last executing test programs: 5m39.067529903s ago: executing program 3 (id=6591): r0 = bpf$BPF_PROG_WITH_BTFID_LOAD(0x5, &(0x7f0000000280)=@bpf_lsm={0x6, 0x3, &(0x7f00000003c0)=ANY=[@ANYBLOB="18000000003f000000000000000000f195"], &(0x7f0000000140)='GPL\x00'}, 0x80) r1 = bpf$ITER_CREATE(0xb, &(0x7f00000004c0)={r0}, 0x8) close(r1) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000080)={&(0x7f0000000040)=ANY=[@ANYBLOB="9feb0100180000000000000020000000200000000400000001000000000000010400000020000000010000000000000108"], 0x0, 0x3c}, 0x28) r4 = bpf$MAP_CREATE(0x0, &(0x7f00000005c0)=ANY=[@ANYRES32=r2, @ANYRESHEX=r3, @ANYRESDEC=r3], 0x40) bpf$MAP_UPDATE_CONST_STR(0x2, &(0x7f0000000240)={{r4, 0xffffffffffffffff}, &(0x7f00000000c0), &(0x7f0000000140)='%+9llu \x00'}, 0x20) r6 = bpf$ITER_CREATE(0xb, &(0x7f0000000100), 0x0) close(0x4) r7 = bpf$BPF_PROG_WITH_BTFID_LOAD(0x5, &(0x7f0000002c80)=@bpf_ext={0x1c, 0x17, &(0x7f0000000900)=ANY=[@ANYBLOB="180000000200000000000000faffffff18110000", @ANYRES32=r6, @ANYBLOB="0000000000000000b702000014000000b7030000000000008500000083000000bf0900000000000055090100000000009500000000000000850000e80300000018400000040000000000000000000000852000000400000018110000", @ANYRES32=r1, @ANYBLOB="0000000000000000b7020000000000008500000086000000bf91000000000000b7020000010000008500000085000000b7000000000000009500000000000000"], &(0x7f0000001a40)='GPL\x00', 0x0, 0x1000, &(0x7f0000001a80)=""/4096, 0x41000, 0x4b, '\x00', 0x0, 0x0, r6, 0x8, &(0x7f0000002ac0)={0x5, 0x3}, 0x8, 0x10, &(0x7f0000002b00)={0x0, 0x10, 0x80000001}, 0x10, 0x214a5, 0xffffffffffffffff, 0x4, &(0x7f0000002c00)=[r4, r4, r5, r5, 0xffffffffffffffff, r5, r4, r6], &(0x7f0000000600)=[{0x3, 0x4, 0xb, 0xb}, {0x2, 0x5, 0x1}, {0x1, 0x1, 0x3, 0xc}, {0x4, 0x3, 0xd, 0x4}], 0x10, 0x3}, 0x94) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000740)={r7, 0xffff0000, 0x0, 0x0, 0x0, 0x0, 0x1000000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffff0000}, 0x50) r8 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r9 = syz_genetlink_get_family_id$nbd(&(0x7f00000000c0), 0xffffffffffffffff) socketpair$nbd(0x1, 0x1, 0x0, &(0x7f0000000100)={0xffffffffffffffff}) bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000040)={&(0x7f0000000640)={{0xeb9f, 0x1, 0x0, 0x18, 0x0, 0x64, 0x64, 0x4, [@datasec={0x2, 0x1, 0x0, 0xf, 0x3, [{0x2, 0x1, 0x3}], "44942d"}, @datasec={0x0, 0x5, 0x0, 0xf, 0x1, [{0x4, 0xffff, 0x2}, {0x5, 0x5, 0x7f}, {0x4, 0x20002}, {0x3, 0xa, 0x800}, {0x2, 0x3, 0x1}], "9a"}]}, {0x0, [0x2e, 0x2e]}}, 0x0, 0x80, 0x0, 0x1}, 0x28) socketpair$nbd(0x1, 0x1, 0x0, &(0x7f0000000040)={0xffffffffffffffff}) sendmsg$NBD_CMD_RECONFIGURE(r8, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000180)=ANY=[@ANYBLOB='D\x00\x00\x00', @ANYRES16=r9, @ANYBLOB="63812bbd7000fcdbdf25030000000800010000000000280007800c00018008000100", @ANYRES32=r10, @ANYBLOB="0c00018008000100", @ANYRES32=r11], 0x44}, 0x1, 0x0, 0x0, 0x440c0}, 0x40040) socket$inet6(0xa, 0x5, 0x0) r12 = socket$netlink(0x10, 0x3, 0x0) r13 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000180), 0xffffffffffffffff) r14 = socket$nl_generic(0x10, 0x3, 0x10) r15 = syz_genetlink_get_family_id$wireguard(&(0x7f0000000040), 0xffffffffffffffff) sendmsg$WG_CMD_SET_DEVICE(r14, &(0x7f0000000280)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000001940)=ANY=[@ANYBLOB="40010000", @ANYRES16=r15, @ANYBLOB="01000000000004000000010000002400030000000000000000000000000000000000000000000000000000000000000000001400020077673100000000000000000000000000f4000880"], 0x140}, 0x1, 0x0, 0x0, 0x8000}, 0x0) sendmsg$WG_CMD_SET_DEVICE(r14, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000140)={0x4c, r15, 0x1, 0x70bd2d, 0x25dfdbfc, {}, [@WGDEVICE_A_IFNAME={0x14, 0x2, 'wg1\x00'}, @WGDEVICE_A_PRIVATE_KEY={0x24, 0x3, @a}]}, 0x4c}, 0x1, 0x0, 0x0, 0x40090}, 0x44000) sendmsg$NL80211_CMD_SET_STATION(r12, &(0x7f0000000240)={&(0x7f0000000100)={0x10, 0x0, 0x0, 0x20000}, 0xc, &(0x7f0000000200)={&(0x7f00000001c0)={0x28, r13, 0x100, 0x70bd2d, 0x25dfdbfc, {{}, {@void, @val={0xc, 0x99, {0x6, 0x37}}}}, [@NL80211_ATTR_AIRTIME_WEIGHT={0x6, 0x112, 0x3}]}, 0x67}, 0x1, 0x0, 0x0, 0x4000020}, 0x40040) sendmsg$nl_generic(0xffffffffffffffff, &(0x7f0000000000)={0x0, 0x0, &(0x7f00000007c0)={&(0x7f00000004c0)=ANY=[@ANYBLOB="18000000260001031dbd7002fadbdf25010000000400ae"], 0x18}}, 0x0) getsockopt$inet_sctp6_SCTP_AUTH_ACTIVE_KEY(r1, 0x84, 0x18, &(0x7f0000000400)={0x0, 0x1}, &(0x7f0000000440)=0x8) setsockopt$inet_sctp_SCTP_ADD_STREAMS(r6, 0x84, 0x79, &(0x7f0000000480)={r16, 0x7, 0x3}, 0x8) recvmmsg(0xffffffffffffffff, &(0x7f0000000800)=[{{0x0, 0x0, &(0x7f00000009c0)=[{&(0x7f0000000500)=""/145, 0x91}, {&(0x7f0000003800)=""/4133, 0x1025}, {&(0x7f0000000040)=""/185, 0xb9}, {&(0x7f0000000340)=""/122, 0x7a}, {&(0x7f0000000a40)=""/4093, 0xffd}, {&(0x7f0000000280)=""/65, 0x41}, {&(0x7f0000000300)=""/22, 0x16}], 0x7}, 0xd}, {{0x0, 0x0, 0x0}, 0xffff}, {{0x0, 0x0, 0x0}, 0x10001}, {{0x0, 0x0, 0x0}, 0x7}], 0x4, 0x40000102, 0x0) 5m38.423650807s ago: executing program 3 (id=6595): r0 = socket$inet6_mptcp(0xa, 0x1, 0x106) bind$inet6(r0, &(0x7f0000000040)={0xa, 0x4e22, 0xfffffffc, @empty, 0x7}, 0x1c) r1 = socket$nl_generic(0x10, 0x3, 0x10) r2 = syz_genetlink_get_family_id$mptcp(&(0x7f0000000000), 0xffffffffffffffff) sendmsg$MPTCP_PM_CMD_ADD_ADDR(r1, &(0x7f0000000400)={0x0, 0x0, &(0x7f00000003c0)={&(0x7f0000000300)={0x38, r2, 0x1, 0x0, 0x0, {}, [@MPTCP_PM_ATTR_ADDR={0x24, 0x1, 0x0, 0x1, [@MPTCP_PM_ADDR_ATTR_PORT={0x6, 0x5, 0x4e23}, @MPTCP_PM_ADDR_ATTR_FAMILY={0x6, 0x1, 0x2}, @MPTCP_PM_ADDR_ATTR_ADDR4={0x8, 0x3, @multicast1=0xac1414aa}, @MPTCP_PM_ADDR_ATTR_FLAGS={0x8, 0x6, 0x1}]}]}, 0x38}}, 0x0) mmap(&(0x7f0000001000/0xc00000)=nil, 0xc00000, 0x0, 0x3032, 0xffffffffffffffff, 0x0) r3 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000680)={0x11, 0x13, &(0x7f0000001bc0)=ANY=[], &(0x7f0000000780)='GPL\x00', 0xa, 0xde, &(0x7f00000007c0)=""/222, 0x0, 0x8}, 0x94) listen(r0, 0xc) r4 = socket$inet_mptcp(0x2, 0x1, 0x106) connect$inet(r4, &(0x7f0000000000)={0x2, 0x4e22, @local}, 0x10) connect$bt_l2cap(0xffffffffffffffff, &(0x7f0000000000)={0x1f, 0x5, @fixed={'\xaa\xaa\xaa\xaa\xaa', 0x10}}, 0xe) sendmsg$nl_route(0xffffffffffffffff, 0x0, 0x0) r5 = socket$nl_generic(0x10, 0x3, 0x10) r6 = syz_genetlink_get_family_id$mptcp(&(0x7f0000000740), 0xffffffffffffffff) sendmsg$MPTCP_PM_CMD_FLUSH_ADDRS(r5, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000180)={&(0x7f00000004c0)=ANY=[@ANYBLOB="60ea4488", @ANYRES16=r6, @ANYBLOB="01002cbd7000ffdbdf2504000000"], 0x14}, 0x1, 0x0, 0x0, 0x20048001}, 0x800) sendmsg$NL80211_CMD_DEL_PMKSA(0xffffffffffffffff, &(0x7f0000000140)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x2000000}, 0xc, 0x0, 0x1, 0x0, 0x0, 0x40}, 0x400c4) r7 = socket$l2tp(0x2, 0x2, 0x73) bind$inet(r7, &(0x7f0000000000)={0x2, 0x0, @multicast1}, 0x10) r8 = openat$cgroup_ro(0xffffffffffffffff, &(0x7f00000001c0)='cgroup.controllers\x00', 0x0, 0x0) setsockopt$bt_l2cap_L2CAP_OPTIONS(r8, 0x6, 0x1, &(0x7f0000000100)={0xe29, 0x9, 0xdc, 0x3, 0x9, 0x7}, 0xc) syz_emit_ethernet(0x6a, &(0x7f0000000ac0)={@link_local, @random="b4f2ec364c11", @void, {@ipv4={0x800, @udp={{0x5, 0x4, 0x0, 0x0, 0x5c, 0x65, 0x0, 0x0, 0x73, 0x0, @private=0x1300, @loopback}, {0x0, 0x0, 0x48, 0x0, @wg=@cookie={0x3, 0x0, "fe9a9b3f22f458defa066e53cd606a387d616b5c8cb62c4e", "b8194ec0d8334f07299969c3ebeb302be860d389e75269e5b939251bf0709b2f"}}}}}}, 0x0) r9 = bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000200)={0x6, 0x3, &(0x7f0000000080)=ANY=[@ANYBLOB="1800000002000000000000000008082295"], &(0x7f0000000180)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x22}, 0x94) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000600)={r9, 0x5, 0x50, 0x0, &(0x7f0000000000)="ff", 0x0, 0x36, 0x503, 0x0, 0x0, 0x0, 0x0, 0x2, 0xffff80fe}, 0x50) close(r7) unshare(0x6a020400) ioctl$sock_ipv6_tunnel_SIOCCHGTUNNEL(r8, 0x89f3, &(0x7f0000000440)={'ip6_vti0\x00', &(0x7f0000000340)={'ip6_vti0\x00', 0x0, 0x4, 0xa, 0x55, 0x9, 0x6d, @initdev={0xfe, 0x88, '\x00', 0x0, 0x0}, @initdev={0xfe, 0x88, '\x00', 0x1, 0x0}, 0x1, 0x80, 0x4, 0x401}}) r11 = bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000001b40)={0x2, 0x4, 0x8, 0x1, 0x80, 0x1, 0x0, '\x00', r10, 0xffffffffffffffff, 0x5, 0x5, 0x4}, 0x50) r12 = socket$xdp(0x2c, 0x3, 0x0) ioctl$BTRFS_IOC_GET_SUBVOL_INFO(r3, 0x81f8943c, &(0x7f00000008c0)={0x0, ""/256, 0x0, 0x0, 0x0, 0x0, ""/16, ""/16, ""/16, 0x0}) ioctl$BTRFS_IOC_RM_DEV_V2(r11, 0x5000943a, &(0x7f0000000b40)={{r12}, r13, 0x2, @inherit={0x78, &(0x7f0000000500)=ANY=[@ANYBLOB="0100000000000019060000ffffffef0001000000000000800600000000000000100000000000000004000000000000000693a1186c00000007000000000000000000000000000000001000000000000004000000000000000000000000000400010001000000000009000000000000000300000000000000", @ANYRES8=r7, @ANYRESHEX=r7]}, @subvolid=0x9}) 5m35.33493466s ago: executing program 3 (id=6607): r0 = bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000440)={&(0x7f00000006c0)=ANY=[@ANYBLOB="9feb010018000000000000004c0000004c0000002a0000000100000000000001040000002000000105000000010000040400000013000000010000000000000017000000020000040800000021000000010000000000000025000000020000002000000000696e74006270665f7370696e5f6c6f636b0076616c006d61705f76616c756500636e74006c"], 0x0, 0x8e}, 0x28) r1 = bpf$MAP_CREATE(0x0, &(0x7f0000000780)=@base={0x2, 0x4, 0x8, 0x1, 0x0, 0x0, 0x0, '\x00', 0x0, r0, 0x1, 0x3}, 0x48) bpf$PROG_LOAD(0x5, &(0x7f0000000940)={0x16, 0x10, &(0x7f0000000a00)=ANY=[@ANYBLOB="bfa200000000004007020000fcffffff620200000000000018110000", @ANYRES32=r1, @ANYBLOB="000000000000000085000000010000001500070000000000bf06000000000000bf610000000000000701000004000000850000005d000000bf610000000000000701000004000000850000005e000000b70000000000000095"], &(0x7f0000000a80)='GPL\x00', 0x7, 0x1000, &(0x7f00000010c0)=""/4096, 0x2a079ff5b90a2b9f, 0x0, '\x00', 0x0, @fallback=0x26, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) 5m34.603772505s ago: executing program 3 (id=6609): bpf$PROG_LOAD(0x5, &(0x7f0000000180)={0x6, 0x13, &(0x7f0000000040)=ANY=[@ANYBLOB="18020000000000000000000000000000180100002020702500000000002020207baaf8ff00000000bda106000000000047010000f8ffffffb702"], 0x0, 0xa, 0x0, 0x0, 0x0, 0xc, '\x00', 0x0, @xdp, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r0 = socket(0x10, 0x80002, 0x0) sendmsg$nl_route(0xffffffffffffffff, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000040)=ANY=[@ANYBLOB="4800000010001fff0000056800080000faff0000", @ANYRES32=0x0, @ANYBLOB="c30c424700000000280012800a00010076786c616e00000018000280140010", @ANYRES8=0x0, @ANYRES8], 0x48}}, 0x0) sendmmsg$alg(r0, &(0x7f00000000c0), 0x492492492492627, 0x0) r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000007c0)='blkio.bfq.io_service_bytes\x00', 0x275a, 0x0) write$cgroup_int(r1, &(0x7f0000000800), 0xffffffc1) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x2, 0x22052, r1, 0x0) bpf$BPF_PROG_QUERY(0x10, &(0x7f0000000780)={@map=r1, 0x13, 0x1, 0x9, &(0x7f0000000000)=[0x0, 0x0, 0x0, 0x0], 0x4, 0x0, &(0x7f00000006c0)=[0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0], &(0x7f0000000700)=[0x0, 0x0, 0x0, 0x0], &(0x7f0000000740)=[0x0, 0x0, 0x0, 0x0, 0x0, 0x0]}, 0x40) sendmsg(r0, &(0x7f0000000940)={&(0x7f0000000100)=@in={0x2, 0x4e23, @multicast2}, 0x80, &(0x7f0000000640)=[{&(0x7f0000000240)="7e1e778766ca85bc5eb53df6542e190bf2c8a11ce4c6f81b8e5a110b8e0afa5c4d982a1fbb309a5e6464a41eccba8fa117ea81af8d16c8cf1c21cc35f621de97c557f11951053d63550b9c", 0x4b}, {&(0x7f00000002c0)="012bd9c649f2c17356e18ad14ffb29a01f439172633354845c7f928e22ff2fb456f9678c1c597e8168483d658620cc9b75ea37c56c34e75fcb863c1cb9231a44b26af0e9018581ea9eff71020f6c862a561d13f3695e11ffcc62bb764fe2584def51d8f5ff762efe4a9a6f3c25d7cbfee148abaf32520861a4b6a208a1fb504f47668710615c47eec584fdbb8485a28047de167d4cf8045a5b5e4b275e", 0x9d}, {&(0x7f0000000380)="95c9e7276d64be8289754e0b391a65922efecada08936d7234a949d8db128eeb40363ed3f3a239e54806162654862f84169b4cb8800733c8b9a32a08db2476439710d3476b330b45514da59fbeea435015ad178136eedbb525c5d3660666977b1a318d3dba487deccca8a24dff91612456c887f6690d8085bfc2f8222d8ea07809805fbf649cb5ab1c3f92638ab1f4034e26c87fe03a43ef6255a0f03a074e7a20141632c448848fedbdd9895386a972a2b07cd1dcd189ee1f27f9d95cb5d30b6b5ecd9132ec044d565b619eb0d8525bc466a96436af2c8ea6a4539ad61d2234171feed272d5f80c", 0xe8}, {&(0x7f0000000480)="a6e07ff0821052c9efbcbeda96d2d87ffdb75c9617e6e2588a1f8bd03596b6d056c5e52280c107fdfb6740aea00ef925a5e782b7e451a32d28f303cd99f3491a041fb7d6038111eec3df58461ec5", 0x4e}, {&(0x7f0000000500)="c9259cf9695b02316c3b09c59d9096ee8337a3f0558d82690195949feeed6e6833eb7419f574087a1dc9ae5dc62a935571ccb398c6984f05c5211203a82b5edf4354c07a30489129124dd378", 0x4c}, {&(0x7f0000000580)="092ebb999bd457188ade20cc500a81a33781576c84a46511492e6e500c", 0x1d}, {&(0x7f00000005c0)="6d2631282c12e66b074b164dc2f342c976993324aa9e7c76c5c49d44dfd0aaf849d58655f34efdd030c5877161cde9ea849edf8ca9542bf2c6bdb53095d7e40ad9bba2b9971f4fe45b065934c492d2ff07cafbc4a3ec013bcb743da9799643db8e693d86ed34fad6c2e9318b9c98522c20391e3311d199", 0x77}], 0x7, &(0x7f0000000980)=ANY=[@ANYBLOB="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"], 0x250}, 0x40) 5m33.192650896s ago: executing program 3 (id=6614): r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000040), 0x0, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f00000001c0)={'syzkaller0\x00', 0x7101}) ioctl$TUNSETQUEUE(r0, 0x400454d9, &(0x7f0000000200)={'ipvlan1\x00', 0x400}) r1 = openat$tun(0xffffffffffffff9c, &(0x7f0000000400), 0x0, 0x0) close(r1) socketpair$unix(0x1, 0x1, 0x0, &(0x7f00000005c0)) ioctl$SIOCSIFHWADDR(r1, 0x8943, &(0x7f0000000600)={'syzkaller0\x00'}) socket$nl_netfilter(0x10, 0x3, 0xc) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000100c00)={0x6, 0x5, &(0x7f0000100cc0)=@framed={{0x18, 0x0, 0x0, 0x0, 0x40, 0x0, 0x0, 0x0, 0xffffff15}, [@kfunc={0x85, 0x0, 0x2, 0x0, 0x348b3}, @call={0x85, 0x0, 0x0, 0xa0}]}, &(0x7f0000100d00)='GPL\x00', 0x1, 0x0, 0x0, 0x41100, 0x0, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0xd4}, 0x94) r2 = socket$inet_smc(0x2b, 0x1, 0x0) r3 = bpf$MAP_CREATE(0x0, &(0x7f0000000700)=ANY=[@ANYBLOB="0100000004000000080000000a"], 0x48) r4 = bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000740)={&(0x7f0000000780)=ANY=[@ANYBLOB="9feb0100180000000000000034000000340000000e00000001000000000000010400000020000001000000000000000d01000000050000000000000c020000000a0000000000000c0200000000696e74006d61696e0073"], 0x0, 0x5a}, 0x28) close(0x3) bpf$MAP_CREATE(0x0, &(0x7f0000000800)=@base={0x19, 0x4, 0x4, 0x2, 0x0, 0x1, 0xfffffffc}, 0x50) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000980)={0xffffffffffffffff, 0x0, 0x5, 0x0, &(0x7f0000000a00)="0900000004", 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x50) bpf$PROG_LOAD(0x5, &(0x7f0000000a40)={0x5, 0xb, &(0x7f0000000b00)=ANY=[@ANYBLOB="18110000", @ANYRES32=r3, @ANYBLOB="000000000000000018420000060000000000000000000000b703000000000000b70400000000000085000000a4000000b7000000000000009500000000000000b7000000000000009500000000000000"], &(0x7f0000000b80)='GPL\x00', 0x1, 0x100000, &(0x7f0000000bc0)=""/1048576, 0x0, 0x0, '\x00', 0x0, @fallback, r4, 0x8, &(0x7f0000100bc0)={0x0, 0x3}, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x80) r5 = bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f00000000c0)={0x2, 0x4, 0x8, 0x1, 0x80, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0x0, 0x5}, 0x50) r6 = bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f0000000140)={0x1b, 0x0, 0x0, 0x40000, 0x0, 0x0}, 0x50) r7 = bpf$PROG_LOAD(0x5, &(0x7f0000000340)={0x6, 0x1c, &(0x7f0000000480)=@ringbuf={{0x18, 0x8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1}, {{0x18, 0x1, 0x1, 0x0, r6}, {}, {0x7, 0x0, 0xb, 0x6}, {0x85, 0x0, 0x0, 0x5}, {0x4}}, {{0x5, 0x0, 0x3, 0x9, 0x0, 0x1, 0xffb0}}, [@snprintf={{0x7, 0x0, 0xb, 0x2}, {0x3, 0x3, 0x6, 0xa, 0x9, 0xfff0, 0x110}, {0x5, 0x0, 0xb, 0x9, 0x0, 0x0, 0x40000}, {0x3, 0x3, 0x3, 0xa, 0x9}, {0x6, 0x1, 0xb, 0xa, 0x8}, {0x7, 0x0, 0x0, 0x8}, {0x7, 0x1, 0xb, 0x4, 0x9}, {}, {}, {0x18, 0x6, 0x2, 0x0, r5}, {}, {0x46, 0x8, 0xfff0, 0x76}}], {{0x7, 0x1, 0xb, 0x8}, {0x6, 0x0, 0x5, 0x8}, {0x85, 0x0, 0x0, 0x7}}}, &(0x7f0000000580)='GPL\x00', 0x0, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, @xdp=0x25, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) ioctl$sock_SIOCINQ(r2, 0x541b, &(0x7f0000000000)) r8 = bpf$MAP_CREATE(0x0, &(0x7f0000000440)=ANY=[@ANYBLOB="19000000040000000400000002"], 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000008c0)={0x11, 0x14, &(0x7f0000000280)=ANY=[@ANYBLOB="180000000000000000000000000000001801000020646c2100000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000007100000018110000", @ANYRES32=r8, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000100000095"], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x41100, 0xe, '\x00', 0x0, @fallback=0x1a, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$PROG_BIND_MAP(0xa, &(0x7f0000000080)={r7}, 0xc) setsockopt$inet_tcp_buf(r2, 0x6, 0xd, &(0x7f0000000640)="cefd38af1f5321fcb5c5dfb148b01a1eb2b9c2d7f6caca6f149e82b98856976ba5378c5c913af57ef32f1ddac0333ab327534d06ee61f6d71b86851d4a759274407c82a76443c691955b1ae6c930c717bc394d4be2b529e9e74ea05a8ad9e04bd46663534ac618196107fb8781efedad3e51b8108456964b946538b1b538cf12e81e49ff3e3b843637b3f139a26dfb3fd3b680d3a97cb1b0f834", 0x9a) 5m29.724653837s ago: executing program 3 (id=6620): bpf$MAP_CREATE(0x0, &(0x7f0000000100)=@base={0xa, 0x4, 0x8, 0xa, 0x0, 0xffffffffffffffff, 0xfffffffd}, 0x50) r0 = bpf$MAP_CREATE(0x0, &(0x7f00000001c0)=@base={0x19, 0x4, 0x4, 0x100, 0x0, 0x0}, 0x50) (async) openat$tun(0xffffffffffffff9c, &(0x7f0000000380), 0x0, 0x0) (async) r1 = socket(0x400000000010, 0x3, 0x0) (async) r2 = socket$unix(0x1, 0x5, 0x0) (async) r3 = socket(0x400000000010, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r3, 0x8933, &(0x7f0000001980)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r3, &(0x7f0000001ac0)={0x0, 0x0, &(0x7f0000001b00)={&(0x7f0000001b40)=@newqdisc={0x2c, 0x24, 0x4ee4e6a52ff56541, 0x70bd2d, 0xffffffff, {0x0, 0x0, 0x0, r4, {0x0, 0xfff1}, {0xffff, 0xffff}, {0xd, 0xf}}, [@qdisc_kind_options=@q_qfg={0x8}]}, 0x2c}}, 0x0) ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f0000001b80)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r1, &(0x7f0000001bc0)={0x0, 0x0, &(0x7f0000001c00)={&(0x7f0000001c40)=@getchain={0x24, 0x66, 0x903, 0x70bd2c, 0x25dfdbff, {0x0, 0x0, 0x0, r5, {0xfff3, 0x7}, {0x0, 0xfff1}, {0xf}}}, 0x24}, 0x1, 0x0, 0x0, 0x8848}, 0x20004804) (async) r6 = bpf$MAP_CREATE(0x0, &(0x7f0000000240)=@base={0x1, 0x4, 0x4, 0x100, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0}, 0x48) (async) r7 = socket$inet6_sctp(0xa, 0x5, 0x84) shutdown(r7, 0x0) (async) getsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX3(r7, 0x84, 0x6f, &(0x7f0000000040)={0x0, 0x1c, &(0x7f0000000180)=[@in6={0xa, 0x4e20, 0x0, @private2}]}, &(0x7f00000005c0)=0x10) r8 = socket(0x2, 0x80805, 0x0) getsockopt$bt_hci(r8, 0x84, 0x80, &(0x7f0000001f40)=""/4103, &(0x7f0000002f80)=0x1007) (async) close(0x3) (async) r9 = bpf$MAP_CREATE(0x0, &(0x7f0000000740)=@arena={0x21, 0x0, 0x0, 0xd, 0x20400, r6, 0x10003, '\x00', 0x0, 0xffffffffffffffff, 0x4, 0x2}, 0x50) (async) r10 = bpf$MAP_CREATE(0x0, &(0x7f0000000080)=@base={0x1, 0x4, 0x6, 0x100, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0}, 0x50) close(0x3) (async) bpf$MAP_CREATE(0x0, &(0x7f0000000640)=@base={0x9, 0x5, 0x8, 0x40, 0x42, 0x1}, 0x50) (async) r11 = bpf$PROG_LOAD(0x5, &(0x7f0000001c80)={0x1, 0xb, &(0x7f0000001d40)=@framed={{}, [@map_fd={0x18, 0x1, 0x1, 0x0, r10}, @generic={0xbf, 0x2, 0xa}, @generic={0x7, 0x2, 0x0, 0x0, 0xfffffff8}, @generic={0xbf, 0x3, 0xa}, @generic={0x7, 0x3, 0x0, 0x0, 0xfffffff0}, @generic={0xb7, 0x4}, @generic={0x85, 0x0, 0x0, 0x0, 0x2}]}, &(0x7f0000001dc0)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r12 = socket$kcm(0x10, 0x400000002, 0x0) bpf$BPF_PROG_QUERY(0x10, &(0x7f0000001e00)={@fallback=r12, 0x37, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x40) setsockopt$sock_attach_bpf(r13, 0x1, 0x32, &(0x7f0000001e40)=r11, 0x4) (async) sendmsg$NFT_BATCH(r13, &(0x7f0000001e80)={0x0, 0x0, &(0x7f0000001ec0)={&(0x7f0000001f00)={{0x14, 0x10, 0x1, 0x0, 0x0, {0x7}}, [], {0x14, 0x11, 0x1, 0x0, 0x0, {0x1}}}, 0x28}}, 0x20000010) (async) r14 = socket$inet_mptcp(0x2, 0x1, 0x106) setsockopt$inet_tcp_buf(r14, 0x6, 0x1c, &(0x7f0000000b40)="cb5bb0905f6f94c9c096a7ec1794e66857cbcb6e11cbe64a326192add6c6a4371c8bc02087dcc76f532f50d7c19b4230b8e7c245264f4e72099ce2bc65da1bcd7432ee736c2440f1266b4f79042f0826aee2d1d575fcbeb22c28eae90fc49dd669121c435c2422f7644c826c42a251125e30822dcb1b6f5afb064a29cf698fef7c082dc8d8f8934760ae02c389639bba091bfd1927afd86b545f29b979b18b1feda54cbf375ecd2faa5ec08d2acb9ae6c8f60fc2539a7b892157b15e413daec030f4713b3bf553b697bccf5384d735a3d23dedc73fa0ac", 0xd7) (async) bpf$MAP_GET_NEXT_KEY(0x2, &(0x7f0000000340)={r9, &(0x7f0000000380), &(0x7f00000003c0)=""/166}, 0x20) bpf$PROG_LOAD(0x5, &(0x7f0000000480)={0x1, 0xc, &(0x7f0000000540)=ANY=[@ANYBLOB="180000000000000000000000005c0000611800000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000150802000000000018110000", @ANYRES32=r6, @ANYBLOB="0000000000000000bfa200000000000007020000f8ffffff85000000010000009500000000000000"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x6, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) 5m14.176611826s ago: executing program 32 (id=6620): bpf$MAP_CREATE(0x0, &(0x7f0000000100)=@base={0xa, 0x4, 0x8, 0xa, 0x0, 0xffffffffffffffff, 0xfffffffd}, 0x50) r0 = bpf$MAP_CREATE(0x0, &(0x7f00000001c0)=@base={0x19, 0x4, 0x4, 0x100, 0x0, 0x0}, 0x50) (async) openat$tun(0xffffffffffffff9c, &(0x7f0000000380), 0x0, 0x0) (async) r1 = socket(0x400000000010, 0x3, 0x0) (async) r2 = socket$unix(0x1, 0x5, 0x0) (async) r3 = socket(0x400000000010, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r3, 0x8933, &(0x7f0000001980)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r3, &(0x7f0000001ac0)={0x0, 0x0, &(0x7f0000001b00)={&(0x7f0000001b40)=@newqdisc={0x2c, 0x24, 0x4ee4e6a52ff56541, 0x70bd2d, 0xffffffff, {0x0, 0x0, 0x0, r4, {0x0, 0xfff1}, {0xffff, 0xffff}, {0xd, 0xf}}, [@qdisc_kind_options=@q_qfg={0x8}]}, 0x2c}}, 0x0) ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f0000001b80)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r1, &(0x7f0000001bc0)={0x0, 0x0, &(0x7f0000001c00)={&(0x7f0000001c40)=@getchain={0x24, 0x66, 0x903, 0x70bd2c, 0x25dfdbff, {0x0, 0x0, 0x0, r5, {0xfff3, 0x7}, {0x0, 0xfff1}, {0xf}}}, 0x24}, 0x1, 0x0, 0x0, 0x8848}, 0x20004804) (async) r6 = bpf$MAP_CREATE(0x0, &(0x7f0000000240)=@base={0x1, 0x4, 0x4, 0x100, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0}, 0x48) (async) r7 = socket$inet6_sctp(0xa, 0x5, 0x84) shutdown(r7, 0x0) (async) getsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX3(r7, 0x84, 0x6f, &(0x7f0000000040)={0x0, 0x1c, &(0x7f0000000180)=[@in6={0xa, 0x4e20, 0x0, @private2}]}, &(0x7f00000005c0)=0x10) r8 = socket(0x2, 0x80805, 0x0) getsockopt$bt_hci(r8, 0x84, 0x80, &(0x7f0000001f40)=""/4103, &(0x7f0000002f80)=0x1007) (async) close(0x3) (async) r9 = bpf$MAP_CREATE(0x0, &(0x7f0000000740)=@arena={0x21, 0x0, 0x0, 0xd, 0x20400, r6, 0x10003, '\x00', 0x0, 0xffffffffffffffff, 0x4, 0x2}, 0x50) (async) r10 = bpf$MAP_CREATE(0x0, &(0x7f0000000080)=@base={0x1, 0x4, 0x6, 0x100, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0}, 0x50) close(0x3) (async) bpf$MAP_CREATE(0x0, &(0x7f0000000640)=@base={0x9, 0x5, 0x8, 0x40, 0x42, 0x1}, 0x50) (async) r11 = bpf$PROG_LOAD(0x5, &(0x7f0000001c80)={0x1, 0xb, &(0x7f0000001d40)=@framed={{}, [@map_fd={0x18, 0x1, 0x1, 0x0, r10}, @generic={0xbf, 0x2, 0xa}, @generic={0x7, 0x2, 0x0, 0x0, 0xfffffff8}, @generic={0xbf, 0x3, 0xa}, @generic={0x7, 0x3, 0x0, 0x0, 0xfffffff0}, @generic={0xb7, 0x4}, @generic={0x85, 0x0, 0x0, 0x0, 0x2}]}, &(0x7f0000001dc0)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r12 = socket$kcm(0x10, 0x400000002, 0x0) bpf$BPF_PROG_QUERY(0x10, &(0x7f0000001e00)={@fallback=r12, 0x37, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x40) setsockopt$sock_attach_bpf(r13, 0x1, 0x32, &(0x7f0000001e40)=r11, 0x4) (async) sendmsg$NFT_BATCH(r13, &(0x7f0000001e80)={0x0, 0x0, &(0x7f0000001ec0)={&(0x7f0000001f00)={{0x14, 0x10, 0x1, 0x0, 0x0, {0x7}}, [], {0x14, 0x11, 0x1, 0x0, 0x0, {0x1}}}, 0x28}}, 0x20000010) (async) r14 = socket$inet_mptcp(0x2, 0x1, 0x106) setsockopt$inet_tcp_buf(r14, 0x6, 0x1c, &(0x7f0000000b40)="cb5bb0905f6f94c9c096a7ec1794e66857cbcb6e11cbe64a326192add6c6a4371c8bc02087dcc76f532f50d7c19b4230b8e7c245264f4e72099ce2bc65da1bcd7432ee736c2440f1266b4f79042f0826aee2d1d575fcbeb22c28eae90fc49dd669121c435c2422f7644c826c42a251125e30822dcb1b6f5afb064a29cf698fef7c082dc8d8f8934760ae02c389639bba091bfd1927afd86b545f29b979b18b1feda54cbf375ecd2faa5ec08d2acb9ae6c8f60fc2539a7b892157b15e413daec030f4713b3bf553b697bccf5384d735a3d23dedc73fa0ac", 0xd7) (async) bpf$MAP_GET_NEXT_KEY(0x2, &(0x7f0000000340)={r9, &(0x7f0000000380), &(0x7f00000003c0)=""/166}, 0x20) bpf$PROG_LOAD(0x5, &(0x7f0000000480)={0x1, 0xc, &(0x7f0000000540)=ANY=[@ANYBLOB="180000000000000000000000005c0000611800000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000150802000000000018110000", @ANYRES32=r6, @ANYBLOB="0000000000000000bfa200000000000007020000f8ffffff85000000010000009500000000000000"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x6, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) 6.312354823s ago: executing program 2 (id=7504): bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000003c0)={0x18, 0x13, &(0x7f0000000540)=ANY=[@ANYBLOB="18080000fa0000000000000000010000851000000600000018000000", @ANYRES32, @ANYBLOB="00000000000000000d08000000000000180000000000000000000000000000009500000000000000360a020000000000180100002020782500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b50a000000000000850000000600000095"], &(0x7f0000000600)='GPL\x00', 0x4, 0xde, &(0x7f0000000640)=""/222, 0x41100, 0x8}, 0x94) r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000140)={0x3, 0x13, &(0x7f0000000200)=@framed={{0x18, 0x2, 0x0, 0x0, 0x80000000, 0x0, 0x0, 0x0, 0x1}, [@printk={@p, {}, {}, {}, {}, {0x7, 0x0, 0xb, 0x3, 0x0, 0x0, 0x8000}}, @printk={@llu, {}, {}, {}, {}, {0x7, 0x0, 0xb, 0x3, 0x0, 0x0, 0x3}, {0x85, 0x0, 0x0, 0x9b}}]}, &(0x7f00000002c0)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x4, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x1000000}, 0x94) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000300)={r1, 0x0, 0xe, 0x0, &(0x7f0000000380)="e0b9547ed387dbe9abc89b6f5bec", 0x0, 0x2000, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x50) sendmsg$nl_route(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000500)=ANY=[@ANYBLOB="600000001000010600000000000000000d000300626172657564703000000000300012000c00010062617265756470002000020006000100b512000006000200"], 0x60}}, 0x40400c4) 5.97037037s ago: executing program 5 (id=7507): syz_80211_join_ibss(&(0x7f0000000040)='wlan0\x00', &(0x7f0000000080)=@default_ibss_ssid, 0x6, 0x0) bpf$BPF_PROG_WITH_BTFID_LOAD(0x5, &(0x7f0000000100)=@bpf_lsm={0xe, 0x4, &(0x7f00000001c0)=@framed={{0x66, 0xa, 0x0, 0x0, 0xfffffffe, 0x61, 0x11, 0x4c}, [@call={0x85, 0x0, 0x0, 0x48}]}, &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, 0x1b, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0xfffffffd}, 0x94) syz_80211_inject_frame(&(0x7f00000000c0), &(0x7f0000000000)=@mgmt_frame=@beacon={{{}, {}, @device_b, @device_a, @from_mac}, 0x0, @default, 0x1, @val={0x0, 0x6, @default_ap_ssid}, @val={0x1, 0x8, [{0x2, 0x1}, {0x4, 0x1}, {0xb, 0x1}, {0x16, 0x1}, {0xc}, {0x12}, {0x18}, {0x24}]}, @void, @val={0x4, 0x6, {0x9, 0xf2, 0x8, 0xfff5}}, @void, @void, @void, @void, @void, @void, @void, @void, @void}, 0x3e) 5.858793288s ago: executing program 1 (id=7508): r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000080)=ANY=[@ANYBLOB="44000000100039040f0e000000000000e96bd5c4", @ANYRES32=0x0, @ANYBLOB="0000000000000000240012800b0001006272696467650000140002"], 0x44}, 0x1, 0x0, 0x0, 0xc0}, 0x0) r1 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_buf(r1, 0x29, 0x20, &(0x7f00000000c0)="0bbb268dd6ffa80800000000000000000000210d0000aaa8fa019600ba9380d440fe0000000000002900000005000000", 0xfe60) r2 = syz_genetlink_get_family_id$ieee802154(&(0x7f00000005c0), r0) clock_gettime(0x0, &(0x7f0000001bc0)={0x0, 0x0}) recvmmsg(r1, &(0x7f0000000500)=[{{&(0x7f0000000380)=@sco={0x1f, @fixed}, 0x80, &(0x7f0000000480)=[{&(0x7f0000000180)=""/97, 0x61}, {&(0x7f0000000200)=""/123, 0x7b}, {&(0x7f0000000280)=""/72, 0x48}, {&(0x7f0000000300)=""/115, 0x73}, {&(0x7f0000001c40)=""/238, 0xee}], 0x5, &(0x7f0000001d40)=""/4096, 0x1000}, 0x4}, {{0x0, 0x0, &(0x7f00000019c0)=[{&(0x7f0000001700)=""/172, 0xac}, {&(0x7f0000001b40)=""/106, 0x6a}, {&(0x7f0000001840)=""/120, 0x78}, {&(0x7f00000018c0)=""/147, 0x93}, {&(0x7f0000001980)=""/20, 0x14}], 0x5, &(0x7f0000001a40)=""/202, 0xca}, 0xfffffffe}], 0x2, 0x0, &(0x7f0000001c00)={r3, r4+10000000}) bpf$MAP_CREATE(0x0, &(0x7f0000000100)=ANY=[@ANYBLOB="04000000040000000400000005"], 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000013c0)={0x1b, 0xc, &(0x7f00000007c0)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r4, @ANYBLOB="0000000000000000b70800000000e7057b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000001600000095"], 0x0, 0x0, 0x0, 0x0, 0x40f00, 0x24, '\x00', 0x0, @fallback=0x28, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x8}, 0x94) r5 = bpf$MAP_CREATE(0x0, &(0x7f0000000140)=ANY=[@ANYBLOB="230000000800000002000000ffff000005"], 0x48) r6 = bpf$BPF_PROG_WITH_BTFID_LOAD(0x5, 0x0, 0x0) r7 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000001240)='memory.events\x00', 0x275a, 0x0) write$tun(r7, &(0x7f0000001280)=ANY=[], 0x141) mmap(&(0x7f0000000000/0x4000)=nil, 0x4000, 0x1, 0x10012, r7, 0x0) sendmsg$NBD_CMD_RECONFIGURE(r0, &(0x7f0000001380)={&(0x7f0000000640), 0xc, &(0x7f0000001340)={&(0x7f00000012c0)={0x6c, 0x0, 0x100, 0x70bd2b, 0x25dfdbfb, {}, [@NBD_ATTR_DEAD_CONN_TIMEOUT={0xc, 0x8, 0xffffffff7fffffff}, @NBD_ATTR_SOCKETS={0x10, 0x7, 0x0, 0x1, [{0xc, 0x1, 0x0, 0x1, {0x8, 0x1, r7}}]}, @NBD_ATTR_DEAD_CONN_TIMEOUT={0xc, 0x8, 0x6}, @NBD_ATTR_SERVER_FLAGS={0xc, 0x5, 0x122}, @NBD_ATTR_SIZE_BYTES={0xc, 0x2, 0x7}, @NBD_ATTR_BLOCK_SIZE_BYTES={0xc, 0x3, 0x2d06}, @NBD_ATTR_SIZE_BYTES={0xc}]}, 0x6c}, 0x1, 0x0, 0x0, 0x4000000}, 0x4004090) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000400)={{r5}, &(0x7f0000000440), &(0x7f0000000580)=r6}, 0x20) r8 = bpf$PROG_LOAD(0x5, &(0x7f0000000a40)={0x11, 0xd, &(0x7f0000000b00)=@framed={{0x18, 0x0, 0x0, 0x0, 0x101, 0x0, 0x0, 0x0, 0x10000}, [@ringbuf_output={{0x18, 0x1, 0x1, 0x0, r5}, {}, {}, {}, {}, {}, {}, {0x85, 0x0, 0x0, 0x3}}, @call={0x85, 0x0, 0x0, 0xe}]}, &(0x7f0000000b80)='GPL\x00', 0x0, 0x0, 0x0, 0x41000, 0x16, '\x00', 0x0, @fallback=0xd, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$PROG_BIND_MAP(0xa, &(0x7f0000000bc0)={r8}, 0xc) r9 = socket$nl_route(0x10, 0x3, 0x0) r10 = socket(0x10, 0x803, 0x0) sendmsg$BATADV_CMD_GET_MESH(r10, &(0x7f0000000c00)={0x0, 0x0, &(0x7f0000000c40)={0x0, 0x92}}, 0x0) getsockname$packet(r10, &(0x7f0000000c80)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000cc0)=0x14) sendmsg$nl_route(r9, &(0x7f0000000d00)={0x0, 0x0, &(0x7f0000000d40)={&(0x7f0000000d80)=ANY=[@ANYBLOB="3c0000001000010400eeffffffffffffff000000", @ANYRES32=r11, @ANYBLOB="01000000010000001c0012000c000100627269646765"], 0x3c}, 0x1, 0x0, 0x0, 0xc000}, 0x0) sendmsg$nl_route_sched(r9, &(0x7f0000000dc0)={0x0, 0x0, &(0x7f0000000e00)={&(0x7f0000000e40)=@newqdisc={0x70, 0x24, 0xe0b, 0x0, 0x0, {0x0, 0x0, 0x0, r11, {0x0, 0x9}, {0xffff, 0xffff}, {0xfff1, 0xd}}, [@qdisc_kind_options=@q_netem={{0xa}, {0x40, 0x2, {{0x1ff, 0x4, 0x0, 0x0, 0xfffffffd, 0x8}, [@TCA_NETEM_ECN={0x8, 0x7, 0x1}, @TCA_NETEM_LOSS={0x1c, 0x5, 0x0, 0x1, [@NETEM_LOSS_GI={0x18, 0x1, {0xfffffffe, 0x7, 0x3, 0xffffffff, 0x2}}]}]}}}]}, 0x70}}, 0x0) sendto$packet(0xffffffffffffffff, 0x0, 0x0, 0x4000830, &(0x7f0000000ec0)={0x11, 0x8100, r11, 0x1, 0x2, 0x6, @dev={'\xaa\xaa\xaa\xaa\xaa', 0xe}}, 0x14) bpf$BPF_GET_PROG_INFO(0xf, &(0x7f0000000f00)={0xffffffffffffffff, 0xe0, &(0x7f0000000f40)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x6, &(0x7f0000001040)=[0x0, 0x0, 0x0, 0x0, 0x0, 0x0], ""/16, 0x0, 0x0, 0x0, 0x0, 0x1, 0x1, &(0x7f0000001080)=[0x0], &(0x7f00000010c0)=[0x0], 0x0, 0x93, &(0x7f0000001100)=[{}], 0x8, 0x10, &(0x7f0000001140), &(0x7f0000001180), 0x8, 0x56, 0x8, 0x8, &(0x7f00000011c0)}}, 0x10) bpf$BPF_LINK_CREATE_XDP(0x1c, &(0x7f0000001200)={r8, r11, 0x25, 0x0, @val=@target_btf_id=r12}, 0x14) r13 = bpf$PROG_LOAD(0x5, &(0x7f0000000840)={0x6, 0xc, &(0x7f0000000900)=ANY=[], &(0x7f0000000940)='GPL\x00', 0x0, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, @fallback=0x4, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, r12, 0x0, 0x0, 0x0, 0x0, 0x0, 0x9}, 0x94) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000980)={r13, 0x2000000, 0xe, 0x0, &(0x7f0000000a00)="630b008646dc3f0adf33c9f7b986", 0x0, 0xcf25, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x80}, 0x50) sendmsg$IEEE802154_LLSEC_GETPARAMS(r0, &(0x7f00000006c0)={0x0, 0x0, &(0x7f0000000680)={&(0x7f0000000600)={0x1c, r2, 0x1, 0x70bd28, 0x25dfdbfd, {}, [@IEEE802154_ATTR_DEV_INDEX={0x8}]}, 0x1c}, 0x1, 0x0, 0x0, 0x8041}, 0x40000) 5.696937244s ago: executing program 2 (id=7509): r0 = socket$inet6_mptcp(0xa, 0x1, 0x106) bind$inet6(r0, &(0x7f0000000040)={0xa, 0x4e22, 0xfffffffc, @empty, 0x7}, 0x1c) r1 = socket$nl_generic(0x10, 0x3, 0x10) r2 = syz_genetlink_get_family_id$mptcp(&(0x7f0000000000), 0xffffffffffffffff) sendmsg$MPTCP_PM_CMD_ADD_ADDR(r1, &(0x7f0000000400)={0x0, 0x0, &(0x7f00000003c0)={&(0x7f0000000300)={0x38, r2, 0x1, 0x0, 0x0, {}, [@MPTCP_PM_ATTR_ADDR={0x24, 0x1, 0x0, 0x1, [@MPTCP_PM_ADDR_ATTR_PORT={0x6, 0x5, 0x4e23}, @MPTCP_PM_ADDR_ATTR_FAMILY={0x6, 0x1, 0x2}, @MPTCP_PM_ADDR_ATTR_ADDR4={0x8, 0x3, @multicast1=0xac1414aa}, @MPTCP_PM_ADDR_ATTR_FLAGS={0x8, 0x6, 0x1}]}]}, 0x38}}, 0x0) r3 = socket$netlink(0x10, 0x3, 0x400000000000004) r4 = socket$xdp(0x2c, 0x3, 0x0) setsockopt$XDP_UMEM_REG(r4, 0x11b, 0x4, &(0x7f00000001c0)={&(0x7f00000002c0)=""/5, 0x29000, 0x1000, 0xbb}, 0x20) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000340)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$sock_SIOCGIFINDEX(r5, 0x8933, 0x0) setsockopt$XDP_RX_RING(r4, 0x11b, 0x2, &(0x7f0000000440)=0x800, 0x4) setsockopt$XDP_UMEM_COMPLETION_RING(r4, 0x11b, 0x6, &(0x7f0000000480)=0x20, 0x4) setsockopt$XDP_UMEM_FILL_RING(r4, 0x11b, 0x5, &(0x7f0000000500)=0x4000, 0x4) bind$xdp(r4, &(0x7f0000000540)={0x2c, 0x2, 0x0, 0x20000000}, 0x10) writev(r3, &(0x7f0000000580)=[{&(0x7f0000000680)="480000001400190d7ebdeb75fd0d8c562c84d8c033ed7a80ffe0090f000060000000a2bc5603ca00000f7f89000000200000004a2471083ec6991778581acb6c0101ff0000000309", 0x48}], 0x1) listen(r0, 0xc) r6 = socket$inet_mptcp(0x2, 0x1, 0x106) connect$inet(r6, &(0x7f0000000000)={0x2, 0x4e22, @local}, 0x10) connect$bt_l2cap(0xffffffffffffffff, &(0x7f0000000000)={0x1f, 0x5, @fixed={'\xaa\xaa\xaa\xaa\xaa', 0x10}}, 0xe) r7 = socket$nl_generic(0x10, 0x3, 0x10) r8 = syz_genetlink_get_family_id$mptcp(&(0x7f0000000740), 