last executing test programs: 3.831924413s ago: executing program 4 (id=5746): r0 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000180)={&(0x7f00000002c0)=ANY=[@ANYBLOB="1c0000004500090000000000000000000300000008000200", @ANYRES8=r0], 0x1c}}, 0x0) r1 = socket$inet_udp(0x2, 0x2, 0x0) r2 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r3 = syz_genetlink_get_family_id$netlbl_cipso(&(0x7f00000002c0), r2) sendmsg$NLBL_CIPSOV4_C_ADD(r2, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000040)=ANY=[@ANYBLOB='H\x00\x00\x00', @ANYRES16=r3, @ANYBLOB="010004000000fbdbdf250100000008000100030000001c000c800c000b8008000ac485ef41000c000b8008000a00b512080004000880040004800800020001"], 0x48}}, 0x3000c000) setsockopt$ARPT_SO_SET_REPLACE(r1, 0xa02000000000000, 0x60, &(0x7f0000000800)={'filter\x00', 0xb001, 0x4, 0x3c8, 0x0, 0x0, 0x1f8, 0x2e0, 0x2e0, 0x2e0, 0x7fffffe, 0x0, {[{{@arp={@multicast1, @rand_addr=0x64010102, 0xff000000, 0xff000000, 0xf, 0x7, {@mac=@dev={'\xaa\xaa\xaa\xaa\xaa', 0x13}, {[0x0, 0xff, 0x0, 0xff]}}, {@mac=@broadcast, {[0x0, 0x0, 0xff, 0xff]}}, 0x4d00, 0x7, 0x5, 0xffff, 0x4, 0x3, 'hsr0\x00', 'veth0_to_team\x00', {0xff}, {}, 0x0, 0x128}, 0xc0, 0x110}, @mangle={0x50, 'mangle\x00', 0x0, {@empty, @mac=@multicast, @multicast1, @local, 0xf}}}, {{@arp={@multicast1, @remote, 0xffffff00, 0xffffff00, 0xe, 0xa, {@empty, {[0xff, 0xff, 0xff, 0x0, 0x0, 0xff]}}, {@mac=@dev={'\xaa\xaa\xaa\xaa\xaa', 0x1c}, {[0xff, 0xff, 0xff, 0xff, 0xff, 0xff]}}, 0x4, 0x7, 0x81, 0xca3, 0x9, 0xc4, 'lo\x00', 'bridge0\x00', {0xff}}, 0xc0, 0xe8}, @unspec=@CLASSIFY={0x28, 'CLASSIFY\x00', 0x0, {0xd7}}}, {{@arp={@initdev={0xac, 0x1e, 0x0, 0x0}, @rand_addr=0x64010102, 0xffffff00, 0x0, 0x6, 0xe, {@mac, {[0xff, 0x0, 0xff, 0x0, 0x696a0b9e72f77eee, 0xff]}}, {@mac=@dev={'\xaa\xaa\xaa\xaa\xaa', 0x1c}, {[0xff, 0xff, 0x0, 0xfdaa55f362d48d41]}}, 0xf, 0x1000, 0x3, 0x4, 0x5, 0x8925, 'veth1_macvtap\x00', 'virt_wifi0\x00', {0xff}, {0xff}}, 0xc0, 0xe8}, @unspec=@NFQUEUE3={0x28}}], {{'\x00', 0xc0, 0xe8}, {0x28}}}}, 0x418) 3.710852737s ago: executing program 2 (id=5748): setsockopt$IPT_SO_SET_REPLACE(0xffffffffffffffff, 0x0, 0x40, &(0x7f0000000c80)=@filter={'filter\x00', 0x42, 0x4, 0x278, 0xffffffff, 0xb8, 0xb8, 0xb8, 0xffffffff, 0xffffffff, 0x200, 0x200, 0x200, 0xffffffff, 0x5, 0x0, {[{{@ip={@remote, @remote, 0xff, 0xff000000, 'geneve1\x00', 'pimreg1\x00', {}, {0xff}, 0x11, 0x0, 0x10}, 0x74000002, 0x70, 0x98, 0x1ba, {0x46010000, 0x2c000000000000}}, @REJECT={0x28, 'REJECT\x00', 0x0, {0x7}}}, {{@ip={@private=0xa010101, @broadcast, 0xffffffff, 0xffffff00, 'veth1_macvtap\x00', 'rose0\x00', {}, {}, 0xa, 0x1}, 0x287, 0x70, 0x98}, @REJECT={0x28}}, {{@uncond, 0x0, 0x70, 0xb0}, @common=@inet=@TCPOPTSTRIP={0x40, 'TCPOPTSTRIP\x00', 0x0, {[0x7]}}}], {{'\x00', 0x0, 0x70, 0x98}, {0x28}}}}, 0x2d8) socket(0x10, 0x803, 0x0) r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r0, &(0x7f000000c2c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f00000004c0)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a20000000000a01010000000000000000020000000900010073797a300000000040000000030a09020000000000000000020000000900010073797a30000000000900030073797a3200000000140004800800014000000000080002400000000014000000110001"], 0x88}}, 0x0) r1 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r1, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000100)=ANY=[@ANYBLOB="140000001000010000000000000000000500000a28000000000a030000000000000000000a00000708000240000000020900010073797a31000000002c000000030a010100000000000000000a0000070900010073797a31000000000900030073797a320000000014000000110001"], 0x7c}, 0x1, 0x0, 0x0, 0x4000}, 0x0) sendmsg$NFT_BATCH(r1, &(0x7f0000009b40)={0x0, 0x0, &(0x7f0000009b00)={&(0x7f000000c300)={{0x14, 0x10, 0x1, 0x0, 0x0, {0x5}}, [@NFT_MSG_NEWSET={0x3c, 0x9, 0xa, 0x401, 0x0, 0x0, {0xa, 0x0, 0x4}, [@NFTA_SET_TABLE={0x9, 0x1, 'syz1\x00'}, @NFTA_SET_KEY_LEN={0x8, 0x5, 0x1, 0x0, 0x2}, @NFTA_SET_NAME={0x9, 0x2, 'syz1\x00'}, @NFTA_SET_ID={0x8, 0xa, 0x1, 0x0, 0xfffffffc}]}, @NFT_MSG_NEWSETELEM={0xe04, 0xc, 0xa, 0x101, 0x0, 0x0, {0xa, 0x0, 0x6}, [@NFTA_SET_ELEM_LIST_SET={0x9, 0x2, 'syz1\x00'}, @NFTA_SET_ELEM_LIST_ELEMENTS={0xdcc, 0x3, 0x0, 0x1, [{0x64, 0x0, 0x0, 0x1, [@NFTA_SET_ELEM_DATA={0x58, 0x2, 0x0, 0x1, [@NFTA_DATA_VALUE={0x53, 0x1, "dfb2d4860d7f76a54230320c05888a490d91e3104b60126d7a4c8170d91c4bf19aea9e6fa80eddadaf95d0da5dcee7ef74f22f0597936626bfa2dcdec0596b97457acf6a2a24534a4ff1153d1ff669"}]}, @NFTA_SET_ELEM_FLAGS={0x8, 0x3, 0x1, 0x0, 0x1}]}, {0xb24, 0x0, 0x0, 0x1, [@NFTA_SET_ELEM_DATA={0x3e0, 0x2, 0x0, 0x1, [@NFTA_DATA_VERDICT={0x14, 0x2, 0x0, 0x1, [@NFTA_VERDICT_CHAIN_ID={0x8, 0x3, 0x1, 0x0, 0x2}, @NFTA_VERDICT_CODE={0x8, 0x1, 0x0, 0x1, 0xffffffffffffffff}]}, @NFTA_DATA_VALUE={0x8f, 0x1, "d12e7eb2cd759b2b66ad98278cfc28fe970fc08e47e3af925a72e3e1bf1b662ec0fc66b9dbe3dcc54ec24635794d036a39daffb6ab4b0637ba5f791a0634557cfe967453971e9e8d0eda2025547984caeeba2d41df6287028487f51523923105354a003ec9984c4e0db622cd8c12b1dfaf3c0dd22b3a1b5384b1ab285bc8f9d6f1d74db4b3d07bdc6fddc5"}, @NFTA_DATA_VALUE={0xab, 0x1, "edfdf1ee9d0174dbfc01bca09741020f282e75a6ccab05693d4976f16fc6de5d964aac7b956358eb6b4ebccdf9adaa39bb3a841093373dc369eaf2f8ca6cd3c33621d36992092f9cb3b42eb27441d7c8305fc51945f5d05a888b1235a5e4402650b21390bc416a515c4d0b231c8e57eb717b08bf1d64a298c6965a3a6ebfc33138081105fee9b19f3628deb782ec1ae802cdf1ff46e2de27b430d7dada69741e910867703f0a8d"}, @NFTA_DATA_VALUE={0xcf, 0x1, "3b2de3de81e74d002a9538101e221a9cc60d9880114511a43ab9af72e163f027a473737853027a716b5488576cf3ef179947bb74d57b8ed5ecee02596950d607ccf842859b72a957e632032b6e438a66a6f239c8d6f029b73abc48f457bdd3dcf2631f5579cdd84979a6525236dfae13315c5fa1a2fe993f11f058e2099360effc06d30e050a1ca9e963adc4ed40ff44e8c39d8c9b8964c268be4b42df8f3528fc78d84cc16ae1fb761a7bfcc521a8fff6b2b0e47c516003e36478686639c2ca76be9df438a18883eb4701"}, @NFTA_DATA_VALUE={0xfc, 0x1, "6d1744dc124e39ecceccbd1ae1a92c84fce328a142b8d3835bdeaef65a847e309d1d5b6b7353fdb6a4dbd76224a8b5a3661016c75c9186833429e34a62670348f4099326b3fd2f3af1b55fa851b32d27983c1733dfbbaccfa16647996d5f19253c8333069be52904c5c76b382b0f55465a43212eb05e6b9b3bb1498ee29ed97206d2423c46beb08fa1917d467577dfe3a589ad1c6e0fc7444997681aac3758a7e11d4c9759305f4bfd2e47685972e01967a660e06c97e68d1fa77bb095a512cfac42e1e0304437fc6e1558ec4909f81bd99aea404e5adf9fd79c10d90d93bb5ba466d53db007e27052167cb866b9ea0105dade5a221d0b09"}, @NFTA_DATA_VALUE={0xad, 0x1, "88a8d455e8a1b336ecdcd7b250a18f6c786f322852c9eda58677af38b7af12ab15ff483304fc0bd5c1031f0e93dda8cfc656f9ce7d2185b848cd102c67ea97ca8cf5cab6c22a5818d3f0d59076ee6d7ff65b3366849ce5d161d1d3b84cbae3c072f158d0442938dda55e6fd78e2550ef4c330e3e502505e1c8082b7af743130679ca64ec4c899ef069f8ab6aef7b96adda0656e453298946e945c8b1b09f60113eed7c269bf22d124a"}, @NFTA_DATA_VALUE={0xf, 0x1, "d4dccb1a59714e11cb9bb4"}]}, @NFTA_SET_ELEM_EXPR={0x5c4, 0x7, 0x0, 0x1, @immediate={{0xe}, @val={0x5b0, 0x2, 0x0, 0x1, [@NFTA_IMMEDIATE_DATA={0x1c0, 0x2, 0x0, 0x1, [@NFTA_DATA_VERDICT={0x14, 0x2, 0x0, 0x1, [@NFTA_VERDICT_CODE={0x8, 0x1, 0x0, 0x1, 0xfffffffffffffffd}, @NFTA_VERDICT_CHAIN_ID={0x8, 0x3, 0x1, 0x0, 0x1}]}, @NFTA_DATA_VALUE={0xa6, 0x1, "71db6906959ce7ccf3ceade9861f7bf9dfa316f98089c2a44d5b6779eb4760a77cddf3612ffc622eab553f47a68f7ce25af3bd5d204f8a9ba091a1d4543b0dbec4dc2db00d44c2f21746e43ba88ed794f46fdd074bdb7e1cd4b485a7c57806dd4ace81899cad467993a1ac62404a93beef63b3db041af1bb52e9b932776472784396eb1fbd309e90d22e6310446ed4817286e10c60003c1dcee9a9cf20e9516aaac4"}, @NFTA_DATA_VALUE={0x7, 0x1, "dc1ceb"}, @NFTA_DATA_VALUE={0xb7, 0x1, "a91b24739d218eb452e299f6cf10ea0a0726b981dafb285a01538d39d72994597aaed9e2ebe73b55e52b25fa184f4e600d343acf617b408dc64aadb7666bf60a2d3ad9ddbf86d807f26b5f0f78dc546e24123a18ccfb7de0f9145694557301bedfeb304ade334fe7a0050590683dc79039d376457eb80a0da7ce479253eec087e874daef4fa3dddf41fb511652d15dc38b38f4598f65e388ea9a99ef2ed6f7fe12360d4fe5e0d3cb24daa0974cf4add2a477c0"}, @NFTA_DATA_VALUE={0x3e, 0x1, "6e70a8cb52e5376deb8d92e84f0858ea4a350a15a07c5fa29a9fb8dbcd425de15631a1a98cc542303c71966d685640e5d9790f8ca2d97d7d5ca3"}]}, @NFTA_IMMEDIATE_DREG={0x8, 0x1, 0x1, 0x0, 0xc}, @NFTA_IMMEDIATE_DATA={0x1c8, 0x2, 0x0, 0x1, [@NFTA_DATA_VERDICT={0x34, 0x2, 0x0, 0x1, [@NFTA_VERDICT_CODE={0x8, 0x1, 0x0, 0x1, 0xfffffffffffffffe}, @NFTA_VERDICT_CHAIN={0x9, 0x2, 'syz2\x00'}, @NFTA_VERDICT_CODE={0x8, 0x1, 0x0, 0x1, 0xfffffffffffffffe}, @NFTA_VERDICT_CHAIN_ID={0x8, 0x3, 0x1, 0x0, 0x1}, @NFTA_VERDICT_CHAIN={0x9, 0x2, 'syz1\x00'}]}, @NFTA_DATA_VERDICT={0x18, 0x2, 0x0, 0x1, [@NFTA_VERDICT_CODE={0x8, 0x1, 0x0, 0x1, 0xfffffffffffffffb}, @NFTA_VERDICT_CHAIN={0x9, 0x2, 'syz0\x00'}]}, @NFTA_DATA_VALUE={0x100, 0x1, "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"}, @NFTA_DATA_VALUE={0x78, 0x1, "6f915f0a75f662aa720164ed6a876826fdb88f6e6976a3529706619ccd9141f417ddc837379614774f6737a3b1ecd67b09d8ae70ce442a6ca5d589a2c5d3219879ef9147186efa20f922bb4adcd3d0a65961199012d041db5d3a97d6d008b73557cfa715c5ede5397cf3d3c4882c2f5bd809e394"}]}, @NFTA_IMMEDIATE_DATA={0x21c, 0x2, 0x0, 0x1, [@NFTA_DATA_VALUE={0x2a, 0x1, "c4da5dffa9a73a153b41328e6c119c4206326fe5f87ff13234147dab148e4214a307a4c590fc"}, @NFTA_DATA_VERDICT={0x10, 0x2, 0x0, 0x1, [@NFTA_VERDICT_CHAIN={0x9, 0x2, 'syz2\x00'}]}, @NFTA_DATA_VERDICT={0x20, 0x2, 0x0, 0x1, [@NFTA_VERDICT_CODE={0x8, 0x1, 0x0, 0x1, 0xfffffffffffffffd}, @NFTA_VERDICT_CODE={0x8, 0x1, 0x0, 0x1, 0xfffffffffffffffb}, @NFTA_VERDICT_CHAIN={0x9, 0x2, 'syz2\x00'}]}, @NFTA_DATA_VALUE={0xee, 0x1, "4e0d6a865f0ce17c79a3ae4fa1676808eb30348e9df853c60c0ba50298865bb807bdac4268a01807eea6f27ce8a31bc1707559adf26d002781b6e0153d95bddb0e66f0bc5ba501987e011931070eef4166027ee7c26a57ad4093d08034039b0606f5cfb14c5e0a1cada5705fdbd6decd33b826570d2c4532b87e73f37e1ab26930406d5763afa370fc2485092416ae5cf0009889884380b21eeb7089e9e04332f44667ad42f6b64294a0c5a679ad2281e8e0df97ceb7d3fdf20e262c23556540f5cff4053b6c922000d143ba208e1a48c1f5ed88408a462dfec1919ee568af9c29d04156fdf8de94fd0d"}, @NFTA_DATA_VERDICT={0x3c, 0x2, 0x0, 0x1, [@NFTA_VERDICT_CODE={0x8, 0x1, 0x0, 0x1, 0xfffffffffffffffb}, @NFTA_VERDICT_CODE={0x8, 0x1, 0x0, 0x1, 0xfffffffffffffffc}, @NFTA_VERDICT_CHAIN_ID={0x8, 0x3, 0x1, 0x0, 0x2}, @NFTA_VERDICT_CHAIN={0x9, 0x2, 'syz1\x00'}, @NFTA_VERDICT_CHAIN_ID={0x8, 0x3, 0x1, 0x0, 0x4}, @NFTA_VERDICT_CHAIN={0x9, 0x2, 'syz1\x00'}]}, @NFTA_DATA_VALUE={0x37, 0x1, "6fb336f73899eb96aaa9fc7be164537770b95739b0ed5637c390fa5e4bace64e98a2fd03f48425ab937b96e75616d647ee3d8d"}, @NFTA_DATA_VERDICT={0x2c, 0x2, 0x0, 0x1, [@NFTA_VERDICT_CHAIN_ID={0x8, 0x3, 0x1, 0x0, 0x3}, @NFTA_VERDICT_CHAIN_ID={0x8, 0x3, 0x1, 0x0, 0x4}, @NFTA_VERDICT_CODE={0x8}, @NFTA_VERDICT_CODE={0x8, 0x1, 0x0, 0x1, 0xffffffffffffffff}, @NFTA_VERDICT_CODE={0x8, 0x1, 0x0, 0x1, 0xffffffffffffffff}]}, @NFTA_DATA_VERDICT={0x2c, 0x2, 0x0, 0x1, [@NFTA_VERDICT_CHAIN_ID={0x8, 0x3, 0x1, 0x0, 0x2}, @NFTA_VERDICT_CHAIN_ID={0x8, 0x3, 0x1, 0x0, 0x3}, @NFTA_VERDICT_CODE={0x8, 0x1, 0x0, 0x1, 0xfffffffffffffffb}, @NFTA_VERDICT_CODE={0x8, 0x1, 0x0, 0x1, 0xfffffffffffffffb}, @NFTA_VERDICT_CODE={0x8, 0x1, 0x0, 0x1, 0xfffffffffffffffc}]}]}]}}}, @NFTA_SET_ELEM_KEY_END={0x17c, 0xa, 0x0, 0x1, [@NFTA_DATA_VERDICT={0x48, 0x2, 0x0, 0x1, [@NFTA_VERDICT_CHAIN_ID={0x8, 0x3, 0x1, 0x0, 0x2}, @NFTA_VERDICT_CODE={0x8, 0x1, 0x0, 0x1, 0xfffffffffffffffb}, @NFTA_VERDICT_CHAIN={0x9, 0x2, 'syz1\x00'}, @NFTA_VERDICT_CODE={0x8, 0x1, 0x0, 0x1, 0xfffffffffffffffd}, @NFTA_VERDICT_CODE={0x8, 0x1, 0x0, 0x1, 0xfffffffffffffffb}, @NFTA_VERDICT_CHAIN_ID={0x8, 0x3, 0x1, 0x0, 0x2}, @NFTA_VERDICT_CHAIN_ID={0x8, 0x3, 0x1, 0x0, 0x1}, @NFTA_VERDICT_CHAIN_ID={0x8, 0x3, 0x1, 0x0, 0x3}]}, @NFTA_DATA_VERDICT={0x10, 0x2, 0x0, 0x1, [@NFTA_VERDICT_CHAIN={0x9, 0x2, 'syz0\x00'}]}, @NFTA_DATA_VERDICT={0x1c, 0x2, 0x0, 0x1, [@NFTA_VERDICT_CHAIN_ID={0x8, 0x3, 0x1, 0x0, 0x2}, @NFTA_VERDICT_CODE={0x8, 0x1, 0x0, 0x1, 0xffffffffffffffff}, @NFTA_VERDICT_CODE={0x8, 0x1, 0x0, 0x1, 0xffffffffffffffff}]}, @NFTA_DATA_VERDICT={0x20, 0x2, 0x0, 0x1, [@NFTA_VERDICT_CODE={0x8}, @NFTA_VERDICT_CHAIN={0x9, 0x2, 'syz2\x00'}, @NFTA_VERDICT_CODE={0x8}]}, @NFTA_DATA_VALUE={0x14, 0x1, "1a79fe30e1ae3b300171eb2d76e628eb"}, @NFTA_DATA_VERDICT={0x38, 0x2, 0x0, 0x1, [@NFTA_VERDICT_CODE={0x8, 0x1, 0x0, 0x1, 0xffffffffffffffff}, @NFTA_VERDICT_CHAIN_ID={0x8, 0x3, 0x1, 0x0, 0x3}, @NFTA_VERDICT_CHAIN_ID={0x8, 0x3, 0x1, 0x0, 0x3}, @NFTA_VERDICT_CHAIN={0x9, 0x2, 'syz0\x00'}, @NFTA_VERDICT_CODE={0x8, 0x1, 0x0, 0x1, 0xfffffffffffffffc}, @NFTA_VERDICT_CODE={0x8, 0x1, 0x0, 0x1, 0xfffffffffffffffd}]}, @NFTA_DATA_VALUE={0x97, 0x1, "93dee3b579a390e0abab6e475a2b534269faeb3ec0080dae07f64aeee7993f1c07397b18f44aa24488a28ce988514a8cabf078119288fc4a558ab5fefef3adde1065f1e32eb53d32e17c5c1bc64672c74596099a0b71b4733ea5fdf2b81ce7aa8b7acf7da22666e16bcea5b3d986c914d0e4dbd8b8663788b0ddaed14da8cfbc0bd45a3fa4243f19b97d1349289469345e3eaf"}]}]}, {0x240, 0x0, 0x0, 0x1, [@NFTA_SET_ELEM_EXPRESSIONS={0xd0, 0xb, 0x0, 0x1, [{0x1c, 0x1, 0x0, 0x1, @redir={{0xa}, @val={0xc, 0x2, 0x0, 0x1, [@NFTA_REDIR_FLAGS={0x8, 0x3, 0x1, 0x0, 0x8}]}}}, {0xc, 0x1, 0x0, 0x1, @fib={{0x8}, @void}}, {0x14, 0x1, 0x0, 0x1, @byteorder={{0xe}, @void}}, {0x10, 0x1, 0x0, 0x1, @inner={{0xa}, @void}}, {0x10, 0x1, 0x0, 0x1, @meta={{0x9}, @void}}, {0x10, 0x1, 0x0, 0x1, @meta={{0x9}, @void}}, {0x14, 0x1, 0x0, 0x1, @notrack={{0xc}, @val={0x4, 0x2, 0x0, 0x1, ["", ""]}}}, {0x14, 0x1, 0x0, 0x1, @connlimit={{0xe}, @void}}, {0x10, 0x1, 0x0, 0x1, @bitwise={{0xc}, @void}}, {0x28, 0x1, 0x0, 0x1, @byteorder={{0xe}, @val={0x14, 0x2, 0x0, 0x1, [@NFTA_BYTEORDER_OP={0x8, 0x3, 0x1, 0x0, 0x1}, @NFTA_BYTEORDER_LEN={0x8, 0x4, 0x1, 0x0, 0xc2}]}}}]}, @NFTA_SET_ELEM_USERDATA={0xc4, 0x6, 0x1, 0x0, "622f55ac6e1bc7cf3fcf0a19a73bc2ebe6ea950288912108ab7fefba185b91c73bcc8c7d2139532059152c3ab13867e14c03ec7ae0752452a383a3ebdd073abc2f687cd897013217fc4d99b7c30b60fe0f511210f6d6fc936b2a4eefe4e6c180a03e06169c89f8bb5c194ac17fa5d2bae2302b8d45941123a0c3d9a7a73508193e32c24663bbdaecdf9dda378ca0a534fcdc72ce449655e5d90c48b0e58b92988b6a334150e53347d518c0486da02c0da904e54d1a89f1c2093fcd7b832045b3"}, @NFTA_SET_ELEM_OBJREF={0x9, 0x9, 'syz0\x00'}, @NFTA_SET_ELEM_DATA={0x9c, 0x2, 0x0, 0x1, [@NFTA_DATA_VERDICT={0x20, 0x2, 0x0, 0x1, [@NFTA_VERDICT_CHAIN_ID={0x8, 0x3, 0x1, 0x0, 0x4}, @NFTA_VERDICT_CHAIN={0x9, 0x2, 'syz0\x00'}, @NFTA_VERDICT_CODE={0x8, 0x1, 0x0, 0x1, 0xfffffffffffffffb}]}, @NFTA_DATA_VERDICT={0x54, 0x2, 0x0, 0x1, [@NFTA_VERDICT_CODE={0x8, 0x1, 0x0, 0x1, 0xfffffffffffffffc}, @NFTA_VERDICT_CODE={0x8, 0x1, 0x0, 0x1, 0xfffffffffffffffe}, @NFTA_VERDICT_CHAIN={0x9, 0x2, 'syz2\x00'}, @NFTA_VERDICT_CHAIN={0x9, 0x2, 'syz1\x00'}, @NFTA_VERDICT_CHAIN={0x9, 0x2, 'syz1\x00'}, @NFTA_VERDICT_CODE={0x8, 0x1, 0x0, 0x1, 0xffffffffffffffff}, @NFTA_VERDICT_CHAIN_ID={0x8, 0x3, 0x1, 0x0, 0x3}, @NFTA_VERDICT_CHAIN={0x9, 0x2, 'syz2\x00'}]}, @NFTA_DATA_VERDICT={0xc, 0x2, 0x0, 0x1, [@NFTA_VERDICT_CHAIN_ID={0x8, 0x3, 0x1, 0x0, 0x4}]}, @NFTA_DATA_VERDICT={0x18, 0x2, 0x0, 0x1, [@NFTA_VERDICT_CHAIN={0x9, 0x2, 'syz2\x00'}, @NFTA_VERDICT_CODE={0x8, 0x1, 0x0, 0x1, 0xfffffffffffffffb}]}]}]}]}, @NFTA_SET_ELEM_LIST_ELEMENTS={0x18, 0x3, 0x0, 0x1, [{0x14, 0x0, 0x0, 0x1, [@NFTA_SET_ELEM_KEY={0x4}, @NFTA_SET_ELEM_EXPIRATION={0xc, 0x5, 0x1, 0x0, 0x49}]}]}]}], {0x14, 0x11, 0x1, 0x0, 0x0, {0x1}}}, 0xe68}, 0x1, 0x0, 0x0, 0x4000850}, 0x40) socket$netlink(0x10, 0x3, 0x0) socket$nl_netfilter(0x10, 0x3, 0xc) syz_init_net_socket$nfc_llcp(0x27, 0x2, 0x1) socket$unix(0x1, 0x2, 0x0) socket$nl_generic(0x10, 0x3, 0x10) ioctl$BTRFS_IOC_DEV_REPLACE(0xffffffffffffffff, 0xca289435, 0x0) r2 = socket$inet6_sctp(0xa, 0x1, 0x84) syz_init_net_socket$bt_sco(0x1f, 0x5, 0x2) socket(0x10, 0x80003, 0x0) ioctl$sock_SIOCGIFINDEX(r2, 0x8933, 0x0) bpf$MAP_CREATE(0x100000000000000, &(0x7f0000000440)=ANY=[@ANYBLOB="1200000042000000080000000200000000000000", @ANYRES32=0x1, @ANYRES32=0x0, @ANYRES32, @ANYBLOB], 0x48) socket(0x10, 0x3, 0x0) socket$inet6_udp(0xa, 0x2, 0x0) socket$igmp6(0xa, 0x3, 0x2) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000640)) socket$nl_route(0x10, 0x3, 0x0) socket$nl_route(0x10, 0x3, 0x0) r3 = socket$inet6_sctp(0xa, 0x1, 0x84) r4 = bpf$PROG_LOAD(0x5, &(0x7f0000000740)={0xc, 0x8, &(0x7f0000000d80)=ANY=[@ANYBLOB="1800000000000000000000000000000018020000", @ANYRES32=r3, @ANYBLOB="0000000000000000b703000000000000850000000d000000b70000000000000095"], &(0x7f00000000c0)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0xd, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2}, 0x94) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f00000005c0)={r4, 0x3e8, 0xf, 0x0, &(0x7f0000000000)="c1df07000000d30a298ee688884787", 0x0, 0x3ff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4}, 0x50) bpf$PROG_LOAD(0x5, &(0x7f0000000180)={0x1a, 0x4, &(0x7f0000000040)=ANY=[@ANYBLOB="180000000300000000000000fe"], &(0x7f00000000c0)='GPL\x00', 0x0, 0x0, 0x0, 0x100, 0x37, '\x00', 0x0, @tracing=0x1a, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2}, 0x94) bind$inet6(0xffffffffffffffff, &(0x7f0000f5dfe4)={0xa, 0x4e20, 0x0, @empty}, 0x1c) ioctl$sock_SIOCETHTOOL(0xffffffffffffffff, 0x8946, 0x0) 3.664360078s ago: executing program 4 (id=5749): r0 = bpf$MAP_CREATE(0x0, &(0x7f00000000c0)=@base={0x1b, 0x0, 0x0, 0x8000}, 0x48) ioctl$XFS_IOC_FD_TO_HANDLE(r0, 0xc038586a, &(0x7f0000000340)={r0, &(0x7f0000000240)='syzkaller\x00', 0x200000, 0x0, 0x5bb1, &(0x7f00000002c0)={@_ha_fsid}, &(0x7f0000000300)=0xcb30}) connect$inet(0xffffffffffffffff, &(0x7f0000000340)={0x2, 0x0, @remote={0xac, 0x14, 0xffffffffffffffff}}, 0x10) listen(0xffffffffffffffff, 0x8) sendmmsg$unix(0xffffffffffffffff, &(0x7f0000001840)=[{{0x0, 0x0, &(0x7f00000000c0)=[{&(0x7f0000000140)="c6", 0x1}], 0x1, 0x0, 0x0, 0x20048054}}], 0x1, 0x8800) r1 = socket$inet_sctp(0x2, 0x1, 0x84) setsockopt$IP_VS_SO_SET_ADD(r1, 0x0, 0x482, &(0x7f0000000040)={0x84, @broadcast, 0x4e21, 0x3, 'rr\x00', 0x1, 0x10000004, 0x8}, 0x2c) r2 = socket$inet_sctp(0x2, 0x1, 0x84) socket$packet(0x11, 0x2, 0x300) socket$inet(0x2, 0x2, 0x0) syz_genetlink_get_family_id$tipc2(&(0x7f0000000d00), 0xffffffffffffffff) sendmsg$sock(0xffffffffffffffff, 0x0, 0x10) r3 = openat$rfkill(0xffffffffffffff9c, &(0x7f0000000040), 0x801, 0x0) write$rfkill(r3, &(0x7f0000000080)={0x0, 0x1, 0x3, 0x3, 0xfd}, 0x8) write$rfkill(r3, &(0x7f0000000340)={0x6, 0x7, 0x13, 0x0, 0x1}, 0x8) socket$alg(0x26, 0x5, 0x0) connect$inet(r2, 0x0, 0x0) r4 = openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0x40040, 0x0) ioctl$TUNSETIFF(r4, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x7101}) socket$unix(0x1, 0x1, 0x0) socket$kcm(0x11, 0x3, 0x0) r5 = socket$unix(0x1, 0x1, 0x0) ioctl$sock_SIOCGIFINDEX(r5, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) r7 = socket(0x400000000010, 0x3, 0x0) r8 = socket$unix(0x1, 0x1, 0x0) ioctl$sock_SIOCGIFINDEX(r8, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r7, &(0x7f00000012c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000740)=@newqdisc={0x34, 0x24, 0x4ee4e6a52ff56541, 0x70bd0a, 0x25dfdbff, {0x0, 0x0, 0x0, r9, {0x0, 0x4}, {0xffff, 0xffff}, {0xfff2, 0xfff1}}, [@qdisc_kind_options=@q_cake={{0x9}, {0x4}}]}, 0x34}}, 0x0) sendmsg$nl_route_sched(r7, &(0x7f0000000580)={0x0, 0x0, &(0x7f0000000300)={&(0x7f00000005c0)=@newtfilter={0x8c, 0x2c, 0xd27, 0x70bd25, 0x25dfdbfe, {0x0, 0x0, 0x0, r6, {0xb, 0xfff3}, {}, {0x7}}, [@filter_kind_options=@f_matchall={{0xd}, {0x58, 0x2, [@TCA_MATCHALL_ACT={0x54, 0x2, [@m_skbedit={0x50, 0x1, 0x0, 0x0, {{0xc}, {0x24, 0x2, 0x0, 0x1, [@TCA_SKBEDIT_PARMS={0x18, 0x2, {0x0, 0x8, 0xffffffffffffffff, 0x6, 0x77}}, @TCA_SKBEDIT_PTYPE={0x6, 0x7, 0x2}]}, {0x4}, {0xc, 0x7, {0x0, 0x1}}, {0xc, 0x8, {0x2, 0x3}}}}]}]}}]}, 0x8c}, 0x1, 0x0, 0x0, 0x4814}, 0x0) r10 = openat$tun(0xffffffffffffff9c, &(0x7f0000000400), 0x0, 0x0) close(r10) 3.384324394s ago: executing program 3 (id=5752): r0 = socket$netlink(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$devlink(&(0x7f0000000040), 0xffffffffffffffff) r2 = socket$key(0xf, 0x3, 0x2) setsockopt$sock_int(r2, 0x1, 0x8, &(0x7f00000001c0), 0x4) sendmsg$key(r2, 0x0, 0x4000000) sendmsg$key(r2, &(0x7f0000000200)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f0000000240)=ANY=[@ANYBLOB="0212000002"], 0x10}}, 0x0) r3 = socket$nl_xfrm(0x10, 0x3, 0x6) bpf$BPF_PROG_WITH_BTFID_LOAD(0x5, &(0x7f0000000300)=@bpf_lsm={0xd, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41100, 0x40}, 0x94) r4 = openat$tun(0xffffffffffffff9c, &(0x7f0000000000), 0x40241, 0x0) ioctl$TUNSETIFF(r4, 0x400454ca, &(0x7f0000000200)={'syzkaller1\x00', 0xc201}) write$tun(r4, &(0x7f0000000340)=ANY=[@ANYBLOB="000086dd0001"], 0xfdef) sendmsg$nl_xfrm(r3, &(0x7f0000000480)={0x0, 0x0, &(0x7f00000000c0)={0x0}}, 0x0) sendmsg$DEVLINK_CMD_RATE_NEW(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000700)={&(0x7f0000000300)={0x34, r1, 0x1, 0x0, 0x25dfdbfb, {0x25}, [@handle=@nsim={{0xe}, {0xf, 0x2, {'netdevsim', 0x0}}}]}, 0x34}, 0x1, 0x0, 0x0, 0x41}, 0x0) r5 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r5, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000540)={0x18, 0x25, 0x301, 0x270bd24, 0x25dfdbfb, {0x1}, [@generic='T']}, 0x18}, 0x1, 0x0, 0x0, 0x44048}, 0x0) 3.350083152s ago: executing program 2 (id=5753): r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, 0x0, 0x0) socket$inet_icmp_raw(0x2, 0x3, 0x1) syz_init_net_socket$bt_hci(0x1f, 0x3, 0x5) close(0x4) syz_open_procfs$namespace(0x0, &(0x7f0000000200)='ns/pid_for_children\x00') unshare(0x6a040000) r1 = socket$inet6_tcp(0xa, 0x1, 0x0) close(r1) ioctl$FS_IOC_GETFSMAP(r0, 0xc0c0583b, &(0x7f00000006c0)=ANY=[@ANYBLOB="00000000000000000900000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000020000000180ffff060000000000000000f0ffffffffffffffffffff00000000060000000000000000000000000000000000000000000000000000000000000004000000fffffeff0500000000000000e07100000000000055000000000000000800000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000f00000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000edbd4f3f309b95cfa6d7f3d21f9c58720e384946c76e58afb634dabfa3"]) r2 = socket$inet6_mptcp(0xa, 0x1, 0x106) socket$inet6_tcp(0xa, 0x1, 0x0) socket$inet6_tcp(0xa, 0x1, 0x0) r3 = socket$packet(0x11, 0x2, 0x300) setsockopt$packet_tx_ring(r3, 0x107, 0xd, &(0x7f0000000380)=@req3={0x10000, 0x2, 0x10000, 0x1, 0x0, 0x1, 0xfffffffd}, 0xfdb6) socketpair(0x1, 0x3, 0x0, 0x0) getsockname$packet(0xffffffffffffffff, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0xd) sendto$packet(r3, 0x0, 0x0, 0x4004800, &(0x7f0000000080)={0x11, 0x15, r4, 0x1, 0x7f, 0x6, @remote}, 0x14) bind$inet6(r1, &(0x7f0000000040)={0xa, 0x4e22, 0x0, @empty, 0x1}, 0x1c) listen(r2, 0x0) r5 = socket$inet_mptcp(0x2, 0x1, 0x106) connect$inet(r5, &(0x7f0000000000)={0x2, 0x4e22, @empty}, 0x10) setsockopt$XDP_UMEM_COMPLETION_RING(0xffffffffffffffff, 0x11b, 0x6, &(0x7f00000000c0)=0x1005000, 0x4) r6 = accept(r2, 0x0, 0x0) r7 = socket$netlink(0x10, 0x3, 0x9) getsockname$packet(0xffffffffffffffff, 0x0, &(0x7f0000000080)) sendmsg$nl_route(r7, &(0x7f0000000040)={0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x44004}, 0x40000) sendmsg$TEAM_CMD_OPTIONS_SET(r6, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000140)=ANY=[], 0xfffffdef}, 0x1, 0x0, 0x0, 0x800}, 0x10) recvfrom(r5, &(0x7f0000000080)=""/60, 0xfffffffffffffeeb, 0x101, 0x0, 0x0) r8 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) bind$bt_hci(r8, 0x0, 0x0) 3.245671876s ago: executing program 4 (id=5754): socket$rds(0x15, 0x5, 0x0) (async) r0 = socket$rds(0x15, 0x5, 0x0) bind$rds(r0, &(0x7f0000000040)={0x2, 0x4e21, @local}, 0x10) socket$inet6_mptcp(0xa, 0x1, 0x106) (async) socket$inet6_mptcp(0xa, 0x1, 0x106) socket$nl_audit(0x10, 0x3, 0x9) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000001000)={0xffffffffffffffff, 0xffffffffffffffff}) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000fc0)) unshare(0x400) pselect6(0x40, &(0x7f00000001c0)={0x0, 0x7, 0x2, 0x6, 0x0, 0x23}, 0x0, &(0x7f00000002c0)={0x3ff, 0x0, 0x0, 0x800009, 0xffffffffffffffff, 0x0, 0x7fffffff, 0x5}, 0x0, 0x0) (async) pselect6(0x40, &(0x7f00000001c0)={0x0, 0x7, 0x2, 0x6, 0x0, 0x23}, 0x0, &(0x7f00000002c0)={0x3ff, 0x0, 0x0, 0x800009, 0xffffffffffffffff, 0x0, 0x7fffffff, 0x5}, 0x0, 0x0) sendmsg$inet(r1, &(0x7f0000001580)={0x0, 0x0, &(0x7f0000001400)=[{&(0x7f0000000080)="3bfdd75fa5717852d59a9367444a2130e72cd4dabc8854532cca0c32a5b9f844a4610c7525650ce3d3b76b15026d93e6dee896115e9364066aa3d14e33ef732b4681335c576902153114bdb9c74b538a71115fb1d1a63d1b04129661b29aab89d0be999a6b7c9bea755adedbf305a79f70b71d3d4c98577b49db4963ce89b0def5e840f459659cb6f86d56b069a5de11d601d348ff88ca6e5e2cfe40176880b33e9e8dbc32ba2e6a99b1b50276dc4f06166000d7069a3cc76f", 0xb9}, {&(0x7f0000000180)="892950e2405ee8629d9384a91c16d1706a3e61f305119f95cac0f1927f4c205b971eb41147cb1f86883d6910e68ac3996551800b3ec64b77f8444b18345a2c8b178eeeba0cde7319a5a46bfe7f5770e019efd9d52069edcced33a758c4e657f3a792dc193a1911b4e82ea800ad7afe03c851a8", 0x73}, {&(0x7f0000000200)="a68cde0d56b170df7710b54f17d9a39c4f98f3547190", 0x20000216}, {&(0x7f0000000240)="45e04400f2b383517a08c397dd0a76e67ecfc8e74573c24dedd3a48fb62418c1412fdcd15e888cb0f5d02e77bfecefda6b064c0bb2b66a9a522e63873dde02330510255eec7dfa1af708cdab59fb71eca786a359a2c3b0cbad35144ec5b069c53f90e43339845dc7fd140c55b0149ab38eb27c140f374bcc2c95b0b121d1a9302f3a01b888243b3fc0d46f0de0", 0x8d}, {&(0x7f0000000300)="87fb74cf4d67adbbd062637f514c1f5eb18d7b442e6457a356c6cb1f71a43dfae773c8489cce5145f92615d4bdb13ef54d6ae90ec7733180fcf5adf3e13fdb05b57b748bd14eda042a97fdd84498304a504a0a159b972e8200c2d0f536a3465ec498ed12b924bd134057df36129d3ebe3dd3ce9f0671e5278143e4afa3d43f444681de1b5f9725fca34fa357fe2154981666fb9dc202fc17a0199eb1c25bdd1005e590e84783ee9894c888998dc25a83c14aeee31d114acfa0bcd235d571cd765f4b9259ba43e6fc30291d8a642146c4771898030b736aeee6b247abb0784b154e104e7dcda401f9b1736fea30a41a4153fe6a9a525bd0a3487571f914f05b590e242341ade289d8f5b842c6be4a93c2755dfd47174def782a2f8f61c068b5a012f02c0801601e860def788121e8808c01fed4c920a3698d0d684920918c95b17f76bbcb4f265c931d8f79560ff8114b70f4dd6791e2ed70cfeb89905791b88be26efe1c5c66b7b50b3d2be0dbc066dfc31618f9507f6f340b85a2f76a6dcac9d6ccc289ace5e5fecd25afe22ffa451f5e365ab33cc985f2e9d7f7fb1be4794740a94215d7db14b0ffcec19e5e3c5ae0d8578ef3b65d2a7a77a11e390a6c3a6b391061c886b961e3c2f42d62047bfe1356a44b840d3d956105f4c0fa95db08c4933f00de77cdc057c28b41fecfc8398c442be1ad065954f6c9dfeb2fd7207e8548a00a1d50bdf522d2abfdafd71723616a34830fbfa8fc81e0c2639cc12f363a4919b7a00ac8189dad3e7e54122a2ef430f623658d5e281c9a19442995bb9b0e3f7d13e3016b6f9523be196bf23bbcc5ec802f43ef8b651d688d9d5a44f35c9847e4c32bce3e9ebed2326adadc76f06a195db32c80b3090d7cd65c9d8518ba4e528c5eb5c7a1c5695b21595fa8a8621734bfda8afddd65e1f37a1990220a00fa9bd2c22b0117ceb08ae6af3c944c2eca924abfddad065d1472d0c3f742a49b1e78c669471873706ad157d831d7482b773f07b0673a6ce1e227a7a4d13744bf459434c0ab1c323a38b1a84cbf1ce9741f2b8fdcc2e073e56171603d035aacd83e71d5132831f4f1e8bf517979f132a33fd03783272e9b8c96dfa4e1d320a58d82acfc8d3d53a5a52daafe4dc8be08f4ad53e11cc21374b6ff4ff5ea2ecc5d3f7c057f74f0098e57d990090475cdaffdef0da917653ed10fb70b94b72e5b4d95cbea0fc1dd2579635ad6ab545ba4d7b6d2f5442bdb78beb6c8ed62942a439117025b4566b48d9f3a17fdf4577e8606a4bc4c26557e58312fd2d1a541ebec3e5ae28eef8b2ab0597083716dd12889335570ee7839530eee879d9b137606cd4dd7103991671b4464bb68529eb19fb7a8845e3491bfbac688a87cf0744f429ea112014402915c4c1f6bae08d689d3cb7d641d7befe8fc74a2242310a9a367a39531b4c86da5b39df524e52f33ff9c40b48cb196ffc9ca855b6e698ade8a83e52b9ddc5031ff09e1907e4f8b0d07e64e1fb8e427f8819a7be907aa216bf8e2a4c7cc87ed53bf9490d4cc788b91f3b9f705e984a7e62c7a495e8421b97c39dc954b35468f17c6682334f4e16308448f457faeffff6d1f818522fa441d3a48168bdb12ffebace436a3915b63076cb6a655718647f87eaaf313b5bbd430421eed3a2215e439600a56eac8c65291eb103326a8034662bd337ab51577d9110ec7151be5cc9c54b2a30891acac5ad006ed537dbeb8f16eecbde7cf4e71373faf3c36b772f6d7ea9346875c8cf1049d49d4f8eb01b946c11e8c8e3ab2015f282167acddcc77fff03e1be9134252af0abfe538b4d25fc4ff874b52b9fb0996b5f32b4141dbd30578ff46e13ef6c63fc1620f62cb11a3dce401993976c272a5f62fde3f2a0e654d19e7a39dcdb622b9526d2a15cc18e6f817c916a00775353dd9c8954e66d0445b59bb0f5e6e3b46447232f52a0e398b057d123ef503afcbd48544db6434d2025bfc8dab72262a4fa5426a03061e7f8966e0086ff8ab5a91ab59f19b830394ee8bc76d6fb4816b8f4cde35b7eb9d3811228d51c54828f97fd1e648196c81bc73ed56249a59f318704e84656a6cedd2b8c1e1808d1cc648749abc643131e494c01336d4a14b8609656f2c972dc23c5c2e43fe40119fb88b5ec2aade35c03646e347354c493de8ab3672ccf94af0df333c6678299129d79be0eec281c5b3858ce3995566a390b674635b356692e3e9c53a089638ba0d69e772b7b410a5ae03de12e7de755ee559e1707b7b8003aabc8e2ce03c01e3183ff2d93262f6d5ceaafecdae66bc7cb3952c5a6571d864d502f281db5a228695badca5d022fdb6da56ab15dc377d1c1f8581ff56e28c2b2a84edb629547d28275c2ed571103b4ca7cdeb0776ba9f9dffcd78d21c3d4caa9289ed199672f4e7b912068c49c817114c37d37ea03954bae87d1ddae3da2ad85feb2fbb735b75a51f7bee5c8d88cc7bf64700d1a46ec6b631ae22ac7b06730a86a26bdcb992e1c7b50142de96b14a8468e4514068a30896fc677fddefaebb125c693a8d460469c7fe535f844781940f66d6abd091191c3122d584f5b0f5b0d443713d7d5186124d73de28aca30b719d4a55e09d259bddbf16995aeb1000880890afbd24d4066b0398985a40999de22ce176348e1c1f57eaf75b92a1e4f1482e89a00ac2cc36b20e36af9ec310599c19a5b1d6f8fadba104c58c801c6633315f82ebfa88faddd0b693e2f827f586c1cc5538e93bcf10f81af6dd7ee727df3b5018c0b4e31e40d040a47503b6ace4d29a1162ce487351825255f5584aff7cbd421f85c3d9fbb3784abd9848f16028b68f0d32ed8bb80106e8cc4acb939ff88bd39976d166b2addebf628b3fcd056da2f60e1b90f7a32702954921908ebccb683622a1f574ceba6951bef5e751c338c8279318dc28e36b9fc2bb17c3ad08aceb00fc388e6db112a738f86a4a1eb11526e1b9d73250b326285ed47c4398d93a3933d9a784249b65ad7d78a1f81d96ef36493ed693045a2150a8eb43cecc0c93e7d20b15b39a0646b081c2923b816365b7fbb41683a41732d942c5aa12faf876ec7f036becde8f3295af6dacff38d076d8e06260fee167703bb610745374a2758a6b88e465ca77d1f3105ae8b6b04a1eb509fb178d6249dbbc84d5d1d069278449a89d03e4a9a395d8170c329a296cfc329798cb9b9f1078d098cf3f989fd4ec53e013fbe917df35292d44fb1f3da4da4432a1847d4721514ade8cda5e5c0b51183580fc35266a970ebba74faeda56d4dcb56df51f96ad237452cedbd0cb2bee112713c3d450835811bf3da9745136d428e148fd0932dc77c8d8e61a16c625241fad8425b4ece394eedd5f165bd94923bfa1172be8edc8a4fcaae5f77ee8cc510192b27964da09c3e84efb4bc7154da1a24da8b7e544b42278d2574687ec76143afa6cf193d52a2a7f4c20ee57b6056a1337d5e408117a6cf1ab49c8980f39597f69902085d3e8d374d44e6ab4ed1185a26be2bc7281e9cfbbeb6bed899aa1924d3faa06d95999fbeaf2337494e0c2c39eef5a73fcde84459a9ea48d4e015d9e5bb5839354967ce02f637bc8678d2595b9a918fc36b927d7501f0ac2e3471ce02b5df355689c87f191ef5390900a41deec29984e45a878ece964b0009aad561316fc3b30ce1b49266d32eb17cd30f3e17e1f59014e8c518940dd0a093d1349c1a7c2581963bbe0ba372b6426e81c33c71b2ec8141c5713e52a37fff0a417a5b259e1420d9fb6a731f5baa0cc494221947895aa8fa14745a986a366bff9d0c239a19f85372497565b5b703da16439019df5f3d29f4247fb528854c9648630f03e9dedde5a08a47728ea6a4d42e62eff6fa3bd402325e0f4387b60171c37c180f958ad80955779c899517e7ea76eed00598e01552eaaf08b723daf9d466e8c57af43a15a46528b1119f5074aa3c51f77357ebe158275bc06b89640d7ce3c0a03af01418d7dc6ae8a1be8ab08c1722d66d1e9277480b8b178447667c024f9b78f8a878a2d7cf8e83e5104f6964b2907a989abafc7d7d0df941abf3d7283b6a11d46c2911a42182ec27ab785d92946e1ee8ef44846d561850d2a98c305c382f36d4cfc9b2bfd3b86ef21a0d187adcafbec8268c7d662a34dda1c83c4967097743133bc8c587edf249f5668c34ddb112fa4eb1bea9c8f6a000f1f34428b54688a5e214a7919868b25dbe930e86a243ecf54afe0b518c647d04873d2cf62cb2ab27f00015537a4fd2ea3dc8777abdf3284622347016566da0b9c406ca8c40694e4013a53fbf2e803d51b0bbe5e9df5fc74f66be618856357ccf803c53ed0e3b3fe79f69f0ede9b565d8f7a8ce5aa8cbb4e8fa61be3fd00ffb07e45065498925c14c0b311942d4ed951ad6237aadb5405bc7b2d79e1fd295b7c2ed8efa883e44c86a5053e2f421c6d4dc0c47d3a05d911db37d6efdb8e50fb3f06139ac147bc7162c21aece79eaf72e9779f19eb5395cec3d15a7594ea70a6b373d98651d2215b210f037ea3f8a57ded74474f6fdb64a08b56af52168da70b30aee03472cd8bee5af04cad7303004a4aba464b99", 