 1270.562319][ C1] kasan_report_invalid_free+0xea/0x110 [ 1270.562349][ C1] ? rcu_free_sheaf+0x31/0x200 [ 1270.562373][ C1] ? rcu_free_sheaf+0x31/0x200 [ 1270.562400][ C1] __kasan_slab_pre_free+0x104/0x120 [ 1270.562426][ C1] __rcu_free_sheaf_prepare+0x10a/0x2a0 [ 1270.562457][ C1] ? rcu_core+0x8a8/0x1260 [ 1270.562481][ C1] rcu_free_sheaf+0x31/0x200 [ 1270.562504][ C1] ? _raw_spin_unlock_irqrestore+0x30/0x80 [ 1270.562532][ C1] ? __pfx_rcu_free_sheaf+0x10/0x10 [ 1270.562555][ C1] ? rcu_core+0x8a8/0x1260 [ 1270.562578][ C1] rcu_core+0x926/0x1260 [ 1270.562609][ C1] ? __pfx_rcu_core+0x10/0x10 [ 1270.562642][ C1] handle_softirqs+0x226/0x860 [ 1270.562671][ C1] ? schedule+0x90/0x2b0 [ 1270.562695][ C1] ? run_ksoftirqd+0x36/0x60 [ 1270.562730][ C1] ? smpboot_thread_fn+0x4e/0xa70 [ 1270.562762][ C1] run_ksoftirqd+0x36/0x60 [ 1270.562792][ C1] smpboot_thread_fn+0x565/0xa70 [ 1270.562824][ C1] ? smpboot_thread_fn+0x4e/0xa70 [ 1270.562860][ C1] kthread+0x38b/0x480 [ 1270.562882][ C1] ? __pfx_smpboot_thread_fn+0x10/0x10 [ 1270.562913][ C1] ? __pfx_kthread+0x10/0x10 [ 1270.562935][ C1] ret_from_fork+0x514/0xb70 [ 1270.562957][ C1] ? __pfx_ret_from_fork+0x10/0x10 [ 1270.562978][ C1] ? __switch_to+0xc89/0x1420 [ 1270.563009][ C1] ? __pfx_kthread+0x10/0x10 [ 1270.563031][ C1] ret_from_fork_asm+0x1a/0x30 [ 1270.563073][ C1] [ 1270.563081][ C1] [ 1270.563087][ C1] Allocated by task 18391: [ 1270.563098][ C1] kasan_save_track+0x3e/0x80 [ 1270.563120][ C1] __kasan_kmalloc+0x93/0xb0 [ 1270.563142][ C1] __kmalloc_cache_noprof+0x321/0x600 [ 1270.563171][ C1] hwsim_update_pib+0x7e/0x400 [ 1270.563199][ C1] hwsim_set_promiscuous_mode+0x196/0x2e0 [ 1270.563228][ C1] drv_set_promiscuous_mode+0x159/0x2e0 [ 1270.563253][ C1] drv_start+0x4ea/0x1010 [ 1270.563275][ C1] mac802154_scan_worker+0x8e6/0xe60 [ 1270.563299][ C1] process_scheduled_works+0xc3d/0x1630 [ 1270.563325][ C1] worker_thread+0xa47/0xfb0 [ 1270.563352][ C1] kthread+0x38b/0x480 [ 1270.563370][ C1] ret_from_fork+0x514/0xb70 [ 1270.563387][ C1] ret_from_fork_asm+0x1a/0x30 [ 1270.563418][ C1] [ 1270.563423][ C1] Freed by task 24: [ 1270.563433][ C1] kasan_save_track+0x3e/0x80 [ 1270.563454][ C1] kasan_save_free_info+0x40/0x50 [ 1270.563482][ C1] __kasan_slab_free+0x5c/0x80 [ 1270.563504][ C1] __rcu_free_sheaf_prepare+0x12d/0x2a0 [ 1270.563530][ C1] rcu_free_sheaf+0x31/0x200 [ 1270.563550][ C1] rcu_core+0x926/0x1260 [ 1270.563570][ C1] handle_softirqs+0x226/0x860 [ 1270.563600][ C1] run_ksoftirqd+0x36/0x60 [ 1270.563629][ C1] smpboot_thread_fn+0x565/0xa70 [ 1270.563657][ C1] kthread+0x38b/0x480 [ 1270.563675][ C1] ret_from_fork+0x514/0xb70 [ 1270.563692][ C1] ret_from_fork_asm+0x1a/0x30 [ 