0xffffffffffffffff) sendmsg$MPTCP_PM_CMD_FLUSH_ADDRS(r7, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000180)={&(0x7f00000004c0)={0x14, r8, 0x1, 0x70bd2c, 0x25dfdbff}, 0x14}, 0x1, 0x0, 0x0, 0x20048001}, 0x800) sendmsg$NL80211_CMD_DEL_PMKSA(0xffffffffffffffff, &(0x7f0000000140)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x2000000}, 0xc, 0x0, 0x1, 0x0, 0x0, 0x40}, 0x400c4) r9 = socket$l2tp(0x2, 0x2, 0x73) bind$inet(r9, &(0x7f0000000000)={0x2, 0x0, @multicast1}, 0x10) openat$cgroup_ro(0xffffffffffffffff, &(0x7f00000000c0)='blkio.bfq.io_merged_recursive\x00', 0x0, 0x0) syz_emit_ethernet(0x74, &(0x7f0000000000)={@link_local, @empty, @void, {@ipv4={0x800, @udp={{0x5, 0x4, 0x0, 0x0, 0x24, 0x0, 0x0, 0x0, 0x73, 0x0, @private=0x300, @multicast1}, {0x0, 0x0, 0xfffffe9a, 0x0, @gue={{0x2}}}}}}}, 0x0) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000200)={0x6, 0x3, &(0x7f0000000080)=ANY=[@ANYBLOB="1800000002000000000000000008082295"], &(0x7f0000000180)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x22, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0xe863}, 0x94) 5.615958677s ago: executing program 0 (id=7510): r0 = socket(0x10, 0x3, 0x0) r1 = socket$inet6_sctp(0xa, 0x801, 0x84) sendto$inet6(r1, &(0x7f0000000040)="c2", 0x1, 0x0, &(0x7f0000000080)={0xa, 0x4e24, 0x0, @rand_addr=' \x01\x00'}, 0x1c) sendmmsg$inet6(r1, &(0x7f00000000c0)=[{{&(0x7f0000000100)={0xa, 0x0, 0x0, @private2}, 0x1c, &(0x7f0000000180)=[{&(0x7f00000001c0)="e3", 0x1}], 0x1}}], 0x1, 0x0) shutdown(r1, 0x1) setsockopt$inet_sctp6_SCTP_AUTH_DEACTIVATE_KEY(r1, 0x84, 0x23, &(0x7f0000000200)={0x0, 0x3}, 0x8) sendmsg$nl_route(r0, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000280)=@newlink={0x38, 0x10, 0x403, 0x6101, 0x0, {0x0, 0x0, 0x0, 0x0, 0x56760003ded1ddd3}, [@IFLA_LINKINFO={0x18, 0x12, 0x0, 0x1, @vti={{0x8}, {0xc, 0x2, 0x0, 0x1, [@IFLA_VTI_LOCAL={0x8, 0x4, @rand_addr=0xc0000200}]}}}]}, 0x38}, 0x1, 0x0, 0x0, 0x800}, 0x10) 4.966927297s ago: executing program 0 (id=7512): r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = socket$netlink(0x10, 0x3, 0x0) bind$netlink(r1, &(0x7f0000000000)={0x10, 0x0, 0x25dfdbfc, 0x2ffffffff}, 0xc) r2 = socket$netlink(0x10, 0x3, 0x0) (async) r3 = socket(0x10, 0x3, 0x0) (async) r4 = socket$nl_generic(0x10, 0x3, 0x10) r5 = syz_genetlink_get_family_id$ethtool(&(0x7f0000000380), 0xffffffffffffffff) sendmsg$ETHTOOL_MSG_DEBUG_SET(r4, &(0x7f00000003c0)={0x0, 0x0, &(0x7f0000000400)={&(0x7f0000000440)=ANY=[@ANYBLOB='H\x00\x00\x00', @ANYRES16=r5, @ANYBLOB="0100000000000003000008000000180001801400020073797a5f74756e0000000000000000001c00028004000100140003800c000180080001"], 0x48}}, 0x0) (async) syz_genetlink_get_family_id$ethtool(&(0x7f0000000040), r3) (async) getsockname$packet(r3, &(0x7f0000000080)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f00000000c0)=0x14) (async) r7 = socket$packet(0x11, 0x2, 0x300) sendmsg$nl_route(r2, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000180)=ANY=[@ANYBLOB="480000001000050700000086d7c0d6c878f064eb", @ANYRES32=r6, @ANYBLOB="0000000000000000280012000c00010076657468"], 0x48}}, 0x0) (async) sendmsg$nl_route_sched(r2, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000240)=@newqdisc={0x30, 0x24, 0xf1d, 0x0, 0x0, {0x0, 0x0, 0x0, r6, {}, {0xfff1, 0xffff}}, [@qdisc_kind_options=@q_clsact={0xb}]}, 0x30}}, 0x4000800) (async) sendmsg$nl_route_sched(r0, &(0x7f0000000280)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f0000000300)=@delchain={0x54, 0x64, 0xf31, 0xfffffffd, 0x0, {0x0, 0x0, 0x0, r6, {0x0, 0xfff3}, {0xfff3, 0xffff}, {0xa, 0x1b}}, [@filter_kind_options=@f_flower={{0xb}, {0x24, 0x2, [@TCA_FLOWER_KEY_ENC_OPTS={0x20, 0x54, 0x0, 0x1, [@TCA_FLOWER_KEY_ENC_OPTS_ERSPAN={0x1c, 0x3, 0x0, 0x1, [@TCA_FLOWER_KEY_ENC_OPT_ERSPAN_DIR={0x5, 0x3, 0xae}, @TCA_FLOWER_KEY_ENC_OPT_ERSPAN_HWID={0x5, 0x4, 0x4}, @TCA_FLOWER_KEY_ENC_OPT_ERSPAN_VER={0x5, 0x1, 0x2}]}]}]}}]}, 0x54}, 0x1, 0x0, 0x0, 0x40044}, 0x4804) (async) mmap(&(0x7f0000b20000/0x4000)=nil, 0x4000, 0x0, 0x2010, r7, 0x0) (async) mmap(&(0x7f0000000000/0xff5000)=nil, 0xff5000, 0x5, 0x20000000ec071, 0xffffffffffffffff, 0x0) 4.887631735s ago: executing program 1 (id=7513): r0 = socket$kcm(0x10, 0x2, 0x4) setsockopt$inet_IP_XFRM_POLICY(0xffffffffffffffff, 0x0, 0x11, &(0x7f0000000000)={{{@in6=@mcast1, @in6=@ipv4={'\x00', '\xff\xff', @multicast2}, 0x0, 0x1, 0x0, 0xfbfd, 0x2, 0x0, 0x0, 0x0, 0x0, 0xee00}, {0x200000, 0x0, 0x0, 0x8}}, {{@in=@private=0xa010100, 0x0, 0x32}, 0x0, @in=@remote, 0x0, 0x4}}, 0xe8) r1 = bpf$PROG_LOAD_XDP(0x5, &(0x7f00000001c0)={0x6, 0x3, &(0x7f00000002c0)=ANY=[@ANYBLOB="1800000003000000000000000000000095"], &(0x7f0000000300)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x20000000}, 0x94) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000340)={r1, 0x0, 0x94, 0x0, 0x0, 0x0, 0x0, 0x0, 0x63, 0x0, &(0x7f00000003c0)='\x00', 0x0}, 0x48) sendmsg$inet(r0, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000580)=[{&(0x7f0000000400)="5c00000012006bab9e3fe3d86e6c1d000014a10d00000000000004b68675f8001d000a00a0e69ee517d34460bc24eab556a705251e6182949a36c23d3b48dfd8cdbf9367b4fa51f60a64e9f4080003000601000304000200d700", 0x5a}, {&(0x7f0000000280)="ffaf", 0x2}], 0x2, 0x0, 0x0, 0x1f00c00e}, 0x4080) socket$kcm(0x10, 0x2, 0x4) (async) setsockopt$inet_IP_XFRM_POLICY(0xffffffffffffffff, 0x0, 0x11, &(0x7f0000000000)={{{@in6=@mcast1, @in6=@ipv4={'\x00', '\xff\xff', @multicast2}, 0x0, 0x1, 0x0, 0xfbfd, 0x2, 0x0, 0x0, 0x0, 0x0, 0xee00}, {0x200000, 0x0, 0x0, 0x8}}, {{@in=@private=0xa010100, 0x0, 0x32}, 0x0, @in=@remote, 0x0, 0x4}}, 0xe8) (async) bpf$PROG_LOAD_XDP(0x5, &(0x7f00000001c0)={0x6, 0x3, &(0x7f00000002c0)=ANY=[@ANYBLOB="1800000003000000000000000000000095"], &(0x7f0000000300)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x20000000}, 0x94) (async) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000340)={r1, 0x0, 0x94, 0x0, 0x0, 0x0, 0x0, 0x0, 0x63, 0x0, &(0x7f00000003c0)='\x00', 0x0}, 0x48) (async) sendmsg$inet(r0, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000580)=[{&(0x7f0000000400)="5c00000012006bab9e3fe3d86e6c1d000014a10d00000000000004b68675f8001d000a00a0e69ee517d34460bc24eab556a705251e6182949a36c23d3b48dfd8cdbf9367b4fa51f60a64e9f4080003000601000304000200d700", 0x5a}, {&(0x7f0000000280)="ffaf", 0x2}], 0x2, 0x0, 0x0, 0x1f00c00e}, 0x4080) (async) 4.730732405s ago: executing program 5 (id=7515): getsockopt$inet_pktinfo(0xffffffffffffffff, 0x0, 0x8, &(0x7f0000000440)={0x0, @private, @local}, &(0x7f0000000480)=0xc) r1 = socket$inet6_sctp(0xa, 0x1, 0x84) r2 = socket(0x10, 0x80003, 0x0) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f00000004c0)={'lo\x00', 0x0}) sendmsg$nl_route_sched(r2, &(0x7f0000000500)={0x0, 0x0, &(0x7f0000000540)={&(0x7f0000000580)=@newqdisc={0x48, 0x24, 0x4ee4e6a52ff56541, 0x0, 0x0, {0x0, 0x0, 0x0, r3, {}, {0xffff, 0xffff}}, [@qdisc_kind_options=@q_prio={{0x9}, {0x18, 0x2, {0xe, "0000000e0002040000000e000000000e"}}}]}, 0x48}, 0x1, 0x0, 0x0, 0x4000}, 0x40000) r4 = socket$nl_route(0x10, 0x3, 0x0) ioctl$ifreq_SIOCGIFINDEX_batadv_mesh(r4, 0x8933, &(0x7f0000000780)) sendmsg$nl_route(r4, 0x0, 0x0) r5 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r5, 0x8933, &(0x7f0000000a80)={'bridge0\x00', 0x0}) sendmsg$nl_route(r5, &(0x7f0000000ac0)={0x0, 0x0, &(0x7f0000000b00)={&(0x7f0000000b40)=@bridge_newneigh={0x28, 0x1c, 0x1, 0x70bd29, 0x25dfdbfe, {0x7, 0x0, 0x0, r6, 0x80, 0xba, 0x6}, [@NDA_LLADDR={0xa, 0x2, @dev={'\xaa\xaa\xaa\xaa\xaa', 0xc}}]}, 0x28}, 0x1, 0x0, 0x0, 0x44}, 0x4040000) r7 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r7, &(0x7f0000000b80)={0x0, 0x0, &(0x7f0000000bc0)={&(0x7f0000000c00)=@setlink={0x2c, 0x13, 0x1, 0x70bd29, 0x25dfdbf8, {0x0, 0x0, 0x0, r6, 0x3007, 0x1000}, [@IFLA_ADDRESS={0xa, 0x1, @dev={'\xaa\xaa\xaa\xaa\xaa', 0x1b}}]}, 0x2c}, 0x1, 0x0, 0x0, 0x20000000}, 0x8804) r8 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r8, 0x8933, &(0x7f0000000c40)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r8, 0x0, 0x0) sendmsg$nl_route_sched(r8, &(0x7f0000000d40)={0x0, 0x0, &(0x7f0000000d80)={0x0}, 0x1, 0x0, 0x0, 0x200448a4}, 0x4890) sendmsg$kcm(0xffffffffffffffff, &(0x7f0000000e80)={&(0x7f0000000ec0)=@xdp={0x2c, 0x0, r9, 0x3e}, 0x80, &(0x7f0000000f40)=[{&(0x7f0000000fc0)}, {&(0x7f0000001080)="8caed476f6bcc737902ee6863118a0f660978f27dfa8e77e65d30f0c994994af1fb65ee49983e655d3f7be317d2380b0ed8e916769d5f1b8dc7a927e6401a10223ad90d5dc45614dec7e4c2f19d2b70807aaef8fc9e45c7a65583d15a94480840f4e4fc9ee8e3b7f8fd1aaf800d9176af51346ea81ee48fdc01f072780ff849a4fe9197b8926a16412b4da7b627e43d71ec1b367bbd9454ab97566775449de0c9e1b429acb", 0xa5}, {&(0x7f0000001180)="99dcbf373748a116444c10801b7c8f48ff3cc4222eaa9a8ecd976fe5c2b153b8012daa0155cbb1", 0x27}, {&(0x7f00000011c0)="5dc2db6fa9b830b5bedc2a54b2d4091ce8c28ef121944d189544096016abb738c8d7cbee8455797c78611bc5b5633e30c7ee1093b90e3208ecb225f6d0d29465fa81ca56e738ef1e7c0480a7b780ec614330e809a1523dbfda40a01ee577449b2adcf3ac4a416128f9b100695ec34ba5c785caca8eaf21639695869be83d5597e7d5c5d74690449c0b1589212d14268d86d6e9df6605662594a579a01f6247f8789ee2753104a9ff6c977436258777b047c00743caeee11953c7ee9f75783afc3e3e6951ad94872aef0797363080994c6e7ff1645c", 0xd5}], 0x4}, 0x0) sendmsg$ETHTOOL_MSG_LINKMODES_GET(0xffffffffffffffff, &(0x7f00000023c0)={&(0x7f0000000200)={0x10, 0x0, 0x0, 0x60000}, 0xc, &(0x7f0000002380)={&(0x7f0000002280)={0x44, 0x0, 0x100, 0x70bd28, 0x25dfdbfc, {}, [@HEADER={0xc, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r0}]}, @HEADER={0x4}, @HEADER={0x20, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'nr0\x00'}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r9}]}]}, 0x44}, 0x1, 0x0, 0x0, 0x4000004}, 0x0) bpf$MAP_CREATE_RINGBUF(0x0, 0x0, 0x48) 4.354571362s ago: executing program 4 (id=7516): r0 = socket$inet_tcp(0x2, 0x1, 0x0) (async) sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f0000000000)={0x0, 0x0, 0x0}, 0x0) r1 = bpf$MAP_CREATE(0x0, &(0x7f0000000040)=ANY=[@ANYBLOB="0a000000040000000800000008"], 0x50) close(0x3) r2 = bpf$MAP_CREATE(0x0, &(0x7f00000000c0)=@base={0xa, 0x8, 0x42, 0x40, 0xc2, 0x1}, 0x48) bpf$MAP_UPDATE_BATCH(0x1a, &(0x7f0000000140)={0x0, 0x0, &(0x7f00000001c0), &(0x7f0000000200), 0x1003, r2}, 0x38) (async) setsockopt$inet_tcp_TCP_QUEUE_SEQ(r0, 0x6, 0x15, &(0x7f0000000280)=0xb, 0x4) (async) bpf$TOKEN_CREATE(0x24, &(0x7f0000000300)={0x0, r1}, 0x8) r3 = bpf$PROG_LOAD(0x5, &(0x7f00000016c0)={0x11, 0xd, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='syzkaller\x00', 0x0, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) (async) r4 = socket$alg(0x26, 0x5, 0x0) bind$alg(r4, &(0x7f00000001c0)={0x26, 'hash\x00', 0x0, 0x0, 'sha384\x00'}, 0x58) (async) r5 = accept4(r4, 0x0, 0x0, 0x0) (async) ioctl$ifreq_SIOCGIFINDEX_team(r0, 0x8933, &(0x7f00000017c0)={'team0\x00', 0x0}) sendmsg$TEAM_CMD_OPTIONS_GET(r5, &(0x7f0000001680)={0x0, 0x0, &(0x7f0000000540)={&(0x7f0000000580)={0x44, 0x0, 0x2, 0x70bd27, 0x25dfdc02, {}, [{{0x8}, {0x4}}, {{0x8}, {0x4}}, {{0x8, 0x1, r6}, {0x4}}, {{0x8}, {0x4}}]}, 0x44}, 0x1, 0x0, 0x0, 0x1}, 0x4) ioctl$sock_bt_hci(r5, 0x400448dd, &(0x7f0000000680)="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") bpf$PROG_BIND_MAP(0xa, &(0x7f0000000500)={r3}, 0xc) (async) bind$inet(r0, &(0x7f0000000080)={0x2, 0x4e21, @broadcast}, 0x10) (async) connect$inet(r0, &(0x7f0000000180)={0x2, 0x4e21, @local}, 0x10) (async) setsockopt$inet_tcp_TCP_MD5SIG(r0, 0x6, 0xe, &(0x7f0000000340)={@in={{0x2, 0x4e22, @local}}, 0x0, 0x0, 0x33, 0x0, "cebd7ceedb7b0ad952e966bbe242b92b746b023df2cb59e32e10366456deac64e782206bd4aee372005a52a40b7161161a8b2749fe184fb0d08bc63f90010a1ed2bf603d2c3fcc250c30136f9ef2ef8b"}, 0xd8) (async) sendto$inet(r0, &(0x7f0000000000), 0xffffffffffffff94, 0x0, 0x0, 0x11) (async) r7 = socket$nl_generic(0x10, 0x3, 0x10) (async) r8 = syz_genetlink_get_family_id$nl80211(&(0x7f00000002c0), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r7, 0x8933, &(0x7f0000000440)={'wlan1\x00', 0x0}) sendmsg$NL80211_CMD_TDLS_MGMT(r7, &(0x7f0000000480)={0x0, 0x0, &(0x7f00000004c0)={&(0x7f0000001780)={0x1c, r8, 0x5, 0x0, 0x0, {{}, {@val={0x8, 0x3, r9}, @void}}}, 0x1c}}, 0x0) shutdown(r0, 0x1) 4.255670064s ago: executing program 1 (id=7517): r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000040)=ANY=[@ANYBLOB="0500000004000000040000000b"], 0x50) close(0x3) r1 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f00000008c0), 0x200002, 0x0) r2 = openat$cgroup_int(r1, &(0x7f0000000900)='hugetlb.1GB.rsvd.max_usage_in_bytes\x00', 0x2, 0x0) writev(r2, &(0x7f0000000940)=[{&(0x7f0000000980)='l', 0x1}], 0x1) splice(r0, &(0x7f0000000480)=0x8, r2, &(0x7f0000000a00)=0x9, 0x73, 0x2) ioctl$XFS_IOC_START_COMMIT(r0, 0x80585882, &(0x7f0000000640)={0xffffffffffffffff}) r4 = socket$nl_generic(0x10, 0x3, 0x10) r5 = syz_genetlink_get_family_id$ethtool(&(0x7f0000000700), 0xffffffffffffffff) sendmsg$ETHTOOL_MSG_TSINFO_GET(r4, &(0x7f0000000740)={0x0, 0x0, &(0x7f0000000780)={&(0x7f00000007c0)=ANY=[@ANYBLOB='4\x00\x00\x00', @ANYRES16=r5, @ANYBLOB="010000000000000000001500000020000180140002006e657464657673696d30000000000000080003"], 0x34}}, 0x14) sendmsg$ETHTOOL_MSG_LINKMODES_SET(r3, &(0x7f0000000880)={&(0x7f00000006c0)={0x10, 0x0, 0x0, 0x1}, 0xc, &(0x7f0000000840)={&(0x7f0000000800)={0x1c, r5, 0x1, 0x70bd2a, 0x25dfdbfd, {}, [@ETHTOOL_A_LINKMODES_DUPLEX={0x5, 0x6, 0x3}]}, 0x1c}, 0x1, 0x0, 0x0, 0x40044}, 0x24000000) r6 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r6, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000400)={{0x14, 0x10, 0x1, 0x0, 0x0, {0x3}}, [@NFT_MSG_NEWTABLE={0x14, 0x0, 0xa, 0x801, 0x0, 0x0, {0xa, 0x0, 0xa}}, @NFT_MSG_DELRULE={0x3c, 0x8, 0xa, 0x5, 0x0, 0x0, {0x2, 0x0, 0x8}, [@NFTA_RULE_TABLE={0x9, 0x1, 'syz0\x00'}, @NFTA_RULE_COMPAT={0xc, 0x5, 0x0, 0x1, [@NFTA_RULE_COMPAT_FLAGS={0x8, 0x2, 0x1, 0x0, 0x2}]}, @NFTA_RULE_USERDATA={0x4}, @NFTA_RULE_HANDLE={0xc, 0x3, 0x1, 0x0, 0x2}]}], {0x14, 0x11, 0x1, 0x0, 0x0, {0xa}}}, 0x78}, 0x1, 0x0, 0x0, 0x4800}, 0x10) ioctl$XFS_IOC_PATH_TO_FSHANDLE(r2, 0xc0385868, &(0x7f0000000b00)={0xffffffffffffffff, &(0x7f00000008c0)=')^\'\x00', 0x4000, &(0x7f0000000a40)={@_ha_fsid={[0x9, 0x1]}, {0x1, 0x16d9, 0x2, 0x100000000000000}}, 0xdb83, &(0x7f0000000a80), &(0x7f0000000ac0)}) r8 = socket$netlink(0x10, 0x3, 0x0) socketpair(0x1, 0x100000005, 0x0, &(0x7f0000000b80)={0xffffffffffffffff}) getpeername$packet(r9, &(0x7f0000000bc0)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @dev}, &(0x7f0000000c00)=0x14) sendmsg$nl_route(r8, &(0x7f0000000c40)={0x0, 0x0, &(0x7f0000000c80)={&(0x7f0000001240)=ANY=[@ANYBLOB="3c002f0010000305fcffffff00000400000000004adb51484f1255e82d934766ee376d50b7dc91361dd1e8b23ddcccc905005f5fb1dd89d7c0ad127544d21c37d23d92d5459820955afdf77ebf88956c209c4706df9bc78fc309f3422c2200000000d76c3ab8a6b94762947fa63ff90c31a3eb6687c8a3cd5076129036f47ea42f8ec6ef41bb9f6fe3b9d886f1bf45ac491b4a2ad62ce8dc99d01076a575e8ffd37f21f61866b71f65feb14abbc9505c7f4667669add536fa300c974c4d084cfbd69b690973779f44eb9939318", @ANYRES32=0x0, @ANYBLOB="0002050071400000140012800b0001006c6f7770616e00000400028008000500", @ANYRES32=r10, @ANYBLOB], 0x3c}, 0x1, 0x0, 0x0, 0x48890}, 0x0) getsockopt$inet_mreqn(r6, 0x0, 0x23, &(0x7f0000000d00)={@multicast2, @loopback, 0x0}, &(0x7f0000000d40)=0xc) ioctl$ifreq_SIOCGIFINDEX_team(r6, 0x8933, &(0x7f0000000d80)={'team0\x00', 0x0}) r13 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r13, 0x8933, &(0x7f0000000dc0)={'tunl0\x00', 0x0}) sendmsg$nl_route_sched(r13, &(0x7f0000000e00)={0x0, 0x0, &(0x7f0000000e40)={&(0x7f0000000e80)=@newqdisc={0x44, 0x24, 0x4ee4e6a52ff56541, 0x2000, 0x0, {0x0, 0x0, 0x0, r14, {}, {0xffff, 0xffff}, {0x10, 0x1}}, [@qdisc_kind_options=@q_cake={{0x9}, {0x14, 0x2, [@TCA_CAKE_FWMARK={0x8}, @TCA_CAKE_SPLIT_GSO={0x8, 0x11, 0x1}]}}]}, 0x44}}, 0x4000010) ioctl$sock_ipv6_tunnel_SIOCGET6RD(r3, 0x89f8, &(0x7f0000000f80)={'sit0\x00', &(0x7f0000000f00)={'ip_vti0\x00', 0x0, 0x40, 0x20, 0x8001, 0x2, {{0x18, 0x4, 0x3, 0x2, 0x60, 0x65, 0x0, 0x40, 0x4, 0x0, @multicast1, @private=0xa010100, {[@rr={0x7, 0x17, 0x21, [@empty, @dev={0xac, 0x14, 0x14, 0x1c}, @multicast2, @multicast1, @loopback]}, @generic={0x44, 0x10, "e7424b1c8b429844d875ae9f622f"}, @end, @noop, @rr={0x7, 0x1f, 0xde, [@remote, @empty, @broadcast, @initdev={0xac, 0x1e, 0x1, 0x0}, @initdev={0xac, 0x1e, 0x1, 0x0}, @rand_addr=0x64010101, @remote]}, @end]}}}}}) getsockname$packet(r3, &(0x7f0000000fc0)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000001000)=0x14) sendmsg$ETHTOOL_MSG_COALESCE_GET(r7, &(0x7f0000001200)={&(0x7f0000000b40)={0x10, 0x0, 0x0, 0x20}, 0xc, &(0x7f00000011c0)={&(0x7f0000001040)=ANY=[@ANYBLOB="58010000", @ANYRES16=r5, @ANYBLOB="010026bd7000fedbdf2513000000280001801400020065727370616e300000000000000000000800030000000000080003000100000068000180080003000000000008000100", @ANYRES32=0x0, @ANYBLOB="08000100", @ANYRES32=0x0, @ANYBLOB="140002006d6163766c616e30000000000000000008000300020000001400020070696d367265673100000000000000001400020077673100000000000000000000000000080003000100000060000180140002007665746831000000000000000000000008000100", @ANYRES32=r10, @ANYBLOB="08000100", @ANYRES32=r11, @ANYBLOB="140002007465616d3000000000000000000000001400020076657468300000000000000000000000080003000000000008000100", @ANYRES32=r12, @ANYBLOB="4000018008000300000000021400020070696d72656731000000000000000000080003000100000008000100", @ANYRES32=0x0, @ANYBLOB="08000100", @ANYRES32=r14, @ANYBLOB="08000100", @ANYRES32=r15, @ANYBLOB="14000180080003000100000008000100", @ANYRES32=r16, @ANYBLOB], 0x158}, 0x1, 0x0, 0x0, 0x4}, 0x800) bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="0e000000040000000800000008"], 0x48) r17 = bpf$PROG_LOAD(0x5, &(0x7f0000000340)={0x11, 0x14, &(0x7f0000000280)=ANY=[@ANYBLOB="180000000000000000000000000000001801000020646c2100000000002020007b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000000600000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000100000095"], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_GET_PROG_INFO(0xf, &(0x7f0000000600)={r17, 0xe0, &(0x7f0000000500)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, ""/16, 0x0, 0x0, 0x0, 0x0, 0x7, 0x1, &(0x7f0000000000)=[0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0], &(0x7f0000000080)=[0x0], 0x0, 0x41, &(0x7f00000000c0)=[{}, {}], 0x10, 0x10, &(0x7f0000000100), &(0x7f0000000140), 0x8, 0xda, 0x8, 0x8, &(0x7f0000000180)}}, 0x10) bpf$PROG_BIND_MAP(0xa, &(0x7f00000004c0)={r17}, 0xc) 4.242914117s ago: executing program 2 (id=7518): socket$pppoe(0x18, 0x1, 0x0) (async) r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000100)={{0x14, 0x10, 0x1, 0x0, 0x0, {0x3}}, [@NFT_MSG_NEWTABLE={0x28, 0x0, 0xa, 0x5, 0x0, 0x0, {0x3, 0x0, 0x3}, [@NFTA_TABLE_FLAGS={0x8, 0x2, 0x1, 0x0, 0x4}, @NFTA_TABLE_NAME={0x9, 0x1, 'syz0\x00'}]}, @NFT_MSG_NEWTABLE={0x28, 0x0, 0xa, 0x401, 0x0, 0x0, {0x3, 0x0, 0x8a}, [@NFTA_TABLE_NAME={0x9, 0x1, 'syz0\x00'}, @NFTA_TABLE_FLAGS={0x8, 0x2, 0x1, 0x0, 0x7}]}], {0x14, 0x10, 0x1, 0x0, 0x0, {0x1}}}, 0x78}, 0x1, 0x0, 0x0, 0x24040010}, 0x20004040) r1 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r1, &(0x7f0000000440)={0x0, 0x0, &(0x7f0000000580)={&(0x7f0000000080)=@newlink={0x44, 0x10, 0x403, 0x2, 0x2, {0x0, 0x0, 0x4, 0x0, 0x4300, 0x1000000}, [@IFLA_LINKINFO={0x24, 0x12, 0x0, 0x1, @bridge={{0xb}, {0x14, 0x2, 0x0, 0x1, [@IFLA_BR_MCAST_HASH_MAX={0x8, 0x1b, 0x5}, @IFLA_BR_MCAST_HASH_MAX={0x8, 0x1b, 0x6}]}}}]}, 0x44}, 0x1, 0x1000000, 0x0, 0x20000044}, 0x24028044) 3.788445828s ago: executing program 2 (id=7519): r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$tipc2(&(0x7f0000000040), 0xffffffffffffffff) sendmsg$TIPC_NL_NET_GET(r0, &(0x7f0000000180)={&(0x7f0000000000), 0xc, &(0x7f0000000140)={&(0x7f0000000080)={0x88, r1, 0x800, 0x70bd29, 0x25dfdbfc, {}, [@TIPC_NLA_LINK={0x74, 0x4, 0x0, 0x1, [@TIPC_NLA_LINK_NAME={0x9, 0x1, 'syz1\x00'}, @TIPC_NLA_LINK_PROP={0x4c, 0x7, 0x0, 0x1, [@TIPC_NLA_PROP_TOL={0x8, 0x2, 0x5}, @TIPC_NLA_PROP_MTU={0x8, 0x4, 0x5}, @TIPC_NLA_PROP_MTU={0x8, 0x4, 0x1}, @TIPC_NLA_PROP_WIN={0x8}, @TIPC_NLA_PROP_WIN={0x8, 0x3, 0x8}, @TIPC_NLA_PROP_MTU={0x8, 0x4, 0x5b8}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x14}, @TIPC_NLA_PROP_MTU={0x8, 0x4, 0x2}, @TIPC_NLA_PROP_MTU={0x8}]}, @TIPC_NLA_LINK_NAME={0x9, 0x1, 'syz1\x00'}, @TIPC_NLA_LINK_NAME={0x9, 0x1, 'syz1\x00'}]}]}, 0x88}, 0x1, 0x0, 0x0, 0x24080080}, 0x84) r2 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000200), r0) sendmsg$NL80211_CMD_PROBE_CLIENT(r0, &(0x7f00000002c0)={&(0x7f00000001c0)={0x10, 0x0, 0x0, 0x20000000}, 0xc, &(0x7f0000000280)={&(0x7f0000000240)={0x2c, r2, 0x200, 0x70bd26, 0x25dfdbfb, {{}, {@void, @void}}, [@NL80211_ATTR_MAC={0xa}, @NL80211_ATTR_MAC={0xa, 0x6, @device_b}]}, 0x2c}, 0x1, 0x0, 0x0, 0x4080}, 0x40000) ioctl$sock_ipv6_tunnel_SIOCADDTUNNEL(0xffffffffffffffff, 0x89f1, &(0x7f00000003c0)={'syztnl1\x00', &(0x7f0000000340)={'syztnl2\x00', 0x0, 0x29, 0x3, 0xfe, 0x6, 0x2, @private1, @mcast2, 0x700, 0x781, 0xb68c, 0x8}}) ioctl$sock_ipv4_tunnel_SIOCADDTUNNEL(0xffffffffffffffff, 0x89f1, &(0x7f0000000500)={'tunl0\x00', &(0x7f0000000400)={'gre0\x00', 0x0, 0x8000, 0x40, 0x4, 0x40, {{0x31, 0x4, 0x3, 0x2c, 0xc4, 0x64, 0x0, 0x40, 0x4, 0x0, @multicast1, @broadcast, {[@rr={0x7, 0x17, 0x63, [@multicast1, @dev={0xac, 0x14, 0x14, 0x2e}, @dev={0xac, 0x14, 0x14, 0xb}, @loopback, @loopback]}, @ssrr={0x89, 0x7, 0xb0, [@loopback]}, @noop, @lsrr={0x83, 0x23, 0xc4, [@empty, @initdev={0xac, 0x1e, 0x0, 0x0}, @multicast1, @broadcast, @local, @multicast1, @empty, @rand_addr=0x64010101]}, @timestamp_addr={0x44, 0x1c, 0xc8, 0x1, 0x2, [{@broadcast, 0xca75}, {@rand_addr=0x64010100, 0x998}, {@multicast2, 0x1}]}, @cipso={0x86, 0x4f, 0xffffffffffffffff, [{0x5, 0xd, "1741664f6989a8a749d2d4"}, {0x7, 0x7, "1944876ec4"}, {0x0, 0x5, "1eed33"}, {0x7, 0xd, "6bb41889f8f1e392e05fc8"}, {0x7, 0xc, "f62735dd97a1751899ae"}, {0x2, 0x6, "d6fc1122"}, {0x6, 0x2}, {0x0, 0xf, "607bd13988d2f9d99728b71c71"}]}]}}}}}) getpeername$packet(0xffffffffffffffff, &(0x7f0000000540)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @random}, &(0x7f0000000580)=0x14) sendmsg$ETHTOOL_MSG_COALESCE_GET(r0, &(0x7f0000000680)={&(0x7f0000000300)={0x10, 0x0, 0x0, 0x1000}, 0xc, &(0x7f0000000640)={&(0x7f00000005c0)={0x74, 0x0, 0x8, 0x70bd2a, 0x25dfdbfb, {}, [@HEADER={0x30, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r3}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'dvmrp1\x00'}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r4}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8}]}, @HEADER={0x30, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x2}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'vxcan1\x00'}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r5}, @ETHTOOL_A_HEADER_FLAGS={0x8}]}]}, 0x74}, 0x1, 0x0, 0x0, 0x24000044}, 0x10) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f0000000700)={'wlan0\x00', 0x0}) sendmsg$NL80211_CMD_PROBE_CLIENT(r0, &(0x7f00000007c0)={&(0x7f00000006c0)={0x10, 0x0, 0x0, 0x800000}, 0xc, &(0x7f0000000780)={&(0x7f0000000740)={0x40, r2, 0x200, 0x70bd25, 0x25dfdbfd, {{}, {@val={0x8, 0x3, r6}, @val={0xc, 0x99, {0x10, 0x5}}}}, [@NL80211_ATTR_MAC={0xa, 0x6, @broadcast}, @NL80211_ATTR_MAC={0xa}]}, 0x40}, 0x1, 0x0, 0x0, 0x4014}, 0x2004c001) ioctl$XFS_IOC_FD_TO_HANDLE(r0, 0xc038586a, &(0x7f0000000900)={r0, &(0x7f0000000800)='$^\x97\x00', 0x8001, &(0x7f0000000840)={@align=0x5, {0xe3, 0x3, 0x5, 0x101}}, 0x4, &(0x7f0000000880)={@_ha_fsid}, &(0x7f00000008c0)=0x8}) r8 = bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000a00)={&(0x7f0000000940)={{0xeb9f, 0x1, 0x0, 0x18, 0x0, 0x34, 0x34, 0xa, [@var={0x9, 0x0, 0x0, 0xe, 0x1, 0x2}, @float={0x2, 0x0, 0x0, 0x10, 0x4}, @struct={0xd, 0x1, 0x0, 0x4, 0x0, 0x0, [{0xe, 0x2}]}]}, {0x0, [0x2e, 0x61, 0x30, 0x5f, 0x2e, 0x5f, 0x30, 0x61]}}, &(0x7f00000009c0)=""/26, 0x56, 0x1a, 0x0, 0x5}, 0x28) bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f0000000a40)={0x1b, 0x0, 0x0, 0x7fffffff, 0x0, r7, 0x7fff, '\x00', r5, r8, 0x0, 0x2, 0x1}, 0x50) r9 = syz_genetlink_get_family_id$ethtool(&(0x7f0000000b00), r7) getsockopt$inet_pktinfo(r7, 0x0, 0x8, &(0x7f0000000b40)={0x0, @loopback}, &(0x7f0000000b80)=0xc) ioctl$ifreq_SIOCGIFINDEX_team(r0, 0x8933, &(0x7f0000000bc0)={'team0\x00', 0x0}) sendmsg$ETHTOOL_MSG_DEBUG_SET(r7, &(0x7f00000021c0)={&(0x7f0000000ac0)={0x10, 0x0, 0x0, 0x8000000}, 0xc, &(0x7f0000002180)={&(0x7f0000000c00)={0x1570, r9, 0x8, 0x70bd26, 0x25dfdbff, {}, [@ETHTOOL_A_DEBUG_HEADER={0x3c, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r4}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'macvtap0\x00'}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'veth0_to_bond\x00'}, @ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x1}]}, @ETHTOOL_A_DEBUG_MSGMASK={0x138, 0x2, 0x0, 0x1, [@ETHTOOL_A_BITSET_BITS={0xa0, 0x3, 0x0, 0x1, [{0x18, 0x1, 0x0, 0x1, [@ETHTOOL_A_BITSET_BIT_VALUE={0x4}, @ETHTOOL_A_BITSET_BIT_NAME={0x5, 0x2, '\x00'}, @ETHTOOL_A_BITSET_BIT_INDEX={0x8, 0x1, 0x5}]}, {0xc, 0x1, 0x0, 0x1, [@ETHTOOL_A_BITSET_BIT_NAME={0x8, 0x2, '*\x1c,\x00'}]}, {0x18, 0x1, 0x0, 0x1, [@ETHTOOL_A_BITSET_BIT_NAME={0x8, 0x2, '+[#\x00'}, @ETHTOOL_A_BITSET_BIT_VALUE={0x4}, @ETHTOOL_A_BITSET_BIT_VALUE={0x4}, @ETHTOOL_A_BITSET_BIT_VALUE={0x4}]}, {0x28, 0x1, 0x0, 0x1, [@ETHTOOL_A_BITSET_BIT_NAME={0x5, 0x2, '\x00'}, @ETHTOOL_A_BITSET_BIT_NAME={0x7, 0x2, '),\x00'}, @ETHTOOL_A_BITSET_BIT_VALUE={0x4}, @ETHTOOL_A_BITSET_BIT_INDEX={0x8, 0x1, 0x9a}, @ETHTOOL_A_BITSET_BIT_INDEX={0x8, 0x1, 0x1}]}, {0x38, 0x1, 0x0, 0x1, [@ETHTOOL_A_BITSET_BIT_INDEX={0x8, 0x1, 0xe}, @ETHTOOL_A_BITSET_BIT_NAME={0x6, 0x2, '#\x00'}, @ETHTOOL_A_BITSET_BIT_INDEX={0x8, 0x1, 0xd}, @ETHTOOL_A_BITSET_BIT_NAME={0xc, 0x2, 'syztnl2\x00'}, @ETHTOOL_A_BITSET_BIT_NAME={0x7, 0x2, '\xefq\x00'}, @ETHTOOL_A_BITSET_BIT_INDEX={0x8, 0x1, 0x3}]}]}, @ETHTOOL_A_BITSET_NOMASK={0x4}, @ETHTOOL_A_BITSET_NOMASK={0x4}, @ETHTOOL_A_BITSET_VALUE={0x5c, 0x4, "750c4569ea703f4f195b5c49175b6b3d42076f925399345ac6a7683693b3e318e5e6ba588bc13ee1e939c285fb14bc3a85d5494f10b1cad340c0158ef630b0e9b4cded9cb9f57b14034f359b028712a6b5687ea3699c9872"}, @ETHTOOL_A_BITSET_VALUE={0x2d, 0x4, "fac3f52dd5865ef99d516578f2c4d46e21a34624243827215a0600075e81f3cf2f02f818eb1f683d94"}]}, @ETHTOOL_A_DEBUG_MSGMASK={0x10f4, 0x2, 0x0, 0x1, [@ETHTOOL_A_BITSET_SIZE={0x8, 0x2, 0x31}, @ETHTOOL_A_BITSET_VALUE={0x14, 0x4, "58bbc7f9ae04f1da5719183f677f027b"}, @ETHTOOL_A_BITSET_NOMASK={0x4}, @ETHTOOL_A_BITSET_MASK={0x27, 0x5, "39fb0523034c4585f5ce14abb45029fa1ceb6bee9159abc3c9e259137c19e86e312a08"}, @ETHTOOL_A_BITSET_NOMASK={0x4}, @ETHTOOL_A_BITSET_BITS={0x24, 0x3, 0x0, 0x1, [{0x14, 0x1, 0x0, 0x1, [@ETHTOOL_A_BITSET_BIT_INDEX={0x8, 0x1, 0x7ff}, @ETHTOOL_A_BITSET_BIT_NAME={0x8, 0x2, '\x88,{\x00'}]}, {0xc, 0x1, 0x0, 0x1, [@ETHTOOL_A_BITSET_BIT_NAME={0x5, 0x2, '\x00'}]}]}, @ETHTOOL_A_BITSET_VALUE={0x72, 0x4, "c9ef93edcb6bbaf114a7225ada6b5ba280ecb5fabda050cee205faf50fed35b866c375cedb1c95d98745b4dd3ceb97fe8dfbbbda49ee78a8e1407e835b921113381b6c2a4bc65f916ff342884374d15143e4c834ba9156bd2cf4a3f9a248b174302e02f76f8d40c88066afc61238"}, @ETHTOOL_A_BITSET_VALUE={0x1004, 0x4, "89bdfebd1ea60b71e914546fa9772cd60f96d4058979c8e94f5208687417fe2844708a7bfffd8432e6f04e266b5d200e43eddf92b98a59d582090cc0e0eb203d4f1e4b5a2714957b829b5809dc4126ef8db24f1cbdefe1e6c33bb5c8c31383b87603d21da9649a8b2346cea293e283ad6c2d0b6a22e27e45c69f8a3b1594b9b70dfcf8231bf8abbb0786a04c7f81492c14c15448bf5600f77af72beb0982fa1b5ced89393eedc8ce4584648a929c8e266283221461d25a27c9239ffc33b827a9fdad59e675ffa229327cd64a2ce7df017bcb51d11eed86e86dcbd1602d9378b542a6319cd47762d5dbdda82c17ea4dfec76e746ea312affc856486925e6af087f283497a4e56b0ffd6c403960b54dd1d3bba6de771ec94a82bdf906872f8acc8d896a97abaf2f86c53eceb7bb4b9f424e56d6b4e702dd20a90df8da08be450e5e2b20f83d8ddaf91fda36413c1e84aa1311f4d4d524000b4e3bf303aad742509f1078845bc9651ca6c33947024e4e0931132cbccccae5575e33c5e0e0912e4fe283503e3bb336494143b1d1c5f4e90beda10493da910c6c067bcd7ca479b6db51ba61b000c89395a0af61013593aad021cb1f75d1ece5cdafb7b488448d0e830aa6ef3ed60191125f7dfdf27a6f1142e65afdcf0d2be3c2a1ac965100943071585def90cd6653b0662643a9b4fc1804321fd984643f6d13d4037802818cce40a9f173c57739d08bee9ba1dec55d338cca4875cd0bf0234edea6ec39091c62f270cb3624f28ef6fef3a3cf3c884de23f88e3728186efd7a3ce0243d2e5f7deeafb63c2b9743132775524153bdce8ddbbf72237b8fea87a3c1cac16ff8db4f2cd35e2fdc6cf35eb2e9c9372fdab2da4a35a0c50c12bf8480a01d759c0887230c24049badcbca50e03b653163c96b2a2028ec08c8bc6d1409e69e21fcfd08808ce0dc256a70523e8c485cbfc5b30b6d8bfb676bc3d9f0ed6ffd96bfbfd427ddf32406efcea1c1b9597f20c91ddc66cb7e555eb6d815cfdf5fd7c5811bf4bb5fa8222a5dd3f8e87d7944b0bb16e591536f1cd7da27b963d65cb6fe8d4f441e49dcdd30ab36d6330cc517c1a5c112c5a7f3478dc22c9e2acec4d1e288b750a57d7d3679fd6ed2d0622b6669c0b8ef7771c7aaf35d84803daed7ddbb0c9c205bfc94659ec0d4fc90d1d3561989515519ac7cb61d2aabcea9f210acdad9d4b128be15cd42bc9dc9e69a877a85cd587a4db86c688dcc174e588806ddc859a0a1d25fa222cc4940c705b8f1d38c08f050c17c47f2926fea1ef99d5b711af3d2eeadbb0f03dbfb8ba19a1ca6068a0334bde55221bdff2a73bdb152f26f088cfa732731777d02f0b17f6f41b8dc302a30e4b907700457d2bb9b50172e3dbc7fd826ef4bcaa68b6299934934737413e39d7a434b1d8333749b7c09af3ee00087855d81fe088bc2f3da33429c3167ad0fa0a97fcb4cf98e280955a490e7c19209290ae2aed79eb581af8db83bf3bcb0c1af5d41baabe2e556ee40910c8c4630cfd0c2327e874d88ec6a5be578b53a41f6a7ece2dc3fb662370618f3610e148e99b26a22feb61bce5a821f6cb1b1f967f7c62a85618bb9549f8c5dcb1b8771e8495de9417ce0781bf01b3f3dc877411abc212480f657315af562aec57ff4d1f8c9374fceb02bfd2fbd062d322012adb26eb0a07c897a8226568b75293dde71c7fafc0f0d122680eddc97671b633cbca73766ac4e716717430f037004f0e1d551cc32b707c62c75a0059d86ec3153936f1f4943511074b6ae541f07a8521b119510e0a6facf2bfaa89de5edba95f89ba0c53b91cb0cf970f685ccca21b19ac7266ce3c78672f053e85dc9cb0efe0f078bafe690d5610336558d977f6c1713b93dccb56abceadcd63fb94fd7be0b513c0146b46215a29b5f27afa6ce32422eb4c7913ac536beb96f62990d3a24b978cfba50ac7811154544defaf8acee318293811e486ba7029705b7c3725cc0f781f031a038d55b0926d4d6a07058ee15a5334db7dc7d20155bf6f22ef1f38099d60e5b491e51fc4a664928db8bb02042cced878620d95f9256bd3ec41f7210b0b7643e207549c87a7bb44d042af0ef2240051548d9390cf094336183d70829f5c36dde411df4344fb8bee48a23962347a26d86410ef7ff60134fb23af5b9234f59a614c9cec6f81c8d2b251b5b963fad0501279a3963c3438afc61a7053b0bd98dcaf156519dcff7764725a4f819e23c3bcc8763d6d5dc9f078f98ef21e0b3e08b269cdb46f8b6da6d0f4bda355886fcec51c487a435611e2e5d5202e3e86b63a9dbc3683bb99183b848976befb2ca0b7a0bd9e45a8e26e8b4fac68e88b0e7e1ed3355317b8a2553e47d5ba50303694c3db2bf02626b53e357afc140fb56d1a44fe729f4a4bf5960cbbe2df946e5548eae65a80eb34050b36635a3abfbf861d23b34e44db0a63aea4bab5dcb22eb8d98219fad9c09b6c5a8f397a4694468b867635bc1376d592f6422ee28c4329c881dc7bc371691eba45f4de87bebb855b736f554dc37e18b807ae33aa53db01ff602c021a010d8dbd91e9d7a07bc8377f97b69ad388e4687d52b5acd0b6518092cedafdf96240e5963fb6c174cc32ae44a35d0aaecd0a727e55056b6e3b7f6c933cef120367d8141c8e2d415ad30c7f0ed7f978c1700196f425b8e24e31ecd0499052acf48a730c22c81d6a0a56137fdb0da1305bbbf7430ef2a1f09885d0df5c8fa9b2a000b9c3874022a2336aa7cc20eba893ff87465770def427f5e670f2e980058177964bada7d13cf2e583b336b9ecd5e68b55486c45696f744309b57e929e466bd522db858a8d1ef026ecf28e2e20f885340e57165c0ec7cca3714c1327d5e9ab0129eb48e6e8b5a141c1ab7b2365f2c220555678e360ba976c3079bd99784237cdbfd10401dd63722ffc5afc0d0ae66ff41155aa05654d2eb7e32ad72993a807ff511c85378695fbc50e26d41feef5b8e21b41843a81cb951a16f5a4d2ceda356ebfac8a688f9a008f0d9701a188d7406e90443795e560df93108c6079ef280bf265063dcb2cc57f0cbe85ad9de27cf1c269a44ffb9a3c8fc449e7b1939eca69b68919551d0f7bab7f8a93ec1d55321370646035313e11275fe6b0203bffa0c4ec79ca9c6963b4c9481424f7a9141db1c7fb41e4b5d365b679a47eefe7718d8384c0fe3adad0a90bdd3b84b3fcb1618bbefceb7deac8d4e4ba872d3912f20c14856a250c548179c3d0b336a93d6cd46c3a5b65d0eef3a4a880e63000c41e4c4d431b996b7419c404c21bffffdabd2b808c98ca34b2a688294ed21b03d58f24e139b4bcc20494aeb7654c29a66d9fd9541b6636bf8b79a588781837ff65fc6ac92a4b39fbca3f504343c5ac411842141808ecd8648206c334546a0f8671cd8ae1417c2e01d98fcd115b6b57fbf82079fb94e6dd738080d996355e4f286c68d07664035f3a8fa25ba15bf6e82c64f0997936b0fb97aa226ad9d6fef727190c67458b48788cc35e7f7bfa5c55cf0825786234ee00cec21256030b24f46e97fbc1124c3af764acc34d601c9d1459ed88b1e94f8c140d2d8cd14191be1ad133a664118c68b072ce0d6b185f52434e14cb860b9bdbb1a5eb48a97fba41a6102932fe4bf275f91db21bf69a2c441cf9eda9f4d7928b77eec4d38e170e779a828e112900b3582e44c1c1a6bf0641504934ce1458ef90db08c0dc614238b15f518c473aea8df6af2da8312af75a23935b6558be8b1e80c41d5c84c6cc83cd7335c95a79d1d7d9e0da31f588e320bf561c81582d7f029716237716ae75047642719f9038795cb17c04fa267caea45c325f176221c281a58789bc4b4765c8419bcafb3f260828e34b64273422f9d76e0098bfe04cd5e5cf701e72342e129c86bcdfae20216ad73b1bdbfb879152c190d2824104ed837be08af30ee95301a9f44eb7e8b7f2686258d1310ca92850cc359a282675b9d485fcade1a0df24caff0f827f4dc580727566682b09a011f183df494f3446f4b647446aaef117d2603eab23f46b7b3d89a890b652cf7def6b42933b8733fface7fd9ed6091d96b65136337a733b40d2a9c3049d2f9a4a9031f56f6a9cce50a37535e3c79e115cd9bbdd8a246769a1a60196b7ec4827208988d883bd4de2e4eb067a920e9380ca1ed7c54bb32baba6396733bf692ab815ce13b12e2ca01168e453df9360f78eafaef4c6dc5b984b722b4c1dbb9151b91c9e8b3b6492b40d0f472ee50147cd7aea788753e6e472564ad19e5203d1499e3f45798de482b4f0282bc651a4aeac5cc52dc6b100c93eeb218b5196db1b0aa56a8aaef89220a3a8822129296df08b536772ff4fc36cb3249dcb451d0e797130205b2f2754de8aa4b637b55076353a3d5fa32d26783dd13af55930f14eb907723e77eefd42f5118d1d547d05cc9de3ef90bf81196d647f3d98112940ae11941688af05b389819f4ec14c7e7584ba887843ba4a839b8f93cfbcaca5fb3f0179aa07e705fffa7412016e89489d1ea6b11bb537980063064b6f1bf59e5e98e6d065278925291584f7e9c00f19080ec829f7195806c5108fb8f75c43625a8eb11928a9a6f9186a27b0f10a0d49ccd1d8fdd67fd92258be9a5c1e86e12f08d5db79b2f3dda936a9f375da83c9d435783748604ca449ffc066125538917877cda9a8c2c973c222e35fd0910ce40cf72e64d755ecc052f0946d1bd2de9a5a0c64c217bf86515a6d505c1c937173a1049d2ceba56e32f7a5e4247cbad6110ef07c4220b1ceb264bdf90a7ee61888c5217c31b7e0d53021d34bfaedd98f75c6d5e6fd9a9d07e18bb6b3859af4e77c9715fe9fb2734b43ae1545f8cf64df33b1d4edafc4289a354e19dcdac3dac472e3fa55ddf2818c7815a123fedf8d4ef821d95371662f0b208a3b4bfa4a4b0bf3e33d3491f4672b88bf589398c038cc69c22d953e5274875b4d762fad4e19aad18956221cd266026584834cc19162971ba3f1b91a001e6008b1a605fc8d40f98d5bb117795c33d1db92e4f9d5af2c13fafd839e92ff5e3e5065781c70778b398c610bd8b5285871be3a9e7e8bab42cc5901c898702de3f4780bc793487a1b2a0d8f5b54223d02381da54141d2b257650fc5b4e5e6bb2afad7c0dc28992494d69c72a3af189ee5df9563657727f5a0616a2fa04c86d7127b8438c3f3efa36ffaa89f24c66251020007214f1366ba38b03c99a59f7fcfd2de6a7af2e3d0ad75ac8494380a17ed13cbb75bc657ae05c923f56422b36d5021097b756896457bfce1bc0dee774750f6ee9c49e79fbb27e25c3544914ec8a87d16313c48ea32e781753aef56e81db6a63ed1eee8f5c37d0ab640ccb8679bc6ea4d08657ef75ed30ffbefa8c2986a35b556080914bc416ba93687ebe497e7ee83bcf6f4b879e1cf6f2b3cf30c5bc89a18b6352575f7c567c3deabd6ffccf1edd1ff7ac694b63f7cb5500625d3a186569dcd16c0ba51ef56f0fc49066536cde530dfd1445f44c7ad462149453dec3e4707cf34c791324aee5d365f04305d47eb685991b856c557c902947e614e0513ecc3e2de74cd211fc2720a54b4f3f6ee21d7636a64819b300a3bac513126c28b153e15c6105f27608b7396ab85008a2ad9bbd6306554c0d6942e41f926e0646b5e35612b5eb163741f0b62a881e4ec11d468d86a42fd7d3ab01f5ef35b4320f14be3c0c4468231a9a7b6c5370fccf6ac4640db7cebbbb3c99e318daa4b22965a2d435262b9896dd6ec11f81dc90c340e9940d5e0334"}, @ETHTOOL_A_BITSET_SIZE={0x8, 0x2, 0xa2}]}, @ETHTOOL_A_DEBUG_MSGMASK={0x238, 0x2, 0x0, 0x1, [@ETHTOOL_A_BITSET_MASK={0xc0, 0x5, "8fd6a984abe3d216403ab552345ef02956801f90c9f57f03773fe1366579213c0f407defda1a4c6a67eccc6b6ef30508e480a1dde9301b71c72c64e34e3e3c1411eccd3d0db8c856834ace401b9d627e9a75aecf585a06d16943026d270aa855b9646f9ce2307d13bee960815ab2afc7f89a0092633e059f518bbb6545d977f4b6216271d8da61005d6a238f84c056200195f24192910b94149a5ec8cc676f598719963774b8dd9b9a9ef52a106e419a401dd58573d23e46009b9666"}, @ETHTOOL_A_BITSET_NOMASK={0x4}, @ETHTOOL_A_BITSET_BITS={0x134, 0x3, 0x0, 0x1, [{0x38, 0x1, 0x0, 0x1, [@ETHTOOL_A_BITSET_BIT_VALUE={0x4}, @ETHTOOL_A_BITSET_BIT_INDEX={0x8, 0x1, 0x1000}, @ETHTOOL_A_BITSET_BIT_NAME={0xb, 0x2, 'vxcan1\x00'}, @ETHTOOL_A_BITSET_BIT_INDEX={0x8, 0x1, 0x5}, @ETHTOOL_A_BITSET_BIT_INDEX={0x8, 0x1, 0x80000001}, @ETHTOOL_A_BITSET_BIT_VALUE={0x4}, @ETHTOOL_A_BITSET_BIT_INDEX={0x8, 0x1, 0x80000001}]}, {0x10, 0x1, 0x0, 0x1, [@ETHTOOL_A_BITSET_BIT_INDEX={0x8, 0x1, 0x6}, @ETHTOOL_A_BITSET_BIT_VALUE={0x4}]}, {0x20, 0x1, 0x0, 0x1, [@ETHTOOL_A_BITSET_BIT_NAME={0x8, 0x2, '.