0xcb3}], 0x5, &(0x7f0000001480)=[@ip_pktinfo={{0x1c, 0x0, 0x8, {0x0, @private, @multicast1}}}], 0x20}, 0x0) recvmsg$unix(r2, &(0x7f0000001140)={0x0, 0x0, &(0x7f0000001040)=[{&(0x7f00000015c0)=""/4096, 0x7ffff000}], 0x1, 0x0, 0x2}, 0x40000300) sendmsg$inet(r0, &(0x7f0000000480)={&(0x7f0000000000)={0x2, 0x4e22, @initdev={0xac, 0x1e, 0x1, 0x0}}, 0x10, &(0x7f0000000380)=[{&(0x7f00000001c0)="91cfdfefdb", 0x1a000}], 0x1}, 0x0) 2.926765311s ago: executing program 4 (id=5756): socket$packet(0x11, 0x3, 0x300) (async) socket$nl_route(0x10, 0x3, 0x0) (async) socket$nl_netfilter(0x10, 0x3, 0xc) sendmmsg$alg(0xffffffffffffffff, &(0x7f0000005580)=[{0x0, 0x0, &(0x7f0000000800), 0x0, &(0x7f0000000880)=ANY=[@ANYBLOB="1800000000000000170100000300000000000000000000001800000000000000170100000400000006000000000000001800000000000000170100000400000000000028000000007000000000000000170100000200000056000000ed9653c8b89b0f778be50f2fa271183aae1da7a60a461e1dab29bbbdd0cdc5d9abbd14ffee8eda8342e666a79a4513675029398fa1813ecf756853fa492705e5bed45d96b450bd5e319486eb44218c8f289d"], 0x1d0, 0x2004010}, {0x0, 0x0, 0x0, 0x0, &(0x7f0000000c80)=[@assoc={0x18, 0x117, 0x4, 0x401}, @op={0x18, 0x117, 0x3, 0x1}, @assoc={0x18, 0x117, 0x4, 0x9}, @op={0x18}, @op={0x18, 0x117, 0x3, 0x1}], 0x78, 0x4800}, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8000}], 0x3, 0x4080) socket$nl_generic(0x10, 0x3, 0x10) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000000)={0x18, 0x2, 0x0, &(0x7f00000057c0)='syzkaller\x00', 0x800, 0x0, 0x0, 0x0, 0x10}, 0x94) (async) r0 = socket$inet_udp(0x2, 0x2, 0x0) bind$inet(r0, &(0x7f00000006c0)={0x2, 0x4e20, @dev={0xac, 0x14, 0x14, 0xb}}, 0x10) (async) setsockopt$inet_udp_int(r0, 0x11, 0x67, 0x0, 0x0) (async) sendto$inet(r0, &(0x7f00000000c0)="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", 0x142, 0x0, 0x0, 0x0) (async) unshare(0x6a040000) (async) r1 = socket$inet6_tcp(0xa, 0x1, 0x0) close(r1) (async) r2 = socket$inet6_mptcp(0xa, 0x1, 0x106) (async) bind$inet6(r1, &(0x7f0000000040)={0xa, 0x4e22, 0x0, @empty, 0x1}, 0x1c) listen(r2, 0x0) (async) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000900)={0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x80}, 0x20000800) r3 = socket$inet_mptcp(0x2, 0x1, 0x106) connect$inet(r3, &(0x7f0000000000)={0x2, 0x4e22, @empty}, 0x10) (async) r4 = socket(0x10, 0x3, 0x0) sendmsg$nl_route(r4, &(0x7f0000000080)={0xffffffffffffffff, 0x0, &(0x7f00000001c0)={&(0x7f0000000000)=ANY=[], 0x28}}, 0x0) (async) ioctl$TUNSETIFF(0xffffffffffffffff, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x7101}) (async) r5 = socket(0x400000000010, 0x3, 0x0) (async) socket$inet_smc(0x2b, 0x1, 0x0) (async) r6 = socket$unix(0x1, 0x1, 0x0) ioctl$sock_SIOCGIFINDEX(r6, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r5, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000004cc0)=@newtfilter={0x7c, 0x2c, 0xd3f, 0x30bd29, 0x25dfdbfd, {0x0, 0x0, 0x0, r7, {0xe, 0xfff2}, {}, {0x10, 0x300}}, [@filter_kind_options=@f_basic={{0xa}, {0x56, 0x2, [@TCA_BASIC_EMATCHES={0x48, 0x2, 0x0, 0x1, [@TCA_EMATCH_TREE_HDR={0x8, 0x1, {0x1}}, @TCA_EMATCH_TREE_HDR={0x0, 0x1, {0xfff7}}, @TCA_EMATCH_TREE_LIST={0x38, 0x2, 0x0, 0x1, [@TCF_EM_IPT={0x34, 0x1, 0x0, 0x0, {{0x10, 0x9, 0xc8c6}, [@TCA_EM_IPT_NFPROTO={0x0, 0x4, 0x7}, @TCA_EM_IPT_HOOK={0x8, 0x1, 0x3}, @TCA_EM_IPT_MATCH_REVISION={0x5, 0x3, 0x8}, @TCA_EM_IPT_MATCH_NAME={0xb}, @TCA_EM_IPT_NFPROTO={0xfffffe08, 0x4, 0x2}]}}]}]}]}}]}, 0x7c}, 0x1, 0x0, 0x0, 0x10}, 0x48c4) r8 = socket(0x10, 0x803, 0x0) sendmsg$nl_route(r8, &(0x7f0000000380)={0x0, 0x4076cbba9945d516, &(0x7f0000000340)={0x0, 0x14}}, 0x0) (async) getsockname$packet(r8, &(0x7f0000000140)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f00000005c0)=0x56) 2.364291998s ago: executing program 3 (id=5760): socketpair$unix(0x1, 0x5, 0x0, &(0x7f00000006c0)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r0, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) getsockopt$sock_cred(r0, 0x1, 0x11, &(0x7f00000000c0), &(0x7f0000000100)=0xc) (async) recvmmsg$unix(r1, &(0x7f0000000980)=[{{&(0x7f0000000000)=@abs, 0x6e, &(0x7f0000000240)=[{&(0x7f0000000180)=""/191, 0xbf}], 0x1, &(0x7f0000000280)=[@cred={{0x1c}}, @cred={{0x1c}}, @rights={{0x10}}, @rights={{0x14, 0x1, 0x1, [0xffffffffffffffff]}}], 0x68}}, {{&(0x7f0000000300), 0x6e, &(0x7f0000000540)=[{&(0x7f0000000a40)=""/114, 0x71}, {&(0x7f0000000600)=""/86, 0x56}, {&(0x7f0000000480)=""/124, 0x7c}, {&(0x7f0000000500)=""/13, 0xd}], 0x4, &(0x7f0000000580)=[@cred={{0x1c}}, @cred={{0x1c}}, @rights={{0x34, 0x1, 0x1, [0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff]}}], 0x78}}, {{0x0, 0x0, &(0x7f0000000840)=[{&(0x7f0000000700)=""/25}, {&(0x7f0000000740)=""/196}], 0x0, &(0x7f0000000880)=[@cred, @rights={{0x0, 0x1, 0x1, [0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff]}}, @cred, @rights={{0x0, 0x1, 0x1, [0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff]}}, @rights={{0x0, 0x1, 0x1, [0xffffffffffffffff, 0xffffffffffffffff]}}, @cred, @cred, @cred]}}], 0x400000000000090, 0x10100, &(0x7f0000000680)={0x0, 0x989680}) (async) r3 = socket$inet_tcp(0x2, 0x1, 0x0) shutdown(r3, 0x0) (async) r4 = socket$nl_netfilter(0x10, 0x3, 0xc) r5 = socket$inet_udp(0x2, 0x2, 0x0) bind$inet(r5, &(0x7f00000001c0)={0x2, 0x1, @local}, 0x10) (async) connect$inet(r5, 0x0, 0x0) (async) sendmmsg(r5, &(0x7f0000007fc0), 0x800001d, 0x0) (async) r6 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r6, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000100)=ANY=[@ANYBLOB="300000001000010025bd7000f9dbdf2500000806", @ANYRES32=0x0, @ANYBLOB="158804000301040008001b000000000008000d0003000000"], 0x30}, 0x1, 0x0, 0x0, 0x40801}, 0x4000000) (async) r7 = socket$inet6_sctp(0xa, 0x801, 0x84) sendmmsg$inet6(r7, &(0x7f00000025c0)=[{{&(0x7f0000000000)={0xa, 0x4e22, 0x0, @private0={0xfc, 0x0, '\x00', 0x1}}, 0x1c, &(0x7f0000000300)=[{&(0x7f0000000040)='P', 0x1}], 0x1}}, {{&(0x7f0000000100)={0xa, 0x0, 0x0, @private1}, 0x1c, &(0x7f0000002400)=[{&(0x7f0000000140)='i', 0x1}], 0x1}}], 0x2, 0x8010) (async) shutdown(r2, 0x1) (async) getsockopt$inet_sctp6_SCTP_DEFAULT_SNDINFO(r7, 0x84, 0x22, &(0x7f00000002c0)={0x0, 0x4, 0x6, 0x800}, &(0x7f0000000340)=0x10) (async) sendmsg$IPSET_CMD_CREATE(r4, &(0x7f0000001240)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000100)={0x14, 0x2, 0x6, 0x201, 0xa, 0x0, {0x0, 0x0, 0x2000}}, 0x14}}, 0x40880) (async) r8 = socket(0x2b, 0x1, 0x1) setsockopt$inet6_MCAST_MSFILTER(r8, 0x29, 0x30, &(0x7f0000000080)={0x2, {{0xa, 0x4e1f, 0xffffffda, @mcast1, 0x72}}}, 0x90) (async) bind$inet(r3, &(0x7f0000000040)={0x2, 0x4e1e, @private=0xa010100}, 0x10) (async) connect$inet(r3, &(0x7f0000000180)={0x2, 0x4e21, @local}, 0x10) (async) r9 = openat$tun(0xffffffffffffff9c, &(0x7f0000000000), 0x48241, 0x0) ioctl$TUNSETIFF(r9, 0x400454ca, &(0x7f00000000c0)={'syzkaller1\x00', 0x6bf1c2d5adba8c32}) (async) r10 = socket$kcm(0x2, 0xa, 0x2) ioctl$SIOCSIFHWADDR(r10, 0x8914, &(0x7f0000000180)={'syzkaller1\x00', @link_local}) (async) r11 = socket$igmp6(0xa, 0x3, 0x2) ioctl$sock_SIOCSIFVLAN_ADD_VLAN_CMD(r11, 0x8983, &(0x7f0000000300)={0x0, 'syzkaller1\x00', {0x2}}) (async) write$tun(r9, &(0x7f0000000340)=ANY=[@ANYBLOB="000022f0ffffffffffff000000000000810000020800450000b0000000000011907800000000e0000001000017c100907801000000010000000000004080000000000000000000000000200000000000000000000000000000d89bc63b93b6d4092beb790344022cb8c49cc8022b5296be4673efd95df3fdc5a71ed1c7bc91dcf39f5550601185fa4afcc815bc21b9e7be1497a9edd45189dacc307c357402a8c5a9c5b5b06cbc715d9569f2b2ee1cf210c588b60723e0cc4e1fdd8d6d186fe9ee4939689f00"], 0xc6) (async) setsockopt$inet_tcp_TCP_REPAIR(r3, 0x6, 0x13, 0x0, 0x0) 2.276869317s ago: executing program 1 (id=5761): r0 = bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f0000000540)=ANY=[@ANYBLOB="1b0000000000000000000000000004"], 0x50) bpf$PROG_LOAD(0x5, &(0x7f0000000080)={0x0, 0x0, 0x0, &(0x7f0000000180)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0xffffffffffffffff}, 0x94) r1 = socket(0x1e, 0x4, 0x0) setsockopt$packet_tx_ring(r1, 0x10f, 0x87, &(0x7f0000000140)=@req3={0x7813, 0x3, 0x0, 0x81, 0x1ff, 0x1, 0x1}, 0x1c) sendmmsg(r1, &(0x7f00000030c0)=[{{0x0, 0xa9cc7003, &(0x7f0000000400)=[{&(0x7f00000000c0)="ee", 0x101d0}], 0x1}}], 0x400000000000181, 0x9200000000000000) sendmmsg(r1, &(0x7f0000002b40)=[{{&(0x7f0000000000)=@tipc=@name={0x1e, 0x2, 0x2, {{0x43, 0x3}, 0x1}}, 0x80, 0x0}}], 0x1, 0x8000) recvmmsg$unix(r1, &(0x7f00000002c0)=[{{0x0, 0x0, &(0x7f0000000100)=[{&(0x7f00000001c0)=""/211, 0xd3}], 0x1}}], 0x1, 0x40000100, 0x0) socketpair(0x26, 0x800, 0x6, &(0x7f0000000000)={0xffffffffffffffff}) r3 = socket$inet_sctp(0x2, 0x5, 0x84) close(r3) r4 = socket$inet6_sctp(0xa, 0x5, 0x84) getsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX3(r4, 0x84, 0x6f, &(0x7f0000000040)={0x0, 0x10, &(0x7f0000000000)=[@in={0x2, 0x0, @private=0xa010101}]}, &(0x7f0000000080)=0x10) getsockopt$inet_sctp6_SCTP_GET_ASSOC_ID_LIST(r4, 0x84, 0x1d, &(0x7f0000000140)={0x1, [0x0]}, &(0x7f0000000240)=0x8) sendmsg$inet_sctp(r3, &(0x7f0000000400)={0x0, 0x0, &(0x7f00000005c0)=[{&(0x7f0000000440)="be6f88e904006dd2bd0117c586023380ec289d6c15d3fc0fb99d7337093227523ac2fe6bc9040e01b630dcecf43a9dc2ec73ca8323adbd5e3a0b91ebec615dfb1a23c01b1977a0b14dc32cafe1a70aaa8fb8a3683c7a114b56dd7f22da4178ffd809abddedaa6dfd4637286f12610033f3a62b203f7432b1ce1d701f3b38d77f0fd821733693a34566fd7aba12f7c8f6ff8092e2028fafa4bf4fa980508d371217af62f17c4eac6032968e543fd5a565b8efc372aa05a1b5add6c58ac7d8f828a9bfcb1081ffaecb10e29000"/219, 0xfe98}], 0x1, &(0x7f00000000c0)=ANY=[@ANYBLOB="2000000000000000840000000200000006000400280100000b008002", @ANYRES32=r5], 0x20, 0x6044}, 0x6) getsockopt$inet_sctp_SCTP_PARTIAL_DELIVERY_POINT(r2, 0x84, 0x13, &(0x7f0000000040)={r5, 0x40}, &(0x7f0000000140)=0x8) r6 = openat$tun(0xffffffffffffff9c, &(0x7f0000000080), 0x200, 0x0) close(r6) openat$ppp(0xffffffffffffff9c, &(0x7f0000000080), 0x100, 0x0) ioctl$TUNSETOFFLOAD(r6, 0xc004743e, 0x110e22fff7) bpf$MAP_CREATE(0x0, &(0x7f0000000180)=ANY=[@ANYBLOB="bc00"], 0x50) ioctl$TUNGETVNETLE(r6, 0x40047451, &(0x7f0000000180)) r7 = socket$nl_rdma(0x10, 0x3, 0x14) sendmsg$RDMA_NLDEV_CMD_SET(r7, &(0x7f0000002640)={0x0, 0x0, &(0x7f0000002600)={&(0x7f0000000400)={0x24, 0x1402, 0x1, 0x70bd26, 0x25dfdbfb, "", [@RDMA_NLDEV_ATTR_DEV_INDEX={0x8, 0x1, 0x2}, @RDMA_NLDEV_ATTR_DEV_NAME={0x9, 0x2, 'syz2\x00'}]}, 0x24}, 0x1, 0x0, 0x0, 0x81}, 0x4850) close(r6) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000001c0)={0x18, 0xf, &(0x7f00000000c0)=@ringbuf={{0x18, 0x0, 0x0, 0x0, 0x8b, 0x0, 0x0, 0x0, 0x43}, {{0x18, 0x1, 0x1, 0x0, r0}, {}, {0x7, 0x0, 0xb, 0x3, 0x0, 0x0, 0xfeff}, {0x85, 0x0, 0x0, 0x86}, {0x7, 0x1, 0xb, 0x9, 0x0, 0x20}}, {{0x5, 0x0, 0x5, 0x9, 0x0, 0x1, 0x80000000}}, [], {{0x7, 0x1, 0xb, 0x1, 0x9, 0x0, 0x8004}, {0x7, 0x0, 0xb, 0x2, 0x0, 0x0, 0x3}, {0x85, 0x0, 0x0, 0x2a}, {0x7, 0x0, 0xb, 0x0, 0x0, 0x0, 0x500}}}, &(0x7f0000000000)='syzkaller\x00', 0x3, 0x0, 0x0, 0x41000, 0x4b, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x8000d}, 0x94) r8 = socket$inet6(0xa, 0x4, 0x5) setsockopt$IP6T_SO_SET_REPLACE(r8, 0x29, 0x40, &(0x7f0000000d40)=@filter={'filter\x00', 0x2, 0x4, 0x4a8, 0xffffffff, 0x0, 0xf0, 0xf0, 0xfeffffff, 0xffffffff, 0x3d8, 0x3d8, 0x3d8, 0xffffffff, 0x4, 0x0, {[{{@ipv6={@initdev={0xfe, 0x88, '\x00', 0x1, 0x0}, @mcast1, [0xff, 0xff, 0x0, 0xffffff00], [], 'pimreg0\x00', 'bond_slave_0\x00', {}, {}, 0x6, 0x0, 0x3}, 0x2f2, 0xa8, 0xf0}, @common=@inet=@TEE={0x48, 'TEE\x00', 0x1, {@ipv4=@dev={0xac, 0x14, 0x14, 0x1d}, 'caif0\x00', {0x7}}}}, {{@ipv6={@mcast1, @loopback, [], [0x0, 0x0, 0xffffffff], 'netdevsim0\x00', 'geneve0\x00'}, 0x0, 0xa8, 0x118}, @common=@unspec=@NFLOG={0x70, 'NFLOG\x00', 0x0, {0x0, 0x0, 0x0, 0x0, 0x0, "ddabf53d9b1435965491f6531877000001e770b689f173dfa40b58c10327e3121114449fd20ba2be6eb0cde72a972f25170163232ed996b4789b9d00"}}}, {{@uncond, 0x0, 0xa8, 0x1d0}, @common=@unspec=@SECMARK={0x128, 'SECMARK\x00', 0x0, {0x1, 0x602, 'system_u:object_r:boot_t:s0\x00'}}}], {{'\x00', 0x0, 0xa8, 0xd0}, {0x28}}}}, 0x508) 1.916490403s ago: executing program 0 (id=5762): r0 = socket$packet(0x11, 0x2, 0x300) setsockopt$packet_fanout(r0, 0x107, 0x12, &(0x7f0000000040)={0x0, 0x6}, 0x4) setsockopt$packet_fanout_data(r0, 0x107, 0x16, &(0x7f0000000100)={0x3, &(0x7f0000000200)=[{0x28, 0x0, 0x4, 0xfffff034}, {0x40, 0x83, 0x0, 0x6}, {0x6, 0x5, 0x0, 0xfffffc}]}, 0x10) setsockopt$packet_rx_ring(0xffffffffffffffff, 0x107, 0x5, &(0x7f0000000180)=@req3={0xc59, 0x2, 0x9, 0x8, 0xb82, 0x1}, 0x1c) r1 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_tcp_int(r1, 0x6, 0x13, &(0x7f0000000040)=0x100000001, 0x76dc) connect$inet6(r1, &(0x7f0000000080)={0xa, 0x4e21, 0xfffffffe, @mcast2, 0x4}, 0x1c) setsockopt$inet6_tcp_TCP_ULP(0xffffffffffffffff, 0x6, 0x1f, &(0x7f00000002c0), 0xfffffffffffffd87) setsockopt$inet6_tcp_TLS_TX(r1, 0x11a, 0x2, &(0x7f0000000140)=@ccm_128={{0x303}, '\x00M\x00', "4fa2ae56cf5f9fbe933eff968fd6e5ec", "e3d5b881", "30003c313a30c01b"}, 0x28) setsockopt$inet6_tcp_TLS_RX(r1, 0x11a, 0x2, &(0x7f0000000000)=@gcm_256={{}, "5a6db1cb8ef7241a", "3d555ac9c65c6fc74a611b2abdbf647873cdcc6f35df5319a462964a5ff14fd2", "7325045a", "57d9b1394ab6f637"}, 0x38) openat$tun(0xffffffffffffff9c, 0x0, 0x40841, 0x0) socket$kcm(0x2, 0xa, 0x2) bpf$PROG_LOAD(0x5, 0x0, 0x0) ioctl$sock_SIOCBRDELBR(r0, 0x89a1, &(0x7f00000000c0)='veth0_vlan\x00') r2 = socket$pppl2tp(0x18, 0x1, 0x1) r3 = socket$inet6_udp(0xa, 0x2, 0x0) connect$pppl2tp(r2, &(0x7f0000000000)=@pppol2tp={0x18, 0x1, {0x0, r0, {0x2, 0x4e24, @broadcast}, 0x2, 0x0, 0x4}}, 0x26) r4 = socket$pppl2tp(0x18, 0x1, 0x1) connect$pppl2tp(r4, &(0x7f0000000040)=@pppol2tpv3={0x18, 0x1, {0x3, r2, {0x2, 0x4e22, @broadcast}, 0x2, 0x9800}}, 0x2e) ioctl$PPPIOCGL2TPSTATS(r2, 0x80487436, &(0x7f0000000540)="43210098ed") r5 = bpf$MAP_CREATE(0x0, 0x0, 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0x14, &(0x7f0000000280)=ANY=[@ANYBLOB="180000000000000000000000000000001801000020646c2100000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000007300000018110000", @ANYRES32=r5], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0xe, '\x00', 0x0, @fallback=0x25, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) syz_emit_ethernet(0x3a, &(0x7f0000000300)=ANY=[@ANYBLOB="bbbbbbbbbbbbaaaaaaaaaaaa08004503002c000000000204907800000000e00000014e234e23001890780400000101ffffff0000000000000000"], 0x0) r6 = socket$inet(0xa, 0x801, 0x0) listen(r6, 0x8) accept4(r3, 0x0, 0x0, 0x800) socket$inet6_tcp(0xa, 0x1, 0x0) 1.905466694s ago: executing program 3 (id=5763): socket$nl_xfrm(0x10, 0x3, 0x6) openat$cgroup_ro(0xffffffffffffff9c, 0x0, 0x26e1, 0x0) sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000100)=ANY=[@ANYBLOB="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"], 0x17d4}}, 0x0) r0 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$IPCTNL_MSG_CT_GET(0xffffffffffffffff, &(0x7f0000000540)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000003c0)={0x108, 0x1, 0x1, 0x101, 0x0, 0x0, {0x2, 0x0, 0x3}, [@CTA_ID={0x8, 0xc, 0x1, 0x0, 0x4}, @CTA_SEQ_ADJ_ORIG={0x34, 0xf, 0x0, 0x1, [@CTA_SEQADJ_OFFSET_AFTER={0x8, 0x3, 0x1, 0x0, 0x9}, @CTA_SEQADJ_CORRECTION_POS={0x8, 0x1, 0x1, 0x0, 0x8}, @CTA_SEQADJ_OFFSET_BEFORE={0x8, 0x2, 0x1, 0x0, 0x6e}, @CTA_SEQADJ_OFFSET_AFTER={0x8, 0x3, 0x1, 0x0, 0x4}, @CTA_SEQADJ_CORRECTION_POS={0x8, 0x1, 0x1, 0x0, 0x2}, @CTA_SEQADJ_CORRECTION_POS={0x8, 0x1, 0x1, 0x0, 0x7fffffff}]}, @CTA_NAT_SRC={0x68, 0x6, 0x0, 0x1, [@CTA_NAT_V4_MINIP={0x8, 0x1, @loopback}, @CTA_NAT_V4_MAXIP={0x8, 0x2, @rand_addr=0x64010102}, @CTA_NAT_V4_MINIP={0x8, 0x1, @multicast2}, @CTA_NAT_V4_MINIP={0x8, 0x1, @initdev={0xac, 0x1e, 0x0, 0x0}}, @CTA_NAT_PROTO={0x3c, 0x3, 0x0, 0x1, [@CTA_PROTONAT_PORT_MIN={0x6, 0x1, 0x4e24}, @CTA_PROTONAT_PORT_MIN={0x6, 0x1, 0x4e23}, @CTA_PROTONAT_PORT_MIN={0x6, 0x1, 0x4e23}, @CTA_PROTONAT_PORT_MIN={0x6, 0x1, 0x4e20}, @CTA_PROTONAT_PORT_MAX={0x6, 0x2, 0x4e22}, @CTA_PROTONAT_PORT_MIN={0x6, 0x1, 0x4e24}, @CTA_PROTONAT_PORT_MIN={0x6, 0x1, 0x4e23}]}, @CTA_NAT_V4_MINIP={0x8, 0x1, @rand_addr=0x64010100}]}, @CTA_LABELS_MASK={0x1c, 0x17, [0x9, 0x7, 0x1e0, 0xed00, 0xc, 0x417]}, @CTA_SEQ_ADJ_ORIG={0xc, 0xf, 0x0, 0x1, [@CTA_SEQADJ_OFFSET_BEFORE={0x8}]}, @CTA_PROTOINFO={0x28, 0x4, 0x0, 0x1, @CTA_PROTOINFO_SCTP={0x24, 0x3, 0x0, 0x1, [@CTA_PROTOINFO_SCTP_STATE={0x5, 0x1, 0xda}, @CTA_PROTOINFO_SCTP_VTAG_ORIGINAL={0x8, 0x2, 0x1, 0x0, 0x4}, @CTA_PROTOINFO_SCTP_VTAG_ORIGINAL={0x8}, @CTA_PROTOINFO_SCTP_VTAG_REPLY={0x8, 0x3, 0x1, 0x0, 0x5}]}}]}, 0x108}, 0x1, 0x0, 0x0, 0x20044080}, 0x48000) sendmsg$nl_generic(r0, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000340)={&(0x7f0000000380)=ANY=[@ANYBLOB="4801000042000100fffffffffddbdf250200000004003880100001800c00c8000200000000000003200104801c01"], 0x148}, 0x1, 0x0, 0x0, 0x8800}, 0x4040) 1.793826577s ago: executing program 3 (id=5764): r0 = socket(0x40000000015, 0x5, 0x0) sendto$inet6(r0, 0x0, 0x0, 0x0, &(0x7f0000000040)={0xa, 0x4e23, 0x8, @private2, 0x5}, 0x1c) r1 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) sendmsg$NLBL_MGMT_C_REMOVE(r1, &(0x7f0000000180)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x100200}, 0xc, &(0x7f0000000100)={&(0x7f00000000c0)={0x30, 0x0, 0x100, 0x70bd26, 0x25dfdbff, {}, [@NLBL_MGMT_A_IPV4ADDR={0x8, 0x7, @private=0xa010102}, @NLBL_MGMT_A_IPV6ADDR={0x14, 0x5, @initdev={0xfe, 0x88, '\x00', 0x0, 0x0}}]}, 0x30}, 0x1, 0x0, 0x0, 0x4004001}, 0x4000) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000006c0)={0x15, 0x3, &(0x7f0000000000)=ANY=[@ANYBLOB="3daa000000000000711013000000000095"], &(0x7f0000000480)='syzkaller\x00'}, 0x94) r2 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r2, &(0x7f0000000140)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000080)=ANY=[@ANYBLOB="4400000004f8ff00000000dfffffffffffffd200", @ANYRES32=0x0, @ANYRES16], 0xfd12}}, 0x0) 1.669935594s ago: executing program 0 (id=5765): r0 = socket$alg(0x26, 0x5, 0x0) bind$alg(r0, &(0x7f00000003c0)={0x26, 'skcipher\x00', 0x0, 0x0, 'xts(serpent)\x00'}, 0x58) (async) bind$alg(r0, &(0x7f00000003c0)={0x26, 'skcipher\x00', 0x0, 0x0, 'xts(serpent)\x00'}, 0x58) setsockopt$ALG_SET_KEY(r0, 0x117, 0x1, 0x0, 0x0) accept4(r0, 0x0, 0x0, 0x800) (async) r1 = accept4(r0, 0x0, 0x0, 0x800) sendmsg$nl_route(r1, &(0x7f0000000300)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f0000000180)=@ipv6_delroute={0x1c, 0x19, 0x100, 0x70bd2d, 0x25dfdbff, {0xa, 0x10, 0x0, 0x5a, 0x0, 0x2, 0xfd, 0xa, 0x2a00}}, 0x1c}, 0x1, 0x0, 0x0, 0x20000050}, 0x8800) (async) sendmsg$nl_route(r1, &(0x7f0000000300)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f0000000180)=@ipv6_delroute={0x1c, 0x19, 0x100, 0x70bd2d, 0x25dfdbff, {0xa, 0x10, 0x0, 0x5a, 0x0, 0x2, 0xfd, 0xa, 0x2a00}}, 0x1c}, 0x1, 0x0, 0x0, 0x20000050}, 0x8800) r2 = socket$inet_mptcp(0x2, 0x1, 0x106) setsockopt$inet_tcp_int(r2, 0x6, 0x6, &(0x7f0000000040)=0x24, 0x4) sendmmsg$inet_sctp(r1, &(0x7f00000008c0)=[{0x0, 0x0, &(0x7f0000000100)=[{&(0x7f0000000340)="d8dd8f69a6", 0x5}], 0x1, 0x0, 0x0, 0x4c944}], 0x1, 0x40840) recvmmsg$unix(r1, &(0x7f0000003980)=[{{0x0, 0x0, &(0x7f0000000380)=[{&(0x7f0000000200)=""/14, 0xe}, {&(0x7f0000000000)=""/86, 0x56}], 0x2}}, {{&(0x7f0000000080), 0xcf, &(0x7f0000000680)=[{&(0x7f00000017c0)=""/4096, 0x1000}, {&(0x7f00000027c0)=""/145, 0x91}, {&(0x7f0000002880)=""/91, 0x5b}, {&(0x7f0000003a00)=""/4098, 0x1002}, {&(0x7f0000000140)=""/3}, {&(0x7f00000001c0)=""/40}, {&(0x7f0000000440)=""/198}, {&(0x7f0000000540)=""/72}, {&(0x7f00000005c0)=""/185}], 0x4, &(0x7f0000003940)}}], 0x2, 0x10101, 0x0) close(r1) 1.58936461s ago: executing program 3 (id=5766): r0 = bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="1b00000000000000000000000000040000000000", @ANYRES32=0x0, @ANYBLOB="00000000c0"], 0x48) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000180)={0x1f, 0xb, &(0x7f0000000100)=ANY=[@ANYBLOB="18000000040000000000000003000000180100002020692500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000001800000850000008800000095"], &(0x7f0000000040)='GPL\x00', 0x6, 0x0, 0x0, 0x40f00, 0x38, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x20000000}, 0x94) bpf$PROG_LOAD(0x5, &(0x7f0000002c40)={0x7, 0x17, &(0x7f00000007c0)=@ringbuf={{0x18, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2}, {{0x18, 0x1, 0x1, 0x0, r0}, {}, {}, {0x85, 0x0, 0x0, 0x5}}, {{0x6}, {0x27}}, [@printk={@lli, {}, {0x5}, {0x7, 0x0, 0x3}, {}, {0x7, 0x0, 0xb, 0x3, 0x0, 0x0, 0x40}, {0x25}}], {{0x4, 0x1, 0x9, 0x3, 0x2}, {0x5, 0x0, 0xb, 0x3, 0x0, 0x0, 0x1}, {0x85, 0x0, 0x0, 0x76}}}, &(0x7f0000000000)='GPL\x00', 0xf, 0x0, 0x0, 0x0, 0xe, '\x00', 0x0, @fallback=0xa, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) 1.556284408s ago: executing program 1 (id=5767): r0 = syz_init_net_socket$nl_rdma(0x10, 0x3, 0x10) sendmsg$netlink(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)=[{&(0x7f0000000340)={0x48, 0x2e, 0x1, 0x0, 0x0, "", [@nested={0x4, 0x119}, @nested={0x34, 0x11, 0x0, 0x1, [@nested={0x2e, 0xcf, 0x0, 0x1, [@generic="d478b585fcf4962925eb81095dd3d92e983e841d6ef7368187237f5e91a74d57e8aa", @typed={0x5, 0x4a, 0x0, 0x0, @str='\x00'}]}]}]}, 0x48}], 0x1}, 0x300) r1 = socket$netlink(0x10, 0x3, 0x0) (async) r2 = socket(0x10, 0x803, 0x0) pipe(&(0x7f0000000140)={0xffffffffffffffff, 0xffffffffffffffff}) write(r4, &(0x7f0000000040)="4017cb5ebb2482aeafa8e4e9433e66a1e1f3a8210dd328b4e6318f580f0368c795fbaea213029696dfe61f58f2db485c5c0c1dc647cda0209e78f92e51a29960d9e381ae8ec01870728fea22d83f9932707434cdb812f818933de6cc87f057ea0f849df688f7e2d7c3cc86875126b5ea3398d23a559c5e132b8335d082f0115e142c4c77688a41e343a1881f44b95ef0aff88b3c19bcf9cd864a9b", 0xfffffc8c) vmsplice(r4, &(0x7f0000001500)=[{&(0x7f0000000100)="ba9123", 0x3}], 0x1, 0x0) (async) vmsplice(r3, &(0x7f0000000000)=[{&(0x7f0000000500), 0x3528a9c0}], 0x1, 0x0) sendmsg$RDMA_NLDEV_CMD_NEWLINK(r0, &(0x7f00000004c0)={&(0x7f0000000140)={0x10, 0x0, 0x0, 0x4}, 0xc, &(0x7f0000000480)={&(0x7f00000003c0)={0x88, 0x1403, 0x10, 0x70bd2a, 0x25dfdbfe, "", [{{0x9, 0x2, 'syz0\x00'}, {0x8, 0x41, 'siw\x00'}, {0x14, 0x33, 'gre0\x00'}}, {{0x9, 0x2, 'syz0\x00'}, {0x8, 0x41, 'rxe\x00'}, {0x14, 0x33, 'veth1_to_batadv\x00'}}, {{0x9, 0x2, 'syz2\x00'}, {0x8, 0x41, 'rxe\x00'}, {0x14, 0x33, 'veth0_virt_wifi\x00'}}]}, 0x88}, 0x1, 0x0, 0x0, 0x4000000}, 0x40849) sendmsg$IPVS_CMD_SET_INFO(r2, &(0x7f0000000b00)={0x0, 0x0, &(0x7f0000000ac0)={0x0, 0x14}}, 0x0) r5 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) bind$bt_hci(r5, &(0x7f0000000000)={0x1f, 0xffffffffffffffff, 0x3}, 0x6) write$bt_hci(r5, &(0x7f0000000580)=ANY=[@ANYBLOB="5200000002"], 0x8) (async) getsockname$packet(r2, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route(r2, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000240)=ANY=[@ANYRES64=r1, @ANYRES32=r6, @ANYBLOB="01000000000000001c0012000c000100626f6e64000000000c0002000800010006"], 0x3c}}, 0x0) (async) openat$tun(0xffffffffffffff9c, 0x0, 0x48241, 0x0) (async) ioctl$TUNSETIFF(0xffffffffffffffff, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x7101}) (async) r7 = socket(0x400000000010, 0x3, 0x0) (async) socket(0x10, 0x3, 0x0) r8 = socket$unix(0x1, 0x5, 0x0) ioctl$sock_SIOCGIFINDEX(r8, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r7, &(0x7f0000000380)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000180)=@newqdisc={0x38, 0x24, 0x4ee4e6a52ff56541, 0x70bd2a, 0x25dfdbfd, {0x0, 0x0, 0x0, r9, {0x0, 0xfff1}, {0xffff, 0xffff}, {0x0, 0x3}}, [@qdisc_kind_options=@q_multiq={{0xb}, {0x8, 0x2, {0x42}}}]}, 0x38}}, 0x0) r10 = socket(0x10, 0x803, 0x0) (async) r11 = socket$unix(0x1, 0x5, 0x0) ioctl$SIOCX25SFACILITIES(r7, 0x89e3, &(0x7f00000001c0)={0x40, 0x8, 0x4, 0x8, 0x23dc2be0}) (async) ioctl$sock_SIOCGIFINDEX(r11, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r10, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000480)=@newtfilter={0xcc, 0x2c, 0xd27, 0x0, 0x0, {0x0, 0x0, 0x0, r12, {0xe, 0x7}, {}, {0x7}}, [@filter_kind_options=@f_u32={{0x8}, {0xa0, 0x2, [@TCA_U32_SEL={0x94, 0x5, {0x7, 0xef, 0x8, 0x8, 0x5, 0x9, 0x7, 0x0, [{0x1000, 0x4, 0x401, 0x6}, {0x6, 0x7, 0x1008, 0x3}, {0xfffffff9, 0x43, 0x7ffd, 0x6}, {0x7fde, 0x40, 0x51, 0x3ff}, {0x5, 0xb, 0x8, 0x42}, {0x6, 0x4, 0x8, 0x8}, {0x8001, 0x0, 0x0, 0x8001}, {0x1, 0x1800004, 0x8000}]}}, @TCA_U32_CLASSID={0x8, 0x1, {0x5, 0xfff3}}]}}]}, 0xcc}, 0x1, 0x0, 0x0, 0x80}, 0xc040) (async) sendmsg$nl_route_sched(r7, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000001380)=@newtfilter={0xc4, 0x2c, 0xd27, 0x70bd24, 0x25dfdbfb, {0x0, 0x0, 0x0, r9, {0x4}, {}, {0x1, 0x4}}, [@filter_kind_options=@f_u32={{0x8}, {0x98, 0x2, [@TCA_U32_SEL={0x94, 0x5, {0x0, 0x6, 0xa, 0x101, 0x7, 0xe, 0x7, 0x2, [{0x8e5, 0x8b39, 0x3a, 0x40}, {0x8, 0x7, 0x9, 0x2d}, {0xffffff89, 0x9d2, 0x2, 0x10000}, {0x9, 0x3, 0x8, 0x8}, {0x0, 0x8, 0x2, 0x5}, {0x553e3387, 0x3, 0x8000, 0x2}, {0x8001, 0x2, 0x1}, {0xffffffff, 0xa8c, 0xfffffff8, 0xd}]}}]}}]}, 0xc4}, 0x1, 0x0, 0x0, 0x20000010}, 0x20048004) sendmsg$nl_route_sched(r7, &(0x7f0000006040)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000300)=@gettfilter={0x2c, 0x2e, 0x205, 0x70bd2c, 0x25dfdafc, {0x0, 0x0, 0x0, r9, {0xa, 0xc}, {0x0, 0xfff1}, {0x1}}, [{0x8}]}, 0x2c}, 0x1, 0x0, 0x0, 0x20000801}, 0x4049080) sendmsg$nl_route(r1, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000180)=ANY=[@ANYBLOB="3c00000010001fff000000000100000000000000", @ANYRES32=0x0, @ANYBLOB="0000000000000000140012800900010076657468000000000400028008000a00", @ANYRES32=r6], 0x3c}, 0x1, 0x0, 0x0, 0x40000}, 0x0) 1.47784851s ago: executing program 0 (id=5768): r0 = socket$inet_mptcp(0x2, 0x1, 0x106) r1 = socket$nl_generic(0x10, 0x3, 0x10) r2 = socket$inet6_udp(0xa, 0x2, 0x0) setsockopt$IP6T_SO_SET_REPLACE(r2, 0x29, 0x40, &(0x7f0000000000)=@mangle={'mangle\x00', 0x2, 0x6, 0x640, 0x2e0, 0x0, 0x3b0, 0x2e0, 0x1b0, 0x570, 0x570, 0x570, 0x570, 0x570, 0x6, 0x0, {[{{@uncond, 0x0, 0x188, 0x1b0, 0x0, {0x7a00000010000000}, [@common=@srh1={{0x90}, {0x0, 0x0, 0x0, 0x0, 0x0, @empty, @mcast2, @private2, [], [0x0, 0xffffffff], [], 0x0, 0x10}}, @common=@inet=@multiport={{0x50}, {0x0, 0xc, [0x0, 0x0, 0x0, 0x4e21, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffc], [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4]}}]}, @HL={0x28}}, {{@ipv6={@mcast2, @dev={0xfe, 