1270.563722][ C1] [ 1270.563728][ C1] The buggy address belongs to the object at ffff88802179e400 [ 1270.563728][ C1] which belongs to the cache kmalloc-64 of size 64 [ 1270.563747][ C1] The buggy address is located 0 bytes inside of [ 1270.563747][ C1] 64-byte region [ffff88802179e400, ffff88802179e440) [ 1270.563769][ C1] [ 1270.563776][ C1] The buggy address belongs to the physical page: [ 1270.563793][ C1] page: refcount:0 mapcount:0 mapping:0000000000000000 index:0xffff88802179e380 pfn:0x2179e [ 1270.563815][ C1] flags: 0xfff00000000200(workingset|node=0|zone=1|lastcpupid=0x7ff) [ 1270.563835][ C1] page_type: f5(slab) [ 1270.563855][ C1] raw: 00fff00000000200 ffff88801b0418c0 ffffea0001f82e90 ffffea0001cee1d0 [ 1270.563876][ C1] raw: ffff88802179e380 000000000020000f 00000000f5000000 0000000000000000 [ 1270.563888][ C1] page dumped because: kasan: bad access detected [ 1270.563903][ C1] page_owner tracks the page as allocated [ 1270.563911][ C1] page last allocated via order 0, migratetype Unmovable, gfp_mask 0xd2c40(GFP_NOFS|__GFP_NOWARN|__GFP_NORETRY|__GFP_COMP|__GFP_NOMEMALLOC), pid 5623, tgid 5623 (syz-executor), ts 387577658270 [ 1270.563945][ C1] post_alloc_hook+0x1f9/0x250 [ 1270.563975][ C1] get_page_from_freelist+0x2209/0x2280 [ 1270.563998][ C1] __alloc_frozen_pages_noprof+0x217/0x5a0 [ 1270.564020][ C1] allocate_slab+0x7d/0x620 [ 1270.564046][ C1] refill_objects+0x2d5/0x350 [ 1270.564073][ C1] __pcs_replace_empty_main+0x2c8/0x6c0 [ 1270.564099][ C1] __kmalloc_noprof+0x47b/0x720 [ 1270.564117][ C1] tomoyo_encode+0x2ad/0x570 [ 1270.564144][ C1] tomoyo_realpath_from_path+0x5fa/0x640 [ 1270.564178][ C1] tomoyo_path_perm+0x283/0x560 [ 1270.564199][ C1] tomoyo_path_unlink+0xaa/0xf0 [ 1270.564243][ C1] security_path_unlink+0x15f/0x330 [ 1270.564272][ C1] filename_unlinkat+0x349/0x610 [ 1270.564295][ C1] __se_sys_unlink+0x2e/0x140 [ 1270.564318][ C1] do_syscall_64+0x166/0x520 [ 1270.564345][ C1] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1270.564366][ C1] page last free pid 15129 tgid 15119 ts 387571704235 stack trace: [ 1270.564382][ C1] __free_frozen_pages+0xc93/0xd90 [ 1270.564413][ C1] tlb_finish_mmu+0x13e/0x220 [ 1270.564433][ C1] exit_mmap+0x4b2/0x9f0 [ 1270.564462][ C1] __mmput+0x118/0x420 [ 1270.564485][ C1] exit_mm+0x221/0x2d0 [ 1270.564503][ C1] do_exit+0x6cd/0x2360 [ 1270.564521][ C1] do_group_exit+0x22d/0x2f0 [ 1270.564541][ C1] get_signal+0x121b/0x12c0 [ 1270.564565][ C1] arch_do_signal_or_restart+0xbb/0x860 [ 1270.564595][ C1] exit_to_user_mode_loop+0x10e/0x770 [ 1270.564615][ C1] do_syscall_64+0x328/0x520 [ 1270.564642][ C1] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1270.564663][ C1] [ 