last executing test programs: 3m43.519688826s ago: executing program 3 (id=4227): r0 = bpf$MAP_CREATE(0x0, &(0x7f00000000c0)=ANY=[@ANYBLOB="1b00000000000000000000000080000000000000", @ANYRES32, @ANYBLOB='\x00'/20, @ANYRES32=0x0, @ANYRES32, @ANYBLOB='\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00 \x00\x00\x00\x00\x00\x00\x00\x00'], 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x6, 0x7, &(0x7f0000000240)=ANY=[@ANYBLOB="1800000000010000000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b702000000000000850000008c00000095"], &(0x7f0000000180)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x38, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) syz_init_net_socket$bt_l2cap(0x1f, 0x1, 0x0) socket$inet_icmp_raw(0x2, 0x3, 0x1) pselect6(0x0, 0x0, 0x0, 0x0, 0x0, 0x0) close(0x4) syz_init_net_socket$bt_hci(0x1f, 0x3, 0x5) close(0x4) syz_open_procfs$namespace(0x0, &(0x7f0000000200)='ns/pid_for_children\x00') unshare(0x6a040000) socket$nl_route(0x10, 0x3, 0x0) r1 = socket$nl_generic(0x10, 0x3, 0x10) r2 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r2, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000240)=ANY=[@ANYBLOB="140000001000010000000000000000000500000a28000000000a030000000000000000000a00000708000240000000020900010073797a31000000002c000000030a010100000000000000000a0000070900010073797a31000000000900030073797a320000000014000000110001"], 0x7c}, 0x1, 0x0, 0x0, 0x4000}, 0x0) sendmsg$NFT_BATCH(r2, &(0x7f0000009b40)={0x0, 0x0, &(0x7f0000009b00)={&(0x7f0000000540)=ANY=[@ANYBLOB="140000001000010000000000000074000300000a58000000060a010400000000000000000a0000030900010073797a31000000002c0004802800018007000100637400001c0002800800044000000017080002400000000d05000300000000000900020073797a32"], 0x80}, 0x1, 0x0, 0x0, 0x4008091}, 0x10) r3 = syz_genetlink_get_family_id$ethtool(&(0x7f0000000440), 0xffffffffffffffff) sendmsg$ETHTOOL_MSG_STRSET_GET(r1, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000880)={0x1c, r3, 0x705, 0x70bd2b, 0x25dfdbff, {}, [@ETHTOOL_A_STRSET_STRINGSETS={0x4}, @ETHTOOL_A_STRSET_COUNTS_ONLY={0x4}]}, 0x1c}, 0x1, 0x0, 0x0, 0x40008d4}, 0x0) 3m40.528091987s ago: executing program 3 (id=4242): r0 = bpf$PROG_LOAD(0x5, &(0x7f0000000200)={0xc, 0xe, &(0x7f0000004000)=ANY=[@ANYBLOB="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"], &(0x7f0000000340)='syzkaller\x00'}, 0x48) bpf$BPF_PROG_QUERY(0x10, &(0x7f0000000100)={@cgroup, 0xe, 0x0, 0x5, &(0x7f0000000000)=[0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0], 0xa, 0x0, &(0x7f0000000040)=[0x0, 0x0, 0x0], &(0x7f0000000080)=[0x0, 0x0, 0x0, 0x0], &(0x7f00000000c0)=[0x0, 0x0], 0x0}, 0x40) r2 = openat$cgroup(0xffffffffffffffff, &(0x7f0000000180)='syz1\x00', 0x200002, 0x0) r3 = socket$nl_route(0x10, 0x3, 0x0) r4 = openat$tun(0xffffffffffffff9c, 0x0, 0x48241, 0x0) ioctl$TUNSETIFF(r4, 0x400454ca, 0x0) r5 = socket$kcm(0x2, 0xa, 0x2) ioctl$SIOCSIFHWADDR(r5, 0x8914, &(0x7f0000000180)={'syzkaller1\x00', @link_local}) r6 = socket$inet_mptcp(0x2, 0x1, 0x106) setsockopt$sock_int(r6, 0x1, 0x21, &(0x7f0000000100)=0xffff0001, 0x4) setsockopt$sock_int(r6, 0x1, 0x7, &(0x7f0000000080)=0x1, 0x4) bind$inet(r6, &(0x7f0000000040)={0x2, 0x0, @multicast2}, 0x10) write$tun(r4, 0x0, 0xfdef) ioctl$sock_SIOCGIFINDEX(r3, 0x8933, &(0x7f00000000c0)={'bridge_slave_0\x00', 0x0}) sendmsg$nl_route(r3, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000000)=@bridge_newvlan={0x24, 0x70, 0x239, 0x70bd2d, 0x25dfdbff, {0x7, 0x0, 0x0, r7}, [@BRIDGE_VLANDB_ENTRY={0xc, 0x1, 0x0, 0x1, @BRIDGE_VLANDB_ENTRY_INFO={0x8, 0x1, {0x22, 0x1}}}]}, 0x24}, 0x1, 0x0, 0x0, 0x804}, 0x4c050) r8 = bpf$BPF_PROG_WITH_BTFID_LOAD(0x5, &(0x7f0000000500)=@bpf_ext={0x1c, 0x4, &(0x7f00000001c0)=@framed={{0x18, 0x0, 0x0, 0x0, 0xfffffff8, 0x0, 0x0, 0x0, 0x180000}, [@jmp={0x5, 0x1, 0x1, 0x8, 0x7, 0x18, 0x10}]}, &(0x7f00000002c0)='GPL\x00', 0x2, 0x69, &(0x7f0000000380)=""/105, 0x41000, 0x3, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, &(0x7f0000000400)={0x6, 0x1}, 0x8, 0x10, 0x0, 0x0, 0x164de, r0, 0x5, &(0x7f0000000440)=[0x1, 0xffffffffffffffff, 0x1, 0x1, 0x1], &(0x7f0000000480)=[{0x0, 0x2, 0xb, 0x5}, {0x3, 0x4, 0x2, 0x1}, {0x3, 0x3, 0x2, 0x6}, {0x2, 0x1, 0xb, 0x9}, {0x3, 0x1, 0xf, 0x6}]}, 0x94) bpf$BPF_PROG_ATTACH(0x8, &(0x7f0000000140)={@cgroup=r2, r0, 0x1, 0x4, r0, @void, @value=r8, @void, @void, r1}, 0x20) 3m38.585310357s ago: executing program 3 (id=4246): bpf$PROG_LOAD(0x5, &(0x7f00000011c0)={0xb, 0x4, &(0x7f0000000480)=ANY=[@ANYBLOB="18000000000000000000000000000000611885000000000095"], &(0x7f0000000140)='GPL\x00', 0xd, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3}, 0x94) r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000200)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a20000000000a01040000000000000000010000000900010073797a3100000000ac000000030a010300000000000000000100000014000480080002400000000008000140000000050900030073797a30000000000900010073797a310000000008000b4000000003640008800c00014000000000800000000c00014000000000000000010c00014000000000000000050c000140000000000000a0a20c000140000010000000c6930c0002"], 0x92fc}}, 0x0) pipe(&(0x7f0000000000)={0xffffffffffffffff}) r2 = socket(0x1e, 0x4, 0x0) setsockopt$packet_tx_ring(r2, 0x10f, 0x87, &(0x7f0000000140)=@req3={0x7813, 0x3, 0x2, 0x81, 0x475, 0x4, 0x3}, 0x1c) r3 = socket(0x1e, 0x4, 0x0) r4 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r4, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000180)={&(0x7f00000001c0)={0x40, 0x40, 0x119, 0xfffffffe, 0x25dfdbfd, {0x1, 0x7c}, [@nested={0x4, 0x141}, @nested={0xc, 0x1, 0x0, 0x1, [@typed={0x6, 0x6, 0x0, 0x0, @str='e1'}]}, @nested={0x1c, 0x2, 0x0, 0x1, [@nested={0x18, 0x142, 0x0, 0x1, [@typed={0x8, 0x65, 0x0, 0x0, @u32=0x1ff}, @typed={0xc, 0x15d, 0x0, 0x0, @u64=0x7}]}]}]}, 0x40}, 0x1, 0x0, 0x0, 0x48814}, 0x200c8c0) mmap(&(0x7f0000002000/0x2000)=nil, 0x2000, 0x8, 0x32, 0xffffffffffffffff, 0x0) r5 = openat$tun(0xffffffffffffff9c, &(0x7f0000000040), 0x0, 0x0) ioctl$TUNSETTXFILTER(r5, 0x400454ca, &(0x7f0000000100)=ANY=[@ANYBLOB="2e42000c371303ed6a33f2ff8689b3f60e"]) socket$nl_generic(0x10, 0x3, 0x10) r6 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r6, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000006c0)=ANY=[@ANYBLOB="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"], 0x114}}, 0x0) r7 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r7, 0x0, 0x0) sendmsg$NFT_BATCH(r7, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000100)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a80000000060a0b040000000000000000020000005400048018"], 0xa8}}, 0x0) syz_init_net_socket$bt_sco(0x1f, 0x5, 0x2) r8 = syz_init_net_socket$802154_raw(0x24, 0x3, 0x0) sendmsg$kcm(0xffffffffffffffff, &(0x7f0000001f80)={&(0x7f0000001d00)=@rc={0x1f, @any, 0xd}, 0x80, 0x0}, 0x0) bind$802154_raw(r8, 0x0, 0x0) sendmmsg$unix(0xffffffffffffffff, &(0x7f000000b340)=[{{0x0, 0x0, 0x0}}, {{0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8000}}, {{0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8054}}], 0x3, 0x4000) ioctl$TUNSETTXFILTER(r5, 0x400454d1, 0x0) setsockopt$packet_tx_ring(r3, 0x10f, 0x87, &(0x7f0000000140)=@req3={0x7813, 0x4003, 0x2, 0x81, 0x1ff, 0x1, 0x1}, 0x1c) sendmmsg(r3, &(0x7f00000030c0)=[{{0x0, 0xa9cc7003, &(0x7f0000000400)=[{&(0x7f00000000c0)="ee", 0x101d0}], 0x1}}], 0x400000000000181, 0x9200000000000000) mmap(&(0x7f0000001000/0xc00000)=nil, 0xc00000, 0x0, 0x3032, 0xffffffffffffffff, 0x0) recvmsg$unix(r2, &(0x7f0000000100)={0x0, 0x0, &(0x7f00000004c0)=[{&(0x7f0000000700)=""/4080, 0xff0}], 0x1}, 0x20) r9 = syz_genetlink_get_family_id$ethtool(&(0x7f0000000080), 0xffffffffffffffff) sendmsg$ETHTOOL_MSG_LINKINFO_SET(r1, &(0x7f0000000180)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x100000}, 0xc, &(0x7f0000000100)={&(0x7f00000002c0)=ANY=[@ANYBLOB="140000004e30392cca3d4a56f8ffb5bdfe92a050006cbfeb319bb07140778bbc5eb9d864ec3111d9101b0a98268531b7d91fff01662d18f302c0152e7b15836f8d80c9930b62ebbd8349209d0b8f7569ba", @ANYRES16=r9, @ANYBLOB="020027bd7000fddbdf2503000000"], 0x14}, 0x1, 0x0, 0x0, 0x404d881}, 0x44001) 3m37.411804409s ago: executing program 3 (id=4255): r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000040)='memory.events\x00', 0x275a, 0x0) unshare(0x2040600) r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000280)='devices.list\x00', 0x26e1, 0x0) close(r1) socket$netlink(0x10, 0x3, 0x10) r2 = syz_genetlink_get_family_id$devlink(&(0x7f0000000040), 0xffffffffffffffff) sendmsg$DEVLINK_CMD_GET(r1, &(0x7f0000000940)={0x0, 0x0, &(0x7f0000000900)={&(0x7f0000000800)={0x14, r2, 0xc2699618ba151721, 0x70bd2a, 0x25dfdbfc}, 0x14}, 0x1, 0x0, 0x0, 0x48880}, 0x20000010) r3 = openat$cgroup_ro(r0, &(0x7f00000001c0)='memory.current\x00', 0x0, 0x0) r4 = socket$nl_route(0x10, 0x3, 0x0) ioctl$XFS_IOC_FD_TO_HANDLE(r4, 0xc038586a, &(0x7f0000000100)={r4, &(0x7f0000000380)='{P\xac;K\xf0\xa9h\xcc\xed#\xaemv\xbc\x00', 0xcc000, &(0x7f0000000040)={@_ha_fsid={[0x100, 0xfffffbff]}, {0x1, 0x0, 0x2, 0x9}}, 0x2f4, &(0x7f0000000080), &(0x7f00000000c0)=0xc3}) sendmsg$nl_route(r4, &(0x7f0000000600)={0x0, 0x0, &(0x7f00000005c0)={&(0x7f00000004c0)=@ipv6_getroute={0x2c, 0x1a, 0x1, 0x70bd2c, 0x25dfdbfe, {0xa, 0x20, 0x14, 0xc, 0x0, 0x76e993a086cc320e, 0xfd, 0x7, 0x100}, [@RTA_OIF={0x8}, @RTA_IIF={0x8}]}, 0x2c}, 0x1, 0x0, 0x0, 0x48800}, 0x40) bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="05000000040000000800000005"], 0x48) r5 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[], 0x48) r6 = bpf$PROG_LOAD(0x5, &(0x7f0000000340)={0x11, 0x14, &(0x7f0000000280)=ANY=[@ANYBLOB="180000000000000000000000000000001801000020646c2100000000f91f20207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000000600000018110000", @ANYRES32=r5, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000100000095"], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$PROG_BIND_MAP(0xa, &(0x7f00000004c0)={r6, r5}, 0xc) r7 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000380)='./cgroup.cpu/syz0\x00', 0x200002, 0x0) r8 = openat$cgroup_ro(r7, &(0x7f0000000400)='cgroup.events\x00', 0x275a, 0x0) write$cgroup_subtree(r8, &(0x7f0000000100)=ANY=[], 0x32600) mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x600000c, 0x12, r8, 0x0) ioctl$FIGETBSZ(r8, 0x2, &(0x7f0000000080)) bpf$PROG_LOAD(0x5, &(0x7f0000000400)={0x3, 0xc, &(0x7f0000000000)=ANY=[], &(0x7f0000000980)='GPL\x00', 0x0, 0x0, 0x0, 0x41100, 0x0, '\x00', 0x0, @fallback=0x11, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7e16}, 0x94) r9 = socket$nl_generic(0x10, 0x3, 0x10) r10 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000180), r0) ioctl$sock_SIOCGIFINDEX_80211(r3, 0x8933, &(0x7f0000000200)={'wlan0\x00', 0x0}) sendmsg$NL80211_CMD_REGISTER_FRAME(r9, &(0x7f0000000340)={&(0x7f0000000140)={0x10, 0x0, 0x0, 0x200000}, 0xc, &(0x7f0000000300)={&(0x7f0000000240)={0x88, r10, 0x1, 0x70bd2c, 0x25dfdbfb, {{}, {@val={0x8, 0x3, r11}, @void}}, [@NL80211_ATTR_FRAME_TYPE={0x6, 0x65, 0xa50a}, @NL80211_ATTR_FRAME_MATCH={0x61, 0x5b, "cd96d5a313c7ecdfd70f5d161292b6aa6feb323e2c1c283ec6a2976d40039b755b3440e4de139485fd7c42b9c3cca7f1a3f182883aff87cb7e070da7f6f6bd6e6f0a78cfc3f9dab617e04170fc5aaa8ad292121d39d4b223459d741be9"}]}, 0x88}, 0x1, 0x0, 0x0, 0x851}, 0x0) 3m37.271920779s ago: executing program 3 (id=4257): sendmmsg$alg(0xffffffffffffffff, 0x0, 0x0, 0x40800) (async) connect$pppl2tp(0xffffffffffffffff, 0x0, 0x0) (async) ioctl$sock_SIOCETHTOOL(0xffffffffffffffff, 0x8946, 0x0) (async) r0 = socket$inet_udp(0x2, 0x2, 0x0) bpf$MAP_CREATE(0x0, 0x0, 0x0) (async) bind$inet(r0, &(0x7f00000001c0)={0x2, 0x0, @local}, 0x10) connect$inet(r0, &(0x7f0000000480)={0x2, 0x22, @multicast1}, 0x10) (async, rerun: 64) r1 = socket$inet6_sctp(0xa, 0x5, 0x84) (rerun: 64) setsockopt(r1, 0x84, 0x23, 0x0, 0x0) (async) setsockopt$inet_IP_XFRM_POLICY(r0, 0x0, 0x11, &(0x7f00000002c0)={{{@in6=@dev={0xfe, 0x80, '\x00', 0x4}, @in6=@mcast1, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0xee01}, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffffffffffa}, {}, 0x3, 0x0, 0x1}, {{@in6=@dev, 0x0, 0x32}, 0x0, @in=@private=0xa010100, 0x0, 0x0, 0x0, 0xb7, 0xfffffffe, 0xfffffffe}}, 0xe8) r2 = socket$nl_xfrm(0x10, 0x3, 0x6) setsockopt$netlink_NETLINK_ADD_MEMBERSHIP(r2, 0x10e, 0x1, &(0x7f0000000400)=0x1, 0x4) (async) sendmmsg(r0, &(0x7f0000007fc0), 0x800001d, 0x1c) (async) r3 = socket$nl_generic(0x10, 0x3, 0x10) (async) r4 = socket$alg(0x26, 0x5, 0x0) bind$alg(r4, &(0x7f0000000380)={0x26, 'rng\x00', 0x0, 0x0, 'drbg_nopr_hmac_sha512\x00'}, 0x58) (async) setsockopt$ALG_SET_KEY(r4, 0x117, 0x1, 0x0, 0x0) r5 = accept4(r4, 0x0, 0x0, 0x800) recvmsg(r5, &(0x7f00000005c0)={0x0, 0x0, &(0x7f00000001c0)=[{&(0x7f00000000c0)=""/81, 0x7ffff000}, {&(0x7f0000000200)=""/83, 0x20000253}], 0x2}, 0x0) sendmsg$nl_generic(r3, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000003c0)={0x20, 0x2e, 0x9, 0x70bd27, 0x0, {0x4}, [@typed={0xc, 0x18, 0x0, 0x0, @binary="0bac0f0001ac0f00"}]}, 0x20}, 0x1, 0x0, 0x0, 0x42804}, 0x0) 3m36.305161145s ago: executing program 3 (id=4266): r0 = socket(0x1e, 0x4, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f00000000c0)) r1 = syz_init_net_socket$nl_rdma(0x10, 0x3, 0x10) sendmsg$netlink(r1, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000002580)=[{&(0x7f0000000180)=ANY=[@ANYBLOB="1400000026000100000000000000000006"], 0x14}], 0x1}, 0x0) setsockopt$packet_tx_ring(r0, 0x10f, 0x87, &(0x7f0000000140)=@req3={0x7813, 0x3, 0x0, 0x81, 0x1ff, 0x1, 0x1}, 0x1c) recvmmsg(r0, &(0x7f0000006100)=[{{&(0x7f0000000540)=@un=@abs, 0x80, &(0x7f0000000b40)=[{&(0x7f0000000680)=""/204, 0xcc}], 0x1}, 0x6}], 0x1, 0x2000, 0x0) sendmsg$RDMA_NLDEV_CMD_RES_PD_GET(r0, &(0x7f0000000180)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x2}, 0xc, &(0x7f0000000100)={&(0x7f0000000040)={0x50, 0x140e, 0x2, 0x70bd2a, 0x25dfdbfd, "", [@RDMA_NLDEV_ATTR_RES_PDN={0x8, 0x3c, 0x3}, @RDMA_NLDEV_ATTR_PORT_INDEX={0x8, 0x3, 0x1}, @RDMA_NLDEV_ATTR_PORT_INDEX={0x8, 0x3, 0x2}, @RDMA_NLDEV_ATTR_PORT_INDEX={0x8}, @RDMA_NLDEV_ATTR_PORT_INDEX={0x8}, @RDMA_NLDEV_ATTR_DEV_INDEX={0x8, 0x1, 0x2}, @RDMA_NLDEV_ATTR_PORT_INDEX={0x8, 0x3, 0x4}, @RDMA_NLDEV_ATTR_DEV_INDEX={0x8, 0x1, 0x2}]}, 0x50}}, 0x80) r2 = socket(0x10, 0x3, 0x0) r3 = socket(0x10, 0x3, 0x0) sendmsg$nl_generic(r3, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000440)={0x18, 0x19, 0x1, 0x0, 0x0, {0x1d, 0xd601, 0x9}, [@nested={0x4, 0xf}]}, 0x18}}, 0x0) sendmsg$nl_generic(r2, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000001240)={&(0x7f0000000500)=ANY=[@ANYBLOB="840100001900010000000000000000001d0109004d00108025b57efaa223b473fe7783bc4a506cf756740574b89d316af9b5963870ef3391f3ac176f88d6e1db9b2bb2e5c90fa4eb2f71ebaede447dc8f6f61c6615fcf740adda4853b2d23adb370000001e0106"], 0x184}}, 0x0) syz_emit_ethernet(0x19, &(0x7f0000000080)=ANY=[@ANYBLOB="0180c2000000ffff6511b6301900ffff88a8100081"], 0x0) r4 = bpf$PROG_LOAD(0x5, &(0x7f0000000680)={0x3, 0x4, &(0x7f0000000040)=@framed={{0x18, 0x0, 0x0, 0x0, 0x9, 0x0, 0x0, 0x0, 0x3}, [@call={0x85, 0x0, 0x0, 0x13}]}, &(0x7f0000000000)='syzkaller\x00', 0x0, 0x0, 0x0, 0x40f00, 0x0, '\x00', 0x0, @fallback=0x36, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r5 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='memory.events\x00', 0x275a, 0x0) write$cgroup_subtree(r5, &(0x7f0000000100)=ANY=[], 0x32600) mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x2000005, 0x12, r5, 0x0) ioctl$SIOCSIFHWADDR(r5, 0x8924, &(0x7f0000000200)={'\x00', @random="ffc0b559a687"}) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000880)={r4, 0x0, 0xce0, 0x0, &(0x7f0000000080)="c1dfb080cd21d308098e000081007e2288a8", 0x0, 0x8006, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x50) sendmmsg(r0, &(0x7f00000030c0)=[{{0x0, 0xa9cc7003, &(0x7f0000000400)=[{&(0x7f00000000c0)="ee", 0x101d0}], 0x1}}], 0x400000000000181, 0x9200000000000000) mmap(&(0x7f0000000000/0x95c000)=nil, 0x95c000, 0x1000001, 0x8c4b815a5465c2b1, 0xffffffffffffffff, 0x0) r6 = socket$inet_tcp(0x2, 0x1, 0x0) getsockopt$inet_int(r6, 0x0, 0x1a, 0x0, &(0x7f00000001c0)=0x2) r7 = socket(0x10, 0x3, 0x0) setsockopt$netlink_NETLINK_TX_RING(r7, 0x10e, 0xc, &(0x7f00000001c0)={0x28, 0x1d, 0xfffffffb, 0xffffffff}, 0x10) write(r7, &(0x7f0000000040)="240000001e005f0214f6fffffffffff8070000000400000000000000030009000d000000", 0x24) bind$tipc(r0, 0x0, 0x0) 3m21.238612736s ago: executing program 32 (id=4266): r0 = socket(0x1e, 0x4, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f00000000c0)) r1 = syz_init_net_socket$nl_rdma(0x10, 0x3, 0x10) sendmsg$netlink(r1, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000002580)=[{&(0x7f0000000180)=ANY=[@ANYBLOB="1400000026000100000000000000000006"], 0x14}], 0x1}, 0x0) setsockopt$packet_tx_ring(r0, 0x10f, 0x87, &(0x7f0000000140)=@req3={0x7813, 0x3, 0x0, 0x81, 0x1ff, 0x1, 0x1}, 0x1c) recvmmsg(r0, &(0x7f0000006100)=[{{&(0x7f0000000540)=@un=@abs, 0x80, &(0x7f0000000b40)=[{&(0x7f0000000680)=""/204, 0xcc}], 0x1}, 0x6}], 0x1, 0x2000, 0x0) sendmsg$RDMA_NLDEV_CMD_RES_PD_GET(r0, &(0x7f0000000180)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x2}, 0xc, &(0x7f0000000100)={&(0x7f0000000040)={0x50, 0x140e, 0x2, 0x70bd2a, 0x25dfdbfd, "", [@RDMA_NLDEV_ATTR_RES_PDN={0x8, 0x3c, 0x3}, @RDMA_NLDEV_ATTR_PORT_INDEX={0x8, 0x3, 0x1}, @RDMA_NLDEV_ATTR_PORT_INDEX={0x8, 0x3, 0x2}, @RDMA_NLDEV_ATTR_PORT_INDEX={0x8}, @RDMA_NLDEV_ATTR_PORT_INDEX={0x8}, @RDMA_NLDEV_ATTR_DEV_INDEX={0x8, 0x1, 0x2}, @RDMA_NLDEV_ATTR_PORT_INDEX={0x8, 0x3, 0x4}, @RDMA_NLDEV_ATTR_DEV_INDEX={0x8, 0x1, 0x2}]}, 0x50}}, 0x80) r2 = socket(0x10, 0x3, 0x0) r3 = socket(0x10, 0x3, 0x0) sendmsg$nl_generic(r3, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000440)={0x18, 0x19, 0x1, 0x0, 0x0, {0x1d, 0xd601, 0x9}, [@nested={0x4, 0xf}]}, 0x18}}, 0x0) sendmsg$nl_generic(r2, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000001240)={&(0x7f0000000500)=ANY=[@ANYBLOB="840100001900010000000000000000001d0109004d00108025b57efaa223b473fe7783bc4a506cf756740574b89d316af9b5963870ef3391f3ac176f88d6e1db9b2bb2e5c90fa4eb2f71ebaede447dc8f6f61c6615fcf740adda4853b2d23adb370000001e0106"], 0x184}}, 0x0) syz_emit_ethernet(0x19, &(0x7f0000000080)=ANY=[@ANYBLOB="0180c2000000ffff6511b6301900ffff88a8100081"], 0x0) r4 = bpf$PROG_LOAD(0x5, &(0x7f0000000680)={0x3, 0x4, &(0x7f0000000040)=@framed={{0x18, 0x0, 0x0, 0x0, 0x9, 0x0, 0x0, 0x0, 0x3}, [@call={0x85, 0x0, 0x0, 0x13}]}, &(0x7f0000000000)='syzkaller\x00', 0x0, 0x0, 0x0, 0x40f00, 0x0, '\x00', 0x0, @fallback=0x36, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r5 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='memory.events\x00', 0x275a, 0x0) write$cgroup_subtree(r5, &(0x7f0000000100)=ANY=[], 0x32600) mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x2000005, 0x12, r5, 0x0) ioctl$SIOCSIFHWADDR(r5, 0x8924, &(0x7f0000000200)={'\x00', @random="ffc0b559a687"}) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000880)={r4, 0x0, 0xce0, 0x0, &(0x7f0000000080)="c1dfb080cd21d308098e000081007e2288a8", 0x0, 0x8006, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x50) sendmmsg(r0, &(0x7f00000030c0)=[{{0x0, 0xa9cc7003, &(0x7f0000000400)=[{&(0x7f00000000c0)="ee", 0x101d0}], 0x1}}], 0x400000000000181, 0x9200000000000000) mmap(&(0x7f0000000000/0x95c000)=nil, 0x95c000, 0x1000001, 0x8c4b815a5465c2b1, 0xffffffffffffffff, 0x0) r6 = socket$inet_tcp(0x2, 0x1, 0x0) getsockopt$inet_int(r6, 0x0, 0x1a, 0x0, &(0x7f00000001c0)=0x2) r7 = socket(0x10, 0x3, 0x0) setsockopt$netlink_NETLINK_TX_RING(r7, 0x10e, 0xc, &(0x7f00000001c0)={0x28, 0x1d, 0xfffffffb, 0xffffffff}, 0x10) write(r7, &(0x7f0000000040)="240000001e005f0214f6fffffffffff8070000000400000000000000030009000d000000", 0x24) bind$tipc(r0, 0x0, 0x0) 2m39.261234338s ago: executing program 2 (id=4721): writev(0xffffffffffffffff, &(0x7f0000000000)=[{&(0x7f0000000340)="8a226ff432407a7f5fd09590d734f795e1", 0x11}], 0x1) bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000340)=ANY=[@ANYBLOB="0200000004000000"], 0x50) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000100)={0x18, 0x4, &(0x7f00000001c0)=ANY=[@ANYBLOB="d7010000400000001800000000000000000000000000000095"], &(0x7f00000000c0)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0xa5}, 0x90) r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000380)='memory.events\x00', 0x275a, 0x0) r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000140)='memory.events\x00', 0x7a05, 0x1700) pwritev(r1, &(0x7f0000000100)=[{&(0x7f0000000040)="8e", 0x1}], 0x1, 0x4008001, 0x80) close(r1) sendfile(r1, r0, 0x0, 0xf03a0005) ioctl$TUNSETSNDBUF(r0, 0x400454d4, &(0x7f0000000000)=0x4) 2m39.067555977s ago: executing program 2 (id=4724): sendmsg$NFT_BATCH(0xffffffffffffffff, 0x0, 0x20004450) r0 = socket$can_raw(0x1d, 0x3, 0x1) setsockopt$CAN_RAW_FILTER(r0, 0x65, 0x1, &(0x7f0000000000), 0xff8a) r1 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r1, &(0x7f0000000180)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000680)=@updpolicy={0xb8, 0x19, 0x1, 0x0, 0x0, {{@in=@multicast2, @in=@empty, 0x0, 0x0, 0x0, 0x0, 0xa, 0x0, 0x0, 0x89}, {0x0, 0x0, 0x400000000007, 0x80000001, 0x80000001, 0x2, 0xffffffffffffffff}, {}, 0xfffffffc}}, 0xb8}}, 0x0) r2 = socket$nl_xfrm(0x10, 0x3, 0x6) r3 = socket$nl_generic(0x10, 0x3, 0x10) r4 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000380), 0xffffffffffffffff) r5 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX_80211(r5, 0x8933, &(0x7f0000000000)={'wlan1\x00', 0x0}) sendmsg$NL80211_CMD_FRAME(r3, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000fc0)={&(0x7f00000001c0)={0x30, r4, 0x1, 0x0, 0x0, {{0x2}, {@val={0x8, 0x3, r6}, @val={0xc}}}, [@chandef_params=[@NL80211_ATTR_WIPHY_FREQ={0x8, 0x26, @random=0x1743}]]}, 0x30}, 0x1, 0x0, 0x0, 0xc804}, 0x0) r7 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPCTNL_MSG_CT_GET(r7, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000040)=ANY=[@ANYBLOB="5c0000000101010100000000000000000a0000010000000000000080040001003a0000002c00018014000300fc02000000000000000000000000000014000400ff0200"/78], 0x5c}}, 0x0) socket$nl_route(0x10, 0x3, 0x0) r8 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000280)='cpuacct.usage_sys\x00', 0x26e1, 0x0) close(r8) r9 = socket$kcm(0x2, 0x200000000000001, 0x0) sendmsg$inet(r9, &(0x7f0000000080)={&(0x7f0000000000)={0x2, 0x4001, @dev}, 0x10, 0x0}, 0x3000c085) r10 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000280)='memory.stat\x00', 0x26e1, 0x0) r11 = socket$nl_generic(0x10, 0x3, 0x10) r12 = syz_genetlink_get_family_id$ethtool(&(0x7f0000000180), r11) sendmsg$ETHTOOL_MSG_CHANNELS_SET(r11, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000680)={0x3c, r12, 0x1, 0x70bd25, 0x25dfdbfe, {}, [@ETHTOOL_A_CHANNELS_HEADER={0x18, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'bridge_slave_1\x00'}]}, @ETHTOOL_A_CHANNELS_TX_COUNT={0x8, 0x7, 0x2}, @ETHTOOL_A_CHANNELS_RX_COUNT={0x8, 0x6, 0x2}]}, 0x3c}, 0x1, 0x0, 0x0, 0x4008087}, 0x4e040) setsockopt$sock_attach_bpf(r9, 0x1, 0x3e, &(0x7f0000000100)=r10, 0x4) write$cgroup_type(r8, &(0x7f0000000080), 0x11ffffce1) sendmsg$nl_xfrm(r2, &(0x7f0000000180)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000300)=ANY=[@ANYBLOB="b8000000190001000000000000000000e00000020000000000000000000000000000000000000000000000000000000000000000000000000a"], 0xb8}, 0x1, 0x0, 0x0, 0x40}, 0x10) ioctl$sock_SIOCGIFINDEX(r9, 0x8933, &(0x7f00000000c0)={'lo\x00'}) 2m37.752289199s ago: executing program 2 (id=4733): r0 = socket$rds(0x15, 0x5, 0x0) bind$rds(r0, &(0x7f0000000040)={0x2, 0x0, @loopback}, 0x70) r1 = socket$inet6_sctp(0xa, 0x5, 0x84) setsockopt$inet_sctp6_SCTP_DEFAULT_PRINFO(r1, 0x84, 0x72, &(0x7f0000000040)={0x0, 0x2}, 0xc) sendmsg$rds(r0, &(0x7f0000000f40)={&(0x7f0000000080)={0x2, 0x0, @dev={0xac, 0x14, 0x14, 0x81}}, 0x10, 0x0, 0x0, &(0x7f0000000380)=[@rdma_args={0x48, 0x114, 0x1, {{}, {0x0}, 0x0}}], 0x48}, 0x0) mmap(&(0x7f0000000000/0xfbe000)=nil, 0xfbe000, 0x2, 0x31, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) sendmsg$unix(r2, &(0x7f0000000040)={0x0, 0x0, 0x0, 0x0, &(0x7f0000000140)=ANY=[@ANYBLOB="14000000000000000100000001"], 0x18, 0x2000c810}, 0x0) recvmsg(r3, &(0x7f00000003c0)={0x0, 0x0, 0x0, 0x0, &(0x7f0000002d00)=""/78, 0x4e}, 0x0) r4 = socket$inet6_sctp(0xa, 0x1, 0x84) getsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX3(r4, 0x84, 0x6f, &(0x7f00000000c0)={0x0, 0x12, &(0x7f0000000180)=[@in={0x2, 0x4e20, @dev={0xac, 0x14, 0x14, 0x22}}, @in={0x2, 0x4e20, @dev={0xac, 0x14, 0x14, 0x19}}]}, &(0x7f0000000100)=0x10) 2m37.566421121s ago: executing program 2 (id=4737): r0 = socket$alg(0x26, 0x5, 0x0) bind$alg(r0, &(0x7f0000000000)={0x26, 'hash\x00', 0x0, 0x0, 'xcbc(aes)\x00'}, 0x58) (async) setsockopt$ALG_SET_KEY(r0, 0x117, 0x1, &(0x7f0000000140)="2c385aa3d49100dc6626c892b6bc436a", 0x10) (async) bpf$PROG_LOAD(0x5, &(0x7f0000000040)={0x6, 0x4, &(0x7f00000010c0)=@framed={{0x18, 0x2, 0x0, 0x0, 0x9}, [@call={0x85, 0x0, 0x0, 0xcf}]}, &(0x7f00000001c0)='GPL\x00', 0x2, 0x0, 0x0, 0x0, 0x8, '\x00', 0x0, @fallback=0x35, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) (async, rerun: 64) r1 = accept4(r0, 0x0, 0x0, 0x80800) (rerun: 64) setsockopt$inet_MCAST_MSFILTER(r1, 0x0, 0x30, &(0x7f00000001c0)={0x7ff, {{0x2, 0x4e23, @multicast2}}, 0x1, 0x4, [{{0x2, 0x4e20, @multicast2}}, {{0x2, 0x4e20, @multicast1}}, {{0x2, 0x4e20, @rand_addr=0x64010100}}, {{0x2, 0x4e21, @empty}}]}, 0x290) (async, rerun: 32) sendmmsg$inet6(r1, &(0x7f000000a440)=[{{0x0, 0x0, &(0x7f00000086c0)=[{&(0x7f0000006240)="c1346f2d260685eb57d897465edd4823", 0x10}, {&(0x7f00000062c0)="2977c9c80000000000", 0x9}, {&(0x7f0000006300)="5c711d9c51a0c1a7", 0x8}], 0x3}}, {{0x0, 0x0, &(0x7f000000a3c0)=[{&(0x7f00000090c0)="9a4037055e1d2207e96d56db2b87dc0f58811431433ec0e2435dab2ea838935a599486af8d13ab2df30ff8d0a89465852ec7abbeffae9462a84e0967d932a92cccb35fdc84", 0x45}, {&(0x7f0000009140)="14b48e5b08fd6c6c9c03031067a0f6194cf12963721ad167aa845aa732510bdfc2795ea40719d18c35e44298992aafa50921ae2de7ce25d85f96044894250e8a684d06c37ca05fddbafd651f2f0ab91dadf0ed44f422cf", 0x57}, {&(0x7f0000000080)="59058e8bf0cc944add2bc5e92c2a324f8f63fd70006d7d", 0xffffffaa}], 0x3}}], 0x2, 0x44051) (async, rerun: 32) mmap$xdp(&(0x7f0000003000/0x1000)=nil, 0x1000, 0x99af8e632bfb392d, 0x11, 0xffffffffffffffff, 0x100000000) (async) pipe(0x0) mmap(&(0x7f0000000000/0xc00000)=nil, 0xc00000, 0x0, 0x42072, 0xffffffffffffffff, 0x0) (async) r2 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r2, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000180)={&(0x7f00000000c0)=ANY=[@ANYBLOB="440000221000ffff2cbd7000fbf6df762ca202c5df1f95fe754ac75875362500000000", @ANYRES32=0x0, @ANYBLOB="018800006318030024001280090001006261746164760000140002800d0001004241544d414e5f4956000000"], 0x44}, 0x1, 0x0, 0x0, 0x14008085}, 0x20008090) 2m37.215942035s ago: executing program 2 (id=4739): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000240)=ANY=[@ANYBLOB="140000001000010000000000000000000500000a28000000000a030000000000000000000a00000708000240000000020900010073797a31000000002c000000030a010100000000000000000a0000070900010073797a31000000000900030073797a320000000014000000110001"], 0x7c}, 0x1, 0x0, 0x0, 0x4000}, 0x0) sendmsg$NFT_BATCH(r0, &(0x7f0000009b40)={0x0, 0x0, &(0x7f0000000380)={&(0x7f0000000880)={{0x14, 0x10, 0x1, 0x0, 0x0, {0x5}}, [@NFT_MSG_NEWSET={0x50, 0x9, 0xa, 0x401, 0x0, 0x0, {0xa, 0x0, 0x4}, [@NFTA_SET_TABLE={0x9, 0x1, 'syz1\x00'}, @NFTA_SET_KEY_LEN={0x8, 0x5, 0x1, 0x0, 0x4}, @NFTA_SET_NAME={0x9, 0x2, 'syz1\x00'}, @NFTA_SET_ID={0x8, 0xa, 0x1, 0x0, 0xfffffffc}, @NFTA_SET_DESC={0xc, 0x9, 0x0, 0x1, [@NFTA_SET_DESC_SIZE={0x8, 0x1, 0x1, 0x0, 0x1}]}, @NFTA_SET_POLICY={0x8, 0x8, 0x1, 0x0, 0x1}]}], {0x14, 0x11, 0x1, 0x0, 0x0, {0x1}}}, 0x78}, 0x1, 0x0, 0x0, 0x4000850}, 0x40) r1 = bpf$MAP_CREATE(0x0, &(0x7f00000002c0)=@base={0x6, 0x4, 0x6, 0x8, 0x0, 0xffffffffffffffff, 0x83}, 0x50) r2 = bpf$PROG_LOAD(0x5, &(0x7f0000000500)={0xc, 0xd, &(0x7f0000000180)=@framed={{0x18, 0x0, 0x0, 0x0, 0x7dfb}, [@ringbuf_output={{0x18, 0x5, 0x1, 0x0, r1}, {}, {}, {}, {}, {}, {0x7, 0x0, 0xb, 0x4, 0x0, 0x0, 0x2}, {0x85, 0x0, 0x0, 0x15}}, @call={0x85, 0x0, 0x0, 0x7}]}, &(0x7f0000000340)='syzkaller\x00', 0x5, 0x0, 0x0, 0x41000, 0x1, '\x00', 0x0, @fallback=0x2d, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000600)={r2, 0x0, 0xe, 0xfeff, &(0x7f0000000100)="e0857f9f582f0300000000000000", 0x0, 0x2f00, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x50) r3 = socket$nl_generic(0x10, 0x3, 0x10) r4 = syz_genetlink_get_family_id$l2tp(&(0x7f0000000000), r3) sendmsg$L2TP_CMD_TUNNEL_CREATE(r3, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000380)={&(0x7f0000000300)={0x3c, r4, 0x917, 0x70bd2c, 0x0, {}, [@L2TP_ATTR_PROTO_VERSION={0x5}, @L2TP_ATTR_CONN_ID={0x8, 0x9, 0xfeffffff}, @L2TP_ATTR_ENCAP_TYPE={0x6, 0x2, 0x1}, @L2TP_ATTR_PEER_CONN_ID={0x8, 0xa, 0x1}, @L2TP_ATTR_FD={0x8, 0x17, @udp6}]}, 0x3c}}, 0x8800) sendmsg$L2TP_CMD_SESSION_DELETE(r2, &(0x7f0000000480)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x80000}, 0xc, &(0x7f0000000440)={&(0x7f00000003c0)={0x60, r4, 0x1, 0x70bd2d, 0x25dfdbfd, {}, [@L2TP_ATTR_RECV_SEQ={0x5, 0x12, 0x5}, @L2TP_ATTR_SEND_SEQ={0x5, 0x13, 0x9}, @L2TP_ATTR_VLAN_ID={0x6, 0xe, 0x2f00}, @L2TP_ATTR_IP6_DADDR={0x14, 0x20, @private0={0xfc, 0x0, '\x00', 0x1}}, @L2TP_ATTR_UDP_ZERO_CSUM6_RX={0x5, 0x22, 0x1}, @L2TP_ATTR_L2SPEC_LEN={0x5, 0x6, 0xdf}, @L2TP_ATTR_L2SPEC_TYPE={0x5, 0x5, 0x1}, @L2TP_ATTR_SEND_SEQ={0x5, 0x13, 0x9}]}, 0x60}, 0x1, 0x0, 0x0, 0x1}, 0x2000c881) 2m36.993711205s ago: executing program 2 (id=4744): r0 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32, @ANYBLOB="0000000000000000b70800000d0000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000100000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) r1 = bpf$MAP_CREATE(0x0, &(0x7f0000000740)=ANY=[@ANYBLOB="0b00000005000000000400000900000001"], 0x48) r2 = syz_init_net_socket$nl_rdma(0x10, 0x3, 0x10) sendmsg$netlink(r2, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000002580)=[{&(0x7f0000000180)=ANY=[@ANYBLOB="1400000026000100000000000000000006"], 0x14}], 0x1}, 0x0) bpf$PROG_LOAD(0x5, &(0x7f00000004c0)={0xa, 0x4, &(0x7f0000000480)=ANY=[@ANYBLOB="18000000000000000000000000000000850000006d"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r3 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000d80)={0x18, 0x5, &(0x7f0000000480)=ANY=[@ANYBLOB="1801000021"], 0x0, 0x40, 0x0, 0x0, 0x0, 0xb4a02fe0ce239f93, '\x00', 0x0, 0x2}, 0x94) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0xe, 0x0, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000800000000000000000000018110000", @ANYRES32=r1], 0x0, 0x0, 0x0, 0x0, 0x41100, 0x59, '\x00', 0x0, @fallback=0x2a, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, r3, 0x0, 0x0, 0x0, 0x0}, 0x94) ioctl$XFS_IOC_ATTRLIST_BY_HANDLE(r0, 0x4058587a, &(0x7f00000003c0)={{r2, &(0x7f0000000000)='}-!^!):&[[&,[\\^]{}-^+(\x00', 0x88000, &(0x7f0000000080)={@_ha_fsid={[0xfffff86f, 0xf23]}, {0x4, 0x4, 0xfffffffb, 0xc2d}}, 0x7, &(0x7f0000000200), &(0x7f0000000280)=0x9}, {[0x6, 0x6, 0xfffeffff, 0x8]}, 0x7, 0x25, &(0x7f00000002c0)=""/37}) r5 = socket(0x2, 0x80805, 0x0) sendmmsg$inet(r5, &(0x7f0000000300)=[{{&(0x7f0000000000)={0x2, 0x0, @initdev={0xac, 0x1e, 0x4, 0x0}}, 0x10, &(0x7f00000000c0)=[{&(0x7f0000000200)="9a", 0x1}], 0x1}}], 0x1, 0x4000000) r6 = socket$inet_sctp(0x2, 0x1, 0x84) getsockopt$inet_sctp_SCTP_MAX_BURST(r6, 0x84, 0xd, &(0x7f0000000000)=@assoc_value={0x0}, &(0x7f0000000040)=0x8) setsockopt$inet_sctp_SCTP_DELAYED_SACK(r5, 0x84, 0x10, &(0x7f0000000100)=@sack_info={r7, 0xc7, 0x1}, 0xc) getsockopt$inet_sctp6_SCTP_PEER_ADDR_PARAMS(r4, 0x84, 0x9, &(0x7f0000000580)={r7, @in={{0x2, 0x4e24, @broadcast}}, 0x6, 0x9, 0xf5, 0x7, 0x40, 0xb, 0xb}, &(0x7f0000000640)=0x9c) r8 = bpf$PROG_LOAD(0x5, &(0x7f0000000300)={0x6, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, @fallback=0x4, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000180)={r8, 0x2000000, 0xe, 0x0, &(0x7f0000000040)="630b008646dc3f0adf33c9f7b986", 0x0, 0xcf25, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x80}, 0x50) 2m21.83207655s ago: executing program 33 (id=4744): r0 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32, @ANYBLOB="0000000000000000b70800000d0000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000100000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) r1 = bpf$MAP_CREATE(0x0, &(0x7f0000000740)=ANY=[@ANYBLOB="0b00000005000000000400000900000001"], 0x48) r2 = syz_init_net_socket$nl_rdma(0x10, 0x3, 0x10) sendmsg$netlink(r2, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000002580)=[{&(0x7f0000000180)=ANY=[@ANYBLOB="1400000026000100000000000000000006"], 0x14}], 0x1}, 0x0) bpf$PROG_LOAD(0x5, &(0x7f00000004c0)={0xa, 0x4, &(0x7f0000000480)=ANY=[@ANYBLOB="18000000000000000000000000000000850000006d"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r3 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000d80)={0x18, 0x5, &(0x7f0000000480)=ANY=[@ANYBLOB="1801000021"], 0x0, 0x40, 0x0, 0x0, 0x0, 0xb4a02fe0ce239f93, '\x00', 0x0, 0x2}, 0x94) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0xe, 0x0, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000800000000000000000000018110000", @ANYRES32=r1], 0x0, 0x0, 0x0, 0x0, 0x41100, 0x59, '\x00', 0x0, @fallback=0x2a, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, r3, 0x0, 0x0, 0x0, 0x0}, 0x94) ioctl$XFS_IOC_ATTRLIST_BY_HANDLE(r0, 0x4058587a, &(0x7f00000003c0)={{r2, &(0x7f0000000000)='}-!