0x80, '\x00', 0x2}, [0x0, 0x0, 0x0, 0xff000000], [], 'bridge0\x00', 'veth1_vlan\x00'}, 0x0, 0xf8, 0x130, 0x0, {}, [@inet=@rpfilter={{0x28}, {0x2}}, @inet=@rpfilter={{0x28}, {0xc}}]}, @common=@inet=@SET3={0x38, 'SET\x00', 0x3, {{}, {0x0, 0x2}, {0x0, 0xfd}, 0x300, 0x4}}}, {{@ipv6={@ipv4, @dev={0xfe, 0x80, '\x00', 0x32}, [], [], 'nicvf0\x00', 'bond_slave_0\x00', {0xff}, {}, 0x0, 0x2}, 0x0, 0xa8, 0xd0, 0x48000000}, @common=@inet=@SYNPROXY={0x28, 'SYNPROXY\x00', 0x0, {0x0, 0x1, 0x7ff}}}, {{@ipv6={@loopback, @local, [0xffffff00, 0x0, 0xff, 0xff000000], [0xff000000, 0xff000000, 0xffffffff, 0xffffff00], 'macvlan0\x00', 'veth1_to_bridge\x00', {0xff}, {0xff}, 0x8, 0x81, 0x1, 0x36}, 0x0, 0xa8, 0xf0}, @SNPT={0x48, 'SNPT\x00', 0x0, {@ipv4, @ipv6=@private1, 0x0, 0x37}}}, {{@uncond, 0x0, 0xa8, 0xd0}, @HL={0x28}}], {{'\x00', 0x0, 0xa8, 0xd0}, {0x28}}}}, 0x6a0) r3 = syz_genetlink_get_family_id$ethtool(&(0x7f0000000080), 0xffffffffffffffff) sendmsg$ETHTOOL_MSG_FEATURES_SET(r1, &(0x7f0000002540)={0x0, 0x0, &(0x7f0000002500)={&(0x7f0000000140)=ANY=[@ANYBLOB='<\x00\x00\x00', @ANYRES16=r3, @ANYBLOB="0100fcffffff000000002f000000100003800400040008000200fd7f000318000180140002006d61637674617030"], 0x3c}}, 0x0) socket$packet(0x11, 0x3, 0x300) r4 = socket$nl_generic(0x10, 0x3, 0x10) r5 = syz_genetlink_get_family_id$gtp(&(0x7f0000000000), 0xffffffffffffffff) sendmsg$GTP_CMD_GETPDP(r4, &(0x7f0000002880)={0x0, 0x0, &(0x7f0000002840)={&(0x7f00000027c0)={0x14, r5, 0x301, 0x70bd25, 0x25dfdbfe}, 0x14}, 0x1, 0x0, 0x0, 0x20000000}, 0x24008040) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000680)={0x16, 0x4, &(0x7f0000000040)=ANY=[@ANYBLOB="18000000022000000000000000000800711050000000000023cd2543c128ce23732a9500000000000000"], &(0x7f0000000080)='syzkaller\x00', 0x4, 0x0, 0x0, 0x40f00, 0x0, '\x00', 0x0, 0xd, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x7}, 0x94) connect$inet(r0, &(0x7f0000000480)={0x2, 0x4e24, @local}, 0x10) setsockopt$inet_tcp_TCP_FASTOPEN_KEY(r0, 0x6, 0x21, 0x0, 0x0) socket$inet_mptcp(0x2, 0x1, 0x106) (async) socket$nl_generic(0x10, 0x3, 0x10) (async) socket$inet6_udp(0xa, 0x2, 0x0) (async) setsockopt$IP6T_SO_SET_REPLACE(r2, 0x29, 0x40, &(0x7f0000000000)=@mangle={'mangle\x00', 0x2, 0x6, 0x640, 0x2e0, 0x0, 0x3b0, 0x2e0, 0x1b0, 0x570, 0x570, 0x570, 0x570, 0x570, 0x6, 0x0, {[{{@uncond, 0x0, 0x188, 0x1b0, 0x0, {0x7a00000010000000}, [@common=@srh1={{0x90}, {0x0, 0x0, 0x0, 0x0, 0x0, @empty, @mcast2, @private2, [], [0x0, 0xffffffff], [], 0x0, 0x10}}, @common=@inet=@multiport={{0x50}, {0x0, 0xc, [0x0, 0x0, 0x0, 0x4e21, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffc], [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4]}}]}, @HL={0x28}}, {{@ipv6={@mcast2, @dev={0xfe, 0x80, '\x00', 0x2}, [0x0, 0x0, 0x0, 0xff000000], [], 'bridge0\x00', 'veth1_vlan\x00'}, 0x0, 0xf8, 0x130, 0x0, {}, [@inet=@rpfilter={{0x28}, {0x2}}, @inet=@rpfilter={{0x28}, {0xc}}]}, @common=@inet=@SET3={0x38, 'SET\x00', 0x3, {{}, {0x0, 0x2}, {0x0, 0xfd}, 0x300, 0x4}}}, {{@ipv6={@ipv4, @dev={0xfe, 0x80, '\x00', 0x32}, [], [], 'nicvf0\x00', 'bond_slave_0\x00', {0xff}, {}, 0x0, 0x2}, 0x0, 0xa8, 0xd0, 0x48000000}, @common=@inet=@SYNPROXY={0x28, 'SYNPROXY\x00', 0x0, {0x0, 0x1, 0x7ff}}}, {{@ipv6={@loopback, @local, [0xffffff00, 0x0, 0xff, 0xff000000], [0xff000000, 0xff000000, 0xffffffff, 0xffffff00], 'macvlan0\x00', 'veth1_to_bridge\x00', {0xff}, {0xff}, 0x8, 0x81, 0x1, 0x36}, 0x0, 0xa8, 0xf0}, @SNPT={0x48, 'SNPT\x00', 0x0, {@ipv4, @ipv6=@private1, 0x0, 0x37}}}, {{@uncond, 0x0, 0xa8, 0xd0}, @HL={0x28}}], {{'\x00', 0x0, 0xa8, 0xd0}, {0x28}}}}, 0x6a0) (async) syz_genetlink_get_family_id$ethtool(&(0x7f0000000080), 0xffffffffffffffff) (async) sendmsg$ETHTOOL_MSG_FEATURES_SET(r1, &(0x7f0000002540)={0x0, 0x0, &(0x7f0000002500)={&(0x7f0000000140)=ANY=[@ANYBLOB='<\x00\x00\x00', @ANYRES16=r3, @ANYBLOB="0100fcffffff000000002f000000100003800400040008000200fd7f000318000180140002006d61637674617030"], 0x3c}}, 0x0) (async) socket$packet(0x11, 0x3, 0x300) (async) socket$nl_generic(0x10, 0x3, 0x10) (async) syz_genetlink_get_family_id$gtp(&(0x7f0000000000), 0xffffffffffffffff) (async) sendmsg$GTP_CMD_GETPDP(r4, &(0x7f0000002880)={0x0, 0x0, &(0x7f0000002840)={&(0x7f00000027c0)={0x14, r5, 0x301, 0x70bd25, 0x25dfdbfe}, 0x14}, 0x1, 0x0, 0x0, 0x20000000}, 0x24008040) (async) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000680)={0x16, 0x4, &(0x7f0000000040)=ANY=[@ANYBLOB="18000000022000000000000000000800711050000000000023cd2543c128ce23732a9500000000000000"], &(0x7f0000000080)='syzkaller\x00', 0x4, 0x0, 0x0, 0x40f00, 0x0, '\x00', 0x0, 0xd, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x7}, 0x94) (async) connect$inet(r0, &(0x7f0000000480)={0x2, 0x4e24, @local}, 0x10) (async) setsockopt$inet_tcp_TCP_FASTOPEN_KEY(r0, 0x6, 0x21, 0x0, 0x0) (async) 1.42353288s ago: executing program 3 (id=5769): r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000000c0)={0x16, 0x3, &(0x7f0000000180)=ANY=[@ANYBLOB="1800000000000000000000000000080095"], &(0x7f0000000040)='GPL\x00'}, 0x80) bpf$BPF_PROG_ATTACH(0x8, &(0x7f0000000140)={@cgroup, r0, 0x11}, 0x14) mmap(&(0x7f0000001000/0xc00000)=nil, 0xc00000, 0x2000004, 0x3b071, 0xffffffffffffffff, 0x0) r1 = bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000080)={0x6, 0x4, &(0x7f00000003c0)=ANY=[@ANYBLOB="18180000000000000000000000000000c3a0f8ff5000000095"], &(0x7f0000000040)='GPL\x00', 0x8, 0x96, &(0x7f00000015c0)=""/150}, 0x94) ioctl$ifreq_SIOCGIFINDEX_team(0xffffffffffffffff, 0x8933, &(0x7f00000006c0)={'team0\x00', 0x0}) r3 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000000c0)='memory.events\x00', 0x26e1, 0x0) r4 = bpf$PROG_LOAD(0x5, &(0x7f0000000080)={0x5, 0x3, &(0x7f00000007c0)=ANY=[@ANYBLOB="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"], &(0x7f0000000000)='GPL\x00', 0x5, 0x252, &(0x7f000000cf3d)=""/195}, 0x48) bpf$PROG_BIND_MAP(0x1c, &(0x7f0000000180)={r4, r3, 0x29}, 0xc) r5 = bpf$BPF_MAP_GET_FD_BY_ID(0xe, &(0x7f0000000780)={0x0, 0x80, 0x8}, 0xc) bpf$PROG_LOAD(0x5, &(0x7f0000000840)={0x5, 0xb, &(0x7f0000000300)=@raw=[@cb_func={0x18, 0x4, 0x4, 0x0, 0xfffffffffffffffe}, @printk={@li, {}, {}, {}, {}, {0x7, 0x0, 0xb, 0x3, 0x0, 0x0, 0xfffffffd}}, @generic={0x7, 0x5, 0x8, 0x5, 0x6}], &(0x7f0000000380)='syzkaller\x00', 0x9, 0xbd, &(0x7f0000000600)=""/189, 0x41100, 0x0, '\x00', r2, @fallback=0x1, 0xffffffffffffffff, 0x8, &(0x7f0000000700)={0x8, 0x4}, 0x8, 0x10, &(0x7f0000000740)={0x3, 0x9, 0x86, 0x6}, 0x10, 0x0, r0, 0x3, &(0x7f00000007c0)=[r1, r3, r5], &(0x7f0000000800)=[{0x1, 0x5, 0x4, 0x2}, {0x2, 0x2, 0xe, 0xb}, {0x3, 0x1, 0xe, 0xc}], 0x10, 0xc6}, 0x94) r6 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r6, &(0x7f0000000480)={0x0, 0x0, &(0x7f0000001f40)={&(0x7f0000000200)=ANY=[@ANYBLOB], 0xb8}}, 0x0) r7 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000000)='memory.swap.current\x00', 0x275a, 0x0) write$cgroup_int(r7, &(0x7f0000000080)=0x7fffffffffffffff, 0x12) mmap(&(0x7f0000000000/0x4000)=nil, 0x4000, 0x2000005, 0x12, r7, 0x0) r8 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_int(r8, 0x29, 0x31, &(0x7f0000000000)=0xffff7b6e, 0x4) getsockopt$inet6_buf(r8, 0x29, 0x6, &(0x7f0000001500)=""/19, &(0x7f0000000240)=0x13) sendmsg$inet(r6, &(0x7f00000005c0)={&(0x7f0000000000)={0x2, 0x4e23, @multicast1}, 0x10, &(0x7f0000000500)=[{&(0x7f0000000140)="5b1a4ed6082bb8591954f91e6c1d52a01b4b17f2c49b79b42fac97d2f67e37728763cf9d403f760a04be9f7142f51d879201bfdafe6e232200127176d372b5f67ceeee9e02787c6a22e8b5f567646dc80f5e66a1236f7dfbda2684b4de41287622e65cbb229429e06d1864bac4125c938d5520d0138c27fc7025233571369ac8a8d6c1ce80a39fe8f9464009d00c2307f0e46303dff71331a1150eb9a2c7606aa8e98db465dad9783980666d799f684c3fbe29f268d767eb6208b5f48110c924f34a5af405b38f1b7f4c25ee535d27344e9018aa1a67d3e7d3f7a16d18", 0xdd}, {&(0x7f0000000240)="5c49af5128949fdd5e94d1057ac0a2617389ed8e76b907017719ae97da1a5b615b6f94cfaee83c0ac015acd3ccc210b442f96fc0311151242788f2114799c97163edef0e212203091096c078ad18f9c3022fc4e10c8b657e5ab8ccb7c9eb80afe7239def1885ac912b22deab97b7c2cdcd6e235ce999b9d6e1ced91152192078fa3a950720d45656d91d1c65d527b97810", 0x91}, {&(0x7f0000000400)="e5af8d53e5e0eb07a1364131210ee0fcbcf1b5beb929fc0c5ce12e1b5e5a5b761fe99bcc7c7347a41a849b14c0439150c9104ecebc3be119d6ba01d1ba011df90bda3699c8718f565026c7ef55c9a0033b9f31dd36eee5e227c6cf18c5adc25ad9e54f6f72d4dea68af1fb10334fa9f71b67f106e8786705f1d4c310c14013450f889c720035de1546d61f05f34c2869afb6b3e76b64529f7f78ba93294b262e6ac4b0a027c9c76d9dc1b0c725b29f9c11dc8834b0b40863f43b96a20d4a6c15895fecc89a7d189634ec5d7534391c1ae0c7080928014867f531406a2ccc62bb819c7fcd245553a0beff941d", 0xec}], 0x3, &(0x7f0000000540)=[@ip_ttl={{0x14, 0x0, 0x2, 0x401}}, @ip_ttl={{0x14, 0x0, 0x2, 0xb}}, @ip_tos_int={{0x14, 0x0, 0x1, 0x8c}}], 0x48}, 0x0) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000000c0)={0x16, 0x3, &(0x7f0000000180)=ANY=[@ANYBLOB="1800000000000000000000000000080095"], &(0x7f0000000040)='GPL\x00'}, 0x80) (async) bpf$BPF_PROG_ATTACH(0x8, &(0x7f0000000140)={@cgroup, r0, 0x11}, 0x14) (async) mmap(&(0x7f0000001000/0xc00000)=nil, 0xc00000, 0x2000004, 0x3b071, 0xffffffffffffffff, 0x0) (async) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000080)={0x6, 0x4, &(0x7f00000003c0)=ANY=[@ANYBLOB="18180000000000000000000000000000c3a0f8ff5000000095"], &(0x7f0000000040)='GPL\x00', 0x8, 0x96, &(0x7f00000015c0)=""/150}, 0x94) (async) ioctl$ifreq_SIOCGIFINDEX_team(0xffffffffffffffff, 0x8933, &(0x7f00000006c0)) (async) openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000000c0)='memory.events\x00', 0x26e1, 0x0) (async) bpf$PROG_LOAD(0x5, &(0x7f0000000080)={0x5, 0x3, &(0x7f00000007c0)=ANY=[@ANYBLOB="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"], &(0x7f0000000000)='GPL\x00', 0x5, 0x252, &(0x7f000000cf3d)=""/195}, 0x48) (async) bpf$PROG_BIND_MAP(0x1c, &(0x7f0000000180)={r4, r3, 0x29}, 0xc) (async) bpf$BPF_MAP_GET_FD_BY_ID(0xe, &(0x7f0000000780)={0x0, 0x80, 0x8}, 0xc) (async) bpf$PROG_LOAD(0x5, &(0x7f0000000840)={0x5, 0xb, &(0x7f0000000300)=@raw=[@cb_func={0x18, 0x4, 0x4, 0x0, 0xfffffffffffffffe}, @printk={@li, {}, {}, {}, {}, {0x7, 0x0, 0xb, 0x3, 0x0, 0x0, 0xfffffffd}}, @generic={0x7, 0x5, 0x8, 0x5, 0x6}], &(0x7f0000000380)='syzkaller\x00', 0x9, 0xbd, &(0x7f0000000600)=""/189, 0x41100, 0x0, '\x00', r2, @fallback=0x1, 0xffffffffffffffff, 0x8, &(0x7f0000000700)={0x8, 0x4}, 0x8, 0x10, &(0x7f0000000740)={0x3, 0x9, 0x86, 0x6}, 0x10, 0x0, r0, 0x3, &(0x7f00000007c0)=[r1, r3, r5], &(0x7f0000000800)=[{0x1, 0x5, 0x4, 0x2}, {0x2, 0x2, 0xe, 0xb}, {0x3, 0x1, 0xe, 0xc}], 0x10, 0xc6}, 0x94) (async) socket$nl_xfrm(0x10, 0x3, 0x6) (async) sendmsg$nl_xfrm(r6, &(0x7f0000000480)={0x0, 0x0, &(0x7f0000001f40)={&(0x7f0000000200)=ANY=[@ANYBLOB], 0xb8}}, 0x0) (async) openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000000)='memory.swap.current\x00', 0x275a, 0x0) (async) write$cgroup_int(r7, &(0x7f0000000080)=0x7fffffffffffffff, 0x12) (async) mmap(&(0x7f0000000000/0x4000)=nil, 0x4000, 0x2000005, 0x12, r7, 0x0) (async) socket$inet6_tcp(0xa, 0x1, 0x0) (async) setsockopt$inet6_int(r8, 0x29, 0x31, &(0x7f0000000000)=0xffff7b6e, 0x4) (async) getsockopt$inet6_buf(r8, 0x29, 0x6, &(0x7f0000001500)=""/19, &(0x7f0000000240)=0x13) (async) sendmsg$inet(r6, &(0x7f00000005c0)={&(0x7f0000000000)={0x2, 0x4e23, @multicast1}, 0x10, &(0x7f0000000500)=[{&(0x7f0000000140)="5b1a4ed6082bb8591954f91e6c1d52a01b4b17f2c49b79b42fac97d2f67e37728763cf9d403f760a04be9f7142f51d879201bfdafe6e232200127176d372b5f67ceeee9e02787c6a22e8b5f567646dc80f5e66a1236f7dfbda2684b4de41287622e65cbb229429e06d1864bac4125c938d5520d0138c27fc7025233571369ac8a8d6c1ce80a39fe8f9464009d00c2307f0e46303dff71331a1150eb9a2c7606aa8e98db465dad9783980666d799f684c3fbe29f268d767eb6208b5f48110c924f34a5af405b38f1b7f4c25ee535d27344e9018aa1a67d3e7d3f7a16d18", 0xdd}, {&(0x7f0000000240)="5c49af5128949fdd5e94d1057ac0a2617389ed8e76b907017719ae97da1a5b615b6f94cfaee83c0ac015acd3ccc210b442f96fc0311151242788f2114799c97163edef0e212203091096c078ad18f9c3022fc4e10c8b657e5ab8ccb7c9eb80afe7239def1885ac912b22deab97b7c2cdcd6e235ce999b9d6e1ced91152192078fa3a950720d45656d91d1c65d527b97810", 0x91}, {&(0x7f0000000400)="e5af8d53e5e0eb07a1364131210ee0fcbcf1b5beb929fc0c5ce12e1b5e5a5b761fe99bcc7c7347a41a849b14c0439150c9104ecebc3be119d6ba01d1ba011df90bda3699c8718f565026c7ef55c9a0033b9f31dd36eee5e227c6cf18c5adc25ad9e54f6f72d4dea68af1fb10334fa9f71b67f106e8786705f1d4c310c14013450f889c720035de1546d61f05f34c2869afb6b3e76b64529f7f78ba93294b262e6ac4b0a027c9c76d9dc1b0c725b29f9c11dc8834b0b40863f43b96a20d4a6c15895fecc89a7d189634ec5d7534391c1ae0c7080928014867f531406a2ccc62bb819c7fcd245553a0beff941d", 0xec}], 0x3, &(0x7f0000000540)=[@ip_ttl={{0x14, 0x0, 0x2, 0x401}}, @ip_ttl={{0x14, 0x0, 0x2, 0xb}}, @ip_tos_int={{0x14, 0x0, 0x1, 0x8c}}], 0x48}, 0x0) (async) 1.236183587s ago: executing program 1 (id=5770): socket(0x10, 0x803, 0x0) syz_emit_ethernet(0xffba, &(0x7f0000000200)=ANY=[@ANYBLOB="aaaaaaaaaaaa302bd0ac46a208004500005c0000000000339078ac141442ac1e0001000900000000000000000104040000001fa3883e21cd040100035c9b000031d14c91cf0d355079896e44dcf3da017a58f2e6288933307fb477ae5a40740406707740eb6dcb6c5545"], 0x0) (async) syz_genetlink_get_family_id$devlink(0x0, 0xffffffffffffffff) (async) socketpair(0x10, 0x100000005, 0x9, &(0x7f0000000000)={0xffffffffffffffff}) (async) unshare(0x26020480) r1 = bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000140)=ANY=[@ANYBLOB="02000000040000000800400001"], 0x50) bpf$MAP_LOOKUP_ELEM(0x1, &(0x7f00000003c0)={r1, &(0x7f0000000500), &(0x7f0000000080)=""/12}, 0x20) (async) socket(0x10, 0x14080f, 0x4) (async) ioctl$SIOCX25GSUBSCRIP(r0, 0x89e0, 0x0) sendmsg$SMC_PNETID_FLUSH(0xffffffffffffffff, 0x0, 0x4800) (async) r2 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$ETHTOOL_MSG_PRIVFLAGS_GET(r2, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000480)={&(0x7f00000005c0)=ANY=[], 0x14}, 0x1, 0x0, 0x0, 0x24004090}, 0x4000) r3 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r3, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000300)={&(0x7f00000006c0)=ANY=[@ANYBLOB="0c0100001600010000000000010000000a01010000000000000000000000000000000000000000000000ffff000000004e24000000000000", @ANYRES32=0x0, @ANYRESHEX=r1, @ANYBLOB="00000000000000000000ffffac1414aa0000000033000000ffffffff000000000000000000000000200000000000000000000000000000000000000000000000050000000000000068482c4500000000f1ffffffffffffff03000000000000000000000000000000000000000000004000000000000000000100000000004000feffffffffffffff000000000000000096070000000800000000000000000000030000000000000000000000b1a001000c001c00", @ANYRESOCT, @ANYBLOB="0100000008"], 0x10c}}, 0x0) (async) r4 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r2, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000400)=ANY=[@ANYBLOB="140000402300090122bd7008f9ffffff020000007e092743bd4e923913272bca42d457e0df0319d30633f4f4ac9b594c3e688407aa08f1342db79ff64137fdc417aa3c6b2b93696b1fe8a92cd444767944b9e6f4299840de09cf78"], 0x14}, 0x1, 0x0, 0x0, 0x1004c957}, 0x0) (async) r5 = openat$ppp(0xffffffffffffff9c, &(0x7f0000000380), 0x301242, 0x0) ioctl$PPPIOCNEWUNIT(r5, 0xc004743e, &(0x7f00000001c0)=0x3) (async) r6 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r6, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000040)=ANY=[@ANYBLOB="2c00000040001000feffffff00000000017c0000040042800c055b50cc16e45a00018006000600800a000008"], 0x2c}, 0x1, 0x0, 0x0, 0x48815}, 0xc000) mmap(&(0x7f0000001000/0x3000)=nil, 0x3000, 0x1000006, 0x4132, 0xffffffffffffffff, 0xab7ee000) (async) r7 = socket$vsock_stream(0x28, 0x1, 0x0) mmap(&(0x7f0000001000/0x2000)=nil, 0x2000, 0x7, 0x12, r4, 0x0) (async) r8 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='cgroup.controllers\x00', 0x275a, 0x0) (async) r9 = socket$inet_sctp(0x2, 0x1, 0x84) r10 = socket$alg(0x26, 0x5, 0x0) (async) setsockopt$inet_sctp_SCTP_RECVNXTINFO(r9, 0x84, 0x21, 0xffffffffffffffff, 0x0) write$cgroup_int(r8, &(0x7f0000000200), 0xffffffc1) r11 = bpf$PROG_LOAD(0x5, &(0x7f0000000080)={0x7, 0xe, &(0x7f0000000280)=ANY=[@ANYRESOCT=0x0, @ANYRESHEX=r7, @ANYRES64=r10], &(0x7f0000000140)='syzkaller\x00', 0x0, 0x0, 0x0, 0x41100, 0x0, '\x00', 0x0, @fallback=0x12, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0x8, 0x10, &(0x7f0000000040)={0x0, 0xe}, 0x10}, 0x94) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000400)={r11, 0x0, 0xe, 0x0, &(0x7f00000002c0)="69d387051eaf71a0486e5c660000", 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x50) 1.162405319s ago: executing program 0 (id=5771): r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000100), 0x0, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x2}) r1 = openat$tun(0xffffffffffffff9c, &(0x7f0000000400), 0x0, 0x0) close(r1) r2 = socket$nl_generic(0x10, 0x3, 0x10) r3 = syz_genetlink_get_family_id$tipc(&(0x7f00000000c0), r2) sendmsg$TIPC_CMD_ENABLE_BEARER(r2, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000680)=ANY=[@ANYBLOB='8\x00\x00\x00', @ANYRES16=r3, @ANYBLOB="010000000d0000000000010000000000000001410000001c001700000000000000006574683a73797a6b616c6c657230"], 0x38}}, 0x0) ioctl$SIOCSIFHWADDR(r1, 0x8914, &(0x7f0000002280)={'syzkaller0\x00', @multicast}) bpf$BPF_BTF_LOAD(0x12, &(0x7f00000002c0)={&(0x7f0000000480)=ANY=[@ANYBLOB="9feb01001800000000000000a4000000a40000000c0000000f00000000000010040000000700000000000012010000000d000000070000930b00000006000000030000000d000000020000000e00000005000000010000009d0000000400"], &(0x7f0000000240)=""/111, 0xc8, 0x6f, 0x1, 0x80000001}, 0x28) socket$kcm(0xa, 0x6, 0x0) sendmsg$kcm(0xffffffffffffffff, 0x0, 0x0) r4 = bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000340)={0x2, 0x4, 0x8, 0x1, 0x80, 0x1, 0x0, '\x00', 0x0, 0x0}, 0x48) r5 = bpf$PROG_LOAD(0x5, &(0x7f00000004c0)={0x1f, 0x18, &(0x7f00000006c0)=ANY=[@ANYBLOB="180000000000000000000000ffffffff180800002020782500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b7030000000400008500000004000000b7080000000000007baaf8ff00000000b5080000000000007b8af0ff00000000bfa100000000000007010000f8ffffffbfa400000000000007040000f0ffffffb70200000800000018230000", @ANYRES32=r4, @ANYBLOB="0000000000000000b70500000800000085000000a800000095"], &(0x7f0000000600)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x10, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$PROG_BIND_MAP(0xa, &(0x7f0000000000)={r5}, 0xc) ioctl$SIOCSIFHWADDR(r1, 0x8922, &(0x7f0000002280)={'syzkaller0\x00', @random="2b0100004ec6"}) socket$inet6_sctp(0xa, 0x5, 0x84) close(0x3) r6 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r6, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000000)=@dellink={0x34, 0x11, 0x1, 0x70bd27, 0x25dfdbfd, {0x0, 0x0, 0x0, 0x0, 0x1092, 0x40000}, [@IFLA_IFNAME={0x14, 0x3, 'veth1_vlan\x00'}]}, 0x34}, 0x1, 0x0, 0x0, 0x801}, 0x4000000) 1.012762226s ago: executing program 2 (id=5772): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000200)={&(0x7f00000003c0)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a28000000000a0101000000005e1affd5020000000900010073797a300000000008000240000000032c000000030a01030000e6ff00000000020000000900010073797a30000000000900030073797a320000000014000000110001"], 0x7c}}, 0x0) (async, rerun: 32) r1 = socket$inet_udp(0x2, 0x2, 0x0) (rerun: 32) setsockopt$inet_int(r1, 0x0, 0x14, &(0x7f0000000080)=0xcd, 0x4) (async, rerun: 32) socket$inet6_icmp(0xa, 0x2, 0x3a) (async, rerun: 32) ioctl$sock_ipv6_tunnel_SIOCDELTUNNEL(0xffffffffffffffff, 0x89f2, &(0x7f0000000440)={'ip6_vti0\x00', &(0x7f00000003c0)={'ip6_vti0\x00', 0x0, 0x4, 0xfd, 0x5, 0x200, 0x8, @initdev={0xfe, 0x88, '\x00', 0x0, 0x0}, @loopback, 0xc0, 0x8000, 0x8, 0x8}}) r3 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000002c0)='blkio.bfq.io_queued\x00', 0x275a, 0x0) epoll_ctl$EPOLL_CTL_ADD(r3, 0x1, r3, &(0x7f0000000080)={0x80000002}) (async) bpf$MAP_CREATE(0x0, &(0x7f00000024c0)=@bloom_filter={0x1e, 0x8000401, 0x1ad40000, 0x2, 0x800, r3, 0x2, '\x00', r2, r3, 0x5, 0x2, 0x3, 0xb}, 0x50) (async) bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000240)={&(0x7f0000001500)={{0xeb9f, 0x1, 0x0, 0x18, 0x0, 0x49, 0x49, 0x5, [@restrict={0x3}, @datasec={0x5, 0x4, 0x0, 0xf, 0x1, [{0x5, 0x9}, {0x4, 0x4, 0x4}, {0x1, 0x4, 0xc}, {0x2, 0x80, 0x1}], "94"}]}, {0x0, [0x2e, 0x61, 0x61]}}, &(0x7f00000014c0)=""/2, 0x69, 0x2, 0x1}, 0x28) sendmsg$NFT_BATCH(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000680)=ANY=[@ANYBLOB="14000000100001000000000000b890c1a000000a80000000160a01030000000000000000020000000900020073797a30000000000900010073797a30000000005400038008000240000000000800014000000000400003801400010076657468315f746f5f6272696467650014000100776732000000000000000000000000000b00010076657468305f746f5f7465616d00000014000000110001"], 0xa8}}, 0x0) (async) r4 = socket$inet6_sctp(0xa, 0x1, 0x84) (async, rerun: 32) r5 = socket(0x10, 0x3, 0x0) (async, rerun: 32) socketpair$unix(0x1, 0x1, 0x0, &(0x7f00000000c0)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$sock_SIOCGIFINDEX(r6, 0x8933, &(0x7f0000000000)={'lo\x00', 0x0}) sendmsg$nl_route_sched(r5, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000780)={&(0x7f00000001c0)=@newqdisc={0x48, 0x24, 0xd0f, 0x0, 0x0, {0x60, 0x0, 0x0, r7, {0x0, 0x2}, {0xffff, 0xffff}}, [@qdisc_kind_options=@q_prio={{0x9}, {0x18, 0x2, {0x8}}}]}, 0x48}}, 0x0) (async) sendmsg$nl_route_sched(r5, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000940)={&(0x7f0000000100)=@deltclass={0x24, 0x29, 0x819, 0x870bd2c, 0x25dfdbfe, {0x0, 0x0, 0x0, r7, {0xa, 0xe}, {0xa, 0x2}, {0x10, 0xffff}}}, 0x24}, 0x1, 0x0, 0x0, 0x1800}, 0x20000080) setsockopt$inet_sctp6_SCTP_SOCKOPT_BINDX_ADD(r4, 0x84, 0x64, &(0x7f00000002c0)=[@in={0x2, 0x4e23, @loopback}, @in6={0xa, 0x0, 0x0, @loopback, 0x7ff}], 0x2c) (async) r8 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='memory.events\x00', 0x275a, 0x0) (async) r9 = socket$alg(0x26, 0x5, 0x0) bind$alg(r9, &(0x7f0000000000)={0x26, 'skcipher\x00', 0x0, 0x0, 'ecb-twofish-3way\x00'}, 0x45) (async) r10 = accept4(r9, 0x0, 0x0, 0x0) (async) r11 = syz_genetlink_get_family_id$ipvs(&(0x7f0000000280), r8) sendmsg$IPVS_CMD_GET_SERVICE(r10, &(0x7f00000003c0)={&(0x7f0000000140)={0x10, 0x0, 0x0, 0x24000}, 0xc, &(0x7f0000000380)={&(0x7f00000002c0)={0x14, r11, 0x100, 0x70bd25, 0x25dfdbfb}, 0x14}, 0x1, 0x0, 0x0, 0x4000011}, 0x8044) (async) sendmsg$IPVS_CMD_GET_DAEMON(r5, &(0x7f0000000480)={&(0x7f0000000180)={0x10, 0x0, 0x0, 0x100}, 0xc, &(0x7f0000000440)={&(0x7f0000000340)={0x6c, r11, 0x200, 0x70bd2d, 0x25dfdbfd, {}, [@IPVS_CMD_ATTR_SERVICE={0x48, 0x1, 0x0, 0x1, [@IPVS_SVC_ATTR_ADDR={0x14, 0x3, @ipv6=@empty}, @IPVS_SVC_ATTR_FWMARK={0x8, 0x5, 0x2}, @IPVS_SVC_ATTR_AF={0x6, 0x1, 0xa}, @IPVS_SVC_ATTR_SCHED_NAME={0x7, 0x6, 'lc\x00'}, @IPVS_SVC_ATTR_AF={0x6, 0x1, 0x8}, @IPVS_SVC_ATTR_AF={0x6, 0x1, 0xa}, @IPVS_SVC_ATTR_AF={0x6, 0x1, 0x2}]}, @IPVS_CMD_ATTR_TIMEOUT_UDP={0x8, 0x6, 0x9}, @IPVS_CMD_ATTR_TIMEOUT_TCP_FIN={0x8}]}, 0x6c}, 0x1, 0x0, 0x0, 0x4c0d0}, 0x8050) (async) sendto$inet6(r4, &(0x7f0000000300)='\x00', 0x1, 0x4c055, &(0x7f0000000140)={0xa, 0x4e23, 0x0, @loopback, 0x4}, 0x1c) (async) setsockopt$inet_sctp6_SCTP_EVENTS(r4, 0x84, 0xb, &(0x7f0000000100)={0x7, 0x84, 0x7, 0x5, 0x5, 0xfd, 0x0, 0x0, 0xfd, 0x5, 0x3, 0x0, 0xff}, 0xe) recvmmsg(r4, &(0x7f0000002280)=[{{0x0, 0x0, 0x0}}], 0x1, 0x61, 0x0) (async) sendmsg$NFT_BATCH(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000540)={{0x14}, [@NFT_MSG_NEWRULE={0x58, 0x6, 0xa, 0x40b, 0x0, 0x0, {0x2}, [@NFTA_RULE_EXPRESSIONS={0x2c, 0x4, 0x0, 0x1, [{0x28, 0x1, 0x0, 0x1, @flow_offload={{0x11}, @val={0x10, 0x2, 0x0, 0x1, [@NFTA_FLOW_TABLE_NAME={0x9, 0x1, 'syz0\x00'}]}}}]}, @NFTA_RULE_TABLE={0x9, 0x1, 'syz0\x00'}, @NFTA_RULE_CHAIN={0x9, 0x2, 'syz2\x00'}]}], {0x14}}, 0x80}, 0x1, 0x0, 0x0, 0x2000094}, 0x80) (async) close(0x3) 756.080299ms ago: executing program 2 (id=5773): r0 = socket$inet(0x2, 0x3, 0x6) ioctl$sock_ipv4_tunnel_SIOCADDTUNNEL(r0, 0x89f1, &(0x7f0000001040)={'gre0\x00', &(0x7f0000000380)={'syztnl2\x00', 0x0, 0x2100, 0x80, 0x5, 0x0, {{0x5, 0x4, 0x0, 0x9, 0x14, 0x68, 0x0, 0x0, 0x2f, 0x0, @initdev={0xac, 0x1e, 0x5, 0x0}, @loopback}}}}) ioctl$sock_ipv4_tunnel_SIOCCHGTUNNEL(r0, 0x89f3, &(0x7f0000000300)={'syztnl2\x00', &(0x7f0000000000)={'syztnl2\x00', r1, 0x20, 0x40, 0xb0, 0x6, {{0x5, 0x4, 0x2, 0x6, 0x14, 0x5f, 0x0, 0xf9, 0x2f, 0x0, @local, @broadcast}}}}) bpf$PROG_LOAD(0x5, &(0x7f0000000100)={0x4, 0x4, &(0x7f0000000700)=@framed={{0x18, 0x0, 0x0, 0x0, 0xfffffffd, 0x0, 0x0, 0x0, 0x88}, [@generic={0x91, 0x1, 0x1, 0x70}]}, &(0x7f0000000c40)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffb}, 0x94) 598.937324ms ago: executing program 0 (id=5774): socket$nl_xfrm(0x10, 0x3, 0x6) r0 = openat$cgroup_ro(0xffffffffffffff9c, 0x0, 0x26e1, 0x0) sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000100)=ANY=[@ANYBLOB="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"], 0x17d4}}, 0x0) r1 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_tcp_TCP_REPAIR(r1, 0x6, 0x13, &(0x7f0000000000)=0x1, 0x4) setsockopt$inet6_tcp_int(r1, 0x6, 0x18, &(0x7f0000000040)=0x9, 0x4) getsockopt$inet6_tcp_buf(r1, 0x6, 0xb, 0x0, &(0x7f0000000140)) r2 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$IPCTNL_MSG_CT_GET(r0, &(0x7f0000000540)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000680)=ANY=[@ANYBLOB="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"], 0xf4}, 0x1, 0x0, 0x0, 0x20044080}, 0x48000) sendmsg$nl_generic(r2, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000340)={&(0x7f0000000380)=ANY=[@ANYBLOB="4801000042000100fffffffffddbdf250200000004003880100001800c00c8000200000000000000200104801c01"], 0x148}, 0x1, 0x0, 0x0, 0x8800}, 0x4040) 485.439598ms ago: executing program 2 (id=5775): r0 = socket$inet(0x2, 0x4000000000000001, 0x0) setsockopt$inet_tcp_int(r0, 0x6, 0x80000000000002, &(0x7f00000004c0)=0x79, 0x4) bind$inet(r0, &(0x7f0000000080)={0x2, 0x4e23, @multicast1}, 0x10) (async, rerun: 32) setsockopt$SO_ATTACH_FILTER(r0, 0x1, 0x1a, &(0x7f0000000000)={0x1, &(0x7f0000000280)=[{0x6, 0xfa, 0x0, 0xe4}]}, 0x10) (rerun: 32) sendto$inet(r0, 0x0, 0x0, 0x200007fd, &(0x7f0000e68000)={0x2, 0x4e23, @local}, 0x10) setsockopt$inet_tcp_TCP_CONGESTION(r0, 0x6, 0xd, &(0x7f0000000100)='bbr', 0x3) (async, rerun: 32) sendmmsg$inet(r0, &(0x7f0000001640)=[{{0x0, 0x0, &(0x7f00000003c0)=[{&(0x7f0000000b80)="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", 0x128}, {&(0x7f0000000fc0)="31cef842d9c50636f60fc0cfdac56c75f1687f0c56287423f5eed69f117e766bdbad0c2171ad6227e1173ab6efa2fcb1c420a51a0917861009000000f049c606ccab7cda1f0e3490fbe385ea382294882839a22674037b8910bd8a1420e33eb1be6f10cfb24eb7cccdf1528ef33b34ab07cdb0909a9ba9", 0x77}], 0x2}}], 0x1, 0x2090) (async, rerun: 32) setsockopt$sock_int(r0, 0x1, 0x8, &(0x7f0000000600)=0xdfa, 0x4) r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000040)='memory.events\x00', 0x275a, 0x0) recvfrom$llc(r1, 0x0, 0x0, 0x10000, 0x0, 0x0) bpf$OBJ_PIN_MAP(0x6, &(0x7f00000000c0)=@generic={&(0x7f0000000040)='./file0\x00', r1}, 0x18) (async) sendto$inet(r0, &(0x7f0000000580)="17", 0x59a, 0x1000803c, 0x0, 0x0) 457.940024ms ago: executing program 1 (id=5776): r0 = socket$nl_xfrm(0x10, 0x3, 0x6) r1 = socket$nl_xfrm(0x10, 0x3, 0x6) r2 = socket$netlink(0x10, 0x3, 0x6) bind$netlink(r2, &(0x7f0000514ff4)={0x10, 0x0, 0x0, 0x2ffffffff}, 0xc) setsockopt$sock_int(r2, 0x1, 0x8, &(0x7f0000000000), 0x4) bpf$BPF_BTF_LOAD(0x12, &(0x7f0000001300)={&(0x7f0000000280)=ANY=[@ANYBLOB="9feb010018000000faffffff180000001800008807d300"/40], 0x0, 0x32, 0x0, 0x1}, 0x28) setsockopt$netlink_NETLINK_BROADCAST_ERROR(r2, 0x10e, 0x4, &(0x7f0000000100)=0x1800, 0x4) r3 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r3, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000001cc0)=@acquire={0x1ac, 0x17, 0x1, 0x70bd2a, 0x0, {{@in=@loopback, 0x804d5}, @in6=@remote, {@in=@remote, @in=@broadcast, 0x4e21, 0x0, 0x0, 0x0, 0x2, 0x0, 0x56befe125658cb64}, {{@in=@rand_addr=0x64010101, @in6=@loopback, 0x0, 0x0, 0x0, 0xfffd, 0xa, 0x80, 0x20, 0x0, 0x0, 0xee00}, {0x0, 0x0, 0x0, 0x0, 0x3b, 0x0, 0xfffffffffffffffd}, {}, 0x0, 0x0, 0x2, 0x1, 0x0, 0x3}, 0xfffffff9, 0x0, 0x0, 0x8}, [@tmpl={0x84, 0x5, [{{@in=@rand_addr=0x64010101, 0x4d3, 0x3c}, 0xa, @in6=@mcast1, 0x3504, 0x2, 0x0, 0xac, 0x3, 0x1, 0x9}, {{@in6=@private2, 0x4d5, 0x6c}, 0xa, @in=@remote, 0x3505, 0x3, 0x1, 0xf9, 0x2000009, 0x3, 0x200}]}]}, 0x1ac}}, 0x0) r4 = socket$nl_rdma(0x10, 0x3, 0x14) sendmsg$RDMA_NLDEV_CMD_DELLINK(r4, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000080)={0x38, 0x1413, 0x1, 0x0, 0x0, "", [@RDMA_NLDEV_ATTR_DEV_INDEX={0x8}, @RDMA_NLDEV_ATTR_DEV_INDEX={0xfffffffffffffeb9, 0x1, 0x1}, @RDMA_NLDEV_ATTR_DEV_INDEX={0x8}, @RDMA_NLDEV_ATTR_DEV_INDEX={0x8, 0x1, 0x202}, @RDMA_NLDEV_ATTR_DEV_INDEX={0x8, 0x1, 0x2}]}, 0x38}}, 0x0) sendmsg$nl_xfrm(r1, &(0x7f0000000480)={0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x8004}, 