%&\x00'}, @ETHTOOL_A_BITSET_BIT_NAME={0x9, 0x2, 'x}.:\x00'}, @ETHTOOL_A_BITSET_BIT_INDEX={0x8, 0x1, 0xa0}]}, {0x20, 0x1, 0x0, 0x1, [@ETHTOOL_A_BITSET_BIT_NAME={0xb, 0x2, 'TIPCv2\x00'}, @ETHTOOL_A_BITSET_BIT_INDEX={0x8, 0x1, 0x5}, @ETHTOOL_A_BITSET_BIT_VALUE={0x4}, @ETHTOOL_A_BITSET_BIT_VALUE={0x4}]}, {0x3c, 0x1, 0x0, 0x1, [@ETHTOOL_A_BITSET_BIT_VALUE={0x4}, @ETHTOOL_A_BITSET_BIT_INDEX={0x8, 0x1, 0x7}, @ETHTOOL_A_BITSET_BIT_NAME={0x5, 0x2, '\x00'}, @ETHTOOL_A_BITSET_BIT_INDEX={0x8, 0x1, 0x4}, @ETHTOOL_A_BITSET_BIT_VALUE={0x4}, @ETHTOOL_A_BITSET_BIT_INDEX={0x8, 0x1, 0x800000}, @ETHTOOL_A_BITSET_BIT_NAME={0xc, 0x2, 'syztnl2\x00'}, @ETHTOOL_A_BITSET_BIT_VALUE={0x4}]}, {0x2c, 0x1, 0x0, 0x1, [@ETHTOOL_A_BITSET_BIT_NAME={0xc, 0x2, 'syztnl2\x00'}, @ETHTOOL_A_BITSET_BIT_NAME={0x5, 0x2, '\x00'}, @ETHTOOL_A_BITSET_BIT_INDEX={0x8, 0x1, 0x3}, @ETHTOOL_A_BITSET_BIT_NAME={0xc, 0x2, 'syztnl2\x00'}]}, {0x40, 0x1, 0x0, 0x1, [@ETHTOOL_A_BITSET_BIT_VALUE={0x4}, @ETHTOOL_A_BITSET_BIT_VALUE={0x4}, @ETHTOOL_A_BITSET_BIT_INDEX={0x8, 0x1, 0x8}, @ETHTOOL_A_BITSET_BIT_NAME={0x5, 0x2, '\x00'}, @ETHTOOL_A_BITSET_BIT_VALUE={0x4}, @ETHTOOL_A_BITSET_BIT_NAME={0xb, 0x2, 'dvmrp1\x00'}, @ETHTOOL_A_BITSET_BIT_NAME={0xc, 0x2, 'syztnl1\x00'}, @ETHTOOL_A_BITSET_BIT_INDEX={0x8, 0x1, 0x80000000}]}]}, @ETHTOOL_A_BITSET_SIZE={0x8, 0x2, 0xc}, @ETHTOOL_A_BITSET_VALUE={0x31, 0x4, "a3981caf6e372ef90d6d6754afefc423fe8ef1ea06aa6d1de3fae94b6c3c216dc17a22650dc5e5b5fabcc75faa"}]}, @ETHTOOL_A_DEBUG_HEADER={0x30, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r10}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r4}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'macvlan1\x00'}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r11}]}, @ETHTOOL_A_DEBUG_MSGMASK={0x8c, 0x2, 0x0, 0x1, [@ETHTOOL_A_BITSET_SIZE={0x8, 0x2, 0xffff8001}, @ETHTOOL_A_BITSET_MASK={0x7e, 0x5, "ce461c2e4d7756470dde1e9eda9f1c1799e6a0e82d31be14f321c61980e8b2072ebdedb24a1caf37dc18f355b6f3e368cbb8d6008781e723c0826e309900a9aefa22dddae71d7a43cd92be834c082a7732aa04052df4ee473125577d0efe84a08da80f3904634c1598cf7b7d59641704a45b7f7994853c842257"}]}]}, 0x1570}, 0x1, 0x0, 0x0, 0x10}, 0x200400d0) ioctl$XFS_IOC_START_COMMIT(r8, 0x80585882, &(0x7f0000002340)={0xffffffffffffffff}) bpf$BPF_BTF_LOAD(0x12, &(0x7f0000002300)={&(0x7f0000002200)={{0xeb9f, 0x1, 0x0, 0x18, 0x0, 0xc, 0xc, 0x8, [@fwd={0x2}]}, {0x0, [0x2e, 0x61, 0x5f, 0x0, 0x5f, 0x2e]}}, &(0x7f0000002240)=""/161, 0x2c, 0xa1, 0x1, 0x9, 0x10000, @value=r12}, 0x28) preadv(r12, &(0x7f00000024c0)=[{&(0x7f00000023c0)=""/38, 0x26}, {&(0x7f0000002400)=""/89, 0x59}, {&(0x7f0000002480)=""/26, 0x1a}], 0x3, 0x76d1, 0x9) ioctl$sock_x25_SIOCADDRT(r12, 0x890b, &(0x7f0000002500)={@null, 0xa, 'pim6reg0\x00'}) r13 = openat$tun(0xffffffffffffff9c, &(0x7f0000002600), 0x8000, 0x0) bpf$BPF_MAP_LOOKUP_AND_DELETE_ELEM(0x15, &(0x7f0000003700)={0xffffffffffffffff, &(0x7f0000002640)="7a4b58e66f549477cf71e43080b08e145d6863f21c9f9916e912d1238673b59c3dc016728fb507793dfc2ca70538e5ea39c7799f5d348ad9c6860040d51d2bdcea656025e280ecb49fd4b4282e01cdfef90e20f4fd058a01bb32fdf90df66fc28d8a6eb444f3528be5550a7f3403c7661b20466924df702c93b5af34d11c5e32fe6a29930a05ed18d822c6179f802c51f90692f2c47a699050203a446f71b0794e6c12d499b9a8eb95b2e5ec9e371a250097d7e09e413208e1ce38e725797c133e53242e6afd28bff3e1adc1b89ad9ffc954f431f5f000e61b3e27e5beabbf231537d19f56864da581a7b0a6e3271137f2f2bc80d0e0af70648bfff75d6bf7f4508b7fa06634db89df9a7e22b580d75c67213f522346f220a0e2a1fdaa4ef7aa42aae0b939297eb7b4c4b1ed3b1f5956856af1d58783d6cd93bde4deae34f5d39c83e329d7394c7e2e7d79e3a8a0d602dc72e64748a2025be539d55dd62823abd9e12c9b37ca974884083a287140a074c8ba7e5cfb7619a908f3548f1fc1abd79f2083937ebdaeeca9ec1ac7397577ddac93f065172d5c4ddfb79b7e7fb8483e5a1c0ee11f4247fd87618047064cd2dbebfd1171db3ba499cf3c24a81425d6f0b68c98a1b2e81522963d0d680779237fd7d3afa3fa03f76d6309acdc12063062d239caaf4834137d8843fd2a5d09ff1dc8817ddb587df901fd7c5be1169b0bc514ea459176b754bd2d284b6bae8bf4505cb796d2dbffe4ef858108f2016ca7d247c06cfd6cbceffc98aa09851824616eb5543a099946e5a102fc7afb55ea511a44aaa195118aac71902a115bf61b55126906e49e61126271c104fdfc478835514d3458569cdc1ad2cdca69550e643d81133cd3493bd0e0815b552cc19b27ddde34de2c0e1103ef56a6359b59c805abe49e19c0e1c709977572a92cefe4645262430cb8d2e603e2fc2193dfc97f4db6414d7b100be6aa440330855a8e3d760f5f665ab155642dc68aefdabb58abdc8cf111fdf6bd802314a9d74672de8465ac21ea0166b9a9e71cd08f29204c5c3e582969652c8f29b1c4649ec2876d9c0d824e89db56169401698fb4e369f91831c00b5ceccbe3d2a8bf368c660f71e52b9f33a380e600d003bed7d03342c18ddb6b70273cf162ed6ca30b3abf90c730d74876a687f39190e7ec6648b2a35e236721430d012a7275c0fa11fd90226fc6ee10a69ee9a74bd33d9b410b4026b37c1fe59d738d877b9c8efdbbb56ec713a3050e7f2bf3f50c73b98895460d4367e1f47d624826b3b491e8d082148a134a8dbdd848688242981a1388c5f2ec8dd590bb672fd42a530075e95fc736f7f1b5f2a3f89022791648d67ef2c80b6badcccedeead71ae4b6adcb7dd7cf7e436adb1a57b32b129590747a2f10be95f10dab54fc4358b4db677de70534fb872ba79f04a57db24577464bd270af4cc51f098dba6ee96e4b9a4c3152399a38cbd98b7d1eee227798f48d7ecbe8ca567399ce17ea08ab76065224e004c87022e07d0f54c7bd3e3eaaf1eb399601ea2b4e38eaeed030f510f823624c0e8ae9e9e3a394baf92e2c362e5392a029c97d283949fcd0fabb3e6d5d34bc824ab72c20c21432281f23f12c5ddf8af3388c8a9565bef3df380573c4d366fd8f53585a8a92c0089952320fc20ceabbc53e3e5a60ad25e60a66e3d0424f4c21a3aa7c8549c9f0e8d55dc60cb4632c80efdd90bb2c919f4cff1a2f240bccf5c25119b7ff4e1e372c48f3acbc1eb646f2c8b0bbd37e04199d32e1c63b5245d276587e11a48368c2e1f20fa75e86646dae4d81c902568f67f527edbbe6ca2d56832df51674dfd120ad4704c9ce4fc8fcf0b05f19c48a138732365aaae033748eb20ea1e091a29ce578527c972a96776c0ccdc72098004c01ca6c931fe6a7a3d68115eb5a6589eed6a586fc537e7feb4f3af74d78199dcc4c9dacebba3a8923f9366448e8ff0a8e49bae1fb99eee2ed44358d86098efd5305d5c0048b9418694f427760db97c554f68524b7817c1a4cc7f78e773fbfa33d361f2b0074761cc3375c3186394f57f1cf94adf876896e2cf697f4e145be918af0a464f442637f41eaa81d7eda4b709a58b3f00429ae4fffc202360aa24d465b619f0d3d710f05456afa84b1813ee70917632bf0b90ea4d4876a916b06d7976ff69871ad76d632b0b86d2336e090384d801de7cae54c0944449f5aace8de7f4b7eec7b25eea1e8347faabc2e37e842cd7d634c8d0dd6f2c905032c3db29f2794aa90cd4ebfefde71deeaf4d3fb1b202cf3a1cf1110d22c1fea2253869ba62ba8f8635ff4e5c1c91a38808c31e8b0e47657cabb9b0e31d27db177024c133f73a35c60a5eaa710f53511243955f72b6f7b63599d7d42c93e0a5489d8794b07e6fd3fe45654ac91743daf1306186029a347d1f0185a2daaa47055d785fb046188a1eda08f6836e3e7a3e979e1ab0e6581a5bd19c488e56fc15fccdee0a90970b12f8e38ecf578ed82b6fc52558e652de00664faf1404c331cef002f39c20be1ec0def22c90ec0fc5df0f52b140ef14fa18858cbf537b92b3a5f31a84bb3f10c22d899803716eef018ff0795b811ab37fdb777c7e028e20d572f27485b7802b5ec5b6aaf4413c9601bc53f5d813ee23507ea759ca074ad46544b1f2b6bbdd651ab88211b8e8bf7da0082a3181869fa7a784b55406829c3358ac60ae8e0a5f572c36ca88e24667b42a6612fbf19e3deb5db581bafdc3c143d876241dfeb5aeef7777046cfedbc63e96d148b6a7433ded4f6bca3c5e0a9d32c7dc477a6617e31fef6efe47edbd394b6ce9da6ba206efb0ef0d15ccf9c295719d12bd97600ea3a0bb9867a7d1d4f1cfed810a1433ebc41cec5a7b4b2ef6d72923a4aad8ac9954e086b162690fb65b669f6534c32b5721163d3bca29c1a40972f285487ea0c5acc82da912cbdc0389a396d25074e2626fe62a77a8c8a8560c53ef0db013da05b5ef1925f5785045137e752c129abf9dcb6eabe04bf959ffe216d35a32fd0c988167aa5fd82e74a174adff60cb943614c4e0f9f2ca509e573d7011f4422fdc400487ac6f738d16656caab6a0971c717178e373f40cff51c323c6e0bac645cfdcb82054a86e9e8fe9c2cf3af664c35b3e7760e246b1116e0fd8f90095737def010da0a7cee2002bac66b9d46b64404d8492f15744eba9f19ea0566347f14a90734ad6eb14d3201b943394c4ee34f13cbf716a9871ce017fa5f185a082d9a79bd89c327cb048b0b079cffe6d0e95eb3a22abff14f3c063eea29105ad94c2bd22db9d39904c15c320551237ed311ce69961bc04d2797abf045a6a85b983903e7f82f96b09136b3787ffd4e48f4ec2e57cc06883ef8f75948c5518553d753f0636d04bea3f8ad2688a460fa7f5d2bce44debbd7b702fdc9781e0343843e28b405f7535870e739acdc20d464f00026dadb0e703845313dbe18f9486422da9251cc3f19cc7a93aaf01308e59258334b0ae69bdf0189efbf23895dabe2803fce92b8f38939219745869fa1d8d88f13ac6f4f48ea8a5255d22e882c7dfcf563519e25aacdbbf2811ddcde06942cabc8643e2e8de5e989c6cdfc0e3ecd81c1ae8fc23b6dbaef8d1aceeccdd45e49856f94970fad9c5eb9e36ec96cb4dac87dab488fbf32d428b5e133bbe2127edfdef880074c4128c7c46b6090f85b5c6af4aaad87ce54d02779d4a214c84062a4806c3a7d42a339fd5b5746e8a3e6f2908893a277f7ed1a0ef3551e8755ae7bba7ca62486a6d57f68915f9a4a41c83c9023d4e515db9fab3db2492fba89b0b93db0a94676db2bf6b500eb73c3313de61254cc02647b366d62cba488c2c36a3030b7e4043d4ba9f6048a7e524090122a53c7fb631bd36eb159a68771a66da0a88bd98cf812f4044198d94d3c4e6c1379daf7d435a93350906451498da394dff72866ffd518b63c3805fb335112f910430338582cc03cf90feb3310b0b6fbab6bc13028fbc57623e3c913f92ce4cdca64ee52dda773871f87a6daa80371843220770f33ef4c680861e99c049bd3d4cc17e5145d0d2a0f80ee9779119d624a3c95a8b8d7f9c053c56a7aae96b4b90e2858bcadae06b43acc6761c95fe351f03fe5d86171f1551a22ac0c5e305b5d727ebfd693c8d2f6b360a9186c52bbcd4f92ecbb6334a24eabf65ff96449f420ff2f5915d6eaad2e6f0ac1a646369eec432f8b2e0741fa5a3081bfac5bc2fed18814ef83070bd567ab506799fc38a5dbe4f00caab0f2caa8fa8e46695ca350eac571e32dca0141fd09475db28012fa186e407869da1dae10b7a488d6968e08a69ddd431902f851a158cf09b298a624651bdea39b368362125c1cfa99dbf3333913a68eeb00ffbab3b9ff5c05605880cc85a5a2f301fe4cf6bb72aadafbacd78c9e012e16db61d215f635c4546bbae179d969f9c3ad789c3bb7f56a785e470daca118bd5757489a352e0db4f8957c82818e6d71dd2c42451561d62a214438294f06cb086284a901b088ee4a62ed92eb3d70f15e9dcf14d01e37dc286d84cde3b428abfce16510bc70a37c1dd8cd075dbd6062d4d9821067efd2a9081cfd8c1f41d235c014c1a9b8f2474a90b2017a4a548003ce6b2a2c917b3c2ab8f9f99682e6a42180307e9608a647a6ccf8b28b5ed99a7faf94d710781c29fffc5d9df4d52c565453cc35dd8129462506537a1f51cb10cd0dfbfd06369c4b4fd39331ebe6b47745316a979a9f36800d76a0204d9aa1dabb326878f911afb8fb9835539ca7eddfff7f99c836a880474cd7fb2489506c6b952a9515b07a88512e3bc087bdccda8a1d6c311bda39d835c7e09e880efd09580cd9ee80520e105812d6c7f2c160504cf25bc4bbd3b5cd34e97d05c948a9ad822643189674f669b9e9d8e7668966c00a87d772fbdc3edf9e2674a17f222f2ef1be54b5b95ed110360df7cc6f81c16ce5b81e828889c5a2bc390ad27ce1dd0f81b80e2186b2ffd214f457eee35cd7bdd23fda6234fc2245dbe643254cb563d17890dce46420e5b39ca69f3141a7ab5e09f495857e843ee827eaa643933ce1195ce1835b0d3037b2ab05d1611679f1d9df00511507d26ee2ecb2e9cfccd7c6cba483efe25d624299c5c677d24470376012bee9fc69baf71bf615ad19484db5162e57685ab776466025cf226e892c30ed49afaf2d8d6752d2585be1d466ac22e7b82db8a3b57dec95f42f61bb91bc4711afe6f8d9ed3b06c710b4173720728de6f5eee65dc207ca7140dec379b1a1d447afb03c1f796889ec9f7d3d44a14703402a044a85ea9718f5d4089fd2e88dcfd046af16abfd5393ff1eea068c49f2034fda57964bc4cd9e2679e65a4f0aa630e4db8a1b92ca886387c15f574481cf9a48ae30dda976041a5a220354c8f2306a8c7d757141f421918830ba7f6c389f640bc0dece1796e67410913007a4cfb27eb34e1df64505c6227ffc3bb8d2db61cd71ddad6b7b41984eab0da5ace2664ebd6aed25b36d786608894091be295ea24ad1e0c153c00de2d7201bf3734b0e1e7a0b6b82249e3739a08d852b239d8ddbf741ba57aaad34c4049e222cee13bf4d60992dea98503d54b36da36ad081082c5d22cde14e71d3ffeabec2a9ea6ad3c85f6de67588ae946b8811bd17dae802020d40ddd94552cff3f1db1bdb3ec5016e218d5d9635655f23704dbdb5a628e0e69627dd1f9d97fe0b64eb11f5b2f84daa424f41351b511e7a9bd310f6eb2498b353b20a1ea2b106c0f11c719946becee790a5cf85a2d885b4", &(0x7f0000003640)=""/129, 0x4}, 0x20) r14 = socket$pptp(0x18, 0x1, 0x2) connect$pptp(r14, &(0x7f0000003740)={0x18, 0x2, {0x2, @private=0xa010102}}, 0x1e) ioctl$XFS_IOC_ATTRMULTI_BY_HANDLE(r13, 0x4048587b, &(0x7f0000003b80)={{r12, &(0x7f0000003780)='syztnl2\x00', 0x40, &(0x7f00000037c0)={@align=0x9b, {0xb43, 0x5, 0x1, 0xf92}}, 0x5, &(0x7f0000003800), &(0x7f0000003840)=0x10000}, 0x3, &(0x7f0000003b00)=[{0x3, 0x2a7, &(0x7f0000003880)='\xff\xff\xff\xff\xff\xff', &(0x7f00000038c0)="0c6cb280a2a6f1510bfcbbea8619051d1cccf6b27fee78341a3d15f23f8c70e1b6deb82bca1be1d470c233b888de8ec44ed04025dacbade1e085631433ef57ef8c", 0x41, 0x10}, {0x2, 0xfc07, &(0x7f0000003940)='..!\x00', &(0x7f0000003980)="f98bd204d274a0292cd36adb91383d2893de59e9ecdbb2d46f9dc66cfb0363473d1c1a8fad919aaedde806d127baa91a0a8d709eaab8c120688e60b9f2a40a627d287e33c650b29bb3d0e1f149e6a15a2a25233f820216a5ea0c2ab6919d8a87ef09045b8c5996cb99ab6bcafbccd08e6186a492be002de519bc2901579eac6d0afe3a20e64a60af4cfb9f3515c031948dddb8b85c5b2e126505b906a385f4e434e2f7f1eee8864b29679be4f09284ac88ad4ace4db496fded6309a7f1062ad18a455cbb092e0af3449bb73d116c323476ec9b02ea", 0xd5, 0x14}, {0x2, 0xb, &(0x7f0000003a80)='#\x00', &(0x7f0000003ac0)="98bec0e87625106ff2d1bc83c45466773f96ba5dd04da07964424ac4275c46cc8abcc3951e8b94009bca4877aec6d62749e2faaaf28cbc729fd3", 0x3a, 0x8}]}) ioctl$BTRFS_IOC_FS_INFO(r15, 0x8400941f, &(0x7f0000003c00)) socket$inet6_mptcp(0xa, 0x1, 0x106) ioctl$BTRFS_IOC_BALANCE_CTL(r0, 0x40049421, 0x1) 3.732877138s ago: executing program 1 (id=7520): mmap(0x0, 0x0, 0x0, 0x64a0f9e87aacac18, 0xffffffffffffffff, 0x0) r0 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r0, &(0x7f00000003c0)={0x0, 0x0, 0x0}, 0x0) syz_emit_ethernet(0x1977, &(0x7f0000003580)={@local, @remote, @void, {@ipv4={0x800, @esp={{0x5, 0x4, 0x0, 0x0, 0x1969, 0x0, 0x0, 0x40, 0x32, 0x0, @remote, @local}, {0x4d2, 0x1, @cc={0x1, 0x0, 0x460, 0xcd, 0x6, 0x7, 0x0, [@ipv4=@icmp={{0x34, 0x4, 0x2, 0x9, 0x119, 0x66, 0x0, 0x7, 0x1, 0x0, @private=0xa010101, @rand_addr=0x64010101, {[@timestamp_addr={0x44, 0xc, 0xa5, 0x1, 0xd, [{@remote, 0xf}]}, @cipso={0x86, 0x4e, 0x2, [{0x5, 0x4, "2e9f"}, {0x0, 0xe, "ad249e6dd9c0b7a92c845dee"}, {0x2, 0xe, "45de6e80b6a09e0140c81f1b"}, {0x5, 0xe, "2c7915818f2a0bc2e0de5194"}, {0x5, 0x2}, {0x5, 0x8, "1abab815c7bd"}, {0x2, 0x10, "f8ff27f520bc7b97f78be5b1b71b"}]}, @cipso={0x86, 0x14, 0x1, [{0x0, 0x9, "e94a6817de0126"}, {0x6, 0x5, "d6b5eb"}]}, @timestamp={0x44, 0x2c, 0x6c, 0x0, 0x3, [0x2, 0x29, 0x6, 0x2, 0x0, 0x4, 0x5, 0x0, 0x8, 0xfff]}, @timestamp={0x44, 0x20, 0xf2, 0x0, 0x6, [0x5, 0x8, 0x2, 0x8000, 0x7, 0x0, 0xe1]}]}}, @redirect={0x5, 0x2, 0x0, @multicast2, {0xf, 0x4, 0x3, 0x26, 0x81, 0x68, 0x101, 0x3, 0x6c, 0x41af, @loopback, @broadcast, {[@ssrr={0x89, 0x13, 0xff, [@remote, @local, @multicast1, @broadcast]}, @timestamp_prespec={0x44, 0x14, 0xf, 0x3, 0x0, [{@initdev={0xac, 0x1e, 0x0, 0x0}, 0x275}, {@private=0xa010101, 0x2}]}]}}, "4184225304"}}, @ipv6=@esp={0x8, 0x6, "13216a", 0x17ef, 0x32, 0xff, @rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x01', @mcast2, {[], {0x4d5, 0x7, @basic={0x0, 0x0, 0x6, [@runt="f78f0f3721f994745ee1e6c6d28e3111b1d324a37e0f411f5ac49fd5fd21c1a18f7341944e92573d1df6aaa805", @ipv6=@icmpv6={0x1, 0x6, "0d74f5", 0x1bc, 0x3a, 0x1, @empty, @dev={0xfe, 0x80, '\x00', 0x1f}, {[@dstopts={0x2c, 0x29, '\x00', [@generic={0x81, 0xff, "493464c470950989ba5edc54f8cc48474e613e78f6c91fc2bec85554240683e51162917e01b5bfeb06fc87208c8e87acf2de402ad8c0fbbe761e51540b77a0fe3d2d7b1818d1f708ff8b6cc74a0add9f32ed4a8a19cecae53ea6c04d772a8a4d97c0ce518a24af14d41630c982e50e3af5431caa886afb99006bf6297308b22a431f183a7e64bd1b7fa06cfbdbddc0aedb60ec1ea960520a590cf4072868cd70188d7c78cd0b67c5ab58d6fa1f3616c2ee7280a6b92297399b2b982d67625a038cbb14cb0a269f62fefdae66eb3a53670d0066201e8d7425f15fb35e7accfb0a4f49ef3e1f4e2cbca0245a3a21955fd16ccd489bd3732e18dfa551f059f7f1"}, @jumbo={0xc2, 0x4, 0x9}, @calipso={0x7, 0x40, {0x1, 0xe, 0x9, 0x5, [0xed8d, 0x81, 0x8, 0x2, 0x1ff, 0x3, 0x8]}}, @jumbo={0xc2, 0x4, 0x8001}]}, @fragment={0x2f, 0x0, 0x8, 0x0, 0x0, 0x9, 0x66}], @mlv2_query={0x82, 0x0, 0x0, 0xf44a, 0x0, @mcast1, 0x0, 0x0, 0x7, 0x2, 0x4, [@private1={0xfc, 0x1, '\x00', 0x1}, @private1={0xfc, 0x1, '\x00', 0x1}, @private0, @initdev={0xfe, 0x88, '\x00', 0x0, 0x0}]}}}, @ipv4=@gre={{0x1b, 0x4, 0x0, 0x37, 0x280, 0x64, 0x0, 0x1f, 0x2f, 0x0, @dev={0xac, 0x14, 0x14, 0x3a}, @private=0xa010100, {[@lsrr={0x83, 0x1f, 0xde, [@multicast1, @dev={0xac, 0x14, 0x14, 0x12}, @private=0xa010102, @empty, @local, @local, @broadcast]}, @timestamp_addr={0x44, 0x34, 0xc1, 0x1, 0x1, [{@local, 0xffffffff}, {@private=0xa010102, 0xbecd}, {@remote, 0x5}, {@broadcast, 0x6}, {@local, 0x8}, {@dev={0xac, 0x14, 0x14, 0x3d}, 0xfffff844}]}, @noop, @ra={0x94, 0x4}]}}, {{0x0, 0x0, 0x1, 0x1, 0x0, 0x0, 0x0, 0x1, 0x880b, 0xa4, 0x3, [0xd, 0x7], "695d800d72a3b2548fa92e4cdce127d351ba2351909ec380788225cb4e7013801d578814c40e94c25703a9149eeb541dd388c56b7dacd6c21dc03022f7d8cc8e051744a1c4cbf101ca7c2ee8e05f49a76f861e0275b287454d312e6c9bd5c8864678e6a5d0c86bdcdca38863acefbe4feeddace3e94d85fbce036ff000014cee7f3d8f2e7569068e9f3ecd882a0512fa800c56e6299c69f689b80373b093d79ac3597617"}, {0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x800, [0x6], "9e2de6094cc58253490f9fd687852f306825cfd115d2eb28820075446032ac2299e62d2814e4073d867a3c064bae679adfba3763217abd7b5d4005982ec1c7f5145a191a1a896744d9d65488ff2a2038fcf3b92f5b74bae674852b410120b3ca2f2a37cfe2cddf4b6ba1e8525a86e7fe68b3d97f94bb137b6bc6afc922e76fda4c7d20fe2da444c675930776da5bc0fe58e2e34dbb1abda00ccafa5cb6208ff04df5e8ae769c1039e0e5c779ec17cadf9415f697eeceae6d8ca0412f5b188178f953a4f5c04fe3b8bb6e3dcb13d72950b48f7af66bd5f77d80"}, {0x0, 0x0, 0x1, 0x1, 0x0, 0x0, 0x86dd, [0x10, 0x1, 0x9], "314833a4304b0081fe3cc9ed158c5d07064a53bf194750360e0a0d0cb79e9f5c2cabfc4ef185664fe2390a98e620d393ba215ffdb1cf05d7d9358951b0a40cfafc2404"}, {0x8, 0x88be, 0x3, {{0x2, 0x1, 0x4d, 0x3, 0x0, 0x1, 0x2, 0x5}, 0x1, {0x1}}}, {0x8, 0x22eb, 0x3, {{0x0, 0x2, 0x6, 0x0, 0x1, 0x0, 0x7, 0x40}, 0x2, {0xead8, 0x5, 0x0, 0x7, 0x1, 0x0, 0x0, 0x1}}}, {0x8, 0x6558, 0x4, ', cM'}}}, @ipv4=@udp={{0x14, 0x4, 0x3, 0x3e, 0x14f, 0x64, 0x0, 0x0, 0x11, 0x0, @dev={0xac, 0x14, 0x14, 0x3d}, @remote, {[@timestamp_prespec={0x44, 0x24, 0xc0, 0x3, 0x9, [{@dev={0xac, 0x14, 0x14, 0x1d}, 0x1}, {@multicast2}, {@loopback, 0xbee9}, {@dev={0xac, 0x14, 0x14, 0x20}, 0xffff}]}, @cipso={0x86, 0x16, 0x1, [{0x2, 0x3, "d2"}, {0x7, 0xd, "71543975be80a4bd576bea"}]}]}}, {0x4e23, 0x4e23, 0xff, 0x0, @opaque="f4b9d5e3321c79e5f9c7426ef7b0aebdaaa831abc0c6aefca25c27055368df2fa5a53b4374f20b6afd86bcd22e544e517d0a327fa3114f28de6d06151617c10ec3e77baf2cf106f2c29bef06498f47e1c165229db56fff1faab9ae9c960945ab0648e45942c0f6c0c6e3114acb292729d002f24f3a2beb8480a2df799d834c9d1cc24c30f46d090bb74c4252030cced99acb50838643cefc324351a526a9e2b0da6e25edb2f721098dc8e16cdff587d7d9460c18b43be36a99554c5d8192f0da2cd6f2fc5f929b62664506f6c68a4d6662edaa4d16dde9bc5d80b5da0eb523d1234bf4db93805728f398fba0ea302cdcfa4d4c6c79acfe"}}, @ipv4=@generic={{0x15, 0x4, 0x0, 0x15, 0xa5, 0x66, 0x0, 0x2, 0x1d, 0x0, @remote, @empty, {[@rr={0x7, 0x23, 0xdc, [@broadcast, @private=0xa010100, @dev={0xac, 0x14, 0x14, 0x34}, @multicast1, @initdev={0xac, 0x1e, 0x0, 0x0}, @multicast1, @multicast2, @initdev={0xac, 0x1e, 0x1, 0x0}]}, @ssrr={0x89, 0x1b, 0x6e, [@initdev={0xac, 0x1e, 0x1, 0x0}, @empty, @loopback, @remote, @rand_addr=0x64010102, @multicast1]}]}}, "deaf241526e953b1c9e2aac4439a5e620f15e1b9572e35fb2c74e0f265fe0634489196815edd1f90bdccd5f218e9aee80584c3c1a2196a89597915c2fa9441a5cdd3e09fae231aefe34b49c70ffd911937"}, @runt="32137409764ebdb9893a16d4166fc675b0aaf20a6d60e737578f90ed27a65f662f77", @ipv4=@gre={{0x5, 0x4, 0x2, 0x30, 0x113a, 0x64, 0x0, 0x48, 0x2f, 0x0, @multicast2, @remote}, {{0x0, 0x0, 0x1, 0x1, 0x0, 0x0, 0x0, 0x1, 0x880b, 0x1000, 0x1, [0x2, 0x0], "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"}, {0x1, 0x0, 0x1, 0x0, 0x0, 0x0, 0x800, [0xfffb, 0x5], "e80085b5051f"}, {0x1, 0x0, 0x1, 0x0, 0x0, 0x0, 0x86dd, [], "104a69dd50887a9b7ce14b10b11039fd002cf7fd8d93b4efe83349b97b3da26b90c87ce04bad8a18b14e312e98cc8718a91137c07d48b713013835354c"}, {0x8, 0x88be, 0x2, {{0x8, 0x1, 0x7f, 0x0, 0x1, 0x3, 0x5, 0x4}, 0x1, {0x7f}}}, {0x8, 0x22eb, 0x3, {{0x0, 0x2, 0xff, 0x3, 0x1, 0x3, 0x1, 0xa4}, 0x2, {0x1, 0x3, 0x1, 0x3, 0x1, 0x1, 0x1, 0x1}}}, {0x8, 0x6558, 0x1, "a634dafa194db85c04f33756911a35d38b189978757de27005405bde3ced8f73cf7442c0252fe69ebeae77f37b03a1c0d891ab98574273bfe4ce10b59e2c7bfdb589ec81c8eae1540b7141e839a1236130eb9e6051f6ca2801d355dacacea199ad2885fbac8e261db1e3bb32ccc77f1c5ef338086c8100164cd84df26d21d84700c4c76bec21134b512094054f403c5c6cf065b5aac637"}}}]}}}}, @runt="b45836"]}}}}}}, 0x0) 3.717056154s ago: executing program 4 (id=7521): r0 = bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f0000000000)=ANY=[@ANYBLOB="1b0000000000000000000000000004"], 0x48) mmap(&(0x7f0000001000/0xc00000)=nil, 0xc00000, 0x0, 0x3032, 0xffffffffffffffff, 0x0) r1 = socket(0x10, 0x6, 0xd2f) setsockopt$netlink_NETLINK_TX_RING(r1, 0x10e, 0xc, &(0x7f0000000100)={0x9, 0xffffffff, 0x4e, 0x567}, 0x13) sendmsg$nl_generic(r1, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000340)=ANY=[@ANYBLOB="200000001600010a24bd70000000000003000080"], 0x20}, 0x1, 0x0, 0x0, 0x200040d1}, 0x0) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f00000000c0)={{0x1, 0xffffffffffffffff}, &(0x7f0000000040), &(0x7f0000000080)}, 0x20) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000180)={0x11, 0x17, &(0x7f0000000240)=@framed={{0x18, 0x0, 0x0, 0x0, 0x80000000, 0x0, 0x0, 0x0, 0x5}, [@func={0x85, 0x0, 0x1, 0x0, 0xfffffffffffffff8}, @printk={@s, {}, {}, {}, {}, {0x7, 0x0, 0xb, 0x3, 0x0, 0x0, 0x4}}, @initr0={0x18, 0x0, 0x0, 0x0, 0x38cb0a91, 0x0, 0x0, 0x0, 0xfffffffd}, @kfunc={0x85, 0x0, 0x2, 0x0, 0x4}, @call={0x85, 0x0, 0x0, 0x1b}, @tail_call={{0x18, 0x2, 0x1, 0x0, r2}}, @map_fd={0x18, 0x4, 0x1, 0x0, r0}]}, &(0x7f0000000440)='GPL\x00', 0x2, 0x1011, &(0x7f0000000580)=""/4113, 0x41000, 0xc, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x7}, 0x94) 3.557970542s ago: executing program 5 (id=7522): r0 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$sock_int(r0, 0x1, 0xf, &(0x7f0000000200)=0x800001, 0x4) bind$inet6(r0, &(0x7f0000000280)={0xa, 0x4e22, 0x2, @ipv4={'\x00', '\xff\xff', @broadcast}}, 0x1c) r1 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$sock_int(r1, 0x1, 0xf, &(0x7f00000002c0)=0x800001, 0x4) bind$inet6(r1, &(0x7f0000000800)={0xa, 0x4e22, 0xffffff7f, @ipv4={'\x00', '\xff\xff', @empty}}, 0x1c) ioctl$sock_TIOCINQ(r0, 0x541b, &(0x7f00000008c0)) r2 = socket(0x400000000010, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f0000000100)={'veth0_virt_wifi\x00', 0x0}) r4 = socket(0x10, 0x3, 0x0) sendmsg$nl_generic(r4, &(0x7f0000000080)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000140)={0x24, 0x52, 0x1, 0x0, 0x0, {0x1c}, [@typed={0xe, 0x1, 0x0, 0x0, @str='\\,$!*(,,&\x00'}]}, 0x24}, 0x1, 0x0, 0x0, 0x45080}, 0x0) socket$alg(0x26, 0x5, 0x0) sendmsg$nl_route_sched(r2, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000340)=@getchain={0x24, 0x66, 0x1, 0x70bd2d, 0x25dfdbfc, {0x0, 0x0, 0x0, r3, {0xe, 0x4}, {0xc, 0xfff3}, {0xfff1, 0x3}}}, 0x24}, 0x1, 0x0, 0x0, 0x20041090}, 0x0) r5 = syz_genetlink_get_family_id$wireguard(&(0x7f0000000040), r2) getsockopt$inet_sctp6_SCTP_MAX_BURST(r2, 0x84, 0x14, &(0x7f0000000840)=@assoc_value, &(0x7f0000000880)=0x8) sendmsg$WG_CMD_SET_DEVICE(r2, &(0x7f00000007c0)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x1000}, 0xc, &(0x7f0000000780)={&(0x7f0000000380)=ANY=[@ANYBLOB="00040000", @ANYRES16=r5, @ANYBLOB="000428bd7000fcdbdf25010000000800070009000000e4030880980300801400040002004e20e0000002000000000000000024000100d1732899f611cd8994034d7f413dc957630e5493c285aca40065cb6311be696b24000100975c9d81c983c8209ee781254b899f8ed925ae9f0923c23c62f53c57cdbf691ca4010980d0000080060001000a00000014000200fc0100000000000000000000000000000500030000000000060001000200000008000200ac1414290500030001000000060001000a00000014000200000000000000000000000000000000010500030003000000060001000a00000014000200fe8000000000000000000000000000bb0500030001000000060001000a00000014000200200100000000000000000000000000010500030000000000060001000a00000014000200200100000000000000000000000000010500030001000000d0000080060001000a00000014000200fc0200000000000000000000000000010500030003000000060001000200000008000200ffffffff05000300030000000600010002000000080002000a0101010500030003000000060001000200000008000200ffffffff05000300010000000600010002000000080002007f0000010500030000000000060001000a00000014000200200100000000000008000000000000020500030003000000060001000a00000014000200fc0200000000000000000000000000000500030001000000500009804c000080060001000a00000014000200ff0200000000000000000000000000010500030003000000060001000a00000014000200fe88000000000000000000000000010105000300000000003c01098088000080060001000a000000140001010500030001000000060001000200000008000200ac1e00010500030001000000060001000a00000014000200000000000000000000000000000000000500030001000000060001000a00000014000200fe880000000000000000000000000001050003000000000064000080060001000a0000001400020000000000000000000000ffff0000000005000300030000000600010002000000080002007f0000010500030000000000060001000a00000014000200ff02000000000000000000000000090000000300020000004c000080060001000200000008000200e00000020500030001000000060001000200000008000200640101000500030001000000060001000200000008000200e0000002050003000000000008000300010000003c0000801400040002004e24ac1414bb000000000000000024000200ee627ecca8450acd17504d03948ff18f289dffaf32bc04e87434402c4c52d7f60c000080080003000100"/1018], 0x400}, 0x1, 0x0, 0x0, 0x800}, 0x40800) getsockopt$IP_VS_SO_GET_DAEMON(r2, 0x0, 0x487, &(0x7f0000000180), &(0x7f00000001c0)=0x30) 3.008112748s ago: executing program 0 (id=7523): r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000000), 0x143942, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000200)={'syzkaller1\x00', 0xc201}) r1 = socket$kcm(0x2, 0xa, 0x2) ioctl$SIOCSIFHWADDR(r1, 0x8914, &(0x7f0000000180)={'syzkaller1\x00', @link_local={0x1, 0x80, 0xc2, 0x0, 0x0, 0x2}}) write$tun(r0, &(0x7f0000000280)={@val={0x0, 0x800}, @val={0x1, 0x0, 0x0, 0x0, 0x3d}, @mpls={[], @ipv4=@tcp={{0x5, 0x4, 0x0, 0x0, 0x40, 0x0, 0x0, 0x0, 0x84, 0x0, @empty=0x3fffffff, @local}, {{0x0, 0x0, 0x41424344, 0x41424344, 0x0, 0x2, 0xb, 0x0, 0x0, 0x0, 0x4, {[@window={0xa, 0x3}, @timestamp={0x5, 0xa}, @generic={0x0, 0x8, "d58838068b91"}, @sack_perm={0x4, 0x2}]}}}}}}, 0x4e) 3.000819552s ago: executing program 4 (id=7524): bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000001c0)={0xe, 0x3, &(0x7f0000000280)=ANY=[@ANYBLOB="1daa00000000000071106a000000000095"], &(0x7f00000002c0)='syzkaller\x00'}, 0x94) socket$nl_generic(0x10, 0x3, 0x10) (async) r0 = socket$nl_generic(0x10, 0x3, 0x10) close(r0) syz_genetlink_get_family_id$nl80211(&(0x7f0000000040), r0) sendmsg$nl_generic(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000180)={&(0x7f00000000c0)=ANY=[@ANYBLOB="3800000041000701fefffffffeffffff017c0000040042800c000180060006006558000014000280100011800c"], 0x38}, 0x1, 0x0, 0x0, 0x4048011}, 0xc000) 2.901387939s ago: executing program 1 (id=7525): r0 = openat$6lowpan_control(0xffffffffffffff9c, &(0x7f0000000080), 0x2, 0x0) (async) r1 = socket$kcm(0x11, 0x3, 0x0) sendfile(r1, r0, &(0x7f00000000c0)=0x1349cdec, 0x80000001) (async) bpf$ITER_CREATE(0x21, &(0x7f00000002c0)={r1}, 0x8) (async, rerun: 32) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000340)={0x11, 0x3, &(0x7f0000000100)=@framed={{0xc3, 0xa, 0xa, 0xfe00, 0x0, 0x71, 0x10, 0x60}}, &(0x7f0000000300)='syzkaller\x00', 0x2}, 0x94) (async, rerun: 32) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000140)={0xd, 0x4, &(0x7f0000000000)=@framed={{}, [@ldst={0x1, 0x0, 0x3, 0x2, 0x1, 0x94}]}, &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, 0x24, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x3}, 0x94) 2.815760253s ago: executing program 5 (id=7526): r0 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCBRDELBR(r0, 0x40049409, 0x0) r1 = socket$netlink(0x10, 0x3, 0x5) sendmsg$nl_route(r1, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000380)=ANY=[@ANYBLOB="2bff9453c773c090e35a07200d3b4742", @ANYRES32=0x0, @ANYBLOB="14010200000000002400128009000100626f6e64000000001400028005000e000200000005000d0002000000"], 0x44}}, 0x0) 2.51167253s ago: executing program 2 (id=7527): r0 = bpf$BPF_PROG_WITH_BTFID_LOAD(0x5, &(0x7f0000000280)=@bpf_lsm={0x6, 0x3, &(0x7f00000003c0)=ANY=[@ANYBLOB="18000000003f000000000000000000f195"], &(0x7f0000000140)='GPL\x00'}, 0x80) r1 = bpf$ITER_CREATE(0xb, &(0x7f00000004c0)={r0}, 0x8) close(r1) (async) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) (async, rerun: 32) bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000080)={&(0x7f0000000040)=ANY=[@ANYBLOB="9feb0100180000000000000020000000200000000400000001000000000000010400000020000000010000000000000108"], 0x0, 0x3c}, 0x28) (rerun: 32) r4 = bpf$MAP_CREATE(0x0, &(0x7f00000005c0)=ANY=[@ANYRES32=r2, @ANYRESHEX=r3, @ANYRESDEC=r3], 0x40) bpf$MAP_UPDATE_CONST_STR(0x2, &(0x7f0000000240)={{r4}, &(0x7f00000000c0), &(0x7f0000000140)='%+9llu \x00'}, 0x20) (async) r5 = bpf$ITER_CREATE(0xb, &(0x7f0000000100), 0x0) close(0x4) (async) r6 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r7 = syz_genetlink_get_family_id$nbd(&(0x7f00000000c0), 0xffffffffffffffff) (async) socketpair$nbd(0x1, 0x1, 0x0, &(0x7f0000000100)={0xffffffffffffffff}) (async) bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000040)={&(0x7f0000000540)={{0xeb9f, 0x1, 0x0, 0x18, 0x0, 0x28, 0x28, 0x4, [@datasec={0x2, 0x1, 0x0, 0xf, 0x3, [{0x2, 0x1, 0x3}], "44942d"}, @datasec={0x0, 0x0, 0x0, 0xf, 0x1, [], "9a"}]}, {0x0, [0x2e, 0x2e]}}, 0x0, 0x44, 0x0, 0x1}, 0x28) socketpair$nbd(0x1, 0x1, 0x0, &(0x7f0000000040)={0xffffffffffffffff}) sendmsg$NBD_CMD_RECONFIGURE(r6, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000180)=ANY=[@ANYBLOB='D\x00\x00\x00', @ANYRES16=r7, @ANYBLOB="63812bbd7000fcdbdf25030000000800010000000000280007800c00018008000100", @ANYRES32=r8, @ANYBLOB="0c00018008000100", @ANYRES32=r9], 0x44}, 0x1, 0x0, 0x0, 0x440c0}, 0x40040) socket$inet6(0xa, 0x5, 0x0) openat$ppp(0xffffffffffffff9c, &(0x7f0000000600), 0x140, 0x0) (async) r10 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_route(r10, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000200)=@newlink={0x48, 0x10, 0xffffff1f, 0x0, 0x25dfdbfb, {0x0, 0x0, 0x0, 0x0, 0x4412c}, [@IFLA_LINKINFO={0x28, 0x12, 0x0, 0x1, @bridge={{0xb}, {0x18, 0x2, 0x0, 0x1, [@IFLA_BR_GROUP_ADDR={0xa, 0x14, @broadcast}, @IFLA_BR_AGEING_TIME={0x8, 0x9}]}}}]}, 0x48}}, 0x4040) r11 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000180), 0xffffffffffffffff) (async, rerun: 64) r12 = socket$nl_generic(0x10, 0x3, 0x10) (async, rerun: 64) r13 = syz_genetlink_get_family_id$wireguard(&(0x7f0000000040), 0xffffffffffffffff) sendmsg$WG_CMD_SET_DEVICE(r12, &(0x7f0000000280)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000001940)=ANY=[@ANYBLOB="40010000", @ANYRES16=r13, @ANYBLOB="01000000000004000000010000002400030000000000000000000000000000000000000000000000000000000000000000001400020077673100000000000000000000000000f4000880"], 0x140}, 0x1, 0x0, 0x0, 0x8000}, 0x0) (async) sendmsg$WG_CMD_SET_DEVICE(r12, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000140)={0x4c, r13, 0x1, 0x70bd2d, 0x25dfdbfc, {}, [@WGDEVICE_A_IFNAME={0x14, 0x2, 'wg1\x00'}, @WGDEVICE_A_PRIVATE_KEY={0x24, 0x3, @a}]}, 0x4c}, 0x1, 0x0, 0x0, 0x40090}, 0x44000) sendmsg$NL80211_CMD_SET_STATION(r10, &(0x7f0000000240)={&(0x7f0000000100)={0x10, 0x0, 0x0, 0x20000}, 0xc, &(0x7f0000000200)={&(0x7f00000001c0)={0x28, r11, 0x100, 0x70bd2d, 0x25dfdbfc, {{}, {@void, @val={0xc, 0x99, {0x0, 0x37}}}}, [@NL80211_ATTR_AIRTIME_WEIGHT={0x6, 0x112, 0x3}]}, 0x28}, 0x1, 0x0, 0x0, 0x4000020}, 0x40040) (async) sendmsg$nl_generic(0xffffffffffffffff, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000140)={&(0x7f00000004c0)=ANY=[@ANYBLOB="18000000260001031dbd7002fadbdf25010000000400ae"], 0x18}}, 0x0) getsockopt$inet_sctp6_SCTP_AUTH_ACTIVE_KEY(r1, 0x84, 0x18, &(0x7f0000000400)={0x0, 0x1}, &(0x7f0000000440)=0x8) setsockopt$inet_sctp_SCTP_ADD_STREAMS(r5, 0x84, 0x79, &(0x7f0000000480)={r14, 0x7, 0x3}, 0x8) recvmmsg(0xffffffffffffffff, &(0x7f0000000800)=[{{0x0, 0x0, &(0x7f00000009c0)=[{&(0x7f0000000500)=""/145, 0x91}, {&(0x7f0000003800)=""/4133, 0x1025}, {&(0x7f0000000040)=""/185, 0xb9}, {&(0x7f0000000340)=""/122, 0x7a}, {&(0x7f0000000a40)=""/4093, 0xffd}, {&(0x7f0000000280)=""/65, 0x41}, {&(0x7f0000000300)=""/22, 0x16}], 0x7}, 0xd}, {{0x0, 0x0, 0x0}, 0xffff}, {{0x0, 0x0, 0x0}, 0x10001}, {{0x0, 0x0, 0x0}, 0x7}], 0x4, 0x40000102, 0x0) 2.466607924s ago: executing program 4 (id=7528): r0 = socket$inet6_mptcp(0xa, 0x1, 0x106) bind$inet6(r0, &(0x7f0000000040)={0xa, 0x4e22, 0xfffffffc, @empty, 0x7}, 0x1c) r1 = socket$nl_generic(0x10, 0x3, 0x10) r2 = syz_genetlink_get_family_id$mptcp(&(0x7f0000000000), 0xffffffffffffffff) sendmsg$MPTCP_PM_CMD_ADD_ADDR(r1, &(0x7f0000000400)={0x0, 0x0, &(0x7f00000003c0)={&(0x7f0000000300)={0x38, r2, 0x1, 0x0, 0x0, {}, [@MPTCP_PM_ATTR_ADDR={0x24, 0x1, 0x0, 0x1, [@MPTCP_PM_ADDR_ATTR_PORT={0x6, 0x5, 0x4e23}, @MPTCP_PM_ADDR_ATTR_FAMILY={0x6, 0x1, 0x2}, @MPTCP_PM_ADDR_ATTR_ADDR4={0x8, 0x3, @multicast1=0xac1414aa}, @MPTCP_PM_ADDR_ATTR_FLAGS={0x8, 0x6, 0x1}]}]}, 0x38}}, 0x0) r3 = socket$netlink(0x10, 0x3, 0x400000000000004) r4 = socket$xdp(0x2c, 0x3, 0x0) setsockopt$XDP_UMEM_REG(r4, 0x11b, 0x4, &(0x7f00000001c0)={&(0x7f00000002c0)=""/5, 0x29000, 0x1000, 0xbb}, 0x20) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000340)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$sock_SIOCGIFINDEX(r5, 0x8933, 0x0) setsockopt$XDP_RX_RING(r4, 0x11b, 0x2, &(0x7f0000000440)=0x800, 0x4) setsockopt$XDP_UMEM_COMPLETION_RING(r4, 0x11b, 0x6, &(0x7f0000000480)=0x20, 0x4) setsockopt$XDP_UMEM_FILL_RING(r4, 0x11b, 0x5, &(0x7f0000000500)=0x4000, 0x4) bind$xdp(r4, &(0x7f0000000540)={0x2c, 0x2, 0x0, 0x20000000}, 0x10) writev(r3, &(0x7f0000000580)=[{&(0x7f0000000680)="480000001400190d7ebdeb75fd0d8c562c84d8c033ed7a80ffe0090f000060000000a2bc5603ca00000f7f89000000200000004a2471083ec6991778581acb6c0101ff0000000309", 0x48}], 0x1) listen(r0, 0xc) r6 = socket$inet_mptcp(0x2, 0x1, 0x106) connect$inet(r6, &(0x7f0000000000)={0x2, 0x4e22, @local}, 0x10) connect$bt_l2cap(0xffffffffffffffff, &(0x7f0000000000)={0x1f, 0x5, @fixed={'\xaa\xaa\xaa\xaa\xaa', 0x10}}, 0xe) r7 = socket$nl_generic(0x10, 0x3, 0x10) r8 = syz_genetlink_get_family_id$mptcp(&(0x7f0000000740), 0xffffffffffffffff) sendmsg$MPTCP_PM_CMD_FLUSH_ADDRS(r7, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000180)={&(0x7f00000004c0)={0x14, r8, 0x1, 0x70bd2c, 0x25dfdbff}, 0x14}, 0x1, 0x0, 0x0, 0x20048001}, 