^!):&[[&,[\\^]{}-^+(\x00', 0x88000, &(0x7f0000000080)={@_ha_fsid={[0xfffff86f, 0xf23]}, {0x4, 0x4, 0xfffffffb, 0xc2d}}, 0x7, &(0x7f0000000200), &(0x7f0000000280)=0x9}, {[0x6, 0x6, 0xfffeffff, 0x8]}, 0x7, 0x25, &(0x7f00000002c0)=""/37}) r5 = socket(0x2, 0x80805, 0x0) sendmmsg$inet(r5, &(0x7f0000000300)=[{{&(0x7f0000000000)={0x2, 0x0, @initdev={0xac, 0x1e, 0x4, 0x0}}, 0x10, &(0x7f00000000c0)=[{&(0x7f0000000200)="9a", 0x1}], 0x1}}], 0x1, 0x4000000) r6 = socket$inet_sctp(0x2, 0x1, 0x84) getsockopt$inet_sctp_SCTP_MAX_BURST(r6, 0x84, 0xd, &(0x7f0000000000)=@assoc_value={0x0}, &(0x7f0000000040)=0x8) setsockopt$inet_sctp_SCTP_DELAYED_SACK(r5, 0x84, 0x10, &(0x7f0000000100)=@sack_info={r7, 0xc7, 0x1}, 0xc) getsockopt$inet_sctp6_SCTP_PEER_ADDR_PARAMS(r4, 0x84, 0x9, &(0x7f0000000580)={r7, @in={{0x2, 0x4e24, @broadcast}}, 0x6, 0x9, 0xf5, 0x7, 0x40, 0xb, 0xb}, &(0x7f0000000640)=0x9c) r8 = bpf$PROG_LOAD(0x5, &(0x7f0000000300)={0x6, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, @fallback=0x4, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000180)={r8, 0x2000000, 0xe, 0x0, &(0x7f0000000040)="630b008646dc3f0adf33c9f7b986", 0x0, 0xcf25, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x80}, 0x50) 1m36.568775721s ago: executing program 5 (id=5166): mmap(&(0x7f0000000000/0x400000)=nil, 0x400000, 0x0, 0xc3072, 0xffffffffffffffff, 0x2000) r0 = socket$inet6(0xa, 0x2, 0x0) setsockopt$sock_int(r0, 0x11, 0x1e, &(0x7f0000000000)=0x6, 0x4) (async) r1 = socket$kcm(0x2d, 0x2, 0x0) r2 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='memory.events\x00', 0x275a, 0x0) mmap(&(0x7f000031a000/0x1000)=nil, 0x1000, 0x2000001, 0x12, r2, 0x0) (async) ioctl$sock_kcm_SIOCKCMATTACH(r1, 0x89e3, 0x0) 1m36.424032481s ago: executing program 5 (id=5168): r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) bpf$PROG_LOAD_XDP(0x5, 0x0, 0x0) r1 = socket$packet(0x11, 0x2, 0x300) bpf$PROG_LOAD(0x5, &(0x7f0000000280)={0x15, 0x2000000000000216, &(0x7f0000000440)=ANY=[@ANYBLOB="18000000000000000000000000000000850000000f00000018010000646c6c2400000000000000007b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000000600000095"], 0x0, 0xffffffff, 0x0, 0x0, 0x0, 0x1c, '\x00', 0x0, @fallback=0x28, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0xfffffffc}, 0x94) r2 = bpf$PROG_LOAD(0x5, &(0x7f0000000880)={0x1, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000000)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x10, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) setsockopt$sock_attach_bpf(r1, 0x1, 0x32, &(0x7f0000000180)=r2, 0x4) r3 = socket$inet6_tcp(0xa, 0x1, 0x0) listen(r3, 0x10040) sendmsg$NLBL_UNLABEL_C_STATICLISTDEF(0xffffffffffffffff, &(0x7f0000000a00)={0x0, 0x0, 0x0}, 0x0) r4 = socket$netlink(0x10, 0x3, 0x10) bind$netlink(r4, &(0x7f0000514ff4)={0x10, 0x0, 0x0, 0x2ffffffff}, 0xc) r5 = socket$netlink(0x10, 0x3, 0x4) bind$netlink(r5, &(0x7f0000514ff4)={0x10, 0x0, 0x25dfdbfb, 0x2ffffffff}, 0xc) setsockopt$sock_int(r5, 0x1, 0x8, &(0x7f0000000000)=0x80, 0x4) syz_genetlink_get_family_id$nl80211(&(0x7f00000000c0), r5) r6 = socket$tipc(0x1e, 0x5, 0x0) bind$tipc(r6, &(0x7f0000000080)=@nameseq={0x1e, 0x1, 0x3, {0x42, 0x200, 0xfffffffd}}, 0x10) syz_genetlink_get_family_id$netlbl_cipso(&(0x7f00000001c0), r0) setsockopt$TIPC_GROUP_JOIN(r6, 0x10f, 0x87, &(0x7f00000002c0)={0x100042, 0xf7, 0x1}, 0x10) r7 = socket$tipc(0x1e, 0x2, 0x0) setsockopt$TIPC_GROUP_JOIN(r7, 0x10f, 0x87, &(0x7f0000000100)={0x42}, 0x10) r8 = socket$nl_generic(0x10, 0x3, 0x10) bind$tipc(0xffffffffffffffff, 0x0, 0x0) r9 = syz_genetlink_get_family_id$tipc(&(0x7f00000000c0), 0xffffffffffffffff) sendmsg$TIPC_CMD_SHOW_NAME_TABLE(r8, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000600)={0x30, r9, 0x1, 0x0, 0xffffffff, {{}, {}, {0x14, 0x19, {0x3, 0x8, 0x1}}}}, 0x30}, 0x1, 0x0, 0x0, 0x4048810}, 0x40010) syz_genetlink_get_family_id$devlink(&(0x7f0000000900), r5) r10 = socket(0xa, 0x80000, 0x8000) sendmmsg$inet(r10, &(0x7f0000001d80)=[{{&(0x7f0000000280)={0x2, 0x4e22, @private=0xa010101}, 0x10, &(0x7f0000000980)=[{&(0x7f0000000200)="9c", 0x1}], 0x1}}, {{0x0, 0x0, 0x0, 0x0, 0x0, 0x80}}], 0x2, 0x48000) getsockopt$inet_sctp_SCTP_MAX_BURST(r10, 0x84, 0xc, &(0x7f0000000040)=@assoc_value, &(0x7f0000000000)=0x8) socket$nl_generic(0x10, 0x3, 0x10) 1m36.241043613s ago: executing program 5 (id=5170): sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000780)={&(0x7f0000000300)=@newqdisc={0x24, 0x24, 0xd0f, 0x3, 0x0, {0x60, 0x0, 0x0, 0x0, {0x0, 0x9}, {0x10, 0xffff}, {0x5, 0x6}}}, 0x24}, 0x1, 0x0, 0x0, 0x200001d4}, 0x8840) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) (async) pipe(&(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) socket$phonet_pipe(0x23, 0x5, 0x2) pselect6(0x40, &(0x7f0000000000)={0xa, 0x80000001, 0x2, 0x6, 0x12, 0x8, 0x80000000, 0x8}, 0x0, 0x0, &(0x7f00000002c0), 0x0) (async) splice(r1, 0x0, r3, 0x0, 0x6, 0x0) r4 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='memory.events\x00', 0x275a, 0x0) write$cgroup_subtree(r4, &(0x7f0000000280)=ANY=[], 0x10448) mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x2000001, 0x12, r4, 0x0) getsockopt$inet_sctp6_SCTP_DEFAULT_SEND_PARAM(r3, 0x84, 0xa, &(0x7f00000000c0)={0x9, 0x242d, 0xc, 0x3, 0x8, 0x9, 0x2, 0x4, 0x0}, &(0x7f0000000100)=0x20) getsockopt$inet_sctp6_SCTP_PR_SUPPORTED(r4, 0x84, 0x71, &(0x7f0000000140)={r5, 0x7c}, &(0x7f0000000180)=0x8) (async) write$cgroup_devices(r3, &(0x7f0000000200)=ANY=[], 0x6) (async) socket$l2tp(0x2, 0x2, 0x73) close(r2) (async) write(r0, 0x0, 0x0) (async) r6 = socket$nl_generic(0x10, 0x3, 0x10) (async) r7 = syz_genetlink_get_family_id$batadv(&(0x7f0000000040), 0xffffffffffffffff) sendmsg$BATADV_CMD_GET_DAT_CACHE(r6, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000240)={&(0x7f00000001c0)={0x14, r7, 0x83625fc5352ba305}, 0x14}}, 0x4020010) (async) mmap(&(0x7f00009fd000/0x600000)=nil, 0x600000, 0x100000d, 0x6031, 0xffffffffffffffff, 0x0) mmap(&(0x7f0000000000/0xfbe000)=nil, 0xfbe000, 0x3000007, 0x31, r3, 0x0) (async) r8 = socket$can_j1939(0x1d, 0x2, 0x7) getsockopt$SO_J1939_ERRQUEUE(r8, 0x6b, 0x4, 0xffffffffffffffff, &(0x7f0000000080)) sendmsg$sock(r2, &(0x7f0000001800)={0x0, 0x0, 0x0}, 0x8010) 1m36.017239331s ago: executing program 5 (id=5173): r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = socket$can_raw(0x1d, 0x3, 0x1) recvmsg$can_raw(r1, &(0x7f0000000140)={0x0, 0x0, 0x0}, 0x40) sendmsg$nl_route_sched(r0, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000380)=@deltaction={0x38, 0x18, 0x1, 0x70bd2d, 0x25dfdc00, {0xa}, [@TCA_ACT_TAB={0x24, 0x1, [{0x14, 0x8d, 0x0, 0x0, @TCA_ACT_KIND={0xd, 0x1, 'connmark\x00'}}, {0xc, 0x16, 0x0, 0x0, @TCA_ACT_INDEX={0x8, 0x3, 0x7}}]}]}, 0x38}, 0x1, 0x0, 0x0, 0x2044004}, 0x20040844) socket$nl_xfrm(0x10, 0x3, 0x6) 1m35.807878957s ago: executing program 5 (id=5176): r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000023c0)={0x0, 0x4, &(0x7f0000000480)=@framed={{0x18, 0x2}, [@call={0x85, 0x0, 0x0, 0x75}]}, 0x0}, 0x90) ioctl$ifreq_SIOCGIFINDEX_vcan(0xffffffffffffffff, 0x8933, &(0x7f0000000040)={'vcan0\x00', 0x0}) ioctl$XFS_IOC_FD_TO_HANDLE(r0, 0xc038586a, &(0x7f0000000240)={r0, &(0x7f0000000080)='\x00', 0x40000, &(0x7f00000000c0)={@_ha_fsid={[0x6, 0xe19]}, {0x7, 0xd7, 0x7, 0xbf3}}, 0xfffffffd, &(0x7f0000000100), &(0x7f0000000140)=0x1}) bpf$PROG_LOAD(0x5, &(0x7f0000000280)={0xc, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="18090000000000000000000000000000850000006d0000001801000020696c2500000000002020207b1af8ff00000000bfa100000000000007"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x40, '\x00', r1, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, r0, 0x0, 0x0, 0x0, 0x0, 0xfffffff7}, 0x94) r3 = bpf$PROG_LOAD(0x5, &(0x7f0000000880)={0x6, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000000)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x3, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) connect$l2tp(r2, &(0x7f0000000340)={0x2, 0x0, @multicast2}, 0x10) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000180)={r3, 0x2000000, 0xe, 0x0, &(0x7f0000000200)="63eced8e46dc3f0adf33c9f7b986", 0x0, 0x5, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2}, 0x50) 1m35.647563138s ago: executing program 5 (id=5178): socket$inet(0xa, 0x801, 0x84) (async) r0 = socket$inet(0xa, 0x801, 0x84) r1 = socket$inet_sctp(0x2, 0x1, 0x84) setsockopt$SO_ATTACH_FILTER(r1, 0x1, 0x1a, &(0x7f0000000040)={0x4, &(0x7f0000000080)=[{0x25, 0x0, 0x2, 0xfffffffe}, {0x6, 0x2, 0x9, 0xfffffff7}, {0x4, 0x9, 0x1, 0x3}, {0x6, 0x2, 0x4, 0x25e}]}, 0x10) (async) setsockopt$SO_ATTACH_FILTER(r1, 0x1, 0x1a, &(0x7f0000000040)={0x4, &(0x7f0000000080)=[{0x25, 0x0, 0x2, 0xfffffffe}, {0x6, 0x2, 0x9, 0xfffffff7}, {0x4, 0x9, 0x1, 0x3}, {0x6, 0x2, 0x4, 0x25e}]}, 0x10) connect$inet(r0, &(0x7f0000004cc0)={0x2, 0x0, @remote={0xac, 0x14, 0xffffffffffffffff}}, 0x10) listen(r0, 0x8) (async) listen(r0, 0x8) accept(r0, &(0x7f0000000100)=@un=@abs, 0x0) r2 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r2, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000002a80)={0x14, 0x26, 0x1, 0x7fffb, 0x1000, {0x6}}, 0x14}}, 0x4008090) bpf$PROG_LOAD(0x5, &(0x7f0000000440)={0xe, 0x6, &(0x7f0000000000)=@framed={{0x5, 0x0, 0x0, 0x0, 0x0, 0x71, 0x11, 0x42}, [@jmp={0x5, 0x1, 0x0, 0x2, 0xa, 0x0, 0x1}, @call={0x85, 0x0, 0x0, 0x5}, @exit], {0x95, 0x0, 0x5a5}}, &(0x7f0000000080)='GPL\x00', 0x5, 0x29e, &(0x7f000000cf3d)=""/195, 0x0, 0x0, '\x00', 0x0, @sk_skb, 0xffffffffffffffff, 0x6, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0xfffffffffffffefc}, 0x70) 1m20.561569352s ago: executing program 34 (id=5178): socket$inet(0xa, 0x801, 0x84) (async) r0 = socket$inet(0xa, 0x801, 0x84) r1 = socket$inet_sctp(0x2, 0x1, 0x84) setsockopt$SO_ATTACH_FILTER(r1, 0x1, 0x1a, &(0x7f0000000040)={0x4, &(0x7f0000000080)=[{0x25, 0x0, 0x2, 0xfffffffe}, {0x6, 0x2, 0x9, 0xfffffff7}, {0x4, 0x9, 0x1, 0x3}, {0x6, 0x2, 0x4, 0x25e}]}, 0x10) (async) setsockopt$SO_ATTACH_FILTER(r1, 0x1, 0x1a, &(0x7f0000000040)={0x4, &(0x7f0000000080)=[{0x25, 0x0, 0x2, 0xfffffffe}, {0x6, 0x2, 0x9, 0xfffffff7}, {0x4, 0x9, 0x1, 0x3}, {0x6, 0x2, 0x4, 0x25e}]}, 0x10) connect$inet(r0, &(0x7f0000004cc0)={0x2, 0x0, @remote={0xac, 0x14, 0xffffffffffffffff}}, 0x10) listen(r0, 0x8) (async) listen(r0, 0x8) accept(r0, &(0x7f0000000100)=@un=@abs, 0x0) r2 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r2, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000002a80)={0x14, 0x26, 0x1, 0x7fffb, 0x1000, {0x6}}, 0x14}}, 0x4008090) bpf$PROG_LOAD(0x5, &(0x7f0000000440)={0xe, 0x6, &(0x7f0000000000)=@framed={{0x5, 0x0, 0x0, 0x0, 0x0, 0x71, 0x11, 0x42}, [@jmp={0x5, 0x1, 0x0, 0x2, 0xa, 0x0, 0x1}, @call={0x85, 0x0, 0x0, 0x5}, @exit], {0x95, 0x0, 0x5a5}}, &(0x7f0000000080)='GPL\x00', 0x5, 0x29e, &(0x7f000000cf3d)=""/195, 0x0, 0x0, '\x00', 0x0, @sk_skb, 0xffffffffffffffff, 0x6, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0xfffffffffffffefc}, 0x70) 19.038875954s ago: executing program 4 (id=5838): r0 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000780)=@newsa={0x144, 0x10, 0x1, 0xbffffffe, 0x100, {{@in6=@initdev={0xfe, 0x88, '\x00', 0x0, 0x0}, @in=@local, 0x1, 0x794, 0x4e23, 0x5, 0x0, 0x0, 0x0, 0x3a}, {@in6=@mcast2, 0x4d4, 0x6c}, @in=@loopback, {0xffffffffffffffff, 0x9, 0x6, 0xfffffffffffffff9, 0x8251c, 0x2, 0xfffffffffffffff8}, {0xffffffffffffffff, 0x0, 0x1f, 0x1ff}, {0x3, 0xfffffffc}, 0x70bd2a, 0x3504, 0x2, 0x1, 0xfd, 0x20}, [@algo_comp={0x48, 0x3, {{'deflate\x00'}}}, @mark={0xc, 0x15, {0x35075a, 0x81}}]}, 0x144}, 0x1, 0x0, 0x0, 0x8881}, 0x10) r1 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r1, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000c40)=ANY=[@ANYBLOB="1002000018000100feffffff0001000000000000000000000000ffffac1414aafc0100000000000000000000000000010001071c4e2300050000a00004000000", @ANYRES32=0x0, @ANYRES32=0x0, @ANYBLOB="ff020000000000000000000000000001000004d46c000000ac14142500000000000000000000000000000000000000009201000000000000000000000000ffff0000000000001c250800000000000500000000000000fcffffffffffffff0000000000000000ffffffffffffffff00000000000000001f00000000000000fefffffffffffffffafffffffcffffff000000008000000000350000020001002000000000000000480003006465666c617465000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000ca00020073616c736132302d67656e657269630000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000010040000c8cf29ea454884cd09b513adcde246f1b71da6339926afa870fdd9502b968652891e74c6923f9abd4e2ab25e49aca686291ca9bca1e1776998a71ac3d60c504c7f25525872453e602809f6d033ace55029fd1775d63a4e22cb43730bd2483efd4f83bc252220a0ef8667b957e8ce8e9bc123bc6f530326b9254e18fb279d34b9285600000c000f0004000000000000008d1ffd75f97d45f343e0bc6ee5701fac0d1dac5c428a81160112b96ba5ab222235b52364be00658bb8167efd3814ac4f4c1587a2bd68de0a9bf67c9aa2c0d3526bedcac475a330c7f9ce1ba2c9f0413cdbd5918fba017eb370465b56108212b9519e1cc59737e3ea7965771b1fd41e0b8186b0e47bcd9527d4f91e759c0cdcb2302e6e0b560247824b4b0482509ea481ff3ff11fde0dfe5e1dbf30c7bf0000"], 0x210}, 0x1, 0x0, 0x0, 0x8801}, 0x0) r2 = socket$igmp6(0xa, 0x3, 0x2) ioctl$sock_ipv4_tunnel_SIOCGETTUNNEL(0xffffffffffffffff, 0x89f0, &(0x7f0000000140)={'syztnl0\x00', &(0x7f0000000200)={'tunl0\x00', 0x0, 0x1, 0x80, 0x8, 0x9, {{0xe, 0x4, 0x0, 0x12, 0x38, 0x68, 0x0, 0x3, 0x29, 0x0, @loopback, @initdev={0xac, 0x1e, 0x1, 0x0}, {[@lsrr={0x83, 0x1f, 0xc2, [@initdev={0xac, 0x1e, 0x0, 0x0}, @rand_addr=0x64010100, @remote, @multicast2, @broadcast, @empty, @initdev={0xac, 0x1e, 0x1, 0x0}]}, @end, @end]}}}}}) setsockopt$MRT6_DEL_MIF(r2, 0x29, 0xcb, &(0x7f00000001c0)={0x0, 0x0, 0xc, r3, 0x4}, 0xc) r4 = openat$tun(0xffffffffffffff9c, &(0x7f0000000040), 0x1c1341, 0x0) ioctl$TUNSETIFF(r4, 0x400454ca, &(0x7f00000000c0)={'syzkaller0\x00', 0x84aebfbd6349b7f2}) r5 = socket(0x10, 0x803, 0x0) ioctl$sock_SIOCGIFINDEX(r5, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r5, &(0x7f00000012c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000a40)=@newqdisc={0x2c, 0x24, 0x4ee4e6a52ff5653f, 0x70bd2d, 0x25dfdbfc, {0x0, 0x0, 0x0, r6, {0x0, 0x9}, {0xffff, 0xffff}}, [@qdisc_kind_options=@q_drr={0x8}]}, 0x2c}, 0x1, 0x0, 0x0, 0x81}, 0x0) sendmsg$nl_route_sched(r5, &(0x7f0000006040)={0x0, 0x0, &(0x7f0000000300)={&(0x7f00000001c0)=@newtfilter={0x44, 0x2c, 0xd27, 0x70bd2a, 0x25dfdbfb, {0x0, 0x0, 0x3f, r6, {0xc, 0xffe0}, {0x0, 0x9}, {0xfff3, 0x9}}, [@filter_kind_options=@f_flower={{0xb}, {0x14, 0x2, [@TCA_FLOWER_KEY_ETH_TYPE={0x6, 0x8, 0x8848}, @TCA_FLOWER_KEY_MPLS_TC={0x5}]}}]}, 0x44}}, 0x0) r7 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPCTNL_MSG_CT_NEW(r7, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000006c0)=ANY=[@ANYBLOB="800000000001010400000000141a000002fff500240001801400018008000100e000000108000200e00000010c00028005000100000000002400028014000180080001000000000008000200ac1e00010c000280050001000000000008000740000000011c00108008000140000000000800024000000000080003"], 0x80}, 0x1, 0x0, 0x0, 0x4000810}, 0x0) r8 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="02000000040000000600000005"], 0x48) r9 = socket(0x10, 0x3, 0x0) write(r9, &(0x7f0000000080)="1400000052004f030e789e7ee2ce2fa4ff612d27", 0x14) recvmmsg(r9, &(0x7f0000005c80)=[{{0x0, 0x0, 0x0}}], 0x344, 0x10122, 0x0) r10 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_MSG_GETRULE(r10, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000440)={0x14, 0x7, 0xa, 0x401, 0x0, 0x0, {0x2}}, 0x14}, 0x1, 0x0, 0x0, 0x4040}, 0x0) bpf$PROG_LOAD(0x5, &(0x7f0000000340)={0x11, 0x14, &(0x7f0000000540)=ANY=[@ANYBLOB="180000000000000000000000000000001801000020646c2100000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000002300000018110000", @ANYRES32=r8, @ANYBLOB="0000000000000000b708000000000008638af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000100000095"], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) socket$inet_icmp(0x2, 0x2, 0x1) r11 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPCTNL_MSG_CT_NEW(r11, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000a80)={0x44, 0x0, 0x1, 0x401, 0x0, 0x0, {0x2}, [@CTA_TUPLE_ORIG={0x24, 0x1, 0x0, 0x1, [@CTA_TUPLE_IP={0x14, 0x1, 0x0, 0x1, @ipv4={{0x8, 0x1, @loopback}, {0x8, 0x2, @multicast1}}}, @CTA_TUPLE_PROTO={0xc, 0x2, 0x0, 0x1, {0x5}}]}, @CTA_TUPLE_ORIG={0x0, 0x1, 0x0, 0x1, [@CTA_TUPLE_PROTO={0x0, 0x2, 0x0, 0x1, {0x0, 0x1, 0x11}}, @CTA_TUPLE_PROTO={0x0, 0x2, 0x0, 0x1, {0x0, 0x1, 0x2f}}, @CTA_TUPLE_ZONE, @CTA_TUPLE_PROTO={0x0, 0x2, 0x0, 0x1, {0x0, 0x1, 0x1}}, @CTA_TUPLE_PROTO={0x0, 0x2, 0x0, 0x1, {0x0, 0x1, 0xb9}}, @CTA_TUPLE_IP={0x0, 0x1, 0x0, 0x1, @ipv6={{0x0, 0x3, @private1={0xfc, 0x1, '\x00', 0x1}}, {0x0, 0x4, @loopback}}}, @CTA_TUPLE_IP={0x0, 0x1, 0x0, 0x1, @ipv4={{0x0, 0x1, @private=0xa010101}, {0x0, 0x2, @initdev={0xac, 0x1e, 0x0, 0x0}}}}, @CTA_TUPLE_ZONE, @CTA_TUPLE_PROTO={0x0, 0x2, 0x0, 0x1, {0x0, 0x1, 0x21}}]}, @CTA_SEQ_ADJ_REPLY={0xffffffffffffff2f}]}, 0x44}, 0x1, 0x0, 0x0, 0x8000}, 0x0) r12 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r12, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000180)={&(0x7f00000034c0)=ANY=[@ANYBLOB="24000000360007010300000000000002017c000010"], 0x24}, 0x1, 0x0, 0x0, 0x4048011}, 0xc000) openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000000c0)='memory.events\x00', 0x275a, 0x0) r13 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000140)='memory.events\x00', 0x7a05, 0x1700) write$cgroup_int(r13, &(0x7f0000000200), 0x806000) 14.462243603s ago: executing program 4 (id=5845): socket$kcm(0x11, 0x3, 0x0) socket$unix(0x1, 0x5, 0x0) r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000100), 0x0, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x2}) r1 = openat$tun(0xffffffffffffff9c, &(0x7f0000000400), 0x0, 0x0) close(r1) r2 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$TIPC_CMD_ENABLE_BEARER(r2, 0x0, 0x0) ioctl$SIOCSIFHWADDR(r1, 0x8914, &(0x7f0000002280)={'syzkaller0\x00', @multicast}) ioctl$sock_SIOCGIFINDEX(0xffffffffffffffff, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000580)={&(0x7f0000000600)=@newqdisc={0x4c, 0x24, 0x4ee4e6a52ff56541, 0x1, 0x25dfdbfd, {0x0, 0x0, 0x0, r3, {0x0, 0xb}, {0xffff, 0xffff}, {0xfff2}}, [@qdisc_kind_options=@q_netem={{0xa}, {0x1c, 0x2, {{0x3, 0x3, 0x6361, 0x5, 0xffffffff, 0x3}}}}]}, 0x4c}, 0x1, 0x0, 0x0, 0x40088c1}, 0x0) close(0xffffffffffffffff) r4 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r4, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r4, &(0x7f00000003c0)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000080)=@newqdisc={0x40, 0x24, 0x4ee4e6a52ff56541, 0x70b926, 0x25dfdbff, {0x0, 0x0, 0x0, r5, {0x0, 0xd}, {0xffff, 0xb}, {0xffff, 0xffe0}}, [@qdisc_kind_options=@q_pfifo_head_drop={{0x14}, {0x8, 0x2, 0x1}}]}, 0x40}, 0x1, 0x0, 0x0, 0x240040e0}, 0x4890) r6 = socket$packet(0x11, 0x3, 0x300) setsockopt$packet_int(r6, 0x107, 0xf, &(0x7f0000000100)=0x4207, 0x4) ioctl$sock_SIOCGIFINDEX(r6, 0x8933, &(0x7f0000000040)={'syzkaller0\x00', 0x0}) sendto$packet(r6, &(0x7f00000002c0)="05031400d3fc140000004788031c09102c28", 0xfdef, 0x4, &(0x7f0000000140)={0x11, 0x88a8, r7, 0x1, 0x0, 0x6, @multicast}, 0x14) 13.97281021s ago: executing program 4 (id=5850): r0 = socket(0xa, 0x3, 0x3a) setsockopt$MRT6_ADD_MIF(r0, 0x29, 0xca, &(0x7f0000000040)={0x0, 0x1, 0x8, 0x0, 0x401}, 0xc) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) sendmmsg(r1, &(0x7f0000000180), 0x4000190, 0x0) r3 = socket$alg(0x26, 0x5, 0x0) bind$alg(r3, &(0x7f00000004c0)={0x26, 'skcipher\x00', 0x0, 0x0, 'cbc-camellia-asm\x00'}, 0x58) setsockopt$ALG_SET_KEY(r3, 0x117, 0x1, &(0x7f0000000280)="ad56b6c5820fae9d6dcd3292ea54c7beef915d564c90c200", 0x18) r4 = accept4(r3, 0x0, 0x0, 0x800) sendmmsg$alg(r4, &(0x7f0000000040)=[{0x0, 0x0, &(0x7f0000000000)=[{&(0x7f0000000680)="f78d9ca38fff48f3be52163448412ba8", 0x10}, {&(0x7f0000000140)="ebe3a0e9796cfd1647e299f4e376fdba128280b372219d205e81f4a7f71c1926aae1efd7e0054a863f3d5cfe6cb55b5bb9fa6935849e6098ed884e7cb51726b360fbb37b4fe035bbb095873048", 0xfffffef1}, {&(0x7f0000000700)="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", 0x116}], 0x3, &(0x7f0000000380)=[@assoc={0x18}], 0x18}], 0x1, 0x40800) recvmsg(r4, &(0x7f00000005c0)={0x0, 0x0, &(0x7f00000001c0)=[{&(0x7f00000000c0)=""/81, 0x7ffff000}, {&(0x7f0000000200)=""/83, 0x20000253}], 0x2}, 0x0) r5 = socket$kcm(0x21, 0x2, 0x2) sendmsg$kcm(r5, &(0x7f0000000040)={0x0, 0x0, 0x0, 0x0, &(0x7f0000001240)=[{0x18, 0x10b, 0xc, ')'}], 0x18}, 0x20004000) shutdown(r2, 0x0) setsockopt$MRT6_FLUSH(r0, 0x29, 0xd4, &(0x7f0000000080)=0xc, 0x4) 10.404422215s ago: executing program 4 (id=5855): bpf$BPF_BTF_LOAD(0x12, &(0x7f0000001040)={&(0x7f0000000000)={{0xeb9f, 0x1, 0x0, 0x18, 0x0, 0xc, 0xc, 0x9, [@restrict={0x5, 0x0, 0x0, 0xb, 0x5}]}, {0x0, [0x61, 0x0, 0x5f, 0x61, 0x5f, 0x61, 0x2e]}}, &(0x7f0000000f80)=""/176, 0x2d, 0xb0, 0x1, 0x5, 0x10000}, 0x28) (async) r0 = bpf$BPF_BTF_LOAD(0x12, &(0x7f0000001040)={&(0x7f0000000000)={{0xeb9f, 0x1, 0x0, 0x18, 0x0, 0xc, 0xc, 0x9, [@restrict={0x5, 0x0, 0x0, 0xb, 0x5}]}, {0x0, [0x61, 0x0, 0x5f, 0x61, 0x5f, 0x61, 0x2e]}}, &(0x7f0000000f80)=""/176, 0x2d, 0xb0, 0x1, 0x5, 0x10000}, 0x28) socket$netlink(0x10, 0x3, 0x0) bpf$MAP_CREATE(0x0, &(0x7f00000001c0)=ANY=[@ANYBLOB="05000000040000000c0000000b"], 0x50) bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000480)={0x0, 0x0, 0x43}, 0x28) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000240)={0x11, 0x3, &(0x7f0000000800)=ANY=[@ANYBLOB="1800000000000000000000000000000095"], &(0x7f00000001c0)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x2c}, 0x94) (async) r1 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000240)={0x11, 0x3, &(0x7f0000000800)=ANY=[@ANYBLOB="1800000000000000000000000000000095"], &(0x7f00000001c0)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x2c}, 0x94) r2 = socket$inet6(0xa, 0x2, 0x0) setsockopt$inet6_int(r2, 0x29, 0x35, &(0x7f0000000000)=0x8000, 0x4) bind$inet6(r2, &(0x7f0000f5dfe4)={0xa, 0x4e20, 0x0, @empty}, 0x1c) (async) bind$inet6(r2, &(0x7f0000f5dfe4)={0xa, 0x4e20, 0x0, @empty}, 0x1c) recvmmsg(r2, &(0x7f0000000040), 0x400000000000284, 0x2, 0x0) (async) recvmmsg(r2, &(0x7f0000000040), 0x400000000000284, 0x2, 0x0) sendto$inet6(r2, 0x0, 0x0, 0x0, &(0x7f0000000200)={0xa, 0x4e20, 0x0, @mcast1}, 0x1c) (async) sendto$inet6(r2, 0x0, 0x0, 0x0, &(0x7f0000000200)={0xa, 0x4e20, 0x0, @mcast1}, 0x1c) setsockopt$inet6_IPV6_FLOWLABEL_MGR(r2, 0x29, 0x20, &(0x7f0000001100)={@local, 0x1, 0x0, 0x0, 0x8, 0x3, 0x3}, 0x20) bpf$BPF_GET_PROG_INFO(0xf, &(0x7f0000001440)={r1, 0xe0, &(0x7f0000000440)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, ""/16, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8, 0x0, 0x0}}, 0x10) r4 = bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000640)={0x6, 0x3, &(0x7f0000000200)=@framed={{0x18, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7}}, &(0x7f00000007c0)='syzkaller\x00', 0x1, 0x0, 0x0, 0x0, 0x0, '\x00', r3}, 0x94) bpf$MAP_CREATE(0x0, 0x0, 0x50) r5 = socket$inet6_tcp(0xa, 0x1, 0x0) bind$inet6(r5, 0x0, 0x0) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000900)={0x2, 0x5, &(0x7f0000000040)=ANY=[@ANYBLOB="1800000000000000000046bab52f0de68d320000000000008510f9fffffb7bf30010000000009500000000000000"], &(0x7f0000000000)='syzkaller\x00', 0x4, 0xc, &(0x7f0000000100)=""/147, 0x0, 0x0, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x61e5cc96}, 0x22) (async) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000900)={0x2, 0x5, &(0x7f0000000040)=ANY=[@ANYBLOB="1800000000000000000046bab52f0de68d320000000000008510f9fffffb7bf30010000000009500000000000000"], &(0x7f0000000000)='syzkaller\x00', 0x4, 0xc, &(0x7f0000000100)=""/147, 0x0, 0x0, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x61e5cc96}, 0x22) bpf$PROG_LOAD(0x5, &(0x7f0000000340)={0x11, 0x14, &(0x7f0000000280)=ANY=[@ANYBLOB], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r6 = socket$inet_icmp_raw(0x2, 0x3, 0x1) setsockopt$IPT_SO_SET_REPLACE(r6, 0x4000000000000, 0x40, &(0x7f0000000900)=@raw={'raw\x00', 0x4001, 0x3, 0x468, 0x3d0, 0xb, 0x148, 0x0, 0x148, 0x3d0, 0x230, 0x242, 0x3d0, 0x215, 0x3, 0x0, {[{{@ip={@local, @remote, 0xff, 0x0, 'batadv_slave_0\x00', 'macvtap0\x00', {}, {0xff}, 0x73, 0x2, 0xa}, 0x0, 0x2d0, 0x300, 0x0, {0xff0f000000000000}, [@common=@inet=@l2tp={{0x30}, {0x1, 0x0, 0x3, 0x0, 0xe}}, @common=@unspec=@bpf1={{0x230, 'bpf\x00', 0x0}, @pinned={0xe, 0x0, 0x6, './file0\x00'}}]}, @common=@inet=@SET2={0x30, 'SET\x00', 0x2, {{}, {0x7fc, 0x6}, 0x0, 0x1}}}, {{@uncond, 0xec010000, 0x70, 0xd0}, @common=@SET={0x60, 'SET\x00', 0x0, {{0x4, [0x1, 0x6, 0x4, 0x5, 0x8, 0x4], 0x0, 0x5}, {0x0, [0x1, 0x0, 0x2, 0x0, 0x3, 0x2], 0x0, 0x7}}}}], {{'\x00', 0x0, 0x70, 0x98}, {0x28}}}}, 0x4c8) ioctl$XFS_IOC_PATH_TO_FSHANDLE(r5, 0xc0385868, &(0x7f00000010c0)={r4, &(0x7f0000000080)='blkio.bfq.sectors\x00', 0x80, &(0x7f0000000140)={@_ha_fsid={[0x7fffffff, 0x1]}, {0x8, 0x2, 0x7d41, 0x6}}, 0x0, &(0x7f0000000180)={@_ha_fsid}, &(0x7f0000001080)=0xde}) r8 = openat$cgroup_ro(r7, &(0x7f0000000040)='blkio.bfq.sectors\x00', 0x275a, 0x0) write$cgroup_subtree(r8, &(0x7f0000000000)=ANY=[], 0x32600) (async) write$cgroup_subtree(r8, &(0x7f0000000000)=ANY=[], 0x32600) mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x2000001, 0x12, r8, 0x0) bpf$BPF_GET_BTF_INFO(0xf, &(0x7f0000000640)={0xffffffffffffffff, 0x0, 0x0}, 0x10) (async) bpf$BPF_GET_BTF_INFO(0xf, &(0x7f0000000640)={0xffffffffffffffff, 0x0, 0x0}, 0x10) bpf$PROG_LOAD(0x5, &(0x7f00000017c0)={0x2, 0xe, &(0x7f0000000200)=ANY=[@ANYBLOB="b70000001c000000bca30000000000002403000020feffff620a00fef8ffffff71a4f0ff000000001f03000000000000e5000600000000002604fdffff02000015010000033800001d13fcff000000007a0af0ff0000001f0f14000000000000b503f7fff80000009500000000000000033bc065b78111c6dfa041b63af4a3912435f1a864a7aad58db6a693002e7f3be361917adef6ee1c8a2a4f8ef1e50becb19bc461e91a7168e5181554a090f300020000fe275daf51efd601b6bf01c8e8b1b526375ee4dd6fcd82e4fee5bef7af9aa0d7d600c095199fe3ff3128e599b0eaebbdbd732c9cc00eec363e4a8f6456e2cc21557c0afc646cb7798b3e6440c2fbdb00a3e35208b0bb0d2cd829e65440000000000000000028610643a98d9ec21ead2ed51b104d4d91af25b845b9f7d08d123deda88c658d42ecbf28bf7076c15b463bebc72f526dd70252e79166d858fcd0e06dd31af9612fa402d0b11008e59a5923906f88b53987ad1714e72ba7a54f0c33d39000d06a59ff61623604000000000000006a89adaf17b0a6041bdeebdfd1f5089048ddff6da40f9411fe7226a40409d6e37c4f46756d31cb467600ade70063e5291569b33d21dae356e1c51f03a801be8189679a16da18ec0ae564163427afea62d84f3a10076443d643649393bf52d2105bd901128c7e0ec82701c8204a1deeed4155617572652d950ad31928b0b036dc2869f478341d02d0f5ad94b081fcd507acb4b9c67382f13d000000225d85ae49cee383dc5049076b98fb6853ab39a21514da60d2ae20cfb91d6a49964757cdf538f9ce2bdbb9893a5de817101a3062cd54f9ff51d355d84ce97bb0c6b6a595e487a2cc47c0efbb2d71cde2c10f0bc6980fe78683ac5c0c31032599dd273863be9261eee52216d009f4c52048ef8c126aeef5f510a8f1aded94a129e4aec6e8d9ab06faffc3a15d91c2ea3e2e04cfe031b287539d0540059fe6c7fe7cd8697502c7596566d674e425da5e7f009602a9f61d3804b3e0a1053abdc31282dfb15eb6841bb64a1b3045024a982f3c48153baae244e7bf573eac34b781337ad5905c6bbf1137548c7f1a4cad2422ee965a38f7defbd2960242b104e20dc2d9b0c35608d402ccdd9069bd50b994fda7a90144022a579dfc0229cc0dc98816106dec28eaeb883418f562ae00003ea96d10f172c0374d6eed826416050000000bfe9b4a9c5a90ff59d54d1f92ecc48899b212c55318294270a1ad10c80fef7c24d47afcc829ba0f85da6d888f18ea40ab959f6074ab2a40d85d1501783a7ab540b8d7b4ead35a385e0b4a26b702396df7e0c1e02b88c114f244a9bf93f04bf072f0861f5c0b000000000000eedcf2ba1a9508f9d6aba582a896a9f1ffa968eacea75caf822a7a63ba3401e6a52acb11883ad2a3b1832371fe5bc621426d1ed01b389708165b9cdbae2ed9dc7358f0ebadde0b727f27feeb7464dcd857ab15e355713767c536cbae2f5c7d951680f6f2f9a6a8346962a350845ffa0d82884f79adc287906943408e6df3c391e97ba48db0a5adbfd03aac93df8866fb010ae20e92bed1fe39af169d2a466f0db6f3d9436a7d55fc30511d00000000c95265b2bd83d64a532869d701723fedcbada1ee7baa19faf67256b56a41fd355b6a686b50f0937f778af083e055f6138a757ebd0ed91124a6b244f9acf41ac5d73a008364e0606a594817031fc2f52c8785fe0721719b3d654026c6ea08b83b123145ab5703dad844ced301efeb6dc5f6a9037d2283c42efc54fa84323afc4c10eff462c8843187f1dd48ef0981000000000000ff0f40b1888e1cdba94a6ea80c33ead5722c3293a493f1479531dd88261458f40d31fe8df15efaaeea831555877f9538c6ee6ba65893ff1f908ba7554ba583ec7932f5954f31a878e2fae6691d1aee1da02ba516467df3e7d1daac43738612e4fee18a22da19fc08001011e32f80fb60e14b9eee094277bbc170882c8890205f3a6da2819d2f9e77c7c64affa54fec0136cbafa5f62e3f753b639a924599c1f69219927ea5301fff0a6063d427180d61542c2571f983e96635600000554f327a3535e7c7542799493c31ac05a7b57f03ca91a01ba2a30ca99e969d6fd09dc28ebc15edb4d91675767999d146aef7799738b292fd64bb25b2969e2b15f36b788bce5ccdbaf75c94cb93499f6947a967a794963342aece449a0d80010f5c653d22d49030a8c2a4ab595bf4238f18ca428dafc7ac96d404607a0000000051a2104f22e6db5a62b5089c1b45282d38864daa3ae81d6b0968d1d2867b6ef9d12096833d6864da40b54783a17aaeb6737c323f9f98e354cc98dcfe23ad01bd1c61563e69ffe1c2c73e1661261173f359e93d2c5e424c17998809ec8f0232b3955e052a4cecd89008f70314a0bdd491ec035d232f89fe0120f64c62e8e3ed8bcb45202c204bbec8d722824c0ebca8db1ea4a05e41f6016ab5bbe4fe7ff5d785d0128171c90d9900ca2532b0f9d01c4b45294fbba468df3e1b393cb4e62e753b4172ba7ac1f2b51c94bc5d047899fd219f448bf9189c65c9d91eda6b52a373803a9efe44f86909bc90addb7b9aee813df534aac4b3093c91b8068cd849904568916694d461b76a58d88cf0f520310a1e9fdc18cde98d662eee077515d0a881192292ffff5392ab3d1311b82432662806add87047f601fa888400000000000000000000000000006acc19808d7cf29bc974b0ea92499a41b9b9a7c2bca311a28ee4952f2d325a56397c78f12205db653a536f9f3322405d1efd78e578dc6b3fb84f3738a4b6caa800000087efa51c5d95ecba4e50e529d1e8c89600e809dc3d0a2f65579e23457949a50f2d0455cf79a43746979f99f6a1527f004f1e37a3926937e84fb478199dc1020f4beb98b8074bf7df8b5e783637da740800000000000000c55a4385e9a617aa6c8e10d4202c5afeb06e2f9115558ea12f92d7ae633d44086b3f03b20d546fa66a72e38207c9d20035abc46271a30f1240de52536941242d23896ab74a3c6670fdc49c14f34fc4eadd6db8d80eba439772bf60a1db18c472dafc5569adc282928d2a1ffe29f1a57d3f18f4edaeb5d37918e6fddcd821da67a0785585a4443440dc65600e64a6a2740000000000000000000000000000000000000000000a0009dd14b38f2f4426d7cf5075047c31f6ce6adddfe3ac649c0643c8bfbeb14ba1fd7a485aa893915cf81e29aaf375e904bbe52691a4100260ffcd8f1d04166d291ebcef893e1b9ccb6797d0646fe0e7274434f28efb43e06e64f0698caca42f4e6018a455736c482a017e2b13dac4a90faa109f0e87cc94e3efb649692456463ca74aa6ad4bf50c1acb0000000000000005375e528285544d0064b98646f3109e9a4942ce42c6e7ec84b664f6c2770803f10baa804a707f0a1fcbfc309381aeba191950bae71f37f1eb7ceeffb3c0547ac6571603adbfde4c8b5f8d7f4b854441613633b48865b65bdc415e1e0dcf672d68cf4cebf04f4bc1eebf560a26d34d3757b1450fdb0a9a69f432e277f3a0386eb2bd3305c821c64757f786b79fef54dbe64c67d73934bc80b2133fb3c04cc7ea48bf97a6243c9f95dcbddecf45f008f1822c7868e1ff5a3cff5d6b6898335792749df7b1f51e91f8c1c3b1b93b33aaa3fab69cef08a9f6f6cf39dea3d878b2ed42545421970cc426e644332bc956d1c6adefdf0ede2c5c94aa632646ae225accdf031f611d01622921f1b922a5ac887cca3136133dce8d9f5f4da7bed2ea5d94362200000000000000000000f296b0c1484e5f781ad26bff696b05ff0a5e2270e07618b04273bd4075ea38ab463bfa6a38e7c537498ba3e4df8dfc9e040000003c3ffad44d2a376def42e41e9fc31678257e040fa7cf32c221aaac08000000000000001a00000000000000000000173570f0c11ae694b0f7a4f9c2f6790044a357e785af6e153d5f1ea460af92c7cbbd6295afe740f5e154346d483e0d641ef02e4d5295d756e110522a7a945b93fb705b95b6aae27a8fb33732ce1da1c0b1af8eb9222a06e984ab1e6984c8bdc12360627137ab67b6b68ab08acb29a74dc36b51209cfbc87f61182bbeb2772e9d5a1ffc477179be481efe46a4ce86be0b1d8eee42a611a3d44ca450b14586ed63dd92005c79e4a8ab8a94f0c6cb4bed8594a39bd76d3ef8a7ab014e787596db796bd93a36c2880423291e3bccc86f66ba792ff4d87b3f80e5908779e51c5e9055fc5b23605cd000c723187ef09dcf4b07b06a9342f3f62ee7acddff292082c1f4d8eb9561f80873a09a1ae0c9af1121175e5600f43a1179484502009759264a5729f07c2b218fa36ba2316a99aaad0130df83d0bda1e711290f78c143ea143967b00adcd77e6ad5e48d839ea61aadb83e4d071c54691924a3830d3e7b5c198bb0ed623153590000000000000000004b985ea1702f34f2f85b168c083e810ed567e3f1979b9ed1a4bf6a10dac825c96a0828b335de445a4880bb6474157efd1a72ca46ae4cbe3ab648c9bc4867a5a4cb87d7d6d55475b34b3cb6aa9e2337d4e04a37e35109752522ac9b186ddd80c47da6a2f4ef7bb909c975520000000000000000000000219cf5c1376ab33786f6b856d354e90a2733f78f2d188057cead3480eade49d55b770fad7fa000d23da6275768810b6b2df91d3a991ea98d929d271696c258d5b735d5db11df434e7dd1b7c1ca05cea3977df564115f4ec6ffab1d2ff8a642ca50934b3fbe44b0abeba9df209566984a29dfc0466e439a94e177b3c4d5f6e92b8176b9d6ddeeeb196fa964217f88e1acc180aaa4"], &(0x7f00000001c0)='GPL\x00', 0x2, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x33, r0, 0x8, &(0x7f0000000100)={0x0, 0x40}, 0x8, 0x10, &(0x7f00000000c0)={0x1, 0x3}, 0x10}, 0x94) 3.282172967s ago: executing program 0 (id=5923): r0 = socket$l2tp6(0xa, 0x2, 0x73) sendmsg$inet6(r0, &(0x7f0000002940)={&(0x7f0000002740)={0xa, 0x4e20, 0x3662, @rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x01', 0x7}, 0x1c, 0x0, 0x0, &(0x7f00000028c0)=[@flowinfo={{0x14, 0x29, 0xb, 0x5}}, @flowinfo={{0x14, 0x29, 0xb, 0xfffffffe}}], 0x30}, 0x48084) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000600)={0x16, 0x3, &(0x7f0000000000)=ANY=[@ANYBLOB="dbaa00fe51000000711097000000000095"], &(0x7f0000000480)='syzkaller\x00', 0x5, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x790f}, 0x94) mmap(&(0x7f0000001000/0xc00000)=nil, 0xc00000, 0x5, 0x3b071, 0xffffffffffffffff, 0x0) socketpair$nbd(0x1, 0x1, 0x0, &(0x7f00000007c0)={0xffffffffffffffff}) ioctl$sock_SIOCETHTOOL(r1, 0x8946, &(0x7f0000000040)={'dummy0\x00', &(0x7f0000001940)=@ethtool_ringparam={0x10, 0x80000011, 0xe, 0x812, 0x0, 0x0, 0x2, 0x5, 0x7ff}}) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000080)={0x18, 0x20000000000000e3, &(0x7f00000001c0)=@framed={{0x18, 0x0, 0x0, 0x0, 0xffffffde, 0x0, 0x0, 0x0, 0xffffffff}}, &(0x7f0000000180)='GPL\x00', 0x4, 0x1019, &(0x7f0000002240)=""/4137, 0x40f00, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x1}, 0x94) 3.261879393s ago: executing program 7 (id=5924): r0 = socket$l2tp(0x2, 0x2, 0x73) setsockopt$IP_VS_SO_SET_ZERO(r0, 0x0, 0x48f, &(0x7f0000000000)={0x71, @private=0xa010102, 0x4e23, 0x0, 'lblc\x00', 0x0, 0x3, 0x30}, 0x2c) r1 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$L2TP_CMD_TUNNEL_MODIFY(r1, &(0x7f0000000140)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x1}, 0xc, &(0x7f0000000100)={&(0x7f0000000080)={0x68, 0x0, 0x200, 0x70bd2b, 0x25dfdbfd, {}, [@L2TP_ATTR_MTU={0x6, 0x1c, 0x80}, @L2TP_ATTR_VLAN_ID={0x6, 0xe, 0xf}, @L2TP_ATTR_PEER_SESSION_ID={0x8, 0xc, 0x4}, @L2TP_ATTR_PW_TYPE={0x6, 0x1, 0x5}, @L2TP_ATTR_L2SPEC_TYPE={0x5}, @L2TP_ATTR_VLAN_ID={0x6, 0xe, 0x4}, @L2TP_ATTR_COOKIE={0xc, 0xf, 0x100000001}, @L2TP_ATTR_SESSION_ID={0x8}, @L2TP_ATTR_PW_TYPE={0x6, 0x1, 0xb}, @L2TP_ATTR_MRU={0x6, 0x1d, 0x4}]}, 0x68}, 0x1, 0x0, 0x0, 0x40400c0}, 0x4000084) r2 = socket$tipc(0x1e, 0x2, 0x0) socket$nl_netfilter(0x10, 0x3, 0xc) socket$qrtr(0x2a, 0x2, 0x0) getsockopt$ARPT_SO_GET_INFO(0xffffffffffffffff, 0x0, 0x60, &(0x7f0000000180)={'filter\x00', 0x0, [0x5, 0x1, 0x3]}, &(0x7f0000000200)=0x44) r3 = socket$nl_generic(0x10, 0x3, 0x10) r4 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000280), r1) sendmsg$NL80211_CMD_DEL_INTERFACE(r3, &(0x7f0000000340)={&(0x7f0000000240)={0x10, 0x0, 0x0, 0x8000000}, 0xc, &(0x7f0000000300)={&(0x7f00000002c0)={0x14, r4, 0x8, 0x70bd2d, 0x25dfdbff, {{}, {@void, @void}}, ["", "", "", "", ""]}, 0x14}, 0x1, 0x0, 0x0, 0x4044081}, 0x4000810) sendmsg$NL80211_CMD_GET_REG(0xffffffffffffffff, &(0x7f0000000440)={&(0x7f0000000380)={0x10, 0x0, 0x0, 0x2}, 0xc, &(0x7f0000000400)={&(0x7f00000003c0)={0x3c, r4, 0x1, 0x70bd25, 0x25dfdbfc, {}, [@NL80211_ATTR_WIPHY={0x8, 0x1, 0x53}, @NL80211_ATTR_WIPHY={0x8, 0x1, 0xb}, @NL80211_ATTR_DFS_REGION={0x5, 0x92, 0x3d}, @NL80211_ATTR_DFS_REGION={0x5, 0x92, 0x2}, @NL80211_ATTR_REG_ALPHA2={0x7, 0x21, 'aa\x00'}]}, 0x3c}, 0x1, 0x0, 0x0, 0x80}, 0x800) ioctl$EXT4_IOC_SWAP_BOOT(r0, 0x6611) r5 = socket$inet_udp(0x2, 0x2, 0x0) getsockname$packet(0xffffffffffffffff, &(0x7f0000000480)={0x11, 0x0, 0x0}, &(0x7f00000004c0)=0x14) ioctl$sock_ipv4_tunnel_SIOCCHGTUNNEL(r5, 0x89f3, &(0x7f00000005c0)={'gre0\x00', &(0x7f0000000500)={'ip_vti0\x00', r6, 0x7800, 0x20, 0x1ff, 0x1, {{0x27, 0x4, 0x2, 0x2c, 0x9c, 0x65, 0x0, 0xc8, 0x29, 0x0, @empty, @multicast2, {[@timestamp_addr={0x44, 0x2c, 0xc1, 0x1, 0x2, [{@multicast1, 0x4}, {@remote, 0x4}, {@broadcast, 0xaa}, {@multicast2, 0x4}, {@private=0xa010101, 0x6e1}]}, @lsrr={0x83, 0x1f, 0xfb, [@multicast1, @initdev={0xac, 0x1e, 0x1, 0x0}, @rand_addr=0x64010101, @multicast1, @multicast2, @remote, @local]}, @timestamp={0x44, 0x28, 0x15, 0x0, 0x7, [0xfc47, 0xfffffff8, 0xf0, 0x9, 0xffff479b, 0x7fff, 0xfffff5a7, 0x3, 0x9]}, @ra={0x94, 0x4, 0x1}, @timestamp_prespec={0x44, 0xc, 0x5b, 0x3, 0x0, [{@multicast2, 0x6}]}, @end, @ra={0x94, 0x4}]}}}}}) r7 = socket$nl_rdma(0x10, 0x3, 0x14) sendmsg$RDMA_NLDEV_CMD_NEWLINK(r7, &(0x7f0000000800)={&(0x7f0000000600)={0x10, 0x0, 0x0, 0x10}, 0xc, &(0x7f00000007c0)={&(0x7f0000000640)={0x178, 0x1403, 0x200, 0x70bd27, 0x25dfdbfe, "", [{{0x9, 0x2, 'syz1\x00'}, {0x8, 0x41, 'siw\x00'}, {0x14, 0x33, 'ip6_vti0\x00'}}, {{0x9, 0x2, 'syz2\x00'}, {0x8, 0x41, 'siw\x00'}, {0x14, 0x33, 'veth1_to_hsr\x00'}}, {{0x9, 0x2, 'syz1\x00'}, {0x8, 0x41, 'rxe\x00'}, {0x14, 0x33, 'virt_wifi0\x00'}}, {{0x9, 0x2, 'syz0\x00'}, {0x8, 0x41, 'siw\x00'}, {0x14, 0x33, 'ip6erspan0\x00'}}, {{0x9, 0x2, 'syz2\x00'}, {0x8, 0x41, 'rxe\x00'}, {0x14, 0x33, 'veth1\x00'}}, {{0x9, 0x2, 'syz1\x00'}, {0x8, 0x41, 'rxe\x00'}, {0x14, 0x33, 'veth1_macvtap\x00'}}, {{0x9, 0x2, 'syz2\x00'}, {0x8, 0x41, 'siw\x00'}, {0x14, 0x33, 'wg0\x00'}}, {{0x9, 0x2, 'syz2\x00'}, {0x8, 0x41, 'siw\x00'}, {0x14, 0x33, 'team_slave_0\x00'}}, {{0x9, 0x2, 'syz0\x00'}, {0x8, 0x41, 'siw\x00'}, {0x14, 0x33, 'veth1_to_bond\x00'}}]}, 0x178}, 0x1, 0x0, 0x0, 0x4800}, 0x4000800) r8 = syz_genetlink_get_family_id$tipc(&(0x7f0000000880), r3) sendmsg$TIPC_CMD_GET_REMOTE_MNG(r1, &(0x7f0000000940)={&(0x7f0000000840)={0x10, 0x0, 0x0, 0x100000}, 0xc, &(0x7f0000000900)={&(0x7f00000008c0)={0x1c, r8, 0x2, 0x70bd26, 0x25dfdbff, {}, ["", "", ""]}, 0x1c}, 0x1, 0x0, 0x0, 0x80}, 0x8010) r9 = syz_genetlink_get_family_id$l2tp(&(0x7f00000009c0), r1) sendmsg$L2TP_CMD_SESSION_DELETE(r3, &(0x7f0000000a80)={&(0x7f0000000980)={0x10, 0x0, 0x0, 0x2000000}, 0xc, &(0x7f0000000a40)={&(0x7f0000000a00)={0x3c, r9, 0x8, 0x70bd25, 0x25dfdbff, {}, [@L2TP_ATTR_PEER_CONN_ID={0x8, 0xa, 0x1}, @L2TP_ATTR_PW_TYPE={0x6}, @L2TP_ATTR_UDP_DPORT={0x6, 0x1b, 0x4e23}, @L2TP_ATTR_MRU={0x6, 0x1d, 0x1ff}, @L2TP_ATTR_DEBUG={0x8, 0x11, 0x1}]}, 0x3c}, 0x1, 0x0, 0x0, 0x2400c880}, 0x0) ioctl$XFS_IOC_START_COMMIT(r5, 0x80585882, &(0x7f0000000ac0)={0xffffffffffffffff}) setsockopt$TIPC_GROUP_LEAVE(r10, 0x10f, 0x88) sendmsg$NL80211_CMD_GET_WIPHY(r3, &(0x7f0000000c00)={&(0x7f0000000b40)={0x10, 0x0, 0x0, 0x200000}, 0xc, &(0x7f0000000bc0)={&(0x7f0000000b80)={0x28, 0x0, 0x4, 0x70bd25, 0x25dfdbfd, {{}, {@val={0x8, 0x1, 0x2b}, @void, @val={0xc, 0x99, {0x6, 0x38}}}}, ["", ""]}, 0x28}}, 0x20028000) bpf$BPF_LINK_CREATE(0x1c, &(0x7f0000000c40)={r10, r10, 0x36, 0x0, @void}, 0x10) sendmsg$IPSET_CMD_ADD(r10, &(0x7f0000000d40)={&(0x7f0000000c80)={0x10, 0x0, 0x0, 0x8000000}, 0xc, &(0x7f0000000d00)={&(0x7f0000000cc0)={0x18, 0x9, 0x6, 0x201, 0x0, 0x0, {0x0, 0x0, 0x2}, [@IPSET_ATTR_ADT={0x4}]}, 0x18}, 0x1, 0x0, 0x0, 0x48000}, 0x24048085) r11 = socket$phonet(0x23, 0x2, 0x1) ioctl$BTRFS_IOC_SUBVOL_CREATE_V2(r11, 0x50009418, &(0x7f0000000d80)={{r2}, 0x0, 0x18, @unused=[0x8, 0x5, 0xff, 0x9], @name="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"}) socket(0x1f, 0x0, 0xfffff001) 3.16829921s ago: executing program 1 (id=5925): bpf$MAP_CREATE(0x0, &(0x7f0000000140)=@base={0x5, 0x6, 0x30000, 0x1, 0x0, 0xffffffffffffffff, 0x6f3abde0}, 0x50) r0 = bpf$PROG_LOAD(0x5, &(0x7f0000000080)={0xc, 0xe, &(0x7f0000001700)=ANY=[@ANYBLOB="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"], &(0x7f0000000000)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x8, &(0x7f00000001c0), 0xfffffedf, 0x10, &(0x7f0000000040), 0x0, 0x0, 0xffffffffffffffff, 0xd}, 0x48) r1 = syz_init_net_socket$802154_dgram(0x24, 0x2, 0x0) setsockopt$WPAN_SECURITY(r1, 0x0, 0x1, &(0x7f0000000040)=0x2, 0x4) setsockopt$WPAN_SECURITY(r1, 0x0, 0x1, &(0x7f0000000000), 0x4) sendmsg$802154_dgram(r1, &(0x7f0000000540)={&(0x7f00000003c0)={0x24, @long={0x3, 0x0, {0xaaaaaaaaaaaa0302}}}, 0x14, &(0x7f0000000400)={&(0x7f00000006c0)="cd62aa1a2c5cd7ecb03d9bb63e4b46e147db694de1af077daaf1529c86be71d45c050474f11ea3a0e31d31de6d74cb0f43658ce4656debc0bf128d3b9d75d6c72380d245b48fb12507d40b0819269b21efc58a61e4f37d246b230dbb08ba2b5f3fc4", 0x62}}, 0x0) ioctl$OCFS2_IOC_GROUP_ADD64(r0, 0x40186f03, &(0x7f0000000140)={0x4, 0x8, 0xff, 0xf128}) 3.10348649s ago: executing program 1 (id=5927): r0 = socket$netlink(0x10, 0x3, 0x0) r1 = bpf$PROG_LOAD_XDP(0x5, &(0x7f00000008c0)={0x3, 0x3, &(0x7f0000000040)=ANY=[@ANYBLOB="1800000000000000000000000d00000295"], &(0x7f0000000700)='GPL\x00'}, 0x90) bpf$BPF_PROG_ATTACH(0x9, &(0x7f0000000240)=ANY=[@ANYRES32=0x1, @ANYRES32=r1, @ANYBLOB='.\x00\x00\x00\x00\x00\x00\x00', @ANYRES32, @ANYBLOB, @ANYRES32, @ANYBLOB="1a19b4ab931c5248ff0ad4070a7404948b5405baa713bb5136338779ce33978c04c55a6fc38054a8e1d2780eb422cef0a209299adf056f9d3d0c830af0ccb1302f402cbad178e42616f83f97cd7f9f3e1d128f898f51b3fb80705dd2bd9fd7dc6c7078d13160e5b8e18a90ab662c78d7a47d7bf372de93ff49ad435f530926abca1ba1f58c0ecdfb5ab743effc4b5953630a176e11bac021e1ee070748991395a6cf8f4f6fd58f8caa97726533f21746711c76895625f0d570a4eadc8957ce2d3d5e086d", @ANYRES64=0x0], 0x20) ioctl$sock_ipv6_tunnel_SIOCADDTUNNEL(r0, 0x89f1, &(0x7f0000000200)={'syztnl0\x00', &(0x7f0000000180)={'ip6gre0\x00', 0x0, 0x4, 0x1, 0x5, 0x6, 0x1, @mcast1, @initdev={0xfe, 0x88, '\x00', 0x1, 0x0}, 0x10, 0x40, 0xff, 0x8e6}}) sendmsg$netlink(r0, &(0x7f0000000740)={0x0, 0x0, &(0x7f0000000080)=[{&(0x7f00000000c0)=ANY=[@ANYBLOB="3c0000001000010000000000000000002c0000000c000000ff0f00000000000008001c00c900000014003100fc01000000bf06cffa887d0000000000000000000001ef948c95c530b78d405e13e70f8c004507df7200ccf002d2b87459afe968b1615070db6d58f2a45b89f70631a569c8aa967c896faea9929fecc4f188a871b2ca6ed36f479037b685fc0657f5a18a5202beb92193b4e8b4824bff2a0759fd4d817ead03fe1f9e"], 0x3c}], 0x1, 0x0, 0x0, 0xb305e06d8ab48273}, 0x48800) socket$netlink(0x10, 0x3, 0x0) (async) bpf$PROG_LOAD_XDP(0x5, &(0x7f00000008c0)={0x3, 0x3, &(0x7f0000000040)=ANY=[@ANYBLOB="1800000000000000000000000d00000295"], &(0x7f0000000700)='GPL\x00'}, 0x90) (async) bpf$BPF_PROG_ATTACH(0x9, &(0x7f0000000240)=ANY=[@ANYRES32=0x1, @ANYRES32=r1, @ANYBLOB='.