last executing test programs: 6.745214034s ago: executing program 3 (id=14462): r0 = openat$nci(0xffffffffffffff9c, &(0x7f0000000080), 0x2, 0x0) r1 = openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0) ioctl$TUNSETIFF(r1, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x7101}) r2 = socket(0x400000000010, 0x3, 0x0) r3 = socket$unix(0x1, 0x1, 0x0) r4 = socket$inet_udp(0x2, 0x2, 0x0) getsockopt$inet_int(r4, 0x0, 0x17, 0x0, &(0x7f0000001ec0)) r5 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r5, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000340)=ANY=[@ANYBLOB="140000001000010000000000000000000500000a28000000000a030000000000000000000a00000708000240000000020900010073797a31000000002c000000030a010100000000000000000a0000070900010073797a31000000000900030073797a320000000014000000110001"], 0x7c}, 0x1, 0x0, 0x0, 0x4000}, 0x0) r6 = socket$tipc(0x1e, 0x5, 0x0) setsockopt$TIPC_GROUP_JOIN(r6, 0x10f, 0x87, &(0x7f0000000000)={0x42, 0x1}, 0x10) r7 = socket$tipc(0x1e, 0x2, 0x0) bind$tipc(r7, &(0x7f0000000180)=@nameseq={0x1e, 0x1, 0x0, {0x42, 0x1, 0x5}}, 0x10) setsockopt$TIPC_GROUP_JOIN(r7, 0x10f, 0x87, &(0x7f0000000240)={0x42, 0x1}, 0x10) sendmsg$tipc(r7, &(0x7f00000003c0)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4010}, 0x8820) sendmsg$NFT_BATCH(r5, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000009b00)={&(0x7f0000000c80)=ANY=[@ANYBLOB="140000001000010000000000000000000300000a58000000060a010400000000000000000a0000040900010073797a31000000000900020073797a32000000002c000480280001800d00010073796e70726f787900000000140002800500020001000000080003"], 0x80}, 0x1, 0x0, 0x0, 0x4000850}, 0x24044010) ioctl$sock_SIOCGIFINDEX(r3, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r2, &(0x7f00000012c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000005c0)=@newqdisc={0x38, 0x24, 0x4ee4e6a52ff56541, 0x70bd2d, 0xffffffff, {0x0, 0x0, 0x0, r8, {0x0, 0xfff1}, {0xffff, 0xffff}, {0x1, 0xf}}, [@qdisc_kind_options=@q_multiq={{0xb}, {0x8, 0x2, {0x28}}}]}, 0x38}}, 0x0) r9 = socket$inet6(0xa, 0x3, 0x7) connect$inet6(r9, &(0x7f0000001940)={0xa, 0x0, 0x1000006, @private0, 0x4005}, 0x1c) sendmmsg$inet6(r9, &(0x7f0000004b80)=[{{0x0, 0x0, 0x0}}, {{&(0x7f0000000140)={0xa, 0x4e23, 0x100, @local, 0x269}, 0x1c, &(0x7f0000003240)=[{&(0x7f0000000280)="d18226eefff35f60992055e35448c6490dbb77cd0c1d947bf392c2264b907c146e654999df832e5db4b5571b24498d19bb0025dd11b85fbf7241100095391a87ba95311e17adeaee9aec692eb1601608cff4b79369464627813a16438af2c1", 0x5f}, {&(0x7f0000000680)="d051998e587696d96820a45e2b54c7198ae869baf205d7764db2485cca30eaabb58e6f98e01059a8e9c365f47a290c1f2f55d718c9bdac075583704a18d7ffdefa61598d87c31d10e07b3286bf004c0a41c68b7a119c53ec62a4c83cbf0c684b4ee31ac3706f0b72949291053bffb3e1fcb434035490ec0ddd59a44a6310ea4a2ebc835e2a037b6efeb0af5c7274aeac1e9a9db8ae63bc97d8cd716c5942fb7b0caad1d6", 0xa4}, {&(0x7f0000000740)="92d96068b026d4b7f427ed707d33eddd072e0c36a2e063f1ccd2bf4df19dd95638ae659beb97cdfa67e8de6f585d42da346cddc8db18664693ca198e0f89e68e5df812b97b49bf03", 0x48}, {&(0x7f0000002240)="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", 0x1000}], 0x4, &(0x7f0000000980)=ANY=[@ANYBLOB="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"], 0x190}}, {{&(0x7f0000003380)={0xa, 0x4e21, 0x4, @loopback, 0x2}, 0x1c, &(0x7f0000004600)=[{&(0x7f00000033c0)="387f674ea8", 0x5}, {&(0x7f0000003400)="d4d86fbf3ed9dc3800ae1c5feec8c8185ebb9d6f", 0x14}, {&(0x7f0000003440)="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", 0x1000}, {&(0x7f0000004440)="88fb75f327e49cb84f39fe1f6700d2ba6f66ac1d1ee799165075f8c2e3ebf349783fa541f63f51a5c2442764cb3977985d48946f7a08006ca473e60db8c1ec817f3caed96bcc20130272fb08472ce8e4dfdfc52dcf5e4ea3579b16cae26e6f22430174c892f0deba3c3aa07f1f89de08adf92e44b30c1b7c316b5f43a1cb5d9a98c3ef300a1c6973f571701bd467603911cc1082e7282f0cacb7fec5fb0f67220ff1e09f7dd80161", 0xa8}, {&(0x7f0000004500)="717a6796f423199b1a7c4a61186f1bab6652be374baf4620b27a5d902d74fe7d83711c5dd0e5408bdb9ae00e33cac5514ba30fd87fa02559e66fc9f31b0f421acf9993e57dff1950d50a83eb07312312581f65f817498e6bfa16fe71a750526be2534b649e58b3727c4d826ff6aa93cd8580a3c8d2720bfe2a20b726596cd45df95df3e81a4ac471ece1b4ff01c514e37f66ecca3e57970c0b8785381d61489dd2c04833a1f2c1df8d2d32d89ee805f8c069e7a9512671c6122d2e3af8ca9ca8", 0xc0}, {&(0x7f00000045c0)="3c36ad42724d90b184f2f79fabef0e3c999a", 0x12}], 0x6, &(0x7f0000004680)=ANY=[@ANYBLOB="1400000000000000290000000b000000000000000000000098000000000000002900000036000000ff10000004000000027efa555568d5418901439483e1f1db1fe9c64a6f0fe40388e1c095bba56ca603890f1424b5fdae9c2021b25fcbbcbc7f5b5fa679e73f651d8ce41c5b1a9f6a63f3c42c8ff05568d6ea153bf94304402b6bf9000000000000008000c02d57691a24aca816f9b8719e81d5de445eceabdea2b9e797bedf0cb1616aee08bbe0ef1400000000000000290000004300000002000000000000001400000000000000000000040b00000000000f0d000000001400000000000000290000ef42ffff000100000000000000"], 0xf8}}, {{0x0, 0x0, &(0x7f00000049c0)=[{&(0x7f0000004980)="2b1a8d7616f6ef4fcbbaf8baf651746276147142e9afae83329fa0ba821ac7566736b14c86af55d4cfd936a98c066904294ef51ca0d9cc617550d0afd7", 0x3d}], 0x1, &(0x7f0000004a00)=ANY=[@ANYBLOB="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"], 0x150}}], 0x4, 0x0) setsockopt$inet6_opts(r9, 0x29, 0x37, 0x0, 0x0) sendmsg$nl_route_sched(r2, &(0x7f0000006040)={0x0, 0x0, &(0x7f0000000440)={&(0x7f0000006080)=@newtaction={0x3450, 0x30, 0x100, 0x70bd27, 0x25dfdbfb, {}, [{0x343c, 0x1, [@m_connmark={0xfc, 0x1e, 0x0, 0x0, {{0xd}, {0x3c, 0x2, 0x0, 0x1, [@TCA_CONNMARK_PARMS={0x1c, 0x1, {{0x3, 0x2, 0x5, 0x8, 0x1}, 0xa25}}, @TCA_CONNMARK_PARMS={0x1c, 0x1, {{0x80000001, 0x332, 0x4, 0x7ff, 0xf}, 0xff1d}}]}, {0x92, 0x6, "b90e2df7eeab41d90ac43ca12cd9a944c14deef77e868d64173ca12723233e9292a0dae32c36aef1bc526d4a30b6cdaf9514454ae250debe2facaaf078d6028ed90fad07d76f945a3b8c2feb86790c4b3891bb10c5b49e1b23ff9bdb0f384fb1d35490987bf0d19ecbf6f264fd4970b4fd7c2e59143be83774ba98e2a4263896da9693482d5db346d1034d770bca"}, {0xc}, {0xc, 0x8, {0x1, 0x2}}}}, @m_pedit={0xf04, 0x7, 0x0, 0x0, {{0xa}, {0xe6c, 0x2, 0x0, 0x1, [@TCA_PEDIT_PARMS={0xe68, 0x2, {{{0x10, 0x2, 0x6, 0x9, 0x1000}, 0x1, 0x0, [{0x200, 0x0, 0x80000000, 0x352fa60, 0x3, 0x1000}, {0xa, 0x9, 0x7, 0x2, 0x7, 0x2}, {0x7, 0xffffff9a, 0x9, 0x9, 0xf0, 0x6}]}, [{0x4, 0x1, 0x0, 0x9, 0x3, 0x1000}, {0xffffbf2b, 0x0, 0x0, 0x2, 0x7ff, 0x4}, {0x3, 0x9, 0x6e, 0x3849, 0x484, 0x1ff}, {0x80, 0x2, 0x7, 0xff, 0x4, 0x6}, {0x5a7e, 0x81, 0x5, 0x0, 0x4, 0x5}, {0x9, 0x0, 0x8, 0x3, 0x3ff, 0x485}, {0x5, 0x40d6, 0x7ed7, 0x1, 0x2, 0x2}, {0x2, 0x0, 0x42ad, 0x2ab174f8, 0x3ff, 0xa0f}, {0xf, 0x9, 0x4, 0x6, 0x401, 0x1bdb9fff}, {0xe8, 0x1, 0x6, 0x9, 0x4, 0x29a}, {0x78, 0x8, 0x0, 0x3, 0x5, 0x6}, {0x3, 0x400, 0xb, 0x7, 0x1, 0x6}, {0x3, 0x7ff, 0x6, 0x650, 0x7, 0x7}, {0x5a, 0xf83e, 0x8, 0xdc9, 0x401, 0x8}, {0x5, 0xfff, 0x7ff, 0x9, 0x4, 0x757}, {0x8, 0x7, 0x0, 0x7, 0xfffffffe, 0x80000000}, {0x3ff, 0xe, 0x80000001, 0x4, 0x8000, 0x4}, {0x0, 0x1ff, 0x0, 0x6, 0x7, 0x2}, {0x0, 0x1, 0xffffddb0, 0x2, 0x80, 0x9}, {0xfffffff7, 0xeb29, 0xfffffff7, 0x8, 0x10, 0x2}, {0x1000, 0x10001, 0x6, 0x8, 0x4, 0x6}, {0x48000000, 0x2, 0x10001, 0x6, 0x3, 0x7}, {0x1, 0x5, 0x2, 0x800, 0x3, 0xed}, {0x8, 0x2, 0x2, 0x8, 0x8000, 0x7}, {0x32, 0x4000, 0xfff, 0x5, 0xc1b7, 0xc0}, {0x0, 0xfffffffd, 0x1, 0x2, 0xfff, 0x7}, {0x5, 0x2, 0x9, 0x3e1, 0x7fff, 0x2}, {0x4, 0x9, 0xab, 0x4, 0x5d, 0xee}, {0x88, 0x8, 0x6, 0xffff7fff, 0xab5d, 0x9}, {0x3e9, 0x1, 0x54b2, 0xfffffffe, 0x5, 0x401}, {0x8001, 0x7f, 0x621f, 0xfffffff9, 0x7}, {0x60, 0x200, 0x40, 0x7, 0x9, 0x3}, {0xff, 0x4, 0xffffffff, 0x18000}, {0x57b, 0x1, 0xfffff000, 0xb7, 0x0, 0xa13}, {0xbf, 0x0, 0x80, 0x7, 0x9, 0x4}, {0x6, 0x5, 0x2, 0x7fff, 0x1, 0xff}, {0xffffff12, 0x3ff, 0x0, 0x400, 0xfffffffa, 0x4}, {0x3, 0x10, 0x200, 0x7fff, 0x9, 0x100}, {0x9, 0xb0, 0x8, 0x5c, 0x4, 0x400}, {0x2a90, 0x5, 0x7, 0x1, 0x6, 0x84}, {0x9, 0x7, 0xfffffff9, 0x4, 0xc, 0xc3}, {0x8000, 0xf484, 0x8, 0x4, 0x7, 0xfffffe01}, {0x8, 0x1, 0xe, 0x6, 0x9, 0x200}, {0x7, 0x8, 0x4, 0x0, 0x0, 0x5}, {0x3ff, 0x4, 0x4, 0x189, 0x1, 0x1}, {0x8, 0x31000000, 0x7, 0x101, 0x6, 0x9}, {0x2, 0x8, 0x81, 0x40, 0xffffffff, 0x6}, {0x3ff, 0x9, 0x80000001, 0x7f, 0x1, 0xf}, {0xa8d8, 0x4, 0x8, 0x17, 0xffff, 0x80}, {0x1, 0x5, 0x1ff, 0x80000001, 0x401, 0x2}, {0x10, 0xbe2, 0x7, 0x5, 0x101, 0x80000000}, {0x0, 0x7, 0x6, 0xffff9126, 0x3, 0x5b54}, {0x401, 0x7, 0x7, 0x1, 0x1, 0x7}, {0x1, 0xd24, 0xa0, 0x9, 0x1, 0xd}, {0x8, 0x7fffffff, 0x7f, 0x0, 0xe, 0x10001}, {0x7fffffff, 0x3ff, 0x4b0c8690, 0x2, 0x6, 0x8}, {0x6, 0x5, 0x5, 0x8, 0x8, 0xd67}, {0x0, 0x6, 0x4, 0xd867, 0x9, 0x3}, {0xfffff800, 0xfffffffc, 0x8, 0x80000000, 0x2, 0x66e}, {0x5, 0x400, 0x0, 0x6, 0x10001, 0x1}, {0x0, 0xd05, 0x31, 0x7, 0x7fffffff, 0x92}, {0xfffffffb, 0xad, 0x5, 0xffff, 0x2a0, 0x9}, {0x3, 0x5, 0x0, 0xb, 0xfffffffe, 0x9}, {0x1, 0x5, 0x8, 0x6, 0x7, 0xfffffffb}, {0x898, 0xef, 0xfa4d, 0x4, 0xfffffff4, 0x80}, {0x10001, 0x9, 0x90, 0x3, 0xfffffffe, 0xfffffffd}, {0x3, 0x1, 0x0, 0xb, 0x5}, {0x6, 0x7, 0x3, 0x8, 0xfffffff8, 0x80000000}, {0xc, 0x400, 0x7, 0x193, 0x7, 0xf3}, {0xfffffffb, 0xdc8, 0xa54, 0x9, 0xb, 0xe62d}, {0x8, 0x4, 0x5, 0x2, 0x3, 0x7}, {0x3, 0x5, 0xe2, 0x10000, 0x1, 0xff}, {0x2, 0x6, 0x10000, 0x9, 0x8}, {0x1, 0x10001, 0x80, 0xb00, 0x7fffffff, 0x1}, {0x7, 0x7, 0x8, 0x2, 0x1000000, 0x5}, {0x5, 0x2, 0x2c0, 0xffff, 0xc4e2, 0x10000}, {0x0, 0xd, 0x9, 0xf, 0x3, 0xd}, {0x4, 0x8, 0x4, 0xc, 0x100, 0x9}, {0x3, 0x7, 0x4, 0x7fff, 0xfffffff4, 0x1}, {0x7, 0x9, 0x5, 0x8, 0x3ff, 0x1d}, {0x101, 0x80000000, 0x56b6, 0x7, 0x0, 0x81}, {0x5, 0x0, 0x9, 0x6, 0x6, 0x10}, {0xfff, 0x5, 0xffffffa1, 0xa, 0x80000000, 0x9}, {0x0, 0x1e24, 0x3, 0xb5d, 0x6, 0xffff8358}, {0xfffffffd, 0xc7d, 0x0, 0x1, 0xf, 0x2b4}, {0x4a1167, 0x8001, 0xffff, 0x800, 0x2, 0x5}, {0xffff7fab, 0x9, 0x6, 0x0, 0x2, 0x10001}, {0x6, 0x5, 0x2, 0xfffffffc, 0xd9f7, 0x80}, {0x4, 0x7ff, 0x80000000, 0x101, 0x3, 0x1}, {0x3, 0x7f, 0x4, 0x4, 0x5, 0x8}, {0x7, 0xc452, 0x4, 0x4, 0x400, 0x200}, {0x10000, 0xfffffff1, 0x9, 0x3, 0x80, 0x2}, {0x1, 0x7, 0xa, 0x4, 0x0, 0x4}, {0xf, 0x2a13dfe9, 0x80, 0x2, 0xb}, {0x1c0c08ee, 0x0, 0x80000001, 0x4, 0x6, 0x9}, {0x7, 0x1, 0x7, 0x6, 0xf, 0x81}, {0x2, 0xfffffffb, 0x800, 0x2, 0x3, 0x3}, {0x80000001, 0x6, 0x3df, 0x5, 0x800000, 0x1}, {0x3, 0x63ec, 0x4, 0xffffffff, 0xf2c7, 0x6}, {0x80, 0x41d6f60b, 0x80000001, 0x7, 0x3, 0xfffff000}, {0x55c1, 0x6, 0x1ffc000, 0xd8400000, 0x6e, 0x74}, {0xa, 0x9, 0xa37, 0x0, 0x674, 0x4}, {0x4, 0x20000000, 0x0, 0x0, 0x7, 0x4}, {0x1000, 0x5, 0x1, 0x5, 0x7fffffff, 0x3}, {0x10001, 0xe82c, 0x5, 0x6, 0x1, 0x8}, {0x8001, 0x5cae, 0x5, 0x703, 0x800, 0x47c}, {0x1, 0x6, 0x6, 0x9, 0x40, 0x6}, {0x1, 0x5, 0x5, 0x7, 0x7, 0x4}, {0x5, 0xab, 0x598, 0xa4b, 0xfffffffe, 0xfffffffb}, {0x1, 0x7, 0x3, 0x9, 0x4, 0x3}, {0xffffff81, 0x9, 0x7173, 0x80000001, 0x9, 0x3}, {0x5, 0x3, 0x1, 0x6, 0x800, 0x8}, {0x3, 0x46d2, 0x1, 0xfffffffc, 0x0, 0x982}, {0x6, 0x1, 0x1, 0x6, 0x6, 0xe}, {0xa3, 0x7, 0x7fffffff, 0x4, 0x63e, 0xffffffff}, {0x8, 0x4, 0x3, 0x101, 0x3, 0xa}, {0x1, 0xe, 0x6, 0x2, 0x0, 0x5}, {0x4, 0x10001, 0x74c, 0x0, 0x66b78333, 0xf}, {0x3, 0x48, 0x1, 0x78adda55, 0x1}, {0x4, 0x2, 0x1000, 0x140e617, 0x6, 0x9}, {0x1000, 0x2, 0x4, 0xb1, 0x5, 0xffff}, {0x1, 0x30000, 0xfb, 0x1, 0x2, 0x3ff}, {0x8, 0x7, 0x2, 0x1, 0x3, 0x4}, {0x6edc, 0x6, 0x800, 0x9, 0x5, 0x10001}, {0x4, 0x563, 0x6dc, 0x9, 0x0, 0x5}, {0x8001, 0x5, 0x80000000, 0x1ff, 0x1, 0x1ff}, {0x4, 0x7, 0x9, 0x8, 0x2, 0xff}, {0x7, 0xa, 0xfffffff9, 0xaf1, 0x800, 0x3}], [{0x4}, {}, {0x3, 0x1}, {0x3, 0x1}, {0x6}, {0x0, 0x1}, {0x5}, {}, {0x4, 0x1}, {0x1}, {0x3}, {0x1, 0x1}, {0x1}, {0x2, 0x1}, {0x5, 0x1}, {0x1, 0x1}, {0x1}, {0x1, 0x1}, {}, {0x2}, {0x2, 0x1}, {0x4}, {0x1, 0x1}, {0x4}, {0x1}, {0x2, 0x1}, {0x2}, {0x3}, {0x3}, {0x4, 0x1}, {0x4, 0x1}, {0x3, 0x1}, {}, {0x2, 0x1}, {0x2}, {0x4}, {0x1, 0x1}, {0x4, 0x1}, {0x5, 0x1}, {0x0, 0x1}, {0x5}, {0x1, 0x1}, {0x1}, {0x2, 0x1}, {0x5, 0x1}, {0x1, 0x1}, {0x5, 0x1}, {0x2, 0x1}, {0x2}, {0x3}, {0x1}, {0x2, 0x1}, {0x0, 0x1}, {0x5, 0x1}, {0x2}, {0x5}, {}, {0x2}, {0x1, 0x1}, {0x4, 0x1}, {0x2, 0x536fad475d7d318c}, {0x4e407880e1e2c2ef}, {}, {0x3, 0x1}, {0x0, 0x1}, {0x1}, {0x4, 0x1}, {0x2}, {0x5, 0x1}, {0x3, 0x1}, {}, {0x3, 0x1}, {}, {0x2, 0x1}, {0x5}, {0x0, 0x1}, {0x1}, {0x1}, {0x2, 0x1}, {0x1}, {0x4}, {0x2}, {0x1}, {0x1}, {0x1, 0x1}, {0x5}, {0x2}, {0x4}, {0x4, 0x1}, {0x2}, {0x2, 0x1}, {0x5}, {0x1, 0x1}, {0x0, 0x1}, {}, {0x4, 0x1}, {0x3}, {0x0, 0x1}, {0x1}, {0x0, 0x1}, {}, {0x0, 0x1}, {0x2}, {}, {0x2, 0x1}, {0x4, 0x1}, {0x1}, {}, {0x1}, {0x4, 0x1}, {0x1, 0x1}, {0x1, 0x1}, {0x1}, {0x5}, {0x5}, {0x4, 0x1}, {0x2, 0x1}, {0x3, 0x1}, {0x2, 0x1}, {0x1}, {0x2, 0x1}, {0x5}, {0x0, 0x1}, {0x2, 0x1}, {0x4, 0x1}, {0x1}, {}, {0x2, 0x1}]}}]}, {0x6f, 0x6, "32d8bba553703e961b6fd89827540452c6c6b2cf7feefc11d5c0a4556efa41023ef08ea30733f51d59a1e891cc16f6e942538d0d99c52c101035e64a1c166ab6f7c6f08d7bf65d2218c41fb20917643560f3a7774980bd2d9ef131737eae6d416401c418943198c9a0855c"}, {0xc, 0x7, {0x0, 0x1}}, {0xc, 0x8, {0x0, 0x3}}}}, @m_csum={0x114, 0x17, 0x0, 0x0, {{0x9}, {0x58, 0x2, 0x0, 0x1, [@TCA_CSUM_PARMS={0x1c, 0x1, {{0x1, 0x7, 0xffffffffffffffff, 0xffff, 0x5}, 0x5f}}, @TCA_CSUM_PARMS={0x1c, 0x1, {{0x0, 0xa9, 0x8, 0x5, 0x1}, 0x25}}, @TCA_CSUM_PARMS={0x1c, 0x1, {{0x80000000, 0x4, 0x7, 0x0, 0x8}, 0x76}}]}, {0x94, 0x6, "9065ea8cc7c94ee0ab8c2b8ee0b1186d1d7ea119b93dc126b5f36835e5df06b64fc80cad7cd258c779b51064120e2cf65b4375a00e046dd2a43778d10ab0ebf747017223ab231d0ef5f598daeb2993c76f824806898ad045f087677d05aaf376565134c68a9b5109511a5938edb359d144ff159a9b1c5e8188cc659b40299c6a0e2ccbc26451725fe79529ec4c1ab2e4"}, {0xc, 0x7, {0x1}}, {0xc}}}, @m_pedit={0x1e80, 0x1f, 0x0, 0x0, {{0xa}, {0xe54, 0x2, 0x0, 0x1, [@TCA_PEDIT_PARMS_EX={0xe50, 0x4, {{{0x10000, 0x9, 0x1, 0x5, 0x7ff}, 0xf3, 0x3, [{0x24c, 0x4, 0x40cb516c, 0xe, 0x9, 0x24}, {0x80, 0x4, 0x130, 0xfffffc01, 0x4, 0x54a}]}, [{0x2, 0x8, 0x7, 0x200, 0x5, 0x3}, {0x8, 0x7, 0x7fff, 0x71, 0x10001, 0x3}, {0x9, 0x3, 0xfbe1, 0xfaa, 0x3ff, 0x8}, {0x8, 0x7fff, 0x7fff, 0x401, 0x2, 0xad38}, {0x0, 0x7ff, 0xdcc, 0xfff, 0x217, 0xff}, {0x6, 0x2, 0xd, 0x0, 0x7, 0x2}, {0xffffffba, 0x7f, 0x2, 0x2, 0x4, 0xb}, {0x3, 0x3, 0x5, 0x80000001, 0x4, 0x2}, {0x200, 0xa6d7, 0x0, 0xce, 0x2, 0x3}, {0x0, 0x873, 0x90f, 0x6, 0x4, 0x1}, {0x80, 0xf, 0x80, 0x3, 0x401f, 0x41}, {0x7, 0x1, 0x8, 0x484, 0x8, 0x45}, {0x8, 0x8, 0x800, 0x9, 0xdb, 0x2}, {0x1, 0x3, 0x6, 0x2, 0xe8, 0x5}, {0x80000001, 0x7, 0x5, 0x9a, 0x1, 0xab0}, {0x2, 0x6, 0xe604, 0xfffff004, 0x5, 0xff64}, {0x8, 0xffff, 0x0, 0x0, 0x9, 0x3}, {0x0, 0x3, 0x5, 0x80, 0x40, 0x4a}, {0x484, 0x4, 0x18, 0xb, 0xcda, 0x9}, {0xb, 0xff, 0x7, 0x5, 0x5, 0xf08d}, {0x1000, 0x8, 0x3, 0x3, 0x20000000, 0x81}, {0x6, 0x8, 0x2, 0x7, 0x4, 0x8000}, {0x2, 0x2, 0x2, 0x9, 0x5, 0x5}, {0xfff, 0x5, 0x3c00, 0xfff, 0x5, 0x3}, {0x0, 0xc03, 0x7, 0x5585, 0x4, 0x7}, {0x8, 0x95f, 0x200, 0x3fa9354c}, {0x3, 0x4, 0x4000000, 0x6, 0x47bb, 0xff}, {0xfffffc30, 0x6, 0x8, 0xba4b, 0x2, 0x4}, {0x4, 0x9, 0x1, 0xa00000, 0x7fff, 0x2}, {0x4, 0x6, 0x2a652e8c, 0x5, 0x7f, 0x2}, {0x1, 0xb, 0x8, 0x10000, 0x8, 0x1}, {0x7, 0x2ac, 0x8, 0x2, 0x1, 0x7fffffff}, {0x1000, 0x0, 0x9, 0x4, 0x2, 0x9}, {0x9, 0xfffffffa, 0xff, 0x0, 0x4, 0x3}, {0x6, 0x4, 0x4, 0x40000002, 0x9, 0x7}, {0x3, 0x7, 0x7, 0x2, 0x10, 0x2}, {0x1, 0xa0000, 0x3, 0x59, 0x2, 0xd}, {0x3, 0x6, 0x3, 0x1, 0xc32, 0x7}, {0x400, 0x6addc873, 0x2, 0x8, 0x1, 0xff}, {0xffff0000, 0x6, 0xffffffff, 0x9f, 0x9, 0x6}, {0x5, 0x9, 0x6, 0xffffffbe, 0x3, 0x9}, {0xfffeffff, 0x4, 0xfffffffe, 0x8000, 0xbfc, 0x3}, {0x1, 0xcd63, 0x3ff, 0x8, 0x2}, {0x6, 0x0, 0x4, 0x0, 0x6, 0x2}, {0xb5d2, 0x6, 0x6, 0x10, 0x3}, {0x10000, 0x4, 0x1, 0x8, 0xa, 0xffff}, {0xd9d, 0xb43, 0x40000, 0x7, 0x0, 0x1}, {0x0, 0xc6b, 0x3, 0xe, 0xb60, 0x2}, {0xe68, 0x7, 0x1000, 0xffffff7f, 0x5, 0x3}, {0x9fc, 0x9, 0x5, 0xfffffffe, 0x80000001, 0x5}, {0x200, 0xfffffffb, 0x2cd, 0x2, 0xff, 0x1}, {0x5, 0x9, 0x0, 0x1, 0x200, 0x5}, {0x1e, 0x3f, 0x0, 0x7, 0x2, 0x3ff}, {0x4, 0x3, 0x0, 0x8001, 0xffffff1b}, {0x2, 0xf75, 0xfffffffa, 0xfff, 0x7f, 0xac}, {0x2fcef3cf, 0x6, 0x6, 0xf9, 0x8, 0x1}, {0x4, 0x5, 0x0, 0xbf, 0x7fff, 0x5}, {0xa6, 0x2, 0x9, 0x9, 0x200, 0x2}, {0x11, 0x6, 0xd, 0x2, 0x7, 0x8}, {0x9, 0x2, 0x1, 0x1, 0x9, 0x2}, {0xffffffc9, 0x1, 0x4, 0x4, 0x200, 0x7}, {0x80000000, 0x1, 0x7, 0x2, 0x2, 0x9}, {0x8, 0x7fffffff, 0x40, 0xfffffff7, 0x0, 0x8}, {0x3, 0x1, 0x6, 0x8, 0x5, 0x6}, {0x8, 0x9, 0x2, 0x5, 0x57e, 0x9}, {0x9d, 0xf7e7, 0x8, 0x5, 0x9, 0x1}, {0x5, 0xf5d, 0x2, 0x800, 0x0, 0x4}, {0x0, 0xe, 0x8, 0x4, 0x81, 0x7}, {0x359, 0xfffffffa, 0x0, 0x0, 0x9, 0x1000}, {0xd49, 0x757, 0x0, 0xf, 0x3, 0xfffffff5}, {0x2, 0x40, 0x8, 0x200, 0x11800, 0x4}, {0x5, 0xc9c, 0x81, 0x3ff, 0x5, 0xd}, {0x1000, 0xc301, 0x2, 0xffffff3c, 0x401, 0x2}, {0x10, 0x7, 0x0, 0x9, 0x6, 0x6}, {0x8, 0x1, 0x7, 0x3, 0x7, 0x100}, {0x100, 0x229c, 0x1, 0xc, 0x3, 0x8}, {0x9, 0x1a1, 0x3, 0xd, 0x64f2, 0x2}, {0xc, 0x200, 0x101, 0x0, 0x8, 0x5}, {0x6, 0x4, 0x9, 0x9, 0x9, 0xe1}, {0x3, 0x3, 0x401, 0xd, 0x8, 0x6}, {0x6, 0x8000, 0x7, 0x2, 0x0, 0x5}, {0x3, 0x9, 0x8, 0x270, 0x2, 0x4}, {0x9, 0x3, 0x7, 0x9, 0xfffffff8, 0x8b8}, {0x3cda, 0x1ff, 0x37d9, 0x0, 0x9, 0xc92}, {0x5, 0x1, 0x4, 0x5, 0x3ef44218, 0x5}, {0x6, 0x6, 0x6e21, 0x8, 0x3}, {0x7, 0x5, 0x8, 0x1, 0x4, 0x6}, {0x8, 0x6, 0x9, 0x1, 0x4}, {0x9, 0x5, 0x80, 0x8, 0x91, 0x5}, {0x80, 0x4, 0x101, 0x48f35eac, 0x2, 0x7f}, {0x10000, 0x9, 0x8, 0x99, 0x7, 0x1}, {0xbe26, 0x6, 0x3ff, 0x6, 0xd, 0x4d}, {0xffff02c2, 0x404c, 0xa, 0x221, 0x4, 0x8001}, {0x8, 0x2de4, 0x3, 0x200, 0xffffffff, 0x3}, {0xfff, 0x8a9, 0x3, 0x2, 0x8001, 0x8}, {0x0, 0x400, 0x5, 0x21b, 0x1, 0x2}, {0x9, 0xfffffffb, 0x7, 0x0, 0x4, 0x10000}, {0xfff, 0x2, 0x1, 0x1, 0x6, 0x5}, {0x9, 0xfff, 0x6, 0x7ff, 0x6}, {0x7, 0x2, 0x6c3, 0x3, 0x1, 0x81}, {0x3, 0x9, 0x7fffffff, 0x0, 0x8e, 0x3}, {0xa, 0x200, 0x1, 0x8, 0x0, 0x77}, {0x9, 0x3, 0x55, 0x5, 0x1, 0xfffffffe}, {0x4, 0xd, 0x8, 0xb6, 0x3, 0x6}, {0x2, 0x9, 0xc71, 0x9, 0x10001, 0x8}, {0x0, 0x1000, 0x5, 0x101, 0x8000, 0x1}, {0xfffffffa, 0x6, 0x1, 0x6, 0x4, 0x4}, {0x7ff, 0x7fffffff, 0xb, 0xff, 0x1}, {0x7fffffff, 0x2, 0x80000000, 0x6, 0x4, 0xff}, {0x2, 0x8796, 0x3, 0x1, 0x3, 0x400}, {0x7, 0x1, 0x2, 0x2, 0x5, 0x100}, {0x2, 0x9, 0x7, 0x1, 0x80, 0x60d}, {0x2, 0x8, 0x7, 0x7, 0x3, 0x9}, {0x3, 0x2, 0x1, 0x2, 0x7, 0xd}, {0x3ff, 0xd, 0x1000, 0x7, 0x0, 0x101}, {0x8, 0x1, 0x23261295, 0x10000, 0x5, 0x380}, {0x1000, 0x6, 0x8, 0x9ab, 0x1, 0x3}, {0x2, 0x9, 0x0, 0x7fff, 0x371, 0xc}, {0x4, 0xffffffff, 0x9, 0x2, 0x4, 0x7}, {0x8, 0x1, 0xf, 0x80000001, 0xfffffffc, 0x4}, {0x6, 0x6, 0x0, 0x8, 0x4, 0xcd0}, {0x8, 0x7fff, 0xa7e, 0x7, 0x7, 0x7fff}, {0x200000, 0x101, 0x2, 0x1, 0x70256e93, 0x2}, {0x80000000, 0x87, 0x7fffffff, 0x3, 0xfffffffa}, {0x7f, 0xf, 0xe, 0x7c3, 0x10000, 0x9}, {0x3, 0x7, 0xc55d, 0xa558, 0x3, 0x9}, {0x47d, 0x8001, 0x2, 0x8000, 0x5, 0x80}, {0x7, 0x8, 0x6, 0x24, 0xb76, 0x3}], [{0x0, 0x1}, {0x2, 0x1}, {0x3}, {0x1, 0x1}, {0x4}, {0x4, 0x1}, {0x4, 0x1}, {0x2, 0x1}, {0x3, 0x1}, {0x3, 0x1}, {0x2, 0x1}, {0x4}, {0x3}, {0x4}, {0x0, 0x1}, {}, {0x1, 0x1}, {0x4, 0x1}, {0x3}, {}, {0x3, 0x1}, {0x2, 0x1}, {0x5, 0x1}, {0x2, 0x1}, {0x3, 0x1}, {0x5}, {0x4}, {0x2, 0x1}, {}, {0x0, 0x1}, {0x5}, {0x2, 0x1}, {0x4, 0x1}, {0x5, 0x1}, {0x1}, {0x2}, {0x1}, {0x4}, {0xbd9f29bd3d7146b}, {}, {0x3}, {0x1, 0x1}, {0x3, 0x1}, {0x2, 0x1}, {0x1, 0x1e1a2452b1e43373}, {0x3, 0x1}, {}, {0x1}, {0x1, 0x1}, {0x0, 0x1}, {0x4}, {0x0, 0x1}, {0x1, 0x1}, {0x2, 0x1}, {0x1}, {0x2}, {0x4, 0x1}, {0x1, 0x1}, {0x2}, {0x2, 0x1}, {0x2, 0x1}, {0x1}, {0x5, 0x1}, {0x2}, {0x3, 0x1}, {}, {0x5, 0x1}, {0x5}, {0x5, 0x1}, {0x1, 0x1}, {0x5, 0x1}, {0x2, 0x1}, {0x1, 0x1}, {0x4}, {0x4, 0x1}, {0x0, 0x1}, {0x1}, {0x5}, {}, {0x2, 0x1}, {0x2}, {0x4, 0x1}, {0x0, 0x1}, {0x0, 0x1}, {0x1}, {0x1, 0x1}, {0x2}, {0x5, 0x1}, {0x1, 0x1}, {0x1}, {}, {0x4, 0x1}, {0x4}, {0x2, 0x1}, {}, {0x3}, {0x4, 0x1}, {0x5, 0x1}, {0x3}, {0x4, 0x1}, {0x5, 0x1}, {0x1}, {0x2, 0x1}, {0x3, 0x1}, {0x5}, {0x1, 0x1}, {0x2, 0x1}, {0x1, 0x1}, {0x2}, {0x5, 0x1}, {0x3, 0x1}, {0x1}, {0x0, 0x1}, {}, {0x4}, {0x4, 0x1}, {0xd}, {0x4, 0x1}, {0x2}, {0x4}, {0x0, 0x1}, {0x4, 0x1}, {0x1}, {0x3, 0x1}, {0x5, 0x1}, {}, {0x2}, {0x3, 0x1}]}}]}, {0x1004, 0x6, "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"}, {0xc, 0x7, {0x0, 0x1}}, {0xc, 0x8, {0x3, 0x5}}}}, @m_gact={0xe8, 0x12, 0x0, 0x0, {{0x9}, {0x1c, 0x2, 0x0, 0x1, [@TCA_GACT_PROB={0xc, 0x3, {0x1, 0xeb1, 0x2}}, @TCA_GACT_PROB={0xc, 0x3, {0x1, 0x542, 0x8}}]}, {0xa2, 0x6, "079a1560bf222b8fb08cc78af9edd86cd21a32ec9725f6866bc5356a17e81512c37b1e6d6ac56421678d2d3c1a00582424e50a015779d37c291f57b480d1f43d51fed95311bb6d6ad11d6a5d5b110ac2c6fd542388b3302ae1d3e69862b882aeb0dbada3703dffc6d974f52413b2dcee07a8bdade55696631f37f8d0ab976ba385de882b26a5685a8033cac5ace2da62ad5e3f83108fa039178ae9fcd444"}, {0xc}, {0xc, 0x8, {0x3, 0x2}}}}, @m_skbedit={0x174, 0x1a, 0x0, 0x0, {{0xc}, {0x6c, 0x2, 0x0, 0x1, [@TCA_SKBEDIT_PRIORITY={0x8, 0x3, {0x4}}, @TCA_SKBEDIT_PARMS={0x18, 0x2, {0x0, 0xffff, 0xffffffffffffffff, 0x7fffffff, 0x2}}, @TCA_SKBEDIT_PTYPE={0x6}, @TCA_SKBEDIT_PARMS={0x18, 0x2, {0x470, 0x9, 0x1, 0x163}}, @TCA_SKBEDIT_PTYPE={0x6, 0x7, 0x7}, @TCA_SKBEDIT_MARK={0x8}, @TCA_SKBEDIT_MARK={0x8, 0x5, 0x2}, @TCA_SKBEDIT_PRIORITY={0x8, 0x3, {0x0, 0xffff}}, @TCA_SKBEDIT_MARK={0x8, 0x5, 0x9}]}, {0xe0, 0x6, "c2683c690c9e4ebc551a5ffe37ad011a1cfb7d8323f4cdbe2cff7695c1c22cfe7eb746bebed9d304f8388c7565e6d17d65dca79affe603c94e89295c57e6d60237621574e342d47a7735ea0fbb9b761aca0d22e85df01cce3381618f29bde20a645a4a1f8c24820a369103c35f703c2cd1a5491744a02645f468dfaa7941b8e439ab92deb01b59f56af6d4b7189319fbe1482bbbe51d2bd65116ac0cd5ba14280817d138b265c2873ceb38ab084a07882d20005a4265e752fcfa9edbaefb7731abaeaa4c03dddcf70179085c37d6e7b3d5a1f31bcbf8e320c870b5f2"}, {0xc}, {0xc, 0x8, {0x3, 0x2}}}}, @m_simple={0x140, 0x3, 0x0, 0x0, {{0xb}, {0x64, 0x2, 0x0, 0x1, [@TCA_DEF_DATA={0xb, 0x3, 'skbmod\x00'}, @TCA_DEF_DATA={0x7, 0x3, '$[\x00'}, @TCA_DEF_PARMS={0x18, 0x2, {0x28, 0x2f3, 0x5b0378c91a682c33, 0xc, 0x3}}, @TCA_DEF_PARMS={0x18, 0x2, {0xfffffffd, 0x1, 0x1, 0x1, 0x73b13e19}}, @TCA_DEF_DATA={0x5, 0x3, '\x00'}, @TCA_DEF_DATA={0x8, 0x3, 'raw\x00'}, @TCA_DEF_DATA={0xc, 0x3, 'RATEEST\x00'}]}, {0xb4, 0x6, "3bbc2f1cd497742a289f6fc7cbae4ee912753fee9bbe9c59f01d332ce895a30d5ea015685d0df43b21ec6f0ed6f9cdfba2fa2c20dabfbb0da1a1a6f107eef1d3d0e1ec6fdfe11a742880be7f7204c825aa708889fa498b5ea70595ab1702ad7440d0bd6bc79116d89eb5b4464a82df63963c6c3cd2acd644e996197a3fbf3d65cf15a6088b9fe1a44f3744eb3f51f8966ec6f0e0683c414d8f0c138f2afe464182828de3d02d461b90d3c5cb372f0c91"}, {0xc, 0x7, {0x0, 0x1}}, {0xc, 0x8, {0x0, 0x2}}}}, @m_tunnel_key={0x108, 0x1d, 0x0, 0x0, {{0xf}, {0x14, 0x2, 0x0, 0x1, [@TCA_TUNNEL_KEY_ENC_IPV4_SRC={0x8, 0x3, @remote}, @TCA_TUNNEL_KEY_ENC_IPV4_SRC={0x8, 0x3, @empty}]}, {0xc8, 0x6, "fb1fbc828d33d951bafee642858dc5a82ff271f9b9acb096ee0f801e7894ce7902a554b43829fc35bb00ab49e03ce3b7ba4906401daee190883f8597815e98f3061d1b63e583a7a18b1170e8a90c21d45902ba4fced0c995be81bf4be8b9c86813d30f7dd1604efe0fdfa2eec4da637460a6c78a6c04ef341f00c2fe703dfe79f193669f6de42e1cd26fb3f71ee5f1c76b0c10dfc38130c39cf5615dda91e5d34d69f8825c3209e871c9813c81d99063a9a76b7f24fe876d39b6df47828351f3712e0ee4"}, {0xc}, {0xc, 0x8, {0x2, 0x1}}}}]}]}, 0x3450}, 0x1, 0x0, 0x0, 0x80}, 0x40010) r10 = socket$inet6(0xa, 0x3, 0x5) setsockopt$IP6T_SO_SET_REPLACE(r10, 0x29, 0x40, &(0x7f0000000340)=@raw={'raw\x00', 0x3c1, 0x1a6cc7, 0x2a8, 0x0, 0x5802, 0x294, 0xf0, 0x294, 0xf0, 0x378, 0x378, 0x1d8, 0x378, 0x3, 0x0, {[{{@uncond, 0x0, 0xa8, 0xf0, 0x52020000}, @unspec=@CT0={0x48, 'CT\x00', 0x0, {0x0, 0x0, 0x0, 0x0, 'netbios-ns\x00', {0x3}}}}, {{@ipv6={@private2, @local, [0x0, 0xffffff, 0xff, 0xff000000], [0x0, 0xffffff00, 0xff, 0xff000000], 'pimreg1\x00', 'wlan0\x00', {}, {0xff}, 0x0, 0x7, 0x0, 0x8}, 0x0, 0xa8, 0xe8}, @common=@unspec=@RATEEST={0x40, 'RATEEST\x00', 0x0, {'syz0\x00', 0x9, 0x3, {0xffffffffffffffff}}}}], {{'\x00', 0x0, 0xa8, 0xd0}, {0x28}}}}, 0x308) r11 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r12 = syz_genetlink_get_family_id$nfc(&(0x7f0000000300), r11) ioctl$IOCTL_GET_NCIDEV_IDX(r0, 0x0, &(0x7f00000000c0)=0x0) sendmsg$NFC_CMD_DEV_UP(r11, &(0x7f0000000200)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000d80)=ANY=[@ANYBLOB="1c000000", @ANYRES16=r12, @ANYBLOB="010426bd7000f8dbdf250200000008000100", @ANYRES32=r13], 0x1c}}, 0x4008054) write$nci(r0, &(0x7f0000000240)=ANY=[@ANYBLOB='p\x00\t'], 0xc) 6.66448624s ago: executing program 1 (id=14464): socketpair$tipc(0x1e, 0x1, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$FITHAW(r0, 0xc0045878) r1 = epoll_create(0x1) r2 = socket$inet(0x2, 0x3, 0x6) ioctl$sock_ipv4_tunnel_SIOCADDTUNNEL(r2, 0x89f1, &(0x7f0000001040)={'gre0\x00', &(0x7f0000000380)={'syztnl2\x00', 0x0, 0x2100, 0x80, 0x3, 0x0, {{0x5, 0x4, 0x0, 0x9, 0x14, 0x68, 0x0, 0x0, 0x2f, 0x0, @initdev={0xac, 0x1e, 0x5, 0x0}, @initdev={0xac, 0x1e, 0xfe, 0x0}}}}}) mmap(&(0x7f0000001000/0xc00000)=nil, 0xc00000, 0x0, 0x3032, 0xffffffffffffffff, 0x0) r4 = socket$can_bcm(0x1d, 0x2, 0x2) socket$nl_route(0x10, 0x3, 0x0) r5 = socket(0x15, 0x5, 0x0) mmap(&(0x7f0000000000/0xfbe000)=nil, 0xfbe000, 0x2, 0x31, 0xffffffffffffffff, 0x0) r6 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='memory.events\x00', 0x275a, 0x0) write$cgroup_pid(r6, &(0x7f00000004c0), 0x12) mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x2000001, 0x12, r6, 0x0) getsockopt(r5, 0x200000000114, 0x2710, &(0x7f0000c35fff)=""/1, &(0x7f0000000000)=0xf002) mmap$xdp(&(0x7f0000800000/0x800000)=nil, 0x800000, 0x6000008, 0x6e071, 0xffffffffffffffff, 0x80000000) connect$can_bcm(r4, &(0x7f00000002c0), 0x10) readv(r4, 0x0, 0x0) sendmsg$can_bcm(r4, &(0x7f0000000380)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000080)=ANY=[@ANYRES64=0x0, @ANYRES64=r4], 0x80}}, 0x0) ioctl$sock_ipv4_tunnel_SIOCCHGTUNNEL(r2, 0x89f3, &(0x7f0000000300)={'syztnl2\x00', &(0x7f0000000000)={'tunl0\x00', r3, 0x20, 0x40, 0xb0, 0x1, {{0x5, 0x4, 0x2, 0x6, 0x14, 0x5f, 0x0, 0xf9, 0x2f, 0x0, @local, @dev={0xac, 0x14, 0x14, 0x39}}}}}) epoll_ctl$EPOLL_CTL_ADD(r1, 0x1, r0, 0x0) r7 = socket$inet6_sctp(0xa, 0x1, 0x84) r8 = bpf$MAP_CREATE(0x0, 0x0, 0x48) bpf$MAP_GET_NEXT_KEY(0x4, &(0x7f0000000180)={r8, 0x0, 0x0}, 0x20) connect$pptp(r6, &(0x7f0000000280)={0x18, 0x2, {0x3, @rand_addr=0x64010100}}, 0x1e) r9 = openat$tun(0xffffffffffffff9c, &(0x7f0000000040), 0x400, 0x0) ioctl$SIOCSIFHWADDR(r9, 0x8924, &(0x7f00000000c0)={'pim6reg1\x00', @random="23e38dcc2d9a"}) bpf$MAP_GET_NEXT_KEY(0x4, &(0x7f0000003b80)={r8, &(0x7f0000000540)="ebd4d29bd5ba394b6fc9cd8fa4a860190c00751e56aba9de406b6b22b36351e31dffc60cd8770dadac52c548be03e5e76af1672ef2285e407666278429a9bd4381024e4d2cf18ce17d6c6e0bc550d7c056ab163492863cc5901daab14bd4aac8dcf1fb3a27a59baa6643ecd35ee0f1cf6017f397a3d6b18ffa73a8eb45043bc56773cbad78c3f6356987ec4eb871cbc1256f0b260ba497a2", 0x0}, 0x20) setsockopt$inet_sctp6_SCTP_SOCKOPT_BINDX_ADD(r7, 0x84, 0x64, &(0x7f0000000080)=[@in={0x2, 0x4e20, @empty}], 0x10) getsockopt$inet_sctp6_SCTP_STATUS(r7, 0x84, 0xe, &(0x7f0000000140)={0x0, 0x718, 0x4, 0x0, 0xb, 0x9, 0x1, 0x0, {0x0, @in6={{0xa, 0x4e23, 0x10, @local, 0x8000}}, 0xffffffff, 0x7ff, 0x40, 0x8, 0x7}}, &(0x7f0000000200)=0xb0) sendmsg$tipc(r0, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000200)}, 0x0) 6.167866466s ago: executing program 1 (id=14467): r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000080)=@newlink={0x3c, 0x10, 0x403, 0x0, 0x0, {0x0, 0x0, 0x0, 0x0, 0x22c20}, [@IFLA_LINKINFO={0x1c, 0x12, 0x0, 0x1, @erspan={{0xb}, {0xc, 0x2, 0x0, 0x1, [@IFLA_GRE_IFLAGS={0x6, 0x2, 0x1f}]}}}]}, 0x3c}}, 0x0) pipe(&(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) r2 = syz_genetlink_get_family_id$nl80211(&(0x7f00000000c0), 0xffffffffffffffff) sendmsg$NL80211_CMD_SET_REG(r1, &(0x7f00000001c0)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x8000}, 0xc, &(0x7f0000000180)={&(0x7f0000000100)={0x34, r2, 0x400, 0x70bd25, 0x25dfdbfb, {}, [@NL80211_ATTR_WIPHY={0x8, 0x1, 0x48}, @NL80211_ATTR_REG_ALPHA2={0x7, 0x21, 'bb\x00'}, @NL80211_ATTR_REG_ALPHA2={0x6, 0x21, 'b\x00'}, @NL80211_ATTR_USER_REG_HINT_TYPE={0x8, 0x9a, 0x1}]}, 0x34}, 0x1, 0x0, 0x0, 0x40000}, 0x24008040) 4.588513637s ago: executing program 0 (id=14477): bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000085000000750000001801000020646c2500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000000e00000095"], 0x0, 0xfffffffe, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0}, 0x94) pipe(&(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) pipe(&(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) tee(r0, r3, 0x100000af5, 0x0) bpf$PROG_LOAD(0x5, &(0x7f0000000240)={0x11, 0x5, &(0x7f0000000180)=ANY=[@ANYBLOB="1809000000ffffff00000000000000008510000002000000850000000f0000009500000000000000", @ANYRESHEX=r2, @ANYRESDEC, @ANYRES16=r1, @ANYRESOCT=r2], 0x0, 0xfffffdff, 0x0, 0x0, 0x727c45cd4283345, 0x0, '\x00', 0x0, @fallback=0x13, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r4 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_tcp_int(r4, 0x6, 0x13, &(0x7f0000000040)=0x100000001, 0x4) setsockopt$inet6_tcp_TCP_REPAIR_QUEUE(r4, 0x6, 0x14, &(0x7f0000000280)=0x1, 0x4) connect$inet6(r4, &(0x7f0000000080)={0xa, 0x0, 0x0, @ipv4={'\x00', '\xff\xff', @remote}}, 0x1c) sendmmsg$inet6(r4, &(0x7f0000007740)=[{{0x0, 0x0, &(0x7f0000000740)=[{&(0x7f00000003c0)="db1f00d608989c53f4aee0b60e8ce7ef2b9f1c88972e370a33fd463bf2f11fa395382b7fa6a582b644b9190efdc12b27434cebbd8c37822900b432a1e9406c745c08237bbbf0a589400e931e288c7020eb8d2ac516", 0x55}, {&(0x7f0000000440)="549cac65e6786ad82a84515185600984f451080ebf5df00f474514b2d6f77277295a8b6e020f44e167a9e8296e2bd665360c725ba570d62abd2c6e976c50c5d5d70f9644b99d60a49ded049ed05cbc9fcef9850c10d903bd0c7be81c9da8f2f547b7be0c65b65f18424e3030e207f7062b3530c1fd62038aa5e4ae52261efd4dd014f68ce709c79de5115551c8133a4043cdf88674ca2b5b4ff27c660fd294ac24f21432cb097b77b83792ea3b79aaebc682ea19894166727f5c187c3e08ba05b7306306accad133037d2ed2f0127e092d75f42a7b73d891e3dc184b", 0xdc}, {&(0x7f0000000640)="570c4e5b7827c2d241bedf3f5447169c3f2943fcbc1f47dfc22c0944e8f99f937677ce58575bfae935623fa9cb59045a49badcf8df0133473ccf852267a68bb2cad431f3d72665d216a1052ca37f26de2bffd89fbd871e69666af4194eee95df1698966092f11da0216222ab81b206053bbbc4ad9c83b0d1f183c43ceac2d2cbbfda4be7a23886d48ae081f83c720cf495f88d422cfe16b190250325f0d156a2dc26bdb3702c925ff58b2dbce7f77d8d85c61fcc4c03f47aebc55612c36dcb707f420d89d4fce018a8d61bd159c838df19898cb1c0dcfe6f24d9581d7ce282252a55e831d2", 0xe5}], 0x3}}, {{0x0, 0x0, &(0x7f0000003580)=[{&(0x7f0000002380)="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", 0xdea}], 0x1}}], 0x2, 0x8800) mmap(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x0, 0x12, r4, 0x604ab000) getsockopt$inet6_tcp_TCP_ZEROCOPY_RECEIVE(r4, 0x6, 0x23, &(0x7f0000000140)={&(0x7f0000ffc000/0x1000)=nil, 0xc80, 0x0, 0x0, 0x0, &(0x7f0000001380)=""/4080, 0xfffffffffffffdcc, 0x0, 0x0, 0xffffffffffffff87}, &(0x7f0000000000)=0x40) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x16, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000080)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @flow_dissector, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) 3.658773223s ago: executing program 1 (id=14478): r0 = socket$netlink(0x10, 0x3, 0x0) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000001c0)={0x1f, 0x13, &(0x7f0000000580)=ANY=[@ANYBLOB="18000000000000000000000000000000180100002075682500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b7030000010400008500000004000000180100002020642500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b70300000000000085000000b000000095"], &(0x7f0000000300)='syzkaller\x00', 0x0, 0x0, 0x0, 0x41100, 0x11}, 0x94) r1 = socket$nl_generic(0x10, 0x3, 0x10) r2 = syz_genetlink_get_family_id$tipc2(&(0x7f00000005c0), 0xffffffffffffffff) sendmsg$TIPC_NL_LINK_SET(r1, &(0x7f0000000540)={0x0, 0x0, &(0x7f0000000340)={&(0x7f0000000380)={0x38, r2, 0x601, 0x0, 0x0, {}, [@TIPC_NLA_LINK={0x24, 