last executing test programs: 1m42.507194727s ago: executing program 2 (id=2507): r0 = socket$alg(0x26, 0x5, 0x0) (async) r1 = socket(0x18, 0x6, 0xfffffffd) poll(&(0x7f0000019080)=[{r0, 0x18}, {r1, 0x134}], 0x2, 0x401) r2 = syz_init_net_socket$802154_dgram(0x24, 0x2, 0x0) bind$802154_dgram(r2, &(0x7f0000000480)={0x24, @short={0x2, 0x2, 0xaaa3}}, 0x14) (async) setsockopt$SO_TIMESTAMP(r2, 0x1, 0x1e, &(0x7f0000000c00)=0x80000001, 0x4) (async) getsockopt$inet_sctp_SCTP_GET_ASSOC_ID_LIST(r1, 0x84, 0x1d, &(0x7f0000000140)={0x3, [0x0, 0x0, 0x0]}, &(0x7f00000002c0)=0x10) (async) getsockopt$inet_sctp_SCTP_GET_ASSOC_ID_LIST(0xffffffffffffffff, 0x84, 0x1d, &(0x7f0000000180)={0x1, [0x0]}, &(0x7f00000001c0)=0x8) (async, rerun: 32) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f00000006c0)={0xffffffffffffffff, 0x0, 0x84, 0x0, &(0x7f0000000440)="23c8487a7ef19e692eb6f1ef47f0083bcc886414091aa6c1397f2d8ec267f6ca90ca9448c19960088ea673c4d9f54117929cfd525a1ab483cfb110b85f586b931504f224b5577a464678b3264464e8e48ed7e3fb9aee63231edb42b9621746f63ba5971edf13b5ecc893e2d2a5e326d0dd23b264893de6a0b683217a570dd791a1064250", &(0x7f0000000500), 0x200, 0x0, 0x4f, 0xfb, &(0x7f0000000540)="b5f5f73bf1f1e208a6419ce8ffb4a52f9493d93c3fdf2f823409bb41171d0e5bf8b4f5373e2a6eca75e8e0c299ea04ed69be4e189d620c1f08c26fc0a95becf6c8d1e44d9542eb5ae87b838bc2969a", &(0x7f00000005c0)="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", 0x1, 0x0, 0x6}, 0x50) (async, rerun: 32) r4 = bpf$BPF_BTF_GET_FD_BY_ID(0x13, &(0x7f0000000100), 0x4) bpf$TOKEN_CREATE(0x24, &(0x7f0000000300)={0x0, r4}, 0x8) r5 = socket$nl_route(0x10, 0x3, 0x0) (async) r6 = openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0x2, 0x0) ioctl$TUNSETIFF(r6, 0x400454ca, &(0x7f0000000040)={'syzkaller1\x00', 0x1}) (async) r7 = socket$unix(0x1, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r7, 0x8933, &(0x7f0000000100)={'syzkaller1\x00', 0x0}) ioctl$sock_inet_SIOCSIFFLAGS(r7, 0x8914, &(0x7f0000000200)={'syzkaller1\x00', 0x1}) (async, rerun: 64) sendmsg$nl_route_sched(r5, &(0x7f00000012c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000000c0)=@newqdisc={0x30, 0x24, 0x601, 0x0, 0x0, {0x0, 0x0, 0x0, r8, {}, {0xfff1, 0xffff}}, [@qdisc_kind_options=@q_ingress={0xc}]}, 0x30}}, 0x0) (async, rerun: 64) sendmsg$nl_route_sched(r5, &(0x7f0000000580)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000001300)=@newtfilter={0x40, 0x2c, 0x601, 0x0, 0x0, {0x0, 0x0, 0x0, r8, {}, {0xfff1, 0xffff}, {0x300, 0xf}}, [@filter_kind_options=@f_matchall={{0xd}, {0xc, 0x2, [@TCA_MATCHALL_FLAGS={0x8, 0x3, 0x5}]}}]}, 0x40}, 0x1, 0x0, 0x0, 0x80c1}, 0x0) write(r6, &(0x7f0000000400)="0000884700064001", 0x8) r9 = socket$inet6_sctp(0xa, 0x5, 0x84) shutdown(r9, 0x0) (async) getsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX3(r9, 0x84, 0x6f, &(0x7f0000000000)={0x0, 0x2c, &(0x7f0000000d80)=[@in6={0xa, 0x4e22, 0xffffffff, @ipv4={'\x00', '\xff\xff', @initdev={0xac, 0x1e, 0x1, 0x0}}, 0x70}, @in={0x2, 0x4e22, @rand_addr=0x64010101}]}, &(0x7f0000000080)=0x10) r10 = bpf$PROG_LOAD(0x5, &(0x7f0000000740)={0xc, 0xe, &(0x7f0000000380)=ANY=[@ANYRES16=r3], &(0x7f0000000340)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, r4}, 0x94) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000080)={r10, 0xa002a0, 0x10, 0x18, &(0x7f0000000000)="5ae02efc441a80536af0d1d905c723fa", &(0x7f0000000040)=""/24, 0x6414}, 0x28) 1m42.107301731s ago: executing program 2 (id=2512): r0 = socket$pppl2tp(0x18, 0x1, 0x1) r1 = socket$inet6_udp(0xa, 0x2, 0x0) connect$inet6(r1, &(0x7f0000000000)={0xa, 0x4e24, 0x2eb, @local, 0xa}, 0x1c) r2 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) getsockopt$sock_cred(r2, 0x1, 0x4d, 0x0, &(0x7f0000000040)) ioctl$sock_SIOCETHTOOL(0xffffffffffffffff, 0x8946, &(0x7f0000000040)={'veth1\x00', &(0x7f0000000200)=@ethtool_per_queue_op={0x4b, 0xe, [0x7, 0x1, 0x7fff, 0x1, 0x4, 0x5, 0xa4, 0x80000000, 0x7, 0xb69, 0xc1, 0x6, 0x1, 0x3, 0x5, 0x101, 0x1000, 0x9, 0x3, 0x3, 0x1, 0xfffffffa, 0x0, 0x6, 0x9, 0x4, 0x7, 0x5, 0x100000, 0x762, 0x3, 0xd, 0xe, 0x2b12, 0x100, 0x6, 0x1c00, 0xb, 0x80, 0xbed4, 0x1623, 0x8000100, 0x3, 0x2, 0x11000, 0x808, 0x5, 0x79b, 0x2, 0xf3b, 0x3, 0x4, 0xa, 0x7, 0xf, 0x101, 0xd7, 0x1fa08602, 0x7, 0xaa, 0x81, 0x2, 0x180000, 0x4007, 0x8f, 0x5, 0x2af, 0xf7, 0xfffff0df, 0x1, 0x6, 0x9, 0x7, 0x7, 0x4009, 0x6b000000, 0x4, 0x100202, 0x8, 0x752, 0x0, 0x3, 0x0, 0xa7, 0x2, 0xffffffff, 0x6, 0x8, 0x9, 0x80000000, 0xfdffffff, 0x2, 0x2, 0x84, 0x100, 0x5, 0x100000, 0x83, 0xb, 0x5, 0x20006, 0x5, 0x2, 0xb, 0x2, 0xd9a, 0x136, 0x2a2, 0xffffffff, 0xba4, 0x2, 0x5, 0x8, 0x0, 0x4, 0x2, 0x8, 0x8, 0x4, 0x80000000, 0x401, 0x66ca, 0x80000001, 0x8, 0x1, 0x1fc, 0xc5c, 0xffffffff]}}) poll(&(0x7f0000000000), 0x20000000000000b5, 0x9) setsockopt$inet6_udp_int(r1, 0x11, 0x65, &(0x7f0000000140)=0x4ecd, 0x4) r3 = bpf$ITER_CREATE(0xb, &(0x7f0000000100), 0x0) close(r3) r4 = syz_open_procfs$namespace(0xffffffffffffffff, &(0x7f0000000300)='ns/net\x00') r5 = bpf$BPF_PROG_WITH_BTFID_LOAD(0x5, &(0x7f00000003c0)=@bpf_lsm={0x1e, 0x3, &(0x7f00000000c0)=ANY=[@ANYBLOB="1800000000000000000000000000000095"], &(0x7f0000000280)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x24}, 0x80) bpf$BPF_PROG_TEST_RUN(0x1c, &(0x7f00000005c0)={r5, 0x0, 0x24, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4}, 0xa) bpf$BPF_PROG_QUERY(0x10, &(0x7f0000000140)={@fallback=r4, 0x24, 0x0, 0xffff, &(0x7f0000000080)=[0x0, 0x0], 0x2, 0x0, 0x0, 0x0, 0x0}, 0x40) connect$pppl2tp(r0, &(0x7f0000000240)=@pppol2tpin6={0x18, 0x1, {0x0, r1, 0x1, 0x0, 0x0, 0x0, {0xa, 0x4e21, 0xca33, @remote}}}, 0x32) r6 = socket(0x10, 0x803, 0x0) sendmsg$nl_route(r6, &(0x7f0000000380)={0x0, 0x4076cbba9945d516, &(0x7f0000000340)={0x0, 0x14}}, 0x0) getsockname$packet(r6, &(0x7f0000000140)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000400)=0x14) sendmsg$NFNL_MSG_ACCT_DEL(r6, &(0x7f0000000200)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x40000}, 0xc, &(0x7f00000002c0)={&(0x7f0000000080)={0x70, 0x3, 0x7, 0x0, 0x0, 0x0, {0x3, 0x0, 0x7}, [@NFACCT_NAME={0x9, 0x1, 'syz1\x00'}, @NFACCT_NAME={0x9, 0x1, 'syz0\x00'}, @NFACCT_NAME={0x9, 0x1, 'syz0\x00'}, @NFACCT_PKTS={0xc, 0x2, 0x1, 0x0, 0x400000000000000}, @NFACCT_BYTES={0xc, 0x3, 0x1, 0x0, 0xe1}, @NFACCT_QUOTA={0xc, 0x6, 0x1, 0x0, 0x101}, @NFACCT_FLAGS={0x8}, @NFACCT_NAME={0x9, 0x1, 'syz1\x00'}]}, 0x70}, 0x1, 0x0, 0x0, 0x40010}, 0x810) writev(r0, &(0x7f0000000180)=[{&(0x7f0000000280)="f4", 0xfdef}], 0x1) 1m41.942106943s ago: executing program 2 (id=2516): r0 = socket$inet6_sctp(0xa, 0x5, 0x84) r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='memory.events\x00', 0x275a, 0x0) mmap(&(0x7f0000002000/0x3000)=nil, 0x3000, 0x0, 0x12, r1, 0x0) getsockopt$bt_hci(r0, 0x84, 0x0, &(0x7f0000002a80)=""/4084, &(0x7f0000000000)=0xff4) r2 = socket$nl_rdma(0x10, 0x3, 0x14) sendmsg$RDMA_NLDEV_CMD_NEWLINK(r2, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000100)={0x38, 0x1403, 0x1, 0x1070bd27, 0x25dfdbfe, "", [{{0x9, 0x2, 'syz0\x00'}, {0x8, 0x41, 'siw\x00'}, {0x14, 0x33, 'lo\x00'}}]}, 0x38}, 0x1, 0x0, 0x0, 0x4000840}, 0x0) ioctl$sock_ipv6_tunnel_SIOCGETTUNNEL(r1, 0x89f0, &(0x7f0000000580)={'syztnl2\x00', &(0x7f0000000500)={'syztnl2\x00', 0x0, 0x2f, 0x9, 0x5, 0x3, 0x5, @private2, @private0={0xfc, 0x0, '\x00', 0x1}, 0x8040, 0x80, 0x3, 0xa9a}}) bpf$BPF_BTF_GET_NEXT_ID(0x17, &(0x7f0000000640)={0x1, 0x0}, 0x8) bpf$PROG_LOAD(0x5, &(0x7f0000000740)={0x8, 0x3f, &(0x7f0000000280)=@ringbuf={{}, {{0x18, 0x1, 0x1, 0x0, r1}}, {}, [@map_idx_val={0x18, 0x4b3ff53eb525707f, 0x6, 0x0, 0xd, 0x0, 0x0, 0x0, 0x8}, @snprintf={{}, {}, {}, {}, {}, {}, {}, {}, {}, {0x18, 0x3, 0x2, 0x0, r1}}, @btf_id={0x18, 0xa, 0x3, 0x0, 0x3}, @initr0={0x18, 0x0, 0x0, 0x0, 0x6, 0x0, 0x0, 0x0, 0x5}, @ringbuf_query={{0x18, 0x1, 0x1, 0x0, r1}}, @map_val={0x18, 0x7, 0x2, 0x0, r2}, @snprintf={{}, {}, {0x7, 0x0, 0xb, 0x8, 0x0, 0x0, 0x7}, {}, {}, {}, {}, {}, {}, {0x18, 0x3, 0x2, 0x0, r1}}, @map_idx={0x18, 0xb}, @printk={@x, {}, {}, {}, {}, {0x7, 0x0, 0xb, 0x3, 0x0, 0x0, 0x4}}], {{}, {0x7, 0x0, 0xb, 0x2, 0x0, 0x0, 0x1}, {0x85, 0x0, 0x0, 0x84}}}, &(0x7f0000000480)='GPL\x00', 0x80000000, 0x2b, &(0x7f00000004c0)=""/43, 0x41100, 0x20, '\x00', r3, @cgroup_skb, r1, 0x8, &(0x7f00000005c0)={0x4, 0x2}, 0x8, 0x10, &(0x7f0000000600)={0x5, 0x6, 0x0, 0x6}, 0x10, r4, r1, 0x7, &(0x7f0000000680)=[r1], &(0x7f00000006c0)=[{0x3, 0x4, 0x9, 0xc}, {0x0, 0x5, 0x8, 0xc}, {0x2, 0x4, 0x3, 0x4}, {0x4, 0x4, 0x1, 0x1}, {0x4, 0x5, 0x10, 0xc}, {0x5, 0x2, 0xb, 0x9}, {0x5, 0x1, 0x6}]}, 0x94) r5 = socket$inet_mptcp(0x2, 0x1, 0x106) listen(r5, 0x20) ioctl$sock_SIOCETHTOOL(r5, 0x8946, &(0x7f0000000240)={'erspan0\x00', &(0x7f0000000040)=@ethtool_perm_addr={0x20, 0x2a, "e3886dd6baefc6196c745e8885bbd5a37976a0f6a351a1d780eb1568508a5d7849e4d0f51f753be08102"}}) sendmsg$RDMA_NLDEV_CMD_GET(r2, &(0x7f0000000200)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x1000}, 0xc, &(0x7f00000001c0)={&(0x7f0000000140)={0x50, 0x1401, 0x400, 0x70bd27, 0x25dfdbff, "", [@RDMA_NLDEV_ATTR_DEV_INDEX={0x8}, @RDMA_NLDEV_ATTR_DEV_INDEX={0x8, 0x1, 0x1}, @RDMA_NLDEV_ATTR_DEV_INDEX={0x8, 0x1, 0x2}, @RDMA_NLDEV_ATTR_DEV_INDEX={0x8, 0x1, 0x1}, @RDMA_NLDEV_ATTR_DEV_INDEX={0x8}, @RDMA_NLDEV_ATTR_DEV_INDEX={0x8}, @RDMA_NLDEV_ATTR_DEV_INDEX={0x8}, @RDMA_NLDEV_ATTR_DEV_INDEX={0x8}]}, 0x50}, 0x1, 0x0, 0x0, 0x2400c041}, 0x40) 1m41.250242688s ago: executing program 2 (id=2527): r0 = socket(0x15, 0x5, 0x0) mmap(&(0x7f0000000000/0xfbe000)=nil, 0xfbe000, 0x2, 0x31, 0xffffffffffffffff, 0x0) r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='memory.events\x00', 0x275a, 0x0) r2 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000140)='memory.events\x00', 0x7a05, 0x1700) write$cgroup_int(r2, &(0x7f0000000200), 0x806000) mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x2000001, 0x12, r1, 0x0) getsockopt(r0, 0x200000000114, 0x2710, &(0x7f0000c35fff)=""/1, &(0x7f0000000000)=0xf002) mmap$xdp(&(0x7f0000800000/0x800000)=nil, 0x800000, 0x4000002, 0x6e073, 0xffffffffffffffff, 0x100000000) ioctl$sock_SIOCSIFVLAN_SET_VLAN_EGRESS_PRIORITY_CMD(r2, 0x8983, &(0x7f0000000040)={0x3, 'veth0\x00', {0xe}, 0x8}) 1m40.571752944s ago: executing program 2 (id=2536): r0 = socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$tipc2(&(0x7f0000000400), 0xffffffffffffffff) (async) r1 = syz_genetlink_get_family_id$tipc2(&(0x7f0000000400), 0xffffffffffffffff) sendmsg$TIPC_NL_BEARER_SET(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000180)=ANY=[@ANYBLOB='4\x00\x00\x00', @ANYRES16=r1, @ANYBLOB="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"], 0x34}, 0x1, 0x0, 0x0, 0x48c05}, 0x4040194) 1m40.460693127s ago: executing program 2 (id=2538): mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000)='./cgroup.cpu/syz1\x00', 0x1ff) (async) mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000)='./cgroup.cpu/syz1\x00', 0x1ff) openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000080)='./cgroup.net/syz0\x00', 0x200002, 0x0) (async) r0 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000080)='./cgroup.net/syz0\x00', 0x200002, 0x0) r1 = openat$cgroup_procs(r0, &(0x7f0000000200)='cgroup.procs\x00', 0x2, 0x0) r2 = socket$nl_rdma(0x10, 0x3, 0x14) sendmsg$RDMA_NLDEV_CMD_RES_CQ_GET(r2, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000001600)={&(0x7f0000000040)={0x20, 0x1418, 0x1, 0x0, 0x0, "", [@RDMA_NLDEV_ATTR_DEV_INDEX={0x8, 0x1, 0x1}, @RDMA_NLDEV_ATTR_PORT_INDEX={0x8, 0x3, 0x10}]}, 0x20}, 0x1, 0x0, 0x0, 0x200040c0}, 0x90) write$cgroup_pid(r1, &(0x7f00000000c0), 0x12) pipe(&(0x7f0000000840)) (async) pipe(&(0x7f0000000840)={0xffffffffffffffff, 0xffffffffffffffff}) r5 = socket$xdp(0x2c, 0x3, 0x0) splice(r3, &(0x7f0000001280)=0x8c, r5, 0x0, 0x100000001, 0xa) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000001300)={r3, 0x0, 0x1a, 0x51, &(0x7f0000000040)="5b7142b0ecd64a67c0719bb8c21bfb699d5c518cf65d1f677488", &(0x7f0000000100)=""/81, 0x7fff, 0x0, 0x1000, 0xb9, &(0x7f0000000240)="e017a4bf4bad8178b816d891e2207a2d05e9b8d9d1f8e9e8fa53fee13a2065d9549de9626ce5dfa2dd17cf8896e9be737739c6d96290143d8ac23b3cdb33429ae722992e9e2d35478ae1d08baf306b0a831ea5d3d9160dda3740870bf2d262c34d8fcc920aecbf40a6eade505b8b73b2826f94026d5cef77c1877bd31a8068b7119773de96fab56ebe0c89217f08e1788766e18e1ad3e86e6eb824c05d11a7ecc454e18dd79ce563ff704c028c44fff6d1b50fbd94d94e374a8d5e95a8f5fba967bf3ef27b868001466c1d393b2336b6f9f87b12e342b5b214cba7ee1b26b032f71877fcce589afb557c0afc27846bdea90807a4e8fc0e7044a630225942ddcf6316d7aa47f0e2a48ff9bed95ed826a448f6cd620236607e7585c8d8d7d97152d0c8d1bdca4d300fb767a3fc6483807a42be1a7ce4d8e0f87fedee9a4321d9db3117b1198b265a3d8ff6e1ac4621a64211ef3a5b498b118c3fa9eb47648a3c2bb61309a3dd9deea9082e7f44c27cb5464baeb02553281bd202c597136edfd5a0c52f840ffc89d1de534f493e07dfe7dc341801ff0d2d98c92b5151c2d3859dc8477364ee4278e477e58d763f753cfc68629e9d4b17e72f67ac577a635b6919c08e55a74a184b08d4a7f443665dd01d8b7b169f6dcb47a967465fed09a04f4d978053a39e1421324262c6951ff1170439200ca3a9399d3191336c4d5b64a8b6f907f15b13ea220405b17a1d1f0bc209b4d38065b9608e95016c53953c838b88c84e161428cd2ba6be75941677c6381d83295a71f4228b82c22a13d9e5ad515acbe1022fb634a7f3dc611d4a3f263a7ef842a69f6c2ddd14f99955983d02f4f78659b6ae8608cb03caa3183bcd67dfb842146fedda9bc786e8fc070fb964285509e434111d0a33cbf9ead24e2dfc2d534dda8b08e69f11c65ba08e8b24724a7acfffce469f2c427523aafbdd00f33f9021e6ed463d054f521cb76c996812d7004af82f30a837d627d5528ba7d5efcf1b9c30235815a708c2c95c22c75ee6c5872f23eef4356780b66774d0806c1282c7d4fe61e1be72fc90a0fa8786f3309804c98e01997a451e0131017f6fda9f639f88af17aff0ed385a4f930f10c515076b70741272e040e190db6d8a8dd060b94281c1c928f86a83ddba891c83319d776a159ca1573f4dbd87d83f3410016a182f04d4e8a717b342173883923fa3820409e20f1951e75d0f82a4f2572ff71628993f7d2718b0bc694a794f6bf013a6d931880ae62db728ccd63e50a003733de5a297c7feb0f5f5ea2b4ae7d86d914fd60984648ba5930dfa4e5652823bd246198c8cbe3a29902a3ecfb4cd9643418b306b4634ef9123dbf3f95b4b36b15be4c81d4bf9a95484d052a9299be99e16b5c56fe0cbb532549e79e61618a561cf3dcea1bc4724ed0163ff49e1b8c59254f2b04a0f47624f23365774752e71c7fc2f2d0166672b4cb1617486ae887be3cb43b9242ddd5762c83bf50d0143d7766e953392e687137f3d28e948d73b5a932d1fad51c2d465683d1a9cc540811f3c7449a1b08b223f4a91dc7e4eba458c8f74aa211237f52ffc913ab847c8b3a0b24b668bb9dd6275d3b276f210eef88894b2839ef1e756924fe5dc6327c00d65e2b64bc45d5be37bda5043ab8e00522a86b0c497b1839af7b5e59de9c78d67311893cccece4c2b04f7d27122f3e8acebbf3dc73da0e6426dc0325b2e0972cd0863aa2144727fb622ca2ceb62dcf6625af016833ad1017f0ac75fb89b4b93fcea169b4408124a6cd49cd26665d487a5a4cad319b89da08a8dc31a44d823f4dd95c6869482d131fd8ea0547389732ce2c8d9dad33077fa9598d48387894ad8393050d29a5e555551356d09d0febf6a240b355d331c62b5d57b49e7bedf50bca7bcc7a5b0e7824f23b524da39aa3dc0c807126d0d4e6b3e8cbcba90b0deaf4f39b4672fd849a9c24fa520eaca9507dbd8c365c752d1fc2defd456139306cd7d788558f46bc520b3b17f8bba69ba1eb1dd9197802db6daf9fc3bba280dca83ce35632bf0c9f49b856c410f6927b4214a1fa6d49a98d5b0dd657cec54e1f3c6e53fdbe2d566607d1e0e5a1d7d9ba6a758debd1c0a8353cd7c65e4daf2f9c2a12c9666cd2dfc26d199003000bc49e4e6326c697b66714d8d77d51268a9ccb4bc270ae07711eca6445cdbb41eee59138df08a20d751b6ffc905208eb17c486ce5bf639323bea2f17b71a3ea1da4d630b2e6c1d84705970a3f210a838a0c83b714d81085da722bd5d9a9d9c37dade707c109813a10ba55faf7cab273d95a31ae206c319003429a0fb4d36ad96d1c05368c38ca1c80aae9fc778619b16d5bdfd8964ab24e31fbfbe5b883416f127efddbdd09d80cb378a2bd87f4191abca6562ffb9fd11905e122de42fc3947cc97a65c84c85bc5d7d512db2c91b569d349216f7dd4ead1f23b2651b31352392f6247f2e2be6dd38e66745847d3b05e40fae0c366b5bec17468cfe1aeb0f840341d9d87c3f3571c1692c5adaa6b91b6159da610714d6485fc48344099b87ccde4d9ccbf9d6812ca1d3e4e8c8c86c99be7791c62855af9eecbf995287f8027ebbb9ddf2462471953aaa7f874f3fa7b6a49d64022c4aed0d8748b0eaa55acf6a756f071583fb97cda59f42bc97664379dddc1860afc9e9f48c0a53c262bf45853c84ce4a5da03340b6ad77212094a6b3e5cf4a5500fc6691bef1b093f51c8bc87bb3d5a9f42bb55e7ab65185d9a8dff8b56d05e4d9885c59fb26360250dabaa3df4f55194efc3a6e386132f8d1cceb9f4d77c7556abbe7dc2f5b01fbb9e7b36d5539dde284a56985099440c227fa2e7a84cc26915705a44c6c8fa2c940bf9533c18aab4fe7543465641a21fa9daabecb36842e82156f856820ce087603316ada01f3c52c85b91f43920951de41eff356822c6cc92a5dc44f5a0839eccaa9ae1e718831fc4bb631815f94f4c62a5e46401deb45f8051f8aee781a6cdca0df42a7b2793ba275530184c3ee6d99b222abe5e5022a52d7f4a99f4ec469a6f255119558c36d513fa87bf779976a4062c4c820ad010b9c9643d9658ca0cc9ed83ad3489e333255836d19eb021872648605c4c46933ef56e775241305ad73af10674507d383ed81f571abfd65a085e57efbf1f849826a371002053aa262123e36086a72610dcb3028e76dafd6ddeac9642b72ca33133767573fca4c94b9429c4a6c012fa274a9e471e4867f73f6bb7b48925130fe26fd9af9e465c4c37648061a613f2b84a0f9e6de9b1be2e581fbcb3f2e88080ea41accf9c4563e67446e6d1f7703864ca69b8ae5113b0d25b14dce6a05bf822e1f946867979248d7dc830fb139d25991f7c3c2273a814c579465378369faa3f18cea42b74b9b61594732672549ef7a3371ce242969114b7323bd327f6efec00cfa8995a6ef3768a702f9f238654383ea7af351b117e914100c281bce8fe187d5f2455e90707a9123c2f317bf55703a33605963427f42d9a2585a0b0553e112e3fbe49d4bdf7627f7b962f8a4c4713e7d17ccb7e74342cbd8298332d2eccc5041bb62dc2c8f892ca18761dfd5fff3fe8e18bd3b830c9e4502e63f2c451a64b69ca859836cce3e8195ba090c45f346208043303c873452ae36067f19d305f07c935c0654a2b6674b4de77da5a2e28bed41ec86af7253495fc2b80696573df198527347e280996da79cc88a9e7dff39811cc96f7bcc9c0d066309c710aa6ff508ddb089d921bca2b21a500a7868ee33fca7c6b96ffbd69f2d6aab25744728a061a6904af881fdb87b53bd1077ec2d8d60583ef6d54be87096fd9bd924408eb5616f2062f8614bf6512e7ce8d8fb1137a3f10194baa1a1f54e8f916ca54a5b3b554c5dc32157fc1e81ae1c0f5c6026e939d6514d2445c7d6efcf61f9d5bd7cf52e3f88a4630bb0b8cf6ca4c86b7da6255a838410f639367a9b3513ebf7e59ac45d226d6fa4a0b72fa3e276955f838a22383a7a2a5ef518bb94221b9f87f847eb8fb2ea8a503e9c6ef5004834b5224d78618a6e8c2f4c00663e1928a0e1d125bccf008943eddf4cafee19155450f2685d941cfc57b9c71708e19e4843c320cf3027a80a5459503250c08cab0fd171e98b89b9c79758644d9f8834061b3996f0f64290b293a3244204f661c90834fb5abeed18322b2019bd0ade3ca17b7a8d9bbfab7feca75e7cee31486370ab8a6e22e8476922e29a32f2984df593b46c32e5b53930db545c063d134e95b1f881ff29d56ed71a81ec9a793781b55b4e7ebb5ef6f6346fe6f4038d207df2b954324b00f0dfa922da657ae4c4c8cb94c086fb6f2e0b5cc8d2b176b3d79e5e383b9b4d55c4f7cd7bd0b223f390c1fc4c819aa374ad06342f07762e6b30b34d9514444c797668977fa261a38158472e938b0791ee9dca1ced3aa8bec53d07c57b0886e1c5143ad7cdb4d6fa7d81b2d44831997b572eea3c767fc47805a8ae9b975489b676ffb07ae836db9da2e096d6fbc4e2d772562ed5c02c4a1ecb88dd7fb1bbce2c22ee383f275206067da1d7be685f6f72fcf301605014bbc987549796b73ff979b72ccc64df6873ea79e4a4422a9155fa533bc5f7e30c1446d5a4a29df00c2d4a76d26d0fea4b4022955a7df9bb364fba9f9b7c0f120303da42f48b4ec5c32aac38bf4f252b4522dc84141e19dbeda4c0f07260001c1b4ba16145f345a46dbba833132f1cf18384536bf2672fcaed75f678ab114580ad38ae32753eddfb98f1c19cae835771435d3e055b0025476ad1b141a7a5e13be2ae226c40c4fbe6ff08adb749214e3de373ef2950622ba162ee21a62246a84762559e1a11743969a7c5239d9f596466c574dd3399caca3b1f4cd1a1f6a29b05486577fca7e0df0ba0e7205fd3e09d51ff684a8509920620a39ce3d8e1eeb183053142b66bbaed02c951c7d081000db819ebd2d268f2efea7a60c8a9eed4c6b938c8a64b4a614f520c133f75dcf59d9f4b6051e66de8b8b939a31e40c9732f939d7f92378bcc36f1f0319a698ca3be3a422cb0e521213cba4040c65bd43f3bdc89b2111ddc779ec5564bc7b947db92e2a65e3e39bf3b86fa00a0915d6c440a614d89b176ba8819284cdc9fdbe7822bd77d47b1e5c43a8a2c7a5450b882e2f34e6556da6e734db97989a5d2b22140d8cb915d92e7351c59bc7dfa67dbc2a5fa20ef5a27b6c7be9a574cb043f69defb2790996493eec1db0cb045b39d093c3887bdcf3e01df6e76fde7f6bc6580a8e224d76ebe6c043d6846a1332d5ce29f0cdc80aae2d879ccf1d0eb785520803c9ac6669ffaec46930031eac34b8e6cacd768d7c91e17b70f48a346430d7b86a59bd0d94d67b86d2116d0444e38595a4b2b5b9d96a3bdac3ddaa747765c5fc78f89a819993ed440f4a349661732e8d7aed03d2e60ba4158cc7d86ca3ba07e318491e9440643c05b22ea2201b509f037f3fce9ef6fd23e2ec5d3b93175b2773ca7c3e45a1701f1be4a4435f68076c3b57f6943edb578aa67102f05d47168d0007b80e387141daee7c9d19a72e5aa65512215cf41742ced8da7ac0c768162d7afadf977da542c62a1df77987dd4338ff07e3705fb1b7d8ce7dca0949bcc5e7e853fb44cbc91af93b1e2c2ecaa020ad6e0dfbca04eb994837954fbd8362c0fa2eef682eb14bf9c78de9b8707fecd92b844ebc011ecbf809c0389299aae3dfc248403f343bf249c58b364b2fa98145d2de6b055f05730cc31377b12d0dfb753369763214a51223ff457cda0e5e016b3ea7e", &(0x7f0000001240)="fb2dc5a58fefc4cfde83953bf8d78952dbeb8de1d086ca252dd6c63e6b7eef2475cf6bf76670180be434ad67bf90cdf19ff58d391cb9506753635abe0e6ea0fcbb543a7aad82ba643910260f8ef1620d65b9c3cabd7adcd30ae0d62614f338487fa826fa7661b527fe2f603ee20b5040342557c7e046164d168097399cef540e50756b980b2371fc6546d2f107123baed97639d9cf8f7e6839e0d7e7acb5739ba1293797c88d795b87082d2cebed6c76b528e808d53eefc3b7", 0x1}, 0x50) r6 = openat$cgroup_ro(r4, &(0x7f0000000180)='blkio.bfq.sectors\x00', 0x275a, 0x0) sendmmsg$inet6(0xffffffffffffffff, &(0x7f00000056c0)=[{{0x0, 0x0, 0x0, 0x0, &(0x7f0000001dc0)=[@dstopts={{0x18, 0x29, 0x37, {0x612a124f5da523db}}}], 0x18}}], 0x1, 0x20040000) write$cgroup_subtree(r6, &(0x7f0000000000)=ANY=[], 0x3261e) (async) write$cgroup_subtree(r6, &(0x7f0000000000)=ANY=[], 0x3261e) mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x9, 0x13, r6, 0x0) 1m25.088547646s ago: executing program 32 (id=2538): mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000)='./cgroup.cpu/syz1\x00', 0x1ff) (async) mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000)='./cgroup.cpu/syz1\x00', 0x1ff) openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000080)='./cgroup.net/syz0\x00', 0x200002, 0x0) (async) r0 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000080)='./cgroup.net/syz0\x00', 0x200002, 0x0) r1 = openat$cgroup_procs(r0, &(0x7f0000000200)='cgroup.procs\x00', 0x2, 0x0) r2 = socket$nl_rdma(0x10, 0x3, 0x14) sendmsg$RDMA_NLDEV_CMD_RES_CQ_GET(r2, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000001600)={&(0x7f0000000040)={0x20, 0x1418, 0x1, 0x0, 0x0, "", [@RDMA_NLDEV_ATTR_DEV_INDEX={0x8, 0x1, 0x1}, @RDMA_NLDEV_ATTR_PORT_INDEX={0x8, 0x3, 0x10}]}, 0x20}, 0x1, 0x0, 0x0, 0x200040c0}, 0x90) write$cgroup_pid(r1, &(0x7f00000000c0), 0x12) pipe(&(0x7f0000000840)) (async) pipe(&(0x7f0000000840)={0xffffffffffffffff, 0xffffffffffffffff}) r5 = socket$xdp(0x2c, 0x3, 0x0) splice(r3, &(0x7f0000001280)=0x8c, r5, 0x0, 0x100000001, 0xa) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000001300)={r3, 0x0, 0x1a, 0x51, &(0x7f0000000040)="5b7142b0ecd64a67c0719bb8c21bfb699d5c518cf65d1f677488", &(0x7f0000000100)=""/81, 0x7fff, 0x0, 0x1000, 0xb9, &(0x7f0000000240)="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", &(0x7f0000001240)="fb2dc5a58fefc4cfde83953bf8d78952dbeb8de1d086ca252dd6c63e6b7eef2475cf6bf76670180be434ad67bf90cdf19ff58d391cb9506753635abe0e6ea0fcbb543a7aad82ba643910260f8ef1620d65b9c3cabd7adcd30ae0d62614f338487fa826fa7661b527fe2f603ee20b5040342557c7e046164d168097399cef540e50756b980b2371fc6546d2f107123baed97639d9cf8f7e6839e0d7e7acb5739ba1293797c88d795b87082d2cebed6c76b528e808d53eefc3b7", 0x1}, 0x50) r6 = openat$cgroup_ro(r4, &(0x7f0000000180)='blkio.bfq.sectors\x00', 0x275a, 0x0) sendmmsg$inet6(0xffffffffffffffff, &(0x7f00000056c0)=[{{0x0, 0x0, 0x0, 0x0, &(0x7f0000001dc0)=[@dstopts={{0x18, 0x29, 0x37, {0x612a124f5da523db}}}], 0x18}}], 0x1, 0x20040000) write$cgroup_subtree(r6, &(0x7f0000000000)=ANY=[], 0x3261e) (async) write$cgroup_subtree(r6, &(0x7f0000000000)=ANY=[], 0x3261e) mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x9, 0x13, r6, 0x0) 2.223098821s ago: executing program 5 (id=3347): r0 = socket$alg(0x26, 0x5, 0x0) r1 = socket$inet(0x2, 0x1, 0x0) setsockopt$SO_TIMESTAMPING(r1, 0x1, 0x4a, &(0x7f00000000c0)=0x1810, 0x4) bind$alg(r0, &(0x7f00000003c0)={0x26, 'skcipher\x00', 0x0, 0x0, 'xts(serpent)\x00'}, 0x58) r2 = bpf$OBJ_GET_MAP(0x7, &(0x7f0000000080)=@o_path={&(0x7f0000000040)='./file0\x00', 0x0, 0x4008, r0}, 0x18) r3 = socket(0x10, 0x3, 0x0) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000240)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$sock_SIOCGIFINDEX(r4, 0x8933, &(0x7f0000000000)={'lo\x00', 0x0}) sendmsg$nl_route_sched(r3, &(0x7f0000000040)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f00000003c0)=@newqdisc={0x3c, 0x24, 0xd0f, 0x70bd2b, 0x0, {0x60, 0x0, 0x0, r5, {0x0, 0xfff8}, {0xffff, 0xffff}, {0xa, 0xfff1}}, [@qdisc_kind_options=@q_gred={{0x9}, {0x4}}, @TCA_EGRESS_BLOCK={0x8}]}, 0x3c}, 0x1, 0x0, 0x0, 0x404c044}, 0x40) pipe(&(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) pipe(&(0x7f0000000100)={0xffffffffffffffff}) tee(r7, r6, 0xffffffffffffffff, 0x2) bpf$MAP_CREATE(0x0, &(0x7f00000000c0)=@base={0x1f, 0x5, 0x3, 0xbe, 0x2000, r2, 0x1, '\x00', r5, r7, 0x3, 0x1, 0x1}, 0x50) setsockopt$ALG_SET_KEY(r0, 0x117, 0x1, 0x0, 0x0) r8 = accept4(r0, 0x0, 0x0, 0x80000) sendmsg$alg(r8, &(0x7f0000000380)={0x0, 0x0, 0x0, 0x0, &(0x7f0000000700)=[@op={0x18, 0x117, 0x3, 0x1}], 0x18, 0x80}, 0x4004080) r9 = socket$packet(0x11, 0x3, 0x300) ioctl$ifreq_SIOCGIFINDEX_batadv_mesh(r9, 0x8933, &(0x7f00000001c0)={'batadv0\x00', 0x0}) sendto$packet(r9, &(0x7f0000000540)="f7425309395156fdf9effe26147e", 0xe, 0x4008015, &(0x7f00000000c0)={0x11, 0xe5, r10, 0x1, 0x7}, 0x14) syz_genetlink_get_family_id$batadv(&(0x7f0000000180), r8) bind$bt_hci(r8, &(0x7f0000000000)={0x1f, 0x0, 0x1}, 0x6) sendmsg$NL80211_CMD_UPDATE_OWE_INFO(r8, &(0x7f0000000d40)={0x0, 0x0, &(0x7f0000000d00)={&(0x7f0000000a40)={0x104, 0x0, 0x2, 0x70bd26, 0x25dfdbfc, {{}, {@val={0x8}, @val={0xc, 0x99, {0x0, 0x14}}}}, [@NL80211_ATTR_IE={0xda, 0x2a, [@rann={0x7e, 0x15, {{0x1, 0x27}, 0x81, 0xe, @device_a, 0x6, 0x9}}, @mesh_chsw={0x76, 0x6, {0x5f, 0x91, 0x20, 0x3}}, @perr={0x84, 0xb5, {0xf7, 0xb, [{{0x0, 0x1}, @broadcast, 0x8001, @value, 0x17}, {{}, @device_b, 0x0, @void, 0x2f}, {{0x0, 0x1}, @device_b, 0x6, @value, 0x35}, {{}, @device_a, 0x9, @void, 0x16}, {{0x0, 0x1}, @device_b, 0x2ce, @value=@device_b, 0x42}, {{}, @device_b, 0x8000, @void, 0xc}, {{}, @device_b, 0x75, @void, 0x2c}, {{}, @broadcast, 0x1, @void, 0x22}, {{0x0, 0x1}, @device_a, 0x3, @value=@device_b, 0x3b}, {{0x0, 0x1}, @device_b, 0x3, @value=@broadcast, 0x24}, {{0x0, 0x1}, @device_a, 0x5, @value=@device_b, 0x90}]}}]}]}, 0x104}, 0x1, 0x0, 0x0, 0xc004050}, 0x8000) 1.785227336s ago: executing program 4 (id=3353): r0 = socket$xdp(0x2c, 0x3, 0x0) setsockopt$XDP_UMEM_REG(r0, 0x11b, 0x4, &(0x7f00000000c0)={&(0x7f0000000000)=""/5, 0x200000, 0x1000}, 0x20) r1 = socket$inet6_mptcp(0xa, 0x1, 0x106) setsockopt$inet6_tcp_int(r1, 0x6, 0x10, 0x0, 0x0) r2 = syz_init_net_socket$bt_l2cap(0x1f, 0x3, 0x3) ioctl$FS_IOC_GETFSLABEL(r2, 0x400452c9, &(0x7f0000000100)) socketpair$unix(0x1, 0x5, 0x0, &(0x7f00000004c0)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$sock_SIOCGIFINDEX(r3, 0x8933, &(0x7f0000000000)={'sit0\x00', 0x0}) setsockopt$XDP_TX_RING(r0, 0x11b, 0x3, &(0x7f00000001c0)=0x2, 0x4) setsockopt$XDP_UMEM_COMPLETION_RING(r0, 0x11b, 0x6, &(0x7f0000000180)=0x20, 0x4) setsockopt$XDP_UMEM_FILL_RING(r0, 0x11b, 0x5, &(0x7f0000000240)=0x4000, 0x4) bind$xdp(r0, &(0x7f0000000100)={0x2c, 0x0, r4}, 0x10) bind$xdp(r0, &(0x7f0000000040)={0x2c, 0x2, r4, 0x7, r0}, 0x10) r5 = bpf$PROG_LOAD(0x5, &(0x7f0000000500)={0x12, 0x8, &(0x7f0000000080)=@raw=[@exit, @cb_func={0x18, 0x8, 0x4, 0x0, 0xfffffffffffffffa}, @initr0={0x18, 0x0, 0x0, 0x0, 0xff, 0x0, 0x0, 0x0, 0x2}, @kfunc={0x85, 0x0, 0x2, 0x0, 0x3}, @map_fd={0x18, 0x2, 0x1, 0x0, 0x1}], &(0x7f0000000200)='GPL\x00', 0x7, 0x64, &(0x7f0000000280)=""/100, 0x0, 0x0, '\x00', 0x0, @cgroup_sock_addr=0xa, 0xffffffffffffffff, 0x8, &(0x7f0000000300)={0x0, 0x1}, 0x8, 0x10, &(0x7f0000000340)={0x0, 0x7, 0x1, 0xfffff801}, 0x10, 0x0, 0xffffffffffffffff, 0x9, 0x0, &(0x7f0000000380)=[{0x5, 0x2, 0x1, 0x6}, {0x1, 0x1, 0x6, 0x9}, {0x3, 0x2, 0x2}, {0x4, 0x5, 0x6, 0xa}, {0x0, 0x4, 0xd, 0x2}, {0x2, 0x3, 0xb, 0x6}, {0x5, 0x2, 0x7, 0x1}, {0x1, 0x1, 0x5}, {0x2, 0x4, 0x10, 0xc}], 0x10, 0x3}, 0x94) bpf$PROG_LOAD(0x5, &(0x7f00000017c0)={0xe, 0xe, &(0x7f0000001880)=ANY=[@ANYBLOB="b700000081000000bfa300000000000007030000f1feffff720af0fff8ffffff71a4f0ff0000000071108600000000001d400500000000002604000001ed00000f030000000000007c440000000000006b0a00fe000000007203000000000006b5000000000000009500000000000000023bc065b58111c6dfa041b63af4a3912435f18564a710aad58db6a693002e7f3be361917adef6ee1c8a2a4f8ef1e50becb19bc461e91a7168c50000000190f32050e436fe27"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @sk_skb, 0xffffffffffffffff, 0x8, &(0x7f0000000000)={0x0, 0x1}, 0x8, 0x10, 0x0, 0x0, 0x0, r5}, 0x94) 1.534930182s ago: executing program 4 (id=3357): r0 = socket(0xa, 0x3, 0x3a) setsockopt$MRT6_DEL_MIF(r0, 0x29, 0xc8, 0x0, 0xc000000) r1 = openat$tun(0xffffffffffffff9c, &(0x7f0000000140), 0x40841, 0x0) r2 = socket(0x11, 0x800000003, 0x0) setsockopt$packet_fanout(r2, 0x107, 0x12, &(0x7f0000000200)={0x3, 0x4}, 0x4) ioctl$TUNSETIFF(r1, 0x400454ca, &(0x7f00000000c0)={'syzkaller1\x00', 0x6bf1c2d5adba8c32}) r3 = socket$kcm(0x2, 0xa, 0x2) ioctl$SIOCSIFHWADDR(r3, 0x8914, &(0x7f0000000180)={'syzkaller1\x00', @link_local}) write$tun(r1, &(0x7f00000003c0)=ANY=[@ANYBLOB="04000000ffffffffffffaaaaaaaaaaaa8100000086dd60b79a5600442900fe8000000000000000000000000000aaff03"], 0x82) r4 = socket(0x10, 0x3, 0x0) sendto$inet6(r4, &(0x7f0000000080)="7800000018002507b9409b14ffff00000204be04020506050e020409430009003f0000000a0000000d0085a168d0bf46d32345653600648d0a0012000200000049935ade4a460c89b6ec0cff3959547f509058ba86c902000000004a32000400160005000a0000000000e000e218d1ddf66ed538f2523250", 0x78, 0x0, 0x0, 0x0) r5 = socket$inet_sctp(0x2, 0x1, 0x84) r6 = socket$inet6_icmp(0xa, 0x2, 0x3a) ioctl$sock_inet6_SIOCDELRT(r6, 0x890c, &(0x7f0000000500)={@ipv4={'\x00', '\xff\xff', @multicast2}, @remote, @private0={0xfc, 0x0, '\x00', 0x1}, 0x2d3, 0x66, 0x71c1, 0x0, 0x7ff, 0x400000a0}) getsockopt$inet_sctp6_SCTP_STREAM_SCHEDULER_VALUE(r4, 0x84, 0x7c, &(0x7f0000000000)={0x0, 0xfbff, 0x2}, &(0x7f0000000040)=0x8) getsockopt$inet_sctp_SCTP_RTOINFO(r5, 0x84, 0x0, &(0x7f0000000100)={r7, 0xc545, 0xd, 0x800}, &(0x7f0000000140)=0x10) 1.381753294s ago: executing program 1 (id=3359): bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0xd, 0x4, &(0x7f0000000000)=ANY=[@ANYBLOB="180000000000000000000000000000007919b800000000009500000000000000"], &(0x7f0000000080)='syzkaller\x00', 0x4, 0x98, &(0x7f00000000c0)=""/152}, 0x80) r0 = accept4$inet6(0xffffffffffffffff, 0x0, &(0x7f0000000040), 0x0) setsockopt$inet6_IPV6_FLOWLABEL_MGR(r0, 0x29, 0x20, &(0x7f0000000180)={@private2, 0xfffffff7, 0x1, 0xff, 0x0, 0xf, 0x4}, 0x20) 1.327268376s ago: executing program 3 (id=3360): r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000000), 0x40241, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000200)={'syzkaller1\x00', 0xc201}) (async) r1 = socket$inet_udp(0x2, 0x2, 0x0) (async) r2 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r2, &(0x7f0000000040)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000100)=ANY=[@ANYRESHEX=r0, @ANYRES32=0x0, @ANYBLOB="00006d74daadfd14000060000200580012800837ebff5900d559664cfccacc7b000100677470004c00028008000100fd5b131223329ad413ff8943e16cd1d7b69f3534a436f0b4f1aba86531a14766f507000000d6b22f45cd6642aba7e59b031d0c43d4edd3e64bc2151f4a6948a32b6c1f4afd1dbe5884390ea96afc066b41321b75", @ANYRES32=r1], 0x78}, 0x1, 0x0, 0x0, 0x24008044}, 0x0) bind$inet(r1, &(0x7f0000000040)={0x2, 0x4e20, @empty}, 0x10) (async) r3 = socket$inet(0xa, 0x801, 0x84) connect$inet(r3, &(0x7f0000004cc0)={0x2, 0x0, @remote={0xac, 0x14, 0xffffffffffffffff}}, 0x10) listen(r3, 0x8) (async) r4 = accept4(r3, 0x0, 0x0, 0x0) (async) r5 = socket$l2tp(0x2, 0x2, 0x73) setsockopt$IPT_SO_SET_REPLACE(r5, 0x0, 0x40, &(0x7f0000000440)=@mangle={'mangle\x00', 0x44, 0x6, 0x3c8, 0x98, 0x0, 0x0, 0x260, 0x260, 0x330, 0x330, 0x330, 0x330, 0x330, 0x6, 0x0, {[{{@ip={@multicast1, @dev={0xac, 0x14, 0x14, 0x13}, 0xff, 0xff000000, 'pim6reg1\x00', 'bridge_slave_0\x00', {}, {0xff}, 0x88, 0x3}, 0x0, 0x70, 0x98}, @TTL={0x28, 'TTL\x00', 0x0, {0x1, 0x9}}}, {{@ip={@private=0xa010100, @local, 0x7fffff80, 0x0, 'vcan0\x00', 'veth0_virt_wifi\x00', {}, {0xff}, 0x6, 0x0, 0x5a}, 0x0, 0x70, 0x98}, @ECN={0x28, 'ECN\x00', 0x0, {0x10, 0x0, 0x2}}}, {{@uncond, 0x0, 0x70, 0x98}, @unspec=@CHECKSUM={0x28}}, {{@ip={@private=0xa010102, @initdev={0xac, 0x1e, 0x0, 0x0}, 0x0, 0xffffff00, 'syzkaller0\x00', 'bond0\x00'}, 0x0, 0x70, 0x98}, @unspec=@CHECKSUM={0x28}}, {{@uncond, 0x0, 0x70, 0xd0}, @common=@CLUSTERIP={0x60, 'CLUSTERIP\x00', 0x0, {0x0, @link_local={0x1, 0x80, 0xc2, 0x0, 0x0, 0x3}, 0xff, 0x2, [0x1a, 0x36, 0x1d, 0x1c, 0x23, 0x1e, 0x2c, 0x7, 0x1e, 0x7, 0x2d, 0x37, 0x30, 0x9, 0x3b, 0x16], 0x0, 0x6, 0x2}}}], {{'\x00', 0x0, 0x70, 0x98}, {0x28}}}}, 0x428) (async) setsockopt$inet_sctp6_SCTP_PEER_ADDR_THLDS(r4, 0x84, 0x84, &(0x7f0000000000)={0x0, @in={{0x2, 0x4e20, @empty}}, 0xfffd}, 0x90) (async) r6 = socket$kcm(0x2, 0x3, 0x2) ioctl$SIOCSIFHWADDR(r6, 0x8914, &(0x7f0000000040)={'syzkaller1\x00', @broadcast}) write$tun(r0, &(0x7f0000000280)=ANY=[@ANYBLOB="0800000700000000002b0000014000000000000000011190780a010102ac1414164e204e20001990780202000100000000c1963bf57e73e3279f003af329492831567b749dcddd4079246d2505d4c9a639e644a0694b06e8358b0d66bafab5b02509e7cd3243615ac761e05c498c59fb0c4016190719c1ffdc33b8aea8b73a51235d0434c9d26b4cb2f4334338f9f72081cdb57b484c5e5a0279dc7033da9b218d273bc0f470"], 0x3b) getsockopt$bt_BT_VOICE(r4, 0x112, 0xb, &(0x7f00000001c0)=0x9, &(0x7f0000000240)=0x2) 1.320312827s ago: executing program 0 (id=3361): r0 = socket$netlink(0x10, 0x3, 0xc) bind$netlink(r0, &(0x7f0000514ff4)={0x10, 0x0, 0x0, 0x2ffffffff}, 0xc) setsockopt$netlink_NETLINK_BROADCAST_ERROR(r0, 0x10e, 0x4, &(0x7f0000000140)=0x6, 0x4) setsockopt$sock_int(r0, 0x1, 0x8, &(0x7f0000000200), 0x4) r1 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPCTNL_MSG_CT_NEW(r1, &(0x7f0000000080)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f00000006c0)={0x9c, 0x0, 0x1, 0x401, 0x0, 0x0, {0xa}, [@CTA_TUPLE_ORIG={0x44, 0x1, 0x0, 0x1, [@CTA_TUPLE_IP={0x2c, 0x1, 0x0, 0x1, @ipv6={{0x14, 0x3, @local}, {0x14, 0x4, @mcast1}}}, @CTA_TUPLE_PROTO={0xc, 0x2, 