0x0) sendmsg$nl_xfrm(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000080)=ANY=[@ANYBLOB="3801000010000100feffffff00010000fe880000000000000000000000000001fc010000000000000000000000000001000107144e230005000000003a000000", @ANYRES32=0x0, @ANYRES32=0x0, @ANYBLOB="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"/476], 0x138}, 0x1, 0x0, 0x0, 0x8801}, 0x0) bpf$PROG_LOAD(0x5, &(0x7f000000e000)={0x15, 0x4, &(0x7f00000000c0)=ANY=[@ANYBLOB="b400000000000000791028000000000069004200000000009500740000000000", @ANYRESDEC], &(0x7f0000003ff6)='GPL\x00', 0x2, 0xfd90, &(0x7f000000cf3d)=""/164, 0x0, 0x25, '\x00', 0x0, @sk_reuseport, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0xffffff8f}, 0x48) 457.804129ms ago: executing program 4 (id=5777): r0 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$IP6T_SO_SET_REPLACE(r0, 0x29, 0x40, &(0x7f0000000380)=@raw={'raw\x00', 0x3c1, 0x3, 0x2e0, 0x120, 0x111, 0x4b4, 0x0, 0xd4feffff, 0x210, 0x20a, 0x278, 0x210, 0x278, 0x3, 0x0, {[{{@uncond, 0x0, 0xf8, 0x120, 0x0, {}, [@common=@ipv6header={{0x28}, {0x2}}, @inet=@rpfilter={{0x28}}]}, @common=@unspec=@CLASSIFY={0x28, 'CLASSIFY\x00', 0x0, {0x7fff}}}, {{@uncond, 0x0, 0xa8, 0xf0, 0x0, {0x0, 0x8000000}}, @unspec=@CT0={0x48, 'CT\x00', 0x0, {0x0, 0x100, 0x8, 0x5, 'pptp\x00', {0xb}}}}], {{'\x00', 0x0, 0xa8, 0xd0}, {0x28}}}}, 0x340) 196.716111ms ago: executing program 0 (id=5778): ioctl$sock_SIOCSIFVLAN_SET_VLAN_EGRESS_PRIORITY_CMD(0xffffffffffffffff, 0x8983, &(0x7f00000007c0)={0x3, 'vlan1\x00'}) sendmmsg$sock(0xffffffffffffffff, &(0x7f0000003b40)=[{{0x0, 0x0, &(0x7f00000009c0)=[{0x0}, {0x0}, {0x0}, {&(0x7f0000000800)="5193f0b40db29d9ce06f429ed3c2c6405967f1e559f08c35f5e63ad64c2746967cca1bbeaf6206a79c42badb4fb453f294c2932cb5552a5f9c1d633207a53c", 0x3f}, {&(0x7f0000000900)}], 0x5}}, {{&(0x7f0000000a40)=@alg={0x26, 'rng\x00', 0x0, 0x0, 'drbg_nopr_hmac_sha256\x00'}, 0x80, &(0x7f0000000600)=[{&(0x7f0000000ac0)}, {&(0x7f0000000580)}], 0x2}}], 0x2, 0x20000044) r0 = bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000140)={&(0x7f0000000040)=ANY=[@ANYBLOB="9feb01001800000000000000180000001800000004000000020000000100000c02000000000000000000000d0000000000005f"], 0x0, 0x34}, 0x20) r1 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x11, 0x3, &(0x7f0000000100)=ANY=[@ANYBLOB="180000000100000000000000801800009500000000000000"], &(0x7f0000000000)='GPL\x00', 0xc, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, r0, 0x8, &(0x7f00000000c0)={0x0, 0x1}, 0x1}, 0x94) bpf$BPF_PROG_WITH_BTFID_LOAD(0x5, &(0x7f0000000500)=@bpf_ext={0x1a, 0xb, &(0x7f0000001a40)=ANY=[@ANYBLOB="180000004f0c000010000000fcffffff180100002020642500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b70300000900000085000000060000009500000000002000"], &(0x7f0000000180)='syzkaller\x00', 0x7, 0x0, 0x0, 0x41000, 0x20, '\x00', 0x0, 0x18, r0, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x1, r1, 0x0, 0x0, 0x0, 0x10, 0x4a7}, 0x94) r2 = socket$alg(0x26, 0x5, 0x0) bind$alg(r2, &(0x7f0000000380)={0x26, 'skcipher\x00', 0x0, 0x0, 'cbc-cast5-avx\x00'}, 0x58) setsockopt$ALG_SET_KEY(r2, 0x117, 0x1, &(0x7f00000004c0)="2c385a7af3", 0x5) ioctl$SIOCSIFHWADDR(0xffffffffffffffff, 0x8914, &(0x7f0000000180)={'syzkaller1\x00', @link_local}) r3 = syz_init_net_socket$bt_l2cap(0x1f, 0x3, 0x0) setsockopt$bt_l2cap_L2CAP_LM(r3, 0x6, 0x3, &(0x7f0000000240)=0x28, 0x4) connect$bt_l2cap(r3, &(0x7f0000000080)={0x1f, 0x21, @fixed={'\xaa\xaa\xaa\xaa\xaa', 0x10}}, 0xe) r4 = syz_init_net_socket$bt_hidp(0x1f, 0x3, 0x6) r5 = bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f0000000540)=ANY=[@ANYBLOB="1b0000000000000000000000000004"], 0x50) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000000c0)={0x11, 0x13, &(0x7f0000000200)=ANY=[@ANYBLOB="18000000ff030000000000000000000018110000", @ANYRES32=r5, @ANYBLOB="0000000000000000b702000014000000b703000000402cab1e43000083000000bf09000000000000550901000000000095000000000000001844000003000000000000000000000085000000c0ffffff9500000000000000bf91000000000000548e4804f96173948500000084000000b70000000000000095"], &(0x7f0000000000)='GPL\x00', 0x7, 0x0, 0x0, 0x41100}, 0x94) r6 = syz_init_net_socket$bt_l2cap(0x1f, 0x2, 0x0) connect$bt_l2cap(r6, &(0x7f0000000080)={0x1f, 0x0, @fixed={'\xaa\xaa\xaa\xaa\xaa', 0x10}, 0x7ff}, 0xe) r7 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r7, &(0x7f0000002f80)={0x0, 0x0, &(0x7f0000002f40)={&(0x7f0000000480)=@newtaction={0x70, 0x30, 0x9, 0x0, 0x0, {}, [{0x5c, 0x1, [@m_skbedit={0x58, 0x1, 0x0, 0x0, {{0xc}, {0x2c, 0x2, 0x0, 0x1, [@TCA_SKBEDIT_PRIORITY={0x8, 0x8, {0xa}}, @TCA_SKBEDIT_PARMS={0x18, 0x2, {0x0, 0x6, 0x7, 0xff4c, 0x9}}, @TCA_SKBEDIT_PTYPE={0x6, 0x7, 0x3}]}, {0x4}, {0xc, 0xa}, {0xc, 0x9, {0x3b}}}}]}]}, 0x70}}, 0x0) ioctl$sock_bt_hidp_HIDPCONNADD(r4, 0x400448c8, &(0x7f0000000240)={r6, r3, 0xe3, 0x0, 0x0, 0x6, 0x1, 0xef7, 0x55be, 0xd, 0x3, 0x9, 'syz1\x00'}) r8 = accept4(r6, 0x0, 0x0, 0x80800) r9 = syz_genetlink_get_family_id$nfc(&(0x7f0000000100), 0xffffffffffffffff) sendmsg$NFC_CMD_DEV_UP(0xffffffffffffffff, &(0x7f0000000200)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000540)=ANY=[@ANYBLOB="1c000000", @ANYRES16=r9, @ANYRESHEX, @ANYRESOCT=r2], 0x1c}}, 0x8054) sendmmsg$alg(r8, &(0x7f0000000040)=[{0x0, 0x0, &(0x7f0000000000)=[{&(0x7f0000000080)="f78d9ca38fff48f3be52163448412ba8", 0xfffffe3f}, {&(0x7f0000000140)="ebe3a0e9796cfd1647e299f4e376fdba128280b372219d205e81f4a7f71c1926aae1efd7e0054a863f3d5cfe6cb55b5bb9fa6935849e6098ed884e7cb51726b360fbb37b4fe035bbb095873048", 0xff31}, {&(0x7f00000003c0)="e8700e444d50a969ff67347cff6127e6ef12ee3819271482a4975a52c1ab9b8b4db3945d1032005eabe97b4dc33a47d3a158da988456d30026b433186f53cdcdb93a4722bf306a10470d50f5cb1ece9ead3459bab1cf1538cd0b157653c5e892962c80f158c443e9c6ad7d2a8103ef2f4b93766b9a21501f94c1568b13756b66f74f46cf801704d2da8b96c34070b233af0afcc436712e58ed25e721193af05a045ad3fdc928f02f3dbad19d3e66eebda2e63f3f46ef4511cee26d7b48241847bf9e343ef4674c45e2a085060f11"}], 0x1, &(0x7f0000000380)=[@op={0x18, 0x117, 0x3, 0x1}], 0x18}], 0x1, 0x40800) recvmsg(r8, &(0x7f00000005c0)={0x0, 0x0, &(0x7f00000001c0)=[{&(0x7f00000000c0)=""/81, 0x7ffff000}, {&(0x7f0000000200)=""/83, 0x20000253}], 0x2}, 0x0) ioctl$XFS_IOC_ATTRLIST_BY_HANDLE(r8, 0x4058587a, 0x0) syz_genetlink_get_family_id$ethtool(&(0x7f0000000300), r8) r10 = socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$nl80211(&(0x7f0000000580), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r10, 0x8933, &(0x7f00000013c0)={'wlan1\x00'}) 188.076195ms ago: executing program 1 (id=5779): r0 = bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f0000000300)={0x1b, 0x0, 0x0, 0x18, 0x0, 0x1, 0x5, '\x00', 0x0, 0xffffffffffffffff, 0x1, 0x5, 0x1}, 0x50) r1 = bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f0000000380)={0x1b, 0x0, 0x0, 0x2, 0x0, 0xffffffffffffffff, 0x1000, '\x00', 0x0, 0xffffffffffffffff, 0x3, 0x3, 0x4}, 0x50) r2 = bpf$BPF_PROG_WITH_BTFID_LOAD(0x5, &(0x7f0000000180)=@bpf_lsm={0xd, 0x19, &(0x7f00000004c0)=@ringbuf={{0x18, 0x0, 0x0, 0x0, 0x1ff, 0x0, 0x0, 0x0, 0xe684}, {{0x18, 0x1, 0x1, 0x0, r0}}, {}, [@map_idx_val={0x18, 0x7, 0x6, 0x0, 0xf, 0x0, 0x0, 0x0, 0x40}, @cb_func={0x18, 0x6, 0x4, 0x0, 0xfffffffffffffffb}, @initr0={0x18, 0x0, 0x0, 0x0, 0x4, 0x0, 0x0, 0x0, 0x7}, @map_idx={0x18, 0x0, 0x5, 0x0, 0x6}, @map_val={0x18, 0x3, 0x2, 0x0, r1, 0x0, 0x0, 0x0, 0x9494}], {{}, {0x7, 0x0, 0xb, 0x2, 0x0, 0x0, 0x1}, {0x85, 0x0, 0x0, 0x85}}}, &(0x7f00000002c0)='syzkaller\x00'}, 0x94) r3 = bpf$BPF_MAP_GET_FD_BY_ID(0xe, &(0x7f0000000080)={0x0, 0x61}, 0xc) r4 = socket$netlink(0x10, 0x3, 0x0) ioctl$EXT4_IOC_GET_ES_CACHE(0xffffffffffffffff, 0xc020660b, &(0x7f0000000000)={0x7, 0x10100001ffffff, 0x1, 0x2fad}) ioctl$sock_SIOCBRDELBR(r4, 0x89a2, &(0x7f0000000000)='bridge0\x00') ioctl$ifreq_SIOCGIFINDEX_wireguard(0xffffffffffffffff, 0x8933, &(0x7f00000000c0)={'wg1\x00', 0x0}) ioctl$XFS_IOC_START_COMMIT(r2, 0x80585882, &(0x7f0000000100)={0xffffffffffffffff}) r7 = socket$alg(0x26, 0x5, 0x0) bind$alg(r7, &(0x7f0000000000)={0x26, 'skcipher\x00', 0x0, 0x0, 'ecb(serpent)\x00'}, 0x58) setsockopt$ALG_SET_KEY(r7, 0x117, 0x1, 0x0, 0x0) r8 = accept4(r7, 0x0, 0x0, 0x0) sendmmsg(r8, &(0x7f0000009640)=[{{0x0, 0x0, &(0x7f00000001c0)=[{&(0x7f0000000180)="1073eedab59a32", 0x7}, {&(0x7f0000000240)="02a2f97a177137003d9b418698b97c81bf1bde7a9b76365fd7b1bbae5f5e09cb9b4432ed011564c718321c92affddb69470547b1baefcdb5445c31a7d34e0b20bddd0e2357b50d72", 0x48}, {&(0x7f00000038c0)="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", 0x231}], 0x3}}], 0x1, 0x8810) recvmsg$unix(r8, &(0x7f0000000540)={0x0, 0x0, &(0x7f0000000140)=[{&(0x7f0000001f00)=""/4096, 0x1000}], 0x1}, 0x12060) bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000240)={0x2, 0x4, 0x8, 0x1, 0x80, r3, 0x3, '\x00', r5, r6, 0x3, 0x0, 0x5}, 0x50) 133.455247ms ago: executing program 4 (id=5780): bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000340)={0x11, 0x4, &(0x7f0000002380)=@framed={{0x18, 0x2, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x3}, [@alu={0x7, 0x1, 0x9, 0x8, 0x8, 0x4, 0x4}]}, &(0x7f00000001c0)='GPL\x00', 0x7, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0xf8000000}, 0x94) r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000000140)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000280)=@newlink={0x34, 0x10, 0x801, 0xfffffffd, 0x8000000, {0x0, 0x0, 0x0, 0x0, 0x0, 0x20421}, [@IFLA_GROUP={0x8}, @IFLA_BROADCAST={0xa, 0x2, @multicast}]}, 0x34}, 0x1, 0x0, 0x0, 0x4040000}, 0x8024) 132.802191ms ago: executing program 2 (id=5781): syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r0 = syz_genetlink_get_family_id$nl802154(&(0x7f0000000000), 0xffffffffffffffff) r1 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) socket$packet(0x11, 0x3, 0x300) r2 = socket$packet(0x11, 0x2, 0x300) setsockopt$packet_rx_ring(r2, 0x107, 0x5, &(0x7f00000000c0)=@req={0x8000, 0xb4f, 0x300, 0x1daf6}, 0x10) sendmsg$NL802154_CMD_DEL_SEC_LEVEL(r1, &(0x7f0000000380)={0x0, 0x0, &(0x7f0000000180)={&(0x7f00000003c0)=ANY=[@ANYBLOB='@\x00\x00\x00', @ANYRES16=r0, @ANYRES16=r1, @ANYRES32], 0x40}, 0x1, 0x0, 0x0, 0x20008000}, 0x8000) r3 = socket(0x10, 0x803, 0x0) sendmsg$nl_route(r3, &(0x7f0000000380)={0x0, 0x4076cbba9945d516, &(0x7f0000000340)={0x0, 0x14}}, 0x0) getsockname$packet(r3, &(0x7f0000000140)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x28a) r5 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r5, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000500)={&(0x7f0000000040)=ANY=[@ANYBLOB="400000001000390400"/20, @ANYRES32=r4, @ANYBLOB="01980000000000002000128008000100677265001400028008000100", @ANYRES32=r4], 0x40}}, 0x0) sendmsg$nl_route(r5, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000500)={&(0x7f0000000680)=@newlink={0x5c, 0x10, 0x439, 0xfffffffa, 0x0, {0x0, 0x0, 0x0, r4, 0x21840, 0x2000}, [@IFLA_LINKINFO={0x3c, 0x12, 0x0, 0x1, @gre={{0x8}, {0x30, 0x2, 0x0, 0x1, [@IFLA_GRE_IGNORE_DF={0x5}, @IFLA_GRE_COLLECT_METADATA={0x4}, @IFLA_GRE_ERSPAN_DIR={0x5}, @IFLA_GRE_ENCAP_SPORT={0x6, 0x10, 0x4e21}, @IFLA_GRE_TTL={0x5, 0x8, 0x5}, @IFLA_GRE_REMOTE={0x8, 0x7, @initdev={0xac, 0x1e, 0x0, 0x0}}]}}}]}, 0x5c}, 0x1, 0x0, 0x0, 0x40080d5}, 0x0) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, 0x0, 0x0) 0s ago: executing program 1 (id=5782): r0 = socket$alg(0x26, 0x5, 0x0) bind$alg(r0, &(0x7f00000004c0)={0x26, 'skcipher\x00', 0x0, 0x0, 'cbc-camellia-asm\x00'}, 0x58) setsockopt$ALG_SET_KEY(r0, 0x117, 0x1, &(0x7f0000000280)="ad56b6c5c5e1804e820fae306984dbb3e81420beef915d56", 0x18) r1 = accept4(r0, 0x0, 0x0, 0x800) sendmmsg$alg(r1, &(0x7f0000000040)=[{0x0, 0x0, &(0x7f0000000000)=[{&(0x7f0000000080)="f78d9ca38fff48f3be52163448412ba8", 0xfffffe3f}, {&(0x7f0000000140)="ebe3a0e9796cfd1647e299f4e376fdba128280b372219d205e81f4a7f71c1926aae1efd7e0054a863f3d5cfe6cb55b5bb9fa6935849e6098ed884e7cb51726b360fbb37b4fe035bbb095873048"}, {&(0x7f00000003c0)="e8700e444d50a969ff67347cff6127e6ef12ee3819271482a4975a52c1ab9b8b4db3945d1032005eabe97b4dc33a47d3a158da988456d30026b433186f53cdcdb93a4722bf306a10470d50f5cb1ece9ead3459bab1cf1538cd0b157653c5e892962c80f158c443e9c6ad7d2a8103ef2f4b93766b9a21501f94c1568b13756b66f74f46cf801704d2da8b96c34070b233af0afcc436712e58ed25e721193af05a045ad3fdc928f02f3dbad19d3e66eebda2e63f3f46ef4511cee26d7b48241847bf9e343ef4674c45e2a085060f11"}], 0x1, &(0x7f0000000380)=[@op={0x18, 0x117, 0x3, 0x1}], 0x18}], 0x1, 0x40800) recvmsg(r1, &(0x7f00000005c0)={0x0, 0x0, &(0x7f00000001c0)=[{&(0x7f00000000c0)=""/81, 0x7ffff000}, {&(0x7f0000000200)=""/83, 0x20000253}], 0x2}, 0x0) getsockopt$PNPIPE_IFINDEX(r1, 0x113, 0x2, &(0x7f0000000800), &(0x7f0000000840)=0x4) r2 = socket$nl_netfilter(0x10, 0x3, 0xc) r3 = socket$kcm(0xa, 0x5, 0x0) setsockopt$sock_attach_bpf(r3, 0x0, 0x24, 0x0, 0x0) sendmsg$IPSET_CMD_CREATE(r2, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000600)={&(0x7f0000000180)={0x54, 0x2, 0x6, 0x801, 0x0, 0x0, {0x5}, [@IPSET_ATTR_PROTOCOL={0x5}, @IPSET_ATTR_SETNAME={0x9, 0x2, 'syz1\x00'}, @IPSET_ATTR_DATA={0xc, 0x7, 0x0, 0x1, [@IPSET_ATTR_PORT_TO={0x6, 0x5, 0x1, 0x0, 0x4e24}]}, @IPSET_ATTR_REVISION={0x5}, @IPSET_ATTR_TYPENAME={0x10, 0x3, 'hash:ip,mac\x00'}, @IPSET_ATTR_FAMILY={0x5, 0x5, 0xa}]}, 0x54}, 0x1, 0x0, 0x0, 0x2c0c0}, 0x0) kernel console output (not intermixed with test programs): __fget_files+0x3a0/0x420 [ 630.603893][T24379] __x64_sys_sendmsg+0x1bd/0x2a0 [ 630.603924][T24379] ? __pfx___x64_sys_sendmsg+0x10/0x10 [ 630.603962][T24379] ? __pfx_ksys_write+0x10/0x10 [ 630.604001][T24379] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 630.604025][T24379] do_syscall_64+0x15f/0xf80 [ 630.604049][T24379] ? trace_irq_disable+0x3b/0x140 [ 630.604081][T24379] ? clear_bhb_loop+0x40/0x90 [ 630.604107][T24379] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 630.604127][T24379] RIP: 0033:0x7f764ad9cdd9 [ 630.604148][T24379] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 630.604165][T24379] RSP: 002b:00007f764bc78028 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 630.604188][T24379] RAX: ffffffffffffffda RBX: 00007f764b015fa0 RCX: 00007f764ad9cdd9 [ 630.604204][T24379] RDX: 0000000000000000 RSI: 0000200000000580 RDI: 000000000000000b [ 630.604216][T24379] RBP: 00007f764bc78090 R08: 0000000000000000 R09: 0000000000000000 [ 630.604230][T24379] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 630.604242][T24379] R13: 00007f764b016038 R14: 00007f764b015fa0 R15: 00007fffa207c3c8 [ 630.604286][T24379] [ 631.059297][T24395] netlink: 'syz.1.4554': attribute type 21 has an invalid length. [ 631.088544][T24395] netlink: 128 bytes leftover after parsing attributes in process `syz.1.4554'. [ 631.109381][T24395] netlink: 'syz.1.4554': attribute type 5 has an invalid length. [ 631.133458][T24395] netlink: 'syz.1.4554': attribute type 6 has an invalid length. [ 631.150516][T24395] netlink: 'syz.1.4554': attribute type 21 has an invalid length. [ 631.198218][T24395] netlink: 'syz.1.4554': attribute type 5 has an invalid length. [ 631.244487][T24395] netlink: 'syz.1.4554': attribute type 6 has an invalid length. [ 631.282542][T24395] netlink: 'syz.1.4554': attribute type 21 has an invalid length. [ 631.314113][T24395] netlink: 'syz.1.4554': attribute type 5 has an invalid length. [ 631.346664][T24395] netlink: 'syz.1.4554': attribute type 6 has an invalid length. [ 631.370667][T24395] netlink: 'syz.1.4554': attribute type 21 has an invalid length. [ 631.391140][ T9] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 632.180672][ T6791] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 632.189220][ C1] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 632.433895][T18270] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 632.512297][ T6791] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 632.520762][ C1] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 633.893968][T24553] __nla_validate_parse: 69 callbacks suppressed [ 633.893987][T24553] netlink: 28 bytes leftover after parsing attributes in process `syz.0.4587'. [ 634.310347][T24524] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 634.403368][T24524] batman_adv: batadv0: Interface deactivated: veth5 [ 634.420152][ C1] ip6_tunnel: ip6gretap1 xmit: Local address not yet configured! [ 634.471847][ T6791] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 634.486350][T24527] 8021q: adding VLAN 0 to HW filter on device bond0 [ 634.498273][T24527] 8021q: adding VLAN 0 to HW filter on device team0 [ 634.520763][T24527] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 634.536899][T16347] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 634.545679][ C0] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 634.586503][T24527] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 634.704565][T24554] bond6: Removing last ns target with arp_interval on [ 634.721943][T24561] syzkaller1: entered promiscuous mode [ 634.732590][T24561] syzkaller1: entered allmulticast mode [ 634.848874][T24573] FAULT_INJECTION: forcing a failure. [ 634.848874][T24573] name failslab, interval 1, probability 0, space 0, times 0 [ 634.873320][T24573] CPU: 0 UID: 0 PID: 24573 Comm: syz.4.4592 Not tainted syzkaller #0 PREEMPT(full) [ 634.873349][T24573] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 04/18/2026 [ 634.873363][T24573] Call Trace: [ 634.873371][T24573] [ 634.873380][T24573] dump_stack_lvl+0xe8/0x150 [ 634.873409][T24573] should_fail_ex+0x412/0x560 [ 634.873441][T24573] should_failslab+0xa8/0x100 [ 634.873476][T24573] __kmalloc_noprof+0xe8/0x760 [ 634.873512][T24573] ? genl_family_rcv_msg_attrs_parse+0xd0/0x2f0 [ 634.873553][T24573] genl_family_rcv_msg_attrs_parse+0xd0/0x2f0 [ 634.873588][T24573] ? kernel_text_address+0xa5/0xe0 [ 634.873624][T24573] genl_family_rcv_msg_doit+0xd9/0x330 [ 634.873675][T24573] ? __asan_memcpy+0x40/0x70 [ 634.873705][T24573] ? __pfx_genl_family_rcv_msg_doit+0x10/0x10 [ 634.873748][T24573] ? apparmor_capable+0x126/0x170 [ 634.873784][T24573] ? bpf_lsm_capable+0x9/0x20 [ 634.873805][T24573] ? security_capable+0x7e/0x2c0 [ 634.873838][T24573] genl_rcv_msg+0x61c/0x7a0 [ 634.873878][T24573] ? __pfx_genl_rcv_msg+0x10/0x10 [ 634.873909][T24573] ? __pfx_nl802154_pre_doit+0x10/0x10 [ 634.873931][T24573] ? __pfx_nl802154_del_llsec_devkey+0x10/0x10 [ 634.873957][T24573] ? __pfx_nl802154_post_doit+0x10/0x10 [ 634.873996][T24573] netlink_rcv_skb+0x232/0x4b0 [ 634.874025][T24573] ? __pfx_genl_rcv_msg+0x10/0x10 [ 634.874059][T24573] ? __pfx_netlink_rcv_skb+0x10/0x10 [ 634.874104][T24573] ? down_read+0x270/0x2e0 [ 634.874131][T24573] ? genl_rcv+0xd/0x40 [ 634.874164][T24573] genl_rcv+0x28/0x40 [ 634.874194][T24573] netlink_unicast+0x75c/0x8e0 [ 634.874230][T24573] netlink_sendmsg+0x813/0xb40 [ 634.874270][T24573] ? __pfx_netlink_sendmsg+0x10/0x10 [ 634.874301][T24573] ? aa_sock_msg_perm+0xf1/0x1b0 [ 634.874330][T24573] ? bpf_lsm_socket_sendmsg+0x9/0x20 [ 634.874363][T24573] ____sys_sendmsg+0x972/0x9f0 [ 634.874391][T24573] ? __might_fault+0xaf/0x130 [ 634.874426][T24573] ? __pfx_____sys_sendmsg+0x10/0x10 [ 634.874465][T24573] ? import_iovec+0x73/0xa0 [ 634.874500][T24573] ___sys_sendmsg+0x2a5/0x360 [ 634.874535][T24573] ? __lock_acquire+0x6b5/0x2cf0 [ 634.874564][T24573] ? __pfx____sys_sendmsg+0x10/0x10 [ 634.874633][T24573] ? __fget_files+0x2a/0x420 [ 634.874663][T24573] ? __fget_files+0x3a0/0x420 [ 634.874701][T24573] __x64_sys_sendmsg+0x1bd/0x2a0 [ 634.874734][T24573] ? __pfx___x64_sys_sendmsg+0x10/0x10 [ 634.874775][T24573] ? __pfx_ksys_write+0x10/0x10 [ 634.874816][T24573] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 634.874840][T24573] do_syscall_64+0x15f/0xf80 [ 634.874865][T24573] ? trace_irq_disable+0x3b/0x140 [ 634.874897][T24573] ? clear_bhb_loop+0x40/0x90 [ 634.874924][T24573] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 634.874945][T24573] RIP: 0033:0x7f8cce19cdd9 [ 634.874980][T24573] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 634.874998][T24573] RSP: 002b:00007f8ccf088028 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 634.875019][T24573] RAX: ffffffffffffffda RBX: 00007f8cce415fa0 RCX: 00007f8cce19cdd9 [ 634.875034][T24573] RDX: 0000000000000000 RSI: 0000200000000580 RDI: 000000000000000b [ 634.875047][T24573] RBP: 00007f8ccf088090 R08: 0000000000000000 R09: 0000000000000000 [ 634.875060][T24573] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 634.875072][T24573] R13: 00007f8cce416038 R14: 00007f8cce415fa0 R15: 00007ffc2d46ce38 [ 634.875107][T24573] [ 635.449184][T24579] netlink: 8 bytes leftover after parsing attributes in process `syz.3.4594'. [ 635.739073][T23963] block nbd3: NBD_DISCONNECT [ 635.752239][T23963] block nbd3: Disconnected due to user request. [ 635.763251][T23963] block nbd3: shutting down sockets [ 635.775623][T24587] netlink: 8 bytes leftover after parsing attributes in process `syz.3.4596'. [ 635.949269][T24591] netlink: 28 bytes leftover after parsing attributes in process `syz.4.4597'. [ 636.091589][T23963] udevd[23963]: inotify_add_watch(7, /dev/nbd3, 10) failed: No such file or directory [ 636.383144][T24605] netlink: 36 bytes leftover after parsing attributes in process `syz.3.4600'. [ 636.618579][T24609] ieee802154 phy0 wpan0: encryption failed: -90 [ 636.644655][T24609] netlink: 8 bytes leftover after parsing attributes in process `syz.2.4601'. [ 636.658451][T24609] netlink: 8 bytes leftover after parsing attributes in process `syz.2.4601'. [ 637.208791][T24625] validate_nla: 92 callbacks suppressed [ 637.208810][T24625] netlink: 'syz.2.4607': attribute type 2 has an invalid length. [ 637.357964][T24636] netlink: 'syz.1.4609': attribute type 4 has an invalid length. [ 637.419876][T24638] netlink: 'syz.1.4609': attribute type 4 has an invalid length. [ 637.626739][ T6791] net_ratelimit: 14 callbacks suppressed [ 637.626756][ T6791] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 637.800686][T24658] FAULT_INJECTION: forcing a failure. [ 637.800686][T24658] name failslab, interval 1, probability 0, space 0, times 0 [ 637.813793][T24658] CPU: 0 UID: 0 PID: 24658 Comm: syz.2.4616 Not tainted syzkaller #0 PREEMPT(full) [ 637.813821][T24658] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 04/18/2026 [ 637.813834][T24658] Call Trace: [ 637.813842][T24658] [ 637.813850][T24658] dump_stack_lvl+0xe8/0x150 [ 637.813890][T24658] should_fail_ex+0x412/0x560 [ 637.813922][T24658] should_failslab+0xa8/0x100 [ 637.813958][T24658] __kmalloc_noprof+0xe8/0x760 [ 637.813988][T24658] ? bpf_test_init+0x9f/0x150 [ 637.814012][T24658] ? __lock_acquire+0x6b5/0x2cf0 [ 637.814038][T24658] bpf_test_init+0x9f/0x150 [ 637.814067][T24658] bpf_prog_test_run_skb+0x392/0x2260 [ 637.814116][T24658] ? __fget_files+0x3a0/0x420 [ 637.814139][T24658] ? __fget_files+0x2a/0x420 [ 637.814169][T24658] ? __pfx_bpf_prog_test_run_skb+0x10/0x10 [ 637.814196][T24658] bpf_prog_test_run+0x2c7/0x340 [ 637.814221][T24658] __sys_bpf+0x643/0x950 [ 637.814265][T24658] ? __pfx___sys_bpf+0x10/0x10 [ 637.814310][T24658] ? ksys_write+0x242/0x270 [ 637.814338][T24658] ? __pfx_ksys_write+0x10/0x10 [ 637.814370][T24658] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 637.814391][T24658] __x64_sys_bpf+0x7c/0x90 [ 637.814424][T24658] do_syscall_64+0x15f/0xf80 [ 637.814446][T24658] ? trace_irq_disable+0x3b/0x140 [ 637.814475][T24658] ? clear_bhb_loop+0x40/0x90 [ 637.814499][T24658] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 637.814519][T24658] RIP: 0033:0x7f3bccd9cdd9 [ 637.814537][T24658] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 637.814554][T24658] RSP: 002b:00007f3bcdc40028 EFLAGS: 00000246 ORIG_RAX: 0000000000000141 [ 637.814574][T24658] RAX: ffffffffffffffda RBX: 00007f3bcd015fa0 RCX: 00007f3bccd9cdd9 [ 637.814588][T24658] RDX: 000000000000004c RSI: 0000200000000240 RDI: 000000000000000a [ 637.814600][T24658] RBP: 00007f3bcdc40090 R08: 0000000000000000 R09: 0000000000000000 [ 637.814612][T24658] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 637.814623][T24658] R13: 00007f3bcd016038 R14: 00007f3bcd015fa0 R15: 00007ffdf0e5b508 [ 637.814655][T24658] [ 638.552183][T24682] netlink: 8 bytes leftover after parsing attributes in process `syz.3.4621'. [ 638.732454][T24689] netlink: 72 bytes leftover after parsing attributes in process `syz.1.4622'. [ 638.752079][T24689] netlink: 12 bytes leftover after parsing attributes in process `syz.1.4622'. [ 638.936915][T24698] __nla_validate_parse: 3 callbacks suppressed [ 638.936937][T24698] netlink: 28 bytes leftover after parsing attributes in process `syz.3.4624'. [ 639.075379][T24703] openvswitch: netlink: Either Ethernet header or EtherType is required. [ 639.208827][T24706] netlink: 'syz.4.4626': attribute type 2 has an invalid length. [ 639.248146][T24706] netlink: 'syz.4.4626': attribute type 9 has an invalid length. [ 639.288629][T24706] netlink: 209852 bytes leftover after parsing attributes in process `syz.4.4626'. [ 639.410454][T24706] netlink: 12 bytes leftover after parsing attributes in process `syz.4.4626'. [ 639.615972][T24727] netlink: 12 bytes leftover after parsing attributes in process `syz.3.4631'. [ 639.840932][T24727] bond3: entered promiscuous mode [ 639.846510][T24727] 8021q: adding VLAN 0 to HW filter on device bond3 [ 639.884547][T24736] netlink: 8 bytes leftover after parsing attributes in process `syz.4.4634'. [ 639.910560][T24740] FAULT_INJECTION: forcing a failure. [ 639.910560][T24740] name failslab, interval 1, probability 0, space 0, times 0 [ 639.928044][T24736] netlink: 8 bytes leftover after parsing attributes in process `syz.4.4634'. [ 639.928482][T24727] netlink: 32 bytes leftover after parsing attributes in process `syz.3.4631'. [ 639.950547][T24736] FAULT_INJECTION: forcing a failure. [ 639.950547][T24736] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 639.969714][T24740] CPU: 0 UID: 0 PID: 24740 Comm: syz.1.4636 Not tainted syzkaller #0 PREEMPT(full) [ 639.969743][T24740] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 04/18/2026 [ 639.969757][T24740] Call Trace: [ 639.969765][T24740] [ 639.969775][T24740] dump_stack_lvl+0xe8/0x150 [ 639.969804][T24740] should_fail_ex+0x412/0x560 [ 639.969839][T24740] should_failslab+0xa8/0x100 [ 639.969874][T24740] __kmalloc_noprof+0xe8/0x760 [ 639.969905][T24740] ? sk_prot_alloc+0xe7/0x210 [ 639.969937][T24740] sk_prot_alloc+0xe7/0x210 [ 639.969982][T24740] ? sk_alloc+0x27/0x390 [ 639.970010][T24740] sk_alloc+0x3a/0x390 [ 639.970039][T24740] bpf_prog_test_run_skb+0x415/0x2260 [ 639.970087][T24740] ? __fget_files+0x3a0/0x420 [ 639.970111][T24740] ? __fget_files+0x2a/0x420 [ 639.970141][T24740] ? __pfx_bpf_prog_test_run_skb+0x10/0x10 [ 639.970169][T24740] bpf_prog_test_run+0x2c7/0x340 [ 639.970195][T24740] __sys_bpf+0x643/0x950 [ 639.970235][T24740] ? __pfx___sys_bpf+0x10/0x10 [ 639.970284][T24740] ? ksys_write+0x242/0x270 [ 639.970317][T24740] ? __pfx_ksys_write+0x10/0x10 [ 639.970353][T24740] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 639.970376][T24740] __x64_sys_bpf+0x7c/0x90 [ 639.970407][T24740] do_syscall_64+0x15f/0xf80 [ 639.970432][T24740] ? trace_irq_disable+0x3b/0x140 [ 639.970464][T24740] ? clear_bhb_loop+0x40/0x90 [ 639.970491][T24740] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 639.970513][T24740] RIP: 0033:0x7f940699cdd9 [ 639.970533][T24740] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 639.970551][T24740] RSP: 002b:00007f94077a8028 EFLAGS: 00000246 ORIG_RAX: 0000000000000141 [ 639.970574][T24740] RAX: ffffffffffffffda RBX: 00007f9406c15fa0 RCX: 00007f940699cdd9 [ 639.970590][T24740] RDX: 000000000000004c RSI: 0000200000000240 RDI: 000000000000000a [ 639.970604][T24740] RBP: 00007f94077a8090 R08: 0000000000000000 R09: 0000000000000000 [ 639.970617][T24740] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 639.970629][T24740] R13: 00007f9406c16038 R14: 00007f9406c15fa0 R15: 00007fffd6424108 [ 639.970664][T24740] [ 640.023425][T24736] CPU: 1 UID: 0 PID: 24736 Comm: syz.4.4634 Not tainted syzkaller #0 PREEMPT(full) [ 640.023509][T24736] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 04/18/2026 [ 640.023544][T24736] Call Trace: [ 640.023565][T24736] [ 640.023587][T24736] dump_stack_lvl+0xe8/0x150 [ 640.023672][T24736] should_fail_ex+0x412/0x560 [ 640.023742][T24736] _copy_to_user+0x31/0xb0 [ 640.023834][T24736] simple_read_from_buffer+0xe1/0x170 [ 640.023910][T24736] proc_fail_nth_read+0x1bb/0x230 [ 640.024003][T24736] ? __pfx_proc_fail_nth_read+0x10/0x10 [ 640.024099][T24736] ? rw_verify_area+0x2a6/0x4d0 [ 640.024180][T24736] ? __pfx_proc_fail_nth_read+0x10/0x10 [ 640.024263][T24736] vfs_read+0x20c/0xa70 [ 640.024358][T24736] ? __pfx___mutex_lock+0x10/0x10 [ 640.024432][T24736] ? __pfx_vfs_read+0x10/0x10 [ 640.024516][T24736] ? __fget_files+0x2a/0x420 [ 640.024595][T24736] ? __fget_files+0x3a0/0x420 [ 640.024657][T24736] ? __fget_files+0x2a/0x420 [ 640.024752][T24736] ksys_read+0x150/0x270 [ 640.024845][T24736] ? __pfx_ksys_read+0x10/0x10 [ 640.024948][T24736] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 640.025016][T24736] do_syscall_64+0x15f/0xf80 [ 640.025089][T24736] ? trace_irq_disable+0x3b/0x140 [ 640.025178][T24736] ? clear_bhb_loop+0x40/0x90 [ 640.025265][T24736] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 640.025330][T24736] RIP: 0033:0x7f8cce15d60e [ 640.025393][T24736] Code: 08 0f 85 a5 a8 ff ff 49 89 fb 48 89 f0 48 89 d7 48 89 ce 4c 89 c2 4d 89 ca 4c 8b 44 24 08 4c 8b 4c 24 10 4c 89 5c 24 08 0f 05 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 80 00 00 00 00 48 83 ec 08 [ 640.025462][T24736] RSP: 002b:00007f8ccf087fe8 EFLAGS: 00000246 ORIG_RAX: 0000000000000000 [ 640.025540][T24736] RAX: ffffffffffffffda RBX: 00007f8ccf0886c0 RCX: 00007f8cce15d60e [ 640.025584][T24736] RDX: 000000000000000f RSI: 00007f8ccf0880a0 RDI: 000000000000000a [ 640.025618][T24736] RBP: 00007f8ccf088090 R08: 0000000000000000 R09: 0000000000000000 [ 640.025660][T24736] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 640.025693][T24736] R13: 00007f8cce416038 R14: 00007f8cce415fa0 R15: 00007ffc2d46ce38 [ 640.025783][T24736] [ 640.438738][ T1047] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 640.447382][ T1047] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 640.458254][ T1047] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 640.466393][ T1047] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 640.484014][ T5767] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 640.493743][ T5767] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 640.517701][ T9] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 640.528322][ T9] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 640.662401][T24755] netlink: 36 bytes leftover after parsing attributes in process `syz.1.4640'. [ 640.926587][T24789] netlink: 104 bytes leftover after parsing attributes in process `syz.4.4649'. [ 640.939817][T24789] netlink: 12 bytes leftover after parsing attributes in process `syz.4.4649'. [ 641.046858][T24792] FAULT_INJECTION: forcing a failure. [ 641.046858][T24792] name failslab, interval 1, probability 0, space 0, times 0 [ 641.061110][T24792] CPU: 1 UID: 0 PID: 24792 Comm: syz.3.4650 Not tainted syzkaller #0 PREEMPT(full) [ 641.061138][T24792] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 04/18/2026 [ 641.061151][T24792] Call Trace: [ 641.061159][T24792] [ 641.061167][T24792] dump_stack_lvl+0xe8/0x150 [ 641.061196][T24792] should_fail_ex+0x412/0x560 [ 641.061228][T24792] should_failslab+0xa8/0x100 [ 641.061265][T24792] __kmalloc_noprof+0xe8/0x760 [ 641.061294][T24792] ? security_sk_alloc+0x52/0x360 [ 641.061332][T24792] security_sk_alloc+0x52/0x360 [ 641.061366][T24792] sk_prot_alloc+0x101/0x210 [ 641.061390][T24792] ? sk_alloc+0x27/0x390 [ 641.061417][T24792] sk_alloc+0x3a/0x390 [ 641.061446][T24792] bpf_prog_test_run_skb+0x415/0x2260 [ 641.061494][T24792] ? __fget_files+0x3a0/0x420 [ 641.061518][T24792] ? __fget_files+0x2a/0x420 [ 641.061547][T24792] ? __pfx_bpf_prog_test_run_skb+0x10/0x10 [ 641.061574][T24792] bpf_prog_test_run+0x2c7/0x340 [ 641.061598][T24792] __sys_bpf+0x643/0x950 [ 641.061631][T24792] ? __pfx___sys_bpf+0x10/0x10 [ 641.061685][T24792] ? ksys_write+0x242/0x270 [ 641.061717][T24792] ? __pfx_ksys_write+0x10/0x10 [ 641.061769][T24792] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 641.061792][T24792] __x64_sys_bpf+0x7c/0x90 [ 641.061823][T24792] do_syscall_64+0x15f/0xf80 [ 641.061853][T24792] ? trace_irq_disable+0x3b/0x140 [ 641.061885][T24792] ? clear_bhb_loop+0x40/0x90 [ 641.061912][T24792] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 641.061933][T24792] RIP: 0033:0x7fbc9619cdd9 [ 641.061952][T24792] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 641.061971][T24792] RSP: 002b:00007fbc9713e028 EFLAGS: 00000246 ORIG_RAX: 0000000000000141 [ 641.061994][T24792] RAX: ffffffffffffffda RBX: 00007fbc96415fa0 RCX: 00007fbc9619cdd9 [ 641.062010][T24792] RDX: 000000000000004c RSI: 0000200000000240 RDI: 000000000000000a [ 641.062023][T24792] RBP: 00007fbc9713e090 R08: 0000000000000000 R09: 0000000000000000 [ 641.062036][T24792] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 641.062048][T24792] R13: 00007fbc96416038 R14: 00007fbc96415fa0 R15: 00007ffc9907d048 [ 641.062082][T24792] [ 641.497865][T24816] netlink: 'syz.2.4655': attribute type 1 has an invalid length. [ 641.545026][T24816] 8021q: adding VLAN 0 to HW filter on device bond7 [ 641.631197][T24816] vlan1: entered promiscuous mode [ 641.637993][T24816] bond7: entered promiscuous mode [ 641.643725][T24816] vlan1: entered allmulticast mode [ 641.648926][T24816] bond7: entered allmulticast mode [ 641.849614][T24833] netlink: 'syz.0.4656': attribute type 1 has an invalid length. [ 642.560490][ T7447] smc: removing ib device syz2 [ 642.654203][T24853] net_ratelimit: 7 callbacks suppressed [ 642.654223][T24853] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 642.673920][T24853] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 642.682878][T24853] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 642.694850][T24853] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 642.730357][T24853] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 642.762206][T24853] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 642.783626][ T7447] smbdirect: ib_dev[syz2] removed [ 642.813114][T24858] x_tables: duplicate underflow at hook 4 [ 642.840879][T24852] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 642.898209][T24852] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 643.196144][T24879] netlink: 'syz.0.4670': attribute type 16 has an invalid length. [ 643.230474][T24879] netlink: 'syz.0.4670': attribute type 17 has an invalid length. [ 643.290654][ T6790] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 643.305932][T24879] A link change request failed with some changes committed already. Interface virt_wifi0 may have been left with an inconsistent configuration, please check. [ 644.167224][T24918] __nla_validate_parse: 9 callbacks suppressed [ 644.167243][T24918] netlink: 28 bytes leftover after parsing attributes in process `syz.1.4684'. [ 644.471758][T24924] netlink: 'syz.1.4686': attribute type 1 has an invalid length. [ 644.503949][T24924] netlink: 'syz.1.4686': attribute type 2 has an invalid length. [ 644.525143][T24924] netlink: 'syz.1.4686': attribute type 1 has an invalid length. [ 644.541177][T24924] netlink: 8 bytes leftover after parsing attributes in process `syz.1.4686'. [ 644.569904][T24926] syzkaller1: entered promiscuous mode [ 644.592503][T24926] syzkaller1: entered allmulticast mode [ 644.882011][T24942] netlink: 72 bytes leftover after parsing attributes in process `syz.2.4690'. [ 644.906391][T24945] netlink: 'syz.0.4691': attribute type 9 has an invalid length. [ 644.927255][T24944] netlink: 'syz.0.4691': attribute type 9 has an invalid length. [ 644.946884][T24944] netlink: 212340 bytes leftover after parsing attributes in process `syz.0.4691'. [ 644.965795][T24945] netlink: 212340 bytes leftover after parsing attributes in process `syz.0.4691'. [ 645.172037][T24959] netlink: 'syz.2.4694': attribute type 10 has an invalid length. [ 645.223687][T24959] 8021q: adding VLAN 0 to HW filter on device team0 [ 645.305450][T24959] team0: entered allmulticast mode [ 645.322448][T24959] team_slave_0: entered allmulticast mode [ 645.330236][T24959] team_slave_1: entered allmulticast mode [ 645.348609][T24959] syz_tun: entered allmulticast mode [ 645.372177][T24959] bond0: (slave team0): Enslaving as an active interface with an up link [ 645.690323][T24979] sctp: [Deprecated]: syz.4.4702 (pid 24979) Use of int in max_burst socket option. [ 645.690323][T24979] Use struct sctp_assoc_value instead [ 645.732847][T24979] netlink: 4 bytes leftover after parsing attributes in process `syz.4.4702'. [ 645.824297][T24988] netlink: 72 bytes leftover after parsing attributes in process `syz.0.4704'. [ 646.023579][T25002] sctp: [Deprecated]: syz.4.4711 (pid 25002) Use of int in maxseg socket option. [ 646.023579][T25002] Use struct sctp_assoc_value instead [ 646.046320][T25007] netlink: 4 bytes leftover after parsing attributes in process `syz.2.4709'. [ 646.065417][T25007] netlink: 12 bytes leftover after parsing attributes in process `syz.2.4709'. [ 646.160116][T25011] netlink: 'syz.4.4712': attribute type 1 has an invalid length. [ 646.190475][T25011] netlink: 'syz.4.4712': attribute type 2 has an invalid length. [ 646.204802][T25011] netlink: 8 bytes leftover after parsing attributes in process `syz.4.4712'. [ 647.081605][T25072] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 647.205036][T25067] hmó3)ó: entered promiscuous mode [ 647.719750][T25098] hsr0: left allmulticast mode [ 647.733394][T25098] hsr_slave_0: left allmulticast mode [ 647.745402][T25098] hsr_slave_1: left allmulticast mode [ 647.761257][T25098] macvlan0: left allmulticast mode [ 647.793583][T25098] 0ªî{X¹¦: renamed from gretap0 [ 647.821716][T25098] 0ªî{X¹¦: entered allmulticast mode [ 647.838696][T25098] net_ratelimit: 9 callbacks suppressed [ 647.838729][T25098] A link change request failed with some changes committed already. Interface 30ªî{X¹¦ may have been left with an inconsistent configuration, please check. [ 647.975466][T25108] syzkaller0: entered promiscuous mode [ 647.981607][T25108] syzkaller0: entered allmulticast mode [ 648.523885][T25132] syzkaller0: entered promiscuous mode [ 648.537293][T25132] syzkaller0: entered allmulticast mode [ 648.660000][T17745] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 648.814666][T25146] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 648.825997][ C1] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 648.936773][T25150] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 648.945790][ C1] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 649.110252][T25156] FAULT_INJECTION: forcing a failure. [ 649.110252][T25156] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 649.123743][T25156] CPU: 0 UID: 0 PID: 25156 Comm: syz.1.4749 Not tainted syzkaller #0 PREEMPT(full) [ 649.123771][T25156] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 04/18/2026 [ 649.123784][T25156] Call Trace: [ 649.123792][T25156] [ 649.123800][T25156] dump_stack_lvl+0xe8/0x150 [ 649.123826][T25156] should_fail_ex+0x412/0x560 [ 649.123854][T25156] _copy_to_user+0x31/0xb0 [ 649.123884][T25156] bpf_test_finish+0x53c/0x6b0 [ 649.123920][T25156] ? __pfx_bpf_test_finish+0x10/0x10 [ 649.123945][T25156] ? eth_type_trans+0x348/0x7e0 [ 649.123995][T25156] bpf_prog_test_run_skb+0x1250/0x2260 [ 649.124045][T25156] ? __fget_files+0x3a0/0x420 [ 649.124068][T25156] ? __fget_files+0x2a/0x420 [ 649.124096][T25156] ? __pfx_bpf_prog_test_run_skb+0x10/0x10 [ 649.124122][T25156] bpf_prog_test_run+0x2c7/0x340 [ 649.124147][T25156] __sys_bpf+0x643/0x950 [ 649.124179][T25156] ? __pfx___sys_bpf+0x10/0x10 [ 649.124226][T25156] ? ksys_write+0x242/0x270 [ 649.124258][T25156] ? __pfx_ksys_write+0x10/0x10 [ 649.124291][T25156] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 649.124314][T25156] __x64_sys_bpf+0x7c/0x90 [ 649.124343][T25156] do_syscall_64+0x15f/0xf80 [ 649.124366][T25156] ? trace_irq_disable+0x3b/0x140 [ 649.124397][T25156] ? clear_bhb_loop+0x40/0x90 [ 649.124422][T25156] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 649.124443][T25156] RIP: 0033:0x7f940699cdd9 [ 649.124463][T25156] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 649.124480][T25156] RSP: 002b:00007f94077a8028 EFLAGS: 00000246 ORIG_RAX: 0000000000000141 [ 649.124502][T25156] RAX: ffffffffffffffda RBX: 00007f9406c15fa0 RCX: 00007f940699cdd9 [ 649.124517][T25156] RDX: 000000000000004c RSI: 0000200000000240 RDI: 000000000000000a [ 649.124530][T25156] RBP: 00007f94077a8090 R08: 0000000000000000 R09: 0000000000000000 [ 649.124542][T25156] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000002 [ 649.124554][T25156] R13: 00007f9406c16038 R14: 00007f9406c15fa0 R15: 00007fffd6424108 [ 649.124582][T25156] [ 649.700144][ T5767] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 649.708724][T17745] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 649.790815][ T5767] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 650.751694][ T9] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 651.887861][T25176] can: request_module (can-proto-0) failed. [ 652.126075][T25187] validate_nla: 9 callbacks suppressed [ 652.126095][T25187] netlink: 'syz.0.4760': attribute type 8 has an invalid length. [ 652.208520][T25187] mac80211_hwsim hwsim33 syzkaller0: entered promiscuous mode [ 652.227969][T25187] mac80211_hwsim hwsim33 syzkaller0: entered allmulticast mode [ 653.101619][T25213] netlink: 'syz.1.4765': attribute type 1 has an invalid length. [ 653.158582][T25213] 8021q: adding VLAN 0 to HW filter on device bond4 [ 653.179035][T25213] __nla_validate_parse: 17 callbacks suppressed [ 653.179057][T25213] netlink: 44 bytes leftover after parsing attributes in process `syz.1.4765'. [ 653.195542][T25213] netlink: 40 bytes leftover after parsing attributes in process `syz.1.4765'. [ 653.203496][T25217] netlink: 52 bytes leftover after parsing attributes in process `syz.4.4767'. [ 653.328082][T25226] netlink: 52 bytes leftover after parsing attributes in process `syz.4.4767'. [ 653.400131][T25229] netlink: 12 bytes leftover after parsing attributes in process `syz.0.4766'. [ 653.636866][T25233] netlink: 240 bytes leftover after parsing attributes in process `syz.1.4772'. [ 653.649550][T25233] netlink: 56 bytes leftover after parsing attributes in process `syz.1.4772'. [ 653.674149][T25235] netlink: 24 bytes leftover after parsing attributes in process `syz.4.4770'. [ 653.695506][T25238] netlink: 24 bytes leftover after parsing attributes in process `syz.4.4770'. [ 653.783755][T25240] netlink: 12 bytes leftover after parsing attributes in process `syz.1.4773'. [ 653.862073][ T9] net_ratelimit: 3 callbacks suppressed [ 653.862092][ T9] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 654.624064][T25270] netlink: 'syz.4.4780': attribute type 1 has an invalid length. [ 654.900072][T18270] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 654.919734][T25272] bond7: (slave veth3): Enslaving as an active interface with a down link [ 654.975200][T25273] bond7: (slave veth5): Enslaving as an active interface with a down link [ 655.012260][T25275] 8021q: adding VLAN 0 to HW filter on device bond7 [ 655.781197][ T6790] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 655.869687][T16343] netdevsim netdevsim3 eth0: set [1, 0] type 2 family 0 port 6081 - 0 [ 655.886215][T16343] netdevsim netdevsim3 eth1: set [1, 0] type 2 family 0 port 6081 - 0 [ 655.902029][T16343] netdevsim netdevsim3 eth2: set [1, 0] type 2 family 0 port 6081 - 0 [ 655.917356][T16343] netdevsim netdevsim3 eth3: set [1, 0] type 2 family 0 port 6081 - 0 [ 655.939733][ T9] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 656.374293][T25333] 8021q: adding VLAN 0 to HW filter on device bond0 [ 656.426824][T25333] 8021q: adding VLAN 0 to HW filter on device team0 [ 656.514443][T25333] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 656.569119][T25333] veth0: left promiscuous mode [ 656.609718][T25333] veth0: left allmulticast mode [ 656.738780][T25333] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 656.767799][T25333] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 656.784788][T25333] hsr0: Slave A (hsr_slave_0) is not up; please bring it up to get a fully working HSR network [ 656.795551][T25333] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 656.812086][T25333] veth1_vlan: left promiscuous mode [ 656.819350][T25333] veth0_vlan: left promiscuous mode [ 656.827594][T25333] veth0_vlan: entered promiscuous mode [ 656.838624][T25333] veth1_vlan: entered promiscuous mode [ 656.855471][T25333] veth1_macvtap: left promiscuous mode [ 656.862887][T25333] veth0_macvtap: left promiscuous mode [ 656.870721][T25333] veth0_macvtap: entered promiscuous mode [ 656.878071][T25333] veth1_macvtap: entered promiscuous mode [ 656.918353][T25333] A link change request failed with some changes committed already. Interface wlan1 may have been left with an inconsistent configuration, please check. [ 656.964855][T16347] bridge0: port 1(bridge_slave_0) entered blocking state [ 656.972188][T16347] bridge0: port 1(bridge_slave_0) entered forwarding state [ 656.981700][T18270] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 656.993461][T16347] bridge0: port 2(bridge_slave_1) entered blocking state [ 657.000683][T16347] bridge0: port 2(bridge_slave_1) entered forwarding state [ 657.960943][T25361] netlink: 'syz.1.4802': attribute type 1 has an invalid length. [ 658.021131][T18270] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 658.157105][T25363] bond5: (slave vxcan3): The slave device specified does not support setting the MAC address [ 658.168697][T25363] bond5: (slave vxcan3): Error -95 calling set_mac_address [ 658.220619][T25364] hmac(sha224): entered promiscuous mode [ 658.322789][T25366] macvlan2: entered promiscuous mode [ 658.329565][T25366] macvlan2: entered allmulticast mode [ 658.338978][T25366] bond5: entered promiscuous mode [ 658.356123][T25366] 8021q: adding VLAN 0 to HW filter on device macvlan2 [ 658.374679][T25366] bond5: left promiscuous mode [ 658.614801][T25371] __nla_validate_parse: 9 callbacks suppressed [ 658.614821][T25371] netlink: 108 bytes leftover after parsing attributes in process `syz.1.4805'. [ 658.658098][T25373] xt_hashlimit: overflow, rate too high: 0 [ 658.824779][ T6790] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 658.838318][T25376] netlink: 64 bytes leftover after parsing attributes in process `syz.0.4808'. [ 658.876547][T25376] netlink: 64 bytes leftover after parsing attributes in process `syz.0.4808'. [ 659.005745][T25382] netlink: 'syz.0.4809': attribute type 1 has an invalid length. [ 659.013903][T25382] netlink: 'syz.0.4809': attribute type 2 has an invalid length. [ 659.023652][T25382] netlink: 'syz.0.4809': attribute type 1 has an invalid length. [ 659.032692][T25382] netlink: 16 bytes leftover after parsing attributes in process `syz.0.4809'. [ 659.059915][T17745] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 659.354545][T25389] 8021q: adding VLAN 0 to HW filter on device bond0 [ 659.375661][T25396] netlink: 44 bytes leftover after parsing attributes in process `syz.1.4814'. [ 659.386737][ T6791] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 659.401342][T25389] 8021q: adding VLAN 0 to HW filter on device team0 [ 659.425681][T25396] netlink: 47 bytes leftover after parsing attributes in process `syz.1.4814'. [ 659.453834][T25396] netlink: 'syz.1.4814': attribute type 6 has an invalid length. [ 659.469501][T25396] netlink: 'syz.1.4814': attribute type 6 has an invalid length. [ 659.494854][T25396] netlink: 20 bytes leftover after parsing attributes in process `syz.1.4814'. [ 659.502013][T25389] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 659.530576][T25396] netlink: 8 bytes leftover after parsing attributes in process `syz.1.4814'. [ 659.638127][T25389] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 659.680533][T25389] hsr0: Slave A (hsr_slave_0) is not up; please bring it up to get a fully working HSR network [ 659.696854][T25389] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 659.720562][T25389] A link change request failed with some changes committed already. Interface virt_wifi0 may have been left with an inconsistent configuration, please check. [ 659.741907][ T47] bridge0: port 1(bridge_slave_0) entered blocking state [ 659.749070][T25406] netlink: 'syz.3.4817': attribute type 39 has an invalid length. [ 659.757052][ T47] bridge0: port 1(bridge_slave_0) entered forwarding state [ 659.795754][ T47] bridge0: port 2(bridge_slave_1) entered blocking state [ 659.803040][ T47] bridge0: port 2(bridge_slave_1) entered forwarding state [ 659.888066][T25396] erspan2: entered allmulticast mode [ 659.908451][T25404] netlink: 12 bytes leftover after parsing attributes in process `syz.2.4816'. [ 659.954155][T25404] tipc: Disabling bearer [ 660.123130][T18270] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 660.165562][T25419] IPVS: sync thread started: state = BACKUP, mcast_ifn = batadv0, syncid = 0, id = 0 [ 660.327231][T25425] netlink: 92 bytes leftover after parsing attributes in process `syz.0.4822'. [ 660.480253][T25438] rdma_rxe: rxe_newlink: failed to add team_slave_0 [ 660.541223][T25443] ip6erspan0: entered allmulticast mode [ 660.778701][T25455] netlink: 'syz.0.4830': attribute type 1 has an invalid length. [ 660.840714][T25455] 8021q: adding VLAN 0 to HW filter on device bond7 [ 661.139832][ T9] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 661.860173][ T6791] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 662.180539][ T9] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 663.220310][ T9] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 663.468606][T25462] bond7: (slave gretap3): making interface the new active one [ 663.521776][T25462] bond7: (slave gretap3): Enslaving as an active interface with an up link [ 663.531580][T25467] syzkaller0: entered promiscuous mode [ 663.547833][T25467] syzkaller0: entered allmulticast mode [ 663.674632][T25474] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 663.683376][ C0] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 663.711168][T25474] netlink: 'syz.0.4835': attribute type 17 has an invalid length. [ 663.722407][T25478] __nla_validate_parse: 2 callbacks suppressed [ 663.722425][T25478] netlink: 488 bytes leftover after parsing attributes in process `syz.2.4834'. [ 663.777665][T25483] netlink: 'syz.0.4835': attribute type 4 has an invalid length. [ 663.792843][T25478] netlink: 1041 bytes leftover after parsing attributes in process `syz.2.4834'. [ 663.829058][T25488] netlink: 'syz.0.4835': attribute type 4 has an invalid length. [ 663.952758][T25472] syzkaller1: entered promiscuous mode [ 663.960395][T25472] syzkaller1: entered allmulticast mode [ 664.098794][T25499] netlink: 4 bytes leftover after parsing attributes in process `syz.3.4839'. [ 664.165715][T25499] netlink: 64 bytes leftover after parsing attributes in process `syz.3.4839'. [ 664.263256][T18270] net_ratelimit: 4 callbacks suppressed [ 664.263276][T18270] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 664.410391][T18270] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 664.433302][T25512] netlink: 24 bytes leftover after parsing attributes in process `syz.4.4843'. [ 664.673643][T25516] netlink: 32 bytes leftover after parsing attributes in process `syz.2.4844'. [ 664.900335][ T6790] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 665.254357][T25541] netlink: 'syz.4.4849': attribute type 10 has an invalid length. [ 665.303716][T18270] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 665.422607][T25547] netlink: 12 bytes leftover after parsing attributes in process `syz.0.4853'. [ 665.468804][T25547] xfrm1: entered promiscuous mode [ 665.478759][T25547] xfrm1: entered allmulticast mode [ 665.497406][T25547] netlink: 12 bytes leftover after parsing attributes in process `syz.0.4853'. [ 665.659397][T25563] netlink: 4 bytes leftover after parsing attributes in process `syz.1.4857'. [ 665.739117][T25570] netlink: 8 bytes leftover after parsing attributes in process `syz.1.4857'. [ 665.762187][T25572] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 665.774310][T25572] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 665.783890][T25572] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 665.794038][T25572] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 665.809162][T25572] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 665.819314][T25572] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 665.948023][T25580] IPVS: sync thread started: state = BACKUP, mcast_ifn = vcan0, syncid = 32, id = 0 [ 666.488856][T25598] netlink: 'syz.1.4866': attribute type 13 has an invalid length. [ 666.725037][T25598] bridge0: port 2(bridge_slave_1) entered disabled state [ 666.732634][T25598] bridge0: port 1(bridge_slave_0) entered disabled state [ 667.044573][T25598] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 667.082613][T25598] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 667.446512][T25598] geneve2: left promiscuous mode [ 667.460413][T25598] geneve3: left promiscuous mode [ 667.465666][T25598] geneve3: left allmulticast mode [ 667.498283][T25598] erspan2: left allmulticast mode [ 667.528005][T25604] tipc: Enabled bearer , priority 0 [ 667.550218][T25600] tipc: Enabling of bearer rejected, already enabled [ 667.578408][ T47] netdevsim netdevsim1 eth0: unset [0, 0] type 1 family 0 port 8472 - 0 [ 667.608830][ T47] netdevsim netdevsim1 eth0: unset [1, 0] type 2 family 0 port 6081 - 0 [ 667.653142][ T47] netdevsim netdevsim1 eth0: unset [1, 1] type 2 family 0 port 20000 - 0 [ 667.706806][ T47] netdevsim netdevsim1 eth1: unset [0, 0] type 1 family 0 port 8472 - 0 [ 667.753629][ T47] netdevsim netdevsim1 eth1: unset [1, 0] type 2 family 0 port 6081 - 0 [ 667.786756][ T47] netdevsim netdevsim1 eth1: unset [1, 1] type 2 family 0 port 20000 - 0 [ 667.837553][T25600] tipc: Disabling bearer [ 667.949361][ T47] netdevsim netdevsim1 eth2: unset [0, 0] type 1 family 0 port 8472 - 0 [ 668.000154][ T47] netdevsim netdevsim1 eth2: unset [1, 0] type 2 family 0 port 6081 - 0 [ 668.029536][ T47] netdevsim netdevsim1 eth2: unset [1, 1] type 2 family 0 port 20000 - 0 [ 668.059235][ T47] netdevsim netdevsim1 eth3: unset [0, 0] type 1 family 0 port 8472 - 0 [ 668.110439][ T47] netdevsim netdevsim1 eth3: unset [1, 0] type 2 family 0 port 6081 - 0 [ 668.140298][ T47] netdevsim netdevsim1 eth3: unset [1, 1] type 2 family 0 port 20000 - 0 [ 668.869758][T25666] __nla_validate_parse: 4 callbacks suppressed [ 668.869781][T25666] netlink: 56 bytes leftover after parsing attributes in process `syz.2.4883'. [ 669.302622][T25696] net_ratelimit: 1023 callbacks suppressed [ 669.302642][T25696] openvswitch: netlink: IPv4 tun info is not correct [ 669.353496][T25702] openvswitch: netlink: IPv4 tun info is not correct [ 669.463235][ T9] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 669.524298][T25698] netlink: 56 bytes leftover after parsing attributes in process `syz.4.4892'. [ 669.534163][T25698] netlink: 16 bytes leftover after parsing attributes in process `syz.4.4892'. [ 669.595136][T25705] netlink: 16 bytes leftover after parsing attributes in process `syz.0.4894'. [ 669.623701][T16347] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 669.634165][ T9] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 669.649858][ T5360] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 669.660640][ T5639] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 669.846060][T25714] netlink: 12 bytes leftover after parsing attributes in process `syz.0.4897'. [ 669.855611][T25714] netlink: 12 bytes leftover after parsing attributes in process `syz.0.4897'. [ 669.870299][ T5360] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 670.062778][T25723] netlink: 'syz.0.4899': attribute type 11 has an invalid length. [ 670.460315][ T7447] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 670.501788][ T9] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 670.554983][T25741] netlink: 'syz.3.4908': attribute type 41 has an invalid length. [ 670.583822][T25739] netlink: 12 bytes leftover after parsing attributes in process `syz.1.4907'. [ 670.602528][T25743] netlink: 12 bytes leftover after parsing attributes in process `syz.2.4909'. [ 670.804008][T25739] veth9: entered allmulticast mode [ 670.828445][T25739] bond6: (slave veth9): Enslaving as an active interface with an up link [ 670.877745][T25748] bond6 (unregistering): (slave veth9): Releasing backup interface [ 670.928496][T25748] bond6 (unregistering): Released all slaves [ 670.991074][T25763] netlink: 36 bytes leftover after parsing attributes in process `syz.4.4914'. [ 671.027949][T25757] bond8: option ad_actor_sys_prio: mode dependency failed, not supported in mode broadcast(3) [ 671.059228][T25757] bond8 (unregistering): Released all slaves [ 671.277976][T25775] netlink: 24 bytes leftover after parsing attributes in process `syz.2.4920'. [ 671.482415][T25801] netlink: 'syz.1.4924': attribute type 1 has an invalid length. [ 671.492313][T25801] netlink: 'syz.1.4924': attribute type 2 has an invalid length. [ 671.508378][T25787] sch_tbf: burst 88 is lower than device veth9 mtu (1514) ! [ 671.520234][T25801] netlink: 'syz.1.4924': attribute type 1 has an invalid length. [ 671.735860][T25813] netlink: 'syz.4.4928': attribute type 21 has an invalid length. [ 671.887661][T25819] syzkaller1: entered promiscuous mode [ 671.902460][T25819] syzkaller1: entered allmulticast mode [ 672.237912][T25840] team0 (unregistering): Port device team_slave_1 removed [ 672.284113][T25846] x_tables: duplicate underflow at hook 1 [ 672.422372][T25853] bridge_slave_1: left allmulticast mode [ 