0x4, 0x0, 0x1, [@TIPC_NLA_LINK_NAME={0x13, 0x1, 'broadcast-link\x00'}, @TIPC_NLA_LINK_PROP={0x13, 0x7, 0x0, 0x1, [@TIPC_NLA_PROP_PRIO={0x8, 0x5}]}]}]}, 0x38}}, 0x0) sendmsg$nl_route(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000000)=ANY=[@ANYBLOB="6c00000010001fff000000000100000000000000", @ANYRES32=0x0, @ANYBLOB="00000000000000004c0012800b00010069703667726500003c00028004001200060003001800000008000d000d000000050008000000000014000700ff0a0000000000000000000000000001060018000b0000009fcca25b39"], 0x6c}, 0x1, 0x0, 0x0, 0x40000}, 0x0) r3 = socket$nl_generic(0x10, 0x3, 0x10) r4 = socket$nl_generic(0x10, 0x3, 0x10) r5 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000080), 0xffffffffffffffff) sendmsg$NL80211_CMD_RELOAD_REGDB(r4, &(0x7f00000006c0)={0x0, 0x0, &(0x7f0000000440)={&(0x7f0000000340)={0x14, r5, 0x1, 0x70bd2d, 0x25dfdbfe}, 0x14}, 0x1, 0x0, 0x0, 0x20000000}, 0x20008004) sendmsg$NL80211_CMD_ADD_NAN_FUNCTION(r3, &(0x7f0000000c40)={&(0x7f0000000080)={0x10, 0x0, 0x0, 0x200000}, 0xc, &(0x7f0000000c00)={&(0x7f0000000600)={0x51c, r5, 0x200, 0x70bd2d, 0x25dfdbfc, {{}, {@void, @void}}, [@NL80211_ATTR_NAN_FUNC={0x10, 0xf0, 0x0, 0x1, [@NL80211_NAN_FUNC_CLOSE_RANGE={0x4}, @NL80211_NAN_FUNC_FOLLOW_UP_ID={0x5, 0x6, 0x6}]}, @NL80211_ATTR_NAN_FUNC={0xc, 0xf0, 0x0, 0x1, [@NL80211_NAN_FUNC_PUBLISH_BCAST={0x4}, @NL80211_NAN_FUNC_TX_MATCH_FILTER={0x4}]}, @NL80211_ATTR_NAN_FUNC={0x370, 0xf0, 0x0, 0x1, [@NL80211_NAN_FUNC_TX_MATCH_FILTER={0x31c, 0xe, 0x0, 0x1, [{0x4a, 0x0, "6d80786253dbe40e81d643059eaefe0c0ffdc42ab6f0f98b2788188c6a3f6776c952ed3333675138cb4551fe31f172c2c3d901fad96d05543ef8d4952396df45f3ee5a62de7e"}, {0x5a, 0x0, "fbff2f0d23acb4f1555de1778178a11709498487ac29dac90018f712827e877ed8cc14c8f1bfe9707bab117aa9cc53c42d5614300b1a3adfbfe148c5b813facdebfd67a7425c080b13c9865a241ecdd3d90769147588"}, {0xc3, 0x0, "2a86fd03dcff56e81384a06164f0acdde96c860537dc515bc4d9a6bbc769619d004f974451365abf6aad85518e6f31ed680b8832cc3839b859c4c665a4bc45b85658ea951f097d853c4a7d07fd5541ba731981768e218d25a27bbfa083643967a870bb82c24602dfc380a51a43d0b91f99a24d503656e2f231d426189e67fd78c7dc2eb7bf0a02a6133bb62af88e306f92de6db8105e178be2d77759a7ab60fd82a4e16a8a049e3880c641cb185ffa064da539b80f5829475184b91e6eaeae"}, {0xa0, 0x0, "f40790e0924a45a602ebfe82d2b5e505964ea89be4538d91c4e4f6f92767515ac8f94dd51d365c1e567940eb785b9266a8e67a45b3ae0f0ab6f9e62a135d3777b277c62b767d6f2520fe98fda4c7bf61bf6fa82ec40b5222819862d0c7c35a7f20a2e39c9189b5bcff6879c070bde3ab465af902de5219894195aee1f5c919b2db7e7b12473eeddc673fc4d4d6f88af57eeafcfabc104a9d2eb70f3f"}, {0xa7, 0x0, "7857c8721d2079df2d6473f185bf02a4541be043f4a00e4fb95c1b38641c19d6472706ec408d6a793edcbdfe594c21b2fa5c406f1c785da744345ce4fe3560f6587109e522b0e4b9dcf7f6dbfb5165caf66fde7eee46ba2d6c3bdf14cf7c7dbeae07285460827e48249ea86cea4767295f47f7565c9d32da36534fbb9dfa3703c8401a5ea72d8e8c9d52fc4e666026f0eb8f2c1b1125b78135f736465d54e862a71588"}, {0x64, 0x0, "14da5dac8cff4f81fcfc4ed79f58392538f5ab7f224e3e398c84712083f5c39e2daadc7994171fac77b713a8abc3947be1b03e7883b7b09744c1a0443a5b259c0a1c09051496ed8be2e78f88cff061b55dfeef5bd3fc66f4d4d20f7f5d71af8e"}]}, @NL80211_NAN_FUNC_RX_MATCH_FILTER={0x8, 0xd, 0x0, 0x1, [{0x4}]}, @NL80211_NAN_FUNC_SERVICE_ID={0xa, 0x2, "80c9e21bff33"}, @NL80211_NAN_FUNC_PUBLISH_BCAST={0x4}, @NL80211_NAN_FUNC_TYPE={0x5, 0x1, 0x1}, @NL80211_NAN_FUNC_SERVICE_INFO={0x2b, 0xb, "bff63315e8ee6b2b2f80998bec2475b3e9ffa8766675c481837d1485a5c33448f243a066977d13"}, @NL80211_NAN_FUNC_CLOSE_RANGE={0x4}]}, @NL80211_ATTR_NAN_FUNC={0x17c, 0xf0, 0x0, 0x1, [@NL80211_NAN_FUNC_SERVICE_INFO={0xa5, 0xb, "38fc7a7920e6469d66849aa106712c055a320c8695c10aa6e52d28550b951a5423f2d501d53aec9bd5a02fd1ea2b8f2410f35cdc3e167c3b44dc801563418cef670c227ed1af0ff49d1cfb28f35711dc8e991c465b2424bbc7606428e58de22868c5ad15b9a89426d144cbefdf18f94dd54a05ca1a0dbbcc29990aea6097118a754f5445121e83352f663d8c4965520d5d0df8f4105f4d5ba2b61b34bcd69c0296"}, @NL80211_NAN_FUNC_SERVICE_INFO={0xae, 0xb, "5bbc06ba5410289165a557d5d8505b013a22a634106b3201f2d9a85288c32c619d8e41727267cc2246beb78f0d70ec93cd2b9fdd6c5627293da9d58a522dc228b4d6acce193cd94cf031a51fa261ad653425269a2167c7ae1927ff325843e702c4389e7bf6fafaa68d7989e5f35fc2039bbfd0bc5401ce6c7577ab6a2edaf6678ae463884c6407243a45a3b9bab132e376d0f1959ce19a6da3fe3a1609aa525b501458fdd41149b443c8"}, @NL80211_NAN_FUNC_PUBLISH_BCAST={0x4}, @NL80211_NAN_FUNC_SERVICE_ID={0xa, 0x2, "33eb364f2091"}, @NL80211_NAN_FUNC_PUBLISH_TYPE={0x5, 0x3, 0x1}, @NL80211_NAN_FUNC_TYPE={0x5, 0x1, 0x2}]}]}, 0x51c}, 0x1, 0x0, 0x0, 0x20000080}, 0x40004) 3.64879511s ago: executing program 4 (id=14479): r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = socket$nl_generic(0x10, 0x3, 0x10) r2 = socket$nl_generic(0x10, 0x3, 0x10) r3 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000240), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r2, 0x8933, &(0x7f0000000100)={'wlan1\x00', 0x0}) sendmsg$NL80211_CMD_REGISTER_FRAME(r1, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000580)={&(0x7f0000000380)={0x24, r3, 0x1, 0x0, 0x0, {{}, {@val={0x8, 0x3, r4}, @void}}, [@NL80211_ATTR_FRAME_MATCH={0x5, 0x5b, '-'}]}, 0x24}}, 0x8000) r5 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000240), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f0000000100)={'wlan1\x00', 0x0}) sendmsg$NL80211_CMD_REGISTER_FRAME(r1, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000580)={&(0x7f0000000000)=ANY=[@ANYBLOB='$\x00\x00\x00', @ANYRES16=r5, @ANYBLOB="010000000000000000003a00000008000300", @ANYRES32=r6, @ANYBLOB="05005b0008e22bcb6cf7e6000000c6db81d666ba940e87ddf8ead70e2429371a98852588b0883ad722b2988ef427514fd19ad1a1bc5658653e7393f814bf947c89d7cbe712a57d7d53f18b1657c3ea8a013bc22fde658f11deb02d069c08d0cc4e"], 0x24}}, 0x0) close(0x4) 3.646255937s ago: executing program 0 (id=14481): bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000040)={&(0x7f0000000000)={{0xeb9f, 0x1, 0x0, 0x18, 0x0, 0xc, 0xc, 0x8, [@typedef={0x7}]}, {0x0, [0x0, 0x0, 0x30, 0x0, 0x0, 0x0]}}, 0x0, 0x2c}, 0x28) (async) r0 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$ifreq_SIOCGIFINDEX_team(r0, 0x8933, &(0x7f0000000000)) (async) sendmsg$TIPC_CMD_SHOW_STATS(r0, &(0x7f0000000180)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x8000000}, 0xc, &(0x7f0000000140)={&(0x7f0000000100)={0x1c, 0x0, 0x4, 0x70bd2a, 0x25dfdbfd, {}, [""]}, 0x1c}, 0x1, 0x0, 0x0, 0x880}, 0x4000) (async) r1 = socket$inet_sctp(0x2, 0x1, 0x84) (async) r2 = syz_init_net_socket$nl_rdma(0x10, 0x3, 0x10) sendmsg$netlink(r2, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000000)=[{&(0x7f0000005d00)={0x114, 0x2e, 0x1, 0x0, 0x25dfdbff, "", [@nested={0x103, 0xf2, 0x0, 0x1, [@typed={0xc, 0x18, 0x0, 0x0, @u64=0xfac08}, @typed={0x14, 0xa, 0x0, 0x0, @ipv6=@ipv4={'\x00', '\xff\xff', @dev={0xac, 0x14, 0x14, 0x16}}}, @generic="50bb2d6f67d29d6fabadb107d0def49c88ea04abde1d5e8d3fb22a1b5046778bdafefc46b0449ade68bf84b36ec72dd71265fc2e882348c26c2126237dd5b37f5ae655b1086cda40e00aec58754734be31d750351dc076eb43d9621dc08c029d1608a46cf26fbe816b89f7cb81bff81a8b9482565856555ee923c65973deb0a99b962bc0fe94a3fcae3697bd7b85b3a682167c43dbf137115a40ebddcad74875ec58e9a3ddb9ad02a078cf0d972df9e99f079767734f69ce475f00ac64337803f5eb4e5842f4d98fe3fa370d47eb640dc5061dc35817c8a66c29", @generic="3ed73cfccb"]}]}, 0x114}], 0x1, 0x0, 0x0, 0x400c445}, 0x0) (async) sendmmsg$inet_sctp(r1, &(0x7f0000000f40)=[{&(0x7f0000000040)=@in={0x2, 0x4e22, @local}, 0x10, &(0x7f00000001c0)=[{&(0x7f0000000080)="1528e3e780", 0x5}], 0x1, &(0x7f0000000200)=ANY=[@ANYBLOB="1800000000000000e472070007000000ac1414aa00000000"], 0x18, 0x4005}], 0x1, 0x8008) 3.627031361s ago: executing program 3 (id=14482): bpf$BPF_MAP_CONST_STR_FREEZE(0x16, &(0x7f0000000040)={0x1}, 0x4) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000140)={{0x1, 0xffffffffffffffff}, &(0x7f0000000080), &(0x7f0000000100)}, 0x20) r1 = socket$inet6_sctp(0xa, 0x5, 0x84) setsockopt$inet_sctp6_SCTP_INITMSG(r1, 0x84, 0x2, &(0x7f00000000c0)={0xfffc, 0xc}, 0x8) getsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX3(r1, 0x84, 0x6f, &(0x7f00000001c0)={0x0, 0x10, &(0x7f0000000480)=[@in={0x2, 0x4e20, @loopback}]}, &(0x7f0000000640)=0x10) getsockopt$inet_sctp6_SCTP_ASSOCINFO(r1, 0x84, 0x1, &(0x7f0000000000)={r2, 0x10, 0x0, 0x2, 0x5}, &(0x7f0000000040)=0x14) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000300)={0xe, 0x2000000000000122, &(0x7f0000000540)=ANY=[@ANYRES16=r2], &(0x7f0000000080)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x2}, 0x94) r3 = syz_open_procfs$namespace(0xffffffffffffffff, &(0x7f00000006c0)='ns/pid\x00') ioctl$NS_GET_USERNS(r3, 0xb701, 0x0) r4 = socket$inet6(0xa, 0x80003, 0xff) setsockopt$inet6_int(r4, 0x29, 0x2, &(0x7f0000000180), 0x4) connect$rose(0xffffffffffffffff, 0x0, 0x0) socket$igmp6(0xa, 0x3, 0x3a) socket$alg(0x26, 0x5, 0x0) bind$alg(r1, &(0x7f0000000580)={0x26, 'aead\x00', 0x0, 0x0, 'seqiv(rfc4106(gcm(aes)))\x00'}, 0x58) socket$packet(0x11, 0x2, 0x300) mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000)='./cgroup.net/syz0\x00', 0x1ff) bpf$PROG_LOAD_XDP(0x5, &(0x7f00000003c0)={0x6, 0x3, &(0x7f0000000680)=ANY=[@ANYBLOB="18000000020000000000000000ee000095"], &(0x7f0000000280)='GPL\x00', 0x4, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x1}, 0x94) r5 = socket$unix(0x1, 0x1, 0x0) getsockopt$SO_J1939_ERRQUEUE(0xffffffffffffffff, 0x6b, 0x4, &(0x7f0000000000), &(0x7f0000000300)=0x4) bind$unix(r5, &(0x7f00000004c0)=@abs={0x0, 0x0, 0x4e23}, 0x6e) r6 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_CREATE(r6, &(0x7f00000002c0)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f00000003c0)=ANY=[@ANYRESDEC=r0], 0x5c}}, 0x0) bpf$PROG_LOAD_XDP(0x5, 0x0, 0x0) r7 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_ADD(r7, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000080)=ANY=[@ANYBLOB="50000000090601020000ffff00000000020000000900020073797a31000000000500010007000000280007800c00018008000140ffffffff0500070011000000060004404e22000006000540"], 0x50}, 0x1, 0x0, 0x0, 0x10000082}, 0x80) socket$netlink(0x10, 0x3, 0x400000000000004) r8 = socket$caif_stream(0x25, 0x1, 0x1) getsockopt$sock_buf(r8, 0x1, 0x15, &(0x7f00000029c0)=""/149, &(0x7f0000002a80)=0x95) socket$unix(0x1, 0x1, 0x0) 3.410336126s ago: executing program 4 (id=14483): pipe(0x0) r0 = socket$packet(0x11, 0x2, 0x300) setsockopt$packet_fanout(r0, 0x107, 0x12, &(0x7f00000000c0)={0xfffe, 0x2}, 0x4) r1 = socket$netlink(0x10, 0x3, 0x4) write(r1, &(0x7f0000005c00)="2700000014000707030e0000120f0a0011000100f5fe0012ff", 0x19) r2 = socket$nl_route(0x10, 0x3, 0x0) r3 = socket$inet6_sctp(0xa, 0x5, 0x84) r4 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r4, &(0x7f0000000580)={0x0, 0x0, &(0x7f0000001ac0)={&(0x7f0000000040)={0x18, 0x25, 0xfffffffffffffffd, 0x70bd29, 0x25dfdbfe, {0x11}, [@typed={0x4, 0x12b}]}, 0x18}, 0x1, 0x0, 0x0, 0x400400d}, 0x0) bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000100)={&(0x7f0000000640)=ANY=[@ANYBLOB="9feb010018000000000000003400000034000000060000000400000000000012020000000000000000000001050000018000000000000000010000850200000000000000010000000000000400000000da"], 0x0, 0x52}, 0x20) setsockopt$inet_sctp6_SCTP_PRIMARY_ADDR(r3, 0x84, 0x6, &(0x7f0000000180)={0x0, @in6={{0xa, 0x4e22, 0x3, @ipv4={'\x00', '\xff\xff', @empty}, 0x3}}}, 0x84) getpid() getsockname$inet(0xffffffffffffffff, 0x0, 0x0) sendmsg$nl_route(r2, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000040)=@newlink={0x84, 0x10, 0x44b, 0x0, 0x0, {0x7a, 0x0, 0x0, 0x0, 0x0, 0x2c0e}, [@IFLA_LINKINFO={0x5c, 0x12, 0x0, 0x1, @macvlan={{0xc}, {0x4c, 0x2, 0x0, 0x1, [@IFLA_MACVLAN_MACADDR_MODE={0x8, 0x3, 0x2}, @IFLA_MACVLAN_BC_QUEUE_LEN={0x8, 0x7, 0x2d0}, @IFLA_MACVLAN_MACADDR_DATA={0x1c, 0x5, 0x0, 0x1, [{0xa, 0x4, @local}, {0xa, 0x4, @broadcast}]}, @IFLA_MACVLAN_BC_QUEUE_LEN={0x8, 0x7, 0x8}, @IFLA_MACVLAN_MACADDR={0xa, 0x4, @remote}, @IFLA_MACVLAN_MODE={0x8, 0x1, 0x5}]}}}, @IFLA_MTU={0x8, 0x4, 0x1bf}]}, 0x84}, 0x1, 0x0, 0x0, 0x4000080}, 0x4000824) 3.407577868s ago: executing program 0 (id=14484): r0 = socket$inet6(0xa, 0x2, 0x0) close(r0) r1 = socket$inet_udp(0x2, 0x2, 0x0) bind$inet(r1, &(0x7f0000000040)={0x2, 0x4e20, @empty}, 0x10) setsockopt$inet6_udp_int(r0, 0x11, 0x68, &(0x7f0000000080)=0xa40, 0x4) recvmmsg(r1, &(0x7f0000000140)=[{{0x0, 0x0, 0x0}, 0x7}], 0x1, 0x40010102, 0x0) r2 = socket$inet6(0xa, 0x800000000000002, 0x0) r3 = openat$tun(0xffffffffffffff9c, &(0x7f00000001c0), 0xa2f01, 0x0) ioctl$TUNSETIFF(r3, 0x400454ca, &(0x7f00000000c0)={'syzkaller1\x00', 0x6bf1c2d5adba8c32}) r4 = socket$kcm(0x2, 0xa, 0x2) r5 = socket$inet6(0xa, 0x3, 0x3a) setsockopt$inet6_int(r5, 0x29, 0x24, &(0x7f0000000000)=0x400, 0x4) ioctl$SIOCSIFHWADDR(r4, 0x8914, &(0x7f0000000180)={'syzkaller1\x00', @link_local}) write$tun(r3, &(0x7f0000000200)=ANY=[@ANYBLOB="0a00b3f0ffffffffffffbaaaaaaaaaaa86dd694fd2cd00103afffe8000000000000000000000000000bbff0200000000000000000000000000018600"], 0x4a) setsockopt$inet6_udp_int(r2, 0x11, 0x67, &(0x7f0000000180)=0x7f, 0x4) connect$inet6(r2, &(0x7f00000001c0)={0xa, 0x4e23, 0x3, @mcast1, 0x2}, 0x1c) connect$inet6(r2, &(0x7f0000000000)={0xa, 0x4e20, 0x0, @ipv4={'\x00', '\xff\xff', @multicast1}}, 0x1c) write(r2, &(0x7f0000000300)="89ba41c97928dec7cec15a160d3dba2553b519a795020072aed129d4b5247c983455b3d757e8b2333a64d9abf416fd83f942661c47bcdf71f7d07ba20d03474a4a4bce636ea8d2b882b2b49ef18e2a96e41f206d930eda2769c5ee6d5e3d541ce9a21c3ce5cb5fbdad9a45de0000000000000000000000000000f1d3b9821c18", 0x80) unshare(0x20000400) r6 = socket(0x2b, 0x1, 0xffffffff) r7 = socket(0x10, 0x803, 0x0) r8 = socket$inet6(0xa, 0x3, 0x87) setsockopt$inet6_IPV6_XFRM_POLICY(r8, 0x29, 0x23, &(0x7f0000000280)={{{@in=@dev={0xac, 0x14, 0x14, 0x40}, @in=@local, 0x0, 0x0, 0x4e20, 0x0, 0x2}, {0x0, 0x4, 0x1, 0x0, 0x52b, 0xb}, {0x1ff, 0xffffffffe, 0x4053e5, 0x20}, 0x6, 0x80001, 0x1, 0x0, 0x2, 0x1}, {{@in6=@empty, 0x4d4, 0x32}, 0x2, @in=@local, 0x3502, 0x1, 0x0, 0x0, 0x6, 0xfffffffd}}, 0x3ff) r9 = socket$rds(0x15, 0x5, 0x0) sendmsg$NFNL_MSG_ACCT_GET(r6, &(0x7f0000000140)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x8000}, 0xc, &(0x7f0000000100)={&(0x7f0000000040)=ANY=[@ANYBLOB="28000000010705000000000000000000030000050c00034000004e96000000090800054000010001"], 0x28}, 0x1, 0x0, 0x0, 0x40000}, 0x804) bind$rds(r9, &(0x7f00000000c0)={0x2, 0x4e22, @remote}, 0x2) accept$inet(r7, &(0x7f00000001c0)={0x2, 0x0, @empty}, &(0x7f0000000200)=0x10) sendmsg$rds(r9, &(0x7f0000000080)={&(0x7f0000000180)={0x2, 0x0, @initdev={0xac, 0x1e, 0x0, 0x0}}, 0x10, 0x0}, 0x0) ioctl$sock_ipv6_tunnel_SIOCGET6RD(r7, 0x89f8, &(0x7f0000000340)={'sit0\x00', 0xffffffffffffffff}) socket$nl_generic(0x10, 0x3, 0x10) 3.363158083s ago: executing program 1 (id=14485): ioctl$sock_SIOCGIFINDEX(0xffffffffffffffff, 0x8933, &(0x7f00000005c0)={'ip6gretap0\x00', 0x0}) bind$packet(0xffffffffffffffff, &(0x7f0000000180)={0x11, 0x3, r0, 0x1, 0x1, 0x6, @broadcast}, 0x14) setsockopt$packet_int(0xffffffffffffffff, 0x107, 0xf, &(0x7f0000000000)=0xe9, 0x4) sendmsg$netlink(0xffffffffffffffff, &(0x7f0000002ac0)={0x0, 0x0, &(0x7f0000000480)=[{&(0x7f0000000080)=ANY=[@ANYRES8=0x0, @ANYRES8], 0xdd12}], 0x1, 0x0, 0x0, 0x4008010}, 0x20040851) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000440)=@newlink={0x40, 0x10, 0xffffff1f, 0x0, 0x0, {0x0, 0x0, 0x0, 0x0, 0x0, 0x187a8}, [@IFLA_LINKINFO={0x18, 0x12, 0x0, 0x1, @sit={{0x8}, {0xc, 0x2, 0x0, 0x1, [@IFLA_IPTUN_LOCAL={0x8, 0x2, @loopback}]}}}, @IFLA_NUM_TX_QUEUES={0x8, 0x1f, 0x4}]}, 0x40}}, 0x4000031) 3.331489759s ago: executing program 4 (id=14486): r0 = socket(0x10, 0x803, 0x0) r1 = socket(0x10, 0x803, 0x0) sendmsg$nl_route_sched(r0, &(0x7f0000000380)={0x0, 0x0, &(0x7f0000000340)={&(0x7f00000000c0)=@getchain={0x24, 0x66, 0x100, 0x70bd2d, 0x25dfdbfb, {0x0, 0x0, 0x0, 0x0, {0x0, 0x8}, {0x0, 0x2}}}, 0x24}}, 0x0) getsockname$packet(r0, &(0x7f0000000740)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000900)=0x14) recvmsg$can_raw(0xffffffffffffffff, 0x0, 0x40) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, 0x0, 0x0) r3 = socket$nl_generic(0x10, 0x3, 0x10) recvmmsg(r3, &(0x7f0000002b80)=[{{0x0, 0x0, &(0x7f0000001280)=[{&(0x7f0000000200)=""/4096, 0xe9c}, {&(0x7f0000001200)=""/114, 0x72}], 0x2}, 0x562a}], 0x3ffffffffffff27, 0x0, 0x0) sendmsg$nl_generic(r3, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000140)={&(0x7f00000001c0)=ANY=[@ANYBLOB="180000002500010324bd5502ffdbdf25010000000400ae"], 0x18}, 0x1, 0x0, 0x0, 0x4004088}, 0x0) sendmsg$nl_route(r1, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000440)=ANY=[@ANYBLOB="4800000010000104000000000100000000000000", @ANYRES32=r2, @ANYBLOB="0000000000000000280012800b000100697036746e6c00001800028014000300ff"], 0x48}}, 0x0) syz_genetlink_get_family_id$nl80211(&(0x7f0000000100), r1) sendmsg$nl_route(r1, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000019c0)=ANY=[@ANYBLOB="5c00000010000100000000000001000000000000", @ANYRES32=r2, @ANYBLOB="00010000ac0000003c0012800b000100697036746e6c00002c000280060011004e20000006000f0002070000010000050006000700"/68, @ANYBLOB="c1a3700d84e73c500b1faee2de3b87fdc8efb9d0b049e9346dfb6775bc2742a0018fe48cf8d24a66c3e94f265cfd9dc2c3f9900db7a045e18b09ee850a67b1853bea9a3c240f10aad550710dded1e2911aea9b8c75371b899aa32668ca796f6f7789c687deb4a521f7426423acfdc446df270eb123f6c4f6ff38900cf15944e467dbd710f26e885e0f5d8452ed87186c637902a955c2b144ec3e3d682faad3f0dea65769462129050f17bdbe267b3e09a12941ba3769ed7f848145b11897259e320346f5d14da3a531515e950c2dc057e7de440e2f162f66c029205877db0b119732b0aecb79bc285ca8eabcbe066b619446bcbbe7b931aefe3b648a93781d92d3bec784ff80d974dd482bdf2b3c49bbfd251a3ec9edfb68befb6cb8663b0bab01c943dd1f493fba46cd666232417e98a14afeac308dfd167374d4777d8fb718a1377cf4b5409ade87d974809586e81155e06099ad3fd2baf8708391cf6bf657ddf989885bb2cb6b515387ae41bbfce49b600ca7d0eb25596f8386c794fa0c9d10675453ceb7e2a37f9eabe7a806f95b8348f816a267c96e3d93965e167fcc0545bb2afd633fe3c4aba04e97cb4f56760f1cf5dad3e8f9b677f0a81cdb3e6403e90d3a918c0ea572243f832f04c85ab5decbd05e47fdad6abd4435ddb0a62d6a3e48b5e68ba7bf216d7615081376c875e2c29585884afac9c3e0d72f839717adf9d7a5cdd1d6ed63996b920bd2a55622936318fefa43125a371e55d1970a73512f706f6c314f9fec6524af025bf782d50494265504cf39932492522203c414354bf38fe7d53d64942851ab2c25186bfc3e11948a15c2c8466552025818e58caab4c5eee480e98fdedaa75261cc5669be4696ca39d244e73866b8c944d5845cfe747fec057a1a52e943bea9e2c531bdcf96a1750bf314996dac6e23b54e598b35461d851c25b2119ebeaea07430f811e6efe048a0357ec87e68d20818103abfceffd6a3d48f790af1f9dc1454199f85442bf7bf5d875004a5aab44c758949acc190b6dcc3cdd05bbdc841972364c81290e341f10ba83debac60abdf45b3e766a71b3a2bdba7b1500ae0809ffdabc2a0b8d63a91dc37bf5571e4de1daaa2f7448825d959ea4b9de843ac96b462ff57615a2f737f9f8361b66015867d26dd66081908b543f1cec1f8953b0f4f11286e25a97c07af76a007ec63cf8cdc3ea442aa3fbb0596930bee37a58e90312e9462a08acfcf03b7d27c524ed9475fb89cd7016a888a74e98211ff2d06cd1afb85541cfe49732b1d927831c55d183627727c4a5f0712962a4b8ef2214620eeb83b376ae115a7b7325bf86d0a0e423f6fe02750efdf7869a35200e91ad2f0804ad40d1e5a2e0c7e74c0b4d3797480a4a94f253c96ac7f4a8e1469f38443569cf47b82a52f0a88cc7e2b973f98505fa0ada331cd574c0e3e554a8c01964cae42aa95095d76c41114ffc3a068c7fa899c7a3c0fc689c610cc1eeadc317ab1680e2173fdad2254f638a1e7f908a688e17365082cc2a0a2e5590a46428223d62b8e909da6dbeadb9d3acb3cc88abb76133ed2a8401b1e8022d5804d8d6a85ce6297aee4fa643ea3d30390d71d486fc4e462c83807b3cffb3f3b35077268b773894abbaf1ead05feaedf79b9bca423c058ef1ec09a8967f2d85a015bf70c591709445b3fde7988709b9dabed14d457734879079dc8e11fa6038c381cebd648b261a30cc649e69686a9b13be83a3950d29b3456ce300b93da1b11f88f129d16381e6369da0cf5d337218b3ea2aed6a0f3660cea4e07b8ec4d8fa5f2313d36fe47f1d3d1a6b417bd3895ae73d3130a696954c752e454d75c4c68e5a378ce9262a40fddb61ac253f180856e536eef82db2ffdde976b1fbe3ed931ba067142b6d0e71f04d82e1bbca5e194f0024731eee2ceb6714177034df7240679e27d8cd36b3b1511ea9548f9f25912fe0c3fa3fe4f64eb0d3aa629838a17fdbd4f2dbf60f405794661209a62e3437adebf96bdd27e3ef0af2721b738b6bb42a0ae3ab151e0330f6a188ce543066fa14ffa08475adce5f348e99eea1d348d062fa99924ba63e8a5760d6a3e53b1eeaabb5fb46e39b08f121940e4c8b36e21fa93344de7673f1ded97b9aaea2e54060638a470c0d8fb2e6f45d5e6246cfce6cd4bd6cd95cf1dc1e21f4822b9e8cd9304c200ea9e4744408661b3f9f6a4f736a1380174bd2ddc59e99f9b5f03af0569cadca5584b4707e248b82cdc5758ff70cb1383bd6273c532cbf2591a104fc9c7a5afe59db0db072f88cda809fc7309b420e93a8e49c83b911060064bd47a110839053d82e554cdf4d88f4df95bd2bf032530e9e9711db0b8720d8037534bd780509ea5493565e9d579de4e8de23a05c89d85240219e0a9a9cd804ccefda21354f60edc77c56cc7f471e21258a804c32845229c8772cd293f7da12ce30328c108919706c6e2947f474b6eaf151d0d4ef02adfc2d11c26ac39d9cdc95f92cdb21d01734cf1f20b27970c0b57533452212d6107939b7c19f00573cb85b45facdc98837938eba2ed42663ae9bc1103d88fd1203cdeebc0e6f9a5e49327fcdf8d2aa1e8dd213bad0dff788d3f6dcc6b9789207ac36bb8f662802646b19339d12a9021fc09b6319302662c3eb64061d2fd9d586c97e122d3ae22f8035a735c21b9ab9e6294bd4d98b231905863455b2231c779eedc7e0b1548f9ddd28eaa104d4c524571799fd86c4c4dad960a79a0f69125083a5610e8ff064d08da510c694a881c9ab99fcc56f0fcaf601b0ef8501bf4c71aced88b694a30a7dd055b775b529b5dd62652624086c231154cb74755678d40bec6e0c4c527d699f88dac8e49780051c8cfe9767fa49a649de801ee80974889f4bdafaefd42d33e370225983d963ac2c37c5b0fdbf559fee34d5c696fd19339e3c72d125da505d5e8dc4853fa64b5c6398d7ff14d2571760bbf2477efb04eae24351d2a09a3ec2aec1047ea58fbbf9e8f591e332c91f190ef6b1c98b8a5ce10"], 0x5c}}, 0xeb64d656001b2f26) r4 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r4, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000002c0)=@newlink={0x44, 0x10, 0x801, 0x70bd25, 0x0, {0x0, 0x0, 0x0, 0x0, 0x0, 0x42004}, [@IFLA_XDP={0x1c, 0x2b, 0x0, 0x1, [@IFLA_XDP_EXPECTED_FD={0x8, 0x8, r4}, @IFLA_XDP_FLAGS={0x8, 0x3, 0x19}, @IFLA_XDP_FD={0x8}]}, @IFLA_GROUP={0x8}]}, 0x44}}, 0x0) 3.173652595s ago: executing program 1 (id=14488): r0 = socket(0x10, 0x2, 0x0) openat$tun(0xffffffffffffff9c, 0x0, 0x0, 0x0) pipe(&(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) r2 = socket$inet6_sctp(0xa, 0x5, 0x84) r3 = bpf$MAP_CREATE(0x0, &(0x7f0000000480)=ANY=[@ANYBLOB="0a00000004000000dd00cc000a00000000000000517236df332228f43c24ea78dde5a9d6156c213fbde41e9bb5c784193be1aea775a9f70dc1b09f8239afa0247b21f415369738106cda423243f638ce6d4cf33e20786fc2e946e509b10e39d8d9a44e62c4a72365f9a2a84c8e6ffb84db44fcabc162110ff6263c4c7e103445ab904afe9c230ab9d311f46361592b5d69e4f9ce101a044c87b122", @ANYRES32, @ANYBLOB='\x00'/20, @ANYRES32=0x0, @ANYRES32, @ANYBLOB='\x00'/28], 0x50) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000001340)={{r3, 0xffffffffffffffff}, &(0x7f00000012c0), &(0x7f0000001300)}, 0x20) bpf$PROG_LOAD(0x5, &(0x7f0000001840)={0xd, 0xd, &(0x7f0000000040)=ANY=[@ANYBLOB="18010000000000000000000000800000850000007d00000018110000", @ANYRES32=r4, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000010b704000000000000850000003b00000095"], &(0x7f00000001c0)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) getsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX3(r2, 0x84, 0x6f, &(0x7f0000000140)={0x0, 0x10, &(0x7f0000000100)=[@in={0x2, 0x4e22, @private=0xa010101}]}, &(0x7f0000000180)=0x10) r6 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r7 = syz_genetlink_get_family_id$nfc(&(0x7f0000000340), 0xffffffffffffffff) ioctl$IOCTL_GET_NCIDEV_IDX(r1, 0x0, &(0x7f0000000380)=0x0) r9 = openat$nci(0xffffffffffffff9c, &(0x7f0000000240), 0x2, 0x0) r10 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r11 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r12 = syz_genetlink_get_family_id$nfc(&(0x7f0000000440), r11) ioctl$IOCTL_GET_NCIDEV_IDX(r9, 0x0, &(0x7f00000000c0)=0x0) sendmsg$NFC_CMD_DEV_UP(r10, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000180)={&(0x7f00000002c0)=ANY=[@ANYBLOB="1c000000", @ANYRES16=r12, @ANYBLOB="010026bd7000fcdbdf250200000008000100", @ANYRES32=r13], 0x1c}}, 0x840) r14 = openat$nci(0xffffffffffffff9c, &(0x7f0000000080), 0x2, 0x0) r15 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r16 = syz_genetlink_get_family_id$nfc(&(0x7f0000000100), r15) ioctl$IOCTL_GET_NCIDEV_IDX(r14, 0x0, &(0x7f00000000c0)=0x0) sendmsg$NFC_CMD_DEV_UP(r15, &(0x7f0000000200)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000d80)=ANY=[@ANYBLOB="1c000000", @ANYRES16=r16, @ANYBLOB="010426bd7000f8dbdf250200000008000100", @ANYRES32=r17], 0x1c}}, 0x4008054) sendmsg$NFC_CMD_GET_DEVICE(r6, &(0x7f0000000440)={&(0x7f0000000300)={0x10, 0x0, 0x0, 0x2c10000}, 0xc, &(0x7f0000000400)={&(0x7f00000003c0)={0x2c, r7, 0xb872f9db7f36c1f, 0x70bd29, 0x25dfdbfb, {}, [@NFC_ATTR_DEVICE_INDEX={0x8, 0x1, r8}, @NFC_ATTR_DEVICE_INDEX={0x8, 0x1, r13}, @NFC_ATTR_DEVICE_INDEX={0x8, 0x1, r17}]}, 0x2c}, 0x1, 0x0, 0x0, 0x4010}, 0x20008000) getsockopt$inet_sctp6_SCTP_GET_ASSOC_ID_LIST(r2, 0x84, 0x1d, &(0x7f0000000200)={0x1, [0x0]}, &(0x7f0000000080)=0x8) getsockopt$inet_sctp6_SCTP_STATUS(r2, 0x84, 0xe, &(0x7f0000000240)={r18, 0x7fff, 0x9, 0x74, 0x100, 0x9, 0x10, 0x2, {r5, @in6={{0xa, 0x4e24, 0x4, @rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x01', 0x69}}, 0x800, 0x6, 0x10, 0x1ff, 0x8000}}, &(0x7f00000001c0)=0xb0) setsockopt$inet_sctp_SCTP_DEFAULT_SEND_PARAM(r1, 0x84, 0xa, &(0x7f00000000c0)={0x0, 0x2, 0x4, 0x6, 0x9, 0x2, 0x4, 0xe, r18}, 0x20) r19 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_ADD(r19, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000000)={0x60, 0x9, 0x6, 0x3, 0x0, 0x0, {0x5}, [@IPSET_ATTR_SETNAME={0x9, 0x2, 'syz1\x00'}, @IPSET_ATTR_PROTOCOL={0x5}, @IPSET_ATTR_DATA={0x38, 0x7, 0x0, 0x1, [@IPSET_ATTR_PORT={0x6, 0x4, 0x1, 0x0, 0x4e21}, @IPSET_ATTR_PROTO={0x5, 0x7, 0xff}, @IPSET_ATTR_PACKETS={0xc, 0x19, 0x1, 0x0, 0x800}, @IPSET_ATTR_IP2={0x18, 0x14, 0x0, 0x1, @IPSET_ATTR_IPADDR_IPV6={0x14, 0x2, 0x1, 0x0, @empty}}]}]}, 0x60}, 0x1, 0x0, 0x0, 0x10004893}, 0x80) write(r0, &(0x7f0000000040)="1c0000001a009b8a140000003b9b301f000000000000002000000000", 0x1c) 3.16818045s ago: executing program 2 (id=14489): openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000340)='blkio.throttle.io_service_bytes_recursive\x00', 0x275a, 0x0) (async) socket$inet6_sctp(0xa, 0x1, 0x84) (async) r0 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_tcp_int(r0, 0x6, 0x13, &(0x7f0000000000)=0x100000001, 0x4) (async, rerun: 32) syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) (async, rerun: 32) connect$inet6(r0, &(0x7f0000000200)={0xa, 0x1, 0x0, @ipv4={'\x00', '\xff\xff', @dev={0xac, 0x14, 0x14, 0x31}}}, 0x1c) (async) setsockopt$inet6_tcp_TCP_ULP(r0, 0x6, 0x1f, &(0x7f00000000c0), 0x4) (async) setsockopt$inet6_tcp_TLS_TX(r0, 0x11a, 0x1, &(0x7f0000000280)=@gcm_256={{0x303}, "1afc7c14d332bcc6", "a9ba0c85d68723369f51322151d9f41aaa2832bb07cc1e49ad714beac6f1ade8", "49960d8f", "bff2a81527ae4190"}, 0x38) (async, rerun: 64) syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) (async, rerun: 64) r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000002c0)='freezer.state\x00', 0x275a, 0x0) write$cgroup_int(r1, &(0x7f0000000000), 0xffffff6a) (async) r2 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r2, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000180)=@delchain={0x44, 0x64, 0xf31, 0x0, 0x1, {0x0, 0x0, 0x0, 0x0, {0xfff1}, {0x0, 0xffff}, {0xfff3, 0xfff1}}, [@TCA_CHAIN={0x8, 0xb, 0x126}, @filter_kind_options=@f_flower={{0xb}, {0x4}}, @TCA_CHAIN={0x8, 0xb, 0x4000003}]}, 0x44}, 0x1, 0x0, 0x0, 0x20008080}, 0x40000) (async) sendfile(r0, r1, 0x0, 0x20000000002) (async) socket$nl_netfilter(0x10, 0x3, 0xc) (async) unshare(0x400) (async) pselect6(0x40, &(0x7f00000001c0)={0x0, 0x0, 0x3, 0xfffffffffffffffd}, 0x0, &(0x7f00000002c0)={0x3ff, 0x0, 0x0, 0x9, 0x0, 0x0, 0x7fffffff}, 0x0, 0x0) 3.144263832s ago: executing program 2 (id=14490): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000000c0)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a20000000000a01030000000000000000010000000900010073797a310000000054000000030a01020000000000000000010000000900030073797a310000000028000480080002400000000008000140000000051400030076657468315f6d6163767461700000000900010073797a310000000058000000050a01020000000000000000010020000c00024000000000000000010900010073797a3100000000200004801400030076657468315f6d61637674617000000008000140000000050a000700726f757465"], 0xf4}}, 0x10) (async, rerun: 64) sendto$inet(0xffffffffffffffff, &(0x7f0000000200)="e1", 0x1, 0x20000000, 0x0, 0x0) (async, rerun: 64) r1 = bpf$MAP_CREATE_TAIL_CALL(0x0, &(0x7f0000000700)=ANY=[@ANYBLOB="0300000004000000040000000a"], 0x48) bpf$MAP_LOOKUP_ELEM(0x1, &(0x7f0000000f40)={r1, &(0x7f0000000200), 0x0}, 0x20) r2 = socket$packet(0x11, 0x3, 0x300) (async, rerun: 64) r3 = socket(0x10, 0x803, 0x0) (async, rerun: 64) bpf$PROG_LOAD(0x5, &(0x7f00000017c0)={0x1, 0xe, &(0x7f0000000200)=ANY=[@ANYBLOB="b700000081000000bfa30000000000000703000000feffff720a02fef8ffffff71a400fe0000000071101000000000001d300200000000004704000001ed030407030000000000001d440000000000006b0a04fe0000000072030000000a0000e500f9ff"], 0x0}, 0x94) r4 = socket$can_bcm(0x1d, 0x2, 0x2) connect$can_bcm(r4, &(0x7f00000005c0), 0x10) (async) r5 = socket(0x80000000000000a, 0x2, 0x0) setsockopt$inet6_group_source_req(r5, 0x29, 0x2e, &(0x7f0000000340)={0x1, {{0xa, 0x0, 0x0, @mcast1={0xff, 0x7}}}, {{0xa, 0xfffe, 0x9, @empty, 0x4}}}, 0x108) (async) r6 = socket$rds(0x15, 0x5, 0x0) bind$rds(r6, &(0x7f0000000840)={0x2, 0x0, @loopback}, 0x10) sendmsg$rds(r6, &(0x7f0000000740)={&(0x7f0000000040)={0x2, 0x0, @dev}, 0x10, 0x0, 0x0, &(0x7f0000004680)=[@rdma_args={0x48, 0x114, 0x1, {{}, {0x0}, &(0x7f0000002bc0)=[{&(0x7f0000001900)=""/135, 0x87}, {0xfffffffffffffffe, 0x2}], 0x2}}], 0x48}, 0x0) (async) setsockopt$inet6_group_source_req(r5, 0x29, 0x2e, &(0x7f0000000200)={0x4, {{0xa, 0x0, 0x0, @mcast1={0xff, 0x7}}}, {{0xa, 0x0, 0x0, @local}}}, 0x108) setsockopt$inet6_group_source_req(r5, 0x29, 0x2e, &(0x7f0000000200)={0x1, {{0xa, 0x4e20, 0x0, @mcast1={0xff, 0x7}}}, {{0xa, 0x4e20, 0xa4fffffb, @loopback}}}, 0x108) (async) sendmsg$can_bcm(r4, &(0x7f0000000300)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f0000000240)=ANY=[@ANYBLOB="050000007f0000000000010000000000", @ANYRES64=0x0, @ANYRES64=0x2710], 0x48}}, 0x0) sendmsg$nl_route(r3, &(0x7f0000000380)={0x0, 0x4076cbba9945d516, &(0x7f0000000340)={0x0, 0x14}}, 0x0) getsockname$packet(r3, &(0x7f0000000140)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route(r3, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000500)={&(0x7f00000003c0)=@newlink={0x50, 0x10, 0x439, 0x170bd23, 0x25dfdbfb, {0x0, 0x0, 0x0, r7, 0xb881}, [@IFLA_LINKINFO={0x30, 0x12, 0x0, 0x1, @ipip6={{0xb}, {0x20, 0x2, 0x0, 0x1, [@IFLA_IPTUN_FLAGS={0x8, 0x8, 0x2c}, @IFLA_IPTUN_REMOTE={0x14, 0x3, @rand_addr=' \x01\x00'}]}}}]}, 0x50}, 0x1, 0x0, 0x0, 0x24008007}, 0x4040844) (async, rerun: 64) sendto$packet(r2, &(0x7f0000000640)="e8b77052a9", 0x28, 0x40, &(0x7f0000000200)={0x11, 0x86dd, r7, 0x1, 0x0, 0x6, @local}, 0x14) (rerun: 64) 3.097213698s ago: executing program 2 (id=14491): bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000180)={&(0x7f0000000000)={{0xeb9f, 0x1, 0x0, 0x18, 0x0, 0xb5, 0xb5, 0x2, [@union={0xf, 0x2, 0x0, 0x5, 0x0, 0x5, [{0xf, 0x2, 0xfffffffc}, {0xd, 0x3, 0x8}]}, @struct={0x10, 0x9, 0x0, 0x4, 0x1, 0x3, [{0x1, 0x0, 0x2b50}, {0xe, 0x4, 0x6}, {0x6, 0x5, 0x1}, {0x7, 0x4, 0xfffffff1}, {0x0, 0x1, 0x9}, {0x5, 0x5, 0xfffffdd9}, {0x10, 0x1, 0x80000001}, {0xe, 0x1, 0x1}, {0x4, 0x3, 0x2}]}, @datasec={0x6, 0x1, 0x0, 0xf, 0x1, [{0x2, 0xfffffffc, 0x80000000}], '2'}]}}, &(0x7f0000000100)=""/122, 0xd2, 0x7a, 0x0, 0x1}, 0x28) ioctl$sock_SIOCGIFINDEX(0xffffffffffffffff, 0x8933, &(0x7f00000001c0)={'ip6gre0\x00'}) r0 = syz_init_net_socket$netrom(0x6, 0x5, 0x0) (async) syz_emit_ethernet(0x87, &(0x7f0000000200)={@dev={'\xaa\xaa\xaa\xaa\xaa', 0x33}, @dev={'\xaa\xaa\xaa\xaa\xaa', 