0x0, 0x1, {0x5}}, @CTA_TUPLE_ZONE={0x6, 0x3, 0x1, 0x0, 0x1}]}, @CTA_TUPLE_REPLY={0x3c, 0x2, 0x0, 0x1, [@CTA_TUPLE_IP={0x2c, 0x1, 0x0, 0x1, @ipv6={{0x14, 0x3, @local}, {0x14, 0x4, @local}}}, @CTA_TUPLE_PROTO={0xc, 0x2, 0x0, 0x1, {0x5}}]}, @CTA_TIMEOUT={0x8}]}, 0x9c}}, 0x0) socket$nl_netfilter(0x10, 0x3, 0xc) r2 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPCTNL_MSG_CT_DELETE(r1, &(0x7f0000000300)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000640)={0x14, 0x2, 0x1, 0x5, 0x0, 0x0, {0x2, 0x0, 0x8}}, 0x14}, 0x1, 0x0, 0x0, 0x20044804}, 0x40040) sendmsg$IPCTNL_MSG_CT_GET_DYING(r2, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000100)={&(0x7f00000005c0)={0x14, 0x6, 0x1, 0x301, 0x0, 0x0, {0xa, 0x0, 0x4}}, 0x14}, 0x1, 0x0, 0x0, 0x2404c031}, 0x20000000) r3 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_route(r3, &(0x7f0000000240)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000340)=ANY=[@ANYBLOB="4c00000010001fff0d00"/20, @ANYRES32=0x0, @ANYBLOB="0000000000000000240012800b000100697036746e6c000014000280050009002900000008000100", @ANYRES32, @ANYBLOB="080004"], 0x4c}}, 0x0) 1.246402817s ago: executing program 1 (id=3362): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_CREATE(r0, &(0x7f0000000300)={0x0, 0x0, &(0x7f00000044c0)={&(0x7f0000000340)={0x58, 0x2, 0x6, 0x801, 0x0, 0x0, {0x7, 0x0, 0x9}, [@IPSET_ATTR_DATA={0xc, 0x7, 0x0, 0x1, [@IPSET_ATTR_TIMEOUT={0x8, 0x6, 0x1, 0x0, 0xb}]}, @IPSET_ATTR_FAMILY={0x5, 0x5, 0xa}, @IPSET_ATTR_PROTOCOL={0x5}, @IPSET_ATTR_REVISION={0x5}, @IPSET_ATTR_SETNAME={0x9, 0x2, 'syz2\x00'}, @IPSET_ATTR_TYPENAME={0x11, 0x3, 'hash:net,net\x00'}]}, 0x58}}, 0x0) r1 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, 0x0) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000400)=@delchain={0x3c, 0x64, 0x20, 0xfffffffe, 0x0, {0x0, 0x0, 0x0, 0x0, {0x0, 0xfff3}, {0xfff3, 0xffff}, {0xa, 0x1b}}, [@filter_kind_options=@f_flower={{0xb}, {0xc, 0x2, [@TCA_FLOWER_KEY_ARP_SIP={0x8, 0x39, @loopback}]}}]}, 0x3c}, 0x1, 0x0, 0x0, 0x40054}, 0x4804) r2 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r2, &(0x7f0000000080)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000400)=ANY=[@ANYBLOB="640000001000010429bd700000000000e0000000", @ANYRES32=0x0, @ANYBLOB="00010000316f0600300012800b00010067656e657665000020000280080011"], 0x64}}, 0x20000000) socketpair(0x1, 0x1, 0x0, 0x0) bpf$MAP_CREATE_CONST_STR(0x0, 0x0, 0xffffffffffffffe7) bpf$MAP_CREATE(0x0, 0x0, 0x48) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f00000001c0)={{}, 0x0, 0x0}, 0x20) sendmsg$MPTCP_PM_CMD_GET_ADDR(0xffffffffffffffff, 0x0, 0x0) ioctl$BTRFS_IOC_BALANCE(r1, 0x5000940c, 0x0) 1.19951316s ago: executing program 5 (id=3363): r0 = socket$inet_udp(0x2, 0x2, 0x0) setsockopt$sock_int(r0, 0x1, 0xf, &(0x7f0000000000)=0x100000b3, 0x4) bind$inet(r0, &(0x7f0000000200)={0x2, 0x4e20, @empty}, 0x10) setsockopt$SO_ATTACH_FILTER(r0, 0x1, 0x33, &(0x7f0000000040)={0x1, &(0x7f0000000380)=[{0x6, 0x2, 0xc}]}, 0x10) syz_emit_ethernet(0x3a, &(0x7f0000000240)={@local, @link_local, @void, {@ipv4={0x800, @udp={{0x5, 0x4, 0x0, 0x0, 0x2c, 0x0, 0x0, 0x0, 0x11, 0x0, @empty, @empty}, {0x0, 0x4e20, 0x18, 0x0, @wg=@data={0x4, 0x8, 0x100000000}}}}}}, 0x0) r1 = openat$tun(0xffffffffffffff9c, &(0x7f0000000000), 0x2, 0x0) ioctl$TUNSETIFF(r1, 0x400454ca, &(0x7f0000000200)={'syzkaller1\x00', 0x5001}) r2 = socket$inet_udp(0x2, 0x2, 0x0) ioctl$sock_inet_SIOCSIFFLAGS(r2, 0x8914, &(0x7f0000000200)={'syzkaller1\x00', 0x1}) ioctl$sock_inet_SIOCSIFADDR(r2, 0x8916, &(0x7f0000000200)={'syzkaller1\x00', {0x2, 0x0, @dev={0xac, 0x14, 0x0, 0x1}}}) r3 = socket(0x10, 0x803, 0x0) bpf$PROG_LOAD(0x5, &(0x7f0000000580)={0x10, 0x4, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @sk_msg}, 0x94) r4 = socket$inet6(0xa, 0x800000000000002, 0x0) sendto$inet6(r4, 0x0, 0x0, 0x400ad80, &(0x7f0000000080)={0xa, 0x4c24, 0x78a2, @dev={0xfe, 0x80, '\x00', 0x25}}, 0x1c) sendmmsg$inet6(r4, &(0x7f0000006780)=[{{0x0, 0x0, &(0x7f0000000540)=[{&(0x7f00000001c0)="b3ab706204ee39c9dae21a1718ee351ebc92d2f0d482a863ae5c0b4d768ffe745af2c53a083d9b761b", 0xfff7}], 0x11}, 0xb00}], 0x1, 0x0) r5 = socket$nl_generic(0x10, 0x3, 0x10) r6 = syz_genetlink_get_family_id$devlink(&(0x7f0000002b40), 0xffffffffffffffff) sendmsg$DEVLINK_CMD_SB_TC_POOL_BIND_GET(r5, &(0x7f0000000180)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000200)={0x54, r6, 0x1, 0x70bd25, 0x0, {0x6}, [{{@nsim={{0xe}, {0xf, 0x2, {'netdevsim', 0x0}}}, {0x8, 0x3, 0xfffffffc}}, {0x8, 0x91}, {0x6, 0x16, 0x2}, {0x5}}]}, 0x54}}, 0x0) ioctl$TUNSETIFF(r1, 0x400454ca, &(0x7f0000000080)={'veth0_to_batadv\x00', 0x1}) ioctl$sock_SIOCGIFINDEX(r3, 0x8933, &(0x7f0000000040)={'lo\x00', 0x0}) r8 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r8, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000280)=@ipv6_newaddr={0x3c, 0x14, 0x101, 0x70bd26, 0x25dffbf8, {0xa, 0x3f, 0x78, 0xff, r7}, [@IFA_LOCAL={0x14, 0x2, @loopback}, @IFA_RT_PRIORITY={0x8, 0x9, 0x9}, @IFA_FLAGS={0x8, 0x8, 0x100}]}, 0x3c}, 0x1, 0x0, 0x0, 0x4004051}, 0x0) bind$inet(r2, &(0x7f0000000040)={0x2, 0x4e20, @dev={0xac, 0x14, 0x0, 0x1}}, 0x10) write$tun(r1, &(0x7f0000000900)={@val={0x0, 0x8864}, @val={0x1, 0x5, 0x1c, 0x8, 0x18, 0x6}, @ipv4=@esp={{0x5, 0x4, 0x0, 0xe, 0x609, 0x67, 0x0, 0x5a, 0x32, 0x0, @multicast2, @private=0xa010102}, {0x4d2, 0x6, @cc={0x1, 0x0, 0xd, 0x10000, 0x7, 0x100, 0x20, [@ipv4=@igmp={{0x19, 0x4, 0x1, 0x3a, 0xbf, 0x64, 0x0, 0x4, 0x2, 0x0, @remote, @multicast2, {[@ra={0x94, 0x4}, @lsrr={0x83, 0xb, 0xf3, [@rand_addr=0x64010100, @rand_addr=0x64010101]}, @timestamp_addr={0x44, 0x14, 0x5a, 0x1, 0x2, [{@multicast1, 0x1}, {@empty, 0x8000}]}, @timestamp_prespec={0x44, 0x2c, 0x7c, 0x3, 0x8, [{@multicast1, 0x8000}, {@dev={0xac, 0x14, 0x14, 0x19}, 0x8}, {@empty, 0x8}, {@initdev={0xac, 0x1e, 0x1, 0x0}, 0x4}, {@rand_addr=0x64010100, 0x9}]}]}}, {0x1f, 0x1, 0x0, @empty, "917618b42f17b764227f2e17c34a08ca5e67ba0bbe509b1053dcbd0dcc635a38f4e48b33daddc6410b590948e5a739f953a6766f1ff2c014910e3e7f8e847e8695240ad0e4013ccf7f9ffcef9b59cf538370d6"}}, @ipv6=@icmpv6={0x8, 0x6, "86ea77", 0x249, 0x3a, 0xff, @private1={0xfc, 0x1, '\x00', 0x1}, @local, {[@fragment={0x3c, 0x0, 0x5, 0x1, 0x0, 0x0, 0x65}, @fragment={0x4, 0x0, 0x1, 0x0, 0x0, 0x6, 0x68}, @fragment={0x73, 0x0, 0x9, 0x1, 0x0, 0x5, 0x65}, @hopopts={0x32, 0x15, '\x00', [@calipso={0x7, 0x28, {0x1, 0x8, 0x2, 0xff, [0x1, 0x6, 0x1, 0xfffffffffffffff7]}}, @calipso={0x7, 0x38, {0x666abe74f3df9417, 0xc, 0x8, 0x4, [0x80, 0x81c7, 0x0, 0xffffffffffffffff, 0x3787, 0xfffffffffffffffd]}}, @padn={0x1, 0x1, [0x0]}, @ra={0x5, 0x2, 0x2}, @pad1, @jumbo={0xc2, 0x4, 0x2cb}, @calipso={0x7, 0x38, {0x1, 0xc, 0xe, 0x40, [0xd3, 0x1, 0x5f52, 0x10000, 0x5, 0x1a98]}}]}, @srh={0xff, 0x2, 0x4, 0x1, 0x9, 0x10, 0x3, [@remote]}], @ndisc_ns={0x87, 0x0, 0x0, @private1, [{0x4, 0x17, "26d169a80cb082dfdb328b92c85735eafc7d3aa03a64cb9f8309f3506698331e64f1dc8cb4378d6687b2b9f3e39c45174d3a15ac2e7e8140f3acf2d1b481fb5d1da795c5e519f88e6fe091e1b9c091d0b8e4c68bc9d2e95d24e122813286e21e975a048cbccfe8519a05976c1cfadc856fe1e431420a244f0512b379fbfb99a7ca354c986cc69a1194fc3212fb869b81c4da2b3f6081f0d3597f3cb34736277e2a18a8b136f5863074569b36d4a30a2511c127976b86fe60a6"}, {0x5, 0x12, "6f7c540e64ad13791df4e09bb73d9c2bb92a6b0435792408d7c05c107e74080e2c7350a96dae4c3e9fdb2b62e339c5eda83fe60eb26a0069ff468cb738fa51a7dcafc03097c5464e5701b9f6c96b2456efc4f7b56be4dc3022dbcacee5611cdba5c1d5d06c1cbde23d230c90ddc81d8ddbf5423b7932cf5e209920b531c55cb1e9cf542379e763960edd69812643338a"}]}}}, @ipv6=@tipc_packet={0x9, 0x6, "a3d3c2", 0x1a0, 0x6, 0x0, @private1={0xfc, 0x1, '\x00', 0x1}, @loopback, {[@hopopts={0x0, 0x11, '\x00', [@padn={0x1, 0x6, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0]}, @jumbo={0xc2, 0x4, 0x7}, @enc_lim={0x4, 0x1, 0x4}, @jumbo={0xc2, 0x4, 0x4}, @calipso={0x7, 0x20, {0x0, 0x6, 0x9, 0x1409, [0x80000000, 0x33d0, 0x9]}}, @padn={0x1, 0x7, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0]}, @calipso={0x7, 0x38, {0x2, 0xc, 0x87, 0x100, [0x2, 0x8, 0x8, 0x7, 0x400, 0x9]}}, @hao={0xc9, 0x10, @mcast1}]}, @hopopts={0x2e, 0x9, '\x00', [@generic={0x4, 0x3d, "85c27306e1824e130acfb7a75f512c75739078462e21a84b96b5bc82a21e32378e5e7d147697e3804cdbe43b2466abde2863c9518051d824bfbc004ea5"}, @pad1, @ra={0x5, 0x2, 0x3}, @ra={0x5, 0x2, 0x9}]}, @routing={0x21, 0x2, 0x2, 0xe, 0x0, [@private1]}, @srh={0x0, 0xc, 0x4, 0x6, 0x1, 0xba44bca25043c433, 0x2, [@private1, @private0, @private1={0xfc, 0x1, '\x00', 0x1}, @initdev={0xfe, 0x88, '\x00', 0x1, 0x0}, @initdev={0xfe, 0x88, '\x00', 0x1, 0x0}, @local]}], @payload_mcast={{{{{{0x30, 0x0, 0x1, 0x0, 0x1, 0xb, 0x2, 0x2, 0x5, 0x0, 0x3, 0x5, 0x5, 0x1, 0x2, 0x5, 0x1, 0x4e22, 0x4e22}, 0x1, 0x2}, 0x2, 0x1}, 0x3}}, [0x0, 0x0, 0x0, 0x0]}}}, @ipv4=@udp={{0x21, 0x4, 0x0, 0x0, 0xdb, 0x68, 0x0, 0x1, 0x11, 0x0, @multicast1, @multicast2, {[@ra={0x94, 0x4, 0x1}, @generic={0x88, 0x6, "46dd8e67"}, @cipso={0x86, 0x38, 0x0, [{0x5, 0x2}, {0x2, 0x12, "965a957fb72d348725e3c53410261c7e"}, {0x5, 0x6, "63dc602c"}, {0x0, 0x8, "858827896ceb"}, {0x0, 0xe, "a93a24803a10ad439b9b9796"}, {0x0, 0x2}]}, @generic={0xd, 0x4, "ec92"}, @cipso={0x86, 0x27, 0x0, [{0x5, 0x6, "26f8369c"}, {0x5, 0x5, "371033"}, {0x6, 0x5, "38c273"}, {0x6, 0x7, "4dade7889c"}, {0x5, 0x6, "ea954071"}, {0x2, 0x4, "02dc"}]}]}}, {0x4e21, 0x4e20, 0x57, 0x0, @gue={{0x1, 0x0, 0x2, 0x4, 0x0, @void}, "7a10a9c42dd90f2461dd1d51b8dcfcf2a294e75d62bf6b6b7c19aa8bc1f2e0751117b8ec81a809373a91079eaddee5eec7da17011bc6c820275fdc7a6b497fc093ec858aa262f9d5d9354c"}}}]}}}}, 0x617) 1.199094322s ago: executing program 4 (id=3364): r0 = socket$inet6_sctp(0xa, 0x801, 0x84) sendmmsg$inet6(r0, &(0x7f0000004d40)=[{{&(0x7f0000000000)={0xa, 0x0, 0x0, @private1, 0x2}, 0x1c, &(0x7f00000004c0)=[{&(0x7f0000000040)="18", 0x1}], 0x1}}, {{&(0x7f0000000340)={0xa, 0x4e23, 0x4, @private2, 0x58}, 0x1c, &(0x7f0000000400)=[{&(0x7f0000000380)="998165", 0x3}], 0x1}}], 0x2, 0x0) r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000380)='memory.events\x00', 0x275a, 0x0) r2 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000140)='memory.events\x00', 0x7a05, 0x1700) pwritev(r2, &(0x7f0000000100)=[{&(0x7f0000000000)="8e", 0x1}], 0x1, 0x8001, 0x80) sendfile(r2, r1, 0x0, 0xf03a0005) setsockopt$inet_sctp6_SCTP_AUTH_CHUNK(r1, 0x84, 0x15, &(0x7f00000001c0)={0x7f}, 0x1) shutdown(r0, 0x1) setsockopt(r0, 0x84, 0x83, &(0x7f00000002c0)="1a00000002000000", 0x8) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000680)={0xffffffffffffffff, 0xffffffffffffffff}) setsockopt$sock_attach_bpf(r4, 0x1, 0x4c, &(0x7f0000000000), 0x4) sendmsg$inet(r3, &(0x7f0000000140)={0x0, 0x0, 0x0}, 0x0) recvmsg$unix(r4, &(0x7f0000000080)={0x0, 0x0, 0x0, 0x0, &(0x7f0000000300)=[@rights={{0x14, 0x1, 0x1, [0xffffffffffffffff]}}], 0x18}, 0x2000) ioctl$TUNSETNOCSUM(r5, 0x80087601, 0xfffffffffffffffe) getsockopt$inet_sctp_SCTP_PEER_ADDR_PARAMS(r5, 0x84, 0x9, &(0x7f00000006c0)={0x0, @in={{0x2, 0x4e21, @multicast2}}, 0x4, 0x1ff, 0x200, 0x8, 0x0, 0x4, 0x1}, &(0x7f0000000780)=0x9c) getsockopt$inet_sctp6_SCTP_RESET_STREAMS(0xffffffffffffffff, 0x84, 0x77, &(0x7f0000000100)={r6, 0x64, 0x6, [0x100, 0x2, 0x101, 0x0, 0x2, 0x8001]}, &(0x7f0000000140)=0x14) r7 = socket$inet_sctp(0x2, 0x1, 0x84) setsockopt$IP_VS_SO_SET_ADD(r7, 0x0, 0x482, &(0x7f00000000c0)={0x84, @dev={0xac, 0x14, 0x14, 0x9}, 0x19, 0x3, 'sh\x00', 0x29, 0x10000, 0x10800008}, 0x2c) r8 = socket$kcm(0xa, 0x2, 0x0) r9 = socket$nl_route(0x10, 0x3, 0x0) r10 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r10, &(0x7f0000000080)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f00000000c0)=ANY=[@ANYBLOB="500000001000010400"/20, @ANYRES32=0x0, @ANYBLOB="00000000000000001c0012800b00010067656e65766500000c00028008001100010000001400030067656e65766531"], 0x50}}, 0x0) sendmsg$nl_route(r9, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000040)=@newlink={0x58, 0x10, 0x401, 0xfffffffd, 0x3, {0x0, 0x0, 0x0, 0x0, 0xd126a8577c57125b, 0xc574450d1af3b5bc}, [@IFLA_LINKINFO={0x24, 0x12, 0x0, 0x1, @bridge_slave={{0x11}, {0x9, 0x5, 0x0, 0x1, [@IFLA_BRPORT_MCAST_FLOOD={0x5, 0x1b, 0x1}]}}}, @IFLA_IFNAME={0x14, 0x3, 'bridge_slave_0\x00'}]}, 0xfc56}, 0x1, 0x0, 0x0, 0x20044010}, 0x4040) r11 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r11, &(0x7f000000c2c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f00000000c0)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a28000000000a0101000000005e1affd5020000000900010073797a300000000008000240000000032c000000030a01030000e6ff00000000020000000900010073797a30000000000900030073797a320000000014000000110001"], 0x7c}}, 0x0) r12 = bpf$PROG_LOAD(0x5, &(0x7f0000000080)={0x4, 0xe, &(0x7f0000000880)=ANY=[@ANYBLOB="b702000000000000bfa300000000000007030000f0ffffff7a0af0ff0200000079a4f0ff00000000b706000000000081ad64020000000000450404000100ff0f1704000001130a00b7050000010000006a0af2fe000000008500000044000000b700000000000000950000000000000000e154cd8445974b26c933f7ffffffffe4fbffffff55bb2007ee51050512b5b42128aa090a79507df79f298129daa7a6b2f91af50342115e17392ac627c87881c000006146001e04aeacea799a22a2fa798b5adc43eb27d53319d0ad229e5752548300000000dbc2777df150b7cdd77b85b941092314fd085f028f2ed1a4535550614e09d6378198a6097a670838337af2abd55a87ac0394b2f92ffab7d153d62058d0a413b2173619ccf55520f22c9ca8b6712f3024b7041b1df65b3e1b9bf115646d14ce53d13d0ccacda1ef0900094fa737c28b99938512c816fdcceaede3faedc51d29a47fc813a2ec00f4c7a53ac271d6d7f4ea6bf97f2f33e2ea2e534300bcb3fdc4b4861004eefbda7f54f82a804da4f85db47a4a69bf9bc5fa96ee293fbd165a5a68488e40b030166565a097b1b44b451de736bb6d43db8db03d4b7745fef1d04ec633dee254a6d491b849a5a787e814c4fd21a18986252a70f8f92eb6f0e8c7db4bf23242a1f2c28159f09943b1b0452d1b72183aacf4a84f9130b775dd4e9e3070756f97ad791fa99dac06b57479321a0574fb30ff0000001989328c8ddc20ea011bf5742e0e0d4334db8b20ce3f9f16cb7fc20fb4791ec85823d0c48fb657c29b309c73f0977e7cde65a82b94c461d7962b0d2277a84af326f37f3e2c25a61ec45c3af97a8f17da954aff3fc8c108755f75ca13fb7c8bbd8b6e7dac1aba4b20dc7de058a4dfa7e85a8bdf1d41a2d8bda74d66f47cc180f82c5f573c6d294d3665016ac59dda0fde4745db06753a7ac74a2d32f7528751313694bf5700b20ef0c248ddd3da32396a614cacad4aff2066bb5d4045c958559b7dcb98a6273b8c651e24d9f679e4fbe948dfb4cc4a389469608241730459f0123fd39206000000000000eb55dad46de56ef907b059b90b8aa49afb9a79ae5498f6589880ed6eea7f9c670012be05e7de0940313c5870786554df26236ebced9390cb6941b8375d936a7d2120eca291963eb2d537d8ee4de5c183c960119451c31539b22809e1d7f0cda06a9fa87d64cb77872a2cd8a104e16bb1a2ba9c29faa38c409d32b6b7d6cf13464ca03aff14a9aa4bd9539f5096412b92012e095b84c20243ff98df3347f0e399d1b9f27e3c33269c0e153b28b2d4410572bc45b9d3fa02208d304d455c36300000000022320178b00cc6ed7966130b547dbf8b497af002000000cd1d00000020000000ef19349ee7f31abc11c800000000000000000000000928ee53595a779d243a48cea769470424d28804c04b2c4324ab7f4a5c81921f0128dfd70b438af60b060000000000000056642b49b745f3bf2cf7908b6d7d748308eea09fc361b4735efbf3411718d6ee7aebf9ef679dbfae9fb4a79f8a836804ed3a1079b0282a12043408cd60b687dcff91af19010000000000000000456f7d2a42bd13da202274f20675eb781925441578e93046aaddea8ec4ca37f71c2710a7ea8ae0dc214e1cc275b26adfa892e6de92000000000000000000ddff004cff9ec7ffff35e62f4eeee50e5bafecea4d4134f9d006c8d6883eca5c9c58c9e933119c5009c68c73de2f04f15d005387577f480000ea65559eb00e76e9d0ada201bcbb5c252b28a60ca770663da451790cc36000906d5a9fad98c308e39bd5ffb6151d79c1cee1cd102e3c8e63e9fba05e3633be3f00000015762e5f5a3a0bc33fdbe28a5ffc83f2b485185cc92fe7f791e8f6429309d6adab4b7e508e5bf024ed8f8a005f2bbf96c89739f5cf1e750d50517a59a3ad09e8802e8f4f535447cc0fc9d5f99a73145dfcedad69da9cd4375c624600e78f4458542b14f29611f95d4a31838eeb20c20bb82aa31771cd379ec83554cea5e6539db7384e1f58d81f2f2653c4d9818708e27c89b552d7fcd116bce9c764c714c9402c21d181aac59efb28d4f91652f6750b6ec962802c0320f8059195729d60c534ee8e8ff0755b67fe4c25edb85bcff24c757aa8090000000000008c420eb4304f66e3a37aaf000000c42a570f0e9dd5fd545470f862f8c3c14fa9ecd1e877b0d8ca84c044859e85e6158f9184bc61a9a284db80e4636c25b96174327d82761c26e329555f9290af4100000000000000749efd3763655500344bae34137f5ab0d534b8d63e4ca3b671f2de1cdf519192c6b59a601fd419adc16e2055b85058f793484305d7a1759782e4c571ee855a47bc00edf5e9020c09ab004321610b857e8717764b633b21cb32f0e03280e09758bd445ab91d20baca005452b79d7b574a247fa62fe45b3c4e93da3d51de647c10dd49944dc87c92332af00f191b66b6a6f732a91f0e2e9120bed64069dcf82d3e5e0361e58c79d497247d278888901d442ad7f8536605a644e9e3d769db497c3960dfde12182334caee994adc38a436367a54b9e182b78e9a0ceb9a2c4f63902c1ad1a7c5a08d0920a23c2a86abbdf357849a651733e57f31019876026888c8ccb85c86b4f8ffffff7f000000002c331fca0e541b7ca211c28ed61c525708a13d115b43f8b1894c8fa8a1000000002100000000000000000001000027c9a46157a3609b6fd9843ee19ec647249a9375de5858818f3c4a4fa6ce46f4d42b07199de8b99231ace58c77819ee214e49666c464d35ca9b5143ed3b3dc8c17a23692759ccf5a205311b7ab22532697b861dfb54609fd88e6043bd52ae84c1bb0c8a6c769f952283a1f4e3842edb3d42c68a27ef6a1296dfff4a979369b0e8ebc62887aa46e824d86869ec4ab392b0a74f91381dcc198e353047db70686d147357024eb3cb94f1e89cb5ba0a56aa046b4dc521a3d9356b4b8b5917c4c860495b240e80063bde261fd00000000007271e28ef6806bc8e139c49b91c76bea3858f78fbd8d31330d89069f9648a2ff93060ff073b3a113e47edf76f7d116d2b0976cf2ec447c030931651dd315003b7a6a5433a2bb3c035fc6846abe389b25c988f0bbb889560ae99ec4b227eda2e63a1c31a2c2bd48a822cbe92b6524e0cd8020ecaa34e19e7141d5e221509342bfe7d294d1eb3de6a50ca0301f89c2ee627e949c68b3a4a412a9b7d503a26e9a714ee5f72d8805dd1bfbd081f6a5d1f1289dfe14cb9194e26a44fac273461fc5c0e0a33db7f2d43ea8086cf059f40fa2640b6bfb74dd35f5a31059c01517cf4b6641fce9a24b96767b837ca037a1199735c375c705c798e0e208e4a5259d0bfa526b462af45a6eab34000000000000000000000000c4426344ec1a3366515dee221e747f55d7dd02534bc503b9b28277c253e410986bef2111a99cc448d652929f8a67a6a1d3f00dcad91aff428aade3f85714a1d3ef29acd4d49b62339c10c2ec0daca8d4c1090000000000000084d8223edbccbf9258b7374e79a1f8bf3fb73c8c6dbb7bbdfc399847a11921f97eba0ea14c4fed9a71eedb97c02461792e3a49dac16c60c3fcaab222025d78963c3ac899fa8b63f58a30212c9b2d7fe751e2046b78f86e22861b6504c667350244dd6d9189a8b9c45f8aaff9db694811ca86ed978f23eed7459c0382074170cf1e25b0e9ba3d1cc309353eea4cd8ab96bafda393276bdd8d32ead8db9e1b54d2d3d50e2815268fc1a6ec566981bc8ca2a4583f3d40e817433d0f4f25cfe6cc1897449ba5f26a9d66ac73e6f5c401376f23a314e0b9ff997d22f3e34b7524642c248aa813edaa626f0000000000000000004f9e02a3b51a97c4b1c1b411cc6bee2a56f29c55a6aac46a0cfc318fae02922a403431d4e5a4396cad2c8dd34037bc041a2ba1505ba2c4889122ca04e85881aad5f8bfc12e6741872aad21bf5301cd4c607ef50a991c410f7c60e45b5c193f813a36d841165b91b5e170f6ba24558df57145eb8142a6ed87c6d5cbae3e52d569996604669a6e9ca1a3689c795970b4bcd00881faff52a6766fafa07ed7d4a49f47d34fd76a394adcb33a270b6a14e74bca7c2ea92dd845d3f774fde1bbea911c1ea76d52f7912e2597e6a33380647ed44956730b5b84662b8e659124379c0d86b1d28fdfa3cd2013103e3048c4ad4f5a4dcd133b2fc8fae3b51e4433cee7c08e67c7d7ed4432045e10f8718e5c163b1704fa2c707b61a1a9f63edfceff1a0cd7baf4a15b2fd607a09d398d73243bdcc664fbd5f582e48af2a18b02f0184a7bdd95ac78241e6749e74b152702333c56588375f806f10578eaae329c4f8dfb83e5524e2c9aa59ce7828bd1f146b2a4150fb2a8ced08e2ffac81e921e8a6f0071361a0acdbd125fb5f5e9ffe98e38508582a496afd30ca460dbfca77915a18b7b9ef6c1d6e13bc12fe43063cfecfafb05bf2339ad61533fbf3e410b403182742fa2d40c402cb83c2fef46a36f17c1abf97b0e2d114bd1472ab4207aa060f9e5d91c4a4911b1a1df47b858be141ab3386f26f561df35678489dc1b9f10eee1b2ab3dfdaedd7e06ff8a127f1743fcb32d7f80d40aebc1ea72edc348f5f9ba4bace97db948c24c679c74cd4336a7233d836082bb0e8b013bd1ee3612cd43cd2a3cb83754bb3408"], &(0x7f0000000140)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x8, &(0x7f00000001c0), 0xfffffedf, 0x10, &(0x7f0000000040), 0xffffff95, 0x0, 0xffffffffffffffff, 0xd}, 0x48) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000180)={r12, 0xe72, 0xe, 0x0, &(0x7f0000000000)="63eced8e46dc3fad77b7b3f7b986", 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x50) sendmsg$NFT_BATCH(r11, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000240)={{0x14}, [@NFT_MSG_NEWRULE={0x58, 0x6, 0xa, 0x40b, 0x0, 0x0, {0x2}, [@NFTA_RULE_EXPRESSIONS={0x2c, 0x4, 0x0, 0x1, [{0x28, 0x1, 0x0, 0x1, @fib={{0x8}, @val={0x1c, 0x2, 0x0, 0x1, [@NFTA_FIB_RESULT={0x8, 0x2, 0x1, 0x0, 0x1}, @NFTA_FIB_DREG={0x8}, @NFTA_FIB_FLAGS={0x8, 0x3, 0x1, 0x0, 0x11}]}}}]}, @NFTA_RULE_TABLE={0x9, 0x1, 'syz0\x00'}, @NFTA_RULE_CHAIN={0x9, 0x2, 'syz2\x00'}]}], {0x14}}, 0x80}}, 0x0) sendmsg$sock(r8, &(0x7f0000000400)={&(0x7f0000000580)=@in6={0x2, 0x4e22, 0x0, @dev}, 0x80, 0x0, 0x0, &(0x7f0000000000)=[@mark={{0x14, 0x1, 0x24, 0x3}}], 0x18}, 0x0) 1.131295477s ago: executing program 0 (id=3365): r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl802154(&(0x7f0000000e00), r0) sendmsg$NL802154_CMD_SET_LBT_MODE(r0, &(0x7f0000000ec0)={0x0, 0x0, &(0x7f0000000e80)={&(0x7f0000000e40)={0x20, r1, 0x1, 0x70bd28, 0x25dfdbfe, {}, [@NL802154_ATTR_WPAN_DEV={0xc, 0x6, 0x3}]}, 0x20}, 0x1, 0x0, 0x0, 0x20008000}, 0x24005894) r2 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r2, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000340)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a28000000000a0101000000005e1affd5020000000900010073797a300000000008000240000000032c000000030a01030000e6ff00000000020000000900010073797a30000000000900030073797a320000000014000000110001"], 0x7c}}, 0x40010) sendmsg$NFT_BATCH(r2, &(0x7f0000000000)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f0000000940)=ANY=[@ANYBLOB="140000001000010400000000000000000100000a74000000060a0b04000000000000000002000008400004803c000180080001006c6f670030000280060004400001000008000340fffffffa0a0002407d5def2e21000000080003400000000806000140000100000900010073797a30000000000900020073797a320000000008000b400000000314000000110001"], 0x9c}}, 0x0) close(r2) 989.898862ms ago: executing program 3 (id=3366): r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = socket$inet6_udp(0xa, 0x2, 0x0) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000c80)={'lo\x00', 0x0}) sendmsg$nl_route_sched(r0, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000140)={&(0x7f00000025c0)=@newqdisc={0x5c, 0x24, 0xd0f, 0x200000, 0x0, {0x60, 0x0, 0x0, r2, {}, {0xffff, 0xffff}, {0x0, 0xfff3}}, [@qdisc_kind_options=@q_netem={{0xa}, {0x2c, 0x2, {{0x2, 0x4, 0x799b, 0x0, 0x28e, 0x68}, [@TCA_NETEM_DELAY_DIST={0x4}, @TCA_NETEM_LATENCY64={0xc, 0xa, 0x8}]}}}]}, 0x5c}, 0x1, 0x0, 0x0, 0x240400d0}, 0x24008004) r3 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r3, &(0x7f0000000080)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f00000000c0)=@newtaction={0x84, 0x30, 0xb, 0x0, 0x0, {}, [{0x70, 0x1, [@m_ct={0x6c, 0x1, 0x0, 0x0, {{0x7}, {0x44, 0x2, 0x0, 0x1, [@TCA_CT_PARMS={0x18}, @TCA_CT_LABELS={0x14, 0x7, "296524f13eb739454997900db12f7a74"}, @TCA_CT_LABELS_MASK={0x14, 0x8, "1ad2e4e01b6ba299818e404604a698cf"}]}, {0x4}, {0xc}, {0xc}}}]}]}, 0x84}}, 0x4) 928.571379ms ago: executing program 1 (id=3367): r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='memory.events\x00', 0x275a, 0x0) write$cgroup_subtree(r0, &(0x7f0000000100)=ANY=[], 0x32600) mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x2000001, 0x12, r0, 0x0) (async) r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000140)={0xa, 0x3, &(0x7f0000001500)=ANY=[@ANYBLOB="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"/3598], &(0x7f0000014ff5)='GPL\x00', 0x2, 0x1000, &(0x7f0000014000)=""/4096, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0x8, 0x10, &(0x7f0000000000), 0x10, 0x0, 0xffffffffffffffff, 0x5c, 0x0, 0x0, 0x10, 0xffffffff}, 0x94) (async) r2 = bpf$MAP_CREATE(0x0, &(0x7f00000003c0)=@base={0x7, 0x4, 0x8, 0x3ff, 0x0, 0x1}, 0x48) bpf$MAP_DELETE_ELEM(0x3, &(0x7f0000000080)={r2}, 0x20) (async) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f00000000c0)={r1, 0x3a, 0x44, 0x0, &(0x7f0000000200)="e460cdfbef2408322900119386dd6a00000000072feb311ccd3ec8a755c1e1380081ffad008036e8d50000ff010000001400000500242f09880bd320d98a08000000e9bf", 0x0, 0x401, 0x0, 0x327, 0xa6, &(0x7f00000011c0)="59235bd7a9324ff307d87177332368fbdeefaa1544600ea1870645446c357de433206896637019b84d57c3de1ea07638e494dd701db1af6fc15db78cf79f5ab4bc7aee8553677ffe377a35b4afdb989fb7da1ff63956ffb796d51daf1c268b9f1a4a06583f8c03ec1671b151a8a495c1b006fa5f2f3a54a46aeee8005b178b9516d2b928984ccb942fa2278a2e33a0b619f2dd814fc91942e03c48fd9b7d19d9a6612b46805b267ef3132a724cbfcd1c715be67930e2ae2b9a2479c5a4b2fecd301a745a6fd67598a5e5ecc1e56e58159c47def7f9285acfedc980596377e6f9ee076fa094e5d8f838b718ed63ff8265a1dbc1549bed03e6b27b6fc2b8a07373506a1a41d5a71cbf0eaa24ec737b02a8a2d5114c3c4e5810a2c3eae3373fd341800cfb0fb35cefe04ca4da2b02a83c40126e23cdf3c817b530bbe7b431bc0b7d864e3e6dd1ab90259a8bd7ad7dd4c6366ea6da661fd016b394adcce5988fff85fbc832a927c97b89337e195f562cd284911eef1ee52e4ff033b33beedea7cf43c4d0cc0471fa91011e1e7e8733bf82c01346d6ecb49f1a84e92d063c81a7227d89be33f7273b87e29ae53a5f38dc94cf391fcb82c9432821ef1a0f6bbfe8f7d6574479a8f621e1d8f7d9bb20f3d8d469e6d232d7d7837ff12a224a65c604907e787baaf7c863ad48a5edecbe1470c20507a6ee5dee75e9ef84c71af5af800a9ce9787ebdee9e1c8189fbf66048d5c3757fb2b697ce68cfd316a7b25a385111e0cd2fddb81602e36e74c4f99b403cb304a4774e648054c0456c7869f9d97873ff80e2664c1265292941a9b767c7f40767cfccdbcaa156453d6a910fd5440f7a2bf8f4bb6d6d9fd443f2304617a684b6afa99c157dcf70e51fdb55fd0dbf5c6733841024599f8d1791a07c5dc3a4ccaf4d7c0ca3d101b2beba3a49d2378c9fe4fdb10babd95083a0c4db5a30c4490828d97efe807a13e587fbac1089843964facfd27d287262759384fe9b610f81048be430c1e8fe6327c0f2fd003021d20563ec0c7e39aec6718649c958da2e02cb3848c76924492678889c18bea02ed5ee080106e9838cbca9ad5f66c0434182225b13a236b342cf80562c10d4a3459aea17589b84904d3d2c2b", &(0x7f00000004c0)="b33620dad49cc786c86a5c5444e76c2a1ef9224fb91083d2ba4368e98a14467703e9ee585196fa95320bd53c6a76ad443b81dc833b22016aeaafb4597c06919ecf7e5ea4d0a8995feaaf9a9feb0c4b5277398049a2f5475f6ceb26bd128189f4b1b3c662d3d1630717791de0cdac3ce6e01c5719b670da5ded7dfa9dda53f04ad151cb952d708eaa69e983dcfab36b2dac3f3fe85e1d86b3d73d4879fb11cfac51f3cb669a50", 0x1, 0xfffffffd}, 0x50) 902.105059ms ago: executing program 0 (id=3368): r0 = bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000340)={0x2, 0x4, 0x8, 0x1, 0x80, 0x0, 0x0, '\x00', 0x0, 0x0}, 0x48) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000400)={0xd, 0x10, &(0x7f0000000000)=ANY=[@ANYBLOB="18000000000000000000000000000000b7080000000000007b8af8ff00000000b7080000000000007b8af0ff00000000bf8100000000000007080000f8ffffffbfa400000000000007040000f0ffffffb70200000800000018210000", @ANYRES32=r0, @ANYBLOB="0000000002000000b705000008000000850000008f00000095"], &(0x7f0000000300)='GPL\x00', 0x9, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x2000000}, 0x94) 854.687137ms ago: executing program 4 (id=3369): r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = socket$alg(0x26, 0x5, 0x0) bind$alg(r1, &(0x7f00000004c0)={0x26, 'aead\x00', 0x0, 0x0, 'ccm(aes)\x00'}, 0x58) r2 = accept4(r1, 0x0, 0x0, 0x800) r3 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r3, &(0x7f000000c2c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000340)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a28000000000a0101000000005e1affd5020000000900010073797a300000000008000240000000032c000000030a01030000e6ff00000000020000000900010073797a30000000000900030073797a320000000014000000110001"], 0x7c}}, 0x80) sendmsg$NFT_BATCH(r3, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000002ac0)=ANY=[@ANYBLOB="140000001000210000000000000000000000000a6c000000160a3f360000000000000000020000000900010073797a30000000004000038008000240000000002c0003801400010076657468305f746f5f626f6e64000000140001007665746830000000000000000000000008000140000000000900020073797a300000000014000000110001", @ANYRES16=r2], 0x94}}, 0x8000) r4 = socket$igmp(0x2, 0x3, 0x2) setsockopt$MRT_PIM(r4, 0x0, 0xd1, &(0x7f0000000140)=0xfffffffb, 0x4) sendmmsg$alg(r2, &(0x7f0000004680)=[{0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x81817f961ce36e31}], 0x1, 0x4044800) sendmmsg$alg(r2, &(0x7f0000003d00)=[{0x0, 0x0, &(0x7f0000000700)=[{&(0x7f0000002c00)="23fa2ffcb36a2a3d11d5a9f77f3a67f32cfb2f4ca40ce98f53189946eeb23d4e5bf8602cca", 0x25}, {&(0x7f00000003c0)="0a2a44bf9420a8f9afbee8f1f647a63454be1102b7d943533f54b95c6dca324140b97d911cecd8c91c1c5276745d03b0f726b0a41c35c377f842b9b4a94abc23e02dfca21ead15b4c6591e71f09279eed56eaf1030bdb5cff883dbc0bfcaf9201e238887e93c1187cadb585136fdc149d7b54a0a00bb4458056041b4372103b5688defd2df57278a71c3dc4c3b6f0c454f4b3b1e64c609b19970c12608a314914b3aa5aab3d1f2696fc9a7640ca801305ff173d03a863c50364dd582881d8da8cf07614e9307c22dd27612d7685b8c62709e08d2f3bb2f09e66ea84bdf8d2c54a7114c9d53", 0xe5}, {&(0x7f0000002b80)="352283ee848b5fe1f47406a56b7dd2dbada5c43249aff6c2b19e0bdc81b50dc3fad699e9ce6487ffa58afaa35b219e3f0d4626a0c01c9aab85376452b756dcf2865eac503515", 0x46}, {&(0x7f0000000780)="4ef6ac6f75269444833835757983381316d9eea6ee1005224c32d5ac76b7faac1504eff99bc64b490242727b60b33e73183b775f7fd7fb19a2920c8e5295ef0c3279d2ec95ccef01065d156759fae0017023ad657a098668fe058afd4b336487c6ab5bf34991f7ceaafa3915b5efc9c3b1a441c2b669d4c2b812a19d58c0dda0800ed154fe2750d1d804afa04acb73c035d410d30f20296f1f561d9775f3b7b353486f76b597ec37c02324d1e78b8c29614d80362727f0130add31f91853c1bd51bae8186871346cbe12742af237da18ac86d391228dc911b1ed601e0e07f4dd64d7cefc8d869589db90eab3c442ee", 0xef}, {&(0x7f00000002c0)="739f040eab48c87368793addcacf6fdb7f40c73013297e96af5745d23840a1e4871ce7980839d132c901025d8ab6355606010ddead78383557c3c51e9e6d14b907d55ea97ffd9bb9461139d833758053db4341dbaf5bed28b756948b052c3dedd22e9b0e12278fd0c42a035869a65b3137fc8a7864445dcb4b8ca08aea03d34016a22df4919349131ca84355d75d6f445bcc39cd8092d55820cf9a3cf66ca1eec926d25ac610dc7aa503eab339a3b1fc174a2db088bbe01ef33886787d4a02803862672e2a780cd59f38014a913d0d083d26", 0xd2}, {&(0x7f00000006c0)="ea48710c42fc62e079668b70bb5a7a4f2f0483894a293522b1d28d", 0x1b}], 0x6, &(0x7f00000005c0)=[@assoc={0x18, 0x117, 0x4, 0x80}, @assoc={0x18, 0x117, 0x4, 0x3ff}, @op={0x18, 0x117, 0x3, 0x1}], 0x48, 0x20000840}, {0x0, 0x0, &(0x7f00000028c0), 0x0, &(0x7f0000002940)=ANY=[@ANYBLOB="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"], 0x148, 0x4000810}, {0x0, 0x0, &(0x7f0000003c80), 0x0, 0x0, 0x0, 0x4000000}], 0x3, 0x4004080) r5 = openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0) ioctl$TUNSETIFF(r5, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x7101}) r6 = socket(0x28, 0x3, 0x0) r7 = socket$unix(0x1, 0x5, 0x0) ioctl$sock_SIOCGIFINDEX(r7, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r6, &(0x7f00000012c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000180)=@newqdisc={0x38, 0x24, 0x4ee4e6a52ff56541, 0x70bd2a, 0x25dfdbfe, {0x0, 0x0, 0x0, r8, {0x0, 0xfff1}, {0xffff, 0xffff}, {0x0, 0xf}}, [@qdisc_kind_options=@q_multiq={{0xb}, {0x8, 0x2, {0x42}}}]}, 0x38}}, 0x0) r9 = openat$tun(0xffffffffffffff9c, &(0x7f0000000400), 0x10100, 0x0) r10 = bpf$PROG_LOAD(0x5, &(0x7f0000000600)={0x20, 0x3, &(0x7f0000000200)=ANY=[@ANYBLOB="180000009500"/24], &(0x7f0000000000)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @netfilter=0x2d, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x99ee}, 0x94) bpf$BPF_LINK_CREATE_XDP(0x1c, &(0x7f0000002380)={r10, 0x0, 0x2d, 0x1b, @val=@iter={0x0}}, 0x20) r11 = socket(0x400000000010, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r11, 0x8933, &(0x7f0000000440)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r11, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000280)=@newtfilter={0x48, 0x2c, 0x400, 0x170bd29, 0x2, {0x0, 0x0, 0x0, r12, {0x0, 0x10}, {0xfff1}, {0x8, 0x7}}, [@filter_kind_options=@f_flow={{0x9}, {0x18, 0x2, [@TCA_FLOW_RSHIFT={0x8, 0x4, 0x7}, @TCA_FLOW_KEYS={0x8, 0x1, 0xed84}, @TCA_FLOW_ACT={0x4}]}}]}, 0x48}, 0x1, 0x0, 0x0, 0x8c4}, 0x40) close(r9) socket(0x22, 0x4, 0x0) ioctl$SIOCSIFHWADDR(r9, 0x8914, &(0x7f0000002280)={'syzkaller0\x00', @multicast}) r13 = socket$kcm(0x11, 0x3, 0x0) setsockopt$sock_attach_bpf(r13, 0x107, 0xf, &(0x7f0000000600), 0x56) sendmsg$kcm(r13, &(0x7f00000000c0)={&(0x7f00000004c0)=@xdp={0x2c, 0x0, r12, 0x18}, 0x80, &(0x7f00000008c0)=[{&(0x7f00000001c0)="27030200dc0f14000e0005000024c10200000001125ce882cbf400930bf4533f00429c65112a093bbf60b85bcb06", 0x2e}], 0x1}, 0x4005) sendmsg$nl_route(r0, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000000)=ANY=[@ANYBLOB="340000001400030900000000332fb633dbd7004159250218e4ff", @ANYRES8=r0, @ANYBLOB="080002"], 0x34}, 0x1, 0x0, 0x0, 0xc000}, 0x20008840) 747.113831ms ago: executing program 1 (id=3370): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) r1 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r1, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000400)={&(0x7f0000000440)={0x68, 0x47, 0x107, 0xfffffffe, 0xffffffff, {0x1, 0x7c}, [@nested={0x54, 0x3, 0x0, 0x1, [@nested={0x4e, 0xc9, 0x0, 0x1, [@generic="af1a32d5ac8a58454645e34db8000d05131d4764224e99cada1fa1be6037c2b41cda8b0fe0ff06186691008323af658ef90cc4b96e92cdd3201c9dea1e9ef6f264b0e5a10b957c1aa15c"]}]}]}, 0x68}, 0x1, 0x0, 0x0, 0x2404c0d1}, 0xc000) sendmsg$NFT_BATCH(r0, &(0x7f0000000440)={&(0x7f0000000080)={0x10, 0x0, 0x0, 0x40000}, 0xc, &(0x7f0000000400)={&(0x7f0000000140)={{0x14, 0x10, 0x1, 0x0, 0x0, {0x3}}, [@NFT_MSG_NEWRULE={0x288, 0x6, 0xa, 0xe6f3691a67225377, 0x0, 0x0, {0xa, 0x0, 0xa}, [@NFTA_RULE_EXPRESSIONS={0x180, 0x4, 0x0, 0x1, [{0x18, 0x1, 0x0, 0x1, @dup_ipv6={{0x8}, @val={0xc, 0x2, 0x0, 0x1, [@NFTA_DUP_SREG_ADDR={0x8, 0x1, 0x1, 0x0, 0x16}]}}}, {0x64, 0x1, 0x0, 0x1, @redir={{0xa}, @val={0x54, 0x2, 0x0, 0x1, [@NFTA_REDIR_FLAGS={0x8, 0x3, 0x1, 0x0, 0x4}, @NFTA_REDIR_FLAGS={0x8}, @NFTA_REDIR_REG_PROTO_MIN={0x8, 0x1, 0x1, 0x0, 0x8}, @NFTA_REDIR_REG_PROTO_MAX={0x8, 0x2, 0x1, 0x0, 0x4}, @NFTA_REDIR_REG_PROTO_MIN={0x8, 0x1, 0x1, 0x0, 0xd}, @NFTA_REDIR_FLAGS={0x8, 0x3, 0x1, 0x0, 0x40}, @NFTA_REDIR_REG_PROTO_MAX={0x8}, @NFTA_REDIR_REG_PROTO_MAX={0x8, 0x2, 0x1, 0x0, 0x10}, @NFTA_REDIR_REG_PROTO_MIN={0x8, 0x1, 0x1, 0x0, 0x16}, @NFTA_REDIR_REG_PROTO_MAX={0x8, 0x2, 0x1, 0x0, 0x13}]}}}, {0x14, 0x1, 0x0, 0x1, @byteorder={{0xe}, @void}}, {0x28, 0x1, 0x0, 0x1, @osf={{0x8}, @val={0x1c, 0x2, 0x0, 