0x800) sendmsg$NL80211_CMD_DEL_PMKSA(0xffffffffffffffff, &(0x7f0000000140)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x2000000}, 0xc, 0x0, 0x1, 0x0, 0x0, 0x40}, 0x400c4) r9 = socket$l2tp(0x2, 0x2, 0x73) bind$inet(r9, &(0x7f0000000000)={0x2, 0x0, @multicast1}, 0x10) openat$cgroup_ro(0xffffffffffffffff, &(0x7f00000000c0)='blkio.bfq.io_merged_recursive\x00', 0x0, 0x0) syz_emit_ethernet(0x74, &(0x7f0000000000)={@link_local, @empty, @void, {@ipv4={0x800, @udp={{0x5, 0x4, 0x0, 0x0, 0x24, 0x0, 0x0, 0x0, 0x73, 0x0, @private=0x300, @multicast1}, {0x0, 0x0, 0xfffffe9a, 0x0, @gue={{0x2}}}}}}}, 0x0) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000200)={0x6, 0x3, &(0x7f0000000080)=ANY=[@ANYBLOB="1800000002000000000000000008082295"], &(0x7f0000000180)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x22, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0xe863}, 0x94) 2.316509284s ago: executing program 0 (id=7529): setsockopt$packet_tx_ring(0xffffffffffffffff, 0x10f, 0x87, &(0x7f0000000300)=@req={0x3fc, 0x4, 0x0, 0xfffffffb}, 0x10) setsockopt$packet_tx_ring(0xffffffffffffffff, 0x10f, 0x87, &(0x7f0000000380)=@req={0x3fc}, 0x10) sendmmsg(0xffffffffffffffff, &(0x7f00000003c0)=[{{0x0, 0xa9cc7003, &(0x7f0000000400)=[{&(0x7f0000000440)="ee", 0x101d0}], 0x1}}], 0x400000000000181, 0x9200000000000000) recvmmsg$unix(0xffffffffffffffff, &(0x7f0000000480)=[{{0x0, 0x0, &(0x7f00000004c0)}}], 0x1, 0x0, 0x0) r0 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r0, &(0x7f0000000180)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000200)=ANY=[@ANYBLOB="9402000021000100fcffffff00000000ac1414aae5fffff8b49ed9825133a900fc0100000000000000000000000000000000add500200000000000801aeaaec1", @ANYRES32=0x0, @ANYRES32=0x0, @ANYBLOB="000000000000000070000400706362632874776f666973682900000000000000000000000000035000000000000000000000000000000000000000000000000000000000000000000000000040010000dc06216ef2c68e9f6da05d886dbc3273ef99796b36698e2bd5179c3eea5474fc78c9720bfc4f90a708001f0001000000cc0111"], 0x294}, 0x1, 0x0, 0x0, 0x24040000}, 0x0) 2.023876551s ago: executing program 5 (id=7530): socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000000)) (async) r0 = socket$inet_udp(0x2, 0x2, 0x0) recvmmsg(r0, &(0x7f0000000280)=[{{0x0, 0x0, 0x0}}], 0x1, 0x1, 0x0) (async) ioctl$SIOCGSTAMPNS(r0, 0x8907, 0x0) bind$inet(r0, &(0x7f00000002c0)={0x2, 0x4e20, @empty}, 0x10) (async) syz_emit_ethernet(0x2e, &(0x7f00000014c0)={@broadcast, @multicast, @void, {@ipv4={0x800, @udp={{0x5, 0x4, 0x0, 0x0, 0x20, 0x66, 0x0, 0x0, 0x11, 0x0, @empty, @empty}, {0x1, 0x4e20, 0xc, 0x0, @gue={{0x1, 0x0, 0x0, 0x0, 0x0, @void}}}}}}}, 0x0) (async) r1 = socket$inet_udp(0x2, 0x2, 0x0) setsockopt$inet_MCAST_MSFILTER(r1, 0x0, 0x2a, &(0x7f0000001500)=ANY=[@ANYBLOB="020000000000000002000000e0"], 0x190) (async) setsockopt$inet_MCAST_MSFILTER(r1, 0x0, 0x2a, &(0x7f0000001540)=ANY=[@ANYBLOB="020000000000000002000000e0"], 0x190) r2 = socket(0x10, 0x3, 0x0) (async) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) (async) r4 = bpf$PROG_LOAD(0x5, &(0x7f0000000340)={0x3, 0x1c, &(0x7f0000000400)=ANY=[@ANYBLOB="bf16000000000000b7020000300000007b2af8ff000000007b2af0ff000000007b2ae8ff000000007b2ae0ff000000007b2ad8ff000000007b2ad0ff000000007b2ac8ff000000007b2ac0ff00000000b702000002000000732ac0ff00000000b702000001000000632ac4ff00000000180200000a0000010000000000000000632accff00000000180200000a0000020000000000000000632ac0ff00000000bf61000000000000bfa200000000000007020000c0ffffffb703000040000000b7040000000000008500000045000000b70000000200000095"], &(0x7f0000000500)='GPL\x00', 0x1, 0x0, 0x0, 0x41100, 0x0, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2}, 0x94) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000540)={r4, 0x0, 0xe, 0x0, &(0x7f00000005c0)="0000000000002d9d8aaf5dc79048", 0x0, 0x8ce3, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x50) ioctl$sock_SIOCGIFINDEX(r3, 0x8933, &(0x7f0000000080)={'bridge_slave_1\x00', 0x0}) sendmsg$nl_route(r2, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000180)=ANY=[@ANYBLOB="7c0000001000010400"/20, @ANYRES32=r5, @ANYBLOB="00000000000000005c001280110001006272696467655f736c617665000000004400058005000500070000000500", @ANYRES8=r2], 0x7c}}, 0x0) r6 = socket$inet6(0xa, 0x3, 0x87) (async) r7 = syz_init_net_socket$bt_l2cap(0x1f, 0x1, 0x3) socket$nl_xfrm(0x10, 0x3, 0x6) (async) close(r7) socket$l2tp(0x2, 0x2, 0x73) shutdown(r7, 0x0) (async) recvmmsg(r7, &(0x7f0000001580), 0x400023c, 0x300, 0x0) mmap(&(0x7f0000000000/0x400000)=nil, 0x400000, 0x2000009, 0x200000006c832, 0xffffffffffffffff, 0x0) (async) read(r7, &(0x7f00000015c0)=""/31, 0x1f) setsockopt$EBT_SO_SET_ENTRIES(r6, 0x0, 0x80, &(0x7f0000000d80)=@nat={'nat\x00', 0x19, 0x3, 0x5e8, [0x200000000780, 0x0, 0x0, 0x200000000bb0, 0x200000000be0], 0x0, &(0x7f0000000200), &(0x7f0000000e00)=ANY=[@ANYBLOB="00000000000000000000000000000000000000000000000000000000000000000000000000000000feffffff020000001100000000000000001a76657468315f766c616e00000000000076657468315f766c616e00000000000076657468315f766972745f776966690063616966300000000000000000000000aaaaaaaaaa30ffff0000ff00ffffffffffff00000000ffff0000d00100000802000040020000636c757374657200000000000000000000000000000000000000000000000000100000000000000005000000f9ffffff5a0f000001000000636f6d6d656e7400000000000000000000000000000000000000000000000000000100000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000736e6174000000000000000000000000000000000000000000000000000000001000000000000000000000000000000010000000000000006172707265706c790000000000000000000000000000000000000000000000001000000000000000ba9391db96170000feffffff000000000900000008000000886c776c616e31000000000000000000000076657468315f746f5f626174616476007663616e30000000000000000000000070696d72656730000000000000000000aaaaaaaaaaaaffffffff0000aaaaaaaaaabbff000000000000002001000088010000c00100007374700000000000000000000000000000000000000000000000000000000000480000000000000000000000810000000700be85226136236000ffffff00000000000000ed00000007000e0093139dc925a9ff00000000004e214e210c000700d40f02000400000000f009001000000e74696d65000000000000000000000000000000000000000000000000000000001800000000000000ffffffff0f0000007d1000003ee0000005000000400300006172707265706c790000000000000000000000000000000000000000000000001000000000000000ffffffffffff0000fcffffff00000000434c415353494659000000000000000000000000000000000000000000000000080000000000000040000000000000006172707265706c790000000000000000000000000000000000000000000000001000000000000000aaaaaaaaaaaa0000feffffff0000000000000000000000000000000000000000000000000000000000000000000000000000000002000000fcffffff0000000000000000000000000000000000000000000000000000000000000000000000000000000002000000ffffffff0100000011000000020000000806697036746e6c3000000000000000000076657468315f746f5f6261746164760069705f767469300000000000000000006d616376746170300000000000000000bbbbbbbbbbbb000000000000000000000000ff00ffffffff0000b0000000200100005801000074696d650000000000000000000000000000000000000000000000000000000018000000000000000400000000000000380f0000bd4201000000000002020000736e6174000000000000000000000000000000000000000000000000000000001000000000000000aaaaaaaaaabb0000fdffffff00000000736e6174000000000000000000000000000000000000000000000000000000001000000000000000bbbbbbbbbbbb0000feffffff00000000736e61740000000000000000000000000000000000000000000000000000000010000000000000000180c20000030000feffffff00000000968123313d399eeab33972226974764d978bb39d2aa2f33062bc855d4711209feea3abbd5a58b25e6e79899954c87e423f846259c93bafce36483d9ea55e1631d05181e0bbcb29f099d5b52c"]}, 0x6ac) (async) setsockopt$inet6_IPV6_XFRM_POLICY(r6, 0x29, 0x23, &(0x7f0000000600)={{{@in6=@private0, @in6=@initdev={0xfe, 0x88, '\x00', 0x1, 0x0}, 0x0, 0x56, 0x2, 0x0, 0x2, 0x20, 0x20, 0xaa}, {0x0, 0x4, 0x3, 0x5, 0x8, 0x1fffffc, 0xfffffffffffffffc, 0x8}, {0x4, 0x3, 0xfffffffffffffe01}, 0x7, 0x0, 0x1, 0x1, 0x2}, {{@in6=@rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x02', 0x4d2, 0x3c}, 0xa, @in=@private=0xa010101, 0x3500, 0x4, 0x3, 0x3, 0xffffffff, 0x8, 0x41}}, 0xe8) connect$inet6(0xffffffffffffffff, &(0x7f0000000700)={0xa, 0x4001, 0x5, @ipv4={'\x00', '\xff\xff', @private=0xa010101}}, 0x1c) (async) setsockopt$sock_attach_bpf(r6, 0x1, 0x32, &(0x7f0000000740)=r4, 0x4) socket$nl_route(0x10, 0x3, 0x0) socket$inet6_tcp(0xa, 0x1, 0x0) 2.023002505s ago: executing program 0 (id=7531): r0 = bpf$MAP_CREATE(0x0, &(0x7f0000001180)=@base={0x19, 0x4, 0x4, 0x2}, 0x50) r1 = bpf$PROG_LOAD(0x5, &(0x7f0000001200)={0x6, 0xd, &(0x7f00000012c0)=@framed={{}, [@call={0x85, 0x0, 0x0, 0xe}, @ringbuf_output={{0x18, 0x1, 0x1, 0x0, r0}, {}, {}, {0x4}, {0x6, 0x0, 0xa}, {}, {0x7, 0x0, 0xb, 0x4, 0x0, 0x0, 0x1}, {0x85, 0x0, 0x0, 0x33}}]}, &(0x7f0000001340)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @xdp, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2}, 0x94) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000001380)={r1, 0x2000012, 0xe, 0x0, &(0x7f0000001400)="63ec33c9e9b98600000000000000", 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0xb}, 0x50) r2 = socket$nl_generic(0x10, 0x3, 0x10) r3 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000080), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r2, 0x8933, &(0x7f00000000c0)={'wlan0\x00', 0x0}) sendmsg$NL80211_CMD_SET_INTERFACE(r2, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000180)={0x24, r3, 0x5, 0x0, 0x0, {{}, {@val={0x8, 0x3, r4}, @void}}, [@NL80211_ATTR_IFTYPE={0x8, 0x5, 0x3}]}, 0x24}}, 0x0) r5 = syz_init_net_socket$nl_rdma(0x10, 0x3, 0x10) accept(r5, &(0x7f0000000000)=@pppol2tpv3in6={0x18, 0x1, {0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, {0xa, 0x0, 0x0, @remote}}}, &(0x7f0000001140)=0x80) sendmsg$NL80211_CMD_START_AP(r2, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000240)={0xee0, r3, 0x5, 0x0, 0x0, {{}, {@val={0x8, 0x3, r4}, @void}}, [@beacon=[@NL80211_ATTR_BEACON_HEAD={0x38, 0xe, {{{}, {}, @broadcast, @device_a, @random="09c9c205a029"}, 0x0, @default, 0x1, @val={0x0, 0x6, @default_ap_ssid}, @void, @void, @void, @void, @void, @void, @void, @void, @void, @void, @void, @val={0x76, 0x6}}}], @chandef_params, @NL80211_ATTR_P2P_CTWINDOW={0x5, 0xa2, 0x9}, @NL80211_ATTR_PRIVACY={0x4}, @NL80211_ATTR_BEACON_INTERVAL={0x8, 0xc, @random=0xc}, @beacon=[@NL80211_ATTR_BEACON_HEAD={0x175, 0xe, {{{0x0, 0x0, 0x8, 0x0, 0x0, 0x1}, {0x2}, @device_a, @broadcast, @random="3edea8eb1449", {0x8, 0x3}}, 0x9, @random=0x2f48, 0x9840, @val={0x0, 0x6, @default_ibss_ssid}, @val={0x1, 0x3, [{0xc}, {0x9}, {0xb}]}, @val={0x3, 0x1, 0x5}, @void, @val={0x6, 0x2, 0x9}, @val={0x5, 0xae, {0x81, 0x6e, 0x6, "1cedd73e8f275dbadeaac618679ec32994267d053da731a596e4831617e82cecba13c2b27acacc0b9a8df7d0fdb10b03720534329a0f0c0f901fd0e72f34b91e188f781c1a4b2c6f935a63cf69ea307c0a1827ebe9d7f674ed01d1500fb766161622b3d43404642c1dbbe38499ce8948b6e6ab330a6f43d7294404f5e666f31a6a3f0c2d8c2d85d7e289ce9374a65840f4e9546898173ee9b1bb4bc83c1fa302e19bd1fb8cff36cbaf7c4b"}}, @val={0x25, 0x3, {0x0, 0x4, 0xc8}}, @val={0x2a, 0x1, {0x0, 0x1, 0x1}}, @void, @val={0x2d, 0x1a, {0x1000, 0x1, 0x6, 0x0, {0x80, 0xcd, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1}, 0x400, 0x0, 0xfc}}, @val={0x72, 0x6}, @void, @val={0x76, 0x6, {0x22, 0xe, 0x2f, 0x380}}, [{0xdd, 0x53, "923ad15cba42638f0d628c72dcce837eb39ad4e805c1615369b0277607eaa2dfb32befea50e8ede8929a2911448ddcac09e86ed9e7a93459e4c860f1f4b16ea14e13e3c28d55135c40f8f374f1e77d52c208e2"}]}}, @NL80211_ATTR_PROBE_RESP={0x27a, 0x91, "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"}, @NL80211_ATTR_IE_ASSOC_RESP={0x146, 0x80, [@ibss={0x6, 0x2, 0x8}, @perr={0x84, 0xaf, {0x8, 0xb, [{{}, @broadcast, 0xb0fd, @void, 0x27}, {{}, @broadcast, 0xc3, @void, 0x2}, {{0x0, 0x1}, @device_a, 0x0, @value=@device_b, 0x11}, {{}, @device_b, 0x3dc, @void, 0xe}, {{}, @broadcast, 0xfb7, @void, 0x40}, {{0x0, 0x1}, @device_b, 0x0, @value, 0x1b}, {{0x0, 0x1}, @device_a, 0x6, @value, 0x10}, {{0x0, 0x1}, @device_a, 0x1, @value=@broadcast, 0x10}, {{}, @broadcast, 0x2, @void, 0x13}, {{}, @device_b, 0x9, @void, 0x3b}, {{0x0, 0x1}, @device_a, 0x800, @value, 0x25}]}}, @challenge={0x10, 0x1, 0x89}, @perr={0x84, 0x88, {0x6, 0x8, [{{0x0, 0x1}, @device_a, 0x64a, @value=@broadcast, 0xf}, {{0x0, 0x1}, @device_b, 0x6, @value=@broadcast, 0xe}, {{}, @device_a, 0xffffffff, @void, 0x31}, {{0x0, 0x1}, @device_a, 0x3, @value, 0x14}, {{0x0, 0x1}, @device_a, 0x9, @value=@broadcast, 0x1e}, {{}, @device_a, 0x2, @void, 0x3c}, {{}, @device_b, 0x7, @void, 0x31}, {{0x0, 0x1}, @device_b, 0x8000, @value=@broadcast, 0x7fff}]}}]}, @NL80211_ATTR_BEACON_HEAD={0x2da, 0xe, {{{0x0, 0x0, 0x8, 0x0, 0x0, 0x1, 0x0, 0x1, 0x1}, {0x1}, @device_a, @device_a, @initial, {0x7, 0x2}}, 0x3ff, @default, 0xa009, @void, @void, @val={0x3, 0x1, 0x80}, @void, @void, @val={0x5, 0xca, {0x1, 0x79, 0x5, "da745fc730a9dca3abe2d4bb29266866ebfd36edef6aebb38de91b25811faf5471ac9c1175d3f6fb6902c9909922bf3fbce16d2079ce07742066d7ff2d3a954ae357f058c740e0455aa119bb8785c73e219a9aae1a810d3521a3e9c6c9010ed8940313296a739d7143b628df2a774220467ccb0f15834c2dec666849f6e86b1242097040f07c0917a798ff61b48d1663f18dbcf3c40914a2cc4ffa7bb36f5d670701c13747c2afe265b0f3844e928a15cb500399a8c95214ccb8672e563ac7348859500a75df8b"}}, @val={0x25, 0x3, {0x1, 0xb5, 0x3}}, @val={0x2a, 0x1, {0x0, 0x1}}, @val={0x3c, 0x4, {0x1, 0x8, 0x7, 0x7}}, @val={0x2d, 0x1a, {0x40, 0x1, 0x7, 0x0, {0x7, 0x7, 0x0, 0x0, 0x0, 0x1, 0x1, 0x2, 0x1}, 0x1, 0x80000000, 0x5}}, @val={0x72, 0x6}, @void, @void, [{0xdd, 0x71, "17002d1387a18ea287b168940754ca1cf0d4522c244ee3d21240b33a02478c706826c9c2aedd9eaf2115379671e374c6e86f3f2498d43bc1d3baba6e1580a3561f6c3e5ca00c45169eb0fbeef14717b9b781437c6ce0ff0357abb79838084414ac3925d8807684be6c04d7a6ee5618c53b"}, {0xdd, 0xf5, "afbc4821a86a921db1934c4e6ff20ffe949229efdefc1defeb4ff0b147b6281c20583b8924a2339efd39812ec6101852938a3978e2a4f0701f4117957adb1cfa873ef17323d80ac864cf52f777a7f402776f6b84786c5c4c1941b282fe746b9fc9168c4b239910a8e7126c10b0db78f79c13dda8554e8220c26e06cb4f459ce917a426a65ab95f440a46067f55a8de8bab729673574632f643343b8e90db025994929da57dfb102fc5b0316dc7d2a90e554ab749bd1076a02a6d323ffd5142ef43cd8cf320cdb1480b44da6f2feb39d0bdbb947a7db428dae7e487187686443e8adba18ffaf6a053b531275d13589bfe04f2a73d25"}, {0xdd, 0x45, "b3ba157a355023eba182855c527018011161f38909f1ccc6ca26fe69672536a13334df793bd65b58f57cfd3b31e76c5de068580758e0b58ad1ae6e9e7ab25f2763064e24fb"}]}}, @NL80211_ATTR_BEACON_HEAD={0x1f9, 0xe, {{{0x0, 0x0, 0x8, 0x0, 0x0, 0x1, 0x1, 0x1, 0x1, 0x0, 0x1}, {0x3}, @device_a, @device_a, @initial, {0x0, 0x4}, @value=@ver_80211n={0x0, 0x1, 0x0, 0x0, 0x0, 0x2, 0x1, 0x0, 0x1, 0x1}}, 0x5, @random=0xcc, 0xc484, @void, @void, @void, @val={0x4, 0x6, {0x10, 0x78, 0xba, 0x3}}, @val={0x6, 0x2, 0xa4ba}, @val={0x5, 0xb1, {0x3, 0xa9, 0x1, "3d701af681b5d6f2557e915af1bf0415f4729fff83e5031f4c2b3bc268da9a9e19a49accdf187e2940628aa7a87f4e17316685bf4de7c4ba7dd82d48ac402b7ea0ff12d1c94031a771890689e58527dcf94915649b05e7d22422934c21d78bffe67932fc653a939ceb2cd55da4f8210f889c5d226ad0b1c64a314a982fa81bfa5e21ed8b0b8ac055a5578a537ed0a72b9ee1cb7e5c913b7071d0928e37bd7c925ad32fa3b582a0149c29c1a9b6b2"}}, @val={0x25, 0x3, {0x1, 0xb0, 0x7}}, @void, @void, @val={0x2d, 0x1a, {0x2, 0x3, 0x0, 0x0, {0x5, 0x9, 0x0, 0x6, 0x0, 0x1, 0x0, 0x0, 0x1}, 0x800, 0x9, 0x3}}, @void, @void, @void, [{0xdd, 0x2d, "d95a319ba85c31acb4c29ca0f83e59bed3fd4b711a585b657f217ff6a3682a7a1bfd2e5e7dbefb2450924f58d9"}, {0xdd, 0xbc, "da74da0a043182cbf37957b5df7f28d0e2ef569f5533517523d211cebff457c7321ad31f2f8064864cfc7a30a9f001852bb7bdd707ca8d928c808b8fcb553568249a6214120ed6b89097fe524522514b810d8f0d90e613c5bd599bb5715ab11d6aa795a55bfaa296a772c5c31737b768b52c2420b3bed2fc0886a1110fb903f511084af04afb247aeb34890e43bd1c5a024a320dcee08bcf07821f14c81666332271584eee8c933fb9653a396690b9d776a07838fcbf88fd8bffcfea"}]}}, @NL80211_ATTR_FTM_RESPONDER={0x178, 0x10e, 0x0, 0x1, [@NL80211_FTM_RESP_ATTR_CIVICLOC={0xd4, 0x3, "7705fe31629dc0e45374370dffe3113f8b8fc3c215e2b3b3c9f559c6c9c1ee1342ad12315327999bcfb7c877cd29b242247b941b3d1081015f2d9aaf60d88d08e53b90fc2e12b3dadb85fc29fa49288b80b9f911e6c2f12f17b6bd99ead9710c754888d0077dc4d1d3d5e8c967319eb8234fcc90c20f6554ca4809a51ff797d555300af01d34280bdde3869bede3e84ad9cc8bafe5d9433e7dc4c3515d53d6cf3e37589dcb473e20dd4e53fb33cf429b8c2d1fc429f3949d4e161e319bb2915fb34faaffd2662b99331f429f5333731a"}, @NL80211_FTM_RESP_ATTR_ENABLED={0x4}, @NL80211_FTM_RESP_ATTR_CIVICLOC={0x4c, 0x3, "8d55bcce2385e25a5b00f0bbf4b548fea1ceea895ffd64d1479cf7b5f8ea8c061a56fbd8115cb1bf34b68195b412d83b60fca27a3f920b5769915905986bed3a0ac9514a78321e2a"}, @NL80211_FTM_RESP_ATTR_CIVICLOC={0x4c, 0x3, "2ad7fde773680d8bd3fa5e6ac292761f469654efd1be4f492c282ee39305c72b38d410acaa2d8f9372a520e741740e0c8333a6cabae44dbc45c1c3ff6fd2c8d297f41c741968a7f4"}, @NL80211_FTM_RESP_ATTR_ENABLED={0x4}]}, @NL80211_ATTR_IE_PROBE_RESP={0xc3, 0x7f, [@ext_channel_switch={0x3c, 0x4, {0x1, 0x5, 0x1e5, 0x2}}, @prep={0x83, 0x25, {{0x0, 0x1}, 0x3, 0x20, @device_a, 0x3, @value, 0xffff, 0x2, @device_b, 0x5}}, @mesh_config={0x71, 0x7, {0x1, 0xffffffffffffffff, 0xffffffffffffffff, 0x1, 0x0, 0xff, 0x1}}, @random_vendor={0xdd, 0x87, "0d65386145c53b98aa24e08550479e9eba7d3fe177d41622f36e376c189732d54839a1495b84e685046a9c304cd5fffb4c45383597d1524c4d95e70f8ceb91474dd42cf818824b5f894a591ae023b02cc0f51065043ab6ac1c0c6645e5564aa80fd1287477c9652c8f9b58e22fb7c77ad947642c3fee74d8a461e579f5c733a599f25d32426536"}]}, @NL80211_ATTR_IE_ASSOC_RESP={0xc, 0x80, [@supported_rates={0x1, 0x6, [{0x1b, 0x1}, {0x12}, {0x30}, {0x16, 0x1}, {0xb, 0x1}, {0x1, 0x1}]}]}, @NL80211_ATTR_BEACON_HEAD={0x188, 0xe, {{{0x0, 0x0, 0x8, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0x0, 0x1}, {0x2}, @device_a, @broadcast, @from_mac, {0x2, 0x1}, @value=@ver_80211n={0x0, 0xf3, 0x3, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x1}}, 0x5, @default, 0x4790, @void, @void, @val={0x3, 0x1, 0xa5}, @void, @void, @val={0x5, 0x41, {0x80, 0x1c, 0x1, "d535fc601e8dd52c4dc93dd954af3d0b64fceef80d08e279ad375e37c5ab56bc5a624238185ea1bf0ad322995616309730ce7cc73a19e343969aad576699"}}, @void, @val={0x2a, 0x1, {0x0, 0x1}}, @val={0x3c, 0x4, {0x1, 0x9, 0x80, 0x8}}, @val={0x2d, 0x1a, {0x2, 0x0, 0x6, 0x0, {0xffffffff, 0x0, 0x0, 0xf4, 0x0, 0x1, 0x0, 0x3}, 0x6, 0x4, 0x7}}, @val={0x72, 0x6}, @val={0x71, 0x7, {0x1, 0x1, 0x0, 0x1, 0x0, 0xa, 0x68}}, @void, [{0xdd, 0xde, "e243d84c681c9ccfac149673ccc8a4fcf398a61484848bbbbd965195ff022aa137b598895cba2bdd9280ea47c5100a53316e4ea8b446e182184bfc9d5bf91dc078f9d676d62dc790d1c32ec8c90517b568837567291b9e17f396e5155594119885093da0411eb228064a41c0ddfb6450fdba39c312a7b6adea9314cd8caf8bd9a759a8902e68939fdf9555cb3ce1cb34e3a3b90bf06bfe476b16cbaa92a3e9b02c1f97076496bac8a03f26209f762a699266fae7670b896dbaca5fd3e6e77fa1feeab25f3155e471804c92a8b5efea68766d58e82e3d3c803dbd5c4cc136"}]}}], @acl_policy=[@NL80211_ATTR_ACL_POLICY={0x8, 0xa5, 0x1}, @NL80211_ATTR_MAC_ADDRS={0x28, 0xa6, 0x0, 0x1, [{0xa}, {0xa, 0x6, @device_b}, {0xa}]}, @NL80211_ATTR_MAC_ADDRS={0x58, 0xa6, 0x0, 0x1, [{0xa}, {0xa, 0x6, @device_b}, {0xa}, {0xa, 0x6, @broadcast}, {0xa, 0x6, @device_b}, {0xa}, {0xa, 0x6, @broadcast}]}, @NL80211_ATTR_ACL_POLICY={0x8}], @NL80211_ATTR_PBSS={0x4}]}, 0xee0}}, 0x0) 1.613611648s ago: executing program 1 (id=7532): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) close(r0) r1 = socket(0x10, 0x3, 0x0) (async, rerun: 32) close(0x3) (rerun: 32) r2 = socket$inet_tcp(0x2, 0x1, 0x6) (async, rerun: 32) close(0x3) (async, rerun: 32) r3 = socket$inet_tcp(0x2, 0x1, 0x0) connect$inet(r3, &(0x7f0000000000)={0x2, 0x4e20, @dev={0xac, 0x14, 0x14, 0x58}}, 0x10) setsockopt$inet_tcp_buf(r2, 0x6, 0x1f, &(0x7f0000000180)='espintcp', 0x8) (async) sendmsg$nl_route_sched(r1, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000280)={&(0x7f00000002c0)=@newqdisc={0x24, 0x24, 0xf0b, 0x0, 0x0, {0x60, 0x0, 0x0, 0x0, {0x0, 0x5}, {0xffff, 0xffff}}}, 0x24}}, 0x0) sendmsg$NFT_BATCH(r0, &(0x7f0000000380)={0x0, 0x0, &(0x7f00000003c0)={0x0, 0x4014}}, 0x40) (async) r4 = bpf$MAP_CREATE(0x0, &(0x7f0000000040)=@base={0x1, 0x3, 0x2003, 0x8}, 0x50) r5 = bpf$MAP_CREATE(0x0, &(0x7f0000000400)=@base={0x1b, 0x0, 0x0, 0x8000}, 0x48) (async) r6 = bpf$MAP_CREATE(0x0, &(0x7f0000000480)=ANY=[@ANYBLOB="10000000040000000400000002"], 0x50) r7 = bpf$PROG_LOAD(0x5, &(0x7f00000004c0)={0x6, 0x10, &(0x7f0000000580)=ANY=[@ANYBLOB="1800000000010000000000000000000018110000", @ANYRES32=r5, @ANYBLOB="0000000000000000b702000001000000850000008600000018110000", @ANYRES32=r6, @ANYBLOB="0000000000000000b7080000040000007b8af8ff00000000bca2000000000000a6020000f8ffffffb703000008000000b704000000000000850000003300000095"], &(0x7f0000000600)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x2, '\x00', 0x0, @xdp=0x25, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000640)={r7, 0x2000012, 0xe, 0x0, &(0x7f00000006c0)="63eced8e46dc3f2ddf33c9e9b986", 0x0, 0xfffffffe, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0xb}, 0x50) (async, rerun: 64) r8 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x1, 0xd, &(0x7f0000000300)=ANY=[@ANYBLOB="18000000000000000000000000000000850000002f00000018110000", @ANYRES32=r4, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000300000095"], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) (async, rerun: 64) r9 = socket$packet(0x11, 0x2, 0x300) setsockopt$sock_attach_bpf(r9, 0x1, 0x32, &(0x7f00000001c0)=r8, 0x4) syz_genetlink_get_family_id$nl80211(&(0x7f00000001c0), 0xffffffffffffffff) 1.206320495s ago: executing program 0 (id=7533): r0 = syz_init_net_socket$nl_rdma(0x10, 0x3, 0x10) sendmsg$netlink(r0, &(0x7f0000000040)={0x0, 0x27, &(0x7f0000000080)=[{&(0x7f00000002c0)=ANY=[@ANYBLOB="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"], 0x114}], 0x1}, 0x0) r1 = bpf$MAP_CREATE(0x0, &(0x7f0000000f00)=ANY=[@ANYBLOB="1700000004000000040000000300000000000000", @ANYRES32, @ANYBLOB='\x00'/20, @ANYRES32=0x0, @ANYRES32, @ANYBLOB='\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00!\x00'/28], 0x50) r2 = bpf$PROG_LOAD(0x5, &(0x7f0000000400)={0x6, 0xd, &(0x7f0000001080)=ANY=[@ANYBLOB="180000000000000000000000ff7f000018110000", @ANYRES32=r1, @ANYBLOB="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"], &(0x7f0000000000)='GPL\x00', 0x5, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @xdp, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4}, 0x94) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000b80)={r2, 0x2000012, 0xe, 0x0, &(0x7f0000000280)="63ec33c9e9b98600000000000000", 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0xb}, 0x50) r3 = syz_genetlink_get_family_id$ethtool(&(0x7f0000000100), 0xffffffffffffffff) r4 = socket$netlink(0x10, 0x3, 0x0) r5 = socket$unix(0x1, 0x1, 0x0) ioctl$sock_SIOCGIFINDEX(r5, 0x8933, &(0x7f0000000140)={'dummy0\x00', 0x0}) sendmsg$nl_route_sched(r4, &(0x7f00000004c0)={0x0, 0x0, &(0x7f0000000500)={&(0x7f0000000540)=@newqdisc={0x24, 0x28, 0x4ee4e6a52ff56541, 0x4001, 0xfffffdfc, {0x0, 0x0, 0x0, r6, {0xffff, 0x10}, {0xffff, 0xffff}, {0x2, 0x1}}}, 0x24}, 0x1, 0x0, 0x0, 0x400dc}, 0x0) getpeername$packet(0xffffffffffffffff, &(0x7f0000000580)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @remote}, &(0x7f00000005c0)=0x14) r8 = socket$inet_tcp(0x2, 0x1, 0x0) r9 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000600)={0x6, 0x4, &(0x7f00000006c0)=ANY=[@ANYBLOB="18020000234308000000000000000000850000004100000095"], &(0x7f0000000700)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x20}, 0x94) ioctl$sock_SIOCGIFINDEX(r8, 0x8933, &(0x7f0000000740)={'syz_tun\x00', 0x0}) bpf$BPF_LINK_CREATE_XDP(0x1c, &(0x7f0000000780)={r9, r10, 0x25, 0x4, @void}, 0x10) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f00000007c0)={'veth0_macvtap\x00', 0x0}) ioctl$sock_ipv6_tunnel_SIOCGET6RD(0xffffffffffffffff, 0x89f8, &(0x7f0000000880)={'syztnl0\x00', &(0x7f0000000800)={'ip_vti0\x00', 0x0, 0x718, 0x80, 0x9, 0x7e, {{0xa, 0x4, 0x3, 0x0, 0x28, 0x66, 0x0, 0x3, 0x29, 0x0, @multicast2, @broadcast, {[@lsrr={0x83, 0x13, 0x90, [@dev={0xac, 0x14, 0x14, 0x1f}, @empty, @empty, @multicast2]}]}}}}}) r12 = socket$inet6_udp(0xa, 0x2, 0x0) r13 = socket$netlink(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r13, 0x8933, &(0x7f00000008c0)={'bridge0\x00', 0x0}) ioctl$sock_ipv6_tunnel_SIOCADDTUNNEL(r12, 0x89f1, &(0x7f0000000900)={'ip6_vti0\x00', &(0x7f0000000940)={'syztnl2\x00', r14, 0x29, 0x4, 0x3, 0x80000001, 0x2e, @ipv4={'\x00', '\xff\xff', @initdev={0xac, 0x1e, 0x1, 0x0}}, @remote, 0x20, 0x8, 0x100, 0x1}}) sendmsg$NL80211_CMD_DEL_MPATH(r4, &(0x7f0000001040)={&(0x7f0000000180)={0x10, 0x0, 0x0, 0x80}, 0xc, &(0x7f0000001000)={&(0x7f0000000fc0)={0x34, 0x0, 0x10, 0x70bd2c, 0x25dfdbfc, {{}, {@val={0x8}, @void}}, [@NL80211_ATTR_MAC={0xa, 0x6, @broadcast}, @NL80211_ATTR_MAC={0xa, 0x6, @broadcast}]}, 0x34}, 0x1, 0x0, 0x0, 0x8000}, 0x14000014) r15 = socket$netlink(0x10, 0x3, 0x0) r16 = socket(0x10, 0x803, 0x0) sendmsg$NL80211_CMD_CRIT_PROTOCOL_START(r16, &(0x7f00000009c0)={0x0, 0x0, &(0x7f0000000a00)={0x0, 0x1c}}, 0x0) getsockname$packet(r16, &(0x7f0000000a40)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000a80)=0x14) sendmsg$nl_route(r15, &(0x7f0000000ac0)={0x0, 0x0, &(0x7f0000000b00)={&(0x7f0000000b40)=ANY=[@ANYBLOB="3c0000001000850600000000ff6122314a000800", @ANYRES32=r17, @ANYBLOB="00001000252155b21c0012000c000100626f6e64000000000c0002000800010001"], 0x3c}}, 0x40000) r18 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r18, &(0x7f0000000c00)={0x0, 0x0, &(0x7f0000000c40)={&(0x7f0000000c80)=ANY=[@ANYBLOB="3c0000001000010400eeffff11ffffffff000000", @ANYRES32=r17], 0x3c}, 0x1, 0x0, 0x0, 0x1}, 0x0) sendmsg$ETHTOOL_MSG_PAUSE_GET(0xffffffffffffffff, &(0x7f0000000ec0)={&(0x7f00000000c0)={0x10, 0x0, 0x0, 0x80000000}, 0xc, &(0x7f0000000e80)={&(0x7f0000000cc0)={0x198, r3, 0x4, 0x70bd2a, 0x25dfdbff, {}, [@HEADER={0x40, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r6}, @ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x2}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r7}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'veth1_vlan\x00'}, @ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x1}, @ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x1}]}, @HEADER={0x40, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_FLAGS={0x8}, @ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x1}, @ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x1}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'ip6_vti0\x00'}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r10}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r11}]}, @HEADER={0x28}, @HEADER={0x34, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r14}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'pim6reg\x00'}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'wlan1\x00'}]}, @HEADER={0x58, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'caif0\x00'}, @ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x1}, @ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x3}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'geneve0\x00'}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'ip6gre0\x00'}, @ETHTOOL_A_HEADER_FLAGS={0x8}]}, @HEADER={0x28, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'vlan1\x00'}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8}, @ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x1}]}, @HEADER={0x28, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x3}, @ETHTOOL_A_HEADER_FLAGS={0xfffffffffffffd4c, 0x3, 0x3}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'vlan0\x00'}]}]}, 0x198}, 0x1, 0x0, 0x0, 0x4004}, 0x90) 1.064283131s ago: executing program 4 (id=7534): r0 = socket$inet_mptcp(0x2, 0x1, 0x106) r1 = bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f0000000080)=ANY=[@ANYBLOB="1b0000000000000000000000000004"], 0x48) (async) mmap(&(0x7f0000001000/0xc00000)=nil, 0xc00000, 0x0, 0x3032, 0xffffffffffffffff, 0x0) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000001c0)={0x11, 0xf, &(0x7f0000000300)=ANY=[@ANYBLOB="18ff7f000c0000000000000000000080181c0000", @ANYRES32=r1, @ANYBLOB="0000000000000000b702000014000000b70300003f0000008500000086000000bf0920000000000055090100000000029500000000000000bf91000000000000b7020000000000408500000085000000b7000000000000009500000000000000"], &(0x7f0000000380)='GPL\x00', 0x2, 0x1011, &(0x7f00000003c0)=""/4113, 0x41000, 0xc, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x7}, 0x94) (async) setsockopt$inet_tcp_int(r0, 0x6, 0x6, &(0x7f0000000040)=0x24, 0x4) (async) r2 = socket$nl_route(0x10, 0x3, 0x0) (async) r3 = socket(0x2, 0x80805, 0x0) getsockopt$inet_sctp_SCTP_MAX_BURST(r3, 0x84, 0xc, &(0x7f00000000c0)=@assoc_value, &(0x7f0000000100)=0x8) (async) setsockopt$RDS_RECVERR(r3, 0x114, 0x5, &(0x7f0000000280), 0x4) sendmsg$nl_route(r2, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000140)=@newlink={0x50, 0x10, 0x401, 0x0, 0x0, {0x0, 0x0, 0x0, 0x0, 0x2000, 0x2}, [@IFLA_LINKINFO={0x30, 0x12, 0x0, 0x1, @geneve={{0xb}, {0x20, 0x2, 0x0, 0x1, [@IFLA_GENEVE_REMOTE6={0x14, 0x12, @ipv4={'\x00', '\xff\xff', @rand_addr=0x64010100}}, @IFLA_GENEVE_ID={0x8, 0x1, 0x3}]}}}]}, 0x50}, 0x1, 0x0, 0x0, 0x40680c5}, 0x40) 639.826883ms ago: executing program 2 (id=7535): bpf$MAP_CREATE(0x0, &(0x7f0000000200)=ANY=[], 0x48) (async) bpf$MAP_CREATE(0x0, &(0x7f0000000200)=ANY=[], 0x48) sendto$inet6(0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0) (async) sendto$inet6(0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0) sendmsg$nl_route(0xffffffffffffffff, 0x0, 0x44004) (async) sendmsg$nl_route(0xffffffffffffffff, 0x0, 0x44004) r0 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a) connect$inet6(r0, &(0x7f0000000000)={0xa, 0x0, 0x0, @ipv4={'\x00', '\xff\xff', @local}}, 0x1c) r1 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r1, &(0x7f0000000000)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000280)=@newqdisc={0x54, 0x10, 0x1, 0x70bd25, 0x25dfdbfc, {0x6, 0x0, 0x8100, 0x0, {0x1, 0x10}, {0xfff1}, {0xe, 0x10}}, [@TCA_RATE={0x6, 0x5, {0xfc}}, @TCA_STAB={0x28, 0x8, 0x0, 0x1, [{{0x1c, 0x11, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8, 0x2}}, {0x8, 0x1b, [0x0, 0x0]}}]}]}, 0x54}, 0x1, 0x0, 0x0, 0x400c800}, 0x0) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000040)) r2 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r3 = syz_genetlink_get_family_id$netlbl_mgmt(&(0x7f0000000080), r2) sendmsg$NLBL_MGMT_C_LISTALL(r2, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000180)={0x14, r3, 0x5170c560dce29b81, 0x44, 0x25dfdbfe}, 0x14}, 0x1, 0xffa6, 0x0, 0x8000}, 0x40408c4) syz_emit_ethernet(0x6e, &(0x7f0000000340)={@link_local={0x1, 0x80, 0xc2, 0x0, 0x0, 0x2}, @local, @void, {@ipv6={0x86dd, @icmpv6={0x0, 0x6, "02adf7", 0x38, 0x3a, 0x0, @private0={0xfc, 0x0, '\x00', 0x1}, @mcast2, {[], @time_exceed={0x2, 0x3, 0x0, 0x0, '\x00', {0x0, 0x6, "ed906b", 0x38, 0x3a, 0x0, @mcast1, @loopback={0x0, 0xffffac1414aa}, [], "1e520b4c811ee12e"}}}}}}}, 0x0) (async) syz_emit_ethernet(0x6e, &(0x7f0000000340)={@link_local={0x1, 0x80, 0xc2, 0x0, 0x0, 0x2}, @local, @void, {@ipv6={0x86dd, @icmpv6={0x0, 0x6, "02adf7", 0x38, 0x3a, 0x0, @private0={0xfc, 0x0, '\x00', 0x1}, @mcast2, {[], @time_exceed={0x2, 0x3, 0x0, 0x0, '\x00', {0x0, 0x6, "ed906b", 0x38, 0x3a, 0x0, @mcast1, @loopback={0x0, 0xffffac1414aa}, [], "1e520b4c811ee12e"}}}}}}}, 0x0) 586.840689ms ago: executing program 5 (id=7536): r0 = socket$inet6_mptcp(0xa, 0x1, 0x106) connect$inet6(r0, &(0x7f0000000000)={0xa, 0x4001, 0x1, @dev={0xfe, 0x80, '\x00', 0x39}, 0x3e}, 0x1c) r1 = socket$tipc(0x1e, 0x5, 0x0) bind$tipc(r1, &(0x7f0000000000)=@nameseq={0x1e, 0x1, 0x0, {0x41}}, 0x10) (async) listen(r1, 0x0) (async) r2 = socket$tipc(0x1e, 0x5, 0x0) sendmsg$tipc(r2, &(0x7f0000000240)={&(0x7f0000000080)=@nameseq={0x1e, 0x1, 0x0, {0x86, 0x1, 0x1}}, 0x10, &(0x7f0000000340)=[{&(0x7f00000002c0)='/', 0x1}], 0x1, 0x0, 0x0, 0x40}, 0x0) r3 = accept4(r1, &(0x7f00000000c0)=@in={0x2, 0x0, @multicast2}, &(0x7f0000000140)=0x80, 0x80800) sendmsg$802154_raw(r3, &(0x7f0000000300)={&(0x7f0000000180)={0x24, @none={0x0, 0x3}}, 0x14, &(0x7f0000000280)={&(0x7f00000001c0)="bfbeeb1efae03655f8ea8f1df2bb52f45bcca3dc1ca4374ff754318d8bb5302185e49da74dbf6b787c70bb741285d67cb3a84c493f5126ec9b8f5204de87fc4aff8b5a7bd39557fffc13386dfcdb28e671c25699db7c4ee790", 0x59}, 0x1, 0x0, 0x0, 0x48080}, 0x4) (async) r4 = accept4(r1, 0x0, 0x0, 0x0) close(r4) (async) r5 = socket$inet_mptcp(0x2, 0x1, 0x106) setsockopt$inet_tcp_int(r5, 0x6, 0x19, &(0x7f00000001c0)=0x1, 0x4) (async) sendmmsg$inet(r5, &(0x7f0000004980)=[{{&(0x7f0000000000)={0x2, 0x4e24, @loopback}, 0x10, &(0x7f0000000300)=[{0x0}, {&(0x7f0000000240)="a85751ad519b201965da2ebcc4898c7f46cb0819b38bbf504fd2617bf9689f2cdbe63959901f5afb841befbb8787b77bc6855e836e2c277f600c31ff7ea5acf0a9525fa1c161d06b23b802aaf4716846d96af165", 0x54}], 0x2}}], 0x1, 0x20008000) (async) setsockopt$inet_tcp_TLS_TX(r5, 0x6, 0x1, &(0x7f0000000080)=@gcm_256={{0xa82a02e4010a08bd}, "1a01c783a8bc563d", "e9a0bd986e338531d1157bc12d1fc364fdbaaa4d2954c1166835dbbe78286228", "0400d8c7"}, 0x38) (async) r6 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='memory.events\x00', 0x7a44, 0x1700) (async) r7 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000140)='memory.events\x00', 0x7a05, 0x1700) write$tun(r7, &(0x7f00000002c0)=ANY=[], 0x33) (async) sendfile(r7, r6, 0x0, 0x10002) syz_genetlink_get_family_id$batadv(&(0x7f00000002c0), 0xffffffffffffffff) (async) bpf$PROG_LOAD(0x5, &(0x7f0000000200)={0x18, 0xd, &(0x7f0000000480)=ANY=[], &(0x7f0000000340)='syzkaller\x00', 0x1, 0x0, 0x0, 0x41100, 0x1, '\x00', 0x0, @fallback=0x2c, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xa}, 0x94) (async) bind$inet(r5, &(0x7f0000000040)={0x2, 0x4e23, @local}, 0x10) r8 = bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f0000000540)=ANY=[@ANYBLOB="1b0000000000000000000000000004"], 0x50) mmap(&(0x7f0000001000/0xc00000)=nil, 0xc00000, 0x0, 0x3032, 0xffffffffffffffff, 0x0) (async) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000100)={0x18, 0xf, &(0x7f0000000400)=ANY=[@ANYBLOB="180000008800000000000000c702000018110000", @ANYRES32=r8, @ANYBLOB="0000000000000000b702000014000000b7030000fffe00008500000086000000bf09200000000000550901000000008095000000ff7f00000000000000000000b7020000020000008500000085000000b7000000000500009500000000000000"], &(0x7f0000000000)='GPL\x00', 0x3, 0xfed, &(0x7f0000000780)=""/4077, 0x41000, 0x4b, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x8000d}, 0x94) (async) r9 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_CREATE(r9, &(0x7f0000000380)={0x0, 0x0, &(0x7f00000003c0)={&(0x7f0000000480)={0x64, 0x2, 0x6, 0x801, 0x0, 0x0, {0x1, 0x0, 0x9}, [@IPSET_ATTR_DATA={0x14, 0x7, 0x0, 0x1, [@IPSET_ATTR_CADT_FLAGS={0x8, 0x11}, @IPSET_ATTR_BUCKETSIZE={0x5, 0x15, 0x6a}]}, @IPSET_ATTR_FAMILY={0x5, 0x5, 0xa}, @IPSET_ATTR_PROTOCOL={0x5}, @IPSET_ATTR_REVISION={0x5}, @IPSET_ATTR_SETNAME={0x9, 0x2, 'syz2\x00'}, @IPSET_ATTR_TYPENAME={0x15, 0x3, 'hash:ip,port,net\x00'}]}, 0x64}}, 0x0) (async) socket$nl_route(0x10, 0x3, 0x0) (async) r10 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_CREATE(r10, &(0x7f0000000500)={0x0, 0x0, &(0x7f0000000580)={&(0x7f00000005c0)={0x5c, 0x2, 0x6, 0x5, 0x0, 0x0, {0x7, 0x0, 0xbfff}, [@IPSET_ATTR_DATA={0xc, 0x7, 0x0, 0x1, [@IPSET_ATTR_CADT_FLAGS={0x8, 0x8, 0x0, 0x0, 0x40}]}, @IPSET_ATTR_SETNAME={0x9, 0x2, 'syz2\x00'}, @IPSET_ATTR_REVISION={0x5}, @IPSET_ATTR_FAMILY={0x5, 0x5, 0xa}, @IPSET_ATTR_PROTOCOL={0x5, 0x1, 0x6}, @IPSET_ATTR_TYPENAME={0x15, 0x3, 'hash:ip,port,net\x00'}]}, 0x5c}}, 0x80) 0s ago: executing program 4 (id=7537): r0 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000100)=ANY=[@ANYBLOB="18000000260001031dbd7002fadbdf25010000000400ae"], 0x18}}, 0x0) ioctl$F2FS_IOC_WRITE_CHECKPOINT(r0, 0xf507, 0x0) recvmmsg(r0, &(0x7f0000000140)=[{{0x0, 0x0, &(0x7f0000000240)=[{&(0x7f00000004c0)=""/121, 0x79}, {&(0x7f0000000540)=""/4098, 0x1002}], 0x2}, 0x7}, {{0x0, 0x0, 0x0}, 0x3}, {{0x0, 0x0, 0x0}, 0x2}, {{0x0, 0x0, 0x0}, 0x8ffffe}], 0x4, 0x0, 0x0) r1 = bpf$MAP_CREATE(0x0, &(0x7f00000000c0)=ANY=[@ANYBLOB="1b00000000000000000000000080"], 0x50) writev(r0, &(0x7f00000018c0)=[{&(0x7f0000001580)="d7e459f819dccdc56e608a072195d7c888580557ce06cf4b1d6b108692cae403eaa0e3924dafc3d8445bec206a086af34f2b31b205153fa2c51fdb2cc7d593c493", 0x41}, {&(0x7f0000001600)="950d8d23991f3013e26a929ca89efec483fc24283e2d419d57c90bca55e323e03315f56db7292efbff03a4ca596fd2693c9158d15fda6f8118d16347e84d48e560c2b1438d905516a61ea615bd9c41787602909b930cf5e822d04811ff8cfc2dc87e6ca47bb2323b5dbffe172ed25bdaf1c568d7d6de0c250d593f6a871021477ef2a639377a2ac8e80b3d44beb045fbf0c2", 0x92}, {&(0x7f00000016c0)="e6ed529b3426c25088901bc6079529d5bcb27c8214548bd93e9e3d1f4e79eccad3d09192c58afb1db30ae69b8e4bfd656ad412c2decad1897d140a6bae8609bab598a5eb9ce0c687a35d91bfa8874603c1b7f10176338d465adfa3e8d87402ae52a7daee8a46cfb343bc55f28f53d38827212c7983618ffa09fc554ea396ffd3443c34b7ab6add90baaea59fd3ff289af1dd78f05c197e9580a92ea73dbe", 0x9e}, {&(0x7f0000001780)="ab332f5b594aec0a2d3bb88526c4f893607d89199b85da5cff3842fbb2c94d6b9fc26f08195ab15b89e346c671b54d0cbaf590b99a3576e9f5f3bf4384020c422b1cc5cabbe63e9b426c6f9740530f2ae0", 0x51}, {&(0x7f0000001800)="a508d81cc7e99eb0f7654d7bb6497f1f35ac6809e0293c92adc6343261015e7f4dd81c737bf2a33917b90ed0c34646fe3007fb2163cc5ea49647a7b4a3e086cdc06ae66c8a2a05844f7206f52580610ecc7717c249abcb783e95130d39531b0f978bb13f7a9fb378b77abe899d73ab83aaef599ced926735e41afc47e22f5ce8385ea6431b51bee0819f751eec0c73b5", 0x90}], 0x5) bpf$PROG_LOAD(0x5, &(0x7f0000000400)={0x1, 0x2a, &(0x7f0000000280)=ANY=[@ANYBLOB="1800000097000000000000000000001818110000", @ANYRES32=r1, @ANYBLOB="0000000000000000b7080000000000007baaf8fe00000000bfa200000000000007020000f8fdffffb703000000000000b704000000000000b5001c008200000018120000", @ANYRES32=r1, @ANYBLOB="0000000000000000b702000014000000b7030000000000008500000083000000bf090000000000005509010000000000950000000000000018110000", @ANYRES32=r1, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000070000008200000018110000", @ANYRES32=r1, @ANYBLOB="0000000000000000bf080000000000007b8a00fe00000000bfa200000000000007020000f8ffffffb703000008000000b7040000010000008500000082000000bf91000000000000b7020000010000008500000085000000b70000000000000095"], &(0x7f0000000040)='syzkaller\x00', 0xc, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) kernel console output (not intermixed with test programs): ate VQ 0x0 after dequeue, screwing up backlog [ 1228.735828][T28915] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1229.085115][T28589] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1229.735910][ T9785] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1229.834354][T20454] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1230.934924][T28903] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1232.035618][ T9785] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1232.842118][ C1] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1232.923744][ T9785] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1233.135569][T20454] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1233.485410][T20454] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1234.233595][T29880] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1235.343380][T20454] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1235.484777][T29880] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1236.448319][T20454] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1237.543333][T28915] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1238.043189][ T9785] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1238.526133][ T9785] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1238.602099][ C1] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1238.643114][T28915] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1238.682897][ C1] openvswitch: cpu_id mismatch with handler threads [ 1238.686437][ T1315] ieee802154 phy1 wpan1: encryption failed: -22 [ 1238.691820][T28576] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1239.743660][T20454] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1240.853586][T20454] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1241.244057][T20454] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1241.953545][T28903] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1242.531705][ C0] ip6_tunnel: ip6tnl4 xmit: Local address not yet configured! [ 1243.053592][T20454] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1243.652717][T28903] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1243.722154][ C1] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1243.804036][ C1] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1243.812315][ C0] ip6_tunnel: ip6tnl2 xmit: Local address not yet configured! [ 1243.839769][T28903] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1244.176716][ T9785] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1245.276516][T20451] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1245.885359][T30285] Bluetooth: hci0: command 0x0419 tx timeout [ 1246.378201][ T5931] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1247.011178][T20454] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1247.477849][T20454] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1248.286083][T28593] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1248.575349][ T5931] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1248.762379][ C1] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1248.924916][T20451] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1249.564003][ T5931] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1249.694755][T20451] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1250.795214][ T5931] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1251.895104][T20451] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1252.764193][T20451] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1253.005942][T20451] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1254.104641][ T9785] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1254.602075][ C1] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1254.604840][ T9785] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1254.685641][ T5931] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1255.204702][T20451] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1256.307446][ T9785] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1257.406579][ T5931] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1257.883193][T28593] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1258.504435][T20454] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1258.523215][T28903] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1259.605427][T20454] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1259.722073][ C1] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1259.806268][T20454] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1260.447837][ T5931] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1260.705306][ T5931] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1261.806837][T20451] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1262.913901][T20454] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1264.014586][T20454] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1264.288598][ T9785] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1265.115255][T20451] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1265.482372][ C1] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1265.564096][T20451] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1266.206069][T20451] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1266.226163][T20451] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1267.326055][T20454] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1267.484122][T28593] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1268.425485][T29880] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1269.403517][ C0] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:1b, vlan:0) [ 1269.429169][T28903] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1270.635801][ T9785] net_ratelimit: 1 callbacks suppressed [ 1270.635844][ T9785] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1270.685663][ T9785] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1271.242093][ C1] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1271.735329][ T9785] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1271.968112][T20451] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1272.844328][T20451] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1273.942353][T20451] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1275.042379][T28903] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1275.161750][ C0] ip6_tunnel: ip6tnl4 xmit: Local address not yet configured! [ 1275.167028][T28903] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1276.142459][ T5931] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1276.443439][T20451] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1277.002212][ C1] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1277.005223][T20451] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1277.092441][T28589] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1277.246187][T20451] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1278.344963][T29880] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1279.445303][T28903] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1280.546513][T20454] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1280.927483][T29880] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1281.567921][T20454] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1281.647032][T20454] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1282.207534][T20454] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1282.744919][T20454] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1282.766548][ C1] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1283.845988][T20451] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1284.762583][ C0] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1284.790764][T28576] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1284.793082][T28903] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1284.834632][T28593] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1286.683422][ T9785] net_ratelimit: 3 callbacks suppressed [ 1286.683459][ T9785] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1287.147171][T20454] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1287.327797][ T9785] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1287.332150][T28903] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1288.245950][T29880] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1288.522091][ C1] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1289.346915][T20454] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1290.451137][ T9785] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1290.561474][ T535] __nla_validate_parse: 60 callbacks suppressed [ 1290.561539][ T535] netlink: 16 bytes leftover after parsing attributes in process `syz.5.7021'. [ 1290.959267][ T555] netlink: 48 bytes leftover after parsing attributes in process `syz.0.7025'. [ 1291.083037][ T557] netlink: 4 bytes leftover after parsing attributes in process `syz.5.7024'. [ 1291.564861][T28903] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1291.850672][ T561] netlink: 'syz.4.7026': attribute type 3 has an invalid length. [ 1292.170554][ T580] FAULT_INJECTION: forcing a failure. [ 1292.170554][ T580] name failslab, interval 1, probability 0, space 0, times 0 [ 1292.170607][ T580] CPU: 1 UID: 0 PID: 580 Comm: syz.2.7031 Not tainted syzkaller #0 PREEMPT(full) [ 1292.170629][ T580] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/07/2026 [ 1292.170642][ T580] Call Trace: [ 1292.170650][ T580] [ 1292.170659][ T580] dump_stack_lvl+0xe8/0x150 [ 1292.170692][ T580] should_fail_ex+0x410/0x560 [ 1292.170723][ T580] should_failslab+0xa8/0x100 [ 1292.170751][ T580] __kmalloc_cache_node_noprof+0xaa/0x620 [ 1292.170775][ T580] ? __css_rstat_updated+0x237/0x540 [ 1292.170825][ T580] ? __get_vm_area_node+0x155/0x2f0 [ 1292.170852][ T580] ? __get_vm_area_node+0x155/0x2f0 [ 1292.170886][ T580] __get_vm_area_node+0x155/0x2f0 [ 1292.170935][ T580] __vmalloc_node_range_noprof+0x343/0x1540 [ 1292.170956][ T580] ? bpf_check+0x115b/0x2ef0 [ 1292.170989][ T580] ? lruvec_stat_mod_folio+0x6e/0x3e0 [ 1292.171015][ T580] ? lruvec_stat_mod_folio+0x6e/0x3e0 [ 1292.171051][ T580] ? __pfx___vmalloc_node_range_noprof+0x10/0x10 [ 1292.171074][ T580] ? apparmor_capable+0x126/0x170 [ 1292.171097][ T580] ? bpf_lsm_capable+0x9/0x20 [ 1292.171117][ T580] ? security_capable+0x7e/0x2c0 [ 1292.171146][ T580] ? bpf_check+0x115b/0x2ef0 [ 1292.171165][ T580] __vmalloc_noprof+0xd2/0x120 [ 1292.171185][ T580] ? bpf_check+0x115b/0x2ef0 [ 1292.171209][ T580] bpf_check+0x115b/0x2ef0 [ 1292.171247][ T580] ? __pfx_bpf_check+0x10/0x10 [ 1292.171271][ T580] ? bpf_obj_name_cpy+0x194/0x1e0 [ 1292.171302][ T580] bpf_prog_load+0x14d6/0x1c20 [ 1292.171337][ T580] ? __pfx_bpf_prog_load+0x10/0x10 [ 1292.171384][ T580] __sys_bpf+0xd0d/0xd90 [ 1292.171413][ T580] ? __pfx___sys_bpf+0x10/0x10 [ 1292.171446][ T580] ? __fget_files+0x2a/0x420 [ 1292.171504][ T580] __x64_sys_bpf+0xba/0xd0 [ 1292.171526][ T580] do_syscall_64+0x166/0x520 [ 1292.171552][ T580] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1292.171570][ T580] ? clear_bhb_loop+0x70/0xc0 [ 1292.171593][ T580] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1292.171610][ T580] RIP: 0033:0x7efca1d9e2d9 [ 1292.171628][ T580] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 1292.171643][ T580] RSP: 002b:00007efca2bf7028 EFLAGS: 00000246 ORIG_RAX: 0000000000000141 [ 1292.171664][ T580] RAX: ffffffffffffffda RBX: 00007efca2025fa0 RCX: 00007efca1d9e2d9 [ 1292.171678][ T580] RDX: 0000000000000094 RSI: 0000200000000540 RDI: 0000000000000005 [ 1292.171691][ T580] RBP: 00007efca2bf7090 R08: 0000000000000000 R09: 0000000000000000 [ 1292.171703][ T580] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000002 [ 1292.171714][ T580] R13: 00007efca2026038 R14: 00007efca2025fa0 R15: 00007ffc1de38b98 [ 1292.171745][ T580] [ 1292.378616][ T580] warn_alloc: 1 callbacks suppressed [ 1292.378632][ T580] syz.2.7031: vmalloc error: size 2176, align 0x1, vm_struct allocation failed, mode:0x400dc0(GFP_KERNEL_ACCOUNT|__GFP_ZERO), nodemask=(null),cpuset=/,mems_allowed=0-1 [ 1292.378690][ T580] CPU: 0 UID: 0 PID: 580 Comm: syz.2.7031 Not tainted syzkaller #0 PREEMPT(full) [ 1292.378709][ T580] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/07/2026 [ 1292.378721][ T580] Call Trace: [ 1292.378729][ T580] [ 1292.378738][ T580] dump_stack_lvl+0xe8/0x150 [ 1292.378769][ T580] warn_alloc+0x24d/0x270 [ 1292.378790][ T580] ? __kasan_kmalloc+0x22/0xb0 [ 1292.378815][ T580] ? __pfx_warn_alloc+0x10/0x10 [ 1292.378833][ T580] ? __css_rstat_updated+0x237/0x540 [ 1292.378854][ T580] ? __get_vm_area_node+0x155/0x2f0 [ 1292.378900][ T580] ? __get_vm_area_node+0x2a9/0x2f0 [ 1292.378934][ T580] __vmalloc_node_range_noprof+0x36b/0x1540 [ 1292.378965][ T580] ? lruvec_stat_mod_folio+0x6e/0x3e0 [ 1292.378992][ T580] ? lruvec_stat_mod_folio+0x6e/0x3e0 [ 1292.379029][ T580] ? __pfx___vmalloc_node_range_noprof+0x10/0x10 [ 1292.379050][ T580] ? apparmor_capable+0x126/0x170 [ 1292.379073][ T580] ? bpf_lsm_capable+0x9/0x20 [ 1292.379091][ T580] ? security_capable+0x7e/0x2c0 [ 1292.379117][ T580] ? bpf_check+0x115b/0x2ef0 [ 1292.379136][ T580] __vmalloc_noprof+0xd2/0x120 [ 1292.379155][ T580] ? bpf_check+0x115b/0x2ef0 [ 1292.379177][ T580] bpf_check+0x115b/0x2ef0 [ 1292.379214][ T580] ? __pfx_bpf_check+0x10/0x10 [ 1292.379237][ T580] ? bpf_obj_name_cpy+0x194/0x1e0 [ 1292.379268][ T580] bpf_prog_load+0x14d6/0x1c20 [ 1292.379305][ T580] ? __pfx_bpf_prog_load+0x10/0x10 [ 1292.379350][ T580] __sys_bpf+0xd0d/0xd90 [ 1292.379378][ T580] ? __pfx___sys_bpf+0x10/0x10 [ 1292.379410][ T580] ? __fget_files+0x2a/0x420 [ 1292.379465][ T580] __x64_sys_bpf+0xba/0xd0 [ 1292.379486][ T580] do_syscall_64+0x166/0x520 [ 1292.379511][ T580] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1292.379531][ T580] ? clear_bhb_loop+0x70/0xc0 [ 1292.379553][ T580] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1292.379571][ T580] RIP: 0033:0x7efca1d9e2d9 [ 1292.379588][ T580] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 1292.379602][ T580] RSP: 002b:00007efca2bf7028 EFLAGS: 00000246 ORIG_RAX: 0000000000000141 [ 1292.379621][ T580] RAX: ffffffffffffffda RBX: 00007efca2025fa0 RCX: 00007efca1d9e2d9 [ 1292.379635][ T580] RDX: 0000000000000094 RSI: 0000200000000540 RDI: 0000000000000005 [ 1292.379646][ T580] RBP: 00007efca2bf7090 R08: 0000000000000000 R09: 0000000000000000 [ 1292.379658][ T580] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000002 [ 1292.379669][ T580] R13: 00007efca2026038 R14: 00007efca2025fa0 R15: 00007ffc1de38b98 [ 1292.379698][ T580] [ 1292.379907][ T580] Mem-Info: [ 1292.379916][ T580] active_anon:14350 inactive_anon:0 isolated_anon:0 [ 1292.379916][ T580] active_file:0 inactive_file:44160 isolated_file:0 [ 1292.379916][ T580] unevictable:0 dirty:80 writeback:0 [ 1292.379916][ T580] slab_reclaimable:12337 slab_unreclaimable:145645 [ 1292.379916][ T580] mapped:29924 shmem:667 pagetables:3594 [ 1292.379916][ T580] sec_pagetables:0 bounce:0 [ 1292.379916][ T580] kernel_misc_reclaimable:0 [ 1292.379916][ T580] free:1215544 free_pcp:10214 free_cma:0 [ 1292.379963][ T580] Node 0 active_anon:57400kB inactive_anon:0kB active_file:0kB inactive_file:176440kB unevictable:0kB isolated(anon):0kB isolated(file):0kB mapped:119696kB dirty:320kB writeback:0kB shmem:2668kB shmem_thp:0kB shmem_pmdmapped:0kB anon_thp:0kB kernel_stack:17560kB pagetables:14224kB sec_pagetables:0kB all_unreclaimable? no Balloon:0kB gpu_active:0kB gpu_reclaim:0kB [ 1292.380010][ T580] Node 1 active_anon:0kB inactive_anon:0kB active_file:0kB inactive_file:200kB unevictable:0kB isolated(anon):0kB isolated(file):0kB mapped:0kB dirty:0kB writeback:0kB shmem:0kB shmem_thp:0kB shmem_pmdmapped:0kB anon_thp:0kB kernel_stack:32kB pagetables:152kB sec_pagetables:0kB all_unreclaimable? no Balloon:0kB gpu_active:0kB gpu_reclaim:0kB [ 1292.380055][ T580] Node 0 DMA free:15360kB boost:0kB min:208kB low:260kB high:312kB reserved_highatomic:0kB free_highatomic:0kB active_anon:0kB inactive_anon:0kB active_file:0kB inactive_file:0kB unevictable:0kB writepending:0kB zspages:0kB present:15992kB managed:15360kB mlocked:0kB bounce:0kB free_pcp:0kB local_pcp:0kB free_cma:0kB [ 1292.380105][ T580] lowmem_reserve[]: 0 2468 2468 2468 2468 [ 1292.380138][ T580] Node 0 DMA32 free:899232kB boost:0kB min:33984kB low:42480kB high:50976kB reserved_highatomic:0kB free_highatomic:0kB active_anon:57400kB inactive_anon:0kB active_file:0kB inactive_file:176440kB unevictable:0kB writepending:320kB zspages:0kB present:3129332kB managed:2527708kB mlocked:0kB bounce:0kB free_pcp:40856kB local_pcp:20344kB free_cma:0kB [ 1292.380189][ T580] lowmem_reserve[]: 0 0 0 0 0 [ 1292.380220][ T580] Node 0 Normal free:0kB boost:0kB min:0kB low:0kB high:0kB reserved_highatomic:0kB free_highatomic:0kB active_anon:0kB inactive_anon:0kB active_file:0kB inactive_file:0kB unevictable:0kB writepending:0kB zspages:0kB present:1048580kB managed:0kB mlocked:0kB bounce:0kB free_pcp:0kB local_pcp:0kB free_cma:0kB [ 1292.380267][ T580] lowmem_reserve[]: 0 0 0 0 0 [ 1292.380297][ T580] Node 1 Normal free:3947584kB boost:0kB min:55916kB low:69892kB high:83868kB reserved_highatomic:0kB free_highatomic:0kB active_anon:0kB inactive_anon:0kB active_file:0kB inactive_file:200kB unevictable:0kB writepending:0kB zspages:0kB present:4194300kB managed:4111104kB mlocked:0kB bounce:0kB free_pcp:0kB local_pcp:0kB free_cma:0kB [ 1292.380347][ T580] lowmem_reserve[]: 0 0 0 0 0 [ 1292.380376][ T580] Node 0 DMA: 0*4kB 0*8kB 0*16kB 0*32kB 0*64kB 0*128kB 0*256kB 0*512kB 1*1024kB (U) 1*2048kB (M) 3*4096kB (M) = 15360kB [ 1292.380477][ T580] Node 0 DMA32: 4102*4kB (UME) 2883*8kB (UME) 1833*16kB (UME) 151*32kB (UME) 1259*64kB (UME) 1010*128kB (UME) 551*256kB (UME) 125*512kB (UME) 19*1024kB (UME) 5*2048kB (UME) 93*4096kB (UME) = 899168kB [ 1292.380615][ T580] Node 0 Normal: 0*4kB 0*8kB 0*16kB 0*32kB 0*64kB 0*128kB 0*256kB 0*512kB 0*1024kB 0*2048kB 0*4096kB = 0kB [ 1292.380700][ T580] Node 1 Normal: 2*4kB (M) 3*8kB (UM) 6*16kB (UM) 8*32kB (UM) 7*64kB (UM) 2*128kB (UM) 2*256kB (M) 3*512kB (UM) 2*1024kB (UM) 1*2048kB (U) 962*4096kB (UM) = 3947584kB [ 1292.380837][ T580] Node 0 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=1048576kB [ 1292.380851][ T580] Node 0 hugepages_total=2 hugepages_free=2 hugepages_surp=0 hugepages_size=2048kB [ 1292.380865][ T580] Node 1 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=1048576kB [ 1292.380885][ T580] Node 1 hugepages_total=2 hugepages_free=2 hugepages_surp=0 hugepages_size=2048kB [ 1292.380899][ T580] 44823 total pagecache pages [ 1292.380906][ T580] 0 pages in swap cache [ 1292.380913][ T580] Free swap = 124996kB [ 1292.380920][ T580] Total swap = 124996kB [ 1292.380928][ T580] 2097051 pages RAM [ 1292.380935][ T580] 0 pages HighMem/MovableOnly [ 1292.380942][ T580] 433508 pages reserved [ 1292.380948][ T580] 0 pages cma reserved [ 1292.462727][T20451] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1292.471434][T28903] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1292.555523][T28903] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1292.694899][ T582] A link change request failed with some changes committed already. Interface vxcan1 may have been left with an inconsistent configuration, please check. [ 1292.816376][T20454] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1292.847833][ T586] netlink: 36 bytes leftover after parsing attributes in process `syz.0.7034'. [ 1293.571868][ C0] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1293.790560][ T598] netlink: 12 bytes leftover after parsing attributes in process `syz.4.7038'. [ 1293.922490][ T608] netlink: 8 bytes leftover after parsing attributes in process `syz.2.7040'. [ 1293.939283][ T591] netlink: 48 bytes leftover after parsing attributes in process `syz.5.7035'. [ 1294.024502][ T5931] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1294.103904][ T617] netlink: 'syz.1.7041': attribute type 1 has an invalid length. [ 1294.259027][ T624] netlink: 'syz.1.7041': attribute type 10 has an invalid length. [ 1294.259065][ T624] netlink: 40 bytes leftover after parsing attributes in process `syz.1.7041'. [ 1294.365595][T28589] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1294.945989][ T617] 8021q: adding VLAN 0 to HW filter on device bond2 [ 1294.966044][ T611] dummy0 speed is unknown, defaulting to 1000 [ 1295.066995][ T619] bond2: (slave dummy0): making interface the new active one [ 1295.069624][ T619] bond2: (slave dummy0): Enslaving as an active interface with an up link [ 1295.070322][ T619] A link change request failed with some changes committed already. Interface dummy0 may have been left with an inconsistent configuration, please check. [ 1295.114953][ T624] dummy0: entered promiscuous mode [ 1295.213562][T29662] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1295.258022][ T624] bond2: (slave dummy0): Releasing active interface [ 1295.339331][ T612] netlink: 16 bytes leftover after parsing attributes in process `syz.0.7039'. [ 1295.443175][ T634] netlink: 'syz.0.7039': attribute type 30 has an invalid length. [ 1295.748221][ T645] netlink: 'syz.1.7044': attribute type 21 has an invalid length. [ 1295.808437][ T634] workqueue: Failed to create a rescuer kthread for wq "bond7": -EINTR [ 1295.809581][ T636] netlink: 'syz.4.7043': attribute type 3 has an invalid length. [ 1296.311214][ T645] siw: device registration error -23 [ 1296.844998][ T662] netlink: 20 bytes leftover after parsing attributes in process `syz.1.7047'. [ 1297.509581][T20451] net_ratelimit: 1 callbacks suppressed [ 1297.509617][T20451] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1297.581419][T28904] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1297.901340][ T675] ip_tables: iptables: counters copy to user failed while replacing table [ 1298.230013][ T5931] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1298.232167][T29880] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1298.643176][T20454] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1298.767153][ C0] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1299.122540][T20454] IPVS: starting estimator thread 0... [ 1299.139647][ T690] IPVS: lblc: SCTP 172.20.20.187:0 - no destination available [ 1299.214195][ T691] IPVS: using max 31 ests per chain, 74400 per kthread [ 1299.273403][ T694] netlink: 'syz.0.7055': attribute type 1 has an invalid length. [ 1299.754652][T29662] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1300.128386][ T1315] ieee802154 phy1 wpan1: encryption failed: -22 [ 1300.157444][ T694] 8021q: adding VLAN 0 to HW filter on device bond7 [ 1300.158540][ T706] netlink: 'syz.4.7056': attribute type 1 has an invalid length. [ 1300.261287][ T706] veth5: entered allmulticast mode [ 1300.499104][ T695] bond7: entered promiscuous mode [ 1300.499163][ T695] bond7: entered allmulticast mode [ 1300.863949][T29662] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1301.198479][ T719] veth0: entered promiscuous mode [ 1301.212711][ T719] netlink: 16 bytes leftover after parsing attributes in process `syz.4.7063'. [ 1301.212780][ T719] netlink: 16 bytes leftover after parsing attributes in process `syz.4.7063'. [ 1301.392610][ T717] veth0: left promiscuous mode [ 1302.243479][ T737] bond1: (slave lo): Releasing backup interface [ 1302.259038][ T737] bond1: (slave lo): last VLAN challenged slave left bond - VLAN blocking is removed [ 1302.263169][ T743] x_tables: duplicate underflow at hook 2 [ 1302.277518][ T737] bridge0: port 1(bridge_slave_0) entered disabled state [ 1303.128282][ T737] bridge_slave_1: left allmulticast mode [ 1303.128328][ T737] bridge_slave_1: left promiscuous mode [ 1303.128750][ T737] bridge0: port 2(bridge_slave_1) entered disabled state [ 1303.169613][T29662] net_ratelimit: 3 callbacks suppressed [ 1303.169631][T29662] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1303.243798][ T737] bond0: (slave bond_slave_0): Releasing backup interface [ 1303.279717][ T737] bond0: (slave bond_slave_1): Releasing backup interface [ 1303.307526][ T737] team0: Port device team_slave_0 removed [ 1303.323271][ T737] team0: Port device team_slave_1 removed [ 1303.340304][T29662] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1303.342140][T28904] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1303.369169][ T737] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 1303.387682][ T737] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 1303.390862][ T737] A link change request failed with some changes committed already. Interface hsr_slave_0 may have been left with an inconsistent configuration, please check. [ 1303.547351][ T750] team0: Port device xfrm0 added [ 1303.784647][ T761] Cannot find del_set index 1 as target [ 1303.962730][T28593] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1303.970382][T28915] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1304.335096][ T5931] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1304.521887][ C0] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1304.748577][ T788] netlink: 72 bytes leftover after parsing attributes in process `syz.1.7082'. [ 1305.168675][ T799] netlink: 16 bytes leftover after parsing attributes in process `syz.1.7086'. [ 1305.487392][ T9785] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1305.516117][ T815] FAULT_INJECTION: forcing a failure. [ 1305.516117][ T815] name failslab, interval 1, probability 0, space 0, times 0 [ 1305.516150][ T815] CPU: 0 UID: 0 PID: 815 Comm: syz.4.7092 Not tainted syzkaller #0 PREEMPT(full) [ 1305.516170][ T815] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/07/2026 [ 1305.516182][ T815] Call Trace: [ 1305.516190][ T815] [ 1305.516202][ T815] dump_stack_lvl+0xe8/0x150 [ 1305.516234][ T815] should_fail_ex+0x410/0x560 [ 1305.516265][ T815] should_failslab+0xa8/0x100 [ 1305.516293][ T815] __kmalloc_node_track_caller_noprof+0xfb/0x720 [ 1305.516316][ T815] ? kvrealloc_node_align_noprof+0x7b/0xf0 [ 1305.516338][ T815] ? kvrealloc_node_align_noprof+0x7b/0xf0 [ 1305.516363][ T815] ? kvrealloc_node_align_noprof+0x7b/0xf0 [ 1305.516388][ T815] krealloc_node_align_noprof+0x19a/0x390 [ 1305.516411][ T815] ? bpf_lsm_capable+0x9/0x20 [ 1305.516431][ T815] ? security_capable+0x7e/0x2c0 [ 1305.516459][ T815] kvrealloc_node_align_noprof+0x7b/0xf0 [ 1305.516484][ T815] bpf_iarray_realloc+0x34/0xa0 [ 1305.516505][ T815] bpf_check+0x148b/0x2ef0 [ 1305.516553][ T815] ? __pfx_bpf_check+0x10/0x10 [ 1305.516577][ T815] ? bpf_obj_name_cpy+0x194/0x1e0 [ 1305.516608][ T815] bpf_prog_load+0x14d6/0x1c20 [ 1305.516643][ T815] ? __pfx_bpf_prog_load+0x10/0x10 [ 1305.516692][ T815] __sys_bpf+0xd0d/0xd90 [ 1305.516722][ T815] ? __pfx___sys_bpf+0x10/0x10 [ 1305.516756][ T815] ? __fget_files+0x2a/0x420 [ 1305.516801][ T815] ? ksys_write+0x242/0x270 [ 1305.516823][ T815] ? __pfx_ksys_write+0x10/0x10 [ 1305.516848][ T815] __x64_sys_bpf+0xba/0xd0 [ 1305.516871][ T815] do_syscall_64+0x166/0x520 [ 1305.516896][ T815] ? trace_irq_disable+0x3b/0x140 [ 1305.516916][ T815] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1305.516935][ T815] ? clear_bhb_loop+0x70/0xc0 [ 1305.516959][ T815] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1305.516978][ T815] RIP: 0033:0x7fd719b9e2d9 [ 1305.516996][ T815] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 1305.517012][ T815] RSP: 002b:00007fd717df6028 EFLAGS: 00000246 ORIG_RAX: 0000000000000141 [ 1305.517033][ T815] RAX: ffffffffffffffda RBX: 00007fd719e25fa0 RCX: 00007fd719b9e2d9 [ 1305.517047][ T815] RDX: 0000000000000094 RSI: 0000200000000540 RDI: 0000000000000005 [ 1305.517059][ T815] RBP: 00007fd717df6090 R08: 0000000000000000 R09: 0000000000000000 [ 1305.517072][ T815] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000002 [ 1305.517083][ T815] R13: 00007fd719e26038 R14: 00007fd719e25fa0 R15: 00007ffee4988218 [ 1305.517115][ T815] [ 1306.624189][T29880] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1307.588922][ T856] tc_dump_action: action bad kind [ 1307.631408][ T857] netlink: 'syz.4.7103': attribute type 10 has an invalid length. [ 1307.654904][ T857] 8021q: adding VLAN 0 to HW filter on device netdevsim1 [ 1307.656173][ T857] team0: Device netdevsim1 is of different type [ 1307.945704][ T869] IPVS: sync thread started: state = MASTER, mcast_ifn = lo, syncid = 0, id = 0 [ 1307.946604][ T854] netlink: 56 bytes leftover after parsing attributes in process `syz.5.7101'. [ 1308.146833][ T857] netlink: 'syz.4.7103': attribute type 10 has an invalid length. [ 1308.171247][ T872] siw: device registration error -23 [ 1308.250764][ T857] 8021q: adding VLAN 0 to HW filter on device netdevsim1 [ 1308.267091][ T857] bond0: (slave netdevsim1): Enslaving as an active interface with an up link [ 1308.577093][ T877] IPVS: stopping master sync thread 869 ... [ 1308.737769][ T873] sctp: sctp_transport_update_pmtu: Reported pmtu 128 too low, using default minimum of 512 [ 1308.938827][T20451] net_ratelimit: 1 callbacks suppressed [ 1308.938848][T20451] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1309.055595][ T893] netlink: 45349 bytes leftover after parsing attributes in process `syz.5.7107'. [ 1309.055864][ T893] 0ªX¹¦Dö»: renamed from gretap0 (while UP) [ 1309.096994][T29880] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1309.118170][ T9785] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1309.131272][ T893] 0ªX¹¦Dö»: entered allmulticast mode [ 1309.562153][ C1] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1309.744581][T20454] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1309.916902][ T908] sctp: [Deprecated]: syz.2.7112 (pid 908) Use of struct sctp_assoc_value in delayed_ack socket option. [ 1309.916902][ T908] Use struct sctp_sack_info instead [ 1309.941325][ T908] sctp: [Deprecated]: syz.2.7112 (pid 908) Use of struct sctp_assoc_value in delayed_ack socket option. [ 1309.941325][ T908] Use struct sctp_sack_info instead [ 1310.114113][ T9785] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1310.659225][ T928] netlink: 132 bytes leftover after parsing attributes in process `syz.2.7112'. [ 1310.768203][ T928] netlink: 4 bytes leftover after parsing attributes in process `syz.2.7112'. [ 1311.246572][ T9785] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1311.826726][ T952] FAULT_INJECTION: forcing a failure. [ 1311.826726][ T952] name fail_page_alloc, interval 1, probability 0, space 0, times 0 [ 1311.826785][ T952] CPU: 1 UID: 0 PID: 952 Comm: syz.0.7117 Not tainted syzkaller #0 PREEMPT(full) [ 1311.826809][ T952] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/07/2026 [ 1311.826821][ T952] Call Trace: [ 1311.826829][ T952] [ 1311.826838][ T952] dump_stack_lvl+0xe8/0x150 [ 1311.826870][ T952] should_fail_ex+0x410/0x560 [ 1311.826902][ T952] prepare_alloc_pages+0x223/0x600 [ 1311.826931][ T952] __alloc_frozen_pages_noprof+0x185/0x5a0 [ 1311.826959][ T952] ? __pfx___alloc_frozen_pages_noprof+0x10/0x10 [ 1311.826987][ T952] ? __pfx_policy_nodemask+0x10/0x10 [ 1311.827011][ T952] ? __get_vm_area_node+0x155/0x2f0 [ 1311.827037][ T952] ? __vmalloc_node_range_noprof+0x343/0x1540 [ 1311.827056][ T952] ? __vmalloc_noprof+0xd2/0x120 [ 1311.827072][ T952] ? bpf_prog_calc_tag+0x51/0x370 [ 1311.827093][ T952] ? check_and_resolve_insns+0xbb/0x21d0 [ 1311.827116][ T952] ? bpf_prog_load+0x14d6/0x1c20 [ 1311.827137][ T952] ? __sys_bpf+0xd0d/0xd90 [ 1311.827156][ T952] ? __x64_sys_bpf+0xba/0xd0 [ 1311.827174][ T952] ? do_syscall_64+0x166/0x520 [ 1311.827198][ T952] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1311.827221][ T952] alloc_pages_mpol+0x21e/0x390 [ 1311.827253][ T952] alloc_pages_noprof+0xb1/0x2b0 [ 1311.827280][ T952] get_free_pages_noprof+0xf/0x80 [ 1311.827303][ T952] __kasan_populate_vmalloc+0x38/0x1c0 [ 1311.827325][ T952] ? do_raw_spin_unlock+0xf5/0x200 [ 1311.827357][ T952] alloc_vmap_area+0xd1a/0x1420 [ 1311.827399][ T952] ? __pfx_alloc_vmap_area+0x10/0x10 [ 1311.827424][ T952] ? __kmalloc_cache_node_noprof+0x3d1/0x620 [ 1311.827447][ T952] ? __kmalloc_cache_node_noprof+0x1f7/0x620 [ 1311.827468][ T952] ? __get_vm_area_node+0x155/0x2f0 [ 1311.827501][ T952] __get_vm_area_node+0x200/0x2f0 [ 1311.827536][ T952] __vmalloc_node_range_noprof+0x343/0x1540 [ 1311.827557][ T952] ? bpf_prog_calc_tag+0x51/0x370 [ 1311.827587][ T952] ? __x64_sys_bpf+0xba/0xd0 [ 1311.827604][ T952] ? do_syscall_64+0x166/0x520 [ 1311.827633][ T952] ? __kasan_kmalloc+0x93/0xb0 [ 1311.827656][ T952] ? bpf_prog_load+0x14d6/0x1c20 [ 1311.827677][ T952] ? __sys_bpf+0xd0d/0xd90 [ 1311.827696][ T952] ? __x64_sys_bpf+0xba/0xd0 [ 1311.827728][ T952] ? __pfx___vmalloc_node_range_noprof+0x10/0x10 [ 1311.827759][ T952] ? bpf_prog_calc_tag+0x51/0x370 [ 1311.827780][ T952] __vmalloc_noprof+0xd2/0x120 [ 1311.827799][ T952] ? bpf_prog_calc_tag+0x51/0x370 [ 1311.827824][ T952] bpf_prog_calc_tag+0x51/0x370 [ 1311.827847][ T952] ? __pfx_cmp_subprogs+0x10/0x10 [ 1311.827874][ T952] check_and_resolve_insns+0xbb/0x21d0 [ 1311.827902][ T952] ? add_subprog+0x2e2/0x3f0 [ 1311.827928][ T952] ? __pfx_check_and_resolve_insns+0x10/0x10 [ 1311.827962][ T952] bpf_check+0x18f7/0x2ef0 [ 1311.828001][ T952] ? __pfx_bpf_check+0x10/0x10 [ 1311.828026][ T952] ? bpf_obj_name_cpy+0x194/0x1e0 [ 1311.828057][ T952] bpf_prog_load+0x14d6/0x1c20 [ 1311.828092][ T952] ? __pfx_bpf_prog_load+0x10/0x10 [ 1311.828140][ T952] __sys_bpf+0xd0d/0xd90 [ 1311.828171][ T952] ? __pfx___sys_bpf+0x10/0x10 [ 1311.828204][ T952] ? __fget_files+0x2a/0x420 [ 1311.828249][ T952] ? ksys_write+0x242/0x270 [ 1311.828271][ T952] ? __pfx_ksys_write+0x10/0x10 [ 1311.828295][ T952] __x64_sys_bpf+0xba/0xd0 [ 1311.828318][ T952] do_syscall_64+0x166/0x520 [ 1311.828342][ T952] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1311.828362][ T952] ? clear_bhb_loop+0x70/0xc0 [ 1311.828385][ T952] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1311.828404][ T952] RIP: 0033:0x7fb41d19e2d9 [ 1311.828422][ T952] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 1311.828438][ T952] RSP: 002b:00007fb41e030028 EFLAGS: 00000246 ORIG_RAX: 0000000000000141 [ 1311.828458][ T952] RAX: ffffffffffffffda RBX: 00007fb41d425fa0 RCX: 00007fb41d19e2d9 [ 1311.828472][ T952] RDX: 0000000000000094 RSI: 0000200000000540 RDI: 0000000000000005 [ 1311.828484][ T952] RBP: 00007fb41e030090 R08: 0000000000000000 R09: 0000000000000000 [ 1311.828496][ T952] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000002 [ 1311.828508][ T952] R13: 00007fb41d426038 R14: 00007fb41d425fa0 R15: 00007ffec1181108 [ 1311.828539][ T952] [ 1312.006283][ T952] syz.0.7117: vmalloc error: size 128, align 0x1, vm_struct allocation failed, mode:0x400cc0(GFP_KERNEL_ACCOUNT), nodemask=(null),cpuset=/,mems_allowed=0-1 [ 1312.006344][ T952] CPU: 0 UID: 0 PID: 952 Comm: syz.0.7117 Not tainted syzkaller #0 PREEMPT(full) [ 1312.006363][ T952] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/07/2026 [ 1312.006374][ T952] Call Trace: [ 1312.006382][ T952] [ 1312.006389][ T952] dump_stack_lvl+0xe8/0x150 [ 1312.006421][ T952] warn_alloc+0x24d/0x270 [ 1312.006443][ T952] ? lockdep_hardirqs_on+0x7b/0x110 [ 1312.006470][ T952] ? __pfx_warn_alloc+0x10/0x10 [ 1312.006489][ T952] ? kfree+0x1c5/0x650 [ 1312.006512][ T952] ? __get_vm_area_node+0x219/0x2f0 [ 1312.006547][ T952] __vmalloc_node_range_noprof+0x36b/0x1540 [ 1312.006567][ T952] ? __x64_sys_bpf+0xba/0xd0 [ 1312.006585][ T952] ? do_syscall_64+0x166/0x520 [ 1312.006613][ T952] ? __kasan_kmalloc+0x93/0xb0 [ 1312.006636][ T952] ? bpf_prog_load+0x14d6/0x1c20 [ 1312.006655][ T952] ? __sys_bpf+0xd0d/0xd90 [ 1312.006673][ T952] ? __x64_sys_bpf+0xba/0xd0 [ 1312.006704][ T952] ? __pfx___vmalloc_node_range_noprof+0x10/0x10 [ 1312.006733][ T952] ? bpf_prog_calc_tag+0x51/0x370 [ 1312.006754][ T952] __vmalloc_noprof+0xd2/0x120 [ 1312.006771][ T952] ? bpf_prog_calc_tag+0x51/0x370 [ 1312.006796][ T952] bpf_prog_calc_tag+0x51/0x370 [ 1312.006817][ T952] ? __pfx_cmp_subprogs+0x10/0x10 [ 1312.006843][ T952] check_and_resolve_insns+0xbb/0x21d0 [ 1312.006869][ T952] ? add_subprog+0x2e2/0x3f0 [ 1312.006893][ T952] ? __pfx_check_and_resolve_insns+0x10/0x10 [ 1312.006926][ T952] bpf_check+0x18f7/0x2ef0 [ 1312.006963][ T952] ? __pfx_bpf_check+0x10/0x10 [ 1312.006986][ T952] ? bpf_obj_name_cpy+0x194/0x1e0 [ 1312.007016][ T952] bpf_prog_load+0x14d6/0x1c20 [ 1312.007056][ T952] ? __pfx_bpf_prog_load+0x10/0x10 [ 1312.007102][ T952] __sys_bpf+0xd0d/0xd90 [ 1312.007132][ T952] ? __pfx___sys_bpf+0x10/0x10 [ 1312.007163][ T952] ? __fget_files+0x2a/0x420 [ 1312.007206][ T952] ? ksys_write+0x242/0x270 [ 1312.007227][ T952] ? __pfx_ksys_write+0x10/0x10 [ 1312.007251][ T952] __x64_sys_bpf+0xba/0xd0 [ 1312.007272][ T952] do_syscall_64+0x166/0x520 [ 1312.007295][ T952] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1312.007314][ T952] ? clear_bhb_loop+0x70/0xc0 [ 1312.007337][ T952] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1312.007355][ T952] RIP: 0033:0x7fb41d19e2d9 [ 1312.007372][ T952] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 1312.007387][ T952] RSP: 002b:00007fb41e030028 EFLAGS: 00000246 ORIG_RAX: 0000000000000141 [ 1312.007405][ T952] RAX: ffffffffffffffda RBX: 00007fb41d425fa0 RCX: 00007fb41d19e2d9 [ 1312.007417][ T952] RDX: 0000000000000094 RSI: 0000200000000540 RDI: 0000000000000005 [ 1312.007429][ T952] RBP: 00007fb41e030090 R08: 0000000000000000 R09: 0000000000000000 [ 1312.007441][ T952] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000002 [ 1312.007451][ T952] R13: 00007fb41d426038 R14: 00007fb41d425fa0 R15: 00007ffec1181108 [ 1312.007480][ T952] [ 1312.007487][ T952] Mem-Info: [ 1312.007496][ T952] active_anon:15848 inactive_anon:0 isolated_anon:0 [ 1312.007496][ T952] active_file:0 inactive_file:44168 isolated_file:0 [ 1312.007496][ T952] unevictable:0 dirty:256 writeback:0 [ 1312.007496][ T952] slab_reclaimable:12374 slab_unreclaimable:137978 [ 1312.007496][ T952] mapped:31395 shmem:2074 pagetables:3629 [ 1312.007496][ T952] sec_pagetables:0 bounce:0 [ 1312.007496][ T952] kernel_misc_reclaimable:0 [ 1312.007496][ T952] free:1217850 free_pcp:9834 free_cma:0 [ 1312.007542][ T952] Node 0 active_anon:63392kB inactive_anon:0kB active_file:0kB inactive_file:176472kB unevictable:0kB isolated(anon):0kB isolated(file):0kB mapped:125580kB dirty:1024kB writeback:0kB shmem:8296kB shmem_thp:0kB shmem_pmdmapped:0kB anon_thp:0kB kernel_stack:17884kB pagetables:14364kB sec_pagetables:0kB all_unreclaimable? no Balloon:0kB gpu_active:0kB gpu_reclaim:0kB [ 1312.007589][ T952] Node 1 active_anon:0kB inactive_anon:0kB active_file:0kB inactive_file:200kB unevictable:0kB isolated(anon):0kB isolated(file):0kB mapped:0kB dirty:0kB writeback:0kB shmem:0kB shmem_thp:0kB shmem_pmdmapped:0kB anon_thp:0kB kernel_stack:32kB pagetables:152kB sec_pagetables:0kB all_unreclaimable? no Balloon:0kB gpu_active:0kB gpu_reclaim:0kB [ 1312.007633][ T952] Node 0 DMA free:15360kB boost:0kB min:208kB low:260kB high:312kB reserved_highatomic:0kB free_highatomic:0kB active_anon:0kB inactive_anon:0kB active_file:0kB inactive_file:0kB unevictable:0kB writepending:0kB zspages:0kB present:15992kB managed:15360kB mlocked:0kB bounce:0kB free_pcp:0kB local_pcp:0kB free_cma:0kB [ 1312.007683][ T952] lowmem_reserve[]: 0 2468 2468 2468 2468 [ 1312.007714][ T952] Node 0 DMA32 free:908456kB boost:0kB min:33984kB low:42480kB high:50976kB reserved_highatomic:0kB free_highatomic:0kB active_anon:63392kB inactive_anon:0kB active_file:0kB inactive_file:176472kB unevictable:0kB writepending:1024kB zspages:0kB present:3129332kB managed:2527708kB mlocked:0kB bounce:0kB free_pcp:39336kB local_pcp:18952kB free_cma:0kB [ 1312.007767][ T952] lowmem_reserve[]: 0 0 0 0 0 [ 1312.007797][ T952] Node 0 Normal free:0kB boost:0kB min:0kB low:0kB high:0kB reserved_highatomic:0kB free_highatomic:0kB active_anon:0kB inactive_anon:0kB active_file:0kB inactive_file:0kB unevictable:0kB writepending:0kB zspages:0kB present:1048580kB managed:0kB mlocked:0kB bounce:0kB free_pcp:0kB local_pcp:0kB free_cma:0kB [ 1312.007844][ T952] lowmem_reserve[]: 0 0 0 0 0 [ 1312.007873][ T952] Node 1 Normal free:3947584kB boost:0kB min:55916kB low:69892kB high:83868kB reserved_highatomic:0kB free_highatomic:0kB active_anon:0kB inactive_anon:0kB active_file:0kB inactive_file:200kB unevictable:0kB writepending:0kB zspages:0kB present:4194300kB managed:4111104kB mlocked:0kB bounce:0kB free_pcp:0kB local_pcp:0kB free_cma:0kB [ 1312.007923][ T952] lowmem_reserve[]: 0 0 0 0 0 [ 1312.007953][ T952] Node 0 DMA: 0*4kB 0*8kB 0*16kB 0*32kB 0*64kB 0*128kB 0*256kB 0*512kB 1*1024kB (U) 1*2048kB (M) 3*4096kB (M) = 15360kB [ 1312.008059][ T952] Node 0 DMA32: 617*4kB (UME) 3150*8kB (UME) 1868*16kB (UM) 1001*32kB (UME) 1329*64kB (UME) 1010*128kB (UME) 551*256kB (UME) 125*512kB (UME) 20*1024kB (UME) 3*2048kB (ME) 91*4096kB (UME) = 908340kB [ 1312.008195][ T952] Node 0 Normal: 0*4kB 0*8kB 0*16kB 0*32kB 0*64kB 0*128kB 0*256kB 0*512kB 0*1024kB 0*2048kB 0*4096kB = 0kB [ 1312.008280][ T952] Node 1 Normal: 2*4kB (M) 3*8kB (UM) 6*16kB (UM) 8*32kB (UM) 7*64kB (UM) 2*128kB (UM) 2*256kB (M) 3*512kB (UM) 2*1024kB (UM) 1*2048kB (U) 962*4096kB (UM) = 3947584kB [ 1312.008414][ T952] Node 0 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=1048576kB [ 1312.008429][ T952] Node 0 hugepages_total=2 hugepages_free=0 hugepages_surp=0 hugepages_size=2048kB [ 1312.008444][ T952] Node 1 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=1048576kB [ 1312.008458][ T952] Node 1 hugepages_total=2 hugepages_free=0 hugepages_surp=0 hugepages_size=2048kB [ 1312.008471][ T952] 46238 total pagecache pages [ 1312.008478][ T952] 0 pages in swap cache [ 1312.008486][ T952] Free swap = 124996kB [ 1312.008493][ T952] Total swap = 124996kB [ 1312.008500][ T952] 2097051 pages RAM [ 1312.008507][ T952] 0 pages HighMem/MovableOnly [ 1312.008513][ T952] 433508 pages reserved [ 1312.008520][ T952] 0 pages cma reserved [ 1312.895493][T28915] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1313.660731][T28593] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1313.985699][ T946] 8021q: adding VLAN 0 to HW filter on device ipvlan2 [ 1314.083583][T29880] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1314.386429][ T957] 8021q: adding VLAN 0 to HW filter on device ipvlan3 [ 1314.517054][ T965] netlink: 'syz.0.7118': attribute type 1 has an invalid length. [ 1314.855102][ T5931] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1314.856645][ T5931] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1315.227649][ T965] 8021q: adding VLAN 0 to HW filter on device bond8 [ 1315.249436][T28915] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1315.492070][T28915] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1315.515567][ T974] bond8: (slave geneve2): making interface the new active one [ 1315.546007][ T974] bond8: (slave geneve2): Enslaving as an active interface with an up link [ 1315.643701][ C0] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1315.707625][ T988] netlink: 'syz.1.7124': attribute type 11 has an invalid length. [ 1315.707682][ T988] netlink: 244 bytes leftover after parsing attributes in process `syz.1.7124'. [ 1315.725304][ T982] syzkaller0: entered promiscuous mode [ 1315.725481][ T982] syzkaller0: entered allmulticast mode [ 1315.745819][ T983] SET target dimension over the limit! [ 1316.343669][ T1003] FAULT_INJECTION: forcing a failure. [ 1316.343669][ T1003] name fail_page_alloc, interval 1, probability 0, space 0, times 0 [ 1316.343702][ T1003] CPU: 0 UID: 0 PID: 1003 Comm: syz.5.7128 Not tainted syzkaller #0 PREEMPT(full) [ 1316.343723][ T1003] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/07/2026 [ 1316.343735][ T1003] Call Trace: [ 1316.343743][ T1003] [ 1316.343751][ T1003] dump_stack_lvl+0xe8/0x150 [ 1316.343785][ T1003] should_fail_ex+0x410/0x560 [ 1316.343817][ T1003] prepare_alloc_pages+0x223/0x600 [ 1316.343848][ T1003] __alloc_frozen_pages_noprof+0x185/0x5a0 [ 1316.343876][ T1003] ? __pfx___alloc_frozen_pages_noprof+0x10/0x10 [ 1316.343904][ T1003] ? __pfx_policy_nodemask+0x10/0x10 [ 1316.343928][ T1003] ? __get_vm_area_node+0x155/0x2f0 [ 1316.343955][ T1003] ? __vmalloc_node_range_noprof+0x343/0x1540 [ 1316.343973][ T1003] ? __vmalloc_noprof+0xd2/0x120 [ 1316.343989][ T1003] ? bpf_prog_calc_tag+0x51/0x370 [ 1316.344011][ T1003] ? check_and_resolve_insns+0xbb/0x21d0 [ 1316.344033][ T1003] ? bpf_prog_load+0x14d6/0x1c20 [ 1316.344054][ T1003] ? __sys_bpf+0xd0d/0xd90 [ 1316.344073][ T1003] ? __x64_sys_bpf+0xba/0xd0 [ 1316.344090][ T1003] ? do_syscall_64+0x166/0x520 [ 1316.344116][ T1003] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1316.344140][ T1003] alloc_pages_mpol+0x21e/0x390 [ 1316.344171][ T1003] alloc_pages_noprof+0xb1/0x2b0 [ 1316.344199][ T1003] get_free_pages_noprof+0xf/0x80 [ 1316.344221][ T1003] __kasan_populate_vmalloc+0x38/0x1c0 [ 1316.344243][ T1003] ? do_raw_spin_unlock+0xf5/0x200 [ 1316.344282][ T1003] alloc_vmap_area+0xd1a/0x1420 [ 1316.344324][ T1003] ? __pfx_alloc_vmap_area+0x10/0x10 [ 1316.344350][ T1003] ? __kmalloc_cache_node_noprof+0x3d1/0x620 [ 1316.344373][ T1003] ? __kmalloc_cache_node_noprof+0x1f7/0x620 [ 1316.344394][ T1003] ? __get_vm_area_node+0x155/0x2f0 [ 1316.344426][ T1003] __get_vm_area_node+0x200/0x2f0 [ 1316.344461][ T1003] __vmalloc_node_range_noprof+0x343/0x1540 [ 1316.344482][ T1003] ? bpf_prog_calc_tag+0x51/0x370 [ 1316.344504][ T1003] ? __x64_sys_bpf+0xba/0xd0 [ 1316.344522][ T1003] ? do_syscall_64+0x166/0x520 [ 1316.344550][ T1003] ? __kasan_kmalloc+0x93/0xb0 [ 1316.344573][ T1003] ? bpf_prog_load+0x14d6/0x1c20 [ 1316.344594][ T1003] ? __sys_bpf+0xd0d/0xd90 [ 1316.344613][ T1003] ? __x64_sys_bpf+0xba/0xd0 [ 1316.344644][ T1003] ? __pfx___vmalloc_node_range_noprof+0x10/0x10 [ 1316.344675][ T1003] ? bpf_prog_calc_tag+0x51/0x370 [ 1316.344696][ T1003] __vmalloc_noprof+0xd2/0x120 [ 1316.344714][ T1003] ? bpf_prog_calc_tag+0x51/0x370 [ 1316.344740][ T1003] bpf_prog_calc_tag+0x51/0x370 [ 1316.344762][ T1003] ? __pfx_cmp_subprogs+0x10/0x10 [ 1316.344789][ T1003] check_and_resolve_insns+0xbb/0x21d0 [ 1316.344817][ T1003] ? add_subprog+0x2e2/0x3f0 [ 1316.344843][ T1003] ? __pfx_check_and_resolve_insns+0x10/0x10 [ 1316.344876][ T1003] bpf_check+0x18f7/0x2ef0 [ 1316.344916][ T1003] ? __pfx_bpf_check+0x10/0x10 [ 1316.344940][ T1003] ? bpf_obj_name_cpy+0x194/0x1e0 [ 1316.344971][ T1003] bpf_prog_load+0x14d6/0x1c20 [ 1316.345006][ T1003] ? __pfx_bpf_prog_load+0x10/0x10 [ 1316.345053][ T1003] __sys_bpf+0xd0d/0xd90 [ 1316.345083][ T1003] ? __pfx___sys_bpf+0x10/0x10 [ 1316.345116][ T1003] ? __fget_files+0x2a/0x420 [ 1316.345161][ T1003] ? ksys_write+0x242/0x270 [ 1316.345182][ T1003] ? __pfx_ksys_write+0x10/0x10 [ 1316.345206][ T1003] __x64_sys_bpf+0xba/0xd0 [ 1316.345229][ T1003] do_syscall_64+0x166/0x520 [ 1316.345258][ T1003] ? trace_irq_disable+0x3b/0x140 [ 1316.345278][ T1003] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1316.345297][ T1003] ? clear_bhb_loop+0x70/0xc0 [ 1316.345320][ T1003] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1316.345338][ T1003] RIP: 0033:0x7fbeb6b9e2d9 [ 1316.345356][ T1003] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 1316.345372][ T1003] RSP: 002b:00007fbeb7b16028 EFLAGS: 00000246 ORIG_RAX: 0000000000000141 [ 1316.345393][ T1003] RAX: ffffffffffffffda RBX: 00007fbeb6e25fa0 RCX: 00007fbeb6b9e2d9 [ 1316.345407][ T1003] RDX: 0000000000000094 RSI: 0000200000000540 RDI: 0000000000000005 [ 1316.345419][ T1003] RBP: 00007fbeb7b16090 R08: 0000000000000000 R09: 0000000000000000 [ 1316.345431][ T1003] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000002 [ 1316.345445][ T1003] R13: 00007fbeb6e26038 R14: 00007fbeb6e25fa0 R15: 00007fff16184f98 [ 1316.345476][ T1003] [ 1316.411651][T20451] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1317.653316][ T9785] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1317.802350][ T1022] netlink: 28 bytes leftover after parsing attributes in process `syz.1.7134'. [ 1317.802439][ T1022] netlink: 28 bytes leftover after parsing attributes in process `syz.1.7134'. [ 1318.785079][T28904] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1319.027089][ T1041] netlink: 12 bytes leftover after parsing attributes in process `syz.1.7138'. [ 1319.589274][ T1036] netlink: 'syz.1.7138': attribute type 1 has an invalid length. [ 1319.589332][ T1036] netlink: 224 bytes leftover after parsing attributes in process `syz.1.7138'. [ 1319.764443][ T1053] netlink: 8 bytes leftover after parsing attributes in process `syz.4.7140'. [ 1319.894406][T28904] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1319.917537][ T1069] ip_tables: iptables: counters copy to user failed while replacing table [ 1320.101048][ T1053] bond5: up delay (10) is not a multiple of miimon (7), value rounded to 7 ms [ 1320.196170][ T1053] bond5 (unregistering): Released all slaves [ 1320.624043][T29662] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1320.634736][T29662] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1320.661024][ T1071] syzkaller1: entered promiscuous mode [ 1320.661076][ T1071] syzkaller1: entered allmulticast mode [ 1321.063546][T20454] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1321.163165][ C1] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1322.172650][T28903] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1323.295483][T28903] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1323.462909][T28593] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1324.394937][T29662] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1325.553410][T28903] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1325.722553][ C0] ip6_tunnel: ip6tnl3 xmit: Local address not yet configured! [ 1326.381119][T20454] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1326.564475][ T1159] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 1326.564544][ T1159] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 1326.573551][ T1159] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 1326.573587][ T1159] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 1326.620270][ T1157] netlink: 40 bytes leftover after parsing attributes in process `syz.0.7154'. [ 1326.708858][T20454] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1326.843718][ T1165] netlink: 132 bytes leftover after parsing attributes in process `syz.1.7157'. [ 1326.931877][ C1] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1327.102024][ T1171] netlink: 188 bytes leftover after parsing attributes in process `syz.5.7158'. [ 1327.304112][ T1159] team0: Port device macvlan4 removed [ 1327.554709][ T1174] bridge0: port 2(bridge_slave_1) entered disabled state [ 1327.644832][ T5931] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1327.854860][ T9785] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1328.929842][ T5931] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1328.971233][T28917] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1329.710364][ T1205] netlink: 132 bytes leftover after parsing attributes in process `syz.4.7165'. [ 1329.813918][ T1208] netlink: 4 bytes leftover after parsing attributes in process `syz.2.7166'. [ 1329.855138][ T1205] FAULT_INJECTION: forcing a failure. [ 1329.855138][ T1205] name failslab, interval 1, probability 0, space 0, times 0 [ 1329.855189][ T1205] CPU: 1 UID: 0 PID: 1205 Comm: syz.4.7165 Not tainted syzkaller #0 PREEMPT(full) [ 1329.855211][ T1205] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/07/2026 [ 1329.855223][ T1205] Call Trace: [ 1329.855231][ T1205] [ 1329.855240][ T1205] dump_stack_lvl+0xe8/0x150 [ 1329.855273][ T1205] should_fail_ex+0x410/0x560 [ 1329.855303][ T1205] ? __alloc_skb+0x1db/0x7a0 [ 1329.855334][ T1205] should_failslab+0xa8/0x100 [ 1329.855360][ T1205] ? __alloc_skb+0x1db/0x7a0 [ 1329.855385][ T1205] kmem_cache_alloc_node_noprof+0xa1/0x610 [ 1329.855406][ T1205] ? __alloc_skb+0x18d/0x7a0 [ 1329.855433][ T1205] ? __alloc_skb+0x1db/0x7a0 [ 1329.855466][ T1205] __alloc_skb+0x1db/0x7a0 [ 1329.855498][ T1205] alloc_skb_with_frags+0xc6/0x760 [ 1329.855529][ T1205] sock_alloc_send_pskb+0xb66/0xc90 [ 1329.855573][ T1205] ? __pfx_sock_alloc_send_pskb+0x10/0x10 [ 1329.855599][ T1205] ? __lock_acquire+0x747/0x2de0 [ 1329.855625][ T1205] ? iov_iter_advance+0x8b/0x1c0 [ 1329.855654][ T1205] tun_get_user+0x99b/0x4450 [ 1329.855837][ T1205] ? aa_file_perm+0x18b/0x15f0 [ 1329.855877][ T1205] ? aa_file_perm+0x4ed/0x15f0 [ 1329.855903][ T1205] ? __pfx_tun_get_user+0x10/0x10 [ 1329.855930][ T1205] ? __lock_acquire+0x747/0x2de0 [ 1329.855952][ T1205] ? kstrtoull+0x137/0x1d0 [ 1329.855982][ T1205] ? ref_tracker_alloc+0x172/0x530 [ 1329.856007][ T1205] ? lock_acquire+0x115/0x350 [ 1329.856028][ T1205] ? __pfx_ref_tracker_alloc+0x10/0x10 [ 1329.856056][ T1205] ? lock_acquire+0x115/0x350 [ 1329.856076][ T1205] ? tun_get+0x1c/0x2f0 [ 1329.856104][ T1205] ? tun_get+0x1c/0x2f0 [ 1329.856126][ T1205] ? tun_get+0x1c/0x2f0 [ 1329.856154][ T1205] tun_chr_write_iter+0x113/0x200 [ 1329.856180][ T1205] vfs_write+0x612/0xba0 [ 1329.856208][ T1205] ? __pfx_vfs_write+0x10/0x10 [ 1329.856237][ T1205] ? __fget_files+0x2a/0x420 [ 1329.856273][ T1205] ksys_write+0x150/0x270 [ 1329.856295][ T1205] ? __pfx_ksys_write+0x10/0x10 [ 1329.856325][ T1205] do_syscall_64+0x166/0x520 [ 1329.856351][ T1205] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1329.856371][ T1205] ? clear_bhb_loop+0x70/0xc0 [ 1329.856394][ T1205] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1329.856413][ T1205] RIP: 0033:0x7fd719b9e2d9 [ 1329.856431][ T1205] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 1329.856447][ T1205] RSP: 002b:00007fd717df6028 EFLAGS: 00000246 ORIG_RAX: 0000000000000001 [ 1329.856467][ T1205] RAX: ffffffffffffffda RBX: 00007fd719e25fa0 RCX: 00007fd719b9e2d9 [ 1329.856481][ T1205] RDX: 000000000000fdef RSI: 0000200000000640 RDI: 0000000000000005 [ 1329.856494][ T1205] RBP: 00007fd717df6090 R08: 0000000000000000 R09: 0000000000000000 [ 1329.856506][ T1205] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 1329.856518][ T1205] R13: 00007fd719e26038 R14: 00007fd719e25fa0 R15: 00007ffee4988218 [ 1329.856549][ T1205] [ 1330.344934][T28915] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1331.376839][ T1220] sctp: [Deprecated]: syz.1.7169 (pid 1220) Use of struct sctp_assoc_value in delayed_ack socket option. [ 1331.376839][ T1220] Use struct sctp_sack_info instead [ 1331.384663][ T1220] sctp: [Deprecated]: syz.1.7169 (pid 1220) Use of struct sctp_assoc_value in delayed_ack socket option. [ 1331.384663][ T1220] Use struct sctp_sack_info instead [ 1331.516852][T20451] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1331.560226][ T9785] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1331.878919][ T1226] FAULT_INJECTION: forcing a failure. [ 1331.878919][ T1226] name failslab, interval 1, probability 0, space 0, times 0 [ 1331.878969][ T1226] CPU: 1 UID: 0 PID: 1226 Comm: syz.5.7170 Not tainted syzkaller #0 PREEMPT(full) [ 1331.878990][ T1226] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/07/2026 [ 1331.879001][ T1226] Call Trace: [ 1331.879009][ T1226] [ 1331.879018][ T1226] dump_stack_lvl+0xe8/0x150 [ 1331.879050][ T1226] should_fail_ex+0x410/0x560 [ 1331.879081][ T1226] should_failslab+0xa8/0x100 [ 1331.879105][ T1226] ? skb_clone+0x212/0x3a0 [ 1331.879126][ T1226] kmem_cache_alloc_noprof+0xa1/0x600 [ 1331.879148][ T1226] ? skb_clone+0x212/0x3a0 [ 1331.879175][ T1226] skb_clone+0x212/0x3a0 [ 1331.879198][ T1226] __netlink_deliver_tap+0x355/0x6e0 [ 1331.879235][ T1226] ? netlink_deliver_tap+0x2e/0x1b0 [ 1331.879261][ T1226] netlink_deliver_tap+0x19c/0x1b0 [ 1331.879286][ T1226] netlink_unicast+0x781/0x940 [ 1331.879321][ T1226] netlink_sendmsg+0x813/0xb40 [ 1331.879354][ T1226] ? __pfx_netlink_sendmsg+0x10/0x10 [ 1331.879388][ T1226] ? apparmor_socket_sendmsg+0x98/0x360 [ 1331.879421][ T1226] ? __pfx_netlink_sendmsg+0x10/0x10 [ 1331.879444][ T1226] sock_sendmsg_nosec+0x14e/0x190 [ 1331.879472][ T1226] ____sys_sendmsg+0x54e/0x850 [ 1331.879498][ T1226] ? __pfx_____sys_sendmsg+0x10/0x10 [ 1331.879527][ T1226] ? import_iovec+0x73/0xa0 [ 1331.879558][ T1226] ___sys_sendmsg+0x2a5/0x360 [ 1331.879576][ T1226] ? __lock_acquire+0x747/0x2de0 [ 1331.879601][ T1226] ? __pfx____sys_sendmsg+0x10/0x10 [ 1331.879642][ T1226] ? trace_irq_disable+0x3b/0x140 [ 1331.879677][ T1226] ? fdget+0x178/0x1e0 [ 1331.879718][ T1226] ? __sanitizer_cov_trace_pc+0x18/0x80 [ 1331.879743][ T1226] __x64_sys_sendmsg+0x1b1/0x290 [ 1331.879766][ T1226] ? __pfx___x64_sys_sendmsg+0x10/0x10 [ 1331.879803][ T1226] do_syscall_64+0x166/0x520 [ 1331.879828][ T1226] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1331.879847][ T1226] ? clear_bhb_loop+0x70/0xc0 [ 1331.879869][ T1226] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1331.879887][ T1226] RIP: 0033:0x7fbeb6b9e2d9 [ 1331.879904][ T1226] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 1331.879920][ T1226] RSP: 002b:00007fbeb7b16028 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 1331.879941][ T1226] RAX: ffffffffffffffda RBX: 00007fbeb6e25fa0 RCX: 00007fbeb6b9e2d9 [ 1331.879955][ T1226] RDX: 0000000000040000 RSI: 0000200000000500 RDI: 0000000000000004 [ 1331.879968][ T1226] RBP: 00007fbeb7b16090 R08: 0000000000000000 R09: 0000000000000000 [ 1331.879980][ T1226] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 1331.879992][ T1226] R13: 00007fbeb6e26038 R14: 00007fbeb6e25fa0 R15: 00007fff16184f98 [ 1331.880023][ T1226] [ 1331.921969][ T1228] FAULT_INJECTION: forcing a failure. [ 1331.921969][ T1228] name failslab, interval 1, probability 0, space 0, times 0 [ 1331.921999][ T1228] CPU: 0 UID: 0 PID: 1228 Comm: syz.0.7171 Not tainted syzkaller #0 PREEMPT(full) [ 1331.922020][ T1228] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/07/2026 [ 1331.922031][ T1228] Call Trace: [ 1331.922039][ T1228] [ 1331.922048][ T1228] dump_stack_lvl+0xe8/0x150 [ 1331.922079][ T1228] should_fail_ex+0x410/0x560 [ 1331.922109][ T1228] should_failslab+0xa8/0x100 [ 1331.922136][ T1228] __kvmalloc_node_noprof+0x176/0x820 [ 1331.922157][ T1228] ? kasan_save_track+0x3e/0x80 [ 1331.922179][ T1228] ? __kvmalloc_node_noprof+0x50f/0x820 [ 1331.922200][ T1228] ? bpf_stack_liveness_init+0x29/0x90 [ 1331.922221][ T1228] ? bpf_check+0x263f/0x2ef0 [ 1331.922241][ T1228] ? bpf_compute_const_regs+0x18f/0x3450 [ 1331.922264][ T1228] ? bpf_compute_const_regs+0x18f/0x3450 [ 1331.922293][ T1228] bpf_compute_const_regs+0x18f/0x3450 [ 1331.922341][ T1228] ? __pfx_bpf_compute_const_regs+0x10/0x10 [ 1331.922362][ T1228] ? check_attach_btf_id+0x325/0x1af0 [ 1331.922392][ T1228] ? bpf_stack_liveness_init+0x29/0x90 [ 1331.922411][ T1228] ? trace_kmalloc+0x2a/0xf0 [ 1331.922429][ T1228] ? __pfx_check_attach_btf_id+0x10/0x10 [ 1331.922450][ T1228] ? bpf_stack_liveness_init+0x29/0x90 [ 1331.922469][ T1228] ? __kvmalloc_node_noprof+0x52f/0x820 [ 1331.922501][ T1228] ? __asan_memset+0x22/0x50 [ 1331.922523][ T1228] bpf_check+0x26ac/0x2ef0 [ 1331.922560][ T1228] ? __pfx_bpf_check+0x10/0x10 [ 1331.922584][ T1228] ? bpf_obj_name_cpy+0x194/0x1e0 [ 1331.922614][ T1228] bpf_prog_load+0x14d6/0x1c20 [ 1331.922648][ T1228] ? __pfx_bpf_prog_load+0x10/0x10 [ 1331.922692][ T1228] __sys_bpf+0xd0d/0xd90 [ 1331.922721][ T1228] ? __pfx___sys_bpf+0x10/0x10 [ 1331.922752][ T1228] ? __fget_files+0x2a/0x420 [ 1331.922794][ T1228] ? ksys_write+0x242/0x270 [ 1331.922814][ T1228] ? __pfx_ksys_write+0x10/0x10 [ 1331.922838][ T1228] __x64_sys_bpf+0xba/0xd0 [ 1331.922860][ T1228] do_syscall_64+0x166/0x520 [ 1331.922884][ T1228] ? trace_irq_disable+0x3b/0x140 [ 1331.922910][ T1228] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1331.922929][ T1228] ? clear_bhb_loop+0x70/0xc0 [ 1331.922951][ T1228] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1331.922970][ T1228] RIP: 0033:0x7fb41d19e2d9 [ 1331.922987][ T1228] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 1331.923002][ T1228] RSP: 002b:00007fb41e030028 EFLAGS: 00000246 ORIG_RAX: 0000000000000141 [ 1331.923022][ T1228] RAX: ffffffffffffffda RBX: 00007fb41d425fa0 RCX: 00007fb41d19e2d9 [ 1331.923036][ T1228] RDX: 0000000000000094 RSI: 0000200000000540 RDI: 0000000000000005 [ 1331.923047][ T1228] RBP: 00007fb41e030090 R08: 0000000000000000 R09: 0000000000000000 [ 1331.923058][ T1228] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000002 [ 1331.923068][ T1228] R13: 00007fb41d426038 R14: 00007fb41d425fa0 R15: 00007ffec1181108 [ 1331.923099][ T1228] [ 1331.967941][ C1] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1332.639269][ T1236] xt_hashlimit: size too large, truncated to 1048576 [ 1332.747056][T20451] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1332.774698][T28593] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1332.798622][ T1231] netlink: 'syz.2.7172': attribute type 16 has an invalid length. [ 1332.798641][ T1231] netlink: 'syz.2.7172': attribute type 17 has an invalid length. [ 1333.114774][ T1231] 8021q: adding VLAN 0 to HW filter on device bond0 [ 1333.352740][ T1259] sctp: [Deprecated]: syz.0.7174 (pid 1259) Use of int in max_burst socket option. [ 1333.352740][ T1259] Use struct sctp_assoc_value instead [ 1333.402950][T20451] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1333.464153][ T1231] hsr0: left promiscuous mode [ 1333.909594][T28917] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1334.230400][ T1231] 8021q: adding VLAN 0 to HW filter on device bond4 [ 1334.248482][ T1231] ip6tnl4: left allmulticast mode [ 1334.263169][ T1231] vti0: left promiscuous mode [ 1334.263226][ T1231] vti0: left allmulticast mode [ 1334.277650][T28580] ip6_tunnel: ip6tnl4 xmit: Local address not yet configured! [ 1334.479335][T28904] bond0: (slave netdevsim0): link status definitely down, disabling slave [ 1334.699456][T28904] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1334.872278][ T1264] netlink: 20 bytes leftover after parsing attributes in process `syz.2.7176'. [ 1334.954843][T28610] ip6_tunnel: ip6tnl4 xmit: Local address not yet configured! [ 1335.009812][T28904] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1335.645012][ T1270] netlink: 12 bytes leftover after parsing attributes in process `syz.4.7178'. [ 1336.113799][ T9785] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1336.522819][T29662] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1337.082086][ C1] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1337.229044][ T9785] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1337.296230][ T1293] FAULT_INJECTION: forcing a failure. [ 1337.296230][ T1293] name failslab, interval 1, probability 0, space 0, times 0 [ 1337.296297][ T1293] CPU: 1 UID: 0 PID: 1293 Comm: syz.2.7184 Not tainted syzkaller #0 PREEMPT(full) [ 1337.296321][ T1293] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/07/2026 [ 1337.296333][ T1293] Call Trace: [ 1337.296341][ T1293] [ 1337.296350][ T1293] dump_stack_lvl+0xe8/0x150 [ 1337.296383][ T1293] should_fail_ex+0x410/0x560 [ 1337.296414][ T1293] should_failslab+0xa8/0x100 [ 1337.296442][ T1293] __kvmalloc_node_noprof+0x176/0x820 [ 1337.296465][ T1293] ? kasan_save_track+0x3e/0x80 [ 1337.296487][ T1293] ? __kvmalloc_node_noprof+0x50f/0x820 [ 1337.296508][ T1293] ? bpf_stack_liveness_init+0x29/0x90 [ 1337.296530][ T1293] ? bpf_check+0x263f/0x2ef0 [ 1337.296551][ T1293] ? bpf_compute_const_regs+0x18f/0x3450 [ 1337.296575][ T1293] ? bpf_compute_const_regs+0x18f/0x3450 [ 1337.296606][ T1293] bpf_compute_const_regs+0x18f/0x3450 [ 1337.296651][ T1293] ? __pfx_bpf_compute_const_regs+0x10/0x10 [ 1337.296674][ T1293] ? check_attach_btf_id+0x325/0x1af0 [ 1337.296706][ T1293] ? bpf_stack_liveness_init+0x29/0x90 [ 1337.296727][ T1293] ? trace_kmalloc+0x2a/0xf0 [ 1337.296745][ T1293] ? __pfx_check_attach_btf_id+0x10/0x10 [ 1337.296768][ T1293] ? bpf_stack_liveness_init+0x29/0x90 [ 1337.296789][ T1293] ? __kvmalloc_node_noprof+0x52f/0x820 [ 1337.296828][ T1293] ? __asan_memset+0x22/0x50 [ 1337.296852][ T1293] bpf_check+0x26ac/0x2ef0 [ 1337.296890][ T1293] ? __pfx_bpf_check+0x10/0x10 [ 1337.296915][ T1293] ? bpf_obj_name_cpy+0x194/0x1e0 [ 1337.296946][ T1293] bpf_prog_load+0x14d6/0x1c20 [ 1337.296980][ T1293] ? __pfx_bpf_prog_load+0x10/0x10 [ 1337.297028][ T1293] __sys_bpf+0xd0d/0xd90 [ 1337.297058][ T1293] ? __pfx___sys_bpf+0x10/0x10 [ 1337.297091][ T1293] ? __fget_files+0x2a/0x420 [ 1337.297135][ T1293] ? ksys_write+0x242/0x270 [ 1337.297157][ T1293] ? __pfx_ksys_write+0x10/0x10 [ 1337.297181][ T1293] __x64_sys_bpf+0xba/0xd0 [ 1337.297204][ T1293] do_syscall_64+0x166/0x520 [ 1337.297229][ T1293] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1337.297248][ T1293] ? clear_bhb_loop+0x70/0xc0 [ 1337.297272][ T1293] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1337.297291][ T1293] RIP: 0033:0x7efca1d9e2d9 [ 1337.297309][ T1293] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 1337.297325][ T1293] RSP: 002b:00007efca2bf7028 EFLAGS: 00000246 ORIG_RAX: 0000000000000141 [ 1337.297347][ T1293] RAX: ffffffffffffffda RBX: 00007efca2025fa0 RCX: 00007efca1d9e2d9 [ 1337.297361][ T1293] RDX: 0000000000000094 RSI: 0000200000000540 RDI: 0000000000000005 [ 1337.297373][ T1293] RBP: 00007efca2bf7090 R08: 0000000000000000 R09: 0000000000000000 [ 1337.297385][ T1293] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000002 [ 1337.297397][ T1293] R13: 00007efca2026038 R14: 00007efca2025fa0 R15: 00007ffc1de38b98 [ 1337.297428][ T1293] [ 1337.988809][ T1295] FAULT_INJECTION: forcing a failure. [ 1337.988809][ T1295] name failslab, interval 1, probability 0, space 0, times 0 [ 1337.988872][ T1295] CPU: 1 UID: 0 PID: 1295 Comm: syz.1.7185 Not tainted syzkaller #0 PREEMPT(full) [ 1337.988896][ T1295] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/07/2026 [ 1337.988909][ T1295] Call Trace: [ 1337.988917][ T1295] [ 1337.988926][ T1295] dump_stack_lvl+0xe8/0x150 [ 1337.988959][ T1295] should_fail_ex+0x410/0x560 [ 1337.988990][ T1295] should_failslab+0xa8/0x100 [ 1337.989018][ T1295] __kmalloc_cache_noprof+0xa3/0x600 [ 1337.989039][ T1295] ? __pfx_ref_tracker_alloc+0x10/0x10 [ 1337.989066][ T1295] ? qdisc_alloc+0x6cf/0x9d0 [ 1337.989168][ T1295] ? tcf_block_get_ext+0x2b4/0x17d0 [ 1337.989218][ T1295] ? tcf_block_get_ext+0x2b4/0x17d0 [ 1337.989240][ T1295] ? netlink_sendmsg+0x813/0xb40 [ 1337.989270][ T1295] tcf_block_get_ext+0x2b4/0x17d0 [ 1337.989309][ T1295] tcf_block_get+0x67/0xa0 [ 1337.989329][ T1295] ? __pfx_tcf_chain_head_change_dflt+0x10/0x10 [ 1337.989356][ T1295] prio_init+0x36/0x80 [ 1337.989402][ T1295] ? __pfx_prio_init+0x10/0x10 [ 1337.989423][ T1295] qdisc_create+0xc23/0x1450 [ 1337.989451][ T1295] tc_modify_qdisc+0x17af/0x2390 [ 1337.989492][ T1295] ? __pfx_tc_modify_qdisc+0x10/0x10 [ 1337.989521][ T1295] ? __local_bh_enable_ip+0xd6/0x140 [ 1337.989575][ T1295] ? __pfx_tc_modify_qdisc+0x10/0x10 [ 1337.989602][ T1295] rtnetlink_rcv_msg+0x7b9/0xc00 [ 1337.989635][ T1295] ? rtnetlink_rcv_msg+0x1c9/0xc00 [ 1337.989663][ T1295] ? __pfx_rtnetlink_rcv_msg+0x10/0x10 [ 1337.989695][ T1295] ? __copy_skb_header+0xa3/0x4a0 [ 1337.989727][ T1295] netlink_rcv_skb+0x226/0x4a0 [ 1337.989752][ T1295] ? __pfx_rtnetlink_rcv_msg+0x10/0x10 [ 1337.989783][ T1295] ? __pfx_netlink_rcv_skb+0x10/0x10 [ 1337.989820][ T1295] ? netlink_deliver_tap+0x2e/0x1b0 [ 1337.989844][ T1295] ? netlink_deliver_tap+0x2e/0x1b0 [ 1337.989874][ T1295] netlink_unicast+0x7bd/0x940 [ 1337.989907][ T1295] netlink_sendmsg+0x813/0xb40 [ 1337.989941][ T1295] ? __pfx_netlink_sendmsg+0x10/0x10 [ 1337.989974][ T1295] ? apparmor_socket_sendmsg+0x98/0x360 [ 1337.990001][ T1295] ? __pfx_netlink_sendmsg+0x10/0x10 [ 1337.990024][ T1295] sock_sendmsg_nosec+0x14e/0x190 [ 1337.990052][ T1295] ____sys_sendmsg+0x54e/0x850 [ 1337.990078][ T1295] ? __pfx_____sys_sendmsg+0x10/0x10 [ 1337.990107][ T1295] ? import_iovec+0x73/0xa0 [ 1337.990137][ T1295] ___sys_sendmsg+0x2a5/0x360 [ 1337.990156][ T1295] ? __lock_acquire+0x747/0x2de0 [ 1337.990181][ T1295] ? __pfx____sys_sendmsg+0x10/0x10 [ 1337.990236][ T1295] ? __fget_files+0x2a/0x420 [ 1337.990263][ T1295] ? __fget_files+0x3a2/0x420 [ 1337.990306][ T1295] __x64_sys_sendmsg+0x1b1/0x290 [ 1337.990330][ T1295] ? __pfx___x64_sys_sendmsg+0x10/0x10 [ 1337.990371][ T1295] do_syscall_64+0x166/0x520 [ 1337.990397][ T1295] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1337.990417][ T1295] ? clear_bhb_loop+0x70/0xc0 [ 1337.990440][ T1295] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1337.990459][ T1295] RIP: 0033:0x7fb61119e2d9 [ 1337.990477][ T1295] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 1337.990493][ T1295] RSP: 002b:00007fb6120bb028 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 1337.990513][ T1295] RAX: ffffffffffffffda RBX: 00007fb611425fa0 RCX: 00007fb61119e2d9 [ 1337.990527][ T1295] RDX: 0000000000040000 RSI: 0000200000000500 RDI: 0000000000000004 [ 1337.990539][ T1295] RBP: 00007fb6120bb090 R08: 0000000000000000 R09: 0000000000000000 [ 1337.990552][ T1295] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 1337.990563][ T1295] R13: 00007fb611426038 R14: 00007fb611425fa0 R15: 00007ffcf6600ce8 [ 1337.990594][ T1295] [ 1338.679213][ T1300] netlink: 'syz.2.7186': attribute type 8 has an invalid length. [ 1338.915472][T29662] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1339.164710][ T9785] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1339.722736][T28904] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1340.261212][T28917] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1340.313244][ T1331] bond9: entered allmulticast mode [ 1340.314189][ T1323] netlink: 8 bytes leftover after parsing attributes in process `syz.5.7188'. [ 1340.344439][ T1332] bond9: (slave wireguard1): The slave device specified does not support setting the MAC address [ 1340.346928][ T1332] bond9: (slave wireguard1): Error -95 calling set_mac_address [ 1340.955742][ T1358] netlink: 8 bytes leftover after parsing attributes in process `syz.4.7194'. [ 1340.996241][ T1358] ip6gre1: entered promiscuous mode [ 1340.996419][ T1358] ip6gre1: entered allmulticast mode [ 1341.082251][ C0] ip6_tunnel: ip6tnl4 xmit: Local address not yet configured! [ 1341.329555][ T1377] netlink: 4 bytes leftover after parsing attributes in process `syz.4.7197'. [ 1341.329582][ T1377] netlink: 4 bytes leftover after parsing attributes in process `syz.4.7197'. [ 1341.329643][ T1377] netlink: 4 bytes leftover after parsing attributes in process `syz.4.7197'. [ 1341.372299][T29880] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1341.723000][T28917] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1342.008253][ T1394] netlink: 72 bytes leftover after parsing attributes in process `syz.5.7196'. [ 1342.139123][ T1390] digital: digital_start_poll: Unknown protocol [ 1342.530255][ T9785] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1342.588550][T28593] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1342.872912][ T1407] netlink: 12 bytes leftover after parsing attributes in process `syz.4.7202'. [ 1343.002229][ C1] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1343.338270][ T1423] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 1343.398073][ T1427] FAULT_INJECTION: forcing a failure. [ 1343.398073][ T1427] name failslab, interval 1, probability 0, space 0, times 0 [ 1343.398125][ T1427] CPU: 1 UID: 0 PID: 1427 Comm: syz.2.7206 Not tainted syzkaller #0 PREEMPT(full) [ 1343.398147][ T1427] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/07/2026 [ 1343.398158][ T1427] Call Trace: [ 1343.398166][ T1427] [ 1343.398175][ T1427] dump_stack_lvl+0xe8/0x150 [ 1343.398208][ T1427] should_fail_ex+0x410/0x560 [ 1343.398237][ T1427] ? __alloc_skb+0x1db/0x7a0 [ 1343.398265][ T1427] should_failslab+0xa8/0x100 [ 1343.398292][ T1427] ? __alloc_skb+0x1db/0x7a0 [ 1343.398316][ T1427] kmem_cache_alloc_node_noprof+0xa1/0x610 [ 1343.398337][ T1427] ? __alloc_skb+0x18d/0x7a0 [ 1343.398363][ T1427] ? __alloc_skb+0x1db/0x7a0 [ 1343.398396][ T1427] __alloc_skb+0x1db/0x7a0 [ 1343.398427][ T1427] pfkey_sendmsg+0xddc/0x11d0 [ 1343.398466][ T1427] ? __pfx_pfkey_sendmsg+0x10/0x10 [ 1343.398514][ T1427] ? aa_sock_msg_perm+0x144/0x210 [ 1343.398546][ T1427] ? apparmor_socket_sendmsg+0x18b/0x360 [ 1343.398573][ T1427] ? __pfx_pfkey_sendmsg+0x10/0x10 [ 1343.398597][ T1427] sock_sendmsg_nosec+0x14e/0x190 [ 1343.398625][ T1427] ____sys_sendmsg+0x54e/0x850 [ 1343.398650][ T1427] ? __pfx_____sys_sendmsg+0x10/0x10 [ 1343.398679][ T1427] ? import_iovec+0x73/0xa0 [ 1343.398709][ T1427] ___sys_sendmsg+0x2a5/0x360 [ 1343.398727][ T1427] ? __lock_acquire+0x747/0x2de0 [ 1343.398751][ T1427] ? __pfx____sys_sendmsg+0x10/0x10 [ 1343.398776][ T1427] ? lockdep_hardirqs_on+0x7b/0x110 [ 1343.398801][ T1427] ? irqentry_exit+0x218/0x920 [ 1343.398851][ T1427] ? __fget_files+0x2a/0x420 [ 1343.398877][ T1427] ? __fget_files+0x3a2/0x420 [ 1343.398928][ T1427] __x64_sys_sendmsg+0x1b1/0x290 [ 1343.398958][ T1427] ? __pfx___x64_sys_sendmsg+0x10/0x10 [ 1343.398999][ T1427] do_syscall_64+0x166/0x520 [ 1343.399024][ T1427] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1343.399044][ T1427] ? clear_bhb_loop+0x70/0xc0 [ 1343.399067][ T1427] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1343.399087][ T1427] RIP: 0033:0x7efca1d9e2d9 [ 1343.399104][ T1427] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 1343.399121][ T1427] RSP: 002b:00007efca2bf7028 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 1343.399141][ T1427] RAX: ffffffffffffffda RBX: 00007efca2025fa0 RCX: 00007efca1d9e2d9 [ 1343.399156][ T1427] RDX: 0000000024000c40 RSI: 0000200000000180 RDI: 0000000000000003 [ 1343.399169][ T1427] RBP: 00007efca2bf7090 R08: 0000000000000000 R09: 0000000000000000 [ 1343.399181][ T1427] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 1343.399192][ T1427] R13: 00007efca2026038 R14: 00007efca2025fa0 R15: 00007ffc1de38b98 [ 1343.399223][ T1427] [ 1343.675793][ T9785] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1343.730745][ T1426] netlink: 108 bytes leftover after parsing attributes in process `syz.5.7207'. [ 1343.738131][ T1426] The dccp option matching is deprecated and scheduled to be removed in 2027. [ 1343.738131][ T1426] Please contact the netfilter-devel mailing list or update your nftables rules. [ 1344.783488][T29662] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1344.849284][T28917] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1344.926167][T29662] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1346.004719][T29880] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1346.549497][ T1473] netlink: 112 bytes leftover after parsing attributes in process `syz.4.7217'. [ 1347.142234][ T5931] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1347.324559][ T1474] llcp: nfc_llcp_send_ui_frame: Could not allocate PDU (error=-512) [ 1347.324865][ T1474] llcp: nfc_llcp_send_ui_frame: Could not allocate PDU (error=-512) [ 1347.482930][T28904] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1348.242550][T28903] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1348.686271][ C1] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1349.193415][ T1481] FAULT_INJECTION: forcing a failure. [ 1349.193415][ T1481] name failslab, interval 1, probability 0, space 0, times 0 [ 1349.193473][ T1481] CPU: 1 UID: 0 PID: 1481 Comm: syz.5.7218 Not tainted syzkaller #0 PREEMPT(full) [ 1349.193498][ T1481] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/07/2026 [ 1349.193509][ T1481] Call Trace: [ 1349.193517][ T1481] [ 1349.193526][ T1481] dump_stack_lvl+0xe8/0x150 [ 1349.193559][ T1481] should_fail_ex+0x410/0x560 [ 1349.193590][ T1481] should_failslab+0xa8/0x100 [ 1349.193616][ T1481] ? skb_clone+0x212/0x3a0 [ 1349.193637][ T1481] kmem_cache_alloc_noprof+0xa1/0x600 [ 1349.193658][ T1481] ? skb_clone+0x212/0x3a0 [ 1349.193684][ T1481] skb_clone+0x212/0x3a0 [ 1349.193703][ T1481] ? pfkey_broadcast_one+0x7d/0x360 [ 1349.193730][ T1481] pfkey_broadcast_one+0x9b/0x360 [ 1349.193752][ T1481] ? pfkey_broadcast+0x39b/0x3e0 [ 1349.193776][ T1481] pfkey_broadcast+0x3a8/0x3e0 [ 1349.193800][ T1481] ? pfkey_broadcast+0x48/0x3e0 [ 1349.193826][ T1481] pfkey_sendmsg+0xf02/0x11d0 [ 1349.193863][ T1481] ? __pfx_pfkey_sendmsg+0x10/0x10 [ 1349.193910][ T1481] ? aa_sock_msg_perm+0x144/0x210 [ 1349.193940][ T1481] ? apparmor_socket_sendmsg+0x18b/0x360 [ 1349.193963][ T1481] ? __pfx_pfkey_sendmsg+0x10/0x10 [ 1349.193985][ T1481] sock_sendmsg_nosec+0x14e/0x190 [ 1349.194019][ T1481] ____sys_sendmsg+0x54e/0x850 [ 1349.194042][ T1481] ? __pfx_____sys_sendmsg+0x10/0x10 [ 1349.194069][ T1481] ? import_iovec+0x73/0xa0 [ 1349.194098][ T1481] ___sys_sendmsg+0x2a5/0x360 [ 1349.194116][ T1481] ? __lock_acquire+0x747/0x2de0 [ 1349.194140][ T1481] ? __pfx____sys_sendmsg+0x10/0x10 [ 1349.194193][ T1481] ? __fget_files+0x2a/0x420 [ 1349.194220][ T1481] ? __fget_files+0x3a2/0x420 [ 1349.194258][ T1481] __x64_sys_sendmsg+0x1b1/0x290 [ 1349.194278][ T1481] ? net_tx_action+0x5bb/0xc30 [ 1349.194307][ T1481] ? __pfx___x64_sys_sendmsg+0x10/0x10 [ 1349.194335][ T1481] ? handle_softirqs+0x720/0x860 [ 1349.194370][ T1481] do_syscall_64+0x166/0x520 [ 1349.194395][ T1481] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1349.194415][ T1481] ? clear_bhb_loop+0x70/0xc0 [ 1349.194439][ T1481] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1349.194458][ T1481] RIP: 0033:0x7fbeb6b9e2d9 [ 1349.194476][ T1481] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 1349.194491][ T1481] RSP: 002b:00007fbeb7b16028 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 1349.194512][ T1481] RAX: ffffffffffffffda RBX: 00007fbeb6e25fa0 RCX: 00007fbeb6b9e2d9 [ 1349.194525][ T1481] RDX: 0000000024000c40 RSI: 0000200000000180 RDI: 0000000000000003 [ 1349.194538][ T1481] RBP: 00007fbeb7b16090 R08: 0000000000000000 R09: 0000000000000000 [ 1349.194551][ T1481] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 1349.194562][ T1481] R13: 00007fbeb6e26038 R14: 00007fbeb6e25fa0 R15: 00007fff16184f98 [ 1349.194594][ T1481] [ 1349.317053][ T1482] netlink: 4 bytes leftover after parsing attributes in process `syz.1.7219'. [ 1349.376809][T28904] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1349.458083][ T1479] netlink: 976 bytes leftover after parsing attributes in process `syz.1.7219'. [ 1349.458121][ T1479] A link change request failed with some changes committed already. Interface erspan0 may have been left with an inconsistent configuration, please check. [ 1349.830844][ T1498] netlink: 'syz.4.7220': attribute type 1 has an invalid length. [ 1350.045535][ T5931] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1350.265314][ T1510] netlink: 8 bytes leftover after parsing attributes in process `syz.2.7223'. [ 1350.265337][ T1510] netlink: 4 bytes leftover after parsing attributes in process `syz.2.7223'. [ 1350.317682][ T1511] netlink: 'syz.2.7223': attribute type 4 has an invalid length. [ 1350.317739][ T1511] netlink: 152 bytes leftover after parsing attributes in process `syz.2.7223'. [ 1350.467241][ T1486] netlink: 976 bytes leftover after parsing attributes in process `syz.1.7219'. [ 1350.467299][ T1486] A link change request failed with some changes committed already. Interface erspan0 may have been left with an inconsistent configuration, please check. [ 1350.499584][ T5931] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1350.687244][ T5931] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1350.950027][ T1507] 8021q: adding VLAN 0 to HW filter on device bond5 [ 1351.072571][ T1510] 8021q: adding VLAN 0 to HW filter on device bond0 [ 1351.100501][ T1510] bond5: (slave bond0): making interface the new active one [ 1351.112840][ T1510] bond5: (slave bond0): Enslaving as an active interface with an up link [ 1351.277172][ T1511] .`: renamed from bond0 (while UP) [ 1351.940856][ T1534] netlink: 'syz.2.7227': attribute type 21 has an invalid length. [ 1351.940899][ T1534] netlink: 128 bytes leftover after parsing attributes in process `syz.2.7227'. [ 1351.941092][ T1534] netlink: 'syz.2.7227': attribute type 4 has an invalid length. [ 1351.941123][ T1534] netlink: 'syz.2.7227': attribute type 3 has an invalid length. [ 1351.941153][ T1534] netlink: 3 bytes leftover after parsing attributes in process `syz.2.7227'. [ 1351.946958][ T1535] netlink: 'syz.2.7227': attribute type 21 has an invalid length. [ 1351.946996][ T1535] netlink: 128 bytes leftover after parsing attributes in process `syz.2.7227'. [ 1351.947093][ T1535] netlink: 'syz.2.7227': attribute type 4 has an invalid length. [ 1351.947123][ T1535] netlink: 'syz.2.7227': attribute type 3 has an invalid length. [ 1351.947152][ T1535] netlink: 3 bytes leftover after parsing attributes in process `syz.2.7227'. [ 1352.175363][ T1534] netlink: 16 bytes leftover after parsing attributes in process `syz.2.7227'. [ 1352.304097][ T1534] veth1_to_team: entered promiscuous mode [ 1352.312458][T28593] net_ratelimit: 1 callbacks suppressed [ 1352.312474][T28593] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1352.677543][T28904] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1352.735635][T28904] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1352.831811][ T1534] veth1_to_team: left promiscuous mode [ 1353.871119][T20451] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1354.442084][ C1] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1355.148577][ T5931] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1355.846528][T28904] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1356.102824][ T1566] sch_tbf: burst 4363 is lower than device ip6gre0 mtu (32769) ! [ 1356.433783][ T9785] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1356.451615][ T9785] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1357.266189][ T1601] nbd5: detected capacity change from 0 to 63 [ 1357.300421][ T5629] block nbd5: Receive control failed (result -32) [ 1357.352102][ T2005] block nbd5: Dead connection, failed to find a fallback [ 1357.352147][ T2005] block nbd5: shutting down sockets [ 1357.352296][ T2005] I/O error, dev nbd5, sector 0 op 0x0:(READ) flags 0x800000 phys_seg 1 prio class 2 [ 1357.352470][ T2005] Buffer I/O error on dev nbd5, logical block 0, async page read [ 1357.356593][ T2005] I/O error, dev nbd5, sector 2 op 0x0:(READ) flags 0x800000 phys_seg 1 prio class 2 [ 1357.356656][ T2005] Buffer I/O error on dev nbd5, logical block 1, async page read [ 1357.356859][ T2005] I/O error, dev nbd5, sector 4 op 0x0:(READ) flags 0x800000 phys_seg 1 prio class 2 [ 1357.356918][ T2005] Buffer I/O error on dev nbd5, logical block 2, async page read [ 1357.357125][ T2005] I/O error, dev nbd5, sector 6 op 0x0:(READ) flags 0x800000 phys_seg 1 prio class 2 [ 1357.357179][ T2005] Buffer I/O error on dev nbd5, logical block 3, async page read [ 1357.357545][ T2005] I/O error, dev nbd5, sector 0 op 0x0:(READ) flags 0x800000 phys_seg 1 prio class 2 [ 1357.357605][ T2005] Buffer I/O error on dev nbd5, logical block 0, async page read [ 1357.363643][ T2005] I/O error, dev nbd5, sector 2 op 0x0:(READ) flags 0x800000 phys_seg 1 prio class 2 [ 1357.363702][ T2005] Buffer I/O error on dev nbd5, logical block 1, async page read [ 1357.363878][ T2005] I/O error, dev nbd5, sector 4 op 0x0:(READ) flags 0x800000 phys_seg 1 prio class 2 [ 1357.363930][ T2005] Buffer I/O error on dev nbd5, logical block 2, async page read [ 1357.364090][ T2005] I/O error, dev nbd5, sector 6 op 0x0:(READ) flags 0x800000 phys_seg 1 prio class 2 [ 1357.364128][ T2005] Buffer I/O error on dev nbd5, logical block 3, async page read [ 1357.364358][ T2005] I/O error, dev nbd5, sector 0 op 0x0:(READ) flags 0x800000 phys_seg 1 prio class 2 [ 1357.364396][ T2005] Buffer I/O error on dev nbd5, logical block 0, async page read [ 1357.364586][ T2005] I/O error, dev nbd5, sector 2 op 0x0:(READ) flags 0x800000 phys_seg 1 prio class 2 [ 1357.364624][ T2005] Buffer I/O error on dev nbd5, logical block 1, async page read [ 1357.376550][ T1602] ldm_validate_partition_table(): Disk read failed. [ 1357.389750][ T1602] Dev nbd5: unable to read RDB block 0 [ 1357.408102][ T1602] nbd5: unable to read partition table [ 1357.555528][ T9785] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1357.620030][ T1602] ldm_validate_partition_table(): Disk read failed. [ 1357.670392][ T1602] Dev nbd5: unable to read RDB block 0 [ 1357.694472][ T1602] nbd5: unable to read partition table [ 1358.032486][ T1609] block nbd0: reconnected socket [ 1358.037606][ T1609] netlink: 'syz.2.7241': attribute type 9 has an invalid length. [ 1358.363027][T20451] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1358.668829][T28915] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1358.700653][ T1634] netlink: 12 bytes leftover after parsing attributes in process `syz.1.7247'. [ 1358.754241][ T5629] block nbd0: Receive control failed (result -32) [ 1359.122386][ T1641] netlink: 'syz.1.7247': attribute type 10 has an invalid length. [ 1359.122443][ T1641] netlink: 40 bytes leftover after parsing attributes in process `syz.1.7247'. [ 1359.399190][ T1622] bridge0: adding interface bridge0 with same address as a received packet (addr:aa:aa:aa:aa:aa:1b, vlan:0) [ 1359.715429][ C1] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1359.986627][ T1640] dummy0: left promiscuous mode [ 1359.987573][ T1640] bridge1: port 1(dummy0) entered blocking state [ 1359.987994][ T1640] bridge1: port 1(dummy0) entered disabled state [ 1359.988321][ T1640] dummy0: entered allmulticast mode [ 1360.040438][ T1640] dummy0: entered promiscuous mode [ 1360.065640][T28915] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1360.137757][ T1648] netlink: 'syz.2.7249': attribute type 3 has an invalid length. [ 1360.137828][ T1648] netlink: 'syz.2.7249': attribute type 1 has an invalid length. [ 1360.137859][ T1648] netlink: 224 bytes leftover after parsing attributes in process `syz.2.7249'. [ 1360.137892][ T1648] NCSI netlink: No device for ifindex 0 [ 1360.143390][ T1641] bridge1: port 1(dummy0) entered blocking state [ 1360.143548][ T1641] bridge1: port 1(dummy0) entered forwarding state [ 1360.170899][ T1641] dummy0: left allmulticast mode [ 1360.209102][ T1641] bridge1: port 1(dummy0) entered disabled state [ 1360.801239][ T1649] netlink: Conntrack attr has 8 unknown bytes [ 1360.801333][ T1649] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 1360.860378][ T1649] netlink: 68 bytes leftover after parsing attributes in process `syz.4.7251'. [ 1361.130818][ T1657] netlink: 'syz.5.7252': attribute type 3 has an invalid length. [ 1361.284769][ T5931] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1361.566292][T20451] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1361.567120][T20451] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1361.568393][ T1315] ieee802154 phy1 wpan1: encryption failed: -22 [ 1361.635337][ T1680] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 1361.861788][ T1683] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 1362.339257][ T1666] Bluetooth: hci4: Opcode 0x0c1a failed: -4 [ 1362.339313][ T1666] Bluetooth: hci4: Error when powering off device on rfkill (-4) [ 1362.437017][ T1666] Bluetooth: hci1: Opcode 0x0c1a failed: -4 [ 1362.437043][ T1666] Bluetooth: hci1: Error when powering off device on rfkill (-4) [ 1362.590130][ T1666] Bluetooth: hci3: Opcode 0x0c1a failed: -4 [ 1362.590173][ T1666] Bluetooth: hci3: Error when powering off device on rfkill (-4) [ 1362.858370][ T1690] netlink: 'syz.2.7259': attribute type 4 has an invalid length. [ 1362.989106][ T1666] Bluetooth: hci0: Opcode 0x0c1a failed: -4 [ 1362.989130][ T1666] Bluetooth: hci0: Error when powering off device on rfkill (-4) [ 1363.376784][ T1710] netlink: 52 bytes leftover after parsing attributes in process `syz.2.7263'. [ 1363.376942][ T1709] netlink: 52 bytes leftover after parsing attributes in process `syz.2.7263'. [ 1363.501872][T28917] net_ratelimit: 2 callbacks suppressed [ 1363.501893][T28917] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1363.602753][T28917] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1364.602468][ C0] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1364.713881][ T5931] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1364.765231][ T1720] netlink: 'syz.0.7267': attribute type 9 has an invalid length. [ 1364.765270][ T1720] netlink: 8 bytes leftover after parsing attributes in process `syz.0.7267'. [ 1364.817871][ T1720] netlink: 28 bytes leftover after parsing attributes in process `syz.0.7267'. [ 1364.820559][ T1722] netlink: 28 bytes leftover after parsing attributes in process `syz.0.7267'. [ 1364.856932][ T1721] netlink: 'syz.5.7265': attribute type 10 has an invalid length. [ 1365.086091][ T1725] netlink: 4 bytes leftover after parsing attributes in process `syz.5.7265'. [ 1365.134051][ T1721] bridge0: port 1(bridge_slave_0) entered disabled state [ 1365.284423][ T1725] bridge_slave_1: left promiscuous mode [ 1365.284889][ T1725] bridge0: port 2(bridge_slave_1) entered disabled state [ 1365.382289][ T1725] bridge_slave_0: left allmulticast mode [ 1365.382346][ T1725] bridge_slave_0: left promiscuous mode [ 1365.382766][ T1725] bridge0: port 1(bridge_slave_0) entered disabled state [ 1365.883839][T29880] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1366.999593][T29880] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1367.325556][T28917] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1367.388609][T28917] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1367.560216][ T1762] netlink: 'syz.0.7275': attribute type 3 has an invalid length. [ 1368.142763][T28917] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1369.250783][T20454] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1369.264444][ T9785] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1369.801898][ C0] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1370.442537][T28917] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1371.006298][ T1789] ip6erspan0: entered allmulticast mode [ 1371.009013][ T1792] netlink: 16 bytes leftover after parsing attributes in process `syz.2.7281'. [ 1371.384607][T28589] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1371.590831][ T1827] netlink: 'syz.0.7284': attribute type 1 has an invalid length. [ 1371.815626][ T5931] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1371.976383][ T1835] netlink: 36 bytes leftover after parsing attributes in process `syz.2.7285'. [ 1372.343244][ T1832] gretap1: entered allmulticast mode [ 1372.458678][ T1832] bond10: (slave gretap1): making interface the new active one [ 1372.524245][ T1832] bond10: (slave gretap1): Enslaving as an active interface with an up link [ 1372.933016][T29662] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1373.087182][T29662] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1373.093484][T29880] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1373.316611][ T1856] netlink: 'syz.2.7290': attribute type 3 has an invalid length. [ 1373.369266][ T1864] batman_adv: batadv0: Adding interface: dummy0 [ 1373.369284][ T1864] batman_adv: batadv0: The MTU of interface dummy0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 1373.395990][ T1864] batman_adv: batadv0: Interface activated: dummy0 [ 1373.514032][ T1864] netlink: 'syz.4.7291': attribute type 10 has an invalid length. [ 1373.514054][ T1864] netlink: 40 bytes leftover after parsing attributes in process `syz.4.7291'. [ 1373.735447][ T1867] batadv0: mtu less than device minimum [ 1373.827249][ T1864] batadv0: entered promiscuous mode [ 1373.827471][ T1864] batadv0: entered allmulticast mode [ 1373.834106][ T1864] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 1373.835216][ T1864] bridge0: port 1(batadv0) entered blocking state [ 1373.835688][ T1864] bridge0: port 1(batadv0) entered disabled state [ 1373.951266][ T1864] batadv0: failed to initialize vlan filtering on this port [ 1374.512128][ T9785] net_ratelimit: 24 callbacks suppressed [ 1374.512149][ T9785] batman_adv: batadv0: Local translation table size (72) exceeds maximum packet size (-320); Ignoring new local tt entry: 33:33:ff:aa:aa:2a [ 1374.512356][ T9785] batman_adv: batadv0: Local translation table size (72) exceeds maximum packet size (-320); Ignoring new local tt entry: 01:00:5e:00:00:01 [ 1374.922020][ C1] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1375.024171][T28915] batman_adv: batadv0: Local translation table size (72) exceeds maximum packet size (-320); Ignoring new local tt entry: 33:33:ff:aa:aa:2a [ 1375.024232][T28915] batman_adv: batadv0: Local translation table size (72) exceeds maximum packet size (-320); Ignoring new local tt entry: 01:00:5e:00:00:01 [ 1375.026936][T29662] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1375.107887][ T1889] bond0: option min_links: invalid value (18446744073709551612) [ 1375.107914][ T1889] bond0: option min_links: allowed values 0 - 2147483647 [ 1375.223766][T29662] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1375.227984][ T1889] bond0 (unregistering): Released all slaves [ 1375.835884][T28915] batman_adv: batadv0: Local translation table size (72) exceeds maximum packet size (-320); Ignoring new local tt entry: 33:33:ff:aa:aa:2a [ 1375.836114][T28915] batman_adv: batadv0: Local translation table size (72) exceeds maximum packet size (-320); Ignoring new local tt entry: 01:00:5e:00:00:01 [ 1376.351027][ T1898] netlink: 'syz.0.7303': attribute type 3 has an invalid length. [ 1376.382759][ T5931] batman_adv: batadv0: Local translation table size (72) exceeds maximum packet size (-320); Ignoring new local tt entry: 33:33:ff:aa:aa:2a [ 1376.503823][ T1880] netlink: 36 bytes leftover after parsing attributes in process `syz.5.7294'. [ 1376.503880][ T1880] netlink: 16 bytes leftover after parsing attributes in process `syz.5.7294'. [ 1376.503915][ T1880] netlink: 36 bytes leftover after parsing attributes in process `syz.5.7294'. [ 1377.220802][ T1913] IPVS: set_ctl: invalid protocol: 103 172.20.20.170:20003 [ 1378.493413][ T1928] netlink: 8 bytes leftover after parsing attributes in process `syz.5.7312'. [ 1379.755414][ T9785] net_ratelimit: 14 callbacks suppressed [ 1379.755453][ T9785] batman_adv: batadv0: Local translation table size (72) exceeds maximum packet size (-320); Ignoring new local tt entry: 33:33:ff:aa:aa:2a [ 1379.755519][ T9785] batman_adv: batadv0: Local translation table size (72) exceeds maximum packet size (-320); Ignoring new local tt entry: 01:00:5e:00:00:01 [ 1380.042052][ C1] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1380.134129][T28915] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1380.136685][T29662] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1380.264302][T20454] batman_adv: batadv0: Local translation table size (72) exceeds maximum packet size (-320); Ignoring new local tt entry: 33:33:ff:aa:aa:2a [ 1380.264530][T20454] batman_adv: batadv0: Local translation table size (72) exceeds maximum packet size (-320); Ignoring new local tt entry: 01:00:5e:00:00:01 [ 1380.326156][ T1939] netlink: 32 bytes leftover after parsing attributes in process `syz.0.7316'. [ 1380.329722][ T1932] netdevsim netdevsim2 netdevsim0: entered allmulticast mode [ 1380.330653][ T1932] A link change request failed with some changes committed already. Interface netdevsim0 may have been left with an inconsistent configuration, please check. [ 1380.335359][ T1928] dummy0 speed is unknown, defaulting to 1000 [ 1380.782589][T20454] batman_adv: batadv0: Local translation table size (72) exceeds maximum packet size (-320); Ignoring new local tt entry: 33:33:ff:aa:aa:2a [ 1380.782656][T20454] batman_adv: batadv0: Local translation table size (72) exceeds maximum packet size (-320); Ignoring new local tt entry: 01:00:5e:00:00:01 [ 1380.982558][ T1946] netlink: 'syz.1.7318': attribute type 3 has an invalid length. [ 1381.205905][ T1952] netlink: 36 bytes leftover after parsing attributes in process `syz.4.7320'. [ 1381.682236][ T1962] netlink: 28 bytes leftover after parsing attributes in process `syz.1.7323'. [ 1381.682307][ T1962] netlink: 'syz.1.7323': attribute type 7 has an invalid length. [ 1381.682392][ T1962] netlink: 'syz.1.7323': attribute type 8 has an invalid length. [ 1381.682405][ T1962] netlink: 4 bytes leftover after parsing attributes in process `syz.1.7323'. [ 1382.700037][ T1964] netlink: 32 bytes leftover after parsing attributes in process `syz.2.7324'. [ 1382.730948][ T1978] netlink: 'syz.0.7328': attribute type 6 has an invalid length. [ 1382.837337][ T1964] netlink: 32 bytes leftover after parsing attributes in process `syz.2.7324'. [ 1382.837404][ T1964] netlink: 32 bytes leftover after parsing attributes in process `syz.2.7324'. [ 1382.838857][ T1964] netlink: 32 bytes leftover after parsing attributes in process `syz.2.7324'. [ 1382.838912][ T1964] netlink: 32 bytes leftover after parsing attributes in process `syz.2.7324'. [ 1383.246068][ T1964] netlink: 32 bytes leftover after parsing attributes in process `syz.2.7324'. [ 1383.246143][ T1964] netlink: 32 bytes leftover after parsing attributes in process `syz.2.7324'. [ 1383.246199][ T1964] netlink: 32 bytes leftover after parsing attributes in process `syz.2.7324'. [ 1384.841135][ T1969] ip6gre2: entered allmulticast mode [ 1384.993673][T28917] netdevsim netdevsim2 netdevsim3: unset [1, 0] type 2 family 0 port 6081 - 0 [ 1384.993772][T28917] netdevsim netdevsim2 netdevsim2: unset [1, 0] type 2 family 0 port 6081 - 0 [ 1384.993843][T28917] netdevsim netdevsim2 netdevsim0: unset [1, 0] type 2 family 0 port 6081 - 0 [ 1385.053019][T28917] netdevsim netdevsim2 netdevsim1: unset [1, 0] type 2 family 0 port 6081 - 0 [ 1385.084643][ C1] net_ratelimit: 19 callbacks suppressed [ 1385.084680][ C1] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1385.156512][T29662] batman_adv: batadv0: Local translation table size (72) exceeds maximum packet size (-320); Ignoring new local tt entry: 33:33:ff:aa:aa:2a [ 1385.156733][T29662] batman_adv: batadv0: Local translation table size (72) exceeds maximum packet size (-320); Ignoring new local tt entry: 01:00:5e:00:00:01 [ 1385.297475][T28917] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1385.697452][ T5931] batman_adv: batadv0: Local translation table size (72) exceeds maximum packet size (-320); Ignoring new local tt entry: 33:33:ff:aa:aa:2a [ 1385.697523][ T5931] batman_adv: batadv0: Local translation table size (72) exceeds maximum packet size (-320); Ignoring new local tt entry: 01:00:5e:00:00:01 [ 1385.952977][T28915] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1386.436134][ T2011] sctp: [Deprecated]: syz.0.7334 (pid 2011) Use of int in maxseg socket option. [ 1386.436134][ T2011] Use struct sctp_assoc_value instead [ 1386.487946][T28917] batman_adv: batadv0: Local translation table size (72) exceeds maximum packet size (-320); Ignoring new local tt entry: 33:33:ff:aa:aa:2a [ 1386.488004][T28917] batman_adv: batadv0: Local translation table size (72) exceeds maximum packet size (-320); Ignoring new local tt entry: 01:00:5e:00:00:01 [ 1386.840213][ T2029] __nla_validate_parse: 178 callbacks suppressed [ 1386.840266][ T2029] netlink: 4 bytes leftover after parsing attributes in process `syz.1.7336'. [ 1386.995821][T28917] batman_adv: batadv0: Local translation table size (72) exceeds maximum packet size (-320); Ignoring new local tt entry: 33:33:ff:aa:aa:2a [ 1387.228321][ T2029] netlink: 4 bytes leftover after parsing attributes in process `syz.1.7336'. [ 1388.539158][ T2052] netlink: 24 bytes leftover after parsing attributes in process `syz.5.7340'. [ 1388.649770][ T2053] netlink: 28 bytes leftover after parsing attributes in process `syz.5.7340'. [ 1389.408215][ T2064] netlink: 32 bytes leftover after parsing attributes in process `syz.0.7342'. [ 1389.511708][ T2066] syzkaller1: entered promiscuous mode [ 1389.512373][ T2066] syzkaller1: entered allmulticast mode [ 1389.798863][ T2069] netlink: 140 bytes leftover after parsing attributes in process `syz.2.7344'. [ 1389.813743][ T2069] netlink: 8 bytes leftover after parsing attributes in process `syz.2.7344'. [ 1389.813776][ T2069] netlink: 'syz.2.7344': attribute type 10 has an invalid length. [ 1389.813896][ T2069] netlink: 12 bytes leftover after parsing attributes in process `syz.2.7344'. [ 1389.885000][ T2077] netlink: 20 bytes leftover after parsing attributes in process `syz.2.7344'. [ 1389.929763][ T2075] netlink: 36 bytes leftover after parsing attributes in process `syz.0.7346'. [ 1390.161189][ T2069] geneve2: entered promiscuous mode [ 1390.161246][ T2069] geneve2: entered allmulticast mode [ 1390.201880][ C0] net_ratelimit: 14 callbacks suppressed [ 1390.201901][ C0] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1390.364174][T28597] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1390.532353][T28917] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1390.686402][T28915] batman_adv: batadv0: Local translation table size (72) exceeds maximum packet size (-320); Ignoring new local tt entry: 33:33:ff:aa:aa:2a [ 1390.686468][T28915] batman_adv: batadv0: Local translation table size (72) exceeds maximum packet size (-320); Ignoring new local tt entry: 01:00:5e:00:00:01 [ 1390.749000][ T2074] batman_adv: batadv0: Adding interface: ipvlan2 [ 1390.749053][ T2074] batman_adv: batadv0: The MTU of interface ipvlan2 is too small (1282) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1314 would solve the problem. [ 1390.796410][ T2074] batman_adv: batadv0: Interface activated: ipvlan2 [ 1391.007705][T28904] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1391.333669][T28915] batman_adv: batadv0: Local translation table size (72) exceeds maximum packet size (-320); Ignoring new local tt entry: 33:33:ff:aa:aa:2a [ 1391.333880][T28915] batman_adv: batadv0: Local translation table size (72) exceeds maximum packet size (-320); Ignoring new local tt entry: 01:00:5e:00:00:01 [ 