0x15}, @void, {@llc_tr={0x11, {@snap={0xab, 0xaa, '0xffffffffffffffff}, &(0x7f0000000340), &(0x7f00000003c0)=r2}, 0x20) ioctl$sock_inet_SIOCGIFPFLAGS(r2, 0x8935, &(0x7f0000000440)={'veth1_virt_wifi\x00'}) (async) mmap(&(0x7f0000ff1000/0xc000)=nil, 0xc000, 0x100000a, 0x4010, r2, 0x7) (async) ioctl$NS_GET_OWNER_UID(0xffffffffffffffff, 0xb704, &(0x7f00000004c0)=0x0) sendmsg$nl_xfrm(r2, &(0x7f0000000780)={&(0x7f0000000480)={0x10, 0x0, 0x0, 0xc0004500}, 0xc, &(0x7f0000000740)={&(0x7f0000000500)=@getpolicy={0x238, 0x15, 0x100, 0x70bd25, 0x25dfdbfc, {{@in=@rand_addr=0x64010102, @in=@local, 0x4e24, 0x2, 0x4e21, 0x3, 0x2, 0x80, 0xa0, 0x62, 0x0, r4}, 0x6e6bbc, 0x1}, [@migrate={0x1cc, 0x11, [{@in6=@initdev={0xfe, 0x88, '\x00', 0x1, 0x0}, @in6=@private1={0xfc, 0x1, '\x00', 0x1}, @in=@multicast2, @in=@multicast2, 0x32, 0x3, 0x0, 0x3503, 0x2, 0xa}, {@in6=@private1, @in6=@remote, @in=@broadcast, @in6=@mcast1, 0xff, 0x5, 0x0, 0x0, 0xa, 0x2}, {@in6=@remote, @in6=@empty, @in6=@rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x01', @in=@broadcast, 0x2b, 0x3, 0x0, 0x34ff, 0x2, 0xa}, {@in=@initdev={0xac, 0x1e, 0x1, 0x0}, @in=@loopback, @in=@multicast2, @in=@broadcast, 0x33, 0x3, 0x0, 0x3506, 0x0, 0xa}, {@in=@multicast2, @in=@rand_addr=0x64010101, @in6=@initdev={0xfe, 0x88, '\x00', 0x1, 0x0}, @in6=@local, 0x32, 0x4, 0x0, 0x3505, 0xa, 0x2}, {@in=@initdev={0xac, 0x1e, 0x1, 0x0}, @in=@empty, @in6=@mcast2, @in=@remote, 0x33, 0x3, 0x0, 0x34ff, 0xa, 0x2}]}, @encap={0x1c, 0x4, {0xffffffffffffffff, 0x4e22, 0x4e21, @in=@broadcast}}]}, 0x238}, 0x1, 0x0, 0x0, 0x4000}, 0x840) (async, rerun: 64) sendmsg$IPSET_CMD_CREATE(r1, &(0x7f00000008c0)={&(0x7f00000007c0)={0x10, 0x0, 0x0, 0x100000}, 0xc, &(0x7f0000000880)={&(0x7f0000000800)={0x70, 0x2, 0x6, 0x801, 0x0, 0x0, {0x5, 0x0, 0x5}, [@IPSET_ATTR_DATA={0x14, 0x7, 0x0, 0x1, [@IPSET_ATTR_HASHSIZE={0x8, 0x12, 0x1, 0x0, 0x5}, @IPSET_ATTR_PROTO={0x5, 0x7, 0xff}]}, @IPSET_ATTR_PROTOCOL={0x5}, @IPSET_ATTR_DATA={0x4}, @IPSET_ATTR_SETNAME={0x9, 0x2, 'syz1\x00'}, @IPSET_ATTR_PROTOCOL={0x5}, @IPSET_ATTR_DATA={0x20, 0x7, 0x0, 0x1, [@IPSET_ATTR_PORT_TO={0x6, 0x5, 0x1, 0x0, 0x4e22}, @IPSET_ATTR_PORT={0x6, 0x4, 0x1, 0x0, 0x4e24}, @IPSET_ATTR_IP={0xc, 0x1, 0x0, 0x1, @IPSET_ATTR_IPADDR_IPV4={0x8, 0x1, 0x1, 0x0, @initdev={0xac, 0x1e, 0x1, 0x0}}}]}, @IPSET_ATTR_REVISION={0x5, 0x4, 0x3}]}, 0x70}}, 0x4050) (async, rerun: 64) sendmsg$nl_route_sched(r2, &(0x7f0000000a40)={&(0x7f0000000900)={0x10, 0x0, 0x0, 0x10}, 0xc, &(0x7f0000000a00)={&(0x7f0000000940)=@gettaction={0x84, 0x32, 0x1, 0x70bd25, 0x25dfdbfb, {}, [@action_dump_flags=@TCA_ROOT_FLAGS={0xc}, @action_dump_flags=@TCA_ROOT_FLAGS={0xc, 0x2, {0x0, 0x1}}, @action_gd=@TCA_ACT_TAB={0x10, 0x1, [{0xc, 0x1b, 0x0, 0x0, @TCA_ACT_KIND={0x8, 0x1, 'ife\x00'}}]}, @action_dump_flags=@TCA_ROOT_TIME_DELTA={0x8}, @action_gd=@TCA_ACT_TAB={0x4}, @action_gd=@TCA_ACT_TAB={0x3c, 0x1, [{0x10, 0x8, 0x0, 0x0, @TCA_ACT_KIND={0xb, 0x1, 'mirred\x00'}}, {0x10, 0x3, 0x0, 0x0, @TCA_ACT_KIND={0x9, 0x1, 'vlan\x00'}}, {0xc, 0x0, 0x0, 0x0, @TCA_ACT_INDEX={0x8, 0x3, 0x8}}, {0xc, 0x8, 0x0, 0x0, @TCA_ACT_INDEX={0x8, 0x3, 0x5}}]}]}, 0x84}, 0x1, 0x0, 0x0, 0x40000}, 0x20008840) (async) getsockopt$inet6_IPV6_IPSEC_POLICY(r2, 0x29, 0x22, &(0x7f0000000a80)={{{@in6=@mcast1, @in6=@private1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}, {{@in6=@loopback}, 0x0, @in6=@mcast2}}, &(0x7f0000000b80)=0xe8) socket$nl_generic(0x10, 0x3, 0x10) (async, rerun: 32) r6 = openat$pidfd(0xffffffffffffff9c, &(0x7f0000000bc0), 0x44880, 0x0) (rerun: 32) readv(r6, &(0x7f0000001140)=[{&(0x7f0000000c00)=""/30, 0x1e}, {&(0x7f0000000c40)=""/243, 0xf3}, {&(0x7f0000000d40)=""/236, 0xec}, {&(0x7f0000000e40)=""/191, 0xbf}, {&(0x7f0000000f00)=""/115, 0x73}, {&(0x7f0000000f80)=""/169, 0xa9}, {&(0x7f0000001040)=""/231, 0xe7}], 0x7) (async) connect$pppoe(0xffffffffffffffff, &(0x7f00000011c0)={0x18, 0x0, {0x4, @remote, 'veth1_to_batadv\x00'}}, 0x1e) (async) ioctl$TUNGETVNETBE(r1, 0x800454df, &(0x7f0000001200)=0x1) (async) bpf$LINK_DETACH(0x22, &(0x7f0000001240)=r1, 0x4) (async, rerun: 32) ioctl$SIOCNRDECOBS(r1, 0x89e2) (async, rerun: 32) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f00000015c0)={r1, 0x0, 0xc4, 0x6d, &(0x7f0000001280)="05492a77c25216d29fa343de3d831faf9a510c6bad5902b99450670961b77c61b5c22b334d6774a10d222c2a0c5ffe04d9ef20e239364a4d51c4f3c90c4fd1530ca4a9dd61025bb527a84ac847ceea204a32fc1b9687a31609061694ae6565b2e2c5e06e0e3e0bdaac3f9688ede1d8ff7e5ca97bdd55b243c03387edc53ceeb2d42dd979f717827e305461df59a2c5df3bb265577e71e10d880cbda375deec7e40770f22fd2ea5774bb70197574597dbbb6c1a83b75ed80730fb00292d45c43831102b77", &(0x7f0000001380)=""/109, 0x4, 0x0, 0xae, 0xfc, &(0x7f0000001400)="9684859d4cb2262dca84c2fd98f692d04653e163426dfb9c97619932be2251c49971bf3351f613f9d80dd64cc5207511f1516fcb9a2cf12883bcdbb1ea3f48a037f43cfe6a8aeb6670b3e976dac7c01b34c4f04964d7dca79f35280b4fa44469fe054af3a36ffb4ab3169a4221804640cf5dc98b28e2f51a5b239c7216012dbde7a230ba895695d22582a29ebf9ace2944a44683869635926952ff3481fc2a8078ab36e66da040c1a061bb3b534f", &(0x7f00000014c0)="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", 0x0, 0x0, 0x6}, 0x50) (async) r7 = syz_init_net_socket$bt_hidp(0x1f, 0x3, 0x6) (async) ioctl$sock_ipv6_tunnel_SIOCGET6RD(r0, 0x89f8, &(0x7f00000016c0)={'erspan0\x00', &(0x7f0000001640)={'tunl0\x00', r5, 0x1, 0x8000, 0x401, 0x81, {{0x13, 0x4, 0x1, 0x2c, 0x4c, 0x65, 0x0, 0x2, 0x2f, 0x0, @empty, @multicast1, {[@ra={0x94, 0x4, 0x1}, @ra={0x94, 0x4}, @generic={0x44, 0x3, "8b"}, @noop, @timestamp={0x44, 0x1c, 0xd2, 0x0, 0x6, [0x2, 0x0, 0xbaf5, 0x8, 0x0, 0xfffffff3]}, @timestamp={0x44, 0x10, 0x13, 0x0, 0x1, [0x4, 0x207e, 0x4f6f]}]}}}}}) ioctl$sock_ipv4_tunnel_SIOCDELTUNNEL(r1, 0x89f2, &(0x7f00000017c0)={'syztnl1\x00', &(0x7f0000001700)={'syztnl1\x00', r8, 0x8, 0x7, 0x7, 0x7, {{0x1b, 0x4, 0x1, 0x0, 0x6c, 0x64, 0x0, 0x0, 0x4, 0x0, @broadcast, @dev={0xac, 0x14, 0x14, 0x27}, {[@timestamp_prespec={0x44, 0x34, 0x91, 0x3, 0x5, [{@dev={0xac, 0x14, 0x14, 0x27}, 0x5}, {@multicast2, 0x5ca}, {@private=0xa010101}, {@private=0xa010101}, {@empty, 0x5}, {@local, 0xe}]}, @end, @end, @timestamp={0x44, 0x8, 0xaf, 0x0, 0x7, [0xffffffff]}, @generic={0x82, 0x11, "ae244a2df486c7808f2d39bf9f605c"}, @rr={0x7, 0x7, 0x1, [@multicast2]}]}}}}}) bind$ax25(r2, &(0x7f0000001800)={{0x3, @default, 0x8}, [@bcast, @netrom={0xbb, 0xbb, 0xbb, 0xbb, 0xbb, 0x0, 0x0}, @bcast, @remote={0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0x1}, @netrom={0xbb, 0xbb, 0xbb, 0xbb, 0xbb, 0x0, 0x0}, @default, @remote={0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0x1}, @null]}, 0x48) (async) r9 = syz_init_net_socket$bt_rfcomm(0x1f, 0x1, 0x3) splice(r0, &(0x7f0000001880)=0x8, r9, &(0x7f00000018c0)=0x1ff, 0x85, 0xc) ioctl$XFS_IOC_FSINUMBERS(r7, 0xc0205867, &(0x7f0000001d40)={&(0x7f0000001900)=0x3, 0x4, &(0x7f0000001940)=[{}, {}, {}, {}, {}], &(0x7f0000001d00)}) (async) ioctl$XFS_IOC_GETBMAP(r3, 0xc0205826, &(0x7f0000001d80)={0x3, 0x5, 0x3, 0x3, 0xfffffe01}) 3.002787567s ago: executing program 2 (id=14492): r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x7101}) r1 = socket(0x400000000010, 0x3, 0x0) r2 = socket$unix(0x1, 0x1, 0x0) ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) bind$alg(r1, &(0x7f0000000280)={0x26, 'rng\x00', 0x0, 0x0, 'drbg_nopr_hmac_sha1\x00'}, 0x58) sendmsg$nl_route_sched(r1, &(0x7f00000012c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000005c0)=@newqdisc={0x38, 0x24, 0x4ee4e6a52ff56541, 0x70bd2a, 0xffffffff, {0x0, 0x0, 0x0, r3, {0x0, 0xfff1}, {0xffff, 0xffff}}, [@qdisc_kind_options=@q_multiq={{0xb}, {0x8, 0x2, {0x0, 0x2}}}]}, 0x38}}, 0x0) sendmsg$nl_route_sched(r1, &(0x7f0000000000)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000180)=@newtfilter={0x8c, 0x2c, 0xd27, 0x70bd25, 0x25dfdbfc, {0x0, 0x0, 0x0, r3, {0xd, 0xfff1}, {}, {0xfff1, 0x9}}, [@filter_kind_options=@f_flow={{0x9}, {0x5c, 0x2, [@TCA_FLOW_EMATCHES={0x58, 0xb, 0x0, 0x1, [@TCA_EMATCH_TREE_LIST={0x4c, 0x2, 0x0, 0x1, [@TCF_EM_U32={0x1c, 0x1, 0x0, 0x0, {{0x7, 0x3, 0x67e6}, {0x20000009, 0x3, 0x5, 0x9}}}, @TCF_EM_NBYTE={0x10, 0x2, 0x0, 0x0, {{0x24, 0x2, 0x1}, {0x8, 0x0, 0x2}}}, @TCF_EM_U32={0x1c, 0x3, 0x0, 0x0, {{0x2, 0x3, 0x300}, {0x10001, 0xc1, 0x6, 0x3}}}]}, @TCA_EMATCH_TREE_HDR={0x8, 0x1, {0x3}}]}]}}]}, 0x8c}}, 0x20004000) 2.939206927s ago: executing program 2 (id=14493): unshare(0x20000400) getsockopt$inet_tcp_TCP_ZEROCOPY_RECEIVE(0xffffffffffffffff, 0x6, 0x23, 0x0, 0x0) bind$bt_hci(0xffffffffffffffff, &(0x7f0000000000)={0x1f, 0xffffffffffffffff, 0x3}, 0x6) r0 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_tcp_int(r0, 0x6, 0x13, &(0x7f0000000040)=0x100000001, 0x76dc) connect$inet6(r0, &(0x7f0000000080)={0xa, 0x0, 0xfffffffe, @ipv4={'\x00', '\xff\xff', @local}, 0x4}, 0x1c) setsockopt$inet6_tcp_TCP_ULP(r0, 0x6, 0x1f, &(0x7f00000002c0), 0x4) setsockopt$inet6_tcp_TLS_TX(r0, 0x11a, 0x2, &(0x7f00000003c0)=@gcm_256={{0x304}, '|\x00', "d3caadf08a6e8bfb134010f988010dfb83ebfbc27bed7d00", "f83d3940", "6ff5004c27f89cd1"}, 0x38) setsockopt$inet6_tcp_TLS_RX(r0, 0x11a, 0x2, &(0x7f0000000000)=@gcm_256={{}, "5a6db1cb8ef7241a", "3d555ac9c65c6fc74a611b2abdbf647873cdcc6f35df5319a462964a5ff14fd2", "7325045a", "57d9b1394ab6f637"}, 0x38) r1 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) bind$bt_hci(r1, &(0x7f0000000000)={0x1f, 0xffffffffffffffff, 0x4}, 0x6) r2 = socket$inet_smc(0x2b, 0x1, 0x0) setsockopt$inet_tcp_buf(r2, 0x6, 0xd, &(0x7f0000000280)="f5", 0x1) r3 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='cgroup.controllers\x00', 0x275a, 0x0) write$tun(r3, &(0x7f0000000000)=ANY=[], 0x38) mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x1, 0x10012, r3, 0x0) bind$inet(r2, &(0x7f0000000040)={0x2, 0x4e23, @dev={0xac, 0x14, 0x14, 0x1b}}, 0x10) r4 = socket$nl_generic(0x10, 0x3, 0x10) r5 = syz_genetlink_get_family_id$mptcp(&(0x7f0000000040), 0xffffffffffffffff) sendmsg$MPTCP_PM_CMD_GET_ADDR(r4, &(0x7f0000000200)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000140)={0x30, r5, 0x1, 0x70bd2c, 0x25dfdbff, {}, [@MPTCP_PM_ATTR_ADDR={0x1c, 0x1, 0x0, 0x1, [@MPTCP_PM_ADDR_ATTR_ADDR4={0x8, 0x3, @initdev={0xac, 0x1e, 0x1, 0x0}}, @MPTCP_PM_ADDR_ATTR_IF_IDX={0x8}, @MPTCP_PM_ADDR_ATTR_FAMILY={0x6, 0x1, 0x2}]}]}, 0x30}, 0x1, 0x0, 0x0, 0x4010}, 0xc100) ioctl$XFS_IOC_START_COMMIT(r2, 0x80585882, 0x0) write$bt_hci(r1, &(0x7f00000000c0)=ANY=[@ANYBLOB="0000ffff3201"], 0x138) write$bt_hci(0xffffffffffffffff, &(0x7f0000000200)=ANY=[@ANYRES32=r1, @ANYRES8=r0, @ANYRES8=0x0, @ANYRES32=r0], 0x6) socket$unix(0x1, 0x47096d31e70cf991, 0x0) r7 = socket$qrtr(0x2a, 0x2, 0x0) ioctl$sock_inet_SIOCGIFDSTADDR(r7, 0x8917, &(0x7f0000000040)={'xfrm0\x00', {0x2, 0x0, @empty}}) socket$inet_sctp(0x2, 0x5, 0x84) bpf$BPF_PROG_DETACH(0x9, &(0x7f0000000240)=ANY=[@ANYRES32, @ANYRES32, @ANYBLOB="1000"/12, @ANYRES16=r6, @ANYBLOB, @ANYRES64=0x0], 0x20) getsockopt$inet_sctp_SCTP_GET_ASSOC_STATS(0xffffffffffffffff, 0x84, 0x70, &(0x7f0000000080)={0x0, @in={{0x2, 0x4e23, @broadcast}}, [0x2, 0x81, 0x374, 0xa8, 0x5, 0x7, 0x4, 0x9, 0x7, 0x800, 0x5, 0x3ff, 0x0, 0x9, 0x8]}, &(0x7f0000000180)=0x100) bpf$MAP_CREATE(0x0, &(0x7f0000000640)=@base={0x17, 0x0, 0x0, 0xff, 0x0, 0x1}, 0x48) 2.63613231s ago: executing program 3 (id=14494): bpf$PROG_LOAD(0x5, &(0x7f0000000140)={0x0, 0x5, &(0x7f00000003c0)=@framed={{0x18, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x2}, [@exit, @ldst={0x1, 0x1, 0x3, 0x0, 0xa, 0xfffffffffffffffc}]}, &(0x7f0000000980)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0xa, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xdb}, 0x94) 2.559021514s ago: executing program 3 (id=14495): r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000140), 0x48241, 0x0) r1 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r1, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f00000000c0)=ANY=[@ANYBLOB="1c000000240021000000000000000000000000000600040021f6"], 0x1c}}, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f00000000c0)={'syzkaller1\x00', 0x6bf1c2d5adba8c32}) r2 = socket$kcm(0x2, 0xa, 0x2) ioctl$SIOCSIFHWADDR(r2, 0x8914, &(0x7f0000000180)={'syzkaller1\x00', @link_local}) r3 = socket$pppl2tp(0x18, 0x1, 0x1) r4 = socket$inet_udp(0x2, 0x2, 0x0) bind$inet(r4, &(0x7f00000001c0)={0x2, 0x0, @dev={0xac, 0x14, 0x14, 0x14}}, 0x10) connect$inet(r4, &(0x7f0000000480)={0x2, 0x0, @multicast1}, 0x10) r5 = socket$pppl2tp(0x18, 0x1, 0x1) connect$pppl2tp(r5, &(0x7f0000000240)=@pppol2tpin6={0x18, 0x1, {0x0, r4, 0x2, 0x0, 0x0, 0x0, {0xa, 0x0, 0x0, @private1}}}, 0x32) connect$pppl2tp(r3, &(0x7f0000000140)=@pppol2tp={0x18, 0x1, {0x0, 0xffffffffffffffff, {0x2, 0x4e21, @empty}, 0x2, 0x2, 0x2}}, 0x26) write$tun(r0, &(0x7f0000000440)={@val={0x70}, @void, @eth={@broadcast, @remote, @void, {@ipv4={0x800, @udp={{0x5, 0x4, 0x0, 0x0, 0x14, 0x0, 0x2000, 0x0, 0x2f, 0x0, @initdev={0xac, 0x1e, 0x0, 0x0}, @multicast1}, {0x0, 0x6558, 0x18, 0x0, @wg=@data={0x4, 0x0, 0xffffdd86}}}}}}}, 0xfdef) openat$tun(0xffffffffffffff9c, &(0x7f0000000140), 0x48241, 0x0) (async) socket$nl_xfrm(0x10, 0x3, 0x6) (async) sendmsg$nl_xfrm(r1, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f00000000c0)=ANY=[@ANYBLOB="1c000000240021000000000000000000000000000600040021f6"], 0x1c}}, 0x0) (async) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f00000000c0)={'syzkaller1\x00', 0x6bf1c2d5adba8c32}) (async) socket$kcm(0x2, 0xa, 0x2) (async) ioctl$SIOCSIFHWADDR(r2, 0x8914, &(0x7f0000000180)={'syzkaller1\x00', @link_local}) (async) socket$pppl2tp(0x18, 0x1, 0x1) (async) socket$inet_udp(0x2, 0x2, 0x0) (async) bind$inet(r4, &(0x7f00000001c0)={0x2, 0x0, @dev={0xac, 0x14, 0x14, 0x14}}, 0x10) (async) connect$inet(r4, &(0x7f0000000480)={0x2, 0x0, @multicast1}, 0x10) (async) socket$pppl2tp(0x18, 0x1, 0x1) (async) connect$pppl2tp(r5, &(0x7f0000000240)=@pppol2tpin6={0x18, 0x1, {0x0, r4, 0x2, 0x0, 0x0, 0x0, {0xa, 0x0, 0x0, @private1}}}, 0x32) (async) connect$pppl2tp(r3, &(0x7f0000000140)=@pppol2tp={0x18, 0x1, {0x0, 0xffffffffffffffff, {0x2, 0x4e21, @empty}, 0x2, 0x2, 0x2}}, 0x26) (async) write$tun(r0, &(0x7f0000000440)={@val={0x70}, @void, @eth={@broadcast, @remote, @void, {@ipv4={0x800, @udp={{0x5, 0x4, 0x0, 0x0, 0x14, 0x0, 0x2000, 0x0, 0x2f, 0x0, @initdev={0xac, 0x1e, 0x0, 0x0}, @multicast1}, {0x0, 0x6558, 0x18, 0x0, @wg=@data={0x4, 0x0, 0xffffdd86}}}}}}}, 0xfdef) (async) 2.498431228s ago: executing program 3 (id=14496): socket$nl_netfilter(0x10, 0x3, 0xc) r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x7101}) r1 = socket$unix(0x1, 0x1, 0x0) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) r3 = socket(0x10, 0x3, 0x0) syz_emit_ethernet(0xc1, &(0x7f00000006c0)=ANY=[@ANYBLOB="bbbb00000000aaaaaaaaaa070500000000b30000000006069000000000bbac1414aa4e224001", @ANYRES32=0x41424344, @ANYRES32=0x41424344, @ANYBLOB="500200009078000062c74fba250246aab60879f9a4913759f7630c93bd0cd0b0d990a78e1e0900000000000000b390ff412e187f2cde25f6e5e90efeec7749349e29c31666359b072b6e78192369aba863781fbc774e94c829fd4733abbf1cd4ba5cb79973a11fdca1601a5774fe7315b46c8a42bdf0692c59caa32c52b4d814f1794c7e5440be308daa81647818fdf1f13ed0"], 0x0) sendmsg$nl_route_sched(r3, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000800)=@newqdisc={0x2c, 0x24, 0xf0b, 0x70bd26, 0x0, {0x0, 0x0, 0x0, r2, {0xffe0, 0xffff}, {0x1, 0x7}, {0xa}}, [@TCA_INGRESS_BLOCK={0x8, 0xd, 0xa6da}]}, 0x2c}}, 0x20000000) r4 = bpf$MAP_CREATE(0x0, &(0x7f00000000c0)=ANY=[@ANYBLOB="1b00000000000000000000000080"], 0x50) r5 = bpf$PROG_LOAD(0x5, &(0x7f00000001c0)={0xc, 0x14, &(0x7f0000000280)=ANY=[@ANYBLOB="1800000005000000000000000000030018150000", @ANYRES32=r4, @ANYBLOB="0000000000000000b7080000000000807b5af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b7040000020000158500000015000000180100002020752500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000009000000850000000600000095"], &(0x7f00000007c0)='GPL\x00', 0x2, 0x0, 0x0, 0x40f00, 0x2, '\x00', 0x0, @fallback=0x1c, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000d80)={r5, 0x18000000000002a0, 0xe, 0x0, &(0x7f0000000040)="76ea090000000000009ba56a88ca", 0x0, 0x6400, 0x60000000, 0x0, 0x0, 0x0, 0x0}, 0x7f) r6 = socket$inet6_tcp(0xa, 0x1, 0x0) bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000040)={&(0x7f0000000580)=ANY=[@ANYBLOB="9feb01001800000000000000380000003800000006008000045ed650d100000e0300000000000000000000000000000d0400000010000000000000010000000041008002000000000000000905000000000000006100"], 0x0, 0x56}, 0x28) setsockopt$sock_int(r6, 0x1, 0xf, &(0x7f0000000180)=0x800001, 0x4) bind$inet6(r6, &(0x7f0000000140)={0xa, 0x4e22, 0x2, @ipv4={'\x00', '\xff\xff', @broadcast}}, 0x1c) r7 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$sock_int(r7, 0x1, 0x26, &(0x7f0000000180)=0x800001, 0x4) r8 = socket$inet6_sctp(0xa, 0x5, 0x84) shutdown(r8, 0x0) getsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX3(r8, 0x84, 0x6f, &(0x7f0000000000)={0x0, 0x1c, &(0x7f00000000c0)=[@in6={0xa, 0x0, 0x0, @private2}]}, &(0x7f0000000180)=0x10) setsockopt$inet_sctp6_SCTP_PEER_ADDR_THLDS(r8, 0x84, 0x85, &(0x7f0000000000)={r9, @in={{0x2, 0x0, @empty}}, 0x0, 0x7ffe}, 0x90) setsockopt$inet_sctp6_SCTP_PEER_ADDR_PARAMS(r8, 0x84, 0x9, &(0x7f0000000340)={r9, @in6={{0xa, 0x4e20, 0x5, @private0, 0x2800}}, 0xb, 0x1000, 0x1fffe, 0x0, 0x34, 0x1000, 0x4}, 0x9c) bind$inet6(r7, &(0x7f0000000140)={0xa, 0x4e22, 0xffffff7f, @ipv4={'\x00', '\xff\xff', @empty}}, 0x1c) bpf$BPF_GET_PROG_INFO(0xf, &(0x7f0000000540)={r1, 0xe0, &(0x7f0000000440)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, &(0x7f0000000140)=[0x0, 0x0, 0x0], ""/16, 0x0, 0x0, 0x0, 0x0, 0x1, 0x2, &(0x7f0000000180)=[0x0], &(0x7f00000001c0)=[0x0, 0x0], 0x0, 0x8a, &(0x7f0000000280)=[{}, {}, {}, {}, {}, {}], 0x30, 0x10, &(0x7f00000002c0), &(0x7f00000003c0), 0x8, 0xe, 0x8, 0x8, &(0x7f0000000400)}}, 0x10) r10 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r10, &(0x7f000000c2c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f00000003c0)=ANY=[@ANYBLOB="140000001000010000000000000000001c6a000a28000000000a0101000000005e1affd5020000000900010073797a300000000008000240000000032c000000030a01030000e6ff00000000020000000900010073797a30000000000900030073797a320000000014000000110001"], 0x7c}}, 0x0) sendmsg$NFT_BATCH(r10, &(0x7f0000000080)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000e00)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a60010000060a09040000000000000000020000000900010073797a300000000028010480240101800a0001006d617463680000001401028008000240000000030d000100636f6e6e6d61726b00000000bf0003005bc0660623a2bfd3d72c173b3cbeb5911e1a9923187009938b5718d70b2d2e408ca2372c6ac0a72bfd73131bd5c25685b881616db223ff1be6f2aa5dac9a70bcec2d7288d0ad130f14327986404d62fee2b7d5d001fa7859cf8eeefa502a8ee85460120a4d2d3c55a73c6009975fc8e4801eb83c9127e8aaa1c64370fa7a2e62b3599717bd6268000bfbfe7642c71c4d10a3563608f520121c77d56be924f2e10a81c5a5077a0228725e62e7faa9895da3c793fb321acd02f4684a000e000100636f6e6e6c696d69740000002600030079f0213ecd9160e06cf2e4856b3683715e7177d7d86ec089c8a510cd76e2205abc02450018000480140001800d00010073796e70726f787900000000140000001100010000000000000000000000000af19726790ed2a83056798d157cba1a9eb3ab1149aad7d5b69ae7863860aa0e03198a1adbfbc1fbe2bcf6114e0656e71a8e7a0b71445d9743431a890f3c8edce358a12ec5e2af848286b14ca2de880f8a6f898953b171674a745a7776feea476d020fdf1831c2baed8282f7c3c425e54aff139a84e50ea4bf7b9f10d61a7d435b4a849a105bb46c0568a272e107ab7997896d1dcf5a577328477ad6902f091dd0185e25f96c058f1dc87256ea5d713ff60a2288c81693abc8db30fd9f"], 0x188}}, 0x0) r11 = socket$nl_generic(0x10, 0x3, 0x10) r12 = syz_genetlink_get_family_id$mptcp(&(0x7f0000000300), r11) sendmsg$MPTCP_PM_CMD_GET_ADDR(r11, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000c40)={&(0x7f0000000340)={0x14, r12, 0xffffffffffffffff, 0x70bd2a, 0x25dfdbf8, {0x3, 0x0, 0x14}}, 0x14}, 0x1, 0x0, 0x0, 0x4005c}, 0x400c084) 2.437295377s ago: executing program 4 (id=14497): socket$inet_udp(0x2, 0x2, 0x0) r0 = socket$inet_icmp_raw(0x2, 0x3, 0x1) syz_emit_ethernet(0xbe, &(0x7f0000000000)={@link_local, @remote, @void, {@ipv4={0x800, @udp={{0x5, 0x4, 0x0, 0x0, 0xb0, 0x66, 0x0, 0x0, 0x11, 0x0, @private=0x800001c, @local}, {0x0, 0x17c1, 0x9c, 0x0, @wg=@initiation={0x1, 0x2, "4af1c787262f43baa44f6af78c8b7e82a2db1bcf423afe5d787928e21771ce0d", "7f859ffcd43656d39e09312599ccd911ad5b94275f847174da851496ea71c3ea26439207bdf5183a9ff4a72eca1ea4c0", "e943b2773be386948391815a945faa8a2e75e180155a3215d35f0056", {"99a38817e8ae9ec8aa3816cb67e7e226", "e9222dc9c5a324be389d9901ae71595f"}}}}}}}, 0x0) sendto$inet(r0, &(0x7f0000000440)="c0cf618aa15b06ce0b414a97c088720c080001000000000061bc543a0ad68f007335115d01a0338106e7eaeb94eb1e72b8792cbe6e6cd8daccd72373d6ec85cab942e62e3ccdc9e5c449c4ff68bedf6757ff6623473b0d00a1dc33d168f18e948783cce9957acb908d84bd549f864ffdf0d3de0cdc15a8065615fdaf9f31dcb147dd958d6a5d447ca3c66386bfc91f", 0x8f, 0x40800, 0x0, 0x0) (async) sendto$inet(r0, &(0x7f0000000440)="c0cf618aa15b06ce0b414a97c088720c080001000000000061bc543a0ad68f007335115d01a0338106e7eaeb94eb1e72b8792cbe6e6cd8daccd72373d6ec85cab942e62e3ccdc9e5c449c4ff68bedf6757ff6623473b0d00a1dc33d168f18e948783cce9957acb908d84bd549f864ffdf0d3de0cdc15a8065615fdaf9f31dcb147dd958d6a5d447ca3c66386bfc91f", 0x8f, 0x40800, 0x0, 0x0) setsockopt$IPT_SO_SET_REPLACE(r0, 0x0, 0x40, &(0x7f0000000000)=@nat={'nat\x00', 0x670, 0x5, 0x398, 0xf0, 0x188, 0xfeffffff, 0xf0, 0x188, 0x300, 0x300, 0xffffffff, 0x300, 0x300, 0x5, 0x0, {[{{@ip={@remote, @dev={0xac, 0x14, 0x14, 0xe}, 0xff000000, 0xff000000, 'wg1\x00', 'bridge0\x00', {0xff}, {}, 0x88, 0x1, 0x41}, 0x0, 0xb8, 0xf0, 0x0, {}, [@common=@socket0={{0x20}}, @common=@inet=@ecn={{0x28}, {0x1, 0x2, 0x8, 0x3}}]}, @SNAT0={0x38, 'SNAT\x00', 0x0, {0x1, {0x8, @multicast2, @multicast2, @port=0x4e21, @gre_key=0x8}}}}, {{@uncond, 0x0, 0x70, 0x98, 0x0, {0x0, 0x7}}, @common=@unspec=@STANDARD={0x28, '\x00', 0x0, 0x188}}, {{@uncond, 0x0, 0x70, 0xd0}, @common=@CLUSTERIP={0x60, 'CLUSTERIP\x00', 0x0, {0x1, @broadcast, 0x847, 0x7, [0x3a, 0x5, 0x3e, 0x1a, 0x6, 0x16, 0x2d, 0x35, 0x1, 0x4, 0x3b, 0x3f, 0x29, 0x33, 0x3f, 0x5], 0x0, 0x2, 0x4}}}, {{@ip={@multicast2, @multicast2, 0x0, 0x0, 'veth1_virt_wifi\x00', 'pim6reg0\x00', {}, {}, 0x6c}, 0x0, 0x70, 0xa8}, @REDIRECT={0x38, 'REDIRECT\x00', 0x0, {0x1, {0x10, @remote, @multicast2, @icmp_id=0x68, @icmp_id=0x68}}}}], {{'\x00', 0x0, 0x70, 0x98}, {0x28}}}}, 0x3f8) 2.378675935s ago: executing program 0 (id=14498): r0 = socket(0x10, 0x803, 0x0) sendmsg$IPVS_CMD_SET_INFO(r0, 0x0, 0x0) getsockname$packet(r0, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000000)={0x0, 0x3c}}, 0x0) r2 = socket$netlink(0x10, 0x3, 0x4) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000040)) write(r2, &(0x7f0000000100)="29000000140005b7ff000000040860eb0101b6ff021596db2d6d6974b5d728aa4b5d02c26ed638eeb7", 0x29) r3 = socket$inet6_tcp(0xa, 0x1, 0x0) r4 = socket$nl_generic(0x10, 0x3, 0x10) r5 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000400), r0) sendmsg$NL80211_CMD_REMAIN_ON_CHANNEL(r0, &(0x7f0000000480)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000007c0)=ANY=[@ANYRESDEC, @ANYRES8=r3, @ANYRES64=r3, @ANYRES8=r5, @ANYRESDEC=r4, @ANYRESDEC], 0x20}, 0x1, 0x0, 0x0, 0x20004000}, 0x0) sendmsg$NL80211_CMD_RELOAD_REGDB(r4, &(0x7f00000006c0)={0x0, 0x0, &(0x7f0000000440)={&(0x7f0000000340)={0x14, r5, 0x1, 0x70bd2d, 0x25dfdbfe}, 0x14}, 0x1, 0x0, 0x0, 0x20000000}, 0x20008004) ioctl$sock_SIOCGIFINDEX_80211(r3, 0x8933, &(0x7f0000000640)={'wlan1\x00'}) sendmsg$NL80211_CMD_UPDATE_CONNECT_PARAMS(0xffffffffffffffff, &(0x7f0000001900)={&(0x7f0000000380)={0x10, 0x0, 0x0, 0x100}, 0xc, &(0x7f00000018c0)={&(0x7f0000002c00)=ANY=[@ANYBLOB="38120000", @ANYRESOCT=0x0, @ANYRESOCT=r1, @ANYRES16, @ANYBLOB="c8002a001001930301ae010481036cc80105bc8301ecc82d1a00031300000000000000010700f900120000000800050000000882414206eb04000000ffffffffffff0d0000000802110000007f00000006000000030508021100000108000000040802110000000100000005ffffffffffff080000008c10be091a2eb22562b0d1e337f2e008673b04060402070002002d1a0100020600000000000000010005000c000000010012000000202d1a00081600000000000001000e0005000a000000080409000000fa0600f900b46000000600fb00ff0100007200fa00a124d8b635942e46386b1b9a8af7ae9d4eb6c86cf7879f655274fcbac702541e6710b0bf1b64e33b249377c42f2cacea636797af87baa281fc5be729c35fddab2a3b9e5bc851dde6290f6f67ba5b605918e2936b2b37d34ec99a6e9fea188bbb70d3f95aeeb8f3505be5ee8b3ebe00000600fb000f0000003300fa007e10cf471875082443becbfb9d3a1a2f7255f33a68c83d54b64e9e26cb5cb7cc14995f9be86b13e706009b50fbe59c000410fa004b37330c9a17589db604b727d5272db8cd11c8efc859f894108286f5678cb405b429e3d44cc050e4e7fd247faab487ba01fbf76aa7fe0ddfdb1db3dba5a53ea13718d10604374295ac2f254feac0917247805acc381696eec9c8b266fb52c1aefe3cf4b3b7ebe17daf6c3951ca18e1b04a9d8d3246fbb40e7f183ea40d4484b95573ccacb82f484744cbe6c404ecabab814ce2ac79faea4b2b2ac196f38518c636a77ed1017de63a9ea7911d30f1e15e8012309f5a503bbf9f86545e8384d1f3868213bdfa823bc1c3c6e573498661a48bcb054a5c866d9e4da3ba8d829c825b6f93ca8fe0d8f9aec39ccae61fb9860b4bff3035beb5d9cd415179bfb35c946f909ce17776ac5a63d9059bae84f83b0336f889d46700243252721e68c7ae46df89316b6e5808d98d4547d1e3321e17d5dbab52b8d0408c7149a79bda26597c11553acfcfaffb237ad65c89ac5b5036a942223acf85a53ff867843422407e00109af40615f377d33330983703d7624b1de409db7038d40c2dbf49beb0ebe457d821a57374392398b055d748aa93de2efcd4817ca3b4f1e4d1f8a38047f6bbfd62eaba56885b85fd56081c0f2f37185ecefccad5c5096c9880c495562f6be6b94e5508b296f2cf4cf686a2da72c59434900fea664ee28dfafff1f073cfd6b11e112b466e8646b86d9661ad8165b7be3add23c071b1b8f04760681ffd24fe024cf23683d27efe582379b75adc352f8655ef5e498f32d35b9be5a297222888332320ceacc809433e44621182f02e380ec7bce7ad75293953a614a875ba26d76d87df122f61a057f60ce92915bb3439c141e7243c40d06a00f60916b2b14612166182e0752fd5e6de43f6fc1eab0a496e37ce2162e4cf6eeb0be4b6b78e9e908b680047c7de273088b9f32be4c96965729e58d319101b72460274cd08b3ed50d1806514a58881daf78690001ef36b07872d44e244868f9ff274c71ebb830b82f8c65c0bf07e8cb0ebea47edfde721474d9704ebe33af892a6ddcc0ec446e7b74a4d8a03db971f7e2bd53fcbd7b478bc825c9f5d0df3e881310498c1234374eacf857084a291722e9f2ae507fa3c2d15df61cd0567222dcf3a18c3000cb85fb9007adc7271068ab50e1d5eac870b6caeead8afecd3f6258fb1dc9106cb0f73caba69364fb23d5601320269b0735bdadf5e78d3df42641f5630c34d3aa2d46e90ce31d18405b4b77cc463d00eb160363e4d19977a6a4a96d60b1095681a8772b98f4dc1008cd03cd74879512b879bc1bca76043ab9980af68bdfa029ac6beefc3e284f493a2e8c01696c0d9d156b50e3d867bc3884f740e261aefee14354033ea0898c839e95a79067225a55f55be5a6dcd16aa66e661b661bd18aa91acaed3059f25b9a95f57731c2b5632a3576fdac6e547220b807e4c1062fccde24c1fab33b9e44759b4964f6e7f880cb5d1537b8c489e813b5a689bdfc620ee7b5d29a814cf2eb7d5b7fd15fc1c309e66da7f7ef4ee9189c6d9c0e918af0d0e4f1f57e11ecdfc04f55b5a3dddfc483e3f8730c63205988df7c163f64648936a88ae975adc2c50ae56b1c163787aaa7ba716d804f5e6bd8f1b1338871318aa066730d9e96a626ee84343738ed51a6d22175948bf81804b346f75b509907d5c21c6e6ae722e438673720c3ad7a575a6231755fbf8b104c9a830d47353c00d9fd78b839cc8259e095b39b8255bec6910ec0dc0408aa121d7b92a1eb9c8651256db5ceef34ee6d6ce5d72450e923e1ab0438e5a161345a3f7f9d2ba7bcaba1f9f243b5744bfac464b5cc79401584497f3fdecd6b7263361fec78ce0433541e347a6c738dcd57453a5a971b9e71886c90e0dec627e71f6abd31a9a10b08fbbdae83f63acc237c9427895645df83e14edefd9e6039714637b6d5912e844dc6fe195096183fc1b96b7761d3089349295712e9a65c5dcad3a3efa551579df919e903daa87607692056fc23001219eed963076568e729d88d443115bbb3a680240b1ac74ed26cd137aebb79be7acccb73b92e70d9422c08dd0a61665b6d72c900869c2e0c6ecc48cc7e3d64daee58cf01824ddad88ecbadb163f3584c6834ffb66fdfe78069433fa1aeee3d746fa5b9111de638263f7afb0f5461979f7f2f4774f381c4b094d4ad9f5ca988b9cbb7b91607bf8707bf16682462709d4ab3ca22772338608332d09a12fcb2938b1e65949a76688a7fc86924aa38afe0b90d37048d69e73a0b99a3584101c647d79f284ccba120d8c96d287891d10648415e3aa09a110bbd22505afcace48c2c70ea837b25bf7ed4bdbb4fe89643438b17798241359b560aaf88f6ef07d68f5cf0c138edcadce2fa38506de6a8096f98909c10ab69da33fc676e554bb56d04706b6157745ff88f0ebfc1eedff191378af5c4aa21300cefd6fbb2c7c9dba20546d17773ba50ab2e56af79ef0b9728472f161e76c9f08c22a45de62d5243d842779c739122415d32016d24f54b47b6523524dfc04ec0f6d002a681169ddf47cba8b8631c999ecf65c34a00445fbdebf73c95f0f0e3b9f005283f418b98b214f83428cd1978f91832093c873b7abc3078554566aafbf5cfe42e595efd5792071e870519f65ae6286e101facfae7b2808153738f5bc3eeb5a3749e3db9133cf686c2c18173beea1950ea7a8dc2ce32ccd0f4ea751dd7895a39eb583b78972dc09deaa6b5fb1abdd67c24d0d7700649c51828fe0bda349b6960d9250483da7acf82b5ee701001fa48c7d25c90dfab836c32a59eefaf1e7279592516ff93a83b68f30a93991dc37842f69633498dab7dbb4756ae6f708d936485d6cca6d31f62935b4741300d402d07f19b8b87bebaa674ee0e2b4303c52d6c1480d3d9f63ce9f33010bfe19b3407ef67a944c299f3a830ae27063b3c1d103afd7222065900cdeb40d21aeebff275f7daddb70aef3cfca57d349c6dbcdfd8d90fc2727fb6ed19aa6dfcc4eb1fbc09dbf80a6dc44a0cac039ebe0634516b4e77fd2eb4e45a8a346c093b1f2b3871dbae3cbb23a4a5ed85ad93c1869bb3fae22279d41d4b17d5cae5605c035019b84df1e4a9a3c16022dfdda156f7ddba7874950077be843fc109001cffc8264895e5cc323a465d8d15ab8117c4141910ba2305f5ea22b79d8c800f98a380125ad4dde15e06d056d829eb8ef41a8425ea435ece5d962f2a289571fd084827e74d3b6a765ece373a9d7b18c22bebe361eb672a60f458f9e0c37417aae5496f82b763bdbc6ad442c2a9e7ce218e25e55a12cb40f7c6536c1c9c6595ad878fae79e58cc84e819cec1111e039151a66e081b8b07ea8ac38c3e45d23054f2d19b83d900e2d1ada6ce767bb0e937bdf82cc8539d0b2e9ee9e9b7462194477ac572112ddf03ab43b373f094418662b989f3c001ef261d0d67bfcaf4d57f28de1cc9e9004bd03142ba66b58b5d416334aa5c2be4c0f7822203df8a118f239ee64b660fe28a0a0e2b52024b96bf2419963807f13ea374b8930c077ff70ba1c3243d95587d7fac373e07067f575c04951048318ade9e42f07cca63258fe05fa79799ac07f309819daf32e6daf20725a9a160643f21be894cb5f83d2bb15184a9b881a5bf363d5bfe24350f9d98c56d04a4074391ea139dd16d171c3e66ae550b12c11cef32d8b1e379df9acf9b80a10dd0435ef1f0778e14e255e43bf207473846c6ba6edd1e5b8603427b0829ef3a7f34d585cbbf2cd6a41abbe46dda4a4f1c39c8f7467c931c01a83235125680a49f2aea2925d3ffe2b28266d4d880a11f3b6fda37debf284fa4cbe8d76dbec4a0d7fb27e3a4b7fed8602e69e262245df7e74200f90d26a55eb703c8df232adc4f5d8ac6afab2597718ae017a148f43905e4ac472aba785c5d5884464751ddcf667a003da751972ca1d3d480dbb8fdb30b5b9bd07d3226637d613a17067a28bcde3abd061787af7b53d2a52b1a2ad6038827789ee2c9c8801a4d70595d15fd0c099526fac236cbd86dba5dc661887561c6668fdd09683e37f1b2b1db1d8ac00466444cbb037a9468c596bcdcd13d58f29f719152c1d2c4a61ff401c5c88d13a3946af704fcd8254fc56bcb93e1883f6b6ae9d3cbcdb141fb079c515fe70e0c572c67ff971e987330a29966dff4ffd8afdb7d1724d2c77e9f84cbcc5027e5f6843371e2dee35369c712d96757271d40ef1892a896aabca599d08607fce05e120d94b5e06ec84cab31d3fca0ed7f2644be23c922fcd8dd8a2942b53d530736897b9cbe6da0082caa9f796abf43103c275df74497c927a79c685ee38e3b3567163e173f05f7fb62f31ee69f6419a117094b5bc5852315fa12b9897f25a876b0e9fa1c1e5f7f8f206c3d39ae5a77d954209ecf2ed3bc5240b67710acc26345b9e57af7d6afc067e80781286e7d1501ac6a20acfddef9c3f784150674c9a3b6c4447e9b41d1f692e3904ef3d4ec3ef17ade974d4dec9dc43216814ee9a0db30794dad700ff1165db7c4dfcc75b46e9d4ebd61633f291b87517125131b7801af8f7f79bdabc07515c23f0cb46620b08b19ed3ebc79379c4dc171c54d161ce25f510d7b6e4d672e626ae87b3eea41eb6abba8612ace7ed8b545dfc8337c2fd6ffd5a7e95d4db44c21abdc6ddcc41b122c88d7a9b60c99a57ec855f943455397b1cf00c735f36b7a6edea674c88c4d709d59c50d265940fe05220751d5ea67443dcbf359a8e58c35cf3b9183436a96c6f06aeaeedfc9658a3a087dca95bdf4a2c8b7248719cf6b7a0dea6c574be52c9d1c426cf1d592a62cf38e4b84e26385848f2969495a6904f6817372d7e8aca0e3cd8dc7cca514dfb3bf5b63ab9c632e4953ee86e82c7447afd38f0b843cabaf0263a5db1314ffecfa7f9cefb5917d50d2f85e5323a6b0fb2d951bba37bbd0f74a3e07821feb4efe8148da695e00b52ce93d9ebc81a9b47e34757311363019aafd6b9ebc7764421935dfa465f018904929fa7612d5c929659c70287681619a5c23d5d8858266747186149f4b6138a81542f7230c0b1b99eb7df8e88f67d2aa9c7ab5f2be195ade8a1636137876fad0892eceb0675ac206c8084ab154da4e76d7e76a81891723cbe164125a64d43981be9dfd7ae587ac4c696eb6e4a7f635550104deef141ccbb0999222a952cb3bd920620532808430db8aa28ee7ac3224477d269c9874c40ee08d19f0932cfc560d541694b788e4ea05936fd42b999c59f6db079e748d551600309aef89071c30fe0ff5bb4920d2eac3c054e2871e17240e92527f627eff2184a9be241a31c0ac8474ae0f82861e60bd449065d8285c33edf31d631c360ace955143678cf45f1fd1f5da77b94c2d87555976eda3833265cdfee777b7d87514f344edeee24d8a9dda9b0bb35552432d26ea874853acffc85958a05be561c8845236393e69aedd7eef8dfcccc26d2c66c20ced811f8eb6613cbbf3e97711912840de7d4e2a7987567d4cd7bd116be665d7170310efc740995493ea25d5239c9345f1e8360bdeea3c89edb2d3deb74a0f372b0770c81e1b57884abebbca40a6dd70d990c59538821c8c8bbaf18ff21caa9b155c5582177066ecd445817ea567ad508fce7751f62e594d99a4bec2fba725827a3d845ce152015c9c2c37283af56590efb4e22e0c017ba992227be8acd968257a2a3197f11a6d4c68423cd74e2c32407104ecc883c5c06136470cea05637e154425d27210310bcfd3598052cd602c7350d913dc5914b0b69ff645cbdb7e250f20da09a819095a9425d91335743d912ca832628e002a0083254006b108021100000039ffffff08021100000084000000fbffffffffffffffffff070000007606050418000200bd06080211000000824602a303ff030000ffffffffffff0e0b000001800000030000000405ffffffffffff09000000010802110000000500"], 