0x1, [@NFTA_OSF_FLAGS={0x8}, @NFTA_OSF_DREG={0x8, 0x1, 0x1, 0x0, 0xd}, @NFTA_OSF_FLAGS={0x8}]}}}, {0x10, 0x1, 0x0, 0x1, @reject={{0xb}, @void}}, {0x10, 0x1, 0x0, 0x1, @range={{0xa}, @void}}, {0x5c, 0x1, 0x0, 0x1, @tproxy={{0xb}, @val={0x4c, 0x2, 0x0, 0x1, [@NFTA_TPROXY_REG_PORT={0x8, 0x3, 0x1, 0x0, 0xe}, @NFTA_TPROXY_FAMILY={0x8, 0x1, 0x1, 0x0, 0x2}, @NFTA_TPROXY_REG_ADDR={0x8, 0x2, 0x1, 0x0, 0xe}, @NFTA_TPROXY_FAMILY={0x8, 0x1, 0x1, 0x0, 0xa}, @NFTA_TPROXY_REG_ADDR={0x8, 0x2, 0x1, 0x0, 0x12}, @NFTA_TPROXY_FAMILY={0x8, 0x1, 0x1, 0x0, 0x1}, @NFTA_TPROXY_REG_ADDR={0x8, 0x2, 0x1, 0x0, 0xd}, @NFTA_TPROXY_REG_PORT={0x8}, @NFTA_TPROXY_FAMILY={0x8, 0x1, 0x1, 0x0, 0xa}]}}}, {0x3c, 0x1, 0x0, 0x1, @meta={{0x9}, @val={0x2c, 0x2, 0x0, 0x1, [@NFTA_META_SREG={0x8, 0x3, 0x1, 0x0, 0x16}, @NFTA_META_SREG={0x8, 0x3, 0x1, 0x0, 0x1a}, @NFTA_META_SREG={0x8, 0x3, 0x1, 0x0, 0x11}, @NFTA_META_DREG={0x8, 0x1, 0x1, 0x0, 0x1d}, @NFTA_META_DREG={0x8, 0x1, 0x1, 0x0, 0x9}]}}}, {0xc, 0x1, 0x0, 0x1, @fwd={{0x8}, @void}}]}, @NFTA_RULE_USERDATA={0xf2, 0x7, 0x1, 0x0, "8cd32beaf00052d705880e0b26cee0405b3ea6a219bbf2f599a6fc8a4dad040c4fb454db3e8d3232db66a90c9dc759bb48e37ad2dae073025df2c7b25d194b857ea1e1e018aaea62f7e0d8192dc39d4134841e59101665fdb71561a12f2793a5b5d7b429d97e33b7cc86d4f1fcc049364f11ceac5fa120e004a6d68164b65a0a32ed6648ce368d20bbb80aa614efec1858ec2fa0bae2b23f0681a137a30999ef7907e4115d8a03af8f943d83f95e06e73773f00cda3019107dbfebdb58fd1b4e0da9b6d56fe0e141820b170ed114756dfebc9c888087f4f126edf98dbeb5bf7fcad567ad5b6ced8ddaa4d55d0e47"}]}], {0x14, 0x11, 0x1, 0x0, 0x0, {0x7}}}, 0x2b0}, 0x1, 0x0, 0x0, 0x4000080}, 0xc8c4) sendmsg$IPSET_CMD_CREATE(r0, &(0x7f0000000100)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000000)={0x58, 0x2, 0x6, 0x101, 0x0, 0x0, {}, [@IPSET_ATTR_PROTOCOL={0x5}, @IPSET_ATTR_SETNAME={0x9, 0x2, 'syz0\x00'}, @IPSET_ATTR_FAMILY={0x5, 0x5, 0xa}, @IPSET_ATTR_REVISION={0x5}, @IPSET_ATTR_TYPENAME={0x12, 0x3, 'hash:net,port\x00'}, @IPSET_ATTR_DATA={0xc, 0x7, 0x0, 0x1, [@IPSET_ATTR_BUCKETSIZE={0x5, 0x15, 0x5}]}]}, 0x58}}, 0x0) socket$nl_netfilter(0x10, 0x3, 0xc) (async) socket$nl_generic(0x10, 0x3, 0x10) (async) sendmsg$nl_generic(r1, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000400)={&(0x7f0000000440)={0x68, 0x47, 0x107, 0xfffffffe, 0xffffffff, {0x1, 0x7c}, [@nested={0x54, 0x3, 0x0, 0x1, [@nested={0x4e, 0xc9, 0x0, 0x1, [@generic="af1a32d5ac8a58454645e34db8000d05131d4764224e99cada1fa1be6037c2b41cda8b0fe0ff06186691008323af658ef90cc4b96e92cdd3201c9dea1e9ef6f264b0e5a10b957c1aa15c"]}]}]}, 0x68}, 0x1, 0x0, 0x0, 0x2404c0d1}, 0xc000) (async) sendmsg$NFT_BATCH(r0, &(0x7f0000000440)={&(0x7f0000000080)={0x10, 0x0, 0x0, 0x40000}, 0xc, &(0x7f0000000400)={&(0x7f0000000140)={{0x14, 0x10, 0x1, 0x0, 0x0, {0x3}}, [@NFT_MSG_NEWRULE={0x288, 0x6, 0xa, 0xe6f3691a67225377, 0x0, 0x0, {0xa, 0x0, 0xa}, [@NFTA_RULE_EXPRESSIONS={0x180, 0x4, 0x0, 0x1, [{0x18, 0x1, 0x0, 0x1, @dup_ipv6={{0x8}, @val={0xc, 0x2, 0x0, 0x1, [@NFTA_DUP_SREG_ADDR={0x8, 0x1, 0x1, 0x0, 0x16}]}}}, {0x64, 0x1, 0x0, 0x1, @redir={{0xa}, @val={0x54, 0x2, 0x0, 0x1, [@NFTA_REDIR_FLAGS={0x8, 0x3, 0x1, 0x0, 0x4}, @NFTA_REDIR_FLAGS={0x8}, @NFTA_REDIR_REG_PROTO_MIN={0x8, 0x1, 0x1, 0x0, 0x8}, @NFTA_REDIR_REG_PROTO_MAX={0x8, 0x2, 0x1, 0x0, 0x4}, @NFTA_REDIR_REG_PROTO_MIN={0x8, 0x1, 0x1, 0x0, 0xd}, @NFTA_REDIR_FLAGS={0x8, 0x3, 0x1, 0x0, 0x40}, @NFTA_REDIR_REG_PROTO_MAX={0x8}, @NFTA_REDIR_REG_PROTO_MAX={0x8, 0x2, 0x1, 0x0, 0x10}, @NFTA_REDIR_REG_PROTO_MIN={0x8, 0x1, 0x1, 0x0, 0x16}, @NFTA_REDIR_REG_PROTO_MAX={0x8, 0x2, 0x1, 0x0, 0x13}]}}}, {0x14, 0x1, 0x0, 0x1, @byteorder={{0xe}, @void}}, {0x28, 0x1, 0x0, 0x1, @osf={{0x8}, @val={0x1c, 0x2, 0x0, 0x1, [@NFTA_OSF_FLAGS={0x8}, @NFTA_OSF_DREG={0x8, 0x1, 0x1, 0x0, 0xd}, @NFTA_OSF_FLAGS={0x8}]}}}, {0x10, 0x1, 0x0, 0x1, @reject={{0xb}, @void}}, {0x10, 0x1, 0x0, 0x1, @range={{0xa}, @void}}, {0x5c, 0x1, 0x0, 0x1, @tproxy={{0xb}, @val={0x4c, 0x2, 0x0, 0x1, [@NFTA_TPROXY_REG_PORT={0x8, 0x3, 0x1, 0x0, 0xe}, @NFTA_TPROXY_FAMILY={0x8, 0x1, 0x1, 0x0, 0x2}, @NFTA_TPROXY_REG_ADDR={0x8, 0x2, 0x1, 0x0, 0xe}, @NFTA_TPROXY_FAMILY={0x8, 0x1, 0x1, 0x0, 0xa}, @NFTA_TPROXY_REG_ADDR={0x8, 0x2, 0x1, 0x0, 0x12}, @NFTA_TPROXY_FAMILY={0x8, 0x1, 0x1, 0x0, 0x1}, @NFTA_TPROXY_REG_ADDR={0x8, 0x2, 0x1, 0x0, 0xd}, @NFTA_TPROXY_REG_PORT={0x8}, @NFTA_TPROXY_FAMILY={0x8, 0x1, 0x1, 0x0, 0xa}]}}}, {0x3c, 0x1, 0x0, 0x1, @meta={{0x9}, @val={0x2c, 0x2, 0x0, 0x1, [@NFTA_META_SREG={0x8, 0x3, 0x1, 0x0, 0x16}, @NFTA_META_SREG={0x8, 0x3, 0x1, 0x0, 0x1a}, @NFTA_META_SREG={0x8, 0x3, 0x1, 0x0, 0x11}, @NFTA_META_DREG={0x8, 0x1, 0x1, 0x0, 0x1d}, @NFTA_META_DREG={0x8, 0x1, 0x1, 0x0, 0x9}]}}}, {0xc, 0x1, 0x0, 0x1, @fwd={{0x8}, @void}}]}, @NFTA_RULE_USERDATA={0xf2, 0x7, 0x1, 0x0, "8cd32beaf00052d705880e0b26cee0405b3ea6a219bbf2f599a6fc8a4dad040c4fb454db3e8d3232db66a90c9dc759bb48e37ad2dae073025df2c7b25d194b857ea1e1e018aaea62f7e0d8192dc39d4134841e59101665fdb71561a12f2793a5b5d7b429d97e33b7cc86d4f1fcc049364f11ceac5fa120e004a6d68164b65a0a32ed6648ce368d20bbb80aa614efec1858ec2fa0bae2b23f0681a137a30999ef7907e4115d8a03af8f943d83f95e06e73773f00cda3019107dbfebdb58fd1b4e0da9b6d56fe0e141820b170ed114756dfebc9c888087f4f126edf98dbeb5bf7fcad567ad5b6ced8ddaa4d55d0e47"}]}], {0x14, 0x11, 0x1, 0x0, 0x0, {0x7}}}, 0x2b0}, 0x1, 0x0, 0x0, 0x4000080}, 0xc8c4) (async) sendmsg$IPSET_CMD_CREATE(r0, &(0x7f0000000100)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000000)={0x58, 0x2, 0x6, 0x101, 0x0, 0x0, {}, [@IPSET_ATTR_PROTOCOL={0x5}, @IPSET_ATTR_SETNAME={0x9, 0x2, 'syz0\x00'}, @IPSET_ATTR_FAMILY={0x5, 0x5, 0xa}, @IPSET_ATTR_REVISION={0x5}, @IPSET_ATTR_TYPENAME={0x12, 0x3, 'hash:net,port\x00'}, @IPSET_ATTR_DATA={0xc, 0x7, 0x0, 0x1, [@IPSET_ATTR_BUCKETSIZE={0x5, 0x15, 0x5}]}]}, 0x58}}, 0x0) (async) 735.035937ms ago: executing program 0 (id=3371): r0 = socket$nl_route(0x10, 0x3, 0x0) ioctl$XFS_IOC_PATH_TO_HANDLE(r0, 0xc0385869, &(0x7f0000000180)={r0, &(0x7f00000001c0)='-,/}:-,\xe8\x18\xcd#F\xb3+i\x03\xccU\xf0\xe3.*{\x00', 0x220942, &(0x7f00000000c0)={@_ha_fsid={[0xfffffff8, 0x600]}, {0x0, 0x7fff, 0x7f, 0x2}}, 0xffffffff, &(0x7f0000000100)={@_ha_fsid}, &(0x7f0000000140)=0x800}) sendmsg$nl_route(r1, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000002c0)=ANY=[@ANYBLOB="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", @ANYRES32=0x0, @ANYBLOB="c1900000815c00002800128008000100677470001c0002800500050001000000080003000600000008000100", @ANYRES32, @ANYBLOB='\b\x00\n\x00', @ANYRES32], 0x50}}, 0x48010) r2 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r2, &(0x7f0000000000)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000040)=ANY=[@ANYBLOB="3c00000041000701fefeffff00000000017c0000040042802000018006000600800a00000c001500faffffffffffffff08000900", @ANYRES32=r2, @ANYBLOB="040002"], 0x3c}, 0x1, 0x0, 0x0, 0x48815}, 0xc010) sendmsg$IPSET_CMD_TEST(r1, &(0x7f0000000440)={&(0x7f0000000080)={0x10, 0x0, 0x0, 0x40000}, 0xc, &(0x7f0000000240)={&(0x7f0000000200)={0x20, 0xb, 0x6, 0x201, 0x0, 0x0, {0xf, 0x0, 0x4}, [@IPSET_ATTR_SETNAME={0x9, 0x2, 'syz1\x00'}]}, 0x20}, 0x1, 0x0, 0x0, 0xc000850}, 0x20000100) r3 = socket$packet(0x11, 0x3, 0x300) r4 = socket$nl_route(0x10, 0x3, 0x0) r5 = socket(0x10, 0x803, 0x0) sendmsg$nl_route_sched(r5, &(0x7f00000004c0)={0x0, 0x0, &(0x7f00000003c0)={0x0, 0x24}}, 0x0) getsockname$packet(r5, &(0x7f0000000380)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000180)=0x14) sendmsg$nl_route(r4, 0x0, 0x0) setsockopt$inet_tcp_TCP_REPAIR(r5, 0x6, 0x13, &(0x7f0000000480), 0x4) sendmsg$nl_route_sched(r4, &(0x7f00000000c0)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f0000000400)=@newqdisc={0x44, 0x24, 0xe0b, 0x70bd28, 0x0, {0x0, 0x0, 0x0, r6, {}, {0xffff, 0xffff}, {0x0, 0xd064db0e491fa98f}}, [@qdisc_kind_options=@q_cake={{0x9}, {0x14, 0x2, [@TCA_CAKE_INGRESS={0x8, 0xf, 0x1}, @TCA_CAKE_NAT={0x8, 0xb, 0x1}]}}]}, 0x44}, 0x1, 0x0, 0x0, 0x40}, 0x4000080) sendto$packet(r3, &(0x7f00000001c0)="c20fb6cf90fdfcf77d3a20162878f634a46f8d", 0x13, 0x10, &(0x7f0000000280)={0x11, 0x1, r6, 0x1, 0xf9, 0x6, @broadcast}, 0x14) bpf$MAP_CREATE_TAIL_CALL(0x0, &(0x7f0000000380)={0x3, 0x4, 0x4, 0xa, 0x0, 0x1, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x4}, 0x48) r7 = socket$nl_generic(0x10, 0x3, 0x10) r8 = syz_genetlink_get_family_id$tipc2(&(0x7f00000005c0), 0xffffffffffffffff) sendmsg$TIPC_NL_LINK_SET(r7, &(0x7f0000000540)={0x0, 0x0, &(0x7f0000000340)={&(0x7f0000000380)=ANY=[@ANYBLOB="ac000000", @ANYRES16=r8, @ANYBLOB="01060000000000000000090000002c0004801300010062726f6164636173742d6c696e6b0000140007800800060000000000080005"], 0xac}}, 0x0) ioctl$FIBMAP(r0, 0x1, &(0x7f0000000040)=0x401) 718.211853ms ago: executing program 3 (id=3372): r0 = socket$kcm(0x10, 0x2, 0x10) socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f00000007c0)={0x0, 0x0, &(0x7f0000000840)={&(0x7f0000000c40)=@delqdisc={0x58, 0x25, 0x200, 0x70bd2c, 0x25dfdbfc, {0x0, 0x0, 0x0, 0x0, {0x2}, {0xc, 0xc}, {0x4, 0xffff}}, [@qdisc_kind_options=@q_tbf={{0xffffff25}, {0x2c, 0x2, [@TCA_TBF_PARMS={0x28, 0x1, {{0x2, 0x1, 0x0, 0x6, 0x1, 0x7f}, {0xdd, 0x2, 0xf, 0x8000, 0x1, 0x3}, 0x7ff, 0xff800000, 0x3a2}}]}}]}, 0x58}, 0x1, 0x0, 0x0, 0x4}, 0x94) sendmsg$kcm(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000001e00)=[{&(0x7f0000000040)="9caa2be95272cdb3b03e72b619763ebd53de1fcee09c28be84eaaf1d13072af7dec75ee890232afce4f64694e14bba4db29b272f6a0616aef60a175ba54774e393fbe5c2c994454f57e0fec11786839171deae26cbbbe7897d7f718094ffa95b2e59", 0x62}, {&(0x7f0000000140)="68da2e2119978d9f627fe802fa7c4a0be53c07305f82a7aac582abbe9d637d431e7ecbe589fdf26400679d7f304e8aa72dcb155e7940f77110c1082a32e96b005b50a236950970329820694f22b4449b8511a4d5e71a28053ae10e4b7f4f422a39d9f88d99f1d432bfa488d6f8e2589dd957b8bf42538adf1f0621937c6256", 0x7f}, {&(0x7f00000001c0)="fc19d1eb8ee7d253f76931ca3763ef275624d579dbf31d9a3b31e4029539a0beb625556f2c1f5047d70d119b183d196979ee0df22ded6acacbd295dcae44d6be68bd20edeb", 0x45}, {&(0x7f0000000240)="a9123cff48ccb5b49b74840de5fdec0b8c0e070cff49ea872617c5a2c00d7b0b182248071d2eb3f56d0be32e1d98777f13d77670848ce3ac4ac5e4e7f279bfed8bcf68bd91331c264b8e314f2293e6949960ee40bb4077c40d6e0f3c8da8ea902e75ac1444b5ceaa432b4cac2cf854d4c4de32f16b131210487b85c25985098a5616c3951d7524781a9446219ba3714bf68b4addda29b67144da66d83bad4e1352d217ddcf47f31cd904fff7d03b9e2f7a287ea3f236a8e8d21930", 0xbb}, {&(0x7f0000000540)="9fe9a3f8dc1ed197f757c115b921fee71af860bd957b9cc161bb51a2d4aa9ce6f13130f265f57423abaefd88cd786cbbdaddeb1639b6049050dba2af6ee50f7ff90ed84ed0994866fefa0c4d647f3381a1e471b731a209c52c8036f18fcc6cf2a4323c2affc4633df18cff1233e9ba2fdedea7c34e31598ffc66a6ac7e9a4893d734d2f1f7445121b4a231357502fbfaa3b7cc522d504db45e190b41d4c6316e4e344635871dabc25726bb17856ae2d51dcd242a5a6fded8fa1d02232a0dc4b37b", 0xc1}, {&(0x7f0000000cc0)="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", 0x1000}, {&(0x7f0000001cc0)="35bc18957344d0819a2be053061c647e58c8c76ea0f60b397dbed85b7eb117db0a800d8c1f80aa44979f8bcae93873e5887501743809d74a64fd3376b1ce9f6eb7d80a09293a6663ff55a383d8c675f6801634c7a12b427f22408e881b770c613bdf339d07063dac776c10962e9128e1a0", 0x71}, {&(0x7f0000001d40)="8214a1f170958b7878b2cb1498d1c1190b4b6af3c5b5c42bda25b385310aec71b1eeeb7e010a5f0a957de9fc97089ee8c80abd114740fb42979fff9c447be5d260e9da75498499a563dc0d168611e71b8ddccd4027bc7ddeadda59fb1c08b8ac8d39355ca4a3029e6f6e0e25fd60f4db31351ab463bb4786963a776a32a27012274200d3ea2c6241f67e8b9120da674f7b0829d7a20cfef62c979aea6fcc4a0d00ff29fd8c45ffedf34b97667faba68be6", 0xb1}], 0x8}, 0x4080) bpf$PROG_LOAD(0x5, &(0x7f00000054c0)={0xe, 0x16, &(0x7f0000000340)=ANY=[@ANYBLOB="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"/480], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @sk_skb}, 0x48) 627.144084ms ago: executing program 5 (id=3373): r0 = bpf$PROG_LOAD(0x5, &(0x7f0000000080)={0x4, 0xe, &(0x7f0000001580)=ANY=[@ANYBLOB="b702000000000000bfa300000000000007030000f0ffffff7a0af0ff0200000079a4f0ff00000000b706000000000081ad64020000000000450404000100ff0f1704000001130a00b70500000100001b6a0af2fe000000008500000044000000b700000000000000950000000000000000e154cd8445974b26c933f7ffffffffe4fbffffff55bb2007ee51050512b5b42128aa090a79507df79f298129daa7a6b2f91af50342115e17392ac627c87881c000006146001e04aeacea799a22a2fa798b5adc43eb27d53319d0ad229e5752548300000000dbc2777df150b7cdd77b85b941092314fd085f028f2ed1a4535550614e09d6378198a6097a670838337af2abd55a87ac0394b2f92ffab7d153d62058d0a413b2173619ccf55520f22c9ca8b6712f3024b7041b1df65b3efd9af115646d14ce53d13d0ccacda1ef0900094fa737c28b99938512c816fdcceaede3faedc51d29a47fc813a2ec00f4c7a53ac271d6d7f4ea6bf97f2f33e2ea2e534300bcb3fdc4b4861004eefbda7f54f82a804da4f85db47a4a69bf9bc5fa96ee293fbd165a5a68488e40b030166565a097b1b44b451de736bb6d43db8db03d4b7745fef1d04ec633dee254a6d491b849a5a787e814c4fd21a18986252a70f8f92eb6f0e8c7db4bf23242a1f2c28159f09943b1b0452d1b72183aacf4a84f9130b775dd4e9e3070756f97ad791fa99dac06b57479321a0574fb30ff0000001989328c8ddc20ea011bf5742e0e0d4334db8b0600000016cb7fc20fb4791ec85823d0c48fb657c29b309c73f0977e7cde65a82b94c461d7962b0d2277a84af326f37f3e2c25a61ec45c3af97a8f17da954aff3fc8c108755f75ca13fb7c8bbd8b6e7dac1aba4b20dc7de058a4dfa7e85a8bdf1d41a2d8bda74d66f47cc180f82c5f573c6d394d3665016ac59dda0fde4745db06753a7ac74a2d32f7528751313694bf5700b20ef0c248ddd3da32396a614cacad4aff2066bb5d4045c958559b7dcb98a6273b8c651e24d9f679e4fbe948dfb4cc4a389469608241730459f0123fd39206000000000000eb55dad46de56ef907b059b90b8aa49afb9a79ae5498f6589880ed6eea7f9c670012be05e7de0940313c5870786554df26236ebced9390cb6941b8375d936a7d2120eca291963eb2d537d8ee4de5c183c960119451c31539b22809e1d7f0cda06a9fa87d64cb77872a2cd8a104e16bb1a2ba9c29faa38c409d32b6b7d6cf13464ca03aff14a9aa4bd9539f5096412b92012e095b84c20243ff98df3347f0e399d1b9f27e3c33269c0e153b28b2d4410572bc45b9d3fa02208d304d455c36300000000022320178b00cc6ed7966130b547dbf8b497af002000000cd1d00000020000000ef19349ee7f31abc11c800000000000000000000000928ee53595a779d243a48cea769470424d2889ac04b2c4324ab7f4a5c81921f0128dfd70b438af60b060000000000000056642b49b745f3bf2cf7908b6d7d748308eea09fc361b4735efbf3411718d6ee7aebf9ef679dbfae9fb4a79f8a836804ed3a1079b0282a12043408cd60b687dcff91af19010000000000000000456f7d2a42bd13da202274f20675eb781925441578e93046aaddea8ec4ca37f71c2710a7ea8ae0dc214e1cc275b26adfa892e6de92000000000000000000ddff004cff9ec7ffff35e62f4eeee50e5bafecea4d4134f9d006c8d6883eca5c9c58c9e933119c5009c68c73de2f04f15d005387577f480000ea65559eb00e76e9d0ada201bcbb5c252b28a60ca770663da451790cc30000000000000000c308e39bd5ffb6151d79c1cee1cd102e3c8e63e9fba05e3633be3f00000015762e5f5a3a0bc33fdbe28a5ffc83f2b485185cc92fe7f791e8f6429309d6adab4b7e508e5bf024ed8f8a005f2bbf96c89739f5cf1e750d50517a59a3ad09e8802e8f4f535447cc0fc9d5f99a73145dfcedad69da9cd4375c624600e78f4458542b14f29611f95d4a31838eeb20c20ba82aa31771cd379ec83554cea5e6539db7384e1f58d81f2f2653c4d9818709e27c89b552d7fcd116bce9c764c714c9402c21d181aac59efb28d4f91652f6750b6ec962802c0320f8059195729d60c534ee8e8ff0755b67fe4c25edb85bcff24c757aa8090000000000008c420eb4304f66e3a37aaf000000c42a570f0e9dd5fd545470f862f8c3c14fa9ecd1e877b0d8ca84c044859e85e6158f9174327d82761c26e329555f9290af4100000000000000749efd3763655500344bae34137f5ab0d534b8d63e4ca3b671f2de1cdf519192c6b59a601fd419adc16e2055b85058f793484305d7a1759782e4c571ee855a47bc00edf5e9020c09ab004321610b857e8717764b633b21cb32f0e03280e09758bd445ab91d20baca005452b79d7b574a247fa62fe45b3c4e93da3d51de647c10dd49944dc87c92332af00f191b66b6a6f732a91f0e2e9120bed64069dcf82d3e5e0361e58c79d497247d278888901d442ad7f8536605a644e9e3d769db497c3960dfde12182334caee994adc38a436367a54b9e182b78e9a0ceb9a2c4f63902c1ad1a7c5a08d0920a23c2a86abbdf357849a651733e57f31019876026888c8ccb85c86b4f8ffffff7f000000002c331fca0e541b7ca211c28ed61c525708a13d115b43f8b1894c8fa8a1000000002100000000000000000001000027c9a46157a3609b6fd9843ee19ec647249a9375de5858818f3c4a4fa6ce46f4d42b07199de8b99231ace58c77819ee214e49666c464d35ca9b5143ed3b3dc8c17a23692759ccf5a205311b7ab22532697b861dfb54609fd88e6043bd52ae84c1bb0c8a6c769f952283a1f4e3842edb3d42c68a27ef6a1296dfff4a979369b0e8ebc62887aa46e824d86869ec4ab392b0a74f91381dcc198e353047db70686d147357024eb3cb94f1e89cb5ba0a56aa046b4dc521a3d9356b4b8b5917c4c860495b240e80063bde261fd00000000007271e28ef6806bc8e139c49b91c76bea3858f78fbd8d31330d89069f9648a2ff93060ff073b3a113e47edf76f7d116d2b0976cf2ec527c030931651dd315003b7a6a5433a2bb3c035fc6846abe389b25c988f0bbb889560ae99ec4b227eda2e63a1c31a2c2bd48a822cbe92b6524e0cd8020ecaa34e19e7141d5e221509342bfe7d294d1eb3de6a50ca0301f89c2ee627e949c68b3a4a412a9b7d503a26e9a714ee5f72d8805dd1bfbd081f6a5d1f128ddfe14cb9194e26a44fac273461fc5c0e0a33db7f2d43ea8086cf059f40fa2640b6bfb74dd35f5a31059c01517cf4b6641fce9a24b96767b837ca037a1199735c375c705c798e0e208e4a5259d0bfa526b462af45a6eab34000000000000000000000000c4426344ec1a3366515dee221e747f55d7dd02534bc503b9b28277c253e410986bef2111a99cc448d652929f8a67a6a1d3f00dcad91aff428aade3f85714a1d3ef29acd4d49b62339c10c2ec0daca8d4c1090000000000000084d8223edbccbf9258b7374e79a1f8bf3fb73c8c6dbb7bbdfc399847a11921f97eba0ea14c4fed9a71eedb97c02461792e3a49dac16c60c3fcaab222025d78963c3ac899fa8b63f58a30212c9b2d7fe751e2046b78f86e22861b6504c667350244dd6d9189a8b9c45f8aaff9db694811ca86ed978f23eed7459c0382074170cf1e25b0e9ba3d1cc309353eea4cd8ab96bafda393276bdd8d32ead8db9e1b54d2d3d50e2815268fc1a6ec566981bc8ca2a4583f3d40e817433d0f4f25cfe6cc1897449ba5f26a9d66ac73e6f5c401376f23a314e0b9ff997d22f3e34b7524642c248aa813edaa626f0000000000000000004f9e02a3b51a97c4b1c1b411cc6bee2a56f29c55a6aac45f0cfc318fae02922a403431d4e5a4396cad2c8dd34037bc041a2ba1505ba2c4889122ca04e85881aad5f8bfc12e6741872aad21bf5301cd4c607ef50a991c410f7c60e45b5c193f813a36d841165b91b5e170f6ba24558df57145eb8142a6ed87c6d5cbae3e52d569996604669a6e9ca1a3689c795970b4bcd00881faff52a6766fafa07ed7d4a49f47d34fd76a394adcb33a270b6a14e74bca7c2ea92dd845d3f774fde1bbea911c1ea76d52f7912e2597e6a33380647ed44956730b5b84662b8e659124379c0d86b1d28fdfa3cd2013103e3048c4ad4f5a4dcd133b2fc8fae3b51e4433cee7c08e67c7d7ed4432045e10f8718e5c163b1704fa2c707b61a1a9f63edfceff1a0cd7baf4a15b2fd607a09d398d73243bdcc664fbd5f582e48af2a18b02f0184a7bdd95ac78241e6749e74b152702333c56588375f806f10578eaae329c4f8dfb83e5524e2c9aa59ce7828bd1f146b2a4150fb2a8ced08e2ffac81e921e8a6f0071361a0acdbd125fb5f5e9ffe98e38509582a496afd30ca460dbfca77915a18b7b9ef6c1d6e13bc12fe43063cfecfafb05bf2339ad61533fbf3e410b403182742fa2d40c402cb83c2fef46a36f17c1abf97b0e2d114bd1472ab4207aa060f9e5d91c4a4911b1a1df47b858be141ab3386f26f561df35678489dc1b9f10eee1b2ab3dfdaedd7e06ff8a127f1743fcb32d7f80d40aebc1ea72edc348f5f9ba4bace97db948c24c679c6d6e7c9d49db1b2a6082bb0e8b013bd1ee3612cd43cd2a3cb83754bb34081599ce2a33600d4120353e477237c1dcf66b6a353aa1832d60179da56951d2b77e91c3e73fc7285d1ed2722a30c10f9cfd4a20ae6dc32f5d90a9290b393daff597ad7d5d3e5a73b25002ad928c92bd3d1be2444ff00f6b7719f06ddca6b48db95a746032d5ca0d4c460bb30a43ed735504192cb6ce50eed19a552101cb7bbf82c4924e2a862bd51ebaeb8e15e5428a87b56b81eff64a75baf33ae2b67b55a724cbbe788a8d8ece234a81e90186aca593260d559c0cb2f2be882288db291b231b8d"], &(0x7f0000000140)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x8, &(0x7f00000001c0), 0xfffffedf, 0x10, &(0x7f0000000040), 0xffffff95, 0x0, 0xffffffffffffffff, 0xd}, 0x48) r1 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r1, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000001f00)=ANY=[@ANYBLOB="20010000410007012cbd7000fddbdf25037c00000400c28008010180040110801400080000000000000000000000000000000001ec000f"], 0x120}, 0x1, 0x0, 0x0, 0x28040000}, 0xc000) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000180)={r0, 0x0, 0xe, 0x0, &(0x7f0000000200)="63eced8e46dc3f0aff0000f7b986", 0x0, 0x9ffc, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x50) 625.587652ms ago: executing program 1 (id=3374): ioctl$BTRFS_IOC_QUOTA_RESCAN_STATUS(0xffffffffffffffff, 0x8040942d, &(0x7f0000000000)) syz_genetlink_get_family_id$gtp(&(0x7f0000000040), 0xffffffffffffffff) r0 = socket$inet6(0xa, 0x2, 0x9) r1 = socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$smc(&(0x7f0000000080), r1) r2 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000100), r1) sendmsg$NL80211_CMD_RADAR_DETECT(0xffffffffffffffff, &(0x7f0000000200)={&(0x7f00000000c0)={0x10, 0x0, 0x0, 0x8}, 0xc, &(0x7f00000001c0)={&(0x7f0000000140)={0x5c, r2, 0x100, 0x70bd2d, 0x25dfdbff, {{}, {@void, @void}}, [@NL80211_ATTR_WIPHY_FREQ_OFFSET={0x8, 0x122, 0x1d4}, @NL80211_ATTR_WIPHY_FREQ_OFFSET={0x8, 0x122, 0x48}, @NL80211_ATTR_WIPHY_EDMG_CHANNELS={0x5, 0x118, 0x10}, @NL80211_ATTR_CHANNEL_WIDTH={0x8, 0x9f, 0x2}, @NL80211_ATTR_CENTER_FREQ1={0x8, 0xa0, 0xfffffffe}, @NL80211_ATTR_WIPHY_CHANNEL_TYPE={0x8, 0x27, 0x2}, @NL80211_ATTR_CHANNEL_WIDTH={0x8, 0x9f, 0x6}, @NL80211_ATTR_CENTER_FREQ1={0x8, 0xa0, 0x3}, @NL80211_ATTR_WIPHY_CHANNEL_TYPE={0x8}]}, 0x5c}, 0x1, 0x0, 0x0, 0x800}, 0x80c0) sendmsg$TIPC_NL_KEY_FLUSH(r1, &(0x7f00000003c0)={&(0x7f0000000240)={0x10, 0x0, 0x0, 0x2040002}, 0xc, &(0x7f0000000380)={&(0x7f0000000280)={0xe0, 0x0, 0x200, 0x70bd28, 0x25dfdbff, {}, [@TIPC_NLA_SOCK={0x4c, 0x2, 0x0, 0x1, [@TIPC_NLA_SOCK_CON={0x44, 0x3, 0x0, 0x1, [@TIPC_NLA_CON_NODE={0x8, 0x2, 0x186}, @TIPC_NLA_CON_NODE={0x8, 0x2, 0x2}, @TIPC_NLA_CON_NODE={0x8, 0x2, 0x5}, @TIPC_NLA_CON_FLAG={0x8, 0x1, 0x4}, @TIPC_NLA_CON_FLAG={0x8, 0x1, 0x1}, @TIPC_NLA_CON_FLAG={0x8, 0x1, 0x7fffffff}, @TIPC_NLA_CON_FLAG={0x8}, @TIPC_NLA_CON_NODE={0x8, 0x2, 0x7}]}, @TIPC_NLA_SOCK_HAS_PUBL={0x4}]}, @TIPC_NLA_MON={0x1c, 0x9, 0x0, 0x1, [@TIPC_NLA_MON_REF={0x8, 0x2, 0x1}, @TIPC_NLA_MON_REF={0x8, 0x2, 0x8000}, @TIPC_NLA_MON_ACTIVATION_THRESHOLD={0x8, 0x1, 0x9}]}, @TIPC_NLA_LINK={0x10, 0x4, 0x0, 0x1, [@TIPC_NLA_LINK_PROP={0xc, 0x7, 0x0, 0x1, [@TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x1b}]}]}, @TIPC_NLA_NET={0x54, 0x7, 0x0, 0x1, [@TIPC_NLA_NET_NODEID_W1={0xc, 0x4, 0x8}, @TIPC_NLA_NET_ID={0x8, 0x1, 0x1000}, @TIPC_NLA_NET_NODEID_W1={0xc, 0x4, 0x80000001}, @TIPC_NLA_NET_ID={0x8, 0x1, 0x9}, @TIPC_NLA_NET_NODEID={0xc}, @TIPC_NLA_NET_ADDR={0x8, 0x2, 0x4}, @TIPC_NLA_NET_ID={0x8, 0x1, 0x4}, @TIPC_NLA_NET_NODEID_W1={0xc, 0x4, 0x8000000000000000}]}]}, 0xe0}, 0x1, 0x0, 0x0, 0x20000040}, 0x4844) r3 = socket$nl_generic(0x10, 0x3, 0x10) r4 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000440), r1) sendmsg$NL80211_CMD_UPDATE_FT_IES(r3, &(0x7f0000000600)={&(0x7f0000000400)={0x10, 0x0, 0x0, 0x40000}, 0xc, &(0x7f00000005c0)={&(0x7f0000000480)={0x140, r4, 0x400, 0x70bd2b, 0x25dfdbfd, {{}, {@void, @val={0xc, 0x99, {0xa8d, 0x51}}}}, [@NL80211_ATTR_IE={0xfe, 0x2a, [@preq={0x82, 0x62, {{0x0, 0x1, 0x0, 0x0, 0x1}, 0xd8, 0x9, 0x2cd2, @device_b, 0xa, @value, 0x2, 0x7, 0x6, [{{0x0, 0x0, 0x1}, @device_a, 0x7}, {{}, @device_b, 0x5}, {{}, @broadcast, 0x6}, {{}, @broadcast, 0x81}, {{}, @device_a, 0x85}, {{}, @device_b, 0x8001}]}}, @measure_req={0x26, 0x67, {0xe7, 0x16, 0x92, "2c9e5372f3b36b0e08c1a50b2ff6ab1f4ed023188b248cb713b7f037fb20343b6217d420770212bdf63b47cfee2ee967ffc7fd00534d7ccd18144bda9943c5bb01161b80a74fa6ab43e91894bb19f48f5e42d32035cd8eae7fb03623717d7ae84c0f5aff"}}, @prep={0x83, 0x25, {{0x0, 0x1}, 0xa5, 0xbd, @device_a, 0x0, @value, 0x7, 0x9, @device_b, 0xe}}, @sec_chan_ofs={0x3e, 0x1, 0x1}, @challenge={0x10, 0x1, 0xa6}]}, @NL80211_ATTR_IE={0xa, 0x2a, [@ext_channel_switch={0x3c, 0x4, {0x0, 0x8, 0xac, 0x9}}]}, @NL80211_ATTR_MDID={0x6, 0xb1, 0x8}, @NL80211_ATTR_IE={0xa, 0x2a, [@chsw_timing={0x68, 0x4, {0xb73, 0x47}}]}]}, 0x140}, 0x1, 0x0, 0x0, 0x800}, 0x20000) sendto$phonet(0xffffffffffffffff, &(0x7f0000000640)="ab4522b6b166cbacbef00405ad26f5e91ab51f4cb503a30bf94ab683193048020db472c00c9eee8e11b76ceb7a27b548bb79884db5648cf144538f9f49b0c061b83aba52fdd48687578610bef794f7a6348540060e8b65f4b9d5da2da0c8f0dc56013ec96cbf992927caebcb07f7408565dc91adc66692702b2149829352ddab07019323ce616d8d522375fe75a2c26fafdf991a280f4e7b995c71fb340fe9ea", 0xa0, 0x80, &(0x7f0000000700)={0x23, 0x0, 0x8, 0x8}, 0x10) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f0000000780)={'wlan1\x00', 0x0}) sendmsg$NL80211_CMD_JOIN_IBSS(r3, &(0x7f0000000880)={&(0x7f0000000740)={0x10, 0x0, 0x0, 0x2000}, 0xc, &(0x7f0000000840)={&(0x7f00000007c0)={0x54, r4, 0x800, 0x70bd2a, 0x25dfdbfb, {{}, {@val={0x8, 0x3, r5}, @val={0xc, 0x99, {0xffffffff, 0x47}}}}, [@NL80211_ATTR_MAC={0xa, 0x6, @random="c3e7e938e797"}, @NL80211_ATTR_CONTROL_PORT={0x4}, @NL80211_ATTR_SOCKET_OWNER={0x4}, @NL80211_ATTR_MESH_CONFIG={0x14, 0x23, 0x0, 0x1, [@NL80211_MESHCONF_HOLDING_TIMEOUT={0x6, 0x3, 0x78}, @NL80211_MESHCONF_AWAKE_WINDOW={0x6, 0x1b, 0x5}]}, @NL80211_ATTR_FREQ_FIXED={0x4}]}, 0x54}, 0x1, 0x0, 0x0, 0x4040011}, 0x24044890) setsockopt(r3, 0xed76, 0x5, &(0x7f00000008c0)="6ab1cc7e03a6e0c49cb45d40515e667569bf70022d15e840239956329f36b63625056a19d9ac5b52c112ca5e8609588b11090f794bf5d38f8cb5489c286deb5491924e90c2f847de4f12f26bdb9772cd41237cdbc8c7f2a90fc796059f162c0c51b8ad96ad914ceca854a4224413ed4e1fddf200f3aa555b1a52f5235c2242d0a7a7b8ba08d0d2cdbd9f14a05d426c33f9ef222fbaa9b5ffc0d07a79c2f6d0997dc070709fc7bad4885f72df4e836087d6bc87c7c2fdc903586af71a916f503f86405aaa0dc8460923beddd9791e7129dc147aed31862f22f1caa8c96fba6357c7e5dbbfd98c94d1bf6b2abb2c892cdbcf73f9c109c1", 0xf6) sendmsg$NL80211_CMD_SET_TX_BITRATE_MASK(r3, &(0x7f0000000d40)={&(0x7f00000009c0)={0x10, 0x0, 0x0, 0x1}, 0xc, &(0x7f0000000d00)={&(0x7f0000000a00)={0x2f0, r2, 0x20, 0x70bd2b, 0x25dfdbfe, {{}, {@void, @void}}, [@NL80211_ATTR_TX_RATES={0x1a4, 0x5a, 0x0, 0x1, [@NL80211_BAND_5GHZ={0x6c, 0x1, 0x0, 0x1, [@NL80211_TXRATE_HE={0x14, 0x5, {[0x8, 0xaef8, 0x2d, 0x1, 0x3, 0x400, 0x2, 0xff]}}, @NL80211_TXRATE_HE_GI={0x5}, @NL80211_TXRATE_VHT={0x14, 0x3, {[0xc473, 0x9f9, 0x9, 0x7, 0x2557, 0x0, 0x3, 0x7]}}, @NL80211_TXRATE_HE={0x14, 0x5, {[0xff3b, 0x10, 0x9, 0x2, 0xd, 0x9, 0xf0, 0x8]}}, @NL80211_TXRATE_LEGACY={0x23, 0x1, [0x30, 0x4, 0x60, 0xdbe81ccd37a8b896, 0x36, 0x5, 0x3, 0x30, 0x1b, 0x24, 0x4, 0x5, 0x3, 0x60, 0x60, 0xc, 0x18, 0x16, 0x5, 0x9, 0x5, 0x6c, 0x0, 0x60, 0x18, 0x60, 0x12, 0x18, 0xc, 0x1b, 0x53]}]}, @NL80211_BAND_60GHZ={0x88, 0x2, 0x0, 0x1, [@NL80211_TXRATE_HT={0x22, 0x2, [{0x0, 0x2}, {0x3, 0xa}, {0x4}, {0x1, 0x6}, {0x2, 0x6}, {0x0, 0x8}, {0x4}, {0x0, 0x5}, {0x3, 0x6}, {0x2, 0xa}, {0x2}, {0x2, 0x3}, {0x3, 0x2}, {0x5, 0x4}, {0x2, 0x1c}, {0x0, 0x7}, {0x4, 0x6}, {0x4, 0x6}, {0x4}, {0x6, 0x4}, {0x6, 0xa}, {0x3, 0x1}, {0x1, 0x2}, {0x2, 0x7}, {0x1}, {0x3, 0xa}, {0x5, 0x4}, {0x0, 0x3}, {0x6, 0x8}, {0x7, 0x5}]}, @NL80211_TXRATE_HT={0x37, 0x2, [{0x6, 0x7}, {0x4, 0x9}, {0x5, 0x2}, {0x0, 0x4}, {0x2, 0x6}, {0x4, 0x8}, {0x7}, {0x6, 0x1}, {0x6, 0x1}, {0x0, 0x5}, {0x1}, {0x6, 0x6}, {0x1, 0x5}, {0x6, 0x1}, {0x0, 0x5}, {0x5, 0x8}, {0x0, 0xa}, {0x6, 0x3}, {0x3, 0x8}, {0x2, 0x3}, {0x7, 0x7}, {0x3}, {0x0, 0xa}, {0x3, 0xa}, {0x3, 0x3}, {0x1, 0x5}, {0x2, 0x7}, {0x5, 0x3}, {0x6, 0x8}, {0x6, 0x2}, {0x1, 0x4}, {0x7, 0x9}, {0x6, 0x5}, {0x0, 0xa}, {0x4, 0x6}, {0x2, 0x2}, {0x5, 0x9}, {0x1, 0xa}, {0x0, 0x5}, {0x0, 0x5}, {0x1, 0x7}, {0x1, 0x9}, {0x5, 0x4}, {0x0, 0x5}, {0x2, 0x9}, {0x2, 0x2}, {0x4}, {0x0, 0x7}, {0x2, 0x6}, {0x5, 0x9}, {0x1, 0x9}]}, @NL80211_TXRATE_LEGACY={0x11, 0x1, [0x3, 0x48, 0x0, 0x5, 0xb, 0x6c, 0x6, 0x6c, 0x4, 0x4, 0x4, 0xb, 0x6c]}, @NL80211_TXRATE_VHT={0x14, 0x3, {[0x5, 0x4, 0x200, 0x3, 0xeb, 0x100, 0x40]}}]}, @NL80211_BAND_60GHZ={0xac, 0x2, 0x0, 0x1, [@NL80211_TXRATE_HE_LTF={0x5}, @NL80211_TXRATE_HE={0x14, 0x5, {[0x48fc, 0x1, 0xfff5, 0x401, 0x60b, 0x9, 0x7, 0x21d]}}, @NL80211_TXRATE_HT={0x3e, 0x2, [{0x5, 0x7}, {0x1, 0x6}, {0x0, 0x6}, {0x5, 0x5}, {0x4}, {0x0, 0x7}, {0x4}, {0x6, 0x4}, {0x1, 0x1f}, {0x0, 0x4}, {0x7}, {0x1, 0x5}, {0x2, 0x6}, {0x5, 0x4}, {0x0, 0x5}, {0x1, 0x2}, {0x7, 0x1}, {0x2, 0x1}, {0x0, 0xa}, {0x4}, {0x6}, {0x1, 0x9}, {0x0, 0x4}, {0x2, 0x3}, {0x5, 0x7}, {0x2, 0x8}, {0x4, 0x9}, {0x6, 0x7}, {0x3, 0x9}, {0x2, 0x6}, {0x5}, {0x0, 0x8}, {0x0, 0x6}, {0x4, 0x6}, {0x1, 0x9}, {0x3, 0x6}, {0x4, 0x3}, {0x6, 0x8}, {0x6, 0xa}, {0x0, 0x7}, {0x1, 0x4}, {0x1, 0x8}, {0x0, 0x7}, {0x3}, {0x1, 0x6}, {0x1, 0x3}, {0x4, 0xa}, {0x7, 0x9}, {0x6, 0x1}, {0x0, 0x5}, {0x5, 0x7}, {0x3, 0x7}, {0x7, 0x5}, {0x2, 0x7}, {0x7, 0x4}, {0x5, 0x8}, {0x3, 0xa}, {0x0, 0x9}]}, @NL80211_TXRATE_HE_LTF={0x5}, @NL80211_TXRATE_GI={0x5, 0x4, 0x2}, @NL80211_TXRATE_VHT={0x14, 0x3, {[0x2, 0xff, 0x7f, 0x9, 0x304c, 0xd58, 0x2, 0x82]}}, @NL80211_TXRATE_LEGACY={0x1d, 0x1, [0x16, 0x24, 0x16, 0x9, 0xc, 0x3, 0x24, 0x9, 0x5, 0x2, 0x0, 0x5, 0x48, 0x9, 0x6, 0x30, 0x16, 0x64, 0x24, 0x5, 0x1, 0x36, 0x4, 0x12, 0x4]}, @NL80211_TXRATE_HE_GI={0x5, 0x6, 0x2}]}]}, @NL80211_ATTR_TX_RATES={0xa4, 0x5a, 0x0, 0x1, [@NL80211_BAND_60GHZ={0x48, 0x2, 0x0, 0x1, [@NL80211_TXRATE_GI={0x5}, @NL80211_TXRATE_VHT={0x14, 0x3, {[0x9, 0x9, 0xfff9, 0x7, 0x6, 0xfffd, 0x8, 0x2]}}, @NL80211_TXRATE_VHT={0x14, 0x3, {[0xffff, 0x97ec, 0x3, 0x3ff, 0x7, 0x7, 0xff, 0xaf6c]}}, @NL80211_TXRATE_HT={0x12, 0x2, [{0x5, 0x8}, {0x1, 0x8}, {0x0, 0x1}, {0x5, 0x2}, {0x4, 0x4}, {0x3, 0x5}, {0x4, 0x2}, {0x3, 0x6}, {0x7, 0x3}, {0x1, 0x6}, {0x3, 0x5}, {0x7, 0x9}, {0x3}, {0x5, 0x9}]}]}, @NL80211_BAND_2GHZ={0x30, 0x0, 0x0, 0x1, [@NL80211_TXRATE_GI={0x5}, @NL80211_TXRATE_GI={0x5}, @NL80211_TXRATE_GI={0x5, 0x4, 0x2}, @NL80211_TXRATE_HE={0x14, 0x5, {[0xfff0, 0x2ee8, 0x0, 0xa, 0x2, 0x7, 0x6, 0xce3]}}]}, @NL80211_BAND_60GHZ={0x28, 0x2, 0x0, 0x1, [@NL80211_TXRATE_HT={0x19, 0x2, [{0x0, 0x1}, {0x6, 0x5}, {0x0, 0x8}, {0x5, 0x5}, {0x6, 0x2}, {0x5, 0x3}, {0x0, 0x3}, {0x3, 0x6}, {0x4, 0x3}, {0x2, 0x5}, {0x0, 0x5}, {0x3, 0xa}, {0x1, 0x9}, {0x4, 0x5}, {0x0, 0x4}, {0x4, 0x6}, {0x3, 0x9}, {0x3, 0x1}, {0x5, 0xa}, {0x0, 0x8}, {0x2, 0x3}]}, @NL80211_TXRATE_GI={0x5, 0x4, 0x2}]}]}, @NL80211_ATTR_TX_RATES={0x94, 0x5a, 0x0, 0x1, [@NL80211_BAND_5GHZ={0x90, 0x1, 0x0, 0x1, [@NL80211_TXRATE_HE_GI={0x5, 0x6, 0x2}, @NL80211_TXRATE_HE_GI={0x5}, @NL80211_TXRATE_LEGACY={0xe, 0x1, [0x2, 0xb, 0x18, 0xb, 0x30, 0x9, 0x4, 0x16, 0x1, 0xb]}, @NL80211_TXRATE_HE_GI={0x5, 0x6, 0x1}, @NL80211_TXRATE_GI={0x5, 0x4, 0x1}, @NL80211_TXRATE_LEGACY={0x1c, 0x1, [0x48, 0x6, 0xb, 0x9, 0x6, 0x36, 0x1b, 0x2, 0xb, 0x5, 0x18, 0x9, 0x4, 0x16, 0x6c, 0x36, 0x5, 0x12, 0x18, 0x0, 0x9, 0x12, 0x60, 0x3]}, @NL80211_TXRATE_GI={0x5, 0x4, 0x1}, @NL80211_TXRATE_LEGACY={0x1a, 0x1, [0x30, 0x24, 0x16, 0x67, 0x9, 0xb, 0xc, 0x48, 0xb, 0x24, 0x6c, 0x24, 0x36, 0x12, 0x6, 0x1b, 0x30, 0x1b, 0x36, 0x2, 0x3, 0x60]}, @NL80211_TXRATE_HE={0x14, 0x5, {[0x6, 0x5, 0x8, 0x8, 0xfdb, 0x9, 0x1ff, 0x80]}}, @NL80211_TXRATE_HE_LTF={0x5}]}]}]}, 0x2f0}, 0x1, 0x0, 0x0, 0x20000000}, 0x1) setsockopt$inet_sctp6_SCTP_ADAPTATION_LAYER(r0, 0x84, 0x7, &(0x7f0000000d80)={0x101}, 0x4) sendto$inet6(r0, &(0x7f0000000dc0)="894bd4f115aee554c28e933412b192a126f35208e83e25d0e5c63fef569d1ebceaf05e240fd00e094c434a83b4752689fc1ed22fd1d7a05d54cb45205331586111004c3832920c28131afe6f573139ac247316dbd574af590d2038b0166da5fc80603a3e66e2a312f1bcbc6f7a727beb8a9e2079", 0x74, 0x8000, &(0x7f0000000e40)={0xa, 0x4e24, 0x9a, @rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x01', 0x4}, 0x1c) sendmsg$NL80211_CMD_JOIN_MESH(r3, &(0x7f0000000f80)={&(0x7f0000000e80)={0x10, 0x0, 0x0, 0x10000000}, 0xc, &(0x7f0000000f40)={&(0x7f0000000ec0)={0x54, r2, 0x800, 0x70bd29, 0x25dfdbfd, {{}, {@void, @void}}, [@NL80211_ATTR_TX_RATES={0x38, 0x5a, 0x0, 0x1, [@NL80211_BAND_60GHZ={0x34, 0x2, 0x0, 0x1, [@NL80211_TXRATE_HE_LTF={0x5, 0x7, 0x1}, @NL80211_TXRATE_HT={0x28, 0x2, [{0x4, 0x9}, {0x7, 0x4}, {0x0, 0x1}, {0x1, 0x9}, {0x3, 0x3}, {0x6, 0x1}, {0x4, 0x8}, {0x3, 0xa}, {0x0, 0x1}, {0x4, 0x8}, {0x5, 0x2}, {0x2, 0x7}, {0x2, 0x5}, {0x1, 0x9}, {0x0, 0x4}, {0x4, 0x1}, {0x2, 0xa}, {0x7, 0x1}, {0x1, 0x4}, {0x0, 0x6}, {0x6, 0x1}, {0x3, 0x8}, {0x5, 0x6}, {0x5, 0x8}, {0x1, 0x1}, {0x1, 0x7}, {0x7, 0xa}, {0x5, 0x3}, {0x1, 0x8}, {0x6, 0x1}, {0x0, 0x4}, {0x4, 0x2}, {0x2, 0x8}, {0x5, 0x1}, {0x1, 0x6}, {0x4, 0x3}]}]}]}, @NL80211_ATTR_DTIM_PERIOD={0x8, 0xd, 0x2}]}, 0x54}, 0x1, 0x0, 0x0, 0x44010}, 0x2800) sendmsg$L2TP_CMD_SESSION_DELETE(r3, &(0x7f00000010c0)={&(0x7f0000000fc0)={0x10, 0x0, 0x0, 0x80000000}, 0xc, &(0x7f0000001080)={&(0x7f0000001000)={0x58, 0x0, 0x300, 0x70bd2a, 0x25dfdbfb, {}, [@L2TP_ATTR_UDP_SPORT={0x6, 0x1a, 0x4e20}, @L2TP_ATTR_MTU={0x6, 0x1c, 0x8001}, @L2TP_ATTR_UDP_CSUM={0x5, 0xd, 0x1}, @L2TP_ATTR_SEND_SEQ={0x5, 0x13, 0x4}, @L2TP_ATTR_DEBUG={0x8}, @L2TP_ATTR_RECV_TIMEOUT={0xc, 0x16, 0x9c}, @L2TP_ATTR_DATA_SEQ={0x5, 0x4, 0xff}, @L2TP_ATTR_DEBUG={0x8, 0x11, 0x1}]}, 0x58}, 0x1, 0x0, 0x0, 0x8004}, 0x4000050) ioctl$BTRFS_IOC_DEV_INFO(0xffffffffffffffff, 0xd000941e, &(0x7f0000001100)={0x0, "72678259349791e6293571778c4b2148"}) ioctl$BTRFS_IOC_BALANCE_PROGRESS(r0, 0x84009422, &(0x7f0000002100)={0x0, 0x0, {0x0, @struct}, {0x0, @struct, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @struct}, {0x0, @struct, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @struct}}) ioctl$BTRFS_IOC_DEV_INFO(r3, 0xd000941e, &(0x7f0000002500)={0x0, "c5d452c5fa914fa855d041494bb95163"}) ioctl$BTRFS_IOC_BALANCE_V2(r3, 0xc4009420, &(0x7f0000003500)={0x15, 0x2, {0x5, @struct={0x10001, 0x6}, r6, 0x2, 0x4, 0x5, 0x100000001, 0xd70, 0x42c, @usage, 0x1000, 0x8, [0xa4410000000, 0x10, 0x8, 0x7, 0x5, 0xe353]}, {0xc1b4, @usage=0xc, r7, 0x5, 0x7, 0x6, 0x2, 0x0, 0x24, @struct={0x6, 0x401}, 0x10000, 0xfffffffb, [0xfee, 0x8, 0xe, 0x1, 0xd, 0x5]}, {0x5, @usage=0x6, r8, 0x0, 0x8, 0x4b53, 0x3, 0x80000001, 0x0, @usage=0xfffffffffffffff8, 0x6, 0x40000000, [0x2, 0x8, 0xffffffffffffffff, 0x4, 0xffffffff, 0x1]}, {0x4, 0x8, 0x6}}) socket$inet_mptcp(0x2, 0x1, 0x106) r9 = bpf$BPF_MAP_GET_FD_BY_ID(0xe, &(0x7f0000003900)={0x0, 0x0, 0x8}, 0xc) getsockopt$PNPIPE_IFINDEX(0xffffffffffffffff, 0x113, 0x2, &(0x7f0000003940)=0x0, &(0x7f0000003980)=0x4) r11 = bpf$BPF_BTF_LOAD(0x12, &(0x7f0000003ac0)={&(0x7f00000039c0)={{0xeb9f, 0x1, 0x0, 0x18, 0x0, 0x7d, 0x7d, 0x4, [@type_tag={0xe, 0x0, 0x0, 0x12, 0x5}, @var={0x3, 0x0, 0x0, 0xe, 0x1}, @datasec={0x10, 0x6, 0x0, 0xf, 0x1, [{0x4, 0xfff, 0xe1}, {0x1, 0x8, 0x8001}, {0x2, 0x8, 0x3}, {0x4, 0x1, 0x8}, {0x1, 0x4, 0x8}, {0x4, 0x8, 0x759}], "c7"}, @func={0x10, 0x0, 0x0, 0xc, 0x1}]}, {0x0, [0x5f, 0x5f]}}, &(0x7f0000003a80)=""/37, 0x9c, 0x25, 0x0, 0x8}, 0x28) bpf$MAP_CREATE(0x0, &(0x7f0000003b00)=@base={0x10, 0x6, 0x1, 0x6, 0x2000, r9, 0xa, '\x00', r10, r11, 0x5, 0x4, 0x5}, 