1391.743660][T28904] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1391.841222][T28915] batman_adv: batadv0: Local translation table size (72) exceeds maximum packet size (-320); Ignoring new local tt entry: 33:33:ff:aa:aa:2a [ 1391.931927][T28904] IPVS: starting estimator thread 0... [ 1392.022559][ T2105] IPVS: using max 34 ests per chain, 81600 per kthread [ 1392.161609][ T2101] geneve2: entered promiscuous mode [ 1392.164100][ T2101] geneve2: entered allmulticast mode [ 1392.401105][ T2118] __nla_validate_parse: 2 callbacks suppressed [ 1392.401141][ T2118] netlink: 32 bytes leftover after parsing attributes in process `syz.1.7351'. [ 1393.087485][ T2128] tipc: Enabling of bearer rejected, failed to enable media [ 1393.189859][ T2131] netlink: 24 bytes leftover after parsing attributes in process `syz.5.7353'. [ 1394.451098][ T2146] netlink: 4 bytes leftover after parsing attributes in process `syz.2.7359'. [ 1394.616521][ T2151] 8021q: adding VLAN 0 to HW filter on device netdevsim0 [ 1394.686541][ T31] audit: type=1800 audit(1791918771.811:14): pid=2155 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.0.7358" name="r" dev="tmpfs" ino=1238 res=0 errno=0 [ 1395.474807][ T2165] net_ratelimit: 15 callbacks suppressed [ 1395.474831][ T2165] openvswitch: netlink: Key 0 has unexpected len 4 expected 0 [ 1395.511078][T28915] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1395.623320][ T2170] sch_tbf: burst 7 is lower than device bridge0 mtu (32783) ! [ 1395.714810][T29662] batman_adv: batadv0: Local translation table size (72) exceeds maximum packet size (-320); Ignoring new local tt entry: 33:33:ff:aa:aa:2a [ 1395.714872][T29662] batman_adv: batadv0: Local translation table size (72) exceeds maximum packet size (-320); Ignoring new local tt entry: 01:00:5e:00:00:01 [ 1396.042099][ C1] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1396.226038][T28917] batman_adv: batadv0: Local translation table size (72) exceeds maximum packet size (-320); Ignoring new local tt entry: 33:33:ff:aa:aa:2a [ 1396.226100][T28917] batman_adv: batadv0: Local translation table size (72) exceeds maximum packet size (-320); Ignoring new local tt entry: 01:00:5e:00:00:01 [ 1396.376345][T29662] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1396.733458][T28904] batman_adv: batadv0: Local translation table size (72) exceeds maximum packet size (-320); Ignoring new local tt entry: 33:33:ff:aa:aa:2a [ 1396.733529][T28904] batman_adv: batadv0: Local translation table size (72) exceeds maximum packet size (-320); Ignoring new local tt entry: 01:00:5e:00:00:01 [ 1397.350299][ T2207] netlink: 'syz.1.7376': attribute type 10 has an invalid length. [ 1397.392673][ T2207] dummy0: left promiscuous mode [ 1397.641028][ T2207] team0: Port device dummy0 added [ 1397.682429][ T2224] netlink: 4 bytes leftover after parsing attributes in process `syz.5.7378'. [ 1399.751028][ T2268] netlink: 112 bytes leftover after parsing attributes in process `syz.4.7391'. [ 1400.505243][T29880] net_ratelimit: 17 callbacks suppressed [ 1400.505282][T29880] batman_adv: batadv0: Local translation table size (72) exceeds maximum packet size (-320); Ignoring new local tt entry: 33:33:ff:aa:aa:2a [ 1400.505338][T29880] batman_adv: batadv0: Local translation table size (72) exceeds maximum packet size (-320); Ignoring new local tt entry: 01:00:5e:00:00:01 [ 1400.840089][T28917] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1401.014533][T28917] batman_adv: batadv0: Local translation table size (72) exceeds maximum packet size (-320); Ignoring new local tt entry: 33:33:ff:aa:aa:2a [ 1401.014600][T28917] batman_adv: batadv0: Local translation table size (72) exceeds maximum packet size (-320); Ignoring new local tt entry: 01:00:5e:00:00:01 [ 1401.108903][ T2298] xt_hashlimit: max too large, truncated to 1048576 [ 1401.109178][ T2298] xt_hashlimit: overflow, try lower: 137438953472/8 [ 1401.334093][T29880] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1401.802078][ C1] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1401.884829][ T9785] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1401.982270][ T2312] netlink: 5620 bytes leftover after parsing attributes in process `syz.1.7404'. [ 1402.050263][T28917] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1402.125902][T20454] batman_adv: batadv0: Local translation table size (72) exceeds maximum packet size (-320); Ignoring new local tt entry: 33:33:ff:aa:aa:2a [ 1402.982886][ T2334] netlink: 'syz.1.7408': attribute type 1 has an invalid length. [ 1403.236707][ T2343] netlink: 'syz.4.7410': attribute type 11 has an invalid length. [ 1403.284065][ T2345] netlink: 'syz.4.7410': attribute type 11 has an invalid length. [ 1403.284089][ T2345] netlink: 43 bytes leftover after parsing attributes in process `syz.4.7410'. [ 1403.670068][ T2308] syzkaller1: entered promiscuous mode [ 1403.670109][ T2308] syzkaller1: entered allmulticast mode [ 1404.797188][ T2369] netlink: 24 bytes leftover after parsing attributes in process `syz.1.7418'. [ 1405.325634][ T2375] xt_hashlimit: size too large, truncated to 1048576 [ 1405.732558][ T9785] net_ratelimit: 16 callbacks suppressed [ 1405.732580][ T9785] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1405.790101][T28904] batman_adv: batadv0: Local translation table size (72) exceeds maximum packet size (-320); Ignoring new local tt entry: 33:33:ff:aa:aa:2a [ 1405.790192][T28904] batman_adv: batadv0: Local translation table size (72) exceeds maximum packet size (-320); Ignoring new local tt entry: 01:00:5e:00:00:01 [ 1406.319706][T28904] batman_adv: batadv0: Local translation table size (72) exceeds maximum packet size (-320); Ignoring new local tt entry: 33:33:ff:aa:aa:2a [ 1406.319770][T28904] batman_adv: batadv0: Local translation table size (72) exceeds maximum packet size (-320); Ignoring new local tt entry: 01:00:5e:00:00:01 [ 1406.487916][T28904] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1406.782690][ T2429] netlink: 8 bytes leftover after parsing attributes in process `syz.4.7427'. [ 1406.824415][T28915] batman_adv: batadv0: Local translation table size (72) exceeds maximum packet size (-320); Ignoring new local tt entry: 33:33:ff:aa:aa:2a [ 1406.824480][T28915] batman_adv: batadv0: Local translation table size (72) exceeds maximum packet size (-320); Ignoring new local tt entry: 01:00:5e:00:00:01 [ 1407.009788][T28904] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1407.353635][ T9785] batman_adv: batadv0: Local translation table size (72) exceeds maximum packet size (-320); Ignoring new local tt entry: 33:33:ff:aa:aa:2a [ 1408.731265][ T2427] workqueue: Failed to create a rescuer kthread for wq "bond6": -EINTR [ 1409.252443][ T2465] netlink: 'syz.0.7433': attribute type 6 has an invalid length. [ 1409.392810][ T2430] syzkaller1: entered promiscuous mode [ 1409.392850][ T2430] syzkaller1: entered allmulticast mode [ 1409.395668][ T2467] netlink: 36 bytes leftover after parsing attributes in process `syz.0.7433'. [ 1410.726520][ T2480] netlink: 24 bytes leftover after parsing attributes in process `syz.1.7436'. [ 1410.924896][T28917] net_ratelimit: 15 callbacks suppressed [ 1410.924931][T28917] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1411.294423][T28904] batman_adv: batadv0: Local translation table size (72) exceeds maximum packet size (-320); Ignoring new local tt entry: 33:33:ff:aa:aa:2a [ 1411.294659][T28904] batman_adv: batadv0: Local translation table size (72) exceeds maximum packet size (-320); Ignoring new local tt entry: 01:00:5e:00:00:01 [ 1411.480484][ T2484] netlink: 12 bytes leftover after parsing attributes in process `syz.0.7437'. [ 1411.480512][ T2484] netlink: 12 bytes leftover after parsing attributes in process `syz.0.7437'. [ 1411.505790][T28917] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1411.619992][ T2484] TC_ACT_REPEAT abuse ? [ 1411.648859][ T2484] x_tables: duplicate underflow at hook 1 [ 1411.805811][T28904] batman_adv: batadv0: Local translation table size (72) exceeds maximum packet size (-320); Ignoring new local tt entry: 33:33:ff:aa:aa:2a [ 1411.806039][T28904] batman_adv: batadv0: Local translation table size (72) exceeds maximum packet size (-320); Ignoring new local tt entry: 01:00:5e:00:00:01 [ 1411.911879][ T2505] netlink: 'syz.5.7441': attribute type 1 has an invalid length. [ 1411.911934][ T2505] netlink: 'syz.5.7441': attribute type 268 has an invalid length. [ 1411.911965][ T2505] netlink: 224 bytes leftover after parsing attributes in process `syz.5.7441'. [ 1412.036014][ T5931] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1412.517807][ T2512] tipc: Started in network mode [ 1412.517871][ T2512] tipc: Node identity ac14140f, cluster identity 4711 [ 1412.518419][ T2512] tipc: New replicast peer: 255.255.255.255 [ 1412.682076][ C1] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1412.691153][T28917] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1412.719635][ T2512] tipc: Enabled bearer , priority 10 [ 1412.758846][ T2516] netlink: 12 bytes leftover after parsing attributes in process `syz.2.7442'. [ 1412.825884][ T2512] netlink: 'syz.2.7442': attribute type 1 has an invalid length. [ 1413.034112][ T2512] bond0: entered promiscuous mode [ 1413.036429][ T2512] 8021q: adding VLAN 0 to HW filter on device bond0 [ 1413.627063][ T2540] netlink: 28 bytes leftover after parsing attributes in process `syz.2.7442'. [ 1413.627355][ T2540] bond0: entered allmulticast mode [ 1413.631909][T28579] tipc: Node number set to 2886997007 [ 1414.129753][ T2542] dummy0 speed is unknown, defaulting to 1000 [ 1414.300475][ T2549] Bluetooth: hci0: unsupported parameter 5135 [ 1414.300498][ T2549] Bluetooth: hci0: invalid len left 4, exp >= 20 [ 1414.320850][ T2549] netlink: 8 bytes leftover after parsing attributes in process `syz.1.7449'. [ 1414.580281][ T5279] veth0_macvtap: left promiscuous mode [ 1416.158991][ T5931] net_ratelimit: 520 callbacks suppressed [ 1416.159030][ T5931] batman_adv: batadv0: Local translation table size (72) exceeds maximum packet size (-320); Ignoring new local tt entry: 33:33:ff:aa:aa:2a [ 1416.159084][ T5931] batman_adv: batadv0: Local translation table size (72) exceeds maximum packet size (-320); Ignoring new local tt entry: 01:00:5e:00:00:01 [ 1416.224706][ T2559] netdevsim netdevsim2 netdevsim0: left allmulticast mode [ 1416.349272][ T2559] bond0: left promiscuous mode [ 1416.349488][ T2559] bond0: left allmulticast mode [ 1416.544590][T20451] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1416.733326][ T5931] batman_adv: batadv0: Local translation table size (72) exceeds maximum packet size (-320); Ignoring new local tt entry: 33:33:ff:aa:aa:2a [ 1416.733522][ T5931] batman_adv: batadv0: Local translation table size (72) exceeds maximum packet size (-320); Ignoring new local tt entry: 01:00:5e:00:00:01 [ 1416.951921][T28917] netdevsim netdevsim2 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 1416.955353][T28917] netdevsim netdevsim2 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 1416.955393][T28917] netdevsim netdevsim2 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 1416.955430][T28917] netdevsim netdevsim2 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 1417.008972][ T2592] bridge: RTM_NEWNEIGH bridge0 with NTF_USE is not supported [ 1417.070928][ T2594] netlink: 16 bytes leftover after parsing attributes in process `syz.1.7457'. [ 1417.254227][T29662] batman_adv: batadv0: Local translation table size (72) exceeds maximum packet size (-320); Ignoring new local tt entry: 33:33:ff:aa:aa:2a [ 1417.254292][T29662] batman_adv: batadv0: Local translation table size (72) exceeds maximum packet size (-320); Ignoring new local tt entry: 01:00:5e:00:00:01 [ 1417.255585][T28917] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1417.375963][ T2599] netlink: 8 bytes leftover after parsing attributes in process `syz.5.7459'. [ 1417.498099][ T2613] netlink: 32 bytes leftover after parsing attributes in process `syz.2.7462'. [ 1417.593448][ T2613] ip_tables: iptables: counters copy to user failed while replacing table [ 1417.696761][T28915] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1417.799610][ T2615] netlink: 8 bytes leftover after parsing attributes in process `syz.1.7461'. [ 1418.190532][ T2634] netlink: 12 bytes leftover after parsing attributes in process `syz.5.7464'. [ 1418.812977][ T2652] netlink: 44 bytes leftover after parsing attributes in process `syz.2.7465'. [ 1418.917689][ T2652] netlink: 8 bytes leftover after parsing attributes in process `syz.2.7465'. [ 1419.055648][ T2650] pim6reg: entered allmulticast mode [ 1419.125410][ T2648] pim6reg: left allmulticast mode [ 1419.329329][ T2656] batman_adv: batadv0: Adding interface: macvlan2 [ 1419.329367][ T2656] batman_adv: batadv0: The MTU of interface macvlan2 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 1419.329426][ T2656] batman_adv: batadv0: Interface activated: macvlan2 [ 1419.475988][ T2668] SET target dimension over the limit! [ 1419.834205][ T2676] netlink: 8 bytes leftover after parsing attributes in process `syz.0.7476'. [ 1419.872972][ T2676] netlink: 4 bytes leftover after parsing attributes in process `syz.0.7476'. [ 1419.902328][ T2676] xt_CONNSECMARK: only valid in 'mangle' or 'security' table, not 'raw' [ 1421.178470][ T2711] netlink: 24 bytes leftover after parsing attributes in process `syz.1.7485'. [ 1421.213857][ T9785] net_ratelimit: 18 callbacks suppressed [ 1421.213878][ T9785] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1421.576843][ T2713] gretap0: entered promiscuous mode [ 1421.578085][ T2713] macvlan2: entered promiscuous mode [ 1421.591240][ T2713] gretap0: left promiscuous mode [ 1421.616014][T29662] batman_adv: batadv0: Local translation table size (72) exceeds maximum packet size (-320); Ignoring new local tt entry: 33:33:ff:aa:aa:2a [ 1421.616078][T29662] batman_adv: batadv0: Local translation table size (72) exceeds maximum packet size (-320); Ignoring new local tt entry: 01:00:5e:00:00:01 [ 1421.891149][ T2711] ±ÿ: renamed from lo (while UP) [ 1422.020488][ T2724] ipvlan2: entered allmulticast mode [ 1422.020511][ T2724] syz_tun: entered allmulticast mode [ 1422.125995][T29662] batman_adv: batadv0: Local translation table size (72) exceeds maximum packet size (-320); Ignoring new local tt entry: 33:33:ff:aa:aa:2a [ 1422.126062][T29662] batman_adv: batadv0: Local translation table size (72) exceeds maximum packet size (-320); Ignoring new local tt entry: 01:00:5e:00:00:01 [ 1422.333045][T20451] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1422.384783][T28917] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1422.633579][T28917] batman_adv: batadv0: Local translation table size (72) exceeds maximum packet size (-320); Ignoring new local tt entry: 33:33:ff:aa:aa:2a [ 1422.633804][T28917] batman_adv: batadv0: Local translation table size (72) exceeds maximum packet size (-320); Ignoring new local tt entry: 01:00:5e:00:00:01 [ 1422.954899][ T2747] dummy0 speed is unknown, defaulting to 1000 [ 1423.014457][ T1315] ieee802154 phy1 wpan1: encryption failed: -22 [ 1423.463767][T29662] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1423.668971][ T2762] __nla_validate_parse: 3 callbacks suppressed [ 1423.669019][ T2762] netlink: 8 bytes leftover after parsing attributes in process `syz.5.7494'. [ 1424.045490][ T2752] Bluetooth: hci0: invalid length 0, exp 2 for type 5 [ 1424.792733][ T2784] netlink: 8 bytes leftover after parsing attributes in process `syz.0.7498'. [ 1424.792906][ T2784] netlink: 4 bytes leftover after parsing attributes in process `syz.0.7498'. [ 1426.502790][T28904] net_ratelimit: 15 callbacks suppressed [ 1426.502831][T28904] batman_adv: batadv0: Local translation table size (72) exceeds maximum packet size (-320); Ignoring new local tt entry: 33:33:ff:aa:aa:2a [ 1426.502886][T28904] batman_adv: batadv0: Local translation table size (72) exceeds maximum packet size (-320); Ignoring new local tt entry: 01:00:5e:00:00:01 [ 1426.793757][T29662] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1427.015044][T28915] batman_adv: batadv0: Local translation table size (72) exceeds maximum packet size (-320); Ignoring new local tt entry: 33:33:ff:aa:aa:2a [ 1427.015099][T28915] batman_adv: batadv0: Local translation table size (72) exceeds maximum packet size (-320); Ignoring new local tt entry: 01:00:5e:00:00:01 [ 1427.484941][ T5931] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1427.529371][T28917] batman_adv: batadv0: Local translation table size (72) exceeds maximum packet size (-320); Ignoring new local tt entry: 33:33:ff:aa:aa:2a [ 1427.529605][T28917] batman_adv: batadv0: Local translation table size (72) exceeds maximum packet size (-320); Ignoring new local tt entry: 01:00:5e:00:00:01 [ 1427.822471][ T2796] netlink: 4 bytes leftover after parsing attributes in process `syz.5.7501'. [ 1427.822560][ T2796] netlink: 16 bytes leftover after parsing attributes in process `syz.5.7501'. [ 1428.086610][T20451] batman_adv: batadv0: Local translation table size (72) exceeds maximum packet size (-320); Ignoring new local tt entry: 33:33:ff:aa:aa:2a [ 1428.086677][T20451] batman_adv: batadv0: Local translation table size (72) exceeds maximum packet size (-320); Ignoring new local tt entry: 01:00:5e:00:00:01 [ 1428.303745][ T2816] netlink: 36 bytes leftover after parsing attributes in process `syz.0.7500'. [ 1429.010863][ T2843] netlink: 16 bytes leftover after parsing attributes in process `syz.2.7504'. [ 1429.010930][ T2843] netlink: 12 bytes leftover after parsing attributes in process `syz.2.7504'. [ 1429.496601][ T2847] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 1429.744407][ T2852] vti0: entered promiscuous mode [ 1430.186589][ T2865] netlink: 24 bytes leftover after parsing attributes in process `syz.0.7512'. [ 1430.397076][ T2878] x_tables: duplicate underflow at hook 2 [ 1431.554688][T29880] net_ratelimit: 15 callbacks suppressed [ 1431.554725][T29880] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1431.685902][T28917] batman_adv: batadv0: Local translation table size (72) exceeds maximum packet size (-320); Ignoring new local tt entry: 33:33:ff:aa:aa:2a [ 1431.685970][T28917] batman_adv: batadv0: Local translation table size (72) exceeds maximum packet size (-320); Ignoring new local tt entry: 01:00:5e:00:00:01 [ 1431.865975][ T2915] netlink: 4 bytes leftover after parsing attributes in process `syz.5.7522'. [ 1432.192179][T28915] batman_adv: batadv0: Local translation table size (72) exceeds maximum packet size (-320); Ignoring new local tt entry: 33:33:ff:aa:aa:2a [ 1432.192418][T28915] batman_adv: batadv0: Local translation table size (72) exceeds maximum packet size (-320); Ignoring new local tt entry: 01:00:5e:00:00:01 [ 1432.246402][ T2925] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 1432.703740][T28915] batman_adv: batadv0: Local translation table size (72) exceeds maximum packet size (-320); Ignoring new local tt entry: 33:33:ff:aa:aa:2a [ 1432.703800][T28915] batman_adv: batadv0: Local translation table size (72) exceeds maximum packet size (-320); Ignoring new local tt entry: 01:00:5e:00:00:01 [ 1432.734109][T28917] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1432.844691][ T2942] netlink: 'syz.2.7527': attribute type 9 has an invalid length. [ 1433.216887][ T9785] batman_adv: batadv0: Local translation table size (72) exceeds maximum packet size (-320); Ignoring new local tt entry: 33:33:ff:aa:aa:2a [ 1434.321084][ T2971] netlink: 'syz.0.7533': attribute type 1 has an invalid length. [ 1434.321144][ T2971] netlink: 224 bytes leftover after parsing attributes in process `syz.0.7533'. [ 1434.558725][ T2979] netlink: 'syz.2.7535': attribute type 16 has an invalid length. [ 1434.558781][ T2979] netlink: 'syz.2.7535': attribute type 17 has an invalid length. [ 1434.897859][ T2987] netlink: 'syz.0.7533': attribute type 1 has an invalid length. [ 1434.956682][T28917] [ 1434.959055][T28917] ====================================================== [ 1434.966154][T28917] WARNING: possible circular locking dependency detected [ 1434.973271][T28917] syzkaller #0 Not tainted [ 1434.977684][T28917] ------------------------------------------------------ [ 1434.984746][T28917] kworker/u8:28/28917 is trying to acquire lock: [ 1434.991074][T28917] ffffffff8fe90360 (fs_reclaim){+.+.}-{0:0}, at: __kmalloc_noprof+0xbc/0x720 [ 1434.998468][ T2990] netlink: 28 bytes leftover after parsing attributes in process `syz.0.7533'. [ 1435.009252][T28917] [ 1435.009252][T28917] but task is already holding lock: [ 1435.016628][T28917] ffffffff8fbf9100 (wq_pool_mutex){+.+.}-{4:4}, at: __alloc_workqueue+0xa4f/0x1fe0 [ 1435.025975][T28917] [ 1435.025975][T28917] which lock already depends on the new lock. [ 1435.025975][T28917] [ 1435.036370][T28917] [ 1435.036370][T28917] the existing dependency chain (in reverse order) is: [ 1435.045386][T28917] [ 1435.045386][T28917] -> #7 (wq_pool_mutex){+.+.}-{4:4}: [ 1435.053002][T28917] __mutex_lock+0x19d/0x1550 [ 1435.058133][T28917] __alloc_workqueue+0xa4f/0x1fe0 [ 1435.063682][T28917] alloc_workqueue_noprof+0xe3/0x210 [ 1435.069494][T28917] padata_alloc+0xbe/0x360 [ 1435.074467][T28917] pcrypt_init_padata+0x27/0x100 [ 1435.080001][T28917] pcrypt_init+0x60/0xc0 [ 1435.084831][T28917] do_one_initcall+0x250/0x870 [ 1435.090136][T28917] do_initcall_level+0x10a/0x1a0 [ 1435.096548][T28917] do_initcalls+0x59/0xa0 [ 1435.101426][T28917] kernel_init_freeable+0x29d/0x3e0 [ 1435.107163][T28917] kernel_init+0x22/0x1d0 [ 1435.112031][T28917] ret_from_fork+0x514/0xb70 [ 1435.117197][T28917] ret_from_fork_asm+0x1a/0x30 [ 1435.122512][T28917] [ 1435.122512][T28917] -> #6 (cpu_hotplug_lock){++++}-{0:0}: [ 1435.130330][T28917] cpus_read_lock+0x42/0x160 [ 1435.135446][T28917] static_key_slow_inc+0x12/0x30 [ 1435.140928][T28917] nbd_genl_reconnect_sock_cb+0x69a/0xbb0 [ 1435.147294][T28917] nbd_genl_foreach_sock+0x265/0x450 [ 1435.153094][T28917] nbd_genl_reconfigure+0xbbb/0x1040 [ 1435.158898][T28917] genl_family_rcv_msg_doit+0x233/0x340 [ 1435.164984][T28917] genl_rcv_msg+0x614/0x7a0 [ 1435.170000][T28917] netlink_rcv_skb+0x226/0x4a0 [ 1435.175275][T28917] genl_rcv+0x28/0x40 [ 1435.179767][T28917] netlink_unicast+0x7bd/0x940 [ 1435.185041][T28917] netlink_sendmsg+0x813/0xb40 [ 1435.190331][T28917] sock_sendmsg_nosec+0x14e/0x190 [ 1435.195915][T28917] ____sys_sendmsg+0x54e/0x850 [ 1435.201202][T28917] ___sys_sendmsg+0x2a5/0x360 [ 1435.206424][T28917] __x64_sys_sendmsg+0x1b1/0x290 [ 1435.211886][T28917] do_syscall_64+0x166/0x520 [ 1435.217002][T28917] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1435.223411][T28917] [ 1435.223411][T28917] -> #5 (&nsock->tx_lock){+.+.}-{4:4}: [ 1435.231050][T28917] __mutex_lock+0x19d/0x1550 [ 1435.236158][T28917] nbd_queue_rq+0x373/0xff0 [ 1435.241170][T28917] blk_mq_dispatch_rq_list+0x499/0x1990 [ 1435.247327][T28917] __blk_mq_sched_dispatch_requests+0xd36/0x1580 [ 1435.254217][T28917] blk_mq_sched_dispatch_requests+0xd7/0x190 [ 1435.260713][T28917] blk_mq_run_work_fn+0x16c/0x300 [ 1435.266256][T28917] process_scheduled_works+0xc3d/0x1630 [ 1435.272317][T28917] worker_thread+0xa47/0xfb0 [ 1435.277418][T28917] kthread+0x38b/0x480 [ 1435.281998][T28917] ret_from_fork+0x514/0xb70 [ 1435.287101][T28917] ret_from_fork_asm+0x1a/0x30 [ 1435.292377][T28917] [ 1435.292377][T28917] -> #4 (&cmd->lock){+.+.}-{4:4}: [ 1435.299569][T28917] __mutex_lock+0x19d/0x1550 [ 1435.304671][T28917] nbd_queue_rq+0xc1/0xff0 [ 1435.309599][T28917] blk_mq_dispatch_rq_list+0x499/0x1990 [ 1435.315666][T28917] __blk_mq_sched_dispatch_requests+0xd36/0x1580 [ 1435.322527][T28917] blk_mq_sched_dispatch_requests+0xd7/0x190 [ 1435.329033][T28917] blk_mq_run_work_fn+0x16c/0x300 [ 1435.334585][T28917] process_scheduled_works+0xc3d/0x1630 [ 1435.340644][T28917] worker_thread+0xa47/0xfb0 [ 1435.345753][T28917] kthread+0x38b/0x480 [ 1435.350328][T28917] ret_from_fork+0x514/0xb70 [ 1435.355434][T28917] ret_from_fork_asm+0x1a/0x30 [ 1435.360711][T28917] [ 1435.360711][T28917] -> #3 (set->srcu){.+.+}-{0:0}: [ 1435.367876][T28917] __synchronize_srcu+0xc9/0x2f0 [ 1435.373333][T28917] elevator_switch+0x1e8/0x7b0 [ 1435.378680][T28917] elevator_change+0x2fa/0x480 [ 1435.383958][T28917] elevator_set_default+0x375/0x440 [ 1435.389685][T28917] blk_register_queue+0x3f3/0x4e0 [ 1435.395291][T28917] __add_disk+0x6b8/0xdb0 [ 1435.400146][T28917] add_disk_fwnode+0x100/0x3a0 [ 1435.405436][T28917] nbd_dev_add+0x733/0xb60 [ 1435.410377][T28917] nbd_init+0x168/0x1f0 [ 1435.415292][T28917] do_one_initcall+0x250/0x870 [ 1435.421363][T28917] do_initcall_level+0x10a/0x1a0 [ 1435.426832][T28917] do_initcalls+0x59/0xa0 [ 1435.431679][T28917] kernel_init_freeable+0x29d/0x3e0 [ 1435.437395][T28917] kernel_init+0x22/0x1d0 [ 1435.442233][T28917] ret_from_fork+0x514/0xb70 [ 1435.447339][T28917] ret_from_fork_asm+0x1a/0x30 [ 1435.452617][T28917] [ 1435.452617][T28917] -> #2 (&q->elevator_lock){+.+.}-{4:4}: [ 1435.460495][T28917] __mutex_lock+0x19d/0x1550 [ 1435.465604][T28917] elevator_change+0x1af/0x480 [ 1435.470880][T28917] elevator_set_none+0xb5/0x140 [ 1435.476239][T28917] blk_mq_update_nr_hw_queues+0x5ef/0x19f0 [ 1435.482559][T28917] nbd_start_device+0x189/0xb30 [ 1435.487920][T28917] nbd_genl_connect+0x167d/0x1cd0 [ 1435.493449][T28917] genl_family_rcv_msg_doit+0x233/0x340 [ 1435.499505][T28917] genl_rcv_msg+0x614/0x7a0 [ 1435.504515][T28917] netlink_rcv_skb+0x226/0x4a0 [ 1435.509788][T28917] genl_rcv+0x28/0x40 [ 1435.514284][T28917] netlink_unicast+0x7bd/0x940 [ 1435.519567][T28917] netlink_sendmsg+0x813/0xb40 [ 1435.524849][T28917] sock_sendmsg_nosec+0x14e/0x190 [ 1435.530396][T28917] ____sys_sendmsg+0x54e/0x850 [ 1435.535676][T28917] ___sys_sendmsg+0x2a5/0x360 [ 1435.540860][T28917] __x64_sys_sendmsg+0x1b1/0x290 [ 1435.546304][T28917] do_syscall_64+0x166/0x520 [ 1435.551406][T28917] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1435.557809][T28917] [ 1435.557809][T28917] -> #1 (&q->q_usage_counter(io)#51){++++}-{0:0}: [ 1435.566431][T28917] blk_alloc_queue+0x544/0x690 [ 1435.571706][T28917] __blk_mq_alloc_disk+0x194/0x390 [ 1435.577330][T28917] nbd_dev_add+0x494/0xb60 [ 1435.582258][T28917] nbd_init+0x168/0x1f0 [ 1435.586924][T28917] do_one_initcall+0x250/0x870 [ 1435.592201][T28917] do_initcall_level+0x10a/0x1a0 [ 1435.597684][T28917] do_initcalls+0x59/0xa0 [ 1435.602528][T28917] kernel_init_freeable+0x29d/0x3e0 [ 1435.608234][T28917] kernel_init+0x22/0x1d0 [ 1435.613070][T28917] ret_from_fork+0x514/0xb70 [ 1435.618177][T28917] ret_from_fork_asm+0x1a/0x30 [ 1435.623460][T28917] [ 1435.623460][T28917] -> #0 (fs_reclaim){+.+.}-{0:0}: [ 1435.630658][T28917] __lock_acquire+0x164c/0x2de0 [ 1435.636021][T28917] lock_acquire+0x115/0x350 [ 1435.641032][T28917] fs_reclaim_acquire+0x71/0x100 [ 1435.646476][T28917] __kmalloc_noprof+0xbc/0x720 [ 1435.651757][T28917] apply_wqattrs_prepare+0xee/0xdc0 [ 1435.657554][T28917] __alloc_workqueue+0x11be/0x1fe0 [ 1435.663175][T28917] alloc_workqueue_noprof+0xe3/0x210 [ 1435.668967][T28917] __rds_conn_create+0x1334/0x2290 [ 1435.674661][T28917] rds_conn_create+0x43/0x60 [ 1435.679761][T28917] rds_tcp_accept_one+0x44f/0xd40 [ 1435.685359][T28917] rds_tcp_accept_worker+0x1d/0x70 [ 1435.691078][T28917] process_scheduled_works+0xc3d/0x1630 [ 1435.697221][T28917] worker_thread+0xa47/0xfb0 [ 1435.702323][T28917] kthread+0x38b/0x480 [ 1435.706899][T28917] ret_from_fork+0x514/0xb70 [ 1435.712015][T28917] ret_from_fork_asm+0x1a/0x30 [ 1435.717295][T28917] [ 1435.717295][T28917] other info that might help us debug this: [ 1435.717295][T28917] [ 1435.727507][T28917] Chain exists of: [ 1435.727507][T28917] fs_reclaim --> cpu_hotplug_lock --> wq_pool_mutex [ 1435.727507][T28917] [ 1435.740041][T28917] Possible unsafe locking scenario: [ 1435.740041][T28917] [ 1435.747491][T28917] CPU0 CPU1 [ 1435.752860][T28917] ---- ---- [ 1435.758251][T28917] lock(wq_pool_mutex); [ 1435.762504][T28917] lock(cpu_hotplug_lock); [ 1435.769529][T28917] lock(wq_pool_mutex); [ 1435.776297][T28917] lock(fs_reclaim); [ 1435.780284][T28917] [ 1435.780284][T28917] *** DEADLOCK *** [ 1435.780284][T28917] [ 1435.788628][T28917] locks held by kworker/u8:28/28917: 4, last CPU#1: [ 1435.795297][T28917] #0: ffff88802e8ac140 ((wq_completion)krdsd){+.+.}-{0:0}, at: process_scheduled_works+0x97a/0x1630 [ 1435.806428][T28917] #1: ffffc90004ddfc40 ((work_completion)(&rtn->rds_tcp_accept_w)){+.+.}-{0:0}, at: process_scheduled_works+0x97a/0x1630 [ 1435.819142][T28917] #2: ffff888056eb4c60 (&rtn->rds_tcp_accept_lock){+.+.}-{4:4}, at: rds_tcp_accept_one+0xb3/0xd40 [ 1435.829859][T28917] #3: ffffffff8fbf9100 (wq_pool_mutex){+.+.}-{4:4}, at: __alloc_workqueue+0xa4f/0x1fe0 [ 1435.839614][T28917] [ 1435.839614][T28917] stack backtrace: [ 1435.845689][T28917] CPU: 1 UID: 0 PID: 28917 Comm: kworker/u8:28 Not tainted syzkaller #0 PREEMPT(full) [ 1435.855597][T28917] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/07/2026 [ 1435.865672][T28917] Workqueue: krdsd rds_tcp_accept_worker [ 1435.871312][T28917] Call Trace: [ 1435.874582][T28917] [ 1435.877522][T28917] dump_stack_lvl+0xe8/0x150 [ 1435.882123][T28917] print_circular_bug+0x2e2/0x300 [ 1435.887150][T28917] check_noncircular+0x12f/0x150 [ 1435.892087][T28917] __lock_acquire+0x164c/0x2de0 [ 1435.896932][T28917] ? irqentry_exit+0x218/0x920 [ 1435.901705][T28917] ? __pfx___schedule+0x10/0x10 [ 1435.906565][T28917] lock_acquire+0x115/0x350 [ 1435.911064][T28917] ? __kmalloc_noprof+0xbc/0x720 [ 1435.916000][T28917] ? apply_wqattrs_prepare+0xee/0xdc0 [ 1435.921382][T28917] fs_reclaim_acquire+0x71/0x100 [ 1435.926761][T28917] ? __kmalloc_noprof+0xbc/0x720 [ 1435.931770][T28917] __kmalloc_noprof+0xbc/0x720 [ 1435.936624][T28917] ? apply_wqattrs_prepare+0xee/0xdc0 [ 1435.942005][T28917] ? apply_wqattrs_prepare+0xee/0xdc0 [ 1435.947390][T28917] apply_wqattrs_prepare+0xee/0xdc0 [ 1435.952589][T28917] ? pcpu_memcg_post_alloc_hook+0x8c/0x630 [ 1435.958447][T28917] ? pcpu_alloc_noprof+0x100f/0x1900 [ 1435.963736][T28917] ? pcpu_alloc_noprof+0x1036/0x1900 [ 1435.969033][T28917] __alloc_workqueue+0x11be/0x1fe0 [ 1435.974154][T28917] alloc_workqueue_noprof+0xe3/0x210 [ 1435.979436][T28917] ? __pfx_alloc_workqueue_noprof+0x10/0x10 [ 1435.985330][T28917] ? mutex_init_lockdep+0xdf/0x110 [ 1435.990446][T28917] __rds_conn_create+0x1334/0x2290 [ 1435.995554][T28917] ? __rds_conn_create+0x2d5/0x2290 [ 1436.000746][T28917] ? __pfx___rds_conn_create+0x10/0x10 [ 1436.006196][T28917] ? __ipv6_chk_addr_and_flags+0x688/0x7e0 [ 1436.012095][T28917] ? rds_tcp_laddr_check+0x7e/0x410 [ 1436.017294][T28917] rds_conn_create+0x43/0x60 [ 1436.021875][T28917] rds_tcp_accept_one+0x44f/0xd40 [ 1436.026894][T28917] ? lock_acquire+0x115/0x350 [ 1436.031563][T28917] ? __pfx_rds_tcp_accept_one+0x10/0x10 [ 1436.037124][T28917] ? rcu_is_watching+0x16/0xb0 [ 1436.041893][T28917] ? process_scheduled_works+0x97a/0x1630 [ 1436.047613][T28917] rds_tcp_accept_worker+0x1d/0x70 [ 1436.052740][T28917] process_scheduled_works+0xc3d/0x1630 [ 1436.058344][T28917] ? __pfx_process_scheduled_works+0x10/0x10 [ 1436.064329][T28917] ? assign_work+0x3cf/0x5d0 [ 1436.068916][T28917] worker_thread+0xa47/0xfb0 [ 1436.073503][T28917] ? __kthread_parkme+0x71/0x1f0 [ 1436.078436][T28917] kthread+0x38b/0x480 [ 1436.082494][T28917] ? __pfx_worker_thread+0x10/0x10 [ 1436.087591][T28917] ? __pfx_kthread+0x10/0x10 [ 1436.092166][T28917] ret_from_fork+0x514/0xb70 [ 1436.096754][T28917] ? __pfx_ret_from_fork+0x10/0x10 [ 1436.101852][T28917] ? __switch_to+0xc89/0x1420 [ 1436.106516][T28917] ? __pfx_kthread+0x10/0x10 [ 1436.111088][T28917] ret_from_fork_asm+0x1a/0x30 [ 1436.115848][T28917] [ 1436.329139][ T2979] ip6gretap0: entered promiscuous mode [ 1436.343030][ T2979] 8021q: adding VLAN 0 to HW filter on device .` [ 1436.355441][ T2979] 8021q: adding VLAN 0 to HW filter on device team0 [ 1436.565193][ T2979] hsr0: Slave A (hsr_slave_0) is not up; please bring it up to get a fully working HSR network [ 1436.565232][ T2979] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 1436.569396][ T2979] net_ratelimit: 13 callbacks suppressed [ 1436.569660][ T2979] A link change request failed with some changes committed already. Interface virt_wifi0 may have been left with an inconsistent configuration, please check. [ 1436.960332][ T5931] batman_adv: batadv0: Local translation table size (72) exceeds maximum packet size (-320); Ignoring new local tt entry: 33:33:ff:aa:aa:2a [ 1436.960388][ T5931] batman_adv: batadv0: Local translation table size (72) exceeds maximum packet size (-320); Ignoring new local tt entry: 01:00:5e:00:00:01 [ 1437.404013][T28915] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1437.492375][ T5931] batman_adv: batadv0: Local translation table size (72) exceeds maximum packet size (-320); Ignoring new local tt entry: 33:33:ff:aa:aa:2a [ 1437.492407][ T5931] batman_adv: batadv0: Local translation table size (72) exceeds maximum packet size (-320); Ignoring new local tt entry: 01:00:5e:00:00:01 [ 1437.991906][ T5931] batman_adv: batadv0: Local translation table size (72) exceeds maximum packet size (-320); Ignoring new local tt entry: 33:33:ff:aa:aa:2a [ 1437.991959][ T5931] batman_adv: batadv0: Local translation table size (72) exceeds maximum packet size (-320); Ignoring new local tt entry: 01:00:5e:00:00:01 [ 1438.362838][T28576] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1438.503687][T29880] batman_adv: batadv0: Local translation table size (72) exceeds maximum packet size (-320); Ignoring new local tt entry: 33:33:ff:aa:aa:2a [ 1441.575559][T28904] net_ratelimit: 16 callbacks suppressed [ 1441.575605][T28904] batman_adv: batadv0: Local translation table size (72) exceeds maximum packet size (-320); Ignoring new local tt entry: 33:33:ff:aa:aa:2a [ 1441.575642][T28904] batman_adv: batadv0: Local translation table size (72) exceeds maximum packet size (-320); Ignoring new local tt entry: 01:00:5e:00:00:01 [ 1441.578551][T20451] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1441.954561][T29880] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1442.082220][T20451] batman_adv: batadv0: Local translation table size (72) exceeds maximum packet size (-320); Ignoring new local tt entry: 33:33:ff:aa:aa:2a [ 1442.082279][T20451] batman_adv: batadv0: Local translation table size (72) exceeds maximum packet size (-320); Ignoring new local tt entry: 01:00:5e:00:00:01 [ 1442.592538][T20451] batman_adv: batadv0: Local translation table size (72) exceeds maximum packet size (-320); Ignoring new local tt entry: 33:33:ff:aa:aa:2a [ 1442.592593][T20451] batman_adv: batadv0: Local translation table size (72) exceeds maximum packet size (-320); Ignoring new local tt entry: 01:00:5e:00:00:01 [ 1443.073712][T28915] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1443.101808][T28915] batman_adv: batadv0: Local translation table size (72) exceeds maximum packet size (-320); Ignoring new local tt entry: 33:33:ff:aa:aa:2a