0x1238}, 0x1, 0x0, 0x0, 0x54}, 0x40c0) r6 = syz_init_net_socket$rose(0xb, 0x5, 0x0) sendmsg$nl_route(r0, &(0x7f0000000300)={0x0, 0x0, &(0x7f00000003c0)={0x0}, 0x1, 0x0, 0x0, 0x10}, 0x4000000) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000001980)={&(0x7f0000009b80)=@newchain={0x24, 0x64, 0x300, 0x70bd25, 0x25dfdbfe, {0x0, 0x0, 0x0, 0x0, {0x7, 0xfff2}, {0xf}, {0xa, 0x1ffe4}}}, 0x24}, 0x1, 0x0, 0x0, 0x40}, 0x0) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000140)={0x0, 0x600, &(0x7f0000000080)={&(0x7f00000006c0)=ANY=[@ANYBLOB="440000001000010800"/20, @ANYRES32=0x0, @ANYBLOB="000000000000000008001b000000000004001a80180002"], 0x44}}, 0x0) r7 = socket$netlink(0x10, 0x3, 0x0) sendmmsg(r7, &(0x7f00000002c0), 0x40000000000009f, 0x0) ioctl$sock_rose_SIOCRSCLRRT(r6, 0x89e4) bpf$MAP_CREATE(0x0, &(0x7f00000000c0)=ANY=[@ANYRES8=r7, @ANYRES32=r4, @ANYRES64=r1, @ANYRES32=0x0, @ANYRESOCT, @ANYRESOCT=r4], 0x50) r8 = bpf$PROG_LOAD(0x5, &(0x7f00000004c0)={0x6, 0x5, &(0x7f0000000280)=ANY=[@ANYBLOB="18020000fbffffff000000000000000085000000bc000000850000000f000000950000000000364066228ad3b4bb5caebfe3c6fcf7"], &(0x7f00000001c0)='GPL\x00', 0x8001, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @xdp, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000600)={r8, 0x0, 0xe, 0x0, &(0x7f0000000100)="541f8219a98d3813caa044560600", 0x0, 0x1008, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x9, 0x80000000}, 0x50) r9 = socket(0x10, 0x803, 0x0) sendmsg$nl_route(r9, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000780)={&(0x7f0000000180)=ANY=[@ANYRES32=r0], 0x1c}, 0x1, 0x0, 0x0, 0x4084}, 0x20000040) socket(0x29, 0x0, 0x2) socket$can_bcm(0x1d, 0x2, 0x2) openat$cgroup_ro(0xffffffffffffffff, &(0x7f0000000240)='pids.current\x00', 0x275a, 0x0) 2.369667253s ago: executing program 4 (id=14499): r0 = socket$netlink(0x10, 0x3, 0x10) bind$netlink(r0, &(0x7f0000514ff4)={0x10, 0x0, 0x0, 0x2ffffffff}, 0xc) r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000200)={0x4, 0xe, 0x0, &(0x7f0000000340)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x2b, 0xffffffffffffffff, 0x8, &(0x7f0000000000)={0x1}, 0x8, 0x10, &(0x7f0000000880)={0x3, 0x0, 0x0, 0x60}, 0x10}, 0x94) r2 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r2, &(0x7f0000000000)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f00000007c0)=ANY=[@ANYBLOB="3c000000100001042bbd70000000000000000000", @ANYRES32=0x0, @ANYBLOB="03050000000000001c0012800b04010062726964676500000c0002800600080000810000e52d4d1e5fbb"], 0x3c}, 0x1, 0x0, 0x0, 0x4008000}, 0x0) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f00000002c0)={r1, 0x0, 0xd, 0x0, &(0x7f0000000380)="3d6ee2e04b91ab10143d9abe86", 0x0, 0x10002, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x50) ioctl$PPPIOCNEWUNIT(0xffffffffffffffff, 0xc004743e, 0x0) r3 = socket$netlink(0x10, 0x3, 0x10) r4 = socket$netlink(0x10, 0x3, 0x10) bind$netlink(r4, &(0x7f0000514ff4)={0x10, 0x0, 0x0, 0x2ffffffff}, 0xc) setsockopt$sock_int(r4, 0x1, 0x8, &(0x7f0000000000)=0x80, 0x4) r5 = socket$inet(0xa, 0x801, 0x0) listen(r5, 0x8) accept4(r5, 0x0, 0x0, 0x0) setsockopt$netlink_NETLINK_BROADCAST_ERROR(r4, 0x10e, 0x4, &(0x7f0000000180)=0x10000800, 0x4) r6 = syz_genetlink_get_family_id$devlink(&(0x7f0000000040), 0xffffffffffffffff) sendmsg$DEVLINK_CMD_RATE_NEW(r3, &(0x7f0000000440)={0x0, 0x0, &(0x7f0000000700)={&(0x7f0000000300)={0x34, r6, 0x1, 0x3, 0x25dfdbfb, {0x25}, [@handle=@nsim={{0xe}, {0xf, 0x2, {'netdevsim', 0x0}}}]}, 0x34}, 0x1, 0x0, 0x0, 0x41}, 0x0) r7 = socket$kcm(0x2, 0x200000000000001, 0x106) sendmsg$inet(r7, &(0x7f0000000000)={&(0x7f0000000140)={0x2, 0x4001, @empty}, 0x10, 0x0}, 0x30006041) setsockopt$IP6T_SO_SET_REPLACE(0xffffffffffffffff, 0x29, 0x40, &(0x7f0000001e80)=@raw={'raw\x00', 0x3c1, 0x3, 0x340, 0x0, 0x8, 0x7f02ae, 0x0, 0x200, 0x4a0, 0x2e8, 0x2e8, 0x4a0, 0x2e8, 0x3, 0x0, {[{{@uncond, 0x0, 0x110, 0x138, 0x0, {}, [@common=@inet=@iprange={{0x68}, {@ipv4, @ipv4=@remote, @ipv6=@mcast2, @ipv4=@remote}}]}, @common=@unspec=@CLASSIFY={0x28}}, {{@ipv6={@local, @private2, [], [], 'veth0_to_team\x00', 'netdevsim0\x00', {}, {0xff}, 0x0, 0x0, 0x1}, 0x0, 0xd0, 0x138, 0x0, {}, [@common=@mh={{0x28}, {"a27d"}}]}, @unspec=@CT1={0x68, 'CT\x00', 0x1, {0x13, 0xec, 0x5, 0x400, 'snmp\x00', 'syz0\x00', {0xffffffff8cdbbefd}}}}], {{'\x00', 0x0, 0xa8, 0xd0}, {0x28}}}}, 0x3a0) r8 = socket(0x10, 0x3, 0x0) r9 = socket$inet_tcp(0x2, 0x1, 0x0) ioctl$sock_SIOCGIFINDEX(r9, 0x8933, &(0x7f0000000000)={'lo\x00', 0x0}) sendmsg$nl_route_sched(r8, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000780)={&(0x7f00000001c0)=@newqdisc={0x2c, 0x24, 0xd0f, 0x0, 0x0, {0x60, 0x0, 0x0, r10, {0x0, 0xc}, {0xffff, 0xffff}}, [@qdisc_kind_options=@q_qfg={0x8}]}, 0x2c}}, 0x0) sendmsg$nl_route_sched(r8, 0x0, 0x24040000) r11 = socket(0x10, 0x803, 0x0) sendto(r11, &(0x7f0000000740)="120000001200e7ef007b00000000000000a1", 0x12, 0x8804, 0x0, 0x0) recvmmsg(r11, &(0x7f0000007d80)=[{{0x0, 0x0, &(0x7f0000000580)=[{&(0x7f0000000100)=""/59, 0x3b}, {&(0x7f00000003c0)=""/120, 0x6f}, {&(0x7f0000000680)=""/135, 0x87}, {&(0x7f0000000f80)=""/4100, 0x100c}, {&(0x7f0000000480)=""/255, 0xff}, {&(0x7f00000002c0)=""/223, 0xdf}, {&(0x7f0000000880)=""/247, 0xfe}, {&(0x7f00000001c0)=""/200, 0xc8}, {&(0x7f0000000040)=""/32, 0x20}, {&(0x7f0000000e00)=""/113, 0x71}, {&(0x7f0000000000)=""/32, 0x20}, {&(0x7f0000000080), 0x2}], 0xc, 0x0, 0xfffffffffffffeba}, 0xfff}, {{0x0, 0x0, 0x0}, 0x10000004}], 0x2, 0x0, 0x0) close(r7) 2.323557855s ago: executing program 0 (id=14500): socket$nl_crypto(0x10, 0x3, 0x15) r0 = openat$tun(0xffffffffffffff9c, &(0x7f00000001c0), 0x42000, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000000)={'pim6reg1\x00', 0x2}) r1 = syz_init_net_socket$802154_dgram(0x24, 0x2, 0x0) ioctl$sock_SIOCGIFVLAN_GET_VLAN_REALDEV_NAME_CMD(r1, 0x8982, &(0x7f00000000c0)={0x8, 'vlan0\x00', {'netpci0\x00'}, 0x3ff}) ioctl$TUNSETLINK(r0, 0x400454cd, 0x20) openat$tun(0xffffffffffffff9c, &(0x7f0000000080), 0x4480, 0x0) openat$tun(0xffffffffffffff9c, &(0x7f0000000100), 0x400000, 0x0) ioctl$TUNGETDEVNETNS(r0, 0x54e3, 0x0) r2 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r2, &(0x7f0000000000)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000040)={0x2c, 0x40, 0x107, 0xfffffefe, 0x0, {0x4, 0x7c}, [@nested={0x4, 0x142}, @nested={0x14, 0x1, 0x0, 0x1, [@typed={0x6, 0x6, 0x0, 0x0, @str='\x80\n'}, @typed={0x6, 0xc, 0x0, 0x0, @str='\x80\n'}]}]}, 0x2c}, 0x1, 0x0, 0x0, 0x48815}, 0xc000) socketpair$nbd(0x1, 0x1, 0x0, &(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$SIOCSIFHWADDR(r3, 0x8914, &(0x7f0000000140)={'pim6reg1\x00', @multicast}) close(0x4) r4 = socket$nl_generic(0x10, 0x3, 0x10) r5 = syz_genetlink_get_family_id$devlink(&(0x7f0000000640), 0xffffffffffffffff) sendmsg$DEVLINK_CMD_SB_OCC_MAX_CLEAR(r4, &(0x7f0000000800)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000680)=ANY=[@ANYBLOB="14000000", @ANYRES16=r5, @ANYBLOB="02000000f8000000c7f833"], 0x14}}, 0x0) 53.76714ms ago: executing program 4 (id=14501): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) r1 = socket$rds(0x15, 0x5, 0x0) ioctl$sock_ifreq(r1, 0x8990, &(0x7f0000000100)={'bond0\x00', @ifru_names='veth0_macvtap\x00'}) r2 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000000)='blkio.bfq.io_service_bytes\x00', 0x26e1, 0x0) close(r2) bpf$PROG_LOAD(0x5, &(0x7f0000000040)={0x6, 0x4, &(0x7f0000000100)=@framed={{0x18, 0x2, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x2}, [@call={0x85, 0x0, 0x0, 0xd1}]}, &(0x7f0000000400)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @xdp, r2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_GET_MAP_INFO(0xf, &(0x7f00000000c0)={r2, 0x0, 0xfffffffffffffffc}, 0x10) r3 = bpf$MAP_CREATE(0x0, &(0x7f0000000280)=@base={0x7, 0x4, 0x18, 0x1}, 0x50) ioctl$sock_ipv6_tunnel_SIOCGET6RD(r2, 0x89f8, &(0x7f00000003c0)={'gretap0\x00', &(0x7f0000000340)={'erspan0\x00', 0x0, 0x40, 0x80, 0x1, 0x10000, {{0x9, 0x4, 0x3, 0x7, 0x24, 0x66, 0x0, 0xfc, 0x29, 0x0, @rand_addr=0x64010101, @initdev={0xac, 0x1e, 0x0, 0x0}, {[@cipso={0x86, 0xe, 0x3, [{0x5, 0x8, "fa063ad46423"}]}]}}}}}) r5 = socket$packet(0x11, 0x2, 0x300) setsockopt$packet_rx_ring(r5, 0x107, 0x5, &(0x7f00000000c0)=@req={0x8000, 0xb4f, 0x300, 0x1daf6}, 0x10) setsockopt$packet_int(r5, 0x107, 0xc, &(0x7f00000001c0)=0x401, 0x4) bpf$TOKEN_CREATE(0x24, &(0x7f0000000500)={0x0, r1}, 0x8) bpf$PROG_LOAD(0x5, &(0x7f0000000580)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="18090000000000000000000000000000850000006d0000001801000020696c2500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000007000000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', r4, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) setsockopt$inet6_IPV6_IPSEC_POLICY(r2, 0x29, 0x22, &(0x7f0000000740)={{{@in6=@local, @in=@dev={0xac, 0x14, 0x14, 0x3f}, 0x4e23, 0x0, 0x4e20, 0x9, 0xa, 0xa0, 0x0, 0x6, r4, 0xee01}, {0x2, 0x5, 0x10, 0xffffffffffff591c, 0x8000, 0x6, 0x2206, 0x5}, {0x10000, 0x8, 0x0, 0x42}, 0x10000, 0x6e6bb3, 0x0, 0x0, 0x3}, {{@in=@multicast1, 0x4d2, 0x6c}, 0x2, @in6=@dev={0xfe, 0x80, '\x00', 0xe}, 0x3500, 0x4, 0x3, 0xe, 0xffffff01, 0x11a, 0xff}}, 0xe8) socket$inet6_sctp(0xa, 0x1, 0x84) syz_init_net_socket$bt_hci(0x1f, 0x3, 0x5) close(0x4) syz_open_procfs$namespace(0x0, &(0x7f0000000040)='ns/cgroup\x00') mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f07ebbeef, 0x8031, 0xffffffffffffffff, 0x215eb000) r6 = openat$tun(0xffffffffffffff9c, &(0x7f0000000000), 0x48241, 0x0) ioctl$TUNSETIFF(r6, 0x400454ca, &(0x7f00000000c0)={'syzkaller1\x00', 0x6bf1c2d5adba8c32}) r7 = socket$kcm(0x2, 0xa, 0x2) ioctl$SIOCSIFHWADDR(r7, 0x8914, &(0x7f0000000180)={'syzkaller1\x00', @link_local}) write$tun(r6, &(0x7f0000000840)={@val, @val={0x0, 0x0, 0x4, 0x14, 0x3400, 0x9}, @x25={0x2, 0x2, 0xf7, "f5ebe7ae9a172ab1f9cf589a3d9a053230ceeaf05e9c7b492ebfc156792ae0a46c2e7abd1ba217c851a974e19ac7ec3ab2f9af3ffcc943850b375730170c590e8d9946f73b0f441e7869d2a1702778407db6c17d75ac5d685e19d8c68f7f725969676f7e24e6b7fe88b94bc6a76b842d9005800bf74cb2bd295aa2c854db076fceee8992d2ecaf0e9dea3f015a56fe988402f7f78169fa48c1dc56ba53152fd8b67192a864d5ae2954124559ddaea70f8a0bbf01239f1cb01f72336845f1ca2c6faee5f6eac63875b846debec2860bd592d50b3e72d91114863fa22a8f7d661a919e"}}, 0xf3) bpf$PROG_LOAD(0x5, &(0x7f0000000680)={0x11, 0x9, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000001000000000000000018120000", @ANYRES32=r3, @ANYBLOB="0000000000000000b703000000000000850000001b"], 0x0, 0x0, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r8 = bpf$PROG_LOAD(0x5, &(0x7f0000000200)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f00000001c0)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$PROG_BIND_MAP(0xa, &(0x7f0000000680)={r8}, 0xc) bpf$PROG_BIND_MAP(0xa, &(0x7f0000000300)={r8}, 0xc) sendmsg$IPSET_CMD_CREATE(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f00000044c0)={&(0x7f0000000100)={0x78, 0x2, 0x6, 0x401, 0x0, 0x0, {}, [@IPSET_ATTR_DATA={0x2c, 0x7, 0x0, 0x1, [@IPSET_ATTR_TIMEOUT={0x8, 0x6, 0x1, 0x0, 0x9}, @IPSET_ATTR_IP_TO={0x18, 0x2, 0x0, 0x1, @IPSET_ATTR_IPADDR_IPV6={0x14, 0x2, 0x1, 0x0, @private1={0xfc, 0x1, '\x00', 0x1}}}, @IPSET_ATTR_PROTO={0x5, 0x7, 0x5c}]}, @IPSET_ATTR_PROTOCOL={0x5, 0x1, 0x6}, @IPSET_ATTR_FAMILY={0x5, 0x5, 0x2}, @IPSET_ATTR_REVISION={0x5}, @IPSET_ATTR_TYPENAME={0x11, 0x3, 'hash:net,net\x00'}, @IPSET_ATTR_SETNAME={0x9, 0x2, 'syz0\x00'}]}, 0x78}, 0x1, 0x0, 0x0, 0x24040010}, 0x4040810) 53.325417ms ago: executing program 0 (id=14502): r0 = socket$netlink(0x10, 0x3, 0x0) ioctl$sock_SIOCSIFBR(r0, 0x8941, &(0x7f0000000180)=@generic={0x1, 0x8000000000000000, 0x4}) recvfrom(0xffffffffffffffff, 0x0, 0x0, 0x2020, &(0x7f0000000100)=@pppol2tpin6={0x18, 0x1, {0x0, r0, 0x4, 0x4, 0x0, 0x2, {0xa, 0x4e21, 0x2, @loopback, 0x6}}}, 0x80) r1 = syz_init_net_socket$bt_l2cap(0x1f, 0x3, 0x3) r2 = syz_init_net_socket$bt_l2cap(0x1f, 0x3, 0x3) r3 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCSIFVLAN_DEL_VLAN_CMD(r3, 0x8983, &(0x7f00000003c0)={0x1, 'vlan0\x00', {}, 0x8000}) ioctl$FS_IOC_GETFSLABEL(r2, 0x400452c8, &(0x7f0000000100)) ioctl$FS_IOC_GETFSLABEL(r1, 0x400452c9, &(0x7f0000000100)) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000800)={0x11, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="18000000000000000000000000000000850000000f000000180100002020642500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b70300000000000085000000b000000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x1b}, 0x94) r4 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r4, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000000)=@newtaction={0x60, 0x30, 0x62f, 0x7ffffd, 0x0, {}, [{0x4c, 0x1, [@m_gact={0x48, 0x1, 0x0, 0x0, {{0x9}, {0x1c, 0x2, 0x0, 0x1, [@TCA_GACT_PARMS={0x18, 0x2, {0x3, 0x10000, 0x10000000, 0x7}}]}, {0x4}, {0xc, 0x7, {0x1, 0x1}}, {0xc}}}]}]}, 0x60}, 0x1, 0x0, 0x0, 0x4004}, 0x0) r5 = bpf$PROG_LOAD(0x5, &(0x7f00000017c0)={0x1, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000000)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x2e, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) socketpair$unix(0x1, 0x2, 0x0, &(0x7f00000001c0)={0xffffffffffffffff, 0xffffffffffffffff}) setsockopt$sock_attach_bpf(r6, 0x1, 0x32, &(0x7f0000000180)=r5, 0x4) bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000280)={0x0, &(0x7f0000000040)=""/155, 0x1000000, 0x9b, 0x1}, 0x1f) sendmsg$inet(r7, &(0x7f0000000100)={0x0, 0x0, 0x0}, 0x20000000) r8 = socket(0x10, 0x803, 0x2) sendmsg$nl_route(r8, &(0x7f00000009c0)={&(0x7f00000002c0)={0x10, 0x0, 0x0, 0x100}, 0xc, &(0x7f0000000980)={&(0x7f0000000940)=@ipv6_delrule={0x1c, 0x21, 0x200, 0x70bd2c, 0x25dfdbff, {0xa, 0x10, 0x14, 0x3, 0x3, 0x0, 0x0, 0x8, 0x10009}}, 0x1c}, 0x1, 0x0, 0x0, 0x4000010}, 0x20004044) getsockopt$PNPIPE_IFINDEX(0xffffffffffffffff, 0x113, 0x2, &(0x7f0000000200)=0x0, &(0x7f0000000240)=0x4) setsockopt$inet6_IPV6_IPSEC_POLICY(r8, 0x29, 0x22, &(0x7f00000002c0)={{{@in6=@empty, @in=@remote, 0x4e24, 0x0, 0x4e24, 0x4, 0x2, 0x80, 0x0, 0x16, r9}, {0x0, 0x1, 0x1000, 0x100000000, 0x5, 0x8000000000000000, 0x0, 0x80000000}, {0x4, 0x7, 0x7, 0x4}, 0x1, 0x6e6bba, 0x0, 0x0, 0x1, 0x1}, {{@in=@remote, 0x4d6, 0x6c}, 0x2, @in=@local, 0x3501, 0x0, 0x0, 0x3, 0xf0b, 0x8000, 0x8}}, 0xe8) ioctl$sock_SIOCOUTQNSD(r1, 0x894b, &(0x7f0000000000)) 52.737187ms ago: executing program 2 (id=14503): ioctl$sock_SIOCGIFINDEX(0xffffffffffffffff, 0x8933, 0x0) setsockopt$inet6_IPV6_FLOWLABEL_MGR(0xffffffffffffffff, 0x29, 0x20, 0x0, 0x0) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f00000007c0)={0x0, 0x0, &(0x7f0000000480)={&(0x7f0000000a00)=@delchain={0x108, 0x65, 0x300, 0x70bd27, 0x25dfdbfc, {0x0, 0x0, 0x0, 0x0, {0x2, 0x2}, {0x0, 0x1}, {0xd}}, [@filter_kind_options=@f_u32={{0x8}, {0xc, 0x2, [@TCA_U32_DIVISOR={0x8, 0x4, 0xd8}]}}, @TCA_RATE={0x6, 0x5, {0xb, 0x40}}, @filter_kind_options=@f_basic={{0xa}, {0xbc, 0x2, [@TCA_BASIC_ACT={0xb8, 0x3, [@m_sample={0x40, 0x17, 0x0, 0x0, {{0xb}, {0x14, 0x2, 0x0, 0x1, [@TCA_SAMPLE_TRUNC_SIZE={0x8, 0x4, 0x5}, @TCA_SAMPLE_TRUNC_SIZE={0x8, 0x4, 0x1ff}]}, {0x4}, {0xc, 0x7, {0x0, 0x1}}, {0xc, 0x8, {0x3, 0x3}}}}, @m_connmark={0x74, 0x5, 0x0, 0x0, {{0xd}, {0x4}, {0x41, 0x6, "6f3e464680b8dcb925d3c8416db18e2e0eecd7ba0f6003aaa71a565f40fa822f6bd63a4ca0ba27c7d18cbbdfbdb568fa69b75a5bdb35bbe794d9fbd87c"}, {0xc}, {0xc, 0x8, {0x2, 0x2}}}}]}]}}]}, 0x108}, 0x1, 0x0, 0x0, 0x40008c5}, 0x20000080) r0 = socket(0x10, 0x803, 0x0) sendto(r0, &(0x7f0000000740)="120000001200e7ef007b00000000000000a1", 0x12, 0x0, 0x0, 0x0) recvmmsg(r0, &(0x7f00000037c0)=[{{&(0x7f00000004c0)=@ethernet={0x0, @random}, 0xfdf4, &(0x7f0000000380)=[{&(0x7f0000000140)=""/100, 0x365}, {&(0x7f0000000280)=""/85, 0x7c}, {&(0x7f0000000fc0)=""/4096, 0x197}, {&(0x7f0000000400)=""/106, 0x645}, {&(0x7f0000000980)=""/73, 0x1b}, {&(0x7f0000000200)=""/77, 0x14}, {&(0x7f00000007c0)=""/154, 0x21}, {&(0x7f00000001c0)=""/17, 0x1d8}], 0x21, &(0x7f0000000600)=""/191, 0xffffffffffffff2f}}], 0x4000000000003b4, 0x2040000, &(0x7f0000003700)={0x77359400}) (async) recvmmsg(r0, &(0x7f00000037c0)=[{{&(0x7f00000004c0)=@ethernet={0x0, @random}, 0xfdf4, &(0x7f0000000380)=[{&(0x7f0000000140)=""/100, 0x365}, {&(0x7f0000000280)=""/85, 0x7c}, {&(0x7f0000000fc0)=""/4096, 0x197}, {&(0x7f0000000400)=""/106, 0x645}, {&(0x7f0000000980)=""/73, 0x1b}, {&(0x7f0000000200)=""/77, 0x14}, {&(0x7f00000007c0)=""/154, 0x21}, {&(0x7f00000001c0)=""/17, 0x1d8}], 0x21, &(0x7f0000000600)=""/191, 0xffffffffffffff2f}}], 0x4000000000003b4, 0x2040000, &(0x7f0000003700)={0x77359400}) getsockopt$IP_VS_SO_GET_INFO(r0, 0x0, 0x481, &(0x7f0000000000), &(0x7f0000000040)=0xc) (async) getsockopt$IP_VS_SO_GET_INFO(r0, 0x0, 0x481, &(0x7f0000000000), &(0x7f0000000040)=0xc) 6.789302ms ago: executing program 3 (id=14504): r0 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r0, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000000c0)={0x14, 0x37, 0x301, 0x70bd25, 0xfffffffe, {0x7}}, 0x14}}, 0x20008040) r1 = socket$nl_route(0x10, 0x3, 0x0) r2 = socket$kcm(0x10, 0x2, 0x0) sendmsg$kcm(r2, &(0x7f0000000040)={0x0, 0x18, &(0x7f00000009c0)=[{&(0x7f0000000140)="d800000018007b29e00212ba0d8105040a601800fe0f040b067c55a1bc000900b80006990600000015000500fe800000000000000300014002000c0901ac04000bd67f6f94007100a007a290457f0189b316277ce06bbace8017cbec4c2ee5a7cef4090000001fb791643a5ee4b11602b2a10c11ce1b14d6d930dfe1d9d322fe04fb95cae8c9010000730d7a5025ccca262f3d40fad95667e04adcdf634c1f215ce3bb9ad8ffd5e1cace81ccd40dd601edef3d93452a92307ff0ff0e97031e9f05e9f16e9cb500"/216, 0xd8}], 0x1, 0x0, 0x0, 0x2663}, 0x0) sendmsg$nl_route(r1, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000240)=@newlink={0x48, 0x10, 0xffffffffffffffff, 0x70bd25, 0x25dfdbfd, {0x0, 0x0, 0x0, 0x0, 0x0, 0x20142}, [@IFLA_LINKINFO={0x28, 0x12, 0x0, 0x1, @ip6gre={{0xb}, {0x18, 0x2, 0x0, 0x1, [@IFLA_GRE_COLLECT_METADATA={0x4}, @IFLA_GRE_OFLAGS={0x6, 0x3, 0x80}, @IFLA_GRE_IFLAGS={0x6, 0x2, 0x4000}]}}}]}, 0x48}, 0x1, 0x0, 0x0, 0x2400c090}, 0x24048044) socket$inet_icmp_raw(0x2, 0x3, 0x1) socket$nl_generic(0x10, 0x3, 0x10) (async) sendmsg$nl_generic(r0, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000000c0)={0x14, 0x37, 0x301, 0x70bd25, 0xfffffffe, {0x7}}, 0x14}}, 0x20008040) (async) socket$nl_route(0x10, 0x3, 0x0) (async) socket$kcm(0x10, 0x2, 0x0) (async) sendmsg$kcm(r2, &(0x7f0000000040)={0x0, 0x18, &(0x7f00000009c0)=[{&(0x7f0000000140)="d800000018007b29e00212ba0d8105040a601800fe0f040b067c55a1bc000900b80006990600000015000500fe800000000000000300014002000c0901ac04000bd67f6f94007100a007a290457f0189b316277ce06bbace8017cbec4c2ee5a7cef4090000001fb791643a5ee4b11602b2a10c11ce1b14d6d930dfe1d9d322fe04fb95cae8c9010000730d7a5025ccca262f3d40fad95667e04adcdf634c1f215ce3bb9ad8ffd5e1cace81ccd40dd601edef3d93452a92307ff0ff0e97031e9f05e9f16e9cb500"/216, 0xd8}], 0x1, 0x0, 0x0, 0x2663}, 0x0) (async) sendmsg$nl_route(r1, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000240)=@newlink={0x48, 0x10, 0xffffffffffffffff, 0x70bd25, 0x25dfdbfd, {0x0, 0x0, 0x0, 0x0, 0x0, 0x20142}, [@IFLA_LINKINFO={0x28, 0x12, 0x0, 0x1, @ip6gre={{0xb}, {0x18, 0x2, 0x0, 0x1, [@IFLA_GRE_COLLECT_METADATA={0x4}, @IFLA_GRE_OFLAGS={0x6, 0x3, 0x80}, @IFLA_GRE_IFLAGS={0x6, 0x2, 0x4000}]}}}]}, 0x48}, 0x1, 0x0, 0x0, 0x2400c090}, 0x24048044) (async) socket$inet_icmp_raw(0x2, 0x3, 0x1) (async) 0s ago: executing program 1 (id=14505): r0 = socket$packet(0x11, 0x2, 0x300) setsockopt$packet_fanout(r0, 0x107, 0x12, &(0x7f0000000040)={0x0, 0x6}, 0x4) setsockopt$packet_fanout_data(r0, 0x107, 0x16, &(0x7f0000000100)={0x3, &(0x7f0000000180)=[{0x1d, 0x0, 0x1, 0xfffff034}, {0xb1}, {0x6, 0x0, 0x0, 0x7}]}, 0x10) r1 = socket$inet_smc(0x2b, 0x1, 0x0) setsockopt$inet_tcp_int(r1, 0x6, 0x1b, &(0x7f0000000000)=0x8, 0x4) r2 = socket$xdp(0x2c, 0x3, 0x0) r3 = bpf$MAP_CREATE(0x0, &(0x7f0000000740)=@base={0x6, 0x4, 0x8, 0xb}, 0x50) close(0x3) r4 = bpf$MAP_CREATE(0x0, &(0x7f0000000100)=ANY=[@ANYBLOB="0b00000008000000020000000600000001000000", @ANYRES32, @ANYBLOB='\x00'/20, @ANYRES32=0x0, @ANYRES32, @ANYBLOB="0000000000000000d1f5b5890000000700"/28], 0x50) r5 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0x14, &(0x7f0000000280)=ANY=[@ANYBLOB="1800000000000000000000000000000018010000f4751f2100000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000005000000b70300000000ff80850000002d00000018110000", @ANYRES32=r3, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000300000095"], &(0x7f0000000440)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x28, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$PROG_BIND_MAP(0xa, &(0x7f0000000380)={r5}, 0xc) poll(&(0x7f0000000200)=[{r1, 0x2}, {r1, 0xa082}, {r4}, {r2}, {r1, 0x2088}, {r4, 0x2}, {r0, 0x4}], 0x7, 0x1c) getsockopt(r2, 0x5, 0xffffff67, 0x0, 0x0) r6 = socket(0x10, 0x3, 0x0) sendmsg$nl_route(r6, &(0x7f0000000140)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000180)=@newlink={0x50, 0x10, 0x403, 0x3, 0x25dfdbfe, {0x0, 0x0, 0x0, 0x0, 0x1e8f7}, [@IFLA_LINKINFO={0x1c, 0x12, 0x0, 0x1, @macsec={{0xb}, {0xc, 0x2, 0x0, 0x1, [@IFLA_MACSEC_ICV_LEN={0x5, 0x3, 0xd}]}}}, @IFLA_IFNAME={0x14, 0x3, 'macsec0\x00'}]}, 0x50}}, 0x0) r7 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r7, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000080)=@newlink={0x3c, 0x10, 0x801, 0xfffffffd, 0x8000100, {0x0, 0x0, 0x0, 0x0, 0x0, 0x20421}, [@IFLA_GROUP={0x8}, @IFLA_AF_SPEC={0x14, 0x1a, 0x0, 0x1, [@AF_INET={0x10, 0x2, 0x0, 0x1, {0xc, 0x1, 0x0, 0x1, [{0x8, 0x9}]}}]}]}, 0x3c}, 0x1, 0x0, 0x0, 0x4040840}, 0x8024) kernel console output (not intermixed with test programs): ed from hooks FORWARD, but only valid from PREROUTING [ 1797.018717][T27138] lo speed is unknown, defaulting to 1000 [ 1797.148723][T27271] batadv_slave_1: left promiscuous mode [ 1797.161784][ C0] lec0: NETDEV WATCHDOG: CPU: 0: transmit queue 0 timed out 5170 ms [ 1797.169874][ C0] lec:lec_tx_timeout: lec0 [ 1797.294803][T25015] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1797.831358][T27292] netlink: 8 bytes leftover after parsing attributes in process `syz.2.13186'. [ 1797.858745][T27292] netlink: 8 bytes leftover after parsing attributes in process `syz.2.13186'. [ 1797.900670][T27296] netlink: 'syz.3.13187': attribute type 16 has an invalid length. [ 1797.919214][T27296] netlink: 'syz.3.13187': attribute type 17 has an invalid length. [ 1798.334164][T27319] netlink: 'syz.0.13193': attribute type 4 has an invalid length. [ 1798.385676][T27322] netlink: 'syz.0.13193': attribute type 4 has an invalid length. [ 1798.421589][T25011] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1798.737589][T27331] netlink: 36 bytes leftover after parsing attributes in process `syz.0.13198'. [ 1798.814990][T27335] netlink: 8 bytes leftover after parsing attributes in process `syz.1.13199'. [ 1798.896441][T27339] netlink: 8 bytes leftover after parsing attributes in process `syz.2.13200'. [ 1799.020264][T27330] batadv0: left promiscuous mode [ 1799.032751][T27330] batadv0: left allmulticast mode [ 1799.064720][T27330] ip6erspan0: left promiscuous mode [ 1799.081556][T27330] ip6erspan0: left allmulticast mode [ 1799.095629][T27330] veth3: left promiscuous mode [ 1799.130886][T27330] veth5: left allmulticast mode [ 1799.157297][T27330] macvlan0: left promiscuous mode [ 1799.170574][T27330] macvlan0: left allmulticast mode [ 1799.193135][T27330] bridge5: left promiscuous mode [ 1799.254739][T27331] geneve3: entered promiscuous mode [ 1799.475494][T27359] syzkaller0: entered promiscuous mode [ 1799.493944][T27359] syzkaller0: entered allmulticast mode [ 1799.516055][T27359] netlink: 'syz.0.13205': attribute type 1 has an invalid length. [ 1799.524969][T27359] netlink: 228 bytes leftover after parsing attributes in process `syz.0.13205'. [ 1799.544001][T31070] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1799.747874][T27381] netlink: 12 bytes leftover after parsing attributes in process `syz.2.13210'. [ 1799.800352][T27385] netlink: 'syz.3.13212': attribute type 58 has an invalid length. [ 1799.801611][T27379] lo speed is unknown, defaulting to 1000 [ 1799.836322][T27379] lo speed is unknown, defaulting to 1000 [ 1799.900615][T27394] netlink: 'syz.3.13212': attribute type 58 has an invalid length. [ 1800.330521][T27414] netlink: 'syz.4.13220': attribute type 1 has an invalid length. [ 1800.364204][T27416] xt_hashlimit: size too large, truncated to 1048576 [ 1800.368400][T27414] 8021q: adding VLAN 0 to HW filter on device bond3 [ 1800.396597][T27414] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 1800.437257][T27419] xt_hashlimit: size too large, truncated to 1048576 [ 1800.473376][T27419] x_tables: ip6_tables: TCPMSS target: only valid for protocol 6 [ 1800.607378][T27424] netlink: 9 bytes leftover after parsing attributes in process `syz.4.13221'. [ 1800.622875][T27424] netlink: 9 bytes leftover after parsing attributes in process `syz.4.13221'. [ 1800.657102][T27424] netlink: 8 bytes leftover after parsing attributes in process `syz.4.13221'. [ 1800.673069][T31070] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1800.687601][T27432] netlink: 8 bytes leftover after parsing attributes in process `syz.4.13221'. [ 1800.724384][T27435] netlink: 'syz.2.13223': attribute type 1 has an invalid length. [ 1800.876456][T27440] netlink: 4 bytes leftover after parsing attributes in process `syz.4.13225'. [ 1800.913961][T27443] netlink: 4 bytes leftover after parsing attributes in process `syz.1.13224'. [ 1801.302099][T27454] netlink: 'syz.2.13228': attribute type 4 has an invalid length. [ 1801.354196][T27459] pimreg9: entered allmulticast mode [ 1801.390297][T27462] netlink: 165 bytes leftover after parsing attributes in process `syz.2.13228'. [ 1801.444365][T27460] syzkaller0: entered promiscuous mode [ 1801.449870][T27460] syzkaller0: entered allmulticast mode [ 1801.802670][T25214] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1802.583231][T27495] netlink: 84 bytes leftover after parsing attributes in process `syz.4.13240'. [ 1802.596908][T27495] netlink: 4 bytes leftover after parsing attributes in process `syz.4.13240'. [ 1802.633676][T27495] sctp: [Deprecated]: syz.4.13240 (pid 27495) Use of int in max_burst socket option. [ 1802.633676][T27495] Use struct sctp_assoc_value instead [ 1802.941424][T31070] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1804.098359][T25214] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1805.202242][T25214] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1806.305654][ T48] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1807.048409][T27541] tipc: Invalid UDP bearer configuration [ 1807.048474][T27541] tipc: Enabling of bearer rejected, failed to enable media [ 1807.079832][T27555] netlink: 4 bytes leftover after parsing attributes in process `syz.0.13254'. [ 1807.267475][T27559] netlink: 4 bytes leftover after parsing attributes in process `syz.0.13254'. [ 1807.425124][T25337] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1807.502450][T27569] netlink: 65039 bytes leftover after parsing attributes in process `syz.3.13260'. [ 1807.633874][T27579] validate_nla: 1 callbacks suppressed [ 1807.633896][T27579] netlink: 'syz.0.13264': attribute type 4 has an invalid length. [ 1807.637003][T27577] netlink: 'syz.2.13262': attribute type 10 has an invalid length. [ 1807.639473][T27579] netlink: 17 bytes leftover after parsing attributes in process `syz.0.13264'. [ 1807.673839][T27579] SET target dimension over the limit! [ 1808.135404][T27604] netlink: 28 bytes leftover after parsing attributes in process `syz.0.13269'. [ 1808.145097][T27601] netlink: 8 bytes leftover after parsing attributes in process `syz.4.13268'. [ 1808.154258][T27604] netlink: 28 bytes leftover after parsing attributes in process `syz.0.13269'. [ 1808.187723][T27604] syzkaller1: entered promiscuous mode [ 1808.199348][T27604] syzkaller1: entered allmulticast mode [ 1808.225212][T27604] netlink: 20 bytes leftover after parsing attributes in process `syz.0.13269'. [ 1808.566638][T27615] netlink: 'syz.4.13272': attribute type 10 has an invalid length. [ 1808.574983][T25214] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1808.577696][T27611] lo speed is unknown, defaulting to 1000 [ 1808.634420][T27611] lo speed is unknown, defaulting to 1000 [ 1808.657932][T27615] ip_tunnel: non-ECT from 172.20.20.187 with TOS=0x2 [ 1808.671875][T27607] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1808.680269][ C1] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1808.701562][T27615] ip_tunnel: non-ECT from 172.20.20.187 with TOS=0x2 [ 1808.708539][T27615] ip_tunnel: non-ECT from 172.20.20.187 with TOS=0x2 [ 1808.709055][T27619] netlink: 8 bytes leftover after parsing attributes in process `syz.3.13276'. [ 1808.715646][T27615] ip_tunnel: non-ECT from 172.20.20.187 with TOS=0x2 [ 1808.731552][T27615] ip_tunnel: non-ECT from 172.20.20.187 with TOS=0x2 [ 1808.738466][T27615] ip_tunnel: non-ECT from 172.20.20.187 with TOS=0x2 [ 1808.773232][T27626] netlink: 4 bytes leftover after parsing attributes in process `syz.4.13272'. [ 1809.418753][T27566] Bluetooth: hci3: command 0x0406 tx timeout [ 1809.674175][T27650] netlink: 'syz.3.13281': attribute type 10 has an invalid length. [ 1809.703975][T27653] netlink: 'syz.0.13280': attribute type 10 has an invalid length. [ 1809.940744][T27661] netlink: 'syz.4.13283': attribute type 10 has an invalid length. [ 1809.962977][T27653] netdevsim netdevsim0 netdevsim0: entered allmulticast mode [ 1810.305663][T27673] block nbd0: server does not support multiple connections per device. [ 1810.349140][T27673] block nbd0: shutting down sockets [ 1811.163614][T27706] xt_TPROXY: Can be used only with -p tcp or -p udp [ 1811.586601][T27721] netlink: 'syz.1.13299': attribute type 4 has an invalid length. [ 1811.631745][T27721] netlink: 'syz.1.13299': attribute type 4 has an invalid length. [ 1811.664968][T27720] syzkaller0: entered promiscuous mode [ 1811.672783][T27720] syzkaller0: entered allmulticast mode [ 1812.653578][T27779] __nla_validate_parse: 11 callbacks suppressed [ 1812.653602][T27779] netlink: 8 bytes leftover after parsing attributes in process `syz.3.13315'. [ 1812.766235][T27776] delete_channel: no stack [ 1813.066805][T27800] bond3: entered promiscuous mode [ 1813.072244][T27800] bond3: entered allmulticast mode [ 1813.101854][ T48] net_ratelimit: 1921 callbacks suppressed [ 1813.101876][ T48] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1813.437733][T27825] netlink: 