0x50) sendto$inet6(r0, &(0x7f0000003b80)="aff397475532d6a414cd11640e15429aa8b9dff40b6422c5eaa375142960e273b165712435e1fab030fb860ee3755a0d223351522a52e35214aae093dec5af0d9d03a6a775beb4b767d8da8aa816263809fdd13b83f0783f4f6a981c3fdcd9a7760057b2732ff345040b17ea5d1fd527e0af20857cf00e7ac50b8b1f0fc87bbad92f2cebaacfbe78b814b792759dd689042dc3ab599243e2779dd37756fba59ee07f72ed", 0xa4, 0x4, &(0x7f0000003c40)={0xa, 0x4e23, 0x1000, @loopback, 0xf}, 0x1c) 551.234351ms ago: executing program 3 (id=3375): r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000180)=@base={0xb, 0x7, 0x10001, 0x9, 0x1, 0xffffffffffffffff, 0x3}, 0x50) r1 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r1, &(0x7f0000000100)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000340)={0x1c, 0x21, 0x9, 0x70bd27, 0x25dfdbff, {0x1}, [@typed={0x8, 0x8, 0x0, 0x0, @fd=r0}]}, 0x1c}, 0x1, 0x0, 0x0, 0x4040080}, 0x24000094) sendmsg$inet(r1, &(0x7f0000000380)={&(0x7f0000000000)={0x2, 0x4e24, @initdev={0xac, 0x1e, 0x1, 0x0}}, 0x10, &(0x7f00000002c0)=[{&(0x7f0000000200)="fe3a0e1efd4ed1c24054c925e491d12ba5220da443740ee310d5ddbdbfdecb48195bcb05be4cded33d208a6d37fc3259494939c6d8ded04d6fbc46e1b7ddc8de99e11e93763c1c5f0ff84cb31eddfd3f565ba308ce086dc7d227402b7e8e51cdb3024812b3a14cfe5c7818c9c835eb9c8ca484a95b27c5345fa48c1f900e7647eed365a00c98ed", 0x87}], 0x1, &(0x7f0000000300)}, 0x80) bpf$MAP_CREATE(0x0, &(0x7f0000000180)=@base={0xb, 0x7, 0x10001, 0x9, 0x1, 0xffffffffffffffff, 0x3}, 0x50) (async) socket$nl_generic(0x10, 0x3, 0x10) (async) sendmsg$nl_generic(r1, &(0x7f0000000100)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000340)={0x1c, 0x21, 0x9, 0x70bd27, 0x25dfdbff, {0x1}, [@typed={0x8, 0x8, 0x0, 0x0, @fd=r0}]}, 0x1c}, 0x1, 0x0, 0x0, 0x4040080}, 0x24000094) (async) sendmsg$inet(r1, &(0x7f0000000380)={&(0x7f0000000000)={0x2, 0x4e24, @initdev={0xac, 0x1e, 0x1, 0x0}}, 0x10, &(0x7f00000002c0)=[{&(0x7f0000000200)="fe3a0e1efd4ed1c24054c925e491d12ba5220da443740ee310d5ddbdbfdecb48195bcb05be4cded33d208a6d37fc3259494939c6d8ded04d6fbc46e1b7ddc8de99e11e93763c1c5f0ff84cb31eddfd3f565ba308ce086dc7d227402b7e8e51cdb3024812b3a14cfe5c7818c9c835eb9c8ca484a95b27c5345fa48c1f900e7647eed365a00c98ed", 0x87}], 0x1, &(0x7f0000000300)}, 0x80) (async) 502.815797ms ago: executing program 4 (id=3376): r0 = socket(0x10, 0x80002, 0x0) sendmsg$nl_route(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000100)={&(0x7f00000001c0)=ANY=[@ANYBLOB="1c0000005e00679a3601ffc4910700004f78d4c1a0731cccff"], 0x1c}}, 0x0) r1 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="04000000040000000400000005"], 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x1b, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r1, @ANYBLOB="0000000000000000b70800000000e7057b8af8ff00000000bf8200000000000007020000f8ffffffb703000008000000b704000000000000850000001600000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x9, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xe8c}, 0x94) r2 = bpf$PROG_LOAD(0x5, &(0x7f0000000800)={0x6, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, @fallback=0x4, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000000)={r2, 0x2000000, 0xe, 0x0, &(0x7f00000004c0)="630b008646dc3f0adf33c9f7b986", 0x0, 0x1ff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x2}, 0x50) r3 = socket$inet6_sctp(0xa, 0x1, 0x84) sendmmsg$inet6(r3, &(0x7f0000001c80)=[{{&(0x7f0000000240)={0xa, 0x4e21, 0x1, @private0, 0x3}, 0x1c, &(0x7f00000003c0)=[{&(0x7f0000000440)="14", 0x1}], 0x1}}], 0x1, 0x931766f6319eed40) shutdown(r3, 0x1) getsockopt$bt_hci(r3, 0x84, 0x80, &(0x7f0000002100)=""/4127, &(0x7f0000000000)=0x101f) recvmmsg$unix(r0, &(0x7f0000000000)=[{{0x0, 0x0, &(0x7f0000001340)=[{&(0x7f0000001380)=""/4096, 0x1041}], 0x1}}], 0x14, 0x0, 0x0) socket(0x10, 0x80002, 0x0) (async) sendmsg$nl_route(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000100)={&(0x7f00000001c0)=ANY=[@ANYBLOB="1c0000005e00679a3601ffc4910700004f78d4c1a0731cccff"], 0x1c}}, 0x0) (async) bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="04000000040000000400000005"], 0x48) (async) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x1b, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r1, @ANYBLOB="0000000000000000b70800000000e7057b8af8ff00000000bf8200000000000007020000f8ffffffb703000008000000b704000000000000850000001600000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x9, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xe8c}, 0x94) (async) bpf$PROG_LOAD(0x5, &(0x7f0000000800)={0x6, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, @fallback=0x4, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) (async) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000000)={r2, 0x2000000, 0xe, 0x0, &(0x7f00000004c0)="630b008646dc3f0adf33c9f7b986", 0x0, 0x1ff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x2}, 0x50) (async) socket$inet6_sctp(0xa, 0x1, 0x84) (async) sendmmsg$inet6(r3, &(0x7f0000001c80)=[{{&(0x7f0000000240)={0xa, 0x4e21, 0x1, @private0, 0x3}, 0x1c, &(0x7f00000003c0)=[{&(0x7f0000000440)="14", 0x1}], 0x1}}], 0x1, 0x931766f6319eed40) (async) shutdown(r3, 0x1) (async) getsockopt$bt_hci(r3, 0x84, 0x80, &(0x7f0000002100)=""/4127, &(0x7f0000000000)=0x101f) (async) recvmmsg$unix(r0, &(0x7f0000000000)=[{{0x0, 0x0, &(0x7f0000001340)=[{&(0x7f0000001380)=""/4096, 0x1041}], 0x1}}], 0x14, 0x0, 0x0) (async) 406.893182ms ago: executing program 5 (id=3377): r0 = socket$pppl2tp(0x18, 0x1, 0x1) (async) r1 = socket$inet6_udp(0xa, 0x2, 0x0) connect$pppl2tp(r0, &(0x7f0000000000)=@pppol2tpv3={0x18, 0x1, {0x3, r1, {0x2, 0x0, @dev}, 0x2}}, 0x2e) (async) setsockopt$inet6_IPV6_XFRM_POLICY(r1, 0x29, 0x23, &(0x7f0000000bc0)={{{@in=@rand_addr=0x4, @in6=@private0, 0x0, 0x0, 0x4, 0x0, 0x2, 0x20, 0x20}, {0x0, 0x0, 0x2, 0x0, 0x8, 0x8, 0x4}, {0x4, 0x0, 0x0, 0xffffffffffffffff}, 0x0, 0x0, 0x1, 0x0, 0x1}, {{@in6=@remote, 0x4d3, 0x32}, 0x0, @in6=@empty, 0x0, 0x0, 0x0, 0x8}}, 0xe8) (async) r2 = syz_genetlink_get_family_id$l2tp(&(0x7f00000008c0), 0xffffffffffffffff) r3 = socket$nl_generic(0x10, 0x3, 0x10) bpf$PROG_LOAD(0x5, &(0x7f0000000740)={0xc, 0x8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x1b, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) (async) r4 = socket$nl_rdma(0x10, 0x3, 0x14) sendmsg$RDMA_NLDEV_CMD_STAT_SET(r4, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000000)={0x38, 0x1410, 0x8b7fbbc5948fecd9, 0x70bd29, 0x25dfd9fc, "", [@RDMA_NLDEV_ATTR_PORT_INDEX={0x8, 0x3, 0x1}, @RDMA_NLDEV_ATTR_DEV_INDEX={0x8}, @RDMA_NLDEV_ATTR_STAT_RES={0x8}, @RDMA_NLDEV_ATTR_STAT_MODE={0x8}, @RDMA_NLDEV_ATTR_RES_LQPN={0x8, 0x15, 0x3}]}, 0x38}, 0x1, 0x0, 0x0, 0x20004085}, 0x4004080) r5 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_route(r5, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000580)=@ipv6_newroute={0x30, 0x18, 0x1, 0x0, 0x0, {}, [@RTA_GATEWAY={0x14, 0x5, @dev}]}, 0x30}}, 0x0) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000100)={0x1f, 0x2, &(0x7f00000006c0)=ANY=[@ANYBLOB="85000000bc00000095"], &(0x7f0000000380)='syzkaller\x00', 0x0, 0x0, 0x0, 0x41000, 0x11}, 0x90) sendmsg$L2TP_CMD_SESSION_DELETE(r3, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000100)={&(0x7f00000001c0)={0x34, r2, 0x1, 0x1070bd2c, 0x4, {0x5}, [@L2TP_ATTR_PW_TYPE={0x6, 0x1, 0x5}, @L2TP_ATTR_CONN_ID={0x8, 0x9, 0x2}, @L2TP_ATTR_SESSION_ID={0x8}, @L2TP_ATTR_PEER_SESSION_ID={0x8, 0xc, 0xaa8}]}, 0x34}, 0x1, 0x0, 0x0, 0x20008000}, 0x30) 406.406235ms ago: executing program 0 (id=3378): r0 = socket$inet6_mptcp(0xa, 0x1, 0x106) bind$inet6(r0, &(0x7f0000000080)={0xa, 0x4e21, 0x0, @ipv4={'\x00', '\xff\xff', @broadcast}, 0xfff}, 0x1c) (async) listen(r0, 0xfffffffc) (async) r1 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_DESTROY(r1, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000000)={0x14, 0x3, 0x6, 0x4920e7af812c3f03}, 0x14}}, 0x0) r2 = bpf$MAP_CREATE(0x0, &(0x7f00000000c0)=@base={0x1f, 0x0, 0x0, 0x8000}, 0x48) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000400)={0x1d, 0xc, &(0x7f00000001c0)=@framed={{}, [@ringbuf_output={{0x18, 0x1, 0x1, 0x0, r2}, {}, {}, {}, {}, {}, {0x7, 0x0, 0xb, 0x4, 0x0, 0x0, 0x2}, {0x85, 0x0, 0x0, 0xae}}]}, &(0x7f0000000180)='syzkaller\x00', 0x4, 0x0, 0x0, 0x40f00}, 0x94) r3 = socket$inet_mptcp(0x2, 0x1, 0x106) connect$inet(r3, &(0x7f0000000000)={0x2, 0x4e22, @local}, 0x10) (async, rerun: 64) r4 = socket$inet_mptcp(0x2, 0x1, 0x106) (rerun: 64) connect$inet(r4, &(0x7f0000000000)={0x2, 0x4e22, @local}, 0x10) (async, rerun: 32) r5 = socket(0x10, 0x3, 0x0) (rerun: 32) sendmmsg(r5, &(0x7f0000000000), 0x4000000000001f2, 0x0) (async, rerun: 64) r6 = syz_genetlink_get_family_id$nl80211(&(0x7f00000000c0), 0xffffffffffffffff) (rerun: 64) openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0x1, 0x0) (async, rerun: 64) sendmsg$NL80211_CMD_REGISTER_FRAME(r5, &(0x7f0000000200)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x400}, 0xc, &(0x7f0000000140)={&(0x7f0000000100)={0x24, r6, 0x8, 0x70bd2a, 0x25dfdbfc, {{}, {@void, @void}}, [@NL80211_ATTR_FRAME_TYPE={0x6, 0x65, 0xa777}, @NL80211_ATTR_FRAME_TYPE={0x6}]}, 0x24}, 0x1, 0x0, 0x0, 0xc1}, 0x48c4) (async, rerun: 64) close(0x3) 346.619435ms ago: executing program 3 (id=3379): r0 = socket$packet(0x11, 0x3, 0x300) getsockopt$packet_int(r0, 0x107, 0x14, 0x0, &(0x7f0000000400)) r1 = socket$inet6_mptcp(0xa, 0x1, 0x106) ioctl$F2FS_IOC_MOVE_RANGE(r1, 0xc020f509, &(0x7f0000000080)={r1, 0x4, 0x6620859a, 0xfffffffffffffff9}) r3 = syz_genetlink_get_family_id$l2tp(&(0x7f0000000100), 0xffffffffffffffff) sendmsg$L2TP_CMD_SESSION_GET(r2, &(0x7f0000000200)={&(0x7f00000000c0)={0x10, 0x0, 0x0, 0x4}, 0xc, &(0x7f00000001c0)={&(0x7f00000003c0)=ANY=[@ANYBLOB="3c000000c22f74a0e1cdbe971365a413824c8c617d895ce026ae3d2e0e8bb76df8ddc20c68b0d357c3c02d13f90c82f7ce58220c10742effee0e84cf2927e98ca4e3258ff2c289e1276e2d2bdf45ea9288e5b6f5a94d1a701c4b3a260d71a33b15aaa4af95489a90dd9b9713f18a65f730d958893097fd01deff217b79ce628be422e8dd212a1469c89eed98a24d99ec", @ANYRES16=r3, @ANYBLOB="080027bd7000fbdbdf250800000006001c000f0000000500040009000000050022000100000008000a00000000000800090000000000"], 0x3c}, 0x1, 0x0, 0x0, 0x8010}, 0x81) (async) bind$inet6(r1, &(0x7f0000000040)={0xa, 0x4e22, 0x0, @empty, 0x7}, 0x1c) (async) listen(r1, 0xfffffffc) (async) r4 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r4, &(0x7f000000c2c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f00000008c0)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a28000000000a0101000000005e1affd5020000000900010073797a300000000008000240000000032c000000030a01030000e6ff00000000020000000900010073797a30000000000900030073797a320000000014000000110001"], 0x7c}}, 0x0) (async) r5 = syz_genetlink_get_family_id$nl80211(&(0x7f00000005c0), r2) sendmsg$NL80211_CMD_CHANNEL_SWITCH(r2, &(0x7f00000006c0)={&(0x7f0000000580)={0x10, 0x0, 0x0, 0xe104080}, 0xc, &(0x7f0000000680)={&(0x7f0000000600)={0x80, r5, 0x4, 0x70bd26, 0x25dfdbfe, {{}, {@val={0x8}, @void}}, [@chandef_params=[@NL80211_ATTR_WIPHY_FREQ_OFFSET={0x8, 0x122, 0x186}, @NL80211_ATTR_CENTER_FREQ1={0x8}, @NL80211_ATTR_CENTER_FREQ1={0x8, 0xa0, 0x80000006}, @NL80211_ATTR_CENTER_FREQ1={0x8, 0xa0, 0x3}], @NL80211_ATTR_CH_SWITCH_BLOCK_TX={0x4}, @chandef_params=[@NL80211_ATTR_CENTER_FREQ1={0x8, 0xa0, 0x2}, @NL80211_ATTR_WIPHY_FREQ_OFFSET={0x8, 0x122, 0x113}, @NL80211_ATTR_WIPHY_EDMG_CHANNELS={0x5, 0x118, 0x29}, @NL80211_ATTR_WIPHY_EDMG_BW_CONFIG={0x5, 0x119, 0x4}, @NL80211_ATTR_WIPHY_CHANNEL_TYPE={0x8}, @NL80211_ATTR_WIPHY_CHANNEL_TYPE={0x8, 0x27, 0x1}, @NL80211_ATTR_WIPHY_FREQ={0x8}], @NL80211_ATTR_CH_SWITCH_BLOCK_TX={0x4}, @NL80211_ATTR_CH_SWITCH_BLOCK_TX={0x4}]}, 0x80}, 0x1, 0x0, 0x0, 0x4}, 0xc110) (async) sendmsg$NFT_BATCH(r4, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000300)={{0x14}, [@NFT_MSG_NEWRULE={0x4c, 0x6, 0xa, 0x40b, 0x0, 0x0, {0x2}, [@NFTA_RULE_EXPRESSIONS={0x20, 0x4, 0x0, 0x1, [{0x1c, 0x1, 0x0, 0x1, @tproxy={{0xb}, @val={0xc, 0x2, 0x0, 0x1, [@NFTA_TPROXY_FAMILY={0x8, 0x1, 0x1, 0x0, 0x1}]}}}]}, @NFTA_RULE_TABLE={0x9, 0x1, 'syz0\x00'}, @NFTA_RULE_CHAIN={0x9, 0x2, 'syz2\x00'}]}], {0x14}}, 0x74}}, 0x0) (async) r6 = socket$inet_mptcp(0x2, 0x1, 0x106) connect$inet(r6, &(0x7f0000000000)={0x2, 0x4e22, @local}, 0x10) (async) r7 = socket$inet_mptcp(0x2, 0x1, 0x106) socket(0x2c, 0x6, 0xdc63) (async) connect$inet(r7, &(0x7f0000000000)={0x2, 0x4e22, @local}, 0x10) (async) getsockopt$inet_sctp6_SCTP_STREAM_SCHEDULER_VALUE(r2, 0x84, 0x7c, &(0x7f0000000240)={0x0, 0x1ff, 0xc}, &(0x7f0000000280)=0x8) getsockopt$inet_sctp_SCTP_PEER_ADDR_PARAMS(r2, 0x84, 0x9, &(0x7f00000002c0)={r8, @in6={{0xa, 0x4e22, 0x9, @private0={0xfc, 0x0, '\x00', 0x1}, 0x3}}, 0x200, 0x0, 0x9, 0x5, 0x2, 0x1ff, 0x9}, &(0x7f0000000380)=0x9c) r9 = syz_init_net_socket$bt_l2cap(0x1f, 0x1, 0x3) ioctl$FS_IOC_GETFSLABEL(r9, 0x541b, &(0x7f0000000100)) (async) close(0x3) (async) r10 = socket$kcm(0x11, 0x2, 0x0) sendmsg$sock(r10, &(0x7f00000000c0)={&(0x7f0000000040)=@phonet={0x23, 0x0, 0x0, 0x27}, 0x80, 0x0, 0x0, &(0x7f0000000000)=[@timestamping={{0x14, 0x1, 0x25, 0x2}}], 0x18}, 0x0) (async) setsockopt$sock_int(r10, 0x1, 0x29, &(0x7f00000001c0)=0x3, 0x4) ioctl$XFS_IOC_FD_TO_HANDLE(r2, 0xc038586a, &(0x7f0000000740)={r7, &(0x7f0000000140)='\x00', 0x40140, &(0x7f00000004c0)={@_ha_fsid={[0xfffffff9, 0x4]}, {0x5, 0x4, 0x5, 0x5}}, 0x7f, &(0x7f0000000500)={@_ha_fsid}, &(0x7f0000000540)=0x1}) setsockopt$inet_tcp_TCP_REPAIR_OPTIONS(r11, 0x6, 0x16, &(0x7f0000000780)=[@timestamp, @sack_perm], 0x2) (async) recvmsg$kcm(r10, &(0x7f0000000700)={0x0, 0x0, 0x0}, 0x2020) (async) socket$nl_xfrm(0x10, 0x3, 0x6) 263.095264ms ago: executing program 1 (id=3380): r0 = socket(0x10, 0x80002, 0x0) sendmsg$nl_route(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000100)={&(0x7f00000001c0)=ANY=[@ANYBLOB="1c0000005e00679a3601ffc4910700004f78d4c1a0731cccff"], 0x1c}}, 0x0) getsockopt$inet_mreqn(r0, 0x0, 0x20, &(0x7f00000000c0)={@loopback, @dev, 0x0}, &(0x7f0000000140)=0xc) sendmsg$nl_route_sched_retired(r0, &(0x7f0000000380)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x800000}, 0xc, &(0x7f0000000340)={&(0x7f0000000200)=@newqdisc={0x124, 0x24, 0x1, 0x70bd26, 0x25dfdbfd, {0x0, 0x0, 0x0, r1, {0x4, 0xa}, {0x10, 0xa}, {0x3}}, [@q_dsmark={{0xb}, {0x40, 0x2, [@TCA_DSMARK_SET_TC_INDEX={0x4}, @TCA_DSMARK_DEFAULT_INDEX={0x6, 0x2, 0x7}, @TCA_DSMARK_DEFAULT_INDEX={0x6, 0x2, 0xa16}, @TCA_DSMARK_INDICES={0x6, 0x1, 0x1}, @TCA_DSMARK_INDICES={0x6}, @TCA_DSMARK_DEFAULT_INDEX={0x6, 0x2, 0x3}, @TCA_DSMARK_DEFAULT_INDEX={0x6}, @TCA_DSMARK_SET_TC_INDEX={0x4}, @TCA_DSMARK_SET_TC_INDEX={0x4}]}}, @q_dsmark={{0xb}, {0x2c, 0x2, [@TCA_DSMARK_DEFAULT_INDEX={0x6}, @TCA_DSMARK_DEFAULT_INDEX={0x6, 0x2, 0x3}, @TCA_DSMARK_INDICES={0x6}, @TCA_DSMARK_SET_TC_INDEX={0x4}, @TCA_DSMARK_SET_TC_INDEX={0x4}, @TCA_DSMARK_INDICES={0x6, 0x1, 0xa}]}}, @q_dsmark={{0xb}, {0x28, 0x2, [@TCA_DSMARK_DEFAULT_INDEX={0x6, 0x2, 0xf}, @TCA_DSMARK_INDICES={0x6, 0x1, 0x2}, @TCA_DSMARK_DEFAULT_INDEX={0x6, 0x2, 0x400}, @TCA_DSMARK_INDICES={0x6, 0x1, 0x1}, @TCA_DSMARK_SET_TC_INDEX={0x4}]}}, @q_dsmark={{0xb}, {0x8, 0x2, [@TCA_DSMARK_SET_TC_INDEX={0x4}]}}, @q_dsmark={{0xb}, {0x28, 0x2, [@TCA_DSMARK_DEFAULT_INDEX={0x6, 0x2, 0x5d}, @TCA_DSMARK_DEFAULT_INDEX={0x6, 0x2, 0x5}, @TCA_DSMARK_SET_TC_INDEX={0x4}, @TCA_DSMARK_DEFAULT_INDEX={0x6, 0x2, 0x9}, @TCA_DSMARK_DEFAULT_INDEX={0x6, 0x2, 0xc}]}}]}, 0x124}, 0x1, 0x0, 0x0, 0x4000000}, 0x4000000) (async) sendmsg$nl_route_sched_retired(r0, &(0x7f0000000380)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x800000}, 0xc, &(0x7f0000000340)={&(0x7f0000000200)=@newqdisc={0x124, 0x24, 0x1, 0x70bd26, 0x25dfdbfd, {0x0, 0x0, 0x0, r1, {0x4, 0xa}, {0x10, 0xa}, {0x3}}, [@q_dsmark={{0xb}, {0x40, 0x2, [@TCA_DSMARK_SET_TC_INDEX={0x4}, @TCA_DSMARK_DEFAULT_INDEX={0x6, 0x2, 0x7}, @TCA_DSMARK_DEFAULT_INDEX={0x6, 0x2, 0xa16}, @TCA_DSMARK_INDICES={0x6, 0x1, 0x1}, @TCA_DSMARK_INDICES={0x6}, @TCA_DSMARK_DEFAULT_INDEX={0x6, 0x2, 0x3}, @TCA_DSMARK_DEFAULT_INDEX={0x6}, @TCA_DSMARK_SET_TC_INDEX={0x4}, @TCA_DSMARK_SET_TC_INDEX={0x4}]}}, @q_dsmark={{0xb}, {0x2c, 0x2, [@TCA_DSMARK_DEFAULT_INDEX={0x6}, @TCA_DSMARK_DEFAULT_INDEX={0x6, 0x2, 0x3}, @TCA_DSMARK_INDICES={0x6}, @TCA_DSMARK_SET_TC_INDEX={0x4}, @TCA_DSMARK_SET_TC_INDEX={0x4}, @TCA_DSMARK_INDICES={0x6, 0x1, 0xa}]}}, @q_dsmark={{0xb}, {0x28, 0x2, [@TCA_DSMARK_DEFAULT_INDEX={0x6, 0x2, 0xf}, @TCA_DSMARK_INDICES={0x6, 0x1, 0x2}, @TCA_DSMARK_DEFAULT_INDEX={0x6, 0x2, 0x400}, @TCA_DSMARK_INDICES={0x6, 0x1, 0x1}, @TCA_DSMARK_SET_TC_INDEX={0x4}]}}, @q_dsmark={{0xb}, {0x8, 0x2, [@TCA_DSMARK_SET_TC_INDEX={0x4}]}}, @q_dsmark={{0xb}, {0x28, 0x2, [@TCA_DSMARK_DEFAULT_INDEX={0x6, 0x2, 0x5d}, @TCA_DSMARK_DEFAULT_INDEX={0x6, 0x2, 0x5}, @TCA_DSMARK_SET_TC_INDEX={0x4}, @TCA_DSMARK_DEFAULT_INDEX={0x6, 0x2, 0x9}, @TCA_DSMARK_DEFAULT_INDEX={0x6, 0x2, 0xc}]}}]}, 0x124}, 0x1, 0x0, 0x0, 0x4000000}, 0x4000000) recvmmsg$unix(r0, &(0x7f0000000000)=[{{0x0, 0x0, &(0x7f0000001340)=[{&(0x7f0000001380)=""/4096, 0x1041}], 0x1}}], 0x14, 0x0, 0x0) 207.523473ms ago: executing program 5 (id=3381): r0 = bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000340)={0x2, 0x4, 0x8, 0x1, 0x80, 0x0, 0x0, '\x00', 0x0, 0x0}, 0x48) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000400)={0xd, 0x10, &(0x7f0000000000)=ANY=[@ANYBLOB="18000000000000000000000000000000b7080000000000007b8af8ff00000000b7080000000000007b8af0ff00000000bf8100000000000007080000f8ffffffbfa400000000000007040000f0ffffffb70200000800000018210000", @ANYRES32=r0, @ANYBLOB="0000000002000000b705000008000000850000008f00000095"], &(0x7f0000000300)='GPL\x00', 0x9, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x2010000}, 0x94) 185.172947ms ago: executing program 4 (id=3382): r0 = socket$kcm(0x10, 0x2, 0x10) r1 = socket$xdp(0x2c, 0x3, 0x0) setsockopt$XDP_RX_RING(r1, 0x11b, 0x2, &(0x7f00000002c0)=0x100, 0x4) ioctl$ifreq_SIOCGIFINDEX_batadv_hard(r0, 0x8933, &(0x7f0000000400)={'batadv_slave_0\x00', 0x0}) r3 = socket$xdp(0x2c, 0x3, 0x0) setsockopt$XDP_UMEM_REG(r3, 0x11b, 0x4, &(0x7f00000000c0)={&(0x7f0000000000)=""/74, 0x33e000, 0x1000}, 0x20) setsockopt$XDP_UMEM_COMPLETION_RING(r3, 0x11b, 0x6, &(0x7f0000000080)=0x1, 0x4) setsockopt$XDP_RX_RING(r3, 0x11b, 0x2, &(0x7f0000001980)=0x100, 0x4) ioctl$ifreq_SIOCGIFINDEX_batadv_hard(r0, 0x8933, &(0x7f0000000140)={'batadv_slave_0\x00', 0x0}) setsockopt$XDP_UMEM_FILL_RING(r3, 0x11b, 0x5, &(0x7f0000000300)=0x1, 0x4) bind$xdp(r3, &(0x7f00000001c0)={0x2c, 0x0, r4}, 0x10) bind$xdp(r1, &(0x7f0000000240)={0x2c, 0x1, r2, 0x0, r3}, 0x10) sendmsg$inet(r1, &(0x7f0000001180)={0x0, 0x0, 0x0}, 0xfffc) bpf$PROG_LOAD(0x5, &(0x7f00000017c0)={0x10, 0xe, &(0x7f0000001880)=ANY=[@ANYBLOB="b700000028000000bca30000000000002403000007feffff720af0ff0000020071a4f0ff000000001f030000000000002e0a0200000000002604fdffffff000e61143c00000000001d430000000000007a0a00fe0000001f6114180000000000b503f7fff80000009500000000000000033bc065b78111c6dfa041b63af4a3912435f1a864a7aad58db6a693002e7f3be361917adef6ee1c8a2a4f8ef1e50becb19bc461e91a7168e5181554a090f30002af51efd601b6bf01c8e8b1fee5bef7af9aa0d7d600c095199fe3ff3128e599b0eaebbdbd732c9cc00eec363e4a8f6456e2cc21557c0afc646cb7798b3e6440c2fbdb00a3e35208b0bb0d2cd829e65440000000000000000028610643a98d9ec21ead2ed51b104d4d91af25b845b9f7d08d123deda88c658d42ecbf28bf7076c15b463bebc72f526dd70252e79166d858fcd0e06dd31af9612fa402d0b11008e59a5923906f88b53987ad1714e72ba7a54f0c33d39000d06a59ff616236fd9aa58f0177184b6a89adaf17b0a6041bdef728f5089048ddff6da40f9411fe7226a40409d6e37c4f46756d31cb467600ade70063e5291569b33d21dae356e1c51f03a801be8189679a16da18ec0ae564162a27afea62d84f3a10076443d643649393bf52d2105bd901128c7e0ec82701c8204a1deeed4155617572652d950ad31928b0b036dc2869f478341d02d0f5ad94b081504507acb4b9c67382f13d000000225d85ae49cee383dc5049076b98fb6853ab39a21514da60d2ae20cfb91d6a49964757cdf538f9ce2bdbb9893a5de817101ab062cd54e67051d355d84ce97bb0c6b6a595e487a2cc47c0efbb2d71cde2c10f0bc6980fe78683ac5c0c31032599dd273863be9261eee52216d009f4c52048ef8c126aeef5f510a8f1aded94a129e4aec6e8d9ab06faffc3a15d91c2ea3e2e04cfe031b287539d0540059fe6c7fe7cd8697502c7596566de74e425da5e7f009602a9f61d3804b3e0a1053abdc31282dfb15eb6841bb64a1b3045024a982f3c48b936e6f9e0fcda88fe4413537528fd79153baae244e7bf573eac34b781337ad5901a4cad2422ee965a38f7defbd2960242b104e20dc2d9b0c35608d402ccdd9069bd50b994fda7a9de44022a579dfc0229cc0dc98816106dec28eaeb883418f562ae00003ea96d10f172c0374d6eed826416050000000bfe9b4a9c5a90ff59d54d1f92ecc48899b212c55318294270a1ad10c80fef7c24d47afcc829ba0f85da6d888f18ea40ab959f6074ab2a40d85d1501783a7ab51380d7b4ead35a385e0b4a26b602396df7e0c1e02b88c114f244a9bf93f04bf072f0861f5c0b000000000000eedcf2ba1a9508f9d6aba582a896a9f1ffa968eacea75caf822a7a63ba3401e6a52acb1188883ad2a3b1832371fe5bc621426d1ed01b389708165b9cdbae2ed9dc7358f0ebadde0b727f27feeb7464dcc536cbae2f5e7d951680f6f2f9a6a8346962a350845ffa0d82884f79adc287906943408e6df3c391e97ba48db0a5adbfd03aac93df8866fb010ae20e92bed1fe39af169d2a466f0db6f3d9436a7d55fc30511d00000000c95265b2bd83d648532869d701723fedcbada1ee7baa19faf67256b56a41fd355b6a686b50f0937f778af083e055f6138a757ebd0ed91124a6b244f9acf41ac5d73a008364e0606a594817031fc2654026c6ea08b83b123145ab5703dad844ceb201efeb6dc5f6a9037d2283c42efc54dd84323afc4c10eff462c8843187f1dd48ef0900000000000000ff0f4000000000f00700003c17888e1cdba94a6ea80c33ead5722c3293a493f1479531dd88261458f40d31fe8df15efaaeea831555877f9538c6ee6ba65893ff1f908ba7554ba583ec7932f5954f31a878e2fae6691d1aee1da02ba516467df3e7d1daac43738612e4fee18a22da19fcdb4c1011e32f808890205f0e6da2819d2f9e77c7c64affa54fec0136cbafa5f62e96753b639a924599c1f69219927e2571f983e96635600000554f327a3535e7c7542799493c31ac05a7b57f03ca91a01ba2a30ca99e969d6fd09dc28e6ce4d9791c73c2d37999d146aef7799738b292fd64bbca48568325b2969e2b15f36b788bce5ccdbaf75c94cb93499f6947a967a794963442aece449a0d80010f5c653d22d49030a8c2a4ab595bf4238f18ca428dafc7ac96d404607a0000000051a2104f22e6db5a62b5089c1b45282d38864daa3ae81d6b0968d1d2869291b7d12096833d6864da40b54783a17aaeb6737c323f9f98e354cc98dcfe23ad01bd1c61563e69ffe1c2c73e16e637d4219ef7ec61261173f359e93d2c5e424c17998809ec8f0232b3955e052a4cecd89008f70314a0bdd491ecab5d232f89fe0120f64c62e8e3ed8bcb45202c204bbec8d722824c0ebca8db1ea4a05e41f6016ab5bbe4fe7ff5d785d0128171c90d9900ca2532b0f9d01c4b45294fbba468df3e1b393cb4e62e753b4172ba7ac1f2b51c94bc5d047899fd219f448bf9189c65c9d91eda6b52a373803a9efe44f86909bc90addbc4b3093c91b8068c5adfcb0d7fd849904568916694d461b76a58d88cf0f520310a1e9fdc18cde98d662eee077515d0a881192292ffff5392ab3d1311b82432662806add87047f601fa888400000000000000000000000000006acc19808d7cf29bc974b0ea92499a41b9b9a7c2bca311a28ee4952f2d325a56397c78f12205db653a536f0100e0eda300a43a13bd1b9f3322405d1efd78e578dc6b3fb84f3738a4b6caa800000087efa51c5d95ecba4e50e529d1e8c89600e809dc3d0a2f65579e23457949a50f2d0455cf699b3746979f99f6a1527f004f37e84fb478199dc1020f4beb98b8074bf7df8b5e783637daf121f175a81cffff4ac55a4385e9a617aa6c8e10d4202c5afeb06e2f9115558ea12f92d7ae633d44086b3f03b20d546fa66a72e38207c9d20035abc46271a30f1240de52536941242d23896ab74a3c6670fdc49c14f34fc4eadd6db8d80eba439772bf60a1db18c472dafc5569adc282928d2a1ffe29f1a57d3f18f4edaeb5d37918e6fddcd821da67a0785585a4443440dc65600e64a4a274000000000000000000000000000000000000000000000009dd14b38f2f5426d7cf5075047c31f6ce6adddfe3ac649c0643c8bfbeb14ba1fd7a485aa893915cf81e29aaf375e904bbe52691a4120260ffcd030000006d291ebcef893e1b9ccb6797d0646fe0e7274434f28efb43e06e64f0698caca42f4e6018a455736c482a017e2b13dac4a90faa109f0e87cc94e3efb649692456463ca74aa6ad4bf50c1acb3928143be1c1023a375e528285544d0064b98646f3109e9a4942ce42c6e7ec84b664f6c2770803f10b0a1fcbfc309381aeba191950bae71f37f1eb7ceeffb3c0547ac6571603adbfde4c8b5f8d7f4b854441613633b48865b65bdc415e1e0dcf672d68cf4cebf04f4bc1eebf560a26d3b332240d450fdb0a9a69f432e277f3a0386eb2bd1305c821c64757f786b79fef54dbe64c67d73934bc80b2133fb3c04cc7ea48bf97a6243c9f95dcbddecf45f008f1822c7868e1ff5a3cff5d6b6898335792749df7b1f51e91f8c1c3b1b93b33aaa3fab69cef08a9f6f6cf39dea3d878b2ed42545421970cc426e644332bc956d1c6adefdf0ede2c5c94aa632646ae225accdf031f611d01622921f1b922a5ac887cca3136133dce8d9f5f4da7bed2ea5d94362200000000000000000000f296b0c1484e5f781ad26bff696b05ff0a5e2270e07e18b04273bd4075ea38ab463bfa6a38e7c537498ba3e4df8dfc9e8c0a0d213c3ffad44d2a376def42e41e9fcf32c221aaac6cfdeb33c27500001a0000000000000000000017350000c11ae694b0c69c2c03f6790044a357e785af6e153d5f1ea460af92c7cbbd6295afe740f5e154346d483e0d10522a7a945b93fb705b95b6aae27a8fab1e6984c8bdc12360627137ab6737b68ab08acb29a74dc36b51209cfbc87f61182bbeb2772e9d5a1ffc477179be481ffe46a4ce86be0b1f8eee42a611a3d44ca450b14586ed63dd92005c79e4a8ab8a94f0b74903580ac98708007c80d6c7d0de4614195e40d797c0348dd70f36a220e8b3710fb5358c27e90793bcb9ee6319342c4b239ca8cbc6fc83d32e6eb62ad92e43991f2447be9c2a1ae1119eafb901a43d57e885116d19aa152bfb89f8d0b2516f80120a1cddff771657f3d0288ec3899f1e3ba0151c4037148fb479de703fc52b6573349c28d1b107d859b4961324c17756dde99de1924a1d2b7095d34a55060f47f4407d89acf9f285b20c2e6b3d0491d0d3591b0d94713332b6b79c8297117b0d14eff64e0aca8a4b4aa773d8fba1217e9519952419bb9dd998d0ec870ff00b6d556018602738fbc6cec89d6dd13cf55b96f6fe9a137d2d6a56ad78e52c23ed080000000000002bc261a781fd14126c146a0aac4221839a4b9bbf61e4bba695a41e2109eba8e40c370267cc51ffadbd15cafc97a4d3edfdcb9b5729307c6bdaf7b69325fb05fa8a9869de0600ee477d71bf3e36d1d9019edfa27aae24b632f251df210c86a18fae731ecb8b0d48357378caf2b6789509b1bacfd4fa812dc341875cfa5e798bbf59770000000000000000c8a594ea3c3347962d9113b1fecdfad5a8da641053f02e49456f5d21674521e67a5b18ea451eccf69dd6af928d2d68da9304a296c22fdcea26498d26229110b1aade386b113045033a6188d56e675564d8cb8d5b40114b0f5bf15dd64c9ece60b8588ee8777d0ea8f4713b258427c7d90f9e93348e17723ba9ab8ae790f74cc41ae5795835f3cec40dff485d2802c08611454d9ea784a205bcc07ec26f906f3cf45bb37014ab6f22af6213618e242b283ea9d3f0677ee598072ec06f7170009d92bb7ed9d12c378dfd3e74ec056ee83eef666423d934fc5908c9ff98715218a5964f1e00000000426ac9588e27aefe307f49662990ee823568bbc2f89596ced7c6c52d76b8096f1848410843b93fd404f535be474f456778b5ef85abb8fc2336abd5ea64a6efea8a5aca0015499b88ae780a7bae4df603bd3c72808cf300440b1b638a6640f7de8d0d82f359ca2f779cd48cd8d3603f4f69e47f386988c9b7b5d6dd3d48a1fdca780049d7c87bea42161a4c0d7cf0125b43dc9d8845f3c05a08acda647e7143d0e0aee2949a45e2848890522c2288072467d2afe269f589fb7e034b92d3ca245b16b71998711bfe206c9690b6d0eebb06a29349229eb45ff15c63aa2c82c56d7420738cd1b04eb16e87cb524315d7361ea3635d3799bb7fcc56aa5e1dbe031a7a12554dee6754b72f43a6fddf427f32ec3df274a88097725679769beebf1aa6eb09d5154e4900000000000d0f7160a05911d969879953d3d4702b2676c07bb0fd14020a66718378825d5ed789711b77d40dc31e0b8fc651b45559da463f0000000000000000000000000052d42124e9c26aba885015e69d42ecd710342ac597ebea576ae15fdf611356f622e831741ab15549e0d7a2bd0324e2b3b48a10551607492c19eaf58485feb4cab19c303b30ba2ddea0d792d77724c9fa4ed58b93668fc20484f141ee2b6a0029e88fdc853189b4dafd36ff23b11967090e508f45e3f10857038a52ef275cf9e3e4b5d30b12d138dfa70930c603b5e3f4b7be67be3dba3cbd8d4d143195af0697d779445d67dcfbd922d12a8b49f93eac7a72faacf80346b3b6"], &(0x7f00000001c0)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @sk_msg, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0xffffffffffffff97, 0x10, &(0x7f00000000c0), 0xffffffffffffffc2}, 0x48) syz_emit_ethernet(0x2d, &(0x7f0000000400)={@broadcast, @empty, @void, {@mpls_mc={0x8848, {[{0x800}, {0x4, 0x0, 0x1}, {0xbbc}, {0x3ff}], @llc={@snap={0xab, 0xaa, 'o', "fd0daf", 0x8847, "f3f74214ea6bbc"}}}}}}, 0x0) r5 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r6 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r7 = syz_genetlink_get_family_id$netlbl_unlabel(&(0x7f0000000000), r6) sendmsg$NLBL_UNLABEL_C_STATICREMOVEDEF(r6, &(0x7f0000000700)={0x0, 0x0, &(0x7f0000000800)={&(0x7f0000000900)={0x30, r7, 0x1, 0x0, 0x0, {}, [@NLBL_UNLABEL_A_IPV4ADDR={0x8, 0x4, @loopback}, @NLBL_UNLABEL_A_IPV4MASK={0x8, 0x5, @loopback}]}, 0x30}}, 0x0) bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000140)={&(0x7f0000000080)=ANY=[@ANYBLOB="9feb010018000000000000003c0000003c00000006000000040000000000000e0400000000000000000000000100000d040000000400000004000000000000000000001004000000000000000000000a030000000000000061"], 0x0, 0x5a}, 0x20) sendmsg$NLBL_UNLABEL_C_STATICREMOVEDEF(r5, &(0x7f0000000240)={&(0x7f0000000140), 0xc, &(0x7f0000000200)={&(0x7f0000000180)={0x24, r7, 0x300, 0x70bd26, 0x25dfdbfd, {}, [@NLBL_UNLABEL_A_IPV4ADDR={0x8, 0x4, @rand_addr=0x64010101}, @NLBL_UNLABEL_A_IPV4ADDR={0x8, 0x4, @private=0xa010100}]}, 0x24}, 0x1, 0x0, 0x0, 0x400c000}, 0x8048000) r8 = accept$packet(0xffffffffffffffff, &(0x7f0000000040), &(0x7f0000000080)=0x14) r9 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r9, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000440)=ANY=[@ANYBLOB="f0010000160001000000000000000000ff010000000000000000000000000001ac1414bb00000000000000000000000020008020000005000000000000000000", @ANYRES32=0x0, @ANYRES32=0x0, @ANYBLOB="fe8000000000000000000000000000bb0000000033000000e000000200000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000efffffffffffffff03000000000000000000000000000000000000000000000000000000000000000000000000000000feffffffffffffff040000000000000000000000040000001000000000000000000000000000000002000000b1a0010008000c00c40000000c001c00", @ANYRES32=0x0, @ANYBLOB="00000000e4000600fe8000000000000000000000000000bbff0200000000000000000000000000014e2100014e230000020000803c000000", @ANYRES32=0x0, @ANYRES32=0x0, @ANYBLOB="0a010100000000000000000000000000000004d36c000000ffffffff000000000000000000000000ff070000000000000200000000000000fbffffffffffffffb82ea45c0000000008000000000000000d00000000000000010100000000000002000000000000000200000000000000df000000000000000600000000000000020000000000000001040040020000000300000028bd700006350000020001d15500000000000000"], 0x1f0}}, 0x0) setsockopt$packet_int(r8, 0x107, 0x11, &(0x7f0000000100), 0x4) 140.866245ms ago: executing program 3 (id=3383): r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000000), 0x40a01, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000200)={'syzkaller1\x00', 0xc201}) r1 = socket$kcm(0x2, 0xa, 0x2) (async) openat$tun(0xffffffffffffff9c, &(0x7f0000000080), 0x1, 0x0) (async, rerun: 64) ioctl$SIOCSIFHWADDR(r0, 0x8914, &(0x7f00000001c0)={'veth0_to_batadv\x00', @local}) (rerun: 64) socketpair(0x1e, 0x1, 0x0, &(0x7f0000000040)={0x0, 0x0}) setsockopt$sock_attach_bpf(r2, 0x10f, 0x87, 0x0, 0x0) r3 = accept4$packet(0xffffffffffffffff, &(0x7f0000000340)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @remote}, &(0x7f0000000380)=0x14, 0x800) (async, rerun: 32) bpf$BPF_GET_PROG_INFO(0xf, &(0x7f0000000680)={0xffffffffffffffff, 0xe0, &(0x7f0000000580)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, &(0x7f00000003c0)=[0x0, 0x0], ""/16, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, &(0x7f0000000400)=[0x0, 0x0], &(0x7f0000000440), 0x0, 0x45, &(0x7f0000000480)=[{}], 0x8, 0x10, &(0x7f0000000140), &(0x7f0000000500), 0xfffffffffffffc92, 0xcd, 0x8, 0x8, &(0x7f0000000100)}}, 0x10) (rerun: 32) connect$packet(r3, &(0x7f00000006c0)={0x11, 0x5, r4}, 0x14) ioctl$TUNSETVNETBE(r0, 0x400454de, &(0x7f0000000040)) (async) ioctl$XFS_IOC_FD_TO_HANDLE(0xffffffffffffffff, 0xc038586a, &(0x7f0000000800)={0xffffffffffffffff, &(0x7f0000000700)='\x00', 0x100, &(0x7f0000000740)={@_ha_fsid={[0x94300, 0xfffffffe]}, {0x5, 0x0, 0xc, 0x6}}, 0x7, &(0x7f0000000780), &(0x7f00000007c0)=0x8}) setsockopt$inet6_tcp_TCP_CONGESTION(r5, 0x6, 0xd, &(0x7f0000000840)='bbr', 0x3) (async) r6 = accept(r1, &(0x7f0000000240)=@l2, &(0x7f00000002c0)=0x80) r7 = socket$inet6(0xa, 0x80002, 0x0) setsockopt$inet6_udp_int(r7, 0x11, 0x67, &(0x7f0000000040)=0x88e, 0x4) (async) sendmmsg$inet6(r7, &(0x7f0000000840)=[{{&(0x7f0000000300)={0xa, 0x4e21, 0x0, @local, 0x7}, 0x1c, &(0x7f0000000680)=[{&(0x7f0000000340)="2c5db18271fe054658fe1c586b1dc826d06eecc3a3d4bf8d4e96bee8fccc6fc6d9007e72cfd626690e4f7417b006c94270e430183086043c832a77bce4c65f222ab9bcf4150d0719ff224953c6973546b0addd455b442c5dee8d77a6a55944cb2abb20245833804f2fac736b3f4130cae1cf2e8662f906e3e706431a091b5643581cd7e8845df5c127be2f7e992acb", 0xff3b}, {&(0x7f0000000400)="84b688ed1cbebf252bbc6aabd90fbe35fbafc537dcdd565ba8b411e8be2284808f99d80b6603fc4fe127c29d4bf85c6fc7c5e6dcffe44b0cb81b402d3b73de214c5f7908d656ac194ec399f8a555fbfdb15f23489f1a7e9a088f946d81d63c24b8f771a54832df29f2a291e65acb5411b08c4a576ab26bdf61eb05c1f6b7bb0af7", 0x81}, {&(0x7f00000004c0)="35bd6bc58bbb757381f14f85ceb73c410612334952c497a1835af1d0f20812b23b4cb2f765a28dcec1", 0x29}], 0x3}}], 0x1, 0x0) (async) syz_init_net_socket$llc(0x1a, 0x1, 0x0) (async) write$tun(r0, &(0x7f00000000c0)=ANY=[@ANYBLOB="001c86dd0700100000004000000060ec97000fc83c00fe8000000000000000000000000000aaff02000000000000000000000000000106"], 0xffe) getsockopt$inet_sctp6_SCTP_PR_SUPPORTED(r6, 0x84, 0x71, &(0x7f0000000180)={0x0, 0x80000000}, &(0x7f0000000300)=0x8) 70.835024ms ago: executing program 0 (id=3384): r0 = socket$rxrpc(0x21, 0x2, 0x2) bind$rxrpc(r0, &(0x7f0000000180)=@in6={0x21, 0x4, 0x2, 0x1c, {0xa, 0x4e24, 0x4, @private2}}, 0x24) r1 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r1, &(0x7f000000c2c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000340)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a28000000000a0101000000005e1affd5020000000900010073797a300000000008000240000000032c000000030a01030000e6ff00000000020000000900010073797a30000000000900030073797a320000000014000000110001"], 0x7c}}, 0x0) sendmsg$NFT_BATCH(r1, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000640)={{0x14}, [@NFT_MSG_NEWRULE={0x6c, 0x6, 0xa, 0x40b, 0x0, 0x0, {0x2}, [@NFTA_RULE_EXPRESSIONS={0x40, 0x4, 0x0, 0x1, [{0x3c, 0x1, 0x0, 0x1, @exthdr={{0xb}, @val={0x2c, 0x2, 0x0, 0x1, [@NFTA_EXTHDR_OFFSET={0x8}, @NFTA_EXTHDR_DREG={0x8, 0x1, 0x1, 0x0, 0xd}, @NFTA_EXTHDR_OP={0x8, 0x6, 0x1, 0x0, 0x2}, @NFTA_EXTHDR_LEN={0x8, 0x4, 0x1, 0x0, 0x17}, @NFTA_EXTHDR_TYPE={0x5, 0x2, 0x89}]}}}]}, @NFTA_RULE_TABLE={0x9, 0x1, 'syz0\x00'}, @NFTA_RULE_CHAIN={0x9, 0x2, 'syz2\x00'}]}], {0x14}}, 0x94}}, 0x0) mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000)='./cgroup.cpu/syz0\x00', 0x1ff) r2 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000), 0x200002, 0x0) r3 = openat$cgroup_int(r2, &(0x7f0000000040)='notify_on_release\x00', 0x2, 0x0) r4 = socket$inet_udp(0x2, 0x2, 0x0) setsockopt$inet_udp_int(r4, 0x11, 0x1, &(0x7f0000000080)=0x4, 0x4) bind$inet(r4, &(0x7f00000001c0)={0x2, 0x0, @local}, 0x10) connect$inet(r4, &(0x7f0000000480)={0x2, 0x0, @multicast2}, 0x10) sendfile(r4, r3, 0x0, 0xe25) bpf$PROG_LOAD(0x5, &(0x7f0000000080)={0x4, 0x5, &(0x7f0000002500)=ANY=[@ANYBLOB="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"], &(0x7f0000000140)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0x8}, 0x94) 0s ago: executing program 5 (id=3385): r0 = socket$inet6(0xa, 0x2, 0x0) r1 = socket$netlink(0x10, 0x3, 0x8000000004) writev(r1, &(0x7f0000000280)=[{&(0x7f00000005c0)="580000001400192340834b80040d8c560a06ffffff7f070000000000000058000b480400945f64009400050038925a01000000800000008004000000ff0109000000fff5dd0000000800030006010000418e01400004fcff", 0x58}], 0x1) setsockopt$sock_int(r0, 0x1, 0xf, &(0x7f0000000240)=0x9, 0x4) r2 = accept4$inet6(0xffffffffffffffff, &(0x7f00000000c0)={0xa, 0x0, 0x0, @private2}, &(0x7f0000000100)=0x1c, 0x80000) ioctl$XFS_IOC_START_COMMIT(r2, 0x80585882, &(0x7f0000000280)={0xffffffffffffffff}) bind$bt_hci(r3, &(0x7f0000000300)={0x1f, 0x2, 0x1}, 0x6) setsockopt$inet6_MCAST_MSFILTER(r0, 0x29, 0x30, &(0x7f0000000500)={0x801, {{0xa, 0x4e23, 0x8, @rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x01', 0x8}}, 0x0, 0x6, [{{0xa, 0x4e21, 0xfc, @local, 0x9}}, {{0xa, 0x4e22, 0x1, @loopback, 0xffff}}, {{0xa, 0x4e23, 0x6, @private0={0xfc, 0x0, '\x00', 0x1}, 0x9}}, {{0xa, 0x4e20, 0x8, @loopback, 0x5}}, {{0xa, 0x4e20, 0x8, @empty, 0x7f}}, {{0xa, 0x4e24, 0x3, @private2={0xfc, 0x2, '\x00', 0x1}, 0x6}}]}, 0x390) bind$inet6(r0, &(0x7f0000000040)={0xa, 0x4e21, 0x1, @loopback, 0x1}, 0x1c) r4 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_CREATE(r4, &(0x7f0000000000)={0x0, 0x0, &(0x7f00000004c0)={&(0x7f0000000d40)=ANY=[@ANYBLOB="6c00000002060500000000000000000000000000120003006269746d61703a69702c6d616300000005000400000000000900020073797a310000000020000780050003001f0000000c0001800800014000000000080006000400000005000500020000000500010006"], 0x6c}}, 0x0) ioctl$sock_SIOCGIFINDEX(r4, 0x8933, &(0x7f0000000080)={'veth1_vlan\x00'}) r5 = socket$netlink(0x10, 0x3, 0x8000000004) writev(r5, &(0x7f0000000180)=[{&(0x7f00000001c0)="580000001500add427323b472545b45602117fffffff81000e22d991000000000000a80013007b00090080007f000001e809000000ff0000f03ac7100003ffffffffffffffffffffffe7ee000000deff0000000200000000", 0x58}], 0x1) kernel console output (not intermixed with test programs): 9] syzkaller1: entered allmulticast mode [ 260.609769][T12683] input: Bluetooth HID Boot Protocol Device as /devices/virtual/bluetooth/hci4/hci4:200/input6 [ 260.787785][T12692] netlink: 'syz.0.1911': attribute type 4 has an invalid length. [ 260.851791][T12692] __nla_validate_parse: 13 callbacks suppressed [ 260.851810][T12692] netlink: 152 bytes leftover after parsing attributes in process `syz.0.1911'. [ 261.008445][T12692] .`: renamed from bond0 (while UP) [ 262.817783][ T3395] net_ratelimit: 21 callbacks suppressed [ 262.817806][ T3395] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 262.835012][ T188] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 262.896726][ C1] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 262.905547][ T42] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 262.977446][ T5806] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 263.160640][T12668] nci: __nci_request: wait_for_completion_interruptible_timeout failed -512 [ 263.205471][T12719] netlink: 'syz.0.1916': attribute type 11 has an invalid length. [ 263.244385][T12719] netlink: 'syz.0.1916': attribute type 4 has an invalid length. [ 263.269430][T12719] netlink: 224 bytes leftover after parsing attributes in process `syz.0.1916'. [ 263.461150][ T3395] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 263.710572][T12738] netlink: 'syz.2.1923': attribute type 10 has an invalid length. [ 263.741043][T12738] bond0: (slave virt_wifi0): The slave device specified does not support setting the MAC address [ 263.765037][T12738] bond0: (slave virt_wifi0): Error -95 calling set_mac_address [ 263.870332][T12745] netlink: 'syz.4.1924': attribute type 1 has an invalid length. [ 263.922754][T12751] netlink: 12 bytes leftover after parsing attributes in process `syz.4.1924'. [ 263.936881][ C1] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 263.948315][ T42] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 264.005746][T12752] netlink: 4 bytes leftover after parsing attributes in process `syz.1.1926'. [ 264.022839][ T42] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 264.232863][T12752] hsr_slave_1 (unregistering): left promiscuous mode [ 264.251754][T12769] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 264.269624][T12754] batadv_slave_0: Caught tx_queue_len zero misconfig [ 264.652183][T12784] xt_hashlimit: size too large, truncated to 1048576 [ 264.719107][T12788] netlink: 45349 bytes leftover after parsing attributes in process `syz.2.1934'. [ 264.731033][T12788] 1ªX¹¦Dö»: renamed from 00ªX¹¦Dö» (while UP) [ 264.992136][T12799] netlink: 199784 bytes leftover after parsing attributes in process `syz.0.1940'. [ 265.055541][T12799] netlink: 'syz.0.1940': attribute type 1 has an invalid length. [ 265.079685][T12801] netlink: 199784 bytes leftover after parsing attributes in process `syz.0.1940'. [ 265.090690][T12801] netlink: 'syz.0.1940': attribute type 1 has an invalid length. [ 265.122562][T12806] netlink: 'syz.4.1942': attribute type 4 has an invalid length. [ 265.152225][T12808] netlink: 216 bytes leftover after parsing attributes in process `syz.3.1943'. [ 265.175107][T12806] netlink: 28 bytes leftover after parsing attributes in process `syz.4.1942'. [ 265.185148][T12808] netlink: 8 bytes leftover after parsing attributes in process `syz.3.1943'. [ 265.205167][T12808] netlink: 'syz.3.1943': attribute type 8 has an invalid length. [ 265.372135][T12814] xt_CT: You must specify a L4 protocol and not use inversions on it [ 265.695922][T12830] dvmrp8: entered allmulticast mode [ 265.917285][T12840] IPVS: set_ctl: invalid protocol: 22 172.20.20.187:20002 [ 266.136168][T12849] x_tables: unsorted underflow at hook 4 [ 266.160196][T12853] netlink: 8 bytes leftover after parsing attributes in process `syz.3.1958'. [ 266.163718][T12854] netlink: 8 bytes leftover after parsing attributes in process `syz.3.1958'. [ 266.209853][T12857] netlink: 16 bytes leftover after parsing attributes in process `syz.4.1959'. [ 266.220282][T12854] netlink: 20 bytes leftover after parsing attributes in process `syz.3.1958'. [ 266.238497][T12853] netlink: 20 bytes leftover after parsing attributes in process `syz.3.1958'. [ 266.384450][T12864] pimreg: entered allmulticast mode [ 266.567911][T12875] netlink: 20 bytes leftover after parsing attributes in process `syz.0.1964'. [ 266.640821][T12879] x_tables: duplicate underflow at hook 1 [ 266.737898][T12881] 8021q: adding VLAN 0 to HW filter on device bond8 [ 266.844434][T12892] netlink: 8 bytes leftover after parsing attributes in process `syz.3.1970'. [ 266.856260][T12893] netlink: 8 bytes leftover after parsing attributes in process `syz.3.1970'. [ 267.060885][T12905] netlink: 108 bytes leftover after parsing attributes in process `syz.3.1973'. [ 267.112278][T12905] Cannot find set identified by id 65534 to match [ 267.217282][T12914] netlink: 20 bytes leftover after parsing attributes in process `syz.4.1975'. [ 268.096726][ C1] net_ratelimit: 144 callbacks suppressed [ 268.096747][ C1] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 268.112352][ T5806] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 268.177360][ T5806] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 268.216268][T12973] netlink: 'syz.0.1995': attribute type 1 has an invalid length. [ 268.254691][T12972] sctp: [Deprecated]: syz.1.1994 (pid 12972) Use of int in maxseg socket option. [ 268.254691][T12972] Use struct sctp_assoc_value instead [ 268.271469][T12973] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 268.358630][T12979] netlink: 'syz.2.1996': attribute type 12 has an invalid length. [ 268.581808][ T136] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 268.899139][ T5720] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 269.136695][ C1] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 269.147425][ T5734] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 269.188240][T12994] netlink: 'syz.2.1999': attribute type 1 has an invalid length. [ 269.198878][T12995] netlink: 'syz.2.1999': attribute type 1 has an invalid length. [ 269.218112][ T3395] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 269.227681][ T3395] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 269.880745][T13033] FAULT_INJECTION: forcing a failure. [ 269.880745][T13033] name failslab, interval 1, probability 0, space 0, times 0 [ 269.894007][T13033] CPU: 0 UID: 0 PID: 13033 Comm: syz.1.2012 Not tainted syzkaller #0 PREEMPT(full) [ 269.894037][T13033] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/24/2026 [ 269.894049][T13033] Call Trace: [ 269.894057][T13033] [ 269.894077][T13033] dump_stack_lvl+0xe8/0x150 [ 269.894111][T13033] should_fail_ex+0x410/0x560 [ 269.894146][T13033] should_failslab+0xa8/0x100 [ 269.894176][T13033] __kmalloc_noprof+0xfe/0x720 [ 269.894201][T13033] ? genl_family_rcv_msg_attrs_parse+0xd0/0x2f0 [ 269.894228][T13033] ? genl_family_rcv_msg_attrs_parse+0xd0/0x2f0 [ 269.894263][T13033] genl_family_rcv_msg_attrs_parse+0xd0/0x2f0 [ 269.894319][T13033] genl_family_rcv_msg_doit+0xda/0x340 [ 269.894353][T13033] ? __pfx_genl_family_rcv_msg_doit+0x10/0x10 [ 269.894390][T13033] ? apparmor_capable+0x126/0x170 [ 269.894419][T13033] ? bpf_lsm_capable+0x9/0x20 [ 269.894444][T13033] ? security_capable+0x7e/0x2c0 [ 269.894492][T13033] genl_rcv_msg+0x614/0x7a0 [ 269.894525][T13033] ? __pfx_genl_rcv_msg+0x10/0x10 [ 269.894551][T13033] ? __pfx_nl80211_pre_doit+0x10/0x10 [ 269.894580][T13033] ? __pfx_nl80211_leave_mesh+0x10/0x10 [ 269.894610][T13033] ? __pfx_nl80211_post_doit+0x10/0x10 [ 269.894659][T13033] ? __pfx_ref_tracker_free+0x10/0x10 [ 269.894694][T13033] netlink_rcv_skb+0x226/0x4a0 [ 269.894717][T13033] ? __pfx_genl_rcv_msg+0x10/0x10 [ 269.894747][T13033] ? __pfx_netlink_rcv_skb+0x10/0x10 [ 269.894786][T13033] ? down_read+0x2be/0x330 [ 269.894818][T13033] genl_rcv+0x28/0x40 [ 269.894843][T13033] netlink_unicast+0x7bd/0x940 [ 269.894893][T13033] netlink_sendmsg+0x813/0xb40 [ 269.894926][T13033] ? __pfx_netlink_sendmsg+0x10/0x10 [ 269.894953][T13033] ? aa_sock_msg_perm+0xf6/0x1c0 [ 269.894994][T13033] ? __pfx_netlink_sendmsg+0x10/0x10 [ 269.895014][T13033] sock_sendmsg_nosec+0x13a/0x180 [ 269.895043][T13033] ____sys_sendmsg+0x54e/0x850 [ 269.895082][T13033] ? __pfx_____sys_sendmsg+0x10/0x10 [ 269.895125][T13033] ? import_iovec+0x73/0xa0 [ 269.895151][T13033] ___sys_sendmsg+0x2a5/0x360 [ 269.895182][T13033] ? __lock_acquire+0x683/0x2cf0 [ 269.895219][T13033] ? __pfx____sys_sendmsg+0x10/0x10 [ 269.895292][T13033] ? __fget_files+0x2a/0x420 [ 269.895320][T13033] ? __fget_files+0x3a2/0x420 [ 269.895361][T13033] __x64_sys_sendmsg+0x1b1/0x290 [ 269.895397][T13033] ? __pfx___x64_sys_sendmsg+0x10/0x10 [ 269.895450][T13033] do_syscall_64+0x166/0x520 [ 269.895482][T13033] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 269.895506][T13033] ? clear_bhb_loop+0x70/0xc0 [ 269.895534][T13033] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 269.895556][T13033] RIP: 0033:0x7f574ed9e0d9 [ 269.895576][T13033] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 269.895595][T13033] RSP: 002b:00007f574fb99028 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 269.895618][T13033] RAX: ffffffffffffffda RBX: 00007f574f025fa0 RCX: 00007f574ed9e0d9 [ 269.895635][T13033] RDX: 0000000004044800 RSI: 0000200000000300 RDI: 0000000000000004 [ 269.895649][T13033] RBP: 00007f574fb99090 R08: 0000000000000000 R09: 0000000000000000 [ 269.895662][T13033] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 269.895675][T13033] R13: 00007f574f026038 R14: 00007f574f025fa0 R15: 00007ffd54440a28 [ 269.895708][T13033] [ 270.570104][T13057] netlink: 'syz.1.2019': attribute type 11 has an invalid length. [ 270.822781][T13069] netlink: 'syz.0.2024': attribute type 30 has an invalid length. [ 271.024968][T13071] tc_dump_action: action bad kind [ 271.220096][T13085] tipc: Enabling of bearer rejected, failed to enable media [ 271.844262][T13113] netlink: 'syz.3.2036': attribute type 7 has an invalid length. [ 272.071540][T13126] Cannot find del_set index 4 as target [ 272.327695][T13139] FAULT_INJECTION: forcing a failure. [ 272.327695][T13139] name failslab, interval 1, probability 0, space 0, times 0 [ 272.378734][T13139] CPU: 0 UID: 0 PID: 13139 Comm: syz.4.2044 Not tainted syzkaller #0 PREEMPT(full) [ 272.378772][T13139] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/24/2026 [ 272.378786][T13139] Call Trace: [ 272.378794][T13139] [ 272.378803][T13139] dump_stack_lvl+0xe8/0x150 [ 272.378841][T13139] should_fail_ex+0x410/0x560 [ 272.378884][T13139] should_failslab+0xa8/0x100 [ 272.378918][T13139] kmem_cache_alloc_noprof+0xa6/0x5f0 [ 272.378944][T13139] ? skb_clone+0x212/0x3a0 [ 272.378964][T13139] ? skb_clone+0x212/0x3a0 [ 272.378991][T13139] skb_clone+0x212/0x3a0 [ 272.379016][T13139] __netlink_deliver_tap+0x413/0x860 [ 272.379052][T13139] ? netlink_deliver_tap+0x2e/0x1b0 [ 272.379075][T13139] netlink_deliver_tap+0x19c/0x1b0 [ 272.379100][T13139] netlink_sendskb+0x68/0x140 [ 272.379137][T13139] netlink_rcv_skb+0x2a4/0x4a0 [ 272.379159][T13139] ? __pfx_genl_rcv_msg+0x10/0x10 [ 272.379198][T13139] ? __pfx_netlink_rcv_skb+0x10/0x10 [ 272.379237][T13139] ? down_read+0x2be/0x330 [ 272.379270][T13139] genl_rcv+0x28/0x40 [ 272.379296][T13139] netlink_unicast+0x7bd/0x940 [ 272.379341][T13139] netlink_sendmsg+0x813/0xb40 [ 272.379374][T13139] ? __pfx_netlink_sendmsg+0x10/0x10 [ 272.379401][T13139] ? aa_sock_msg_perm+0xf6/0x1c0 [ 272.379444][T13139] ? __pfx_netlink_sendmsg+0x10/0x10 [ 272.379465][T13139] sock_sendmsg_nosec+0x13a/0x180 [ 272.379495][T13139] ____sys_sendmsg+0x54e/0x850 [ 272.379535][T13139] ? __pfx_____sys_sendmsg+0x10/0x10 [ 272.379579][T13139] ? import_iovec+0x73/0xa0 [ 272.379606][T13139] ___sys_sendmsg+0x2a5/0x360 [ 272.379638][T13139] ? __lock_acquire+0x683/0x2cf0 [ 272.379675][T13139] ? __pfx____sys_sendmsg+0x10/0x10 [ 272.379750][T13139] ? __fget_files+0x2a/0x420 [ 272.379778][T13139] ? __fget_files+0x3a2/0x420 [ 272.379821][T13139] __x64_sys_sendmsg+0x1b1/0x290 [ 272.379858][T13139] ? __pfx___x64_sys_sendmsg+0x10/0x10 [ 272.379916][T13139] do_syscall_64+0x166/0x520 [ 272.379940][T13139] ? trace_irq_disable+0x3b/0x140 [ 272.379968][T13139] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 272.379991][T13139] ? clear_bhb_loop+0x70/0xc0 [ 272.380019][T13139] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 272.380041][T13139] RIP: 0033:0x7f671af9e0d9 [ 272.380062][T13139] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 272.380080][T13139] RSP: 002b:00007f671bdd6028 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 272.380103][T13139] RAX: ffffffffffffffda RBX: 00007f671b225fa0 RCX: 00007f671af9e0d9 [ 272.380120][T13139] RDX: 0000000004044800 RSI: 0000200000000300 RDI: 0000000000000004 [ 272.380133][T13139] RBP: 00007f671bdd6090 R08: 0000000000000000 R09: 0000000000000000 [ 272.380159][T13139] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 272.380172][T13139] R13: 00007f671b226038 R14: 00007f671b225fa0 R15: 00007ffd77e1c858 [ 272.380212][T13139] [ 272.474051][T13144] __nla_validate_parse: 6 callbacks suppressed [ 272.474105][T13144] netlink: 4 bytes leftover after parsing attributes in process `syz.1.2046'. [ 272.785818][T13150] netlink: 9 bytes leftover after parsing attributes in process `syz.3.2048'. [ 272.810022][T13150] 0·: renamed from hsr0 (while UP) [ 272.845235][T13150] 0·: entered allmulticast mode [ 272.855113][T13150] hsr_slave_0: entered allmulticast mode [ 272.865723][T13150] hsr_slave_1: entered allmulticast mode [ 273.113455][T13172] netlink: 4 bytes leftover after parsing attributes in process `syz.2.2051'. [ 273.217268][T13175] netlink: 'syz.3.2054': attribute type 2 has an invalid length. [ 273.296726][ C1] net_ratelimit: 25 callbacks suppressed [ 273.296747][ C1] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 273.313967][ T5734] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 273.380538][ T5734] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 273.404395][T13184] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check. [ 273.628298][ C0] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 273.689034][T13201] sctp: [Deprecated]: syz.4.2061 (pid 13201) Use of int in max_burst socket option. [ 273.689034][T13201] Use struct sctp_assoc_value instead [ 274.304577][T13231] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 274.313950][ C1] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 274.340393][ T5801] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 274.360527][T13231] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 274.400385][T13227] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 274.458073][T13237] netlink: 'syz.0.2075': attribute type 1 has an invalid length. [ 274.476191][T13237] netlink: 224 bytes leftover after parsing attributes in process `syz.0.2075'. [ 274.702286][T13250] netlink: 28 bytes leftover after parsing attributes in process `syz.3.2078'. [ 274.732446][T13250] netlink: 'syz.3.2078': attribute type 7 has an invalid length. [ 274.777611][T13250] netlink: 'syz.3.2078': attribute type 8 has an invalid length. [ 274.791050][T13250] netlink: 4 bytes leftover after parsing attributes in process `syz.3.2078'. [ 274.804500][T13259] C: renamed from lo (while UP) [ 275.193596][T13276] netlink: 16 bytes leftover after parsing attributes in process `syz.4.2088'. [ 275.632536][T13298] netlink: 12 bytes leftover after parsing attributes in process `syz.2.2094'. [ 275.647833][T13288] bond0: option packets_per_slave: invalid value (18446744073709551615) [ 275.679007][T13288] bond0: option packets_per_slave: allowed values 0 - 65535 [ 275.695765][T13288] bond0 (unregistering): Released all slaves [ 275.711549][T13301] netlink: 332 bytes leftover after parsing attributes in process `syz.4.2096'. [ 275.882137][T13287] bridge0: port 2(bridge_slave_1) entered disabled state [ 275.931556][T13315] netlink: 20 bytes leftover after parsing attributes in process `syz.3.2095'. [ 276.034346][T13307] syzkaller1: entered promiscuous mode [ 276.045944][T13307] syzkaller1: entered allmulticast mode [ 280.077711][ T4983] udevd[4983]: worker [5625] /devices/virtual/block/nbd1 is taking a long time [ 280.737349][ T3385] net_ratelimit: 23 callbacks suppressed [ 280.737366][ T3385] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 283.088625][ T4983] udevd[4983]: worker [5625] /devices/virtual/block/nbd1 timeout; kill it [ 283.098680][ T4983] udevd[4983]: seq 10738 '/devices/virtual/block/nbd1' killed [ 283.297202][ T3385] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 283.305462][ T3385] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 283.313885][ T60] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 283.328298][ T1614] block nbd1: Possible stuck request ffff888027e0e000: control (read@0,1024B). Runtime 180 seconds [ 283.339760][ T1614] block nbd1: Possible stuck request ffff888027e0e1c0: control (read@1024,1024B). Runtime 180 seconds [ 283.351821][ T1614] block nbd1: Possible stuck request ffff888027e0e380: control (read@2048,1024B). Runtime 180 seconds [ 283.363515][ T1614] block nbd1: Possible stuck request ffff888027e0e540: control (read@3072,1024B). Runtime 180 seconds [ 284.578490][ T10] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 286.497308][ T136] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 289.058540][ T3377] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 289.066727][ T3377] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 289.074841][ T3377] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 292.256603][ C0] ip6_tunnel: ip6gre1 xmit: Local address not yet configured! [ 292.264787][ T136] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 294.187302][ T10] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 294.816827][ T136] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 294.827292][ T136] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 294.836033][ T3377] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 297.377256][ T1115] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 298.374396][T13340] __nla_validate_parse: 2 callbacks suppressed [ 298.374417][T13340] netlink: 72 bytes leftover after parsing attributes in process `syz.0.2104'. [ 298.398765][T13337] xt_hashlimit: size too large, truncated to 1048576 [ 298.459599][T13338] netlink: 56 bytes leftover after parsing attributes in process `syz.2.2106'. [ 298.813454][T13355] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 298.822904][ C0] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 298.834186][T13355] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 298.847383][T13358] SET target dimension over the limit! [ 298.864069][T13353] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 298.873037][ T10] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 298.941617][T13353] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 298.972789][T13353] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 299.016093][T13361] netlink: 16 bytes leftover after parsing attributes in process `syz.1.2114'. [ 299.201936][T13369] netlink: 'syz.0.2117': attribute type 1 has an invalid length. [ 299.214267][T13370] netlink: 'syz.1.2118': attribute type 17 has an invalid length. [ 299.226017][T13370] netlink: 4 bytes leftover after parsing attributes in process `syz.1.2118'. [ 299.248171][T13370] netlink: 28 bytes leftover after parsing attributes in process `syz.1.2118'. [ 299.353689][T13369] 8021q: adding VLAN 0 to HW filter on device bond0 [ 299.391732][T13370] erspan0: entered promiscuous mode [ 299.399379][T13370] erspan0: left promiscuous mode [ 299.431816][T13381] bond0: (slave geneve3): making interface the new active one [ 299.442484][T13381] bond0: (slave geneve3): Enslaving as an active interface with an up link [ 299.835015][T13412] netlink: 12 bytes leftover after parsing attributes in process `syz.1.2127'. [ 299.943469][T13416] veth0_macvtap: Caught tx_queue_len zero misconfig [ 299.957990][ T136] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 299.992559][T13419] netlink: 'syz.0.2132': attribute type 2 has an invalid length. [ 300.010890][T13416] netlink: 822 bytes leftover after parsing attributes in process `syz.3.2130'. [ 300.038793][T13416] wg0: entered allmulticast mode [ 300.044247][T13416] wg0: left allmulticast mode [ 300.240709][T13433] netlink: 80 bytes leftover after parsing attributes in process `syz.0.2136'. [ 300.286123][T13435] xt_CT: You must specify a L4 protocol and not use inversions on it [ 300.295235][T13433] openvswitch: netlink: Message has 8 unknown bytes. [ 300.332822][T13435] netlink: 12 bytes leftover after parsing attributes in process `syz.2.2138'. [ 300.630534][T13462] netlink: 'syz.4.2145': attribute type 2 has an invalid length. [ 300.798767][T13472] netlink: 24 bytes leftover after parsing attributes in process `syz.2.2149'. [ 300.975490][T13481] ip6t_rpfilter: unknown options [ 300.981685][T13482] ip6t_rpfilter: unknown options [ 302.291748][T13544] vcan0: tx address claim with broadcast sa [ 302.418793][ T136] net_ratelimit: 4 callbacks suppressed [ 302.418812][ T136] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 302.902744][T13582] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 302.921947][T13582] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 302.931296][T13582] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 302.940332][T13582] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 302.949254][T13582] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 302.959078][T13582] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 303.048075][T13578] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 303.332002][T13602] netlink: 'syz.2.2178': attribute type 2 has an invalid length. [ 303.616268][T13617] __nla_validate_parse: 5 callbacks suppressed [ 303.616290][T13617] netlink: 8 bytes leftover after parsing attributes in process `syz.2.2183'. [ 303.700579][T13617] 1ªX¹¦Dö»: entered promiscuous mode [ 303.782073][ T10] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 303.875373][T13619] mac80211_hwsim hwsim11 syzkaller0: entered promiscuous mode [ 303.951491][T13619] mac80211_hwsim hwsim11 syzkaller0: entered allmulticast mode [ 304.378365][T13656] netlink: 4 bytes leftover after parsing attributes in process `syz.0.2187'. [ 304.409379][T13657] netlink: 420 bytes leftover after parsing attributes in process `syz.4.2189'. [ 304.442508][T13657] openvswitch: netlink: Flow get message rejected, Key attribute missing. [ 305.187532][T13652] netlink: 'syz.2.2192': attribute type 3 has an invalid length. [ 305.242530][T13656] veth0_macvtap: left promiscuous mode [ 305.485560][T13692] netlink: 20 bytes leftover after parsing attributes in process `syz.2.2196'. [ 305.608314][T13692] ip6gre1: entered promiscuous mode [ 305.667735][T13692] ip6gre1: entered allmulticast mode [ 306.180714][T13726] netlink: 44 bytes leftover after parsing attributes in process `syz.0.2202'. [ 306.251355][T13728] netlink: 44 bytes leftover after parsing attributes in process `syz.0.2202'. [ 306.351495][T13733] x_tables: ip_tables: DNAT target: used from hooks POSTROUTING, but only usable from PREROUTING/OUTPUT [ 306.425302][T13738] x_tables: ip_tables: DNAT target: used from hooks POSTROUTING, but only usable from PREROUTING/OUTPUT [ 306.471441][T13733] x_tables: ip_tables: DNAT target: used from hooks POSTROUTING, but only usable from PREROUTING/OUTPUT [ 306.523792][T13738] x_tables: ip_tables: DNAT target: used from hooks POSTROUTING, but only usable from PREROUTING/OUTPUT [ 306.551588][T13740] netlink: 16215 bytes leftover after parsing attributes in process `syz.1.2206'. [ 306.580621][T13733] x_tables: ip_tables: DNAT target: used from hooks POSTROUTING, but only usable from PREROUTING/OUTPUT [ 306.592789][T13744] netlink: 4 bytes leftover after parsing attributes in process `syz.0.2207'. [ 306.615881][T13733] x_tables: ip_tables: DNAT target: used from hooks POSTROUTING, but only usable from PREROUTING/OUTPUT [ 306.650519][T13749] netlink: 40 bytes leftover after parsing attributes in process `syz.3.2209'. [ 306.693997][T13733] x_tables: ip_tables: DNAT target: used from hooks POSTROUTING, but only usable from PREROUTING/OUTPUT [ 306.709949][T13747] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 306.729526][T13738] x_tables: ip_tables: DNAT target: used from hooks POSTROUTING, but only usable from PREROUTING/OUTPUT [ 306.780737][T13733] x_tables: ip_tables: DNAT target: used from hooks POSTROUTING, but only usable from PREROUTING/OUTPUT [ 306.846751][T13738] x_tables: ip_tables: DNAT target: used from hooks POSTROUTING, but only usable from PREROUTING/OUTPUT [ 307.117660][T13767] netlink: 'syz.4.2214': attribute type 49 has an invalid length. [ 307.364843][T13767] ip6gretap0: entered promiscuous mode [ 307.417059][T13767] ip6gretap0: entered allmulticast mode [ 307.537450][ T3377] net_ratelimit: 3 callbacks suppressed [ 307.537479][ T3377] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 308.032051][T13808] netlink: 12 bytes leftover after parsing attributes in process `syz.4.2223'. [ 308.251207][T13816] netlink: 'syz.3.2225': attribute type 16 has an invalid length. [ 308.288071][T13816] netlink: 'syz.3.2225': attribute type 3 has an invalid length. [ 308.544537][T13831] netlink: 'syz.1.2228': attribute type 5 has an invalid length. [ 308.681477][ T42] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 308.775371][T13842] A link change request failed with some changes committed already. Interface gre1 may have been left with an inconsistent configuration, please check. [ 309.028672][T13857] ip_tables: iptables: counters copy to user failed while replacing table [ 309.170156][T13866] netlink: 'syz.1.2240': attribute type 1 has an invalid length. [ 309.175632][T13864] netlink: 'syz.4.2239': attribute type 1 has an invalid length. [ 309.370273][T13866] bond5: entered promiscuous mode [ 309.376212][T13866] 8021q: adding VLAN 0 to HW filter on device bond5 [ 309.784922][ T5806] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 309.803231][T13895] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check. [ 309.922811][T13911] IPv6: RTM_NEWROUTE with no NLM_F_CREATE or NLM_F_REPLACE [ 309.930165][T13911] IPv6: NLM_F_CREATE should be set when creating new route [ 310.073216][T13915] netlink: 'syz.0.2251': attribute type 10 has an invalid length. [ 310.335323][T13931] __nla_validate_parse: 3 callbacks suppressed [ 310.335361][T13931] netlink: 24 bytes leftover after parsing attributes in process `syz.1.2256'. [ 310.404122][T13934] netlink: 96 bytes leftover after parsing attributes in process `syz.0.2257'. [ 310.433472][T13934] netlink: 16 bytes leftover after parsing attributes in process `syz.0.2257'. [ 310.535652][T13941] syzkaller0: Caught tx_queue_len zero misconfig [ 310.644330][T13944] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check. [ 310.779544][T13950] bond5: option lacp_active: mode dependency failed, not supported in mode active-backup(1) [ 310.821011][ T3395] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 310.841579][T13950] bond5 (unregistering): Released all slaves [ 310.885527][T13958] smc: net device team0 applied user defined pnetid SYZ2 [ 311.208970][T13978] netlink: 8 bytes leftover after parsing attributes in process `syz.0.2265'. [ 312.008710][T14015] openvswitch: netlink: Tunnel attr 68 out of range max 16 [ 312.100530][ T3377] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 312.640183][T14050] xt_addrtype: input interface limitation not valid in POSTROUTING and OUTPUT [ 312.659099][ T3395] net_ratelimit: 1 callbacks suppressed [ 312.659119][ T3395] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 313.359881][T14090] openvswitch: netlink: IP tunnel TTL not specified. [ 313.368502][T14086] netlink: 16 bytes leftover after parsing attributes in process `syz.1.2288'. [ 313.387402][ T5720] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 313.398113][ T1614] block nbd1: Possible stuck request ffff888027e0e000: control (read@0,1024B). Runtime 210 seconds [ 313.411751][ T1614] block nbd1: Possible stuck request ffff888027e0e1c0: control (read@1024,1024B). Runtime 210 seconds [ 313.423752][ T1614] block nbd1: Possible stuck request ffff888027e0e380: control (read@2048,1024B). Runtime 210 seconds [ 313.435593][ T1614] block nbd1: Possible stuck request ffff888027e0e540: control (read@3072,1024B). Runtime 210 seconds [ 313.518340][T14096] bridge7: the hash_elasticity option has been deprecated and is always 16 [ 313.651757][T14102] netlink: 8 bytes leftover after parsing attributes in process `syz.3.2293'. [ 313.764766][T14108] openvswitch: netlink: Unexpected mask (mask=10000010, allowed=10058) [ 314.076231][T14125] openvswitch: netlink: IP tunnel attribute has 8 unknown bytes. [ 314.132626][T14125] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 314.214307][T14133] tipc: Started in network mode [ 314.219494][T14133] tipc: Node identity ac141441, cluster identity 4711 [ 314.229411][T14133] tipc: Enabled bearer , priority 10 [ 314.343773][T14146] netlink: 16178 bytes leftover after parsing attributes in process `syz.2.2305'. [ 314.418736][T14148] bond0: entered promiscuous mode [ 314.424541][T14148] bond_slave_0: entered promiscuous mode [ 314.457286][T14148] bond_slave_1: entered promiscuous mode [ 314.493585][T14148] team0: entered promiscuous mode [ 314.515500][T14148] team_slave_1: entered promiscuous mode [ 314.563729][T14148] dummy0: entered promiscuous mode [ 314.583746][T14148] batadv0: entered promiscuous mode [ 314.602880][T14148] 8021q: adding VLAN 0 to HW filter on device hsr0 [ 314.615935][T14148] bond0: left promiscuous mode [ 314.622652][T14148] bond_slave_0: left promiscuous mode [ 314.633300][T14148] bond_slave_1: left promiscuous mode [ 314.652142][T14148] team0: left promiscuous mode [ 314.658220][T14148] team_slave_1: left promiscuous mode [ 314.665168][T14148] dummy0: left promiscuous mode [ 314.696118][T14148] batadv0: left promiscuous mode [ 314.959983][T14174] netlink: 32 bytes leftover after parsing attributes in process `syz.0.2311'. [ 315.100090][T14182] netlink: 8 bytes leftover after parsing attributes in process `syz.2.2315'. [ 315.151538][T14188] netlink: 4 bytes leftover after parsing attributes in process `syz.3.2316'. [ 315.180926][T14188] IPv6: addrconf: prefix option has invalid lifetime [ 315.189294][T14188] IPv6: addrconf: prefix option has invalid lifetime [ 315.357374][ T5720] tipc: Node number set to 2886997057 [ 315.504773][T14195] netlink: 'syz.4.2318': attribute type 1 has an invalid length. [ 315.641639][T14212] netlink: 28 bytes leftover after parsing attributes in process `syz.2.2326'. [ 315.820005][T14224] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check. [ 315.837614][T14223] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check. [ 316.363055][T14253] gre1: entered promiscuous mode [ 316.369374][T14253] gre1: entered allmulticast mode [ 