\x00\x00\x00\x00\x00\x00\x00', @ANYRES32, @ANYBLOB, @ANYRES32, @ANYBLOB="1a19b4ab931c5248ff0ad4070a7404948b5405baa713bb5136338779ce33978c04c55a6fc38054a8e1d2780eb422cef0a209299adf056f9d3d0c830af0ccb1302f402cbad178e42616f83f97cd7f9f3e1d128f898f51b3fb80705dd2bd9fd7dc6c7078d13160e5b8e18a90ab662c78d7a47d7bf372de93ff49ad435f530926abca1ba1f58c0ecdfb5ab743effc4b5953630a176e11bac021e1ee070748991395a6cf8f4f6fd58f8caa97726533f21746711c76895625f0d570a4eadc8957ce2d3d5e086d", @ANYRES64=0x0], 0x20) (async) ioctl$sock_ipv6_tunnel_SIOCADDTUNNEL(r0, 0x89f1, &(0x7f0000000200)={'syztnl0\x00', &(0x7f0000000180)={'ip6gre0\x00', 0x0, 0x4, 0x1, 0x5, 0x6, 0x1, @mcast1, @initdev={0xfe, 0x88, '\x00', 0x1, 0x0}, 0x10, 0x40, 0xff, 0x8e6}}) (async) sendmsg$netlink(r0, &(0x7f0000000740)={0x0, 0x0, &(0x7f0000000080)=[{&(0x7f00000000c0)=ANY=[@ANYBLOB="3c0000001000010000000000000000002c0000000c000000ff0f00000000000008001c00c900000014003100fc01000000bf06cffa887d0000000000000000000001ef948c95c530b78d405e13e70f8c004507df7200ccf002d2b87459afe968b1615070db6d58f2a45b89f70631a569c8aa967c896faea9929fecc4f188a871b2ca6ed36f479037b685fc0657f5a18a5202beb92193b4e8b4824bff2a0759fd4d817ead03fe1f9e"], 0x3c}], 0x1, 0x0, 0x0, 0xb305e06d8ab48273}, 0x48800) (async) 2.976618318s ago: executing program 7 (id=5928): r0 = socket$inet_tcp(0x2, 0x1, 0x0) r1 = bpf$PROG_LOAD_XDP(0x5, &(0x7f00000006c0)={0x6, 0x3, &(0x7f0000000680)=ANY=[@ANYBLOB="1800000002000000000000000000000095"], &(0x7f0000000040)='syzkaller\x00'}, 0x94) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f00000004c0)={r1, 0x5, 0x14, 0x0, &(0x7f00000001c0)="2e9a53f271a76d2608004c6588a80a38667d2f15", 0x0, 0x8, 0x2a0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x400000}, 0x50) r2 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_CREATE(r2, &(0x7f00000000c0)={0x0, 0x0, &(0x7f00000044c0)={0x0}, 0x1, 0x0, 0x0, 0x1}, 0x80) (async) r3 = socket$inet_sctp(0x2, 0x5, 0x84) setsockopt$inet_sctp_SCTP_RTOINFO(r3, 0x84, 0x0, &(0x7f0000001140)={0x0, 0xf89, 0x8, 0x49}, 0x10) socketpair(0x11, 0x2, 0x8, &(0x7f0000000080)={0xffffffffffffffff}) (async) r5 = socket$inet6_sctp(0xa, 0x5, 0x84) setsockopt$IP6T_SO_SET_REPLACE(r5, 0x29, 0x40, &(0x7f0000000980)=@raw={'raw\x00', 0x8, 0x3, 0x328, 0x148, 0xffffffff, 0xffffffff, 0x0, 0xffffffff, 0x258, 0xffffffff, 0xffffffff, 0x258, 0xffffffff, 0x3, 0x0, {[{{@ipv6={@private0, @mcast2, [0x0, 0x0, 0x0, 0xff], [0x0, 0x0, 0x0, 0xffffffff], 'dvmrp0\x00', 'dvmrp1\x00', {}, {}, 0x0, 0xfd, 0x4}, 0x0, 0x120, 0x148, 0x0, {}, [@common=@unspec=@nfacct={{0x48}, {'syz0\x00', 0x6a5f}}, @common=@frag={{0x30}, {[0x2d, 0x200], 0x0, 0x8, 0x2}}]}, @common=@unspec=@NFQUEUE0={0x28, 'NFQUEUE\x00', 0x0, {0x7}}}, {{@uncond, 0x0, 0xa8, 0x110}, @unspec=@CT1={0x68, 'CT\x00', 0x1, {0x10, 0x2, 0x9c, 0x5, 'syz0\x00', 'syz1\x00', {0x159c}}}}], {{'\x00', 0x0, 0xa8, 0xd0}, {0x28, '\x00', 0x7}}}}, 0x388) (async) bind$inet(r0, &(0x7f0000000000)={0x2, 0x4e21, @broadcast}, 0x2f) ioctl$XFS_IOC_PATH_TO_HANDLE(0xffffffffffffffff, 0xc0385869, &(0x7f0000000380)={r4, &(0x7f0000000240)='-,%^]:/@@\x00', 0x40, &(0x7f0000000280)={@_ha_fsid={[0x2, 0x9]}, {0xfff5, 0x1, 0x6, 0x7ff}}, 0x0, &(0x7f00000002c0)={@_ha_fsid}, &(0x7f0000000340)=0x7}) r7 = bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000440)=ANY=[@ANYBLOB="0200000004000000080000000100000080000000", @ANYRES32=r0, @ANYBLOB="0d000000001f0000000000000000000000000000a4", @ANYRES32=0x0, @ANYRES32, @ANYBLOB="03000000020000000100"/28], 0x50) bpf$PROG_BIND_MAP(0x23, &(0x7f00000005c0)={r6, r7}, 0xc) (async) setsockopt$inet_tcp_TCP_CONGESTION(r0, 0x6, 0xd, &(0x7f0000000100)='scalable', 0x8) connect$inet(r0, &(0x7f0000000180)={0x2, 0x4e21, @dev={0xac, 0x14, 0x14, 0x1b}}, 0x10) (async) r8 = socket$kcm(0x10, 0x2, 0x4) (async) r9 = syz_genetlink_get_family_id$nbd(&(0x7f0000000040), 0xffffffffffffffff) sendmsg$NBD_CMD_CONNECT(0xffffffffffffffff, &(0x7f0000001ac0)={0x0, 0x0, &(0x7f0000001a80)={&(0x7f00000002c0)=ANY=[@ANYBLOB="2c000010", @ANYRES16=r9, @ANYBLOB="010000000000ffdbdf25010000000c000200ff070000000000000c0003000700000000000000"], 0x2c}, 0x1, 0x0, 0x0, 0x40008090}, 0x2048044) (async) syz_genetlink_get_family_id$nbd(0x0, 0xffffffffffffffff) (async, rerun: 32) sendmsg$kcm(r8, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000040)=[{&(0x7f0000000840)="89000000120081ae08060cdc030000fe7f03214e000000000001ffca1b1f0000000024c00e72f750375ed08a56331dbf9ed7815e381ad6e747033a0093b837dc6cc01e32efaec8c7a6ec00150c00014003080c00bdad446b31007a46e3988285dcdf12f21308f868fece01955fed0009d78f0a947e", 0x75}, {&(0x7f0000000140)="11d6cb557c8496a2fe7a", 0xa}], 0x2}, 0x4000000) (async, rerun: 32) unshare(0x2c020400) (async, rerun: 64) unshare(0x1e030300) (rerun: 64) r10 = openat$ppp(0xffffffffffffff9c, &(0x7f0000000400), 0x0, 0x0) ioctl$TUNSETOFFLOAD(r10, 0x4004743d, 0x40b942b37d0000) r11 = socket(0x400000000010, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r11, 0x8933, &(0x7f0000000100)={'batadv_slave_0\x00', 0x0}) sendmsg$nl_route_sched(r11, &(0x7f00000012c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000000c0)=@newqdisc={0x24, 0x24, 0x4ee4e6a52ff56541, 0x70bd2a, 0xfffffffd, {0x0, 0x0, 0x0, r12, {0x0, 0x1}, {0xffff, 0xa}, {0x1d, 0x9}}}, 0x24}}, 0x0) (async) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000002100)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000001300)=@newtfilter={0x49c, 0x2c, 0xf3f, 0x70bd2c, 0x25dfdbfd, {0x0, 0x0, 0x0, r12, {0xb, 0xfff3}, {}, {0x7, 0xffff}}, [@filter_kind_options=@f_flow={{0x9}, {0x46c, 0x2, [@TCA_FLOW_KEYS={0x8, 0x1, 0x25cb}, @TCA_FLOW_MODE={0x8, 0x2, 0x1}, @TCA_FLOW_RSHIFT={0x8, 0x4, 0x2}, @TCA_FLOW_EMATCHES={0x450, 0xb, 0x0, 0x1, [@TCA_EMATCH_TREE_LIST={0x180, 0x2, 0x0, 0x1, [@TCF_EM_CANID={0x14, 0x2, 0x0, 0x0, {{0x0, 0x7, 0xfff8}, {{0x3, 0x0, 0x1, 0x1}, {0x2, 0x1, 0x1}}}}, @TCF_EM_META={0xac, 0x1, 0x0, 0x0, {{0x1a, 0x4, 0x5}, [@TCA_EM_META_RVALUE={0x17, 0x3, [@TCF_META_TYPE_INT=0x5, @TCF_META_TYPE_VAR="9d1c9bc5193598", @TCF_META_TYPE_INT, @TCF_META_TYPE_INT=0x2]}, @TCA_EM_META_LVALUE={0x6, 0x2, [@TCF_META_TYPE_VAR="70d2"]}, @TCA_EM_META_LVALUE={0x2e, 0x2, [@TCF_META_TYPE_INT=0x5, @TCF_META_TYPE_INT=0xb, @TCF_META_TYPE_VAR="44a1e81a62c814f704", @TCF_META_TYPE_VAR="b1030a16a9cf00b7", @TCF_META_TYPE_INT, @TCF_META_TYPE_INT=0x4, @TCF_META_TYPE_VAR="53f0eb11f187c5a5bd"]}, @TCA_EM_META_HDR={0xc, 0x1, {{0x476, 0x1, 0x2}, {0x6, 0x4, 0x1}}}, @TCA_EM_META_LVALUE={0x14, 0x2, [@TCF_META_TYPE_INT=0x2, @TCF_META_TYPE_INT=0x9, @TCF_META_TYPE_VAR="e9ae41aee938b901"]}, @TCA_EM_META_LVALUE={0x24, 0x2, [@TCF_META_TYPE_INT=0x2, @TCF_META_TYPE_VAR="58583aa43f7a", @TCF_META_TYPE_INT=0x5, @TCF_META_TYPE_VAR="8efb9076c043", @TCF_META_TYPE_INT, @TCF_META_TYPE_INT=0x3, @TCF_META_TYPE_VAR, @TCF_META_TYPE_INT=0x2]}, @TCA_EM_META_HDR={0xc, 0x1, {{0x5, 0x4, 0x1}, {0x2, 0x3}}}]}}, @TCF_EM_CONTAINER={0x90, 0x2, 0x0, 0x0, {{0x2}, "fd834d368634cf169c0f14116a8a54e30f6fb606ed67e6b50d6491e8927e3d1f95466e952c981d5e883eabbe54faa944f09640443adf63888d3f6ad57e80d28eb1004b99a859963a96f6b687bf78589a38e2a7721c905e8307b954f4b4a28cba98ddf39d666b8020f14a7ff100d23e6504e1a095d8b2a9eaac134ce69023860196913f37"}}, @TCF_EM_NBYTE={0x18, 0x1, 0x0, 0x0, {{0xf, 0x2, 0x8}, {0x1, 0x7, 0x2, "d36eb63c80b6c3"}}}, @TCF_EM_CANID={0x14, 0x3, 0x0, 0x0, {{0x6, 0x7, 0xc}, {{0x2, 0x0, 0x0, 0x1}, {0x2, 0x1, 0x1, 0x1}}}}]}, @TCA_EMATCH_TREE_LIST={0x174, 0x2, 0x0, 0x1, [@TCF_EM_CONTAINER={0x9c, 0x1, 0x0, 0x0, {{0xfffc, 0x0, 0xe}, "c57dc443fe215849ee833064c937aee781a5a585d944597b0aae850c65f9e48961afb2610851c15e532aff5701c8168dc92a68b51df3dbbee8a8750176bc8ab723e92cf0674c9674f58daf3c0cb7ec552b2484da92099f5f5decb97d8431995dc38be54279e72f3f19dc2516939e5601cc27fa5440608ddfd6d082f0c1628a4c477e2e79e18fd64fcdd5d56d9bec"}}, @TCF_EM_META={0xbc, 0x1, 0x0, 0x0, {{0x3, 0x4, 0xfffa}, [@TCA_EM_META_RVALUE={0xc, 0x3, [@TCF_META_TYPE_INT=0x7, @TCF_META_TYPE_INT]}, @TCA_EM_META_LVALUE={0x27, 0x2, [@TCF_META_TYPE_VAR="07ca806d9404a6", @TCF_META_TYPE_VAR="fec05e", @TCF_META_TYPE_VAR, @TCF_META_TYPE_INT=0x2, @TCF_META_TYPE_INT=0x9, @TCF_META_TYPE_INT, @TCF_META_TYPE_INT=0x4, @TCF_META_TYPE_INT=0xfffffffe, @TCF_META_TYPE_INT=0x6, @TCF_META_TYPE_VAR="93"]}, @TCA_EM_META_HDR={0xc, 0x1, {{0x5, 0x1, 0x1}, {0x0, 0x9, 0x2}}}, @TCA_EM_META_HDR={0xc, 0x1, {{0x8, 0x6, 0x2}, {0x9804, 0x7, 0x2}}}, @TCA_EM_META_LVALUE={0x10, 0x2, [@TCF_META_TYPE_VAR="93ad9c40e7a63ccd9dd7", @TCF_META_TYPE_VAR="3cea"]}, @TCA_EM_META_RVALUE={0xd, 0x3, [@TCF_META_TYPE_VAR, @TCF_META_TYPE_VAR="d914a9cd7992d3a95f"]}, @TCA_EM_META_HDR={0xc, 0x1, {{0xfff6, 0x2, 0x2}, {0x2, 0xac, 0x2}}}, @TCA_EM_META_LVALUE={0x22, 0x2, [@TCF_META_TYPE_INT=0x1, @TCF_META_TYPE_INT=0x6, @TCF_META_TYPE_INT=0x5, @TCF_META_TYPE_INT=0x2, @TCF_META_TYPE_INT=0xa, @TCF_META_TYPE_VAR="84061d9d0806b2207a67"]}, @TCA_EM_META_LVALUE={0x14, 0x2, [@TCF_META_TYPE_INT=0x8, @TCF_META_TYPE_VAR='jaB)', @TCF_META_TYPE_VAR='?', @TCF_META_TYPE_INT, @TCF_META_TYPE_VAR="ac2e72"]}]}}, @TCF_EM_CMP={0x18, 0x2, 0x0, 0x0, {{0x3, 0x1, 0x10}, {0x7, 0x9, 0xfff, 0x1, 0x0, 0x1, 0x2}}}]}, @TCA_EMATCH_TREE_HDR={0x8, 0x1, {0x5fc9}}, @TCA_EMATCH_TREE_HDR={0x8, 0x1, {0x8000}}, @TCA_EMATCH_TREE_LIST={0x114, 0x2, 0x0, 0x1, [@TCF_EM_META={0x34, 0x3, 0x0, 0x0, {{0x7a4, 0x4, 0x25f1}, [@TCA_EM_META_RVALUE={0x22, 0x3, [@TCF_META_TYPE_VAR="ba0e689bb1", @TCF_META_TYPE_VAR="24201621032806541c1c", @TCF_META_TYPE_VAR="8c", @TCF_META_TYPE_VAR="4962e49c76", @TCF_META_TYPE_VAR="206457a330859db940"]}, @TCA_EM_META_RVALUE={0x4}]}}, @TCF_EM_U32={0x1c, 0x3, 0x0, 0x0, {{0x4, 0x3, 0x1829}, {0xa, 0x1, 0x6, 0x7}}}, @TCF_EM_IPSET={0x10, 0x3, 0x0, 0x0, {{0x5, 0x8, 0x18}, {0x0, 0x0, 0x1}}}, @TCF_EM_IPSET={0x10, 0x1, 0x0, 0x0, {{0x400, 0x8, 0x4}, {0xffffffffffffffff, 0x3, 0x2}}}, @TCF_EM_CONTAINER={0x24, 0x1, 0x0, 0x0, {{0x2, 0x0, 0x3}, "471fb695fd8e2dae58a36cbeb54fc4f0e28257b2ea86"}}, @TCF_EM_U32={0x1c, 0x2, 0x0, 0x0, {{0x4, 0x3, 0x4}, {0x1, 0x3ff, 0x1, 0x3ff}}}, @TCF_EM_U32={0x1c, 0x2, 0x0, 0x0, {{0x4, 0x3, 0x1}, {0x7, 0x5, 0xfffffc01, 0x4}}}, @TCF_EM_IPT={0x1c, 0x3, 0x0, 0x0, {{0x797, 0x9, 0x80}, [@TCA_EM_IPT_MATCH_REVISION={0x5, 0x3, 0x9}, @TCA_EM_IPT_HOOK={0x8, 0x1, 0x2}]}}, @TCF_EM_CONTAINER={0x28, 0x3, 0x0, 0x0, {{0x40}, "3f4b8977066ce802a4702dc7c9bb0ff8b65b330852cba26c19"}}]}, @TCA_EMATCH_TREE_LIST={0x34, 0x2, 0x0, 0x1, [@TCF_EM_CMP={0x18, 0x1, 0x0, 0x0, {{0x1, 0x1, 0x7}, {0xd, 0x4, 0x100, 0x5, 0x2, 0x2, 0x1}}}, @TCF_EM_NBYTE={0x18, 0x2, 0x0, 0x0, {{0xe000, 0x2, 0xfc3}, {0x3, 0x8, 0x1, "8441b1f2f7613cde"}}}]}]}]}}]}, 0x49c}, 0x1, 0x0, 0x0, 0x20041090}, 0xd0) (async, rerun: 32) setsockopt$inet_mreqn(0xffffffffffffffff, 0x0, 0x23, &(0x7f0000000200)={@loopback, @rand_addr=0x64010100, r12}, 0xc) (rerun: 32) 2.824183515s ago: executing program 1 (id=5929): r0 = socket$netlink(0x10, 0x3, 0x0) r1 = socket(0x10, 0x803, 0x0) sendmsg$IPVS_CMD_SET_INFO(r1, &(0x7f0000000b00)={0x0, 0x0, &(0x7f0000000ac0)={0x0, 0x14}}, 0x0) r2 = socket(0x10, 0x2, 0x0) write(r2, &(0x7f0000000000)="240000001e005f80004000000000000002000000006000000000080008000100000000ff", 0x24) getsockname$packet(r1, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) r4 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r4, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000380)=ANY=[@ANYBLOB="3c0000001000850600"/20, @ANYRES32=r3, @ANYBLOB="01000000020000001c0012000c000100626f6e64000000000c0002000800010005"], 0x3c}}, 0x0) sendmsg$nl_route(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000180)=ANY=[@ANYBLOB="4800000010001fff000000008100000000000000", @ANYRES32=0x0, @ANYBLOB="00000000003f0000200012800b00010067656e657665000010000280060005004e24000004000e0008000a00", @ANYRES32=r3], 0x48}, 0x1, 0x0, 0x0, 0x2000c0c1}, 0x40000) socket$netlink(0x10, 0x3, 0x0) (async) socket(0x10, 0x803, 0x0) (async) sendmsg$IPVS_CMD_SET_INFO(r1, &(0x7f0000000b00)={0x0, 0x0, &(0x7f0000000ac0)={0x0, 0x14}}, 0x0) (async) socket(0x10, 0x2, 0x0) (async) write(r2, &(0x7f0000000000)="240000001e005f80004000000000000002000000006000000000080008000100000000ff", 0x24) (async) getsockname$packet(r1, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) (async) socket$nl_route(0x10, 0x3, 0x0) (async) sendmsg$nl_route(r4, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000380)=ANY=[@ANYBLOB="3c0000001000850600"/20, @ANYRES32=r3, @ANYBLOB="01000000020000001c0012000c000100626f6e64000000000c0002000800010005"], 0x3c}}, 0x0) (async) sendmsg$nl_route(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000180)=ANY=[@ANYBLOB="4800000010001fff000000008100000000000000", @ANYRES32=0x0, @ANYBLOB="00000000003f0000200012800b00010067656e657665000010000280060005004e24000004000e0008000a00", @ANYRES32=r3], 0x48}, 0x1, 0x0, 0x0, 0x2000c0c1}, 0x40000) (async) 2.76152029s ago: executing program 7 (id=5930): r0 = socket$inet6(0xa, 0x2, 0x0) bind$inet6(r0, &(0x7f0000f5dfe4)={0xa, 0x4e20, 0x0, @empty}, 0x1c) recvmmsg(r0, &(0x7f00000060c0)=[{{0x0, 0x0, &(0x7f0000004d40)=[{&(0x7f0000002880)=""/60, 0x3c}, {&(0x7f0000002940)=""/144, 0x58}], 0x2}}], 0x1, 0x10002, 0x0) syz_emit_ethernet(0xbe, &(0x7f0000000000)={@dev={'\xaa\xaa\xaa\xaa\xaa', 0x23}, @remote, @void, {@ipv4={0x800, @udp={{0x5, 0x4, 0x0, 0x0, 0xb0, 0x0, 0x0, 0x0, 0x11, 0x0, @empty, @empty}, {0x0, 0x4e20, 0x9c, 0x0, @wg=@initiation={0x1, 0x0, "7b4b143b7461fd777b1c012bd14efb9f49fcdb8f080c26a04883ad5c8c82b8af", "584cbf2649a50f2dbc43efa8698d0a881c51852e4451b57d037ad3c045942824251d7d17b5191584bcd4fbe40a23424d", "bcfd56f1375461caaa2f19935e6996c7096ffeeb0300000000000064", {"9a3bfbc1d19cb307b3472ab9cdb042d2", "643fcbb2c5a57df67d074af6e8dafe09"}}}}}}}, 0x0) r1 = socket(0x2, 0x80805, 0x0) getsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX3(r1, 0x84, 0x6f, 0x0, &(0x7f0000000180)) setsockopt$IP_VS_SO_SET_ADDDEST(0xffffffffffffffff, 0x0, 0x487, &(0x7f0000000000)={{0x84, @broadcast, 0x4e20, 0x3, 'lc\x00', 0x5, 0x8, 0x77}, {@remote, 0x4e20, 0x1, 0xcd}}, 0x44) getsockopt$bt_hci(r1, 0x84, 0x11, &(0x7f0000000000)=""/4102, &(0x7f0000001040)=0x1006) r2 = socket$netlink(0x10, 0x3, 0x8000000004) syz_emit_ethernet(0x42, &(0x7f0000001180)=ANY=[@ANYBLOB="aaaaaaaaaaaa00020000000086dd60aba24b9f000c1100fe8000400000000000000000000000bbfe80000000000000000000000000000012ce59e39cddf3a6ae5544e5464980656553f0c3c9718e087a8d0da2e46e3d1c733eb91fa320ce9e45baa78f67b2b8c0cfcd9560ef34987c6b1f7413ce176d"], 0x0) writev(r2, &(0x7f0000000180)=[{&(0x7f00000001c0)="580000001500add427323b472545b45602117fffffff81004e22d991000000000000a80013007b00090080007f000001e809000000ff0000f03ac7100003ffffffffffffffffffffffe7ee000000deff0000000200000000", 0x58}], 0x1) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000300)={0x6, 0x3, &(0x7f0000000680)=ANY=[@ANYBLOB="1800000002000000000000000000000095"], 0x0, 0x5, 0x0, 0x0, 0x60ff78ce1cb3c070}, 0x94) r3 = bpf$PROG_LOAD_XDP(0x5, &(0x7f0000007300)={0x6, 0x3, &(0x7f0000000680)=ANY=[], &(0x7f0000006200)='syzkaller\x00', 0x7, 0x0, 0x0, 0x0, 0x4c, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x2}, 0x94) r4 = openat$tun(0xffffffffffffff9c, &(0x7f0000000000), 0x48241, 0x0) ioctl$TUNSETIFF(r4, 0x400454ca, &(0x7f00000000c0)={'syzkaller1\x00', 0x6bf1c2d5adba8c32}) r5 = socket$kcm(0x2, 0xa, 0x2) ioctl$SIOCSIFHWADDR(r5, 0x8914, &(0x7f0000000180)={'syzkaller1\x00', @link_local={0x1, 0x80, 0xc2, 0x0, 0x0, 0xe}}) r6 = socket$nl_netfilter(0x10, 0x3, 0xc) bind$xdp(0xffffffffffffffff, &(0x7f0000000100)={0x2c, 0x2}, 0x10) sendmsg$NFT_BATCH(r6, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000040)=ANY=[@ANYBLOB="14000000100004fd3b64930b465870000000000a20000000000a01020000000000000000010000000900010073797a300000000058000000160a01000000000000000000010000000900010073797a30000000000900020073797a30000000002c0003800800014000000000080002400000000010000380140001007465616d3000000000000000000000005c000000160a0101000b000000000000010000000900020073797a30000000000900010073797a3000000000300003802c00038014"], 0xfc}}, 0x0) write$tun(r4, &(0x7f0000000300)={@void, @void, @eth={@multicast, @multicast, @val={@val={0x88a8, 0x5, 0x1, 0x4}, {0x8100, 0x6, 0x0, 0x6}}, {@ipv6={0x86dd, @tipc_packet={0xb, 0x6, "5afbeb", 0x1a, 0x6, 0xff, @mcast2, @private2, {[], @payload_conn={{{0x1a, 0x0, 0x1, 0x0, 0x0, 0x6, 0x1, 0x2, 0x7, 0x0, 0x0, 0xf, 0x3, 0x0, 0x3, 0x4, 0x3, 0x4e22, 0x4e21}}, [0x0, 0x0]}}}}}}}, 0x58) ioctl$ifreq_SIOCGIFINDEX_wireguard(0xffffffffffffffff, 0x8933, &(0x7f00000002c0)={'wg2\x00', 0x0}) sendmsg$WG_CMD_SET_DEVICE(0xffffffffffffffff, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000002040)=ANY=[@ANYBLOB='@\r\x00\x00', @ANYRES16, @ANYBLOB="05000000000000000000010000000600060000000000c40c0880e400008024000100d1732899f611cd8994034d7f413dc957630e5493c285aca40065cb6311be696b24000100000000000000000000000000000000000000000000000000000000000000000024000200fcbefe9641719404cc5c9ab2766dd4793e367b0ea55e65e2e3416ac9d4e68841240002001171ee8da334a5099295af229a5d237a7f4102f01f28b34347d6cbbe135d83ec24000100975c9d81c983c8209ee781254b899f8ed925ae9f0923c23c62f53c57cdbf691c0800030000000000240002005da952055e5857d673cddd36909746c80efa3ff95c317de1063db32bc80a0b3e0003008024000100dbffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffff0600050000000000d002098058000080060001000200000008000200ac1e00010500030000000000060001000a00000014000200000000000000000000000000000000010500030000000000060001000200000008000200ffffffff05000300000000007c000080060001000a00000014000200000000000000000000000000000000010500030000000000060001000200000008000200ac1414bb0500030000000000060001000a00000014000200000000000000000000000000000000010500030000000000060001000200000008000200000000000500030000000000dc000080060001000a0000001400020000000000000000000000ffffac1414aa05000300000000000600010002000000080002000000000005000300000000000600010002000000080002007f0000010500030000000000060001000200000008000200000000000500030000000000060001000200000008000200e00000010500030000000000060001000a00000014000200fc0100000000000000000000000000000500030000000000060001000200000008000200000000000500030000000000060001000200000008000200ac1e0001050003000000000094000080060001000a00000014000200fc0200000000000000000000000000000500030000000000060001000a00000014000200ff0100000000000000000000000000010500030000000000060001000200000008000200e00000010500030000000000060001000200000008000200ac1414bb0500030000000000060001000200000008000200ffffffff050003000000000088000080060001000a00000014000200fe8000000000000000000000000000aa0500030000000000060001000200000008000200ac1414aa0500030000000000060001000a00000014000200fe8800000000000000000000000000010500030000000000060001000a00000014000200ff020000000000000000000000000001050003000000000064000080080003000000000008000a000100000024000100f44da367a88ee6564f020211456727082f5cebee8b1bf5eb7337341b459b3922080003000000000024000200379aa288b2244a5b504ba04bea45625d328fb93b62e607a1b2e4da2f7f76a5499400008024000100975c9d81c983c8209ee781254b899f8ed925ae9f0923c23c62f53c57cdbf691c080003000000000024000100f44da367a88ee6564f020211456727082f5cebee8b1bf5eb7337341b459b3922080003000000000024000100d1732899f611cd8994034d7f413dc957630e5493c285aca40065cb6311be696b1400040002000000000000000000000000000000d807008000030980f4000080060001000a00000014000200000000000000000000000000000000000500030000000000060001000a00000014000200fc0000000000000000000000000000000500030000000000060001000200000008000200ffffffff0500030000000000060001000200000008000200ac1e00010500030000000000060001000200000008000200e000000105000300000000000600010002000000080002007f0000010500030000000000060001000a00000014000200000000000000000000000000000000010500030000000000060001000a00000014000200fc01000000000000000000000000000005000300000000004c000080060001000200000008000200ac1414bb0500030000000000060001000200000008000200000000000500030000000000060001000200000008000200ac1414bb05000300000000000c010080060001000a00000014000200200100000000000000000000000000010500030000000000060001000200000008000200e000000205000300000000000600010002000000080002000000000005000300000000000600010002000000080002007f0000010500030000000000060001000a00000014000200fe8800000000000000000000000000010500030000000000060001000a00000014000200fe8000000000000000000000000000bb0500030000000000060001000200000008000200ffffffff0500030000000000060001000200000008000200e00000010500030000000000060001000a00000014000200fc0100000000000000000000000000000500030000000000940000800600010002000000080002000000000005000300000000000600010002000000080002000000000005000300000000000600010002000000080002007f0000010500030000000000060001000200000008000200e00000020500030000000000060001000200000008000200ac1414000500030000000000060001000200000008000200ac14140005000300000000001c000080060001000200000008000200ffffffff0500030000000000080003000000000024000100f44da367a88ee6564f020211456727082f5cebee8b1bf5eb7337341b459b39221d0004000a0000000000000000000000000000000000ffffac1e0001000000001c04098094000080060001000a0000001400020000000000000000000000ffffac1414bb0500030000000000060001000a00000014000200fe8800000000000000000000000000010500030000000000060001000a00000014000200ff0100000000000000000000000000010500030000000000060001000a00000014000200fe880000000000000000000000000001050003000000000064000080060001000a00000014000200fe8000000000000000000000000000bb0500030000000000060001000200000008000200ac1414bb0500030000000000060001000a0000001400020000000000000000000000ffffe00000020500030000000000ac000080060001000200000008000200000000000500030000000000060001000a00000014000200fe80000000000000000000000000000005000300000000000600010002000000080002007f0000010500030000000000060001000200000008000200ac1414bb0500030000000000060001000a00000014000200000000000000000000000000000000010500030000000000060001000200000008000200e0000001050003000000000064000080060001000a00000014000200fc0100000000000000000000000000000500030000000000060001000a00000014000200fe8000000000000000000000000000bb0500030000000000060001000200000008000200ac1414000500030000000000f4000080060001000200000008000200000000000500030000000000060001000a00000014000200200100000000000000000000000000000500030000000000060001000a00000014000200fc0200000000000000000000000000000500030000000000060001000a00000014000200fe8000000000000000000000000000aa0500030000000000060001000200000008000200ac1414aa0500030000000000060001000200000008000200000000000500030000000000060001000200000008000200ac1414000500030000000000060001000a00000014000200200100000000000000000000000000020500030000000000a0000080060001000a00000014000200fc0000000000000000000000000000000500030000000000060001000200000008000200ac1414aa0500030000000000060001000a00000014000200fe8800000000000000000000000000010500030000000000060001000a00000014000200fe8000000000000000000000000000aa0500030000000000060001000200000008000200ac14140005000300000000007c000080060001000200000008000200ac1414aa0500030000000000060001000a00000014000200fe8000000000000000000000000000000500030000000000060001000200000008000200e00000010500030000000000060001000a00000014000200fe8000000000000000000000000000bb050003000000000024000100d1732899f611cd8994034d7f413dc957630e5493c285aca40065cb6311be696b2400020055fbc2635cc801d67c589cc98f3cf65074dffe0886750dec83be49fbf628e1dc240002000f1b8b82264208ab1a2dce776c03b9f348f500ef8e7606466943f5ba2ae2881e0c0000800800030000000000060006000000000008000100", @ANYRES32=r7, @ANYBLOB="24000300000000000000000000000000000000000000000000000000000000000000000024000300a05ca84f6c9c8e3853e2fd7a7cae0fb20fa152600cb00845174f08076f8d7843080007"], 0xd40}}, 0x8) r8 = socket$packet(0x11, 0x3, 0x300) setsockopt$packet_int(r8, 0x107, 0x14, &(0x7f0000000080)=0xfff, 0x4) socketpair(0x1, 0x100000005, 0x0, &(0x7f0000000000)={0xffffffffffffffff}) getpeername$packet(r9, &(0x7f0000000000)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @dev}, &(0x7f0000000040)=0x14) sendmmsg(r8, &(0x7f0000000440)=[{{&(0x7f0000000700)=@xdp={0x2c, 0x0, r10}, 0x80, &(0x7f00000004c0)=[{&(0x7f0000000180)='O', 0x36}], 0x1}}], 0x1, 0x0) ioctl$sock_ipv4_tunnel_SIOCDELTUNNEL(0xffffffffffffffff, 0x89f2, &(0x7f0000001140)={'erspan0\x00', &(0x7f00000010c0)={'ip_vti0\x00', 0x0, 0x8, 0x20, 0x8, 0x3529, {{0xb, 0x4, 0x3, 0x6, 0x2c, 0x64, 0x0, 0x9, 0x29, 0x0, @loopback, @loopback, {[@ra={0x94, 0x4}, @cipso={0x86, 0x13, 0xffffffffffffffff, [{0x1, 0x2}, {0x5, 0x9, "59b7560924c9bf"}, {0x2, 0x2}]}, @noop]}}}}}) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000600)={r3, 0x5, 0xb68, 0x0, &(0x7f0000000000)='%', 0x0, 0xd01, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2}, 0x48) 2.522007988s ago: executing program 1 (id=5932): syz_init_net_socket$bt_hci(0x1f, 0x3, 0x5) syz_open_procfs$namespace(0x0, 0x0) unshare(0x62040400) r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$l2tp(&(0x7f0000000140), 0xffffffffffffffff) sendmsg$L2TP_CMD_TUNNEL_CREATE(r0, &(0x7f0000000380)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000003c0)=ANY=[@ANYBLOB='\\\x00\x00\x00', @ANYRES16=r1, @ANYBLOB="0100000000000000000001000500050007000000000008000900030000001400200040000000000000000000e1ffe000000108000a0000000000060002000100000014001f"], 0x5c}, 0x1, 0x6c}, 0x0) r2 = socket$alg(0x26, 0x5, 0x0) bind$alg(r2, &(0x7f00000002c0)={0x26, 'aead\x00', 0x0, 0x0, 'rfc4106(gcm(aes))\x00'}, 0x58) setsockopt$ALG_SET_KEY(r2, 0x117, 0x1, &(0x7f00000009c0)="ad56b6c5820fae9d6dcd3292ea54c7be8bbdadbb1632ea5704cae881ef915d374c90c200", 0x24) r3 = accept4(r2, 0x0, 0x0, 0x800) sendmmsg$alg(r3, &(0x7f0000000c00)=[{0x0, 0x0, 0x0, 0x0, &(0x7f0000000140)=[@assoc={0x18, 0x117, 0x4, 0x10}, @op={0x18, 0x117, 0x3, 0x1}], 0x30, 0x40040}], 0x1, 0x8040) sendmsg$RDMA_NLDEV_CMD_GET(r3, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000100)={0x10, 0x1401, 0x400, 0x70bd25, 0x25dfdbff}, 0x10}}, 0x0) recvmsg(r3, &(0x7f0000001600)={0x0, 0x0, &(0x7f0000001500)=[{&(0x7f0000001240)=""/47, 0x2f}], 0x1}, 0x10002) sendmsg$IPSET_CMD_CREATE(0xffffffffffffffff, &(0x7f0000000440)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000200)=ANY=[@ANYBLOB="3000000002060101000000000000000000f90003050005000a0000000900020073797a3000000000050001009f"], 0x30}}, 0x0) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x6, 0xc, &(0x7f00000001c0)=ANY=[@ANYBLOB="180000000000000000000000000000001811", @ANYRES32, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bc82000000000000a6020000f8ffffffb703000008000000b70300000000000085000000330000"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @xdp, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r4 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_route(r4, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000200)=ANY=[@ANYBLOB="300000001c0001000000000004086aa42d"], 0x30}}, 0x0) 2.455920293s ago: executing program 6 (id=5933): r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000640)=ANY=[@ANYBLOB="1e0000000000000004000000ff"], 0x48) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000a40)={0x3, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b7"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x1c}, 0x94) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000680)={0xffffffffffffffff, 0xffffffffffffffff}) setsockopt$sock_attach_bpf(r1, 0x1, 0x4c, &(0x7f0000000000), 0x4) r2 = socket$inet_tcp(0x2, 0x1, 0x0) setsockopt$ARPT_SO_SET_REPLACE(r2, 0x0, 0x60, &(0x7f0000000140)={'filter\x00', 0x7, 0x4, 0x3c0, 0x108, 0x1f0, 0x0, 0x108, 0x2d8, 0x108, 0x4, 0x0, {[{{@uncond, 0xc0, 0x108}, @unspec=@LED={0x48, 'LED\x00', 0x0, {'syz1\x00'}}}, {{@uncond, 0xc0, 0xe8, 0x0, {0xa00}}, @unspec=@STANDARD={0x28, '\x00', 0x0, 0xffffffffffffffff}}, {{@uncond, 0xc0, 0xe8}, @unspec=@NFQUEUE2={0x28}}], {{'\x00', 0xc0, 0xe8}, {0x28}}}}, 0x410) r3 = socket(0x40000000015, 0x5, 0x0) connect$inet(r3, &(0x7f0000000040)={0x2, 0x4e20, @loopback}, 0x10) r4 = bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000140)={&(0x7f0000000040)=ANY=[@ANYBLOB="9feb01001800000000000000180000001800000004000000020000000100000c02000000000000000000000d0000000000005f"], 0x0, 0x34}, 0x20) r5 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x11, 0x3, &(0x7f0000000100)=ANY=[@ANYBLOB="180000000100000000000000801800009500000000000000"], &(0x7f0000000000)='GPL\x00', 0xc, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, r4, 0x8, &(0x7f00000000c0)={0x0, 0x1}, 0x1}, 0x94) bpf$BPF_PROG_WITH_BTFID_LOAD(0x5, &(0x7f0000000500)=@bpf_ext={0x1a, 0x3, &(0x7f0000000080)=ANY=[@ANYBLOB="ffffffff4f0c00000000008cad2172b8a29f67450011b676"], &(0x7f0000000180)='GPL\x00', 0x7, 0x0, 0x0, 0x41000, 0x20, '\x00', 0x0, 0x1c, r4, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x1, r5, 0x0, 0x0, 0x0, 0x10, 0x4a7}, 0x94) setsockopt$SO_RDS_TRANSPORT(r3, 0x114, 0x8, &(0x7f00000008c0)=0x2, 0x4) setsockopt$sock_int(r3, 0x1, 0x21, &(0x7f00006dbffc), 0x4) bind$inet(r3, &(0x7f0000000340)={0x2, 0x4e20, @loopback}, 0x57) sendmsg$xdp(r3, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000840)=[{&(0x7f0000000d00)="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", 0x3f1}, {&(0x7f00000003c0)="128b9306006d4810e5ac5040ad9201847839fc378469d5765b9cc241840896c1498194a7197b45d74a8532b82037b02c9e6045c361eb", 0x36}, {&(0x7f0000000200)="0000000000aa303e97380e90231bdbdaf6a4bd866226b7cdb7c26858c4e4fd703be2f51ed6ddc4a47116ec2db75c7042a22491af0ffea4174a9de3350c0a498396b28c7d1784d04aa38922721cb7816094cb82950fd012efd26d", 0x5a}], 0x3, 0x0, 0x0, 0x10}, 0x0) bpf$ENABLE_STATS(0x20, 0x0, 0x0) r6 = bpf$PROG_LOAD(0x5, &(0x7f0000000280)={0x11, 0x13, &(0x7f0000000380)=ANY=[@ANYBLOB="180000000000000000000000000000001801000020646c1300000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000048aa008085000000710000001801000020756c2500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000000700000095"], &(0x7f0000000080)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x2, '\x00', 0x0, @fallback=0x2e, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$PROG_BIND_MAP(0xa, &(0x7f0000000540)={r6}, 0xc) bpf$BPF_BTF_LOAD(0x12, 0x0, 0x0) r7 = socket$nl_route(0x10, 0x3, 0x0) epoll_create(0x7) r8 = socket$nl_rdma(0x10, 0x3, 0x14) sendmsg$RDMA_NLDEV_CMD_STAT_GET(r8, &(0x7f0000001a00)={0x0, 0x0, &(0x7f00000019c0)={&(0x7f0000000bc0)=ANY=[@ANYBLOB="2800000011148d8a29bd7000fcdbdf2508004b0013000000080001"], 0x28}, 0x1, 0x0, 0x0, 0x8040}, 0x4004800) epoll_create(0x7) socket$nl_netfilter(0x10, 0x3, 0xc) sendto$inet(0xffffffffffffffff, 0x0, 0x0, 0x940, &(0x7f0000000400)={0x2, 0x4e23, @initdev={0xac, 0x1e, 0x0, 0x0}}, 0x10) bind$inet6(0xffffffffffffffff, &(0x7f0000000140)={0xa, 0x4e20, 0x0, @ipv4={'\x00', '\xff\xff', @local}}, 0x1c) ioctl$sock_SIOCGIFINDEX(r7, 0x8933, 0x0) r9 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_FLUSH(r9, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000200)=ANY=[@ANYBLOB="1c0000000406010100000000000000000000000005000100070000008be14b81c0cc913070dfb47835cb850e6f60adc2505da1ccae3d1abb743ffdad19c0a9953c72e7d84fea192708710900000000000000036f90bc444852fb48d57f6e83e15642171c941c33eabe58f8f367c5a0deaa024b205b8cfccc8444ffabf7f23174ef98b18ff440e190d6ec0e96bb8926"], 0x1c}, 0x1, 0xfff0}, 0x0) 2.215189589s ago: executing program 6 (id=5934): r0 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000380), 0xffffffffffffffff) openat$cgroup(0xffffffffffffffff, &(0x7f0000000240)='syz1\x00', 0x200002, 0x0) (async) r1 = openat$cgroup(0xffffffffffffffff, &(0x7f0000000240)='syz1\x00', 0x200002, 0x0) openat$cgroup_ro(r1, &(0x7f0000000280)='memory.numa_stat\x00', 0x0, 0x0) r2 = socket$kcm(0x1e, 0x1, 0x0) setsockopt$sock_attach_bpf(r2, 0x10f, 0x8a, 0x0, 0x0) (async) setsockopt$sock_attach_bpf(r2, 0x10f, 0x8a, 0x0, 0x0) r3 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX_80211(r3, 0x8933, &(0x7f0000000000)={'wlan1\x00', 0x0}) sendmsg$NL80211_CMD_FRAME(r3, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000000c0)={0x34, r0, 0x1, 0x0, 0x25dfdbfd, {{0x2}, {@val={0x8, 0x3, r4}, @void}}, [@chandef_params=[@NL80211_ATTR_WIPHY_FREQ={0x8, 0x26, @random=0x980}, @NL80211_ATTR_CHANNEL_WIDTH={0x8}, @NL80211_ATTR_CENTER_FREQ2={0x8, 0xa1, 0x2}]]}, 0x34}, 0x1, 0x0, 0x0, 0xc000}, 0x20000000) syz_init_net_socket$bt_hci(0x1f, 0x3, 0x5) (async) syz_init_net_socket$bt_hci(0x1f, 0x3, 0x5) syz_open_procfs$namespace(0x0, 0x0) unshare(0x62040400) sendmsg$IPSET_CMD_CREATE(0xffffffffffffffff, &(0x7f0000000440)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000200)=ANY=[@ANYBLOB="3000000002060101000000000000000000f90003050005000a0000000900020073797a3000000000050001009f"], 0x30}}, 0x0) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x6, 0xc, &(0x7f00000001c0)=ANY=[@ANYBLOB="180000000000000000000000000000001811", @ANYRES32, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bc82000000000000a6020000f8ffffffb703000008000000b70300000000000085000000330000"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @xdp, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) (async) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x6, 0xc, &(0x7f00000001c0)=ANY=[@ANYBLOB="180000000000000000000000000000001811", @ANYRES32, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bc82000000000000a6020000f8ffffffb703000008000000b70300000000000085000000330000"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @xdp, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r5 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_route(r5, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000200)=ANY=[@ANYBLOB="300000001c0001000000000004086aa42d"], 0x30}}, 0x0) (async) sendmsg$nl_route(r5, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000200)=ANY=[@ANYBLOB="300000001c0001000000000004086aa42d"], 0x30}}, 0x0) 2.1551777s ago: executing program 0 (id=5935): r0 = socket$packet(0x11, 0x3, 0x300) (async) r1 = socket(0x10, 0x803, 0x0) sendmsg$BATADV_CMD_GET_MESH(r1, &(0x7f00000004c0)={0x0, 0x0, &(0x7f0000000480)={0x0, 0x92}}, 0x0) (async) getsockname$packet(r1, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000280)=0x14) (async) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000000)={0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0xc000}, 0x0) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f00000007c0)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000001500)=@gettclass={0x24, 0x2a, 0x10, 0xd7c438e, 0x25dfdbfc, {0x0, 0x0, 0x0, r2, {0x9, 0xffff}, {0xfff3, 0x7}, {0x8, 0x9}}, ["", "", "", ""]}, 0x24}}, 0x0) (async) sendto$packet(r0, &(0x7f00000002c0)="44c33b69eb89e05e9bdec0c288a8", 0xe, 0x830, &(0x7f0000000440)={0x11, 0x1c, r2, 0x1, 0x3, 0x6, @dev={'\xaa\xaa\xaa\xaa\xaa', 0x19}}, 0x14) (async) r3 = socket(0x10, 0x3, 0x0) sendmsg$nl_route(r3, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000380)={&(0x7f00000001c0)=ANY=[@ANYBLOB="38000000180001002abd7000fcdbdf250a", @ANYRES8], 0x38}, 0x1, 0x0, 0x0, 0xcdb281c6bf69a150}, 0x4000) (async) r4 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_LIST(r4, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000140)=ANY=[@ANYBLOB="1c000000070601080000000000000000000000000500010006000000336a9081c09a1b81170ac6"], 0x1c}, 0x1, 0x0, 0x0, 0x10}, 0x0) recvmmsg(r4, &(0x7f0000003840)=[{{0x0, 0x0, &(0x7f0000002780)=[{&(0x7f00000002c0)=""/98, 0x62}, {&(0x7f0000000340)=""/240, 0xf0}, {&(0x7f0000000440)=""/96, 0x60}, {&(0x7f0000000880)=""/67, 0x43}, {&(0x7f00000016c0)=""/4096, 0x1000}], 0x5}, 0x1}], 0x1, 0x20, 0x0) r5 = syz_genetlink_get_family_id$nl80211(&(0x7f00000000c0), r3) syz_genetlink_get_family_id$tipc2(&(0x7f0000001ac0), 0xffffffffffffffff) r6 = socket$igmp(0x2, 0x3, 0x2) setsockopt$ARPT_SO_SET_REPLACE(r6, 0x0, 0x60, &(0x7f0000000440)={'filter\x00', 0x4, 0x4, 0x3c8, 0x0, 0x1d0, 0x0, 0x2e0, 0x2e0, 0x2e0, 0x4, 0x0, {[{{@arp={@remote, @private=0xa010100, 0x0, 0xffffff00, 0x4, 0x7, {@empty, {[0xff, 0x0, 0x0, 0x0, 0xff, 0xff]}}, {@mac=@random="1f1113f2008e", {[0xff, 0x0, 0x0, 0xff, 0xff]}}, 0x0, 0x8, 0xd, 0x8, 0xe8, 0x6, 'batadv_slave_0\x00', 'bridge_slave_0\x00', {}, {}, 0x0, 0x68}, 0xc0, 0xe8}, @unspec=@STANDARD={0x28, '\x00', 0x0, 0x1d0}}, {{@uncond, 0xc0, 0xe8}, @unspec=@NFQUEUE1={0x28, 'NFQUEUE\x00', 0x1, {0x4, 0xff03}}}, {{@arp={@multicast2, @local, 0x0, 0xffffffff, 0x0, 0x0, {@mac=@local}, {@mac=@link_local}, 0x0, 0x40, 0x0, 0x0, 0x0, 0x0, 'xfrm0\x00', 'pim6reg\x00'}, 0xc0, 0x110}, @mangle={0x50, 'mangle\x00', 0x0, {@mac=@local, @empty, @initdev={0xac, 0x1e, 0x0, 0x0}, @private=0xa010100, 0x1}}}], {{'\x00', 0xc0, 0xe8}, {0x28}}}}, 0x418) (async) sendmsg$NL80211_CMD_PEER_MEASUREMENT_START(r3, &(0x7f0000000200)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x402}, 0xc, &(0x7f0000000180)={&(0x7f0000000140)=ANY=[@ANYBLOB='(\x00\x00\x00', @ANYRES16=r5, @ANYBLOB="2000292a02b7056254e68bfbfe389b0352dd86bd7000fcdbdb256f0000bd8384ce70"], 0x28}, 0x1, 0x0, 0x0, 0x1}, 0x40080) (async) sendmmsg(r3, &(0x7f0000000000), 0x400000000000235, 0x0) (async) r7 = syz_init_net_socket$bt_l2cap(0x1f, 0x2, 0x0) r8 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_CREATE(r8, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000200)={&(0x7f00000009c0)=ANY=[@ANYBLOB="8400000002060500000000000000000007eaff8005000100070000006ca1beb1730a1a44189414b2240007800500070004000000050003000100000008000a400000080005000300090000000c0007800800120000000000280007800800064000008000050007005e0000000c00028008000140ac1414aa08000b400000000405000500020000000500040003000000"], 0x84}, 0x1, 0x0, 0x0, 0x4048041}, 0x4000) (async) connect$bt_l2cap(r7, &(0x7f0000000080)={0x1f, 0x0, @fixed={'\xaa\xaa\xaa\xaa\xaa', 0x10}, 0x7ff}, 0xe) r9 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='memory.events\x00', 0x275a, 0x0) write$cgroup_subtree(r9, &(0x7f0000000100)=ANY=[], 0x32600) mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x3000003, 0x80010, 0xffffffffffffffff, 0x1000) (async) r10 = socket$nl_netfilter(0x10, 0x3, 0xc) getsockopt$netlink(r10, 0x10e, 0xb, 0x0, &(0x7f00000000c0)) r11 = socket(0x10, 0x3, 0x0) setsockopt$netlink_NETLINK_TX_RING(r11, 0x10e, 0xc, &(0x7f0000000980)={0x802}, 0x10) (async) setsockopt$netlink_NETLINK_TX_RING(r3, 0x10e, 0x7, &(0x7f0000000900)={0x1, 0x200, 0x3}, 0x10) 1.856977326s ago: executing program 0 (id=5936): r0 = socket$nl_xfrm(0x10, 0x3, 0x6) (async) r1 = socket$netlink(0x10, 0x3, 0x0) (async) ioctl$sock_ipv4_tunnel_SIOCGETTUNNEL(0xffffffffffffffff, 0x89f0, &(0x7f00000002c0)={'gretap0\x00', &(0x7f00000001c0)={'erspan0\x00', 0x0, 0x7, 0x7800, 0x0, 0x200, {{0x31, 0x4, 0x0, 0x9, 0xc4, 0x68, 0x0, 0xe, 0x4, 0x0, @rand_addr=0x64010101, @local, {[@timestamp_addr={0x44, 0x4c, 0xc6, 0x1, 0x7, [{@initdev={0xac, 0x1e, 0x0, 0x0}, 0x5}, {@dev={0xac, 0x14, 0x14, 0x28}, 0x5}, {@remote}, {@broadcast, 0x6}, {@remote, 0xaa}, {@initdev={0xac, 0x1e, 0x1, 0x0}, 0x4}, {@dev={0xac, 0x14, 0x14, 0x1e}, 0x80000001}, {@loopback, 0x1}, {@initdev={0xac, 0x1e, 0x1, 0x0}, 0x101}]}, @timestamp_prespec={0x44, 0x34, 0x75, 0x3, 0xd, [{@private=0xa010102, 0x7fff}, {@private=0xa010100, 0xffffffa2}, {@remote, 0x7}, {@remote, 0xdd}, {@multicast2, 0x4}, {@private=0xa010101, 0x5}]}, @generic={0x82, 0x5, "58f7b3"}, @cipso={0x86, 0xc, 0x1, [{0x5, 0x6, "b87ff3f2"}]}, @timestamp_addr={0x44, 0xc, 0xf, 0x1, 0x1, [{@broadcast, 0x58e08572}]}, @ra={0x94, 0x4, 0x1}, @noop, @end, @generic={0x88, 0x5, "26571f"}, @generic={0x94, 0x5, "f307e0"}]}}}}}) sendmsg$nl_route(r1, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000300)={&(0x7f00000000c0)=@getstats={0x1c, 0x5e, 0x300, 0x50bd3b, 0x25dfdbfd, {0x0, 0x0, 0x0, r2, 0x7}, ["", "", "", "", "", "", "", "", ""]}, 0x1c}}, 0x20004814) (async) sendmsg$nl_xfrm(r0, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000340)=ANY=[@ANYBLOB="94010000100001802bbd700000000000fc010000000000000c736990af85f1c2c20000000000000000ff0100000000000000000000000000010000ecdf000002000000000000000000", @ANYRES32=0x0, @ANYRES32=0x0, @ANYBLOB="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"], 0x194}}, 0x4050) 1.68352829s ago: executing program 0 (id=5937): r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000640)=ANY=[@ANYBLOB="170000000000000004000000ff"], 0x48) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000180)={0x3, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000005900000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x60}, 0x94) syz_emit_ethernet(0x46, &(0x7f0000000a80)=ANY=[], 0x0) r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000b80)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000b40)='GPL\x00', 0x0, 0x0, 0x0, 0x40f00, 0x22, '\x00', 0x0, @fallback=0x1f, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4}, 0x94) bpf$PROG_BIND_MAP(0xa, &(0x7f00000004c0)={r1, 0xffffffffffffffff, 0x2000000}, 0xc) r2 = socket$alg(0x26, 0x5, 0x0) bind$alg(r2, &(0x7f0000000080)={0x26, 'skcipher\x00', 0x0, 0x0, 'cbc-serpent-avx\x00'}, 0x58) setsockopt$ALG_SET_KEY(r2, 0x117, 0x1, 0x0, 0x0) r3 = accept4(r2, 0x0, 0x0, 0x0) sendmsg$TIPC_NL_MEDIA_SET(r3, &(0x7f0000001800)={0x0, 0x0, &(0x7f00000017c0)={&(0x7f0000000240)=ANY=[], 0x12f4}, 0x1, 0x0, 0x0, 0x4}, 0x0) syz_emit_ethernet(0x2e, &(0x7f0000000000)={@local, @random="af23eb8c44a1", @void, {@ipv4={0x800, @udp={{0x5, 0x4, 0x0, 0x0, 0x20, 0x0, 0x0, 0x0, 0x11, 0x0, @empty, @multicast1}, {0x1, 0x4e22, 0xc, 0x0, @gue={{0x1, 0x0, 0x0, 0x0, 0x0, @void}}}}}}}, 0x0) recvmsg$unix(r3, &(0x7f0000000840)={0x0, 0x0, &(0x7f0000000300)=[{&(0x7f0000000100)=""/3, 0x3}, {&(0x7f00000001c0)=""/254, 0xfe}, {&(0x7f0000001840)=""/4096, 0x1000}], 0x3}, 0x0) r4 = socket$inet(0x2, 0x2, 0x2) ioctl$sock_inet_SIOCSARP(r4, 0x8955, &(0x7f0000000000)={{0x2, 0x0, @dev={0xac, 0x14, 0x14, 0x25}}, {0x1, @local}, 0x0, {0x2, 0x0, @dev}}) r5 = socket$igmp6(0xa, 0x3, 0x2) r6 = socket$igmp6(0xa, 0x3, 0x2) setsockopt$IP6T_SO_SET_REPLACE(r6, 0x29, 0x40, &(0x7f0000002bc0)=@raw={'raw\x00', 0x8, 0x3, 0x4c8, 0x0, 0xffffffff, 0xffffffff, 0x0, 0xffffffff, 0x3f8, 0xffffffff, 0xffffffff, 0x3f8, 0xffffffff, 0x3, 0x0, {[{{@ipv6={@private0, @mcast2, [], [], 'veth0_macvtap\x00', 'bridge0\x00'}, 0x0, 0x148, 0x170, 0x0, {}, [@common=@unspec=@helper={{0x48}}, @common=@inet=@hashlimit1={{0x58}, {'bond_slave_1\x00', {0x41, 0x1ff, 0x6, 0xb0e2, 0x10001, 0x84e, 0xfffffffb, 0x18, 0x8}, {0x1}}}]}, @common=@unspec=@NFQUEUE0={0x28}}, {{@ipv6={@remote, @ipv4={'\x00', '\xff\xff', @dev}, [], [], 'erspan0\x00', 'gre0\x00', {0xff}, {}, 0x0, 0x0, 0x0, 0x4b}, 0x0, 0x258, 0x288, 0x0, {}, [@common=@inet=@hashlimit1={{0x58}, {'pim6reg\x00', {0x0, 0x0, 0x5, 0x0, 0x0, 0x7, 0x3ff}}}, @common=@inet=@hashlimit3={{0x158}, {'vcan0\x00', {0x3, 0x0, 0x41, 0xfffffffe, 0x2, 0x1000, 0x6, 0x3}}}]}, @common=@unspec=@CONNMARK={0x30}}], {{'\x00', 0x0, 0xa8, 0xd0}, {0x28, '\x00', 0x7}}}}, 0x528) setsockopt$IP6T_SO_SET_REPLACE(r5, 0x29, 0x40, &(0x7f0000000440)=@raw={'raw\x00', 0x8, 0x3, 0x4c0, 0x170, 0xffffffff, 0xffffffff, 0x170, 0xffffffff, 0x3f0, 0xffffffff, 0xffffffff, 0x3f0, 0xffffffff, 0x3, 0x0, {[{{@ipv6={@private0, @mcast2, [], [], 'veth0_macvtap\x00', 'bridge0\x00', {}, {}, 0x0, 0x0, 0x0, 0x21}, 0x0, 0x148, 0x170, 0x0, {}, [@common=@unspec=@helper={{0x48}}, @common=@inet=@hashlimit1={{0x58}, {'bond_slave_1\x00', {0x62, 0x1ff, 0x6, 0xb0e2, 0x10001, 0x84e, 0xfffffffb, 0x18, 0x8}, {0x1}}}]}, @common=@unspec=@NFQUEUE0={0x28}}, {{@uncond, 0x0, 0x258, 0x280, 0x0, {}, [@common=@inet=@hashlimit1={{0x58}, {'pim6reg\x00', {0x0, 0x0, 0x5, 0x0, 0x0, 0x7, 0x3ff}}}, @common=@inet=@hashlimit3={{0x158}, {'vcan0\x00', {0x3, 0x0, 0x41, 0xfffffffe, 0x1, 0x1000, 0x6, 0x3}}}]}, @common=@inet=@TCPMSS={0x28, 'TCPMSS\x00', 0x0, {0x1}}}], {{'\x00', 0x0, 0xa8, 0xd0}, {0x28, '\x00', 0x7}}}}, 0x520) bind$tipc(0xffffffffffffffff, &(0x7f0000000100)=@nameseq={0x1e, 0x1, 0x1, {0x43, 0x3, 0x3}}, 0x10) r7 = socket$nl_generic(0x10, 0x3, 0x10) r8 = syz_genetlink_get_family_id$nl80211(&(0x7f00000000c0), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r7, 0x8933, &(0x7f0000000100)={'wlan0\x00', 0x0}) sendmsg$NL80211_CMD_SET_TX_BITRATE_MASK(r7, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000080)={0x20, r8, 0x1, 0x70bd26, 0x0, {{}, {@val={0x8, 0x3, r9}, @void}}, [@NL80211_ATTR_TX_RATES={0x4}]}, 0x20}, 0x1, 0x0, 0x0, 0x4004040}, 0x24000) r10 = socket$key(0xf, 0x3, 0x2) getsockopt$inet_sctp6_SCTP_SOCKOPT_PEELOFF(r3, 0x84, 0x66, &(0x7f0000000340)={0x0, 0xf43f}, &(0x7f0000000380)=0x8) getsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX3(0xffffffffffffffff, 0x84, 0x6f, &(0x7f0000000500)={r11, 0x70, &(0x7f00000003c0)=[@in6={0xa, 0x4e22, 0x0, @ipv4={'\x00', '\xff\xff', @multicast1}, 0x5}, @in6={0xa, 0x4e23, 0xb, @ipv4={'\x00', '\xff\xff', @broadcast}, 0x1}, @in6={0xa, 0x4e21, 0x7, @loopback, 0x6}, @in6={0xa, 0x4e24, 0x1, @mcast1}]}, &(0x7f0000000540)=0x10) getsockopt$inet_pktinfo(r4, 0x0, 0x8, &(0x7f0000000280)={0x0, @rand_addr, @dev}, &(0x7f0000000300)=0xc) sendmsg$key(r10, &(0x7f00005f5000)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000040)=ANY=[@ANYBLOB="020300091b0000000000000000000000040003000000000000000000000000000000000000000000000000000000000005000600000000000a00000000000000fe8000000000000000000000000000bb00000000000000000400040000000000000000000000000000000000000000000000000000000000020001000000000000000000000000ff05000500000000000a00000000000000fe8896380000000000000001000000010000000000000000030007000000000002004e24ac14141f0000000000000000020013"], 0xd8}}, 0x0) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000009c0)={0x7, 0x4, &(0x7f00000002c0)=ANY=[@ANYBLOB="180000000000000000000000000000000c000100000900009500000000000000"], &(0x7f00000005c0)='syzkaller\x00', 0x6, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0xfffffc88}, 0x94) setsockopt$IP_VS_SO_SET_FLUSH(r4, 0x0, 0x485, 0x0, 0x0) 1.560089749s ago: executing program 7 (id=5938): syz_emit_ethernet(0x3e, &(0x7f0000000000)={@local, @link_local, @void, {@ipv4={0x800, @icmp={{0x7, 0x4, 0x2, 0x9, 0x30, 0x6b, 0x0, 0x8a, 0x1, 0x0, @remote, @remote, {[@ssrr={0x89, 0x3, 0x2e}, @lsrr={0x83, 0x3, 0x48}]}}, @timestamp_reply={0xe, 0x0, 0x0, 0x1, 0x8, 0x99f, 0x10000, 0x2}}}}}, 0x0) r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000140), 0x140, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f00000000c0)={'syzkaller1\x00', 0x6bf1c2d5adba9432}) ioctl$IOCTL_GET_NCIDEV_IDX(0xffffffffffffffff, 0x0, &(0x7f0000000040)=0x0) ioctl$IOCTL_GET_NCIDEV_IDX(0xffffffffffffffff, 0x0, &(0x7f0000000080)=0x0) r3 = openat$nci(0xffffffffffffff9c, &(0x7f0000000400), 0x2, 0x0) ioctl$IOCTL_GET_NCIDEV_IDX(r3, 0x0, &(0x7f0000000100)=0x0) ioctl$IOCTL_GET_NCIDEV_IDX(0xffffffffffffffff, 0x0, &(0x7f0000000200)=0x0) sendmsg$NFC_CMD_DEV_UP(0xffffffffffffffff, &(0x7f0000000340)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x400}, 0xc, &(0x7f00000002c0)={&(0x7f0000000240)=ANY=[@ANYBLOB='L\x00\x00\x00', @ANYRES16=0x0, @ANYBLOB="08002bbd7000ffdbdf050200000008000100", @ANYRES32=r1, @ANYBLOB="009c0100", @ANYRES32=0x0, @ANYBLOB="08000100", @ANYRES32=0x0, @ANYBLOB="03000100", @ANYRES32=r2, @ANYBLOB="08000100", @ANYRES32=r4, @ANYBLOB="08000100", @ANYRES32=r5, @ANYBLOB="08000100", @ANYRES32=r2, @ANYBLOB], 0x4c}, 0x1, 0x0, 0x0, 0xc004}, 0x4000) readv(r0, &(0x7f00000001c0)=[{&(0x7f0000001400)=""/227, 0xfdef}], 0x4) r6 = socket$kcm(0x2, 0xa, 0x2) r7 = openat$cgroup_ro(0xffffffffffffffff, &(0x7f0000000440)='cpuacct.stat\x00', 0x0, 0x0) r8 = socket$kcm(0x10, 0x2, 0x0) sendmsg$kcm(r8, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000040)=[{&(0x7f00000000c0)="d8000000140081044e81f782db44b9040a1d080211000000040000a1180002000202000100000e1208000f0100810401a80016ea1f000840032e5f54c92011148ed08734843cb12b00000803600cfab94dcf5c0461c1d67f6f94007134cf6ee08000a0e408e8d8ef075c0100000000000000cb090000001fb791643a5e835913b06218a07445d6d930dfe1d9d322fe7c9fd68775730d16a4683f52eb4edbb57a5025ccca9e00360d8bcc00400040fad95667e0060000000000000080bb9ad809d5e1cace81b341139fe3cd4032e8edb12d1d2eb0c0ed0bff", 0xd8}], 0x1, 0x0, 0x0, 0x7400}, 0x0) bpf$PROG_LOAD(0x5, &(0x7f0000000480)={0xd, 0x4, &(0x7f0000000380)=ANY=[@ANYRESDEC=r7], &(0x7f0000000100)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x2a, '\x00', 0x0, @fallback=0x1f, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x7}, 0x94) r9 = socket$igmp6(0xa, 0x3, 0x2) ioctl$sock_SIOCSIFVLAN_ADD_VLAN_CMD(r9, 0x8983, &(0x7f0000000300)={0x0, 'syzkaller1\x00'}) ioctl$SIOCSIFHWADDR(r6, 0x8914, &(0x7f0000000180)={'syzkaller1\x00', @link_local}) 1.439803054s ago: executing program 6 (id=5939): r0 = socket$unix(0x1, 0x1, 0x0) r1 = socket$nl_sock_diag(0x10, 0x3, 0x4) sendmsg$SOCK_DIAG_BY_FAMILY(r1, &(0x7f0000000140)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x400000}, 0xc, &(0x7f0000000100)={&(0x7f0000000040)={0xbc, 0x14, 0x8, 0x70bd2a, 0x25dfdbfc, {0x8, 0x75}, [@INET_DIAG_REQ_BYTECODE={0xa6, 0x1, "2c49b686ab31e812994cf825dd00224f4c76849107ea9a01c5d9ee04ee3942f7dcb5a5bf41ca90212964c3ae639e14ab2392f1b3fdc6729b37e7531b681659912450a873a48ea302afc6a1bbeafd4bb93907d16209c588ac7098b8c5e9924c83dfce8938dfbfa5a7ad53f8bf884ceae4d11df0a47844716bada4a4911dd6abecac00139e107bcc1d1439650c32e3699774945c338ed305a358b16dc0e770f1b51cc7"}]}, 0xbc}, 0x1, 0x0, 0x0, 0x40}, 0x40000) getsockopt$inet6_tcp_int(0xffffffffffffffff, 0x6, 0x3, &(0x7f0000000180), &(0x7f00000001c0)=0x4) r2 = openat$tun(0xffffffffffffff9c, &(0x7f0000000200), 0x80, 0x0) ioctl$TUNSETLINK(r2, 0x400454cd, 0x320) socket$key(0xf, 0x3, 0x2) r3 = socket$nl_netfilter(0x10, 0x3, 0xc) listen(r3, 0xfffffffa) sendmsg$AUDIT_MAKE_EQUIV(0xffffffffffffffff, &(0x7f0000000300)={&(0x7f0000000240), 0xc, &(0x7f00000002c0)={&(0x7f0000000280)={0x28, 0x3f7, 0x1, 0x70bd2d, 0x25dfdbff, {0x7, 0x7, './file0', './file0'}, ["", "", "", ""]}, 0x28}, 0x1, 0x0, 0x0, 0x8080}, 0x0) socketpair$tipc(0x1e, 0x5, 0x0, &(0x7f0000000340)={0xffffffffffffffff}) mmap(&(0x7f0000ffe000/0x2000)=nil, 0x2000, 0xb, 0x8010, r4, 0xdd7a0000) sendmsg$nl_route(0xffffffffffffffff, &(0x7f00000004c0)={&(0x7f0000000380)={0x10, 0x0, 0x0, 0x80000}, 0xc, &(0x7f0000000480)={&(0x7f00000003c0)=@ipv6_delrule={0xa0, 0x21, 0x2, 0x70bd25, 0x25dfdbff, {0xa, 0x80, 0x0, 0xa, 0x8, 0x0, 0x0, 0x0, 0x4}, [@FRA_DST={0x14, 0x1, @empty}, @FRA_DST={0x14, 0x1, @local}, @FIB_RULE_POLICY=@FRA_DPORT_RANGE={0x8, 0x18, {0x4e21, 0x4e21}}, @FIB_RULE_POLICY=@FRA_SUPPRESS_PREFIXLEN={0x8, 0xe, 0xd}, @FIB_RULE_POLICY=@FRA_DPORT_RANGE={0x8, 0x18, {0x4e24, 0x4e21}}, @FRA_DST={0x14, 0x1, @loopback}, @FRA_SRC={0x14, 0x2, @rand_addr=' \x01\x00'}, @FRA_DST={0x14, 0x1, @local}, @FIB_RULE_POLICY=@FRA_FWMARK={0x8}]}, 0xa0}}, 0x20000000) r5 = openat$cgroup_ro(r4, &(0x7f0000000500)='memory.events.local\x00', 0x0, 0x0) ioctl$sock_inet_SIOCRTMSG(r5, 0x890d, &(0x7f0000000580)={0x0, {0x2, 0x4e20, @initdev={0xac, 0x1e, 0x0, 0x0}}, {0x2, 0x4e20, @remote}, {0x2, 0x4e24, @multicast2}, 0x0, 0x0, 0x0, 0x0, 0x6, &(0x7f0000000540)='macvtap0\x00', 0x5, 0x8, 0x3}) ioctl$sock_SIOCSIFVLAN_ADD_VLAN_CMD(r0, 0x8983, &(0x7f0000000600)={0x0, 'geneve0\x00', {}, 0x11cc}) sendmsg$nl_xfrm(r5, &(0x7f0000000740)={&(0x7f0000000640)={0x10, 0x0, 0x0, 0x2000000}, 0xc, &(0x7f0000000700)={&(0x7f0000000680)=@flushsa={0x70, 0x1c, 0x8, 0x70bd26, 0x25dfdbfc, {0x33}, [@address_filter={0x28, 0x1a, {@in=@rand_addr=0x64010100, @in6=@mcast2, 0x2, 0xf, 0x44}}, @user_kmaddress={0x2c, 0x13, {@in6=@ipv4={'\x00', '\xff\xff', @rand_addr=0x64010101}, @in6=@mcast2, 0x0, 0xa}}, @proto={0x5, 0x19, 0x6c}]}, 0x70}, 0x1, 0x0, 0x0, 0x4000}, 0x40000) r6 = syz_genetlink_get_family_id$mptcp(&(0x7f00000007c0), r5) sendmsg$MPTCP_PM_CMD_SUBFLOW_CREATE(r5, &(0x7f0000000880)={&(0x7f0000000780)={0x10, 0x0, 0x0, 0x40}, 0xc, &(0x7f0000000840)={&(0x7f0000000800)={0x40, r6, 0x0, 0x70bd29, 0x25dfdbfb, {}, [@MPTCP_PM_ATTR_ADDR_REMOTE={0x14, 0x6, 0x0, 0x1, [@MPTCP_PM_ADDR_ATTR_IF_IDX={0x8}, @MPTCP_PM_ADDR_ATTR_FLAGS={0x8}]}, @MPTCP_PM_ATTR_LOC_ID={0x5, 0x5, 0x5}, @MPTCP_PM_ATTR_SUBFLOWS={0x8, 0x3, 0x6}, @MPTCP_PM_ATTR_LOC_ID={0x5, 0x5, 0x6}]}, 0x40}, 0x1, 0x0, 0x0, 0x4000}, 0x11) getsockopt$inet_sctp_SCTP_PR_SUPPORTED(r5, 0x84, 0x71, &(0x7f00000008c0)={0x0, 0x2}, &(0x7f0000000900)=0x8) setsockopt$inet_sctp6_SCTP_STREAM_SCHEDULER(r5, 0x84, 0x7b, &(0x7f0000000940)={r7, 0x8}, 0x8) r8 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$SMC_PNETID_DEL(r8, &(0x7f0000000a40)={&(0x7f0000000980), 0xc, &(0x7f0000000a00)={&(0x7f00000009c0)={0x3c, 0x0, 0x100, 0x70bd2a, 0x25dfdbfb, {}, [@SMC_PNETID_ETHNAME={0x14, 0x2, 'wlan0\x00'}, @SMC_PNETID_ETHNAME={0x14, 0x2, 'veth0_to_bond\x00'}]}, 0x3c}, 0x1, 0x0, 0x0, 0x844}, 0x4000000) r9 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000ac0), r5) sendmsg$NL80211_CMD_RADAR_DETECT(r5, &(0x7f0000000bc0)={&(0x7f0000000a80)={0x10, 0x0, 0x0, 0x20}, 0xc, &(0x7f0000000b80)={&(0x7f0000000b00)={0x48, r9, 0x10, 0x70bd2c, 0x25dfdbfb, {{}, {@void, @val={0xc, 0x99, {0xfffffff7, 0x7c}}}}, [@NL80211_ATTR_CENTER_FREQ1={0x8, 0xa0, 0x5}, @NL80211_ATTR_WIPHY_FREQ_OFFSET={0x8, 0x122, 0x351}, @NL80211_ATTR_WIPHY_EDMG_BW_CONFIG={0x5, 0x119, 0xd}, @NL80211_ATTR_CHANNEL_WIDTH={0x8, 0x9f, 0x2}, @NL80211_ATTR_CENTER_FREQ2={0x8, 0xa1, 0x7}]}, 0x48}, 0x1, 0x0, 0x0, 0x44805}, 0x8) listen(r8, 0x9) r10 = socket$inet_smc(0x2b, 0x1, 0x0) ioctl$sock_ipv6_tunnel_SIOCADDTUNNEL(r3, 0x89f1, &(0x7f0000000c80)={'syztnl1\x00', &(0x7f0000000c00)={'ip6_vti0\x00', 0x0, 0x2f, 0x2, 0x35, 0x3ff, 0x4, @empty, @mcast1, 0x80, 0x10, 0xfffff85c, 0x3}}) r12 = getuid() setsockopt$inet_IP_XFRM_POLICY(r10, 0x0, 0x11, &(0x7f0000000cc0)={{{@in6=@loopback, @in=@remote, 0x4e21, 0x200, 0x4e21, 0x0, 0x2, 0x80, 0x80, 0x73, r11, r12}, {0x3, 0x7fffffffffffffff, 0x8, 0x8, 0x42, 0x8, 0xb0ee, 0x7fffffff}, {0x3, 0x1, 0x1, 0x7}, 0x8, 0x6e6bc0, 0x0, 0x0, 0x3, 0x1}, {{@in=@loopback, 0x4d6, 0x33}, 0xa, @in=@broadcast, 0x34ff, 0x1, 0x0, 0x9, 0x796, 0x0, 0x5}}, 0xe8) 944.6235ms ago: executing program 6 (id=5940): sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000280)=@newtfilter={0x3c, 0x2c, 0x8, 0x70bd25, 0x25dfdbff, {0x0, 0x0, 0x0, 0x0, {0x0, 0xe}, {}, {0x8, 0xc}}, [@filter_kind_options=@f_flow={{0x9}, {0xc, 0x2, [@TCA_FLOW_BASECLASS={0x8, 0x3, {0xf}}]}}]}, 0x3c}}, 0x404c000) r0 = socket$inet_udp(0x2, 0x2, 0x0) setsockopt$inet_mreqn(r0, 0x0, 0x4, &(0x7f00000002c0)={@local={0xac, 0x2, 0x44, 0xa}, @private=0x5000000}, 0xc) r1 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r1, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000180)={&(0x7f00000002c0)=ANY=[@ANYRESHEX=r1], 0x34}, 0x1, 0x0, 0x0, 0x4048011}, 0x2000c010) sendmsg$inet(0xffffffffffffffff, &(0x7f0000000240)={&(0x7f0000000140)={0x2, 0x4001, @dev={0xac, 0x14, 0x14, 0x13}}, 0x10, 0x0}, 0x300060c1) r2 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX_802154(r2, 0x8933, &(0x7f0000000240)={'wpan0\x00'}) syz_genetlink_get_family_id$nl802154(&(0x7f00000005c0), 0xffffffffffffffff) unshare(0x40400) r3 = socket$inet_icmp(0x2, 0x2, 0x1) setsockopt$EBT_SO_SET_ENTRIES(r3, 0x0, 0x80, 0x0, 0x138) syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r4 = bpf$MAP_CREATE_TAIL_CALL(0x0, &(0x7f0000000740)=ANY=[@ANYBLOB="0300000004000000040000000a"], 0x48) r5 = bpf$PROG_LOAD(0x5, &(0x7f0000000880)={0x3, 0x8, &(0x7f00000009c0)=ANY=[@ANYBLOB="1809000000000000000000000000000018120000", @ANYRES32=r4, @ANYBLOB="0000000000000000b703000000000000850000000c000000b70000000000000095"], &(0x7f0000000980)='GPL\x00', 0x0, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, @fallback=0x8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f00000005c0)={{r4}, &(0x7f0000000540), &(0x7f0000000580)=r5}, 0x20) bpf$MAP_LOOKUP_ELEM(0x1, &(0x7f0000000380)={r4, &(0x7f0000000340), &(0x7f0000000a00)=""/4096}, 0x20) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000580)={&(0x7f0000000680)=ANY=[@ANYBLOB="4c0000001000030400"/20, @ANYRES32=0x0, @ANYBLOB="00000000000000001c00128009000100766c616e000000000c000280060001000000000008000500", @ANYRES32, @ANYBLOB="08003f0086fc"], 0x4c}, 0x1, 0xba01, 0x0, 0x4004001}, 0x20044890) r6 = socket$nl_route(0x10, 0x3, 0x0) recvmsg(r1, &(0x7f0000003a40)={&(0x7f00000000c0)=@in={0x2, 0x0, @multicast1}, 0x80, &(0x7f0000002a00)=[{&(0x7f0000001a00)=""/4096, 0x1000}], 0x1, &(0x7f0000002a40)=""/4096, 0x1000}, 0x40002040) r7 = socket(0x10, 0x803, 0x0) syz_genetlink_get_family_id$tipc2(&(0x7f0000000000), r7) getsockname$packet(r7, &(0x7f0000000200)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000140)=0x14) sendmsg$nl_route(r6, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000500)={&(0x7f0000000540)=ANY=[@ANYBLOB="380000001000390400"/20, @ANYRES32=0x0, @ANYBLOB="00000000408000001800128008000100736974000c00028008000100", @ANYRES32=r8], 0x38}}, 0x24000000) socket$alg(0x26, 0x5, 0x0) ioctl$sock_ipv4_tunnel_SIOCDELTUNNEL(r7, 0x89f2, &(0x7f0000000040)={'sit0\x00', &(0x7f0000000340)={'syztnl1\x00', r8, 0x1, 0x0, 0x0, 0x0, {{0x5, 0x4, 0x0, 0x0, 0x14, 0x0, 0x0, 0x9, 0x0, 0x0, @empty, @empty}}}}) r9 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='cgroup.controllers\x00', 0x275a, 0x0) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x2, 0x22052, r9, 0x0) socket$inet_mptcp(0x2, 0x1, 0x106) socket$inet6(0xa, 0x3, 0x5) 885.620748ms ago: executing program 0 (id=5941): r0 = bpf$MAP_CREATE_TAIL_CALL(0x0, &(0x7f0000000200)=ANY=[@ANYBLOB="0300000004000000040000000a00000000000000c8eccfcf4f519f5f440343ef4852fa9cdcf9343ee5646e45df934a0be30b25f31fdea29f8f31cd4d5acf317aed61063c6fd797a0a754ae5868f6c57bbfbfa0b4743964a2a0341baf737e0e941bcd12d680f88335f86573678cbcdddd18ec442c2bb503c476248b09fe7199c5622e03f4f6e51bbef21f38030c7bddc45f055bfffe3e3b2f70616d77e5d59e", @ANYRES32=0x1, @ANYBLOB="0500"/20, @ANYRES32=0x0, @ANYRES32, @ANYBLOB="05000000040000000100"/28], 0x50) ioctl$sock_SIOCGIFINDEX(0xffffffffffffffff, 0x8933, &(0x7f0000000140)={'vlan0\x00', 0x0}) r2 = socket$xdp(0x2c, 0x3, 0x0) socketpair$unix(0x1, 0x5, 0x0, &(0x7f00000004c0)={0xffffffffffffffff}) ioctl$sock_SIOCGIFINDEX(r3, 0x8933, &(0x7f0000000000)={'sit0\x00', 0x0}) setsockopt$XDP_RX_RING(r2, 0x11b, 0x2, &(0x7f0000000480)=0x100000, 0x4) bind$xdp(r2, &(0x7f0000000100)={0x2c, 0x0, r4}, 0x10) bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f0000000180)={0x1b, 0x0, 0x0, 0x4, 0x0, r0, 0x101, '\x00', r1, 0xffffffffffffffff, 0x4, 0x0, 0x2}, 0x50) r5 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r5, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000001680)=ANY=[@ANYBLOB="282000002e00090027bd7000000000000400000004001d001020098008"], 0x2028}, 0x1, 0x0, 0x0, 0x42804}, 0x4000000) 659.899108ms ago: executing program 7 (id=5942): r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x7101}) r1 = socket(0x400000000010, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000380)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r1, &(0x7f00000012c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000005c0)=@newqdisc={0x38, 0x24, 0x4ee4e6a52ff56541, 0x70bd2a, 0xffffffff, {0x0, 0x0, 0x0, r2, {0x0, 0xfff1}, {0xffff, 0xffff}}, [@qdisc_kind_options=@q_multiq={{0xb}, {0x8}}]}, 0x38}}, 0x0) sendmsg$nl_route_sched(0xffffffffffffffff, 0x0, 0x20040084) r3 = socket$netlink(0x10, 0x3, 0x0) r4 = socket$unix(0x1, 0x1, 0x0) ioctl$sock_SIOCGIFINDEX(r4, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r3, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000540)={&(0x7f00000008c0)=@newqdisc={0x24, 0x28, 0x4ee4e6a52ff56541, 0x4001, 0xfffffdfc, {0x0, 0x0, 0x0, r5, {}, {0xffff, 0xffff}, {0x2, 0x1}}}, 0x24}, 0x1, 0x0, 0x0, 0x400dc}, 0x0) r6 = socket$alg(0x26, 0x5, 0x0) r7 = syz_init_net_socket$x25(0x9, 0x5, 0x0) ioctl$sock_SIOCETHTOOL(r7, 0x8946, &(0x7f0000000040)={'dummy0\x00', &(0x7f0000000080)=@ethtool_pauseparam={0x26, 0x8000, 0x81, 0x8}}) r8 = socket$nl_netfilter(0x10, 0x3, 0xc) ioctl$BTRFS_IOC_INO_LOOKUP_USER(r6, 0xd000943e, &(0x7f0000000ac0)={0x0, 0x0, "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", "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"}) ioctl$BTRFS_IOC_TREE_SEARCH(r8, 0xd0009411, &(0x7f0000001ac0)={{r9, 0x3ff, 0x7, 0x80000000, 0xa, 0x1, 0x7ff, 0x7, 0x4, 0x9, 0x9, 0x5, 0x80, 0x6, 0x8}}) r10 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r10, &(0x7f000000c2c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f00000003c0)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a28000000000a0101000000005e1affd5020000000900010073797a300000000008000240000000032c000000030a01030000e6ff00000000020000000900010073797a30000000000900030073797a320000000014000000110001"], 0x7c}}, 0x0) r11 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPCTNL_MSG_CT_NEW(r11, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000140)={0x70, 0x0, 0x1, 0x401, 0x0, 0x0, {0x2}, [@CTA_TUPLE_ORIG={0x24, 0x1, 0x0, 0x1, [@CTA_TUPLE_IP={0x14, 0x1, 0x0, 0x1, @ipv4={{0x8, 0x1, @multicast1}, {0x8}}}, @CTA_TUPLE_PROTO={0xc, 0x2, 0x0, 0x1, {0x5}}]}, @CTA_TUPLE_REPLY={0x24, 0x2, 0x0, 0x1, [@CTA_TUPLE_PROTO={0xc, 0x2, 0x0, 0x1, {0x5}}, @CTA_TUPLE_IP={0x14, 0x1, 0x0, 0x1, @ipv4={{0x8, 0x1, @multicast1}, {0x8, 0x2, @initdev={0xac, 0x1e, 0x0, 0x0}}}}]}, @CTA_TIMEOUT={0x8}, @CTA_SEQ_ADJ_REPLY={0xc, 0x10, 0x0, 0x1, [@CTA_SEQADJ_CORRECTION_POS={0x8, 0x1, 0x1, 0x0, 0x5ff}]}]}, 0x70}}, 0x0) sendmsg$NFT_BATCH(r10, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000a00)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a68000000060a0904000344bc8a60da3cd7ecaf05ced49000000000000000020000003c000480380001809ac5897b64796e73657400002800028008000440000000110900010073797a310000000008000340000000010800024000002fc9c2ce2d044a517a30000000000900020073797a3200000000140000001100"], 0x90}}, 0x0) accept4(r6, 0x0, 0x0, 0x800) accept(r6, &(0x7f0000000280)=@pppol2tpin6={0x18, 0x1, {0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, {0xa, 0x0, 0x0, @initdev}}}, 0x0) 658.339931ms ago: executing program 4 (id=5856): r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = socket(0x10, 0x803, 0x0) syz_genetlink_get_family_id$l2tp(&(0x7f0000000000), r1) getsockname$packet(r1, &(0x7f0000000240)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x40) sendmsg$nl_route(r0, &(0x7f0000000140)={0x0, 0x0, &(0x7f00000006c0)={&(0x7f0000000380)=ANY=[@ANYBLOB="440000001000010500000000dbdbdf2500000000", @ANYRES32=r2, @ANYBLOB="0000000084000000240012800900010069706970000000001400028008000100", @ANYRES32=r2], 0x44}, 0x1, 0x0, 0x0, 0x4048c15}, 0x40848c0) sendmsg$nl_route(r0, 0x0, 0x20004000) 610.452149ms ago: executing program 6 (id=5943): r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000640)=ANY=[@ANYBLOB="1e0000000000000004000000ff"], 0x48) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000a40)={0x3, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b70400000000000085"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x1c}, 0x94) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000680)={0xffffffffffffffff, 0xffffffffffffffff}) setsockopt$sock_attach_bpf(r1, 0x1, 0x4c, &(0x7f0000000000), 0x4) r2 = socket$inet_tcp(0x2, 0x1, 0x0) setsockopt$ARPT_SO_SET_REPLACE(r2, 0x0, 0x60, &(0x7f0000000140)={'filter\x00', 0x7, 0x4, 0x3c0, 0x108, 0x1f0, 0x0, 0x108, 0x2d8, 0x108, 0x4, 0x0, {[{{@uncond, 0xc0, 0x108}, @unspec=@LED={0x48, 'LED\x00', 0x0, {'syz1\x00'}}}, {{@uncond, 0xc0, 0xe8, 0x0, {0xa00}}, @unspec=@STANDARD={0x28, '\x00', 0x0, 0xffffffffffffffff}}, {{@uncond, 0xc0, 0xe8}, @unspec=@NFQUEUE2={0x28}}], {{'\x00', 0xc0, 0xe8}, {0x28}}}}, 0x410) r3 = socket(0x40000000015, 0x5, 0x0) connect$inet(r3, &(0x7f0000000040)={0x2, 0x4e20, @loopback}, 0x10) r4 = bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000140)={&(0x7f0000000040)=ANY=[@ANYBLOB="9feb01001800000000000000180000001800000004000000020000000100000c02000000000000000000000d0000000000005f"], 0x0, 0x34}, 0x20) r5 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x11, 0x3, &(0x7f0000000100)=ANY=[@ANYBLOB="180000000100000000000000801800009500000000000000"], &(0x7f0000000000)='GPL\x00', 0xc, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, r4, 0x8, &(0x7f00000000c0)={0x0, 0x1}, 0x1}, 0x94) bpf$BPF_PROG_WITH_BTFID_LOAD(0x5, &(0x7f0000000500)=@bpf_ext={0x1a, 0x3, &(0x7f0000000080)=ANY=[@ANYBLOB="ffffffff4f0c00000000008cad2172b8a29f67450011b676"], &(0x7f0000000180)='GPL\x00', 0x7, 0x0, 0x0, 0x41000, 0x20, '\x00', 0x0, 0x1c, r4, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x1, r5, 0x0, 0x0, 0x0, 0x10, 0x4a7}, 0x94) setsockopt$SO_RDS_TRANSPORT(r3, 0x114, 0x8, &(0x7f00000008c0)=0x2, 0x4) setsockopt$sock_int(r3, 0x1, 0x21, &(0x7f00006dbffc), 0x4) bind$inet(r3, &(0x7f0000000340)={0x2, 0x4e20, @loopback}, 0x57) sendmsg$xdp(r3, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000840)=[{&(0x7f0000000d00)="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", 0x3f1}, {&(0x7f00000003c0)="128b9306006d4810e5ac5040ad9201847839fc378469d5765b9cc241840896c1498194a7197b45d74a8532b82037b02c9e6045c361eb", 0x36}, {&(0x7f0000000200)="0000000000aa303e97380e90231bdbdaf6a4bd866226b7cdb7c26858c4e4fd703be2f51ed6ddc4a47116ec2db75c7042a22491af0ffea4174a9de3350c0a498396b28c7d1784d04aa38922721cb7816094cb82950fd012efd26d", 0x5a}], 0x3, 0x0, 0x0, 0x10}, 0x0) bpf$ENABLE_STATS(0x20, 0x0, 0x0) r6 = bpf$PROG_LOAD(0x5, &(0x7f0000000280)={0x11, 0x13, &(0x7f0000000380)=ANY=[@ANYBLOB="180000000000000000000000000000001801000020646c1300000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000048aa008085000000710000001801000020756c2500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000000700000095"], &(0x7f0000000080)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x2, '\x00', 0x0, @fallback=0x2e, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$PROG_BIND_MAP(0xa, &(0x7f0000000540)={r6}, 0xc) bpf$BPF_BTF_LOAD(0x12, 0x0, 0x0) r7 = socket$nl_route(0x10, 0x3, 0x0) epoll_create(0x7) r8 = socket$nl_rdma(0x10, 0x3, 0x14) sendmsg$RDMA_NLDEV_CMD_STAT_GET(r8, &(0x7f0000001a00)={0x0, 0x0, &(0x7f00000019c0)={&(0x7f0000000bc0)=ANY=[@ANYBLOB="2800000011148d8a29bd7000fcdbdf2508004b0013000000080001"], 0x28}, 0x1, 0x0, 0x0, 0x8040}, 0x4004800) epoll_create(0x7) socket$nl_netfilter(0x10, 0x3, 0xc) sendto$inet(0xffffffffffffffff, 0x0, 0x0, 0x940, &(0x7f0000000400)={0x2, 0x4e23, @initdev={0xac, 0x1e, 0x0, 0x0}}, 0x10) bind$inet6(0xffffffffffffffff, &(0x7f0000000140)={0xa, 0x4e20, 0x0, @ipv4={'\x00', '\xff\xff', @local}}, 0x1c) ioctl$sock_SIOCGIFINDEX(r7, 0x8933, 0x0) r9 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_FLUSH(r9, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000200)=ANY=[@ANYBLOB="1c0000000406010100000000000000000000000005000100070000008be14b81c0cc913070dfb47835cb850e6f60adc2505da1ccae3d1abb743ffdad19c0a9953c72e7d84fea192708710900000000000000036f90bc444852fb48d57f6e83e15642171c941c33eabe58f8f367c5a0deaa024b205b8cfccc8444ffabf7f23174ef98b18ff440e190d6ec0e96bb8926"], 0x1c}, 0x1, 0xfff0}, 0x0) 538.85334ms ago: executing program 4 (id=5944): r0 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000040)={'geneve0\x00', 0x0}) r2 = socket$nl_route(0x10, 0x3, 0x0) r3 = socket$inet_udp(0x2, 0x2, 0x0) ioctl$sock_SIOCGIFINDEX(r3, 0x8933, &(0x7f0000000680)={'bridge0\x00', 0x0}) r5 = openat$tun(0xffffffffffffff9c, &(0x7f0000000000), 0x40241, 0x0) ioctl$TUNSETIFF(r5, 0x400454ca, &(0x7f0000000200)={'syzkaller1\x00', 0xc201}) pselect6(0x40, &(0x7f0000000040)={0xcb8c, 0x3, 0x4, 0x1, 0x2, 0xfff, 0xfffffffffffff801, 0x618}, &(0x7f0000000080)={0x8000000000000000, 0x6, 0x9, 0x8, 0x7ff, 0x8, 0xff, 0x116}, &(0x7f00000000c0)={0x81, 0x10, 0x7, 0x4, 0x0, 0x382a, 0x5, 0x7}, &(0x7f0000000100)={0x0, 0x989680}, &(0x7f00000001c0)={&(0x7f0000000140)={[0x9]}, 0x8}) r6 = socket$kcm(0x2, 0xa, 0x2) socketpair(0x1, 0x1, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) r9 = bpf$MAP_CREATE(0x0, &(0x7f0000001d40)=ANY=[@ANYBLOB="12000000060000000400000002"], 0x50) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000180)={{r9}, &(0x7f0000000040), &(0x7f0000000140)=r8}, 0x20) syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_ipv6_tunnel_SIOCGETTUNNEL(r8, 0x89f0, &(0x7f0000002940)={'ip6_vti0\x00', &(0x7f0000000400)={'syztnl2\x00', r4, 0x2f, 0x3, 0xb6, 0x3, 0x48, @dev={0xfe, 0x80, '\x00', 0x34}, @rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x02', 0x1, 0x7, 0x6, 0x8}}) syz_genetlink_get_family_id$nbd(&(0x7f0000000040), 0xffffffffffffffff) clock_gettime(0x0, &(0x7f00000028c0)={0x0, 0x0}) recvmmsg$unix(r7, &(0x7f0000002880)=[{{0x0, 0x0, &(0x7f0000002800)=[{&(0x7f0000000240)=""/134, 0x86}, {&(0x7f0000000300)=""/157, 0x9d}, {&(0x7f00000003c0)=""/4, 0x4}, {&(0x7f0000002640)=""/223, 0xdf}, {&(0x7f0000002740)=""/144, 0x90}], 0x5}}], 0x1, 0x161, &(0x7f0000002900)={r10, r11+60000000}) r12 = socket$nl_rdma(0x10, 0x3, 0x14) r13 = socket(0x10, 0x3, 0x0) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000880)=ANY=[@ANYBLOB="700200001300290a00fd00000000000007000000", @ANYRES32], 0x270}}, 0x0) sendmmsg(r13, &(0x7f0000000000), 0x4000000000001f2, 0xfc) sendmsg$RDMA_NLDEV_CMD_STAT_DEL(r12, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000002200)={0x0, 0x38}, 0x1, 0x0, 0x0, 0x40448d4}, 0x4000000) ioctl$sock_SIOCGPGRP(r0, 0x8904, &(0x7f0000000480)) recvmsg$unix(r8, &(0x7f00000005c0)={0x0, 0x0, &(0x7f0000000500)=[{&(0x7f00000004c0)=""/8, 0x8}], 0x1}, 0x10022) ioctl$SIOCSIFHWADDR(r6, 0x8914, &(0x7f0000000180)={'syzkaller1\x00', @link_local}) sendmsg$nl_route(r2, &(0x7f0000001600)={0x0, 0x0, &(0x7f0000000240)={&(0x7f00000002c0)=ANY=[@ANYBLOB="4800000010000104000000000007000000000000", @ANYRES32=r4, @ANYBLOB="3f00000006020400280012800b0001006272696467650000180002800c002e0003000000030000000500070008"], 0x48}, 0x1, 0x0, 0x0, 0x4c0c0}, 0x0) sendmsg$nl_route(r0, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000080)=@newlink={0x70, 0x10, 0x401, 0x70bd28, 0x1, {0x0, 0x0, 0x0, 0x0, 0x8, 0x10000}, [@IFLA_LINKINFO={0x40, 0x12, 0x0, 0x1, @vlan={{0x9}, {0x30, 0x2, 0x0, 0x1, [@IFLA_VLAN_ID={0x6, 0x1, 0x2}, @IFLA_VLAN_ID={0x6, 0x1, 0x2}, @IFLA_VLAN_INGRESS_QOS={0x1c, 0x4, 0x0, 0x1, [@IFLA_VLAN_QOS_MAPPING={0xc, 0x1, {0x5, 0x800}}, @IFLA_VLAN_QOS_MAPPING={0xc, 0x1, {0x81, 0xffffff81}}]}]}}}, @IFLA_LINK={0x8, 0x5, r1}, @IFLA_MASTER={0x8, 0xa, r4}]}, 0x70}, 0x1, 0x0, 0x0, 0x240008c4}, 0x20008004) r14 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r14, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000000)=@gettaction={0xf0, 0x32, 0xe72c5f922f23cad9, 0x70bd2a, 0x25dfdbf7}, 0xf0}, 0x1, 0x0, 0x0, 0x8080}, 0x10000084) 434.220902ms ago: executing program 0 (id=5945): mmap(&(0x7f0000001000/0xc00000)=nil, 0xc00000, 0x2000004, 0x3b071, 0xffffffffffffffff, 0x0) sendmsg$nl_xfrm(0xffffffffffffffff, 0x0, 0x0) sendmsg$nl_xfrm(0xffffffffffffffff, &(0x7f0000000580)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000000)=ANY=[@ANYBLOB="b80000001300e9990000000000000000fc000000000000000100000000000000ac1e000100000000000000000000000000000000000000000a0060"], 0xb8}}, 0x0) sendmsg$nl_xfrm(0xffffffffffffffff, &(0x7f0000000580)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000000)=ANY=[@ANYBLOB="b80000001300e9990000000000000000fc00"/27], 0xb8}, 0x1, 0x0, 0x0, 0x80}, 0x0) r0 = socket$nl_xfrm(0x10, 0x3, 0x6) ioctl$sock_SIOCGIFINDEX(0xffffffffffffffff, 0x8933, 0x0) r1 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(0xffffffffffffffff, &(0x7f0000000580)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000000)=ANY=[@ANYBLOB="b80000001300000200000000fddbdf257f0000010b9cf2065905b43b000000000000000000000000000000000000000000000004000000000a0060", @ANYRES32=0xee01, @ANYBLOB="00000000000000000400000000000000000000000000000000000000000000004000000000000000fdffffffffffffff02000000000000000000000000000000feffffffffffffff00000000000000000000000000000000000000000000000009000000000000400001020000000000"], 0xb8}, 0x1, 0x0, 0x0, 0x80}, 0x50) sendmsg$nl_xfrm(r1, &(0x7f0000000580)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000000)=ANY=[@ANYBLOB="b80000001300e9990000000000000000fc0000000000"], 0xb8}}, 0x20004000) sendmsg$nl_xfrm(r0, &(0x7f0000000440)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000800)=ANY=[@ANYBLOB="b80000001300e9990500000000000000fc000000000000000000000000000000fc00000000000000000000000000000000000000000000000a0030"], 0xb8}}, 0x4000) r2 = socket$nl_route(0x10, 0x3, 0x0) r3 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r3, &(0x7f000000c2c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f00000000c0)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a28000000000a0101000000005e1affd5020000000900010073797a300000000008000240000000032c000000030a01030000e6ff000000000200000009000100"], 0x7c}}, 0x0) sendmsg$NFT_BATCH(r3, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000480)=ANY=[@ANYBLOB="140000041000010400000000000000000000000a3c000000120a09000000000000000000240000000900020073797a3100000000080004400000000009000100c7f9fe6ff25ae0da0473797a3000000000080001400084cc37051e1275253df8fed34806ee0000011400002600e660001100010000000400000000000000000a08a3502ed91423ddef3b0ffe5b8d4c64f802a17e25ccd4ca2530a72a34d06a8e76daae465dbb2f062fde7f052efad9cf902b992e692689c76fa78910"], 0x64}}, 0x0) sendmsg$NFT_MSG_GETOBJ(r3, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000340)={&(0x7f0000000380)=ANY=[@ANYBLOB="20000000150a01020000000000000000000000020b00010073797a3100000000"], 0x20}, 0x1, 0x0, 0x0, 0x800}, 0x24040808) r4 = socket$inet6_udp(0xa, 0x2, 0x0) ioctl$sock_SIOCGIFINDEX(r4, 0x8933, &(0x7f0000000c80)={'lo\x00', 0x0}) sendmsg$nl_route_sched(r2, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000340)=@newqdisc={0x44, 0x24, 0x4ee4e6a52ff56541, 0x70bd2d, 0x0, {0x0, 0x0, 0x0, r5, {0x0, 0xffe0}, {0xffff, 0xffff}, {0x10}}, [@qdisc_kind_options=@q_gred={{0x9}, {0x14, 0x2, [@TCA_GRED_DPS={0x10, 0x3, {0xe, 0x3, 0x1, 0x1}}]}}]}, 0x44}, 0x1, 0x0, 0x0, 0x51}, 0x0) sendmsg$nl_route_sched(r2, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000640)=@newqdisc={0x44, 0x24, 0xd0f, 0x200000, 0x0, {0x60, 0x0, 0x0, r5, {}, {0xffff, 0xffff}, {0x0, 0xfff3}}, [@qdisc_kind_options=@q_gred={{0x9}, {0x14, 0x2, [@TCA_GRED_DPS={0x10, 0x3, {0x80003, 0xc, 0x1, 0x4}}]}}]}, 0x44}}, 0x24040004) pipe(&(0x7f0000000200)={0xffffffffffffffff}) r7 = socket$inet6(0xa, 0x2, 0x0) connect$inet6(r7, &(0x7f0000000080)={0xa, 0x4e24, 0x4, @local, 0x9}, 0x1c) r8 = bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f00000007c0)=ANY=[@ANYBLOB="1b0000000000000000000000000004"], 0x50) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x18, 0x17, &(0x7f00000003c0)=@ringbuf={{0x18, 0x0, 0x0, 0x0, 0x88f, 0x0, 0x0, 0x0, 0x5}, {{0x18, 0x1, 0x1, 0x0, r8}, {}, {0x7, 0x0, 0xb, 0x3, 0x0, 0x0, 0xfffc}, {0x85, 0x0, 0x0, 0x86}}, {{0x5, 0x0, 0x5, 0x9, 0x0, 0x1, 0x80000000}}, [@printk={@u, {}, {}, {}, {}, {0x7, 0x0, 0xb, 0x3, 0x0, 0x0, 0x8}}], {{}, {}, {0x85, 0x0, 0x0, 0x85}}}, &(0x7f0000000000)='syzkaller\x00', 0xa, 0xffe, &(0x7f0000000cc0)=""/4094, 0x41000, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0xfffffffb}, 0x94) splice(r6, 0x0, r7, 0x0, 0x15944, 0x4) ioctl$sock_ipv4_tunnel_SIOCGETTUNNEL(0xffffffffffffffff, 0x89f0, &(0x7f0000000100)={'syztnl2\x00', &(0x7f00000001c0)={'sit0\x00', r5, 0x0, 0x10, 0x238, 0x2, {{0x22, 0x4, 0x0, 0x2, 0x88, 0x66, 0x0, 0x18, 0x2f, 0x0, @multicast1, @rand_addr=0x64010101, {[@generic={0x83, 0x7, "250feee880"}, @rr={0x7, 0x13, 0x80, [@multicast2, @dev={0xac, 0x14, 0x14, 0x3d}, @initdev={0xac, 0x1e, 0x1, 0x0}, @private=0xa010101]}, @cipso={0x86, 0x2d, 0x0, [{0x0, 0x9, "2f42429005e74f"}, {0x6, 0x4, "ac29"}, {0x5, 0xb, "4d40242c4aeec75970"}, {0x6, 0xf, "bf3b77ae50778d09513d3088a9"}]}, @lsrr={0x83, 0x7, 0x40, [@dev={0xac, 0x14, 0x14, 0x2d}]}, @rr={0x7, 0x1b, 0xd4, [@multicast2, @multicast2, @private=0xa010100, @rand_addr=0x64010101, @remote, @local]}, @noop, @rr={0x7, 0x7, 0xdf, [@dev={0xac, 0x14, 0x14, 0x1d}]}]}}}}}) sendmsg$MPTCP_PM_CMD_SUBFLOW_CREATE(r6, &(0x7f00000002c0)={&(0x7f0000000080)={0x10, 0x0, 0x0, 0x2}, 0xc, &(0x7f0000000280)={&(0x7f00000006c0)=ANY=[@ANYBLOB="dc00d17ed7ee58237d2b76aa8258c3063cb316d76d7b580000", @ANYRES16=0x0, @ANYBLOB="000225bd7000fedbdf250a00000008000300080000000800030000000000080002000100000008000400f77f000008000400060000003c00018008000300ac1414aa080006000a0000d800000008000700", @ANYRES32=r9, @ANYBLOB="0800060014000000080006001800000005000200ff000000080003000100000040000180050002000700000008000700", @ANYRES32=r5, @ANYBLOB="05000200f000000008000700", @ANYRES32=r5, @ANYBLOB="140004000000000000000000000000000000000105000200010000001400018008000700", @ANYRES32, @ANYBLOB="08000600010000000800020006000000"], 0xdc}, 0x1, 0x0, 0x0, 0xcc004}, 