1270.564668][ C1] Memory state around the buggy address: [ 1270.564680][ C1] ffff88802179e300: 00 00 00 00 00 00 00 fc fc fc fc fc fc fc fc fc [ 1270.564695][ C1] ffff88802179e380: fa fb fb fb fb fb fb fb fc fc fc fc fc fc fc fc [ 1270.564710][ C1] >ffff88802179e400: fa fb fb fb fb fb fb fb fc fc fc fc fc fc fc fc [ 1270.564722][ C1] ^ [ 1270.564733][ C1] ffff88802179e480: 00 00 00 00 00 00 00 00 fc fc fc fc fc fc fc fc [ 1270.564748][ C1] ffff88802179e500: 00 00 00 00 00 00 00 fc fc fc fc fc fc fc fc fc [ 1270.564759][ C1] ================================================================== [ 1270.564781][ C1] Kernel panic - not syncing: KASAN: panic_on_warn set ... [ 1271.218831][ C1] CPU: 1 UID: 0 PID: 24 Comm: ksoftirqd/1 Not tainted syzkaller #0 PREEMPT(full) [ 1271.228034][ C1] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/24/2026 [ 1271.238092][ C1] Call Trace: [ 1271.241375][ C1] [ 1271.244315][ C1] vpanic+0x56d/0xa60 [ 1271.248321][ C1] ? __pfx_vpanic+0x10/0x10 [ 1271.252844][ C1] panic+0xc5/0xd0 [ 1271.256586][ C1] ? __pfx_panic+0x10/0x10 [ 1271.261035][ C1] ? rcu_is_watching+0x16/0xb0 [ 1271.265825][ C1] check_panic_on_warn+0x89/0xb0 [ 1271.270779][ C1] end_report+0x73/0x170 [ 1271.275038][ C1] ? rcu_free_sheaf+0x31/0x200 [ 1271.279811][ C1] kasan_report_invalid_free+0xfa/0x110 [ 1271.285377][ C1] ? rcu_free_sheaf+0x31/0x200 [ 1271.290150][ C1] ? rcu_free_sheaf+0x31/0x200 [ 1271.294918][ C1] __kasan_slab_pre_free+0x104/0x120 [ 1271.300212][ C1] __rcu_free_sheaf_prepare+0x10a/0x2a0 [ 1271.305771][ C1] ? rcu_core+0x8a8/0x1260 [ 1271.310195][ C1] rcu_free_sheaf+0x31/0x200 [ 1271.314793][ C1] ? _raw_spin_unlock_irqrestore+0x30/0x80 [ 1271.320611][ C1] ? __pfx_rcu_free_sheaf+0x10/0x10 [ 1271.325829][ C1] ? rcu_core+0x8a8/0x1260 [ 1271.330251][ C1] rcu_core+0x926/0x1260 [ 1271.334509][ C1] ? __pfx_rcu_core+0x10/0x10 [ 1271.339203][ C1] handle_softirqs+0x226/0x860 [ 1271.343991][ C1] ? schedule+0x90/0x2b0 [ 1271.348249][ C1] ? run_ksoftirqd+0x36/0x60 [ 1271.352860][ C1] ? smpboot_thread_fn+0x4e/0xa70 [ 1271.357907][ C1] run_ksoftirqd+0x36/0x60 [ 1271.362349][ C1] smpboot_thread_fn+0x565/0xa70 [ 1271.367321][ C1] ? smpboot_thread_fn+0x4e/0xa70 [ 1271.372376][ C1] kthread+0x38b/0x480 [ 1271.376450][ C1] ? __pfx_smpboot_thread_fn+0x10/0x10 [ 1271.381921][ C1] ? __pfx_kthread+0x10/0x10 [ 1271.386518][ C1] ret_from_fork+0x514/0xb70 [ 1271.391126][ C1] ? __pfx_ret_from_fork+0x10/0x10 [ 1271.396243][ C1] ? __switch_to+0xc89/0x1420 [ 1271.400932][ C1] ? __pfx_kthread+0x10/0x10 [ 1271.405529][ C1] ret_from_fork_asm+0x1a/0x30 [ 1271.410326][ C1] [ 1271.413625][ C1] Kernel Offset: disabled [ 1271.417940][ C1] Rebooting in 86400 seconds..