'syz.0.13326': attribute type 3 has an invalid length. [ 1813.470645][T27829] netlink: 12 bytes leftover after parsing attributes in process `syz.2.13327'. [ 1813.520785][T27829] netlink: 'syz.2.13327': attribute type 83 has an invalid length. [ 1813.598628][T27833] syzkaller1: entered promiscuous mode [ 1813.610442][T27833] syzkaller1: entered allmulticast mode [ 1813.616370][T27836] netlink: 212368 bytes leftover after parsing attributes in process `syz.0.13329'. [ 1813.661655][T27829] netlink: 'syz.2.13327': attribute type 1 has an invalid length. [ 1813.714475][T27838] lo speed is unknown, defaulting to 1000 [ 1813.724141][T27838] lo speed is unknown, defaulting to 1000 [ 1813.779089][T27840] netlink: 'syz.0.13330': attribute type 1 has an invalid length. [ 1813.821147][T27840] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 1813.850507][T27840] netlink: 32 bytes leftover after parsing attributes in process `syz.0.13330'. [ 1813.975146][T27844] syz_tun: entered promiscuous mode [ 1814.009493][T27844] netlink: 8 bytes leftover after parsing attributes in process `syz.4.13331'. [ 1814.205585][T27853] netlink: 8 bytes leftover after parsing attributes in process `syz.2.13336'. [ 1814.221923][T27854] netlink: 8 bytes leftover after parsing attributes in process `syz.2.13336'. [ 1814.242249][T25214] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1814.312617][T27853] A link change request failed with some changes committed already. Interface bond0 may have been left with an inconsistent configuration, please check. [ 1814.368570][T27854] A link change request failed with some changes committed already. Interface bond0 may have been left with an inconsistent configuration, please check. [ 1814.452454][T27863] A link change request failed with some changes committed already. Interface bond0 may have been left with an inconsistent configuration, please check. [ 1814.554334][T27856] lo speed is unknown, defaulting to 1000 [ 1814.562868][T27856] lo speed is unknown, defaulting to 1000 [ 1814.603586][T27875] netlink: 4 bytes leftover after parsing attributes in process `syz.2.13341'. [ 1814.649256][T27878] FAULT_INJECTION: forcing a failure. [ 1814.649256][T27878] name failslab, interval 1, probability 0, space 0, times 0 [ 1814.663006][T27878] CPU: 1 UID: 0 PID: 27878 Comm: syz.1.13342 Not tainted syzkaller #0 PREEMPT(full) [ 1814.663035][T27878] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 03/18/2026 [ 1814.663048][T27878] Call Trace: [ 1814.663057][T27878] [ 1814.663066][T27878] dump_stack_lvl+0xe8/0x150 [ 1814.663103][T27878] should_fail_ex+0x412/0x560 [ 1814.663138][T27878] should_failslab+0xa8/0x100 [ 1814.663163][T27878] kmem_cache_alloc_node_noprof+0x8f/0x690 [ 1814.663194][T27878] ? __alloc_skb+0x186/0x7d0 [ 1814.663230][T27878] ? __alloc_skb+0x1d0/0x7d0 [ 1814.663255][T27878] ? __local_bh_enable_ip+0xd0/0x130 [ 1814.663288][T27878] __alloc_skb+0x1d0/0x7d0 [ 1814.663315][T27878] ? __x64_sys_sendmmsg+0xa0/0xc0 [ 1814.663350][T27878] ? do_syscall_64+0x15f/0xf80 [ 1814.663379][T27878] alloc_skb_with_frags+0xca/0x890 [ 1814.663424][T27878] sock_alloc_send_pskb+0x878/0x990 [ 1814.663465][T27878] ? __pfx_sock_alloc_send_pskb+0x10/0x10 [ 1814.663485][T27878] ? kasan_quarantine_put+0xbb/0x1f0 [ 1814.663514][T27878] ? lockdep_hardirqs_on+0x7a/0x110 [ 1814.663543][T27878] ? unix_dgram_sendmsg+0x57c/0x18d0 [ 1814.663567][T27878] ? kmem_cache_free+0x180/0x630 [ 1814.663598][T27878] ? bpf_lsm_socket_getpeersec_dgram+0x9/0x20 [ 1814.663631][T27878] unix_dgram_sendmsg+0x460/0x18d0 [ 1814.663681][T27878] ? __pfx_unix_dgram_sendmsg+0x10/0x10 [ 1814.663714][T27878] ? aa_sock_msg_perm+0xda/0x1b0 [ 1814.663742][T27878] ? unix_seqpacket_sendmsg+0x111/0x1e0 [ 1814.663770][T27878] ____sys_sendmsg+0x972/0x9f0 [ 1814.663800][T27878] ? __might_fault+0xaf/0x130 [ 1814.663833][T27878] ? __pfx_____sys_sendmsg+0x10/0x10 [ 1814.663873][T27878] ? import_iovec+0x73/0xa0 [ 1814.663899][T27878] ___sys_sendmsg+0x2a5/0x360 [ 1814.663927][T27878] ? __lock_acquire+0x6b5/0x2cf0 [ 1814.663957][T27878] ? __pfx____sys_sendmsg+0x10/0x10 [ 1814.663986][T27878] ? __lock_acquire+0x6b5/0x2cf0 [ 1814.664018][T27878] ? kstrtouint+0x6e/0xe0 [ 1814.664089][T27878] __sys_sendmmsg+0x27c/0x4e0 [ 1814.664127][T27878] ? __pfx___sys_sendmmsg+0x10/0x10 [ 1814.664155][T27878] ? __mutex_unlock_slowpath+0x1be/0x6f0 [ 1814.664219][T27878] ? ksys_write+0x242/0x270 [ 1814.664252][T27878] ? __pfx_ksys_write+0x10/0x10 [ 1814.664289][T27878] __x64_sys_sendmmsg+0xa0/0xc0 [ 1814.664320][T27878] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1814.664342][T27878] do_syscall_64+0x15f/0xf80 [ 1814.664366][T27878] ? trace_irq_disable+0x3b/0x140 [ 1814.664389][T27878] ? clear_bhb_loop+0x40/0x90 [ 1814.664415][T27878] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1814.664436][T27878] RIP: 0033:0x7efcbd99c819 [ 1814.664456][T27878] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 1814.664474][T27878] RSP: 002b:00007efcbe90f028 EFLAGS: 00000246 ORIG_RAX: 0000000000000133 [ 1814.664497][T27878] RAX: ffffffffffffffda RBX: 00007efcbdc15fa0 RCX: 00007efcbd99c819 [ 1814.664512][T27878] RDX: 0000000004000190 RSI: 0000200000000180 RDI: 0000000000000003 [ 1814.664526][T27878] RBP: 00007efcbe90f090 R08: 0000000000000000 R09: 0000000000000000 [ 1814.664539][T27878] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000002 [ 1814.664552][T27878] R13: 00007efcbdc16038 R14: 00007efcbdc15fa0 R15: 00007fff33d9d728 [ 1814.664586][T27878] [ 1814.676678][T27874] bond4: up delay (2) is not a multiple of miimon (80), value rounded to 0 ms [ 1814.907617][T27881] netlink: 8 bytes leftover after parsing attributes in process `syz.2.13341'. [ 1814.944780][T27874] bond4: entered promiscuous mode [ 1815.018201][T27874] 8021q: adding VLAN 0 to HW filter on device bond4 [ 1815.065267][T27875] bond4: Invalid ad_actor_system MAC address. [ 1815.102291][T27875] bond4: option ad_actor_system: invalid value (7) [ 1815.125867][T27875] bond4 (unregistering): Released all slaves [ 1815.135314][T27891] netlink: 32 bytes leftover after parsing attributes in process `syz.4.13344'. [ 1815.374997][T25214] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1815.601362][T27890] syz_tun: left promiscuous mode [ 1815.633395][T27890] bridge0: port 2(bridge_slave_1) entered disabled state [ 1815.641268][T27890] bridge0: port 1(bridge_slave_0) entered disabled state [ 1815.940316][T27890] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 1815.977409][T27890] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 1816.256760][T27890] veth1_macvtap: left allmulticast mode [ 1816.374574][T27890] macsec0: left allmulticast mode [ 1816.388196][T27890] macsec1: left allmulticast mode [ 1816.461008][T27890] bond4: left promiscuous mode [ 1816.471719][ T3143] lo speed is unknown, defaulting to 1000 [ 1816.491631][ T3143] sqz0: Port: 1 Link DOWN [ 1816.493196][T31070] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1816.557193][ T48] netdevsim netdevsim4 netdevsim0: unset [1, 0] type 2 family 0 port 6081 - 0 [ 1816.567939][ T48] netdevsim netdevsim4 netdevsim0: unset [1, 1] type 2 family 0 port 20000 - 0 [ 1816.589308][ T3143] lo speed is unknown, defaulting to 1000 [ 1816.595515][ T48] netdevsim netdevsim4 netdevsim1: unset [1, 0] type 2 family 0 port 6081 - 0 [ 1816.607925][T27886] lo speed is unknown, defaulting to 1000 [ 1816.621697][ T48] netdevsim netdevsim4 netdevsim1: unset [1, 1] type 2 family 0 port 20000 - 0 [ 1816.651306][ T48] netdevsim netdevsim4 netdevsim2: unset [1, 0] type 2 family 0 port 6081 - 0 [ 1816.661467][ T48] netdevsim netdevsim4 netdevsim2: unset [1, 1] type 2 family 0 port 20000 - 0 [ 1816.679161][T27886] lo speed is unknown, defaulting to 1000 [ 1816.694858][ T48] netdevsim netdevsim4 netdevsim3: unset [1, 0] type 2 family 0 port 6081 - 0 [ 1816.705781][ T48] netdevsim netdevsim4 netdevsim3: unset [1, 1] type 2 family 0 port 20000 - 0 [ 1816.821817][T27908] netlink: 'syz.4.13348': attribute type 1 has an invalid length. [ 1816.906208][T27908] 8021q: adding VLAN 0 to HW filter on device bond5 [ 1817.205842][T27914] rdma_op ffff888079bb91f0 conn xmit_rdma 0000000000000000 [ 1817.617821][T31070] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1817.715067][T27923] syzkaller1: entered promiscuous mode [ 1817.733006][T27923] syzkaller1: entered allmulticast mode [ 1817.966998][T27937] nci: __nci_request: wait_for_completion_interruptible_timeout failed -512 [ 1818.001714][T27943] nci: __nci_request: wait_for_completion_interruptible_timeout failed -512 [ 1818.148477][T27947] __nla_validate_parse: 2 callbacks suppressed [ 1818.148499][T27947] netlink: 8 bytes leftover after parsing attributes in process `syz.2.13355'. [ 1818.278253][T27951] syzkaller0: entered promiscuous mode [ 1818.285131][T27951] syzkaller0: entered allmulticast mode [ 1818.495578][T27960] netlink: 'syz.3.13361': attribute type 11 has an invalid length. [ 1818.507728][T27960] netlink: 'syz.3.13361': attribute type 23 has an invalid length. [ 1818.530432][T27960] netlink: 224 bytes leftover after parsing attributes in process `syz.3.13361'. [ 1818.710031][T27974] netlink: 24 bytes leftover after parsing attributes in process `syz.0.13364'. [ 1818.731844][T25011] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1818.769908][T27975] netlink: 'syz.0.13364': attribute type 1 has an invalid length. [ 1818.829157][T27980] netlink: 'syz.2.13366': attribute type 2 has an invalid length. [ 1818.838205][T27980] netlink: 16118 bytes leftover after parsing attributes in process `syz.2.13366'. [ 1818.877740][T27975] workqueue: Failed to create a rescuer kthread for wq "bond5": -EINTR [ 1819.211592][T28002] netlink: 8 bytes leftover after parsing attributes in process `syz.0.13372'. [ 1819.531500][T28020] netlink: 8 bytes leftover after parsing attributes in process `syz.1.13373'. [ 1819.540763][T28020] netlink: 16 bytes leftover after parsing attributes in process `syz.1.13373'. [ 1819.560608][T28020] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 1819.609542][T28020] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 1819.666343][T28022] lo speed is unknown, defaulting to 1000 [ 1819.699115][T28026] netlink: 156 bytes leftover after parsing attributes in process `syz.2.13376'. [ 1819.726378][T28024] netdevsim netdevsim0 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1819.765291][T28029] netlink: 156 bytes leftover after parsing attributes in process `syz.2.13376'. [ 1819.769624][T28022] lo speed is unknown, defaulting to 1000 [ 1819.831287][T31069] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1819.926909][T28024] netdevsim netdevsim0 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1820.097920][T28024] netdevsim netdevsim0 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1820.187678][T28038] netlink: 280 bytes leftover after parsing attributes in process `syz.1.13381'. [ 1820.425404][T28024] netdevsim netdevsim0 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1820.666018][T31070] netdevsim netdevsim0 eth0: set [1, 0] type 2 family 0 port 6081 - 0 [ 1820.707926][ T48] netdevsim netdevsim0 eth1: set [1, 0] type 2 family 0 port 6081 - 0 [ 1820.863708][T31069] netdevsim netdevsim0 eth2: set [1, 0] type 2 family 0 port 6081 - 0 [ 1820.943588][T25011] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1821.064584][T25015] netdevsim netdevsim0 eth3: set [1, 0] type 2 family 0 port 6081 - 0 [ 1821.219915][T28068] netlink: 'syz.0.13387': attribute type 1 has an invalid length. [ 1821.228126][T28072] netlink: 'syz.0.13387': attribute type 1 has an invalid length. [ 1821.283617][T28072] 8021q: adding VLAN 0 to HW filter on device bond5 [ 1821.491444][T28084] bond4: option lacp_active: mode dependency failed, not supported in mode balance-rr(0) [ 1821.515135][T28084] bond4 (unregistering): Released all slaves [ 1821.765928][T28095] syzkaller0: entered promiscuous mode [ 1821.785691][T28095] syzkaller0: entered allmulticast mode [ 1822.084648][T25011] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1822.691672][ C0] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1822.743049][T28102] nci: __nci_request: wait_for_completion_interruptible_timeout failed -512 [ 1823.254628][T31070] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1824.381198][T25015] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1825.440403][T28098] netlink: 'syz.2.13395': attribute type 3 has an invalid length. [ 1825.448615][T28098] netlink: 'syz.2.13395': attribute type 3 has an invalid length. [ 1825.521682][T25011] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1825.586068][T28134] __nla_validate_parse: 8 callbacks suppressed [ 1825.586089][T28134] netlink: 8 bytes leftover after parsing attributes in process `syz.1.13400'. [ 1825.654787][T28138] RDS: rds_bind could not find a transport for ::ffff:100.1.1.1, load rds_tcp or rds_rdma? [ 1825.796344][T28149] sctp: [Deprecated]: syz.4.13406 (pid 28149) Use of int in max_burst socket option deprecated. [ 1825.796344][T28149] Use struct sctp_assoc_value instead [ 1825.984953][T28151] netlink: get zone limit has 4 unknown bytes [ 1826.027594][T28153] netlink: 4 bytes leftover after parsing attributes in process `syz.4.13408'. [ 1826.631553][T25015] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1826.794963][T28171] netlink: 'syz.2.13415': attribute type 1 has an invalid length. [ 1826.807703][T28171] nbd: error processing sock list [ 1826.830481][T28175] netlink: 'syz.0.13417': attribute type 1 has an invalid length. [ 1827.125721][T28190] lo speed is unknown, defaulting to 1000 [ 1827.153975][T28190] lo speed is unknown, defaulting to 1000 [ 1827.173874][T28198] netlink: 16 bytes leftover after parsing attributes in process `syz.2.13422'. [ 1827.229331][T28200] netlink: 84 bytes leftover after parsing attributes in process `syz.4.13423'. [ 1827.263405][T28200] netlink: 12 bytes leftover after parsing attributes in process `syz.4.13423'. [ 1827.276696][T28203] netlink: 92 bytes leftover after parsing attributes in process `syz.1.13424'. [ 1827.286060][T28200] netlink: 20 bytes leftover after parsing attributes in process `syz.4.13423'. [ 1827.298062][T28193] netlink: 16 bytes leftover after parsing attributes in process `syz.2.13422'. [ 1827.507273][T28214] netlink: 'syz.2.13426': attribute type 1 has an invalid length. [ 1827.600443][T28220] netlink: 'syz.1.13428': attribute type 6 has an invalid length. [ 1827.608616][T28220] netlink: 104 bytes leftover after parsing attributes in process `syz.1.13428'. [ 1827.613885][T28214] 8021q: adding VLAN 0 to HW filter on device bond4 [ 1827.623694][T28220] netlink: 108 bytes leftover after parsing attributes in process `syz.1.13428'. [ 1827.649474][T28217] syz_tun: left promiscuous mode [ 1827.670656][T28217] bond0: (slave syz_tun): Releasing backup interface [ 1827.687467][T28217] bond4: (slave syz_tun): Enslaving as a backup interface with an up link [ 1827.761279][T25011] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1827.967610][T28235] netlink: 'syz.4.13432': attribute type 3 has an invalid length. [ 1828.073143][T28234] lo speed is unknown, defaulting to 1000 [ 1828.092480][T28234] lo speed is unknown, defaulting to 1000 [ 1828.874305][T31070] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1829.165209][T28272] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1829.173857][ C0] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1829.185019][T28274] lo speed is unknown, defaulting to 1000 [ 1829.186139][T28280] netlink: 'syz.2.13444': attribute type 1 has an invalid length. [ 1829.204851][T28272] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1829.286076][T28280] 8021q: adding VLAN 0 to HW filter on device bond5 [ 1829.335751][T28292] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1829.387912][T28272] netlink: 'syz.4.13441': attribute type 1 has an invalid length. [ 1829.398377][T28274] lo speed is unknown, defaulting to 1000 [ 1829.405315][T28295] net_ratelimit: 3 callbacks suppressed [ 1829.405335][T28295] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1829.422040][ C0] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1829.432528][ C0] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1829.440707][ C0] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1829.449551][ C0] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1829.458016][ C0] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1829.466584][ C0] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1829.474792][ C0] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1829.483233][ C0] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1829.491702][ C0] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1829.542836][T28281] bond5: (slave veth3): Enslaving as an active interface with an up link [ 1830.863571][T28329] __nla_validate_parse: 11 callbacks suppressed [ 1830.863595][T28329] netlink: 4 bytes leftover after parsing attributes in process `syz.3.13455'. [ 1830.897502][T28330] netlink: 4 bytes leftover after parsing attributes in process `syz.3.13455'. [ 1830.949061][T28333] netlink: 12 bytes leftover after parsing attributes in process `syz.3.13455'. [ 1831.837519][T28335] delete_channel: no stack [ 1831.866750][T28376] netlink: 20 bytes leftover after parsing attributes in process `syz.0.13466'. [ 1831.974536][T28376] vlan0: entered promiscuous mode [ 1831.999179][T28376] dummy0: entered promiscuous mode [ 1832.498962][T28397] bond0: peer notification delay (9) is not a multiple of miimon (100), value rounded to 0 ms [ 1832.538897][T28399] macsec0: entered allmulticast mode [ 1832.551851][T28404] veth1_macvtap: entered allmulticast mode [ 1832.583295][T28404] macsec0: left allmulticast mode [ 1832.617000][T28404] veth1_macvtap: left allmulticast mode [ 1832.680283][T28394] netdevsim netdevsim3 netdevsim0: entered allmulticast mode [ 1833.089859][T28432] netlink: 'syz.4.13477': attribute type 1 has an invalid length. [ 1833.113715][T28431] delete_channel: no stack [ 1833.150439][T28434] netlink: 12 bytes leftover after parsing attributes in process `syz.4.13477'. [ 1833.156028][T28432] bond6: entered promiscuous mode [ 1833.165686][T28432] 8021q: adding VLAN 0 to HW filter on device bond6 [ 1833.166977][T28434] netlink: 12 bytes leftover after parsing attributes in process `syz.4.13477'. [ 1833.315954][T28432] bond6: (slave bridge3): making interface the new active one [ 1833.324524][T28432] bridge3: entered promiscuous mode [ 1833.335954][T28432] bond6: (slave bridge3): Enslaving as an active interface with an up link [ 1833.685022][T28454] netlink: 36 bytes leftover after parsing attributes in process `syz.2.13482'. [ 1833.719612][T28454] netlink: 36 bytes leftover after parsing attributes in process `syz.2.13482'. [ 1833.750686][T28454] netlink: 36 bytes leftover after parsing attributes in process `syz.2.13482'. [ 1833.907801][T28459] netlink: 48 bytes leftover after parsing attributes in process `syz.0.13484'. [ 1834.375806][T28454] bridge0: port 1(bridge_slave_0) entered disabled state [ 1834.511896][T25219] net_ratelimit: 272 callbacks suppressed [ 1834.511921][T25219] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1834.810478][T28454] veth1_vlan: left allmulticast mode [ 1834.943472][T25213] netdevsim netdevsim2 netdevsim0: unset [1, 0] type 2 family 0 port 6081 - 0 [ 1834.943508][T28484] faux_driver regulatory: loading /lib/firmware/regulatory.db failed with error -4 [ 1834.963184][T25213] netdevsim netdevsim2 netdevsim1: unset [1, 0] type 2 family 0 port 6081 - 0 [ 1834.985373][T25213] netdevsim netdevsim2 netdevsim2: unset [1, 0] type 2 family 0 port 6081 - 0 [ 1835.005301][T28484] faux_driver regulatory: Direct firmware load for regulatory.db failed with error -4 [ 1835.021893][T25213] netdevsim netdevsim2 netdevsim3: unset [1, 0] type 2 family 0 port 6081 - 0 [ 1835.031417][T28484] faux_driver regulatory: Falling back to sysfs fallback for: regulatory.db [ 1835.197037][T28510] tipc: Started in network mode [ 1835.220023][T28510] tipc: Node identity aec30c169638, cluster identity 4711 [ 1835.245455][T28510] tipc: Enabled bearer , priority 0 [ 1835.295504][T28517] syzkaller0: entered promiscuous mode [ 1835.326075][T28517] syzkaller0: entered allmulticast mode [ 1835.382169][T28517] tipc: Resetting bearer [ 1835.445062][T28504] tipc: Resetting bearer [ 1835.553561][T28504] tipc: Disabling bearer [ 1835.583803][T28537] netlink: 'syz.1.13495': attribute type 11 has an invalid length. [ 1835.671509][T26288] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1835.702907][T28519] sctp: [Deprecated]: syz.2.13491 (pid 28519) Use of struct sctp_assoc_value in delayed_ack socket option. [ 1835.702907][T28519] Use struct sctp_sack_info instead [ 1835.749470][T28519] sctp: [Deprecated]: syz.2.13491 (pid 28519) Use of struct sctp_assoc_value in delayed_ack socket option. [ 1835.749470][T28519] Use struct sctp_sack_info instead [ 1835.838160][T28547] syzkaller0: entered promiscuous mode [ 1835.876199][T28547] syzkaller0: entered allmulticast mode [ 1835.920767][T28554] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 1835.964990][T28556] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 1836.026158][T28561] __nla_validate_parse: 178 callbacks suppressed [ 1836.026182][T28561] netlink: 44 bytes leftover after parsing attributes in process `syz.3.13499'. [ 1836.161594][T28564] sctp: [Deprecated]: syz.0.13500 (pid 28564) Use of int in max_burst socket option. [ 1836.161594][T28564] Use struct sctp_assoc_value instead [ 1836.371654][T28573] netlink: 'syz.4.13502': attribute type 1 has an invalid length. [ 1836.562998][T28573] 8021q: adding VLAN 0 to HW filter on device bond7 [ 1836.613069][T28580] netlink: 60 bytes leftover after parsing attributes in process `syz.1.13505'. [ 1836.696016][T28584] bond7: (slave ip6gretap1): making interface the new active one [ 1836.723474][T28584] bond7: (slave ip6gretap1): Enslaving as an active interface with an up link [ 1836.833423][T25219] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1836.888380][T28597] netlink: 'syz.1.13508': attribute type 11 has an invalid length. [ 1836.907263][T28597] netlink: 140848 bytes leftover after parsing attributes in process `syz.1.13508'. [ 1837.265235][T28617] 8021q: VLANs not supported on syzkaller1 [ 1837.412586][T28628] netlink: 12 bytes leftover after parsing attributes in process `syz.1.13518'. [ 1837.429258][T28628] netlink: 72 bytes leftover after parsing attributes in process `syz.1.13518'. [ 1837.667837][T28644] netlink: 324 bytes leftover after parsing attributes in process `syz.3.13523'. [ 1837.748221][T28644] netlink: 24 bytes leftover after parsing attributes in process `syz.3.13523'. [ 1837.770175][T28647] netlink: 8 bytes leftover after parsing attributes in process `syz.3.13523'. [ 1837.782618][T28646] netlink: 4 bytes leftover after parsing attributes in process `syz.2.13524'. [ 1837.793071][T28644] bridge0: port 3(syz_tun) entered blocking state [ 1837.810483][T28644] bridge0: port 3(syz_tun) entered disabled state [ 1837.827783][T28644] syz_tun: entered allmulticast mode [ 1837.841653][T28644] syz_tun: entered promiscuous mode [ 1837.903737][T28646] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 1837.951625][T28646] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 1837.974012][T31075] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1837.989782][T28646] netlink: 12 bytes leftover after parsing attributes in process `syz.2.13524'. [ 1838.006703][T28653] x_tables: duplicate underflow at hook 1 [ 1838.514160][T28683] netlink: 'syz.1.13534': attribute type 1 has an invalid length. [ 1838.527515][T28684] IPVS: set_ctl: invalid protocol: 43 10.1.1.2:20000 [ 1838.577304][T28686] netlink: 'syz.1.13534': attribute type 1 has an invalid length. [ 1838.590574][T28687] RDS: rds_bind could not find a transport for ::ffff:100.1.1.2, load rds_tcp or rds_rdma? [ 1838.749874][T28693] FAULT_INJECTION: forcing a failure. [ 1838.749874][T28693] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 1838.781427][T28693] CPU: 1 UID: 0 PID: 28693 Comm: syz.0.13536 Not tainted syzkaller #0 PREEMPT(full) [ 1838.781458][T28693] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 03/18/2026 [ 1838.781471][T28693] Call Trace: [ 1838.781481][T28693] [ 1838.781490][T28693] dump_stack_lvl+0xe8/0x150 [ 1838.781525][T28693] should_fail_ex+0x412/0x560 [ 1838.781561][T28693] _copy_from_user+0x2d/0xb0 [ 1838.781585][T28693] ___sys_sendmsg+0x1c6/0x360 [ 1838.781615][T28693] ? __lock_acquire+0x6b5/0x2cf0 [ 1838.781648][T28693] ? __pfx____sys_sendmsg+0x10/0x10 [ 1838.781675][T28693] ? __lock_acquire+0x6b5/0x2cf0 [ 1838.781706][T28693] ? kstrtouint+0x6e/0xe0 [ 1838.781795][T28693] __sys_sendmmsg+0x27c/0x4e0 [ 1838.781833][T28693] ? __pfx___sys_sendmmsg+0x10/0x10 [ 1838.781862][T28693] ? __mutex_unlock_slowpath+0x1be/0x6f0 [ 1838.781919][T28693] ? ksys_write+0x242/0x270 [ 1838.781953][T28693] ? __pfx_ksys_write+0x10/0x10 [ 1838.781988][T28693] __x64_sys_sendmmsg+0xa0/0xc0 [ 1838.782019][T28693] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1838.782050][T28693] do_syscall_64+0x15f/0xf80 [ 1838.782075][T28693] ? trace_irq_disable+0x3b/0x140 [ 1838.782098][T28693] ? clear_bhb_loop+0x40/0x90 [ 1838.782125][T28693] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1838.782144][T28693] RIP: 0033:0x7f9bbaf9c819 [ 1838.782166][T28693] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 1838.782184][T28693] RSP: 002b:00007f9bbbdd3028 EFLAGS: 00000246 ORIG_RAX: 0000000000000133 [ 1838.782205][T28693] RAX: ffffffffffffffda RBX: 00007f9bbb215fa0 RCX: 00007f9bbaf9c819 [ 1838.782220][T28693] RDX: 0000000004000190 RSI: 0000200000000180 RDI: 0000000000000003 [ 1838.782233][T28693] RBP: 00007f9bbbdd3090 R08: 0000000000000000 R09: 0000000000000000 [ 1838.782246][T28693] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000002 [ 1838.782258][T28693] R13: 00007f9bbb216038 R14: 00007f9bbb215fa0 R15: 00007ffed76cb9a8 [ 1838.782291][T28693] [ 1839.202080][T31075] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1839.793760][T28731] netlink: 'syz.0.13545': attribute type 2 has an invalid length. [ 1839.902804][T28707] ipvlan1: entered promiscuous mode [ 1839.978465][T28710] lo speed is unknown, defaulting to 1000 [ 1839.989462][T28731] hmac(sha224): entered promiscuous mode [ 1839.995821][T28710] lo speed is unknown, defaulting to 1000 [ 1840.213235][T28742] netlink: 'syz.4.13548': attribute type 1 has an invalid length. [ 1840.214510][T28739] lo speed is unknown, defaulting to 1000 [ 1840.414283][T25219] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1840.434465][T28739] lo speed is unknown, defaulting to 1000 [ 1840.566375][T28753] lo speed is unknown, defaulting to 1000 [ 1840.753318][T28753] lo speed is unknown, defaulting to 1000 [ 1841.047154][T28764] __nla_validate_parse: 11 callbacks suppressed [ 1841.047179][T28764] netlink: 4 bytes leftover after parsing attributes in process `syz.1.13554'. [ 1841.064684][T28762] IPVS: Scheduler module ip_vs_ not found [ 1841.561686][T25213] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1841.675350][T28784] netlink: 72 bytes leftover after parsing attributes in process `syz.1.13558'. [ 1841.703003][T28784] netlink: 20 bytes leftover after parsing attributes in process `syz.1.13558'. [ 1841.726546][T28784] netlink: 20 bytes leftover after parsing attributes in process `syz.1.13558'. [ 1841.873252][T28783] bridge_slave_0: left allmulticast mode [ 1841.907315][T28783] bridge_slave_0: left promiscuous mode [ 1841.944564][T28783] bridge0: port 1(bridge_slave_0) entered disabled state [ 1841.975318][T28783] bridge_slave_1: left allmulticast mode [ 1841.992546][T28783] bridge_slave_1: left promiscuous mode [ 1842.016035][T28783] bridge0: port 2(bridge_slave_1) entered disabled state [ 1842.033943][T28783] team0: Port device team_slave_0 removed [ 1842.043962][T28783] team0: Port device team_slave_1 removed [ 1842.055427][T28783] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 1842.063818][T28783] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 1842.078537][T28783] A link change request failed with some changes committed already. Interface hsr_slave_0 may have been left with an inconsistent configuration, please check. [ 1842.297801][T28797] FAULT_INJECTION: forcing a failure. [ 1842.297801][T28797] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 1842.311463][T28797] CPU: 0 UID: 0 PID: 28797 Comm: syz.4.13561 Not tainted syzkaller #0 PREEMPT(full) [ 1842.311492][T28797] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 03/18/2026 [ 1842.311505][T28797] Call Trace: [ 1842.311514][T28797] [ 1842.311521][T28797] dump_stack_lvl+0xe8/0x150 [ 1842.311553][T28797] should_fail_ex+0x412/0x560 [ 1842.311581][T28797] _copy_from_user+0x2d/0xb0 [ 1842.311599][T28797] ___sys_sendmsg+0x1c6/0x360 [ 1842.311624][T28797] ? __lock_acquire+0x6b5/0x2cf0 [ 1842.311650][T28797] ? __pfx____sys_sendmsg+0x10/0x10 [ 1842.311672][T28797] ? __lock_acquire+0x6b5/0x2cf0 [ 1842.311698][T28797] ? kstrtouint+0x6e/0xe0 [ 1842.311754][T28797] __sys_sendmmsg+0x27c/0x4e0 [ 1842.311785][T28797] ? __pfx___sys_sendmmsg+0x10/0x10 [ 1842.311808][T28797] ? __mutex_unlock_slowpath+0x1be/0x6f0 [ 1842.311853][T28797] ? ksys_write+0x242/0x270 [ 1842.311880][T28797] ? __pfx_ksys_write+0x10/0x10 [ 1842.311911][T28797] __x64_sys_sendmmsg+0xa0/0xc0 [ 1842.311937][T28797] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1842.311958][T28797] do_syscall_64+0x15f/0xf80 [ 1842.311980][T28797] ? clear_bhb_loop+0x40/0x90 [ 1842.312001][T28797] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1842.312017][T28797] RIP: 0033:0x7f632e79c819 [ 1842.312034][T28797] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 1842.312048][T28797] RSP: 002b:00007f632f72a028 EFLAGS: 00000246 ORIG_RAX: 0000000000000133 [ 1842.312076][T28797] RAX: ffffffffffffffda RBX: 00007f632ea15fa0 RCX: 00007f632e79c819 [ 1842.312088][T28797] RDX: 0000000004000190 RSI: 0000200000000180 RDI: 0000000000000003 [ 1842.312099][T28797] RBP: 00007f632f72a090 R08: 0000000000000000 R09: 0000000000000000 [ 1842.312109][T28797] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000002 [ 1842.312119][T28797] R13: 00007f632ea16038 R14: 00007f632ea15fa0 R15: 00007ffcffe28028 [ 1842.312146][T28797] [ 1842.794538][T28807] netlink: 172 bytes leftover after parsing attributes in process `syz.0.13564'. [ 1842.842689][T31069] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1842.959936][T28814] netlink: 'syz.4.13565': attribute type 1 has an invalid length. [ 1843.019823][T28809] lo speed is unknown, defaulting to 1000 [ 1843.036224][T28809] lo speed is unknown, defaulting to 1000 [ 1843.148410][T28819] tc_dump_action: action bad kind [ 1843.449224][T28828] SET target dimension over the limit! [ 1843.471632][T28828] netlink: 20 bytes leftover after parsing attributes in process `syz.1.13571'. [ 1843.526140][T28828] ip6gre1: entered promiscuous mode [ 1843.552571][T28828] ip6gre1: entered allmulticast mode [ 1843.561985][T28833] netlink: 8 bytes leftover after parsing attributes in process `syz.0.13573'. [ 1843.632632][T28828] netlink: 'syz.1.13571': attribute type 6 has an invalid length. [ 1843.645325][T28828] netlink: 72 bytes leftover after parsing attributes in process `syz.1.13571'. [ 1843.672288][T28837] netlink: 212336 bytes leftover after parsing attributes in process `syz.3.13572'. [ 1843.688921][T28839] netlink: 