316.503340][T14262] netlink: 4 bytes leftover after parsing attributes in process `syz.2.2341'. [ 316.713272][T14279] netlink: 16 bytes leftover after parsing attributes in process `syz.3.2346'. [ 316.784826][T14282] Bluetooth: hci0: unsupported parameter 5135 [ 316.795122][T14282] Bluetooth: hci0: unsupported parameter 1297 [ 316.802024][T14282] Bluetooth: hci0: invalid length 0, exp 2 for type 2 [ 317.249376][T14298] macsec1: entered promiscuous mode [ 317.389634][T14307] netlink: 'syz.0.2355': attribute type 1 has an invalid length. [ 317.573955][T14307] veth3: entered promiscuous mode [ 317.688034][T14315] netlink: 8 bytes leftover after parsing attributes in process `syz.2.2357'. [ 317.859301][ T136] net_ratelimit: 15 callbacks suppressed [ 317.859323][ T136] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 317.940047][ T3385] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 318.171512][T14327] netlink: 8 bytes leftover after parsing attributes in process `syz.3.2360'. [ 319.607118][T14270] nci: __nci_request: wait_for_completion_interruptible_timeout failed -512 [ 319.831817][T14348] netlink: 16 bytes leftover after parsing attributes in process `syz.3.2364'. [ 319.863004][T14349] pim6reg: entered allmulticast mode [ 319.871387][T14352] netlink: 'syz.2.2367': attribute type 1 has an invalid length. [ 319.890774][T14352] netlink: 'syz.2.2367': attribute type 1 has an invalid length. [ 320.021074][T14364] netlink: 'syz.0.2369': attribute type 10 has an invalid length. [ 320.037057][T14364] netlink: 'syz.0.2369': attribute type 10 has an invalid length. [ 320.211901][T14375] netlink: 8 bytes leftover after parsing attributes in process `syz.1.2373'. [ 320.221293][T14370] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 320.230173][ C1] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 320.252534][T14370] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 320.262898][ C1] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 320.279342][T14370] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 320.288700][ C1] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 320.289668][T14378] veth0: entered promiscuous mode [ 320.305426][T14370] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 320.314786][ C1] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 320.401796][T14387] gtp1: entered promiscuous mode [ 320.441500][T14387] gtp1: entered allmulticast mode [ 320.598134][T14379] veth0: left promiscuous mode [ 320.681618][T14393] netlink: 18304 bytes leftover after parsing attributes in process `syz.1.2377'. [ 320.712208][T14391] netlink: 'syz.3.2376': attribute type 39 has an invalid length. [ 320.741565][T14398] netlink: 'syz.4.2379': attribute type 1 has an invalid length. [ 320.742747][T14395] netlink: 16 bytes leftover after parsing attributes in process `syz.2.2378'. [ 320.868577][T14406] netlink: 8 bytes leftover after parsing attributes in process `syz.0.2383'. [ 320.878678][T14406] netlink: 8 bytes leftover after parsing attributes in process `syz.0.2383'. [ 320.926074][T14398] bond10: entered promiscuous mode [ 320.950188][T14398] 8021q: adding VLAN 0 to HW filter on device bond10 [ 321.071184][T14401] vlan5: entered allmulticast mode [ 321.077555][T14401] bond10: entered allmulticast mode [ 321.127618][T14408] bond10: (slave bridge4): making interface the new active one [ 321.143057][T14408] bridge4: entered promiscuous mode [ 321.169032][T14408] bridge4: entered allmulticast mode [ 321.187202][T14408] bond10: (slave bridge4): Enslaving as an active interface with an up link [ 321.207880][T14407] syzkaller0: left promiscuous mode [ 321.230134][T14407] syzkaller0: left allmulticast mode [ 321.257193][T14415] tipc: Enabled bearer , priority 10 [ 321.324963][T14395] tipc: Enabling of bearer rejected, already enabled [ 321.363650][T14432] sctp: [Deprecated]: syz.0.2388 (pid 14432) Use of struct sctp_assoc_value in delayed_ack socket option. [ 321.363650][T14432] Use struct sctp_sack_info instead [ 321.427137][ T3395] ip6_tunnel: ip6gre2 xmit: Local address not yet configured! [ 321.441708][ T3395] ip6_tunnel: ip6gre2 xmit: Local address not yet configured! [ 321.450355][ T42] ip6_tunnel: ip6gre2 xmit: Local address not yet configured! [ 321.559317][T14440] netlink: 12 bytes leftover after parsing attributes in process `syz.4.2390'. [ 321.601970][T14440] netlink: 12 bytes leftover after parsing attributes in process `syz.4.2390'. [ 321.627322][ T42] ip6_tunnel: ip6gre2 xmit: Local address not yet configured! [ 321.667799][ T42] ip6_tunnel: ip6gre2 xmit: Local address not yet configured! [ 321.728550][T14440] vlan0: entered promiscuous mode [ 321.764333][T14449] xt_hashlimit: size too large, truncated to 1048576 [ 322.043755][T14470] netlink: 48 bytes leftover after parsing attributes in process `syz.2.2401'. [ 322.229500][T14474] netlink: 'syz.3.2400': attribute type 11 has an invalid length. [ 322.270302][T14474] netlink: 'syz.3.2400': attribute type 49 has an invalid length. [ 322.531972][T14493] netlink: 8 bytes leftover after parsing attributes in process `syz.1.2405'. [ 322.780764][T14488] netlink: 8 bytes leftover after parsing attributes in process `syz.1.2405'. [ 322.892046][ T29] audit: type=1804 audit(1787271823.527:5): pid=14516 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=invalid_pcr cause=open_writers comm="syz.4.2412" name="/newroot/470/cgroup.controllers" dev="tmpfs" ino=2416 res=1 errno=0 [ 322.917463][ T29] audit: type=1800 audit(1787271823.547:6): pid=14516 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.4.2412" name="cgroup.controllers" dev="tmpfs" ino=2416 res=0 errno=0 [ 322.922718][ T1115] net_ratelimit: 125 callbacks suppressed [ 322.922781][ T1115] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 323.227204][T14527] netlink: 4 bytes leftover after parsing attributes in process `syz.1.2416'. [ 323.360182][T14535] tunl0: entered promiscuous mode [ 323.379495][T14535] netlink: 'syz.1.2419': attribute type 4 has an invalid length. [ 323.482397][T14538] tipc: New replicast peer: 0.0.0.0 [ 323.508651][T14538] tipc: Enabled bearer , priority 10 [ 323.596069][T14547] sit0: Caught tx_queue_len zero misconfig [ 323.617355][ T3395] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 323.697085][T14554] netlink: 'syz.1.2425': attribute type 2 has an invalid length. [ 323.756877][T14556] netlink: 'syz.3.2426': attribute type 3 has an invalid length. [ 323.832884][T14559] syzkaller1: tun_chr_ioctl cmd 1074025678 [ 323.873138][T14559] syzkaller1: group set to 0 [ 324.130724][T14580] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 324.141488][ C0] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 324.389564][T14593] netlink: 'syz.4.2439': attribute type 1 has an invalid length. [ 325.160250][T14628] 8021q: adding VLAN 0 to HW filter on device bond5 [ 325.491537][T14653] lo: entered allmulticast mode [ 325.510219][T14653] tunl0: left promiscuous mode [ 325.525931][T14653] tunl0: entered allmulticast mode [ 325.543625][T14653] gre0: entered allmulticast mode [ 325.634030][T14653] gretap0: entered allmulticast mode [ 325.735025][ T60] nci: nci_add_new_protocol: the target found does not have the desired protocol [ 325.782252][T14665] nci: __nci_request: wait_for_completion_interruptible_timeout failed -512 [ 325.786775][T14653] erspan0: entered allmulticast mode [ 325.836770][T14653] ip_vti0: entered allmulticast mode [ 325.856502][ C1] ip6_tunnel: ip6gre2 xmit: Local address not yet configured! [ 325.879970][T14653] ip6_vti0: entered allmulticast mode [ 325.928318][T14653] sit0: entered allmulticast mode [ 326.015762][T14653] ip6tnl0: entered allmulticast mode [ 326.090896][T14653] ip6gre0: entered allmulticast mode [ 326.108033][T14687] __nla_validate_parse: 5 callbacks suppressed [ 326.108053][T14687] netlink: 16 bytes leftover after parsing attributes in process `syz.3.2462'. [ 326.154348][T14653] syz_tun: left promiscuous mode [ 326.173487][T14653] syz_tun: entered allmulticast mode [ 326.191483][T14653] ip6gretap0: entered allmulticast mode [ 326.212421][T14653] bridge0: port 1(bridge_slave_0) entered disabled state [ 326.222828][T14653] bridge0: entered allmulticast mode [ 326.241935][T14689] netlink: 'syz.3.2463': attribute type 4 has an invalid length. [ 326.253344][T14689] netlink: 152 bytes leftover after parsing attributes in process `syz.3.2463'. [ 326.333899][T14689] A link change request failed with some changes committed already. Interface bond0 may have been left with an inconsistent configuration, please check. [ 326.602440][T14702] netlink: 4 bytes leftover after parsing attributes in process `syz.3.2467'. [ 326.819372][ T3385] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 327.459951][ C0] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 327.478833][ T5720] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 327.487104][ T5720] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 327.616135][T14759] netlink: 8 bytes leftover after parsing attributes in process `syz.3.2478'. [ 328.018241][ T1115] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 328.178652][T14788] syzkaller1: tun_chr_ioctl cmd 1074025677 [ 328.200651][T14788] syzkaller1: Refused to change device type [ 328.250571][T14797] netlink: 'syz.2.2489': attribute type 11 has an invalid length. [ 328.281681][T14797] netlink: 'syz.2.2489': attribute type 4 has an invalid length. [ 328.309261][T14803] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 328.324940][T14797] netlink: 224 bytes leftover after parsing attributes in process `syz.2.2489'. [ 328.468176][T14808] netlink: 'syz.3.2492': attribute type 1 has an invalid length. [ 328.540726][T14812] netlink: 52 bytes leftover after parsing attributes in process `syz.3.2492'. [ 328.581531][T14808] bond6: entered promiscuous mode [ 328.588887][T14822] netlink: 52 bytes leftover after parsing attributes in process `syz.3.2492'. [ 328.618372][T14808] 8021q: adding VLAN 0 to HW filter on device bond6 [ 328.660460][T14813] sch_tbf: burst 65537 is lower than device syzkaller0 mtu (65589) ! [ 328.774905][T14813] syzkaller0: entered promiscuous mode [ 328.809482][T14813] syzkaller0: entered allmulticast mode [ 328.898892][T14830] ip6_tables: ip6tables: counters copy to user failed while replacing table [ 329.027064][T14847] netlink: 'syz.2.2501': attribute type 1 has an invalid length. [ 329.056254][T14847] netlink: 8 bytes leftover after parsing attributes in process `syz.2.2501'. [ 329.201606][T14853] netlink: 'syz.3.2502': attribute type 23 has an invalid length. [ 329.305280][T14859] netlink: 344 bytes leftover after parsing attributes in process `syz.4.2504'. [ 329.377781][ T3395] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 329.395533][T14859] pim6reg: entered allmulticast mode [ 329.495096][T14856] bond6: option fail_over_mac: invalid value (16) [ 329.535677][T14856] bond6 (unregistering): Released all slaves [ 329.893277][T14895] netlink: 596 bytes leftover after parsing attributes in process `syz.0.2515'. [ 329.941516][T14889] nci: __nci_request: wait_for_completion_interruptible_timeout failed -512 [ 329.961967][T14894] nci: __nci_request: wait_for_completion_interruptible_timeout failed -512 [ 330.007582][T14901] lo speed is unknown, defaulting to 1000 [ 330.027721][T14901] lo speed is unknown, defaulting to 1000 [ 330.048942][T14901] lo speed is unknown, defaulting to 1000 [ 330.092611][T14901] smbdirect: ib_dev[syz0]: added: RNIC max_fast_reg_page_list_len=256 device_cap_flags=0x200000 kernel_cap_flags=0x10 page_size_cap=0x1000 [ 330.139646][T14901] smbdirect: ib_dev[syz0]: num_ports=1 max_qp_rd_atom=128 max_qp_init_rd_atom=128 max_sgl_rd=0 max_sge_rd=1 max_cqe=3276800 max_qp_wr=32768 max_send_sge=6 max_recv_sge=6 [ 330.160108][T14909] netlink: 'syz.1.2518': attribute type 2 has an invalid length. [ 330.168470][T14901] smbdirect: ib_dev[syz0]PORT[1]: iwarp=1 ib=0 roce=0 v1=0 v2=0 core_cap_flags=0x400008 [ 330.180685][T14910] netlink: 'syz.1.2518': attribute type 2 has an invalid length. [ 330.195437][T14909] netlink: 'syz.1.2518': attribute type 8 has an invalid length. [ 330.211147][T14910] netlink: 'syz.1.2518': attribute type 8 has an invalid length. [ 330.223040][T14901] iwpm_register_pid: Unable to send a nlmsg (client = 2) [ 330.291862][T14901] infiniband syz0: RDMA CMA: cma_listen_on_dev, error -98 [ 330.452720][T14901] lo speed is unknown, defaulting to 1000 [ 330.469516][T14901] lo speed is unknown, defaulting to 1000 [ 330.478551][T14901] lo speed is unknown, defaulting to 1000 [ 330.487044][T14901] lo speed is unknown, defaulting to 1000 [ 330.494778][T14901] lo speed is unknown, defaulting to 1000 [ 330.611382][T14932] netlink: 'syz.4.2526': attribute type 1 has an invalid length. [ 331.313924][T14960] netlink: get zone limit has 8 unknown bytes [ 331.322543][T14960] validate_nla: 1 callbacks suppressed [ 331.322564][T14960] netlink: 'syz.0.2535': attribute type 1 has an invalid length. [ 331.337429][T14960] __nla_validate_parse: 8 callbacks suppressed [ 331.337448][T14960] netlink: 228 bytes leftover after parsing attributes in process `syz.0.2535'. [ 331.722078][T14973] netlink: Unknown conntrack attr (type=32, max=9) [ 331.847497][T14986] netlink: 68 bytes leftover after parsing attributes in process `syz.1.2542'. [ 332.241600][T15004] netlink: 4 bytes leftover after parsing attributes in process `syz.3.2549'. [ 332.268935][T15006] x_tables: duplicate underflow at hook 2 [ 332.302410][T15007] netlink: 8 bytes leftover after parsing attributes in process `syz.3.2549'. [ 332.347902][T15004] batman_adv: batadv0: Interface deactivated: ipvlan2 [ 332.400164][T15004] batman_adv: batadv0: Removing interface: ipvlan2 [ 332.469012][T15011] openvswitch: netlink: Unexpected mask (mask=440, allowed=10048) [ 332.585131][ T3385] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 332.593976][ T136] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 332.812863][T15024] bond7: up delay (9) is not a multiple of miimon (5), value rounded to 5 ms [ 332.822794][T15024] bond7: entered allmulticast mode [ 332.829159][T15025] netlink: 'syz.4.2556': attribute type 22 has an invalid length. [ 332.831748][T15028] netlink: 'syz.1.2557': attribute type 11 has an invalid length. [ 332.856251][T15024] bridge9: entered promiscuous mode [ 332.862384][T15025] netlink: 4 bytes leftover after parsing attributes in process `syz.4.2556'. [ 333.218898][ T3385] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 333.608795][T15062] xt_TCPMSS: path-MTU clamping only supported in FORWARD, OUTPUT and POSTROUTING hooks [ 333.660706][T15062] xt_hashlimit: size too large, truncated to 1048576 [ 333.809731][ T4933] block nbd2: Receive control failed (result -32) [ 333.810779][ T5614] block nbd2: Receive control failed (result -32) [ 333.865113][T15071] netlink: 244 bytes leftover after parsing attributes in process `syz.3.2569'. [ 333.939270][T15074] netlink: 'syz.0.2570': attribute type 11 has an invalid length. [ 334.046048][T15075] netlink: 8 bytes leftover after parsing attributes in process `syz.3.2569'. [ 334.399543][T15089] netlink: 8 bytes leftover after parsing attributes in process `syz.1.2575'. [ 334.496524][ C1] ip6_tunnel: ip6gre2 xmit: Local address not yet configured! [ 334.542427][T15096] netlink: 20 bytes leftover after parsing attributes in process `syz.4.2576'. [ 334.592527][T15096] netlink: 120 bytes leftover after parsing attributes in process `syz.4.2576'. [ 334.635646][T15101] xt_hashlimit: size too large, truncated to 1048576 [ 334.645963][T15101] xt_hashlimit: max too large, truncated to 1048576 [ 334.653562][T15101] xt_hashlimit: invalid rate [ 334.718546][T15109] netlink: 'syz.1.2581': attribute type 2 has an invalid length. [ 334.740199][T15110] netlink: 'syz.1.2581': attribute type 2 has an invalid length. [ 334.779752][T15113] netlink: 'syz.4.2582': attribute type 11 has an invalid length. [ 335.139232][ T3385] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 335.151189][T15134] syzkaller1: entered promiscuous mode [ 335.189133][T15134] syzkaller1: entered allmulticast mode [ 335.442926][T15152] wg2: Caught tx_queue_len zero misconfig [ 335.989809][T15179] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 336.089206][T15188] syzkaller1: entered promiscuous mode [ 336.099381][T15188] syzkaller1: entered allmulticast mode [ 336.443582][T15209] __nla_validate_parse: 13 callbacks suppressed [ 336.443603][T15209] netlink: 4 bytes leftover after parsing attributes in process `syz.1.2607'. [ 336.490354][T15209] netlink: 4 bytes leftover after parsing attributes in process `syz.1.2607'. [ 336.815893][T15223] netlink: 'syz.3.2614': attribute type 21 has an invalid length. [ 336.834556][T15225] x_tables: arp_tables: NFQUEUE target: not valid for this family [ 336.878022][T15225] lo: left allmulticast mode [ 336.897541][T15225] tunl0: left allmulticast mode [ 336.909754][T15225] gre0: left allmulticast mode [ 336.923050][T15227] netlink: 'syz.4.2615': attribute type 21 has an invalid length. [ 336.932257][T15225] gretap0: left allmulticast mode [ 336.961631][T15225] erspan0: left allmulticast mode [ 336.969418][T15225] ip_vti0: left allmulticast mode [ 336.974729][T15225] ip6_vti0: left allmulticast mode [ 336.981147][T15225] sit0: left allmulticast mode [ 336.986206][T15225] ip6tnl0: left allmulticast mode [ 336.993172][T15225] ip6gre0: left allmulticast mode [ 337.000714][T15225] syz_tun: left allmulticast mode [ 337.006141][T15225] ip6gretap0: left allmulticast mode [ 337.012498][T15225] bridge0: left allmulticast mode [ 337.021602][T15233] ip_tables: iptables: counters copy to user failed while replacing table [ 337.057484][ T188] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 337.777700][ C1] hsr_slave_0: hsr_addr_subst_dest: Unknown node [ 337.807671][T15225] hsr0: left allmulticast mode [ 337.812694][T15225] hsr_slave_0: left allmulticast mode [ 337.914675][T15225] veth1_vlan: left promiscuous mode [ 337.937298][T15225] macvlan0: left promiscuous mode [ 338.296141][T15225] mac80211_hwsim hwsim11 syzkaller0: left promiscuous mode [ 338.320171][T15225] mac80211_hwsim hwsim11 syzkaller0: left allmulticast mode [ 338.342741][ T3377] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 338.351573][ T60] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 338.500610][T15225] geneve3: left promiscuous mode [ 338.505819][T15225] geneve3: left allmulticast mode [ 338.518868][T15225] bond4: left promiscuous mode [ 338.525829][T15225] gretap1: left promiscuous mode [ 338.532911][T15225] gretap1: left allmulticast mode [ 338.558252][T15225] bond5: left promiscuous mode [ 338.565596][T15225] gre1: left promiscuous mode [ 338.570558][T15225] gre1: left allmulticast mode [ 338.609909][T15227] workqueue: Failed to create a rescuer kthread for wq "bond11": -EINTR [ 338.655948][T15232] netlink: 60 bytes leftover after parsing attributes in process `syz.1.2613'. [ 338.717906][ T3385] netdevsim netdevsim1 netdevsim2: unset [1, 0] type 2 family 0 port 6081 - 0 [ 338.742093][ T3385] netdevsim netdevsim1 netdevsim2: unset [1, 1] type 2 family 0 port 256 - 0 [ 338.807202][ T136] netdevsim netdevsim1 netdevsim3: unset [1, 0] type 2 family 0 port 6081 - 0 [ 338.833689][ T136] netdevsim netdevsim1 netdevsim3: unset [1, 1] type 2 family 0 port 256 - 0 [ 338.874267][ T136] netdevsim netdevsim1 netdevsim0: unset [1, 0] type 2 family 0 port 6081 - 0 [ 338.932308][ T136] netdevsim netdevsim1 netdevsim0: unset [1, 1] type 2 family 0 port 256 - 0 [ 338.978397][ T1170] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 338.987276][ T35] netdevsim netdevsim1 netdevsim1: unset [1, 0] type 2 family 0 port 6081 - 0 [ 339.022471][ T35] netdevsim netdevsim1 netdevsim1: unset [1, 1] type 2 family 0 port 256 - 0 [ 339.043651][T15274] netlink: 8 bytes leftover after parsing attributes in process `syz.3.2619'. [ 339.366103][T15292] netlink: 24 bytes leftover after parsing attributes in process `syz.1.2623'. [ 339.825775][T15320] netlink: 40 bytes leftover after parsing attributes in process `syz.4.2631'. [ 339.880309][T15324] netlink: 'syz.3.2632': attribute type 11 has an invalid length. [ 339.973253][T15330] netlink: 16 bytes leftover after parsing attributes in process `syz.4.2634'. [ 340.010827][T15334] netlink: 12 bytes leftover after parsing attributes in process `syz.1.2635'. [ 340.020714][T15334] ip6tnl0: Caught tx_queue_len zero misconfig [ 340.280076][T15350] netlink: 8 bytes leftover after parsing attributes in process `syz.0.2637'. [ 340.313626][T15350] netlink: 4 bytes leftover after parsing attributes in process `syz.0.2637'. [ 340.332025][T15350] netlink: 'syz.0.2637': attribute type 15 has an invalid length. [ 340.361537][T15350] netlink: 'syz.0.2637': attribute type 15 has an invalid length. [ 340.377061][ T60] netdevsim netdevsim0 netdevsim3: set [0, 1] type 1 family 0 port 256 - 0 [ 340.385941][ T60] netdevsim netdevsim0 netdevsim2: set [0, 1] type 1 family 0 port 256 - 0 [ 340.396073][ T60] netdevsim netdevsim0 netdevsim1: set [0, 1] type 1 family 0 port 256 - 0 [ 340.405501][ T60] netdevsim netdevsim0 netdevsim0: set [0, 1] type 1 family 0 port 256 - 0 [ 340.908446][ T3385] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 341.292979][T15399] bond0: option ad_user_port_key: mode dependency failed, not supported in mode balance-rr(0) [ 341.379352][T15406] netlink: 'syz.1.2649': attribute type 1 has an invalid length. [ 341.396121][T15406] netlink: 'syz.1.2649': attribute type 1 has an invalid length. [ 341.549063][T15411] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 341.598878][T15411] __nla_validate_parse: 5 callbacks suppressed [ 341.598906][T15411] netlink: 8 bytes leftover after parsing attributes in process `syz.0.2652'. [ 341.615150][T15411] netlink: 'syz.0.2652': attribute type 10 has an invalid length. [ 341.624364][T15411] netlink: 12 bytes leftover after parsing attributes in process `syz.0.2652'. [ 341.641797][T15416] netlink: 'syz.1.2653': attribute type 32 has an invalid length. [ 341.654987][T15411] geneve4: entered promiscuous mode [ 341.663261][T15411] geneve4: entered allmulticast mode [ 341.668816][T15416] netlink: 56 bytes leftover after parsing attributes in process `syz.1.2653'. [ 341.689194][T15416] netlink: 20 bytes leftover after parsing attributes in process `syz.1.2653'. [ 341.700153][T15417] netlink: 'syz.4.2654': attribute type 8 has an invalid length. [ 341.808157][T15421] netlink: 188 bytes leftover after parsing attributes in process `syz.1.2655'. [ 341.843073][T15424] netlink: 'syz.0.2657': attribute type 32 has an invalid length. [ 342.261072][T15446] netlink: 8 bytes leftover after parsing attributes in process `syz.1.2664'. [ 342.273106][T15446] netlink: 12 bytes leftover after parsing attributes in process `syz.1.2664'. [ 342.310965][T15447] syzkaller0: entered promiscuous mode [ 342.325427][T15447] syzkaller0: entered allmulticast mode [ 342.374235][T15449] bond8: option tlb_dynamic_lb: mode dependency failed, not supported in mode balance-rr(0) [ 342.391099][T15449] bond8 (unregistering): Released all slaves [ 342.550924][T15465] netlink: 24 bytes leftover after parsing attributes in process `syz.4.2669'. [ 342.638830][T15473] sctp: [Deprecated]: syz.4.2672 (pid 15473) Use of int in maxseg socket option. [ 342.638830][T15473] Use struct sctp_assoc_value instead [ 343.458172][ T1614] block nbd1: Possible stuck request ffff888027e0e000: control (read@0,1024B). Runtime 240 seconds [ 343.473011][ T1614] block nbd1: Possible stuck request ffff888027e0e1c0: control (read@1024,1024B). Runtime 240 seconds [ 343.485978][ T1614] block nbd1: Possible stuck request ffff888027e0e380: control (read@2048,1024B). Runtime 240 seconds [ 343.497283][ T1614] block nbd1: Possible stuck request ffff888027e0e540: control (read@3072,1024B). Runtime 240 seconds [ 343.630145][T15521] netlink: 4 bytes leftover after parsing attributes in process `syz.1.2683'. [ 343.761366][T15528] bond6: option min_links: invalid value (18446744073709551614) [ 343.765441][T15531] netlink: 'syz.1.2686': attribute type 1 has an invalid length. [ 343.771099][T15528] bond6: option min_links: allowed values 0 - 2147483647 [ 343.789414][T15528] bond6 (unregistering): Released all slaves [ 343.842649][T15531] bridge3: entered promiscuous mode [ 343.868134][T15531] bond6: (slave bridge3): making interface the new active one [ 343.878814][T15531] bond6: (slave bridge3): Enslaving as an active interface with an up link [ 343.979200][T15499] Bluetooth: hci0: Opcode 0x0c03 failed: -4 [ 344.099411][ T35] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 344.108880][T15540] netlink: 12 bytes leftover after parsing attributes in process `syz.3.2689'. [ 344.124756][ T3377] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 344.139485][T15540] openvswitch: netlink: Missing key (keys=40, expected=10000000) [ 344.399098][T15560] openvswitch: netlink: Message has 134 unknown bytes. [ 344.430631][T15560] syzkaller1: entered promiscuous mode [ 344.441139][T15560] syzkaller1: entered allmulticast mode [ 344.475280][T15560] syzkaller1: left promiscuous mode [ 344.482027][T15560] syzkaller1: left allmulticast mode [ 345.020991][T15590] openvswitch: netlink: Either Ethernet header or EtherType is required. [ 345.363204][T15604] syzkaller0: entered promiscuous mode [ 345.369663][T15604] syzkaller0: entered allmulticast mode [ 345.621010][T15627] sctp: [Deprecated]: syz.0.2716 (pid 15627) Use of int in maxseg socket option. [ 345.621010][T15627] Use struct sctp_assoc_value instead [ 345.647283][T15629] openvswitch: netlink: EtherType 300 is less than min 600 [ 345.754850][T15633] netlink: 'syz.0.2717': attribute type 10 has an invalid length. [ 346.023508][ T35] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 346.662069][ T35] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 346.670374][ T35] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 346.987959][ T5614] Bluetooth: hci5: unexpected cc 0x0c03 length: 249 > 1 [ 346.998015][ T5614] Bluetooth: hci5: unexpected cc 0x1003 length: 249 > 9 [ 347.006115][ T5614] Bluetooth: hci5: unexpected cc 0x1001 length: 249 > 9 [ 347.023372][ T5614] Bluetooth: hci5: unexpected cc 0x0c23 length: 249 > 4 [ 347.039935][ T5614] Bluetooth: hci5: unexpected cc 0x0c38 length: 249 > 2 [ 347.717905][T15623] __nla_validate_parse: 7 callbacks suppressed [ 347.717962][T15623] netlink: 28 bytes leftover after parsing attributes in process `syz.3.2714'. [ 347.734242][T15623] netlink: 28 bytes leftover after parsing attributes in process `syz.3.2714'. [ 347.759812][T15633] team0: entered allmulticast mode [ 347.779533][T15633] team_slave_0: entered allmulticast mode [ 347.808490][T15633] team_slave_1: entered allmulticast mode [ 347.821844][T15633] bridge0: port 3(team0) entered blocking state [ 347.839410][T15633] bridge0: port 3(team0) entered disabled state [ 347.851686][T15633] team0: entered promiscuous mode [ 347.863437][T15633] team_slave_0: entered promiscuous mode [ 347.869847][T15633] team_slave_1: entered promiscuous mode [ 347.907987][T15633] bridge0: port 3(team0) entered blocking state [ 347.914468][T15633] bridge0: port 3(team0) entered forwarding state [ 347.955949][T15635] netlink: 40 bytes leftover after parsing attributes in process `syz.0.2717'. [ 348.281990][T15659] netlink: 'syz.0.2722': attribute type 13 has an invalid length. [ 348.308362][T15659] netlink: 'syz.0.2722': attribute type 58 has an invalid length. [ 348.353634][T15659] netlink: 152 bytes leftover after parsing attributes in process `syz.0.2722'. [ 348.718740][T15685] netlink: NAT attribute has 4 unknown bytes [ 348.802527][T15689] netlink: 52 bytes leftover after parsing attributes in process `syz.4.2731'. [ 348.993547][T15702] macvlan0: entered promiscuous mode [ 349.137183][ T4933] Bluetooth: hci5: command tx timeout [ 349.167038][T15706] ip6gre0: Caught tx_queue_len zero misconfig [ 349.205220][T15706] sch_tbf: peakrate 8 is lower than or equals to rate 7508080445633888606 ! [ 349.227726][T15711] netlink: 44 bytes leftover after parsing attributes in process `syz.0.2737'. [ 349.252711][T15711] netlink: 24 bytes leftover after parsing attributes in process `syz.0.2737'. [ 349.495889][T15719] net_ratelimit: 1 callbacks suppressed [ 349.495909][T15719] openvswitch: netlink: Duplicate or invalid key (type 0). [ 349.517759][T15639] lo speed is unknown, defaulting to 1000 [ 349.530890][T15722] Bluetooth: MGMT ver 1.23 [ 349.547810][T15723] blkio.reset_stats is deprecated [ 349.581801][T15723] netlink: 16 bytes leftover after parsing attributes in process `syz.0.2741'. [ 349.597285][T15723] netlink: 8 bytes leftover after parsing attributes in process `syz.0.2741'. [ 349.641074][T15722] netlink: 'syz.1.2742': attribute type 12 has an invalid length. [ 349.684703][T15722] netlink: 132 bytes leftover after parsing attributes in process `syz.1.2742'. [ 349.857683][ T35] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 349.867388][ T1170] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 349.991238][T15750] xt_hashlimit: size too large, truncated to 1048576 [ 350.154472][T15754] 0ªX¹¦Dö»: renamed from gretap0 (while UP) [ 350.184958][T15754] 0ªX¹¦Dö»: entered allmulticast mode [ 350.472784][T15769] Bluetooth: hci0: unsupported parameter 5135 [ 350.479782][T15769] Bluetooth: hci0: unsupported parameter 8192 [ 350.486137][T15769] Bluetooth: hci0: unsupported parameter 5135 [ 350.493119][T15769] Bluetooth: hci0: unsupported parameter 8192 [ 350.597338][T15639] bridge0: port 1(bridge_slave_0) entered blocking state [ 350.604711][T15639] bridge0: port 1(bridge_slave_0) entered disabled state [ 350.614596][T15639] bridge_slave_0: entered allmulticast mode [ 350.622726][T15639] bridge_slave_0: entered promiscuous mode [ 350.632323][T15639] bridge0: port 2(bridge_slave_1) entered blocking state [ 350.640361][T15639] bridge0: port 2(bridge_slave_1) entered disabled state [ 350.649338][T15639] bridge_slave_1: entered allmulticast mode [ 350.659885][T15639] bridge_slave_1: entered promiscuous mode [ 350.786256][T15639] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 350.820453][T15639] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 350.979487][T15639] team0: Port device team_slave_0 added [ 350.995328][T15639] team0: Port device team_slave_1 added [ 351.085264][T15639] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 351.097428][T15639] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 351.133711][T15639] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 351.145684][ T3385] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 351.172539][T15639] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 351.181165][T15639] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 351.217205][ T4933] Bluetooth: hci5: command tx timeout [ 351.228622][T15639] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 351.487637][T15639] hsr_slave_0: entered promiscuous mode [ 351.512528][T15639] hsr_slave_1: entered promiscuous mode [ 351.700106][T15820] netlink: 'syz.1.2768': attribute type 21 has an invalid length. [ 351.776550][ C1] ip6_tunnel: ip6gre2 xmit: Local address not yet configured! [ 352.340807][T15840] bridge4: entered promiscuous mode [ 352.358571][T15840] bond7: (slave bridge4): Enslaving as an active interface with an up link [ 352.381779][T15846] nbd: socks must be embedded in a SOCK_ITEM attr [ 352.418222][ T35] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 352.532840][T15639] netdevsim netdevsim5 netdevsim0: renamed from eth0 [ 352.590792][T15639] 8021q: adding VLAN 0 to HW filter on device netdevsim0 [ 352.621400][T15639] netdevsim netdevsim5 netdevsim1: renamed from eth1 [ 352.672632][T15639] 8021q: adding VLAN 0 to HW filter on device netdevsim1 [ 352.707583][T15639] netdevsim netdevsim5 netdevsim2: renamed from eth2 [ 352.742009][T15859] __nla_validate_parse: 10 callbacks suppressed [ 352.742031][T15859] netlink: 48 bytes leftover after parsing attributes in process `syz.1.2779'. [ 352.763537][T15639] 8021q: adding VLAN 0 to HW filter on device netdevsim2 [ 352.787725][T15639] netdevsim netdevsim5 netdevsim3: renamed from eth3 [ 352.797749][T15859] netlink: 'syz.1.2779': attribute type 1 has an invalid length. [ 352.818363][T15859] netlink: 224 bytes leftover after parsing attributes in process `syz.1.2779'. [ 352.828768][T15639] 8021q: adding VLAN 0 to HW filter on device netdevsim3 [ 352.842973][T15859] NCSI netlink: No device for ifindex 0 [ 353.045256][T15872] netlink: 20 bytes leftover after parsing attributes in process `syz.1.2782'. [ 353.082179][T15872] openvswitch: netlink: Missing key (keys=40, expected=2000) [ 353.115994][T15639] 8021q: adding VLAN 0 to HW filter on device bond0 [ 353.158856][T15639] 8021q: adding VLAN 0 to HW filter on device team0 [ 353.199755][ T35] bridge0: port 1(bridge_slave_0) entered blocking state [ 353.206985][ T35] bridge0: port 1(bridge_slave_0) entered forwarding state [ 353.278925][ T35] bridge0: port 2(bridge_slave_1) entered blocking state [ 353.286123][ T35] bridge0: port 2(bridge_slave_1) entered forwarding state [ 353.300127][ T4933] Bluetooth: hci5: command tx timeout [ 353.560532][T15885] netlink: 8 bytes leftover after parsing attributes in process `syz.1.2785'. [ 353.603821][T15885] input: Bluetooth HID Boot Protocol Device as /devices/virtual/bluetooth/hci5/hci5:200/input7 [ 354.087440][T15909] wg0: entered allmulticast mode [ 354.115302][T15909] wg0: left allmulticast mode [ 354.162094][T15909] netlink: 'syz.0.2792': attribute type 21 has an invalid length. [ 354.274868][T15916] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 