672.457334][T25853] bridge_slave_1: left promiscuous mode [ 672.465530][T25853] bridge0: port 2(bridge_slave_1) entered disabled state [ 672.486231][T25853] bridge_slave_0: left allmulticast mode [ 672.512369][T25853] bridge_slave_0: left promiscuous mode [ 672.528586][T25853] bridge0: port 1(bridge_slave_0) entered disabled state [ 672.635503][ T30] audit: type=1107 audit(1777871577.760:18): pid=25852 uid=0 auid=4294967295 ses=4294967295 subj=unconfined msg='' [ 673.055388][T25890] bridge6: entered promiscuous mode [ 673.061211][T25890] bridge6: entered allmulticast mode [ 673.448563][T25909] netlink: 'syz.3.4952': attribute type 1 has an invalid length. [ 673.470601][T25909] netlink: 'syz.3.4952': attribute type 2 has an invalid length. [ 673.490866][T25909] netlink: 'syz.3.4952': attribute type 1 has an invalid length. [ 673.691963][T25923] syzkaller1: left promiscuous mode [ 673.717211][T25923] syzkaller1: left allmulticast mode [ 673.778213][T25931] netlink: 'syz.3.4959': attribute type 1 has an invalid length. [ 673.810648][T25931] workqueue: Failed to create a rescuer kthread for wq "bond4": -EINTR [ 674.261143][T25953] __nla_validate_parse: 8 callbacks suppressed [ 674.261165][T25953] netlink: 4 bytes leftover after parsing attributes in process `syz.0.4963'. [ 674.354178][T25961] netlink: 40 bytes leftover after parsing attributes in process `syz.1.4965'. [ 674.372862][T25961] netlink: 88 bytes leftover after parsing attributes in process `syz.1.4965'. [ 674.402050][T25967] tipc: Enabled bearer , priority 0 [ 674.409086][T25963] bridge0: port 2(bridge_slave_1) entered disabled state [ 674.417276][T25963] bridge0: port 1(bridge_slave_0) entered disabled state [ 674.466567][T25963] bridge0: entered allmulticast mode [ 674.539887][T25967] tipc: Disabling bearer [ 674.661911][T18270] net_ratelimit: 17 callbacks suppressed [ 674.661931][T18270] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 674.858627][T25983] xt_CT: No such helper "snmp_trap" [ 674.905628][T25993] openvswitch: netlink: IP tunnel dst address not specified [ 675.024511][T25999] netlink: 'syz.1.4978': attribute type 8 has an invalid length. [ 675.033482][T25999] netlink: 4 bytes leftover after parsing attributes in process `syz.1.4978'. [ 675.066866][T25999] veth1_to_team: entered promiscuous mode [ 675.074862][T25999] gretap0: entered promiscuous mode [ 675.081091][T26003] netlink: 4 bytes leftover after parsing attributes in process `syz.0.4977'. [ 675.090353][T25999] veth1_to_team: left promiscuous mode [ 675.097586][T25999] gretap0: left promiscuous mode [ 675.111050][T26003] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 675.120350][T26003] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 675.137945][T26003] batman_adv: batadv0: Removing interface: ipvlan0 [ 675.152524][T26003] batman_adv: batadv0: Removing interface: veth5 [ 675.174134][T26005] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 675.386930][T16347] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 675.400458][T18270] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 675.410335][T18268] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 675.452766][T26017] xt_TCPMSS: Only works on TCP SYN packets [ 675.496075][T26016] netlink: 24 bytes leftover after parsing attributes in process `syz.0.4985'. [ 675.643573][T26025] netlink: 2 bytes leftover after parsing attributes in process `syz.4.4986'. [ 675.660241][T26025] netlink: 4 bytes leftover after parsing attributes in process `syz.4.4986'. [ 675.700888][ C0] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 675.711823][T18270] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 676.717701][T26083] netlink: 8 bytes leftover after parsing attributes in process `syz.1.4999'. [ 676.907388][T26094] netlink: 80 bytes leftover after parsing attributes in process `syz.4.5003'. [ 677.195145][T26113] openvswitch: netlink: Flow actions attr not present in new flow. [ 677.526608][T26140] validate_nla: 3 callbacks suppressed [ 677.526627][T26140] netlink: 'syz.4.5019': attribute type 1 has an invalid length. [ 677.604133][T26145] netlink: 'syz.2.5020': attribute type 1 has an invalid length. [ 677.694534][T26150] netlink: 'syz.2.5021': attribute type 1 has an invalid length. [ 677.703311][T26150] netlink: 'syz.2.5021': attribute type 2 has an invalid length. [ 677.711405][T26150] netlink: 'syz.2.5021': attribute type 1 has an invalid length. [ 677.794706][T26153] GUP no longer grows the stack in syz.2.5022 (26153): 200000003000-20000000a000 (200000001000) [ 677.806239][T26153] CPU: 1 UID: 0 PID: 26153 Comm: syz.2.5022 Not tainted syzkaller #0 PREEMPT(full) [ 677.806289][T26153] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 04/18/2026 [ 677.806313][T26153] Call Trace: [ 677.806323][T26153] [ 677.806332][T26153] dump_stack_lvl+0xe8/0x150 [ 677.806364][T26153] __get_user_pages+0x2378/0x2720 [ 677.806408][T26153] ? __gup_longterm_locked+0xc4e/0x1630 [ 677.806452][T26153] ? __gup_longterm_locked+0xc4e/0x1630 [ 677.806477][T26153] ? down_read_killable+0x1bb/0x340 [ 677.806513][T26153] __gup_longterm_locked+0xdcf/0x1630 [ 677.806544][T26153] ? lock_acquire+0x106/0x350 [ 677.806586][T26153] gup_fast_fallback+0x1d84/0x20d0 [ 677.806647][T26153] ? __pfx_gup_fast_fallback+0x10/0x10 [ 677.806676][T26153] ? is_valid_gup_args+0x11f/0x200 [ 677.806703][T26153] ? get_user_pages_fast+0x4d/0xb0 [ 677.806731][T26153] __iov_iter_get_pages_alloc+0x370/0xa10 [ 677.806771][T26153] ? __pfx_pipe_clear_nowait+0x10/0x10 [ 677.806805][T26153] iov_iter_get_pages2+0x5e/0xa0 [ 677.806839][T26153] __se_sys_vmsplice+0x7c7/0x1620 [ 677.806897][T26153] ? __pfx___se_sys_vmsplice+0x10/0x10 [ 677.806931][T26153] ? __pfx_futex_wake+0x10/0x10 [ 677.806970][T26153] ? lockdep_hardirqs_on+0x7a/0x110 [ 677.807053][T26153] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 677.807077][T26153] do_syscall_64+0x15f/0xf80 [ 677.807111][T26153] ? clear_bhb_loop+0x40/0x90 [ 677.807138][T26153] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 677.807160][T26153] RIP: 0033:0x7f3bccd9cdd9 [ 677.807181][T26153] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 677.807199][T26153] RSP: 002b:00007f3bcdc40028 EFLAGS: 00000246 ORIG_RAX: 0000000000000116 [ 677.807227][T26153] RAX: ffffffffffffffda RBX: 00007f3bcd015fa0 RCX: 00007f3bccd9cdd9 [ 677.807243][T26153] RDX: 0000000000000001 RSI: 00002000000000c0 RDI: 000000000000000d [ 677.807257][T26153] RBP: 00007f3bcce32d69 R08: 0000000000000000 R09: 0000000000000000 [ 677.807271][T26153] R10: 0000000000000001 R11: 0000000000000246 R12: 0000000000000000 [ 677.807284][T26153] R13: 00007f3bcd016038 R14: 00007f3bcd015fa0 R15: 00007ffdf0e5b508 [ 677.807320][T26153] [ 677.808801][T26153] netlink: zone id is out of range [ 680.618352][T26185] net_ratelimit: 404 callbacks suppressed [ 680.618374][T26185] openvswitch: netlink: Unexpected mask (mask=100000000, allowed=10048) [ 680.685835][T26187] netlink: 'syz.1.5032': attribute type 1 has an invalid length. [ 680.699979][T26187] netlink: 'syz.1.5032': attribute type 2 has an invalid length. [ 680.708156][T26187] netlink: 'syz.1.5032': attribute type 1 has an invalid length. [ 680.716480][T26187] __nla_validate_parse: 8 callbacks suppressed [ 680.716497][T26187] netlink: 8 bytes leftover after parsing attributes in process `syz.1.5032'. [ 680.994790][T26200] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 681.048692][T26204] netlink: 8 bytes leftover after parsing attributes in process `syz.3.5038'. [ 681.111145][T26212] netlink: 8 bytes leftover after parsing attributes in process `syz.0.5039'. [ 681.193181][T26212] netlink: 12 bytes leftover after parsing attributes in process `syz.0.5039'. [ 681.263495][T16343] netdevsim netdevsim0 eth0: set [0, 0] type 1 family 0 port 8472 - 0 [ 681.283354][T16343] netdevsim netdevsim0 eth1: set [0, 0] type 1 family 0 port 8472 - 0 [ 681.313613][T16343] netdevsim netdevsim0 eth2: set [0, 0] type 1 family 0 port 8472 - 0 [ 681.339412][T16343] netdevsim netdevsim0 eth3: set [0, 0] type 1 family 0 port 8472 - 0 [ 681.615043][T26221] netlink: 'syz.2.5041': attribute type 1 has an invalid length. [ 681.645423][T26221] netlink: 'syz.2.5041': attribute type 2 has an invalid length. [ 682.134689][T26237] netlink: 4 bytes leftover after parsing attributes in process `syz.0.5044'. [ 682.187288][T26239] netlink: 16 bytes leftover after parsing attributes in process `syz.1.5045'. [ 682.744562][T26248] bond9: entered promiscuous mode [ 682.760017][T26248] 8021q: adding VLAN 0 to HW filter on device bond9 [ 682.812922][T26245] validate_nla: 3 callbacks suppressed [ 682.812940][T26245] netlink: 'syz.1.5047': attribute type 27 has an invalid length. [ 683.007153][T26245] veth9: left allmulticast mode [ 683.020382][T26246] netlink: 5528 bytes leftover after parsing attributes in process `syz.1.5047'. [ 683.330235][T26268] netlink: 'syz.0.5052': attribute type 1 has an invalid length. [ 683.364947][T26268] netlink: 'syz.0.5052': attribute type 2 has an invalid length. [ 683.397185][T26268] netlink: 'syz.0.5052': attribute type 1 has an invalid length. [ 683.419095][T26268] netlink: 8 bytes leftover after parsing attributes in process `syz.0.5052'. [ 683.503654][T26269] netlink: 28 bytes leftover after parsing attributes in process `syz.1.5051'. [ 683.547423][T26269] netlink: 28 bytes leftover after parsing attributes in process `syz.1.5051'. [ 683.589266][T26269] netlink: 'syz.1.5051': attribute type 4 has an invalid length. [ 684.552445][T26315] netlink: 'syz.3.5063': attribute type 1 has an invalid length. [ 684.560556][T26315] netlink: 'syz.3.5063': attribute type 2 has an invalid length. [ 684.568397][T26315] netlink: 'syz.3.5063': attribute type 1 has an invalid length. [ 684.657794][T26317] pimreg: entered allmulticast mode [ 684.855552][T26334] xt_CT: You must specify a L4 protocol and not use inversions on it [ 684.955907][T26336] openvswitch: netlink: Duplicate or invalid key (type 0). [ 684.976198][T26336] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 685.533481][T26360] netlink: 'syz.3.5076': attribute type 1 has an invalid length. [ 685.622605][ T1315] ieee802154 phy0 wpan0: encryption failed: -22 [ 685.752266][T26360] workqueue: Failed to create a rescuer kthread for wq "bond4": -EINTR [ 686.397402][T26407] __nla_validate_parse: 5 callbacks suppressed [ 686.397422][T26407] netlink: 12 bytes leftover after parsing attributes in process `syz.1.5079'. [ 686.481490][T26410] netlink: 14 bytes leftover after parsing attributes in process `syz.2.5083'. [ 686.590390][T26410] bond0: (slave dummy0): Releasing backup interface [ 686.628724][T26410] dummy0 (unregistering): left allmulticast mode [ 686.755213][T26418] netlink: 76 bytes leftover after parsing attributes in process `syz.0.5085'. [ 686.881108][T18270] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 686.948540][T26417] 8021q: adding VLAN 0 to HW filter on device bond0 [ 686.976802][T26417] 8021q: adding VLAN 0 to HW filter on device team0 [ 687.052100][ T57] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 687.060643][ C0] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 687.071879][ T7447] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 687.080361][ C0] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 687.105818][ T7447] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 687.115761][ T7447] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 687.124489][ C0] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 687.132719][ C0] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 687.142665][ T5360] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 687.212214][T26417] hsr0: A HSR master's MTU cannot be greater than the smallest MTU of its slaves minus the HSR Tag length (6 octets). [ 687.225562][T26422] netlink: 236 bytes leftover after parsing attributes in process `syz.2.5087'. [ 687.261575][T26422] netlink: 236 bytes leftover after parsing attributes in process `syz.2.5087'. [ 687.308933][T26422] netlink: 12 bytes leftover after parsing attributes in process `syz.2.5087'. [ 687.324429][T26427] tipc: Enabling of bearer rejected, failed to enable media [ 687.349034][T26422] netlink: 40 bytes leftover after parsing attributes in process `syz.2.5087'. [ 687.364084][T26425] netlink: 12 bytes leftover after parsing attributes in process `syz.2.5087'. [ 687.521110][T26422] bond10 (unregistering): Released all slaves [ 687.726932][T26453] netlink: 4 bytes leftover after parsing attributes in process `syz.1.5094'. [ 687.850413][T26459] netlink: 'syz.0.5092': attribute type 1 has an invalid length. [ 687.952722][T26462] netlink: 12 bytes leftover after parsing attributes in process `syz.3.5096'. [ 687.994551][T26459] bond9: entered promiscuous mode [ 688.000524][T26459] 8021q: adding VLAN 0 to HW filter on device bond9 [ 688.609665][T26495] netlink: 'syz.0.5098': attribute type 2 has an invalid length. [ 688.653629][T26495] netlink: 'syz.0.5098': attribute type 2 has an invalid length. [ 689.052849][T26508] netlink: 'syz.4.5100': attribute type 1 has an invalid length. [ 689.113040][T26490] bridge0: port 1(ÿÿÿÿÿÿ) entered disabled state [ 689.198240][T26512] netlink: 'syz.3.5101': attribute type 1 has an invalid length. [ 689.694524][T26490] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 689.742360][T26490] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 689.988534][T26495] macsec1: entered promiscuous mode [ 690.015509][T26512] workqueue: Failed to create a rescuer kthread for wq "bond4": -EINTR [ 690.180292][T26526] netlink: 'syz.3.5103': attribute type 1 has an invalid length. [ 690.307168][T26526] 8021q: adding VLAN 0 to HW filter on device bond4 [ 691.234669][T26571] hmac(sha224): entered promiscuous mode [ 691.898085][T26589] lo speed is unknown, defaulting to 1000 [ 691.909063][T26589] lo speed is unknown, defaulting to 1000 [ 691.924448][T26589] lo speed is unknown, defaulting to 1000 [ 691.944794][T26589] smbdirect: ib_dev[syz2]: added: RNIC max_fast_reg_page_list_len=256 device_cap_flags=0x200000 kernel_cap_flags=0x10 page_size_cap=0x1000 [ 691.973166][T26589] smbdirect: ib_dev[syz2]: num_ports=1 max_qp_rd_atom=128 max_qp_init_rd_atom=128 max_sgl_rd=0 max_sge_rd=1 max_cqe=3276800 max_qp_wr=32768 max_send_sge=6 max_recv_sge=6 [ 691.991223][T26589] smbdirect: ib_dev[syz2]PORT[1]: iwarp=1 ib=0 roce=0 v1=0 v2=0 core_cap_flags=0x400008 [ 692.058579][T26589] infiniband syz2: RDMA CMA: cma_listen_on_dev, error -98 [ 692.163216][T26589] lo speed is unknown, defaulting to 1000 [ 692.181734][T26589] lo speed is unknown, defaulting to 1000 [ 692.202973][T26589] lo speed is unknown, defaulting to 1000 [ 692.229989][T26589] lo speed is unknown, defaulting to 1000 [ 692.256065][T26589] lo speed is unknown, defaulting to 1000 [ 692.274596][T26589] lo speed is unknown, defaulting to 1000 [ 692.281938][T26602] __nla_validate_parse: 9 callbacks suppressed [ 692.281954][T26602] netlink: 1604 bytes leftover after parsing attributes in process `syz.4.5129'. [ 692.341710][T18269] net_ratelimit: 19 callbacks suppressed [ 692.341729][T18269] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 692.415100][T26605] netlink: 'syz.4.5131': attribute type 3 has an invalid length. [ 692.488714][T26605] 0ªî{X¹¦: left allmulticast mode [ 692.568791][T26620] netlink: 8 bytes leftover after parsing attributes in process `syz.4.5131'. [ 692.628411][T26605] A link change request failed with some changes committed already. Interface virt_wifi0 may have been left with an inconsistent configuration, please check. [ 692.661659][ T9244] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 692.669865][ T9244] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 692.678210][T16343] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 692.686405][T16343] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 692.695532][ T6794] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 692.708357][ T6792] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 692.724246][ T806] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 693.210375][T26662] netlink: 4 bytes leftover after parsing attributes in process `syz.0.5143'. [ 693.223645][ T6792] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 693.250339][T26657] pim6reg1: entered promiscuous mode [ 693.263524][T26657] pim6reg1: entered allmulticast mode [ 693.701207][T26652] lo speed is unknown, defaulting to 1000 [ 693.778877][T26693] netlink: 144 bytes leftover after parsing attributes in process `syz.3.5149'. [ 693.830753][T26695] netlink: 144 bytes leftover after parsing attributes in process `syz.3.5149'. [ 694.476391][T26706] lo speed is unknown, defaulting to 1000 [ 694.629241][T26733] netlink: 'syz.2.5157': attribute type 4 has an invalid length. [ 695.131202][T26754] xt_cluster: node mask cannot exceed total number of nodes [ 695.142773][T26754] netlink: 16 bytes leftover after parsing attributes in process `syz.0.5164'. [ 695.152586][T26754] netlink: 12 bytes leftover after parsing attributes in process `syz.0.5164'. [ 695.163277][T26754] netlink: 12 bytes leftover after parsing attributes in process `syz.0.5164'. [ 695.175949][T26756] xt_cluster: node mask cannot exceed total number of nodes [ 695.324590][T26762] netlink: 'syz.0.5167': attribute type 11 has an invalid length. [ 695.493696][T26748] lo speed is unknown, defaulting to 1000 [ 695.688282][T26783] netlink: 'syz.3.5172': attribute type 1 has an invalid length. [ 695.761515][T26788] netlink: 'syz.3.5172': attribute type 21 has an invalid length. [ 695.770052][T26783] bond5: entered promiscuous mode [ 695.775793][T26783] 8021q: adding VLAN 0 to HW filter on device bond5 [ 695.809786][T26788] netlink: 128 bytes leftover after parsing attributes in process `syz.3.5172'. [ 695.843173][T26788] netlink: 'syz.3.5172': attribute type 5 has an invalid length. [ 695.863440][T26788] netlink: 'syz.3.5172': attribute type 6 has an invalid length. [ 695.887934][T26788] netlink: 3 bytes leftover after parsing attributes in process `syz.3.5172'. [ 695.932550][T26783] bond5: (slave bridge7): making interface the new active one [ 695.943548][T26783] bridge7: entered promiscuous mode [ 695.951589][T26783] bond5: (slave bridge7): Enslaving as an active interface with an up link [ 696.826626][T26829] syzkaller0: entered promiscuous mode [ 696.841549][T26829] syzkaller0: entered allmulticast mode [ 697.427172][T26865] net_ratelimit: 19 callbacks suppressed [ 697.427192][T26865] openvswitch: netlink: Message has 8 unknown bytes. [ 697.524797][T26871] __nla_validate_parse: 6 callbacks suppressed [ 697.524846][T26871] netlink: 76 bytes leftover after parsing attributes in process `syz.3.5194'. [ 697.533938][T26873] openvswitch: netlink: IPv4 tun info is not correct [ 697.547894][T26871] A link change request failed with some changes committed already. Interface team0 may have been left with an inconsistent configuration, please check. [ 697.792754][T26888] netlink: 220 bytes leftover after parsing attributes in process `syz.4.5200'. [ 697.802978][T26888] netlink: 'syz.4.5200': attribute type 2 has an invalid length. [ 697.908682][T26892] netlink: 276 bytes leftover after parsing attributes in process `syz.0.5202'. [ 697.921148][T26892] netlink: 44 bytes leftover after parsing attributes in process `syz.0.5202'. [ 697.934063][T26892] netlink: 32 bytes leftover after parsing attributes in process `syz.0.5202'. [ 697.947454][ T5841] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 698.049412][T26898] A link change request failed with some changes committed already. Interface bond0 may have been left with an inconsistent configuration, please check. [ 698.079733][T26898] netlink: 16 bytes leftover after parsing attributes in process `syz.3.5203'. [ 698.218166][T26904] netlink: 24 bytes leftover after parsing attributes in process `syz.3.5206'. [ 698.422362][T16343] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 698.430549][T16343] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 698.439334][ C1] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 698.468441][ T5841] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 698.478157][T18269] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 699.309225][ T5289] veth1_macvtap: left promiscuous mode [ 699.474133][T26958] FAULT_INJECTION: forcing a failure. [ 699.474133][T26958] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 699.493670][T26957] nbd: socks must be embedded in a SOCK_ITEM attr [ 699.510669][T26958] CPU: 0 UID: 0 PID: 26958 Comm: syz.0.5217 Not tainted syzkaller #0 PREEMPT(full) [ 699.510699][T26958] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 04/18/2026 [ 699.510712][T26958] Call Trace: [ 699.510720][T26958] [ 699.510728][T26958] dump_stack_lvl+0xe8/0x150 [ 699.510759][T26958] should_fail_ex+0x412/0x560 [ 699.510793][T26958] _copy_from_user+0x2d/0xb0 [ 699.510825][T26958] do_ip6t_set_ctl+0x6ae/0xe10 [ 699.510852][T26958] ? rcu_is_watching+0x15/0xb0 [ 699.510880][T26958] ? trace_contention_end+0x3d/0x140 [ 699.510910][T26958] ? __pfx_do_ip6t_set_ctl+0x10/0x10 [ 699.510955][T26958] ? __pfx___mutex_lock+0x10/0x10 [ 699.510983][T26958] ? __pfx___mutex_unlock_slowpath+0x10/0x10 [ 699.511034][T26958] ? __pfx_aa_sk_perm+0x10/0x10 [ 699.511078][T26958] nf_setsockopt+0x26f/0x290 [ 699.511111][T26958] ? __pfx_sock_common_setsockopt+0x10/0x10 [ 699.511135][T26958] do_sock_setsockopt+0x17c/0x1b0 [ 699.511164][T26958] __x64_sys_setsockopt+0x13d/0x1b0 [ 699.511191][T26958] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 699.511213][T26958] do_syscall_64+0x15f/0xf80 [ 699.511236][T26958] ? trace_irq_disable+0x3b/0x140 [ 699.511264][T26958] ? clear_bhb_loop+0x40/0x90 [ 699.511289][T26958] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 699.511308][T26958] RIP: 0033:0x7f764ad9cdd9 [ 699.511325][T26958] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 699.511342][T26958] RSP: 002b:00007f764bc78028 EFLAGS: 00000246 ORIG_RAX: 0000000000000036 [ 699.511363][T26958] RAX: ffffffffffffffda RBX: 00007f764b015fa0 RCX: 00007f764ad9cdd9 [ 699.511377][T26958] RDX: 0000000000000040 RSI: 0000000000000029 RDI: 0000000000000003 [ 699.511388][T26958] RBP: 00007f764bc78090 R08: 0000000000000340 R09: 0000000000000000 [ 699.511400][T26958] R10: 0000200000000380 R11: 0000000000000246 R12: 0000000000000001 [ 699.511412][T26958] R13: 00007f764b016038 R14: 00007f764b015fa0 R15: 00007fffa207c3c8 [ 699.511445][T26958] [ 699.755247][T26962] netlink: 224 bytes leftover after parsing attributes in process `syz.2.5219'. [ 699.811338][T26962] sctp: [Deprecated]: syz.2.5219 (pid 26962) Use of struct sctp_assoc_value in delayed_ack socket option. [ 699.811338][T26962] Use struct sctp_sack_info instead [ 699.882358][T26962] sctp: [Deprecated]: syz.2.5219 (pid 26962) Use of struct sctp_assoc_value in delayed_ack socket option. [ 699.882358][T26962] Use struct sctp_sack_info instead [ 699.903899][T26968] netlink: 32 bytes leftover after parsing attributes in process `syz.0.5220'. [ 699.938243][T26962] netlink: 'syz.2.5219': attribute type 1 has an invalid length. [ 700.008714][T26962] bond10: entered promiscuous mode [ 700.057221][T26962] 8021q: adding VLAN 0 to HW filter on device bond10 [ 700.079380][T26968] netlink: 8 bytes leftover after parsing attributes in process `syz.0.5220'. [ 700.463436][T26998] xt_CT: You must specify a L4 protocol and not use inversions on it [ 700.819807][T27017] FAULT_INJECTION: forcing a failure. [ 700.819807][T27017] name failslab, interval 1, probability 0, space 0, times 0 [ 700.879072][T27017] CPU: 0 UID: 0 PID: 27017 Comm: syz.4.5230 Not tainted syzkaller #0 PREEMPT(full) [ 700.879103][T27017] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 04/18/2026 [ 700.879117][T27017] Call Trace: [ 700.879125][T27017] [ 700.879135][T27017] dump_stack_lvl+0xe8/0x150 [ 700.879166][T27017] should_fail_ex+0x412/0x560 [ 700.879200][T27017] should_failslab+0xa8/0x100 [ 700.879235][T27017] __kvmalloc_node_noprof+0x178/0x8a0 [ 700.879268][T27017] ? xt_alloc_table_info+0x40/0xb0 [ 700.879310][T27017] xt_alloc_table_info+0x40/0xb0 [ 700.879343][T27017] do_ip6t_set_ctl+0x90c/0xe10 [ 700.879370][T27017] ? rcu_is_watching+0x15/0xb0 [ 700.879397][T27017] ? trace_contention_end+0x3d/0x140 [ 700.879432][T27017] ? __pfx_do_ip6t_set_ctl+0x10/0x10 [ 700.879474][T27017] ? __pfx___mutex_lock+0x10/0x10 [ 700.879502][T27017] ? __pfx___mutex_unlock_slowpath+0x10/0x10 [ 700.879536][T27017] ? __pfx_aa_sk_perm+0x10/0x10 [ 700.879569][T27017] nf_setsockopt+0x26f/0x290 [ 700.879592][T27017] ? __pfx_sock_common_setsockopt+0x10/0x10 [ 700.879618][T27017] do_sock_setsockopt+0x17c/0x1b0 [ 700.879651][T27017] __x64_sys_setsockopt+0x13d/0x1b0 [ 700.879682][T27017] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 700.879707][T27017] do_syscall_64+0x15f/0xf80 [ 700.879732][T27017] ? trace_irq_disable+0x3b/0x140 [ 700.879772][T27017] ? clear_bhb_loop+0x40/0x90 [ 700.879800][T27017] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 700.879822][T27017] RIP: 0033:0x7f8cce19cdd9 [ 700.879843][T27017] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 700.879862][T27017] RSP: 002b:00007f8ccf088028 EFLAGS: 00000246 ORIG_RAX: 0000000000000036 [ 700.879885][T27017] RAX: ffffffffffffffda RBX: 00007f8cce415fa0 RCX: 00007f8cce19cdd9 [ 700.879903][T27017] RDX: 0000000000000040 RSI: 0000000000000029 RDI: 0000000000000003 [ 700.879916][T27017] RBP: 00007f8ccf088090 R08: 0000000000000340 R09: 0000000000000000 [ 700.879931][T27017] R10: 0000200000000380 R11: 0000000000000246 R12: 0000000000000001 [ 700.879945][T27017] R13: 00007f8cce416038 R14: 00007f8cce415fa0 R15: 00007ffc2d46ce38 [ 700.879982][T27017] [ 701.275005][T27026] syzkaller1: entered promiscuous mode [ 701.311820][T27026] syzkaller1: entered allmulticast mode [ 701.464990][T27032] syzkaller0: entered promiscuous mode [ 701.497533][T27032] syzkaller0: entered allmulticast mode [ 702.285602][T27082] FAULT_INJECTION: forcing a failure. [ 702.285602][T27082] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 702.324650][T27082] CPU: 1 UID: 0 PID: 27082 Comm: syz.1.5246 Not tainted syzkaller #0 PREEMPT(full) [ 702.324678][T27082] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 04/18/2026 [ 702.324692][T27082] Call Trace: [ 702.324701][T27082] [ 702.324710][T27082] dump_stack_lvl+0xe8/0x150 [ 702.324739][T27082] should_fail_ex+0x412/0x560 [ 702.324771][T27082] _copy_from_user+0x2d/0xb0 [ 702.324800][T27082] copy_from_sockptr_offset+0x66/0xa0 [ 702.324827][T27082] do_ip6t_set_ctl+0x93d/0xe10 [ 702.324860][T27082] ? rcu_is_watching+0x15/0xb0 [ 702.324886][T27082] ? trace_contention_end+0x3d/0x140 [ 702.324915][T27082] ? __pfx_do_ip6t_set_ctl+0x10/0x10 [ 702.324956][T27082] ? __pfx___mutex_lock+0x10/0x10 [ 702.324982][T27082] ? __pfx___mutex_unlock_slowpath+0x10/0x10 [ 702.325015][T27082] ? __pfx_aa_sk_perm+0x10/0x10 [ 702.325046][T27082] nf_setsockopt+0x26f/0x290 [ 702.325067][T27082] ? __pfx_sock_common_setsockopt+0x10/0x10 [ 702.325091][T27082] do_sock_setsockopt+0x17c/0x1b0 [ 702.325122][T27082] __x64_sys_setsockopt+0x13d/0x1b0 [ 702.325150][T27082] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 702.325172][T27082] do_syscall_64+0x15f/0xf80 [ 702.325195][T27082] ? trace_irq_disable+0x3b/0x140 [ 702.325224][T27082] ? clear_bhb_loop+0x40/0x90 [ 702.325255][T27082] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 702.325275][T27082] RIP: 0033:0x7f940699cdd9 [ 702.325294][T27082] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 702.325330][T27082] RSP: 002b:00007f94077a8028 EFLAGS: 00000246 ORIG_RAX: 0000000000000036 [ 702.325353][T27082] RAX: ffffffffffffffda RBX: 00007f9406c15fa0 RCX: 00007f940699cdd9 [ 702.325370][T27082] RDX: 0000000000000040 RSI: 0000000000000029 RDI: 0000000000000003 [ 702.325383][T27082] RBP: 00007f94077a8090 R08: 0000000000000340 R09: 0000000000000000 [ 702.325398][T27082] R10: 0000200000000380 R11: 0000000000000246 R12: 0000000000000001 [ 702.325412][T27082] R13: 00007f9406c16038 R14: 00007f9406c15fa0 R15: 00007fffd6424108 [ 702.325448][T27082] [ 702.754950][ T806] net_ratelimit: 7 callbacks suppressed [ 702.754969][ T806] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 702.769354][ C1] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 702.819987][ T5841] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 702.862208][T27086] syzkaller0: entered promiscuous mode [ 702.899259][T27086] syzkaller0: entered allmulticast mode [ 702.971711][T27093] __nla_validate_parse: 8 callbacks suppressed [ 702.971732][T27093] netlink: 16 bytes leftover after parsing attributes in process `syz.0.5249'. [ 703.277410][T27106] Bluetooth: MGMT ver 1.23 [ 703.287759][T27107] IPVS: set_ctl: invalid protocol: 127 172.20.20.170:20000 [ 703.328725][T27106] netlink: 'syz.1.5252': attribute type 1 has an invalid length. [ 