0x94) bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f00000007c0)=ANY=[@ANYBLOB="1b0000000000000000000000000004"], 0x50) 431.109854ms ago: executing program 1 (id=5946): r0 = socket$nl_sock_diag(0x10, 0x3, 0x4) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0x14, &(0x7f0000000400)=ANY=[@ANYBLOB="1800000000181100"/20, @ANYRES32, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b70400000000000085000000010000001801000020756c2500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000020850000000400000095"], 0x0, 0x0, 0x0, 0x0, 0x40f00, 0x40, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000085000000070000001801000020756c2500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000000"], 0x0, 0x100, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x2f, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) socketpair$unix(0x1, 0x5, 0x0, 0x0) bpf$PROG_LOAD(0x5, &(0x7f0000000680)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="18090000000000000000000000000000850000006d"], 0x0, 0x0, 0x0, 0x0, 0x100, 0x0, '\x00', 0x0, @fallback=0xa, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x1f, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x12, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) r2 = socket$packet(0x11, 0x3, 0x300) getsockopt$packet_int(r2, 0x107, 0x14, 0x0, &(0x7f0000000240)) bpf$BPF_GET_PROG_INFO(0xa, &(0x7f0000000740)={r1, 0x0, 0x0}, 0x10) ioctl$F2FS_IOC_START_ATOMIC_WRITE(r0, 0xf501, 0x0) syz_emit_ethernet(0x2a, &(0x7f0000000300)=ANY=[@ANYBLOB="bbbbbbbbbbbbaaaaaaaaaaaa08004510001c00660000070290780a010101ac1414aa16ff9078ac14a989fab02fa89df3d859ac99504bd25f1424d1a4bbc79c8fbdcc83ff2dca5fc08a7133a3adcbf396601c0316d3f1cc3a3e8d22a4ef27ebbb230c67ea23b5d4a628ec175750ed488cc11c170552dfdb84fd4485ecbe79c9a37a4197d9266a0ba0b79148d15f982718b0e2ad4efecb320e1935d5b74d33"], 0x0) r3 = socket$packet(0x11, 0x2, 0x300) r4 = socket(0x400000000010, 0x3, 0x0) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000140)={0x1e, 0x4, &(0x7f0000000040)=@framed={{}, [@call={0x85, 0x0, 0x0, 0x19}]}, &(0x7f0000000000)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x24}, 0x80) ioctl$sock_SIOCGIFINDEX(r4, 0x8933, &(0x7f0000000100)={'batadv_slave_0\x00', 0x0}) sendmsg$nl_route_sched(r4, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000000c0)=@newqdisc={0x2c, 0x24, 0x4ee4e6a52ff56541, 0x70bd26, 0xfffffffd, {0x0, 0x0, 0x0, r5, {0x0, 0xfff3}, {0xffff, 0xffff}, {0xffe0, 0x9}}, [@qdisc_kind_options=@q_drr={0x8}]}, 0x2c}}, 0x4c840) sendmsg$nl_route_sched(r4, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000200)=@newtfilter={0x54, 0x2c, 0xf3f, 0x70bd28, 0x25dfdbfd, {0x0, 0x0, 0x0, r5, {0x0, 0xfff3}, {0x0, 0xfff3}, {0xd, 0x5}}, [@filter_kind_options=@f_fw={{0x7}, {0x28, 0x2, [@TCA_FW_INDEV={0x14, 0x3, 'ipvlan0\x00'}, @TCA_FW_CLASSID={0x8, 0x1, {0xb, 0x7}}, @TCA_FW_MASK={0x8, 0x5, 0x4}]}}]}, 0x54}, 0x1, 0x0, 0x0, 0x20041004}, 0x0) ioctl$ifreq_SIOCGIFINDEX_batadv_hard(r3, 0x8933, &(0x7f00000001c0)={'batadv_slave_1\x00', 0x0}) r7 = socket(0x2d, 0x2, 0x0) bind$xdp(r7, &(0x7f0000000080)={0x2d, 0x0, 0x0, 0x400003e}, 0x10) setsockopt$packet_add_memb(r3, 0x107, 0x1, &(0x7f00000002c0)={r6, 0x11, 0x6, @random="08d32bfb45c9"}, 0x10) pipe(&(0x7f0000000180)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$int_in(r8, 0x5452, &(0x7f0000000040)=0x7) sendmsg$NFNL_MSG_CTHELPER_NEW(r8, &(0x7f0000000440)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x1000}, 0xc, &(0x7f0000000400)={&(0x7f0000000480)=ANY=[@ANYBLOB="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"], 0x100}, 0x1, 0x0, 0x0, 0x40000}, 0x805) close(0x3) r9 = bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000100)={0x6, 0x3, &(0x7f00000000c0)=ANY=[@ANYBLOB="1800000002000000000000000008082295"], &(0x7f0000000240)='syzkaller\x00'}, 0x94) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000600)={r9, 0x5, 0xb68, 0xffffffffffffff6b, &(0x7f0000000000)="ff", 0x0, 0x149c, 0x503, 0x0, 0x0, 0x0, 0x0, 0x2, 0xffff80fe}, 0x48) 385.916752ms ago: executing program 7 (id=5947): r0 = socket$inet(0x2, 0xa, 0x265) ioctl$sock_inet_SIOCSARP(r0, 0x8955, &(0x7f0000000000)={{0x2, 0x20, @dev}, {0x1, @local}, 0x4a, {0x2, 0x0, @rand_addr=0x64010101}}) r1 = socket$key(0xf, 0x3, 0x2) sendmsg$key(r1, &(0x7f0000000040)={0x3, 0x0, &(0x7f0000000340)={&(0x7f0000000480)=ANY=[@ANYBLOB="02030003130000002cbd7040fcdbdf2503000900800000001cdc0dca1d9f68846960e56de42944af05000600000000000a004e2300000007ff010000000000000000000000000001010008800000000002000100000000000000070c0000ffff05000500000000000a004e23000000fffe8000000000000000000000000000aaff010000000000000200130002"], 0x98}, 0x1, 0x7}, 0x0) ioctl$sock_inet_SIOCSARP(r0, 0x8953, &(0x7f0000000000)={{0x2, 0x4e22, @dev}, {0x0, @remote}, 0x38, {0x2, 0xfffe, @broadcast}, 'syz_tun\x00'}) r2 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX_80211(r2, 0x8933, &(0x7f0000000080)={'wlan1\x00', 0x0}) r4 = syz_genetlink_get_family_id$nl80211(&(0x7f00000001c0), 0xffffffffffffffff) sendmsg$NL80211_CMD_SET_CQM(r2, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000280)={&(0x7f00000004c0)={0x38, r4, 0x1, 0x0, 0x0, {{}, {@val={0x8, 0x3, r3}, @void}}, [@NL80211_ATTR_CQM={0x1c, 0x5e, 0x0, 0x1, [@NL80211_ATTR_CQM_TXE_PKTS={0x8, 0x6, 0x7}, @NL80211_ATTR_CQM_TXE_RATE={0x8, 0x5, 0x3b}, @NL80211_ATTR_CQM_TXE_INTVL={0x8, 0x7, 0xd}]}]}, 0x38}}, 0x0) r5 = accept4(0xffffffffffffffff, 0x0, 0x0, 0x80800) setsockopt$ALG_SET_KEY(0xffffffffffffffff, 0x117, 0x1, 0x0, 0x0) recvmmsg(r5, &(0x7f0000002440), 0x3ffffffffffff67, 0x0, 0x0) bpf$PROG_LOAD(0x5, &(0x7f0000000100)={0x6, 0x5, &(0x7f0000000540)=@framed={{0x18, 0x0, 0x0, 0x0, 0x63b, 0x0, 0x0, 0x0, 0x2}, [@initr0={0x18, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x3}]}, &(0x7f0000000080)='GPL\x00', 0x1, 0x0, 0x0, 0x41000, 0x20, '\x00', 0x0, @fallback=0x2, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) syz_init_net_socket$bt_hci(0x1f, 0x3, 0x5) r6 = socket$kcm(0x21, 0x2, 0x2) r7 = socket(0x10, 0x803, 0x0) syz_genetlink_get_family_id$ipvs(&(0x7f00000000c0), r7) r8 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r8, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000200)=@newlink={0x58, 0x10, 0x401, 0x0, 0x0, {0x0, 0x0, 0xffff}, [@IFLA_LINKINFO={0x24, 0x12, 0x0, 0x1, @xfrm={{0x9}, {0x14, 0x2, 0x0, 0x1, [@IFLA_XFRM_IF_ID={0x8, 0x2, 0xea}, @IFLA_XFRM_LINK={0x8, 0x1, 0x3}]}}}, @IFLA_IFNAME={0x14, 0x3, 'xfrm0\x00'}]}, 0x58}}, 0x0) r9 = bpf$PROG_LOAD(0x5, &(0x7f0000000080)={0x3, 0xe, &(0x7f0000002240)=ANY=[@ANYBLOB="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"], &(0x7f0000000b80)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @sched_cls, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0xfffffedf, 0x10, &(0x7f0000000040)}, 0x48) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f00000002c0)={r9, 0x2f00020b, 0xe, 0x0, &(0x7f0000000200)="63eced8e46dc3f0adf33c9f7b986", 0x0, 0x7515, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x50) sendmsg$kcm(r6, &(0x7f0000000140)={&(0x7f0000000440)=@rxrpc=@in6={0x21, 0x1, 0x2, 0x1c, {0xa, 0x4e23, 0x61df, @initdev={0xfe, 0x88, '\x00', 0x0, 0x0}, 0x8}}, 0x80, &(0x7f00000004c0)=[{&(0x7f0000000100)="a6", 0x1}, {0x0}], 0x2, &(0x7f00000001c0)=ANY=[@ANYRESOCT], 0x10b8}, 0x106) sendmsg$IEEE802154_LLSEC_DEL_DEV(0xffffffffffffffff, &(0x7f00000029c0)={0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x4}, 0x40) r10 = syz_open_procfs$namespace(0xffffffffffffffff, &(0x7f0000000080)) r11 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r12 = syz_genetlink_get_family_id$netlbl_mgmt(&(0x7f0000000300), 0xffffffffffffffff) sendmsg$NLBL_MGMT_C_REMOVEDEF(r11, &(0x7f0000000400)={&(0x7f00000002c0)={0x10, 0x0, 0x0, 0x40000}, 0xc, &(0x7f00000003c0)={&(0x7f0000000380)={0x30, r12, 0x200, 0x70bd29, 0x25dfdbff, {}, [@NLBL_MGMT_A_FAMILY={0x6, 0xb, 0x22}, @NLBL_MGMT_A_IPV6MASK={0x14, 0x6, @mcast2}]}, 0x30}, 0x1, 0x0, 0x0, 0x40000}, 0x808) r13 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=@base={0x10, 0x4, 0x8, 0x8}, 0x50) bpf$OBJ_PIN_MAP(0x6, &(0x7f0000000240)=@o_path={&(0x7f0000000200)='./cgroup\x00', r13, 0x4000, r10}, 0x18) sendmsg$kcm(r6, &(0x7f0000000140)={0x0, 0x0, 0x0, 0x0, &(0x7f0000001a00)=ANY=[], 0x10b8}, 0x146) 367.785607ms ago: executing program 6 (id=5948): socketpair$tipc(0x1e, 0x5, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) close(0x4) syz_init_net_socket$bt_hci(0x1f, 0x3, 0x5) close(0x4) syz_open_procfs$namespace(0x0, &(0x7f0000000040)='ns/cgroup\x00') mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f07ebbeef, 0x8031, 0xffffffffffffffff, 0x215eb000) r1 = socket$inet6(0xa, 0x2, 0x0) sendmmsg$inet6(r1, &(0x7f0000000080)=[{{&(0x7f0000000100)={0xa, 0x4e20, 0x0, @ipv4={'\x00', '\xff\xff', @loopback}}, 0x1c, &(0x7f0000000140)=[{&(0x7f0000000180)="aabbcc", 0x3}], 0x1}}, {{&(0x7f00000001c0)={0xa, 0x4e20, 0x0, @ipv4={'\x00', '\xff\xff', @loopback}}, 0x1c, &(0x7f0000000200)=[{&(0x7f0000000240)="aabbcc", 0x3}], 0x1}}], 0x2, 0x0) getsockopt$sock_buf(r0, 0x1, 0x1c, 0x0, 0x0) r2 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r2, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000200)={&(0x7f00000003c0)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a28000000000a0101000000005e1affd5020000000900010073797a300000000008000240000000032c000000030a01030000e6ff00000000020000000900010073797a30000000000900030073797a320000000014000000110001"], 0x7c}}, 0x4028800) sendmsg$NFT_BATCH(r2, &(0x7f00000000c0)={0x0, 0xf5, &(0x7f0000000080)={&(0x7f0000000680)=ANY=[@ANYBLOB="14000000100001000000000000b890c1a000000a80000000160a01030000000000000000020000000900020073797a30000000000900010073797a30000000005400038008000240000000000800014000000000400003801400010076657468315f746f5f6272696467650014000100776732000000000000000000000000001400010076657468305f746f5f7465616d00000014000000110001"], 0xa8}}, 0x0) sendmsg$NFT_BATCH(r2, &(0x7f0000000500)={0x0, 0x0, &(0x7f00000004c0)={&(0x7f0000000340)=ANY=[@ANYBLOB="140000001000010000000000000000000500000a5c000000180a0500000000000000000002000000300003802c00038014000100776732000000000000000000000000001400010076657468315f746f5f627269646765000900020073797a30000000000900010073797a300000000014000000110001"], 0x84}, 0x1, 0x0, 0x0, 0x54}, 0x20008000) ioctl$XFS_IOC_FD_TO_HANDLE(r1, 0xc038586a, &(0x7f0000000480)={r0, &(0x7f0000000280)='&\x00', 0x100, &(0x7f00000002c0)={@align=0x9, {0x8, 0x4, 0x8, 0xfffffffffffffff9}}, 0x1401, &(0x7f0000000300), &(0x7f0000000440)=0x8000}) r4 = syz_genetlink_get_family_id$devlink(&(0x7f0000000580), 0xffffffffffffffff) sendmsg$DEVLINK_CMD_SB_POOL_SET(r3, &(0x7f0000000980)={&(0x7f0000000540)={0x10, 0x0, 0x0, 0x8000000}, 0xc, &(0x7f0000000940)={&(0x7f0000000740)={0x1c8, r4, 0x10, 0x70bd29, 0x25dfdbfc, {}, [{@nsim={{0xe}, {0xf, 0x2, {'netdevsim', 0x0}}}, {0x8, 0xb, 0x8}, {0x6, 0x11, 0x1ff}, {0x8, 0x13, 0xffffffff}, {0x5}}, {@nsim={{0xe}, {0xf, 0x2, {'netdevsim', 0x0}}}, {0x8, 0xb, 0x2}, {0x6, 0x11, 0x7ff}, {0x8, 0x13, 0xff}, {0x5}}, {@nsim={{0xe}, {0xf, 0x2, {'netdevsim', 0x0}}}, {0x8, 0xb, 0xf03}, {0x6, 0x11, 0x58}, {0x8, 0x13, 0x8000}, {0x5}}, {@nsim={{0xe}, {0xf, 0x2, {'netdevsim', 0x0}}}, {0x8, 0xb, 0x8}, {0x6, 0x11, 0x428b}, {0x8, 0x13, 0x4}, {0x5, 0x14, 0x1}}, {@pci={{0x8}, {0x11}}, {0x8, 0xb, 0x5}, {0x6, 0x11, 0x9}, {0x8}, {0x5, 0x14, 0x1}}, {@pci={{0x8}, {0x11}}, {0x8, 0xb, 0x3}, {0x6, 0x11, 0x7}, {0x8, 0x13, 0x6}, {0x5, 0x14, 0x1}}, {@pci={{0x8}, {0x11}}, {0x8, 0xb, 0x2}, {0x6, 0x11, 0xf31c}, {0x8, 0x13, 0x40}, {0x5}}]}, 0x1c8}, 0x1, 0x0, 0x0, 0x800}, 0x48000) 0s ago: executing program 1 (id=5949): r0 = socket$tipc(0x1e, 0x5, 0x0) preadv(r0, &(0x7f0000002480)=[{&(0x7f0000001300)=""/4096, 0x1000}, {&(0x7f0000002300)=""/118, 0x76}, {&(0x7f0000002380)}, {&(0x7f00000023c0)=""/150, 0x96}], 0x4, 0x5, 0x2d) setsockopt$TIPC_GROUP_JOIN(r0, 0x10f, 0x87, &(0x7f0000000000)={0x42, 0x1}, 0x10) r1 = socket$tipc(0x1e, 0x2, 0x0) setsockopt$TIPC_GROUP_JOIN(r1, 0x10f, 0x87, &(0x7f0000000240)={0x42, 0x1}, 0x10) setsockopt$TIPC_DEST_DROPPABLE(r1, 0x10f, 0x81, &(0x7f0000000040), 0x4) sendmsg$tipc(r1, &(0x7f00000003c0)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4000000}, 0x8820) setsockopt$TIPC_GROUP_LEAVE(r0, 0x10f, 0x88) r2 = openat$tun(0xffffffffffffff9c, &(0x7f0000000040), 0x1c1341, 0x0) ioctl$TUNSETIFF(r2, 0x400454ca, &(0x7f00000000c0)={'syzkaller0\x00', 0x84aebfbd6349b7f2}) r3 = socket(0x10, 0x803, 0x0) ioctl$sock_SIOCGIFINDEX(r3, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r3, &(0x7f00000012c0)={0x0, 0x0, &(0x7f0000000480)={&(0x7f0000000a40)=@newqdisc={0x2c, 0x24, 0x4ee4e6a52ff5653f, 0x70bd2d, 0x25dfdbfc, {0x0, 0x0, 0x0, r4, {0x0, 0x9}, {0xffff, 0xffff}, {0x3}}, [@TCA_RATE={0x6, 0x5, {0x8, 0x6}}]}, 0x2c}, 0x1, 0x0, 0x0, 0x8081}, 0x0) sendmsg$nl_route_sched(r3, &(0x7f0000006040)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000240)=@newtfilter={0x54, 0x2c, 0xd3f, 0x70bd25, 0x25dfdbfb, {0x0, 0x0, 0x0, r4, {0xc, 0x4}, {0x0, 0x9}, {0xf, 0x9}}, [@filter_kind_options=@f_flower={{0xb}, {0x24, 0x2, [@TCA_FLOWER_KEY_ETH_TYPE={0x6, 0x8, 0x8848}, @TCA_FLOWER_KEY_MPLS_OPTS={0x18, 0x63, 0x0, 0x1, @TCA_FLOWER_KEY_MPLS_OPTS_LSE={0x14, 0x1, 0x0, 0x1, [@TCA_FLOWER_KEY_MPLS_OPT_LSE_DEPTH={0x5, 0x1, 0x5}, @TCA_FLOWER_KEY_MPLS_OPT_LSE_TC={0x5, 0x4, 0x3}]}}]}}]}, 0x54}, 0x1, 0x0, 0x0, 0x1}, 0x20040054) syz_emit_ethernet(0x3e, &(0x7f0000000600)=ANY=[@ANYBLOB="0180c2000000ffffffffffff08004503003000674000002f907864010105ffffffff0000883e001c9078a20f000080000000d3e65e3bd5c893a9b9b16211"], 0x0) pipe(&(0x7f0000000000)={0xffffffffffffffff}) close(r5) getsockopt$WPAN_SECURITY_LEVEL(r5, 0x0, 0x2, 0x0, &(0x7f0000000240)) r6 = syz_init_net_socket$bt_l2cap(0x1f, 0x5, 0x0) getsockopt$bt_l2cap_L2CAP_OPTIONS(r6, 0x6, 0x1, 0x0, &(0x7f0000000100)) bpf$PROG_LOAD(0x5, &(0x7f0000000100)={0x2, 0xe, &(0x7f0000000200)=ANY=[], &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x24, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0x8, 0x10, &(0x7f00000000c0)={0x0, 0x0, 0x4, 0xe}, 0x10, 0x0, r5}, 0x94) kernel console output (not intermixed with test programs): 4][T23992] ? rtnetlink_rcv_msg+0x1b9/0xbe0 [ 632.968264][T23992] ? __pfx_rtnetlink_rcv_msg+0x10/0x10 [ 632.968286][T23992] ? __lock_acquire+0x6b5/0x2cf0 [ 632.968317][T23992] netlink_rcv_skb+0x232/0x4b0 [ 632.968341][T23992] ? __pfx_rtnetlink_rcv_msg+0x10/0x10 [ 632.968363][T23992] ? __pfx_netlink_rcv_skb+0x10/0x10 [ 632.968407][T23992] ? netlink_deliver_tap+0x2e/0x1b0 [ 632.968429][T23992] ? netlink_deliver_tap+0x2e/0x1b0 [ 632.968456][T23992] netlink_unicast+0x75c/0x8e0 [ 632.968489][T23992] netlink_sendmsg+0x813/0xb40 [ 632.968520][T23992] ? __pfx_netlink_sendmsg+0x10/0x10 [ 632.968551][T23992] ? aa_sock_msg_perm+0xf1/0x1b0 [ 632.968575][T23992] ? bpf_lsm_socket_sendmsg+0x9/0x20 [ 632.968602][T23992] ____sys_sendmsg+0x972/0x9f0 [ 632.968625][T23992] ? __might_fault+0xaf/0x130 [ 632.968654][T23992] ? __pfx_____sys_sendmsg+0x10/0x10 [ 632.968687][T23992] ? import_iovec+0x73/0xa0 [ 632.968716][T23992] ___sys_sendmsg+0x2a5/0x360 [ 632.968737][T23992] ? __lock_acquire+0x6b5/0x2cf0 [ 632.968761][T23992] ? __pfx____sys_sendmsg+0x10/0x10 [ 632.968822][T23992] ? __fget_files+0x2a/0x420 [ 632.968842][T23992] ? __fget_files+0x3a0/0x420 [ 632.968874][T23992] __x64_sys_sendmsg+0x1bd/0x2a0 [ 632.968901][T23992] ? __pfx___x64_sys_sendmsg+0x10/0x10 [ 632.968934][T23992] ? __pfx_ksys_write+0x10/0x10 [ 632.968967][T23992] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 632.968987][T23992] do_syscall_64+0x15f/0xf80 [ 632.969006][T23992] ? trace_irq_disable+0x3b/0x140 [ 632.969032][T23992] ? clear_bhb_loop+0x40/0x90 [ 632.969055][T23992] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 632.969072][T23992] RIP: 0033:0x7faec419cdd9 [ 632.969089][T23992] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 632.969104][T23992] RSP: 002b:00007faec50b9028 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 632.969123][T23992] RAX: ffffffffffffffda RBX: 00007faec4416090 RCX: 00007faec419cdd9 [ 632.969135][T23992] RDX: 0000000000000010 RSI: 00002000000012c0 RDI: 0000000000000004 [ 632.969146][T23992] RBP: 00007faec50b9090 R08: 0000000000000000 R09: 0000000000000000 [ 632.969157][T23992] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 632.969167][T23992] R13: 00007faec4416128 R14: 00007faec4416090 R15: 00007ffd163b3f38 [ 632.969199][T23992] [ 633.331086][T22422] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 633.363716][ T8154] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 633.372331][ T8154] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 633.400975][ T5635] Bluetooth: hci4: command 0x0405 tx timeout [ 633.415853][T18282] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 633.445085][T23994] netlink: 28 bytes leftover after parsing attributes in process `syz.0.4644'. [ 633.619750][T23994] netlink: 24 bytes leftover after parsing attributes in process `syz.0.4644'. [ 633.914954][T24008] netlink: 12 bytes leftover after parsing attributes in process `syz.2.4649'. [ 633.948424][T24008] netlink: 36 bytes leftover after parsing attributes in process `syz.2.4649'. [ 633.960417][T24010] bond7: down delay (5) is not a multiple of miimon (2), value rounded to 4 ms [ 633.970719][T24010] bond7: entered promiscuous mode [ 634.008382][T24008] vlan3: entered promiscuous mode [ 634.026242][T24008] gretap0: entered promiscuous mode [ 634.042363][T24008] vlan3: entered allmulticast mode [ 634.062161][T24008] gretap0: entered allmulticast mode [ 634.154643][T24021] tipc: Started in network mode [ 634.160633][T24021] tipc: Node identity f6608c1b408a, cluster identity 4711 [ 634.170033][T24021] tipc: Enabled bearer , priority 0 [ 634.178706][T24021] syzkaller0: entered promiscuous mode [ 634.185276][T24021] syzkaller0: entered allmulticast mode [ 634.239840][T24024] netdevsim netdevsim4: Direct firmware load for . failed with error -2 [ 634.244644][T24021] tipc: Resetting bearer [ 634.257272][T24024] netdevsim netdevsim4: Falling back to sysfs fallback for: . [ 634.274750][T24020] tipc: Resetting bearer [ 634.278704][T24027] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 634.294881][T24027] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 634.320550][T24020] tipc: Disabling bearer [ 634.357101][T24029] netlink: 36 bytes leftover after parsing attributes in process `syz.4.4654'. [ 634.499262][T24031] bond7: option coupled_control: mode dependency failed, not supported in mode balance-rr(0) [ 634.514756][T24031] bond7 (unregistering): Released all slaves [ 634.769096][T24038] netlink: 'syz.5.4657': attribute type 14 has an invalid length. [ 634.792189][T24038] netlink: 'syz.5.4657': attribute type 13 has an invalid length. [ 634.883500][T24042] netlink: 'syz.2.4659': attribute type 13 has an invalid length. [ 634.920862][T24045] netlink: 'syz.1.4658': attribute type 142 has an invalid length. [ 635.354535][T24054] syzkaller0: entered promiscuous mode [ 635.361206][T24054] syzkaller0: entered allmulticast mode [ 635.909838][T24088] __nla_validate_parse: 7 callbacks suppressed [ 635.909857][T24088] netlink: 8 bytes leftover after parsing attributes in process `syz.5.4672'. [ 637.507322][T22422] net_ratelimit: 1031 callbacks suppressed [ 637.507342][T22422] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 637.738304][ T8163] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 637.747258][ T8154] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 638.223218][T18282] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 638.430935][T24082] netlink: 280 bytes leftover after parsing attributes in process `syz.4.4671'. [ 638.446425][T24096] netlink: 8 bytes leftover after parsing attributes in process `syz.1.4673'. [ 638.472044][T24096] netlink: 12 bytes leftover after parsing attributes in process `syz.1.4673'. [ 638.493073][T24094] lo speed is unknown, defaulting to 1000 [ 638.526694][T24096] netlink: 8 bytes leftover after parsing attributes in process `syz.1.4673'. [ 638.532368][T24094] lo speed is unknown, defaulting to 1000 [ 638.551094][T22422] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 638.573822][T24096] netlink: 12 bytes leftover after parsing attributes in process `syz.1.4673'. [ 638.623890][T24102] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 638.636888][T24104] syzkaller0: entered promiscuous mode [ 638.653139][T24104] syzkaller0: entered allmulticast mode [ 638.729550][T24111] : renamed from veth0_to_bond (while UP) [ 638.809768][T24117] netlink: 8 bytes leftover after parsing attributes in process `syz.5.4674'. [ 638.859333][T24111] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 638.866070][T24117] netlink: 28 bytes leftover after parsing attributes in process `syz.5.4674'. [ 638.884117][T24120] atomic_op ffff888057393998 conn xmit_atomic 0000000000000000 [ 639.032241][ T149] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 639.045161][T24125] lo speed is unknown, defaulting to 1000 [ 639.046180][ T162] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 639.158006][T24125] lo speed is unknown, defaulting to 1000 [ 639.181965][T24135] sctp: [Deprecated]: syz.5.4682 (pid 24135) Use of int in maxseg socket option. [ 639.181965][T24135] Use struct sctp_assoc_value instead [ 639.496559][T18284] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 639.816915][T24146] bridge0: port 2(bridge_slave_1) entered disabled state [ 639.824409][T24146] bridge0: port 1(bridge_slave_0) entered disabled state [ 640.132377][T24146] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 640.168510][T24146] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 640.640478][ T8163] netdevsim netdevsim5 netdevsim0: unset [1, 0] type 2 family 0 port 6081 - 0 [ 640.685271][ T8163] netdevsim netdevsim5 netdevsim1: unset [1, 0] type 2 family 0 port 6081 - 0 [ 640.759038][ T8163] netdevsim netdevsim5 netdevsim2: unset [1, 0] type 2 family 0 port 6081 - 0 [ 640.769605][ T8163] netdevsim netdevsim5 netdevsim3: unset [1, 0] type 2 family 0 port 6081 - 0 [ 640.810918][T24152] netlink: 'syz.5.4685': attribute type 3 has an invalid length. [ 640.883545][T24155] netlink: 8 bytes leftover after parsing attributes in process `syz.5.4685'. [ 641.064499][T24161] 8021q: adding VLAN 0 to HW filter on device bond6 [ 641.072500][T24173] netlink: 24 bytes leftover after parsing attributes in process `syz.4.4686'. [ 641.079862][T24161] bond0: (slave bond6): Enslaving as an active interface with an up link [ 641.199677][T24154] bond0: (slave gretap1): Enslaving as an active interface with an up link [ 641.310526][T24154] netlink: 16 bytes leftover after parsing attributes in process `syz.4.4686'. [ 641.458722][T24195] netlink: 28 bytes leftover after parsing attributes in process `syz.5.4691'. [ 641.869151][T24176] netlink: 'syz.1.4689': attribute type 1 has an invalid length. [ 642.228348][T24228] netlink: 4 bytes leftover after parsing attributes in process `syz.1.4696'. [ 642.311543][T24234] netlink: 12 bytes leftover after parsing attributes in process `syz.0.4699'. [ 642.366589][T24234] nbd: couldn't find device at index 2048 [ 642.374758][T24234] netlink: 88 bytes leftover after parsing attributes in process `syz.0.4699'. [ 642.537060][T18284] net_ratelimit: 8 callbacks suppressed [ 642.537079][T18284] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 642.695877][ T8154] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 643.019914][T24265] netlink: 'syz.4.4706': attribute type 1 has an invalid length. [ 643.036079][T24265] netlink: 96 bytes leftover after parsing attributes in process `syz.4.4706'. [ 643.081517][T24265] netlink: 1 bytes leftover after parsing attributes in process `syz.4.4706'. [ 643.108282][T24265] netlink: 'syz.4.4706': attribute type 1 has an invalid length. [ 643.435736][T24289] syzkaller0: entered promiscuous mode [ 643.461420][T24289] syzkaller0: entered allmulticast mode [ 643.496683][ T162] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 643.504839][ T162] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 643.601925][T24297] tipc: Enabled bearer , priority 0 [ 643.734007][T24307] tipc: Enabled bearer , priority 0 [ 643.789074][T24286] tipc: Resetting bearer [ 643.861823][T24286] tipc: Disabling bearer [ 643.968772][T24307] tipc: Resetting bearer [ 643.998655][T24307] netlink: 'syz.0.4714': attribute type 1 has an invalid length. [ 644.031855][T24307] netlink: 96 bytes leftover after parsing attributes in process `syz.0.4714'. [ 644.060856][T24307] netlink: 1 bytes leftover after parsing attributes in process `syz.0.4714'. [ 644.107602][T24307] netlink: 'syz.0.4714': attribute type 1 has an invalid length. [ 644.153909][T24307] netlink: 'syz.0.4714': attribute type 8 has an invalid length. [ 644.778320][ T149] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 644.787094][ T8163] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 644.829929][T22414] tipc: Node number set to 1073741825 [ 645.346494][ T162] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 645.575670][T18285] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 645.712700][T24395] mac80211_hwsim hwsim46 ªªªªª;: renamed from wlan0 [ 646.035676][ C1] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 646.176200][T24429] tipc: Resetting bearer [ 646.217307][T24429] openvswitch: netlink: Geneve opt len 1 is not a multiple of 4. [ 646.300823][T24424] __nla_validate_parse: 2 callbacks suppressed [ 646.300841][T24424] netlink: 12 bytes leftover after parsing attributes in process `syz.5.4735'. [ 646.347415][T24424] veth1_to_batadv: entered allmulticast mode [ 646.370589][T24427] tipc: Resetting bearer [ 646.882723][T24474] netlink: 'syz.0.4747': attribute type 1 has an invalid length. [ 646.972650][ T162] tipc: Resetting bearer [ 647.169325][T24474] bond8: entered promiscuous mode [ 647.175377][T24474] 8021q: adding VLAN 0 to HW filter on device bond8 [ 647.373878][T24489] netlink: 28 bytes leftover after parsing attributes in process `syz.4.4751'. [ 647.692158][T24501] netlink: 8 bytes leftover after parsing attributes in process `syz.1.4754'. [ 647.725696][T24501] netlink: 8 bytes leftover after parsing attributes in process `syz.1.4754'. [ 647.941480][T24516] net_ratelimit: 4 callbacks suppressed [ 647.941499][T24516] openvswitch: netlink: IP tunnel dst address not specified [ 647.955960][T24516] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 648.333208][T24539] xt_time: unknown flags 0xf4 [ 648.469305][T24541] xt_CT: You must specify a L4 protocol and not use inversions on it [ 648.625795][T18285] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 648.634545][ T8163] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 649.269056][ T8163] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 649.280670][ T149] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 650.540001][ T149] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 650.548661][ T149] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 651.175633][ C1] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 651.185237][ T8163] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 651.316945][T24557] input: Bluetooth HID Boot Protocol Device as /devices/virtual/bluetooth/hci4/hci4:200/input7 [ 652.050347][T24580] netlink: 8 bytes leftover after parsing attributes in process `syz.4.4771'. [ 652.076305][T24580] ieee802154 phy0 wpan0: encryption failed: -22 [ 652.352813][T24593] netlink: 24 bytes leftover after parsing attributes in process `syz.1.4774'. [ 652.352857][T24595] x_tables: unsorted underflow at hook 2 [ 652.590602][T24607] netlink: 28 bytes leftover after parsing attributes in process `syz.0.4780'. [ 652.626825][T24609] netlink: 'syz.1.4778': attribute type 1 has an invalid length. [ 652.717306][T24609] bond5: (slave vxcan5): The slave device specified does not support setting the MAC address [ 652.728438][T24609] bond5: (slave vxcan5): Error -95 calling set_mac_address [ 652.744114][T24619] netlink: 20 bytes leftover after parsing attributes in process `syz.1.4778'. [ 652.763012][T24619] netlink: 28 bytes leftover after parsing attributes in process `syz.1.4778'. [ 652.816199][T24619] 8021q: adding VLAN 0 to HW filter on device bond5 [ 652.833206][T24609] macvlan1: entered promiscuous mode [ 652.838645][T24609] macvlan1: entered allmulticast mode [ 652.848497][T24609] bond5: entered promiscuous mode [ 652.862779][T24609] 8021q: adding VLAN 0 to HW filter on device macvlan1 [ 653.098136][ T8163] net_ratelimit: 3 callbacks suppressed [ 653.098156][ T8163] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 653.681773][T24609] bond5: left promiscuous mode [ 653.741027][T24627] : entered promiscuous mode [ 653.768274][T24634] x_tables: unsorted underflow at hook 2 [ 654.058596][T24632] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 654.080701][T24639] netlink: 4 bytes leftover after parsing attributes in process `syz.5.4787'. [ 654.103821][T24639] netlink: 2 bytes leftover after parsing attributes in process `syz.5.4787'. [ 654.118913][T24639] netlink: 8 bytes leftover after parsing attributes in process `syz.5.4787'. [ 654.312554][T24662] x_tables: unsorted underflow at hook 2 [ 654.375734][ C1] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 654.383898][ C1] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 654.395024][T24667] netlink: 'syz.0.4795': attribute type 1 has an invalid length. [ 654.455887][ C1] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 654.466273][ C1] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 654.478275][T24667] bond9: entered promiscuous mode [ 654.483411][T24667] bond9: entered allmulticast mode [ 654.494744][T24667] 8021q: adding VLAN 0 to HW filter on device bond9 [ 654.538926][ T5752] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 654.671955][T24682] x_tables: unsorted underflow at hook 2 [ 654.706657][T18284] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 654.741843][T24682] netlink: 8 bytes leftover after parsing attributes in process `syz.1.4799'. [ 654.761201][T24682] netlink: 8 bytes leftover after parsing attributes in process `syz.1.4799'. [ 655.013490][T24702] netlink: 'syz.5.4805': attribute type 10 has an invalid length. [ 655.023882][ T149] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 655.037215][ T8169] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 655.062101][T24702] team0: Port device dummy0 added [ 655.077645][T24704] netlink: 'syz.5.4805': attribute type 10 has an invalid length. [ 655.124326][T24704] team0: Port device dummy0 removed [ 655.140821][T24704] bond0: (slave dummy0): Enslaving as an active interface with an up link [ 655.614115][T24719] netlink: 'syz.0.4812': attribute type 1 has an invalid length. [ 655.622462][T24719] netlink: 'syz.0.4812': attribute type 1 has an invalid length. [ 655.648771][T24721] geneve2: entered promiscuous mode [ 655.662047][T24721] x_tables: duplicate underflow at hook 1 [ 655.713119][T24725] x_tables: unsorted underflow at hook 2 [ 656.023207][T24739] lo speed is unknown, defaulting to 1000 [ 656.038572][T24739] lo speed is unknown, defaulting to 1000 [ 656.448779][T24766] lo speed is unknown, defaulting to 1000 [ 656.626005][T24766] lo speed is unknown, defaulting to 1000 [ 657.374544][T24781] netlink: 'syz.4.4828': attribute type 1 has an invalid length. [ 657.398001][T24783] x_tables: unsorted underflow at hook 2 [ 657.531462][T24781] 8021q: adding VLAN 0 to HW filter on device bond7 [ 657.533118][T24783] __nla_validate_parse: 10 callbacks suppressed [ 657.533137][T24783] netlink: 8 bytes leftover after parsing attributes in process `syz.0.4827'. [ 657.555723][T24783] netlink: 8 bytes leftover after parsing attributes in process `syz.0.4827'. [ 657.751962][T24781] veth7: entered promiscuous mode [ 657.780396][T24791] netlink: 'syz.0.4829': attribute type 39 has an invalid length. [ 658.017082][T24794] tipc: Resetting bearer [ 658.023133][T24790] netlink: 20 bytes leftover after parsing attributes in process `syz.0.4829'. [ 658.047429][T24796] netlink: 'syz.1.4831': attribute type 8 has an invalid length. [ 658.087651][T24789] tipc: Resetting bearer [ 658.218204][ T8163] net_ratelimit: 12 callbacks suppressed [ 658.218222][ T8163] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 658.300740][T24811] netlink: 'syz.0.4833': attribute type 7 has an invalid length. [ 658.620662][T24828] netlink: 'syz.4.4838': attribute type 3 has an invalid length. [ 658.660098][T24828] netlink: 3 bytes leftover after parsing attributes in process `syz.4.4838'. [ 658.765050][T24836] x_tables: unsorted underflow at hook 2 [ 658.833676][T24836] netlink: 8 bytes leftover after parsing attributes in process `syz.1.4839'. [ 658.845870][T24836] netlink: 8 bytes leftover after parsing attributes in process `syz.1.4839'. [ 658.857780][ T149] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 658.890984][ T8167] tipc: Resetting bearer [ 658.937630][T24841] netlink: 32 bytes leftover after parsing attributes in process `syz.4.4841'. [ 659.080813][T24851] netlink: 12 bytes leftover after parsing attributes in process `syz.1.4842'. [ 659.259653][T24865] netlink: 24 bytes leftover after parsing attributes in process `syz.5.4845'. [ 659.381694][T24872] tipc: Resetting bearer [ 659.461936][T24886] IPVS: set_ctl: invalid protocol: 47 255.255.255.255:20000 [ 659.491746][T24872] tipc: Resetting bearer [ 659.651872][T24890] netlink: 8 bytes leftover after parsing attributes in process `syz.0.4850'. [ 659.846173][T24897] x_tables: unsorted underflow at hook 2 [ 659.938854][ T8167] tipc: Resetting bearer [ 660.137942][ T8167] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 660.172467][T24905] tipc: Resetting bearer [ 660.225778][ C0] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 660.373186][T24902] tipc: Resetting bearer [ 660.688441][ T8163] tipc: Resetting bearer [ 660.778111][ T8167] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 660.788926][ T149] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 660.798214][T24881] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 660.949270][T24947] lo speed is unknown, defaulting to 1000 [ 660.971027][T24947] lo speed is unknown, defaulting to 1000 [ 661.166869][T24958] gtp0: entered promiscuous mode [ 661.194033][T24958] gtp0: entered allmulticast mode [ 661.320556][T24966] x_tables: unsorted underflow at hook 2 [ 661.664062][T24972] No such timeout policy "syz0" [ 661.956318][ T5635] Bluetooth: hci6: unexpected cc 0x0c03 length: 249 > 1 [ 661.973929][ T5635] Bluetooth: hci6: unexpected cc 0x1003 length: 249 > 9 [ 661.992588][ T5635] Bluetooth: hci6: unexpected cc 0x1001 length: 249 > 9 [ 662.022012][ T5635] Bluetooth: hci6: unexpected cc 0x0c23 length: 249 > 4 [ 662.029887][ T5635] Bluetooth: hci6: unexpected cc 0x0c38 length: 249 > 2 [ 662.061787][ T8154] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 662.070544][ T149] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 662.206376][T24988] lo speed is unknown, defaulting to 1000 [ 662.299541][T24988] lo speed is unknown, defaulting to 1000 [ 662.700599][ T8169] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 662.861370][T24982] lo speed is unknown, defaulting to 1000 [ 663.081122][T25011] __nla_validate_parse: 8 callbacks suppressed [ 663.081143][T25011] netlink: 27 bytes leftover after parsing attributes in process `syz.4.4876'. [ 663.153516][T25014] netlink: 12 bytes leftover after parsing attributes in process `syz.5.4877'. [ 663.236899][T25016] netlink: 8 bytes leftover after parsing attributes in process `syz.4.4878'. [ 663.306841][T24982] lo speed is unknown, defaulting to 1000 [ 663.335754][ C0] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 663.344948][ C1] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 663.354375][ C0] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 663.372473][ T8169] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 663.843860][T24879] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 664.132578][T25045] : renamed from bond0 [ 664.193964][T25049] netlink: 20 bytes leftover after parsing attributes in process `syz.1.4884'. [ 664.215909][ T49] Bluetooth: hci6: command tx timeout [ 664.435662][ C0] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 664.606148][ C0] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 665.222491][T25085] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 665.266524][T25085] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 665.511901][T25106] netlink: 32 bytes leftover after parsing attributes in process `syz.0.4893'. [ 665.847538][T24982] bridge0: port 1(bridge_slave_0) entered blocking state [ 665.855010][T24982] bridge0: port 1(bridge_slave_0) entered disabled state [ 665.862650][T24982] bridge_slave_0: entered allmulticast mode [ 665.871062][T24982] bridge_slave_0: entered promiscuous mode [ 665.882857][T24982] bridge0: port 2(bridge_slave_1) entered blocking state [ 665.898656][ T8169] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 665.899845][T24982] bridge0: port 2(bridge_slave_1) entered disabled state [ 665.933999][T24982] bridge_slave_1: entered allmulticast mode [ 665.959580][T24982] bridge_slave_1: entered promiscuous mode [ 665.982117][T25133] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 666.034436][T25131] tipc: Resetting bearer [ 666.059012][T25136] netlink: 16 bytes leftover after parsing attributes in process `syz.1.4898'. [ 666.086411][T25125] netlink: 32 bytes leftover after parsing attributes in process `syz.4.4895'. [ 666.228304][T25131] netlink: 144 bytes leftover after parsing attributes in process `syz.0.4897'. [ 666.260288][T25130] tipc: Resetting bearer [ 666.298326][ T49] Bluetooth: hci6: command tx timeout [ 666.359844][T24982] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 666.415159][T24982] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 666.432124][T25147] netlink: 48 bytes leftover after parsing attributes in process `syz.1.4899'. [ 666.516530][T25155] netlink: 28 bytes leftover after parsing attributes in process `syz.0.4901'. [ 666.546547][ T8169] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 666.590987][T24982] team0: Port device team_slave_0 added [ 666.635846][T24982] team0: Port device team_slave_1 added [ 666.744113][T24982] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 666.766014][T24982] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 666.817312][T24982] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 666.848242][T24982] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 666.855301][T24982] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 666.918868][T24982] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 667.035141][T24982] hsr_slave_0: entered promiscuous mode [ 667.048186][T24982] hsr_slave_1: entered promiscuous mode [ 667.056105][T24982] debugfs: 'hsr0' already exists in 'hsr' [ 667.061948][T24982] Cannot create hsr debugfs directory [ 667.106458][ T8154] tipc: Resetting bearer [ 667.376254][T25188] netlink: 'syz.5.4906': attribute type 14 has an invalid length. [ 668.064113][T25203] lo speed is unknown, defaulting to 1000 [ 668.068954][T24982] netdevsim netdevsim6 netdevsim0: renamed from eth0 [ 668.120538][T24982] 8021q: adding VLAN 0 to HW filter on device netdevsim0 [ 668.146694][T24982] netdevsim netdevsim6 netdevsim1: renamed from eth1 [ 668.169684][T24982] 8021q: adding VLAN 0 to HW filter on device netdevsim1 [ 668.190523][T25203] lo speed is unknown, defaulting to 1000 [ 668.191073][T24982] netdevsim netdevsim6 netdevsim2: renamed from eth2 [ 668.222024][T24982] 8021q: adding VLAN 0 to HW filter on device netdevsim2 [ 668.236657][T24982] netdevsim netdevsim6 netdevsim3: renamed from eth3 [ 668.264162][T24982] 8021q: adding VLAN 0 to HW filter on device netdevsim3 [ 668.376867][ T49] Bluetooth: hci6: command tx timeout [ 668.455923][ C0] net_ratelimit: 5 callbacks suppressed [ 668.455940][ C0] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 668.469904][ C0] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 668.551012][T24982] 8021q: adding VLAN 0 to HW filter on device bond0 [ 668.614186][T24982] 8021q: adding VLAN 0 to HW filter on device team0 [ 668.622254][T25223] netlink: 'syz.1.4911': attribute type 1 has an invalid length. [ 668.663286][ T8169] bridge0: port 1(bridge_slave_0) entered blocking state [ 668.670517][ T8169] bridge0: port 1(bridge_slave_0) entered forwarding state [ 668.672292][T25223] netlink: 'syz.1.4911': attribute type 1 has an invalid length. [ 668.797441][ T8154] bridge0: port 2(bridge_slave_1) entered blocking state [ 668.804683][ T8154] bridge0: port 2(bridge_slave_1) entered forwarding state [ 669.096311][ T149] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 669.400160][T25246] netlink: 8 bytes leftover after parsing attributes in process `syz.5.4914'. [ 669.663897][T25251] netlink: 'syz.5.4915': attribute type 1 has an invalid length. [ 669.693121][T25254] netlink: 8 bytes leftover after parsing attributes in process `syz.1.4916'. [ 669.896941][T24881] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 669.983373][T25251] 8021q: adding VLAN 0 to HW filter on device bond0 [ 670.074159][T25257] bond0: (slave gretap1): making interface the new active one [ 670.094725][T25257] bond0: (slave gretap1): Enslaving as an active interface with an up link [ 670.119856][T25259] tipc: Enabling of bearer rejected, media not registered [ 670.465794][ T49] Bluetooth: hci6: command tx timeout [ 670.502987][T25286] x_tables: unsorted underflow at hook 2 [ 670.553714][T25286] netlink: 8 bytes leftover after parsing attributes in process `syz.0.4920'. [ 670.603823][T25286] netlink: 8 bytes leftover after parsing attributes in process `syz.0.4920'. [ 670.632396][T25289] netlink: 12 bytes leftover after parsing attributes in process `syz.5.4921'. [ 670.693365][T24982] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 671.591378][T25319] bridge0: port 2(bridge_slave_1) entered disabled state [ 671.598970][T25319] bridge0: port 1(bridge_slave_0) entered disabled state [ 671.666241][ T8154] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 671.674853][ T5956] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 671.823428][T25347] x_tables: unsorted underflow at hook 2 [ 671.896380][T25347] netlink: 8 bytes leftover after parsing attributes in process `syz.5.4932'. [ 671.932424][T25347] netlink: 8 bytes leftover after parsing attributes in process `syz.5.4932'. [ 672.210850][T25355] IPv6: Can't replace route, no match found [ 672.296865][ T8154] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 672.936989][ T5956] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 673.012899][ T149] netdevsim netdevsim4 netdevsim0: unset [0, 0] type 1 family 0 port 8472 - 0 [ 673.045495][ T149] netdevsim netdevsim4 netdevsim0: unset [1, 0] type 2 family 0 port 6081 - 0 [ 673.082018][ T149] netdevsim netdevsim4 netdevsim1: unset [0, 0] type 1 family 0 port 8472 - 0 [ 673.128734][ T149] netdevsim netdevsim4 netdevsim1: unset [1, 0] type 2 family 0 port 6081 - 0 [ 673.155901][ T149] netdevsim netdevsim4 netdevsim2: unset [0, 0] type 1 family 0 port 8472 - 0 [ 673.167776][ T149] netdevsim netdevsim4 netdevsim2: unset [1, 0] type 2 family 0 port 6081 - 0 [ 673.184196][ T149] netdevsim netdevsim4 netdevsim3: unset [0, 0] type 1 family 0 port 8472 - 0 [ 673.197223][ T149] netdevsim netdevsim4 netdevsim3: unset [1, 0] type 2 family 0 port 6081 - 0 [ 673.304749][T24982] veth0_vlan: entered promiscuous mode [ 673.334325][T24982] veth1_vlan: entered promiscuous mode [ 673.391439][T25382] x_tables: arp_tables: NFQUEUE target: not valid for this family [ 673.408475][T24982] veth0_macvtap: entered promiscuous mode [ 673.441317][T25382] netlink: 8 bytes leftover after parsing attributes in process `syz.1.4939'. [ 673.445261][T24982] veth1_macvtap: entered promiscuous mode [ 673.492025][T25390] netlink: 280 bytes leftover after parsing attributes in process `syz.5.4941'. [ 673.590630][T24982] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 673.632411][T24982] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 673.695302][ T8163] netdevsim netdevsim6 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 673.705347][ T8163] netdevsim netdevsim6 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 673.718606][ T8163] netdevsim netdevsim6 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 673.730823][ T8163] netdevsim netdevsim6 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 673.961516][T25361] nci: __nci_request: wait_for_completion_interruptible_timeout failed -512 [ 674.100550][ T8163] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 674.134230][ T8163] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 674.210038][T25412] x_tables: unsorted underflow at hook 2 [ 674.216597][ T149] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 674.294539][ T149] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 674.330759][ T149] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 674.347917][T25412] netlink: 8 bytes leftover after parsing attributes in process `syz.1.4943'. [ 674.760647][T25441] ip6t_srh: unknown srh invflags BA61 [ 674.858110][ T5956] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 674.895819][T25447] ÿ: renamed from bond_slave_0 [ 674.950620][T25453] geneve2: entered promiscuous mode [ 675.026985][T25455] __nla_validate_parse: 1 callbacks suppressed [ 675.027005][T25455] netlink: 12 bytes leftover after parsing attributes in process `syz.6.4869'. [ 675.585302][T25487] tipc: Resetting bearer [ 675.634225][T25494] netlink: 4 bytes leftover after parsing attributes in process `syz.1.4962'. [ 675.678971][T25494] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 675.862682][T25509] netlink: 52 bytes leftover after parsing attributes in process `syz.5.4964'. [ 675.968378][T25500] geneve3: entered promiscuous mode [ 676.063603][T25522] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 676.108287][T25511] IPVS: set_ctl: invalid protocol: 103 224.0.0.1:20001 [ 676.138948][T25525] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check. [ 676.222353][T25503] netlink: 4456 bytes leftover after parsing attributes in process `syz.1.4962'. [ 676.331956][ T9] IPVS: starting estimator thread 0... [ 676.388097][T25486] tipc: Failed to remove unknown binding: 66,1,1/1073741825:1657955307/1657955308 [ 676.423427][T25486] tipc: Failed to remove unknown binding: 66,1,1/1073741825:1657955307/1657955308 [ 676.466969][T25537] IPVS: using max 39 ests per chain, 93600 per kthread [ 676.486800][T25486] tipc: Resetting bearer [ 676.509748][ T149] tipc: Resetting bearer [ 676.777076][ T8163] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 676.908397][T25565] : entered promiscuous mode [ 677.273146][T25582] veth5: entered promiscuous mode [ 677.312549][T25578] dvmrp0: entered allmulticast mode [ 677.338866][ T8169] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 677.432496][ T8154] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 677.449514][ T149] nci: nci_add_new_protocol: the target found does not have the desired protocol [ 677.681005][T25596] lo speed is unknown, defaulting to 1000 [ 677.720541][T25603] ip6gre1: entered promiscuous mode [ 677.759776][T25596] lo speed is unknown, defaulting to 1000 [ 677.831277][T25603] tun0: tun_chr_ioctl cmd 1074025675 [ 677.849942][T25603] tun0: persist enabled [ 677.862388][T25603] tun0: tun_chr_ioctl cmd 1074025675 [ 677.871166][T25603] tun0: persist enabled [ 677.877147][T25603] tun0: tun_chr_ioctl cmd 1074025673 [ 678.059070][ T8167] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 678.695757][ C1] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 679.976568][ T8163] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 680.311040][T25586] nci: __nci_request: wait_for_completion_interruptible_timeout failed -512 [ 680.511681][T25657] netlink: 8 bytes leftover after parsing attributes in process `syz.0.4990'. [ 680.618038][ T8169] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 680.753277][T25677] IPVS: length: 145 != 8 [ 680.988704][T25689] netlink: 8 bytes leftover after parsing attributes in process `syz.5.4999'. [ 681.047914][T25689] netlink: 48 bytes leftover after parsing attributes in process `syz.5.4999'. [ 681.157036][T25687] 8021q: adding VLAN 0 to HW filter on device bond1 [ 681.815572][T25736] netlink: 'syz.0.5010': attribute type 30 has an invalid length. [ 682.546779][ T8169] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 682.554966][ T8167] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 683.176995][ T8163] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 683.818272][ T162] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 684.304330][T25707] nci: __nci_request: wait_for_completion_interruptible_timeout failed -512 [ 684.464608][T25747] x_tables: ip_tables: DNAT target: used from hooks POSTROUTING, but only usable from PREROUTING/OUTPUT [ 684.507225][T25750] netlink: 208 bytes leftover after parsing attributes in process `syz.4.5014'. [ 684.519666][T25750] netlink: 208 bytes leftover after parsing attributes in process `syz.4.5014'. [ 684.622653][T25756] input: Bluetooth HID Boot Protocol Device as /devices/virtual/bluetooth/hci6/hci6:200/input8 [ 685.098203][ C0] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 685.738004][ T1313] ieee802154 phy0 wpan0: encryption failed: -22 [ 685.744806][ T8169] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 686.379746][ T8169] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 687.898460][T25779] netlink: 40 bytes leftover after parsing attributes in process `syz.1.5022'. [ 687.915186][T25779] openvswitch: netlink: Flow key attr not present in new flow. [ 688.111198][T25801] netlink: 4 bytes leftover after parsing attributes in process `syz.1.5029'. [ 688.297930][ T8158] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 688.306912][ T8161] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 688.429177][T25806] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 688.941918][ T8161] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 688.950092][ T8167] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 689.086660][ T5635] block nbd2: Receive control failed (result -32) [ 691.502571][ T8158] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 691.511803][ T35] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 692.036260][T25830] syzkaller0: entered promiscuous mode [ 692.042108][T25830] syzkaller0: entered allmulticast mode [ 692.359805][T25847] netlink: 24 bytes leftover after parsing attributes in process `syz.1.5042'. [ 692.396463][T25847] : renamed from veth0_to_bond (while UP) [ 692.569206][T25840] netlink: 8 bytes leftover after parsing attributes in process `syz.0.5041'. [ 692.686457][ T5635] block nbd3: Receive control failed (result -32) [ 692.786378][T25865] netlink: 28 bytes leftover after parsing attributes in process `syz.5.5046'. [ 692.799033][T25865] netlink: 28 bytes leftover after parsing attributes in process `syz.5.5046'. [ 692.809334][T25865] netlink: 28 bytes leftover after parsing attributes in process `syz.5.5046'. [ 692.819379][T25865] netlink: 28 bytes leftover after parsing attributes in process `syz.5.5046'. [ 692.848546][T25865] netlink: 28 bytes leftover after parsing attributes in process `syz.5.5046'. [ 692.875312][T25867] geneve3: entered promiscuous mode [ 692.890988][T25865] netlink: 28 bytes leftover after parsing attributes in process `syz.5.5046'. [ 692.891475][ T5956] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 692.945114][T25865] netlink: 28 bytes leftover after parsing attributes in process `syz.5.5046'. [ 692.962949][T25865] netlink: 28 bytes leftover after parsing attributes in process `syz.5.5046'. [ 692.977029][T25865] netlink: 28 bytes leftover after parsing attributes in process `syz.5.5046'. [ 693.019875][T25865] netlink: 28 bytes leftover after parsing attributes in process `syz.5.5046'. [ 693.073368][T25865] netlink: 28 bytes leftover after parsing attributes in process `syz.5.5046'. [ 693.117232][T25865] netlink: 28 bytes leftover after parsing attributes in process `syz.5.5046'. [ 693.130931][T25865] netlink: 28 bytes leftover after parsing attributes in process `syz.5.5046'. [ 693.163861][T25865] netlink: 28 bytes leftover after parsing attributes in process `syz.5.5046'. [ 693.184929][T25865] netlink: 28 bytes leftover after parsing attributes in process `syz.5.5046'. [ 693.206876][T25865] netlink: 28 bytes leftover after parsing attributes in process `syz.5.5046'. [ 693.799767][T25917] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 693.888275][T25920] netlink: 'syz.1.5063': attribute type 5 has an invalid length. [ 694.005856][T25926] syzkaller0: entered promiscuous mode [ 694.011399][T25926] syzkaller0: entered allmulticast mode [ 694.072371][ T8161] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 694.080568][ T35] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 694.189694][T25939] bridge_slave_0: default FDB implementation only supports local addresses [ 694.420807][T25954] xfrm2: entered allmulticast mode [ 694.480601][T25954] netlink: 'syz.1.5071': attribute type 6 has an invalid length. [ 694.696866][ T8169] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 694.713051][ T8161] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 694.841112][T25985] siw: device registration error -23 [ 694.940945][T25990] tipc: Enabled bearer , priority 0 [ 695.154976][T25995] netlink: 'syz.1.5083': attribute type 16 has an invalid length. [ 695.527592][T26011] ip6gre2: entered promiscuous mode [ 695.548776][T26011] ip6gre2: entered allmulticast mode [ 695.589833][T26010] netlink: 'syz.5.5087': attribute type 6 has an invalid length. [ 695.622587][T26015] x_tables: unsorted underflow at hook 2 [ 695.858257][T26030] netlink: 'syz.4.5094': attribute type 1 has an invalid length. [ 695.901430][T26022] bond6: entered promiscuous mode [ 695.989919][T26030] 8021q: adding VLAN 0 to HW filter on device bond8 [ 696.112513][T26032] bond8: (slave geneve3): making interface the new active one [ 696.130213][T26032] bond8: (slave geneve3): Enslaving as an active interface with an up link [ 696.164272][ T8158] netdevsim netdevsim4 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 696.187719][ T8158] netdevsim netdevsim4 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 696.222798][ T8158] netdevsim netdevsim4 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 696.262239][T26036] syzkaller0: entered promiscuous mode [ 696.286914][T26036] syzkaller0: entered allmulticast mode [ 696.313690][T26031] tipc: Started in network mode [ 696.333500][T26031] tipc: Node identity 928ab1e39b38, cluster identity 4711 [ 696.347750][T26031] tipc: Enabled bearer , priority 0 [ 696.354619][ T8158] netdevsim netdevsim4 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 696.368540][T26049] hsr0: entered promiscuous mode [ 696.381117][T26028] tipc: Resetting bearer [ 696.430055][T26028] tipc: Disabling bearer [ 696.518366][T26050] hsr0: left promiscuous mode [ 696.535977][ T8167] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 696.725163][T26062] netlink: 'syz.6.5102': attribute type 10 has an invalid length. [ 696.784506][T26062] bond0: (slave dummy0): Enslaving as an active interface with an up link [ 696.900136][T26067] tipc: Enabled bearer , priority 0 [ 696.966774][T26071] netlink: 'syz.6.5105': attribute type 1 has an invalid length. [ 697.076440][T26067] syzkaller0: entered promiscuous mode [ 697.092895][T26067] syzkaller0: entered allmulticast mode [ 697.099019][ C1] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 697.127353][T26067] tipc: Resetting bearer [ 697.192209][T26066] tipc: Resetting bearer [ 697.264962][ T149] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 698.702160][ C1] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 698.710471][ C1] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 698.719023][ C1] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 698.727439][ C1] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 699.818338][ T149] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 699.826537][ T149] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 700.464304][ T8161] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 700.739434][T26066] tipc: Disabling bearer [ 700.752621][T22414] tipc: Node number set to 635568322 [ 700.817382][T26083] lo speed is unknown, defaulting to 1000 [ 700.842363][T26083] lo speed is unknown, defaulting to 1000 [ 700.879852][T26121] __nla_validate_parse: 37 callbacks suppressed [ 700.879872][T26121] netlink: 8 bytes leftover after parsing attributes in process `syz.1.5116'. [ 700.916594][T26121] netlink: 8 bytes leftover after parsing attributes in process `syz.1.5116'. [ 701.329693][T26135] bond10: option fail_over_mac: invalid value (127) [ 701.370083][T26135] bond10 (unregistering): Released all slaves [ 701.380772][T26139] netlink: 20 bytes leftover after parsing attributes in process `syz.5.5121'. [ 701.482956][T26141] netlink: 156 bytes leftover after parsing attributes in process `syz.5.5123'. [ 701.748952][ T8158] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 701.772341][T26153] tipc: Resetting bearer [ 701.801588][T26153] netlink: 24 bytes leftover after parsing attributes in process `syz.0.5125'. [ 701.840457][T26153] netlink: 4 bytes leftover after parsing attributes in process `syz.0.5125'. [ 701.960356][T26152] tipc: Resetting bearer [ 702.073869][T26166] batadv_slave_0: entered promiscuous mode [ 702.147420][T26165] batadv_slave_0: left promiscuous mode [ 702.162298][T26170] netlink: 'syz.6.5130': attribute type 4 has an invalid length. [ 702.172203][T26171] netlink: 'syz.6.5130': attribute type 4 has an invalid length. [ 702.385805][ T162] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 702.939594][ T8161] tipc: Resetting bearer [ 703.018872][ T162] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 703.025494][T26186] lo speed is unknown, defaulting to 1000 [ 703.033814][T26186] lo speed is unknown, defaulting to 1000 [ 704.564411][T26148] nci: __nci_request: wait_for_completion_interruptible_timeout failed -512 [ 704.801464][T26198] xt_hashlimit: size too large, truncated to 1048576 [ 704.930048][T26207] vlan0: entered promiscuous mode [ 705.007519][T26205] lo speed is unknown, defaulting to 1000 [ 705.029909][T26213] netlink: 60 bytes leftover after parsing attributes in process `syz.6.5142'. [ 705.054245][T26205] lo speed is unknown, defaulting to 1000 [ 705.123660][T26199] lo speed is unknown, defaulting to 1000 [ 705.303199][T26218] tipc: Resetting bearer [ 705.575742][ C1] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 705.586914][ T8161] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 705.595789][ T8158] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 705.677287][T26240] netlink: 'syz.5.5149': attribute type 13 has an invalid length. [ 705.706637][T26199] lo speed is unknown, defaulting to 1000 [ 705.969121][T26256] netlink: 'syz.4.5154': attribute type 29 has an invalid length. [ 705.983462][T26256] netlink: 8 bytes leftover after parsing attributes in process `syz.4.5154'. [ 706.219778][ T5956] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 706.338256][T26258] bond2: invalid ARP target 0.0.0.0 specified for addition [ 706.360004][T26258] bond2: option arp_ip_target: invalid value (0) [ 706.380065][T26258] bond2 (unregistering): Released all slaves [ 706.680858][T26287] netlink: 4 bytes leftover after parsing attributes in process `syz.5.5163'. [ 706.849197][T26295] netlink: 36 bytes leftover after parsing attributes in process `syz.0.5164'. [ 706.849259][T26296] netlink: 36 bytes leftover after parsing attributes in process `syz.0.5164'. [ 706.882161][ T8161] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 707.241445][T26306] syzkaller0: entered promiscuous mode [ 707.249175][T26306] syzkaller0: entered allmulticast mode [ 707.324739][T26315] xt_hashlimit: max too large, truncated to 1048576 [ 707.333178][T26315] xt_hashlimit: Unknown mode mask 300, kernel too old? [ 707.539408][T26325] netlink: 12 bytes leftover after parsing attributes in process `syz.4.5172'. [ 707.600598][T26329] IPv6: NLM_F_CREATE should be specified when creating new route [ 707.781631][T26334] netlink: zone id is out of range [ 707.836479][T26334] netlink: zone id is out of range [ 707.842598][T26334] netlink: zone id is out of range [ 707.848406][T26334] netlink: zone id is out of range [ 707.853626][T26334] netlink: zone id is out of range [ 707.859912][T26334] netlink: zone id is out of range [ 707.866831][T26334] netlink: zone id is out of range [ 707.872551][T26334] netlink: zone id is out of range [ 707.928146][T26334] netlink: zone id is out of range [ 708.052242][T26345] netlink: 12 bytes leftover after parsing attributes in process `syz.0.5179'. [ 708.062472][T26347] netlink: 41 bytes leftover after parsing attributes in process `syz.1.5181'. [ 708.078089][T26347] netlink: 140 bytes leftover after parsing attributes in process `syz.1.5181'. [ 708.113932][T26345] 8021q: adding VLAN 0 to HW filter on device bond10 [ 708.123651][T26347] netlink: 41 bytes leftover after parsing attributes in process `syz.1.5181'. [ 708.182798][T26345] bond10: (slave veth5): Enslaving as an active interface with an up link [ 708.218616][T26345] netlink: 20 bytes leftover after parsing attributes in process `syz.0.5179'. [ 708.303060][T26345] bond10: (slave bridge6): Enslaving as an active interface with an up link [ 708.319756][T26349] lo speed is unknown, defaulting to 1000 [ 708.348099][T26349] lo speed is unknown, defaulting to 1000 [ 708.610666][T26366] lo speed is unknown, defaulting to 1000 [ 708.809158][T26380] syzkaller0: entered promiscuous mode [ 708.814807][T26380] syzkaller0: entered allmulticast mode [ 708.870553][T26382] netlink: 'syz.1.5190': attribute type 3 has an invalid length. [ 708.888365][T26366] lo speed is unknown, defaulting to 1000 [ 709.441450][T26399] 8021q: VLANs not supported on ip6tnl0 [ 710.106177][T26409] IPv6: RTM_NEWROUTE with no NLM_F_CREATE or NLM_F_REPLACE [ 710.113480][T26409] IPv6: NLM_F_CREATE should be set when creating new route [ 710.120776][T26409] IPv6: NLM_F_CREATE should be set when creating new route [ 710.337666][T26423] syzkaller0: entered promiscuous mode [ 710.414722][T26432] tipc: Resetting bearer [ 710.478396][T26431] tipc: Resetting bearer [ 710.736005][T26450] bond11: option lacp_active: mode dependency failed, not supported in mode balance-rr(0) [ 710.748563][T26450] bond11 (unregistering): Released all slaves [ 711.981225][ T8161] net_ratelimit: 1376 callbacks suppressed [ 711.981247][ T8161] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 712.615992][ T8158] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 713.184184][ T8167] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 714.515295][T26457] A link change request failed with some changes committed already. Interface geneve2 may have been left with an inconsistent configuration, please check. [ 714.533297][ T8158] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 714.544715][ T8169] tipc: Resetting bearer [ 714.547578][ T7621] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 714.557384][ T8169] bridge0: port 2(bridge_slave_1) entered blocking state [ 714.567594][ T8169] bridge0: port 2(bridge_slave_1) entered forwarding state [ 714.587517][T26472] tipc: Resetting bearer [ 714.595481][T26472] tipc: Resetting bearer [ 714.666066][T26475] netlink: 'syz.0.5215': attribute type 1 has an invalid length. [ 714.787221][T26488] __nla_validate_parse: 13 callbacks suppressed [ 714.787250][T26488] netlink: 24 bytes leftover after parsing attributes in process `syz.6.5218'. [ 714.871755][T26498] bridge_slave_0: left allmulticast mode [ 714.888741][T26498] bridge_slave_0: left promiscuous mode [ 714.891376][T26502] netlink: 4 bytes leftover after parsing attributes in process `syz.6.5218'. [ 714.913231][T26498] bridge0: port 1(bridge_slave_0) entered disabled state [ 714.968027][T26498] bridge_slave_1: left allmulticast mode [ 714.976043][T26498] bridge_slave_1: left promiscuous mode [ 714.983320][T26498] bridge0: port 2(bridge_slave_1) entered disabled state [ 715.011188][T26498] team_slave_0: left promiscuous mode [ 715.048431][T26498] team0: Port device team_slave_0 removed [ 715.062268][T26498] team_slave_1: left promiscuous mode [ 715.082276][T26498] team0: Port device team_slave_1 removed [ 715.095421][ T7621] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 715.112706][T26498] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 715.130934][T26498] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 715.154978][T26498] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 715.171213][T26498] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 715.193965][T26498] batman_adv: batadv0: Interface deactivated: ip6gretap1 [ 715.201421][T26498] batman_adv: batadv0: Removing interface: ip6gretap1 [ 715.212548][T26498] bond3: (slave gretap1): Releasing active interface [ 715.221698][ T7621] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 715.318936][ T7621] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 715.383681][T24879] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 715.512160][T26522] syzkaller0: entered promiscuous mode [ 715.524699][T26522] syzkaller0: entered allmulticast mode [ 715.540930][T26538] netlink: 4 bytes leftover after parsing attributes in process `syz.1.5228'. [ 715.629382][ T5956] tipc: Resetting bearer [ 715.674449][T26543] netlink: 'syz.0.5229': attribute type 1 has an invalid length. [ 715.734232][T26526] netdevsim netdevsim6 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 717.114547][ T8161] net_ratelimit: 4 callbacks suppressed [ 717.114567][ T8161] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 717.129522][ T149] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 717.661345][ T8167] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 718.284737][T26543] workqueue: Failed to create a rescuer kthread for wq "bond11": -EINTR [ 718.380891][T26526] netdevsim netdevsim6 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 718.524591][T26526] netdevsim netdevsim6 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 718.536899][ T5635] Bluetooth: hci2: command 0x0419 tx timeout [ 718.664888][T26526] netdevsim netdevsim6 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 718.798605][ T149] netdevsim netdevsim6 eth0: set [1, 0] type 2 family 0 port 6081 - 0 [ 718.834193][ T162] netdevsim netdevsim6 eth1: set [1, 0] type 2 family 0 port 6081 - 0 [ 718.848469][T26569] sctp: [Deprecated]: syz.4.5237 (pid 26569) Use of int in maxseg socket option. [ 718.848469][T26569] Use struct sctp_assoc_value instead [ 718.858728][ T162] netdevsim netdevsim6 eth2: set [1, 0] type 2 family 0 port 6081 - 0 [ 718.894875][ T162] netdevsim netdevsim6 eth3: set [1, 0] type 2 family 0 port 6081 - 0 [ 719.015819][ C0] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 719.023989][ C0] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 719.350088][T26598] netlink: 12 bytes leftover after parsing attributes in process `syz.0.5246'. [ 719.413235][T26601] A link change request failed with some changes committed already. Interface ipvlan0 may have been left with an inconsistent configuration, please check. [ 719.490952][T26608] xt_HMARK: spi-set and port-set can't be combined [ 719.524306][T26610] netlink: 8 bytes leftover after parsing attributes in process `syz.0.5250'. [ 719.543264][T26610] : entered promiscuous mode [ 719.656214][ T162] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 719.837728][T26629] netlink: 'syz.0.5254': attribute type 10 has an invalid length. [ 719.879889][T26629] team0 (unregistering): Port device dummy0 removed [ 720.087222][T26635] syzkaller1: entered allmulticast mode [ 722.215978][ C1] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 722.224227][ C1] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 722.691897][T26617] nci: __nci_request: wait_for_completion_interruptible_timeout failed -512 [ 722.856576][ T8158] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 722.865722][ T8169] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 723.100161][T26654] lo speed is unknown, defaulting to 1000 [ 723.120948][T26654] lo speed is unknown, defaulting to 1000 [ 723.168520][T26660] netlink: 4 bytes leftover after parsing attributes in process `syz.4.5266'. [ 723.196590][T26665] netlink: 40 bytes leftover after parsing attributes in process `syz.1.5268'. [ 723.320976][ T5635] Bluetooth: hci7: unexpected cc 0x0c03 length: 249 > 1 [ 723.338151][ T5635] Bluetooth: hci7: unexpected cc 0x1003 length: 249 > 9 [ 723.357981][ T5635] Bluetooth: hci7: unexpected cc 0x1001 length: 249 > 9 [ 723.388360][ T5635] Bluetooth: hci7: unexpected cc 0x0c23 length: 249 > 4 [ 723.397216][ T5635] Bluetooth: hci7: unexpected cc 0x0c38 length: 249 > 2 [ 723.490497][T26667] netdevsim netdevsim4 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 723.504730][ T8158] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 723.627593][T26667] netdevsim netdevsim4 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 723.800984][T26667] netdevsim netdevsim4 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 723.907885][ T7621] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 723.951396][ T7621] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 724.043523][T26667] netdevsim netdevsim4 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 724.082094][T26688] lo speed is unknown, defaulting to 1000 [ 724.130531][T26688] lo speed is unknown, defaulting to 1000 [ 724.173801][ T8167] netdevsim netdevsim4 eth0: set [1, 0] type 2 family 0 port 6081 - 0 [ 724.192828][T26670] lo speed is unknown, defaulting to 1000 [ 724.244234][ T8158] netdevsim netdevsim4 eth1: set [1, 0] type 2 family 0 port 6081 - 0 [ 724.307049][ T8158] netdevsim netdevsim4 eth2: set [1, 0] type 2 family 0 port 6081 - 0 [ 724.347161][ T162] netdevsim netdevsim4 eth3: set [1, 0] type 2 family 0 port 6081 - 0 [ 724.490250][T26705] netlink: 24 bytes leftover after parsing attributes in process `syz.4.5274'. [ 724.508219][T26670] lo speed is unknown, defaulting to 1000 [ 724.777809][ T149] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 724.856645][ T5718] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 724.935999][ T5718] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 725.009106][T26670] bridge0: port 1(bridge_slave_0) entered blocking state [ 725.016451][T26670] bridge0: port 1(bridge_slave_0) entered disabled state [ 725.023793][T26670] bridge_slave_0: entered allmulticast mode [ 725.033191][T26670] bridge_slave_0: entered promiscuous mode [ 725.041281][T26670] bridge0: port 2(bridge_slave_1) entered blocking state [ 725.049070][T26670] bridge0: port 2(bridge_slave_1) entered disabled state [ 725.056534][T26670] bridge_slave_1: entered allmulticast mode [ 725.063634][T26670] bridge_slave_1: entered promiscuous mode [ 725.091449][T26670] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 725.104159][T26670] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 725.132381][T26670] team0: Port device team_slave_0 added [ 725.140440][T26670] team0: Port device team_slave_1 added [ 725.164141][T26670] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 725.171317][T26670] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 725.198557][T26670] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 725.213252][T26670] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 725.220367][T26670] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 725.246539][T26670] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 725.296505][T26670] hsr_slave_0: entered promiscuous mode [ 725.302903][T26670] hsr_slave_1: entered promiscuous mode [ 725.309772][T26670] debugfs: 'hsr0' already exists in 'hsr' [ 725.315590][T26670] Cannot create hsr debugfs directory [ 725.495591][ T5635] Bluetooth: hci7: command tx timeout [ 725.675369][T26723] lo: entered allmulticast mode [ 725.683135][T26723] tunl0: entered allmulticast mode [ 725.690111][T26723] gre0: entered allmulticast mode [ 725.701277][T26723] gretap0: entered allmulticast mode [ 725.709569][T26723] erspan0: entered allmulticast mode [ 725.717582][T26723] ip_vti0: entered allmulticast mode [ 725.724401][T26723] ip6_vti0: entered allmulticast mode [ 725.732215][T26723] sit0: entered allmulticast mode [ 725.740128][T26723] ip6tnl0: entered allmulticast mode [ 725.749771][T26723] ip6gre0: entered allmulticast mode [ 725.758473][T26723] syz_tun: entered allmulticast mode [ 725.769414][T26723] ip6gretap0: entered allmulticast mode [ 725.777890][T26723] bridge0: port 2(bridge_slave_1) entered disabled state [ 725.785307][T26723] bridge0: port 1(bridge_slave_0) entered disabled state [ 725.793923][T26723] bridge0: entered allmulticast mode [ 725.801912][T26723] vcan0: entered allmulticast mode [ 725.808760][T26723] bond0: entered allmulticast mode [ 725.813901][T26723] bond_slave_0: entered allmulticast mode [ 725.820447][T26723] bond_slave_1: entered allmulticast mode [ 725.826865][T26723] dummy0: entered allmulticast mode [ 725.835535][T26723] team0: entered allmulticast mode [ 725.840705][T26723] team_slave_0: entered allmulticast mode [ 725.847433][T26723] team_slave_1: entered allmulticast mode [ 725.857014][T26723] nlmon0: entered allmulticast mode [ 725.863636][T26723] batadv0: entered allmulticast mode [ 725.873071][T26723] vxcan0: entered allmulticast mode [ 725.879963][T26723] vxcan1: entered allmulticast mode [ 725.887095][T26723] veth0: entered allmulticast mode [ 725.894499][T26723] veth1: entered allmulticast mode [ 725.903045][T26723] wg0: entered allmulticast mode [ 725.910627][T26723] wg1: entered allmulticast mode [ 725.918147][T26723] wg2: entered allmulticast mode [ 725.924762][T26723] veth0_to_bridge: entered allmulticast mode [ 725.935847][T26723] veth1_to_bridge: entered allmulticast mode [ 725.948152][T26723] veth0_to_bond: entered allmulticast mode [ 725.956728][T26723] veth1_to_bond: entered allmulticast mode [ 725.966123][T26723] veth0_to_team: entered allmulticast mode [ 725.976417][T26723] veth1_to_team: entered allmulticast mode [ 725.987136][T26723] veth0_to_batadv: entered allmulticast mode [ 725.996256][T26723] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 726.003687][T26723] batadv_slave_0: entered allmulticast mode [ 726.012184][T26723] veth1_to_batadv: entered allmulticast mode [ 726.022873][T26723] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 726.031763][T26723] batadv_slave_1: entered allmulticast mode [ 726.040287][T26723] xfrm0: entered allmulticast mode [ 726.047793][T26723] veth0_to_hsr: entered allmulticast mode [ 726.056566][T26723] hsr_slave_0: entered allmulticast mode [ 726.063990][T26723] veth1_to_hsr: entered allmulticast mode [ 726.075999][T26723] hsr_slave_1: entered allmulticast mode [ 726.083847][T26723] hsr0: entered allmulticast mode [ 726.091319][T26723] veth1_virt_wifi: entered allmulticast mode [ 726.100407][T26723] veth0_virt_wifi: entered allmulticast mode [ 726.109353][T26723] virt_wifi0: entered allmulticast mode [ 726.115198][T26723] veth1_vlan: entered allmulticast mode [ 726.123290][T26723] veth0_vlan: entered allmulticast mode [ 726.135929][T26723] vlan0: entered allmulticast mode [ 726.141248][T26723] vlan1: entered allmulticast mode [ 726.147548][T26723] macvlan0: entered allmulticast mode [ 726.155286][T26723] macvlan1: entered allmulticast mode [ 726.163113][T26723] ipvlan0: entered allmulticast mode [ 726.171592][T26723] ipvlan1: entered allmulticast mode [ 726.177924][T26723] veth1_macvtap: entered allmulticast mode [ 726.186213][T26723] veth0_macvtap: entered allmulticast mode [ 726.194959][T26723] macvtap0: entered allmulticast mode [ 726.203689][T26723] macsec0: entered allmulticast mode [ 726.212094][T26723] geneve0: entered allmulticast mode [ 726.221544][T26723] geneve1: entered allmulticast mode [ 726.234129][T26723] mac80211_hwsim hwsim77 wlan1: entered allmulticast mode [ 726.243608][T26723] : entered allmulticast mode [ 726.248771][T26723] bridge1: entered allmulticast mode [ 726.254217][T26723] bond1: entered allmulticast mode [ 726.259651][T26723] veth2: entered allmulticast mode [ 726.264904][T26723] veth3: entered allmulticast mode [ 726.272627][T26723] netdevsim netdevsim6 eth0: entered allmulticast mode [ 726.279876][T26723] netdevsim netdevsim6 eth1: entered allmulticast mode [ 726.286952][T26723] netdevsim netdevsim6 eth2: entered allmulticast mode [ 726.293906][T26723] netdevsim netdevsim6 eth3: entered allmulticast mode [ 726.310345][ T5956] netdevsim netdevsim6 eth0: unset [1, 0] type 2 family 0 port 6081 - 0 [ 726.319630][ T5956] netdevsim netdevsim6 eth1: unset [1, 0] type 2 family 0 port 6081 - 0 [ 726.329097][ T5956] netdevsim netdevsim6 eth2: unset [1, 0] type 2 family 0 port 6081 - 0 [ 726.337771][ T5956] netdevsim netdevsim6 eth3: unset [1, 0] type 2 family 0 port 6081 - 0 [ 726.754033][T26691] nci: __nci_request: wait_for_completion_interruptible_timeout failed -512 [ 726.925287][T26670] netdevsim netdevsim7 netdevsim0: renamed from eth0 [ 726.954446][T26670] 8021q: adding VLAN 0 to HW filter on device netdevsim0 [ 726.984473][T26670] netdevsim netdevsim7 netdevsim1: renamed from eth1 [ 727.018247][T26670] 8021q: adding VLAN 0 to HW filter on device netdevsim1 [ 727.112588][T26670] netdevsim netdevsim7 netdevsim2: renamed from eth2 [ 727.154358][T26670] 8021q: adding VLAN 0 to HW filter on device netdevsim2 [ 727.177926][T26670] netdevsim netdevsim7 netdevsim3: renamed from eth3 [ 727.237513][T26670] 8021q: adding VLAN 0 to HW filter on device netdevsim3 [ 727.277749][T26745] tipc: Resetting bearer [ 727.324248][T26743] netlink: 52 bytes leftover after parsing attributes in process `syz.4.5282'. [ 727.556978][T26734] tipc: Resetting bearer [ 727.575976][ T5635] Bluetooth: hci7: command tx timeout [ 727.613439][T26670] 8021q: adding VLAN 0 to HW filter on device bond0 [ 727.650870][T26670] 8021q: adding VLAN 0 to HW filter on device team0 [ 727.670172][ T8161] bridge0: port 1(bridge_slave_0) entered blocking state [ 727.677383][ T8161] bridge0: port 1(bridge_slave_0) entered forwarding state [ 727.699649][ T5956] bridge0: port 2(bridge_slave_1) entered blocking state [ 727.706858][ T5956] bridge0: port 2(bridge_slave_1) entered forwarding state [ 727.811361][T26764] lo speed is unknown, defaulting to 1000 [ 727.830783][T26764] lo speed is unknown, defaulting to 1000 [ 727.976876][ T149] net_ratelimit: 1 callbacks suppressed [ 727.976894][ T149] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 727.991759][ T8167] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 728.163863][T26781] netlink: 24 bytes leftover after parsing attributes in process `syz.4.5288'. [ 728.368802][ T5956] tipc: Resetting bearer [ 728.411733][T26791] netlink: 'syz.4.5290': attribute type 2 has an invalid length. [ 728.445326][T26791] netlink: 'syz.4.5290': attribute type 2 has an invalid length. [ 728.448096][T26796] netlink: 8 bytes leftover after parsing attributes in process `syz.1.5291'. [ 728.618057][ T8167] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 728.633114][T26670] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 728.992707][T26812] netlink: 'syz.6.5296': attribute type 2 has an invalid length. [ 729.256908][ T8167] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 729.301733][T26670] veth0_vlan: entered promiscuous mode [ 729.347673][T26670] veth1_vlan: entered promiscuous mode [ 729.444565][T26670] veth0_macvtap: entered promiscuous mode [ 729.489254][T26670] veth1_macvtap: entered promiscuous mode [ 729.571171][T26670] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 729.610461][T26834] netlink: 12 bytes leftover after parsing attributes in process `syz.1.5303'. [ 729.633475][T26670] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 729.658690][T26834] netlink: 8 bytes leftover after parsing attributes in process `syz.1.5303'. [ 729.668259][ T5635] Bluetooth: hci7: command tx timeout [ 729.719854][T26834] vlan2: entered allmulticast mode [ 729.739689][T26834] macvtap0: entered allmulticast mode [ 729.760837][T26834] veth0_macvtap: entered allmulticast mode [ 729.769743][ T149] netdevsim netdevsim7 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 729.799436][ T149] netdevsim netdevsim7 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 729.869799][ T149] netdevsim netdevsim7 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 729.895139][ T149] netdevsim netdevsim7 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 729.929636][T26841] netlink: 4 bytes leftover after parsing attributes in process `syz.0.5307'. [ 730.033595][T26845] netlink: 36 bytes leftover after parsing attributes in process `syz.4.5309'. [ 730.179122][ T149] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 730.203223][ T149] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 730.313916][ T5956] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 730.339639][ T5956] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 730.443919][T26867] sctp: [Deprecated]: syz.1.5316 (pid 26867) Use of int in max_burst socket option. [ 730.443919][T26867] Use struct sctp_assoc_value instead [ 730.480182][T26869] netlink: 8 bytes leftover after parsing attributes in process `syz.4.5317'. [ 730.510920][T26869] netlink: 4 bytes leftover after parsing attributes in process `syz.4.5317'. [ 730.547634][ T5956] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 730.829052][T26886] netlink: 36 bytes leftover after parsing attributes in process `syz.7.5320'. [ 731.001349][T26891] lo speed is unknown, defaulting to 1000 [ 731.013431][T26893] netlink: 'syz.1.5322': attribute type 1 has an invalid length. [ 731.073705][T26902] netlink: 8 bytes leftover after parsing attributes in process `syz.1.5322'. [ 731.179185][ T8167] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 731.397978][T26911] netlink: 'syz.7.5328': attribute type 2 has an invalid length. [ 731.735556][ T5635] Bluetooth: hci7: command tx timeout [ 731.784371][T26899] A link change request failed with some changes committed already. Interface hsr_slave_0 may have been left with an inconsistent configuration, please check. [ 731.815638][ C1] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 731.828550][T26891] lo speed is unknown, defaulting to 1000 [ 731.838096][T26893] workqueue: Failed to create a rescuer kthread for wq "bond7": -EINTR [ 731.899636][T26903] erspan1: entered allmulticast mode [ 731.999078][T26911] pimreg: entered allmulticast mode [ 732.246639][T26935] netlink: 36 bytes leftover after parsing attributes in process `syz.1.5333'. [ 732.265921][T26932] netlink: 'syz.7.5334': attribute type 16 has an invalid length. [ 732.320627][T26932] tc_dump_action: action bad kind [ 732.607170][T26950] sctp: [Deprecated]: syz.0.5340 (pid 26950) Use of struct sctp_assoc_value in delayed_ack socket option. [ 732.607170][T26950] Use struct sctp_sack_info instead [ 732.734347][T26958] --map-set only usable from mangle table [ 732.786177][T26954] netlink: 'syz.6.5341': attribute type 1 has an invalid length. [ 732.854830][T26961] netlink: 'syz.7.5344': attribute type 1 has an invalid length. [ 733.044673][T26965] netlink: 'syz.1.5345': attribute type 58 has an invalid length. [ 733.319949][T26978] lo speed is unknown, defaulting to 1000 [ 733.334675][T26978] lo speed is unknown, defaulting to 1000 [ 733.437742][T26989] IPVS: set_ctl: invalid protocol: 2 0.0.0.0:20002 [ 734.004632][T27023] __nla_validate_parse: 5 callbacks suppressed [ 734.027784][T27023] netlink: 204 bytes leftover after parsing attributes in process `syz.6.5361'. [ 734.068766][T27023] netlink: 76 bytes leftover after parsing attributes in process `syz.6.5361'. [ 734.430721][T27035] tc_dump_action: action bad kind [ 734.966335][T27059] syzkaller0: entered promiscuous mode [ 734.979441][T27059] syzkaller0: entered allmulticast mode [ 735.040662][T27061] openvswitch: netlink: Unexpected mask (mask=20840, allowed=10048) [ 735.170531][T27074] netlink: 'syz.0.5377': attribute type 89 has an invalid length. [ 735.472399][T27082] netlink: 'syz.6.5379': attribute type 10 has an invalid length. [ 735.508427][T27080] lo speed is unknown, defaulting to 1000 [ 735.519206][T27082] bond0: (slave dummy0): Releasing backup interface [ 735.526794][T27086] netlink: 'syz.6.5379': attribute type 10 has an invalid length. [ 735.535232][T27082] dummy0: left allmulticast mode [ 735.544200][T27082] dummy0: entered allmulticast mode [ 735.555666][T27082] team0: Failed to send port change of device dummy0 via netlink (err -105) [ 735.564786][T27082] team0: Failed to send options change via netlink (err -105) [ 735.573452][T27082] team0: Port device dummy0 added [ 735.581871][T27080] lo speed is unknown, defaulting to 1000 [ 735.599181][T27086] team0: Failed to send port change of device dummy0 via netlink (err -105) [ 735.688919][T27086] dummy0: left allmulticast mode [ 735.731931][T27092] sctp: [Deprecated]: syz.4.5382 (pid 27092) Use of int in maxseg socket option. [ 735.731931][T27092] Use struct sctp_assoc_value instead [ 735.749755][T27086] team0: Failed to send options change via netlink (err -105) [ 735.778983][T27086] team0: Failed to send port change of device dummy0 via netlink (err -105) [ 735.803139][T27086] team0: Port device dummy0 removed [ 735.847373][T27086] dummy0: entered allmulticast mode [ 735.860878][T27086] bond0: (slave dummy0): Enslaving as an active interface with an up link [ 736.121517][T27101] bridge4: the hash_elasticity option has been deprecated and is always 16 [ 736.247139][T27110] No such timeout policy "syz0" [ 736.385357][T27120] netlink: 4 bytes leftover after parsing attributes in process `syz.7.5388'. [ 736.463583][T27123] netlink: 16 bytes leftover after parsing attributes in process `syz.0.5390'. [ 736.583258][T27120] veth3: entered promiscuous mode [ 737.356282][T27139] syz_tun: entered allmulticast mode [ 737.382746][T27142] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check. [ 737.662169][T27156] netlink: 12 bytes leftover after parsing attributes in process `syz.7.5398'. [ 737.937909][T27172] netlink: 8 bytes leftover after parsing attributes in process `syz.4.5400'. [ 738.029315][T27163] netlink: 20 bytes leftover after parsing attributes in process `syz.4.5400'. [ 738.313415][T27187] netlink: 'syz.7.5406': attribute type 4 has an invalid length. [ 738.334756][T27185] syzkaller0: entered promiscuous mode [ 738.341998][T27187] netlink: 'syz.7.5406': attribute type 4 has an invalid length. [ 738.352197][T27185] syzkaller0: entered allmulticast mode [ 738.427058][T27191] ipt_ECN: cannot use operation on non-tcp rule [ 738.542480][T27187] bridge0: port 2(bridge_slave_1) entered disabled state [ 738.550209][T27187] bridge0: port 1(bridge_slave_0) entered disabled state [ 738.678124][T27187] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 738.690189][T27187] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 738.808058][T27209] hmac(sha224: entered promiscuous mode [ 738.821884][ T8169] netdevsim netdevsim7 netdevsim0: unset [1, 0] type 2 family 0 port 6081 - 0 [ 738.841954][ T8169] netdevsim netdevsim7 netdevsim1: unset [1, 0] type 2 family 0 port 6081 - 0 [ 738.865545][ T8169] netdevsim netdevsim7 netdevsim2: unset [1, 0] type 2 family 0 port 6081 - 0 [ 738.969152][ T8169] netdevsim netdevsim7 netdevsim3: unset [1, 0] type 2 family 0 port 6081 - 0 [ 739.537173][T27256] netlink: 32 bytes leftover after parsing attributes in process `syz.0.5421'. [ 739.587220][T27258] netlink: 32 bytes leftover after parsing attributes in process `syz.0.5421'. [ 739.621598][T27256] netlink: 8 bytes leftover after parsing attributes in process `syz.0.5421'. [ 739.901829][T27269] lo speed is unknown, defaulting to 1000 [ 739.923941][T27269] lo speed is unknown, defaulting to 1000 [ 740.086351][T27287] netlink: 4 bytes leftover after parsing attributes in process `syz.7.5430'. [ 740.115280][T27287] netlink: 'syz.7.5430': attribute type 1 has an invalid length. [ 740.137269][T27287] netlink: 96 bytes leftover after parsing attributes in process `syz.7.5430'. [ 740.165331][T27287] netlink: 1 bytes leftover after parsing attributes in process `syz.7.5430'. [ 740.198084][T27287] netlink: 'syz.7.5430': attribute type 1 has an invalid length. [ 740.237599][T27287] netlink: 'syz.7.5430': attribute type 8 has an invalid length. [ 740.321093][T27298] netlink: 28 bytes leftover after parsing attributes in process `syz.0.5433'. [ 740.428454][T27304] netlink: 8 bytes leftover after parsing attributes in process `syz.7.5436'. [ 740.453535][T27304] netlink: 224 bytes leftover after parsing attributes in process `syz.7.5436'. [ 740.623519][T27318] netlink: 4 bytes leftover after parsing attributes in process `syz.0.5439'. [ 740.651333][T27318] openvswitch: netlink: VXLAN extension message has 3 unknown bytes. [ 741.098345][T27327] lo speed is unknown, defaulting to 1000 [ 741.125168][T27327] lo speed is unknown, defaulting to 1000 [ 741.491732][T27335] lo speed is unknown, defaulting to 1000 [ 741.511259][T27335] lo speed is unknown, defaulting to 1000 [ 742.434835][T27372] IPv6: RTM_NEWROUTE with no NLM_F_CREATE or NLM_F_REPLACE [ 742.442214][T27372] IPv6: NLM_F_CREATE should be set when creating new route [ 742.449525][T27372] IPv6: NLM_F_CREATE should be set when creating new route [ 742.727907][T27377] netlink: 'syz.1.5458': attribute type 3 has an invalid length. [ 742.736308][T27377] netlink: 'syz.1.5458': attribute type 3 has an invalid length. [ 743.206259][T27384] syzkaller0: entered promiscuous mode [ 743.211943][T27384] syzkaller0: entered allmulticast mode [ 746.589744][T27438] __nla_validate_parse: 6 callbacks suppressed [ 746.589764][T27438] netlink: 24 bytes leftover after parsing attributes in process `syz.0.5469'. [ 746.869654][T27455] netlink: 28 bytes leftover after parsing attributes in process `syz.7.5474'. [ 746.964649][T27463] netlink: 'syz.0.5477': attribute type 3 has an invalid length. [ 747.004304][T27460] x_tables: arp_tables: NFQUEUE target: not valid for this family [ 747.179292][ T1313] ieee802154 phy0 wpan0: encryption failed: -22 [ 747.261590][T27485] openvswitch: netlink: Missing valid actions attribute. [ 747.269650][T27485] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 747.347815][T27487] netlink: 268 bytes leftover after parsing attributes in process `syz.4.5476'. [ 747.426004][T27490] tipc: Resetting bearer [ 747.869044][T27474] nci: __nci_request: wait_for_completion_interruptible_timeout failed -512 [ 747.943922][T27506] netlink: 8 bytes leftover after parsing attributes in process `syz.7.5486'. [ 748.217855][T27490] tipc: Resetting bearer [ 748.234513][ T8158] nci: nci_extract_activation_params_iso_dep: unsupported activation_rf_tech_and_mode 0x80 [ 748.337533][T27533] ref_tracker: memory allocation failure, unreliable refcount tracker. [ 748.457721][ T8169] tipc: Resetting bearer [ 748.887119][T27553] netlink: 'syz.0.5498': attribute type 1 has an invalid length. [ 748.906776][T27511] nci: __nci_request: wait_for_completion_interruptible_timeout failed -512 [ 748.939354][T27553] 8021q: adding VLAN 0 to HW filter on device bond12 [ 749.037206][T27553] veth7: entered promiscuous mode [ 749.067143][T27553] bond12: (slave veth7): Enslaving as an active interface with an up link [ 749.163655][T27560] netlink: 'syz.7.5500': attribute type 11 has an invalid length. [ 749.247346][T27563] netlink: 12 bytes leftover after parsing attributes in process `syz.4.5501'. [ 749.548087][T27580] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 749.681470][T27583] af_packet: tpacket_rcv: packet too big, clamped from 1 to 4294967272. macoff=96 [ 749.797823][T27591] xt_TCPMSS: Only works on TCP SYN packets [ 749.884030][T27592] bond1: option arp_validate: invalid value (18446744073709551613) [ 749.968841][T27592] bond1 (unregistering): Released all slaves [ 750.654818][T27607] vlan1: entered allmulticast mode [ 750.668831][T27607] bond0: entered allmulticast mode [ 750.699615][T27607] netlink: 8 bytes leftover after parsing attributes in process `syz.0.5511'. [ 750.891263][T27617] netlink: 56 bytes leftover after parsing attributes in process `syz.1.5514'. [ 750.915161][T27617] netlink: 19 bytes leftover after parsing attributes in process `syz.1.5514'. [ 750.934637][T27617] netlink: 19 bytes leftover after parsing attributes in process `syz.1.5514'. [ 751.425112][T27643] openvswitch: netlink: VXLAN extension message has 4 unknown bytes. [ 751.727192][T27648] syzkaller0: entered promiscuous mode [ 751.732789][T27648] syzkaller0: entered allmulticast mode [ 752.472085][T27656] macsec1: entered promiscuous mode [ 752.477927][T27656] macsec1: entered allmulticast mode [ 752.972972][T27663] FAULT_INJECTION: forcing a failure. [ 752.972972][T27663] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 752.988419][T27663] CPU: 0 UID: 0 PID: 27663 Comm: syz.7.5530 Not tainted syzkaller #0 PREEMPT(full) [ 752.988445][T27663] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 04/18/2026 [ 752.988456][T27663] Call Trace: [ 752.988464][T27663] [ 752.988472][T27663] dump_stack_lvl+0xe8/0x150 [ 752.988499][T27663] should_fail_ex+0x412/0x560 [ 752.988529][T27663] _copy_from_user+0x2d/0xb0 [ 752.988547][T27663] kstrtouint_from_user+0xd6/0x180 [ 752.988560][T27663] ? __pfx_kstrtouint_from_user+0x10/0x10 [ 752.988581][T27663] proc_fail_nth_write+0x8e/0x210 [ 752.988594][T27663] ? __pfx_proc_fail_nth_write+0x10/0x10 [ 752.988610][T27663] ? __pfx_proc_fail_nth_write+0x10/0x10 [ 752.988623][T27663] vfs_write+0x29a/0xb90 [ 752.988642][T27663] ? __pfx_vfs_write+0x10/0x10 [ 752.988657][T27663] ? __fget_files+0x2a/0x420 [ 752.988671][T27663] ? __fget_files+0x3a0/0x420 [ 752.988682][T27663] ? __fget_files+0x2a/0x420 [ 752.988698][T27663] ksys_write+0x150/0x270 [ 752.988713][T27663] ? __pfx_ksys_write+0x10/0x10 [ 752.988732][T27663] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 752.988743][T27663] do_syscall_64+0x15f/0xf80 [ 752.988755][T27663] ? trace_irq_disable+0x3b/0x140 [ 752.988770][T27663] ? clear_bhb_loop+0x40/0x90 [ 752.988782][T27663] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 752.988792][T27663] RIP: 0033:0x7fb48495d60e [ 752.988802][T27663] Code: 08 0f 85 a5 a8 ff ff 49 89 fb 48 89 f0 48 89 d7 48 89 ce 4c 89 c2 4d 89 ca 4c 8b 44 24 08 4c 8b 4c 24 10 4c 89 5c 24 08 0f 05 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 80 00 00 00 00 48 83 ec 08 [ 752.988811][T27663] RSP: 002b:00007fb48590afe8 EFLAGS: 00000246 ORIG_RAX: 0000000000000001 [ 752.988823][T27663] RAX: ffffffffffffffda RBX: 00007fb48590b6c0 RCX: 00007fb48495d60e [ 752.988830][T27663] RDX: 0000000000000001 RSI: 00007fb48590b0a0 RDI: 000000000000000a [ 752.988837][T27663] RBP: 00007fb48590b090 R08: 0000000000000000 R09: 0000000000000000 [ 752.988843][T27663] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 752.988849][T27663] R13: 00007fb484c16038 R14: 00007fb484c15fa0 R15: 00007ffd9f04fd88 [ 752.988865][T27663] [ 753.223589][T27665] netlink: 'syz.7.5531': attribute type 12 has an invalid length. [ 753.236356][T27665] netlink: 'syz.7.5531': attribute type 4 has an invalid length. [ 753.248448][T27665] netlink: 'syz.7.5531': attribute type 4 has an invalid length. [ 754.018954][T27627] nci: __nci_request: wait_for_completion_interruptible_timeout failed -512 [ 754.233434][T27681] syzkaller0: entered promiscuous mode [ 754.247158][T27681] syzkaller0: entered allmulticast mode [ 754.361746][T27691] geneve4: entered promiscuous mode [ 754.407661][T27689] lo speed is unknown, defaulting to 1000 [ 754.509902][T27689] lo speed is unknown, defaulting to 1000 [ 754.629488][T27707] netlink: 24 bytes leftover after parsing attributes in process `syz.6.5542'. [ 755.051751][T27720] netlink: 8 bytes leftover after parsing attributes in process `syz.6.5545'. [ 755.083989][T27720] netlink: 'syz.6.5545': attribute type 30 has an invalid length. [ 755.108795][T27726] netlink: 62967 bytes leftover after parsing attributes in process `syz.7.5548'. [ 755.132133][ T8167] netdevsim netdevsim6 eth0: set [0, 0] type 1 family 0 port 8472 - 0 [ 755.140820][ T8167] netdevsim netdevsim6 eth1: set [0, 0] type 1 family 0 port 8472 - 0 [ 755.149480][T27722] netlink: 12 bytes leftover after parsing attributes in process `syz.1.5547'. [ 755.152397][ T8167] netdevsim netdevsim6 eth2: set [0, 0] type 1 family 0 port 8472 - 0 [ 755.168420][ T8167] netdevsim netdevsim6 eth3: set [0, 0] type 1 family 0 port 8472 - 0 [ 755.206378][T27722] netlink: 32 bytes leftover after parsing attributes in process `syz.1.5547'. [ 755.236587][T27722] netlink: 12 bytes leftover after parsing attributes in process `syz.1.5547'. [ 755.249070][T27722] netlink: 32 bytes leftover after parsing attributes in process `syz.1.5547'. [ 755.413113][T27731] lo speed is unknown, defaulting to 1000 [ 755.427720][T27739] syzkaller0: entered promiscuous mode [ 755.434242][T27739] syzkaller0: entered allmulticast mode [ 755.458858][T27731] lo speed is unknown, defaulting to 1000 [ 755.601708][T27745] netlink: 4 bytes leftover after parsing attributes in process `syz.1.5551'. [ 756.355134][T27777] netlink: 8 bytes leftover after parsing attributes in process `syz.7.5559'. [ 757.047908][T27805] syzkaller1: entered promiscuous mode [ 757.080190][T27805] syzkaller1: entered allmulticast mode [ 757.739160][T27832] netlink: 'syz.0.5573': attribute type 13 has an invalid length. [ 758.731930][T27832] tipc: Resetting bearer [ 758.817580][T27877] netlink: 24 bytes leftover after parsing attributes in process `syz.1.5578'. [ 759.716992][ T49] Bluetooth: hci8: unexpected cc 0x0c03 length: 249 > 1 [ 759.734085][ T49] Bluetooth: hci8: unexpected cc 0x1003 length: 249 > 9 [ 759.742889][ T49] Bluetooth: hci8: unexpected cc 0x1001 length: 249 > 9 [ 759.753509][ T49] Bluetooth: hci8: unexpected cc 0x0c23 length: 249 > 4 [ 759.761293][ T49] Bluetooth: hci8: unexpected cc 0x0c38 length: 249 > 2 [ 760.119765][T27931] __nla_validate_parse: 3 callbacks suppressed [ 760.119785][T27931] netlink: 12 bytes leftover after parsing attributes in process `syz.1.5590'. [ 760.317458][T27940] syzkaller0: entered promiscuous mode [ 760.332427][T27940] syzkaller0: entered allmulticast mode [ 760.428942][T27948] netlink: 'syz.7.5595': attribute type 1 has an invalid length. [ 760.567539][T27953] gretap1: entered allmulticast mode [ 760.631983][T27955] netlink: 'syz.1.5597': attribute type 1 has an invalid length. [ 760.643692][T27955] netlink: 'syz.1.5597': attribute type 2 has an invalid length. [ 760.652941][T27955] netlink: 28 bytes leftover after parsing attributes in process `syz.1.5597'. [ 760.660736][T27916] lo speed is unknown, defaulting to 1000 [ 760.671406][T27916] lo speed is unknown, defaulting to 1000 [ 760.702079][T27959] netlink: 'syz.6.5599': attribute type 12 has an invalid length. [ 760.759845][T27959] netlink: 'syz.6.5599': attribute type 29 has an invalid length. [ 760.783273][T27959] netlink: 148 bytes leftover after parsing attributes in process `syz.6.5599'. [ 760.821925][T27963] netlink: 'syz.7.5600': attribute type 41 has an invalid length. [ 760.830727][T27964] netlink: 'syz.7.5600': attribute type 41 has an invalid length. [ 760.890727][T27964] IPVS: set_ctl: invalid protocol: 22 0.0.0.0:129 [ 761.328163][T27993] syzkaller0: entered promiscuous mode [ 761.344055][T27993] syzkaller0: entered allmulticast mode [ 761.402224][T27996] syzkaller0: entered promiscuous mode [ 761.407912][T27996] syzkaller0: entered allmulticast mode [ 761.424595][T27996] tc action pedit offset must be on 32 bit boundaries [ 761.446041][T28000] netlink: 24 bytes leftover after parsing attributes in process `syz.7.5612'. [ 761.773216][T27916] bridge0: port 1(bridge_slave_0) entered blocking state [ 761.780572][T27916] bridge0: port 1(bridge_slave_0) entered disabled state [ 761.788614][T27916] bridge_slave_0: entered allmulticast mode [ 761.798643][T27916] bridge_slave_0: entered promiscuous mode [ 761.808075][T27916] bridge0: port 2(bridge_slave_1) entered blocking state [ 761.817800][ T5635] Bluetooth: hci8: command tx timeout [ 761.828272][T27916] bridge0: port 2(bridge_slave_1) entered disabled state [ 761.852931][T27916] bridge_slave_1: entered allmulticast mode [ 761.870377][T27916] bridge_slave_1: entered promiscuous mode [ 761.984557][T27916] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 762.021074][T27916] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 762.134635][T27916] team0: Port device team_slave_0 added [ 762.168689][T27916] team0: Port device team_slave_1 added [ 762.262342][T27916] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 762.276734][T27916] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 762.330227][T27916] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 762.445030][T28042] netlink: 24 bytes leftover after parsing attributes in process `syz.6.5621'. [ 762.472098][T27916] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 762.487681][T27916] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 762.544318][T27916] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 762.573501][T28032] lo speed is unknown, defaulting to 1000 [ 762.623590][T28032] lo speed is unknown, defaulting to 1000 [ 762.723707][T27916] hsr_slave_0: entered promiscuous mode [ 762.737234][T27916] hsr_slave_1: entered promiscuous mode [ 762.762133][T27916] debugfs: 'hsr0' already exists in 'hsr' [ 762.770808][T27916] Cannot create hsr debugfs directory [ 762.781694][T28051] netem: change failed [ 762.802478][T28052] netlink: 32 bytes leftover after parsing attributes in process `syz.6.5624'. [ 762.829342][T28052] A link change request failed with some changes committed already. Interface veth0_to_batadv may have been left with an inconsistent configuration, please check. [ 763.015669][T28057] netlink: 4 bytes leftover after parsing attributes in process `syz.6.5625'. [ 763.294726][T27916] netdevsim netdevsim0 eth3 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 763.306831][T27916] netdevsim netdevsim0 eth3 (unregistering): unset [1, 0] type 2 family 0 port 20000 - 0 [ 763.318903][T27916] netdevsim netdevsim0 eth3 (unregistering): unset [1, 1] type 2 family 0 port 6081 - 0 [ 763.503972][T27916] netdevsim netdevsim0 eth2 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 763.552231][T27916] netdevsim netdevsim0 eth2 (unregistering): unset [1, 0] type 2 family 0 port 20000 - 0 [ 763.578578][T27916] netdevsim netdevsim0 eth2 (unregistering): unset [1, 1] type 2 family 0 port 6081 - 0 [ 763.831647][T28087] netdevsim netdevsim1 eth3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 763.873610][T27916] netdevsim netdevsim0 eth1 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 763.883571][T27916] netdevsim netdevsim0 eth1 (unregistering): unset [1, 0] type 2 family 0 port 20000 - 0 [ 763.893612][T27916] netdevsim netdevsim0 eth1 (unregistering): unset [1, 1] type 2 family 0 port 6081 - 0 [ 763.905613][ T5635] Bluetooth: hci8: command tx timeout [ 763.920613][T28071] lo speed is unknown, defaulting to 1000 [ 763.929302][T28087] netdevsim netdevsim1 eth2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 763.943909][T28071] lo speed is unknown, defaulting to 1000 [ 763.969351][T27916] netdevsim netdevsim0 eth0 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 763.995747][T27916] netdevsim netdevsim0 eth0 (unregistering): unset [1, 0] type 2 family 0 port 20000 - 0 [ 764.007038][T27916] netdevsim netdevsim0 eth0 (unregistering): unset [1, 1] type 2 family 0 port 6081 - 0 [ 764.041181][T28087] netdevsim netdevsim1 eth1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 764.126079][T28087] netdevsim netdevsim1 eth0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 764.423890][ T8161] netdevsim netdevsim1 eth0: set [1, 0] type 2 family 0 port 6081 - 0 [ 764.453579][T28092] netlink: 80 bytes leftover after parsing attributes in process `syz.4.5634'. [ 764.487570][T28094] netlink: 'syz.4.5634': attribute type 1 has an invalid length. [ 764.524739][T28094] workqueue: Failed to create a rescuer kthread for wq "bond10": -EINTR [ 764.525142][ T8154] netdevsim netdevsim1 eth1: set [1, 0] type 2 family 0 port 6081 - 0 [ 764.740462][ T8154] netdevsim netdevsim1 eth2: set [1, 0] type 2 family 0 port 6081 - 0 [ 764.754106][T28107] openvswitch: netlink: Missing valid actions attribute. [ 764.763269][T28107] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 764.859823][T27916] netdevsim netdevsim0 netdevsim0: renamed from eth0 [ 764.881679][T27916] 8021q: adding VLAN 0 to HW filter on device netdevsim0 [ 764.896949][ T8161] netdevsim netdevsim1 eth3: set [1, 0] type 2 family 0 port 6081 - 0 [ 764.937063][T28108] syzkaller0: entered promiscuous mode [ 764.942692][T28108] syzkaller0: entered allmulticast mode [ 764.966521][T28114] SET target dimension over the limit! [ 764.972135][T27916] netdevsim netdevsim0 netdevsim1: renamed from eth1 [ 764.984944][T27916] 8021q: adding VLAN 0 to HW filter on device netdevsim1 [ 765.003742][T27916] netdevsim netdevsim0 netdevsim2: renamed from eth2 [ 765.036096][T27916] 8021q: adding VLAN 0 to HW filter on device netdevsim2 [ 765.055024][T27916] netdevsim netdevsim0 netdevsim3: renamed from eth3 [ 765.069832][T27916] 8021q: adding VLAN 0 to HW filter on device netdevsim3 [ 765.096872][T28127] xt_CT: You must specify a L4 protocol and not use inversions on it [ 765.155139][T28127] netlink: 'syz.1.5642': attribute type 1 has an invalid length. [ 765.289283][T28131] netlink: 20 bytes leftover after parsing attributes in process `syz.4.5643'. [ 765.345233][T28135] bond7 (unregistering): Released all slaves [ 765.393895][T27916] 8021q: adding VLAN 0 to HW filter on device bond0 [ 765.409653][T28138] netlink: 20 bytes leftover after parsing attributes in process `syz.7.5646'. [ 765.444204][T28145] netlink: 8 bytes leftover after parsing attributes in process `syz.4.5647'. [ 765.492557][T28145] ip6tnl3: entered allmulticast mode [ 765.580262][T28142] bond10: entered promiscuous mode [ 765.587810][T28142] 8021q: adding VLAN 0 to HW filter on device bond10 [ 765.601741][T27916] 8021q: adding VLAN 0 to HW filter on device team0 [ 765.636616][ T8154] bridge0: port 1(bridge_slave_0) entered blocking state [ 765.643789][ T8154] bridge0: port 1(bridge_slave_0) entered forwarding state [ 765.652642][T28155] netlink: 'syz.7.5651': attribute type 1 has an invalid length. [ 765.676192][T28157] netlink: 'syz.1.5650': attribute type 5 has an invalid length. [ 765.704832][T28155] bond2: entered promiscuous mode [ 765.710711][T28155] 8021q: adding VLAN 0 to HW filter on device bond2 [ 765.725958][ T8154] bridge0: port 2(bridge_slave_1) entered blocking state [ 765.733204][ T8154] bridge0: port 2(bridge_slave_1) entered forwarding state [ 765.810468][T28159] ipvlan2: entered allmulticast mode [ 765.829703][T28159] bond2: entered allmulticast mode [ 765.877640][T28155] ipvlan3: entered allmulticast mode [ 765.911651][T28159] bond2: (slave bridge1): making interface the new active one [ 765.919597][T28159] bridge1: entered promiscuous mode [ 765.925236][T28159] bridge1: entered allmulticast mode [ 765.936540][T28159] bond2: (slave bridge1): Enslaving as an active interface with an up link [ 765.977861][ T5635] Bluetooth: hci8: command tx timeout [ 765.996188][T28169] netem: change failed [ 766.353463][T28182] lo speed is unknown, defaulting to 1000 [ 766.389506][T28182] lo speed is unknown, defaulting to 1000 [ 766.520463][T28196] syzkaller1: entered promiscuous mode [ 766.532116][T28196] syzkaller1: entered allmulticast mode [ 766.659268][T28196] netlink: 8 bytes leftover after parsing attributes in process `syz.7.5662'. [ 767.085166][T28219] skbuff: bad partial csum: csum=65489/0 headroom=64 headlen=65491 [ 767.282720][T28226] syzkaller0: entered promiscuous mode [ 767.289394][T28226] syzkaller0: entered allmulticast mode [ 767.330605][T27916] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 767.530874][T28238] IPVS: sync thread started: state = MASTER, mcast_ifn = bridge_slave_0, syncid = 3, id = 0 [ 767.618347][T27916] veth0_vlan: entered promiscuous mode [ 767.634754][T27916] veth1_vlan: entered promiscuous mode [ 767.682854][T28244] netlink: 47 bytes leftover after parsing attributes in process `syz.4.5672'. [ 767.724903][T27916] veth0_macvtap: entered promiscuous mode [ 767.735662][T27916] veth1_macvtap: entered promiscuous mode [ 767.776376][T27916] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 767.795255][T27916] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 767.834733][ T8158] netdevsim netdevsim0 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 767.864111][ T8158] netdevsim netdevsim0 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 767.888326][ T8158] netdevsim netdevsim0 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 767.920356][ T8158] netdevsim netdevsim0 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 768.055611][ T5635] Bluetooth: hci8: command tx timeout [ 768.100241][T28253] syzkaller0: entered promiscuous mode [ 768.112349][T28253] syzkaller0: entered allmulticast mode [ 771.199815][ T8154] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 771.217796][ T8154] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 771.374450][ T8161] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 771.385908][T28279] netlink: 24 bytes leftover after parsing attributes in process `syz.1.5681'. [ 771.405997][ T8161] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 771.633908][T28289] ieee802154 phy0 wpan0: encryption failed: -22 [ 771.818162][T28301] netlink: 4 bytes leftover after parsing attributes in process `syz.0.5686'. [ 771.841059][T28301] : entered promiscuous mode [ 771.933273][T28307] netlink: 40 bytes leftover after parsing attributes in process `syz.6.5687'. [ 772.074184][T28312] netlink: 12 bytes leftover after parsing attributes in process `syz.0.5689'. [ 772.159160][T28317] netlink: 4 bytes leftover after parsing attributes in process `syz.6.5688'. [ 772.188146][T28317] netlink: 'syz.6.5688': attribute type 11 has an invalid length. [ 772.450595][T28332] netdevsim netdevsim4 eth3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 772.614089][T28332] netdevsim netdevsim4 eth2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 772.727130][T28332] netdevsim netdevsim4 eth1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 772.901912][T28332] netdevsim netdevsim4 eth0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 772.978521][T28364] netlink: 32 bytes leftover after parsing attributes in process `syz.0.5705'. [ 773.147366][T28373] netlink: 'syz.7.5708': attribute type 4 has an invalid length. [ 773.198648][T28375] netlink: 'syz.7.5708': attribute type 4 has an invalid length. [ 773.270711][T28376] tap0: tun_chr_ioctl cmd 1074812118 [ 773.290219][ T8154] netdevsim netdevsim4 eth0: set [1, 0] type 2 family 0 port 6081 - 0 [ 773.319878][T28381] netlink: 'syz.6.5709': attribute type 1 has an invalid length. [ 773.335682][T28381] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 773.384016][ T162] netdevsim netdevsim4 eth1: set [1, 0] type 2 family 0 port 6081 - 0 [ 773.440171][ T162] netdevsim netdevsim4 eth2: set [1, 0] type 2 family 0 port 6081 - 0 [ 773.471404][ T8154] netdevsim netdevsim4 eth3: set [1, 0] type 2 family 0 port 6081 - 0 [ 773.545017][T28387] ip6tnl1: entered allmulticast mode [ 773.590456][ T8154] ip6_tunnel: ip6tnl1 xmit: Local address not yet configured! [ 773.617426][T28392] x_tables: unsorted underflow at hook 2 [ 773.631280][T28390] netlink: 8 bytes leftover after parsing attributes in process `syz.4.5712'. [ 773.658461][T28390] netlink: 40 bytes leftover after parsing attributes in process `syz.4.5712'. [ 773.730885][T28392] netlink: 8 bytes leftover after parsing attributes in process `syz.0.5713'. [ 773.755599][T28392] netlink: 8 bytes leftover after parsing attributes in process `syz.0.5713'. [ 773.998752][T28406] bond1: (slave bond_slave_1): Device is not our slave [ 774.006670][T28406] bond1: option active_slave: invalid value (bond_slave_1) [ 774.017600][T28406] bond1 (unregistering): Released all slaves [ 774.243667][T28417] netlink: 'syz.6.5719': attribute type 1 has an invalid length. [ 774.345988][T28417] 8021q: adding VLAN 0 to HW filter on device bond2 [ 774.404153][T28416] bond2: (slave gretap1): making interface the new active one [ 774.450872][T28416] bond2: (slave gretap1): Enslaving as an active interface with an up link [ 774.696596][T28437] xt_hashlimit: size too large, truncated to 1048576 [ 774.715883][T28437] xt_hashlimit: max too large, truncated to 1048576 [ 774.723931][T28435] rdma_rxe: rxe_newlink: failed to add lo [ 774.747269][T28435] lo: left allmulticast mode [ 774.753269][T28435] tunl0: left allmulticast mode [ 774.759644][T28435] gre0: left allmulticast mode [ 774.775054][T28435] gretap0: left allmulticast mode [ 774.793996][T28435] erspan0: left allmulticast mode [ 774.819032][T28435] ip_vti0: left allmulticast mode [ 774.835091][T28437] ipt_REJECT: TCP_RESET invalid for non-tcp [ 774.841115][T28435] ip6_vti0: left allmulticast mode [ 774.857046][ T49] Bluetooth: hci4: command 0x0405 tx timeout [ 775.347333][ T162] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 775.356917][ T8154] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 775.720070][T28489] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 775.979742][ T8169] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 776.090032][T28506] tipc: Started in network mode [ 776.107731][T28506] tipc: Node identity 5e60c9fb1d36, cluster identity 4711 [ 776.141378][T28506] tipc: Enabled bearer , priority 0 [ 776.156924][T28510] syzkaller0: entered promiscuous mode [ 776.162485][T28510] syzkaller0: entered allmulticast mode [ 776.290736][T28516] bridge0: Device is already in use. [ 776.300554][T28510] tipc: Resetting bearer [ 776.312746][T28505] tipc: Resetting bearer [ 776.359643][T28505] tipc: Disabling bearer [ 776.385329][T28518] syzkaller0: entered promiscuous mode [ 776.403733][T28518] syzkaller0: entered allmulticast mode [ 776.431483][T28518] tipc: Enabling of bearer rejected, failed to enable media [ 776.672115][T28534] x_tables: unsorted underflow at hook 2 [ 776.716183][T28534] __nla_validate_parse: 3 callbacks suppressed [ 776.716201][T28534] netlink: 8 bytes leftover after parsing attributes in process `syz.7.5752'. [ 776.737516][T28534] netlink: 8 bytes leftover after parsing attributes in process `syz.7.5752'. [ 777.207143][T28569] vlan0: entered promiscuous mode [ 777.212830][T28569] bridge0: entered promiscuous mode [ 777.328202][ T29] audit: type=1800 audit(1778062188.889:14): pid=28570 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="syz.0.5760" name="memory.events" dev="tmpfs" ino=136 res=0 errno=0 [ 777.514261][T28574] syzkaller0: entered promiscuous mode [ 777.523235][T28574] syzkaller0: entered allmulticast mode [ 777.535140][T28574] tipc: Enabling of bearer rejected, failed to enable media [ 777.634247][T28583] netlink: 4 bytes leftover after parsing attributes in process `syz.1.5766'. [ 777.644101][T28582] netlink: 4 bytes leftover after parsing attributes in process `syz.1.5766'. [ 777.735679][T28579] netlink: 16 bytes leftover after parsing attributes in process `syz.7.5763'. [ 777.818463][T28592] netlink: 12 bytes leftover after parsing attributes in process `syz.0.5768'. [ 777.900762][ T8169] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 777.910591][ T5956] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 777.930911][T28579] netlink: 59 bytes leftover after parsing attributes in process `syz.7.5763'. [ 777.945209][ T49] block nbd4: Receive control failed (result -1) [ 778.074515][T28604] netlink: 16178 bytes leftover after parsing attributes in process `syz.4.5770'. [ 778.350568][T28612] netlink: 8 bytes leftover after parsing attributes in process `syz.6.5772'. [ 778.372282][T28612] netlink: 'syz.6.5772': attribute type 13 has an invalid length. [ 778.390904][T28612] netlink: 4 bytes leftover after parsing attributes in process `syz.6.5772'. [ 778.519511][T28612] netlink: 'syz.6.5772': attribute type 13 has an invalid length. [ 778.557572][T28620] netdevsim netdevsim4 eth3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 778.725646][T28620] netdevsim netdevsim4 eth2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 778.818866][T28620] netdevsim netdevsim4 eth1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 778.927916][T28620] netdevsim netdevsim4 eth0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 779.078681][ T8154] netdevsim netdevsim4 eth0: set [1, 0] type 2 family 0 port 6081 - 0 [ 779.112546][ T8154] netdevsim netdevsim4 eth1: set [1, 0] type 2 family 0 port 6081 - 0 [ 779.145686][ T5956] netdevsim netdevsim4 eth2: set [1, 0] type 2 family 0 port 6081 - 0 [ 779.196661][ T8154] netdevsim netdevsim4 eth3: set [1, 0] type 2 family 0 port 6081 - 0 [ 779.353703][T28655] syzkaller0: entered promiscuous mode [ 779.366360][T28655] syzkaller0: entered allmulticast mode [ 779.629767][T28678] llcp: llcp_sock_recvmsg: Recv datagram failed state 4 -11 0 [ 779.630486][T28678] netlink: 'syz.0.5789': attribute type 17 has an invalid length. [ 779.646296][T28678] netlink: 'syz.0.5789': attribute type 27 has an invalid length. [ 780.458128][ T8154] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 780.662349][T28689] netlink: 'syz.4.5793': attribute type 11 has an invalid length. [ 781.106440][ T162] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 781.735980][ T162] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 781.754671][T28642] nci: __nci_request: wait_for_completion_interruptible_timeout failed -512 [ 782.031030][T28704] syzkaller0: entered promiscuous mode [ 782.040560][T28704] syzkaller0: entered allmulticast mode [ 782.107012][T28702] syzkaller0: entered promiscuous mode [ 782.126720][T28702] syzkaller0: entered allmulticast mode [ 782.136056][T28714] x_tables: unsorted underflow at hook 2 [ 782.169924][T28702] netlink: 'syz.4.5796': attribute type 22 has an invalid length. [ 782.209859][T28702] netlink: 'syz.4.5796': attribute type 22 has an invalid length. [ 782.222860][T28702] __nla_validate_parse: 5 callbacks suppressed [ 782.222878][T28702] netlink: 44 bytes leftover after parsing attributes in process `syz.4.5796'. [ 782.383612][T28716] netlink: 8 bytes leftover after parsing attributes in process `syz.0.5802'. [ 782.386926][T28720] tipc: Enabled bearer , priority 0 [ 782.394559][T28716] netlink: 8 bytes leftover after parsing attributes in process `syz.0.5802'. [ 782.512900][T28720] syzkaller0: entered promiscuous mode [ 782.554219][T28720] syzkaller0: entered allmulticast mode [ 782.708059][T28733] netlink: 8 bytes leftover after parsing attributes in process `syz.4.5806'. [ 782.744287][T28735] netlink: 8 bytes leftover after parsing attributes in process `syz.4.5806'. [ 782.878568][T28719] tipc: Resetting bearer [ 782.918898][T28719] tipc: Disabling bearer [ 782.956509][T28747] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 782.971368][T28747] x_tables: ip6_tables: dccp match: only valid for protocol 33 [ 783.153846][T28756] netdevsim netdevsim7: Direct firmware load for . failed with error -2 [ 783.194722][T28756] netdevsim netdevsim7: Falling back to sysfs fallback for: . [ 783.250110][T28761] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 783.324740][T28766] x_tables: unsorted underflow at hook 2 [ 783.352701][T28767] netlink: 20 bytes leftover after parsing attributes in process `syz.6.5815'. [ 783.382552][T28767] netlink: 20 bytes leftover after parsing attributes in process `syz.6.5815'. [ 783.397671][T28766] netlink: 8 bytes leftover after parsing attributes in process `syz.0.5818'. [ 783.409141][T28766] netlink: 8 bytes leftover after parsing attributes in process `syz.0.5818'. [ 783.633496][T28776] netlink: 36 bytes leftover after parsing attributes in process `syz.1.5821'. [ 783.649546][T28772] netlink: 'syz.0.5820': attribute type 28 has an invalid length. [ 783.658180][ T5956] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 783.658663][ T5956] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 783.677766][T28772] netlink: 'syz.0.5820': attribute type 3 has an invalid length. [ 783.678255][T28776] x_tables: unsorted underflow at hook 2 [ 783.850637][T28782] veth1_to_bond: entered allmulticast mode [ 783.908130][T28781] veth1_to_bond: left allmulticast mode [ 784.016586][T28792] syzkaller0: entered promiscuous mode [ 784.041909][T28792] syzkaller0: entered allmulticast mode [ 784.226431][T28802] x_tables: unsorted underflow at hook 2 [ 784.339178][T28806] bridge0: port 4(veth0_virt_wifi) entered blocking state [ 784.346746][T28806] bridge0: port 4(veth0_virt_wifi) entered disabled state [ 784.367260][T28806] veth0_virt_wifi: entered allmulticast mode [ 784.384149][T28806] veth0_virt_wifi: entered promiscuous mode [ 786.237453][ T8161] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 786.245636][ T8161] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 787.500224][ T149] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 788.146623][ C0] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 788.745605][T28838] __nla_validate_parse: 12 callbacks suppressed [ 788.745625][T28838] netlink: 4 bytes leftover after parsing attributes in process `syz.1.5840'. [ 788.839840][T28847] x_tables: unsorted underflow at hook 2 [ 788.926264][T28847] netlink: 8 bytes leftover after parsing attributes in process `syz.7.5842'. [ 788.936329][T28847] netlink: 8 bytes leftover after parsing attributes in process `syz.7.5842'. [ 789.057539][T28852] netlink: 36 bytes leftover after parsing attributes in process `syz.1.5843'. [ 789.217563][T28830] lo speed is unknown, defaulting to 1000 [ 789.219385][T28856] syzkaller0: entered promiscuous mode [ 789.245834][T28856] syzkaller0: entered allmulticast mode [ 789.266368][T28830] lo speed is unknown, defaulting to 1000 [ 789.371732][T28851] syzkaller0: entered promiscuous mode [ 789.379882][T28851] syzkaller0: entered allmulticast mode [ 789.389420][T28853] netlink: 36 bytes leftover after parsing attributes in process `syz.7.5844'. [ 789.430973][ T8169] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 789.439163][ T8169] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 789.877300][T28883] netlink: 144 bytes leftover after parsing attributes in process `syz.1.5852'. [ 789.955815][T28884] netlink: 36 bytes leftover after parsing attributes in process `syz.1.5852'. [ 790.707316][ C0] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 790.718395][ C0] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 791.976818][ T8165] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 791.987782][ T8169] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 792.543667][ T8165] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 792.994914][T28869] pim6reg: entered allmulticast mode [ 793.010987][T28874] pim6reg: left allmulticast mode [ 793.025611][T28876] syzkaller1: entered promiscuous mode [ 793.031447][T28876] syzkaller1: entered allmulticast mode [ 793.145073][T28890] netlink: 4 bytes leftover after parsing attributes in process `syz.1.5853'. [ 793.589712][T28908] netlink: 44 bytes leftover after parsing attributes in process `syz.6.5859'. [ 793.661532][ T5635] Bluetooth: hci5: unexpected cc 0x0c03 length: 249 > 1 [ 793.693397][ T5635] Bluetooth: hci5: unexpected cc 0x1003 length: 249 > 9 [ 793.701994][ T5635] Bluetooth: hci5: unexpected cc 0x1001 length: 249 > 9 [ 793.715711][ T5635] Bluetooth: hci5: unexpected cc 0x0c23 length: 249 > 4 [ 793.728140][ T5635] Bluetooth: hci5: unexpected cc 0x0c38 length: 249 > 2 [ 794.182624][T28931] macvtap1: entered promiscuous mode [ 794.194734][T28931] syz_tun: entered promiscuous mode [ 794.240699][T28931] syz_tun: left promiscuous mode [ 794.353245][T28943] netlink: 44 bytes leftover after parsing attributes in process `syz.6.5865'. [ 794.390518][T28910] lo speed is unknown, defaulting to 1000 [ 794.396421][T28943] netlink: 35 bytes leftover after parsing attributes in process `syz.6.5865'. [ 794.415286][T28910] lo speed is unknown, defaulting to 1000 [ 794.437331][T28943] netlink: 'syz.6.5865': attribute type 5 has an invalid length. [ 794.438670][T28947] netlink: 4 bytes leftover after parsing attributes in process `syz.7.5866'. [ 794.485632][T28943] netlink: 'syz.6.5865': attribute type 6 has an invalid length. [ 794.495534][T28943] netlink: 35 bytes leftover after parsing attributes in process `syz.6.5865'. [ 794.571874][T28953] netlink: 16 bytes leftover after parsing attributes in process `syz.1.5867'. [ 795.084549][T28983] netlink: 388 bytes leftover after parsing attributes in process `syz.1.5876'. [ 795.176641][ T162] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 795.184840][ T8165] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 795.576501][T29010] netlink: 20 bytes leftover after parsing attributes in process `syz.1.5880'. [ 795.607557][T28910] bridge0: port 1(bridge_slave_0) entered blocking state [ 795.614890][T28910] bridge0: port 1(bridge_slave_0) entered disabled state [ 795.622509][T28910] bridge_slave_0: entered allmulticast mode [ 795.631179][T28910] bridge_slave_0: entered promiscuous mode [ 795.640355][T28910] bridge0: port 2(bridge_slave_1) entered blocking state [ 795.640903][T29010] netlink: 8 bytes leftover after parsing attributes in process `syz.1.5880'. [ 795.647962][T28910] bridge0: port 2(bridge_slave_1) entered disabled state [ 795.648223][T28910] bridge_slave_1: entered allmulticast mode [ 795.673435][T28910] bridge_slave_1: entered promiscuous mode [ 795.714372][T29010] SET target dimension over the limit! [ 795.718640][T28910] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 795.732588][T28910] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 795.778122][T28910] team0: Port device team_slave_0 added [ 795.787477][T28910] team0: Port device team_slave_1 added [ 795.804938][T29019] xt_HMARK: spi-set and port-set can't be combined [ 795.820524][ T49] Bluetooth: hci5: command tx timeout [ 795.851872][T28910] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 795.875635][T28910] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 795.955676][T28910] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 796.032598][T28910] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 796.054391][T28910] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 796.103461][T28910] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 796.288613][T28910] hsr_slave_0: entered promiscuous mode [ 796.301785][T28910] hsr_slave_1: entered promiscuous mode [ 796.316524][T28910] debugfs: 'hsr0' already exists in 'hsr' [ 796.327997][T28910] Cannot create hsr debugfs directory [ 796.482161][T29035] netlink: 4 bytes leftover after parsing attributes in process `syz.6.5887'. [ 796.550204][T29035] netlink: 256 bytes leftover after parsing attributes in process `syz.6.5887'. [ 796.577559][T29031] sctp: [Deprecated]: syz.1.5886 (pid 29031) Use of int in max_burst socket option. [ 796.577559][T29031] Use struct sctp_assoc_value instead [ 796.814745][T28910] netdevsim netdevsim4 eth3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 797.033447][T28910] netdevsim netdevsim4 eth2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 797.096034][ T8165] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 797.159570][T29060] bond1 (unregistering): Released all slaves [ 797.270163][T28910] netdevsim netdevsim4 eth1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 797.378910][T28910] netdevsim netdevsim4 eth0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 797.501528][T29077] bond0: (slave dummy0): Releasing backup interface [ 797.508898][T29077] dummy0 (unregistering): left allmulticast mode [ 797.522609][T29070] lo speed is unknown, defaulting to 1000 [ 797.543569][T29070] lo speed is unknown, defaulting to 1000 [ 797.738018][ T8165] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 797.852707][T29098] netlink: 'syz.1.5906': attribute type 1 has an invalid length. [ 797.881679][T29099] netlink: 'syz.1.5906': attribute type 1 has an invalid length. [ 797.906475][ T49] Bluetooth: hci5: command tx timeout [ 798.025206][T29105] bond7: (slave bridge5): making interface the new active one [ 798.034595][T29105] bond7: (slave bridge5): Enslaving as an active interface with an up link [ 798.117619][T29098] bond7: (slave gretap4): Enslaving as an active interface with an up link [ 798.156634][T29099] macvlan1: entered promiscuous mode [ 798.162182][T29099] macvlan1: entered allmulticast mode [ 798.169591][T29099] bond7: entered promiscuous mode [ 798.174863][T29099] bridge5: entered promiscuous mode [ 798.184576][T29099] 8021q: adding VLAN 0 to HW filter on device macvlan1 [ 798.192607][T29099] bond7: (slave macvlan1): the slave hw address is in use by the bond; couldn't find a slave with a free hw address to give it (this should not have happened) [ 798.210352][T29099] bond7: left promiscuous mode [ 798.216924][T29099] bridge5: left promiscuous mode [ 798.245657][T28910] netdevsim netdevsim4 netdevsim0: renamed from eth0 [ 798.259584][T28910] 8021q: adding VLAN 0 to HW filter on device netdevsim0 [ 798.291665][T28910] netdevsim netdevsim4 netdevsim1: renamed from eth1 [ 798.319214][T28910] 8021q: adding VLAN 0 to HW filter on device netdevsim1 [ 798.342468][T28910] netdevsim netdevsim4 netdevsim2: renamed from eth2 [ 798.378229][ T8169] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 798.396454][T29115] x_tables: unsorted underflow at hook 2 [ 798.531945][T28910] 8021q: adding VLAN 0 to HW filter on device netdevsim2 [ 798.567286][T29104] lo speed is unknown, defaulting to 1000 [ 798.630787][T28910] netdevsim netdevsim4 netdevsim3: renamed from eth3 [ 798.643264][T28910] 8021q: adding VLAN 0 to HW filter on device netdevsim3 [ 798.651599][T29104] lo speed is unknown, defaulting to 1000 [ 798.664411][T29121] netlink: 'syz.0.5912': attribute type 12 has an invalid length. [ 798.744883][T29129] netlink: 'syz.0.5912': attribute type 1 has an invalid length. [ 798.769419][T28910] 8021q: adding VLAN 0 to HW filter on device bond0 [ 798.776671][T29129] netlink: 'syz.0.5912': attribute type 2 has an invalid length. [ 798.806909][T28910] 8021q: adding VLAN 0 to HW filter on device team0 [ 798.821193][ T8165] bridge0: port 1(bridge_slave_0) entered blocking state [ 798.828429][ T8165] bridge0: port 1(bridge_slave_0) entered forwarding state [ 798.849891][ T5956] bridge0: port 2(bridge_slave_1) entered blocking state [ 798.857149][ T5956] bridge0: port 2(bridge_slave_1) entered forwarding state [ 799.899146][T29166] x_tables: unsorted underflow at hook 2 [ 799.908660][T29164] x_tables: unsorted underflow at hook 2 [ 799.978603][ T49] Bluetooth: hci5: command tx timeout [ 800.012208][T29164] __nla_validate_parse: 11 callbacks suppressed [ 800.012229][T29164] netlink: 8 bytes leftover after parsing attributes in process `syz.1.5921'. [ 800.036606][T29166] netlink: 8 bytes leftover after parsing attributes in process `syz.7.5920'. [ 800.045545][T29164] netlink: 8 bytes leftover after parsing attributes in process `syz.1.5921'. [ 800.082890][T28910] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 800.094320][T29166] netlink: 8 bytes leftover after parsing attributes in process `syz.7.5920'. [ 800.307887][ T162] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 800.415228][T29181] IPVS: set_ctl: invalid protocol: 113 10.1.1.2:20003 [ 800.560228][T29190] netlink: 'syz.1.5927': attribute type 49 has an invalid length. [ 800.674136][T29198] xt_nfacct: accounting object `syz0' does not exist [ 800.783738][T29203] netlink: 'syz.1.5929': attribute type 1 has an invalid length. [ 800.908313][T29206] bond8: (slave geneve4): making interface the new active one [ 800.916771][T29206] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 800.928213][T29206] bond8: (slave geneve4): Enslaving as an active interface with an up link [ 800.948550][ T8158] netdevsim netdevsim1 eth0: set [1, 1] type 2 family 0 port 20004 - 0 [ 800.950654][ T8165] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 800.967778][ T162] netdevsim netdevsim1 eth1: set [1, 1] type 2 family 0 port 20004 - 0 [ 801.026264][T28910] veth0_vlan: entered promiscuous mode [ 801.042579][ T162] netdevsim netdevsim1 eth2: set [1, 1] type 2 family 0 port 20004 - 0 [ 801.057560][T29213] netlink: 8 bytes leftover after parsing attributes in process `syz.7.5930'. [ 801.090846][ T162] netdevsim netdevsim1 eth3: set [1, 1] type 2 family 0 port 20004 - 0 [ 801.157649][T29223] x_tables: unsorted underflow at hook 2 [ 801.160614][T28910] veth1_vlan: entered promiscuous mode [ 801.224346][T29223] netlink: 8 bytes leftover after parsing attributes in process `syz.6.5933'. [ 801.243542][T29223] netlink: 8 bytes leftover after parsing attributes in process `syz.6.5933'. [ 801.246682][T29220] lo speed is unknown, defaulting to 1000 [ 801.302054][T28910] veth0_macvtap: entered promiscuous mode [ 801.320961][T29220] lo speed is unknown, defaulting to 1000 [ 801.332619][T28910] veth1_macvtap: entered promiscuous mode [ 801.387906][T28910] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 801.435825][T28910] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 801.461841][T29231] netlink: 28 bytes leftover after parsing attributes in process `syz.0.5935'. [ 801.502942][ T8154] netdevsim netdevsim4 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 801.532680][ T8154] netdevsim netdevsim4 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 801.604105][ T8154] netdevsim netdevsim4 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 801.617775][ T8154] netdevsim netdevsim4 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 801.758813][T29238] netlink: 164 bytes leftover after parsing attributes in process `syz.0.5936'. [ 802.042168][T29245] xt_hashlimit: size too large, truncated to 1048576 [ 802.056432][ T49] Bluetooth: hci5: command tx timeout [ 802.204659][T29255] netlink: 132 bytes leftover after parsing attributes in process `syz.7.5938'. [ 802.245137][T29249] xt_hashlimit: size too large, truncated to 1048576 [ 802.253560][T29249] x_tables: ip6_tables: TCPMSS target: only valid for protocol 6 [ 802.370892][ T8158] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 802.382492][ T8158] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 802.540464][ T8154] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 802.550025][ T8154] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 802.758646][T29267] netlink: 'syz.0.5941': attribute type 9 has an invalid length. [ 802.857079][ T5956] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 802.866501][ T8169] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 803.002956][T29277] x_tables: unsorted underflow at hook 2 [ 803.283310][T29286] bridge0: port 3(vlan2) entered blocking state [ 803.312124][T29286] bridge0: port 3(vlan2) entered disabled state [ 803.337386][T29286] vlan2: entered allmulticast mode [ 803.346959][T29285] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 803.358171][T29285] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 803.359834][T29286] geneve0: entered allmulticast mode [ 803.420711][T29286] vlan2: entered promiscuous mode [ 803.435521][T29286] geneve0: entered promiscuous mode [ 803.448151][T29292] tc_dump_action: action bad kind [ 803.496994][ T30] INFO: task syz.2.4744:24455 blocked for more than 143 seconds. [ 803.516152][ T30] Not tainted syzkaller #0 [ 803.521322][ T30] "echo 0 > /proc/sys/kernel/hung_task_timeout_secs" disables this message. [ 803.536187][ T30] task:syz.2.4744 state:D stack:27176 pid:24455 tgid:24452 ppid:17369 task_flags:0x400140 flags:0x00080002 [ 803.558593][ T30] Call Trace: [ 803.566133][ T30] [ 803.576511][ T30] __schedule+0x17b4/0x5680 [ 803.589537][ T30] ? __lock_acquire+0x6b5/0x2cf0 [ 803.604109][ T30] ? __pfx___schedule+0x10/0x10 [ 803.620890][ T30] ? schedule+0x90/0x360 [ 803.631723][ T30] schedule+0x164/0x360 [ 803.642466][ T30] schedule_preempt_disabled+0x13/0x30 [ 803.661768][ T30] __mutex_lock+0x7f7/0x1550 [ 803.672685][ T30] ? __pfx_stack_trace_save+0x10/0x10 [ 803.683103][ T30] ? __mutex_lock+0x608/0x1550 [ 803.693188][ T30] ? nfsd_nl_listener_set_doit+0x141/0x1670 [ 803.699980][ T30] ? __pfx___mutex_lock+0x10/0x10 [ 803.705288][ T30] ? __asan_memset+0x22/0x50 [ 803.710017][ T30] ? __nla_validate_parse+0x2480/0x2dc0 [ 803.715892][ T30] nfsd_nl_listener_set_doit+0x141/0x1670 [ 803.721677][ T30] ? __pfx___nla_validate_parse+0x10/0x10 [ 803.727665][ T30] ? __pfx_nfsd_nl_listener_set_doit+0x10/0x10 [ 803.733887][ T30] ? __nla_parse+0x40/0x60 [ 803.739251][ T30] ? genl_family_rcv_msg_attrs_parse+0x20b/0x2f0 [ 803.745700][ T30] ? genl_family_rcv_msg_attrs_parse+0x265/0x2f0 [ 803.752230][ T30] genl_family_rcv_msg_doit+0x22a/0x330 [ 803.758062][ T30] ? __asan_memcpy+0x40/0x70 [ 803.762817][ T30] ? __pfx_genl_family_rcv_msg_doit+0x10/0x10 [ 803.769047][ T30] ? bpf_lsm_capable+0x9/0x20 [ 803.773855][ T30] ? security_capable+0x7e/0x2c0 [ 803.779474][ T30] genl_rcv_msg+0x61c/0x7a0 [ 803.784244][ T30] ? __pfx_genl_rcv_msg+0x10/0x10 [ 803.790448][ T30] ? __pfx_nfsd_nl_listener_set_doit+0x10/0x10 [ 803.797950][ T30] netlink_rcv_skb+0x232/0x4b0 [ 803.803386][ T30] ? __pfx_genl_rcv_msg+0x10/0x10 [ 803.808619][ T30] ? __pfx_netlink_rcv_skb+0x10/0x10 [ 803.813945][ T30] ? down_read+0x270/0x2e0 [ 803.819121][ T30] ? genl_rcv+0xd/0x40 [ 803.823252][ T30] genl_rcv+0x28/0x40 [ 803.827347][ T30] netlink_unicast+0x75c/0x8e0 [ 803.832218][ T30] netlink_sendmsg+0x813/0xb40 [ 803.837223][ T30] ? __pfx_netlink_sendmsg+0x10/0x10 [ 803.842559][ T30] ? aa_sock_msg_perm+0xf1/0x1b0 [ 803.847725][ T30] ? bpf_lsm_socket_sendmsg+0x9/0x20 [ 803.853160][ T30] ____sys_sendmsg+0x972/0x9f0 [ 803.858113][ T30] ? __might_fault+0xaf/0x130 [ 803.863062][ T30] ? __pfx_____sys_sendmsg+0x10/0x10 [ 803.868591][ T30] ? import_iovec+0x73/0xa0 [ 803.873210][ T30] ___sys_sendmsg+0x2a5/0x360 [ 803.878056][ T30] ? __lock_acquire+0x6b5/0x2cf0 [ 803.883046][ T30] ? __pfx____sys_sendmsg+0x10/0x10 [ 803.888334][ T30] ? futex_wait+0x2a2/0x390 [ 803.892874][ T30] ? __fget_files+0x2a/0x420 [ 803.898233][ T30] ? __fget_files+0x3a0/0x420 [ 803.903523][ T30] __x64_sys_sendmsg+0x1bd/0x2a0 [ 803.908659][ T30] ? __pfx___x64_sys_sendmsg+0x10/0x10 [ 803.914216][ T30] ? rcu_is_watching+0x15/0xb0 [ 803.919087][ T30] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 803.925180][ T30] do_syscall_64+0x15f/0xf80 [ 803.930394][ T30] ? trace_irq_disable+0x3b/0x140 [ 803.935658][ T30] ? clear_bhb_loop+0x40/0x90 [ 803.940384][ T30] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 803.946342][ T30] RIP: 0033:0x7faec419cdd9 [ 803.950773][ T30] RSP: 002b:00007faec50da028 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 803.959395][ T30] RAX: ffffffffffffffda RBX: 00007faec4415fa0 RCX: 00007faec419cdd9 [ 803.967451][ T30] RDX: 0000000000000000 RSI: 00002000000001c0 RDI: 0000000000000005 [ 803.977114][ T30] RBP: 00007faec4232d69 R08: 0000000000000000 R09: 0000000000000000 [ 803.985121][ T30] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 803.993130][ T30] R13: 00007faec4416038 R14: 00007faec4415fa0 R15: 00007ffd163b3f38 [ 804.001170][ T30] [ 804.004675][ T30] [ 804.004675][ T30] Showing all locks held in the system: [ 804.012630][ T30] 1 lock held by khungtaskd/30: [ 804.030530][ T30] #0: ffffffff8e95cd60 (rcu_read_lock){....}-{1:3}, at: debug_show_all_locks+0x2e/0x180 [ 804.042099][ T30] 3 locks held by kworker/u8:6/149: [ 804.055400][ T30] #0: ffff88801ae84140 ((wq_completion)events_unbound){+.+.}-{0:0}, at: process_scheduled_works+0xa35/0x1860 [ 804.077005][ T30] #1: ffffc90002f37c40 ((linkwatch_work).work){+.+.}-{0:0}, at: process_scheduled_works+0xa70/0x1860 [ 804.088296][ T30] #2: ffffffff8fdcf000 (rtnl_mutex){+.+.}-{4:4}, at: linkwatch_event+0xe/0x60 [ 804.097726][ T30] 1 lock held by syslogd/4972: [ 804.102525][ T30] #0: ffff8880b863aea0 (&rq->__lock){-.-.}-{2:2}, at: raw_spin_rq_lock_nested+0x31/0x150 [ 804.113470][ T30] 2 locks held by getty/5381: [ 804.118954][ T30] #0: ffff888036b590a0 (&tty->ldisc_sem){++++}-{0:0}, at: tty_ldisc_ref_wait+0x25/0x70 [ 804.128993][ T30] #1: ffffc9000322b2e8 (&ldata->atomic_read_lock){+.+.}-{4:4}, at: n_tty_read+0x45c/0x13a0 [ 804.139169][ T5956] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 804.153156][ T30] 3 locks held by kworker/u8:11/8154: [ 804.159303][ T30] #0: ffff88801ae84140 ((wq_completion)events_unbound){+.+.}-{0:0}, at: process_scheduled_works+0xa35/0x1860 [ 804.171692][ T30] #1: ffffc900036d7c40 ((work_completion)(&map->work)){+.+.}-{0:0}, at: process_scheduled_works+0xa70/0x1860 [ 804.183743][ T30] #2: ffffffff8e963068 (rcu_state.exp_mutex){+.+.}-{4:4}, at: synchronize_rcu_expedited+0x38d/0x770 [ 804.202715][ T30] 3 locks held by kworker/u8:17/8169: [ 804.208708][ T30] #0: ffff888030c2e140 ((wq_completion)ipv6_addrconf){+.+.}-{0:0}, at: process_scheduled_works+0xa35/0x1860 [ 804.221415][ T30] #1: ffffc90005d1fc40 ((work_completion)(&(&ifa->dad_work)->work)){+.+.}-{0:0}, at: process_scheduled_works+0xa70/0x1860 [ 804.234493][ T30] #2: ffffffff8fdcf000 (rtnl_mutex){+.+.}-{4:4}, at: addrconf_dad_work+0x11e/0x14c0 [ 804.244084][ T30] 3 locks held by kworker/0:15/22420: [ 804.249525][ T30] #0: ffff88813fe43140 ((wq_completion)events){+.+.}-{0:0}, at: process_scheduled_works+0xa35/0x1860 [ 804.260735][ T30] #1: ffffc90004bdfc40 ((fqdir_free_work).work){+.+.}-{0:0}, at: process_scheduled_works+0xa70/0x1860 [ 804.271984][ T30] #2: ffffffff8e962f38 (rcu_state.barrier_mutex){+.+.}-{4:4}, at: rcu_barrier+0x4c/0x580 [ 804.281969][ T30] 2 locks held by syz.3.4266/22521: [ 804.287393][ T30] #0: ffffffff8fe3e428 (cb_lock){++++}-{4:4}, at: genl_rcv+0x19/0x40 [ 804.297869][ T30] #1: ffffffff8ec8aba0 (nfsd_mutex){+.+.}-{4:4}, at: nfsd_nl_listener_set_doit+0x141/0x1670 [ 804.308223][ T30] 2 locks held by syz.2.4744/24455: [ 804.313964][ T30] #0: ffffffff8fe3e428 (cb_lock){++++}-{4:4}, at: genl_rcv+0x19/0x40 [ 804.322270][ T30] #1: ffffffff8ec8aba0 (nfsd_mutex){+.+.}-{4:4}, at: nfsd_nl_listener_set_doit+0x141/0x1670 [ 804.332527][ T30] 2 locks held by syz.5.5178/26343: [ 804.337779][ T30] #0: ffffffff8fe3e428 (cb_lock){++++}-{4:4}, at: genl_rcv+0x19/0x40 [ 804.346045][ T30] #1: ffffffff8ec8aba0 (nfsd_mutex){+.+.}-{4:4}, at: nfsd_nl_listener_set_doit+0x141/0x1670 [ 804.356505][ T30] 1 lock held by syz.4.5944/29278: [ 804.361623][ T30] #0: ffffffff8fdcf000 (rtnl_mutex){+.+.}-{4:4}, at: tun_chr_close+0x3e/0x1c0 [ 804.370661][ T30] 1 lock held by syz.0.5945/29281: [ 804.376397][ T30] #0: ffffffff8fdcf000 (rtnl_mutex){+.+.}-{4:4}, at: rtnetlink_rcv_msg+0x722/0xbe0 [ 804.385906][ T30] 1 lock held by syz.0.5945/29298: [ 804.391026][ T30] #0: ffffffff8fdcf000 (rtnl_mutex){+.+.}-{4:4}, at: rtnetlink_rcv_msg+0x722/0xbe0 [ 804.400643][ T30] 2 locks held by syz.7.5947/29287: [ 804.405893][ T30] #0: ffff888058fdb840 (&sb->s_type->i_mutex_key#13){+.+.}-{4:4}, at: sock_close+0x9b/0x240 [ 804.416781][ T30] #1: ffffffff8e963068 (rcu_state.exp_mutex){+.+.}-{4:4}, at: synchronize_rcu_expedited+0x38d/0x770 [ 804.427807][ T30] [ 804.430159][ T30] ============================================= [ 804.430159][ T30] [ 804.441695][ T30] NMI backtrace for cpu 1 [ 804.441717][ T30] CPU: 1 UID: 0 PID: 30 Comm: khungtaskd Not tainted syzkaller #0 PREEMPT(full) [ 804.441737][ T30] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 04/18/2026 [ 804.441748][ T30] Call Trace: [ 804.441755][ T30] [ 804.441763][ T30] dump_stack_lvl+0xe8/0x150 [ 804.441789][ T30] nmi_cpu_backtrace+0x274/0x2d0 [ 804.441816][ T30] ? __pfx_nmi_raise_cpu_backtrace+0x10/0x10 [ 804.441837][ T30] nmi_trigger_cpumask_backtrace+0x17a/0x300 [ 804.441875][ T30] sys_info+0x135/0x170 [ 804.441898][ T30] watchdog+0xfd3/0x1030 [ 804.441930][ T30] ? watchdog+0x1c9/0x1030 [ 804.441961][ T30] kthread+0x388/0x470 [ 804.441985][ T30] ? __pfx_watchdog+0x10/0x10 [ 804.442007][ T30] ? __pfx_kthread+0x10/0x10 [ 804.442032][ T30] ret_from_fork+0x514/0xb70 [ 804.442054][ T30] ? __pfx_ret_from_fork+0x10/0x10 [ 804.442074][ T30] ? __switch_to+0xc79/0x1410 [ 804.442101][ T30] ? __pfx_kthread+0x10/0x10 [ 804.442123][ T30] ret_from_fork_asm+0x1a/0x30 [ 804.442154][ T30] [ 804.442161][ T30] Sending NMI from CPU 1 to CPUs 0: [ 804.553857][ C0] NMI backtrace for cpu 0 [ 804.553875][ C0] CPU: 0 UID: 0 PID: 29298 Comm: syz.0.5945 Not tainted syzkaller #0 PREEMPT(full) [ 804.553892][ C0] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 04/18/2026 [ 804.553903][ C0] RIP: 0010:deref_stack_reg+0x1d4/0x230 [ 804.553928][ C0] Code: 48 c1 e8 03 42 80 3c 38 00 74 08 48 89 df e8 c3 dc b9 00 4c 89 33 b0 01 eb 02 31 c0 48 83 c4 20 5b 41 5c 41 5d 41 5e 41 5f 5d cc cc cc cc cc 44 89 f9 80 e1 07 80 c1 03 38 c1 0f 8c b3 fe ff [ 804.553941][ C0] RSP: 0018:ffffc90005f46d70 EFLAGS: 00000282 [ 804.553956][ C0] RAX: 1ffff92000be8d01 RBX: ffffffff90d50cfe RCX: 0000000000000001 [ 804.553967][ C0] RDX: ffffc90005f46e88 RSI: dffffc0000000000 RDI: ffffc90005f47920 [ 804.553979][ C0] RBP: dffffc0000000000 R08: ffffc90005f47920 R09: 0000000000000000 [ 804.553990][ C0] R10: ffffc90005f46e98 R11: fffff52000be8dd5 R12: ffffc90005f47920 [ 804.554001][ C0] R13: 1ffff92000be8dcb R14: ffffc90005f46e48 R15: 1ffffffff21aa1a0 [ 804.554013][ C0] FS: 0000000000000000(0000) GS:ffff888125290000(0000) knlGS:0000000000000000 [ 804.554025][ C0] CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033 [ 804.554036][ C0] CR2: 00007fb484be8158 CR3: 000000005e65e000 CR4: 00000000003526f0 [ 804.554051][ C0] Call Trace: [ 804.554057][ C0] [ 804.554063][ C0] unwind_next_frame+0x19d5/0x2550 [ 804.554087][ C0] ? unwind_next_frame+0xa6/0x2550 [ 804.554105][ C0] ? evict+0x61e/0xb10 [ 804.554129][ C0] ? __pfx_stack_trace_consume_entry+0x10/0x10 [ 804.554152][ C0] arch_stack_walk+0x11b/0x150 [ 804.554174][ C0] ? __dentry_kill+0x1a2/0x690 [ 804.554199][ C0] stack_trace_save+0xa9/0x100 [ 804.554220][ C0] ? __pfx_stack_trace_save+0x10/0x10 [ 804.554243][ C0] ? stack_depot_save_flags+0x33/0x810 [ 804.554268][ C0] save_stack+0x122/0x230 [ 804.554290][ C0] ? __pfx_save_stack+0x10/0x10 [ 804.554309][ C0] ? free_unref_folios+0xcec/0x1480 [ 804.554329][ C0] ? folios_put_refs+0x9ff/0xb40 [ 804.554351][ C0] ? shmem_undo_range+0x52c/0x1660 [ 804.554366][ C0] ? shmem_evict_inode+0x289/0xae0 [ 804.554385][ C0] ? evict+0x61e/0xb10 [ 804.554410][ C0] ? page_ext_put+0x97/0xc0 [ 804.554439][ C0] __reset_page_owner+0x71/0x1f0 [ 804.554461][ C0] free_unref_folios+0xcec/0x1480 [ 804.554489][ C0] folios_put_refs+0x9ff/0xb40 [ 804.554517][ C0] ? __pfx_folios_put_refs+0x10/0x10 [ 804.554538][ C0] ? filemap_remove_folio+0x312/0x3a0 [ 804.554556][ C0] ? folio_batch_remove_exceptionals+0x18c/0x1f0 [ 804.554581][ C0] shmem_undo_range+0x52c/0x1660 [ 804.554606][ C0] ? __pfx_shmem_undo_range+0x10/0x10 [ 804.554653][ C0] ? __lock_acquire+0x6b5/0x2cf0 [ 804.554672][ C0] ? percpu_counter_add_batch+0xea/0x1d0 [ 804.554693][ C0] shmem_evict_inode+0x289/0xae0 [ 804.554717][ C0] ? inode_wait_for_writeback+0x16d/0x3b0 [ 804.554739][ C0] ? __pfx_shmem_evict_inode+0x10/0x10 [ 804.554760][ C0] ? __pfx_inode_wait_for_writeback+0x10/0x10 [ 804.554780][ C0] ? do_raw_spin_lock+0x12b/0x2f0 [ 804.554806][ C0] ? do_raw_spin_unlock+0xf5/0x210 [ 804.554825][ C0] ? __pfx_shmem_evict_inode+0x10/0x10 [ 804.554847][ C0] evict+0x61e/0xb10 [ 804.554872][ C0] ? __pfx_evict+0x10/0x10 [ 804.554892][ C0] ? do_raw_spin_unlock+0xf5/0x210 [ 804.554914][ C0] ? _raw_spin_unlock+0x28/0x50 [ 804.554929][ C0] ? iput+0xb25/0xe80 [ 804.554951][ C0] __dentry_kill+0x1a2/0x690 [ 804.554973][ C0] ? finish_dput+0xad/0x480 [ 804.554990][ C0] finish_dput+0xc9/0x480 [ 804.555009][ C0] __fput+0x691/0xa60 [ 804.555031][ C0] task_work_run+0x1d9/0x270 [ 804.555054][ C0] ? __pfx_task_work_run+0x10/0x10 [ 804.555074][ C0] ? do_raw_spin_unlock+0xf5/0x210 [ 804.555099][ C0] do_exit+0x70f/0x22c0 [ 804.555123][ C0] ? __pfx_do_exit+0x10/0x10 [ 804.555142][ C0] ? cgroup1_freezing+0x20/0x350 [ 804.555160][ C0] ? cgroup1_freezing+0x20/0x350 [ 804.555183][ C0] do_group_exit+0x21b/0x2d0 [ 804.555203][ C0] ? _raw_spin_unlock_irq+0x23/0x50 [ 804.555221][ C0] get_signal+0x1284/0x1330 [ 804.555247][ C0] arch_do_signal_or_restart+0xbc/0x830 [ 804.555270][ C0] ? __x64_sys_sendmsg+0x26f/0x2a0 [ 804.555290][ C0] ? __pfx_arch_do_signal_or_restart+0x10/0x10 [ 804.555322][ C0] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 804.555338][ C0] exit_to_user_mode_loop+0x86/0x480 [ 804.555351][ C0] ? rcu_is_watching+0x15/0xb0 [ 804.555369][ C0] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 804.555385][ C0] do_syscall_64+0x33e/0xf80 [ 804.555402][ C0] ? trace_irq_disable+0x3b/0x140 [ 804.555424][ C0] ? clear_bhb_loop+0x40/0x90 [ 804.555448][ C0] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 804.555464][ C0] RIP: 0033:0x7f2d9479cdd9 [ 804.555477][ C0] Code: Unable to access opcode bytes at 0x7f2d9479cdaf. [ 804.555485][ C0] RSP: 002b:00007f2d929f6028 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 804.555501][ C0] RAX: 0000000000000044 RBX: 00007f2d94a16090 RCX: 00007f2d9479cdd9 [ 804.555512][ C0] RDX: 0000000024040004 RSI: 0000200000000180 RDI: 0000000000000005 [ 804.555522][ C0] RBP: 00007f2d94832d69 R08: 0000000000000000 R09: 0000000000000000 [ 804.555532][ C0] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 804.555542][ C0] R13: 00007f2d94a16128 R14: 00007f2d94a16090 R15: 00007ffeaa015298 [ 804.555563][ C0] [ 804.556287][ T30] Kernel panic - not syncing: hung_task: blocked tasks [ 804.556307][ T30] CPU: 1 UID: 0 PID: 30 Comm: khungtaskd Not tainted syzkaller #0 PREEMPT(full) [ 804.556327][ T30] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 04/18/2026 [ 804.556339][ T30] Call Trace: [ 804.556347][ T30] [ 804.556355][ T30] vpanic+0x56c/0xa60 [ 804.556380][ T30] ? __pfx___schedule+0x10/0x10 [ 804.556401][ T30] ? __pfx_vpanic+0x10/0x10 [ 804.556430][ T30] panic+0xc5/0xd0 [ 804.556448][ T30] ? __pfx_panic+0x10/0x10 [ 804.556470][ T30] ? preempt_schedule_thunk+0x16/0x30 [ 804.556500][ T30] ? nmi_trigger_cpumask_backtrace+0x2bb/0x300 [ 804.556530][ T30] watchdog+0x102c/0x1030 [ 804.556561][ T30] ? watchdog+0x1c9/0x1030 [ 804.556591][ T30] kthread+0x388/0x470 [ 804.556615][ T30] ? __pfx_watchdog+0x10/0x10 [ 804.556637][ T30] ? __pfx_kthread+0x10/0x10 [ 804.556660][ T30] ret_from_fork+0x514/0xb70 [ 804.556683][ T30] ? __pfx_ret_from_fork+0x10/0x10 [ 804.556701][ T30] ? __switch_to+0xc79/0x1410 [ 804.556728][ T30] ? __pfx_kthread+0x10/0x10 [ 804.556752][ T30] ret_from_fork_asm+0x1a/0x30 [ 804.556787][ T30] [ 805.175628][ T30] Kernel Offset: disabled [ 805.179938][ T30] Rebooting in 86400 seconds..