354.299346][T15918] netlink: 20 bytes leftover after parsing attributes in process `syz.4.2793'. [ 354.638928][T15935] netlink: 24 bytes leftover after parsing attributes in process `syz.4.2799'. [ 354.654503][T15639] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 354.979322][ T3377] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 355.377353][ T4933] Bluetooth: hci5: command tx timeout [ 355.436107][T15973] openvswitch: netlink: EtherType 300 is less than min 600 [ 355.464065][T15639] veth0_vlan: entered promiscuous mode [ 355.583288][T15983] netlink: 240 bytes leftover after parsing attributes in process `syz.1.2810'. [ 355.663935][T15639] veth1_vlan: entered promiscuous mode [ 355.800144][T15639] veth0_macvtap: entered promiscuous mode [ 355.835512][T15639] veth1_macvtap: entered promiscuous mode [ 355.915284][T15639] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 355.950810][T15639] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 355.964898][T16002] netlink: 'syz.4.2814': attribute type 46 has an invalid length. [ 356.121993][ T12] netdevsim netdevsim5 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 356.173154][ T12] netdevsim netdevsim5 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 356.236496][ T3340] netdevsim netdevsim5 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 356.267351][ T5727] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 356.317494][ T13] netdevsim netdevsim5 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 356.700354][T16033] netlink: 12 bytes leftover after parsing attributes in process `syz.4.2820'. [ 356.822561][ T1007] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 356.836262][ T1007] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 356.903222][ T3395] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 356.966697][ T1170] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 356.997733][ T1170] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 357.078561][T16048] netlink: 4 bytes leftover after parsing attributes in process `syz.0.2825'. [ 357.327327][T16057] xt_addrtype: both incoming and outgoing interface limitation cannot be selected [ 357.537104][ T136] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 357.596958][T16062] bond11: option resend_igmp: invalid value (32767) [ 357.643678][T16062] bond11: option resend_igmp: allowed values 0 - 255 [ 357.684601][T16062] bond11 (unregistering): Released all slaves [ 357.907921][ T5614] Bluetooth: hci6: unexpected cc 0x0c03 length: 249 > 1 [ 357.921663][ T5614] Bluetooth: hci6: unexpected cc 0x1003 length: 249 > 9 [ 357.930101][T16078] vcan0: tx address claim with dlc 7 [ 357.941109][ T5614] Bluetooth: hci6: unexpected cc 0x1001 length: 249 > 9 [ 357.953738][ T5614] Bluetooth: hci6: unexpected cc 0x0c23 length: 249 > 4 [ 357.962437][ T5614] Bluetooth: hci6: unexpected cc 0x0c38 length: 249 > 2 [ 358.153250][T16086] Unsupported ieee802154 address type: 0 [ 358.588732][T16095] netlink: 4 bytes leftover after parsing attributes in process `syz.1.2840'. [ 358.604635][T16110] netlink: 64 bytes leftover after parsing attributes in process `syz.0.2842'. [ 358.860474][T16117] netlink: 'syz.0.2844': attribute type 1 has an invalid length. [ 359.339757][T16136] netlink: 'syz.5.2848': attribute type 1 has an invalid length. [ 359.382519][T16144] netlink: 'syz.1.2851': attribute type 2 has an invalid length. [ 359.403436][T16136] netlink: 28 bytes leftover after parsing attributes in process `syz.5.2848'. [ 359.500326][T16148] netlink: 8 bytes leftover after parsing attributes in process `syz.1.2851'. [ 359.657656][ T1170] af_packet: tpacket_rcv: packet too big, clamped from 46 to 4294967272. macoff=96 [ 359.690306][T16156] netlink: 11 bytes leftover after parsing attributes in process `syz.4.2852'. [ 359.769590][T16158] IPv6: NLM_F_CREATE should be specified when creating new route [ 359.791803][T16158] netlink: 12 bytes leftover after parsing attributes in process `syz.5.2853'. [ 359.837345][T16079] lo speed is unknown, defaulting to 1000 [ 360.019516][ T4933] Bluetooth: hci6: command tx timeout [ 360.381108][T16187] netlink: 'syz.5.2861': attribute type 1 has an invalid length. [ 360.404223][T16187] netlink: 224 bytes leftover after parsing attributes in process `syz.5.2861'. [ 360.592418][T16187] bridge0: port 2(bridge_slave_1) entered disabled state [ 360.694713][T16203] netlink: 48 bytes leftover after parsing attributes in process `syz.0.2864'. [ 360.741730][ T136] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 360.878659][T16199] syzkaller0: entered promiscuous mode [ 360.893400][T16199] syzkaller0: entered allmulticast mode [ 360.902604][T16079] bridge0: port 1(bridge_slave_0) entered blocking state [ 360.918942][T16079] bridge0: port 1(bridge_slave_0) entered disabled state [ 360.928089][T16079] bridge_slave_0: entered allmulticast mode [ 360.937577][T16079] bridge_slave_0: entered promiscuous mode [ 360.949515][T16079] bridge0: port 2(bridge_slave_1) entered blocking state [ 360.957429][T16079] bridge0: port 2(bridge_slave_1) entered disabled state [ 360.966114][T16079] bridge_slave_1: entered allmulticast mode [ 360.978551][T16079] bridge_slave_1: entered promiscuous mode [ 361.183393][T16079] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 361.238530][T16079] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 361.277626][T16230] netlink: 164 bytes leftover after parsing attributes in process `syz.0.2873'. [ 361.331077][T16230] netlink: 164 bytes leftover after parsing attributes in process `syz.0.2873'. [ 361.565568][T16079] team0: Port device team_slave_0 added [ 361.592580][T16079] team0: Port device team_slave_1 added [ 361.769847][T16079] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 361.788178][T16079] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 361.843122][T16079] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 361.861855][T16079] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 361.874331][T16079] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 361.916442][T16079] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 362.099669][ T4933] Bluetooth: hci6: command tx timeout [ 362.181547][T16079] hsr_slave_0: entered promiscuous mode [ 362.193666][T16079] hsr_slave_1: entered promiscuous mode [ 362.206283][T16079] debugfs: 'hsr0' already exists in 'hsr' [ 362.226605][T16079] Cannot create hsr debugfs directory [ 362.389826][T16282] netlink: 'syz.5.2890': attribute type 4 has an invalid length. [ 362.446649][T16282] .`: renamed from bond0 (while UP) [ 362.662479][ T3395] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 362.955586][T16079] netdevsim netdevsim3 netdevsim3 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 362.978505][T16079] netdevsim netdevsim3 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 363.222557][T16079] netdevsim netdevsim3 netdevsim2 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 363.235238][T16079] netdevsim netdevsim3 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 363.296541][ C0] ip6_tunnel: ip6gre1 xmit: Local address not yet configured! [ 363.307105][ T136] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 363.450663][T16079] netdevsim netdevsim3 netdevsim1 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 363.464410][T16079] netdevsim netdevsim3 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 363.492985][T16324] nbd: must specify at least one socket [ 363.593024][T16079] netdevsim netdevsim3 netdevsim0 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 363.605754][T16329] __nla_validate_parse: 4 callbacks suppressed [ 363.605773][T16329] netlink: 8 bytes leftover after parsing attributes in process `syz.5.2902'. [ 363.641121][T16079] netdevsim netdevsim3 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 363.694384][T16328] netlink: 'syz.5.2902': attribute type 12 has an invalid length. [ 363.703725][T16328] netlink: 'syz.5.2902': attribute type 29 has an invalid length. [ 363.713240][T16328] netlink: 148 bytes leftover after parsing attributes in process `syz.5.2902'. [ 363.724418][T16328] netlink: 51 bytes leftover after parsing attributes in process `syz.5.2902'. [ 363.805372][T16305] syzkaller0: entered promiscuous mode [ 363.860853][T16305] syzkaller0: entered allmulticast mode [ 363.937987][ T1115] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 364.135148][T16358] netlink: 28 bytes leftover after parsing attributes in process `syz.1.2908'. [ 364.179946][ T4933] Bluetooth: hci6: command tx timeout [ 364.273565][T16364] netlink: 20 bytes leftover after parsing attributes in process `syz.5.2909'. [ 364.312854][T16354] bond0: Error: Cannot enslave bond to itself. [ 364.576063][T16079] netdevsim netdevsim3 netdevsim0: renamed from eth0 [ 364.617280][T16079] 8021q: adding VLAN 0 to HW filter on device netdevsim0 [ 364.640884][T16079] netdevsim netdevsim3 netdevsim1: renamed from eth1 [ 364.673952][T16079] 8021q: adding VLAN 0 to HW filter on device netdevsim1 [ 364.701195][T16079] netdevsim netdevsim3 netdevsim2: renamed from eth2 [ 364.730900][T16079] 8021q: adding VLAN 0 to HW filter on device netdevsim2 [ 364.765663][T16079] netdevsim netdevsim3 netdevsim3: renamed from eth3 [ 364.796136][T16079] 8021q: adding VLAN 0 to HW filter on device netdevsim3 [ 365.174986][T16079] 8021q: adding VLAN 0 to HW filter on device bond0 [ 365.255907][T16079] 8021q: adding VLAN 0 to HW filter on device team0 [ 365.293517][ T3395] bridge0: port 1(bridge_slave_0) entered blocking state [ 365.301853][ T3395] bridge0: port 1(bridge_slave_0) entered forwarding state [ 365.379878][ T136] bridge0: port 2(bridge_slave_1) entered blocking state [ 365.387208][ T136] bridge0: port 2(bridge_slave_1) entered forwarding state [ 365.482937][T16419] xt_CONNSECMARK: invalid mode: 0 [ 365.549663][T16420] IPv6: sit3: Disabled Multicast RS [ 365.570343][T16420] sit3: entered allmulticast mode [ 365.609012][T16425] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 365.741485][T16429] xt_hashlimit: size too large, truncated to 1048576 [ 365.758434][T16427] netlink: 20 bytes leftover after parsing attributes in process `syz.1.2927'. [ 365.802241][T16433] netlink: 'syz.0.2929': attribute type 1 has an invalid length. [ 365.810848][T16433] netlink: 'syz.0.2929': attribute type 2 has an invalid length. [ 365.822373][T16433] netlink: 'syz.0.2929': attribute type 1 has an invalid length. [ 365.830609][T16433] netlink: 'syz.0.2929': attribute type 2 has an invalid length. [ 365.869726][ T5742] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 366.012052][T16440] pim6reg527: entered allmulticast mode [ 366.039417][T16440] netlink: 8 bytes leftover after parsing attributes in process `syz.1.2931'. [ 366.259334][ T4933] Bluetooth: hci6: command tx timeout [ 366.511826][ T1159] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 366.805721][T16475] netlink: 20 bytes leftover after parsing attributes in process `syz.4.2941'. [ 366.820620][T16475] openvswitch: netlink: Missing key (keys=c0, expected=500) [ 366.922316][T16079] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 367.081310][T16079] veth0_vlan: entered promiscuous mode [ 367.154893][T16484] bond0: option ad_actor_sys_prio: mode dependency failed, not supported in mode balance-alb(6) [ 367.181220][T16492] netlink: 20 bytes leftover after parsing attributes in process `syz.1.2945'. [ 367.223617][T16484] bond0 (unregistering): Released all slaves [ 367.574216][T16079] veth1_vlan: entered promiscuous mode [ 367.641083][T16499] netlink: 20 bytes leftover after parsing attributes in process `syz.0.2947'. [ 367.699454][T16079] veth0_macvtap: entered promiscuous mode [ 367.783209][T16499] geneve4: entered promiscuous mode [ 367.833534][T16079] veth1_macvtap: entered promiscuous mode [ 367.880391][T16505] x_tables: duplicate underflow at hook 3 [ 367.896124][T16079] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 367.957702][T16079] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 368.156878][T16515] netlink: 'syz.0.2950': attribute type 14 has an invalid length. [ 368.162280][ T136] netdevsim netdevsim3 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 368.195319][T16515] netlink: 'syz.0.2950': attribute type 13 has an invalid length. [ 368.223178][ T1159] netdevsim netdevsim3 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 368.265333][ T1159] netdevsim netdevsim3 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 368.310419][ T136] netdevsim netdevsim3 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 368.425365][ T3340] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 368.435073][ T1170] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 368.462709][ T1007] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 368.502050][ T1007] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 368.650589][ T136] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 368.674250][ T136] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 368.785243][T16537] nbd: must specify at least one socket [ 368.825307][T16539] pimreg: entered allmulticast mode [ 369.045478][T16549] __nla_validate_parse: 5 callbacks suppressed [ 369.045497][T16549] netlink: 8 bytes leftover after parsing attributes in process `syz.5.2959'. [ 369.118751][T16549] netlink: 12 bytes leftover after parsing attributes in process `syz.5.2959'. [ 369.169509][T16549] netlink: 4 bytes leftover after parsing attributes in process `syz.5.2959'. [ 369.239535][T16549] netlink: 8 bytes leftover after parsing attributes in process `syz.5.2959'. [ 369.276776][ T1159] netdevsim netdevsim5 netdevsim0: set [0, 0] type 1 family 0 port 8472 - 0 [ 369.295818][T16549] netlink: 12 bytes leftover after parsing attributes in process `syz.5.2959'. [ 369.316741][ T1159] netdevsim netdevsim5 netdevsim1: set [0, 0] type 1 family 0 port 8472 - 0 [ 369.325675][T16549] netlink: 4 bytes leftover after parsing attributes in process `syz.5.2959'. [ 369.346801][ T1159] netdevsim netdevsim5 netdevsim2: set [0, 0] type 1 family 0 port 8472 - 0 [ 369.388118][ T1159] netdevsim netdevsim5 netdevsim3: set [0, 0] type 1 family 0 port 8472 - 0 [ 369.435422][ T5614] Bluetooth: hci2: unexpected cc 0x0c03 length: 249 > 1 [ 369.452877][ T5614] Bluetooth: hci2: unexpected cc 0x1003 length: 249 > 9 [ 369.462493][ T5614] Bluetooth: hci2: unexpected cc 0x1001 length: 249 > 9 [ 369.474580][ T5614] Bluetooth: hci2: unexpected cc 0x0c23 length: 249 > 4 [ 369.484270][ T5614] Bluetooth: hci2: unexpected cc 0x0c38 length: 249 > 2 [ 369.703626][ T1159] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 370.211597][T16595] netlink: 40 bytes leftover after parsing attributes in process `syz.5.2968'. [ 370.268702][T16599] netlink: 8 bytes leftover after parsing attributes in process `syz.1.2971'. [ 370.278039][T16599] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 370.295035][ T1159] netdevsim netdevsim4 netdevsim3 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 370.328390][ T1159] netdevsim netdevsim4 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 370.370795][T16594] A link change request failed with some changes committed already. Interface geneve0 may have been left with an inconsistent configuration, please check. [ 370.454554][T16606] netlink: Unknown NAT attribute (type=16383, max=9) [ 370.463669][T16606] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 370.558636][ T1159] netdevsim netdevsim4 netdevsim2 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 370.586091][ T1159] netdevsim netdevsim4 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 370.643712][T16609] gretap4: entered promiscuous mode [ 370.785717][ T1159] netdevsim netdevsim4 netdevsim1 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 370.798419][ T1159] netdevsim netdevsim4 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 370.890367][ T1159] netdevsim netdevsim4 netdevsim0 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 370.902874][ T1159] netdevsim netdevsim4 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 371.093507][ T1159] bridge_slave_1: left allmulticast mode [ 371.100431][ T1159] bridge_slave_1: left promiscuous mode [ 371.109984][ T1159] bridge0: port 2(bridge_slave_1) entered disabled state [ 371.143062][ T1159] bridge_slave_0: left allmulticast mode [ 371.158061][ T1159] bridge_slave_0: left promiscuous mode [ 371.178467][ T1159] bridge0: port 1(bridge_slave_0) entered disabled state [ 371.213666][ T1159] pim6reg: left allmulticast mode [ 371.220172][ T1159] pimreg: left allmulticast mode [ 371.225263][ T1159] dvmrp8: left allmulticast mode [ 371.538687][ T4933] Bluetooth: hci2: command tx timeout [ 371.817899][ T1159] bond3 (unregistering): (slave geneve3): Releasing active interface [ 371.922198][ T1159] bond10 (unregistering): (slave bridge4): Releasing backup interface [ 371.935105][ T1159] bridge4 (unregistering): left promiscuous mode [ 371.942503][ T1159] bridge4 (unregistering): left allmulticast mode [ 371.989217][ T1159] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 371.998909][ T1159] bond_slave_0: left allmulticast mode [ 372.008525][ T1159] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 372.020853][ T1159] bond_slave_1: left allmulticast mode [ 372.031584][ T1159] bond0 (unregistering): (slave veth0_to_bond): Releasing backup interface [ 372.040921][ T1159] veth0_to_bond: left allmulticast mode [ 372.049367][ T1159] bond0 (unregistering): Released all slaves [ 372.061435][ T1159] bond1 (unregistering): Released all slaves [ 372.080510][ T1159] bond2 (unregistering): Released all slaves [ 372.096378][ T1159] bond3 (unregistering): Released all slaves [ 372.115897][ T1159] bond4 (unregistering): Released all slaves [ 372.138973][ T1159] bond5 (unregistering): Released all slaves [ 372.159802][ T1159] bond6 (unregistering): Released all slaves [ 372.180408][ T1159] bond7 (unregistering): Released all slaves [ 372.195846][ T1159] bond8 (unregistering): Released all slaves [ 372.215382][ T1159] bond9 (unregistering): Released all slaves [ 372.241785][ T1159] bond10 (unregistering): Released all slaves [ 372.258317][ T1170] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 372.274737][T16565] lo speed is unknown, defaulting to 1000 [ 372.279795][ T5278] 8021q: adding VLAN 0 to HW filter on device eth1 [ 372.570177][ T1159] : left promiscuous mode [ 372.664674][ T1159] tipc: Disabling bearer [ 372.681591][ T1159] tipc: Left network mode [ 372.880315][T16565] bridge0: port 1(bridge_slave_0) entered blocking state [ 372.902904][T16565] bridge0: port 1(bridge_slave_0) entered disabled state [ 372.920479][T16565] bridge_slave_0: entered allmulticast mode [ 372.932379][T16565] bridge_slave_0: entered promiscuous mode [ 372.955111][T16565] bridge0: port 2(bridge_slave_1) entered blocking state [ 372.970659][T16565] bridge0: port 2(bridge_slave_1) entered disabled state [ 372.979313][T16565] bridge_slave_1: entered allmulticast mode [ 372.989640][T16565] bridge_slave_1: entered promiscuous mode [ 373.060559][T16565] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 373.087022][T16565] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 373.178167][T16565] team0: Port device team_slave_0 added [ 373.187814][T16565] team0: Port device team_slave_1 added [ 373.222195][ T5278] 8021q: adding VLAN 0 to HW filter on device eth2 [ 373.243107][T16565] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 373.250789][T16565] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 373.277805][T16565] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 373.290668][T16565] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 373.298667][T16565] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 373.325634][T16565] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 373.551696][T16565] hsr_slave_0: entered promiscuous mode [ 373.557745][ T1614] block nbd1: Possible stuck request ffff888027e0e000: control (read@0,1024B). Runtime 270 seconds [ 373.568579][ T1614] block nbd1: Possible stuck request ffff888027e0e1c0: control (read@1024,1024B). Runtime 270 seconds [ 373.569367][T16565] hsr_slave_1: entered promiscuous mode [ 373.579904][ T1614] block nbd1: Possible stuck request ffff888027e0e380: control (read@2048,1024B). Runtime 270 seconds [ 373.579939][ T1614] block nbd1: Possible stuck request ffff888027e0e540: control (read@3072,1024B). Runtime 270 seconds [ 373.611317][T16565] debugfs: 'hsr0' already exists in 'hsr' [ 373.617057][ T4933] Bluetooth: hci2: command tx timeout [ 373.626262][T16565] Cannot create hsr debugfs directory [ 373.737112][ T1159] hsr_slave_0: left promiscuous mode [ 373.745435][ T1159] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 373.754075][ T1159] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 373.773352][ T1159] veth1_macvtap: left promiscuous mode [ 373.781683][ T1159] veth0_macvtap: left promiscuous mode [ 373.788645][ T1159] veth1_vlan: left promiscuous mode [ 374.180123][ T136] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 374.191433][ T1170] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 374.250263][ T1159] team0 (unregistering): Port device team_slave_1 removed [ 374.272566][ T1159] team0 (unregistering): Port device team_slave_0 removed [ 374.404455][ T1159] smc: removing net device team0 with user defined pnetid SYZ2 [ 374.442585][ T5278] 8021q: adding VLAN 0 to HW filter on device eth3 [ 374.842672][ T1159] IPVS: stop unused estimator thread 0... [ 375.174793][T16565] netdevsim netdevsim4 netdevsim0: renamed from eth0 [ 375.189630][T16565] 8021q: adding VLAN 0 to HW filter on device netdevsim0 [ 375.198971][T16565] netdevsim netdevsim4 netdevsim1: renamed from eth1 [ 375.212056][T16565] 8021q: adding VLAN 0 to HW filter on device netdevsim1 [ 375.226065][T16565] netdevsim netdevsim4 netdevsim2: renamed from eth2 [ 375.244628][T16565] 8021q: adding VLAN 0 to HW filter on device netdevsim2 [ 375.258707][T16565] netdevsim netdevsim4 netdevsim3: renamed from eth3 [ 375.269354][T16565] 8021q: adding VLAN 0 to HW filter on device netdevsim3 [ 375.374840][T16565] 8021q: adding VLAN 0 to HW filter on device bond0 [ 375.411397][T16565] 8021q: adding VLAN 0 to HW filter on device team0 [ 375.425860][ T1159] bridge0: port 1(bridge_slave_0) entered blocking state [ 375.433099][ T1159] bridge0: port 1(bridge_slave_0) entered forwarding state [ 375.454959][ T1007] bridge0: port 2(bridge_slave_1) entered blocking state [ 375.462183][ T1007] bridge0: port 2(bridge_slave_1) entered forwarding state [ 375.470149][ T5720] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 375.478336][ T5720] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 375.696527][ T4933] Bluetooth: hci2: command tx timeout [ 376.001932][T16565] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 376.315538][T16565] veth0_vlan: entered promiscuous mode [ 376.338535][T16565] veth1_vlan: entered promiscuous mode [ 376.408539][T16565] veth0_macvtap: entered promiscuous mode [ 376.431961][T16565] veth1_macvtap: entered promiscuous mode [ 376.472453][T16565] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 376.495723][T16565] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 376.580628][ T3395] netdevsim netdevsim4 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 376.619586][ T3395] netdevsim netdevsim4 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 376.675385][ T1170] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 376.691602][ T1170] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 376.706511][ T3395] netdevsim netdevsim4 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 376.715339][ T3395] netdevsim netdevsim4 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 376.761511][ T3395] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 376.771906][ T3395] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 377.776625][ T4933] Bluetooth: hci2: command tx timeout [ 378.023696][ T3395] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 379.299305][ T3395] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 379.941640][ T3395] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 380.578865][ T1159] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 383.791973][ T1159] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 384.978087][ T13] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 385.058205][ C1] ip6_tunnel: ip6gre2 xmit: Local address not yet configured! [ 385.059538][ T13] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 385.074615][ T5727] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 386.338114][ T1159] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 389.538103][ T1170] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 390.180918][ T1170] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 390.819099][ T1007] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 390.976952][ T4933] Bluetooth: hci4: command 0x0401 tx timeout [ 392.096924][ T1159] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 393.720298][T16947] xt_hashlimit: size too large, truncated to 1048576 [ 394.149634][T16959] netlink: 12 bytes leftover after parsing attributes in process `syz.4.2980'. [ 394.237746][T16961] sctp: [Deprecated]: syz.3.2979 (pid 16961) Use of int in max_burst socket option. [ 394.237746][T16961] Use struct sctp_assoc_value instead [ 394.474353][ T4933] Bluetooth: hci1: unexpected cc 0x0c03 length: 249 > 1 [ 394.487923][ T4933] Bluetooth: hci1: unexpected cc 0x1003 length: 249 > 9 [ 394.498667][ T4933] Bluetooth: hci1: unexpected cc 0x1001 length: 249 > 9 [ 394.511403][ T4933] Bluetooth: hci1: unexpected cc 0x0c23 length: 249 > 4 [ 394.519624][ T4933] Bluetooth: hci1: unexpected cc 0x0c38 length: 249 > 2 [ 394.697546][ T5749] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 394.870454][ T136] nci: nci_add_new_protocol: the target found does not have the desired protocol [ 395.298531][ T1170] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 395.307324][ T1159] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 395.329205][T17009] netlink: 8 bytes leftover after parsing attributes in process `syz.4.2989'. [ 395.339335][T17009] netlink: 4 bytes leftover after parsing attributes in process `syz.4.2989'. [ 396.089695][T17009] ip6gre0: entered promiscuous mode [ 396.105289][T17009] ip6gre0: entered allmulticast mode [ 396.143254][T17015] xt_TCPMSS: Only works on TCP SYN packets [ 396.180283][T17016] netlink: 8 bytes leftover after parsing attributes in process `syz.0.2990'. [ 396.534246][T16971] lo speed is unknown, defaulting to 1000 [ 396.577652][ T1159] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 396.586003][ T5614] Bluetooth: hci1: command tx timeout [ 396.785083][T16971] bridge0: port 1(bridge_slave_0) entered blocking state [ 396.792428][T16971] bridge0: port 1(bridge_slave_0) entered disabled state [ 396.799956][T16971] bridge_slave_0: entered allmulticast mode [ 396.808544][T16971] bridge_slave_0: entered promiscuous mode [ 396.816866][T16971] bridge0: port 2(bridge_slave_1) entered blocking state [ 396.824168][T16971] bridge0: port 2(bridge_slave_1) entered disabled state [ 396.831549][T16971] bridge_slave_1: entered allmulticast mode [ 396.840361][T16971] bridge_slave_1: entered promiscuous mode [ 396.872955][T16971] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 396.885373][T16971] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 396.920117][T16971] team0: Port device team_slave_0 added [ 396.930065][T16971] team0: Port device team_slave_1 added [ 396.960452][T16971] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 396.968688][T16971] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 396.994964][T16971] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 397.008200][T16971] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 397.015217][T16971] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 397.042374][T16971] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 397.091503][T16971] hsr_slave_0: entered promiscuous mode [ 397.098796][T16971] hsr_slave_1: entered promiscuous mode [ 397.104944][T16971] debugfs: 'hsr0' already exists in 'hsr' [ 397.110802][T16971] Cannot create hsr debugfs directory [ 397.519173][T16983] nci: __nci_request: wait_for_completion_interruptible_timeout failed -512 [ 397.692002][T16971] netdevsim netdevsim1 netdevsim0: renamed from eth0 [ 397.746579][T16971] 8021q: adding VLAN 0 to HW filter on device netdevsim0 [ 397.773194][T16971] netdevsim netdevsim1 netdevsim1: renamed from eth1 [ 397.827768][T16971] 8021q: adding VLAN 0 to HW filter on device netdevsim1 [ 397.845640][T16971] netdevsim netdevsim1 netdevsim2: renamed from eth2 [ 397.857973][ T136] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 397.883276][T16971] 8021q: adding VLAN 0 to HW filter on device netdevsim2 [ 397.904697][T16971] netdevsim netdevsim1 netdevsim3: renamed from eth3 [ 397.923102][T16971] 8021q: adding VLAN 0 to HW filter on device netdevsim3 [ 398.263340][T16971] 8021q: adding VLAN 0 to HW filter on device bond0 [ 398.317852][T17069] tipc: Enabling of bearer rejected, already enabled [ 398.348875][T16971] 8021q: adding VLAN 0 to HW filter on device team0 [ 398.382073][ T3340] bridge0: port 1(bridge_slave_0) entered blocking state [ 398.389478][ T3340] bridge0: port 1(bridge_slave_0) entered forwarding state [ 398.440412][ T3340] bridge0: port 2(bridge_slave_1) entered blocking state [ 398.447765][ T3340] bridge0: port 2(bridge_slave_1) entered forwarding state [ 398.520089][T17075] netlink: 8 bytes leftover after parsing attributes in process `syz.3.3001'. [ 398.546022][T17075] netlink: 'syz.3.3001': attribute type 33 has an invalid length. [ 398.656671][ T5614] Bluetooth: hci1: command tx timeout [ 398.878037][T17091] netlink: 28 bytes leftover after parsing attributes in process `syz.4.3003'. [ 399.139571][ T5727] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 399.169693][T17103] netlink: 16 bytes leftover after parsing attributes in process `syz.3.3006'. [ 399.201227][T17105] netlink: 56 bytes leftover after parsing attributes in process `syz.4.3007'. [ 400.036879][T17144] netlink: 104 bytes leftover after parsing attributes in process `syz.3.3013'. [ 400.150904][T16971] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 400.364098][T16971] veth0_vlan: entered promiscuous mode [ 400.412488][T16971] veth1_vlan: entered promiscuous mode [ 400.565476][T16971] veth0_macvtap: entered promiscuous mode [ 400.614845][T16971] veth1_macvtap: entered promiscuous mode [ 400.698439][T16971] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 400.736833][ T5614] Bluetooth: hci1: command tx timeout [ 400.798524][T16971] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 400.906875][ T1159] netdevsim netdevsim1 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 400.946491][ T1159] netdevsim netdevsim1 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 401.055072][ T1159] netdevsim netdevsim1 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 401.066991][ T3340] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 401.075558][ T3340] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 401.134098][ T1159] netdevsim netdevsim1 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 401.332528][ T3340] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 401.373110][ T3340] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 401.480718][ T1007] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 401.521197][ T1007] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 402.338236][ T13] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 402.402153][ T4933] Bluetooth: hci0: unexpected cc 0x0c03 length: 249 > 1 [ 402.418896][ T4933] Bluetooth: hci0: unexpected cc 0x1003 length: 249 > 9 [ 402.428040][ T4933] Bluetooth: hci0: unexpected cc 0x1001 length: 249 > 9 [ 402.436038][ T4933] Bluetooth: hci0: unexpected cc 0x0c23 length: 249 > 4 [ 402.446116][ T4933] Bluetooth: hci0: unexpected cc 0x0c38 length: 249 > 2 [ 402.817079][ T5614] Bluetooth: hci1: command tx timeout [ 403.268750][T17283] ip_tables: iptables: counters copy to user failed while replacing table [ 403.458164][T17238] lo speed is unknown, defaulting to 1000 [ 403.619789][ T136] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 403.629921][ T1614] block nbd1: Possible stuck request ffff888027e0e000: control (read@0,1024B). Runtime 300 seconds [ 403.640980][ T1614] block nbd1: Possible stuck request ffff888027e0e1c0: control (read@1024,1024B). Runtime 300 seconds [ 403.652898][ T1614] block nbd1: Possible stuck request ffff888027e0e380: control (read@2048,1024B). Runtime 300 seconds [ 403.664041][ T1614] block nbd1: Possible stuck request ffff888027e0e540: control (read@3072,1024B). Runtime 300 seconds [ 403.694359][T17295] netlink: 'syz.5.3049': attribute type 1 has an invalid length. [ 403.927659][T17295] 8021q: adding VLAN 0 to HW filter on device bond0 [ 403.973513][T17298] bond0: (slave geneve3): making interface the new active one [ 403.996001][T17298] bond0: (slave geneve3): Enslaving as an active interface with an up link [ 404.066091][T17304] netlink: 24 bytes leftover after parsing attributes in process `syz.1.3051'. [ 404.116117][T17306] syzkaller0: entered promiscuous mode [ 404.144745][T17306] syzkaller0: entered allmulticast mode [ 404.308757][T17246] lo speed is unknown, defaulting to 1000 [ 404.497519][ T5614] Bluetooth: hci0: command tx timeout [ 404.588873][T17319] netlink: 'syz.1.3056': attribute type 1 has an invalid length. [ 404.607962][T17319] netlink: 224 bytes leftover after parsing attributes in process `syz.1.3056'. [ 404.962456][T17335] netlink: 20 bytes leftover after parsing attributes in process `syz.3.3060'. [ 405.021771][T17246] bridge0: port 1(bridge_slave_0) entered blocking state [ 405.036875][T17246] bridge0: port 1(bridge_slave_0) entered disabled state [ 405.057521][T17246] bridge_slave_0: entered allmulticast mode [ 405.077199][T17246] bridge_slave_0: entered promiscuous mode [ 405.093008][T17246] bridge0: port 2(bridge_slave_1) entered blocking state [ 405.100603][T17246] bridge0: port 2(bridge_slave_1) entered disabled state [ 405.108326][T17246] bridge_slave_1: entered allmulticast mode [ 405.116391][T17246] bridge_slave_1: entered promiscuous mode [ 405.164346][T17246] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 405.177312][T17246] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 405.226486][T17246] team0: Port device team_slave_0 added [ 405.257154][T17246] team0: Port device team_slave_1 added [ 405.341344][T17350] syzkaller1: entered promiscuous mode [ 405.352846][T17350] syzkaller1: entered allmulticast mode [ 405.362315][T17246] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 405.369652][T17246] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 405.407450][T17246] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 405.421063][T17349] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check. [ 405.483283][T17246] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 405.500721][T17246] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 405.592280][T17246] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 405.684034][T17371] netlink: 28 bytes leftover after parsing attributes in process `syz.4.3068'. [ 405.767538][T17371] bridge1: entered promiscuous mode [ 405.820783][T17379] netlink: 28 bytes leftover after parsing attributes in process `syz.1.3071'. [ 405.829976][T17379] netlink: 12 bytes leftover after parsing attributes in process `syz.1.3071'. [ 405.849905][T17246] hsr_slave_0: entered promiscuous mode [ 405.861876][T17246] hsr_slave_1: entered promiscuous mode [ 405.868700][T17246] debugfs: 'hsr0' already exists in 'hsr' [ 405.874608][T17246] Cannot create hsr debugfs directory [ 406.236731][T17390] netlink: 'syz.5.3075': attribute type 11 has an invalid length. [ 406.396878][T17404] netlink: 4 bytes leftover after parsing attributes in process `syz.1.3079'. [ 406.513880][T17246] netdevsim netdevsim0 netdevsim3 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 406.524756][T17413] netlink: 12 bytes leftover after parsing attributes in process `syz.1.3079'. [ 406.536036][T17246] netdevsim netdevsim0 netdevsim3 (unregistering): unset [0, 1] type 1 family 0 port 256 - 0 [ 406.548458][T17246] netdevsim netdevsim0 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 406.579560][ T5614] Bluetooth: hci0: command tx timeout [ 406.610437][T17412] netlink: 64 bytes leftover after parsing attributes in process `syz.3.3081'. [ 406.771468][T17246] netdevsim netdevsim0 netdevsim2 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 406.811309][T17246] netdevsim netdevsim0 netdevsim2 (unregistering): unset [0, 1] type 1 family 0 port 256 - 0 [ 406.832486][ T1007] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 406.842079][ T1170] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 406.863184][T17246] netdevsim netdevsim0 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 407.054604][T17246] netdevsim netdevsim0 netdevsim1 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 407.071205][T17246] netdevsim netdevsim0 netdevsim1 (unregistering): unset [0, 1] type 1 family 0 port 256 - 0 [ 407.082848][T17246] netdevsim netdevsim0 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 407.161790][T17437] xt_TCPMSS: path-MTU clamping only supported in FORWARD, OUTPUT and POSTROUTING hooks [ 407.233413][T17437] xt_hashlimit: size too large, truncated to 1048576 [ 407.244214][T17246] netdevsim netdevsim0 netdevsim0 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 407.255971][T17246] netdevsim netdevsim0 netdevsim0 (unregistering): unset [0, 1] type 1 family 0 port 256 - 0 [ 407.269492][T17246] netdevsim netdevsim0 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 407.383737][T17443] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 407.459820][ T1159] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 407.856112][T17460] syzkaller0: entered promiscuous mode [ 407.889053][T17460] syzkaller0: entered allmulticast mode [ 407.960957][T17246] netdevsim netdevsim0 netdevsim0: renamed from eth0 [ 408.000403][T17246] 8021q: adding VLAN 0 to HW filter on device netdevsim0 [ 408.134305][T17246] netdevsim netdevsim0 netdevsim1: renamed from eth1 [ 408.152356][T17474] --map-set only usable from mangle table [ 408.164777][T17246] 8021q: adding VLAN 0 to HW filter on device netdevsim1 [ 408.175444][T17246] netdevsim netdevsim0 netdevsim2: renamed from eth2 [ 408.202708][T17246] 8021q: adding VLAN 0 to HW filter on device netdevsim2 [ 408.224499][T17246] netdevsim netdevsim0 netdevsim3: renamed from eth3 [ 408.251134][T17479] netlink: 4 bytes leftover after parsing attributes in process `syz.1.3098'. [ 408.278986][T17246] 8021q: adding VLAN 0 to HW filter on device netdevsim3 [ 408.377926][T17491] netlink: 24 bytes leftover after parsing attributes in process `syz.5.3100'. [ 408.515082][ T5742] hid-generic 0005:046E:5505.0001: item fetching failed at offset 0/1 [ 408.541235][ T5742] hid-generic 0005:046E:5505.0001: probe with driver hid-generic failed with error -22 [ 408.632791][T17246] 8021q: adding VLAN 0 to HW filter on device bond0 [ 408.656710][ T5614] Bluetooth: hci0: command tx timeout [ 408.699653][T17246] 8021q: adding VLAN 0 to HW filter on device team0 [ 408.730676][ T1159] bridge0: port 1(bridge_slave_0) entered blocking state [ 408.737954][ T1159] bridge0: port 1(bridge_slave_0) entered forwarding state [ 408.749086][ T5720] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 408.832617][ T1159] bridge0: port 2(bridge_slave_1) entered blocking state [ 408.839924][ T1159] bridge0: port 2(bridge_slave_1) entered forwarding state [ 408.972697][T17521] sch_tbf: peakrate 8 is lower than or equals to rate 7508080445633888606 ! [ 409.392525][ T5720] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 409.416694][ T1159] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 409.437906][ T136] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 409.451918][ T5720] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 409.469088][ T5742] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 409.784040][T17548] __nla_validate_parse: 7 callbacks suppressed [ 409.784057][T17548] netlink: 40 bytes leftover after parsing attributes in process `syz.5.3116'. [ 409.809045][T17508] lo speed is unknown, defaulting to 1000 [ 410.169734][T17566] netlink: 12 bytes leftover after parsing attributes in process `syz.5.3120'. [ 410.201355][T17246] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 410.302545][T17573] netlink: 16 bytes leftover after parsing attributes in process `syz.3.3121'. [ 410.437773][T17574] bond1: entered promiscuous mode [ 410.442972][T17574] bond1: entered allmulticast mode [ 410.691154][T17246] veth0_vlan: entered promiscuous mode [ 410.706137][T17246] veth1_vlan: entered promiscuous mode [ 410.736945][ T5614] Bluetooth: hci0: command tx timeout [ 410.841372][T17246] veth0_macvtap: entered promiscuous mode [ 410.872571][T17589] netlink: 'syz.5.3128': attribute type 15 has an invalid length. [ 410.890286][T17246] veth1_macvtap: entered promiscuous mode [ 410.934680][T17594] netlink: 'syz.1.3129': attribute type 1 has an invalid length. [ 410.955540][T17246] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 410.969539][ T1170] ip6_tunnel: ip6gre1 xmit: Local address not yet configured! [ 410.998341][ T5749] ip6_tunnel: ip6gre1 xmit: Local address not yet configured! [ 411.006167][ T1170] ip6_tunnel: ip6gre1 xmit: Local address not yet configured! [ 411.040713][ T5749] ip6_tunnel: ip6gre1 xmit: Local address not yet configured! [ 411.103164][T17246] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 411.121354][T17595] netdevsim netdevsim3 netdevsim0: entered allmulticast mode [ 411.141164][T17605] tipc: Started in network mode [ 411.146163][T17605] tipc: Node identity ac141441, cluster identity 4711 [ 411.154560][T17605] tipc: Enabled bearer , priority 10 [ 411.238117][ T13] netdevsim netdevsim0 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 411.268535][ T1007] netdevsim netdevsim0 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 411.356621][ T13] netdevsim netdevsim0 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 411.379764][ T13] netdevsim netdevsim0 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 411.441563][T17616] netlink: 2 bytes leftover after parsing attributes in process `syz.1.3136'. [ 411.488573][ T1170] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 411.503388][T17615] netlink: 2 bytes leftover after parsing attributes in process `syz.1.3136'. [ 411.524316][ T1170] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 411.612915][ T1159] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 411.639768][ T1159] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 411.654599][T17623] netlink: 592 bytes leftover after parsing attributes in process `syz.1.3138'. [ 411.776598][ T5720] ip6_tunnel: ip6gre1 xmit: Local address not yet configured! [ 411.830141][T17593] lo speed is unknown, defaulting to 1000 [ 411.882183][T17629] netlink: 'syz.1.3140': attribute type 1 has an invalid length. [ 412.046995][T17639] netlink: 80 bytes leftover after parsing attributes in process `syz.4.3142'. [ 412.275579][ T24] tipc: Node number set to 2886997057 [ 412.367356][T17650] netlink: 48 bytes leftover after parsing attributes in process `syz.1.3147'. [ 412.580338][ T1159] net_ratelimit: 4 callbacks suppressed [ 412.580359][ T1159] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 412.595734][ T13] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 412.610533][ T3395] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 412.665737][T17660] netlink: 4 bytes leftover after parsing attributes in process `syz.4.3150'. [ 412.692924][T17660] netlink: 4 bytes leftover after parsing attributes in process `syz.4.3150'. [ 412.872883][T17666] syzkaller1: entered promiscuous mode [ 412.887062][T17666] syzkaller1: entered allmulticast mode [ 413.256222][T17683] syzkaller1: entered promiscuous mode [ 413.275438][T17683] syzkaller1: entered allmulticast mode [ 413.399575][T17698] ipt_ECN: cannot use operation on non-tcp rule [ 413.460445][T17698] netlink: 'syz.0.3159': attribute type 10 has an invalid length. [ 413.575643][T17698] 8021q: adding VLAN 0 to HW filter on device netdevsim1 [ 413.605928][T17698] bond0: (slave netdevsim1): Enslaving as an active interface with an up link [ 414.157051][T17723] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 414.462933][T17731] wg1 speed is unknown, defaulting to 1000 [ 414.480060][T17731] wg1 speed is unknown, defaulting to 1000 [ 414.490640][T17731] wg1 speed is unknown, defaulting to 1000 [ 414.509375][ T13] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 415.143393][ T3340] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 415.159499][ T42] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 415.170901][ T5720] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 415.226699][ C0] ip6_tunnel: ip6gre1 xmit: Local address not yet configured! [ 415.268635][T17754] syzkaller0: entered promiscuous mode [ 415.288670][T17731] infiniband syz2: set active [ 415.293834][T17731] infiniband syz2: added wg1 [ 415.301367][T17754] syzkaller0: entered allmulticast mode [ 415.308868][ T5720] wg1 speed is unknown, defaulting to 1000 [ 415.355797][T17731] workqueue: Failed to create a rescuer kthread for wq "ib_mad1": -EINTR [ 415.362742][T17731] infiniband syz2: Couldn't open port 1 [ 415.378054][T17731] smbdirect: ib_dev[syz2]: added: IB_CA max_fast_reg_page_list_len=512 device_cap_flags=0x1c001223c76 kernel_cap_flags=0x14 page_size_cap=0xfffff000 [ 415.425323][T17731] smbdirect: ib_dev[syz2]: num_ports=1 max_qp_rd_atom=128 max_qp_init_rd_atom=128 max_sgl_rd=0 max_sge_rd=32 max_cqe=32767 max_qp_wr=1048576 max_send_sge=32 max_recv_sge=32 [ 415.454057][T17731] smbdirect: ib_dev[syz2]PORT[1]: iwarp=0 ib=0 roce=1 v1=0 v2=1 core_cap_flags=0x803005 [ 415.520917][T17768] ip6tnl0: Caught tx_queue_len zero misconfig [ 415.548597][T17769] netlink: 'syz.0.3179': attribute type 9 has an invalid length. [ 415.607538][T17731] RDS/IB: syz2: added [ 415.619418][T17731] smc: adding ib device syz2 with port count 1 [ 415.643912][T17731] smc: ib device syz2 port 1 has no pnetid [ 415.713613][ T5749] wg1 speed is unknown, defaulting to 1000 [ 415.750340][T17731] wg1 speed is unknown, defaulting to 1000 [ 415.926752][T17776] syzkaller1: entered promiscuous mode [ 415.962095][T17776] syzkaller1: entered allmulticast mode [ 416.212568][T17731] wg1 speed is unknown, defaulting to 1000 [ 416.294630][T17805] netlink: 'syz.3.3189': attribute type 21 has an invalid length. [ 416.317543][T17805] __nla_validate_parse: 6 callbacks suppressed [ 416.317564][T17805] netlink: 128 bytes leftover after parsing attributes in process `syz.3.3189'. [ 416.335521][T17805] netlink: 'syz.3.3189': attribute type 4 has an invalid length. [ 416.350938][T17805] netlink: 'syz.3.3189': attribute type 5 has an invalid length. [ 416.359247][T17806] Cannot find del_set index 4 as target [ 416.365283][T17805] netlink: 3 bytes leftover after parsing attributes in process `syz.3.3189'. [ 416.537529][T17809] xt_cluster: node mask cannot exceed total number of nodes [ 416.564867][T17815] ip_tables: iptables: counters copy to user failed while replacing table [ 416.728190][T17821] netlink: 4 bytes leftover after parsing attributes in process `syz.1.3197'. [ 416.803700][T17731] wg1 speed is unknown, defaulting to 1000 [ 416.944005][T17833] netlink: 84 bytes leftover after parsing attributes in process `syz.1.3201'. [ 417.237576][T17848] openvswitch: netlink: ufid size 17 bytes exceeds the range (1, 16) [ 417.315901][T17852] netlink: 'syz.0.3205': attribute type 1 has an invalid length. [ 417.392124][T17852] netlink: 'syz.0.3205': attribute type 1 has an invalid length. [ 417.472233][T17731] wg1 speed is unknown, defaulting to 1000 [ 417.774603][T17891] net_ratelimit: 2 callbacks suppressed [ 417.774621][T17891] openvswitch: netlink: nsh attribute has 1 unknown bytes. [ 418.112556][T17731] wg1 speed is unknown, defaulting to 1000 [ 418.147110][T17899] netlink: 4 bytes leftover after parsing attributes in process `syz.0.3217'. [ 418.167952][T17902] netlink: 12 bytes leftover after parsing attributes in process `syz.3.3218'. [ 418.339363][ T1115] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 418.349400][ T1159] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 418.360804][ T35] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 418.559052][T17731] wg1 speed is unknown, defaulting to 1000 [ 418.857859][T17911] xt_hashlimit: size too large, truncated to 1048576 [ 418.955551][T17915] netlink: 104 bytes leftover after parsing attributes in process `syz.1.3221'. [ 418.996152][T17916] netlink: 'syz.3.3222': attribute type 2 has an invalid length. [ 419.127744][T17921] syzkaller0: entered promiscuous mode [ 419.153620][T17921] syzkaller0: entered allmulticast mode [ 419.181834][T17921] netlink: 40 bytes leftover after parsing attributes in process `syz.0.3223'. [ 419.192207][T17731] wg1 speed is unknown, defaulting to 1000 [ 419.211099][T17924] 0: reclassify loop, rule prio 0, protocol 03 [ 419.322631][T17926] geneve2: entered allmulticast mode [ 419.510177][T17938] netlink: 'syz.1.3228': attribute type 24 has an invalid length. [ 419.595480][T17945] netlink: 'syz.1.3228': attribute type 24 has an invalid length. [ 419.683945][T17731] wg1 speed is unknown, defaulting to 1000 [ 420.079212][T17966] netlink: 'syz.4.3234': attribute type 10 has an invalid length. [ 420.102657][T17966] veth1_macvtap: left promiscuous mode [ 420.128261][T17966] bond0: (slave macsec0): Error -34 calling dev_set_mtu [ 420.162190][T17731] wg1 speed is unknown, defaulting to 1000 [ 420.268404][ T13] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 420.663615][T17983] rdma_op ffff88807d843238 conn xmit_rdma 0000000000000000 [ 420.713013][T17985] netlink: 'syz.3.3241': attribute type 1 has an invalid length. [ 420.724446][T17986] openvswitch: netlink: Tunnel attr 68 out of range max 16 [ 420.751421][T17985] x_tables: duplicate underflow at hook 2 [ 420.913187][T17994] netlink: 132 bytes leftover after parsing attributes in process `syz.5.3244'. [ 421.022983][T17994] bond0 (unregistering): (slave geneve3): Releasing active interface [ 421.060350][T17994] bond0 (unregistering): Released all slaves [ 421.153136][T18011] netlink: 40 bytes leftover after parsing attributes in process `syz.3.3249'. [ 421.483049][T18027] netlink: 'syz.3.3251': attribute type 2 has an invalid length. [ 421.501647][T18027] netlink: 'syz.3.3251': attribute type 2 has an invalid length. [ 421.518372][T18027] netlink: 67 bytes leftover after parsing attributes in process `syz.3.3251'. [ 421.618947][T18031] netlink: 44 bytes leftover after parsing attributes in process `syz.0.3254'. [ 421.634213][T18031] netlink: 43 bytes leftover after parsing attributes in process `syz.0.3254'. [ 421.644433][T18031] netlink: 'syz.0.3254': attribute type 5 has an invalid length. [ 421.664720][T18031] netlink: 43 bytes leftover after parsing attributes in process `syz.0.3254'. [ 421.692659][T18031] netlink: 220 bytes leftover after parsing attributes in process `syz.0.3254'. [ 421.732923][T18031] netlink: 'syz.0.3254': attribute type 6 has an invalid length. [ 421.748647][T18031] netlink: 4 bytes leftover after parsing attributes in process `syz.0.3254'. [ 421.773045][T18033] netdevsim netdevsim1 netdevsim0: entered promiscuous mode [ 421.923541][T18044] netlink: 164 bytes leftover after parsing attributes in process `syz.1.3258'. [ 421.955224][T18047] netlink: 220 bytes leftover after parsing attributes in process `syz.4.3259'. [ 422.334284][T18062] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check. [ 422.371596][T18063] IPVS: set_ctl: invalid protocol: 58 172.20.20.12:20000 [ 422.482452][T18075] netlink: 'syz.0.3268': attribute type 1 has an invalid length. [ 422.530316][T18075] 8021q: adding VLAN 0 to HW filter on device bond1 [ 422.558790][T18075] netlink: 24 bytes leftover after parsing attributes in process `syz.0.3268'. [ 422.796657][T18075] Bluetooth: MGMT ver 1.23 [ 423.377303][ T13] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 424.096932][ C0] ip6_tunnel: ip6gre1 xmit: Local address not yet configured! [ 424.105647][ T1159] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 424.113833][ T1159] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 424.739098][ T5720] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 424.933301][T18113] lo: Caught tx_queue_len zero misconfig [ 425.017576][T18117] netlink: 4 bytes leftover after parsing attributes in process `syz.0.3279'. [ 425.294149][T18063] nci: __nci_request: wait_for_completion_interruptible_timeout failed -512 [ 425.477022][T18124] netlink: 'syz.3.3282': attribute type 1 has an invalid length. [ 425.590146][T18124] veth3: entered allmulticast mode [ 425.665956][T18133] netlink: 'syz.3.3282': attribute type 32 has an invalid length. [ 425.693426][T18140] ip_tables: iptables: counters copy to user failed while replacing table [ 425.732802][T18139] xt_l2tp: v2 doesn't support IP mode [ 425.783167][T18133] bond1: Setting coupled_control to off (0) [ 425.798931][T18139] : renamed from bond0 (while UP) [ 426.012974][T18152] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 426.023023][ T13] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 426.111078][T18166] bond1: entered allmulticast mode [ 426.117005][T18166] 8021q: adding VLAN 0 to HW filter on device bond1 [ 426.630371][T18200] __nla_validate_parse: 3 callbacks suppressed [ 426.630390][T18200] netlink: 8 bytes leftover after parsing attributes in process `syz.1.3302'. [ 426.800602][T18208] IPv6: sit1: Disabled Multicast RS [ 427.289846][T18237] syzkaller0: entered promiscuous mode [ 427.308963][T18237] syzkaller0: entered allmulticast mode [ 427.419835][T18237] veth1_to_bond: entered allmulticast mode [ 427.458917][T18237] veth1_to_bond: entered promiscuous mode [ 427.493976][T18237] netlink: 4 bytes leftover after parsing attributes in process `syz.5.3310'. [ 427.576985][ T136] tipc: Subscription rejected, illegal request [ 427.594352][T18237] veth1_to_bond (unregistering): left allmulticast mode [ 427.647249][T18237] veth1_to_bond (unregistering): left promiscuous mode [ 427.715333][T18237] .`: (slave bond_slave_1): Releasing backup interface [ 428.137930][T18266] netlink: 20 bytes leftover after parsing attributes in process `syz.5.3319'. [ 428.151203][T18267] ip6gre1: entered allmulticast mode [ 428.370588][T18278] netlink: 32 bytes leftover after parsing attributes in process `syz.3.3323'. [ 428.475174][T18281] bond0: Caught tx_queue_len zero misconfig [ 428.987551][T18316] netlink: 'syz.4.3335': attribute type 1 has an invalid length. [ 429.024101][T18316] netlink: 4 bytes leftover after parsing attributes in process `syz.4.3335'. [ 429.229071][ T136] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 429.475184][T18351] netlink: 52 bytes leftover after parsing attributes in process `syz.1.3342'. [ 429.511809][T18350] xt_hashlimit: size too large, truncated to 1048576 [ 429.862158][ T13] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 429.871009][ T1007] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 429.982324][T18375] netlink: 'syz.3.3350': attribute type 1 has an invalid length. [ 430.201712][T18389] netlink: 12 bytes leftover after parsing attributes in process `syz.0.3355'. [ 430.211073][T18388] netlink: 12 bytes leftover after parsing attributes in process `syz.0.3355'. [ 430.363878][T18391] netlink: 72 bytes leftover after parsing attributes in process `syz.3.3356'. [ 430.370267][T18393] netlink: 'syz.4.3357': attribute type 5 has an invalid length. [ 430.544764][T18399] ipt_ECN: cannot use operation on non-tcp rule [ 430.569472][T18400] syzkaller1: entered promiscuous mode [ 430.592939][T18400] syzkaller1: entered allmulticast mode [ 430.754456][T18410] netlink: 20 bytes leftover after parsing attributes in process `syz.1.3362'. [ 430.782681][T18410] geneve3: entered promiscuous mode [ 430.788904][ T1007] IPVS: starting estimator thread 0... [ 430.879572][T18417] IPVS: sh: FWM 3 0x00000003 - no destination available [ 430.899448][T18414] IPVS: using max 28 ests per chain, 67200 per kthread [ 431.232568][T18437] openvswitch: netlink: Unexpected mask (mask=200240, allowed=10048) [ 431.262852][T18439] openvswitch: netlink: Tunnel attr 2319 out of range max 16 [ 431.778981][ T35] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 431.782733][ T30] INFO: task udevd:5625 blocked in I/O wait for more than 143 seconds. [ 431.800912][ T30] Not tainted syzkaller #0 [ 431.812474][ T30] "echo 0 > /proc/sys/kernel/hung_task_timeout_secs" disables this message. [ 431.842428][ T30] task:udevd state:D stack:25736 pid:5625 tgid:5625 ppid:4983 task_flags:0x400140 flags:0x00080002 [ 431.882092][ T30] Call Trace: [ 431.888851][ T30] [ 431.893066][ T30] __schedule+0x17d4/0x5630 [ 431.902545][ T30] ? __pfx___schedule+0x10/0x10 [ 431.911731][ T30] ? schedule+0x90/0x2b0 [ 431.919055][ T30] schedule+0x164/0x2b0 [ 431.927503][ T30] io_schedule+0x7f/0xd0 [ 431.934213][ T30] folio_wait_bit_common+0x836/0xbc0 [ 431.952203][ T30] ? filemap_get_entry+0xcd/0x3f0 [ 431.966837][ T30] ? __pfx_folio_wait_bit_common+0x10/0x10 [ 431.988881][ T30] ? filemap_read_folio+0x234/0x3a0 [ 432.005521][ T30] ? __pfx_wake_page_function+0x10/0x10 [ 432.017734][ T30] ? __filemap_get_folio_mpol+0x7c8/0x1000 [ 432.024994][ T30] do_read_cache_folio+0x1ac/0x590 [ 432.030626][ T30] ? __pfx_blkdev_read_folio+0x10/0x10 [ 432.036715][ T30] read_part_sector+0xb6/0x2b0 [ 432.040399][T18477] __nla_validate_parse: 3 callbacks suppressed [ 432.040435][T18477] netlink: 12 bytes leftover after parsing attributes in process `syz.4.3382'. [ 432.041797][ T30] adfspart_check_POWERTEC+0x9a/0x7a0 [ 432.067297][ T30] ? __pfx_adfspart_check_ICS+0x10/0x10 [ 432.074007][ T30] ? __pfx_adfspart_check_POWERTEC+0x10/0x10 [ 432.080761][ T30] ? bdev_disk_changed+0x56c/0x17a0 [ 432.086245][ T30] ? bdev_disk_changed+0x56c/0x17a0 [ 432.092129][ T30] bdev_disk_changed+0x851/0x17a0 [ 432.098134][ T30] ? __pfx_bdev_disk_changed+0x10/0x10 [ 432.103701][ T30] blkdev_get_whole+0x372/0x510 [ 432.109228][ T30] bdev_open+0x324/0xd70 [ 432.113590][ T30] blkdev_open+0x461/0x600 [ 432.118318][ T30] ? __pfx_blkdev_open+0x10/0x10 [ 432.123383][ T30] do_dentry_open+0x816/0x1380 [ 432.128299][ T30] vfs_open+0x3b/0x340 [ 432.132503][ T30] ? path_openat+0x1428/0x1d60 [ 432.138365][ T30] path_openat+0x1443/0x1d60 [ 432.143085][ T30] do_file_open+0x23e/0x4a0 [ 432.147754][ T30] ? __pfx_do_file_open+0x10/0x10 [ 432.152857][ T30] ? _raw_spin_unlock+0x28/0x50 [ 432.158216][ T30] ? alloc_fd+0x651/0x6c0 [ 432.162858][ T30] do_sys_openat2+0x115/0x200 [ 432.168454][ T30] ? __pfx_do_sys_openat2+0x10/0x10 [ 432.173690][ T30] ? __x64_sys_epoll_wait+0x1d7/0x230 [ 432.185327][ T30] __x64_sys_openat+0x138/0x170 [ 432.190379][ T30] do_syscall_64+0x166/0x520 [ 432.195139][ T30] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 432.201612][ T30] ? clear_bhb_loop+0x70/0xc0 [ 432.206507][ T30] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 432.212456][ T30] RIP: 0033:0x7f855aca7407 [ 432.217061][ T30] RSP: 002b:00007ffdc39c57b0 EFLAGS: 00000202 ORIG_RAX: 0000000000000101 [ 432.225530][ T30] RAX: ffffffffffffffda RBX: 00007f855b350880 RCX: 00007f855aca7407 [ 432.233705][ T30] RDX: 00000000000a0800 RSI: 000055b77ba04150 RDI: ffffffffffffff9c [ 432.241924][ T30] RBP: 000055b77b9f2910 R08: 0000000000000000 R09: 0000000000000000 [ 432.250235][ T30] R10: 0000000000000000 R11: 0000000000000202 R12: 000055b77ba2be50 [ 432.258648][ T30] R13: 000055b77ba00190 R14: 0000000000000000 R15: 000055b77ba2be50 [ 432.266825][ T30] [ 432.270996][ T30] [ 432.270996][ T30] Showing all locks held in the system: [ 432.295047][ T30] locks held by khungtaskd/30: 1, last CPU#1: [ 432.301273][ T30] #0: ffffffff8eb5a1e0 (rcu_read_lock){....}-{1:3}, at: debug_show_all_locks+0x2e/0x180 [ 432.311473][ T30] locks held by klogd/4972: 1, last CPU#0: [ 432.317562][ T30] #0: ffff8880b863b4e0 (&rq->__lock){-.-.}-{2:2}, at: raw_spin_rq_lock_nested+0x2d/0x160 [ 432.327796][ T30] locks held by getty/5370: 2, on CPU#0: [ 432.333493][ T30] #0: ffff88803254d0a0 (&tty->ldisc_sem){++++}-{0:0}, at: tty_ldisc_ref_wait+0x25/0x70 [ 432.343602][ T30] #1: ffffc9000322b2e8 (&ldata->atomic_read_lock){+.+.}-{4:4}, at: n_tty_read+0x45a/0x1360 [ 432.353997][ T30] locks held by udevd/5625: 1, on CPU#1: [ 432.359879][ T30] #0: ffff888027d9f350 (&disk->open_mutex){+.+.}-{4:4}, at: bdev_open+0xde/0xd70 [ 432.369377][ T30] locks held by syz-executor/17246: 1, last CPU#0: [ 432.375938][ T30] #0: ffff888054c36460 (sb_writers#5){.+.+}-{0:0}, at: mnt_want_write+0x41/0x90 [ 432.386728][ T30] locks held by syz.4.3382/18476: 3, on CPU#0: [ 432.392984][ T30] #0: ffff888065bb0dc0 (&sb->s_type->i_mutex_key#13){+.+.}-{4:4}, at: __sock_release+0x7a/0x1f0 [ 432.404165][ T30] #1: ffff8880226bc6b8 (&xs->mutex){+.+.}-{4:4}, at: xsk_release+0x537/0x7a0 [ 432.413465][ T30] #2: ffffffff8eb604e8 (rcu_state.exp_mutex){+.+.}-{4:4}, at: synchronize_rcu_expedited+0x38d/0x770 [ 432.434012][ T30] locks held by syz.3.3383/18487: 1, on CPU#1: [ 432.440371][ T30] #0: ffffffff90036380 (rtnl_mutex){+.+.}-{4:4}, at: tun_chr_close+0x3e/0x1c0 [ 432.449691][ T30] [ 432.452227][ T30] ============================================= [ 432.452227][ T30] [ 432.462529][ T30] NMI backtrace for cpu 1 [ 432.462549][ T30] CPU: 1 UID: 0 PID: 30 Comm: khungtaskd Not tainted syzkaller #0 PREEMPT(full) [ 432.462571][ T30] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/24/2026 [ 432.462582][ T30] Call Trace: [ 432.462590][ T30] [ 432.462598][ T30] dump_stack_lvl+0xe8/0x150 [ 432.462644][ T30] nmi_cpu_backtrace+0x274/0x2d0 [ 432.462748][ T30] ? __pfx_nmi_raise_cpu_backtrace+0x10/0x10 [ 432.462790][ T30] nmi_trigger_cpumask_backtrace+0x17d/0x390 [ 432.462832][ T30] sys_info+0x135/0x170 [ 432.462858][ T30] watchdog+0xfd7/0x1030 [ 432.462906][ T30] ? watchdog+0x1c7/0x1030 [ 432.462938][ T30] kthread+0x38b/0x480 [ 432.462966][ T30] ? __pfx_watchdog+0x10/0x10 [ 432.462990][ T30] ? __pfx_kthread+0x10/0x10 [ 432.463020][ T30] ret_from_fork+0x514/0xb70 [ 432.463060][ T30] ? __pfx_ret_from_fork+0x10/0x10 [ 432.463087][ T30] ? __switch_to+0xc89/0x1420 [ 432.463114][ T30] ? __pfx_kthread+0x10/0x10 [ 432.463144][ T30] ret_from_fork_asm+0x1a/0x30 [ 432.463188][ T30] [ 432.463216][ T30] Sending NMI from CPU 1 to CPUs 0: [ 432.575072][ C0] NMI backtrace for cpu 0 [ 432.575089][ C0] CPU: 0 UID: 0 PID: 16565 Comm: syz-executor Not tainted syzkaller #0 PREEMPT(full) [ 432.575110][ C0] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/24/2026 [ 432.575121][ C0] RIP: 0010:psi_write_begin+0x0/0x160 [ 432.575175][ C0] Code: 89 04 24 e8 32 c3 95 00 44 8b 04 24 44 89 fe 48 8b 7c 24 08 e9 87 fe ff ff 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 <55> 41 56 53 48 63 df 83 fb 08 0f 83 e5 00 00 00 49 be 00 00 00 00 [ 432.575191][ C0] RSP: 0018:ffffc90003577960 EFLAGS: 00000046 [ 432.575206][ C0] RAX: 0000000000000000 RBX: 0000000000000000 RCX: 0000000000000000 [ 432.575217][ C0] RDX: 0000000000000001 RSI: ffff88807f988000 RDI: 0000000000000000 [ 432.575228][ C0] RBP: dffffc0000000000 R08: ffff88804e4d8007 R09: 1ffff11009c9b000 [ 432.575241][ C0] R10: dffffc0000000000 R11: ffffed1009c9b001 R12: ffff8880b863b480 [ 432.575254][ C0] R13: ffff88807f988000 R14: ffff88804e4d8000 R15: 0000000000000001 [ 432.575266][ C0] FS: 000055555dbeb500(0000) GS:ffff888124f24000(0000) knlGS:0000000000000000 [ 432.575281][ C0] CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033 [ 432.575293][ C0] CR2: 00007f22eaff14b8 CR3: 00000000674dc000 CR4: 00000000003526f0 [ 432.575309][ C0] Call Trace: [ 432.575315][ C0] [ 432.575327][ C0] psi_task_switch+0x57/0x7d0 [ 432.575346][ C0] ? psi_account_irqtime+0x130/0x6d0 [ 432.575366][ C0] __schedule+0x2a59/0x5630 [ 432.575385][ C0] ? __lock_acquire+0x683/0x2cf0 [ 432.575420][ C0] ? do_raw_spin_unlock+0xf5/0x200 [ 432.575446][ C0] ? __pfx___schedule+0x10/0x10 [ 432.575468][ C0] ? schedule+0x90/0x2b0 [ 432.575486][ C0] schedule+0x164/0x2b0 [ 432.575503][ C0] do_nanosleep+0x21e/0x6a0 [ 432.575528][ C0] ? do_nanosleep+0x7e/0x6a0 [ 432.575553][ C0] ? __pfx_do_nanosleep+0x10/0x10 [ 432.575577][ C0] ? __asan_memset+0x22/0x50 [ 432.575596][ C0] ? __hrtimer_setup+0x1b7/0x260 [ 432.575620][ C0] ? __pfx_hrtimer_wakeup+0x10/0x10 [ 432.575643][ C0] hrtimer_nanosleep+0x18f/0x3a0 [ 432.575664][ C0] ? __pfx_hrtimer_nanosleep+0x10/0x10 [ 432.575687][ C0] ? __pfx_hrtimer_wakeup+0x10/0x10 [ 432.575714][ C0] __se_sys_clock_nanosleep+0x35b/0x3b0 [ 432.575737][ C0] ? __pfx___se_sys_clock_nanosleep+0x10/0x10 [ 432.575764][ C0] do_syscall_64+0x166/0x520 [ 432.575784][ C0] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 432.575801][ C0] ? clear_bhb_loop+0x70/0xc0 [ 432.575822][ C0] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 432.575857][ C0] RIP: 0033:0x7f369255e90e [ 432.575872][ C0] Code: 08 0f 85 a5 a8 ff ff 49 89 fb 48 89 f0 48 89 d7 48 89 ce 4c 89 c2 4d 89 ca 4c 8b 44 24 08 4c 8b 4c 24 10 4c 89 5c 24 08 0f 05 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 80 00 00 00 00 48 83 ec 08 [ 432.575888][ C0] RSP: 002b:00007ffd23e70b58 EFLAGS: 00000246 ORIG_RAX: 00000000000000e6 [ 432.575906][ C0] RAX: ffffffffffffffda RBX: 000055555dbeb500 RCX: 00007f369255e90e [ 432.575920][ C0] RDX: 00007ffd23e70bb0 RSI: 0000000000000000 RDI: 0000000000000000 [ 432.575931][ C0] RBP: 00007ffd23e70c1c R08: 0000000000000000 R09: 0000000000000000 [ 432.575942][ C0] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000001388 [ 432.575954][ C0] R13: 00000000000927c0 R14: 00000000000697b9 R15: 00007ffd23e70c70 [ 432.575977][ C0] [ 432.901798][ T30] Kernel panic - not syncing: hung_task: blocked tasks [ 432.908687][ T30] CPU: 1 UID: 0 PID: 30 Comm: khungtaskd Not tainted syzkaller #0 PREEMPT(full) [ 432.917823][ T30] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/24/2026 [ 432.927919][ T30] Call Trace: [ 432.931207][ T30] [ 432.934158][ T30] vpanic+0x56d/0xa60 [ 432.938158][ T30] ? __pfx___schedule+0x10/0x10 [ 432.943013][ T30] ? __pfx_vpanic+0x10/0x10 [ 432.947527][ T30] ? nmi_trigger_cpumask_backtrace+0x20a/0x390 [ 432.953699][ T30] panic+0xc5/0xd0 [ 432.957441][ T30] ? __pfx_panic+0x10/0x10 [ 432.961887][ T30] ? preempt_schedule_common+0x7f/0xd0 [ 432.967390][ T30] ? preempt_schedule_thunk+0x16/0x40 [ 432.972805][ T30] ? nmi_trigger_cpumask_backtrace+0x31a/0x390 [ 432.978991][ T30] ? nmi_trigger_cpumask_backtrace+0x31f/0x390 [ 432.985186][ T30] watchdog+0x1030/0x1030 [ 432.989544][ T30] ? watchdog+0x1c7/0x1030 [ 432.993991][ T30] kthread+0x38b/0x480 [ 432.998116][ T30] ? __pfx_watchdog+0x10/0x10 [ 433.002817][ T30] ? __pfx_kthread+0x10/0x10 [ 433.007436][ T30] ret_from_fork+0x514/0xb70 [ 433.012077][ T30] ? __pfx_ret_from_fork+0x10/0x10 [ 433.017252][ T30] ? __switch_to+0xc89/0x1420 [ 433.021953][ T30] ? __pfx_kthread+0x10/0x10 [ 433.026569][ T30] ret_from_fork_asm+0x1a/0x30 [ 433.031381][ T30] [ 433.035071][ T30] Kernel Offset: disabled [ 433.039407][ T30] Rebooting in 86400 seconds..