4 bytes leftover after parsing attributes in process `syz.0.13574'. [ 1843.865718][T28846] openvswitch: netlink: IP tunnel dst address not specified [ 1843.964118][T31069] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1844.141151][T28863] x_tables: ip6_tables: rpfilter match: used from hooks FORWARD, but only valid from PREROUTING [ 1844.410692][T28864] RDS: rds_bind could not find a transport for ::ffff:172.20.20.170, load rds_tcp or rds_rdma? [ 1844.620361][T28863] syzkaller0: entered promiscuous mode [ 1844.632084][T28863] syzkaller0: entered allmulticast mode [ 1844.772892][T28905] netlink: 'syz.1.13587': attribute type 1 has an invalid length. [ 1845.118086][T31069] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1846.283104][T31069] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1846.558670][T20731] lec:lec_start_xmit: lec0:No lecd attached [ 1847.431465][T13072] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1848.211769][T28871] lo speed is unknown, defaulting to 1000 [ 1848.223016][T28906] bond0: option arp_interval: mode dependency failed, not supported in mode balance-tlb(5) [ 1848.275226][T28871] lo speed is unknown, defaulting to 1000 [ 1848.276257][T28895] lo speed is unknown, defaulting to 1000 [ 1848.317543][T28897] lo speed is unknown, defaulting to 1000 [ 1848.341781][T28935] lo speed is unknown, defaulting to 1000 [ 1848.399095][T28942] A link change request failed with some changes committed already. Interface gre1 may have been left with an inconsistent configuration, please check. [ 1848.414938][T28941] A link change request failed with some changes committed already. Interface gre1 may have been left with an inconsistent configuration, please check. [ 1848.551860][T25219] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1848.555480][T28895] lo speed is unknown, defaulting to 1000 [ 1848.674184][T28950] __nla_validate_parse: 1 callbacks suppressed [ 1848.674205][T28950] netlink: 36 bytes leftover after parsing attributes in process `syz.2.13599'. [ 1848.951066][T28897] lo speed is unknown, defaulting to 1000 [ 1848.971315][T28953] syzkaller0: entered promiscuous mode [ 1848.981362][T28953] syzkaller0: entered allmulticast mode [ 1849.148278][T28935] lo speed is unknown, defaulting to 1000 [ 1849.681531][T13072] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1850.351452][T28964] atomic_op ffff888028e72998 conn xmit_atomic 0000000000000000 [ 1850.535985][T28968] lo: entered allmulticast mode [ 1850.653358][T28981] netlink: 8 bytes leftover after parsing attributes in process `syz.1.13609'. [ 1850.723734][T28986] netlink: 12 bytes leftover after parsing attributes in process `syz.3.13612'. [ 1850.768800][T28985] netlink: 36 bytes leftover after parsing attributes in process `syz.2.13610'. [ 1850.785695][T28985] input: Bluetooth HID Boot Protocol Device as /devices/virtual/bluetooth/hci2/hci2:200/input9 [ 1850.799191][T25219] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1850.837412][T28988] sctp: [Deprecated]: syz.0.13611 (pid 28988) Use of int in max_burst socket option. [ 1850.837412][T28988] Use struct sctp_assoc_value instead [ 1851.026271][T29000] netlink: 'syz.3.13614': attribute type 1 has an invalid length. [ 1851.120059][T29006] netlink: 4 bytes leftover after parsing attributes in process `syz.3.13614'. [ 1851.230285][T29000] 8021q: adding VLAN 0 to HW filter on device bond3 [ 1851.261913][T29018] netlink: 'syz.2.13615': attribute type 1 has an invalid length. [ 1851.269382][T29006] bond3 (unregistering): Released all slaves [ 1851.276833][T29015] netlink: 28 bytes leftover after parsing attributes in process `syz.4.13616'. [ 1851.431886][T29008] lo speed is unknown, defaulting to 1000 [ 1851.469923][T29008] lo speed is unknown, defaulting to 1000 [ 1851.477189][T29012] lo speed is unknown, defaulting to 1000 [ 1851.913769][T13072] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1852.008443][T29049] tap0: tun_chr_ioctl cmd 1074025681 [ 1852.121252][ C0] lec0: NETDEV WATCHDOG: CPU: 0: transmit queue 0 timed out 5560 ms [ 1852.129553][ C0] lec:lec_tx_timeout: lec0 [ 1852.158856][T29012] lo speed is unknown, defaulting to 1000 [ 1852.230361][T29063] netlink: 16 bytes leftover after parsing attributes in process `syz.0.13627'. [ 1852.347780][T29061] bond0: entered promiscuous mode [ 1852.365872][T29061] geneve3: entered promiscuous mode [ 1852.393697][T29061] batadv0: entered promiscuous mode [ 1852.417004][T29061] debugfs: 'hsr1' already exists in 'hsr' [ 1852.431409][T29061] Cannot create hsr debugfs directory [ 1852.441835][T29061] hsr1: Slave A (bond0) is not up; please bring it up to get a fully working HSR network [ 1852.457152][T29061] hsr1: Slave B (batadv0) is not up; please bring it up to get a fully working HSR network [ 1852.478156][T29061] 8021q: adding VLAN 0 to HW filter on device hsr1 [ 1852.497369][T29061] bond0: left promiscuous mode [ 1852.506249][T29061] geneve3: left promiscuous mode [ 1852.531342][T29061] batadv0: left promiscuous mode [ 1853.044796][T31069] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1853.141923][T29097] vlan3: entered promiscuous mode [ 1853.147173][T29097] geneve1: entered promiscuous mode [ 1853.153303][T29097] vlan3: entered allmulticast mode [ 1853.158478][T29097] geneve1: entered allmulticast mode [ 1853.409731][ T1299] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1853.422420][ T1299] lec:lec_start_xmit: lec0:No lecd attached [ 1853.524412][T29107] netlink: 20 bytes leftover after parsing attributes in process `syz.4.13640'. [ 1853.738804][T29116] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 1853.795852][T29116] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 1853.934073][T29133] lo: entered allmulticast mode [ 1854.189275][T29145] netlink: 1 bytes leftover after parsing attributes in process `syz.0.13652'. [ 1854.212771][T31075] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1854.225128][T29145] nbd: must specify at least one socket [ 1854.339855][T29150] xt_hashlimit: size too large, truncated to 1048576 [ 1854.529495][T29162] lo speed is unknown, defaulting to 1000 [ 1854.537628][T29162] lo speed is unknown, defaulting to 1000 [ 1854.624428][T29167] IPv6: NLM_F_CREATE should be specified when creating new route [ 1854.645594][T29167] IPv6: RTM_NEWROUTE with no NLM_F_CREATE or NLM_F_REPLACE [ 1854.652990][T29167] IPv6: NLM_F_CREATE should be set when creating new route [ 1854.660331][T29167] IPv6: NLM_F_CREATE should be set when creating new route [ 1854.667648][T29167] IPv6: NLM_F_CREATE should be set when creating new route [ 1855.001981][T29180] netlink: 24 bytes leftover after parsing attributes in process `syz.2.13660'. [ 1855.128660][T29185] netlink: 'syz.4.13661': attribute type 8 has an invalid length. [ 1855.361829][T31069] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1856.017307][T29212] netlink: 8 bytes leftover after parsing attributes in process `syz.3.13669'. [ 1856.043401][T29212] netlink: 8 bytes leftover after parsing attributes in process `syz.3.13669'. [ 1856.096943][T29212] netlink: 'syz.3.13669': attribute type 1 has an invalid length. [ 1856.113878][T29212] netlink: 'syz.3.13669': attribute type 1 has an invalid length. [ 1856.133871][T29212] netlink: 84 bytes leftover after parsing attributes in process `syz.3.13669'. [ 1856.246099][T29222] netlink: 'syz.1.13674': attribute type 2 has an invalid length. [ 1856.286035][T25214] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 1856.298311][T29222] netlink: 'syz.1.13674': attribute type 2 has an invalid length. [ 1856.306953][T25214] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 1856.404971][T29219] lo speed is unknown, defaulting to 1000 [ 1856.433393][T29219] lo speed is unknown, defaulting to 1000 [ 1856.465533][T29230] netlink: 'syz.2.13676': attribute type 1 has an invalid length. [ 1856.482603][T31075] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1856.493910][T29230] syzkaller0: entered promiscuous mode [ 1856.505505][T29230] syzkaller0: entered allmulticast mode [ 1856.536689][T29229] lo speed is unknown, defaulting to 1000 [ 1856.621207][T29236] netlink: 'syz.3.13678': attribute type 1 has an invalid length. [ 1856.682398][T29236] bond3: entered promiscuous mode [ 1856.690058][T29236] 8021q: adding VLAN 0 to HW filter on device bond3 [ 1856.726692][T29236] bond3: (slave bridge8): making interface the new active one [ 1856.746268][T29236] bridge8: entered promiscuous mode [ 1856.755125][T29236] bridge8: left promiscuous mode [ 1856.800253][T29229] lo speed is unknown, defaulting to 1000 [ 1856.893750][T29240] lo speed is unknown, defaulting to 1000 [ 1857.671651][T25214] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1858.771319][T25214] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1859.171142][ C0] lec0: NETDEV WATCHDOG: CPU: 0: transmit queue 0 timed out 5740 ms [ 1859.179255][ C0] lec:lec_tx_timeout: lec0 [ 1859.921505][T25213] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1860.387189][T29240] lo speed is unknown, defaulting to 1000 [ 1860.530757][T29262] netlink: 12 bytes leftover after parsing attributes in process `syz.4.13685'. [ 1860.762898][T29270] sit0: entered allmulticast mode [ 1860.983870][T29289] netlink: 'syz.3.13689': attribute type 1 has an invalid length. [ 1861.041301][T25219] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1862.196201][T25219] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1863.351180][T26288] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1864.491577][T31070] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1865.278824][T29331] netlink: 52 bytes leftover after parsing attributes in process `syz.3.13699'. [ 1865.555790][T29349] netlink: 'syz.4.13702': attribute type 6 has an invalid length. [ 1865.591455][T25219] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1865.754932][T29365] netlink: 12 bytes leftover after parsing attributes in process `syz.4.13706'. [ 1865.850668][T29365] bond8: entered promiscuous mode [ 1865.873230][T29365] 8021q: adding VLAN 0 to HW filter on device bond8 [ 1866.037059][T29376] lo speed is unknown, defaulting to 1000 [ 1866.074387][T29376] lo speed is unknown, defaulting to 1000 [ 1866.087197][T29382] netlink: 220 bytes leftover after parsing attributes in process `syz.4.13710'. [ 1866.218461][T29389] netlink: 12 bytes leftover after parsing attributes in process `syz.2.13712'. [ 1866.228404][T29387] lo speed is unknown, defaulting to 1000 [ 1866.259911][T29393] netlink: 'syz.4.13713': attribute type 83 has an invalid length. [ 1866.287538][T29356] erspan0: entered promiscuous mode [ 1866.297913][T29356] erspan0: entered allmulticast mode [ 1866.565583][T29387] lo speed is unknown, defaulting to 1000 [ 1866.610142][T29402] macvlan0: entered promiscuous mode [ 1866.631692][T29402] netlink: 24 bytes leftover after parsing attributes in process `syz.2.13716'. [ 1866.714968][ T29] audit: type=1804 audit(1776531182.083:37): pid=29407 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=invalid_pcr cause=open_writers comm="syz.2.13716" name="/newroot/237/cgroup.controllers" dev="tmpfs" ino=1233 res=1 errno=0 [ 1866.738626][T25219] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1866.769123][ T29] audit: type=1800 audit(1776531182.083:38): pid=29407 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.2.13716" name="cgroup.controllers" dev="tmpfs" ino=1233 res=0 errno=0 [ 1866.801351][ T29] audit: type=1800 audit(1776531182.123:39): pid=29407 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.2.13716" name="cgroup.controllers" dev="tmpfs" ino=1233 res=0 errno=0 [ 1867.010123][T29416] netlink: 12 bytes leftover after parsing attributes in process `syz.1.13720'. [ 1867.597115][T29426] syzkaller0: entered promiscuous mode [ 1867.604081][T29426] syzkaller0: entered allmulticast mode [ 1867.683554][T29436] veth0_to_batadv: entered promiscuous mode [ 1867.690274][T29436] veth0_to_batadv: entered allmulticast mode [ 1867.785703][T29442] netlink: 'syz.2.13727': attribute type 3 has an invalid length. [ 1867.801832][T29442] netlink: 3 bytes leftover after parsing attributes in process `syz.2.13727'. [ 1867.852721][T25214] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1867.911175][T29448] netlink: 88 bytes leftover after parsing attributes in process `syz.4.13728'. [ 1868.989791][T26288] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1870.131669][T26288] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1871.284531][T25213] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1871.306897][T29456] workqueue: Failed to create a rescuer kthread for wq "wg-crypt-wireguard%d": -EINTR [ 1871.463924][T29467] netlink: 'syz.1.13732': attribute type 1 has an invalid length. [ 1871.466292][T29468] netlink: 12 bytes leftover after parsing attributes in process `syz.4.13731'. [ 1871.507137][T29468] netlink: 8 bytes leftover after parsing attributes in process `syz.4.13731'. [ 1871.560651][T29467] 8021q: adding VLAN 0 to HW filter on device bond5 [ 1871.584218][T29468] netlink: 28 bytes leftover after parsing attributes in process `syz.4.13731'. [ 1871.621395][T29468] netlink: 28 bytes leftover after parsing attributes in process `syz.4.13731'. [ 1871.746726][T29478] lo speed is unknown, defaulting to 1000 [ 1871.773432][T29478] lo speed is unknown, defaulting to 1000 [ 1871.774000][T29464] lo speed is unknown, defaulting to 1000 [ 1871.965308][T29492] netlink: 8 bytes leftover after parsing attributes in process `syz.3.13739'. [ 1872.247320][T29507] netlink: 4 bytes leftover after parsing attributes in process `syz.3.13743'. [ 1872.256977][T29464] lo speed is unknown, defaulting to 1000 [ 1872.401176][T25214] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1872.670969][T29515] lo speed is unknown, defaulting to 1000 [ 1872.716474][T29515] lo speed is unknown, defaulting to 1000 [ 1873.523861][T25214] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1873.538171][T29529] openvswitch: netlink: IPv4 tun info is not correct [ 1873.930385][T29537] tipc: Enabling of bearer rejected, already enabled [ 1874.464337][T29544] xt_CT: No such helper "syz1" [ 1874.477715][T29546] lo speed is unknown, defaulting to 1000 [ 1874.602897][T29546] lo speed is unknown, defaulting to 1000 [ 1874.653154][ T48] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1874.696566][T29557] netlink: 156 bytes leftover after parsing attributes in process `syz.0.13757'. [ 1874.746824][T29557] netlink: 156 bytes leftover after parsing attributes in process `syz.0.13757'. [ 1874.779414][T29555] lo speed is unknown, defaulting to 1000 [ 1874.957788][T29559] netlink: 3 bytes leftover after parsing attributes in process `syz.2.13758'. [ 1875.107670][T29564] netlink: 'syz.2.13760': attribute type 1 has an invalid length. [ 1875.801805][T11497] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1876.941616][T26288] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1878.068408][T11497] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1878.422711][T29555] lo speed is unknown, defaulting to 1000 [ 1878.602830][T29581] netlink: 4 bytes leftover after parsing attributes in process `syz.3.13765'. [ 1878.606946][T29583] netlink: 36 bytes leftover after parsing attributes in process `syz.4.13766'. [ 1878.704359][T29581] netlink: 4 bytes leftover after parsing attributes in process `syz.3.13765'. [ 1878.721592][T29581] netlink: 348 bytes leftover after parsing attributes in process `syz.3.13765'. [ 1878.751120][T29581] netlink: 4 bytes leftover after parsing attributes in process `syz.3.13765'. [ 1878.808761][T29581] netlink: 348 bytes leftover after parsing attributes in process `syz.3.13765'. [ 1878.875821][T29581] netlink: 4 bytes leftover after parsing attributes in process `syz.3.13765'. [ 1879.204798][T31070] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1879.780268][T29595] lo speed is unknown, defaulting to 1000 [ 1879.830551][T29595] lo speed is unknown, defaulting to 1000 [ 1880.341312][T25219] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1880.438520][T29638] netlink: 12 bytes leftover after parsing attributes in process `syz.1.13775'. [ 1880.475642][T29638] netlink: 12 bytes leftover after parsing attributes in process `syz.1.13775'. [ 1880.506236][T29638] netlink: 58 bytes leftover after parsing attributes in process `syz.1.13775'. [ 1880.557319][T29638] xt_policy: output policy not valid in PREROUTING and INPUT [ 1881.128218][T29668] FAULT_INJECTION: forcing a failure. [ 1881.128218][T29668] name failslab, interval 1, probability 0, space 0, times 0 [ 1881.166652][T29668] CPU: 0 UID: 0 PID: 29668 Comm: syz.2.13781 Not tainted syzkaller #0 PREEMPT(full) [ 1881.166682][T29668] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 03/18/2026 [ 1881.166694][T29668] Call Trace: [ 1881.166703][T29668] [ 1881.166712][T29668] dump_stack_lvl+0xe8/0x150 [ 1881.166748][T29668] should_fail_ex+0x412/0x560 [ 1881.166782][T29668] should_failslab+0xa8/0x100 [ 1881.166807][T29668] kmem_cache_alloc_node_noprof+0x8f/0x690 [ 1881.166847][T29668] ? __alloc_skb+0x186/0x7d0 [ 1881.166874][T29668] ? __alloc_skb+0x1d0/0x7d0 [ 1881.166899][T29668] ? __local_bh_enable_ip+0xd0/0x130 [ 1881.166937][T29668] __alloc_skb+0x1d0/0x7d0 [ 1881.166965][T29668] ? __x64_sys_sendmmsg+0xa0/0xc0 [ 1881.166994][T29668] ? do_syscall_64+0x15f/0xf80 [ 1881.167023][T29668] alloc_skb_with_frags+0xca/0x890 [ 1881.167068][T29668] sock_alloc_send_pskb+0x878/0x990 [ 1881.167109][T29668] ? __pfx_sock_alloc_send_pskb+0x10/0x10 [ 1881.167127][T29668] ? kasan_quarantine_put+0xbb/0x1f0 [ 1881.167156][T29668] ? lockdep_hardirqs_on+0x7a/0x110 [ 1881.167185][T29668] ? unix_dgram_sendmsg+0x57c/0x18d0 [ 1881.167209][T29668] ? kmem_cache_free+0x180/0x630 [ 1881.167239][T29668] ? bpf_lsm_socket_getpeersec_dgram+0x9/0x20 [ 1881.167275][T29668] unix_dgram_sendmsg+0x460/0x18d0 [ 1881.167326][T29668] ? __pfx_unix_dgram_sendmsg+0x10/0x10 [ 1881.167358][T29668] ? aa_sock_msg_perm+0xda/0x1b0 [ 1881.167388][T29668] ? unix_seqpacket_sendmsg+0x111/0x1e0 [ 1881.167417][T29668] ____sys_sendmsg+0x972/0x9f0 [ 1881.167447][T29668] ? __might_fault+0xaf/0x130 [ 1881.167481][T29668] ? __pfx_____sys_sendmsg+0x10/0x10 [ 1881.167522][T29668] ? import_iovec+0x73/0xa0 [ 1881.167548][T29668] ___sys_sendmsg+0x2a5/0x360 [ 1881.167577][T29668] ? __lock_acquire+0x6b5/0x2cf0 [ 1881.167609][T29668] ? __pfx____sys_sendmsg+0x10/0x10 [ 1881.167636][T29668] ? __lock_acquire+0x6b5/0x2cf0 [ 1881.167668][T29668] ? kstrtouint+0x6e/0xe0 [ 1881.167741][T29668] __sys_sendmmsg+0x27c/0x4e0 [ 1881.167779][T29668] ? __pfx___sys_sendmmsg+0x10/0x10 [ 1881.167808][T29668] ? __mutex_unlock_slowpath+0x1be/0x6f0 [ 1881.167872][T29668] ? ksys_write+0x242/0x270 [ 1881.167904][T29668] ? __pfx_ksys_write+0x10/0x10 [ 1881.167939][T29668] __x64_sys_sendmmsg+0xa0/0xc0 [ 1881.167970][T29668] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1881.167992][T29668] do_syscall_64+0x15f/0xf80 [ 1881.168016][T29668] ? trace_irq_disable+0x3b/0x140 [ 1881.168039][T29668] ? clear_bhb_loop+0x40/0x90 [ 1881.168064][T29668] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1881.168085][T29668] RIP: 0033:0x7fdff259c819 [ 1881.168106][T29668] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 1881.168125][T29668] RSP: 002b:00007fdff3502028 EFLAGS: 00000246 ORIG_RAX: 0000000000000133 [ 1881.168149][T29668] RAX: ffffffffffffffda RBX: 00007fdff2815fa0 RCX: 00007fdff259c819 [ 1881.168163][T29668] RDX: 0000000004000190 RSI: 0000200000000180 RDI: 0000000000000003 [ 1881.168176][T29668] RBP: 00007fdff3502090 R08: 0000000000000000 R09: 0000000000000000 [ 1881.168188][T29668] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000002 [ 1881.168200][T29668] R13: 00007fdff2816038 R14: 00007fdff2815fa0 R15: 00007ffe3abf3ba8 [ 1881.168232][T29668] [ 1881.194469][T29670] block nbd0: not configured, cannot reconfigure [ 1881.512248][T25219] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1882.655284][T25219] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1883.831470][T25219] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1884.971479][T11497] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1885.749775][T29703] x_tables: duplicate underflow at hook 2 [ 1886.005259][T29705] lo speed is unknown, defaulting to 1000 [ 1886.034586][T29705] lo speed is unknown, defaulting to 1000 [ 1886.081682][T25219] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1886.582726][T29743] netlink: 'syz.0.13796': attribute type 12 has an invalid length. [ 1886.607987][T29747] IPVS: sh: FWM 3 0x00000003 - no destination available [ 1886.940343][T29759] lo speed is unknown, defaulting to 1000 [ 1886.983636][T29759] lo speed is unknown, defaulting to 1000 [ 1887.058153][T29768] __nla_validate_parse: 1 callbacks suppressed [ 1887.058173][T29768] netlink: 16 bytes leftover after parsing attributes in process `syz.0.13802'. [ 1887.222221][T11497] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1887.323377][T29778] netlink: 12 bytes leftover after parsing attributes in process `syz.0.13803'. [ 1887.343531][T29779] netlink: 12 bytes leftover after parsing attributes in process `syz.0.13803'. [ 1887.661291][T29790] ip6t_rpfilter: unknown options [ 1887.878757][T29792] netlink: 8 bytes leftover after parsing attributes in process `syz.0.13805'. [ 1888.006460][T29800] netlink: 20 bytes leftover after parsing attributes in process `syz.4.13807'. [ 1888.322336][T29807] netlink: 'syz.1.13808': attribute type 22 has an invalid length. [ 1888.340551][T29807] netlink: 16 bytes leftover after parsing attributes in process `syz.1.13808'. [ 1888.351273][T25219] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1888.374119][T29809] netlink: 'syz.1.13808': attribute type 22 has an invalid length. [ 1888.395741][T29809] netlink: 16 bytes leftover after parsing attributes in process `syz.1.13808'. [ 1888.901403][T29825] xt_hashlimit: size too large, truncated to 1048576 [ 1888.912079][T29826] netlink: 4 bytes leftover after parsing attributes in process `syz.0.13816'. [ 1888.991860][T29824] : entered promiscuous mode [ 1889.002829][T29829] netlink: 8 bytes leftover after parsing attributes in process `syz.1.13817'. [ 1889.327585][T29829] netdevsim netdevsim1 netdevsim3 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 1889.346560][T29829] netdevsim netdevsim1 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1889.488516][T29832] lo speed is unknown, defaulting to 1000 [ 1889.494882][T31070] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1889.530279][T29832] lo speed is unknown, defaulting to 1000 [ 1889.821988][T29829] netdevsim netdevsim1 netdevsim2 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 1889.837239][T29858] netlink: 12 bytes leftover after parsing attributes in process `syz.2.13821'. [ 1889.857173][T29829] netdevsim netdevsim1 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1889.965774][T29857] vxcan3: entered promiscuous mode [ 1890.114282][T29829] netdevsim netdevsim1 netdevsim1 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 1890.141107][T29829] netdevsim netdevsim1 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1890.278985][T29829] netdevsim netdevsim1 netdevsim0 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 1890.291414][T29829] netdevsim netdevsim1 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1890.414257][T29874] netlink: 'syz.3.13827': attribute type 1 has an invalid length. [ 1890.624448][T31070] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1890.659901][T31070] netdevsim netdevsim1 eth0: set [0, 0] type 1 family 0 port 8472 - 0 [ 1890.692815][T31070] netdevsim netdevsim1 eth0: set [1, 0] type 2 family 0 port 6081 - 0 [ 1890.847244][T31070] netdevsim netdevsim1 eth1: set [0, 0] type 1 family 0 port 8472 - 0 [ 1890.872094][T31070] netdevsim netdevsim1 eth1: set [1, 0] type 2 family 0 port 6081 - 0 [ 1891.059846][T31070] netdevsim netdevsim1 eth2: set [0, 0] type 1 family 0 port 8472 - 0 [ 1891.075681][T31070] netdevsim netdevsim1 eth2: set [1, 0] type 2 family 0 port 6081 - 0 [ 1891.126031][T11497] netdevsim netdevsim1 eth3: set [0, 0] type 1 family 0 port 8472 - 0 [ 1891.150701][T11497] netdevsim netdevsim1 eth3: set [1, 0] type 2 family 0 port 6081 - 0 [ 1891.177476][T29894] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 1891.676945][T29932] netlink: 'syz.1.13844': attribute type 1 has an invalid length. [ 1891.744402][T29932] 8021q: adding VLAN 0 to HW filter on device bond6 [ 1891.751394][T31070] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1891.835607][T29932] bond6: (slave gretap3): making interface the new active one [ 1891.884330][T29932] bond6: (slave gretap3): Enslaving as an active interface with an up link [ 1892.217969][T29937] bond6 (unregistering): (slave gretap3): Releasing active interface [ 1892.236453][T29937] bond6 (unregistering): Released all slaves [ 1892.251997][T29951] xt_CT: You must specify a L4 protocol and not use inversions on it [ 1892.300113][T29914] nci: __nci_request: wait_for_completion_interruptible_timeout failed -512 [ 1892.564373][T29942] lo speed is unknown, defaulting to 1000 [ 1892.616984][T29942] lo speed is unknown, defaulting to 1000 [ 1892.882655][T29969] netlink: 'syz.2.13853': attribute type 22 has an invalid length. [ 1892.891231][T26288] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1892.906539][T29969] bond0: option ad_select: invalid value (16) [ 1893.194119][T29973] ip6erspan0: entered allmulticast mode [ 1893.238247][T29975] syzkaller0: entered promiscuous mode [ 1893.248906][T29975] syzkaller0: entered allmulticast mode [ 1893.370590][T29976] __nla_validate_parse: 9 callbacks suppressed [ 1893.370610][T29976] netlink: 36 bytes leftover after parsing attributes in process `syz.0.13854'. [ 1894.021191][T11497] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1894.479442][T30012] lo speed is unknown, defaulting to 1000 [ 1894.502542][T30012] lo speed is unknown, defaulting to 1000 [ 1894.701589][T30027] x_tables: duplicate underflow at hook 2 [ 1894.728069][T30029] netlink: 4 bytes leftover after parsing attributes in process `syz.3.13868'. [ 1894.988470][T30036] netlink: 4 bytes leftover after parsing attributes in process `syz.4.13871'. [ 1895.016381][T30036] netlink: 12 bytes leftover after parsing attributes in process `syz.4.13871'. [ 1895.115797][T30048] netlink: 8 bytes leftover after parsing attributes in process `syz.3.13873'. [ 1895.146040][T26288] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1895.231107][T30053] netlink: 'syz.1.13876': attribute type 1 has an invalid length. [ 1895.408796][T30055] bond6: entered promiscuous mode [ 1895.430117][T30055] bond6: entered allmulticast mode [ 1895.444822][T30062] netlink: 'syz.3.13877': attribute type 1 has an invalid length. [ 1895.453391][T30055] 8021q: adding VLAN 0 to HW filter on device bond6 [ 1895.536463][T30058] bridge2: entered promiscuous mode [ 1895.542393][T30058] bridge2: entered allmulticast mode [ 1895.557596][T30058] bond6: (slave bridge2): Enslaving as a backup interface with an up link [ 1895.621254][T26288] bond6: Warning: No 802.3ad response from the link partner for any adapters in the bond [ 1895.658257][T30062] workqueue: Failed to create a rescuer kthread for wq "bond6": -EINTR [ 1895.761573][T11497] bond6: Warning: No 802.3ad response from the link partner for any adapters in the bond [ 1895.841547][T30067] lo speed is unknown, defaulting to 1000 [ 1895.895869][T30077] syzkaller1: entered promiscuous mode [ 1895.901959][T30077] syzkaller1: entered allmulticast mode [ 1895.911405][T30074] netlink: 68 bytes leftover after parsing attributes in process `syz.3.13881'. [ 1895.912482][T30067] lo speed is unknown, defaulting to 1000 [ 1896.233389][T30092] netlink: 'syz.4.13883': attribute type 1 has an invalid length. [ 1896.274139][T30092] netlink: 228 bytes leftover after parsing attributes in process `syz.4.13883'. [ 1896.275113][ T48] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1896.302640][T30092] netlink: 8 bytes leftover after parsing attributes in process `syz.4.13883'. [ 1896.595182][T30109] netlink: 9 bytes leftover after parsing attributes in process `syz.1.13888'. [ 1896.622330][T30110] netlink: 8 bytes leftover after parsing attributes in process `syz.1.13888'. [ 1896.646987][T30109] gretap0: entered promiscuous mode [ 1896.664546][T30110] 0ªî{X¹¦: renamed from gretap0 [ 1896.675676][T30110] 0ªî{X¹¦: left promiscuous mode [ 1896.682187][T30110] 0ªî{X¹¦: entered allmulticast mode [ 1896.689950][T30110] A link change request failed with some changes committed already. Interface 30ªî{X¹¦ may have been left with an inconsistent configuration, please check. [ 1896.708090][T30098] syzkaller1: entered promiscuous mode [ 1896.714808][T30098] syzkaller1: entered allmulticast mode [ 1896.784258][T30117] netlink: 'syz.2.13889': attribute type 1 has an invalid length. [ 1896.977928][T30128] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 1897.204901][T30136] bond0: Error: Cannot enslave bond to itself. [ 1897.401500][T26288] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1897.798630][T30150] netlink: 'syz.1.13897': attribute type 1 has an invalid length. [ 1897.952267][T30150] 8021q: adding VLAN 0 to HW filter on device bond7 [ 1897.995705][T30158] vlan3: entered allmulticast mode [ 1898.005921][T30158] bond7: entered allmulticast mode [ 1898.078984][T30163] bond7: (slave geneve3): making interface the new active one [ 1898.102176][T30163] geneve3: entered allmulticast mode [ 1898.121849][T30163] bond7: (slave geneve3): Enslaving as an active interface with an up link [ 1898.541206][ T48] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1898.581672][T30184] __nla_validate_parse: 3 callbacks suppressed [ 1898.581698][T30184] netlink: 8 bytes leftover after parsing attributes in process `syz.1.13906'. [ 1898.615175][T30184] netlink: 12 bytes leftover after parsing attributes in process `syz.1.13906'. [ 1899.112688][T30192] netlink: 8 bytes leftover after parsing attributes in process `syz.1.13908'. [ 1899.133219][T30192] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check. [ 1899.196645][T30192] xt_CT: You must specify a L4 protocol and not use inversions on it [ 1899.216395][T30194] netlink: 60 bytes leftover after parsing attributes in process `syz.2.13909'. [ 1899.255701][T30194] netlink: 'syz.2.13909': attribute type 2 has an invalid length. [ 1899.272828][T30194] netlink: 'syz.2.13909': attribute type 1 has an invalid length. [ 1899.292497][T30194] netlink: 152 bytes leftover after parsing attributes in process `syz.2.13909'. [ 1899.472961][T30205] FAULT_INJECTION: forcing a failure. [ 1899.472961][T30205] name failslab, interval 1, probability 0, space 0, times 0 [ 1899.548028][T30205] CPU: 0 UID: 0 PID: 30205 Comm: syz.2.13912 Not tainted syzkaller #0 PREEMPT(full) [ 1899.548059][T30205] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 03/18/2026 [ 1899.548073][T30205] Call Trace: [ 1899.548081][T30205] [ 1899.548091][T30205] dump_stack_lvl+0xe8/0x150 [ 1899.548128][T30205] should_fail_ex+0x412/0x560 [ 1899.548163][T30205] should_failslab+0xa8/0x100 [ 1899.548188][T30205] __kmalloc_node_noprof+0xf0/0x7c0 [ 1899.548219][T30205] ? alloc_slab_obj_exts+0xbf/0x240 [ 1899.548252][T30205] alloc_slab_obj_exts+0xbf/0x240 [ 1899.548282][T30205] __memcg_slab_post_alloc_hook+0x53c/0xa80 [ 1899.548331][T30205] kmem_cache_alloc_node_noprof+0x40e/0x690 [ 1899.548361][T30205] ? __alloc_skb+0x1d0/0x7d0 [ 1899.548402][T30205] ? kmem_cache_alloc_node_noprof+0x23e/0x690 [ 1899.548436][T30205] __alloc_skb+0x1d0/0x7d0 [ 1899.548461][T30205] ? __x64_sys_sendmmsg+0xa0/0xc0 [ 1899.548491][T30205] ? do_syscall_64+0x15f/0xf80 [ 1899.548519][T30205] alloc_skb_with_frags+0xca/0x890 [ 1899.548562][T30205] sock_alloc_send_pskb+0x878/0x990 [ 1899.548604][T30205] ? __pfx_sock_alloc_send_pskb+0x10/0x10 [ 1899.548624][T30205] ? kasan_quarantine_put+0xbb/0x1f0 [ 1899.548652][T30205] ? lockdep_hardirqs_on+0x7a/0x110 [ 1899.548679][T30205] ? unix_dgram_sendmsg+0x57c/0x18d0 [ 1899.548704][T30205] ? kmem_cache_free+0x180/0x630 [ 1899.548733][T30205] ? bpf_lsm_socket_getpeersec_dgram+0x9/0x20 [ 1899.548769][T30205] unix_dgram_sendmsg+0x460/0x18d0 [ 1899.548824][T30205] ? __pfx_unix_dgram_sendmsg+0x10/0x10 [ 1899.548858][T30205] ? aa_sock_msg_perm+0xda/0x1b0 [ 1899.548887][T30205] ? unix_seqpacket_sendmsg+0x111/0x1e0 [ 1899.548918][T30205] ____sys_sendmsg+0x972/0x9f0 [ 1899.548949][T30205] ? __might_fault+0xaf/0x130 [ 1899.548984][T30205] ? __pfx_____sys_sendmsg+0x10/0x10 [ 1899.549025][T30205] ? import_iovec+0x73/0xa0 [ 1899.549052][T30205] ___sys_sendmsg+0x2a5/0x360 [ 1899.549081][T30205] ? __lock_acquire+0x6b5/0x2cf0 [ 1899.549113][T30205] ? __pfx____sys_sendmsg+0x10/0x10 [ 1899.549141][T30205] ? __lock_acquire+0x6b5/0x2cf0 [ 1899.549173][T30205] ? kstrtouint+0x6e/0xe0 [ 1899.549247][T30205] __sys_sendmmsg+0x27c/0x4e0 [ 1899.549284][T30205] ? __pfx___sys_sendmmsg+0x10/0x10 [ 1899.549312][T30205] ? __mutex_unlock_slowpath+0x1be/0x6f0 [ 1899.549368][T30205] ? ksys_write+0x242/0x270 [ 1899.549409][T30205] ? __pfx_ksys_write+0x10/0x10 [ 1899.549447][T30205] __x64_sys_sendmmsg+0xa0/0xc0 [ 1899.549477][T30205] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1899.549500][T30205] do_syscall_64+0x15f/0xf80 [ 1899.549528][T30205] ? trace_irq_disable+0x3b/0x140 [ 1899.549552][T30205] ? clear_bhb_loop+0x40/0x90 [ 1899.549577][T30205] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1899.549598][T30205] RIP: 0033:0x7fdff259c819 [ 1899.549617][T30205] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 1899.549636][T30205] RSP: 002b:00007fdff3502028 EFLAGS: 00000246 ORIG_RAX: 0000000000000133 [ 1899.549659][T30205] RAX: ffffffffffffffda RBX: 00007fdff2815fa0 RCX: 00007fdff259c819 [ 1899.549673][T30205] RDX: 0000000004000190 RSI: 0000200000000180 RDI: 0000000000000003 [ 1899.549684][T30205] RBP: 00007fdff3502090 R08: 0000000000000000 R09: 0000000000000000 [ 1899.549697][T30205] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000002 [ 1899.549709][T30205] R13: 00007fdff2816038 R14: 00007fdff2815fa0 R15: 00007ffe3abf3ba8 [ 1899.549741][T30205] [ 1899.563881][T30206] lo speed is unknown, defaulting to 1000 [ 1899.676764][T11497] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1899.686319][T30200] netlink: 156 bytes leftover after parsing attributes in process `syz.0.13910'. [ 1899.752926][T30206] lo speed is unknown, defaulting to 1000 [ 1899.945901][T30200] netlink: 156 bytes leftover after parsing attributes in process `syz.0.13910'. [ 1900.171336][T30221] netlink: 4 bytes leftover after parsing attributes in process `syz.2.13917'. [ 1900.183685][T30219] tap0: tun_chr_ioctl cmd 1074025680 [ 1900.506300][T30236] netlink: 'syz.1.13921': attribute type 298 has an invalid length. [ 1900.555411][T30236] netlink: 4 bytes leftover after parsing attributes in process `syz.1.13921'. [ 1900.608632][T30237] netlink: 12 bytes leftover after parsing attributes in process `syz.1.13921'. [ 1900.821761][T31069] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1901.028816][T30248] netlink: 'syz.2.13924': attribute type 9 has an invalid length. [ 1901.340757][T30250] netlink: 'syz.4.13925': attribute type 3 has an invalid length. [ 1901.388866][T30250] netlink: 'syz.4.13925': attribute type 1 has an invalid length. [ 1901.397989][T30250] NCSI netlink: No device for ifindex 808464432 [ 1901.496150][T30258] netlink: 'syz.1.13927': attribute type 89 has an invalid length. [ 1901.833525][T30265] lo speed is unknown, defaulting to 1000 [ 1901.853201][T30265] lo speed is unknown, defaulting to 1000 [ 1901.965604][T26287] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1902.374949][T30288] nbd2: detected capacity change from 0 to 96 [ 1902.390544][T29707] block nbd2: Dead connection, failed to find a fallback [ 1903.102968][T11497] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1903.438343][T30337] bond6: entered promiscuous mode [ 1903.670725][T30358] __nla_validate_parse: 8 callbacks suppressed [ 1903.670748][T30358] netlink: 12 bytes leftover after parsing attributes in process `syz.2.13950'. [ 1903.759497][T30358] bond6: option active_slave: mode dependency failed, not supported in mode balance-xor(2) [ 1903.787323][T30358] bond6 (unregistering): Released all slaves [ 1903.809475][T30372] xt_CHECKSUM: unsupported CHECKSUM operation 68 [ 1903.909198][T30362] lo speed is unknown, defaulting to 1000 [ 1903.930388][T30362] lo speed is unknown, defaulting to 1000 [ 1904.132329][T30385] netlink: 'syz.0.13958': attribute type 8 has an invalid length. [ 1904.144406][T30383] netlink: 'syz.3.13956': attribute type 1 has an invalid length. [ 1904.163257][T30385] sch_fq: defrate 0 ignored. [ 1904.175643][T30383] netlink: 'syz.3.13956': attribute type 2 has an invalid length. [ 1904.221104][T30383] netlink: 'syz.3.13956': attribute type 2 has an invalid length. [ 1904.251167][T30383] netlink: 'syz.3.13956': attribute type 2 has an invalid length. [ 1904.251668][T31069] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1904.272284][T30383] netlink: 'syz.3.13956': attribute type 1 has an invalid length. [ 1904.305637][T30383] netlink: 'syz.3.13956': attribute type 2 has an invalid length. [ 1905.365402][T30429] netlink: 280 bytes leftover after parsing attributes in process `syz.1.13970'. [ 1905.421909][T31069] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1905.588298][T30448] netlink: 4 bytes leftover after parsing attributes in process `syz.2.13972'. [ 1905.627157][T30452] netlink: 'syz.0.13975': attribute type 1 has an invalid length. [ 1905.691960][T30455] netlink: 12 bytes leftover after parsing attributes in process `syz.2.13972'. [ 1905.785185][T30452] 8021q: adding VLAN 0 to HW filter on device bond7 [ 1905.838690][T30464] sctp: [Deprecated]: syz.3.13978 (pid 30464) Use of struct sctp_assoc_value in delayed_ack socket option. [ 1905.838690][T30464] Use struct sctp_sack_info instead [ 1905.958494][T30469] netlink: 'syz.1.13979': attribute type 10 has an invalid length. [ 1906.124223][T30469] veth0_vlan: left promiscuous mode [ 1906.165401][T30469] veth0_vlan: entered promiscuous mode [ 1906.194311][T30469] team0: Device veth0_vlan failed to register rx_handler [ 1906.432382][T30495] netlink: 64 bytes leftover after parsing attributes in process `syz.1.13987'. [ 1906.459946][T30493] netlink: 24 bytes leftover after parsing attributes in process `syz.2.13986'. [ 1906.469571][T30495] syzkaller1: entered promiscuous mode [ 1906.475518][T30495] syzkaller1: entered allmulticast mode [ 1906.551295][T31069] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1906.684549][T30505] netlink: 8 bytes leftover after parsing attributes in process `syz.4.13988'. [ 1906.716429][T30498] lo speed is unknown, defaulting to 1000 [ 1906.725054][T30498] lo speed is unknown, defaulting to 1000 [ 1906.903137][T30518] ip6tnl3: entered promiscuous mode [ 1906.999191][T30526] A link change request failed with some changes committed already. Interface bridge_slave_0 may have been left with an inconsistent configuration, please check. [ 1907.284661][T30542] netlink: 80 bytes leftover after parsing attributes in process `syz.3.13998'. [ 1907.363230][T30548] netlink: 8 bytes leftover after parsing attributes in process `syz.3.13999'. [ 1907.374839][T30548] netlink: 8 bytes leftover after parsing attributes in process `syz.3.13999'. [ 1907.681953][ T48] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1908.518504][T30562] xt_TCPMSS: Only works on TCP SYN packets [ 1908.639992][T30565] bond6: (slave geneve2): Enslaving as an active interface with an up link [ 1908.649180][T26287] netdevsim netdevsim2 netdevsim0: set [1, 0] type 2 family 0 port 20000 - 0 [ 1908.662698][T26287] netdevsim netdevsim2 netdevsim1: set [1, 0] type 2 family 0 port 20000 - 0 [ 1908.674270][T30565] 8021q: adding VLAN 0 to HW filter on device bond6 [ 1908.682761][T30566] __nla_validate_parse: 5 callbacks suppressed [ 1908.682779][T30566] netlink: 20 bytes leftover after parsing attributes in process `syz.2.14003'. [ 1908.698494][T26287] netdevsim netdevsim2 netdevsim2: set [1, 0] type 2 family 0 port 20000 - 0 [ 1908.708112][T30565] netlink: 20 bytes leftover after parsing attributes in process `syz.2.14003'. [ 1908.718513][T26287] netdevsim netdevsim2 netdevsim3: set [1, 0] type 2 family 0 port 20000 - 0 [ 1908.801168][T26287] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1909.586191][T30578] lo speed is unknown, defaulting to 1000 [ 1909.593288][T30578] lo speed is unknown, defaulting to 1000 [ 1909.624502][T30579] sctp: [Deprecated]: syz.2.14006 (pid 30579) Use of int in maxseg socket option. [ 1909.624502][T30579] Use struct sctp_assoc_value instead [ 1909.775122][T30513] nci: __nci_request: wait_for_completion_interruptible_timeout failed -512 [ 1909.802771][T30518] netlink: 12 bytes leftover after parsing attributes in process `syz.0.13993'. [ 1909.922093][ T48] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1910.061530][T30584] lo speed is unknown, defaulting to 1000 [ 1910.070078][T30584] lo speed is unknown, defaulting to 1000 [ 1910.260354][T30594] openvswitch: netlink: VXLAN extension 307 out of range max 1 [ 1910.576173][T30604] netlink: 12 bytes leftover after parsing attributes in process `syz.4.14013'. [ 1911.043284][ T48] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1911.146110][T30607] netlink: 'syz.2.14016': attribute type 1 has an invalid length. [ 1911.173393][T30607] netlink: 6 bytes leftover after parsing attributes in process `syz.2.14016'. [ 1911.429115][T20731] lec:lec_start_xmit: lec0:No lecd attached [ 1911.457427][T30634] netlink: 28 bytes leftover after parsing attributes in process `syz.1.14020'. [ 1911.541976][T30636] netlink: 32 bytes leftover after parsing attributes in process `syz.2.14021'. [ 1911.555648][T30634] netlink: 160 bytes leftover after parsing attributes in process `syz.1.14020'. [ 1911.571218][T30638] netlink: 12 bytes leftover after parsing attributes in process `syz.3.14022'. [ 1911.644392][T30645] netlink: 'syz.1.14020': attribute type 39 has an invalid length. [ 1911.698651][T30647] netlink: 36 bytes leftover after parsing attributes in process `syz.3.14022'. [ 1911.894447][T30650] bond6 (unregistering): Released all slaves [ 1912.172256][T31069] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1912.658110][T30679] netlink: 'syz.1.14032': attribute type 1 has an invalid length. [ 1912.856237][T30685] bond8: (slave vxcan3): The slave device specified does not support setting the MAC address [ 1912.868232][T30685] bond8: (slave vxcan3): Error -95 calling set_mac_address [ 1912.919216][T30687] geneve4: entered promiscuous mode [ 1912.943097][T30687] geneve4: entered allmulticast mode [ 1913.007289][T26288] netdevsim netdevsim3 netdevsim0: set [1, 0] type 2 family 0 port 20000 - 0 [ 1913.025432][T26288] netdevsim netdevsim3 netdevsim1: set [1, 0] type 2 family 0 port 20000 - 0 [ 1913.036730][T30692] netlink: 'syz.0.14038': attribute type 4 has an invalid length. [ 1913.048133][T26288] netdevsim netdevsim3 netdevsim2: set [1, 0] type 2 family 0 port 20000 - 0 [ 1913.061155][T30692] netlink: 'syz.0.14038': attribute type 4 has an invalid length. [ 1913.069262][T26288] netdevsim netdevsim3 netdevsim3: set [1, 0] type 2 family 0 port 20000 - 0 [ 1913.089132][T30692] netlink: 'syz.0.14038': attribute type 4 has an invalid length. [ 1913.291445][T31069] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1913.319815][T30697] 8021q: adding VLAN 0 to HW filter on device ipvlan2 [ 1913.344017][T30697] bond0: (slave ipvlan2): enslaved VLAN challenged slave. Adding VLANs will be blocked as long as it is part of bond. [ 1913.404167][T30708] batadv_slave_0: entered promiscuous mode [ 1913.768444][T30730] bond9: option mode: invalid value (254) [ 1913.775864][T30730] bond9 (unregistering): Released all slaves [ 1914.047831][T30698] nci: __nci_request: wait_for_completion_interruptible_timeout failed -512 [ 1914.192958][T30704] batadv_slave_0: left promiscuous mode [ 1914.303584][T30744] netlink: 'syz.4.14052': attribute type 1 has an invalid length. [ 1914.342688][T30744] gretap1: entered allmulticast mode [ 1914.431561][T31069] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1914.509712][T30754] __nla_validate_parse: 3 callbacks suppressed [ 1914.509735][T30754] netlink: 32 bytes leftover after parsing attributes in process `syz.3.14054'. [ 1914.635417][T11497] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 1914.661434][T11497] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 1914.694396][T30739] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 1914.713382][T30754] syzkaller0: entered promiscuous mode [ 1914.715484][T30752] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 1914.735241][T30754] syzkaller0: entered allmulticast mode [ 1914.847398][ T1299] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1915.188496][T30780] veth0_to_hsr: Caught tx_queue_len zero misconfig [ 1915.213694][T30787] openvswitch: netlink: ufid size 20 bytes exceeds the range (1, 16) [ 1915.237309][T30787] openvswitch: netlink: Either Ethernet header or EtherType is required. [ 1915.263310][T30787] netlink: 8 bytes leftover after parsing attributes in process `syz.0.14063'. [ 1915.315423][T30793] netlink: 4 bytes leftover after parsing attributes in process `syz.0.14063'. [ 1915.336754][T30788] 5nè‹Ò: entered promiscuous mode [ 1915.571724][ T48] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1915.821884][T30812] bond9: option lacp_active: mode dependency failed, not supported in mode balance-alb(6) [ 1915.891291][T30812] bond9 (unregistering): Released all slaves [ 1916.179322][T30827] xt_hashlimit: size too large, truncated to 1048576 [ 1916.198439][T30825] netlink: 8 bytes leftover after parsing attributes in process `syz.0.14070'. [ 1916.214654][T30824] netlink: 8 bytes leftover after parsing attributes in process `syz.0.14070'. [ 1916.477721][T30828] netlink: 24 bytes leftover after parsing attributes in process `syz.1.14071'. [ 1916.515929][T30828] netlink: 24 bytes leftover after parsing attributes in process `syz.1.14071'. [ 1916.578783][T30851] netlink: 36 bytes leftover after parsing attributes in process `syz.0.14076'. [ 1916.691340][T26288] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1916.879741][T30859] netlink: 212344 bytes leftover after parsing attributes in process `syz.2.14078'. [ 1916.879741][T30860] netlink: 212344 bytes leftover after parsing attributes in process `syz.2.14078'. [ 1917.023005][T30862] netlink: 'syz.2.14079': attribute type 21 has an invalid length. [ 1917.032078][T30862] netlink: 'syz.2.14079': attribute type 4 has an invalid length. [ 1917.039991][T30862] netlink: 'syz.2.14079': attribute type 5 has an invalid length. [ 1917.160953][ C0] lec0: NETDEV WATCHDOG: CPU: 0: transmit queue 0 timed out 5730 ms [ 1917.169043][ C0] lec:lec_tx_timeout: lec0 [ 1917.176075][ C0] lec:lec_start_xmit: lec0:No lecd attached [ 1917.499852][T30870] netlink: 'syz.0.14081': attribute type 1 has an invalid length. [ 1917.638615][T30872] netlink: 'syz.0.14081': attribute type 32 has an invalid length. [ 1917.805974][T26288] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1918.951376][T31070] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1919.247721][T30830] nci: __nci_request: wait_for_completion_interruptible_timeout failed -512 [ 1919.406033][T30874] netlink: 'syz.1.14082': attribute type 6 has an invalid length. [ 1920.071580][T31070] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1920.805189][T30872] workqueue: Failed to create a rescuer kthread for wq "wg-crypt-wireguard%d": -EINTR [ 1921.017490][T30886] __nla_validate_parse: 4 callbacks suppressed [ 1921.017513][T30886] netlink: 288 bytes leftover after parsing attributes in process `syz.1.14085'. [ 1921.201706][ T48] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1921.270628][T30905] Bluetooth: MGMT ver 1.23 [ 1921.448895][T30911] netlink: 96 bytes leftover after parsing attributes in process `syz.3.14093'. [ 1921.479978][T30911] team0 (unregistering): Port device team_slave_0 removed [ 1921.523652][T30917] netlink: 'syz.3.14093': attribute type 58 has an invalid length. [ 1921.532920][T30911] team0 (unregistering): Port device team_slave_1 removed [ 1921.551733][T30917] netlink: 20 bytes leftover after parsing attributes in process `syz.3.14093'. [ 1921.576836][T30911] team0 (unregistering): Port device bond2 removed [ 1921.625645][T30915] netlink: 24 bytes leftover after parsing attributes in process `syz.0.14096'. [ 1921.901573][T30933] netlink: 4 bytes leftover after parsing attributes in process `syz.3.14100'. [ 1921.927508][T30933] sit0: entered promiscuous mode [ 1921.942997][T30933] sit0: entered allmulticast mode [ 1922.190962][ C0] lec0: NETDEV WATCHDOG: CPU: 0: transmit queue 0 timed out 5010 ms [ 1922.199062][ C0] lec:lec_tx_timeout: lec0 [ 1922.322039][ T48] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1922.414943][T30945] netlink: 'syz.0.14104': attribute type 1 has an invalid length. [ 1922.456433][T30945] bond8: entered promiscuous mode [ 1922.462453][T30945] 8021q: adding VLAN 0 to HW filter on device bond8 [ 1922.523832][T30949] 8021q: adding VLAN 0 to HW filter on device bond8 [ 1922.542605][T30949] bond8: (slave wireguard0): The slave device specified does not support setting the MAC address [ 1922.590123][T30949] bond8: (slave wireguard0): Setting fail_over_mac to active for active-backup mode [ 1922.656607][T30949] bond8: (slave wireguard0): making interface the new active one [ 1922.675441][T30949] wireguard0: entered promiscuous mode [ 1922.705646][T30949] bond8: (slave wireguard0): Enslaving as an active interface with an up link [ 1922.833604][T30963] netlink: 4 bytes leftover after parsing attributes in process `syz.4.14108'. [ 1922.861625][T30965] netlink: 'syz.3.14109': attribute type 39 has an invalid length. [ 1922.881834][T30963] hsr_slave_0: left promiscuous mode [ 1922.897766][T30963] hsr_slave_1: left promiscuous mode [ 1923.010595][T30970] sctp: [Deprecated]: syz.2.14111 (pid 30970) Use of int in max_burst socket option deprecated. [ 1923.010595][T30970] Use struct sctp_assoc_value instead [ 1923.040447][T30968] netlink: 12 bytes leftover after parsing attributes in process `syz.0.14110'. [ 1923.238815][T30979] netlink: 40 bytes leftover after parsing attributes in process `syz.1.14114'. [ 1923.248637][T30979] netlink: 40 bytes leftover after parsing attributes in process `syz.1.14114'. [ 1923.481211][T11497] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1923.773750][T30968] nci: __nci_request: wait_for_completion_interruptible_timeout failed -512 [ 1924.129497][T31009] tipc: Enabling of bearer rejected, failed to enable media [ 1924.412652][T31034] netlink: 12 bytes leftover after parsing attributes in process `syz.0.14128'. [ 1924.584586][T26287] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1925.052673][T31071] "syz.1.14136" (31071) uses obsolete ecb(arc4) skcipher [ 1925.276373][T31078] block nbd0: Unsupported socket: should be TCP or UNIX. [ 1925.702666][ T48] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1926.073773][T31077] nci: __nci_request: wait_for_completion_interruptible_timeout failed -512 [ 1926.632901][T31150] x_tables: ip6_tables: mh match: only valid for protocol 135 [ 1926.656684][T31150] x_tables: ip6_tables: mh match: only valid for protocol 135 [ 1926.809991][T31159] syzkaller1: tun_chr_ioctl cmd 1074025677 [ 1926.823681][T31159] syzkaller1: linktype set to 805 [ 1926.831577][ T48] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1926.840668][T31162] __nla_validate_parse: 6 callbacks suppressed [ 1926.840689][T31162] netlink: 8 bytes leftover after parsing attributes in process `syz.3.14154'. [ 1927.116484][T31173] netlink: 12 bytes leftover after parsing attributes in process `syz.3.14156'. [ 1927.347708][T31181] netlink: 28 bytes leftover after parsing attributes in process `syz.1.14158'. [ 1927.890162][T31173] nci: __nci_request: wait_for_completion_interruptible_timeout failed -512 [ 1927.951924][T31191] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 1927.961247][T26287] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1928.600658][T31201] tipc: Enabling of bearer rejected, failed to enable media [ 1928.711592][T31211] netlink: 2 bytes leftover after parsing attributes in process `syz.2.14166'. [ 1929.026972][T31218] netlink: 2 bytes leftover after parsing attributes in process `syz.2.14166'. [ 1929.054389][T31224] tipc: Enabled bearer , priority 0 [ 1929.091282][T25219] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1929.170343][T31225] tipc: Disabling bearer [ 1929.235901][T31227] netlink: 'syz.2.14168': attribute type 12 has an invalid length. [ 1929.244462][T31227] netlink: 190972 bytes leftover after parsing attributes in process `syz.2.14168'. [ 1929.282989][T31231] netlink: 'syz.1.14169': attribute type 1 has an invalid length. [ 1929.339594][T31232] syzkaller1: entered promiscuous mode [ 1929.346632][T31232] syzkaller1: entered allmulticast mode [ 1929.355088][T31231] xt_bpf: check failed: parse error [ 1929.394229][T31231] syzkaller0: entered promiscuous mode [ 1929.407000][T31234] IPVS: set_ctl: invalid protocol: 61 224.0.0.1:20000 [ 1929.413917][T31231] syzkaller0: entered allmulticast mode [ 1929.698823][T31248] netlink: 211856 bytes leftover after parsing attributes in process `syz.1.14175'. [ 1930.116455][T31270] netlink: 8 bytes leftover after parsing attributes in process `syz.0.14181'. [ 1930.148994][T31270] netlink: 12 bytes leftover after parsing attributes in process `syz.0.14181'. [ 1930.211356][T25219] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1930.347908][T31272] netlink: 4 bytes leftover after parsing attributes in process `syz.0.14182'. [ 1930.598514][T31279] sch_tbf: burst 0 is lower than device tunl0 mtu (1480) ! [ 1930.632028][T31281] IPVS: sync thread started: state = BACKUP, mcast_ifn = vcan0, syncid = 0, id = 0 [ 1930.675379][ T29] audit: type=1800 audit(1776531246.043:40): pid=31278 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.3.14184" name=3A202E31323334352E2E2E2E2028313829207238203D2030783363333130303030300A202020202020323A202E31323334352E2E382E20283835292063616C6C2070632B360A202020202020333A202E2E2E2E2E2E2E2E382E2028313829207230203D203078313130303030303066666666666666660A202020202020353A202E2E2E2E2E2E2E2E382E202836362920696620773820733E2030783020676F746F2070632B300A202020202020363A202E2E2E2E2E2E2E2E2E2E20283138292072 dev="tmpfs" ino=2472 res=0 errno=0 [ 1930.977331][T31296] macvtap1: entered promiscuous mode [ 1931.000373][T31296] veth1_to_hsr: entered promiscuous mode [ 1931.020211][T31296] macvtap1: entered allmulticast mode [ 1931.037207][T31296] veth1_to_hsr: entered allmulticast mode [ 1931.326372][ T48] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1931.476324][T31319] tipc: Enabled bearer , priority 0 [ 1931.630854][T31318] tipc: Disabling bearer [ 1931.758487][T31337] netlink: 'syz.4.14202': attribute type 1 has an invalid length. [ 1931.966381][T31342] __nla_validate_parse: 5 callbacks suppressed [ 1931.966404][T31342] netlink: 12 bytes leftover after parsing attributes in process `syz.4.14204'. [ 1932.139119][T31355] netlink: 20 bytes leftover after parsing attributes in process `syz.0.14207'. [ 1932.175840][T31355] netlink: 40 bytes leftover after parsing attributes in process `syz.0.14207'. [ 1932.200540][T31349] netlink: 28 bytes leftover after parsing attributes in process `syz.0.14207'. [ 1932.275320][T31355] netlink: 20 bytes leftover after parsing attributes in process `syz.0.14207'. [ 1932.338819][T31365] netlink: 44 bytes leftover after parsing attributes in process `syz.0.14207'. [ 1932.398109][T31359] netdevsim netdevsim2: Firmware load for './file0/../file0' refused, path contains '..' component [ 1932.461212][ T48] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1932.667446][T31366] vlan3: entered allmulticast mode [ 1932.864749][T31370] syzkaller0: entered promiscuous mode [ 1932.870383][T31370] syzkaller0: entered allmulticast mode [ 1933.618157][T26288] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1934.735273][T31075] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1935.871376][T31075] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1936.562709][T31416] netlink: 4 bytes leftover after parsing attributes in process `syz.1.14212'. [ 1936.981131][ T48] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1936.996153][T31450] netlink: 36 bytes leftover after parsing attributes in process `syz.1.14218'. [ 1937.397189][T31456] netlink: 'syz.1.14220': attribute type 1 has an invalid length. [ 1937.513944][T31448] bond9: option lacp_active: mode dependency failed, not supported in mode balance-rr(0) [ 1937.578086][T31448] bond9 (unregistering): Released all slaves [ 1937.909223][T31472] netlink: 'syz.1.14221': attribute type 2 has an invalid length. [ 1937.918250][T31473] netlink: 148 bytes leftover after parsing attributes in process `syz.0.14222'. [ 1937.951670][T31473] netlink: 116 bytes leftover after parsing attributes in process `syz.0.14222'. [ 1937.993483][T31473] netlink: 24 bytes leftover after parsing attributes in process `syz.0.14222'. [ 1938.151986][ T48] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1938.702474][T31514] netlink: 24 bytes leftover after parsing attributes in process `syz.0.14230'. [ 1938.720036][T31514] netlink: 24 bytes leftover after parsing attributes in process `syz.0.14230'. [ 1939.135573][T31525] netlink: 27 bytes leftover after parsing attributes in process `syz.1.14233'. [ 1939.193476][T31531] netlink: 'syz.2.14236': attribute type 1 has an invalid length. [ 1939.290344][T31531] 8021q: adding VLAN 0 to HW filter on device bond7 [ 1939.298448][ T48] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1939.357149][T31545] netlink: 'syz.4.14237': attribute type 22 has an invalid length. [ 1939.365573][T31545] bond0: option ad_select: invalid value (16) [ 1939.885103][T31575] netlink: 12 bytes leftover after parsing attributes in process `syz.2.14244'. [ 1939.913913][T31562] lo speed is unknown, defaulting to 1000 [ 1939.948896][T31562] lo speed is unknown, defaulting to 1000 [ 1940.158471][T31585] netlink: 52 bytes leftover after parsing attributes in process `syz.0.14245'. [ 1940.230305][T31585] netlink: 'syz.0.14245': attribute type 1 has an invalid length. [ 1940.411937][T31070] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1941.363377][T31633] netlink: 8 bytes leftover after parsing attributes in process `syz.3.14252'. [ 1941.489908][T31623] syzkaller1: entered promiscuous mode [ 1941.505195][T31623] syzkaller1: entered allmulticast mode [ 1941.551198][T26288] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1941.640829][T31643] openvswitch: netlink: Flow key attr not present in new flow. [ 1941.685984][T31643] openvswitch: netlink: Flow key attr not present in new flow. [ 1941.706836][T31643] openvswitch: netlink: Flow key attr not present in new flow. [ 1941.749890][T31634] lo speed is unknown, defaulting to 1000 [ 1941.768942][T31634] lo speed is unknown, defaulting to 1000 [ 1942.262836][T31646] netlink: 'syz.3.14253': attribute type 9 has an invalid length. [ 1942.296400][T31646] __nla_validate_parse: 3 callbacks suppressed [ 1942.296423][T31646] netlink: 212368 bytes leftover after parsing attributes in process `syz.3.14253'. [ 1942.451304][T31670] netlink: 8 bytes leftover after parsing attributes in process `syz.0.14259'. [ 1942.467897][T31670] netlink: 4 bytes leftover after parsing attributes in process `syz.0.14259'. [ 1942.569069][T31069] netdevsim netdevsim0 eth0: set [0, 0] type 1 family 0 port 8472 - 0 [ 1942.599065][T31069] netdevsim netdevsim0 eth1: set [0, 0] type 1 family 0 port 8472 - 0 [ 1942.636051][T31069] netdevsim netdevsim0 eth2: set [0, 0] type 1 family 0 port 8472 - 0 [ 1942.664137][T31069] netdevsim netdevsim0 eth3: set [0, 0] type 1 family 0 port 8472 - 0 [ 1942.682353][T26287] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1942.762090][T31676] bond9: option packets_per_slave: invalid value (1048582) [ 1942.774681][T31676] bond9: option packets_per_slave: allowed values 0 - 65535 [ 1942.787422][T31676] bond9 (unregistering): Released all slaves [ 1943.109100][T31691] netlink: 40 bytes leftover after parsing attributes in process `syz.0.14265'. [ 1943.213066][T31660] netlink: 12 bytes leftover after parsing attributes in process `syz.2.14257'. [ 1943.230814][T31697] netlink: 8 bytes leftover after parsing attributes in process `syz.0.14265'. [ 1943.260496][T31697] netlink: 8 bytes leftover after parsing attributes in process `syz.0.14265'. [ 1943.792368][T31710] netlink: 8 bytes leftover after parsing attributes in process `syz.4.14268'. [ 1943.841902][T31069] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1943.903958][T31725] netlink: 16 bytes leftover after parsing attributes in process `syz.3.14269'. [ 1944.077480][T31728] netlink: 'syz.2.14271': attribute type 2 has an invalid length. [ 1944.218479][T31728] !: entered promiscuous mode [ 1944.235436][T31737] netlink: 36 bytes leftover after parsing attributes in process `syz.3.14272'. [ 1944.770242][T31763] geneve4: entered promiscuous mode [ 1944.947285][T26287] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1945.117253][T31790] IPv6: RTM_NEWROUTE with no NLM_F_CREATE or NLM_F_REPLACE [ 1945.124601][T31790] IPv6: NLM_F_CREATE should be set when creating new route [ 1945.131946][T31790] IPv6: NLM_F_CREATE should be set when creating new route [ 1945.139305][T31790] IPv6: NLM_F_CREATE should be set when creating new route [ 1945.334773][T31798] lo speed is unknown, defaulting to 1000 [ 1945.389766][T31798] lo speed is unknown, defaulting to 1000 [ 1945.483296][T31817] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check. [ 1946.062761][ T48] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1946.134051][ T48] netdevsim netdevsim2 netdevsim0: unset [1, 0] type 2 family 0 port 20000 - 0 [ 1946.190014][ T48] netdevsim netdevsim2 netdevsim1: unset [1, 0] type 2 family 0 port 20000 - 0 [ 1946.217147][ T48] netdevsim netdevsim2 netdevsim2: unset [1, 0] type 2 family 0 port 20000 - 0 [ 1946.226876][ T48] netdevsim netdevsim2 netdevsim3: unset [1, 0] type 2 family 0 port 20000 - 0 [ 1946.589402][T31854] 8021q: adding VLAN 0 to HW filter on device bond6 [ 1946.607147][T31857] tap0: tun_chr_ioctl cmd 1074025676 [ 1946.621383][T31857] tap0: owner set to 0 [ 1946.959766][T31866] netlink: 'syz.0.14300': attribute type 39 has an invalid length. [ 1947.162676][T31883] x_tables: duplicate underflow at hook 1 [ 1947.203077][T31069] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1947.243676][T31885] bridge_slave_1: left allmulticast mode [ 1947.252426][T31885] bridge_slave_1: left promiscuous mode [ 1947.267093][T31885] bridge0: port 2(bridge_slave_1) entered disabled state [ 1947.304518][T31885] bridge_slave_0: left promiscuous mode [ 1947.330571][T31885] bridge0: port 1(bridge_slave_0) entered disabled state [ 1947.352868][T31889] netlink: 'syz.0.14303': attribute type 10 has an invalid length. [ 1947.414077][T31889] team0 (unregistering): Port device 76žÿ removed [ 1947.596234][T31900] __nla_validate_parse: 20 callbacks suppressed [ 1947.596257][T31900] netlink: 8 bytes leftover after parsing attributes in process `syz.0.14307'. [ 1947.615288][T31902] netlink: 48 bytes leftover after parsing attributes in process `syz.2.14305'. [ 1947.697798][T31896] netlink: 'syz.2.14305': attribute type 6 has an invalid length. [ 1947.721859][T31896] netlink: 'syz.2.14305': attribute type 8 has an invalid length. [ 1947.861549][T31920] netlink: 32 bytes leftover after parsing attributes in process `syz.2.14310'. [ 1948.341287][ T48] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1949.451300][T31069] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1949.789349][T31949] lo speed is unknown, defaulting to 1000 [ 1949.797744][T31949] lo speed is unknown, defaulting to 1000 [ 1949.888185][T31869] nci: __nci_request: wait_for_completion_interruptible_timeout failed -512 [ 1949.919209][T31951] netlink: 156 bytes leftover after parsing attributes in process `syz.4.14318'. [ 1950.011806][T31952] netlink: 156 bytes leftover after parsing attributes in process `syz.4.14318'. [ 1950.144629][T31957] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 1950.230237][T31969] netlink: 12 bytes leftover after parsing attributes in process `syz.2.14319'. [ 1950.571517][T11497] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1950.681287][ C0] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1950.771482][T31988] netlink: 12 bytes leftover after parsing attributes in process `syz.3.14327'. [ 1950.865023][T31998] netlink: 3 bytes leftover after parsing attributes in process `syz.1.14330'. [ 1951.074585][T32007] netlink: 'syz.3.14332': attribute type 30 has an invalid length. [ 1951.523364][T32028] netlink: 12 bytes leftover after parsing attributes in process `syz.3.14338'. [ 1951.711524][ T48] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1951.733679][T32036] netlink: 'syz.1.14339': attribute type 1 has an invalid length. [ 1951.789622][T32036] netlink: 'syz.1.14339': attribute type 3 has an invalid length. [ 1951.813789][T32036] netlink: 224 bytes leftover after parsing attributes in process `syz.1.14339'. [ 1951.911845][T32043] pim6reg: entered allmulticast mode [ 1951.928820][T32043] pim6reg: left allmulticast mode [ 1952.861813][T31069] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1953.268180][T32092] __nla_validate_parse: 1 callbacks suppressed [ 1953.268202][T32092] netlink: 4 bytes leftover after parsing attributes in process `syz.2.14357'. [ 1953.299667][T32095] netlink: 12 bytes leftover after parsing attributes in process `syz.4.14358'. [ 1953.486424][T32103] netlink: 320 bytes leftover after parsing attributes in process `syz.2.14361'. [ 1953.506135][T32103] netlink: 24 bytes leftover after parsing attributes in process `syz.2.14361'. [ 1953.527590][T32103] netlink: 24 bytes leftover after parsing attributes in process `syz.2.14361'. [ 1953.551326][T32103] netlink: 24 bytes leftover after parsing attributes in process `syz.2.14361'. [ 1953.596167][T32103] netlink: 'syz.2.14361': attribute type 3 has an invalid length. [ 1953.615784][T32103] netlink: 'syz.2.14361': attribute type 2 has an invalid length. [ 1953.641622][T32103] netlink: 'syz.2.14361': attribute type 2 has an invalid length. [ 1953.897056][T32115] lo speed is unknown, defaulting to 1000 [ 1953.948003][T32115] lo speed is unknown, defaulting to 1000 [ 1953.982556][T26287] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1954.431691][T32136] netlink: 44 bytes leftover after parsing attributes in process `syz.2.14367'. [ 1954.556976][T32129] netlink: zone id is out of range [ 1954.568372][T32129] netlink: zone id is out of range [ 1954.582479][T32129] netlink: zone id is out of range [ 1954.593418][T32129] netlink: zone id is out of range [ 1954.604698][T32129] netlink: zone id is out of range [ 1954.640034][T32139] netlink: 20 bytes leftover after parsing attributes in process `syz.2.14368'. [ 1955.047489][T32144] bridge0: trying to set multicast startup query interval below minimum, setting to 100 (1000ms) [ 1955.127696][T32146] netlink: 8 bytes leftover after parsing attributes in process `syz.2.14371'. [ 1955.159616][T32146] netlink: 28 bytes leftover after parsing attributes in process `syz.2.14371'. [ 1955.660835][T32148] lo speed is unknown, defaulting to 1000 [ 1955.675361][T32148] lo speed is unknown, defaulting to 1000 [ 1956.194173][T26287] net_ratelimit: 13 callbacks suppressed [ 1956.194196][T26287] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1956.296823][T32173] bridge0: port 3(syz_tun) entered blocking state [ 1956.303488][T32173] bridge0: port 3(syz_tun) entered forwarding state [ 1956.316595][T32179] netlink: 'syz.1.14381': attribute type 10 has an invalid length. [ 1956.408255][T32173] A link change request failed with some changes committed already. Interface caif0 may have been left with an inconsistent configuration, please check. [ 1957.390721][T31069] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1957.421398][T32202] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 1957.480135][T32202] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 1957.518860][T32202] bond0 (unregistering): Released all slaves [ 1957.580444][T32219] tipc: Enabling of bearer rejected, failed to enable media [ 1957.594481][T32218] tipc: Enabling of bearer rejected, failed to enable media [ 1958.072518][T32245] syzkaller1: entered promiscuous mode [ 1958.081135][T32245] syzkaller1: entered allmulticast mode [ 1958.110735][T32247] netlink: 'syz.0.14403': attribute type 3 has an invalid length. [ 1958.388413][T32253] __nla_validate_parse: 8 callbacks suppressed [ 1958.388437][T32253] netlink: 47 bytes leftover after parsing attributes in process `syz.2.14404'. [ 1958.428537][T32253] netlink: 12 bytes leftover after parsing attributes in process `syz.2.14404'. [ 1958.489578][T32261] netlink: 8 bytes leftover after parsing attributes in process `syz.0.14405'. [ 1958.499087][T31075] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1958.509212][T32253] 8021q: adding VLAN 0 to HW filter on device bond9 [ 1958.525768][T32253] bond9 (unregistering): Released all slaves [ 1958.788123][T32280] netlink: 'syz.3.14413': attribute type 1 has an invalid length. [ 1958.818337][T32285] netlink: 124 bytes leftover after parsing attributes in process `syz.2.14412'. [ 1958.819621][T32280] bond8: entered promiscuous mode [ 1958.833109][T32280] 8021q: adding VLAN 0 to HW filter on device bond8 [ 1958.873460][T32280] 8021q: adding VLAN 0 to HW filter on device bond9 [ 1958.883917][T32280] bond8: (slave bond9): making interface the new active one [ 1958.891683][T32280] bond9: entered promiscuous mode [ 1958.894927][T32287] netlink: 'syz.2.14412': attribute type 10 has an invalid length. [ 1958.904784][T32280] bond8: (slave bond9): Enslaving as an active interface with an up link [ 1958.960635][T32287] vxcan1: entered promiscuous mode [ 1958.968990][T32287] team0: Device vxcan1 is of different type [ 1959.136200][T32296] lo speed is unknown, defaulting to 1000 [ 1959.146647][T32296] lo speed is unknown, defaulting to 1000 [ 1959.367569][T32304] syzkaller0: entered promiscuous mode [ 1959.382465][T32304] syzkaller0: entered allmulticast mode [ 1959.498524][T32306] netlink: 'syz.4.14419': attribute type 9 has an invalid length. [ 1959.528368][T32311] lo speed is unknown, defaulting to 1000 [ 1959.621657][T26287] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1959.646059][T32311] lo speed is unknown, defaulting to 1000 [ 1959.672652][T32318] netlink: 232 bytes leftover after parsing attributes in process `syz.0.14422'. [ 1959.783848][T32318] netlink: 28 bytes leftover after parsing attributes in process `syz.0.14422'. [ 1960.227418][T32339] netlink: 8 bytes leftover after parsing attributes in process `syz.0.14426'. [ 1960.400274][T32339] bond9: option broadcast_neighbor: invalid value (30) [ 1960.448326][T32339] bond9 (unregistering): Released all slaves [ 1960.703981][T32357] netlink: 32 bytes leftover after parsing attributes in process `syz.2.14429'. [ 1960.742223][T31069] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1960.855507][T32365] netlink: 12 bytes leftover after parsing attributes in process `syz.2.14429'. [ 1961.779898][T32391] dummy0: entered allmulticast mode [ 1961.792655][T32391] netlink: 8 bytes leftover after parsing attributes in process `syz.1.14436'. [ 1961.863285][T31069] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1962.134616][T32406] Can not set IPV6_FL_F_REFLECT if flowlabel_consistency sysctl is enable [ 1962.163698][T32406] netlink: 'syz.1.14440': attribute type 39 has an invalid length. [ 1962.446960][T32429] netlink: 'syz.1.14445': attribute type 62 has an invalid length. [ 1962.486415][T32429] netlink: 'syz.1.14445': attribute type 1 has an invalid length. [ 1962.646690][T32437] lo: entered allmulticast mode [ 1962.652472][T32437] lo: left allmulticast mode [ 1963.031742][ T48] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1963.442831][T32457] xt_hashlimit: size too large, truncated to 1048576 [ 1963.533970][T32462] __nla_validate_parse: 7 callbacks suppressed [ 1963.533993][T32462] netlink: 16 bytes leftover after parsing attributes in process `syz.1.14454'. [ 1963.578080][T32462] bond0: Unable to set down delay as MII monitoring is disabled [ 1963.587551][T32462] bond0 (unregistering): Released all slaves [ 1964.131638][ T48] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1964.277072][T32465] netlink: 312 bytes leftover after parsing attributes in process `syz.0.14456'. [ 1964.286697][T32465] netlink: 'syz.0.14456': attribute type 1 has an invalid length. [ 1964.312979][T32465] netlink: 4 bytes leftover after parsing attributes in process `syz.0.14456'. [ 1965.231516][T31069] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1965.637755][T32437] nci: __nci_request: wait_for_completion_interruptible_timeout failed -512 [ 1965.904772][T32476] IPVS: set_ctl: invalid protocol: 65535 255.147.15.137:61335 [ 1966.055410][T32491] tipc: Enabled bearer , priority 14 [ 1966.342353][ T48] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1966.368790][T32502] bond9: option packets_per_slave: mode dependency failed, not supported in mode balance-tlb(5) [ 1966.425864][T32502] bond9 (unregistering): Released all slaves [ 1966.884029][T32528] netlink: 44 bytes leftover after parsing attributes in process `syz.4.14468'. [ 1966.902804][T32528] netlink: 12 bytes leftover after parsing attributes in process `syz.4.14468'. [ 1966.912803][T32528] netlink: 8 bytes leftover after parsing attributes in process `syz.4.14468'. [ 1967.461812][ T48] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1968.602061][T11497] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1969.065580][T32512] nci: __nci_request: wait_for_completion_interruptible_timeout failed -512 [ 1969.225242][T32558] netlink: 12 bytes leftover after parsing attributes in process `syz.1.14478'. [ 1969.598790][T32589] netlink: 24 bytes leftover after parsing attributes in process `syz.4.14486'. [ 1969.609756][T32589] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check. [ 1969.732163][T31069] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1970.537719][T32640] netlink: 24 bytes leftover after parsing attributes in process `syz.4.14499'. [ 1970.574127][T32642] openvswitch: netlink: Unexpected mask (mask=1040, allowed=10048) [ 1970.583365][T32642] pim6reg1: entered promiscuous mode [ 1970.588709][T32642] pim6reg1: entered allmulticast mode [ 1970.871156][T31075] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1972.001173][T31075] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1972.646993][T32604] nci: __nci_request: wait_for_completion_interruptible_timeout failed -512 [ 1972.918438][T32659] IPv6: Can't replace route, no match found [ 1972.928065][T32653] bond0: (slave veth0_macvtap): Error: Device is in use and cannot be enslaved [ 1973.009233][T32666] IPv6: Can't replace route, no match found [ 1973.113188][T11497] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1973.376029][T32680] netlink: 8 bytes leftover after parsing attributes in process `syz.2.14507'. [ 1973.621370][T32658] bridge0: port 2(bridge_slave_1) entered disabled state [ 1973.628860][T32658] bridge0: port 1(bridge_slave_0) entered disabled state [ 1974.164686][T32658] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 1974.251330][ T48] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1974.550064][ T48] netdevsim netdevsim1 eth0: unset [0, 0] type 1 family 0 port 8472 - 0 [ 1974.568229][T32713] netlink: 8 bytes leftover after parsing attributes in process `syz.0.14508'. [ 1974.590201][ T48] netdevsim netdevsim1 eth0: unset [1, 0] type 2 family 0 port 6081 - 0 [ 1974.627193][ T48] netdevsim netdevsim1 eth1: unset [0, 0] type 1 family 0 port 8472 - 0 [ 1974.645398][T32718] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 1974.664144][ T48] netdevsim netdevsim1 eth1: unset [1, 0] type 2 family 0 port 6081 - 0 [ 1974.734004][ T48] netdevsim netdevsim1 eth2: unset [0, 0] type 1 family 0 port 8472 - 0 [ 1974.752996][ T48] netdevsim netdevsim1 eth2: unset [1, 0] type 2 family 0 port 6081 - 0 [ 1974.773802][T31075] netdevsim netdevsim1 eth3: unset [0, 0] type 1 family 0 port 8472 - 0 [ 1974.802286][T31075] netdevsim netdevsim1 eth3: unset [1, 0] type 2 family 0 port 6081 - 0 [ 1974.809995][T32725] netlink: 12 bytes leftover after parsing attributes in process `syz.2.14511'. [ 1974.957540][T32722] lo speed is unknown, defaulting to 1000 [ 1974.978057][T32722] lo speed is unknown, defaulting to 1000 [ 1975.381531][ T48] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1976.288295][ T1299] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1976.299774][ T1299] lec:lec_start_xmit: lec0:No lecd attached [ 1976.491634][ T48] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1977.591266][T26287] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1978.361339][T27566] Bluetooth: hci2: command 0x0406 tx timeout [ 1978.711175][T26287] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1979.851216][T11497] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1980.951195][T11497] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1981.310949][ C0] lec0: NETDEV WATCHDOG: CPU: 0: transmit queue 0 timed out 5010 ms [ 1981.319013][ C0] lec:lec_tx_timeout: lec0 [ 1981.323851][ C0] lec:lec_start_xmit: lec0:No lecd attached [ 1981.376983][ T5192] udevd[5192]: worker [29707] /devices/virtual/block/nbd2 is taking a long time [ 1982.051566][T26287] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1983.171215][ T48] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1984.281245][T31075] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1985.401629][T31075] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1986.340908][ C0] lec0: NETDEV WATCHDOG: CPU: 0: transmit queue 0 timed out 5020 ms [ 1986.348948][ C0] lec:lec_tx_timeout: lec0 [ 1986.501119][ T48] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1987.611554][T26287] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1988.711330][T11497] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1989.821342][T26287] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1990.921127][T26287] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1992.031286][T26287] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1993.141112][ T48] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1994.261227][T11497] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1995.371219][ T48] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1996.491199][T31075] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1997.601192][ T48] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1998.721382][T31075] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1999.821072][ T48] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 2000.921194][ T48] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 2002.021242][T26287] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 2003.121128][ T48] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 2004.221267][T26287] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 2005.341232][T31075] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 2006.461198][ T48] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 2007.561150][T11497] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 2008.661185][T31075] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 2009.761244][T31075] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 2010.871293][T31075] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 2011.971169][ T48] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 2013.081250][ T48] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 2014.181249][T26287] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 2015.281283][T11497] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 2016.391329][ T48] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 2017.501308][T11497] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 2018.611168][T31075] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 2019.721408][T31075] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 2020.821275][T31075] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 2021.931285][T31075] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 2023.051232][T26287] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 2024.151301][T26287] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 2025.251132][T26287] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 2026.351217][ T48] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 2027.451188][T11497] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 2028.561124][T31075] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 2029.701249][T26287] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 2030.821201][T26287] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 2031.941316][T11497] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 2033.041159][ T48] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 2034.151201][T26287] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 2035.281344][T11497] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 2036.401261][ T48] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 2037.511205][T11497] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 2037.724504][ T1299] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 2037.734452][ T1299] lec:lec_start_xmit: lec0:No lecd attached [ 2038.631464][T11497] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 2039.741146][T26287] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 2040.851096][T26287] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 2041.971177][T26287] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 2043.071233][T26287] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 2043.160936][ C0] lec0: NETDEV WATCHDOG: CPU: 0: transmit queue 0 timed out 5430 ms [ 2043.169097][ C0] lec:lec_tx_timeout: lec0 [ 2043.173745][ C0] lec:lec_start_xmit: lec0:No lecd attached [ 2044.191311][T31075] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 2045.301147][T11497] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 2046.401165][T31075] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 2047.511489][T31075] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 2048.180918][ C0] lec0: NETDEV WATCHDOG: CPU: 0: transmit queue 0 timed out 5010 ms [ 2048.189000][ C0] lec:lec_tx_timeout: lec0 [ 2048.631355][T31069] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 2049.731273][ T48] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 2050.851139][T31075] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 2051.961262][T31075] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 2053.091256][T31075] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 2054.201310][T11497] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 2055.301178][T26287] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 2056.411341][T31075] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 2057.511278][T11497] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 2058.621238][T11497] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 2059.731233][T31075] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 2060.831213][T26287] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 2061.401253][ T30] INFO: task udevd:29707 blocked for more than 143 seconds. [ 2061.408634][ T30] Not tainted syzkaller #0 [ 2061.413731][ T30] "echo 0 > /proc/sys/kernel/hung_task_timeout_secs" disables this message. [ 2061.422500][ T30] task:udevd state:D stack:23400 pid:29707 tgid:29707 ppid:5192 task_flags:0x400140 flags:0x00080000 [ 2061.434531][ T30] Call Trace: [ 2061.437834][ T30] [ 2061.440797][ T30] __schedule+0x17b4/0x5680 [ 2061.445525][ T30] ? __pfx_blk_mq_flush_plug_list+0x10/0x10 [ 2061.451718][ T30] ? __blk_flush_plug+0x416/0x4d0 [ 2061.456780][ T30] ? __pfx___schedule+0x10/0x10 [ 2061.461705][ T30] ? schedule+0x90/0x360 [ 2061.465973][ T30] schedule+0x164/0x360 [ 2061.470578][ T30] schedule_timeout+0x158/0x2c0 [ 2061.475483][ T30] ? __pfx_schedule_timeout+0x10/0x10 [ 2061.481106][ T30] ? __pfx_process_timeout+0x10/0x10 [ 2061.486466][ T30] ? _raw_spin_unlock_irqrestore+0x4c/0x80 [ 2061.492528][ T30] ? prepare_to_wait_event+0x436/0x480 [ 2061.498039][ T30] nbd_queue_rq+0x857/0x1100 [ 2061.502721][ T30] ? __pfx_nbd_queue_rq+0x10/0x10 [ 2061.507770][ T30] ? __lock_acquire+0x6b5/0x2cf0 [ 2061.512814][ T30] ? __pfx_autoremove_wake_function+0x10/0x10 [ 2061.518915][ T30] blk_mq_dispatch_rq_list+0xa70/0x1910 [ 2061.524556][ T30] ? sbitmap_get+0x229/0x390 [ 2061.529175][ T30] ? __pfx_blk_mq_dispatch_rq_list+0x10/0x10 [ 2061.535249][ T30] ? __blk_mq_alloc_driver_tag+0x2e7/0x6e0 [ 2061.541161][ T30] __blk_mq_sched_dispatch_requests+0xdcc/0x1600 [ 2061.547527][ T30] ? __pfx___blk_mq_sched_dispatch_requests+0x10/0x10 [ 2061.554385][ T30] ? blk_mq_hw_queue_need_run+0x13c/0x680 [ 2061.560141][ T30] ? blk_mq_run_hw_queue+0x31f/0x4f0 [ 2061.565799][ T30] blk_mq_sched_dispatch_requests+0xd7/0x190 [ 2061.571959][ T30] ? blk_mq_run_hw_queue+0x31f/0x4f0 [ 2061.577371][ T30] blk_mq_run_hw_queue+0x348/0x4f0 [ 2061.582684][ T30] blk_mq_dispatch_list+0xd16/0xe10 [ 2061.587906][ T30] ? bdev_count_inflight+0x1cf/0x210 [ 2061.593472][ T30] ? blk_mq_dispatch_list+0x1f0/0xe10 [ 2061.598898][ T30] ? __pfx_blk_mq_dispatch_list+0x10/0x10 [ 2061.605001][ T30] ? rcu_is_watching+0x15/0xb0 [ 2061.609815][ T30] blk_mq_flush_plug_list+0x48d/0x570 [ 2061.615325][ T30] ? blk_add_rq_to_plug+0x300/0x450 [ 2061.620576][ T30] ? blk_mq_submit_bio+0x1acf/0x28e0 [ 2061.626002][ T30] ? __pfx_blk_mq_flush_plug_list+0x10/0x10 [ 2061.632054][ T30] __blk_flush_plug+0x3ed/0x4d0 [ 2061.636938][ T30] ? __pfx___blk_flush_plug+0x10/0x10 [ 2061.642491][ T30] __submit_bio+0x28d/0x580 [ 2061.647056][ T30] ? __pfx___submit_bio+0x10/0x10 [ 2061.652228][ T30] ? bio_associate_blkg+0x6d/0x230 [ 2061.657400][ T30] submit_bio_noacct_nocheck+0x2f4/0xa40 [ 2061.663074][ T30] ? __pfx_submit_bio_noacct_nocheck+0x10/0x10 [ 2061.669259][ T30] block_read_full_folio+0x7b7/0x830 [ 2061.674806][ T30] ? __pfx_blkdev_get_block+0x10/0x10 [ 2061.680225][ T30] filemap_read_folio+0x137/0x3b0 [ 2061.685405][ T30] ? __pfx_blkdev_read_folio+0x10/0x10 [ 2061.691019][ T30] ? __pfx_filemap_read_folio+0x10/0x10 [ 2061.696710][ T30] ? filemap_add_folio+0x356/0x530 [ 2061.701940][ T30] do_read_cache_folio+0x358/0x590 [ 2061.707094][ T30] ? __pfx_blkdev_read_folio+0x10/0x10 [ 2061.712831][ T30] read_part_sector+0xb6/0x2b0 [ 2061.717623][ T30] adfspart_check_ICS+0xb1/0x960 [ 2061.722664][ T30] ? seq_buf_printf+0x212/0x2d0 [ 2061.727561][ T30] ? __pfx___vmalloc_node_range_noprof+0x10/0x10 [ 2061.734044][ T30] ? __pfx_adfspart_check_ICS+0x10/0x10 [ 2061.739641][ T30] bdev_disk_changed+0x817/0x1770 [ 2061.744816][ T30] ? __pfx_bdev_disk_changed+0x10/0x10 [ 2061.750315][ T30] blkdev_get_whole+0x380/0x510 [ 2061.755294][ T30] bdev_open+0x31e/0xd30 [ 2061.759593][ T30] blkdev_open+0x470/0x610 [ 2061.764114][ T30] ? __pfx_blkdev_open+0x10/0x10 [ 2061.769092][ T30] do_dentry_open+0x785/0x14e0 [ 2061.773999][ T30] vfs_open+0x3b/0x340 [ 2061.778131][ T30] ? path_openat+0x2df0/0x3860 [ 2061.783056][ T30] path_openat+0x2e08/0x3860 [ 2061.787689][ T30] ? __pfx_stack_trace_save+0x10/0x10 [ 2061.793116][ T30] ? stack_depot_save_flags+0x33/0x810 [ 2061.798607][ T30] ? __pfx_path_openat+0x10/0x10 [ 2061.803734][ T30] ? __x64_sys_openat+0x138/0x170 [ 2061.808831][ T30] ? __lock_acquire+0x6b5/0x2cf0 [ 2061.813936][ T30] do_file_open+0x23e/0x4a0 [ 2061.818509][ T30] ? __pfx_do_file_open+0x10/0x10 [ 2061.823651][ T30] ? _raw_spin_unlock+0x28/0x50 [ 2061.828532][ T30] ? alloc_fd+0x64b/0x6c0 [ 2061.832975][ T30] do_sys_openat2+0x113/0x200 [ 2061.837855][ T30] ? __pfx___x64_sys_recvmsg+0x10/0x10 [ 2061.843409][ T30] ? __pfx_do_sys_openat2+0x10/0x10 [ 2061.848658][ T30] ? rcu_is_watching+0x15/0xb0 [ 2061.853559][ T30] __x64_sys_openat+0x138/0x170 [ 2061.858456][ T30] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 2061.864556][ T30] do_syscall_64+0x15f/0xf80 [ 2061.869172][ T30] ? clear_bhb_loop+0x40/0x90 [ 2061.873899][ T30] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 2061.879812][ T30] RIP: 0033:0x7f3dfa0a7407 [ 2061.884370][ T30] RSP: 002b:00007fff367e5ea0 EFLAGS: 00000202 ORIG_RAX: 0000000000000101 [ 2061.892939][ T30] RAX: ffffffffffffffda RBX: 00007f3dfa801880 RCX: 00007f3dfa0a7407 [ 2061.901017][ T30] RDX: 00000000000a0800 RSI: 000055a0e541f430 RDI: ffffffffffffff9c [ 2061.909008][ T30] RBP: 000055a0e541e910 R08: 0000000000000000 R09: 0000000000000000 [ 2061.917028][ T30] R10: 0000000000000000 R11: 0000000000000202 R12: 000055a0e5438320 [ 2061.925069][ T30] R13: 000055a0e542c190 R14: 0000000000000000 R15: 000055a0e5438320 [ 2061.931237][ T48] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 2061.933148][ T30] [ 2061.944252][ T30] [ 2061.944252][ T30] Showing all locks held in the system: [ 2061.952041][ T30] 1 lock held by khungtaskd/30: [ 2061.956909][ T30] #0: ffffffff8e95d020 (rcu_read_lock){....}-{1:3}, at: debug_show_all_locks+0x2e/0x180 [ 2061.967068][ T30] 2 locks held by getty/5578: [ 2061.971929][ T30] #0: ffff888032a310a0 (&tty->ldisc_sem){++++}-{0:0}, at: tty_ldisc_ref_wait+0x25/0x70 [ 2061.981796][ T30] #1: ffffc9000322b2e8 (&ldata->atomic_read_lock){+.+.}-{4:4}, at: n_tty_read+0x45c/0x13a0 [ 2061.992108][ T30] 3 locks held by udevd/29707: [ 2061.996953][ T30] #0: ffff8880276b5350 (&disk->open_mutex){+.+.}-{4:4}, at: bdev_open+0xe0/0xd30 [ 2062.006443][ T30] #1: ffff888027520998 (set->srcu){.+.+}-{0:0}, at: blk_mq_run_hw_queue+0x31f/0x4f0 [ 2062.016201][ T30] #2: ffff8880277ae178 (&cmd->lock){+.+.}-{4:4}, at: nbd_queue_rq+0xc6/0x1100 [ 2062.025372][ T30] [ 2062.027735][ T30] ============================================= [ 2062.027735][ T30] [ 2062.036440][ T30] NMI backtrace for cpu 1 [ 2062.036457][ T30] CPU: 1 UID: 0 PID: 30 Comm: khungtaskd Not tainted syzkaller #0 PREEMPT(full) [ 2062.036480][ T30] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 03/18/2026 [ 2062.036491][ T30] Call Trace: [ 2062.036511][ T30] [ 2062.036520][ T30] dump_stack_lvl+0xe8/0x150 [ 2062.036556][ T30] nmi_cpu_backtrace+0x274/0x2d0 [ 2062.036589][ T30] ? __pfx_nmi_raise_cpu_backtrace+0x10/0x10 [ 2062.036620][ T30] nmi_trigger_cpumask_backtrace+0x17a/0x300 [ 2062.036655][ T30] sys_info+0x135/0x170 [ 2062.036681][ T30] watchdog+0xfaa/0x1000 [ 2062.036708][ T30] ? watchdog+0x209/0x1000 [ 2062.036739][ T30] kthread+0x388/0x470 [ 2062.036760][ T30] ? __pfx_watchdog+0x10/0x10 [ 2062.036780][ T30] ? __pfx_kthread+0x10/0x10 [ 2062.036802][ T30] ret_from_fork+0x514/0xb70 [ 2062.036834][ T30] ? __pfx_ret_from_fork+0x10/0x10 [ 2062.036862][ T30] ? __switch_to+0xc79/0x1410 [ 2062.036890][ T30] ? __pfx_kthread+0x10/0x10 [ 2062.036912][ T30] ret_from_fork_asm+0x1a/0x30 [ 2062.036960][ T30] [ 2062.036968][ T30] Sending NMI from CPU 1 to CPUs 0: [ 2062.147476][ C0] NMI backtrace for cpu 0 [ 2062.147495][ C0] CPU: 0 UID: 0 PID: 0 Comm: swapper/0 Not tainted syzkaller #0 PREEMPT(full) [ 2062.147515][ C0] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 03/18/2026 [ 2062.147526][ C0] RIP: 0010:pv_native_safe_halt+0xf/0x20 [ 2062.147552][ C0] Code: 5b 74 02 e9 c3 f6 02 00 cc cc cc 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 f3 0f 1e fa 66 90 0f 00 2d e3 4d 16 00 fb f4 cc cc cc cc cc cc cc cc cc cc cc cc cc cc cc cc 90 90 90 90 90 [ 2062.147567][ C0] RSP: 0018:ffffffff8e607dc0 EFLAGS: 00000246 [ 2062.147584][ C0] RAX: 00000000005242a3 RBX: ffffffff819a67ea RCX: 0000000080000001 [ 2062.147597][ C0] RDX: 0000000000000001 RSI: ffffffff8dfb65fa RDI: ffffffff8c27f000 [ 2062.147608][ C0] RBP: ffffffff8e607eb0 R08: ffff8880b86339db R09: 1ffff110170c673b [ 2062.147621][ C0] R10: dffffc0000000000 R11: ffffed10170c673c R12: 0000000000000000 [ 2062.147633][ C0] R13: 1ffffffff1cd25d8 R14: 0000000000000000 R15: 1ffffffff1cd25d8 [ 2062.147645][ C0] FS: 0000000000000000(0000) GS:ffff888125245000(0000) knlGS:0000000000000000 [ 2062.147658][ C0] CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033 [ 2062.147670][ C0] CR2: 000055b02d155660 CR3: 000000000e74a000 CR4: 00000000003526f0 [ 2062.147687][ C0] Call Trace: [ 2062.147694][ C0] [ 2062.147701][ C0] default_idle+0x9/0x20 [ 2062.147722][ C0] default_idle_call+0x72/0xb0 [ 2062.147746][ C0] do_idle+0x36a/0x5f0 [ 2062.147782][ C0] ? __pfx_do_idle+0x10/0x10 [ 2062.147808][ C0] cpu_startup_entry+0x43/0x60 [ 2062.147830][ C0] rest_init+0x2de/0x300 [ 2062.147853][ C0] start_kernel+0x38a/0x3e0 [ 2062.147876][ C0] x86_64_start_reservations+0x24/0x30 [ 2062.147894][ C0] x86_64_start_kernel+0x143/0x1c0 [ 2062.147909][ C0] common_startup_64+0x13e/0x147 [ 2062.147935][ C0] [ 2062.323312][ T30] Kernel panic - not syncing: hung_task: blocked tasks [ 2062.330160][ T30] CPU: 1 UID: 0 PID: 30 Comm: khungtaskd Not tainted syzkaller #0 PREEMPT(full) [ 2062.339272][ T30] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 03/18/2026 [ 2062.349322][ T30] Call Trace: [ 2062.352596][ T30] [ 2062.355523][ T30] vpanic+0x56c/0xa60 [ 2062.359506][ T30] ? __pfx___schedule+0x10/0x10 [ 2062.364353][ T30] ? __pfx_vpanic+0x10/0x10 [ 2062.368855][ T30] ? __pfx_console_unlock+0x10/0x10 [ 2062.374056][ T30] panic+0xc5/0xd0 [ 2062.377774][ T30] ? __pfx_panic+0x10/0x10 [ 2062.382197][ T30] ? preempt_schedule_thunk+0x16/0x30 [ 2062.387586][ T30] ? nmi_trigger_cpumask_backtrace+0x2bb/0x300 [ 2062.393759][ T30] watchdog+0xff4/0x1000 [ 2062.398011][ T30] ? watchdog+0x209/0x1000 [ 2062.402469][ T30] kthread+0x388/0x470 [ 2062.406561][ T30] ? __pfx_watchdog+0x10/0x10 [ 2062.411238][ T30] ? __pfx_kthread+0x10/0x10 [ 2062.415838][ T30] ret_from_fork+0x514/0xb70 [ 2062.420445][ T30] ? __pfx_ret_from_fork+0x10/0x10 [ 2062.425570][ T30] ? __switch_to+0xc79/0x1410 [ 2062.430260][ T30] ? __pfx_kthread+0x10/0x10 [ 2062.434855][ T30] ret_from_fork_asm+0x1a/0x30 [ 2062.439648][ T30] [ 2062.443029][ T30] Kernel Offset: disabled [ 2062.447348][ T30] Rebooting in 86400 seconds..