703.542407][ T9244] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 703.551314][ C0] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 703.568858][T27117] netlink: 'syz.1.5254': attribute type 1 has an invalid length. [ 703.788443][T27126] netlink: 'syz.0.5257': attribute type 17 has an invalid length. [ 703.820123][T27126] netlink: 'syz.0.5257': attribute type 49 has an invalid length. [ 703.860052][ T5841] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 704.163581][T27104] lo speed is unknown, defaulting to 1000 [ 704.181396][T16344] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 704.191867][ T806] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 704.205275][ T5841] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 704.746708][T27150] netlink: 'syz.1.5259': attribute type 21 has an invalid length. [ 704.963900][T27147] bond6: entered promiscuous mode [ 704.982731][T27147] bond6: entered allmulticast mode [ 705.002179][T27147] 8021q: adding VLAN 0 to HW filter on device bond6 [ 705.063944][T27150] netlink: 'syz.1.5259': attribute type 6 has an invalid length. [ 705.076715][T27150] netlink: 132 bytes leftover after parsing attributes in process `syz.1.5259'. [ 705.335493][ T6792] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 705.423889][T27166] x_tables: ip_tables: rpfilter match: used from hooks OUTPUT, but only valid from PREROUTING [ 705.608434][T27162] hsr0: Slave A (hsr_slave_0) is not up; please bring it up to get a fully working HSR network [ 705.641400][T27162] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 706.140224][T27185] netlink: 'syz.4.5265': attribute type 10 has an invalid length. [ 706.541318][T27190] netlink: 'syz.4.5267': attribute type 8 has an invalid length. [ 706.580323][T27190] sch_fq: defrate 0 ignored. [ 706.603167][T27190] netlink: 4 bytes leftover after parsing attributes in process `syz.4.5267'. [ 706.922008][T27201] netlink: 'syz.4.5269': attribute type 1 has an invalid length. [ 707.373095][T27204] netlink: 212376 bytes leftover after parsing attributes in process `syz.1.5270'. [ 707.819881][T27210] netlink: 211856 bytes leftover after parsing attributes in process `syz.0.5271'. [ 708.151737][T27225] netlink: 80 bytes leftover after parsing attributes in process `syz.4.5275'. [ 708.229958][T27225] netlink: 8 bytes leftover after parsing attributes in process `syz.4.5275'. [ 708.421146][ T5841] net_ratelimit: 14 callbacks suppressed [ 708.421168][ T5841] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 708.757674][T27243] netlink: 'syz.1.5282': attribute type 3 has an invalid length. [ 708.912777][T27263] netlink: 12 bytes leftover after parsing attributes in process `syz.0.5286'. [ 709.300442][T16347] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 709.308935][ C1] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 709.450455][T27290] netlink: 'syz.0.5292': attribute type 4 has an invalid length. [ 709.473326][T18269] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 709.484129][T27290] xt_policy: neither incoming nor outgoing policy selected [ 709.729778][T27296] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 709.827551][T27296] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 709.859718][T27296] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 709.942984][T16344] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 709.952007][T27296] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 709.962855][ T5841] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 710.128057][T27304] bond7: invalid ARP target 0.0.0.0 specified for addition [ 710.136443][T27304] bond7: option arp_ip_target: invalid value (0) [ 710.162026][T27304] bond7 (unregistering): Released all slaves [ 710.328253][T27324] ÿ: renamed from bond_slave_0 [ 710.341488][T27328] netlink: 8 bytes leftover after parsing attributes in process `syz.0.5303'. [ 710.355561][T27322] netlink: 'syz.2.5302': attribute type 11 has an invalid length. [ 710.375765][T27322] netlink: 'syz.2.5302': attribute type 5 has an invalid length. [ 710.384278][T27322] netlink: 140 bytes leftover after parsing attributes in process `syz.2.5302'. [ 710.406760][T27329] netlink: 'syz.4.5304': attribute type 11 has an invalid length. [ 710.430054][T27329] netlink: 4 bytes leftover after parsing attributes in process `syz.4.5304'. [ 710.600230][T27344] netlink: 24 bytes leftover after parsing attributes in process `syz.4.5310'. [ 710.620071][T27345] netlink: 8 bytes leftover after parsing attributes in process `syz.3.5307'. [ 710.649821][T27345] netlink: 8 bytes leftover after parsing attributes in process `syz.3.5307'. [ 710.738128][T27352] dvmrp6: entered allmulticast mode [ 710.755773][T27353] netlink: 92 bytes leftover after parsing attributes in process `syz.1.5309'. [ 711.328300][T27351] lo speed is unknown, defaulting to 1000 [ 711.900751][T27356] lo speed is unknown, defaulting to 1000 [ 711.920958][T27396] xt_CT: You must specify a L4 protocol and not use inversions on it [ 712.208729][T16347] tipc: Subscription rejected, illegal request [ 712.348021][T27412] netlink: 'syz.3.5329': attribute type 3 has an invalid length. [ 712.813595][T27418] bond6: Unable to set up delay as MII monitoring is disabled [ 712.865416][T27418] bond6 (unregistering): Released all slaves [ 713.025539][T27423] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 713.460641][ T6792] net_ratelimit: 142 callbacks suppressed [ 713.460664][ T6792] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 714.183098][ T5841] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 714.461605][T27483] netlink: 'syz.0.5347': attribute type 1 has an invalid length. [ 714.481368][T27483] __nla_validate_parse: 9 callbacks suppressed [ 714.481389][T27483] netlink: 16150 bytes leftover after parsing attributes in process `syz.0.5347'. [ 714.505757][T27483] xt_CT: You must specify a L4 protocol and not use inversions on it [ 714.612858][T27468] 8021q: adding VLAN 0 to HW filter on device bond0 [ 714.632974][T27468] 8021q: adding VLAN 0 to HW filter on device team0 [ 714.645702][T27468] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 714.757873][T27468] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 714.784532][T27468] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 714.820766][T27468] hsr0: Slave A (hsr_slave_0) is not up; please bring it up to get a fully working HSR network [ 714.859898][T27468] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 714.879386][T27468] veth1_vlan: left promiscuous mode [ 714.887856][T27468] veth0_vlan: left promiscuous mode [ 714.902698][T27468] veth0_vlan: entered promiscuous mode [ 714.927470][T27468] veth1_vlan: entered promiscuous mode [ 714.945707][T27468] veth1_macvtap: left promiscuous mode [ 714.966433][T27468] veth0_macvtap: left promiscuous mode [ 714.988326][T27468] veth0_macvtap: entered promiscuous mode [ 715.017395][T27468] veth1_macvtap: entered promiscuous mode [ 715.038211][T27468] A link change request failed with some changes committed already. Interface wlan1 may have been left with an inconsistent configuration, please check. [ 715.065087][T16347] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 715.074389][ T6792] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 715.088350][ T5639] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 715.214577][ T1047] netdevsim netdevsim1 eth0: set [1, 0] type 2 family 0 port 6081 - 0 [ 715.228774][ T5841] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 715.245829][ T1047] netdevsim netdevsim1 eth1: set [1, 0] type 2 family 0 port 6081 - 0 [ 715.279462][ T1047] netdevsim netdevsim1 eth2: set [1, 0] type 2 family 0 port 6081 - 0 [ 715.318888][ T1047] netdevsim netdevsim1 eth3: set [1, 0] type 2 family 0 port 6081 - 0 [ 715.516828][T27517] netlink: 24 bytes leftover after parsing attributes in process `syz.0.5352'. [ 715.636764][T27509] syzkaller1: entered promiscuous mode [ 715.649576][T27509] syzkaller1: entered allmulticast mode [ 716.265008][T18269] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 716.499804][ T806] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 716.545299][T27540] lo speed is unknown, defaulting to 1000 [ 716.562391][T27545] netlink: 24 bytes leftover after parsing attributes in process `syz.4.5360'. [ 716.682747][T27549] xt_TCPMSS: Only works on TCP SYN packets [ 717.311047][T17746] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 717.420156][T27583] bond0: (slave syz_tun): Releasing backup interface [ 717.493914][T27583] bridge_slave_0: left allmulticast mode [ 717.515242][T27583] bridge_slave_0: left promiscuous mode [ 717.526222][T27592] netlink: 4 bytes leftover after parsing attributes in process `syz.2.5372'. [ 717.531374][T27583] bridge0: port 1(bridge_slave_0) entered disabled state [ 717.555627][T27583] bridge_slave_1: left allmulticast mode [ 717.568401][T27583] bridge_slave_1: left promiscuous mode [ 717.578583][T27583] bridge0: port 2(bridge_slave_1) entered disabled state [ 717.593412][T27598] netlink: 'syz.2.5372': attribute type 21 has an invalid length. [ 717.604843][T27599] netlink: 4 bytes leftover after parsing attributes in process `syz.4.5370'. [ 717.617004][T27598] netlink: 36 bytes leftover after parsing attributes in process `syz.2.5372'. [ 717.637166][T27583] bond0: (slave bond_slave_0): Releasing backup interface [ 717.651645][T27583] bond0: (slave bond_slave_1): Releasing backup interface [ 717.687463][T27583] team0: Port device team_slave_0 removed [ 717.702126][T27583] team0: Port device team_slave_1 removed [ 717.708942][T27583] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 717.720452][T27583] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 717.731611][T27583] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 717.739093][T27583] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 717.826543][T27592] team_slave_0 (unregistering): left allmulticast mode [ 717.870834][T27592] team0: Port device team_slave_0 removed [ 717.913191][T27599] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 717.978886][T27599] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 718.422033][T27618] : entered promiscuous mode [ 718.463122][T27623] netlink: 16162 bytes leftover after parsing attributes in process `syz.1.5378'. [ 718.636474][T27635] netlink: 304 bytes leftover after parsing attributes in process `syz.4.5382'. [ 718.820906][T20575] Bluetooth: hci3: command 0x0406 tx timeout [ 718.971832][T27606] lo speed is unknown, defaulting to 1000 [ 719.023229][T27656] netlink: 'syz.4.5385': attribute type 4 has an invalid length. [ 719.317183][T27665] netlink: 16 bytes leftover after parsing attributes in process `syz.2.5387'. [ 719.380221][ T5841] net_ratelimit: 4 callbacks suppressed [ 719.380241][ T5841] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 719.541430][ T806] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 719.595856][T27678] x_tables: duplicate underflow at hook 2 [ 719.624311][T27678] netlink: 8 bytes leftover after parsing attributes in process `syz.2.5390'. [ 719.723756][T27681] netlink: 'syz.4.5391': attribute type 1 has an invalid length. [ 719.825692][T27688] netlink: 12 bytes leftover after parsing attributes in process `syz.4.5391'. [ 719.840987][T27687] netlink: 28 bytes leftover after parsing attributes in process `syz.3.5392'. [ 719.883368][T27687] netlink: 'syz.3.5392': attribute type 7 has an invalid length. [ 719.892961][T27687] netlink: 'syz.3.5392': attribute type 8 has an invalid length. [ 719.923040][T27687] netlink: 4 bytes leftover after parsing attributes in process `syz.3.5392'. [ 720.043345][T27681] 8021q: adding VLAN 0 to HW filter on device bond8 [ 720.136147][T27689] netlink: 8 bytes leftover after parsing attributes in process `syz.2.5393'. [ 720.353007][T27698] netlink: 996 bytes leftover after parsing attributes in process `syz.2.5395'. [ 720.419827][ T5841] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 720.486040][T27701] netlink: 12 bytes leftover after parsing attributes in process `syz.4.5394'. [ 721.185001][T27715] netlink: 2120 bytes leftover after parsing attributes in process `syz.1.5398'. [ 721.481723][ T5841] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 721.720483][T27734] netlink: 'syz.1.5405': attribute type 13 has an invalid length. [ 722.235348][T27758] ip6tnl0: Caught tx_queue_len zero misconfig [ 722.254847][T27760] netlink: 8 bytes leftover after parsing attributes in process `syz.2.5410'. [ 722.325750][T27756] netlink: 48 bytes leftover after parsing attributes in process `syz.2.5410'. [ 722.484766][T27763] netlink: 'syz.1.5411': attribute type 1 has an invalid length. [ 722.502631][ T5841] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 722.569338][T27769] xt_CT: You must specify a L4 protocol and not use inversions on it [ 722.582087][T27769] FAULT_INJECTION: forcing a failure. [ 722.582087][T27769] name failslab, interval 1, probability 0, space 0, times 0 [ 722.583022][ T806] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 722.604379][T27769] CPU: 0 UID: 0 PID: 27769 Comm: syz.0.5414 Not tainted syzkaller #0 PREEMPT(full) [ 722.604408][T27769] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 04/18/2026 [ 722.604421][T27769] Call Trace: [ 722.604430][T27769] [ 722.604439][T27769] dump_stack_lvl+0xe8/0x150 [ 722.604470][T27769] should_fail_ex+0x412/0x560 [ 722.604504][T27769] should_failslab+0xa8/0x100 [ 722.604539][T27769] __kvmalloc_node_noprof+0x178/0x8a0 [ 722.604573][T27769] ? __nf_hook_entries_try_shrink+0x328/0x700 [ 722.604614][T27769] __nf_hook_entries_try_shrink+0x328/0x700 [ 722.604656][T27769] __nf_unregister_net_hook+0x4cc/0x6f0 [ 722.604696][T27769] nf_unregister_net_hooks+0xcb/0x140 [ 722.604730][T27769] nf_ct_netns_put+0x36d/0x520 [ 722.604764][T27769] xt_ct_tg_check+0x78d/0xa90 [ 722.604809][T27769] ? __pfx_xt_ct_tg_check+0x10/0x10 [ 722.604842][T27769] ? xt_ct_tg_check_v0+0x178/0x2c0 [ 722.604877][T27769] xt_ct_tg_check_v0+0x185/0x2c0 [ 722.604908][T27769] ? __pfx_xt_ct_tg_check_v0+0x10/0x10 [ 722.604951][T27769] ? xt_find_target+0x208/0x260 [ 722.604985][T27769] xt_check_target+0x4a8/0xbf0 [ 722.605014][T27769] ? xt_find_target+0x83/0x260 [ 722.605051][T27769] ? __pfx_xt_check_target+0x10/0x10 [ 722.605098][T27769] ? xt_find_target+0x208/0x260 [ 722.605136][T27769] translate_table+0x184f/0x20b0 [ 722.605183][T27769] ? __pfx_translate_table+0x10/0x10 [ 722.605204][T27769] ? __might_fault+0xaf/0x130 [ 722.605233][T27769] ? __might_fault+0xaf/0x130 [ 722.605278][T27769] ? _copy_from_user+0x94/0xb0 [ 722.605315][T27769] do_ip6t_set_ctl+0x9fe/0xe10 [ 722.605359][T27769] ? rcu_is_watching+0x15/0xb0 [ 722.605387][T27769] ? trace_contention_end+0x3d/0x140 [ 722.605418][T27769] ? __pfx_do_ip6t_set_ctl+0x10/0x10 [ 722.605465][T27769] ? __pfx___mutex_lock+0x10/0x10 [ 722.605494][T27769] ? __pfx___mutex_unlock_slowpath+0x10/0x10 [ 722.605530][T27769] ? __pfx_aa_sk_perm+0x10/0x10 [ 722.605565][T27769] nf_setsockopt+0x26f/0x290 [ 722.605589][T27769] ? __pfx_sock_common_setsockopt+0x10/0x10 [ 722.605615][T27769] do_sock_setsockopt+0x17c/0x1b0 [ 722.605649][T27769] __x64_sys_setsockopt+0x13d/0x1b0 [ 722.605679][T27769] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 722.605702][T27769] do_syscall_64+0x15f/0xf80 [ 722.605732][T27769] ? trace_irq_disable+0x3b/0x140 [ 722.605764][T27769] ? clear_bhb_loop+0x40/0x90 [ 722.605791][T27769] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 722.605821][T27769] RIP: 0033:0x7f764ad9cdd9 [ 722.605841][T27769] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 722.605861][T27769] RSP: 002b:00007f764bc78028 EFLAGS: 00000246 ORIG_RAX: 0000000000000036 [ 722.605884][T27769] RAX: ffffffffffffffda RBX: 00007f764b015fa0 RCX: 00007f764ad9cdd9 [ 722.605900][T27769] RDX: 0000000000000040 RSI: 0000000000000029 RDI: 0000000000000003 [ 722.605913][T27769] RBP: 00007f764bc78090 R08: 0000000000000340 R09: 0000000000000000 [ 722.605928][T27769] R10: 0000200000000380 R11: 0000000000000246 R12: 0000000000000002 [ 722.605942][T27769] R13: 00007f764b016038 R14: 00007f764b015fa0 R15: 00007fffa207c3c8 [ 722.605979][T27769] [ 723.015320][T27746] lo speed is unknown, defaulting to 1000 [ 723.550128][ T5841] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 724.033583][T27817] xt_CT: You must specify a L4 protocol and not use inversions on it [ 724.152626][T27821] xt_CT: You must specify a L4 protocol and not use inversions on it [ 724.172954][T27824] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 724.192038][T27821] FAULT_INJECTION: forcing a failure. [ 724.192038][T27821] name failslab, interval 1, probability 0, space 0, times 0 [ 724.225669][T27821] CPU: 0 UID: 0 PID: 27821 Comm: syz.1.5429 Not tainted syzkaller #0 PREEMPT(full) [ 724.225701][T27821] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 04/18/2026 [ 724.225715][T27821] Call Trace: [ 724.225725][T27821] [ 724.225735][T27821] dump_stack_lvl+0xe8/0x150 [ 724.225766][T27821] should_fail_ex+0x412/0x560 [ 724.225802][T27821] should_failslab+0xa8/0x100 [ 724.225843][T27821] __kvmalloc_node_noprof+0x178/0x8a0 [ 724.225877][T27821] ? __nf_hook_entries_try_shrink+0x328/0x700 [ 724.225919][T27821] __nf_hook_entries_try_shrink+0x328/0x700 [ 724.225965][T27821] __nf_unregister_net_hook+0x4cc/0x6f0 [ 724.226007][T27821] nf_unregister_net_hooks+0xcb/0x140 [ 724.226043][T27821] nf_defrag_ipv6_disable+0x95/0xe0 [ 724.226076][T27821] nf_ct_netns_put+0x375/0x520 [ 724.226111][T27821] xt_ct_tg_check+0x78d/0xa90 [ 724.226150][T27821] ? __pfx_xt_ct_tg_check+0x10/0x10 [ 724.226183][T27821] ? xt_ct_tg_check_v0+0x178/0x2c0 [ 724.226218][T27821] xt_ct_tg_check_v0+0x185/0x2c0 [ 724.226252][T27821] ? __pfx_xt_ct_tg_check_v0+0x10/0x10 [ 724.226297][T27821] ? xt_find_target+0x208/0x260 [ 724.226332][T27821] xt_check_target+0x4a8/0xbf0 [ 724.226363][T27821] ? xt_find_target+0x83/0x260 [ 724.226402][T27821] ? __pfx_xt_check_target+0x10/0x10 [ 724.226452][T27821] ? xt_find_target+0x208/0x260 [ 724.226493][T27821] translate_table+0x184f/0x20b0 [ 724.226543][T27821] ? __pfx_translate_table+0x10/0x10 [ 724.226565][T27821] ? __might_fault+0xaf/0x130 [ 724.226603][T27821] ? __might_fault+0xaf/0x130 [ 724.226653][T27821] ? _copy_from_user+0x94/0xb0 [ 724.226692][T27821] do_ip6t_set_ctl+0x9fe/0xe10 [ 724.226719][T27821] ? rcu_is_watching+0x15/0xb0 [ 724.226747][T27821] ? trace_contention_end+0x3d/0x140 [ 724.226778][T27821] ? __pfx_do_ip6t_set_ctl+0x10/0x10 [ 724.226825][T27821] ? __pfx___mutex_lock+0x10/0x10 [ 724.226854][T27821] ? __pfx___mutex_unlock_slowpath+0x10/0x10 [ 724.226891][T27821] ? __pfx_aa_sk_perm+0x10/0x10 [ 724.226926][T27821] nf_setsockopt+0x26f/0x290 [ 724.226951][T27821] ? __pfx_sock_common_setsockopt+0x10/0x10 [ 724.226978][T27821] do_sock_setsockopt+0x17c/0x1b0 [ 724.227012][T27821] __x64_sys_setsockopt+0x13d/0x1b0 [ 724.227043][T27821] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 724.227069][T27821] do_syscall_64+0x15f/0xf80 [ 724.227094][T27821] ? trace_irq_disable+0x3b/0x140 [ 724.227127][T27821] ? clear_bhb_loop+0x40/0x90 [ 724.227155][T27821] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 724.227177][T27821] RIP: 0033:0x7f940699cdd9 [ 724.227198][T27821] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 724.227217][T27821] RSP: 002b:00007f94077a8028 EFLAGS: 00000246 ORIG_RAX: 0000000000000036 [ 724.227241][T27821] RAX: ffffffffffffffda RBX: 00007f9406c15fa0 RCX: 00007f940699cdd9 [ 724.227258][T27821] RDX: 0000000000000040 RSI: 0000000000000029 RDI: 0000000000000003 [ 724.227271][T27821] RBP: 00007f94077a8090 R08: 0000000000000340 R09: 0000000000000000 [ 724.227286][T27821] R10: 0000200000000380 R11: 0000000000000246 R12: 0000000000000002 [ 724.227300][T27821] R13: 00007f9406c16038 R14: 00007f9406c15fa0 R15: 00007fffd6424108 [ 724.227354][T27821] [ 724.445657][T27830] Cannot find set identified by id 0 to match [ 724.589805][T17746] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 724.661396][ T6792] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 724.708427][T27837] __nla_validate_parse: 3 callbacks suppressed [ 724.708449][T27837] netlink: 4 bytes leftover after parsing attributes in process `syz.2.5434'. [ 724.752629][T27837] netlink: 'syz.2.5434': attribute type 30 has an invalid length. [ 725.186824][T27859] netlink: 'syz.2.5439': attribute type 61 has an invalid length. [ 725.241469][T27855] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 725.279652][T27855] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 725.289337][ C0] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 725.595908][T27863] xt_CT: You must specify a L4 protocol and not use inversions on it [ 725.619898][ T5841] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 725.628122][ T5841] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 726.083476][T27876] IPVS: set_ctl: invalid protocol: 44 224.0.0.1:20000 [ 726.098888][T27876] IPVS: set_ctl: invalid protocol: 58 172.20.20.170:20004 [ 726.395048][T27885] No such timeout policy "syz0" [ 726.419301][T27890] netlink: 'syz.0.5448': attribute type 13 has an invalid length. [ 726.435813][T27890] netlink: 152 bytes leftover after parsing attributes in process `syz.0.5448'. [ 726.458913][T27890] syz_tun: refused to change device tx_queue_len [ 726.477920][T27890] A link change request failed with some changes committed already. Interface syz_tun may have been left with an inconsistent configuration, please check. [ 726.542095][T27883] netlink: 4 bytes leftover after parsing attributes in process `syz.1.5447'. [ 726.660659][T18269] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 726.894985][T27899] xt_CT: You must specify a L4 protocol and not use inversions on it [ 727.103426][T27910] x_tables: duplicate underflow at hook 3 [ 727.341590][T27923] netlink: 40 bytes leftover after parsing attributes in process `syz.1.5456'. [ 727.531504][T27932] openvswitch: netlink: Either Ethernet header or EtherType is required. [ 727.690870][T27938] ±ÿ: renamed from lo (while UP) [ 727.957787][T27948] netlink: 'syz.1.5463': attribute type 12 has an invalid length. [ 727.966413][T27949] xt_CT: You must specify a L4 protocol and not use inversions on it [ 728.004289][T27948] netlink: 132 bytes leftover after parsing attributes in process `syz.1.5463'. [ 728.164808][T27948] IPVS: Unknown mcast interface: bridge0 [ 728.400242][T27955] netlink: 104 bytes leftover after parsing attributes in process `syz.0.5466'. [ 728.834582][T27960] siw: device registration error -23 [ 729.524197][T27984] xt_CT: You must specify a L4 protocol and not use inversions on it [ 729.750066][T27992] netlink: 'syz.2.5479': attribute type 3 has an invalid length. [ 729.770461][T27992] netlink: 'syz.2.5479': attribute type 3 has an invalid length. [ 729.782894][ T5841] net_ratelimit: 4 callbacks suppressed [ 729.782913][ T5841] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 729.890198][T27992] netlink: 16 bytes leftover after parsing attributes in process `syz.2.5479'. [ 730.294558][T28016] netlink: 16 bytes leftover after parsing attributes in process `syz.4.5485'. [ 730.543612][T28033] netlink: 'syz.1.5488': attribute type 1 has an invalid length. [ 730.591849][T28036] netlink: 'syz.2.5491': attribute type 41 has an invalid length. [ 730.607584][T28039] netlink: 36 bytes leftover after parsing attributes in process `syz.0.5492'. [ 730.731439][T28039] hsr0: entered allmulticast mode [ 730.749801][T28039] hsr_slave_0: entered allmulticast mode [ 730.763192][T28039] hsr_slave_1: entered allmulticast mode [ 730.820261][T18269] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 730.939253][T28054] netlink: 'syz.0.5498': attribute type 21 has an invalid length. [ 730.948387][T28049] netlink: 'syz.4.5496': attribute type 4 has an invalid length. [ 731.113056][T28060] netlink: 12 bytes leftover after parsing attributes in process `syz.3.5500'. [ 731.130743][T28069] netlink: 8 bytes leftover after parsing attributes in process `syz.1.5502'. [ 731.251254][T28074] tun0: tun_chr_ioctl cmd 2147767507 [ 731.259145][T28074] netlink: 'syz.2.5503': attribute type 1 has an invalid length. [ 731.267600][T28074] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 731.287663][T28077] netlink: 4 bytes leftover after parsing attributes in process `syz.1.5505'. [ 731.636061][T28095] workqueue: Failed to create a rescuer kthread for wq "bond9": -EINTR [ 731.705474][ T6792] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 731.827383][T28108] netlink: 8 bytes leftover after parsing attributes in process `syz.0.5513'. [ 731.860209][ T5841] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 732.114754][T28126] hsr0: entered promiscuous mode [ 732.353855][T28139] netlink: 12 bytes leftover after parsing attributes in process `syz.3.5519'. [ 732.365963][T28109] lo speed is unknown, defaulting to 1000 [ 732.457397][T28139] netlink: 4 bytes leftover after parsing attributes in process `syz.3.5519'. [ 732.612902][T28141] netlink: 'syz.2.5520': attribute type 178 has an invalid length. [ 732.798373][T28158] sctp: [Deprecated]: syz.1.5522 (pid 28158) Use of int in max_burst socket option. [ 732.798373][T28158] Use struct sctp_assoc_value instead [ 732.901190][T18269] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 732.910946][T28158] netlink: 20 bytes leftover after parsing attributes in process `syz.1.5522'. [ 733.258849][T28119] lo speed is unknown, defaulting to 1000 [ 733.912169][T28187] netlink: 'syz.1.5530': attribute type 1 has an invalid length. [ 733.941997][T18269] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 734.134012][T28200] nbd: illegal input index -1113835520 [ 734.139908][T28202] sctp: [Deprecated]: syz.3.5534 (pid 28202) Use of struct sctp_assoc_value in delayed_ack socket option. [ 734.139908][T28202] Use struct sctp_sack_info instead [ 734.212454][T28187] 8021q: adding VLAN 0 to HW filter on device bond7 [ 734.260168][ T6792] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 734.297564][T28207] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 734.744543][ T6792] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 734.804504][T28243] 8021q: VLANs not supported on sit0 [ 734.847614][T28243] netlink: 'syz.0.5541': attribute type 13 has an invalid length. [ 734.910156][ T6792] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 734.930402][T28254] netlink: 'syz.1.5544': attribute type 1 has an invalid length. [ 734.981376][ T5841] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 735.000510][ T806] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 735.024709][T28261] __nla_validate_parse: 8 callbacks suppressed [ 735.024729][T28261] netlink: 8 bytes leftover after parsing attributes in process `syz.3.5545'. [ 735.171949][T28272] netlink: 'syz.4.5548': attribute type 1 has an invalid length. [ 735.180301][T28272] netlink: 936 bytes leftover after parsing attributes in process `syz.4.5548'. [ 735.213353][T28254] bond8: entered promiscuous mode [ 735.227926][T28274] netlink: 'syz.4.5548': attribute type 41 has an invalid length. [ 735.253929][T28254] 8021q: adding VLAN 0 to HW filter on device bond8 [ 735.333753][T28263] 8021q: adding VLAN 0 to HW filter on device bond8 [ 735.356187][T28263] bond8: (slave ip6gre2): The slave device specified does not support setting the MAC address [ 735.367762][T28279] netlink: 592 bytes leftover after parsing attributes in process `syz.0.5549'. [ 735.377856][T28263] bond8: (slave ip6gre2): Setting fail_over_mac to active for active-backup mode [ 735.402028][T28263] bond8: (slave ip6gre2): making interface the new active one [ 735.410526][T28279] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 735.420653][T28263] ip6gre2: entered promiscuous mode [ 735.428446][T28263] bond8: (slave ip6gre2): Enslaving as an active interface with an up link [ 735.472155][T28251] syzkaller0: entered promiscuous mode [ 735.488877][T28251] syzkaller0: entered allmulticast mode [ 735.778664][T28287] netlink: 76 bytes leftover after parsing attributes in process `syz.3.5551'. [ 735.829917][T28287] netlink: 6 bytes leftover after parsing attributes in process `syz.3.5551'. [ 735.840817][T28287] netlink: 6 bytes leftover after parsing attributes in process `syz.3.5551'. [ 735.970516][T28295] netlink: 'syz.1.5553': attribute type 1 has an invalid length. [ 735.992097][T28295] netlink: 'syz.1.5553': attribute type 2 has an invalid length. [ 736.022572][T18269] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 736.193786][T28312] netlink: 4 bytes leftover after parsing attributes in process `syz.3.5556'. [ 736.369064][T28322] netlink: 32 bytes leftover after parsing attributes in process `syz.0.5558'. [ 736.483041][T18269] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 736.587858][T28324] hsr0: Slave A (hsr_slave_0) is not up; please bring it up to get a fully working HSR network [ 736.640398][T28324] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 736.692120][T28324] hsr0: left allmulticast mode [ 736.701944][T28324] hsr_slave_0: left allmulticast mode [ 736.715175][T28324] hsr_slave_1: left allmulticast mode [ 736.738590][T28324] A link change request failed with some changes committed already. Interface virt_wifi0 may have been left with an inconsistent configuration, please check. [ 736.740022][T28328] netlink: 8 bytes leftover after parsing attributes in process `syz.3.5559'. [ 736.776942][T28328] vlan2: left allmulticast mode [ 736.783836][T28328] geneve0: left allmulticast mode [ 736.789376][T28328] vlan2: left promiscuous mode [ 736.795600][T28328] geneve0: left promiscuous mode [ 736.801568][T28328] bridge0: port 3(vlan2) entered disabled state [ 736.967831][T28336] netlink: 28 bytes leftover after parsing attributes in process `syz.4.5562'. [ 737.006617][T28339] mac80211_hwsim hwsim33 syzkaller0: Caught tx_queue_len zero misconfig [ 737.060348][T18269] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 737.209906][T28345] netlink: 'syz.4.5564': attribute type 1 has an invalid length. [ 737.230245][T18269] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 737.253365][T28345] netlink: 'syz.4.5564': attribute type 2 has an invalid length. [ 737.348693][T28354] bond0: entered promiscuous mode [ 737.376323][T28354] bond_slave_0: entered promiscuous mode [ 737.383673][T28354] bond_slave_1: entered promiscuous mode [ 737.393992][T28354] batadv0: entered promiscuous mode [ 737.426681][T28354] 8021q: adding VLAN 0 to HW filter on device hsr1 [ 737.470723][T28354] bond0: left promiscuous mode [ 737.475718][T28354] bond_slave_0: left promiscuous mode [ 737.482988][T28354] bond_slave_1: left promiscuous mode [ 737.492533][T28354] batadv0: left promiscuous mode [ 737.670128][ T5841] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 738.075705][T28386] tunl0: Caught tx_queue_len zero misconfig [ 738.844063][T28425] sctp: [Deprecated]: syz.3.5580 (pid 28425) Use of int in max_burst socket option deprecated. [ 738.844063][T28425] Use struct sctp_assoc_value instead [ 738.925260][T28361] lo speed is unknown, defaulting to 1000 [ 739.877775][T28457] xt_CT: You must specify a L4 protocol and not use inversions on it [ 739.934374][T28445] lo speed is unknown, defaulting to 1000 [ 740.094046][T28462] net_ratelimit: 8 callbacks suppressed [ 740.094068][T28462] A link change request failed with some changes committed already. Interface hsr_slave_0 may have been left with an inconsistent configuration, please check. [ 740.132048][T28462] netlink: 'syz.3.5590': attribute type 2 has an invalid length. [ 740.152640][T28465] vlan2: left allmulticast mode [ 740.164241][T28465] bond0: left allmulticast mode [ 740.175027][T28465] ÿ: left allmulticast mode [ 740.180959][T18269] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 740.192394][T28465] bond_slave_1: left allmulticast mode [ 740.198081][T28465] team0: left allmulticast mode [ 740.204581][T28465] team_slave_1: left allmulticast mode [ 740.210371][T28465] syz_tun: left allmulticast mode [ 740.217648][T28465] veth5: left promiscuous mode [ 740.232716][T28465] bond4: left promiscuous mode [ 740.237963][T28465] vlan0: left promiscuous mode [ 740.245868][T28465] vlan1: left promiscuous mode [ 740.251271][T28465] bond7: left promiscuous mode [ 740.256357][T28465] vlan1: left allmulticast mode [ 740.261545][T28465] bond7: left allmulticast mode [ 740.268424][T28465] bond9: left promiscuous mode [ 740.280817][T28465] bond10: left promiscuous mode [ 740.289164][T28470] x_tables: arp_tables: CLASSIFY target: used from hooks INPUT, but only usable from FORWARD/OUTPUT [ 740.347510][T28462] __nla_validate_parse: 10 callbacks suppressed [ 740.347531][T28462] netlink: 830 bytes leftover after parsing attributes in process `syz.3.5590'. [ 740.751575][T28475] netlink: 12 bytes leftover after parsing attributes in process `syz.2.5593'. [ 740.820577][ T806] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 740.944143][T28475] bond11: entered promiscuous mode [ 740.978939][T28475] 8021q: adding VLAN 0 to HW filter on device bond11 [ 741.077874][T28480] 8021q: adding VLAN 0 to HW filter on device bond11 [ 741.116522][T28480] bond11: (slave vti0): The slave device specified does not support setting the MAC address [ 741.153069][T28480] bond11: (slave vti0): Error -95 calling set_mac_address [ 741.222634][T18269] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 741.402363][T28490] netlink: 9 bytes leftover after parsing attributes in process `syz.1.5596'. [ 741.420399][T28490] gretap0: entered promiscuous mode [ 741.650592][T28490] netlink: 5 bytes leftover after parsing attributes in process `syz.1.5596'. [ 741.690059][T28490] 0ªî{X¹¦: renamed from gretap0 [ 741.717953][T28490] 0ªî{X¹¦: left promiscuous mode [ 741.741209][T28490] 0ªî{X¹¦: entered allmulticast mode [ 741.776297][T28490] A link change request failed with some changes committed already. Interface 30ªî{X¹¦ may have been left with an inconsistent configuration, please check. [ 741.833660][T28477] lo speed is unknown, defaulting to 1000 [ 742.033097][T28503] netlink: 'syz.4.5599': attribute type 1 has an invalid length. [ 742.058094][T28503] netlink: 'syz.4.5599': attribute type 2 has an invalid length. [ 742.077089][T28503] netlink: 'syz.4.5599': attribute type 1 has an invalid length. [ 742.260739][ T5841] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 742.304506][T28515] netdevsim netdevsim1 eth3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 742.402368][T28515] netdevsim netdevsim1 eth2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 742.554069][T28515] netdevsim netdevsim1 eth1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 742.673169][T28515] netdevsim netdevsim1 eth0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 742.866230][T28528] xt_CT: You must specify a L4 protocol and not use inversions on it [ 742.911737][ T1047] netdevsim netdevsim1 eth0: set [1, 0] type 2 family 0 port 6081 - 0 [ 742.973136][T28527] veth11: entered promiscuous mode [ 743.057190][ T9244] netdevsim netdevsim1 eth1: set [1, 0] type 2 family 0 port 6081 - 0 [ 743.115569][ T1047] netdevsim netdevsim1 eth2: set [1, 0] type 2 family 0 port 6081 - 0 [ 743.180458][T16341] netdevsim netdevsim1 eth3: set [1, 0] type 2 family 0 port 6081 - 0 [ 743.299964][ T5841] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 743.325364][T28541] netlink: 'syz.3.5614': attribute type 1 has an invalid length. [ 743.346313][T28541] netlink: 280 bytes leftover after parsing attributes in process `syz.3.5614'. [ 743.356301][T28546] netlink: 44 bytes leftover after parsing attributes in process `syz.1.5615'. [ 743.371355][T28546] netlink: 4 bytes leftover after parsing attributes in process `syz.1.5615'. [ 743.399984][T28546] netlink: 64 bytes leftover after parsing attributes in process `syz.1.5615'. [ 743.432826][T28537] netlink: 12 bytes leftover after parsing attributes in process `syz.2.5612'. [ 743.630045][T28556] netlink: 4 bytes leftover after parsing attributes in process `syz.1.5617'. [ 743.865035][ T6792] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 743.873515][ T806] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 744.064940][T28574] syzkaller0: entered promiscuous mode [ 744.077400][T28574] syzkaller0: entered allmulticast mode [ 744.353092][ T5841] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 744.498103][T28579] team1: left promiscuous mode [ 744.519099][T28579] team1: left allmulticast mode [ 744.539859][T28579] virt_wifi0: left promiscuous mode [ 744.550748][T28579] macsec2: left promiscuous mode [ 744.571645][T28579] ip6gretap1: left promiscuous mode [ 744.582610][T28579] ip6gretap1: left allmulticast mode [ 744.592268][T28579] bond3: left promiscuous mode [ 744.617418][T28579] bridge6: left promiscuous mode [ 744.623964][T28579] bridge6: left allmulticast mode [ 744.636559][T28595] netlink: 'syz.2.5626': attribute type 1 has an invalid length. [ 744.645191][T28595] netlink: 'syz.2.5626': attribute type 2 has an invalid length. [ 744.653380][T28595] netlink: 'syz.2.5626': attribute type 1 has an invalid length. [ 744.688895][T28579] bond5: left promiscuous mode [ 744.701717][T28579] bridge7: left promiscuous mode [ 744.717326][T28579] veth11: left promiscuous mode [ 745.404607][T17745] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 745.597774][T28619] __nla_validate_parse: 2 callbacks suppressed [ 745.597794][T28619] netlink: 20 bytes leftover after parsing attributes in process `syz.2.5632'. [ 746.441602][T17746] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 746.910221][ T806] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 747.472076][T17746] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 748.400393][T16341] netdevsim netdevsim3 eth0: unset [1, 0] type 2 family 0 port 6081 - 0 [ 748.408939][T16341] netdevsim netdevsim3 eth1: unset [1, 0] type 2 family 0 port 6081 - 0 [ 748.417998][T28601] tipc: Enabling of bearer rejected, failed to enable media [ 748.445750][T16341] netdevsim netdevsim3 eth2: unset [1, 0] type 2 family 0 port 6081 - 0 [ 748.465567][T16341] netdevsim netdevsim3 eth3: unset [1, 0] type 2 family 0 port 6081 - 0 [ 748.499665][T17746] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 748.592453][T28628] netlink: 'syz.0.5637': attribute type 1 has an invalid length. [ 748.610485][T28628] netlink: 'syz.0.5637': attribute type 2 has an invalid length. [ 748.625311][T28628] netlink: 'syz.0.5637': attribute type 1 has an invalid length. [ 748.720703][T28635] netlink: 12 bytes leftover after parsing attributes in process `syz.4.5636'. [ 748.966923][T28649] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 749.033211][T28652] netlink: 8 bytes leftover after parsing attributes in process `syz.4.5642'. [ 749.267808][T28624] lo speed is unknown, defaulting to 1000 [ 749.322807][T28668] netlink: 28 bytes leftover after parsing attributes in process `syz.2.5644'. [ 749.466813][T28674] tc_dump_action: action bad kind [ 749.536272][T28674] netlink: 'syz.1.5647': attribute type 1 has an invalid length. [ 749.549642][T17746] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 749.941168][ T806] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 750.095049][T28699] netlink: 212344 bytes leftover after parsing attributes in process `syz.0.5655'. [ 750.605574][T17746] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 750.775560][T28719] netlink: 'syz.4.5660': attribute type 1 has an invalid length. [ 750.789593][T28719] netlink: 'syz.4.5660': attribute type 2 has an invalid length. [ 750.835011][T28719] netlink: 'syz.4.5660': attribute type 1 has an invalid length. [ 751.026369][T28741] netlink: 44 bytes leftover after parsing attributes in process `syz.0.5665'. [ 751.125008][T28745] netlink: 8 bytes leftover after parsing attributes in process `syz.4.5666'. [ 751.135868][T28745] netlink: 24 bytes leftover after parsing attributes in process `syz.4.5666'. [ 751.242503][T28751] netlink: 4 bytes leftover after parsing attributes in process `syz.1.5668'. [ 751.306653][T28751] bond9: option lacp_rate: mode dependency failed, not supported in mode balance-xor(2) [ 751.322799][T28751] bond9 (unregistering): Released all slaves [ 751.619980][T18269] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 751.967295][ T6792] hid-generic 0005:04F3:55BE.0003: item fetching failed at offset 0/1 [ 752.002608][ T6792] hid-generic 0005:04F3:55BE.0003: probe with driver hid-generic failed with error -22 [ 752.035124][T28799] xt_CT: You must specify a L4 protocol and not use inversions on it [ 752.162977][T28803] netlink: 8 bytes leftover after parsing attributes in process `syz.4.5680'. [ 752.179712][ C1] ip6_tunnel: ip6gretap1 xmit: Local address not yet configured! [ 752.238679][T28806] netlink: 12 bytes leftover after parsing attributes in process `syz.2.5682'. [ 752.258222][T28808] x_tables: duplicate underflow at hook 1 [ 752.371996][T28817] netlink: 8 bytes leftover after parsing attributes in process `syz.3.5684'. [ 752.422585][T28819] netlink: 4 bytes leftover after parsing attributes in process `syz.2.5685'. [ 752.567684][T28827] netlink: 8 bytes leftover after parsing attributes in process `syz.0.5688'. [ 752.589558][T28827] netlink: 'syz.0.5688': attribute type 5 has an invalid length. [ 752.597744][T28827] netlink: 20 bytes leftover after parsing attributes in process `syz.0.5688'. [ 752.678060][T18269] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 752.739993][ T5644] Bluetooth: hci1: command 0x0405 tx timeout [ 752.979957][ T6792] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 753.460341][ T806] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 753.701163][T18269] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 754.740021][T17746] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 755.395287][T28827] geneve3: entered promiscuous mode [ 755.401508][T28827] geneve3: entered allmulticast mode [ 755.478030][T28832] bond9 (unregistering): Released all slaves [ 755.545547][T16343] netdevsim netdevsim0 eth0: set [1, 0] type 2 family 0 port 256 - 0 [ 755.569860][T16343] netdevsim netdevsim0 eth1: set [1, 0] type 2 family 0 port 256 - 0 [ 755.596988][T16343] netdevsim netdevsim0 eth2: set [1, 0] type 2 family 0 port 256 - 0 [ 755.619301][T16343] netdevsim netdevsim0 eth3: set [1, 0] type 2 family 0 port 256 - 0 [ 755.644279][T28838] netlink: 'syz.3.5691': attribute type 2 has an invalid length. [ 755.667936][T28838] netlink: 'syz.3.5691': attribute type 2 has an invalid length. [ 755.785505][T17746] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 756.021015][ T806] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 756.048714][T28864] syzkaller0: entered promiscuous mode [ 756.060283][T28864] syzkaller0: entered allmulticast mode [ 756.715733][T28887] __nla_validate_parse: 4 callbacks suppressed [ 756.715759][T28887] netlink: 40 bytes leftover after parsing attributes in process `syz.1.5707'. [ 756.776100][T28887] netlink: 40 bytes leftover after parsing attributes in process `syz.1.5707'. [ 756.816922][T28880] syzkaller1: entered promiscuous mode [ 756.831393][T18269] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 756.831753][T28880] syzkaller1: entered allmulticast mode [ 756.871184][T28892] netlink: 28 bytes leftover after parsing attributes in process `syz.2.5711'. [ 756.925260][T28892] netlink: 28 bytes leftover after parsing attributes in process `syz.2.5711'. [ 757.027046][T28899] netlink: 4 bytes leftover after parsing attributes in process `syz.1.5712'. [ 757.171584][T28899] team_slave_0 (unregistering): left promiscuous mode [ 757.196261][T28899] team0: Port device team_slave_0 removed [ 757.218257][T28900] veth0_virt_wifi: Caught tx_queue_len zero misconfig [ 757.457126][T28919] netlink: 12 bytes leftover after parsing attributes in process `syz.4.5719'. [ 757.476854][T28915] xt_hashlimit: size too large, truncated to 1048576 [ 757.570060][T16341] netdevsim netdevsim3 eth0: set [0, 0] type 1 family 0 port 8472 - 0 [ 757.581464][T16341] netdevsim netdevsim3 eth1: set [0, 0] type 1 family 0 port 8472 - 0 [ 757.614295][T16341] netdevsim netdevsim3 eth2: set [0, 0] type 1 family 0 port 8472 - 0 [ 757.649321][T16341] netdevsim netdevsim3 eth3: set [0, 0] type 1 family 0 port 8472 - 0 [ 757.860210][T18269] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 757.994772][T28906] lo speed is unknown, defaulting to 1000 [ 758.164577][T28945] netlink: 32 bytes leftover after parsing attributes in process `syz.3.5726'. [ 758.307658][T28956] ÿÿÿÿÿÿ (unregistering): left allmulticast mode [ 758.321330][T28956] ÿÿÿÿÿÿ (unregistering): left promiscuous mode [ 758.337351][T28956] bridge0: port 1(ÿÿÿÿÿÿ) entered disabled state [ 758.822395][T28971] syzkaller0: entered promiscuous mode [ 758.828212][T28971] syzkaller0: entered allmulticast mode [ 758.900761][T18269] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 758.918376][T28974] netlink: 'syz.3.5733': attribute type 1 has an invalid length. [ 759.062203][ T806] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 759.073940][T28974] workqueue: Failed to create a rescuer kthread for wq "bond6": -EINTR [ 759.234639][T28998] netlink: 'syz.2.5738': attribute type 1 has an invalid length. [ 759.289970][T28998] netlink: 'syz.2.5738': attribute type 2 has an invalid length. [ 759.308133][T28998] netlink: 'syz.2.5738': attribute type 1 has an invalid length. [ 759.723869][T29020] x_tables: arp_tables: CLASSIFY target: used from hooks INPUT, but only usable from FORWARD/OUTPUT [ 759.772382][T29023] netlink: 'syz.1.5747': attribute type 9 has an invalid length. [ 759.922904][T29031] netlink: 168 bytes leftover after parsing attributes in process `syz.1.5750'. [ 759.940068][T18269] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 759.942684][T29031] netlink: 196 bytes leftover after parsing attributes in process `syz.1.5750'. [ 759.960422][T29031] netlink: 'syz.1.5750': attribute type 8 has an invalid length. [ 760.168973][T29036] netdevsim netdevsim3 eth3 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 760.205956][T29039] netlink: 4 bytes leftover after parsing attributes in process `syz.3.5752'. [ 760.242925][T29034] syzkaller0: entered promiscuous mode [ 760.262432][T29034] syzkaller0: entered allmulticast mode [ 760.299770][T29036] netdevsim netdevsim3 eth2 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 760.402852][T29036] netdevsim netdevsim3 eth1 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 760.525204][T29036] netdevsim netdevsim3 eth0 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 760.722888][T16347] netdevsim netdevsim3 eth0: set [0, 0] type 1 family 0 port 8472 - 0 [ 760.793108][T16347] netdevsim netdevsim3 eth1: set [0, 0] type 1 family 0 port 8472 - 0 [ 760.867697][ T9244] netdevsim netdevsim3 eth2: set [0, 0] type 1 family 0 port 8472 - 0 [ 760.923867][T16347] netdevsim netdevsim3 eth3: set [0, 0] type 1 family 0 port 8472 - 0 [ 760.958676][T29041] lo speed is unknown, defaulting to 1000 [ 760.980120][T17746] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 761.347124][T29067] 8021q: adding VLAN 0 to HW filter on device bond0 [ 761.357907][T29067] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 761.403219][T29067] hsr0: Slave A (hsr_slave_0) is not up; please bring it up to get a fully working HSR network [ 761.413995][T29067] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 761.427230][T29067] hsr0: left promiscuous mode [ 761.436586][T29067] A link change request failed with some changes committed already. Interface virt_wifi0 may have been left with an inconsistent configuration, please check. [ 761.516154][T29051] lo speed is unknown, defaulting to 1000 [ 761.585311][T29081] netlink: 'syz.3.5763': attribute type 1 has an invalid length. [ 761.593568][T29081] netlink: 'syz.3.5763': attribute type 2 has an invalid length. [ 761.602200][T29081] netlink: 'syz.3.5763': attribute type 1 has an invalid length. [ 762.031476][T17746] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 762.101468][ T6792] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 762.155957][T29098] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 762.164604][ C0] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 762.382946][T29110] netlink: 20 bytes leftover after parsing attributes in process `syz.1.5770'. [ 762.414307][T29113] tipc: Enabled bearer , priority 0 [ 762.536710][T29118] tipc: Resetting bearer [ 763.023741][T29133] netlink: 'syz.0.5774': attribute type 1 has an invalid length. [ 763.069520][T17746] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 763.079734][T29133] netlink: 'syz.0.5774': attribute type 2 has an invalid length. [ 763.087765][ T6792] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 763.108388][T29133] netlink: 'syz.0.5774': attribute type 1 has an invalid length. [ 763.123863][T29136] netlink: 32 bytes leftover after parsing attributes in process `syz.1.5776'. [ 763.144176][T29133] netlink: 16 bytes leftover after parsing attributes in process `syz.0.5774'. [ 763.155425][T29140] xt_CT: You must specify a L4 protocol and not use inversions on it [ 763.515945][T29155] netlink: 8 bytes leftover after parsing attributes in process `syz.2.5781'. [ 763.580767][T16341] [ 763.583162][T16341] ============================================ [ 763.589348][T16341] WARNING: possible recursive locking detected [ 763.595536][T16341] syzkaller #0 Not tainted [ 763.599998][T16341] -------------------------------------------- [ 763.606169][T16341] kworker/u8:23/16341 is trying to acquire lock: [ 763.612512][T16341] ffff88807a5b3958 (&qdisc_xmit_lock_key#3){+.-.}-{3:3}, at: sch_direct_xmit+0x15f/0x4c0 [ 763.622415][T16341] [ 763.622415][T16341] but task is already holding lock: [ 763.629799][T16341] ffff888058947d58 (&qdisc_xmit_lock_key#3){+.-.}-{3:3}, at: sch_direct_xmit+0x15f/0x4c0 [ 763.639669][T16341] [ 763.639669][T16341] other info that might help us debug this: [ 763.647751][T16341] Possible unsafe locking scenario: [ 763.647751][T16341] [ 763.655255][T16341] CPU0 [ 763.658584][T16341] ---- [ 763.661879][T16341] lock(&qdisc_xmit_lock_key#3); [ 763.666936][T16341] lock(&qdisc_xmit_lock_key#3); [ 763.671980][T16341] [ 763.671980][T16341] *** DEADLOCK *** [ 763.671980][T16341] [ 763.680140][T16341] May be due to missing lock nesting notation [ 763.680140][T16341] [ 763.688490][T16341] 11 locks held by kworker/u8:23/16341: [ 763.694053][T16341] #0: ffff88805e061140 ((wq_completion)bond1#3){+.+.}-{0:0}, at: process_scheduled_works+0xa35/0x1860 [ 763.705138][T16341] #1: ffffc900024cfc40 ((work_completion)(&(&bond->alb_work)->work)){+.+.}-{0:0}, at: process_scheduled_works+0xa70/0x1860 [ 763.718037][T16341] #2: ffffffff8e95cd60 (rcu_read_lock){....}-{1:3}, at: bond_alb_monitor+0xf8/0x17e0 [ 763.727742][T16341] #3: ffffffff8e95cdc0 (rcu_read_lock_bh){....}-{1:3}, at: __dev_queue_xmit+0x2b6/0x3950 [ 763.737830][T16341] #4: ffff8880292bf228 (dev->qdisc_tx_busylock ?: &qdisc_tx_busylock#5){+...}-{3:3}, at: __dev_queue_xmit+0x11a6/0x3950 [ 763.750512][T16341] #5: ffff888058947d58 (&qdisc_xmit_lock_key#3){+.-.}-{3:3}, at: sch_direct_xmit+0x15f/0x4c0 [ 763.760935][T16341] #6: ffffffff8e95cd60 (rcu_read_lock){....}-{1:3}, at: ip_output+0x5b/0x450 [ 763.769873][T16341] #7: ffffffff8e95cd60 (rcu_read_lock){....}-{1:3}, at: ip_finish_output2+0x3c2/0x1070 [ 763.779659][T16341] #8: ffffffff8e95cd60 (rcu_read_lock){....}-{1:3}, at: arp_xmit+0x23/0x270 [ 763.788479][T16341] #9: ffffffff8e95cdc0 (rcu_read_lock_bh){....}-{1:3}, at: __dev_queue_xmit+0x2b6/0x3950 [ 763.798446][T16341] #10: ffff888036802228 (dev->qdisc_tx_busylock ?: &qdisc_tx_busylock#5){+...}-{3:3}, at: __dev_queue_xmit+0x11a6/0x3950 [ 763.811272][T16341] [ 763.811272][T16341] stack backtrace: [ 763.817190][T16341] CPU: 0 UID: 0 PID: 16341 Comm: kworker/u8:23 Not tainted syzkaller #0 PREEMPT(full) [ 763.817211][T16341] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 04/18/2026 [ 763.817224][T16341] Workqueue: bond1 bond_alb_monitor [ 763.817252][T16341] Call Trace: [ 763.817261][T16341] [ 763.817271][T16341] dump_stack_lvl+0xe8/0x150 [ 763.817311][T16341] print_deadlock_bug+0x279/0x290 [ 763.817337][T16341] __lock_acquire+0x253f/0x2cf0 [ 763.817360][T16341] ? unwind_next_frame+0xa6/0x2550 [ 763.817387][T16341] ? sch_direct_xmit+0x15f/0x4c0 [ 763.817405][T16341] lock_acquire+0x106/0x350 [ 763.817422][T16341] ? sch_direct_xmit+0x15f/0x4c0 [ 763.817446][T16341] _raw_spin_lock+0x2e/0x40 [ 763.817463][T16341] ? sch_direct_xmit+0x15f/0x4c0 [ 763.817480][T16341] sch_direct_xmit+0x15f/0x4c0 [ 763.817501][T16341] ? __pfx_sch_direct_xmit+0x10/0x10 [ 763.817519][T16341] ? arp_create+0xa0/0x980 [ 763.817546][T16341] __dev_queue_xmit+0x180f/0x3950 [ 763.817576][T16341] ? __dev_queue_xmit+0x2b6/0x3950 [ 763.817604][T16341] ? arpt_do_table+0x256/0x1e30 [ 763.817626][T16341] ? __pfx___dev_queue_xmit+0x10/0x10 [ 763.817655][T16341] ? __pfx_arpt_do_table+0x10/0x10 [ 763.817674][T16341] ? trace_kmem_cache_alloc+0x29/0xe0 [ 763.817705][T16341] ? NF_HOOK+0xa2/0x3c0 [ 763.817729][T16341] NF_HOOK+0x33a/0x3c0 [ 763.817752][T16341] ? __pfx_arp_xmit_finish+0x10/0x10 [ 763.817775][T16341] ? NF_HOOK+0xa2/0x3c0 [ 763.817797][T16341] ? __pfx_NF_HOOK+0x10/0x10 [ 763.817819][T16341] ? lock_acquire+0x106/0x350 [ 763.817837][T16341] ? __pfx_arp_xmit_finish+0x10/0x10 [ 763.817861][T16341] ? inet_addr_type_dev_table+0x25/0x190 [ 763.817888][T16341] arp_xmit+0x16c/0x270 [ 763.817910][T16341] ? arp_xmit+0x23/0x270 [ 763.817933][T16341] arp_solicit+0xbe0/0xe40 [ 763.817960][T16341] ? arp_solicit+0x119/0xe40 [ 763.817984][T16341] ? __pfx_arp_solicit+0x10/0x10 [ 763.818013][T16341] ? __pfx_arp_solicit+0x10/0x10 [ 763.818037][T16341] __neigh_event_send+0xf05/0x14d0 [ 763.818061][T16341] neigh_resolve_output+0x198/0x750 [ 763.818081][T16341] ? __pfx_ip_neigh_gw4+0x10/0x10 [ 763.818113][T16341] ? ip_finish_output2+0x3c2/0x1070 [ 763.818138][T16341] ip_finish_output2+0xca9/0x1070 [ 763.818163][T16341] ? ip_skb_dst_mtu+0x80b/0xa50 [ 763.818189][T16341] ? ip_finish_output+0x40e/0x530 [ 763.818215][T16341] ip_output+0x29f/0x450 [ 763.818238][T16341] ? ip_output+0x5b/0x450 [ 763.818261][T16341] iptunnel_xmit+0x621/0xd10 [ 763.818300][T16341] ip_tunnel_xmit+0x193a/0x1f20 [ 763.818346][T16341] ? __pfx_ip_tunnel_xmit+0x10/0x10 [ 763.818371][T16341] ? __pfx_gre_build_header+0x10/0x10 [ 763.818392][T16341] ? kfree+0x1c5/0x640 [ 763.818411][T16341] ? pskb_expand_head+0x458/0x1390 [ 763.818436][T16341] __gre_xmit+0x19e/0x240 [ 763.818457][T16341] ? __pfx___gre_xmit+0x10/0x10 [ 763.818480][T16341] erspan_xmit+0xa41/0x14d0 [ 763.818506][T16341] ? ret_from_fork_asm+0x1a/0x30 [ 763.818526][T16341] ? __pfx_erspan_xmit+0x10/0x10 [ 763.818553][T16341] dev_hard_start_xmit+0x2cd/0x830 [ 763.818584][T16341] sch_direct_xmit+0x251/0x4c0 [ 763.818604][T16341] ? __pfx_sch_direct_xmit+0x10/0x10 [ 763.818622][T16341] ? kthread+0x370/0x470 [ 763.818647][T16341] __dev_queue_xmit+0x180f/0x3950 [ 763.818674][T16341] ? __dev_queue_xmit+0x2b6/0x3950 [ 763.818704][T16341] ? __pfx___dev_queue_xmit+0x10/0x10 [ 763.818729][T16341] ? rcu_is_watching+0x15/0xb0 [ 763.818749][T16341] ? trace_kmem_cache_alloc+0x29/0xe0 [ 763.818772][T16341] ? kmem_cache_alloc_node_noprof+0x3ce/0x690 [ 763.818803][T16341] ? alb_send_lp_vid+0x14e/0x550 [ 763.818827][T16341] alb_send_lp_vid+0x348/0x550 [ 763.818852][T16341] ? __pfx_alb_send_lp_vid+0x10/0x10 [ 763.818876][T16341] ? ktime_get+0x45/0x220 [ 763.818905][T16341] alb_send_learning_packets+0x12c/0x300 [ 763.818928][T16341] ? __pfx_alb_send_learning_packets+0x10/0x10 [ 763.818951][T16341] ? bond_alb_monitor+0xf8/0x17e0 [ 763.818991][T16341] ? netdev_lower_get_next_private_rcu+0x9f/0x100 [ 763.819014][T16341] bond_alb_monitor+0x3d5/0x17e0 [ 763.819034][T16341] ? irqentry_exit+0x218/0x730 [ 763.819057][T16341] ? bond_alb_monitor+0xf8/0x17e0 [ 763.819080][T16341] ? __pfx_bond_alb_monitor+0x10/0x10 [ 763.819103][T16341] ? process_scheduled_works+0xa70/0x1860 [ 763.819121][T16341] ? process_scheduled_works+0xa70/0x1860 [ 763.819139][T16341] process_scheduled_works+0xb5d/0x1860 [ 763.819171][T16341] ? __pfx_process_scheduled_works+0x10/0x10 [ 763.819192][T16341] ? assign_work+0x3d5/0x5e0 [ 763.819211][T16341] worker_thread+0xa53/0xfc0 [ 763.819242][T16341] kthread+0x388/0x470 [ 763.819265][T16341] ? __pfx_worker_thread+0x10/0x10 [ 763.819282][T16341] ? __pfx_kthread+0x10/0x10 [ 763.819309][T16341] ret_from_fork+0x514/0xb70 [ 763.819330][T16341] ? __pfx_ret_from_fork+0x10/0x10 [ 763.819347][T16341] ? __switch_to+0xc79/0x1410 [ 763.819374][T16341] ? __pfx_kthread+0x10/0x10 [ 763.819397][T16341] ret_from_fork_asm+0x1a/0x30 [ 763.819430][T16341] [ 764.478267][T17745] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 765.139947][ T6792] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 765.459521][T20575] Bluetooth: hci1: command 0x0405 tx timeout [ 766.580198][T17746] net_ratelimit: 1 callbacks suppressed [ 766.580228][T17746] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 767.620325][T17745] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 768.180082][ T806] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 768.660525][T17745] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 769.700290][T17746] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 770.740442][T17745] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 771.219862][ T6792] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 771.779864][T17746] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 772.662130][ T806] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 772.820030][T17746] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog